| ; |
| ; Definition file of ntoskrnl.exe |
| ; Automatic generated by gendef |
| ; written by Kai Tietz 2008-2014 |
| ; |
| LIBRARY "ntoskrnl.exe" |
| EXPORTS |
| ord_1 @1 |
| ord_2 @2 |
| ord_3 @3 |
| AlpcGetHeaderSize |
| AlpcGetMessageAttribute |
| AlpcInitializeMessageAttribute |
| BgkDisplayCharacter |
| BgkGetConsoleState |
| BgkGetCursorState |
| BgkSetCursor |
| CcAddDirtyPagesToExternalCache |
| CcCanIWrite |
| CcCoherencyFlushAndPurgeCache |
| CcCopyRead |
| CcCopyReadEx |
| CcCopyWrite |
| CcCopyWriteEx |
| CcCopyWriteWontFlush |
| CcDeductDirtyPagesFromExternalCache |
| CcDeferWrite |
| CcFastCopyRead |
| CcFastCopyWrite |
| CcFastMdlReadWait DATA |
| CcFlushCache |
| CcFlushCacheToLsn |
| CcGetDirtyPages |
| CcGetFileObjectFromBcb |
| CcGetFileObjectFromSectionPtrs |
| CcGetFileObjectFromSectionPtrsRef |
| CcGetFlushedValidData |
| CcGetLsnForFileObject |
| CcInitializeCacheMap |
| CcIsThereDirtyData |
| CcIsThereDirtyDataEx |
| CcIsThereDirtyLoggedPages |
| CcMapData |
| CcMdlRead |
| CcMdlReadComplete |
| CcMdlWriteAbort |
| CcMdlWriteComplete |
| CcPinMappedData |
| CcPinRead |
| CcPrepareMdlWrite |
| CcPreparePinWrite |
| CcPurgeCacheSection |
| CcRegisterExternalCache |
| CcRemapBcb |
| CcRepinBcb |
| CcScheduleReadAhead |
| CcScheduleReadAheadEx |
| CcSetAdditionalCacheAttributes |
| CcSetAdditionalCacheAttributesEx |
| CcSetBcbOwnerPointer |
| CcSetDirtyPageThreshold |
| CcSetDirtyPinnedData |
| CcSetFileSizes |
| CcSetFileSizesEx |
| CcSetLogHandleForFile |
| CcSetLogHandleForFileEx |
| CcSetLoggedDataThreshold |
| CcSetParallelFlushFile |
| CcSetReadAheadGranularity |
| CcSetReadAheadGranularityEx |
| CcTestControl |
| CcUninitializeCacheMap |
| CcUnmapFileOffsetFromSystemCache |
| CcUnpinData |
| CcUnpinDataForThread |
| CcUnpinRepinnedBcb |
| CcUnregisterExternalCache |
| CcWaitForCurrentLazyWriterActivity |
| CcZeroData |
| CcZeroDataOnDisk |
| CmCallbackGetKeyObjectID |
| CmCallbackGetKeyObjectIDEx |
| CmCallbackReleaseKeyObjectIDEx |
| CmGetBoundTransaction |
| CmGetCallbackVersion |
| CmKeyObjectType DATA |
| CmRegisterCallback |
| CmRegisterCallbackEx |
| CmSetCallbackObjectContext |
| CmUnRegisterCallback |
| DbgBreakPoint |
| DbgBreakPointWithStatus |
| DbgCommandString |
| DbgLoadImageSymbols |
| DbgPrint |
| DbgPrintEx |
| DbgPrintReturnControlC |
| DbgPrompt |
| DbgQueryDebugFilterState |
| DbgSetDebugFilterState |
| DbgSetDebugPrintCallback |
| DbgkLkmdRegisterCallback |
| DbgkLkmdUnregisterCallback |
| DbgkWerCaptureLiveKernelDump |
| EmClientQueryRuleState |
| EmClientRuleDeregisterNotification |
| EmClientRuleEvaluate |
| EmClientRuleRegisterNotification |
| EmProviderDeregister |
| EmProviderDeregisterEntry |
| EmProviderRegister |
| EmProviderRegisterEntry |
| EmpProviderRegister |
| EtwActivityIdControl |
| EtwEnableTrace |
| EtwEventEnabled |
| EtwProviderEnabled |
| EtwRegister |
| EtwRegisterClassicProvider |
| EtwSendTraceBuffer |
| EtwUnregister |
| EtwWrite |
| EtwWriteEndScenario |
| EtwWriteEx |
| EtwWriteStartScenario |
| EtwWriteString |
| EtwWriteTransfer |
| ExAcquireCacheAwarePushLockExclusive |
| ExAcquireCacheAwarePushLockExclusiveEx |
| ExAcquireCacheAwarePushLockSharedEx |
| ExAcquireFastMutex |
| ExAcquireFastMutexUnsafe |
| ExAcquirePushLockExclusiveEx |
| ExAcquirePushLockSharedEx |
| ExAcquireResourceExclusiveLite |
| ExAcquireResourceSharedLite |
| ExAcquireRundownProtection |
| ExAcquireRundownProtectionCacheAware |
| ExAcquireRundownProtectionCacheAwareEx |
| ExAcquireRundownProtectionEx |
| ExAcquireSharedStarveExclusive |
| ExAcquireSharedWaitForExclusive |
| ExAcquireSpinLockExclusive |
| ExAcquireSpinLockExclusiveAtDpcLevel |
| ExAcquireSpinLockShared |
| ExAcquireSpinLockSharedAtDpcLevel |
| ExAllocateCacheAwarePushLock |
| ExAllocateCacheAwareRundownProtection |
| ExAllocatePool |
| ExAllocatePoolWithQuota |
| ExAllocatePoolWithQuotaTag |
| ExAllocatePoolWithTag |
| ExAllocatePoolWithTagPriority |
| ExAllocateTimer |
| ExBlockOnAddressPushLock |
| ExBlockPushLock |
| ExCancelTimer |
| ExCompositionObjectType DATA |
| ExConvertExclusiveToSharedLite |
| ExCreateCallback |
| ExDeleteLookasideListEx |
| ExDeleteNPagedLookasideList |
| ExDeletePagedLookasideList |
| ExDeleteResourceLite |
| ExDeleteTimer |
| ExDesktopObjectType DATA |
| ExDisableResourceBoostLite |
| ExEnterCriticalRegionAndAcquireFastMutexUnsafe |
| ExEnterCriticalRegionAndAcquireResourceExclusive |
| ExEnterCriticalRegionAndAcquireResourceShared |
| ExEnterCriticalRegionAndAcquireSharedWaitForExclusive |
| ExEnterPriorityRegionAndAcquireResourceExclusive |
| ExEnterPriorityRegionAndAcquireResourceShared |
| ExEnumHandleTable |
| ExEventObjectType DATA |
| ExExtendZone |
| ExFetchLicenseData |
| ExFlushLookasideListEx |
| ExFreeCacheAwarePushLock |
| ExFreeCacheAwareRundownProtection |
| ExFreePool |
| ExFreePoolWithTag |
| ExGetCurrentProcessorCounts |
| ExGetCurrentProcessorCpuUsage |
| ExGetExclusiveWaiterCount |
| ExGetFirmwareEnvironmentVariable |
| ExGetLicenseTamperState |
| ExGetPreviousMode |
| ExGetSharedWaiterCount |
| ExInitializeLookasideListEx |
| ExInitializeNPagedLookasideList |
| ExInitializePagedLookasideList |
| ExInitializePushLock |
| ExInitializeResourceLite |
| ExInitializeRundownProtection |
| ExInitializeRundownProtectionCacheAware |
| ExInitializeZone |
| ExInterlockedAddLargeInteger |
| ExInterlockedAddUlong |
| ExInterlockedExtendZone |
| ExInterlockedInsertHeadList |
| ExInterlockedInsertTailList |
| ExInterlockedPopEntryList |
| ExInterlockedPushEntryList |
| ExInterlockedRemoveHeadList |
| ExIsProcessorFeaturePresent |
| ExIsResourceAcquiredExclusiveLite |
| ExIsResourceAcquiredSharedLite |
| ExLocalTimeToSystemTime |
| ExNotifyBootDeviceRemoval |
| ExNotifyCallback |
| ExQueryDepthSList |
| ExQueryFastCacheAppOrigin |
| ExQueryFastCacheDevLicense |
| ExQueryPoolBlockSize |
| ExQueryTimerResolution |
| ExQueryWnfStateData |
| ExQueueWorkItem |
| ExRaiseAccessViolation |
| ExRaiseDatatypeMisalignment |
| ExRaiseException |
| ExRaiseHardError |
| ExRaiseStatus |
| ExReInitializeRundownProtection |
| ExReInitializeRundownProtectionCacheAware |
| ExRealTimeIsUniversal |
| ExRegisterBootDevice |
| ExRegisterCallback |
| ExRegisterExtension |
| ExReinitializeResourceLite |
| ExReleaseCacheAwarePushLockExclusive |
| ExReleaseCacheAwarePushLockExclusiveEx |
| ExReleaseCacheAwarePushLockSharedEx |
| ExReleaseFastMutex |
| ExReleaseFastMutexUnsafe |
| ExReleaseFastMutexUnsafeAndLeaveCriticalRegion |
| ExReleasePushLockEx |
| ExReleasePushLockExclusiveEx |
| ExReleasePushLockSharedEx |
| ExReleaseResourceAndLeaveCriticalRegion |
| ExReleaseResourceAndLeavePriorityRegion |
| ExReleaseResourceForThreadLite |
| ExReleaseResourceLite |
| ExReleaseRundownProtection |
| ExReleaseRundownProtectionCacheAware |
| ExReleaseRundownProtectionCacheAwareEx |
| ExReleaseRundownProtectionEx |
| ExReleaseSpinLockExclusive |
| ExReleaseSpinLockExclusiveFromDpcLevel |
| ExReleaseSpinLockShared |
| ExReleaseSpinLockSharedFromDpcLevel |
| ExRundownCompleted |
| ExRundownCompletedCacheAware |
| ExSemaphoreObjectType DATA |
| ExSetFirmwareEnvironmentVariable |
| ExSetLicenseTamperState |
| ExSetResourceOwnerPointer |
| ExSetResourceOwnerPointerEx |
| ExSetTimer |
| ExSetTimerResolution |
| ExSizeOfRundownProtectionCacheAware |
| ExSubscribeWnfStateChange |
| ExSystemExceptionFilter |
| ExSystemTimeToLocalTime |
| ExTimedWaitForUnblockPushLock |
| ExTryAcquirePushLockExclusiveEx |
| ExTryAcquirePushLockSharedEx |
| ExTryConvertPushLockSharedToExclusiveEx |
| ExTryConvertSharedSpinLockExclusive |
| ExTryQueueWorkItem |
| ExTryToAcquireFastMutex |
| ExTryToAcquireResourceExclusiveLite |
| ExUnblockOnAddressPushLockEx |
| ExUnblockPushLockEx |
| ExUnregisterCallback |
| ExUnregisterExtension |
| ExUnsubscribeWnfStateChange |
| ExUuidCreate |
| ExVerifySuite |
| ExWaitForRundownProtectionRelease |
| ExWaitForRundownProtectionReleaseCacheAware |
| ExWaitForUnblockPushLock |
| ExWindowStationObjectType DATA |
| ExfAcquirePushLockExclusive |
| ExfAcquirePushLockShared |
| ExfReleasePushLock |
| ExfReleasePushLockExclusive |
| ExfReleasePushLockShared |
| ExfTryAcquirePushLockShared |
| ExfTryToWakePushLock |
| ExfUnblockPushLock |
| ExpInterlockedFlushSList |
| ExpInterlockedPopEntrySList |
| ExpInterlockedPushEntrySList |
| FirstEntrySList |
| FsRtlAcknowledgeEcp |
| FsRtlAcquireEofLock |
| FsRtlAcquireFileExclusive |
| FsRtlAcquireHeaderMutex |
| FsRtlAddBaseMcbEntry |
| FsRtlAddBaseMcbEntryEx |
| FsRtlAddLargeMcbEntry |
| FsRtlAddMcbEntry |
| FsRtlAddToTunnelCache |
| FsRtlAllocateExtraCreateParameter |
| FsRtlAllocateExtraCreateParameterFromLookasideList |
| FsRtlAllocateExtraCreateParameterList |
| FsRtlAllocateFileLock |
| FsRtlAllocatePool |
| FsRtlAllocatePoolWithQuota |
| FsRtlAllocatePoolWithQuotaTag |
| FsRtlAllocatePoolWithTag |
| FsRtlAllocateResource |
| FsRtlAreNamesEqual |
| FsRtlAreThereCurrentOrInProgressFileLocks |
| FsRtlAreThereWaitingFileLocks |
| FsRtlAreVolumeStartupApplicationsComplete |
| FsRtlBalanceReads |
| FsRtlCancellableWaitForMultipleObjects |
| FsRtlCancellableWaitForSingleObject |
| FsRtlChangeBackingFileObject |
| FsRtlCheckLockForOplockRequest |
| FsRtlCheckLockForReadAccess |
| FsRtlCheckLockForWriteAccess |
| FsRtlCheckOplock |
| FsRtlCheckOplockEx |
| FsRtlCheckUpperOplock |
| FsRtlCopyRead |
| FsRtlCopyWrite |
| FsRtlCreateSectionForDataScan |
| FsRtlCurrentBatchOplock |
| FsRtlCurrentOplock |
| FsRtlCurrentOplockH |
| FsRtlDeleteExtraCreateParameterLookasideList |
| FsRtlDeleteKeyFromTunnelCache |
| FsRtlDeleteTunnelCache |
| FsRtlDeregisterUncProvider |
| FsRtlDismountComplete |
| FsRtlDissectDbcs |
| FsRtlDissectName |
| FsRtlDoesDbcsContainWildCards |
| FsRtlDoesNameContainWildCards |
| FsRtlFastCheckLockForRead |
| FsRtlFastCheckLockForWrite |
| FsRtlFastUnlockAll |
| FsRtlFastUnlockAllByKey |
| FsRtlFastUnlockSingle |
| FsRtlFindExtraCreateParameter |
| FsRtlFindInTunnelCache |
| FsRtlFreeExtraCreateParameter |
| FsRtlFreeExtraCreateParameterList |
| FsRtlFreeFileLock |
| FsRtlGetEcpListFromIrp |
| FsRtlGetFileNameInformation |
| FsRtlGetFileSize |
| FsRtlGetIoAtEof |
| FsRtlGetNextBaseMcbEntry |
| FsRtlGetNextExtraCreateParameter |
| FsRtlGetNextFileLock |
| FsRtlGetNextLargeMcbEntry |
| FsRtlGetNextMcbEntry |
| FsRtlGetSectorSizeInformation |
| FsRtlGetSupportedFeatures |
| FsRtlGetVirtualDiskNestingLevel |
| FsRtlHeatInit |
| FsRtlHeatLogIo |
| FsRtlHeatLogTierMove |
| FsRtlHeatUninit |
| FsRtlIncrementCcFastMdlReadWait |
| FsRtlIncrementCcFastReadNoWait |
| FsRtlIncrementCcFastReadNotPossible |
| FsRtlIncrementCcFastReadResourceMiss |
| FsRtlIncrementCcFastReadWait |
| FsRtlInitExtraCreateParameterLookasideList |
| FsRtlInitializeBaseMcb |
| FsRtlInitializeBaseMcbEx |
| FsRtlInitializeEofLock |
| FsRtlInitializeExtraCreateParameter |
| FsRtlInitializeExtraCreateParameterList |
| FsRtlInitializeFileLock |
| FsRtlInitializeLargeMcb |
| FsRtlInitializeMcb |
| FsRtlInitializeOplock |
| FsRtlInitializeTunnelCache |
| FsRtlInsertExtraCreateParameter |
| FsRtlInsertPerFileContext |
| FsRtlInsertPerFileObjectContext |
| FsRtlInsertPerStreamContext |
| FsRtlInsertReservedPerFileContext |
| FsRtlInsertReservedPerStreamContext |
| FsRtlIsDbcsInExpression |
| FsRtlIsEcpAcknowledged |
| FsRtlIsEcpFromUserMode |
| FsRtlIsFatDbcsLegal |
| FsRtlIsHpfsDbcsLegal |
| FsRtlIsNameInExpression |
| FsRtlIsNtstatusExpected |
| FsRtlIsPagingFile |
| FsRtlIsSystemPagingFile |
| FsRtlIsTotalDeviceFailure |
| FsRtlIssueDeviceIoControl |
| FsRtlKernelFsControlFile |
| FsRtlLegalAnsiCharacterArray DATA |
| FsRtlLogCcFlushError |
| FsRtlLookupBaseMcbEntry |
| FsRtlLookupLargeMcbEntry |
| FsRtlLookupLastBaseMcbEntry |
| FsRtlLookupLastBaseMcbEntryAndIndex |
| FsRtlLookupLastLargeMcbEntry |
| FsRtlLookupLastLargeMcbEntryAndIndex |
| FsRtlLookupLastMcbEntry |
| FsRtlLookupMcbEntry |
| FsRtlLookupPerFileContext |
| FsRtlLookupPerFileObjectContext |
| FsRtlLookupPerStreamContextInternal |
| FsRtlLookupReservedPerFileContext |
| FsRtlLookupReservedPerStreamContext |
| FsRtlMdlRead |
| FsRtlMdlReadComplete |
| FsRtlMdlReadCompleteDev |
| FsRtlMdlReadDev |
| FsRtlMdlReadEx |
| FsRtlMdlWriteComplete |
| FsRtlMdlWriteCompleteDev |
| FsRtlMupGetProviderIdFromName |
| FsRtlMupGetProviderInfoFromFileObject |
| FsRtlNormalizeNtstatus |
| FsRtlNotifyChangeDirectory |
| FsRtlNotifyCleanup |
| FsRtlNotifyCleanupAll |
| FsRtlNotifyFilterChangeDirectory |
| FsRtlNotifyFilterReportChange |
| FsRtlNotifyFullChangeDirectory |
| FsRtlNotifyFullReportChange |
| FsRtlNotifyInitializeSync |
| FsRtlNotifyReportChange |
| FsRtlNotifyUninitializeSync |
| FsRtlNotifyVolumeEvent |
| FsRtlNotifyVolumeEventEx |
| FsRtlNumberOfRunsInBaseMcb |
| FsRtlNumberOfRunsInLargeMcb |
| FsRtlNumberOfRunsInMcb |
| FsRtlOplockBreakH |
| FsRtlOplockBreakToNone |
| FsRtlOplockBreakToNoneEx |
| FsRtlOplockFsctrl |
| FsRtlOplockFsctrlEx |
| FsRtlOplockIsFastIoPossible |
| FsRtlOplockIsSharedRequest |
| FsRtlOplockKeysEqual |
| FsRtlPostPagingFileStackOverflow |
| FsRtlPostStackOverflow |
| FsRtlPrepareMdlWrite |
| FsRtlPrepareMdlWriteDev |
| FsRtlPrepareMdlWriteEx |
| FsRtlPrepareToReuseEcp |
| FsRtlPrivateLock |
| FsRtlProcessFileLock |
| FsRtlQueryCachedVdl |
| FsRtlQueryKernelEaFile |
| FsRtlQueryMaximumVirtualDiskNestingLevel |
| FsRtlRegisterFileSystemFilterCallbacks |
| FsRtlRegisterFltMgrCalls |
| FsRtlRegisterMupCalls |
| FsRtlRegisterUncProvider |
| FsRtlRegisterUncProviderEx |
| FsRtlReleaseEofLock |
| FsRtlReleaseFile |
| FsRtlReleaseFileNameInformation |
| FsRtlReleaseHeaderMutex |
| FsRtlRemoveBaseMcbEntry |
| FsRtlRemoveDotsFromPath |
| FsRtlRemoveExtraCreateParameter |
| FsRtlRemoveLargeMcbEntry |
| FsRtlRemoveMcbEntry |
| FsRtlRemovePerFileContext |
| FsRtlRemovePerFileObjectContext |
| FsRtlRemovePerStreamContext |
| FsRtlRemoveReservedPerFileContext |
| FsRtlRemoveReservedPerStreamContext |
| FsRtlResetBaseMcb |
| FsRtlResetLargeMcb |
| FsRtlSendModernAppTermination |
| FsRtlSetEcpListIntoIrp |
| FsRtlSetKernelEaFile |
| FsRtlSplitBaseMcb |
| FsRtlSplitLargeMcb |
| FsRtlSyncVolumes |
| FsRtlTeardownPerFileContexts |
| FsRtlTeardownPerStreamContexts |
| FsRtlTruncateBaseMcb |
| FsRtlTruncateLargeMcb |
| FsRtlTruncateMcb |
| FsRtlTryToAcquireHeaderMutex |
| FsRtlUninitializeBaseMcb |
| FsRtlUninitializeFileLock |
| FsRtlUninitializeLargeMcb |
| FsRtlUninitializeMcb |
| FsRtlUninitializeOplock |
| FsRtlUpdateDiskCounters |
| FsRtlUpperOplockFsctrl |
| FsRtlValidateReparsePointBuffer |
| HalDispatchTable DATA |
| HalExamineMBR |
| HalFlushIoBuffers |
| HalPrivateDispatchTable DATA |
| HeadlessDispatch |
| HvlGetLpIndexFromApicId |
| HvlQueryActiveHypervisorProcessorCount |
| HvlQueryActiveProcessors |
| HvlQueryConnection |
| HvlQueryHypervisorProcessorNodeNumber |
| HvlQueryNumaDistance |
| HvlQueryProcessorTopology |
| HvlQueryProcessorTopologyCount |
| HvlQueryProcessorTopologyHighestId |
| HvlRegisterInterruptCallback |
| HvlRegisterWheaErrorNotification |
| HvlUnregisterInterruptCallback |
| HvlUnregisterWheaErrorNotification |
| InbvAcquireDisplayOwnership |
| InbvCheckDisplayOwnership |
| InbvDisplayString |
| InbvEnableBootDriver |
| InbvEnableDisplayString |
| InbvInstallDisplayStringFilter |
| InbvIsBootDriverInstalled |
| InbvNotifyDisplayOwnershipChange |
| InbvNotifyDisplayOwnershipLost |
| InbvResetDisplay |
| InbvSetScrollRegion |
| InbvSetTextColor |
| InbvSolidColorFill |
| InitSafeBootMode DATA |
| InitializeSListHead |
| InterlockedPushListSList |
| IoAcquireCancelSpinLock |
| IoAcquireRemoveLockEx |
| IoAcquireVpbSpinLock |
| IoAdapterObjectType DATA |
| IoAdjustStackSizeForRedirection |
| IoAllocateAdapterChannel |
| IoAllocateController |
| IoAllocateDriverObjectExtension |
| IoAllocateErrorLogEntry |
| IoAllocateIrp |
| IoAllocateMdl |
| IoAllocateMiniCompletionPacket |
| IoAllocateSfioStreamIdentifier |
| IoAllocateWorkItem |
| IoApplyPriorityInfoThread |
| IoAssignResources |
| IoAttachDevice |
| IoAttachDeviceByPointer |
| IoAttachDeviceToDeviceStack |
| IoAttachDeviceToDeviceStackSafe |
| IoBoostThreadIo |
| IoBuildAsynchronousFsdRequest |
| IoBuildDeviceIoControlRequest |
| IoBuildPartialMdl |
| IoBuildSynchronousFsdRequest |
| IoCallDriver |
| IoCancelFileOpen |
| IoCancelIrp |
| IoCheckDesiredAccess |
| IoCheckEaBufferValidity |
| IoCheckFunctionAccess |
| IoCheckQuerySetFileInformation |
| IoCheckQuerySetVolumeInformation |
| IoCheckQuotaBufferValidity |
| IoCheckShareAccess |
| IoCheckShareAccessEx |
| IoClearActivityIdThread |
| IoClearDependency |
| IoClearIrpExtraCreateParameter |
| IoCompleteRequest |
| IoCompletionObjectType DATA |
| IoConnectInterrupt |
| IoConnectInterruptEx |
| IoConvertFileHandleToKernelHandle |
| IoCopyDeviceObjectHint |
| IoCreateArcName |
| IoCreateController |
| IoCreateDevice |
| IoCreateDisk |
| IoCreateDriver |
| IoCreateFile |
| IoCreateFileEx |
| IoCreateFileSpecifyDeviceObjectHint |
| IoCreateNotificationEvent |
| IoCreateStreamFileObject |
| IoCreateStreamFileObjectEx |
| IoCreateStreamFileObjectEx2 |
| IoCreateStreamFileObjectLite |
| IoCreateSymbolicLink |
| IoCreateSynchronizationEvent |
| IoCreateSystemThread |
| IoCreateUnprotectedSymbolicLink |
| IoCsqInitialize |
| IoCsqInitializeEx |
| IoCsqInsertIrp |
| IoCsqInsertIrpEx |
| IoCsqRemoveIrp |
| IoCsqRemoveNextIrp |
| IoDecrementKeepAliveCount |
| IoDeleteAllDependencyRelations |
| IoDeleteController |
| IoDeleteDevice |
| IoDeleteDriver |
| IoDeleteSymbolicLink |
| IoDetachDevice |
| IoDeviceHandlerObjectSize DATA |
| IoDeviceHandlerObjectType DATA |
| IoDeviceObjectType DATA |
| IoDisconnectInterrupt |
| IoDisconnectInterruptEx |
| IoDriverObjectType DATA |
| IoDuplicateDependency |
| IoEnqueueIrp |
| IoEnumerateDeviceObjectList |
| IoEnumerateRegisteredFiltersList |
| IoFastQueryNetworkAttributes |
| IoFileObjectType DATA |
| IoForwardAndCatchIrp |
| IoForwardIrpSynchronously |
| IoFreeController |
| IoFreeErrorLogEntry |
| IoFreeIrp |
| IoFreeMdl |
| IoFreeMiniCompletionPacket |
| IoFreeSfioStreamIdentifier |
| IoFreeWorkItem |
| IoGetActivityIdIrp |
| IoGetActivityIdThread |
| IoGetAffinityInterrupt |
| IoGetAttachedDevice |
| IoGetAttachedDeviceReference |
| IoGetBaseFileSystemDeviceObject |
| IoGetBootDiskInformation |
| IoGetBootDiskInformationLite |
| IoGetConfigurationInformation |
| IoGetContainerInformation |
| IoGetCurrentProcess |
| IoGetDeviceAttachmentBaseRef |
| IoGetDeviceInterfaceAlias |
| IoGetDeviceInterfacePropertyData |
| IoGetDeviceInterfaces |
| IoGetDeviceNumaNode |
| IoGetDeviceObjectPointer |
| IoGetDeviceProperty |
| IoGetDevicePropertyData |
| IoGetDeviceToVerify |
| IoGetDiskDeviceObject |
| IoGetDmaAdapter |
| IoGetDriverObjectExtension |
| IoGetFileObjectGenericMapping |
| IoGetGenericIrpExtension |
| IoGetInitialStack |
| IoGetInitiatorProcess |
| IoGetIoPriorityHint |
| IoGetIrpExtraCreateParameter |
| IoGetLowerDeviceObject |
| IoGetOplockKeyContext |
| IoGetOplockKeyContextEx |
| IoGetPagingIoPriority |
| IoGetRelatedDeviceObject |
| IoGetRequestorProcess |
| IoGetRequestorProcessId |
| IoGetRequestorSessionId |
| IoGetSfioStreamIdentifier |
| IoGetStackLimits |
| IoGetSymlinkSupportInformation |
| IoGetTopLevelIrp |
| IoGetTransactionParameterBlock |
| IoIncrementKeepAliveCount |
| IoInitializeIrp |
| IoInitializeMiniCompletionPacket |
| IoInitializeRemoveLockEx |
| IoInitializeWorkItem |
| IoInvalidateDeviceRelations |
| IoInvalidateDeviceState |
| IoIsActivityTracingEnabled |
| IoIsFileObjectIgnoringSharing |
| IoIsFileOriginRemote |
| IoIsOperationSynchronous |
| IoIsSystemThread |
| IoIsValidIrpStatus |
| IoIsWdmVersionAvailable |
| IoMakeAssociatedIrp |
| IoOpenDeviceInterfaceRegistryKey |
| IoOpenDeviceRegistryKey |
| IoPageRead |
| IoPropagateActivityIdToThread |
| IoPropagateIrpExtension |
| IoQueryDeviceDescription |
| IoQueryFileDosDeviceName |
| IoQueryFileInformation |
| IoQueryFullDriverPath |
| IoQueryVolumeInformation |
| IoQueueThreadIrp |
| IoQueueWorkItem |
| IoQueueWorkItemEx |
| IoQueueWorkItemToNode |
| IoRaiseHardError |
| IoRaiseInformationalHardError |
| IoReadDiskSignature |
| IoReadOperationCount DATA |
| IoReadPartitionTable |
| IoReadPartitionTableEx |
| IoReadTransferCount DATA |
| IoRegisterBootDriverCallback |
| IoRegisterBootDriverReinitialization |
| IoRegisterContainerNotification |
| IoRegisterDeviceInterface |
| IoRegisterDriverReinitialization |
| IoRegisterFileSystem |
| IoRegisterFsRegistrationChange |
| IoRegisterFsRegistrationChangeMountAware |
| IoRegisterIoTracking |
| IoRegisterLastChanceShutdownNotification |
| IoRegisterPlugPlayNotification |
| IoRegisterPriorityCallback |
| IoRegisterShutdownNotification |
| IoReleaseCancelSpinLock |
| IoReleaseRemoveLockAndWaitEx |
| IoReleaseRemoveLockEx |
| IoReleaseVpbSpinLock |
| IoRemoveShareAccess |
| IoReplaceFileObjectName |
| IoReplacePartitionUnit |
| IoReportDetectedDevice |
| IoReportHalResourceUsage |
| IoReportInterruptActive |
| IoReportInterruptInactive |
| IoReportResourceForDetection |
| IoReportResourceUsage |
| IoReportRootDevice |
| IoReportTargetDeviceChange |
| IoReportTargetDeviceChangeAsynchronous |
| IoRequestDeviceEject |
| IoRequestDeviceEjectEx |
| IoReserveDependency |
| IoResolveDependency |
| IoRetrievePriorityInfo |
| IoReuseIrp |
| IoSetActivityIdIrp |
| IoSetActivityIdThread |
| IoSetCompletionRoutineEx |
| IoSetDependency |
| IoSetDeviceInterfacePropertyData |
| IoSetDeviceInterfaceState |
| IoSetDevicePropertyData |
| IoSetDeviceToVerify |
| IoSetFileObjectIgnoreSharing |
| IoSetFileOrigin |
| IoSetGenericIrpExtension |
| IoSetHardErrorOrVerifyDevice |
| IoSetInformation |
| IoSetIoCompletion |
| IoSetIoCompletionEx |
| IoSetIoPriorityHint |
| IoSetIoPriorityHintIntoFileObject |
| IoSetIoPriorityHintIntoThread |
| IoSetIrpExtraCreateParameter |
| IoSetMasterIrpStatus |
| IoSetPartitionInformation |
| IoSetPartitionInformationEx |
| IoSetShareAccess |
| IoSetShareAccessEx |
| IoSetStartIoAttributes |
| IoSetSystemPartition |
| IoSetThreadHardErrorMode |
| IoSetTopLevelIrp |
| IoSizeofGenericIrpExtension |
| IoSizeofWorkItem |
| IoStartNextPacket |
| IoStartNextPacketByKey |
| IoStartPacket |
| IoStatisticsLock DATA |
| IoSynchronousCallDriver |
| IoSynchronousInvalidateDeviceRelations |
| IoSynchronousPageWrite |
| IoTestDependency |
| IoThreadToProcess |
| IoTransferActivityId |
| IoTranslateBusAddress |
| IoTryQueueWorkItem |
| IoUninitializeWorkItem |
| IoUnregisterBootDriverCallback |
| IoUnregisterContainerNotification |
| IoUnregisterFileSystem |
| IoUnregisterFsRegistrationChange |
| IoUnregisterIoTracking |
| IoUnregisterPlugPlayNotification |
| IoUnregisterPlugPlayNotificationEx |
| IoUnregisterPriorityCallback |
| IoUnregisterShutdownNotification |
| IoUpdateShareAccess |
| IoValidateDeviceIoControlAccess |
| IoVerifyPartitionTable |
| IoVerifyVolume |
| IoVolumeDeviceToDosName |
| IoVolumeDeviceToGuid |
| IoVolumeDeviceToGuidPath |
| IoWMIAllocateInstanceIds |
| IoWMIDeviceObjectToInstanceName |
| IoWMIExecuteMethod |
| IoWMIHandleToInstanceName |
| IoWMIOpenBlock |
| IoWMIQueryAllData |
| IoWMIQueryAllDataMultiple |
| IoWMIQuerySingleInstance |
| IoWMIQuerySingleInstanceMultiple |
| IoWMIRegistrationControl |
| IoWMISetNotificationCallback |
| IoWMISetSingleInstance |
| IoWMISetSingleItem |
| IoWMISuggestInstanceName |
| IoWMIWriteEvent |
| IoWithinStackLimits |
| IoWriteErrorLogEntry |
| IoWriteOperationCount DATA |
| IoWritePartitionTable |
| IoWritePartitionTableEx |
| IoWriteTransferCount DATA |
| IofCallDriver |
| IofCompleteRequest |
| KdAcquireDebuggerLock |
| KdChangeOption |
| KdDebuggerEnabled DATA |
| KdDebuggerNotPresent DATA |
| KdDeregisterPowerHandler |
| KdDisableDebugger |
| KdEnableDebugger |
| KdEnteredDebugger DATA |
| KdLogDbgPrint |
| KdPollBreakIn |
| KdPowerTransition |
| KdRefreshDebuggerNotPresent |
| KdRegisterPowerHandler |
| KdReleaseDebuggerLock |
| KdSystemDebugControl |
| KeAcquireGuardedMutex |
| KeAcquireGuardedMutexUnsafe |
| KeAcquireInStackQueuedSpinLock |
| KeAcquireInStackQueuedSpinLockAtDpcLevel |
| KeAcquireInStackQueuedSpinLockForDpc |
| KeAcquireInterruptSpinLock |
| KeAcquireQueuedSpinLock |
| KeAcquireSpinLockAtDpcLevel |
| KeAcquireSpinLockForDpc |
| KeAcquireSpinLockRaiseToDpc |
| KeAcquireSpinLockRaiseToSynch |
| KeAddGroupAffinityEx |
| KeAddProcessorAffinityEx |
| KeAddProcessorGroupAffinity |
| KeAddSystemServiceTable |
| KeAlertThread |
| KeAllocateCalloutStack |
| KeAllocateCalloutStackEx |
| KeAndAffinityEx |
| KeAndGroupAffinityEx |
| KeAreAllApcsDisabled |
| KeAreApcsDisabled |
| KeAttachProcess |
| KeBugCheck |
| KeBugCheckEx |
| KeCancelTimer |
| KeCapturePersistentThreadState |
| KeCheckProcessorAffinityEx |
| KeCheckProcessorGroupAffinity |
| KeClearEvent |
| KeClockInterruptNotify |
| KeClockTimerPowerChange |
| KeComplementAffinityEx |
| KeCopyAffinityEx |
| KeCountSetBitsAffinityEx |
| KeCountSetBitsGroupAffinity |
| KeDelayExecutionThread |
| KeDeregisterBugCheckCallback |
| KeDeregisterBugCheckReasonCallback |
| KeDeregisterNmiCallback |
| KeDeregisterProcessorChangeCallback |
| KeDetachProcess |
| KeDispatchSecondaryInterrupt |
| KeEnterCriticalRegion |
| KeEnterGuardedRegion |
| KeEnterKernelDebugger |
| KeEnumerateNextProcessor |
| KeExpandKernelStackAndCallout |
| KeExpandKernelStackAndCalloutEx |
| KeFindConfigurationEntry |
| KeFindConfigurationNextEntry |
| KeFindFirstSetLeftAffinityEx |
| KeFindFirstSetLeftGroupAffinity |
| KeFindFirstSetRightAffinityEx |
| KeFindFirstSetRightGroupAffinity |
| KeFirstGroupAffinityEx |
| KeFlushEntireTb |
| KeFlushIoBuffers |
| KeFlushIoRectangle |
| KeFlushQueuedDpcs |
| KeFreeCalloutStack |
| KeGenericCallDpc |
| KeGetClockOwner |
| KeGetClockTimerResolution |
| KeGetCurrentNodeNumber |
| KeGetCurrentProcessorNumberEx |
| KeGetCurrentThread |
| KeGetNextClockTickDuration |
| KeGetProcessorIndexFromNumber |
| KeGetProcessorNumberFromIndex |
| KeGetRecommendedSharedDataAlignment |
| KeHwPolicyLocateResource |
| KeInitializeAffinityEx |
| KeInitializeApc |
| KeInitializeCrashDumpHeader |
| KeInitializeDeviceQueue |
| KeInitializeDpc |
| KeInitializeEnumerationContext |
| KeInitializeEnumerationContextFromGroup |
| KeInitializeEvent |
| KeInitializeGuardedMutex |
| KeInitializeInterrupt |
| KeInitializeMutant |
| KeInitializeMutex |
| KeInitializeQueue |
| KeInitializeSecondaryInterruptServices |
| KeInitializeSemaphore |
| KeInitializeSpinLock |
| KeInitializeThreadedDpc |
| KeInitializeTimer |
| KeInitializeTimerEx |
| KeInsertByKeyDeviceQueue |
| KeInsertDeviceQueue |
| KeInsertHeadQueue |
| KeInsertQueue |
| KeInsertQueueApc |
| KeInsertQueueDpc |
| KeInterlockedClearProcessorAffinityEx |
| KeInterlockedSetProcessorAffinityEx |
| KeInvalidateAllCaches |
| KeInvalidateRangeAllCaches |
| KeIpiGenericCall |
| KeIsAttachedProcess |
| KeIsEmptyAffinityEx |
| KeIsEqualAffinityEx |
| KeIsExecutingDpc |
| KeIsSingleGroupAffinityEx |
| KeIsSubsetAffinityEx |
| KeIsWaitListEmpty |
| KeLeaveCriticalRegion |
| KeLeaveGuardedRegion |
| KeLoaderBlock DATA |
| KeNumberProcessors DATA |
| KeOrAffinityEx |
| KeProcessorGroupAffinity |
| KeProfileInterruptWithSource |
| KePulseEvent |
| KeQueryActiveGroupCount |
| KeQueryActiveProcessorAffinity |
| KeQueryActiveProcessorCount |
| KeQueryActiveProcessorCountEx |
| KeQueryActiveProcessors |
| KeQueryDpcWatchdogInformation |
| KeQueryEffectivePriorityThread |
| KeQueryGroupAffinity |
| KeQueryGroupAffinityEx |
| KeQueryHardwareCounterConfiguration |
| KeQueryHighestNodeNumber |
| KeQueryInterruptTime |
| KeQueryInterruptTimePrecise |
| KeQueryLogicalProcessorRelationship |
| KeQueryMaximumGroupCount |
| KeQueryMaximumProcessorCount |
| KeQueryMaximumProcessorCountEx |
| KeQueryNodeActiveAffinity |
| KeQueryNodeMaximumProcessorCount |
| KeQueryPrcbAddress |
| KeQueryPriorityThread |
| KeQueryRuntimeThread |
| KeQuerySystemTime |
| KeQuerySystemTimePrecise |
| KeQueryTickCount |
| KeQueryTimeIncrement |
| KeQueryTotalCycleTimeThread |
| KeQueryUnbiasedInterruptTime |
| KeRaiseUserException |
| KeReadStateEvent |
| KeReadStateMutant |
| KeReadStateMutex |
| KeReadStateQueue |
| KeReadStateSemaphore |
| KeReadStateTimer |
| KeRegisterBugCheckCallback |
| KeRegisterBugCheckReasonCallback |
| KeRegisterNmiCallback |
| KeRegisterProcessorChangeCallback |
| KeReleaseGuardedMutex |
| KeReleaseGuardedMutexUnsafe |
| KeReleaseInStackQueuedSpinLock |
| KeReleaseInStackQueuedSpinLockForDpc |
| KeReleaseInStackQueuedSpinLockFromDpcLevel |
| KeReleaseInterruptSpinLock |
| KeReleaseMutant |
| KeReleaseMutex |
| KeReleaseQueuedSpinLock |
| KeReleaseSemaphore |
| KeReleaseSpinLock |
| KeReleaseSpinLockForDpc |
| KeReleaseSpinLockFromDpcLevel |
| KeRemoveByKeyDeviceQueue |
| KeRemoveByKeyDeviceQueueIfBusy |
| KeRemoveDeviceQueue |
| KeRemoveEntryDeviceQueue |
| KeRemoveGroupAffinityEx |
| KeRemoveProcessorAffinityEx |
| KeRemoveProcessorGroupAffinity |
| KeRemoveQueue |
| KeRemoveQueueDpc |
| KeRemoveQueueDpcEx |
| KeRemoveQueueEx |
| KeRemoveSystemServiceTable |
| KeResetEvent |
| KeRestoreExtendedProcessorState |
| KeRestoreFloatingPointState |
| KeRestoreProcessorState |
| KeRevertToUserAffinityThread |
| KeRevertToUserAffinityThreadEx |
| KeRevertToUserGroupAffinityThread |
| KeRundownQueue |
| KeSaveExtendedProcessorState |
| KeSaveFloatingPointState |
| KeSaveStateForHibernate |
| KeSetActualBasePriorityThread |
| KeSetAffinityThread |
| KeSetBasePriorityThread |
| KeSetCoalescableTimer |
| KeSetEvent |
| KeSetEventBoostPriority |
| KeSetHardwareCounterConfiguration |
| KeSetIdealProcessorThread |
| KeSetImportanceDpc |
| KeSetKernelStackSwapEnable |
| KeSetPriorityThread |
| KeSetProfileIrql |
| KeSetSystemAffinityThread |
| KeSetSystemAffinityThreadEx |
| KeSetSystemGroupAffinityThread |
| KeSetTargetProcessorDpc |
| KeSetTargetProcessorDpcEx |
| KeSetTimer |
| KeSetTimerEx |
| KeSignalCallDpcDone |
| KeSignalCallDpcSynchronize |
| KeStackAttachProcess |
| KeStallWhileFrozen |
| KeStartDynamicProcessor |
| KeSubtractAffinityEx |
| KeSweepIcacheRange |
| KeSweepLocalCaches |
| KeSynchronizeExecution |
| KeTestAlertThread |
| KeTestSpinLock |
| KeTickCount DATA |
| KeTryToAcquireGuardedMutex |
| KeTryToAcquireQueuedSpinLock |
| KeTryToAcquireSpinLockAtDpcLevel |
| KeUnstackDetachProcess |
| KeUserModeCallback |
| KeWaitForMultipleObjects |
| KeWaitForMutexObject |
| KeWaitForSingleObject |
| KiBugCheckData DATA |
| KiCheckForKernelApcDelivery |
| KiConnectHalInterrupt |
| KiDeliverApc |
| KiDispatchInterrupt |
| KiIpiServiceRoutine |
| KiReplayInterrupt |
| KitLogFeatureUsage |
| KseQueryDeviceData |
| KseQueryDeviceDataList |
| KseQueryDeviceFlags |
| KseRegisterShim |
| KseRegisterShimEx |
| KseSetDeviceFlags |
| KseUnregisterShim |
| LdrAccessResource |
| LdrEnumResources |
| LdrFindResourceDirectory_U |
| LdrFindResourceEx_U |
| LdrFindResource_U |
| LdrResFindResource |
| LdrResFindResourceDirectory |
| LdrResSearchResource |
| LpcPortObjectType DATA |
| LpcReplyWaitReplyPort |
| LpcRequestPort |
| LpcRequestWaitReplyPort |
| LpcRequestWaitReplyPortEx |
| LpcSendWaitReceivePort |
| LsaCallAuthenticationPackage |
| LsaDeregisterLogonProcess |
| LsaFreeReturnBuffer |
| LsaLogonUser |
| LsaLookupAuthenticationPackage |
| LsaRegisterLogonProcess |
| Mm64BitPhysicalAddress DATA |
| MmAddPhysicalMemory |
| MmAddVerifierThunks |
| MmAdjustWorkingSetSize |
| MmAdvanceMdl |
| MmAllocateContiguousMemory |
| MmAllocateContiguousMemorySpecifyCache |
| MmAllocateContiguousMemorySpecifyCacheNode |
| MmAllocateContiguousNodeMemory |
| MmAllocateMappingAddress |
| MmAllocateMdlForIoSpace |
| MmAllocateNodePagesForMdlEx |
| MmAllocateNonCachedMemory |
| MmAllocatePagesForMdl |
| MmAllocatePagesForMdlEx |
| MmAreMdlPagesCached |
| MmBadPointer DATA |
| MmBuildMdlForNonPagedPool |
| MmCanFileBeTruncated |
| MmCommitSessionMappedView |
| MmCopyMemory |
| MmCopyVirtualMemory |
| MmCreateMdl |
| MmCreateMirror |
| MmCreateSection |
| MmDisableModifiedWriteOfSection |
| MmDoesFileHaveUserWritableReferences |
| MmFlushImageSection |
| MmForceSectionClosed |
| MmFreeContiguousMemory |
| MmFreeContiguousMemorySpecifyCache |
| MmFreeMappingAddress |
| MmFreeNonCachedMemory |
| MmFreePagesFromMdl |
| MmGetCacheAttribute |
| MmGetMaximumFileSectionSize |
| MmGetPhysicalAddress |
| MmGetPhysicalMemoryRanges |
| MmGetSystemRoutineAddress |
| MmGetVirtualForPhysical |
| MmGrowKernelStack |
| MmHighestUserAddress DATA |
| MmIsAddressValid |
| MmIsDriverSuspectForVerifier |
| MmIsDriverVerifying |
| MmIsDriverVerifyingByAddress |
| MmIsIoSpaceActive |
| MmIsNonPagedSystemAddressValid |
| MmIsRecursiveIoFault |
| MmIsThisAnNtAsSystem |
| MmIsVerifierEnabled |
| MmLockPagableDataSection |
| MmLockPagableImageSection |
| MmLockPagableSectionByHandle |
| MmMapIoSpace |
| MmMapLockedPages |
| MmMapLockedPagesSpecifyCache |
| MmMapLockedPagesWithReservedMapping |
| MmMapMemoryDumpMdl |
| MmMapUserAddressesToPage |
| MmMapViewInSessionSpace |
| MmMapViewInSessionSpaceEx |
| MmMapViewInSystemSpace |
| MmMapViewInSystemSpaceEx |
| MmMapViewOfSection |
| MmMarkPhysicalMemoryAsBad |
| MmMarkPhysicalMemoryAsGood |
| MmMdlPageContentsState |
| MmMdlPagesAreZero |
| MmPageEntireDriver |
| MmPrefetchPages |
| MmPrefetchVirtualAddresses |
| MmProbeAndLockPages |
| MmProbeAndLockProcessPages |
| MmProbeAndLockSelectedPages |
| MmProtectMdlSystemAddress |
| MmQuerySystemSize |
| MmRemovePhysicalMemory |
| MmResetDriverPaging |
| MmRotatePhysicalView |
| MmSectionObjectType DATA |
| MmSecureVirtualMemory |
| MmSetAddressRangeModified |
| MmSizeOfMdl |
| MmSystemRangeStart DATA |
| MmTrimAllSystemPagableMemory |
| MmUnlockPagableImageSection |
| MmUnlockPages |
| MmUnmapIoSpace |
| MmUnmapLockedPages |
| MmUnmapReservedMapping |
| MmUnmapViewInSessionSpace |
| MmUnmapViewInSystemSpace |
| MmUnmapViewOfSection |
| MmUnsecureVirtualMemory |
| MmUserProbeAddress DATA |
| NlsAnsiCodePage DATA |
| NlsLeadByteInfo DATA |
| NlsMbCodePageTag DATA |
| NlsMbOemCodePageTag DATA |
| NlsOemCodePage DATA |
| NlsOemLeadByteInfo DATA |
| NtAdjustPrivilegesToken |
| NtAllocateLocallyUniqueId |
| NtAllocateUuids |
| NtAllocateVirtualMemory |
| NtBuildGUID |
| NtBuildLab |
| NtBuildNumber |
| NtClose |
| NtCommitComplete |
| NtCommitEnlistment |
| NtCommitTransaction |
| NtConnectPort |
| NtCreateEnlistment |
| NtCreateEvent |
| NtCreateFile |
| NtCreateResourceManager |
| NtCreateSection |
| NtCreateTransaction |
| NtCreateTransactionManager |
| NtDeleteAtom |
| NtDeleteFile |
| NtDeviceIoControlFile |
| NtDuplicateObject |
| NtDuplicateToken |
| NtEnumerateTransactionObject |
| NtFindAtom |
| NtFreeVirtualMemory |
| NtFreezeTransactions |
| NtFsControlFile |
| NtGetEnvironmentVariableEx |
| NtGetNotificationResourceManager |
| NtGlobalFlag DATA |
| NtLockFile |
| NtMakePermanentObject |
| NtMapViewOfSection |
| NtNotifyChangeDirectoryFile |
| NtOpenEnlistment |
| NtOpenFile |
| NtOpenProcess |
| NtOpenProcessToken |
| NtOpenProcessTokenEx |
| NtOpenResourceManager |
| NtOpenThread |
| NtOpenThreadToken |
| NtOpenThreadTokenEx |
| NtOpenTransaction |
| NtOpenTransactionManager |
| NtPrePrepareComplete |
| NtPrePrepareEnlistment |
| NtPrepareComplete |
| NtPrepareEnlistment |
| NtPropagationComplete |
| NtPropagationFailed |
| NtQueryDirectoryFile |
| NtQueryEaFile |
| NtQueryEnvironmentVariableInfoEx |
| NtQueryInformationAtom |
| NtQueryInformationEnlistment |
| NtQueryInformationFile |
| NtQueryInformationProcess |
| NtQueryInformationResourceManager |
| NtQueryInformationThread |
| NtQueryInformationToken |
| NtQueryInformationTransaction |
| NtQueryInformationTransactionManager |
| NtQueryQuotaInformationFile |
| NtQuerySecurityAttributesToken |
| NtQuerySecurityObject |
| NtQuerySystemInformation |
| NtQuerySystemInformationEx |
| NtQueryVolumeInformationFile |
| NtReadFile |
| NtReadOnlyEnlistment |
| NtRecoverEnlistment |
| NtRecoverResourceManager |
| NtRecoverTransactionManager |
| NtRequestPort |
| NtRequestWaitReplyPort |
| NtRollbackComplete |
| NtRollbackEnlistment |
| NtRollbackTransaction |
| NtSetCachedSigningLevel |
| NtSetEaFile |
| NtSetEvent |
| NtSetInformationEnlistment |
| NtSetInformationFile |
| NtSetInformationProcess |
| NtSetInformationResourceManager |
| NtSetInformationThread |
| NtSetInformationToken |
| NtSetInformationTransaction |
| NtSetInformationVirtualMemory |
| NtSetQuotaInformationFile |
| NtSetSecurityObject |
| NtSetVolumeInformationFile |
| NtShutdownSystem |
| NtThawTransactions |
| NtTraceControl |
| NtTraceEvent |
| NtUnlockFile |
| NtVdmControl |
| NtWaitForSingleObject |
| NtWriteFile |
| ObAssignSecurity |
| ObCheckCreateObjectAccess |
| ObCheckObjectAccess |
| ObCloseHandle |
| ObCreateObject |
| ObCreateObjectType |
| ObDeleteCapturedInsertInfo |
| ObDereferenceObject |
| ObDereferenceObjectDeferDelete |
| ObDereferenceObjectDeferDeleteWithTag |
| ObDereferenceSecurityDescriptor |
| ObDuplicateObject |
| ObFindHandleForObject |
| ObGetFilterVersion |
| ObGetObjectSecurity |
| ObGetObjectType |
| ObInsertObject |
| ObIsDosDeviceLocallyMapped |
| ObIsKernelHandle |
| ObLogSecurityDescriptor |
| ObMakeTemporaryObject |
| ObOpenObjectByName |
| ObOpenObjectByPointer |
| ObOpenObjectByPointerWithTag |
| ObQueryNameInfo |
| ObQueryNameString |
| ObQueryObjectAuditingByHandle |
| ObReferenceObjectByHandle |
| ObReferenceObjectByHandleWithTag |
| ObReferenceObjectByName |
| ObReferenceObjectByPointer |
| ObReferenceObjectByPointerWithTag |
| ObReferenceObjectSafe |
| ObReferenceObjectSafeWithTag |
| ObReferenceSecurityDescriptor |
| ObRegisterCallbacks |
| ObReleaseObjectSecurity |
| ObSetHandleAttributes |
| ObSetSecurityDescriptorInfo |
| ObSetSecurityObjectByPointer |
| ObUnRegisterCallbacks |
| ObWaitForMultipleObjects |
| ObWaitForSingleObject |
| ObfDereferenceObject |
| ObfDereferenceObjectWithTag |
| ObfReferenceObject |
| ObfReferenceObjectWithTag |
| POGOBuffer DATA |
| PcwAddInstance |
| PcwCloseInstance |
| PcwCreateInstance |
| PcwRegister |
| PcwUnregister |
| PfFileInfoNotify |
| PfxFindPrefix |
| PfxInitialize |
| PfxInsertPrefix |
| PfxRemovePrefix |
| PoCallDriver |
| PoCancelDeviceNotify |
| PoClearPowerRequest |
| PoCreatePowerRequest |
| PoDeletePowerRequest |
| PoDisableSleepStates |
| PoEndDeviceBusy |
| PoFxActivateComponent |
| PoFxCompleteDevicePowerNotRequired |
| PoFxCompleteIdleCondition |
| PoFxCompleteIdleState |
| PoFxIdleComponent |
| PoFxNotifySurprisePowerOn |
| PoFxPowerControl |
| PoFxPowerOnCrashdumpDevice |
| PoFxProcessorNotification |
| PoFxRegisterCoreDevice |
| PoFxRegisterCrashdumpDevice |
| PoFxRegisterDevice |
| PoFxRegisterPlugin |
| PoFxRegisterPluginEx |
| PoFxRegisterPrimaryDevice |
| PoFxReportDevicePoweredOn |
| PoFxSetComponentLatency |
| PoFxSetComponentResidency |
| PoFxSetComponentWake |
| PoFxSetDeviceIdleTimeout |
| PoFxStartDevicePowerManagement |
| PoFxUnregisterDevice |
| PoGetProcessorIdleAccounting |
| PoGetSystemWake |
| PoInitiateProcessorWake |
| PoLatencySensitivityHint |
| PoNotifyVSyncChange |
| PoQueryWatchdogTime |
| PoQueueShutdownWorkItem |
| PoReenableSleepStates |
| PoRegisterCoalescingCallback |
| PoRegisterDeviceForIdleDetection |
| PoRegisterDeviceNotify |
| PoRegisterPowerSettingCallback |
| PoRegisterSystemState |
| PoRequestPowerIrp |
| PoRequestShutdownEvent |
| PoSetDeviceBusyEx |
| PoSetFixedWakeSource |
| PoSetHiberRange |
| PoSetPowerRequest |
| PoSetPowerState |
| PoSetSystemState |
| PoSetSystemWake |
| PoSetUserPresent |
| PoShutdownBugCheck |
| PoStartDeviceBusy |
| PoStartNextPowerIrp |
| PoUnregisterCoalescingCallback |
| PoUnregisterPowerSettingCallback |
| PoUnregisterSystemState |
| PoUserShutdownCancelled |
| PoUserShutdownInitiated |
| ProbeForRead |
| ProbeForWrite |
| PsAcquireProcessExitSynchronization |
| PsAssignImpersonationToken |
| PsChargePoolQuota |
| PsChargeProcessNonPagedPoolQuota |
| PsChargeProcessPagedPoolQuota |
| PsChargeProcessPoolQuota |
| PsChargeProcessWakeCounter |
| PsCreateSystemThread |
| PsCreateSystemThreadEx |
| PsDereferenceImpersonationToken |
| PsDereferenceKernelStack |
| PsDereferencePrimaryToken |
| PsDisableImpersonation |
| PsEnterPriorityRegion |
| PsEstablishWin32Callouts |
| PsGetContextThread |
| PsGetCurrentProcess |
| PsGetCurrentProcessId |
| PsGetCurrentProcessSessionId |
| PsGetCurrentProcessWin32Process |
| PsGetCurrentThread |
| PsGetCurrentThreadId |
| PsGetCurrentThreadPreviousMode |
| PsGetCurrentThreadProcess |
| PsGetCurrentThreadProcessId |
| PsGetCurrentThreadStackBase |
| PsGetCurrentThreadStackLimit |
| PsGetCurrentThreadTeb |
| PsGetCurrentThreadWin32Thread |
| PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion |
| PsGetJobLock |
| PsGetJobSessionId |
| PsGetJobUIRestrictionsClass |
| PsGetProcessCommonJob |
| PsGetProcessCreateTimeQuadPart |
| PsGetProcessDebugPort |
| PsGetProcessExitProcessCalled |
| PsGetProcessExitStatus |
| PsGetProcessExitTime |
| PsGetProcessId |
| PsGetProcessImageFileName |
| PsGetProcessInheritedFromUniqueProcessId |
| PsGetProcessJob |
| PsGetProcessPeb |
| PsGetProcessPriorityClass |
| PsGetProcessProtection |
| PsGetProcessSectionBaseAddress |
| PsGetProcessSecurityPort |
| PsGetProcessSessionId |
| PsGetProcessSessionIdEx |
| PsGetProcessSignatureLevel |
| PsGetProcessWin32Process |
| PsGetProcessWin32WindowStation |
| PsGetThreadExitStatus |
| PsGetThreadFreezeCount |
| PsGetThreadHardErrorsAreDisabled |
| PsGetThreadId |
| PsGetThreadProcess |
| PsGetThreadProcessId |
| PsGetThreadSessionId |
| PsGetThreadTeb |
| PsGetThreadWin32Thread |
| PsGetVersion |
| PsImpersonateClient |
| PsInitialSystemProcess DATA |
| PsIsCurrentThreadPrefetching |
| PsIsDiskCountersEnabled |
| PsIsProcessBeingDebugged |
| PsIsProtectedProcess |
| PsIsProtectedProcessLight |
| PsIsSystemProcess |
| PsIsSystemThread |
| PsIsThreadImpersonating |
| PsIsThreadTerminating |
| PsJobType DATA |
| PsLeavePriorityRegion |
| PsLookupProcessByProcessId |
| PsLookupProcessThreadByCid |
| PsLookupThreadByThreadId |
| PsProcessType DATA |
| PsQueryProcessAttributesByToken |
| PsQueryProcessExceptionFlags |
| PsQueryTotalCycleTimeProcess |
| PsReferenceImpersonationToken |
| PsReferenceKernelStack |
| PsReferencePrimaryToken |
| PsReferenceProcessFilePointer |
| PsReleaseProcessExitSynchronization |
| PsReleaseProcessWakeCounter |
| PsRemoveCreateThreadNotifyRoutine |
| PsRemoveLoadImageNotifyRoutine |
| PsRestoreImpersonation |
| PsResumeProcess |
| PsReturnPoolQuota |
| PsReturnProcessNonPagedPoolQuota |
| PsReturnProcessPagedPoolQuota |
| PsRevertThreadToSelf |
| PsRevertToSelf |
| PsSetContextThread |
| PsSetCreateProcessNotifyRoutine |
| PsSetCreateProcessNotifyRoutineEx |
| PsSetCreateThreadNotifyRoutine |
| PsSetCurrentThreadPrefetching |
| PsSetLegoNotifyRoutine |
| PsSetLoadImageNotifyRoutine |
| PsSetProcessPriorityByClass |
| PsSetProcessPriorityClass |
| PsSetProcessSecurityPort |
| PsSetProcessWin32Process |
| PsSetProcessWindowStation |
| PsSetThreadHardErrorsAreDisabled |
| PsSetThreadWin32Thread |
| PsSuspendProcess |
| PsTerminateSystemThread |
| PsThreadType DATA |
| PsUILanguageComitted DATA |
| PsUpdateDiskCounters |
| PsWrapApcWow64Thread |
| ReadTimeStampCounter |
| RtlAbsoluteToSelfRelativeSD |
| RtlAddAccessAllowedAce |
| RtlAddAccessAllowedAceEx |
| RtlAddAce |
| RtlAddAtomToAtomTable |
| RtlAddAtomToAtomTableEx |
| RtlAddRange |
| RtlAddResourceAttributeAce |
| RtlAllocateHeap |
| RtlAnsiCharToUnicodeChar |
| RtlAnsiStringToUnicodeSize |
| RtlAnsiStringToUnicodeString |
| RtlAppendAsciizToString |
| RtlAppendStringToString |
| RtlAppendUnicodeStringToString |
| RtlAppendUnicodeToString |
| RtlAreAllAccessesGranted |
| RtlAreAnyAccessesGranted |
| RtlAreBitsClear |
| RtlAreBitsSet |
| RtlAssert |
| RtlAvlInsertNodeEx |
| RtlAvlRemoveNode |
| RtlCaptureContext |
| RtlCaptureStackBackTrace |
| RtlCharToInteger |
| RtlCheckPortableOperatingSystem |
| RtlCheckRegistryKey |
| RtlCheckTokenCapability |
| RtlCheckTokenMembership |
| RtlCheckTokenMembershipEx |
| RtlClearAllBits |
| RtlClearBit |
| RtlClearBits |
| RtlCmDecodeMemIoResource |
| RtlCmEncodeMemIoResource |
| RtlCompareAltitudes |
| RtlCompareMemory |
| RtlCompareMemoryUlong |
| RtlCompareString |
| RtlCompareUnicodeString |
| RtlCompareUnicodeStrings |
| RtlCompressBuffer |
| RtlCompressChunks |
| RtlComputeCrc32 |
| RtlContractHashTable |
| RtlConvertSidToUnicodeString |
| RtlCopyBitMap |
| RtlCopyLuid |
| RtlCopyLuidAndAttributesArray |
| RtlCopyMemory |
| RtlCopyRangeList |
| RtlCopySid |
| RtlCopySidAndAttributesArray |
| RtlCopyString |
| RtlCopyUnicodeString |
| RtlCrc32 |
| RtlCrc64 |
| RtlCreateAcl |
| RtlCreateAtomTable |
| RtlCreateAtomTableEx |
| RtlCreateHashTable |
| RtlCreateHashTableEx |
| RtlCreateHeap |
| RtlCreateRegistryKey |
| RtlCreateSecurityDescriptor |
| RtlCreateSystemVolumeInformationFolder |
| RtlCreateUnicodeString |
| RtlCreateUserThread |
| RtlCultureNameToLCID |
| RtlCustomCPToUnicodeN |
| RtlDecompressBuffer |
| RtlDecompressBufferEx |
| RtlDecompressChunks |
| RtlDecompressFragment |
| RtlDelete |
| RtlDeleteAce |
| RtlDeleteAtomFromAtomTable |
| RtlDeleteElementGenericTable |
| RtlDeleteElementGenericTableAvl |
| RtlDeleteElementGenericTableAvlEx |
| RtlDeleteHashTable |
| RtlDeleteNoSplay |
| RtlDeleteOwnersRanges |
| RtlDeleteRange |
| RtlDeleteRegistryValue |
| RtlDescribeChunk |
| RtlDestroyAtomTable |
| RtlDestroyHeap |
| RtlDowncaseUnicodeChar |
| RtlDowncaseUnicodeString |
| RtlDuplicateUnicodeString |
| RtlEmptyAtomTable |
| RtlEndEnumerationHashTable |
| RtlEndWeakEnumerationHashTable |
| RtlEnumerateEntryHashTable |
| RtlEnumerateGenericTable |
| RtlEnumerateGenericTableAvl |
| RtlEnumerateGenericTableLikeADirectory |
| RtlEnumerateGenericTableWithoutSplaying |
| RtlEnumerateGenericTableWithoutSplayingAvl |
| RtlEqualLuid |
| RtlEqualSid |
| RtlEqualString |
| RtlEqualUnicodeString |
| RtlEqualWnfChangeStamps |
| RtlEthernetAddressToStringA |
| RtlEthernetAddressToStringW |
| RtlEthernetStringToAddressA |
| RtlEthernetStringToAddressW |
| RtlExpandHashTable |
| RtlExtendedMagicDivide |
| RtlExtractBitMap |
| RtlFillMemory |
| RtlFillMemoryUlong |
| RtlFillMemoryUlonglong |
| RtlFindAceByType |
| RtlFindClearBits |
| RtlFindClearBitsAndSet |
| RtlFindClearRuns |
| RtlFindClosestEncodableLength |
| RtlFindFirstRunClear |
| RtlFindLastBackwardRunClear |
| RtlFindLeastSignificantBit |
| RtlFindLongestRunClear |
| RtlFindMessage |
| RtlFindMostSignificantBit |
| RtlFindNextForwardRunClear |
| RtlFindRange |
| RtlFindSetBits |
| RtlFindSetBitsAndClear |
| RtlFindUnicodePrefix |
| RtlFormatCurrentUserKeyPath |
| RtlFormatMessage |
| RtlFreeAnsiString |
| RtlFreeHeap |
| RtlFreeOemString |
| RtlFreeRangeList |
| RtlFreeUnicodeString |
| RtlGUIDFromString |
| RtlGenerate8dot3Name |
| RtlGenerateClass5Guid |
| RtlGetAce |
| RtlGetAppContainerNamedObjectPath |
| RtlGetAppContainerParent |
| RtlGetAppContainerSidType |
| RtlGetCallersAddress |
| RtlGetCompressionWorkSpaceSize |
| RtlGetDaclSecurityDescriptor |
| RtlGetDefaultCodePage |
| RtlGetElementGenericTable |
| RtlGetElementGenericTableAvl |
| RtlGetEnabledExtendedFeatures |
| RtlGetFirstRange |
| RtlGetGroupSecurityDescriptor |
| RtlGetIntegerAtom |
| RtlGetLastRange |
| RtlGetNextEntryHashTable |
| RtlGetNextRange |
| RtlGetNtGlobalFlags |
| RtlGetOwnerSecurityDescriptor |
| RtlGetProductInfo |
| RtlGetSaclSecurityDescriptor |
| RtlGetSetBootStatusData |
| RtlGetThreadLangIdByIndex |
| RtlGetVersion |
| RtlHashUnicodeString |
| RtlIdnToAscii |
| RtlIdnToNameprepUnicode |
| RtlIdnToUnicode |
| RtlImageDirectoryEntryToData |
| RtlImageNtHeader |
| RtlImageNtHeaderEx |
| RtlInitAnsiString |
| RtlInitAnsiStringEx |
| RtlInitCodePageTable |
| RtlInitEnumerationHashTable |
| RtlInitString |
| RtlInitUnicodeString |
| RtlInitUnicodeStringEx |
| RtlInitWeakEnumerationHashTable |
| RtlInitializeBitMap |
| RtlInitializeGenericTable |
| RtlInitializeGenericTableAvl |
| RtlInitializeRangeList |
| RtlInitializeSid |
| RtlInitializeUnicodePrefix |
| RtlInsertElementGenericTable |
| RtlInsertElementGenericTableAvl |
| RtlInsertElementGenericTableFull |
| RtlInsertElementGenericTableFullAvl |
| RtlInsertEntryHashTable |
| RtlInsertUnicodePrefix |
| RtlInt64ToUnicodeString |
| RtlIntegerToChar |
| RtlIntegerToUnicode |
| RtlIntegerToUnicodeString |
| RtlInterlockedClearBitRun |
| RtlInterlockedSetBitRun |
| RtlInterlockedSetClearRun |
| RtlInvertRangeList |
| RtlInvertRangeListEx |
| RtlIoDecodeMemIoResource |
| RtlIoEncodeMemIoResource |
| RtlIpv4AddressToStringA |
| RtlIpv4AddressToStringExA |
| RtlIpv4AddressToStringExW |
| RtlIpv4AddressToStringW |
| RtlIpv4StringToAddressA |
| RtlIpv4StringToAddressExA |
| RtlIpv4StringToAddressExW |
| RtlIpv4StringToAddressW |
| RtlIpv6AddressToStringA |
| RtlIpv6AddressToStringExA |
| RtlIpv6AddressToStringExW |
| RtlIpv6AddressToStringW |
| RtlIpv6StringToAddressA |
| RtlIpv6StringToAddressExA |
| RtlIpv6StringToAddressExW |
| RtlIpv6StringToAddressW |
| RtlIsGenericTableEmpty |
| RtlIsGenericTableEmptyAvl |
| RtlIsNameLegalDOS8Dot3 |
| RtlIsNormalizedString |
| RtlIsNtDdiVersionAvailable |
| RtlIsRangeAvailable |
| RtlIsServicePackVersionInstalled |
| RtlIsUntrustedObject |
| RtlIsValidOemCharacter |
| RtlLCIDToCultureName |
| RtlLengthRequiredSid |
| RtlLengthSecurityDescriptor |
| RtlLengthSid |
| RtlLoadString |
| RtlLocalTimeToSystemTime |
| RtlLockBootStatusData |
| RtlLookupAtomInAtomTable |
| RtlLookupElementGenericTable |
| RtlLookupElementGenericTableAvl |
| RtlLookupElementGenericTableFull |
| RtlLookupElementGenericTableFullAvl |
| RtlLookupEntryHashTable |
| RtlLookupFirstMatchingElementGenericTableAvl |
| RtlLookupFunctionEntry |
| RtlMapGenericMask |
| RtlMapSecurityErrorToNtStatus |
| RtlMergeRangeLists |
| RtlMoveMemory |
| RtlMultiByteToUnicodeN |
| RtlMultiByteToUnicodeSize |
| RtlNextUnicodePrefix |
| RtlNormalizeString |
| RtlNtStatusToDosError |
| RtlNtStatusToDosErrorNoTeb |
| RtlNumberGenericTableElements |
| RtlNumberGenericTableElementsAvl |
| RtlNumberOfClearBits |
| RtlNumberOfClearBitsInRange |
| RtlNumberOfSetBits |
| RtlNumberOfSetBitsInRange |
| RtlNumberOfSetBitsUlongPtr |
| RtlOemStringToCountedUnicodeString |
| RtlOemStringToUnicodeSize |
| RtlOemStringToUnicodeString |
| RtlOemToUnicodeN |
| RtlOpenCurrentUser |
| RtlOwnerAcesPresent |
| RtlPcToFileHeader |
| RtlPinAtomInAtomTable |
| RtlPrefetchMemoryNonTemporal |
| RtlPrefixString |
| RtlPrefixUnicodeString |
| RtlQueryAtomInAtomTable |
| RtlQueryDynamicTimeZoneInformation |
| RtlQueryElevationFlags |
| RtlQueryInformationAcl |
| RtlQueryModuleInformation |
| RtlQueryPackageIdentity |
| RtlQueryRegistryValues |
| RtlQueryRegistryValuesEx |
| RtlQueryTimeZoneInformation |
| RtlQueryValidationRunlevel |
| RtlRaiseException |
| RtlRandom |
| RtlRandomEx |
| RtlRbInsertNodeEx |
| RtlRbRemoveNode |
| RtlRealPredecessor |
| RtlRealSuccessor |
| RtlRemoveEntryHashTable |
| RtlRemoveUnicodePrefix |
| RtlReplaceSidInSd |
| RtlReserveChunk |
| RtlRestoreContext |
| RtlRunOnceBeginInitialize |
| RtlRunOnceComplete |
| RtlRunOnceExecuteOnce |
| RtlRunOnceInitialize |
| RtlSecondsSince1970ToTime |
| RtlSecondsSince1980ToTime |
| RtlSelfRelativeToAbsoluteSD |
| RtlSelfRelativeToAbsoluteSD2 |
| RtlSetAllBits |
| RtlSetBit |
| RtlSetBits |
| RtlSetControlSecurityDescriptor |
| RtlSetDaclSecurityDescriptor |
| RtlSetDynamicTimeZoneInformation |
| RtlSetGroupSecurityDescriptor |
| RtlSetOwnerSecurityDescriptor |
| RtlSetPortableOperatingSystem |
| RtlSetSaclSecurityDescriptor |
| RtlSetTimeZoneInformation |
| RtlSidHashInitialize |
| RtlSidHashLookup |
| RtlSizeHeap |
| RtlSplay |
| RtlStringFromGUID |
| RtlSubAuthorityCountSid |
| RtlSubAuthoritySid |
| RtlSubtreePredecessor |
| RtlSubtreeSuccessor |
| RtlSystemTimeToLocalTime |
| RtlTestBit |
| RtlTimeFieldsToTime |
| RtlTimeToElapsedTimeFields |
| RtlTimeToSecondsSince1970 |
| RtlTimeToSecondsSince1980 |
| RtlTimeToTimeFields |
| RtlTraceDatabaseAdd |
| RtlTraceDatabaseCreate |
| RtlTraceDatabaseDestroy |
| RtlTraceDatabaseEnumerate |
| RtlTraceDatabaseFind |
| RtlTraceDatabaseLock |
| RtlTraceDatabaseUnlock |
| RtlTraceDatabaseValidate |
| RtlUTF8ToUnicodeN |
| RtlUlongByteSwap |
| RtlUlonglongByteSwap |
| RtlUnicodeStringToAnsiSize |
| RtlUnicodeStringToAnsiString |
| RtlUnicodeStringToCountedOemString |
| RtlUnicodeStringToInteger |
| RtlUnicodeStringToOemSize |
| RtlUnicodeStringToOemString |
| RtlUnicodeToCustomCPN |
| RtlUnicodeToMultiByteN |
| RtlUnicodeToMultiByteSize |
| RtlUnicodeToOemN |
| RtlUnicodeToUTF8N |
| RtlUnlockBootStatusData |
| RtlUnwind |
| RtlUnwindEx |
| RtlUpcaseUnicodeChar |
| RtlUpcaseUnicodeString |
| RtlUpcaseUnicodeStringToAnsiString |
| RtlUpcaseUnicodeStringToCountedOemString |
| RtlUpcaseUnicodeStringToOemString |
| RtlUpcaseUnicodeToCustomCPN |
| RtlUpcaseUnicodeToMultiByteN |
| RtlUpcaseUnicodeToOemN |
| RtlUpperChar |
| RtlUpperString |
| RtlUshortByteSwap |
| RtlValidRelativeSecurityDescriptor |
| RtlValidSecurityDescriptor |
| RtlValidSid |
| RtlValidateUnicodeString |
| RtlVerifyVersionInfo |
| RtlVirtualUnwind |
| RtlVolumeDeviceToDosName |
| RtlWalkFrameChain |
| RtlWeaklyEnumerateEntryHashTable |
| RtlWriteRegistryValue |
| RtlZeroHeap |
| RtlZeroMemory |
| RtlxAnsiStringToUnicodeSize |
| RtlxOemStringToUnicodeSize |
| RtlxUnicodeStringToAnsiSize |
| RtlxUnicodeStringToOemSize |
| SeAccessCheck |
| SeAccessCheckEx |
| SeAccessCheckFromState |
| SeAccessCheckFromStateEx |
| SeAccessCheckWithHint |
| SeAdjustAccessStateForTrustLabel |
| SeAppendPrivileges |
| SeAssignSecurity |
| SeAssignSecurityEx |
| SeAuditHardLinkCreation |
| SeAuditHardLinkCreationWithTransaction |
| SeAuditTransactionStateChange |
| SeAuditingAnyFileEventsWithContext |
| SeAuditingAnyFileEventsWithContextEx |
| SeAuditingFileEvents |
| SeAuditingFileEventsWithContext |
| SeAuditingFileEventsWithContextEx |
| SeAuditingFileOrGlobalEvents |
| SeAuditingHardLinkEvents |
| SeAuditingHardLinkEventsWithContext |
| SeAuditingWithTokenForSubcategory |
| SeCaptureSecurityDescriptor |
| SeCaptureSubjectContext |
| SeCaptureSubjectContextEx |
| SeCloseObjectAuditAlarm |
| SeCloseObjectAuditAlarmForNonObObject |
| SeComputeAutoInheritByObjectType |
| SeCreateAccessState |
| SeCreateAccessStateEx |
| SeCreateClientSecurity |
| SeCreateClientSecurityEx |
| SeCreateClientSecurityFromSubjectContext |
| SeCreateClientSecurityFromSubjectContextEx |
| SeDeassignSecurity |
| SeDeleteAccessState |
| SeDeleteObjectAuditAlarm |
| SeDeleteObjectAuditAlarmWithTransaction |
| SeExamineSacl |
| SeExports DATA |
| SeFilterToken |
| SeFreePrivileges |
| SeGetCachedSigningLevel |
| SeGetLinkedToken |
| SeGetLogonSessionToken |
| SeImpersonateClient |
| SeImpersonateClientEx |
| SeIsParentOfChildAppContainer |
| SeLocateProcessImageName |
| SeLockSubjectContext |
| SeMarkLogonSessionForTerminationNotification |
| SeOpenObjectAuditAlarm |
| SeOpenObjectAuditAlarmForNonObObject |
| SeOpenObjectAuditAlarmWithTransaction |
| SeOpenObjectForDeleteAuditAlarm |
| SeOpenObjectForDeleteAuditAlarmWithTransaction |
| SePrivilegeCheck |
| SePrivilegeObjectAuditAlarm |
| SePublicDefaultDacl DATA |
| SeQueryAuthenticationIdToken |
| SeQueryInformationToken |
| SeQuerySecureBootPolicyValue |
| SeQuerySecurityAttributesToken |
| SeQuerySecurityDescriptorInfo |
| SeQuerySessionIdToken |
| SeRegisterImageVerificationCallback |
| SeRegisterLogonSessionTerminatedRoutine |
| SeReleaseSecurityDescriptor |
| SeReleaseSubjectContext |
| SeReportSecurityEvent |
| SeReportSecurityEventWithSubCategory |
| SeSecurityAttributePresent |
| SeSetAccessStateGenericMapping |
| SeSetAuditParameter |
| SeSetSecurityAttributesToken |
| SeSetSecurityDescriptorInfo |
| SeSetSecurityDescriptorInfoEx |
| SeShouldCheckForAccessRightsFromParent |
| SeSinglePrivilegeCheck |
| SeSrpAccessCheck |
| SeSystemDefaultDacl DATA |
| SeSystemDefaultSd DATA |
| SeTokenFromAccessInformation |
| SeTokenImpersonationLevel |
| SeTokenIsAdmin |
| SeTokenIsRestricted |
| SeTokenIsWriteRestricted |
| SeTokenObjectType DATA |
| SeTokenType |
| SeUnlockSubjectContext |
| SeUnregisterImageVerificationCallback |
| SeUnregisterLogonSessionTerminatedRoutine |
| SeValidSecurityDescriptor |
| TmCancelPropagationRequest |
| TmCommitComplete |
| TmCommitEnlistment |
| TmCommitTransaction |
| TmCreateEnlistment |
| TmCurrentTransaction |
| TmDereferenceEnlistmentKey |
| TmEnableCallbacks |
| TmEndPropagationRequest |
| TmEnlistmentObjectType DATA |
| TmFreezeTransactions |
| TmGetTransactionId |
| TmInitSystem |
| TmInitSystemPhase2 |
| TmInitializeTransactionManager |
| TmIsKTMCommitCoordinator |
| TmIsTransactionActive |
| TmPrePrepareComplete |
| TmPrePrepareEnlistment |
| TmPrepareComplete |
| TmPrepareEnlistment |
| TmPropagationComplete |
| TmPropagationFailed |
| TmReadOnlyEnlistment |
| TmRecoverEnlistment |
| TmRecoverResourceManager |
| TmRecoverTransactionManager |
| TmReferenceEnlistmentKey |
| TmRenameTransactionManager |
| TmRequestOutcomeEnlistment |
| TmResourceManagerObjectType DATA |
| TmRollbackComplete |
| TmRollbackEnlistment |
| TmRollbackTransaction |
| TmSetCurrentTransaction |
| TmSinglePhaseReject |
| TmThawTransactions |
| TmTransactionManagerObjectType DATA |
| TmTransactionObjectType DATA |
| VerSetConditionMask |
| VfFailDeviceNode |
| VfFailDriver |
| VfFailSystemBIOS |
| VfInsertContext |
| VfIsVerificationEnabled |
| VfQueryDeviceContext |
| VfQueryDispatchTable |
| VfQueryDriverContext |
| VfQueryIrpContext |
| VfQueryThreadContext |
| VfRemoveContext |
| WheaAddErrorSource |
| WheaConfigureErrorSource |
| WheaGetErrorSource |
| WheaInitializeRecordHeader |
| WheaReportHwError |
| WmiGetClock |
| WmiQueryTraceInformation |
| WmiTraceMessage |
| WmiTraceMessageVa |
| XIPDispatch |
| ZwAccessCheckAndAuditAlarm |
| ZwAddBootEntry |
| ZwAddDriverEntry |
| ZwAdjustPrivilegesToken |
| ZwAlertThread |
| ZwAllocateLocallyUniqueId |
| ZwAllocateVirtualMemory |
| ZwAlpcAcceptConnectPort |
| ZwAlpcCancelMessage |
| ZwAlpcConnectPort |
| ZwAlpcConnectPortEx |
| ZwAlpcCreatePort |
| ZwAlpcCreatePortSection |
| ZwAlpcCreateResourceReserve |
| ZwAlpcCreateSectionView |
| ZwAlpcCreateSecurityContext |
| ZwAlpcDeletePortSection |
| ZwAlpcDeleteResourceReserve |
| ZwAlpcDeleteSectionView |
| ZwAlpcDeleteSecurityContext |
| ZwAlpcDisconnectPort |
| ZwAlpcQueryInformation |
| ZwAlpcSendWaitReceivePort |
| ZwAlpcSetInformation |
| ZwAssignProcessToJobObject |
| ZwAssociateWaitCompletionPacket |
| ZwCancelIoFile |
| ZwCancelIoFileEx |
| ZwCancelTimer |
| ZwClearEvent |
| ZwClose |
| ZwCloseObjectAuditAlarm |
| ZwCommitComplete |
| ZwCommitEnlistment |
| ZwCommitTransaction |
| ZwConnectPort |
| ZwCreateDirectoryObject |
| ZwCreateEnlistment |
| ZwCreateEvent |
| ZwCreateFile |
| ZwCreateIoCompletion |
| ZwCreateJobObject |
| ZwCreateKey |
| ZwCreateKeyTransacted |
| ZwCreateResourceManager |
| ZwCreateSection |
| ZwCreateSymbolicLinkObject |
| ZwCreateTimer |
| ZwCreateTransaction |
| ZwCreateTransactionManager |
| ZwCreateWaitCompletionPacket |
| ZwCreateWnfStateName |
| ZwDeleteBootEntry |
| ZwDeleteDriverEntry |
| ZwDeleteFile |
| ZwDeleteKey |
| ZwDeleteValueKey |
| ZwDeleteWnfStateData |
| ZwDeleteWnfStateName |
| ZwDeviceIoControlFile |
| ZwDisplayString |
| ZwDuplicateObject |
| ZwDuplicateToken |
| ZwEnumerateBootEntries |
| ZwEnumerateDriverEntries |
| ZwEnumerateKey |
| ZwEnumerateTransactionObject |
| ZwEnumerateValueKey |
| ZwFlushBuffersFile |
| ZwFlushBuffersFileEx |
| ZwFlushInstructionCache |
| ZwFlushKey |
| ZwFlushVirtualMemory |
| ZwFreeVirtualMemory |
| ZwFsControlFile |
| ZwGetNotificationResourceManager |
| ZwImpersonateAnonymousToken |
| ZwInitiatePowerAction |
| ZwIsProcessInJob |
| ZwLoadDriver |
| ZwLoadKey |
| ZwLoadKeyEx |
| ZwLockFile |
| ZwLockProductActivationKeys |
| ZwLockVirtualMemory |
| ZwMakeTemporaryObject |
| ZwMapViewOfSection |
| ZwModifyBootEntry |
| ZwModifyDriverEntry |
| ZwNotifyChangeKey |
| ZwNotifyChangeSession |
| ZwOpenDirectoryObject |
| ZwOpenEnlistment |
| ZwOpenEvent |
| ZwOpenFile |
| ZwOpenJobObject |
| ZwOpenKey |
| ZwOpenKeyEx |
| ZwOpenKeyTransacted |
| ZwOpenKeyTransactedEx |
| ZwOpenProcess |
| ZwOpenProcessToken |
| ZwOpenProcessTokenEx |
| ZwOpenResourceManager |
| ZwOpenSection |
| ZwOpenSession |
| ZwOpenSymbolicLinkObject |
| ZwOpenThread |
| ZwOpenThreadToken |
| ZwOpenThreadTokenEx |
| ZwOpenTimer |
| ZwOpenTransaction |
| ZwOpenTransactionManager |
| ZwPowerInformation |
| ZwPrePrepareComplete |
| ZwPrePrepareEnlistment |
| ZwPrepareComplete |
| ZwPrepareEnlistment |
| ZwPropagationComplete |
| ZwPropagationFailed |
| ZwProtectVirtualMemory |
| ZwPulseEvent |
| ZwQueryBootEntryOrder |
| ZwQueryBootOptions |
| ZwQueryDefaultLocale |
| ZwQueryDefaultUILanguage |
| ZwQueryDirectoryFile |
| ZwQueryDirectoryObject |
| ZwQueryDriverEntryOrder |
| ZwQueryEaFile |
| ZwQueryFullAttributesFile |
| ZwQueryInformationEnlistment |
| ZwQueryInformationFile |
| ZwQueryInformationJobObject |
| ZwQueryInformationProcess |
| ZwQueryInformationResourceManager |
| ZwQueryInformationThread |
| ZwQueryInformationToken |
| ZwQueryInformationTransaction |
| ZwQueryInformationTransactionManager |
| ZwQueryInstallUILanguage |
| ZwQueryKey |
| ZwQueryLicenseValue |
| ZwQueryObject |
| ZwQueryQuotaInformationFile |
| ZwQuerySection |
| ZwQuerySecurityAttributesToken |
| ZwQuerySecurityObject |
| ZwQuerySymbolicLinkObject |
| ZwQuerySystemEnvironmentValueEx |
| ZwQuerySystemInformation |
| ZwQuerySystemInformationEx |
| ZwQueryValueKey |
| ZwQueryVirtualMemory |
| ZwQueryVolumeInformationFile |
| ZwQueryWnfStateData |
| ZwQueryWnfStateNameInformation |
| ZwReadFile |
| ZwReadOnlyEnlistment |
| ZwRecoverEnlistment |
| ZwRecoverResourceManager |
| ZwRecoverTransactionManager |
| ZwRemoveIoCompletion |
| ZwRemoveIoCompletionEx |
| ZwRenameKey |
| ZwReplaceKey |
| ZwRequestPort |
| ZwRequestWaitReplyPort |
| ZwResetEvent |
| ZwRestoreKey |
| ZwRollbackComplete |
| ZwRollbackEnlistment |
| ZwRollbackTransaction |
| ZwSaveKey |
| ZwSaveKeyEx |
| ZwSecureConnectPort |
| ZwSetBootEntryOrder |
| ZwSetBootOptions |
| ZwSetCachedSigningLevel |
| ZwSetDefaultLocale |
| ZwSetDefaultUILanguage |
| ZwSetDriverEntryOrder |
| ZwSetEaFile |
| ZwSetEvent |
| ZwSetInformationEnlistment |
| ZwSetInformationFile |
| ZwSetInformationJobObject |
| ZwSetInformationKey |
| ZwSetInformationObject |
| ZwSetInformationProcess |
| ZwSetInformationResourceManager |
| ZwSetInformationThread |
| ZwSetInformationToken |
| ZwSetInformationTransaction |
| ZwSetInformationVirtualMemory |
| ZwSetQuotaInformationFile |
| ZwSetSecurityObject |
| ZwSetSystemEnvironmentValueEx |
| ZwSetSystemInformation |
| ZwSetSystemTime |
| ZwSetTimer |
| ZwSetTimerEx |
| ZwSetValueKey |
| ZwSetVolumeInformationFile |
| ZwTerminateJobObject |
| ZwTerminateProcess |
| ZwTraceEvent |
| ZwTranslateFilePath |
| ZwUnloadDriver |
| ZwUnloadKey |
| ZwUnloadKeyEx |
| ZwUnlockFile |
| ZwUnlockVirtualMemory |
| ZwUnmapViewOfSection |
| ZwUpdateWnfStateData |
| ZwWaitForMultipleObjects |
| ZwWaitForSingleObject |
| ZwWriteFile |
| ZwYieldExecution |
| __C_specific_handler |
| __chkstk |
| __jump_unwind |
| _i64toa_s |
| _i64tow_s |
| _itoa |
| _itoa_s |
| _itow |
| _itow_s |
| _ltoa_s |
| _ltow_s |
| _makepath_s |
| _purecall |
| _setjmp |
| _setjmpex |
| _snprintf |
| _snprintf_s |
| _snscanf_s |
| _snwprintf |
| _snwprintf_s |
| _snwscanf_s |
| _splitpath_s |
| _stricmp |
| _strlwr |
| _strnicmp |
| _strnset |
| _strnset_s |
| _strrev |
| _strset |
| _strset_s |
| _strtoui64 |
| _strupr |
| _swprintf |
| _ui64toa_s |
| _ui64tow_s |
| _ultoa_s |
| _ultow_s |
| _vsnprintf |
| _vsnprintf_s |
| _vsnwprintf |
| _vsnwprintf_s |
| _vswprintf |
| _wcsicmp |
| _wcslwr |
| _wcsnicmp |
| _wcsnset |
| _wcsnset_s |
| _wcsrev |
| _wcsset_s |
| _wcsupr |
| _wmakepath_s |
| _wsplitpath_s |
| _wtoi |
| _wtol |
| atoi |
| atol |
| bsearch |
| bsearch_s |
| isdigit |
| islower |
| isprint |
| isspace |
| isupper |
| isxdigit |
| longjmp |
| mbstowcs |
| mbtowc |
| memchr |
| memcmp |
| memcpy |
| memcpy_s |
| memmove |
| memmove_s |
| memset |
| psMUITest DATA |
| qsort |
| rand |
| sprintf |
| sprintf_s |
| srand |
| sscanf_s |
| strcat |
| strcat_s |
| strchr |
| strcmp |
| strcpy |
| strcpy_s |
| strlen |
| strncat |
| strncat_s |
| strncmp |
| strncpy |
| strncpy_s |
| strnlen |
| strrchr |
| strspn |
| strstr |
| strtok_s |
| swprintf |
| swprintf_s |
| swscanf_s |
| tolower |
| toupper |
| towlower |
| towupper |
| vDbgPrintEx |
| vDbgPrintExWithPrefix |
| vsprintf |
| vsprintf_s |
| vswprintf_s |
| wcscat |
| wcscat_s |
| wcschr |
| wcscmp |
| wcscpy |
| wcscpy_s |
| wcscspn |
| wcslen |
| wcsncat |
| wcsncat_s |
| wcsncmp |
| wcsncpy |
| wcsncpy_s |
| wcsnlen |
| wcsrchr |
| wcsspn |
| wcsstr |
| wcstombs |
| wcstoul |
| wctomb |
