;
; Definition file of ntoskrnl.exe
; Automatic generated by gendef
; written by Kai Tietz 2008
;
LIBRARY "ntoskrnl.exe"
EXPORTS
@ExAcquireFastMutexUnsafe@4
@ExAcquireRundownProtection@4
@ExAcquireRundownProtectionCacheAware@4
@ExAcquireRundownProtectionCacheAwareEx@4
@ExAcquireRundownProtectionEx@4
@ExEnterCriticalRegionAndAcquireFastMutexUnsafe@4
@ExInitializeRundownProtection@4
@ExInterlockedAddLargeStatistic@8
@ExInterlockedCompareExchange64@16
@ExInterlockedFlushSList@4
@ExInterlockedPopEntrySList@8
@ExInterlockedPushEntrySList@12
@ExReInitializeRundownProtection@4
@ExReInitializeRundownProtectionCacheAware@4
@ExReleaseFastMutexUnsafe@4
@ExReleaseFastMutexUnsafeAndLeaveCriticalRegion@4
@ExReleaseResourceAndLeaveCriticalRegion@4
@ExReleaseResourceAndLeavePriorityRegion@4
@ExReleaseResourceLite@4
@ExReleaseRundownProtection@4
@ExReleaseRundownProtectionCacheAware@4
@ExReleaseRundownProtectionCacheAwareEx@8
@ExReleaseRundownProtectionEx@8
@ExRundownCompleted@4
@ExRundownCompletedCacheAware@4
@ExWaitForRundownProtectionRelease@4
@ExWaitForRundownProtectionReleaseCacheAware@4
@ExfAcquirePushLockExclusive@4
@ExfAcquirePushLockShared@4
@ExfInterlockedAddUlong@12
@ExfInterlockedCompareExchange64@12
@ExfInterlockedInsertHeadList@12
@ExfInterlockedInsertTailList@12
@ExfInterlockedPopEntryList@8
@ExfInterlockedPushEntryList@12
@ExfInterlockedRemoveHeadList@8
@ExfReleasePushLock@8
@ExfReleasePushLockExclusive@4
@ExfReleasePushLockShared@4
@ExfTryAcquirePushLockShared@4
@ExfTryToWakePushLock@4
@ExfUnblockPushLock@8
@Exfi386InterlockedDecrementLong@4
@Exfi386InterlockedExchangeUlong@8
@Exfi386InterlockedIncrementLong@4
@ExiAcquireFastMutex@4
@ExiReleaseFastMutex@4
@ExiTryToAcquireFastMutex@4
@HalExamineMBR@16
@InterlockedCompareExchange@12
@InterlockedDecrement@4
@InterlockedExchange@8
@InterlockedExchangeAdd@8
@InterlockedIncrement@4
@InterlockedPopEntrySList@4
@InterlockedPushEntrySList@8
@IoGetPagingIoPriority@4
@IoReadPartitionTable@16
@IoSetPartitionInformation@16
@IoWritePartitionTable@20
@IofCallDriver@8
@IofCompleteRequest@8
@KeAcquireGuardedMutex@4
@KeAcquireGuardedMutexUnsafe@4
@KeAcquireInStackQueuedSpinLockAtDpcLevel@8
@KeAcquireInStackQueuedSpinLockForDpc@8
@KeAcquireSpinLockForDpc@8
@KeInitializeGuardedMutex@4
@KeInvalidateRangeAllCaches@8
@KeReleaseGuardedMutex@4
@KeReleaseGuardedMutexUnsafe@4
@KeReleaseInStackQueuedSpinLockForDpc@4
@KeReleaseInStackQueuedSpinLockFromDpcLevel@4
@KeReleaseSpinLockForDpc@8
@KeTestSpinLock@4
@KeTryToAcquireGuardedMutex@4
@KeTryToAcquireSpinLockAtDpcLevel@4
;KeUpdateRunTime
@KefAcquireSpinLockAtDpcLevel@4
@KefReleaseSpinLockFromDpcLevel@4
@KiAcquireSpinLock@8
;KiCheckForSListAddress
@KiReleaseSpinLock@4
@ObfDereferenceObject@4
;ObfDereferenceObjectWithTag
@ObfReferenceObject@4
;ObfReferenceObjectWithTag
@RtlPrefetchMemoryNonTemporal@8
@RtlUlongByteSwap@4
@RtlUlonglongByteSwap@8
@RtlUshortByteSwap@4
;SeAuditingWithTokenForSubcategory
;WmiGetClock
;Kei386EoiHelper
AlpcGetHeaderSize@4
AlpcGetMessageAttribute@8
AlpcInitializeMessageAttribute@16
CcCanIWrite@16
CcCoherencyFlushAndPurgeCache@20
CcCopyRead@24
CcCopyWrite@20
CcCopyWriteWontFlush@12
CcDeferWrite@24
CcFastCopyRead@24
CcFastCopyWrite@16
CcFastMdlReadWait DATA
CcFlushCache@16
CcGetDirtyPages@16
CcGetFileObjectFromBcb@4
CcGetFileObjectFromSectionPtrs@4
CcGetFileObjectFromSectionPtrsRef@4
CcGetFlushedValidData@8
CcGetLsnForFileObject@8
CcInitializeCacheMap@20
CcIsThereDirtyData@4
CcIsThereDirtyDataEx@8
CcMapData@24
CcMdlRead@20
CcMdlReadComplete@8
CcMdlWriteAbort@8
CcMdlWriteComplete@12
CcPinMappedData@20
CcPinRead@24
CcPrepareMdlWrite@20
CcPreparePinWrite@28
CcPurgeCacheSection@16
CcRemapBcb@4
CcRepinBcb@4
CcScheduleReadAhead@12
CcSetAdditionalCacheAttributes@12
CcSetBcbOwnerPointer@8
CcSetDirtyPageThreshold@8
CcSetDirtyPinnedData@8
CcSetFileSizes@8
CcSetFileSizesEx@8
CcSetLogHandleForFile@12
CcSetParallelFlushFile@8
CcSetReadAheadGranularity@8
CcTestControl@12
CcUninitializeCacheMap@12
CcUnpinData@4
CcUnpinDataForThread@8
CcUnpinRepinnedBcb@12
CcWaitForCurrentLazyWriterActivity@0
CcZeroData@16
CmCallbackGetKeyObjectID@16
CmGetBoundTransaction@8
CmGetCallbackVersion@8
CmKeyObjectType DATA
CmRegisterCallback@12
CmRegisterCallbackEx@24
CmSetCallbackObjectContext@16
CmUnRegisterCallback@8
DbgBreakPoint@0
DbgBreakPointWithStatus@4
DbgCommandString@8
DbgLoadImageSymbols@12
DbgPrint
DbgPrintEx
DbgPrintReturnControlC
DbgPrompt@12
DbgQueryDebugFilterState@8
DbgSetDebugFilterState@12
DbgSetDebugPrintCallback@8
DbgkLkmdRegisterCallback@12
DbgkLkmdUnregisterCallback@4
EmClientQueryRuleState@8
EmClientRuleDeregisterNotification@4
EmClientRuleEvaluate@16
EmClientRuleRegisterNotification@16
EmProviderDeregister@4
EmProviderDeregisterEntry@4
EmProviderRegister@24
EmProviderRegisterEntry@16
EmpProviderRegister@24
EtwActivityIdControl@8
EtwEnableTrace@44
EtwEventEnabled@12
EtwProviderEnabled@20
EtwRegister@16
EtwRegisterClassicProvider@20
EtwSendTraceBuffer@24
EtwUnregister@8
EtwWrite@24
EtwWriteEndScenario@24
EtwWriteEx@40
EtwWriteStartScenario@24
EtwWriteString@28
EtwWriteTransfer@28
ExAcquireCacheAwarePushLockExclusive@4
ExAcquireResourceExclusiveLite@8
ExAcquireResourceSharedLite@8
ExAcquireSharedStarveExclusive@8
ExAcquireSharedWaitForExclusive@8
ExAcquireSpinLockExclusive@4
ExAcquireSpinLockExclusiveAtDpcLevel@4
ExAcquireSpinLockShared@4
ExAcquireSpinLockSharedAtDpcLevel@4
ExAllocateCacheAwarePushLock@4
ExAllocateCacheAwareRundownProtection@8
ExAllocateFromPagedLookasideList@4
ExAllocatePool@8
ExAllocatePoolWithQuota@8
ExAllocatePoolWithQuotaTag@12
ExAllocatePoolWithTag@12
ExAllocatePoolWithTagPriority@16
ExConvertExclusiveToSharedLite@4
ExCreateCallback@16
ExDeleteLookasideListEx@4
ExDeleteNPagedLookasideList@4
ExDeletePagedLookasideList@4
ExDeleteResourceLite@4
ExDesktopObjectType DATA
ExDisableResourceBoostLite@4
ExEnterCriticalRegionAndAcquireResourceExclusive@4
ExEnterCriticalRegionAndAcquireResourceShared@4
ExEnterCriticalRegionAndAcquireSharedWaitForExclusive@4
ExEnterPriorityRegionAndAcquireResourceExclusive@4
ExEnterPriorityRegionAndAcquireResourceShared@4
ExEnumHandleTable@16
ExEventObjectType DATA
ExExtendZone@12
ExFetchLicenseData@12
ExFlushLookasideListEx@4
ExFreeCacheAwarePushLock@4
ExFreeCacheAwareRundownProtection@4
ExFreePool@4
ExFreePoolWithTag@8
ExFreeToPagedLookasideList@8
ExGetCurrentProcessorCounts@12
ExGetCurrentProcessorCpuUsage@4
ExGetExclusiveWaiterCount@4
ExGetLicenseTamperState@4
ExGetPreviousMode@0
ExGetSharedWaiterCount@4
ExInitializeLookasideListEx@32
ExInitializeNPagedLookasideList@28
ExInitializePagedLookasideList@28
ExInitializePushLock@4
ExInitializeResourceLite@4
ExInitializeRundownProtectionCacheAware@8
ExInitializeZone@16
ExInterlockedAddLargeInteger@16
ExInterlockedAddUlong@12
ExInterlockedDecrementLong@8
ExInterlockedExchangeUlong@12
ExInterlockedExtendZone@16
@ExInterlockedIncrementLong@8
ExInterlockedInsertHeadList@12
ExInterlockedInsertTailList@12
ExInterlockedPopEntryList@8
ExInterlockedPushEntryList@12
ExInterlockedRemoveHeadList@8
ExIsProcessorFeaturePresent@4
ExIsResourceAcquiredExclusiveLite@4
ExIsResourceAcquiredSharedLite@4
ExLocalTimeToSystemTime@8
ExNotifyCallback@12
ExQueryAttributeInformation@16
ExQueryPoolBlockSize@8
ExQueueWorkItem@8
ExRaiseAccessViolation@0
ExRaiseDatatypeMisalignment@0
ExRaiseException@24
ExRaiseHardError@24
ExRaiseStatus@4
ExRegisterAttributeInformationCallback@4
ExRegisterCallback@12
ExRegisterExtension@12
ExReinitializeResourceLite@4
ExReleaseCacheAwarePushLockExclusive@4
ExReleaseResourceForThreadLite@8
ExReleaseSpinLockExclusive@8
ExReleaseSpinLockExclusiveFromDpcLevel@4
ExReleaseSpinLockShared@8
ExReleaseSpinLockSharedFromDpcLevel@4
ExSemaphoreObjectType DATA
ExSetLicenseTamperState@4
ExSetResourceOwnerPointer@8
ExSetResourceOwnerPointerEx@12
ExSetTimerResolution@8
ExSizeOfRundownProtectionCacheAware@0
ExSystemExceptionFilter@0
ExSystemTimeToLocalTime@8
ExTryConvertSharedSpinLockExclusive@4
ExUnregisterAttributeInformationCallback@4
ExUnregisterCallback@4
ExUnregisterExtension@4
ExUpdateLicenseData@8
ExUuidCreate@4
ExVerifySuite@4
ExWindowStationObjectType DATA
Exi386InterlockedDecrementLong@4
Exi386InterlockedExchangeUlong@8
Exi386InterlockedIncrementLong@4
FirstEntrySList@4
FsRtlAcknowledgeEcp@4
FsRtlAcquireFileExclusive@4
FsRtlAddBaseMcbEntry@28
FsRtlAddBaseMcbEntryEx@28
FsRtlAddLargeMcbEntry@28
FsRtlAddMcbEntry@16
FsRtlAddToTunnelCache@32
FsRtlAllocateExtraCreateParameter@24
FsRtlAllocateExtraCreateParameterFromLookasideList@24
FsRtlAllocateExtraCreateParameterList@8
FsRtlAllocateFileLock@8
FsRtlAllocatePool@8
FsRtlAllocatePoolWithQuota@8
FsRtlAllocatePoolWithQuotaTag@12
FsRtlAllocatePoolWithTag@12
FsRtlAllocateResource@0
FsRtlAreNamesEqual@16
FsRtlAreThereCurrentOrInProgressFileLocks@4
FsRtlAreVolumeStartupApplicationsComplete@0
FsRtlBalanceReads@4
FsRtlCancellableWaitForMultipleObjects@24
FsRtlCancellableWaitForSingleObject@12
FsRtlChangeBackingFileObject@16
FsRtlCheckLockForReadAccess@8
FsRtlCheckLockForWriteAccess@8
FsRtlCheckOplock@20
FsRtlCheckOplockEx@24
FsRtlCopyRead@32
FsRtlCopyWrite@32
FsRtlCreateSectionForDataScan@40
FsRtlCurrentBatchOplock@4
FsRtlCurrentOplock@4
FsRtlCurrentOplockH@4
FsRtlDeleteExtraCreateParameterLookasideList@8
FsRtlDeleteKeyFromTunnelCache@12
FsRtlDeleteTunnelCache@4
FsRtlDeregisterUncProvider@4
FsRtlDissectDbcs@16
FsRtlDissectName@16
FsRtlDoesDbcsContainWildCards@4
FsRtlDoesNameContainWildCards@4
FsRtlFastCheckLockForRead@24
FsRtlFastCheckLockForWrite@24
FsRtlFastUnlockAll@16
FsRtlFastUnlockAllByKey@20
FsRtlFastUnlockSingle@32
FsRtlFindExtraCreateParameter@16
FsRtlFindInTunnelCache@32
FsRtlFreeExtraCreateParameter@4
FsRtlFreeExtraCreateParameterList@4
FsRtlFreeFileLock@4
FsRtlGetEcpListFromIrp@8
FsRtlGetFileSize@8
FsRtlGetNextBaseMcbEntry@20
FsRtlGetNextExtraCreateParameter@20
FsRtlGetNextFileLock@8
FsRtlGetNextLargeMcbEntry@20
FsRtlGetNextMcbEntry@20
FsRtlGetVirtualDiskNestingLevel@12
FsRtlIncrementCcFastMdlReadWait@0
FsRtlIncrementCcFastReadNoWait@0
FsRtlIncrementCcFastReadNotPossible@0
FsRtlIncrementCcFastReadResourceMiss@0
FsRtlIncrementCcFastReadWait@0
FsRtlInitExtraCreateParameterLookasideList@16
FsRtlInitializeBaseMcb@8
FsRtlInitializeBaseMcbEx@12
FsRtlInitializeExtraCreateParameter@24
FsRtlInitializeExtraCreateParameterList@4
FsRtlInitializeFileLock@12
FsRtlInitializeLargeMcb@8
FsRtlInitializeMcb@8
FsRtlInitializeOplock@4
FsRtlInitializeTunnelCache@4
FsRtlInsertExtraCreateParameter@8
FsRtlInsertPerFileContext@8
FsRtlInsertPerFileObjectContext@8
FsRtlInsertPerStreamContext@8
FsRtlIsDbcsInExpression@8
FsRtlIsEcpAcknowledged@4
FsRtlIsEcpFromUserMode@4
FsRtlIsFatDbcsLegal@20
FsRtlIsHpfsDbcsLegal@20
FsRtlIsNameInExpression@16
FsRtlIsNtstatusExpected@4
FsRtlIsPagingFile@4
FsRtlIsTotalDeviceFailure@4
FsRtlLegalAnsiCharacterArray DATA
FsRtlLogCcFlushError@20
FsRtlLookupBaseMcbEntry@32
FsRtlLookupLargeMcbEntry@32
FsRtlLookupLastBaseMcbEntry@12
FsRtlLookupLastBaseMcbEntryAndIndex@16
FsRtlLookupLastLargeMcbEntry@12
FsRtlLookupLastLargeMcbEntryAndIndex@16
FsRtlLookupLastMcbEntry@12
FsRtlLookupMcbEntry@20
FsRtlLookupPerFileContext@12
FsRtlLookupPerFileObjectContext@12
FsRtlLookupPerStreamContextInternal@12
FsRtlMdlRead@24
FsRtlMdlReadComplete@8
FsRtlMdlReadCompleteDev@12
FsRtlMdlReadDev@28
FsRtlMdlWriteComplete@12
FsRtlMdlWriteCompleteDev@16
FsRtlMupGetProviderIdFromName@8
FsRtlMupGetProviderInfoFromFileObject@16
FsRtlNormalizeNtstatus@8
FsRtlNotifyChangeDirectory@28
FsRtlNotifyCleanup@12
FsRtlNotifyCleanupAll@8
FsRtlNotifyFilterChangeDirectory@44
FsRtlNotifyFilterReportChange@40
FsRtlNotifyFullChangeDirectory@40
FsRtlNotifyFullReportChange@36
FsRtlNotifyInitializeSync@4
FsRtlNotifyReportChange@20
FsRtlNotifyUninitializeSync@4
FsRtlNotifyVolumeEvent@8
FsRtlNotifyVolumeEventEx@12
FsRtlNumberOfRunsInBaseMcb@4
FsRtlNumberOfRunsInLargeMcb@4
FsRtlNumberOfRunsInMcb@4
FsRtlOplockBreakH@24
FsRtlOplockBreakToNone@24
FsRtlOplockBreakToNoneEx@24
FsRtlOplockFsctrl@12
FsRtlOplockFsctrlEx@16
FsRtlOplockIsFastIoPossible@4
FsRtlOplockIsSharedRequest@4
FsRtlOplockKeysEqual@8
FsRtlPostPagingFileStackOverflow@12
FsRtlPostStackOverflow@12
FsRtlPrepareMdlWrite@24
FsRtlPrepareMdlWriteDev@28
FsRtlPrivateLock@48
FsRtlProcessFileLock@12
FsRtlQueryMaximumVirtualDiskNestingLevel@0
FsRtlRegisterFileSystemFilterCallbacks@8
FsRtlRegisterFltMgrCalls@4
FsRtlRegisterMupCalls@4
FsRtlRegisterUncProvider@12
FsRtlRegisterUncProviderEx@16
FsRtlReleaseFile@4
FsRtlRemoveBaseMcbEntry@20
FsRtlRemoveDotsFromPath@12
FsRtlRemoveExtraCreateParameter@16
FsRtlRemoveLargeMcbEntry@20
FsRtlRemoveMcbEntry@12
FsRtlRemovePerFileContext@12
FsRtlRemovePerFileObjectContext@12
FsRtlRemovePerStreamContext@12
FsRtlResetBaseMcb@4
FsRtlResetLargeMcb@8
FsRtlSetEcpListIntoIrp@8
FsRtlSplitBaseMcb@20
FsRtlSplitLargeMcb@20
FsRtlSyncVolumes@12
FsRtlTeardownPerFileContexts@4
FsRtlTeardownPerStreamContexts@4
FsRtlTruncateBaseMcb@12
FsRtlTruncateLargeMcb@12
FsRtlTruncateMcb@8
FsRtlUninitializeBaseMcb@4
FsRtlUninitializeFileLock@4
FsRtlUninitializeLargeMcb@4
FsRtlUninitializeMcb@4
FsRtlUninitializeOplock@4
FsRtlValidateReparsePointBuffer@8
HalDispatchTable DATA
HalPrivateDispatchTable DATA
HeadlessDispatch@20
HvlQueryConnection@4
InbvAcquireDisplayOwnership@0
InbvCheckDisplayOwnership@0
InbvDisplayString@4
InbvEnableBootDriver@4
InbvEnableDisplayString@4
InbvInstallDisplayStringFilter@4
InbvIsBootDriverInstalled@0
InbvNotifyDisplayOwnershipLost@4
InbvResetDisplay@0
InbvSetScrollRegion@16
InbvSetTextColor@4
InbvSolidColorFill@20
InitSafeBootMode DATA
IoAcquireCancelSpinLock@4
IoAcquireRemoveLockEx@20
IoAcquireVpbSpinLock@4
IoAdapterObjectType DATA
IoAdjustStackSizeForRedirection@12
IoAllocateAdapterChannel@20
IoAllocateController@16
IoAllocateDriverObjectExtension@16
IoAllocateErrorLogEntry@8
IoAllocateIrp@8
IoAllocateMdl@20
IoAllocateMiniCompletionPacket@8
IoAllocateSfioStreamIdentifier@16
IoAllocateWorkItem@4
IoApplyPriorityInfoThread@12
IoAssignResources@24
IoAttachDevice@12
IoAttachDeviceByPointer@8
IoAttachDeviceToDeviceStack@8
IoAttachDeviceToDeviceStackSafe@12
IoBuildAsynchronousFsdRequest@24
IoBuildDeviceIoControlRequest@36
IoBuildPartialMdl@16
IoBuildSynchronousFsdRequest@28
IoCallDriver@8
IoCancelFileOpen@8
IoCancelIrp@4
IoCheckDesiredAccess@8
IoCheckEaBufferValidity@12
IoCheckFunctionAccess@24
IoCheckQuerySetFileInformation@12
IoCheckQuerySetVolumeInformation@12
IoCheckQuotaBufferValidity@12
IoCheckShareAccess@20
IoCheckShareAccessEx@24
IoClearDependency@12
IoClearIrpExtraCreateParameter@4
IoCompleteRequest@8
IoConnectInterrupt@44
IoConnectInterruptEx@4
IoCreateArcName@4
IoCreateController@4
IoCreateDevice@28
IoCreateDisk@8
IoCreateDriver@8
IoCreateFile@56
IoCreateFileEx@60
IoCreateFileSpecifyDeviceObjectHint@60
IoCreateNotificationEvent@8
IoCreateStreamFileObject@8
IoCreateStreamFileObjectEx@12
IoCreateStreamFileObjectLite@8
IoCreateSymbolicLink@8
IoCreateSynchronizationEvent@8
IoCreateUnprotectedSymbolicLink@8
IoCsqInitialize@28
IoCsqInitializeEx@28
IoCsqInsertIrp@12
IoCsqInsertIrpEx@16
IoCsqRemoveIrp@8
IoCsqRemoveNextIrp@8
IoDeleteAllDependencyRelations@4
IoDeleteController@4
IoDeleteDevice@4
IoDeleteDriver@4
IoDeleteSymbolicLink@4
IoDetachDevice@4
IoDeviceHandlerObjectSize DATA
IoDeviceHandlerObjectType DATA
IoDeviceObjectType DATA
IoDisconnectInterrupt@4
IoDisconnectInterruptEx@4
IoDriverObjectType DATA
IoDuplicateDependency@12
IoEnqueueIrp@4
IoEnumerateDeviceObjectList@16
IoEnumerateRegisteredFiltersList@12
IoFastQueryNetworkAttributes@20
IoFileObjectType DATA
IoForwardAndCatchIrp@8
IoForwardIrpSynchronously@8
IoFreeController@4
IoFreeErrorLogEntry@4
IoFreeIrp@4
IoFreeMdl@4
IoFreeMiniCompletionPacket@4
IoFreeSfioStreamIdentifier@8
IoFreeWorkItem@4
IoGetAffinityInterrupt@8
IoGetAttachedDevice@4
IoGetAttachedDeviceReference@4
IoGetBaseFileSystemDeviceObject@4
IoGetBootDiskInformation@8
IoGetBootDiskInformationLite@4
IoGetConfigurationInformation@0
IoGetContainerInformation@16
IoGetCurrentProcess@0
IoGetDeviceAttachmentBaseRef@4
IoGetDeviceInterfaceAlias@12
IoGetDeviceInterfaces@16
IoGetDeviceNumaNode@8
IoGetDeviceObjectPointer@16
IoGetDeviceProperty@20
IoGetDevicePropertyData@32
IoGetDeviceToVerify@4
IoGetDiskDeviceObject@8
IoGetDmaAdapter@12
IoGetDriverObjectExtension@8
IoGetFileObjectGenericMapping@0
IoGetInitialStack@0
IoGetIoPriorityHint@4
IoGetIrpExtraCreateParameter@8
IoGetLowerDeviceObject@4
IoGetOplockKeyContext@4
IoGetRelatedDeviceObject@4
IoGetRequestorProcess@4
IoGetRequestorProcessId@4
IoGetRequestorSessionId@8
IoGetSfioStreamIdentifier@8
IoGetStackLimits@8
IoGetSymlinkSupportInformation@8
IoGetTopLevelIrp@0
IoGetTransactionParameterBlock@4
IoInitializeIrp@12
IoInitializeRemoveLockEx@20
IoInitializeTimer@12
IoInitializeWorkItem@8
IoInvalidateDeviceRelations@8
IoInvalidateDeviceState@4
IoIsFileObjectIgnoringSharing@4
IoIsFileOriginRemote@4
IoIsOperationSynchronous@4
IoIsSystemThread@4
IoIsValidNameGraftingBuffer@8
IoIsWdmVersionAvailable@8
IoMakeAssociatedIrp@8
IoOpenDeviceInterfaceRegistryKey@12
IoOpenDeviceRegistryKey@16
IoPageRead@20
IoQueryDeviceDescription@32
IoQueryFileDosDeviceName@8
IoQueryFileInformation@20
IoQueryVolumeInformation@20
IoQueueThreadIrp@4
IoQueueWorkItem@16
IoQueueWorkItemEx@16
IoRaiseHardError@12
IoRaiseInformationalHardError@12
IoReadDiskSignature@12
IoReadOperationCount DATA
IoReadPartitionTableEx@8
IoReadTransferCount DATA
IoRegisterBootDriverReinitialization@12
IoRegisterContainerNotification@20
IoRegisterDeviceInterface@16
IoRegisterDriverReinitialization@12
IoRegisterFileSystem@4
IoRegisterFsRegistrationChange@8
IoRegisterFsRegistrationChangeMountAware@12
IoRegisterLastChanceShutdownNotification@4
IoRegisterPlugPlayNotification@28
IoRegisterPriorityCallback@8
IoRegisterShutdownNotification@4
IoReleaseCancelSpinLock@4
IoReleaseRemoveLockAndWaitEx@12
IoReleaseRemoveLockEx@12
IoReleaseVpbSpinLock@4
IoRemoveShareAccess@8
IoReplaceFileObjectName@12
IoReplacePartitionUnit@12
IoReportDetectedDevice@32
IoReportHalResourceUsage@16
IoReportResourceForDetection@28
IoReportResourceUsage@36
IoReportRootDevice@4
IoReportTargetDeviceChange@8
IoReportTargetDeviceChangeAsynchronous@16
IoRequestDeviceEject@4
IoRequestDeviceEjectEx@16
IoRetrievePriorityInfo@16
IoReuseIrp@8
IoSetCompletionRoutineEx@28
IoSetDependency@8
IoSetDeviceInterfaceState@8
IoSetDevicePropertyData@28
IoSetDeviceToVerify@8
IoSetFileObjectIgnoreSharing@4
IoSetFileOrigin@8
IoSetHardErrorOrVerifyDevice@8
IoSetInformation@16
IoSetIoCompletion@24
IoSetIoCompletionEx@28
IoSetIoPriorityHint@8
IoSetIoPriorityHintIntoFileObject@8
IoSetIoPriorityHintIntoThread@8
IoSetIrpExtraCreateParameter@8
IoSetOplockKeyContext@12
IoSetPartitionInformationEx@12
IoSetShareAccess@16
IoSetShareAccessEx@20
IoSetStartIoAttributes@12
IoSetSystemPartition@4
IoSetThreadHardErrorMode@4
IoSetTopLevelIrp@4
IoSizeofWorkItem@0
IoStartNextPacket@8
IoStartNextPacketByKey@12
IoStartPacket@16
IoStartTimer@4
IoStatisticsLock DATA
IoStopTimer@4
IoSynchronousInvalidateDeviceRelations@8
IoSynchronousPageWrite@20
IoThreadToProcess@4
IoTranslateBusAddress@24
IoUninitializeWorkItem@4
IoUnregisterContainerNotification@4
IoUnregisterFileSystem@4
IoUnregisterFsRegistrationChange@8
IoUnregisterPlugPlayNotification@4
IoUnregisterPlugPlayNotificationEx@4
IoUnregisterPriorityCallback@4
IoUnregisterShutdownNotification@4
IoUpdateShareAccess@8
IoValidateDeviceIoControlAccess@8
IoVerifyPartitionTable@8
IoVerifyVolume@8
IoVolumeDeviceToDosName@8
IoWMIAllocateInstanceIds@12
IoWMIDeviceObjectToInstanceName@12
IoWMIExecuteMethod@24
IoWMIHandleToInstanceName@12
IoWMIOpenBlock@12
IoWMIQueryAllData@12
IoWMIQueryAllDataMultiple@16
IoWMIQuerySingleInstance@16
IoWMIQuerySingleInstanceMultiple@20
IoWMIRegistrationControl@8
IoWMISetNotificationCallback@12
IoWMISetSingleInstance@20
IoWMISetSingleItem@24
IoWMISuggestInstanceName@16
IoWMIWriteEvent@4
IoWithinStackLimits@8
IoWriteErrorLogEntry@4
IoWriteOperationCount DATA
IoWritePartitionTableEx@8
IoWriteTransferCount DATA
KdChangeOption@24
KdDebuggerEnabled DATA
KdDebuggerNotPresent DATA
KdDisableDebugger@0
KdEnableDebugger@0
KdEnteredDebugger DATA
KdPollBreakIn@0
KdPowerTransition@4
KdRefreshDebuggerNotPresent@0
KdSystemDebugControl@28
Ke386CallBios@8
Ke386IoSetAccessProcess@8
Ke386QueryIoAccessMap@8
Ke386SetIoAccessMap@8
KeAcquireInterruptSpinLock@4
KeAcquireSpinLockAtDpcLevel@4
KeAddGroupAffinityEx@12
KeAddProcessorAffinityEx@8
KeAddProcessorGroupAffinity@8
KeAddSystemServiceTable@20
KeAlertThread@8
KeAllocateCalloutStack@4
KeAllocateCalloutStackEx@16
KeAndAffinityEx@12
KeAndGroupAffinityEx@12
KeAreAllApcsDisabled@0
KeAreApcsDisabled@0
KeAttachProcess@4
KeBugCheck@4
KeBugCheckEx@20
KeCancelTimer@4
KeCapturePersistentThreadState@32
KeCheckProcessorAffinityEx@8
KeCheckProcessorGroupAffinity@8
KeClearEvent@4
KeComplementAffinityEx@8
KeCopyAffinityEx@8
KeCountSetBitsAffinityEx@4
KeCountSetBitsGroupAffinity@4
KeDelayExecutionThread@12
KeDeregisterBugCheckCallback@4
KeDeregisterBugCheckReasonCallback@4
KeDeregisterNmiCallback@4
KeDeregisterProcessorChangeCallback@4
KeDetachProcess@0
KeEnterCriticalRegion@0
KeEnterGuardedRegion@0
KeEnterKernelDebugger@0
KeEnumerateNextProcessor@8
KeExpandKernelStackAndCallout@12
KeExpandKernelStackAndCalloutEx@20
KeFindConfigurationEntry@16
KeFindConfigurationNextEntry@20
KeFindFirstSetLeftAffinityEx@4
KeFindFirstSetLeftGroupAffinity@4
KeFindFirstSetRightGroupAffinity@4
KeFirstGroupAffinityEx@8
KeFlushEntireTb@8
KeFlushQueuedDpcs@0
KeFreeCalloutStack@4
KeGenericCallDpc@8
KeGetCurrentNodeNumber@0
KeGetCurrentProcessorNumberEx@4
KeGetCurrentThread@0
KeGetPreviousMode@0
KeGetProcessorIndexFromNumber@4
KeGetProcessorNumberFromIndex@8
KeGetRecommendedSharedDataAlignment@0
KeGetXSaveFeatureFlags@0
KeI386AbiosCall@16
KeI386AllocateGdtSelectors@8
KeI386Call16BitCStyleFunction@0
KeI386Call16BitFunction@0
KeI386FlatToGdtSelector@12
KeI386GetLid@20
KeI386MachineType DATA
KeI386ReleaseGdtSelectors@8
KeI386ReleaseLid@8
KeI386SetGdtSelector@8
KeInitializeAffinityEx@4
KeInitializeApc@32
KeInitializeCrashDumpHeader@20
KeInitializeDeviceQueue@4
KeInitializeDpc@12
KeInitializeEnumerationContext@8
KeInitializeEnumerationContextFromGroup@8
KeInitializeEvent@12
KeInitializeInterrupt@52
KeInitializeMutant@8
KeInitializeMutex@8
KeInitializeQueue@8
KeInitializeSemaphore@12
KeInitializeSpinLock@4
KeInitializeThreadedDpc@12
KeInitializeTimer@4
KeInitializeTimerEx@8
KeInsertByKeyDeviceQueue@12
KeInsertDeviceQueue@8
KeInsertHeadQueue@8
KeInsertQueue@8
KeInsertQueueApc@16
KeInsertQueueDpc@12
KeInterlockedClearProcessorAffinityEx@8
KeInterlockedSetProcessorAffinityEx@8
KeInvalidateAllCaches@0
KeIpiGenericCall@8
KeIsAttachedProcess@0
KeIsEmptyAffinityEx@4
KeIsEqualAffinityEx@8
KeIsExecutingDpc@0
KeIsSingleGroupAffinityEx@8
KeIsSubsetAffinityEx@8
KeIsWaitListEmpty@4
KeLeaveCriticalRegion@0
KeLeaveGuardedRegion@0
KeLoaderBlock DATA
KeNumberProcessors DATA
KeOrAffinityEx@12
KePollFreezeExecution@0
KeProcessorGroupAffinity@8
KeProfileInterrupt@8
KeProfileInterruptWithSource@8
KePulseEvent@12
KeQueryActiveGroupCount@0
KeQueryActiveProcessorAffinity@4
KeQueryActiveProcessorCount@4
KeQueryActiveProcessorCountEx@4
KeQueryActiveProcessors@0
KeQueryDpcWatchdogInformation@4
KeQueryGroupAffinity@4
KeQueryGroupAffinityEx@8
KeQueryHardwareCounterConfiguration@12
KeQueryHighestNodeNumber@0
KeQueryInterruptTime@0
KeQueryLogicalProcessorRelationship@16
KeQueryMaximumGroupCount@0
KeQueryMaximumProcessorCount@0
KeQueryMaximumProcessorCountEx@4
KeQueryNodeActiveAffinity@12
KeQueryNodeMaximumProcessorCount@4
KeQueryPriorityThread@4
KeQueryRuntimeThread@8
KeQuerySystemTime@4
KeQueryTickCount@4
KeQueryTimeIncrement@0
KeQueryUnbiasedInterruptTime@0
KeRaiseUserException@4
KeReadStateEvent@4
KeReadStateMutant@4
KeReadStateMutex@4
KeReadStateQueue@4
KeReadStateSemaphore@4
KeReadStateTimer@4
KeRegisterBugCheckCallback@20
KeRegisterBugCheckReasonCallback@16
KeRegisterNmiCallback@8
KeRegisterProcessorChangeCallback@12
KeReleaseInterruptSpinLock@8
KeReleaseMutant@16
KeReleaseMutex@8
KeReleaseSemaphore@16
KeReleaseSpinLockFromDpcLevel@4
KeRemoveByKeyDeviceQueue@8
KeRemoveByKeyDeviceQueueIfBusy@8
KeRemoveDeviceQueue@4
KeRemoveEntryDeviceQueue@8
KeRemoveGroupAffinityEx@12
KeRemoveProcessorAffinityEx@8
KeRemoveProcessorGroupAffinity@8
KeRemoveQueue@12
KeRemoveQueueDpc@4
KeRemoveQueueEx@24
KeRemoveSystemServiceTable@4
KeResetEvent@4
KeRestoreExtendedProcessorState@4
KeRestoreFloatingPointState@4
KeRevertToUserAffinityThread@0
KeRevertToUserAffinityThreadEx@4
KeRevertToUserGroupAffinityThread@4
KeRundownQueue@4
KeSaveExtendedProcessorState@12
KeSaveFloatingPointState@4
KeSaveStateForHibernate@0
KeServiceDescriptorTable DATA
KeSetActualBasePriorityThread@8
KeSetAffinityThread@8
KeSetBasePriorityThread@8
KeSetCoalescableTimer@24
KeSetDmaIoCoherency@4
KeSetEvent@12
KeSetEventBoostPriority@8
KeSetHardwareCounterConfiguration@8
KeSetIdealProcessorThread@8
KeSetImportanceDpc@8
KeSetKernelStackSwapEnable@4
KeSetPriorityThread@8
KeSetProfileIrql@4
KeSetSystemAffinityThread@4
KeSetSystemAffinityThreadEx@4
KeSetSystemGroupAffinityThread@8
KeSetTargetProcessorDpc@8
KeSetTargetProcessorDpcEx@8
KeSetTimeIncrement@8
KeSetTimer@16
KeSetTimerEx@20
KeSignalCallDpcDone@4
KeSignalCallDpcSynchronize@4
KeStackAttachProcess@8
KeStartDynamicProcessor@16
KeSubtractAffinityEx@12
KeSynchronizeExecution@12
KeTestAlertThread@4
KeTickCount DATA
KeUnstackDetachProcess@4
KeUpdateSystemTime@0
KeUserModeCallback@20
KeWaitForMultipleObjects@32
KeWaitForMutexObject@20
KeWaitForSingleObject@20
KiBugCheckData DATA
KiCheckForKernelApcDelivery@0
KiCoprocessorError@0
KiDeliverApc@12
KiDispatchInterrupt@0
KiIpiServiceRoutine@8
;KiUnexpectedInterrupt ; Check!!! Couldn't determine function argument count. Function doesn't return. 
LdrAccessResource@16
LdrEnumResources@20
LdrFindResourceDirectory_U@16
LdrFindResourceEx_U@20
LdrFindResource_U@16
LdrResFindResource@36
LdrResFindResourceDirectory@28
LdrResSearchResource@32
LpcPortObjectType DATA
LpcReplyWaitReplyPort@12
LpcRequestPort@8
LpcRequestWaitReplyPort@12
LpcRequestWaitReplyPortEx@12
LpcSendWaitReceivePort@28
LsaCallAuthenticationPackage@28
LsaDeregisterLogonProcess@4
LsaFreeReturnBuffer@4
LsaLogonUser@56
LsaLookupAuthenticationPackage@12
LsaRegisterLogonProcess@12
Mm64BitPhysicalAddress DATA
MmAddPhysicalMemory@8
MmAddVerifierThunks@8
MmAdjustWorkingSetSize@16
MmAdvanceMdl@8
MmAllocateContiguousMemory@12
MmAllocateContiguousMemorySpecifyCache@32
MmAllocateContiguousMemorySpecifyCacheNode@36
MmAllocateMappingAddress@8
MmAllocateNonCachedMemory@4
MmAllocatePagesForMdl@28
MmAllocatePagesForMdlEx@36
MmBadPointer DATA
MmBuildMdlForNonPagedPool@4
MmCanFileBeTruncated@8
MmCommitSessionMappedView@8
MmCopyVirtualMemory@28
MmCreateMdl@12
MmCreateMirror@0
MmCreateSection@32
MmDisableModifiedWriteOfSection@4
MmDoesFileHaveUserWritableReferences@4
MmFlushImageSection@8
MmForceSectionClosed@8
MmFreeContiguousMemory@4
MmFreeContiguousMemorySpecifyCache@12
MmFreeMappingAddress@8
MmFreeNonCachedMemory@8
MmFreePagesFromMdl@4
MmGetPhysicalAddress@4
MmGetPhysicalMemoryRanges@0
MmGetSystemRoutineAddress@4
MmGetVirtualForPhysical@8
MmGrowKernelStack@4
MmHighestUserAddress DATA
MmIsAddressValid@4
MmIsDriverVerifying@4
MmIsDriverVerifyingByAddress@4
MmIsIoSpaceActive@12
MmIsNonPagedSystemAddressValid@4
MmIsRecursiveIoFault@0
MmIsThisAnNtAsSystem@0
MmIsVerifierEnabled@4
MmLockPagableDataSection@4
MmLockPagableImageSection@4
MmLockPagableSectionByHandle@4
MmMapIoSpace@16
MmMapLockedPages@8
MmMapLockedPagesSpecifyCache@24
MmMapLockedPagesWithReservedMapping@16
MmMapMemoryDumpMdl@4
MmMapUserAddressesToPage@12
MmMapVideoDisplay@16
MmMapViewInSessionSpace@12
MmMapViewInSystemSpace@12
MmMapViewOfSection@40
MmMarkPhysicalMemoryAsBad@8
MmMarkPhysicalMemoryAsGood@8
MmPageEntireDriver@4
MmPrefetchPages@8
MmProbeAndLockPages@12
MmProbeAndLockProcessPages@16
MmProbeAndLockSelectedPages@16
MmProtectMdlSystemAddress@8
MmQuerySystemSize@0
MmRemovePhysicalMemory@8
MmResetDriverPaging@4
MmRotatePhysicalView@24
MmSectionObjectType DATA
MmSecureVirtualMemory@12
MmSetAddressRangeModified@8
MmSetBankedSection@24
MmSizeOfMdl@8
MmSystemRangeStart DATA
MmTrimAllSystemPagableMemory@4
MmUnlockPagableImageSection@4
MmUnlockPages@4
MmUnmapIoSpace@8
MmUnmapLockedPages@8
MmUnmapReservedMapping@12
MmUnmapVideoDisplay@8
MmUnmapViewInSessionSpace@4
MmUnmapViewInSystemSpace@4
MmUnmapViewOfSection@8
MmUnsecureVirtualMemory@4
MmUserProbeAddress DATA
NlsAnsiCodePage DATA
NlsLeadByteInfo DATA
NlsMbCodePageTag DATA
NlsMbOemCodePageTag DATA
NlsOemCodePage DATA
NlsOemLeadByteInfo DATA
NtAddAtom@12
NtAdjustPrivilegesToken@24
NtAllocateLocallyUniqueId@4
NtAllocateUuids@16
NtAllocateVirtualMemory@24
NtBuildGUID@0
NtBuildLab@0
NtBuildNumber@0
NtClose@4
NtCommitComplete@8
NtCommitEnlistment@8
NtCommitTransaction@8
NtConnectPort@32
NtCreateEnlistment@32
NtCreateEvent@20
NtCreateFile@44
NtCreateResourceManager@28
NtCreateSection@28
NtCreateTransaction@40
NtCreateTransactionManager@24
NtDeleteAtom@4
NtDeleteFile@4
NtDeviceIoControlFile@40
NtDuplicateObject@28
NtDuplicateToken@24
NtEnumerateTransactionObject@20
NtFindAtom@12
NtFreeVirtualMemory@16
NtFreezeTransactions@8
NtFsControlFile@40
NtGetEnvironmentVariableEx@20
NtGetNotificationResourceManager@28
NtGlobalFlag DATA
NtLockFile@40
NtMakePermanentObject@4
NtMapViewOfSection@40
NtNotifyChangeDirectoryFile@36
NtOpenEnlistment@20
NtOpenFile@24
NtOpenProcess@16
NtOpenProcessToken@12
NtOpenProcessTokenEx@16
NtOpenResourceManager@20
NtOpenThread@16
NtOpenThreadToken@16
NtOpenThreadTokenEx@20
NtOpenTransaction@20
NtOpenTransactionManager@24
NtPrePrepareComplete@8
NtPrePrepareEnlistment@8
NtPrepareComplete@8
NtPrepareEnlistment@8
NtPropagationComplete@16
NtPropagationFailed@12
NtQueryDirectoryFile@44
NtQueryEaFile@36
NtQueryEnvironmentVariableInfoEx@16
NtQueryInformationAtom@20
NtQueryInformationEnlistment@20
NtQueryInformationFile@20
NtQueryInformationProcess@20
NtQueryInformationResourceManager@20
NtQueryInformationThread@20
NtQueryInformationToken@20
NtQueryInformationTransaction@20
NtQueryInformationTransactionManager@20
NtQueryQuotaInformationFile@36
NtQuerySecurityAttributesToken@24
NtQuerySecurityObject@20
NtQuerySystemInformation@16
NtQuerySystemInformationEx@24
NtQueryVolumeInformationFile@20
NtReadFile@36
NtReadOnlyEnlistment@8
NtRecoverEnlistment@8
NtRecoverResourceManager@4
NtRecoverTransactionManager@4
NtRequestPort@8
NtRequestWaitReplyPort@12
NtRollbackComplete@8
NtRollbackEnlistment@8
NtRollbackTransaction@8
NtSetEaFile@16
NtSetEvent@8
NtSetInformationEnlistment@16
NtSetInformationFile@20
NtSetInformationProcess@16
NtSetInformationResourceManager@16
NtSetInformationThread@16
NtSetInformationToken@16
NtSetInformationTransaction@16
NtSetQuotaInformationFile@16
NtSetSecurityObject@12
NtSetVolumeInformationFile@20
NtShutdownSystem@4
NtThawTransactions@0
NtTraceControl@24
NtTraceEvent@16
NtUnlockFile@20
NtVdmControl@8
NtWaitForSingleObject@12
NtWriteFile@36
ObAssignSecurity@16
ObCheckCreateObjectAccess@28
ObCheckObjectAccess@20
ObCloseHandle@8
ObCreateObject@36
ObCreateObjectType@16
ObDeleteCapturedInsertInfo@4
ObDereferenceObject@4
ObDereferenceObjectDeferDelete@4
ObDereferenceObjectDeferDeleteWithTag@8
ObDereferenceSecurityDescriptor@8
ObFindHandleForObject@20
ObGetFilterVersion@0
ObGetObjectSecurity@12
ObGetObjectType@4
ObInsertObject@24
ObIsDosDeviceLocallyMapped@8
ObIsKernelHandle@4
ObLogSecurityDescriptor@12
ObMakeTemporaryObject@4
ObOpenObjectByName@28
ObOpenObjectByPointer@28
ObOpenObjectByPointerWithTag@32
ObQueryNameInfo@4
ObQueryNameString@16
ObQueryObjectAuditingByHandle@8
ObReferenceObjectByHandle@24
ObReferenceObjectByHandleWithTag@28
ObReferenceObjectByName@32
ObReferenceObjectByPointer@16
ObReferenceObjectByPointerWithTag@20
ObReferenceSecurityDescriptor@8
ObRegisterCallbacks@8
ObReleaseObjectSecurity@8
ObSetHandleAttributes@12
ObSetSecurityDescriptorInfo@24
ObSetSecurityObjectByPointer@12
ObUnRegisterCallbacks@4
POGOBuffer DATA
PcwAddInstance@20
PcwCloseInstance@4
PcwCreateInstance@20
PcwRegister@8
PcwUnregister@4
PfFileInfoNotify@4
PfxFindPrefix@8
PfxInitialize@4
PfxInsertPrefix@12
PfxRemovePrefix@8
PoCallDriver@8
PoCancelDeviceNotify@4
PoClearPowerRequest@8
PoCreatePowerRequest@12
PoDeletePowerRequest@4
PoDisableSleepStates@12
PoEndDeviceBusy@4
PoGetSystemWake@4
PoQueryWatchdogTime@8
PoQueueShutdownWorkItem@4
PoReenableSleepStates@4
PoRegisterDeviceForIdleDetection@16
PoRegisterDeviceNotify@24
PoRegisterPowerSettingCallback@20
PoRegisterSystemState@8
PoRequestPowerIrp@24
PoRequestShutdownEvent@4
PoSetDeviceBusyEx@4
PoSetFixedWakeSource@4
PoSetHiberRange@20
PoSetPowerRequest@8
PoSetPowerState@12
PoSetSystemState@4
PoSetSystemWake@4
PoShutdownBugCheck@4
PoStartDeviceBusy@4
PoStartNextPowerIrp@4
PoUnregisterPowerSettingCallback@4
PoUnregisterSystemState@4
PoUserShutdownInitiated@0
ProbeForRead@12
ProbeForWrite@12
PsCreateSystemProcess@12
PsAcquireProcessExitSynchronization@4
PsAssignImpersonationToken@8
PsChargePoolQuota@12
PsChargeProcessCpuCycles@12
PsChargeProcessNonPagedPoolQuota@8
PsChargeProcessPagedPoolQuota@8
PsChargeProcessPoolQuota@12
PsCreateSystemThread@28
PsDereferenceImpersonationToken@4
PsDereferencePrimaryToken@4
PsDisableImpersonation@8
PsEnterPriorityRegion@0
PsEstablishWin32Callouts@4
PsGetContextThread@12
PsGetCurrentProcess@0
PsGetCurrentProcessId@0
PsGetCurrentProcessSessionId@0
PsGetCurrentProcessWin32Process@0
PsGetCurrentThread@0
PsGetCurrentThreadId@0
PsGetCurrentThreadPreviousMode@0
PsGetCurrentThreadProcess@0
PsGetCurrentThreadProcessId@0
PsGetCurrentThreadStackBase@0
PsGetCurrentThreadStackLimit@0
PsGetCurrentThreadTeb@0
PsGetCurrentThreadWin32Thread@0
PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion@4
PsGetJobLock@4
PsGetJobSessionId@4
PsGetJobUIRestrictionsClass@4
PsGetProcessCreateTimeQuadPart@4
PsGetProcessDebugPort@4
PsGetProcessExitProcessCalled@4
PsGetProcessExitStatus@4
PsGetProcessExitTime@0
PsGetProcessId@4
PsGetProcessImageFileName@4
PsGetProcessInheritedFromUniqueProcessId@4
PsGetProcessJob@4
PsGetProcessPeb@4
PsGetProcessPriorityClass@4
PsGetProcessSectionBaseAddress@4
PsGetProcessSecurityPort@4
PsGetProcessSessionId@4
PsGetProcessSessionIdEx@4
PsGetProcessWin32Process@4
PsGetProcessWin32WindowStation@4
PsGetThreadFreezeCount@4
PsGetThreadHardErrorsAreDisabled@4
PsGetThreadId@4
PsGetThreadProcess@4
PsGetThreadProcessId@4
PsGetThreadSessionId@4
PsGetThreadTeb@4
PsGetThreadWin32Thread@4
PsGetVersion@16
PsImpersonateClient@20
PsInitialSystemProcess DATA
PsIsCurrentThreadPrefetching@0
PsIsProcessBeingDebugged@4
PsIsProtectedProcess@4
PsIsSystemProcess@4
PsIsSystemThread@4
PsIsThreadImpersonating@4
PsIsThreadTerminating@4
PsJobType DATA
PsLeavePriorityRegion@0
PsLookupProcessByProcessId@8
PsLookupProcessThreadByCid@12
PsLookupThreadByThreadId@8
PsProcessType DATA
PsQueryProcessExceptionFlags@12
PsReferenceImpersonationToken@16
PsReferencePrimaryToken@4
PsReferenceProcessFilePointer@8
PsReleaseProcessExitSynchronization@4
PsRemoveCreateThreadNotifyRoutine@4
PsRemoveLoadImageNotifyRoutine@4
PsRestoreImpersonation@8
PsResumeProcess@4
PsReturnPoolQuota@12
PsReturnProcessNonPagedPoolQuota@8
PsReturnProcessPagedPoolQuota@8
PsRevertThreadToSelf@4
PsRevertToSelf@0
PsSetContextThread@12
PsSetCreateProcessNotifyRoutine@8
PsSetCreateProcessNotifyRoutineEx@8
PsSetCreateThreadNotifyRoutine@4
PsSetCurrentThreadPrefetching@4
PsSetJobUIRestrictionsClass@8
PsSetLegoNotifyRoutine@4
PsSetLoadImageNotifyRoutine@4
PsSetProcessPriorityByClass@8
PsSetProcessPriorityClass@8
PsSetProcessSecurityPort@8
PsSetProcessWin32Process@12
PsSetProcessWindowStation@8
PsSetThreadHardErrorsAreDisabled@8
PsSetThreadWin32Thread@12
PsSuspendProcess@4
PsTerminateSystemThread@4
PsThreadType DATA
PsUILanguageComitted DATA
PsWrapApcWow64Thread@8
READ_REGISTER_BUFFER_UCHAR@12
READ_REGISTER_BUFFER_ULONG@12
READ_REGISTER_BUFFER_USHORT@12
READ_REGISTER_UCHAR@4
READ_REGISTER_ULONG@4
READ_REGISTER_USHORT@4
RtlAbsoluteToSelfRelativeSD@12
RtlAddAccessAllowedAce@16
RtlAddAccessAllowedAceEx@20
RtlAddAce@20
RtlAddAtomToAtomTable@12
RtlAddRange@36
RtlAllocateHeap@12
RtlAnsiCharToUnicodeChar@4
RtlAnsiStringToUnicodeSize@4
RtlAnsiStringToUnicodeString@12
RtlAppendAsciizToString@8
RtlAppendStringToString@8
RtlAppendUnicodeStringToString@8
RtlAppendUnicodeToString@8
RtlAreAllAccessesGranted@8
RtlAreAnyAccessesGranted@8
RtlAreBitsClear@12
RtlAreBitsSet@12
RtlAssert@16
RtlCaptureContext@4
RtlCaptureStackBackTrace@16
RtlCharToInteger@12
RtlCheckRegistryKey@8
RtlClearAllBits@4
RtlClearBit@8
RtlClearBits@12
RtlCmDecodeMemIoResource@8
RtlCmEncodeMemIoResource@24
RtlCompareAltitudes@8
RtlCompareMemory@12
RtlCompareMemoryUlong@12
RtlCompareString@12
RtlCompareUnicodeString@12
RtlCompareUnicodeStrings@20
RtlCompressBuffer@32
RtlCompressChunks@28
RtlComputeCrc32@12
RtlContractHashTable@4
RtlConvertLongToLargeInteger@4
RtlConvertSidToUnicodeString@12
RtlConvertUlongToLargeInteger@4
RtlCopyLuid@8
RtlCopyLuidAndAttributesArray@12
RtlCopyRangeList@8
RtlCopySid@12
RtlCopySidAndAttributesArray@28
RtlCopyString@8
RtlCopyUnicodeString@8
RtlCreateAcl@12
RtlCreateAtomTable@8
RtlCreateHashTable@12
RtlCreateHeap@24
RtlCreateRegistryKey@8
RtlCreateSecurityDescriptor@8
RtlCreateSystemVolumeInformationFolder@4
RtlCreateUnicodeString@8
RtlCustomCPToUnicodeN@24
RtlDecompressBuffer@24
RtlDecompressChunks@28
RtlDecompressFragment@32
RtlDelete@4
RtlDeleteAce@8
RtlDeleteAtomFromAtomTable@8
RtlDeleteElementGenericTable@8
RtlDeleteElementGenericTableAvl@8
RtlDeleteHashTable@4
RtlDeleteNoSplay@8
RtlDeleteOwnersRanges@8
RtlDeleteRange@24
RtlDeleteRegistryValue@12
RtlDescribeChunk@20
RtlDestroyAtomTable@4
RtlDestroyHeap@4
RtlDowncaseUnicodeChar@4
RtlDowncaseUnicodeString@12
RtlDuplicateUnicodeString@12
RtlEmptyAtomTable@8
RtlEndEnumerationHashTable@8
RtlEndWeakEnumerationHashTable@8
RtlEnlargedIntegerMultiply@8
RtlEnlargedUnsignedDivide@16
RtlEnlargedUnsignedMultiply@8
RtlEnumerateEntryHashTable@8
RtlEnumerateGenericTable@8
RtlEnumerateGenericTableAvl@8
RtlEnumerateGenericTableLikeADirectory@28
RtlEnumerateGenericTableWithoutSplaying@8
RtlEnumerateGenericTableWithoutSplayingAvl@8
RtlEqualLuid@8
RtlEqualSid@8
RtlEqualString@12
RtlEqualUnicodeString@12
RtlEthernetAddressToStringA@8
RtlEthernetAddressToStringW@8
RtlEthernetStringToAddressA@12
RtlEthernetStringToAddressW@12
RtlExpandHashTable@4
RtlExtendedIntegerMultiply@12
RtlExtendedLargeIntegerDivide@16
RtlExtendedMagicDivide@20
RtlFillMemory@12
RtlFillMemoryUlong@12
RtlFillMemoryUlonglong@16
RtlFindAceByType@12
RtlFindClearBits@12
RtlFindClearBitsAndSet@12
RtlFindClearRuns@16
RtlFindClosestEncodableLength@12
RtlFindFirstRunClear@8
RtlFindLastBackwardRunClear@12
RtlFindLeastSignificantBit@8
RtlFindLongestRunClear@8
RtlFindMessage@20
RtlFindMostSignificantBit@8
RtlFindNextForwardRunClear@12
RtlFindRange@48
RtlFindSetBits@12
RtlFindSetBitsAndClear@12
RtlFindUnicodePrefix@12
RtlFormatCurrentUserKeyPath@4
RtlFormatMessage@36
RtlFreeAnsiString@4
RtlFreeHeap@12
RtlFreeOemString@4
RtlFreeRangeList@4
RtlFreeUnicodeString@4
RtlGUIDFromString@8
RtlGenerate8dot3Name@16
RtlGetAce@12
RtlGetCallersAddress@8
RtlGetCompressionWorkSpaceSize@12
RtlGetDaclSecurityDescriptor@16
RtlGetDefaultCodePage@8
RtlGetElementGenericTable@8
RtlGetElementGenericTableAvl@8
RtlGetEnabledExtendedFeatures@8
RtlGetFirstRange@12
RtlGetGroupSecurityDescriptor@12
RtlGetIntegerAtom@8
RtlGetLastRange@12
RtlGetNextEntryHashTable@8
RtlGetNextRange@12
RtlGetNtGlobalFlags@0
RtlGetOwnerSecurityDescriptor@12
RtlGetProductInfo@20
RtlGetSaclSecurityDescriptor@16
RtlGetSetBootStatusData@24
RtlGetThreadLangIdByIndex@16
RtlGetVersion@4
RtlHashUnicodeString@16
RtlIdnToAscii@20
RtlIdnToNameprepUnicode@20
RtlIdnToUnicode@20
RtlImageDirectoryEntryToData@16
RtlImageNtHeader@4
RtlInitAnsiString@8
RtlInitAnsiStringEx@8
RtlInitCodePageTable@8
RtlInitEnumerationHashTable@8
RtlInitString@8
RtlInitUnicodeString@8
RtlInitUnicodeStringEx@8
RtlInitWeakEnumerationHashTable@8
RtlInitializeBitMap@12
RtlInitializeGenericTable@20
RtlInitializeGenericTableAvl@20
RtlInitializeRangeList@4
RtlInitializeSid@12
RtlInitializeUnicodePrefix@4
RtlInsertElementGenericTable@16
RtlInsertElementGenericTableAvl@16
RtlInsertElementGenericTableFull@24
RtlInsertElementGenericTableFullAvl@24
RtlInsertEntryHashTable@16
RtlInsertUnicodePrefix@12
RtlInt64ToUnicodeString@16
RtlIntegerToChar@16
RtlIntegerToUnicode@16
RtlIntegerToUnicodeString@12
RtlInvertRangeList@8
RtlInvertRangeListEx@20
RtlIoDecodeMemIoResource@16
RtlIoEncodeMemIoResource@40
RtlIpv4AddressToStringA@8
RtlIpv4AddressToStringExA@16
RtlIpv4AddressToStringExW@16
RtlIpv4AddressToStringW@8
RtlIpv4StringToAddressA@16
RtlIpv4StringToAddressExA@16
RtlIpv4StringToAddressExW@16
RtlIpv4StringToAddressW@16
RtlIpv6AddressToStringA@8
RtlIpv6AddressToStringExA@20
RtlIpv6AddressToStringExW@20
RtlIpv6AddressToStringW@8
RtlIpv6StringToAddressA@12
RtlIpv6StringToAddressExA@16
RtlIpv6StringToAddressExW@16
RtlIpv6StringToAddressW@12
RtlIsGenericTableEmpty@4
RtlIsGenericTableEmptyAvl@4
RtlIsNameLegalDOS8Dot3@12
RtlIsNormalizedString@16
RtlIsNtDdiVersionAvailable@4
RtlIsRangeAvailable@40
RtlIsServicePackVersionInstalled@4
RtlIsValidOemCharacter@4
RtlLargeIntegerAdd@16
RtlLargeIntegerArithmeticShift@12
RtlLargeIntegerDivide@20
RtlLargeIntegerNegate@8
RtlLargeIntegerShiftLeft@12
RtlLargeIntegerShiftRight@12
RtlLargeIntegerSubtract@16
RtlLengthRequiredSid@4
RtlLengthSecurityDescriptor@4
RtlLengthSid@4
RtlLoadString@32
RtlLocalTimeToSystemTime@8
RtlLockBootStatusData@4
RtlLookupAtomInAtomTable@12
RtlLookupElementGenericTable@8
RtlLookupElementGenericTableAvl@8
RtlLookupElementGenericTableFull@16
RtlLookupElementGenericTableFullAvl@16
RtlLookupEntryHashTable@12
RtlLookupFirstMatchingElementGenericTableAvl@12
RtlMapGenericMask@8
RtlMapSecurityErrorToNtStatus@4
RtlMergeRangeLists@16
RtlMoveMemory@12
RtlMultiByteToUnicodeN@20
RtlMultiByteToUnicodeSize@12
RtlNextUnicodePrefix@8
RtlNormalizeString@20
RtlNtStatusToDosError@4
RtlNtStatusToDosErrorNoTeb@4
RtlNumberGenericTableElements@4
RtlNumberGenericTableElementsAvl@4
RtlNumberOfClearBits@4
RtlNumberOfSetBits@4
RtlNumberOfSetBitsUlongPtr@4
RtlOemStringToCountedUnicodeString@12
RtlOemStringToUnicodeSize@4
RtlOemStringToUnicodeString@12
RtlOemToUnicodeN@20
RtlOwnerAcesPresent@4
RtlPinAtomInAtomTable@8
RtlPrefixString@12
RtlPrefixUnicodeString@12
RtlQueryAtomInAtomTable@24
RtlQueryDynamicTimeZoneInformation@4
RtlQueryElevationFlags@4
RtlQueryModuleInformation@12
RtlQueryRegistryValues@20
RtlQueryTimeZoneInformation@4
RtlRaiseException@24
RtlRandom@4
RtlRandomEx@4
RtlRealPredecessor@4
RtlRealSuccessor@4
RtlRemoveEntryHashTable@12
RtlRemoveUnicodePrefix@8
RtlReplaceSidInSd@16
RtlReserveChunk@20
RtlRunOnceBeginInitialize@12
RtlRunOnceComplete@12
RtlRunOnceExecuteOnce@16
RtlRunOnceInitialize@4
RtlSecondsSince1970ToTime@8
RtlSecondsSince1980ToTime@8
RtlSelfRelativeToAbsoluteSD2@8
RtlSelfRelativeToAbsoluteSD@44
RtlSetAllBits@4
RtlSetBit@8
RtlSetBits@12
RtlSetDaclSecurityDescriptor@16
RtlSetDynamicTimeZoneInformation@4
RtlSetGroupSecurityDescriptor@12
RtlSetOwnerSecurityDescriptor@12
RtlSetSaclSecurityDescriptor@16
RtlSetTimeZoneInformation@4
RtlSidHashInitialize@12
RtlSidHashLookup@8
RtlSizeHeap@12
RtlSplay@4
RtlStringFromGUID@8
RtlSubAuthorityCountSid@4
RtlSubAuthoritySid@8
RtlSubtreePredecessor@4
RtlSubtreeSuccessor@4
RtlSystemTimeToLocalTime@8
RtlTestBit@8
RtlTimeFieldsToTime@8
RtlTimeToElapsedTimeFields@8
RtlTimeToSecondsSince1970@8
RtlTimeToSecondsSince1980@8
RtlTimeToTimeFields@8
RtlTraceDatabaseAdd@16
RtlTraceDatabaseCreate@20
RtlTraceDatabaseDestroy@4
RtlTraceDatabaseEnumerate@12
RtlTraceDatabaseFind@16
RtlTraceDatabaseLock@4
RtlTraceDatabaseUnlock@4
RtlTraceDatabaseValidate@4
RtlUTF8ToUnicodeN@20
RtlUnicodeStringToAnsiSize@4
RtlUnicodeStringToAnsiString@12
RtlUnicodeStringToCountedOemString@12
RtlUnicodeStringToInteger@12
RtlUnicodeStringToOemSize@4
RtlUnicodeStringToOemString@12
RtlUnicodeToCustomCPN@24
RtlUnicodeToMultiByteN@20
RtlUnicodeToMultiByteSize@12
RtlUnicodeToOemN@20
RtlUnicodeToUTF8N@20
RtlUnlockBootStatusData@4
RtlUnwind@16
RtlUpcaseUnicodeChar@4
RtlUpcaseUnicodeString@12
RtlUpcaseUnicodeStringToAnsiString@12
RtlUpcaseUnicodeStringToCountedOemString@12
RtlUpcaseUnicodeStringToOemString@12
RtlUpcaseUnicodeToCustomCPN@24
RtlUpcaseUnicodeToMultiByteN@20
RtlUpcaseUnicodeToOemN@20
RtlUpperChar@4
RtlUpperString@8
RtlValidRelativeSecurityDescriptor@12
RtlValidSecurityDescriptor@4
RtlValidSid@4
RtlValidateUnicodeString@8
RtlVerifyVersionInfo@16
RtlVolumeDeviceToDosName@8
RtlWalkFrameChain@12
RtlWeaklyEnumerateEntryHashTable@8
RtlWriteRegistryValue@24
RtlZeroHeap@8
RtlZeroMemory@8
RtlxAnsiStringToUnicodeSize@4
RtlxOemStringToUnicodeSize@4
RtlxUnicodeStringToAnsiSize@4
RtlxUnicodeStringToOemSize@4
SeAccessCheck@40
SeAccessCheckEx@24
SeAccessCheckFromState@40
SeAccessCheckWithHint@44
SeAppendPrivileges@8
SeAssignSecurity@28
SeAssignSecurityEx@36
SeAuditHardLinkCreation@12
SeAuditHardLinkCreationWithTransaction@16
SeAuditTransactionStateChange@12
SeAuditingAnyFileEventsWithContext@8
SeAuditingFileEvents@8
SeAuditingFileEventsWithContext@12
SeAuditingFileOrGlobalEvents@12
SeAuditingHardLinkEvents@8
SeAuditingHardLinkEventsWithContext@12
SeCaptureSecurityDescriptor@20
SeCaptureSubjectContext@4
SeCaptureSubjectContextEx@12
SeCloseObjectAuditAlarm@12
SeCloseObjectAuditAlarmForNonObObject@16
SeComputeAutoInheritByObjectType@12
SeCreateAccessState@16
SeCreateAccessStateEx@24
SeCreateClientSecurity@16
SeCreateClientSecurityFromSubjectContext@16
SeDeassignSecurity@4
SeDeleteAccessState@4
SeDeleteObjectAuditAlarm@8
SeDeleteObjectAuditAlarmWithTransaction@12
SeExamineSacl@24
SeExports DATA
SeFilterToken@24
SeFreePrivileges@4
SeGetLinkedToken@12
SeImpersonateClient@8
SeImpersonateClientEx@8
SeLocateProcessImageName@8
SeLockSubjectContext@4
SeMarkLogonSessionForTerminationNotification@4
SeOpenObjectAuditAlarm@36
SeOpenObjectAuditAlarmForNonObObject@44
SeOpenObjectAuditAlarmWithTransaction@40
SeOpenObjectForDeleteAuditAlarm@36
SeOpenObjectForDeleteAuditAlarmWithTransaction@40
SePrivilegeCheck@12
SePrivilegeObjectAuditAlarm@24
SePublicDefaultDacl DATA
SeQueryAuthenticationIdToken@8
SeQueryInformationToken@12
SeQuerySecurityAttributesToken@24
SeQuerySecurityDescriptorInfo@16
SeQuerySessionIdToken@8
SeRegisterLogonSessionTerminatedRoutine@4
SeReleaseSecurityDescriptor@12
SeReleaseSubjectContext@4
SeReportSecurityEvent@16
SeReportSecurityEventWithSubCategory@20
SeSetAccessStateGenericMapping@8
SeSetAuditParameter@16
SeSetSecurityAttributesToken@16
SeSetSecurityDescriptorInfo@24
SeSetSecurityDescriptorInfoEx@28
SeSinglePrivilegeCheck@12
SeSrpAccessCheck@24
SeSystemDefaultDacl DATA
SeTokenImpersonationLevel@4
SeTokenIsAdmin@4
SeTokenIsRestricted@4
SeTokenIsWriteRestricted@4
SeTokenObjectType DATA
SeTokenType@4
SeUnlockSubjectContext@4
SeUnregisterLogonSessionTerminatedRoutine@4
SeValidSecurityDescriptor@8
TmCancelPropagationRequest@4
TmCommitComplete@8
TmCommitEnlistment@8
TmCommitTransaction@8
TmCreateEnlistment@36
TmCurrentTransaction@4
TmDereferenceEnlistmentKey@8
TmEnableCallbacks@12
TmEndPropagationRequest@4
TmEnlistmentObjectType DATA
TmFreezeTransactions@12
TmGetTransactionId@8
TmInitSystem@0
TmInitSystemPhase2@0
TmInitializeResourceManager@20
TmInitializeTransaction@36
TmIsTransactionActive@4
TmPrePrepareComplete@8
TmPrePrepareEnlistment@8
TmPrepareComplete@8
TmPrepareEnlistment@8
TmPropagationComplete@16
TmPropagationFailed@12
TmReadOnlyEnlistment@8
TmRecoverEnlistment@8
TmRecoverResourceManager@4
TmRecoverTransactionManager@8
TmReferenceEnlistmentKey@8
TmRequestOutcomeEnlistment@8
TmResourceManagerObjectType DATA
TmRollbackComplete@8
TmRollbackEnlistment@8
TmRollbackTransaction@8
TmSetCurrentTransaction@4
TmThawTransactions@0
TmTransactionManagerObjectType DATA
TmTransactionObjectType DATA
TmpIsKTMCommitCoordinator@4
VerSetConditionMask@16
VfFailDeviceNode@0
VfFailDriver@0
VfFailSystemBIOS@0
VfIsVerificationEnabled@8
WRITE_REGISTER_BUFFER_UCHAR@12
WRITE_REGISTER_BUFFER_ULONG@12
WRITE_REGISTER_BUFFER_USHORT@12
WRITE_REGISTER_UCHAR@8
WRITE_REGISTER_ULONG@8
WRITE_REGISTER_USHORT@8
WheaAddErrorSource@8
WheaConfigureErrorSource@8
WheaGetErrorSource@4
WheaInitializeRecordHeader@4
WheaReportHwError@4
WmiQueryTraceInformation@20
WmiTraceMessage
WmiTraceMessageVa@24
XIPDispatch@12
ZwAccessCheckAndAuditAlarm@44
ZwAddBootEntry@8
ZwAddDriverEntry@8
ZwAdjustPrivilegesToken@24
ZwAlertThread@4
ZwAllocateLocallyUniqueId@4
ZwAllocateVirtualMemory@24
ZwAlpcAcceptConnectPort@36
ZwAlpcCancelMessage@12
ZwAlpcConnectPort@44
ZwAlpcCreatePort@12
ZwAlpcCreatePortSection@24
ZwAlpcCreateResourceReserve@16
ZwAlpcCreateSectionView@12
ZwAlpcCreateSecurityContext@12
ZwAlpcDeletePortSection@12
ZwAlpcDeleteResourceReserve@12
ZwAlpcDeleteSectionView@12
ZwAlpcDeleteSecurityContext@12
ZwAlpcDisconnectPort@8
ZwAlpcQueryInformation@20
ZwAlpcSendWaitReceivePort@32
ZwAlpcSetInformation@16
ZwAssignProcessToJobObject@8
ZwCancelIoFile@8
ZwCancelTimer@8
ZwClearEvent@4
ZwClose@4
ZwCloseObjectAuditAlarm@12
ZwCommitComplete@8
ZwCommitEnlistment@8
ZwCommitTransaction@8
ZwConnectPort@32
ZwCreateDirectoryObject@12
ZwCreateEnlistment@32
ZwCreateEvent@20
ZwCreateFile@44
ZwCreateIoCompletion@16
ZwCreateJobObject@12
ZwCreateKey@28
ZwCreateKeyTransacted@32
ZwCreateResourceManager@28
ZwCreateSection@28
ZwCreateSymbolicLinkObject@16
ZwCreateTimer@16
ZwCreateTransaction@40
ZwCreateTransactionManager@24
ZwDeleteBootEntry@4
ZwDeleteDriverEntry@4
ZwDeleteFile@4
ZwDeleteKey@4
ZwDeleteValueKey@8
ZwDeviceIoControlFile@40
ZwDisplayString@4
ZwDuplicateObject@28
ZwDuplicateToken@24
ZwEnumerateBootEntries@8
ZwEnumerateDriverEntries@8
ZwEnumerateKey@24
ZwEnumerateTransactionObject@20
ZwEnumerateValueKey@24
ZwFlushBuffersFile@8
ZwFlushInstructionCache@12
ZwFlushKey@4
ZwFlushVirtualMemory@16
ZwFreeVirtualMemory@16
ZwFsControlFile@40
ZwGetNotificationResourceManager@28
ZwImpersonateAnonymousToken@4
ZwInitiatePowerAction@16
ZwIsProcessInJob@8
ZwLoadDriver@4
ZwLoadKey@8
ZwLoadKeyEx@32
ZwLockFile@40
ZwLockProductActivationKeys@8
ZwMakeTemporaryObject@4
ZwMapViewOfSection@40
ZwModifyBootEntry@4
ZwModifyDriverEntry@4
ZwNotifyChangeKey@40
ZwNotifyChangeSession@32
ZwOpenDirectoryObject@12
ZwOpenEnlistment@20
ZwOpenEvent@12
ZwOpenFile@24
ZwOpenJobObject@12
ZwOpenKey@12
ZwOpenKeyEx@16
ZwOpenKeyTransacted@16
ZwOpenKeyTransactedEx@20
ZwOpenProcess@16
ZwOpenProcessToken@12
ZwOpenProcessTokenEx@16
ZwOpenResourceManager@20
ZwOpenSection@12
ZwOpenSession@12
ZwOpenSymbolicLinkObject@12
ZwOpenThread@16
ZwOpenThreadToken@16
ZwOpenThreadTokenEx@20
ZwOpenTimer@12
ZwOpenTransaction@20
ZwOpenTransactionManager@24
ZwPowerInformation@20
ZwPrePrepareComplete@8
ZwPrePrepareEnlistment@8
ZwPrepareComplete@8
ZwPrepareEnlistment@8
ZwPropagationComplete@16
ZwPropagationFailed@12
ZwPulseEvent@8
ZwQueryBootEntryOrder@8
ZwQueryBootOptions@8
ZwQueryDefaultLocale@8
ZwQueryDefaultUILanguage@4
ZwQueryDirectoryFile@44
ZwQueryDirectoryObject@28
ZwQueryDriverEntryOrder@8
ZwQueryEaFile@36
ZwQueryFullAttributesFile@8
ZwQueryInformationEnlistment@20
ZwQueryInformationFile@20
ZwQueryInformationJobObject@20
ZwQueryInformationProcess@20
ZwQueryInformationResourceManager@20
ZwQueryInformationThread@20
ZwQueryInformationToken@20
ZwQueryInformationTransaction@20
ZwQueryInformationTransactionManager@20
ZwQueryInstallUILanguage@4
ZwQueryKey@20
ZwQueryLicenseValue@20
ZwQueryObject@20
ZwQueryQuotaInformationFile@36
ZwQuerySection@20
ZwQuerySecurityAttributesToken@24
ZwQuerySecurityObject@20
ZwQuerySymbolicLinkObject@12
ZwQuerySystemInformation@16
ZwQueryValueKey@24
ZwQueryVirtualMemory@24
ZwQueryVolumeInformationFile@20
ZwReadFile@36
ZwReadOnlyEnlistment@8
ZwRecoverEnlistment@8
ZwRecoverResourceManager@4
ZwRecoverTransactionManager@4
ZwRemoveIoCompletion@20
ZwRemoveIoCompletionEx@24
ZwReplaceKey@12
ZwRequestPort@8
ZwRequestWaitReplyPort@12
ZwResetEvent@8
ZwRestoreKey@12
ZwRollbackComplete@8
ZwRollbackEnlistment@8
ZwRollbackTransaction@8
ZwSaveKey@8
ZwSaveKeyEx@12
ZwSecureConnectPort@36
ZwSetBootEntryOrder@8
ZwSetBootOptions@8
ZwSetDefaultLocale@8
ZwSetDefaultUILanguage@4
ZwSetDriverEntryOrder@8
ZwSetEaFile@16
ZwSetEvent@8
ZwSetInformationEnlistment@16
ZwSetInformationFile@20
ZwSetInformationJobObject@16
ZwSetInformationObject@16
ZwSetInformationProcess@16
ZwSetInformationResourceManager@16
ZwSetInformationThread@16
ZwSetInformationToken@16
ZwSetInformationTransaction@16
ZwSetQuotaInformationFile@16
ZwSetSecurityObject@12
ZwSetSystemInformation@12
ZwSetSystemTime@8
ZwSetTimer@28
ZwSetTimerEx@16
ZwSetValueKey@24
ZwSetVolumeInformationFile@20
ZwTerminateJobObject@8
ZwTerminateProcess@8
ZwTraceEvent@16
ZwTranslateFilePath@16
ZwUnloadDriver@4
ZwUnloadKey@4
ZwUnloadKeyEx@8
ZwUnlockFile@20
ZwUnmapViewOfSection@8
ZwWaitForMultipleObjects@20
ZwWaitForSingleObject@12
ZwWriteFile@36
ZwYieldExecution@0
_CIcos
_CIsin
_CIsqrt
_abnormal_termination
_alldiv@16
_alldvrm@16
_allmul@16
_alloca_probe
_alloca_probe_16
_alloca_probe_8
_allrem@16
_allshl
_allshr
_aulldiv@16
_aulldvrm@16
_aullrem@16
_aullshr
;_chkstk
_except_handler2
_except_handler3
_global_unwind2
_i64toa_s
_i64tow_s
_itoa
_itoa_s
_itow
_itow_s
_local_unwind2
_ltoa_s
_ltow_s
_makepath_s
_purecall
_snprintf
_snprintf_s
_snscanf_s
_snwprintf
_snwprintf_s
_snwscanf_s
_splitpath_s
_stricmp
_strlwr
strlwr == _strlwr
_strnicmp
_strnset
_strnset_s
_strrev
_strset
_strset_s
_strtoui64
_strupr
_swprintf
_ui64toa_s
_ui64tow_s
_ultoa_s
_ultow_s
_vsnprintf
_vsnprintf_s
_vsnwprintf
_vsnwprintf_s
_vswprintf
_wcsicmp
_wcslwr
wcslwr == _wcslwr
_wcsnicmp
_wcsnset
_wcsnset_s
_wcsrev
_wcsset_s
_wcsupr
_wmakepath_s
_wsplitpath_s
_wtoi
_wtol
atoi
atol
bsearch
isdigit
islower
isprint
isspace
isupper
isxdigit
mbstowcs
mbtowc
memchr
memcpy
memcpy_s
memmove
memmove_s
memset
psMUITest DATA
qsort
rand
sprintf
sprintf_s
srand
sscanf_s
strcat
strcat_s
strchr
strcmp
strcpy
strcpy_s
strlen
strncat
strncat_s
strncmp
strncpy
strncpy_s
strnlen
strrchr
strspn
strstr
strtok_s
swprintf
swprintf_s
swscanf_s
tolower
toupper
towlower
towupper
vDbgPrintEx@16
vDbgPrintExWithPrefix@20
vsprintf
vsprintf_s
vswprintf_s
wcscat
wcscat_s
wcschr
wcscmp
wcscpy
wcscpy_s
wcscspn
wcslen
wcsncat
wcsncat_s
wcsncmp
wcsncpy
wcsncpy_s
wcsnlen
wcsrchr
wcsspn
wcsstr
wcstombs
wcstoul
wctomb