| ; |
| ; Definition file of ntoskrnl.exe |
| ; Automatic generated by gendef |
| ; written by Kai Tietz 2008 |
| ; |
| LIBRARY "ntoskrnl.exe" |
| EXPORTS |
| CcCanIWrite |
| CcCopyRead |
| CcCopyWrite |
| CcDeferWrite |
| CcFastCopyRead |
| CcFastCopyWrite |
| CcFastMdlReadWait DATA |
| CcFastReadNotPossible DATA |
| CcFastReadWait DATA |
| CcFlushCache |
| CcGetDirtyPages |
| CcGetFileObjectFromBcb |
| CcGetFileObjectFromSectionPtrs |
| CcGetFlushedValidData |
| CcGetLsnForFileObject |
| CcInitializeCacheMap |
| CcIsThereDirtyData |
| CcMapData |
| CcMdlRead |
| CcMdlReadComplete |
| CcMdlWriteAbort |
| CcMdlWriteComplete |
| CcPinMappedData |
| CcPinRead |
| CcPrepareMdlWrite |
| CcPreparePinWrite |
| CcPurgeCacheSection |
| CcRemapBcb |
| CcRepinBcb |
| CcScheduleReadAhead |
| CcSetAdditionalCacheAttributes |
| CcSetBcbOwnerPointer |
| CcSetDirtyPageThreshold |
| CcSetDirtyPinnedData |
| CcSetFileSizes |
| CcSetLogHandleForFile |
| CcSetReadAheadGranularity |
| CcUninitializeCacheMap |
| CcUnpinData |
| CcUnpinDataForThread |
| CcUnpinRepinnedBcb |
| CcWaitForCurrentLazyWriterActivity |
| CcZeroData |
| CmRegisterCallback |
| CmUnRegisterCallback |
| DbgBreakPoint |
| DbgBreakPointWithStatus |
| DbgCommandString |
| DbgLoadImageSymbols |
| DbgPrint |
| DbgPrintEx |
| DbgPrintReturnControlC |
| DbgPrompt |
| DbgQueryDebugFilterState |
| DbgSetDebugFilterState |
| ExAcquireFastMutex |
| ExAcquireFastMutexUnsafe |
| ExAcquireResourceExclusiveLite |
| ExAcquireResourceSharedLite |
| ExAcquireRundownProtection |
| ExAcquireRundownProtectionCacheAware |
| ExAcquireRundownProtectionCacheAwareEx |
| ExAcquireRundownProtectionEx |
| ExAcquireSharedStarveExclusive |
| ExAcquireSharedWaitForExclusive |
| ExAllocateCacheAwareRundownProtection |
| ExAllocateFromPagedLookasideList |
| ExAllocatePool |
| ExAllocatePoolWithQuota |
| ExAllocatePoolWithQuotaTag |
| ExAllocatePoolWithTag |
| ExAllocatePoolWithTagPriority |
| ExConvertExclusiveToSharedLite |
| ExCreateCallback |
| ExDeleteNPagedLookasideList |
| ExDeletePagedLookasideList |
| ExDeleteResourceLite |
| ExDesktopObjectType DATA |
| ExDisableResourceBoostLite |
| ExEnterCriticalRegionAndAcquireFastMutexUnsafe |
| ExEnterCriticalRegionAndAcquireResourceExclusive |
| ExEnterCriticalRegionAndAcquireResourceShared |
| ExEnterCriticalRegionAndAcquireSharedWaitForExclusive |
| ExEnumHandleTable |
| ExEventObjectType DATA |
| ExExtendZone |
| ExFreeCacheAwareRundownProtection |
| ExFreePool |
| ExFreePoolWithTag |
| ExFreeToPagedLookasideList |
| ExGetCurrentProcessorCounts |
| ExGetCurrentProcessorCpuUsage |
| ExGetExclusiveWaiterCount |
| ExGetPreviousMode |
| ExGetSharedWaiterCount |
| ExInitializeNPagedLookasideList |
| ExInitializePagedLookasideList |
| ExInitializeResourceLite |
| ExInitializeRundownProtection |
| ExInitializeRundownProtectionCacheAware |
| ExInitializeZone |
| ExInterlockedAddLargeInteger |
| ExInterlockedAddUlong |
| ExInterlockedExtendZone |
| ExInterlockedInsertHeadList |
| ExInterlockedInsertTailList |
| ExInterlockedPopEntryList |
| ExInterlockedPushEntryList |
| ExInterlockedRemoveHeadList |
| ExIsProcessorFeaturePresent |
| ExIsResourceAcquiredExclusiveLite |
| ExIsResourceAcquiredSharedLite |
| ExLocalTimeToSystemTime |
| ExNotifyCallback |
| ExQueryDepthSList |
| ExQueryPoolBlockSize |
| ExQueueWorkItem |
| ExRaiseAccessViolation |
| ExRaiseDatatypeMisalignment |
| ExRaiseException |
| ExRaiseHardError |
| ExRaiseStatus |
| ExReInitializeRundownProtection |
| ExReInitializeRundownProtectionCacheAware |
| ExRegisterCallback |
| ExReinitializeResourceLite |
| ExReleaseFastMutex |
| ExReleaseFastMutexUnsafe |
| ExReleaseFastMutexUnsafeAndLeaveCriticalRegion |
| ExReleaseResourceAndLeaveCriticalRegion |
| ExReleaseResourceForThreadLite |
| ExReleaseResourceLite |
| ExReleaseRundownProtection |
| ExReleaseRundownProtectionCacheAware |
| ExReleaseRundownProtectionCacheAwareEx |
| ExReleaseRundownProtectionEx |
| ExRundownCompleted |
| ExRundownCompletedCacheAware |
| ExSemaphoreObjectType DATA |
| ExSetResourceOwnerPointer |
| ExSetTimerResolution |
| ExSizeOfRundownProtectionCacheAware |
| ExSystemExceptionFilter |
| ExSystemTimeToLocalTime |
| ExTryToAcquireFastMutex |
| ExUnregisterCallback |
| ExUuidCreate |
| ExVerifySuite |
| ExWaitForRundownProtectionRelease |
| ExWaitForRundownProtectionReleaseCacheAware |
| ExWindowStationObjectType DATA |
| ExfAcquirePushLockExclusive |
| ExfAcquirePushLockShared |
| ExfReleasePushLock |
| ExfReleasePushLockExclusive |
| ExfReleasePushLockShared |
| ExfTryToWakePushLock |
| ExfUnblockPushLock |
| ExpInterlockedFlushSList |
| ExpInterlockedPopEntrySList |
| ExpInterlockedPushEntrySList |
| FsRtlAcquireFileExclusive |
| FsRtlAddBaseMcbEntry |
| FsRtlAddLargeMcbEntry |
| FsRtlAddMcbEntry |
| FsRtlAddToTunnelCache |
| FsRtlAllocateFileLock |
| FsRtlAllocatePool |
| FsRtlAllocatePoolWithQuota |
| FsRtlAllocatePoolWithQuotaTag |
| FsRtlAllocatePoolWithTag |
| FsRtlAllocateResource |
| FsRtlAreNamesEqual |
| FsRtlBalanceReads |
| FsRtlCheckLockForReadAccess |
| FsRtlCheckLockForWriteAccess |
| FsRtlCheckOplock |
| FsRtlCopyRead |
| FsRtlCopyWrite |
| FsRtlCreateSectionForDataScan |
| FsRtlCurrentBatchOplock |
| FsRtlDeleteKeyFromTunnelCache |
| FsRtlDeleteTunnelCache |
| FsRtlDeregisterUncProvider |
| FsRtlDissectDbcs |
| FsRtlDissectName |
| FsRtlDoesDbcsContainWildCards |
| FsRtlDoesNameContainWildCards |
| FsRtlFastCheckLockForRead |
| FsRtlFastCheckLockForWrite |
| FsRtlFastUnlockAll |
| FsRtlFastUnlockAllByKey |
| FsRtlFastUnlockSingle |
| FsRtlFindInTunnelCache |
| FsRtlFreeFileLock |
| FsRtlGetFileSize |
| FsRtlGetNextBaseMcbEntry |
| FsRtlGetNextFileLock |
| FsRtlGetNextLargeMcbEntry |
| FsRtlGetNextMcbEntry |
| FsRtlIncrementCcFastReadNoWait |
| FsRtlIncrementCcFastReadNotPossible |
| FsRtlIncrementCcFastReadResourceMiss |
| FsRtlIncrementCcFastReadWait |
| FsRtlInitializeBaseMcb |
| FsRtlInitializeFileLock |
| FsRtlInitializeLargeMcb |
| FsRtlInitializeMcb |
| FsRtlInitializeOplock |
| FsRtlInitializeTunnelCache |
| FsRtlInsertPerFileObjectContext |
| FsRtlInsertPerStreamContext |
| FsRtlIsDbcsInExpression |
| FsRtlIsFatDbcsLegal |
| FsRtlIsHpfsDbcsLegal |
| FsRtlIsNameInExpression |
| FsRtlIsNtstatusExpected |
| FsRtlIsPagingFile |
| FsRtlIsTotalDeviceFailure |
| FsRtlLegalAnsiCharacterArray DATA |
| FsRtlLookupBaseMcbEntry |
| FsRtlLookupLargeMcbEntry |
| FsRtlLookupLastBaseMcbEntry |
| FsRtlLookupLastBaseMcbEntryAndIndex |
| FsRtlLookupLastLargeMcbEntry |
| FsRtlLookupLastLargeMcbEntryAndIndex |
| FsRtlLookupLastMcbEntry |
| FsRtlLookupMcbEntry |
| FsRtlLookupPerFileObjectContext |
| FsRtlLookupPerStreamContextInternal |
| FsRtlMdlRead |
| FsRtlMdlReadComplete |
| FsRtlMdlReadCompleteDev |
| FsRtlMdlReadDev |
| FsRtlMdlWriteComplete |
| FsRtlMdlWriteCompleteDev |
| FsRtlNormalizeNtstatus |
| FsRtlNotifyChangeDirectory |
| FsRtlNotifyCleanup |
| FsRtlNotifyFilterChangeDirectory |
| FsRtlNotifyFilterReportChange |
| FsRtlNotifyFullChangeDirectory |
| FsRtlNotifyFullReportChange |
| FsRtlNotifyInitializeSync |
| FsRtlNotifyReportChange |
| FsRtlNotifyUninitializeSync |
| FsRtlNotifyVolumeEvent |
| FsRtlNumberOfRunsInBaseMcb |
| FsRtlNumberOfRunsInLargeMcb |
| FsRtlNumberOfRunsInMcb |
| FsRtlOplockFsctrl |
| FsRtlOplockIsFastIoPossible |
| FsRtlPostPagingFileStackOverflow |
| FsRtlPostStackOverflow |
| FsRtlPrepareMdlWrite |
| FsRtlPrepareMdlWriteDev |
| FsRtlPrivateLock |
| FsRtlProcessFileLock |
| FsRtlRegisterFileSystemFilterCallbacks |
| FsRtlRegisterUncProvider |
| FsRtlReleaseFile |
| FsRtlRemoveBaseMcbEntry |
| FsRtlRemoveLargeMcbEntry |
| FsRtlRemoveMcbEntry |
| FsRtlRemovePerFileObjectContext |
| FsRtlRemovePerStreamContext |
| FsRtlResetBaseMcb |
| FsRtlResetLargeMcb |
| FsRtlSplitBaseMcb |
| FsRtlSplitLargeMcb |
| FsRtlSyncVolumes |
| FsRtlTeardownPerStreamContexts |
| FsRtlTruncateBaseMcb |
| FsRtlTruncateLargeMcb |
| FsRtlTruncateMcb |
| FsRtlUninitializeBaseMcb |
| FsRtlUninitializeFileLock |
| FsRtlUninitializeLargeMcb |
| FsRtlUninitializeMcb |
| FsRtlUninitializeOplock |
| HalDispatchTable DATA |
| HalExamineMBR |
| HalPrivateDispatchTable DATA |
| HeadlessDispatch |
| InbvAcquireDisplayOwnership |
| InbvCheckDisplayOwnership |
| InbvDisplayString |
| InbvEnableBootDriver |
| InbvEnableDisplayString |
| InbvInstallDisplayStringFilter |
| InbvIsBootDriverInstalled |
| InbvNotifyDisplayOwnershipLost |
| InbvResetDisplay |
| InbvSetScrollRegion |
| InbvSetTextColor |
| InbvSolidColorFill |
| InitSafeBootMode DATA |
| InitializeSListHead |
| IoAcquireCancelSpinLock |
| IoAcquireRemoveLockEx |
| IoAcquireVpbSpinLock |
| IoAdapterObjectType DATA |
| IoAllocateAdapterChannel |
| IoAllocateController |
| IoAllocateDriverObjectExtension |
| IoAllocateErrorLogEntry |
| IoAllocateIrp |
| IoAllocateMdl |
| IoAllocateWorkItem |
| IoAssignDriveLetters |
| IoAssignResources |
| IoAttachDevice |
| IoAttachDeviceByPointer |
| IoAttachDeviceToDeviceStack |
| IoAttachDeviceToDeviceStackSafe |
| IoBuildAsynchronousFsdRequest |
| IoBuildDeviceIoControlRequest |
| IoBuildPartialMdl |
| IoBuildSynchronousFsdRequest |
| IoCallDriver |
| IoCancelFileOpen |
| IoCancelIrp |
| IoCheckDesiredAccess |
| IoCheckEaBufferValidity |
| IoCheckFunctionAccess |
| IoCheckQuerySetFileInformation |
| IoCheckQuerySetVolumeInformation |
| IoCheckQuotaBufferValidity |
| IoCheckShareAccess |
| IoCompleteRequest |
| IoConnectInterrupt |
| IoCreateController |
| IoCreateDevice |
| IoCreateDisk |
| IoCreateDriver |
| IoCreateFile |
| IoCreateFileSpecifyDeviceObjectHint |
| IoCreateNotificationEvent |
| IoCreateStreamFileObject |
| IoCreateStreamFileObjectEx |
| IoCreateStreamFileObjectLite |
| IoCreateSymbolicLink |
| IoCreateSynchronizationEvent |
| IoCreateUnprotectedSymbolicLink |
| IoCsqInitialize |
| IoCsqInitializeEx |
| IoCsqInsertIrp |
| IoCsqInsertIrpEx |
| IoCsqRemoveIrp |
| IoCsqRemoveNextIrp |
| IoDeleteController |
| IoDeleteDevice |
| IoDeleteDriver |
| IoDeleteSymbolicLink |
| IoDetachDevice |
| IoDeviceHandlerObjectSize DATA |
| IoDeviceHandlerObjectType DATA |
| IoDeviceObjectType DATA |
| IoDisconnectInterrupt |
| IoDriverObjectType DATA |
| IoEnqueueIrp |
| IoEnumerateDeviceObjectList |
| IoEnumerateRegisteredFiltersList |
| IoFastQueryNetworkAttributes |
| IoFileObjectType DATA |
| IoForwardAndCatchIrp |
| IoForwardIrpSynchronously |
| IoFreeController |
| IoFreeErrorLogEntry |
| IoFreeIrp |
| IoFreeMdl |
| IoFreeWorkItem |
| IoGetAttachedDevice |
| IoGetAttachedDeviceReference |
| IoGetBaseFileSystemDeviceObject |
| IoGetBootDiskInformation |
| IoGetConfigurationInformation |
| IoGetCurrentProcess |
| IoGetDeviceAttachmentBaseRef |
| IoGetDeviceInterfaceAlias |
| IoGetDeviceInterfaces |
| IoGetDeviceObjectPointer |
| IoGetDeviceProperty |
| IoGetDeviceToVerify |
| IoGetDiskDeviceObject |
| IoGetDmaAdapter |
| IoGetDriverObjectExtension |
| IoGetFileObjectGenericMapping |
| IoGetInitialStack |
| IoGetLowerDeviceObject |
| IoGetPagingIoPriority |
| IoGetRelatedDeviceObject |
| IoGetRequestorProcess |
| IoGetRequestorProcessId |
| IoGetRequestorSessionId |
| IoGetStackLimits |
| IoGetTopLevelIrp |
| IoInitializeIrp |
| IoInitializeRemoveLockEx |
| IoInitializeTimer |
| IoInvalidateDeviceRelations |
| IoInvalidateDeviceState |
| IoIs32bitProcess |
| IoIsFileOriginRemote |
| IoIsOperationSynchronous |
| IoIsSystemThread |
| IoIsValidNameGraftingBuffer |
| IoIsWdmVersionAvailable |
| IoMakeAssociatedIrp |
| IoOpenDeviceInterfaceRegistryKey |
| IoOpenDeviceRegistryKey |
| IoPageRead |
| IoPnPDeliverServicePowerNotification |
| IoQueryDeviceDescription |
| IoQueryFileDosDeviceName |
| IoQueryFileInformation |
| IoQueryVolumeInformation |
| IoQueueThreadIrp |
| IoQueueWorkItem |
| IoRaiseHardError |
| IoRaiseInformationalHardError |
| IoReadDiskSignature |
| IoReadOperationCount DATA |
| IoReadPartitionTable |
| IoReadPartitionTableEx |
| IoReadTransferCount DATA |
| IoRegisterBootDriverReinitialization |
| IoRegisterDeviceInterface |
| IoRegisterDriverReinitialization |
| IoRegisterFileSystem |
| IoRegisterFsRegistrationChange |
| IoRegisterLastChanceShutdownNotification |
| IoRegisterPlugPlayNotification |
| IoRegisterShutdownNotification |
| IoReleaseCancelSpinLock |
| IoReleaseRemoveLockAndWaitEx |
| IoReleaseRemoveLockEx |
| IoReleaseVpbSpinLock |
| IoRemoveShareAccess |
| IoReportDetectedDevice |
| IoReportHalResourceUsage |
| IoReportResourceForDetection |
| IoReportResourceUsage |
| IoReportTargetDeviceChange |
| IoReportTargetDeviceChangeAsynchronous |
| IoRequestDeviceEject |
| IoReuseIrp |
| IoSetCompletionRoutineEx |
| IoSetDeviceInterfaceState |
| IoSetDeviceToVerify |
| IoSetFileOrigin |
| IoSetHardErrorOrVerifyDevice |
| IoSetInformation |
| IoSetIoCompletion |
| IoSetPartitionInformation |
| IoSetPartitionInformationEx |
| IoSetShareAccess |
| IoSetStartIoAttributes |
| IoSetSystemPartition |
| IoSetThreadHardErrorMode |
| IoSetTopLevelIrp |
| IoStartNextPacket |
| IoStartNextPacketByKey |
| IoStartPacket |
| IoStartTimer |
| IoStatisticsLock DATA |
| IoStopTimer |
| IoSynchronousInvalidateDeviceRelations |
| IoSynchronousPageWrite |
| IoThreadToProcess |
| IoTranslateBusAddress |
| IoUnregisterFileSystem |
| IoUnregisterFsRegistrationChange |
| IoUnregisterPlugPlayNotification |
| IoUnregisterShutdownNotification |
| IoUpdateShareAccess |
| IoValidateDeviceIoControlAccess |
| IoVerifyPartitionTable |
| IoVerifyVolume |
| IoVolumeDeviceToDosName |
| IoWMIAllocateInstanceIds |
| IoWMIDeviceObjectToInstanceName |
| IoWMIDeviceObjectToProviderId |
| IoWMIExecuteMethod |
| IoWMIHandleToInstanceName |
| IoWMIOpenBlock |
| IoWMIQueryAllData |
| IoWMIQueryAllDataMultiple |
| IoWMIQuerySingleInstance |
| IoWMIQuerySingleInstanceMultiple |
| IoWMIRegistrationControl |
| IoWMISetNotificationCallback |
| IoWMISetSingleInstance |
| IoWMISetSingleItem |
| IoWMISuggestInstanceName |
| IoWMIWriteEvent |
| IoWriteErrorLogEntry |
| IoWriteOperationCount DATA |
| IoWritePartitionTable |
| IoWritePartitionTableEx |
| IoWriteTransferCount DATA |
| IofCallDriver |
| IofCompleteRequest |
| KdChangeOption |
| KdDebuggerEnabled DATA |
| KdDebuggerNotPresent DATA |
| KdDisableDebugger |
| KdEnableDebugger |
| KdEnteredDebugger DATA |
| KdPollBreakIn |
| KdPowerTransition |
| KdRefreshDebuggerNotPresent |
| KdSystemDebugControl |
| KeAcquireGuardedMutex |
| KeAcquireGuardedMutexUnsafe |
| KeAcquireInStackQueuedSpinLock |
| KeAcquireInStackQueuedSpinLockAtDpcLevel |
| KeAcquireInStackQueuedSpinLockForDpc |
| KeAcquireInStackQueuedSpinLockRaiseToSynch |
| KeAcquireInterruptSpinLock |
| KeAcquireQueuedSpinLock |
| KeAcquireQueuedSpinLockRaiseToSynch |
| KeAcquireSpinLockAtDpcLevel |
| KeAcquireSpinLockForDpc |
| KeAcquireSpinLockRaiseToDpc |
| KeAcquireSpinLockRaiseToSynch |
| KeAddSystemServiceTable |
| KeAreAllApcsDisabled |
| KeAreApcsDisabled |
| KeAttachProcess |
| KeBugCheck |
| KeBugCheckEx |
| KeCancelTimer |
| KeCapturePersistentThreadState |
| KeClearEvent |
| KeConnectInterrupt |
| KeDelayExecutionThread |
| KeDeregisterBugCheckCallback |
| KeDeregisterBugCheckReasonCallback |
| KeDeregisterNmiCallback |
| KeDetachProcess |
| KeDisconnectInterrupt |
| KeEnterCriticalRegion |
| KeEnterGuardedRegion |
| KeEnterKernelDebugger |
| KeExpandKernelStackAndCallout |
| KeFindConfigurationEntry |
| KeFindConfigurationNextEntry |
| KeFlushEntireTb |
| KeFlushQueuedDpcs |
| KeGenericCallDpc |
| KeGetCurrentIrql |
| KeGetCurrentThread |
| KeGetRecommendedSharedDataAlignment |
| KeInitializeApc |
| KeInitializeCrashDumpHeader |
| KeInitializeDeviceQueue |
| KeInitializeDpc |
| KeInitializeEvent |
| KeInitializeGuardedMutex |
| KeInitializeInterrupt |
| KeInitializeMutant |
| KeInitializeMutex |
| KeInitializeQueue |
| KeInitializeSemaphore |
| KeInitializeThreadedDpc |
| KeInitializeTimer |
| KeInitializeTimerEx |
| KeInsertByKeyDeviceQueue |
| KeInsertDeviceQueue |
| KeInsertHeadQueue |
| KeInsertQueue |
| KeInsertQueueApc |
| KeInsertQueueDpc |
| KeInvalidateAllCaches |
| KeIpiGenericCall |
| KeIsAttachedProcess |
| KeIsWaitListEmpty |
| KeLastBranchMSR DATA |
| KeLeaveCriticalRegion |
| KeLeaveGuardedRegion |
| KeLoaderBlock DATA |
| KeLowerIrql |
| KeNumberProcessors DATA |
| KeProfileInterruptWithSource |
| KePulseEvent |
| KeQueryActiveProcessors |
| KeQueryMultiThreadProcessorSet |
| KeQueryPrcbAddress |
| KeQueryPriorityThread |
| KeQueryRuntimeThread |
| KeQueryTimeIncrement |
| KeRaiseIrqlToDpcLevel |
| KeRaiseUserException |
| KeReadStateEvent |
| KeReadStateMutant |
| KeReadStateMutex |
| KeReadStateQueue |
| KeReadStateSemaphore |
| KeReadStateTimer |
| KeRegisterBugCheckCallback |
| KeRegisterBugCheckReasonCallback |
| KeRegisterNmiCallback |
| KeReleaseGuardedMutex |
| KeReleaseGuardedMutexUnsafe |
| KeReleaseInStackQueuedSpinLock |
| KeReleaseInStackQueuedSpinLockForDpc |
| KeReleaseInStackQueuedSpinLockFromDpcLevel |
| KeReleaseInterruptSpinLock |
| KeReleaseMutant |
| KeReleaseMutex |
| KeReleaseQueuedSpinLock |
| KeReleaseSemaphore |
| KeReleaseSpinLock |
| KeReleaseSpinLockForDpc |
| KeReleaseSpinLockFromDpcLevel |
| KeRemoveByKeyDeviceQueue |
| KeRemoveByKeyDeviceQueueIfBusy |
| KeRemoveDeviceQueue |
| KeRemoveEntryDeviceQueue |
| KeRemoveQueue |
| KeRemoveQueueDpc |
| KeRemoveSystemServiceTable |
| KeResetEvent |
| KeRestoreFloatingPointState |
| KeRevertToUserAffinityThread |
| KeRundownQueue |
| KeSaveFloatingPointState |
| KeSaveStateForHibernate |
| KeSetAffinityThread |
| KeSetBasePriorityThread |
| KeSetDmaIoCoherency |
| KeSetEvent |
| KeSetEventBoostPriority |
| KeSetIdealProcessorThread |
| KeSetImportanceDpc |
| KeSetKernelStackSwapEnable |
| KeSetPriorityThread |
| KeSetProfileIrql |
| KeSetSystemAffinityThread |
| KeSetTargetProcessorDpc |
| KeSetTimeIncrement |
| KeSetTimer |
| KeSetTimerEx |
| KeSignalCallDpcDone |
| KeSignalCallDpcSynchronize |
| KeStackAttachProcess |
| KeSynchronizeExecution |
| KeTerminateThread |
| KeTestSpinLock |
| KeTryToAcquireGuardedMutex |
| KeTryToAcquireQueuedSpinLock |
| KeTryToAcquireQueuedSpinLockRaiseToSynch |
| KeTryToAcquireSpinLockAtDpcLevel |
| KeUnstackDetachProcess |
| KeUpdateRunTime |
| KeUpdateSystemTime |
| KeUserModeCallback |
| KeWaitForMultipleObjects |
| KeWaitForMutexObject |
| KeWaitForSingleObject |
| KfRaiseIrql |
| KiBugCheckData DATA |
| KiCheckForKernelApcDelivery |
| KiCpuId |
| LdrAccessResource |
| LdrEnumResources |
| LdrFindResourceDirectory_U |
| LdrFindResource_U |
| LpcPortObjectType DATA |
| LpcRequestPort |
| LpcRequestWaitReplyPort |
| LsaCallAuthenticationPackage |
| LsaDeregisterLogonProcess |
| LsaFreeReturnBuffer |
| LsaLogonUser |
| LsaLookupAuthenticationPackage |
| LsaRegisterLogonProcess |
| Mm64BitPhysicalAddress DATA |
| MmAddPhysicalMemory |
| MmAddVerifierThunks |
| MmAdjustWorkingSetSize |
| MmAdvanceMdl |
| MmAllocateContiguousMemory |
| MmAllocateContiguousMemorySpecifyCache |
| MmAllocateMappingAddress |
| MmAllocateNonCachedMemory |
| MmAllocatePagesForMdl |
| MmAllocatePagesForMdlEx |
| MmBuildMdlForNonPagedPool |
| MmCanFileBeTruncated |
| MmCommitSessionMappedView |
| MmCreateMdl |
| MmCreateMirror |
| MmCreateSection |
| MmDisableModifiedWriteOfSection |
| MmDoesFileHaveUserWritableReferences |
| MmFlushImageSection |
| MmForceSectionClosed |
| MmFreeContiguousMemory |
| MmFreeContiguousMemorySpecifyCache |
| MmFreeMappingAddress |
| MmFreeNonCachedMemory |
| MmFreePagesFromMdl |
| MmGetPhysicalAddress |
| MmGetPhysicalMemoryRanges |
| MmGetSystemRoutineAddress |
| MmGetVirtualForPhysical |
| MmGrowKernelStack |
| MmHighestUserAddress DATA |
| MmIsAddressValid |
| MmIsDriverVerifying |
| MmIsIoSpaceActive |
| MmIsNonPagedSystemAddressValid |
| MmIsRecursiveIoFault |
| MmIsThisAnNtAsSystem |
| MmIsVerifierEnabled |
| MmLockPagableDataSection |
| MmLockPagableImageSection |
| MmLockPagableSectionByHandle |
| MmMapIoSpace |
| MmMapLockedPages |
| MmMapLockedPagesSpecifyCache |
| MmMapLockedPagesWithReservedMapping |
| MmMapMemoryDumpMdl |
| MmMapUserAddressesToPage |
| MmMapVideoDisplay |
| MmMapViewInSessionSpace |
| MmMapViewInSystemSpace |
| MmMapViewOfSection |
| MmMarkPhysicalMemoryAsBad |
| MmMarkPhysicalMemoryAsGood |
| MmPageEntireDriver |
| MmPrefetchPages |
| MmProbeAndLockPages |
| MmProbeAndLockProcessPages |
| MmProbeAndLockSelectedPages |
| MmProtectMdlSystemAddress |
| MmQuerySystemSize |
| MmRemovePhysicalMemory |
| MmResetDriverPaging |
| MmSectionObjectType DATA |
| MmSecureVirtualMemory |
| MmSetAddressRangeModified |
| MmSetBankedSection |
| MmSizeOfMdl |
| MmSystemRangeStart DATA |
| MmTrimAllSystemPagableMemory |
| MmUnlockPagableImageSection |
| MmUnlockPages |
| MmUnmapIoSpace |
| MmUnmapLockedPages |
| MmUnmapReservedMapping |
| MmUnmapVideoDisplay |
| MmUnmapViewInSessionSpace |
| MmUnmapViewInSystemSpace |
| MmUnmapViewOfSection |
| MmUnsecureVirtualMemory |
| MmUserProbeAddress DATA |
| NlsAnsiCodePage DATA |
| NlsLeadByteInfo DATA |
| NlsMbCodePageTag DATA |
| NlsMbOemCodePageTag DATA |
| NlsOemCodePage DATA |
| NlsOemLeadByteInfo DATA |
| NtAddAtom |
| NtAdjustPrivilegesToken |
| NtAllocateLocallyUniqueId |
| NtAllocateUuids |
| NtAllocateVirtualMemory |
| NtBuildNumber DATA |
| NtClose |
| NtConnectPort |
| NtCreateEvent |
| NtCreateFile |
| NtCreateSection |
| NtDeleteAtom |
| NtDeleteFile |
| NtDeviceIoControlFile |
| NtDuplicateObject |
| NtDuplicateToken |
| NtFindAtom |
| NtFreeVirtualMemory |
| NtFsControlFile |
| NtGlobalFlag DATA |
| NtLockFile |
| NtMakePermanentObject |
| NtMapViewOfSection |
| NtNotifyChangeDirectoryFile |
| NtOpenFile |
| NtOpenProcess |
| NtOpenProcessToken |
| NtOpenProcessTokenEx |
| NtOpenThread |
| NtOpenThreadToken |
| NtOpenThreadTokenEx |
| NtQueryDirectoryFile |
| NtQueryEaFile |
| NtQueryInformationAtom |
| NtQueryInformationFile |
| NtQueryInformationProcess |
| NtQueryInformationThread |
| NtQueryInformationToken |
| NtQueryQuotaInformationFile |
| NtQuerySecurityObject |
| NtQuerySystemInformation |
| NtQueryVolumeInformationFile |
| NtReadFile |
| NtRequestPort |
| NtRequestWaitReplyPort |
| NtSetEaFile |
| NtSetEvent |
| NtSetInformationFile |
| NtSetInformationProcess |
| NtSetInformationThread |
| NtSetQuotaInformationFile |
| NtSetSecurityObject |
| NtSetVolumeInformationFile |
| NtShutdownSystem |
| NtTraceEvent |
| NtUnlockFile |
| NtVdmControl |
| NtWaitForSingleObject |
| NtWriteFile |
| ObAssignSecurity |
| ObCheckCreateObjectAccess |
| ObCheckObjectAccess |
| ObCloseHandle |
| ObCreateObject |
| ObCreateObjectType |
| ObDeleteCapturedInsertInfo |
| ObDereferenceObject |
| ObDereferenceSecurityDescriptor |
| ObFindHandleForObject |
| ObGetObjectSecurity |
| ObInsertObject |
| ObLogSecurityDescriptor |
| ObMakeTemporaryObject |
| ObOpenObjectByName |
| ObOpenObjectByPointer |
| ObQueryNameString |
| ObQueryObjectAuditingByHandle |
| ObReferenceObjectByHandle |
| ObReferenceObjectByName |
| ObReferenceObjectByPointer |
| ObReferenceSecurityDescriptor |
| ObReleaseObjectSecurity |
| ObSetHandleAttributes |
| ObSetSecurityDescriptorInfo |
| ObSetSecurityObjectByPointer |
| ObfDereferenceObject |
| ObfReferenceObject |
| PfxFindPrefix |
| PfxInitialize |
| PfxInsertPrefix |
| PfxRemovePrefix |
| PoCallDriver |
| PoCancelDeviceNotify |
| PoQueueShutdownWorkItem |
| PoRegisterDeviceForIdleDetection |
| PoRegisterDeviceNotify |
| PoRegisterSystemState |
| PoRequestPowerIrp |
| PoRequestShutdownEvent |
| PoSetHiberRange |
| PoSetPowerState |
| PoSetSystemState |
| PoShutdownBugCheck |
| PoStartNextPowerIrp |
| PoUnregisterSystemState |
| ProbeForRead |
| ProbeForWrite |
| PsAssignImpersonationToken |
| PsChargePoolQuota |
| PsChargeProcessNonPagedPoolQuota |
| PsChargeProcessPagedPoolQuota |
| PsChargeProcessPoolQuota |
| PsCreateSystemProcess |
| PsCreateSystemThread |
| PsDereferenceImpersonationToken |
| PsDereferencePrimaryToken |
| PsDisableImpersonation |
| PsEstablishWin32Callouts |
| PsGetContextThread |
| PsGetCurrentProcess |
| PsGetCurrentProcessId |
| PsGetCurrentProcessSessionId |
| PsGetCurrentProcessWin32Process |
| PsGetCurrentProcessWow64Process |
| PsGetCurrentThread |
| PsGetCurrentThreadId |
| PsGetCurrentThreadPreviousMode |
| PsGetCurrentThreadProcess |
| PsGetCurrentThreadProcessId |
| PsGetCurrentThreadStackBase |
| PsGetCurrentThreadStackLimit |
| PsGetCurrentThreadTeb |
| PsGetCurrentThreadWin32Thread |
| PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion |
| PsGetJobLock |
| PsGetJobSessionId |
| PsGetJobUIRestrictionsClass |
| PsGetProcessCreateTimeQuadPart |
| PsGetProcessDebugPort |
| PsGetProcessExitProcessCalled |
| PsGetProcessExitStatus |
| PsGetProcessExitTime |
| PsGetProcessId |
| PsGetProcessImageFileName |
| PsGetProcessInheritedFromUniqueProcessId |
| PsGetProcessJob |
| PsGetProcessPeb |
| PsGetProcessPriorityClass |
| PsGetProcessSectionBaseAddress |
| PsGetProcessSecurityPort |
| PsGetProcessSessionId |
| PsGetProcessSessionIdEx |
| PsGetProcessWin32Process |
| PsGetProcessWin32WindowStation |
| PsGetProcessWow64Process |
| PsGetThreadFreezeCount |
| PsGetThreadHardErrorsAreDisabled |
| PsGetThreadId |
| PsGetThreadProcess |
| PsGetThreadProcessId |
| PsGetThreadSessionId |
| PsGetThreadTeb |
| PsGetThreadWin32Thread |
| PsGetVersion |
| PsImpersonateClient |
| PsInitialSystemProcess DATA |
| PsIsProcessBeingDebugged |
| PsIsSystemProcess |
| PsIsSystemThread |
| PsIsThreadImpersonating |
| PsIsThreadTerminating |
| PsJobType DATA |
| PsLookupProcessByProcessId |
| PsLookupProcessThreadByCid |
| PsLookupThreadByThreadId |
| PsProcessType DATA |
| PsReferenceImpersonationToken |
| PsReferencePrimaryToken |
| PsRemoveCreateThreadNotifyRoutine |
| PsRemoveLoadImageNotifyRoutine |
| PsRestoreImpersonation |
| PsReturnPoolQuota |
| PsReturnProcessNonPagedPoolQuota |
| PsReturnProcessPagedPoolQuota |
| PsRevertThreadToSelf |
| PsRevertToSelf |
| PsSetContextThread |
| PsSetCreateProcessNotifyRoutine |
| PsSetCreateThreadNotifyRoutine |
| PsSetJobUIRestrictionsClass |
| PsSetLegoNotifyRoutine |
| PsSetLoadImageNotifyRoutine |
| PsSetProcessPriorityByClass |
| PsSetProcessPriorityClass |
| PsSetProcessSecurityPort |
| PsSetProcessWin32Process |
| PsSetProcessWindowStation |
| PsSetThreadHardErrorsAreDisabled |
| PsSetThreadWin32Thread |
| PsTerminateSystemThread |
| PsThreadType DATA |
| PsWrapApcWow64Thread |
| RtlAbsoluteToSelfRelativeSD |
| RtlAddAccessAllowedAce |
| RtlAddAccessAllowedAceEx |
| RtlAddAce |
| RtlAddAtomToAtomTable |
| RtlAddRange |
| RtlAllocateHeap |
| RtlAnsiCharToUnicodeChar |
| RtlAnsiStringToUnicodeSize |
| RtlAnsiStringToUnicodeString |
| RtlAppendAsciizToString |
| RtlAppendStringToString |
| RtlAppendUnicodeStringToString |
| RtlAppendUnicodeToString |
| RtlAreAllAccessesGranted |
| RtlAreAnyAccessesGranted |
| RtlAreBitsClear |
| RtlAreBitsSet |
| RtlAssert |
| RtlCaptureContext |
| RtlCaptureStackBackTrace |
| RtlCharToInteger |
| RtlCheckRegistryKey |
| RtlClearAllBits |
| RtlClearBit |
| RtlClearBits |
| RtlCompareMemory |
| RtlCompareMemoryUlong |
| RtlCompareString |
| RtlCompareUnicodeString |
| RtlCompressBuffer |
| RtlCompressChunks |
| RtlConvertSidToUnicodeString |
| RtlCopyLuid |
| RtlCopyMemory |
| RtlCopyMemoryNonTemporal |
| RtlCopyRangeList |
| RtlCopySid |
| RtlCopyString |
| RtlCopyUnicodeString |
| RtlCreateAcl |
| RtlCreateAtomTable |
| RtlCreateHeap |
| RtlCreateRegistryKey |
| RtlCreateSecurityDescriptor |
| RtlCreateSystemVolumeInformationFolder |
| RtlCreateUnicodeString |
| RtlCustomCPToUnicodeN |
| RtlDecompressBuffer |
| RtlDecompressChunks |
| RtlDecompressFragment |
| RtlDelete |
| RtlDeleteAce |
| RtlDeleteAtomFromAtomTable |
| RtlDeleteElementGenericTable |
| RtlDeleteElementGenericTableAvl |
| RtlDeleteNoSplay |
| RtlDeleteOwnersRanges |
| RtlDeleteRange |
| RtlDeleteRegistryValue |
| RtlDescribeChunk |
| RtlDestroyAtomTable |
| RtlDestroyHeap |
| RtlDowncaseUnicodeString |
| RtlEmptyAtomTable |
| RtlEnumerateGenericTable |
| RtlEnumerateGenericTableAvl |
| RtlEnumerateGenericTableLikeADirectory |
| RtlEnumerateGenericTableWithoutSplaying |
| RtlEnumerateGenericTableWithoutSplayingAvl |
| RtlEqualLuid |
| RtlEqualSid |
| RtlEqualString |
| RtlEqualUnicodeString |
| RtlFillMemory |
| RtlFindClearBits |
| RtlFindClearBitsAndSet |
| RtlFindClearRuns |
| RtlFindFirstRunClear |
| RtlFindLastBackwardRunClear |
| RtlFindLeastSignificantBit |
| RtlFindLongestRunClear |
| RtlFindMessage |
| RtlFindMostSignificantBit |
| RtlFindNextForwardRunClear |
| RtlFindRange |
| RtlFindSetBits |
| RtlFindSetBitsAndClear |
| RtlFindUnicodePrefix |
| RtlFormatCurrentUserKeyPath |
| RtlFreeAnsiString |
| RtlFreeHeap |
| RtlFreeOemString |
| RtlFreeRangeList |
| RtlFreeUnicodeString |
| RtlGUIDFromString |
| RtlGenerate8dot3Name |
| RtlGetAce |
| RtlGetCallersAddress |
| RtlGetCompressionWorkSpaceSize |
| RtlGetDaclSecurityDescriptor |
| RtlGetDefaultCodePage |
| RtlGetElementGenericTable |
| RtlGetElementGenericTableAvl |
| RtlGetFirstRange |
| RtlGetGroupSecurityDescriptor |
| RtlGetNextRange |
| RtlGetNtGlobalFlags |
| RtlGetOwnerSecurityDescriptor |
| RtlGetSaclSecurityDescriptor |
| RtlGetSetBootStatusData |
| RtlGetVersion |
| RtlHashUnicodeString |
| RtlImageDirectoryEntryToData |
| RtlImageNtHeader |
| RtlInitAnsiString |
| RtlInitAnsiStringEx |
| RtlInitCodePageTable |
| RtlInitString |
| RtlInitUnicodeString |
| RtlInitUnicodeStringEx |
| RtlInitializeBitMap |
| RtlInitializeGenericTable |
| RtlInitializeGenericTableAvl |
| RtlInitializeRangeList |
| RtlInitializeSid |
| RtlInitializeUnicodePrefix |
| RtlInsertElementGenericTable |
| RtlInsertElementGenericTableAvl |
| RtlInsertElementGenericTableFull |
| RtlInsertElementGenericTableFullAvl |
| RtlInsertUnicodePrefix |
| RtlInt64ToUnicodeString |
| RtlIntegerToChar |
| RtlIntegerToUnicode |
| RtlIntegerToUnicodeString |
| RtlInvertRangeList |
| RtlIpv4AddressToStringA |
| RtlIpv4AddressToStringExA |
| RtlIpv4AddressToStringExW |
| RtlIpv4AddressToStringW |
| RtlIpv4StringToAddressA |
| RtlIpv4StringToAddressExA |
| RtlIpv4StringToAddressExW |
| RtlIpv4StringToAddressW |
| RtlIpv6AddressToStringA |
| RtlIpv6AddressToStringExA |
| RtlIpv6AddressToStringExW |
| RtlIpv6AddressToStringW |
| RtlIpv6StringToAddressA |
| RtlIpv6StringToAddressExA |
| RtlIpv6StringToAddressExW |
| RtlIpv6StringToAddressW |
| RtlIsGenericTableEmpty |
| RtlIsGenericTableEmptyAvl |
| RtlIsNameLegalDOS8Dot3 |
| RtlIsRangeAvailable |
| RtlIsValidOemCharacter |
| RtlLengthRequiredSid |
| RtlLengthSecurityDescriptor |
| RtlLengthSid |
| RtlLockBootStatusData |
| RtlLookupAtomInAtomTable |
| RtlLookupElementGenericTable |
| RtlLookupElementGenericTableAvl |
| RtlLookupElementGenericTableFull |
| RtlLookupElementGenericTableFullAvl |
| RtlLookupFunctionEntry |
| RtlMapGenericMask |
| RtlMapSecurityErrorToNtStatus |
| RtlMergeRangeLists |
| RtlMoveMemory |
| RtlMultiByteToUnicodeN |
| RtlMultiByteToUnicodeSize |
| RtlNextUnicodePrefix |
| RtlNtStatusToDosError |
| RtlNtStatusToDosErrorNoTeb |
| RtlNumberGenericTableElements |
| RtlNumberGenericTableElementsAvl |
| RtlNumberOfClearBits |
| RtlNumberOfSetBits |
| RtlOemStringToCountedUnicodeString |
| RtlOemStringToUnicodeSize |
| RtlOemStringToUnicodeString |
| RtlOemToUnicodeN |
| RtlPcToFileHeader |
| RtlPinAtomInAtomTable |
| RtlPrefetchMemoryNonTemporal |
| RtlPrefixString |
| RtlPrefixUnicodeString |
| RtlQueryAtomInAtomTable |
| RtlQueryRegistryValues |
| RtlQueryTimeZoneInformation |
| RtlRaiseException |
| RtlRandom |
| RtlRandomEx |
| RtlRealPredecessor |
| RtlRealSuccessor |
| RtlRemoveUnicodePrefix |
| RtlReserveChunk |
| RtlRestoreContext |
| RtlSecondsSince1970ToTime |
| RtlSecondsSince1980ToTime |
| RtlSelfRelativeToAbsoluteSD |
| RtlSelfRelativeToAbsoluteSD2 |
| RtlSetAllBits |
| RtlSetBit |
| RtlSetBits |
| RtlSetDaclSecurityDescriptor |
| RtlSetGroupSecurityDescriptor |
| RtlSetOwnerSecurityDescriptor |
| RtlSetSaclSecurityDescriptor |
| RtlSetTimeZoneInformation |
| RtlSizeHeap |
| RtlSplay |
| RtlStringFromGUID |
| RtlSubAuthorityCountSid |
| RtlSubAuthoritySid |
| RtlSubtreePredecessor |
| RtlSubtreeSuccessor |
| RtlTestBit |
| RtlTimeFieldsToTime |
| RtlTimeToElapsedTimeFields |
| RtlTimeToSecondsSince1970 |
| RtlTimeToSecondsSince1980 |
| RtlTimeToTimeFields |
| RtlTraceDatabaseAdd |
| RtlTraceDatabaseCreate |
| RtlTraceDatabaseDestroy |
| RtlTraceDatabaseEnumerate |
| RtlTraceDatabaseFind |
| RtlTraceDatabaseLock |
| RtlTraceDatabaseUnlock |
| RtlTraceDatabaseValidate |
| RtlUnicodeStringToAnsiSize |
| RtlUnicodeStringToAnsiString |
| RtlUnicodeStringToCountedOemString |
| RtlUnicodeStringToInteger |
| RtlUnicodeStringToOemSize |
| RtlUnicodeStringToOemString |
| RtlUnicodeToCustomCPN |
| RtlUnicodeToMultiByteN |
| RtlUnicodeToMultiByteSize |
| RtlUnicodeToOemN |
| RtlUnlockBootStatusData |
| RtlUnwind |
| RtlUnwindEx |
| RtlUpcaseUnicodeChar |
| RtlUpcaseUnicodeString |
| RtlUpcaseUnicodeStringToAnsiString |
| RtlUpcaseUnicodeStringToCountedOemString |
| RtlUpcaseUnicodeStringToOemString |
| RtlUpcaseUnicodeToCustomCPN |
| RtlUpcaseUnicodeToMultiByteN |
| RtlUpcaseUnicodeToOemN |
| RtlUpperChar |
| RtlUpperString |
| RtlValidRelativeSecurityDescriptor |
| RtlValidSecurityDescriptor |
| RtlValidSid |
| RtlVerifyVersionInfo |
| RtlVirtualUnwind |
| RtlVolumeDeviceToDosName |
| RtlWalkFrameChain |
| RtlWriteRegistryValue |
| RtlZeroHeap |
| RtlZeroMemory |
| RtlxAnsiStringToUnicodeSize |
| RtlxOemStringToUnicodeSize |
| RtlxUnicodeStringToAnsiSize |
| RtlxUnicodeStringToOemSize |
| SeAccessCheck |
| SeAppendPrivileges |
| SeAssignSecurity |
| SeAssignSecurityEx |
| SeAuditHardLinkCreation |
| SeAuditingFileEvents |
| SeAuditingFileEventsWithContext |
| SeAuditingFileOrGlobalEvents |
| SeAuditingHardLinkEvents |
| SeAuditingHardLinkEventsWithContext |
| SeCaptureSecurityDescriptor |
| SeCaptureSubjectContext |
| SeCloseObjectAuditAlarm |
| SeCreateAccessState |
| SeCreateClientSecurity |
| SeCreateClientSecurityFromSubjectContext |
| SeDeassignSecurity |
| SeDeleteAccessState |
| SeDeleteObjectAuditAlarm |
| SeExports DATA |
| SeFilterToken |
| SeFreePrivileges |
| SeImpersonateClient |
| SeImpersonateClientEx |
| SeLockSubjectContext |
| SeMarkLogonSessionForTerminationNotification |
| SeOpenObjectAuditAlarm |
| SeOpenObjectForDeleteAuditAlarm |
| SePrivilegeCheck |
| SePrivilegeObjectAuditAlarm |
| SePublicDefaultDacl DATA |
| SeQueryAuthenticationIdToken |
| SeQueryInformationToken |
| SeQuerySecurityDescriptorInfo |
| SeQuerySessionIdToken |
| SeRegisterLogonSessionTerminatedRoutine |
| SeReleaseSecurityDescriptor |
| SeReleaseSubjectContext |
| SeReportSecurityEvent |
| SeSetAccessStateGenericMapping |
| SeSetAuditParameter |
| SeSetSecurityDescriptorInfo |
| SeSetSecurityDescriptorInfoEx |
| SeSinglePrivilegeCheck |
| SeSystemDefaultDacl DATA |
| SeTokenImpersonationLevel |
| SeTokenIsAdmin |
| SeTokenIsRestricted |
| SeTokenObjectType DATA |
| SeTokenType |
| SeUnlockSubjectContext |
| SeUnregisterLogonSessionTerminatedRoutine |
| SeValidSecurityDescriptor |
| VerSetConditionMask |
| VfFailDeviceNode |
| VfFailDriver |
| VfFailSystemBIOS |
| VfIsVerificationEnabled |
| WmiFlushTrace |
| WmiGetClock |
| WmiQueryTrace |
| WmiQueryTraceInformation |
| WmiStartTrace |
| WmiStopTrace |
| WmiTraceFastEvent |
| WmiTraceMessage |
| WmiTraceMessageVa |
| WmiUpdateTrace |
| XIPDispatch |
| ZwAccessCheckAndAuditAlarm |
| ZwAddBootEntry |
| ZwAddDriverEntry |
| ZwAdjustPrivilegesToken |
| ZwAlertThread |
| ZwAllocateVirtualMemory |
| ZwAssignProcessToJobObject |
| ZwCancelIoFile |
| ZwCancelTimer |
| ZwClearEvent |
| ZwClose |
| ZwCloseObjectAuditAlarm |
| ZwConnectPort |
| ZwCreateDirectoryObject |
| ZwCreateEvent |
| ZwCreateFile |
| ZwCreateJobObject |
| ZwCreateKey |
| ZwCreateSection |
| ZwCreateSymbolicLinkObject |
| ZwCreateTimer |
| ZwDeleteBootEntry |
| ZwDeleteDriverEntry |
| ZwDeleteFile |
| ZwDeleteKey |
| ZwDeleteValueKey |
| ZwDeviceIoControlFile |
| ZwDisplayString |
| ZwDuplicateObject |
| ZwDuplicateToken |
| ZwEnumerateBootEntries |
| ZwEnumerateDriverEntries |
| ZwEnumerateKey |
| ZwEnumerateValueKey |
| ZwFlushInstructionCache |
| ZwFlushKey |
| ZwFlushVirtualMemory |
| ZwFreeVirtualMemory |
| ZwFsControlFile |
| ZwInitiatePowerAction |
| ZwIsProcessInJob |
| ZwLoadDriver |
| ZwLoadKey |
| ZwMakeTemporaryObject |
| ZwMapViewOfSection |
| ZwModifyBootEntry |
| ZwModifyDriverEntry |
| ZwNotifyChangeKey |
| ZwOpenDirectoryObject |
| ZwOpenEvent |
| ZwOpenFile |
| ZwOpenJobObject |
| ZwOpenKey |
| ZwOpenProcess |
| ZwOpenProcessToken |
| ZwOpenProcessTokenEx |
| ZwOpenSection |
| ZwOpenSymbolicLinkObject |
| ZwOpenThread |
| ZwOpenThreadToken |
| ZwOpenThreadTokenEx |
| ZwOpenTimer |
| ZwPowerInformation |
| ZwPulseEvent |
| ZwQueryBootEntryOrder |
| ZwQueryBootOptions |
| ZwQueryDefaultLocale |
| ZwQueryDefaultUILanguage |
| ZwQueryDirectoryFile |
| ZwQueryDirectoryObject |
| ZwQueryDriverEntryOrder |
| ZwQueryEaFile |
| ZwQueryFullAttributesFile |
| ZwQueryInformationFile |
| ZwQueryInformationJobObject |
| ZwQueryInformationProcess |
| ZwQueryInformationThread |
| ZwQueryInformationToken |
| ZwQueryInstallUILanguage |
| ZwQueryKey |
| ZwQueryObject |
| ZwQuerySection |
| ZwQuerySecurityObject |
| ZwQuerySymbolicLinkObject |
| ZwQuerySystemInformation |
| ZwQueryValueKey |
| ZwQueryVolumeInformationFile |
| ZwReadFile |
| ZwReplaceKey |
| ZwRequestWaitReplyPort |
| ZwResetEvent |
| ZwRestoreKey |
| ZwSaveKey |
| ZwSaveKeyEx |
| ZwSecureConnectPort |
| ZwSetBootEntryOrder |
| ZwSetBootOptions |
| ZwSetDefaultLocale |
| ZwSetDefaultUILanguage |
| ZwSetDriverEntryOrder |
| ZwSetEaFile |
| ZwSetEvent |
| ZwSetInformationFile |
| ZwSetInformationJobObject |
| ZwSetInformationObject |
| ZwSetInformationProcess |
| ZwSetInformationThread |
| ZwSetSecurityObject |
| ZwSetSystemInformation |
| ZwSetSystemTime |
| ZwSetTimer |
| ZwSetValueKey |
| ZwSetVolumeInformationFile |
| ZwTerminateJobObject |
| ZwTerminateProcess |
| ZwTranslateFilePath |
| ZwUnloadDriver |
| ZwUnloadKey |
| ZwUnmapViewOfSection |
| ZwWaitForMultipleObjects |
| ZwWaitForSingleObject |
| ZwWriteFile |
| ZwYieldExecution |
| __C_specific_handler |
| ;__chkstk |
| __misaligned_access |
| _itoa |
| _itow |
| _local_unwind |
| _purecall |
| _setjmp |
| _setjmpex |
| _snprintf |
| _snwprintf |
| _stricmp |
| _strlwr |
| _strnicmp |
| _strnset |
| _strrev |
| _strset |
| _strupr |
| _vsnprintf |
| _vsnwprintf |
| _wcsicmp |
| _wcslwr |
| _wcsnicmp |
| _wcsnset |
| _wcsrev |
| _wcsupr |
| atoi |
| atol |
| isdigit |
| islower |
| isprint |
| isspace |
| isupper |
| isxdigit |
| longjmp |
| mbstowcs |
| mbtowc |
| memchr |
| memcmp |
| memcpy |
| memmove |
| memset |
| qsort |
| rand |
| sprintf |
| srand |
| strcat |
| strchr |
| strcmp |
| strcpy |
| strlen |
| strncat |
| strncmp |
| strncpy |
| strrchr |
| strspn |
| strstr |
| swprintf |
| tolower |
| toupper |
| towlower |
| towupper |
| vDbgPrintEx |
| vDbgPrintExWithPrefix |
| vsprintf |
| wcscat |
| wcschr |
| wcscmp |
| wcscpy |
| wcscspn |
| wcslen |
| wcsncat |
| wcsncmp |
| wcsncpy |
| wcsrchr |
| wcsspn |
| wcsstr |
| wcstombs |
| wctomb |