; ; Definition file of ntoskrnl.exe ; Automatic generated by gendef ; written by Kai Tietz 2008-2014 ; LIBRARY "ntoskrnl.exe" EXPORTS ord_1 @1 ord_2 @2 ord_3 @3 AlpcGetHeaderSize AlpcGetMessageAttribute AlpcInitializeMessageAttribute BgkDisplayCharacter BgkGetConsoleState BgkGetCursorState BgkSetCursor CcAddDirtyPagesToExternalCache CcCanIWrite CcCoherencyFlushAndPurgeCache CcCopyRead CcCopyReadEx CcCopyWrite CcCopyWriteEx CcCopyWriteWontFlush CcDeductDirtyPagesFromExternalCache CcDeferWrite CcFastCopyRead CcFastCopyWrite CcFastMdlReadWait DATA CcFlushCache CcFlushCacheToLsn CcGetDirtyPages CcGetFileObjectFromBcb CcGetFileObjectFromSectionPtrs CcGetFileObjectFromSectionPtrsRef CcGetFlushedValidData CcGetLsnForFileObject CcInitializeCacheMap CcIsThereDirtyData CcIsThereDirtyDataEx CcIsThereDirtyLoggedPages CcMapData CcMdlRead CcMdlReadComplete CcMdlWriteAbort CcMdlWriteComplete CcPinMappedData CcPinRead CcPrepareMdlWrite CcPreparePinWrite CcPurgeCacheSection CcRegisterExternalCache CcRemapBcb CcRepinBcb CcScheduleReadAhead CcScheduleReadAheadEx CcSetAdditionalCacheAttributes CcSetAdditionalCacheAttributesEx CcSetBcbOwnerPointer CcSetDirtyPageThreshold CcSetDirtyPinnedData CcSetFileSizes CcSetFileSizesEx CcSetLogHandleForFile CcSetLogHandleForFileEx CcSetLoggedDataThreshold CcSetParallelFlushFile CcSetReadAheadGranularity CcSetReadAheadGranularityEx CcTestControl CcUninitializeCacheMap CcUnmapFileOffsetFromSystemCache CcUnpinData CcUnpinDataForThread CcUnpinRepinnedBcb CcUnregisterExternalCache CcWaitForCurrentLazyWriterActivity CcZeroData CcZeroDataOnDisk CmCallbackGetKeyObjectID CmCallbackGetKeyObjectIDEx CmCallbackReleaseKeyObjectIDEx CmGetBoundTransaction CmGetCallbackVersion CmKeyObjectType DATA CmRegisterCallback CmRegisterCallbackEx CmSetCallbackObjectContext CmUnRegisterCallback DbgBreakPoint DbgBreakPointWithStatus DbgCommandString DbgLoadImageSymbols DbgPrint DbgPrintEx DbgPrintReturnControlC DbgPrompt DbgQueryDebugFilterState DbgSetDebugFilterState DbgSetDebugPrintCallback DbgkLkmdRegisterCallback DbgkLkmdUnregisterCallback DbgkWerCaptureLiveKernelDump EmClientQueryRuleState EmClientRuleDeregisterNotification EmClientRuleEvaluate EmClientRuleRegisterNotification EmProviderDeregister EmProviderDeregisterEntry EmProviderRegister EmProviderRegisterEntry EmpProviderRegister EtwActivityIdControl EtwEnableTrace EtwEventEnabled EtwProviderEnabled EtwRegister EtwRegisterClassicProvider EtwSendTraceBuffer EtwUnregister EtwWrite EtwWriteEndScenario EtwWriteEx EtwWriteStartScenario EtwWriteString EtwWriteTransfer ExAcquireCacheAwarePushLockExclusive ExAcquireCacheAwarePushLockExclusiveEx ExAcquireCacheAwarePushLockSharedEx ExAcquireFastMutex ExAcquireFastMutexUnsafe ExAcquirePushLockExclusiveEx ExAcquirePushLockSharedEx ExAcquireResourceExclusiveLite ExAcquireResourceSharedLite ExAcquireRundownProtection ExAcquireRundownProtectionCacheAware ExAcquireRundownProtectionCacheAwareEx ExAcquireRundownProtectionEx ExAcquireSharedStarveExclusive ExAcquireSharedWaitForExclusive ExAcquireSpinLockExclusive ExAcquireSpinLockExclusiveAtDpcLevel ExAcquireSpinLockShared ExAcquireSpinLockSharedAtDpcLevel ExAllocateCacheAwarePushLock ExAllocateCacheAwareRundownProtection ExAllocatePool ExAllocatePoolWithQuota ExAllocatePoolWithQuotaTag ExAllocatePoolWithTag ExAllocatePoolWithTagPriority ExAllocateTimer ExBlockOnAddressPushLock ExBlockPushLock ExCancelTimer ExCompositionObjectType DATA ExConvertExclusiveToSharedLite ExCreateCallback ExDeleteLookasideListEx ExDeleteNPagedLookasideList ExDeletePagedLookasideList ExDeleteResourceLite ExDeleteTimer ExDesktopObjectType DATA ExDisableResourceBoostLite ExEnterCriticalRegionAndAcquireFastMutexUnsafe ExEnterCriticalRegionAndAcquireResourceExclusive ExEnterCriticalRegionAndAcquireResourceShared ExEnterCriticalRegionAndAcquireSharedWaitForExclusive ExEnterPriorityRegionAndAcquireResourceExclusive ExEnterPriorityRegionAndAcquireResourceShared ExEnumHandleTable ExEventObjectType DATA ExExtendZone ExFetchLicenseData ExFlushLookasideListEx ExFreeCacheAwarePushLock ExFreeCacheAwareRundownProtection ExFreePool ExFreePoolWithTag ExGetCurrentProcessorCounts ExGetCurrentProcessorCpuUsage ExGetExclusiveWaiterCount ExGetFirmwareEnvironmentVariable ExGetLicenseTamperState ExGetPreviousMode ExGetSharedWaiterCount ExInitializeLookasideListEx ExInitializeNPagedLookasideList ExInitializePagedLookasideList ExInitializePushLock ExInitializeResourceLite ExInitializeRundownProtection ExInitializeRundownProtectionCacheAware ExInitializeZone ExInterlockedAddLargeInteger ExInterlockedAddUlong ExInterlockedExtendZone ExInterlockedInsertHeadList ExInterlockedInsertTailList ExInterlockedPopEntryList ExInterlockedPushEntryList ExInterlockedRemoveHeadList ExIsProcessorFeaturePresent ExIsResourceAcquiredExclusiveLite ExIsResourceAcquiredSharedLite ExLocalTimeToSystemTime ExNotifyBootDeviceRemoval ExNotifyCallback ExQueryDepthSList ExQueryFastCacheAppOrigin ExQueryFastCacheDevLicense ExQueryPoolBlockSize ExQueryTimerResolution ExQueryWnfStateData ExQueueWorkItem ExRaiseAccessViolation ExRaiseDatatypeMisalignment ExRaiseException ExRaiseHardError ExRaiseStatus ExReInitializeRundownProtection ExReInitializeRundownProtectionCacheAware ExRealTimeIsUniversal ExRegisterBootDevice ExRegisterCallback ExRegisterExtension ExReinitializeResourceLite ExReleaseCacheAwarePushLockExclusive ExReleaseCacheAwarePushLockExclusiveEx ExReleaseCacheAwarePushLockSharedEx ExReleaseFastMutex ExReleaseFastMutexUnsafe ExReleaseFastMutexUnsafeAndLeaveCriticalRegion ExReleasePushLockEx ExReleasePushLockExclusiveEx ExReleasePushLockSharedEx ExReleaseResourceAndLeaveCriticalRegion ExReleaseResourceAndLeavePriorityRegion ExReleaseResourceForThreadLite ExReleaseResourceLite ExReleaseRundownProtection ExReleaseRundownProtectionCacheAware ExReleaseRundownProtectionCacheAwareEx ExReleaseRundownProtectionEx ExReleaseSpinLockExclusive ExReleaseSpinLockExclusiveFromDpcLevel ExReleaseSpinLockShared ExReleaseSpinLockSharedFromDpcLevel ExRundownCompleted ExRundownCompletedCacheAware ExSemaphoreObjectType DATA ExSetFirmwareEnvironmentVariable ExSetLicenseTamperState ExSetResourceOwnerPointer ExSetResourceOwnerPointerEx ExSetTimer ExSetTimerResolution ExSizeOfRundownProtectionCacheAware ExSubscribeWnfStateChange ExSystemExceptionFilter ExSystemTimeToLocalTime ExTimedWaitForUnblockPushLock ExTryAcquirePushLockExclusiveEx ExTryAcquirePushLockSharedEx ExTryConvertPushLockSharedToExclusiveEx ExTryConvertSharedSpinLockExclusive ExTryQueueWorkItem ExTryToAcquireFastMutex ExTryToAcquireResourceExclusiveLite ExUnblockOnAddressPushLockEx ExUnblockPushLockEx ExUnregisterCallback ExUnregisterExtension ExUnsubscribeWnfStateChange ExUuidCreate ExVerifySuite ExWaitForRundownProtectionRelease ExWaitForRundownProtectionReleaseCacheAware ExWaitForUnblockPushLock ExWindowStationObjectType DATA ExfAcquirePushLockExclusive ExfAcquirePushLockShared ExfReleasePushLock ExfReleasePushLockExclusive ExfReleasePushLockShared ExfTryAcquirePushLockShared ExfTryToWakePushLock ExfUnblockPushLock ExpInterlockedFlushSList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList FirstEntrySList FsRtlAcknowledgeEcp FsRtlAcquireEofLock FsRtlAcquireFileExclusive FsRtlAcquireHeaderMutex FsRtlAddBaseMcbEntry FsRtlAddBaseMcbEntryEx FsRtlAddLargeMcbEntry FsRtlAddMcbEntry FsRtlAddToTunnelCache FsRtlAllocateExtraCreateParameter FsRtlAllocateExtraCreateParameterFromLookasideList FsRtlAllocateExtraCreateParameterList FsRtlAllocateFileLock FsRtlAllocatePool FsRtlAllocatePoolWithQuota FsRtlAllocatePoolWithQuotaTag FsRtlAllocatePoolWithTag FsRtlAllocateResource FsRtlAreNamesEqual FsRtlAreThereCurrentOrInProgressFileLocks FsRtlAreThereWaitingFileLocks FsRtlAreVolumeStartupApplicationsComplete FsRtlBalanceReads FsRtlCancellableWaitForMultipleObjects FsRtlCancellableWaitForSingleObject FsRtlChangeBackingFileObject FsRtlCheckLockForOplockRequest FsRtlCheckLockForReadAccess FsRtlCheckLockForWriteAccess FsRtlCheckOplock FsRtlCheckOplockEx FsRtlCheckUpperOplock FsRtlCopyRead FsRtlCopyWrite FsRtlCreateSectionForDataScan FsRtlCurrentBatchOplock FsRtlCurrentOplock FsRtlCurrentOplockH FsRtlDeleteExtraCreateParameterLookasideList FsRtlDeleteKeyFromTunnelCache FsRtlDeleteTunnelCache FsRtlDeregisterUncProvider FsRtlDismountComplete FsRtlDissectDbcs FsRtlDissectName FsRtlDoesDbcsContainWildCards FsRtlDoesNameContainWildCards FsRtlFastCheckLockForRead FsRtlFastCheckLockForWrite FsRtlFastUnlockAll FsRtlFastUnlockAllByKey FsRtlFastUnlockSingle FsRtlFindExtraCreateParameter FsRtlFindInTunnelCache FsRtlFreeExtraCreateParameter FsRtlFreeExtraCreateParameterList FsRtlFreeFileLock FsRtlGetEcpListFromIrp FsRtlGetFileNameInformation FsRtlGetFileSize FsRtlGetIoAtEof FsRtlGetNextBaseMcbEntry FsRtlGetNextExtraCreateParameter FsRtlGetNextFileLock FsRtlGetNextLargeMcbEntry FsRtlGetNextMcbEntry FsRtlGetSectorSizeInformation FsRtlGetSupportedFeatures FsRtlGetVirtualDiskNestingLevel FsRtlHeatInit FsRtlHeatLogIo FsRtlHeatLogTierMove FsRtlHeatUninit FsRtlIncrementCcFastMdlReadWait FsRtlIncrementCcFastReadNoWait FsRtlIncrementCcFastReadNotPossible FsRtlIncrementCcFastReadResourceMiss FsRtlIncrementCcFastReadWait FsRtlInitExtraCreateParameterLookasideList FsRtlInitializeBaseMcb FsRtlInitializeBaseMcbEx FsRtlInitializeEofLock FsRtlInitializeExtraCreateParameter FsRtlInitializeExtraCreateParameterList FsRtlInitializeFileLock FsRtlInitializeLargeMcb FsRtlInitializeMcb FsRtlInitializeOplock FsRtlInitializeTunnelCache FsRtlInsertExtraCreateParameter FsRtlInsertPerFileContext FsRtlInsertPerFileObjectContext FsRtlInsertPerStreamContext FsRtlInsertReservedPerFileContext FsRtlInsertReservedPerStreamContext FsRtlIsDbcsInExpression FsRtlIsEcpAcknowledged FsRtlIsEcpFromUserMode FsRtlIsFatDbcsLegal FsRtlIsHpfsDbcsLegal FsRtlIsNameInExpression FsRtlIsNtstatusExpected FsRtlIsPagingFile FsRtlIsSystemPagingFile FsRtlIsTotalDeviceFailure FsRtlIssueDeviceIoControl FsRtlKernelFsControlFile FsRtlLegalAnsiCharacterArray DATA FsRtlLogCcFlushError FsRtlLookupBaseMcbEntry FsRtlLookupLargeMcbEntry FsRtlLookupLastBaseMcbEntry FsRtlLookupLastBaseMcbEntryAndIndex FsRtlLookupLastLargeMcbEntry FsRtlLookupLastLargeMcbEntryAndIndex FsRtlLookupLastMcbEntry FsRtlLookupMcbEntry FsRtlLookupPerFileContext FsRtlLookupPerFileObjectContext FsRtlLookupPerStreamContextInternal FsRtlLookupReservedPerFileContext FsRtlLookupReservedPerStreamContext FsRtlMdlRead FsRtlMdlReadComplete FsRtlMdlReadCompleteDev FsRtlMdlReadDev FsRtlMdlReadEx FsRtlMdlWriteComplete FsRtlMdlWriteCompleteDev FsRtlMupGetProviderIdFromName FsRtlMupGetProviderInfoFromFileObject FsRtlNormalizeNtstatus FsRtlNotifyChangeDirectory FsRtlNotifyCleanup FsRtlNotifyCleanupAll FsRtlNotifyFilterChangeDirectory FsRtlNotifyFilterReportChange FsRtlNotifyFullChangeDirectory FsRtlNotifyFullReportChange FsRtlNotifyInitializeSync FsRtlNotifyReportChange FsRtlNotifyUninitializeSync FsRtlNotifyVolumeEvent FsRtlNotifyVolumeEventEx FsRtlNumberOfRunsInBaseMcb FsRtlNumberOfRunsInLargeMcb FsRtlNumberOfRunsInMcb FsRtlOplockBreakH FsRtlOplockBreakToNone FsRtlOplockBreakToNoneEx FsRtlOplockFsctrl FsRtlOplockFsctrlEx FsRtlOplockIsFastIoPossible FsRtlOplockIsSharedRequest FsRtlOplockKeysEqual FsRtlPostPagingFileStackOverflow FsRtlPostStackOverflow FsRtlPrepareMdlWrite FsRtlPrepareMdlWriteDev FsRtlPrepareMdlWriteEx FsRtlPrepareToReuseEcp FsRtlPrivateLock FsRtlProcessFileLock FsRtlQueryCachedVdl FsRtlQueryKernelEaFile FsRtlQueryMaximumVirtualDiskNestingLevel FsRtlRegisterFileSystemFilterCallbacks FsRtlRegisterFltMgrCalls FsRtlRegisterMupCalls FsRtlRegisterUncProvider FsRtlRegisterUncProviderEx FsRtlReleaseEofLock FsRtlReleaseFile FsRtlReleaseFileNameInformation FsRtlReleaseHeaderMutex FsRtlRemoveBaseMcbEntry FsRtlRemoveDotsFromPath FsRtlRemoveExtraCreateParameter FsRtlRemoveLargeMcbEntry FsRtlRemoveMcbEntry FsRtlRemovePerFileContext FsRtlRemovePerFileObjectContext FsRtlRemovePerStreamContext FsRtlRemoveReservedPerFileContext FsRtlRemoveReservedPerStreamContext FsRtlResetBaseMcb FsRtlResetLargeMcb FsRtlSendModernAppTermination FsRtlSetEcpListIntoIrp FsRtlSetKernelEaFile FsRtlSplitBaseMcb FsRtlSplitLargeMcb FsRtlSyncVolumes FsRtlTeardownPerFileContexts FsRtlTeardownPerStreamContexts FsRtlTruncateBaseMcb FsRtlTruncateLargeMcb FsRtlTruncateMcb FsRtlTryToAcquireHeaderMutex FsRtlUninitializeBaseMcb FsRtlUninitializeFileLock FsRtlUninitializeLargeMcb FsRtlUninitializeMcb FsRtlUninitializeOplock FsRtlUpdateDiskCounters FsRtlUpperOplockFsctrl FsRtlValidateReparsePointBuffer HalDispatchTable DATA HalExamineMBR HalFlushIoBuffers HalPrivateDispatchTable DATA HeadlessDispatch HvlGetLpIndexFromApicId HvlQueryActiveHypervisorProcessorCount HvlQueryActiveProcessors HvlQueryConnection HvlQueryHypervisorProcessorNodeNumber HvlQueryNumaDistance HvlQueryProcessorTopology HvlQueryProcessorTopologyCount HvlQueryProcessorTopologyHighestId HvlRegisterInterruptCallback HvlRegisterWheaErrorNotification HvlUnregisterInterruptCallback HvlUnregisterWheaErrorNotification InbvAcquireDisplayOwnership InbvCheckDisplayOwnership InbvDisplayString InbvEnableBootDriver InbvEnableDisplayString InbvInstallDisplayStringFilter InbvIsBootDriverInstalled InbvNotifyDisplayOwnershipChange InbvNotifyDisplayOwnershipLost InbvResetDisplay InbvSetScrollRegion InbvSetTextColor InbvSolidColorFill InitSafeBootMode DATA InitializeSListHead InterlockedPushListSList IoAcquireCancelSpinLock IoAcquireRemoveLockEx IoAcquireVpbSpinLock IoAdapterObjectType DATA IoAdjustStackSizeForRedirection IoAllocateAdapterChannel IoAllocateController IoAllocateDriverObjectExtension IoAllocateErrorLogEntry IoAllocateIrp IoAllocateMdl IoAllocateMiniCompletionPacket IoAllocateSfioStreamIdentifier IoAllocateWorkItem IoApplyPriorityInfoThread IoAssignResources IoAttachDevice IoAttachDeviceByPointer IoAttachDeviceToDeviceStack IoAttachDeviceToDeviceStackSafe IoBoostThreadIo IoBuildAsynchronousFsdRequest IoBuildDeviceIoControlRequest IoBuildPartialMdl IoBuildSynchronousFsdRequest IoCallDriver IoCancelFileOpen IoCancelIrp IoCheckDesiredAccess IoCheckEaBufferValidity IoCheckFunctionAccess IoCheckQuerySetFileInformation IoCheckQuerySetVolumeInformation IoCheckQuotaBufferValidity IoCheckShareAccess IoCheckShareAccessEx IoClearActivityIdThread IoClearDependency IoClearIrpExtraCreateParameter IoCompleteRequest IoCompletionObjectType DATA IoConnectInterrupt IoConnectInterruptEx IoConvertFileHandleToKernelHandle IoCopyDeviceObjectHint IoCreateArcName IoCreateController IoCreateDevice IoCreateDisk IoCreateDriver IoCreateFile IoCreateFileEx IoCreateFileSpecifyDeviceObjectHint IoCreateNotificationEvent IoCreateStreamFileObject IoCreateStreamFileObjectEx IoCreateStreamFileObjectEx2 IoCreateStreamFileObjectLite IoCreateSymbolicLink IoCreateSynchronizationEvent IoCreateSystemThread IoCreateUnprotectedSymbolicLink IoCsqInitialize IoCsqInitializeEx IoCsqInsertIrp IoCsqInsertIrpEx IoCsqRemoveIrp IoCsqRemoveNextIrp IoDecrementKeepAliveCount IoDeleteAllDependencyRelations IoDeleteController IoDeleteDevice IoDeleteDriver IoDeleteSymbolicLink IoDetachDevice IoDeviceHandlerObjectSize DATA IoDeviceHandlerObjectType DATA IoDeviceObjectType DATA IoDisconnectInterrupt IoDisconnectInterruptEx IoDriverObjectType DATA IoDuplicateDependency IoEnqueueIrp IoEnumerateDeviceObjectList IoEnumerateRegisteredFiltersList IoFastQueryNetworkAttributes IoFileObjectType DATA IoForwardAndCatchIrp IoForwardIrpSynchronously IoFreeController IoFreeErrorLogEntry IoFreeIrp IoFreeMdl IoFreeMiniCompletionPacket IoFreeSfioStreamIdentifier IoFreeWorkItem IoGetActivityIdIrp IoGetActivityIdThread IoGetAffinityInterrupt IoGetAttachedDevice IoGetAttachedDeviceReference IoGetBaseFileSystemDeviceObject IoGetBootDiskInformation IoGetBootDiskInformationLite IoGetConfigurationInformation IoGetContainerInformation IoGetCurrentProcess IoGetDeviceAttachmentBaseRef IoGetDeviceInterfaceAlias IoGetDeviceInterfacePropertyData IoGetDeviceInterfaces IoGetDeviceNumaNode IoGetDeviceObjectPointer IoGetDeviceProperty IoGetDevicePropertyData IoGetDeviceToVerify IoGetDiskDeviceObject IoGetDmaAdapter IoGetDriverObjectExtension IoGetFileObjectGenericMapping IoGetGenericIrpExtension IoGetInitialStack IoGetInitiatorProcess IoGetIoPriorityHint IoGetIrpExtraCreateParameter IoGetLowerDeviceObject IoGetOplockKeyContext IoGetOplockKeyContextEx IoGetPagingIoPriority IoGetRelatedDeviceObject IoGetRequestorProcess IoGetRequestorProcessId IoGetRequestorSessionId IoGetSfioStreamIdentifier IoGetStackLimits IoGetSymlinkSupportInformation IoGetTopLevelIrp IoGetTransactionParameterBlock IoIncrementKeepAliveCount IoInitializeIrp IoInitializeMiniCompletionPacket IoInitializeRemoveLockEx IoInitializeWorkItem IoInvalidateDeviceRelations IoInvalidateDeviceState IoIsActivityTracingEnabled IoIsFileObjectIgnoringSharing IoIsFileOriginRemote IoIsOperationSynchronous IoIsSystemThread IoIsValidIrpStatus IoIsWdmVersionAvailable IoMakeAssociatedIrp IoOpenDeviceInterfaceRegistryKey IoOpenDeviceRegistryKey IoPageRead IoPropagateActivityIdToThread IoPropagateIrpExtension IoQueryDeviceDescription IoQueryFileDosDeviceName IoQueryFileInformation IoQueryFullDriverPath IoQueryVolumeInformation IoQueueThreadIrp IoQueueWorkItem IoQueueWorkItemEx IoQueueWorkItemToNode IoRaiseHardError IoRaiseInformationalHardError IoReadDiskSignature IoReadOperationCount DATA IoReadPartitionTable IoReadPartitionTableEx IoReadTransferCount DATA IoRegisterBootDriverCallback IoRegisterBootDriverReinitialization IoRegisterContainerNotification IoRegisterDeviceInterface IoRegisterDriverReinitialization IoRegisterFileSystem IoRegisterFsRegistrationChange IoRegisterFsRegistrationChangeMountAware IoRegisterIoTracking IoRegisterLastChanceShutdownNotification IoRegisterPlugPlayNotification IoRegisterPriorityCallback IoRegisterShutdownNotification IoReleaseCancelSpinLock IoReleaseRemoveLockAndWaitEx IoReleaseRemoveLockEx IoReleaseVpbSpinLock IoRemoveShareAccess IoReplaceFileObjectName IoReplacePartitionUnit IoReportDetectedDevice IoReportHalResourceUsage IoReportInterruptActive IoReportInterruptInactive IoReportResourceForDetection IoReportResourceUsage IoReportRootDevice IoReportTargetDeviceChange IoReportTargetDeviceChangeAsynchronous IoRequestDeviceEject IoRequestDeviceEjectEx IoReserveDependency IoResolveDependency IoRetrievePriorityInfo IoReuseIrp IoSetActivityIdIrp IoSetActivityIdThread IoSetCompletionRoutineEx IoSetDependency IoSetDeviceInterfacePropertyData IoSetDeviceInterfaceState IoSetDevicePropertyData IoSetDeviceToVerify IoSetFileObjectIgnoreSharing IoSetFileOrigin IoSetGenericIrpExtension IoSetHardErrorOrVerifyDevice IoSetInformation IoSetIoCompletion IoSetIoCompletionEx IoSetIoPriorityHint IoSetIoPriorityHintIntoFileObject IoSetIoPriorityHintIntoThread IoSetIrpExtraCreateParameter IoSetMasterIrpStatus IoSetPartitionInformation IoSetPartitionInformationEx IoSetShareAccess IoSetShareAccessEx IoSetStartIoAttributes IoSetSystemPartition IoSetThreadHardErrorMode IoSetTopLevelIrp IoSizeofGenericIrpExtension IoSizeofWorkItem IoStartNextPacket IoStartNextPacketByKey IoStartPacket IoStatisticsLock DATA IoSynchronousCallDriver IoSynchronousInvalidateDeviceRelations IoSynchronousPageWrite IoTestDependency IoThreadToProcess IoTransferActivityId IoTranslateBusAddress IoTryQueueWorkItem IoUninitializeWorkItem IoUnregisterBootDriverCallback IoUnregisterContainerNotification IoUnregisterFileSystem IoUnregisterFsRegistrationChange IoUnregisterIoTracking IoUnregisterPlugPlayNotification IoUnregisterPlugPlayNotificationEx IoUnregisterPriorityCallback IoUnregisterShutdownNotification IoUpdateShareAccess IoValidateDeviceIoControlAccess IoVerifyPartitionTable IoVerifyVolume IoVolumeDeviceToDosName IoVolumeDeviceToGuid IoVolumeDeviceToGuidPath IoWMIAllocateInstanceIds IoWMIDeviceObjectToInstanceName IoWMIExecuteMethod IoWMIHandleToInstanceName IoWMIOpenBlock IoWMIQueryAllData IoWMIQueryAllDataMultiple IoWMIQuerySingleInstance IoWMIQuerySingleInstanceMultiple IoWMIRegistrationControl IoWMISetNotificationCallback IoWMISetSingleInstance IoWMISetSingleItem IoWMISuggestInstanceName IoWMIWriteEvent IoWithinStackLimits IoWriteErrorLogEntry IoWriteOperationCount DATA IoWritePartitionTable IoWritePartitionTableEx IoWriteTransferCount DATA IofCallDriver IofCompleteRequest KdAcquireDebuggerLock KdChangeOption KdDebuggerEnabled DATA KdDebuggerNotPresent DATA KdDeregisterPowerHandler KdDisableDebugger KdEnableDebugger KdEnteredDebugger DATA KdLogDbgPrint KdPollBreakIn KdPowerTransition KdRefreshDebuggerNotPresent KdRegisterPowerHandler KdReleaseDebuggerLock KdSystemDebugControl KeAcquireGuardedMutex KeAcquireGuardedMutexUnsafe KeAcquireInStackQueuedSpinLock KeAcquireInStackQueuedSpinLockAtDpcLevel KeAcquireInStackQueuedSpinLockForDpc KeAcquireInterruptSpinLock KeAcquireQueuedSpinLock KeAcquireSpinLockAtDpcLevel KeAcquireSpinLockForDpc KeAcquireSpinLockRaiseToDpc KeAcquireSpinLockRaiseToSynch KeAddGroupAffinityEx KeAddProcessorAffinityEx KeAddProcessorGroupAffinity KeAddSystemServiceTable KeAlertThread KeAllocateCalloutStack KeAllocateCalloutStackEx KeAndAffinityEx KeAndGroupAffinityEx KeAreAllApcsDisabled KeAreApcsDisabled KeAttachProcess KeBugCheck KeBugCheckEx KeCancelTimer KeCapturePersistentThreadState KeCheckProcessorAffinityEx KeCheckProcessorGroupAffinity KeClearEvent KeClockInterruptNotify KeClockTimerPowerChange KeComplementAffinityEx KeCopyAffinityEx KeCountSetBitsAffinityEx KeCountSetBitsGroupAffinity KeDelayExecutionThread KeDeregisterBugCheckCallback KeDeregisterBugCheckReasonCallback KeDeregisterNmiCallback KeDeregisterProcessorChangeCallback KeDetachProcess KeDispatchSecondaryInterrupt KeEnterCriticalRegion KeEnterGuardedRegion KeEnterKernelDebugger KeEnumerateNextProcessor KeExpandKernelStackAndCallout KeExpandKernelStackAndCalloutEx KeFindConfigurationEntry KeFindConfigurationNextEntry KeFindFirstSetLeftAffinityEx KeFindFirstSetLeftGroupAffinity KeFindFirstSetRightAffinityEx KeFindFirstSetRightGroupAffinity KeFirstGroupAffinityEx KeFlushEntireTb KeFlushIoBuffers KeFlushIoRectangle KeFlushQueuedDpcs KeFreeCalloutStack KeGenericCallDpc KeGetClockOwner KeGetClockTimerResolution KeGetCurrentNodeNumber KeGetCurrentProcessorNumberEx KeGetCurrentThread KeGetNextClockTickDuration KeGetProcessorIndexFromNumber KeGetProcessorNumberFromIndex KeGetRecommendedSharedDataAlignment KeHwPolicyLocateResource KeInitializeAffinityEx KeInitializeApc KeInitializeCrashDumpHeader KeInitializeDeviceQueue KeInitializeDpc KeInitializeEnumerationContext KeInitializeEnumerationContextFromGroup KeInitializeEvent KeInitializeGuardedMutex KeInitializeInterrupt KeInitializeMutant KeInitializeMutex KeInitializeQueue KeInitializeSecondaryInterruptServices KeInitializeSemaphore KeInitializeSpinLock KeInitializeThreadedDpc KeInitializeTimer KeInitializeTimerEx KeInsertByKeyDeviceQueue KeInsertDeviceQueue KeInsertHeadQueue KeInsertQueue KeInsertQueueApc KeInsertQueueDpc KeInterlockedClearProcessorAffinityEx KeInterlockedSetProcessorAffinityEx KeInvalidateAllCaches KeInvalidateRangeAllCaches KeIpiGenericCall KeIsAttachedProcess KeIsEmptyAffinityEx KeIsEqualAffinityEx KeIsExecutingDpc KeIsSingleGroupAffinityEx KeIsSubsetAffinityEx KeIsWaitListEmpty KeLeaveCriticalRegion KeLeaveGuardedRegion KeLoaderBlock DATA KeNumberProcessors DATA KeOrAffinityEx KeProcessorGroupAffinity KeProfileInterruptWithSource KePulseEvent KeQueryActiveGroupCount KeQueryActiveProcessorAffinity KeQueryActiveProcessorCount KeQueryActiveProcessorCountEx KeQueryActiveProcessors KeQueryDpcWatchdogInformation KeQueryEffectivePriorityThread KeQueryGroupAffinity KeQueryGroupAffinityEx KeQueryHardwareCounterConfiguration KeQueryHighestNodeNumber KeQueryInterruptTime KeQueryInterruptTimePrecise KeQueryLogicalProcessorRelationship KeQueryMaximumGroupCount KeQueryMaximumProcessorCount KeQueryMaximumProcessorCountEx KeQueryNodeActiveAffinity KeQueryNodeMaximumProcessorCount KeQueryPrcbAddress KeQueryPriorityThread KeQueryRuntimeThread KeQuerySystemTime KeQuerySystemTimePrecise KeQueryTickCount KeQueryTimeIncrement KeQueryTotalCycleTimeThread KeQueryUnbiasedInterruptTime KeRaiseUserException KeReadStateEvent KeReadStateMutant KeReadStateMutex KeReadStateQueue KeReadStateSemaphore KeReadStateTimer KeRegisterBugCheckCallback KeRegisterBugCheckReasonCallback KeRegisterNmiCallback KeRegisterProcessorChangeCallback KeReleaseGuardedMutex KeReleaseGuardedMutexUnsafe KeReleaseInStackQueuedSpinLock KeReleaseInStackQueuedSpinLockForDpc KeReleaseInStackQueuedSpinLockFromDpcLevel KeReleaseInterruptSpinLock KeReleaseMutant KeReleaseMutex KeReleaseQueuedSpinLock KeReleaseSemaphore KeReleaseSpinLock KeReleaseSpinLockForDpc KeReleaseSpinLockFromDpcLevel KeRemoveByKeyDeviceQueue KeRemoveByKeyDeviceQueueIfBusy KeRemoveDeviceQueue KeRemoveEntryDeviceQueue KeRemoveGroupAffinityEx KeRemoveProcessorAffinityEx KeRemoveProcessorGroupAffinity KeRemoveQueue KeRemoveQueueDpc KeRemoveQueueDpcEx KeRemoveQueueEx KeRemoveSystemServiceTable KeResetEvent KeRestoreExtendedProcessorState KeRestoreFloatingPointState KeRestoreProcessorState KeRevertToUserAffinityThread KeRevertToUserAffinityThreadEx KeRevertToUserGroupAffinityThread KeRundownQueue KeSaveExtendedProcessorState KeSaveFloatingPointState KeSaveStateForHibernate KeSetActualBasePriorityThread KeSetAffinityThread KeSetBasePriorityThread KeSetCoalescableTimer KeSetEvent KeSetEventBoostPriority KeSetHardwareCounterConfiguration KeSetIdealProcessorThread KeSetImportanceDpc KeSetKernelStackSwapEnable KeSetPriorityThread KeSetProfileIrql KeSetSystemAffinityThread KeSetSystemAffinityThreadEx KeSetSystemGroupAffinityThread KeSetTargetProcessorDpc KeSetTargetProcessorDpcEx KeSetTimer KeSetTimerEx KeSignalCallDpcDone KeSignalCallDpcSynchronize KeStackAttachProcess KeStallWhileFrozen KeStartDynamicProcessor KeSubtractAffinityEx KeSweepIcacheRange KeSweepLocalCaches KeSynchronizeExecution KeTestAlertThread KeTestSpinLock KeTickCount DATA KeTryToAcquireGuardedMutex KeTryToAcquireQueuedSpinLock KeTryToAcquireSpinLockAtDpcLevel KeUnstackDetachProcess KeUserModeCallback KeWaitForMultipleObjects KeWaitForMutexObject KeWaitForSingleObject KiBugCheckData DATA KiCheckForKernelApcDelivery KiConnectHalInterrupt KiDeliverApc KiDispatchInterrupt KiIpiServiceRoutine KiReplayInterrupt KitLogFeatureUsage KseQueryDeviceData KseQueryDeviceDataList KseQueryDeviceFlags KseRegisterShim KseRegisterShimEx KseSetDeviceFlags KseUnregisterShim LdrAccessResource LdrEnumResources LdrFindResourceDirectory_U LdrFindResourceEx_U LdrFindResource_U LdrResFindResource LdrResFindResourceDirectory LdrResSearchResource LpcPortObjectType DATA LpcReplyWaitReplyPort LpcRequestPort LpcRequestWaitReplyPort LpcRequestWaitReplyPortEx LpcSendWaitReceivePort LsaCallAuthenticationPackage LsaDeregisterLogonProcess LsaFreeReturnBuffer LsaLogonUser LsaLookupAuthenticationPackage LsaRegisterLogonProcess Mm64BitPhysicalAddress DATA MmAddPhysicalMemory MmAddVerifierThunks MmAdjustWorkingSetSize MmAdvanceMdl MmAllocateContiguousMemory MmAllocateContiguousMemorySpecifyCache MmAllocateContiguousMemorySpecifyCacheNode MmAllocateContiguousNodeMemory MmAllocateMappingAddress MmAllocateMdlForIoSpace MmAllocateNodePagesForMdlEx MmAllocateNonCachedMemory MmAllocatePagesForMdl MmAllocatePagesForMdlEx MmAreMdlPagesCached MmBadPointer DATA MmBuildMdlForNonPagedPool MmCanFileBeTruncated MmCommitSessionMappedView MmCopyMemory MmCopyVirtualMemory MmCreateMdl MmCreateMirror MmCreateSection MmDisableModifiedWriteOfSection MmDoesFileHaveUserWritableReferences MmFlushImageSection MmForceSectionClosed MmFreeContiguousMemory MmFreeContiguousMemorySpecifyCache MmFreeMappingAddress MmFreeNonCachedMemory MmFreePagesFromMdl MmGetCacheAttribute MmGetMaximumFileSectionSize MmGetPhysicalAddress MmGetPhysicalMemoryRanges MmGetSystemRoutineAddress MmGetVirtualForPhysical MmGrowKernelStack MmHighestUserAddress DATA MmIsAddressValid MmIsDriverSuspectForVerifier MmIsDriverVerifying MmIsDriverVerifyingByAddress MmIsIoSpaceActive MmIsNonPagedSystemAddressValid MmIsRecursiveIoFault MmIsThisAnNtAsSystem MmIsVerifierEnabled MmLockPagableDataSection MmLockPagableImageSection MmLockPagableSectionByHandle MmMapIoSpace MmMapLockedPages MmMapLockedPagesSpecifyCache MmMapLockedPagesWithReservedMapping MmMapMemoryDumpMdl MmMapUserAddressesToPage MmMapViewInSessionSpace MmMapViewInSessionSpaceEx MmMapViewInSystemSpace MmMapViewInSystemSpaceEx MmMapViewOfSection MmMarkPhysicalMemoryAsBad MmMarkPhysicalMemoryAsGood MmMdlPageContentsState MmMdlPagesAreZero MmPageEntireDriver MmPrefetchPages MmPrefetchVirtualAddresses MmProbeAndLockPages MmProbeAndLockProcessPages MmProbeAndLockSelectedPages MmProtectMdlSystemAddress MmQuerySystemSize MmRemovePhysicalMemory MmResetDriverPaging MmRotatePhysicalView MmSectionObjectType DATA MmSecureVirtualMemory MmSetAddressRangeModified MmSizeOfMdl MmSystemRangeStart DATA MmTrimAllSystemPagableMemory MmUnlockPagableImageSection MmUnlockPages MmUnmapIoSpace MmUnmapLockedPages MmUnmapReservedMapping MmUnmapViewInSessionSpace MmUnmapViewInSystemSpace MmUnmapViewOfSection MmUnsecureVirtualMemory MmUserProbeAddress DATA NlsAnsiCodePage DATA NlsLeadByteInfo DATA NlsMbCodePageTag DATA NlsMbOemCodePageTag DATA NlsOemCodePage DATA NlsOemLeadByteInfo DATA NtAdjustPrivilegesToken NtAllocateLocallyUniqueId NtAllocateUuids NtAllocateVirtualMemory NtBuildGUID NtBuildLab NtBuildNumber NtClose NtCommitComplete NtCommitEnlistment NtCommitTransaction NtConnectPort NtCreateEnlistment NtCreateEvent NtCreateFile NtCreateResourceManager NtCreateSection NtCreateTransaction NtCreateTransactionManager NtDeleteAtom NtDeleteFile NtDeviceIoControlFile NtDuplicateObject NtDuplicateToken NtEnumerateTransactionObject NtFindAtom NtFreeVirtualMemory NtFreezeTransactions NtFsControlFile NtGetEnvironmentVariableEx NtGetNotificationResourceManager NtGlobalFlag DATA NtLockFile NtMakePermanentObject NtMapViewOfSection NtNotifyChangeDirectoryFile NtOpenEnlistment NtOpenFile NtOpenProcess NtOpenProcessToken NtOpenProcessTokenEx NtOpenResourceManager NtOpenThread NtOpenThreadToken NtOpenThreadTokenEx NtOpenTransaction NtOpenTransactionManager NtPrePrepareComplete NtPrePrepareEnlistment NtPrepareComplete NtPrepareEnlistment NtPropagationComplete NtPropagationFailed NtQueryDirectoryFile NtQueryEaFile NtQueryEnvironmentVariableInfoEx NtQueryInformationAtom NtQueryInformationEnlistment NtQueryInformationFile NtQueryInformationProcess NtQueryInformationResourceManager NtQueryInformationThread NtQueryInformationToken NtQueryInformationTransaction NtQueryInformationTransactionManager NtQueryQuotaInformationFile NtQuerySecurityAttributesToken NtQuerySecurityObject NtQuerySystemInformation NtQuerySystemInformationEx NtQueryVolumeInformationFile NtReadFile NtReadOnlyEnlistment NtRecoverEnlistment NtRecoverResourceManager NtRecoverTransactionManager NtRequestPort NtRequestWaitReplyPort NtRollbackComplete NtRollbackEnlistment NtRollbackTransaction NtSetCachedSigningLevel NtSetEaFile NtSetEvent NtSetInformationEnlistment NtSetInformationFile NtSetInformationProcess NtSetInformationResourceManager NtSetInformationThread NtSetInformationToken NtSetInformationTransaction NtSetInformationVirtualMemory NtSetQuotaInformationFile NtSetSecurityObject NtSetVolumeInformationFile NtShutdownSystem NtThawTransactions NtTraceControl NtTraceEvent NtUnlockFile NtVdmControl NtWaitForSingleObject NtWriteFile ObAssignSecurity ObCheckCreateObjectAccess ObCheckObjectAccess ObCloseHandle ObCreateObject ObCreateObjectType ObDeleteCapturedInsertInfo ObDereferenceObject ObDereferenceObjectDeferDelete ObDereferenceObjectDeferDeleteWithTag ObDereferenceSecurityDescriptor ObDuplicateObject ObFindHandleForObject ObGetFilterVersion ObGetObjectSecurity ObGetObjectType ObInsertObject ObIsDosDeviceLocallyMapped ObIsKernelHandle ObLogSecurityDescriptor ObMakeTemporaryObject ObOpenObjectByName ObOpenObjectByPointer ObOpenObjectByPointerWithTag ObQueryNameInfo ObQueryNameString ObQueryObjectAuditingByHandle ObReferenceObjectByHandle ObReferenceObjectByHandleWithTag ObReferenceObjectByName ObReferenceObjectByPointer ObReferenceObjectByPointerWithTag ObReferenceObjectSafe ObReferenceObjectSafeWithTag ObReferenceSecurityDescriptor ObRegisterCallbacks ObReleaseObjectSecurity ObSetHandleAttributes ObSetSecurityDescriptorInfo ObSetSecurityObjectByPointer ObUnRegisterCallbacks ObWaitForMultipleObjects ObWaitForSingleObject ObfDereferenceObject ObfDereferenceObjectWithTag ObfReferenceObject ObfReferenceObjectWithTag POGOBuffer DATA PcwAddInstance PcwCloseInstance PcwCreateInstance PcwRegister PcwUnregister PfFileInfoNotify PfxFindPrefix PfxInitialize PfxInsertPrefix PfxRemovePrefix PoCallDriver PoCancelDeviceNotify PoClearPowerRequest PoCreatePowerRequest PoDeletePowerRequest PoDisableSleepStates PoEndDeviceBusy PoFxActivateComponent PoFxCompleteDevicePowerNotRequired PoFxCompleteIdleCondition PoFxCompleteIdleState PoFxIdleComponent PoFxNotifySurprisePowerOn PoFxPowerControl PoFxPowerOnCrashdumpDevice PoFxProcessorNotification PoFxRegisterCoreDevice PoFxRegisterCrashdumpDevice PoFxRegisterDevice PoFxRegisterPlugin PoFxRegisterPluginEx PoFxRegisterPrimaryDevice PoFxReportDevicePoweredOn PoFxSetComponentLatency PoFxSetComponentResidency PoFxSetComponentWake PoFxSetDeviceIdleTimeout PoFxStartDevicePowerManagement PoFxUnregisterDevice PoGetProcessorIdleAccounting PoGetSystemWake PoInitiateProcessorWake PoLatencySensitivityHint PoNotifyVSyncChange PoQueryWatchdogTime PoQueueShutdownWorkItem PoReenableSleepStates PoRegisterCoalescingCallback PoRegisterDeviceForIdleDetection PoRegisterDeviceNotify PoRegisterPowerSettingCallback PoRegisterSystemState PoRequestPowerIrp PoRequestShutdownEvent PoSetDeviceBusyEx PoSetFixedWakeSource PoSetHiberRange PoSetPowerRequest PoSetPowerState PoSetSystemState PoSetSystemWake PoSetUserPresent PoShutdownBugCheck PoStartDeviceBusy PoStartNextPowerIrp PoUnregisterCoalescingCallback PoUnregisterPowerSettingCallback PoUnregisterSystemState PoUserShutdownCancelled PoUserShutdownInitiated ProbeForRead ProbeForWrite PsAcquireProcessExitSynchronization PsAssignImpersonationToken PsChargePoolQuota PsChargeProcessNonPagedPoolQuota PsChargeProcessPagedPoolQuota PsChargeProcessPoolQuota PsChargeProcessWakeCounter PsCreateSystemThread PsCreateSystemThreadEx PsDereferenceImpersonationToken PsDereferenceKernelStack PsDereferencePrimaryToken PsDisableImpersonation PsEnterPriorityRegion PsEstablishWin32Callouts PsGetContextThread PsGetCurrentProcess PsGetCurrentProcessId PsGetCurrentProcessSessionId PsGetCurrentProcessWin32Process PsGetCurrentThread PsGetCurrentThreadId PsGetCurrentThreadPreviousMode PsGetCurrentThreadProcess PsGetCurrentThreadProcessId PsGetCurrentThreadStackBase PsGetCurrentThreadStackLimit PsGetCurrentThreadTeb PsGetCurrentThreadWin32Thread PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion PsGetJobLock PsGetJobSessionId PsGetJobUIRestrictionsClass PsGetProcessCommonJob PsGetProcessCreateTimeQuadPart PsGetProcessDebugPort PsGetProcessExitProcessCalled PsGetProcessExitStatus PsGetProcessExitTime PsGetProcessId PsGetProcessImageFileName PsGetProcessInheritedFromUniqueProcessId PsGetProcessJob PsGetProcessPeb PsGetProcessPriorityClass PsGetProcessProtection PsGetProcessSectionBaseAddress PsGetProcessSecurityPort PsGetProcessSessionId PsGetProcessSessionIdEx PsGetProcessSignatureLevel PsGetProcessWin32Process PsGetProcessWin32WindowStation PsGetThreadExitStatus PsGetThreadFreezeCount PsGetThreadHardErrorsAreDisabled PsGetThreadId PsGetThreadProcess PsGetThreadProcessId PsGetThreadSessionId PsGetThreadTeb PsGetThreadWin32Thread PsGetVersion PsImpersonateClient PsInitialSystemProcess DATA PsIsCurrentThreadPrefetching PsIsDiskCountersEnabled PsIsProcessBeingDebugged PsIsProtectedProcess PsIsProtectedProcessLight PsIsSystemProcess PsIsSystemThread PsIsThreadImpersonating PsIsThreadTerminating PsJobType DATA PsLeavePriorityRegion PsLookupProcessByProcessId PsLookupProcessThreadByCid PsLookupThreadByThreadId PsProcessType DATA PsQueryProcessAttributesByToken PsQueryProcessExceptionFlags PsQueryTotalCycleTimeProcess PsReferenceImpersonationToken PsReferenceKernelStack PsReferencePrimaryToken PsReferenceProcessFilePointer PsReleaseProcessExitSynchronization PsReleaseProcessWakeCounter PsRemoveCreateThreadNotifyRoutine PsRemoveLoadImageNotifyRoutine PsRestoreImpersonation PsResumeProcess PsReturnPoolQuota PsReturnProcessNonPagedPoolQuota PsReturnProcessPagedPoolQuota PsRevertThreadToSelf PsRevertToSelf PsSetContextThread PsSetCreateProcessNotifyRoutine PsSetCreateProcessNotifyRoutineEx PsSetCreateThreadNotifyRoutine PsSetCurrentThreadPrefetching PsSetLegoNotifyRoutine PsSetLoadImageNotifyRoutine PsSetProcessPriorityByClass PsSetProcessPriorityClass PsSetProcessSecurityPort PsSetProcessWin32Process PsSetProcessWindowStation PsSetThreadHardErrorsAreDisabled PsSetThreadWin32Thread PsSuspendProcess PsTerminateSystemThread PsThreadType DATA PsUILanguageComitted DATA PsUpdateDiskCounters PsWrapApcWow64Thread ReadTimeStampCounter RtlAbsoluteToSelfRelativeSD RtlAddAccessAllowedAce RtlAddAccessAllowedAceEx RtlAddAce RtlAddAtomToAtomTable RtlAddAtomToAtomTableEx RtlAddRange RtlAddResourceAttributeAce RtlAllocateHeap RtlAnsiCharToUnicodeChar RtlAnsiStringToUnicodeSize RtlAnsiStringToUnicodeString RtlAppendAsciizToString RtlAppendStringToString RtlAppendUnicodeStringToString RtlAppendUnicodeToString RtlAreAllAccessesGranted RtlAreAnyAccessesGranted RtlAreBitsClear RtlAreBitsSet RtlAssert RtlAvlInsertNodeEx RtlAvlRemoveNode RtlCaptureContext RtlCaptureStackBackTrace RtlCharToInteger RtlCheckPortableOperatingSystem RtlCheckRegistryKey RtlCheckTokenCapability RtlCheckTokenMembership RtlCheckTokenMembershipEx RtlClearAllBits RtlClearBit RtlClearBits RtlCmDecodeMemIoResource RtlCmEncodeMemIoResource RtlCompareAltitudes RtlCompareMemory RtlCompareMemoryUlong RtlCompareString RtlCompareUnicodeString RtlCompareUnicodeStrings RtlCompressBuffer RtlCompressChunks RtlComputeCrc32 RtlContractHashTable RtlConvertSidToUnicodeString RtlCopyBitMap RtlCopyLuid RtlCopyLuidAndAttributesArray RtlCopyMemory RtlCopyRangeList RtlCopySid RtlCopySidAndAttributesArray RtlCopyString RtlCopyUnicodeString RtlCrc32 RtlCrc64 RtlCreateAcl RtlCreateAtomTable RtlCreateAtomTableEx RtlCreateHashTable RtlCreateHashTableEx RtlCreateHeap RtlCreateRegistryKey RtlCreateSecurityDescriptor RtlCreateSystemVolumeInformationFolder RtlCreateUnicodeString RtlCreateUserThread RtlCultureNameToLCID RtlCustomCPToUnicodeN RtlDecompressBuffer RtlDecompressBufferEx RtlDecompressChunks RtlDecompressFragment RtlDelete RtlDeleteAce RtlDeleteAtomFromAtomTable RtlDeleteElementGenericTable RtlDeleteElementGenericTableAvl RtlDeleteElementGenericTableAvlEx RtlDeleteHashTable RtlDeleteNoSplay RtlDeleteOwnersRanges RtlDeleteRange RtlDeleteRegistryValue RtlDescribeChunk RtlDestroyAtomTable RtlDestroyHeap RtlDowncaseUnicodeChar RtlDowncaseUnicodeString RtlDuplicateUnicodeString RtlEmptyAtomTable RtlEndEnumerationHashTable RtlEndWeakEnumerationHashTable RtlEnumerateEntryHashTable RtlEnumerateGenericTable RtlEnumerateGenericTableAvl RtlEnumerateGenericTableLikeADirectory RtlEnumerateGenericTableWithoutSplaying RtlEnumerateGenericTableWithoutSplayingAvl RtlEqualLuid RtlEqualSid RtlEqualString RtlEqualUnicodeString RtlEqualWnfChangeStamps RtlEthernetAddressToStringA RtlEthernetAddressToStringW RtlEthernetStringToAddressA RtlEthernetStringToAddressW RtlExpandHashTable RtlExtendedMagicDivide RtlExtractBitMap RtlFillMemory RtlFillMemoryUlong RtlFillMemoryUlonglong RtlFindAceByType RtlFindClearBits RtlFindClearBitsAndSet RtlFindClearRuns RtlFindClosestEncodableLength RtlFindFirstRunClear RtlFindLastBackwardRunClear RtlFindLeastSignificantBit RtlFindLongestRunClear RtlFindMessage RtlFindMostSignificantBit RtlFindNextForwardRunClear RtlFindRange RtlFindSetBits RtlFindSetBitsAndClear RtlFindUnicodePrefix RtlFormatCurrentUserKeyPath RtlFormatMessage RtlFreeAnsiString RtlFreeHeap RtlFreeOemString RtlFreeRangeList RtlFreeUnicodeString RtlGUIDFromString RtlGenerate8dot3Name RtlGenerateClass5Guid RtlGetAce RtlGetAppContainerNamedObjectPath RtlGetAppContainerParent RtlGetAppContainerSidType RtlGetCallersAddress RtlGetCompressionWorkSpaceSize RtlGetDaclSecurityDescriptor RtlGetDefaultCodePage RtlGetElementGenericTable RtlGetElementGenericTableAvl RtlGetEnabledExtendedFeatures RtlGetFirstRange RtlGetGroupSecurityDescriptor RtlGetIntegerAtom RtlGetLastRange RtlGetNextEntryHashTable RtlGetNextRange RtlGetNtGlobalFlags RtlGetOwnerSecurityDescriptor RtlGetProductInfo RtlGetSaclSecurityDescriptor RtlGetSetBootStatusData RtlGetThreadLangIdByIndex RtlGetVersion RtlHashUnicodeString RtlIdnToAscii RtlIdnToNameprepUnicode RtlIdnToUnicode RtlImageDirectoryEntryToData RtlImageNtHeader RtlImageNtHeaderEx RtlInitAnsiString RtlInitAnsiStringEx RtlInitCodePageTable RtlInitEnumerationHashTable RtlInitString RtlInitUnicodeString RtlInitUnicodeStringEx RtlInitWeakEnumerationHashTable RtlInitializeBitMap RtlInitializeGenericTable RtlInitializeGenericTableAvl RtlInitializeRangeList RtlInitializeSid RtlInitializeUnicodePrefix RtlInsertElementGenericTable RtlInsertElementGenericTableAvl RtlInsertElementGenericTableFull RtlInsertElementGenericTableFullAvl RtlInsertEntryHashTable RtlInsertUnicodePrefix RtlInt64ToUnicodeString RtlIntegerToChar RtlIntegerToUnicode RtlIntegerToUnicodeString RtlInterlockedClearBitRun RtlInterlockedSetBitRun RtlInterlockedSetClearRun RtlInvertRangeList RtlInvertRangeListEx RtlIoDecodeMemIoResource RtlIoEncodeMemIoResource RtlIpv4AddressToStringA RtlIpv4AddressToStringExA RtlIpv4AddressToStringExW RtlIpv4AddressToStringW RtlIpv4StringToAddressA RtlIpv4StringToAddressExA RtlIpv4StringToAddressExW RtlIpv4StringToAddressW RtlIpv6AddressToStringA RtlIpv6AddressToStringExA RtlIpv6AddressToStringExW RtlIpv6AddressToStringW RtlIpv6StringToAddressA RtlIpv6StringToAddressExA RtlIpv6StringToAddressExW RtlIpv6StringToAddressW RtlIsGenericTableEmpty RtlIsGenericTableEmptyAvl RtlIsNameLegalDOS8Dot3 RtlIsNormalizedString RtlIsNtDdiVersionAvailable RtlIsRangeAvailable RtlIsServicePackVersionInstalled RtlIsUntrustedObject RtlIsValidOemCharacter RtlLCIDToCultureName RtlLengthRequiredSid RtlLengthSecurityDescriptor RtlLengthSid RtlLoadString RtlLocalTimeToSystemTime RtlLockBootStatusData RtlLookupAtomInAtomTable RtlLookupElementGenericTable RtlLookupElementGenericTableAvl RtlLookupElementGenericTableFull RtlLookupElementGenericTableFullAvl RtlLookupEntryHashTable RtlLookupFirstMatchingElementGenericTableAvl RtlLookupFunctionEntry RtlMapGenericMask RtlMapSecurityErrorToNtStatus RtlMergeRangeLists RtlMoveMemory RtlMultiByteToUnicodeN RtlMultiByteToUnicodeSize RtlNextUnicodePrefix RtlNormalizeString RtlNtStatusToDosError RtlNtStatusToDosErrorNoTeb RtlNumberGenericTableElements RtlNumberGenericTableElementsAvl RtlNumberOfClearBits RtlNumberOfClearBitsInRange RtlNumberOfSetBits RtlNumberOfSetBitsInRange RtlNumberOfSetBitsUlongPtr RtlOemStringToCountedUnicodeString RtlOemStringToUnicodeSize RtlOemStringToUnicodeString RtlOemToUnicodeN RtlOpenCurrentUser RtlOwnerAcesPresent RtlPcToFileHeader RtlPinAtomInAtomTable RtlPrefetchMemoryNonTemporal RtlPrefixString RtlPrefixUnicodeString RtlQueryAtomInAtomTable RtlQueryDynamicTimeZoneInformation RtlQueryElevationFlags RtlQueryInformationAcl RtlQueryModuleInformation RtlQueryPackageIdentity RtlQueryRegistryValues RtlQueryRegistryValuesEx RtlQueryTimeZoneInformation RtlQueryValidationRunlevel RtlRaiseException RtlRandom RtlRandomEx RtlRbInsertNodeEx RtlRbRemoveNode RtlRealPredecessor RtlRealSuccessor RtlRemoveEntryHashTable RtlRemoveUnicodePrefix RtlReplaceSidInSd RtlReserveChunk RtlRestoreContext RtlRunOnceBeginInitialize RtlRunOnceComplete RtlRunOnceExecuteOnce RtlRunOnceInitialize RtlSecondsSince1970ToTime RtlSecondsSince1980ToTime RtlSelfRelativeToAbsoluteSD RtlSelfRelativeToAbsoluteSD2 RtlSetAllBits RtlSetBit RtlSetBits RtlSetControlSecurityDescriptor RtlSetDaclSecurityDescriptor RtlSetDynamicTimeZoneInformation RtlSetGroupSecurityDescriptor RtlSetOwnerSecurityDescriptor RtlSetPortableOperatingSystem RtlSetSaclSecurityDescriptor RtlSetTimeZoneInformation RtlSidHashInitialize RtlSidHashLookup RtlSizeHeap RtlSplay RtlStringFromGUID RtlSubAuthorityCountSid RtlSubAuthoritySid RtlSubtreePredecessor RtlSubtreeSuccessor RtlSystemTimeToLocalTime RtlTestBit RtlTimeFieldsToTime RtlTimeToElapsedTimeFields RtlTimeToSecondsSince1970 RtlTimeToSecondsSince1980 RtlTimeToTimeFields RtlTraceDatabaseAdd RtlTraceDatabaseCreate RtlTraceDatabaseDestroy RtlTraceDatabaseEnumerate RtlTraceDatabaseFind RtlTraceDatabaseLock RtlTraceDatabaseUnlock RtlTraceDatabaseValidate RtlUTF8ToUnicodeN RtlUlongByteSwap RtlUlonglongByteSwap RtlUnicodeStringToAnsiSize RtlUnicodeStringToAnsiString RtlUnicodeStringToCountedOemString RtlUnicodeStringToInteger RtlUnicodeStringToOemSize RtlUnicodeStringToOemString RtlUnicodeToCustomCPN RtlUnicodeToMultiByteN RtlUnicodeToMultiByteSize RtlUnicodeToOemN RtlUnicodeToUTF8N RtlUnlockBootStatusData RtlUnwind RtlUnwindEx RtlUpcaseUnicodeChar RtlUpcaseUnicodeString RtlUpcaseUnicodeStringToAnsiString RtlUpcaseUnicodeStringToCountedOemString RtlUpcaseUnicodeStringToOemString RtlUpcaseUnicodeToCustomCPN RtlUpcaseUnicodeToMultiByteN RtlUpcaseUnicodeToOemN RtlUpperChar RtlUpperString RtlUshortByteSwap RtlValidRelativeSecurityDescriptor RtlValidSecurityDescriptor RtlValidSid RtlValidateUnicodeString RtlVerifyVersionInfo RtlVirtualUnwind RtlVolumeDeviceToDosName RtlWalkFrameChain RtlWeaklyEnumerateEntryHashTable RtlWriteRegistryValue RtlZeroHeap RtlZeroMemory RtlxAnsiStringToUnicodeSize RtlxOemStringToUnicodeSize RtlxUnicodeStringToAnsiSize RtlxUnicodeStringToOemSize SeAccessCheck SeAccessCheckEx SeAccessCheckFromState SeAccessCheckFromStateEx SeAccessCheckWithHint SeAdjustAccessStateForTrustLabel SeAppendPrivileges SeAssignSecurity SeAssignSecurityEx SeAuditHardLinkCreation SeAuditHardLinkCreationWithTransaction SeAuditTransactionStateChange SeAuditingAnyFileEventsWithContext SeAuditingAnyFileEventsWithContextEx SeAuditingFileEvents SeAuditingFileEventsWithContext SeAuditingFileEventsWithContextEx SeAuditingFileOrGlobalEvents SeAuditingHardLinkEvents SeAuditingHardLinkEventsWithContext SeAuditingWithTokenForSubcategory SeCaptureSecurityDescriptor SeCaptureSubjectContext SeCaptureSubjectContextEx SeCloseObjectAuditAlarm SeCloseObjectAuditAlarmForNonObObject SeComputeAutoInheritByObjectType SeCreateAccessState SeCreateAccessStateEx SeCreateClientSecurity SeCreateClientSecurityEx SeCreateClientSecurityFromSubjectContext SeCreateClientSecurityFromSubjectContextEx SeDeassignSecurity SeDeleteAccessState SeDeleteObjectAuditAlarm SeDeleteObjectAuditAlarmWithTransaction SeExamineSacl SeExports DATA SeFilterToken SeFreePrivileges SeGetCachedSigningLevel SeGetLinkedToken SeGetLogonSessionToken SeImpersonateClient SeImpersonateClientEx SeIsParentOfChildAppContainer SeLocateProcessImageName SeLockSubjectContext SeMarkLogonSessionForTerminationNotification SeOpenObjectAuditAlarm SeOpenObjectAuditAlarmForNonObObject SeOpenObjectAuditAlarmWithTransaction SeOpenObjectForDeleteAuditAlarm SeOpenObjectForDeleteAuditAlarmWithTransaction SePrivilegeCheck SePrivilegeObjectAuditAlarm SePublicDefaultDacl DATA SeQueryAuthenticationIdToken SeQueryInformationToken SeQuerySecureBootPolicyValue SeQuerySecurityAttributesToken SeQuerySecurityDescriptorInfo SeQuerySessionIdToken SeRegisterImageVerificationCallback SeRegisterLogonSessionTerminatedRoutine SeReleaseSecurityDescriptor SeReleaseSubjectContext SeReportSecurityEvent SeReportSecurityEventWithSubCategory SeSecurityAttributePresent SeSetAccessStateGenericMapping SeSetAuditParameter SeSetSecurityAttributesToken SeSetSecurityDescriptorInfo SeSetSecurityDescriptorInfoEx SeShouldCheckForAccessRightsFromParent SeSinglePrivilegeCheck SeSrpAccessCheck SeSystemDefaultDacl DATA SeSystemDefaultSd DATA SeTokenFromAccessInformation SeTokenImpersonationLevel SeTokenIsAdmin SeTokenIsRestricted SeTokenIsWriteRestricted SeTokenObjectType DATA SeTokenType SeUnlockSubjectContext SeUnregisterImageVerificationCallback SeUnregisterLogonSessionTerminatedRoutine SeValidSecurityDescriptor TmCancelPropagationRequest TmCommitComplete TmCommitEnlistment TmCommitTransaction TmCreateEnlistment TmCurrentTransaction TmDereferenceEnlistmentKey TmEnableCallbacks TmEndPropagationRequest TmEnlistmentObjectType DATA TmFreezeTransactions TmGetTransactionId TmInitSystem TmInitSystemPhase2 TmInitializeTransactionManager TmIsKTMCommitCoordinator TmIsTransactionActive TmPrePrepareComplete TmPrePrepareEnlistment TmPrepareComplete TmPrepareEnlistment TmPropagationComplete TmPropagationFailed TmReadOnlyEnlistment TmRecoverEnlistment TmRecoverResourceManager TmRecoverTransactionManager TmReferenceEnlistmentKey TmRenameTransactionManager TmRequestOutcomeEnlistment TmResourceManagerObjectType DATA TmRollbackComplete TmRollbackEnlistment TmRollbackTransaction TmSetCurrentTransaction TmSinglePhaseReject TmThawTransactions TmTransactionManagerObjectType DATA TmTransactionObjectType DATA VerSetConditionMask VfFailDeviceNode VfFailDriver VfFailSystemBIOS VfInsertContext VfIsVerificationEnabled VfQueryDeviceContext VfQueryDispatchTable VfQueryDriverContext VfQueryIrpContext VfQueryThreadContext VfRemoveContext WheaAddErrorSource WheaConfigureErrorSource WheaGetErrorSource WheaInitializeRecordHeader WheaReportHwError WmiGetClock WmiQueryTraceInformation WmiTraceMessage WmiTraceMessageVa XIPDispatch ZwAccessCheckAndAuditAlarm ZwAddBootEntry ZwAddDriverEntry ZwAdjustPrivilegesToken ZwAlertThread ZwAllocateLocallyUniqueId ZwAllocateVirtualMemory ZwAlpcAcceptConnectPort ZwAlpcCancelMessage ZwAlpcConnectPort ZwAlpcConnectPortEx ZwAlpcCreatePort ZwAlpcCreatePortSection ZwAlpcCreateResourceReserve ZwAlpcCreateSectionView ZwAlpcCreateSecurityContext ZwAlpcDeletePortSection ZwAlpcDeleteResourceReserve ZwAlpcDeleteSectionView ZwAlpcDeleteSecurityContext ZwAlpcDisconnectPort ZwAlpcQueryInformation ZwAlpcSendWaitReceivePort ZwAlpcSetInformation ZwAssignProcessToJobObject ZwAssociateWaitCompletionPacket ZwCancelIoFile ZwCancelIoFileEx ZwCancelTimer ZwClearEvent ZwClose ZwCloseObjectAuditAlarm ZwCommitComplete ZwCommitEnlistment ZwCommitTransaction ZwConnectPort ZwCreateDirectoryObject ZwCreateEnlistment ZwCreateEvent ZwCreateFile ZwCreateIoCompletion ZwCreateJobObject ZwCreateKey ZwCreateKeyTransacted ZwCreateResourceManager ZwCreateSection ZwCreateSymbolicLinkObject ZwCreateTimer ZwCreateTransaction ZwCreateTransactionManager ZwCreateWaitCompletionPacket ZwCreateWnfStateName ZwDeleteBootEntry ZwDeleteDriverEntry ZwDeleteFile ZwDeleteKey ZwDeleteValueKey ZwDeleteWnfStateData ZwDeleteWnfStateName ZwDeviceIoControlFile ZwDisplayString ZwDuplicateObject ZwDuplicateToken ZwEnumerateBootEntries ZwEnumerateDriverEntries ZwEnumerateKey ZwEnumerateTransactionObject ZwEnumerateValueKey ZwFlushBuffersFile ZwFlushBuffersFileEx ZwFlushInstructionCache ZwFlushKey ZwFlushVirtualMemory ZwFreeVirtualMemory ZwFsControlFile ZwGetNotificationResourceManager ZwImpersonateAnonymousToken ZwInitiatePowerAction ZwIsProcessInJob ZwLoadDriver ZwLoadKey ZwLoadKeyEx ZwLockFile ZwLockProductActivationKeys ZwLockVirtualMemory ZwMakeTemporaryObject ZwMapViewOfSection ZwModifyBootEntry ZwModifyDriverEntry ZwNotifyChangeKey ZwNotifyChangeSession ZwOpenDirectoryObject ZwOpenEnlistment ZwOpenEvent ZwOpenFile ZwOpenJobObject ZwOpenKey ZwOpenKeyEx ZwOpenKeyTransacted ZwOpenKeyTransactedEx ZwOpenProcess ZwOpenProcessToken ZwOpenProcessTokenEx ZwOpenResourceManager ZwOpenSection ZwOpenSession ZwOpenSymbolicLinkObject ZwOpenThread ZwOpenThreadToken ZwOpenThreadTokenEx ZwOpenTimer ZwOpenTransaction ZwOpenTransactionManager ZwPowerInformation ZwPrePrepareComplete ZwPrePrepareEnlistment ZwPrepareComplete ZwPrepareEnlistment ZwPropagationComplete ZwPropagationFailed ZwProtectVirtualMemory ZwPulseEvent ZwQueryBootEntryOrder ZwQueryBootOptions ZwQueryDefaultLocale ZwQueryDefaultUILanguage ZwQueryDirectoryFile ZwQueryDirectoryObject ZwQueryDriverEntryOrder ZwQueryEaFile ZwQueryFullAttributesFile ZwQueryInformationEnlistment ZwQueryInformationFile ZwQueryInformationJobObject ZwQueryInformationProcess ZwQueryInformationResourceManager ZwQueryInformationThread ZwQueryInformationToken ZwQueryInformationTransaction ZwQueryInformationTransactionManager ZwQueryInstallUILanguage ZwQueryKey ZwQueryLicenseValue ZwQueryObject ZwQueryQuotaInformationFile ZwQuerySection ZwQuerySecurityAttributesToken ZwQuerySecurityObject ZwQuerySymbolicLinkObject ZwQuerySystemEnvironmentValueEx ZwQuerySystemInformation ZwQuerySystemInformationEx ZwQueryValueKey ZwQueryVirtualMemory ZwQueryVolumeInformationFile ZwQueryWnfStateData ZwQueryWnfStateNameInformation ZwReadFile ZwReadOnlyEnlistment ZwRecoverEnlistment ZwRecoverResourceManager ZwRecoverTransactionManager ZwRemoveIoCompletion ZwRemoveIoCompletionEx ZwRenameKey ZwReplaceKey ZwRequestPort ZwRequestWaitReplyPort ZwResetEvent ZwRestoreKey ZwRollbackComplete ZwRollbackEnlistment ZwRollbackTransaction ZwSaveKey ZwSaveKeyEx ZwSecureConnectPort ZwSetBootEntryOrder ZwSetBootOptions ZwSetCachedSigningLevel ZwSetDefaultLocale ZwSetDefaultUILanguage ZwSetDriverEntryOrder ZwSetEaFile ZwSetEvent ZwSetInformationEnlistment ZwSetInformationFile ZwSetInformationJobObject ZwSetInformationKey ZwSetInformationObject ZwSetInformationProcess ZwSetInformationResourceManager ZwSetInformationThread ZwSetInformationToken ZwSetInformationTransaction ZwSetInformationVirtualMemory ZwSetQuotaInformationFile ZwSetSecurityObject ZwSetSystemEnvironmentValueEx ZwSetSystemInformation ZwSetSystemTime ZwSetTimer ZwSetTimerEx ZwSetValueKey ZwSetVolumeInformationFile ZwTerminateJobObject ZwTerminateProcess ZwTraceEvent ZwTranslateFilePath ZwUnloadDriver ZwUnloadKey ZwUnloadKeyEx ZwUnlockFile ZwUnlockVirtualMemory ZwUnmapViewOfSection ZwUpdateWnfStateData ZwWaitForMultipleObjects ZwWaitForSingleObject ZwWriteFile ZwYieldExecution __C_specific_handler __chkstk __jump_unwind _i64toa_s _i64tow_s _itoa _itoa_s _itow _itow_s _ltoa_s _ltow_s _makepath_s _purecall _setjmp _setjmpex _snprintf _snprintf_s _snscanf_s _snwprintf _snwprintf_s _snwscanf_s _splitpath_s _stricmp _strlwr strlwr == _strlwr _strnicmp _strnset _strnset_s _strrev _strset _strset_s _strtoui64 _strupr _swprintf _ui64toa_s _ui64tow_s _ultoa_s _ultow_s _vsnprintf _vsnprintf_s _vsnwprintf _vsnwprintf_s _vswprintf _wcsicmp _wcslwr wcslwr == _wcslwr _wcsnicmp _wcsnset _wcsnset_s _wcsrev _wcsset_s _wcsupr _wmakepath_s _wsplitpath_s _wtoi _wtol atoi atol bsearch bsearch_s isdigit islower isprint isspace isupper isxdigit longjmp mbstowcs mbtowc memchr memcmp memcpy memcpy_s memmove memmove_s memset psMUITest DATA qsort rand sprintf sprintf_s srand sscanf_s strcat strcat_s strchr strcmp strcpy strcpy_s strlen strncat strncat_s strncmp strncpy strncpy_s strnlen strrchr strspn strstr strtok_s swprintf swprintf_s swscanf_s tolower toupper towlower towupper vDbgPrintEx vDbgPrintExWithPrefix vsprintf vsprintf_s vswprintf_s wcscat wcscat_s wcschr wcscmp wcscpy wcscpy_s wcscspn wcslen wcsncat wcsncat_s wcsncmp wcsncpy wcsncpy_s wcsnlen wcsrchr wcsspn wcsstr wcstombs wcstoul wctomb