2438 lines
54 KiB
Modula-2
2438 lines
54 KiB
Modula-2
;
|
|
; Definition file of ntoskrnl.exe
|
|
; Automatic generated by gendef
|
|
; written by Kai Tietz 2008-2014
|
|
;
|
|
LIBRARY "ntoskrnl.exe"
|
|
EXPORTS
|
|
ord_1 @1
|
|
ord_2 @2
|
|
ord_3 @3
|
|
AlpcGetHeaderSize
|
|
AlpcGetMessageAttribute
|
|
AlpcInitializeMessageAttribute
|
|
BgkDisplayCharacter
|
|
BgkGetConsoleState
|
|
BgkGetCursorState
|
|
BgkSetCursor
|
|
CcAddDirtyPagesToExternalCache
|
|
CcCanIWrite
|
|
CcCoherencyFlushAndPurgeCache
|
|
CcCopyRead
|
|
CcCopyReadEx
|
|
CcCopyWrite
|
|
CcCopyWriteEx
|
|
CcCopyWriteWontFlush
|
|
CcDeductDirtyPagesFromExternalCache
|
|
CcDeferWrite
|
|
CcFastCopyRead
|
|
CcFastCopyWrite
|
|
CcFastMdlReadWait DATA
|
|
CcFlushCache
|
|
CcFlushCacheToLsn
|
|
CcGetDirtyPages
|
|
CcGetFileObjectFromBcb
|
|
CcGetFileObjectFromSectionPtrs
|
|
CcGetFileObjectFromSectionPtrsRef
|
|
CcGetFlushedValidData
|
|
CcGetLsnForFileObject
|
|
CcInitializeCacheMap
|
|
CcIsThereDirtyData
|
|
CcIsThereDirtyDataEx
|
|
CcIsThereDirtyLoggedPages
|
|
CcMapData
|
|
CcMdlRead
|
|
CcMdlReadComplete
|
|
CcMdlWriteAbort
|
|
CcMdlWriteComplete
|
|
CcPinMappedData
|
|
CcPinRead
|
|
CcPrepareMdlWrite
|
|
CcPreparePinWrite
|
|
CcPurgeCacheSection
|
|
CcRegisterExternalCache
|
|
CcRemapBcb
|
|
CcRepinBcb
|
|
CcScheduleReadAhead
|
|
CcScheduleReadAheadEx
|
|
CcSetAdditionalCacheAttributes
|
|
CcSetAdditionalCacheAttributesEx
|
|
CcSetBcbOwnerPointer
|
|
CcSetDirtyPageThreshold
|
|
CcSetDirtyPinnedData
|
|
CcSetFileSizes
|
|
CcSetFileSizesEx
|
|
CcSetLogHandleForFile
|
|
CcSetLogHandleForFileEx
|
|
CcSetLoggedDataThreshold
|
|
CcSetParallelFlushFile
|
|
CcSetReadAheadGranularity
|
|
CcSetReadAheadGranularityEx
|
|
CcTestControl
|
|
CcUninitializeCacheMap
|
|
CcUnmapFileOffsetFromSystemCache
|
|
CcUnpinData
|
|
CcUnpinDataForThread
|
|
CcUnpinRepinnedBcb
|
|
CcUnregisterExternalCache
|
|
CcWaitForCurrentLazyWriterActivity
|
|
CcZeroData
|
|
CcZeroDataOnDisk
|
|
CmCallbackGetKeyObjectID
|
|
CmCallbackGetKeyObjectIDEx
|
|
CmCallbackReleaseKeyObjectIDEx
|
|
CmGetBoundTransaction
|
|
CmGetCallbackVersion
|
|
CmKeyObjectType DATA
|
|
CmRegisterCallback
|
|
CmRegisterCallbackEx
|
|
CmSetCallbackObjectContext
|
|
CmUnRegisterCallback
|
|
DbgBreakPoint
|
|
DbgBreakPointWithStatus
|
|
DbgCommandString
|
|
DbgLoadImageSymbols
|
|
DbgPrint
|
|
DbgPrintEx
|
|
DbgPrintReturnControlC
|
|
DbgPrompt
|
|
DbgQueryDebugFilterState
|
|
DbgSetDebugFilterState
|
|
DbgSetDebugPrintCallback
|
|
DbgkLkmdRegisterCallback
|
|
DbgkLkmdUnregisterCallback
|
|
DbgkWerCaptureLiveKernelDump
|
|
EmClientQueryRuleState
|
|
EmClientRuleDeregisterNotification
|
|
EmClientRuleEvaluate
|
|
EmClientRuleRegisterNotification
|
|
EmProviderDeregister
|
|
EmProviderDeregisterEntry
|
|
EmProviderRegister
|
|
EmProviderRegisterEntry
|
|
EmpProviderRegister
|
|
EtwActivityIdControl
|
|
EtwEnableTrace
|
|
EtwEventEnabled
|
|
EtwProviderEnabled
|
|
EtwRegister
|
|
EtwRegisterClassicProvider
|
|
EtwSendTraceBuffer
|
|
EtwUnregister
|
|
EtwWrite
|
|
EtwWriteEndScenario
|
|
EtwWriteEx
|
|
EtwWriteStartScenario
|
|
EtwWriteString
|
|
EtwWriteTransfer
|
|
ExAcquireCacheAwarePushLockExclusive
|
|
ExAcquireCacheAwarePushLockExclusiveEx
|
|
ExAcquireCacheAwarePushLockSharedEx
|
|
ExAcquireFastMutex
|
|
ExAcquireFastMutexUnsafe
|
|
ExAcquirePushLockExclusiveEx
|
|
ExAcquirePushLockSharedEx
|
|
ExAcquireResourceExclusiveLite
|
|
ExAcquireResourceSharedLite
|
|
ExAcquireRundownProtection
|
|
ExAcquireRundownProtectionCacheAware
|
|
ExAcquireRundownProtectionCacheAwareEx
|
|
ExAcquireRundownProtectionEx
|
|
ExAcquireSharedStarveExclusive
|
|
ExAcquireSharedWaitForExclusive
|
|
ExAcquireSpinLockExclusive
|
|
ExAcquireSpinLockExclusiveAtDpcLevel
|
|
ExAcquireSpinLockShared
|
|
ExAcquireSpinLockSharedAtDpcLevel
|
|
ExAllocateCacheAwarePushLock
|
|
ExAllocateCacheAwareRundownProtection
|
|
ExAllocatePool
|
|
ExAllocatePoolWithQuota
|
|
ExAllocatePoolWithQuotaTag
|
|
ExAllocatePoolWithTag
|
|
ExAllocatePoolWithTagPriority
|
|
ExAllocateTimer
|
|
ExBlockOnAddressPushLock
|
|
ExBlockPushLock
|
|
ExCancelTimer
|
|
ExCompositionObjectType DATA
|
|
ExConvertExclusiveToSharedLite
|
|
ExCreateCallback
|
|
ExDeleteLookasideListEx
|
|
ExDeleteNPagedLookasideList
|
|
ExDeletePagedLookasideList
|
|
ExDeleteResourceLite
|
|
ExDeleteTimer
|
|
ExDesktopObjectType DATA
|
|
ExDisableResourceBoostLite
|
|
ExEnterCriticalRegionAndAcquireFastMutexUnsafe
|
|
ExEnterCriticalRegionAndAcquireResourceExclusive
|
|
ExEnterCriticalRegionAndAcquireResourceShared
|
|
ExEnterCriticalRegionAndAcquireSharedWaitForExclusive
|
|
ExEnterPriorityRegionAndAcquireResourceExclusive
|
|
ExEnterPriorityRegionAndAcquireResourceShared
|
|
ExEnumHandleTable
|
|
ExEventObjectType DATA
|
|
ExExtendZone
|
|
ExFetchLicenseData
|
|
ExFlushLookasideListEx
|
|
ExFreeCacheAwarePushLock
|
|
ExFreeCacheAwareRundownProtection
|
|
ExFreePool
|
|
ExFreePoolWithTag
|
|
ExGetCurrentProcessorCounts
|
|
ExGetCurrentProcessorCpuUsage
|
|
ExGetExclusiveWaiterCount
|
|
ExGetFirmwareEnvironmentVariable
|
|
ExGetLicenseTamperState
|
|
ExGetPreviousMode
|
|
ExGetSharedWaiterCount
|
|
ExInitializeLookasideListEx
|
|
ExInitializeNPagedLookasideList
|
|
ExInitializePagedLookasideList
|
|
ExInitializePushLock
|
|
ExInitializeResourceLite
|
|
ExInitializeRundownProtection
|
|
ExInitializeRundownProtectionCacheAware
|
|
ExInitializeZone
|
|
ExInterlockedAddLargeInteger
|
|
ExInterlockedAddUlong
|
|
ExInterlockedExtendZone
|
|
ExInterlockedInsertHeadList
|
|
ExInterlockedInsertTailList
|
|
ExInterlockedPopEntryList
|
|
ExInterlockedPushEntryList
|
|
ExInterlockedRemoveHeadList
|
|
ExIsProcessorFeaturePresent
|
|
ExIsResourceAcquiredExclusiveLite
|
|
ExIsResourceAcquiredSharedLite
|
|
ExLocalTimeToSystemTime
|
|
ExNotifyBootDeviceRemoval
|
|
ExNotifyCallback
|
|
ExQueryDepthSList
|
|
ExQueryFastCacheAppOrigin
|
|
ExQueryFastCacheDevLicense
|
|
ExQueryPoolBlockSize
|
|
ExQueryTimerResolution
|
|
ExQueryWnfStateData
|
|
ExQueueWorkItem
|
|
ExRaiseAccessViolation
|
|
ExRaiseDatatypeMisalignment
|
|
ExRaiseException
|
|
ExRaiseHardError
|
|
ExRaiseStatus
|
|
ExReInitializeRundownProtection
|
|
ExReInitializeRundownProtectionCacheAware
|
|
ExRealTimeIsUniversal
|
|
ExRegisterBootDevice
|
|
ExRegisterCallback
|
|
ExRegisterExtension
|
|
ExReinitializeResourceLite
|
|
ExReleaseCacheAwarePushLockExclusive
|
|
ExReleaseCacheAwarePushLockExclusiveEx
|
|
ExReleaseCacheAwarePushLockSharedEx
|
|
ExReleaseFastMutex
|
|
ExReleaseFastMutexUnsafe
|
|
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion
|
|
ExReleasePushLockEx
|
|
ExReleasePushLockExclusiveEx
|
|
ExReleasePushLockSharedEx
|
|
ExReleaseResourceAndLeaveCriticalRegion
|
|
ExReleaseResourceAndLeavePriorityRegion
|
|
ExReleaseResourceForThreadLite
|
|
ExReleaseResourceLite
|
|
ExReleaseRundownProtection
|
|
ExReleaseRundownProtectionCacheAware
|
|
ExReleaseRundownProtectionCacheAwareEx
|
|
ExReleaseRundownProtectionEx
|
|
ExReleaseSpinLockExclusive
|
|
ExReleaseSpinLockExclusiveFromDpcLevel
|
|
ExReleaseSpinLockShared
|
|
ExReleaseSpinLockSharedFromDpcLevel
|
|
ExRundownCompleted
|
|
ExRundownCompletedCacheAware
|
|
ExSemaphoreObjectType DATA
|
|
ExSetFirmwareEnvironmentVariable
|
|
ExSetLicenseTamperState
|
|
ExSetResourceOwnerPointer
|
|
ExSetResourceOwnerPointerEx
|
|
ExSetTimer
|
|
ExSetTimerResolution
|
|
ExSizeOfRundownProtectionCacheAware
|
|
ExSubscribeWnfStateChange
|
|
ExSystemExceptionFilter
|
|
ExSystemTimeToLocalTime
|
|
ExTimedWaitForUnblockPushLock
|
|
ExTryAcquirePushLockExclusiveEx
|
|
ExTryAcquirePushLockSharedEx
|
|
ExTryConvertPushLockSharedToExclusiveEx
|
|
ExTryConvertSharedSpinLockExclusive
|
|
ExTryQueueWorkItem
|
|
ExTryToAcquireFastMutex
|
|
ExTryToAcquireResourceExclusiveLite
|
|
ExUnblockOnAddressPushLockEx
|
|
ExUnblockPushLockEx
|
|
ExUnregisterCallback
|
|
ExUnregisterExtension
|
|
ExUnsubscribeWnfStateChange
|
|
ExUuidCreate
|
|
ExVerifySuite
|
|
ExWaitForRundownProtectionRelease
|
|
ExWaitForRundownProtectionReleaseCacheAware
|
|
ExWaitForUnblockPushLock
|
|
ExWindowStationObjectType DATA
|
|
ExfAcquirePushLockExclusive
|
|
ExfAcquirePushLockShared
|
|
ExfReleasePushLock
|
|
ExfReleasePushLockExclusive
|
|
ExfReleasePushLockShared
|
|
ExfTryAcquirePushLockShared
|
|
ExfTryToWakePushLock
|
|
ExfUnblockPushLock
|
|
ExpInterlockedFlushSList
|
|
ExpInterlockedPopEntrySList
|
|
ExpInterlockedPushEntrySList
|
|
FirstEntrySList
|
|
FsRtlAcknowledgeEcp
|
|
FsRtlAcquireEofLock
|
|
FsRtlAcquireFileExclusive
|
|
FsRtlAcquireHeaderMutex
|
|
FsRtlAddBaseMcbEntry
|
|
FsRtlAddBaseMcbEntryEx
|
|
FsRtlAddLargeMcbEntry
|
|
FsRtlAddMcbEntry
|
|
FsRtlAddToTunnelCache
|
|
FsRtlAllocateExtraCreateParameter
|
|
FsRtlAllocateExtraCreateParameterFromLookasideList
|
|
FsRtlAllocateExtraCreateParameterList
|
|
FsRtlAllocateFileLock
|
|
FsRtlAllocatePool
|
|
FsRtlAllocatePoolWithQuota
|
|
FsRtlAllocatePoolWithQuotaTag
|
|
FsRtlAllocatePoolWithTag
|
|
FsRtlAllocateResource
|
|
FsRtlAreNamesEqual
|
|
FsRtlAreThereCurrentOrInProgressFileLocks
|
|
FsRtlAreThereWaitingFileLocks
|
|
FsRtlAreVolumeStartupApplicationsComplete
|
|
FsRtlBalanceReads
|
|
FsRtlCancellableWaitForMultipleObjects
|
|
FsRtlCancellableWaitForSingleObject
|
|
FsRtlChangeBackingFileObject
|
|
FsRtlCheckLockForOplockRequest
|
|
FsRtlCheckLockForReadAccess
|
|
FsRtlCheckLockForWriteAccess
|
|
FsRtlCheckOplock
|
|
FsRtlCheckOplockEx
|
|
FsRtlCheckUpperOplock
|
|
FsRtlCopyRead
|
|
FsRtlCopyWrite
|
|
FsRtlCreateSectionForDataScan
|
|
FsRtlCurrentBatchOplock
|
|
FsRtlCurrentOplock
|
|
FsRtlCurrentOplockH
|
|
FsRtlDeleteExtraCreateParameterLookasideList
|
|
FsRtlDeleteKeyFromTunnelCache
|
|
FsRtlDeleteTunnelCache
|
|
FsRtlDeregisterUncProvider
|
|
FsRtlDismountComplete
|
|
FsRtlDissectDbcs
|
|
FsRtlDissectName
|
|
FsRtlDoesDbcsContainWildCards
|
|
FsRtlDoesNameContainWildCards
|
|
FsRtlFastCheckLockForRead
|
|
FsRtlFastCheckLockForWrite
|
|
FsRtlFastUnlockAll
|
|
FsRtlFastUnlockAllByKey
|
|
FsRtlFastUnlockSingle
|
|
FsRtlFindExtraCreateParameter
|
|
FsRtlFindInTunnelCache
|
|
FsRtlFreeExtraCreateParameter
|
|
FsRtlFreeExtraCreateParameterList
|
|
FsRtlFreeFileLock
|
|
FsRtlGetEcpListFromIrp
|
|
FsRtlGetFileNameInformation
|
|
FsRtlGetFileSize
|
|
FsRtlGetIoAtEof
|
|
FsRtlGetNextBaseMcbEntry
|
|
FsRtlGetNextExtraCreateParameter
|
|
FsRtlGetNextFileLock
|
|
FsRtlGetNextLargeMcbEntry
|
|
FsRtlGetNextMcbEntry
|
|
FsRtlGetSectorSizeInformation
|
|
FsRtlGetSupportedFeatures
|
|
FsRtlGetVirtualDiskNestingLevel
|
|
FsRtlHeatInit
|
|
FsRtlHeatLogIo
|
|
FsRtlHeatLogTierMove
|
|
FsRtlHeatUninit
|
|
FsRtlIncrementCcFastMdlReadWait
|
|
FsRtlIncrementCcFastReadNoWait
|
|
FsRtlIncrementCcFastReadNotPossible
|
|
FsRtlIncrementCcFastReadResourceMiss
|
|
FsRtlIncrementCcFastReadWait
|
|
FsRtlInitExtraCreateParameterLookasideList
|
|
FsRtlInitializeBaseMcb
|
|
FsRtlInitializeBaseMcbEx
|
|
FsRtlInitializeEofLock
|
|
FsRtlInitializeExtraCreateParameter
|
|
FsRtlInitializeExtraCreateParameterList
|
|
FsRtlInitializeFileLock
|
|
FsRtlInitializeLargeMcb
|
|
FsRtlInitializeMcb
|
|
FsRtlInitializeOplock
|
|
FsRtlInitializeTunnelCache
|
|
FsRtlInsertExtraCreateParameter
|
|
FsRtlInsertPerFileContext
|
|
FsRtlInsertPerFileObjectContext
|
|
FsRtlInsertPerStreamContext
|
|
FsRtlInsertReservedPerFileContext
|
|
FsRtlInsertReservedPerStreamContext
|
|
FsRtlIsDbcsInExpression
|
|
FsRtlIsEcpAcknowledged
|
|
FsRtlIsEcpFromUserMode
|
|
FsRtlIsFatDbcsLegal
|
|
FsRtlIsHpfsDbcsLegal
|
|
FsRtlIsNameInExpression
|
|
FsRtlIsNtstatusExpected
|
|
FsRtlIsPagingFile
|
|
FsRtlIsSystemPagingFile
|
|
FsRtlIsTotalDeviceFailure
|
|
FsRtlIssueDeviceIoControl
|
|
FsRtlKernelFsControlFile
|
|
FsRtlLegalAnsiCharacterArray DATA
|
|
FsRtlLogCcFlushError
|
|
FsRtlLookupBaseMcbEntry
|
|
FsRtlLookupLargeMcbEntry
|
|
FsRtlLookupLastBaseMcbEntry
|
|
FsRtlLookupLastBaseMcbEntryAndIndex
|
|
FsRtlLookupLastLargeMcbEntry
|
|
FsRtlLookupLastLargeMcbEntryAndIndex
|
|
FsRtlLookupLastMcbEntry
|
|
FsRtlLookupMcbEntry
|
|
FsRtlLookupPerFileContext
|
|
FsRtlLookupPerFileObjectContext
|
|
FsRtlLookupPerStreamContextInternal
|
|
FsRtlLookupReservedPerFileContext
|
|
FsRtlLookupReservedPerStreamContext
|
|
FsRtlMdlRead
|
|
FsRtlMdlReadComplete
|
|
FsRtlMdlReadCompleteDev
|
|
FsRtlMdlReadDev
|
|
FsRtlMdlReadEx
|
|
FsRtlMdlWriteComplete
|
|
FsRtlMdlWriteCompleteDev
|
|
FsRtlMupGetProviderIdFromName
|
|
FsRtlMupGetProviderInfoFromFileObject
|
|
FsRtlNormalizeNtstatus
|
|
FsRtlNotifyChangeDirectory
|
|
FsRtlNotifyCleanup
|
|
FsRtlNotifyCleanupAll
|
|
FsRtlNotifyFilterChangeDirectory
|
|
FsRtlNotifyFilterReportChange
|
|
FsRtlNotifyFullChangeDirectory
|
|
FsRtlNotifyFullReportChange
|
|
FsRtlNotifyInitializeSync
|
|
FsRtlNotifyReportChange
|
|
FsRtlNotifyUninitializeSync
|
|
FsRtlNotifyVolumeEvent
|
|
FsRtlNotifyVolumeEventEx
|
|
FsRtlNumberOfRunsInBaseMcb
|
|
FsRtlNumberOfRunsInLargeMcb
|
|
FsRtlNumberOfRunsInMcb
|
|
FsRtlOplockBreakH
|
|
FsRtlOplockBreakToNone
|
|
FsRtlOplockBreakToNoneEx
|
|
FsRtlOplockFsctrl
|
|
FsRtlOplockFsctrlEx
|
|
FsRtlOplockIsFastIoPossible
|
|
FsRtlOplockIsSharedRequest
|
|
FsRtlOplockKeysEqual
|
|
FsRtlPostPagingFileStackOverflow
|
|
FsRtlPostStackOverflow
|
|
FsRtlPrepareMdlWrite
|
|
FsRtlPrepareMdlWriteDev
|
|
FsRtlPrepareMdlWriteEx
|
|
FsRtlPrepareToReuseEcp
|
|
FsRtlPrivateLock
|
|
FsRtlProcessFileLock
|
|
FsRtlQueryCachedVdl
|
|
FsRtlQueryKernelEaFile
|
|
FsRtlQueryMaximumVirtualDiskNestingLevel
|
|
FsRtlRegisterFileSystemFilterCallbacks
|
|
FsRtlRegisterFltMgrCalls
|
|
FsRtlRegisterMupCalls
|
|
FsRtlRegisterUncProvider
|
|
FsRtlRegisterUncProviderEx
|
|
FsRtlReleaseEofLock
|
|
FsRtlReleaseFile
|
|
FsRtlReleaseFileNameInformation
|
|
FsRtlReleaseHeaderMutex
|
|
FsRtlRemoveBaseMcbEntry
|
|
FsRtlRemoveDotsFromPath
|
|
FsRtlRemoveExtraCreateParameter
|
|
FsRtlRemoveLargeMcbEntry
|
|
FsRtlRemoveMcbEntry
|
|
FsRtlRemovePerFileContext
|
|
FsRtlRemovePerFileObjectContext
|
|
FsRtlRemovePerStreamContext
|
|
FsRtlRemoveReservedPerFileContext
|
|
FsRtlRemoveReservedPerStreamContext
|
|
FsRtlResetBaseMcb
|
|
FsRtlResetLargeMcb
|
|
FsRtlSendModernAppTermination
|
|
FsRtlSetEcpListIntoIrp
|
|
FsRtlSetKernelEaFile
|
|
FsRtlSplitBaseMcb
|
|
FsRtlSplitLargeMcb
|
|
FsRtlSyncVolumes
|
|
FsRtlTeardownPerFileContexts
|
|
FsRtlTeardownPerStreamContexts
|
|
FsRtlTruncateBaseMcb
|
|
FsRtlTruncateLargeMcb
|
|
FsRtlTruncateMcb
|
|
FsRtlTryToAcquireHeaderMutex
|
|
FsRtlUninitializeBaseMcb
|
|
FsRtlUninitializeFileLock
|
|
FsRtlUninitializeLargeMcb
|
|
FsRtlUninitializeMcb
|
|
FsRtlUninitializeOplock
|
|
FsRtlUpdateDiskCounters
|
|
FsRtlUpperOplockFsctrl
|
|
FsRtlValidateReparsePointBuffer
|
|
HalDispatchTable DATA
|
|
HalExamineMBR
|
|
HalFlushIoBuffers
|
|
HalPrivateDispatchTable DATA
|
|
HeadlessDispatch
|
|
HvlGetLpIndexFromApicId
|
|
HvlQueryActiveHypervisorProcessorCount
|
|
HvlQueryActiveProcessors
|
|
HvlQueryConnection
|
|
HvlQueryHypervisorProcessorNodeNumber
|
|
HvlQueryNumaDistance
|
|
HvlQueryProcessorTopology
|
|
HvlQueryProcessorTopologyCount
|
|
HvlQueryProcessorTopologyHighestId
|
|
HvlRegisterInterruptCallback
|
|
HvlRegisterWheaErrorNotification
|
|
HvlUnregisterInterruptCallback
|
|
HvlUnregisterWheaErrorNotification
|
|
InbvAcquireDisplayOwnership
|
|
InbvCheckDisplayOwnership
|
|
InbvDisplayString
|
|
InbvEnableBootDriver
|
|
InbvEnableDisplayString
|
|
InbvInstallDisplayStringFilter
|
|
InbvIsBootDriverInstalled
|
|
InbvNotifyDisplayOwnershipChange
|
|
InbvNotifyDisplayOwnershipLost
|
|
InbvResetDisplay
|
|
InbvSetScrollRegion
|
|
InbvSetTextColor
|
|
InbvSolidColorFill
|
|
InitSafeBootMode DATA
|
|
InitializeSListHead
|
|
InterlockedPushListSList
|
|
IoAcquireCancelSpinLock
|
|
IoAcquireRemoveLockEx
|
|
IoAcquireVpbSpinLock
|
|
IoAdapterObjectType DATA
|
|
IoAdjustStackSizeForRedirection
|
|
IoAllocateAdapterChannel
|
|
IoAllocateController
|
|
IoAllocateDriverObjectExtension
|
|
IoAllocateErrorLogEntry
|
|
IoAllocateIrp
|
|
IoAllocateMdl
|
|
IoAllocateMiniCompletionPacket
|
|
IoAllocateSfioStreamIdentifier
|
|
IoAllocateWorkItem
|
|
IoApplyPriorityInfoThread
|
|
IoAssignResources
|
|
IoAttachDevice
|
|
IoAttachDeviceByPointer
|
|
IoAttachDeviceToDeviceStack
|
|
IoAttachDeviceToDeviceStackSafe
|
|
IoBoostThreadIo
|
|
IoBuildAsynchronousFsdRequest
|
|
IoBuildDeviceIoControlRequest
|
|
IoBuildPartialMdl
|
|
IoBuildSynchronousFsdRequest
|
|
IoCallDriver
|
|
IoCancelFileOpen
|
|
IoCancelIrp
|
|
IoCheckDesiredAccess
|
|
IoCheckEaBufferValidity
|
|
IoCheckFunctionAccess
|
|
IoCheckQuerySetFileInformation
|
|
IoCheckQuerySetVolumeInformation
|
|
IoCheckQuotaBufferValidity
|
|
IoCheckShareAccess
|
|
IoCheckShareAccessEx
|
|
IoClearActivityIdThread
|
|
IoClearDependency
|
|
IoClearIrpExtraCreateParameter
|
|
IoCompleteRequest
|
|
IoCompletionObjectType DATA
|
|
IoConnectInterrupt
|
|
IoConnectInterruptEx
|
|
IoConvertFileHandleToKernelHandle
|
|
IoCopyDeviceObjectHint
|
|
IoCreateArcName
|
|
IoCreateController
|
|
IoCreateDevice
|
|
IoCreateDisk
|
|
IoCreateDriver
|
|
IoCreateFile
|
|
IoCreateFileEx
|
|
IoCreateFileSpecifyDeviceObjectHint
|
|
IoCreateNotificationEvent
|
|
IoCreateStreamFileObject
|
|
IoCreateStreamFileObjectEx
|
|
IoCreateStreamFileObjectEx2
|
|
IoCreateStreamFileObjectLite
|
|
IoCreateSymbolicLink
|
|
IoCreateSynchronizationEvent
|
|
IoCreateSystemThread
|
|
IoCreateUnprotectedSymbolicLink
|
|
IoCsqInitialize
|
|
IoCsqInitializeEx
|
|
IoCsqInsertIrp
|
|
IoCsqInsertIrpEx
|
|
IoCsqRemoveIrp
|
|
IoCsqRemoveNextIrp
|
|
IoDecrementKeepAliveCount
|
|
IoDeleteAllDependencyRelations
|
|
IoDeleteController
|
|
IoDeleteDevice
|
|
IoDeleteDriver
|
|
IoDeleteSymbolicLink
|
|
IoDetachDevice
|
|
IoDeviceHandlerObjectSize DATA
|
|
IoDeviceHandlerObjectType DATA
|
|
IoDeviceObjectType DATA
|
|
IoDisconnectInterrupt
|
|
IoDisconnectInterruptEx
|
|
IoDriverObjectType DATA
|
|
IoDuplicateDependency
|
|
IoEnqueueIrp
|
|
IoEnumerateDeviceObjectList
|
|
IoEnumerateRegisteredFiltersList
|
|
IoFastQueryNetworkAttributes
|
|
IoFileObjectType DATA
|
|
IoForwardAndCatchIrp
|
|
IoForwardIrpSynchronously
|
|
IoFreeController
|
|
IoFreeErrorLogEntry
|
|
IoFreeIrp
|
|
IoFreeMdl
|
|
IoFreeMiniCompletionPacket
|
|
IoFreeSfioStreamIdentifier
|
|
IoFreeWorkItem
|
|
IoGetActivityIdIrp
|
|
IoGetActivityIdThread
|
|
IoGetAffinityInterrupt
|
|
IoGetAttachedDevice
|
|
IoGetAttachedDeviceReference
|
|
IoGetBaseFileSystemDeviceObject
|
|
IoGetBootDiskInformation
|
|
IoGetBootDiskInformationLite
|
|
IoGetConfigurationInformation
|
|
IoGetContainerInformation
|
|
IoGetCurrentProcess
|
|
IoGetDeviceAttachmentBaseRef
|
|
IoGetDeviceInterfaceAlias
|
|
IoGetDeviceInterfacePropertyData
|
|
IoGetDeviceInterfaces
|
|
IoGetDeviceNumaNode
|
|
IoGetDeviceObjectPointer
|
|
IoGetDeviceProperty
|
|
IoGetDevicePropertyData
|
|
IoGetDeviceToVerify
|
|
IoGetDiskDeviceObject
|
|
IoGetDmaAdapter
|
|
IoGetDriverObjectExtension
|
|
IoGetFileObjectGenericMapping
|
|
IoGetGenericIrpExtension
|
|
IoGetInitialStack
|
|
IoGetInitiatorProcess
|
|
IoGetIoPriorityHint
|
|
IoGetIrpExtraCreateParameter
|
|
IoGetLowerDeviceObject
|
|
IoGetOplockKeyContext
|
|
IoGetOplockKeyContextEx
|
|
IoGetPagingIoPriority
|
|
IoGetRelatedDeviceObject
|
|
IoGetRequestorProcess
|
|
IoGetRequestorProcessId
|
|
IoGetRequestorSessionId
|
|
IoGetSfioStreamIdentifier
|
|
IoGetStackLimits
|
|
IoGetSymlinkSupportInformation
|
|
IoGetTopLevelIrp
|
|
IoGetTransactionParameterBlock
|
|
IoIncrementKeepAliveCount
|
|
IoInitializeIrp
|
|
IoInitializeMiniCompletionPacket
|
|
IoInitializeRemoveLockEx
|
|
IoInitializeWorkItem
|
|
IoInvalidateDeviceRelations
|
|
IoInvalidateDeviceState
|
|
IoIsActivityTracingEnabled
|
|
IoIsFileObjectIgnoringSharing
|
|
IoIsFileOriginRemote
|
|
IoIsOperationSynchronous
|
|
IoIsSystemThread
|
|
IoIsValidIrpStatus
|
|
IoIsWdmVersionAvailable
|
|
IoMakeAssociatedIrp
|
|
IoOpenDeviceInterfaceRegistryKey
|
|
IoOpenDeviceRegistryKey
|
|
IoPageRead
|
|
IoPropagateActivityIdToThread
|
|
IoPropagateIrpExtension
|
|
IoQueryDeviceDescription
|
|
IoQueryFileDosDeviceName
|
|
IoQueryFileInformation
|
|
IoQueryFullDriverPath
|
|
IoQueryVolumeInformation
|
|
IoQueueThreadIrp
|
|
IoQueueWorkItem
|
|
IoQueueWorkItemEx
|
|
IoQueueWorkItemToNode
|
|
IoRaiseHardError
|
|
IoRaiseInformationalHardError
|
|
IoReadDiskSignature
|
|
IoReadOperationCount DATA
|
|
IoReadPartitionTable
|
|
IoReadPartitionTableEx
|
|
IoReadTransferCount DATA
|
|
IoRegisterBootDriverCallback
|
|
IoRegisterBootDriverReinitialization
|
|
IoRegisterContainerNotification
|
|
IoRegisterDeviceInterface
|
|
IoRegisterDriverReinitialization
|
|
IoRegisterFileSystem
|
|
IoRegisterFsRegistrationChange
|
|
IoRegisterFsRegistrationChangeMountAware
|
|
IoRegisterIoTracking
|
|
IoRegisterLastChanceShutdownNotification
|
|
IoRegisterPlugPlayNotification
|
|
IoRegisterPriorityCallback
|
|
IoRegisterShutdownNotification
|
|
IoReleaseCancelSpinLock
|
|
IoReleaseRemoveLockAndWaitEx
|
|
IoReleaseRemoveLockEx
|
|
IoReleaseVpbSpinLock
|
|
IoRemoveShareAccess
|
|
IoReplaceFileObjectName
|
|
IoReplacePartitionUnit
|
|
IoReportDetectedDevice
|
|
IoReportHalResourceUsage
|
|
IoReportInterruptActive
|
|
IoReportInterruptInactive
|
|
IoReportResourceForDetection
|
|
IoReportResourceUsage
|
|
IoReportRootDevice
|
|
IoReportTargetDeviceChange
|
|
IoReportTargetDeviceChangeAsynchronous
|
|
IoRequestDeviceEject
|
|
IoRequestDeviceEjectEx
|
|
IoReserveDependency
|
|
IoResolveDependency
|
|
IoRetrievePriorityInfo
|
|
IoReuseIrp
|
|
IoSetActivityIdIrp
|
|
IoSetActivityIdThread
|
|
IoSetCompletionRoutineEx
|
|
IoSetDependency
|
|
IoSetDeviceInterfacePropertyData
|
|
IoSetDeviceInterfaceState
|
|
IoSetDevicePropertyData
|
|
IoSetDeviceToVerify
|
|
IoSetFileObjectIgnoreSharing
|
|
IoSetFileOrigin
|
|
IoSetGenericIrpExtension
|
|
IoSetHardErrorOrVerifyDevice
|
|
IoSetInformation
|
|
IoSetIoCompletion
|
|
IoSetIoCompletionEx
|
|
IoSetIoPriorityHint
|
|
IoSetIoPriorityHintIntoFileObject
|
|
IoSetIoPriorityHintIntoThread
|
|
IoSetIrpExtraCreateParameter
|
|
IoSetMasterIrpStatus
|
|
IoSetPartitionInformation
|
|
IoSetPartitionInformationEx
|
|
IoSetShareAccess
|
|
IoSetShareAccessEx
|
|
IoSetStartIoAttributes
|
|
IoSetSystemPartition
|
|
IoSetThreadHardErrorMode
|
|
IoSetTopLevelIrp
|
|
IoSizeofGenericIrpExtension
|
|
IoSizeofWorkItem
|
|
IoStartNextPacket
|
|
IoStartNextPacketByKey
|
|
IoStartPacket
|
|
IoStatisticsLock DATA
|
|
IoSynchronousCallDriver
|
|
IoSynchronousInvalidateDeviceRelations
|
|
IoSynchronousPageWrite
|
|
IoTestDependency
|
|
IoThreadToProcess
|
|
IoTransferActivityId
|
|
IoTranslateBusAddress
|
|
IoTryQueueWorkItem
|
|
IoUninitializeWorkItem
|
|
IoUnregisterBootDriverCallback
|
|
IoUnregisterContainerNotification
|
|
IoUnregisterFileSystem
|
|
IoUnregisterFsRegistrationChange
|
|
IoUnregisterIoTracking
|
|
IoUnregisterPlugPlayNotification
|
|
IoUnregisterPlugPlayNotificationEx
|
|
IoUnregisterPriorityCallback
|
|
IoUnregisterShutdownNotification
|
|
IoUpdateShareAccess
|
|
IoValidateDeviceIoControlAccess
|
|
IoVerifyPartitionTable
|
|
IoVerifyVolume
|
|
IoVolumeDeviceToDosName
|
|
IoVolumeDeviceToGuid
|
|
IoVolumeDeviceToGuidPath
|
|
IoWMIAllocateInstanceIds
|
|
IoWMIDeviceObjectToInstanceName
|
|
IoWMIExecuteMethod
|
|
IoWMIHandleToInstanceName
|
|
IoWMIOpenBlock
|
|
IoWMIQueryAllData
|
|
IoWMIQueryAllDataMultiple
|
|
IoWMIQuerySingleInstance
|
|
IoWMIQuerySingleInstanceMultiple
|
|
IoWMIRegistrationControl
|
|
IoWMISetNotificationCallback
|
|
IoWMISetSingleInstance
|
|
IoWMISetSingleItem
|
|
IoWMISuggestInstanceName
|
|
IoWMIWriteEvent
|
|
IoWithinStackLimits
|
|
IoWriteErrorLogEntry
|
|
IoWriteOperationCount DATA
|
|
IoWritePartitionTable
|
|
IoWritePartitionTableEx
|
|
IoWriteTransferCount DATA
|
|
IofCallDriver
|
|
IofCompleteRequest
|
|
KdAcquireDebuggerLock
|
|
KdChangeOption
|
|
KdDebuggerEnabled DATA
|
|
KdDebuggerNotPresent DATA
|
|
KdDeregisterPowerHandler
|
|
KdDisableDebugger
|
|
KdEnableDebugger
|
|
KdEnteredDebugger DATA
|
|
KdLogDbgPrint
|
|
KdPollBreakIn
|
|
KdPowerTransition
|
|
KdRefreshDebuggerNotPresent
|
|
KdRegisterPowerHandler
|
|
KdReleaseDebuggerLock
|
|
KdSystemDebugControl
|
|
KeAcquireGuardedMutex
|
|
KeAcquireGuardedMutexUnsafe
|
|
KeAcquireInStackQueuedSpinLock
|
|
KeAcquireInStackQueuedSpinLockAtDpcLevel
|
|
KeAcquireInStackQueuedSpinLockForDpc
|
|
KeAcquireInterruptSpinLock
|
|
KeAcquireQueuedSpinLock
|
|
KeAcquireSpinLockAtDpcLevel
|
|
KeAcquireSpinLockForDpc
|
|
KeAcquireSpinLockRaiseToDpc
|
|
KeAcquireSpinLockRaiseToSynch
|
|
KeAddGroupAffinityEx
|
|
KeAddProcessorAffinityEx
|
|
KeAddProcessorGroupAffinity
|
|
KeAddSystemServiceTable
|
|
KeAlertThread
|
|
KeAllocateCalloutStack
|
|
KeAllocateCalloutStackEx
|
|
KeAndAffinityEx
|
|
KeAndGroupAffinityEx
|
|
KeAreAllApcsDisabled
|
|
KeAreApcsDisabled
|
|
KeAttachProcess
|
|
KeBugCheck
|
|
KeBugCheckEx
|
|
KeCancelTimer
|
|
KeCapturePersistentThreadState
|
|
KeCheckProcessorAffinityEx
|
|
KeCheckProcessorGroupAffinity
|
|
KeClearEvent
|
|
KeClockInterruptNotify
|
|
KeClockTimerPowerChange
|
|
KeComplementAffinityEx
|
|
KeCopyAffinityEx
|
|
KeCountSetBitsAffinityEx
|
|
KeCountSetBitsGroupAffinity
|
|
KeDelayExecutionThread
|
|
KeDeregisterBugCheckCallback
|
|
KeDeregisterBugCheckReasonCallback
|
|
KeDeregisterNmiCallback
|
|
KeDeregisterProcessorChangeCallback
|
|
KeDetachProcess
|
|
KeDispatchSecondaryInterrupt
|
|
KeEnterCriticalRegion
|
|
KeEnterGuardedRegion
|
|
KeEnterKernelDebugger
|
|
KeEnumerateNextProcessor
|
|
KeExpandKernelStackAndCallout
|
|
KeExpandKernelStackAndCalloutEx
|
|
KeFindConfigurationEntry
|
|
KeFindConfigurationNextEntry
|
|
KeFindFirstSetLeftAffinityEx
|
|
KeFindFirstSetLeftGroupAffinity
|
|
KeFindFirstSetRightAffinityEx
|
|
KeFindFirstSetRightGroupAffinity
|
|
KeFirstGroupAffinityEx
|
|
KeFlushEntireTb
|
|
KeFlushIoBuffers
|
|
KeFlushIoRectangle
|
|
KeFlushQueuedDpcs
|
|
KeFreeCalloutStack
|
|
KeGenericCallDpc
|
|
KeGetClockOwner
|
|
KeGetClockTimerResolution
|
|
KeGetCurrentNodeNumber
|
|
KeGetCurrentProcessorNumberEx
|
|
KeGetCurrentThread
|
|
KeGetNextClockTickDuration
|
|
KeGetProcessorIndexFromNumber
|
|
KeGetProcessorNumberFromIndex
|
|
KeGetRecommendedSharedDataAlignment
|
|
KeHwPolicyLocateResource
|
|
KeInitializeAffinityEx
|
|
KeInitializeApc
|
|
KeInitializeCrashDumpHeader
|
|
KeInitializeDeviceQueue
|
|
KeInitializeDpc
|
|
KeInitializeEnumerationContext
|
|
KeInitializeEnumerationContextFromGroup
|
|
KeInitializeEvent
|
|
KeInitializeGuardedMutex
|
|
KeInitializeInterrupt
|
|
KeInitializeMutant
|
|
KeInitializeMutex
|
|
KeInitializeQueue
|
|
KeInitializeSecondaryInterruptServices
|
|
KeInitializeSemaphore
|
|
KeInitializeSpinLock
|
|
KeInitializeThreadedDpc
|
|
KeInitializeTimer
|
|
KeInitializeTimerEx
|
|
KeInsertByKeyDeviceQueue
|
|
KeInsertDeviceQueue
|
|
KeInsertHeadQueue
|
|
KeInsertQueue
|
|
KeInsertQueueApc
|
|
KeInsertQueueDpc
|
|
KeInterlockedClearProcessorAffinityEx
|
|
KeInterlockedSetProcessorAffinityEx
|
|
KeInvalidateAllCaches
|
|
KeInvalidateRangeAllCaches
|
|
KeIpiGenericCall
|
|
KeIsAttachedProcess
|
|
KeIsEmptyAffinityEx
|
|
KeIsEqualAffinityEx
|
|
KeIsExecutingDpc
|
|
KeIsSingleGroupAffinityEx
|
|
KeIsSubsetAffinityEx
|
|
KeIsWaitListEmpty
|
|
KeLeaveCriticalRegion
|
|
KeLeaveGuardedRegion
|
|
KeLoaderBlock DATA
|
|
KeNumberProcessors DATA
|
|
KeOrAffinityEx
|
|
KeProcessorGroupAffinity
|
|
KeProfileInterruptWithSource
|
|
KePulseEvent
|
|
KeQueryActiveGroupCount
|
|
KeQueryActiveProcessorAffinity
|
|
KeQueryActiveProcessorCount
|
|
KeQueryActiveProcessorCountEx
|
|
KeQueryActiveProcessors
|
|
KeQueryDpcWatchdogInformation
|
|
KeQueryEffectivePriorityThread
|
|
KeQueryGroupAffinity
|
|
KeQueryGroupAffinityEx
|
|
KeQueryHardwareCounterConfiguration
|
|
KeQueryHighestNodeNumber
|
|
KeQueryInterruptTime
|
|
KeQueryInterruptTimePrecise
|
|
KeQueryLogicalProcessorRelationship
|
|
KeQueryMaximumGroupCount
|
|
KeQueryMaximumProcessorCount
|
|
KeQueryMaximumProcessorCountEx
|
|
KeQueryNodeActiveAffinity
|
|
KeQueryNodeMaximumProcessorCount
|
|
KeQueryPrcbAddress
|
|
KeQueryPriorityThread
|
|
KeQueryRuntimeThread
|
|
KeQuerySystemTime
|
|
KeQuerySystemTimePrecise
|
|
KeQueryTickCount
|
|
KeQueryTimeIncrement
|
|
KeQueryTotalCycleTimeThread
|
|
KeQueryUnbiasedInterruptTime
|
|
KeRaiseUserException
|
|
KeReadStateEvent
|
|
KeReadStateMutant
|
|
KeReadStateMutex
|
|
KeReadStateQueue
|
|
KeReadStateSemaphore
|
|
KeReadStateTimer
|
|
KeRegisterBugCheckCallback
|
|
KeRegisterBugCheckReasonCallback
|
|
KeRegisterNmiCallback
|
|
KeRegisterProcessorChangeCallback
|
|
KeReleaseGuardedMutex
|
|
KeReleaseGuardedMutexUnsafe
|
|
KeReleaseInStackQueuedSpinLock
|
|
KeReleaseInStackQueuedSpinLockForDpc
|
|
KeReleaseInStackQueuedSpinLockFromDpcLevel
|
|
KeReleaseInterruptSpinLock
|
|
KeReleaseMutant
|
|
KeReleaseMutex
|
|
KeReleaseQueuedSpinLock
|
|
KeReleaseSemaphore
|
|
KeReleaseSpinLock
|
|
KeReleaseSpinLockForDpc
|
|
KeReleaseSpinLockFromDpcLevel
|
|
KeRemoveByKeyDeviceQueue
|
|
KeRemoveByKeyDeviceQueueIfBusy
|
|
KeRemoveDeviceQueue
|
|
KeRemoveEntryDeviceQueue
|
|
KeRemoveGroupAffinityEx
|
|
KeRemoveProcessorAffinityEx
|
|
KeRemoveProcessorGroupAffinity
|
|
KeRemoveQueue
|
|
KeRemoveQueueDpc
|
|
KeRemoveQueueDpcEx
|
|
KeRemoveQueueEx
|
|
KeRemoveSystemServiceTable
|
|
KeResetEvent
|
|
KeRestoreExtendedProcessorState
|
|
KeRestoreFloatingPointState
|
|
KeRestoreProcessorState
|
|
KeRevertToUserAffinityThread
|
|
KeRevertToUserAffinityThreadEx
|
|
KeRevertToUserGroupAffinityThread
|
|
KeRundownQueue
|
|
KeSaveExtendedProcessorState
|
|
KeSaveFloatingPointState
|
|
KeSaveStateForHibernate
|
|
KeSetActualBasePriorityThread
|
|
KeSetAffinityThread
|
|
KeSetBasePriorityThread
|
|
KeSetCoalescableTimer
|
|
KeSetEvent
|
|
KeSetEventBoostPriority
|
|
KeSetHardwareCounterConfiguration
|
|
KeSetIdealProcessorThread
|
|
KeSetImportanceDpc
|
|
KeSetKernelStackSwapEnable
|
|
KeSetPriorityThread
|
|
KeSetProfileIrql
|
|
KeSetSystemAffinityThread
|
|
KeSetSystemAffinityThreadEx
|
|
KeSetSystemGroupAffinityThread
|
|
KeSetTargetProcessorDpc
|
|
KeSetTargetProcessorDpcEx
|
|
KeSetTimer
|
|
KeSetTimerEx
|
|
KeSignalCallDpcDone
|
|
KeSignalCallDpcSynchronize
|
|
KeStackAttachProcess
|
|
KeStallWhileFrozen
|
|
KeStartDynamicProcessor
|
|
KeSubtractAffinityEx
|
|
KeSweepIcacheRange
|
|
KeSweepLocalCaches
|
|
KeSynchronizeExecution
|
|
KeTestAlertThread
|
|
KeTestSpinLock
|
|
KeTickCount DATA
|
|
KeTryToAcquireGuardedMutex
|
|
KeTryToAcquireQueuedSpinLock
|
|
KeTryToAcquireSpinLockAtDpcLevel
|
|
KeUnstackDetachProcess
|
|
KeUserModeCallback
|
|
KeWaitForMultipleObjects
|
|
KeWaitForMutexObject
|
|
KeWaitForSingleObject
|
|
KiBugCheckData DATA
|
|
KiCheckForKernelApcDelivery
|
|
KiConnectHalInterrupt
|
|
KiDeliverApc
|
|
KiDispatchInterrupt
|
|
KiIpiServiceRoutine
|
|
KiReplayInterrupt
|
|
KitLogFeatureUsage
|
|
KseQueryDeviceData
|
|
KseQueryDeviceDataList
|
|
KseQueryDeviceFlags
|
|
KseRegisterShim
|
|
KseRegisterShimEx
|
|
KseSetDeviceFlags
|
|
KseUnregisterShim
|
|
LdrAccessResource
|
|
LdrEnumResources
|
|
LdrFindResourceDirectory_U
|
|
LdrFindResourceEx_U
|
|
LdrFindResource_U
|
|
LdrResFindResource
|
|
LdrResFindResourceDirectory
|
|
LdrResSearchResource
|
|
LpcPortObjectType DATA
|
|
LpcReplyWaitReplyPort
|
|
LpcRequestPort
|
|
LpcRequestWaitReplyPort
|
|
LpcRequestWaitReplyPortEx
|
|
LpcSendWaitReceivePort
|
|
LsaCallAuthenticationPackage
|
|
LsaDeregisterLogonProcess
|
|
LsaFreeReturnBuffer
|
|
LsaLogonUser
|
|
LsaLookupAuthenticationPackage
|
|
LsaRegisterLogonProcess
|
|
Mm64BitPhysicalAddress DATA
|
|
MmAddPhysicalMemory
|
|
MmAddVerifierThunks
|
|
MmAdjustWorkingSetSize
|
|
MmAdvanceMdl
|
|
MmAllocateContiguousMemory
|
|
MmAllocateContiguousMemorySpecifyCache
|
|
MmAllocateContiguousMemorySpecifyCacheNode
|
|
MmAllocateContiguousNodeMemory
|
|
MmAllocateMappingAddress
|
|
MmAllocateMdlForIoSpace
|
|
MmAllocateNodePagesForMdlEx
|
|
MmAllocateNonCachedMemory
|
|
MmAllocatePagesForMdl
|
|
MmAllocatePagesForMdlEx
|
|
MmAreMdlPagesCached
|
|
MmBadPointer DATA
|
|
MmBuildMdlForNonPagedPool
|
|
MmCanFileBeTruncated
|
|
MmCommitSessionMappedView
|
|
MmCopyMemory
|
|
MmCopyVirtualMemory
|
|
MmCreateMdl
|
|
MmCreateMirror
|
|
MmCreateSection
|
|
MmDisableModifiedWriteOfSection
|
|
MmDoesFileHaveUserWritableReferences
|
|
MmFlushImageSection
|
|
MmForceSectionClosed
|
|
MmFreeContiguousMemory
|
|
MmFreeContiguousMemorySpecifyCache
|
|
MmFreeMappingAddress
|
|
MmFreeNonCachedMemory
|
|
MmFreePagesFromMdl
|
|
MmGetCacheAttribute
|
|
MmGetMaximumFileSectionSize
|
|
MmGetPhysicalAddress
|
|
MmGetPhysicalMemoryRanges
|
|
MmGetSystemRoutineAddress
|
|
MmGetVirtualForPhysical
|
|
MmGrowKernelStack
|
|
MmHighestUserAddress DATA
|
|
MmIsAddressValid
|
|
MmIsDriverSuspectForVerifier
|
|
MmIsDriverVerifying
|
|
MmIsDriverVerifyingByAddress
|
|
MmIsIoSpaceActive
|
|
MmIsNonPagedSystemAddressValid
|
|
MmIsRecursiveIoFault
|
|
MmIsThisAnNtAsSystem
|
|
MmIsVerifierEnabled
|
|
MmLockPagableDataSection
|
|
MmLockPagableImageSection
|
|
MmLockPagableSectionByHandle
|
|
MmMapIoSpace
|
|
MmMapLockedPages
|
|
MmMapLockedPagesSpecifyCache
|
|
MmMapLockedPagesWithReservedMapping
|
|
MmMapMemoryDumpMdl
|
|
MmMapUserAddressesToPage
|
|
MmMapViewInSessionSpace
|
|
MmMapViewInSessionSpaceEx
|
|
MmMapViewInSystemSpace
|
|
MmMapViewInSystemSpaceEx
|
|
MmMapViewOfSection
|
|
MmMarkPhysicalMemoryAsBad
|
|
MmMarkPhysicalMemoryAsGood
|
|
MmMdlPageContentsState
|
|
MmMdlPagesAreZero
|
|
MmPageEntireDriver
|
|
MmPrefetchPages
|
|
MmPrefetchVirtualAddresses
|
|
MmProbeAndLockPages
|
|
MmProbeAndLockProcessPages
|
|
MmProbeAndLockSelectedPages
|
|
MmProtectMdlSystemAddress
|
|
MmQuerySystemSize
|
|
MmRemovePhysicalMemory
|
|
MmResetDriverPaging
|
|
MmRotatePhysicalView
|
|
MmSectionObjectType DATA
|
|
MmSecureVirtualMemory
|
|
MmSetAddressRangeModified
|
|
MmSizeOfMdl
|
|
MmSystemRangeStart DATA
|
|
MmTrimAllSystemPagableMemory
|
|
MmUnlockPagableImageSection
|
|
MmUnlockPages
|
|
MmUnmapIoSpace
|
|
MmUnmapLockedPages
|
|
MmUnmapReservedMapping
|
|
MmUnmapViewInSessionSpace
|
|
MmUnmapViewInSystemSpace
|
|
MmUnmapViewOfSection
|
|
MmUnsecureVirtualMemory
|
|
MmUserProbeAddress DATA
|
|
NlsAnsiCodePage DATA
|
|
NlsLeadByteInfo DATA
|
|
NlsMbCodePageTag DATA
|
|
NlsMbOemCodePageTag DATA
|
|
NlsOemCodePage DATA
|
|
NlsOemLeadByteInfo DATA
|
|
NtAdjustPrivilegesToken
|
|
NtAllocateLocallyUniqueId
|
|
NtAllocateUuids
|
|
NtAllocateVirtualMemory
|
|
NtBuildGUID
|
|
NtBuildLab
|
|
NtBuildNumber
|
|
NtClose
|
|
NtCommitComplete
|
|
NtCommitEnlistment
|
|
NtCommitTransaction
|
|
NtConnectPort
|
|
NtCreateEnlistment
|
|
NtCreateEvent
|
|
NtCreateFile
|
|
NtCreateResourceManager
|
|
NtCreateSection
|
|
NtCreateTransaction
|
|
NtCreateTransactionManager
|
|
NtDeleteAtom
|
|
NtDeleteFile
|
|
NtDeviceIoControlFile
|
|
NtDuplicateObject
|
|
NtDuplicateToken
|
|
NtEnumerateTransactionObject
|
|
NtFindAtom
|
|
NtFreeVirtualMemory
|
|
NtFreezeTransactions
|
|
NtFsControlFile
|
|
NtGetEnvironmentVariableEx
|
|
NtGetNotificationResourceManager
|
|
NtGlobalFlag DATA
|
|
NtLockFile
|
|
NtMakePermanentObject
|
|
NtMapViewOfSection
|
|
NtNotifyChangeDirectoryFile
|
|
NtOpenEnlistment
|
|
NtOpenFile
|
|
NtOpenProcess
|
|
NtOpenProcessToken
|
|
NtOpenProcessTokenEx
|
|
NtOpenResourceManager
|
|
NtOpenThread
|
|
NtOpenThreadToken
|
|
NtOpenThreadTokenEx
|
|
NtOpenTransaction
|
|
NtOpenTransactionManager
|
|
NtPrePrepareComplete
|
|
NtPrePrepareEnlistment
|
|
NtPrepareComplete
|
|
NtPrepareEnlistment
|
|
NtPropagationComplete
|
|
NtPropagationFailed
|
|
NtQueryDirectoryFile
|
|
NtQueryEaFile
|
|
NtQueryEnvironmentVariableInfoEx
|
|
NtQueryInformationAtom
|
|
NtQueryInformationEnlistment
|
|
NtQueryInformationFile
|
|
NtQueryInformationProcess
|
|
NtQueryInformationResourceManager
|
|
NtQueryInformationThread
|
|
NtQueryInformationToken
|
|
NtQueryInformationTransaction
|
|
NtQueryInformationTransactionManager
|
|
NtQueryQuotaInformationFile
|
|
NtQuerySecurityAttributesToken
|
|
NtQuerySecurityObject
|
|
NtQuerySystemInformation
|
|
NtQuerySystemInformationEx
|
|
NtQueryVolumeInformationFile
|
|
NtReadFile
|
|
NtReadOnlyEnlistment
|
|
NtRecoverEnlistment
|
|
NtRecoverResourceManager
|
|
NtRecoverTransactionManager
|
|
NtRequestPort
|
|
NtRequestWaitReplyPort
|
|
NtRollbackComplete
|
|
NtRollbackEnlistment
|
|
NtRollbackTransaction
|
|
NtSetCachedSigningLevel
|
|
NtSetEaFile
|
|
NtSetEvent
|
|
NtSetInformationEnlistment
|
|
NtSetInformationFile
|
|
NtSetInformationProcess
|
|
NtSetInformationResourceManager
|
|
NtSetInformationThread
|
|
NtSetInformationToken
|
|
NtSetInformationTransaction
|
|
NtSetInformationVirtualMemory
|
|
NtSetQuotaInformationFile
|
|
NtSetSecurityObject
|
|
NtSetVolumeInformationFile
|
|
NtShutdownSystem
|
|
NtThawTransactions
|
|
NtTraceControl
|
|
NtTraceEvent
|
|
NtUnlockFile
|
|
NtVdmControl
|
|
NtWaitForSingleObject
|
|
NtWriteFile
|
|
ObAssignSecurity
|
|
ObCheckCreateObjectAccess
|
|
ObCheckObjectAccess
|
|
ObCloseHandle
|
|
ObCreateObject
|
|
ObCreateObjectType
|
|
ObDeleteCapturedInsertInfo
|
|
ObDereferenceObject
|
|
ObDereferenceObjectDeferDelete
|
|
ObDereferenceObjectDeferDeleteWithTag
|
|
ObDereferenceSecurityDescriptor
|
|
ObDuplicateObject
|
|
ObFindHandleForObject
|
|
ObGetFilterVersion
|
|
ObGetObjectSecurity
|
|
ObGetObjectType
|
|
ObInsertObject
|
|
ObIsDosDeviceLocallyMapped
|
|
ObIsKernelHandle
|
|
ObLogSecurityDescriptor
|
|
ObMakeTemporaryObject
|
|
ObOpenObjectByName
|
|
ObOpenObjectByPointer
|
|
ObOpenObjectByPointerWithTag
|
|
ObQueryNameInfo
|
|
ObQueryNameString
|
|
ObQueryObjectAuditingByHandle
|
|
ObReferenceObjectByHandle
|
|
ObReferenceObjectByHandleWithTag
|
|
ObReferenceObjectByName
|
|
ObReferenceObjectByPointer
|
|
ObReferenceObjectByPointerWithTag
|
|
ObReferenceObjectSafe
|
|
ObReferenceObjectSafeWithTag
|
|
ObReferenceSecurityDescriptor
|
|
ObRegisterCallbacks
|
|
ObReleaseObjectSecurity
|
|
ObSetHandleAttributes
|
|
ObSetSecurityDescriptorInfo
|
|
ObSetSecurityObjectByPointer
|
|
ObUnRegisterCallbacks
|
|
ObWaitForMultipleObjects
|
|
ObWaitForSingleObject
|
|
ObfDereferenceObject
|
|
ObfDereferenceObjectWithTag
|
|
ObfReferenceObject
|
|
ObfReferenceObjectWithTag
|
|
POGOBuffer DATA
|
|
PcwAddInstance
|
|
PcwCloseInstance
|
|
PcwCreateInstance
|
|
PcwRegister
|
|
PcwUnregister
|
|
PfFileInfoNotify
|
|
PfxFindPrefix
|
|
PfxInitialize
|
|
PfxInsertPrefix
|
|
PfxRemovePrefix
|
|
PoCallDriver
|
|
PoCancelDeviceNotify
|
|
PoClearPowerRequest
|
|
PoCreatePowerRequest
|
|
PoDeletePowerRequest
|
|
PoDisableSleepStates
|
|
PoEndDeviceBusy
|
|
PoFxActivateComponent
|
|
PoFxCompleteDevicePowerNotRequired
|
|
PoFxCompleteIdleCondition
|
|
PoFxCompleteIdleState
|
|
PoFxIdleComponent
|
|
PoFxNotifySurprisePowerOn
|
|
PoFxPowerControl
|
|
PoFxPowerOnCrashdumpDevice
|
|
PoFxProcessorNotification
|
|
PoFxRegisterCoreDevice
|
|
PoFxRegisterCrashdumpDevice
|
|
PoFxRegisterDevice
|
|
PoFxRegisterPlugin
|
|
PoFxRegisterPluginEx
|
|
PoFxRegisterPrimaryDevice
|
|
PoFxReportDevicePoweredOn
|
|
PoFxSetComponentLatency
|
|
PoFxSetComponentResidency
|
|
PoFxSetComponentWake
|
|
PoFxSetDeviceIdleTimeout
|
|
PoFxStartDevicePowerManagement
|
|
PoFxUnregisterDevice
|
|
PoGetProcessorIdleAccounting
|
|
PoGetSystemWake
|
|
PoInitiateProcessorWake
|
|
PoLatencySensitivityHint
|
|
PoNotifyVSyncChange
|
|
PoQueryWatchdogTime
|
|
PoQueueShutdownWorkItem
|
|
PoReenableSleepStates
|
|
PoRegisterCoalescingCallback
|
|
PoRegisterDeviceForIdleDetection
|
|
PoRegisterDeviceNotify
|
|
PoRegisterPowerSettingCallback
|
|
PoRegisterSystemState
|
|
PoRequestPowerIrp
|
|
PoRequestShutdownEvent
|
|
PoSetDeviceBusyEx
|
|
PoSetFixedWakeSource
|
|
PoSetHiberRange
|
|
PoSetPowerRequest
|
|
PoSetPowerState
|
|
PoSetSystemState
|
|
PoSetSystemWake
|
|
PoSetUserPresent
|
|
PoShutdownBugCheck
|
|
PoStartDeviceBusy
|
|
PoStartNextPowerIrp
|
|
PoUnregisterCoalescingCallback
|
|
PoUnregisterPowerSettingCallback
|
|
PoUnregisterSystemState
|
|
PoUserShutdownCancelled
|
|
PoUserShutdownInitiated
|
|
ProbeForRead
|
|
ProbeForWrite
|
|
PsAcquireProcessExitSynchronization
|
|
PsAssignImpersonationToken
|
|
PsChargePoolQuota
|
|
PsChargeProcessNonPagedPoolQuota
|
|
PsChargeProcessPagedPoolQuota
|
|
PsChargeProcessPoolQuota
|
|
PsChargeProcessWakeCounter
|
|
PsCreateSystemThread
|
|
PsCreateSystemThreadEx
|
|
PsDereferenceImpersonationToken
|
|
PsDereferenceKernelStack
|
|
PsDereferencePrimaryToken
|
|
PsDisableImpersonation
|
|
PsEnterPriorityRegion
|
|
PsEstablishWin32Callouts
|
|
PsGetContextThread
|
|
PsGetCurrentProcess
|
|
PsGetCurrentProcessId
|
|
PsGetCurrentProcessSessionId
|
|
PsGetCurrentProcessWin32Process
|
|
PsGetCurrentThread
|
|
PsGetCurrentThreadId
|
|
PsGetCurrentThreadPreviousMode
|
|
PsGetCurrentThreadProcess
|
|
PsGetCurrentThreadProcessId
|
|
PsGetCurrentThreadStackBase
|
|
PsGetCurrentThreadStackLimit
|
|
PsGetCurrentThreadTeb
|
|
PsGetCurrentThreadWin32Thread
|
|
PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion
|
|
PsGetJobLock
|
|
PsGetJobSessionId
|
|
PsGetJobUIRestrictionsClass
|
|
PsGetProcessCommonJob
|
|
PsGetProcessCreateTimeQuadPart
|
|
PsGetProcessDebugPort
|
|
PsGetProcessExitProcessCalled
|
|
PsGetProcessExitStatus
|
|
PsGetProcessExitTime
|
|
PsGetProcessId
|
|
PsGetProcessImageFileName
|
|
PsGetProcessInheritedFromUniqueProcessId
|
|
PsGetProcessJob
|
|
PsGetProcessPeb
|
|
PsGetProcessPriorityClass
|
|
PsGetProcessProtection
|
|
PsGetProcessSectionBaseAddress
|
|
PsGetProcessSecurityPort
|
|
PsGetProcessSessionId
|
|
PsGetProcessSessionIdEx
|
|
PsGetProcessSignatureLevel
|
|
PsGetProcessWin32Process
|
|
PsGetProcessWin32WindowStation
|
|
PsGetThreadExitStatus
|
|
PsGetThreadFreezeCount
|
|
PsGetThreadHardErrorsAreDisabled
|
|
PsGetThreadId
|
|
PsGetThreadProcess
|
|
PsGetThreadProcessId
|
|
PsGetThreadSessionId
|
|
PsGetThreadTeb
|
|
PsGetThreadWin32Thread
|
|
PsGetVersion
|
|
PsImpersonateClient
|
|
PsInitialSystemProcess DATA
|
|
PsIsCurrentThreadPrefetching
|
|
PsIsDiskCountersEnabled
|
|
PsIsProcessBeingDebugged
|
|
PsIsProtectedProcess
|
|
PsIsProtectedProcessLight
|
|
PsIsSystemProcess
|
|
PsIsSystemThread
|
|
PsIsThreadImpersonating
|
|
PsIsThreadTerminating
|
|
PsJobType DATA
|
|
PsLeavePriorityRegion
|
|
PsLookupProcessByProcessId
|
|
PsLookupProcessThreadByCid
|
|
PsLookupThreadByThreadId
|
|
PsProcessType DATA
|
|
PsQueryProcessAttributesByToken
|
|
PsQueryProcessExceptionFlags
|
|
PsQueryTotalCycleTimeProcess
|
|
PsReferenceImpersonationToken
|
|
PsReferenceKernelStack
|
|
PsReferencePrimaryToken
|
|
PsReferenceProcessFilePointer
|
|
PsReleaseProcessExitSynchronization
|
|
PsReleaseProcessWakeCounter
|
|
PsRemoveCreateThreadNotifyRoutine
|
|
PsRemoveLoadImageNotifyRoutine
|
|
PsRestoreImpersonation
|
|
PsResumeProcess
|
|
PsReturnPoolQuota
|
|
PsReturnProcessNonPagedPoolQuota
|
|
PsReturnProcessPagedPoolQuota
|
|
PsRevertThreadToSelf
|
|
PsRevertToSelf
|
|
PsSetContextThread
|
|
PsSetCreateProcessNotifyRoutine
|
|
PsSetCreateProcessNotifyRoutineEx
|
|
PsSetCreateThreadNotifyRoutine
|
|
PsSetCurrentThreadPrefetching
|
|
PsSetLegoNotifyRoutine
|
|
PsSetLoadImageNotifyRoutine
|
|
PsSetProcessPriorityByClass
|
|
PsSetProcessPriorityClass
|
|
PsSetProcessSecurityPort
|
|
PsSetProcessWin32Process
|
|
PsSetProcessWindowStation
|
|
PsSetThreadHardErrorsAreDisabled
|
|
PsSetThreadWin32Thread
|
|
PsSuspendProcess
|
|
PsTerminateSystemThread
|
|
PsThreadType DATA
|
|
PsUILanguageComitted DATA
|
|
PsUpdateDiskCounters
|
|
PsWrapApcWow64Thread
|
|
ReadTimeStampCounter
|
|
RtlAbsoluteToSelfRelativeSD
|
|
RtlAddAccessAllowedAce
|
|
RtlAddAccessAllowedAceEx
|
|
RtlAddAce
|
|
RtlAddAtomToAtomTable
|
|
RtlAddAtomToAtomTableEx
|
|
RtlAddRange
|
|
RtlAddResourceAttributeAce
|
|
RtlAllocateHeap
|
|
RtlAnsiCharToUnicodeChar
|
|
RtlAnsiStringToUnicodeSize
|
|
RtlAnsiStringToUnicodeString
|
|
RtlAppendAsciizToString
|
|
RtlAppendStringToString
|
|
RtlAppendUnicodeStringToString
|
|
RtlAppendUnicodeToString
|
|
RtlAreAllAccessesGranted
|
|
RtlAreAnyAccessesGranted
|
|
RtlAreBitsClear
|
|
RtlAreBitsSet
|
|
RtlAssert
|
|
RtlAvlInsertNodeEx
|
|
RtlAvlRemoveNode
|
|
RtlCaptureContext
|
|
RtlCaptureStackBackTrace
|
|
RtlCharToInteger
|
|
RtlCheckPortableOperatingSystem
|
|
RtlCheckRegistryKey
|
|
RtlCheckTokenCapability
|
|
RtlCheckTokenMembership
|
|
RtlCheckTokenMembershipEx
|
|
RtlClearAllBits
|
|
RtlClearBit
|
|
RtlClearBits
|
|
RtlCmDecodeMemIoResource
|
|
RtlCmEncodeMemIoResource
|
|
RtlCompareAltitudes
|
|
RtlCompareMemory
|
|
RtlCompareMemoryUlong
|
|
RtlCompareString
|
|
RtlCompareUnicodeString
|
|
RtlCompareUnicodeStrings
|
|
RtlCompressBuffer
|
|
RtlCompressChunks
|
|
RtlComputeCrc32
|
|
RtlContractHashTable
|
|
RtlConvertSidToUnicodeString
|
|
RtlCopyBitMap
|
|
RtlCopyLuid
|
|
RtlCopyLuidAndAttributesArray
|
|
RtlCopyMemory
|
|
RtlCopyRangeList
|
|
RtlCopySid
|
|
RtlCopySidAndAttributesArray
|
|
RtlCopyString
|
|
RtlCopyUnicodeString
|
|
RtlCrc32
|
|
RtlCrc64
|
|
RtlCreateAcl
|
|
RtlCreateAtomTable
|
|
RtlCreateAtomTableEx
|
|
RtlCreateHashTable
|
|
RtlCreateHashTableEx
|
|
RtlCreateHeap
|
|
RtlCreateRegistryKey
|
|
RtlCreateSecurityDescriptor
|
|
RtlCreateSystemVolumeInformationFolder
|
|
RtlCreateUnicodeString
|
|
RtlCreateUserThread
|
|
RtlCultureNameToLCID
|
|
RtlCustomCPToUnicodeN
|
|
RtlDecompressBuffer
|
|
RtlDecompressBufferEx
|
|
RtlDecompressChunks
|
|
RtlDecompressFragment
|
|
RtlDelete
|
|
RtlDeleteAce
|
|
RtlDeleteAtomFromAtomTable
|
|
RtlDeleteElementGenericTable
|
|
RtlDeleteElementGenericTableAvl
|
|
RtlDeleteElementGenericTableAvlEx
|
|
RtlDeleteHashTable
|
|
RtlDeleteNoSplay
|
|
RtlDeleteOwnersRanges
|
|
RtlDeleteRange
|
|
RtlDeleteRegistryValue
|
|
RtlDescribeChunk
|
|
RtlDestroyAtomTable
|
|
RtlDestroyHeap
|
|
RtlDowncaseUnicodeChar
|
|
RtlDowncaseUnicodeString
|
|
RtlDuplicateUnicodeString
|
|
RtlEmptyAtomTable
|
|
RtlEndEnumerationHashTable
|
|
RtlEndWeakEnumerationHashTable
|
|
RtlEnumerateEntryHashTable
|
|
RtlEnumerateGenericTable
|
|
RtlEnumerateGenericTableAvl
|
|
RtlEnumerateGenericTableLikeADirectory
|
|
RtlEnumerateGenericTableWithoutSplaying
|
|
RtlEnumerateGenericTableWithoutSplayingAvl
|
|
RtlEqualLuid
|
|
RtlEqualSid
|
|
RtlEqualString
|
|
RtlEqualUnicodeString
|
|
RtlEqualWnfChangeStamps
|
|
RtlEthernetAddressToStringA
|
|
RtlEthernetAddressToStringW
|
|
RtlEthernetStringToAddressA
|
|
RtlEthernetStringToAddressW
|
|
RtlExpandHashTable
|
|
RtlExtendedMagicDivide
|
|
RtlExtractBitMap
|
|
RtlFillMemory
|
|
RtlFillMemoryUlong
|
|
RtlFillMemoryUlonglong
|
|
RtlFindAceByType
|
|
RtlFindClearBits
|
|
RtlFindClearBitsAndSet
|
|
RtlFindClearRuns
|
|
RtlFindClosestEncodableLength
|
|
RtlFindFirstRunClear
|
|
RtlFindLastBackwardRunClear
|
|
RtlFindLeastSignificantBit
|
|
RtlFindLongestRunClear
|
|
RtlFindMessage
|
|
RtlFindMostSignificantBit
|
|
RtlFindNextForwardRunClear
|
|
RtlFindRange
|
|
RtlFindSetBits
|
|
RtlFindSetBitsAndClear
|
|
RtlFindUnicodePrefix
|
|
RtlFormatCurrentUserKeyPath
|
|
RtlFormatMessage
|
|
RtlFreeAnsiString
|
|
RtlFreeHeap
|
|
RtlFreeOemString
|
|
RtlFreeRangeList
|
|
RtlFreeUnicodeString
|
|
RtlGUIDFromString
|
|
RtlGenerate8dot3Name
|
|
RtlGenerateClass5Guid
|
|
RtlGetAce
|
|
RtlGetAppContainerNamedObjectPath
|
|
RtlGetAppContainerParent
|
|
RtlGetAppContainerSidType
|
|
RtlGetCallersAddress
|
|
RtlGetCompressionWorkSpaceSize
|
|
RtlGetDaclSecurityDescriptor
|
|
RtlGetDefaultCodePage
|
|
RtlGetElementGenericTable
|
|
RtlGetElementGenericTableAvl
|
|
RtlGetEnabledExtendedFeatures
|
|
RtlGetFirstRange
|
|
RtlGetGroupSecurityDescriptor
|
|
RtlGetIntegerAtom
|
|
RtlGetLastRange
|
|
RtlGetNextEntryHashTable
|
|
RtlGetNextRange
|
|
RtlGetNtGlobalFlags
|
|
RtlGetOwnerSecurityDescriptor
|
|
RtlGetProductInfo
|
|
RtlGetSaclSecurityDescriptor
|
|
RtlGetSetBootStatusData
|
|
RtlGetThreadLangIdByIndex
|
|
RtlGetVersion
|
|
RtlHashUnicodeString
|
|
RtlIdnToAscii
|
|
RtlIdnToNameprepUnicode
|
|
RtlIdnToUnicode
|
|
RtlImageDirectoryEntryToData
|
|
RtlImageNtHeader
|
|
RtlImageNtHeaderEx
|
|
RtlInitAnsiString
|
|
RtlInitAnsiStringEx
|
|
RtlInitCodePageTable
|
|
RtlInitEnumerationHashTable
|
|
RtlInitString
|
|
RtlInitUnicodeString
|
|
RtlInitUnicodeStringEx
|
|
RtlInitWeakEnumerationHashTable
|
|
RtlInitializeBitMap
|
|
RtlInitializeGenericTable
|
|
RtlInitializeGenericTableAvl
|
|
RtlInitializeRangeList
|
|
RtlInitializeSid
|
|
RtlInitializeUnicodePrefix
|
|
RtlInsertElementGenericTable
|
|
RtlInsertElementGenericTableAvl
|
|
RtlInsertElementGenericTableFull
|
|
RtlInsertElementGenericTableFullAvl
|
|
RtlInsertEntryHashTable
|
|
RtlInsertUnicodePrefix
|
|
RtlInt64ToUnicodeString
|
|
RtlIntegerToChar
|
|
RtlIntegerToUnicode
|
|
RtlIntegerToUnicodeString
|
|
RtlInterlockedClearBitRun
|
|
RtlInterlockedSetBitRun
|
|
RtlInterlockedSetClearRun
|
|
RtlInvertRangeList
|
|
RtlInvertRangeListEx
|
|
RtlIoDecodeMemIoResource
|
|
RtlIoEncodeMemIoResource
|
|
RtlIpv4AddressToStringA
|
|
RtlIpv4AddressToStringExA
|
|
RtlIpv4AddressToStringExW
|
|
RtlIpv4AddressToStringW
|
|
RtlIpv4StringToAddressA
|
|
RtlIpv4StringToAddressExA
|
|
RtlIpv4StringToAddressExW
|
|
RtlIpv4StringToAddressW
|
|
RtlIpv6AddressToStringA
|
|
RtlIpv6AddressToStringExA
|
|
RtlIpv6AddressToStringExW
|
|
RtlIpv6AddressToStringW
|
|
RtlIpv6StringToAddressA
|
|
RtlIpv6StringToAddressExA
|
|
RtlIpv6StringToAddressExW
|
|
RtlIpv6StringToAddressW
|
|
RtlIsGenericTableEmpty
|
|
RtlIsGenericTableEmptyAvl
|
|
RtlIsNameLegalDOS8Dot3
|
|
RtlIsNormalizedString
|
|
RtlIsNtDdiVersionAvailable
|
|
RtlIsRangeAvailable
|
|
RtlIsServicePackVersionInstalled
|
|
RtlIsUntrustedObject
|
|
RtlIsValidOemCharacter
|
|
RtlLCIDToCultureName
|
|
RtlLengthRequiredSid
|
|
RtlLengthSecurityDescriptor
|
|
RtlLengthSid
|
|
RtlLoadString
|
|
RtlLocalTimeToSystemTime
|
|
RtlLockBootStatusData
|
|
RtlLookupAtomInAtomTable
|
|
RtlLookupElementGenericTable
|
|
RtlLookupElementGenericTableAvl
|
|
RtlLookupElementGenericTableFull
|
|
RtlLookupElementGenericTableFullAvl
|
|
RtlLookupEntryHashTable
|
|
RtlLookupFirstMatchingElementGenericTableAvl
|
|
RtlLookupFunctionEntry
|
|
RtlMapGenericMask
|
|
RtlMapSecurityErrorToNtStatus
|
|
RtlMergeRangeLists
|
|
RtlMoveMemory
|
|
RtlMultiByteToUnicodeN
|
|
RtlMultiByteToUnicodeSize
|
|
RtlNextUnicodePrefix
|
|
RtlNormalizeString
|
|
RtlNtStatusToDosError
|
|
RtlNtStatusToDosErrorNoTeb
|
|
RtlNumberGenericTableElements
|
|
RtlNumberGenericTableElementsAvl
|
|
RtlNumberOfClearBits
|
|
RtlNumberOfClearBitsInRange
|
|
RtlNumberOfSetBits
|
|
RtlNumberOfSetBitsInRange
|
|
RtlNumberOfSetBitsUlongPtr
|
|
RtlOemStringToCountedUnicodeString
|
|
RtlOemStringToUnicodeSize
|
|
RtlOemStringToUnicodeString
|
|
RtlOemToUnicodeN
|
|
RtlOpenCurrentUser
|
|
RtlOwnerAcesPresent
|
|
RtlPcToFileHeader
|
|
RtlPinAtomInAtomTable
|
|
RtlPrefetchMemoryNonTemporal
|
|
RtlPrefixString
|
|
RtlPrefixUnicodeString
|
|
RtlQueryAtomInAtomTable
|
|
RtlQueryDynamicTimeZoneInformation
|
|
RtlQueryElevationFlags
|
|
RtlQueryInformationAcl
|
|
RtlQueryModuleInformation
|
|
RtlQueryPackageIdentity
|
|
RtlQueryRegistryValues
|
|
RtlQueryRegistryValuesEx
|
|
RtlQueryTimeZoneInformation
|
|
RtlQueryValidationRunlevel
|
|
RtlRaiseException
|
|
RtlRandom
|
|
RtlRandomEx
|
|
RtlRbInsertNodeEx
|
|
RtlRbRemoveNode
|
|
RtlRealPredecessor
|
|
RtlRealSuccessor
|
|
RtlRemoveEntryHashTable
|
|
RtlRemoveUnicodePrefix
|
|
RtlReplaceSidInSd
|
|
RtlReserveChunk
|
|
RtlRestoreContext
|
|
RtlRunOnceBeginInitialize
|
|
RtlRunOnceComplete
|
|
RtlRunOnceExecuteOnce
|
|
RtlRunOnceInitialize
|
|
RtlSecondsSince1970ToTime
|
|
RtlSecondsSince1980ToTime
|
|
RtlSelfRelativeToAbsoluteSD
|
|
RtlSelfRelativeToAbsoluteSD2
|
|
RtlSetAllBits
|
|
RtlSetBit
|
|
RtlSetBits
|
|
RtlSetControlSecurityDescriptor
|
|
RtlSetDaclSecurityDescriptor
|
|
RtlSetDynamicTimeZoneInformation
|
|
RtlSetGroupSecurityDescriptor
|
|
RtlSetOwnerSecurityDescriptor
|
|
RtlSetPortableOperatingSystem
|
|
RtlSetSaclSecurityDescriptor
|
|
RtlSetTimeZoneInformation
|
|
RtlSidHashInitialize
|
|
RtlSidHashLookup
|
|
RtlSizeHeap
|
|
RtlSplay
|
|
RtlStringFromGUID
|
|
RtlSubAuthorityCountSid
|
|
RtlSubAuthoritySid
|
|
RtlSubtreePredecessor
|
|
RtlSubtreeSuccessor
|
|
RtlSystemTimeToLocalTime
|
|
RtlTestBit
|
|
RtlTimeFieldsToTime
|
|
RtlTimeToElapsedTimeFields
|
|
RtlTimeToSecondsSince1970
|
|
RtlTimeToSecondsSince1980
|
|
RtlTimeToTimeFields
|
|
RtlTraceDatabaseAdd
|
|
RtlTraceDatabaseCreate
|
|
RtlTraceDatabaseDestroy
|
|
RtlTraceDatabaseEnumerate
|
|
RtlTraceDatabaseFind
|
|
RtlTraceDatabaseLock
|
|
RtlTraceDatabaseUnlock
|
|
RtlTraceDatabaseValidate
|
|
RtlUTF8ToUnicodeN
|
|
RtlUlongByteSwap
|
|
RtlUlonglongByteSwap
|
|
RtlUnicodeStringToAnsiSize
|
|
RtlUnicodeStringToAnsiString
|
|
RtlUnicodeStringToCountedOemString
|
|
RtlUnicodeStringToInteger
|
|
RtlUnicodeStringToOemSize
|
|
RtlUnicodeStringToOemString
|
|
RtlUnicodeToCustomCPN
|
|
RtlUnicodeToMultiByteN
|
|
RtlUnicodeToMultiByteSize
|
|
RtlUnicodeToOemN
|
|
RtlUnicodeToUTF8N
|
|
RtlUnlockBootStatusData
|
|
RtlUnwind
|
|
RtlUnwindEx
|
|
RtlUpcaseUnicodeChar
|
|
RtlUpcaseUnicodeString
|
|
RtlUpcaseUnicodeStringToAnsiString
|
|
RtlUpcaseUnicodeStringToCountedOemString
|
|
RtlUpcaseUnicodeStringToOemString
|
|
RtlUpcaseUnicodeToCustomCPN
|
|
RtlUpcaseUnicodeToMultiByteN
|
|
RtlUpcaseUnicodeToOemN
|
|
RtlUpperChar
|
|
RtlUpperString
|
|
RtlUshortByteSwap
|
|
RtlValidRelativeSecurityDescriptor
|
|
RtlValidSecurityDescriptor
|
|
RtlValidSid
|
|
RtlValidateUnicodeString
|
|
RtlVerifyVersionInfo
|
|
RtlVirtualUnwind
|
|
RtlVolumeDeviceToDosName
|
|
RtlWalkFrameChain
|
|
RtlWeaklyEnumerateEntryHashTable
|
|
RtlWriteRegistryValue
|
|
RtlZeroHeap
|
|
RtlZeroMemory
|
|
RtlxAnsiStringToUnicodeSize
|
|
RtlxOemStringToUnicodeSize
|
|
RtlxUnicodeStringToAnsiSize
|
|
RtlxUnicodeStringToOemSize
|
|
SeAccessCheck
|
|
SeAccessCheckEx
|
|
SeAccessCheckFromState
|
|
SeAccessCheckFromStateEx
|
|
SeAccessCheckWithHint
|
|
SeAdjustAccessStateForTrustLabel
|
|
SeAppendPrivileges
|
|
SeAssignSecurity
|
|
SeAssignSecurityEx
|
|
SeAuditHardLinkCreation
|
|
SeAuditHardLinkCreationWithTransaction
|
|
SeAuditTransactionStateChange
|
|
SeAuditingAnyFileEventsWithContext
|
|
SeAuditingAnyFileEventsWithContextEx
|
|
SeAuditingFileEvents
|
|
SeAuditingFileEventsWithContext
|
|
SeAuditingFileEventsWithContextEx
|
|
SeAuditingFileOrGlobalEvents
|
|
SeAuditingHardLinkEvents
|
|
SeAuditingHardLinkEventsWithContext
|
|
SeAuditingWithTokenForSubcategory
|
|
SeCaptureSecurityDescriptor
|
|
SeCaptureSubjectContext
|
|
SeCaptureSubjectContextEx
|
|
SeCloseObjectAuditAlarm
|
|
SeCloseObjectAuditAlarmForNonObObject
|
|
SeComputeAutoInheritByObjectType
|
|
SeCreateAccessState
|
|
SeCreateAccessStateEx
|
|
SeCreateClientSecurity
|
|
SeCreateClientSecurityEx
|
|
SeCreateClientSecurityFromSubjectContext
|
|
SeCreateClientSecurityFromSubjectContextEx
|
|
SeDeassignSecurity
|
|
SeDeleteAccessState
|
|
SeDeleteObjectAuditAlarm
|
|
SeDeleteObjectAuditAlarmWithTransaction
|
|
SeExamineSacl
|
|
SeExports DATA
|
|
SeFilterToken
|
|
SeFreePrivileges
|
|
SeGetCachedSigningLevel
|
|
SeGetLinkedToken
|
|
SeGetLogonSessionToken
|
|
SeImpersonateClient
|
|
SeImpersonateClientEx
|
|
SeIsParentOfChildAppContainer
|
|
SeLocateProcessImageName
|
|
SeLockSubjectContext
|
|
SeMarkLogonSessionForTerminationNotification
|
|
SeOpenObjectAuditAlarm
|
|
SeOpenObjectAuditAlarmForNonObObject
|
|
SeOpenObjectAuditAlarmWithTransaction
|
|
SeOpenObjectForDeleteAuditAlarm
|
|
SeOpenObjectForDeleteAuditAlarmWithTransaction
|
|
SePrivilegeCheck
|
|
SePrivilegeObjectAuditAlarm
|
|
SePublicDefaultDacl DATA
|
|
SeQueryAuthenticationIdToken
|
|
SeQueryInformationToken
|
|
SeQuerySecureBootPolicyValue
|
|
SeQuerySecurityAttributesToken
|
|
SeQuerySecurityDescriptorInfo
|
|
SeQuerySessionIdToken
|
|
SeRegisterImageVerificationCallback
|
|
SeRegisterLogonSessionTerminatedRoutine
|
|
SeReleaseSecurityDescriptor
|
|
SeReleaseSubjectContext
|
|
SeReportSecurityEvent
|
|
SeReportSecurityEventWithSubCategory
|
|
SeSecurityAttributePresent
|
|
SeSetAccessStateGenericMapping
|
|
SeSetAuditParameter
|
|
SeSetSecurityAttributesToken
|
|
SeSetSecurityDescriptorInfo
|
|
SeSetSecurityDescriptorInfoEx
|
|
SeShouldCheckForAccessRightsFromParent
|
|
SeSinglePrivilegeCheck
|
|
SeSrpAccessCheck
|
|
SeSystemDefaultDacl DATA
|
|
SeSystemDefaultSd DATA
|
|
SeTokenFromAccessInformation
|
|
SeTokenImpersonationLevel
|
|
SeTokenIsAdmin
|
|
SeTokenIsRestricted
|
|
SeTokenIsWriteRestricted
|
|
SeTokenObjectType DATA
|
|
SeTokenType
|
|
SeUnlockSubjectContext
|
|
SeUnregisterImageVerificationCallback
|
|
SeUnregisterLogonSessionTerminatedRoutine
|
|
SeValidSecurityDescriptor
|
|
TmCancelPropagationRequest
|
|
TmCommitComplete
|
|
TmCommitEnlistment
|
|
TmCommitTransaction
|
|
TmCreateEnlistment
|
|
TmCurrentTransaction
|
|
TmDereferenceEnlistmentKey
|
|
TmEnableCallbacks
|
|
TmEndPropagationRequest
|
|
TmEnlistmentObjectType DATA
|
|
TmFreezeTransactions
|
|
TmGetTransactionId
|
|
TmInitSystem
|
|
TmInitSystemPhase2
|
|
TmInitializeTransactionManager
|
|
TmIsKTMCommitCoordinator
|
|
TmIsTransactionActive
|
|
TmPrePrepareComplete
|
|
TmPrePrepareEnlistment
|
|
TmPrepareComplete
|
|
TmPrepareEnlistment
|
|
TmPropagationComplete
|
|
TmPropagationFailed
|
|
TmReadOnlyEnlistment
|
|
TmRecoverEnlistment
|
|
TmRecoverResourceManager
|
|
TmRecoverTransactionManager
|
|
TmReferenceEnlistmentKey
|
|
TmRenameTransactionManager
|
|
TmRequestOutcomeEnlistment
|
|
TmResourceManagerObjectType DATA
|
|
TmRollbackComplete
|
|
TmRollbackEnlistment
|
|
TmRollbackTransaction
|
|
TmSetCurrentTransaction
|
|
TmSinglePhaseReject
|
|
TmThawTransactions
|
|
TmTransactionManagerObjectType DATA
|
|
TmTransactionObjectType DATA
|
|
VerSetConditionMask
|
|
VfFailDeviceNode
|
|
VfFailDriver
|
|
VfFailSystemBIOS
|
|
VfInsertContext
|
|
VfIsVerificationEnabled
|
|
VfQueryDeviceContext
|
|
VfQueryDispatchTable
|
|
VfQueryDriverContext
|
|
VfQueryIrpContext
|
|
VfQueryThreadContext
|
|
VfRemoveContext
|
|
WheaAddErrorSource
|
|
WheaConfigureErrorSource
|
|
WheaGetErrorSource
|
|
WheaInitializeRecordHeader
|
|
WheaReportHwError
|
|
WmiGetClock
|
|
WmiQueryTraceInformation
|
|
WmiTraceMessage
|
|
WmiTraceMessageVa
|
|
XIPDispatch
|
|
ZwAccessCheckAndAuditAlarm
|
|
ZwAddBootEntry
|
|
ZwAddDriverEntry
|
|
ZwAdjustPrivilegesToken
|
|
ZwAlertThread
|
|
ZwAllocateLocallyUniqueId
|
|
ZwAllocateVirtualMemory
|
|
ZwAlpcAcceptConnectPort
|
|
ZwAlpcCancelMessage
|
|
ZwAlpcConnectPort
|
|
ZwAlpcConnectPortEx
|
|
ZwAlpcCreatePort
|
|
ZwAlpcCreatePortSection
|
|
ZwAlpcCreateResourceReserve
|
|
ZwAlpcCreateSectionView
|
|
ZwAlpcCreateSecurityContext
|
|
ZwAlpcDeletePortSection
|
|
ZwAlpcDeleteResourceReserve
|
|
ZwAlpcDeleteSectionView
|
|
ZwAlpcDeleteSecurityContext
|
|
ZwAlpcDisconnectPort
|
|
ZwAlpcQueryInformation
|
|
ZwAlpcSendWaitReceivePort
|
|
ZwAlpcSetInformation
|
|
ZwAssignProcessToJobObject
|
|
ZwAssociateWaitCompletionPacket
|
|
ZwCancelIoFile
|
|
ZwCancelIoFileEx
|
|
ZwCancelTimer
|
|
ZwClearEvent
|
|
ZwClose
|
|
ZwCloseObjectAuditAlarm
|
|
ZwCommitComplete
|
|
ZwCommitEnlistment
|
|
ZwCommitTransaction
|
|
ZwConnectPort
|
|
ZwCreateDirectoryObject
|
|
ZwCreateEnlistment
|
|
ZwCreateEvent
|
|
ZwCreateFile
|
|
ZwCreateIoCompletion
|
|
ZwCreateJobObject
|
|
ZwCreateKey
|
|
ZwCreateKeyTransacted
|
|
ZwCreateResourceManager
|
|
ZwCreateSection
|
|
ZwCreateSymbolicLinkObject
|
|
ZwCreateTimer
|
|
ZwCreateTransaction
|
|
ZwCreateTransactionManager
|
|
ZwCreateWaitCompletionPacket
|
|
ZwCreateWnfStateName
|
|
ZwDeleteBootEntry
|
|
ZwDeleteDriverEntry
|
|
ZwDeleteFile
|
|
ZwDeleteKey
|
|
ZwDeleteValueKey
|
|
ZwDeleteWnfStateData
|
|
ZwDeleteWnfStateName
|
|
ZwDeviceIoControlFile
|
|
ZwDisplayString
|
|
ZwDuplicateObject
|
|
ZwDuplicateToken
|
|
ZwEnumerateBootEntries
|
|
ZwEnumerateDriverEntries
|
|
ZwEnumerateKey
|
|
ZwEnumerateTransactionObject
|
|
ZwEnumerateValueKey
|
|
ZwFlushBuffersFile
|
|
ZwFlushBuffersFileEx
|
|
ZwFlushInstructionCache
|
|
ZwFlushKey
|
|
ZwFlushVirtualMemory
|
|
ZwFreeVirtualMemory
|
|
ZwFsControlFile
|
|
ZwGetNotificationResourceManager
|
|
ZwImpersonateAnonymousToken
|
|
ZwInitiatePowerAction
|
|
ZwIsProcessInJob
|
|
ZwLoadDriver
|
|
ZwLoadKey
|
|
ZwLoadKeyEx
|
|
ZwLockFile
|
|
ZwLockProductActivationKeys
|
|
ZwLockVirtualMemory
|
|
ZwMakeTemporaryObject
|
|
ZwMapViewOfSection
|
|
ZwModifyBootEntry
|
|
ZwModifyDriverEntry
|
|
ZwNotifyChangeKey
|
|
ZwNotifyChangeSession
|
|
ZwOpenDirectoryObject
|
|
ZwOpenEnlistment
|
|
ZwOpenEvent
|
|
ZwOpenFile
|
|
ZwOpenJobObject
|
|
ZwOpenKey
|
|
ZwOpenKeyEx
|
|
ZwOpenKeyTransacted
|
|
ZwOpenKeyTransactedEx
|
|
ZwOpenProcess
|
|
ZwOpenProcessToken
|
|
ZwOpenProcessTokenEx
|
|
ZwOpenResourceManager
|
|
ZwOpenSection
|
|
ZwOpenSession
|
|
ZwOpenSymbolicLinkObject
|
|
ZwOpenThread
|
|
ZwOpenThreadToken
|
|
ZwOpenThreadTokenEx
|
|
ZwOpenTimer
|
|
ZwOpenTransaction
|
|
ZwOpenTransactionManager
|
|
ZwPowerInformation
|
|
ZwPrePrepareComplete
|
|
ZwPrePrepareEnlistment
|
|
ZwPrepareComplete
|
|
ZwPrepareEnlistment
|
|
ZwPropagationComplete
|
|
ZwPropagationFailed
|
|
ZwProtectVirtualMemory
|
|
ZwPulseEvent
|
|
ZwQueryBootEntryOrder
|
|
ZwQueryBootOptions
|
|
ZwQueryDefaultLocale
|
|
ZwQueryDefaultUILanguage
|
|
ZwQueryDirectoryFile
|
|
ZwQueryDirectoryObject
|
|
ZwQueryDriverEntryOrder
|
|
ZwQueryEaFile
|
|
ZwQueryFullAttributesFile
|
|
ZwQueryInformationEnlistment
|
|
ZwQueryInformationFile
|
|
ZwQueryInformationJobObject
|
|
ZwQueryInformationProcess
|
|
ZwQueryInformationResourceManager
|
|
ZwQueryInformationThread
|
|
ZwQueryInformationToken
|
|
ZwQueryInformationTransaction
|
|
ZwQueryInformationTransactionManager
|
|
ZwQueryInstallUILanguage
|
|
ZwQueryKey
|
|
ZwQueryLicenseValue
|
|
ZwQueryObject
|
|
ZwQueryQuotaInformationFile
|
|
ZwQuerySection
|
|
ZwQuerySecurityAttributesToken
|
|
ZwQuerySecurityObject
|
|
ZwQuerySymbolicLinkObject
|
|
ZwQuerySystemEnvironmentValueEx
|
|
ZwQuerySystemInformation
|
|
ZwQuerySystemInformationEx
|
|
ZwQueryValueKey
|
|
ZwQueryVirtualMemory
|
|
ZwQueryVolumeInformationFile
|
|
ZwQueryWnfStateData
|
|
ZwQueryWnfStateNameInformation
|
|
ZwReadFile
|
|
ZwReadOnlyEnlistment
|
|
ZwRecoverEnlistment
|
|
ZwRecoverResourceManager
|
|
ZwRecoverTransactionManager
|
|
ZwRemoveIoCompletion
|
|
ZwRemoveIoCompletionEx
|
|
ZwRenameKey
|
|
ZwReplaceKey
|
|
ZwRequestPort
|
|
ZwRequestWaitReplyPort
|
|
ZwResetEvent
|
|
ZwRestoreKey
|
|
ZwRollbackComplete
|
|
ZwRollbackEnlistment
|
|
ZwRollbackTransaction
|
|
ZwSaveKey
|
|
ZwSaveKeyEx
|
|
ZwSecureConnectPort
|
|
ZwSetBootEntryOrder
|
|
ZwSetBootOptions
|
|
ZwSetCachedSigningLevel
|
|
ZwSetDefaultLocale
|
|
ZwSetDefaultUILanguage
|
|
ZwSetDriverEntryOrder
|
|
ZwSetEaFile
|
|
ZwSetEvent
|
|
ZwSetInformationEnlistment
|
|
ZwSetInformationFile
|
|
ZwSetInformationJobObject
|
|
ZwSetInformationKey
|
|
ZwSetInformationObject
|
|
ZwSetInformationProcess
|
|
ZwSetInformationResourceManager
|
|
ZwSetInformationThread
|
|
ZwSetInformationToken
|
|
ZwSetInformationTransaction
|
|
ZwSetInformationVirtualMemory
|
|
ZwSetQuotaInformationFile
|
|
ZwSetSecurityObject
|
|
ZwSetSystemEnvironmentValueEx
|
|
ZwSetSystemInformation
|
|
ZwSetSystemTime
|
|
ZwSetTimer
|
|
ZwSetTimerEx
|
|
ZwSetValueKey
|
|
ZwSetVolumeInformationFile
|
|
ZwTerminateJobObject
|
|
ZwTerminateProcess
|
|
ZwTraceEvent
|
|
ZwTranslateFilePath
|
|
ZwUnloadDriver
|
|
ZwUnloadKey
|
|
ZwUnloadKeyEx
|
|
ZwUnlockFile
|
|
ZwUnlockVirtualMemory
|
|
ZwUnmapViewOfSection
|
|
ZwUpdateWnfStateData
|
|
ZwWaitForMultipleObjects
|
|
ZwWaitForSingleObject
|
|
ZwWriteFile
|
|
ZwYieldExecution
|
|
__C_specific_handler
|
|
__chkstk
|
|
__jump_unwind
|
|
_i64toa_s
|
|
_i64tow_s
|
|
_itoa
|
|
_itoa_s
|
|
_itow
|
|
_itow_s
|
|
_ltoa_s
|
|
_ltow_s
|
|
_makepath_s
|
|
_purecall
|
|
_setjmp
|
|
_setjmpex
|
|
_snprintf
|
|
_snprintf_s
|
|
_snscanf_s
|
|
_snwprintf
|
|
_snwprintf_s
|
|
_snwscanf_s
|
|
_splitpath_s
|
|
_stricmp
|
|
_strlwr
|
|
strlwr == _strlwr
|
|
_strnicmp
|
|
_strnset
|
|
_strnset_s
|
|
_strrev
|
|
_strset
|
|
_strset_s
|
|
_strtoui64
|
|
_strupr
|
|
_swprintf
|
|
_ui64toa_s
|
|
_ui64tow_s
|
|
_ultoa_s
|
|
_ultow_s
|
|
_vsnprintf
|
|
_vsnprintf_s
|
|
_vsnwprintf
|
|
_vsnwprintf_s
|
|
_vswprintf
|
|
_wcsicmp
|
|
_wcslwr
|
|
wcslwr == _wcslwr
|
|
_wcsnicmp
|
|
_wcsnset
|
|
_wcsnset_s
|
|
_wcsrev
|
|
_wcsset_s
|
|
_wcsupr
|
|
_wmakepath_s
|
|
_wsplitpath_s
|
|
_wtoi
|
|
_wtol
|
|
atoi
|
|
atol
|
|
bsearch
|
|
bsearch_s
|
|
isdigit
|
|
islower
|
|
isprint
|
|
isspace
|
|
isupper
|
|
isxdigit
|
|
longjmp
|
|
mbstowcs
|
|
mbtowc
|
|
memchr
|
|
memcmp
|
|
memcpy
|
|
memcpy_s
|
|
memmove
|
|
memmove_s
|
|
memset
|
|
psMUITest DATA
|
|
qsort
|
|
rand
|
|
sprintf
|
|
sprintf_s
|
|
srand
|
|
sscanf_s
|
|
strcat
|
|
strcat_s
|
|
strchr
|
|
strcmp
|
|
strcpy
|
|
strcpy_s
|
|
strlen
|
|
strncat
|
|
strncat_s
|
|
strncmp
|
|
strncpy
|
|
strncpy_s
|
|
strnlen
|
|
strrchr
|
|
strspn
|
|
strstr
|
|
strtok_s
|
|
swprintf
|
|
swprintf_s
|
|
swscanf_s
|
|
tolower
|
|
toupper
|
|
towlower
|
|
towupper
|
|
vDbgPrintEx
|
|
vDbgPrintExWithPrefix
|
|
vsprintf
|
|
vsprintf_s
|
|
vswprintf_s
|
|
wcscat
|
|
wcscat_s
|
|
wcschr
|
|
wcscmp
|
|
wcscpy
|
|
wcscpy_s
|
|
wcscspn
|
|
wcslen
|
|
wcsncat
|
|
wcsncat_s
|
|
wcsncmp
|
|
wcsncpy
|
|
wcsncpy_s
|
|
wcsnlen
|
|
wcsrchr
|
|
wcsspn
|
|
wcsstr
|
|
wcstombs
|
|
wcstoul
|
|
wctomb
|