| 1 | ; |
| 2 | ; Definition file of ntoskrnl.exe |
| 3 | ; Automatic generated by gendef |
| 4 | ; written by Kai Tietz 2008-2014 |
| 5 | ; |
| 6 | LIBRARY "ntoskrnl.exe" |
| 7 | EXPORTS |
| 8 | ord_1 @1 |
| 9 | ord_2 @2 |
| 10 | ord_3 @3 |
| 11 | AlpcGetHeaderSize |
| 12 | AlpcGetMessageAttribute |
| 13 | AlpcInitializeMessageAttribute |
| 14 | BgkDisplayCharacter |
| 15 | BgkGetConsoleState |
| 16 | BgkGetCursorState |
| 17 | BgkSetCursor |
| 18 | CcAddDirtyPagesToExternalCache |
| 19 | CcCanIWrite |
| 20 | CcCoherencyFlushAndPurgeCache |
| 21 | CcCopyRead |
| 22 | CcCopyReadEx |
| 23 | CcCopyWrite |
| 24 | CcCopyWriteEx |
| 25 | CcCopyWriteWontFlush |
| 26 | CcDeductDirtyPagesFromExternalCache |
| 27 | CcDeferWrite |
| 28 | CcFastCopyRead |
| 29 | CcFastCopyWrite |
| 30 | CcFastMdlReadWait DATA |
| 31 | CcFlushCache |
| 32 | CcFlushCacheToLsn |
| 33 | CcGetDirtyPages |
| 34 | CcGetFileObjectFromBcb |
| 35 | CcGetFileObjectFromSectionPtrs |
| 36 | CcGetFileObjectFromSectionPtrsRef |
| 37 | CcGetFlushedValidData |
| 38 | CcGetLsnForFileObject |
| 39 | CcInitializeCacheMap |
| 40 | CcIsThereDirtyData |
| 41 | CcIsThereDirtyDataEx |
| 42 | CcIsThereDirtyLoggedPages |
| 43 | CcMapData |
| 44 | CcMdlRead |
| 45 | CcMdlReadComplete |
| 46 | CcMdlWriteAbort |
| 47 | CcMdlWriteComplete |
| 48 | CcPinMappedData |
| 49 | CcPinRead |
| 50 | CcPrepareMdlWrite |
| 51 | CcPreparePinWrite |
| 52 | CcPurgeCacheSection |
| 53 | CcRegisterExternalCache |
| 54 | CcRemapBcb |
| 55 | CcRepinBcb |
| 56 | CcScheduleReadAhead |
| 57 | CcScheduleReadAheadEx |
| 58 | CcSetAdditionalCacheAttributes |
| 59 | CcSetAdditionalCacheAttributesEx |
| 60 | CcSetBcbOwnerPointer |
| 61 | CcSetDirtyPageThreshold |
| 62 | CcSetDirtyPinnedData |
| 63 | CcSetFileSizes |
| 64 | CcSetFileSizesEx |
| 65 | CcSetLogHandleForFile |
| 66 | CcSetLogHandleForFileEx |
| 67 | CcSetLoggedDataThreshold |
| 68 | CcSetParallelFlushFile |
| 69 | CcSetReadAheadGranularity |
| 70 | CcSetReadAheadGranularityEx |
| 71 | CcTestControl |
| 72 | CcUninitializeCacheMap |
| 73 | CcUnmapFileOffsetFromSystemCache |
| 74 | CcUnpinData |
| 75 | CcUnpinDataForThread |
| 76 | CcUnpinRepinnedBcb |
| 77 | CcUnregisterExternalCache |
| 78 | CcWaitForCurrentLazyWriterActivity |
| 79 | CcZeroData |
| 80 | CcZeroDataOnDisk |
| 81 | CmCallbackGetKeyObjectID |
| 82 | CmCallbackGetKeyObjectIDEx |
| 83 | CmCallbackReleaseKeyObjectIDEx |
| 84 | CmGetBoundTransaction |
| 85 | CmGetCallbackVersion |
| 86 | CmKeyObjectType DATA |
| 87 | CmRegisterCallback |
| 88 | CmRegisterCallbackEx |
| 89 | CmSetCallbackObjectContext |
| 90 | CmUnRegisterCallback |
| 91 | DbgBreakPoint |
| 92 | DbgBreakPointWithStatus |
| 93 | DbgCommandString |
| 94 | DbgLoadImageSymbols |
| 95 | DbgPrint |
| 96 | DbgPrintEx |
| 97 | DbgPrintReturnControlC |
| 98 | DbgPrompt |
| 99 | DbgQueryDebugFilterState |
| 100 | DbgSetDebugFilterState |
| 101 | DbgSetDebugPrintCallback |
| 102 | DbgkLkmdRegisterCallback |
| 103 | DbgkLkmdUnregisterCallback |
| 104 | DbgkWerCaptureLiveKernelDump |
| 105 | EmClientQueryRuleState |
| 106 | EmClientRuleDeregisterNotification |
| 107 | EmClientRuleEvaluate |
| 108 | EmClientRuleRegisterNotification |
| 109 | EmProviderDeregister |
| 110 | EmProviderDeregisterEntry |
| 111 | EmProviderRegister |
| 112 | EmProviderRegisterEntry |
| 113 | EmpProviderRegister |
| 114 | EtwActivityIdControl |
| 115 | EtwEnableTrace |
| 116 | EtwEventEnabled |
| 117 | EtwProviderEnabled |
| 118 | EtwRegister |
| 119 | EtwRegisterClassicProvider |
| 120 | EtwSendTraceBuffer |
| 121 | EtwUnregister |
| 122 | EtwWrite |
| 123 | EtwWriteEndScenario |
| 124 | EtwWriteEx |
| 125 | EtwWriteStartScenario |
| 126 | EtwWriteString |
| 127 | EtwWriteTransfer |
| 128 | ExAcquireCacheAwarePushLockExclusive |
| 129 | ExAcquireCacheAwarePushLockExclusiveEx |
| 130 | ExAcquireCacheAwarePushLockSharedEx |
| 131 | ExAcquireFastMutex |
| 132 | ExAcquireFastMutexUnsafe |
| 133 | ExAcquirePushLockExclusiveEx |
| 134 | ExAcquirePushLockSharedEx |
| 135 | ExAcquireResourceExclusiveLite |
| 136 | ExAcquireResourceSharedLite |
| 137 | ExAcquireRundownProtection |
| 138 | ExAcquireRundownProtectionCacheAware |
| 139 | ExAcquireRundownProtectionCacheAwareEx |
| 140 | ExAcquireRundownProtectionEx |
| 141 | ExAcquireSharedStarveExclusive |
| 142 | ExAcquireSharedWaitForExclusive |
| 143 | ExAcquireSpinLockExclusive |
| 144 | ExAcquireSpinLockExclusiveAtDpcLevel |
| 145 | ExAcquireSpinLockShared |
| 146 | ExAcquireSpinLockSharedAtDpcLevel |
| 147 | ExAllocateCacheAwarePushLock |
| 148 | ExAllocateCacheAwareRundownProtection |
| 149 | ExAllocatePool |
| 150 | ExAllocatePoolWithQuota |
| 151 | ExAllocatePoolWithQuotaTag |
| 152 | ExAllocatePoolWithTag |
| 153 | ExAllocatePoolWithTagPriority |
| 154 | ExAllocateTimer |
| 155 | ExBlockOnAddressPushLock |
| 156 | ExBlockPushLock |
| 157 | ExCancelTimer |
| 158 | ExCompositionObjectType DATA |
| 159 | ExConvertExclusiveToSharedLite |
| 160 | ExCreateCallback |
| 161 | ExDeleteLookasideListEx |
| 162 | ExDeleteNPagedLookasideList |
| 163 | ExDeletePagedLookasideList |
| 164 | ExDeleteResourceLite |
| 165 | ExDeleteTimer |
| 166 | ExDesktopObjectType DATA |
| 167 | ExDisableResourceBoostLite |
| 168 | ExEnterCriticalRegionAndAcquireFastMutexUnsafe |
| 169 | ExEnterCriticalRegionAndAcquireResourceExclusive |
| 170 | ExEnterCriticalRegionAndAcquireResourceShared |
| 171 | ExEnterCriticalRegionAndAcquireSharedWaitForExclusive |
| 172 | ExEnterPriorityRegionAndAcquireResourceExclusive |
| 173 | ExEnterPriorityRegionAndAcquireResourceShared |
| 174 | ExEnumHandleTable |
| 175 | ExEventObjectType DATA |
| 176 | ExExtendZone |
| 177 | ExFetchLicenseData |
| 178 | ExFlushLookasideListEx |
| 179 | ExFreeCacheAwarePushLock |
| 180 | ExFreeCacheAwareRundownProtection |
| 181 | ExFreePool |
| 182 | ExFreePoolWithTag |
| 183 | ExGetCurrentProcessorCounts |
| 184 | ExGetCurrentProcessorCpuUsage |
| 185 | ExGetExclusiveWaiterCount |
| 186 | ExGetFirmwareEnvironmentVariable |
| 187 | ExGetLicenseTamperState |
| 188 | ExGetPreviousMode |
| 189 | ExGetSharedWaiterCount |
| 190 | ExInitializeLookasideListEx |
| 191 | ExInitializeNPagedLookasideList |
| 192 | ExInitializePagedLookasideList |
| 193 | ExInitializePushLock |
| 194 | ExInitializeResourceLite |
| 195 | ExInitializeRundownProtection |
| 196 | ExInitializeRundownProtectionCacheAware |
| 197 | ExInitializeZone |
| 198 | ExInterlockedAddLargeInteger |
| 199 | ExInterlockedAddUlong |
| 200 | ExInterlockedExtendZone |
| 201 | ExInterlockedInsertHeadList |
| 202 | ExInterlockedInsertTailList |
| 203 | ExInterlockedPopEntryList |
| 204 | ExInterlockedPushEntryList |
| 205 | ExInterlockedRemoveHeadList |
| 206 | ExIsProcessorFeaturePresent |
| 207 | ExIsResourceAcquiredExclusiveLite |
| 208 | ExIsResourceAcquiredSharedLite |
| 209 | ExLocalTimeToSystemTime |
| 210 | ExNotifyBootDeviceRemoval |
| 211 | ExNotifyCallback |
| 212 | ExQueryDepthSList |
| 213 | ExQueryFastCacheAppOrigin |
| 214 | ExQueryFastCacheDevLicense |
| 215 | ExQueryPoolBlockSize |
| 216 | ExQueryTimerResolution |
| 217 | ExQueryWnfStateData |
| 218 | ExQueueWorkItem |
| 219 | ExRaiseAccessViolation |
| 220 | ExRaiseDatatypeMisalignment |
| 221 | ExRaiseException |
| 222 | ExRaiseHardError |
| 223 | ExRaiseStatus |
| 224 | ExReInitializeRundownProtection |
| 225 | ExReInitializeRundownProtectionCacheAware |
| 226 | ExRealTimeIsUniversal |
| 227 | ExRegisterBootDevice |
| 228 | ExRegisterCallback |
| 229 | ExRegisterExtension |
| 230 | ExReinitializeResourceLite |
| 231 | ExReleaseCacheAwarePushLockExclusive |
| 232 | ExReleaseCacheAwarePushLockExclusiveEx |
| 233 | ExReleaseCacheAwarePushLockSharedEx |
| 234 | ExReleaseFastMutex |
| 235 | ExReleaseFastMutexUnsafe |
| 236 | ExReleaseFastMutexUnsafeAndLeaveCriticalRegion |
| 237 | ExReleasePushLockEx |
| 238 | ExReleasePushLockExclusiveEx |
| 239 | ExReleasePushLockSharedEx |
| 240 | ExReleaseResourceAndLeaveCriticalRegion |
| 241 | ExReleaseResourceAndLeavePriorityRegion |
| 242 | ExReleaseResourceForThreadLite |
| 243 | ExReleaseResourceLite |
| 244 | ExReleaseRundownProtection |
| 245 | ExReleaseRundownProtectionCacheAware |
| 246 | ExReleaseRundownProtectionCacheAwareEx |
| 247 | ExReleaseRundownProtectionEx |
| 248 | ExReleaseSpinLockExclusive |
| 249 | ExReleaseSpinLockExclusiveFromDpcLevel |
| 250 | ExReleaseSpinLockShared |
| 251 | ExReleaseSpinLockSharedFromDpcLevel |
| 252 | ExRundownCompleted |
| 253 | ExRundownCompletedCacheAware |
| 254 | ExSemaphoreObjectType DATA |
| 255 | ExSetFirmwareEnvironmentVariable |
| 256 | ExSetLicenseTamperState |
| 257 | ExSetResourceOwnerPointer |
| 258 | ExSetResourceOwnerPointerEx |
| 259 | ExSetTimer |
| 260 | ExSetTimerResolution |
| 261 | ExSizeOfRundownProtectionCacheAware |
| 262 | ExSubscribeWnfStateChange |
| 263 | ExSystemExceptionFilter |
| 264 | ExSystemTimeToLocalTime |
| 265 | ExTimedWaitForUnblockPushLock |
| 266 | ExTryAcquirePushLockExclusiveEx |
| 267 | ExTryAcquirePushLockSharedEx |
| 268 | ExTryConvertPushLockSharedToExclusiveEx |
| 269 | ExTryConvertSharedSpinLockExclusive |
| 270 | ExTryQueueWorkItem |
| 271 | ExTryToAcquireFastMutex |
| 272 | ExTryToAcquireResourceExclusiveLite |
| 273 | ExUnblockOnAddressPushLockEx |
| 274 | ExUnblockPushLockEx |
| 275 | ExUnregisterCallback |
| 276 | ExUnregisterExtension |
| 277 | ExUnsubscribeWnfStateChange |
| 278 | ExUuidCreate |
| 279 | ExVerifySuite |
| 280 | ExWaitForRundownProtectionRelease |
| 281 | ExWaitForRundownProtectionReleaseCacheAware |
| 282 | ExWaitForUnblockPushLock |
| 283 | ExWindowStationObjectType DATA |
| 284 | ExfAcquirePushLockExclusive |
| 285 | ExfAcquirePushLockShared |
| 286 | ExfReleasePushLock |
| 287 | ExfReleasePushLockExclusive |
| 288 | ExfReleasePushLockShared |
| 289 | ExfTryAcquirePushLockShared |
| 290 | ExfTryToWakePushLock |
| 291 | ExfUnblockPushLock |
| 292 | ExpInterlockedFlushSList |
| 293 | ExpInterlockedPopEntrySList |
| 294 | ExpInterlockedPushEntrySList |
| 295 | FirstEntrySList |
| 296 | FsRtlAcknowledgeEcp |
| 297 | FsRtlAcquireEofLock |
| 298 | FsRtlAcquireFileExclusive |
| 299 | FsRtlAcquireHeaderMutex |
| 300 | FsRtlAddBaseMcbEntry |
| 301 | FsRtlAddBaseMcbEntryEx |
| 302 | FsRtlAddLargeMcbEntry |
| 303 | FsRtlAddMcbEntry |
| 304 | FsRtlAddToTunnelCache |
| 305 | FsRtlAllocateExtraCreateParameter |
| 306 | FsRtlAllocateExtraCreateParameterFromLookasideList |
| 307 | FsRtlAllocateExtraCreateParameterList |
| 308 | FsRtlAllocateFileLock |
| 309 | FsRtlAllocatePool |
| 310 | FsRtlAllocatePoolWithQuota |
| 311 | FsRtlAllocatePoolWithQuotaTag |
| 312 | FsRtlAllocatePoolWithTag |
| 313 | FsRtlAllocateResource |
| 314 | FsRtlAreNamesEqual |
| 315 | FsRtlAreThereCurrentOrInProgressFileLocks |
| 316 | FsRtlAreThereWaitingFileLocks |
| 317 | FsRtlAreVolumeStartupApplicationsComplete |
| 318 | FsRtlBalanceReads |
| 319 | FsRtlCancellableWaitForMultipleObjects |
| 320 | FsRtlCancellableWaitForSingleObject |
| 321 | FsRtlChangeBackingFileObject |
| 322 | FsRtlCheckLockForOplockRequest |
| 323 | FsRtlCheckLockForReadAccess |
| 324 | FsRtlCheckLockForWriteAccess |
| 325 | FsRtlCheckOplock |
| 326 | FsRtlCheckOplockEx |
| 327 | FsRtlCheckUpperOplock |
| 328 | FsRtlCopyRead |
| 329 | FsRtlCopyWrite |
| 330 | FsRtlCreateSectionForDataScan |
| 331 | FsRtlCurrentBatchOplock |
| 332 | FsRtlCurrentOplock |
| 333 | FsRtlCurrentOplockH |
| 334 | FsRtlDeleteExtraCreateParameterLookasideList |
| 335 | FsRtlDeleteKeyFromTunnelCache |
| 336 | FsRtlDeleteTunnelCache |
| 337 | FsRtlDeregisterUncProvider |
| 338 | FsRtlDismountComplete |
| 339 | FsRtlDissectDbcs |
| 340 | FsRtlDissectName |
| 341 | FsRtlDoesDbcsContainWildCards |
| 342 | FsRtlDoesNameContainWildCards |
| 343 | FsRtlFastCheckLockForRead |
| 344 | FsRtlFastCheckLockForWrite |
| 345 | FsRtlFastUnlockAll |
| 346 | FsRtlFastUnlockAllByKey |
| 347 | FsRtlFastUnlockSingle |
| 348 | FsRtlFindExtraCreateParameter |
| 349 | FsRtlFindInTunnelCache |
| 350 | FsRtlFreeExtraCreateParameter |
| 351 | FsRtlFreeExtraCreateParameterList |
| 352 | FsRtlFreeFileLock |
| 353 | FsRtlGetEcpListFromIrp |
| 354 | FsRtlGetFileNameInformation |
| 355 | FsRtlGetFileSize |
| 356 | FsRtlGetIoAtEof |
| 357 | FsRtlGetNextBaseMcbEntry |
| 358 | FsRtlGetNextExtraCreateParameter |
| 359 | FsRtlGetNextFileLock |
| 360 | FsRtlGetNextLargeMcbEntry |
| 361 | FsRtlGetNextMcbEntry |
| 362 | FsRtlGetSectorSizeInformation |
| 363 | FsRtlGetSupportedFeatures |
| 364 | FsRtlGetVirtualDiskNestingLevel |
| 365 | FsRtlHeatInit |
| 366 | FsRtlHeatLogIo |
| 367 | FsRtlHeatLogTierMove |
| 368 | FsRtlHeatUninit |
| 369 | FsRtlIncrementCcFastMdlReadWait |
| 370 | FsRtlIncrementCcFastReadNoWait |
| 371 | FsRtlIncrementCcFastReadNotPossible |
| 372 | FsRtlIncrementCcFastReadResourceMiss |
| 373 | FsRtlIncrementCcFastReadWait |
| 374 | FsRtlInitExtraCreateParameterLookasideList |
| 375 | FsRtlInitializeBaseMcb |
| 376 | FsRtlInitializeBaseMcbEx |
| 377 | FsRtlInitializeEofLock |
| 378 | FsRtlInitializeExtraCreateParameter |
| 379 | FsRtlInitializeExtraCreateParameterList |
| 380 | FsRtlInitializeFileLock |
| 381 | FsRtlInitializeLargeMcb |
| 382 | FsRtlInitializeMcb |
| 383 | FsRtlInitializeOplock |
| 384 | FsRtlInitializeTunnelCache |
| 385 | FsRtlInsertExtraCreateParameter |
| 386 | FsRtlInsertPerFileContext |
| 387 | FsRtlInsertPerFileObjectContext |
| 388 | FsRtlInsertPerStreamContext |
| 389 | FsRtlInsertReservedPerFileContext |
| 390 | FsRtlInsertReservedPerStreamContext |
| 391 | FsRtlIsDbcsInExpression |
| 392 | FsRtlIsEcpAcknowledged |
| 393 | FsRtlIsEcpFromUserMode |
| 394 | FsRtlIsFatDbcsLegal |
| 395 | FsRtlIsHpfsDbcsLegal |
| 396 | FsRtlIsNameInExpression |
| 397 | FsRtlIsNtstatusExpected |
| 398 | FsRtlIsPagingFile |
| 399 | FsRtlIsSystemPagingFile |
| 400 | FsRtlIsTotalDeviceFailure |
| 401 | FsRtlIssueDeviceIoControl |
| 402 | FsRtlKernelFsControlFile |
| 403 | FsRtlLegalAnsiCharacterArray DATA |
| 404 | FsRtlLogCcFlushError |
| 405 | FsRtlLookupBaseMcbEntry |
| 406 | FsRtlLookupLargeMcbEntry |
| 407 | FsRtlLookupLastBaseMcbEntry |
| 408 | FsRtlLookupLastBaseMcbEntryAndIndex |
| 409 | FsRtlLookupLastLargeMcbEntry |
| 410 | FsRtlLookupLastLargeMcbEntryAndIndex |
| 411 | FsRtlLookupLastMcbEntry |
| 412 | FsRtlLookupMcbEntry |
| 413 | FsRtlLookupPerFileContext |
| 414 | FsRtlLookupPerFileObjectContext |
| 415 | FsRtlLookupPerStreamContextInternal |
| 416 | FsRtlLookupReservedPerFileContext |
| 417 | FsRtlLookupReservedPerStreamContext |
| 418 | FsRtlMdlRead |
| 419 | FsRtlMdlReadComplete |
| 420 | FsRtlMdlReadCompleteDev |
| 421 | FsRtlMdlReadDev |
| 422 | FsRtlMdlReadEx |
| 423 | FsRtlMdlWriteComplete |
| 424 | FsRtlMdlWriteCompleteDev |
| 425 | FsRtlMupGetProviderIdFromName |
| 426 | FsRtlMupGetProviderInfoFromFileObject |
| 427 | FsRtlNormalizeNtstatus |
| 428 | FsRtlNotifyChangeDirectory |
| 429 | FsRtlNotifyCleanup |
| 430 | FsRtlNotifyCleanupAll |
| 431 | FsRtlNotifyFilterChangeDirectory |
| 432 | FsRtlNotifyFilterReportChange |
| 433 | FsRtlNotifyFullChangeDirectory |
| 434 | FsRtlNotifyFullReportChange |
| 435 | FsRtlNotifyInitializeSync |
| 436 | FsRtlNotifyReportChange |
| 437 | FsRtlNotifyUninitializeSync |
| 438 | FsRtlNotifyVolumeEvent |
| 439 | FsRtlNotifyVolumeEventEx |
| 440 | FsRtlNumberOfRunsInBaseMcb |
| 441 | FsRtlNumberOfRunsInLargeMcb |
| 442 | FsRtlNumberOfRunsInMcb |
| 443 | FsRtlOplockBreakH |
| 444 | FsRtlOplockBreakToNone |
| 445 | FsRtlOplockBreakToNoneEx |
| 446 | FsRtlOplockFsctrl |
| 447 | FsRtlOplockFsctrlEx |
| 448 | FsRtlOplockIsFastIoPossible |
| 449 | FsRtlOplockIsSharedRequest |
| 450 | FsRtlOplockKeysEqual |
| 451 | FsRtlPostPagingFileStackOverflow |
| 452 | FsRtlPostStackOverflow |
| 453 | FsRtlPrepareMdlWrite |
| 454 | FsRtlPrepareMdlWriteDev |
| 455 | FsRtlPrepareMdlWriteEx |
| 456 | FsRtlPrepareToReuseEcp |
| 457 | FsRtlPrivateLock |
| 458 | FsRtlProcessFileLock |
| 459 | FsRtlQueryCachedVdl |
| 460 | FsRtlQueryKernelEaFile |
| 461 | FsRtlQueryMaximumVirtualDiskNestingLevel |
| 462 | FsRtlRegisterFileSystemFilterCallbacks |
| 463 | FsRtlRegisterFltMgrCalls |
| 464 | FsRtlRegisterMupCalls |
| 465 | FsRtlRegisterUncProvider |
| 466 | FsRtlRegisterUncProviderEx |
| 467 | FsRtlReleaseEofLock |
| 468 | FsRtlReleaseFile |
| 469 | FsRtlReleaseFileNameInformation |
| 470 | FsRtlReleaseHeaderMutex |
| 471 | FsRtlRemoveBaseMcbEntry |
| 472 | FsRtlRemoveDotsFromPath |
| 473 | FsRtlRemoveExtraCreateParameter |
| 474 | FsRtlRemoveLargeMcbEntry |
| 475 | FsRtlRemoveMcbEntry |
| 476 | FsRtlRemovePerFileContext |
| 477 | FsRtlRemovePerFileObjectContext |
| 478 | FsRtlRemovePerStreamContext |
| 479 | FsRtlRemoveReservedPerFileContext |
| 480 | FsRtlRemoveReservedPerStreamContext |
| 481 | FsRtlResetBaseMcb |
| 482 | FsRtlResetLargeMcb |
| 483 | FsRtlSendModernAppTermination |
| 484 | FsRtlSetEcpListIntoIrp |
| 485 | FsRtlSetKernelEaFile |
| 486 | FsRtlSplitBaseMcb |
| 487 | FsRtlSplitLargeMcb |
| 488 | FsRtlSyncVolumes |
| 489 | FsRtlTeardownPerFileContexts |
| 490 | FsRtlTeardownPerStreamContexts |
| 491 | FsRtlTruncateBaseMcb |
| 492 | FsRtlTruncateLargeMcb |
| 493 | FsRtlTruncateMcb |
| 494 | FsRtlTryToAcquireHeaderMutex |
| 495 | FsRtlUninitializeBaseMcb |
| 496 | FsRtlUninitializeFileLock |
| 497 | FsRtlUninitializeLargeMcb |
| 498 | FsRtlUninitializeMcb |
| 499 | FsRtlUninitializeOplock |
| 500 | FsRtlUpdateDiskCounters |
| 501 | FsRtlUpperOplockFsctrl |
| 502 | FsRtlValidateReparsePointBuffer |
| 503 | HalDispatchTable DATA |
| 504 | HalExamineMBR |
| 505 | HalFlushIoBuffers |
| 506 | HalPrivateDispatchTable DATA |
| 507 | HeadlessDispatch |
| 508 | HvlGetLpIndexFromApicId |
| 509 | HvlQueryActiveHypervisorProcessorCount |
| 510 | HvlQueryActiveProcessors |
| 511 | HvlQueryConnection |
| 512 | HvlQueryHypervisorProcessorNodeNumber |
| 513 | HvlQueryNumaDistance |
| 514 | HvlQueryProcessorTopology |
| 515 | HvlQueryProcessorTopologyCount |
| 516 | HvlQueryProcessorTopologyHighestId |
| 517 | HvlRegisterInterruptCallback |
| 518 | HvlRegisterWheaErrorNotification |
| 519 | HvlUnregisterInterruptCallback |
| 520 | HvlUnregisterWheaErrorNotification |
| 521 | InbvAcquireDisplayOwnership |
| 522 | InbvCheckDisplayOwnership |
| 523 | InbvDisplayString |
| 524 | InbvEnableBootDriver |
| 525 | InbvEnableDisplayString |
| 526 | InbvInstallDisplayStringFilter |
| 527 | InbvIsBootDriverInstalled |
| 528 | InbvNotifyDisplayOwnershipChange |
| 529 | InbvNotifyDisplayOwnershipLost |
| 530 | InbvResetDisplay |
| 531 | InbvSetScrollRegion |
| 532 | InbvSetTextColor |
| 533 | InbvSolidColorFill |
| 534 | InitSafeBootMode DATA |
| 535 | InitializeSListHead |
| 536 | InterlockedPushListSList |
| 537 | IoAcquireCancelSpinLock |
| 538 | IoAcquireRemoveLockEx |
| 539 | IoAcquireVpbSpinLock |
| 540 | IoAdapterObjectType DATA |
| 541 | IoAdjustStackSizeForRedirection |
| 542 | IoAllocateAdapterChannel |
| 543 | IoAllocateController |
| 544 | IoAllocateDriverObjectExtension |
| 545 | IoAllocateErrorLogEntry |
| 546 | IoAllocateIrp |
| 547 | IoAllocateMdl |
| 548 | IoAllocateMiniCompletionPacket |
| 549 | IoAllocateSfioStreamIdentifier |
| 550 | IoAllocateWorkItem |
| 551 | IoApplyPriorityInfoThread |
| 552 | IoAssignResources |
| 553 | IoAttachDevice |
| 554 | IoAttachDeviceByPointer |
| 555 | IoAttachDeviceToDeviceStack |
| 556 | IoAttachDeviceToDeviceStackSafe |
| 557 | IoBoostThreadIo |
| 558 | IoBuildAsynchronousFsdRequest |
| 559 | IoBuildDeviceIoControlRequest |
| 560 | IoBuildPartialMdl |
| 561 | IoBuildSynchronousFsdRequest |
| 562 | IoCallDriver |
| 563 | IoCancelFileOpen |
| 564 | IoCancelIrp |
| 565 | IoCheckDesiredAccess |
| 566 | IoCheckEaBufferValidity |
| 567 | IoCheckFunctionAccess |
| 568 | IoCheckQuerySetFileInformation |
| 569 | IoCheckQuerySetVolumeInformation |
| 570 | IoCheckQuotaBufferValidity |
| 571 | IoCheckShareAccess |
| 572 | IoCheckShareAccessEx |
| 573 | IoClearActivityIdThread |
| 574 | IoClearDependency |
| 575 | IoClearIrpExtraCreateParameter |
| 576 | IoCompleteRequest |
| 577 | IoCompletionObjectType DATA |
| 578 | IoConnectInterrupt |
| 579 | IoConnectInterruptEx |
| 580 | IoConvertFileHandleToKernelHandle |
| 581 | IoCopyDeviceObjectHint |
| 582 | IoCreateArcName |
| 583 | IoCreateController |
| 584 | IoCreateDevice |
| 585 | IoCreateDisk |
| 586 | IoCreateDriver |
| 587 | IoCreateFile |
| 588 | IoCreateFileEx |
| 589 | IoCreateFileSpecifyDeviceObjectHint |
| 590 | IoCreateNotificationEvent |
| 591 | IoCreateStreamFileObject |
| 592 | IoCreateStreamFileObjectEx |
| 593 | IoCreateStreamFileObjectEx2 |
| 594 | IoCreateStreamFileObjectLite |
| 595 | IoCreateSymbolicLink |
| 596 | IoCreateSynchronizationEvent |
| 597 | IoCreateSystemThread |
| 598 | IoCreateUnprotectedSymbolicLink |
| 599 | IoCsqInitialize |
| 600 | IoCsqInitializeEx |
| 601 | IoCsqInsertIrp |
| 602 | IoCsqInsertIrpEx |
| 603 | IoCsqRemoveIrp |
| 604 | IoCsqRemoveNextIrp |
| 605 | IoDecrementKeepAliveCount |
| 606 | IoDeleteAllDependencyRelations |
| 607 | IoDeleteController |
| 608 | IoDeleteDevice |
| 609 | IoDeleteDriver |
| 610 | IoDeleteSymbolicLink |
| 611 | IoDetachDevice |
| 612 | IoDeviceHandlerObjectSize DATA |
| 613 | IoDeviceHandlerObjectType DATA |
| 614 | IoDeviceObjectType DATA |
| 615 | IoDisconnectInterrupt |
| 616 | IoDisconnectInterruptEx |
| 617 | IoDriverObjectType DATA |
| 618 | IoDuplicateDependency |
| 619 | IoEnqueueIrp |
| 620 | IoEnumerateDeviceObjectList |
| 621 | IoEnumerateRegisteredFiltersList |
| 622 | IoFastQueryNetworkAttributes |
| 623 | IoFileObjectType DATA |
| 624 | IoForwardAndCatchIrp |
| 625 | IoForwardIrpSynchronously |
| 626 | IoFreeController |
| 627 | IoFreeErrorLogEntry |
| 628 | IoFreeIrp |
| 629 | IoFreeMdl |
| 630 | IoFreeMiniCompletionPacket |
| 631 | IoFreeSfioStreamIdentifier |
| 632 | IoFreeWorkItem |
| 633 | IoGetActivityIdIrp |
| 634 | IoGetActivityIdThread |
| 635 | IoGetAffinityInterrupt |
| 636 | IoGetAttachedDevice |
| 637 | IoGetAttachedDeviceReference |
| 638 | IoGetBaseFileSystemDeviceObject |
| 639 | IoGetBootDiskInformation |
| 640 | IoGetBootDiskInformationLite |
| 641 | IoGetConfigurationInformation |
| 642 | IoGetContainerInformation |
| 643 | IoGetCurrentProcess |
| 644 | IoGetDeviceAttachmentBaseRef |
| 645 | IoGetDeviceInterfaceAlias |
| 646 | IoGetDeviceInterfacePropertyData |
| 647 | IoGetDeviceInterfaces |
| 648 | IoGetDeviceNumaNode |
| 649 | IoGetDeviceObjectPointer |
| 650 | IoGetDeviceProperty |
| 651 | IoGetDevicePropertyData |
| 652 | IoGetDeviceToVerify |
| 653 | IoGetDiskDeviceObject |
| 654 | IoGetDmaAdapter |
| 655 | IoGetDriverObjectExtension |
| 656 | IoGetFileObjectGenericMapping |
| 657 | IoGetGenericIrpExtension |
| 658 | IoGetInitialStack |
| 659 | IoGetInitiatorProcess |
| 660 | IoGetIoPriorityHint |
| 661 | IoGetIrpExtraCreateParameter |
| 662 | IoGetLowerDeviceObject |
| 663 | IoGetOplockKeyContext |
| 664 | IoGetOplockKeyContextEx |
| 665 | IoGetPagingIoPriority |
| 666 | IoGetRelatedDeviceObject |
| 667 | IoGetRequestorProcess |
| 668 | IoGetRequestorProcessId |
| 669 | IoGetRequestorSessionId |
| 670 | IoGetSfioStreamIdentifier |
| 671 | IoGetStackLimits |
| 672 | IoGetSymlinkSupportInformation |
| 673 | IoGetTopLevelIrp |
| 674 | IoGetTransactionParameterBlock |
| 675 | IoIncrementKeepAliveCount |
| 676 | IoInitializeIrp |
| 677 | IoInitializeMiniCompletionPacket |
| 678 | IoInitializeRemoveLockEx |
| 679 | IoInitializeWorkItem |
| 680 | IoInvalidateDeviceRelations |
| 681 | IoInvalidateDeviceState |
| 682 | IoIsActivityTracingEnabled |
| 683 | IoIsFileObjectIgnoringSharing |
| 684 | IoIsFileOriginRemote |
| 685 | IoIsOperationSynchronous |
| 686 | IoIsSystemThread |
| 687 | IoIsValidIrpStatus |
| 688 | IoIsWdmVersionAvailable |
| 689 | IoMakeAssociatedIrp |
| 690 | IoOpenDeviceInterfaceRegistryKey |
| 691 | IoOpenDeviceRegistryKey |
| 692 | IoPageRead |
| 693 | IoPropagateActivityIdToThread |
| 694 | IoPropagateIrpExtension |
| 695 | IoQueryDeviceDescription |
| 696 | IoQueryFileDosDeviceName |
| 697 | IoQueryFileInformation |
| 698 | IoQueryFullDriverPath |
| 699 | IoQueryVolumeInformation |
| 700 | IoQueueThreadIrp |
| 701 | IoQueueWorkItem |
| 702 | IoQueueWorkItemEx |
| 703 | IoQueueWorkItemToNode |
| 704 | IoRaiseHardError |
| 705 | IoRaiseInformationalHardError |
| 706 | IoReadDiskSignature |
| 707 | IoReadOperationCount DATA |
| 708 | IoReadPartitionTable |
| 709 | IoReadPartitionTableEx |
| 710 | IoReadTransferCount DATA |
| 711 | IoRegisterBootDriverCallback |
| 712 | IoRegisterBootDriverReinitialization |
| 713 | IoRegisterContainerNotification |
| 714 | IoRegisterDeviceInterface |
| 715 | IoRegisterDriverReinitialization |
| 716 | IoRegisterFileSystem |
| 717 | IoRegisterFsRegistrationChange |
| 718 | IoRegisterFsRegistrationChangeMountAware |
| 719 | IoRegisterIoTracking |
| 720 | IoRegisterLastChanceShutdownNotification |
| 721 | IoRegisterPlugPlayNotification |
| 722 | IoRegisterPriorityCallback |
| 723 | IoRegisterShutdownNotification |
| 724 | IoReleaseCancelSpinLock |
| 725 | IoReleaseRemoveLockAndWaitEx |
| 726 | IoReleaseRemoveLockEx |
| 727 | IoReleaseVpbSpinLock |
| 728 | IoRemoveShareAccess |
| 729 | IoReplaceFileObjectName |
| 730 | IoReplacePartitionUnit |
| 731 | IoReportDetectedDevice |
| 732 | IoReportHalResourceUsage |
| 733 | IoReportInterruptActive |
| 734 | IoReportInterruptInactive |
| 735 | IoReportResourceForDetection |
| 736 | IoReportResourceUsage |
| 737 | IoReportRootDevice |
| 738 | IoReportTargetDeviceChange |
| 739 | IoReportTargetDeviceChangeAsynchronous |
| 740 | IoRequestDeviceEject |
| 741 | IoRequestDeviceEjectEx |
| 742 | IoReserveDependency |
| 743 | IoResolveDependency |
| 744 | IoRetrievePriorityInfo |
| 745 | IoReuseIrp |
| 746 | IoSetActivityIdIrp |
| 747 | IoSetActivityIdThread |
| 748 | IoSetCompletionRoutineEx |
| 749 | IoSetDependency |
| 750 | IoSetDeviceInterfacePropertyData |
| 751 | IoSetDeviceInterfaceState |
| 752 | IoSetDevicePropertyData |
| 753 | IoSetDeviceToVerify |
| 754 | IoSetFileObjectIgnoreSharing |
| 755 | IoSetFileOrigin |
| 756 | IoSetGenericIrpExtension |
| 757 | IoSetHardErrorOrVerifyDevice |
| 758 | IoSetInformation |
| 759 | IoSetIoCompletion |
| 760 | IoSetIoCompletionEx |
| 761 | IoSetIoPriorityHint |
| 762 | IoSetIoPriorityHintIntoFileObject |
| 763 | IoSetIoPriorityHintIntoThread |
| 764 | IoSetIrpExtraCreateParameter |
| 765 | IoSetMasterIrpStatus |
| 766 | IoSetPartitionInformation |
| 767 | IoSetPartitionInformationEx |
| 768 | IoSetShareAccess |
| 769 | IoSetShareAccessEx |
| 770 | IoSetStartIoAttributes |
| 771 | IoSetSystemPartition |
| 772 | IoSetThreadHardErrorMode |
| 773 | IoSetTopLevelIrp |
| 774 | IoSizeofGenericIrpExtension |
| 775 | IoSizeofWorkItem |
| 776 | IoStartNextPacket |
| 777 | IoStartNextPacketByKey |
| 778 | IoStartPacket |
| 779 | IoStatisticsLock DATA |
| 780 | IoSynchronousCallDriver |
| 781 | IoSynchronousInvalidateDeviceRelations |
| 782 | IoSynchronousPageWrite |
| 783 | IoTestDependency |
| 784 | IoThreadToProcess |
| 785 | IoTransferActivityId |
| 786 | IoTranslateBusAddress |
| 787 | IoTryQueueWorkItem |
| 788 | IoUninitializeWorkItem |
| 789 | IoUnregisterBootDriverCallback |
| 790 | IoUnregisterContainerNotification |
| 791 | IoUnregisterFileSystem |
| 792 | IoUnregisterFsRegistrationChange |
| 793 | IoUnregisterIoTracking |
| 794 | IoUnregisterPlugPlayNotification |
| 795 | IoUnregisterPlugPlayNotificationEx |
| 796 | IoUnregisterPriorityCallback |
| 797 | IoUnregisterShutdownNotification |
| 798 | IoUpdateShareAccess |
| 799 | IoValidateDeviceIoControlAccess |
| 800 | IoVerifyPartitionTable |
| 801 | IoVerifyVolume |
| 802 | IoVolumeDeviceToDosName |
| 803 | IoVolumeDeviceToGuid |
| 804 | IoVolumeDeviceToGuidPath |
| 805 | IoWMIAllocateInstanceIds |
| 806 | IoWMIDeviceObjectToInstanceName |
| 807 | IoWMIExecuteMethod |
| 808 | IoWMIHandleToInstanceName |
| 809 | IoWMIOpenBlock |
| 810 | IoWMIQueryAllData |
| 811 | IoWMIQueryAllDataMultiple |
| 812 | IoWMIQuerySingleInstance |
| 813 | IoWMIQuerySingleInstanceMultiple |
| 814 | IoWMIRegistrationControl |
| 815 | IoWMISetNotificationCallback |
| 816 | IoWMISetSingleInstance |
| 817 | IoWMISetSingleItem |
| 818 | IoWMISuggestInstanceName |
| 819 | IoWMIWriteEvent |
| 820 | IoWithinStackLimits |
| 821 | IoWriteErrorLogEntry |
| 822 | IoWriteOperationCount DATA |
| 823 | IoWritePartitionTable |
| 824 | IoWritePartitionTableEx |
| 825 | IoWriteTransferCount DATA |
| 826 | IofCallDriver |
| 827 | IofCompleteRequest |
| 828 | KdAcquireDebuggerLock |
| 829 | KdChangeOption |
| 830 | KdDebuggerEnabled DATA |
| 831 | KdDebuggerNotPresent DATA |
| 832 | KdDeregisterPowerHandler |
| 833 | KdDisableDebugger |
| 834 | KdEnableDebugger |
| 835 | KdEnteredDebugger DATA |
| 836 | KdLogDbgPrint |
| 837 | KdPollBreakIn |
| 838 | KdPowerTransition |
| 839 | KdRefreshDebuggerNotPresent |
| 840 | KdRegisterPowerHandler |
| 841 | KdReleaseDebuggerLock |
| 842 | KdSystemDebugControl |
| 843 | KeAcquireGuardedMutex |
| 844 | KeAcquireGuardedMutexUnsafe |
| 845 | KeAcquireInStackQueuedSpinLock |
| 846 | KeAcquireInStackQueuedSpinLockAtDpcLevel |
| 847 | KeAcquireInStackQueuedSpinLockForDpc |
| 848 | KeAcquireInterruptSpinLock |
| 849 | KeAcquireQueuedSpinLock |
| 850 | KeAcquireSpinLockAtDpcLevel |
| 851 | KeAcquireSpinLockForDpc |
| 852 | KeAcquireSpinLockRaiseToDpc |
| 853 | KeAcquireSpinLockRaiseToSynch |
| 854 | KeAddGroupAffinityEx |
| 855 | KeAddProcessorAffinityEx |
| 856 | KeAddProcessorGroupAffinity |
| 857 | KeAddSystemServiceTable |
| 858 | KeAlertThread |
| 859 | KeAllocateCalloutStack |
| 860 | KeAllocateCalloutStackEx |
| 861 | KeAndAffinityEx |
| 862 | KeAndGroupAffinityEx |
| 863 | KeAreAllApcsDisabled |
| 864 | KeAreApcsDisabled |
| 865 | KeAttachProcess |
| 866 | KeBugCheck |
| 867 | KeBugCheckEx |
| 868 | KeCancelTimer |
| 869 | KeCapturePersistentThreadState |
| 870 | KeCheckProcessorAffinityEx |
| 871 | KeCheckProcessorGroupAffinity |
| 872 | KeClearEvent |
| 873 | KeClockInterruptNotify |
| 874 | KeClockTimerPowerChange |
| 875 | KeComplementAffinityEx |
| 876 | KeCopyAffinityEx |
| 877 | KeCountSetBitsAffinityEx |
| 878 | KeCountSetBitsGroupAffinity |
| 879 | KeDelayExecutionThread |
| 880 | KeDeregisterBugCheckCallback |
| 881 | KeDeregisterBugCheckReasonCallback |
| 882 | KeDeregisterNmiCallback |
| 883 | KeDeregisterProcessorChangeCallback |
| 884 | KeDetachProcess |
| 885 | KeDispatchSecondaryInterrupt |
| 886 | KeEnterCriticalRegion |
| 887 | KeEnterGuardedRegion |
| 888 | KeEnterKernelDebugger |
| 889 | KeEnumerateNextProcessor |
| 890 | KeExpandKernelStackAndCallout |
| 891 | KeExpandKernelStackAndCalloutEx |
| 892 | KeFindConfigurationEntry |
| 893 | KeFindConfigurationNextEntry |
| 894 | KeFindFirstSetLeftAffinityEx |
| 895 | KeFindFirstSetLeftGroupAffinity |
| 896 | KeFindFirstSetRightAffinityEx |
| 897 | KeFindFirstSetRightGroupAffinity |
| 898 | KeFirstGroupAffinityEx |
| 899 | KeFlushEntireTb |
| 900 | KeFlushIoBuffers |
| 901 | KeFlushIoRectangle |
| 902 | KeFlushQueuedDpcs |
| 903 | KeFreeCalloutStack |
| 904 | KeGenericCallDpc |
| 905 | KeGetClockOwner |
| 906 | KeGetClockTimerResolution |
| 907 | KeGetCurrentNodeNumber |
| 908 | KeGetCurrentProcessorNumberEx |
| 909 | KeGetCurrentThread |
| 910 | KeGetNextClockTickDuration |
| 911 | KeGetProcessorIndexFromNumber |
| 912 | KeGetProcessorNumberFromIndex |
| 913 | KeGetRecommendedSharedDataAlignment |
| 914 | KeHwPolicyLocateResource |
| 915 | KeInitializeAffinityEx |
| 916 | KeInitializeApc |
| 917 | KeInitializeCrashDumpHeader |
| 918 | KeInitializeDeviceQueue |
| 919 | KeInitializeDpc |
| 920 | KeInitializeEnumerationContext |
| 921 | KeInitializeEnumerationContextFromGroup |
| 922 | KeInitializeEvent |
| 923 | KeInitializeGuardedMutex |
| 924 | KeInitializeInterrupt |
| 925 | KeInitializeMutant |
| 926 | KeInitializeMutex |
| 927 | KeInitializeQueue |
| 928 | KeInitializeSecondaryInterruptServices |
| 929 | KeInitializeSemaphore |
| 930 | KeInitializeSpinLock |
| 931 | KeInitializeThreadedDpc |
| 932 | KeInitializeTimer |
| 933 | KeInitializeTimerEx |
| 934 | KeInsertByKeyDeviceQueue |
| 935 | KeInsertDeviceQueue |
| 936 | KeInsertHeadQueue |
| 937 | KeInsertQueue |
| 938 | KeInsertQueueApc |
| 939 | KeInsertQueueDpc |
| 940 | KeInterlockedClearProcessorAffinityEx |
| 941 | KeInterlockedSetProcessorAffinityEx |
| 942 | KeInvalidateAllCaches |
| 943 | KeInvalidateRangeAllCaches |
| 944 | KeIpiGenericCall |
| 945 | KeIsAttachedProcess |
| 946 | KeIsEmptyAffinityEx |
| 947 | KeIsEqualAffinityEx |
| 948 | KeIsExecutingDpc |
| 949 | KeIsSingleGroupAffinityEx |
| 950 | KeIsSubsetAffinityEx |
| 951 | KeIsWaitListEmpty |
| 952 | KeLeaveCriticalRegion |
| 953 | KeLeaveGuardedRegion |
| 954 | KeLoaderBlock DATA |
| 955 | KeNumberProcessors DATA |
| 956 | KeOrAffinityEx |
| 957 | KeProcessorGroupAffinity |
| 958 | KeProfileInterruptWithSource |
| 959 | KePulseEvent |
| 960 | KeQueryActiveGroupCount |
| 961 | KeQueryActiveProcessorAffinity |
| 962 | KeQueryActiveProcessorCount |
| 963 | KeQueryActiveProcessorCountEx |
| 964 | KeQueryActiveProcessors |
| 965 | KeQueryDpcWatchdogInformation |
| 966 | KeQueryEffectivePriorityThread |
| 967 | KeQueryGroupAffinity |
| 968 | KeQueryGroupAffinityEx |
| 969 | KeQueryHardwareCounterConfiguration |
| 970 | KeQueryHighestNodeNumber |
| 971 | KeQueryInterruptTime |
| 972 | KeQueryInterruptTimePrecise |
| 973 | KeQueryLogicalProcessorRelationship |
| 974 | KeQueryMaximumGroupCount |
| 975 | KeQueryMaximumProcessorCount |
| 976 | KeQueryMaximumProcessorCountEx |
| 977 | KeQueryNodeActiveAffinity |
| 978 | KeQueryNodeMaximumProcessorCount |
| 979 | KeQueryPrcbAddress |
| 980 | KeQueryPriorityThread |
| 981 | KeQueryRuntimeThread |
| 982 | KeQuerySystemTime |
| 983 | KeQuerySystemTimePrecise |
| 984 | KeQueryTickCount |
| 985 | KeQueryTimeIncrement |
| 986 | KeQueryTotalCycleTimeThread |
| 987 | KeQueryUnbiasedInterruptTime |
| 988 | KeRaiseUserException |
| 989 | KeReadStateEvent |
| 990 | KeReadStateMutant |
| 991 | KeReadStateMutex |
| 992 | KeReadStateQueue |
| 993 | KeReadStateSemaphore |
| 994 | KeReadStateTimer |
| 995 | KeRegisterBugCheckCallback |
| 996 | KeRegisterBugCheckReasonCallback |
| 997 | KeRegisterNmiCallback |
| 998 | KeRegisterProcessorChangeCallback |
| 999 | KeReleaseGuardedMutex |
| 1000 | KeReleaseGuardedMutexUnsafe |
| 1001 | KeReleaseInStackQueuedSpinLock |
| 1002 | KeReleaseInStackQueuedSpinLockForDpc |
| 1003 | KeReleaseInStackQueuedSpinLockFromDpcLevel |
| 1004 | KeReleaseInterruptSpinLock |
| 1005 | KeReleaseMutant |
| 1006 | KeReleaseMutex |
| 1007 | KeReleaseQueuedSpinLock |
| 1008 | KeReleaseSemaphore |
| 1009 | KeReleaseSpinLock |
| 1010 | KeReleaseSpinLockForDpc |
| 1011 | KeReleaseSpinLockFromDpcLevel |
| 1012 | KeRemoveByKeyDeviceQueue |
| 1013 | KeRemoveByKeyDeviceQueueIfBusy |
| 1014 | KeRemoveDeviceQueue |
| 1015 | KeRemoveEntryDeviceQueue |
| 1016 | KeRemoveGroupAffinityEx |
| 1017 | KeRemoveProcessorAffinityEx |
| 1018 | KeRemoveProcessorGroupAffinity |
| 1019 | KeRemoveQueue |
| 1020 | KeRemoveQueueDpc |
| 1021 | KeRemoveQueueDpcEx |
| 1022 | KeRemoveQueueEx |
| 1023 | KeRemoveSystemServiceTable |
| 1024 | KeResetEvent |
| 1025 | KeRestoreExtendedProcessorState |
| 1026 | KeRestoreFloatingPointState |
| 1027 | KeRestoreProcessorState |
| 1028 | KeRevertToUserAffinityThread |
| 1029 | KeRevertToUserAffinityThreadEx |
| 1030 | KeRevertToUserGroupAffinityThread |
| 1031 | KeRundownQueue |
| 1032 | KeSaveExtendedProcessorState |
| 1033 | KeSaveFloatingPointState |
| 1034 | KeSaveStateForHibernate |
| 1035 | KeSetActualBasePriorityThread |
| 1036 | KeSetAffinityThread |
| 1037 | KeSetBasePriorityThread |
| 1038 | KeSetCoalescableTimer |
| 1039 | KeSetEvent |
| 1040 | KeSetEventBoostPriority |
| 1041 | KeSetHardwareCounterConfiguration |
| 1042 | KeSetIdealProcessorThread |
| 1043 | KeSetImportanceDpc |
| 1044 | KeSetKernelStackSwapEnable |
| 1045 | KeSetPriorityThread |
| 1046 | KeSetProfileIrql |
| 1047 | KeSetSystemAffinityThread |
| 1048 | KeSetSystemAffinityThreadEx |
| 1049 | KeSetSystemGroupAffinityThread |
| 1050 | KeSetTargetProcessorDpc |
| 1051 | KeSetTargetProcessorDpcEx |
| 1052 | KeSetTimer |
| 1053 | KeSetTimerEx |
| 1054 | KeSignalCallDpcDone |
| 1055 | KeSignalCallDpcSynchronize |
| 1056 | KeStackAttachProcess |
| 1057 | KeStallWhileFrozen |
| 1058 | KeStartDynamicProcessor |
| 1059 | KeSubtractAffinityEx |
| 1060 | KeSweepIcacheRange |
| 1061 | KeSweepLocalCaches |
| 1062 | KeSynchronizeExecution |
| 1063 | KeTestAlertThread |
| 1064 | KeTestSpinLock |
| 1065 | KeTickCount DATA |
| 1066 | KeTryToAcquireGuardedMutex |
| 1067 | KeTryToAcquireQueuedSpinLock |
| 1068 | KeTryToAcquireSpinLockAtDpcLevel |
| 1069 | KeUnstackDetachProcess |
| 1070 | KeUserModeCallback |
| 1071 | KeWaitForMultipleObjects |
| 1072 | KeWaitForMutexObject |
| 1073 | KeWaitForSingleObject |
| 1074 | KiBugCheckData DATA |
| 1075 | KiCheckForKernelApcDelivery |
| 1076 | KiConnectHalInterrupt |
| 1077 | KiDeliverApc |
| 1078 | KiDispatchInterrupt |
| 1079 | KiIpiServiceRoutine |
| 1080 | KiReplayInterrupt |
| 1081 | KitLogFeatureUsage |
| 1082 | KseQueryDeviceData |
| 1083 | KseQueryDeviceDataList |
| 1084 | KseQueryDeviceFlags |
| 1085 | KseRegisterShim |
| 1086 | KseRegisterShimEx |
| 1087 | KseSetDeviceFlags |
| 1088 | KseUnregisterShim |
| 1089 | LdrAccessResource |
| 1090 | LdrEnumResources |
| 1091 | LdrFindResourceDirectory_U |
| 1092 | LdrFindResourceEx_U |
| 1093 | LdrFindResource_U |
| 1094 | LdrResFindResource |
| 1095 | LdrResFindResourceDirectory |
| 1096 | LdrResSearchResource |
| 1097 | LpcPortObjectType DATA |
| 1098 | LpcReplyWaitReplyPort |
| 1099 | LpcRequestPort |
| 1100 | LpcRequestWaitReplyPort |
| 1101 | LpcRequestWaitReplyPortEx |
| 1102 | LpcSendWaitReceivePort |
| 1103 | LsaCallAuthenticationPackage |
| 1104 | LsaDeregisterLogonProcess |
| 1105 | LsaFreeReturnBuffer |
| 1106 | LsaLogonUser |
| 1107 | LsaLookupAuthenticationPackage |
| 1108 | LsaRegisterLogonProcess |
| 1109 | Mm64BitPhysicalAddress DATA |
| 1110 | MmAddPhysicalMemory |
| 1111 | MmAddVerifierThunks |
| 1112 | MmAdjustWorkingSetSize |
| 1113 | MmAdvanceMdl |
| 1114 | MmAllocateContiguousMemory |
| 1115 | MmAllocateContiguousMemorySpecifyCache |
| 1116 | MmAllocateContiguousMemorySpecifyCacheNode |
| 1117 | MmAllocateContiguousNodeMemory |
| 1118 | MmAllocateMappingAddress |
| 1119 | MmAllocateMdlForIoSpace |
| 1120 | MmAllocateNodePagesForMdlEx |
| 1121 | MmAllocateNonCachedMemory |
| 1122 | MmAllocatePagesForMdl |
| 1123 | MmAllocatePagesForMdlEx |
| 1124 | MmAreMdlPagesCached |
| 1125 | MmBadPointer DATA |
| 1126 | MmBuildMdlForNonPagedPool |
| 1127 | MmCanFileBeTruncated |
| 1128 | MmCommitSessionMappedView |
| 1129 | MmCopyMemory |
| 1130 | MmCopyVirtualMemory |
| 1131 | MmCreateMdl |
| 1132 | MmCreateMirror |
| 1133 | MmCreateSection |
| 1134 | MmDisableModifiedWriteOfSection |
| 1135 | MmDoesFileHaveUserWritableReferences |
| 1136 | MmFlushImageSection |
| 1137 | MmForceSectionClosed |
| 1138 | MmFreeContiguousMemory |
| 1139 | MmFreeContiguousMemorySpecifyCache |
| 1140 | MmFreeMappingAddress |
| 1141 | MmFreeNonCachedMemory |
| 1142 | MmFreePagesFromMdl |
| 1143 | MmGetCacheAttribute |
| 1144 | MmGetMaximumFileSectionSize |
| 1145 | MmGetPhysicalAddress |
| 1146 | MmGetPhysicalMemoryRanges |
| 1147 | MmGetSystemRoutineAddress |
| 1148 | MmGetVirtualForPhysical |
| 1149 | MmGrowKernelStack |
| 1150 | MmHighestUserAddress DATA |
| 1151 | MmIsAddressValid |
| 1152 | MmIsDriverSuspectForVerifier |
| 1153 | MmIsDriverVerifying |
| 1154 | MmIsDriverVerifyingByAddress |
| 1155 | MmIsIoSpaceActive |
| 1156 | MmIsNonPagedSystemAddressValid |
| 1157 | MmIsRecursiveIoFault |
| 1158 | MmIsThisAnNtAsSystem |
| 1159 | MmIsVerifierEnabled |
| 1160 | MmLockPagableDataSection |
| 1161 | MmLockPagableImageSection |
| 1162 | MmLockPagableSectionByHandle |
| 1163 | MmMapIoSpace |
| 1164 | MmMapLockedPages |
| 1165 | MmMapLockedPagesSpecifyCache |
| 1166 | MmMapLockedPagesWithReservedMapping |
| 1167 | MmMapMemoryDumpMdl |
| 1168 | MmMapUserAddressesToPage |
| 1169 | MmMapViewInSessionSpace |
| 1170 | MmMapViewInSessionSpaceEx |
| 1171 | MmMapViewInSystemSpace |
| 1172 | MmMapViewInSystemSpaceEx |
| 1173 | MmMapViewOfSection |
| 1174 | MmMarkPhysicalMemoryAsBad |
| 1175 | MmMarkPhysicalMemoryAsGood |
| 1176 | MmMdlPageContentsState |
| 1177 | MmMdlPagesAreZero |
| 1178 | MmPageEntireDriver |
| 1179 | MmPrefetchPages |
| 1180 | MmPrefetchVirtualAddresses |
| 1181 | MmProbeAndLockPages |
| 1182 | MmProbeAndLockProcessPages |
| 1183 | MmProbeAndLockSelectedPages |
| 1184 | MmProtectMdlSystemAddress |
| 1185 | MmQuerySystemSize |
| 1186 | MmRemovePhysicalMemory |
| 1187 | MmResetDriverPaging |
| 1188 | MmRotatePhysicalView |
| 1189 | MmSectionObjectType DATA |
| 1190 | MmSecureVirtualMemory |
| 1191 | MmSetAddressRangeModified |
| 1192 | MmSizeOfMdl |
| 1193 | MmSystemRangeStart DATA |
| 1194 | MmTrimAllSystemPagableMemory |
| 1195 | MmUnlockPagableImageSection |
| 1196 | MmUnlockPages |
| 1197 | MmUnmapIoSpace |
| 1198 | MmUnmapLockedPages |
| 1199 | MmUnmapReservedMapping |
| 1200 | MmUnmapViewInSessionSpace |
| 1201 | MmUnmapViewInSystemSpace |
| 1202 | MmUnmapViewOfSection |
| 1203 | MmUnsecureVirtualMemory |
| 1204 | MmUserProbeAddress DATA |
| 1205 | NlsAnsiCodePage DATA |
| 1206 | NlsLeadByteInfo DATA |
| 1207 | NlsMbCodePageTag DATA |
| 1208 | NlsMbOemCodePageTag DATA |
| 1209 | NlsOemCodePage DATA |
| 1210 | NlsOemLeadByteInfo DATA |
| 1211 | NtAdjustPrivilegesToken |
| 1212 | NtAllocateLocallyUniqueId |
| 1213 | NtAllocateUuids |
| 1214 | NtAllocateVirtualMemory |
| 1215 | NtBuildGUID |
| 1216 | NtBuildLab |
| 1217 | NtBuildNumber |
| 1218 | NtClose |
| 1219 | NtCommitComplete |
| 1220 | NtCommitEnlistment |
| 1221 | NtCommitTransaction |
| 1222 | NtConnectPort |
| 1223 | NtCreateEnlistment |
| 1224 | NtCreateEvent |
| 1225 | NtCreateFile |
| 1226 | NtCreateResourceManager |
| 1227 | NtCreateSection |
| 1228 | NtCreateTransaction |
| 1229 | NtCreateTransactionManager |
| 1230 | NtDeleteAtom |
| 1231 | NtDeleteFile |
| 1232 | NtDeviceIoControlFile |
| 1233 | NtDuplicateObject |
| 1234 | NtDuplicateToken |
| 1235 | NtEnumerateTransactionObject |
| 1236 | NtFindAtom |
| 1237 | NtFreeVirtualMemory |
| 1238 | NtFreezeTransactions |
| 1239 | NtFsControlFile |
| 1240 | NtGetEnvironmentVariableEx |
| 1241 | NtGetNotificationResourceManager |
| 1242 | NtGlobalFlag DATA |
| 1243 | NtLockFile |
| 1244 | NtMakePermanentObject |
| 1245 | NtMapViewOfSection |
| 1246 | NtNotifyChangeDirectoryFile |
| 1247 | NtOpenEnlistment |
| 1248 | NtOpenFile |
| 1249 | NtOpenProcess |
| 1250 | NtOpenProcessToken |
| 1251 | NtOpenProcessTokenEx |
| 1252 | NtOpenResourceManager |
| 1253 | NtOpenThread |
| 1254 | NtOpenThreadToken |
| 1255 | NtOpenThreadTokenEx |
| 1256 | NtOpenTransaction |
| 1257 | NtOpenTransactionManager |
| 1258 | NtPrePrepareComplete |
| 1259 | NtPrePrepareEnlistment |
| 1260 | NtPrepareComplete |
| 1261 | NtPrepareEnlistment |
| 1262 | NtPropagationComplete |
| 1263 | NtPropagationFailed |
| 1264 | NtQueryDirectoryFile |
| 1265 | NtQueryEaFile |
| 1266 | NtQueryEnvironmentVariableInfoEx |
| 1267 | NtQueryInformationAtom |
| 1268 | NtQueryInformationEnlistment |
| 1269 | NtQueryInformationFile |
| 1270 | NtQueryInformationProcess |
| 1271 | NtQueryInformationResourceManager |
| 1272 | NtQueryInformationThread |
| 1273 | NtQueryInformationToken |
| 1274 | NtQueryInformationTransaction |
| 1275 | NtQueryInformationTransactionManager |
| 1276 | NtQueryQuotaInformationFile |
| 1277 | NtQuerySecurityAttributesToken |
| 1278 | NtQuerySecurityObject |
| 1279 | NtQuerySystemInformation |
| 1280 | NtQuerySystemInformationEx |
| 1281 | NtQueryVolumeInformationFile |
| 1282 | NtReadFile |
| 1283 | NtReadOnlyEnlistment |
| 1284 | NtRecoverEnlistment |
| 1285 | NtRecoverResourceManager |
| 1286 | NtRecoverTransactionManager |
| 1287 | NtRequestPort |
| 1288 | NtRequestWaitReplyPort |
| 1289 | NtRollbackComplete |
| 1290 | NtRollbackEnlistment |
| 1291 | NtRollbackTransaction |
| 1292 | NtSetCachedSigningLevel |
| 1293 | NtSetEaFile |
| 1294 | NtSetEvent |
| 1295 | NtSetInformationEnlistment |
| 1296 | NtSetInformationFile |
| 1297 | NtSetInformationProcess |
| 1298 | NtSetInformationResourceManager |
| 1299 | NtSetInformationThread |
| 1300 | NtSetInformationToken |
| 1301 | NtSetInformationTransaction |
| 1302 | NtSetInformationVirtualMemory |
| 1303 | NtSetQuotaInformationFile |
| 1304 | NtSetSecurityObject |
| 1305 | NtSetVolumeInformationFile |
| 1306 | NtShutdownSystem |
| 1307 | NtThawTransactions |
| 1308 | NtTraceControl |
| 1309 | NtTraceEvent |
| 1310 | NtUnlockFile |
| 1311 | NtVdmControl |
| 1312 | NtWaitForSingleObject |
| 1313 | NtWriteFile |
| 1314 | ObAssignSecurity |
| 1315 | ObCheckCreateObjectAccess |
| 1316 | ObCheckObjectAccess |
| 1317 | ObCloseHandle |
| 1318 | ObCreateObject |
| 1319 | ObCreateObjectType |
| 1320 | ObDeleteCapturedInsertInfo |
| 1321 | ObDereferenceObject |
| 1322 | ObDereferenceObjectDeferDelete |
| 1323 | ObDereferenceObjectDeferDeleteWithTag |
| 1324 | ObDereferenceSecurityDescriptor |
| 1325 | ObDuplicateObject |
| 1326 | ObFindHandleForObject |
| 1327 | ObGetFilterVersion |
| 1328 | ObGetObjectSecurity |
| 1329 | ObGetObjectType |
| 1330 | ObInsertObject |
| 1331 | ObIsDosDeviceLocallyMapped |
| 1332 | ObIsKernelHandle |
| 1333 | ObLogSecurityDescriptor |
| 1334 | ObMakeTemporaryObject |
| 1335 | ObOpenObjectByName |
| 1336 | ObOpenObjectByPointer |
| 1337 | ObOpenObjectByPointerWithTag |
| 1338 | ObQueryNameInfo |
| 1339 | ObQueryNameString |
| 1340 | ObQueryObjectAuditingByHandle |
| 1341 | ObReferenceObjectByHandle |
| 1342 | ObReferenceObjectByHandleWithTag |
| 1343 | ObReferenceObjectByName |
| 1344 | ObReferenceObjectByPointer |
| 1345 | ObReferenceObjectByPointerWithTag |
| 1346 | ObReferenceObjectSafe |
| 1347 | ObReferenceObjectSafeWithTag |
| 1348 | ObReferenceSecurityDescriptor |
| 1349 | ObRegisterCallbacks |
| 1350 | ObReleaseObjectSecurity |
| 1351 | ObSetHandleAttributes |
| 1352 | ObSetSecurityDescriptorInfo |
| 1353 | ObSetSecurityObjectByPointer |
| 1354 | ObUnRegisterCallbacks |
| 1355 | ObWaitForMultipleObjects |
| 1356 | ObWaitForSingleObject |
| 1357 | ObfDereferenceObject |
| 1358 | ObfDereferenceObjectWithTag |
| 1359 | ObfReferenceObject |
| 1360 | ObfReferenceObjectWithTag |
| 1361 | POGOBuffer DATA |
| 1362 | PcwAddInstance |
| 1363 | PcwCloseInstance |
| 1364 | PcwCreateInstance |
| 1365 | PcwRegister |
| 1366 | PcwUnregister |
| 1367 | PfFileInfoNotify |
| 1368 | PfxFindPrefix |
| 1369 | PfxInitialize |
| 1370 | PfxInsertPrefix |
| 1371 | PfxRemovePrefix |
| 1372 | PoCallDriver |
| 1373 | PoCancelDeviceNotify |
| 1374 | PoClearPowerRequest |
| 1375 | PoCreatePowerRequest |
| 1376 | PoDeletePowerRequest |
| 1377 | PoDisableSleepStates |
| 1378 | PoEndDeviceBusy |
| 1379 | PoFxActivateComponent |
| 1380 | PoFxCompleteDevicePowerNotRequired |
| 1381 | PoFxCompleteIdleCondition |
| 1382 | PoFxCompleteIdleState |
| 1383 | PoFxIdleComponent |
| 1384 | PoFxNotifySurprisePowerOn |
| 1385 | PoFxPowerControl |
| 1386 | PoFxPowerOnCrashdumpDevice |
| 1387 | PoFxProcessorNotification |
| 1388 | PoFxRegisterCoreDevice |
| 1389 | PoFxRegisterCrashdumpDevice |
| 1390 | PoFxRegisterDevice |
| 1391 | PoFxRegisterPlugin |
| 1392 | PoFxRegisterPluginEx |
| 1393 | PoFxRegisterPrimaryDevice |
| 1394 | PoFxReportDevicePoweredOn |
| 1395 | PoFxSetComponentLatency |
| 1396 | PoFxSetComponentResidency |
| 1397 | PoFxSetComponentWake |
| 1398 | PoFxSetDeviceIdleTimeout |
| 1399 | PoFxStartDevicePowerManagement |
| 1400 | PoFxUnregisterDevice |
| 1401 | PoGetProcessorIdleAccounting |
| 1402 | PoGetSystemWake |
| 1403 | PoInitiateProcessorWake |
| 1404 | PoLatencySensitivityHint |
| 1405 | PoNotifyVSyncChange |
| 1406 | PoQueryWatchdogTime |
| 1407 | PoQueueShutdownWorkItem |
| 1408 | PoReenableSleepStates |
| 1409 | PoRegisterCoalescingCallback |
| 1410 | PoRegisterDeviceForIdleDetection |
| 1411 | PoRegisterDeviceNotify |
| 1412 | PoRegisterPowerSettingCallback |
| 1413 | PoRegisterSystemState |
| 1414 | PoRequestPowerIrp |
| 1415 | PoRequestShutdownEvent |
| 1416 | PoSetDeviceBusyEx |
| 1417 | PoSetFixedWakeSource |
| 1418 | PoSetHiberRange |
| 1419 | PoSetPowerRequest |
| 1420 | PoSetPowerState |
| 1421 | PoSetSystemState |
| 1422 | PoSetSystemWake |
| 1423 | PoSetUserPresent |
| 1424 | PoShutdownBugCheck |
| 1425 | PoStartDeviceBusy |
| 1426 | PoStartNextPowerIrp |
| 1427 | PoUnregisterCoalescingCallback |
| 1428 | PoUnregisterPowerSettingCallback |
| 1429 | PoUnregisterSystemState |
| 1430 | PoUserShutdownCancelled |
| 1431 | PoUserShutdownInitiated |
| 1432 | ProbeForRead |
| 1433 | ProbeForWrite |
| 1434 | PsAcquireProcessExitSynchronization |
| 1435 | PsAssignImpersonationToken |
| 1436 | PsChargePoolQuota |
| 1437 | PsChargeProcessNonPagedPoolQuota |
| 1438 | PsChargeProcessPagedPoolQuota |
| 1439 | PsChargeProcessPoolQuota |
| 1440 | PsChargeProcessWakeCounter |
| 1441 | PsCreateSystemThread |
| 1442 | PsCreateSystemThreadEx |
| 1443 | PsDereferenceImpersonationToken |
| 1444 | PsDereferenceKernelStack |
| 1445 | PsDereferencePrimaryToken |
| 1446 | PsDisableImpersonation |
| 1447 | PsEnterPriorityRegion |
| 1448 | PsEstablishWin32Callouts |
| 1449 | PsGetContextThread |
| 1450 | PsGetCurrentProcess |
| 1451 | PsGetCurrentProcessId |
| 1452 | PsGetCurrentProcessSessionId |
| 1453 | PsGetCurrentProcessWin32Process |
| 1454 | PsGetCurrentThread |
| 1455 | PsGetCurrentThreadId |
| 1456 | PsGetCurrentThreadPreviousMode |
| 1457 | PsGetCurrentThreadProcess |
| 1458 | PsGetCurrentThreadProcessId |
| 1459 | PsGetCurrentThreadStackBase |
| 1460 | PsGetCurrentThreadStackLimit |
| 1461 | PsGetCurrentThreadTeb |
| 1462 | PsGetCurrentThreadWin32Thread |
| 1463 | PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion |
| 1464 | PsGetJobLock |
| 1465 | PsGetJobSessionId |
| 1466 | PsGetJobUIRestrictionsClass |
| 1467 | PsGetProcessCommonJob |
| 1468 | PsGetProcessCreateTimeQuadPart |
| 1469 | PsGetProcessDebugPort |
| 1470 | PsGetProcessExitProcessCalled |
| 1471 | PsGetProcessExitStatus |
| 1472 | PsGetProcessExitTime |
| 1473 | PsGetProcessId |
| 1474 | PsGetProcessImageFileName |
| 1475 | PsGetProcessInheritedFromUniqueProcessId |
| 1476 | PsGetProcessJob |
| 1477 | PsGetProcessPeb |
| 1478 | PsGetProcessPriorityClass |
| 1479 | PsGetProcessProtection |
| 1480 | PsGetProcessSectionBaseAddress |
| 1481 | PsGetProcessSecurityPort |
| 1482 | PsGetProcessSessionId |
| 1483 | PsGetProcessSessionIdEx |
| 1484 | PsGetProcessSignatureLevel |
| 1485 | PsGetProcessWin32Process |
| 1486 | PsGetProcessWin32WindowStation |
| 1487 | PsGetThreadExitStatus |
| 1488 | PsGetThreadFreezeCount |
| 1489 | PsGetThreadHardErrorsAreDisabled |
| 1490 | PsGetThreadId |
| 1491 | PsGetThreadProcess |
| 1492 | PsGetThreadProcessId |
| 1493 | PsGetThreadSessionId |
| 1494 | PsGetThreadTeb |
| 1495 | PsGetThreadWin32Thread |
| 1496 | PsGetVersion |
| 1497 | PsImpersonateClient |
| 1498 | PsInitialSystemProcess DATA |
| 1499 | PsIsCurrentThreadPrefetching |
| 1500 | PsIsDiskCountersEnabled |
| 1501 | PsIsProcessBeingDebugged |
| 1502 | PsIsProtectedProcess |
| 1503 | PsIsProtectedProcessLight |
| 1504 | PsIsSystemProcess |
| 1505 | PsIsSystemThread |
| 1506 | PsIsThreadImpersonating |
| 1507 | PsIsThreadTerminating |
| 1508 | PsJobType DATA |
| 1509 | PsLeavePriorityRegion |
| 1510 | PsLookupProcessByProcessId |
| 1511 | PsLookupProcessThreadByCid |
| 1512 | PsLookupThreadByThreadId |
| 1513 | PsProcessType DATA |
| 1514 | PsQueryProcessAttributesByToken |
| 1515 | PsQueryProcessExceptionFlags |
| 1516 | PsQueryTotalCycleTimeProcess |
| 1517 | PsReferenceImpersonationToken |
| 1518 | PsReferenceKernelStack |
| 1519 | PsReferencePrimaryToken |
| 1520 | PsReferenceProcessFilePointer |
| 1521 | PsReleaseProcessExitSynchronization |
| 1522 | PsReleaseProcessWakeCounter |
| 1523 | PsRemoveCreateThreadNotifyRoutine |
| 1524 | PsRemoveLoadImageNotifyRoutine |
| 1525 | PsRestoreImpersonation |
| 1526 | PsResumeProcess |
| 1527 | PsReturnPoolQuota |
| 1528 | PsReturnProcessNonPagedPoolQuota |
| 1529 | PsReturnProcessPagedPoolQuota |
| 1530 | PsRevertThreadToSelf |
| 1531 | PsRevertToSelf |
| 1532 | PsSetContextThread |
| 1533 | PsSetCreateProcessNotifyRoutine |
| 1534 | PsSetCreateProcessNotifyRoutineEx |
| 1535 | PsSetCreateThreadNotifyRoutine |
| 1536 | PsSetCurrentThreadPrefetching |
| 1537 | PsSetLegoNotifyRoutine |
| 1538 | PsSetLoadImageNotifyRoutine |
| 1539 | PsSetProcessPriorityByClass |
| 1540 | PsSetProcessPriorityClass |
| 1541 | PsSetProcessSecurityPort |
| 1542 | PsSetProcessWin32Process |
| 1543 | PsSetProcessWindowStation |
| 1544 | PsSetThreadHardErrorsAreDisabled |
| 1545 | PsSetThreadWin32Thread |
| 1546 | PsSuspendProcess |
| 1547 | PsTerminateSystemThread |
| 1548 | PsThreadType DATA |
| 1549 | PsUILanguageComitted DATA |
| 1550 | PsUpdateDiskCounters |
| 1551 | PsWrapApcWow64Thread |
| 1552 | ReadTimeStampCounter |
| 1553 | RtlAbsoluteToSelfRelativeSD |
| 1554 | RtlAddAccessAllowedAce |
| 1555 | RtlAddAccessAllowedAceEx |
| 1556 | RtlAddAce |
| 1557 | RtlAddAtomToAtomTable |
| 1558 | RtlAddAtomToAtomTableEx |
| 1559 | RtlAddRange |
| 1560 | RtlAddResourceAttributeAce |
| 1561 | RtlAllocateHeap |
| 1562 | RtlAnsiCharToUnicodeChar |
| 1563 | RtlAnsiStringToUnicodeSize |
| 1564 | RtlAnsiStringToUnicodeString |
| 1565 | RtlAppendAsciizToString |
| 1566 | RtlAppendStringToString |
| 1567 | RtlAppendUnicodeStringToString |
| 1568 | RtlAppendUnicodeToString |
| 1569 | RtlAreAllAccessesGranted |
| 1570 | RtlAreAnyAccessesGranted |
| 1571 | RtlAreBitsClear |
| 1572 | RtlAreBitsSet |
| 1573 | RtlAssert |
| 1574 | RtlAvlInsertNodeEx |
| 1575 | RtlAvlRemoveNode |
| 1576 | RtlCaptureContext |
| 1577 | RtlCaptureStackBackTrace |
| 1578 | RtlCharToInteger |
| 1579 | RtlCheckPortableOperatingSystem |
| 1580 | RtlCheckRegistryKey |
| 1581 | RtlCheckTokenCapability |
| 1582 | RtlCheckTokenMembership |
| 1583 | RtlCheckTokenMembershipEx |
| 1584 | RtlClearAllBits |
| 1585 | RtlClearBit |
| 1586 | RtlClearBits |
| 1587 | RtlCmDecodeMemIoResource |
| 1588 | RtlCmEncodeMemIoResource |
| 1589 | RtlCompareAltitudes |
| 1590 | RtlCompareMemory |
| 1591 | RtlCompareMemoryUlong |
| 1592 | RtlCompareString |
| 1593 | RtlCompareUnicodeString |
| 1594 | RtlCompareUnicodeStrings |
| 1595 | RtlCompressBuffer |
| 1596 | RtlCompressChunks |
| 1597 | RtlComputeCrc32 |
| 1598 | RtlContractHashTable |
| 1599 | RtlConvertSidToUnicodeString |
| 1600 | RtlCopyBitMap |
| 1601 | RtlCopyLuid |
| 1602 | RtlCopyLuidAndAttributesArray |
| 1603 | RtlCopyMemory |
| 1604 | RtlCopyRangeList |
| 1605 | RtlCopySid |
| 1606 | RtlCopySidAndAttributesArray |
| 1607 | RtlCopyString |
| 1608 | RtlCopyUnicodeString |
| 1609 | RtlCrc32 |
| 1610 | RtlCrc64 |
| 1611 | RtlCreateAcl |
| 1612 | RtlCreateAtomTable |
| 1613 | RtlCreateAtomTableEx |
| 1614 | RtlCreateHashTable |
| 1615 | RtlCreateHashTableEx |
| 1616 | RtlCreateHeap |
| 1617 | RtlCreateRegistryKey |
| 1618 | RtlCreateSecurityDescriptor |
| 1619 | RtlCreateSystemVolumeInformationFolder |
| 1620 | RtlCreateUnicodeString |
| 1621 | RtlCreateUserThread |
| 1622 | RtlCultureNameToLCID |
| 1623 | RtlCustomCPToUnicodeN |
| 1624 | RtlDecompressBuffer |
| 1625 | RtlDecompressBufferEx |
| 1626 | RtlDecompressChunks |
| 1627 | RtlDecompressFragment |
| 1628 | RtlDelete |
| 1629 | RtlDeleteAce |
| 1630 | RtlDeleteAtomFromAtomTable |
| 1631 | RtlDeleteElementGenericTable |
| 1632 | RtlDeleteElementGenericTableAvl |
| 1633 | RtlDeleteElementGenericTableAvlEx |
| 1634 | RtlDeleteHashTable |
| 1635 | RtlDeleteNoSplay |
| 1636 | RtlDeleteOwnersRanges |
| 1637 | RtlDeleteRange |
| 1638 | RtlDeleteRegistryValue |
| 1639 | RtlDescribeChunk |
| 1640 | RtlDestroyAtomTable |
| 1641 | RtlDestroyHeap |
| 1642 | RtlDowncaseUnicodeChar |
| 1643 | RtlDowncaseUnicodeString |
| 1644 | RtlDuplicateUnicodeString |
| 1645 | RtlEmptyAtomTable |
| 1646 | RtlEndEnumerationHashTable |
| 1647 | RtlEndWeakEnumerationHashTable |
| 1648 | RtlEnumerateEntryHashTable |
| 1649 | RtlEnumerateGenericTable |
| 1650 | RtlEnumerateGenericTableAvl |
| 1651 | RtlEnumerateGenericTableLikeADirectory |
| 1652 | RtlEnumerateGenericTableWithoutSplaying |
| 1653 | RtlEnumerateGenericTableWithoutSplayingAvl |
| 1654 | RtlEqualLuid |
| 1655 | RtlEqualSid |
| 1656 | RtlEqualString |
| 1657 | RtlEqualUnicodeString |
| 1658 | RtlEqualWnfChangeStamps |
| 1659 | RtlEthernetAddressToStringA |
| 1660 | RtlEthernetAddressToStringW |
| 1661 | RtlEthernetStringToAddressA |
| 1662 | RtlEthernetStringToAddressW |
| 1663 | RtlExpandHashTable |
| 1664 | RtlExtendedMagicDivide |
| 1665 | RtlExtractBitMap |
| 1666 | RtlFillMemory |
| 1667 | RtlFillMemoryUlong |
| 1668 | RtlFillMemoryUlonglong |
| 1669 | RtlFindAceByType |
| 1670 | RtlFindClearBits |
| 1671 | RtlFindClearBitsAndSet |
| 1672 | RtlFindClearRuns |
| 1673 | RtlFindClosestEncodableLength |
| 1674 | RtlFindFirstRunClear |
| 1675 | RtlFindLastBackwardRunClear |
| 1676 | RtlFindLeastSignificantBit |
| 1677 | RtlFindLongestRunClear |
| 1678 | RtlFindMessage |
| 1679 | RtlFindMostSignificantBit |
| 1680 | RtlFindNextForwardRunClear |
| 1681 | RtlFindRange |
| 1682 | RtlFindSetBits |
| 1683 | RtlFindSetBitsAndClear |
| 1684 | RtlFindUnicodePrefix |
| 1685 | RtlFormatCurrentUserKeyPath |
| 1686 | RtlFormatMessage |
| 1687 | RtlFreeAnsiString |
| 1688 | RtlFreeHeap |
| 1689 | RtlFreeOemString |
| 1690 | RtlFreeRangeList |
| 1691 | RtlFreeUnicodeString |
| 1692 | RtlGUIDFromString |
| 1693 | RtlGenerate8dot3Name |
| 1694 | RtlGenerateClass5Guid |
| 1695 | RtlGetAce |
| 1696 | RtlGetAppContainerNamedObjectPath |
| 1697 | RtlGetAppContainerParent |
| 1698 | RtlGetAppContainerSidType |
| 1699 | RtlGetCallersAddress |
| 1700 | RtlGetCompressionWorkSpaceSize |
| 1701 | RtlGetDaclSecurityDescriptor |
| 1702 | RtlGetDefaultCodePage |
| 1703 | RtlGetElementGenericTable |
| 1704 | RtlGetElementGenericTableAvl |
| 1705 | RtlGetEnabledExtendedFeatures |
| 1706 | RtlGetFirstRange |
| 1707 | RtlGetGroupSecurityDescriptor |
| 1708 | RtlGetIntegerAtom |
| 1709 | RtlGetLastRange |
| 1710 | RtlGetNextEntryHashTable |
| 1711 | RtlGetNextRange |
| 1712 | RtlGetNtGlobalFlags |
| 1713 | RtlGetOwnerSecurityDescriptor |
| 1714 | RtlGetProductInfo |
| 1715 | RtlGetSaclSecurityDescriptor |
| 1716 | RtlGetSetBootStatusData |
| 1717 | RtlGetThreadLangIdByIndex |
| 1718 | RtlGetVersion |
| 1719 | RtlHashUnicodeString |
| 1720 | RtlIdnToAscii |
| 1721 | RtlIdnToNameprepUnicode |
| 1722 | RtlIdnToUnicode |
| 1723 | RtlImageDirectoryEntryToData |
| 1724 | RtlImageNtHeader |
| 1725 | RtlImageNtHeaderEx |
| 1726 | RtlInitAnsiString |
| 1727 | RtlInitAnsiStringEx |
| 1728 | RtlInitCodePageTable |
| 1729 | RtlInitEnumerationHashTable |
| 1730 | RtlInitString |
| 1731 | RtlInitUnicodeString |
| 1732 | RtlInitUnicodeStringEx |
| 1733 | RtlInitWeakEnumerationHashTable |
| 1734 | RtlInitializeBitMap |
| 1735 | RtlInitializeGenericTable |
| 1736 | RtlInitializeGenericTableAvl |
| 1737 | RtlInitializeRangeList |
| 1738 | RtlInitializeSid |
| 1739 | RtlInitializeUnicodePrefix |
| 1740 | RtlInsertElementGenericTable |
| 1741 | RtlInsertElementGenericTableAvl |
| 1742 | RtlInsertElementGenericTableFull |
| 1743 | RtlInsertElementGenericTableFullAvl |
| 1744 | RtlInsertEntryHashTable |
| 1745 | RtlInsertUnicodePrefix |
| 1746 | RtlInt64ToUnicodeString |
| 1747 | RtlIntegerToChar |
| 1748 | RtlIntegerToUnicode |
| 1749 | RtlIntegerToUnicodeString |
| 1750 | RtlInterlockedClearBitRun |
| 1751 | RtlInterlockedSetBitRun |
| 1752 | RtlInterlockedSetClearRun |
| 1753 | RtlInvertRangeList |
| 1754 | RtlInvertRangeListEx |
| 1755 | RtlIoDecodeMemIoResource |
| 1756 | RtlIoEncodeMemIoResource |
| 1757 | RtlIpv4AddressToStringA |
| 1758 | RtlIpv4AddressToStringExA |
| 1759 | RtlIpv4AddressToStringExW |
| 1760 | RtlIpv4AddressToStringW |
| 1761 | RtlIpv4StringToAddressA |
| 1762 | RtlIpv4StringToAddressExA |
| 1763 | RtlIpv4StringToAddressExW |
| 1764 | RtlIpv4StringToAddressW |
| 1765 | RtlIpv6AddressToStringA |
| 1766 | RtlIpv6AddressToStringExA |
| 1767 | RtlIpv6AddressToStringExW |
| 1768 | RtlIpv6AddressToStringW |
| 1769 | RtlIpv6StringToAddressA |
| 1770 | RtlIpv6StringToAddressExA |
| 1771 | RtlIpv6StringToAddressExW |
| 1772 | RtlIpv6StringToAddressW |
| 1773 | RtlIsGenericTableEmpty |
| 1774 | RtlIsGenericTableEmptyAvl |
| 1775 | RtlIsNameLegalDOS8Dot3 |
| 1776 | RtlIsNormalizedString |
| 1777 | RtlIsNtDdiVersionAvailable |
| 1778 | RtlIsRangeAvailable |
| 1779 | RtlIsServicePackVersionInstalled |
| 1780 | RtlIsUntrustedObject |
| 1781 | RtlIsValidOemCharacter |
| 1782 | RtlLCIDToCultureName |
| 1783 | RtlLengthRequiredSid |
| 1784 | RtlLengthSecurityDescriptor |
| 1785 | RtlLengthSid |
| 1786 | RtlLoadString |
| 1787 | RtlLocalTimeToSystemTime |
| 1788 | RtlLockBootStatusData |
| 1789 | RtlLookupAtomInAtomTable |
| 1790 | RtlLookupElementGenericTable |
| 1791 | RtlLookupElementGenericTableAvl |
| 1792 | RtlLookupElementGenericTableFull |
| 1793 | RtlLookupElementGenericTableFullAvl |
| 1794 | RtlLookupEntryHashTable |
| 1795 | RtlLookupFirstMatchingElementGenericTableAvl |
| 1796 | RtlLookupFunctionEntry |
| 1797 | RtlMapGenericMask |
| 1798 | RtlMapSecurityErrorToNtStatus |
| 1799 | RtlMergeRangeLists |
| 1800 | RtlMoveMemory |
| 1801 | RtlMultiByteToUnicodeN |
| 1802 | RtlMultiByteToUnicodeSize |
| 1803 | RtlNextUnicodePrefix |
| 1804 | RtlNormalizeString |
| 1805 | RtlNtStatusToDosError |
| 1806 | RtlNtStatusToDosErrorNoTeb |
| 1807 | RtlNumberGenericTableElements |
| 1808 | RtlNumberGenericTableElementsAvl |
| 1809 | RtlNumberOfClearBits |
| 1810 | RtlNumberOfClearBitsInRange |
| 1811 | RtlNumberOfSetBits |
| 1812 | RtlNumberOfSetBitsInRange |
| 1813 | RtlNumberOfSetBitsUlongPtr |
| 1814 | RtlOemStringToCountedUnicodeString |
| 1815 | RtlOemStringToUnicodeSize |
| 1816 | RtlOemStringToUnicodeString |
| 1817 | RtlOemToUnicodeN |
| 1818 | RtlOpenCurrentUser |
| 1819 | RtlOwnerAcesPresent |
| 1820 | RtlPcToFileHeader |
| 1821 | RtlPinAtomInAtomTable |
| 1822 | RtlPrefetchMemoryNonTemporal |
| 1823 | RtlPrefixString |
| 1824 | RtlPrefixUnicodeString |
| 1825 | RtlQueryAtomInAtomTable |
| 1826 | RtlQueryDynamicTimeZoneInformation |
| 1827 | RtlQueryElevationFlags |
| 1828 | RtlQueryInformationAcl |
| 1829 | RtlQueryModuleInformation |
| 1830 | RtlQueryPackageIdentity |
| 1831 | RtlQueryRegistryValues |
| 1832 | RtlQueryRegistryValuesEx |
| 1833 | RtlQueryTimeZoneInformation |
| 1834 | RtlQueryValidationRunlevel |
| 1835 | RtlRaiseException |
| 1836 | RtlRandom |
| 1837 | RtlRandomEx |
| 1838 | RtlRbInsertNodeEx |
| 1839 | RtlRbRemoveNode |
| 1840 | RtlRealPredecessor |
| 1841 | RtlRealSuccessor |
| 1842 | RtlRemoveEntryHashTable |
| 1843 | RtlRemoveUnicodePrefix |
| 1844 | RtlReplaceSidInSd |
| 1845 | RtlReserveChunk |
| 1846 | RtlRestoreContext |
| 1847 | RtlRunOnceBeginInitialize |
| 1848 | RtlRunOnceComplete |
| 1849 | RtlRunOnceExecuteOnce |
| 1850 | RtlRunOnceInitialize |
| 1851 | RtlSecondsSince1970ToTime |
| 1852 | RtlSecondsSince1980ToTime |
| 1853 | RtlSelfRelativeToAbsoluteSD |
| 1854 | RtlSelfRelativeToAbsoluteSD2 |
| 1855 | RtlSetAllBits |
| 1856 | RtlSetBit |
| 1857 | RtlSetBits |
| 1858 | RtlSetControlSecurityDescriptor |
| 1859 | RtlSetDaclSecurityDescriptor |
| 1860 | RtlSetDynamicTimeZoneInformation |
| 1861 | RtlSetGroupSecurityDescriptor |
| 1862 | RtlSetOwnerSecurityDescriptor |
| 1863 | RtlSetPortableOperatingSystem |
| 1864 | RtlSetSaclSecurityDescriptor |
| 1865 | RtlSetTimeZoneInformation |
| 1866 | RtlSidHashInitialize |
| 1867 | RtlSidHashLookup |
| 1868 | RtlSizeHeap |
| 1869 | RtlSplay |
| 1870 | RtlStringFromGUID |
| 1871 | RtlSubAuthorityCountSid |
| 1872 | RtlSubAuthoritySid |
| 1873 | RtlSubtreePredecessor |
| 1874 | RtlSubtreeSuccessor |
| 1875 | RtlSystemTimeToLocalTime |
| 1876 | RtlTestBit |
| 1877 | RtlTimeFieldsToTime |
| 1878 | RtlTimeToElapsedTimeFields |
| 1879 | RtlTimeToSecondsSince1970 |
| 1880 | RtlTimeToSecondsSince1980 |
| 1881 | RtlTimeToTimeFields |
| 1882 | RtlTraceDatabaseAdd |
| 1883 | RtlTraceDatabaseCreate |
| 1884 | RtlTraceDatabaseDestroy |
| 1885 | RtlTraceDatabaseEnumerate |
| 1886 | RtlTraceDatabaseFind |
| 1887 | RtlTraceDatabaseLock |
| 1888 | RtlTraceDatabaseUnlock |
| 1889 | RtlTraceDatabaseValidate |
| 1890 | RtlUTF8ToUnicodeN |
| 1891 | RtlUlongByteSwap |
| 1892 | RtlUlonglongByteSwap |
| 1893 | RtlUnicodeStringToAnsiSize |
| 1894 | RtlUnicodeStringToAnsiString |
| 1895 | RtlUnicodeStringToCountedOemString |
| 1896 | RtlUnicodeStringToInteger |
| 1897 | RtlUnicodeStringToOemSize |
| 1898 | RtlUnicodeStringToOemString |
| 1899 | RtlUnicodeToCustomCPN |
| 1900 | RtlUnicodeToMultiByteN |
| 1901 | RtlUnicodeToMultiByteSize |
| 1902 | RtlUnicodeToOemN |
| 1903 | RtlUnicodeToUTF8N |
| 1904 | RtlUnlockBootStatusData |
| 1905 | RtlUnwind |
| 1906 | RtlUnwindEx |
| 1907 | RtlUpcaseUnicodeChar |
| 1908 | RtlUpcaseUnicodeString |
| 1909 | RtlUpcaseUnicodeStringToAnsiString |
| 1910 | RtlUpcaseUnicodeStringToCountedOemString |
| 1911 | RtlUpcaseUnicodeStringToOemString |
| 1912 | RtlUpcaseUnicodeToCustomCPN |
| 1913 | RtlUpcaseUnicodeToMultiByteN |
| 1914 | RtlUpcaseUnicodeToOemN |
| 1915 | RtlUpperChar |
| 1916 | RtlUpperString |
| 1917 | RtlUshortByteSwap |
| 1918 | RtlValidRelativeSecurityDescriptor |
| 1919 | RtlValidSecurityDescriptor |
| 1920 | RtlValidSid |
| 1921 | RtlValidateUnicodeString |
| 1922 | RtlVerifyVersionInfo |
| 1923 | RtlVirtualUnwind |
| 1924 | RtlVolumeDeviceToDosName |
| 1925 | RtlWalkFrameChain |
| 1926 | RtlWeaklyEnumerateEntryHashTable |
| 1927 | RtlWriteRegistryValue |
| 1928 | RtlZeroHeap |
| 1929 | RtlZeroMemory |
| 1930 | RtlxAnsiStringToUnicodeSize |
| 1931 | RtlxOemStringToUnicodeSize |
| 1932 | RtlxUnicodeStringToAnsiSize |
| 1933 | RtlxUnicodeStringToOemSize |
| 1934 | SeAccessCheck |
| 1935 | SeAccessCheckEx |
| 1936 | SeAccessCheckFromState |
| 1937 | SeAccessCheckFromStateEx |
| 1938 | SeAccessCheckWithHint |
| 1939 | SeAdjustAccessStateForTrustLabel |
| 1940 | SeAppendPrivileges |
| 1941 | SeAssignSecurity |
| 1942 | SeAssignSecurityEx |
| 1943 | SeAuditHardLinkCreation |
| 1944 | SeAuditHardLinkCreationWithTransaction |
| 1945 | SeAuditTransactionStateChange |
| 1946 | SeAuditingAnyFileEventsWithContext |
| 1947 | SeAuditingAnyFileEventsWithContextEx |
| 1948 | SeAuditingFileEvents |
| 1949 | SeAuditingFileEventsWithContext |
| 1950 | SeAuditingFileEventsWithContextEx |
| 1951 | SeAuditingFileOrGlobalEvents |
| 1952 | SeAuditingHardLinkEvents |
| 1953 | SeAuditingHardLinkEventsWithContext |
| 1954 | SeAuditingWithTokenForSubcategory |
| 1955 | SeCaptureSecurityDescriptor |
| 1956 | SeCaptureSubjectContext |
| 1957 | SeCaptureSubjectContextEx |
| 1958 | SeCloseObjectAuditAlarm |
| 1959 | SeCloseObjectAuditAlarmForNonObObject |
| 1960 | SeComputeAutoInheritByObjectType |
| 1961 | SeCreateAccessState |
| 1962 | SeCreateAccessStateEx |
| 1963 | SeCreateClientSecurity |
| 1964 | SeCreateClientSecurityEx |
| 1965 | SeCreateClientSecurityFromSubjectContext |
| 1966 | SeCreateClientSecurityFromSubjectContextEx |
| 1967 | SeDeassignSecurity |
| 1968 | SeDeleteAccessState |
| 1969 | SeDeleteObjectAuditAlarm |
| 1970 | SeDeleteObjectAuditAlarmWithTransaction |
| 1971 | SeExamineSacl |
| 1972 | SeExports DATA |
| 1973 | SeFilterToken |
| 1974 | SeFreePrivileges |
| 1975 | SeGetCachedSigningLevel |
| 1976 | SeGetLinkedToken |
| 1977 | SeGetLogonSessionToken |
| 1978 | SeImpersonateClient |
| 1979 | SeImpersonateClientEx |
| 1980 | SeIsParentOfChildAppContainer |
| 1981 | SeLocateProcessImageName |
| 1982 | SeLockSubjectContext |
| 1983 | SeMarkLogonSessionForTerminationNotification |
| 1984 | SeOpenObjectAuditAlarm |
| 1985 | SeOpenObjectAuditAlarmForNonObObject |
| 1986 | SeOpenObjectAuditAlarmWithTransaction |
| 1987 | SeOpenObjectForDeleteAuditAlarm |
| 1988 | SeOpenObjectForDeleteAuditAlarmWithTransaction |
| 1989 | SePrivilegeCheck |
| 1990 | SePrivilegeObjectAuditAlarm |
| 1991 | SePublicDefaultDacl DATA |
| 1992 | SeQueryAuthenticationIdToken |
| 1993 | SeQueryInformationToken |
| 1994 | SeQuerySecureBootPolicyValue |
| 1995 | SeQuerySecurityAttributesToken |
| 1996 | SeQuerySecurityDescriptorInfo |
| 1997 | SeQuerySessionIdToken |
| 1998 | SeRegisterImageVerificationCallback |
| 1999 | SeRegisterLogonSessionTerminatedRoutine |
| 2000 | SeReleaseSecurityDescriptor |
| 2001 | SeReleaseSubjectContext |
| 2002 | SeReportSecurityEvent |
| 2003 | SeReportSecurityEventWithSubCategory |
| 2004 | SeSecurityAttributePresent |
| 2005 | SeSetAccessStateGenericMapping |
| 2006 | SeSetAuditParameter |
| 2007 | SeSetSecurityAttributesToken |
| 2008 | SeSetSecurityDescriptorInfo |
| 2009 | SeSetSecurityDescriptorInfoEx |
| 2010 | SeShouldCheckForAccessRightsFromParent |
| 2011 | SeSinglePrivilegeCheck |
| 2012 | SeSrpAccessCheck |
| 2013 | SeSystemDefaultDacl DATA |
| 2014 | SeSystemDefaultSd DATA |
| 2015 | SeTokenFromAccessInformation |
| 2016 | SeTokenImpersonationLevel |
| 2017 | SeTokenIsAdmin |
| 2018 | SeTokenIsRestricted |
| 2019 | SeTokenIsWriteRestricted |
| 2020 | SeTokenObjectType DATA |
| 2021 | SeTokenType |
| 2022 | SeUnlockSubjectContext |
| 2023 | SeUnregisterImageVerificationCallback |
| 2024 | SeUnregisterLogonSessionTerminatedRoutine |
| 2025 | SeValidSecurityDescriptor |
| 2026 | TmCancelPropagationRequest |
| 2027 | TmCommitComplete |
| 2028 | TmCommitEnlistment |
| 2029 | TmCommitTransaction |
| 2030 | TmCreateEnlistment |
| 2031 | TmCurrentTransaction |
| 2032 | TmDereferenceEnlistmentKey |
| 2033 | TmEnableCallbacks |
| 2034 | TmEndPropagationRequest |
| 2035 | TmEnlistmentObjectType DATA |
| 2036 | TmFreezeTransactions |
| 2037 | TmGetTransactionId |
| 2038 | TmInitSystem |
| 2039 | TmInitSystemPhase2 |
| 2040 | TmInitializeTransactionManager |
| 2041 | TmIsKTMCommitCoordinator |
| 2042 | TmIsTransactionActive |
| 2043 | TmPrePrepareComplete |
| 2044 | TmPrePrepareEnlistment |
| 2045 | TmPrepareComplete |
| 2046 | TmPrepareEnlistment |
| 2047 | TmPropagationComplete |
| 2048 | TmPropagationFailed |
| 2049 | TmReadOnlyEnlistment |
| 2050 | TmRecoverEnlistment |
| 2051 | TmRecoverResourceManager |
| 2052 | TmRecoverTransactionManager |
| 2053 | TmReferenceEnlistmentKey |
| 2054 | TmRenameTransactionManager |
| 2055 | TmRequestOutcomeEnlistment |
| 2056 | TmResourceManagerObjectType DATA |
| 2057 | TmRollbackComplete |
| 2058 | TmRollbackEnlistment |
| 2059 | TmRollbackTransaction |
| 2060 | TmSetCurrentTransaction |
| 2061 | TmSinglePhaseReject |
| 2062 | TmThawTransactions |
| 2063 | TmTransactionManagerObjectType DATA |
| 2064 | TmTransactionObjectType DATA |
| 2065 | VerSetConditionMask |
| 2066 | VfFailDeviceNode |
| 2067 | VfFailDriver |
| 2068 | VfFailSystemBIOS |
| 2069 | VfInsertContext |
| 2070 | VfIsVerificationEnabled |
| 2071 | VfQueryDeviceContext |
| 2072 | VfQueryDispatchTable |
| 2073 | VfQueryDriverContext |
| 2074 | VfQueryIrpContext |
| 2075 | VfQueryThreadContext |
| 2076 | VfRemoveContext |
| 2077 | WheaAddErrorSource |
| 2078 | WheaConfigureErrorSource |
| 2079 | WheaGetErrorSource |
| 2080 | WheaInitializeRecordHeader |
| 2081 | WheaReportHwError |
| 2082 | WmiGetClock |
| 2083 | WmiQueryTraceInformation |
| 2084 | WmiTraceMessage |
| 2085 | WmiTraceMessageVa |
| 2086 | XIPDispatch |
| 2087 | ZwAccessCheckAndAuditAlarm |
| 2088 | ZwAddBootEntry |
| 2089 | ZwAddDriverEntry |
| 2090 | ZwAdjustPrivilegesToken |
| 2091 | ZwAlertThread |
| 2092 | ZwAllocateLocallyUniqueId |
| 2093 | ZwAllocateVirtualMemory |
| 2094 | ZwAlpcAcceptConnectPort |
| 2095 | ZwAlpcCancelMessage |
| 2096 | ZwAlpcConnectPort |
| 2097 | ZwAlpcConnectPortEx |
| 2098 | ZwAlpcCreatePort |
| 2099 | ZwAlpcCreatePortSection |
| 2100 | ZwAlpcCreateResourceReserve |
| 2101 | ZwAlpcCreateSectionView |
| 2102 | ZwAlpcCreateSecurityContext |
| 2103 | ZwAlpcDeletePortSection |
| 2104 | ZwAlpcDeleteResourceReserve |
| 2105 | ZwAlpcDeleteSectionView |
| 2106 | ZwAlpcDeleteSecurityContext |
| 2107 | ZwAlpcDisconnectPort |
| 2108 | ZwAlpcQueryInformation |
| 2109 | ZwAlpcSendWaitReceivePort |
| 2110 | ZwAlpcSetInformation |
| 2111 | ZwAssignProcessToJobObject |
| 2112 | ZwAssociateWaitCompletionPacket |
| 2113 | ZwCancelIoFile |
| 2114 | ZwCancelIoFileEx |
| 2115 | ZwCancelTimer |
| 2116 | ZwClearEvent |
| 2117 | ZwClose |
| 2118 | ZwCloseObjectAuditAlarm |
| 2119 | ZwCommitComplete |
| 2120 | ZwCommitEnlistment |
| 2121 | ZwCommitTransaction |
| 2122 | ZwConnectPort |
| 2123 | ZwCreateDirectoryObject |
| 2124 | ZwCreateEnlistment |
| 2125 | ZwCreateEvent |
| 2126 | ZwCreateFile |
| 2127 | ZwCreateIoCompletion |
| 2128 | ZwCreateJobObject |
| 2129 | ZwCreateKey |
| 2130 | ZwCreateKeyTransacted |
| 2131 | ZwCreateResourceManager |
| 2132 | ZwCreateSection |
| 2133 | ZwCreateSymbolicLinkObject |
| 2134 | ZwCreateTimer |
| 2135 | ZwCreateTransaction |
| 2136 | ZwCreateTransactionManager |
| 2137 | ZwCreateWaitCompletionPacket |
| 2138 | ZwCreateWnfStateName |
| 2139 | ZwDeleteBootEntry |
| 2140 | ZwDeleteDriverEntry |
| 2141 | ZwDeleteFile |
| 2142 | ZwDeleteKey |
| 2143 | ZwDeleteValueKey |
| 2144 | ZwDeleteWnfStateData |
| 2145 | ZwDeleteWnfStateName |
| 2146 | ZwDeviceIoControlFile |
| 2147 | ZwDisplayString |
| 2148 | ZwDuplicateObject |
| 2149 | ZwDuplicateToken |
| 2150 | ZwEnumerateBootEntries |
| 2151 | ZwEnumerateDriverEntries |
| 2152 | ZwEnumerateKey |
| 2153 | ZwEnumerateTransactionObject |
| 2154 | ZwEnumerateValueKey |
| 2155 | ZwFlushBuffersFile |
| 2156 | ZwFlushBuffersFileEx |
| 2157 | ZwFlushInstructionCache |
| 2158 | ZwFlushKey |
| 2159 | ZwFlushVirtualMemory |
| 2160 | ZwFreeVirtualMemory |
| 2161 | ZwFsControlFile |
| 2162 | ZwGetNotificationResourceManager |
| 2163 | ZwImpersonateAnonymousToken |
| 2164 | ZwInitiatePowerAction |
| 2165 | ZwIsProcessInJob |
| 2166 | ZwLoadDriver |
| 2167 | ZwLoadKey |
| 2168 | ZwLoadKeyEx |
| 2169 | ZwLockFile |
| 2170 | ZwLockProductActivationKeys |
| 2171 | ZwLockVirtualMemory |
| 2172 | ZwMakeTemporaryObject |
| 2173 | ZwMapViewOfSection |
| 2174 | ZwModifyBootEntry |
| 2175 | ZwModifyDriverEntry |
| 2176 | ZwNotifyChangeKey |
| 2177 | ZwNotifyChangeSession |
| 2178 | ZwOpenDirectoryObject |
| 2179 | ZwOpenEnlistment |
| 2180 | ZwOpenEvent |
| 2181 | ZwOpenFile |
| 2182 | ZwOpenJobObject |
| 2183 | ZwOpenKey |
| 2184 | ZwOpenKeyEx |
| 2185 | ZwOpenKeyTransacted |
| 2186 | ZwOpenKeyTransactedEx |
| 2187 | ZwOpenProcess |
| 2188 | ZwOpenProcessToken |
| 2189 | ZwOpenProcessTokenEx |
| 2190 | ZwOpenResourceManager |
| 2191 | ZwOpenSection |
| 2192 | ZwOpenSession |
| 2193 | ZwOpenSymbolicLinkObject |
| 2194 | ZwOpenThread |
| 2195 | ZwOpenThreadToken |
| 2196 | ZwOpenThreadTokenEx |
| 2197 | ZwOpenTimer |
| 2198 | ZwOpenTransaction |
| 2199 | ZwOpenTransactionManager |
| 2200 | ZwPowerInformation |
| 2201 | ZwPrePrepareComplete |
| 2202 | ZwPrePrepareEnlistment |
| 2203 | ZwPrepareComplete |
| 2204 | ZwPrepareEnlistment |
| 2205 | ZwPropagationComplete |
| 2206 | ZwPropagationFailed |
| 2207 | ZwProtectVirtualMemory |
| 2208 | ZwPulseEvent |
| 2209 | ZwQueryBootEntryOrder |
| 2210 | ZwQueryBootOptions |
| 2211 | ZwQueryDefaultLocale |
| 2212 | ZwQueryDefaultUILanguage |
| 2213 | ZwQueryDirectoryFile |
| 2214 | ZwQueryDirectoryObject |
| 2215 | ZwQueryDriverEntryOrder |
| 2216 | ZwQueryEaFile |
| 2217 | ZwQueryFullAttributesFile |
| 2218 | ZwQueryInformationEnlistment |
| 2219 | ZwQueryInformationFile |
| 2220 | ZwQueryInformationJobObject |
| 2221 | ZwQueryInformationProcess |
| 2222 | ZwQueryInformationResourceManager |
| 2223 | ZwQueryInformationThread |
| 2224 | ZwQueryInformationToken |
| 2225 | ZwQueryInformationTransaction |
| 2226 | ZwQueryInformationTransactionManager |
| 2227 | ZwQueryInstallUILanguage |
| 2228 | ZwQueryKey |
| 2229 | ZwQueryLicenseValue |
| 2230 | ZwQueryObject |
| 2231 | ZwQueryQuotaInformationFile |
| 2232 | ZwQuerySection |
| 2233 | ZwQuerySecurityAttributesToken |
| 2234 | ZwQuerySecurityObject |
| 2235 | ZwQuerySymbolicLinkObject |
| 2236 | ZwQuerySystemEnvironmentValueEx |
| 2237 | ZwQuerySystemInformation |
| 2238 | ZwQuerySystemInformationEx |
| 2239 | ZwQueryValueKey |
| 2240 | ZwQueryVirtualMemory |
| 2241 | ZwQueryVolumeInformationFile |
| 2242 | ZwQueryWnfStateData |
| 2243 | ZwQueryWnfStateNameInformation |
| 2244 | ZwReadFile |
| 2245 | ZwReadOnlyEnlistment |
| 2246 | ZwRecoverEnlistment |
| 2247 | ZwRecoverResourceManager |
| 2248 | ZwRecoverTransactionManager |
| 2249 | ZwRemoveIoCompletion |
| 2250 | ZwRemoveIoCompletionEx |
| 2251 | ZwRenameKey |
| 2252 | ZwReplaceKey |
| 2253 | ZwRequestPort |
| 2254 | ZwRequestWaitReplyPort |
| 2255 | ZwResetEvent |
| 2256 | ZwRestoreKey |
| 2257 | ZwRollbackComplete |
| 2258 | ZwRollbackEnlistment |
| 2259 | ZwRollbackTransaction |
| 2260 | ZwSaveKey |
| 2261 | ZwSaveKeyEx |
| 2262 | ZwSecureConnectPort |
| 2263 | ZwSetBootEntryOrder |
| 2264 | ZwSetBootOptions |
| 2265 | ZwSetCachedSigningLevel |
| 2266 | ZwSetDefaultLocale |
| 2267 | ZwSetDefaultUILanguage |
| 2268 | ZwSetDriverEntryOrder |
| 2269 | ZwSetEaFile |
| 2270 | ZwSetEvent |
| 2271 | ZwSetInformationEnlistment |
| 2272 | ZwSetInformationFile |
| 2273 | ZwSetInformationJobObject |
| 2274 | ZwSetInformationKey |
| 2275 | ZwSetInformationObject |
| 2276 | ZwSetInformationProcess |
| 2277 | ZwSetInformationResourceManager |
| 2278 | ZwSetInformationThread |
| 2279 | ZwSetInformationToken |
| 2280 | ZwSetInformationTransaction |
| 2281 | ZwSetInformationVirtualMemory |
| 2282 | ZwSetQuotaInformationFile |
| 2283 | ZwSetSecurityObject |
| 2284 | ZwSetSystemEnvironmentValueEx |
| 2285 | ZwSetSystemInformation |
| 2286 | ZwSetSystemTime |
| 2287 | ZwSetTimer |
| 2288 | ZwSetTimerEx |
| 2289 | ZwSetValueKey |
| 2290 | ZwSetVolumeInformationFile |
| 2291 | ZwTerminateJobObject |
| 2292 | ZwTerminateProcess |
| 2293 | ZwTraceEvent |
| 2294 | ZwTranslateFilePath |
| 2295 | ZwUnloadDriver |
| 2296 | ZwUnloadKey |
| 2297 | ZwUnloadKeyEx |
| 2298 | ZwUnlockFile |
| 2299 | ZwUnlockVirtualMemory |
| 2300 | ZwUnmapViewOfSection |
| 2301 | ZwUpdateWnfStateData |
| 2302 | ZwWaitForMultipleObjects |
| 2303 | ZwWaitForSingleObject |
| 2304 | ZwWriteFile |
| 2305 | ZwYieldExecution |
| 2306 | __C_specific_handler |
| 2307 | __chkstk |
| 2308 | __jump_unwind |
| 2309 | _i64toa_s |
| 2310 | _i64tow_s |
| 2311 | _itoa |
| 2312 | _itoa_s |
| 2313 | _itow |
| 2314 | _itow_s |
| 2315 | _ltoa_s |
| 2316 | _ltow_s |
| 2317 | _makepath_s |
| 2318 | _purecall |
| 2319 | _setjmp |
| 2320 | _setjmpex |
| 2321 | _snprintf |
| 2322 | _snprintf_s |
| 2323 | _snscanf_s |
| 2324 | _snwprintf |
| 2325 | _snwprintf_s |
| 2326 | _snwscanf_s |
| 2327 | _splitpath_s |
| 2328 | _stricmp |
| 2329 | _strlwr |
| 2330 | strlwr == _strlwr |
| 2331 | _strnicmp |
| 2332 | _strnset |
| 2333 | _strnset_s |
| 2334 | _strrev |
| 2335 | _strset |
| 2336 | _strset_s |
| 2337 | _strtoui64 |
| 2338 | _strupr |
| 2339 | _swprintf |
| 2340 | _ui64toa_s |
| 2341 | _ui64tow_s |
| 2342 | _ultoa_s |
| 2343 | _ultow_s |
| 2344 | _vsnprintf |
| 2345 | _vsnprintf_s |
| 2346 | _vsnwprintf |
| 2347 | _vsnwprintf_s |
| 2348 | _vswprintf |
| 2349 | _wcsicmp |
| 2350 | _wcslwr |
| 2351 | wcslwr == _wcslwr |
| 2352 | _wcsnicmp |
| 2353 | _wcsnset |
| 2354 | _wcsnset_s |
| 2355 | _wcsrev |
| 2356 | _wcsset_s |
| 2357 | _wcsupr |
| 2358 | _wmakepath_s |
| 2359 | _wsplitpath_s |
| 2360 | _wtoi |
| 2361 | _wtol |
| 2362 | atoi |
| 2363 | atol |
| 2364 | bsearch |
| 2365 | bsearch_s |
| 2366 | isdigit |
| 2367 | islower |
| 2368 | isprint |
| 2369 | isspace |
| 2370 | isupper |
| 2371 | isxdigit |
| 2372 | longjmp |
| 2373 | mbstowcs |
| 2374 | mbtowc |
| 2375 | memchr |
| 2376 | memcmp |
| 2377 | memcpy |
| 2378 | memcpy_s |
| 2379 | memmove |
| 2380 | memmove_s |
| 2381 | memset |
| 2382 | psMUITest DATA |
| 2383 | qsort |
| 2384 | rand |
| 2385 | sprintf |
| 2386 | sprintf_s |
| 2387 | srand |
| 2388 | sscanf_s |
| 2389 | strcat |
| 2390 | strcat_s |
| 2391 | strchr |
| 2392 | strcmp |
| 2393 | strcpy |
| 2394 | strcpy_s |
| 2395 | strlen |
| 2396 | strncat |
| 2397 | strncat_s |
| 2398 | strncmp |
| 2399 | strncpy |
| 2400 | strncpy_s |
| 2401 | strnlen |
| 2402 | strrchr |
| 2403 | strspn |
| 2404 | strstr |
| 2405 | strtok_s |
| 2406 | swprintf |
| 2407 | swprintf_s |
| 2408 | swscanf_s |
| 2409 | tolower |
| 2410 | toupper |
| 2411 | towlower |
| 2412 | towupper |
| 2413 | vDbgPrintEx |
| 2414 | vDbgPrintExWithPrefix |
| 2415 | vsprintf |
| 2416 | vsprintf_s |
| 2417 | vswprintf_s |
| 2418 | wcscat |
| 2419 | wcscat_s |
| 2420 | wcschr |
| 2421 | wcscmp |
| 2422 | wcscpy |
| 2423 | wcscpy_s |
| 2424 | wcscspn |
| 2425 | wcslen |
| 2426 | wcsncat |
| 2427 | wcsncat_s |
| 2428 | wcsncmp |
| 2429 | wcsncpy |
| 2430 | wcsncpy_s |
| 2431 | wcsnlen |
| 2432 | wcsrchr |
| 2433 | wcsspn |
| 2434 | wcsstr |
| 2435 | wcstombs |
| 2436 | wcstoul |
| 2437 | wctomb |