Windows APIs

win2kp_rtm Symbols in ntdll.dll

⇒

general DLL page

• CsrAllocateCaptureBuffer
• CsrAllocateMessagePointer
• CsrCaptureMessageBuffer
• CsrCaptureMessageString
• CsrCaptureTimeout
• CsrClientCallServer
• CsrClientConnectToServer
• CsrFreeCaptureBuffer
• CsrIdentifyAlertableThread
• CsrNewThread
• CsrProbeForRead
• CsrProbeForWrite
• CsrSetPriorityClass
• DbgBreakPoint
• DbgPrint
• DbgPrintReturnControlC
• DbgPrompt
• DbgSsHandleKmApiMsg
• DbgSsInitialize
• DbgUiConnectToDbg
• DbgUiContinue
• DbgUiWaitStateChange
• DbgUserBreakPoint
• KiRaiseUserExceptionDispatcher
• KiUserApcDispatcher
• KiUserCallbackDispatcher
• KiUserExceptionDispatcher
• LdrAccessResource
• LdrAlternateResourcesEnabled
• LdrDisableThreadCalloutsForDll
• LdrEnumResources
• LdrFindEntryForAddress
• LdrFindResourceDirectory_U
• LdrFindResource_U
• LdrFlushAlternateResourceModules
• LdrGetDllHandle
• LdrGetProcedureAddress
• LdrInitializeThunk
• LdrLoadAlternateResourceModule
• LdrLoadDll
• LdrProcessRelocationBlock
• LdrQueryImageFileExecutionOptions
• LdrQueryProcessModuleInformation
• LdrShutdownProcess
• LdrShutdownThread
• LdrUnloadAlternateResourceModule
• LdrUnloadDll
• LdrVerifyImageMatchesChecksum
• NPXEMULATORTABLE
• NlsAnsiCodePage
• NlsMbCodePageTag
• NlsMbOemCodePageTag
• NtAcceptConnectPort
• NtAccessCheck
• NtAccessCheckAndAuditAlarm
• NtAccessCheckByType
• NtAccessCheckByTypeAndAuditAlarm
• NtAccessCheckByTypeResultList
• NtAccessCheckByTypeResultListAndAuditAlarm
• NtAccessCheckByTypeResultListAndAuditAlarmByHandle
• NtAddAtom
• NtAdjustGroupsToken
• NtAdjustPrivilegesToken
• NtAlertResumeThread
• NtAlertThread
• NtAllocateLocallyUniqueId
• NtAllocateUserPhysicalPages
• NtAllocateUuids
• NtAllocateVirtualMemory
• NtAreMappedFilesTheSame
• NtAssignProcessToJobObject
• NtCallbackReturn
• NtCancelDeviceWakeupRequest
• NtCancelIoFile
• NtCancelTimer
• NtClearEvent
• NtClose
• NtCloseObjectAuditAlarm
• NtCompleteConnectPort
• NtConnectPort
• NtContinue
• NtCreateChannel
• NtCreateDirectoryObject
• NtCreateEvent
• NtCreateEventPair
• NtCreateFile
• NtCreateIoCompletion
• NtCreateJobObject
• NtCreateKey
• NtCreateMailslotFile
• NtCreateMutant
• NtCreateNamedPipeFile
• NtCreatePagingFile
• NtCreatePort
• NtCreateProcess
• NtCreateProfile
• NtCreateSection
• NtCreateSemaphore
• NtCreateSymbolicLinkObject
• NtCreateThread
• NtCreateTimer
• NtCreateToken
• NtCreateWaitablePort
• NtCurrentTeb
• NtDelayExecution
• NtDeleteAtom
• NtDeleteFile
• NtDeleteKey
• NtDeleteObjectAuditAlarm
• NtDeleteValueKey
• NtDeviceIoControlFile
• NtDisplayString
• NtDuplicateObject
• NtDuplicateToken
• NtEnumerateKey
• NtEnumerateValueKey
• NtExtendSection
• NtFilterToken
• NtFindAtom
• NtFlushBuffersFile
• NtFlushInstructionCache
• NtFlushKey
• NtFlushVirtualMemory
• NtFlushWriteBuffer
• NtFreeUserPhysicalPages
• NtFreeVirtualMemory
• NtFsControlFile
• NtGetContextThread
• NtGetDevicePowerState
• NtGetPlugPlayEvent
• NtGetTickCount
• NtGetWriteWatch
• NtImpersonateAnonymousToken
• NtImpersonateClientOfPort
• NtImpersonateThread
• NtInitializeRegistry
• NtInitiatePowerAction
• NtIsSystemResumeAutomatic
• NtListenChannel
• NtListenPort
• NtLoadDriver
• NtLoadKey
• NtLoadKey2
• NtLockFile
• NtLockVirtualMemory
• NtMakeTemporaryObject
• NtMapUserPhysicalPages
• NtMapUserPhysicalPagesScatter
• NtMapViewOfSection
• NtNotifyChangeDirectoryFile
• NtNotifyChangeKey
• NtNotifyChangeMultipleKeys
• NtOpenChannel
• NtOpenDirectoryObject
• NtOpenEvent
• NtOpenEventPair
• NtOpenFile
• NtOpenIoCompletion
• NtOpenJobObject
• NtOpenKey
• NtOpenMutant
• NtOpenObjectAuditAlarm
• NtOpenProcess
• NtOpenProcessToken
• NtOpenSection
• NtOpenSemaphore
• NtOpenSymbolicLinkObject
• NtOpenThread
• NtOpenThreadToken
• NtOpenTimer
• NtPlugPlayControl
• NtPowerInformation
• NtPrivilegeCheck
• NtPrivilegeObjectAuditAlarm
• NtPrivilegedServiceAuditAlarm
• NtProtectVirtualMemory
• NtPulseEvent
• NtQueryAttributesFile
• NtQueryDefaultLocale
• NtQueryDefaultUILanguage
• NtQueryDirectoryFile
• NtQueryDirectoryObject
• NtQueryEaFile
• NtQueryEvent
• NtQueryFullAttributesFile
• NtQueryInformationAtom
• NtQueryInformationFile
• NtQueryInformationJobObject
• NtQueryInformationPort
• NtQueryInformationProcess
• NtQueryInformationThread
• NtQueryInformationToken
• NtQueryInstallUILanguage
• NtQueryIntervalProfile
• NtQueryIoCompletion
• NtQueryKey
• NtQueryMultipleValueKey
• NtQueryMutant
• NtQueryObject
• NtQueryOpenSubKeys
• NtQueryPerformanceCounter
• NtQueryQuotaInformationFile
• NtQuerySection
• NtQuerySecurityObject
• NtQuerySemaphore
• NtQuerySymbolicLinkObject
• NtQuerySystemEnvironmentValue
• NtQuerySystemInformation
• NtQuerySystemTime
• NtQueryTimer
• NtQueryTimerResolution
• NtQueryValueKey
• NtQueryVirtualMemory
• NtQueryVolumeInformationFile
• NtQueueApcThread
• NtRaiseException
• NtRaiseHardError
• NtReadFile
• NtReadFileScatter
• NtReadRequestData
• NtReadVirtualMemory
• NtRegisterThreadTerminatePort
• NtReleaseMutant
• NtReleaseSemaphore
• NtRemoveIoCompletion
• NtReplaceKey
• NtReplyPort
• NtReplyWaitReceivePort
• NtReplyWaitReceivePortEx
• NtReplyWaitReplyPort
• NtReplyWaitSendChannel
• NtRequestDeviceWakeup
• NtRequestPort
• NtRequestWaitReplyPort
• NtRequestWakeupLatency
• NtResetEvent
• NtResetWriteWatch
• NtRestoreKey
• NtResumeThread
• NtSaveKey
• NtSaveMergedKeys
• NtSecureConnectPort
• NtSendWaitReplyChannel
• NtSetContextChannel
• NtSetContextThread
• NtSetDefaultHardErrorPort
• NtSetDefaultLocale
• NtSetDefaultUILanguage
• NtSetEaFile
• NtSetEvent
• NtSetHighEventPair
• NtSetHighWaitLowEventPair
• NtSetInformationFile
• NtSetInformationJobObject
• NtSetInformationKey
• NtSetInformationObject
• NtSetInformationProcess
• NtSetInformationThread
• NtSetInformationToken
• NtSetIntervalProfile
• NtSetIoCompletion
• NtSetLdtEntries
• NtSetLowEventPair
• NtSetLowWaitHighEventPair
• NtSetQuotaInformationFile
• NtSetSecurityObject
• NtSetSystemEnvironmentValue
• NtSetSystemInformation
• NtSetSystemPowerState
• NtSetSystemTime
• NtSetThreadExecutionState
• NtSetTimer
• NtSetTimerResolution
• NtSetUuidSeed
• NtSetValueKey
• NtSetVolumeInformationFile
• NtShutdownSystem
• NtSignalAndWaitForSingleObject
• NtStartProfile
• NtStopProfile
• NtSuspendThread
• NtSystemDebugControl
• NtTerminateJobObject
• NtTerminateProcess
• NtTerminateThread
• NtTestAlert
• NtUnloadDriver
• NtUnloadKey
• NtUnlockFile
• NtUnlockVirtualMemory
• NtUnmapViewOfSection
• NtVdmControl
• NtWaitForMultipleObjects
• NtWaitForSingleObject
• NtWaitHighEventPair
• NtWaitLowEventPair
• NtWriteFile
• NtWriteFileGather
• NtWriteRequestData
• NtWriteVirtualMemory
• NtYieldExecution
• PfxFindPrefix
• PfxInitialize
• PfxInsertPrefix
• PfxRemovePrefix
• PropertyLengthAsVariant
• RestoreEm87Context
• RtlAbortRXact
• RtlAbsoluteToSelfRelativeSD
• RtlAcquirePebLock
• RtlAcquireResourceExclusive
• RtlAcquireResourceShared
• RtlAddAccessAllowedAce
• RtlAddAccessAllowedAceEx
• RtlAddAccessAllowedObjectAce
• RtlAddAccessDeniedAce
• RtlAddAccessDeniedAceEx
• RtlAddAccessDeniedObjectAce
• RtlAddAce
• RtlAddActionToRXact
• RtlAddAtomToAtomTable
• RtlAddAttributeActionToRXact
• RtlAddAuditAccessAce
• RtlAddAuditAccessAceEx
• RtlAddAuditAccessObjectAce
• RtlAddCompoundAce
• RtlAddRange
• RtlAdjustPrivilege
• RtlAllocateAndInitializeSid
• RtlAllocateHandle
• RtlAllocateHeap
• RtlAnsiCharToUnicodeChar
• RtlAnsiStringToUnicodeSize
• RtlAnsiStringToUnicodeString
• RtlAppendAsciizToString
• RtlAppendStringToString
• RtlAppendUnicodeStringToString
• RtlAppendUnicodeToString
• RtlApplyRXact
• RtlApplyRXactNoFlush
• RtlAreAllAccessesGranted
• RtlAreAnyAccessesGranted
• RtlAreBitsClear
• RtlAreBitsSet
• RtlAssert
• RtlCallbackLpcClient
• RtlCancelTimer
• RtlCaptureStackBackTrace
• RtlCharToInteger
• RtlCheckForOrphanedCriticalSections
• RtlCheckRegistryKey
• RtlClearAllBits
• RtlClearBits
• RtlCompactHeap
• RtlCompareMemory
• RtlCompareMemoryUlong
• RtlCompareString
• RtlCompareUnicodeString
• RtlCompressBuffer
• RtlConsoleMultiByteToUnicodeN
• RtlConvertExclusiveToShared
• RtlConvertLongToLargeInteger
• RtlConvertPropertyToVariant
• RtlConvertSharedToExclusive
• RtlConvertSidToUnicodeString
• RtlConvertToAutoInheritSecurityObject
• RtlConvertUiListToApiList
• RtlConvertUlongToLargeInteger
• RtlConvertVariantToProperty
• RtlCopyLuid
• RtlCopyLuidAndAttributesArray
• RtlCopyRangeList
• RtlCopySecurityDescriptor
• RtlCopySid
• RtlCopySidAndAttributesArray
• RtlCopyString
• RtlCopyUnicodeString
• RtlCreateAcl
• RtlCreateAndSetSD
• RtlCreateAtomTable
• RtlCreateEnvironment
• RtlCreateHeap
• RtlCreateLpcServer
• RtlCreateProcessParameters
• RtlCreateQueryDebugBuffer
• RtlCreateRegistryKey
• RtlCreateSecurityDescriptor
• RtlCreateTagHeap
• RtlCreateTimer
• RtlCreateTimerQueue
• RtlCreateUnicodeString
• RtlCreateUnicodeStringFromAsciiz
• RtlCreateUserProcess
• RtlCreateUserSecurityObject
• RtlCreateUserThread
• RtlCustomCPToUnicodeN
• RtlCutoverTimeToSystemTime
• RtlDeNormalizeProcessParams
• RtlDebugPrintTimes
• RtlDecompressBuffer
• RtlDecompressFragment
• RtlDefaultNpAcl
• RtlDelete
• RtlDeleteAce
• RtlDeleteAtomFromAtomTable
• RtlDeleteCriticalSection
• RtlDeleteElementGenericTable
• RtlDeleteNoSplay
• RtlDeleteOwnersRanges
• RtlDeleteRange
• RtlDeleteRegistryValue
• RtlDeleteResource
• RtlDeleteSecurityObject
• RtlDeleteTimer
• RtlDeleteTimerQueue
• RtlDeleteTimerQueueEx
• RtlDeregisterWait
• RtlDeregisterWaitEx
• RtlDestroyAtomTable
• RtlDestroyEnvironment
• RtlDestroyHandleTable
• RtlDestroyHeap
• RtlDestroyProcessParameters
• RtlDestroyQueryDebugBuffer
• RtlDetermineDosPathNameType_U
• RtlDnsHostNameToComputerName
• RtlDoesFileExists_U
• RtlDosPathNameToNtPathName_U
• RtlDosSearchPath_U
• RtlDowncaseUnicodeString
• RtlDumpResource
• RtlEmptyAtomTable
• RtlEnableEarlyCriticalSectionEventCreation
• RtlEnlargedIntegerMultiply
• RtlEnlargedUnsignedDivide
• RtlEnlargedUnsignedMultiply
• RtlEnterCriticalSection
• RtlEnumProcessHeaps
• RtlEnumerateGenericTable
• RtlEnumerateGenericTableWithoutSplaying
• RtlEqualComputerName
• RtlEqualDomainName
• RtlEqualLuid
• RtlEqualPrefixSid
• RtlEqualSid
• RtlEqualString
• RtlEqualUnicodeString
• RtlEraseUnicodeString
• RtlExpandEnvironmentStrings_U
• RtlExtendHeap
• RtlExtendedIntegerMultiply
• RtlExtendedLargeIntegerDivide
• RtlExtendedMagicDivide
• RtlFillMemory
• RtlFillMemoryUlong
• RtlFindClearBits
• RtlFindClearBitsAndSet
• RtlFindLastBackwardRunClear
• RtlFindLeastSignificantBit
• RtlFindLongestRunClear
• RtlFindMessage
• RtlFindMostSignificantBit
• RtlFindNextForwardRunClear
• RtlFindRange
• RtlFindSetBits
• RtlFindSetBitsAndClear
• RtlFirstFreeAce
• RtlFormatCurrentUserKeyPath
• RtlFormatMessage
• RtlFreeAnsiString
• RtlFreeHandle
• RtlFreeHeap
• RtlFreeOemString
• RtlFreeRangeList
• RtlFreeSid
• RtlFreeUnicodeString
• RtlFreeUserThreadStack
• RtlGUIDFromString
• RtlGenerate8dot3Name
• RtlGetAce
• RtlGetCallersAddress
• RtlGetCompressionWorkSpaceSize
• RtlGetControlSecurityDescriptor
• RtlGetCurrentDirectory_U
• RtlGetDaclSecurityDescriptor
• RtlGetElementGenericTable
• RtlGetFirstRange
• RtlGetFullPathName_U
• RtlGetGroupSecurityDescriptor
• RtlGetLongestNtPathLength
• RtlGetNextRange
• RtlGetNtGlobalFlags
• RtlGetNtProductType
• RtlGetOwnerSecurityDescriptor
• RtlGetProcessHeaps
• RtlGetSaclSecurityDescriptor
• RtlGetSecurityDescriptorRMControl
• RtlGetUserInfoHeap
• RtlGetVersion
• RtlIdentifierAuthoritySid
• RtlImageDirectoryEntryToData
• RtlImageNtHeader
• RtlImageRvaToSection
• RtlImageRvaToVa
• RtlImpersonateLpcClient
• RtlImpersonateSelf
• RtlInitAnsiString
• RtlInitCodePageTable
• RtlInitNlsTables
• RtlInitString
• RtlInitUnicodeString
• RtlInitializeAtomPackage
• RtlInitializeBitMap
• RtlInitializeContext
• RtlInitializeCriticalSection
• RtlInitializeCriticalSectionAndSpinCount
• RtlInitializeGenericTable
• RtlInitializeHandleTable
• RtlInitializeRXact
• RtlInitializeRangeList
• RtlInitializeResource
• RtlInitializeSid
• RtlInsertElementGenericTable
• RtlInt64ToUnicodeString
• RtlIntegerToChar
• RtlIntegerToUnicodeString
• RtlInvertRangeList
• RtlIsDosDeviceName_U
• RtlIsGenericTableEmpty
• RtlIsNameLegalDOS8Dot3
• RtlIsRangeAvailable
• RtlIsTextUnicode
• RtlIsValidHandle
• RtlIsValidIndexHandle
• RtlLargeIntegerAdd
• RtlLargeIntegerArithmeticShift
• RtlLargeIntegerDivide
• RtlLargeIntegerNegate
• RtlLargeIntegerShiftLeft
• RtlLargeIntegerShiftRight
• RtlLargeIntegerSubtract
• RtlLargeIntegerToChar
• RtlLeaveCriticalSection
• RtlLengthRequiredSid
• RtlLengthSecurityDescriptor
• RtlLengthSid
• RtlLocalTimeToSystemTime
• RtlLockHeap
• RtlLookupAtomInAtomTable
• RtlLookupElementGenericTable
• RtlMakeSelfRelativeSD
• RtlMapGenericMask
• RtlMergeRangeLists
• RtlMoveMemory
• RtlMultiByteToUnicodeN
• RtlMultiByteToUnicodeSize
• RtlNewInstanceSecurityObject
• RtlNewSecurityGrantedAccess
• RtlNewSecurityObject
• RtlNewSecurityObjectEx
• RtlNormalizeProcessParams
• RtlNtStatusToDosError
• RtlNumberGenericTableElements
• RtlNumberOfClearBits
• RtlNumberOfSetBits
• RtlOemStringToUnicodeSize
• RtlOemStringToUnicodeString
• RtlOemToUnicodeN
• RtlOpenCurrentUser
• RtlPcToFileHeader
• RtlPinAtomInAtomTable
• RtlPrefixString
• RtlPrefixUnicodeString
• RtlProtectHeap
• RtlQueryAtomInAtomTable
• RtlQueryEnvironmentVariable_U
• RtlQueryInformationAcl
• RtlQueryProcessBackTraceInformation
• RtlQueryProcessDebugInformation
• RtlQueryProcessHeapInformation
• RtlQueryProcessLockInformation
• RtlQueryRegistryValues
• RtlQuerySecurityObject
• RtlQueryTagHeap
• RtlQueryTimeZoneInformation
• RtlQueueWorkItem
• RtlRaiseException
• RtlRaiseStatus
• RtlRandom
• RtlReAllocateHeap
• RtlRealPredecessor
• RtlRealSuccessor
• RtlRegisterWait
• RtlReleasePebLock
• RtlReleaseResource
• RtlRemoteCall
• RtlResetRtlTranslations
• RtlRunDecodeUnicodeString
• RtlRunEncodeUnicodeString
• RtlSecondsSince1970ToTime
• RtlSecondsSince1980ToTime
• RtlSelfRelativeToAbsoluteSD
• RtlSelfRelativeToAbsoluteSD2
• RtlSetAllBits
• RtlSetAttributesSecurityDescriptor
• RtlSetBits
• RtlSetControlSecurityDescriptor
• RtlSetCriticalSectionSpinCount
• RtlSetCurrentDirectory_U
• RtlSetCurrentEnvironment
• RtlSetDaclSecurityDescriptor
• RtlSetEnvironmentVariable
• RtlSetGroupSecurityDescriptor
• RtlSetInformationAcl
• RtlSetIoCompletionCallback
• RtlSetOwnerSecurityDescriptor
• RtlSetSaclSecurityDescriptor
• RtlSetSecurityDescriptorRMControl
• RtlSetSecurityObject
• RtlSetSecurityObjectEx
• RtlSetThreadPoolStartFunc
• RtlSetTimeZoneInformation
• RtlSetTimer
• RtlSetUnicodeCallouts
• RtlSetUserFlagsHeap
• RtlSetUserValueHeap
• RtlShutdownLpcServer
• RtlSizeHeap
• RtlSplay
• RtlStartRXact
• RtlStringFromGUID
• RtlSubAuthorityCountSid
• RtlSubAuthoritySid
• RtlSubtreePredecessor
• RtlSubtreeSuccessor
• RtlSystemTimeToLocalTime
• RtlTimeFieldsToTime
• RtlTimeToElapsedTimeFields
• RtlTimeToSecondsSince1970
• RtlTimeToSecondsSince1980
• RtlTimeToTimeFields
• RtlTryEnterCriticalSection
• RtlUlongByteSwap
• RtlUlonglongByteSwap
• RtlUnicodeStringToAnsiSize
• RtlUnicodeStringToAnsiString
• RtlUnicodeStringToCountedOemString
• RtlUnicodeStringToInteger
• RtlUnicodeStringToOemSize
• RtlUnicodeStringToOemString
• RtlUnicodeToCustomCPN
• RtlUnicodeToMultiByteN
• RtlUnicodeToMultiByteSize
• RtlUnicodeToOemN
• RtlUniform
• RtlUnlockHeap
• RtlUnwind
• RtlUpcaseUnicodeChar
• RtlUpcaseUnicodeString
• RtlUpcaseUnicodeStringToAnsiString
• RtlUpcaseUnicodeStringToCountedOemString
• RtlUpcaseUnicodeStringToOemString
• RtlUpcaseUnicodeToCustomCPN
• RtlUpcaseUnicodeToMultiByteN
• RtlUpcaseUnicodeToOemN
• RtlUpdateTimer
• RtlUpperChar
• RtlUpperString
• RtlUsageHeap
• RtlUshortByteSwap
• RtlValidAcl
• RtlValidRelativeSecurityDescriptor
• RtlValidSecurityDescriptor
• RtlValidSid
• RtlValidateHeap
• RtlValidateProcessHeaps
• RtlVerifyVersionInfo
• RtlWalkFrameChain
• RtlWalkHeap
• RtlWriteRegistryValue
• RtlZeroHeap
• RtlZeroMemory
• RtlpNtCreateKey
• RtlpNtEnumerateSubKey
• RtlpNtMakeTemporaryKey
• RtlpNtOpenKey
• RtlpNtQueryValueKey
• RtlpNtSetValueKey
• RtlpUnWaitCriticalSection
• RtlpWaitForCriticalSection
• RtlxAnsiStringToUnicodeSize
• RtlxOemStringToUnicodeSize
• RtlxUnicodeStringToAnsiSize
• RtlxUnicodeStringToOemSize
• SaveEm87Context
• VerSetConditionMask
• ZwAcceptConnectPort
• ZwAccessCheck
• ZwAccessCheckAndAuditAlarm
• ZwAccessCheckByType
• ZwAccessCheckByTypeAndAuditAlarm
• ZwAccessCheckByTypeResultList
• ZwAccessCheckByTypeResultListAndAuditAlarm
• ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
• ZwAddAtom
• ZwAdjustGroupsToken
• ZwAdjustPrivilegesToken
• ZwAlertResumeThread
• ZwAlertThread
• ZwAllocateLocallyUniqueId
• ZwAllocateUserPhysicalPages
• ZwAllocateUuids
• ZwAllocateVirtualMemory
• ZwAreMappedFilesTheSame
• ZwAssignProcessToJobObject
• ZwCallbackReturn
• ZwCancelDeviceWakeupRequest
• ZwCancelIoFile
• ZwCancelTimer
• ZwClearEvent
• ZwClose
• ZwCloseObjectAuditAlarm
• ZwCompleteConnectPort
• ZwConnectPort
• ZwContinue
• ZwCreateChannel
• ZwCreateDirectoryObject
• ZwCreateEvent
• ZwCreateEventPair
• ZwCreateFile
• ZwCreateIoCompletion
• ZwCreateJobObject
• ZwCreateKey
• ZwCreateMailslotFile
• ZwCreateMutant
• ZwCreateNamedPipeFile
• ZwCreatePagingFile
• ZwCreatePort
• ZwCreateProcess
• ZwCreateProfile
• ZwCreateSection
• ZwCreateSemaphore
• ZwCreateSymbolicLinkObject
• ZwCreateThread
• ZwCreateTimer
• ZwCreateToken
• ZwCreateWaitablePort
• ZwDelayExecution
• ZwDeleteAtom
• ZwDeleteFile
• ZwDeleteKey
• ZwDeleteObjectAuditAlarm
• ZwDeleteValueKey
• ZwDeviceIoControlFile
• ZwDisplayString
• ZwDuplicateObject
• ZwDuplicateToken
• ZwEnumerateKey
• ZwEnumerateValueKey
• ZwExtendSection
• ZwFilterToken
• ZwFindAtom
• ZwFlushBuffersFile
• ZwFlushInstructionCache
• ZwFlushKey
• ZwFlushVirtualMemory
• ZwFlushWriteBuffer
• ZwFreeUserPhysicalPages
• ZwFreeVirtualMemory
• ZwFsControlFile
• ZwGetContextThread
• ZwGetDevicePowerState
• ZwGetPlugPlayEvent
• ZwGetTickCount
• ZwGetWriteWatch
• ZwImpersonateAnonymousToken
• ZwImpersonateClientOfPort
• ZwImpersonateThread
• ZwInitializeRegistry
• ZwInitiatePowerAction
• ZwIsSystemResumeAutomatic
• ZwListenChannel
• ZwListenPort
• ZwLoadDriver
• ZwLoadKey
• ZwLoadKey2
• ZwLockFile
• ZwLockVirtualMemory
• ZwMakeTemporaryObject
• ZwMapUserPhysicalPages
• ZwMapUserPhysicalPagesScatter
• ZwMapViewOfSection
• ZwNotifyChangeDirectoryFile
• ZwNotifyChangeKey
• ZwNotifyChangeMultipleKeys
• ZwOpenChannel
• ZwOpenDirectoryObject
• ZwOpenEvent
• ZwOpenEventPair
• ZwOpenFile
• ZwOpenIoCompletion
• ZwOpenJobObject
• ZwOpenKey
• ZwOpenMutant
• ZwOpenObjectAuditAlarm
• ZwOpenProcess
• ZwOpenProcessToken
• ZwOpenSection
• ZwOpenSemaphore
• ZwOpenSymbolicLinkObject
• ZwOpenThread
• ZwOpenThreadToken
• ZwOpenTimer
• ZwPlugPlayControl
• ZwPowerInformation
• ZwPrivilegeCheck
• ZwPrivilegeObjectAuditAlarm
• ZwPrivilegedServiceAuditAlarm
• ZwProtectVirtualMemory
• ZwPulseEvent
• ZwQueryAttributesFile
• ZwQueryDefaultLocale
• ZwQueryDefaultUILanguage
• ZwQueryDirectoryFile
• ZwQueryDirectoryObject
• ZwQueryEaFile
• ZwQueryEvent
• ZwQueryFullAttributesFile
• ZwQueryInformationAtom
• ZwQueryInformationFile
• ZwQueryInformationJobObject
• ZwQueryInformationPort
• ZwQueryInformationProcess
• ZwQueryInformationThread
• ZwQueryInformationToken
• ZwQueryInstallUILanguage
• ZwQueryIntervalProfile
• ZwQueryIoCompletion
• ZwQueryKey
• ZwQueryMultipleValueKey
• ZwQueryMutant
• ZwQueryObject
• ZwQueryOpenSubKeys
• ZwQueryPerformanceCounter
• ZwQueryQuotaInformationFile
• ZwQuerySection
• ZwQuerySecurityObject
• ZwQuerySemaphore
• ZwQuerySymbolicLinkObject
• ZwQuerySystemEnvironmentValue
• ZwQuerySystemInformation
• ZwQuerySystemTime
• ZwQueryTimer
• ZwQueryTimerResolution
• ZwQueryValueKey
• ZwQueryVirtualMemory
• ZwQueryVolumeInformationFile
• ZwQueueApcThread
• ZwRaiseException
• ZwRaiseHardError
• ZwReadFile
• ZwReadFileScatter
• ZwReadRequestData
• ZwReadVirtualMemory
• ZwRegisterThreadTerminatePort
• ZwReleaseMutant
• ZwReleaseSemaphore
• ZwRemoveIoCompletion
• ZwReplaceKey
• ZwReplyPort
• ZwReplyWaitReceivePort
• ZwReplyWaitReceivePortEx
• ZwReplyWaitReplyPort
• ZwReplyWaitSendChannel
• ZwRequestDeviceWakeup
• ZwRequestPort
• ZwRequestWaitReplyPort
• ZwRequestWakeupLatency
• ZwResetEvent
• ZwResetWriteWatch
• ZwRestoreKey
• ZwResumeThread
• ZwSaveKey
• ZwSaveMergedKeys
• ZwSecureConnectPort
• ZwSendWaitReplyChannel
• ZwSetContextChannel
• ZwSetContextThread
• ZwSetDefaultHardErrorPort
• ZwSetDefaultLocale
• ZwSetDefaultUILanguage
• ZwSetEaFile
• ZwSetEvent
• ZwSetHighEventPair
• ZwSetHighWaitLowEventPair
• ZwSetInformationFile
• ZwSetInformationJobObject
• ZwSetInformationKey
• ZwSetInformationObject
• ZwSetInformationProcess
• ZwSetInformationThread
• ZwSetInformationToken
• ZwSetIntervalProfile
• ZwSetIoCompletion
• ZwSetLdtEntries
• ZwSetLowEventPair
• ZwSetLowWaitHighEventPair
• ZwSetQuotaInformationFile
• ZwSetSecurityObject
• ZwSetSystemEnvironmentValue
• ZwSetSystemInformation
• ZwSetSystemPowerState
• ZwSetSystemTime
• ZwSetThreadExecutionState
• ZwSetTimer
• ZwSetTimerResolution
• ZwSetUuidSeed
• ZwSetValueKey
• ZwSetVolumeInformationFile
• ZwShutdownSystem
• ZwSignalAndWaitForSingleObject
• ZwStartProfile
• ZwStopProfile
• ZwSuspendThread
• ZwSystemDebugControl
• ZwTerminateJobObject
• ZwTerminateProcess
• ZwTerminateThread
• ZwTestAlert
• ZwUnloadDriver
• ZwUnloadKey
• ZwUnlockFile
• ZwUnlockVirtualMemory
• ZwUnmapViewOfSection
• ZwVdmControl
• ZwWaitForMultipleObjects
• ZwWaitForSingleObject
• ZwWaitHighEventPair
• ZwWaitLowEventPair
• ZwWriteFile
• ZwWriteFileGather
• ZwWriteRequestData
• ZwWriteVirtualMemory
• ZwYieldExecution
• _CIpow
• __eCommonExceptions
• __eEmulatorInit
• __eF2XM1
• __eFABS
• __eFADD32
• __eFADD64
• __eFADDPreg
• __eFADDreg
• __eFADDtop
• __eFCHS
• __eFCOM
• __eFCOM32
• __eFCOM64
• __eFCOMP
• __eFCOMP32
• __eFCOMP64
• __eFCOMPP
• __eFCOS
• __eFDECSTP
• __eFDIV32
• __eFDIV64
• __eFDIVPreg
• __eFDIVR32
• __eFDIVR64
• __eFDIVRPreg
• __eFDIVRreg
• __eFDIVRtop
• __eFDIVreg
• __eFDIVtop
• __eFFREE
• __eFIADD16
• __eFIADD32
• __eFICOM16
• __eFICOM32
• __eFICOMP16
• __eFICOMP32
• __eFIDIV16
• __eFIDIV32
• __eFIDIVR16
• __eFIDIVR32
• __eFILD16
• __eFILD32
• __eFILD64
• __eFIMUL16
• __eFIMUL32
• __eFINCSTP
• __eFINIT
• __eFIST16
• __eFIST32
• __eFISTP16
• __eFISTP32
• __eFISTP64
• __eFISUB16
• __eFISUB32
• __eFISUBR16
• __eFISUBR32
• __eFLD1
• __eFLD32
• __eFLD64
• __eFLD80
• __eFLDCW
• __eFLDENV
• __eFLDL2E
• __eFLDLN2
• __eFLDPI
• __eFLDZ
• __eFMUL32
• __eFMUL64
• __eFMULPreg
• __eFMULreg
• __eFMULtop
• __eFPATAN
• __eFPREM
• __eFPREM1
• __eFPTAN
• __eFRNDINT
• __eFRSTOR
• __eFSAVE
• __eFSCALE
• __eFSIN
• __eFSQRT
• __eFST
• __eFST32
• __eFST64
• __eFSTCW
• __eFSTENV
• __eFSTP
• __eFSTP32
• __eFSTP64
• __eFSTP80
• __eFSTSW
• __eFSUB32
• __eFSUB64
• __eFSUBPreg
• __eFSUBR32
• __eFSUBR64
• __eFSUBRPreg
• __eFSUBRreg
• __eFSUBRtop
• __eFSUBreg
• __eFSUBtop
• __eFTST
• __eFUCOM
• __eFUCOMP
• __eFUCOMPP
• __eFXAM
• __eFXCH
• __eFXTRACT
• __eFYL2X
• __eFYL2XP1
• __eGetStatusWord
• __isascii
• __iscsym
• __iscsymf
• __toascii
• _alldiv
• _allmul
• _alloca_probe
• _allrem
• _allshl
• _allshr
• _atoi64
• _aulldiv
• _aullrem
• _aullshr
• _chkstk
• _fltused
• _ftol
• _i64toa
• _i64tow
• _itoa
• _itow
• _ltoa
• _ltow
• _memccpy
• _memicmp
• _snprintf
• _snwprintf
• _splitpath
• _strcmpi
• _stricmp
• _strlwr
• _strnicmp
• _strupr
• _tolower
• _toupper
• _ui64toa
• _ultoa
• _ultow
• _vsnprintf
• _wcsicmp
• _wcslwr
• _wcsnicmp
• _wcsupr
• _wtoi
• _wtoi64
• _wtol
• abs
• atan
• atoi
• atol
• ceil
• cos
• fabs
• floor
• isalnum
• isalpha
• iscntrl
• isdigit
• isgraph
• islower
• isprint
• ispunct
• isspace
• isupper
• iswalpha
• iswctype
• iswdigit
• iswlower
• iswspace
• iswxdigit
• isxdigit
• labs
• log
• mbstowcs
• memchr
• memcmp
• memcpy
• memmove
• memset
• pow
• qsort
• sin
• sprintf
• sqrt
• sscanf
• strcat
• strchr
• strcmp
• strcpy
• strcspn
• strlen
• strncat
• strncmp
• strncpy
• strpbrk
• strrchr
• strspn
• strstr
• strtol
• strtoul
• swprintf
• tan
• tolower
• toupper
• towlower
• towupper
• vsprintf
• wcscat
• wcschr
• wcscmp
• wcscpy
• wcscspn
• wcslen
• wcsncat
• wcsncmp
• wcsncpy
• wcspbrk
• wcsrchr
• wcsspn
• wcsstr
• wcstol
• wcstombs
• wcstoul