Windows APIs

win2kp_rtm Symbols in ntoskrnl.exe

⇒

general DLL page

• CcCanIWrite
• CcCopyRead
• CcCopyWrite
• CcDeferWrite
• CcFastCopyRead
• CcFastCopyWrite
• CcFastMdlReadWait
• CcFastReadNotPossible
• CcFastReadWait
• CcFlushCache
• CcGetDirtyPages
• CcGetFileObjectFromBcb
• CcGetFileObjectFromSectionPtrs
• CcGetFlushedValidData
• CcGetLsnForFileObject
• CcInitializeCacheMap
• CcIsThereDirtyData
• CcMapData
• CcMdlRead
• CcMdlReadComplete
• CcMdlWriteComplete
• CcPinMappedData
• CcPinRead
• CcPrepareMdlWrite
• CcPreparePinWrite
• CcPurgeCacheSection
• CcRemapBcb
• CcRepinBcb
• CcScheduleReadAhead
• CcSetAdditionalCacheAttributes
• CcSetBcbOwnerPointer
• CcSetDirtyPageThreshold
• CcSetDirtyPinnedData
• CcSetFileSizes
• CcSetLogHandleForFile
• CcSetReadAheadGranularity
• CcUninitializeCacheMap
• CcUnpinData
• CcUnpinDataForThread
• CcUnpinRepinnedBcb
• CcWaitForCurrentLazyWriterActivity
• CcZeroData
• DbgBreakPoint
• DbgBreakPointWithStatus
• DbgLoadImageSymbols
• DbgPrint
• DbgPrintReturnControlC
• DbgPrompt
• ExAcquireFastMutexUnsafe
• ExAcquireResourceExclusive
• ExAcquireResourceExclusiveLite
• ExAcquireResourceSharedLite
• ExAcquireSharedStarveExclusive
• ExAcquireSharedWaitForExclusive
• ExAllocateFromPagedLookasideList
• ExAllocatePool
• ExAllocatePoolWithQuota
• ExAllocatePoolWithQuotaTag
• ExAllocatePoolWithTag
• ExAllocatePoolWithTagPriority
• ExConvertExclusiveToSharedLite
• ExCreateCallback
• ExDeleteNPagedLookasideList
• ExDeletePagedLookasideList
• ExDeleteResource
• ExDeleteResourceLite
• ExDesktopObjectType
• ExDisableResourceBoostLite
• ExEnumHandleTable
• ExEventObjectType
• ExExtendZone
• ExFreePool
• ExFreePoolWithTag
• ExFreeToPagedLookasideList
• ExGetExclusiveWaiterCount
• ExGetPreviousMode
• ExGetSharedWaiterCount
• ExInitializeNPagedLookasideList
• ExInitializePagedLookasideList
• ExInitializeResource
• ExInitializeResourceLite
• ExInitializeZone
• ExInterlockedAddLargeInteger
• ExInterlockedAddLargeStatistic
• ExInterlockedAddUlong
• ExInterlockedCompareExchange64
• ExInterlockedDecrementLong
• ExInterlockedExchangeUlong
• ExInterlockedExtendZone
• ExInterlockedFlushSList
• ExInterlockedIncrementLong
• ExInterlockedInsertHeadList
• ExInterlockedInsertTailList
• ExInterlockedPopEntryList
• ExInterlockedPopEntrySList
• ExInterlockedPushEntryList
• ExInterlockedPushEntrySList
• ExInterlockedRemoveHeadList
• ExIsProcessorFeaturePresent
• ExIsResourceAcquiredExclusiveLite
• ExIsResourceAcquiredSharedLite
• ExLocalTimeToSystemTime
• ExNotifyCallback
• ExQueryPoolBlockSize
• ExQueueWorkItem
• ExRaiseAccessViolation
• ExRaiseDatatypeMisalignment
• ExRaiseException
• ExRaiseHardError
• ExRaiseStatus
• ExRegisterCallback
• ExReinitializeResourceLite
• ExReleaseFastMutexUnsafe
• ExReleaseResourceForThread
• ExReleaseResourceForThreadLite
• ExReleaseResourceLite
• ExSemaphoreObjectType
• ExSetResourceOwnerPointer
• ExSetTimerResolution
• ExSystemExceptionFilter
• ExSystemTimeToLocalTime
• ExUnregisterCallback
• ExUuidCreate
• ExWindowStationObjectType
• ExfInterlockedAddUlong
• ExfInterlockedInsertHeadList
• ExfInterlockedInsertTailList
• ExfInterlockedPopEntryList
• ExfInterlockedPushEntryList
• ExfInterlockedRemoveHeadList
• Exfi386InterlockedDecrementLong
• Exfi386InterlockedExchangeUlong
• Exfi386InterlockedIncrementLong
• Exi386InterlockedDecrementLong
• Exi386InterlockedExchangeUlong
• Exi386InterlockedIncrementLong
• FsRtlAcquireFileExclusive
• FsRtlAddLargeMcbEntry
• FsRtlAddMcbEntry
• FsRtlAddToTunnelCache
• FsRtlAllocateFileLock
• FsRtlAllocatePool
• FsRtlAllocatePoolWithQuota
• FsRtlAllocatePoolWithQuotaTag
• FsRtlAllocatePoolWithTag
• FsRtlAllocateResource
• FsRtlAreNamesEqual
• FsRtlBalanceReads
• FsRtlCheckLockForReadAccess
• FsRtlCheckLockForWriteAccess
• FsRtlCheckOplock
• FsRtlCopyRead
• FsRtlCopyWrite
• FsRtlCurrentBatchOplock
• FsRtlDeleteKeyFromTunnelCache
• FsRtlDeleteTunnelCache
• FsRtlDeregisterUncProvider
• FsRtlDissectDbcs
• FsRtlDissectName
• FsRtlDoesDbcsContainWildCards
• FsRtlDoesNameContainWildCards
• FsRtlFastCheckLockForRead
• FsRtlFastCheckLockForWrite
• FsRtlFastUnlockAll
• FsRtlFastUnlockAllByKey
• FsRtlFastUnlockSingle
• FsRtlFindInTunnelCache
• FsRtlFreeFileLock
• FsRtlGetFileSize
• FsRtlGetNextFileLock
• FsRtlGetNextLargeMcbEntry
• FsRtlGetNextMcbEntry
• FsRtlInitializeFileLock
• FsRtlInitializeLargeMcb
• FsRtlInitializeMcb
• FsRtlInitializeOplock
• FsRtlInitializeTunnelCache
• FsRtlInsertFilterContext
• FsRtlIsDbcsInExpression
• FsRtlIsFatDbcsLegal
• FsRtlIsHpfsDbcsLegal
• FsRtlIsNameInExpression
• FsRtlIsNtstatusExpected
• FsRtlIsTotalDeviceFailure
• FsRtlLegalAnsiCharacterArray
• FsRtlLookupFilterContextInternal
• FsRtlLookupLargeMcbEntry
• FsRtlLookupLastLargeMcbEntry
• FsRtlLookupLastLargeMcbEntryAndIndex
• FsRtlLookupLastMcbEntry
• FsRtlLookupMcbEntry
• FsRtlMdlRead
• FsRtlMdlReadComplete
• FsRtlMdlReadCompleteDev
• FsRtlMdlReadDev
• FsRtlMdlWriteComplete
• FsRtlMdlWriteCompleteDev
• FsRtlNormalizeNtstatus
• FsRtlNotifyChangeDirectory
• FsRtlNotifyCleanup
• FsRtlNotifyFullChangeDirectory
• FsRtlNotifyFullReportChange
• FsRtlNotifyInitializeSync
• FsRtlNotifyReportChange
• FsRtlNotifyUninitializeSync
• FsRtlNotifyVolumeEvent
• FsRtlNumberOfRunsInLargeMcb
• FsRtlNumberOfRunsInMcb
• FsRtlOplockFsctrl
• FsRtlOplockIsFastIoPossible
• FsRtlPostPagingFileStackOverflow
• FsRtlPostStackOverflow
• FsRtlPrepareMdlWrite
• FsRtlPrepareMdlWriteDev
• FsRtlPrivateLock
• FsRtlProcessFileLock
• FsRtlRegisterUncProvider
• FsRtlReleaseFile
• FsRtlRemoveFilterContext
• FsRtlRemoveLargeMcbEntry
• FsRtlRemoveMcbEntry
• FsRtlResetLargeMcb
• FsRtlSplitLargeMcb
• FsRtlSyncVolumes
• FsRtlTeardownFilterContexts
• FsRtlTruncateLargeMcb
• FsRtlTruncateMcb
• FsRtlUninitializeFileLock
• FsRtlUninitializeLargeMcb
• FsRtlUninitializeMcb
• FsRtlUninitializeOplock
• HalDispatchTable
• HalPrivateDispatchTable
• InbvAcquireDisplayOwnership
• InbvCheckDisplayOwnership
• InbvDisplayString
• InbvEnableBootDriver
• InbvEnableDisplayString
• InbvInstallDisplayStringFilter
• InbvIsBootDriverInstalled
• InbvNotifyDisplayOwnershipLost
• InbvResetDisplay
• InbvSetScrollRegion
• InbvSetTextColor
• InbvSolidColorFill
• InitSafeBootMode
• InterlockedCompareExchange
• InterlockedDecrement
• InterlockedExchange
• InterlockedExchangeAdd
• InterlockedIncrement
• IoAcquireCancelSpinLock
• IoAcquireRemoveLockEx
• IoAcquireVpbSpinLock
• IoAdapterObjectType
• IoAllocateAdapterChannel
• IoAllocateController
• IoAllocateDriverObjectExtension
• IoAllocateErrorLogEntry
• IoAllocateIrp
• IoAllocateMdl
• IoAllocateWorkItem
• IoAssignResources
• IoAttachDevice
• IoAttachDeviceByPointer
• IoAttachDeviceToDeviceStack
• IoBuildAsynchronousFsdRequest
• IoBuildDeviceIoControlRequest
• IoBuildPartialMdl
• IoBuildSynchronousFsdRequest
• IoCallDriver
• IoCancelFileOpen
• IoCancelIrp
• IoCheckDesiredAccess
• IoCheckEaBufferValidity
• IoCheckFunctionAccess
• IoCheckQuerySetFileInformation
• IoCheckQuerySetVolumeInformation
• IoCheckQuotaBufferValidity
• IoCheckShareAccess
• IoCompleteRequest
• IoConnectInterrupt
• IoCreateController
• IoCreateDevice
• IoCreateDriver
• IoCreateFile
• IoCreateNotificationEvent
• IoCreateStreamFileObject
• IoCreateStreamFileObjectLite
• IoCreateSymbolicLink
• IoCreateSynchronizationEvent
• IoCreateUnprotectedSymbolicLink
• IoDeleteController
• IoDeleteDevice
• IoDeleteDriver
• IoDeleteSymbolicLink
• IoDetachDevice
• IoDeviceHandlerObjectSize
• IoDeviceHandlerObjectType
• IoDeviceObjectType
• IoDisconnectInterrupt
• IoDriverObjectType
• IoEnqueueIrp
• IoFastQueryNetworkAttributes
• IoFileObjectType
• IoFreeController
• IoFreeIrp
• IoFreeMdl
• IoFreeWorkItem
• IoGetAttachedDevice
• IoGetAttachedDeviceReference
• IoGetBaseFileSystemDeviceObject
• IoGetBootDiskInformation
• IoGetConfigurationInformation
• IoGetCurrentProcess
• IoGetDeviceInterfaceAlias
• IoGetDeviceInterfaces
• IoGetDeviceObjectPointer
• IoGetDeviceProperty
• IoGetDeviceToVerify
• IoGetDmaAdapter
• IoGetDriverObjectExtension
• IoGetFileObjectGenericMapping
• IoGetInitialStack
• IoGetRelatedDeviceObject
• IoGetRequestorProcess
• IoGetRequestorProcessId
• IoGetRequestorSessionId
• IoGetStackLimits
• IoGetTopLevelIrp
• IoInitializeIrp
• IoInitializeRemoveLockEx
• IoInitializeTimer
• IoInvalidateDeviceRelations
• IoInvalidateDeviceState
• IoIsOperationSynchronous
• IoIsSystemThread
• IoIsValidNameGraftingBuffer
• IoIsWdmVersionAvailable
• IoMakeAssociatedIrp
• IoOpenDeviceInterfaceRegistryKey
• IoOpenDeviceRegistryKey
• IoPageRead
• IoPnPDeliverServicePowerNotification
• IoQueryDeviceDescription
• IoQueryFileInformation
• IoQueryVolumeInformation
• IoQueueThreadIrp
• IoQueueWorkItem
• IoRaiseHardError
• IoRaiseInformationalHardError
• IoReadOperationCount
• IoReadTransferCount
• IoRegisterBootDriverReinitialization
• IoRegisterDeviceInterface
• IoRegisterDriverReinitialization
• IoRegisterFileSystem
• IoRegisterFsRegistrationChange
• IoRegisterLastChanceShutdownNotification
• IoRegisterPlugPlayNotification
• IoRegisterShutdownNotification
• IoReleaseCancelSpinLock
• IoReleaseRemoveLockAndWaitEx
• IoReleaseRemoveLockEx
• IoReleaseVpbSpinLock
• IoRemoveShareAccess
• IoReportDetectedDevice
• IoReportHalResourceUsage
• IoReportResourceForDetection
• IoReportResourceUsage
• IoReportTargetDeviceChange
• IoReportTargetDeviceChangeAsynchronous
• IoRequestDeviceEject
• IoReuseIrp
• IoSetDeviceInterfaceState
• IoSetDeviceToVerify
• IoSetHardErrorOrVerifyDevice
• IoSetInformation
• IoSetIoCompletion
• IoSetShareAccess
• IoSetThreadHardErrorMode
• IoSetTopLevelIrp
• IoStartNextPacket
• IoStartNextPacketByKey
• IoStartPacket
• IoStartTimer
• IoStatisticsLock
• IoStopTimer
• IoSynchronousInvalidateDeviceRelations
• IoSynchronousPageWrite
• IoThreadToProcess
• IoUnregisterFileSystem
• IoUnregisterFsRegistrationChange
• IoUnregisterPlugPlayNotification
• IoUnregisterShutdownNotification
• IoUpdateShareAccess
• IoVerifyVolume
• IoWMIAllocateInstanceIds
• IoWMIRegistrationControl
• IoWMISuggestInstanceName
• IoWMIWriteEvent
• IoWriteErrorLogEntry
• IoWriteOperationCount
• IoWriteTransferCount
• IofCallDriver
• IofCompleteRequest
• KdDebuggerEnabled
• KdDebuggerNotPresent
• KdDisableDebugger
• KdEnableDebugger
• KdEnteredDebugger
• KdPollBreakIn
• Ke386CallBios
• Ke386IoSetAccessProcess
• Ke386QueryIoAccessMap
• Ke386SetIoAccessMap
• KeAcquireSpinLockAtDpcLevel
• KeAddSystemServiceTable
• KeAttachProcess
• KeBugCheck
• KeBugCheckEx
• KeCancelTimer
• KeClearEvent
• KeConnectInterrupt
• KeDcacheFlushCount
• KeDelayExecutionThread
• KeDeregisterBugCheckCallback
• KeDetachProcess
• KeDisconnectInterrupt
• KeEnterCriticalRegion
• KeEnterKernelDebugger
• KeFindConfigurationEntry
• KeFindConfigurationNextEntry
• KeFlushEntireTb
• KeGetCurrentThread
• KeGetPreviousMode
• KeI386AbiosCall
• KeI386AllocateGdtSelectors
• KeI386Call16BitCStyleFunction
• KeI386Call16BitFunction
• KeI386FlatToGdtSelector
• KeI386GetLid
• KeI386MachineType
• KeI386ReleaseGdtSelectors
• KeI386ReleaseLid
• KeI386SetGdtSelector
• KeIcacheFlushCount
• KeInitializeApc
• KeInitializeDeviceQueue
• KeInitializeDpc
• KeInitializeEvent
• KeInitializeInterrupt
• KeInitializeMutant
• KeInitializeMutex
• KeInitializeQueue
• KeInitializeSemaphore
• KeInitializeSpinLock
• KeInitializeTimer
• KeInitializeTimerEx
• KeInsertByKeyDeviceQueue
• KeInsertDeviceQueue
• KeInsertHeadQueue
• KeInsertQueue
• KeInsertQueueApc
• KeInsertQueueDpc
• KeIsExecutingDpc
• KeLeaveCriticalRegion
• KeLoaderBlock
• KeNumberProcessors
• KeProfileInterrupt
• KeProfileInterruptWithSource
• KePulseEvent
• KeQueryActiveProcessors
• KeQueryInterruptTime
• KeQueryPriorityThread
• KeQuerySystemTime
• KeQueryTickCount
• KeQueryTimeIncrement
• KeRaiseUserException
• KeReadStateEvent
• KeReadStateMutant
• KeReadStateMutex
• KeReadStateQueue
• KeReadStateSemaphore
• KeReadStateTimer
• KeRegisterBugCheckCallback
• KeReleaseMutant
• KeReleaseMutex
• KeReleaseSemaphore
• KeReleaseSpinLockFromDpcLevel
• KeRemoveByKeyDeviceQueue
• KeRemoveDeviceQueue
• KeRemoveEntryDeviceQueue
• KeRemoveQueue
• KeRemoveQueueDpc
• KeResetEvent
• KeRestoreFloatingPointState
• KeRevertToUserAffinityThread
• KeRundownQueue
• KeSaveFloatingPointState
• KeSaveStateForHibernate
• KeServiceDescriptorTable
• KeSetAffinityThread
• KeSetBasePriorityThread
• KeSetDmaIoCoherency
• KeSetEvent
• KeSetEventBoostPriority
• KeSetIdealProcessorThread
• KeSetImportanceDpc
• KeSetKernelStackSwapEnable
• KeSetPriorityThread
• KeSetProfileIrql
• KeSetSwapContextNotifyRoutine
• KeSetSystemAffinityThread
• KeSetTargetProcessorDpc
• KeSetThreadSelectNotifyRoutine
• KeSetTimeIncrement
• KeSetTimeUpdateNotifyRoutine
• KeSetTimer
• KeSetTimerEx
• KeStackAttachProcess
• KeSynchronizeExecution
• KeTerminateThread
• KeTickCount
• KeUnstackDetachProcess
• KeUpdateRunTime
• KeUpdateSystemTime
• KeUserModeCallback
• KeWaitForMultipleObjects
• KeWaitForMutexObject
• KeWaitForSingleObject
• KefAcquireSpinLockAtDpcLevel
• KefReleaseSpinLockFromDpcLevel
• Kei386EoiHelper
• KiAcquireSpinLock
• KiBugCheckData
• KiCoprocessorError
• KiDeliverApc
• KiDispatchInterrupt
• KiEnableTimerWatchdog
• KiIpiServiceRoutine
• KiReleaseSpinLock
• KiUnexpectedInterrupt
• Kii386SpinOnSpinLock
• LdrAccessResource
• LdrEnumResources
• LdrFindResourceDirectory_U
• LdrFindResource_U
• LpcPortObjectType
• LpcRequestPort
• LpcRequestWaitReplyPort
• LsaCallAuthenticationPackage
• LsaDeregisterLogonProcess
• LsaFreeReturnBuffer
• LsaLogonUser
• LsaLookupAuthenticationPackage
• LsaRegisterLogonProcess
• Mm64BitPhysicalAddress
• MmAddPhysicalMemory
• MmAdjustWorkingSetSize
• MmAllocateContiguousMemory
• MmAllocateContiguousMemorySpecifyCache
• MmAllocateNonCachedMemory
• MmAllocatePagesForMdl
• MmBuildMdlForNonPagedPool
• MmCanFileBeTruncated
• MmCreateMdl
• MmCreateSection
• MmDisableModifiedWriteOfSection
• MmFlushImageSection
• MmForceSectionClosed
• MmFreeContiguousMemory
• MmFreeContiguousMemorySpecifyCache
• MmFreeNonCachedMemory
• MmFreePagesFromMdl
• MmGetPhysicalAddress
• MmGetPhysicalMemoryRanges
• MmGetSystemRoutineAddress
• MmGetVirtualForPhysical
• MmGrowKernelStack
• MmHighestUserAddress
• MmIsAddressValid
• MmIsDriverVerifying
• MmIsNonPagedSystemAddressValid
• MmIsRecursiveIoFault
• MmIsThisAnNtAsSystem
• MmLockPagableDataSection
• MmLockPagableImageSection
• MmLockPagableSectionByHandle
• MmMapIoSpace
• MmMapLockedPages
• MmMapLockedPagesSpecifyCache
• MmMapMemoryDumpMdl
• MmMapUserAddressesToPage
• MmMapVideoDisplay
• MmMapViewInSessionSpace
• MmMapViewInSystemSpace
• MmMapViewOfSection
• MmPageEntireDriver
• MmProbeAndLockPages
• MmProbeAndLockProcessPages
• MmProbeAndLockSelectedPages
• MmQuerySystemSize
• MmRemovePhysicalMemory
• MmResetDriverPaging
• MmSectionObjectType
• MmSecureVirtualMemory
• MmSetAddressRangeModified
• MmSetBankedSection
• MmSizeOfMdl
• MmSystemRangeStart
• MmTrimAllSystemPagableMemory
• MmUnlockPagableImageSection
• MmUnlockPages
• MmUnmapIoSpace
• MmUnmapLockedPages
• MmUnmapVideoDisplay
• MmUnmapViewInSessionSpace
• MmUnmapViewInSystemSpace
• MmUnmapViewOfSection
• MmUnsecureVirtualMemory
• MmUserProbeAddress
• NlsAnsiCodePage
• NlsLeadByteInfo
• NlsMbCodePageTag
• NlsMbOemCodePageTag
• NlsOemCodePage
• NlsOemLeadByteInfo
• NtAddAtom
• NtAdjustPrivilegesToken
• NtAllocateLocallyUniqueId
• NtAllocateUuids
• NtAllocateVirtualMemory
• NtBuildNumber
• NtClose
• NtConnectPort
• NtCreateEvent
• NtCreateFile
• NtCreateSection
• NtDeleteAtom
• NtDeleteFile
• NtDeviceIoControlFile
• NtDuplicateObject
• NtDuplicateToken
• NtFindAtom
• NtFreeVirtualMemory
• NtFsControlFile
• NtGlobalFlag
• NtLockFile
• NtMapViewOfSection
• NtNotifyChangeDirectoryFile
• NtOpenFile
• NtOpenProcess
• NtOpenProcessToken
• NtQueryDirectoryFile
• NtQueryEaFile
• NtQueryInformationAtom
• NtQueryInformationFile
• NtQueryInformationProcess
• NtQueryInformationToken
• NtQueryQuotaInformationFile
• NtQuerySecurityObject
• NtQuerySystemInformation
• NtQueryVolumeInformationFile
• NtReadFile
• NtRequestPort
• NtRequestWaitReplyPort
• NtSetEaFile
• NtSetEvent
• NtSetInformationFile
• NtSetInformationProcess
• NtSetInformationThread
• NtSetQuotaInformationFile
• NtSetSecurityObject
• NtSetVolumeInformationFile
• NtUnlockFile
• NtVdmControl
• NtWaitForSingleObject
• NtWriteFile
• ObAssignSecurity
• ObCheckCreateObjectAccess
• ObCheckObjectAccess
• ObCreateObject
• ObDereferenceObject
• ObFindHandleForObject
• ObGetObjectPointerCount
• ObGetObjectSecurity
• ObInsertObject
• ObMakeTemporaryObject
• ObOpenObjectByName
• ObOpenObjectByPointer
• ObQueryNameString
• ObQueryObjectAuditingByHandle
• ObReferenceObjectByHandle
• ObReferenceObjectByName
• ObReferenceObjectByPointer
• ObReleaseObjectSecurity
• ObSetSecurityDescriptorInfo
• ObfDereferenceObject
• ObfReferenceObject
• PfxFindPrefix
• PfxInitialize
• PfxInsertPrefix
• PfxRemovePrefix
• PoCallDriver
• PoCancelDeviceNotify
• PoRegisterDeviceForIdleDetection
• PoRegisterDeviceNotify
• PoRegisterSystemState
• PoRequestPowerIrp
• PoSetHiberRange
• PoSetPowerState
• PoSetSystemState
• PoShutdownBugCheck
• PoStartNextPowerIrp
• PoUnregisterSystemState
• ProbeForRead
• ProbeForWrite
• PsAssignImpersonationToken
• PsChargePoolQuota
• PsCreateSystemProcess
• PsCreateSystemThread
• PsDisableImpersonation
• PsEstablishWin32Callouts
• PsGetCurrentProcessId
• PsGetCurrentThreadId
• PsGetProcessExitTime
• PsGetVersion
• PsImpersonateClient
• PsInitialSystemProcess
• PsIsThreadTerminating
• PsJobType
• PsLookupProcessByProcessId
• PsLookupProcessThreadByCid
• PsLookupThreadByThreadId
• PsProcessType
• PsReferenceImpersonationToken
• PsReferencePrimaryToken
• PsRestoreImpersonation
• PsReturnPoolQuota
• PsRevertToSelf
• PsSetCreateProcessNotifyRoutine
• PsSetCreateThreadNotifyRoutine
• PsSetLegoNotifyRoutine
• PsSetLoadImageNotifyRoutine
• PsSetProcessPriorityByClass
• PsTerminateSystemThread
• PsThreadType
• READ_REGISTER_BUFFER_UCHAR
• READ_REGISTER_BUFFER_ULONG
• READ_REGISTER_BUFFER_USHORT
• READ_REGISTER_UCHAR
• READ_REGISTER_ULONG
• READ_REGISTER_USHORT
• RtlAbsoluteToSelfRelativeSD
• RtlAddAccessAllowedAce
• RtlAddAce
• RtlAddAtomToAtomTable
• RtlAddRange
• RtlAllocateHeap
• RtlAnsiCharToUnicodeChar
• RtlAnsiStringToUnicodeSize
• RtlAnsiStringToUnicodeString
• RtlAppendAsciizToString
• RtlAppendStringToString
• RtlAppendUnicodeStringToString
• RtlAppendUnicodeToString
• RtlAreAllAccessesGranted
• RtlAreAnyAccessesGranted
• RtlAreBitsClear
• RtlAreBitsSet
• RtlAssert
• RtlCaptureContext
• RtlCaptureStackBackTrace
• RtlCharToInteger
• RtlCheckRegistryKey
• RtlClearAllBits
• RtlClearBits
• RtlCompareMemory
• RtlCompareMemoryUlong
• RtlCompareString
• RtlCompareUnicodeString
• RtlCompressBuffer
• RtlCompressChunks
• RtlConvertLongToLargeInteger
• RtlConvertSidToUnicodeString
• RtlConvertUlongToLargeInteger
• RtlCopyLuid
• RtlCopyRangeList
• RtlCopySid
• RtlCopyString
• RtlCopyUnicodeString
• RtlCreateAcl
• RtlCreateAtomTable
• RtlCreateHeap
• RtlCreateRegistryKey
• RtlCreateSecurityDescriptor
• RtlCreateUnicodeString
• RtlCustomCPToUnicodeN
• RtlDecompressBuffer
• RtlDecompressChunks
• RtlDecompressFragment
• RtlDelete
• RtlDeleteAce
• RtlDeleteAtomFromAtomTable
• RtlDeleteElementGenericTable
• RtlDeleteNoSplay
• RtlDeleteOwnersRanges
• RtlDeleteRange
• RtlDeleteRegistryValue
• RtlDescribeChunk
• RtlDestroyAtomTable
• RtlDestroyHeap
• RtlDowncaseUnicodeString
• RtlEmptyAtomTable
• RtlEnlargedIntegerMultiply
• RtlEnlargedUnsignedDivide
• RtlEnlargedUnsignedMultiply
• RtlEnumerateGenericTable
• RtlEnumerateGenericTableWithoutSplaying
• RtlEqualLuid
• RtlEqualSid
• RtlEqualString
• RtlEqualUnicodeString
• RtlExtendedIntegerMultiply
• RtlExtendedLargeIntegerDivide
• RtlExtendedMagicDivide
• RtlFillMemory
• RtlFillMemoryUlong
• RtlFindClearBits
• RtlFindClearBitsAndSet
• RtlFindClearRuns
• RtlFindFirstRunClear
• RtlFindLastBackwardRunClear
• RtlFindLeastSignificantBit
• RtlFindLongestRunClear
• RtlFindMessage
• RtlFindMostSignificantBit
• RtlFindNextForwardRunClear
• RtlFindRange
• RtlFindSetBits
• RtlFindSetBitsAndClear
• RtlFindUnicodePrefix
• RtlFormatCurrentUserKeyPath
• RtlFreeAnsiString
• RtlFreeHeap
• RtlFreeOemString
• RtlFreeRangeList
• RtlFreeUnicodeString
• RtlGUIDFromString
• RtlGenerate8dot3Name
• RtlGetAce
• RtlGetCallersAddress
• RtlGetCompressionWorkSpaceSize
• RtlGetDaclSecurityDescriptor
• RtlGetDefaultCodePage
• RtlGetElementGenericTable
• RtlGetFirstRange
• RtlGetGroupSecurityDescriptor
• RtlGetNextRange
• RtlGetNtGlobalFlags
• RtlGetOwnerSecurityDescriptor
• RtlGetSaclSecurityDescriptor
• RtlImageDirectoryEntryToData
• RtlImageNtHeader
• RtlInitAnsiString
• RtlInitCodePageTable
• RtlInitString
• RtlInitUnicodeString
• RtlInitializeBitMap
• RtlInitializeGenericTable
• RtlInitializeRangeList
• RtlInitializeSid
• RtlInitializeUnicodePrefix
• RtlInsertElementGenericTable
• RtlInsertElementGenericTableFull
• RtlInsertUnicodePrefix
• RtlIntegerToChar
• RtlIntegerToUnicodeString
• RtlInvertRangeList
• RtlIsGenericTableEmpty
• RtlIsNameLegalDOS8Dot3
• RtlIsRangeAvailable
• RtlIsValidOemCharacter
• RtlLargeIntegerAdd
• RtlLargeIntegerArithmeticShift
• RtlLargeIntegerDivide
• RtlLargeIntegerNegate
• RtlLargeIntegerShiftLeft
• RtlLargeIntegerShiftRight
• RtlLargeIntegerSubtract
• RtlLengthRequiredSid
• RtlLengthSecurityDescriptor
• RtlLengthSid
• RtlLookupAtomInAtomTable
• RtlLookupElementGenericTable
• RtlLookupElementGenericTableFull
• RtlMapGenericMask
• RtlMergeRangeLists
• RtlMoveMemory
• RtlMultiByteToUnicodeN
• RtlMultiByteToUnicodeSize
• RtlNextUnicodePrefix
• RtlNtStatusToDosError
• RtlNtStatusToDosErrorNoTeb
• RtlNumberGenericTableElements
• RtlNumberOfClearBits
• RtlNumberOfSetBits
• RtlOemStringToCountedUnicodeString
• RtlOemStringToUnicodeSize
• RtlOemStringToUnicodeString
• RtlOemToUnicodeN
• RtlPinAtomInAtomTable
• RtlPrefixString
• RtlPrefixUnicodeString
• RtlQueryAtomInAtomTable
• RtlQueryRegistryValues
• RtlQueryTimeZoneInformation
• RtlRaiseException
• RtlRandom
• RtlRealPredecessor
• RtlRealSuccessor
• RtlRemoveUnicodePrefix
• RtlReserveChunk
• RtlSecondsSince1970ToTime
• RtlSecondsSince1980ToTime
• RtlSelfRelativeToAbsoluteSD
• RtlSelfRelativeToAbsoluteSD2
• RtlSetAllBits
• RtlSetBits
• RtlSetDaclSecurityDescriptor
• RtlSetGroupSecurityDescriptor
• RtlSetOwnerSecurityDescriptor
• RtlSetSaclSecurityDescriptor
• RtlSetTimeZoneInformation
• RtlSizeHeap
• RtlSplay
• RtlStringFromGUID
• RtlSubAuthorityCountSid
• RtlSubAuthoritySid
• RtlSubtreePredecessor
• RtlSubtreeSuccessor
• RtlTimeFieldsToTime
• RtlTimeToSecondsSince1970
• RtlTimeToSecondsSince1980
• RtlTimeToTimeFields
• RtlUlongByteSwap
• RtlUlonglongByteSwap
• RtlUnicodeStringToAnsiSize
• RtlUnicodeStringToAnsiString
• RtlUnicodeStringToCountedOemString
• RtlUnicodeStringToInteger
• RtlUnicodeStringToOemSize
• RtlUnicodeStringToOemString
• RtlUnicodeToCustomCPN
• RtlUnicodeToMultiByteN
• RtlUnicodeToMultiByteSize
• RtlUnicodeToOemN
• RtlUnwind
• RtlUpcaseUnicodeChar
• RtlUpcaseUnicodeString
• RtlUpcaseUnicodeStringToAnsiString
• RtlUpcaseUnicodeStringToCountedOemString
• RtlUpcaseUnicodeStringToOemString
• RtlUpcaseUnicodeToCustomCPN
• RtlUpcaseUnicodeToMultiByteN
• RtlUpcaseUnicodeToOemN
• RtlUpperChar
• RtlUpperString
• RtlUshortByteSwap
• RtlValidRelativeSecurityDescriptor
• RtlValidSecurityDescriptor
• RtlValidSid
• RtlVolumeDeviceToDosName
• RtlWalkFrameChain
• RtlWriteRegistryValue
• RtlZeroHeap
• RtlZeroMemory
• RtlxAnsiStringToUnicodeSize
• RtlxOemStringToUnicodeSize
• RtlxUnicodeStringToAnsiSize
• RtlxUnicodeStringToOemSize
• SeAccessCheck
• SeAppendPrivileges
• SeAssignSecurity
• SeAssignSecurityEx
• SeAuditingFileEvents
• SeAuditingFileOrGlobalEvents
• SeCaptureSecurityDescriptor
• SeCaptureSubjectContext
• SeCloseObjectAuditAlarm
• SeCreateAccessState
• SeCreateClientSecurity
• SeCreateClientSecurityFromSubjectContext
• SeDeassignSecurity
• SeDeleteAccessState
• SeDeleteObjectAuditAlarm
• SeExports
• SeFreePrivileges
• SeImpersonateClient
• SeImpersonateClientEx
• SeLockSubjectContext
• SeMarkLogonSessionForTerminationNotification
• SeOpenObjectAuditAlarm
• SeOpenObjectForDeleteAuditAlarm
• SePrivilegeCheck
• SePrivilegeObjectAuditAlarm
• SePublicDefaultDacl
• SeQueryAuthenticationIdToken
• SeQueryInformationToken
• SeQuerySecurityDescriptorInfo
• SeQuerySessionIdToken
• SeRegisterLogonSessionTerminatedRoutine
• SeReleaseSecurityDescriptor
• SeReleaseSubjectContext
• SeSetAccessStateGenericMapping
• SeSetSecurityDescriptorInfo
• SeSetSecurityDescriptorInfoEx
• SeSinglePrivilegeCheck
• SeSystemDefaultDacl
• SeTokenImpersonationLevel
• SeTokenIsAdmin
• SeTokenIsRestricted
• SeTokenType
• SeUnlockSubjectContext
• SeUnregisterLogonSessionTerminatedRoutine
• SeValidSecurityDescriptor
• WRITE_REGISTER_BUFFER_UCHAR
• WRITE_REGISTER_BUFFER_ULONG
• WRITE_REGISTER_BUFFER_USHORT
• WRITE_REGISTER_UCHAR
• WRITE_REGISTER_ULONG
• WRITE_REGISTER_USHORT
• ZwAccessCheckAndAuditAlarm
• ZwAdjustPrivilegesToken
• ZwAlertThread
• ZwAllocateVirtualMemory
• ZwCancelIoFile
• ZwCancelTimer
• ZwClearEvent
• ZwClose
• ZwCloseObjectAuditAlarm
• ZwConnectPort
• ZwCreateDirectoryObject
• ZwCreateEvent
• ZwCreateFile
• ZwCreateKey
• ZwCreateSection
• ZwCreateSymbolicLinkObject
• ZwCreateTimer
• ZwDeleteFile
• ZwDeleteKey
• ZwDeleteValueKey
• ZwDeviceIoControlFile
• ZwDisplayString
• ZwDuplicateObject
• ZwDuplicateToken
• ZwEnumerateKey
• ZwEnumerateValueKey
• ZwFlushInstructionCache
• ZwFlushKey
• ZwFlushVirtualMemory
• ZwFreeVirtualMemory
• ZwFsControlFile
• ZwInitiatePowerAction
• ZwLoadDriver
• ZwLoadKey
• ZwMakeTemporaryObject
• ZwMapViewOfSection
• ZwNotifyChangeKey
• ZwOpenDirectoryObject
• ZwOpenEvent
• ZwOpenFile
• ZwOpenKey
• ZwOpenProcess
• ZwOpenProcessToken
• ZwOpenSection
• ZwOpenSymbolicLinkObject
• ZwOpenThread
• ZwOpenThreadToken
• ZwOpenTimer
• ZwPowerInformation
• ZwPulseEvent
• ZwQueryDefaultLocale
• ZwQueryDefaultUILanguage
• ZwQueryDirectoryFile
• ZwQueryDirectoryObject
• ZwQueryEaFile
• ZwQueryInformationFile
• ZwQueryInformationProcess
• ZwQueryInformationToken
• ZwQueryInstallUILanguage
• ZwQueryKey
• ZwQueryObject
• ZwQuerySection
• ZwQuerySecurityObject
• ZwQuerySymbolicLinkObject
• ZwQuerySystemInformation
• ZwQueryValueKey
• ZwQueryVolumeInformationFile
• ZwReadFile
• ZwReplaceKey
• ZwRequestWaitReplyPort
• ZwResetEvent
• ZwRestoreKey
• ZwSaveKey
• ZwSetDefaultLocale
• ZwSetDefaultUILanguage
• ZwSetEaFile
• ZwSetEvent
• ZwSetInformationFile
• ZwSetInformationObject
• ZwSetInformationProcess
• ZwSetInformationThread
• ZwSetSecurityObject
• ZwSetSystemInformation
• ZwSetSystemTime
• ZwSetTimer
• ZwSetValueKey
• ZwSetVolumeInformationFile
• ZwTerminateProcess
• ZwUnloadDriver
• ZwUnloadKey
• ZwUnmapViewOfSection
• ZwWaitForMultipleObjects
• ZwWaitForSingleObject
• ZwWriteFile
• ZwYieldExecution
• _abnormal_termination
• _alldiv
• _allmul
• _allrem
• _allshl
• _allshr
• _aulldiv
• _aullrem
• _aullshr
• _except_handler2
• _except_handler3
• _global_unwind2
• _itoa
• _itow
• _local_unwind2
• _purecall
• _snprintf
• _snwprintf
• _stricmp
• _strlwr
• _strnicmp
• _strnset
• _strrev
• _strset
• _strupr
• _vsnprintf
• _wcsicmp
• _wcslwr
• _wcsnicmp
• _wcsnset
• _wcsrev
• _wcsupr
• atoi
• atol
• isdigit
• islower
• isprint
• isspace
• isupper
• isxdigit
• mbstowcs
• mbtowc
• memchr
• memcpy
• memmove
• memset
• qsort
• rand
• sprintf
• srand
• strcat
• strchr
• strcmp
• strcpy
• strlen
• strncat
• strncmp
• strncpy
• strrchr
• strspn
• strstr
• swprintf
• tolower
• toupper
• towlower
• towupper
• vsprintf
• wcscat
• wcschr
• wcscmp
• wcscpy
• wcscspn
• wcslen
• wcsncat
• wcsncmp
• wcsncpy
• wcsrchr
• wcsspn
• wcsstr
• wcstombs
• wctomb