Windows APIs

winxp_rtm Symbols in ntkrpamp.exe

⇒

general DLL page

• CcCanIWrite
• CcCopyRead
• CcCopyWrite
• CcDeferWrite
• CcFastCopyRead
• CcFastCopyWrite
• CcFastMdlReadWait
• CcFastReadNotPossible
• CcFastReadWait
• CcFlushCache
• CcGetDirtyPages
• CcGetFileObjectFromBcb
• CcGetFileObjectFromSectionPtrs
• CcGetFlushedValidData
• CcGetLsnForFileObject
• CcInitializeCacheMap
• CcIsThereDirtyData
• CcMapData
• CcMdlRead
• CcMdlReadComplete
• CcMdlWriteAbort
• CcMdlWriteComplete
• CcPinMappedData
• CcPinRead
• CcPrepareMdlWrite
• CcPreparePinWrite
• CcPurgeCacheSection
• CcRemapBcb
• CcRepinBcb
• CcScheduleReadAhead
• CcSetAdditionalCacheAttributes
• CcSetBcbOwnerPointer
• CcSetDirtyPageThreshold
• CcSetDirtyPinnedData
• CcSetFileSizes
• CcSetLogHandleForFile
• CcSetReadAheadGranularity
• CcUninitializeCacheMap
• CcUnpinData
• CcUnpinDataForThread
• CcUnpinRepinnedBcb
• CcWaitForCurrentLazyWriterActivity
• CcZeroData
• CmRegisterCallback
• CmUnRegisterCallback
• DbgBreakPoint
• DbgBreakPointWithStatus
• DbgLoadImageSymbols
• DbgPrint
• DbgPrintEx
• DbgPrintReturnControlC
• DbgPrompt
• DbgQueryDebugFilterState
• DbgSetDebugFilterState
• ExAcquireFastMutexUnsafe
• ExAcquireResourceExclusiveLite
• ExAcquireResourceSharedLite
• ExAcquireRundownProtection
• ExAcquireSharedStarveExclusive
• ExAcquireSharedWaitForExclusive
• ExAllocateFromPagedLookasideList
• ExAllocatePool
• ExAllocatePoolWithQuota
• ExAllocatePoolWithQuotaTag
• ExAllocatePoolWithTag
• ExAllocatePoolWithTagPriority
• ExConvertExclusiveToSharedLite
• ExCreateCallback
• ExDeleteNPagedLookasideList
• ExDeletePagedLookasideList
• ExDeleteResourceLite
• ExDesktopObjectType
• ExDisableResourceBoostLite
• ExEnumHandleTable
• ExEventObjectType
• ExExtendZone
• ExFreePool
• ExFreePoolWithTag
• ExFreeToPagedLookasideList
• ExGetCurrentProcessorCounts
• ExGetCurrentProcessorCpuUsage
• ExGetExclusiveWaiterCount
• ExGetPreviousMode
• ExGetSharedWaiterCount
• ExInitializeNPagedLookasideList
• ExInitializePagedLookasideList
• ExInitializeResourceLite
• ExInitializeRundownProtection
• ExInitializeZone
• ExInterlockedAddLargeInteger
• ExInterlockedAddLargeStatistic
• ExInterlockedAddUlong
• ExInterlockedCompareExchange64
• ExInterlockedDecrementLong
• ExInterlockedExchangeUlong
• ExInterlockedExtendZone
• ExInterlockedFlushSList
• ExInterlockedIncrementLong
• ExInterlockedInsertHeadList
• ExInterlockedInsertTailList
• ExInterlockedPopEntryList
• ExInterlockedPopEntrySList
• ExInterlockedPushEntryList
• ExInterlockedPushEntrySList
• ExInterlockedRemoveHeadList
• ExIsProcessorFeaturePresent
• ExIsResourceAcquiredExclusiveLite
• ExIsResourceAcquiredSharedLite
• ExLocalTimeToSystemTime
• ExNotifyCallback
• ExQueryPoolBlockSize
• ExQueueWorkItem
• ExRaiseAccessViolation
• ExRaiseDatatypeMisalignment
• ExRaiseException
• ExRaiseHardError
• ExRaiseStatus
• ExReInitializeRundownProtection
• ExRegisterCallback
• ExReinitializeResourceLite
• ExReleaseFastMutexUnsafe
• ExReleaseResourceForThreadLite
• ExReleaseResourceLite
• ExReleaseRundownProtection
• ExRundownCompleted
• ExSemaphoreObjectType
• ExSetResourceOwnerPointer
• ExSetTimerResolution
• ExSystemExceptionFilter
• ExSystemTimeToLocalTime
• ExUnregisterCallback
• ExUuidCreate
• ExVerifySuite
• ExWaitForRundownProtectionRelease
• ExWindowStationObjectType
• ExfInterlockedAddUlong
• ExfInterlockedCompareExchange64
• ExfInterlockedInsertHeadList
• ExfInterlockedInsertTailList
• ExfInterlockedPopEntryList
• ExfInterlockedPushEntryList
• ExfInterlockedRemoveHeadList
• Exfi386InterlockedDecrementLong
• Exfi386InterlockedExchangeUlong
• Exfi386InterlockedIncrementLong
• Exi386InterlockedDecrementLong
• Exi386InterlockedExchangeUlong
• Exi386InterlockedIncrementLong
• FsRtlAcquireFileExclusive
• FsRtlAddLargeMcbEntry
• FsRtlAddMcbEntry
• FsRtlAddToTunnelCache
• FsRtlAllocateFileLock
• FsRtlAllocatePool
• FsRtlAllocatePoolWithQuota
• FsRtlAllocatePoolWithQuotaTag
• FsRtlAllocatePoolWithTag
• FsRtlAllocateResource
• FsRtlAreNamesEqual
• FsRtlBalanceReads
• FsRtlCheckLockForReadAccess
• FsRtlCheckLockForWriteAccess
• FsRtlCheckOplock
• FsRtlCopyRead
• FsRtlCopyWrite
• FsRtlCurrentBatchOplock
• FsRtlDeleteKeyFromTunnelCache
• FsRtlDeleteTunnelCache
• FsRtlDeregisterUncProvider
• FsRtlDissectDbcs
• FsRtlDissectName
• FsRtlDoesDbcsContainWildCards
• FsRtlDoesNameContainWildCards
• FsRtlFastCheckLockForRead
• FsRtlFastCheckLockForWrite
• FsRtlFastUnlockAll
• FsRtlFastUnlockAllByKey
• FsRtlFastUnlockSingle
• FsRtlFindInTunnelCache
• FsRtlFreeFileLock
• FsRtlGetFileSize
• FsRtlGetNextFileLock
• FsRtlGetNextLargeMcbEntry
• FsRtlGetNextMcbEntry
• FsRtlIncrementCcFastReadNoWait
• FsRtlIncrementCcFastReadNotPossible
• FsRtlIncrementCcFastReadResourceMiss
• FsRtlIncrementCcFastReadWait
• FsRtlInitializeFileLock
• FsRtlInitializeLargeMcb
• FsRtlInitializeMcb
• FsRtlInitializeOplock
• FsRtlInitializeTunnelCache
• FsRtlInsertPerFileObjectContext
• FsRtlInsertPerStreamContext
• FsRtlIsDbcsInExpression
• FsRtlIsFatDbcsLegal
• FsRtlIsHpfsDbcsLegal
• FsRtlIsNameInExpression
• FsRtlIsNtstatusExpected
• FsRtlIsPagingFile
• FsRtlIsTotalDeviceFailure
• FsRtlLegalAnsiCharacterArray
• FsRtlLookupLargeMcbEntry
• FsRtlLookupLastLargeMcbEntry
• FsRtlLookupLastLargeMcbEntryAndIndex
• FsRtlLookupLastMcbEntry
• FsRtlLookupMcbEntry
• FsRtlLookupPerFileObjectContext
• FsRtlLookupPerStreamContextInternal
• FsRtlMdlRead
• FsRtlMdlReadComplete
• FsRtlMdlReadCompleteDev
• FsRtlMdlReadDev
• FsRtlMdlWriteComplete
• FsRtlMdlWriteCompleteDev
• FsRtlNormalizeNtstatus
• FsRtlNotifyChangeDirectory
• FsRtlNotifyCleanup
• FsRtlNotifyFilterChangeDirectory
• FsRtlNotifyFilterReportChange
• FsRtlNotifyFullChangeDirectory
• FsRtlNotifyFullReportChange
• FsRtlNotifyInitializeSync
• FsRtlNotifyReportChange
• FsRtlNotifyUninitializeSync
• FsRtlNotifyVolumeEvent
• FsRtlNumberOfRunsInLargeMcb
• FsRtlNumberOfRunsInMcb
• FsRtlOplockFsctrl
• FsRtlOplockIsFastIoPossible
• FsRtlPostPagingFileStackOverflow
• FsRtlPostStackOverflow
• FsRtlPrepareMdlWrite
• FsRtlPrepareMdlWriteDev
• FsRtlPrivateLock
• FsRtlProcessFileLock
• FsRtlRegisterFileSystemFilterCallbacks
• FsRtlRegisterUncProvider
• FsRtlReleaseFile
• FsRtlRemoveLargeMcbEntry
• FsRtlRemoveMcbEntry
• FsRtlRemovePerFileObjectContext
• FsRtlRemovePerStreamContext
• FsRtlResetLargeMcb
• FsRtlSplitLargeMcb
• FsRtlSyncVolumes
• FsRtlTeardownPerStreamContexts
• FsRtlTruncateLargeMcb
• FsRtlTruncateMcb
• FsRtlUninitializeFileLock
• FsRtlUninitializeLargeMcb
• FsRtlUninitializeMcb
• FsRtlUninitializeOplock
• HalDispatchTable
• HalExamineMBR
• HalPrivateDispatchTable
• HeadlessDispatch
• InbvAcquireDisplayOwnership
• InbvCheckDisplayOwnership
• InbvDisplayString
• InbvEnableBootDriver
• InbvEnableDisplayString
• InbvInstallDisplayStringFilter
• InbvIsBootDriverInstalled
• InbvNotifyDisplayOwnershipLost
• InbvResetDisplay
• InbvSetScrollRegion
• InbvSetTextColor
• InbvSolidColorFill
• InitSafeBootMode
• InterlockedCompareExchange
• InterlockedDecrement
• InterlockedExchange
• InterlockedExchangeAdd
• InterlockedIncrement
• InterlockedPopEntrySList
• InterlockedPushEntrySList
• IoAcquireCancelSpinLock
• IoAcquireRemoveLockEx
• IoAcquireVpbSpinLock
• IoAdapterObjectType
• IoAllocateAdapterChannel
• IoAllocateController
• IoAllocateDriverObjectExtension
• IoAllocateErrorLogEntry
• IoAllocateIrp
• IoAllocateMdl
• IoAllocateWorkItem
• IoAssignDriveLetters
• IoAssignResources
• IoAttachDevice
• IoAttachDeviceByPointer
• IoAttachDeviceToDeviceStack
• IoAttachDeviceToDeviceStackSafe
• IoBuildAsynchronousFsdRequest
• IoBuildDeviceIoControlRequest
• IoBuildPartialMdl
• IoBuildSynchronousFsdRequest
• IoCallDriver
• IoCancelFileOpen
• IoCancelIrp
• IoCheckDesiredAccess
• IoCheckEaBufferValidity
• IoCheckFunctionAccess
• IoCheckQuerySetFileInformation
• IoCheckQuerySetVolumeInformation
• IoCheckQuotaBufferValidity
• IoCheckShareAccess
• IoCompleteRequest
• IoConnectInterrupt
• IoCreateController
• IoCreateDevice
• IoCreateDisk
• IoCreateDriver
• IoCreateFile
• IoCreateFileSpecifyDeviceObjectHint
• IoCreateNotificationEvent
• IoCreateStreamFileObject
• IoCreateStreamFileObjectEx
• IoCreateStreamFileObjectLite
• IoCreateSymbolicLink
• IoCreateSynchronizationEvent
• IoCreateUnprotectedSymbolicLink
• IoCsqInitialize
• IoCsqInsertIrp
• IoCsqRemoveIrp
• IoCsqRemoveNextIrp
• IoDeleteController
• IoDeleteDevice
• IoDeleteDriver
• IoDeleteSymbolicLink
• IoDetachDevice
• IoDeviceHandlerObjectSize
• IoDeviceHandlerObjectType
• IoDeviceObjectType
• IoDisconnectInterrupt
• IoDriverObjectType
• IoEnqueueIrp
• IoEnumerateDeviceObjectList
• IoFastQueryNetworkAttributes
• IoFileObjectType
• IoForwardAndCatchIrp
• IoForwardIrpSynchronously
• IoFreeController
• IoFreeErrorLogEntry
• IoFreeIrp
• IoFreeMdl
• IoFreeWorkItem
• IoGetAttachedDevice
• IoGetAttachedDeviceReference
• IoGetBaseFileSystemDeviceObject
• IoGetBootDiskInformation
• IoGetConfigurationInformation
• IoGetCurrentProcess
• IoGetDeviceAttachmentBaseRef
• IoGetDeviceInterfaceAlias
• IoGetDeviceInterfaces
• IoGetDeviceObjectPointer
• IoGetDeviceProperty
• IoGetDeviceToVerify
• IoGetDiskDeviceObject
• IoGetDmaAdapter
• IoGetDriverObjectExtension
• IoGetFileObjectGenericMapping
• IoGetInitialStack
• IoGetLowerDeviceObject
• IoGetRelatedDeviceObject
• IoGetRequestorProcess
• IoGetRequestorProcessId
• IoGetRequestorSessionId
• IoGetStackLimits
• IoGetTopLevelIrp
• IoInitializeIrp
• IoInitializeRemoveLockEx
• IoInitializeTimer
• IoInvalidateDeviceRelations
• IoInvalidateDeviceState
• IoIsFileOriginRemote
• IoIsOperationSynchronous
• IoIsSystemThread
• IoIsValidNameGraftingBuffer
• IoIsWdmVersionAvailable
• IoMakeAssociatedIrp
• IoOpenDeviceInterfaceRegistryKey
• IoOpenDeviceRegistryKey
• IoPageRead
• IoPnPDeliverServicePowerNotification
• IoQueryDeviceDescription
• IoQueryFileDosDeviceName
• IoQueryFileInformation
• IoQueryVolumeInformation
• IoQueueThreadIrp
• IoQueueWorkItem
• IoRaiseHardError
• IoRaiseInformationalHardError
• IoReadDiskSignature
• IoReadOperationCount
• IoReadPartitionTable
• IoReadPartitionTableEx
• IoReadTransferCount
• IoRegisterBootDriverReinitialization
• IoRegisterDeviceInterface
• IoRegisterDriverReinitialization
• IoRegisterFileSystem
• IoRegisterFsRegistrationChange
• IoRegisterLastChanceShutdownNotification
• IoRegisterPlugPlayNotification
• IoRegisterShutdownNotification
• IoReleaseCancelSpinLock
• IoReleaseRemoveLockAndWaitEx
• IoReleaseRemoveLockEx
• IoReleaseVpbSpinLock
• IoRemoveShareAccess
• IoReportDetectedDevice
• IoReportHalResourceUsage
• IoReportResourceForDetection
• IoReportResourceUsage
• IoReportTargetDeviceChange
• IoReportTargetDeviceChangeAsynchronous
• IoRequestDeviceEject
• IoReuseIrp
• IoSetCompletionRoutineEx
• IoSetDeviceInterfaceState
• IoSetDeviceToVerify
• IoSetFileOrigin
• IoSetHardErrorOrVerifyDevice
• IoSetInformation
• IoSetIoCompletion
• IoSetPartitionInformation
• IoSetPartitionInformationEx
• IoSetShareAccess
• IoSetStartIoAttributes
• IoSetSystemPartition
• IoSetThreadHardErrorMode
• IoSetTopLevelIrp
• IoStartNextPacket
• IoStartNextPacketByKey
• IoStartPacket
• IoStartTimer
• IoStatisticsLock
• IoStopTimer
• IoSynchronousInvalidateDeviceRelations
• IoSynchronousPageWrite
• IoThreadToProcess
• IoUnregisterFileSystem
• IoUnregisterFsRegistrationChange
• IoUnregisterPlugPlayNotification
• IoUnregisterShutdownNotification
• IoUpdateShareAccess
• IoVerifyPartitionTable
• IoVerifyVolume
• IoVolumeDeviceToDosName
• IoWMIAllocateInstanceIds
• IoWMIDeviceObjectToInstanceName
• IoWMIExecuteMethod
• IoWMIHandleToInstanceName
• IoWMIOpenBlock
• IoWMIQueryAllData
• IoWMIQueryAllDataMultiple
• IoWMIQuerySingleInstance
• IoWMIQuerySingleInstanceMultiple
• IoWMIRegistrationControl
• IoWMISetNotificationCallback
• IoWMISetSingleInstance
• IoWMISetSingleItem
• IoWMISuggestInstanceName
• IoWMIWriteEvent
• IoWriteErrorLogEntry
• IoWriteOperationCount
• IoWritePartitionTable
• IoWritePartitionTableEx
• IoWriteTransferCount
• IofCallDriver
• IofCompleteRequest
• KdDebuggerEnabled
• KdDebuggerNotPresent
• KdDisableDebugger
• KdEnableDebugger
• KdEnteredDebugger
• KdPollBreakIn
• KdPowerTransition
• Ke386CallBios
• Ke386IoSetAccessProcess
• Ke386QueryIoAccessMap
• Ke386SetIoAccessMap
• KeAcquireInStackQueuedSpinLockAtDpcLevel
• KeAcquireInterruptSpinLock
• KeAcquireSpinLockAtDpcLevel
• KeAddSystemServiceTable
• KeAreApcsDisabled
• KeAttachProcess
• KeBugCheck
• KeBugCheckEx
• KeCancelTimer
• KeClearEvent
• KeConnectInterrupt
• KeDcacheFlushCount
• KeDelayExecutionThread
• KeDeregisterBugCheckCallback
• KeDetachProcess
• KeDisconnectInterrupt
• KeEnterCriticalRegion
• KeEnterKernelDebugger
• KeFindConfigurationEntry
• KeFindConfigurationNextEntry
• KeFlushEntireTb
• KeGetCurrentThread
• KeGetPreviousMode
• KeGetRecommendedSharedDataAlignment
• KeI386AbiosCall
• KeI386AllocateGdtSelectors
• KeI386Call16BitCStyleFunction
• KeI386Call16BitFunction
• KeI386FlatToGdtSelector
• KeI386GetLid
• KeI386MachineType
• KeI386ReleaseGdtSelectors
• KeI386ReleaseLid
• KeI386SetGdtSelector
• KeIcacheFlushCount
• KeInitializeApc
• KeInitializeDeviceQueue
• KeInitializeDpc
• KeInitializeEvent
• KeInitializeInterrupt
• KeInitializeMutant
• KeInitializeMutex
• KeInitializeQueue
• KeInitializeSemaphore
• KeInitializeSpinLock
• KeInitializeTimer
• KeInitializeTimerEx
• KeInsertByKeyDeviceQueue
• KeInsertDeviceQueue
• KeInsertHeadQueue
• KeInsertQueue
• KeInsertQueueApc
• KeInsertQueueDpc
• KeIsAttachedProcess
• KeIsExecutingDpc
• KeLeaveCriticalRegion
• KeLoaderBlock
• KeNumberProcessors
• KeProfileInterrupt
• KeProfileInterruptWithSource
• KePulseEvent
• KeQueryActiveProcessors
• KeQueryInterruptTime
• KeQueryPriorityThread
• KeQueryRuntimeThread
• KeQuerySystemTime
• KeQueryTickCount
• KeQueryTimeIncrement
• KeRaiseUserException
• KeReadStateEvent
• KeReadStateMutant
• KeReadStateMutex
• KeReadStateQueue
• KeReadStateSemaphore
• KeReadStateTimer
• KeRegisterBugCheckCallback
• KeReleaseInStackQueuedSpinLockFromDpcLevel
• KeReleaseInterruptSpinLock
• KeReleaseMutant
• KeReleaseMutex
• KeReleaseSemaphore
• KeReleaseSpinLockFromDpcLevel
• KeRemoveByKeyDeviceQueue
• KeRemoveByKeyDeviceQueueIfBusy
• KeRemoveDeviceQueue
• KeRemoveEntryDeviceQueue
• KeRemoveQueue
• KeRemoveQueueDpc
• KeRemoveSystemServiceTable
• KeResetEvent
• KeRestoreFloatingPointState
• KeRevertToUserAffinityThread
• KeRundownQueue
• KeSaveFloatingPointState
• KeSaveStateForHibernate
• KeServiceDescriptorTable
• KeSetAffinityThread
• KeSetBasePriorityThread
• KeSetDmaIoCoherency
• KeSetEvent
• KeSetEventBoostPriority
• KeSetIdealProcessorThread
• KeSetImportanceDpc
• KeSetKernelStackSwapEnable
• KeSetPriorityThread
• KeSetProfileIrql
• KeSetSystemAffinityThread
• KeSetTargetProcessorDpc
• KeSetTimeIncrement
• KeSetTimeUpdateNotifyRoutine
• KeSetTimer
• KeSetTimerEx
• KeStackAttachProcess
• KeSynchronizeExecution
• KeTerminateThread
• KeTickCount
• KeUnstackDetachProcess
• KeUpdateRunTime
• KeUpdateSystemTime
• KeUserModeCallback
• KeWaitForMultipleObjects
• KeWaitForMutexObject
• KeWaitForSingleObject
• KefAcquireSpinLockAtDpcLevel
• KefReleaseSpinLockFromDpcLevel
• Kei386EoiHelper
• KiAcquireSpinLock
• KiBugCheckData
• KiCoprocessorError
• KiDeliverApc
• KiDispatchInterrupt
• KiEnableTimerWatchdog
• KiIpiServiceRoutine
• KiReleaseSpinLock
• KiUnexpectedInterrupt
• Kii386SpinOnSpinLock
• LdrAccessResource
• LdrEnumResources
• LdrFindResourceDirectory_U
• LdrFindResource_U
• LpcPortObjectType
• LpcRequestPort
• LpcRequestWaitReplyPort
• LsaCallAuthenticationPackage
• LsaDeregisterLogonProcess
• LsaFreeReturnBuffer
• LsaLogonUser
• LsaLookupAuthenticationPackage
• LsaRegisterLogonProcess
• Mm64BitPhysicalAddress
• MmAddPhysicalMemory
• MmAddVerifierThunks
• MmAdjustWorkingSetSize
• MmAdvanceMdl
• MmAllocateContiguousMemory
• MmAllocateContiguousMemorySpecifyCache
• MmAllocateMappingAddress
• MmAllocateNonCachedMemory
• MmAllocatePagesForMdl
• MmBuildMdlForNonPagedPool
• MmCanFileBeTruncated
• MmCreateMdl
• MmCreateSection
• MmDisableModifiedWriteOfSection
• MmFlushImageSection
• MmForceSectionClosed
• MmFreeContiguousMemory
• MmFreeContiguousMemorySpecifyCache
• MmFreeMappingAddress
• MmFreeNonCachedMemory
• MmFreePagesFromMdl
• MmGetPhysicalAddress
• MmGetPhysicalMemoryRanges
• MmGetSystemRoutineAddress
• MmGetVirtualForPhysical
• MmGrowKernelStack
• MmHighestUserAddress
• MmIsAddressValid
• MmIsDriverVerifying
• MmIsNonPagedSystemAddressValid
• MmIsRecursiveIoFault
• MmIsThisAnNtAsSystem
• MmIsVerifierEnabled
• MmLockPagableDataSection
• MmLockPagableImageSection
• MmLockPagableSectionByHandle
• MmMapIoSpace
• MmMapLockedPages
• MmMapLockedPagesSpecifyCache
• MmMapLockedPagesWithReservedMapping
• MmMapMemoryDumpMdl
• MmMapUserAddressesToPage
• MmMapVideoDisplay
• MmMapViewInSessionSpace
• MmMapViewInSystemSpace
• MmMapViewOfSection
• MmMarkPhysicalMemoryAsBad
• MmMarkPhysicalMemoryAsGood
• MmPageEntireDriver
• MmPrefetchPages
• MmProbeAndLockPages
• MmProbeAndLockProcessPages
• MmProbeAndLockSelectedPages
• MmProtectMdlSystemAddress
• MmQuerySystemSize
• MmRemovePhysicalMemory
• MmResetDriverPaging
• MmSectionObjectType
• MmSecureVirtualMemory
• MmSetAddressRangeModified
• MmSetBankedSection
• MmSizeOfMdl
• MmSystemRangeStart
• MmTrimAllSystemPagableMemory
• MmUnlockPagableImageSection
• MmUnlockPages
• MmUnmapIoSpace
• MmUnmapLockedPages
• MmUnmapReservedMapping
• MmUnmapVideoDisplay
• MmUnmapViewInSessionSpace
• MmUnmapViewInSystemSpace
• MmUnmapViewOfSection
• MmUnsecureVirtualMemory
• MmUserProbeAddress
• NlsAnsiCodePage
• NlsLeadByteInfo
• NlsMbCodePageTag
• NlsMbOemCodePageTag
• NlsOemCodePage
• NlsOemLeadByteInfo
• NtAddAtom
• NtAdjustPrivilegesToken
• NtAllocateLocallyUniqueId
• NtAllocateUuids
• NtAllocateVirtualMemory
• NtBuildNumber
• NtClose
• NtConnectPort
• NtCreateEvent
• NtCreateFile
• NtCreateSection
• NtDeleteAtom
• NtDeleteFile
• NtDeviceIoControlFile
• NtDuplicateObject
• NtDuplicateToken
• NtFindAtom
• NtFreeVirtualMemory
• NtFsControlFile
• NtGlobalFlag
• NtLockFile
• NtMakePermanentObject
• NtMapViewOfSection
• NtNotifyChangeDirectoryFile
• NtOpenFile
• NtOpenProcess
• NtOpenProcessToken
• NtOpenProcessTokenEx
• NtOpenThread
• NtOpenThreadToken
• NtOpenThreadTokenEx
• NtQueryDirectoryFile
• NtQueryEaFile
• NtQueryInformationAtom
• NtQueryInformationFile
• NtQueryInformationProcess
• NtQueryInformationThread
• NtQueryInformationToken
• NtQueryQuotaInformationFile
• NtQuerySecurityObject
• NtQuerySystemInformation
• NtQueryVolumeInformationFile
• NtReadFile
• NtRequestPort
• NtRequestWaitReplyPort
• NtSetEaFile
• NtSetEvent
• NtSetInformationFile
• NtSetInformationProcess
• NtSetInformationThread
• NtSetQuotaInformationFile
• NtSetSecurityObject
• NtSetVolumeInformationFile
• NtShutdownSystem
• NtTraceEvent
• NtUnlockFile
• NtVdmControl
• NtWaitForSingleObject
• NtWriteFile
• ObAssignSecurity
• ObCheckCreateObjectAccess
• ObCheckObjectAccess
• ObCloseHandle
• ObCreateObject
• ObCreateObjectType
• ObDereferenceObject
• ObDereferenceSecurityDescriptor
• ObFindHandleForObject
• ObGetObjectSecurity
• ObInsertObject
• ObLogSecurityDescriptor
• ObMakeTemporaryObject
• ObOpenObjectByName
• ObOpenObjectByPointer
• ObQueryNameString
• ObQueryObjectAuditingByHandle
• ObReferenceObjectByHandle
• ObReferenceObjectByName
• ObReferenceObjectByPointer
• ObReferenceSecurityDescriptor
• ObReleaseObjectSecurity
• ObSetHandleAttributes
• ObSetSecurityDescriptorInfo
• ObSetSecurityObjectByPointer
• ObfDereferenceObject
• ObfReferenceObject
• PfxFindPrefix
• PfxInitialize
• PfxInsertPrefix
• PfxRemovePrefix
• PoCallDriver
• PoCancelDeviceNotify
• PoQueueShutdownWorkItem
• PoRegisterDeviceForIdleDetection
• PoRegisterDeviceNotify
• PoRegisterSystemState
• PoRequestPowerIrp
• PoRequestShutdownEvent
• PoSetHiberRange
• PoSetPowerState
• PoSetSystemState
• PoShutdownBugCheck
• PoStartNextPowerIrp
• PoUnregisterSystemState
• ProbeForRead
• ProbeForWrite
• PsAssignImpersonationToken
• PsChargePoolQuota
• PsChargeProcessNonPagedPoolQuota
• PsChargeProcessPagedPoolQuota
• PsChargeProcessPoolQuota
• PsCreateSystemProcess
• PsCreateSystemThread
• PsDereferenceImpersonationToken
• PsDereferencePrimaryToken
• PsDisableImpersonation
• PsEstablishWin32Callouts
• PsGetCurrentProcess
• PsGetCurrentProcessId
• PsGetCurrentProcessSessionId
• PsGetCurrentThread
• PsGetCurrentThreadId
• PsGetCurrentThreadPreviousMode
• PsGetCurrentThreadStackBase
• PsGetCurrentThreadStackLimit
• PsGetJobLock
• PsGetJobSessionId
• PsGetJobUIRestrictionsClass
• PsGetProcessCreateTimeQuadPart
• PsGetProcessDebugPort
• PsGetProcessExitProcessCalled
• PsGetProcessExitStatus
• PsGetProcessExitTime
• PsGetProcessId
• PsGetProcessImageFileName
• PsGetProcessInheritedFromUniqueProcessId
• PsGetProcessJob
• PsGetProcessPeb
• PsGetProcessPriorityClass
• PsGetProcessSectionBaseAddress
• PsGetProcessSecurityPort
• PsGetProcessSessionId
• PsGetProcessWin32Process
• PsGetProcessWin32WindowStation
• PsGetThreadFreezeCount
• PsGetThreadHardErrorsAreDisabled
• PsGetThreadId
• PsGetThreadProcess
• PsGetThreadProcessId
• PsGetThreadSessionId
• PsGetThreadTeb
• PsGetThreadWin32Thread
• PsGetVersion
• PsImpersonateClient
• PsInitialSystemProcess
• PsIsProcessBeingDebugged
• PsIsSystemThread
• PsIsThreadImpersonating
• PsIsThreadTerminating
• PsJobType
• PsLookupProcessByProcessId
• PsLookupProcessThreadByCid
• PsLookupThreadByThreadId
• PsProcessType
• PsReferenceImpersonationToken
• PsReferencePrimaryToken
• PsRemoveCreateThreadNotifyRoutine
• PsRemoveLoadImageNotifyRoutine
• PsRestoreImpersonation
• PsReturnPoolQuota
• PsReturnProcessNonPagedPoolQuota
• PsReturnProcessPagedPoolQuota
• PsRevertThreadToSelf
• PsRevertToSelf
• PsSetCreateProcessNotifyRoutine
• PsSetCreateThreadNotifyRoutine
• PsSetJobUIRestrictionsClass
• PsSetLegoNotifyRoutine
• PsSetLoadImageNotifyRoutine
• PsSetProcessPriorityByClass
• PsSetProcessPriorityClass
• PsSetProcessSecurityPort
• PsSetProcessWin32Process
• PsSetProcessWindowStation
• PsSetThreadHardErrorsAreDisabled
• PsSetThreadWin32Thread
• PsTerminateSystemThread
• PsThreadType
• READ_REGISTER_BUFFER_UCHAR
• READ_REGISTER_BUFFER_ULONG
• READ_REGISTER_BUFFER_USHORT
• READ_REGISTER_UCHAR
• READ_REGISTER_ULONG
• READ_REGISTER_USHORT
• RtlAbsoluteToSelfRelativeSD
• RtlAddAccessAllowedAce
• RtlAddAce
• RtlAddAtomToAtomTable
• RtlAddRange
• RtlAllocateHeap
• RtlAnsiCharToUnicodeChar
• RtlAnsiStringToUnicodeSize
• RtlAnsiStringToUnicodeString
• RtlAppendAsciizToString
• RtlAppendStringToString
• RtlAppendUnicodeStringToString
• RtlAppendUnicodeToString
• RtlAreAllAccessesGranted
• RtlAreAnyAccessesGranted
• RtlAreBitsClear
• RtlAreBitsSet
• RtlAssert
• RtlCaptureContext
• RtlCaptureStackBackTrace
• RtlCharToInteger
• RtlCheckRegistryKey
• RtlClearAllBits
• RtlClearBit
• RtlClearBits
• RtlCompareMemory
• RtlCompareMemoryUlong
• RtlCompareString
• RtlCompareUnicodeString
• RtlCompressBuffer
• RtlCompressChunks
• RtlConvertLongToLargeInteger
• RtlConvertSidToUnicodeString
• RtlConvertUlongToLargeInteger
• RtlCopyLuid
• RtlCopyRangeList
• RtlCopySid
• RtlCopyString
• RtlCopyUnicodeString
• RtlCreateAcl
• RtlCreateAtomTable
• RtlCreateHeap
• RtlCreateRegistryKey
• RtlCreateSecurityDescriptor
• RtlCreateSystemVolumeInformationFolder
• RtlCreateUnicodeString
• RtlCustomCPToUnicodeN
• RtlDecompressBuffer
• RtlDecompressChunks
• RtlDecompressFragment
• RtlDelete
• RtlDeleteAce
• RtlDeleteAtomFromAtomTable
• RtlDeleteElementGenericTable
• RtlDeleteElementGenericTableAvl
• RtlDeleteNoSplay
• RtlDeleteOwnersRanges
• RtlDeleteRange
• RtlDeleteRegistryValue
• RtlDescribeChunk
• RtlDestroyAtomTable
• RtlDestroyHeap
• RtlDowncaseUnicodeString
• RtlEmptyAtomTable
• RtlEnlargedIntegerMultiply
• RtlEnlargedUnsignedDivide
• RtlEnlargedUnsignedMultiply
• RtlEnumerateGenericTable
• RtlEnumerateGenericTableAvl
• RtlEnumerateGenericTableLikeADirectory
• RtlEnumerateGenericTableWithoutSplaying
• RtlEnumerateGenericTableWithoutSplayingAvl
• RtlEqualLuid
• RtlEqualSid
• RtlEqualString
• RtlEqualUnicodeString
• RtlExtendedIntegerMultiply
• RtlExtendedLargeIntegerDivide
• RtlExtendedMagicDivide
• RtlFillMemory
• RtlFillMemoryUlong
• RtlFindClearBits
• RtlFindClearBitsAndSet
• RtlFindClearRuns
• RtlFindFirstRunClear
• RtlFindLastBackwardRunClear
• RtlFindLeastSignificantBit
• RtlFindLongestRunClear
• RtlFindMessage
• RtlFindMostSignificantBit
• RtlFindNextForwardRunClear
• RtlFindRange
• RtlFindSetBits
• RtlFindSetBitsAndClear
• RtlFindUnicodePrefix
• RtlFormatCurrentUserKeyPath
• RtlFreeAnsiString
• RtlFreeHeap
• RtlFreeOemString
• RtlFreeRangeList
• RtlFreeUnicodeString
• RtlGUIDFromString
• RtlGenerate8dot3Name
• RtlGetAce
• RtlGetCallersAddress
• RtlGetCompressionWorkSpaceSize
• RtlGetDaclSecurityDescriptor
• RtlGetDefaultCodePage
• RtlGetElementGenericTable
• RtlGetElementGenericTableAvl
• RtlGetFirstRange
• RtlGetGroupSecurityDescriptor
• RtlGetNextRange
• RtlGetNtGlobalFlags
• RtlGetOwnerSecurityDescriptor
• RtlGetSaclSecurityDescriptor
• RtlGetSetBootStatusData
• RtlGetVersion
• RtlHashUnicodeString
• RtlImageDirectoryEntryToData
• RtlImageNtHeader
• RtlInitAnsiString
• RtlInitCodePageTable
• RtlInitString
• RtlInitUnicodeString
• RtlInitializeBitMap
• RtlInitializeGenericTable
• RtlInitializeGenericTableAvl
• RtlInitializeRangeList
• RtlInitializeSid
• RtlInitializeUnicodePrefix
• RtlInsertElementGenericTable
• RtlInsertElementGenericTableAvl
• RtlInsertElementGenericTableFull
• RtlInsertElementGenericTableFullAvl
• RtlInsertUnicodePrefix
• RtlInt64ToUnicodeString
• RtlIntegerToChar
• RtlIntegerToUnicode
• RtlIntegerToUnicodeString
• RtlInvertRangeList
• RtlIpv4AddressToStringA
• RtlIpv4AddressToStringW
• RtlIpv4StringToAddressA
• RtlIpv4StringToAddressW
• RtlIpv6AddressToStringA
• RtlIpv6AddressToStringW
• RtlIpv6StringToAddressA
• RtlIpv6StringToAddressW
• RtlIsGenericTableEmpty
• RtlIsGenericTableEmptyAvl
• RtlIsNameLegalDOS8Dot3
• RtlIsRangeAvailable
• RtlIsValidOemCharacter
• RtlLargeIntegerAdd
• RtlLargeIntegerArithmeticShift
• RtlLargeIntegerDivide
• RtlLargeIntegerNegate
• RtlLargeIntegerShiftLeft
• RtlLargeIntegerShiftRight
• RtlLargeIntegerSubtract
• RtlLengthRequiredSid
• RtlLengthSecurityDescriptor
• RtlLengthSid
• RtlLockBootStatusData
• RtlLookupAtomInAtomTable
• RtlLookupElementGenericTable
• RtlLookupElementGenericTableAvl
• RtlLookupElementGenericTableFull
• RtlLookupElementGenericTableFullAvl
• RtlMapGenericMask
• RtlMapSecurityErrorToNtStatus
• RtlMergeRangeLists
• RtlMoveMemory
• RtlMultiByteToUnicodeN
• RtlMultiByteToUnicodeSize
• RtlNextUnicodePrefix
• RtlNtStatusToDosError
• RtlNtStatusToDosErrorNoTeb
• RtlNumberGenericTableElements
• RtlNumberGenericTableElementsAvl
• RtlNumberOfClearBits
• RtlNumberOfSetBits
• RtlOemStringToCountedUnicodeString
• RtlOemStringToUnicodeSize
• RtlOemStringToUnicodeString
• RtlOemToUnicodeN
• RtlPinAtomInAtomTable
• RtlPrefetchMemoryNonTemporal
• RtlPrefixString
• RtlPrefixUnicodeString
• RtlQueryAtomInAtomTable
• RtlQueryRegistryValues
• RtlQueryTimeZoneInformation
• RtlRaiseException
• RtlRandom
• RtlRandomEx
• RtlRealPredecessor
• RtlRealSuccessor
• RtlRemoveUnicodePrefix
• RtlReserveChunk
• RtlSecondsSince1970ToTime
• RtlSecondsSince1980ToTime
• RtlSelfRelativeToAbsoluteSD
• RtlSelfRelativeToAbsoluteSD2
• RtlSetAllBits
• RtlSetBit
• RtlSetBits
• RtlSetDaclSecurityDescriptor
• RtlSetGroupSecurityDescriptor
• RtlSetOwnerSecurityDescriptor
• RtlSetSaclSecurityDescriptor
• RtlSetTimeZoneInformation
• RtlSizeHeap
• RtlSplay
• RtlStringFromGUID
• RtlSubAuthorityCountSid
• RtlSubAuthoritySid
• RtlSubtreePredecessor
• RtlSubtreeSuccessor
• RtlTestBit
• RtlTimeFieldsToTime
• RtlTimeToElapsedTimeFields
• RtlTimeToSecondsSince1970
• RtlTimeToSecondsSince1980
• RtlTimeToTimeFields
• RtlTraceDatabaseAdd
• RtlTraceDatabaseCreate
• RtlTraceDatabaseDestroy
• RtlTraceDatabaseEnumerate
• RtlTraceDatabaseFind
• RtlTraceDatabaseLock
• RtlTraceDatabaseUnlock
• RtlTraceDatabaseValidate
• RtlUlongByteSwap
• RtlUlonglongByteSwap
• RtlUnicodeStringToAnsiSize
• RtlUnicodeStringToAnsiString
• RtlUnicodeStringToCountedOemString
• RtlUnicodeStringToInteger
• RtlUnicodeStringToOemSize
• RtlUnicodeStringToOemString
• RtlUnicodeToCustomCPN
• RtlUnicodeToMultiByteN
• RtlUnicodeToMultiByteSize
• RtlUnicodeToOemN
• RtlUnlockBootStatusData
• RtlUnwind
• RtlUpcaseUnicodeChar
• RtlUpcaseUnicodeString
• RtlUpcaseUnicodeStringToAnsiString
• RtlUpcaseUnicodeStringToCountedOemString
• RtlUpcaseUnicodeStringToOemString
• RtlUpcaseUnicodeToCustomCPN
• RtlUpcaseUnicodeToMultiByteN
• RtlUpcaseUnicodeToOemN
• RtlUpperChar
• RtlUpperString
• RtlUshortByteSwap
• RtlValidRelativeSecurityDescriptor
• RtlValidSecurityDescriptor
• RtlValidSid
• RtlVerifyVersionInfo
• RtlVolumeDeviceToDosName
• RtlWalkFrameChain
• RtlWriteRegistryValue
• RtlZeroHeap
• RtlZeroMemory
• RtlxAnsiStringToUnicodeSize
• RtlxOemStringToUnicodeSize
• RtlxUnicodeStringToAnsiSize
• RtlxUnicodeStringToOemSize
• SeAccessCheck
• SeAppendPrivileges
• SeAssignSecurity
• SeAssignSecurityEx
• SeAuditHardLinkCreation
• SeAuditingFileEvents
• SeAuditingFileOrGlobalEvents
• SeAuditingHardLinkEvents
• SeCaptureSecurityDescriptor
• SeCaptureSubjectContext
• SeCloseObjectAuditAlarm
• SeCreateAccessState
• SeCreateClientSecurity
• SeCreateClientSecurityFromSubjectContext
• SeDeassignSecurity
• SeDeleteAccessState
• SeDeleteObjectAuditAlarm
• SeExports
• SeFilterToken
• SeFreePrivileges
• SeImpersonateClient
• SeImpersonateClientEx
• SeLockSubjectContext
• SeMarkLogonSessionForTerminationNotification
• SeOpenObjectAuditAlarm
• SeOpenObjectForDeleteAuditAlarm
• SePrivilegeCheck
• SePrivilegeObjectAuditAlarm
• SePublicDefaultDacl
• SeQueryAuthenticationIdToken
• SeQueryInformationToken
• SeQuerySecurityDescriptorInfo
• SeQuerySessionIdToken
• SeRegisterLogonSessionTerminatedRoutine
• SeReleaseSecurityDescriptor
• SeReleaseSubjectContext
• SeSetAccessStateGenericMapping
• SeSetSecurityDescriptorInfo
• SeSetSecurityDescriptorInfoEx
• SeSinglePrivilegeCheck
• SeSystemDefaultDacl
• SeTokenImpersonationLevel
• SeTokenIsAdmin
• SeTokenIsRestricted
• SeTokenObjectType
• SeTokenType
• SeUnlockSubjectContext
• SeUnregisterLogonSessionTerminatedRoutine
• SeValidSecurityDescriptor
• VerSetConditionMask
• VfFailDeviceNode
• VfFailDriver
• VfFailSystemBIOS
• VfIsVerificationEnabled
• WRITE_REGISTER_BUFFER_UCHAR
• WRITE_REGISTER_BUFFER_ULONG
• WRITE_REGISTER_BUFFER_USHORT
• WRITE_REGISTER_UCHAR
• WRITE_REGISTER_ULONG
• WRITE_REGISTER_USHORT
• WmiFlushTrace
• WmiGetClock
• WmiQueryTrace
• WmiQueryTraceInformation
• WmiStartTrace
• WmiStopTrace
• WmiTraceMessage
• WmiTraceMessageVa
• WmiUpdateTrace
• XIPDispatch
• ZwAccessCheckAndAuditAlarm
• ZwAddBootEntry
• ZwAdjustPrivilegesToken
• ZwAlertThread
• ZwAllocateVirtualMemory
• ZwAssignProcessToJobObject
• ZwCancelIoFile
• ZwCancelTimer
• ZwClearEvent
• ZwClose
• ZwCloseObjectAuditAlarm
• ZwConnectPort
• ZwCreateDirectoryObject
• ZwCreateEvent
• ZwCreateFile
• ZwCreateJobObject
• ZwCreateKey
• ZwCreateSection
• ZwCreateSymbolicLinkObject
• ZwCreateTimer
• ZwDeleteBootEntry
• ZwDeleteFile
• ZwDeleteKey
• ZwDeleteValueKey
• ZwDeviceIoControlFile
• ZwDisplayString
• ZwDuplicateObject
• ZwDuplicateToken
• ZwEnumerateBootEntries
• ZwEnumerateKey
• ZwEnumerateValueKey
• ZwFlushInstructionCache
• ZwFlushKey
• ZwFlushVirtualMemory
• ZwFreeVirtualMemory
• ZwFsControlFile
• ZwInitiatePowerAction
• ZwIsProcessInJob
• ZwLoadDriver
• ZwLoadKey
• ZwMakeTemporaryObject
• ZwMapViewOfSection
• ZwNotifyChangeKey
• ZwOpenDirectoryObject
• ZwOpenEvent
• ZwOpenFile
• ZwOpenJobObject
• ZwOpenKey
• ZwOpenProcess
• ZwOpenProcessToken
• ZwOpenProcessTokenEx
• ZwOpenSection
• ZwOpenSymbolicLinkObject
• ZwOpenThread
• ZwOpenThreadToken
• ZwOpenThreadTokenEx
• ZwOpenTimer
• ZwPowerInformation
• ZwPulseEvent
• ZwQueryBootEntryOrder
• ZwQueryBootOptions
• ZwQueryDefaultLocale
• ZwQueryDefaultUILanguage
• ZwQueryDirectoryFile
• ZwQueryDirectoryObject
• ZwQueryEaFile
• ZwQueryFullAttributesFile
• ZwQueryInformationFile
• ZwQueryInformationJobObject
• ZwQueryInformationProcess
• ZwQueryInformationThread
• ZwQueryInformationToken
• ZwQueryInstallUILanguage
• ZwQueryKey
• ZwQueryObject
• ZwQuerySection
• ZwQuerySecurityObject
• ZwQuerySymbolicLinkObject
• ZwQuerySystemInformation
• ZwQueryValueKey
• ZwQueryVolumeInformationFile
• ZwReadFile
• ZwReplaceKey
• ZwRequestWaitReplyPort
• ZwResetEvent
• ZwRestoreKey
• ZwSaveKey
• ZwSaveKeyEx
• ZwSetBootEntryOrder
• ZwSetBootOptions
• ZwSetDefaultLocale
• ZwSetDefaultUILanguage
• ZwSetEaFile
• ZwSetEvent
• ZwSetInformationFile
• ZwSetInformationJobObject
• ZwSetInformationObject
• ZwSetInformationProcess
• ZwSetInformationThread
• ZwSetSecurityObject
• ZwSetSystemInformation
• ZwSetSystemTime
• ZwSetTimer
• ZwSetValueKey
• ZwSetVolumeInformationFile
• ZwTerminateJobObject
• ZwTerminateProcess
• ZwTranslateFilePath
• ZwUnloadDriver
• ZwUnloadKey
• ZwUnmapViewOfSection
• ZwWaitForMultipleObjects
• ZwWaitForSingleObject
• ZwWriteFile
• ZwYieldExecution
• _CIcos
• _CIsin
• _CIsqrt
• _abnormal_termination
• _alldiv
• _alldvrm
• _allmul
• _alloca_probe
• _allrem
• _allshl
• _allshr
• _aulldiv
• _aulldvrm
• _aullrem
• _aullshr
• _except_handler2
• _except_handler3
• _global_unwind2
• _itoa
• _itow
• _local_unwind2
• _purecall
• _snprintf
• _snwprintf
• _stricmp
• _strlwr
• _strnicmp
• _strnset
• _strrev
• _strset
• _strupr
• _vsnprintf
• _vsnwprintf
• _wcsicmp
• _wcslwr
• _wcsnicmp
• _wcsnset
• _wcsrev
• _wcsupr
• atoi
• atol
• isdigit
• islower
• isprint
• isspace
• isupper
• isxdigit
• mbstowcs
• mbtowc
• memchr
• memcpy
• memmove
• memset
• qsort
• rand
• sprintf
• srand
• strcat
• strchr
• strcmp
• strcpy
• strlen
• strncat
• strncmp
• strncpy
• strrchr
• strspn
• strstr
• swprintf
• tolower
• toupper
• towlower
• towupper
• vDbgPrintEx
• vDbgPrintExWithPrefix
• vsprintf
• wcscat
• wcschr
• wcscmp
• wcscpy
• wcscspn
• wcslen
• wcsncat
• wcsncmp
• wcsncpy
• wcsrchr
• wcsspn
• wcsstr
• wcstombs
• wctomb