; ; Generated from: ntoskrnl.exe ; Size file: 0x7db598 (8238488) ; Format: PE ; Size of image: 0x89e000 (9035776) ; Architecture: 7 ; Timestamp: 0x5af608ef - 2018-05-11T21:19:43 ; #1 #2 #3 #4 #5 AlpcCreateSecurityContext AlpcGetHeaderSize AlpcGetMessageAttribute AlpcInitializeMessageAttribute BgkDisplayCharacter BgkGetConsoleState BgkGetCursorState BgkSetCursor CcAddDirtyPagesToExternalCache CcAsyncCopyRead CcCanIWrite CcCoherencyFlushAndPurgeCache CcCopyRead CcCopyReadEx CcCopyWrite CcCopyWriteEx CcCopyWriteWontFlush CcDeductDirtyPagesFromExternalCache CcDeferWrite CcFastCopyRead CcFastCopyWrite CcFastMdlReadWait CcFlushCache CcFlushCacheToLsn CcGetCachedDirtyPageCountForFile CcGetDirtyPages CcGetFileObjectFromBcb CcGetFileObjectFromSectionPtrs CcGetFileObjectFromSectionPtrsRef CcGetFlushedValidData CcGetLsnForFileObject CcGetNumberOfMappedPages CcInitializeCacheMap CcInitializeCacheMapEx CcIsThereDirtyData CcIsThereDirtyDataEx CcIsThereDirtyLoggedPages CcMapData CcMdlRead CcMdlReadComplete CcMdlWriteAbort CcMdlWriteComplete CcPinMappedData CcPinRead CcPrepareMdlWrite CcPreparePinWrite CcPurgeCacheSection CcRegisterExternalCache CcRemapBcb CcRepinBcb CcScheduleReadAhead CcScheduleReadAheadEx CcSetAdditionalCacheAttributes CcSetAdditionalCacheAttributesEx CcSetBcbOwnerPointer CcSetDirtyPageThreshold CcSetDirtyPinnedData CcSetFileSizes CcSetFileSizesEx CcSetLogHandleForFile CcSetLogHandleForFileEx CcSetLoggedDataThreshold CcSetParallelFlushFile CcSetReadAheadGranularity CcSetReadAheadGranularityEx CcTestControl CcUninitializeCacheMap CcUnmapFileOffsetFromSystemCache CcUnpinData CcUnpinDataForThread CcUnpinRepinnedBcb CcUnregisterExternalCache CcWaitForCurrentLazyWriterActivity CcZeroData CcZeroDataOnDisk CmCallbackGetKeyObjectID CmCallbackGetKeyObjectIDEx CmCallbackReleaseKeyObjectIDEx CmGetBoundTransaction CmGetCallbackVersion CmKeyObjectType CmRegisterCallback CmRegisterCallbackEx CmSetCallbackObjectContext CmUnRegisterCallback DbgBreakPoint DbgBreakPointWithStatus DbgCommandString DbgLoadImageSymbols DbgPrint DbgPrintEx DbgPrintReturnControlC DbgPrompt DbgQueryDebugFilterState DbgSetDebugFilterState DbgSetDebugPrintCallback DbgkLkmdRegisterCallback DbgkLkmdUnregisterCallback DbgkWerCaptureLiveKernelDump EmClientQueryRuleState EmClientRuleDeregisterNotification EmClientRuleEvaluate EmClientRuleRegisterNotification EmProviderDeregister EmProviderDeregisterEntry EmProviderRegister EmProviderRegisterEntry EmpProviderRegister EtwActivityIdControl EtwEnableTrace EtwEventEnabled EtwProviderEnabled EtwRegister EtwRegisterClassicProvider EtwSendTraceBuffer EtwSetInformation EtwTelemetryCoverageReport EtwUnregister EtwWrite EtwWriteEndScenario EtwWriteEx EtwWriteStartScenario EtwWriteString EtwWriteTransfer ExAcquireAutoExpandPushLockExclusive ExAcquireAutoExpandPushLockShared ExAcquireCacheAwarePushLockExclusive ExAcquireCacheAwarePushLockExclusiveEx ExAcquireCacheAwarePushLockSharedEx ExAcquireFastMutex ExAcquireFastMutexUnsafe ExAcquireFastResourceExclusive ExAcquireFastResourceShared ExAcquireFastResourceSharedStarveExclusive ExAcquirePushLockExclusiveEx ExAcquirePushLockSharedEx ExAcquireResourceExclusiveLite ExAcquireResourceSharedLite ExAcquireRundownProtection ExAcquireRundownProtectionCacheAware ExAcquireRundownProtectionCacheAwareEx ExAcquireRundownProtectionEx ExAcquireSharedStarveExclusive ExAcquireSharedWaitForExclusive ExAcquireSpinLockExclusive ExAcquireSpinLockExclusiveAtDpcLevel ExAcquireSpinLockShared ExAcquireSpinLockSharedAtDpcLevel ExAllocateAutoExpandPushLock ExAllocateCacheAwarePushLock ExAllocateCacheAwareRundownProtection ExAllocatePool ExAllocatePoolWithQuota ExAllocatePoolWithQuotaTag ExAllocatePoolWithTag ExAllocatePoolWithTagPriority ExAllocateTimer ExBlockOnAddressPushLock ExBlockPushLock ExCancelTimer ExCleanupAutoExpandPushLock ExCleanupRundownProtectionCacheAware ExCompositionObjectType ExConvertExclusiveToSharedLite ExConvertFastResourceExclusiveToShared ExConvertPushLockExclusiveToShared ExCoreMessagingObjectType ExCreateCallback ExDeleteFastResource ExDeleteLookasideListEx ExDeleteNPagedLookasideList ExDeletePagedLookasideList ExDeleteResourceLite ExDeleteTimer ExDesktopObjectType ExDisableResourceBoostLite ExDisownFastResource ExEnterCriticalRegionAndAcquireFastMutexUnsafe ExEnterCriticalRegionAndAcquireResourceExclusive ExEnterCriticalRegionAndAcquireResourceShared ExEnterCriticalRegionAndAcquireSharedWaitForExclusive ExEnterPriorityRegionAndAcquireResourceExclusive ExEnterPriorityRegionAndAcquireResourceShared ExEnumHandleTable ExEnumerateSystemFirmwareTables ExEventObjectType ExExtendZone ExFetchLicenseData ExFlushLookasideListEx ExFreeAutoExpandPushLock ExFreeCacheAwarePushLock ExFreeCacheAwareRundownProtection ExFreePool ExFreePoolWithTag ExGetCurrentProcessorCounts ExGetCurrentProcessorCpuUsage ExGetExclusiveWaiterCount ExGetFirmwareEnvironmentVariable ExGetFirmwareType ExGetLicenseTamperState ExGetPreviousMode ExGetSharedWaiterCount ExGetSystemFirmwareTable ExInitializeAutoExpandPushLock ExInitializeFastOwnerEntry ExInitializeFastResource ExInitializeLookasideListEx ExInitializeNPagedLookasideList ExInitializePagedLookasideList ExInitializePushLock ExInitializeResourceLite ExInitializeRundownProtection ExInitializeRundownProtectionCacheAware ExInitializeRundownProtectionCacheAwareEx ExInitializeZone ExInterlockedAddLargeInteger ExInterlockedAddUlong ExInterlockedExtendZone ExInterlockedInsertHeadList ExInterlockedInsertTailList ExInterlockedPopEntryList ExInterlockedPushEntryList ExInterlockedRemoveHeadList ExIsFastResourceContended ExIsFastResourceHeld ExIsFastResourceHeldExclusive ExIsManufacturingModeEnabled ExIsProcessorFeaturePresent ExIsResourceAcquiredExclusiveLite ExIsResourceAcquiredSharedLite ExIsSoftBoot ExLocalTimeToSystemTime ExNotifyBootDeviceRemoval ExNotifyCallback ExQueryDepthSList ExQueryFastCacheDevLicense ExQueryPoolBlockSize ExQueryTimerResolution ExQueryWnfStateData ExQueueWorkItem ExRaiseAccessViolation ExRaiseDatatypeMisalignment ExRaiseException ExRaiseHardError ExRaiseStatus ExRawInputManagerObjectType ExReInitializeRundownProtection ExReInitializeRundownProtectionCacheAware ExRealTimeIsUniversal ExRegisterBootDevice ExRegisterCallback ExRegisterExtension ExReinitializeFastResource ExReinitializeResourceLite ExReleaseAutoExpandPushLockExclusive ExReleaseAutoExpandPushLockShared ExReleaseCacheAwarePushLockExclusive ExReleaseCacheAwarePushLockExclusiveEx ExReleaseCacheAwarePushLockSharedEx ExReleaseDisownedFastResource ExReleaseDisownedFastResourceExclusive ExReleaseDisownedFastResourceShared ExReleaseFastMutex ExReleaseFastMutexUnsafe ExReleaseFastMutexUnsafeAndLeaveCriticalRegion ExReleaseFastResource ExReleaseFastResourceExclusive ExReleaseFastResourceShared ExReleasePushLockEx ExReleasePushLockExclusiveEx ExReleasePushLockSharedEx ExReleaseResourceAndLeaveCriticalRegion ExReleaseResourceAndLeavePriorityRegion ExReleaseResourceForThreadLite ExReleaseResourceLite ExReleaseRundownProtection ExReleaseRundownProtectionCacheAware ExReleaseRundownProtectionCacheAwareEx ExReleaseRundownProtectionEx ExReleaseSpinLockExclusive ExReleaseSpinLockExclusiveFromDpcLevel ExReleaseSpinLockShared ExReleaseSpinLockSharedFromDpcLevel ExRundownCompleted ExRundownCompletedCacheAware ExSemaphoreObjectType ExSetFirmwareEnvironmentVariable ExSetLicenseTamperState ExSetResourceOwnerPointer ExSetResourceOwnerPointerEx ExSetTimer ExSetTimerResolution ExShareAddressSpaceWithDevice ExSizeOfAutoExpandPushLock ExSizeOfRundownProtectionCacheAware ExSubscribeWnfStateChange ExSvmBeginDeviceReset ExSvmFinalizeDeviceReset ExSystemExceptionFilter ExSystemTimeToLocalTime ExTimedWaitForUnblockPushLock ExTimerObjectType ExTryAcquireAutoExpandPushLockExclusive ExTryAcquireAutoExpandPushLockShared ExTryAcquireCacheAwarePushLockExclusiveEx ExTryAcquireCacheAwarePushLockSharedEx ExTryAcquirePushLockExclusiveEx ExTryAcquirePushLockSharedEx ExTryAcquireSpinLockExclusiveAtDpcLevel ExTryAcquireSpinLockSharedAtDpcLevel ExTryConvertPushLockSharedToExclusiveEx ExTryConvertSharedSpinLockExclusive ExTryQueueWorkItem ExTryToAcquireFastMutex ExTryToAcquireResourceExclusiveLite ExTryToConvertFastResourceSharedToExclusive ExUnblockOnAddressPushLockEx ExUnblockPushLockEx ExUnregisterCallback ExUnregisterExtension ExUnsubscribeWnfStateChange ExUpdateLicenseData ExUuidCreate ExVerifySuite ExWaitForRundownProtectionRelease ExWaitForRundownProtectionReleaseCacheAware ExWaitForUnblockPushLock ExWindowStationObjectType ExfAcquirePushLockExclusive ExfAcquirePushLockShared ExfReleasePushLock ExfReleasePushLockExclusive ExfReleasePushLockShared ExfTryAcquirePushLockShared ExfTryToWakePushLock ExfUnblockPushLock ExpInterlockedFlushSList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList FirstEntrySList FsRtlAcknowledgeEcp FsRtlAcquireEofLock FsRtlAcquireFileExclusive FsRtlAcquireHeaderMutex FsRtlAddBaseMcbEntry FsRtlAddBaseMcbEntryEx FsRtlAddLargeMcbEntry FsRtlAddMcbEntry FsRtlAddToTunnelCache FsRtlAllocateExtraCreateParameter FsRtlAllocateExtraCreateParameterFromLookasideList FsRtlAllocateExtraCreateParameterList FsRtlAllocateFileLock FsRtlAllocatePool FsRtlAllocatePoolWithQuota FsRtlAllocatePoolWithQuotaTag FsRtlAllocatePoolWithTag FsRtlAllocateResource FsRtlAreNamesEqual FsRtlAreThereCurrentOrInProgressFileLocks FsRtlAreThereWaitingFileLocks FsRtlAreVolumeStartupApplicationsComplete FsRtlBalanceReads FsRtlCancellableWaitForMultipleObjects FsRtlCancellableWaitForSingleObject FsRtlChangeBackingFileObject FsRtlCheckLockForOplockRequest FsRtlCheckLockForReadAccess FsRtlCheckLockForWriteAccess FsRtlCheckOplock FsRtlCheckOplockEx FsRtlCheckUpperOplock FsRtlCopyRead FsRtlCopyWrite FsRtlCreateSectionForDataScan FsRtlCurrentBatchOplock FsRtlCurrentOplock FsRtlCurrentOplockH FsRtlDeleteExtraCreateParameterLookasideList FsRtlDeleteKeyFromTunnelCache FsRtlDeleteTunnelCache FsRtlDeregisterUncProvider FsRtlDismountComplete FsRtlDissectDbcs FsRtlDissectName FsRtlDoesDbcsContainWildCards FsRtlDoesNameContainWildCards FsRtlFastCheckLockForRead FsRtlFastCheckLockForWrite FsRtlFastUnlockAll FsRtlFastUnlockAllByKey FsRtlFastUnlockSingle FsRtlFindExtraCreateParameter FsRtlFindInTunnelCache FsRtlFreeExtraCreateParameter FsRtlFreeExtraCreateParameterList FsRtlFreeFileLock FsRtlGetEcpListFromIrp FsRtlGetFileNameInformation FsRtlGetFileSize FsRtlGetIoAtEof FsRtlGetNextBaseMcbEntry FsRtlGetNextExtraCreateParameter FsRtlGetNextFileLock FsRtlGetNextLargeMcbEntry FsRtlGetNextMcbEntry FsRtlGetSectorSizeInformation FsRtlGetSupportedFeatures FsRtlGetVirtualDiskNestingLevel FsRtlHeatInit FsRtlHeatLogIo FsRtlHeatLogTierMove FsRtlHeatUninit FsRtlIncrementCcFastMdlReadWait FsRtlIncrementCcFastReadNoWait FsRtlIncrementCcFastReadNotPossible FsRtlIncrementCcFastReadResourceMiss FsRtlIncrementCcFastReadWait FsRtlInitExtraCreateParameterLookasideList FsRtlInitializeBaseMcb FsRtlInitializeBaseMcbEx FsRtlInitializeEofLock FsRtlInitializeExtraCreateParameter FsRtlInitializeExtraCreateParameterList FsRtlInitializeFileLock FsRtlInitializeLargeMcb FsRtlInitializeMcb FsRtlInitializeOplock FsRtlInitializeTunnelCache FsRtlInsertExtraCreateParameter FsRtlInsertPerFileContext FsRtlInsertPerFileObjectContext FsRtlInsertPerStreamContext FsRtlInsertReservedPerFileContext FsRtlInsertReservedPerStreamContext FsRtlIsDaxVolume FsRtlIsDbcsInExpression FsRtlIsEcpAcknowledged FsRtlIsEcpFromUserMode FsRtlIsExtentDangling FsRtlIsFatDbcsLegal FsRtlIsHpfsDbcsLegal FsRtlIsMobileOS FsRtlIsNameInExpression FsRtlIsNonEmptyDirectoryReparsePointAllowed FsRtlIsNtstatusExpected FsRtlIsPagingFile FsRtlIsSystemPagingFile FsRtlIsTotalDeviceFailure FsRtlIssueDeviceIoControl FsRtlKernelFsControlFile FsRtlLegalAnsiCharacterArray FsRtlLogCcFlushError FsRtlLookupBaseMcbEntry FsRtlLookupLargeMcbEntry FsRtlLookupLastBaseMcbEntry FsRtlLookupLastBaseMcbEntryAndIndex FsRtlLookupLastLargeMcbEntry FsRtlLookupLastLargeMcbEntryAndIndex FsRtlLookupLastMcbEntry FsRtlLookupMcbEntry FsRtlLookupPerFileContext FsRtlLookupPerFileObjectContext FsRtlLookupPerStreamContextInternal FsRtlLookupReservedPerFileContext FsRtlLookupReservedPerStreamContext FsRtlMdlRead FsRtlMdlReadComplete FsRtlMdlReadCompleteDev FsRtlMdlReadDev FsRtlMdlReadEx FsRtlMdlWriteComplete FsRtlMdlWriteCompleteDev FsRtlMupGetProviderIdFromName FsRtlMupGetProviderInfoFromFileObject FsRtlNormalizeNtstatus FsRtlNotifyChangeDirectory FsRtlNotifyCleanup FsRtlNotifyCleanupAll FsRtlNotifyFilterChangeDirectory FsRtlNotifyFilterChangeDirectoryLite FsRtlNotifyFilterReportChange FsRtlNotifyFilterReportChangeLite FsRtlNotifyFilterReportChangeLiteEx FsRtlNotifyFullChangeDirectory FsRtlNotifyFullReportChange FsRtlNotifyInitializeSync FsRtlNotifyReportChange FsRtlNotifyUninitializeSync FsRtlNotifyVolumeEvent FsRtlNotifyVolumeEventEx FsRtlNumberOfRunsInBaseMcb FsRtlNumberOfRunsInLargeMcb FsRtlNumberOfRunsInMcb FsRtlOplockBreakH FsRtlOplockBreakToNone FsRtlOplockBreakToNoneEx FsRtlOplockFsctrl FsRtlOplockFsctrlEx FsRtlOplockIsFastIoPossible FsRtlOplockIsSharedRequest FsRtlOplockKeysEqual FsRtlPostPagingFileStackOverflow FsRtlPostStackOverflow FsRtlPrepareMdlWrite FsRtlPrepareMdlWriteDev FsRtlPrepareMdlWriteEx FsRtlPrepareToReuseEcp FsRtlPrivateLock FsRtlProcessFileLock FsRtlQueryCachedVdl FsRtlQueryInformationFile FsRtlQueryKernelEaFile FsRtlQueryMaximumVirtualDiskNestingLevel FsRtlRegisterFileSystemFilterCallbacks FsRtlRegisterFltMgrCalls FsRtlRegisterMupCalls FsRtlRegisterUncProvider FsRtlRegisterUncProviderEx FsRtlRegisterUncProviderEx2 FsRtlReleaseEofLock FsRtlReleaseFile FsRtlReleaseFileNameInformation FsRtlReleaseHeaderMutex FsRtlRemoveBaseMcbEntry FsRtlRemoveDotsFromPath FsRtlRemoveExtraCreateParameter FsRtlRemoveLargeMcbEntry FsRtlRemoveMcbEntry FsRtlRemovePerFileContext FsRtlRemovePerFileObjectContext FsRtlRemovePerStreamContext FsRtlRemoveReservedPerFileContext FsRtlRemoveReservedPerStreamContext FsRtlResetBaseMcb FsRtlResetLargeMcb FsRtlSendModernAppTermination FsRtlSetDriverBacking FsRtlSetEcpListIntoIrp FsRtlSetKernelEaFile FsRtlSplitBaseMcb FsRtlSplitLargeMcb FsRtlSyncVolumes FsRtlTeardownPerFileContexts FsRtlTeardownPerStreamContexts FsRtlTruncateBaseMcb FsRtlTruncateLargeMcb FsRtlTruncateMcb FsRtlTryToAcquireHeaderMutex FsRtlUninitializeBaseMcb FsRtlUninitializeFileLock FsRtlUninitializeLargeMcb FsRtlUninitializeMcb FsRtlUninitializeOplock FsRtlUpdateDiskCounters FsRtlUpperOplockFsctrl FsRtlValidateReparsePointBuffer FsRtlVolumeDeviceToCorrelationId HalDispatchTable HalExamineMBR HalFlushIoBuffers HalPrivateDispatchTable HeadlessDispatch HviGetDebugDeviceOptions HviGetEnlightenmentInformation HviGetHardwareFeatures HviGetHypervisorFeatures HviGetHypervisorInterface HviGetHypervisorVendorAndMaxFunction HviGetHypervisorVersion HviGetImplementationLimits HviIsAnyHypervisorPresent HviIsHypervisorMicrosoftCompatible HviIsHypervisorVendorMicrosoft HviIsIommuInUse HvlGetLpIndexFromApicId HvlInvokeHypercall HvlQueryActiveHypervisorProcessorCount HvlQueryActiveProcessors HvlQueryConnection HvlQueryHypervisorProcessorNodeNumber HvlQueryNumaDistance HvlQueryProcessorTopology HvlQueryProcessorTopologyCount HvlQueryProcessorTopologyEx HvlQueryProcessorTopologyHighestId HvlReadPerformanceStateCounters HvlRegisterInterruptCallback HvlRegisterWheaErrorNotification HvlUnregisterInterruptCallback HvlUnregisterWheaErrorNotification InbvAcquireDisplayOwnership InbvCheckDisplayOwnership InbvDisplayString InbvEnableBootDriver InbvEnableDisplayString InbvInstallDisplayStringFilter InbvIsBootDriverInstalled InbvNotifyDisplayOwnershipChange InbvNotifyDisplayOwnershipLost InbvResetDisplay InbvSetScrollRegion InbvSetTextColor InbvSetVirtualFrameBuffer InbvSolidColorFill InitSafeBootMode InitializeSListHead InterlockedPushListSList IoAcquireCancelSpinLock IoAcquireRemoveLockEx IoAcquireVpbSpinLock IoAdapterObjectType IoAdjustStackSizeForRedirection IoAllocateAdapterChannel IoAllocateController IoAllocateDriverObjectExtension IoAllocateErrorLogEntry IoAllocateIrp IoAllocateIrpEx IoAllocateMdl IoAllocateMiniCompletionPacket IoAllocateSfioStreamIdentifier IoAllocateWorkItem IoApplyPriorityInfoThread IoAssignResources IoAttachDevice IoAttachDeviceByPointer IoAttachDeviceToDeviceStack IoAttachDeviceToDeviceStackSafe IoBoostThreadIo IoBuildAsynchronousFsdRequest IoBuildDeviceIoControlRequest IoBuildPartialMdl IoBuildSynchronousFsdRequest IoCallDriver IoCancelFileOpen IoCancelIrp IoCheckDesiredAccess IoCheckEaBufferValidity IoCheckFunctionAccess IoCheckLinkShareAccess IoCheckQuerySetFileInformation IoCheckQuerySetVolumeInformation IoCheckQuotaBufferValidity IoCheckShareAccess IoCheckShareAccessEx IoCleanupIrp IoClearActivityIdThread IoClearFsTrackOffsetState IoClearIrpExtraCreateParameter IoCompleteRequest IoCompletionObjectType IoConnectInterrupt IoConnectInterruptEx IoConvertFileHandleToKernelHandle IoCopyDeviceObjectHint IoCreateArcName IoCreateController IoCreateDevice IoCreateDisk IoCreateDriver IoCreateFile IoCreateFileEx IoCreateFileSpecifyDeviceObjectHint IoCreateNotificationEvent IoCreateStreamFileObject IoCreateStreamFileObjectEx IoCreateStreamFileObjectEx2 IoCreateStreamFileObjectLite IoCreateSymbolicLink IoCreateSynchronizationEvent IoCreateSystemThread IoCreateUnprotectedSymbolicLink IoCsqInitialize IoCsqInitializeEx IoCsqInsertIrp IoCsqInsertIrpEx IoCsqRemoveIrp IoCsqRemoveNextIrp IoDecrementKeepAliveCount IoDeleteController IoDeleteDevice IoDeleteDriver IoDeleteSymbolicLink IoDetachDevice IoDeviceHandlerObjectSize IoDeviceHandlerObjectType IoDeviceObjectType IoDisconnectInterrupt IoDisconnectInterruptEx IoDriverObjectType IoDuplicateDependency IoEnqueueIrp IoEnumerateDeviceObjectList IoEnumerateRegisteredFiltersList IoFastQueryNetworkAttributes IoFileObjectType IoForwardAndCatchIrp IoForwardIrpSynchronously IoFreeController IoFreeErrorLogEntry IoFreeIrp IoFreeMdl IoFreeMiniCompletionPacket IoFreeSfioStreamIdentifier IoFreeWorkItem IoGetActivityIdIrp IoGetActivityIdThread IoGetAdapterCryptoEngineExtension IoGetAffinityInterrupt IoGetAttachedDevice IoGetAttachedDeviceReference IoGetBaseFileSystemDeviceObject IoGetBootDiskInformation IoGetBootDiskInformationLite IoGetConfigurationInformation IoGetContainerInformation IoGetCurrentProcess IoGetDeviceAttachmentBaseRef IoGetDeviceInterfaceAlias IoGetDeviceInterfacePropertyData IoGetDeviceInterfaces IoGetDeviceNumaNode IoGetDeviceObjectPointer IoGetDeviceProperty IoGetDevicePropertyData IoGetDeviceToVerify IoGetDiskDeviceObject IoGetDmaAdapter IoGetDriverObjectExtension IoGetFileObjectGenericMapping IoGetFsTrackOffsetState IoGetFsZeroingOffset IoGetGenericIrpExtension IoGetInitialStack IoGetInitiatorProcess IoGetIoAttributionHandle IoGetIoPriorityHint IoGetIrpExtraCreateParameter IoGetLowerDeviceObject IoGetOplockKeyContext IoGetOplockKeyContextEx IoGetPagingIoPriority IoGetRelatedDeviceObject IoGetRequestorProcess IoGetRequestorProcessId IoGetRequestorSessionId IoGetSfioStreamIdentifier IoGetSilo IoGetSiloParameters IoGetStackLimits IoGetSymlinkSupportInformation IoGetTopLevelIrp IoGetTransactionParameterBlock IoIncrementKeepAliveCount IoInitializeIrp IoInitializeIrpEx IoInitializeMiniCompletionPacket IoInitializeRemoveLockEx IoInitializeWorkItem IoInvalidateDeviceRelations IoInvalidateDeviceState IoIrpHasFsTrackOffsetExtensionType IoIs32bitProcess IoIsActivityTracingEnabled IoIsFileObjectIgnoringSharing IoIsFileOriginRemote IoIsInitiator32bitProcess IoIsOperationSynchronous IoIsSystemThread IoIsValidIrpStatus IoIsWdmVersionAvailable IoMakeAssociatedIrp IoMakeAssociatedIrpEx IoOpenDeviceInterfaceRegistryKey IoOpenDeviceRegistryKey IoPageRead IoPropagateActivityIdToThread IoPropagateIrpExtension IoPropagateIrpExtensionEx IoQueryDeviceDescription IoQueryFileDosDeviceName IoQueryFileInformation IoQueryFullDriverPath IoQueryInformationByName IoQueryInterface IoQueryVolumeInformation IoQueueThreadIrp IoQueueWorkItem IoQueueWorkItemEx IoQueueWorkItemToNode IoRaiseHardError IoRaiseInformationalHardError IoReadDiskSignature IoReadOperationCount IoReadPartitionTable IoReadPartitionTableEx IoReadTransferCount IoRecordIoAttribution IoRegisterBootDriverCallback IoRegisterBootDriverReinitialization IoRegisterContainerNotification IoRegisterDeviceInterface IoRegisterDriverReinitialization IoRegisterFileSystem IoRegisterFsRegistrationChange IoRegisterFsRegistrationChangeMountAware IoRegisterIoTracking IoRegisterLastChanceShutdownNotification IoRegisterPlugPlayNotification IoRegisterPriorityCallback IoRegisterShutdownNotification IoReleaseCancelSpinLock IoReleaseRemoveLockAndWaitEx IoReleaseRemoveLockEx IoReleaseVpbSpinLock IoRemoveLinkShareAccess IoRemoveShareAccess IoReplaceFileObjectName IoReplacePartitionUnit IoReportDetectedDevice IoReportHalResourceUsage IoReportInterruptActive IoReportInterruptInactive IoReportResourceForDetection IoReportResourceUsage IoReportRootDevice IoReportTargetDeviceChange IoReportTargetDeviceChangeAsynchronous IoRequestDeviceEject IoRequestDeviceEjectEx IoRequestDeviceRemovalForReset IoReserveDependency IoResolveDependency IoRetrievePriorityInfo IoReuseIrp IoSetActivityIdIrp IoSetActivityIdThread IoSetAdapterCryptoEngineExtension IoSetCompletionRoutineEx IoSetDependency IoSetDeviceInterfacePropertyData IoSetDeviceInterfaceState IoSetDevicePropertyData IoSetDeviceToVerify IoSetFileObjectIgnoreSharing IoSetFileOrigin IoSetFsTrackOffsetState IoSetFsZeroingOffset IoSetFsZeroingOffsetRequired IoSetGenericIrpExtension IoSetHardErrorOrVerifyDevice IoSetInformation IoSetIoAttributionIrp IoSetIoCompletion IoSetIoCompletionEx IoSetIoPriorityHint IoSetIoPriorityHintIntoFileObject IoSetIoPriorityHintIntoThread IoSetIrpExtraCreateParameter IoSetLinkShareAccess IoSetMasterIrpStatus IoSetPartitionInformation IoSetPartitionInformationEx IoSetShareAccess IoSetShareAccessEx IoSetStartIoAttributes IoSetSystemPartition IoSetThreadHardErrorMode IoSetTopLevelIrp IoSizeOfIrpEx IoSizeofGenericIrpExtension IoSizeofWorkItem IoStartNextPacket IoStartNextPacketByKey IoStartPacket IoStatisticsLock IoSteerInterrupt IoSynchronousCallDriver IoSynchronousPageWrite IoTestDependency IoThreadToProcess IoTransferActivityId IoTranslateBusAddress IoTryQueueWorkItem IoUninitializeWorkItem IoUnregisterBootDriverCallback IoUnregisterContainerNotification IoUnregisterFileSystem IoUnregisterFsRegistrationChange IoUnregisterIoTracking IoUnregisterPlugPlayNotification IoUnregisterPlugPlayNotificationEx IoUnregisterPriorityCallback IoUnregisterShutdownNotification IoUpdateLinkShareAccess IoUpdateShareAccess IoValidateDeviceIoControlAccess IoVerifyPartitionTable IoVerifyVolume IoVolumeDeviceNameToGuid IoVolumeDeviceNameToGuidPath IoVolumeDeviceToDosName IoVolumeDeviceToGuid IoVolumeDeviceToGuidPath IoWMIAllocateInstanceIds IoWMIDeviceObjectToInstanceName IoWMIDeviceObjectToProviderId IoWMIExecuteMethod IoWMIHandleToInstanceName IoWMIOpenBlock IoWMIQueryAllData IoWMIQueryAllDataMultiple IoWMIQuerySingleInstance IoWMIQuerySingleInstanceMultiple IoWMIRegistrationControl IoWMISetNotificationCallback IoWMISetSingleInstance IoWMISetSingleItem IoWMISuggestInstanceName IoWMIWriteEvent IoWithinStackLimits IoWriteErrorLogEntry IoWriteOperationCount IoWritePartitionTable IoWritePartitionTableEx IoWriteTransferCount IofCallDriver IofCompleteRequest KdAcquireDebuggerLock KdChangeOption KdDebuggerEnabled KdDebuggerNotPresent KdDeregisterPowerHandler KdDisableDebugger KdEnableDebugger KdEnteredDebugger KdEventLoggingEnabled KdGetDebugDevice KdLogDbgPrint KdPollBreakIn KdPowerTransition KdPowerTransitionEx KdRefreshDebuggerNotPresent KdRegisterPowerHandler KdReleaseDebuggerLock KdSetEventLoggingPresent KdSystemDebugControl KeAcquireGuardedMutex KeAcquireGuardedMutexUnsafe KeAcquireInStackQueuedSpinLock KeAcquireInStackQueuedSpinLockAtDpcLevel KeAcquireInStackQueuedSpinLockForDpc KeAcquireInterruptSpinLock KeAcquireQueuedSpinLock KeAcquireSpinLockAtDpcLevel KeAcquireSpinLockForDpc KeAcquireSpinLockRaiseToDpc KeAcquireSpinLockRaiseToSynch KeAddGroupAffinityEx KeAddProcessorAffinityEx KeAddProcessorGroupAffinity KeAddSystemServiceTable KeAlertThread KeAllocateCalloutStack KeAllocateCalloutStackEx KeAndAffinityEx KeAndGroupAffinityEx KeAreAllApcsDisabled KeAreApcsDisabled KeAttachProcess KeBugCheck KeBugCheckEx KeCancelTimer KeCancelTimer2 KeCapturePersistentThreadState KeCheckProcessorAffinityEx KeCheckProcessorGroupAffinity KeClearEvent KeClockInterruptNotify KeClockTimerPowerChange KeComplementAffinityEx KeConvertAuxiliaryCounterToPerformanceCounter KeConvertPerformanceCounterToAuxiliaryCounter KeCopyAffinityEx KeCountSetBitsAffinityEx KeCountSetBitsGroupAffinity KeDelayExecutionThread KeDeregisterBugCheckCallback KeDeregisterBugCheckReasonCallback KeDeregisterNmiCallback KeDeregisterProcessorChangeCallback KeDetachProcess KeDispatchSecondaryInterrupt KeEnterCriticalRegion KeEnterGuardedRegion KeEnterKernelDebugger KeEnumerateNextProcessor KeExpandKernelStackAndCallout KeExpandKernelStackAndCalloutEx KeFindConfigurationEntry KeFindConfigurationNextEntry KeFindFirstSetLeftAffinityEx KeFindFirstSetLeftGroupAffinity KeFindFirstSetRightAffinityEx KeFindFirstSetRightGroupAffinity KeFirstGroupAffinityEx KeFlushEntireTb KeFlushIoBuffers KeFlushQueuedDpcs KeFreeCalloutStack KeGenericCallDpc KeGetClockOwner KeGetClockTimerResolution KeGetCurrentNodeNumber KeGetCurrentProcessorNumberEx KeGetCurrentThread KeGetEffectiveIrql KeGetNextClockTickDuration KeGetProcessorIndexFromNumber KeGetProcessorNumberFromIndex KeGetRecommendedSharedDataAlignment KeHwPolicyLocateResource KeInitializeAffinityEx KeInitializeApc KeInitializeCrashDumpHeader KeInitializeDeviceQueue KeInitializeDpc KeInitializeEnumerationContext KeInitializeEnumerationContextFromAffinity KeInitializeEnumerationContextFromGroup KeInitializeEvent KeInitializeGuardedMutex KeInitializeInterrupt KeInitializeMutant KeInitializeMutex KeInitializeQueue KeInitializeSecondaryInterruptServices KeInitializeSemaphore KeInitializeSpinLock KeInitializeThreadedDpc KeInitializeTimer KeInitializeTimer2 KeInitializeTimerEx KeInsertByKeyDeviceQueue KeInsertDeviceQueue KeInsertHeadQueue KeInsertQueue KeInsertQueueApc KeInsertQueueDpc KeInterlockedClearProcessorAffinityEx KeInterlockedSetProcessorAffinityEx KeInvalidateRangeAllCaches KeIpiGenericCall KeIsAttachedProcess KeIsEmptyAffinityEx KeIsEqualAffinityEx KeIsExecutingDpc KeIsSingleGroupAffinityEx KeIsSubsetAffinityEx KeIsWaitListEmpty KeLeaveCriticalRegion KeLeaveGuardedRegion KeLoaderBlock KeNotifyProcessorFreezeSupported KeNumberProcessors KeOrAffinityEx KeProcessorGroupAffinity KeProfileInterruptWithSource KePulseEvent KeQueryActiveGroupCount KeQueryActiveProcessorAffinity KeQueryActiveProcessorCount KeQueryActiveProcessorCountEx KeQueryActiveProcessors KeQueryAuxiliaryCounterFrequency KeQueryDpcWatchdogInformation KeQueryEffectivePriorityThread KeQueryGroupAffinity KeQueryGroupAffinityEx KeQueryHardwareCounterConfiguration KeQueryHeteroCpuPolicyThread KeQueryHighestNodeNumber KeQueryInterruptTimePrecise KeQueryLogicalProcessorRelationship KeQueryMaximumGroupCount KeQueryMaximumProcessorCount KeQueryMaximumProcessorCountEx KeQueryNodeActiveAffinity KeQueryNodeMaximumProcessorCount KeQueryPrcbAddress KeQueryPriorityThread KeQueryRuntimeThread KeQuerySystemTimePrecise KeQueryTimeIncrement KeQueryTotalCycleTimeThread KeQueryUnbiasedInterruptTime KeQueryUnbiasedInterruptTimePrecise KeRaiseUserException KeReadStateEvent KeReadStateMutant KeReadStateMutex KeReadStateQueue KeReadStateSemaphore KeReadStateTimer KeRegisterBugCheckCallback KeRegisterBugCheckReasonCallback KeRegisterNmiCallback KeRegisterProcessorChangeCallback KeReleaseGuardedMutex KeReleaseGuardedMutexUnsafe KeReleaseInStackQueuedSpinLock KeReleaseInStackQueuedSpinLockForDpc KeReleaseInStackQueuedSpinLockFromDpcLevel KeReleaseInterruptSpinLock KeReleaseMutant KeReleaseMutex KeReleaseQueuedSpinLock KeReleaseSemaphore KeReleaseSpinLock KeReleaseSpinLockForDpc KeReleaseSpinLockFromDpcLevel KeRemoveByKeyDeviceQueue KeRemoveByKeyDeviceQueueIfBusy KeRemoveDeviceQueue KeRemoveEntryDeviceQueue KeRemoveGroupAffinityEx KeRemoveProcessorAffinityEx KeRemoveProcessorGroupAffinity KeRemoveQueue KeRemoveQueueDpc KeRemoveQueueDpcEx KeRemoveQueueEx KeRemoveSystemServiceTable KeReportCacheIncoherentDevice KeResetEvent KeRestoreExtendedProcessorState KeRestoreFloatingPointState KeRestoreProcessorState KeRevertToUserAffinityThread KeRevertToUserAffinityThreadEx KeRevertToUserGroupAffinityThread KeRundownQueue KeSaveExtendedProcessorState KeSaveFloatingPointState KeSaveStateForHibernate KeSetActualBasePriorityThread KeSetAffinityThread KeSetBasePriorityThread KeSetCoalescableTimer KeSetEvent KeSetEventBoostPriority KeSetHardwareCounterConfiguration KeSetHeteroCpuPolicyThread KeSetIdealProcessorThread KeSetImportanceDpc KeSetKernelStackSwapEnable KeSetPriorityThread KeSetProfileIrql KeSetSelectedCpuSetsThread KeSetSystemAffinityThread KeSetSystemAffinityThreadEx KeSetSystemGroupAffinityThread KeSetTargetProcessorDpc KeSetTargetProcessorDpcEx KeSetTimer KeSetTimer2 KeSetTimerEx KeShouldYieldProcessor KeSignalCallDpcDone KeSignalCallDpcSynchronize KeStackAttachProcess KeStallWhileFrozen KeStartDynamicProcessor KeSubtractAffinityEx KeSweepIcacheRange KeSweepLocalCaches KeSynchronizeExecution KeSynchronizeTimeToQpc KeSystemFullyCacheCoherent KeTestAlertThread KeTestSpinLock KeTryToAcquireGuardedMutex KeTryToAcquireQueuedSpinLock KeTryToAcquireSpinLockAtDpcLevel KeUnstackDetachProcess KeUpdateThreadTag KeUserModeCallback KeWaitForMultipleObjects KeWaitForMutexObject KeWaitForSingleObject KiBugCheckData KiCheckForKernelApcDelivery KiConnectHalInterrupt KiDeliverApc KiDispatchInterrupt KiIpiServiceRoutine KiReplayInterrupt KitLogFeatureUsage KseQueryDeviceData KseQueryDeviceDataList KseQueryDeviceFlags KseRegisterShim KseRegisterShimEx KseSetDeviceFlags KseUnregisterShim LdrAccessResource LdrEnumResources LdrFindResourceDirectory_U LdrFindResourceEx_U LdrFindResource_U LdrResFindResource LdrResFindResourceDirectory LdrResSearchResource LpcPortObjectType LpcReplyWaitReplyPort LpcRequestPort LpcRequestWaitReplyPort LpcRequestWaitReplyPortEx LpcSendWaitReceivePort LsaCallAuthenticationPackage LsaDeregisterLogonProcess LsaFreeReturnBuffer LsaLogonUser LsaLookupAuthenticationPackage LsaRegisterLogonProcess Mm64BitPhysicalAddress MmAddPhysicalMemory MmAddVerifierSpecialThunks MmAddVerifierThunks MmAdjustWorkingSetSize MmAdvanceMdl MmAllocateContiguousMemory MmAllocateContiguousMemorySpecifyCache MmAllocateContiguousMemorySpecifyCacheNode MmAllocateContiguousNodeMemory MmAllocateMappingAddress MmAllocateMdlForIoSpace MmAllocateNodePagesForMdlEx MmAllocateNonCachedMemory MmAllocatePagesForMdl MmAllocatePagesForMdlEx MmAllocatePartitionNodePagesForMdlEx MmAreMdlPagesCached MmBadPointer MmBuildMdlForNonPagedPool MmCanFileBeTruncated MmChangeImageProtection MmCommitSessionMappedView MmCopyMemory MmCopyVirtualMemory MmCreateMdl MmCreateMirror MmCreateSection MmDisableModifiedWriteOfSection MmDoesFileHaveUserWritableReferences MmFlushImageSection MmForceSectionClosed MmFreeContiguousMemory MmFreeContiguousMemorySpecifyCache MmFreeMappingAddress MmFreeNonCachedMemory MmFreePagesFromMdl MmFreePagesFromMdlEx MmGetCacheAttribute MmGetMaximumFileSectionSize MmGetPhysicalAddress MmGetPhysicalMemoryRanges MmGetPhysicalMemoryRangesEx MmGetSectionInformation MmGetSystemRoutineAddress MmGetVirtualForPhysical MmGrowKernelStack MmHighestUserAddress MmIsAddressValid MmIsDriverSuspectForVerifier MmIsDriverVerifying MmIsDriverVerifyingByAddress MmIsIoSpaceActive MmIsNonPagedSystemAddressValid MmIsRecursiveIoFault MmIsThisAnNtAsSystem MmIsVerifierEnabled MmLoadSystemImage MmLockPagableDataSection MmLockPagableImageSection MmLockPagableSectionByHandle MmMapIoSpace MmMapIoSpaceEx MmMapLockedPages MmMapLockedPagesSpecifyCache MmMapLockedPagesWithReservedMapping MmMapMdl MmMapMemoryDumpMdl MmMapUserAddressesToPage MmMapViewInSessionSpace MmMapViewInSessionSpaceEx MmMapViewInSystemSpace MmMapViewInSystemSpaceEx MmMapViewOfSection MmMarkPhysicalMemoryAsBad MmMarkPhysicalMemoryAsGood MmMdlPageContentsState MmMdlPagesAreZero MmPageEntireDriver MmPrefetchPages MmPrefetchVirtualAddresses MmProbeAndLockPages MmProbeAndLockProcessPages MmProbeAndLockSelectedPages MmProtectMdlSystemAddress MmQuerySystemSize MmRemovePhysicalMemory MmResetDriverPaging MmRotatePhysicalView MmSectionObjectType MmSecureVirtualMemory MmSetAddressRangeModified MmSetPermanentCacheAttribute MmSizeOfMdl MmSystemRangeStart MmTrimAllSystemPagableMemory MmUnloadSystemImage MmUnlockPagableImageSection MmUnlockPages MmUnmapIoSpace MmUnmapLockedPages MmUnmapReservedMapping MmUnmapViewInSessionSpace MmUnmapViewInSystemSpace MmUnmapViewOfSection MmUnsecureVirtualMemory MmUserProbeAddress NlsAnsiCodePage NlsLeadByteInfo NlsMbCodePageTag NlsMbOemCodePageTag NlsOemCodePage NlsOemLeadByteInfo NtAdjustPrivilegesToken NtAllocateLocallyUniqueId NtAllocateUuids NtAllocateVirtualMemory NtBuildGUID NtBuildLab NtBuildNumber NtClose NtCommitComplete NtCommitEnlistment NtCommitTransaction NtCompareSigningLevels NtConnectPort NtCreateEnlistment NtCreateEvent NtCreateFile NtCreateResourceManager NtCreateSection NtCreateTransaction NtCreateTransactionManager NtDeleteAtom NtDeleteFile NtDeviceIoControlFile NtDuplicateObject NtDuplicateToken NtEnumerateTransactionObject NtFindAtom NtFreeVirtualMemory NtFreezeTransactions NtFsControlFile NtGetEnvironmentVariableEx NtGetNotificationResourceManager NtGlobalFlag NtImageInfo NtLockFile NtMakePermanentObject NtMapViewOfSection NtNotifyChangeDirectoryFile NtNotifyChangeDirectoryFileEx NtOpenEnlistment NtOpenFile NtOpenProcess NtOpenProcessToken NtOpenProcessTokenEx NtOpenResourceManager NtOpenThread NtOpenThreadToken NtOpenThreadTokenEx NtOpenTransaction NtOpenTransactionManager NtPrePrepareComplete NtPrePrepareEnlistment NtPrepareComplete NtPrepareEnlistment NtPropagationComplete NtPropagationFailed NtQueryDirectoryFile NtQueryDirectoryFileEx NtQueryEaFile NtQueryEnvironmentVariableInfoEx NtQueryInformationAtom NtQueryInformationEnlistment NtQueryInformationFile NtQueryInformationProcess NtQueryInformationResourceManager NtQueryInformationThread NtQueryInformationToken NtQueryInformationTransaction NtQueryInformationTransactionManager NtQueryQuotaInformationFile NtQuerySecurityAttributesToken NtQuerySecurityObject NtQuerySystemInformation NtQuerySystemInformationEx NtQueryVolumeInformationFile NtReadFile NtReadOnlyEnlistment NtRecoverEnlistment NtRecoverResourceManager NtRecoverTransactionManager NtRequestPort NtRequestWaitReplyPort NtRollbackComplete NtRollbackEnlistment NtRollbackTransaction NtSetCachedSigningLevel NtSetEaFile NtSetEvent NtSetInformationEnlistment NtSetInformationFile NtSetInformationProcess NtSetInformationResourceManager NtSetInformationThread NtSetInformationToken NtSetInformationTransaction NtSetInformationVirtualMemory NtSetQuotaInformationFile NtSetSecurityObject NtSetVolumeInformationFile NtShutdownSystem NtThawTransactions NtTraceControl NtTraceEvent NtUnlockFile NtVdmControl NtWaitForSingleObject NtWriteFile ObAssignSecurity ObCheckCreateObjectAccess ObCheckObjectAccess ObCloseHandle ObCreateObject ObCreateObjectType ObDeleteCapturedInsertInfo ObDereferenceObject ObDereferenceObjectDeferDelete ObDereferenceObjectDeferDeleteWithTag ObDereferenceSecurityDescriptor ObDuplicateObject ObFindHandleForObject ObGetFilterVersion ObGetObjectSecurity ObGetObjectType ObInsertObject ObIsDosDeviceLocallyMapped ObIsKernelHandle ObLogSecurityDescriptor ObMakeTemporaryObject ObOpenObjectByName ObOpenObjectByNameEx ObOpenObjectByPointer ObOpenObjectByPointerWithTag ObQueryNameInfo ObQueryNameString ObQueryObjectAuditingByHandle ObReferenceObjectByHandle ObReferenceObjectByHandleWithTag ObReferenceObjectByName ObReferenceObjectByPointer ObReferenceObjectByPointerWithTag ObReferenceObjectSafe ObReferenceObjectSafeWithTag ObReferenceSecurityDescriptor ObRegisterCallbacks ObReleaseObjectSecurity ObSetHandleAttributes ObSetSecurityDescriptorInfo ObSetSecurityObjectByPointer ObUnRegisterCallbacks ObWaitForMultipleObjects ObWaitForSingleObject ObfDereferenceObject ObfDereferenceObjectWithTag ObfReferenceObject ObfReferenceObjectWithTag POGOBuffer PcwAddInstance PcwCloseInstance PcwCreateInstance PcwRegister PcwUnregister PfFileInfoNotify PfxFindPrefix PfxInitialize PfxInsertPrefix PfxRemovePrefix PoCallDriver PoCancelDeviceNotify PoClearPowerRequest PoCpuIdledSinceLastCallImprecise PoCreatePowerRequest PoCreateThermalRequest PoDeletePowerRequest PoDeleteThermalRequest PoDisableSleepStates PoEndDeviceBusy PoEnergyEstimationEnabled PoFxActivateComponent PoFxCompleteDevicePowerNotRequired PoFxCompleteIdleCondition PoFxCompleteIdleState PoFxEnableDStateReporting PoFxIdleComponent PoFxIssueComponentPerfStateChange PoFxIssueComponentPerfStateChangeMultiple PoFxNotifySurprisePowerOn PoFxPowerControl PoFxPowerOnCrashdumpDevice PoFxProcessorNotification PoFxQueryCurrentComponentPerfState PoFxRegisterComponentPerfStates PoFxRegisterCoreDevice PoFxRegisterCrashdumpDevice PoFxRegisterDevice PoFxRegisterDripsWatchdogCallback PoFxRegisterPlugin PoFxRegisterPluginEx PoFxRegisterPrimaryDevice PoFxReportDevicePoweredOn PoFxSetComponentLatency PoFxSetComponentResidency PoFxSetComponentWake PoFxSetDeviceIdleTimeout PoFxSetTargetDripsDevicePowerState PoFxStartDevicePowerManagement PoFxUnregisterDevice PoGetProcessorIdleAccounting PoGetSystemWake PoGetThermalRequestSupport PoInitiateProcessorWake PoLatencySensitivityHint PoNotifyMediaBuffering PoNotifyVSyncChange PoQueryWatchdogTime PoQueueShutdownWorkItem PoReenableSleepStates PoRegisterCoalescingCallback PoRegisterDeviceForIdleDetection PoRegisterDeviceNotify PoRegisterPowerSettingCallback PoRegisterSystemState PoRequestPowerIrp PoRequestShutdownEvent PoSetDeviceBusyEx PoSetFixedWakeSource PoSetHiberRange PoSetPowerButtonHoldState PoSetPowerRequest PoSetPowerState PoSetSystemState PoSetSystemWake PoSetSystemWakeDevice PoSetThermalActiveCooling PoSetThermalPassiveCooling PoSetUserPresent PoShutdownBugCheck PoStartDeviceBusy PoStartNextPowerIrp PoUnregisterCoalescingCallback PoUnregisterPowerSettingCallback PoUnregisterSystemState PoUserShutdownCancelled PoUserShutdownInitiated ProbeForRead ProbeForWrite PsAcquireProcessExitSynchronization PsAcquireSiloHardReference PsAllocSiloContextSlot PsAssignImpersonationToken PsAssignProcessToJobObject PsAttachSiloToCurrentThread PsChargePoolQuota PsChargeProcessNonPagedPoolQuota PsChargeProcessPagedPoolQuota PsChargeProcessPoolQuota PsChargeProcessWakeCounter PsCreateSiloContext PsCreateSystemThread PsCreateSystemThreadEx PsDereferenceImpersonationToken PsDereferenceKernelStack PsDereferencePrimaryToken PsDereferenceSiloContext PsDetachSiloFromCurrentThread PsDisableImpersonation PsEnterPriorityRegion PsEstablishWin32Callouts PsFreeSiloContextSlot PsGetContextThread PsGetCurrentProcess PsGetCurrentProcessId PsGetCurrentProcessSessionId PsGetCurrentProcessWin32Process PsGetCurrentProcessWow64Process PsGetCurrentServerSilo PsGetCurrentServerSiloName PsGetCurrentSilo PsGetCurrentThread PsGetCurrentThreadId PsGetCurrentThreadPreviousMode PsGetCurrentThreadProcess PsGetCurrentThreadProcessId PsGetCurrentThreadStackBase PsGetCurrentThreadStackLimit PsGetCurrentThreadTeb PsGetCurrentThreadWin32Thread PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion PsGetEffectiveContainerId PsGetEffectiveServerSilo PsGetHostSilo PsGetJobLock PsGetJobProperty PsGetJobServerSilo PsGetJobSessionId PsGetJobSilo PsGetJobUIRestrictionsClass PsGetParentSilo PsGetPermanentSiloContext PsGetProcessCommonJob PsGetProcessCreateTimeQuadPart PsGetProcessDebugPort PsGetProcessDxgProcess PsGetProcessExitProcessCalled PsGetProcessExitStatus PsGetProcessExitTime PsGetProcessId PsGetProcessImageFileName PsGetProcessInheritedFromUniqueProcessId PsGetProcessJob PsGetProcessPeb PsGetProcessPriorityClass PsGetProcessProtection PsGetProcessSectionBaseAddress PsGetProcessSecurityPort PsGetProcessSequenceNumber PsGetProcessServerSilo PsGetProcessSessionId PsGetProcessSessionIdEx PsGetProcessSignatureLevel PsGetProcessSilo PsGetProcessStartKey PsGetProcessWin32Process PsGetProcessWin32WindowStation PsGetProcessWow64Process PsGetServerSiloServiceSessionId PsGetSiloContext PsGetSiloIdentifier PsGetSiloMonitorContextSlot PsGetThreadCreateTime PsGetThreadExitStatus PsGetThreadFreezeCount PsGetThreadHardErrorsAreDisabled PsGetThreadId PsGetThreadProcess PsGetThreadProcessId PsGetThreadProperty PsGetThreadSessionId PsGetThreadTeb PsGetThreadWin32Thread PsGetVersion PsGetWin32KFilterSet PsImpersonateClient PsInitialSystemProcess PsInsertPermanentSiloContext PsInsertSiloContext PsIsCurrentThreadInServerSilo PsIsCurrentThreadPrefetching PsIsDiskCountersEnabled PsIsHostSilo PsIsProcessBeingDebugged PsIsProcessCommitRelinquished PsIsProcessInAppSilo PsIsProtectedProcess PsIsProtectedProcessLight PsIsSystemProcess PsIsSystemThread PsIsThreadImpersonating PsIsThreadTerminating PsIsWin32KFilterAuditEnabled PsIsWin32KFilterAuditEnabledForProcess PsIsWin32KFilterEnabled PsIsWin32KFilterEnabledForProcess PsJobType PsLeavePriorityRegion PsLoadedModuleList PsLoadedModuleResource PsLookupProcessByProcessId PsLookupProcessThreadByCid PsLookupThreadByThreadId PsMakeSiloContextPermanent PsPartitionType PsProcessType PsQueryProcessAttributesByToken PsQueryProcessCommandLine PsQueryProcessExceptionFlags PsQueryTotalCycleTimeProcess PsReferenceImpersonationToken PsReferenceKernelStack PsReferencePrimaryToken PsReferenceProcessFilePointer PsReferenceSiloContext PsRegisterSiloMonitor PsReleaseProcessExitSynchronization PsReleaseProcessWakeCounter PsReleaseSiloHardReference PsRemoveCreateThreadNotifyRoutine PsRemoveLoadImageNotifyRoutine PsRemoveSiloContext PsReplaceSiloContext PsRestoreImpersonation PsResumeProcess PsReturnPoolQuota PsReturnProcessNonPagedPoolQuota PsReturnProcessPagedPoolQuota PsRevertThreadToSelf PsRevertToSelf PsSetContextThread PsSetCreateProcessNotifyRoutine PsSetCreateProcessNotifyRoutineEx PsSetCreateProcessNotifyRoutineEx2 PsSetCreateThreadNotifyRoutine PsSetCreateThreadNotifyRoutineEx PsSetCurrentThreadPrefetching PsSetJobProperty PsSetLegoNotifyRoutine PsSetLoadImageNotifyRoutine PsSetLoadImageNotifyRoutineEx PsSetProcessDxgProcess PsSetProcessFaultInformation PsSetProcessPriorityByClass PsSetProcessPriorityClass PsSetProcessSecurityPort PsSetProcessWin32Process PsSetProcessWindowStation PsSetThreadHardErrorsAreDisabled PsSetThreadProperty PsSetThreadWin32Thread PsSiloContextNonPagedType PsSiloContextPagedType PsStartSiloMonitor PsSuspendProcess PsTerminateServerSilo PsTerminateSystemThread PsThreadType PsUILanguageComitted PsUnregisterSiloMonitor PsUpdateComponentPower PsUpdateDiskCounters PsWow64GetProcessMachine PsWrapApcWow64Thread ReadTimeStampCounter RtlAbsoluteToSelfRelativeSD RtlAddAccessAllowedAce RtlAddAccessAllowedAceEx RtlAddAccessAllowedObjectAce RtlAddAccessDeniedAceEx RtlAddAccessDeniedObjectAce RtlAddAccessFilterAce RtlAddAce RtlAddAtomToAtomTable RtlAddAtomToAtomTableEx RtlAddAuditAccessAceEx RtlAddAuditAccessObjectAce RtlAddProcessTrustLabelAce RtlAddRange RtlAddResourceAttributeAce RtlAllocateHeap RtlAnsiCharToUnicodeChar RtlAnsiStringToUnicodeSize RtlAnsiStringToUnicodeString RtlAppendAsciizToString RtlAppendStringToString RtlAppendUnicodeStringToString RtlAppendUnicodeToString RtlAreAllAccessesGranted RtlAreAnyAccessesGranted RtlAreBitsClear RtlAreBitsClearEx RtlAreBitsSet RtlAreBitsSetEx RtlAssert RtlAvlInsertNodeEx RtlAvlRemoveNode RtlCapabilityCheck RtlCapabilityCheckForSingleSessionSku RtlCaptureContext RtlCaptureStackBackTrace RtlCharToInteger RtlCheckPortableOperatingSystem RtlCheckRegistryKey RtlCheckSystemBootStatusIntegrity RtlCheckTokenCapability RtlCheckTokenMembership RtlCheckTokenMembershipEx RtlClearAllBits RtlClearAllBitsEx RtlClearBit RtlClearBitEx RtlClearBits RtlClearBitsEx RtlCmDecodeMemIoResource RtlCmEncodeMemIoResource RtlCompareAltitudes RtlCompareMemory RtlCompareMemoryUlong RtlCompareString RtlCompareUnicodeString RtlCompareUnicodeStrings RtlCompressBuffer RtlCompressChunks RtlComputeCrc32 RtlContractHashTable RtlConvertSidToUnicodeString RtlCopyBitMap RtlCopyLuid RtlCopyLuidAndAttributesArray RtlCopyMemory RtlCopyRangeList RtlCopySid RtlCopySidAndAttributesArray RtlCopyString RtlCopyUnicodeString RtlCrc32 RtlCrc64 RtlCreateAcl RtlCreateAtomTable RtlCreateAtomTableEx RtlCreateHashTable RtlCreateHashTableEx RtlCreateHeap RtlCreateRegistryKey RtlCreateSecurityDescriptor RtlCreateSystemVolumeInformationFolder RtlCreateUnicodeString RtlCreateUserThread RtlCultureNameToLCID RtlCustomCPToUnicodeN RtlDecompressBuffer RtlDecompressBufferEx RtlDecompressBufferEx2 RtlDecompressChunks RtlDecompressFragment RtlDecompressFragmentEx RtlDelete RtlDeleteAce RtlDeleteAtomFromAtomTable RtlDeleteElementGenericTable RtlDeleteElementGenericTableAvl RtlDeleteElementGenericTableAvlEx RtlDeleteHashTable RtlDeleteNoSplay RtlDeleteOwnersRanges RtlDeleteRange RtlDeleteRegistryValue RtlDeriveCapabilitySidsFromName RtlDescribeChunk RtlDestroyAtomTable RtlDestroyHeap RtlDowncaseUnicodeChar RtlDowncaseUnicodeString RtlDuplicateUnicodeString RtlEmptyAtomTable RtlEndEnumerationHashTable RtlEndStrongEnumerationHashTable RtlEndWeakEnumerationHashTable RtlEnumerateEntryHashTable RtlEnumerateGenericTable RtlEnumerateGenericTableAvl RtlEnumerateGenericTableLikeADirectory RtlEnumerateGenericTableWithoutSplaying RtlEnumerateGenericTableWithoutSplayingAvl RtlEqualLuid RtlEqualSid RtlEqualString RtlEqualUnicodeString RtlEqualWnfChangeStamps RtlEthernetAddressToStringA RtlEthernetAddressToStringW RtlEthernetStringToAddressA RtlEthernetStringToAddressW RtlExpandHashTable RtlExtendCorrelationVector RtlExtractBitMap RtlExtractBitMapEx RtlFillMemory RtlFillMemoryUlong RtlFillMemoryUlonglong RtlFindAceByType RtlFindClearBits RtlFindClearBitsAndSet RtlFindClearBitsAndSetEx RtlFindClearBitsEx RtlFindClearRuns RtlFindClosestEncodableLength RtlFindExportedRoutineByName RtlFindFirstRunClear RtlFindLastBackwardRunClear RtlFindLeastSignificantBit RtlFindLongestRunClear RtlFindMessage RtlFindMostSignificantBit RtlFindNextForwardRunClear RtlFindNextForwardRunClearCapped RtlFindNextForwardRunClearEx RtlFindRange RtlFindSetBits RtlFindSetBitsAndClear RtlFindSetBitsAndClearEx RtlFindSetBitsEx RtlFindUnicodePrefix RtlFindUnicodeSubstring RtlFirstFreeAce RtlFormatCurrentUserKeyPath RtlFormatMessage RtlFreeAnsiString RtlFreeHeap RtlFreeOemString RtlFreeRangeList RtlFreeUnicodeString RtlGUIDFromString RtlGenerate8dot3Name RtlGenerateClass5Guid RtlGetAce RtlGetActiveConsoleId RtlGetAppContainerNamedObjectPath RtlGetAppContainerParent RtlGetAppContainerSidType RtlGetCallersAddress RtlGetCompressionWorkSpaceSize RtlGetConsoleSessionForegroundProcessId RtlGetControlSecurityDescriptor RtlGetCurrentServiceSessionId RtlGetDaclSecurityDescriptor RtlGetDefaultCodePage RtlGetElementGenericTable RtlGetElementGenericTableAvl RtlGetEnabledExtendedFeatures RtlGetFirstRange RtlGetGroupSecurityDescriptor RtlGetIntegerAtom RtlGetLastRange RtlGetNextEntryHashTable RtlGetNextRange RtlGetNtGlobalFlags RtlGetNtProductType RtlGetNtSystemRoot RtlGetOwnerSecurityDescriptor RtlGetProductInfo RtlGetSaclSecurityDescriptor RtlGetSessionProperties RtlGetSetBootStatusData RtlGetSuiteMask RtlGetSystemBootStatus RtlGetSystemBootStatusEx RtlGetThreadLangIdByIndex RtlGetTokenNamedObjectPath RtlGetVersion RtlHashUnicodeString RtlIdnToAscii RtlIdnToNameprepUnicode RtlIdnToUnicode RtlImageDirectoryEntryToData RtlImageNtHeader RtlImageNtHeaderEx RtlIncrementCorrelationVector RtlInitAnsiString RtlInitAnsiStringEx RtlInitCodePageTable RtlInitEnumerationHashTable RtlInitString RtlInitStringEx RtlInitStrongEnumerationHashTable RtlInitUnicodeString RtlInitUnicodeStringEx RtlInitWeakEnumerationHashTable RtlInitializeBitMap RtlInitializeBitMapEx RtlInitializeCorrelationVector RtlInitializeGenericTable RtlInitializeGenericTableAvl RtlInitializeRangeList RtlInitializeSid RtlInitializeSidEx RtlInitializeUnicodePrefix RtlInsertElementGenericTable RtlInsertElementGenericTableAvl RtlInsertElementGenericTableFull RtlInsertElementGenericTableFullAvl RtlInsertEntryHashTable RtlInsertUnicodePrefix RtlInt64ToUnicodeString RtlIntegerToChar RtlIntegerToUnicode RtlIntegerToUnicodeString RtlInterlockedClearBitRun RtlInterlockedSetBitRun RtlInterlockedSetClearRun RtlInvertRangeList RtlInvertRangeListEx RtlIoDecodeMemIoResource RtlIoEncodeMemIoResource RtlIpv4AddressToStringA RtlIpv4AddressToStringExA RtlIpv4AddressToStringExW RtlIpv4AddressToStringW RtlIpv4StringToAddressA RtlIpv4StringToAddressExA RtlIpv4StringToAddressExW RtlIpv4StringToAddressW RtlIpv6AddressToStringA RtlIpv6AddressToStringExA RtlIpv6AddressToStringExW RtlIpv6AddressToStringW RtlIpv6StringToAddressA RtlIpv6StringToAddressExA RtlIpv6StringToAddressExW RtlIpv6StringToAddressW RtlIsCloudFilesPlaceholder RtlIsElevatedRid RtlIsGenericTableEmpty RtlIsGenericTableEmptyAvl RtlIsMultiSessionSku RtlIsMultiUsersInSessionSku RtlIsNameLegalDOS8Dot3 RtlIsNonEmptyDirectoryReparsePointAllowed RtlIsNormalizedString RtlIsNtDdiVersionAvailable RtlIsPartialPlaceholder RtlIsPartialPlaceholderFileHandle RtlIsPartialPlaceholderFileInfo RtlIsRangeAvailable RtlIsSandboxedToken RtlIsServicePackVersionInstalled RtlIsStateSeparationEnabled RtlIsUntrustedObject RtlIsValidOemCharacter RtlLCIDToCultureName RtlLargeIntegerToChar RtlLengthRequiredSid RtlLengthSecurityDescriptor RtlLengthSid RtlLoadString RtlLocalTimeToSystemTime RtlLockBootStatusData RtlLookupAtomInAtomTable RtlLookupElementGenericTable RtlLookupElementGenericTableAvl RtlLookupElementGenericTableFull RtlLookupElementGenericTableFullAvl RtlLookupEntryHashTable RtlLookupFirstMatchingElementGenericTableAvl RtlLookupFunctionEntry RtlMapGenericMask RtlMapSecurityErrorToNtStatus RtlMergeRangeLists RtlMoveMemory RtlMultiByteToUnicodeN RtlMultiByteToUnicodeSize RtlNextUnicodePrefix RtlNormalizeString RtlNtStatusToDosError RtlNtStatusToDosErrorNoTeb RtlNumberGenericTableElements RtlNumberGenericTableElementsAvl RtlNumberOfClearBits RtlNumberOfClearBitsEx RtlNumberOfClearBitsInRange RtlNumberOfSetBits RtlNumberOfSetBitsEx RtlNumberOfSetBitsInRange RtlNumberOfSetBitsUlongPtr RtlOemStringToCountedUnicodeString RtlOemStringToUnicodeSize RtlOemStringToUnicodeString RtlOemToUnicodeN RtlOpenCurrentUser RtlOpenImageFileOptionsKey RtlOsDeploymentState RtlOwnerAcesPresent RtlPcToFileHeader RtlPcToFileName RtlPcToFilePath RtlPinAtomInAtomTable RtlPrefetchMemoryNonTemporal RtlPrefixString RtlPrefixUnicodeString RtlQueryAtomInAtomTable RtlQueryDynamicTimeZoneInformation RtlQueryElevationFlags RtlQueryImageFileKeyOption RtlQueryInformationAcl RtlQueryModuleInformation RtlQueryPackageClaims RtlQueryPackageIdentity RtlQueryRegistryValues RtlQueryRegistryValuesEx RtlQueryThreadPlaceholderCompatibilityMode RtlQueryTimeZoneInformation RtlQueryValidationRunlevel RtlRaiseException RtlRaiseStatus RtlRandom RtlRandomEx RtlRbInsertNodeEx RtlRbRemoveNode RtlRbReplaceNode RtlRealPredecessor RtlRealSuccessor RtlRemoveEntryHashTable RtlRemoveUnicodePrefix RtlReplaceSidInSd RtlReserveChunk RtlRestoreContext RtlRestoreSystemBootStatusDefaults RtlRunOnceBeginInitialize RtlRunOnceComplete RtlRunOnceExecuteOnce RtlRunOnceInitialize RtlSecondsSince1970ToTime RtlSecondsSince1980ToTime RtlSelfRelativeToAbsoluteSD RtlSelfRelativeToAbsoluteSD2 RtlSetActiveConsoleId RtlSetAllBits RtlSetAllBitsEx RtlSetBit RtlSetBitEx RtlSetBits RtlSetBitsEx RtlSetConsoleSessionForegroundProcessId RtlSetControlSecurityDescriptor RtlSetDaclSecurityDescriptor RtlSetDynamicTimeZoneInformation RtlSetGroupSecurityDescriptor RtlSetOwnerSecurityDescriptor RtlSetPortableOperatingSystem RtlSetSaclSecurityDescriptor RtlSetSystemBootStatus RtlSetSystemBootStatusEx RtlSetThreadPlaceholderCompatibilityMode RtlSetTimeZoneInformation RtlShiftLeftBitMap RtlShiftLeftBitMapEx RtlSidHashInitialize RtlSidHashLookup RtlSizeHeap RtlSplay RtlStringFromGUID RtlStronglyEnumerateEntryHashTable RtlSubAuthorityCountSid RtlSubAuthoritySid RtlSubtreePredecessor RtlSubtreeSuccessor RtlSuffixUnicodeString RtlSystemTimeToLocalTime RtlTestBit RtlTestBitEx RtlTimeFieldsToTime RtlTimeToElapsedTimeFields RtlTimeToSecondsSince1970 RtlTimeToSecondsSince1980 RtlTimeToTimeFields RtlTraceDatabaseAdd RtlTraceDatabaseCreate RtlTraceDatabaseDestroy RtlTraceDatabaseEnumerate RtlTraceDatabaseFind RtlTraceDatabaseLock RtlTraceDatabaseUnlock RtlTraceDatabaseValidate RtlUTF8ToUnicodeN RtlUlongByteSwap RtlUlonglongByteSwap RtlUnicodeStringToAnsiSize RtlUnicodeStringToAnsiString RtlUnicodeStringToCountedOemString RtlUnicodeStringToInt64 RtlUnicodeStringToInteger RtlUnicodeStringToOemSize RtlUnicodeStringToOemString RtlUnicodeToCustomCPN RtlUnicodeToMultiByteN RtlUnicodeToMultiByteSize RtlUnicodeToOemN RtlUnicodeToUTF8N RtlUnlockBootStatusData RtlUnwind RtlUnwindEx RtlUpcaseUnicodeChar RtlUpcaseUnicodeString RtlUpcaseUnicodeStringToAnsiString RtlUpcaseUnicodeStringToCountedOemString RtlUpcaseUnicodeStringToOemString RtlUpcaseUnicodeToCustomCPN RtlUpcaseUnicodeToMultiByteN RtlUpcaseUnicodeToOemN RtlUpperChar RtlUpperString RtlUshortByteSwap RtlValidAcl RtlValidRelativeSecurityDescriptor RtlValidSecurityDescriptor RtlValidSid RtlValidateCorrelationVector RtlValidateUnicodeString RtlVerifyVersionInfo RtlVirtualUnwind RtlVolumeDeviceToDosName RtlWalkFrameChain RtlWeaklyEnumerateEntryHashTable RtlWriteRegistryValue RtlZeroHeap RtlZeroMemory RtlxAnsiStringToUnicodeSize RtlxOemStringToUnicodeSize RtlxUnicodeStringToAnsiSize RtlxUnicodeStringToOemSize SeAccessCheck SeAccessCheckEx SeAccessCheckFromState SeAccessCheckFromStateEx SeAccessCheckWithHint SeAdjustAccessStateForAccessConstraints SeAdjustAccessStateForTrustLabel SeAppendPrivileges SeAssignSecurity SeAssignSecurityEx SeAuditFipsCryptoSelftests SeAuditHardLinkCreation SeAuditHardLinkCreationWithTransaction SeAuditTransactionStateChange SeAuditingAnyFileEventsWithContext SeAuditingAnyFileEventsWithContextEx SeAuditingFileEvents SeAuditingFileEventsWithContext SeAuditingFileEventsWithContextEx SeAuditingFileOrGlobalEvents SeAuditingHardLinkEvents SeAuditingHardLinkEventsWithContext SeAuditingWithTokenForSubcategory SeCaptureSecurityDescriptor SeCaptureSubjectContext SeCaptureSubjectContextEx SeCloseObjectAuditAlarm SeCloseObjectAuditAlarmForNonObObject SeCompareSigningLevels SeComputeAutoInheritByObjectType SeConvertSecurityDescriptorToStringSecurityDescriptor SeConvertSidToStringSid SeConvertStringSecurityDescriptorToSecurityDescriptor SeConvertStringSidToSid SeCreateAccessState SeCreateAccessStateEx SeCreateClientSecurity SeCreateClientSecurityEx SeCreateClientSecurityFromSubjectContext SeCreateClientSecurityFromSubjectContextEx SeDeassignSecurity SeDeleteAccessState SeDeleteObjectAuditAlarm SeDeleteObjectAuditAlarmWithTransaction SeEtwWriteKMCveEvent SeExamineSacl SeExports SeFilterToken SeFreePrivileges SeGetCachedSigningLevel SeGetLinkedToken SeGetLogonSessionToken SeILSigningPolicyPtr SeImpersonateClient SeImpersonateClientEx SeIsParentOfChildAppContainer SeLocateProcessImageName SeLockSubjectContext SeMarkLogonSessionForTerminationNotification SeMarkLogonSessionForTerminationNotificationEx SeOpenObjectAuditAlarm SeOpenObjectAuditAlarmForNonObObject SeOpenObjectAuditAlarmWithTransaction SeOpenObjectForDeleteAuditAlarm SeOpenObjectForDeleteAuditAlarmWithTransaction SePrivilegeCheck SePrivilegeObjectAuditAlarm SePublicDefaultDacl SeQueryAuthenticationIdToken SeQueryInformationToken SeQuerySecureBootPlatformManifest SeQuerySecureBootPolicyValue SeQuerySecurityAttributesToken SeQuerySecurityAttributesTokenAccessInformation SeQuerySecurityDescriptorInfo SeQueryServerSiloToken SeQuerySessionIdToken SeQuerySessionIdTokenEx SeRegisterImageVerificationCallback SeRegisterLogonSessionTerminatedRoutine SeRegisterLogonSessionTerminatedRoutineEx SeReleaseSecurityDescriptor SeReleaseSubjectContext SeReportSecurityEvent SeReportSecurityEventWithSubCategory SeSecurityAttributePresent SeSetAccessStateGenericMapping SeSetAuditParameter SeSetSecurityAttributesToken SeSetSecurityAttributesTokenEx SeSetSecurityDescriptorInfo SeSetSecurityDescriptorInfoEx SeShouldCheckForAccessRightsFromParent SeSinglePrivilegeCheck SeSrpAccessCheck SeSystemDefaultDacl SeSystemDefaultSd SeTokenFromAccessInformation SeTokenImpersonationLevel SeTokenIsAdmin SeTokenIsRestricted SeTokenIsWriteRestricted SeTokenObjectType SeTokenType SeUnlockSubjectContext SeUnregisterImageVerificationCallback SeUnregisterLogonSessionTerminatedRoutine SeUnregisterLogonSessionTerminatedRoutineEx SeValidSecurityDescriptor SkAcquirePushLockExclusive SkAllocatePool SkFreePool SkInitializePushLock SkIsSecureKernel SkQuerySecureKernelInformation SkReleasePushLockExclusive TmCancelPropagationRequest TmCommitComplete TmCommitEnlistment TmCommitTransaction TmCreateEnlistment TmCurrentTransaction TmDereferenceEnlistmentKey TmEnableCallbacks TmEndPropagationRequest TmEnlistmentObjectType TmFreezeTransactions TmGetTransactionId TmInitSystem TmInitSystemPhase2 TmInitializeTransactionManager TmIsKTMCommitCoordinator TmIsTransactionActive TmPrePrepareComplete TmPrePrepareEnlistment TmPrepareComplete TmPrepareEnlistment TmPropagationComplete TmPropagationFailed TmReadOnlyEnlistment TmRecoverEnlistment TmRecoverResourceManager TmRecoverTransactionManager TmReferenceEnlistmentKey TmRenameTransactionManager TmRequestOutcomeEnlistment TmResourceManagerObjectType TmRollbackComplete TmRollbackEnlistment TmRollbackTransaction TmSetCurrentTransaction TmSinglePhaseReject TmThawTransactions TmTransactionManagerObjectType TmTransactionObjectType TtmNotifyDeviceArrival TtmNotifyDeviceDeparture TtmNotifyDeviceInput VerSetConditionMask VfCheckNxPagePriority VfCheckNxPageProtection VfCheckNxPoolType VfFailDeviceNode VfFailDriver VfFailSystemBIOS VfInsertContext VfIsVerificationEnabled VfQueryDeviceContext VfQueryDispatchTable VfQueryDriverContext VfQueryIrpContext VfQueryThreadContext VfRemoveContext VslCreateSecureSection VslDeleteSecureSection VslExchangeEntropy VslGetSecurePciEnabled VslQuerySecureDevice VslRetrieveMailbox WheaAddErrorSource WheaAttemptPhysicalPageOffline WheaConfigureErrorSource WheaGetErrorSource WheaInitializeRecordHeader WheaReportHwError WmiGetClock WmiQueryTraceInformation WmiTraceMessage WmiTraceMessageVa ZwAccessCheckAndAuditAlarm ZwAddBootEntry ZwAddDriverEntry ZwAdjustPrivilegesToken ZwAlertThread ZwAllocateLocallyUniqueId ZwAllocateReserveObject ZwAllocateVirtualMemory ZwAlpcAcceptConnectPort ZwAlpcCancelMessage ZwAlpcConnectPort ZwAlpcConnectPortEx ZwAlpcCreatePort ZwAlpcCreatePortSection ZwAlpcCreateResourceReserve ZwAlpcCreateSectionView ZwAlpcCreateSecurityContext ZwAlpcDeletePortSection ZwAlpcDeleteResourceReserve ZwAlpcDeleteSectionView ZwAlpcDeleteSecurityContext ZwAlpcDisconnectPort ZwAlpcOpenSenderProcess ZwAlpcOpenSenderThread ZwAlpcQueryInformation ZwAlpcQueryInformationMessage ZwAlpcSendWaitReceivePort ZwAlpcSetInformation ZwAssignProcessToJobObject ZwAssociateWaitCompletionPacket ZwCancelIoFile ZwCancelIoFileEx ZwCancelTimer ZwCancelWaitCompletionPacket ZwClearEvent ZwClose ZwCloseObjectAuditAlarm ZwCommitComplete ZwCommitEnlistment ZwCommitRegistryTransaction ZwCommitTransaction ZwCompareTokens ZwConnectPort ZwCreateDirectoryObject ZwCreateEnlistment ZwCreateEvent ZwCreateFile ZwCreateIoCompletion ZwCreateJobObject ZwCreateKey ZwCreateKeyTransacted ZwCreatePartition ZwCreateProcessEx ZwCreateProfileEx ZwCreateRegistryTransaction ZwCreateResourceManager ZwCreateSection ZwCreateSymbolicLinkObject ZwCreateTimer ZwCreateTransaction ZwCreateTransactionManager ZwCreateWaitCompletionPacket ZwCreateWnfStateName ZwDeleteBootEntry ZwDeleteDriverEntry ZwDeleteFile ZwDeleteKey ZwDeleteValueKey ZwDeleteWnfStateData ZwDeleteWnfStateName ZwDeviceIoControlFile ZwDisplayString ZwDuplicateObject ZwDuplicateToken ZwEnumerateBootEntries ZwEnumerateDriverEntries ZwEnumerateKey ZwEnumerateTransactionObject ZwEnumerateValueKey ZwFlushBuffersFile ZwFlushBuffersFileEx ZwFlushInstructionCache ZwFlushKey ZwFlushVirtualMemory ZwFreeVirtualMemory ZwFsControlFile ZwGetCachedSigningLevel ZwGetNextProcess ZwGetNextThread ZwGetNotificationResourceManager ZwImpersonateAnonymousToken ZwInitiatePowerAction ZwIsProcessInJob ZwLoadDriver ZwLoadKey ZwLoadKeyEx ZwLockFile ZwLockProductActivationKeys ZwLockVirtualMemory ZwMakeTemporaryObject ZwManagePartition ZwMapViewOfSection ZwModifyBootEntry ZwModifyDriverEntry ZwNotifyChangeDirectoryFile ZwNotifyChangeDirectoryFileEx ZwNotifyChangeKey ZwNotifyChangeSession ZwOpenDirectoryObject ZwOpenEnlistment ZwOpenEvent ZwOpenFile ZwOpenJobObject ZwOpenKey ZwOpenKeyEx ZwOpenKeyTransacted ZwOpenKeyTransactedEx ZwOpenPartition ZwOpenProcess ZwOpenProcessToken ZwOpenProcessTokenEx ZwOpenRegistryTransaction ZwOpenResourceManager ZwOpenSection ZwOpenSession ZwOpenSymbolicLinkObject ZwOpenThread ZwOpenThreadToken ZwOpenThreadTokenEx ZwOpenTimer ZwOpenTransaction ZwOpenTransactionManager ZwPowerInformation ZwPrePrepareComplete ZwPrePrepareEnlistment ZwPrepareComplete ZwPrepareEnlistment ZwPropagationComplete ZwPropagationFailed ZwProtectVirtualMemory ZwPulseEvent ZwQueryBootEntryOrder ZwQueryBootOptions ZwQueryDefaultLocale ZwQueryDefaultUILanguage ZwQueryDirectoryFile ZwQueryDirectoryFileEx ZwQueryDirectoryObject ZwQueryDriverEntryOrder ZwQueryEaFile ZwQueryFullAttributesFile ZwQueryInformationByName ZwQueryInformationEnlistment ZwQueryInformationFile ZwQueryInformationJobObject ZwQueryInformationProcess ZwQueryInformationResourceManager ZwQueryInformationThread ZwQueryInformationToken ZwQueryInformationTransaction ZwQueryInformationTransactionManager ZwQueryInstallUILanguage ZwQueryIntervalProfile ZwQueryKey ZwQueryLicenseValue ZwQueryObject ZwQueryQuotaInformationFile ZwQuerySection ZwQuerySecurityAttributesToken ZwQuerySecurityObject ZwQuerySymbolicLinkObject ZwQuerySystemEnvironmentValueEx ZwQuerySystemInformation ZwQuerySystemInformationEx ZwQueryTimerResolution ZwQueryValueKey ZwQueryVirtualMemory ZwQueryVolumeInformationFile ZwQueryWnfStateData ZwQueryWnfStateNameInformation ZwReadFile ZwReadOnlyEnlistment ZwRecoverEnlistment ZwRecoverResourceManager ZwRecoverTransactionManager ZwRemoveIoCompletion ZwRemoveIoCompletionEx ZwRenameKey ZwReplaceKey ZwRequestPort ZwRequestWaitReplyPort ZwResetEvent ZwRestoreKey ZwRollbackComplete ZwRollbackEnlistment ZwRollbackRegistryTransaction ZwRollbackTransaction ZwSaveKey ZwSaveKeyEx ZwSecureConnectPort ZwSetBootEntryOrder ZwSetBootOptions ZwSetCachedSigningLevel ZwSetDefaultLocale ZwSetDefaultUILanguage ZwSetDriverEntryOrder ZwSetEaFile ZwSetEvent ZwSetInformationEnlistment ZwSetInformationFile ZwSetInformationJobObject ZwSetInformationKey ZwSetInformationObject ZwSetInformationProcess ZwSetInformationResourceManager ZwSetInformationThread ZwSetInformationToken ZwSetInformationTransaction ZwSetInformationVirtualMemory ZwSetIntervalProfile ZwSetIoCompletion ZwSetIoCompletionEx ZwSetQuotaInformationFile ZwSetSecurityObject ZwSetSystemEnvironmentValueEx ZwSetSystemInformation ZwSetSystemTime ZwSetTimer ZwSetTimerEx ZwSetTimerResolution ZwSetValueKey ZwSetVolumeInformationFile ZwStartProfile ZwStopProfile ZwTerminateJobObject ZwTerminateProcess ZwTraceControl ZwTraceEvent ZwTranslateFilePath ZwUnloadDriver ZwUnloadKey ZwUnloadKey2 ZwUnloadKeyEx ZwUnlockFile ZwUnlockVirtualMemory ZwUnmapViewOfSection ZwUpdateWnfStateData ZwWaitForMultipleObjects ZwWaitForSingleObject ZwWriteFile ZwYieldExecution __C_specific_handler __chkstk _finite _i64toa_s _i64tow_s _itoa _itoa_s _itow _itow_s _local_unwind _ltoa_s _ltow_s _makepath_s _purecall _setjmpex _snprintf _snprintf_s _snscanf_s _snwprintf _snwprintf_s _snwscanf_s _splitpath_s _stricmp _strlwr _strnicmp _strnset _strnset_s _strrev _strset _strset_s _strtoui64 _strupr _swprintf _ui64toa_s _ui64tow_s _ultoa_s _ultow_s _vsnprintf _vsnprintf_s _vsnwprintf _vsnwprintf_s _vswprintf _wcsicmp _wcslwr _wcslwr_s _wcsnicmp _wcsnset _wcsnset_s _wcsrev _wcsset_s _wcsupr _wmakepath_s _wsplitpath_s _wtoi _wtol atoi atol bsearch bsearch_s isdigit islower isprint isspace isupper iswalnum iswdigit iswspace isxdigit longjmp mbstowcs mbtowc memchr memcmp memcpy memcpy_s memmove memmove_s memset psMUITest qsort rand sprintf sprintf_s srand sscanf_s strcat strcat_s strchr strcmp strcpy strcpy_s strlen strncat strncat_s strncmp strncpy strncpy_s strnlen strrchr strspn strstr strtok_s swprintf swprintf_s swscanf_s tolower toupper towlower towupper vDbgPrintEx vDbgPrintExWithPrefix vsprintf vsprintf_s vswprintf_s wcscat wcscat_s wcschr wcscmp wcscpy wcscpy_s wcscspn wcslen wcsncat wcsncat_s wcsncmp wcsncpy wcsncpy_s wcsnlen wcsrchr wcsspn wcsstr wcstombs wcstoul wctomb