Difference between revisions of "Techwiki:Ntoskrnl export list"
ThePhysicist (talk | contribs) |
ThePhysicist (talk | contribs) (Fix table format) |
||
Line 4: | Line 4: | ||
|- style="background: #ececec;" | |- style="background: #ececec;" | ||
|| Name || # win xp | || Name || # win xp | ||
− | + | |- | |
− | + | | CcCanIWrite || 60 | |
− | + | |- | |
− | + | | CcCopyRead || 61 | |
− | + | |- | |
− | + | | CcCopyWrite || 62 | |
− | + | |- | |
− | + | | CcDeferWrite || 63 | |
− | + | |- | |
− | + | | CcFastCopyRead || 64 | |
− | + | |- | |
− | + | | CcFastCopyWrite || 65 | |
− | + | |- | |
− | + | | CcFastMdlReadWait || 66 | |
− | + | |- | |
− | + | | CcFastReadNotPossible || 67 | |
− | + | |- | |
− | + | | CcFastReadWait || 68 | |
− | + | |- | |
− | + | | CcFlushCache || 69 | |
− | + | |- | |
− | + | | CcGetDirtyPages || 70 | |
− | + | |- | |
− | + | | CcGetFileObjectFromBcb || 71 | |
− | + | |- | |
− | + | | CcGetFileObjectFromSectionPtrs || 72 | |
− | + | |- | |
− | + | | CcGetFlushedValidData || 73 | |
− | + | |- | |
− | + | | CcGetLsnForFileObject || 74 | |
− | + | |- | |
− | + | | CcInitializeCacheMap || 75 | |
− | + | |- | |
− | + | | CcIsThereDirtyData || 76 | |
− | + | |- | |
− | + | | CcMapData || 77 | |
− | + | |- | |
− | + | | CcMdlRead || 78 | |
− | + | |- | |
− | + | | CcMdlReadComplete || 79 | |
− | + | |- | |
− | + | | CcMdlWriteAbort || 80 | |
− | + | |- | |
− | + | | CcMdlWriteComplete || 81 | |
− | + | |- | |
− | + | | CcPinMappedData || 82 | |
− | + | |- | |
− | + | | CcPinRead || 83 | |
− | + | |- | |
− | + | | CcPrepareMdlWrite || 84 | |
− | + | |- | |
− | + | | CcPreparePinWrite || 85 | |
− | + | |- | |
− | + | | CcPurgeCacheSection || 86 | |
− | + | |- | |
− | + | | CcRemapBcb || 87 | |
− | + | |- | |
− | + | | CcRepinBcb || 88 | |
− | + | |- | |
− | + | | CcScheduleReadAhead || 89 | |
− | + | |- | |
− | + | | CcSetAdditionalCacheAttributes || 90 | |
− | + | |- | |
− | + | | CcSetBcbOwnerPointer || 91 | |
− | + | |- | |
− | + | | CcSetDirtyPageThreshold || 92 | |
− | + | |- | |
− | + | | CcSetDirtyPinnedData || 93 | |
− | + | |- | |
− | + | | CcSetFileSizes || 94 | |
− | + | |- | |
− | + | | CcSetLogHandleForFile || 95 | |
− | + | |- | |
− | + | | CcSetReadAheadGranularity || 96 | |
− | + | |- | |
− | + | | CcUninitializeCacheMap || 97 | |
− | + | |- | |
− | + | | CcUnpinData || 98 | |
− | + | |- | |
− | + | | CcUnpinDataForThread || 99 | |
− | + | |- | |
− | + | | CcUnpinRepinnedBcb || 100 | |
− | + | |- | |
− | + | | CcWaitForCurrentLazyWriterActivity || 101 | |
− | + | |- | |
− | + | | CcZeroData || 102 | |
− | + | |- | |
− | + | | CmRegisterCallback || 103 | |
− | + | |- | |
− | + | | CmUnRegisterCallback || 104 | |
− | + | |- | |
− | + | | DbgBreakPoint || 105 | |
− | + | |- | |
− | + | | DbgBreakPointWithStatus || 106 | |
− | + | |- | |
− | + | | DbgLoadImageSymbols || 107 | |
− | + | |- | |
− | + | | DbgPrint || 108 | |
− | + | |- | |
− | + | | DbgPrintEx || 109 | |
− | + | |- | |
− | + | | DbgPrintReturnControlC || 110 | |
− | + | |- | |
− | + | | DbgPrompt || 111 | |
− | + | |- | |
− | + | | DbgQueryDebugFilterState || 112 | |
− | + | |- | |
− | + | | DbgSetDebugFilterState || 113 | |
− | + | |- | |
− | + | | ExAcquireFastMutexUnsafe || 1 | |
− | + | |- | |
− | + | | ExAcquireResourceExclusiveLite || 114 | |
− | + | |- | |
− | + | | ExAcquireResourceSharedLite || 115 | |
− | + | |- | |
− | + | | ExAcquireRundownProtection || 2 | |
− | + | |- | |
− | + | | ExAcquireRundownProtectionEx || 3 | |
− | + | |- | |
− | + | | ExAcquireSharedStarveExclusive || 116 | |
− | + | |- | |
− | + | | ExAcquireSharedWaitForExclusive || 117 | |
− | + | |- | |
− | + | | ExAllocateFromPagedLookasideList || 118 | |
− | + | |- | |
− | + | | ExAllocatePool || 119 | |
− | + | |- | |
− | + | | ExAllocatePoolWithQuota || 120 | |
− | + | |- | |
− | + | | ExAllocatePoolWithQuotaTag || 121 | |
− | + | |- | |
− | + | | ExAllocatePoolWithTag || 122 | |
− | + | |- | |
− | + | | ExAllocatePoolWithTagPriority || 123 | |
− | + | |- | |
− | + | | ExConvertExclusiveToSharedLite || 124 | |
− | + | |- | |
− | + | | ExCreateCallback || 125 | |
− | + | |- | |
− | + | | ExDeleteNPagedLookasideList || 126 | |
− | + | |- | |
− | + | | ExDeletePagedLookasideList || 127 | |
− | + | |- | |
− | + | | ExDeleteResourceLite || 128 | |
− | + | |- | |
− | + | | ExDesktopObjectType || 129 | |
− | + | |- | |
− | + | | ExDisableResourceBoostLite || 130 | |
− | + | |- | |
− | + | | ExEnumHandleTable || 131 | |
− | + | |- | |
− | + | | ExEventObjectType || 132 | |
− | + | |- | |
− | + | | ExExtendZone || 133 | |
− | + | |- | |
− | + | | ExFreePool || 134 | |
− | + | |- | |
− | + | | ExFreePoolWithTag || 135 | |
− | + | |- | |
− | + | | ExFreeToPagedLookasideList || 136 | |
− | + | |- | |
− | + | | ExGetCurrentProcessorCounts || 137 | |
− | + | |- | |
− | + | | ExGetCurrentProcessorCpuUsage || 138 | |
− | + | |- | |
− | + | | ExGetExclusiveWaiterCount || 139 | |
− | + | |- | |
− | + | | ExGetPreviousMode || 140 | |
− | + | |- | |
− | + | | ExGetSharedWaiterCount || 141 | |
− | + | |- | |
− | + | | ExInitializeNPagedLookasideList || 142 | |
− | + | |- | |
− | + | | ExInitializePagedLookasideList || 143 | |
− | + | |- | |
− | + | | ExInitializeResourceLite || 144 | |
− | + | |- | |
− | + | | ExInitializeRundownProtection || 4 | |
− | + | |- | |
− | + | | ExInitializeZone || 145 | |
− | + | |- | |
− | + | | ExInterlockedAddLargeInteger || 146 | |
− | + | |- | |
− | + | | ExInterlockedAddLargeStatistic || 5 | |
− | + | |- | |
− | + | | ExInterlockedAddUlong || 147 | |
− | + | |- | |
+ | | ExInterlockedCompareExchange64 || 6 | ||
+ | |- | ||
+ | | ExInterlockedDecrementLong || 148 | ||
+ | |- | ||
+ | | ExInterlockedExchangeUlong || 149 | ||
+ | |- | ||
+ | | ExInterlockedExtendZone || 150 | ||
+ | |- | ||
+ | | ExInterlockedFlushSList || 7 | ||
+ | |- | ||
+ | | ExInterlockedIncrementLong || 151 | ||
+ | |- | ||
+ | | ExInterlockedInsertHeadList || 152 | ||
+ | |- | ||
+ | | ExInterlockedInsertTailList || 153 | ||
+ | |- | ||
+ | | ExInterlockedPopEntryList || 154 | ||
+ | |- | ||
+ | | ExInterlockedPopEntrySList || 8 | ||
+ | |- | ||
+ | | ExInterlockedPushEntryList || 155 | ||
+ | |- | ||
+ | | ExInterlockedPushEntrySList || 9 | ||
+ | |- | ||
+ | | ExInterlockedRemoveHeadList || 156 | ||
+ | |- | ||
+ | | ExIsProcessorFeaturePresent || 157 | ||
+ | |- | ||
+ | | ExIsResourceAcquiredExclusiveLite || 158 | ||
+ | |- | ||
+ | | ExIsResourceAcquiredSharedLite || 159 | ||
+ | |- | ||
+ | | ExLocalTimeToSystemTime || 160 | ||
+ | |- | ||
+ | | ExNotifyCallback || 161 | ||
+ | |- | ||
+ | | ExQueryPoolBlockSize || 162 | ||
+ | |- | ||
+ | | ExQueueWorkItem || 163 | ||
+ | |- | ||
+ | | ExRaiseAccessViolation || 164 | ||
+ | |- | ||
+ | | ExRaiseDatatypeMisalignment || 165 | ||
+ | |- | ||
+ | | ExRaiseException || 166 | ||
+ | |- | ||
+ | | ExRaiseHardError || 167 | ||
+ | |- | ||
+ | | ExRaiseStatus || 168 | ||
+ | |- | ||
+ | | ExReInitializeRundownProtection || 10 | ||
+ | |- | ||
+ | | ExRegisterCallback || 169 | ||
+ | |- | ||
+ | | ExReinitializeResourceLite || 170 | ||
+ | |- | ||
+ | | ExReleaseFastMutexUnsafe || 11 | ||
+ | |- | ||
+ | | ExReleaseResourceForThreadLite || 171 | ||
+ | |- | ||
+ | | ExReleaseResourceLite || 12 | ||
+ | |- | ||
+ | | ExReleaseRundownProtection || 13 | ||
+ | |- | ||
+ | | ExReleaseRundownProtectionEx || 14 | ||
+ | |- | ||
+ | | ExRundownCompleted || 15 | ||
+ | |- | ||
+ | | ExSemaphoreObjectType || 172 | ||
+ | |- | ||
+ | | ExSetResourceOwnerPointer || 173 | ||
+ | |- | ||
+ | | ExSetTimerResolution || 174 | ||
+ | |- | ||
+ | | ExSystemExceptionFilter || 175 | ||
+ | |- | ||
+ | | ExSystemTimeToLocalTime || 176 | ||
+ | |- | ||
+ | | ExUnregisterCallback || 177 | ||
+ | |- | ||
+ | | ExUuidCreate || 178 | ||
+ | |- | ||
+ | | ExVerifySuite || 179 | ||
+ | |- | ||
+ | | ExWaitForRundownProtectionRelease || 16 | ||
+ | |- | ||
+ | | ExWindowStationObjectType || 180 | ||
+ | |- | ||
+ | | ExfAcquirePushLockExclusive || 17 | ||
+ | |- | ||
+ | | ExfAcquirePushLockShared || 18 | ||
+ | |- | ||
+ | | ExfInterlockedAddUlong || 19 | ||
+ | |- | ||
+ | | ExfInterlockedCompareExchange64 || 20 | ||
+ | |- | ||
+ | | ExfInterlockedInsertHeadList || 21 | ||
+ | |- | ||
+ | | ExfInterlockedInsertTailList || 22 | ||
+ | |- | ||
+ | | ExfInterlockedPopEntryList || 23 | ||
+ | |- | ||
+ | | ExfInterlockedPushEntryList || 24 | ||
+ | |- | ||
+ | | ExfInterlockedRemoveHeadList || 25 | ||
+ | |- | ||
+ | | ExfReleasePushLock || 26 | ||
+ | |- | ||
+ | | Exfi386InterlockedDecrementLong || 27 | ||
+ | |- | ||
+ | | Exfi386InterlockedExchangeUlong || 28 | ||
+ | |- | ||
+ | | Exfi386InterlockedIncrementLong || 29 | ||
+ | |- | ||
+ | | Exi386InterlockedDecrementLong || 181 | ||
+ | |- | ||
+ | | Exi386InterlockedExchangeUlong || 182 | ||
+ | |- | ||
+ | | Exi386InterlockedIncrementLong || 183 | ||
+ | |- | ||
+ | | FsRtlAcquireFileExclusive || 184 | ||
+ | |- | ||
+ | | FsRtlAddLargeMcbEntry || 185 | ||
+ | |- | ||
+ | | FsRtlAddMcbEntry || 186 | ||
+ | |- | ||
+ | | FsRtlAddToTunnelCache || 187 | ||
+ | |- | ||
+ | | FsRtlAllocateFileLock || 188 | ||
+ | |- | ||
+ | | FsRtlAllocatePool || 189 | ||
+ | |- | ||
+ | | FsRtlAllocatePoolWithQuota || 190 | ||
+ | |- | ||
+ | | FsRtlAllocatePoolWithQuotaTag || 191 | ||
+ | |- | ||
+ | | FsRtlAllocatePoolWithTag || 192 | ||
+ | |- | ||
+ | | FsRtlAllocateResource || 193 | ||
+ | |- | ||
+ | | FsRtlAreNamesEqual || 194 | ||
+ | |- | ||
+ | | FsRtlBalanceReads || 195 | ||
+ | |- | ||
+ | | FsRtlCheckLockForReadAccess || 196 | ||
+ | |- | ||
+ | | FsRtlCheckLockForWriteAccess || 197 | ||
+ | |- | ||
+ | | FsRtlCheckOplock || 198 | ||
+ | |- | ||
+ | | FsRtlCopyRead || 199 | ||
+ | |- | ||
+ | | FsRtlCopyWrite || 200 | ||
+ | |- | ||
+ | | FsRtlCurrentBatchOplock || 201 | ||
+ | |- | ||
+ | | FsRtlDeleteKeyFromTunnelCache || 202 | ||
+ | |- | ||
+ | | FsRtlDeleteTunnelCache || 203 | ||
+ | |- | ||
+ | | FsRtlDeregisterUncProvider || 204 | ||
+ | |- | ||
+ | | FsRtlDissectDbcs || 205 | ||
+ | |- | ||
+ | | FsRtlDissectName || 206 | ||
+ | |- | ||
+ | | FsRtlDoesDbcsContainWildCards || 207 | ||
+ | |- | ||
+ | | FsRtlDoesNameContainWildCards || 208 | ||
+ | |- | ||
+ | | FsRtlFastCheckLockForRead || 209 | ||
+ | |- | ||
+ | | FsRtlFastCheckLockForWrite || 210 | ||
+ | |- | ||
+ | | FsRtlFastUnlockAll || 211 | ||
+ | |- | ||
+ | | FsRtlFastUnlockAllByKey || 212 | ||
+ | |- | ||
+ | | FsRtlFastUnlockSingle || 213 | ||
+ | |- | ||
+ | | FsRtlFindInTunnelCache || 214 | ||
+ | |- | ||
+ | | FsRtlFreeFileLock || 215 | ||
+ | |- | ||
+ | | FsRtlGetFileSize || 216 | ||
+ | |- | ||
+ | | FsRtlGetNextFileLock || 217 | ||
+ | |- | ||
+ | | FsRtlGetNextLargeMcbEntry || 218 | ||
+ | |- | ||
+ | | FsRtlGetNextMcbEntry || 219 | ||
+ | |- | ||
+ | | FsRtlIncrementCcFastReadNoWait || 220 | ||
+ | |- | ||
+ | | FsRtlIncrementCcFastReadNotPossible || 221 | ||
+ | |- | ||
+ | | FsRtlIncrementCcFastReadResourceMiss || 222 | ||
+ | |- | ||
+ | | FsRtlIncrementCcFastReadWait || 223 | ||
+ | |- | ||
+ | | FsRtlInitializeFileLock || 224 | ||
+ | |- | ||
+ | | FsRtlInitializeLargeMcb || 225 | ||
+ | |- | ||
+ | | FsRtlInitializeMcb || 226 | ||
+ | |- | ||
+ | | FsRtlInitializeOplock || 227 | ||
+ | |- | ||
+ | | FsRtlInitializeTunnelCache || 228 | ||
+ | |- | ||
+ | | FsRtlInsertPerFileObjectContext || 229 | ||
+ | |- | ||
+ | | FsRtlInsertPerStreamContext || 230 | ||
+ | |- | ||
+ | | FsRtlIsDbcsInExpression || 231 | ||
+ | |- | ||
+ | | FsRtlIsFatDbcsLegal || 232 | ||
+ | |- | ||
+ | | FsRtlIsHpfsDbcsLegal || 233 | ||
+ | |- | ||
+ | | FsRtlIsNameInExpression || 234 | ||
+ | |- | ||
+ | | FsRtlIsNtstatusExpected || 235 | ||
+ | |- | ||
+ | | FsRtlIsPagingFile || 236 | ||
+ | |- | ||
+ | | FsRtlIsTotalDeviceFailure || 237 | ||
+ | |- | ||
+ | | FsRtlLegalAnsiCharacterArray || 238 | ||
+ | |- | ||
+ | | FsRtlLookupLargeMcbEntry || 239 | ||
+ | |- | ||
+ | | FsRtlLookupLastLargeMcbEntry || 240 | ||
+ | |- | ||
+ | | FsRtlLookupLastLargeMcbEntryAndIndex || 241 | ||
+ | |- | ||
+ | | FsRtlLookupLastMcbEntry || 242 | ||
+ | |- | ||
+ | | FsRtlLookupMcbEntry || 243 | ||
+ | |- | ||
+ | | FsRtlLookupPerFileObjectContext || 244 | ||
+ | |- | ||
+ | | FsRtlLookupPerStreamContextInternal || 245 | ||
+ | |- | ||
+ | | FsRtlMdlRead || 246 | ||
+ | |- | ||
+ | | FsRtlMdlReadComplete || 247 | ||
+ | |- | ||
+ | | FsRtlMdlReadCompleteDev || 248 | ||
+ | |- | ||
+ | | FsRtlMdlReadDev || 249 | ||
+ | |- | ||
+ | | FsRtlMdlWriteComplete || 250 | ||
+ | |- | ||
+ | | FsRtlMdlWriteCompleteDev || 251 | ||
+ | |- | ||
+ | | FsRtlNormalizeNtstatus || 252 | ||
+ | |- | ||
+ | | FsRtlNotifyChangeDirectory || 253 | ||
+ | |- | ||
+ | | FsRtlNotifyCleanup || 254 | ||
+ | |- | ||
+ | | FsRtlNotifyFilterChangeDirectory || 255 | ||
+ | |- | ||
+ | | FsRtlNotifyFilterReportChange || 256 | ||
+ | |- | ||
+ | | FsRtlNotifyFullChangeDirectory || 257 | ||
+ | |- | ||
+ | | FsRtlNotifyFullReportChange || 258 | ||
+ | |- | ||
+ | | FsRtlNotifyInitializeSync || 259 | ||
+ | |- | ||
+ | | FsRtlNotifyReportChange || 260 | ||
+ | |- | ||
+ | | FsRtlNotifyUninitializeSync || 261 | ||
+ | |- | ||
+ | | FsRtlNotifyVolumeEvent || 262 | ||
+ | |- | ||
+ | | FsRtlNumberOfRunsInLargeMcb || 263 | ||
+ | |- | ||
+ | | FsRtlNumberOfRunsInMcb || 264 | ||
+ | |- | ||
+ | | FsRtlOplockFsctrl || 265 | ||
+ | |- | ||
+ | | FsRtlOplockIsFastIoPossible || 266 | ||
+ | |- | ||
+ | | FsRtlPostPagingFileStackOverflow || 267 | ||
+ | |- | ||
+ | | FsRtlPostStackOverflow || 268 | ||
+ | |- | ||
+ | | FsRtlPrepareMdlWrite || 269 | ||
+ | |- | ||
+ | | FsRtlPrepareMdlWriteDev || 270 | ||
+ | |- | ||
+ | | FsRtlPrivateLock || 271 | ||
+ | |- | ||
+ | | FsRtlProcessFileLock || 272 | ||
+ | |- | ||
+ | | FsRtlRegisterFileSystemFilterCallbacks || 273 | ||
+ | |- | ||
+ | | FsRtlRegisterUncProvider || 274 | ||
+ | |- | ||
+ | | FsRtlReleaseFile || 275 | ||
+ | |- | ||
+ | | FsRtlRemoveLargeMcbEntry || 276 | ||
+ | |- | ||
+ | | FsRtlRemoveMcbEntry || 277 | ||
+ | |- | ||
+ | | FsRtlRemovePerFileObjectContext || 278 | ||
+ | |- | ||
+ | | FsRtlRemovePerStreamContext || 279 | ||
+ | |- | ||
+ | | FsRtlResetLargeMcb || 280 | ||
+ | |- | ||
+ | | FsRtlSplitLargeMcb || 281 | ||
+ | |- | ||
+ | | FsRtlSyncVolumes || 282 | ||
+ | |- | ||
+ | | FsRtlTeardownPerStreamContexts || 283 | ||
+ | |- | ||
+ | | FsRtlTruncateLargeMcb || 284 | ||
+ | |- | ||
+ | | FsRtlTruncateMcb || 285 | ||
+ | |- | ||
+ | | FsRtlUninitializeFileLock || 286 | ||
+ | |- | ||
+ | | FsRtlUninitializeLargeMcb || 287 | ||
+ | |- | ||
+ | | FsRtlUninitializeMcb || 288 | ||
+ | |- | ||
+ | | FsRtlUninitializeOplock || 289 | ||
+ | |- | ||
+ | | HalDispatchTable || 290 | ||
+ | |- | ||
+ | | HalExamineMBR || 30 | ||
+ | |- | ||
+ | | HalPrivateDispatchTable || 291 | ||
+ | |- | ||
+ | | HeadlessDispatch || 292 | ||
+ | |- | ||
+ | | InbvAcquireDisplayOwnership || 293 | ||
+ | |- | ||
+ | | InbvCheckDisplayOwnership || 294 | ||
+ | |- | ||
+ | | InbvDisplayString || 295 | ||
+ | |- | ||
+ | | InbvEnableBootDriver || 296 | ||
+ | |- | ||
+ | | InbvEnableDisplayString || 297 | ||
+ | |- | ||
+ | | InbvInstallDisplayStringFilter || 298 | ||
+ | |- | ||
+ | | InbvIsBootDriverInstalled || 299 | ||
+ | |- | ||
+ | | InbvNotifyDisplayOwnershipLost || 300 | ||
+ | |- | ||
+ | | InbvResetDisplay || 301 | ||
+ | |- | ||
+ | | InbvSetScrollRegion || 302 | ||
+ | |- | ||
+ | | InbvSetTextColor || 303 | ||
+ | |- | ||
+ | | InbvSolidColorFill || 304 | ||
+ | |- | ||
+ | | InitSafeBootMode || 305 | ||
+ | |- | ||
+ | | InterlockedCompareExchange || 31 | ||
+ | |- | ||
+ | | InterlockedDecrement || 32 | ||
+ | |- | ||
+ | | InterlockedExchange || 33 | ||
+ | |- | ||
+ | | InterlockedExchangeAdd || 34 | ||
+ | |- | ||
+ | | InterlockedIncrement || 35 | ||
+ | |- | ||
+ | | InterlockedPopEntrySList || 36 | ||
+ | |- | ||
+ | | InterlockedPushEntrySList || 37 | ||
+ | |- | ||
+ | | IoAcquireCancelSpinLock || 306 | ||
+ | |- | ||
+ | | IoAcquireRemoveLockEx || 307 | ||
+ | |- | ||
+ | | IoAcquireVpbSpinLock || 308 | ||
+ | |- | ||
+ | | IoAdapterObjectType || 309 | ||
+ | |- | ||
+ | | IoAllocateAdapterChannel || 310 | ||
+ | |- | ||
+ | | IoAllocateController || 311 | ||
+ | |- | ||
+ | | IoAllocateDriverObjectExtension || 312 | ||
+ | |- | ||
+ | | IoAllocateErrorLogEntry || 313 | ||
+ | |- | ||
+ | | IoAllocateIrp || 314 | ||
+ | |- | ||
+ | | IoAllocateMdl || 315 | ||
+ | |- | ||
+ | | IoAllocateWorkItem || 316 | ||
+ | |- | ||
+ | | IoAssignDriveLetters || 38 | ||
+ | |- | ||
+ | | IoAssignResources || 317 | ||
+ | |- | ||
+ | | IoAttachDevice || |
Revision as of 15:30, 22 May 2016
This is the list of exports from ntoskrnl. Taken from Windows XP SP2 Build 2600.
Name | # win xp |
CcCanIWrite | 60 |
CcCopyRead | 61 |
CcCopyWrite | 62 |
CcDeferWrite | 63 |
CcFastCopyRead | 64 |
CcFastCopyWrite | 65 |
CcFastMdlReadWait | 66 |
CcFastReadNotPossible | 67 |
CcFastReadWait | 68 |
CcFlushCache | 69 |
CcGetDirtyPages | 70 |
CcGetFileObjectFromBcb | 71 |
CcGetFileObjectFromSectionPtrs | 72 |
CcGetFlushedValidData | 73 |
CcGetLsnForFileObject | 74 |
CcInitializeCacheMap | 75 |
CcIsThereDirtyData | 76 |
CcMapData | 77 |
CcMdlRead | 78 |
CcMdlReadComplete | 79 |
CcMdlWriteAbort | 80 |
CcMdlWriteComplete | 81 |
CcPinMappedData | 82 |
CcPinRead | 83 |
CcPrepareMdlWrite | 84 |
CcPreparePinWrite | 85 |
CcPurgeCacheSection | 86 |
CcRemapBcb | 87 |
CcRepinBcb | 88 |
CcScheduleReadAhead | 89 |
CcSetAdditionalCacheAttributes | 90 |
CcSetBcbOwnerPointer | 91 |
CcSetDirtyPageThreshold | 92 |
CcSetDirtyPinnedData | 93 |
CcSetFileSizes | 94 |
CcSetLogHandleForFile | 95 |
CcSetReadAheadGranularity | 96 |
CcUninitializeCacheMap | 97 |
CcUnpinData | 98 |
CcUnpinDataForThread | 99 |
CcUnpinRepinnedBcb | 100 |
CcWaitForCurrentLazyWriterActivity | 101 |
CcZeroData | 102 |
CmRegisterCallback | 103 |
CmUnRegisterCallback | 104 |
DbgBreakPoint | 105 |
DbgBreakPointWithStatus | 106 |
DbgLoadImageSymbols | 107 |
DbgPrint | 108 |
DbgPrintEx | 109 |
DbgPrintReturnControlC | 110 |
DbgPrompt | 111 |
DbgQueryDebugFilterState | 112 |
DbgSetDebugFilterState | 113 |
ExAcquireFastMutexUnsafe | 1 |
ExAcquireResourceExclusiveLite | 114 |
ExAcquireResourceSharedLite | 115 |
ExAcquireRundownProtection | 2 |
ExAcquireRundownProtectionEx | 3 |
ExAcquireSharedStarveExclusive | 116 |
ExAcquireSharedWaitForExclusive | 117 |
ExAllocateFromPagedLookasideList | 118 |
ExAllocatePool | 119 |
ExAllocatePoolWithQuota | 120 |
ExAllocatePoolWithQuotaTag | 121 |
ExAllocatePoolWithTag | 122 |
ExAllocatePoolWithTagPriority | 123 |
ExConvertExclusiveToSharedLite | 124 |
ExCreateCallback | 125 |
ExDeleteNPagedLookasideList | 126 |
ExDeletePagedLookasideList | 127 |
ExDeleteResourceLite | 128 |
ExDesktopObjectType | 129 |
ExDisableResourceBoostLite | 130 |
ExEnumHandleTable | 131 |
ExEventObjectType | 132 |
ExExtendZone | 133 |
ExFreePool | 134 |
ExFreePoolWithTag | 135 |
ExFreeToPagedLookasideList | 136 |
ExGetCurrentProcessorCounts | 137 |
ExGetCurrentProcessorCpuUsage | 138 |
ExGetExclusiveWaiterCount | 139 |
ExGetPreviousMode | 140 |
ExGetSharedWaiterCount | 141 |
ExInitializeNPagedLookasideList | 142 |
ExInitializePagedLookasideList | 143 |
ExInitializeResourceLite | 144 |
ExInitializeRundownProtection | 4 |
ExInitializeZone | 145 |
ExInterlockedAddLargeInteger | 146 |
ExInterlockedAddLargeStatistic | 5 |
ExInterlockedAddUlong | 147 |
ExInterlockedCompareExchange64 | 6 |
ExInterlockedDecrementLong | 148 |
ExInterlockedExchangeUlong | 149 |
ExInterlockedExtendZone | 150 |
ExInterlockedFlushSList | 7 |
ExInterlockedIncrementLong | 151 |
ExInterlockedInsertHeadList | 152 |
ExInterlockedInsertTailList | 153 |
ExInterlockedPopEntryList | 154 |
ExInterlockedPopEntrySList | 8 |
ExInterlockedPushEntryList | 155 |
ExInterlockedPushEntrySList | 9 |
ExInterlockedRemoveHeadList | 156 |
ExIsProcessorFeaturePresent | 157 |
ExIsResourceAcquiredExclusiveLite | 158 |
ExIsResourceAcquiredSharedLite | 159 |
ExLocalTimeToSystemTime | 160 |
ExNotifyCallback | 161 |
ExQueryPoolBlockSize | 162 |
ExQueueWorkItem | 163 |
ExRaiseAccessViolation | 164 |
ExRaiseDatatypeMisalignment | 165 |
ExRaiseException | 166 |
ExRaiseHardError | 167 |
ExRaiseStatus | 168 |
ExReInitializeRundownProtection | 10 |
ExRegisterCallback | 169 |
ExReinitializeResourceLite | 170 |
ExReleaseFastMutexUnsafe | 11 |
ExReleaseResourceForThreadLite | 171 |
ExReleaseResourceLite | 12 |
ExReleaseRundownProtection | 13 |
ExReleaseRundownProtectionEx | 14 |
ExRundownCompleted | 15 |
ExSemaphoreObjectType | 172 |
ExSetResourceOwnerPointer | 173 |
ExSetTimerResolution | 174 |
ExSystemExceptionFilter | 175 |
ExSystemTimeToLocalTime | 176 |
ExUnregisterCallback | 177 |
ExUuidCreate | 178 |
ExVerifySuite | 179 |
ExWaitForRundownProtectionRelease | 16 |
ExWindowStationObjectType | 180 |
ExfAcquirePushLockExclusive | 17 |
ExfAcquirePushLockShared | 18 |
ExfInterlockedAddUlong | 19 |
ExfInterlockedCompareExchange64 | 20 |
ExfInterlockedInsertHeadList | 21 |
ExfInterlockedInsertTailList | 22 |
ExfInterlockedPopEntryList | 23 |
ExfInterlockedPushEntryList | 24 |
ExfInterlockedRemoveHeadList | 25 |
ExfReleasePushLock | 26 |
Exfi386InterlockedDecrementLong | 27 |
Exfi386InterlockedExchangeUlong | 28 |
Exfi386InterlockedIncrementLong | 29 |
Exi386InterlockedDecrementLong | 181 |
Exi386InterlockedExchangeUlong | 182 |
Exi386InterlockedIncrementLong | 183 |
FsRtlAcquireFileExclusive | 184 |
FsRtlAddLargeMcbEntry | 185 |
FsRtlAddMcbEntry | 186 |
FsRtlAddToTunnelCache | 187 |
FsRtlAllocateFileLock | 188 |
FsRtlAllocatePool | 189 |
FsRtlAllocatePoolWithQuota | 190 |
FsRtlAllocatePoolWithQuotaTag | 191 |
FsRtlAllocatePoolWithTag | 192 |
FsRtlAllocateResource | 193 |
FsRtlAreNamesEqual | 194 |
FsRtlBalanceReads | 195 |
FsRtlCheckLockForReadAccess | 196 |
FsRtlCheckLockForWriteAccess | 197 |
FsRtlCheckOplock | 198 |
FsRtlCopyRead | 199 |
FsRtlCopyWrite | 200 |
FsRtlCurrentBatchOplock | 201 |
FsRtlDeleteKeyFromTunnelCache | 202 |
FsRtlDeleteTunnelCache | 203 |
FsRtlDeregisterUncProvider | 204 |
FsRtlDissectDbcs | 205 |
FsRtlDissectName | 206 |
FsRtlDoesDbcsContainWildCards | 207 |
FsRtlDoesNameContainWildCards | 208 |
FsRtlFastCheckLockForRead | 209 |
FsRtlFastCheckLockForWrite | 210 |
FsRtlFastUnlockAll | 211 |
FsRtlFastUnlockAllByKey | 212 |
FsRtlFastUnlockSingle | 213 |
FsRtlFindInTunnelCache | 214 |
FsRtlFreeFileLock | 215 |
FsRtlGetFileSize | 216 |
FsRtlGetNextFileLock | 217 |
FsRtlGetNextLargeMcbEntry | 218 |
FsRtlGetNextMcbEntry | 219 |
FsRtlIncrementCcFastReadNoWait | 220 |
FsRtlIncrementCcFastReadNotPossible | 221 |
FsRtlIncrementCcFastReadResourceMiss | 222 |
FsRtlIncrementCcFastReadWait | 223 |
FsRtlInitializeFileLock | 224 |
FsRtlInitializeLargeMcb | 225 |
FsRtlInitializeMcb | 226 |
FsRtlInitializeOplock | 227 |
FsRtlInitializeTunnelCache | 228 |
FsRtlInsertPerFileObjectContext | 229 |
FsRtlInsertPerStreamContext | 230 |
FsRtlIsDbcsInExpression | 231 |
FsRtlIsFatDbcsLegal | 232 |
FsRtlIsHpfsDbcsLegal | 233 |
FsRtlIsNameInExpression | 234 |
FsRtlIsNtstatusExpected | 235 |
FsRtlIsPagingFile | 236 |
FsRtlIsTotalDeviceFailure | 237 |
FsRtlLegalAnsiCharacterArray | 238 |
FsRtlLookupLargeMcbEntry | 239 |
FsRtlLookupLastLargeMcbEntry | 240 |
FsRtlLookupLastLargeMcbEntryAndIndex | 241 |
FsRtlLookupLastMcbEntry | 242 |
FsRtlLookupMcbEntry | 243 |
FsRtlLookupPerFileObjectContext | 244 |
FsRtlLookupPerStreamContextInternal | 245 |
FsRtlMdlRead | 246 |
FsRtlMdlReadComplete | 247 |
FsRtlMdlReadCompleteDev | 248 |
FsRtlMdlReadDev | 249 |
FsRtlMdlWriteComplete | 250 |
FsRtlMdlWriteCompleteDev | 251 |
FsRtlNormalizeNtstatus | 252 |
FsRtlNotifyChangeDirectory | 253 |
FsRtlNotifyCleanup | 254 |
FsRtlNotifyFilterChangeDirectory | 255 |
FsRtlNotifyFilterReportChange | 256 |
FsRtlNotifyFullChangeDirectory | 257 |
FsRtlNotifyFullReportChange | 258 |
FsRtlNotifyInitializeSync | 259 |
FsRtlNotifyReportChange | 260 |
FsRtlNotifyUninitializeSync | 261 |
FsRtlNotifyVolumeEvent | 262 |
FsRtlNumberOfRunsInLargeMcb | 263 |
FsRtlNumberOfRunsInMcb | 264 |
FsRtlOplockFsctrl | 265 |
FsRtlOplockIsFastIoPossible | 266 |
FsRtlPostPagingFileStackOverflow | 267 |
FsRtlPostStackOverflow | 268 |
FsRtlPrepareMdlWrite | 269 |
FsRtlPrepareMdlWriteDev | 270 |
FsRtlPrivateLock | 271 |
FsRtlProcessFileLock | 272 |
FsRtlRegisterFileSystemFilterCallbacks | 273 |
FsRtlRegisterUncProvider | 274 |
FsRtlReleaseFile | 275 |
FsRtlRemoveLargeMcbEntry | 276 |
FsRtlRemoveMcbEntry | 277 |
FsRtlRemovePerFileObjectContext | 278 |
FsRtlRemovePerStreamContext | 279 |
FsRtlResetLargeMcb | 280 |
FsRtlSplitLargeMcb | 281 |
FsRtlSyncVolumes | 282 |
FsRtlTeardownPerStreamContexts | 283 |
FsRtlTruncateLargeMcb | 284 |
FsRtlTruncateMcb | 285 |
FsRtlUninitializeFileLock | 286 |
FsRtlUninitializeLargeMcb | 287 |
FsRtlUninitializeMcb | 288 |
FsRtlUninitializeOplock | 289 |
HalDispatchTable | 290 |
HalExamineMBR | 30 |
HalPrivateDispatchTable | 291 |
HeadlessDispatch | 292 |
InbvAcquireDisplayOwnership | 293 |
InbvCheckDisplayOwnership | 294 |
InbvDisplayString | 295 |
InbvEnableBootDriver | 296 |
InbvEnableDisplayString | 297 |
InbvInstallDisplayStringFilter | 298 |
InbvIsBootDriverInstalled | 299 |
InbvNotifyDisplayOwnershipLost | 300 |
InbvResetDisplay | 301 |
InbvSetScrollRegion | 302 |
InbvSetTextColor | 303 |
InbvSolidColorFill | 304 |
InitSafeBootMode | 305 |
InterlockedCompareExchange | 31 |
InterlockedDecrement | 32 |
InterlockedExchange | 33 |
InterlockedExchangeAdd | 34 |
InterlockedIncrement | 35 |
InterlockedPopEntrySList | 36 |
InterlockedPushEntrySList | 37 |
IoAcquireCancelSpinLock | 306 |
IoAcquireRemoveLockEx | 307 |
IoAcquireVpbSpinLock | 308 |
IoAdapterObjectType | 309 |
IoAllocateAdapterChannel | 310 |
IoAllocateController | 311 |
IoAllocateDriverObjectExtension | 312 |
IoAllocateErrorLogEntry | 313 |
IoAllocateIrp | 314 |
IoAllocateMdl | 315 |
IoAllocateWorkItem | 316 |
IoAssignDriveLetters | 38 |
IoAssignResources | 317 |
IoAttachDevice | 318 |
IoAttachDeviceByPointer | 319 |
IoAttachDeviceToDeviceStack | 320 |
IoAttachDeviceToDeviceStackSafe | 321 |
IoBuildAsynchronousFsdRequest | 322 |
IoBuildDeviceIoControlRequest | 323 |
IoBuildPartialMdl | 324 |
IoBuildSynchronousFsdRequest | 325 |
IoCallDriver | 326 |
IoCancelFileOpen | 327 |
IoCancelIrp | 328 |
IoCheckDesiredAccess | 329 |
IoCheckEaBufferValidity | 330 |
IoCheckFunctionAccess | 331 |
IoCheckQuerySetFileInformation | 332 |
IoCheckQuerySetVolumeInformation | 333 |
IoCheckQuotaBufferValidity | 334 |
IoCheckShareAccess | 335 |
IoCompleteRequest | 336 |
IoConnectInterrupt | 337 |
IoCreateController | 338 |
IoCreateDevice | 339 |
IoCreateDisk | 340 |
IoCreateDriver | 341 |
IoCreateFile | 342 |
IoCreateFileSpecifyDeviceObjectHint | 343 |
IoCreateNotificationEvent | 344 |
IoCreateStreamFileObject | 345 |
IoCreateStreamFileObjectEx | 346 |
IoCreateStreamFileObjectLite | 347 |
IoCreateSymbolicLink | 348 |
IoCreateSynchronizationEvent | 349 |
IoCreateUnprotectedSymbolicLink | 350 |
IoCsqInitialize | 351 |
IoCsqInsertIrp | 352 |
IoCsqRemoveIrp | 353 |
IoCsqRemoveNextIrp | 354 |
IoDeleteController | 355 |
IoDeleteDevice | 356 |
IoDeleteDriver | 357 |
IoDeleteSymbolicLink | 358 |
IoDetachDevice | 359 |
IoDeviceHandlerObjectSize | 360 |
IoDeviceHandlerObjectType | 361 |
IoDeviceObjectType | 362 |
IoDisconnectInterrupt | 363 |
IoDriverObjectType | 364 |
IoEnqueueIrp | 365 |
IoEnumerateDeviceObjectList | 366 |
IoFastQueryNetworkAttributes | 367 |
IoFileObjectType | 368 |
IoForwardAndCatchIrp | 369 |
IoForwardIrpSynchronously | 370 |
IoFreeController | 371 |
IoFreeErrorLogEntry | 372 |
IoFreeIrp | 373 |
IoFreeMdl | 374 |
IoFreeWorkItem | 375 |
IoGetAttachedDevice | 376 |
IoGetAttachedDeviceReference | 377 |
IoGetBaseFileSystemDeviceObject | 378 |
IoGetBootDiskInformation | 379 |
IoGetConfigurationInformation | 380 |
IoGetCurrentProcess | 381 |
IoGetDeviceAttachmentBaseRef | 382 |
IoGetDeviceInterfaceAlias | 383 |
IoGetDeviceInterfaces | 384 |
IoGetDeviceObjectPointer | 385 |
IoGetDeviceProperty | 386 |
IoGetDeviceToVerify | 387 |
IoGetDiskDeviceObject | 388 |
IoGetDmaAdapter | 389 |
IoGetDriverObjectExtension | 390 |
IoGetFileObjectGenericMapping | 391 |
IoGetInitialStack | 392 |
IoGetLowerDeviceObject | 393 |
IoGetRelatedDeviceObject | 394 |
IoGetRequestorProcess | 395 |
IoGetRequestorProcessId | 396 |
IoGetRequestorSessionId | 397 |
IoGetStackLimits | 398 |
IoGetTopLevelIrp | 399 |
IoInitializeIrp | 400 |
IoInitializeRemoveLockEx | 401 |
IoInitializeTimer | 402 |
IoInvalidateDeviceRelations | 403 |
IoInvalidateDeviceState | 404 |
IoIsFileOriginRemote | 405 |
IoIsOperationSynchronous | 406 |
IoIsSystemThread | 407 |
IoIsValidNameGraftingBuffer | 408 |
IoIsWdmVersionAvailable | 409 |
IoMakeAssociatedIrp | 410 |
IoOpenDeviceInterfaceRegistryKey | 411 |
IoOpenDeviceRegistryKey | 412 |
IoPageRead | 413 |
IoPnPDeliverServicePowerNotification | 414 |
IoQueryDeviceDescription | 415 |
IoQueryFileDosDeviceName | 416 |
IoQueryFileInformation | 417 |
IoQueryVolumeInformation | 418 |
IoQueueThreadIrp | 419 |
IoQueueWorkItem | 420 |
IoRaiseHardError | 421 |
IoRaiseInformationalHardError | 422 |
IoReadDiskSignature | 423 |
IoReadOperationCount | 424 |
IoReadPartitionTable | 39 |
IoReadPartitionTableEx | 425 |
IoReadTransferCount | 426 |
IoRegisterBootDriverReinitialization | 427 |
IoRegisterDeviceInterface | 428 |
IoRegisterDriverReinitialization | 429 |
IoRegisterFileSystem | 430 |
IoRegisterFsRegistrationChange | 431 |
IoRegisterLastChanceShutdownNotification | 432 |
IoRegisterPlugPlayNotification | 433 |
IoRegisterShutdownNotification | 434 |
IoReleaseCancelSpinLock | 435 |
IoReleaseRemoveLockAndWaitEx | 436 |
IoReleaseRemoveLockEx | 437 |
IoReleaseVpbSpinLock | 438 |
IoRemoveShareAccess | 439 |
IoReportDetectedDevice | 440 |
IoReportHalResourceUsage | 441 |
IoReportResourceForDetection | 442 |
IoReportResourceUsage | 443 |
IoReportTargetDeviceChange | 444 |
IoReportTargetDeviceChangeAsynchronous | 445 |
IoRequestDeviceEject | 446 |
IoReuseIrp | 447 |
IoSetCompletionRoutineEx | 448 |
IoSetDeviceInterfaceState | 449 |
IoSetDeviceToVerify | 450 |
IoSetFileOrigin | 451 |
IoSetHardErrorOrVerifyDevice | 452 |
IoSetInformation | 453 |
IoSetIoCompletion | 454 |
IoSetPartitionInformation | 40 |
IoSetPartitionInformationEx | 455 |
IoSetShareAccess | 456 |
IoSetStartIoAttributes | 457 |
IoSetSystemPartition | 458 |
IoSetThreadHardErrorMode | 459 |
IoSetTopLevelIrp | 460 |
IoStartNextPacket | 461 |
IoStartNextPacketByKey | 462 |
IoStartPacket | 463 |
IoStartTimer | 464 |
IoStatisticsLock | 465 |
IoStopTimer | 466 |
IoSynchronousInvalidateDeviceRelations | 467 |
IoSynchronousPageWrite | 468 |
IoThreadToProcess | 469 |
IoUnregisterFileSystem | 470 |
IoUnregisterFsRegistrationChange | 471 |
IoUnregisterPlugPlayNotification | 472 |
IoUnregisterShutdownNotification | 473 |
IoUpdateShareAccess | 474 |
IoValidateDeviceIoControlAccess | 475 |
IoVerifyPartitionTable | 476 |
IoVerifyVolume | 477 |
IoVolumeDeviceToDosName | 478 |
IoWMIAllocateInstanceIds | 479 |
IoWMIDeviceObjectToInstanceName | 480 |
IoWMIExecuteMethod | 481 |
IoWMIHandleToInstanceName | 482 |
IoWMIOpenBlock | 483 |
IoWMIQueryAllData | 484 |
IoWMIQueryAllDataMultiple | 485 |
IoWMIQuerySingleInstance | 486 |
IoWMIQuerySingleInstanceMultiple | 487 |
IoWMIRegistrationControl | 488 |
IoWMISetNotificationCallback | 489 |
IoWMISetSingleInstance | 490 |
IoWMISetSingleItem | 491 |
IoWMISuggestInstanceName | 492 |
IoWMIWriteEvent | 493 |
IoWriteErrorLogEntry | 494 |
IoWriteOperationCount | 495 |
IoWritePartitionTable | 41 |
IoWritePartitionTableEx | 496 |
IoWriteTransferCount | 497 |
IofCallDriver | 42 |
IofCompleteRequest | 43 |
KdDebuggerEnabled | 498 |
KdDebuggerNotPresent | 499 |
KdDisableDebugger | 500 |
KdEnableDebugger | 501 |
KdEnteredDebugger | 502 |
KdPollBreakIn | 503 |
KdPowerTransition | 504 |
Ke386CallBios | 505 |
Ke386IoSetAccessProcess | 506 |
Ke386QueryIoAccessMap | 507 |
Ke386SetIoAccessMap | 508 |
KeAcquireInStackQueuedSpinLockAtDpcLevel | 44 |
KeAcquireInterruptSpinLock | 509 |
KeAcquireSpinLockAtDpcLevel | 510 |
KeAddSystemServiceTable | 511 |
KeAreApcsDisabled | 512 |
KeAttachProcess | 513 |
KeBugCheck | 514 |
KeBugCheckEx | 515 |
KeCancelTimer | 516 |
KeCapturePersistentThreadState | 517 |
KeClearEvent | 518 |
KeConnectInterrupt | 519 |
KeDcacheFlushCount | 520 |
KeDelayExecutionThread | 521 |
KeDeregisterBugCheckCallback | 522 |
KeDeregisterBugCheckReasonCallback | 523 |
KeDetachProcess | 524 |
KeDisconnectInterrupt | 525 |
KeEnterCriticalRegion | 526 |
KeEnterKernelDebugger | 527 |
KeFindConfigurationEntry | 528 |
KeFindConfigurationNextEntry | 529 |
KeFlushEntireTb | 530 |
KeFlushQueuedDpcs | 531 |
KeGetCurrentThread | 532 |
KeGetPreviousMode | 533 |
KeGetRecommendedSharedDataAlignment | 534 |
KeI386AbiosCall | 535 |
KeI386AllocateGdtSelectors | 536 |
KeI386Call16BitCStyleFunction | 537 |
KeI386Call16BitFunction | 538 |
KeI386FlatToGdtSelector | 539 |
KeI386GetLid | 540 |
KeI386MachineType | 541 |
KeI386ReleaseGdtSelectors | 542 |
KeI386ReleaseLid | 543 |
KeI386SetGdtSelector | 544 |
KeIcacheFlushCount | 545 |
KeInitializeApc | 546 |
KeInitializeDeviceQueue | 547 |
KeInitializeDpc | 548 |
KeInitializeEvent | 549 |
KeInitializeInterrupt | 550 |
KeInitializeMutant | 551 |
KeInitializeMutex | 552 |
KeInitializeQueue | 553 |
KeInitializeSemaphore | 554 |
KeInitializeSpinLock | 555 |
KeInitializeTimer | 556 |
KeInitializeTimerEx | 557 |
KeInsertByKeyDeviceQueue | 558 |
KeInsertDeviceQueue | 559 |
KeInsertHeadQueue | 560 |
KeInsertQueue | 561 |
KeInsertQueueApc | 562 |
KeInsertQueueDpc | 563 |
KeIsAttachedProcess | 564 |
KeIsExecutingDpc | 565 |
KeLeaveCriticalRegion | 566 |
KeLoaderBlock | 567 |
KeNumberProcessors | 568 |
KeProfileInterrupt | 569 |
KeProfileInterruptWithSource | 570 |
KePulseEvent | 571 |
KeQueryActiveProcessors | 572 |
KeQueryInterruptTime | 573 |
KeQueryPriorityThread | 574 |
KeQueryRuntimeThread | 575 |
KeQuerySystemTime | 576 |
KeQueryTickCount | 577 |
KeQueryTimeIncrement | 578 |
KeRaiseUserException | 579 |
KeReadStateEvent | 580 |
KeReadStateMutant | 581 |
KeReadStateMutex | 582 |
KeReadStateQueue | 583 |
KeReadStateSemaphore | 584 |
KeReadStateTimer | 585 |
KeRegisterBugCheckCallback | 586 |
KeRegisterBugCheckReasonCallback | 587 |
KeReleaseInStackQueuedSpinLockFromDpcLevel | 45 |
KeReleaseInterruptSpinLock | 588 |
KeReleaseMutant | 589 |
KeReleaseMutex | 590 |
KeReleaseSemaphore | 591 |
KeReleaseSpinLockFromDpcLevel | 592 |
KeRemoveByKeyDeviceQueue | 593 |
KeRemoveByKeyDeviceQueueIfBusy | 594 |
KeRemoveDeviceQueue | 595 |
KeRemoveEntryDeviceQueue | 596 |
KeRemoveQueue | 597 |
KeRemoveQueueDpc | 598 |
KeRemoveSystemServiceTable | 599 |
KeResetEvent | 600 |
KeRestoreFloatingPointState | 601 |
KeRevertToUserAffinityThread | 602 |
KeRundownQueue | 603 |
KeSaveFloatingPointState | 604 |
KeSaveStateForHibernate | 605 |
KeServiceDescriptorTable | 606 |
KeSetAffinityThread | 607 |
KeSetBasePriorityThread | 608 |
KeSetDmaIoCoherency | 609 |
KeSetEvent | 610 |
KeSetEventBoostPriority | 611 |
KeSetIdealProcessorThread | 612 |
KeSetImportanceDpc | 613 |
KeSetKernelStackSwapEnable | 614 |
KeSetPriorityThread | 615 |
KeSetProfileIrql | 616 |
KeSetSystemAffinityThread | 617 |
KeSetTargetProcessorDpc | 618 |
KeSetTimeIncrement | 619 |
KeSetTimeUpdateNotifyRoutine | 46 |
KeSetTimer | 620 |
KeSetTimerEx | 621 |
KeStackAttachProcess | 622 |
KeSynchronizeExecution | 623 |
KeTerminateThread | 624 |
KeTickCount | 625 |
KeUnstackDetachProcess | 626 |
KeUpdateRunTime | 627 |
KeUpdateSystemTime | 628 |
KeUserModeCallback | 629 |
KeWaitForMultipleObjects | 630 |
KeWaitForMutexObject | 631 |
KeWaitForSingleObject | 632 |
KefAcquireSpinLockAtDpcLevel | 47 |
KefReleaseSpinLockFromDpcLevel | 48 |
Kei386EoiHelper | 58 |
KiAcquireSpinLock | 49 |
KiBugCheckData | 633 |
KiCoprocessorError | 634 |
KiDeliverApc | 635 |
KiDispatchInterrupt | 636 |
KiEnableTimerWatchdog | 637 |
KiIpiServiceRoutine | 638 |
KiReleaseSpinLock | 50 |
KiUnexpectedInterrupt | 639 |
Kii386SpinOnSpinLock | 59 |
LdrAccessResource | 640 |
LdrEnumResources | 641 |
LdrFindResourceDirectory_U | 642 |
LdrFindResource_U | 643 |
LpcPortObjectType | 644 |
LpcRequestPort | 645 |
LpcRequestWaitReplyPort | 646 |
LsaCallAuthenticationPackage | 647 |
LsaDeregisterLogonProcess | 648 |
LsaFreeReturnBuffer | 649 |
LsaLogonUser | 650 |
LsaLookupAuthenticationPackage | 651 |
LsaRegisterLogonProcess | 652 |
Mm64BitPhysicalAddress | 653 |
MmAddPhysicalMemory | 654 |
MmAddVerifierThunks | 655 |
MmAdjustWorkingSetSize | 656 |
MmAdvanceMdl | 657 |
MmAllocateContiguousMemory | 658 |
MmAllocateContiguousMemorySpecifyCache | 659 |
MmAllocateMappingAddress | 660 |
MmAllocateNonCachedMemory | 661 |
MmAllocatePagesForMdl | 662 |
MmBuildMdlForNonPagedPool | 663 |
MmCanFileBeTruncated | 664 |
MmCommitSessionMappedView | 665 |
MmCreateMdl | 666 |
MmCreateSection | 667 |
MmDisableModifiedWriteOfSection | 668 |
MmFlushImageSection | 669 |
MmForceSectionClosed | 670 |
MmFreeContiguousMemory | 671 |
MmFreeContiguousMemorySpecifyCache | 672 |
MmFreeMappingAddress | 673 |
MmFreeNonCachedMemory | 674 |
MmFreePagesFromMdl | 675 |
MmGetPhysicalAddress | 676 |
MmGetPhysicalMemoryRanges | 677 |
MmGetSystemRoutineAddress | 678 |
MmGetVirtualForPhysical | 679 |
MmGrowKernelStack | 680 |
MmHighestUserAddress | 681 |
MmIsAddressValid | 682 |
MmIsDriverVerifying | 683 |
MmIsNonPagedSystemAddressValid | 684 |
MmIsRecursiveIoFault | 685 |
MmIsThisAnNtAsSystem | 686 |
MmIsVerifierEnabled | 687 |
MmLockPagableDataSection | 688 |
MmLockPagableImageSection | 689 |
MmLockPagableSectionByHandle | 690 |
MmMapIoSpace | 691 |
MmMapLockedPages | 692 |
MmMapLockedPagesSpecifyCache | 693 |
MmMapLockedPagesWithReservedMapping | 694 |
MmMapMemoryDumpMdl | 695 |
MmMapUserAddressesToPage | 696 |
MmMapVideoDisplay | 697 |
MmMapViewInSessionSpace | 698 |
MmMapViewInSystemSpace | 699 |
MmMapViewOfSection | 700 |
MmMarkPhysicalMemoryAsBad | 701 |
MmMarkPhysicalMemoryAsGood | 702 |
MmPageEntireDriver | 703 |
MmPrefetchPages | 704 |
MmProbeAndLockPages | 705 |
MmProbeAndLockProcessPages | 706 |
MmProbeAndLockSelectedPages | 707 |
MmProtectMdlSystemAddress | 708 |
MmQuerySystemSize | 709 |
MmRemovePhysicalMemory | 710 |
MmResetDriverPaging | 711 |
MmSectionObjectType | 712 |
MmSecureVirtualMemory | 713 |
MmSetAddressRangeModified | 714 |
MmSetBankedSection | 715 |
MmSizeOfMdl | 716 |
MmSystemRangeStart | 717 |
MmTrimAllSystemPagableMemory | 718 |
MmUnlockPagableImageSection | 719 |
MmUnlockPages | 720 |
MmUnmapIoSpace | 721 |
MmUnmapLockedPages | 722 |
MmUnmapReservedMapping | 723 |
MmUnmapVideoDisplay | 724 |
MmUnmapViewInSessionSpace | 725 |
MmUnmapViewInSystemSpace | 726 |
MmUnmapViewOfSection | 727 |
MmUnsecureVirtualMemory | 728 |
MmUserProbeAddress | 729 |
NlsAnsiCodePage | 730 |
NlsLeadByteInfo | 731 |
NlsMbCodePageTag | 732 |
NlsMbOemCodePageTag | 733 |
NlsOemCodePage | 734 |
NlsOemLeadByteInfo | 735 |
NtAddAtom | 736 |
NtAdjustPrivilegesToken | 737 |
NtAllocateLocallyUniqueId | 738 |
NtAllocateUuids | 739 |
NtAllocateVirtualMemory | 740 |
NtBuildNumber | 741 |
NtClose | 742 |
NtConnectPort | 743 |
NtCreateEvent | 744 |
NtCreateFile | 745 |
NtCreateSection | 746 |
NtDeleteAtom | 747 |
NtDeleteFile | 748 |
NtDeviceIoControlFile | 749 |
NtDuplicateObject | 750 |
NtDuplicateToken | 751 |
NtFindAtom | 752 |
NtFreeVirtualMemory | 753 |
NtFsControlFile | 754 |
NtGlobalFlag | 755 |
NtLockFile | 756 |
NtMakePermanentObject | 757 |
NtMapViewOfSection | 758 |
NtNotifyChangeDirectoryFile | 759 |
NtOpenFile | 760 |
NtOpenProcess | 761 |
NtOpenProcessToken | 762 |
NtOpenProcessTokenEx | 763 |
NtOpenThread | 764 |
NtOpenThreadToken | 765 |
NtOpenThreadTokenEx | 766 |
NtQueryDirectoryFile | 767 |
NtQueryEaFile | 768 |
NtQueryInformationAtom | 769 |
NtQueryInformationFile | 770 |
NtQueryInformationProcess | 771 |
NtQueryInformationThread | 772 |
NtQueryInformationToken | 773 |
NtQueryQuotaInformationFile | 774 |
NtQuerySecurityObject | 775 |
NtQuerySystemInformation | 776 |
NtQueryVolumeInformationFile | 777 |
NtReadFile | 778 |
NtRequestPort | 779 |
NtRequestWaitReplyPort | 780 |
NtSetEaFile | 781 |
NtSetEvent | 782 |
NtSetInformationFile | 783 |
NtSetInformationProcess | 784 |
NtSetInformationThread | 785 |
NtSetQuotaInformationFile | 786 |
NtSetSecurityObject | 787 |
NtSetVolumeInformationFile | 788 |
NtShutdownSystem | 789 |
NtTraceEvent | 790 |
NtUnlockFile | 791 |
NtVdmControl | 792 |
NtWaitForSingleObject | 793 |
NtWriteFile | 794 |
ObAssignSecurity | 795 |
ObCheckCreateObjectAccess | 796 |
ObCheckObjectAccess | 797 |
ObCloseHandle | 798 |
ObCreateObject | 799 |
ObCreateObjectType | 800 |
ObDereferenceObject | 801 |
ObDereferenceSecurityDescriptor | 802 |
ObFindHandleForObject | 803 |
ObGetObjectSecurity | 804 |
ObInsertObject | 805 |
ObLogSecurityDescriptor | 806 |
ObMakeTemporaryObject | 807 |
ObOpenObjectByName | 808 |
ObOpenObjectByPointer | 809 |
ObQueryNameString | 810 |
ObQueryObjectAuditingByHandle | 811 |
ObReferenceObjectByHandle | 812 |
ObReferenceObjectByName | 813 |
ObReferenceObjectByPointer | 814 |
ObReferenceSecurityDescriptor | 815 |
ObReleaseObjectSecurity | 816 |
ObSetHandleAttributes | 817 |
ObSetSecurityDescriptorInfo | 818 |
ObSetSecurityObjectByPointer | 819 |
ObfDereferenceObject | 51 |
ObfReferenceObject | 52 |
PfxFindPrefix | 820 |
PfxInitialize | 821 |
PfxInsertPrefix | 822 |
PfxRemovePrefix | 823 |
PoCallDriver | 824 |
PoCancelDeviceNotify | 825 |
PoQueueShutdownWorkItem | 826 |
PoRegisterDeviceForIdleDetection | 827 |
PoRegisterDeviceNotify | 828 |
PoRegisterSystemState | 829 |
PoRequestPowerIrp | 830 |
PoRequestShutdownEvent | 831 |
PoSetHiberRange | 832 |
PoSetPowerState | 833 |
PoSetSystemState | 834 |
PoShutdownBugCheck | 835 |
PoStartNextPowerIrp | 836 |
PoUnregisterSystemState | 837 |
ProbeForRead | 838 |
ProbeForWrite | 839 |
PsAssignImpersonationToken | 840 |
PsChargePoolQuota | 841 |
PsChargeProcessNonPagedPoolQuota | 842 |
PsChargeProcessPagedPoolQuota | 843 |
PsChargeProcessPoolQuota | 844 |
PsCreateSystemProcess | 845 |
PsCreateSystemThread | 846 |
PsDereferenceImpersonationToken | 847 |
PsDereferencePrimaryToken | 848 |
PsDisableImpersonation | 849 |
PsEstablishWin32Callouts | 850 |
PsGetContextThread | 851 |
PsGetCurrentProcess | 852 |
PsGetCurrentProcessId | 853 |
PsGetCurrentProcessSessionId | 854 |
PsGetCurrentThread | 855 |
PsGetCurrentThreadId | 856 |
PsGetCurrentThreadPreviousMode | 857 |
PsGetCurrentThreadStackBase | 858 |
PsGetCurrentThreadStackLimit | 859 |
PsGetJobLock | 860 |
PsGetJobSessionId | 861 |
PsGetJobUIRestrictionsClass | 862 |
PsGetProcessCreateTimeQuadPart | 863 |
PsGetProcessDebugPort | 864 |
PsGetProcessExitProcessCalled | 865 |
PsGetProcessExitStatus | 866 |
PsGetProcessExitTime | 867 |
PsGetProcessId | 868 |
PsGetProcessImageFileName | 869 |
PsGetProcessInheritedFromUniqueProcessId | 870 |
PsGetProcessJob | 871 |
PsGetProcessPeb | 872 |
PsGetProcessPriorityClass | 873 |
PsGetProcessSectionBaseAddress | 874 |
PsGetProcessSecurityPort | 875 |
PsGetProcessSessionId | 876 |
PsGetProcessWin32Process | 877 |
PsGetProcessWin32WindowStation | 878 |
PsGetThreadFreezeCount | 879 |
PsGetThreadHardErrorsAreDisabled | 880 |
PsGetThreadId | 881 |
PsGetThreadProcess | 882 |
PsGetThreadProcessId | 883 |
PsGetThreadSessionId | 884 |
PsGetThreadTeb | 885 |
PsGetThreadWin32Thread | 886 |
PsGetVersion | 887 |
PsImpersonateClient | 888 |
PsInitialSystemProcess | 889 |
PsIsProcessBeingDebugged | 890 |
PsIsSystemThread | 891 |
PsIsThreadImpersonating | 892 |
PsIsThreadTerminating | 893 |
PsJobType | 894 |
PsLookupProcessByProcessId | 895 |
PsLookupProcessThreadByCid | 896 |
PsLookupThreadByThreadId | 897 |
PsProcessType | 898 |
PsReferenceImpersonationToken | 899 |
PsReferencePrimaryToken | 900 |
PsRemoveCreateThreadNotifyRoutine | 901 |
PsRemoveLoadImageNotifyRoutine | 902 |
PsRestoreImpersonation | 903 |
PsReturnPoolQuota | 904 |
PsReturnProcessNonPagedPoolQuota | 905 |
PsReturnProcessPagedPoolQuota | 906 |
PsRevertThreadToSelf | 907 |
PsRevertToSelf | 908 |
PsSetContextThread | 909 |
PsSetCreateProcessNotifyRoutine | 910 |
PsSetCreateThreadNotifyRoutine | 911 |
PsSetJobUIRestrictionsClass | 912 |
PsSetLegoNotifyRoutine | 913 |
PsSetLoadImageNotifyRoutine | 914 |
PsSetProcessPriorityByClass | 915 |
PsSetProcessPriorityClass | 916 |
PsSetProcessSecurityPort | 917 |
PsSetProcessWin32Process | 918 |
PsSetProcessWindowStation | 919 |
PsSetThreadHardErrorsAreDisabled | 920 |
PsSetThreadWin32Thread | 921 |
PsTerminateSystemThread | 922 |
PsThreadType | 923 |
READ_REGISTER_BUFFER_UCHAR | 924 |
READ_REGISTER_BUFFER_ULONG | 925 |
READ_REGISTER_BUFFER_USHORT | 926 |
READ_REGISTER_UCHAR | 927 |
READ_REGISTER_ULONG | 928 |
READ_REGISTER_USHORT | 929 |
RtlAbsoluteToSelfRelativeSD | 930 |
RtlAddAccessAllowedAce | 931 |
RtlAddAccessAllowedAceEx | 932 |
RtlAddAce | 933 |
RtlAddAtomToAtomTable | 934 |
RtlAddRange | 935 |
RtlAllocateHeap | 936 |
RtlAnsiCharToUnicodeChar | 937 |
RtlAnsiStringToUnicodeSize | 938 |
RtlAnsiStringToUnicodeString | 939 |
RtlAppendAsciizToString | 940 |
RtlAppendStringToString | 941 |
RtlAppendUnicodeStringToString | 942 |
RtlAppendUnicodeToString | 943 |
RtlAreAllAccessesGranted | 944 |
RtlAreAnyAccessesGranted | 945 |
RtlAreBitsClear | 946 |
RtlAreBitsSet | 947 |
RtlAssert | 948 |
RtlCaptureContext | 949 |
RtlCaptureStackBackTrace | 950 |
RtlCharToInteger | 951 |
RtlCheckRegistryKey | 952 |
RtlClearAllBits | 953 |
RtlClearBit | 954 |
RtlClearBits | 955 |
RtlCompareMemory | 956 |
RtlCompareMemoryUlong | 957 |
RtlCompareString | 958 |
RtlCompareUnicodeString | 959 |
RtlCompressBuffer | 960 |
RtlCompressChunks | 961 |
RtlConvertLongToLargeInteger | 962 |
RtlConvertSidToUnicodeString | 963 |
RtlConvertUlongToLargeInteger | 964 |
RtlCopyLuid | 965 |
RtlCopyRangeList | 966 |
RtlCopySid | 967 |
RtlCopyString | 968 |
RtlCopyUnicodeString | 969 |
RtlCreateAcl | 970 |
RtlCreateAtomTable | 971 |
RtlCreateHeap | 972 |
RtlCreateRegistryKey | 973 |
RtlCreateSecurityDescriptor | 974 |
RtlCreateSystemVolumeInformationFolder | 975 |
RtlCreateUnicodeString | 976 |
RtlCustomCPToUnicodeN | 977 |
RtlDecompressBuffer | 978 |
RtlDecompressChunks | 979 |
RtlDecompressFragment | 980 |
RtlDelete | 981 |
RtlDeleteAce | 982 |
RtlDeleteAtomFromAtomTable | 983 |
RtlDeleteElementGenericTable | 984 |
RtlDeleteElementGenericTableAvl | 985 |
RtlDeleteNoSplay | 986 |
RtlDeleteOwnersRanges | 987 |
RtlDeleteRange | 988 |
RtlDeleteRegistryValue | 989 |
RtlDescribeChunk | 990 |
RtlDestroyAtomTable | 991 |
RtlDestroyHeap | 992 |
RtlDowncaseUnicodeString | 993 |
RtlEmptyAtomTable | 994 |
RtlEnlargedIntegerMultiply | 995 |
RtlEnlargedUnsignedDivide | 996 |
RtlEnlargedUnsignedMultiply | 997 |
RtlEnumerateGenericTable | 998 |
RtlEnumerateGenericTableAvl | 999 |
RtlEnumerateGenericTableLikeADirectory | 1000 |
RtlEnumerateGenericTableWithoutSplaying | 1001 |
RtlEnumerateGenericTableWithoutSplayingAvl | 1002 |
RtlEqualLuid | 1003 |
RtlEqualSid | 1004 |
RtlEqualString | 1005 |
RtlEqualUnicodeString | 1006 |
RtlExtendedIntegerMultiply | 1007 |
RtlExtendedLargeIntegerDivide | 1008 |
RtlExtendedMagicDivide | 1009 |
RtlFillMemory | 1010 |
RtlFillMemoryUlong | 1011 |
RtlFindClearBits | 1012 |
RtlFindClearBitsAndSet | 1013 |
RtlFindClearRuns | 1014 |
RtlFindFirstRunClear | 1015 |
RtlFindLastBackwardRunClear | 1016 |
RtlFindLeastSignificantBit | 1017 |
RtlFindLongestRunClear | 1018 |
RtlFindMessage | 1019 |
RtlFindMostSignificantBit | 1020 |
RtlFindNextForwardRunClear | 1021 |
RtlFindRange | 1022 |
RtlFindSetBits | 1023 |
RtlFindSetBitsAndClear | 1024 |
RtlFindUnicodePrefix | 1025 |
RtlFormatCurrentUserKeyPath | 1026 |
RtlFreeAnsiString | 1027 |
RtlFreeHeap | 1028 |
RtlFreeOemString | 1029 |
RtlFreeRangeList | 1030 |
RtlFreeUnicodeString | 1031 |
RtlGUIDFromString | 1032 |
RtlGenerate8dot3Name | 1033 |
RtlGetAce | 1034 |
RtlGetCallersAddress | 1035 |
RtlGetCompressionWorkSpaceSize | 1036 |
RtlGetDaclSecurityDescriptor | 1037 |
RtlGetDefaultCodePage | 1038 |
RtlGetElementGenericTable | 1039 |
RtlGetElementGenericTableAvl | 1040 |
RtlGetFirstRange | 1041 |
RtlGetGroupSecurityDescriptor | 1042 |
RtlGetNextRange | 1043 |
RtlGetNtGlobalFlags | 1044 |
RtlGetOwnerSecurityDescriptor | 1045 |
RtlGetSaclSecurityDescriptor | 1046 |
RtlGetSetBootStatusData | 1047 |
RtlGetVersion | 1048 |
RtlHashUnicodeString | 1049 |
RtlImageDirectoryEntryToData | 1050 |
RtlImageNtHeader | 1051 |
RtlInitAnsiString | 1052 |
RtlInitCodePageTable | 1053 |
RtlInitString | 1054 |
RtlInitUnicodeString | 1055 |
RtlInitializeBitMap | 1056 |
RtlInitializeGenericTable | 1057 |
RtlInitializeGenericTableAvl | 1058 |
RtlInitializeRangeList | 1059 |
RtlInitializeSid | 1060 |
RtlInitializeUnicodePrefix | 1061 |
RtlInsertElementGenericTable | 1062 |
RtlInsertElementGenericTableAvl | 1063 |
RtlInsertElementGenericTableFull | 1064 |
RtlInsertElementGenericTableFullAvl | 1065 |
RtlInsertUnicodePrefix | 1066 |
RtlInt64ToUnicodeString | 1067 |
RtlIntegerToChar | 1068 |
RtlIntegerToUnicode | 1069 |
RtlIntegerToUnicodeString | 1070 |
RtlInvertRangeList | 1071 |
RtlIpv4AddressToStringA | 1072 |
RtlIpv4AddressToStringExA | 1073 |
RtlIpv4AddressToStringExW | 1074 |
RtlIpv4AddressToStringW | 1075 |
RtlIpv4StringToAddressA | 1076 |
RtlIpv4StringToAddressExA | 1077 |
RtlIpv4StringToAddressExW | 1078 |
RtlIpv4StringToAddressW | 1079 |
RtlIpv6AddressToStringA | 1080 |
RtlIpv6AddressToStringExA | 1081 |
RtlIpv6AddressToStringExW | 1082 |
RtlIpv6AddressToStringW | 1083 |
RtlIpv6StringToAddressA | 1084 |
RtlIpv6StringToAddressExA | 1085 |
RtlIpv6StringToAddressExW | 1086 |
RtlIpv6StringToAddressW | 1087 |
RtlIsGenericTableEmpty | 1088 |
RtlIsGenericTableEmptyAvl | 1089 |
RtlIsNameLegalDOS8Dot3 | 1090 |
RtlIsRangeAvailable | 1091 |
RtlIsValidOemCharacter | 1092 |
RtlLargeIntegerAdd | 1093 |
RtlLargeIntegerArithmeticShift | 1094 |
RtlLargeIntegerDivide | 1095 |
RtlLargeIntegerNegate | 1096 |
RtlLargeIntegerShiftLeft | 1097 |
RtlLargeIntegerShiftRight | 1098 |
RtlLargeIntegerSubtract | 1099 |
RtlLengthRequiredSid | 1100 |
RtlLengthSecurityDescriptor | 1101 |
RtlLengthSid | 1102 |
RtlLockBootStatusData | 1103 |
RtlLookupAtomInAtomTable | 1104 |
RtlLookupElementGenericTable | 1105 |
RtlLookupElementGenericTableAvl | 1106 |
RtlLookupElementGenericTableFull | 1107 |
RtlLookupElementGenericTableFullAvl | 1108 |
RtlMapGenericMask | 1109 |
RtlMapSecurityErrorToNtStatus | 1110 |
RtlMergeRangeLists | 1111 |
RtlMoveMemory | 1112 |
RtlMultiByteToUnicodeN | 1113 |
RtlMultiByteToUnicodeSize | 1114 |
RtlNextUnicodePrefix | 1115 |
RtlNtStatusToDosError | 1116 |
RtlNtStatusToDosErrorNoTeb | 1117 |
RtlNumberGenericTableElements | 1118 |
RtlNumberGenericTableElementsAvl | 1119 |
RtlNumberOfClearBits | 1120 |
RtlNumberOfSetBits | 1121 |
RtlOemStringToCountedUnicodeString | 1122 |
RtlOemStringToUnicodeSize | 1123 |
RtlOemStringToUnicodeString | 1124 |
RtlOemToUnicodeN | 1125 |
RtlPinAtomInAtomTable | 1126 |
RtlPrefetchMemoryNonTemporal | 53 |
RtlPrefixString | 1127 |
RtlPrefixUnicodeString | 1128 |
RtlQueryAtomInAtomTable | 1129 |
RtlQueryRegistryValues | 1130 |
RtlQueryTimeZoneInformation | 1131 |
RtlRaiseException | 1132 |
RtlRandom | 1133 |
RtlRandomEx | 1134 |
RtlRealPredecessor | 1135 |
RtlRealSuccessor | 1136 |
RtlRemoveUnicodePrefix | 1137 |
RtlReserveChunk | 1138 |
RtlSecondsSince1970ToTime | 1139 |
RtlSecondsSince1980ToTime | 1140 |
RtlSelfRelativeToAbsoluteSD | 1142 |
RtlSelfRelativeToAbsoluteSD2 | 1141 |
RtlSetAllBits | 1143 |
RtlSetBit | 1144 |
RtlSetBits | 1145 |
RtlSetDaclSecurityDescriptor | 1146 |
RtlSetGroupSecurityDescriptor | 1147 |
RtlSetOwnerSecurityDescriptor | 1148 |
RtlSetSaclSecurityDescriptor | 1149 |
RtlSetTimeZoneInformation | 1150 |
RtlSizeHeap | 1151 |
RtlSplay | 1152 |
RtlStringFromGUID | 1153 |
RtlSubAuthorityCountSid | 1154 |
RtlSubAuthoritySid | 1155 |
RtlSubtreePredecessor | 1156 |
RtlSubtreeSuccessor | 1157 |
RtlTestBit | 1158 |
RtlTimeFieldsToTime | 1159 |
RtlTimeToElapsedTimeFields | 1160 |
RtlTimeToSecondsSince1970 | 1161 |
RtlTimeToSecondsSince1980 | 1162 |
RtlTimeToTimeFields | 1163 |
RtlTraceDatabaseAdd | 1164 |
RtlTraceDatabaseCreate | 1165 |
RtlTraceDatabaseDestroy | 1166 |
RtlTraceDatabaseEnumerate | 1167 |
RtlTraceDatabaseFind | 1168 |
RtlTraceDatabaseLock | 1169 |
RtlTraceDatabaseUnlock | 1170 |
RtlTraceDatabaseValidate | 1171 |
RtlUlongByteSwap | 54 |
RtlUlonglongByteSwap | 55 |
RtlUnicodeStringToAnsiSize | 1172 |
RtlUnicodeStringToAnsiString | 1173 |
RtlUnicodeStringToCountedOemString | 1174 |
RtlUnicodeStringToInteger | 1175 |
RtlUnicodeStringToOemSize | 1176 |
RtlUnicodeStringToOemString | 1177 |
RtlUnicodeToCustomCPN | 1178 |
RtlUnicodeToMultiByteN | 1179 |
RtlUnicodeToMultiByteSize | 1180 |
RtlUnicodeToOemN | 1181 |
RtlUnlockBootStatusData | 1182 |
RtlUnwind | 1183 |
RtlUpcaseUnicodeChar | 1184 |
RtlUpcaseUnicodeString | 1185 |
RtlUpcaseUnicodeStringToAnsiString | 1186 |
RtlUpcaseUnicodeStringToCountedOemString | 1187 |
RtlUpcaseUnicodeStringToOemString | 1188 |
RtlUpcaseUnicodeToCustomCPN | 1189 |
RtlUpcaseUnicodeToMultiByteN | 1190 |
RtlUpcaseUnicodeToOemN | 1191 |
RtlUpperChar | 1192 |
RtlUpperString | 1193 |
RtlUshortByteSwap | 56 |
RtlValidRelativeSecurityDescriptor | 1194 |
RtlValidSecurityDescriptor | 1195 |
RtlValidSid | 1196 |
RtlVerifyVersionInfo | 1197 |
RtlVolumeDeviceToDosName | 1198 |
RtlWalkFrameChain | 1199 |
RtlWriteRegistryValue | 1200 |
RtlZeroHeap | 1201 |
RtlZeroMemory | 1202 |
RtlxAnsiStringToUnicodeSize | 1203 |
RtlxOemStringToUnicodeSize | 1204 |
RtlxUnicodeStringToAnsiSize | 1205 |
RtlxUnicodeStringToOemSize | 1206 |
SeAccessCheck | 1207 |
SeAppendPrivileges | 1208 |
SeAssignSecurity | 1209 |
SeAssignSecurityEx | 1210 |
SeAuditHardLinkCreation | 1211 |
SeAuditingFileEvents | 1212 |
SeAuditingFileEventsWithContext | 1213 |
SeAuditingFileOrGlobalEvents | 1214 |
SeAuditingHardLinkEvents | 1215 |
SeAuditingHardLinkEventsWithContext | 1216 |
SeCaptureSecurityDescriptor | 1217 |
SeCaptureSubjectContext | 1218 |
SeCloseObjectAuditAlarm | 1219 |
SeCreateAccessState | 1220 |
SeCreateClientSecurity | 1221 |
SeCreateClientSecurityFromSubjectContext | 1222 |
SeDeassignSecurity | 1223 |
SeDeleteAccessState | 1224 |
SeDeleteObjectAuditAlarm | 1225 |
SeExports | 1226 |
SeFilterToken | 1227 |
SeFreePrivileges | 1228 |
SeImpersonateClient | 1229 |
SeImpersonateClientEx | 1230 |
SeLockSubjectContext | 1231 |
SeMarkLogonSessionForTerminationNotification | 1232 |
SeOpenObjectAuditAlarm | 1233 |
SeOpenObjectForDeleteAuditAlarm | 1234 |
SePrivilegeCheck | 1235 |
SePrivilegeObjectAuditAlarm | 1236 |
SePublicDefaultDacl | 1237 |
SeQueryAuthenticationIdToken | 1238 |
SeQueryInformationToken | 1239 |
SeQuerySecurityDescriptorInfo | 1240 |
SeQuerySessionIdToken | 1241 |
SeRegisterLogonSessionTerminatedRoutine | 1242 |
SeReleaseSecurityDescriptor | 1243 |
SeReleaseSubjectContext | 1244 |
SeSetAccessStateGenericMapping | 1245 |
SeSetSecurityDescriptorInfo | 1246 |
SeSetSecurityDescriptorInfoEx | 1247 |
SeSinglePrivilegeCheck | 1248 |
SeSystemDefaultDacl | 1249 |
SeTokenImpersonationLevel | 1250 |
SeTokenIsAdmin | 1251 |
SeTokenIsRestricted | 1252 |
SeTokenIsWriteRestricted | 1253 |
SeTokenObjectType | 1254 |
SeTokenType | 1255 |
SeUnlockSubjectContext | 1256 |
SeUnregisterLogonSessionTerminatedRoutine | 1257 |
SeValidSecurityDescriptor | 1258 |
VerSetConditionMask | 1259 |
VfFailDeviceNode | 1260 |
VfFailDriver | 1261 |
VfFailSystemBIOS | 1262 |
VfIsVerificationEnabled | 1263 |
WRITE_REGISTER_BUFFER_UCHAR | 1264 |
WRITE_REGISTER_BUFFER_ULONG | 1265 |
WRITE_REGISTER_BUFFER_USHORT | 1266 |
WRITE_REGISTER_UCHAR | 1267 |
WRITE_REGISTER_ULONG | 1268 |
WRITE_REGISTER_USHORT | 1269 |
WmiFlushTrace | 1270 |
WmiGetClock | 57 |
WmiQueryTrace | 1271 |
WmiQueryTraceInformation | 1272 |
WmiStartTrace | 1273 |
WmiStopTrace | 1274 |
WmiTraceMessage | 1275 |
WmiTraceMessageVa | 1276 |
WmiUpdateTrace | 1277 |
XIPDispatch | 1278 |
ZwAccessCheckAndAuditAlarm | 1279 |
ZwAddBootEntry | 1280 |
ZwAdjustPrivilegesToken | 1281 |
ZwAlertThread | 1282 |
ZwAllocateVirtualMemory | 1283 |
ZwAssignProcessToJobObject | 1284 |
ZwCancelIoFile | 1285 |
ZwCancelTimer | 1286 |
ZwClearEvent | 1287 |
ZwClose | 1288 |
ZwCloseObjectAuditAlarm | 1289 |
ZwConnectPort | 1290 |
ZwCreateDirectoryObject | 1291 |
ZwCreateEvent | 1292 |
ZwCreateFile | 1293 |
ZwCreateJobObject | 1294 |
ZwCreateKey | 1295 |
ZwCreateSection | 1296 |
ZwCreateSymbolicLinkObject | 1297 |
ZwCreateTimer | 1298 |
ZwDeleteBootEntry | 1299 |
ZwDeleteFile | 1300 |
ZwDeleteKey | 1301 |
ZwDeleteValueKey | 1302 |
ZwDeviceIoControlFile | 1303 |
ZwDisplayString | 1304 |
ZwDuplicateObject | 1305 |
ZwDuplicateToken | 1306 |
ZwEnumerateBootEntries | 1307 |
ZwEnumerateKey | 1308 |
ZwEnumerateValueKey | 1309 |
ZwFlushInstructionCache | 1310 |
ZwFlushKey | 1311 |
ZwFlushVirtualMemory | 1312 |
ZwFreeVirtualMemory | 1313 |
ZwFsControlFile | 1314 |
ZwInitiatePowerAction | 1315 |
ZwIsProcessInJob | 1316 |
ZwLoadDriver | 1317 |
ZwLoadKey | 1318 |
ZwMakeTemporaryObject | 1319 |
ZwMapViewOfSection | 1320 |
ZwNotifyChangeKey | 1321 |
ZwOpenDirectoryObject | 1322 |
ZwOpenEvent | 1323 |
ZwOpenFile | 1324 |
ZwOpenJobObject | 1325 |
ZwOpenKey | 1326 |
ZwOpenProcess | 1327 |
ZwOpenProcessToken | 1328 |
ZwOpenProcessTokenEx | 1329 |
ZwOpenSection | 1330 |
ZwOpenSymbolicLinkObject | 1331 |
ZwOpenThread | 1332 |
ZwOpenThreadToken | 1333 |
ZwOpenThreadTokenEx | 1334 |
ZwOpenTimer | 1335 |
ZwPowerInformation | 1336 |
ZwPulseEvent | 1337 |
ZwQueryBootEntryOrder | 1338 |
ZwQueryBootOptions | 1339 |
ZwQueryDefaultLocale | 1340 |
ZwQueryDefaultUILanguage | 1341 |
ZwQueryDirectoryFile | 1342 |
ZwQueryDirectoryObject | 1343 |
ZwQueryEaFile | 1344 |
ZwQueryFullAttributesFile | 1345 |
ZwQueryInformationFile | 1346 |
ZwQueryInformationJobObject | 1347 |
ZwQueryInformationProcess | 1348 |
ZwQueryInformationThread | 1349 |
ZwQueryInformationToken | 1350 |
ZwQueryInstallUILanguage | 1351 |
ZwQueryKey | 1352 |
ZwQueryObject | 1353 |
ZwQuerySection | 1354 |
ZwQuerySecurityObject | 1355 |
ZwQuerySymbolicLinkObject | 1356 |
ZwQuerySystemInformation | 1357 |
ZwQueryValueKey | 1358 |
ZwQueryVolumeInformationFile | 1359 |
ZwReadFile | 1360 |
ZwReplaceKey | 1361 |
ZwRequestWaitReplyPort | 1362 |
ZwResetEvent | 1363 |
ZwRestoreKey | 1364 |
ZwSaveKey | 1365 |
ZwSaveKeyEx | 1366 |
ZwSetBootEntryOrder | 1367 |
ZwSetBootOptions | 1368 |
ZwSetDefaultLocale | 1369 |
ZwSetDefaultUILanguage | 1370 |
ZwSetEaFile | 1371 |
ZwSetEvent | 1372 |
ZwSetInformationFile | 1373 |
ZwSetInformationJobObject | 1374 |
ZwSetInformationObject | 1375 |
ZwSetInformationProcess | 1376 |
ZwSetInformationThread | 1377 |
ZwSetSecurityObject | 1378 |
ZwSetSystemInformation | 1379 |
ZwSetSystemTime | 1380 |
ZwSetTimer | 1381 |
ZwSetValueKey | 1382 |
ZwSetVolumeInformationFile | 1383 |
ZwTerminateJobObject | 1384 |
ZwTerminateProcess | 1385 |
ZwTranslateFilePath | 1386 |
ZwUnloadDriver | 1387 |
ZwUnloadKey | 1388 |
ZwUnmapViewOfSection | 1389 |
ZwWaitForMultipleObjects | 1390 |
ZwWaitForSingleObject | 1391 |
ZwWriteFile | 1392 |
ZwYieldExecution | 1393 |
_CIcos | 1394 |
_CIsin | 1395 |
_CIsqrt | 1396 |
_abnormal_termination | 1397 |
_alldiv | 1398 |
_alldvrm | 1399 |
_allmul | 1400 |
_alloca_probe | 1401 |
_allrem | 1402 |
_allshl | 1403 |
_allshr | 1404 |
_aulldiv | 1405 |
_aulldvrm | 1406 |
_aullrem | 1407 |
_aullshr | 1408 |
_except_handler2 | 1409 |
_except_handler3 | 1410 |
_global_unwind2 | 1411 |
_itoa | 1412 |
_itow | 1413 |
_local_unwind2 | 1414 |
_purecall | 1415 |
_snprintf | 1416 |
_snwprintf | 1417 |
_stricmp | 1418 |
_strlwr | 1419 |
_strnicmp | 1420 |
_strnset | 1421 |
_strrev | 1422 |
_strset | 1423 |
_strupr | 1424 |
_vsnprintf | 1425 |
_vsnwprintf | 1426 |
_wcsicmp | 1427 |
_wcslwr | 1428 |
_wcsnicmp | 1429 |
_wcsnset | 1430 |
_wcsrev | 1431 |
_wcsupr | 1432 |
atoi | 1433 |
atol | 1434 |
isdigit | 1435 |
islower | 1436 |
isprint | 1437 |
isspace | 1438 |
isupper | 1439 |
isxdigit | 1440 |
mbstowcs | 1441 |
mbtowc | 1442 |
memchr | 1443 |
memcpy | 1444 |
memmove | 1445 |
memset | 1446 |
qsort | 1447 |
rand | 1448 |
sprintf | 1449 |
srand | 1450 |
strcat | 1451 |
strchr | 1452 |
strcmp | 1453 |
strcpy | 1454 |
strlen | 1455 |
strncat | 1456 |
strncmp | 1457 |
strncpy | 1458 |
strrchr | 1459 |
strspn | 1460 |
strstr | 1461 |
swprintf | 1462 |
tolower | 1463 |
toupper | 1464 |
towlower | 1465 |
towupper | 1466 |
vDbgPrintEx | 1467 |
vDbgPrintExWithPrefix | 1468 |
vsprintf | 1469 |
wcscat | 1470 |
wcschr | 1471 |
wcscmp | 1472 |
wcscpy | 1473 |
wcscspn | 1474 |
wcslen | 1475 |
wcsncat | 1476 |
wcsncmp | 1477 |
wcsncpy | 1478 |
wcsrchr | 1479 |
wcsspn | 1480 |
wcsstr | 1481 |
wcstombs | 1482 |
wctomb | 1483 |