Techwiki:Ntoskrnl export list
Revision as of 14:26, 22 May 2016 by ThePhysicist (talk | contribs)
This is the list of exports from ntoskrnl. Taken from Windows XP SP2 Build 2600.
Name | # win xp |
CcCopyRead | 61 |
CcDeferWrite | 63 |
CcFastCopyWrite | 65 |
CcFastReadNotPossible | 67 |
CcFlushCache | 69 |
CcGetFileObjectFromBcb | 71 |
CcGetFlushedValidData | 73 |
CcInitializeCacheMap | 75 |
CcMapData | 77 |
CcMdlReadComplete | 79 |
CcMdlWriteComplete | 81 |
CcPinRead | 83 |
CcPreparePinWrite | 85 |
CcRemapBcb | 87 |
CcScheduleReadAhead | 89 |
CcSetBcbOwnerPointer | 91 |
CcSetDirtyPinnedData | 93 |
CcSetLogHandleForFile | 95 |
CcUninitializeCacheMap | 97 |
CcUnpinDataForThread | 99 |
CcWaitForCurrentLazyWriterActivity | 101 |
CmRegisterCallback | 103 |
DbgBreakPoint | 105 |
DbgLoadImageSymbols | 107 |
DbgPrintEx | 109 |
DbgPrompt | 111 |
DbgSetDebugFilterState | 113 |
ExAcquireResourceExclusiveLite | 114 |
ExAcquireRundownProtection | 2 |
ExAcquireSharedStarveExclusive | 116 |
ExAllocateFromPagedLookasideList | 118 |
ExAllocatePoolWithQuota | 120 |
ExAllocatePoolWithTag | 122 |
ExConvertExclusiveToSharedLite | 124 |
ExDeleteNPagedLookasideList | 126 |
ExDeleteResourceLite | 128 |
ExDisableResourceBoostLite | 130 |
ExEventObjectType | 132 |
ExFreePool | 134 |
ExFreeToPagedLookasideList | 136 |
ExGetCurrentProcessorCpuUsage | 138 |
ExGetPreviousMode | 140 |
ExInitializeNPagedLookasideList | 142 |
ExInitializeResourceLite | 144 |
ExInitializeZone | 145 |
ExInterlockedAddLargeStatistic | 5 |
ExInterlockedCompareExchange64 | 6 |
ExInterlockedExchangeUlong | 149 |
ExInterlockedFlushSList | 7 |
ExInterlockedInsertHeadList | 152 |
ExInterlockedPopEntryList | 154 |
ExInterlockedPushEntryList | 155 |
ExInterlockedRemoveHeadList | 156 |
ExIsResourceAcquiredExclusiveLite | 158 |
ExLocalTimeToSystemTime | 160 |
ExQueryPoolBlockSize | 162 |
ExRaiseAccessViolation | 164 |
ExRaiseException | 166 |
ExRaiseStatus | 168 |
ExRegisterCallback | 169 |
ExReleaseFastMutexUnsafe | 11 |
ExReleaseResourceLite | 12 |
ExReleaseRundownProtectionEx | 14 |
ExSemaphoreObjectType | 172 |
ExSetTimerResolution | 174 |
ExSystemTimeToLocalTime | 176 |
ExUuidCreate | 178 |
ExWaitForRundownProtectionRelease | 16 |
ExfAcquirePushLockExclusive | 17 |
ExfInterlockedAddUlong | 19 |
ExfInterlockedInsertHeadList | 21 |
ExfInterlockedPopEntryList | 23 |
ExfInterlockedRemoveHeadList | 25 |
Exfi386InterlockedDecrementLong | 27 |
Exfi386InterlockedIncrementLong | 29 |
Exi386InterlockedExchangeUlong | 182 |
FsRtlAcquireFileExclusive | 184 |
FsRtlAddMcbEntry | 186 |
FsRtlAllocateFileLock | 188 |
FsRtlAllocatePoolWithQuota | 190 |
FsRtlAllocatePoolWithTag | 192 |
FsRtlAreNamesEqual | 194 |
FsRtlCheckLockForReadAccess | 196 |
FsRtlCheckOplock | 198 |
FsRtlCopyWrite | 200 |
FsRtlDeleteKeyFromTunnelCache | 202 |
FsRtlDeregisterUncProvider | 204 |
FsRtlDissectName | 206 |
FsRtlDoesNameContainWildCards | 208 |
FsRtlFastCheckLockForWrite | 210 |
FsRtlFastUnlockAllByKey | 212 |
FsRtlFindInTunnelCache | 214 |
FsRtlGetFileSize | 216 |
FsRtlGetNextLargeMcbEntry | 218 |
FsRtlIncrementCcFastReadNoWait | 220 |
FsRtlIncrementCcFastReadResourceMiss | 222 |
FsRtlInitializeFileLock | 224 |
FsRtlInitializeMcb | 226 |
FsRtlInitializeTunnelCache | 228 |
FsRtlInsertPerStreamContext | 230 |
FsRtlIsFatDbcsLegal | 232 |
FsRtlIsNameInExpression | 234 |
FsRtlIsPagingFile | 236 |
FsRtlLegalAnsiCharacterArray | 238 |
FsRtlLookupLastLargeMcbEntry | 240 |
FsRtlLookupLastMcbEntry | 242 |
FsRtlLookupPerFileObjectContext | 244 |
FsRtlMdlRead | 246 |
FsRtlMdlReadCompleteDev | 248 |
FsRtlMdlWriteComplete | 250 |
FsRtlNormalizeNtstatus | 252 |
FsRtlNotifyCleanup | 254 |
FsRtlNotifyFilterReportChange | 256 |
FsRtlNotifyFullReportChange | 258 |
FsRtlNotifyReportChange | 260 |
FsRtlNotifyVolumeEvent | 262 |
FsRtlNumberOfRunsInMcb | 264 |
FsRtlOplockIsFastIoPossible | 266 |
FsRtlPostStackOverflow | 268 |
FsRtlPrepareMdlWriteDev | 270 |
FsRtlProcessFileLock | 272 |
FsRtlRegisterUncProvider | 274 |
FsRtlRemoveLargeMcbEntry | 276 |
FsRtlRemovePerFileObjectContext | 278 |
FsRtlResetLargeMcb | 280 |
FsRtlSyncVolumes | 282 |
FsRtlTruncateLargeMcb | 284 |
FsRtlUninitializeFileLock | 286 |
FsRtlUninitializeMcb | 288 |
HalDispatchTable | 290 |
HalPrivateDispatchTable | 291 |
InbvAcquireDisplayOwnership | 293 |
InbvDisplayString | 295 |
InbvEnableDisplayString | 297 |
InbvIsBootDriverInstalled | 299 |
InbvResetDisplay | 301 |
InbvSetTextColor | 303 |
InitSafeBootMode | 305 |
InterlockedDecrement | 32 |
InterlockedExchangeAdd | 34 |
InterlockedPopEntrySList | 36 |
IoAcquireCancelSpinLock | 306 |
IoAcquireVpbSpinLock | 308 |
IoAllocateAdapterChannel | 310 |
IoAllocateDriverObjectExtension | 312 |
IoAllocateIrp | 314 |
IoAllocateWorkItem | 316 |
IoAssignResources | 317 |
IoAttachDeviceByPointer | 319 |
IoAttachDeviceToDeviceStackSafe | 321 |
IoBuildDeviceIoControlRequest | 323 |
IoBuildSynchronousFsdRequest | 325 |
IoCancelFileOpen | 327 |
IoCheckDesiredAccess | 329 |
IoCheckFunctionAccess | 331 |
IoCheckQuerySetVolumeInformation | 333 |
IoCheckShareAccess | 335 |
IoConnectInterrupt | 337 |
IoCreateDevice | 339 |
IoCreateDriver | 341 |
IoCreateFileSpecifyDeviceObjectHint | 343 |
IoCreateStreamFileObject | 345 |
IoCreateStreamFileObjectLite | 347 |
IoCreateSynchronizationEvent | 349 |
IoCsqInitialize | 351 |
IoCsqRemoveIrp | 353 |
IoDeleteController | 355 |
IoDeleteDriver | 357 |
IoDetachDevice | 359 |
IoDeviceHandlerObjectType | 361 |
IoDisconnectInterrupt | 363 |
IoEnqueueIrp | 365 |
IoFastQueryNetworkAttributes | 367 |
IoForwardAndCatchIrp | 369 |
IoFreeController | 371 |
IoFreeIrp | 373 |
IoFreeWorkItem | 375 |
IoGetAttachedDeviceReference | 377 |
IoGetBootDiskInformation | 379 |
IoGetCurrentProcess | 381 |
IoGetDeviceInterfaceAlias | 383 |
IoGetDeviceObjectPointer | 385 |
IoGetDeviceToVerify | 387 |
IoGetDmaAdapter | 389 |
IoGetFileObjectGenericMapping | 391 |
IoGetLowerDeviceObject | 393 |
IoGetRequestorProcess | 395 |
IoGetRequestorSessionId | 397 |
IoGetTopLevelIrp | 399 |
IoInitializeRemoveLockEx | 401 |
IoInvalidateDeviceRelations | 403 |
IoIsFileOriginRemote | 405 |
IoIsSystemThread | 407 |
IoIsWdmVersionAvailable | 409 |
IoOpenDeviceInterfaceRegistryKey | 411 |
IoPageRead | 413 |
IoQueryDeviceDescription | 415 |
IoQueryFileInformation | 417 |
IoQueueThreadIrp | 419 |
IoRaiseHardError | 421 |
IoReadDiskSignature | 423 |
IoReadPartitionTable | 39 |
IoReadTransferCount | 426 |
IoRegisterDeviceInterface | 428 |
IoRegisterFileSystem | 430 |
IoRegisterLastChanceShutdownNotification | 432 |
IoRegisterShutdownNotification | 434 |
IoReleaseRemoveLockAndWaitEx | 436 |
IoReleaseVpbSpinLock | 438 |
IoReportDetectedDevice | 440 |
IoReportResourceForDetection | 442 |
IoReportTargetDeviceChange | 444 |
IoRequestDeviceEject | 446 |
IoSetCompletionRoutineEx | 448 |
IoSetDeviceToVerify | 450 |
IoSetHardErrorOrVerifyDevice | 452 |
IoSetIoCompletion | 454 |
IoSetPartitionInformationEx | 455 |
IoSetStartIoAttributes | 457 |
IoSetThreadHardErrorMode | 459 |
IoStartNextPacket | 461 |
IoStartPacket | 463 |
IoStatisticsLock | 465 |
IoSynchronousInvalidateDeviceRelations | 467 |
IoThreadToProcess | 469 |
IoUnregisterFsRegistrationChange | 471 |
IoUnregisterShutdownNotification | 473 |
IoValidateDeviceIoControlAccess | 475 |
IoVerifyVolume | 477 |
IoWMIAllocateInstanceIds | 479 |
IoWMIExecuteMethod | 481 |
IoWMIOpenBlock | 483 |
IoWMIQueryAllDataMultiple | 485 |
IoWMIQuerySingleInstanceMultiple | 487 |
IoWMISetNotificationCallback | 489 |
IoWMISetSingleItem | 491 |
IoWMIWriteEvent | 493 |
IoWriteOperationCount | 495 |
IoWritePartitionTableEx | 496 |
IofCallDriver | 42 |
KdDebuggerEnabled | 498 |
KdDisableDebugger | 500 |
KdEnteredDebugger | 502 |
KdPowerTransition | 504 |
Ke386IoSetAccessProcess | 506 |
Ke386SetIoAccessMap | 508 |
KeAcquireInterruptSpinLock | 509 |
KeAddSystemServiceTable | 511 |
KeAttachProcess | 513 |
KeBugCheckEx | 515 |
KeCapturePersistentThreadState | 517 |
KeConnectInterrupt | 519 |
KeDelayExecutionThread | 521 |
KeDeregisterBugCheckReasonCallback | 523 |
KeDisconnectInterrupt | 525 |
KeEnterKernelDebugger | 527 |
KeFindConfigurationNextEntry | 529 |
KeFlushQueuedDpcs | 531 |
KeGetPreviousMode | 533 |
KeI386AbiosCall | 535 |
KeI386Call16BitCStyleFunction | 537 |
KeI386FlatToGdtSelector | 539 |
KeI386MachineType | 541 |
KeI386ReleaseLid | 543 |
KeIcacheFlushCount | 545 |
KeInitializeDeviceQueue | 547 |
KeInitializeEvent | 549 |
KeInitializeMutant | 551 |
KeInitializeQueue | 553 |
KeInitializeSpinLock | 555 |
KeInitializeTimerEx | 557 |
KeInsertDeviceQueue | 559 |
KeInsertQueue | 561 |
KeInsertQueueDpc | 563 |
KeIsExecutingDpc | 565 |
KeLoaderBlock | 567 |
KeProfileInterrupt | 569 |
KePulseEvent | 571 |
KeQueryInterruptTime | 573 |
KeQueryRuntimeThread | 575 |
KeQueryTickCount | 577 |
KeRaiseUserException | 579 |
KeReadStateMutant | 581 |
KeReadStateQueue | 583 |
KeReadStateTimer | 585 |
KeRegisterBugCheckReasonCallback | 587 |
KeReleaseInterruptSpinLock | 588 |
KeReleaseMutex | 590 |
KeReleaseSpinLockFromDpcLevel | 592 |
KeRemoveByKeyDeviceQueueIfBusy | 594 |
KeRemoveEntryDeviceQueue | 596 |
KeRemoveQueueDpc | 598 |
KeResetEvent | 600 |
KeRevertToUserAffinityThread | 602 |
KeSaveFloatingPointState | 604 |
KeServiceDescriptorTable | 606 |
KeSetBasePriorityThread | 608 |
KeSetEvent | 610 |
KeSetIdealProcessorThread | 612 |
KeSetKernelStackSwapEnable | 614 |
KeSetProfileIrql | 616 |
KeSetTargetProcessorDpc | 618 |
KeSetTimeUpdateNotifyRoutine | 46 |
KeSetTimerEx | 621 |
KeSynchronizeExecution | 623 |
KeTickCount | 625 |
KeUpdateRunTime | 627 |
KeUserModeCallback | 629 |
KeWaitForMutexObject | 631 |
KefAcquireSpinLockAtDpcLevel | 47 |
Kei386EoiHelper | 58 |
KiBugCheckData | 633 |
KiDeliverApc | 635 |
KiEnableTimerWatchdog | 637 |
KiReleaseSpinLock | 50 |
Kii386SpinOnSpinLock | 59 |
LdrEnumResources | 641 |
LdrFindResource_U | 643 |
LpcRequestPort | 645 |
LsaCallAuthenticationPackage | 647 |
LsaFreeReturnBuffer | 649 |
LsaLookupAuthenticationPackage | 651 |
Mm64BitPhysicalAddress | 653 |
MmAddVerifierThunks | 655 |
MmAdvanceMdl | 657 |
MmAllocateContiguousMemorySpecifyCache | 659 |
MmAllocateNonCachedMemory | 661 |
MmBuildMdlForNonPagedPool | 663 |
MmCommitSessionMappedView | 665 |
MmCreateSection | 667 |
MmFlushImageSection | 669 |
MmFreeContiguousMemory | 671 |
MmFreeMappingAddress | 673 |
MmFreePagesFromMdl | 675 |
MmGetPhysicalMemoryRanges | 677 |
MmGetVirtualForPhysical | 679 |
MmHighestUserAddress | 681 |
MmIsDriverVerifying | 683 |
MmIsRecursiveIoFault | 685 |
MmIsVerifierEnabled | 687 |
MmLockPagableImageSection | 689 |
MmMapIoSpace | 691 |
MmMapLockedPagesSpecifyCache | 693 |
MmMapMemoryDumpMdl | 695 |
MmMapVideoDisplay | 697 |
MmMapViewInSystemSpace | 699 |
MmMarkPhysicalMemoryAsBad | 701 |
MmPageEntireDriver | 703 |
MmProbeAndLockPages | 705 |
MmProbeAndLockSelectedPages | 707 |
MmQuerySystemSize | 709 |
MmResetDriverPaging | 711 |
MmSecureVirtualMemory | 713 |
MmSetBankedSection | 715 |
MmSystemRangeStart | 717 |
MmUnlockPagableImageSection | 719 |
MmUnmapIoSpace | 721 |
MmUnmapReservedMapping | 723 |
MmUnmapViewInSessionSpace | 725 |
MmUnmapViewOfSection | 727 |
MmUserProbeAddress | 729 |
NlsLeadByteInfo | 731 |
NlsMbOemCodePageTag | 733 |
NlsOemLeadByteInfo | 735 |
NtAdjustPrivilegesToken | 737 |
NtAllocateUuids | 739 |
NtBuildNumber | 741 |
NtConnectPort | 743 |
NtCreateFile | 745 |
NtDeleteAtom | 747 |
NtDeviceIoControlFile | 749 |
NtDuplicateToken | 751 |
NtFreeVirtualMemory | 753 |
NtGlobalFlag | 755 |
NtMakePermanentObject | 757 |
NtNotifyChangeDirectoryFile | 759 |
NtOpenProcess | 761 |
NtOpenProcessTokenEx | 763 |
NtOpenThreadToken | 765 |
NtQueryDirectoryFile | 767 |
NtQueryInformationAtom | 769 |
NtQueryInformationProcess | 771 |
NtQueryInformationToken | 773 |
NtQuerySecurityObject | 775 |
NtQueryVolumeInformationFile | 777 |
NtRequestPort | 779 |
NtSetEaFile | 781 |
NtSetInformationFile | 783 |
NtSetInformationThread | 785 |
NtSetSecurityObject | 787 |
NtShutdownSystem | 789 |
NtUnlockFile | 791 |
NtWaitForSingleObject | 793 |
ObAssignSecurity | 795 |
ObCheckObjectAccess | 797 |
ObCreateObject | 799 |
ObDereferenceObject | 801 |
ObFindHandleForObject | 803 |
ObInsertObject | 805 |
ObMakeTemporaryObject | 807 |
ObOpenObjectByPointer | 809 |
ObQueryObjectAuditingByHandle | 811 |
ObReferenceObjectByName | 813 |
ObReferenceSecurityDescriptor | 815 |
ObSetHandleAttributes | 817 |
ObSetSecurityObjectByPointer | 819 |
ObfReferenceObject | 52 |
PfxInitialize | 821 |
PfxRemovePrefix | 823 |
PoCancelDeviceNotify | 825 |
PoRegisterDeviceForIdleDetection | 827 |
PoRegisterSystemState | 829 |
PoRequestShutdownEvent | 831 |
PoSetPowerState | 833 |
PoShutdownBugCheck | 835 |
PoUnregisterSystemState | 837 |
ProbeForWrite | 839 |
PsChargePoolQuota | 841 |
PsChargeProcessPagedPoolQuota | 843 |
PsCreateSystemProcess | 845 |
PsDereferenceImpersonationToken | 847 |
PsDisableImpersonation | 849 |
PsGetContextThread | 851 |
PsGetCurrentProcessId | 853 |
PsGetCurrentThread | 855 |
PsGetCurrentThreadPreviousMode | 857 |
PsGetCurrentThreadStackLimit | 859 |
PsGetJobSessionId | 861 |
PsGetProcessCreateTimeQuadPart | 863 |
PsGetProcessExitProcessCalled | 865 |
PsGetProcessExitTime | 867 |
PsGetProcessImageFileName | 869 |
PsGetProcessJob | 871 |
PsGetProcessPriorityClass | 873 |
PsGetProcessSecurityPort | 875 |
PsGetProcessWin32Process | 877 |
PsGetThreadFreezeCount | 879 |
PsGetThreadId | 881 |
PsGetThreadProcessId | 883 |
PsGetThreadTeb | 885 |
PsGetVersion | 887 |
PsInitialSystemProcess | 889 |
PsIsSystemThread | 891 |
PsIsThreadTerminating | 893 |
PsLookupProcessByProcessId | 895 |
PsLookupThreadByThreadId | 897 |
PsReferenceImpersonationToken | 899 |
PsRemoveCreateThreadNotifyRoutine | 901 |
PsRestoreImpersonation | 903 |
PsReturnProcessNonPagedPoolQuota | 905 |
PsRevertThreadToSelf | 907 |
PsSetContextThread | 909 |
PsSetCreateThreadNotifyRoutine | 911 |
PsSetLegoNotifyRoutine | 913 |
PsSetProcessPriorityByClass | 915 |
PsSetProcessSecurityPort | 917 |
PsSetProcessWindowStation | 919 |
PsSetThreadWin32Thread | 921 |
PsThreadType | 923 |
READ_REGISTER_BUFFER_ULONG | 925 |
READ_REGISTER_UCHAR | 927 |
READ_REGISTER_USHORT | 929 |
RtlAddAccessAllowedAce | 931 |
RtlAddAce | 933 |
RtlAddRange | 935 |
RtlAnsiCharToUnicodeChar | 937 |
RtlAnsiStringToUnicodeString | 939 |
RtlAppendStringToString | 941 |
RtlAppendUnicodeToString | 943 |
RtlAreAnyAccessesGranted | 945 |
RtlAreBitsSet | 947 |
RtlCaptureContext | 949 |
RtlCharToInteger | 951 |
RtlClearAllBits | 953 |
RtlClearBits | 955 |
RtlCompareMemoryUlong | 957 |
RtlCompareUnicodeString | 959 |
RtlCompressChunks | 961 |
RtlConvertSidToUnicodeString | 963 |
RtlCopyLuid | 965 |
RtlCopySid | 967 |
RtlCopyUnicodeString | 969 |
RtlCreateAtomTable | 971 |
RtlCreateRegistryKey | 973 |
RtlCreateSystemVolumeInformationFolder | 975 |
RtlCustomCPToUnicodeN | 977 |
RtlDecompressChunks | 979 |
RtlDelete | 981 |
RtlDeleteAtomFromAtomTable | 983 |
RtlDeleteElementGenericTableAvl | 985 |
RtlDeleteOwnersRanges | 987 |
RtlDeleteRegistryValue | 989 |
RtlDestroyAtomTable | 991 |
RtlDowncaseUnicodeString | 993 |
RtlEnlargedIntegerMultiply | 995 |
RtlEnlargedUnsignedMultiply | 997 |
RtlEnumerateGenericTableAvl | 999 |
RtlEnumerateGenericTableWithoutSplaying | 1001 |
RtlEqualLuid | 1003 |
RtlEqualString | 1005 |
RtlExtendedIntegerMultiply | 1007 |
RtlExtendedMagicDivide | 1009 |
RtlFillMemoryUlong | 1011 |
RtlFindClearBitsAndSet | 1013 |
RtlFindFirstRunClear | 1015 |
RtlFindLeastSignificantBit | 1017 |
RtlFindMessage | 1019 |
RtlFindNextForwardRunClear | 1021 |
RtlFindSetBits | 1023 |
RtlFindUnicodePrefix | 1025 |
RtlFreeAnsiString | 1027 |
RtlFreeOemString | 1029 |
RtlFreeUnicodeString | 1031 |
RtlGenerate8dot3Name | 1033 |
RtlGetCallersAddress | 1035 |
RtlGetDaclSecurityDescriptor | 1037 |
RtlGetElementGenericTable | 1039 |
RtlGetFirstRange | 1041 |
RtlGetNextRange | 1043 |
RtlGetOwnerSecurityDescriptor | 1045 |
RtlGetSetBootStatusData | 1047 |
RtlHashUnicodeString | 1049 |
RtlImageNtHeader | 1051 |
RtlInitCodePageTable | 1053 |
RtlInitUnicodeString | 1055 |
RtlInitializeGenericTable | 1057 |
RtlInitializeRangeList | 1059 |
RtlInitializeUnicodePrefix | 1061 |
RtlInsertElementGenericTableAvl | 1063 |
RtlInsertElementGenericTableFullAvl | 1065 |
RtlInt64ToUnicodeString | 1067 |
RtlIntegerToUnicode | 1069 |
RtlInvertRangeList | 1071 |
RtlIpv4AddressToStringExA | 1073 |
RtlIpv4AddressToStringW | 1075 |
RtlIpv4StringToAddressExA | 1077 |
RtlIpv4StringToAddressW | 1079 |
RtlIpv6AddressToStringExA | 1081 |
RtlIpv6AddressToStringW | 1083 |
RtlIpv6StringToAddressExA | 1085 |
RtlIpv6StringToAddressW | 1087 |
RtlIsGenericTableEmptyAvl | 1089 |
RtlIsRangeAvailable | 1091 |
RtlLargeIntegerAdd | 1093 |
RtlLargeIntegerDivide | 1095 |
RtlLargeIntegerShiftLeft | 1097 |
RtlLargeIntegerSubtract | 1099 |
RtlLengthSecurityDescriptor | 1101 |
RtlLockBootStatusData | 1103 |
RtlLookupElementGenericTable | 1105 |
RtlLookupElementGenericTableFull | 1107 |
RtlMapGenericMask | 1109 |
RtlMergeRangeLists | 1111 |
RtlMultiByteToUnicodeN | 1113 |
RtlNextUnicodePrefix | 1115 |
RtlNtStatusToDosErrorNoTeb | 1117 |
RtlNumberGenericTableElementsAvl | 1119 |
RtlNumberOfSetBits | 1121 |
RtlOemStringToUnicodeSize | 1123 |
RtlOemToUnicodeN | 1125 |
RtlPrefetchMemoryNonTemporal | 53 |
RtlPrefixUnicodeString | 1128 |
RtlQueryRegistryValues | 1130 |
RtlRaiseException | 1132 |
RtlRandomEx | 1134 |
RtlRealSuccessor | 1136 |
RtlReserveChunk | 1138 |
RtlSecondsSince1980ToTime | 1140 |
RtlSelfRelativeToAbsoluteSD2 | 1141 |
RtlSetBit | 1144 |
RtlSetDaclSecurityDescriptor | 1146 |
RtlSetOwnerSecurityDescriptor | 1148 |
RtlSetTimeZoneInformation | 1150 |
RtlSplay | 1152 |
RtlSubAuthorityCountSid | 1154 |
RtlSubtreePredecessor | 1156 |
RtlTestBit | 1158 |
RtlTimeToElapsedTimeFields | 1160 |
RtlTimeToSecondsSince1980 | 1162 |
RtlTraceDatabaseAdd | 1164 |
RtlTraceDatabaseDestroy | 1166 |
RtlTraceDatabaseFind | 1168 |
RtlTraceDatabaseUnlock | 1170 |
RtlUlongByteSwap | 54 |
RtlUnicodeStringToAnsiSize | 1172 |
RtlUnicodeStringToCountedOemString | 1174 |
RtlUnicodeStringToOemSize | 1176 |
RtlUnicodeToCustomCPN | 1178 |
RtlUnicodeToMultiByteSize | 1180 |
RtlUnlockBootStatusData | 1182 |
RtlUpcaseUnicodeChar | 1184 |
RtlUpcaseUnicodeStringToAnsiString | 1186 |
RtlUpcaseUnicodeStringToOemString | 1188 |
RtlUpcaseUnicodeToMultiByteN | 1190 |
RtlUpperChar | 1192 |
RtlUshortByteSwap | 56 |
RtlValidSecurityDescriptor | 1195 |
RtlVerifyVersionInfo | 1197 |
RtlWalkFrameChain | 1199 |
RtlZeroHeap | 1201 |
RtlxAnsiStringToUnicodeSize | 1203 |
RtlxUnicodeStringToAnsiSize | 1205 |
SeAccessCheck | 1207 |
SeAssignSecurity | 1209 |
SeAuditHardLinkCreation | 1211 |
SeAuditingFileEventsWithContext | 1213 |
SeAuditingHardLinkEvents | 1215 |
SeCaptureSecurityDescriptor | 1217 |
SeCloseObjectAuditAlarm | 1219 |
SeCreateClientSecurity | 1221 |
SeDeassignSecurity | 1223 |
SeDeleteObjectAuditAlarm | 1225 |
SeFilterToken | 1227 |
SeImpersonateClient | 1229 |
SeLockSubjectContext | 1231 |
SeOpenObjectAuditAlarm | 1233 |
SePrivilegeCheck | 1235 |
SePublicDefaultDacl | 1237 |
SeQueryInformationToken | 1239 |
SeQuerySessionIdToken | 1241 |
SeReleaseSecurityDescriptor | 1243 |
SeSetAccessStateGenericMapping | 1245 |
SeSetSecurityDescriptorInfoEx | 1247 |
SeSystemDefaultDacl | 1249 |
SeTokenIsAdmin | 1251 |
SeTokenIsWriteRestricted | 1253 |
SeTokenType | 1255 |
SeUnregisterLogonSessionTerminatedRoutine | 1257 |
VerSetConditionMask | 1259 |
VfFailDriver | 1261 |
VfIsVerificationEnabled | 1263 |
WRITE_REGISTER_BUFFER_ULONG | 1265 |
WRITE_REGISTER_UCHAR | 1267 |
WRITE_REGISTER_USHORT | 1269 |
WmiGetClock | 57 |
WmiQueryTraceInformation | 1272 |
WmiStopTrace | 1274 |
WmiTraceMessageVa | 1276 |
XIPDispatch | 1278 |
ZwAddBootEntry | 1280 |
ZwAlertThread | 1282 |
ZwAssignProcessToJobObject | 1284 |
ZwCancelTimer | 1286 |
ZwClose | 1288 |
ZwConnectPort | 1290 |
ZwCreateEvent | 1292 |
ZwCreateJobObject | 1294 |
ZwCreateSection | 1296 |
ZwCreateTimer | 1298 |
ZwDeleteFile | 1300 |
ZwDeleteValueKey | 1302 |
ZwDisplayString | 1304 |
ZwDuplicateToken | 1306 |
ZwEnumerateKey | 1308 |
ZwFlushInstructionCache | 1310 |
ZwFlushVirtualMemory | 1312 |
ZwFsControlFile | 1314 |
ZwIsProcessInJob | 1316 |
ZwLoadKey | 1318 |
ZwMapViewOfSection | 1320 |
ZwOpenDirectoryObject | 1322 |
ZwOpenFile | 1324 |
ZwOpenKey | 1326 |
ZwOpenProcessToken | 1328 |
ZwOpenSection | 1330 |
ZwOpenThread | 1332 |
ZwOpenThreadTokenEx | 1334 |
ZwPowerInformation | 1336 |
ZwQueryBootEntryOrder | 1338 |
ZwQueryDefaultLocale | 1340 |
ZwQueryDirectoryFile | 1342 |
ZwQueryEaFile | 1344 |
ZwQueryInformationFile | 1346 |
ZwQueryInformationProcess | 1348 |
ZwQueryInformationToken | 1350 |
ZwQueryKey | 1352 |
ZwQuerySection | 1354 |
ZwQuerySymbolicLinkObject | 1356 |
ZwQueryValueKey | 1358 |
ZwReadFile | 1360 |
ZwRequestWaitReplyPort | 1362 |
ZwRestoreKey | 1364 |
ZwSaveKeyEx | 1366 |
ZwSetBootOptions | 1368 |
ZwSetDefaultUILanguage | 1370 |
ZwSetEvent | 1372 |
ZwSetInformationJobObject | 1374 |
ZwSetInformationProcess | 1376 |
ZwSetSecurityObject | 1378 |
ZwSetSystemTime | 1380 |
ZwSetValueKey | 1382 |
ZwTerminateJobObject | 1384 |
ZwTranslateFilePath | 1386 |
ZwUnloadKey | 1388 |
ZwWaitForMultipleObjects | 1390 |
ZwWriteFile | 1392 |
_CIcos | 1394 |
_CIsqrt | 1396 |
_alldiv | 1398 |
_allmul | 1400 |
_allrem | 1402 |
_allshr | 1404 |
_aulldvrm | 1406 |
_aullshr | 1408 |
_except_handler3 | 1410 |
_itoa | 1412 |
_local_unwind2 | 1414 |
_snprintf | 1416 |
_stricmp | 1418 |
_strnicmp | 1420 |
_strrev | 1422 |
_strupr | 1424 |
_vsnwprintf | 1426 |
_wcslwr | 1428 |
_wcsnset | 1430 |
_wcsupr | 1432 |
atol | 1434 |
islower | 1436 |
isspace | 1438 |
isxdigit | 1440 |
mbtowc | 1442 |
memcpy | 1444 |
memset | 1446 |
rand | 1448 |
srand | 1450 |
strchr | 1452 |
strcpy | 1454 |
strncat | 1456 |
strncpy | 1458 |
strspn | 1460 |
swprintf | 1462 |
toupper | 1464 |
towupper | 1466 |
vDbgPrintExWithPrefix | 1468 |
wcscat | 1470 |
wcscmp | 1472 |
wcscspn | 1474 |
wcsncat | 1476 |
wcsncpy | 1478 |
wcsspn | 1480 |
wcstombs | 1482 |