4 CsrAllocateCaptureBuffer
5 CsrAllocateMessagePointer
6 CsrCaptureMessageBuffer
7 CsrCaptureMessageMultiUnicodeStringsInPlace
8 CsrCaptureMessageString
11 CsrClientConnectToServer
14 CsrIdentifyAlertableThread
22 DbgPrintReturnControlC
24 DbgQueryDebugFilterState
25 DbgSetDebugFilterState
28 DbgUiConvertStateChangeStructure
29 DbgUiDebugActiveProcess
30 DbgUiGetThreadDebugObject
31 DbgUiIssueRemoteBreakin
33 DbgUiSetThreadDebugObject
40 KiRaiseUserExceptionDispatcher
42 KiUserCallbackDispatcher
43 KiUserExceptionDispatcher
46 LdrDisableThreadCalloutsForDll
48 LdrFindEntryForAddress
49 LdrFindResourceDirectory_U
52 LdrGetProcedureAddress
56 LdrProcessRelocationBlock
57 LdrQueryImageFileExecutionOptions
58 LdrQueryProcessModuleInformation
61 LdrUnloadAlternateResourceModule
64 LdrVerifyImageMatchesChecksum
70 NtAccessCheckAndAuditAlarm
72 NtAccessCheckByTypeAndAuditAlarm
73 NtAccessCheckByTypeResultList
74 NtAccessCheckByTypeResultListAndAuditAlarm
75 NtAccessCheckByTypeResultListAndAuditAlarmByHandle
80 NtAdjustPrivilegesToken
83 NtAllocateLocallyUniqueId
84 NtAllocateUserPhysicalPages
86 NtAllocateVirtualMemory
88 NtAreMappedFilesTheSame
89 NtAssignProcessToJobObject
91 NtCancelDeviceWakeupRequest
96 NtCloseObjectAuditAlarm
104 NtCreateDirectoryObject
115 NtCreateNamedPipeFile
123 NtCreateSymbolicLinkObject
128 NtCurrentTeb=_NtCurrentTeb
136 NtDeleteObjectAuditAlarm
138 NtDeviceIoControlFile
142 NtEnumerateBootEntries
144 NtEnumerateSystemEnvironmentValuesEx
150 NtFlushInstructionCache
154 NtFreeUserPhysicalPages
158 NtGetCurrentProcessorNumber
159 NtGetDevicePowerState
162 NtImpersonateAnonymousToken
163 NtImpersonateClientOfPort
166 NtInitiatePowerAction
168 NtIsSystemResumeAutomatic
174 NtLockProductActivationKeys
177 NtMakePermanentObject
178 NtMakeTemporaryObject
179 NtMapUserPhysicalPages
180 NtMapUserPhysicalPagesScatter
183 NtNotifyChangeDirectoryFile
185 NtNotifyChangeMultipleKeys
186 NtOpenDirectoryObject
195 NtOpenObjectAuditAlarm
201 NtOpenSymbolicLinkObject
209 NtPrivilegeObjectAuditAlarm
210 NtPrivilegedServiceAuditAlarm
211 NtProtectVirtualMemory
213 NtQueryAttributesFile
214 NtQueryBootEntryOrder
216 NtQueryDebugFilterState
218 NtQueryDefaultUILanguage
220 NtQueryDirectoryObject
223 NtQueryFullAttributesFile
224 NtQueryInformationAtom
225 NtQueryInformationFile
226 NtQueryInformationJobObject
227 NtQueryInformationPort
228 NtQueryInformationProcess
229 NtQueryInformationThread
230 NtQueryInformationToken
231 NtQueryInstallUILanguage
232 NtQueryIntervalProfile
235 NtQueryMultipleValueKey
239 NtQueryPerformanceCounter
240 NtQueryPortInformationProcess
241 NtQueryQuotaInformationFile
243 NtQuerySecurityObject
245 NtQuerySymbolicLinkObject
246 NtQuerySystemEnvironmentValue
247 NtQuerySystemEnvironmentValueEx
248 NtQuerySystemInformation
251 NtQueryTimerResolution
254 NtQueryVolumeInformationFile
262 NtRegisterThreadTerminatePort
271 NtReplyWaitReceivePort
272 NtReplyWaitReceivePortEx
274 NtRequestDeviceWakeup
276 NtRequestWaitReplyPort
277 NtRequestWakeupLatency
290 NtSetDebugFilterState
291 NtSetDefaultHardErrorPort
293 NtSetDefaultUILanguage
296 NtSetEventBoostPriority
298 NtSetHighWaitLowEventPair
299 NtSetInformationDebugObject
301 NtSetInformationJobObject
303 NtSetInformationObject
304 NtSetInformationProcess
305 NtSetInformationThread
306 NtSetInformationToken
311 NtSetLowWaitHighEventPair
312 NtSetQuotaInformationFile
314 NtSetSystemEnvironmentValue
315 NtSetSystemEnvironmentValueEx
316 NtSetSystemInformation
317 NtSetSystemPowerState
319 NtSetThreadExecutionState
324 NtSetVolumeInformationFile
326 NtSignalAndWaitForSingleObject
342 NtUnlockVirtualMemory
347 NtWaitForMultipleObjects
348 NtWaitForSingleObject
356 RtlAbsoluteToSelfRelativeSD@12
358 RtlAcquireResourceExclusive@8
359 RtlAcquireResourceShared@8
360 RtlAcquireSRWLockExclusive@4
361 RtlAcquireSRWLockShared@4
362 RtlActivateActivationContext@12
363 RtlActivateActivationContextUnsafeFast@8
364 RtlAddAccessAllowedAce@16
365 RtlAddAccessAllowedAceEx@20
366 RtlAddAccessAllowedObjectAce@28
367 RtlAddAccessDeniedAce@16
368 RtlAddAccessDeniedAceEx@20
369 RtlAddAccessDeniedObjectAce@28
371 RtlAddAtomToAtomTable@12
372 RtlAddAuditAccessAce@24
373 RtlAddAuditAccessAceEx@28
374 RtlAddAuditAccessObjectAce@36
375 RtlAddMandatoryAce@24
376 RtlAddRefActivationContext@4
377 RtlAddVectoredExceptionHandler@8
378 RtlAdjustPrivilege@16
379 RtlAllocateActivationContextStack@4
380 RtlAllocateAndInitializeSid@44
383 RtlAnsiCharToUnicodeChar@4
384 RtlAnsiStringToUnicodeSize@4=RtlxAnsiStringToUnicodeSize@4
385 RtlAnsiStringToUnicodeString@12
386 RtlAppendAsciizToString@8
387 RtlAppendStringToString@8
388 RtlAppendUnicodeStringToString@8
389 RtlAppendUnicodeToString@8
390 RtlAreAllAccessesGranted@8
391 RtlAreAnyAccessesGranted@8
396 RtlCaptureStackBackTrace@16
398 RtlCheckRegistryKey@8
403 RtlCompareMemoryUlong@12
405 RtlCompareUnicodeString@12
408 RtlConvertExclusiveToShared@4
409 RtlConvertLongToLargeInteger@4
410 RtlConvertSharedToExclusive@4
411 RtlConvertSidToUnicodeString@12
412 RtlConvertUlongToLargeInteger@4
414 RtlCopyLuidAndAttributesArray@12
415 RtlCopySecurityDescriptor@8
417 RtlCopySidAndAttributesArray@28
419 RtlCopyUnicodeString@8
421 RtlCreateActivationContext@8
423 RtlCreateBootStatusDataFile@0
424 RtlCreateEnvironment@8
426 RtlCreateProcessParameters@40
427 RtlCreateQueryDebugBuffer@8
428 RtlCreateRegistryKey@8
429 RtlCreateSecurityDescriptor@8
430 RtlCreateSystemVolumeInformationFolder@4
433 RtlCreateTimerQueue@4
434 RtlCreateUnicodeString@8
435 RtlCreateUnicodeStringFromAsciiz@8
436 RtlCreateUserProcess@40
437 RtlCreateUserThread@40
438 RtlCustomCPToUnicodeN@24
439 RtlCutoverTimeToSystemTime@16
440 RtlDeNormalizeProcessParams@4
441 RtlDeactivateActivationContext@8
442 RtlDeactivateActivationContextUnsafeFast@4
444 RtlDecodeSystemPointer@4=RtlEncodeSystemPointer@4
445 RtlDecompressBuffer@24
446 RtlDecompressFragment@32
449 RtlDeleteAtomFromAtomTable@8
450 RtlDeleteCriticalSection@4
451 RtlDeleteElementGenericTable@8
452 RtlDeleteElementGenericTableAvl@8
454 RtlDeleteOwnersRanges@8
456 RtlDeleteRegistryValue@12
458 RtlDeleteSecurityObject@4
460 RtlDeleteTimerQueue@4
461 RtlDeleteTimerQueueEx@8
463 RtlDeregisterWaitEx@8
464 RtlDestroyAtomTable@4
465 RtlDestroyEnvironment@4
466 RtlDestroyHandleTable@4
468 RtlDestroyProcessParameters@4
469 RtlDestroyQueryDebugBuffer@4
470 RtlDetermineDosPathNameType_U@4
471 RtlDllShutdownInProgress@0
472 RtlDnsHostNameToComputerName@12
473 RtlDoesFileExists_U@4
474 RtlDosPathNameToNtPathName_U@16
475 RtlDosPathNameToRelativeNtPathName_U@16
476 RtlDosSearchPath_U@24
477 RtlDowncaseUnicodeChar@4
478 RtlDowncaseUnicodeString@12
480 RtlDuplicateUnicodeString@12
483 RtlEncodeSystemPointer@4
484 RtlEnlargedIntegerMultiply@8
485 RtlEnlargedUnsignedDivide@16
486 RtlEnlargedUnsignedMultiply@8
487 RtlEnterCriticalSection@4
488 RtlEnumProcessHeaps@8
489 RtlEnumerateGenericTable@8
490 RtlEnumerateGenericTableAvl@8
491 RtlEnumerateGenericTableLikeADirectory@28
492 RtlEnumerateGenericTableWithoutSplaying@8
493 RtlEnumerateGenericTableWithoutSplayingAvl@8
494 RtlEqualComputerName@8
500 RtlEqualUnicodeString@12
501 RtlEraseUnicodeString@4
503 RtlExpandEnvironmentStrings_U@16
505 RtlExtendedIntegerMultiply@12
506 RtlExtendedLargeIntegerDivide@16
507 RtlExtendedMagicDivide@20
509 RtlFillMemoryUlong@12
510 RtlFindActivationContextSectionString@20
511 RtlFindCharInUnicodeString@16
513 RtlFindClearBitsAndSet@12
515 RtlFindLastBackwardRunClear@12
516 RtlFindLeastSignificantBit@8
517 RtlFindLongestRunClear@8
518 RtlFindLongestRunSet@8
520 RtlFindMostSignificantBit@8
521 RtlFindNextForwardRunClear@12
524 RtlFindSetBitsAndClear@12
527 RtlFlushSecureMemoryCache@8
528 RtlFormatCurrentUserKeyPath@4
536 RtlFreeThreadActivationContextStack@0
537 RtlFreeUnicodeString@4
538 RtlFreeUserThreadStack@8
540 RtlGenerate8dot3Name@16
542 RtlGetActiveActivationContext@4
543 RtlGetCallersAddress@8
544 RtlGetCompressionWorkSpaceSize@12
545 RtlGetControlSecurityDescriptor@12
546 RtlGetCurrentDirectory_U@8
548 RtlGetCurrentProcessorNumber@0
549 RtlGetDaclSecurityDescriptor@16
550 RtlGetElementGenericTable@8
551 RtlGetElementGenericTableAvl@8
553 RtlGetFullPathName_U@16
554 RtlGetGroupSecurityDescriptor@12
556 RtlGetLastWin32Error@0
557 RtlGetLongestNtPathLength@0
559 RtlGetNtGlobalFlags@0
560 RtlGetNtProductType@4
561 RtlGetNtVersionNumbers@12
562 RtlGetOwnerSecurityDescriptor@12
564 RtlGetSaclSecurityDescriptor@16
565 RtlGetSecurityDescriptorRMControl@8
566 RtlGetSetBootStatusData@24
567 RtlGetUserInfoHeap@20
569 RtlHashUnicodeString@16
570 RtlIdentifierAuthoritySid@4
571 RtlImageDirectoryEntryToData@16
573 RtlImageRvaToSection@12
577 RtlInitAnsiStringEx@8
578 RtlInitCodePageTable@8
581 RtlInitUnicodeString@8
582 RtlInitUnicodeStringEx@8
583 RtlInitializeBitMap@12
584 RtlInitializeContext@20
585 RtlInitializeCriticalSection@4
586 RtlInitializeCriticalSectionAndSpinCount@8
587 RtlInitializeGenericTable@20
588 RtlInitializeGenericTableAvl@20
589 RtlInitializeHandleTable@12
590 RtlInitializeRangeList@4
591 RtlInitializeResource@4
592 RtlInitializeSListHead@4
594 RtlInitializeSRWLock@4
595 RtlInsertElementGenericTable@16
596 RtlInsertElementGenericTableAvl@16
597 RtlInt64ToUnicodeString@16
599 RtlIntegerToUnicodeString@12
600 RtlInterlockedFlushSList@4
601 RtlInterlockedPopEntrySList@4
602 RtlInterlockedPushEntrySList@8
603 RtlInterlockedPushListSList@16
605 RtlIpv4AddressToStringA@8
606 RtlIpv4AddressToStringExA@16
607 RtlIpv4AddressToStringExW@16
608 RtlIpv4AddressToStringW@8
609 RtlIpv4StringToAddressA@16
610 RtlIpv4StringToAddressExA@16
611 RtlIpv4StringToAddressExW@16
612 RtlIpv4StringToAddressW@16
613 RtlIpv6AddressToStringA@8
614 RtlIpv6AddressToStringExA@20
615 RtlIpv6AddressToStringExW@20
616 RtlIpv6AddressToStringW@8
617 RtlIpv6StringToAddressA@12
618 RtlIpv6StringToAddressExA@16
619 RtlIpv6StringToAddressExW@16
620 RtlIpv6StringToAddressW@12
621 RtlIsActivationContextActive@4
622 RtlIsDosDeviceName_U@4
623 RtlIsGenericTableEmpty@4
624 RtlIsGenericTableEmptyAvl@4
625 RtlIsNameLegalDOS8Dot3@12
626 RtlIsRangeAvailable@40
628 RtlIsThreadWithinLoaderCallout@0
630 RtlIsValidIndexHandle@12
631 RtlLargeIntegerAdd@16
632 RtlLargeIntegerArithmeticShift@12
633 RtlLargeIntegerDivide@20
634 RtlLargeIntegerNegate@8
635 RtlLargeIntegerShiftLeft@12
636 RtlLargeIntegerShiftRight@12
637 RtlLargeIntegerSubtract@16
638 RtlLargeIntegerToChar@16
639 RtlLeaveCriticalSection@4
640 RtlLengthRequiredSid@4
641 RtlLengthSecurityDescriptor@4
643 RtlLocalTimeToSystemTime@8
644 RtlLockBootStatusData@4
646 RtlLookupAtomInAtomTable@12
647 RtlLookupElementGenericTable@8
648 RtlLookupElementGenericTableAvl@8
649 RtlMakeSelfRelativeSD@12
651 RtlMergeRangeLists@16
653 RtlMultiByteToUnicodeN@20
654 RtlMultiByteToUnicodeSize@12
655 RtlNewSecurityObject@24
656 RtlNormalizeProcessParams@4
657 RtlNtPathNameToDosPathName@16
658 RtlNtStatusToDosError@4
659 RtlNtStatusToDosErrorNoTeb@4
660 RtlNumberGenericTableElements@4
661 RtlNumberGenericTableElementsAvl@4
662 RtlNumberOfClearBits@4
664 RtlOemStringToUnicodeString@12
668 RtlPinAtomInAtomTable@8
670 RtlPrefixUnicodeString@12
672 RtlQueryAtomInAtomTable@24
674 RtlQueryEnvironmentVariable_U@12
675 RtlQueryHeapInformation@20
676 RtlQueryInformationAcl@16
677 RtlQueryInformationActivationContext@28
678 RtlQueryProcessDebugInformation@12
679 RtlQueryRegistryValues@20
680 RtlQuerySecurityObject@20
682 RtlQueryTimeZoneInformation@4
691 RtlRegisterSecureMemoryCacheCallback@4
693 RtlReleaseActivationContext@4
696 RtlReleaseSRWLockExclusive@4
697 RtlReleaseSRWLockShared@4
699 RtlRemoveVectoredExceptionHandler@4
700 RtlResetRtlTranslations@4
701 RtlRestoreLastWin32Error@4=RtlSetLastWin32Error@4
702 RtlRunDecodeUnicodeString@8
703 RtlRunEncodeUnicodeString@8
704 RtlSecondsSince1970ToTime@8
705 RtlSecondsSince1980ToTime@8
706 RtlSelfRelativeToAbsoluteSD2@8
707 RtlSelfRelativeToAbsoluteSD@44
709 RtlSetAttributesSecurityDescriptor@12
711 RtlSetControlSecurityDescriptor@12
712 RtlSetCriticalSectionSpinCount@8
713 RtlSetCurrentDirectory_U@4
714 RtlSetCurrentEnvironment@8
715 RtlSetDaclSecurityDescriptor@16
716 RtlSetEnvironmentVariable@12
717 RtlSetGroupSecurityDescriptor@12
718 RtlSetHeapInformation@16
719 RtlSetInformationAcl@16
720 RtlSetIoCompletionCallback@12
721 RtlSetLastWin32Error@4
722 RtlSetLastWin32ErrorAndNtStatusFromNtStatus@4
723 RtlSetOwnerSecurityDescriptor@12
724 RtlSetProcessIsCritical@12
725 RtlSetSaclSecurityDescriptor@16
726 RtlSetSecurityDescriptorRMControl@8
727 RtlSetSecurityObject@20
728 RtlSetTimeZoneInformation@4
729 RtlSetUnhandledExceptionFilter@4
730 RtlSetUserFlagsHeap@16
731 RtlSetUserValueHeap@16
733 RtlSleepConditionVariableCS@12
734 RtlSleepConditionVariableSRW@16
737 RtlSubAuthorityCountSid@4
739 RtlSubtreePredecessor@4
740 RtlSubtreeSuccessor@4
741 RtlSystemTimeToLocalTime@8
742 RtlTimeFieldsToTime@8
743 RtlTimeToElapsedTimeFields@8
744 RtlTimeToSecondsSince1970@8
745 RtlTimeToSecondsSince1980@8
746 RtlTimeToTimeFields@8
747 RtlTryEnterCriticalSection@4
749 @RtlUlonglongByteSwap@8
750 RtlUnhandledExceptionFilter@4
751 RtlUnicodeStringToAnsiString@12
752 RtlUnicodeStringToCountedOemString@12
753 RtlUnicodeStringToInteger@12
754 RtlUnicodeStringToOemString@12
755 RtlUnicodeToCustomCPN@24
756 RtlUnicodeToMultiByteN@20
757 RtlUnicodeToMultiByteSize@12
760 RtlUnlockBootStatusData@4
763 RtlUpcaseUnicodeChar@4
764 RtlUpcaseUnicodeString@12
765 RtlUpcaseUnicodeStringToAnsiString@12
766 RtlUpcaseUnicodeStringToCountedOemString@12
767 RtlUpcaseUnicodeStringToOemString@12
768 RtlUpcaseUnicodeToCustomCPN@24
769 RtlUpcaseUnicodeToMultiByteN@20
770 RtlUpcaseUnicodeToOemN@20
777 RtlValidRelativeSecurityDescriptor@12
778 RtlValidSecurityDescriptor@4
781 RtlValidateProcessHeaps@0
782 RtlValidateUnicodeString@8
783 RtlVerifyVersionInfo@16
786 RtlWakeAllConditionVariable@4
787 RtlWakeConditionVariable@4
788 RtlWriteRegistryValue@24
791 RtlZombifyActivationContext@4
792 RtlpEnsureBufferSize@12
794 RtlpNtEnumerateSubKey@16
795 RtlpNtMakeTemporaryKey@4
797 RtlpNtQueryValueKey@20
799 RtlpUnWaitCriticalSection@4
800 RtlpWaitForCriticalSection@4
801 RtlxAnsiStringToUnicodeSize@4
802 RtlxOemStringToUnicodeSize@4
803 RtlxUnicodeStringToAnsiSize@4
804 RtlxUnicodeStringToOemSize@4
806 ZwAcceptConnectPort=NtAcceptConnectPort
807 ZwAccessCheck=NtAccessCheck
808 ZwAccessCheckAndAuditAlarm=NtAccessCheckAndAuditAlarm
809 ZwAccessCheckByType=NtAccessCheckByType
810 ZwAccessCheckByTypeAndAuditAlarm=NtAccessCheckByTypeAndAuditAlarm
811 ZwAccessCheckByTypeResultList=NtAccessCheckByTypeResultList
812 ZwAccessCheckByTypeResultListAndAuditAlarm=NtAccessCheckByTypeResultListAndAuditAlarm
813 ZwAccessCheckByTypeResultListAndAuditAlarmByHandle=NtAccessCheckByTypeResultListAndAuditAlarmByHandle
816 ZwAdjustGroupsToken=NtAdjustGroupsToken
817 ZwAdjustPrivilegesToken=NtAdjustPrivilegesToken
818 ZwAlertResumeThread=NtAlertResumeThread
819 ZwAlertThread=NtAlertThread
820 ZwAllocateLocallyUniqueId=NtAllocateLocallyUniqueId
821 ZwAllocateUserPhysicalPages
822 ZwAllocateUuids=NtAllocateUuids
823 ZwAllocateVirtualMemory=NtAllocateVirtualMemory
824 ZwAreMappedFilesTheSame=NtAreMappedFilesTheSame
825 ZwAssignProcessToJobObject=NtAssignProcessToJobObject
827 ZwCancelDeviceWakeupRequest
828 ZwCancelIoFile=NtCancelIoFile
829 ZwCancelTimer=NtCancelTimer
830 ZwClearEvent=NtClearEvent
832 ZwCloseObjectAuditAlarm
833 ZwCompactKeys=NtCompactKeys
834 ZwCompareTokens=NtCompareTokens
835 ZwCompleteConnectPort=NtCompleteConnectPort
836 ZwCompressKey=NtCompressKey
837 ZwConnectPort=NtConnectPort
838 ZwContinue=NtContinue
839 ZwCreateDebugObject=NtCreateDebugObject
840 ZwCreateDirectoryObject=NtCreateDirectoryObject
841 ZwCreateEvent=NtCreateEvent
842 ZwCreateEventPair=NtCreateEventPair
843 ZwCreateFile=NtCreateFile
844 ZwCreateIoCompletion=NtCreateIoCompletion
845 ZwCreateJobObject=NtCreateJobObject
846 ZwCreateJobSet=NtCreateJobSet
847 ZwCreateKey=NtCreateKey
848 ZwCreateKeyedEvent=NtCreateKeyedEvent
849 ZwCreateMailslotFile=NtCreateMailslotFile
850 ZwCreateMutant=NtCreateMutant
851 ZwCreateNamedPipeFile=NtCreateNamedPipeFile
852 ZwCreatePagingFile=NtCreatePagingFile
853 ZwCreatePort=NtCreatePort
855 ZwCreateProcessEx=NtCreateProcessEx
856 ZwCreateProfile=NtCreateProfile
857 ZwCreateSection=NtCreateSection
858 ZwCreateSemaphore=NtCreateSemaphore
859 ZwCreateSymbolicLinkObject=NtCreateSymbolicLinkObject
861 ZwCreateTimer=NtCreateTimer
863 ZwCreateWaitablePort=NtCreateWaitablePort
864 ZwDebugActiveProcess=NtDebugActiveProcess
865 ZwDebugContinue=NtDebugContinue
866 ZwDelayExecution=NtDelayExecution
867 ZwDeleteAtom=NtDeleteAtom
868 ZwDeleteBootEntry=NtDeleteBootEntry
869 ZwDeleteFile=NtDeleteFile
870 ZwDeleteKey=NtDeleteKey
871 ZwDeleteObjectAuditAlarm
872 ZwDeleteValueKey=NtDeleteValueKey
873 ZwDeviceIoControlFile=NtDeviceIoControlFile
874 ZwDisplayString=NtDisplayString
875 ZwDuplicateObject=NtDuplicateObject
876 ZwDuplicateToken=NtDuplicateToken
877 ZwEnumerateBootEntries
878 ZwEnumerateKey=NtEnumerateKey
879 ZwEnumerateSystemEnvironmentValuesEx=NtEnumerateSystemEnvironmentValuesEx
880 ZwEnumerateValueKey=NtEnumerateValueKey
881 ZwExtendSection=NtExtendSection
882 ZwFilterToken=NtFilterToken
883 ZwFindAtom=NtFindAtom
884 ZwFlushBuffersFile=NtFlushBuffersFile
885 ZwFlushInstructionCache=NtFlushInstructionCache
886 ZwFlushKey=NtFlushKey
887 ZwFlushVirtualMemory=NtFlushVirtualMemory
889 ZwFreeUserPhysicalPages
890 ZwFreeVirtualMemory=NtFreeVirtualMemory
891 ZwFsControlFile=NtFsControlFile
892 ZwGetContextThread=NtGetContextThread
893 ZwGetCurrentProcessorNumber
894 ZwGetDevicePowerState
896 ZwGetWriteWatch=NtGetWriteWatch
897 ZwImpersonateAnonymousToken
898 ZwImpersonateClientOfPort=NtImpersonateClientOfPort
899 ZwImpersonateThread=NtImpersonateThread
901 ZwInitiatePowerAction=NtInitiatePowerAction
902 ZwIsProcessInJob=NtIsProcessInJob
903 ZwIsSystemResumeAutomatic
904 ZwListenPort=NtListenPort
905 ZwLoadDriver=NtLoadDriver
906 ZwLoadKey2=NtLoadKey2
908 ZwLockFile=NtLockFile
909 ZwLockProductActivationKeys=NtLockProductActivationKeys
910 ZwLockRegistryKey=NtLockRegistryKey
911 ZwLockVirtualMemory=NtLockVirtualMemory
912 ZwMakePermanentObject=NtMakePermanentObject
913 ZwMakeTemporaryObject=NtMakeTemporaryObject
914 ZwMapUserPhysicalPages
915 ZwMapUserPhysicalPagesScatter
916 ZwMapViewOfSection=NtMapViewOfSection
917 ZwModifyBootEntry=NtModifyBootEntry
918 ZwNotifyChangeDirectoryFile=NtNotifyChangeDirectoryFile
919 ZwNotifyChangeKey=NtNotifyChangeKey
920 ZwNotifyChangeMultipleKeys=NtNotifyChangeMultipleKeys
921 ZwOpenDirectoryObject=NtOpenDirectoryObject
922 ZwOpenEvent=NtOpenEvent
923 ZwOpenEventPair=NtOpenEventPair
924 ZwOpenFile=NtOpenFile
925 ZwOpenIoCompletion=NtOpenIoCompletion
926 ZwOpenJobObject=NtOpenJobObject
928 ZwOpenKeyedEvent=NtOpenKeyedEvent
929 ZwOpenMutant=NtOpenMutant
930 ZwOpenObjectAuditAlarm
931 ZwOpenProcess=NtOpenProcess
932 ZwOpenProcessToken=NtOpenProcessToken
933 ZwOpenProcessTokenEx=NtOpenProcessTokenEx
934 ZwOpenSection=NtOpenSection
935 ZwOpenSemaphore=NtOpenSemaphore
936 ZwOpenSymbolicLinkObject=NtOpenSymbolicLinkObject
937 ZwOpenThread=NtOpenThread
938 ZwOpenThreadToken=NtOpenThreadToken
939 ZwOpenThreadTokenEx=NtOpenThreadTokenEx
940 ZwOpenTimer=NtOpenTimer
942 ZwPowerInformation=NtPowerInformation
943 ZwPrivilegeCheck=NtPrivilegeCheck
944 ZwPrivilegeObjectAuditAlarm
945 ZwPrivilegedServiceAuditAlarm
946 ZwProtectVirtualMemory=NtProtectVirtualMemory
947 ZwPulseEvent=NtPulseEvent
948 ZwQueryAttributesFile=NtQueryAttributesFile
949 ZwQueryBootEntryOrder=NtQueryBootEntryOrder
950 ZwQueryBootOptions=NtQueryBootOptions
951 ZwQueryDebugFilterState=NtQueryDebugFilterState
952 ZwQueryDefaultLocale=NtQueryDefaultLocale
953 ZwQueryDefaultUILanguage=NtQueryDefaultUILanguage
954 ZwQueryDirectoryFile=NtQueryDirectoryFile
955 ZwQueryDirectoryObject=NtQueryDirectoryObject
956 ZwQueryEaFile=NtQueryEaFile
957 ZwQueryEvent=NtQueryEvent
958 ZwQueryFullAttributesFile=NtQueryFullAttributesFile
959 ZwQueryInformationAtom=NtQueryInformationAtom
960 ZwQueryInformationFile=NtQueryInformationFile
961 ZwQueryInformationJobObject=NtQueryInformationJobObject
962 ZwQueryInformationPort=NtQueryInformationPort
963 ZwQueryInformationProcess=NtQueryInformationProcess
964 ZwQueryInformationThread=NtQueryInformationThread
965 ZwQueryInformationToken=NtQueryInformationToken
966 ZwQueryInstallUILanguage=NtQueryInstallUILanguage
967 ZwQueryIntervalProfile=NtQueryIntervalProfile
968 ZwQueryIoCompletion=NtQueryIoCompletion
969 ZwQueryKey=NtQueryKey
970 ZwQueryMultipleValueKey=NtQueryMultipleValueKey
971 ZwQueryMutant=NtQueryMutant
972 ZwQueryObject=NtQueryObject
973 ZwQueryOpenSubKeys=NtQueryOpenSubKeys
974 ZwQueryPerformanceCounter=NtQueryPerformanceCounter
975 ZwQueryPortInformationProcess=NtQueryPortInformationProcess
976 ZwQueryQuotaInformationFile=NtQueryQuotaInformationFile
977 ZwQuerySection=NtQuerySection
978 ZwQuerySecurityObject=NtQuerySecurityObject
979 ZwQuerySemaphore=NtQuerySemaphore
980 ZwQuerySymbolicLinkObject=NtQuerySymbolicLinkObject
981 ZwQuerySystemEnvironmentValue=NtQuerySystemEnvironmentValue
982 ZwQuerySystemEnvironmentValueEx=NtQuerySystemEnvironmentValueEx
983 ZwQuerySystemInformation=NtQuerySystemInformation
984 ZwQuerySystemTime=NtQuerySystemTime
985 ZwQueryTimer=NtQueryTimer
986 ZwQueryTimerResolution=NtQueryTimerResolution
987 ZwQueryValueKey=NtQueryValueKey
988 ZwQueryVirtualMemory=NtQueryVirtualMemory
989 ZwQueryVolumeInformationFile=NtQueryVolumeInformationFile
990 ZwQueueApcThread=NtQueueApcThread
991 ZwRaiseException=NtRaiseException
992 ZwRaiseHardError=NtRaiseHardError
993 ZwReadFile=NtReadFile
994 ZwReadFileScatter=NtReadFileScatter
995 ZwReadRequestData=NtReadRequestData
996 ZwReadVirtualMemory=NtReadVirtualMemory
997 ZwRegisterThreadTerminatePort=NtRegisterThreadTerminatePort
998 ZwReleaseKeyedEvent=NtReleaseKeyedEvent
999 ZwReleaseMutant=NtReleaseMutant
1000 ZwReleaseSemaphore=NtReleaseSemaphore
1001 ZwRemoveIoCompletion=NtRemoveIoCompletion
1002 ZwRemoveProcessDebug=NtRemoveProcessDebug
1003 ZwRenameKey=NtRenameKey
1004 ZwReplaceKey=NtReplaceKey
1005 ZwReplyPort=NtReplyPort
1006 ZwReplyWaitReceivePort=NtReplyWaitReceivePort
1007 ZwReplyWaitReceivePortEx
1008 ZwReplyWaitReplyPort
1009 ZwRequestDeviceWakeup
1011 ZwRequestWaitReplyPort
1012 ZwRequestWakeupLatency
1025 ZwSetDebugFilterState
1026 ZwSetDefaultHardErrorPort
1028 ZwSetDefaultUILanguage
1031 ZwSetEventBoostPriority
1033 ZwSetHighWaitLowEventPair
1034 ZwSetInformationDebugObject
1035 ZwSetInformationFile
1036 ZwSetInformationJobObject
1038 ZwSetInformationObject
1039 ZwSetInformationProcess
1040 ZwSetInformationThread
1041 ZwSetInformationToken
1042 ZwSetIntervalProfile
1046 ZwSetLowWaitHighEventPair
1047 ZwSetQuotaInformationFile
1049 ZwSetSystemEnvironmentValue
1050 ZwSetSystemEnvironmentValueEx
1051 ZwSetSystemInformation
1052 ZwSetSystemPowerState
1054 ZwSetThreadExecutionState
1056 ZwSetTimerResolution
1059 ZwSetVolumeInformationFile
1061 ZwSignalAndWaitForSingleObject
1066 ZwSystemDebugControl
1067 ZwTerminateJobObject
1077 ZwUnlockVirtualMemory
1078 ZwUnmapViewOfSection
1082 ZwWaitForMultipleObjects
1083 ZwWaitForSingleObject
1089 ZwWriteVirtualMemory
1204 vDbgPrintExWithPrefix