CcCanIWrite CcCopyRead CcCopyWrite CcDeferWrite CcFastCopyRead CcFastCopyWrite CcFastMdlReadWait CcFastReadNotPossible CcFastReadWait CcFlushCache CcGetDirtyPages CcGetFileObjectFromBcb CcGetFileObjectFromSectionPtrs CcGetFlushedValidData CcGetLsnForFileObject CcInitializeCacheMap CcIsThereDirtyData CcMapData CcMdlRead CcMdlReadComplete CcMdlWriteAbort CcMdlWriteComplete CcPinMappedData CcPinRead CcPrepareMdlWrite CcPreparePinWrite CcPurgeCacheSection CcRemapBcb CcRepinBcb CcScheduleReadAhead CcSetAdditionalCacheAttributes CcSetBcbOwnerPointer CcSetDirtyPageThreshold CcSetDirtyPinnedData CcSetFileSizes CcSetLogHandleForFile CcSetReadAheadGranularity CcUninitializeCacheMap CcUnpinData CcUnpinDataForThread CcUnpinRepinnedBcb CcWaitForCurrentLazyWriterActivity CcZeroData CmRegisterCallback CmUnRegisterCallback DbgBreakPoint DbgBreakPointWithStatus DbgCommandString DbgLoadImageSymbols DbgPrint DbgPrintEx DbgPrintReturnControlC DbgPrompt DbgQueryDebugFilterState DbgSetDebugFilterState ExAcquireFastMutexUnsafe ExAcquireResourceExclusiveLite ExAcquireResourceSharedLite ExAcquireRundownProtection ExAcquireRundownProtectionCacheAware ExAcquireRundownProtectionCacheAwareEx ExAcquireRundownProtectionEx ExAcquireSharedStarveExclusive ExAcquireSharedWaitForExclusive ExAllocateCacheAwareRundownProtection ExAllocateFromPagedLookasideList ExAllocatePool ExAllocatePoolWithQuota ExAllocatePoolWithQuotaTag ExAllocatePoolWithTag ExAllocatePoolWithTagPriority ExConvertExclusiveToSharedLite ExCreateCallback ExDeleteNPagedLookasideList ExDeletePagedLookasideList ExDeleteResourceLite ExDesktopObjectType ExDisableResourceBoostLite ExEnterCriticalRegionAndAcquireFastMutexUnsafe ExEnterCriticalRegionAndAcquireResourceExclusive ExEnterCriticalRegionAndAcquireResourceShared ExEnterCriticalRegionAndAcquireSharedWaitForExclusive ExEnumHandleTable ExEventObjectType ExExtendZone ExFreeCacheAwareRundownProtection ExFreePool ExFreePoolWithTag ExFreeToPagedLookasideList ExGetCurrentProcessorCounts ExGetCurrentProcessorCpuUsage ExGetExclusiveWaiterCount ExGetPreviousMode ExGetSharedWaiterCount ExInitializeNPagedLookasideList ExInitializePagedLookasideList ExInitializeResourceLite ExInitializeRundownProtection ExInitializeRundownProtectionCacheAware ExInitializeZone ExInterlockedAddLargeInteger ExInterlockedAddLargeStatistic ExInterlockedAddUlong ExInterlockedCompareExchange64 ExInterlockedDecrementLong ExInterlockedExchangeUlong ExInterlockedExtendZone ExInterlockedFlushSList ExInterlockedIncrementLong ExInterlockedInsertHeadList ExInterlockedInsertTailList ExInterlockedPopEntryList ExInterlockedPopEntrySList ExInterlockedPushEntryList ExInterlockedPushEntrySList ExInterlockedRemoveHeadList ExIsProcessorFeaturePresent ExIsResourceAcquiredExclusiveLite ExIsResourceAcquiredSharedLite ExLocalTimeToSystemTime ExNotifyCallback ExQueryPoolBlockSize ExQueueWorkItem ExRaiseAccessViolation ExRaiseDatatypeMisalignment ExRaiseException ExRaiseHardError ExRaiseStatus ExReInitializeRundownProtection ExReInitializeRundownProtectionCacheAware ExRegisterCallback ExReinitializeResourceLite ExReleaseFastMutexUnsafe ExReleaseFastMutexUnsafeAndLeaveCriticalRegion ExReleaseResourceAndLeaveCriticalRegion ExReleaseResourceForThreadLite ExReleaseResourceLite ExReleaseRundownProtection ExReleaseRundownProtectionCacheAware ExReleaseRundownProtectionCacheAwareEx ExReleaseRundownProtectionEx ExRundownCompleted ExRundownCompletedCacheAware ExSemaphoreObjectType ExSetResourceOwnerPointer ExSetTimerResolution ExSizeOfRundownProtectionCacheAware ExSystemExceptionFilter ExSystemTimeToLocalTime ExUnregisterCallback ExUuidCreate ExVerifySuite ExWaitForRundownProtectionRelease ExWaitForRundownProtectionReleaseCacheAware ExWindowStationObjectType ExfAcquirePushLockExclusive ExfAcquirePushLockShared ExfInterlockedAddUlong ExfInterlockedCompareExchange64 ExfInterlockedInsertHeadList ExfInterlockedInsertTailList ExfInterlockedPopEntryList ExfInterlockedPushEntryList ExfInterlockedRemoveHeadList ExfReleasePushLock ExfReleasePushLockExclusive ExfReleasePushLockShared ExfTryToWakePushLock ExfUnblockPushLock Exfi386InterlockedDecrementLong Exfi386InterlockedExchangeUlong Exfi386InterlockedIncrementLong Exi386InterlockedDecrementLong Exi386InterlockedExchangeUlong Exi386InterlockedIncrementLong ExiAcquireFastMutex ExiReleaseFastMutex ExiTryToAcquireFastMutex FsRtlAcquireFileExclusive FsRtlAddBaseMcbEntry FsRtlAddLargeMcbEntry FsRtlAddMcbEntry FsRtlAddToTunnelCache FsRtlAllocateFileLock FsRtlAllocatePool FsRtlAllocatePoolWithQuota FsRtlAllocatePoolWithQuotaTag FsRtlAllocatePoolWithTag FsRtlAllocateResource FsRtlAreNamesEqual FsRtlBalanceReads FsRtlCheckLockForReadAccess FsRtlCheckLockForWriteAccess FsRtlCheckOplock FsRtlCopyRead FsRtlCopyWrite FsRtlCreateSectionForDataScan FsRtlCurrentBatchOplock FsRtlDeleteKeyFromTunnelCache FsRtlDeleteTunnelCache FsRtlDeregisterUncProvider FsRtlDissectDbcs FsRtlDissectName FsRtlDoesDbcsContainWildCards FsRtlDoesNameContainWildCards FsRtlFastCheckLockForRead FsRtlFastCheckLockForWrite FsRtlFastUnlockAll FsRtlFastUnlockAllByKey FsRtlFastUnlockSingle FsRtlFindInTunnelCache FsRtlFreeFileLock FsRtlGetFileSize FsRtlGetNextBaseMcbEntry FsRtlGetNextFileLock FsRtlGetNextLargeMcbEntry FsRtlGetNextMcbEntry FsRtlIncrementCcFastReadNoWait FsRtlIncrementCcFastReadNotPossible FsRtlIncrementCcFastReadResourceMiss FsRtlIncrementCcFastReadWait FsRtlInitializeBaseMcb FsRtlInitializeFileLock FsRtlInitializeLargeMcb FsRtlInitializeMcb FsRtlInitializeOplock FsRtlInitializeTunnelCache FsRtlInsertPerFileObjectContext FsRtlInsertPerStreamContext FsRtlIsDbcsInExpression FsRtlIsFatDbcsLegal FsRtlIsHpfsDbcsLegal FsRtlIsNameInExpression FsRtlIsNtstatusExpected FsRtlIsPagingFile FsRtlIsTotalDeviceFailure FsRtlLegalAnsiCharacterArray FsRtlLookupBaseMcbEntry FsRtlLookupLargeMcbEntry FsRtlLookupLastBaseMcbEntry FsRtlLookupLastBaseMcbEntryAndIndex FsRtlLookupLastLargeMcbEntry FsRtlLookupLastLargeMcbEntryAndIndex FsRtlLookupLastMcbEntry FsRtlLookupMcbEntry FsRtlLookupPerFileObjectContext FsRtlLookupPerStreamContextInternal FsRtlMdlRead FsRtlMdlReadComplete FsRtlMdlReadCompleteDev FsRtlMdlReadDev FsRtlMdlWriteComplete FsRtlMdlWriteCompleteDev FsRtlNormalizeNtstatus FsRtlNotifyChangeDirectory FsRtlNotifyCleanup FsRtlNotifyFilterChangeDirectory FsRtlNotifyFilterReportChange FsRtlNotifyFullChangeDirectory FsRtlNotifyFullReportChange FsRtlNotifyInitializeSync FsRtlNotifyReportChange FsRtlNotifyUninitializeSync FsRtlNotifyVolumeEvent FsRtlNumberOfRunsInBaseMcb FsRtlNumberOfRunsInLargeMcb FsRtlNumberOfRunsInMcb FsRtlOplockFsctrl FsRtlOplockIsFastIoPossible FsRtlPostPagingFileStackOverflow FsRtlPostStackOverflow FsRtlPrepareMdlWrite FsRtlPrepareMdlWriteDev FsRtlPrivateLock FsRtlProcessFileLock FsRtlRegisterFileSystemFilterCallbacks FsRtlRegisterUncProvider FsRtlReleaseFile FsRtlRemoveBaseMcbEntry FsRtlRemoveLargeMcbEntry FsRtlRemoveMcbEntry FsRtlRemovePerFileObjectContext FsRtlRemovePerStreamContext FsRtlResetBaseMcb FsRtlResetLargeMcb FsRtlSplitBaseMcb FsRtlSplitLargeMcb FsRtlSyncVolumes FsRtlTeardownPerStreamContexts FsRtlTruncateBaseMcb FsRtlTruncateLargeMcb FsRtlTruncateMcb FsRtlUninitializeBaseMcb FsRtlUninitializeFileLock FsRtlUninitializeLargeMcb FsRtlUninitializeMcb FsRtlUninitializeOplock HalDispatchTable HalExamineMBR HalPrivateDispatchTable HeadlessDispatch InbvAcquireDisplayOwnership InbvCheckDisplayOwnership InbvDisplayString InbvEnableBootDriver InbvEnableDisplayString InbvInstallDisplayStringFilter InbvIsBootDriverInstalled InbvNotifyDisplayOwnershipLost InbvResetDisplay InbvSetScrollRegion InbvSetTextColor InbvSolidColorFill InitSafeBootMode InterlockedCompareExchange InterlockedDecrement InterlockedExchange InterlockedExchangeAdd InterlockedIncrement InterlockedPopEntrySList InterlockedPushEntrySList IoAcquireCancelSpinLock IoAcquireRemoveLockEx IoAcquireVpbSpinLock IoAdapterObjectType IoAllocateAdapterChannel IoAllocateController IoAllocateDriverObjectExtension IoAllocateErrorLogEntry IoAllocateIrp IoAllocateMdl IoAllocateWorkItem IoAssignDriveLetters IoAssignResources IoAttachDevice IoAttachDeviceByPointer IoAttachDeviceToDeviceStack IoAttachDeviceToDeviceStackSafe IoBuildAsynchronousFsdRequest IoBuildDeviceIoControlRequest IoBuildPartialMdl IoBuildSynchronousFsdRequest IoCallDriver IoCancelFileOpen IoCancelIrp IoCheckDesiredAccess IoCheckEaBufferValidity IoCheckFunctionAccess IoCheckQuerySetFileInformation IoCheckQuerySetVolumeInformation IoCheckQuotaBufferValidity IoCheckShareAccess IoCompleteRequest IoConnectInterrupt IoCreateController IoCreateDevice IoCreateDisk IoCreateDriver IoCreateFile IoCreateFileSpecifyDeviceObjectHint IoCreateNotificationEvent IoCreateStreamFileObject IoCreateStreamFileObjectEx IoCreateStreamFileObjectLite IoCreateSymbolicLink IoCreateSynchronizationEvent IoCreateUnprotectedSymbolicLink IoCsqInitialize IoCsqInitializeEx IoCsqInsertIrp IoCsqInsertIrpEx IoCsqRemoveIrp IoCsqRemoveNextIrp IoDeleteController IoDeleteDevice IoDeleteDriver IoDeleteSymbolicLink IoDetachDevice IoDeviceHandlerObjectSize IoDeviceHandlerObjectType IoDeviceObjectType IoDisconnectInterrupt IoDriverObjectType IoEnqueueIrp IoEnumerateDeviceObjectList IoEnumerateRegisteredFiltersList IoFastQueryNetworkAttributes IoFileObjectType IoForwardAndCatchIrp IoForwardIrpSynchronously IoFreeController IoFreeErrorLogEntry IoFreeIrp IoFreeMdl IoFreeWorkItem IoGetAttachedDevice IoGetAttachedDeviceReference IoGetBaseFileSystemDeviceObject IoGetBootDiskInformation IoGetConfigurationInformation IoGetCurrentProcess IoGetDeviceAttachmentBaseRef IoGetDeviceInterfaceAlias IoGetDeviceInterfaces IoGetDeviceObjectPointer IoGetDeviceProperty IoGetDeviceToVerify IoGetDiskDeviceObject IoGetDmaAdapter IoGetDriverObjectExtension IoGetFileObjectGenericMapping IoGetInitialStack IoGetLowerDeviceObject IoGetPagingIoPriority IoGetRelatedDeviceObject IoGetRequestorProcess IoGetRequestorProcessId IoGetRequestorSessionId IoGetStackLimits IoGetTopLevelIrp IoInitializeIrp IoInitializeRemoveLockEx IoInitializeTimer IoInvalidateDeviceRelations IoInvalidateDeviceState IoIsFileOriginRemote IoIsOperationSynchronous IoIsSystemThread IoIsValidNameGraftingBuffer IoIsWdmVersionAvailable IoMakeAssociatedIrp IoOpenDeviceInterfaceRegistryKey IoOpenDeviceRegistryKey IoPageRead IoPnPDeliverServicePowerNotification IoQueryDeviceDescription IoQueryFileDosDeviceName IoQueryFileInformation IoQueryVolumeInformation IoQueueThreadIrp IoQueueWorkItem IoRaiseHardError IoRaiseInformationalHardError IoReadDiskSignature IoReadOperationCount IoReadPartitionTable IoReadPartitionTableEx IoReadTransferCount IoRegisterBootDriverReinitialization IoRegisterDeviceInterface IoRegisterDriverReinitialization IoRegisterFileSystem IoRegisterFsRegistrationChange IoRegisterLastChanceShutdownNotification IoRegisterPlugPlayNotification IoRegisterShutdownNotification IoReleaseCancelSpinLock IoReleaseRemoveLockAndWaitEx IoReleaseRemoveLockEx IoReleaseVpbSpinLock IoRemoveShareAccess IoReportDetectedDevice IoReportHalResourceUsage IoReportResourceForDetection IoReportResourceUsage IoReportTargetDeviceChange IoReportTargetDeviceChangeAsynchronous IoRequestDeviceEject IoReuseIrp IoSetCompletionRoutineEx IoSetDeviceInterfaceState IoSetDeviceToVerify IoSetFileOrigin IoSetHardErrorOrVerifyDevice IoSetInformation IoSetIoCompletion IoSetPartitionInformation IoSetPartitionInformationEx IoSetShareAccess IoSetStartIoAttributes IoSetSystemPartition IoSetThreadHardErrorMode IoSetTopLevelIrp IoStartNextPacket IoStartNextPacketByKey IoStartPacket IoStartTimer IoStatisticsLock IoStopTimer IoSynchronousInvalidateDeviceRelations IoSynchronousPageWrite IoThreadToProcess IoTranslateBusAddress IoUnregisterFileSystem IoUnregisterFsRegistrationChange IoUnregisterPlugPlayNotification IoUnregisterShutdownNotification IoUpdateShareAccess IoValidateDeviceIoControlAccess IoVerifyPartitionTable IoVerifyVolume IoVolumeDeviceToDosName IoWMIAllocateInstanceIds IoWMIDeviceObjectToInstanceName IoWMIExecuteMethod IoWMIHandleToInstanceName IoWMIOpenBlock IoWMIQueryAllData IoWMIQueryAllDataMultiple IoWMIQuerySingleInstance IoWMIQuerySingleInstanceMultiple IoWMIRegistrationControl IoWMISetNotificationCallback IoWMISetSingleInstance IoWMISetSingleItem IoWMISuggestInstanceName IoWMIWriteEvent IoWriteErrorLogEntry IoWriteOperationCount IoWritePartitionTable IoWritePartitionTableEx IoWriteTransferCount IofCallDriver IofCompleteRequest KdChangeOption KdDebuggerEnabled KdDebuggerNotPresent KdDisableDebugger KdEnableDebugger KdEnteredDebugger KdPollBreakIn KdPowerTransition KdRefreshDebuggerNotPresent KdSystemDebugControl Ke386CallBios Ke386IoSetAccessProcess Ke386QueryIoAccessMap Ke386SetIoAccessMap KeAcquireGuardedMutex KeAcquireGuardedMutexUnsafe KeAcquireInStackQueuedSpinLockAtDpcLevel KeAcquireInStackQueuedSpinLockForDpc KeAcquireInterruptSpinLock KeAcquireSpinLockAtDpcLevel KeAcquireSpinLockForDpc KeAddSystemServiceTable KeAreAllApcsDisabled KeAreApcsDisabled KeAttachProcess KeBugCheck KeBugCheckEx KeCancelTimer KeCapturePersistentThreadState KeClearEvent KeConnectInterrupt KeDelayExecutionThread KeDeregisterBugCheckCallback KeDeregisterBugCheckReasonCallback KeDeregisterNmiCallback KeDetachProcess KeDisconnectInterrupt KeEnterCriticalRegion KeEnterGuardedRegion KeEnterKernelDebugger KeFindConfigurationEntry KeFindConfigurationNextEntry KeFlushEntireTb KeFlushQueuedDpcs KeGenericCallDpc KeGetCurrentThread KeGetPreviousMode KeGetRecommendedSharedDataAlignment KeI386AbiosCall KeI386AllocateGdtSelectors KeI386Call16BitCStyleFunction KeI386Call16BitFunction KeI386FlatToGdtSelector KeI386GetLid KeI386MachineType KeI386ReleaseGdtSelectors KeI386ReleaseLid KeI386SetGdtSelector KeInitializeApc KeInitializeCrashDumpHeader KeInitializeDeviceQueue KeInitializeDpc KeInitializeEvent KeInitializeGuardedMutex KeInitializeInterrupt KeInitializeMutant KeInitializeMutex KeInitializeQueue KeInitializeSemaphore KeInitializeSpinLock KeInitializeThreadedDpc KeInitializeTimer KeInitializeTimerEx KeInsertByKeyDeviceQueue KeInsertDeviceQueue KeInsertHeadQueue KeInsertQueue KeInsertQueueApc KeInsertQueueDpc KeInvalidateAllCaches KeIpiGenericCall KeIsAttachedProcess KeIsExecutingDpc KeIsWaitListEmpty KeLeaveCriticalRegion KeLeaveGuardedRegion KeLoaderBlock KeNumberProcessors KeProfileInterrupt KeProfileInterruptWithSource KePulseEvent KeQueryActiveProcessors KeQueryInterruptTime KeQueryPriorityThread KeQueryRuntimeThread KeQuerySystemTime KeQueryTickCount KeQueryTimeIncrement KeRaiseUserException KeReadStateEvent KeReadStateMutant KeReadStateMutex KeReadStateQueue KeReadStateSemaphore KeReadStateTimer KeRegisterBugCheckCallback KeRegisterBugCheckReasonCallback KeRegisterNmiCallback KeReleaseGuardedMutex KeReleaseGuardedMutexUnsafe KeReleaseInStackQueuedSpinLockForDpc KeReleaseInStackQueuedSpinLockFromDpcLevel KeReleaseInterruptSpinLock KeReleaseMutant KeReleaseMutex KeReleaseSemaphore KeReleaseSpinLockForDpc KeReleaseSpinLockFromDpcLevel KeRemoveByKeyDeviceQueue KeRemoveByKeyDeviceQueueIfBusy KeRemoveDeviceQueue KeRemoveEntryDeviceQueue KeRemoveQueue KeRemoveQueueDpc KeRemoveSystemServiceTable KeResetEvent KeRestoreFloatingPointState KeRevertToUserAffinityThread KeRundownQueue KeSaveFloatingPointState KeSaveStateForHibernate KeServiceDescriptorTable KeSetAffinityThread KeSetBasePriorityThread KeSetDmaIoCoherency KeSetEvent KeSetEventBoostPriority KeSetIdealProcessorThread KeSetImportanceDpc KeSetKernelStackSwapEnable KeSetPriorityThread KeSetProfileIrql KeSetSystemAffinityThread KeSetTargetProcessorDpc KeSetTimeIncrement KeSetTimer KeSetTimerEx KeSignalCallDpcDone KeSignalCallDpcSynchronize KeStackAttachProcess KeSynchronizeExecution KeTerminateThread KeTestSpinLock KeTickCount KeTryToAcquireGuardedMutex KeTryToAcquireSpinLockAtDpcLevel KeUnstackDetachProcess KeUpdateRunTime KeUpdateSystemTime KeUserModeCallback KeWaitForMultipleObjects KeWaitForMutexObject KeWaitForSingleObject KefAcquireSpinLockAtDpcLevel KefReleaseSpinLockFromDpcLevel Kei386EoiHelper KiAcquireSpinLock KiBugCheckData KiCheckForKernelApcDelivery KiCoprocessorError KiDeliverApc KiDispatchInterrupt KiEnableTimerWatchdog KiIpiServiceRoutine KiReleaseSpinLock KiUnexpectedInterrupt Kii386SpinOnSpinLock LdrAccessResource LdrEnumResources LdrFindResourceDirectory_U LdrFindResource_U LpcPortObjectType LpcRequestPort LpcRequestWaitReplyPort LsaCallAuthenticationPackage LsaDeregisterLogonProcess LsaFreeReturnBuffer LsaLogonUser LsaLookupAuthenticationPackage LsaRegisterLogonProcess Mm64BitPhysicalAddress MmAddPhysicalMemory MmAddVerifierThunks MmAdjustWorkingSetSize MmAdvanceMdl MmAllocateContiguousMemory MmAllocateContiguousMemorySpecifyCache MmAllocateMappingAddress MmAllocateNonCachedMemory MmAllocatePagesForMdl MmAllocatePagesForMdlEx MmBuildMdlForNonPagedPool MmCanFileBeTruncated MmCommitSessionMappedView MmCreateMdl MmCreateMirror MmCreateSection MmDisableModifiedWriteOfSection MmFlushImageSection MmForceSectionClosed MmFreeContiguousMemory MmFreeContiguousMemorySpecifyCache MmFreeMappingAddress MmFreeNonCachedMemory MmFreePagesFromMdl MmGetPhysicalAddress MmGetPhysicalMemoryRanges MmGetSystemRoutineAddress MmGetVirtualForPhysical MmGrowKernelStack MmHighestUserAddress MmIsAddressValid MmIsDriverVerifying MmIsIoSpaceActive MmIsNonPagedSystemAddressValid MmIsRecursiveIoFault MmIsThisAnNtAsSystem MmIsVerifierEnabled MmLockPagableDataSection MmLockPagableImageSection MmLockPagableSectionByHandle MmMapIoSpace MmMapLockedPages MmMapLockedPagesSpecifyCache MmMapLockedPagesWithReservedMapping MmMapMemoryDumpMdl MmMapUserAddressesToPage MmMapVideoDisplay MmMapViewInSessionSpace MmMapViewInSystemSpace MmMapViewOfSection MmMarkPhysicalMemoryAsBad MmMarkPhysicalMemoryAsGood MmPageEntireDriver MmPrefetchPages MmProbeAndLockPages MmProbeAndLockProcessPages MmProbeAndLockSelectedPages MmProtectMdlSystemAddress MmQuerySystemSize MmRemovePhysicalMemory MmResetDriverPaging MmSectionObjectType MmSecureVirtualMemory MmSetAddressRangeModified MmSetBankedSection MmSizeOfMdl MmSystemRangeStart MmTrimAllSystemPagableMemory MmUnlockPagableImageSection MmUnlockPages MmUnmapIoSpace MmUnmapLockedPages MmUnmapReservedMapping MmUnmapVideoDisplay MmUnmapViewInSessionSpace MmUnmapViewInSystemSpace MmUnmapViewOfSection MmUnsecureVirtualMemory MmUserProbeAddress NlsAnsiCodePage NlsLeadByteInfo NlsMbCodePageTag NlsMbOemCodePageTag NlsOemCodePage NlsOemLeadByteInfo NtAddAtom NtAdjustPrivilegesToken NtAllocateLocallyUniqueId NtAllocateUuids NtAllocateVirtualMemory NtBuildNumber NtClose NtConnectPort NtCreateEvent NtCreateFile NtCreateSection NtDeleteAtom NtDeleteFile NtDeviceIoControlFile NtDuplicateObject NtDuplicateToken NtFindAtom NtFreeVirtualMemory NtFsControlFile NtGlobalFlag NtLockFile NtMakePermanentObject NtMapViewOfSection NtNotifyChangeDirectoryFile NtOpenFile NtOpenProcess NtOpenProcessToken NtOpenProcessTokenEx NtOpenThread NtOpenThreadToken NtOpenThreadTokenEx NtQueryDirectoryFile NtQueryEaFile NtQueryInformationAtom NtQueryInformationFile NtQueryInformationProcess NtQueryInformationThread NtQueryInformationToken NtQueryQuotaInformationFile NtQuerySecurityObject NtQuerySystemInformation NtQueryVolumeInformationFile NtReadFile NtRequestPort NtRequestWaitReplyPort NtSetEaFile NtSetEvent NtSetInformationFile NtSetInformationProcess NtSetInformationThread NtSetQuotaInformationFile NtSetSecurityObject NtSetVolumeInformationFile NtShutdownSystem NtTraceEvent NtUnlockFile NtVdmControl NtWaitForSingleObject NtWriteFile ObAssignSecurity ObCheckCreateObjectAccess ObCheckObjectAccess ObCloseHandle ObCreateObject ObCreateObjectType ObDeleteCapturedInsertInfo ObDereferenceObject ObDereferenceSecurityDescriptor ObFindHandleForObject ObGetObjectSecurity ObInsertObject ObLogSecurityDescriptor ObMakeTemporaryObject ObOpenObjectByName ObOpenObjectByPointer ObQueryNameString ObQueryObjectAuditingByHandle ObReferenceObjectByHandle ObReferenceObjectByName ObReferenceObjectByPointer ObReferenceSecurityDescriptor ObReleaseObjectSecurity ObSetHandleAttributes ObSetSecurityDescriptorInfo ObSetSecurityObjectByPointer ObfDereferenceObject ObfReferenceObject PfxFindPrefix PfxInitialize PfxInsertPrefix PfxRemovePrefix PoCallDriver PoCancelDeviceNotify PoQueueShutdownWorkItem PoRegisterDeviceForIdleDetection PoRegisterDeviceNotify PoRegisterSystemState PoRequestPowerIrp PoRequestShutdownEvent PoSetHiberRange PoSetPowerState PoSetSystemState PoShutdownBugCheck PoStartNextPowerIrp PoUnregisterSystemState ProbeForRead ProbeForWrite PsAssignImpersonationToken PsChargePoolQuota PsChargeProcessNonPagedPoolQuota PsChargeProcessPagedPoolQuota PsChargeProcessPoolQuota PsCreateSystemProcess PsCreateSystemThread PsDereferenceImpersonationToken PsDereferencePrimaryToken PsDisableImpersonation PsEstablishWin32Callouts PsGetContextThread PsGetCurrentProcess PsGetCurrentProcessId PsGetCurrentProcessSessionId PsGetCurrentProcessWin32Process PsGetCurrentThread PsGetCurrentThreadId PsGetCurrentThreadPreviousMode PsGetCurrentThreadProcess PsGetCurrentThreadProcessId PsGetCurrentThreadStackBase PsGetCurrentThreadStackLimit PsGetCurrentThreadTeb PsGetCurrentThreadWin32Thread PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion PsGetJobLock PsGetJobSessionId PsGetJobUIRestrictionsClass PsGetProcessCreateTimeQuadPart PsGetProcessDebugPort PsGetProcessExitProcessCalled PsGetProcessExitStatus PsGetProcessExitTime PsGetProcessId PsGetProcessImageFileName PsGetProcessInheritedFromUniqueProcessId PsGetProcessJob PsGetProcessPeb PsGetProcessPriorityClass PsGetProcessSectionBaseAddress PsGetProcessSecurityPort PsGetProcessSessionId PsGetProcessSessionIdEx PsGetProcessWin32Process PsGetProcessWin32WindowStation PsGetThreadFreezeCount PsGetThreadHardErrorsAreDisabled PsGetThreadId PsGetThreadProcess PsGetThreadProcessId PsGetThreadSessionId PsGetThreadTeb PsGetThreadWin32Thread PsGetVersion PsImpersonateClient PsInitialSystemProcess PsIsProcessBeingDebugged PsIsSystemProcess PsIsSystemThread PsIsThreadImpersonating PsIsThreadTerminating PsJobType PsLookupProcessByProcessId PsLookupProcessThreadByCid PsLookupThreadByThreadId PsProcessType PsReferenceImpersonationToken PsReferencePrimaryToken PsRemoveCreateThreadNotifyRoutine PsRemoveLoadImageNotifyRoutine PsRestoreImpersonation PsReturnPoolQuota PsReturnProcessNonPagedPoolQuota PsReturnProcessPagedPoolQuota PsRevertThreadToSelf PsRevertToSelf PsSetContextThread PsSetCreateProcessNotifyRoutine PsSetCreateThreadNotifyRoutine PsSetJobUIRestrictionsClass PsSetLegoNotifyRoutine PsSetLoadImageNotifyRoutine PsSetProcessPriorityByClass PsSetProcessPriorityClass PsSetProcessSecurityPort RtlPrefetchMemoryNonTemporal RtlUlongByteSwap RtlUlonglongByteSwap RtlUshortByteSwap WmiGetClock WmiTraceFastEvent