| ; | 
 | ; Definition file of ntoskrnl.exe | 
 | ; Automatic generated by gendef | 
 | ; written by Kai Tietz 2008 | 
 | ; | 
 | LIBRARY "ntoskrnl.exe" | 
 | EXPORTS | 
 | AlpcGetHeaderSize | 
 | AlpcGetMessageAttribute | 
 | AlpcInitializeMessageAttribute | 
 | CcCanIWrite | 
 | CcCoherencyFlushAndPurgeCache | 
 | CcCopyRead | 
 | CcCopyWrite | 
 | CcCopyWriteWontFlush | 
 | CcDeferWrite | 
 | CcFastCopyRead | 
 | CcFastCopyWrite | 
 | CcFastMdlReadWait DATA | 
 | CcFastReadNotPossible DATA | 
 | CcFastReadWait DATA | 
 | CcFlushCache | 
 | CcGetDirtyPages | 
 | CcGetFileObjectFromBcb | 
 | CcGetFileObjectFromSectionPtrs | 
 | CcGetFileObjectFromSectionPtrsRef | 
 | CcGetFlushedValidData | 
 | CcGetLsnForFileObject | 
 | CcInitializeCacheMap | 
 | CcIsThereDirtyData | 
 | CcIsThereDirtyDataEx | 
 | CcMapData | 
 | CcMdlRead | 
 | CcMdlReadComplete | 
 | CcMdlWriteAbort | 
 | CcMdlWriteComplete | 
 | CcPinMappedData | 
 | CcPinRead | 
 | CcPrepareMdlWrite | 
 | CcPreparePinWrite | 
 | CcPurgeCacheSection | 
 | CcRemapBcb | 
 | CcRepinBcb | 
 | CcScheduleReadAhead | 
 | CcSetAdditionalCacheAttributes | 
 | CcSetBcbOwnerPointer | 
 | CcSetDirtyPageThreshold | 
 | CcSetDirtyPinnedData | 
 | CcSetFileSizes | 
 | CcSetFileSizesEx | 
 | CcSetLogHandleForFile | 
 | CcSetParallelFlushFile | 
 | CcSetReadAheadGranularity | 
 | CcTestControl | 
 | CcUninitializeCacheMap | 
 | CcUnpinData | 
 | CcUnpinDataForThread | 
 | CcUnpinRepinnedBcb | 
 | CcWaitForCurrentLazyWriterActivity | 
 | CcZeroData | 
 | CmCallbackGetKeyObjectID | 
 | CmGetBoundTransaction | 
 | CmGetCallbackVersion | 
 | CmKeyObjectType DATA | 
 | CmRegisterCallback | 
 | CmRegisterCallbackEx | 
 | CmSetCallbackObjectContext | 
 | CmUnRegisterCallback | 
 | DbgBreakPoint | 
 | DbgBreakPointWithStatus | 
 | DbgCommandString | 
 | DbgLoadImageSymbols | 
 | DbgPrint | 
 | DbgPrintEx | 
 | DbgPrintReturnControlC | 
 | DbgPrompt | 
 | DbgQueryDebugFilterState | 
 | DbgSetDebugFilterState | 
 | DbgSetDebugPrintCallback | 
 | DbgkLkmdRegisterCallback | 
 | DbgkLkmdUnregisterCallback | 
 | EmClientQueryRuleState | 
 | EmClientRuleDeregisterNotification | 
 | EmClientRuleEvaluate | 
 | EmClientRuleRegisterNotification | 
 | EmProviderDeregister | 
 | EmProviderDeregisterEntry | 
 | EmProviderRegister | 
 | EmProviderRegisterEntry | 
 | EmpProviderRegister | 
 | EtwActivityIdControl | 
 | EtwEnableTrace | 
 | EtwEventEnabled | 
 | EtwProviderEnabled | 
 | EtwRegister | 
 | EtwRegisterClassicProvider | 
 | EtwSendTraceBuffer | 
 | EtwUnregister | 
 | EtwWrite | 
 | EtwWriteEndScenario | 
 | EtwWriteEx | 
 | EtwWriteStartScenario | 
 | EtwWriteString | 
 | EtwWriteTransfer | 
 | ExAcquireCacheAwarePushLockExclusive | 
 | ExAcquireFastMutex | 
 | ExAcquireFastMutexUnsafe | 
 | ExAcquireResourceExclusiveLite | 
 | ExAcquireResourceSharedLite | 
 | ExAcquireRundownProtection | 
 | ExAcquireRundownProtectionCacheAware | 
 | ExAcquireRundownProtectionCacheAwareEx | 
 | ExAcquireRundownProtectionEx | 
 | ExAcquireSharedStarveExclusive | 
 | ExAcquireSharedWaitForExclusive | 
 | ExAcquireSpinLockExclusive | 
 | ExAcquireSpinLockExclusiveAtDpcLevel | 
 | ExAcquireSpinLockShared | 
 | ExAcquireSpinLockSharedAtDpcLevel | 
 | ExAllocateCacheAwarePushLock | 
 | ExAllocateCacheAwareRundownProtection | 
 | ExAllocateFromPagedLookasideList | 
 | ExAllocatePool | 
 | ExAllocatePoolWithQuota | 
 | ExAllocatePoolWithQuotaTag | 
 | ExAllocatePoolWithTag | 
 | ExAllocatePoolWithTagPriority | 
 | ExConvertExclusiveToSharedLite | 
 | ExCreateCallback | 
 | ExDeleteLookasideListEx | 
 | ExDeleteNPagedLookasideList | 
 | ExDeletePagedLookasideList | 
 | ExDeleteResourceLite | 
 | ExDesktopObjectType DATA | 
 | ExDisableResourceBoostLite | 
 | ExEnterCriticalRegionAndAcquireFastMutexUnsafe | 
 | ExEnterCriticalRegionAndAcquireResourceExclusive | 
 | ExEnterCriticalRegionAndAcquireResourceShared | 
 | ExEnterCriticalRegionAndAcquireSharedWaitForExclusive | 
 | ExEnterPriorityRegionAndAcquireResourceExclusive | 
 | ExEnterPriorityRegionAndAcquireResourceShared | 
 | ExEnumHandleTable | 
 | ExEventObjectType DATA | 
 | ExExtendZone | 
 | ExFetchLicenseData | 
 | ExFlushLookasideListEx | 
 | ExFreeCacheAwarePushLock | 
 | ExFreeCacheAwareRundownProtection | 
 | ExFreePool | 
 | ExFreePoolWithTag | 
 | ExFreeToPagedLookasideList | 
 | ExGetCurrentProcessorCounts | 
 | ExGetCurrentProcessorCpuUsage | 
 | ExGetExclusiveWaiterCount | 
 | ExGetLicenseTamperState | 
 | ExGetPreviousMode | 
 | ExGetSharedWaiterCount | 
 | ExInitializeLookasideListEx | 
 | ExInitializeNPagedLookasideList | 
 | ExInitializePagedLookasideList | 
 | ExInitializePushLock | 
 | ExInitializeResourceLite | 
 | ExInitializeRundownProtection | 
 | ExInitializeRundownProtectionCacheAware | 
 | ExInitializeZone | 
 | ExInterlockedAddLargeInteger | 
 | ExInterlockedAddUlong | 
 | ExInterlockedExtendZone | 
 | ExInterlockedInsertHeadList | 
 | ExInterlockedInsertTailList | 
 | ExInterlockedPopEntryList | 
 | ExInterlockedPushEntryList | 
 | ExInterlockedRemoveHeadList | 
 | ExIsProcessorFeaturePresent | 
 | ExIsResourceAcquiredExclusiveLite | 
 | ExIsResourceAcquiredSharedLite | 
 | ExLocalTimeToSystemTime | 
 | ExNotifyCallback | 
 | ExQueryAttributeInformation | 
 | ExQueryDepthSList | 
 | ExQueryPoolBlockSize | 
 | ExQueueWorkItem | 
 | ExRaiseAccessViolation | 
 | ExRaiseDatatypeMisalignment | 
 | ExRaiseException | 
 | ExRaiseHardError | 
 | ExRaiseStatus | 
 | ExReInitializeRundownProtection | 
 | ExReInitializeRundownProtectionCacheAware | 
 | ExRegisterAttributeInformationCallback | 
 | ExRegisterCallback | 
 | ExRegisterExtension | 
 | ExReinitializeResourceLite | 
 | ExReleaseCacheAwarePushLockExclusive | 
 | ExReleaseFastMutex | 
 | ExReleaseFastMutexUnsafe | 
 | ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | 
 | ExReleaseResourceAndLeaveCriticalRegion | 
 | ExReleaseResourceAndLeavePriorityRegion | 
 | ExReleaseResourceForThreadLite | 
 | ExReleaseResourceLite | 
 | ExReleaseRundownProtection | 
 | ExReleaseRundownProtectionCacheAware | 
 | ExReleaseRundownProtectionCacheAwareEx | 
 | ExReleaseRundownProtectionEx | 
 | ExReleaseSpinLockExclusive | 
 | ExReleaseSpinLockExclusiveFromDpcLevel | 
 | ExReleaseSpinLockShared | 
 | ExReleaseSpinLockSharedFromDpcLevel | 
 | ExRundownCompleted | 
 | ExRundownCompletedCacheAware | 
 | ExSemaphoreObjectType DATA | 
 | ExSetLicenseTamperState | 
 | ExSetResourceOwnerPointer | 
 | ExSetResourceOwnerPointerEx | 
 | ExSetTimerResolution | 
 | ExSizeOfRundownProtectionCacheAware | 
 | ExSystemExceptionFilter | 
 | ExSystemTimeToLocalTime | 
 | ExTryConvertSharedSpinLockExclusive | 
 | ExTryToAcquireFastMutex | 
 | ExUnregisterAttributeInformationCallback | 
 | ExUnregisterCallback | 
 | ExUnregisterExtension | 
 | ExUpdateLicenseData | 
 | ExUuidCreate | 
 | ExVerifySuite | 
 | ExWaitForRundownProtectionRelease | 
 | ExWaitForRundownProtectionReleaseCacheAware | 
 | ExWindowStationObjectType DATA | 
 | ExfAcquirePushLockExclusive | 
 | ExfAcquirePushLockShared | 
 | ExfReleasePushLock | 
 | ExfReleasePushLockExclusive | 
 | ExfReleasePushLockShared | 
 | ExfTryAcquirePushLockShared | 
 | ExfTryToWakePushLock | 
 | ExfUnblockPushLock | 
 | ExpInterlockedFlushSList | 
 | ExpInterlockedPopEntrySList | 
 | ExpInterlockedPushEntrySList | 
 | FirstEntrySList | 
 | FsRtlAcknowledgeEcp | 
 | FsRtlAcquireFileExclusive | 
 | FsRtlAddBaseMcbEntry | 
 | FsRtlAddBaseMcbEntryEx | 
 | FsRtlAddLargeMcbEntry | 
 | FsRtlAddMcbEntry | 
 | FsRtlAddToTunnelCache | 
 | FsRtlAllocateExtraCreateParameter | 
 | FsRtlAllocateExtraCreateParameterFromLookasideList | 
 | FsRtlAllocateExtraCreateParameterList | 
 | FsRtlAllocateFileLock | 
 | FsRtlAllocatePool | 
 | FsRtlAllocatePoolWithQuota | 
 | FsRtlAllocatePoolWithQuotaTag | 
 | FsRtlAllocatePoolWithTag | 
 | FsRtlAllocateResource | 
 | FsRtlAreNamesEqual | 
 | FsRtlAreThereCurrentOrInProgressFileLocks | 
 | FsRtlAreVolumeStartupApplicationsComplete | 
 | FsRtlBalanceReads | 
 | FsRtlCancellableWaitForMultipleObjects | 
 | FsRtlCancellableWaitForSingleObject | 
 | FsRtlChangeBackingFileObject | 
 | FsRtlCheckLockForReadAccess | 
 | FsRtlCheckLockForWriteAccess | 
 | FsRtlCheckOplock | 
 | FsRtlCheckOplockEx | 
 | FsRtlCopyRead | 
 | FsRtlCopyWrite | 
 | FsRtlCreateSectionForDataScan | 
 | FsRtlCurrentBatchOplock | 
 | FsRtlCurrentOplock | 
 | FsRtlCurrentOplockH | 
 | FsRtlDeleteExtraCreateParameterLookasideList | 
 | FsRtlDeleteKeyFromTunnelCache | 
 | FsRtlDeleteTunnelCache | 
 | FsRtlDeregisterUncProvider | 
 | FsRtlDissectDbcs | 
 | FsRtlDissectName | 
 | FsRtlDoesDbcsContainWildCards | 
 | FsRtlDoesNameContainWildCards | 
 | FsRtlFastCheckLockForRead | 
 | FsRtlFastCheckLockForWrite | 
 | FsRtlFastUnlockAll | 
 | FsRtlFastUnlockAllByKey | 
 | FsRtlFastUnlockSingle | 
 | FsRtlFindExtraCreateParameter | 
 | FsRtlFindInTunnelCache | 
 | FsRtlFreeExtraCreateParameter | 
 | FsRtlFreeExtraCreateParameterList | 
 | FsRtlFreeFileLock | 
 | FsRtlGetEcpListFromIrp | 
 | FsRtlGetFileSize | 
 | FsRtlGetNextBaseMcbEntry | 
 | FsRtlGetNextExtraCreateParameter | 
 | FsRtlGetNextFileLock | 
 | FsRtlGetNextLargeMcbEntry | 
 | FsRtlGetNextMcbEntry | 
 | FsRtlGetVirtualDiskNestingLevel | 
 | FsRtlIncrementCcFastMdlReadWait | 
 | FsRtlIncrementCcFastReadNoWait | 
 | FsRtlIncrementCcFastReadNotPossible | 
 | FsRtlIncrementCcFastReadResourceMiss | 
 | FsRtlIncrementCcFastReadWait | 
 | FsRtlInitExtraCreateParameterLookasideList | 
 | FsRtlInitializeBaseMcb | 
 | FsRtlInitializeBaseMcbEx | 
 | FsRtlInitializeExtraCreateParameter | 
 | FsRtlInitializeExtraCreateParameterList | 
 | FsRtlInitializeFileLock | 
 | FsRtlInitializeLargeMcb | 
 | FsRtlInitializeMcb | 
 | FsRtlInitializeOplock | 
 | FsRtlInitializeTunnelCache | 
 | FsRtlInsertExtraCreateParameter | 
 | FsRtlInsertPerFileContext | 
 | FsRtlInsertPerFileObjectContext | 
 | FsRtlInsertPerStreamContext | 
 | FsRtlIsDbcsInExpression | 
 | FsRtlIsEcpAcknowledged | 
 | FsRtlIsEcpFromUserMode | 
 | FsRtlIsFatDbcsLegal | 
 | FsRtlIsHpfsDbcsLegal | 
 | FsRtlIsNameInExpression | 
 | FsRtlIsNtstatusExpected | 
 | FsRtlIsPagingFile | 
 | FsRtlIsTotalDeviceFailure | 
 | FsRtlLegalAnsiCharacterArray DATA | 
 | FsRtlLogCcFlushError | 
 | FsRtlLookupBaseMcbEntry | 
 | FsRtlLookupLargeMcbEntry | 
 | FsRtlLookupLastBaseMcbEntry | 
 | FsRtlLookupLastBaseMcbEntryAndIndex | 
 | FsRtlLookupLastLargeMcbEntry | 
 | FsRtlLookupLastLargeMcbEntryAndIndex | 
 | FsRtlLookupLastMcbEntry | 
 | FsRtlLookupMcbEntry | 
 | FsRtlLookupPerFileContext | 
 | FsRtlLookupPerFileObjectContext | 
 | FsRtlLookupPerStreamContextInternal | 
 | FsRtlMdlRead | 
 | FsRtlMdlReadComplete | 
 | FsRtlMdlReadCompleteDev | 
 | FsRtlMdlReadDev | 
 | FsRtlMdlWriteComplete | 
 | FsRtlMdlWriteCompleteDev | 
 | FsRtlMupGetProviderIdFromName | 
 | FsRtlMupGetProviderInfoFromFileObject | 
 | FsRtlNormalizeNtstatus | 
 | FsRtlNotifyChangeDirectory | 
 | FsRtlNotifyCleanup | 
 | FsRtlNotifyCleanupAll | 
 | FsRtlNotifyFilterChangeDirectory | 
 | FsRtlNotifyFilterReportChange | 
 | FsRtlNotifyFullChangeDirectory | 
 | FsRtlNotifyFullReportChange | 
 | FsRtlNotifyInitializeSync | 
 | FsRtlNotifyReportChange | 
 | FsRtlNotifyUninitializeSync | 
 | FsRtlNotifyVolumeEvent | 
 | FsRtlNotifyVolumeEventEx | 
 | FsRtlNumberOfRunsInBaseMcb | 
 | FsRtlNumberOfRunsInLargeMcb | 
 | FsRtlNumberOfRunsInMcb | 
 | FsRtlOplockBreakH | 
 | FsRtlOplockBreakToNone | 
 | FsRtlOplockBreakToNoneEx | 
 | FsRtlOplockFsctrl | 
 | FsRtlOplockFsctrlEx | 
 | FsRtlOplockIsFastIoPossible | 
 | FsRtlOplockIsSharedRequest | 
 | FsRtlOplockKeysEqual | 
 | FsRtlPostPagingFileStackOverflow | 
 | FsRtlPostStackOverflow | 
 | FsRtlPrepareMdlWrite | 
 | FsRtlPrepareMdlWriteDev | 
 | FsRtlPrivateLock | 
 | FsRtlProcessFileLock | 
 | FsRtlQueryMaximumVirtualDiskNestingLevel | 
 | FsRtlRegisterFileSystemFilterCallbacks | 
 | FsRtlRegisterFltMgrCalls | 
 | FsRtlRegisterMupCalls | 
 | FsRtlRegisterUncProvider | 
 | FsRtlRegisterUncProviderEx | 
 | FsRtlReleaseFile | 
 | FsRtlRemoveBaseMcbEntry | 
 | FsRtlRemoveDotsFromPath | 
 | FsRtlRemoveExtraCreateParameter | 
 | FsRtlRemoveLargeMcbEntry | 
 | FsRtlRemoveMcbEntry | 
 | FsRtlRemovePerFileContext | 
 | FsRtlRemovePerFileObjectContext | 
 | FsRtlRemovePerStreamContext | 
 | FsRtlResetBaseMcb | 
 | FsRtlResetLargeMcb | 
 | FsRtlSetEcpListIntoIrp | 
 | FsRtlSplitBaseMcb | 
 | FsRtlSplitLargeMcb | 
 | FsRtlSyncVolumes | 
 | FsRtlTeardownPerFileContexts | 
 | FsRtlTeardownPerStreamContexts | 
 | FsRtlTruncateBaseMcb | 
 | FsRtlTruncateLargeMcb | 
 | FsRtlTruncateMcb | 
 | FsRtlUninitializeBaseMcb | 
 | FsRtlUninitializeFileLock | 
 | FsRtlUninitializeLargeMcb | 
 | FsRtlUninitializeMcb | 
 | FsRtlUninitializeOplock | 
 | FsRtlValidateReparsePointBuffer | 
 | HalDispatchTable DATA | 
 | HalExamineMBR | 
 | HalPrivateDispatchTable DATA | 
 | HeadlessDispatch | 
 | HvlQueryConnection | 
 | InbvAcquireDisplayOwnership | 
 | InbvCheckDisplayOwnership | 
 | InbvDisplayString | 
 | InbvEnableBootDriver | 
 | InbvEnableDisplayString | 
 | InbvInstallDisplayStringFilter | 
 | InbvIsBootDriverInstalled | 
 | InbvNotifyDisplayOwnershipLost | 
 | InbvResetDisplay | 
 | InbvSetScrollRegion | 
 | InbvSetTextColor | 
 | InbvSolidColorFill | 
 | InitSafeBootMode DATA | 
 | InitializeSListHead | 
 | IoAcquireCancelSpinLock | 
 | IoAcquireRemoveLockEx | 
 | IoAcquireVpbSpinLock | 
 | IoAdapterObjectType DATA | 
 | IoAdjustStackSizeForRedirection | 
 | IoAllocateAdapterChannel | 
 | IoAllocateController | 
 | IoAllocateDriverObjectExtension | 
 | IoAllocateErrorLogEntry | 
 | IoAllocateIrp | 
 | IoAllocateMdl | 
 | IoAllocateMiniCompletionPacket | 
 | IoAllocateSfioStreamIdentifier | 
 | IoAllocateWorkItem | 
 | IoAssignDriveLetters | 
 | IoApplyPriorityInfoThread | 
 | IoAssignResources | 
 | IoAttachDevice | 
 | IoAttachDeviceByPointer | 
 | IoAttachDeviceToDeviceStack | 
 | IoAttachDeviceToDeviceStackSafe | 
 | IoBuildAsynchronousFsdRequest | 
 | IoBuildDeviceIoControlRequest | 
 | IoBuildPartialMdl | 
 | IoBuildSynchronousFsdRequest | 
 | IoCallDriver | 
 | IoCancelFileOpen | 
 | IoCancelIrp | 
 | IoCheckDesiredAccess | 
 | IoCheckEaBufferValidity | 
 | IoCheckFunctionAccess | 
 | IoCheckQuerySetFileInformation | 
 | IoCheckQuerySetVolumeInformation | 
 | IoCheckQuotaBufferValidity | 
 | IoCheckShareAccess | 
 | IoCheckShareAccessEx | 
 | IoClearDependency | 
 | IoClearIrpExtraCreateParameter | 
 | IoCompleteRequest | 
 | IoConnectInterrupt | 
 | IoConnectInterruptEx | 
 | IoCreateArcName | 
 | IoCreateController | 
 | IoCreateDevice | 
 | IoCreateDisk | 
 | IoCreateDriver | 
 | IoCreateFile | 
 | IoCreateFileEx | 
 | IoCreateFileSpecifyDeviceObjectHint | 
 | IoCreateNotificationEvent | 
 | IoCreateStreamFileObject | 
 | IoCreateStreamFileObjectEx | 
 | IoCreateStreamFileObjectLite | 
 | IoCreateSymbolicLink | 
 | IoCreateSynchronizationEvent | 
 | IoCreateUnprotectedSymbolicLink | 
 | IoCsqInitialize | 
 | IoCsqInitializeEx | 
 | IoCsqInsertIrp | 
 | IoCsqInsertIrpEx | 
 | IoCsqRemoveIrp | 
 | IoCsqRemoveNextIrp | 
 | IoDeleteAllDependencyRelations | 
 | IoDeleteController | 
 | IoDeleteDevice | 
 | IoDeleteDriver | 
 | IoDeleteSymbolicLink | 
 | IoDetachDevice | 
 | IoDeviceHandlerObjectSize DATA | 
 | IoDeviceHandlerObjectType DATA | 
 | IoDeviceObjectType DATA | 
 | IoDisconnectInterrupt | 
 | IoDisconnectInterruptEx | 
 | IoDriverObjectType DATA | 
 | IoDuplicateDependency | 
 | IoEnqueueIrp | 
 | IoEnumerateDeviceObjectList | 
 | IoEnumerateRegisteredFiltersList | 
 | IoFastQueryNetworkAttributes | 
 | IoFileObjectType DATA | 
 | IoForwardAndCatchIrp | 
 | IoForwardIrpSynchronously | 
 | IoFreeController | 
 | IoFreeErrorLogEntry | 
 | IoFreeIrp | 
 | IoFreeMdl | 
 | IoFreeMiniCompletionPacket | 
 | IoFreeSfioStreamIdentifier | 
 | IoFreeWorkItem | 
 | IoGetAffinityInterrupt | 
 | IoGetAttachedDevice | 
 | IoGetAttachedDeviceReference | 
 | IoGetBaseFileSystemDeviceObject | 
 | IoGetBootDiskInformation | 
 | IoGetBootDiskInformationLite | 
 | IoGetConfigurationInformation | 
 | IoGetContainerInformation | 
 | IoGetCurrentProcess | 
 | IoGetDeviceAttachmentBaseRef | 
 | IoGetDeviceInterfaceAlias | 
 | IoGetDeviceInterfaces | 
 | IoGetDeviceNumaNode | 
 | IoGetDeviceObjectPointer | 
 | IoGetDeviceProperty | 
 | IoGetDevicePropertyData | 
 | IoGetDeviceToVerify | 
 | IoGetDiskDeviceObject | 
 | IoGetDmaAdapter | 
 | IoGetDriverObjectExtension | 
 | IoGetFileObjectGenericMapping | 
 | IoGetInitialStack | 
 | IoGetIoPriorityHint | 
 | IoGetIrpExtraCreateParameter | 
 | IoGetLowerDeviceObject | 
 | IoGetOplockKeyContext | 
 | IoGetPagingIoPriority | 
 | IoGetRelatedDeviceObject | 
 | IoGetRequestorProcess | 
 | IoGetRequestorProcessId | 
 | IoGetRequestorSessionId | 
 | IoGetSfioStreamIdentifier | 
 | IoGetStackLimits | 
 | IoGetSymlinkSupportInformation | 
 | IoGetTopLevelIrp | 
 | IoGetTransactionParameterBlock | 
 | IoInitializeIrp | 
 | IoInitializeRemoveLockEx | 
 | IoInitializeTimer | 
 | IoInitializeWorkItem | 
 | IoInvalidateDeviceRelations | 
 | IoInvalidateDeviceState | 
 | IoIs32bitProcess | 
 | IoIsFileObjectIgnoringSharing | 
 | IoIsFileOriginRemote | 
 | IoIsOperationSynchronous | 
 | IoIsSystemThread | 
 | IoIsValidNameGraftingBuffer | 
 | IoIsWdmVersionAvailable | 
 | IoMakeAssociatedIrp | 
 | IoOpenDeviceInterfaceRegistryKey | 
 | IoOpenDeviceRegistryKey | 
 | IoPageRead | 
 | IoPnPDeliverServicePowerNotification | 
 | IoQueryDeviceDescription | 
 | IoQueryFileDosDeviceName | 
 | IoQueryFileInformation | 
 | IoQueryVolumeInformation | 
 | IoQueueThreadIrp | 
 | IoQueueWorkItem | 
 | IoQueueWorkItemEx | 
 | IoRaiseHardError | 
 | IoRaiseInformationalHardError | 
 | IoReadDiskSignature | 
 | IoReadOperationCount DATA | 
 | IoReadPartitionTable | 
 | IoReadPartitionTableEx | 
 | IoReadTransferCount DATA | 
 | IoRegisterBootDriverReinitialization | 
 | IoRegisterContainerNotification | 
 | IoRegisterDeviceInterface | 
 | IoRegisterDriverReinitialization | 
 | IoRegisterFileSystem | 
 | IoRegisterFsRegistrationChange | 
 | IoRegisterFsRegistrationChangeMountAware | 
 | IoRegisterLastChanceShutdownNotification | 
 | IoRegisterPlugPlayNotification | 
 | IoRegisterPriorityCallback | 
 | IoRegisterShutdownNotification | 
 | IoReleaseCancelSpinLock | 
 | IoReleaseRemoveLockAndWaitEx | 
 | IoReleaseRemoveLockEx | 
 | IoReleaseVpbSpinLock | 
 | IoRemoveShareAccess | 
 | IoReplaceFileObjectName | 
 | IoReplacePartitionUnit | 
 | IoReportDetectedDevice | 
 | IoReportHalResourceUsage | 
 | IoReportResourceForDetection | 
 | IoReportResourceUsage | 
 | IoReportRootDevice | 
 | IoReportTargetDeviceChange | 
 | IoReportTargetDeviceChangeAsynchronous | 
 | IoRequestDeviceEject | 
 | IoRequestDeviceEjectEx | 
 | IoRetrievePriorityInfo | 
 | IoReuseIrp | 
 | IoSetCompletionRoutineEx | 
 | IoSetDependency | 
 | IoSetDeviceInterfaceState | 
 | IoSetDevicePropertyData | 
 | IoSetDeviceToVerify | 
 | IoSetFileObjectIgnoreSharing | 
 | IoSetFileOrigin | 
 | IoSetHardErrorOrVerifyDevice | 
 | IoSetInformation | 
 | IoSetIoCompletion | 
 | IoSetIoCompletionEx | 
 | IoSetIoPriorityHint | 
 | IoSetIoPriorityHintIntoFileObject | 
 | IoSetIoPriorityHintIntoThread | 
 | IoSetIrpExtraCreateParameter | 
 | IoSetOplockKeyContext | 
 | IoSetPartitionInformation | 
 | IoSetPartitionInformationEx | 
 | IoSetShareAccess | 
 | IoSetShareAccessEx | 
 | IoSetStartIoAttributes | 
 | IoSetSystemPartition | 
 | IoSetThreadHardErrorMode | 
 | IoSetTopLevelIrp | 
 | IoSizeofWorkItem | 
 | IoStartNextPacket | 
 | IoStartNextPacketByKey | 
 | IoStartPacket | 
 | IoStartTimer | 
 | IoStatisticsLock DATA | 
 | IoStopTimer | 
 | IoSynchronousInvalidateDeviceRelations | 
 | IoSynchronousPageWrite | 
 | IoThreadToProcess | 
 | IoTranslateBusAddress | 
 | IoUninitializeWorkItem | 
 | IoUnregisterContainerNotification | 
 | IoUnregisterFileSystem | 
 | IoUnregisterFsRegistrationChange | 
 | IoUnregisterPlugPlayNotification | 
 | IoUnregisterPlugPlayNotificationEx | 
 | IoUnregisterPriorityCallback | 
 | IoUnregisterShutdownNotification | 
 | IoUpdateShareAccess | 
 | IoValidateDeviceIoControlAccess | 
 | IoVerifyPartitionTable | 
 | IoVerifyVolume | 
 | IoVolumeDeviceToDosName | 
 | IoWMIAllocateInstanceIds | 
 | IoWMIDeviceObjectToInstanceName | 
 | IoWMIDeviceObjectToProviderId | 
 | IoWMIExecuteMethod | 
 | IoWMIHandleToInstanceName | 
 | IoWMIOpenBlock | 
 | IoWMIQueryAllData | 
 | IoWMIQueryAllDataMultiple | 
 | IoWMIQuerySingleInstance | 
 | IoWMIQuerySingleInstanceMultiple | 
 | IoWMIRegistrationControl | 
 | IoWMISetNotificationCallback | 
 | IoWMISetSingleInstance | 
 | IoWMISetSingleItem | 
 | IoWMISuggestInstanceName | 
 | IoWMIWriteEvent | 
 | IoWithinStackLimits | 
 | IoWriteErrorLogEntry | 
 | IoWriteOperationCount DATA | 
 | IoWritePartitionTable | 
 | IoWritePartitionTableEx | 
 | IoWriteTransferCount DATA | 
 | IofCallDriver | 
 | IofCompleteRequest | 
 | KdChangeOption | 
 | KdDebuggerEnabled DATA | 
 | KdDebuggerNotPresent DATA | 
 | KdDisableDebugger | 
 | KdEnableDebugger | 
 | KdEnteredDebugger DATA | 
 | KdPollBreakIn | 
 | KdPowerTransition | 
 | KdRefreshDebuggerNotPresent | 
 | KdSystemDebugControl | 
 | KeAcquireGuardedMutex | 
 | KeAcquireGuardedMutexUnsafe | 
 | KeAcquireInStackQueuedSpinLock | 
 | KeAcquireInStackQueuedSpinLockAtDpcLevel | 
 | KeAcquireInStackQueuedSpinLockForDpc | 
 | KeAcquireInStackQueuedSpinLockRaiseToSynch | 
 | KeAcquireInterruptSpinLock | 
 | KeAcquireQueuedSpinLock | 
 | KeAcquireQueuedSpinLockRaiseToSynch | 
 | KeAcquireSpinLockAtDpcLevel | 
 | KeAcquireSpinLockForDpc | 
 | KeAcquireSpinLockRaiseToDpc | 
 | KeAcquireSpinLockRaiseToSynch | 
 | KeAddGroupAffinityEx | 
 | KeAddProcessorAffinityEx | 
 | KeAddProcessorGroupAffinity | 
 | KeAddSystemServiceTable | 
 | KeAlertThread | 
 | KeAllocateCalloutStack | 
 | KeAllocateCalloutStackEx | 
 | KeAndAffinityEx | 
 | KeAndGroupAffinityEx | 
 | KeAreAllApcsDisabled | 
 | KeAreApcsDisabled | 
 | KeAttachProcess | 
 | KeBugCheck | 
 | KeBugCheckEx | 
 | KeCancelTimer | 
 | KeCapturePersistentThreadState | 
 | KeCheckProcessorAffinityEx | 
 | KeCheckProcessorGroupAffinity | 
 | KeClearEvent | 
 | KeConnectInterrupt | 
 | KeComplementAffinityEx | 
 | KeCopyAffinityEx | 
 | KeCountSetBitsAffinityEx | 
 | KeCountSetBitsGroupAffinity | 
 | KeDelayExecutionThread | 
 | KeDeregisterBugCheckCallback | 
 | KeDeregisterBugCheckReasonCallback | 
 | KeDeregisterNmiCallback | 
 | KeDeregisterProcessorChangeCallback | 
 | KeDetachProcess | 
 | KeDisconnectInterrupt | 
 | KeEnterCriticalRegion | 
 | KeEnterGuardedRegion | 
 | KeEnterKernelDebugger | 
 | KeEnumerateNextProcessor | 
 | KeExpandKernelStackAndCallout | 
 | KeExpandKernelStackAndCalloutEx | 
 | KeFindConfigurationEntry | 
 | KeFindConfigurationNextEntry | 
 | KeFindFirstSetLeftAffinityEx | 
 | KeFindFirstSetLeftGroupAffinity | 
 | KeFindFirstSetRightGroupAffinity | 
 | KeFirstGroupAffinityEx | 
 | KeFlushEntireTb | 
 | KeFlushQueuedDpcs | 
 | KeFreeCalloutStack | 
 | KeGenericCallDpc | 
 | KeGetCurrentIrql | 
 | KeGetCurrentNodeNumber | 
 | KeGetCurrentProcessorNumberEx | 
 | KeGetCurrentThread | 
 | KeGetProcessorIndexFromNumber | 
 | KeGetProcessorNumberFromIndex | 
 | KeGetRecommendedSharedDataAlignment | 
 | KeGetXSaveFeatureFlags | 
 | KeInitializeAffinityEx | 
 | KeInitializeApc | 
 | KeInitializeCrashDumpHeader | 
 | KeInitializeDeviceQueue | 
 | KeInitializeDpc | 
 | KeInitializeEnumerationContext | 
 | KeInitializeEnumerationContextFromGroup | 
 | KeInitializeEvent | 
 | KeInitializeGuardedMutex | 
 | KeInitializeInterrupt | 
 | KeInitializeMutant | 
 | KeInitializeMutex | 
 | KeInitializeQueue | 
 | KeInitializeSemaphore | 
 | KeInitializeThreadedDpc | 
 | KeInitializeTimer | 
 | KeInitializeTimerEx | 
 | KeInsertByKeyDeviceQueue | 
 | KeInsertDeviceQueue | 
 | KeInsertHeadQueue | 
 | KeInsertQueue | 
 | KeInsertQueueApc | 
 | KeInsertQueueDpc | 
 | KeInterlockedClearProcessorAffinityEx | 
 | KeInterlockedSetProcessorAffinityEx | 
 | KeInvalidateAllCaches | 
 | KeInvalidateRangeAllCaches | 
 | KeIpiGenericCall | 
 | KeIsAttachedProcess | 
 | KeIsEmptyAffinityEx | 
 | KeIsEqualAffinityEx | 
 | KeIsExecutingDpc | 
 | KeIsSingleGroupAffinityEx | 
 | KeIsSubsetAffinityEx | 
 | KeIsWaitListEmpty | 
 | KeLastBranchMSR DATA | 
 | KeLeaveCriticalRegion | 
 | KeLeaveGuardedRegion | 
 | KeLoaderBlock DATA | 
 | KeLowerIrql | 
 | KeNumberProcessors DATA | 
 | KeOrAffinityEx | 
 | KeProcessorGroupAffinity | 
 | KeProfileInterruptWithSource | 
 | KePulseEvent | 
 | KeQueryActiveGroupCount | 
 | KeQueryActiveProcessorAffinity | 
 | KeQueryActiveProcessorCount | 
 | KeQueryActiveProcessorCountEx | 
 | KeQueryActiveProcessors | 
 | KeQueryMultiThreadProcessorSet | 
 | KeQueryDpcWatchdogInformation | 
 | KeQueryGroupAffinity | 
 | KeQueryGroupAffinityEx | 
 | KeQueryHardwareCounterConfiguration | 
 | KeQueryHighestNodeNumber | 
 | KeQueryLogicalProcessorRelationship | 
 | KeQueryMaximumGroupCount | 
 | KeQueryMaximumProcessorCount | 
 | KeQueryMaximumProcessorCountEx | 
 | KeQueryNodeActiveAffinity | 
 | KeQueryNodeMaximumProcessorCount | 
 | KeQueryPrcbAddress | 
 | KeQueryPriorityThread | 
 | KeQueryRuntimeThread | 
 | KeQueryTimeIncrement | 
 | KeQueryUnbiasedInterruptTime | 
 | KeRaiseIrqlToDpcLevel | 
 | KeRaiseUserException | 
 | KeReadStateEvent | 
 | KeReadStateMutant | 
 | KeReadStateMutex | 
 | KeReadStateQueue | 
 | KeReadStateSemaphore | 
 | KeReadStateTimer | 
 | KeRegisterBugCheckCallback | 
 | KeRegisterBugCheckReasonCallback | 
 | KeRegisterNmiCallback | 
 | KeRegisterProcessorChangeCallback | 
 | KeReleaseGuardedMutex | 
 | KeReleaseGuardedMutexUnsafe | 
 | KeReleaseInStackQueuedSpinLock | 
 | KeReleaseInStackQueuedSpinLockForDpc | 
 | KeReleaseInStackQueuedSpinLockFromDpcLevel | 
 | KeReleaseInterruptSpinLock | 
 | KeReleaseMutant | 
 | KeReleaseMutex | 
 | KeReleaseQueuedSpinLock | 
 | KeReleaseSemaphore | 
 | KeReleaseSpinLock | 
 | KeReleaseSpinLockForDpc | 
 | KeReleaseSpinLockFromDpcLevel | 
 | KeRemoveByKeyDeviceQueue | 
 | KeRemoveByKeyDeviceQueueIfBusy | 
 | KeRemoveDeviceQueue | 
 | KeRemoveEntryDeviceQueue | 
 | KeRemoveGroupAffinityEx | 
 | KeRemoveProcessorAffinityEx | 
 | KeRemoveProcessorGroupAffinity | 
 | KeRemoveQueue | 
 | KeRemoveQueueDpc | 
 | KeRemoveQueueEx | 
 | KeRemoveSystemServiceTable | 
 | KeResetEvent | 
 | KeRestoreExtendedProcessorState | 
 | KeRestoreFloatingPointState | 
 | KeRevertToUserAffinityThread | 
 | KeRevertToUserAffinityThreadEx | 
 | KeRevertToUserGroupAffinityThread | 
 | KeRundownQueue | 
 | KeSaveExtendedProcessorState | 
 | KeSaveFloatingPointState | 
 | KeSaveStateForHibernate | 
 | KeSetActualBasePriorityThread | 
 | KeSetAffinityThread | 
 | KeSetBasePriorityThread | 
 | KeSetCoalescableTimer | 
 | KeSetDmaIoCoherency | 
 | KeSetEvent | 
 | KeSetEventBoostPriority | 
 | KeSetHardwareCounterConfiguration | 
 | KeSetIdealProcessorThread | 
 | KeSetImportanceDpc | 
 | KeSetKernelStackSwapEnable | 
 | KeSetPriorityThread | 
 | KeSetProfileIrql | 
 | KeSetSystemAffinityThread | 
 | KeSetSystemAffinityThreadEx | 
 | KeSetSystemGroupAffinityThread | 
 | KeSetTargetProcessorDpc | 
 | KeSetTargetProcessorDpcEx | 
 | KeSetTimeIncrement | 
 | KeSetTimer | 
 | KeSetTimerEx | 
 | KeSignalCallDpcDone | 
 | KeSignalCallDpcSynchronize | 
 | KeStackAttachProcess | 
 | KeStartDynamicProcessor | 
 | KeSubtractAffinityEx | 
 | KeSynchronizeExecution | 
 | KeTerminateThread | 
 | KeTestAlertThread | 
 | KeTestSpinLock | 
 | KeTryToAcquireGuardedMutex | 
 | KeTryToAcquireQueuedSpinLock | 
 | KeTryToAcquireQueuedSpinLockRaiseToSynch | 
 | KeTryToAcquireSpinLockAtDpcLevel | 
 | KeUnstackDetachProcess | 
 | KeUpdateRunTime | 
 | KeUpdateSystemTime | 
 | KeUserModeCallback | 
 | KeWaitForMultipleObjects | 
 | KeWaitForMutexObject | 
 | KeWaitForSingleObject | 
 | KfRaiseIrql | 
 | KiBugCheckData DATA | 
 | KiCheckForKernelApcDelivery | 
 | KiCpuId | 
 | LdrAccessResource | 
 | LdrEnumResources | 
 | LdrFindResourceDirectory_U | 
 | LdrFindResourceEx_U | 
 | LdrFindResource_U | 
 | LdrResFindResource | 
 | LdrResFindResourceDirectory | 
 | LdrResSearchResource | 
 | LpcPortObjectType DATA | 
 | LpcReplyWaitReplyPort | 
 | LpcRequestPort | 
 | LpcRequestWaitReplyPort | 
 | LpcRequestWaitReplyPortEx | 
 | LpcSendWaitReceivePort | 
 | LsaCallAuthenticationPackage | 
 | LsaDeregisterLogonProcess | 
 | LsaFreeReturnBuffer | 
 | LsaLogonUser | 
 | LsaLookupAuthenticationPackage | 
 | LsaRegisterLogonProcess | 
 | Mm64BitPhysicalAddress DATA | 
 | MmAddPhysicalMemory | 
 | MmAddVerifierThunks | 
 | MmAdjustWorkingSetSize | 
 | MmAdvanceMdl | 
 | MmAllocateContiguousMemory | 
 | MmAllocateContiguousMemorySpecifyCache | 
 | MmAllocateContiguousMemorySpecifyCacheNode | 
 | MmAllocateMappingAddress | 
 | MmAllocateNonCachedMemory | 
 | MmAllocatePagesForMdl | 
 | MmAllocatePagesForMdlEx | 
 | MmBadPointer DATA | 
 | MmBuildMdlForNonPagedPool | 
 | MmCanFileBeTruncated | 
 | MmCommitSessionMappedView | 
 | MmCopyVirtualMemory | 
 | MmCreateMdl | 
 | MmCreateMirror | 
 | MmCreateSection | 
 | MmDisableModifiedWriteOfSection | 
 | MmDoesFileHaveUserWritableReferences | 
 | MmFlushImageSection | 
 | MmForceSectionClosed | 
 | MmFreeContiguousMemory | 
 | MmFreeContiguousMemorySpecifyCache | 
 | MmFreeMappingAddress | 
 | MmFreeNonCachedMemory | 
 | MmFreePagesFromMdl | 
 | MmGetPhysicalAddress | 
 | MmGetPhysicalMemoryRanges | 
 | MmGetSystemRoutineAddress | 
 | MmGetVirtualForPhysical | 
 | MmGrowKernelStack | 
 | MmHighestUserAddress DATA | 
 | MmIsAddressValid | 
 | MmIsDriverVerifying | 
 | MmIsDriverVerifyingByAddress | 
 | MmIsIoSpaceActive | 
 | MmIsNonPagedSystemAddressValid | 
 | MmIsRecursiveIoFault | 
 | MmIsThisAnNtAsSystem | 
 | MmIsVerifierEnabled | 
 | MmLockPagableDataSection | 
 | MmLockPagableImageSection | 
 | MmLockPagableSectionByHandle | 
 | MmMapIoSpace | 
 | MmMapLockedPages | 
 | MmMapLockedPagesSpecifyCache | 
 | MmMapLockedPagesWithReservedMapping | 
 | MmMapMemoryDumpMdl | 
 | MmMapUserAddressesToPage | 
 | MmMapVideoDisplay | 
 | MmMapViewInSessionSpace | 
 | MmMapViewInSystemSpace | 
 | MmMapViewOfSection | 
 | MmMarkPhysicalMemoryAsBad | 
 | MmMarkPhysicalMemoryAsGood | 
 | MmPageEntireDriver | 
 | MmPrefetchPages | 
 | MmProbeAndLockPages | 
 | MmProbeAndLockProcessPages | 
 | MmProbeAndLockSelectedPages | 
 | MmProtectMdlSystemAddress | 
 | MmQuerySystemSize | 
 | MmRemovePhysicalMemory | 
 | MmResetDriverPaging | 
 | MmRotatePhysicalView | 
 | MmSectionObjectType DATA | 
 | MmSecureVirtualMemory | 
 | MmSetAddressRangeModified | 
 | MmSetBankedSection | 
 | MmSizeOfMdl | 
 | MmSystemRangeStart DATA | 
 | MmTrimAllSystemPagableMemory | 
 | MmUnlockPagableImageSection | 
 | MmUnlockPages | 
 | MmUnmapIoSpace | 
 | MmUnmapLockedPages | 
 | MmUnmapReservedMapping | 
 | MmUnmapVideoDisplay | 
 | MmUnmapViewInSessionSpace | 
 | MmUnmapViewInSystemSpace | 
 | MmUnmapViewOfSection | 
 | MmUnsecureVirtualMemory | 
 | MmUserProbeAddress DATA | 
 | NlsAnsiCodePage DATA | 
 | NlsLeadByteInfo DATA | 
 | NlsMbCodePageTag DATA | 
 | NlsMbOemCodePageTag DATA | 
 | NlsOemCodePage DATA | 
 | NlsOemLeadByteInfo DATA | 
 | NtAddAtom | 
 | NtAdjustPrivilegesToken | 
 | NtAllocateLocallyUniqueId | 
 | NtAllocateUuids | 
 | NtAllocateVirtualMemory | 
 | NtBuildGUID DATA | 
 | NtBuildLab DATA | 
 | NtBuildNumber DATA | 
 | NtClose | 
 | NtCommitComplete | 
 | NtCommitEnlistment | 
 | NtCommitTransaction | 
 | NtConnectPort | 
 | NtCreateEnlistment | 
 | NtCreateEvent | 
 | NtCreateFile | 
 | NtCreateResourceManager | 
 | NtCreateSection | 
 | NtCreateTransaction | 
 | NtCreateTransactionManager | 
 | NtDeleteAtom | 
 | NtDeleteFile | 
 | NtDeviceIoControlFile | 
 | NtDuplicateObject | 
 | NtDuplicateToken | 
 | NtEnumerateTransactionObject | 
 | NtFindAtom | 
 | NtFreeVirtualMemory | 
 | NtFreezeTransactions | 
 | NtFsControlFile | 
 | NtGetEnvironmentVariableEx | 
 | NtGetNotificationResourceManager | 
 | NtGlobalFlag DATA | 
 | NtLockFile | 
 | NtMakePermanentObject | 
 | NtMapViewOfSection | 
 | NtNotifyChangeDirectoryFile | 
 | NtOpenEnlistment | 
 | NtOpenFile | 
 | NtOpenProcess | 
 | NtOpenProcessToken | 
 | NtOpenProcessTokenEx | 
 | NtOpenResourceManager | 
 | NtOpenThread | 
 | NtOpenThreadToken | 
 | NtOpenThreadTokenEx | 
 | NtOpenTransaction | 
 | NtOpenTransactionManager | 
 | NtPrePrepareComplete | 
 | NtPrePrepareEnlistment | 
 | NtPrepareComplete | 
 | NtPrepareEnlistment | 
 | NtPropagationComplete | 
 | NtPropagationFailed | 
 | NtQueryDirectoryFile | 
 | NtQueryEaFile | 
 | NtQueryEnvironmentVariableInfoEx | 
 | NtQueryInformationAtom | 
 | NtQueryInformationEnlistment | 
 | NtQueryInformationFile | 
 | NtQueryInformationProcess | 
 | NtQueryInformationResourceManager | 
 | NtQueryInformationThread | 
 | NtQueryInformationToken | 
 | NtQueryInformationTransaction | 
 | NtQueryInformationTransactionManager | 
 | NtQueryQuotaInformationFile | 
 | NtQuerySecurityAttributesToken | 
 | NtQuerySecurityObject | 
 | NtQuerySystemInformation | 
 | NtQuerySystemInformationEx | 
 | NtQueryVolumeInformationFile | 
 | NtReadFile | 
 | NtReadOnlyEnlistment | 
 | NtRecoverEnlistment | 
 | NtRecoverResourceManager | 
 | NtRecoverTransactionManager | 
 | NtRequestPort | 
 | NtRequestWaitReplyPort | 
 | NtRollbackComplete | 
 | NtRollbackEnlistment | 
 | NtRollbackTransaction | 
 | NtSetEaFile | 
 | NtSetEvent | 
 | NtSetInformationEnlistment | 
 | NtSetInformationFile | 
 | NtSetInformationProcess | 
 | NtSetInformationResourceManager | 
 | NtSetInformationThread | 
 | NtSetInformationToken | 
 | NtSetInformationTransaction | 
 | NtSetQuotaInformationFile | 
 | NtSetSecurityObject | 
 | NtSetVolumeInformationFile | 
 | NtShutdownSystem | 
 | NtThawTransactions | 
 | NtTraceControl | 
 | NtTraceEvent | 
 | NtUnlockFile | 
 | NtVdmControl | 
 | NtWaitForSingleObject | 
 | NtWriteFile | 
 | ObAssignSecurity | 
 | ObCheckCreateObjectAccess | 
 | ObCheckObjectAccess | 
 | ObCloseHandle | 
 | ObCreateObject | 
 | ObCreateObjectType | 
 | ObDeleteCapturedInsertInfo | 
 | ObDereferenceObject | 
 | ObDereferenceObjectDeferDelete | 
 | ObDereferenceObjectDeferDeleteWithTag | 
 | ObDereferenceSecurityDescriptor | 
 | ObFindHandleForObject | 
 | ObGetFilterVersion | 
 | ObGetObjectSecurity | 
 | ObGetObjectType | 
 | ObInsertObject | 
 | ObIsDosDeviceLocallyMapped | 
 | ObIsKernelHandle | 
 | ObLogSecurityDescriptor | 
 | ObMakeTemporaryObject | 
 | ObOpenObjectByName | 
 | ObOpenObjectByPointer | 
 | ObOpenObjectByPointerWithTag | 
 | ObQueryNameInfo | 
 | ObQueryNameString | 
 | ObQueryObjectAuditingByHandle | 
 | ObReferenceObjectByHandle | 
 | ObReferenceObjectByHandleWithTag | 
 | ObReferenceObjectByName | 
 | ObReferenceObjectByPointer | 
 | ObReferenceObjectByPointerWithTag | 
 | ObReferenceSecurityDescriptor | 
 | ObRegisterCallbacks | 
 | ObReleaseObjectSecurity | 
 | ObSetHandleAttributes | 
 | ObSetSecurityDescriptorInfo | 
 | ObSetSecurityObjectByPointer | 
 | ObUnRegisterCallbacks | 
 | ObfDereferenceObject | 
 | ObfDereferenceObjectWithTag | 
 | ObfReferenceObject | 
 | ObfReferenceObjectWithTag | 
 | POGOBuffer DATA | 
 | PcwAddInstance | 
 | PcwCloseInstance | 
 | PcwCreateInstance | 
 | PcwRegister | 
 | PcwUnregister | 
 | PfFileInfoNotify | 
 | PfxFindPrefix | 
 | PfxInitialize | 
 | PfxInsertPrefix | 
 | PfxRemovePrefix | 
 | PoCallDriver | 
 | PoCancelDeviceNotify | 
 | PoClearPowerRequest | 
 | PoCreatePowerRequest | 
 | PoDeletePowerRequest | 
 | PoDisableSleepStates | 
 | PoEndDeviceBusy | 
 | PoGetSystemWake | 
 | PoQueryWatchdogTime | 
 | PoQueueShutdownWorkItem | 
 | PoReenableSleepStates | 
 | PoRegisterDeviceForIdleDetection | 
 | PoRegisterDeviceNotify | 
 | PoRegisterPowerSettingCallback | 
 | PoRegisterSystemState | 
 | PoRequestPowerIrp | 
 | PoRequestShutdownEvent | 
 | PoSetDeviceBusyEx | 
 | PoSetFixedWakeSource | 
 | PoSetHiberRange | 
 | PoSetPowerRequest | 
 | PoSetPowerState | 
 | PoSetSystemState | 
 | PoSetSystemWake | 
 | PoShutdownBugCheck | 
 | PoStartDeviceBusy | 
 | PoStartNextPowerIrp | 
 | PoUnregisterPowerSettingCallback | 
 | PoUnregisterSystemState | 
 | PoUserShutdownInitiated | 
 | ProbeForRead | 
 | ProbeForWrite | 
 | PsAcquireProcessExitSynchronization | 
 | PsAssignImpersonationToken | 
 | PsChargePoolQuota | 
 | PsChargeProcessNonPagedPoolQuota | 
 | PsChargeProcessPagedPoolQuota | 
 | PsChargeProcessPoolQuota | 
 | PsCreateSystemProcess | 
 | PsCreateSystemThread | 
 | PsDereferenceImpersonationToken | 
 | PsDereferencePrimaryToken | 
 | PsDisableImpersonation | 
 | PsEnterPriorityRegion | 
 | PsEstablishWin32Callouts | 
 | PsGetContextThread | 
 | PsGetCurrentProcess | 
 | PsGetCurrentProcessId | 
 | PsGetCurrentProcessSessionId | 
 | PsGetCurrentProcessWin32Process | 
 | PsGetCurrentProcessWow64Process | 
 | PsGetCurrentThread | 
 | PsGetCurrentThreadId | 
 | PsGetCurrentThreadPreviousMode | 
 | PsGetCurrentThreadProcess | 
 | PsGetCurrentThreadProcessId | 
 | PsGetCurrentThreadStackBase | 
 | PsGetCurrentThreadStackLimit | 
 | PsGetCurrentThreadTeb | 
 | PsGetCurrentThreadWin32Thread | 
 | PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion | 
 | PsGetJobLock | 
 | PsGetJobSessionId | 
 | PsGetJobUIRestrictionsClass | 
 | PsGetProcessCreateTimeQuadPart | 
 | PsGetProcessDebugPort | 
 | PsGetProcessExitProcessCalled | 
 | PsGetProcessExitStatus | 
 | PsGetProcessExitTime | 
 | PsGetProcessId | 
 | PsGetProcessImageFileName | 
 | PsGetProcessInheritedFromUniqueProcessId | 
 | PsGetProcessJob | 
 | PsGetProcessPeb | 
 | PsGetProcessPriorityClass | 
 | PsGetProcessSectionBaseAddress | 
 | PsGetProcessSecurityPort | 
 | PsGetProcessSessionId | 
 | PsGetProcessSessionIdEx | 
 | PsGetProcessWin32Process | 
 | PsGetProcessWin32WindowStation | 
 | PsGetProcessWow64Process | 
 | PsGetThreadFreezeCount | 
 | PsGetThreadHardErrorsAreDisabled | 
 | PsGetThreadId | 
 | PsGetThreadProcess | 
 | PsGetThreadProcessId | 
 | PsGetThreadSessionId | 
 | PsGetThreadTeb | 
 | PsGetThreadWin32Thread | 
 | PsGetVersion | 
 | PsImpersonateClient | 
 | PsInitialSystemProcess DATA | 
 | PsIsCurrentThreadPrefetching | 
 | PsIsProcessBeingDebugged | 
 | PsIsProtectedProcess | 
 | PsIsSystemProcess | 
 | PsIsSystemThread | 
 | PsIsThreadImpersonating | 
 | PsIsThreadTerminating | 
 | PsJobType DATA | 
 | PsLeavePriorityRegion | 
 | PsLookupProcessByProcessId | 
 | PsLookupProcessThreadByCid | 
 | PsLookupThreadByThreadId | 
 | PsProcessType DATA | 
 | PsQueryProcessExceptionFlags | 
 | PsReferenceImpersonationToken | 
 | PsReferencePrimaryToken | 
 | PsReferenceProcessFilePointer | 
 | PsReleaseProcessExitSynchronization | 
 | PsRemoveCreateThreadNotifyRoutine | 
 | PsRemoveLoadImageNotifyRoutine | 
 | PsRestoreImpersonation | 
 | PsResumeProcess | 
 | PsReturnPoolQuota | 
 | PsReturnProcessNonPagedPoolQuota | 
 | PsReturnProcessPagedPoolQuota | 
 | PsRevertThreadToSelf | 
 | PsRevertToSelf | 
 | PsSetContextThread | 
 | PsSetCreateProcessNotifyRoutine | 
 | PsSetCreateProcessNotifyRoutineEx | 
 | PsSetCreateThreadNotifyRoutine | 
 | PsSetCurrentThreadPrefetching | 
 | PsSetJobUIRestrictionsClass | 
 | PsSetLegoNotifyRoutine | 
 | PsSetLoadImageNotifyRoutine | 
 | PsSetProcessPriorityByClass | 
 | PsSetProcessPriorityClass | 
 | PsSetProcessSecurityPort | 
 | PsSetProcessWin32Process | 
 | PsSetProcessWindowStation | 
 | PsSetThreadHardErrorsAreDisabled | 
 | PsSetThreadWin32Thread | 
 | PsSuspendProcess | 
 | PsTerminateSystemThread | 
 | PsThreadType DATA | 
 | PsUILanguageComitted DATA | 
 | PsWrapApcWow64Thread | 
 | RtlAbsoluteToSelfRelativeSD | 
 | RtlAddAccessAllowedAce | 
 | RtlAddAccessAllowedAceEx | 
 | RtlAddAce | 
 | RtlAddAtomToAtomTable | 
 | RtlAddRange | 
 | RtlAllocateHeap | 
 | RtlAnsiCharToUnicodeChar | 
 | RtlAnsiStringToUnicodeSize | 
 | RtlAnsiStringToUnicodeString | 
 | RtlAppendAsciizToString | 
 | RtlAppendStringToString | 
 | RtlAppendUnicodeStringToString | 
 | RtlAppendUnicodeToString | 
 | RtlAreAllAccessesGranted | 
 | RtlAreAnyAccessesGranted | 
 | RtlAreBitsClear | 
 | RtlAreBitsSet | 
 | RtlAssert | 
 | RtlCaptureContext | 
 | RtlCaptureStackBackTrace | 
 | RtlCharToInteger | 
 | RtlCheckRegistryKey | 
 | RtlClearAllBits | 
 | RtlClearBit | 
 | RtlClearBits | 
 | RtlCmDecodeMemIoResource | 
 | RtlCmEncodeMemIoResource | 
 | RtlCompareAltitudes | 
 | RtlCompareMemory | 
 | RtlCompareMemoryUlong | 
 | RtlCompareString | 
 | RtlCompareUnicodeString | 
 | RtlCompareUnicodeStrings | 
 | RtlCompressBuffer | 
 | RtlCompressChunks | 
 | RtlComputeCrc32 | 
 | RtlContractHashTable | 
 | RtlConvertSidToUnicodeString | 
 | RtlCopyLuid | 
 | RtlCopyLuidAndAttributesArray | 
 | RtlCopyMemory | 
 | RtlCopyMemoryNonTemporal | 
 | RtlCopyRangeList | 
 | RtlCopySid | 
 | RtlCopySidAndAttributesArray | 
 | RtlCopyString | 
 | RtlCopyUnicodeString | 
 | RtlCreateAcl | 
 | RtlCreateAtomTable | 
 | RtlCreateHashTable | 
 | RtlCreateHeap | 
 | RtlCreateRegistryKey | 
 | RtlCreateSecurityDescriptor | 
 | RtlCreateSystemVolumeInformationFolder | 
 | RtlCreateUnicodeString | 
 | RtlCustomCPToUnicodeN | 
 | RtlDecompressBuffer | 
 | RtlDecompressChunks | 
 | RtlDecompressFragment | 
 | RtlDelete | 
 | RtlDeleteAce | 
 | RtlDeleteAtomFromAtomTable | 
 | RtlDeleteElementGenericTable | 
 | RtlDeleteElementGenericTableAvl | 
 | RtlDeleteHashTable | 
 | RtlDeleteNoSplay | 
 | RtlDeleteOwnersRanges | 
 | RtlDeleteRange | 
 | RtlDeleteRegistryValue | 
 | RtlDescribeChunk | 
 | RtlDestroyAtomTable | 
 | RtlDestroyHeap | 
 | RtlDowncaseUnicodeChar | 
 | RtlDowncaseUnicodeString | 
 | RtlDuplicateUnicodeString | 
 | RtlEmptyAtomTable | 
 | RtlEndEnumerationHashTable | 
 | RtlEndWeakEnumerationHashTable | 
 | RtlEnumerateEntryHashTable | 
 | RtlEnumerateGenericTable | 
 | RtlEnumerateGenericTableAvl | 
 | RtlEnumerateGenericTableLikeADirectory | 
 | RtlEnumerateGenericTableWithoutSplaying | 
 | RtlEnumerateGenericTableWithoutSplayingAvl | 
 | RtlEqualLuid | 
 | RtlEqualSid | 
 | RtlEqualString | 
 | RtlEqualUnicodeString | 
 | RtlEthernetAddressToStringA | 
 | RtlEthernetAddressToStringW | 
 | RtlEthernetStringToAddressA | 
 | RtlEthernetStringToAddressW | 
 | RtlExpandHashTable | 
 | RtlFillMemory | 
 | RtlFindAceByType | 
 | RtlFindClearBits | 
 | RtlFindClearBitsAndSet | 
 | RtlFindClearRuns | 
 | RtlFindClosestEncodableLength | 
 | RtlFindFirstRunClear | 
 | RtlFindLastBackwardRunClear | 
 | RtlFindLeastSignificantBit | 
 | RtlFindLongestRunClear | 
 | RtlFindMessage | 
 | RtlFindMostSignificantBit | 
 | RtlFindNextForwardRunClear | 
 | RtlFindRange | 
 | RtlFindSetBits | 
 | RtlFindSetBitsAndClear | 
 | RtlFindUnicodePrefix | 
 | RtlFormatCurrentUserKeyPath | 
 | RtlFormatMessage | 
 | RtlFreeAnsiString | 
 | RtlFreeHeap | 
 | RtlFreeOemString | 
 | RtlFreeRangeList | 
 | RtlFreeUnicodeString | 
 | RtlGUIDFromString | 
 | RtlGenerate8dot3Name | 
 | RtlGetAce | 
 | RtlGetCallersAddress | 
 | RtlGetCompressionWorkSpaceSize | 
 | RtlGetDaclSecurityDescriptor | 
 | RtlGetDefaultCodePage | 
 | RtlGetElementGenericTable | 
 | RtlGetElementGenericTableAvl | 
 | RtlGetEnabledExtendedFeatures | 
 | RtlGetFirstRange | 
 | RtlGetGroupSecurityDescriptor | 
 | RtlGetIntegerAtom | 
 | RtlGetLastRange | 
 | RtlGetNextEntryHashTable | 
 | RtlGetNextRange | 
 | RtlGetNtGlobalFlags | 
 | RtlGetOwnerSecurityDescriptor | 
 | RtlGetProductInfo | 
 | RtlGetSaclSecurityDescriptor | 
 | RtlGetSetBootStatusData | 
 | RtlGetThreadLangIdByIndex | 
 | RtlGetVersion | 
 | RtlHashUnicodeString | 
 | RtlIdnToAscii | 
 | RtlIdnToNameprepUnicode | 
 | RtlIdnToUnicode | 
 | RtlImageDirectoryEntryToData | 
 | RtlImageNtHeader | 
 | RtlInitAnsiString | 
 | RtlInitAnsiStringEx | 
 | RtlInitCodePageTable | 
 | RtlInitEnumerationHashTable | 
 | RtlInitString | 
 | RtlInitUnicodeString | 
 | RtlInitUnicodeStringEx | 
 | RtlInitWeakEnumerationHashTable | 
 | RtlInitializeBitMap | 
 | RtlInitializeGenericTable | 
 | RtlInitializeGenericTableAvl | 
 | RtlInitializeRangeList | 
 | RtlInitializeSid | 
 | RtlInitializeUnicodePrefix | 
 | RtlInsertElementGenericTable | 
 | RtlInsertElementGenericTableAvl | 
 | RtlInsertElementGenericTableFull | 
 | RtlInsertElementGenericTableFullAvl | 
 | RtlInsertEntryHashTable | 
 | RtlInsertUnicodePrefix | 
 | RtlInt64ToUnicodeString | 
 | RtlIntegerToChar | 
 | RtlIntegerToUnicode | 
 | RtlIntegerToUnicodeString | 
 | RtlInvertRangeList | 
 | RtlInvertRangeListEx | 
 | RtlIoDecodeMemIoResource | 
 | RtlIoEncodeMemIoResource | 
 | RtlIpv4AddressToStringA | 
 | RtlIpv4AddressToStringExA | 
 | RtlIpv4AddressToStringExW | 
 | RtlIpv4AddressToStringW | 
 | RtlIpv4StringToAddressA | 
 | RtlIpv4StringToAddressExA | 
 | RtlIpv4StringToAddressExW | 
 | RtlIpv4StringToAddressW | 
 | RtlIpv6AddressToStringA | 
 | RtlIpv6AddressToStringExA | 
 | RtlIpv6AddressToStringExW | 
 | RtlIpv6AddressToStringW | 
 | RtlIpv6StringToAddressA | 
 | RtlIpv6StringToAddressExA | 
 | RtlIpv6StringToAddressExW | 
 | RtlIpv6StringToAddressW | 
 | RtlIsGenericTableEmpty | 
 | RtlIsGenericTableEmptyAvl | 
 | RtlIsNameLegalDOS8Dot3 | 
 | RtlIsNormalizedString | 
 | RtlIsNtDdiVersionAvailable | 
 | RtlIsRangeAvailable | 
 | RtlIsServicePackVersionInstalled | 
 | RtlIsValidOemCharacter | 
 | RtlLengthRequiredSid | 
 | RtlLengthSecurityDescriptor | 
 | RtlLengthSid | 
 | RtlLoadString | 
 | RtlLocalTimeToSystemTime | 
 | RtlLockBootStatusData | 
 | RtlLookupAtomInAtomTable | 
 | RtlLookupElementGenericTable | 
 | RtlLookupElementGenericTableAvl | 
 | RtlLookupElementGenericTableFull | 
 | RtlLookupElementGenericTableFullAvl | 
 | RtlLookupEntryHashTable | 
 | RtlLookupFirstMatchingElementGenericTableAvl | 
 | RtlLookupFunctionEntry | 
 | RtlMapGenericMask | 
 | RtlMapSecurityErrorToNtStatus | 
 | RtlMergeRangeLists | 
 | RtlMoveMemory | 
 | RtlMultiByteToUnicodeN | 
 | RtlMultiByteToUnicodeSize | 
 | RtlNextUnicodePrefix | 
 | RtlNormalizeString | 
 | RtlNtStatusToDosError | 
 | RtlNtStatusToDosErrorNoTeb | 
 | RtlNumberGenericTableElements | 
 | RtlNumberGenericTableElementsAvl | 
 | RtlNumberOfClearBits | 
 | RtlNumberOfSetBits | 
 | RtlNumberOfSetBitsUlongPtr | 
 | RtlOemStringToCountedUnicodeString | 
 | RtlOemStringToUnicodeSize | 
 | RtlOemStringToUnicodeString | 
 | RtlOemToUnicodeN | 
 | RtlOwnerAcesPresent | 
 | RtlPcToFileHeader | 
 | RtlPinAtomInAtomTable | 
 | RtlPrefetchMemoryNonTemporal | 
 | RtlPrefixString | 
 | RtlPrefixUnicodeString | 
 | RtlQueryAtomInAtomTable | 
 | RtlQueryDynamicTimeZoneInformation | 
 | RtlQueryElevationFlags | 
 | RtlQueryModuleInformation | 
 | RtlQueryRegistryValues | 
 | RtlQueryTimeZoneInformation | 
 | RtlRaiseException | 
 | RtlRandom | 
 | RtlRandomEx | 
 | RtlRealPredecessor | 
 | RtlRealSuccessor | 
 | RtlRemoveEntryHashTable | 
 | RtlRemoveUnicodePrefix | 
 | RtlReplaceSidInSd | 
 | RtlReserveChunk | 
 | RtlRestoreContext | 
 | RtlRunOnceBeginInitialize | 
 | RtlRunOnceComplete | 
 | RtlRunOnceExecuteOnce | 
 | RtlRunOnceInitialize | 
 | RtlSecondsSince1970ToTime | 
 | RtlSecondsSince1980ToTime | 
 | RtlSelfRelativeToAbsoluteSD | 
 | RtlSelfRelativeToAbsoluteSD2 | 
 | RtlSetAllBits | 
 | RtlSetBit | 
 | RtlSetBits | 
 | RtlSetDaclSecurityDescriptor | 
 | RtlSetDynamicTimeZoneInformation | 
 | RtlSetGroupSecurityDescriptor | 
 | RtlSetOwnerSecurityDescriptor | 
 | RtlSetSaclSecurityDescriptor | 
 | RtlSetTimeZoneInformation | 
 | RtlSidHashInitialize | 
 | RtlSidHashLookup | 
 | RtlSizeHeap | 
 | RtlSplay | 
 | RtlStringFromGUID | 
 | RtlSubAuthorityCountSid | 
 | RtlSubAuthoritySid | 
 | RtlSubtreePredecessor | 
 | RtlSubtreeSuccessor | 
 | RtlSystemTimeToLocalTime | 
 | RtlTestBit | 
 | RtlTimeFieldsToTime | 
 | RtlTimeToElapsedTimeFields | 
 | RtlTimeToSecondsSince1970 | 
 | RtlTimeToSecondsSince1980 | 
 | RtlTimeToTimeFields | 
 | RtlTraceDatabaseAdd | 
 | RtlTraceDatabaseCreate | 
 | RtlTraceDatabaseDestroy | 
 | RtlTraceDatabaseEnumerate | 
 | RtlTraceDatabaseFind | 
 | RtlTraceDatabaseLock | 
 | RtlTraceDatabaseUnlock | 
 | RtlTraceDatabaseValidate | 
 | RtlUTF8ToUnicodeN | 
 | RtlUnicodeStringToAnsiSize | 
 | RtlUnicodeStringToAnsiString | 
 | RtlUnicodeStringToCountedOemString | 
 | RtlUnicodeStringToInteger | 
 | RtlUnicodeStringToOemSize | 
 | RtlUnicodeStringToOemString | 
 | RtlUnicodeToCustomCPN | 
 | RtlUnicodeToMultiByteN | 
 | RtlUnicodeToMultiByteSize | 
 | RtlUnicodeToOemN | 
 | RtlUnicodeToUTF8N | 
 | RtlUnlockBootStatusData | 
 | RtlUnwind | 
 | RtlUnwindEx | 
 | RtlUpcaseUnicodeChar | 
 | RtlUpcaseUnicodeString | 
 | RtlUpcaseUnicodeStringToAnsiString | 
 | RtlUpcaseUnicodeStringToCountedOemString | 
 | RtlUpcaseUnicodeStringToOemString | 
 | RtlUpcaseUnicodeToCustomCPN | 
 | RtlUpcaseUnicodeToMultiByteN | 
 | RtlUpcaseUnicodeToOemN | 
 | RtlUpperChar | 
 | RtlUpperString | 
 | RtlValidRelativeSecurityDescriptor | 
 | RtlValidSecurityDescriptor | 
 | RtlValidSid | 
 | RtlValidateUnicodeString | 
 | RtlVerifyVersionInfo | 
 | RtlVirtualUnwind | 
 | RtlVolumeDeviceToDosName | 
 | RtlWalkFrameChain | 
 | RtlWeaklyEnumerateEntryHashTable | 
 | RtlWriteRegistryValue | 
 | RtlZeroHeap | 
 | RtlZeroMemory | 
 | RtlxAnsiStringToUnicodeSize | 
 | RtlxOemStringToUnicodeSize | 
 | RtlxUnicodeStringToAnsiSize | 
 | RtlxUnicodeStringToOemSize | 
 | SeAccessCheck | 
 | SeAccessCheckEx | 
 | SeAccessCheckFromState | 
 | SeAccessCheckWithHint | 
 | SeAppendPrivileges | 
 | SeAssignSecurity | 
 | SeAssignSecurityEx | 
 | SeAuditHardLinkCreation | 
 | SeAuditHardLinkCreationWithTransaction | 
 | eAuditTransactionStateChange | 
 | SeAuditingAnyFileEventsWithContext | 
 | SeAuditingFileEvents | 
 | SeAuditingFileEventsWithContext | 
 | SeAuditingFileOrGlobalEvents | 
 | SeAuditingHardLinkEvents | 
 | SeAuditingHardLinkEventsWithContext | 
 | SeAuditingWithTokenForSubcategory | 
 | SeCaptureSecurityDescriptor | 
 | SeCaptureSubjectContext | 
 | SeCaptureSubjectContextEx | 
 | SeCloseObjectAuditAlarm | 
 | SeCloseObjectAuditAlarmForNonObObject | 
 | SeComputeAutoInheritByObjectType | 
 | SeCreateAccessState | 
 | SeCreateAccessStateEx | 
 | SeCreateClientSecurity | 
 | SeCreateClientSecurityFromSubjectContext | 
 | SeDeassignSecurity | 
 | SeDeleteAccessState | 
 | SeDeleteObjectAuditAlarm | 
 | SeDeleteObjectAuditAlarmWithTransaction | 
 | SeExamineSacl | 
 | SeExports DATA | 
 | SeFilterToken | 
 | SeFreePrivileges | 
 | SeGetLinkedToken | 
 | SeImpersonateClient | 
 | SeImpersonateClientEx | 
 | SeLocateProcessImageName | 
 | SeLockSubjectContext | 
 | SeMarkLogonSessionForTerminationNotification | 
 | SeOpenObjectAuditAlarm | 
 | SeOpenObjectAuditAlarmForNonObObject | 
 | SeOpenObjectAuditAlarmWithTransaction | 
 | SeOpenObjectForDeleteAuditAlarm | 
 | SeOpenObjectForDeleteAuditAlarmWithTransaction | 
 | SePrivilegeCheck | 
 | SePrivilegeObjectAuditAlarm | 
 | SePublicDefaultDacl DATA | 
 | SeQueryAuthenticationIdToken | 
 | SeQueryInformationToken | 
 | SeQuerySecurityAttributesToken | 
 | SeQuerySecurityDescriptorInfo | 
 | SeQuerySessionIdToken | 
 | SeRegisterLogonSessionTerminatedRoutine | 
 | SeReleaseSecurityDescriptor | 
 | SeReleaseSubjectContext | 
 | SeReportSecurityEvent | 
 | SeReportSecurityEventWithSubCategory | 
 | SeSetAccessStateGenericMapping | 
 | SeSetAuditParameter | 
 | SeSetSecurityAttributesToken | 
 | SeSetSecurityDescriptorInfo | 
 | SeSetSecurityDescriptorInfoEx | 
 | SeSinglePrivilegeCheck | 
 | SeSrpAccessCheck | 
 | SeSystemDefaultDacl DATA | 
 | SeTokenImpersonationLevel | 
 | SeTokenIsAdmin | 
 | SeTokenIsRestricted | 
 | SeTokenIsWriteRestricted | 
 | SeTokenObjectType DATA | 
 | SeTokenType | 
 | SeUnlockSubjectContext | 
 | SeUnregisterLogonSessionTerminatedRoutine | 
 | SeValidSecurityDescriptor | 
 | TmCancelPropagationRequest | 
 | TmCommitComplete | 
 | TmCommitEnlistment | 
 | TmCommitTransaction | 
 | TmCreateEnlistment | 
 | TmCurrentTransaction | 
 | TmDereferenceEnlistmentKey | 
 | TmEnableCallbacks | 
 | TmEndPropagationRequest | 
 | TmEnlistmentObjectType DATA | 
 | TmFreezeTransactions | 
 | TmGetTransactionId | 
 | TmInitSystem | 
 | TmInitSystemPhase2 | 
 | TmInitializeResourceManager | 
 | TmInitializeTransaction | 
 | TmIsTransactionActive | 
 | TmPrePrepareComplete | 
 | TmPrePrepareEnlistment | 
 | TmPrepareComplete | 
 | TmPrepareEnlistment | 
 | TmPropagationComplete | 
 | TmPropagationFailed | 
 | TmReadOnlyEnlistment | 
 | TmRecoverEnlistment | 
 | TmRecoverResourceManager | 
 | TmRecoverTransactionManager | 
 | TmReferenceEnlistmentKey | 
 | TmRequestOutcomeEnlistment | 
 | TmResourceManagerObjectType DATA | 
 | TmRollbackComplete | 
 | TmRollbackEnlistment | 
 | TmRollbackTransaction | 
 | TmSetCurrentTransaction | 
 | TmThawTransactions | 
 | TmTransactionManagerObjectType DATA | 
 | TmTransactionObjectType DATA | 
 | TmpIsKTMCommitCoordinator | 
 | VerSetConditionMask | 
 | VfFailDeviceNode | 
 | VfFailDriver | 
 | VfFailSystemBIOS | 
 | VfIsVerificationEnabled | 
 | WmiFlushTrace | 
 | WheaAddErrorSource | 
 | WheaAttemptPhysicalPageOffline | 
 | WheaConfigureErrorSource | 
 | WheaDeferredRecoveryService | 
 | WheaGetErrorSource | 
 | WheaInitializeDeferredRecoveryObject | 
 | WheaInitializeRecordHeader | 
 | WheaReportHwError | 
 | WheaRequestDeferredRecovery | 
 | WmiGetClock | 
 | WmiQueryTrace | 
 | WmiQueryTraceInformation | 
 | WmiStartTrace | 
 | WmiStopTrace | 
 | WmiTraceFastEvent | 
 | WmiTraceMessage | 
 | WmiTraceMessageVa | 
 | WmiUpdateTrace | 
 | XIPDispatch | 
 | ZwAccessCheckAndAuditAlarm | 
 | ZwAddBootEntry | 
 | ZwAddDriverEntry | 
 | ZwAdjustPrivilegesToken | 
 | ZwAlertThread | 
 | ZwAllocateLocallyUniqueId | 
 | ZwAllocateVirtualMemory | 
 | ZwAlpcAcceptConnectPort | 
 | ZwAlpcCancelMessage | 
 | ZwAlpcConnectPort | 
 | ZwAlpcCreatePort | 
 | ZwAlpcCreatePortSection | 
 | ZwAlpcCreateResourceReserve | 
 | ZwAlpcCreateSectionView | 
 | ZwAlpcCreateSecurityContext | 
 | ZwAlpcDeletePortSection | 
 | ZwAlpcDeleteResourceReserve | 
 | ZwAlpcDeleteSectionView | 
 | ZwAlpcDeleteSecurityContext | 
 | ZwAlpcDisconnectPort | 
 | ZwAlpcQueryInformation | 
 | ZwAlpcSendWaitReceivePort | 
 | ZwAlpcSetInformation | 
 | ZwAssignProcessToJobObject | 
 | ZwCancelIoFile | 
 | ZwCancelTimer | 
 | ZwClearEvent | 
 | ZwClose | 
 | ZwCloseObjectAuditAlarm | 
 | ZwCommitComplete | 
 | ZwCommitEnlistment | 
 | ZwCommitTransaction | 
 | ZwConnectPort | 
 | ZwCreateDirectoryObject | 
 | ZwCreateEnlistment | 
 | ZwCreateEvent | 
 | ZwCreateFile | 
 | ZwCreateIoCompletion | 
 | ZwCreateJobObject | 
 | ZwCreateKey | 
 | ZwCreateKeyTransacted | 
 | ZwCreateResourceManager | 
 | ZwCreateSection | 
 | ZwCreateSymbolicLinkObject | 
 | ZwCreateTimer | 
 | ZwCreateTransaction | 
 | ZwCreateTransactionManager | 
 | ZwDeleteBootEntry | 
 | ZwDeleteDriverEntry | 
 | ZwDeleteFile | 
 | ZwDeleteKey | 
 | ZwDeleteValueKey | 
 | ZwDeviceIoControlFile | 
 | ZwDisplayString | 
 | ZwDuplicateObject | 
 | ZwDuplicateToken | 
 | ZwEnumerateBootEntries | 
 | ZwEnumerateDriverEntries | 
 | ZwEnumerateKey | 
 | ZwEnumerateTransactionObject | 
 | ZwEnumerateValueKey | 
 | ZwFlushBuffersFile | 
 | ZwFlushInstructionCache | 
 | ZwFlushKey | 
 | ZwFlushVirtualMemory | 
 | ZwFreeVirtualMemory | 
 | ZwFsControlFile | 
 | ZwGetNotificationResourceManager | 
 | ZwImpersonateAnonymousToken | 
 | ZwInitiatePowerAction | 
 | ZwIsProcessInJob | 
 | ZwLoadDriver | 
 | ZwLoadKey | 
 | ZwLoadKeyEx | 
 | ZwLockFile | 
 | ZwLockProductActivationKeys | 
 | ZwMakeTemporaryObject | 
 | ZwMapViewOfSection | 
 | ZwModifyBootEntry | 
 | ZwModifyDriverEntry | 
 | ZwNotifyChangeKey | 
 | ZwNotifyChangeSession | 
 | ZwOpenDirectoryObject | 
 | ZwOpenEnlistment | 
 | ZwOpenEvent | 
 | ZwOpenFile | 
 | ZwOpenJobObject | 
 | ZwOpenKey | 
 | ZwOpenKeyEx | 
 | ZwOpenKeyTransacted | 
 | ZwOpenKeyTransactedEx | 
 | ZwOpenProcess | 
 | ZwOpenProcessToken | 
 | ZwOpenProcessTokenEx | 
 | ZwOpenResourceManager | 
 | ZwOpenSection | 
 | ZwOpenSession | 
 | ZwOpenSymbolicLinkObject | 
 | ZwOpenThread | 
 | ZwOpenThreadToken | 
 | ZwOpenThreadTokenEx | 
 | ZwOpenTimer | 
 | ZwOpenTransaction | 
 | ZwOpenTransactionManager | 
 | ZwPowerInformation | 
 | ZwPrePrepareComplete | 
 | ZwPrePrepareEnlistment | 
 | ZwPrepareComplete | 
 | ZwPrepareEnlistment | 
 | ZwPropagationComplete | 
 | ZwPropagationFailed | 
 | ZwPulseEvent | 
 | ZwQueryBootEntryOrder | 
 | ZwQueryBootOptions | 
 | ZwQueryDefaultLocale | 
 | ZwQueryDefaultUILanguage | 
 | ZwQueryDirectoryFile | 
 | ZwQueryDirectoryObject | 
 | ZwQueryDriverEntryOrder | 
 | ZwQueryEaFile | 
 | ZwQueryFullAttributesFile | 
 | ZwQueryInformationEnlistment | 
 | ZwQueryInformationFile | 
 | ZwQueryInformationJobObject | 
 | ZwQueryInformationProcess | 
 | ZwQueryInformationResourceManager | 
 | ZwQueryInformationThread | 
 | ZwQueryInformationToken | 
 | ZwQueryInformationTransaction | 
 | ZwQueryInformationTransactionManager | 
 | ZwQueryInstallUILanguage | 
 | ZwQueryKey | 
 | ZwQueryLicenseValue | 
 | ZwQueryObject | 
 | ZwQueryQuotaInformationFile | 
 | ZwQuerySection | 
 | ZwQuerySecurityAttributesToken | 
 | ZwQuerySecurityObject | 
 | ZwQuerySymbolicLinkObject | 
 | ZwQuerySystemInformation | 
 | ZwQueryValueKey | 
 | ZwQueryVirtualMemory | 
 | ZwQueryVolumeInformationFile | 
 | ZwReadFile | 
 | ZwReadOnlyEnlistment | 
 | ZwRecoverEnlistment | 
 | ZwRecoverResourceManager | 
 | ZwRecoverTransactionManager | 
 | ZwRemoveIoCompletion | 
 | ZwRemoveIoCompletionEx | 
 | ZwReplaceKey | 
 | ZwRequestPort | 
 | ZwRequestWaitReplyPort | 
 | ZwResetEvent | 
 | ZwRestoreKey | 
 | ZwRollbackComplete | 
 | ZwRollbackEnlistment | 
 | ZwRollbackTransaction | 
 | ZwSaveKey | 
 | ZwSaveKeyEx | 
 | ZwSecureConnectPort | 
 | ZwSetBootEntryOrder | 
 | ZwSetBootOptions | 
 | ZwSetDefaultLocale | 
 | ZwSetDefaultUILanguage | 
 | ZwSetDriverEntryOrder | 
 | ZwSetEaFile | 
 | ZwSetEvent | 
 | ZwSetInformationEnlistment | 
 | ZwSetInformationFile | 
 | ZwSetInformationJobObject | 
 | ZwSetInformationObject | 
 | ZwSetInformationProcess | 
 | ZwSetInformationResourceManager | 
 | ZwSetInformationThread | 
 | ZwSetInformationToken | 
 | ZwSetInformationTransaction | 
 | ZwSetQuotaInformationFile | 
 | ZwSetSecurityObject | 
 | ZwSetSystemInformation | 
 | ZwSetSystemTime | 
 | ZwSetTimer | 
 | ZwSetTimerEx | 
 | ZwSetValueKey | 
 | ZwSetVolumeInformationFile | 
 | ZwTerminateJobObject | 
 | ZwTerminateProcess | 
 | ZwTraceEvent | 
 | ZwTranslateFilePath | 
 | ZwUnloadDriver | 
 | ZwUnloadKey | 
 | ZwUnloadKeyEx | 
 | ZwUnlockFile | 
 | ZwUnmapViewOfSection | 
 | ZwWaitForMultipleObjects | 
 | ZwWaitForSingleObject | 
 | ZwWriteFile | 
 | ZwYieldExecution | 
 | __C_specific_handler | 
 | ;__chkstk | 
 | __misaligned_access | 
 | _i64toa_s | 
 | _i64tow_s | 
 | _itoa | 
 | _itoa_s | 
 | _itow | 
 | _itow_s | 
 | _local_unwind | 
 | _ltoa_s | 
 | _ltow_s | 
 | _makepath_s | 
 | _purecall | 
 | _setjmp | 
 | _setjmpex | 
 | _snprintf | 
 | _snprintf_s | 
 | _snscanf_s | 
 | _snwprintf | 
 | _snwprintf_s | 
 | _snwscanf_s | 
 | _splitpath_s | 
 | _stricmp | 
 | _strlwr | 
 | strlwr == _strlwr | 
 | _strnicmp | 
 | _strnset | 
 | _strnset_s | 
 | _strrev | 
 | _strset | 
 | _strset_s | 
 | _strtoui64 | 
 | _strupr | 
 | _swprintf | 
 | _ui64toa_s | 
 | _ui64tow_s | 
 | _ultoa_s | 
 | _ultow_s | 
 | _vsnprintf | 
 | _vsnprintf_s | 
 | _vsnwprintf | 
 | _vsnwprintf_s | 
 | _vswprintf | 
 | _wcsicmp | 
 | _wcslwr | 
 | wcslwr == _wcslwr | 
 | _wcsnicmp | 
 | _wcsnset | 
 | _wcsnset_s | 
 | _wcsrev | 
 | _wcsset_s | 
 | _wcsupr | 
 | _wmakepath_s | 
 | _wsplitpath_s | 
 | _wtoi | 
 | _wtol | 
 | atoi | 
 | atol | 
 | bsearch | 
 | isdigit | 
 | islower | 
 | isprint | 
 | isspace | 
 | isupper | 
 | isxdigit | 
 | longjmp | 
 | mbstowcs | 
 | mbtowc | 
 | memchr | 
 | memcmp | 
 | memcpy | 
 | memcpy_s | 
 | memmove | 
 | memmove_s | 
 | memset | 
 | psMUITest DATA | 
 | qsort | 
 | rand | 
 | sprintf | 
 | sprintf_s | 
 | srand | 
 | sscanf_s | 
 | strcat | 
 | strcat_s | 
 | strchr | 
 | strcmp | 
 | strcpy | 
 | strcpy_s | 
 | strlen | 
 | strncat | 
 | strncat_s | 
 | strncmp | 
 | strncpy | 
 | strncpy_s | 
 | strnlen | 
 | strrchr | 
 | strspn | 
 | strstr | 
 | strtok_s | 
 | swprintf | 
 | swprintf_s | 
 | swscanf_s | 
 | tolower | 
 | toupper | 
 | towlower | 
 | towupper | 
 | vDbgPrintEx | 
 | vDbgPrintExWithPrefix | 
 | vsprintf | 
 | vsprintf_s | 
 | vswprintf_s | 
 | wcscat | 
 | wcscat_s | 
 | wcschr | 
 | wcscmp | 
 | wcscpy | 
 | wcscpy_s | 
 | wcscspn | 
 | wcslen | 
 | wcsncat | 
 | wcsncat_s | 
 | wcsncmp | 
 | wcsncpy | 
 | wcsncpy_s | 
 | wcsnlen | 
 | wcsrchr | 
 | wcsspn | 
 | wcsstr | 
 | wcstombs | 
 | wcstoul | 
 | wctomb |