_vscprintf |
|
|
ApiSetQueryApiSetPresenceEx |
|
|
DbgBreakPoint |
wdm.h |
Vanara.PInvoke.NtDll.DbgBreakPoint |
DbgPrint |
wdm.h |
Vanara.PInvoke.NtDll.DbgPrint |
DbgPrintEx |
wdm.h |
Vanara.PInvoke.NtDll.DbgPrintEx |
DbgPrompt |
ntddk.h |
Vanara.PInvoke.NtDll.DbgPrompt |
EtwCheckCoverage |
|
|
LdrCallEnclave |
|
|
LdrControlFlowGuardEnforced |
|
|
LdrCreateEnclave |
|
|
LdrDeleteEnclave |
|
|
LdrFastFailInLoaderCallout |
ntldr.h |
Vanara.PInvoke.NtDll.LdrFastFailInLoaderCallout |
LdrHotPatchNotify |
|
|
LdrInitializeEnclave |
|
|
LdrIsModuleSxsRedirected |
|
|
LdrLoadEnclaveModule |
|
|
LdrRegisterDllNotification |
|
Vanara.PInvoke.NtDll.LdrRegisterDllNotification |
LdrUnregisterDllNotification |
ntldr.h |
Vanara.PInvoke.NtDll.LdrUnregisterDllNotification |
MicrosoftTelemetryAssertTriggeredUM |
|
|
NtAcquireCrossVmMutant |
|
|
NtAllocateUserPhysicalPagesEx |
|
|
NtAllocateVirtualMemory |
ntifs.h |
Vanara.PInvoke.NtDll.NtAllocateVirtualMemory |
NtAllocateVirtualMemoryEx |
|
|
NtCallEnclave |
|
|
NtChangeProcessState |
|
|
NtChangeThreadState |
|
|
NtClose |
winternl.h |
Vanara.PInvoke.NtDll.NtClose |
NtCommitComplete |
wdm.h |
Vanara.PInvoke.NtDll.NtCommitComplete |
NtCommitEnlistment |
wdm.h |
Vanara.PInvoke.NtDll.NtCommitEnlistment |
NtCommitTransaction |
wdm.h |
Vanara.PInvoke.NtDll.NtCommitTransaction |
NtCompareTokens |
Ntseapi.h |
Vanara.PInvoke.NtDll.NtCompareTokens |
NtContinueEx |
|
|
NtCopyFileChunk |
|
|
NtCreateCpuPartition |
|
|
NtCreateCrossVmEvent |
|
|
NtCreateCrossVmMutant |
|
|
NtCreateEnlistment |
wdm.h |
Vanara.PInvoke.NtDll.NtCreateEnlistment |
NtCreateFile |
|
|
NtCreateFileA |
ntifs.h |
Vanara.PInvoke.NtDll.NtCreateFile |
NtCreateFileW |
ntifs.h |
Vanara.PInvoke.NtDll.NtCreateFile |
NtCreateIoRing |
|
|
NtCreateProcess |
|
Vanara.PInvoke.NtDll.NtCreateProcess |
NtCreateProcessEx |
|
Vanara.PInvoke.NtDll.NtCreateProcessEx |
NtCreateProcessStateChange |
|
|
NtCreateResourceManager |
wdm.h |
Vanara.PInvoke.NtDll.NtCreateResourceManager |
NtCreateSection |
|
|
NtCreateSectionA |
ntifs.h |
Vanara.PInvoke.NtDll.NtCreateSection |
NtCreateSectionEx |
|
|
NtCreateSectionW |
ntifs.h |
Vanara.PInvoke.NtDll.NtCreateSection |
NtCreateThreadStateChange |
|
|
NtCreateTransaction |
|
|
NtCreateTransactionA |
wdm.h |
Vanara.PInvoke.NtDll.NtCreateTransaction |
NtCreateTransactionManager |
|
|
NtCreateTransactionManagerA |
wdm.h |
Vanara.PInvoke.NtDll.NtCreateTransactionManager |
NtCreateTransactionManagerW |
wdm.h |
Vanara.PInvoke.NtDll.NtCreateTransactionManager |
NtCreateTransactionW |
wdm.h |
Vanara.PInvoke.NtDll.NtCreateTransaction |
NtDeviceIoControlFile |
|
|
NtDirectGraphicsCall |
|
|
NtDuplicateToken |
|
|
NtEnumerateTransactionObject |
|
|
NtFlushBuffersFileEx |
|
|
NtFreeVirtualMemory |
|
|
NtFsControlFile |
|
|
NtGetCurrentProcessorNumber |
|
|
NtGetNotificationResourceManager |
|
|
NtLoadKey3 |
|
|
NtLockFile |
|
|
NtManageHotPatch |
|
|
NtMapViewOfSectionEx |
|
|
NtNotifyChangeDirectoryFileEx |
|
|
NtNotifyChangeMultipleKeys |
|
|
NtOpenCpuPartition |
|
|
NtOpenDirectoryObject |
|
|
NtOpenEnlistment |
|
|
NtOpenFile |
|
|
NtOpenProcess |
|
|
NtOpenProcessTokenEx |
|
|
NtOpenResourceManager |
|
|
NtOpenSymbolicLinkObject |
|
|
NtOpenThread |
|
|
NtOpenThreadTokenEx |
|
|
NtOpenTransaction |
|
|
NtOpenTransactionManager |
|
|
NtPowerInformation |
|
|
NtPrepareComplete |
|
|
NtPrepareEnlistment |
|
|
NtPrePrepareComplete |
|
|
NtPrePrepareEnlistment |
|
|
NtProtectVirtualMemory |
|
|
NtPssCaptureVaSpaceBulk |
|
|
NtQueryAttributesFile |
|
|
NtQueryDirectoryFile |
|
|
NtQueryDirectoryFileEx |
|
|
NtQueryInformationCpuPartition |
|
|
NtQueryInformationEnlistment |
|
|
NtQueryInformationFile |
|
|
NtQueryInformationProcess |
winternl.h |
Vanara.PInvoke.NtDll.NtQueryInformationProcess |
NtQueryInformationResourceManager |
|
|
NtQueryInformationThread |
|
|
NtQueryInformationToken |
|
|
NtQueryInformationTransaction |
|
|
NtQueryInformationTransactionManager |
|
|
NtQueryIoRingCapabilities |
|
|
NtQueryKey |
wdm.h |
Vanara.PInvoke.NtDll.NtQueryKey |
NtQueryMultipleValueKey |
|
|
NtQueryObject |
|
|
NtQueryPerformanceCounter |
|
|
NtQueryQuotaInformationFile |
|
|
NtQuerySecurityObject |
|
|
NtQuerySymbolicLinkObject |
|
|
NtQuerySystemInformation |
winternl.h |
Vanara.PInvoke.NtDll.NtQuerySystemInformation |
NtQuerySystemTime |
|
|
NtQueryVirtualMemory |
|
|
NtQueryVolumeInformationFile |
|
|
NtQueueApcThreadEx2 |
|
|
NtReadFile |
|
|
NtReadOnlyEnlistment |
|
|
NtReadVirtualMemoryEx |
|
|
NtRecoverEnlistment |
|
|
NtRecoverResourceManager |
|
|
NtRecoverTransactionManager |
|
|
NtRenameKey |
|
|
NtRenameTransactionManager |
|
|
NtRollbackComplete |
|
|
NtRollbackEnlistment |
|
|
NtRollbackTransaction |
|
|
NtRollforwardTransactionManager |
|
|
NtSetInformationCpuPartition |
|
|
NtSetInformationEnlistment |
|
|
NtSetInformationFile |
|
|
NtSetInformationIoRing |
|
|
NtSetInformationKey |
|
|
NtSetInformationResourceManager |
|
|
NtSetInformationThread |
|
|
NtSetInformationToken |
|
|
NtSetInformationTransaction |
|
|
NtSetInformationTransactionManager |
|
|
NtSetQuotaInformationFile |
|
|
NtSetSecurityObject |
|
|
NtSinglePhaseReject |
|
|
NtSubmitIoRing |
|
|
NtTerminateEnclave |
|
|
NtUnlockFile |
|
|
NtUnmapViewOfSection |
|
|
NtWaitForSingleObject |
|
|
NtWow64QueryInformationProcess64 |
winternl.h |
Vanara.PInvoke.NtDll.NtWow64QueryInformationProcess64 |
NtWow64ReadVirtualMemory64 |
winternl.h |
Vanara.PInvoke.NtDll.NtWow64ReadVirtualMemory64 |
NtWriteFile |
|
|
RtlAbsoluteToSelfRelativeSD |
|
|
RtlAddAccessAllowedAce |
|
|
RtlAddAccessAllowedAceEx |
|
|
RtlAddAce |
|
|
RtlAddFunctionTable |
|
|
RtlAddGrowableFunctionTable |
|
|
RtlAllocateAndInitializeSid |
|
|
RtlAllocateHeap |
ntifs.h |
Vanara.PInvoke.NtDll.RtlAllocateHeap |
RtlAnsiStringToUnicodeString |
|
|
RtlAppendStringToString |
|
|
RtlAppendUnicodeStringToString |
|
|
RtlAppendUnicodeToString |
|
|
RtlAreBitsClear |
|
|
RtlAreBitsClearEx |
|
|
RtlAreBitsSet |
|
|
RtlCallEnclave |
|
|
RtlCallEnclaveReturn |
|
|
RtlCapabilityCheckForSingleSessionSku |
|
|
RtlCaptureContext |
|
|
RtlCaptureContext2 |
|
|
RtlCaptureStackBackTrace |
|
|
RtlCharToInteger |
|
|
RtlCheckRegistryKey |
|
|
RtlCheckSystemBootStatusIntegrity |
|
|
RtlClearAllBitsEx |
|
|
RtlClearBitEx |
|
|
RtlClearBits |
|
|
RtlClearBitsEx |
|
|
RtlCmEncodeMemIoResource |
|
|
RtlCompareExchangePointerMapping |
|
|
RtlCompareExchangePropertyStore |
|
|
RtlCompareMemory |
|
|
RtlCompareMemoryUlong |
|
|
RtlCompareString |
|
|
RtlCompareUnicodeString |
|
|
RtlCompressBuffer |
|
|
RtlConstructCrossVmEventPath |
|
|
RtlConstructCrossVmMutexPath |
|
|
RtlConvertHostPerfCounterToPerfCounter |
|
|
RtlConvertSidToUnicodeString |
|
|
RtlCopyLuid |
|
|
RtlCopyMemoryNonTemporal |
|
|
RtlCopySid |
|
|
RtlCopyString |
|
|
RtlCopyUnicodeString |
|
|
RtlCreateAcl |
|
|
RtlCreateHeap |
ntifs.h |
Vanara.PInvoke.NtDll.RtlCreateHeap |
RtlCreateProcessParametersWithTemplate |
|
|
RtlCreateRegistryKey |
|
|
RtlCreateSecurityDescriptor |
|
|
RtlCreateSystemVolumeInformationFolder |
|
|
RtlCreateUnicodeString |
|
|
RtlCreateUserFiberShadowStack |
|
|
RtlCustomCPToUnicodeN |
|
|
RtlDecompressBuffer |
|
|
RtlDecompressBufferEx |
|
|
RtlDecompressFragment |
|
|
RtlDelayExecution |
|
|
RtlDelete |
|
|
RtlDeleteAce |
|
|
RtlDeleteElementGenericTable |
|
|
RtlDeleteElementGenericTableAvl |
|
|
RtlDeleteFunctionTable |
|
|
RtlDeleteGrowableFunctionTable |
|
|
RtlDeleteNoSplay |
|
|
RtlDeleteRegistryValue |
|
|
RtlDestroyHeap |
ntifs.h |
Vanara.PInvoke.NtDll.RtlDestroyHeap |
RtlDisownModuleHeapAllocation |
|
|
RtlDoesNameContainWildCards |
|
|
RtlDosLongPathNameToNtPathName_U_WithStatus |
|
|
RtlDosLongPathNameToRelativeNtPathName_U_WithStatus |
|
|
RtlDowncaseUnicodeString |
|
|
RtlDrainNonVolatileFlush |
|
|
RtlEnclaveCallDispatch |
|
|
RtlEnclaveCallDispatchReturn |
|
|
RtlEnumerateGenericTable |
|
|
RtlEnumerateGenericTableAvl |
|
|
RtlEnumerateGenericTableLikeADirectory |
|
|
RtlEnumerateGenericTableWithoutSplaying |
|
|
RtlEnumerateGenericTableWithoutSplayingAvl |
|
|
RtlEqualPrefixSid |
|
|
RtlEqualSid |
|
|
RtlEqualUnicodeString |
|
|
RtlEthernetAddressToString |
|
|
RtlEthernetStringToAddress |
|
|
RtlExtendCorrelationVector |
|
|
RtlFillMemoryNonTemporal |
|
|
RtlFillNonVolatileMemory |
|
|
RtlFindClearBits |
|
|
RtlFindClearBitsAndSet |
|
|
RtlFindClearBitsAndSetEx |
|
|
RtlFindClearBitsEx |
|
|
RtlFindClearRuns |
|
|
RtlFindLastBackwardRunClear |
|
|
RtlFindLeastSignificantBit |
|
|
RtlFindLongestRunClear |
|
|
RtlFindMostSignificantBit |
|
|
RtlFindNextForwardRunClear |
|
|
RtlFindSetBits |
|
|
RtlFindSetBitsAndClear |
|
|
RtlFindSetBitsAndClearEx |
|
|
RtlFindSetBitsEx |
|
|
RtlFirstEntrySList |
|
|
RtlFlsGetValue |
|
|
RtlFlsSetValue |
|
|
RtlFlushNonVolatileMemory |
|
|
RtlFlushNonVolatileMemoryRanges |
|
|
RtlFreeAnsiString |
|
|
RtlFreeHeap |
ntifs.h |
Vanara.PInvoke.NtDll.RtlFreeHeap |
RtlFreeNonVolatileToken |
|
|
RtlFreeOemString |
|
|
RtlFreeUnicodeString |
|
|
RtlFreeUserFiberShadowStack |
|
|
RtlFreeUTF8String |
|
|
RtlGenerate8dot3Name |
|
|
RtlGetAce |
|
|
RtlGetCompressionWorkSpaceSize |
|
|
RtlGetDaclSecurityDescriptor |
|
|
RtlGetElementGenericTable |
|
|
RtlGetElementGenericTableAvl |
|
|
RtlGetEnabledExtendedFeatures |
|
|
RtlGetExtendedContextLength2 |
|
|
RtlGetFunctionTableListHead |
|
|
RtlGetGroupSecurityDescriptor |
|
|
RtlGetImageFileMachines |
|
|
RtlGetMultiTimePrecise |
|
|
RtlGetNonVolatileToken |
|
|
RtlGetOwnerSecurityDescriptor |
|
|
RtlGetPersistedStateLocation |
|
|
RtlGetReturnAddressHijackTarget |
|
|
RtlGetSaclSecurityDescriptor |
|
|
RtlGetSystemBootStatus |
|
|
RtlGetSystemBootStatusEx |
|
|
RtlGetSystemGlobalData |
|
|
RtlGetSystemTimeAndBias |
|
|
RtlGetUnloadEventTrace |
|
|
RtlGetUnloadEventTraceEx |
|
|
RtlGetVersion |
|
|
RtlGrowFunctionTable |
|
|
RtlGUIDFromString |
|
|
RtlHashUnicodeString |
|
|
RtlIncrementCorrelationVector |
|
|
RtlInitAnsiString |
|
|
RtlInitCodePageTable |
|
|
RtlInitializeBitMap |
|
|
RtlInitializeBitMapEx |
|
|
RtlInitializeCorrelationVector |
|
|
RtlInitializeExtendedContext2 |
|
|
RtlInitializeGenericTable |
|
|
RtlInitializeGenericTableAvl |
|
|
RtlInitializeSid |
|
|
RtlInitializeSidEx |
|
|
RtlInitializeSListHead |
|
|
RtlInitString |
|
|
RtlInitStringEx |
|
|
RtlInitUnicodeString |
winternl.h |
Vanara.PInvoke.NtDll.RtlInitUnicodeString |
RtlInitUTF8String |
|
|
RtlInitUTF8StringEx |
|
|
RtlInsertElementGenericTable |
|
|
RtlInsertElementGenericTableAvl |
|
|
RtlInsertElementGenericTableFullAvl |
|
|
RtlInstallFunctionTableCallback |
|
|
RtlInt64ToUnicodeString |
|
|
RtlIntegerToUnicodeString |
|
|
RtlInterlockedClearBitRunEx |
|
|
RtlInterlockedFlushSList |
|
|
RtlInterlockedPushEntrySList |
|
|
RtlIoDecodeMemIoResource |
|
|
RtlIoEncodeMemIoResource |
|
|
RtlIpv4AddressToStringA |
|
|
RtlIpv4AddressToStringExW |
|
|
RtlIpv4StringToAddress |
|
|
RtlIpv4StringToAddressEx |
|
|
RtlIpv6AddressToString |
|
|
RtlIpv6AddressToStringExW |
|
|
RtlIpv6StringToAddress |
|
|
RtlIpv6StringToAddressExW |
|
|
RtlIsApiSetImplemented |
|
|
RtlIsCloudFilesPlaceholder |
|
|
RtlIsCurrentProcess |
|
|
RtlIsCurrentThread |
|
|
RtlIsEcCode |
|
|
RtlIsEnclaveFeaturePresent |
|
|
RtlIsGenericTableEmpty |
|
|
RtlIsGenericTableEmptyAvl |
|
|
RtlIsNameInExpression |
|
|
RtlIsNameInUnUpcasedExpression |
|
|
RtlIsNameLegalDOS8Dot3 |
|
|
RtlIsPartialPlaceholder |
|
|
RtlIsPartialPlaceholderFileHandle |
|
|
RtlIsPartialPlaceholderFileInfo |
|
|
RtlIsStateSeparationEnabled |
|
|
RtlIsValidLocaleName |
|
|
RtlIsZeroMemory |
|
|
RtlLengthCurrentClearRunBackwardEx |
|
|
RtlLengthCurrentClearRunForwardEx |
|
|
RtlLengthSecurityDescriptor |
|
|
RtlLengthSid |
|
|
RtlLocalTimeToSystemTime |
|
|
RtlLookupElementGenericTable |
|
|
RtlLookupElementGenericTableAvl |
|
|
RtlLookupElementGenericTableFullAvl |
|
|
RtlLookupFirstMatchingElementGenericTableAvl |
|
|
RtlLookupFunctionEntry |
|
|
RtlMapGenericMask |
|
|
RtlMoveMemory |
|
|
RtlMultiByteToUnicodeN |
|
|
RtlMultiByteToUnicodeSize |
|
|
RtlNormalizeSecurityDescriptor |
|
|
RtlNotifyFeatureUsage |
|
|
RtlNtStatusToDosError |
|
|
RtlNumberGenericTableElements |
|
|
RtlNumberGenericTableElementsAvl |
|
|
RtlNumberOfClearBits |
|
|
RtlNumberOfClearBitsEx |
|
|
RtlNumberOfSetBits |
|
|
RtlNumberOfSetBitsEx |
|
|
RtlNumberOfSetBitsUlongPtr |
|
|
RtlOemStringToUnicodeString |
|
|
RtlOemToUnicodeN |
|
|
RtlOpenCrossProcessEmulatorWorkConnection |
|
|
RtlOverwriteFeatureConfigurationBuffer |
|
|
RtlPcToFileHeader |
|
|
RtlPrefixUnicodeString |
|
|
RtlpTimeFieldsToTime |
|
|
RtlpTimeToTimeFields |
|
|
RtlpWow64CtxFromAmd64 |
|
|
RtlpWow64GetContextOnAmd64 |
|
|
RtlpWow64SetContextOnAmd64 |
|
|
RtlQueryAllFeatureConfigurations |
|
|
RtlQueryDepthSList |
|
|
RtlQueryFeatureConfiguration |
|
|
RtlQueryFeatureConfigurationChangeStamp |
|
|
RtlQueryFeatureUsageNotificationSubscriptions |
|
|
RtlQueryImageMitigationPolicy |
|
|
RtlQueryPointerMapping |
|
|
RtlQueryProcessPlaceholderCompatibilityMode |
|
|
RtlQueryPropertyStore |
|
|
RtlQueryRegistryValues |
|
|
RtlQueryRegistryValueWithFallback |
|
|
RtlQueryThreadPlaceholderCompatibilityMode |
|
|
RtlQueryTokenHostIdAsUlong64 |
|
|
RtlRaiseCustomSystemEventTrigger |
|
|
RtlRaiseException |
|
|
RtlRaiseExceptionForReturnAddressHijack |
|
|
RtlRaiseNoncontinuableException |
|
|
RtlRandom |
|
|
RtlRandomEx |
|
|
RtlRealPredecessor |
|
|
RtlRealSuccessor |
|
|
RtlRegisterFeatureConfigurationChangeNotification |
|
|
RtlRemovePointerMapping |
|
|
RtlRemovePropertyStore |
|
|
RtlRestoreContext |
|
|
RtlRestoreSystemBootStatusDefaults |
|
|
RtlRestoreThreadPreferredUILanguages |
|
|
RtlRunOnceBeginInitialize |
|
|
RtlRunOnceComplete |
|
|
RtlRunOnceExecuteOnce |
|
|
RtlRunOnceInitialize |
|
|
RtlSecondsSince1970ToTime |
|
|
RtlSecondsSince1980ToTime |
|
|
RtlSelfRelativeToAbsoluteSD |
|
|
RtlSetAllBits |
|
|
RtlSetAllBitsEx |
|
|
RtlSetBitEx |
|
|
RtlSetBits |
|
|
RtlSetBitsEx |
|
|
RtlSetDaclSecurityDescriptor |
|
|
RtlSetFeatureConfigurations |
|
|
RtlSetGroupSecurityDescriptor |
|
|
RtlSetImageMitigationPolicy |
|
|
RtlSetOwnerSecurityDescriptor |
|
|
RtlSetProcessPlaceholderCompatibilityMode |
|
|
RtlSetProxiedProcessId |
|
|
RtlSetSystemBootStatus |
|
|
RtlSetSystemBootStatusEx |
|
|
RtlSetThreadPlaceholderCompatibilityMode |
|
|
RtlSetThreadPreferredUILanguages2 |
|
|
RtlSplay |
|
|
RtlStringFromGUID |
|
|
RtlSubAuthorityCountSid |
|
|
RtlSubAuthoritySid |
|
|
RtlSubscribeForFeatureUsageNotification |
|
|
RtlSubtreePredecessor |
|
|
RtlSubtreeSuccessor |
|
|
RtlTestBitEx |
|
|
RtlTimeFieldsToTime |
|
|
RtlTimeToSecondsSince1970 |
|
|
RtlTimeToSecondsSince1980 |
|
|
RtlTimeToTimeFields |
|
|
RtlUdiv128 |
|
|
RtlUnicodeStringToAnsiString |
|
|
RtlUnicodeStringToCountedOemString |
|
|
RtlUnicodeStringToInteger |
|
|
RtlUnicodeStringToOemString |
|
|
RtlUnicodeStringToUTF8String |
|
|
RtlUnicodeToCustomCPN |
|
|
RtlUnicodeToMultiByteN |
|
|
RtlUnicodeToMultiByteSize |
|
|
RtlUnicodeToOemN |
|
|
RtlUnicodeToUTF8N |
|
|
RtlUniform |
|
|
RtlUnregisterFeatureConfigurationChangeNotification |
|
|
RtlUnsubscribeFromFeatureUsageNotifications |
|
|
RtlUnwind |
|
|
RtlUpcaseUnicodeChar |
|
|
RtlUpcaseUnicodeString |
|
|
RtlUpcaseUnicodeStringToCountedOemString |
|
|
RtlUpcaseUnicodeStringToOemString |
|
|
RtlUpcaseUnicodeToCustomCPN |
|
|
RtlUpcaseUnicodeToMultiByteN |
|
|
RtlUpcaseUnicodeToOemN |
|
|
RtlUpperChar |
|
|
RtlUpperString |
|
|
RtlUserFiberStart |
|
|
RtlUTF8StringToUnicodeString |
|
|
RtlUTF8ToUnicodeN |
|
|
RtlValidateCorrelationVector |
|
|
RtlValidRelativeSecurityDescriptor |
|
|
RtlVerifyVersionInfo |
|
|
RtlVirtualUnwind |
|
|
RtlVirtualUnwind2 |
|
|
RtlWow64ChangeProcessState |
|
|
RtlWow64ChangeThreadState |
|
|
RtlWow64GetEquivalentMachineCHPE |
|
|
RtlWow64GetSharedInfoProcess |
|
|
RtlWow64PopAllCrossProcessWorkFromWorkList |
|
|
RtlWow64PopCrossProcessWorkFromFreeList |
|
|
RtlWow64PushCrossProcessWorkOntoFreeList |
|
|
RtlWow64PushCrossProcessWorkOntoWorkList |
|
|
RtlWow64RequestCrossProcessHeavyFlush |
|
|
RtlWow64SuspendProcess |
|
|
RtlWriteNonVolatileMemory |
|
|
RtlWriteRegistryValue |
|
|
TpSetPoolThreadCpuSets |
|
|
TpWorkOnBehalfClearTicket |
|
|
TpWorkOnBehalfSetTicket |
|
|
vDbgPrintEx |
|
|
vDbgPrintExWithPrefix |
|
|
VerSetConditionMask |
|
|
ZwAcquireCrossVmMutant |
|
|
ZwAllocateLocallyUniqueId |
|
|
ZwAllocateUserPhysicalPagesEx |
|
|
ZwAllocateVirtualMemory |
|
|
ZwAllocateVirtualMemoryEx |
|
|
ZwCallEnclave |
|
|
ZwChangeProcessState |
|
|
ZwChangeThreadState |
|
|
ZwClose |
|
|
ZwCommitComplete |
|
|
ZwCommitEnlistment |
|
|
ZwCommitTransaction |
|
|
ZwContinueEx |
|
|
ZwCopyFileChunk |
|
|
ZwCreateCpuPartition |
|
|
ZwCreateCrossVmEvent |
|
|
ZwCreateCrossVmMutant |
|
|
ZwCreateDirectoryObject |
|
|
ZwCreateEnlistment |
|
|
ZwCreateEvent |
|
|
ZwCreateFile |
|
|
ZwCreateIoRing |
|
|
ZwCreateKey |
|
|
ZwCreateKeyTransacted |
|
|
ZwCreateProcessStateChange |
|
|
ZwCreateResourceManager |
|
|
ZwCreateSection |
|
|
ZwCreateSectionEx |
|
|
ZwCreateThreadStateChange |
|
|
ZwCreateTransaction |
|
|
ZwCreateTransactionManager |
|
|
ZwDeleteFile |
|
|
ZwDeleteKey |
|
|
ZwDeleteValueKey |
|
|
ZwDeviceIoControlFile |
|
|
ZwDirectGraphicsCall |
|
|
ZwDuplicateObject |
|
|
ZwDuplicateToken |
|
|
ZwEnumerateKey |
|
|
ZwEnumerateTransactionObject |
|
|
ZwEnumerateValueKey |
|
|
ZwFlushBuffersFileEx |
|
|
ZwFlushKey |
|
|
ZwFlushVirtualMemory |
|
|
ZwFreeVirtualMemory |
|
|
ZwFsControlFile |
|
|
ZwGetNotificationResourceManager |
|
|
ZwLoadDriver |
|
|
ZwLoadKey3 |
|
|
ZwLockFile |
|
|
ZwMakeTemporaryObject |
|
|
ZwManageHotPatch |
|
|
ZwMapViewOfSection |
|
|
ZwMapViewOfSectionEx |
|
|
ZwNotifyChangeDirectoryFileEx |
|
|
ZwNotifyChangeKey |
|
|
ZwOpenCpuPartition |
|
|
ZwOpenDirectoryObject |
|
|
ZwOpenEnlistment |
|
|
ZwOpenEvent |
|
|
ZwOpenFile |
|
|
ZwOpenKey |
|
|
ZwOpenKeyEx |
|
|
ZwOpenKeyTransacted |
|
|
ZwOpenKeyTransactedEx |
|
|
ZwOpenProcess |
|
|
ZwOpenProcessTokenEx |
|
|
ZwOpenResourceManager |
|
|
ZwOpenSection |
|
|
ZwOpenSymbolicLinkObject |
|
|
ZwOpenThreadTokenEx |
|
|
ZwOpenTransaction |
|
|
ZwOpenTransactionManager |
|
|
ZwPowerInformation |
|
|
ZwPrepareComplete |
|
|
ZwPrepareEnlistment |
|
|
ZwPrePrepareComplete |
|
|
ZwPrePrepareEnlistment |
|
|
ZwPssCaptureVaSpaceBulk |
|
|
ZwQueryDirectoryFile |
|
|
ZwQueryDirectoryFileEx |
|
|
ZwQueryEaFile |
|
|
ZwQueryFullAttributesFile |
|
|
ZwQueryInformationCpuPartition |
|
|
ZwQueryInformationEnlistment |
|
|
ZwQueryInformationFile |
|
|
ZwQueryInformationProcess |
|
|
ZwQueryInformationResourceManager |
|
|
ZwQueryInformationToken |
|
|
ZwQueryInformationTransaction |
|
|
ZwQueryInformationTransactionManager |
|
|
ZwQueryIoRingCapabilities |
|
|
ZwQueryKey |
|
|
ZwQueryObject |
|
|
ZwQueryQuotaInformationFile |
|
|
ZwQuerySecurityObject |
|
|
ZwQuerySymbolicLinkObject |
|
|
ZwQuerySystemInformation |
|
|
ZwQuerySystemInformationEx |
|
|
ZwQueryValueKey |
|
|
ZwQueryVirtualMemory |
|
|
ZwQueryVolumeInformationFile |
|
|
ZwQueueApcThreadEx2 |
|
|
ZwReadFile |
|
|
ZwReadOnlyEnlistment |
|
|
ZwReadVirtualMemoryEx |
|
|
ZwRecoverEnlistment |
|
|
ZwRecoverResourceManager |
|
|
ZwRecoverTransactionManager |
|
|
ZwRollbackComplete |
|
|
ZwRollbackEnlistment |
|
|
ZwRollbackTransaction |
|
|
ZwRollforwardTransactionManager |
|
|
ZwSetEaFile |
|
|
ZwSetEvent |
|
|
ZwSetInformationCpuPartition |
|
|
ZwSetInformationEnlistment |
|
|
ZwSetInformationFile |
|
|
ZwSetInformationIoRing |
|
|
ZwSetInformationResourceManager |
|
|
ZwSetInformationThread |
|
|
ZwSetInformationToken |
|
|
ZwSetInformationTransaction |
|
|
ZwSetInformationVirtualMemory |
|
|
ZwSetQuotaInformationFile |
|
|
ZwSetSecurityObject |
|
|
ZwSetValueKey |
|
|
ZwSetVolumeInformationFile |
|
|
ZwSinglePhaseReject |
|
|
ZwSubmitIoRing |
|
|
ZwSuspendProcess |
|
|
ZwTerminateEnclave |
|
|
ZwTerminateProcess |
|
|
ZwUnloadDriver |
|
|
ZwUnlockFile |
|
|
ZwUnmapViewOfSection |
|
|
ZwUnmapViewOfSectionEx |
|
|
ZwWaitForSingleObject |
|
|
ZwWriteFile |
|
|