|
 |
e4f43f |
ZwQueryObject
|
|
|
e4f43f |
ZwSetInformationObject
|
|
|
e4f43f |
ZwDuplicateObject
|
|
|
e4f43f |
ZwMakeTemporaryObject
|
|
|
e4f43f |
ZwClose
|
|
|
e4f43f |
ZwQuerySecurityObject
|
|
|
e4f43f |
ZwSetSecurityObject
|
|
|
e4f43f |
ZwCreateDirectoryObject
|
|
|
e4f43f |
ZwOpenDirectoryObject
|
|
|
e4f43f |
ZwQueryDirectoryObject
|
|
|
e4f43f |
ZwCreateSymbolicLinkObject
|
|
|
e4f43f |
ZwOpenSymbolicLinkObject
|
|
|
e4f43f |
ZwQuerySymbolicLinkObject
|
|
|
e4f43f |
ZwQuerySystemInformation
|
|
|
e4f43f |
ZwSetSystemInformation
|
|
|
e4f43f |
ZwQuerySystemEnvironmentValue
|
|
|
e4f43f |
ZwSetSystemEnvironmentValue
|
|
|
e4f43f |
ZwShutdownSystem
|
|
|
e4f43f |
ZwSystemDebugControl
|
|
|
e4f43f |
ZwAllocateVirtualMemory
|
|
|
e4f43f |
ZwFreeVirtualMemory
|
|
|
e4f43f |
ZwQueryVirtualMemory
|
|
|
e4f43f |
ZwProtectVirtualMemory
|
|
|
e4f43f |
ZwReadVirtualMemory
|
|
|
e4f43f |
ZwWriteVirtualMemory
|
|
|
e4f43f |
ZwLockVirtualMemory
|
|
|
e4f43f |
ZwUnlockVirtualMemory
|
|
|
e4f43f |
ZwFlushVirtualMemory
|
|
|
e4f43f |
ZwAllocateUserPhysicalPages
|
|
|
e4f43f |
ZwFreeUserPhysicalPages
|
|
|
e4f43f |
ZwMapUserPhysicalPages
|
|
|
e4f43f |
ZwGetWriteWatch
|
|
|
e4f43f |
ZwResetWriteWatch
|
|
|
e4f43f |
ZwCreateSection
|
|
|
e4f43f |
ZwOpenSection
|
|
|
e4f43f |
ZwQuerySection
|
|
|
e4f43f |
ZwExtendSection
|
|
|
e4f43f |
ZwMapViewOfSection
|
|
|
e4f43f |
ZwUnmapViewOfSection
|
|
|
e4f43f |
ZwAreMappedFilesTheSame
|
|
|
e4f43f |
ZwCreateThread
|
|
|
e4f43f |
ZwOpenThread
|
|
|
e4f43f |
ZwTerminateThread
|
|
|
e4f43f |
ZwQueryInformationThread
|
|
|
e4f43f |
ZwSetInformationThread
|
|
|
e4f43f |
ZwSuspendThread
|
|
|
e4f43f |
ZwResumeThread
|
|
|
e4f43f |
ZwGetContextThread
|
|
|
e4f43f |
ZwSetContextThread
|
|
|
e4f43f |
ZwQueueApcThread
|
|
|
e4f43f |
ZwTestAlert
|
|
|
e4f43f |
ZwAlertThread
|
|
|
e4f43f |
ZwAlertResumeThread
|
|
|
e4f43f |
ZwRegisterThreadTerminatePort
|
|
|
e4f43f |
ZwImpersonateThread
|
|
|
e4f43f |
ZwImpersonateAnonymousToken
|
|
|
e4f43f |
ZwCreateProcess
|
|
|
e4f43f |
ZwCreateUserProcess
|
|
|
e4f43f |
ZwOpenProcess
|
|
|
e4f43f |
ZwTerminateProcess
|
|
|
e4f43f |
ZwQueryInformationProcess
|
|
|
e4f43f |
ZwSetInformationProcess
|
|
|
e4f43f |
ZwFlushInstructionCache
|
|
|
e4f43f |
RtlCreateProcessParameters
|
|
|
e4f43f |
RtlDestroyProcessParameters
|
|
|
e4f43f |
RtlNormalizeProcessParams
|
|
|
e4f43f |
RtlCreateQueryDebugBuffer
|
|
|
e4f43f |
RtlDestroyQueryDebugBuffer
|
|
|
e4f43f |
RtlQueryProcessDebugInformation
|
|
|
e4f43f |
ZwCreateJobObject
|
|
|
e4f43f |
ZwOpenJobObject
|
|
|
e4f43f |
ZwTerminateJobObject
|
|
|
e4f43f |
ZwAssignProcessToJobObject
|
|
|
e4f43f |
ZwQueryInformationJobObject
|
|
|
e4f43f |
ZwSetInformationJobObject
|
|
|
e4f43f |
ZwCreateToken
|
|
|
e4f43f |
ZwOpenProcessToken
|
|
|
e4f43f |
ZwOpenThreadToken
|
|
|
e4f43f |
ZwDuplicateToken
|
|
|
e4f43f |
ZwFilterToken
|
|
|
e4f43f |
ZwAdjustPrivilegesToken
|
|
|
e4f43f |
ZwAdjustGroupsToken
|
|
|
e4f43f |
ZwQueryInformationToken
|
|
|
e4f43f |
ZwSetInformationToken
|
|
|
e4f43f |
ZwWaitForSingleObject
|
|
|
e4f43f |
ZwSignalAndWaitForSingleObject
|
|
|
e4f43f |
ZwWaitForMultipleObjects
|
|
|
e4f43f |
ZwCreateTimer
|
|
|
e4f43f |
ZwOpenTimer
|
|
|
e4f43f |
ZwCancelTimer
|
|
|
e4f43f |
ZwSetTimer
|
|
|
e4f43f |
ZwQueryTimer
|
|
|
e4f43f |
ZwCreateEvent
|
|
|
e4f43f |
ZwOpenEvent
|
|
|
e4f43f |
ZwSetEvent
|
|
|
e4f43f |
ZwPulseEvent
|
|
|
e4f43f |
ZwResetEvent
|
|
|
e4f43f |
ZwClearEvent
|
|
|
e4f43f |
ZwQueryEvent
|
|
|
e4f43f |
ZwCreateSemaphore
|
|
|
e4f43f |
ZwOpenSemaphore
|
|
|
e4f43f |
ZwReleaseSemaphore
|
|
|
e4f43f |
ZwQuerySemaphore
|
|
|
e4f43f |
ZwCreateMutant
|
|
|
e4f43f |
ZwOpenMutant
|
|
|
e4f43f |
ZwReleaseMutant
|
|
|
e4f43f |
ZwQueryMutant
|
|
|
e4f43f |
ZwCreateIoCompletion
|
|
|
e4f43f |
ZwOpenIoCompletion
|
|
|
e4f43f |
ZwSetIoCompletion
|
|
|
e4f43f |
ZwRemoveIoCompletion
|
|
|
e4f43f |
ZwQueryIoCompletion
|
|
|
e4f43f |
ZwCreateEventPair
|
|
|
e4f43f |
ZwOpenEventPair
|
|
|
e4f43f |
ZwWaitLowEventPair
|
|
|
e4f43f |
ZwSetLowEventPair
|
|
|
e4f43f |
ZwWaitHighEventPair
|
|
|
e4f43f |
ZwSetHighEventPair
|
|
|
e4f43f |
ZwSetLowWaitHighEventPair
|
|
|
e4f43f |
ZwSetHighWaitLowEventPair
|
|
|
e4f43f |
ZwQuerySystemTime
|
|
|
e4f43f |
ZwSetSystemTime
|
|
|
e4f43f |
ZwQueryPerformanceCounter
|
|
|
e4f43f |
ZwSetTimerResolution
|
|
|
e4f43f |
ZwQueryTimerResolution
|
|
|
e4f43f |
ZwDelayExecution
|
|
|
e4f43f |
ZwYieldExecution
|
|
|
e4f43f |
ZwCreateProfile
|
|
|
e4f43f |
ZwSetIntervalProfile
|
|
|
e4f43f |
ZwQueryIntervalProfile
|
|
|
e4f43f |
ZwStartProfile
|
|
|
e4f43f |
ZwStopProfile
|
|
|
e4f43f |
ZwCreatePort
|
|
|
e4f43f |
ZwCreateWaitablePort
|
|
|
e4f43f |
ZwConnectPort
|
|
|
e4f43f |
ZwSecureConnectPort
|
|
|
e4f43f |
ZwListenPort
|
|
|
e4f43f |
ZwAcceptConnectPort
|
|
|
e4f43f |
ZwCompleteConnectPort
|
|
|
e4f43f |
ZwRequestPort
|
|
|
e4f43f |
ZwRequestWaitReplyPort
|
|
|
e4f43f |
ZwReplyPort
|
|
|
e4f43f |
ZwReplyWaitReplyPort
|
|
|
e4f43f |
ZwReplyWaitReceivePort
|
|
|
e4f43f |
ZwReplyWaitReceivePortEx
|
|
|
e4f43f |
ZwReadRequestData
|
|
|
e4f43f |
ZwWriteRequestData
|
|
|
e4f43f |
ZwQueryInformationPort
|
|
|
e4f43f |
ZwImpersonateClientOfPort
|
|
|
e4f43f |
CsrClientCallServer
|
|
|
e4f43f |
CsrPortHandle
|
|
|
e4f43f |
ZwLoadDriver
|
|
|
e4f43f |
ZwUnloadDriver
|
|
|
e4f43f |
ZwCreateFile
|
|
|
e4f43f |
ZwOpenFile
|
|
|
e4f43f |
ZwDeleteFile
|
|
|
e4f43f |
ZwFlushBuffersFile
|
|
|
e4f43f |
ZwCancelIoFile
|
|
|
e4f43f |
ZwCancelIoFileEx
|
|
|
e4f43f |
ZwReadFile
|
|
|
e4f43f |
ZwWriteFile
|
|
|
e4f43f |
ZwReadFileScatter
|
|
|
e4f43f |
ZwWriteFileGather
|
|
|
e4f43f |
ZwLockFile
|
|
|
e4f43f |
ZwUnlockFile
|
|
|
e4f43f |
ZwDeviceIoControlFile
|
|
|
e4f43f |
ZwFsControlFile
|
|
|
e4f43f |
ZwNotifyChangeDirectoryFile
|
|
|
e4f43f |
ZwQueryEaFile
|
|
|
e4f43f |
ZwSetEaFile
|
|
|
e4f43f |
ZwCreateNamedPipeFile
|
|
|
e4f43f |
ZwCreateMailslotFile
|
|
|
e4f43f |
ZwQueryVolumeInformationFile
|
|
|
e4f43f |
ZwSetVolumeInformationFile
|
|
|
e4f43f |
ZwQueryQuotaInformationFile
|
|
|
e4f43f |
ZwSetQuotaInformationFile
|
|
|
e4f43f |
ZwQueryAttributesFile
|
|
|
e4f43f |
ZwQueryFullAttributesFile
|
|
|
e4f43f |
ZwQueryDirectoryFile
|
|
|
e4f43f |
ZwQueryInformationFile
|
|
|
e4f43f |
ZwSetInformationFile
|
|
|
e4f43f |
ZwCreateKey
|
|
|
e4f43f |
ZwOpenKey
|
|
|
e4f43f |
ZwDeleteKey
|
|
|
e4f43f |
ZwFlushKey
|
|
|
e4f43f |
ZwSaveKey
|
|
|
e4f43f |
ZwSaveMergedKeys
|
|
|
e4f43f |
ZwRestoreKey
|
|
|
e4f43f |
ZwLoadKey
|
|
|
e4f43f |
ZwLoadKey2
|
|
|
e4f43f |
ZwUnloadKey
|
|
|
e4f43f |
ZwQueryOpenSubKeys
|
|
|
e4f43f |
ZwReplaceKey
|
|
|
e4f43f |
ZwSetInformationKey
|
|
|
e4f43f |
ZwQueryKey
|
|
|
e4f43f |
ZwEnumerateKey
|
|
|
e4f43f |
ZwNotifyChangeKey
|
|
|
e4f43f |
ZwNotifyChangeMultipleKeys
|
|
|
e4f43f |
ZwDeleteValueKey
|
|
|
e4f43f |
ZwSetValueKey
|
|
|
e4f43f |
ZwQueryValueKey
|
|
|
e4f43f |
ZwEnumerateValueKey
|
|
|
e4f43f |
ZwQueryMultipleValueKey
|
|
|
e4f43f |
ZwInitializeRegistry
|
|
|
e4f43f |
ZwPrivilegeCheck
|
|
|
e4f43f |
ZwPrivilegeObjectAuditAlarm
|
|
|
e4f43f |
ZwPrivilegedServiceAuditAlarm
|
|
|
e4f43f |
ZwAccessCheck
|
|
|
e4f43f |
ZwAccessCheckAndAuditAlarm
|
|
|
e4f43f |
ZwAccessCheckByType
|
|
|
e4f43f |
ZwAccessCheckByTypeResultList
|
|
|
e4f43f |
ZwOpenObjectAuditAlarm
|
|
|
e4f43f |
ZwCloseObjectAuditAlarm
|
|
|
e4f43f |
ZwDeleteObjectAuditAlarm
|
|
|
e4f43f |
ZwAccessCheckByTypeAndAuditAlarm
|
|
|
e4f43f |
ZwAccessCheckByTypeResultListAndAuditAlarm
|
|
|
e4f43f |
ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
|
|
|
e4f43f |
ZwIsSystemResumeAutomatic
|
|
|
e4f43f |
ZwSetThreadExecutionState
|
|
|
e4f43f |
ZwGetDevicePowerState
|
|
|
e4f43f |
ZwSetSystemPowerState
|
|
|
e4f43f |
ZwInitiatePowerAction
|
|
|
e4f43f |
ZwPowerInformation
|
|
|
e4f43f |
ZwPlugPlayControl
|
|
|
e4f43f |
ZwGetPlugPlayEvent
|
|
|
8a35fe |
ZwCreateDebugObject
|
|
|
8a35fe |
ZwDebugActiveProcess
|
|
|
8a35fe |
ZwRemoveProcessDebug
|
|
|
8a35fe |
ZwWaitForDebugEvent
|
|
|
8a35fe |
ZwDebugContinue
|
|
|
8a35fe |
ZwSetInformationDebugObject
|
|
|
8a35fe |
ZwQueryDebugFilterState
|
|
|
8a35fe |
ZwSetDebugFilterState
|
|
|
e4f43f |
ZwRaiseException
|
|
|
e4f43f |
ZwContinue
|
|
|
e4f43f |
ZwQueryDefaultLocale
|
|
|
e4f43f |
ZwSetDefaultLocale
|
|
|
e4f43f |
ZwQueryDefaultUILanguage
|
|
|
e4f43f |
ZwSetDefaultUILanguage
|
|
|
e4f43f |
ZwQueryInstallUILanguage
|
|
|
e4f43f |
ZwAllocateLocallyUniqueId
|
|
|
e4f43f |
ZwAllocateUuids
|
|
|
e4f43f |
ZwSetUuidSeed
|
|
|
e4f43f |
ZwAddAtom
|
|
|
e4f43f |
ZwFindAtom
|
|
|
e4f43f |
ZwDeleteAtom
|
|
|
e4f43f |
ZwQueryInformationAtom
|
|
|
e4f43f |
ZwFlushWriteBuffer
|
|
|
e4f43f |
ZwRaiseHardError
|
|
|
e4f43f |
ZwSetDefaultHardErrorPort
|
|
|
e4f43f |
ZwDisplayString
|
|
|
e4f43f |
ZwCreatePagingFile
|
|
|
e4f43f |
ZwSetLdtEntries
|
|
|
e4f43f |
ZwVdmControl
|
|
|
e4f43f |
LdrLoadDll
|
|
|
e4f43f |
LdrUnloadDll
|
|
|
e4f43f |
memset
|
|
|
e4f43f |
sprintf
|
|
|
e4f43f |
_snprintf
|
|
|
e4f43f |
vsprintf
|
|
|
e4f43f |
_vsnprintf
|