ZwQueryObject
ZwSetInformationObject
ZwDuplicateObject
ZwMakeTemporaryObject
ZwClose
ZwQuerySecurityObject
ZwSetSecurityObject
ZwCreateDirectoryObject
ZwOpenDirectoryObject
ZwQueryDirectoryObject
ZwCreateSymbolicLinkObject
ZwOpenSymbolicLinkObject
ZwQuerySymbolicLinkObject
ZwQuerySystemInformation
ZwSetSystemInformation
ZwQuerySystemEnvironmentValue
ZwSetSystemEnvironmentValue
ZwShutdownSystem
ZwSystemDebugControl
ZwAllocateVirtualMemory
ZwFreeVirtualMemory
ZwQueryVirtualMemory
ZwProtectVirtualMemory
ZwReadVirtualMemory
ZwWriteVirtualMemory
ZwLockVirtualMemory
ZwUnlockVirtualMemory
ZwFlushVirtualMemory
ZwAllocateUserPhysicalPages
ZwFreeUserPhysicalPages
ZwMapUserPhysicalPages
ZwGetWriteWatch
ZwResetWriteWatch
ZwCreateSection
ZwOpenSection
ZwQuerySection
ZwExtendSection
ZwMapViewOfSection
ZwUnmapViewOfSection
ZwAreMappedFilesTheSame
ZwCreateThread
ZwOpenThread
ZwTerminateThread
ZwQueryInformationThread
ZwSetInformationThread
ZwSuspendThread
ZwResumeThread
ZwGetContextThread
ZwSetContextThread
ZwQueueApcThread
ZwTestAlert
ZwAlertThread
ZwAlertResumeThread
ZwRegisterThreadTerminatePort
ZwImpersonateThread
ZwImpersonateAnonymousToken
ZwCreateProcess
ZwCreateUserProcess
ZwOpenProcess
ZwTerminateProcess
ZwQueryInformationProcess
ZwSetInformationProcess
ZwFlushInstructionCache
RtlCreateProcessParameters
RtlDestroyProcessParameters
RtlNormalizeProcessParams
RtlCreateQueryDebugBuffer
RtlDestroyQueryDebugBuffer
RtlQueryProcessDebugInformation
ZwCreateJobObject
ZwOpenJobObject
ZwTerminateJobObject
ZwAssignProcessToJobObject
ZwQueryInformationJobObject
ZwSetInformationJobObject
ZwCreateToken
ZwOpenProcessToken
ZwOpenThreadToken
ZwDuplicateToken
ZwFilterToken
ZwAdjustPrivilegesToken
ZwAdjustGroupsToken
ZwQueryInformationToken
ZwSetInformationToken
ZwWaitForSingleObject
ZwSignalAndWaitForSingleObject
ZwWaitForMultipleObjects
ZwCreateTimer
ZwOpenTimer
ZwCancelTimer
ZwSetTimer
ZwQueryTimer
ZwCreateEvent
ZwOpenEvent
ZwSetEvent
ZwPulseEvent
ZwResetEvent
ZwClearEvent
ZwQueryEvent
ZwCreateSemaphore
ZwOpenSemaphore
ZwReleaseSemaphore
ZwQuerySemaphore
ZwCreateMutant
ZwOpenMutant
ZwReleaseMutant
ZwQueryMutant
ZwCreateIoCompletion
ZwOpenIoCompletion
ZwSetIoCompletion
ZwRemoveIoCompletion
ZwQueryIoCompletion
ZwCreateEventPair
ZwOpenEventPair
ZwWaitLowEventPair
ZwSetLowEventPair
ZwWaitHighEventPair
ZwSetHighEventPair
ZwSetLowWaitHighEventPair
ZwSetHighWaitLowEventPair
ZwQuerySystemTime
ZwSetSystemTime
ZwQueryPerformanceCounter
ZwSetTimerResolution
ZwQueryTimerResolution
ZwDelayExecution
ZwYieldExecution
ZwCreateProfile
ZwSetIntervalProfile
ZwQueryIntervalProfile
ZwStartProfile
ZwStopProfile
ZwCreatePort
ZwCreateWaitablePort
ZwConnectPort
ZwSecureConnectPort
ZwListenPort
ZwAcceptConnectPort
ZwCompleteConnectPort
ZwRequestPort
ZwRequestWaitReplyPort
ZwReplyPort
ZwReplyWaitReplyPort
ZwReplyWaitReceivePort
ZwReplyWaitReceivePortEx
ZwReadRequestData
ZwWriteRequestData
ZwQueryInformationPort
ZwImpersonateClientOfPort
CsrClientCallServer
CsrPortHandle
ZwLoadDriver
ZwUnloadDriver
ZwCreateFile
ZwOpenFile
ZwDeleteFile
ZwFlushBuffersFile
ZwCancelIoFile
ZwCancelIoFileEx
ZwReadFile
ZwWriteFile
ZwReadFileScatter
ZwWriteFileGather
ZwLockFile
ZwUnlockFile
ZwDeviceIoControlFile
ZwFsControlFile
ZwNotifyChangeDirectoryFile
ZwQueryEaFile
ZwSetEaFile
ZwCreateNamedPipeFile
ZwCreateMailslotFile
ZwQueryVolumeInformationFile
ZwSetVolumeInformationFile
ZwQueryQuotaInformationFile
ZwSetQuotaInformationFile
ZwQueryAttributesFile
ZwQueryFullAttributesFile
ZwQueryDirectoryFile
ZwQueryInformationFile
ZwSetInformationFile
ZwCreateKey
ZwOpenKey
ZwDeleteKey
ZwFlushKey
ZwSaveKey
ZwSaveMergedKeys
ZwRestoreKey
ZwLoadKey
ZwLoadKey2
ZwUnloadKey
ZwQueryOpenSubKeys
ZwReplaceKey
ZwSetInformationKey
ZwQueryKey
ZwEnumerateKey
ZwNotifyChangeKey
ZwNotifyChangeMultipleKeys
ZwDeleteValueKey
ZwSetValueKey
ZwQueryValueKey
ZwEnumerateValueKey
ZwQueryMultipleValueKey
ZwInitializeRegistry
ZwPrivilegeCheck
ZwPrivilegeObjectAuditAlarm
ZwPrivilegedServiceAuditAlarm
ZwAccessCheck
ZwAccessCheckAndAuditAlarm
ZwAccessCheckByType
ZwAccessCheckByTypeResultList
ZwOpenObjectAuditAlarm
ZwCloseObjectAuditAlarm
ZwDeleteObjectAuditAlarm
ZwAccessCheckByTypeAndAuditAlarm
ZwAccessCheckByTypeResultListAndAuditAlarm
ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
ZwIsSystemResumeAutomatic
ZwSetThreadExecutionState
ZwGetDevicePowerState
ZwSetSystemPowerState
ZwInitiatePowerAction
ZwPowerInformation
ZwPlugPlayControl
ZwGetPlugPlayEvent
ZwCreateDebugObject
ZwDebugActiveProcess
ZwRemoveProcessDebug
ZwWaitForDebugEvent
ZwDebugContinue
ZwSetInformationDebugObject
ZwQueryDebugFilterState
ZwSetDebugFilterState
ZwRaiseException
ZwContinue
ZwQueryDefaultLocale
ZwSetDefaultLocale
ZwQueryDefaultUILanguage
ZwSetDefaultUILanguage
ZwQueryInstallUILanguage
ZwAllocateLocallyUniqueId
ZwAllocateUuids
ZwSetUuidSeed
ZwAddAtom
ZwFindAtom
ZwDeleteAtom
ZwQueryInformationAtom
ZwFlushWriteBuffer
ZwRaiseHardError
ZwSetDefaultHardErrorPort
ZwDisplayString
ZwCreatePagingFile
ZwSetLdtEntries
ZwVdmControl
LdrLoadDll
LdrUnloadDll
memset
sprintf
_snprintf
vsprintf
_vsnprintf