| ZwQueryObject |
| ZwSetInformationObject |
| ZwDuplicateObject |
| ZwMakeTemporaryObject |
| ZwClose |
| ZwQuerySecurityObject |
| ZwSetSecurityObject |
| ZwCreateDirectoryObject |
| ZwOpenDirectoryObject |
| ZwQueryDirectoryObject |
| ZwCreateSymbolicLinkObject |
| ZwOpenSymbolicLinkObject |
| ZwQuerySymbolicLinkObject |
| ZwQuerySystemInformation |
| ZwSetSystemInformation |
| ZwQuerySystemEnvironmentValue |
| ZwSetSystemEnvironmentValue |
| ZwShutdownSystem |
| ZwSystemDebugControl |
| ZwAllocateVirtualMemory |
| ZwFreeVirtualMemory |
| ZwQueryVirtualMemory |
| ZwProtectVirtualMemory |
| ZwReadVirtualMemory |
| ZwWriteVirtualMemory |
| ZwLockVirtualMemory |
| ZwUnlockVirtualMemory |
| ZwFlushVirtualMemory |
| ZwAllocateUserPhysicalPages |
| ZwFreeUserPhysicalPages |
| ZwMapUserPhysicalPages |
| ZwGetWriteWatch |
| ZwResetWriteWatch |
| ZwCreateSection |
| ZwOpenSection |
| ZwQuerySection |
| ZwExtendSection |
| ZwMapViewOfSection |
| ZwUnmapViewOfSection |
| ZwAreMappedFilesTheSame |
| ZwCreateThread |
| ZwOpenThread |
| ZwTerminateThread |
| ZwQueryInformationThread |
| ZwSetInformationThread |
| ZwSuspendThread |
| ZwResumeThread |
| ZwGetContextThread |
| ZwSetContextThread |
| ZwQueueApcThread |
| ZwTestAlert |
| ZwAlertThread |
| ZwAlertResumeThread |
| ZwRegisterThreadTerminatePort |
| ZwImpersonateThread |
| ZwImpersonateAnonymousToken |
| ZwCreateProcess |
| ZwCreateUserProcess |
| ZwOpenProcess |
| ZwTerminateProcess |
| ZwQueryInformationProcess |
| ZwSetInformationProcess |
| ZwFlushInstructionCache |
| RtlCreateProcessParameters |
| RtlDestroyProcessParameters |
| RtlNormalizeProcessParams |
| RtlCreateQueryDebugBuffer |
| RtlDestroyQueryDebugBuffer |
| RtlQueryProcessDebugInformation |
| ZwCreateJobObject |
| ZwOpenJobObject |
| ZwTerminateJobObject |
| ZwAssignProcessToJobObject |
| ZwQueryInformationJobObject |
| ZwSetInformationJobObject |
| ZwCreateToken |
| ZwOpenProcessToken |
| ZwOpenThreadToken |
| ZwDuplicateToken |
| ZwFilterToken |
| ZwAdjustPrivilegesToken |
| ZwAdjustGroupsToken |
| ZwQueryInformationToken |
| ZwSetInformationToken |
| ZwWaitForSingleObject |
| ZwSignalAndWaitForSingleObject |
| ZwWaitForMultipleObjects |
| ZwCreateTimer |
| ZwOpenTimer |
| ZwCancelTimer |
| ZwSetTimer |
| ZwQueryTimer |
| ZwCreateEvent |
| ZwOpenEvent |
| ZwSetEvent |
| ZwPulseEvent |
| ZwResetEvent |
| ZwClearEvent |
| ZwQueryEvent |
| ZwCreateSemaphore |
| ZwOpenSemaphore |
| ZwReleaseSemaphore |
| ZwQuerySemaphore |
| ZwCreateMutant |
| ZwOpenMutant |
| ZwReleaseMutant |
| ZwQueryMutant |
| ZwCreateIoCompletion |
| ZwOpenIoCompletion |
| ZwSetIoCompletion |
| ZwRemoveIoCompletion |
| ZwQueryIoCompletion |
| ZwCreateEventPair |
| ZwOpenEventPair |
| ZwWaitLowEventPair |
| ZwSetLowEventPair |
| ZwWaitHighEventPair |
| ZwSetHighEventPair |
| ZwSetLowWaitHighEventPair |
| ZwSetHighWaitLowEventPair |
| ZwQuerySystemTime |
| ZwSetSystemTime |
| ZwQueryPerformanceCounter |
| ZwSetTimerResolution |
| ZwQueryTimerResolution |
| ZwDelayExecution |
| ZwYieldExecution |
| ZwCreateProfile |
| ZwSetIntervalProfile |
| ZwQueryIntervalProfile |
| ZwStartProfile |
| ZwStopProfile |
| ZwCreatePort |
| ZwCreateWaitablePort |
| ZwConnectPort |
| ZwSecureConnectPort |
| ZwListenPort |
| ZwAcceptConnectPort |
| ZwCompleteConnectPort |
| ZwRequestPort |
| ZwRequestWaitReplyPort |
| ZwReplyPort |
| ZwReplyWaitReplyPort |
| ZwReplyWaitReceivePort |
| ZwReplyWaitReceivePortEx |
| ZwReadRequestData |
| ZwWriteRequestData |
| ZwQueryInformationPort |
| ZwImpersonateClientOfPort |
| CsrClientCallServer |
| CsrPortHandle |
| ZwLoadDriver |
| ZwUnloadDriver |
| ZwCreateFile |
| ZwOpenFile |
| ZwDeleteFile |
| ZwFlushBuffersFile |
| ZwCancelIoFile |
| ZwCancelIoFileEx |
| ZwReadFile |
| ZwWriteFile |
| ZwReadFileScatter |
| ZwWriteFileGather |
| ZwLockFile |
| ZwUnlockFile |
| ZwDeviceIoControlFile |
| ZwFsControlFile |
| ZwNotifyChangeDirectoryFile |
| ZwQueryEaFile |
| ZwSetEaFile |
| ZwCreateNamedPipeFile |
| ZwCreateMailslotFile |
| ZwQueryVolumeInformationFile |
| ZwSetVolumeInformationFile |
| ZwQueryQuotaInformationFile |
| ZwSetQuotaInformationFile |
| ZwQueryAttributesFile |
| ZwQueryFullAttributesFile |
| ZwQueryDirectoryFile |
| ZwQueryInformationFile |
| ZwSetInformationFile |
| ZwCreateKey |
| ZwOpenKey |
| ZwDeleteKey |
| ZwFlushKey |
| ZwSaveKey |
| ZwSaveMergedKeys |
| ZwRestoreKey |
| ZwLoadKey |
| ZwLoadKey2 |
| ZwUnloadKey |
| ZwQueryOpenSubKeys |
| ZwReplaceKey |
| ZwSetInformationKey |
| ZwQueryKey |
| ZwEnumerateKey |
| ZwNotifyChangeKey |
| ZwNotifyChangeMultipleKeys |
| ZwDeleteValueKey |
| ZwSetValueKey |
| ZwQueryValueKey |
| ZwEnumerateValueKey |
| ZwQueryMultipleValueKey |
| ZwInitializeRegistry |
| ZwPrivilegeCheck |
| ZwPrivilegeObjectAuditAlarm |
| ZwPrivilegedServiceAuditAlarm |
| ZwAccessCheck |
| ZwAccessCheckAndAuditAlarm |
| ZwAccessCheckByType |
| ZwAccessCheckByTypeResultList |
| ZwOpenObjectAuditAlarm |
| ZwCloseObjectAuditAlarm |
| ZwDeleteObjectAuditAlarm |
| ZwAccessCheckByTypeAndAuditAlarm |
| ZwAccessCheckByTypeResultListAndAuditAlarm |
| ZwAccessCheckByTypeResultListAndAuditAlarmByHandle |
| ZwIsSystemResumeAutomatic |
| ZwSetThreadExecutionState |
| ZwGetDevicePowerState |
| ZwSetSystemPowerState |
| ZwInitiatePowerAction |
| ZwPowerInformation |
| ZwPlugPlayControl |
| ZwGetPlugPlayEvent |
| ZwCreateDebugObject |
| ZwDebugActiveProcess |
| ZwRemoveProcessDebug |
| ZwWaitForDebugEvent |
| ZwDebugContinue |
| ZwSetInformationDebugObject |
| ZwQueryDebugFilterState |
| ZwSetDebugFilterState |
| ZwRaiseException |
| ZwContinue |
| ZwQueryDefaultLocale |
| ZwSetDefaultLocale |
| ZwQueryDefaultUILanguage |
| ZwSetDefaultUILanguage |
| ZwQueryInstallUILanguage |
| ZwAllocateLocallyUniqueId |
| ZwAllocateUuids |
| ZwSetUuidSeed |
| ZwAddAtom |
| ZwFindAtom |
| ZwDeleteAtom |
| ZwQueryInformationAtom |
| ZwFlushWriteBuffer |
| ZwRaiseHardError |
| ZwSetDefaultHardErrorPort |
| ZwDisplayString |
| ZwCreatePagingFile |
| ZwSetLdtEntries |
| ZwVdmControl |
| LdrLoadDll |
| LdrUnloadDll |
| memset |
| sprintf |
| _snprintf |
| vsprintf |
| _vsnprintf |