Windows 7 DLL File Information - ntdll.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 7, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
File Description: | NT Layer DLL |
File Version: | 6.1.7100.0 (winmain_win7rc.090421-1700) |
Company: | Microsoft Corporation |
Product Name: | Microsoft Windows Operating System |
DLL popularity | Very High - 865 other DLL files in system32 directory are statically linked to this file. |
File Size: | 1,256 KB |
Total Number of Exported Functions: | 1,989 |
Total Number of Exported Functions With Names: | 1,981 |
Section Headers
Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
---|---|---|---|---|---|
.text | 0x00001000 | 869,888 Bytes | 67.6% | Read, Execute | Code |
RT | 0x000d6000 | 512 Bytes | 0.0% | Read, Execute | Code |
.data | 0x000d7000 | 27,648 Bytes | 2.1% | Write, Read | Initialized Data |
.rsrc | 0x000e0000 | 352,768 Bytes | 27.4% | Read | Initialized Data |
.reloc | 0x00137000 | 19,968 Bytes | 1.6% | Read, Discardable | Initialized Data |
Static Linking
No static linking in this file.
General Resources Information
Resource Type | Number of Items | Total Size | % of File |
---|---|---|---|
Icons | 0 | 0 Bytes | 0.0% |
Animated Icons | 0 | 0 Bytes | 0.0% |
Cursors | 0 | 0 Bytes | 0.0% |
Animated Cursors | 0 | 0 Bytes | 0.0% |
Bitmaps | 0 | 0 Bytes | 0.0% |
AVI Files | 0 | 0 Bytes | 0.0% |
Dialog-Boxes | 0 | 0 Bytes | 0.0% |
HTML Related Files | 0 | 0 Bytes | 0.0% |
Menus | 0 | 0 Bytes | 0.0% |
Strings | 0 | 0 Bytes | 0.0% |
Type Libraries | 0 | 0 Bytes | 0.0% |
Manifest | 0 | 0 Bytes | 0.0% |
All Others | 3 | 352,220 Bytes | 27.4% |
Total | 3 | 352,220 Bytes | 27.4% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 200 dialogs)
No dialog resources in this file.
String resources in this dll (up to 200 strings)
No string resources in this file.
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:A_SHAFinal | A_SHAInit |
A_SHAUpdate | AlpcAdjustCompletionListConcurrencyCount |
AlpcFreeCompletionListMessage | AlpcGetCompletionListLastMessageInformation |
AlpcGetCompletionListMessageAttributes | AlpcGetHeaderSize |
AlpcGetMessageAttribute | AlpcGetMessageFromCompletionList |
AlpcGetOutstandingCompletionListMessageCount | AlpcInitializeMessageAttribute |
AlpcMaxAllowedMessageLength | AlpcRegisterCompletionList |
AlpcRegisterCompletionListWorkerThread | AlpcRundownCompletionList |
AlpcUnregisterCompletionList | AlpcUnregisterCompletionListWorkerThread |
CsrAllocateCaptureBuffer | CsrAllocateMessagePointer |
CsrCaptureMessageBuffer | CsrCaptureMessageMultiUnicodeStringsInPlace |
CsrCaptureMessageString | CsrCaptureTimeout |
CsrClientCallServer | CsrClientConnectToServer |
CsrFreeCaptureBuffer | CsrGetProcessId |
CsrIdentifyAlertableThread | CsrSetPriorityClass |
CsrVerifyRegion | DbgBreakPoint |
DbgPrint | DbgPrintEx |
DbgPrintReturnControlC | DbgPrompt |
DbgQueryDebugFilterState | DbgSetDebugFilterState |
DbgUiConnectToDbg | DbgUiContinue |
DbgUiConvertStateChangeStructure | DbgUiDebugActiveProcess |
DbgUiGetThreadDebugObject | DbgUiIssueRemoteBreakin |
DbgUiRemoteBreakin | DbgUiSetThreadDebugObject |
DbgUiStopDebugging | DbgUiWaitStateChange |
DbgUserBreakPoint | EtwCreateTraceInstanceId |
EtwDeliverDataBlock | EtwEnumerateProcessRegGuids |
EtwEventActivityIdControl | EtwEventEnabled |
EtwEventProviderEnabled | EtwEventRegister |
EtwEventUnregister | EtwEventWrite |
EtwEventWriteEndScenario | EtwEventWriteEx |
EtwEventWriteFull | EtwEventWriteNoRegistration |
EtwEventWriteStartScenario | EtwEventWriteString |
EtwEventWriteTransfer | EtwGetTraceEnableFlags |
EtwGetTraceEnableLevel | EtwGetTraceLoggerHandle |
EtwLogTraceEvent | EtwNotificationRegister |
EtwNotificationUnregister | EtwProcessPrivateLoggerRequest |
EtwRegisterSecurityProvider | EtwRegisterTraceGuidsA |
EtwRegisterTraceGuidsW | EtwReplyNotification |
EtwSendNotification | EtwSetMark |
EtwTraceEventInstance | EtwTraceMessage |
EtwTraceMessageVa | EtwUnregisterTraceGuids |
EtwWriteUMSecurityEvent | EtwpCreateEtwThread |
EtwpGetCpuSpeed | EtwpNotificationThread |
EvtIntReportAuthzEventAndSourceAsync | EvtIntReportEventAndSourceAsync |
ExpInterlockedPopEntrySListEnd | ExpInterlockedPopEntrySListFault |
ExpInterlockedPopEntrySListResume | KiFastSystemCall |
KiFastSystemCallRet | KiIntSystemCall |
KiRaiseUserExceptionDispatcher | KiUserApcDispatcher |
KiUserCallbackDispatcher | KiUserExceptionDispatcher |
LdrAccessResource | LdrAddLoadAsDataTable |
LdrAddRefDll | LdrDisableThreadCalloutsForDll |
LdrEnumResources | LdrEnumerateLoadedModules |
LdrFindEntryForAddress | LdrFindResourceDirectory_U |
LdrFindResourceEx_U | LdrFindResource_U |
LdrFlushAlternateResourceModules | LdrGetDllHandle |
LdrGetDllHandleByMapping | LdrGetDllHandleByName |
LdrGetDllHandleEx | LdrGetFailureData |
LdrGetFileNameFromLoadAsDataTable | LdrGetProcedureAddress |
LdrGetProcedureAddressEx | LdrHotPatchRoutine |
LdrInitShimEngineDynamic | LdrInitializeThunk |
LdrLoadAlternateResourceModule | LdrLoadAlternateResourceModuleEx |
LdrLoadDll | LdrLockLoaderLock |
LdrOpenImageFileOptionsKey | LdrProcessRelocationBlock |
LdrQueryImageFileExecutionOptions | LdrQueryImageFileExecutionOptionsEx |
LdrQueryImageFileKeyOption | LdrQueryModuleServiceTags |
LdrQueryProcessModuleInformation | LdrRegisterDllNotification |
LdrRemoveLoadAsDataTable | LdrResFindResource |
LdrResFindResourceDirectory | LdrResGetRCConfig |
LdrResRelease | LdrResSearchResource |
LdrRscIsTypeExist | LdrSetAppCompatDllRedirectionCallback |
LdrSetDllManifestProber | LdrSetMUICacheType |
LdrShutdownProcess | LdrShutdownThread |
LdrUnloadAlternateResourceModule | LdrUnloadAlternateResourceModuleEx |
LdrUnloadDll | LdrUnlockLoaderLock |
LdrUnregisterDllNotification | LdrVerifyImageMatchesChecksum |
LdrVerifyImageMatchesChecksumEx | LdrpResGetMappingSize |
LdrpResGetResourceDirectory | MD4Final |
MD4Init | MD4Update |
MD5Final | MD5Init |
MD5Update | NlsAnsiCodePage |
NlsMbCodePageTag | NlsMbOemCodePageTag |
NtAcceptConnectPort | NtAccessCheck |
NtAccessCheckAndAuditAlarm | NtAccessCheckByType |
NtAccessCheckByTypeAndAuditAlarm | NtAccessCheckByTypeResultList |
NtAccessCheckByTypeResultListAndAuditAlarm | NtAccessCheckByTypeResultListAndAuditAlarmByHandle |
NtAddAtom | NtAddBootEntry |
NtAddDriverEntry | NtAdjustGroupsToken |
NtAdjustPrivilegesToken | NtAlertResumeThread |
NtAlertThread | NtAllocateLocallyUniqueId |
NtAllocateReserveObject | NtAllocateUserPhysicalPages |
NtAllocateUuids | NtAllocateVirtualMemory |
NtAlpcAcceptConnectPort | NtAlpcCancelMessage |
NtAlpcConnectPort | NtAlpcCreatePort |
NtAlpcCreatePortSection | NtAlpcCreateResourceReserve |
NtAlpcCreateSectionView | NtAlpcCreateSecurityContext |
NtAlpcDeletePortSection | NtAlpcDeleteResourceReserve |
NtAlpcDeleteSectionView | NtAlpcDeleteSecurityContext |
NtAlpcDisconnectPort | NtAlpcImpersonateClientOfPort |
NtAlpcOpenSenderProcess | NtAlpcOpenSenderThread |
NtAlpcQueryInformation | NtAlpcQueryInformationMessage |
NtAlpcRevokeSecurityContext | NtAlpcSendWaitReceivePort |
NtAlpcSetInformation | NtApphelpCacheControl |
NtAreMappedFilesTheSame | NtAssignProcessToJobObject |
NtCallbackReturn | NtCancelIoFile |
NtCancelIoFileEx | NtCancelSynchronousIoFile |
NtCancelTimer | NtClearEvent |
NtClose | NtCloseObjectAuditAlarm |
NtCommitComplete | NtCommitEnlistment |
NtCommitTransaction | NtCompactKeys |
NtCompareTokens | NtCompleteConnectPort |
NtCompressKey | NtConnectPort |
NtContinue | NtCreateDebugObject |
NtCreateDirectoryObject | NtCreateEnlistment |
NtCreateEvent | NtCreateEventPair |
NtCreateFile | NtCreateIoCompletion |
NtCreateJobObject | NtCreateJobSet |
NtCreateKey | NtCreateKeyTransacted |
NtCreateKeyedEvent | NtCreateMailslotFile |
NtCreateMutant | NtCreateNamedPipeFile |
NtCreatePagingFile | NtCreatePort |
NtCreatePrivateNamespace | NtCreateProcess |
NtCreateProcessEx | NtCreateProfile |
NtCreateProfileEx | NtCreateResourceManager |
NtCreateSection | NtCreateSemaphore |
NtCreateSymbolicLinkObject | NtCreateThread |
NtCreateThreadEx | NtCreateTimer |
NtCreateToken | NtCreateTransaction |
NtCreateTransactionManager | NtCreateUserProcess |
NtCreateWaitablePort | NtCreateWorkerFactory |
NtCurrentTeb | NtDebugActiveProcess |
NtDebugContinue | NtDelayExecution |
NtDeleteAtom | NtDeleteBootEntry |
NtDeleteDriverEntry | NtDeleteFile |
NtDeleteKey | NtDeleteObjectAuditAlarm |
NtDeletePrivateNamespace | NtDeleteValueKey |
NtDeviceIoControlFile | NtDisableLastKnownGood |
NtDisplayString | NtDrawText |
NtDuplicateObject | NtDuplicateToken |
NtEnableLastKnownGood | NtEnumerateBootEntries |
NtEnumerateDriverEntries | NtEnumerateKey |
NtEnumerateSystemEnvironmentValuesEx | NtEnumerateTransactionObject |
NtEnumerateValueKey | NtExtendSection |
NtFilterToken | NtFindAtom |
NtFlushBuffersFile | NtFlushInstallUILanguage |
NtFlushInstructionCache | NtFlushKey |
NtFlushProcessWriteBuffers | NtFlushVirtualMemory |
NtFlushWriteBuffer | NtFreeUserPhysicalPages |
NtFreeVirtualMemory | NtFreezeRegistry |
NtFreezeTransactions | NtFsControlFile |
NtGetContextThread | NtGetCurrentProcessorNumber |
NtGetDevicePowerState | NtGetMUIRegistryInfo |
NtGetNextProcess | NtGetNextThread |
NtGetNlsSectionPtr | NtGetNotificationResourceManager |
NtGetPlugPlayEvent | NtGetTickCount |
NtGetWriteWatch | NtImpersonateAnonymousToken |
NtImpersonateClientOfPort | NtImpersonateThread |
NtInitializeNlsFiles | NtInitializeRegistry |
NtInitiatePowerAction | NtIsProcessInJob |
NtIsSystemResumeAutomatic | NtIsUILanguageComitted |
NtListenPort | NtLoadDriver |
NtLoadKey | NtLoadKey2 |
NtLoadKeyEx | NtLockFile |
NtLockProductActivationKeys | NtLockRegistryKey |
NtLockVirtualMemory | NtMakePermanentObject |
NtMakeTemporaryObject | NtMapCMFModule |
NtMapUserPhysicalPages | NtMapUserPhysicalPagesScatter |
NtMapViewOfSection | NtModifyBootEntry |
NtModifyDriverEntry | NtNotifyChangeDirectoryFile |
NtNotifyChangeKey | NtNotifyChangeMultipleKeys |
NtNotifyChangeSession | NtOpenDirectoryObject |
NtOpenEnlistment | NtOpenEvent |
NtOpenEventPair | NtOpenFile |
NtOpenIoCompletion | NtOpenJobObject |
NtOpenKey | NtOpenKeyEx |
NtOpenKeyTransacted | NtOpenKeyTransactedEx |
NtOpenKeyedEvent | NtOpenMutant |
NtOpenObjectAuditAlarm | NtOpenPrivateNamespace |
NtOpenProcess | NtOpenProcessToken |
NtOpenProcessTokenEx | NtOpenResourceManager |
NtOpenSection | NtOpenSemaphore |
NtOpenSession | NtOpenSymbolicLinkObject |
NtOpenThread | NtOpenThreadToken |
NtOpenThreadTokenEx | NtOpenTimer |
NtOpenTransaction | NtOpenTransactionManager |
NtPlugPlayControl | NtPowerInformation |
NtPrePrepareComplete | NtPrePrepareEnlistment |
NtPrepareComplete | NtPrepareEnlistment |
NtPrivilegeCheck | NtPrivilegeObjectAuditAlarm |
NtPrivilegedServiceAuditAlarm | NtPropagationComplete |
NtPropagationFailed | NtProtectVirtualMemory |
NtPulseEvent | NtQueryAttributesFile |
NtQueryBootEntryOrder | NtQueryBootOptions |
NtQueryDebugFilterState | NtQueryDefaultLocale |
NtQueryDefaultUILanguage | NtQueryDirectoryFile |
NtQueryDirectoryObject | NtQueryDriverEntryOrder |
NtQueryEaFile | NtQueryEvent |
NtQueryFullAttributesFile | NtQueryInformationAtom |
NtQueryInformationEnlistment | NtQueryInformationFile |
NtQueryInformationJobObject | NtQueryInformationPort |
NtQueryInformationProcess | NtQueryInformationResourceManager |
NtQueryInformationThread | NtQueryInformationToken |
NtQueryInformationTransaction | NtQueryInformationTransactionManager |
NtQueryInformationWorkerFactory | NtQueryInstallUILanguage |
NtQueryIntervalProfile | NtQueryIoCompletion |
NtQueryKey | NtQueryLicenseValue |
NtQueryMultipleValueKey | NtQueryMutant |
NtQueryObject | NtQueryOpenSubKeys |
NtQueryOpenSubKeysEx | NtQueryPerformanceCounter |
NtQueryPortInformationProcess | NtQueryQuotaInformationFile |
NtQuerySection | NtQuerySecurityAttributesToken |
NtQuerySecurityObject | NtQuerySemaphore |
NtQuerySymbolicLinkObject | NtQuerySystemEnvironmentValue |
NtQuerySystemEnvironmentValueEx | NtQuerySystemInformation |
NtQuerySystemInformationEx | NtQuerySystemTime |
NtQueryTimer | NtQueryTimerResolution |
NtQueryValueKey | NtQueryVirtualMemory |
NtQueryVolumeInformationFile | NtQueueApcThread |
NtQueueApcThreadEx | NtRaiseException |
NtRaiseHardError | NtReadFile |
NtReadFileScatter | NtReadOnlyEnlistment |
NtReadRequestData | NtReadVirtualMemory |
NtRecoverEnlistment | NtRecoverResourceManager |
NtRecoverTransactionManager | NtRegisterProtocolAddressInformation |
NtRegisterThreadTerminatePort | NtReleaseKeyedEvent |
NtReleaseMutant | NtReleaseSemaphore |
NtReleaseWorkerFactoryWorker | NtRemoveIoCompletion |
NtRemoveIoCompletionEx | NtRemoveProcessDebug |
NtRenameKey | NtRenameTransactionManager |
NtReplaceKey | NtReplacePartitionUnit |
NtReplyPort | NtReplyWaitReceivePort |
NtReplyWaitReceivePortEx | NtReplyWaitReplyPort |
NtRequestPort | NtRequestWaitReplyPort |
NtResetEvent | NtResetWriteWatch |
NtRestoreKey | NtResumeProcess |
NtResumeThread | NtRollbackComplete |
NtRollbackEnlistment | NtRollbackTransaction |
NtRollforwardTransactionManager | NtSaveKey |
NtSaveKeyEx | NtSaveMergedKeys |
NtSecureConnectPort | NtSerializeBoot |
NtSetBootEntryOrder | NtSetBootOptions |
NtSetContextThread | NtSetDebugFilterState |
NtSetDefaultHardErrorPort | NtSetDefaultLocale |
NtSetDefaultUILanguage | NtSetDriverEntryOrder |
NtSetEaFile | NtSetEvent |
NtSetEventBoostPriority | NtSetHighEventPair |
NtSetHighWaitLowEventPair | NtSetInformationDebugObject |
NtSetInformationEnlistment | NtSetInformationFile |
NtSetInformationJobObject | NtSetInformationKey |
NtSetInformationObject | NtSetInformationProcess |
NtSetInformationResourceManager | NtSetInformationThread |
NtSetInformationToken | NtSetInformationTransaction |
NtSetInformationTransactionManager | NtSetInformationWorkerFactory |
NtSetIntervalProfile | NtSetIoCompletion |
NtSetIoCompletionEx | NtSetLdtEntries |
NtSetLowEventPair | NtSetLowWaitHighEventPair |
NtSetQuotaInformationFile | NtSetSecurityObject |
NtSetSystemEnvironmentValue | NtSetSystemEnvironmentValueEx |
NtSetSystemInformation | NtSetSystemPowerState |
NtSetSystemTime | NtSetThreadExecutionState |
NtSetTimer | NtSetTimerEx |
NtSetTimerResolution | NtSetUuidSeed |
NtSetValueKey | NtSetVolumeInformationFile |
NtShutdownSystem | NtShutdownWorkerFactory |
NtSignalAndWaitForSingleObject | NtSinglePhaseReject |
NtStartProfile | NtStopProfile |
NtSuspendProcess | NtSuspendThread |
NtSystemDebugControl | NtTerminateJobObject |
NtTerminateProcess | NtTerminateThread |
NtTestAlert | NtThawRegistry |
NtThawTransactions | NtTraceControl |
NtTraceEvent | NtTranslateFilePath |
NtUmsThreadYield | NtUnloadDriver |
NtUnloadKey | NtUnloadKey2 |
NtUnloadKeyEx | NtUnlockFile |
NtUnlockVirtualMemory | NtUnmapViewOfSection |
NtVdmControl | NtWaitForDebugEvent |
NtWaitForKeyedEvent | NtWaitForMultipleObjects |
NtWaitForMultipleObjects32 | NtWaitForSingleObject |
NtWaitForWorkViaWorkerFactory | NtWaitHighEventPair |
NtWaitLowEventPair | NtWorkerFactoryWorkerReady |
NtWriteFile | NtWriteFileGather |
NtWriteRequestData | NtWriteVirtualMemory |
NtYieldExecution | NtdllDefWindowProc_A |
NtdllDefWindowProc_W | NtdllDialogWndProc_A |
NtdllDialogWndProc_W | PfxFindPrefix |
PfxInitialize | PfxInsertPrefix |
PfxRemovePrefix | RtlAbortRXact |
RtlAbsoluteToSelfRelativeSD | RtlAcquirePebLock |
RtlAcquirePrivilege | RtlAcquireReleaseSRWLockExclusive |
RtlAcquireResourceExclusive | RtlAcquireResourceShared |
RtlAcquireSRWLockExclusive | RtlAcquireSRWLockShared |
RtlActivateActivationContext | RtlActivateActivationContextEx |
RtlActivateActivationContextUnsafeFast | RtlAddAccessAllowedAce |
RtlAddAccessAllowedAceEx | RtlAddAccessAllowedObjectAce |
RtlAddAccessDeniedAce | RtlAddAccessDeniedAceEx |
RtlAddAccessDeniedObjectAce | RtlAddAce |
RtlAddActionToRXact | RtlAddAtomToAtomTable |
RtlAddAttributeActionToRXact | RtlAddAuditAccessAce |
RtlAddAuditAccessAceEx | RtlAddAuditAccessObjectAce |
RtlAddCompoundAce | RtlAddIntegrityLabelToBoundaryDescriptor |
RtlAddMandatoryAce | RtlAddRefActivationContext |
RtlAddRefMemoryStream | RtlAddSIDToBoundaryDescriptor |
RtlAddVectoredContinueHandler | RtlAddVectoredExceptionHandler |
RtlAddressInSectionTable | RtlAdjustPrivilege |
RtlAllocateActivationContextStack | RtlAllocateAndInitializeSid |
RtlAllocateHandle | RtlAllocateHeap |
RtlAllocateMemoryBlockLookaside | RtlAllocateMemoryZone |
RtlAnsiCharToUnicodeChar | RtlAnsiStringToUnicodeSize |
RtlAnsiStringToUnicodeString | RtlAppendAsciizToString |
RtlAppendPathElement | RtlAppendStringToString |
RtlAppendUnicodeStringToString | RtlAppendUnicodeToString |
RtlApplicationVerifierStop | RtlApplyRXact |
RtlApplyRXactNoFlush | RtlAreAllAccessesGranted |
RtlAreAnyAccessesGranted | RtlAreBitsClear |
RtlAreBitsSet | RtlAssert |
RtlBarrier | RtlBarrierForDelete |
RtlCancelTimer | RtlCaptureContext |
RtlCaptureStackBackTrace | RtlCaptureStackContext |
RtlCharToInteger | RtlCheckForOrphanedCriticalSections |
RtlCheckRegistryKey | RtlCleanUpTEBLangLists |
RtlClearAllBits | RtlClearBits |
RtlCloneMemoryStream | RtlCloneUserProcess |
RtlCmDecodeMemIoResource | RtlCmEncodeMemIoResource |
RtlCommitDebugInfo | RtlCommitMemoryStream |
RtlCompactHeap | RtlCompareAltitudes |
RtlCompareMemory | RtlCompareMemoryUlong |
RtlCompareString | RtlCompareUnicodeString |
RtlCompareUnicodeStrings | RtlCompressBuffer |
RtlComputeCrc32 | RtlComputeImportTableHash |
RtlComputePrivatizedDllName_U | RtlConnectToSm |
RtlConsoleMultiByteToUnicodeN | RtlContractHashTable |
RtlConvertExclusiveToShared | RtlConvertLCIDToString |
RtlConvertLongToLargeInteger | RtlConvertSharedToExclusive |
RtlConvertSidToUnicodeString | RtlConvertToAutoInheritSecurityObject |
RtlConvertUiListToApiList | RtlConvertUlongToLargeInteger |
RtlCopyExtendedContext | RtlCopyLuid |
RtlCopyLuidAndAttributesArray | RtlCopyMappedMemory |
RtlCopyMemoryStreamTo | RtlCopyOutOfProcessMemoryStreamTo |
RtlCopySecurityDescriptor | RtlCopySid |
RtlCopySidAndAttributesArray | RtlCopyString |
RtlCopyUnicodeString | RtlCreateAcl |
RtlCreateActivationContext | RtlCreateAndSetSD |
RtlCreateAtomTable | RtlCreateBootStatusDataFile |
RtlCreateBoundaryDescriptor | RtlCreateEnvironment |
RtlCreateEnvironmentEx | RtlCreateHashTable |
RtlCreateHeap | RtlCreateMemoryBlockLookaside |
RtlCreateMemoryZone | RtlCreateProcessParameters |
RtlCreateProcessParametersEx | RtlCreateProcessReflection |
RtlCreateQueryDebugBuffer | RtlCreateRegistryKey |
RtlCreateSecurityDescriptor | RtlCreateServiceSid |
RtlCreateSystemVolumeInformationFolder | RtlCreateTagHeap |
RtlCreateTimer | RtlCreateTimerQueue |
RtlCreateUnicodeString | RtlCreateUnicodeStringFromAsciiz |
RtlCreateUserProcess | RtlCreateUserSecurityObject |
RtlCreateUserStack | RtlCreateUserThread |
RtlCreateVirtualAccountSid | RtlCultureNameToLCID |
RtlCustomCPToUnicodeN | RtlCutoverTimeToSystemTime |
RtlDeCommitDebugInfo | RtlDeNormalizeProcessParams |
RtlDeactivateActivationContext | RtlDeactivateActivationContextUnsafeFast |
RtlDebugPrintTimes | RtlDecodePointer |
RtlDecodeSystemPointer | RtlDecompressBuffer |
RtlDecompressFragment | RtlDefaultNpAcl |
RtlDelete | RtlDeleteAce |
RtlDeleteAtomFromAtomTable | RtlDeleteBarrier |
RtlDeleteBoundaryDescriptor | RtlDeleteCriticalSection |
RtlDeleteElementGenericTable | RtlDeleteElementGenericTableAvl |
RtlDeleteHashTable | RtlDeleteNoSplay |
RtlDeleteRegistryValue | RtlDeleteResource |
RtlDeleteSecurityObject | RtlDeleteTimer |
RtlDeleteTimerQueue | RtlDeleteTimerQueueEx |
RtlDeregisterSecureMemoryCacheCallback | RtlDeregisterWait |
RtlDeregisterWaitEx | RtlDestroyAtomTable |
RtlDestroyEnvironment | RtlDestroyHandleTable |
RtlDestroyHeap | RtlDestroyMemoryBlockLookaside |
RtlDestroyMemoryZone | RtlDestroyProcessParameters |
RtlDestroyQueryDebugBuffer | RtlDetectHeapLeaks |
RtlDetermineDosPathNameType_U | RtlDisableThreadProfiling |
RtlDllShutdownInProgress | RtlDnsHostNameToComputerName |
RtlDoesFileExists_U | RtlDosApplyFileIsolationRedirection_Ustr |
RtlDosPathNameToNtPathName_U | RtlDosPathNameToNtPathName_U_WithStatus |
RtlDosPathNameToRelativeNtPathName_U | RtlDosPathNameToRelativeNtPathName_U_WithStatus |
RtlDosSearchPath_U | RtlDosSearchPath_Ustr |
RtlDowncaseUnicodeChar | RtlDowncaseUnicodeString |
RtlDumpResource | RtlDuplicateUnicodeString |
RtlEmptyAtomTable | RtlEnableEarlyCriticalSectionEventCreation |
RtlEnableThreadProfiling | RtlEncodePointer |
RtlEncodeSystemPointer | RtlEndEnumerationHashTable |
RtlEndWeakEnumerationHashTable | RtlEnlargedIntegerMultiply |
RtlEnlargedUnsignedDivide | RtlEnlargedUnsignedMultiply |
RtlEnterCriticalSection | RtlEnumProcessHeaps |
RtlEnumerateEntryHashTable | RtlEnumerateGenericTable |
RtlEnumerateGenericTableAvl | RtlEnumerateGenericTableLikeADirectory |
RtlEnumerateGenericTableWithoutSplaying | RtlEnumerateGenericTableWithoutSplayingAvl |
RtlEqualComputerName | RtlEqualDomainName |
RtlEqualLuid | RtlEqualPrefixSid |
RtlEqualSid | RtlEqualString |
RtlEqualUnicodeString | RtlEraseUnicodeString |
RtlEthernetAddressToStringA | RtlEthernetAddressToStringW |
RtlEthernetStringToAddressA | RtlEthernetStringToAddressW |
RtlExitUserProcess | RtlExitUserThread |
RtlExpandEnvironmentStrings | RtlExpandEnvironmentStrings_U |
RtlExpandHashTable | RtlExtendMemoryBlockLookaside |
RtlExtendMemoryZone | RtlExtendedIntegerMultiply |
RtlExtendedLargeIntegerDivide | RtlExtendedMagicDivide |
RtlFillMemory | RtlFillMemoryUlong |
RtlFillMemoryUlonglong | RtlFinalReleaseOutOfProcessMemoryStream |
RtlFindAceByType | RtlFindActivationContextSectionGuid |
RtlFindActivationContextSectionString | RtlFindCharInUnicodeString |
RtlFindClearBits | RtlFindClearBitsAndSet |
RtlFindClearRuns | RtlFindClosestEncodableLength |
RtlFindLastBackwardRunClear | RtlFindLeastSignificantBit |
RtlFindLongestRunClear | RtlFindMessage |
RtlFindMostSignificantBit | RtlFindNextForwardRunClear |
RtlFindSetBits | RtlFindSetBitsAndClear |
RtlFirstEntrySList | RtlFirstFreeAce |
RtlFlsAlloc | RtlFlsFree |
RtlFlushSecureMemoryCache | RtlFormatCurrentUserKeyPath |
RtlFormatMessage | RtlFormatMessageEx |
RtlFreeActivationContextStack | RtlFreeAnsiString |
RtlFreeHandle | RtlFreeHeap |
RtlFreeMemoryBlockLookaside | RtlFreeOemString |
RtlFreeSid | RtlFreeThreadActivationContextStack |
RtlFreeUnicodeString | RtlFreeUserStack |
RtlGUIDFromString | RtlGenerate8dot3Name |
RtlGetAce | RtlGetActiveActivationContext |
RtlGetCallersAddress | RtlGetCompressionWorkSpaceSize |
RtlGetControlSecurityDescriptor | RtlGetCriticalSectionRecursionCount |
RtlGetCurrentDirectory_U | RtlGetCurrentPeb |
RtlGetCurrentProcessorNumber | RtlGetCurrentProcessorNumberEx |
RtlGetCurrentTransaction | RtlGetDaclSecurityDescriptor |
RtlGetElementGenericTable | RtlGetElementGenericTableAvl |
RtlGetEnabledExtendedFeatures | RtlGetExtendedContextLength |
RtlGetExtendedFeaturesMask | RtlGetFileMUIPath |
RtlGetFrame | RtlGetFullPathName_U |
RtlGetFullPathName_UEx | RtlGetFullPathName_UstrEx |
RtlGetGroupSecurityDescriptor | RtlGetIntegerAtom |
RtlGetLastNtStatus | RtlGetLastWin32Error |
RtlGetLengthWithoutLastFullDosOrNtPathElement | RtlGetLengthWithoutTrailingPathSeperators |
RtlGetLocaleFileMappingAddress | RtlGetLongestNtPathLength |
RtlGetNativeSystemInformation | RtlGetNextEntryHashTable |
RtlGetNtGlobalFlags | RtlGetNtProductType |
RtlGetNtVersionNumbers | RtlGetOwnerSecurityDescriptor |
RtlGetParentLocaleName | RtlGetProcessHeaps |
RtlGetProcessPreferredUILanguages | RtlGetProductInfo |
RtlGetSaclSecurityDescriptor | RtlGetSecurityDescriptorRMControl |
RtlGetSetBootStatusData | RtlGetSystemPreferredUILanguages |
RtlGetThreadErrorMode | RtlGetThreadLangIdByIndex |
RtlGetThreadPreferredUILanguages | RtlGetUILanguageInfo |
RtlGetUnloadEventTrace | RtlGetUnloadEventTraceEx |
RtlGetUserInfoHeap | RtlGetUserPreferredUILanguages |
RtlGetVersion | RtlHashUnicodeString |
RtlHeapTrkInitialize | RtlIdentifierAuthoritySid |
RtlIdnToAscii | RtlIdnToNameprepUnicode |
RtlIdnToUnicode | RtlImageDirectoryEntryToData |
RtlImageNtHeader | RtlImageNtHeaderEx |
RtlImageRvaToSection | RtlImageRvaToVa |
RtlImpersonateSelf | RtlImpersonateSelfEx |
RtlInitAnsiString | RtlInitAnsiStringEx |
RtlInitBarrier | RtlInitCodePageTable |
RtlInitEnumerationHashTable | RtlInitMemoryStream |
RtlInitNlsTables | RtlInitOutOfProcessMemoryStream |
RtlInitString | RtlInitUnicodeString |
RtlInitUnicodeStringEx | RtlInitWeakEnumerationHashTable |
RtlInitializeAtomPackage | RtlInitializeBitMap |
RtlInitializeConditionVariable | RtlInitializeContext |
RtlInitializeCriticalSection | RtlInitializeCriticalSectionAndSpinCount |
RtlInitializeCriticalSectionEx | RtlInitializeExceptionChain |
RtlInitializeExtendedContext | RtlInitializeGenericTable |
RtlInitializeGenericTableAvl | RtlInitializeHandleTable |
RtlInitializeNtUserPfn | RtlInitializeRXact |
RtlInitializeResource | RtlInitializeSListHead |
RtlInitializeSRWLock | RtlInitializeSid |
RtlInsertElementGenericTable | RtlInsertElementGenericTableAvl |
RtlInsertElementGenericTableFull | RtlInsertElementGenericTableFullAvl |
RtlInsertEntryHashTable | RtlInt64ToUnicodeString |
RtlIntegerToChar | RtlIntegerToUnicodeString |
RtlInterlockedClearBitRun | RtlInterlockedCompareExchange64 |
RtlInterlockedFlushSList | RtlInterlockedPopEntrySList |
RtlInterlockedPushEntrySList | RtlInterlockedPushListSList |
RtlInterlockedSetBitRun | RtlIoDecodeMemIoResource |
RtlIoEncodeMemIoResource | RtlIpv4AddressToStringA |
RtlIpv4AddressToStringExA | RtlIpv4AddressToStringExW |
RtlIpv4AddressToStringW | RtlIpv4StringToAddressA |
RtlIpv4StringToAddressExA | RtlIpv4StringToAddressExW |
RtlIpv4StringToAddressW | RtlIpv6AddressToStringA |
RtlIpv6AddressToStringExA | RtlIpv6AddressToStringExW |
RtlIpv6AddressToStringW | RtlIpv6StringToAddressA |
RtlIpv6StringToAddressExA | RtlIpv6StringToAddressExW |
RtlIpv6StringToAddressW | RtlIsActivationContextActive |
RtlIsCriticalSectionLocked | RtlIsCriticalSectionLockedByThread |
RtlIsCurrentThreadAttachExempt | RtlIsDosDeviceName_U |
RtlIsGenericTableEmpty | RtlIsGenericTableEmptyAvl |
RtlIsNameInExpression | RtlIsNameLegalDOS8Dot3 |
RtlIsNormalizedString | RtlIsTextUnicode |
RtlIsThreadWithinLoaderCallout | RtlIsValidHandle |
RtlIsValidIndexHandle | RtlIsValidLocaleName |
RtlKnownExceptionFilter | RtlLCIDToCultureName |
RtlLargeIntegerAdd | RtlLargeIntegerArithmeticShift |
RtlLargeIntegerDivide | RtlLargeIntegerNegate |
RtlLargeIntegerShiftLeft | RtlLargeIntegerShiftRight |
RtlLargeIntegerSubtract | RtlLargeIntegerToChar |
RtlLcidToLocaleName | RtlLeaveCriticalSection |
RtlLengthRequiredSid | RtlLengthSecurityDescriptor |
RtlLengthSid | RtlLoadString |
RtlLocalTimeToSystemTime | RtlLocaleNameToLcid |
RtlLocateExtendedFeature | RtlLocateLegacyContext |
RtlLockBootStatusData | RtlLockCurrentThread |
RtlLockHeap | RtlLockMemoryBlockLookaside |
RtlLockMemoryStreamRegion | RtlLockMemoryZone |
RtlLockModuleSection | RtlLogStackBackTrace |
RtlLookupAtomInAtomTable | RtlLookupElementGenericTable |
RtlLookupElementGenericTableAvl | RtlLookupElementGenericTableFull |
RtlLookupElementGenericTableFullAvl | RtlLookupEntryHashTable |
RtlMakeSelfRelativeSD | RtlMapGenericMask |
RtlMapSecurityErrorToNtStatus | RtlMoveMemory |
RtlMultiAppendUnicodeStringBuffer | RtlMultiByteToUnicodeN |
RtlMultiByteToUnicodeSize | RtlMultipleAllocateHeap |
RtlMultipleFreeHeap | RtlNewInstanceSecurityObject |
RtlNewSecurityGrantedAccess | RtlNewSecurityObject |
RtlNewSecurityObjectEx | RtlNewSecurityObjectWithMultipleInheritance |
RtlNormalizeProcessParams | RtlNormalizeString |
RtlNtPathNameToDosPathName | RtlNtStatusToDosError |
RtlNtStatusToDosErrorNoTeb | RtlNumberGenericTableElements |
RtlNumberGenericTableElementsAvl | RtlNumberOfClearBits |
RtlNumberOfSetBits | RtlNumberOfSetBitsUlongPtr |
RtlOemStringToUnicodeSize | RtlOemStringToUnicodeString |
RtlOemToUnicodeN | RtlOpenCurrentUser |
RtlOwnerAcesPresent | RtlPcToFileHeader |
RtlPinAtomInAtomTable | RtlPopFrame |
RtlPrefixString | RtlPrefixUnicodeString |
RtlProcessFlsData | RtlProtectHeap |
RtlPushFrame | RtlQueryActivationContextApplicationSettings |
RtlQueryAtomInAtomTable | RtlQueryCriticalSectionOwner |
RtlQueryDepthSList | RtlQueryDynamicTimeZoneInformation |
RtlQueryElevationFlags | RtlQueryEnvironmentVariable |
RtlQueryEnvironmentVariable_U | RtlQueryHeapInformation |
RtlQueryInformationAcl | RtlQueryInformationActivationContext |
RtlQueryInformationActiveActivationContext | RtlQueryInterfaceMemoryStream |
RtlQueryModuleInformation | RtlQueryPerformanceCounter |
RtlQueryPerformanceFrequency | RtlQueryProcessBackTraceInformation |
RtlQueryProcessDebugInformation | RtlQueryProcessHeapInformation |
RtlQueryProcessLockInformation | RtlQueryRegistryValues |
RtlQuerySecurityObject | RtlQueryTagHeap |
RtlQueryThreadProfiling | RtlQueryTimeZoneInformation |
RtlQueueApcWow64Thread | RtlQueueWorkItem |
RtlRaiseException | RtlRaiseStatus |
RtlRandom | RtlRandomEx |
RtlReAllocateHeap | RtlReadMemoryStream |
RtlReadOutOfProcessMemoryStream | RtlReadThreadProfilingData |
RtlRealPredecessor | RtlRealSuccessor |
RtlRegisterSecureMemoryCacheCallback | RtlRegisterThreadWithCsrss |
RtlRegisterWait | RtlReleaseActivationContext |
RtlReleaseMemoryStream | RtlReleasePebLock |
RtlReleasePrivilege | RtlReleaseRelativeName |
RtlReleaseResource | RtlReleaseSRWLockExclusive |
RtlReleaseSRWLockShared | RtlRemoteCall |
RtlRemoveEntryHashTable | RtlRemovePrivileges |
RtlRemoveVectoredContinueHandler | RtlRemoveVectoredExceptionHandler |
RtlReplaceSidInSd | RtlReportException |
RtlReportSilentProcessExit | RtlReportSqmEscalation |
RtlResetMemoryBlockLookaside | RtlResetMemoryZone |
RtlResetRtlTranslations | RtlRestoreLastWin32Error |
RtlRetrieveNtUserPfn | RtlRevertMemoryStream |
RtlRunDecodeUnicodeString | RtlRunEncodeUnicodeString |
RtlRunOnceBeginInitialize | RtlRunOnceComplete |
RtlRunOnceExecuteOnce | RtlRunOnceInitialize |
RtlSecondsSince1970ToTime | RtlSecondsSince1980ToTime |
RtlSeekMemoryStream | RtlSelfRelativeToAbsoluteSD |
RtlSelfRelativeToAbsoluteSD2 | RtlSendMsgToSm |
RtlSetAllBits | RtlSetAttributesSecurityDescriptor |
RtlSetBits | RtlSetControlSecurityDescriptor |
RtlSetCriticalSectionSpinCount | RtlSetCurrentDirectory_U |
RtlSetCurrentEnvironment | RtlSetCurrentTransaction |
RtlSetDaclSecurityDescriptor | RtlSetDynamicTimeZoneInformation |
RtlSetEnvironmentStrings | RtlSetEnvironmentVar |
RtlSetEnvironmentVariable | RtlSetExtendedFeaturesMask |
RtlSetGroupSecurityDescriptor | RtlSetHeapInformation |
RtlSetInformationAcl | RtlSetIoCompletionCallback |
RtlSetLastWin32Error | RtlSetLastWin32ErrorAndNtStatusFromNtStatus |
RtlSetMemoryStreamSize | RtlSetOwnerSecurityDescriptor |
RtlSetProcessDebugInformation | RtlSetProcessIsCritical |
RtlSetProcessPreferredUILanguages | RtlSetSaclSecurityDescriptor |
RtlSetSecurityDescriptorRMControl | RtlSetSecurityObject |
RtlSetSecurityObjectEx | RtlSetThreadErrorMode |
RtlSetThreadIsCritical | RtlSetThreadPoolStartFunc |
RtlSetThreadPreferredUILanguages | RtlSetTimeZoneInformation |
RtlSetTimer | RtlSetUnhandledExceptionFilter |
RtlSetUserFlagsHeap | RtlSetUserValueHeap |
RtlSidDominates | RtlSidEqualLevel |
RtlSidHashInitialize | RtlSidHashLookup |
RtlSidIsHigherLevel | RtlSizeHeap |
RtlSleepConditionVariableCS | RtlSleepConditionVariableSRW |
RtlSplay | RtlStartRXact |
RtlStatMemoryStream | RtlStringFromGUID |
RtlSubAuthorityCountSid | RtlSubAuthoritySid |
RtlSubtreePredecessor | RtlSubtreeSuccessor |
RtlSystemTimeToLocalTime | RtlTestBit |
RtlTimeFieldsToTime | RtlTimeToElapsedTimeFields |
RtlTimeToSecondsSince1970 | RtlTimeToSecondsSince1980 |
RtlTimeToTimeFields | RtlTraceDatabaseAdd |
RtlTraceDatabaseCreate | RtlTraceDatabaseDestroy |
RtlTraceDatabaseEnumerate | RtlTraceDatabaseFind |
RtlTraceDatabaseLock | RtlTraceDatabaseUnlock |
RtlTraceDatabaseValidate | RtlTryAcquirePebLock |
RtlTryAcquireSRWLockExclusive | RtlTryAcquireSRWLockShared |
RtlTryEnterCriticalSection | RtlUTF8ToUnicodeN |
RtlUlongByteSwap | RtlUlonglongByteSwap |
RtlUnhandledExceptionFilter | RtlUnhandledExceptionFilter2 |
RtlUnicodeStringToAnsiSize | RtlUnicodeStringToAnsiString |
RtlUnicodeStringToCountedOemString | RtlUnicodeStringToInteger |
RtlUnicodeStringToOemSize | RtlUnicodeStringToOemString |
RtlUnicodeToCustomCPN | RtlUnicodeToMultiByteN |
RtlUnicodeToMultiByteSize | RtlUnicodeToOemN |
RtlUnicodeToUTF8N | RtlUniform |
RtlUnlockBootStatusData | RtlUnlockCurrentThread |
RtlUnlockHeap | RtlUnlockMemoryBlockLookaside |
RtlUnlockMemoryStreamRegion | RtlUnlockMemoryZone |
RtlUnlockModuleSection | RtlUnwind |
RtlUpcaseUnicodeChar | RtlUpcaseUnicodeString |
RtlUpcaseUnicodeStringToAnsiString | RtlUpcaseUnicodeStringToCountedOemString |
RtlUpcaseUnicodeStringToOemString | RtlUpcaseUnicodeToCustomCPN |
RtlUpcaseUnicodeToMultiByteN | RtlUpcaseUnicodeToOemN |
RtlUpdateClonedCriticalSection | RtlUpdateClonedSRWLock |
RtlUpdateTimer | RtlUpperChar |
RtlUpperString | RtlUserThreadStart |
RtlUshortByteSwap | RtlValidAcl |
RtlValidRelativeSecurityDescriptor | RtlValidSecurityDescriptor |
RtlValidSid | RtlValidateHeap |
RtlValidateProcessHeaps | RtlValidateUnicodeString |
RtlVerifyVersionInfo | RtlWakeAllConditionVariable |
RtlWakeConditionVariable | RtlWalkFrameChain |
RtlWalkHeap | RtlWeaklyEnumerateEntryHashTable |
RtlWerpReportException | RtlWow64CallFunction64 |
RtlWow64EnableFsRedirection | RtlWow64EnableFsRedirectionEx |
RtlWriteMemoryStream | RtlWriteRegistryValue |
RtlZeroHeap | RtlZeroMemory |
RtlZombifyActivationContext | RtlpApplyLengthFunction |
RtlpCheckDynamicTimeZoneInformation | RtlpCleanupRegistryKeys |
RtlpConvertCultureNamesToLCIDs | RtlpConvertLCIDsToCultureNames |
RtlpCreateProcessRegistryInfo | RtlpEnsureBufferSize |
RtlpGetLCIDFromLangInfoNode | RtlpGetNameFromLangInfoNode |
RtlpGetSystemDefaultUILanguage | RtlpGetUserOrMachineUILanguage4NLS |
RtlpInitializeLangRegistryInfo | RtlpIsQualifiedLanguage |
RtlpLoadMachineUIByPolicy | RtlpLoadUserUIByPolicy |
RtlpMuiFreeLangRegistryInfo | RtlpMuiRegCreateRegistryInfo |
RtlpMuiRegFreeRegistryInfo | RtlpMuiRegLoadRegistryInfo |
RtlpNotOwnerCriticalSection | RtlpNtCreateKey |
RtlpNtEnumerateSubKey | RtlpNtMakeTemporaryKey |
RtlpNtOpenKey | RtlpNtQueryValueKey |
RtlpNtSetValueKey | RtlpQueryDefaultUILanguage |
RtlpRefreshCachedUILanguage | RtlpSetInstallLanguage |
RtlpSetPreferredUILanguages | RtlpSetUserPreferredUILanguages |
RtlpUnWaitCriticalSection | RtlpVerifyAndCommitUILanguageSettings |
RtlpWaitForCriticalSection | RtlxAnsiStringToUnicodeSize |
RtlxOemStringToUnicodeSize | RtlxUnicodeStringToAnsiSize |
RtlxUnicodeStringToOemSize | SbExecuteProcedure |
SbSelectProcedure | ShipAssert |
ShipAssertGetBufferInfo | ShipAssertMsgA |
ShipAssertMsgW | TpAllocAlpcCompletion |
TpAllocAlpcCompletionEx | TpAllocCleanupGroup |
TpAllocIoCompletion | TpAllocPool |
TpAllocTimer | TpAllocWait |
TpAllocWork | TpAlpcRegisterCompletionList |
TpAlpcUnregisterCompletionList | TpCallbackIndependent |
TpCallbackLeaveCriticalSectionOnCompletion | TpCallbackMayRunLong |
TpCallbackReleaseMutexOnCompletion | TpCallbackReleaseSemaphoreOnCompletion |
TpCallbackSetEventOnCompletion | TpCallbackUnloadDllOnCompletion |
TpCancelAsyncIoOperation | TpCaptureCaller |
TpCheckTerminateWorker | TpDbgDumpHeapUsage |
TpDbgGetFreeInfo | TpDbgSetLogRoutine |
TpDisablePoolCallbackChecks | TpDisassociateCallback |
TpIsTimerSet | TpPoolFreeUnusedNodes |
TpPostWork | TpQueryPoolStackInformation |
TpReleaseAlpcCompletion | TpReleaseCleanupGroup |
TpReleaseCleanupGroupMembers | TpReleaseIoCompletion |
TpReleasePool | TpReleaseTimer |
TpReleaseWait | TpReleaseWork |
TpSetDefaultPoolMaxThreads | TpSetDefaultPoolStackInformation |
TpSetPoolMaxThreads | TpSetPoolMinThreads |
TpSetPoolStackInformation | TpSetTimer |
TpSetWait | TpSimpleTryPost |
TpStartAsyncIoOperation | TpWaitForAlpcCompletion |
TpWaitForIoCompletion | TpWaitForTimer |
TpWaitForWait | TpWaitForWork |
VerSetConditionMask | WerReportSQMEvent |
WinSqmAddToAverageDWORD | WinSqmAddToStream |
WinSqmAddToStreamEx | WinSqmCheckEscalationAddToStreamEx |
WinSqmCheckEscalationSetDWORD | WinSqmCheckEscalationSetDWORD64 |
WinSqmCheckEscalationSetString | WinSqmCommonDatapointDelete |
WinSqmCommonDatapointSetDWORD | WinSqmCommonDatapointSetDWORD64 |
WinSqmCommonDatapointSetStreamEx | WinSqmCommonDatapointSetString |
WinSqmEndSession | WinSqmEventEnabled |
WinSqmEventWrite | WinSqmGetEscalationRuleStatus |
WinSqmGetInstrumentationProperty | WinSqmIncrementDWORD |
WinSqmIsOptedIn | WinSqmIsOptedInEx |
WinSqmSetDWORD | WinSqmSetDWORD64 |
WinSqmSetEscalationInfo | WinSqmSetIfMaxDWORD |
WinSqmSetIfMinDWORD | WinSqmSetString |
WinSqmStartSession | ZwAcceptConnectPort |
ZwAccessCheck | ZwAccessCheckAndAuditAlarm |
ZwAccessCheckByType | ZwAccessCheckByTypeAndAuditAlarm |
ZwAccessCheckByTypeResultList | ZwAccessCheckByTypeResultListAndAuditAlarm |
ZwAccessCheckByTypeResultListAndAuditAlarmByHandle | ZwAddAtom |
ZwAddBootEntry | ZwAddDriverEntry |
ZwAdjustGroupsToken | ZwAdjustPrivilegesToken |
ZwAlertResumeThread | ZwAlertThread |
ZwAllocateLocallyUniqueId | ZwAllocateReserveObject |
ZwAllocateUserPhysicalPages | ZwAllocateUuids |
ZwAllocateVirtualMemory | ZwAlpcAcceptConnectPort |
ZwAlpcCancelMessage | ZwAlpcConnectPort |
ZwAlpcCreatePort | ZwAlpcCreatePortSection |
ZwAlpcCreateResourceReserve | ZwAlpcCreateSectionView |
ZwAlpcCreateSecurityContext | ZwAlpcDeletePortSection |
ZwAlpcDeleteResourceReserve | ZwAlpcDeleteSectionView |
ZwAlpcDeleteSecurityContext | ZwAlpcDisconnectPort |
ZwAlpcImpersonateClientOfPort | ZwAlpcOpenSenderProcess |
ZwAlpcOpenSenderThread | ZwAlpcQueryInformation |
ZwAlpcQueryInformationMessage | ZwAlpcRevokeSecurityContext |
ZwAlpcSendWaitReceivePort | ZwAlpcSetInformation |
ZwApphelpCacheControl | ZwAreMappedFilesTheSame |
ZwAssignProcessToJobObject | ZwCallbackReturn |
ZwCancelIoFile | ZwCancelIoFileEx |
ZwCancelSynchronousIoFile | ZwCancelTimer |
ZwClearEvent | ZwClose |
ZwCloseObjectAuditAlarm | ZwCommitComplete |
ZwCommitEnlistment | ZwCommitTransaction |
ZwCompactKeys | ZwCompareTokens |
ZwCompleteConnectPort | ZwCompressKey |
ZwConnectPort | ZwContinue |
ZwCreateDebugObject | ZwCreateDirectoryObject |
ZwCreateEnlistment | ZwCreateEvent |
ZwCreateEventPair | ZwCreateFile |
ZwCreateIoCompletion | ZwCreateJobObject |
ZwCreateJobSet | ZwCreateKey |
ZwCreateKeyTransacted | ZwCreateKeyedEvent |
ZwCreateMailslotFile | ZwCreateMutant |
ZwCreateNamedPipeFile | ZwCreatePagingFile |
ZwCreatePort | ZwCreatePrivateNamespace |
ZwCreateProcess | ZwCreateProcessEx |
ZwCreateProfile | ZwCreateProfileEx |
ZwCreateResourceManager | ZwCreateSection |
ZwCreateSemaphore | ZwCreateSymbolicLinkObject |
ZwCreateThread | ZwCreateThreadEx |
ZwCreateTimer | ZwCreateToken |
ZwCreateTransaction | ZwCreateTransactionManager |
ZwCreateUserProcess | ZwCreateWaitablePort |
ZwCreateWorkerFactory | ZwDebugActiveProcess |
ZwDebugContinue | ZwDelayExecution |
ZwDeleteAtom | ZwDeleteBootEntry |
ZwDeleteDriverEntry | ZwDeleteFile |
ZwDeleteKey | ZwDeleteObjectAuditAlarm |
ZwDeletePrivateNamespace | ZwDeleteValueKey |
ZwDeviceIoControlFile | ZwDisableLastKnownGood |
ZwDisplayString | ZwDrawText |
ZwDuplicateObject | ZwDuplicateToken |
ZwEnableLastKnownGood | ZwEnumerateBootEntries |
ZwEnumerateDriverEntries | ZwEnumerateKey |
ZwEnumerateSystemEnvironmentValuesEx | ZwEnumerateTransactionObject |
ZwEnumerateValueKey | ZwExtendSection |
ZwFilterToken | ZwFindAtom |
ZwFlushBuffersFile | ZwFlushInstallUILanguage |
ZwFlushInstructionCache | ZwFlushKey |
ZwFlushProcessWriteBuffers | ZwFlushVirtualMemory |
ZwFlushWriteBuffer | ZwFreeUserPhysicalPages |
ZwFreeVirtualMemory | ZwFreezeRegistry |
ZwFreezeTransactions | ZwFsControlFile |
ZwGetContextThread | ZwGetCurrentProcessorNumber |
ZwGetDevicePowerState | ZwGetMUIRegistryInfo |
ZwGetNextProcess | ZwGetNextThread |
ZwGetNlsSectionPtr | ZwGetNotificationResourceManager |
ZwGetPlugPlayEvent | ZwGetWriteWatch |
ZwImpersonateAnonymousToken | ZwImpersonateClientOfPort |
ZwImpersonateThread | ZwInitializeNlsFiles |
ZwInitializeRegistry | ZwInitiatePowerAction |
ZwIsProcessInJob | ZwIsSystemResumeAutomatic |
ZwIsUILanguageComitted | ZwListenPort |
ZwLoadDriver | ZwLoadKey |
ZwLoadKey2 | ZwLoadKeyEx |
ZwLockFile | ZwLockProductActivationKeys |
ZwLockRegistryKey | ZwLockVirtualMemory |
ZwMakePermanentObject | ZwMakeTemporaryObject |
ZwMapCMFModule | ZwMapUserPhysicalPages |
ZwMapUserPhysicalPagesScatter | ZwMapViewOfSection |
ZwModifyBootEntry | ZwModifyDriverEntry |
ZwNotifyChangeDirectoryFile | ZwNotifyChangeKey |
ZwNotifyChangeMultipleKeys | ZwNotifyChangeSession |
ZwOpenDirectoryObject | ZwOpenEnlistment |
ZwOpenEvent | ZwOpenEventPair |
ZwOpenFile | ZwOpenIoCompletion |
ZwOpenJobObject | ZwOpenKey |
ZwOpenKeyEx | ZwOpenKeyTransacted |
ZwOpenKeyTransactedEx | ZwOpenKeyedEvent |
ZwOpenMutant | ZwOpenObjectAuditAlarm |
ZwOpenPrivateNamespace | ZwOpenProcess |
ZwOpenProcessToken | ZwOpenProcessTokenEx |
ZwOpenResourceManager | ZwOpenSection |
ZwOpenSemaphore | ZwOpenSession |
ZwOpenSymbolicLinkObject | ZwOpenThread |
ZwOpenThreadToken | ZwOpenThreadTokenEx |
ZwOpenTimer | ZwOpenTransaction |
ZwOpenTransactionManager | ZwPlugPlayControl |
ZwPowerInformation | ZwPrePrepareComplete |
ZwPrePrepareEnlistment | ZwPrepareComplete |
ZwPrepareEnlistment | ZwPrivilegeCheck |
ZwPrivilegeObjectAuditAlarm | ZwPrivilegedServiceAuditAlarm |
ZwPropagationComplete | ZwPropagationFailed |
ZwProtectVirtualMemory | ZwPulseEvent |
ZwQueryAttributesFile | ZwQueryBootEntryOrder |
ZwQueryBootOptions | ZwQueryDebugFilterState |
ZwQueryDefaultLocale | ZwQueryDefaultUILanguage |
ZwQueryDirectoryFile | ZwQueryDirectoryObject |
ZwQueryDriverEntryOrder | ZwQueryEaFile |
ZwQueryEvent | ZwQueryFullAttributesFile |
ZwQueryInformationAtom | ZwQueryInformationEnlistment |
ZwQueryInformationFile | ZwQueryInformationJobObject |
ZwQueryInformationPort | ZwQueryInformationProcess |
ZwQueryInformationResourceManager | ZwQueryInformationThread |
ZwQueryInformationToken | ZwQueryInformationTransaction |
ZwQueryInformationTransactionManager | ZwQueryInformationWorkerFactory |
ZwQueryInstallUILanguage | ZwQueryIntervalProfile |
ZwQueryIoCompletion | ZwQueryKey |
ZwQueryLicenseValue | ZwQueryMultipleValueKey |
ZwQueryMutant | ZwQueryObject |
ZwQueryOpenSubKeys | ZwQueryOpenSubKeysEx |
ZwQueryPerformanceCounter | ZwQueryPortInformationProcess |
ZwQueryQuotaInformationFile | ZwQuerySection |
ZwQuerySecurityAttributesToken | ZwQuerySecurityObject |
ZwQuerySemaphore | ZwQuerySymbolicLinkObject |
ZwQuerySystemEnvironmentValue | ZwQuerySystemEnvironmentValueEx |
ZwQuerySystemInformation | ZwQuerySystemInformationEx |
ZwQuerySystemTime | ZwQueryTimer |
ZwQueryTimerResolution | ZwQueryValueKey |
ZwQueryVirtualMemory | ZwQueryVolumeInformationFile |
ZwQueueApcThread | ZwQueueApcThreadEx |
ZwRaiseException | ZwRaiseHardError |
ZwReadFile | ZwReadFileScatter |
ZwReadOnlyEnlistment | ZwReadRequestData |
ZwReadVirtualMemory | ZwRecoverEnlistment |
ZwRecoverResourceManager | ZwRecoverTransactionManager |
ZwRegisterProtocolAddressInformation | ZwRegisterThreadTerminatePort |
ZwReleaseKeyedEvent | ZwReleaseMutant |
ZwReleaseSemaphore | ZwReleaseWorkerFactoryWorker |
ZwRemoveIoCompletion | ZwRemoveIoCompletionEx |
ZwRemoveProcessDebug | ZwRenameKey |
ZwRenameTransactionManager | ZwReplaceKey |
ZwReplacePartitionUnit | ZwReplyPort |
ZwReplyWaitReceivePort | ZwReplyWaitReceivePortEx |
ZwReplyWaitReplyPort | ZwRequestPort |
ZwRequestWaitReplyPort | ZwResetEvent |
ZwResetWriteWatch | ZwRestoreKey |
ZwResumeProcess | ZwResumeThread |
ZwRollbackComplete | ZwRollbackEnlistment |
ZwRollbackTransaction | ZwRollforwardTransactionManager |
ZwSaveKey | ZwSaveKeyEx |
ZwSaveMergedKeys | ZwSecureConnectPort |
ZwSerializeBoot | ZwSetBootEntryOrder |
ZwSetBootOptions | ZwSetContextThread |
ZwSetDebugFilterState | ZwSetDefaultHardErrorPort |
ZwSetDefaultLocale | ZwSetDefaultUILanguage |
ZwSetDriverEntryOrder | ZwSetEaFile |
ZwSetEvent | ZwSetEventBoostPriority |
ZwSetHighEventPair | ZwSetHighWaitLowEventPair |
ZwSetInformationDebugObject | ZwSetInformationEnlistment |
ZwSetInformationFile | ZwSetInformationJobObject |
ZwSetInformationKey | ZwSetInformationObject |
ZwSetInformationProcess | ZwSetInformationResourceManager |
ZwSetInformationThread | ZwSetInformationToken |
ZwSetInformationTransaction | ZwSetInformationTransactionManager |
ZwSetInformationWorkerFactory | ZwSetIntervalProfile |
ZwSetIoCompletion | ZwSetIoCompletionEx |
ZwSetLdtEntries | ZwSetLowEventPair |
ZwSetLowWaitHighEventPair | ZwSetQuotaInformationFile |
ZwSetSecurityObject | ZwSetSystemEnvironmentValue |
ZwSetSystemEnvironmentValueEx | ZwSetSystemInformation |
ZwSetSystemPowerState | ZwSetSystemTime |
ZwSetThreadExecutionState | ZwSetTimer |
ZwSetTimerEx | ZwSetTimerResolution |
ZwSetUuidSeed | ZwSetValueKey |
ZwSetVolumeInformationFile | ZwShutdownSystem |
ZwShutdownWorkerFactory | ZwSignalAndWaitForSingleObject |
ZwSinglePhaseReject | ZwStartProfile |
ZwStopProfile | ZwSuspendProcess |
ZwSuspendThread | ZwSystemDebugControl |
ZwTerminateJobObject | ZwTerminateProcess |
ZwTerminateThread | ZwTestAlert |
ZwThawRegistry | ZwThawTransactions |
ZwTraceControl | ZwTraceEvent |
ZwTranslateFilePath | ZwUmsThreadYield |
ZwUnloadDriver | ZwUnloadKey |
ZwUnloadKey2 | ZwUnloadKeyEx |
ZwUnlockFile | ZwUnlockVirtualMemory |
ZwUnmapViewOfSection | ZwVdmControl |
ZwWaitForDebugEvent | ZwWaitForKeyedEvent |
ZwWaitForMultipleObjects | ZwWaitForMultipleObjects32 |
ZwWaitForSingleObject | ZwWaitForWorkViaWorkerFactory |
ZwWaitHighEventPair | ZwWaitLowEventPair |
ZwWorkerFactoryWorkerReady | ZwWriteFile |
ZwWriteFileGather | ZwWriteRequestData |
ZwWriteVirtualMemory | ZwYieldExecution |
_CIcos | _CIlog |
_CIpow | _CIsin |
_CIsqrt | __isascii |
__iscsym | __iscsymf |
__toascii | _alldiv |
_alldvrm | _allmul |
_alloca_probe | _alloca_probe_16 |
_alloca_probe_8 | _allrem |
_allshl | _allshr |
_atoi64 | _aulldiv |
_aulldvrm | _aullrem |
_aullshr | _chkstk |
_fltused | _ftol |
_i64toa | _i64toa_s |
_i64tow | _i64tow_s |
_itoa | _itoa_s |
_itow | _itow_s |
_lfind | _ltoa |
_ltoa_s | _ltow |
_ltow_s | _makepath_s |
_memccpy | _memicmp |
_snprintf | _snprintf_s |
_snscanf_s | _snwprintf |
_snwprintf_s | _snwscanf_s |
_splitpath | _splitpath_s |
_strcmpi | _stricmp |
_strlwr | _strnicmp |
_strnset_s | _strset_s |
_strupr | _swprintf |
_ui64toa | _ui64toa_s |
_ui64tow | _ui64tow_s |
_ultoa | _ultoa_s |
_ultow | _ultow_s |
_vscwprintf | _vsnprintf |
_vsnprintf_s | _vsnwprintf |
_vsnwprintf_s | _vswprintf |
_wcsicmp | _wcslwr |
_wcsnicmp | _wcsnset_s |
_wcsset_s | _wcstoui64 |
_wcsupr | _wmakepath_s |
_wsplitpath_s | _wtoi |
_wtoi64 | _wtol |
abs | atan |
atoi | atol |
bsearch | ceil |
cos | fabs |
floor | isalnum |
isalpha | iscntrl |
isdigit | isgraph |
islower | isprint |
ispunct | isspace |
isupper | iswalpha |
iswctype | iswdigit |
iswlower | iswspace |
iswxdigit | isxdigit |
labs | log |
mbstowcs | memchr |
memcmp | memcpy |
memcpy_s | memmove |
memmove_s | memset |
pow | qsort |
sin | sprintf |
sprintf_s | sqrt |
sscanf | sscanf_s |
strcat | strcat_s |
strchr | strcmp |
strcpy | strcpy_s |
strcspn | strlen |
strncat | strncat_s |
strncmp | strncpy |
strncpy_s | strnlen |
strpbrk | strrchr |
strspn | strstr |
strtok_s | strtol |
strtoul | swprintf |
swprintf_s | swscanf_s |
tan | tolower |
toupper | towlower |
towupper | vDbgPrintEx |
vDbgPrintExWithPrefix | vsprintf |
vsprintf_s | vswprintf_s |
wcscat | wcscat_s |
wcschr | wcscmp |
wcscpy | wcscpy_s |
wcscspn | wcslen |
wcsncat | wcsncat_s |
wcsncmp | wcsncpy |
wcsncpy_s | wcsnlen |
wcspbrk | wcsrchr |
wcsspn | wcsstr |
wcstol | wcstombs |
wcstoul |
Imported Functions List
The following functions are imported by this dll:No imported functions in this file.