MSDN 도움말에서 윈도우 2000이 사라진지 참 오래됐지요. 그럼에도 불구하고 여전히 윈도우 2000에서 돌아가는 프로그램을 만들어야 하는 개발자라면 과연 이 API가 윈도우 2000에 있는건지 없는건지 참 헷갈리는 경우가 많습니다. 그래서 써야 할까 말아야 할까? 동적 바인딩을 해야할까? 그냥 써도 될까? 궁금한거죠. 그러다 까딱 잘못하면 뭐 함수를 찾을 수 없다는 엄청난 오류에 봉착하곤 합니다. 그래서 매번 테스트 해보거나 윈도우 2000에서 dependency walker에 넣어서 보곤 했는데요. 귀찮아서 한번 덤프를 떠봤습니다. 저같은 고민을 하는 개발자라면 도움이 될지도 모르겠습니다. 윈도우 2000에 포함된 kernel32.dll과 ntdll.dll에 포함된 함수 덤프 정보입니다. 다소 스압이 있을지도 모르니 주의하시길 ㅋ~
덧) 특정 DLL의 익스포트 함수 목록을 추출하는 방법이 궁금하신 분들은 dump_eat 프로젝트 소스 코드를 다운로드 받아보세요.
kernel32.dll 정보
// kernel32.dll
1 0001B65B AddAtomA
2 0000DF58 AddAtomW
3 0004639D AddConsoleAliasA
4 00046366 AddConsoleAliasW
5 00047187 AllocConsole
6 000355B2 AllocateUserPhysicalPages
7 00016C75 AreFileApisANSI
8 00045AF4 AssignProcessToJobObject
9 0002B9F6 BackupRead
10 0002BC52 BackupSeek
11 0002C5B9 BackupWrite
12 0002ABAC BaseAttachCompleteThunk
13 0002C7D7 Beep
14 000423C9 BeginUpdateResourceA
15 000421D2 BeginUpdateResourceW
16 0003C271 BindIoCompletionCallback
17 00044B59 BuildCommDCBA
18 00044AE3 BuildCommDCBAndTimeoutsA
19 00044A90 BuildCommDCBAndTimeoutsW
20 00044B09 BuildCommDCBW
21 000374F3 CallNamedPipeA
22 000028B5 CallNamedPipeW
23 000382B3 CancelDeviceWakeupRequest
24 00030DFA CancelIo
25 0003C4D4 CancelTimerQueueTimer
26 0000301C CancelWaitableTimer
27 0003C38F ChangeTimerQueueTimer
28 0003DF83 ClearCommBreak
29 0003DF91 ClearCommError
30 00005C50 CloseConsoleHandle
31 00009168 CloseHandle
32 0001F8CB CloseProfileUserMapping
33 00021580 CmdBatNotification
34 0003DB27 CommConfigDialogA
35 0003DA4B CommConfigDialogW
36 0001076D CompareFileTime
37 0000D3D4 CompareStringA
38 0000E2FB CompareStringW
39 00009A1D ConnectNamedPipe
40 000040CC ConsoleMenuControl
41 0002DDC9 ContinueDebugEvent
42 00004856 ConvertDefaultLocale
43 00020E6C ConvertThreadToFiber
44 000146C0 CopyFileA
45 000324D4 CopyFileExA
46 00014736 CopyFileExW
47 00020069 CopyFileW
48 0004876A CreateConsoleScreenBuffer
49 000239D8 CreateDirectoryA
50 0002E0A8 CreateDirectoryExA
51 0001F9FD CreateDirectoryExW
52 0001DFF5 CreateDirectoryW
53 00014CEA CreateEventA
54 0001B259 CreateEventW
55 00020D7E CreateFiber
56 00020D96 CreateFiberEx
57 000157E2 CreateFileA
58 0000C8DA CreateFileMappingA
59 000143E4 CreateFileMappingW
60 0000C351 CreateFileW
61 00045CFA CreateHardLinkA
62 00045D4D CreateHardLinkW
63 000099CD CreateIoCompletionPort
64 0004594B CreateJobObjectA
65 000459B0 CreateJobObjectW
66 00016DA5 CreateMailslotA
67 00016CAF CreateMailslotW
68 0000A4F6 CreateMutexA
69 0001D584 CreateMutexW
70 00036D7A CreateNamedPipeA
71 00022806 CreateNamedPipeW
72 000206B1 CreatePipe
73 0001C0A0 CreateProcessA
74 0001BF86 CreateProcessInternalA
75 00011BA0 CreateProcessInternalW
76 00038628 CreateProcessInternalWSecure
77 0000B252 CreateProcessW
78 000133C3 CreateRemoteThread
79 00006890 CreateSemaphoreA
80 0001EAD5 CreateSemaphoreW
81 0004583F CreateTapePartition
82 000095C2 CreateThread
83 0003C31A CreateTimerQueue
84 0003C33B CreateTimerQueueTimer
85 0003C50F CreateToolhelp32Snapshot
86 00006DC4 CreateVirtualBuffer
87 00002FE4 CreateWaitableTimerA
88 00020B94 CreateWaitableTimerW
89 0002DDFB DebugActiveProcess
90 0002D9F6 DebugBreak
91 000303DF DefineDosDeviceA
92 000148BE DefineDosDeviceW
93 00057090 DelayLoadFailureHook
94 0000DFA9 DeleteAtom
95 DeleteCriticalSection => NTDLL.RtlDeleteCriticalSection
96 00020E22 DeleteFiber
97 0001BEEA DeleteFileA
98 0000D9F9 DeleteFileW
99 0003C4B0 DeleteTimerQueue
100 0003C41B DeleteTimerQueueEx
101 0003C3D0 DeleteTimerQueueTimer
102 00041972 DeleteVolumeMountPointA
103 00041B33 DeleteVolumeMountPointW
104 0001D626 DeviceIoControl
105 0001C912 DisableThreadLibraryCalls
106 00009A9D DisconnectNamedPipe
107 0002D1D3 DnsHostnameToComputerNameA
108 0002D13B DnsHostnameToComputerNameW
109 00007B91 DosDateTimeToFileTime
110 00039A1B DosPathToSessionPathA
111 00017417 DosPathToSessionPathW
112 00005C98 DuplicateConsoleHandle
113 0000E960 DuplicateHandle
114 00042746 EndUpdateResourceA
115 000425DA EndUpdateResourceW
116 EnterCriticalSection => NTDLL.RtlEnterCriticalSection
117 0004ACB8 EnumCalendarInfoA
118 0004ACD4 EnumCalendarInfoExA
119 0004D407 EnumCalendarInfoExW
120 0004D3EB EnumCalendarInfoW
121 0004AD06 EnumDateFormatsA
122 0004AD1E EnumDateFormatsExA
123 0004D423 EnumDateFormatsExW
124 0001814F EnumDateFormatsW
125 0004AEB0 EnumLanguageGroupLocalesA
126 0004D3A9 EnumLanguageGroupLocalesW
127 0003695F EnumResourceLanguagesA
128 00023BC7 EnumResourceLanguagesW
129 0003673A EnumResourceNamesA
130 00001530 EnumResourceNamesW
131 00036545 EnumResourceTypesA
132 00036ADD EnumResourceTypesW
133 0004AEE0 EnumSystemCodePagesA
134 0004D3D9 EnumSystemCodePagesW
135 0004AE9A EnumSystemLanguageGroupsA
136 0004D393 EnumSystemLanguageGroupsW
137 00017BA1 EnumSystemLocalesA
138 00018127 EnumSystemLocalesW
139 0004ACF0 EnumTimeFormatsA
140 00018139 EnumTimeFormatsW
141 0004AECA EnumUILanguagesA
142 0004D3C3 EnumUILanguagesW
143 00045813 EraseTape
144 0003E1AD EscapeCommFunction
145 0000E01A ExitProcess
146 00005F3B ExitThread
147 000031EF ExitVDM
148 00017208 ExpandEnvironmentStringsA
149 0001A0EC ExpandEnvironmentStringsW
150 0004699E ExpungeConsoleCommandHistoryA
151 00046990 ExpungeConsoleCommandHistoryW
152 00035E47 ExtendVirtualBuffer
153 00039397 FatalAppExitA
154 00039350 FatalAppExitW
155 000393DE FatalExit
156 0000D1B2 FileTimeToDosDateTime
157 0000EA21 FileTimeToLocalFileTime
158 000095E2 FileTimeToSystemTime
159 000045A6 FillConsoleOutputAttribute
160 0004872D FillConsoleOutputCharacterA
161 0004874D FillConsoleOutputCharacterW
162 00016410 FindAtomA
163 0002EAD1 FindAtomW
164 0000EE4B FindClose
165 0001B2CF FindCloseChangeNotification
166 000249A2 FindFirstChangeNotificationA
167 0001B6AB FindFirstChangeNotificationW
168 0001D88F FindFirstFileA
169 00030748 FindFirstFileExA
170 0000C96C FindFirstFileExW
171 00007770 FindFirstFileW
172 0004048D FindFirstVolumeA
173 00040738 FindFirstVolumeMountPointA
174 00040B52 FindFirstVolumeMountPointW
175 00003F28 FindFirstVolumeW
176 00023D67 FindNextChangeNotification
177 00010275 FindNextFileA
178 0000CCB3 FindNextFileW
179 000405CC FindNextVolumeA
180 00040C5F FindNextVolumeMountPointA
181 00040EB5 FindNextVolumeMountPointW
182 00021E34 FindNextVolumeW
183 0001D38D FindResourceA
184 00014B2C FindResourceExA
185 0000B82D FindResourceExW
186 0000B622 FindResourceW
187 00004052 FindVolumeClose
188 0001B2CF FindVolumeMountPointClose
189 000045C3 FlushConsoleInputBuffer
190 0001C9CC FlushFileBuffers
191 0001132B FlushInstructionCache
192 0000E2C6 FlushViewOfFile
193 0004AD44 FoldStringA
194 0001AD12 FoldStringW
195 00016DEF FormatMessageA
196 00006DA1 FormatMessageW
197 0004739A FreeConsole
198 0000A8A4 FreeEnvironmentStringsA
199 0000A8A4 FreeEnvironmentStringsW
200 0000DFDA FreeLibrary
201 0000FFE9 FreeLibraryAndExitThread
202 0000754C FreeResource
203 000355D9 FreeUserPhysicalPages
204 00006E63 FreeVirtualBuffer
205 00048E8F GenerateConsoleCtrlEvent
206 0000FE74 GetACP
207 00023F24 GetAtomNameA
208 0000DF68 GetAtomNameW
209 0003EFCA GetBinaryType
210 0003EFCA GetBinaryTypeA
211 00020F84 GetBinaryTypeW
212 0000B732 GetCPInfo
213 0004AEF2 GetCPInfoExA
214 00050CF3 GetCPInfoExW
215 0004A4C6 GetCalendarInfoA
216 00004EDC GetCalendarInfoW
217 0003E2AE GetCommConfig
218 0003E43C GetCommMask
219 0003E4BA GetCommModemStatus
220 0003E538 GetCommProperties
221 0003E5E9 GetCommState
222 0003E87C GetCommTimeouts
223 00014B16 GetCommandLineA
224 0001386F GetCommandLineW
225 00031D43 GetCompressedFileSizeA
226 00031D64 GetCompressedFileSizeW
227 0001631F GetComputerNameA
228 00001779 GetComputerNameExA
229 0001C5F7 GetComputerNameExW
230 0000F7C8 GetComputerNameW
231 00046505 GetConsoleAliasA
232 000468F9 GetConsoleAliasExesA
233 0004663F GetConsoleAliasExesLengthA
234 00046637 GetConsoleAliasExesLengthW
235 000468E7 GetConsoleAliasExesW
236 000464E0 GetConsoleAliasW
237 000467B3 GetConsoleAliasesA
238 000465D2 GetConsoleAliasesLengthA
239 000465C4 GetConsoleAliasesLengthW
240 0004679D GetConsoleAliasesW
241 0000465B GetConsoleCP
242 00049746 GetConsoleCharType
243 00046C80 GetConsoleCommandHistoryA
244 00046B0A GetConsoleCommandHistoryLengthA
245 00046AFC GetConsoleCommandHistoryLengthW
246 00046C6A GetConsoleCommandHistoryW
247 00022291 GetConsoleCursorInfo
248 00049911 GetConsoleCursorMode
249 000220DB GetConsoleDisplayMode
250 00048C35 GetConsoleFontInfo
251 00048D5C GetConsoleFontSize
252 000479C5 GetConsoleHardwareState
253 00046D91 GetConsoleInputExeNameA
254 00046E12 GetConsoleInputExeNameW
255 00047478 GetConsoleInputWaitHandle
256 00004710 GetConsoleKeyboardLayoutNameA
257 000494F7 GetConsoleKeyboardLayoutNameW
258 0000C0DA GetConsoleMode
259 00049554 GetConsoleNlsMode
260 0000C16D GetConsoleOutputCP
261 0001CEAA GetConsoleScreenBufferInfo
262 00046D2A GetConsoleTitleA
263 0000EDB2 GetConsoleTitleW
264 00049505 GetConsoleWindow
265 0004AA47 GetCurrencyFormatA
266 00053056 GetCurrencyFormatW
267 00048DC4 GetCurrentConsoleFont
268 00015813 GetCurrentDirectoryA
269 0001BAC7 GetCurrentDirectoryW
270 0001E0C8 GetCurrentProcess
271 0000B8F4 GetCurrentProcessId
272 00015633 GetCurrentThread
273 000110D1 GetCurrentThreadId
274 00017A38 GetDateFormatA
275 00018893 GetDateFormatW
276 0003DCE2 GetDefaultCommConfigA
277 0003DC06 GetDefaultCommConfigW
278 00055438 GetDefaultSortkeySize
279 0003824E GetDevicePowerState
280 0000ACF8 GetDiskFreeSpaceA
281 0001AE60 GetDiskFreeSpaceExA
282 0001AE8E GetDiskFreeSpaceExW
283 0000AD29 GetDiskFreeSpaceW
284 0000A6B4 GetDriveTypeA
285 000067A7 GetDriveTypeW
286 0001092C GetEnvironmentStrings
287 0001092C GetEnvironmentStringsA
288 0000733F GetEnvironmentStringsW
289 0000614F GetEnvironmentVariableA
290 0000BB88 GetEnvironmentVariableW
291 0001BC2B GetExitCodeProcess
292 0001F362 GetExitCodeThread
293 00015134 GetFileAttributesA
294 0003112C GetFileAttributesExA
295 0001DCC7 GetFileAttributesExW
296 0001B5CE GetFileAttributesW
297 0000B0C4 GetFileInformationByHandle
298 0001D0D4 GetFileSize
299 0001D109 GetFileSizeEx
300 00005E40 GetFileTime
301 0001544F GetFileType
302 00007A45 GetFullPathNameA
303 00005D07 GetFullPathNameW
304 000356C0 GetHandleInformation
305 00048ADF GetLargestConsoleWindowSize
306 0001278D GetLastError
307 00055456 GetLinguistLangSize
308 000106E0 GetLocalTime
309 0000A132 GetLocaleInfoA
310 00007786 GetLocaleInfoW
311 00037D4E GetLogicalDriveStringsA
312 000029BF GetLogicalDriveStringsW
313 0000E4DB GetLogicalDrives
314 00040164 GetLongPathNameA
315 00021A72 GetLongPathNameW
316 00035CB6 GetMailslotInfo
317 00014C44 GetModuleFileNameA
318 00010FB7 GetModuleFileNameW
319 0000AB06 GetModuleHandleA
320 00010182 GetModuleHandleW
321 00036F92 GetNamedPipeHandleStateA
322 00037071 GetNamedPipeHandleStateW
323 00037290 GetNamedPipeInfo
324 00021179 GetNextVDMCommand
325 00011191 GetNlsSectionName
326 0004A825 GetNumberFormatA
327 00022C57 GetNumberFormatW
328 000489D7 GetNumberOfConsoleFonts
329 00048A26 GetNumberOfConsoleInputEvents
330 00048B85 GetNumberOfConsoleMouseButtons
331 00011562 GetOEMCP
332 0001449E GetOverlappedResult
333 00039573 GetPriorityClass
334 0000ACAE GetPrivateProfileIntA
335 00015F45 GetPrivateProfileIntW
336 0002F005 GetPrivateProfileSectionA
337 0002EAE1 GetPrivateProfileSectionNamesA
338 0002EAFA GetPrivateProfileSectionNamesW
339 00023726 GetPrivateProfileSectionW
340 0000EC3E GetPrivateProfileStringA
341 0000D957 GetPrivateProfileStringW
342 0002EB13 GetPrivateProfileStructA
343 0002EC24 GetPrivateProfileStructW
344 0000E6A9 GetProcAddress
345 000173D7 GetProcessAffinityMask
346 0000AC86 GetProcessHeap
347 00016C9C GetProcessHeaps
348 000398B6 GetProcessIoCounters
349 00039883 GetProcessPriorityBoost
350 00039617 GetProcessShutdownParameters
351 00039692 GetProcessTimes
352 0001C933 GetProcessVersion
353 00039705 GetProcessWorkingSetSize
354 00011538 GetProfileIntA
355 00016420 GetProfileIntW
356 0002EF51 GetProfileSectionA
357 00023710 GetProfileSectionW
358 0000C905 GetProfileStringA
359 0000AB2B GetProfileStringW
360 0000FE7A GetQueuedCompletionStatus
361 0001A1E1 GetShortPathNameA
362 0001E1CC GetShortPathNameW
363 000149DF GetStartupInfoA
364 00017109 GetStartupInfoW
365 0000AF0D GetStdHandle
366 00017B2B GetStringTypeA
367 000223CA GetStringTypeExA
368 00017CB0 GetStringTypeExW
369 00006658 GetStringTypeW
370 00019A86 GetSystemDefaultLCID
371 00015150 GetSystemDefaultLangID
372 0001F14B GetSystemDefaultUILanguage
373 0000EDED GetSystemDirectoryA
374 0000FF1C GetSystemDirectoryW
375 0001AAA4 GetSystemInfo
376 000207D1 GetSystemPowerStatus
377 000069F9 GetSystemTime
378 0002D737 GetSystemTimeAdjustment
379 000072E5 GetSystemTimeAsFileTime
380 00019796 GetSystemWindowsDirectoryA
381 000078B2 GetSystemWindowsDirectoryW
382 000458A5 GetTapeParameters
383 0004578F GetTapePosition
384 00045934 GetTapeStatus
385 000070D4 GetTempFileNameA
386 0001D962 GetTempFileNameW
387 00013B81 GetTempPathA
388 00006476 GetTempPathW
389 00003050 GetThreadContext
390 0000C1C4 GetThreadLocale
391 0000A545 GetThreadPriority
392 0003BB69 GetThreadPriorityBoost
393 0002DFF6 GetThreadSelectorEntry
394 00020D1E GetThreadTimes
395 00015594 GetTickCount
396 0001796C GetTimeFormatA
397 0001B481 GetTimeFormatW
398 00015177 GetTimeZoneInformation
399 000115AD GetUserDefaultLCID
400 000115AD GetUserDefaultLangID
401 0001E96D GetUserDefaultUILanguage
402 0003F3F3 GetVDMCurrentDirectories
403 0001EB3A GetVersion
404 00013C2D GetVersionExA
405 0000E8A7 GetVersionExW
406 0001199F GetVolumeInformationA
407 000109E7 GetVolumeInformationW
408 00040ECB GetVolumeNameForVolumeMountPointA
409 000076EC GetVolumeNameForVolumeMountPointW
410 00041E15 GetVolumePathNameA
411 00041F32 GetVolumePathNameW
412 00009C00 GetWindowsDirectoryA
413 0000B810 GetWindowsDirectoryW
414 00035668 GetWriteWatch
415 0000E2B6 GlobalAddAtomA
416 0000727B GlobalAddAtomW
417 000116B4 GlobalAlloc
418 0003599B GlobalCompact
419 0001596E GlobalDeleteAtom
420 00009F88 GlobalFindAtomA
421 0000CC0B GlobalFindAtomW
422 000354A9 GlobalFix
423 00015B74 GlobalFlags
424 000132AF GlobalFree
425 000248EE GlobalGetAtomNameA
426 0000DF91 GlobalGetAtomNameW
427 00014344 GlobalHandle
428 0001E6AF GlobalLock
429 00009D2A GlobalMemoryStatus
430 000025DB GlobalMemoryStatusEx
431 00007416 GlobalReAlloc
432 00014286 GlobalSize
433 000354E2 GlobalUnWire
434 000354BE GlobalUnfix
435 0000B426 GlobalUnlock
436 000354D3 GlobalWire
437 0003C6D1 Heap32First
438 0003C590 Heap32ListFirst
439 0003C63F Heap32ListNext
440 0003C7DD Heap32Next
441 HeapAlloc => NTDLL.RtlAllocateHeap
442 000073F4 HeapCompact
443 0001AE05 HeapCreate
444 00035A18 HeapCreateTagsW
445 00014567 HeapDestroy
446 000359EE HeapExtend
447 HeapFree => NTDLL.RtlFreeHeap
448 00035B0E HeapLock
449 00035A31 HeapQueryTagW
450 HeapReAlloc => NTDLL.RtlReAllocateHeap
451 HeapSize => NTDLL.RtlSizeHeap
452 00035A4D HeapSummary
453 00035B21 HeapUnlock
454 00035AA1 HeapUsage
455 0001B240 HeapValidate
456 00035B34 HeapWalk
457 0002EAAA InitAtomTable
458 0001BE13 InitializeCriticalSection
459 00015157 InitializeCriticalSectionAndSpinCount
460 0000A96D InterlockedCompareExchange
461 0001C23D InterlockedDecrement
462 00008FBC InterlockedExchange
463 00013E7C InterlockedExchangeAdd
464 0001C22C InterlockedIncrement
465 000488FC InvalidateConsoleDIBits
466 000150C4 IsBadCodePtr
467 00006AE2 IsBadHugeReadPtr
468 0000A4E6 IsBadHugeWritePtr
469 0000F0F7 IsBadReadPtr
470 0001BE4B IsBadStringPtrA
471 000159F3 IsBadStringPtrW
472 0001A055 IsBadWritePtr
473 0000CC8D IsDBCSLeadByte
474 0001871B IsDBCSLeadByteEx
475 0000191E IsDebuggerPresent
476 000062D7 IsProcessorFeaturePresent
477 0003828B IsSystemResumeAutomatic
478 000060C4 IsValidCodePage
479 0004BF19 IsValidLanguageGroup
480 00017D7E IsValidLocale
481 00017859 LCMapStringA
482 00019CA1 LCMapStringW
483 LeaveCriticalSection => NTDLL.RtlLeaveCriticalSection
484 000105CF LoadLibraryA
485 00010606 LoadLibraryExA
486 0001A952 LoadLibraryExW
487 000152C5 LoadLibraryW
488 00038FAD LoadModule
489 0000A63A LoadResource
490 0001C13B LocalAlloc
491 0003599B LocalCompact
492 000163DF LocalFileTimeToFileTime
493 0002A48E LocalFlags
494 0001C1C6 LocalFree
495 0002A594 LocalHandle
496 000128A2 LocalLock
497 00014F2B LocalReAlloc
498 000359B0 LocalShrink
499 000154D4 LocalSize
500 000127F8 LocalUnlock
501 0001E4E4 LockFile
502 00030C21 LockFileEx
503 0001154E LockResource
504 00035600 MapUserPhysicalPages
505 00035627 MapUserPhysicalPagesScatter
506 00006533 MapViewOfFile
507 0001D74A MapViewOfFileEx
508 0003CE25 Module32First
509 0003CD6F Module32FirstW
510 0003CF91 Module32Next
511 0003CEF1 Module32NextW
512 0001ED51 MoveFileA
513 0001274C MoveFileExA
514 00001CDA MoveFileExW
515 000166A0 MoveFileW
516 00010C86 MoveFileWithProgressA
517 00010CF0 MoveFileWithProgressW
518 00009BBA MulDiv
519 000078FF MultiByteToWideChar
520 00011138 NlsConvertIntegerToString
521 00019071 NlsGetCacheUpdateCount
522 0004BEF8 NlsResetProcessLocale
523 00017658 OpenConsoleW
524 00019184 OpenDataFile
525 00014EDA OpenEventA
526 0001162C OpenEventW
527 0000BF59 OpenFile
528 0000C1D1 OpenFileMappingA
529 0000C222 OpenFileMappingW
530 00045A17 OpenJobObjectA
531 00045A84 OpenJobObjectW
532 0001AFA6 OpenMutexA
533 0001AFF7 OpenMutexW
534 000091B9 OpenProcess
535 0001DB3A OpenProfileUserMapping
536 0001F491 OpenSemaphoreA
537 00013D96 OpenSemaphoreW
538 0003BAC1 OpenThread
539 0003A5F7 OpenWaitableTimerA
540 0003A664 OpenWaitableTimerW
541 00024539 OutputDebugStringA
542 0002D9FC OutputDebugStringW
543 00047D60 PeekConsoleInputA
544 00047D7C PeekConsoleInputW
545 0003730E PeekNamedPipe
546 00001B4D PostQueuedCompletionStatus
547 000457E7 PrepareTape
548 000166F6 PrivCopyFileExW
549 000319F6 PrivMoveFileIdentityW
550 0003CA16 Process32First
551 0003C960 Process32FirstW
552 0003CB70 Process32Next
553 0003CAD0 Process32NextW
554 0001A355 ProcessIdToSessionId
555 00020B6D PulseEvent
556 0003E916 PurgeComm
557 0001651F QueryDosDeviceA
558 0000A2A6 QueryDosDeviceW
559 00045B3C QueryInformationJobObject
560 0000AA7D QueryPerformanceCounter
561 00016F20 QueryPerformanceFrequency
562 000301F1 QueryWin31IniFilesMappedToRegistry
563 000030AB QueueUserAPC
564 00020F64 QueueUserWorkItem
565 0000A48C RaiseException
566 000220AB ReadConsoleA
567 0002225C ReadConsoleInputA
568 00047DB4 ReadConsoleInputExA
569 00047DD1 ReadConsoleInputExW
570 00047D98 ReadConsoleInputW
571 000044D6 ReadConsoleOutputA
572 0004854A ReadConsoleOutputAttribute
573 0004850C ReadConsoleOutputCharacterA
574 0004852B ReadConsoleOutputCharacterW
575 00048098 ReadConsoleOutputW
576 00023603 ReadConsoleW
577 000144DA ReadDirectoryChangesW
578 00006582 ReadFile
579 00030D56 ReadFileEx
580 00030E21 ReadFileScatter
581 00022AA8 ReadProcessMemory
582 00049B85 RegisterConsoleIME
583 000499D5 RegisterConsoleOS2
584 00004116 RegisterConsoleVDM
585 0000C6DC RegisterWaitForInputIdle
586 00020ECB RegisterWaitForSingleObject
587 0003C1B8 RegisterWaitForSingleObjectEx
588 000025A2 RegisterWowBaseHandlers
589 00003243 RegisterWowExec
590 000117F4 ReleaseMutex
591 0001565A ReleaseSemaphore
592 00023D98 RemoveDirectoryA
593 00023DB0 RemoveDirectoryW
594 00001EE4 ReplaceFile
595 0003492C ReplaceFileA
596 00001EE4 ReplaceFileW
597 00038295 RequestDeviceWakeup
598 00038230 RequestWakeupLatency
599 0000BF41 ResetEvent
600 0003569A ResetWriteWatch
601 0000BEE4 ResumeThread
602 RtlFillMemory => NTDLL.RtlFillMemory
603 RtlMoveMemory => NTDLL.RtlMoveMemory
604 RtlUnwind => NTDLL.RtlUnwind
605 RtlZeroMemory => NTDLL.RtlZeroMemory
606 000492A5 ScrollConsoleScreenBufferA
607 000492C2 ScrollConsoleScreenBufferW
608 0000E540 SearchPathA
609 00019BA4 SearchPathW
610 00050B1F SetCPGlobal
611 0004A5F8 SetCalendarInfoA
612 0004CB09 SetCalendarInfoW
613 0003E995 SetCommBreak
614 0003E9A3 SetCommConfig
615 0003EA34 SetCommMask
616 0003EACA SetCommState
617 0003EDE7 SetCommTimeouts
618 0002D025 SetComputerNameA
619 0002D0EB SetComputerNameExA
620 0002CF5E SetComputerNameExW
621 0002CA9A SetComputerNameW
622 00048EF9 SetConsoleActiveScreenBuffer
623 000493B4 SetConsoleCP
624 00046C96 SetConsoleCommandHistoryMode
625 00017814 SetConsoleCtrlHandler
626 0004776D SetConsoleCursor
627 00049020 SetConsoleCursorInfo
628 000498AE SetConsoleCursorMode
629 00048FC3 SetConsoleCursorPosition
630 00047871 SetConsoleDisplayMode
631 000492F5 SetConsoleFont
632 00047A89 SetConsoleHardwareState
633 00049352 SetConsoleIcon
634 00046EA7 SetConsoleInputExeNameA
635 0001E9B1 SetConsoleInputExeNameW
636 00047B19 SetConsoleKeyShortcuts
637 00049808 SetConsoleLocalEUDC
638 000493A9 SetConsoleMaximumWindowSize
639 00047BBF SetConsoleMenuClose
640 00006076 SetConsoleMode
641 00049699 SetConsoleNlsMode
642 00046A60 SetConsoleNumberOfCommandsA
643 00046A4E SetConsoleNumberOfCommandsW
644 00049A2C SetConsoleOS2OemFormat
645 000494AE SetConsoleOutputCP
646 00047C16 SetConsolePalette
647 00048F66 SetConsoleScreenBufferSize
648 0000460B SetConsoleTextAttribute
649 00004073 SetConsoleTitleA
650 000243A9 SetConsoleTitleW
651 000490E2 SetConsoleWindowInfo
652 SetCriticalSectionSpinCount => NTDLL.RtlSetCriticalSectionSpinCount
653 00010C18 SetCurrentDirectoryA
654 0000FB16 SetCurrentDirectoryW
655 0003DE9D SetDefaultCommConfigA
656 0003DDC1 SetDefaultCommConfigW
657 0000F2A6 SetEndOfFile
658 00023650 SetEnvironmentVariableA
659 00006038 SetEnvironmentVariableW
660 0001ABA9 SetErrorMode
661 0000B608 SetEvent
662 00035795 SetFileApisToANSI
663 0002040E SetFileApisToOEM
664 0001B36A SetFileAttributesA
665 0001B386 SetFileAttributesW
666 0001D7CC SetFilePointer
667 00001C2A SetFilePointerEx
668 0001E638 SetFileTime
669 0001154E SetHandleCount
670 00022FBB SetHandleInformation
671 00045C06 SetInformationJobObject
672 00049FFE SetLastConsoleEventActive
673 000148AB SetLastError
674 00029F44 SetLocalTime
675 0001F16C SetLocaleInfoA
676 0001F1D5 SetLocaleInfoW
677 00013914 SetMailslotInfo
678 000382D1 SetMessageWaitingIndicator
679 00009AD9 SetNamedPipeHandleState
680 00020AA2 SetPriorityClass
681 0003984F SetProcessAffinityMask
682 0001F05E SetProcessPriorityBoost
683 00002F71 SetProcessShutdownParameters
684 0001DD9F SetProcessWorkingSetSize
685 0000D089 SetStdHandle
686 000381E3 SetSystemPowerState
687 0000183D SetSystemTime
688 000018EC SetSystemTimeAdjustment
689 000458FA SetTapeParameters
690 00045750 SetTapePosition
691 0003A97F SetTermsrvAppInstallMode
692 000175AB SetThreadAffinityMask
693 0003BBEE SetThreadContext
694 00009655 SetThreadExecutionState
695 0003C0E9 SetThreadIdealProcessor
696 0001CDA0 SetThreadLocale
697 0001B593 SetThreadPriority
698 0003BB35 SetThreadPriorityBoost
699 0002D625 SetTimeZoneInformation
700 0003C45B SetTimerQueueTimer
701 0000BC57 SetUnhandledExceptionFilter
702 0003F2C9 SetVDMCurrentDirectories
703 00037DF1 SetVolumeLabelA
704 00037E4E SetVolumeLabelW
705 00041311 SetVolumeMountPointA
706 0004163C SetVolumeMountPointW
707 00017546 SetWaitableTimer
708 0003E0F1 SetupComm
709 000477CA ShowConsoleCursor
710 0003A468 SignalObjectAndWait
711 0001504C SizeofResource
712 0001AC6E Sleep
713 0001AC7C SleepEx
714 0003BC10 SuspendThread
715 0001F93F SwitchToFiber
716 0003C15D SwitchToThread
717 00009B45 SystemTimeToFileTime
718 0002D788 SystemTimeToTzSpecificLocalTime
719 00045B18 TerminateJobObject
720 00038DC3 TerminateProcess
721 00017584 TerminateThread
722 0003A96D TermsrvAppInstallMode
723 0003CC2A Thread32First
724 0003CCDB Thread32Next
725 0000D279 TlsAlloc
726 0000EA53 TlsFree
727 00015D42 TlsGetValue
728 0000A8C5 TlsSetValue
729 0003C927 Toolhelp32ReadProcessMemory
730 0000AB4F TransactNamedPipe
731 0003EE87 TransmitCommChar
732 00035E98 TrimVirtualBuffer
733 TryEnterCriticalSection => NTDLL.RtlTryEnterCriticalSection
734 00036D3F UTRegister
735 00036D77 UTUnRegister
736 0003BD2B UnhandledExceptionFilter
737 00010538 UnlockFile
738 00010570 UnlockFileEx
739 00006135 UnmapViewOfFile
740 00049C2E UnregisterConsoleIME
741 000030D0 UnregisterWait
742 00020F32 UnregisterWaitEx
743 00042512 UpdateResourceA
744 00042428 UpdateResourceW
745 0004A0CC VDMConsoleOperation
746 0003F0D8 VDMOperationStarted
747 00023123 ValidateLCType
748 00015E41 ValidateLocale
749 0004C173 VerLanguageNameA
750 0004C129 VerLanguageNameW
751 VerSetConditionMask => NTDLL.VerSetConditionMask
752 00019FF4 VerifyConsoleIoHandle
753 000027B6 VerifyVersionInfoA
754 00007304 VerifyVersionInfoW
755 0001175C VirtualAlloc
756 00011776 VirtualAllocEx
757 00035EB1 VirtualBufferExceptionHandler
758 0001E2DC VirtualFree
759 0001E2F3 VirtualFreeEx
760 000025AE VirtualLock
761 0001C0F8 VirtualProtect
762 0001C112 VirtualProtectEx
763 0001A14C VirtualQuery
764 0001A163 VirtualQueryEx
765 00016C44 VirtualUnlock
766 0003EF06 WaitCommEvent
767 0002DB7E WaitForDebugEvent
768 0001ABE4 WaitForMultipleObjects
769 0000BD39 WaitForMultipleObjectsEx
770 00011B0C WaitForSingleObject
771 0001C468 WaitForSingleObjectEx
772 0003757C WaitNamedPipeA
773 00002962 WaitNamedPipeW
774 0000A994 WideCharToMultiByte
775 00009C1D WinExec
776 0001C3FE WriteConsoleA
777 00047F26 WriteConsoleInputA
778 00047C8C WriteConsoleInputVDMA
779 00047CA8 WriteConsoleInputVDMW
780 00047F42 WriteConsoleInputW
781 0004839D WriteConsoleOutputA
782 000486E1 WriteConsoleOutputAttribute
783 000486A3 WriteConsoleOutputCharacterA
784 000486C2 WriteConsoleOutputCharacterW
785 00048380 WriteConsoleOutputW
786 0000C0C0 WriteConsoleW
787 0001C24E WriteFile
788 00030DA8 WriteFileEx
789 00030EED WriteFileGather
790 0000198E WritePrivateProfileSectionA
791 0002F159 WritePrivateProfileSectionW
792 0000A869 WritePrivateProfileStringA
793 0001CCB6 WritePrivateProfileStringW
794 0002ED41 WritePrivateProfileStructA
795 0002EE40 WritePrivateProfileStructW
796 00017303 WriteProcessMemory
797 0000197C WriteProfileSectionA
798 0002EF67 WriteProfileSectionW
799 00023353 WriteProfileStringA
800 0001CCA0 WriteProfileStringW
801 00045872 WriteTapemark
802 00010F74 _hread
803 0001F332 _hwrite
804 0000A8F1 _lclose
805 00022ACF _lcreat
806 0000997F _llseek
807 0001CDD5 _lopen
808 00010F74 _lread
809 0001F332 _lwrite
810 0001DF5C lstrcat
811 0001DF5C lstrcatA
812 0000A22C lstrcatW
813 0001D453 lstrcmp
814 0001D453 lstrcmpA
815 0001D141 lstrcmpW
816 00006A6C lstrcmpi
817 00006A6C lstrcmpiA
818 0001A18D lstrcmpiW
819 0001E471 lstrcpy
820 0001E471 lstrcpyA
821 00008FFC lstrcpyW
822 0000FA6D lstrcpyn
823 0000FA6D lstrcpynA
824 0000BE4E lstrcpynW
825 00015D89 lstrlen
826 00015D89 lstrlenA
827 0000D20C lstrlenW
ntdll.dll 정보
// ntdll.dll
1 000213CD PropertyLengthAsVariant
2 00021336 RtlConvertPropertyToVariant
3 00021296 RtlConvertVariantToProperty
4 0003C7B6 RtlUlongByteSwap
5 0003C7BB RtlUlonglongByteSwap
6 0003C7B1 RtlUshortByteSwap
7 00012D38 CsrAllocateCaptureBuffer
8 0000E6DA CsrAllocateMessagePointer
9 00009778 CsrCaptureMessageBuffer
10 0001652A CsrCaptureMessageString
11 0001BA35 CsrCaptureTimeout
12 0000917D CsrClientCallServer
13 000100CA CsrClientConnectToServer
14 0000E6C6 CsrFreeCaptureBuffer
15 0001B96A CsrIdentifyAlertableThread
16 00004BCC CsrNewThread
17 0001BAA7 CsrProbeForRead
18 0001BA5F CsrProbeForWrite
19 0001B999 CsrSetPriorityClass
20 0002144B DbgBreakPoint
21 00018C08 DbgPrint
22 00021504 DbgPrintReturnControlC
23 0002158D DbgPrompt
24 0001BD9F DbgSsHandleKmApiMsg
25 0001BD59 DbgSsInitialize
26 0001BFDC DbgUiConnectToDbg
27 0001C1B3 DbgUiContinue
28 0001C0CC DbgUiWaitStateChange
29 0002144D DbgUserBreakPoint
30 00021644 KiRaiseUserExceptionDispatcher
31 000215CC KiUserApcDispatcher
32 000215DC KiUserCallbackDispatcher
33 000215F8 KiUserExceptionDispatcher
34 00012577 LdrAccessResource
35 00006A42 LdrAlternateResourcesEnabled
36 00008A24 LdrDisableThreadCalloutsForDll
37 000218E7 LdrEnumResources
38 000216DE LdrFindEntryForAddress
39 0001640C LdrFindResourceDirectory_U
40 00007134 LdrFindResource_U
41 00001278 LdrFlushAlternateResourceModules
42 00011C8C LdrGetDllHandle
43 00012B73 LdrGetProcedureAddress
44 00004AF2 LdrInitializeThunk
45 00006A6F LdrLoadAlternateResourceModule
46 00003261 LdrLoadDll
47 0000679D LdrProcessRelocationBlock
48 000112C9 LdrQueryImageFileExecutionOptions
49 0001DF85 LdrQueryProcessModuleInformation
50 0000DD8E LdrShutdownProcess
51 0000E42E LdrShutdownThread
52 0000CBAE LdrUnloadAlternateResourceModule
53 0000B5DF LdrUnloadDll
54 0001DDF5 LdrVerifyImageMatchesChecksum
55 000465B4 NPXEMULATORTABLE
56 0004FF22 NlsAnsiCodePage
57 0004F314 NlsMbCodePageTag
58 0004F318 NlsMbOemCodePageTag
59 0000F610 NtAcceptConnectPort
60 00016066 NtAccessCheck
61 00005E52 NtAccessCheckAndAuditAlarm
62 0001650E NtAccessCheckByType
63 0000F9C8 NtAccessCheckByTypeAndAuditAlarm
64 0001AFDD NtAccessCheckByTypeResultList
65 0001AFEB NtAccessCheckByTypeResultListAndAuditAlarm
66 0001AFF9 NtAccessCheckByTypeResultListAndAuditAlarmByHandle
67 0000E50B NtAddAtom
68 0001B007 NtAdjustGroupsToken
69 00008816 NtAdjustPrivilegesToken
70 0001B015 NtAlertResumeThread
71 0000CD6F NtAlertThread
72 0001558D NtAllocateLocallyUniqueId
73 0001B023 NtAllocateUserPhysicalPages
74 0001B031 NtAllocateUuids
75 00015459 NtAllocateVirtualMemory
76 0001B03F NtAreMappedFilesTheSame
77 0001B04D NtAssignProcessToJobObject
78 0000CD99 NtCallbackReturn
79 0001B06C NtCancelDeviceWakeupRequest
80 0001B05E NtCancelIoFile
81 00008C51 NtCancelTimer
82 0000C6A4 NtClearEvent
83 00004D93 NtClose
84 00003679 NtCloseObjectAuditAlarm
85 0000F61E NtCompleteConnectPort
86 0000E57A NtConnectPort
87 00008553 NtContinue
88 0001B486 NtCreateChannel
89 0001B07D NtCreateDirectoryObject
90 00009FFD NtCreateEvent
91 0001B08B NtCreateEventPair
92 0000F9BA NtCreateFile
93 00005EB6 NtCreateIoCompletion
94 0001B099 NtCreateJobObject
95 00007E08 NtCreateKey
96 000024B1 NtCreateMailslotFile
97 00007E16 NtCreateMutant
98 0001651C NtCreateNamedPipeFile
99 0001B0A7 NtCreatePagingFile
100 00005EC4 NtCreatePort
101 00003B9E NtCreateProcess
102 0001B0B5 NtCreateProfile
103 000135BF NtCreateSection
104 0000B153 NtCreateSemaphore
105 0000FA3D NtCreateSymbolicLinkObject
106 000127AE NtCreateThread
107 000169D5 NtCreateTimer
108 00016BCD NtCreateToken
109 0001B0C3 NtCreateWaitablePort
110 00023AC7 NtCurrentTeb
111 00009153 NtDelayExecution
112 000037D5 NtDeleteAtom
113 0001B0D1 NtDeleteFile
114 000077CA NtDeleteKey
115 000010A5 NtDeleteObjectAuditAlarm
116 00009D81 NtDeleteValueKey
117 000150D4 NtDeviceIoControlFile
118 0001B0DF NtDisplayString
119 00007724 NtDuplicateObject
120 00015AE8 NtDuplicateToken
121 0000C394 NtEnumerateKey
122 00014A5A NtEnumerateValueKey
123 0001B0ED NtExtendSection
124 0001B0FB NtFilterToken
125 0000EBA6 NtFindAtom
126 0001570D NtFlushBuffersFile
127 00014940 NtFlushInstructionCache
128 000023B5 NtFlushKey
129 0000A419 NtFlushVirtualMemory
130 0001B109 NtFlushWriteBuffer
131 0001B115 NtFreeUserPhysicalPages
132 0000EC81 NtFreeVirtualMemory
133 00007126 NtFsControlFile
134 00016BDB NtGetContextThread
135 0001B123 NtGetDevicePowerState
136 000024BF NtGetPlugPlayEvent
137 0001B131 NtGetTickCount
138 0001B13D NtGetWriteWatch
139 0001B14B NtImpersonateAnonymousToken
140 00009D39 NtImpersonateClientOfPort
141 00004DA1 NtImpersonateThread
142 0001B159 NtInitializeRegistry
143 0001B167 NtInitiatePowerAction
144 0001B175 NtIsSystemResumeAutomatic
145 0001B494 NtListenChannel
146 0001B181 NtListenPort
147 0001B18F NtLoadDriver
148 0001B19D NtLoadKey2
149 00016BE9 NtLoadKey
150 0000BF81 NtLockFile
151 000010B3 NtLockVirtualMemory
152 000087DC NtMakeTemporaryObject
153 0001B1AB NtMapUserPhysicalPages
154 0001B1B9 NtMapUserPhysicalPagesScatter
155 0000AE4F NtMapViewOfSection
156 00006C1A NtNotifyChangeDirectoryFile
157 00006CFA NtNotifyChangeKey
158 00016BF7 NtNotifyChangeMultipleKeys
159 0001B4A2 NtOpenChannel
160 00009D8F NtOpenDirectoryObject
161 0001149E NtOpenEvent
162 0001B1C7 NtOpenEventPair
163 00015337 NtOpenFile
164 0001B1D5 NtOpenIoCompletion
165 0001B1E3 NtOpenJobObject
166 000061CC NtOpenKey
167 00014AA4 NtOpenMutant
168 00005B01 NtOpenObjectAuditAlarm
169 000023C3 NtOpenProcess
170 0000E717 NtOpenProcessToken
171 00008AEC NtOpenSection
172 0001255F NtOpenSemaphore
173 00006151 NtOpenSymbolicLinkObject
174 000024CD NtOpenThread
175 00001EB3 NtOpenThreadToken
176 0001B1F1 NtOpenTimer
177 00001F74 NtPlugPlayControl
178 00016C05 NtPowerInformation
179 000165D5 NtPrivilegeCheck
180 0001B1FF NtPrivilegeObjectAuditAlarm
181 000010C1 NtPrivilegedServiceAuditAlarm
182 0000BFC4 NtProtectVirtualMemory
183 00016C13 NtPulseEvent
184 00009FEF NtQueryAttributesFile
185 0000E964 NtQueryDefaultLocale
186 000051D0 NtQueryDefaultUILanguage
187 00005510 NtQueryDirectoryFile
188 00016C21 NtQueryDirectoryObject
189 0001B20D NtQueryEaFile
190 0001285D NtQueryEvent
191 0001346B NtQueryFullAttributesFile
192 000148F0 NtQueryInformationAtom
193 0000F6AF NtQueryInformationFile
194 00003BAC NtQueryInformationJobObject
195 0001B21B NtQueryInformationPort
196 00013351 NtQueryInformationProcess
197 00008571 NtQueryInformationThread
198 00005B0F NtQueryInformationToken
199 0000455F NtQueryInstallUILanguage
200 0001B229 NtQueryIntervalProfile
201 0000BD4F NtQueryIoCompletion
202 00007EBB NtQueryKey
203 0001B237 NtQueryMultipleValueKey
204 0001B245 NtQueryMutant
205 000107D8 NtQueryObject
206 0001B253 NtQueryOpenSubKeys
207 000152DD NtQueryPerformanceCounter
208 0001B261 NtQueryQuotaInformationFile
209 000112BB NtQuerySection
210 000038C7 NtQuerySecurityObject
211 0001B26F NtQuerySemaphore
212 00005EA8 NtQuerySymbolicLinkObject
213 0001B27D NtQuerySystemEnvironmentValue
214 00007D11 NtQuerySystemInformation
215 000148E2 NtQuerySystemTime
216 00011775 NtQueryTimer
217 0000CBA0 NtQueryTimerResolution
218 000062D2 NtQueryValueKey
219 00015AA3 NtQueryVirtualMemory
220 0000E588 NtQueryVolumeInformationFile
221 0000366B NtQueueApcThread
222 00014B92 NtRaiseException
223 0001B28E NtRaiseHardError
224 0000C552 NtReadFile
225 0001B29C NtReadFileScatter
226 0000F6A1 NtReadRequestData
227 0000DEE6 NtReadVirtualMemory
228 00004BB2 NtRegisterThreadTerminatePort
229 00015475 NtReleaseMutant
230 00008E81 NtReleaseSemaphore
231 0000BEA7 NtRemoveIoCompletion
232 0001B2AA NtReplaceKey
233 0000E596 NtReplyPort
234 00009161 NtReplyWaitReceivePort
235 000039BC NtReplyWaitReceivePortEx
236 0001B2B8 NtReplyWaitReplyPort
237 0001B4B0 NtReplyWaitSendChannel
238 0001B2C6 NtRequestDeviceWakeup
239 00005290 NtRequestPort
240 0000916F NtRequestWaitReplyPort
241 0001B2D4 NtRequestWakeupLatency
242 00016C2F NtResetEvent
243 0001B2E2 NtResetWriteWatch
244 0001B2F0 NtRestoreKey
245 00008FB7 NtResumeThread
246 00016C3D NtSaveKey
247 0001B2FE NtSaveMergedKeys
248 0000808A NtSecureConnectPort
249 0001B4BE NtSendWaitReplyChannel
250 0001B4CC NtSetContextChannel
251 00016C4B NtSetContextThread
252 0001B30C NtSetDefaultHardErrorPort
253 0001B31A NtSetDefaultLocale
254 0001B328 NtSetDefaultUILanguage
255 0001B336 NtSetEaFile
256 00008563 NtSetEvent
257 0001B344 NtSetHighEventPair
258 0001B352 NtSetHighWaitLowEventPair
259 0000EE28 NtSetInformationFile
260 0001B360 NtSetInformationJobObject
261 0001B36E NtSetInformationKey
262 000107E6 NtSetInformationObject
263 00013B6D NtSetInformationProcess
264 0000A1E0 NtSetInformationThread
265 00016C59 NtSetInformationToken
266 0001B37C NtSetIntervalProfile
267 000086C0 NtSetIoCompletion
268 00016C67 NtSetLdtEntries
269 0001B38A NtSetLowEventPair
270 0001B398 NtSetLowWaitHighEventPair
271 0001B3A6 NtSetQuotaInformationFile
272 00011F97 NtSetSecurityObject
273 0001B3B4 NtSetSystemEnvironmentValue
274 000010CF NtSetSystemInformation
275 0001B3C2 NtSetSystemPowerState
276 000010DD NtSetSystemTime
277 0000C1DA NtSetThreadExecutionState
278 00008C5F NtSetTimer
279 00018958 NtSetTimerResolution
280 0001B3D0 NtSetUuidSeed
281 0000AA1B NtSetValueKey
282 0001B3DE NtSetVolumeInformationFile
283 0001B3EC NtShutdownSystem
284 0001B3FA NtSignalAndWaitForSingleObject
285 0001B408 NtStartProfile
286 0001B416 NtStopProfile
287 0001B424 NtSuspendThread
288 0001B432 NtSystemDebugControl
289 0001B440 NtTerminateJobObject
290 0000DD80 NtTerminateProcess
291 0000DFC2 NtTerminateThread
292 00004BC0 NtTestAlert
293 0001B44E NtUnloadDriver
294 00016C75 NtUnloadKey
295 00010312 NtUnlockFile
296 000024DB NtUnlockVirtualMemory
297 0000A3D8 NtUnmapViewOfSection
298 00016C83 NtVdmControl
299 00013233 NtWaitForMultipleObjects
300 00014086 NtWaitForSingleObject
301 0001B45C NtWaitHighEventPair
302 0001B46A NtWaitLowEventPair
303 000023A7 NtWriteFile
304 0001B478 NtWriteFileGather
305 0000816A NtWriteRequestData
306 0000815C NtWriteVirtualMemory
307 00012445 NtYieldExecution
308 00023C36 PfxFindPrefix
309 00023ACE PfxInitialize
310 00023AE2 PfxInsertPrefix
311 00023BBA PfxRemovePrefix
312 0004A215 RestoreEm87Context
313 00016E81 RtlAbortRXact
314 0000A2E0 RtlAbsoluteToSelfRelativeSD
315 0000C258 RtlAcquirePebLock
316 00008098 RtlAcquireResourceExclusive
317 00008D24 RtlAcquireResourceShared
318 00009C9C RtlAddAccessAllowedAce
319 000170C1 RtlAddAccessAllowedAceEx
320 000249B3 RtlAddAccessAllowedObjectAce
321 000014A2 RtlAddAccessDeniedAce
322 00024938 RtlAddAccessDeniedAceEx
323 000249F9 RtlAddAccessDeniedObjectAce
324 000025A9 RtlAddAce
325 000241C4 RtlAddActionToRXact
326 00014D6D RtlAddAtomToAtomTable
327 00016EBA RtlAddAttributeActionToRXact
328 00024955 RtlAddAuditAccessAce
329 00024982 RtlAddAuditAccessAceEx
330 00024A40 RtlAddAuditAccessObjectAce
331 000246B6 RtlAddCompoundAce
332 0004D817 RtlAddRange
333 000027E1 RtlAdjustPrivilege
334 000042B0 RtlAllocateAndInitializeSid
335 000089B1 RtlAllocateHandle
336 0004C2AD RtlAllocateHeap
337 000148FE RtlAnsiCharToUnicodeChar
338 000286AD RtlAnsiStringToUnicodeSize
339 000114AC RtlAnsiStringToUnicodeString
340 00001739 RtlAppendAsciizToString
341 00028C4F RtlAppendStringToString
342 0000BEB5 RtlAppendUnicodeStringToString
343 00011E2C RtlAppendUnicodeToString
344 000241FE RtlApplyRXact
345 00016FDA RtlApplyRXactNoFlush
346 0000551E RtlAreAllAccessesGranted
347 00025434 RtlAreAnyAccessesGranted
348 0002948B RtlAreBitsClear
349 00006B32 RtlAreBitsSet
350 000298DD RtlAssert
351 0001E7BA RtlCallbackLpcClient
352 0002B0B6 RtlCancelTimer
353 0002B447 RtlCaptureStackBackTrace
354 0000E5A4 RtlCharToInteger
355 00021448 RtlCheckForOrphanedCriticalSections
356 0002C841 RtlCheckRegistryKey
357 0001742C RtlClearAllBits
358 00006AE0 RtlClearBits
359 00010701 RtlCompactHeap
360 0000529E RtlCompareMemory
361 00011961 RtlCompareMemoryUlong
362 00028B57 RtlCompareString
363 0000AF43 RtlCompareUnicodeString
364 0002ECEC RtlCompressBuffer
365 000091F2 RtlConsoleMultiByteToUnicodeN
366 00016D07 RtlConvertExclusiveToShared
367 000169FA RtlConvertLongToLargeInteger
368 00016CC8 RtlConvertSharedToExclusive
369 0000A6D5 RtlConvertSidToUnicodeString
370 0001F770 RtlConvertToAutoInheritSecurityObject
371 0001F9A8 RtlConvertUiListToApiList
372 0003C97E RtlConvertUlongToLargeInteger
373 0000B5BC RtlCopyLuid
374 00025231 RtlCopyLuidAndAttributesArray
375 0004E0BE RtlCopyRangeList
376 0001F333 RtlCopySecurityDescriptor
377 00009CB8 RtlCopySid
378 00025114 RtlCopySidAndAttributesArray
379 00002949 RtlCopyString
380 0000EC8F RtlCopyUnicodeString
381 0000F857 RtlCreateAcl
382 0001F462 RtlCreateAndSetSD
383 0000AABF RtlCreateAtomTable
384 000179CA RtlCreateEnvironment
385 0004B425 RtlCreateHeap
386 0001E5A9 RtlCreateLpcServer
387 00003CCB RtlCreateProcessParameters
388 0001FFBA RtlCreateQueryDebugBuffer
389 0002C867 RtlCreateRegistryKey
390 0000F96F RtlCreateSecurityDescriptor
391 00011388 RtlCreateTagHeap
392 0000FE89 RtlCreateTimer
393 000174C0 RtlCreateTimerQueue
394 000125AB RtlCreateUnicodeString
395 000110F0 RtlCreateUnicodeStringFromAsciiz
396 0002F2BC RtlCreateUserProcess
397 0001F6FE RtlCreateUserSecurityObject
398 0002F671 RtlCreateUserThread
399 00022EA5 RtlCustomCPToUnicodeN
400 0002F788 RtlCutoverTimeToSystemTime
401 00003F82 RtlDeNormalizeProcessParams
402 0002AEF4 RtlDebugPrintTimes
403 0002ED40 RtlDecompressBuffer
404 0002ED85 RtlDecompressFragment
405 0001F78E RtlDefaultNpAcl
406 0001886A RtlDelete
407 00001445 RtlDeleteAce
408 00014EB2 RtlDeleteAtomFromAtomTable
409 00007BF9 RtlDeleteCriticalSection
410 000188AF RtlDeleteElementGenericTable
411 0002FC28 RtlDeleteNoSplay
412 0004DE5D RtlDeleteOwnersRanges
413 0004DD1C RtlDeleteRange
414 0002C88D RtlDeleteRegistryValue
415 000011DE RtlDeleteResource
416 0000CD4E RtlDeleteSecurityObject
417 0000437C RtlDeleteTimer
418 00029CE6 RtlDeleteTimerQueue
419 00029D7E RtlDeleteTimerQueueEx
420 0000721E RtlDeregisterWait
421 0000722C RtlDeregisterWaitEx
422 00024AFA RtlDestroyAtomTable
423 00003CAB RtlDestroyEnvironment
424 00027AE7 RtlDestroyHandleTable
425 0004B16C RtlDestroyHeap
426 00003CAB RtlDestroyProcessParameters
427 0002009B RtlDestroyQueryDebugBuffer
428 00006BD6 RtlDetermineDosPathNameType_U
429 000289BB RtlDnsHostNameToComputerName
430 00003454 RtlDoesFileExists_U
431 00011982 RtlDosPathNameToNtPathName_U
432 0000ED36 RtlDosSearchPath_U
433 00005480 RtlDowncaseUnicodeString
434 0001ECF3 RtlDumpResource
435 00024BD4 RtlEmptyAtomTable
436 0001ED36 RtlEnableEarlyCriticalSectionEventCreation
437 0003C84D RtlEnlargedIntegerMultiply
438 0003C863 RtlEnlargedUnsignedDivide
439 0003C858 RtlEnlargedUnsignedMultiply
440 00009103 RtlEnterCriticalSection
441 0002DA86 RtlEnumProcessHeaps
442 0002FED7 RtlEnumerateGenericTable
443 0002FF76 RtlEnumerateGenericTableWithoutSplaying
444 00009AD9 RtlEqualComputerName
445 000030E8 RtlEqualDomainName
446 00025211 RtlEqualLuid
447 000107F4 RtlEqualPrefixSid
448 0000810F RtlEqualSid
449 0000A18F RtlEqualString
450 00015523 RtlEqualUnicodeString
451 0002506A RtlEraseUnicodeString
452 00009DA4 RtlExpandEnvironmentStrings_U
453 0002D70D RtlExtendHeap
454 0000361D RtlExtendedIntegerMultiply
455 0001854E RtlExtendedLargeIntegerDivide
456 0000BDA7 RtlExtendedMagicDivide
457 0003C7C4 RtlFillMemory
458 00018538 RtlFillMemoryUlong
459 00008903 RtlFindClearBits
460 0000897A RtlFindClearBitsAndSet
461 0002962D RtlFindLastBackwardRunClear
462 00029796 RtlFindLeastSignificantBit
463 000293CA RtlFindLongestRunClear
464 00006226 RtlFindMessage
465 000296F8 RtlFindMostSignificantBit
466 00029542 RtlFindNextForwardRunClear
467 0004E30C RtlFindRange
468 00028E18 RtlFindSetBits
469 000290BF RtlFindSetBitsAndClear
470 0000F93B RtlFirstFreeAce
471 000161BC RtlFormatCurrentUserKeyPath
472 00009F47 RtlFormatMessage
473 0001329F RtlFreeAnsiString
474 000037E3 RtlFreeHandle
475 0004C7D3 RtlFreeHeap
476 0000F7B4 RtlFreeOemString
477 0004E181 RtlFreeRangeList
478 00004332 RtlFreeSid
479 0001329F RtlFreeUnicodeString
480 0002F726 RtlFreeUserThreadStack
481 00030329 RtlGUIDFromString
482 000304D4 RtlGenerate8dot3Name
483 000117E4 RtlGetAce
484 0002B0F2 RtlGetCallersAddress
485 0002ECA8 RtlGetCompressionWorkSpaceSize
486 00005F92 RtlGetControlSecurityDescriptor
487 0000B385 RtlGetCurrentDirectory_U
488 00013241 RtlGetDaclSecurityDescriptor
489 00018B4D RtlGetElementGenericTable
490 0004E485 RtlGetFirstRange
491 0000C127 RtlGetFullPathName_U
492 00011712 RtlGetGroupSecurityDescriptor
493 0001526E RtlGetLongestNtPathLength
494 0004E4D9 RtlGetNextRange
495 0000495C RtlGetNtGlobalFlags
496 00008058 RtlGetNtProductType
497 000116D9 RtlGetOwnerSecurityDescriptor
498 00002ACA RtlGetProcessHeaps
499 0002539B RtlGetSaclSecurityDescriptor
500 00027AA0 RtlGetSecurityDescriptorRMControl
501 00010F8A RtlGetUserInfoHeap
502 00003034 RtlGetVersion
503 00017193 RtlIdentifierAuthoritySid
504 00012237 RtlImageDirectoryEntryToData
505 000101F2 RtlImageNtHeader
506 00013146 RtlImageRvaToSection
507 00031150 RtlImageRvaToVa
508 0001E7A7 RtlImpersonateLpcClient
509 0000F7C9 RtlImpersonateSelf
510 0000FFC3 RtlInitAnsiString
511 000059D6 RtlInitCodePageTable
512 00003B15 RtlInitNlsTables
513 00010F30 RtlInitString
514 0001566D RtlInitUnicodeString
515 00003C9D RtlInitializeAtomPackage
516 00005A97 RtlInitializeBitMap
517 000311C0 RtlInitializeContext
518 00015749 RtlInitializeCriticalSection
519 000047F3 RtlInitializeCriticalSectionAndSpinCount
520 0002FE18 RtlInitializeGenericTable
521 0000421E RtlInitializeHandleTable
522 00023E8C RtlInitializeRXact
523 0004D800 RtlInitializeRangeList
524 0000CA94 RtlInitializeResource
525 0000E4E1 RtlInitializeSid
526 00017AD2 RtlInsertElementGenericTable
527 0002BC00 RtlInt64ToUnicodeString
528 00013B7B RtlIntegerToChar
529 00005CAB RtlIntegerToUnicodeString
530 0004E653 RtlInvertRangeList
531 000030C2 RtlIsDosDeviceName_U
532 00018B3F RtlIsGenericTableEmpty
533 00017C10 RtlIsNameLegalDOS8Dot3
534 0004E1BC RtlIsRangeAvailable
535 00013E34 RtlIsTextUnicode
536 00010688 RtlIsValidHandle
537 0001507C RtlIsValidIndexHandle
538 0003C83A RtlLargeIntegerAdd
539 0003C92E RtlLargeIntegerArithmeticShift
540 000313B9 RtlLargeIntegerDivide
541 0003C959 RtlLargeIntegerNegate
542 0003C8E0 RtlLargeIntegerShiftLeft
543 0003C907 RtlLargeIntegerShiftRight
544 0003C96B RtlLargeIntegerSubtract
545 0002B826 RtlLargeIntegerToChar
546 00009134 RtlLeaveCriticalSection
547 0000C68E RtlLengthRequiredSid
548 00008FF6 RtlLengthSecurityDescriptor
549 0000E2CB RtlLengthSid
550 0002FA9A RtlLocalTimeToSystemTime
551 0000C837 RtlLockHeap
552 000026A7 RtlLookupAtomInAtomTable
553 0002FE82 RtlLookupElementGenericTable
554 0000A1EE RtlMakeSelfRelativeSD
555 0000BE24 RtlMapGenericMask
556 0004E572 RtlMergeRangeLists
557 00001C66 RtlMoveMemory
558 000078A1 RtlMultiByteToUnicodeN
559 00004C66 RtlMultiByteToUnicodeSize
560 0001F193 RtlNewInstanceSecurityObject
561 0001F202 RtlNewSecurityGrantedAccess
562 00001256 RtlNewSecurityObject
563 0000FA4B RtlNewSecurityObjectEx
564 00003A8A RtlNormalizeProcessParams
565 0000D02E RtlNtStatusToDosError
566 0002FF6C RtlNumberGenericTableElements
567 000293FA RtlNumberOfClearBits
568 00029440 RtlNumberOfSetBits
569 000286AD RtlOemStringToUnicodeSize
570 000052E6 RtlOemStringToUnicodeString
571 00005361 RtlOemToUnicodeN
572 0000313E RtlOpenCurrentUser
573 00031526 RtlPcToFileHeader
574 00024E99 RtlPinAtomInAtomTable
575 00018980 RtlPrefixString
576 0000ACE6 RtlPrefixUnicodeString
577 0002CBC5 RtlProtectHeap
578 00014F83 RtlQueryAtomInAtomTable
579 0000B181 RtlQueryEnvironmentVariable_U
580 0000253A RtlQueryInformationAcl
581 00020363 RtlQueryProcessBackTraceInformation
582 0002015F RtlQueryProcessDebugInformation
583 0002055A RtlQueryProcessHeapInformation
584 00020A3E RtlQueryProcessLockInformation
585 0002C420 RtlQueryRegistryValues
586 0001EF7F RtlQuerySecurityObject
587 0002D5A2 RtlQueryTagHeap
588 0002C939 RtlQueryTimeZoneInformation
589 00013D6F RtlQueueWorkItem
590 000316C8 RtlRaiseException
591 00031780 RtlRaiseStatus
592 00001B06 RtlRandom
593 00012025 RtlReAllocateHeap
594 0002FD08 RtlRealPredecessor
595 0002FCD7 RtlRealSuccessor
596 00007150 RtlRegisterWait
597 0000C268 RtlReleasePebLock
598 0000857F RtlReleaseResource
599 00031275 RtlRemoteCall
600 00003BBA RtlResetRtlTranslations
601 000027A9 RtlRunDecodeUnicodeString
602 00002741 RtlRunEncodeUnicodeString
603 0002FA6A RtlSecondsSince1970ToTime
604 0002FA33 RtlSecondsSince1980ToTime
605 00024427 RtlSelfRelativeToAbsoluteSD2
606 0000130F RtlSelfRelativeToAbsoluteSD
607 00017453 RtlSetAllBits
608 000252B2 RtlSetAttributesSecurityDescriptor
609 00004EED RtlSetBits
610 000252ED RtlSetControlSecurityDescriptor
611 0000DD34 RtlSetCriticalSectionSpinCount
612 00004F72 RtlSetCurrentDirectory_U
613 0002EE40 RtlSetCurrentEnvironment
614 00009CE4 RtlSetDaclSecurityDescriptor
615 0000AFDB RtlSetEnvironmentVariable
616 00002035 RtlSetGroupSecurityDescriptor
617 0002461C RtlSetInformationAcl
618 00029BD9 RtlSetIoCompletionCallback
619 00001FF2 RtlSetOwnerSecurityDescriptor
620 000028AE RtlSetSaclSecurityDescriptor
621 00027AC3 RtlSetSecurityDescriptorRMControl
622 0001EF3C RtlSetSecurityObject
623 0001EF5D RtlSetSecurityObjectEx
624 0000BC20 RtlSetThreadPoolStartFunc
625 0002CA5A RtlSetTimeZoneInformation
626 0002AFEB RtlSetTimer
627 00021448 RtlSetUnicodeCallouts
628 0002D260 RtlSetUserFlagsHeap
629 00001EC1 RtlSetUserValueHeap
630 0001E694 RtlShutdownLpcServer
631 0004B906 RtlSizeHeap
632 00018859 RtlSplay
633 00016E35 RtlStartRXact
634 00017BA1 RtlStringFromGUID
635 00008154 RtlSubAuthorityCountSid
636 000153A5 RtlSubAuthoritySid
637 0002FCBC RtlSubtreePredecessor
638 0002FCA1 RtlSubtreeSuccessor
639 00004C87 RtlSystemTimeToLocalTime
640 0000349A RtlTimeFieldsToTime
641 0002F9AB RtlTimeToElapsedTimeFields
642 00016629 RtlTimeToSecondsSince1970
643 00005E60 RtlTimeToSecondsSince1980
644 000081FE RtlTimeToTimeFields
645 00031953 RtlTraceDatabaseAdd
646 000317A8 RtlTraceDatabaseCreate
647 000318BB RtlTraceDatabaseDestroy
648 00031CE1 RtlTraceDatabaseEnumerate
649 00031981 RtlTraceDatabaseFind
650 00031C87 RtlTraceDatabaseLock
651 00031C93 RtlTraceDatabaseUnlock
652 00031913 RtlTraceDatabaseValidate
653 0000A130 RtlTryEnterCriticalSection
654 0002868F RtlUnicodeStringToAnsiSize
655 0001335F RtlUnicodeStringToAnsiString
656 000284D5 RtlUnicodeStringToCountedOemString
657 0001246E RtlUnicodeStringToInteger
658 0002868F RtlUnicodeStringToOemSize
659 000031E2 RtlUnicodeStringToOemString
660 0002308E RtlUnicodeToCustomCPN
661 0000C6B2 RtlUnicodeToMultiByteN
662 000102D8 RtlUnicodeToMultiByteSize
663 00012EEA RtlUnicodeToOemN
664 00006341 RtlUniform
665 0000C872 RtlUnlockHeap
666 0000EA4A RtlUnwind
667 0000CC2C RtlUpcaseUnicodeChar
668 0000B2AD RtlUpcaseUnicodeString
669 000283DD RtlUpcaseUnicodeStringToAnsiString
670 0001735D RtlUpcaseUnicodeStringToCountedOemString
671 00003739 RtlUpcaseUnicodeStringToOemString
672 00023235 RtlUpcaseUnicodeToCustomCPN
673 00015788 RtlUpcaseUnicodeToMultiByteN
674 00010320 RtlUpcaseUnicodeToOemN
675 00002078 RtlUpdateTimer
676 00012451 RtlUpperChar
677 00028C07 RtlUpperString
678 0002DB14 RtlUsageHeap
679 0000F8A7 RtlValidAcl
680 0002794F RtlValidRelativeSecurityDescriptor
681 00005ED2 RtlValidSecurityDescriptor
682 0000ED77 RtlValidSid
683 00001C9F RtlValidateHeap
684 0002D9C0 RtlValidateProcessHeaps
685 00013C7F RtlVerifyVersionInfo
686 0002B4E9 RtlWalkFrameChain
687 0002E076 RtlWalkHeap
688 0002C7EC RtlWriteRegistryValue
689 0004E7E1 RtlZeroHeap
690 0003C7F5 RtlZeroMemory
691 00031E7F RtlpNtCreateKey
692 00031EED RtlpNtEnumerateSubKey
693 00031EE1 RtlpNtMakeTemporaryKey
694 0000A05A RtlpNtOpenKey
695 0000A077 RtlpNtQueryValueKey
696 00031EBC RtlpNtSetValueKey
697 000123AA RtlpUnWaitCriticalSection
698 00012313 RtlpWaitForCriticalSection
699 000286AD RtlxAnsiStringToUnicodeSize
700 000286AD RtlxOemStringToUnicodeSize
701 0002868F RtlxUnicodeStringToAnsiSize
702 0002868F RtlxUnicodeStringToOemSize
703 0004A1EC SaveEm87Context
704 00013D37 VerSetConditionMask
705 0000F610 ZwAcceptConnectPort
706 00016066 ZwAccessCheck
707 00005E52 ZwAccessCheckAndAuditAlarm
708 0001650E ZwAccessCheckByType
709 0000F9C8 ZwAccessCheckByTypeAndAuditAlarm
710 0001AFDD ZwAccessCheckByTypeResultList
711 0001AFEB ZwAccessCheckByTypeResultListAndAuditAlarm
712 0001AFF9 ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
713 0000E50B ZwAddAtom
714 0001B007 ZwAdjustGroupsToken
715 00008816 ZwAdjustPrivilegesToken
716 0001B015 ZwAlertResumeThread
717 0000CD6F ZwAlertThread
718 0001558D ZwAllocateLocallyUniqueId
719 0001B023 ZwAllocateUserPhysicalPages
720 0001B031 ZwAllocateUuids
721 00015459 ZwAllocateVirtualMemory
722 0001B03F ZwAreMappedFilesTheSame
723 0001B04D ZwAssignProcessToJobObject
724 0000CD99 ZwCallbackReturn
725 0001B06C ZwCancelDeviceWakeupRequest
726 0001B05E ZwCancelIoFile
727 00008C51 ZwCancelTimer
728 0000C6A4 ZwClearEvent
729 00004D93 ZwClose
730 00003679 ZwCloseObjectAuditAlarm
731 0000F61E ZwCompleteConnectPort
732 0000E57A ZwConnectPort
733 00008553 ZwContinue
734 0001B486 ZwCreateChannel
735 0001B07D ZwCreateDirectoryObject
736 00009FFD ZwCreateEvent
737 0001B08B ZwCreateEventPair
738 0000F9BA ZwCreateFile
739 00005EB6 ZwCreateIoCompletion
740 0001B099 ZwCreateJobObject
741 00007E08 ZwCreateKey
742 000024B1 ZwCreateMailslotFile
743 00007E16 ZwCreateMutant
744 0001651C ZwCreateNamedPipeFile
745 0001B0A7 ZwCreatePagingFile
746 00005EC4 ZwCreatePort
747 00003B9E ZwCreateProcess
748 0001B0B5 ZwCreateProfile
749 000135BF ZwCreateSection
750 0000B153 ZwCreateSemaphore
751 0000FA3D ZwCreateSymbolicLinkObject
752 000127AE ZwCreateThread
753 000169D5 ZwCreateTimer
754 00016BCD ZwCreateToken
755 0001B0C3 ZwCreateWaitablePort
756 00009153 ZwDelayExecution
757 000037D5 ZwDeleteAtom
758 0001B0D1 ZwDeleteFile
759 000077CA ZwDeleteKey
760 000010A5 ZwDeleteObjectAuditAlarm
761 00009D81 ZwDeleteValueKey
762 000150D4 ZwDeviceIoControlFile
763 0001B0DF ZwDisplayString
764 00007724 ZwDuplicateObject
765 00015AE8 ZwDuplicateToken
766 0000C394 ZwEnumerateKey
767 00014A5A ZwEnumerateValueKey
768 0001B0ED ZwExtendSection
769 0001B0FB ZwFilterToken
770 0000EBA6 ZwFindAtom
771 0001570D ZwFlushBuffersFile
772 00014940 ZwFlushInstructionCache
773 000023B5 ZwFlushKey
774 0000A419 ZwFlushVirtualMemory
775 0001B109 ZwFlushWriteBuffer
776 0001B115 ZwFreeUserPhysicalPages
777 0000EC81 ZwFreeVirtualMemory
778 00007126 ZwFsControlFile
779 00016BDB ZwGetContextThread
780 0001B123 ZwGetDevicePowerState
781 000024BF ZwGetPlugPlayEvent
782 0001B131 ZwGetTickCount
783 0001B13D ZwGetWriteWatch
784 0001B14B ZwImpersonateAnonymousToken
785 00009D39 ZwImpersonateClientOfPort
786 00004DA1 ZwImpersonateThread
787 0001B159 ZwInitializeRegistry
788 0001B167 ZwInitiatePowerAction
789 0001B175 ZwIsSystemResumeAutomatic
790 0001B494 ZwListenChannel
791 0001B181 ZwListenPort
792 0001B18F ZwLoadDriver
793 0001B19D ZwLoadKey2
794 00016BE9 ZwLoadKey
795 0000BF81 ZwLockFile
796 000010B3 ZwLockVirtualMemory
797 000087DC ZwMakeTemporaryObject
798 0001B1AB ZwMapUserPhysicalPages
799 0001B1B9 ZwMapUserPhysicalPagesScatter
800 0000AE4F ZwMapViewOfSection
801 00006C1A ZwNotifyChangeDirectoryFile
802 00006CFA ZwNotifyChangeKey
803 00016BF7 ZwNotifyChangeMultipleKeys
804 0001B4A2 ZwOpenChannel
805 00009D8F ZwOpenDirectoryObject
806 0001149E ZwOpenEvent
807 0001B1C7 ZwOpenEventPair
808 00015337 ZwOpenFile
809 0001B1D5 ZwOpenIoCompletion
810 0001B1E3 ZwOpenJobObject
811 000061CC ZwOpenKey
812 00014AA4 ZwOpenMutant
813 00005B01 ZwOpenObjectAuditAlarm
814 000023C3 ZwOpenProcess
815 0000E717 ZwOpenProcessToken
816 00008AEC ZwOpenSection
817 0001255F ZwOpenSemaphore
818 00006151 ZwOpenSymbolicLinkObject
819 000024CD ZwOpenThread
820 00001EB3 ZwOpenThreadToken
821 0001B1F1 ZwOpenTimer
822 00001F74 ZwPlugPlayControl
823 00016C05 ZwPowerInformation
824 000165D5 ZwPrivilegeCheck
825 0001B1FF ZwPrivilegeObjectAuditAlarm
826 000010C1 ZwPrivilegedServiceAuditAlarm
827 0000BFC4 ZwProtectVirtualMemory
828 00016C13 ZwPulseEvent
829 00009FEF ZwQueryAttributesFile
830 0000E964 ZwQueryDefaultLocale
831 000051D0 ZwQueryDefaultUILanguage
832 00005510 ZwQueryDirectoryFile
833 00016C21 ZwQueryDirectoryObject
834 0001B20D ZwQueryEaFile
835 0001285D ZwQueryEvent
836 0001346B ZwQueryFullAttributesFile
837 000148F0 ZwQueryInformationAtom
838 0000F6AF ZwQueryInformationFile
839 00003BAC ZwQueryInformationJobObject
840 0001B21B ZwQueryInformationPort
841 00013351 ZwQueryInformationProcess
842 00008571 ZwQueryInformationThread
843 00005B0F ZwQueryInformationToken
844 0000455F ZwQueryInstallUILanguage
845 0001B229 ZwQueryIntervalProfile
846 0000BD4F ZwQueryIoCompletion
847 00007EBB ZwQueryKey
848 0001B237 ZwQueryMultipleValueKey
849 0001B245 ZwQueryMutant
850 000107D8 ZwQueryObject
851 0001B253 ZwQueryOpenSubKeys
852 000152DD ZwQueryPerformanceCounter
853 0001B261 ZwQueryQuotaInformationFile
854 000112BB ZwQuerySection
855 000038C7 ZwQuerySecurityObject
856 0001B26F ZwQuerySemaphore
857 00005EA8 ZwQuerySymbolicLinkObject
858 0001B27D ZwQuerySystemEnvironmentValue
859 00007D11 ZwQuerySystemInformation
860 000148E2 ZwQuerySystemTime
861 00011775 ZwQueryTimer
862 0000CBA0 ZwQueryTimerResolution
863 000062D2 ZwQueryValueKey
864 00015AA3 ZwQueryVirtualMemory
865 0000E588 ZwQueryVolumeInformationFile
866 0000366B ZwQueueApcThread
867 00014B92 ZwRaiseException
868 0001B28E ZwRaiseHardError
869 0000C552 ZwReadFile
870 0001B29C ZwReadFileScatter
871 0000F6A1 ZwReadRequestData
872 0000DEE6 ZwReadVirtualMemory
873 00004BB2 ZwRegisterThreadTerminatePort
874 00015475 ZwReleaseMutant
875 00008E81 ZwReleaseSemaphore
876 0000BEA7 ZwRemoveIoCompletion
877 0001B2AA ZwReplaceKey
878 0000E596 ZwReplyPort
879 00009161 ZwReplyWaitReceivePort
880 000039BC ZwReplyWaitReceivePortEx
881 0001B2B8 ZwReplyWaitReplyPort
882 0001B4B0 ZwReplyWaitSendChannel
883 0001B2C6 ZwRequestDeviceWakeup
884 00005290 ZwRequestPort
885 0000916F ZwRequestWaitReplyPort
886 0001B2D4 ZwRequestWakeupLatency
887 00016C2F ZwResetEvent
888 0001B2E2 ZwResetWriteWatch
889 0001B2F0 ZwRestoreKey
890 00008FB7 ZwResumeThread
891 00016C3D ZwSaveKey
892 0001B2FE ZwSaveMergedKeys
893 0000808A ZwSecureConnectPort
894 0001B4BE ZwSendWaitReplyChannel
895 0001B4CC ZwSetContextChannel
896 00016C4B ZwSetContextThread
897 0001B30C ZwSetDefaultHardErrorPort
898 0001B31A ZwSetDefaultLocale
899 0001B328 ZwSetDefaultUILanguage
900 0001B336 ZwSetEaFile
901 00008563 ZwSetEvent
902 0001B344 ZwSetHighEventPair
903 0001B352 ZwSetHighWaitLowEventPair
904 0000EE28 ZwSetInformationFile
905 0001B360 ZwSetInformationJobObject
906 0001B36E ZwSetInformationKey
907 000107E6 ZwSetInformationObject
908 00013B6D ZwSetInformationProcess
909 0000A1E0 ZwSetInformationThread
910 00016C59 ZwSetInformationToken
911 0001B37C ZwSetIntervalProfile
912 000086C0 ZwSetIoCompletion
913 00016C67 ZwSetLdtEntries
914 0001B38A ZwSetLowEventPair
915 0001B398 ZwSetLowWaitHighEventPair
916 0001B3A6 ZwSetQuotaInformationFile
917 00011F97 ZwSetSecurityObject
918 0001B3B4 ZwSetSystemEnvironmentValue
919 000010CF ZwSetSystemInformation
920 0001B3C2 ZwSetSystemPowerState
921 000010DD ZwSetSystemTime
922 0000C1DA ZwSetThreadExecutionState
923 00008C5F ZwSetTimer
924 00018958 ZwSetTimerResolution
925 0001B3D0 ZwSetUuidSeed
926 0000AA1B ZwSetValueKey
927 0001B3DE ZwSetVolumeInformationFile
928 0001B3EC ZwShutdownSystem
929 0001B3FA ZwSignalAndWaitForSingleObject
930 0001B408 ZwStartProfile
931 0001B416 ZwStopProfile
932 0001B424 ZwSuspendThread
933 0001B432 ZwSystemDebugControl
934 0001B440 ZwTerminateJobObject
935 0000DD80 ZwTerminateProcess
936 0000DFC2 ZwTerminateThread
937 00004BC0 ZwTestAlert
938 0001B44E ZwUnloadDriver
939 00016C75 ZwUnloadKey
940 00010312 ZwUnlockFile
941 000024DB ZwUnlockVirtualMemory
942 0000A3D8 ZwUnmapViewOfSection
943 00016C83 ZwVdmControl
944 00013233 ZwWaitForMultipleObjects
945 00014086 ZwWaitForSingleObject
946 0001B45C ZwWaitHighEventPair
947 0001B46A ZwWaitLowEventPair
948 000023A7 ZwWriteFile
949 0001B478 ZwWriteFileGather
950 0000816A ZwWriteRequestData
951 0000815C ZwWriteVirtualMemory
952 00012445 ZwYieldExecution
953 000382C5 _CIpow
954 000467F7 __eCommonExceptions
955 00046000 __eEmulatorInit
956 00049A66 __eF2XM1
957 00048335 __eFABS
958 00046DD7 __eFADD32
959 00046DFF __eFADD64
960 00046E4A __eFADDPreg
961 00046E4F __eFADDreg
962 00046E51 __eFADDtop
963 00048346 __eFCHS
964 00048526 __eFCOM
965 00048449 __eFCOM32
966 00048472 __eFCOM64
967 00048517 __eFCOMP
968 00048432 __eFCOMP32
969 0004845B __eFCOMP64
970 000484FB __eFCOMPP
971 000490CE __eFCOS
972 00049F37 __eFDECSTP
973 00047216 __eFDIV32
974 0004722A __eFDIV64
975 000472E3 __eFDIVPreg
976 00047220 __eFDIVR32
977 00047234 __eFDIVR64
978 0004723E __eFDIVRPreg
979 00047243 __eFDIVRreg
980 00047245 __eFDIVRtop
981 000472E8 __eFDIVreg
982 000472EA __eFDIVtop
983 00048356 __eFFREE
984 00046D87 __eFIADD16
985 00046DAF __eFIADD32
986 000483F7 __eFICOM16
987 00048420 __eFICOM32
988 000483E0 __eFICOMP16
989 00048409 __eFICOMP32
990 000471EE __eFIDIV16
991 00047202 __eFIDIV32
992 000471F8 __eFIDIVR16
993 0004720C __eFIDIVR32
994 00047AF8 __eFILD16
995 00047B09 __eFILD32
996 00047B13 __eFILD64
997 00046F64 __eFIMUL16
998 00046F98 __eFIMUL32
999 00049F54 __eFINCSTP
1000 00046000 __eFINIT
1001 000481A0 __eFIST16
1002 000480AE __eFIST32
1003 0004819B __eFISTP16
1004 000480A9 __eFISTP32
1005 00048253 __eFISTP64
1006 00046CC6 __eFISUB16
1007 00046D93 __eFISUB32
1008 00046D79 __eFISUBR16
1009 00046DA1 __eFISUBR32
1010 00048708 __eFLD1
1011 00047A79 __eFLD32
1012 00047ACF __eFLD64
1013 00047BC9 __eFLD80
1014 00049ED0 __eFLDCW
1015 0004A071 __eFLDENV
1016 00048773 __eFLDL2E
1017 00048795 __eFLDLN2
1018 000487A6 __eFLDPI
1019 00048744 __eFLDZ
1020 00046FDA __eFMUL32
1021 0004701E __eFMUL64
1022 0004706B __eFMULPreg
1023 00047070 __eFMULreg
1024 00047072 __eFMULtop
1025 00046A66 __eFPATAN
1026 00046A2A __eFPREM
1027 00046A50 __eFPREM1
1028 000491DB __eFPTAN
1029 0004738D __eFRNDINT
1030 0004A0AB __eFRSTOR
1031 00049FFE __eFSAVE
1032 00046A5F __eFSCALE
1033 00049173 __eFSIN
1034 0004A2CA __eFSQRT
1035 00047C84 __eFST
1036 00047F22 __eFST32
1037 00047D4D __eFST64
1038 00049F16 __eFSTCW
1039 00049F82 __eFSTENV
1040 00047C2A __eFSTP
1041 00047F1D __eFSTP32
1042 00047D48 __eFSTP64
1043 000482DA __eFSTP80
1044 00049F22 __eFSTSW
1045 00046DBB __eFSUB32
1046 00046DE3 __eFSUB64
1047 00046E0B __eFSUBPreg
1048 00046DC9 __eFSUBR32
1049 00046DF1 __eFSUBR64
1050 00046E26 __eFSUBRPreg
1051 00046E2B __eFSUBRreg
1052 00046E2D __eFSUBRtop
1053 00046E10 __eFSUBreg
1054 00046E12 __eFSUBtop
1055 0004869A __eFTST
1056 000484F1 __eFUCOM
1057 000484E2 __eFUCOMP
1058 00048484 __eFUCOMPP
1059 00048674 __eFXAM
1060 0004835C __eFXCH
1061 00048A03 __eFXTRACT
1062 00046A87 __eFYL2X
1063 00046A8E __eFYL2XP1
1064 0004A18D __eGetStatusWord
1065 000386DE __isascii
1066 00038730 __iscsym
1067 000386F3 __iscsymf
1068 000386EB __toascii
1069 0000C5A8 _alldiv
1070 00007A9F _allmul
1071 000160D6 _alloca_probe
1072 000387F1 _allrem
1073 000388A3 _allshl
1074 000388C2 _allshr
1075 0003891A _atoi64
1076 0000DB68 _aulldiv
1077 0000DB91 _aullrem
1078 00007D61 _aullshr
1079 000160D6 _chkstk
1080 00051028 _fltused
1081 00002CDA _ftol
1082 00038AB4 _i64toa
1083 00038BD4 _i64tow
1084 000189D2 _itoa
1085 00001B59 _itow
1086 00038A8A _ltoa
1087 00038B78 _ltow
1088 00038C05 _memccpy
1089 00038C58 _memicmp
1090 00038CF0 _snprintf
1091 00008E0E _snwprintf
1092 00038D65 _splitpath
1093 00011634 _strcmpi
1094 00011634 _stricmp
1095 00017DD3 _strlwr
1096 00004DE6 _strnicmp
1097 00002D01 _strupr
1098 00038F4F _tolower
1099 00038F6A _toupper
1100 00038B5D _ui64toa
1101 0000FE10 _ultoa
1102 00038BA6 _ultow
1103 00018D01 _vsnprintf
1104 00001FA5 _wcsicmp
1105 00038F98 _wcslwr
1106 00012DD7 _wcsnicmp
1107 00038FC2 _wcsupr
1108 00038FEC _wtoi
1109 0003900F _wtoi64
1110 00038FEC _wtol
1111 000393F2 abs
1112 00039032 atan
1113 0001673E atoi
1114 000166E3 atol
1115 000390E9 ceil
1116 000391B5 cos
1117 0003924F fabs
1118 00039304 floor
1119 0003862C isalnum
1120 0003853D isalpha
1121 000386B6 iscntrl
1122 00002C85 isdigit
1123 00038688 isgraph
1124 00038593 islower
1125 0003865A isprint
1126 00038604 ispunct
1127 00002CA3 isspace
1128 0003856B isupper
1129 000393D0 iswalpha
1130 0000C629 iswctype
1131 00007FA3 iswdigit
1132 000393E1 iswlower
1133 00018AE8 iswspace
1134 00017DF6 iswxdigit
1135 000385C9 isxdigit
1136 000393F2 labs
1137 000393FD log
1138 00001B87 mbstowcs
1139 000394E2 memchr
1140 00039583 memcmp
1141 0003962F memcpy
1142 0001109B memmove
1143 00039950 memset
1144 000382DE pow
1145 000399A8 qsort
1146 00039B6A sin
1147 00017E20 sprintf
1148 00039C16 sqrt
1149 00039CBC sscanf
1150 00039D62 strcat
1151 00005B1D strchr
1152 00039E02 strcmp
1153 00039CF6 strcpy
1154 00039E83 strcspn
1155 00039EC0 strlen
1156 00039F37 strncat
1157 00002D4E strncmp
1158 00008824 strncpy
1159 0003A084 strpbrk
1160 00017EC0 strrchr
1161 0003A0BD strspn
1162 00017EE7 strstr
1163 0003A10C strtol
1164 000180CD strtoul
1165 0000423D swprintf
1166 0003A271 tan
1167 00002D26 tolower
1168 00015A1E toupper
1169 0003A30F towlower
1170 000180E4 towupper
1171 0003A32A vsprintf
1172 000121E4 wcscat
1173 00012544 wcschr
1174 0000972D wcscmp
1175 0000C23F wcscpy
1176 0000CA53 wcscspn
1177 000152EB wcslen
1178 00006459 wcsncat
1179 0000EBD1 wcsncmp
1180 0000BCE6 wcsncpy
1181 0000DF7B wcspbrk
1182 0000F661 wcsrchr
1183 00016A11 wcsspn
1184 0000456D wcsstr
1185 00008B39 wcstol
1186 0003A446 wcstombs
1187 0001815A wcstoul