The listed functions are a subset of the functions present in NTDLL.DLL and NTOSKRNL.EXE.
I consider them the most important out of the whole number of functions present in these
DLLs (I am referring to the different OS versions). The C library functions are not presented
here because they are usually only used through the respective LIB files.
The dumped contents of NTDLL.DLL and NTOSKRNL.EXE of
Windows NT 3.51, Windows NT 4, Windows 2000, Windows XP and Windows 2003 give the
following output (Professional and Server versions have been compared and no difference
was found).
Note: This page makes heavy use of CSS. Thus it is necessary to have a CSS-capable browser at hand ;) Furthermore all information is color-coded ... so a monochrome display won't help much as well ;)
| Function names | OS versions |
|---|---|
| Jump to: Cc, Cm, Csr, Dbg, Etw, Ex, Fs, Hal, Inbv, Interlocked, Io, Kd, Ke, Ki, Ldr, Lpc, Lsa, Mm, Nls, Nt, Ob, Pfx, Po, Ps, Rtl, Se, Vf, Wmi, Zw | |
| CcCanIWrite | NT3NT4W2KWXP2K3 |
| CcCopyRead | NT3NT4W2KWXP2K3 |
| CcCopyWrite | NT3NT4W2KWXP2K3 |
| CcDeferWrite | NT3NT4W2KWXP2K3 |
| CcFastCopyRead | NT4W2KWXP2K3 |
| CcFastCopyWrite | NT4W2KWXP2K3 |
| CcFastMdlReadWait | NT4W2KWXP2K3 |
| CcFastReadNotPossible | NT4W2KWXP2K3 |
| CcFastReadWait | NT4W2KWXP2K3 |
| CcFlushCache | NT3NT4W2KWXP2K3 |
| CcGetDirtyPages | NT3NT4W2KWXP2K3 |
| CcGetFileObjectFromBcb | NT3NT4W2KWXP2K3 |
| CcGetFileObjectFromSectionPtrs | NT3NT4W2KWXP2K3 |
| CcGetFlushedValidData | W2KWXP2K3 |
| CcGetLsnForFileObject | NT3NT4W2KWXP2K3 |
| CcInitializeCacheMap | NT3NT4W2KWXP2K3 |
| CcIsThereDirtyData | NT3NT4W2KWXP2K3 |
| CcMapData | NT3NT4W2KWXP2K3 |
| CcMdlRead | NT3NT4W2KWXP2K3 |
| CcMdlReadComplete | NT3NT4W2KWXP2K3 |
| CcMdlWriteAbort | WXP2K3 |
| CcMdlWriteComplete | NT3NT4W2KWXP2K3 |
| CcPinMappedData | NT3NT4W2KWXP2K3 |
| CcPinRead | NT3NT4W2KWXP2K3 |
| CcPrepareMdlWrite | NT3NT4W2KWXP2K3 |
| CcPreparePinWrite | NT3NT4W2KWXP2K3 |
| CcPurgeCacheSection | NT3NT4W2KWXP2K3 |
| CcRemapBcb | W2KWXP2K3 |
| CcRepinBcb | NT3NT4W2KWXP2K3 |
| CcScheduleReadAhead | NT3NT4W2KWXP2K3 |
| CcSetAdditionalCacheAttributes | NT3NT4W2KWXP2K3 |
| CcSetBcbOwnerPointer | NT4W2KWXP2K3 |
| CcSetDirtyPageThreshold | NT3NT4W2KWXP2K3 |
| CcSetDirtyPinnedData | NT3NT4W2KWXP2K3 |
| CcSetFileSizes | NT3NT4W2KWXP2K3 |
| CcSetLogHandleForFile | NT3NT4W2KWXP2K3 |
| CcSetReadAheadGranularity | NT3NT4W2KWXP2K3 |
| CcUninitializeCacheMap | NT3NT4W2KWXP2K3 |
| CcUnpinData | NT3NT4W2KWXP2K3 |
| CcUnpinDataForThread | NT3NT4W2KWXP2K3 |
| CcUnpinRepinnedBcb | NT3NT4W2KWXP2K3 |
| CcWaitForCurrentLazyWriterActivity | W2KWXP2K3 |
| CcZeroData | NT3NT4W2KWXP2K3 |
| CmRegisterCallback | WXP2K3 |
| CmUnRegisterCallback | WXP2K3 |
| CsrAllocateCaptureBuffer | NT3NT4W2KWXP2K3 |
| CsrAllocateCapturePointer | NT3NT4 |
| CsrAllocateMessagePointer | NT3NT4W2KWXP2K3 |
| CsrCaptureMessageBuffer | NT3NT4W2KWXP2K3 |
| CsrCaptureMessageMultiUnicodeStringsInPlace | WXP2K3 |
| CsrCaptureMessageString | NT3NT4W2KWXP2K3 |
| CsrCaptureTimeout | NT3NT4W2KWXP2K3 |
| CsrClientCallServer | NT3NT4W2KWXP2K3 |
| CsrClientConnectToServer | NT3NT4W2KWXP2K3 |
| CsrClientMaxMessage | NT3 |
| CsrClientSendMessage | NT3 |
| CsrClientThreadConnect | NT3 |
| CsrFreeCaptureBuffer | NT3NT4W2KWXP2K3 |
| CsrGetProcessId | WXP2K3 |
| CsrIdentifyAlertableThread | NT3NT4W2KWXP2K3 |
| CsrNewThread | NT3NT4W2KWXP2K3 |
| CsrProbeForRead | NT3NT4W2KWXP2K3 |
| CsrProbeForWrite | NT3NT4W2KWXP2K3 |
| CsrSetPriorityClass | NT3NT4W2KWXP2K3 |
| CsrpProcessCallbackRequest | NT3 |
| DbgBreakPoint | NT3NT4W2KWXP2K3 |
| DbgBreakPointWithStatus | NT4W2KWXP2K3 |
| DbgCommandString | 2K3 |
| DbgLoadImageSymbols | NT3NT4W2KWXP2K3 |
| DbgPrint | NT3NT4W2KWXP2K3 |
| DbgPrintEx | WXP2K3 |
| DbgPrintReturnControlC | W2KWXP2K3 |
| DbgPrompt | NT3NT4W2KWXP2K3 |
| DbgQueryDebugFilterState | WXP2K3 |
| DbgSetDebugFilterState | WXP2K3 |
| DbgSsHandleKmApiMsg | NT3NT4W2K |
| DbgSsInitialize | NT3NT4W2K |
| DbgUiConnectToDbg | NT3NT4W2KWXP2K3 |
| DbgUiContinue | NT3NT4W2KWXP2K3 |
| DbgUiConvertStateChangeStructure | WXP2K3 |
| DbgUiDebugActiveProcess | WXP2K3 |
| DbgUiGetThreadDebugObject | WXP2K3 |
| DbgUiIssueRemoteBreakin | WXP2K3 |
| DbgUiRemoteBreakin | WXP2K3 |
| DbgUiSetThreadDebugObject | WXP2K3 |
| DbgUiStopDebugging | WXP2K3 |
| DbgUiWaitStateChange | NT3NT4W2KWXP2K3 |
| DbgUserBreakPoint | NT3NT4W2KWXP2K3 |
| EtwControlTraceA | 2K3 |
| EtwControlTraceW | 2K3 |
| EtwCreateTraceInstanceId | 2K3 |
| EtwEnableTrace | 2K3 |
| EtwEnumerateTraceGuids | 2K3 |
| EtwFlushTraceA | 2K3 |
| EtwFlushTraceW | 2K3 |
| EtwGetTraceEnableFlags | 2K3 |
| EtwGetTraceEnableLevel | 2K3 |
| EtwGetTraceLoggerHandle | 2K3 |
| EtwNotificationRegistrationA | 2K3 |
| EtwNotificationRegistrationW | 2K3 |
| EtwQueryAllTracesA | 2K3 |
| EtwQueryAllTracesW | 2K3 |
| EtwQueryTraceA | 2K3 |
| EtwQueryTraceW | 2K3 |
| EtwReceiveNotificationsA | 2K3 |
| EtwReceiveNotificationsW | 2K3 |
| EtwRegisterTraceGuidsA | 2K3 |
| EtwRegisterTraceGuidsW | 2K3 |
| EtwStartTraceA | 2K3 |
| EtwStartTraceW | 2K3 |
| EtwStopTraceA | 2K3 |
| EtwStopTraceW | 2K3 |
| EtwTraceEvent | 2K3 |
| EtwTraceEventInstance | 2K3 |
| EtwTraceMessage | 2K3 |
| EtwTraceMessageVa | 2K3 |
| EtwUnregisterTraceGuids | 2K3 |
| EtwUpdateTraceA | 2K3 |
| EtwUpdateTraceW | 2K3 |
| EtwpGetTraceBuffer | 2K3 |
| EtwpSetHWConfigFunction | 2K3 |
| ExAcquireFastMutexUnsafe | NT3NT4W2KWXP2K3 |
| ExAcquireResourceExclusive | NT3NT4W2K |
| ExAcquireResourceExclusiveLite | NT3NT4W2KWXP2K3 |
| ExAcquireResourceSharedLite | NT3NT4W2KWXP2K3 |
| ExAcquireRundownProtection | WXP2K3 |
| ExAcquireRundownProtectionEx | WXP2K3 |
| ExAcquireSharedStarveExclusive | NT3NT4W2KWXP2K3 |
| ExAcquireSharedWaitForExclusive | NT3NT4W2KWXP2K3 |
| ExAllocateFromPagedLookasideList | NT4W2KWXP2K3 |
| ExAllocatePool | NT3NT4W2KWXP2K3 |
| ExAllocatePoolWithQuota | NT3NT4W2KWXP2K3 |
| ExAllocatePoolWithQuotaTag | NT3NT4W2KWXP2K3 |
| ExAllocatePoolWithTag | NT3NT4W2KWXP2K3 |
| ExAllocatePoolWithTagPriority | NT4W2KWXP2K3 |
| ExConvertExclusiveToSharedLite | NT3NT4W2KWXP2K3 |
| ExCreateCallback | NT3NT4W2KWXP2K3 |
| ExDeleteNPagedLookasideList | NT4W2KWXP2K3 |
| ExDeletePagedLookasideList | NT4W2KWXP2K3 |
| ExDeleteResource | NT3NT4W2K |
| ExDeleteResourceLite | NT3NT4W2KWXP2K3 |
| ExDesktopObjectType | NT4W2KWXP2K3 |
| ExDisableResourceBoostLite | NT3NT4W2KWXP2K3 |
| ExEnumHandleTable | NT4W2KWXP2K3 |
| ExEventObjectType | NT3NT4W2KWXP2K3 |
| ExExtendZone | NT3NT4W2KWXP2K3 |
| ExFreePool | NT3NT4W2KWXP2K3 |
| ExFreePoolWithTag | W2KWXP2K3 |
| ExFreeToPagedLookasideList | NT4W2KWXP2K3 |
| ExGetCurrentProcessorCounts | WXP2K3 |
| ExGetCurrentProcessorCpuUsage | WXP2K3 |
| ExGetExclusiveWaiterCount | NT3NT4W2KWXP2K3 |
| ExGetPreviousMode | NT4W2KWXP2K3 |
| ExGetSharedWaiterCount | NT3NT4W2KWXP2K3 |
| ExInitializeNPagedLookasideList | NT4W2KWXP2K3 |
| ExInitializePagedLookasideList | NT4W2KWXP2K3 |
| ExInitializeResource | NT3NT4W2K |
| ExInitializeResourceLite | NT3NT4W2KWXP2K3 |
| ExInitializeRundownProtection | WXP2K3 |
| ExInitializeZone | NT3NT4W2KWXP2K3 |
| ExInterlockedAddLargeInteger | NT3NT4W2KWXP2K3 |
| ExInterlockedAddLargeStatistic | NT3NT4W2KWXP2K3 |
| ExInterlockedAddUlong | NT3NT4W2KWXP2K3 |
| ExInterlockedCompareExchange64 | NT4W2KWXP2K3 |
| ExInterlockedDecrementLong | NT3NT4W2KWXP2K3 |
| ExInterlockedExchangeUlong | NT3NT4W2KWXP2K3 |
| ExInterlockedExtendZone | NT3NT4W2KWXP2K3 |
| ExInterlockedFlushSList | W2KWXP2K3 |
| ExInterlockedIncrementLong | NT3NT4W2KWXP2K3 |
| ExInterlockedInsertHeadList | NT3NT4W2KWXP2K3 |
| ExInterlockedInsertTailList | NT3NT4W2KWXP2K3 |
| ExInterlockedPopEntryList | NT3NT4W2KWXP2K3 |
| ExInterlockedPopEntrySList | NT4W2KWXP2K3 |
| ExInterlockedPushEntryList | NT3NT4W2KWXP2K3 |
| ExInterlockedPushEntrySList | NT4W2KWXP2K3 |
| ExInterlockedRemoveHeadList | NT3NT4W2KWXP2K3 |
| ExIsProcessorFeaturePresent | NT4W2KWXP2K3 |
| ExIsResourceAcquiredExclusiveLite | NT3NT4W2KWXP2K3 |
| ExIsResourceAcquiredSharedLite | NT3NT4W2KWXP2K3 |
| ExLocalTimeToSystemTime | NT3NT4W2KWXP2K3 |
| ExNotifyCallback | NT3NT4W2KWXP2K3 |
| ExPostSystemEvent | NT3NT4 |
| ExQueryPoolBlockSize | NT3NT4W2KWXP2K3 |
| ExQueueWorkItem | NT3NT4W2KWXP2K3 |
| ExRaiseAccessViolation | NT3NT4W2KWXP2K3 |
| ExRaiseDatatypeMisalignment | NT3NT4W2KWXP2K3 |
| ExRaiseException | NT3NT4W2KWXP2K3 |
| ExRaiseHardError | NT3NT4W2KWXP2K3 |
| ExRaiseStatus | NT3NT4W2KWXP2K3 |
| ExReInitializeRundownProtection | WXP2K3 |
| ExRegisterCallback | NT3NT4W2KWXP2K3 |
| ExReinitializeResourceLite | NT3NT4W2KWXP2K3 |
| ExReleaseFastMutexUnsafe | NT3NT4W2KWXP2K3 |
| ExReleaseResourceForThread | NT3NT4W2K |
| ExReleaseResourceForThreadLite | NT3NT4W2KWXP2K3 |
| ExReleaseResourceLite | NT3NT4W2KWXP2K3 |
| ExReleaseRundownProtection | WXP2K3 |
| ExReleaseRundownProtectionEx | WXP2K3 |
| ExRundownCompleted | WXP2K3 |
| ExSemaphoreObjectType | W2KWXP2K3 |
| Subtotal of the above list: 200 functions Jump to: Cc, Cm, Csr, Dbg, Etw, Ex, Fs, Hal, Inbv, Interlocked, Io, Kd, Ke, Ki, Ldr, Lpc, Lsa, Mm, Nls, Nt, Ob, Pfx, Po, Ps, Rtl, Se, Vf, Wmi, Zw | |
| ExSetResourceOwnerPointer | NT4W2KWXP2K3 |
| ExSetTimerResolution | W2KWXP2K3 |
| ExSystemExceptionFilter | NT3NT4W2KWXP2K3 |
| ExSystemTimeToLocalTime | NT3NT4W2KWXP2K3 |
| ExUnregisterCallback | NT3NT4W2KWXP2K3 |
| ExUuidCreate | W2KWXP2K3 |
| ExVerifySuite | WXP2K3 |
| ExWaitForRundownProtectionRelease | WXP2K3 |
| ExWindowStationObjectType | NT4W2KWXP2K3 |
| ExfAcquirePushLockExclusive | 2K3 |
| ExfAcquirePushLockShared | 2K3 |
| ExfInterlockedAddUlong | NT3NT4W2KWXP2K3 |
| ExfInterlockedCompareExchange64 | WXP2K3 |
| ExfInterlockedInsertHeadList | NT3NT4W2KWXP2K3 |
| ExfInterlockedInsertTailList | NT3NT4W2KWXP2K3 |
| ExfInterlockedPopEntryList | NT3NT4W2KWXP2K3 |
| ExfInterlockedPushEntryList | NT3NT4W2KWXP2K3 |
| ExfInterlockedRemoveHeadList | NT3NT4W2KWXP2K3 |
| ExfReleasePushLock | 2K3 |
| ExfUnblockPushLock | 2K3 |
| Exfi386InterlockedDecrementLong | NT3NT4W2KWXP2K3 |
| Exfi386InterlockedExchangeUlong | NT3NT4W2KWXP2K3 |
| Exfi386InterlockedIncrementLong | NT3NT4W2KWXP2K3 |
| Exi386InterlockedDecrementLong | NT3NT4W2KWXP2K3 |
| Exi386InterlockedExchangeUlong | NT3NT4W2KWXP2K3 |
| Exi386InterlockedIncrementLong | NT3NT4W2KWXP2K3 |
| FsRtlAcquireFileExclusive | W2KWXP2K3 |
| FsRtlAddBaseMcbEntry | 2K3 |
| FsRtlAddLargeMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlAddMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlAddToTunnelCache | NT4W2KWXP2K3 |
| FsRtlAllocateFileLock | W2KWXP2K3 |
| FsRtlAllocatePool | NT3NT4W2KWXP2K3 |
| FsRtlAllocatePoolWithQuota | NT3NT4W2KWXP2K3 |
| FsRtlAllocatePoolWithQuotaTag | NT3NT4W2KWXP2K3 |
| FsRtlAllocatePoolWithTag | NT3NT4W2KWXP2K3 |
| FsRtlAllocateResource | NT3NT4W2KWXP2K3 |
| FsRtlAreNamesEqual | NT3NT4W2KWXP2K3 |
| FsRtlBalanceReads | NT3NT4W2KWXP2K3 |
| FsRtlCheckLockForReadAccess | NT3NT4W2KWXP2K3 |
| FsRtlCheckLockForWriteAccess | NT3NT4W2KWXP2K3 |
| FsRtlCheckOplock | NT3NT4W2KWXP2K3 |
| FsRtlCopyRead | NT3NT4W2KWXP2K3 |
| FsRtlCopyWrite | NT3NT4W2KWXP2K3 |
| FsRtlCurrentBatchOplock | NT3NT4W2KWXP2K3 |
| FsRtlDeleteKeyFromTunnelCache | NT4W2KWXP2K3 |
| FsRtlDeleteTunnelCache | NT4W2KWXP2K3 |
| FsRtlDeregisterUncProvider | NT3NT4W2KWXP2K3 |
| FsRtlDissectDbcs | NT3NT4W2KWXP2K3 |
| FsRtlDissectName | NT3NT4W2KWXP2K3 |
| FsRtlDoesDbcsContainWildCards | NT3NT4W2KWXP2K3 |
| FsRtlDoesNameContainWildCards | NT3NT4W2KWXP2K3 |
| FsRtlFastCheckLockForRead | NT3NT4W2KWXP2K3 |
| FsRtlFastCheckLockForWrite | NT3NT4W2KWXP2K3 |
| FsRtlFastUnlockAll | NT3NT4W2KWXP2K3 |
| FsRtlFastUnlockAllByKey | NT3NT4W2KWXP2K3 |
| FsRtlFastUnlockSingle | NT3NT4W2KWXP2K3 |
| FsRtlFindInTunnelCache | NT4W2KWXP2K3 |
| FsRtlFreeFileLock | W2KWXP2K3 |
| FsRtlGetFileSize | NT4W2KWXP2K3 |
| FsRtlGetNextBaseMcbEntry | 2K3 |
| FsRtlGetNextFileLock | NT3NT4W2KWXP2K3 |
| FsRtlGetNextLargeMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlGetNextMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlIncrementCcFastReadNoWait | WXP2K3 |
| FsRtlIncrementCcFastReadNotPossible | WXP2K3 |
| FsRtlIncrementCcFastReadResourceMiss | WXP2K3 |
| FsRtlIncrementCcFastReadWait | WXP2K3 |
| FsRtlInitializeBaseMcb | 2K3 |
| FsRtlInitializeFileLock | NT3NT4W2KWXP2K3 |
| FsRtlInitializeLargeMcb | NT3NT4W2KWXP2K3 |
| FsRtlInitializeMcb | NT3NT4W2KWXP2K3 |
| FsRtlInitializeOplock | NT3NT4W2KWXP2K3 |
| FsRtlInitializeTunnelCache | NT4W2KWXP2K3 |
| FsRtlInsertFilterContext | W2K |
| FsRtlInsertPerFileObjectContext | WXP2K3 |
| FsRtlInsertPerStreamContext | WXP2K3 |
| FsRtlIsDbcsInExpression | NT3NT4W2KWXP2K3 |
| FsRtlIsFatDbcsLegal | NT3NT4W2KWXP2K3 |
| FsRtlIsHpfsDbcsLegal | NT3NT4W2KWXP2K3 |
| FsRtlIsNameInExpression | NT3NT4W2KWXP2K3 |
| FsRtlIsNtstatusExpected | NT3NT4W2KWXP2K3 |
| FsRtlIsPagingFile | WXP2K3 |
| FsRtlIsTotalDeviceFailure | NT3NT4W2KWXP2K3 |
| FsRtlLegalAnsiCharacterArray | NT3NT4W2KWXP2K3 |
| FsRtlLookupBaseMcbEntry | 2K3 |
| FsRtlLookupFilterContextInternal | W2K |
| FsRtlLookupLargeMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlLookupLastBaseMcbEntry | 2K3 |
| FsRtlLookupLastBaseMcbEntryAndIndex | 2K3 |
| FsRtlLookupLastLargeMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlLookupLastLargeMcbEntryAndIndex | W2KWXP2K3 |
| FsRtlLookupLastMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlLookupMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlLookupPerFileObjectContext | WXP2K3 |
| FsRtlLookupPerStreamContextInternal | WXP2K3 |
| FsRtlMdlRead | NT3NT4W2KWXP2K3 |
| FsRtlMdlReadComplete | NT4W2KWXP2K3 |
| FsRtlMdlReadCompleteDev | NT4W2KWXP2K3 |
| FsRtlMdlReadDev | NT4W2KWXP2K3 |
| FsRtlMdlWriteComplete | NT4W2KWXP2K3 |
| FsRtlMdlWriteCompleteDev | NT4W2KWXP2K3 |
| FsRtlNormalizeNtstatus | NT3NT4W2KWXP2K3 |
| FsRtlNotifyChangeDirectory | NT3NT4W2KWXP2K3 |
| FsRtlNotifyCleanup | NT3NT4W2KWXP2K3 |
| FsRtlNotifyFilterChangeDirectory | WXP2K3 |
| FsRtlNotifyFilterReportChange | WXP2K3 |
| FsRtlNotifyFullChangeDirectory | NT3NT4W2KWXP2K3 |
| FsRtlNotifyFullReportChange | NT3NT4W2KWXP2K3 |
| FsRtlNotifyInitializeSync | NT3NT4W2KWXP2K3 |
| FsRtlNotifyReportChange | NT3NT4W2KWXP2K3 |
| FsRtlNotifyUninitializeSync | NT3NT4W2KWXP2K3 |
| FsRtlNotifyVolumeEvent | W2KWXP2K3 |
| FsRtlNumberOfRunsInBaseMcb | 2K3 |
| FsRtlNumberOfRunsInLargeMcb | NT3NT4W2KWXP2K3 |
| FsRtlNumberOfRunsInMcb | NT3NT4W2KWXP2K3 |
| FsRtlOplockFsctrl | NT3NT4W2KWXP2K3 |
| FsRtlOplockIsFastIoPossible | NT3NT4W2KWXP2K3 |
| FsRtlPostPagingFileStackOverflow | NT3NT4W2KWXP2K3 |
| FsRtlPostStackOverflow | NT3NT4W2KWXP2K3 |
| FsRtlPrepareMdlWrite | NT3NT4W2KWXP2K3 |
| FsRtlPrepareMdlWriteDev | NT4W2KWXP2K3 |
| FsRtlPrivateLock | NT3NT4W2KWXP2K3 |
| FsRtlProcessFileLock | NT3NT4W2KWXP2K3 |
| FsRtlRegisterFileSystemFilterCallbacks | WXP2K3 |
| FsRtlRegisterUncProvider | NT3NT4W2KWXP2K3 |
| FsRtlReleaseFile | W2KWXP2K3 |
| FsRtlRemoveBaseMcbEntry | 2K3 |
| FsRtlRemoveFilterContext | W2K |
| FsRtlRemoveLargeMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlRemoveMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlRemovePerFileObjectContext | WXP2K3 |
| FsRtlRemovePerStreamContext | WXP2K3 |
| FsRtlResetBaseMcb | 2K3 |
| FsRtlResetLargeMcb | W2KWXP2K3 |
| FsRtlSplitBaseMcb | 2K3 |
| FsRtlSplitLargeMcb | NT3NT4W2KWXP2K3 |
| FsRtlSyncVolumes | NT3NT4W2KWXP2K3 |
| FsRtlTeardownFilterContexts | W2K |
| FsRtlTeardownPerStreamContexts | WXP2K3 |
| FsRtlTruncateBaseMcb | 2K3 |
| FsRtlTruncateLargeMcb | NT3NT4W2KWXP2K3 |
| FsRtlTruncateMcb | NT3NT4W2KWXP2K3 |
| FsRtlUninitializeBaseMcb | 2K3 |
| FsRtlUninitializeFileLock | NT3NT4W2KWXP2K3 |
| FsRtlUninitializeLargeMcb | NT3NT4W2KWXP2K3 |
| FsRtlUninitializeMcb | NT3NT4W2KWXP2K3 |
| FsRtlUninitializeOplock | NT3NT4W2KWXP2K3 |
| HalDispatchTable | NT3NT4W2KWXP2K3 |
| HalExamineMBR | WXP2K3 |
| HalPrivateDispatchTable | NT3NT4W2KWXP2K3 |
| HeadlessDispatch | WXP2K3 |
| InbvAcquireDisplayOwnership | W2KWXP2K3 |
| InbvCheckDisplayOwnership | W2KWXP2K3 |
| InbvDisplayString | W2KWXP2K3 |
| InbvEnableBootDriver | W2KWXP2K3 |
| InbvEnableDisplayString | W2KWXP2K3 |
| InbvInstallDisplayStringFilter | W2KWXP2K3 |
| InbvIsBootDriverInstalled | W2KWXP2K3 |
| InbvNotifyDisplayOwnershipLost | W2KWXP2K3 |
| InbvResetDisplay | W2KWXP2K3 |
| InbvSetScrollRegion | W2KWXP2K3 |
| InbvSetTextColor | W2KWXP2K3 |
| InbvSolidColorFill | W2KWXP2K3 |
| InitSafeBootMode | W2KWXP2K3 |
| InterlockedCompareExchange | NT4W2KWXP2K3 |
| InterlockedDecrement | NT3NT4W2KWXP2K3 |
| InterlockedExchange | NT3NT4W2KWXP2K3 |
| InterlockedExchangeAdd | NT4W2KWXP2K3 |
| InterlockedIncrement | NT3NT4W2KWXP2K3 |
| InterlockedPopEntrySList | WXP2K3 |
| InterlockedPushEntrySList | WXP2K3 |
| IoAcquireCancelSpinLock | NT3NT4W2KWXP2K3 |
| IoAcquireRemoveLockEx | W2KWXP2K3 |
| IoAcquireVpbSpinLock | NT3NT4W2KWXP2K3 |
| IoAdapterObjectType | NT3NT4W2KWXP2K3 |
| IoAllocateAdapterChannel | NT3NT4W2KWXP2K3 |
| IoAllocateController | NT3NT4W2KWXP2K3 |
| IoAllocateDriverObjectExtension | W2KWXP2K3 |
| IoAllocateErrorLogEntry | NT3NT4W2KWXP2K3 |
| IoAllocateIrp | NT3NT4W2KWXP2K3 |
| IoAllocateMdl | NT3NT4W2KWXP2K3 |
| IoAllocateWorkItem | W2KWXP2K3 |
| IoAssignDriveLetters | WXP2K3 |
| IoAssignResources | NT3NT4W2KWXP2K3 |
| IoAttachDevice | NT3NT4W2KWXP2K3 |
| IoAttachDeviceByPointer | NT3NT4W2KWXP2K3 |
| IoAttachDeviceToDeviceStack | NT4W2KWXP2K3 |
| IoAttachDeviceToDeviceStackSafe | WXP2K3 |
| IoBuildAsynchronousFsdRequest | NT3NT4W2KWXP2K3 |
| IoBuildDeviceIoControlRequest | NT3NT4W2KWXP2K3 |
| IoBuildPartialMdl | NT3NT4W2KWXP2K3 |
| IoBuildSynchronousFsdRequest | NT3NT4W2KWXP2K3 |
| IoCallDriver | NT3NT4W2KWXP2K3 |
| IoCancelFileOpen | W2KWXP2K3 |
| IoCancelIrp | NT3NT4W2KWXP2K3 |
| IoCheckDesiredAccess | NT3NT4W2KWXP2K3 |
| IoCheckEaBufferValidity | NT3NT4W2KWXP2K3 |
| IoCheckFunctionAccess | NT3NT4W2KWXP2K3 |
| IoCheckQuerySetFileInformation | W2KWXP2K3 |
| Subtotal of the above list: 400 functions Jump to: Cc, Cm, Csr, Dbg, Etw, Ex, Fs, Hal, Inbv, Interlocked, Io, Kd, Ke, Ki, Ldr, Lpc, Lsa, Mm, Nls, Nt, Ob, Pfx, Po, Ps, Rtl, Se, Vf, Wmi, Zw | |
| IoCheckQuerySetVolumeInformation | W2KWXP2K3 |
| IoCheckQuotaBufferValidity | W2KWXP2K3 |
| IoCheckShareAccess | NT3NT4W2KWXP2K3 |
| IoCompleteRequest | NT3NT4W2KWXP2K3 |
| IoConnectInterrupt | NT3NT4W2KWXP2K3 |
| IoCreateController | NT3NT4W2KWXP2K3 |
| IoCreateDevice | NT3NT4W2KWXP2K3 |
| IoCreateDisk | WXP2K3 |
| IoCreateDriver | W2KWXP2K3 |
| IoCreateFile | NT3NT4W2KWXP2K3 |
| IoCreateFileSpecifyDeviceObjectHint | WXP2K3 |
| IoCreateNotificationEvent | NT4W2KWXP2K3 |
| IoCreateStreamFileObject | NT3NT4W2KWXP2K3 |
| IoCreateStreamFileObjectEx | WXP2K3 |
| IoCreateStreamFileObjectLite | W2KWXP2K3 |
| IoCreateSymbolicLink | NT3NT4W2KWXP2K3 |
| IoCreateSynchronizationEvent | NT3NT4W2KWXP2K3 |
| IoCreateUnprotectedSymbolicLink | NT3NT4W2KWXP2K3 |
| IoCsqInitialize | WXP2K3 |
| IoCsqInitializeEx | 2K3 |
| IoCsqInsertIrp | WXP2K3 |
| IoCsqInsertIrpEx | 2K3 |
| IoCsqRemoveIrp | WXP2K3 |
| IoCsqRemoveNextIrp | WXP2K3 |
| IoDeleteController | NT3NT4W2KWXP2K3 |
| IoDeleteDevice | NT3NT4W2KWXP2K3 |
| IoDeleteDriver | W2KWXP2K3 |
| IoDeleteSymbolicLink | NT3NT4W2KWXP2K3 |
| IoDetachDevice | NT3NT4W2KWXP2K3 |
| IoDeviceHandlerObjectSize | NT4W2KWXP2K3 |
| IoDeviceHandlerObjectType | NT4W2KWXP2K3 |
| IoDeviceObjectType | NT3NT4W2KWXP2K3 |
| IoDisconnectInterrupt | NT3NT4W2KWXP2K3 |
| IoDriverObjectType | NT3NT4W2KWXP2K3 |
| IoEnqueueIrp | NT3NT4W2KWXP2K3 |
| IoEnumerateDeviceObjectList | WXP2K3 |
| IoFastQueryNetworkAttributes | NT4W2KWXP2K3 |
| IoFileObjectType | NT3NT4W2KWXP2K3 |
| IoForwardAndCatchIrp | WXP2K3 |
| IoForwardIrpSynchronously | WXP2K3 |
| IoFreeController | NT3NT4W2KWXP2K3 |
| IoFreeErrorLogEntry | WXP2K3 |
| IoFreeIrp | NT3NT4W2KWXP2K3 |
| IoFreeMdl | NT3NT4W2KWXP2K3 |
| IoFreeWorkItem | W2KWXP2K3 |
| IoGetAttachedDevice | NT3NT4W2KWXP2K3 |
| IoGetAttachedDeviceReference | W2KWXP2K3 |
| IoGetBaseFileSystemDeviceObject | NT4W2KWXP2K3 |
| IoGetBootDiskInformation | W2KWXP2K3 |
| IoGetConfigurationInformation | NT3NT4W2KWXP2K3 |
| IoGetCurrentProcess | NT3NT4W2KWXP2K3 |
| IoGetDeviceAttachmentBaseRef | WXP2K3 |
| IoGetDeviceInterfaceAlias | W2KWXP2K3 |
| IoGetDeviceInterfaces | W2KWXP2K3 |
| IoGetDeviceObjectPointer | NT3NT4W2KWXP2K3 |
| IoGetDeviceProperty | W2KWXP2K3 |
| IoGetDeviceToVerify | NT3NT4W2KWXP2K3 |
| IoGetDiskDeviceObject | WXP2K3 |
| IoGetDmaAdapter | W2KWXP2K3 |
| IoGetDriverObjectExtension | W2KWXP2K3 |
| IoGetFileObjectGenericMapping | NT3NT4W2KWXP2K3 |
| IoGetInitialStack | NT3NT4W2KWXP2K3 |
| IoGetLowerDeviceObject | WXP2K3 |
| IoGetPagingIoPriority | 2K3 |
| IoGetRelatedDeviceObject | NT3NT4W2KWXP2K3 |
| IoGetRequestorProcess | NT3NT4W2KWXP2K3 |
| IoGetRequestorProcessId | W2KWXP2K3 |
| IoGetRequestorSessionId | W2KWXP2K3 |
| IoGetStackLimits | NT4W2KWXP2K3 |
| IoGetTopLevelIrp | NT3NT4W2KWXP2K3 |
| IoInitializeIrp | NT3NT4W2KWXP2K3 |
| IoInitializeRemoveLockEx | W2KWXP2K3 |
| IoInitializeTimer | NT3NT4W2KWXP2K3 |
| IoInvalidateDeviceRelations | W2KWXP2K3 |
| IoInvalidateDeviceState | W2KWXP2K3 |
| IoIsFileOriginRemote | W2KWXP2K3 |
| IoIsOperationSynchronous | NT3NT4W2KWXP2K3 |
| IoIsSystemThread | NT3NT4W2KWXP2K3 |
| IoIsValidNameGraftingBuffer | W2KWXP2K3 |
| IoIsWdmVersionAvailable | W2KWXP2K3 |
| IoMakeAssociatedIrp | NT3NT4W2KWXP2K3 |
| IoOpenDeviceInstanceKey | NT4 |
| IoOpenDeviceInterfaceRegistryKey | W2KWXP2K3 |
| IoOpenDeviceRegistryKey | W2KWXP2K3 |
| IoPageRead | NT3NT4W2KWXP2K3 |
| IoPnPDeliverServicePowerNotification | W2KWXP2K3 |
| IoQueryDeviceDescription | NT3NT4W2KWXP2K3 |
| IoQueryDeviceEnumInfo | NT4 |
| IoQueryFileDosDeviceName | WXP2K3 |
| IoQueryFileInformation | NT3NT4W2KWXP2K3 |
| IoQueryVolumeInformation | NT3NT4W2KWXP2K3 |
| IoQueueThreadIrp | NT4W2KWXP2K3 |
| IoQueueWorkItem | W2KWXP2K3 |
| IoRaiseHardError | NT3NT4W2KWXP2K3 |
| IoRaiseInformationalHardError | NT3NT4W2KWXP2K3 |
| IoReadDiskSignature | WXP2K3 |
| IoReadOperationCount | NT3NT4W2KWXP2K3 |
| IoReadPartitionTable | WXP2K3 |
| IoReadPartitionTableEx | WXP2K3 |
| IoReadTransferCount | NT3NT4W2KWXP2K3 |
| IoRegisterBootDriverReinitialization | W2KWXP2K3 |
| IoRegisterDeviceInterface | W2KWXP2K3 |
| IoRegisterDriverReinitialization | NT3NT4W2KWXP2K3 |
| IoRegisterFileSystem | NT3NT4W2KWXP2K3 |
| IoRegisterFsRegistrationChange | NT3NT4W2KWXP2K3 |
| IoRegisterLastChanceShutdownNotification | W2KWXP2K3 |
| IoRegisterPlugPlayNotification | W2KWXP2K3 |
| IoRegisterShutdownNotification | NT3NT4W2KWXP2K3 |
| IoReleaseCancelSpinLock | NT3NT4W2KWXP2K3 |
| IoReleaseRemoveLockAndWaitEx | W2KWXP2K3 |
| IoReleaseRemoveLockEx | W2KWXP2K3 |
| IoReleaseVpbSpinLock | NT3NT4W2KWXP2K3 |
| IoRemoveShareAccess | NT3NT4W2KWXP2K3 |
| IoReportDetectedDevice | W2KWXP2K3 |
| IoReportHalResourceUsage | NT3NT4W2KWXP2K3 |
| IoReportResourceForDetection | W2KWXP2K3 |
| IoReportResourceUsage | NT3NT4W2KWXP2K3 |
| IoReportTargetDeviceChange | W2KWXP2K3 |
| IoReportTargetDeviceChangeAsynchronous | W2KWXP2K3 |
| IoRequestDeviceEject | W2KWXP2K3 |
| IoReuseIrp | W2KWXP2K3 |
| IoSetCompletionRoutineEx | WXP2K3 |
| IoSetDeviceInterfaceState | W2KWXP2K3 |
| IoSetDeviceToVerify | NT3NT4W2KWXP2K3 |
| IoSetFileOrigin | W2KWXP2K3 |
| IoSetHardErrorOrVerifyDevice | NT3NT4W2KWXP2K3 |
| IoSetInformation | NT3NT4W2KWXP2K3 |
| IoSetIoCompletion | W2KWXP2K3 |
| IoSetPartitionInformation | WXP2K3 |
| IoSetPartitionInformationEx | WXP2K3 |
| IoSetShareAccess | NT3NT4W2KWXP2K3 |
| IoSetStartIoAttributes | WXP2K3 |
| IoSetSystemPartition | WXP2K3 |
| IoSetThreadHardErrorMode | NT4W2KWXP2K3 |
| IoSetTopLevelIrp | NT3NT4W2KWXP2K3 |
| IoStartNextPacket | NT3NT4W2KWXP2K3 |
| IoStartNextPacketByKey | NT3NT4W2KWXP2K3 |
| IoStartPacket | NT3NT4W2KWXP2K3 |
| IoStartTimer | NT3NT4W2KWXP2K3 |
| IoStatisticsLock | NT3NT4W2KWXP2K3 |
| IoStopTimer | NT3NT4W2KWXP2K3 |
| IoSynchronousInvalidateDeviceRelations | W2KWXP2K3 |
| IoSynchronousPageWrite | NT3NT4W2KWXP2K3 |
| IoThreadToProcess | NT3NT4W2KWXP2K3 |
| IoUnregisterFileSystem | NT3NT4W2KWXP2K3 |
| IoUnregisterFsRegistrationChange | NT3NT4W2KWXP2K3 |
| IoUnregisterPlugPlayNotification | W2KWXP2K3 |
| IoUnregisterShutdownNotification | NT3NT4W2KWXP2K3 |
| IoUpdateShareAccess | NT3NT4W2KWXP2K3 |
| IoValidateDeviceIoControlAccess | WXP2K3 |
| IoVerifyPartitionTable | WXP2K3 |
| IoVerifyVolume | NT3NT4W2KWXP2K3 |
| IoVolumeDeviceToDosName | WXP2K3 |
| IoWMIAllocateInstanceIds | W2KWXP2K3 |
| IoWMIDeviceObjectToInstanceName | WXP2K3 |
| IoWMIExecuteMethod | WXP2K3 |
| IoWMIHandleToInstanceName | WXP2K3 |
| IoWMIOpenBlock | WXP2K3 |
| IoWMIQueryAllData | WXP2K3 |
| IoWMIQueryAllDataMultiple | WXP2K3 |
| IoWMIQuerySingleInstance | WXP2K3 |
| IoWMIQuerySingleInstanceMultiple | WXP2K3 |
| IoWMIRegistrationControl | W2KWXP2K3 |
| IoWMISetNotificationCallback | WXP2K3 |
| IoWMISetSingleInstance | WXP2K3 |
| IoWMISetSingleItem | WXP2K3 |
| IoWMISuggestInstanceName | W2KWXP2K3 |
| IoWMIWriteEvent | W2KWXP2K3 |
| IoWriteErrorLogEntry | NT3NT4W2KWXP2K3 |
| IoWriteOperationCount | NT3NT4W2KWXP2K3 |
| IoWritePartitionTable | WXP2K3 |
| IoWritePartitionTableEx | WXP2K3 |
| IoWriteTransferCount | NT3NT4W2KWXP2K3 |
| IofCallDriver | NT3NT4W2KWXP2K3 |
| IofCompleteRequest | NT3NT4W2KWXP2K3 |
| KdDebuggerEnabled | NT3NT4W2KWXP2K3 |
| KdDebuggerNotPresent | NT3NT4W2KWXP2K3 |
| KdDisableDebugger | W2KWXP2K3 |
| KdEnableDebugger | W2KWXP2K3 |
| KdEnteredDebugger | W2KWXP2K3 |
| KdPollBreakIn | NT3NT4W2KWXP2K3 |
| KdPowerTransition | WXP2K3 |
| KdRefreshDebuggerNotPresent | 2K3 |
| Ke386CallBios | NT3NT4W2KWXP2K3 |
| Ke386IoSetAccessProcess | NT3NT4W2KWXP2K3 |
| Ke386QueryIoAccessMap | NT3NT4W2KWXP2K3 |
| Ke386SetIoAccessMap | NT3NT4W2KWXP2K3 |
| KeAcquireInStackQueuedSpinLockAtDpcLevel | WXP2K3 |
| KeAcquireInStackQueuedSpinLockForDpc | 2K3 |
| KeAcquireInterruptSpinLock | WXP2K3 |
| KeAcquireSpinLockAtDpcLevel | NT3NT4W2KWXP2K3 |
| KeAcquireSpinLockForDpc | 2K3 |
| KeAddSystemServiceTable | NT3NT4W2KWXP2K3 |
| KeAreApcsDisabled | WXP2K3 |
| KeAttachProcess | NT3NT4W2KWXP2K3 |
| KeBoostCurrentThread | NT4 |
| KeBugCheck | NT3NT4W2KWXP2K3 |
| KeBugCheckEx | NT3NT4W2KWXP2K3 |
| KeCancelTimer | NT3NT4W2KWXP2K3 |
| KeCapturePersistentThreadState | WXP2K3 |
| Subtotal of the above list: 600 functions Jump to: Cc, Cm, Csr, Dbg, Etw, Ex, Fs, Hal, Inbv, Interlocked, Io, Kd, Ke, Ki, Ldr, Lpc, Lsa, Mm, Nls, Nt, Ob, Pfx, Po, Ps, Rtl, Se, Vf, Wmi, Zw | |
| KeClearEvent | NT3NT4W2KWXP2K3 |
| KeConnectInterrupt | NT3NT4W2KWXP2K3 |
| KeDcacheFlushCount | NT3NT4W2KWXP |
| KeDelayExecutionThread | NT3NT4W2KWXP2K3 |
| KeDeregisterBugCheckCallback | NT3NT4W2KWXP2K3 |
| KeDeregisterBugCheckReasonCallback | WXP2K3 |
| KeDeregisterNmiCallback | 2K3 |
| KeDetachProcess | NT3NT4W2KWXP2K3 |
| KeDisconnectInterrupt | NT3NT4W2KWXP2K3 |
| KeEnterCriticalRegion | NT3NT4W2KWXP2K3 |
| KeEnterKernelDebugger | NT3NT4W2KWXP2K3 |
| KeFindConfigurationEntry | NT3NT4W2KWXP2K3 |
| KeFindConfigurationNextEntry | NT3NT4W2KWXP2K3 |
| KeFlushEntireTb | NT3NT4W2KWXP2K3 |
| KeFlushQueuedDpcs | 2K3 |
| KeGenericCallDpc | 2K3 |
| KeGetCurrentThread | NT3NT4W2KWXP2K3 |
| KeGetPreviousMode | NT3NT4W2KWXP2K3 |
| KeGetRecommendedSharedDataAlignment | WXP2K3 |
| KeI386AbiosCall | NT3NT4W2KWXP2K3 |
| KeI386AllocateGdtSelectors | NT3NT4W2KWXP2K3 |
| KeI386Call16BitCStyleFunction | NT4W2KWXP2K3 |
| KeI386Call16BitFunction | NT3NT4W2KWXP2K3 |
| KeI386FlatToGdtSelector | NT3NT4W2KWXP2K3 |
| KeI386GetLid | NT3NT4W2KWXP2K3 |
| KeI386MachineType | NT3NT4W2KWXP2K3 |
| KeI386ReleaseGdtSelectors | NT3NT4W2KWXP2K3 |
| KeI386ReleaseLid | NT3NT4W2KWXP2K3 |
| KeI386SetGdtSelector | NT3NT4W2KWXP2K3 |
| KeIcacheFlushCount | NT3NT4W2KWXP |
| KeInitializeApc | NT3NT4W2KWXP2K3 |
| KeInitializeDeviceQueue | NT3NT4W2KWXP2K3 |
| KeInitializeDpc | NT3NT4W2KWXP2K3 |
| KeInitializeEvent | NT3NT4W2KWXP2K3 |
| KeInitializeInterrupt | NT3NT4W2KWXP2K3 |
| KeInitializeMutant | NT3NT4W2KWXP2K3 |
| KeInitializeMutex | NT3NT4W2KWXP2K3 |
| KeInitializeQueue | NT3NT4W2KWXP2K3 |
| KeInitializeSemaphore | NT3NT4W2KWXP2K3 |
| KeInitializeSpinLock | NT3NT4W2KWXP2K3 |
| KeInitializeThreadedDpc | 2K3 |
| KeInitializeTimer | NT3NT4W2KWXP2K3 |
| KeInitializeTimerEx | NT4W2KWXP2K3 |
| KeInsertByKeyDeviceQueue | NT3NT4W2KWXP2K3 |
| KeInsertDeviceQueue | NT3NT4W2KWXP2K3 |
| KeInsertHeadQueue | NT3NT4W2KWXP2K3 |
| KeInsertQueue | NT3NT4W2KWXP2K3 |
| KeInsertQueueApc | NT3NT4W2KWXP2K3 |
| KeInsertQueueDpc | NT3NT4W2KWXP2K3 |
| KeInvalidateAllCaches | 2K3 |
| KeIpiGenericCall | 2K3 |
| KeIsAttachedProcess | WXP2K3 |
| KeIsExecutingDpc | NT3NT4W2KWXP2K3 |
| KeLeaveCriticalRegion | NT3NT4W2KWXP2K3 |
| KeLoaderBlock | NT3NT4W2KWXP2K3 |
| KeNumberProcessors | NT3NT4W2KWXP2K3 |
| KeProfileInterrupt | NT3NT4W2KWXP2K3 |
| KeProfileInterruptWithSource | NT3NT4W2KWXP2K3 |
| KePulseEvent | NT3NT4W2KWXP2K3 |
| KeQueryActiveProcessors | W2KWXP2K3 |
| KeQueryInterruptTime | W2KWXP2K3 |
| KeQueryPriorityThread | W2KWXP2K3 |
| KeQueryRuntimeThread | WXP2K3 |
| KeQuerySystemTime | NT3NT4W2KWXP2K3 |
| KeQueryTickCount | NT3NT4W2KWXP2K3 |
| KeQueryTimeIncrement | NT3NT4W2KWXP2K3 |
| KeRaiseUserException | NT4W2KWXP2K3 |
| KeReadStateEvent | NT3NT4W2KWXP2K3 |
| KeReadStateMutant | NT3NT4W2KWXP2K3 |
| KeReadStateMutex | NT3NT4W2KWXP2K3 |
| KeReadStateQueue | NT3NT4W2KWXP2K3 |
| KeReadStateSemaphore | NT3NT4W2KWXP2K3 |
| KeReadStateTimer | NT3NT4W2KWXP2K3 |
| KeRegisterBugCheckCallback | NT3NT4W2KWXP2K3 |
| KeRegisterBugCheckReasonCallback | WXP2K3 |
| KeRegisterNmiCallback | 2K3 |
| KeReleaseInStackQueuedSpinLockForDpc | 2K3 |
| KeReleaseInStackQueuedSpinLockFromDpcLevel | WXP2K3 |
| KeReleaseInterruptSpinLock | WXP2K3 |
| KeReleaseMutant | NT3NT4W2KWXP2K3 |
| KeReleaseMutex | NT3NT4W2KWXP2K3 |
| KeReleaseSemaphore | NT3NT4W2KWXP2K3 |
| KeReleaseSpinLockForDpc | 2K3 |
| KeReleaseSpinLockFromDpcLevel | NT3NT4W2KWXP2K3 |
| KeRemoveByKeyDeviceQueue | NT3NT4W2KWXP2K3 |
| KeRemoveByKeyDeviceQueueIfBusy | WXP2K3 |
| KeRemoveDeviceQueue | NT3NT4W2KWXP2K3 |
| KeRemoveEntryDeviceQueue | NT3NT4W2KWXP2K3 |
| KeRemoveQueue | NT3NT4W2KWXP2K3 |
| KeRemoveQueueDpc | NT3NT4W2KWXP2K3 |
| KeRemoveSystemServiceTable | WXP2K3 |
| KeResetEvent | NT3NT4W2KWXP2K3 |
| KeRestoreFloatingPointState | NT4W2KWXP2K3 |
| KeRevertToUserAffinityThread | W2KWXP2K3 |
| KeRundownQueue | NT4W2KWXP2K3 |
| KeSaveFloatingPointState | NT4W2KWXP2K3 |
| KeSaveStateForHibernate | W2KWXP2K3 |
| KeServiceDescriptorTable | NT3NT4W2KWXP2K3 |
| KeSetAffinityThread | NT4W2KWXP2K3 |
| KeSetBasePriorityThread | NT3NT4W2KWXP2K3 |
| KeSetDmaIoCoherency | NT3NT4W2KWXP2K3 |
| KeSetEvent | NT3NT4W2KWXP2K3 |
| KeSetEventBoostPriority | NT3NT4W2KWXP2K3 |
| KeSetIdealProcessorThread | NT4W2KWXP2K3 |
| KeSetImportanceDpc | NT3NT4W2KWXP2K3 |
| KeSetKernelStackSwapEnable | NT4W2KWXP2K3 |
| KeSetPriorityThread | NT3NT4W2KWXP2K3 |
| KeSetProfileIrql | NT4W2KWXP2K3 |
| KeSetSwapContextNotifyRoutine | NT4W2K |
| KeSetSystemAffinityThread | W2KWXP2K3 |
| KeSetTargetProcessorDpc | NT3NT4W2KWXP2K3 |
| KeSetThreadSelectNotifyRoutine | NT4W2K |
| KeSetTimeIncrement | NT3NT4W2KWXP2K3 |
| KeSetTimeUpdateNotifyRoutine | NT4W2KWXP |
| KeSetTimer | NT3NT4W2KWXP2K3 |
| KeSetTimerEx | NT4W2KWXP2K3 |
| KeSignalCallDpcDone | 2K3 |
| KeSignalCallDpcSynchronize | 2K3 |
| KeStackAttachProcess | W2KWXP2K3 |
| KeSynchronizeExecution | NT3NT4W2KWXP2K3 |
| KeTerminateThread | NT3NT4W2KWXP2K3 |
| KeTestSpinLock | 2K3 |
| KeTickCount | NT3NT4W2KWXP2K3 |
| KeUnstackDetachProcess | W2KWXP2K3 |
| KeUpdateRunTime | NT3NT4W2KWXP2K3 |
| KeUpdateSystemTime | NT3NT4W2KWXP2K3 |
| KeUserModeCallback | NT3NT4W2KWXP2K3 |
| KeWaitForMultipleObjects | NT3NT4W2KWXP2K3 |
| KeWaitForMutexObject | NT3NT4W2KWXP2K3 |
| KeWaitForSingleObject | NT3NT4W2KWXP2K3 |
| KefAcquireSpinLockAtDpcLevel | NT3NT4W2KWXP2K3 |
| KefReleaseSpinLockFromDpcLevel | NT3NT4W2KWXP2K3 |
| Kei386EoiHelper | NT3NT4W2KWXP2K3 |
| KiAcquireSpinLock | NT3NT4W2KWXP2K3 |
| KiBugCheckData | NT4W2KWXP2K3 |
| KiCheckForKernelApcDelivery | 2K3 |
| KiCoprocessorError | NT3NT4W2KWXP2K3 |
| KiDeliverApc | NT3NT4W2KWXP2K3 |
| KiDispatchInterrupt | NT3NT4W2KWXP2K3 |
| KiEnableTimerWatchdog | W2KWXP2K3 |
| KiIpiSend | NT3 |
| KiIpiServiceRoutine | NT3NT4W2KWXP2K3 |
| KiRaiseUserExceptionDispatcher | NT4W2KWXP2K3 |
| KiReleaseSpinLock | NT3NT4W2KWXP2K3 |
| KiUnexpectedInterrupt | NT3NT4W2KWXP2K3 |
| KiUserApcDispatcher | NT3NT4W2KWXP2K3 |
| KiUserCallbackDispatcher | NT3NT4W2KWXP2K3 |
| KiUserExceptionDispatcher | NT3NT4W2KWXP2K3 |
| Kii386SpinOnSpinLock | NT3NT4W2KWXP2K3 |
| LdrAccessOutOfProcessResource | WXP2K3 |
| LdrAccessResource | NT3NT4W2KWXP2K3 |
| LdrAddRefDll | WXP2K3 |
| LdrAlternateResourcesEnabled | W2KWXP2K3 |
| LdrCreateOutOfProcessImage | WXP2K3 |
| LdrDestroyOutOfProcessImage | WXP2K3 |
| LdrDisableThreadCalloutsForDll | NT3NT4W2KWXP2K3 |
| LdrEnumResources | NT3NT4W2KWXP2K3 |
| LdrEnumerateLoadedModules | WXP2K3 |
| LdrFindCreateProcessManifest | WXP2K3 |
| LdrFindEntryForAddress | NT3NT4W2KWXP2K3 |
| LdrFindResourceDirectory_U | NT3NT4W2KWXP2K3 |
| LdrFindResourceEx_U | WXP2K3 |
| LdrFindResource_U | NT3NT4W2KWXP2K3 |
| LdrFlushAlternateResourceModules | W2KWXP2K3 |
| LdrGetDllHandle | NT3NT4W2KWXP2K3 |
| LdrGetDllHandleEx | WXP2K3 |
| LdrGetProcedureAddress | NT3NT4W2KWXP2K3 |
| LdrHotPatchRoutine | 2K3 |
| LdrInitShimEngineDynamic | WXP2K3 |
| LdrInitializeThunk | NT3NT4W2KWXP2K3 |
| LdrLoadAlternateResourceModule | W2KWXP2K3 |
| LdrLoadDll | NT3NT4W2KWXP2K3 |
| LdrLockLoaderLock | WXP2K3 |
| LdrProcessRelocationBlock | NT3NT4W2KWXP2K3 |
| LdrQueryImageFileExecutionOptions | NT3NT4W2KWXP2K3 |
| LdrQueryImageFileExecutionOptionsEx | 2K3 |
| LdrQueryProcessModuleInformation | NT3NT4W2KWXP2K3 |
| LdrSetAppCompatDllRedirectionCallback | WXP2K3 |
| LdrSetDllManifestProber | WXP2K3 |
| LdrShutdownProcess | NT3NT4W2KWXP2K3 |
| LdrShutdownThread | NT3NT4W2KWXP2K3 |
| LdrUnloadAlternateResourceModule | W2KWXP2K3 |
| LdrUnloadDll | NT3NT4W2KWXP2K3 |
| LdrUnlockLoaderLock | WXP2K3 |
| LdrVerifyImageMatchesChecksum | NT3NT4W2KWXP2K3 |
| LpcPortObjectType | W2KWXP2K3 |
| LpcRequestPort | NT3NT4W2KWXP2K3 |
| LpcRequestWaitReplyPort | W2KWXP2K3 |
| LsaCallAuthenticationPackage | NT3NT4W2KWXP2K3 |
| LsaDeregisterLogonProcess | NT3NT4W2KWXP2K3 |
| LsaFreeReturnBuffer | NT3NT4W2KWXP2K3 |
| LsaLogonUser | NT3NT4W2KWXP2K3 |
| LsaLookupAuthenticationPackage | NT3NT4W2KWXP2K3 |
| LsaRegisterLogonProcess | NT3NT4W2KWXP2K3 |
| Mm64BitPhysicalAddress | W2KWXP2K3 |
| MmAddPhysicalMemory | W2KWXP2K3 |
| MmAddVerifierThunks | WXP2K3 |
| MmAdjustWorkingSetSize | NT3NT4W2KWXP2K3 |
| MmAdvanceMdl | WXP2K3 |
| MmAllocateContiguousMemory | NT3NT4W2KWXP2K3 |
| Subtotal of the above list: 800 functions Jump to: Cc, Cm, Csr, Dbg, Etw, Ex, Fs, Hal, Inbv, Interlocked, Io, Kd, Ke, Ki, Ldr, Lpc, Lsa, Mm, Nls, Nt, Ob, Pfx, Po, Ps, Rtl, Se, Vf, Wmi, Zw | |
| MmAllocateContiguousMemorySpecifyCache | W2KWXP2K3 |
| MmAllocateMappingAddress | W2KWXP2K3 |
| MmAllocateNonCachedMemory | NT3NT4W2KWXP2K3 |
| MmAllocatePagesForMdl | W2KWXP2K3 |
| MmBuildMdlForNonPagedPool | NT3NT4W2KWXP2K3 |
| MmCanFileBeTruncated | NT3NT4W2KWXP2K3 |
| MmCommitSessionMappedView | W2K 2K3 |
| MmCreateMdl | NT3NT4W2KWXP2K3 |
| MmCreateMirror | 2K3 |
| MmCreateSection | NT3NT4W2KWXP2K3 |
| MmDbgTranslatePhysicalAddress | NT3NT4 |
| MmDisableModifiedWriteOfSection | NT3NT4W2KWXP2K3 |
| MmFlushImageSection | NT3NT4W2KWXP2K3 |
| MmForceSectionClosed | NT3NT4W2KWXP2K3 |
| MmFreeContiguousMemory | NT3NT4W2KWXP2K3 |
| MmFreeContiguousMemorySpecifyCache | W2KWXP2K3 |
| MmFreeMappingAddress | W2KWXP2K3 |
| MmFreeNonCachedMemory | NT3NT4W2KWXP2K3 |
| MmFreePagesFromMdl | W2KWXP2K3 |
| MmGetPhysicalAddress | NT3NT4W2KWXP2K3 |
| MmGetPhysicalMemoryRanges | W2KWXP2K3 |
| MmGetSystemRoutineAddress | W2KWXP2K3 |
| MmGetVirtualForPhysical | W2KWXP2K3 |
| MmGrowKernelStack | NT4W2KWXP2K3 |
| MmHighestUserAddress | NT4W2KWXP2K3 |
| MmIsAddressValid | NT3NT4W2KWXP2K3 |
| MmIsDriverVerifying | W2KWXP2K3 |
| MmIsIoSpaceActive | 2K3 |
| MmIsNonPagedSystemAddressValid | NT3NT4W2KWXP2K3 |
| MmIsRecursiveIoFault | NT3NT4W2KWXP2K3 |
| MmIsThisAnNtAsSystem | NT3NT4W2KWXP2K3 |
| MmIsVerifierEnabled | WXP2K3 |
| MmLockPagableDataSection | NT3NT4W2KWXP2K3 |
| MmLockPagableImageSection | NT3NT4W2KWXP2K3 |
| MmLockPagableSectionByHandle | NT3NT4W2KWXP2K3 |
| MmMapIoSpace | NT3NT4W2KWXP2K3 |
| MmMapLockedPages | NT3NT4W2KWXP2K3 |
| MmMapLockedPagesSpecifyCache | NT4W2KWXP2K3 |
| MmMapLockedPagesWithReservedMapping | W2KWXP2K3 |
| MmMapMemoryDumpMdl | NT3NT4W2KWXP2K3 |
| MmMapUserAddressesToPage | W2KWXP2K3 |
| MmMapVideoDisplay | NT4W2KWXP2K3 |
| MmMapViewInSessionSpace | W2KWXP2K3 |
| MmMapViewInSystemSpace | NT3NT4W2KWXP2K3 |
| MmMapViewOfSection | NT3NT4W2KWXP2K3 |
| MmMarkPhysicalMemoryAsBad | WXP2K3 |
| MmMarkPhysicalMemoryAsGood | WXP2K3 |
| MmPageEntireDriver | NT3NT4W2KWXP2K3 |
| MmPrefetchPages | WXP2K3 |
| MmProbeAndLockPages | NT3NT4W2KWXP2K3 |
| MmProbeAndLockProcessPages | W2KWXP2K3 |
| MmProbeAndLockSelectedPages | W2KWXP2K3 |
| MmProtectMdlSystemAddress | WXP2K3 |
| MmQuerySystemSize | NT3NT4W2KWXP2K3 |
| MmRemovePhysicalMemory | W2KWXP2K3 |
| MmResetDriverPaging | NT3NT4W2KWXP2K3 |
| MmSectionObjectType | NT3NT4W2KWXP2K3 |
| MmSecureVirtualMemory | NT3NT4W2KWXP2K3 |
| MmSetAddressRangeModified | NT3NT4W2KWXP2K3 |
| MmSetBankedSection | NT3NT4W2KWXP2K3 |
| MmSizeOfMdl | NT3NT4W2KWXP2K3 |
| MmSystemRangeStart | NT4W2KWXP2K3 |
| MmTrimAllSystemPagableMemory | W2KWXP2K3 |
| MmUnlockPagableImageSection | NT3NT4W2KWXP2K3 |
| MmUnlockPages | NT3NT4W2KWXP2K3 |
| MmUnmapIoSpace | NT3NT4W2KWXP2K3 |
| MmUnmapLockedPages | NT3NT4W2KWXP2K3 |
| MmUnmapReservedMapping | W2KWXP2K3 |
| MmUnmapVideoDisplay | NT4W2KWXP2K3 |
| MmUnmapViewInSessionSpace | W2KWXP2K3 |
| MmUnmapViewInSystemSpace | NT3NT4W2KWXP2K3 |
| MmUnmapViewOfSection | NT3NT4W2KWXP2K3 |
| MmUnsecureVirtualMemory | NT3NT4W2KWXP2K3 |
| MmUserProbeAddress | NT4W2KWXP2K3 |
| NPXEMULATORTABLE | NT3NT4W2K |
| NlsAnsiCodePage | NT4W2KWXP2K3 |
| NlsLeadByteInfo | NT3NT4W2KWXP2K3 |
| NlsMbCodePageTag | NT3NT4W2KWXP2K3 |
| NlsMbOemCodePageTag | NT3NT4W2KWXP2K3 |
| NlsOemCodePage | W2KWXP2K3 |
| NlsOemLeadByteInfo | NT3NT4W2KWXP2K3 |
| Zw* NtAcceptConnectPort | NT3NT4W2KWXP2K3 |
| Zw* NtAccessCheck | NT3NT4W2KWXP2K3 |
| Zw* NtAccessCheckAndAuditAlarm | NT3NT4W2KWXP2K3 |
| Zw* NtAccessCheckByType | W2KWXP2K3 |
| Zw* NtAccessCheckByTypeAndAuditAlarm | W2KWXP2K3 |
| Zw* NtAccessCheckByTypeResultList | W2KWXP2K3 |
| Zw* NtAccessCheckByTypeResultListAndAuditAlarm | W2KWXP2K3 |
| Zw* NtAccessCheckByTypeResultListAndAuditAlarmByHandle | W2KWXP2K3 |
| Zw* NtAddAtom | NT4W2KWXP2K3 |
| Zw* NtAddBootEntry | WXP2K3 |
| Zw* NtAddDriverEntry | 2K3 |
| Zw* NtAdjustGroupsToken | NT3NT4W2KWXP2K3 |
| Zw* NtAdjustPrivilegesToken | NT3NT4W2KWXP2K3 |
| Zw* NtAlertResumeThread | NT3NT4W2KWXP2K3 |
| Zw* NtAlertThread | NT3NT4W2KWXP2K3 |
| Zw* NtAllocateLocallyUniqueId | NT3NT4W2KWXP2K3 |
| Zw* NtAllocateUserPhysicalPages | W2KWXP2K3 |
| Zw* NtAllocateUuids | NT3NT4W2KWXP2K3 |
| Zw* NtAllocateVirtualMemory | NT3NT4W2KWXP2K3 |
| Zw* NtApphelpCacheControl | 2K3 |
| Zw* NtAreMappedFilesTheSame | W2KWXP2K3 |
| Zw* NtAssignProcessToJobObject | W2KWXP2K3 |
| NtBuildNumber | NT3NT4W2KWXP2K3 |
| Zw* NtCallbackReturn | NT3NT4W2KWXP2K3 |
| Zw* NtCancelDeviceWakeupRequest | W2KWXP2K3 |
| Zw* NtCancelIoFile | NT3NT4W2KWXP2K3 |
| Zw* NtCancelTimer | NT3NT4W2KWXP2K3 |
| Zw* NtClearEvent | NT3NT4W2KWXP2K3 |
| Zw* NtClose | NT3NT4W2KWXP2K3 |
| Zw* NtCloseObjectAuditAlarm | NT3NT4W2KWXP2K3 |
| Zw* NtCompactKeys | WXP2K3 |
| Zw* NtCompareTokens | WXP2K3 |
| Zw* NtCompleteConnectPort | NT3NT4W2KWXP2K3 |
| Zw* NtCompressKey | WXP2K3 |
| Zw* NtConnectPort | NT3NT4W2KWXP2K3 |
| Zw* NtContinue | NT3NT4W2KWXP2K3 |
| Zw* NtCreateChannel | NT4W2K |
| Zw* NtCreateDebugObject | WXP2K3 |
| Zw* NtCreateDirectoryObject | NT3NT4W2KWXP2K3 |
| Zw* NtCreateEvent | NT3NT4W2KWXP2K3 |
| Zw* NtCreateEventPair | NT3NT4W2KWXP2K3 |
| Zw* NtCreateFile | NT3NT4W2KWXP2K3 |
| Zw* NtCreateIoCompletion | NT3NT4W2KWXP2K3 |
| Zw* NtCreateJobObject | W2KWXP2K3 |
| Zw* NtCreateJobSet | WXP2K3 |
| Zw* NtCreateKey | NT3NT4W2KWXP2K3 |
| Zw* NtCreateKeyedEvent | WXP2K3 |
| Zw* NtCreateMailslotFile | NT3NT4W2KWXP2K3 |
| Zw* NtCreateMutant | NT3NT4W2KWXP2K3 |
| Zw* NtCreateNamedPipeFile | NT3NT4W2KWXP2K3 |
| Zw* NtCreatePagingFile | NT3NT4W2KWXP2K3 |
| Zw* NtCreatePort | NT3NT4W2KWXP2K3 |
| Zw* NtCreateProcess | NT3NT4W2KWXP2K3 |
| Zw* NtCreateProcessEx | WXP2K3 |
| Zw* NtCreateProfile | NT3NT4W2KWXP2K3 |
| Zw* NtCreateSection | NT3NT4W2KWXP2K3 |
| Zw* NtCreateSemaphore | NT3NT4W2KWXP2K3 |
| Zw* NtCreateSymbolicLinkObject | NT3NT4W2KWXP2K3 |
| Zw* NtCreateThread | NT3NT4W2KWXP2K3 |
| Zw* NtCreateTimer | NT3NT4W2KWXP2K3 |
| Zw* NtCreateToken | NT3NT4W2KWXP2K3 |
| Zw* NtCreateWaitablePort | W2KWXP2K3 |
| NtCurrentTeb | NT3NT4W2KWXP2K3 |
| Zw* NtDebugActiveProcess | WXP2K3 |
| Zw* NtDebugContinue | WXP2K3 |
| Zw* NtDelayExecution | NT3NT4W2KWXP2K3 |
| Zw* NtDeleteAtom | NT4W2KWXP2K3 |
| Zw* NtDeleteBootEntry | WXP2K3 |
| Zw* NtDeleteDriverEntry | 2K3 |
| Zw* NtDeleteFile | NT3NT4W2KWXP2K3 |
| Zw* NtDeleteKey | NT3NT4W2KWXP2K3 |
| Zw* NtDeleteObjectAuditAlarm | NT4W2KWXP2K3 |
| Zw* NtDeleteValueKey | NT3NT4W2KWXP2K3 |
| Zw* NtDeviceIoControlFile | NT3NT4W2KWXP2K3 |
| Zw* NtDisplayString | NT3NT4W2KWXP2K3 |
| Zw* NtDuplicateObject | NT3NT4W2KWXP2K3 |
| Zw* NtDuplicateToken | NT3NT4W2KWXP2K3 |
| Zw* NtEnumerateBootEntries | WXP2K3 |
| Zw* NtEnumerateBus | NT3 |
| Zw* NtEnumerateDriverEntries | 2K3 |
| Zw* NtEnumerateKey | NT3NT4W2KWXP2K3 |
| Zw* NtEnumerateSystemEnvironmentValuesEx | WXP2K3 |
| Zw* NtEnumerateValueKey | NT3NT4W2KWXP2K3 |
| Zw* NtExtendSection | NT3NT4W2KWXP2K3 |
| Zw* NtFilterToken | W2KWXP2K3 |
| Zw* NtFindAtom | NT4W2KWXP2K3 |
| Zw* NtFlushBuffersFile | NT3NT4W2KWXP2K3 |
| Zw* NtFlushInstructionCache | NT3NT4W2KWXP2K3 |
| Zw* NtFlushKey | NT3NT4W2KWXP2K3 |
| Zw* NtFlushVirtualMemory | NT3NT4W2KWXP2K3 |
| Zw* NtFlushWriteBuffer | NT3NT4W2KWXP2K3 |
| Zw* NtFreeUserPhysicalPages | W2KWXP2K3 |
| Zw* NtFreeVirtualMemory | NT3NT4W2KWXP2K3 |
| Zw* NtFsControlFile | NT3NT4W2KWXP2K3 |
| Zw* NtGetContextThread | NT3NT4W2KWXP2K3 |
| Zw* NtGetCurrentProcessorNumber | 2K3 |
| Zw* NtGetDevicePowerState | W2KWXP2K3 |
| Zw* NtGetPlugPlayEvent | NT3NT4W2KWXP2K3 |
| Zw* NtGetTickCount | NT3NT4W2K 2K3 |
| Zw* NtGetWriteWatch | W2KWXP2K3 |
| NtGlobalFlag | NT3NT4W2KWXP2K3 |
| Zw* NtImpersonateAnonymousToken | W2KWXP2K3 |
| Zw* NtImpersonateClientOfPort | NT3NT4W2KWXP2K3 |
| Zw* NtImpersonateThread | NT3NT4W2KWXP2K3 |
| Zw* NtInitializeRegistry | NT3NT4W2KWXP2K3 |
| Zw* NtInitiatePowerAction | W2KWXP2K3 |
| Zw* NtIsProcessInJob | WXP2K3 |
| Zw* NtIsSystemResumeAutomatic | W2KWXP2K3 |
| Zw* NtListenChannel | NT4W2K |
| Zw* NtListenPort | NT3NT4W2KWXP2K3 |
| Zw* NtLoadDriver | NT3NT4W2KWXP2K3 |
| Zw* NtLoadKey | NT3NT4W2KWXP2K3 |
| Zw* NtLoadKey2 | NT4W2KWXP2K3 |
| Zw* NtLoadKeyEx | 2K3 |
| Zw* NtLockFile | NT3NT4W2KWXP2K3 |
| Zw* NtLockProductActivationKeys | WXP2K3 |
| Zw* NtLockRegistryKey | WXP2K3 |
| Zw* NtLockVirtualMemory | NT3NT4W2KWXP2K3 |
| Zw* NtMakePermanentObject | WXP2K3 |
| Subtotal of the above list: 1000 functions Jump to: Cc, Cm, Csr, Dbg, Etw, Ex, Fs, Hal, Inbv, Interlocked, Io, Kd, Ke, Ki, Ldr, Lpc, Lsa, Mm, Nls, Nt, Ob, Pfx, Po, Ps, Rtl, Se, Vf, Wmi, Zw | |
| Zw* NtMakeTemporaryObject | NT3NT4W2KWXP2K3 |
| Zw* NtMapUserPhysicalPages | W2KWXP2K3 |
| Zw* NtMapUserPhysicalPagesScatter | W2KWXP2K3 |
| Zw* NtMapViewOfSection | NT3NT4W2KWXP2K3 |
| Zw* NtModifyBootEntry | WXP2K3 |
| Zw* NtModifyDriverEntry | 2K3 |
| Zw* NtNotifyChangeDirectoryFile | NT3NT4W2KWXP2K3 |
| Zw* NtNotifyChangeKey | NT3NT4W2KWXP2K3 |
| Zw* NtNotifyChangeMultipleKeys | W2KWXP2K3 |
| Zw* NtOpenChannel | NT4W2K |
| Zw* NtOpenDirectoryObject | NT3NT4W2KWXP2K3 |
| Zw* NtOpenEvent | NT3NT4W2KWXP2K3 |
| Zw* NtOpenEventPair | NT3NT4W2KWXP2K3 |
| Zw* NtOpenFile | NT3NT4W2KWXP2K3 |
| Zw* NtOpenIoCompletion | NT3NT4W2KWXP2K3 |
| Zw* NtOpenJobObject | W2KWXP2K3 |
| Zw* NtOpenKey | NT3NT4W2KWXP2K3 |
| Zw* NtOpenKeyedEvent | WXP2K3 |
| Zw* NtOpenMutant | NT3NT4W2KWXP2K3 |
| Zw* NtOpenObjectAuditAlarm | NT3NT4W2KWXP2K3 |
| Zw* NtOpenProcess | NT3NT4W2KWXP2K3 |
| Zw* NtOpenProcessToken | NT3NT4W2KWXP2K3 |
| Zw* NtOpenProcessTokenEx | WXP2K3 |
| Zw* NtOpenSection | NT3NT4W2KWXP2K3 |
| Zw* NtOpenSemaphore | NT3NT4W2KWXP2K3 |
| Zw* NtOpenSymbolicLinkObject | NT3NT4W2KWXP2K3 |
| Zw* NtOpenThread | NT3NT4W2KWXP2K3 |
| Zw* NtOpenThreadToken | NT3NT4W2KWXP2K3 |
| Zw* NtOpenThreadTokenEx | WXP2K3 |
| Zw* NtOpenTimer | NT3NT4W2KWXP2K3 |
| Zw* NtPlugPlayControl | NT3NT4W2KWXP2K3 |
| Zw* NtPowerInformation | W2KWXP2K3 |
| Zw* NtPrivilegeCheck | NT3NT4W2KWXP2K3 |
| Zw* NtPrivilegeObjectAuditAlarm | NT3NT4W2KWXP2K3 |
| Zw* NtPrivilegedServiceAuditAlarm | NT3NT4W2KWXP2K3 |
| Zw* NtProtectVirtualMemory | NT3NT4W2KWXP2K3 |
| Zw* NtPulseEvent | NT3NT4W2KWXP2K3 |
| Zw* NtQueryAttributesFile | NT3NT4W2KWXP2K3 |
| Zw* NtQueryBootEntryOrder | WXP2K3 |
| Zw* NtQueryBootOptions | WXP2K3 |
| Zw* NtQueryDebugFilterState | WXP2K3 |
| Zw* NtQueryDefaultLocale | NT3NT4W2KWXP2K3 |
| Zw* NtQueryDefaultUILanguage | W2KWXP2K3 |
| Zw* NtQueryDirectoryFile | NT3NT4W2KWXP2K3 |
| Zw* NtQueryDirectoryObject | NT3NT4W2KWXP2K3 |
| Zw* NtQueryDriverEntryOrder | 2K3 |
| Zw* NtQueryEaFile | NT3NT4W2KWXP2K3 |
| Zw* NtQueryEvent | NT3NT4W2KWXP2K3 |
| Zw* NtQueryFullAttributesFile | NT4W2KWXP2K3 |
| Zw* NtQueryInformationAtom | NT4W2KWXP2K3 |
| Zw* NtQueryInformationFile | NT3NT4W2KWXP2K3 |
| Zw* NtQueryInformationJobObject | W2KWXP2K3 |
| Zw* NtQueryInformationPort | NT3NT4W2KWXP2K3 |
| Zw* NtQueryInformationProcess | NT3NT4W2KWXP2K3 |
| Zw* NtQueryInformationThread | NT3NT4W2KWXP2K3 |
| Zw* NtQueryInformationToken | NT3NT4W2KWXP2K3 |
| Zw* NtQueryInstallUILanguage | W2KWXP2K3 |
| Zw* NtQueryIntervalProfile | NT3NT4W2KWXP2K3 |
| Zw* NtQueryIoCompletion | NT3NT4W2KWXP2K3 |
| Zw* NtQueryKey | NT3NT4W2KWXP2K3 |
| Zw* NtQueryMultipleValueKey | NT4W2KWXP2K3 |
| Zw* NtQueryMutant | NT3NT4W2KWXP2K3 |
| Zw* NtQueryObject | NT3NT4W2KWXP2K3 |
| Zw* NtQueryOleDirectoryFile | NT4 |
| Zw* NtQueryOpenSubKeys | W2KWXP2K3 |
| Zw* NtQueryOpenSubKeysEx | 2K3 |
| Zw* NtQueryPerformanceCounter | NT3NT4W2KWXP2K3 |
| Zw* NtQueryPortInformationProcess | WXP2K3 |
| Zw* NtQueryQuotaInformationFile | W2KWXP2K3 |
| Zw* NtQuerySection | NT3NT4W2KWXP2K3 |
| Zw* NtQuerySecurityObject | NT3NT4W2KWXP2K3 |
| Zw* NtQuerySemaphore | NT3NT4W2KWXP2K3 |
| Zw* NtQuerySymbolicLinkObject | NT3NT4W2KWXP2K3 |
| Zw* NtQuerySystemEnvironmentValue | NT3NT4W2KWXP2K3 |
| Zw* NtQuerySystemEnvironmentValueEx | WXP2K3 |
| Zw* NtQuerySystemInformation | NT3NT4W2KWXP2K3 |
| Zw* NtQuerySystemTime | NT3NT4W2KWXP2K3 |
| Zw* NtQueryTimer | NT3NT4W2KWXP2K3 |
| Zw* NtQueryTimerResolution | NT3NT4W2KWXP2K3 |
| Zw* NtQueryValueKey | NT3NT4W2KWXP2K3 |
| Zw* NtQueryVirtualMemory | NT3NT4W2KWXP2K3 |
| Zw* NtQueryVolumeInformationFile | NT3NT4W2KWXP2K3 |
| Zw* NtQueueApcThread | NT4W2KWXP2K3 |
| Zw* NtRaiseException | NT3NT4W2KWXP2K3 |
| Zw* NtRaiseHardError | NT3NT4W2KWXP2K3 |
| Zw* NtReadFile | NT3NT4W2KWXP2K3 |
| Zw* NtReadFileScatter | NT4W2KWXP2K3 |
| Zw* NtReadRequestData | NT3NT4W2KWXP2K3 |
| Zw* NtReadVirtualMemory | NT3NT4W2KWXP2K3 |
| Zw* NtRegisterNewDevice | NT3 |
| Zw* NtRegisterThreadTerminatePort | NT3NT4W2KWXP2K3 |
| Zw* NtReleaseKeyedEvent | WXP2K3 |
| Zw* NtReleaseMutant | NT3NT4W2KWXP2K3 |
| Zw* NtReleaseProcessMutant | NT3 |
| Zw* NtReleaseSemaphore | NT3NT4W2KWXP2K3 |
| Zw* NtRemoveIoCompletion | NT3NT4W2KWXP2K3 |
| Zw* NtRemoveProcessDebug | WXP2K3 |
| Zw* NtRenameKey | WXP2K3 |
| Zw* NtReplaceKey | NT3NT4W2KWXP2K3 |
| Zw* NtReplyPort | NT3NT4W2KWXP2K3 |
| Zw* NtReplyWaitReceivePort | NT3NT4W2KWXP2K3 |
| Zw* NtReplyWaitReceivePortEx | W2KWXP2K3 |
| Zw* NtReplyWaitReplyPort | NT3NT4W2KWXP2K3 |
| Zw* NtReplyWaitSendChannel | NT4W2K |
| Zw* NtRequestDeviceWakeup | W2KWXP2K3 |
| Zw* NtRequestPort | NT3NT4W2KWXP2K3 |
| Zw* NtRequestWaitReplyPort | NT3NT4W2KWXP2K3 |
| Zw* NtRequestWakeupLatency | W2KWXP2K3 |
| Zw* NtResetEvent | NT3NT4W2KWXP2K3 |
| Zw* NtResetWriteWatch | W2KWXP2K3 |
| Zw* NtRestoreKey | NT3NT4W2KWXP2K3 |
| Zw* NtResumeProcess | WXP2K3 |
| Zw* NtResumeThread | NT3NT4W2KWXP2K3 |
| Zw* NtSaveKey | NT3NT4W2KWXP2K3 |
| Zw* NtSaveKeyEx | WXP2K3 |
| Zw* NtSaveMergedKeys | W2KWXP2K3 |
| Zw* NtSecureConnectPort | W2KWXP2K3 |
| Zw* NtSendWaitReplyChannel | NT4W2K |
| Zw* NtSetBootEntryOrder | WXP2K3 |
| Zw* NtSetBootOptions | WXP2K3 |
| Zw* NtSetContextChannel | NT4W2K |
| Zw* NtSetContextThread | NT3NT4W2KWXP2K3 |
| Zw* NtSetDebugFilterState | WXP2K3 |
| Zw* NtSetDefaultHardErrorPort | NT3NT4W2KWXP2K3 |
| Zw* NtSetDefaultLocale | NT3NT4W2KWXP2K3 |
| Zw* NtSetDefaultUILanguage | W2KWXP2K3 |
| Zw* NtSetDriverEntryOrder | 2K3 |
| Zw* NtSetEaFile | NT3NT4W2KWXP2K3 |
| Zw* NtSetEvent | NT3NT4W2KWXP2K3 |
| Zw* NtSetEventBoostPriority | WXP2K3 |
| Zw* NtSetHighEventPair | NT3NT4W2KWXP2K3 |
| Zw* NtSetHighWaitLowEventPair | NT3NT4W2KWXP2K3 |
| Zw* NtSetHighWaitLowThread | NT3NT4 |
| Zw* NtSetInformationDebugObject | WXP2K3 |
| Zw* NtSetInformationFile | NT3NT4W2KWXP2K3 |
| Zw* NtSetInformationJobObject | W2KWXP2K3 |
| Zw* NtSetInformationKey | NT3NT4W2KWXP2K3 |
| Zw* NtSetInformationObject | NT3NT4W2KWXP2K3 |
| Zw* NtSetInformationProcess | NT3NT4W2KWXP2K3 |
| Zw* NtSetInformationThread | NT3NT4W2KWXP2K3 |
| Zw* NtSetInformationToken | NT3NT4W2KWXP2K3 |
| Zw* NtSetIntervalProfile | NT3NT4W2KWXP2K3 |
| Zw* NtSetIoCompletion | NT3NT4W2KWXP2K3 |
| Zw* NtSetLdtEntries | NT3NT4W2KWXP2K3 |
| Zw* NtSetLowEventPair | NT3NT4W2KWXP2K3 |
| Zw* NtSetLowWaitHighEventPair | NT3NT4W2KWXP2K3 |
| Zw* NtSetLowWaitHighThread | NT3NT4 |
| Zw* NtSetQuotaInformationFile | W2KWXP2K3 |
| Zw* NtSetSecurityObject | NT3NT4W2KWXP2K3 |
| Zw* NtSetSystemEnvironmentValue | NT3NT4W2KWXP2K3 |
| Zw* NtSetSystemEnvironmentValueEx | WXP2K3 |
| Zw* NtSetSystemInformation | NT3NT4W2KWXP2K3 |
| Zw* NtSetSystemPowerState | NT3NT4W2KWXP2K3 |
| Zw* NtSetSystemTime | NT3NT4W2KWXP2K3 |
| Zw* NtSetThreadExecutionState | W2KWXP2K3 |
| Zw* NtSetTimer | NT3NT4W2KWXP2K3 |
| Zw* NtSetTimerResolution | NT3NT4W2KWXP2K3 |
| Zw* NtSetUuidSeed | W2KWXP2K3 |
| Zw* NtSetValueKey | NT3NT4W2KWXP2K3 |
| Zw* NtSetVolumeInformationFile | NT3NT4W2KWXP2K3 |
| Zw* NtShutdownSystem | NT3NT4W2KWXP2K3 |
| Zw* NtSignalAndWaitForSingleObject | NT4W2KWXP2K3 |
| Zw* NtStartProfile | NT3NT4W2KWXP2K3 |
| Zw* NtStopProfile | NT3NT4W2KWXP2K3 |
| Zw* NtSuspendProcess | WXP2K3 |
| Zw* NtSuspendThread | NT3NT4W2KWXP2K3 |
| Zw* NtSystemDebugControl | NT3NT4W2KWXP2K3 |
| Zw* NtTerminateJobObject | W2KWXP2K3 |
| Zw* NtTerminateProcess | NT3NT4W2KWXP2K3 |
| Zw* NtTerminateThread | NT3NT4W2KWXP2K3 |
| Zw* NtTestAlert | NT3NT4W2KWXP2K3 |
| Zw* NtTraceEvent | WXP2K3 |
| Zw* NtTranslateFilePath | WXP2K3 |
| Zw* NtUnloadDriver | NT3NT4W2KWXP2K3 |
| Zw* NtUnloadKey | NT3NT4W2KWXP2K3 |
| Zw* NtUnloadKey2 | 2K3 |
| Zw* NtUnloadKeyEx | WXP2K3 |
| Zw* NtUnlockFile | NT3NT4W2KWXP2K3 |
| Zw* NtUnlockVirtualMemory | NT3NT4W2KWXP2K3 |
| Zw* NtUnmapViewOfSection | NT3NT4W2KWXP2K3 |
| Zw* NtVdmControl | NT3NT4W2KWXP2K3 |
| Zw* NtW32Call | NT3 |
| Zw* NtWaitForDebugEvent | WXP2K3 |
| Zw* NtWaitForKeyedEvent | WXP2K3 |
| Zw* NtWaitForMultipleObjects | NT3NT4W2KWXP2K3 |
| Zw* NtWaitForProcessMutant | NT3 |
| Zw* NtWaitForSingleObject | NT3NT4W2KWXP2K3 |
| Zw* NtWaitHighEventPair | NT3NT4W2KWXP2K3 |
| Zw* NtWaitLowEventPair | NT3NT4W2KWXP2K3 |
| Zw* NtWriteFile | NT3NT4W2KWXP2K3 |
| Zw* NtWriteFileGather | NT4W2KWXP2K3 |
| Zw* NtWriteRequestData | NT3NT4W2KWXP2K3 |
| Zw* NtWriteVirtualMemory | NT3NT4W2KWXP2K3 |
| Zw* NtYieldExecution | NT4W2KWXP2K3 |
| ObAssignSecurity | NT4W2KWXP2K3 |
| ObCheckCreateObjectAccess | NT4W2KWXP2K3 |
| ObCheckObjectAccess | NT4W2KWXP2K3 |
| ObCloseHandle | WXP2K3 |
| ObCreateObject | NT3NT4W2KWXP2K3 |
| ObCreateObjectType | WXP2K3 |
| Subtotal of the above list: 1200 functions Jump to: Cc, Cm, Csr, Dbg, Etw, Ex, Fs, Hal, Inbv, Interlocked, Io, Kd, Ke, Ki, Ldr, Lpc, Lsa, Mm, Nls, Nt, Ob, Pfx, Po, Ps, Rtl, Se, Vf, Wmi, Zw | |
| ObDeleteCapturedInsertInfo | W2K 2K3 |
| ObDereferenceObject | NT3NT4W2KWXP2K3 |
| ObDereferenceSecurityDescriptor | WXP2K3 |
| ObFindHandleForObject | NT4W2KWXP2K3 |
| ObGetObjectPointerCount | NT3NT4W2K |
| ObGetObjectSecurity | NT4W2KWXP2K3 |
| ObInsertObject | NT3NT4W2KWXP2K3 |
| ObLogSecurityDescriptor | WXP2K3 |
| ObMakeTemporaryObject | NT3NT4W2KWXP2K3 |
| ObOpenObjectByName | NT4W2KWXP2K3 |
| ObOpenObjectByPointer | NT3NT4W2KWXP2K3 |
| ObQueryNameString | NT3NT4W2KWXP2K3 |
| ObQueryObjectAuditingByHandle | NT4W2KWXP2K3 |
| ObReferenceObjectByHandle | NT3NT4W2KWXP2K3 |
| ObReferenceObjectByName | NT4W2KWXP2K3 |
| ObReferenceObjectByPointer | NT3NT4W2KWXP2K3 |
| ObReferenceSecurityDescriptor | WXP2K3 |
| ObReleaseObjectSecurity | NT4W2KWXP2K3 |
| ObSetHandleAttributes | WXP2K3 |
| ObSetSecurityDescriptorInfo | NT4W2KWXP2K3 |
| ObSetSecurityObjectByPointer | WXP2K3 |
| ObfDereferenceObject | NT3NT4W2KWXP2K3 |
| ObfReferenceObject | NT4W2KWXP2K3 |
| PfxFindPrefix | NT3NT4W2KWXP2K3 |
| PfxInitialize | NT3NT4W2KWXP2K3 |
| PfxInsertPrefix | NT3NT4W2KWXP2K3 |
| PfxRemovePrefix | NT3NT4W2KWXP2K3 |
| PoCallDriver | W2KWXP2K3 |
| PoCancelDeviceNotify | W2KWXP2K3 |
| PoQueryPowerSequence | NT3NT4 |
| PoQueueShutdownWorkItem | WXP2K3 |
| PoRegisterDeviceForIdleDetection | NT3 W2KWXP2K3 |
| PoRegisterDeviceNotify | W2KWXP2K3 |
| PoRegisterSystemState | W2KWXP2K3 |
| PoRequestPowerChange | NT3NT4 |
| PoRequestPowerIrp | W2KWXP2K3 |
| PoRequestShutdownEvent | WXP2K3 |
| PoSetDeviceIdleDetection | NT4 |
| PoSetHiberRange | W2KWXP2K3 |
| PoSetPowerState | W2KWXP2K3 |
| PoSetSystemState | W2KWXP2K3 |
| PoShutdownBugCheck | W2KWXP2K3 |
| PoStartNextPowerIrp | W2KWXP2K3 |
| PoUnregisterSystemState | W2KWXP2K3 |
| ProbeForRead | W2KWXP2K3 |
| ProbeForWrite | NT3NT4W2KWXP2K3 |
| PropertyLengthAsVariant | NT4W2KWXP2K3 |
| PsAssignImpersonationToken | NT4W2KWXP2K3 |
| PsChargePoolQuota | NT3NT4W2KWXP2K3 |
| PsChargeProcessNonPagedPoolQuota | WXP2K3 |
| PsChargeProcessPagedPoolQuota | WXP2K3 |
| PsChargeProcessPoolQuota | WXP2K3 |
| PsCreateSystemProcess | NT3NT4W2KWXP2K3 |
| PsCreateSystemThread | NT3NT4W2KWXP2K3 |
| PsCreateWin32Process | NT4 |
| PsDereferenceImpersonationToken | WXP2K3 |
| PsDereferencePrimaryToken | WXP2K3 |
| PsDisableImpersonation | W2KWXP2K3 |
| PsEstablishWin32Callouts | NT3NT4W2KWXP2K3 |
| PsGetContextThread | WXP2K3 |
| PsGetCurrentProcess | WXP2K3 |
| PsGetCurrentProcessId | NT4W2KWXP2K3 |
| PsGetCurrentProcessSessionId | WXP2K3 |
| PsGetCurrentThread | WXP2K3 |
| PsGetCurrentThreadId | NT4W2KWXP2K3 |
| PsGetCurrentThreadPreviousMode | WXP2K3 |
| PsGetCurrentThreadStackBase | WXP2K3 |
| PsGetCurrentThreadStackLimit | WXP2K3 |
| PsGetJobLock | WXP2K3 |
| PsGetJobSessionId | WXP2K3 |
| PsGetJobUIRestrictionsClass | WXP2K3 |
| PsGetProcessCreateTimeQuadPart | WXP2K3 |
| PsGetProcessDebugPort | WXP2K3 |
| PsGetProcessExitProcessCalled | WXP2K3 |
| PsGetProcessExitStatus | WXP2K3 |
| PsGetProcessExitTime | NT3NT4W2KWXP2K3 |
| PsGetProcessId | WXP2K3 |
| PsGetProcessImageFileName | W2KWXP2K3 |
| PsGetProcessInheritedFromUniqueProcessId | WXP2K3 |
| PsGetProcessJob | WXP2K3 |
| PsGetProcessPeb | WXP2K3 |
| PsGetProcessPriorityClass | WXP2K3 |
| PsGetProcessSectionBaseAddress | WXP2K3 |
| PsGetProcessSecurityPort | WXP2K3 |
| PsGetProcessSessionId | WXP2K3 |
| PsGetProcessSessionIdEx | 2K3 |
| PsGetProcessWin32Process | WXP2K3 |
| PsGetProcessWin32WindowStation | WXP2K3 |
| PsGetThreadFreezeCount | WXP2K3 |
| PsGetThreadHardErrorsAreDisabled | WXP2K3 |
| PsGetThreadId | WXP2K3 |
| PsGetThreadProcess | WXP2K3 |
| PsGetThreadProcessId | WXP2K3 |
| PsGetThreadSessionId | WXP2K3 |
| PsGetThreadTeb | WXP2K3 |
| PsGetThreadWin32Thread | WXP2K3 |
| PsGetVersion | NT4W2KWXP2K3 |
| PsImpersonateClient | NT4W2KWXP2K3 |
| PsInitialSystemProcess | NT3NT4W2KWXP2K3 |
| PsIsProcessBeingDebugged | WXP2K3 |
| PsIsSystemThread | WXP2K3 |
| PsIsThreadImpersonating | WXP2K3 |
| PsIsThreadTerminating | NT3NT4W2KWXP2K3 |
| PsJobType | W2KWXP2K3 |
| PsLookupProcessByProcessId | NT3NT4W2KWXP2K3 |
| PsLookupProcessThreadByCid | NT3NT4W2KWXP2K3 |
| PsLookupThreadByThreadId | NT3NT4W2KWXP2K3 |
| PsProcessType | NT3NT4W2KWXP2K3 |
| PsReferenceImpersonationToken | NT3NT4W2KWXP2K3 |
| PsReferencePrimaryToken | NT3NT4W2KWXP2K3 |
| PsRemoveCreateThreadNotifyRoutine | WXP2K3 |
| PsRemoveLoadImageNotifyRoutine | WXP2K3 |
| PsRestoreImpersonation | W2KWXP2K3 |
| PsReturnPoolQuota | NT3NT4W2KWXP2K3 |
| PsReturnProcessNonPagedPoolQuota | WXP2K3 |
| PsReturnProcessPagedPoolQuota | WXP2K3 |
| PsRevertThreadToSelf | WXP2K3 |
| PsRevertToSelf | NT4W2KWXP2K3 |
| PsSetContextThread | WXP2K3 |
| PsSetCreateProcessNotifyRoutine | NT3NT4W2KWXP2K3 |
| PsSetCreateThreadNotifyRoutine | NT4W2KWXP2K3 |
| PsSetJobUIRestrictionsClass | WXP2K3 |
| PsSetLegoNotifyRoutine | NT4W2KWXP2K3 |
| PsSetLoadImageNotifyRoutine | W2KWXP2K3 |
| PsSetNewKSecDD | W2K |
| PsSetProcessPriorityByClass | NT3NT4W2KWXP2K3 |
| PsSetProcessPriorityClass | WXP2K3 |
| PsSetProcessSecurityPort | WXP2K3 |
| PsSetProcessWin32Process | WXP2K3 |
| PsSetProcessWindowStation | WXP2K3 |
| PsSetThreadHardErrorsAreDisabled | WXP2K3 |
| PsSetThreadWin32Thread | WXP2K3 |
| PsTerminateSystemThread | NT3NT4W2KWXP2K3 |
| PsThreadType | NT3NT4W2KWXP2K3 |
| READ_REGISTER_BUFFER_UCHAR | NT3NT4W2KWXP2K3 |
| READ_REGISTER_BUFFER_ULONG | NT3NT4W2KWXP2K3 |
| READ_REGISTER_BUFFER_USHORT | NT3NT4W2KWXP2K3 |
| READ_REGISTER_UCHAR | NT3NT4W2KWXP2K3 |
| READ_REGISTER_ULONG | NT3NT4W2KWXP2K3 |
| READ_REGISTER_USHORT | NT3NT4W2KWXP2K3 |
| RestoreEm87Context | NT3NT4W2KWXP2K3 |
| RtlAbortRXact | NT3NT4W2KWXP2K3 |
| RtlAbsoluteToSelfRelativeSD | NT3NT4W2KWXP2K3 |
| RtlAcquirePebLock | NT3NT4W2KWXP2K3 |
| RtlAcquireResourceExclusive | NT3NT4W2KWXP2K3 |
| RtlAcquireResourceShared | NT3NT4W2KWXP2K3 |
| RtlActivateActivationContext | WXP2K3 |
| RtlActivateActivationContextEx | WXP2K3 |
| RtlActivateActivationContextUnsafeFast | WXP2K3 |
| RtlAddAccessAllowedAce | NT3NT4W2KWXP2K3 |
| RtlAddAccessAllowedAceEx | W2KWXP2K3 |
| RtlAddAccessAllowedObjectAce | W2KWXP2K3 |
| RtlAddAccessDeniedAce | NT3NT4W2KWXP2K3 |
| RtlAddAccessDeniedAceEx | W2KWXP2K3 |
| RtlAddAccessDeniedObjectAce | W2KWXP2K3 |
| RtlAddAce | NT3NT4W2KWXP2K3 |
| RtlAddActionToRXact | NT3NT4W2KWXP2K3 |
| RtlAddAtomToAtomTable | NT4W2KWXP2K3 |
| RtlAddAttributeActionToRXact | NT3NT4W2KWXP2K3 |
| RtlAddAuditAccessAce | NT3NT4W2KWXP2K3 |
| RtlAddAuditAccessAceEx | W2KWXP2K3 |
| RtlAddAuditAccessObjectAce | W2KWXP2K3 |
| RtlAddCompoundAce | NT4W2KWXP2K3 |
| RtlAddRange | W2KWXP2K3 |
| RtlAddRefActivationContext | WXP2K3 |
| RtlAddRefMemoryStream | WXP2K3 |
| RtlAddVectoredExceptionHandler | WXP2K3 |
| RtlAddressInSectionTable | WXP2K3 |
| RtlAdjustPrivilege | NT3NT4W2KWXP2K3 |
| RtlAllocateAndInitializeSid | NT3NT4W2KWXP2K3 |
| RtlAllocateHandle | NT4W2KWXP2K3 |
| RtlAllocateHeap | NT3NT4W2KWXP2K3 |
| RtlAnsiCharToUnicodeChar | NT3NT4W2KWXP2K3 |
| RtlAnsiStringToUnicodeSize | NT3NT4W2KWXP2K3 |
| RtlAnsiStringToUnicodeString | NT3NT4W2KWXP2K3 |
| RtlAppendAsciizToString | NT3NT4W2KWXP2K3 |
| RtlAppendPathElement | WXP2K3 |
| RtlAppendStringToString | NT3NT4W2KWXP2K3 |
| RtlAppendUnicodeStringToString | NT3NT4W2KWXP2K3 |
| RtlAppendUnicodeToString | NT3NT4W2KWXP2K3 |
| RtlApplicationVerifierStop | WXP2K3 |
| RtlApplyRXact | NT3NT4W2KWXP2K3 |
| RtlApplyRXactNoFlush | NT3NT4W2KWXP2K3 |
| RtlAreAllAccessesGranted | NT3NT4W2KWXP2K3 |
| RtlAreAnyAccessesGranted | NT3NT4W2KWXP2K3 |
| RtlAreBitsClear | NT3NT4W2KWXP2K3 |
| RtlAreBitsSet | NT3NT4W2KWXP2K3 |
| RtlAssert | NT3NT4W2KWXP2K3 |
| RtlAssert2 | WXP |
| RtlCallbackLpcClient | W2K |
| RtlCancelTimer | W2KWXP2K3 |
| RtlCaptureContext | W2KWXP2K3 |
| RtlCaptureStackBackTrace | NT3NT4W2KWXP2K3 |
| RtlCaptureStackContext | WXP2K3 |
| RtlCharToInteger | NT3NT4W2KWXP2K3 |
| RtlCheckForOrphanedCriticalSections | W2KWXP2K3 |
| RtlCheckProcessParameters | WXP2K3 |
| RtlCheckRegistryKey | NT3NT4W2KWXP2K3 |
| RtlClearAllBits | NT3NT4W2KWXP2K3 |
| RtlClearBit | WXP2K3 |
| Subtotal of the above list: 1400 functions Jump to: Cc, Cm, Csr, Dbg, Etw, Ex, Fs, Hal, Inbv, Interlocked, Io, Kd, Ke, Ki, Ldr, Lpc, Lsa, Mm, Nls, Nt, Ob, Pfx, Po, Ps, Rtl, Se, Vf, Wmi, Zw | |
| RtlClearBits | NT3NT4W2KWXP2K3 |
| RtlCloneMemoryStream | WXP2K3 |
| RtlClosePropertySet | NT4 |
| RtlCommitMemoryStream | WXP2K3 |
| RtlCompactHeap | NT3NT4W2KWXP2K3 |
| RtlCompareMemory | NT3NT4W2KWXP2K3 |
| RtlCompareMemoryUlong | NT3NT4W2KWXP2K3 |
| RtlCompareString | NT3NT4W2KWXP2K3 |
| RtlCompareUnicodeString | NT3NT4W2KWXP2K3 |
| RtlCompareVariants | NT4 |
| RtlCompressBuffer | NT3NT4W2KWXP2K3 |
| RtlCompressChunks | NT4W2KWXP2K3 |
| RtlComputeCrc32 | WXP2K3 |
| RtlComputeImportTableHash | WXP2K3 |
| RtlComputePrivatizedDllName_U | WXP2K3 |
| RtlConsoleMultiByteToUnicodeN | NT3NT4W2KWXP2K3 |
| RtlConvertExclusiveToShared | NT3NT4W2KWXP2K3 |
| RtlConvertLongToLargeInteger | NT3NT4W2KWXP2K3 |
| RtlConvertPropertyToVariant | NT4W2KWXP2K3 |
| RtlConvertSharedToExclusive | NT3NT4W2KWXP2K3 |
| RtlConvertSidToUnicodeString | NT3NT4W2KWXP2K3 |
| RtlConvertToAutoInheritSecurityObject | W2KWXP2K3 |
| RtlConvertUiListToApiList | NT3NT4W2KWXP2K3 |
| RtlConvertUlongToLargeInteger | NT3NT4W2KWXP2K3 |
| RtlConvertVariantToProperty | NT4W2KWXP2K3 |
| RtlCopyLuid | NT3NT4W2KWXP2K3 |
| RtlCopyLuidAndAttributesArray | NT3NT4W2KWXP2K3 |
| RtlCopyMappedMemory | 2K3 |
| RtlCopyMemoryStreamTo | WXP2K3 |
| RtlCopyOutOfProcessMemoryStreamTo | WXP2K3 |
| RtlCopyRangeList | W2KWXP2K3 |
| RtlCopySecurityDescriptor | NT3NT4W2KWXP2K3 |
| RtlCopySid | NT3NT4W2KWXP2K3 |
| RtlCopySidAndAttributesArray | NT3NT4W2KWXP2K3 |
| RtlCopyString | NT3NT4W2KWXP2K3 |
| RtlCopyUnicodeString | NT3NT4W2KWXP2K3 |
| RtlCreateAcl | NT3NT4W2KWXP2K3 |
| RtlCreateActivationContext | WXP2K3 |
| RtlCreateAndSetSD | NT3NT4W2KWXP2K3 |
| RtlCreateAtomTable | NT4W2KWXP2K3 |
| RtlCreateBootStatusDataFile | WXP2K3 |
| RtlCreateEnvironment | NT3NT4W2KWXP2K3 |
| RtlCreateHeap | NT3NT4W2KWXP2K3 |
| RtlCreateLpcServer | W2K |
| RtlCreateProcessParameters | NT3NT4W2KWXP2K3 |
| RtlCreatePropertySet | NT4 |
| RtlCreateQueryDebugBuffer | NT3NT4W2KWXP2K3 |
| RtlCreateRegistryKey | NT3NT4W2KWXP2K3 |
| RtlCreateSecurityDescriptor | NT3NT4W2KWXP2K3 |
| RtlCreateSystemVolumeInformationFolder | WXP2K3 |
| RtlCreateTagHeap | NT3NT4W2KWXP2K3 |
| RtlCreateTimer | W2KWXP2K3 |
| RtlCreateTimerQueue | W2KWXP2K3 |
| RtlCreateUnicodeString | NT3NT4W2KWXP2K3 |
| RtlCreateUnicodeStringFromAsciiz | NT3NT4W2KWXP2K3 |
| RtlCreateUserProcess | NT3NT4W2KWXP2K3 |
| RtlCreateUserSecurityObject | NT3NT4W2KWXP2K3 |
| RtlCreateUserThread | NT3NT4W2KWXP2K3 |
| RtlCustomCPToUnicodeN | NT3NT4W2KWXP2K3 |
| RtlCutoverTimeToSystemTime | NT3NT4W2KWXP2K3 |
| RtlDeNormalizeProcessParams | NT3NT4W2KWXP2K3 |
| RtlDeactivateActivationContext | WXP2K3 |
| RtlDeactivateActivationContextUnsafeFast | WXP2K3 |
| RtlDebugPrintTimes | W2KWXP2K3 |
| RtlDecompressBuffer | NT3NT4W2KWXP2K3 |
| RtlDecompressChunks | NT4W2KWXP2K3 |
| RtlDecompressFragment | NT3NT4W2KWXP2K3 |
| RtlDefaultNpAcl | W2KWXP2K3 |
| RtlDelete | NT3NT4W2KWXP2K3 |
| RtlDeleteAce | NT3NT4W2KWXP2K3 |
| RtlDeleteAtomFromAtomTable | NT4W2KWXP2K3 |
| RtlDeleteCriticalSection | NT3NT4W2KWXP2K3 |
| RtlDeleteElementGenericTable | NT3NT4W2KWXP2K3 |
| RtlDeleteElementGenericTableAvl | WXP2K3 |
| RtlDeleteNoSplay | NT4W2KWXP2K3 |
| RtlDeleteOwnersRanges | W2KWXP2K3 |
| RtlDeleteRange | W2KWXP2K3 |
| RtlDeleteRegistryValue | NT3NT4W2KWXP2K3 |
| RtlDeleteResource | NT3NT4W2KWXP2K3 |
| RtlDeleteSecurityObject | NT3NT4W2KWXP2K3 |
| RtlDeleteTimer | W2KWXP2K3 |
| RtlDeleteTimerQueue | W2KWXP2K3 |
| RtlDeleteTimerQueueEx | W2KWXP2K3 |
| RtlDeregisterWait | W2KWXP2K3 |
| RtlDeregisterWaitEx | W2KWXP2K3 |
| RtlDescribeChunk | NT4W2KWXP2K3 |
| RtlDestroyAtomTable | NT4W2KWXP2K3 |
| RtlDestroyEnvironment | NT3NT4W2KWXP2K3 |
| RtlDestroyHandleTable | NT4W2KWXP2K3 |
| RtlDestroyHeap | NT3NT4W2KWXP2K3 |
| RtlDestroyProcessParameters | NT3NT4W2KWXP2K3 |
| RtlDestroyQueryDebugBuffer | NT3NT4W2KWXP2K3 |
| RtlDetermineDosPathNameType_U | NT3NT4W2KWXP2K3 |
| RtlDllShutdownInProgress | WXP2K3 |
| RtlDnsHostNameToComputerName | W2KWXP2K3 |
| RtlDoesFileExists_U | NT3NT4W2KWXP2K3 |
| RtlDosApplyFileIsolationRedirection_Ustr | WXP2K3 |
| RtlDosPathNameToNtPathName_U | NT3NT4W2KWXP2K3 |
| RtlDosPathNameToRelativeNtPathName_U | 2K3 |
| RtlDosSearchPath_U | NT3NT4W2KWXP2K3 |
| RtlDosSearchPath_Ustr | WXP2K3 |
| RtlDowncaseUnicodeChar | WXP2K3 |
| RtlDowncaseUnicodeString | NT3NT4W2KWXP2K3 |
| RtlDumpResource | NT3NT4W2KWXP2K3 |
| RtlDuplicateUnicodeString | WXP2K3 |
| RtlEmptyAtomTable | NT4W2KWXP2K3 |
| RtlEnableEarlyCriticalSectionEventCreation | W2KWXP2K3 |
| RtlEnlargedIntegerMultiply | NT3NT4W2KWXP2K3 |
| RtlEnlargedUnsignedDivide | NT3NT4W2KWXP2K3 |
| RtlEnlargedUnsignedMultiply | NT3NT4W2KWXP2K3 |
| RtlEnterCriticalSection | NT3NT4W2KWXP2K3 |
| RtlEnumProcessHeaps | NT3NT4W2KWXP2K3 |
| RtlEnumerateGenericTable | NT3NT4W2KWXP2K3 |
| RtlEnumerateGenericTableAvl | WXP2K3 |
| RtlEnumerateGenericTableLikeADirectory | WXP2K3 |
| RtlEnumerateGenericTableWithoutSplaying | NT3NT4W2KWXP2K3 |
| RtlEnumerateGenericTableWithoutSplayingAvl | WXP2K3 |
| RtlEnumerateProperties | NT4 |
| RtlEqualComputerName | NT3NT4W2KWXP2K3 |
| RtlEqualDomainName | NT3NT4W2KWXP2K3 |
| RtlEqualLuid | NT3NT4W2KWXP2K3 |
| RtlEqualPrefixSid | NT3NT4W2KWXP2K3 |
| RtlEqualSid | NT3NT4W2KWXP2K3 |
| RtlEqualString | NT3NT4W2KWXP2K3 |
| RtlEqualUnicodeString | NT3NT4W2KWXP2K3 |
| RtlEraseUnicodeString | NT3NT4W2KWXP2K3 |
| RtlExitUserThread | WXP2K3 |
| RtlExpandEnvironmentStrings_U | NT3NT4W2KWXP2K3 |
| RtlExtendHeap | NT3NT4W2KWXP2K3 |
| RtlExtendedIntegerMultiply | NT3NT4W2KWXP2K3 |
| RtlExtendedLargeIntegerDivide | NT3NT4W2KWXP2K3 |
| RtlExtendedMagicDivide | NT3NT4W2KWXP2K3 |
| RtlFillMemory | NT3NT4W2KWXP2K3 |
| RtlFillMemoryUlong | NT3NT4W2KWXP2K3 |
| RtlFinalReleaseOutOfProcessMemoryStream | WXP2K3 |
| RtlFindActivationContextSectionGuid | WXP2K3 |
| RtlFindActivationContextSectionString | WXP2K3 |
| RtlFindCharInUnicodeString | WXP2K3 |
| RtlFindClearBits | NT3NT4W2KWXP2K3 |
| RtlFindClearBitsAndSet | NT3NT4W2KWXP2K3 |
| RtlFindClearRuns | W2KWXP2K3 |
| RtlFindFirstRunClear | NT3NT4W2KWXP2K3 |
| RtlFindFirstRunSet | NT3NT4 |
| RtlFindLastBackwardRunClear | W2KWXP2K3 |
| RtlFindLeastSignificantBit | W2KWXP2K3 |
| RtlFindLongestRunClear | NT3NT4W2KWXP2K3 |
| RtlFindLongestRunSet | NT3NT4 |
| RtlFindMessage | NT3NT4W2KWXP2K3 |
| RtlFindMostSignificantBit | W2KWXP2K3 |
| RtlFindNextForwardRunClear | W2KWXP2K3 |
| RtlFindRange | W2KWXP2K3 |
| RtlFindSetBits | NT3NT4W2KWXP2K3 |
| RtlFindSetBitsAndClear | NT3NT4W2KWXP2K3 |
| RtlFindUnicodePrefix | NT3NT4W2KWXP2K3 |
| RtlFirstEntrySList | WXP2K3 |
| RtlFirstFreeAce | NT3NT4W2KWXP2K3 |
| RtlFlushPropertySet | NT4 |
| RtlFlushSecureMemoryCache | WXP2K3 |
| RtlFormatCurrentUserKeyPath | NT3NT4W2KWXP2K3 |
| RtlFormatMessage | NT3NT4W2KWXP2K3 |
| RtlFreeAnsiString | NT3NT4W2KWXP2K3 |
| RtlFreeHandle | NT4W2KWXP2K3 |
| RtlFreeHeap | NT3NT4W2KWXP2K3 |
| RtlFreeOemString | NT3NT4W2KWXP2K3 |
| RtlFreeRangeList | W2KWXP2K3 |
| RtlFreeSid | NT3NT4W2KWXP2K3 |
| RtlFreeThreadActivationContextStack | WXP2K3 |
| RtlFreeUnicodeString | NT3NT4W2KWXP2K3 |
| RtlFreeUserThreadStack | NT4W2KWXP2K3 |
| RtlGUIDFromString | W2KWXP2K3 |
| RtlGenerate8dot3Name | NT3NT4W2KWXP2K3 |
| RtlGetAce | NT3NT4W2KWXP2K3 |
| RtlGetActiveActivationContext | WXP2K3 |
| RtlGetCallersAddress | NT3NT4W2KWXP2K3 |
| RtlGetCompressionWorkSpaceSize | NT3NT4W2KWXP2K3 |
| RtlGetControlSecurityDescriptor | NT3NT4W2KWXP2K3 |
| RtlGetCurrentDirectory_U | NT3NT4W2KWXP2K3 |
| RtlGetCurrentPeb | WXP2K3 |
| RtlGetDaclSecurityDescriptor | NT3NT4W2KWXP2K3 |
| RtlGetDefaultCodePage | NT4W2KWXP2K3 |
| RtlGetElementGenericTable | NT3NT4W2KWXP2K3 |
| RtlGetElementGenericTableAvl | WXP2K3 |
| RtlGetFirstRange | W2KWXP2K3 |
| RtlGetFrame | WXP2K3 |
| RtlGetFullPathName_U | NT3NT4W2KWXP2K3 |
| RtlGetFullPathName_UstrEx | 2K3 |
| RtlGetGroupSecurityDescriptor | NT3NT4W2KWXP2K3 |
| RtlGetLastNtStatus | WXP2K3 |
| RtlGetLastWin32Error | WXP2K3 |
| RtlGetLengthWithoutLastFullDosOrNtPathElement | WXP2K3 |
| RtlGetLengthWithoutTrailingPathSeperators | WXP2K3 |
| RtlGetLongestNtPathLength | NT3NT4W2KWXP2K3 |
| RtlGetNativeSystemInformation | WXP2K3 |
| RtlGetNextRange | W2KWXP2K3 |
| RtlGetNtGlobalFlags | NT3NT4W2KWXP2K3 |
| RtlGetNtProductType | NT3NT4W2KWXP2K3 |
| RtlGetNtVersionNumbers | WXP2K3 |
| RtlGetOwnerSecurityDescriptor | NT3NT4W2KWXP2K3 |
| RtlGetProcessHeaps | NT3NT4W2KWXP2K3 |
| RtlGetSaclSecurityDescriptor | NT3NT4W2KWXP2K3 |
| Subtotal of the above list: 1600 functions Jump to: Cc, Cm, Csr, Dbg, Etw, Ex, Fs, Hal, Inbv, Interlocked, Io, Kd, Ke, Ki, Ldr, Lpc, Lsa, Mm, Nls, Nt, Ob, Pfx, Po, Ps, Rtl, Se, Vf, Wmi, Zw | |
| RtlGetSecurityDescriptorRMControl | W2KWXP2K3 |
| RtlGetSetBootStatusData | WXP2K3 |
| RtlGetThreadErrorMode | 2K3 |
| RtlGetUnloadEventTrace | 2K3 |
| RtlGetUserInfoHeap | NT3NT4W2KWXP2K3 |
| RtlGetVersion | W2KWXP2K3 |
| RtlGuidToPropertySetName | NT4 |
| RtlHashUnicodeString | WXP2K3 |
| RtlIdentifierAuthoritySid | NT3NT4W2KWXP2K3 |
| RtlImageDirectoryEntryToData | NT3NT4W2KWXP2K3 |
| RtlImageNtHeader | NT3NT4W2KWXP2K3 |
| RtlImageNtHeaderEx | 2K3 |
| RtlImageRvaToSection | NT4W2KWXP2K3 |
| RtlImageRvaToVa | NT4W2KWXP2K3 |
| RtlImpersonateLpcClient | W2K |
| RtlImpersonateSelf | NT3NT4W2KWXP2K3 |
| RtlInitAnsiString | NT3NT4W2KWXP2K3 |
| RtlInitAnsiStringEx | 2K3 |
| RtlInitCodePageTable | NT3NT4W2KWXP2K3 |
| RtlInitMemoryStream | WXP2K3 |
| RtlInitNlsTables | NT3NT4W2KWXP2K3 |
| RtlInitOutOfProcessMemoryStream | WXP2K3 |
| RtlInitString | NT3NT4W2KWXP2K3 |
| RtlInitUnicodeString | NT3NT4W2KWXP2K3 |
| RtlInitUnicodeStringEx | WXP2K3 |
| RtlInitializeAtomPackage | NT4W2KWXP2K3 |
| RtlInitializeBitMap | NT3NT4W2KWXP2K3 |
| RtlInitializeContext | NT3NT4W2KWXP2K3 |
| RtlInitializeCriticalSection | NT3NT4W2KWXP2K3 |
| RtlInitializeCriticalSectionAndSpinCount | NT4W2KWXP2K3 |
| RtlInitializeGenericTable | NT3NT4W2KWXP2K3 |
| RtlInitializeGenericTableAvl | WXP2K3 |
| RtlInitializeHandleTable | NT4W2KWXP2K3 |
| RtlInitializeRXact | NT3NT4W2KWXP2K3 |
| RtlInitializeRangeList | W2KWXP2K3 |
| RtlInitializeResource | NT3NT4W2KWXP2K3 |
| RtlInitializeSListHead | WXP2K3 |
| RtlInitializeSid | NT3NT4W2KWXP2K3 |
| RtlInitializeUnicodePrefix | NT3NT4W2KWXP2K3 |
| RtlInsertElementGenericTable | NT3NT4W2KWXP2K3 |
| RtlInsertElementGenericTableAvl | WXP2K3 |
| RtlInsertElementGenericTableFull | W2KWXP2K3 |
| RtlInsertElementGenericTableFullAvl | WXP2K3 |
| RtlInsertUnicodePrefix | NT3NT4W2KWXP2K3 |
| RtlInt64ToUnicodeString | W2KWXP2K3 |
| RtlIntegerToChar | NT3NT4W2KWXP2K3 |
| RtlIntegerToUnicode | WXP2K3 |
| RtlIntegerToUnicodeString | NT3NT4W2KWXP2K3 |
| RtlInterlockedCompareExchange64 | 2K3 |
| RtlInterlockedFlushSList | WXP2K3 |
| RtlInterlockedPopEntrySList | WXP2K3 |
| RtlInterlockedPushEntrySList | WXP2K3 |
| RtlInterlockedPushListSList | WXP2K3 |
| RtlInvertRangeList | W2KWXP2K3 |
| RtlIpv4AddressToStringA | WXP2K3 |
| RtlIpv4AddressToStringExA | 2K3 |
| RtlIpv4AddressToStringExW | 2K3 |
| RtlIpv4AddressToStringW | WXP2K3 |
| RtlIpv4StringToAddressA | WXP2K3 |
| RtlIpv4StringToAddressExA | 2K3 |
| RtlIpv4StringToAddressExW | 2K3 |
| RtlIpv4StringToAddressW | WXP2K3 |
| RtlIpv6AddressToStringA | WXP2K3 |
| RtlIpv6AddressToStringExA | 2K3 |
| RtlIpv6AddressToStringExW | 2K3 |
| RtlIpv6AddressToStringW | WXP2K3 |
| RtlIpv6StringToAddressA | WXP2K3 |
| RtlIpv6StringToAddressExA | 2K3 |
| RtlIpv6StringToAddressExW | 2K3 |
| RtlIpv6StringToAddressW | WXP2K3 |
| RtlIsActivationContextActive | WXP2K3 |
| RtlIsDosDeviceName_U | NT3NT4W2KWXP2K3 |
| RtlIsGenericTableEmpty | NT3NT4W2KWXP2K3 |
| RtlIsGenericTableEmptyAvl | WXP2K3 |
| RtlIsNameLegalDOS8Dot3 | NT3NT4W2KWXP2K3 |
| RtlIsRangeAvailable | W2KWXP2K3 |
| RtlIsTextUnicode | NT3NT4W2KWXP2K3 |
| RtlIsThreadWithinLoaderCallout | WXP2K3 |
| RtlIsValidHandle | NT4W2KWXP2K3 |
| RtlIsValidIndexHandle | NT4W2KWXP2K3 |
| RtlIsValidOemCharacter | W2KWXP2K3 |
| RtlLargeIntegerAdd | NT3NT4W2KWXP2K3 |
| RtlLargeIntegerArithmeticShift | NT3NT4W2KWXP2K3 |
| RtlLargeIntegerDivide | NT3NT4W2KWXP2K3 |
| RtlLargeIntegerNegate | NT3NT4W2KWXP2K3 |
| RtlLargeIntegerShiftLeft | NT3NT4W2KWXP2K3 |
| RtlLargeIntegerShiftRight | NT3NT4W2KWXP2K3 |
| RtlLargeIntegerSubtract | NT3NT4W2KWXP2K3 |
| RtlLargeIntegerToChar | NT3NT4W2KWXP2K3 |
| RtlLeaveCriticalSection | NT3NT4W2KWXP2K3 |
| RtlLengthRequiredSid | NT3NT4W2KWXP2K3 |
| RtlLengthSecurityDescriptor | NT3NT4W2KWXP2K3 |
| RtlLengthSid | NT3NT4W2KWXP2K3 |
| RtlLocalTimeToSystemTime | NT3NT4W2KWXP2K3 |
| RtlLockBootStatusData | WXP2K3 |
| RtlLockHeap | NT3NT4W2KWXP2K3 |
| RtlLockMemoryStreamRegion | WXP2K3 |
| RtlLogStackBackTrace | WXP2K3 |
| RtlLookupAtomInAtomTable | NT4W2KWXP2K3 |
| RtlLookupElementGenericTable | NT3NT4W2KWXP2K3 |
| RtlLookupElementGenericTableAvl | WXP2K3 |
| RtlLookupElementGenericTableFull | W2KWXP2K3 |
| RtlLookupElementGenericTableFullAvl | WXP2K3 |
| RtlMakeSelfRelativeSD | NT3NT4W2KWXP2K3 |
| RtlMapGenericMask | NT3NT4W2KWXP2K3 |
| RtlMapSecurityErrorToNtStatus | WXP2K3 |
| RtlMergeRangeLists | W2KWXP2K3 |
| RtlMoveMemory | NT3NT4W2KWXP2K3 |
| RtlMultiAppendUnicodeStringBuffer | WXP2K3 |
| RtlMultiByteToUnicodeN | NT3NT4W2KWXP2K3 |
| RtlMultiByteToUnicodeSize | NT3NT4W2KWXP2K3 |
| RtlMultipleAllocateHeap | 2K3 |
| RtlMultipleFreeHeap | 2K3 |
| RtlNewInstanceSecurityObject | NT3NT4W2KWXP2K3 |
| RtlNewSecurityGrantedAccess | NT3NT4W2KWXP2K3 |
| RtlNewSecurityObject | NT3NT4W2KWXP2K3 |
| RtlNewSecurityObjectEx | W2KWXP2K3 |
| RtlNewSecurityObjectWithMultipleInheritance | WXP2K3 |
| RtlNextUnicodePrefix | NT3NT4W2KWXP2K3 |
| RtlNormalizeProcessParams | NT3NT4W2KWXP2K3 |
| RtlNtPathNameToDosPathName | WXP2K3 |
| RtlNtStatusToDosError | NT3NT4W2KWXP2K3 |
| RtlNtStatusToDosErrorNoTeb | NT3NT4W2KWXP2K3 |
| RtlNumberGenericTableElements | NT3NT4W2KWXP2K3 |
| RtlNumberGenericTableElementsAvl | WXP2K3 |
| RtlNumberOfClearBits | NT3NT4W2KWXP2K3 |
| RtlNumberOfSetBits | NT3NT4W2KWXP2K3 |
| RtlOemStringToCountedUnicodeString | NT3NT4W2KWXP2K3 |
| RtlOemStringToUnicodeSize | NT3NT4W2KWXP2K3 |
| RtlOemStringToUnicodeString | NT3NT4W2KWXP2K3 |
| RtlOemToUnicodeN | NT3NT4W2KWXP2K3 |
| RtlOnMappedStreamEvent | NT4 |
| RtlOpenCurrentUser | NT3NT4W2KWXP2K3 |
| RtlPcToFileHeader | NT3NT4W2KWXP2K3 |
| RtlPinAtomInAtomTable | NT4W2KWXP2K3 |
| RtlPopFrame | WXP2K3 |
| RtlPrefetchMemoryNonTemporal | W2KWXP2K3 |
| RtlPrefixString | NT3NT4W2KWXP2K3 |
| RtlPrefixUnicodeString | NT3NT4W2KWXP2K3 |
| RtlPropertySetNameToGuid | NT4 |
| RtlProtectHeap | NT3NT4W2KWXP2K3 |
| RtlPushFrame | WXP2K3 |
| RtlQueryAtomInAtomTable | NT4W2KWXP2K3 |
| RtlQueryDepthSList | WXP2K3 |
| RtlQueryEnvironmentVariable_U | NT3NT4W2KWXP2K3 |
| RtlQueryHeapInformation | W2KWXP2K3 |
| RtlQueryInformationAcl | NT3NT4W2KWXP2K3 |
| RtlQueryInformationActivationContext | WXP2K3 |
| RtlQueryInformationActiveActivationContext | WXP2K3 |
| RtlQueryInterfaceMemoryStream | WXP2K3 |
| RtlQueryProcessBackTraceInformation | NT3NT4W2KWXP2K3 |
| RtlQueryProcessDebugInformation | NT3NT4W2KWXP2K3 |
| RtlQueryProcessHeapInformation | NT3NT4W2KWXP2K3 |
| RtlQueryProcessLockInformation | NT3NT4W2KWXP2K3 |
| RtlQueryProperties | NT4 |
| RtlQueryPropertyNames | NT4 |
| RtlQueryPropertySet | NT4 |
| RtlQueryRegistryValues | NT3NT4W2KWXP2K3 |
| RtlQuerySecurityObject | NT3NT4W2KWXP2K3 |
| RtlQueryTagHeap | NT3NT4W2KWXP2K3 |
| RtlQueryTimeZoneInformation | NT3NT4W2KWXP2K3 |
| RtlQueueApcWow64Thread | WXP2K3 |
| RtlQueueWorkItem | W2KWXP2K3 |
| RtlRaiseException | NT3NT4W2KWXP2K3 |
| RtlRaiseStatus | NT3NT4W2KWXP2K3 |
| RtlRandom | NT3NT4W2KWXP2K3 |
| RtlRandomEx | WXP2K3 |
| RtlReAllocateHeap | NT3NT4W2KWXP2K3 |
| RtlReadMemoryStream | WXP2K3 |
| RtlReadOutOfProcessMemoryStream | WXP2K3 |
| RtlRealPredecessor | NT3NT4W2KWXP2K3 |
| RtlRealSuccessor | NT3NT4W2KWXP2K3 |
| RtlRegisterSecureMemoryCacheCallback | WXP2K3 |
| RtlRegisterWait | W2KWXP2K3 |
| RtlReleaseActivationContext | WXP2K3 |
| RtlReleaseMemoryStream | WXP2K3 |
| RtlReleasePebLock | NT3NT4W2KWXP2K3 |
| RtlReleaseRelativeName | 2K3 |
| RtlReleaseResource | NT3NT4W2KWXP2K3 |
| RtlRemoteCall | NT3NT4W2KWXP2K3 |
| RtlRemoveUnicodePrefix | NT3NT4W2KWXP2K3 |
| RtlRemoveVectoredExceptionHandler | WXP2K3 |
| RtlReserveChunk | NT4W2KWXP2K3 |
| RtlResetRtlTranslations | NT3NT4W2KWXP2K3 |
| RtlRestoreLastWin32Error | WXP2K3 |
| RtlRevertMemoryStream | WXP2K3 |
| RtlRunDecodeUnicodeString | NT3NT4W2KWXP2K3 |
| RtlRunEncodeUnicodeString | NT3NT4W2KWXP2K3 |
| RtlSecondsSince1970ToTime | NT3NT4W2KWXP2K3 |
| RtlSecondsSince1980ToTime | NT3NT4W2KWXP2K3 |
| RtlSeekMemoryStream | WXP2K3 |
| RtlSelfRelativeToAbsoluteSD | NT3NT4W2KWXP2K3 |
| RtlSelfRelativeToAbsoluteSD2 | W2KWXP2K3 |
| RtlSetAllBits | NT3NT4W2KWXP2K3 |
| RtlSetAttributesSecurityDescriptor | NT4W2KWXP2K3 |
| RtlSetBit | WXP2K3 |
| RtlSetBits | NT3NT4W2KWXP2K3 |
| RtlSetControlSecurityDescriptor | W2KWXP2K3 |
| RtlSetCriticalSectionSpinCount | NT4W2KWXP2K3 |
| RtlSetCurrentDirectory_U | NT3NT4W2KWXP2K3 |
| Subtotal of the above list: 1800 functions Jump to: Cc, Cm, Csr, Dbg, Etw, Ex, Fs, Hal, Inbv, Interlocked, Io, Kd, Ke, Ki, Ldr, Lpc, Lsa, Mm, Nls, Nt, Ob, Pfx, Po, Ps, Rtl, Se, Vf, Wmi, Zw | |
| RtlSetCurrentEnvironment | NT3NT4W2KWXP2K3 |
| RtlSetDaclSecurityDescriptor | NT3NT4W2KWXP2K3 |
| RtlSetEnvironmentStrings | 2K3 |
| RtlSetEnvironmentVariable | NT3NT4W2KWXP2K3 |
| RtlSetGroupSecurityDescriptor | NT3NT4W2KWXP2K3 |
| RtlSetHeapInformation | W2KWXP2K3 |
| RtlSetInformationAcl | NT3NT4W2KWXP2K3 |
| RtlSetIoCompletionCallback | W2KWXP2K3 |
| RtlSetLastWin32Error | WXP2K3 |
| RtlSetLastWin32ErrorAndNtStatusFromNtStatus | WXP2K3 |
| RtlSetMemoryStreamSize | WXP2K3 |
| RtlSetOwnerSecurityDescriptor | NT3NT4W2KWXP2K3 |
| RtlSetProcessIsCritical | WXP2K3 |
| RtlSetProperties | NT4 |
| RtlSetPropertyNames | NT4 |
| RtlSetPropertySetClassId | NT4 |
| RtlSetSaclSecurityDescriptor | NT3NT4W2KWXP2K3 |
| RtlSetSecurityDescriptorRMControl | W2KWXP2K3 |
| RtlSetSecurityObject | NT3NT4W2KWXP2K3 |
| RtlSetSecurityObjectEx | W2KWXP2K3 |
| RtlSetThreadErrorMode | 2K3 |
| RtlSetThreadIsCritical | WXP2K3 |
| RtlSetThreadPoolStartFunc | W2KWXP2K3 |
| RtlSetTimeZoneInformation | NT3NT4W2KWXP2K3 |
| RtlSetTimer | W2KWXP2K3 |
| RtlSetUnicodeCallouts | NT4W2KWXP2K3 |
| RtlSetUserFlagsHeap | NT3NT4W2KWXP2K3 |
| RtlSetUserValueHeap | NT3NT4W2KWXP2K3 |
| RtlShutdownLpcServer | W2K |
| RtlSizeHeap | NT3NT4W2KWXP2K3 |
| RtlSplay | NT3NT4W2KWXP2K3 |
| RtlStartRXact | NT3NT4W2KWXP2K3 |
| RtlStatMemoryStream | WXP2K3 |
| RtlStringFromGUID | W2KWXP2K3 |
| RtlSubAuthorityCountSid | NT3NT4W2KWXP2K3 |
| RtlSubAuthoritySid | NT3NT4W2KWXP2K3 |
| RtlSubtreePredecessor | NT3NT4W2KWXP2K3 |
| RtlSubtreeSuccessor | NT3NT4W2KWXP2K3 |
| RtlSystemTimeToLocalTime | NT3NT4W2KWXP2K3 |
| RtlTestBit | WXP2K3 |
| RtlTimeFieldsToTime | NT3NT4W2KWXP2K3 |
| RtlTimeToElapsedTimeFields | NT3NT4W2KWXP2K3 |
| RtlTimeToSecondsSince1970 | NT3NT4W2KWXP2K3 |
| RtlTimeToSecondsSince1980 | NT3NT4W2KWXP2K3 |
| RtlTimeToTimeFields | NT3NT4W2KWXP2K3 |
| RtlTraceDatabaseAdd | W2KWXP2K3 |
| RtlTraceDatabaseCreate | W2KWXP2K3 |
| RtlTraceDatabaseDestroy | W2KWXP2K3 |
| RtlTraceDatabaseEnumerate | W2KWXP2K3 |
| RtlTraceDatabaseFind | W2KWXP2K3 |
| RtlTraceDatabaseLock | W2KWXP2K3 |
| RtlTraceDatabaseUnlock | W2KWXP2K3 |
| RtlTraceDatabaseValidate | W2KWXP2K3 |
| RtlTryEnterCriticalSection | NT4W2KWXP2K3 |
| RtlUlongByteSwap | W2KWXP2K3 |
| RtlUlonglongByteSwap | W2KWXP2K3 |
| RtlUnhandledExceptionFilter | WXP2K3 |
| RtlUnhandledExceptionFilter2 | WXP2K3 |
| RtlUnicodeStringToAnsiSize | NT3NT4W2KWXP2K3 |
| RtlUnicodeStringToAnsiString | NT3NT4W2KWXP2K3 |
| RtlUnicodeStringToCountedOemString | NT3NT4W2KWXP2K3 |
| RtlUnicodeStringToInteger | NT3NT4W2KWXP2K3 |
| RtlUnicodeStringToOemSize | NT3NT4W2KWXP2K3 |
| RtlUnicodeStringToOemString | NT3NT4W2KWXP2K3 |
| RtlUnicodeToCustomCPN | NT3NT4W2KWXP2K3 |
| RtlUnicodeToMultiByteN | NT3NT4W2KWXP2K3 |
| RtlUnicodeToMultiByteSize | NT3NT4W2KWXP2K3 |
| RtlUnicodeToOemN | NT3NT4W2KWXP2K3 |
| RtlUniform | NT3NT4W2KWXP2K3 |
| RtlUnlockBootStatusData | WXP2K3 |
| RtlUnlockHeap | NT3NT4W2KWXP2K3 |
| RtlUnlockMemoryStreamRegion | WXP2K3 |
| RtlUnwind | NT3NT4W2KWXP2K3 |
| RtlUpcaseUnicodeChar | NT3NT4W2KWXP2K3 |
| RtlUpcaseUnicodeString | NT3NT4W2KWXP2K3 |
| RtlUpcaseUnicodeStringToAnsiString | NT3NT4W2KWXP2K3 |
| RtlUpcaseUnicodeStringToCountedOemString | NT3NT4W2KWXP2K3 |
| RtlUpcaseUnicodeStringToOemString | NT3NT4W2KWXP2K3 |
| RtlUpcaseUnicodeToCustomCPN | NT3NT4W2KWXP2K3 |
| RtlUpcaseUnicodeToMultiByteN | NT3NT4W2KWXP2K3 |
| RtlUpcaseUnicodeToOemN | NT3NT4W2KWXP2K3 |
| RtlUpdateTimer | W2KWXP2K3 |
| RtlUpperChar | NT3NT4W2KWXP2K3 |
| RtlUpperString | NT3NT4W2KWXP2K3 |
| RtlUsageHeap | NT3NT4W2KWXP2K3 |
| RtlUshortByteSwap | W2KWXP2K3 |
| RtlValidAcl | NT3NT4W2KWXP2K3 |
| RtlValidRelativeSecurityDescriptor | W2KWXP2K3 |
| RtlValidSecurityDescriptor | NT3NT4W2KWXP2K3 |
| RtlValidSid | NT3NT4W2KWXP2K3 |
| RtlValidateHeap | NT3NT4W2KWXP2K3 |
| RtlValidateProcessHeaps | NT3NT4W2KWXP2K3 |
| RtlValidateUnicodeString | WXP2K3 |
| RtlVerifyVersionInfo | W2KWXP2K3 |
| RtlVolumeDeviceToDosName | W2KWXP2K3 |
| RtlWalkFrameChain | W2KWXP2K3 |
| RtlWalkHeap | NT3NT4W2KWXP2K3 |
| RtlWow64EnableFsRedirection | 2K3 |
| RtlWriteMemoryStream | WXP2K3 |
| RtlWriteRegistryValue | NT3NT4W2KWXP2K3 |
| RtlZeroHeap | NT3NT4W2KWXP2K3 |
| RtlZeroMemory | NT3NT4W2KWXP2K3 |
| RtlZombifyActivationContext | WXP2K3 |
| RtlpApplyLengthFunction | WXP2K3 |
| RtlpEnsureBufferSize | WXP2K3 |
| RtlpInitializeRtl | NT3 |
| RtlpNotOwnerCriticalSection | WXP2K3 |
| RtlpNtCreateKey | NT3NT4W2KWXP2K3 |
| RtlpNtEnumerateSubKey | NT3NT4W2KWXP2K3 |
| RtlpNtMakeTemporaryKey | NT3NT4W2KWXP2K3 |
| RtlpNtOpenKey | NT3NT4W2KWXP2K3 |
| RtlpNtQueryValueKey | NT3NT4W2KWXP2K3 |
| RtlpNtSetValueKey | NT3NT4W2KWXP2K3 |
| RtlpUnWaitCriticalSection | NT3NT4W2KWXP2K3 |
| RtlpWaitForCriticalSection | NT3NT4W2KWXP2K3 |
| RtlxAnsiStringToUnicodeSize | NT3NT4W2KWXP2K3 |
| RtlxOemStringToUnicodeSize | NT3NT4W2KWXP2K3 |
| RtlxUnicodeStringToAnsiSize | NT3NT4W2KWXP2K3 |
| RtlxUnicodeStringToOemSize | NT3NT4W2KWXP2K3 |
| SaveEm87Context | NT3NT4W2KWXP2K3 |
| SeAccessCheck | NT3NT4W2KWXP2K3 |
| SeAppendPrivileges | NT3NT4W2KWXP2K3 |
| SeAssignSecurity | NT3NT4W2KWXP2K3 |
| SeAssignSecurityEx | W2KWXP2K3 |
| SeAuditHardLinkCreation | W2KWXP2K3 |
| SeAuditingFileEvents | NT3NT4W2KWXP2K3 |
| SeAuditingFileEventsWithContext | 2K3 |
| SeAuditingFileOrGlobalEvents | NT4W2KWXP2K3 |
| SeAuditingHardLinkEvents | W2KWXP2K3 |
| SeAuditingHardLinkEventsWithContext | 2K3 |
| SeCaptureSecurityDescriptor | NT3NT4W2KWXP2K3 |
| SeCaptureSubjectContext | NT3NT4W2KWXP2K3 |
| SeCloseObjectAuditAlarm | NT3NT4W2KWXP2K3 |
| SeCreateAccessState | NT3NT4W2KWXP2K3 |
| SeCreateClientSecurity | NT3NT4W2KWXP2K3 |
| SeCreateClientSecurityFromSubjectContext | W2KWXP2K3 |
| SeDeassignSecurity | NT3NT4W2KWXP2K3 |
| SeDeleteAccessState | NT3NT4W2KWXP2K3 |
| SeDeleteObjectAuditAlarm | NT4W2KWXP2K3 |
| SeExports | NT3NT4W2KWXP2K3 |
| SeFilterToken | WXP2K3 |
| SeFreePrivileges | NT3NT4W2KWXP2K3 |
| SeImpersonateClient | NT3NT4W2KWXP2K3 |
| SeImpersonateClientEx | W2KWXP2K3 |
| SeLockSubjectContext | NT3NT4W2KWXP2K3 |
| SeMarkLogonSessionForTerminationNotification | NT4W2KWXP2K3 |
| SeOpenObjectAuditAlarm | NT3NT4W2KWXP2K3 |
| SeOpenObjectForDeleteAuditAlarm | NT4W2KWXP2K3 |
| SePrivilegeCheck | NT3NT4W2KWXP2K3 |
| SePrivilegeObjectAuditAlarm | NT3NT4W2KWXP2K3 |
| SePublicDefaultDacl | NT3NT4W2KWXP2K3 |
| SeQueryAuthenticationIdToken | NT3NT4W2KWXP2K3 |
| SeQueryInformationToken | W2KWXP2K3 |
| SeQuerySecurityDescriptorInfo | NT3NT4W2KWXP2K3 |
| SeQuerySessionIdToken | W2KWXP2K3 |
| SeRegisterLogonSessionTerminatedRoutine | NT4W2KWXP2K3 |
| SeReleaseSecurityDescriptor | NT3NT4W2KWXP2K3 |
| SeReleaseSubjectContext | NT3NT4W2KWXP2K3 |
| SeSetAccessStateGenericMapping | NT4W2KWXP2K3 |
| SeSetSecurityDescriptorInfo | NT3NT4W2KWXP2K3 |
| SeSetSecurityDescriptorInfoEx | W2KWXP2K3 |
| SeSinglePrivilegeCheck | NT3NT4W2KWXP2K3 |
| SeSystemDefaultDacl | NT3NT4W2KWXP2K3 |
| SeTokenImpersonationLevel | NT4W2KWXP2K3 |
| SeTokenIsAdmin | W2KWXP2K3 |
| SeTokenIsRestricted | W2KWXP2K3 |
| SeTokenObjectType | WXP2K3 |
| SeTokenType | NT3NT4W2KWXP2K3 |
| SeUnlockSubjectContext | NT3NT4W2KWXP2K3 |
| SeUnregisterLogonSessionTerminatedRoutine | NT4W2KWXP2K3 |
| SeValidSecurityDescriptor | NT3NT4W2KWXP2K3 |
| VerSetConditionMask | W2KWXP2K3 |
| VfFailDeviceNode | WXP2K3 |
| VfFailDriver | WXP2K3 |
| VfFailSystemBIOS | WXP2K3 |
| VfIsVerificationEnabled | WXP2K3 |
| WRITE_REGISTER_BUFFER_UCHAR | NT3NT4W2KWXP2K3 |
| WRITE_REGISTER_BUFFER_ULONG | NT3NT4W2KWXP2K3 |
| WRITE_REGISTER_BUFFER_USHORT | NT3NT4W2KWXP2K3 |
| WRITE_REGISTER_UCHAR | NT3NT4W2KWXP2K3 |
| WRITE_REGISTER_ULONG | NT3NT4W2KWXP2K3 |
| WRITE_REGISTER_USHORT | NT3NT4W2KWXP2K3 |
| WmiFlushTrace | WXP2K3 |
| WmiGetClock | WXP2K3 |
| WmiQueryTrace | WXP2K3 |
| WmiQueryTraceInformation | WXP2K3 |
| WmiStartTrace | WXP2K3 |
| WmiStopTrace | WXP2K3 |
| WmiTraceFastEvent | 2K3 |
| WmiTraceMessage | WXP2K3 |
| WmiTraceMessageVa | WXP2K3 |
| WmiUpdateTrace | WXP2K3 |
| XIPDispatch | WXP2K3 |
| Nt* ZwAcceptConnectPort | NT3NT4W2KWXP2K3 |
| Nt* ZwAccessCheck | NT3NT4W2KWXP2K3 |
| Nt* ZwAccessCheckAndAuditAlarm | NT3NT4W2KWXP2K3 |
| Nt* ZwAccessCheckByType | W2KWXP2K3 |
| Nt* ZwAccessCheckByTypeAndAuditAlarm | W2KWXP2K3 |
| Nt* ZwAccessCheckByTypeResultList | W2KWXP2K3 |
| Nt* ZwAccessCheckByTypeResultListAndAuditAlarm | W2KWXP2K3 |
| Subtotal of the above list: 2000 functions Jump to: Cc, Cm, Csr, Dbg, Etw, Ex, Fs, Hal, Inbv, Interlocked, Io, Kd, Ke, Ki, Ldr, Lpc, Lsa, Mm, Nls, Nt, Ob, Pfx, Po, Ps, Rtl, Se, Vf, Wmi, Zw | |
| Nt* ZwAccessCheckByTypeResultListAndAuditAlarmByHandle | W2KWXP2K3 |
| Nt* ZwAddAtom | NT4W2KWXP2K3 |
| Nt* ZwAddBootEntry | WXP2K3 |
| Nt* ZwAddDriverEntry | 2K3 |
| Nt* ZwAdjustGroupsToken | NT3NT4W2KWXP2K3 |
| Nt* ZwAdjustPrivilegesToken | NT3NT4W2KWXP2K3 |
| Nt* ZwAlertResumeThread | NT3NT4W2KWXP2K3 |
| Nt* ZwAlertThread | NT3NT4W2KWXP2K3 |
| Nt* ZwAllocateLocallyUniqueId | NT3NT4W2KWXP2K3 |
| Nt* ZwAllocateUserPhysicalPages | W2KWXP2K3 |
| Nt* ZwAllocateUuids | NT3NT4W2KWXP2K3 |
| Nt* ZwAllocateVirtualMemory | NT3NT4W2KWXP2K3 |
| Nt* ZwApphelpCacheControl | 2K3 |
| Nt* ZwAreMappedFilesTheSame | W2KWXP2K3 |
| Nt* ZwAssignProcessToJobObject | W2KWXP2K3 |
| Nt* ZwCallbackReturn | NT3NT4W2KWXP2K3 |
| Nt* ZwCancelDeviceWakeupRequest | W2KWXP2K3 |
| Nt* ZwCancelIoFile | NT3NT4W2KWXP2K3 |
| Nt* ZwCancelTimer | NT3NT4W2KWXP2K3 |
| Nt* ZwClearEvent | NT3NT4W2KWXP2K3 |
| Nt* ZwClose | NT3NT4W2KWXP2K3 |
| Nt* ZwCloseObjectAuditAlarm | NT3NT4W2KWXP2K3 |
| Nt* ZwCompactKeys | WXP2K3 |
| Nt* ZwCompareTokens | WXP2K3 |
| Nt* ZwCompleteConnectPort | NT3NT4W2KWXP2K3 |
| Nt* ZwCompressKey | WXP2K3 |
| Nt* ZwConnectPort | NT3NT4W2KWXP2K3 |
| Nt* ZwContinue | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateChannel | NT4W2K |
| Nt* ZwCreateDebugObject | WXP2K3 |
| Nt* ZwCreateDirectoryObject | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateEvent | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateEventPair | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateFile | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateIoCompletion | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateJobObject | W2KWXP2K3 |
| Nt* ZwCreateJobSet | WXP2K3 |
| Nt* ZwCreateKey | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateKeyedEvent | WXP2K3 |
| Nt* ZwCreateMailslotFile | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateMutant | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateNamedPipeFile | NT3NT4W2KWXP2K3 |
| Nt* ZwCreatePagingFile | NT3NT4W2KWXP2K3 |
| Nt* ZwCreatePort | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateProcess | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateProcessEx | WXP2K3 |
| Nt* ZwCreateProfile | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateSection | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateSemaphore | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateSymbolicLinkObject | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateThread | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateTimer | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateToken | NT3NT4W2KWXP2K3 |
| Nt* ZwCreateWaitablePort | W2KWXP2K3 |
| Nt* ZwDebugActiveProcess | WXP2K3 |
| Nt* ZwDebugContinue | WXP2K3 |
| Nt* ZwDelayExecution | NT3NT4W2KWXP2K3 |
| Nt* ZwDeleteAtom | NT4W2KWXP2K3 |
| Nt* ZwDeleteBootEntry | WXP2K3 |
| Nt* ZwDeleteDriverEntry | 2K3 |
| Nt* ZwDeleteFile | NT3NT4W2KWXP2K3 |
| Nt* ZwDeleteKey | NT3NT4W2KWXP2K3 |
| Nt* ZwDeleteObjectAuditAlarm | NT4W2KWXP2K3 |
| Nt* ZwDeleteValueKey | NT3NT4W2KWXP2K3 |
| Nt* ZwDeviceIoControlFile | NT3NT4W2KWXP2K3 |
| Nt* ZwDisplayString | NT3NT4W2KWXP2K3 |
| Nt* ZwDuplicateObject | NT3NT4W2KWXP2K3 |
| Nt* ZwDuplicateToken | NT3NT4W2KWXP2K3 |
| Nt* ZwEnumerateBootEntries | WXP2K3 |
| Nt* ZwEnumerateBus | NT3 |
| Nt* ZwEnumerateDriverEntries | 2K3 |
| Nt* ZwEnumerateKey | NT3NT4W2KWXP2K3 |
| Nt* ZwEnumerateSystemEnvironmentValuesEx | WXP2K3 |
| Nt* ZwEnumerateValueKey | NT3NT4W2KWXP2K3 |
| Nt* ZwExtendSection | NT3NT4W2KWXP2K3 |
| Nt* ZwFilterToken | W2KWXP2K3 |
| Nt* ZwFindAtom | NT4W2KWXP2K3 |
| Nt* ZwFlushBuffersFile | NT3NT4W2KWXP2K3 |
| Nt* ZwFlushInstructionCache | NT3NT4W2KWXP2K3 |
| Nt* ZwFlushKey | NT3NT4W2KWXP2K3 |
| Nt* ZwFlushVirtualMemory | NT3NT4W2KWXP2K3 |
| Nt* ZwFlushWriteBuffer | NT3NT4W2KWXP2K3 |
| Nt* ZwFreeUserPhysicalPages | W2KWXP2K3 |
| Nt* ZwFreeVirtualMemory | NT3NT4W2KWXP2K3 |
| Nt* ZwFsControlFile | NT3NT4W2KWXP2K3 |
| Nt* ZwGetContextThread | NT3NT4W2KWXP2K3 |
| Nt* ZwGetCurrentProcessorNumber | 2K3 |
| Nt* ZwGetDevicePowerState | W2KWXP2K3 |
| Nt* ZwGetPlugPlayEvent | NT3NT4W2KWXP2K3 |
| Nt* ZwGetTickCount | NT3NT4W2K |
| Nt* ZwGetWriteWatch | W2KWXP2K3 |
| Nt* ZwImpersonateAnonymousToken | W2KWXP2K3 |
| Nt* ZwImpersonateClientOfPort | NT3NT4W2KWXP2K3 |
| Nt* ZwImpersonateThread | NT3NT4W2KWXP2K3 |
| Nt* ZwInitializeRegistry | NT3NT4W2KWXP2K3 |
| Nt* ZwInitiatePowerAction | W2KWXP2K3 |
| Nt* ZwIsProcessInJob | WXP2K3 |
| Nt* ZwIsSystemResumeAutomatic | W2KWXP2K3 |
| Nt* ZwListenChannel | NT4W2K |
| Nt* ZwListenPort | NT3NT4W2KWXP2K3 |
| Nt* ZwLoadDriver | NT3NT4W2KWXP2K3 |
| Nt* ZwLoadKey | NT3NT4W2KWXP2K3 |
| Nt* ZwLoadKey2 | NT4W2KWXP2K3 |
| Nt* ZwLoadKeyEx | 2K3 |
| Nt* ZwLockFile | NT3NT4W2KWXP2K3 |
| Nt* ZwLockProductActivationKeys | WXP2K3 |
| Nt* ZwLockRegistryKey | WXP2K3 |
| Nt* ZwLockVirtualMemory | NT3NT4W2KWXP2K3 |
| Nt* ZwMakePermanentObject | WXP2K3 |
| Nt* ZwMakeTemporaryObject | NT3NT4W2KWXP2K3 |
| Nt* ZwMapUserPhysicalPages | W2KWXP2K3 |
| Nt* ZwMapUserPhysicalPagesScatter | W2KWXP2K3 |
| Nt* ZwMapViewOfSection | NT3NT4W2KWXP2K3 |
| Nt* ZwModifyBootEntry | WXP2K3 |
| Nt* ZwModifyDriverEntry | 2K3 |
| Nt* ZwNotifyChangeDirectoryFile | NT3NT4W2KWXP2K3 |
| Nt* ZwNotifyChangeKey | NT3NT4W2KWXP2K3 |
| Nt* ZwNotifyChangeMultipleKeys | W2KWXP2K3 |
| Nt* ZwOpenChannel | NT4W2K |
| Nt* ZwOpenDirectoryObject | NT3NT4W2KWXP2K3 |
| Nt* ZwOpenEvent | NT3NT4W2KWXP2K3 |
| Nt* ZwOpenEventPair | NT3NT4W2KWXP2K3 |
| Nt* ZwOpenFile | NT3NT4W2KWXP2K3 |
| Nt* ZwOpenIoCompletion | NT3NT4W2KWXP2K3 |
| Nt* ZwOpenJobObject | W2KWXP2K3 |
| Nt* ZwOpenKey | NT3NT4W2KWXP2K3 |
| Nt* ZwOpenKeyedEvent | WXP2K3 |
| Nt* ZwOpenMutant | NT3NT4W2KWXP2K3 |
| Nt* ZwOpenObjectAuditAlarm | NT3NT4W2KWXP2K3 |
| Nt* ZwOpenProcess | NT3NT4W2KWXP2K3 |
| Nt* ZwOpenProcessToken | NT3NT4W2KWXP2K3 |
| Nt* ZwOpenProcessTokenEx | WXP2K3 |
| Nt* ZwOpenSection | NT3NT4W2KWXP2K3 |
| Nt* ZwOpenSemaphore | NT3NT4W2KWXP2K3 |
| Nt* ZwOpenSymbolicLinkObject | NT3NT4W2KWXP2K3 |
| Nt* ZwOpenThread | NT3NT4W2KWXP2K3 |
| Nt* ZwOpenThreadToken | NT3NT4W2KWXP2K3 |
| Nt* ZwOpenThreadTokenEx | WXP2K3 |
| Nt* ZwOpenTimer | NT3NT4W2KWXP2K3 |
| Nt* ZwPlugPlayControl | NT3NT4W2KWXP2K3 |
| Nt* ZwPowerInformation | W2KWXP2K3 |
| Nt* ZwPrivilegeCheck | NT3NT4W2KWXP2K3 |
| Nt* ZwPrivilegeObjectAuditAlarm | NT3NT4W2KWXP2K3 |
| Nt* ZwPrivilegedServiceAuditAlarm | NT3NT4W2KWXP2K3 |
| Nt* ZwProtectVirtualMemory | NT3NT4W2KWXP2K3 |
| Nt* ZwPulseEvent | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryAttributesFile | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryBootEntryOrder | WXP2K3 |
| Nt* ZwQueryBootOptions | WXP2K3 |
| Nt* ZwQueryDebugFilterState | WXP2K3 |
| Nt* ZwQueryDefaultLocale | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryDefaultUILanguage | W2KWXP2K3 |
| Nt* ZwQueryDirectoryFile | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryDirectoryObject | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryDriverEntryOrder | 2K3 |
| Nt* ZwQueryEaFile | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryEvent | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryFullAttributesFile | NT4W2KWXP2K3 |
| Nt* ZwQueryInformationAtom | NT4W2KWXP2K3 |
| Nt* ZwQueryInformationFile | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryInformationJobObject | W2KWXP2K3 |
| Nt* ZwQueryInformationPort | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryInformationProcess | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryInformationThread | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryInformationToken | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryInstallUILanguage | W2KWXP2K3 |
| Nt* ZwQueryIntervalProfile | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryIoCompletion | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryKey | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryMultipleValueKey | NT4W2KWXP2K3 |
| Nt* ZwQueryMutant | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryObject | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryOleDirectoryFile | NT4 |
| Nt* ZwQueryOpenSubKeys | W2KWXP2K3 |
| Nt* ZwQueryOpenSubKeysEx | 2K3 |
| Nt* ZwQueryPerformanceCounter | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryPortInformationProcess | WXP2K3 |
| Nt* ZwQueryQuotaInformationFile | W2KWXP2K3 |
| Nt* ZwQuerySection | NT3NT4W2KWXP2K3 |
| Nt* ZwQuerySecurityObject | NT3NT4W2KWXP2K3 |
| Nt* ZwQuerySemaphore | NT3NT4W2KWXP2K3 |
| Nt* ZwQuerySymbolicLinkObject | NT3NT4W2KWXP2K3 |
| Nt* ZwQuerySystemEnvironmentValue | NT3NT4W2KWXP2K3 |
| Nt* ZwQuerySystemEnvironmentValueEx | WXP2K3 |
| Nt* ZwQuerySystemInformation | NT3NT4W2KWXP2K3 |
| Nt* ZwQuerySystemTime | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryTimer | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryTimerResolution | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryValueKey | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryVirtualMemory | NT3NT4W2KWXP2K3 |
| Nt* ZwQueryVolumeInformationFile | NT3NT4W2KWXP2K3 |
| Nt* ZwQueueApcThread | NT4W2KWXP2K3 |
| Nt* ZwRaiseException | NT3NT4W2KWXP2K3 |
| Nt* ZwRaiseHardError | NT3NT4W2KWXP2K3 |
| Nt* ZwReadFile | NT3NT4W2KWXP2K3 |
| Nt* ZwReadFileScatter | NT4W2KWXP2K3 |
| Nt* ZwReadRequestData | NT3NT4W2KWXP2K3 |
| Nt* ZwReadVirtualMemory | NT3NT4W2KWXP2K3 |
| Nt* ZwRegisterNewDevice | NT3 |
| Nt* ZwRegisterThreadTerminatePort | NT3NT4W2KWXP2K3 |
| Subtotal of the above list: 2200 functions Jump to: Cc, Cm, Csr, Dbg, Etw, Ex, Fs, Hal, Inbv, Interlocked, Io, Kd, Ke, Ki, Ldr, Lpc, Lsa, Mm, Nls, Nt, Ob, Pfx, Po, Ps, Rtl, Se, Vf, Wmi, Zw | |
| Nt* ZwReleaseKeyedEvent | WXP2K3 |
| Nt* ZwReleaseMutant | NT3NT4W2KWXP2K3 |
| Nt* ZwReleaseProcessMutant | NT3 |
| Nt* ZwReleaseSemaphore | NT3NT4W2KWXP2K3 |
| Nt* ZwRemoveIoCompletion | NT3NT4W2KWXP2K3 |
| Nt* ZwRemoveProcessDebug | WXP2K3 |
| Nt* ZwRenameKey | WXP2K3 |
| Nt* ZwReplaceKey | NT3NT4W2KWXP2K3 |
| Nt* ZwReplyPort | NT3NT4W2KWXP2K3 |
| Nt* ZwReplyWaitReceivePort | NT3NT4W2KWXP2K3 |
| Nt* ZwReplyWaitReceivePortEx | W2KWXP2K3 |
| Nt* ZwReplyWaitReplyPort | NT3NT4W2KWXP2K3 |
| Nt* ZwReplyWaitSendChannel | NT4W2K |
| Nt* ZwRequestDeviceWakeup | W2KWXP2K3 |
| Nt* ZwRequestPort | NT3NT4W2KWXP2K3 |
| Nt* ZwRequestWaitReplyPort | NT3NT4W2KWXP2K3 |
| Nt* ZwRequestWakeupLatency | W2KWXP2K3 |
| Nt* ZwResetEvent | NT3NT4W2KWXP2K3 |
| Nt* ZwResetWriteWatch | W2KWXP2K3 |
| Nt* ZwRestoreKey | NT3NT4W2KWXP2K3 |
| Nt* ZwResumeProcess | WXP2K3 |
| Nt* ZwResumeThread | NT3NT4W2KWXP2K3 |
| Nt* ZwSaveKey | NT3NT4W2KWXP2K3 |
| Nt* ZwSaveKeyEx | WXP2K3 |
| Nt* ZwSaveMergedKeys | W2KWXP2K3 |
| Nt* ZwSecureConnectPort | W2KWXP |