List of all items

Structs

• bitfield::ArrayField
• bitfield::BitfieldUnit
• bitfield::UnionField
• ntbcd::BCD_ELEMENT
• ntbcd::BCD_ELEMENT_BOOLEAN
• ntbcd::BCD_ELEMENT_DATATYPE
• ntbcd::BCD_ELEMENT_DATATYPE_1
• ntbcd::BCD_ELEMENT_DESCRIPTION
• ntbcd::BCD_ELEMENT_DEVICE
• ntbcd::BCD_ELEMENT_DEVICE_1
• ntbcd::BCD_ELEMENT_DEVICE_1_1
• ntbcd::BCD_ELEMENT_DEVICE_1_2
• ntbcd::BCD_ELEMENT_DEVICE_1_3
• ntbcd::BCD_ELEMENT_DEVICE_1_4
• ntbcd::BCD_ELEMENT_DEVICE_1_5
• ntbcd::BCD_ELEMENT_DEVICE_QUALIFIED_PARTITION
• ntbcd::BCD_ELEMENT_DEVICE_QUALIFIED_PARTITION_1
• ntbcd::BCD_ELEMENT_DEVICE_QUALIFIED_PARTITION_1_1
• ntbcd::BCD_ELEMENT_DEVICE_QUALIFIED_PARTITION_1_2
• ntbcd::BCD_ELEMENT_INTEGER
• ntbcd::BCD_ELEMENT_INTEGER_LIST
• ntbcd::BCD_ELEMENT_OBJECT
• ntbcd::BCD_ELEMENT_OBJECT_LIST
• ntbcd::BCD_ELEMENT_STRING
• ntbcd::BCD_OBJECT
• ntbcd::BCD_OBJECT_DATATYPE
• ntbcd::BCD_OBJECT_DATATYPE_1
• ntbcd::BCD_OBJECT_DATATYPE_1_1
• ntbcd::BCD_OBJECT_DATATYPE_1_2
• ntbcd::BCD_OBJECT_DATATYPE_1_3
• ntbcd::BCD_OBJECT_DATATYPE_1_4
• ntbcd::BCD_OBJECT_DESCRIPTION
• ntdbg::DBGKM_CREATE_PROCESS
• ntdbg::DBGKM_CREATE_THREAD
• ntdbg::DBGKM_EXCEPTION
• ntdbg::DBGKM_EXIT_PROCESS
• ntdbg::DBGKM_EXIT_THREAD
• ntdbg::DBGKM_LOAD_DLL
• ntdbg::DBGKM_UNLOAD_DLL
• ntdbg::DBGUI_CREATE_PROCESS
• ntdbg::DBGUI_CREATE_THREAD
• ntdbg::DBGUI_WAIT_STATE_CHANGE
• ntdbg::DBGUI_WAIT_STATE_CHANGE_1
• ntexapi::ATOM_BASIC_INFORMATION
• ntexapi::ATOM_TABLE_INFORMATION
• ntexapi::BOOT_ENTRY
• ntexapi::BOOT_ENTRY_LIST
• ntexapi::BOOT_OPTIONS
• ntexapi::COVERAGE_MODULES
• ntexapi::COVERAGE_MODULE_INFO
• ntexapi::COVERAGE_MODULE_REQUEST
• ntexapi::COVERAGE_MODULE_REQUEST_1
• ntexapi::EFI_DRIVER_ENTRY
• ntexapi::EFI_DRIVER_ENTRY_LIST
• ntexapi::ENERGY_STATE_DURATION
• ntexapi::ENERGY_STATE_DURATION_1
• ntexapi::ETW_STACK_CACHING_CONFIG
• ntexapi::EVENT_BASIC_INFORMATION
• ntexapi::EVENT_TRACE_COVERAGE_SAMPLER_INFORMATION
• ntexapi::EVENT_TRACE_EXECUTIVE_RESOURCE_INFORMATION
• ntexapi::EVENT_TRACE_GROUPMASK_INFORMATION
• ntexapi::EVENT_TRACE_HEAP_TRACING_INFORMATION
• ntexapi::EVENT_TRACE_PERFORMANCE_INFORMATION
• ntexapi::EVENT_TRACE_PROFILE_ADD_INFORMATION
• ntexapi::EVENT_TRACE_PROFILE_COUNTER_INFORMATION
• ntexapi::EVENT_TRACE_PROFILE_LIST_INFORMATION
• ntexapi::EVENT_TRACE_PROFILE_REMOVE_INFORMATION
• ntexapi::EVENT_TRACE_SESSION_SECURITY_INFORMATION
• ntexapi::EVENT_TRACE_SOFT_RESTART_INFORMATION
• ntexapi::EVENT_TRACE_SPINLOCK_INFORMATION
• ntexapi::EVENT_TRACE_STACK_CACHING_INFORMATION
• ntexapi::EVENT_TRACE_SYSTEM_EVENT_INFORMATION
• ntexapi::EVENT_TRACE_TAG_FILTER_INFORMATION
• ntexapi::EVENT_TRACE_TIME_PROFILE_INFORMATION
• ntexapi::EVENT_TRACE_VERSION_INFORMATION
• ntexapi::FILE_PATH
• ntexapi::HV_DETAILS
• ntexapi::HV_MINROOT_NUMA_LPS
• ntexapi::MEMORY_COMBINE_INFORMATION
• ntexapi::MEMORY_COMBINE_INFORMATION_EX
• ntexapi::MEMORY_COMBINE_INFORMATION_EX2
• ntexapi::MEMORY_SCRUB_INFORMATION
• ntexapi::MUTANT_BASIC_INFORMATION
• ntexapi::MUTANT_OWNER_INFORMATION
• ntexapi::OFFLINE_CRASHDUMP_CONFIGURATION_TABLE_V1
• ntexapi::OFFLINE_CRASHDUMP_CONFIGURATION_TABLE_V2
• ntexapi::PEBS_DS_SAVE_AREA
• ntexapi::PEBS_DS_SAVE_AREA32
• ntexapi::PEBS_DS_SAVE_AREA64
• ntexapi::PERFINFO_GROUPMASK
• ntexapi::PHYSICAL_CHANNEL_RUN
• ntexapi::PROCESSOR_PROFILE_CONTROL_AREA
• ntexapi::PROCESS_DISK_COUNTERS
• ntexapi::PROCESS_ENERGY_VALUES
• ntexapi::PROCESS_ENERGY_VALUES_1
• ntexapi::PROCESS_ENERGY_VALUES_1_1
• ntexapi::PROCESS_ENERGY_VALUES_EXTENSION
• ntexapi::PROCESS_ENERGY_VALUES_EXTENSION_1
• ntexapi::PROCESS_ENERGY_VALUES_EXTENSION_1_1
• ntexapi::PROCESS_ENERGY_VALUES_EXTENSION_2
• ntexapi::PROCESS_ENERGY_VALUES_EXTENSION_2_1
• ntexapi::PROCESS_EXTENDED_ENERGY_VALUES
• ntexapi::PS_CPU_QUOTA_QUERY_ENTRY
• ntexapi::PS_CPU_QUOTA_QUERY_INFORMATION
• ntexapi::QUERY_PERFORMANCE_COUNTER_FLAGS
• ntexapi::QUERY_PERFORMANCE_COUNTER_FLAGS_1
• ntexapi::QUERY_PERFORMANCE_COUNTER_FLAGS_1_1
• ntexapi::RTL_FEATURE_USAGE_SUBSCRIPTION_TARGET
• ntexapi::RTL_PROCESS_BACKTRACES
• ntexapi::RTL_PROCESS_BACKTRACE_INFORMATION
• ntexapi::RTL_PROCESS_LOCKS
• ntexapi::RTL_PROCESS_LOCK_INFORMATION
• ntexapi::SEMAPHORE_BASIC_INFORMATION
• ntexapi::SMC_CACHE_CREATE_PARAMETERS
• ntexapi::SMC_CACHE_CREATE_REQUEST
• ntexapi::SMC_CACHE_DELETE_REQUEST
• ntexapi::SMC_CACHE_LIST_REQUEST
• ntexapi::SMC_CACHE_PARAMETERS
• ntexapi::SMC_CACHE_STATS
• ntexapi::SMC_CACHE_STATS_REQUEST
• ntexapi::SMC_STORE_CREATE_REQUEST
• ntexapi::SMC_STORE_DELETE_REQUEST
• ntexapi::SMC_STORE_RESIZE_REQUEST
• ntexapi::SMKM_FILE_INFO
• ntexapi::SMKM_REGION_EXTENT
• ntexapi::SM_CONFIG_REQUEST
• ntexapi::SM_CREATE_REQUEST
• ntexapi::SM_DELETE_REQUEST
• ntexapi::SM_MEM_COMPRESSION_INFO_REQUEST
• ntexapi::SM_REGISTRATION_INFO
• ntexapi::SM_REGISTRATION_REQUEST
• ntexapi::SM_STATS_REQUEST
• ntexapi::SM_STORE_BASIC_PARAMS
• ntexapi::SM_STORE_BASIC_PARAMS_1
• ntexapi::SM_STORE_BASIC_PARAMS_1_1
• ntexapi::SM_STORE_CACHE_BACKED_PARAMS
• ntexapi::SM_STORE_HIGH_MEM_PRIORITY_REQUEST
• ntexapi::SM_STORE_LIST_REQUEST
• ntexapi::SM_STORE_LIST_REQUEST_EX
• ntexapi::SM_STORE_PARAMETERS
• ntexapi::SM_STORE_RESIZE_REQUEST
• ntexapi::SM_SYSTEM_STORE_TRIM_REQUEST
• ntexapi::ST_DATA_MGR_STATS
• ntexapi::ST_DATA_MGR_STATS_1
• ntexapi::ST_IO_STATS
• ntexapi::ST_IO_STATS_PERIOD
• ntexapi::ST_READ_LATENCY_BUCKET
• ntexapi::ST_READ_LATENCY_STATS
• ntexapi::ST_STATS
• ntexapi::ST_STATS_1
• ntexapi::ST_STATS_2
• ntexapi::ST_STATS_REGION_INFO
• ntexapi::ST_STATS_SPACE_BITMAP
• ntexapi::SYSDBG_BUS_DATA
• ntexapi::SYSDBG_CONTROL_SPACE
• ntexapi::SYSDBG_IO_SPACE
• ntexapi::SYSDBG_KD_PULL_REMOTE_FILE
• ntexapi::SYSDBG_LIVEDUMP_CONTROL
• ntexapi::SYSDBG_LIVEDUMP_CONTROL_ADDPAGES
• ntexapi::SYSDBG_LIVEDUMP_CONTROL_ADDPAGES_1
• ntexapi::SYSDBG_LIVEDUMP_CONTROL_FLAGS
• ntexapi::SYSDBG_LIVEDUMP_CONTROL_FLAGS_1
• ntexapi::SYSDBG_LIVEDUMP_SELECTIVE_CONTROL
• ntexapi::SYSDBG_LIVEDUMP_SELECTIVE_CONTROL_1
• ntexapi::SYSDBG_LIVEDUMP_SELECTIVE_CONTROL_1_1
• ntexapi::SYSDBG_MSR
• ntexapi::SYSDBG_PHYSICAL
• ntexapi::SYSDBG_TRIAGE_DUMP
• ntexapi::SYSDBG_VIRTUAL
• ntexapi::SYSTEM_ACPI_AUDIT_INFORMATION
• ntexapi::SYSTEM_ACTIVITY_MODERATION_EXE_STATE
• ntexapi::SYSTEM_ACTIVITY_MODERATION_INFO
• ntexapi::SYSTEM_ACTIVITY_MODERATION_USER_SETTINGS
• ntexapi::SYSTEM_BASIC_INFORMATION
• ntexapi::SYSTEM_BASIC_PERFORMANCE_INFORMATION
• ntexapi::SYSTEM_BASIC_WORKING_SET_INFORMATION
• ntexapi::SYSTEM_BIGPOOL_ENTRY
• ntexapi::SYSTEM_BIGPOOL_ENTRY_1
• ntexapi::SYSTEM_BIGPOOL_ENTRY_2
• ntexapi::SYSTEM_BIGPOOL_INFORMATION
• ntexapi::SYSTEM_BOOT_ENVIRONMENT_INFORMATION
• ntexapi::SYSTEM_BOOT_ENVIRONMENT_INFORMATION_1
• ntexapi::SYSTEM_BOOT_ENVIRONMENT_INFORMATION_1_1
• ntexapi::SYSTEM_BOOT_GRAPHICS_INFORMATION
• ntexapi::SYSTEM_BOOT_LOGO_INFORMATION
• ntexapi::SYSTEM_BUILD_VERSION_INFORMATION
• ntexapi::SYSTEM_BUILD_VERSION_INFORMATION_FLAGS
• ntexapi::SYSTEM_BUILD_VERSION_INFORMATION_FLAGS_1
• ntexapi::SYSTEM_CALL_COUNT_INFORMATION
• ntexapi::SYSTEM_CALL_TIME_INFORMATION
• ntexapi::SYSTEM_CODEINTEGRITYPOLICY_INFORMATION
• ntexapi::SYSTEM_CODEINTEGRITYVERIFICATION_INFORMATION
• ntexapi::SYSTEM_CODEINTEGRITY_CERTIFICATE_INFORMATION
• ntexapi::SYSTEM_CODEINTEGRITY_UNLOCK_INFORMATION
• ntexapi::SYSTEM_CODEINTEGRITY_UNLOCK_INFORMATION_1
• ntexapi::SYSTEM_CODEINTEGRITY_UNLOCK_INFORMATION_1_1
• ntexapi::SYSTEM_CONSOLE_INFORMATION
• ntexapi::SYSTEM_CONTEXT_SWITCH_INFORMATION
• ntexapi::SYSTEM_CPU_SET_TAG_INFORMATION
• ntexapi::SYSTEM_CRASH_DUMP_STATE_INFORMATION
• ntexapi::SYSTEM_DEVICE_DATA_INFORMATION
• ntexapi::SYSTEM_DEVICE_INFORMATION
• ntexapi::SYSTEM_DMA_GUARD_POLICY_INFORMATION
• ntexapi::SYSTEM_DPC_BEHAVIOR_INFORMATION
• ntexapi::SYSTEM_EDID_INFORMATION
• ntexapi::SYSTEM_ELAM_CERTIFICATE_INFORMATION
• ntexapi::SYSTEM_ENCLAVE_LAUNCH_CONTROL_INFORMATION
• ntexapi::SYSTEM_ENERGY_ESTIMATION_CONFIG_INFORMATION
• ntexapi::SYSTEM_ENTROPY_TIMING_INFORMATION
• ntexapi::SYSTEM_ERROR_PORT_TIMEOUTS
• ntexapi::SYSTEM_EXCEPTION_INFORMATION
• ntexapi::SYSTEM_EXTENDED_THREAD_INFORMATION
• ntexapi::SYSTEM_FEATURE_CONFIGURATION_INFORMATION
• ntexapi::SYSTEM_FEATURE_CONFIGURATION_SECTIONS_INFORMATION
• ntexapi::SYSTEM_FEATURE_CONFIGURATION_SECTIONS_INFORMATION_ENTRY
• ntexapi::SYSTEM_FEATURE_USAGE_SUBSCRIPTION_DETAILS
• ntexapi::SYSTEM_FILECACHE_INFORMATION
• ntexapi::SYSTEM_FIRMWARE_PARTITION_INFORMATION
• ntexapi::SYSTEM_FIRMWARE_RAMDISK_INFORMATION
• ntexapi::SYSTEM_FLAGS_INFORMATION
• ntexapi::SYSTEM_FLUSH_INFORMATION
• ntexapi::SYSTEM_GDI_DRIVER_INFORMATION
• ntexapi::SYSTEM_HANDLE_INFORMATION
• ntexapi::SYSTEM_HANDLE_INFORMATION_EX
• ntexapi::SYSTEM_HANDLE_TABLE_ENTRY_INFO
• ntexapi::SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX
• ntexapi::SYSTEM_HYPERVISOR_BOOT_PAGES_INFORMATION
• ntexapi::SYSTEM_HYPERVISOR_DETAIL_INFORMATION
• ntexapi::SYSTEM_HYPERVISOR_MINROOT_INFORMATION
• ntexapi::SYSTEM_HYPERVISOR_PROCESSOR_COUNT_INFORMATION
• ntexapi::SYSTEM_HYPERVISOR_QUERY_INFORMATION
• ntexapi::SYSTEM_HYPERVISOR_SHARED_PAGE_INFORMATION
• ntexapi::SYSTEM_IMAGE_FILE_EXECUTION_OPTIONS_INFORMATION
• ntexapi::SYSTEM_INTERRUPT_CPU_SET_INFORMATION
• ntexapi::SYSTEM_INTERRUPT_INFORMATION
• ntexapi::SYSTEM_INTERRUPT_STEERING_INFORMATION_INPUT
• ntexapi::SYSTEM_INTERRUPT_STEERING_INFORMATION_OUTPUT
• ntexapi::SYSTEM_INTERRUPT_STEERING_INFORMATION_OUTPUT_1
• ntexapi::SYSTEM_IOMMU_STATE_INFORMATION
• ntexapi::SYSTEM_ISOLATED_USER_MODE_INFORMATION
• ntexapi::SYSTEM_KERNEL_DEBUGGER_FLAGS
• ntexapi::SYSTEM_KERNEL_DEBUGGER_INFORMATION
• ntexapi::SYSTEM_KERNEL_DEBUGGER_INFORMATION_EX
• ntexapi::SYSTEM_KERNEL_VA_SHADOW_INFORMATION
• ntexapi::SYSTEM_KERNEL_VA_SHADOW_INFORMATION_1
• ntexapi::SYSTEM_KERNEL_VA_SHADOW_INFORMATION_1_1
• ntexapi::SYSTEM_LEGACY_DRIVER_INFORMATION
• ntexapi::SYSTEM_LOOKASIDE_INFORMATION
• ntexapi::SYSTEM_LOW_PRIORITY_IO_INFORMATION
• ntexapi::SYSTEM_MANUFACTURING_INFORMATION
• ntexapi::SYSTEM_MEMORY_CHANNEL_INFORMATION
• ntexapi::SYSTEM_MEMORY_LIST_INFORMATION
• ntexapi::SYSTEM_MEMORY_TOPOLOGY_INFORMATION
• ntexapi::SYSTEM_MEMORY_USAGE_INFORMATION
• ntexapi::SYSTEM_NUMA_INFORMATION
• ntexapi::SYSTEM_NUMA_INFORMATION_1
• ntexapi::SYSTEM_NUMA_PROXIMITY_MAP
• ntexapi::SYSTEM_OBJECTTYPE_INFORMATION
• ntexapi::SYSTEM_OBJECT_INFORMATION
• ntexapi::SYSTEM_ORIGINAL_IMAGE_FEATURE_INFORMATION_INPUT
• ntexapi::SYSTEM_ORIGINAL_IMAGE_FEATURE_INFORMATION_OUTPUT
• ntexapi::SYSTEM_PAGEFILE_INFORMATION
• ntexapi::SYSTEM_PAGEFILE_INFORMATION_EX
• ntexapi::SYSTEM_PAGEFILE_INFORMATION_EX_1
• ntexapi::SYSTEM_PAGEFILE_INFORMATION_EX_1_1
• ntexapi::SYSTEM_PERFORMANCE_INFORMATION
• ntexapi::SYSTEM_PHYSICAL_MEMORY_INFORMATION
• ntexapi::SYSTEM_PLATFORM_BINARY_INFORMATION
• ntexapi::SYSTEM_POINTER_AUTH_INFORMATION
• ntexapi::SYSTEM_POINTER_AUTH_INFORMATION_1
• ntexapi::SYSTEM_POINTER_AUTH_INFORMATION_1_1
• ntexapi::SYSTEM_POINTER_AUTH_INFORMATION_2
• ntexapi::SYSTEM_POINTER_AUTH_INFORMATION_2_1
• ntexapi::SYSTEM_POLICY_INFORMATION
• ntexapi::SYSTEM_POOLTAG
• ntexapi::SYSTEM_POOLTAG_1
• ntexapi::SYSTEM_POOLTAG_INFORMATION
• ntexapi::SYSTEM_POOL_ENTRY
• ntexapi::SYSTEM_POOL_ENTRY_1
• ntexapi::SYSTEM_POOL_INFORMATION
• ntexapi::SYSTEM_POOL_LIMIT_INFO
• ntexapi::SYSTEM_POOL_LIMIT_INFORMATION
• ntexapi::SYSTEM_POOL_LIMIT_MEM_INFO
• ntexapi::SYSTEM_PORTABLE_WORKSPACE_EFI_LAUNCHER_INFORMATION
• ntexapi::SYSTEM_PREFETCH_PATCH_INFORMATION
• ntexapi::SYSTEM_PROCESSOR_CYCLE_STATS_INFORMATION
• ntexapi::SYSTEM_PROCESSOR_FEATURES_INFORMATION
• ntexapi::SYSTEM_PROCESSOR_IDLE_CYCLE_TIME_INFORMATION
• ntexapi::SYSTEM_PROCESSOR_IDLE_INFORMATION
• ntexapi::SYSTEM_PROCESSOR_INFORMATION
• ntexapi::SYSTEM_PROCESSOR_MICROCODE_UPDATE_INFORMATION
• ntexapi::SYSTEM_PROCESSOR_PERFORMANCE_DISTRIBUTION
• ntexapi::SYSTEM_PROCESSOR_PERFORMANCE_HITCOUNT
• ntexapi::SYSTEM_PROCESSOR_PERFORMANCE_HITCOUNT_WIN8
• ntexapi::SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
• ntexapi::SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION_EX
• ntexapi::SYSTEM_PROCESSOR_PERFORMANCE_STATE_DISTRIBUTION
• ntexapi::SYSTEM_PROCESSOR_POWER_INFORMATION
• ntexapi::SYSTEM_PROCESSOR_PROFILE_CONTROL_AREA
• ntexapi::SYSTEM_PROCESS_ID_INFORMATION
• ntexapi::SYSTEM_PROCESS_INFORMATION
• ntexapi::SYSTEM_PROCESS_INFORMATION_EXTENSION
• ntexapi::SYSTEM_PROCESS_INFORMATION_EXTENSION_1
• ntexapi::SYSTEM_PROCESS_INFORMATION_EXTENSION_1_1
• ntexapi::SYSTEM_QUERY_PERFORMANCE_COUNTER_INFORMATION
• ntexapi::SYSTEM_QUERY_TIME_ADJUST_INFORMATION
• ntexapi::SYSTEM_QUERY_TIME_ADJUST_INFORMATION_PRECISE
• ntexapi::SYSTEM_RANGE_START_INFORMATION
• ntexapi::SYSTEM_REF_TRACE_INFORMATION
• ntexapi::SYSTEM_REGISTRY_APPEND_STRING_PARAMETERS
• ntexapi::SYSTEM_REGISTRY_QUOTA_INFORMATION
• ntexapi::SYSTEM_ROOT_SILO_INFORMATION
• ntexapi::SYSTEM_SECUREBOOT_INFORMATION
• ntexapi::SYSTEM_SECUREBOOT_PLATFORM_MANIFEST_INFORMATION
• ntexapi::SYSTEM_SECUREBOOT_POLICY_FULL_INFORMATION
• ntexapi::SYSTEM_SECUREBOOT_POLICY_INFORMATION
• ntexapi::SYSTEM_SECURE_KERNEL_HYPERGUARD_PROFILE_INFORMATION
• ntexapi::SYSTEM_SECURITY_MODEL_INFORMATION
• ntexapi::SYSTEM_SECURITY_MODEL_INFORMATION_1
• ntexapi::SYSTEM_SECURITY_MODEL_INFORMATION_1_1
• ntexapi::SYSTEM_SESSION_MAPPED_VIEW_INFORMATION
• ntexapi::SYSTEM_SESSION_POOLTAG_INFORMATION
• ntexapi::SYSTEM_SESSION_PROCESS_INFORMATION
• ntexapi::SYSTEM_SET_TIME_ADJUST_INFORMATION
• ntexapi::SYSTEM_SET_TIME_ADJUST_INFORMATION_PRECISE
• ntexapi::SYSTEM_SHADOW_STACK_INFORMATION
• ntexapi::SYSTEM_SHADOW_STACK_INFORMATION_1
• ntexapi::SYSTEM_SHADOW_STACK_INFORMATION_1_1
• ntexapi::SYSTEM_SINGLE_MODULE_INFORMATION
• ntexapi::SYSTEM_SPECIAL_POOL_INFORMATION
• ntexapi::SYSTEM_SPECULATION_CONTROL_INFORMATION
• ntexapi::SYSTEM_SPECULATION_CONTROL_INFORMATION_1
• ntexapi::SYSTEM_SPECULATION_CONTROL_INFORMATION_1_1
• ntexapi::SYSTEM_SPECULATION_CONTROL_INFORMATION_2
• ntexapi::SYSTEM_SPECULATION_CONTROL_INFORMATION_2_1
• ntexapi::SYSTEM_STORE_INFORMATION
• ntexapi::SYSTEM_SYSTEM_DISK_INFORMATION
• ntexapi::SYSTEM_SYSTEM_PARTITION_INFORMATION
• ntexapi::SYSTEM_THREAD_CID_PRIORITY_INFORMATION
• ntexapi::SYSTEM_THREAD_INFORMATION
• ntexapi::SYSTEM_TIMEOFDAY_INFORMATION
• ntexapi::SYSTEM_TPM_INFORMATION
• ntexapi::SYSTEM_VA_LIST_INFORMATION
• ntexapi::SYSTEM_VDM_INSTEMUL_INFO
• ntexapi::SYSTEM_VERIFIER_CANCELLATION_INFORMATION
• ntexapi::SYSTEM_VERIFIER_COUNTERS_INFORMATION
• ntexapi::SYSTEM_VERIFIER_FAULTS_INFORMATION
• ntexapi::SYSTEM_VERIFIER_INFORMATION
• ntexapi::SYSTEM_VERIFIER_INFORMATION_EX
• ntexapi::SYSTEM_VERIFIER_INFORMATION_LEGACY
• ntexapi::SYSTEM_VERIFIER_ISSUE
• ntexapi::SYSTEM_VHD_BOOT_INFORMATION
• ntexapi::SYSTEM_VSM_PROTECTION_INFORMATION
• ntexapi::SYSTEM_WATCHDOG_HANDLER_INFORMATION
• ntexapi::SYSTEM_WATCHDOG_TIMER_INFORMATION
• ntexapi::SYSTEM_WORKLOAD_ALLOWED_CPU_SET_INFORMATION
• ntexapi::SYSTEM_WRITE_CONSTRAINT_INFORMATION
• ntexapi::SYSTEM_XFG_FAILURE_INFORMATION
• ntexapi::T2_SET_PARAMETERS
• ntexapi::TIMELINE_BITMAP
• ntexapi::TIMELINE_BITMAP_1
• ntexapi::TIMER_BASIC_INFORMATION
• ntexapi::TPM_BOOT_ENTROPY_NT_RESULT
• ntexapi::TRACE_ENABLE_FLAG_EXTENSION
• ntexapi::TRACE_ENABLE_FLAG_EXT_HEADER
• ntexapi::TRACE_ENABLE_FLAG_EXT_ITEM
• ntexapi::VARIABLE_NAME
• ntexapi::VARIABLE_NAME_AND_VALUE
• ntexapi::WNF_DELIVERY_DESCRIPTOR
• ntexapi::WNF_TYPE_ID
• ntexapi::WORKER_FACTORY_BASIC_INFORMATION
• ntexapi::WORKER_FACTORY_DEFERRED_WORK
• ntgdi::GDI_HANDLE_ENTRY
• ntgdi::GDI_HANDLE_ENTRY_1
• ntgdi::GDI_HANDLE_ENTRY_2
• ntgdi::GDI_HANDLE_ENTRY_2_1
• ntgdi::GDI_SHARED_MEMORY
• ntimage::IMAGE_ARM64EC_CODE_RANGE_ENTRY_POINT
• ntimage::IMAGE_ARM64EC_METADATA
• ntimage::IMAGE_ARM64EC_REDIRECTION_ENTRY
• ntimage::IMAGE_CHPE_METADATA_X86
• ntimage::IMAGE_CHPE_RANGE_ENTRY
• ntimage::IMAGE_CHPE_RANGE_ENTRY_1
• ntimage::IMAGE_CHPE_RANGE_ENTRY_1_1
• ntimage::IMAGE_DEBUG_POGO_ENTRY
• ntimage::IMAGE_DEBUG_POGO_SIGNATURE
• ntimage::IMAGE_DVRT_ARM64X_DELTA_FIXUP_RECORD
• ntimage::IMAGE_DVRT_ARM64X_FIXUP_RECORD
• ntimage::IMAGE_RELOCATION_RECORD
• ntioapi::FILE_DIRECTORY_NEXT_INFORMATION
• ntioapi::FILE_INTEGRITY_STREAM_INFORMATION
• ntioapi::FILE_INTERNAL_INFORMATION
• ntioapi::FILE_INTERNAL_INFORMATION_1
• ntioapi::FILE_INTERNAL_INFORMATION_1_1
• ntioapi::FILE_IO_COMPLETION_INFORMATION
• ntioapi::FILE_LINK_INFORMATION_EX
• ntioapi::FILE_MAILSLOT_PEEK_BUFFER
• ntioapi::FILE_POSITION_INFORMATION
• ntioapi::FILE_QUOTA_INFORMATION
• ntioapi::FILE_RENAME_INFORMATION_EX
• ntioapi::IO_COMPLETION_BASIC_INFORMATION
• ntioapi::MOUNTDEV_NAME
• ntioapi::MOUNTMGR_CHANGE_NOTIFY_INFO
• ntioapi::MOUNTMGR_CREATE_POINT_INPUT
• ntioapi::MOUNTMGR_DRIVE_LETTER_INFORMATION
• ntioapi::MOUNTMGR_DRIVE_LETTER_TARGET
• ntioapi::MOUNTMGR_MOUNT_POINT
• ntioapi::MOUNTMGR_MOUNT_POINTS
• ntioapi::MOUNTMGR_QUERY_AUTO_MOUNT
• ntioapi::MOUNTMGR_SET_AUTO_MOUNT
• ntioapi::MOUNTMGR_SILO_ARRIVAL_INPUT
• ntioapi::MOUNTMGR_TARGET_NAME
• ntioapi::MOUNTMGR_VOLUME_MOUNT_POINT
• ntioapi::MOUNTMGR_VOLUME_PATHS
• ntldr::LDRP_CSLIST
• ntldr::LDRP_LOAD_CONTEXT
• ntldr::LDR_DATA_TABLE_ENTRY
• ntldr::LDR_DATA_TABLE_ENTRY_1
• ntldr::LDR_DATA_TABLE_ENTRY_2
• ntldr::LDR_DATA_TABLE_ENTRY_2_1
• ntldr::LDR_DDAG_NODE
• ntldr::LDR_DDAG_NODE_1
• ntldr::LDR_DEPENDENCY_RECORD
• ntldr::LDR_DLL_LOADED_NOTIFICATION_DATA
• ntldr::LDR_DLL_NOTIFICATION_DATA
• ntldr::LDR_DLL_UNLOADED_NOTIFICATION_DATA
• ntldr::LDR_ENUM_RESOURCE_ENTRY
• ntldr::LDR_ENUM_RESOURCE_ENTRY_1
• ntldr::LDR_ENUM_RESOURCE_ENTRY_1_1
• ntldr::LDR_FAILURE_DATA
• ntldr::LDR_IMPORT_CALLBACK_INFO
• ntldr::LDR_RESOURCE_INFO
• ntldr::LDR_SECTION_INFO
• ntldr::LDR_SERVICE_TAG_RECORD
• ntldr::LDR_VERIFY_IMAGE_INFO
• ntldr::PS_MITIGATION_AUDIT_OPTIONS_MAP
• ntldr::PS_MITIGATION_OPTIONS_MAP
• ntldr::PS_SYSTEM_DLL_INIT_BLOCK
• ntldr::PS_SYSTEM_DLL_INIT_BLOCK_1
• ntldr::PS_SYSTEM_DLL_INIT_BLOCK_1_1
• ntldr::RTL_PROCESS_MODULES
• ntldr::RTL_PROCESS_MODULE_INFORMATION
• ntldr::RTL_PROCESS_MODULE_INFORMATION_EX
• ntlpcapi::ALPC_BASIC_INFORMATION
• ntlpcapi::ALPC_COMPLETION_LIST_HEADER
• ntlpcapi::ALPC_COMPLETION_LIST_STATE
• ntlpcapi::ALPC_COMPLETION_LIST_STATE_1
• ntlpcapi::ALPC_COMPLETION_LIST_STATE_1_1
• ntlpcapi::ALPC_CONTEXT_ATTR
• ntlpcapi::ALPC_DATA_VIEW_ATTR
• ntlpcapi::ALPC_HANDLE_ATTR
• ntlpcapi::ALPC_HANDLE_ATTR32
• ntlpcapi::ALPC_MESSAGE_ATTRIBUTES
• ntlpcapi::ALPC_MESSAGE_HANDLE_INFORMATION
• ntlpcapi::ALPC_PORT_ASSOCIATE_COMPLETION_PORT
• ntlpcapi::ALPC_PORT_ATTRIBUTES
• ntlpcapi::ALPC_PORT_COMPLETION_LIST_INFORMATION
• ntlpcapi::ALPC_PORT_MESSAGE_ZONE_INFORMATION
• ntlpcapi::ALPC_REGISTER_CALLBACK
• ntlpcapi::ALPC_SECURITY_ATTR
• ntlpcapi::ALPC_SERVER_INFORMATION
• ntlpcapi::ALPC_SERVER_INFORMATION_1
• ntlpcapi::ALPC_SERVER_INFORMATION_1_1
• ntlpcapi::ALPC_SERVER_INFORMATION_1_2
• ntlpcapi::ALPC_SERVER_SESSION_INFORMATION
• ntlpcapi::LPC_CLIENT_DIED_MSG
• ntlpcapi::LPC_CLIENT_DIED_MSG64
• ntlpcapi::PORT_DATA_ENTRY
• ntlpcapi::PORT_DATA_INFORMATION
• ntlpcapi::PORT_MESSAGE
• ntlpcapi::PORT_MESSAGE64
• ntlpcapi::PORT_MESSAGE64_1
• ntlpcapi::PORT_MESSAGE64_1_1
• ntlpcapi::PORT_MESSAGE64_2
• ntlpcapi::PORT_MESSAGE64_2_1
• ntlpcapi::PORT_MESSAGE64_3
• ntlpcapi::PORT_MESSAGE64_4
• ntlpcapi::PORT_MESSAGE_1
• ntlpcapi::PORT_MESSAGE_1_1
• ntlpcapi::PORT_MESSAGE_2
• ntlpcapi::PORT_MESSAGE_2_1
• ntlpcapi::PORT_MESSAGE_3
• ntlpcapi::PORT_MESSAGE_4
• ntlpcapi::PORT_VIEW
• ntlpcapi::PORT_VIEW64
• ntlpcapi::REMOTE_PORT_VIEW
• ntlpcapi::REMOTE_PORT_VIEW64
• ntmmapi::CFG_CALL_TARGET_LIST_INFORMATION
• ntmmapi::FILEOFFSET_INFORMATION
• ntmmapi::MEMORY_ENCLAVE_IMAGE_INFORMATION
• ntmmapi::MEMORY_FRAME_INFORMATION
• ntmmapi::MEMORY_IMAGE_INFORMATION
• ntmmapi::MEMORY_IMAGE_INFORMATION_1
• ntmmapi::MEMORY_IMAGE_INFORMATION_1_1
• ntmmapi::MEMORY_PARTITION_CONFIGURATION_INFORMATION
• ntmmapi::MEMORY_PARTITION_INITIAL_ADD_INFORMATION
• ntmmapi::MEMORY_PARTITION_MEMORY_EVENTS_INFORMATION
• ntmmapi::MEMORY_PARTITION_MEMORY_EVENTS_INFORMATION_1
• ntmmapi::MEMORY_PARTITION_MEMORY_EVENTS_INFORMATION_1_1
• ntmmapi::MEMORY_PARTITION_PAGEFILE_INFORMATION
• ntmmapi::MEMORY_PARTITION_PAGE_COMBINE_INFORMATION
• ntmmapi::MEMORY_PARTITION_PAGE_RANGE
• ntmmapi::MEMORY_PARTITION_TRANSFER_INFORMATION
• ntmmapi::MEMORY_PHYSICAL_CONTIGUITY_INFORMATION
• ntmmapi::MEMORY_PHYSICAL_CONTIGUITY_UNIT_INFORMATION
• ntmmapi::MEMORY_PHYSICAL_CONTIGUITY_UNIT_INFORMATION_1
• ntmmapi::MEMORY_PHYSICAL_CONTIGUITY_UNIT_INFORMATION_1_1
• ntmmapi::MEMORY_REGION_INFORMATION
• ntmmapi::MEMORY_REGION_INFORMATION_1
• ntmmapi::MEMORY_REGION_INFORMATION_1_1
• ntmmapi::MEMORY_SHARED_COMMIT_INFORMATION
• ntmmapi::MEMORY_WORKING_SET_BLOCK
• ntmmapi::MEMORY_WORKING_SET_EX_BLOCK
• ntmmapi::MEMORY_WORKING_SET_EX_BLOCK_1
• ntmmapi::MEMORY_WORKING_SET_EX_BLOCK_1_1
• ntmmapi::MEMORY_WORKING_SET_EX_BLOCK_1_2
• ntmmapi::MEMORY_WORKING_SET_EX_INFORMATION
• ntmmapi::MEMORY_WORKING_SET_EX_INFORMATION_1
• ntmmapi::MEMORY_WORKING_SET_INFORMATION
• ntmmapi::MMPFN_IDENTITY
• ntmmapi::MMPFN_IDENTITY_1
• ntmmapi::MMPFN_IDENTITY_2
• ntmmapi::MMPFN_IDENTITY_2_1
• ntmmapi::MMPFN_IDENTITY_2_2
• ntmmapi::MMPFN_MEMSNAP_INFORMATION
• ntmmapi::PAGEDIR_INFORMATION
• ntmmapi::SECTION_BASIC_INFORMATION
• ntmmapi::SECTION_IMAGE_INFORMATION
• ntmmapi::SECTION_IMAGE_INFORMATION_1
• ntmmapi::SECTION_IMAGE_INFORMATION_1_1
• ntmmapi::SECTION_IMAGE_INFORMATION_2
• ntmmapi::SECTION_IMAGE_INFORMATION_2_1
• ntmmapi::SECTION_IMAGE_INFORMATION_3
• ntmmapi::SECTION_IMAGE_INFORMATION_3_1
• ntmmapi::SECTION_INTERNAL_IMAGE_INFORMATION
• ntmmapi::SECTION_INTERNAL_IMAGE_INFORMATION_1
• ntmmapi::SECTION_INTERNAL_IMAGE_INFORMATION_1_1
• ntmmapi::UNIQUE_PROCESS_INFORMATION
• ntobapi::OBJECT_BASIC_INFORMATION
• ntobapi::OBJECT_BOUNDARY_DESCRIPTOR
• ntobapi::OBJECT_BOUNDARY_DESCRIPTOR_1
• ntobapi::OBJECT_BOUNDARY_DESCRIPTOR_1_1
• ntobapi::OBJECT_BOUNDARY_ENTRY
• ntobapi::OBJECT_DIRECTORY_INFORMATION
• ntobapi::OBJECT_HANDLE_FLAG_INFORMATION
• ntobapi::OBJECT_TYPES_INFORMATION
• ntobapi::OBJECT_TYPE_INFORMATION
• ntpebteb::API_SET_HASH_ENTRY
• ntpebteb::API_SET_NAMESPACE
• ntpebteb::API_SET_NAMESPACE_ENTRY
• ntpebteb::API_SET_VALUE_ENTRY
• ntpebteb::GDI_TEB_BATCH
• ntpebteb::LEAP_SECOND_DATA
• ntpebteb::PEB
• ntpebteb::PEB_1
• ntpebteb::PEB_1_1
• ntpebteb::PEB_2
• ntpebteb::PEB_2_1
• ntpebteb::PEB_3
• ntpebteb::PEB_4
• ntpebteb::PEB_5
• ntpebteb::PEB_5_1
• ntpebteb::PEB_6
• ntpebteb::PEB_6_1
• ntpebteb::TEB
• ntpebteb::TEB_1
• ntpebteb::TEB_1_1
• ntpebteb::TEB_2
• ntpebteb::TEB_3
• ntpebteb::TEB_3_1
• ntpebteb::TEB_ACTIVE_FRAME
• ntpebteb::TEB_ACTIVE_FRAME_CONTEXT
• ntpfapi::PFS_PRIVATE_PAGE_SOURCE
• ntpfapi::PFS_PRIVATE_PAGE_SOURCE_1
• ntpfapi::PF_BOOT_CONTROL
• ntpfapi::PF_DEPRIORITIZE_OLD_PAGES
• ntpfapi::PF_DEPRIORITIZE_OLD_PAGES_1
• ntpfapi::PF_DEPRIORITIZE_OLD_PAGES_1_1
• ntpfapi::PF_GPU_UTILIZATION_INFO
• ntpfapi::PF_LOG_EVENT_DATA
• ntpfapi::PF_MEMORY_LIST_INFO
• ntpfapi::PF_MEMORY_LIST_NODE
• ntpfapi::PF_MIN_WS_AGE_RATE_CONTROL
• ntpfapi::PF_PFN_PRIO_REQUEST
• ntpfapi::PF_PHYSICAL_MEMORY_RANGE
• ntpfapi::PF_PHYSICAL_MEMORY_RANGE_INFO_V1
• ntpfapi::PF_PHYSICAL_MEMORY_RANGE_INFO_V2
• ntpfapi::PF_PRIVSOURCE_INFO
• ntpfapi::PF_PRIVSOURCE_INFO_1
• ntpfapi::PF_PRIVSOURCE_QUERY_REQUEST
• ntpfapi::PF_REPURPOSED_BY_PREFETCH_INFO
• ntpfapi::PF_ROBUSTNESS_CONTROL
• ntpfapi::PF_ROBUST_FILE_ENTRY
• ntpfapi::PF_ROBUST_PROCESS_ENTRY
• ntpfapi::PF_SCENARIO_PHASE_INFO
• ntpfapi::PF_SYSTEM_PREFETCH_PARAMETERS
• ntpfapi::PF_SYSTEM_SUPERFETCH_PARAMETERS
• ntpfapi::PF_TIME_CONTROL
• ntpfapi::PF_TRACE_LIMITS
• ntpfapi::PF_VIRTUAL_QUERY
• ntpfapi::PF_VIRTUAL_QUERY_1
• ntpfapi::PF_VIRTUAL_QUERY_1_1
• ntpfapi::PREFETCHER_INFORMATION
• ntpfapi::SUPERFETCH_INFORMATION
• ntpnpapi::PLUGPLAY_EVENT_BLOCK
• ntpnpapi::PLUGPLAY_EVENT_BLOCK_1
• ntpnpapi::PLUGPLAY_EVENT_BLOCK_1_1
• ntpnpapi::PLUGPLAY_EVENT_BLOCK_1_2
• ntpnpapi::PLUGPLAY_EVENT_BLOCK_1_3
• ntpnpapi::PLUGPLAY_EVENT_BLOCK_1_4
• ntpnpapi::PLUGPLAY_EVENT_BLOCK_1_5
• ntpnpapi::PLUGPLAY_EVENT_BLOCK_1_6
• ntpnpapi::PLUGPLAY_EVENT_BLOCK_1_7
• ntpnpapi::PLUGPLAY_EVENT_BLOCK_1_8
• ntpnpapi::PLUGPLAY_EVENT_BLOCK_1_9
• ntpoapi::COUNTED_REASON_CONTEXT_RELATIVE
• ntpoapi::COUNTED_REASON_CONTEXT_RELATIVE_1
• ntpoapi::COUNTED_REASON_CONTEXT_RELATIVE_1_1
• ntpoapi::DIAGNOSTIC_BUFFER
• ntpoapi::DIAGNOSTIC_BUFFER_1
• ntpoapi::DIAGNOSTIC_BUFFER_1_1
• ntpoapi::DIAGNOSTIC_BUFFER_1_2
• ntpoapi::POWER_BOOT_SESSION_STANDBY_ACTIVATION_INFO
• ntpoapi::POWER_INFORMATION_INTERNAL_HEADER
• ntpoapi::POWER_INTERNAL_BOOTAPP_DIAGNOSTIC
• ntpoapi::POWER_INTERNAL_HOST_ENERGY_SAVER_STATE
• ntpoapi::POWER_INTERNAL_PROCESSOR_BRANDED_FREQENCY_INPUT
• ntpoapi::POWER_INTERNAL_PROCESSOR_BRANDED_FREQENCY_OUTPUT
• ntpoapi::POWER_INTERNAL_PROCESSOR_QOS_SUPPORT
• ntpoapi::POWER_PROCESSOR_LATENCY_HINT
• ntpoapi::POWER_REQUEST
• ntpoapi::POWER_REQUEST_1
• ntpoapi::POWER_REQUEST_1_1
• ntpoapi::POWER_REQUEST_1_2
• ntpoapi::POWER_REQUEST_1_3
• ntpoapi::POWER_REQUEST_1_4
• ntpoapi::POWER_REQUEST_ACTION
• ntpoapi::POWER_REQUEST_ACTION_INTERNAL
• ntpoapi::POWER_REQUEST_LIST
• ntpoapi::POWER_S0_LOW_POWER_IDLE_INFO
• ntpoapi::POWER_S0_LOW_POWER_IDLE_INFO_1
• ntpoapi::POWER_S0_LOW_POWER_IDLE_INFO_2
• ntpoapi::POWER_SESSION_POWER_STATE
• ntpoapi::POWER_SET_BACKGROUND_TASK_STATE
• ntpoapi::POWER_STANDBY_NETWORK_REQUEST
• ntpoapi::POWER_STATE
• ntpoapi::POWER_STATE_HANDLER
• ntpoapi::POWER_STATE_NOTIFY_HANDLER
• ntpoapi::POWER_USER_ABSENCE_PREDICTION
• ntpoapi::POWER_USER_ABSENCE_PREDICTION_CAPABILITY
• ntpoapi::PO_WAKE_SOURCE_DEVICE
• ntpoapi::PO_WAKE_SOURCE_FIXED
• ntpoapi::PO_WAKE_SOURCE_HEADER
• ntpoapi::PO_WAKE_SOURCE_HISTORY
• ntpoapi::PO_WAKE_SOURCE_INFO
• ntpoapi::PO_WAKE_SOURCE_INTERNAL
• ntpoapi::PO_WAKE_SOURCE_TIMER
• ntpoapi::PROCESSOR_CAP
• ntpoapi::PROCESSOR_IDLE_STATE
• ntpoapi::PROCESSOR_IDLE_STATES
• ntpoapi::PROCESSOR_IDLE_TIMES
• ntpoapi::PROCESSOR_LOAD
• ntpoapi::PROCESSOR_PERF_CAP_HV
• ntpoapi::SYSTEM_HIBERFILE_INFORMATION
• ntpoapi::SYSTEM_POWER_STATE_CONTEXT_1_1
• ntpoapi::WAKE_TIMER_INFO
• ntpsapi::ALPC_WORK_ON_BEHALF_TICKET
• ntpsapi::COUNTER_READING
• ntpsapi::INITIAL_TEB
• ntpsapi::INITIAL_TEB_1
• ntpsapi::ISOLATION_MANIFEST_PROPERTIES
• ntpsapi::JOBOBJECT_CONTAINER_IDENTIFIER_V2
• ntpsapi::JOBOBJECT_ENERGY_TRACKING_STATE
• ntpsapi::JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION
• ntpsapi::JOBOBJECT_EXTENDED_LIMIT_INFORMATION_V2
• ntpsapi::JOBOBJECT_FREEZE_INFORMATION
• ntpsapi::JOBOBJECT_FREEZE_INFORMATION_1
• ntpsapi::JOBOBJECT_FREEZE_INFORMATION_1_1
• ntpsapi::JOBOBJECT_INTERFERENCE_INFORMATION
• ntpsapi::JOBOBJECT_IO_PRIORITY_LIMIT
• ntpsapi::JOBOBJECT_MEMORY_USAGE_INFORMATION
• ntpsapi::JOBOBJECT_MEMORY_USAGE_INFORMATION_V2
• ntpsapi::JOBOBJECT_PAGE_PRIORITY_LIMIT
• ntpsapi::JOBOBJECT_WAKE_FILTER
• ntpsapi::JOBOBJECT_WAKE_INFORMATION
• ntpsapi::JOBOBJECT_WAKE_INFORMATION_V1
• ntpsapi::MANAGE_WRITES_TO_EXECUTABLE_MEMORY
• ntpsapi::NTPSS_MEMORY_BULK_INFORMATION
• ntpsapi::PEB_LDR_DATA
• ntpsapi::PROCESS_AFFINITY_UPDATE_MODE
• ntpsapi::PROCESS_AFFINITY_UPDATE_MODE_1
• ntpsapi::PROCESS_CHILD_PROCESS_INFORMATION
• ntpsapi::PROCESS_COMBINE_SECURITY_DOMAINS_INFORMATION
• ntpsapi::PROCESS_COMMIT_RELEASE_INFORMATION
• ntpsapi::PROCESS_COMMIT_RELEASE_INFORMATION_1
• ntpsapi::PROCESS_CYCLE_TIME_INFORMATION
• ntpsapi::PROCESS_ENERGY_TRACKING_STATE
• ntpsapi::PROCESS_FAULT_INFORMATION
• ntpsapi::PROCESS_FIBER_SHADOW_STACK_ALLOCATION_INFORMATION
• ntpsapi::PROCESS_FOREGROUND_BACKGROUND
• ntpsapi::PROCESS_FREE_FIBER_SHADOW_STACK_ALLOCATION_INFORMATION
• ntpsapi::PROCESS_HANDLE_INFORMATION
• ntpsapi::PROCESS_HANDLE_SNAPSHOT_INFORMATION
• ntpsapi::PROCESS_HANDLE_TABLE_ENTRY_INFO
• ntpsapi::PROCESS_INSTRUMENTATION_CALLBACK_INFORMATION
• ntpsapi::PROCESS_JOB_MEMORY_INFO
• ntpsapi::PROCESS_LDT_INFORMATION
• ntpsapi::PROCESS_LDT_SIZE
• ntpsapi::PROCESS_LEAP_SECOND_INFORMATION
• ntpsapi::PROCESS_LOGGING_INFORMATION
• ntpsapi::PROCESS_LOGGING_INFORMATION_1
• ntpsapi::PROCESS_MEMORY_ALLOCATION_MODE
• ntpsapi::PROCESS_MEMORY_ALLOCATION_MODE_1
• ntpsapi::PROCESS_MITIGATION_POLICY_INFORMATION
• ntpsapi::PROCESS_MITIGATION_POLICY_INFORMATION_1
• ntpsapi::PROCESS_PRIORITY_CLASS
• ntpsapi::PROCESS_PRIORITY_CLASS_EX
• ntpsapi::PROCESS_PRIORITY_CLASS_EX_1
• ntpsapi::PROCESS_PRIORITY_CLASS_EX_1_1
• ntpsapi::PROCESS_READWRITEVM_LOGGING_INFORMATION
• ntpsapi::PROCESS_READWRITEVM_LOGGING_INFORMATION_1
• ntpsapi::PROCESS_SECURITY_DOMAIN_INFORMATION
• ntpsapi::PROCESS_STACK_ALLOCATION_INFORMATION
• ntpsapi::PROCESS_STACK_ALLOCATION_INFORMATION_EX
• ntpsapi::PROCESS_SYSTEM_RESOURCE_MANAGEMENT
• ntpsapi::PROCESS_SYSTEM_RESOURCE_MANAGEMENT_1
• ntpsapi::PROCESS_TELEMETRY_ID_INFORMATION
• ntpsapi::PROCESS_TLS_INFORMATION
• ntpsapi::PROCESS_UPTIME_INFORMATION
• ntpsapi::PROCESS_WAKE_INFORMATION
• ntpsapi::PROCESS_WINDOW_INFORMATION
• ntpsapi::PROCESS_WORKING_SET_CONTROL
• ntpsapi::PROCESS_WS_WATCH_INFORMATION_EX
• ntpsapi::PROC_THREAD_ATTRIBUTE
• ntpsapi::PROC_THREAD_ATTRIBUTE_LIST
• ntpsapi::PROC_THREAD_BNOISOLATION_ATTRIBUTE
• ntpsapi::PS_ATTRIBUTE
• ntpsapi::PS_ATTRIBUTE_1
• ntpsapi::PS_ATTRIBUTE_LIST
• ntpsapi::PS_BNO_ISOLATION_PARAMETERS
• ntpsapi::PS_CREATE_INFO
• ntpsapi::PS_CREATE_INFO_1
• ntpsapi::PS_CREATE_INFO_1_1
• ntpsapi::PS_CREATE_INFO_1_1_1
• ntpsapi::PS_CREATE_INFO_1_1_1_1
• ntpsapi::PS_CREATE_INFO_1_2
• ntpsapi::PS_CREATE_INFO_1_3
• ntpsapi::PS_CREATE_INFO_1_4
• ntpsapi::PS_CREATE_INFO_1_5
• ntpsapi::PS_CREATE_INFO_1_5_1
• ntpsapi::PS_CREATE_INFO_1_5_1_1
• ntpsapi::PS_MEMORY_RESERVE
• ntpsapi::PS_PROTECTION
• ntpsapi::PS_PROTECTION_1
• ntpsapi::PS_PROTECTION_1_1
• ntpsapi::PS_STD_HANDLE_INFO
• ntpsapi::PS_STD_HANDLE_INFO_1
• ntpsapi::PS_STD_HANDLE_INFO_1_1
• ntpsapi::PS_TRUSTLET_ATTRIBUTE_ACCESSRIGHTS
• ntpsapi::PS_TRUSTLET_ATTRIBUTE_DATA
• ntpsapi::PS_TRUSTLET_ATTRIBUTE_HEADER
• ntpsapi::PS_TRUSTLET_ATTRIBUTE_TYPE
• ntpsapi::PS_TRUSTLET_ATTRIBUTE_TYPE_1
• ntpsapi::PS_TRUSTLET_ATTRIBUTE_TYPE_1_1
• ntpsapi::PS_TRUSTLET_CREATE_ATTRIBUTES
• ntpsapi::RTL_UMS_COMPLETION_LIST
• ntpsapi::RTL_UMS_CONTEXT
• ntpsapi::RTL_WORK_ON_BEHALF_TICKET_EX
• ntpsapi::RTL_WORK_ON_BEHALF_TICKET_EX_1
• ntpsapi::RTL_WORK_ON_BEHALF_TICKET_EX_1_1
• ntpsapi::SERVERSILO_INIT_INFORMATION
• ntpsapi::SE_SAFE_OPEN_PROMPT_RESULTS
• ntpsapi::SILOOBJECT_ROOT_DIRECTORY
• ntpsapi::SILO_USER_SHARED_DATA
• ntpsapi::THREAD_BASIC_INFORMATION
• ntpsapi::THREAD_CYCLE_TIME_INFORMATION
• ntpsapi::THREAD_LAST_SYSCALL_INFORMATION
• ntpsapi::THREAD_PERFORMANCE_DATA
• ntpsapi::THREAD_PROFILING_INFORMATION
• ntpsapi::THREAD_TEB_INFORMATION
• ntpsapi::THREAD_TLS_INFORMATION
• ntpsapi::THREAD_UMS_INFORMATION
• ntpsapi::THREAD_UMS_INFORMATION_1
• ntpsapi::THREAD_UMS_INFORMATION_1_1
• ntpsapi::WIN32K_SYSCALL_FILTER
• ntpsapi::WOW64_PROCESS
• ntregapi::CM_EXTENDED_PARAMETER
• ntregapi::CM_EXTENDED_PARAMETER_1
• ntregapi::CM_EXTENDED_PARAMETER_2
• ntregapi::KEY_FLAGS_INFORMATION
• ntregapi::KEY_HANDLE_TAGS_INFORMATION
• ntregapi::KEY_OPEN_SUBKEYS_INFORMATION
• ntregapi::KEY_PID_ARRAY
• ntregapi::KEY_SET_LAYER_INFORMATION
• ntregapi::NAMESPACE_NODE_DATA
• ntregapi::REG_NOTIFY_INFORMATION
• ntregapi::VR_CREATE_MULTIPLE_NAMESPACE_NODES
• ntregapi::VR_CREATE_NAMESPACE_NODE
• ntregapi::VR_GET_VIRTUAL_ROOT
• ntregapi::VR_GET_VIRTUAL_ROOT_RESULT
• ntregapi::VR_INITIALIZE_JOB_FOR_VREG
• ntregapi::VR_LOAD_DIFFERENCING_HIVE
• ntregapi::VR_LOAD_DIFFERENCING_HIVE_FOR_HOST
• ntregapi::VR_MODIFY_FLAGS
• ntregapi::VR_UNLOAD_DIFFERENCING_HIVE_FOR_HOST
• ntregapi::VR_UNLOAD_DYNAMICALLY_LOADED_HIVES
• ntrtl::COMPOUND_ACCESS_ALLOWED_ACE
• ntrtl::CONTEXT_CHUNK
• ntrtl::CONTEXT_EX
• ntrtl::CURDIR
• ntrtl::DYNAMIC_FUNCTION_TABLE
• ntrtl::HEAP_BLOCK_INFORMATION
• ntrtl::HEAP_DEBUGGING_INFORMATION
• ntrtl::HEAP_EXTENDED_INFORMATION
• ntrtl::HEAP_EXTENDED_INFORMATION_1
• ntrtl::HEAP_INFORMATION
• ntrtl::HEAP_INFORMATION_ITEM
• ntrtl::HEAP_INFORMATION_ITEM_1
• ntrtl::HEAP_PERFORMANCE_COUNTERS_INFORMATION
• ntrtl::HEAP_RANGE_INFORMATION
• ntrtl::HEAP_REGION_INFORMATION
• ntrtl::PARSE_MESSAGE_CONTEXT
• ntrtl::PROCESS_HEAP_INFORMATION
• ntrtl::PS_PKG_CLAIM
• ntrtl::RTLP_CURDIR_REF
• ntrtl::RTLP_HEAP_STACK_TRACE_SERIALIZATION_ALLOCATION
• ntrtl::RTLP_HEAP_STACK_TRACE_SERIALIZATION_HEADER
• ntrtl::RTLP_HEAP_STACK_TRACE_SERIALIZATION_INIT
• ntrtl::RTLP_HEAP_STACK_TRACE_SERIALIZATION_STACKFRAME
• ntrtl::RTLP_HEAP_TAGGING_INFO
• ntrtl::RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION
• ntrtl::RTLP_TAG_INFO
• ntrtl::RTL_ACE_DATA
• ntrtl::RTL_BITMAP_EX
• ntrtl::RTL_BSD_DATA_ERROR_INFO
• ntrtl::RTL_BSD_DATA_POWER_TRANSITION
• ntrtl::RTL_BSD_DATA_POWER_TRANSITION_1
• ntrtl::RTL_BSD_ITEM
• ntrtl::RTL_BSD_POWER_BUTTON_PRESS_INFO
• ntrtl::RTL_BSD_POWER_BUTTON_PRESS_INFO_1
• ntrtl::RTL_BUFFER
• ntrtl::RTL_DEBUG_INFORMATION
• ntrtl::RTL_DEBUG_INFORMATION_1
• ntrtl::RTL_DRIVE_LETTER_CURDIR
• ntrtl::RTL_ELEVATION_FLAGS
• ntrtl::RTL_ELEVATION_FLAGS_1
• ntrtl::RTL_FEATURE_CONFIGURATION
• ntrtl::RTL_FEATURE_CONFIGURATION_1
• ntrtl::RTL_FEATURE_CONFIGURATION_1_1
• ntrtl::RTL_FEATURE_USAGE_REPORT
• ntrtl::RTL_HANDLE_TABLE
• ntrtl::RTL_HANDLE_TABLE_ENTRY
• ntrtl::RTL_HANDLE_TABLE_ENTRY_1
• ntrtl::RTL_HEAP_ENTRY
• ntrtl::RTL_HEAP_ENTRY_1
• ntrtl::RTL_HEAP_ENTRY_1_1
• ntrtl::RTL_HEAP_ENTRY_1_2
• ntrtl::RTL_HEAP_INFORMATION_V1
• ntrtl::RTL_HEAP_INFORMATION_V2
• ntrtl::RTL_HEAP_STACK_CONTROL
• ntrtl::RTL_HEAP_STACK_QUERY
• ntrtl::RTL_HEAP_TAG
• ntrtl::RTL_HEAP_TAG_INFO
• ntrtl::RTL_HEAP_USAGE
• ntrtl::RTL_HEAP_USAGE_ENTRY
• ntrtl::RTL_HEAP_WALK_ENTRY
• ntrtl::RTL_HEAP_WALK_ENTRY_1
• ntrtl::RTL_HEAP_WALK_ENTRY_1_1
• ntrtl::RTL_HEAP_WALK_ENTRY_1_2
• ntrtl::RTL_IMAGE_MITIGATION_ASLR_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_BINARY_SIGNATURE_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_CHILD_PROCESS_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_CONTROL_FLOW_GUARD_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_DEP_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_DYNAMIC_CODE_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_EXTENSION_POINT_DISABLE_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_FONT_DISABLE_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_HEAP_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_IMAGE_LOAD_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_PAYLOAD_RESTRICTION_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_POLICY_1
• ntrtl::RTL_IMAGE_MITIGATION_POLICY_2
• ntrtl::RTL_IMAGE_MITIGATION_REDIRECTION_TRUST_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_SEHOP_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_STRICT_HANDLE_CHECK_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_SYSTEM_CALL_DISABLE_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_USER_POINTER_AUTH_POLICY
• ntrtl::RTL_IMAGE_MITIGATION_USER_SHADOW_STACK_POLICY
• ntrtl::RTL_MEMORY_ZONE
• ntrtl::RTL_MEMORY_ZONE_SEGMENT
• ntrtl::RTL_PROCESS_HEAPS_V1
• ntrtl::RTL_PROCESS_HEAPS_V2
• ntrtl::RTL_PROCESS_VERIFIER_OPTIONS
• ntrtl::RTL_RB_TREE
• ntrtl::RTL_RELATIVE_NAME_U
• ntrtl::RTL_RESOURCE
• ntrtl::RTL_TIME_ZONE_INFORMATION
• ntrtl::RTL_UNICODE_STRING_BUFFER
• ntrtl::RTL_UNLOAD_EVENT_TRACE
• ntrtl::RTL_UNLOAD_EVENT_TRACE32
• ntrtl::RTL_USER_PROCESS_EXTENDED_PARAMETERS
• ntrtl::RTL_USER_PROCESS_INFORMATION
• ntrtl::RTL_USER_PROCESS_PARAMETERS
• ntrtl::SEGMENT_HEAP_PERFORMANCE_COUNTER_INFORMATION
• ntrtl::in6_addr
• ntrtl::in_addr
• ntsam::ALIAS_ADM_COMMENT_INFORMATION
• ntsam::ALIAS_EXTENDED_INFORMATION
• ntsam::ALIAS_GENERAL_INFORMATION
• ntsam::ALIAS_NAME_INFORMATION
• ntsam::DOMAIN_DISPLAY_GROUP
• ntsam::DOMAIN_DISPLAY_MACHINE
• ntsam::DOMAIN_DISPLAY_OEM_GROUP
• ntsam::DOMAIN_DISPLAY_OEM_USER
• ntsam::DOMAIN_DISPLAY_USER
• ntsam::DOMAIN_GENERAL_INFORMATION
• ntsam::DOMAIN_GENERAL_INFORMATION2
• ntsam::DOMAIN_LOCALIZABLE_ACCOUNTS
• ntsam::DOMAIN_LOCALIZABLE_ACCOUNTS_ENTRY
• ntsam::DOMAIN_LOCALIZABLE_INFO_BUFFER
• ntsam::DOMAIN_LOCKOUT_INFORMATION
• ntsam::DOMAIN_LOGOFF_INFORMATION
• ntsam::DOMAIN_MODIFIED_INFORMATION
• ntsam::DOMAIN_MODIFIED_INFORMATION2
• ntsam::DOMAIN_NAME_INFORMATION
• ntsam::DOMAIN_OEM_INFORMATION
• ntsam::DOMAIN_REPLICATION_INFORMATION
• ntsam::DOMAIN_SERVER_ROLE_INFORMATION
• ntsam::DOMAIN_STATE_INFORMATION
• ntsam::DOMAIN_UAS_INFORMATION
• ntsam::ENCRYPTED_NT_OWF_PASSWORD
• ntsam::ENCRYPTED_PASSWORD_AES
• ntsam::ENCRYPTED_USER_PASSWORD
• ntsam::ENCRYPTED_USER_PASSWORD_NEW
• ntsam::GROUP_ADM_COMMENT_INFORMATION
• ntsam::GROUP_ATTRIBUTE_INFORMATION
• ntsam::GROUP_GENERAL_INFORMATION
• ntsam::GROUP_MEMBERSHIP
• ntsam::GROUP_NAME_INFORMATION
• ntsam::RPC_AUTH_IDENTITY_HANDLE
• ntsam::SAM_ALIAS_MEMBER_ID
• ntsam::SAM_BYTE_ARRAY
• ntsam::SAM_BYTE_ARRAY_32K
• ntsam::SAM_DELTA_DATA
• ntsam::SAM_GENERIC_OPERATION_INPUT
• ntsam::SAM_GENERIC_OPERATION_OUTPUT
• ntsam::SAM_GROUP_MEMBER_ID
• ntsam::SAM_OPERATION_OBJCHG_INPUT
• ntsam::SAM_OPERATION_OBJCHG_OUTPUT
• ntsam::SAM_RID_ENUMERATION
• ntsam::SAM_SID_ENUMERATION
• ntsam::SAM_VALIDATE_AUTHENTICATION_INPUT_ARG
• ntsam::SAM_VALIDATE_INPUT_ARG
• ntsam::SAM_VALIDATE_OUTPUT_ARG
• ntsam::SAM_VALIDATE_PASSWORD_CHANGE_INPUT_ARG
• ntsam::SAM_VALIDATE_PASSWORD_HASH
• ntsam::SAM_VALIDATE_PASSWORD_RESET_INPUT_ARG
• ntsam::SAM_VALIDATE_PERSISTED_FIELDS
• ntsam::SAM_VALIDATE_STANDARD_OUTPUT_ARG
• ntsam::USER_ACCOUNT_INFORMATION
• ntsam::USER_ACCOUNT_NAME_INFORMATION
• ntsam::USER_ADMIN_COMMENT_INFORMATION
• ntsam::USER_ALLOWED_TO_DELEGATE_TO_LIST
• ntsam::USER_CONTROL_INFORMATION
• ntsam::USER_EXPIRES_INFORMATION
• ntsam::USER_EXTENDED_INFORMATION
• ntsam::USER_FULL_NAME_INFORMATION
• ntsam::USER_GENERAL_INFORMATION
• ntsam::USER_HOME_INFORMATION
• ntsam::USER_INTERNAL1_INFORMATION
• ntsam::USER_INTERNAL2_INFORMATION
• ntsam::USER_INTERNAL3_INFORMATION
• ntsam::USER_INTERNAL4_INFORMATION
• ntsam::USER_INTERNAL4_INFORMATION_NEW
• ntsam::USER_INTERNAL5_INFORMATION
• ntsam::USER_INTERNAL5_INFORMATION_NEW
• ntsam::USER_INTERNAL6_INFORMATION
• ntsam::USER_INTERNAL7_INFORMATION
• ntsam::USER_INTERNAL8_INFORMATION
• ntsam::USER_LOGON_HOURS_INFORMATION
• ntsam::USER_LOGON_INFORMATION
• ntsam::USER_LOGON_UI_INFORMATION
• ntsam::USER_NAME_INFORMATION
• ntsam::USER_PARAMETERS_INFORMATION
• ntsam::USER_PREFERENCES_INFORMATION
• ntsam::USER_PRIMARY_GROUP_INFORMATION
• ntsam::USER_PROFILE_INFORMATION
• ntsam::USER_PWD_CHANGE_FAILURE_INFORMATION
• ntsam::USER_SCRIPT_INFORMATION
• ntsam::USER_SET_PASSWORD_INFORMATION
• ntsam::USER_WORKSTATIONS_INFORMATION
• ntseapi::TOKEN_PROCESS_TRUST_LEVEL
• ntseapi::TOKEN_SECURITY_ATTRIBUTES_AND_OPERATION_INFORMATION
• ntseapi::TOKEN_SECURITY_ATTRIBUTES_INFORMATION
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_FQBN_VALUE
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_V1
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_V1_1
• ntsxs::ACTIVATION_CONTEXT
• ntsxs::ACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION_LEGACY
• ntsxs::ACTIVATION_CONTEXT_DATA
• ntsxs::ACTIVATION_CONTEXT_DATA_APPLICATION_SETTINGS
• ntsxs::ACTIVATION_CONTEXT_DATA_ASSEMBLY_GLOBAL_INFORMATION
• ntsxs::ACTIVATION_CONTEXT_DATA_ASSEMBLY_INFORMATION
• ntsxs::ACTIVATION_CONTEXT_DATA_ASSEMBLY_ROSTER_ENTRY
• ntsxs::ACTIVATION_CONTEXT_DATA_ASSEMBLY_ROSTER_HEADER
• ntsxs::ACTIVATION_CONTEXT_DATA_CLR_SURROGATE
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_INTERFACE_REDIRECTION
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_PROGID_REDIRECTION
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_REDIRECTION
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_REDIRECTION_SHIM
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_TYPE_LIBRARY_REDIRECTION
• ntsxs::ACTIVATION_CONTEXT_DATA_DLL_REDIRECTION
• ntsxs::ACTIVATION_CONTEXT_DATA_DLL_REDIRECTION_PATH_SEGMENT
• ntsxs::ACTIVATION_CONTEXT_DATA_EXTENDED_TOC_ENTRY
• ntsxs::ACTIVATION_CONTEXT_DATA_EXTENDED_TOC_HEADER
• ntsxs::ACTIVATION_CONTEXT_DATA_TOC_ENTRY
• ntsxs::ACTIVATION_CONTEXT_DATA_TOC_HEADER
• ntsxs::ACTIVATION_CONTEXT_DATA_TYPE_LIBRARY_VERSION
• ntsxs::ACTIVATION_CONTEXT_DATA_WINDOW_CLASS_REDIRECTION
• ntsxs::ACTIVATION_CONTEXT_GUID_SECTION_ENTRY
• ntsxs::ACTIVATION_CONTEXT_GUID_SECTION_HASH_BUCKET
• ntsxs::ACTIVATION_CONTEXT_GUID_SECTION_HASH_TABLE
• ntsxs::ACTIVATION_CONTEXT_GUID_SECTION_HEADER
• ntsxs::ACTIVATION_CONTEXT_STACK
• ntsxs::ACTIVATION_CONTEXT_STRING_SECTION_ENTRY
• ntsxs::ACTIVATION_CONTEXT_STRING_SECTION_HASH_BUCKET
• ntsxs::ACTIVATION_CONTEXT_STRING_SECTION_HASH_TABLE
• ntsxs::ACTIVATION_CONTEXT_STRING_SECTION_HEADER
• ntsxs::ASSEMBLY_STORAGE_MAP
• ntsxs::ASSEMBLY_STORAGE_MAP_ENTRY
• ntsxs::COMPATIBILITY_CONTEXT_ELEMENT_LEGACY
• ntsxs::RTL_ACTIVATION_CONTEXT_STACK_FRAME
• nttp::TP_ALPC
• ntwow64::CURDIR32
• ntwow64::GDI_TEB_BATCH32
• ntwow64::LDRP_CSLIST32
• ntwow64::LDR_DATA_TABLE_ENTRY32
• ntwow64::LDR_DATA_TABLE_ENTRY32_1
• ntwow64::LDR_DATA_TABLE_ENTRY32_2
• ntwow64::LDR_DATA_TABLE_ENTRY32_2_1
• ntwow64::LDR_DDAG_NODE32
• ntwow64::LDR_DDAG_NODE32_1
• ntwow64::LDR_SERVICE_TAG_RECORD32
• ntwow64::PEB32
• ntwow64::PEB32_1
• ntwow64::PEB32_1_1
• ntwow64::PEB32_2
• ntwow64::PEB32_2_1
• ntwow64::PEB32_3
• ntwow64::PEB32_4
• ntwow64::PEB32_5
• ntwow64::PEB32_5_1
• ntwow64::PEB32_6
• ntwow64::PEB32_6_1
• ntwow64::PEB32_WITH_WOW64INFO
• ntwow64::PEB_LDR_DATA32
• ntwow64::RTL_BALANCED_NODE32
• ntwow64::RTL_BALANCED_NODE32_1
• ntwow64::RTL_BALANCED_NODE32_1_1
• ntwow64::RTL_BALANCED_NODE32_2
• ntwow64::RTL_DRIVE_LETTER_CURDIR32
• ntwow64::RTL_RB_TREE32
• ntwow64::RTL_USER_PROCESS_PARAMETERS32
• ntwow64::TEB32
• ntwow64::TEB32_1
• ntwow64::TEB32_1_1
• ntwow64::TEB32_2
• ntwow64::TEB32_3
• ntwow64::TEB32_3_1
• ntwow64::WOW64INFO
• ntwow64::WOW64_EXECUTE_OPTIONS
• ntwow64::WOW64_EXECUTE_OPTIONS_1
• ntxcapi::KCONTINUE_ARGUMENT
• phnt_ntdef::PREGHANDLE
• phnt_ntdef::QUAD_PTR
• phnt_ntdef::TRACEHANDLE
• subprocesstag::TAG_INFO_NAMES_REFERENCING_MODULE
• subprocesstag::TAG_INFO_NAMES_REFERENCING_MODULE_IN_PARAMS
• subprocesstag::TAG_INFO_NAMES_REFERENCING_MODULE_OUT_PARAMS
• subprocesstag::TAG_INFO_NAME_FROM_TAG
• subprocesstag::TAG_INFO_NAME_FROM_TAG_IN_PARAMS
• subprocesstag::TAG_INFO_NAME_FROM_TAG_OUT_PARAMS
• subprocesstag::TAG_INFO_NAME_TAG_MAPPING
• subprocesstag::TAG_INFO_NAME_TAG_MAPPING_ELEMENT
• subprocesstag::TAG_INFO_NAME_TAG_MAPPING_IN_PARAMS
• subprocesstag::TAG_INFO_NAME_TAG_MAPPING_OUT_PARAMS
• winsta::ASYNCCONFIG
• winsta::CACHE_STATISTICS
• winsta::CACHE_STATISTICS_1
• winsta::CDCONFIG
• winsta::CONNECTCONFIG
• winsta::FLOWCONTROLCONFIG
• winsta::NASICONFIG
• winsta::NETWORKCONFIG
• winsta::OEMTDCONFIG
• winsta::PDCONFIG2
• winsta::PDPARAMS
• winsta::PDPARAMS_1
• winsta::PROTOCOLCOUNTERS
• winsta::PROTOCOLCOUNTERS_1
• winsta::PROTOCOLSTATUS
• winsta::RESERVED_CACHE
• winsta::SESSIONIDW
• winsta::SESSIONIDW_1
• winsta::THINWIRECACHE
• winsta::TSHARE_CACHE
• winsta::TSHARE_COUNTERS
• winsta::TS_ALL_PROCESSES_INFO
• winsta::TS_COUNTER
• winsta::TS_COUNTER_HEADER
• winsta::TS_PROCESS_INFORMATION_NT4
• winsta::TS_SYS_PROCESS_INFORMATION
• winsta::USERCONFIG
• winsta::VARDATA_WIRE
• winsta::WDCONFIG
• winsta::WINSTACONFIGWIRE
• winsta::WINSTATIONCLIENT
• winsta::WINSTATIONCLIENTDATA
• winsta::WINSTATIONCREATE
• winsta::WINSTATIONINFORMATION
• winsta::WINSTATIONINFORMATIONEX
• winsta::WINSTATIONINFORMATIONEX_LEVEL
• winsta::WINSTATIONINFORMATIONEX_LEVEL1
• winsta::WINSTATIONINFORMATIONEX_LEVEL2
• winsta::WINSTATIONLOADINDICATORDATA
• winsta::WINSTATIONPRODID
• winsta::WINSTATIONREMOTEADDRESS
• winsta::WINSTATIONREMOTEADDRESS_1
• winsta::WINSTATIONREMOTEADDRESS_1_1
• winsta::WINSTATIONREMOTEADDRESS_1_2
• winsta::WINSTATIONSHADOW
• winsta::WINSTATIONUSERTOKEN
• winsta::WINSTATIONVIDEODATA

Enums

• ntbcd::BCD_APPLICATION_IMAGE_TYPE
• ntbcd::BCD_APPLICATION_OBJECT_TYPE
• ntbcd::BCD_COPY_FLAGS
• ntbcd::BCD_ELEMENT_DATATYPE_CLASS
• ntbcd::BCD_ELEMENT_DATATYPE_FORMAT
• ntbcd::BCD_ELEMENT_DEVICE_TYPE
• ntbcd::BCD_FLAGS
• ntbcd::BCD_IMPORT_FLAGS
• ntbcd::BCD_INHERITED_CLASS_TYPE
• ntbcd::BCD_MESSAGE_TYPE
• ntbcd::BCD_OBJECT_TYPE
• ntbcd::BCD_OPEN_FLAGS
• ntbcd::BcdBootMgrElementTypes
• ntbcd::BcdLibraryElementTypes
• ntbcd::BcdLibrary_ConfigAccessPolicy
• ntbcd::BcdLibrary_DebuggerStartPolicy
• ntbcd::BcdLibrary_DebuggerType
• ntbcd::BcdLibrary_FirstMegabytePolicy
• ntbcd::BcdLibrary_SafeBoot
• ntbcd::BcdLibrary_UxDisplayMessageType
• ntbcd::BcdOSLoaderElementTypes
• ntbcd::BcdOSLoader_BootStatusPolicy
• ntbcd::BcdOSLoader_NxPolicy
• ntbcd::BcdOSLoader_PAEPolicy
• ntbcd::BcdTemplateElementTypes
• ntdbg::DBG_STATE
• ntdbg::DEBUGOBJECTINFOCLASS
• ntexapi::ALTERNATIVE_ARCHITECTURE_TYPE
• ntexapi::ATOM_INFORMATION_CLASS
• ntexapi::COVERAGE_REQUEST_CODES
• ntexapi::EVENT_INFORMATION_CLASS
• ntexapi::EVENT_TRACE_INFORMATION_CLASS
• ntexapi::FILTER_BOOT_OPTION_OPERATION
• ntexapi::HARDERROR_RESPONSE
• ntexapi::HARDERROR_RESPONSE_OPTION
• ntexapi::MUTANT_INFORMATION_CLASS
• ntexapi::SEMAPHORE_INFORMATION_CLASS
• ntexapi::SHUTDOWN_ACTION
• ntexapi::SM_CONFIG_TYPE
• ntexapi::SM_STORE_MANAGER_TYPE
• ntexapi::SM_STORE_TYPE
• ntexapi::STORE_INFORMATION_CLASS
• ntexapi::ST_STATS_LEVEL
• ntexapi::SYSDBG_COMMAND
• ntexapi::SYSTEM_ACTIVITY_MODERATION_APP_TYPE
• ntexapi::SYSTEM_ACTIVITY_MODERATION_STATE
• ntexapi::SYSTEM_CRASH_DUMP_CONFIGURATION_CLASS
• ntexapi::SYSTEM_ENVIRONMENT_INFORMATION_CLASS
• ntexapi::SYSTEM_FIRMWARE_TABLE_ACTION
• ntexapi::SYSTEM_INFORMATION_CLASS
• ntexapi::SYSTEM_IOMMU_STATE
• ntexapi::SYSTEM_MEMORY_LIST_COMMAND
• ntexapi::SYSTEM_PIXEL_FORMAT
• ntexapi::SYSTEM_PROCESS_CLASSIFICATION
• ntexapi::SYSTEM_VA_TYPE
• ntexapi::TIMER_INFORMATION_CLASS
• ntexapi::TPM_BOOT_ENTROPY_RESULT_CODE
• ntexapi::WATCHDOG_HANDLER_ACTION
• ntexapi::WATCHDOG_INFORMATION_CLASS
• ntexapi::WNF_DATA_SCOPE
• ntexapi::WNF_STATE_NAME_INFORMATION
• ntexapi::WNF_STATE_NAME_LIFETIME
• ntexapi::WORKERFACTORYINFOCLASS
• ntioapi::FILE_INFORMATION_CLASS
• ntioapi::FSINFOCLASS
• ntioapi::IO_COMPLETION_INFORMATION_CLASS
• ntioapi::MOUNTMGR_AUTO_MOUNT_STATE
• ntkeapi::KHETERO_CPU_POLICY
• ntkeapi::KTHREAD_STATE
• ntldr::LDR_DDAG_STATE
• ntldr::LDR_DLL_LOAD_REASON
• ntldr::LDR_HOT_PATCH_STATE
• ntlpcapi::ALPC_MESSAGE_INFORMATION_CLASS
• ntlpcapi::ALPC_PORT_INFORMATION_CLASS
• ntlpcapi::PORT_INFORMATION_CLASS
• ntmisc::TRACE_CONTROL_INFORMATION_CLASS
• ntmisc::VDMSERVICECLASS
• ntmmapi::MEMORY_INFORMATION_CLASS
• ntmmapi::MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE
• ntmmapi::MEMORY_WORKING_SET_EX_LOCATION
• ntmmapi::SECTION_INFORMATION_CLASS
• ntobapi::BOUNDARY_ENTRY_TYPE
• ntobapi::SYMBOLIC_LINK_INFO_CLASS
• ntpfapi::PFS_PRIVATE_PAGE_SOURCE_TYPE
• ntpfapi::PF_BOOT_PHASE_ID
• ntpfapi::PF_ENABLE_STATUS
• ntpfapi::PF_EVENT_TYPE
• ntpfapi::PF_PHASED_SCENARIO_TYPE
• ntpfapi::PF_ROBUSTNESS_CONTROL_COMMAND
• ntpfapi::PREFETCHER_INFORMATION_CLASS
• ntpfapi::SUPERFETCH_INFORMATION_CLASS
• ntpnpapi::PLUGPLAY_CONTROL_CLASS
• ntpnpapi::PLUGPLAY_EVENT_CATEGORY
• ntpoapi::POWER_INFORMATION_LEVEL_INTERNAL
• ntpoapi::POWER_REQUEST_TYPE_INTERNAL
• ntpoapi::POWER_S0_DISCONNECTED_REASON
• ntpoapi::POWER_STATE_HANDLER_TYPE
• ntpoapi::PO_FIXED_WAKE_SOURCE_TYPE
• ntpoapi::PO_INTERNAL_WAKE_SOURCE_TYPE
• ntpoapi::PO_WAKE_SOURCE_TYPE
• ntpoapi::REQUESTER_TYPE
• ntpsapi::JOBOBJECT_IO_PRIORITY_LIMIT_FLAGS
• ntpsapi::JOBOBJECT_PAGE_PRIORITY_LIMIT_FLAGS
• ntpsapi::MEMORY_RESERVE_TYPE
• ntpsapi::PROCESS_STATE_CHANGE_TYPE
• ntpsapi::PROCESS_TLS_INFORMATION_TYPE
• ntpsapi::PROCESS_WORKING_SET_OPERATION
• ntpsapi::PS_ATTRIBUTE_NUM
• ntpsapi::PS_CREATE_STATE
• ntpsapi::PS_MITIGATION_OPTION
• ntpsapi::PS_PROTECTED_SIGNER
• ntpsapi::PS_PROTECTED_TYPE
• ntpsapi::PS_STD_HANDLE_STATE
• ntpsapi::SE_SAFE_OPEN_PROMPT_EXPERIENCE_RESULTS
• ntpsapi::THREAD_STATE_CHANGE_TYPE
• ntpsapi::THREAD_UMS_INFORMATION_COMMAND
• ntpsapi::THREAD_WORKLOAD_CLASS
• ntregapi::CM_EXTENDED_PARAMETER_TYPE
• ntregapi::REG_ACTION
• ntrtl::APPCONTAINER_SID_TYPE
• ntrtl::FUNCTION_TABLE_TYPE
• ntrtl::HEAP_COMPATIBILITY_MODE
• ntrtl::IMAGE_MITIGATION_POLICY
• ntrtl::RTL_BSD_ITEM_TYPE
• ntrtl::RTL_FEATURE_CONFIGURATION_TYPE
• ntrtl::RTL_IMAGE_MITIGATION_OPTION_STATE
• ntrtl::RTL_NORM_FORM
• ntrtl::RTL_PATH_TYPE
• ntsam::ALIAS_INFORMATION_CLASS
• ntsam::DOMAIN_DISPLAY_INFORMATION
• ntsam::DOMAIN_INFORMATION_CLASS
• ntsam::DOMAIN_LOCALIZABLE_ACCOUNTS_INFORMATION
• ntsam::DOMAIN_PASSWORD_CONSTRUCTION
• ntsam::DOMAIN_SERVER_ENABLE_STATE
• ntsam::DOMAIN_SERVER_ROLE
• ntsam::GROUP_INFORMATION_CLASS
• ntsam::PASSWORD_POLICY_VALIDATION_TYPE
• ntsam::SAM_ACCOUNT_TYPE
• ntsam::SAM_GENERIC_OPERATION_TYPE
• ntsam::SAM_VALIDATE_VALIDATION_STATUS
• ntsam::SECURITY_DB_DELTA_TYPE
• ntsam::SECURITY_DB_OBJECT_TYPE
• ntsam::USER_INFORMATION_CLASS
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_OPERATION
• nttp::TP_TRACE_TYPE
• ntwow64::WOW64_SHARED_INFORMATION
• ntxcapi::KCONTINUE_TYPE
• subprocesstag::TAG_INFO_LEVEL
• subprocesstag::TAG_TYPE
• winsta::ASYNCCONNECTCLASS
• winsta::CALLBACKCLASS
• winsta::CDCLASS
• winsta::FLOWCONTROLCLASS
• winsta::LOADFACTORTYPE
• winsta::RECEIVEFLOWCONTROLCLASS
• winsta::SDCLASS
• winsta::SHADOWCLASS
• winsta::SHADOWSTATECLASS
• winsta::TRANSMITFLOWCONTROLCLASS
• winsta::WINSTATIONINFOCLASS
• winsta::WINSTATIONSTATECLASS

Unions

• ntexapi::SECURE_SPECULATION_CONTROL_INFORMATION
• ntpsapi::PROCESS_UPTIME_INFORMATION_1
• ntpsapi::SILOOBJECT_ROOT_DIRECTORY_1
• ntseapi::TOKEN_SECURITY_ATTRIBUTES_INFORMATION_1

Functions

• ntbcd::BcdCloseObject
• ntbcd::BcdCloseStore
• ntbcd::BcdCopyObject
• ntbcd::BcdCopyObjectEx
• ntbcd::BcdCopyObjects
• ntbcd::BcdCreateObject
• ntbcd::BcdCreateStore
• ntbcd::BcdDeleteElement
• ntbcd::BcdDeleteObject
• ntbcd::BcdDeleteObjectReferences
• ntbcd::BcdDeleteSystemStore
• ntbcd::BcdEnumerateAndUnpackElements
• ntbcd::BcdEnumerateElementTypes
• ntbcd::BcdEnumerateElements
• ntbcd::BcdEnumerateElementsWithFlags
• ntbcd::BcdEnumerateObjects
• ntbcd::BcdExportStore
• ntbcd::BcdExportStoreEx
• ntbcd::BcdFlushStore
• ntbcd::BcdForciblyUnloadStore
• ntbcd::BcdGetElementData
• ntbcd::BcdGetElementDataWithFlags
• ntbcd::BcdGetSystemStorePath
• ntbcd::BcdImportStore
• ntbcd::BcdImportStoreWithFlags
• ntbcd::BcdInitializeBcdSyncMutant
• ntbcd::BcdMarkAsSystemStore
• ntbcd::BcdMigrateObjectElementValues
• ntbcd::BcdOpenObject
• ntbcd::BcdOpenStore
• ntbcd::BcdOpenStoreFromFile
• ntbcd::BcdOpenSystemStore
• ntbcd::BcdQueryObject
• ntbcd::BcdSetElementData
• ntbcd::BcdSetElementDataWithFlags
• ntbcd::BcdSetLogging
• ntbcd::BcdSetSystemStoreDevice
• ntdbg::DbgBreakPoint
• ntdbg::DbgUiConnectToDbg
• ntdbg::DbgUiContinue
• ntdbg::DbgUiConvertStateChangeStructure
• ntdbg::DbgUiConvertStateChangeStructureEx
• ntdbg::DbgUiDebugActiveProcess
• ntdbg::DbgUiGetThreadDebugObject
• ntdbg::DbgUiIssueRemoteBreakin
• ntdbg::DbgUiRemoteBreakin
• ntdbg::DbgUiSetThreadDebugObject
• ntdbg::DbgUiStopDebugging
• ntdbg::DbgUiWaitStateChange
• ntdbg::DbgUserBreakPoint
• ntdbg::EtwEventRegister
• ntdbg::NtCreateDebugObject
• ntdbg::NtDebugActiveProcess
• ntdbg::NtDebugContinue
• ntdbg::NtRemoveProcessDebug
• ntdbg::NtSetInformationDebugObject
• ntdbg::NtWaitForDebugEvent
• ntexapi::NtAddAtom
• ntexapi::NtAddAtomEx
• ntexapi::NtAddBootEntry
• ntexapi::NtAddDriverEntry
• ntexapi::NtAllocateLocallyUniqueId
• ntexapi::NtAllocateUuids
• ntexapi::NtCancelTimer
• ntexapi::NtCancelTimer2
• ntexapi::NtClearEvent
• ntexapi::NtConvertBetweenAuxiliaryCounterAndPerformanceCounter
• ntexapi::NtCreateEvent
• ntexapi::NtCreateEventPair
• ntexapi::NtCreateIRTimer
• ntexapi::NtCreateKeyedEvent
• ntexapi::NtCreateMutant
• ntexapi::NtCreateProfile
• ntexapi::NtCreateProfileEx
• ntexapi::NtCreateSemaphore
• ntexapi::NtCreateTimer
• ntexapi::NtCreateTimer2
• ntexapi::NtCreateWnfStateName
• ntexapi::NtCreateWorkerFactory
• ntexapi::NtDelayExecution
• ntexapi::NtDeleteAtom
• ntexapi::NtDeleteBootEntry
• ntexapi::NtDeleteDriverEntry
• ntexapi::NtDeleteWnfStateData
• ntexapi::NtDeleteWnfStateName
• ntexapi::NtDisplayString
• ntexapi::NtDrawText
• ntexapi::NtEnumerateBootEntries
• ntexapi::NtEnumerateDriverEntries
• ntexapi::NtEnumerateSystemEnvironmentValuesEx
• ntexapi::NtFilterBootOption
• ntexapi::NtFindAtom
• ntexapi::NtFlushInstallUILanguage
• ntexapi::NtGetCompleteWnfStateSubscription
• ntexapi::NtGetMUIRegistryInfo
• ntexapi::NtInitializeNlsFiles
• ntexapi::NtIsUILanguageComitted
• ntexapi::NtMapCMFModule
• ntexapi::NtModifyBootEntry
• ntexapi::NtModifyDriverEntry
• ntexapi::NtOpenEvent
• ntexapi::NtOpenEventPair
• ntexapi::NtOpenKeyedEvent
• ntexapi::NtOpenMutant
• ntexapi::NtOpenSemaphore
• ntexapi::NtOpenTimer
• ntexapi::NtPulseEvent
• ntexapi::NtQueryAuxiliaryCounterFrequency
• ntexapi::NtQueryBootEntryOrder
• ntexapi::NtQueryBootOptions
• ntexapi::NtQueryDefaultLocale
• ntexapi::NtQueryDefaultUILanguage
• ntexapi::NtQueryDriverEntryOrder
• ntexapi::NtQueryEvent
• ntexapi::NtQueryInformationAtom
• ntexapi::NtQueryInformationWorkerFactory
• ntexapi::NtQueryInstallUILanguage
• ntexapi::NtQueryIntervalProfile
• ntexapi::NtQueryLicenseValue
• ntexapi::NtQueryMutant
• ntexapi::NtQueryPerformanceCounter
• ntexapi::NtQuerySemaphore
• ntexapi::NtQuerySystemEnvironmentValue
• ntexapi::NtQuerySystemEnvironmentValueEx
• ntexapi::NtQuerySystemInformationEx
• ntexapi::NtQueryTimer
• ntexapi::NtQueryWnfStateData
• ntexapi::NtQueryWnfStateNameInformation
• ntexapi::NtRaiseHardError
• ntexapi::NtReleaseCMFViewOwnership
• ntexapi::NtReleaseKeyedEvent
• ntexapi::NtReleaseMutant
• ntexapi::NtReleaseSemaphore
• ntexapi::NtReleaseWorkerFactoryWorker
• ntexapi::NtResetEvent
• ntexapi::NtSetBootEntryOrder
• ntexapi::NtSetBootOptions
• ntexapi::NtSetDefaultHardErrorPort
• ntexapi::NtSetDefaultLocale
• ntexapi::NtSetDefaultUILanguage
• ntexapi::NtSetDriverEntryOrder
• ntexapi::NtSetEvent
• ntexapi::NtSetEventBoostPriority
• ntexapi::NtSetHighEventPair
• ntexapi::NtSetHighWaitLowEventPair
• ntexapi::NtSetIRTimer
• ntexapi::NtSetInformationWorkerFactory
• ntexapi::NtSetIntervalProfile
• ntexapi::NtSetLowEventPair
• ntexapi::NtSetLowWaitHighEventPair
• ntexapi::NtSetSystemEnvironmentValue
• ntexapi::NtSetSystemEnvironmentValueEx
• ntexapi::NtSetSystemInformation
• ntexapi::NtSetSystemTime
• ntexapi::NtSetTimer
• ntexapi::NtSetTimer2
• ntexapi::NtSetTimerEx
• ntexapi::NtSetTimerResolution
• ntexapi::NtSetUuidSeed
• ntexapi::NtSetWnfProcessNotificationEvent
• ntexapi::NtShutdownSystem
• ntexapi::NtShutdownWorkerFactory
• ntexapi::NtStartProfile
• ntexapi::NtStopProfile
• ntexapi::NtSubscribeWnfStateChange
• ntexapi::NtSystemDebugControl
• ntexapi::NtTranslateFilePath
• ntexapi::NtUmsThreadYield
• ntexapi::NtUnsubscribeWnfStateChange
• ntexapi::NtUpdateWnfStateData
• ntexapi::NtWaitForKeyedEvent
• ntexapi::NtWaitForWorkViaWorkerFactory
• ntexapi::NtWaitHighEventPair
• ntexapi::NtWaitLowEventPair
• ntexapi::NtWorkerFactoryWorkerReady
• ntexapi::new_bitfield_1
• ntioapi::NtAssociateWaitCompletionPacket
• ntioapi::NtCancelIoFile
• ntioapi::NtCancelSynchronousIoFile
• ntioapi::NtCancelWaitCompletionPacket
• ntioapi::NtCreateIoCompletion
• ntioapi::NtCreateMailslotFile
• ntioapi::NtCreateNamedPipeFile
• ntioapi::NtCreateWaitCompletionPacket
• ntioapi::NtDeleteFile
• ntioapi::NtFlushBuffersFile
• ntioapi::NtLoadDriver
• ntioapi::NtNotifyChangeDirectoryFile
• ntioapi::NtNotifyChangeDirectoryFileEx
• ntioapi::NtNotifyChangeSession
• ntioapi::NtOpenIoCompletion
• ntioapi::NtOpenSession
• ntioapi::NtQueryAttributesFile
• ntioapi::NtQueryEaFile
• ntioapi::NtQueryFullAttributesFile
• ntioapi::NtQueryIoCompletion
• ntioapi::NtReadFileScatter
• ntioapi::NtRemoveIoCompletion
• ntioapi::NtRemoveIoCompletionEx
• ntioapi::NtSetEaFile
• ntioapi::NtSetIoCompletion
• ntioapi::NtSetIoCompletionEx
• ntioapi::NtUnloadDriver
• ntioapi::NtWriteFileGather
• ntkeapi::NtCallbackReturn
• ntkeapi::NtFlushProcessWriteBuffers
• ntkeapi::NtQueryDebugFilterState
• ntkeapi::NtSetDebugFilterState
• ntkeapi::NtYieldExecution
• ntldr::LdrAccessResource
• ntldr::LdrAddDllDirectory
• ntldr::LdrAddLoadAsDataTable
• ntldr::LdrAddRefDll
• ntldr::LdrControlFlowGuardEnforced
• ntldr::LdrDisableThreadCalloutsForDll
• ntldr::LdrEnumResources
• ntldr::LdrEnumerateLoadedModules
• ntldr::LdrFindEntryForAddress
• ntldr::LdrFindResourceDirectory_U
• ntldr::LdrFindResourceEx_U
• ntldr::LdrFindResource_U
• ntldr::LdrGetDllDirectory
• ntldr::LdrGetDllFullName
• ntldr::LdrGetDllHandle
• ntldr::LdrGetDllHandleByMapping
• ntldr::LdrGetDllHandleByName
• ntldr::LdrGetDllHandleEx
• ntldr::LdrGetDllPath
• ntldr::LdrGetFailureData
• ntldr::LdrGetFileNameFromLoadAsDataTable
• ntldr::LdrGetKnownDllSectionHandle
• ntldr::LdrGetProcedureAddress
• ntldr::LdrGetProcedureAddressEx
• ntldr::LdrGetProcedureAddressForCaller
• ntldr::LdrIsModuleSxsRedirected
• ntldr::LdrLoadAlternateResourceModule
• ntldr::LdrLoadAlternateResourceModuleEx
• ntldr::LdrLoadDll
• ntldr::LdrLockLoaderLock
• ntldr::LdrOpenImageFileOptionsKey
• ntldr::LdrProcessRelocationBlock
• ntldr::LdrProcessRelocationBlockEx
• ntldr::LdrQueryImageFileExecutionOptions
• ntldr::LdrQueryImageFileExecutionOptionsEx
• ntldr::LdrQueryImageFileKeyOption
• ntldr::LdrQueryModuleServiceTags
• ntldr::LdrQueryOptionalDelayLoadedAPI
• ntldr::LdrQueryProcessModuleInformation
• ntldr::LdrRegisterDllNotification
• ntldr::LdrRelocateImage
• ntldr::LdrRelocateImageWithBias
• ntldr::LdrRemoveDllDirectory
• ntldr::LdrRemoveLoadAsDataTable
• ntldr::LdrResolveDelayLoadedAPI
• ntldr::LdrResolveDelayLoadsFromDll
• ntldr::LdrSetDefaultDllDirectories
• ntldr::LdrSetDllDirectory
• ntldr::LdrSetImplicitPathOptions
• ntldr::LdrShutdownProcess
• ntldr::LdrShutdownThread
• ntldr::LdrStandardizeSystemPath
• ntldr::LdrUnloadAlternateResourceModule
• ntldr::LdrUnloadAlternateResourceModuleEx
• ntldr::LdrUnloadDll
• ntldr::LdrUnlockLoaderLock
• ntldr::LdrUnregisterDllNotification
• ntldr::LdrUpdatePackageSearchPath
• ntldr::LdrVerifyImageMatchesChecksum
• ntldr::LdrVerifyImageMatchesChecksumEx
• ntldr::LdrVerifyMappedImageMatchesChecksum
• ntlpcapi::AlpcAdjustCompletionListConcurrencyCount
• ntlpcapi::AlpcFreeCompletionListMessage
• ntlpcapi::AlpcGetCompletionListLastMessageInformation
• ntlpcapi::AlpcGetCompletionListMessageAttributes
• ntlpcapi::AlpcGetHeaderSize
• ntlpcapi::AlpcGetMessageAttribute
• ntlpcapi::AlpcGetMessageFromCompletionList
• ntlpcapi::AlpcGetOutstandingCompletionListMessageCount
• ntlpcapi::AlpcInitializeMessageAttribute
• ntlpcapi::AlpcMaxAllowedMessageLength
• ntlpcapi::AlpcRegisterCompletionList
• ntlpcapi::AlpcRegisterCompletionListWorkerThread
• ntlpcapi::AlpcRundownCompletionList
• ntlpcapi::AlpcUnregisterCompletionList
• ntlpcapi::AlpcUnregisterCompletionListWorkerThread
• ntlpcapi::NtAcceptConnectPort
• ntlpcapi::NtAlpcAcceptConnectPort
• ntlpcapi::NtAlpcCancelMessage
• ntlpcapi::NtAlpcConnectPort
• ntlpcapi::NtAlpcConnectPortEx
• ntlpcapi::NtAlpcCreatePort
• ntlpcapi::NtAlpcCreatePortSection
• ntlpcapi::NtAlpcCreateResourceReserve
• ntlpcapi::NtAlpcCreateSectionView
• ntlpcapi::NtAlpcCreateSecurityContext
• ntlpcapi::NtAlpcDeletePortSection
• ntlpcapi::NtAlpcDeleteResourceReserve
• ntlpcapi::NtAlpcDeleteSectionView
• ntlpcapi::NtAlpcDeleteSecurityContext
• ntlpcapi::NtAlpcDisconnectPort
• ntlpcapi::NtAlpcImpersonateClientContainerOfPort
• ntlpcapi::NtAlpcImpersonateClientOfPort
• ntlpcapi::NtAlpcOpenSenderProcess
• ntlpcapi::NtAlpcOpenSenderThread
• ntlpcapi::NtAlpcQueryInformation
• ntlpcapi::NtAlpcQueryInformationMessage
• ntlpcapi::NtAlpcRevokeSecurityContext
• ntlpcapi::NtAlpcSendWaitReceivePort
• ntlpcapi::NtAlpcSetInformation
• ntlpcapi::NtCompleteConnectPort
• ntlpcapi::NtConnectPort
• ntlpcapi::NtCreatePort
• ntlpcapi::NtCreateWaitablePort
• ntlpcapi::NtImpersonateClientOfPort
• ntlpcapi::NtListenPort
• ntlpcapi::NtQueryInformationPort
• ntlpcapi::NtReadRequestData
• ntlpcapi::NtReplyPort
• ntlpcapi::NtReplyWaitReceivePort
• ntlpcapi::NtReplyWaitReceivePortEx
• ntlpcapi::NtReplyWaitReplyPort
• ntlpcapi::NtRequestPort
• ntlpcapi::NtRequestWaitReplyPort
• ntlpcapi::NtSecureConnectPort
• ntlpcapi::NtWriteRequestData
• ntmisc::NtTraceControl
• ntmisc::NtTraceEvent
• ntmisc::NtVdmControl
• ntmmapi::NtAllocateUserPhysicalPages
• ntmmapi::NtAllocateUserPhysicalPagesEx
• ntmmapi::NtAllocateVirtualMemoryEx
• ntmmapi::NtAreMappedFilesTheSame
• ntmmapi::NtCallEnclave
• ntmmapi::NtCreateEnclave
• ntmmapi::NtCreatePagingFile
• ntmmapi::NtCreatePartition
• ntmmapi::NtExtendSection
• ntmmapi::NtFlushInstructionCache
• ntmmapi::NtFlushVirtualMemory
• ntmmapi::NtFlushWriteBuffer
• ntmmapi::NtFreeUserPhysicalPages
• ntmmapi::NtGetWriteWatch
• ntmmapi::NtInitializeEnclave
• ntmmapi::NtLoadEnclaveData
• ntmmapi::NtLockVirtualMemory
• ntmmapi::NtMapUserPhysicalPages
• ntmmapi::NtMapUserPhysicalPagesScatter
• ntmmapi::NtMapViewOfSection
• ntmmapi::NtMapViewOfSectionEx
• ntmmapi::NtOpenPartition
• ntmmapi::NtOpenSection
• ntmmapi::NtProtectVirtualMemory
• ntmmapi::NtQuerySection
• ntmmapi::NtReadVirtualMemory
• ntmmapi::NtReadVirtualMemoryEx
• ntmmapi::NtResetWriteWatch
• ntmmapi::NtTerminateEnclave
• ntmmapi::NtUnlockVirtualMemory
• ntmmapi::NtUnmapViewOfSection
• ntmmapi::NtUnmapViewOfSectionEx
• ntmmapi::NtWriteVirtualMemory
• ntobapi::NtCompareObjects
• ntobapi::NtCreateDirectoryObject
• ntobapi::NtCreateDirectoryObjectEx
• ntobapi::NtCreatePrivateNamespace
• ntobapi::NtCreateSymbolicLinkObject
• ntobapi::NtDeletePrivateNamespace
• ntobapi::NtDuplicateObject
• ntobapi::NtMakePermanentObject
• ntobapi::NtMakeTemporaryObject
• ntobapi::NtOpenDirectoryObject
• ntobapi::NtOpenPrivateNamespace
• ntobapi::NtOpenSymbolicLinkObject
• ntobapi::NtQueryDirectoryObject
• ntobapi::NtQuerySymbolicLinkObject
• ntobapi::NtSetInformationObject
• ntobapi::NtSetInformationSymbolicLink
• ntobapi::NtSignalAndWaitForSingleObject
• ntobapi::NtWaitForMultipleObjects
• ntobapi::NtWaitForMultipleObjects32
• ntpnpapi::NtDisableLastKnownGood
• ntpnpapi::NtEnableLastKnownGood
• ntpnpapi::NtPlugPlayControl
• ntpnpapi::NtReplacePartitionUnit
• ntpnpapi::NtSerializeBoot
• ntpoapi::NtGetDevicePowerState
• ntpoapi::NtInitiatePowerAction
• ntpoapi::NtIsSystemResumeAutomatic
• ntpoapi::NtSetSystemPowerState
• ntpoapi::NtSetThreadExecutionState
• ntpsapi::NtAlertResumeThread
• ntpsapi::NtAlertThread
• ntpsapi::NtAlertThreadByThreadId
• ntpsapi::NtAllocateReserveObject
• ntpsapi::NtAssignProcessToJobObject
• ntpsapi::NtChangeProcessState
• ntpsapi::NtChangeThreadState
• ntpsapi::NtCreateJobObject
• ntpsapi::NtCreateJobSet
• ntpsapi::NtCreateProcess
• ntpsapi::NtCreateProcessEx
• ntpsapi::NtCreateProcessStateChange
• ntpsapi::NtCreateThread
• ntpsapi::NtCreateThreadEx
• ntpsapi::NtCreateThreadStateChange
• ntpsapi::NtCreateUserProcess
• ntpsapi::NtGetContextThread
• ntpsapi::NtGetCurrentProcessorNumber
• ntpsapi::NtGetCurrentProcessorNumberEx
• ntpsapi::NtGetNextProcess
• ntpsapi::NtGetNextThread
• ntpsapi::NtImpersonateThread
• ntpsapi::NtIsProcessInJob
• ntpsapi::NtOpenJobObject
• ntpsapi::NtOpenThread
• ntpsapi::NtPssCaptureVaSpaceBulk
• ntpsapi::NtQueryInformationJobObject
• ntpsapi::NtQueryPortInformationProcess
• ntpsapi::NtQueueApcThread
• ntpsapi::NtQueueApcThreadEx
• ntpsapi::NtQueueApcThreadEx2
• ntpsapi::NtRegisterThreadTerminatePort
• ntpsapi::NtResumeProcess
• ntpsapi::NtResumeThread
• ntpsapi::NtRevertContainerImpersonation
• ntpsapi::NtSetContextThread
• ntpsapi::NtSetInformationJobObject
• ntpsapi::NtSetInformationProcess
• ntpsapi::NtSetLdtEntries
• ntpsapi::NtSuspendProcess
• ntpsapi::NtSuspendThread
• ntpsapi::NtTerminateJobObject
• ntpsapi::NtTerminateProcess
• ntpsapi::NtTerminateThread
• ntpsapi::NtTestAlert
• ntpsapi::NtWaitForAlertByThreadId
• ntpsapi::PssNtCaptureSnapshot
• ntregapi::NtCommitRegistryTransaction
• ntregapi::NtCompactKeys
• ntregapi::NtCompressKey
• ntregapi::NtCreateKey
• ntregapi::NtCreateKeyTransacted
• ntregapi::NtCreateRegistryTransaction
• ntregapi::NtDeleteKey
• ntregapi::NtDeleteValueKey
• ntregapi::NtEnumerateKey
• ntregapi::NtEnumerateValueKey
• ntregapi::NtFlushKey
• ntregapi::NtFreezeRegistry
• ntregapi::NtInitializeRegistry
• ntregapi::NtLoadKey
• ntregapi::NtLoadKey2
• ntregapi::NtLoadKey3
• ntregapi::NtLoadKeyEx
• ntregapi::NtLockProductActivationKeys
• ntregapi::NtLockRegistryKey
• ntregapi::NtNotifyChangeKey
• ntregapi::NtOpenKey
• ntregapi::NtOpenKeyEx
• ntregapi::NtOpenKeyTransacted
• ntregapi::NtOpenKeyTransactedEx
• ntregapi::NtQueryKey
• ntregapi::NtQueryOpenSubKeys
• ntregapi::NtQueryOpenSubKeysEx
• ntregapi::NtQueryValueKey
• ntregapi::NtReplaceKey
• ntregapi::NtRestoreKey
• ntregapi::NtSaveKey
• ntregapi::NtSaveKeyEx
• ntregapi::NtSaveMergedKeys
• ntregapi::NtSetValueKey
• ntregapi::NtThawRegistry
• ntregapi::NtUnloadKey
• ntregapi::NtUnloadKey2
• ntregapi::NtUnloadKeyEx
• ntrtl::LdrInitializeThunk
• ntrtl::NtCopyFileChunk
• ntrtl::RtlAcquirePebLock
• ntrtl::RtlAcquirePrivilege
• ntrtl::RtlAcquireReleaseSRWLockExclusive
• ntrtl::RtlAcquireResourceExclusive
• ntrtl::RtlAcquireResourceShared
• ntrtl::RtlAcquireSRWLockExclusive
• ntrtl::RtlAcquireSRWLockShared
• ntrtl::RtlActivateActivationContext
• ntrtl::RtlActivateActivationContextEx
• ntrtl::RtlAddAccessAllowedObjectAce
• ntrtl::RtlAddAccessDeniedAce
• ntrtl::RtlAddAccessDeniedAceEx
• ntrtl::RtlAddAccessDeniedObjectAce
• ntrtl::RtlAddAtomToAtomTable
• ntrtl::RtlAddAuditAccessAce
• ntrtl::RtlAddAuditAccessAceEx
• ntrtl::RtlAddAuditAccessObjectAce
• ntrtl::RtlAddCompoundAce
• ntrtl::RtlAddIntegrityLabelToBoundaryDescriptor
• ntrtl::RtlAddMandatoryAce
• ntrtl::RtlAddRefActivationContext
• ntrtl::RtlAddResourceAttributeAce
• ntrtl::RtlAddSIDToBoundaryDescriptor
• ntrtl::RtlAddScopedPolicyIDAce
• ntrtl::RtlAddVectoredContinueHandler
• ntrtl::RtlAddVectoredExceptionHandler
• ntrtl::RtlAddressInSectionTable
• ntrtl::RtlAdjustPrivilege
• ntrtl::RtlAllocateFromPeb
• ntrtl::RtlAllocateHandle
• ntrtl::RtlAllocateMemoryBlockLookaside
• ntrtl::RtlAllocateMemoryZone
• ntrtl::RtlAnsiCharToUnicodeChar
• ntrtl::RtlAppendAsciizToString
• ntrtl::RtlAppxIsFileOwnedByTrustedInstaller
• ntrtl::RtlAreLongPathsEnabled
• ntrtl::RtlBarrier
• ntrtl::RtlBarrierForDelete
• ntrtl::RtlCapabilityCheck
• ntrtl::RtlCheckBootStatusIntegrity
• ntrtl::RtlCheckForOrphanedCriticalSections
• ntrtl::RtlCheckPortableOperatingSystem
• ntrtl::RtlCheckSandboxedToken
• ntrtl::RtlCheckTokenCapability
• ntrtl::RtlCheckTokenMembership
• ntrtl::RtlCheckTokenMembershipEx
• ntrtl::RtlCleanUpTEBLangLists
• ntrtl::RtlClearAllBitsEx
• ntrtl::RtlClearBitEx
• ntrtl::RtlCloneUserProcess
• ntrtl::RtlCommitDebugInfo
• ntrtl::RtlCompactHeap
• ntrtl::RtlCompareExchangePropertyStore
• ntrtl::RtlComputeCrc32
• ntrtl::RtlComputeImportTableHash
• ntrtl::RtlComputePrivatizedDllName_U
• ntrtl::RtlConsoleMultiByteToUnicodeN
• ntrtl::RtlConvertExclusiveToShared
• ntrtl::RtlConvertLCIDToString
• ntrtl::RtlConvertSharedToExclusive
• ntrtl::RtlConvertToAutoInheritSecurityObject
• ntrtl::RtlCopyContext
• ntrtl::RtlCopyExtendedContext
• ntrtl::RtlCopyLuidAndAttributesArray
• ntrtl::RtlCopySecurityDescriptor
• ntrtl::RtlCopySidAndAttributesArray
• ntrtl::RtlCreateActivationContext
• ntrtl::RtlCreateAndSetSD
• ntrtl::RtlCreateAtomTable
• ntrtl::RtlCreateBootStatusDataFile
• ntrtl::RtlCreateBoundaryDescriptor
• ntrtl::RtlCreateEnvironment
• ntrtl::RtlCreateEnvironmentEx
• ntrtl::RtlCreateMemoryBlockLookaside
• ntrtl::RtlCreateMemoryZone
• ntrtl::RtlCreateProcessParameters
• ntrtl::RtlCreateProcessParametersEx
• ntrtl::RtlCreateProcessReflection
• ntrtl::RtlCreateQueryDebugBuffer
• ntrtl::RtlCreateTagHeap
• ntrtl::RtlCreateTimer
• ntrtl::RtlCreateTimerQueue
• ntrtl::RtlCreateUnicodeStringFromAsciiz
• ntrtl::RtlCreateUserProcess
• ntrtl::RtlCreateUserProcessEx
• ntrtl::RtlCreateUserSecurityObject
• ntrtl::RtlCreateUserStack
• ntrtl::RtlCreateUserThread
• ntrtl::RtlCultureNameToLCID
• ntrtl::RtlCutoverTimeToSystemTime
• ntrtl::RtlDeCommitDebugInfo
• ntrtl::RtlDeNormalizeProcessParams
• ntrtl::RtlDeactivateActivationContext
• ntrtl::RtlDecodePointer
• ntrtl::RtlDecodeRemotePointer
• ntrtl::RtlDecodeSystemPointer
• ntrtl::RtlDefaultNpAcl
• ntrtl::RtlDelayExecution
• ntrtl::RtlDeleteAtomFromAtomTable
• ntrtl::RtlDeleteBarrier
• ntrtl::RtlDeleteBoundaryDescriptor
• ntrtl::RtlDeleteCriticalSection
• ntrtl::RtlDeleteResource
• ntrtl::RtlDeleteSecurityObject
• ntrtl::RtlDeleteTimer
• ntrtl::RtlDeleteTimerQueue
• ntrtl::RtlDeleteTimerQueueEx
• ntrtl::RtlDeregisterSecureMemoryCacheCallback
• ntrtl::RtlDeregisterWait
• ntrtl::RtlDeregisterWaitEx
• ntrtl::RtlDeriveCapabilitySidsFromName
• ntrtl::RtlDestroyAtomTable
• ntrtl::RtlDestroyEnvironment
• ntrtl::RtlDestroyHandleTable
• ntrtl::RtlDestroyMemoryBlockLookaside
• ntrtl::RtlDestroyMemoryZone
• ntrtl::RtlDestroyProcessParameters
• ntrtl::RtlDestroyQueryDebugBuffer
• ntrtl::RtlDetectHeapLeaks
• ntrtl::RtlDetermineDosPathNameType_U
• ntrtl::RtlDisableThreadProfiling
• ntrtl::RtlDllShutdownInProgress
• ntrtl::RtlDnsHostNameToComputerName
• ntrtl::RtlDoesFileExists_U
• ntrtl::RtlDoesNameContainWildCards
• ntrtl::RtlDosApplyFileIsolationRedirection_Ustr
• ntrtl::RtlDosLongPathNameToNtPathName_U_WithStatus
• ntrtl::RtlDosLongPathNameToRelativeNtPathName_U_WithStatus
• ntrtl::RtlDosPathNameToNtPathName_U
• ntrtl::RtlDosPathNameToNtPathName_U_WithStatus
• ntrtl::RtlDosPathNameToRelativeNtPathName_U
• ntrtl::RtlDosPathNameToRelativeNtPathName_U_WithStatus
• ntrtl::RtlDosSearchPath_U
• ntrtl::RtlDosSearchPath_Ustr
• ntrtl::RtlEmptyAtomTable
• ntrtl::RtlEnableThreadProfiling
• ntrtl::RtlEncodePointer
• ntrtl::RtlEncodeRemotePointer
• ntrtl::RtlEncodeSystemPointer
• ntrtl::RtlEnterCriticalSection
• ntrtl::RtlEnumProcessHeaps
• ntrtl::RtlEqualComputerName
• ntrtl::RtlEqualDomainName
• ntrtl::RtlEqualWnfChangeStamps
• ntrtl::RtlEraseUnicodeString
• ntrtl::RtlExitUserProcess
• ntrtl::RtlExitUserThread
• ntrtl::RtlExpandEnvironmentStrings
• ntrtl::RtlExpandEnvironmentStrings_U
• ntrtl::RtlExtendHeap
• ntrtl::RtlExtendMemoryBlockLookaside
• ntrtl::RtlFindAceByType
• ntrtl::RtlFindActivationContextSectionGuid
• ntrtl::RtlFindActivationContextSectionString
• ntrtl::RtlFindCharInUnicodeString
• ntrtl::RtlFindExportedRoutineByName
• ntrtl::RtlFindMessage
• ntrtl::RtlFindSetBitsAndClearEx
• ntrtl::RtlFindSetBitsEx
• ntrtl::RtlFindUnicodeSubstring
• ntrtl::RtlFirstFreeAce
• ntrtl::RtlFlsAlloc
• ntrtl::RtlFlsFree
• ntrtl::RtlFlsGetValue
• ntrtl::RtlFlsSetValue
• ntrtl::RtlFlushHeaps
• ntrtl::RtlFlushSecureMemoryCache
• ntrtl::RtlFormatCurrentUserKeyPath
• ntrtl::RtlFormatMessage
• ntrtl::RtlFormatMessageEx
• ntrtl::RtlFreeHandle
• ntrtl::RtlFreeMemoryBlockLookaside
• ntrtl::RtlFreeToPeb
• ntrtl::RtlFreeUserStack
• ntrtl::RtlGetActiveActivationContext
• ntrtl::RtlGetAppContainerNamedObjectPath
• ntrtl::RtlGetAppContainerParent
• ntrtl::RtlGetAppContainerSidType
• ntrtl::RtlGetControlSecurityDescriptor
• ntrtl::RtlGetCriticalSectionRecursionCount
• ntrtl::RtlGetCurrentDirectory_U
• ntrtl::RtlGetCurrentPeb
• ntrtl::RtlGetCurrentProcessorNumber
• ntrtl::RtlGetCurrentProcessorNumberEx
• ntrtl::RtlGetCurrentServiceSessionId
• ntrtl::RtlGetCurrentTransaction
• ntrtl::RtlGetEnabledExtendedAndSupervisorFeatures
• ntrtl::RtlGetExePath
• ntrtl::RtlGetExtendedContextLength
• ntrtl::RtlGetExtendedContextLength2
• ntrtl::RtlGetExtendedFeaturesMask
• ntrtl::RtlGetFileMUIPath
• ntrtl::RtlGetFrame
• ntrtl::RtlGetFullPathName_U
• ntrtl::RtlGetFullPathName_UEx
• ntrtl::RtlGetFullPathName_UstrEx
• ntrtl::RtlGetFunctionTableListHead
• ntrtl::RtlGetImageFileMachines
• ntrtl::RtlGetIntegerAtom
• ntrtl::RtlGetInterruptTimePrecise
• ntrtl::RtlGetLastNtStatus
• ntrtl::RtlGetLastWin32Error
• ntrtl::RtlGetLengthWithoutLastFullDosOrNtPathElement
• ntrtl::RtlGetLengthWithoutTrailingPathSeperators
• ntrtl::RtlGetLocaleFileMappingAddress
• ntrtl::RtlGetLongestNtPathLength
• ntrtl::RtlGetNativeSystemInformation
• ntrtl::RtlGetNtGlobalFlags
• ntrtl::RtlGetNtVersionNumbers
• ntrtl::RtlGetParentLocaleName
• ntrtl::RtlGetProcessHeaps
• ntrtl::RtlGetSearchPath
• ntrtl::RtlGetSecurityDescriptorRMControl
• ntrtl::RtlGetSetBootStatusData
• ntrtl::RtlGetSystemBootStatus
• ntrtl::RtlGetSystemTimeAndBias
• ntrtl::RtlGetSystemTimePrecise
• ntrtl::RtlGetThreadErrorMode
• ntrtl::RtlGetTokenNamedObjectPath
• ntrtl::RtlGetUnloadEventTrace
• ntrtl::RtlGetUnloadEventTraceEx
• ntrtl::RtlGetUserInfoHeap
• ntrtl::RtlGuardCheckLongJumpTarget
• ntrtl::RtlImageDirectoryEntryToData
• ntrtl::RtlImageNtHeader
• ntrtl::RtlImageNtHeaderEx
• ntrtl::RtlImageRvaToSection
• ntrtl::RtlImageRvaToVa
• ntrtl::RtlImpersonateSelf
• ntrtl::RtlImpersonateSelfEx
• ntrtl::RtlInitBarrier
• ntrtl::RtlInitNlsTables
• ntrtl::RtlInitializeBitMapEx
• ntrtl::RtlInitializeConditionVariable
• ntrtl::RtlInitializeContext
• ntrtl::RtlInitializeCriticalSection
• ntrtl::RtlInitializeCriticalSectionAndSpinCount
• ntrtl::RtlInitializeCriticalSectionEx
• ntrtl::RtlInitializeExtendedContext
• ntrtl::RtlInitializeExtendedContext2
• ntrtl::RtlInitializeHandleTable
• ntrtl::RtlInitializeResource
• ntrtl::RtlInitializeSRWLock
• ntrtl::RtlIntegerToChar
• ntrtl::RtlInterlockedClearBitRun
• ntrtl::RtlInterlockedSetBitRun
• ntrtl::RtlIsActivationContextActive
• ntrtl::RtlIsCapabilitySid
• ntrtl::RtlIsCriticalSectionLocked
• ntrtl::RtlIsCriticalSectionLockedByThread
• ntrtl::RtlIsCurrentProcess
• ntrtl::RtlIsCurrentThread
• ntrtl::RtlIsCurrentThreadAttachExempt
• ntrtl::RtlIsDosDeviceName_U
• ntrtl::RtlIsElevatedRid
• ntrtl::RtlIsEnclaveFeaturePresent
• ntrtl::RtlIsNameInExpression
• ntrtl::RtlIsNameInUnUpcasedExpression
• ntrtl::RtlIsPackageSid
• ntrtl::RtlIsParentOfChildAppContainer
• ntrtl::RtlIsProcessorFeaturePresent
• ntrtl::RtlIsTextUnicode
• ntrtl::RtlIsThreadWithinLoaderCallout
• ntrtl::RtlIsValidHandle
• ntrtl::RtlIsValidIndexHandle
• ntrtl::RtlIsValidLocaleName
• ntrtl::RtlIsValidProcessTrustLabelSid
• ntrtl::RtlKnownExceptionFilter
• ntrtl::RtlLCIDToCultureName
• ntrtl::RtlLargeIntegerToChar
• ntrtl::RtlLcidToLocaleName
• ntrtl::RtlLeaveCriticalSection
• ntrtl::RtlLengthSidAsUnicodeString
• ntrtl::RtlLoadString
• ntrtl::RtlLocaleNameToLcid
• ntrtl::RtlLocateExtendedFeature
• ntrtl::RtlLocateLegacyContext
• ntrtl::RtlLocateSupervisorFeature
• ntrtl::RtlLockBootStatusData
• ntrtl::RtlLockCurrentThread
• ntrtl::RtlLockHeap
• ntrtl::RtlLockMemoryBlockLookaside
• ntrtl::RtlLockMemoryZone
• ntrtl::RtlLockModuleSection
• ntrtl::RtlLookupAtomInAtomTable
• ntrtl::RtlMakeSelfRelativeSD
• ntrtl::RtlMultipleAllocateHeap
• ntrtl::RtlMultipleFreeHeap
• ntrtl::RtlNewInstanceSecurityObject
• ntrtl::RtlNewSecurityObject
• ntrtl::RtlNewSecurityObjectEx
• ntrtl::RtlNewSecurityObjectWithMultipleInheritance
• ntrtl::RtlNormalizeProcessParams
• ntrtl::RtlNotifyFeatureUsage
• ntrtl::RtlNtPathNameToDosPathName
• ntrtl::RtlOpenCurrentUser
• ntrtl::RtlOwnerAcesPresent
• ntrtl::RtlPinAtomInAtomTable
• ntrtl::RtlPopFrame
• ntrtl::RtlProtectHeap
• ntrtl::RtlPublishWnfStateData
• ntrtl::RtlPushFrame
• ntrtl::RtlQueryActivationContextApplicationSettings
• ntrtl::RtlQueryAllFeatureConfigurations
• ntrtl::RtlQueryAtomInAtomTable
• ntrtl::RtlQueryCriticalSectionOwner
• ntrtl::RtlQueryElevationFlags
• ntrtl::RtlQueryEnvironmentVariable
• ntrtl::RtlQueryEnvironmentVariable_U
• ntrtl::RtlQueryFeatureConfiguration
• ntrtl::RtlQueryFeatureConfigurationChangeStamp
• ntrtl::RtlQueryFeatureUsageNotificationSubscriptions
• ntrtl::RtlQueryHeapInformation
• ntrtl::RtlQueryImageMitigationPolicy
• ntrtl::RtlQueryInformationAcl
• ntrtl::RtlQueryInformationActivationContext
• ntrtl::RtlQueryInformationActiveActivationContext
• ntrtl::RtlQueryPackageClaims
• ntrtl::RtlQueryPerformanceCounter
• ntrtl::RtlQueryPerformanceFrequency
• ntrtl::RtlQueryProcessDebugInformation
• ntrtl::RtlQueryPropertyStore
• ntrtl::RtlQueryProtectedPolicy
• ntrtl::RtlQueryRegistryValuesEx
• ntrtl::RtlQuerySecurityObject
• ntrtl::RtlQueryTagHeap
• ntrtl::RtlQueryThreadProfiling
• ntrtl::RtlQueryTimeZoneInformation
• ntrtl::RtlQueryTokenHostIdAsUlong64
• ntrtl::RtlQueryUnbiasedInterruptTime
• ntrtl::RtlQueryWnfStateData
• ntrtl::RtlQueueApcWow64Thread
• ntrtl::RtlQueueWorkItem
• ntrtl::RtlRbInsertNodeEx
• ntrtl::RtlRbRemoveNode
• ntrtl::RtlReAllocateHeap
• ntrtl::RtlReadThreadProfilingData
• ntrtl::RtlRegisterFeatureConfigurationChangeNotification
• ntrtl::RtlRegisterSecureMemoryCacheCallback
• ntrtl::RtlRegisterThreadWithCsrss
• ntrtl::RtlRegisterWait
• ntrtl::RtlReleaseActivationContext
• ntrtl::RtlReleasePath
• ntrtl::RtlReleasePebLock
• ntrtl::RtlReleasePrivilege
• ntrtl::RtlReleaseRelativeName
• ntrtl::RtlReleaseResource
• ntrtl::RtlReleaseSRWLockExclusive
• ntrtl::RtlReleaseSRWLockShared
• ntrtl::RtlRemoteCall
• ntrtl::RtlRemovePrivileges
• ntrtl::RtlRemovePropertyStore
• ntrtl::RtlRemoveVectoredContinueHandler
• ntrtl::RtlRemoveVectoredExceptionHandler
• ntrtl::RtlReplaceSystemDirectoryInPath
• ntrtl::RtlReportException
• ntrtl::RtlReportExceptionEx
• ntrtl::RtlReportSilentProcessExit
• ntrtl::RtlResetMemoryBlockLookaside
• ntrtl::RtlResetMemoryZone
• ntrtl::RtlResetRtlTranslations
• ntrtl::RtlRestoreBootStatusDefaults
• ntrtl::RtlRestoreLastWin32Error
• ntrtl::RtlRestoreSystemBootStatusDefaults
• ntrtl::RtlRunDecodeUnicodeString
• ntrtl::RtlRunEncodeUnicodeString
• ntrtl::RtlSectionTableFromVirtualAddress
• ntrtl::RtlSelfRelativeToAbsoluteSD2
• ntrtl::RtlSetAttributesSecurityDescriptor
• ntrtl::RtlSetBitEx
• ntrtl::RtlSetControlSecurityDescriptor
• ntrtl::RtlSetCriticalSectionSpinCount
• ntrtl::RtlSetCurrentDirectory_U
• ntrtl::RtlSetCurrentEnvironment
• ntrtl::RtlSetCurrentTransaction
• ntrtl::RtlSetEnvironmentStrings
• ntrtl::RtlSetEnvironmentVar
• ntrtl::RtlSetEnvironmentVariable
• ntrtl::RtlSetExtendedFeaturesMask
• ntrtl::RtlSetFeatureConfigurations
• ntrtl::RtlSetHeapInformation
• ntrtl::RtlSetImageMitigationPolicy
• ntrtl::RtlSetInformationAcl
• ntrtl::RtlSetIoCompletionCallback
• ntrtl::RtlSetLastWin32Error
• ntrtl::RtlSetLastWin32ErrorAndNtStatusFromNtStatus
• ntrtl::RtlSetPortableOperatingSystem
• ntrtl::RtlSetProcessDebugInformation
• ntrtl::RtlSetProcessIsCritical
• ntrtl::RtlSetProtectedPolicy
• ntrtl::RtlSetSearchPathMode
• ntrtl::RtlSetSecurityDescriptorRMControl
• ntrtl::RtlSetSecurityObject
• ntrtl::RtlSetSecurityObjectEx
• ntrtl::RtlSetSystemBootStatus
• ntrtl::RtlSetThreadErrorMode
• ntrtl::RtlSetThreadIsCritical
• ntrtl::RtlSetThreadPoolStartFunc
• ntrtl::RtlSetTimeZoneInformation
• ntrtl::RtlSetUnhandledExceptionFilter
• ntrtl::RtlSetUserFlagsHeap
• ntrtl::RtlSetUserValueHeap
• ntrtl::RtlSidDominates
• ntrtl::RtlSidDominatesForTrust
• ntrtl::RtlSidEqualLevel
• ntrtl::RtlSidHashInitialize
• ntrtl::RtlSidHashLookup
• ntrtl::RtlSidIsHigherLevel
• ntrtl::RtlSizeHeap
• ntrtl::RtlSleepConditionVariableCS
• ntrtl::RtlSleepConditionVariableSRW
• ntrtl::RtlStringFromGUIDEx
• ntrtl::RtlSubscribeForFeatureUsageNotification
• ntrtl::RtlSubscribeWnfStateChangeNotification
• ntrtl::RtlSystemTimeToLocalTime
• ntrtl::RtlTestBitEx
• ntrtl::RtlTestProtectedAccess
• ntrtl::RtlTimeToElapsedTimeFields
• ntrtl::RtlTryAcquirePebLock
• ntrtl::RtlTryAcquireSRWLockExclusive
• ntrtl::RtlTryAcquireSRWLockShared
• ntrtl::RtlTryEnterCriticalSection
• ntrtl::RtlUlongByteSwap
• ntrtl::RtlUlonglongByteSwap
• ntrtl::RtlUnhandledExceptionFilter
• ntrtl::RtlUnhandledExceptionFilter2
• ntrtl::RtlUnlockBootStatusData
• ntrtl::RtlUnlockCurrentThread
• ntrtl::RtlUnlockHeap
• ntrtl::RtlUnlockMemoryBlockLookaside
• ntrtl::RtlUnlockMemoryZone
• ntrtl::RtlUnlockModuleSection
• ntrtl::RtlUnregisterFeatureConfigurationChangeNotification
• ntrtl::RtlUnsubscribeFromFeatureUsageNotifications
• ntrtl::RtlUnsubscribeWnfStateChangeNotification
• ntrtl::RtlUpcaseUnicodeStringToAnsiString
• ntrtl::RtlUpdateClonedCriticalSection
• ntrtl::RtlUpdateClonedSRWLock
• ntrtl::RtlUpdateTimer
• ntrtl::RtlUsageHeap
• ntrtl::RtlUserThreadStart
• ntrtl::RtlUshortByteSwap
• ntrtl::RtlValidAcl
• ntrtl::RtlValidProcessProtection
• ntrtl::RtlValidateHeap
• ntrtl::RtlValidateProcessHeaps
• ntrtl::RtlWaitOnAddress
• ntrtl::RtlWakeAddressAll
• ntrtl::RtlWakeAddressSingle
• ntrtl::RtlWakeAllConditionVariable
• ntrtl::RtlWakeConditionVariable
• ntrtl::RtlWalkHeap
• ntrtl::RtlWerpReportException
• ntrtl::RtlWow64ChangeThreadState
• ntrtl::RtlWow64EnableFsRedirection
• ntrtl::RtlWow64EnableFsRedirectionEx
• ntrtl::RtlWow64GetProcessMachines
• ntrtl::RtlWow64GetThreadContext
• ntrtl::RtlWow64SetThreadContext
• ntrtl::RtlZeroHeap
• ntrtl::RtlZombifyActivationContext
• ntsam::SamAddMemberToAlias
• ntsam::SamAddMemberToGroup
• ntsam::SamAddMultipleMembersToAlias
• ntsam::SamChangePasswordUser
• ntsam::SamChangePasswordUser2
• ntsam::SamChangePasswordUser3
• ntsam::SamCloseHandle
• ntsam::SamConnect
• ntsam::SamConnectWithCreds
• ntsam::SamCreateAliasInDomain
• ntsam::SamCreateGroupInDomain
• ntsam::SamCreateUser2InDomain
• ntsam::SamCreateUserInDomain
• ntsam::SamDeleteAlias
• ntsam::SamDeleteGroup
• ntsam::SamDeleteUser
• ntsam::SamEnumerateAliasesInDomain
• ntsam::SamEnumerateDomainsInSamServer
• ntsam::SamEnumerateGroupsInDomain
• ntsam::SamEnumerateUsersInDomain
• ntsam::SamFreeMemory
• ntsam::SamGetAliasMembership
• ntsam::SamGetCompatibilityMode
• ntsam::SamGetDisplayEnumerationIndex
• ntsam::SamGetGroupsForUser
• ntsam::SamGetMembersInAlias
• ntsam::SamGetMembersInGroup
• ntsam::SamLookupDomainInSamServer
• ntsam::SamLookupIdsInDomain
• ntsam::SamLookupNamesInDomain
• ntsam::SamLookupNamesInDomain2
• ntsam::SamOpenAlias
• ntsam::SamOpenDomain
• ntsam::SamOpenGroup
• ntsam::SamOpenUser
• ntsam::SamPerformGenericOperation
• ntsam::SamQueryDisplayInformation
• ntsam::SamQueryInformationAlias
• ntsam::SamQueryInformationDomain
• ntsam::SamQueryInformationGroup
• ntsam::SamQueryInformationUser
• ntsam::SamQueryLocalizableAccountsInDomain
• ntsam::SamQuerySecurityObject
• ntsam::SamRegisterObjectChangeNotification
• ntsam::SamRemoveMemberFromAlias
• ntsam::SamRemoveMemberFromForeignDomain
• ntsam::SamRemoveMemberFromGroup
• ntsam::SamRemoveMultipleMembersFromAlias
• ntsam::SamRidToSid
• ntsam::SamSetInformationAlias
• ntsam::SamSetInformationDomain
• ntsam::SamSetInformationGroup
• ntsam::SamSetInformationUser
• ntsam::SamSetMemberAttributesOfGroup
• ntsam::SamSetSecurityObject
• ntsam::SamShutdownSamServer
• ntsam::SamUnregisterObjectChangeNotification
• ntsam::SamValidatePassword
• ntseapi::NtAccessCheck
• ntseapi::NtAccessCheckByType
• ntseapi::NtAccessCheckByTypeResultList
• ntseapi::NtAdjustTokenClaimsAndDeviceGroups
• ntseapi::NtCompareSigningLevels
• ntseapi::NtCompareTokens
• ntseapi::NtCreateLowBoxToken
• ntseapi::NtCreateToken
• ntseapi::NtCreateTokenEx
• ntseapi::NtFilterTokenEx
• ntseapi::NtGetCachedSigningLevel
• ntseapi::NtQuerySecurityAttributesToken
• ntseapi::NtSetCachedSigningLevel
• ntsmss::RtlConnectToSm
• ntsmss::RtlSendMsgToSm
• nttmapi::NtFreezeTransactions
• nttmapi::NtThawTransactions
• nttp::TpAllocAlpcCompletion
• nttp::TpAllocAlpcCompletionEx
• nttp::TpAllocCleanupGroup
• nttp::TpAllocIoCompletion
• nttp::TpAllocPool
• nttp::TpAllocTimer
• nttp::TpAllocWait
• nttp::TpAllocWork
• nttp::TpCallbackLeaveCriticalSectionOnCompletion
• nttp::TpCallbackMayRunLong
• nttp::TpCallbackReleaseMutexOnCompletion
• nttp::TpCallbackReleaseSemaphoreOnCompletion
• nttp::TpCallbackSetEventOnCompletion
• nttp::TpCallbackUnloadDllOnCompletion
• nttp::TpCancelAsyncIoOperation
• nttp::TpCaptureCaller
• nttp::TpCheckTerminateWorker
• nttp::TpDisassociateCallback
• nttp::TpIsTimerSet
• nttp::TpPostWork
• nttp::TpQueryPoolStackInformation
• nttp::TpReleaseAlpcCompletion
• nttp::TpReleaseCleanupGroup
• nttp::TpReleaseCleanupGroupMembers
• nttp::TpReleaseIoCompletion
• nttp::TpReleasePool
• nttp::TpReleaseTimer
• nttp::TpReleaseWait
• nttp::TpReleaseWork
• nttp::TpSetPoolMaxThreads
• nttp::TpSetPoolMinThreads
• nttp::TpSetPoolStackInformation
• nttp::TpSetPoolThreadBasePriority
• nttp::TpSetTimer
• nttp::TpSetTimerEx
• nttp::TpSetWait
• nttp::TpSetWaitEx
• nttp::TpSimpleTryPost
• nttp::TpStartAsyncIoOperation
• nttp::TpWaitForAlpcCompletion
• nttp::TpWaitForIoCompletion
• nttp::TpWaitForTimer
• nttp::TpWaitForWait
• nttp::TpWaitForWork
• ntxcapi::NtContinue
• ntxcapi::NtContinueEx
• ntxcapi::NtRaiseException
• ntxcapi::RtlDispatchException
• ntxcapi::RtlRaiseStatus
• ntzwapi::ZwAcceptConnectPort
• ntzwapi::ZwAccessCheck
• ntzwapi::ZwAccessCheckAndAuditAlarm
• ntzwapi::ZwAccessCheckByType
• ntzwapi::ZwAccessCheckByTypeAndAuditAlarm
• ntzwapi::ZwAccessCheckByTypeResultList
• ntzwapi::ZwAccessCheckByTypeResultListAndAuditAlarm
• ntzwapi::ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
• ntzwapi::ZwAcquireCMFViewOwnership
• ntzwapi::ZwAddAtom
• ntzwapi::ZwAddAtomEx
• ntzwapi::ZwAddBootEntry
• ntzwapi::ZwAddDriverEntry
• ntzwapi::ZwAdjustGroupsToken
• ntzwapi::ZwAdjustPrivilegesToken
• ntzwapi::ZwAdjustTokenClaimsAndDeviceGroups
• ntzwapi::ZwAlertResumeThread
• ntzwapi::ZwAlertThread
• ntzwapi::ZwAlertThreadByThreadId
• ntzwapi::ZwAllocateReserveObject
• ntzwapi::ZwAllocateUserPhysicalPages
• ntzwapi::ZwAllocateUserPhysicalPagesEx
• ntzwapi::ZwAllocateUuids
• ntzwapi::ZwAlpcAcceptConnectPort
• ntzwapi::ZwAlpcCancelMessage
• ntzwapi::ZwAlpcConnectPort
• ntzwapi::ZwAlpcConnectPortEx
• ntzwapi::ZwAlpcCreatePort
• ntzwapi::ZwAlpcCreatePortSection
• ntzwapi::ZwAlpcCreateResourceReserve
• ntzwapi::ZwAlpcCreateSectionView
• ntzwapi::ZwAlpcCreateSecurityContext
• ntzwapi::ZwAlpcDeletePortSection
• ntzwapi::ZwAlpcDeleteResourceReserve
• ntzwapi::ZwAlpcDeleteSectionView
• ntzwapi::ZwAlpcDeleteSecurityContext
• ntzwapi::ZwAlpcDisconnectPort
• ntzwapi::ZwAlpcImpersonateClientContainerOfPort
• ntzwapi::ZwAlpcImpersonateClientOfPort
• ntzwapi::ZwAlpcOpenSenderProcess
• ntzwapi::ZwAlpcOpenSenderThread
• ntzwapi::ZwAlpcQueryInformation
• ntzwapi::ZwAlpcQueryInformationMessage
• ntzwapi::ZwAlpcRevokeSecurityContext
• ntzwapi::ZwAlpcSendWaitReceivePort
• ntzwapi::ZwAlpcSetInformation
• ntzwapi::ZwAreMappedFilesTheSame
• ntzwapi::ZwAssignProcessToJobObject
• ntzwapi::ZwAssociateWaitCompletionPacket
• ntzwapi::ZwCallEnclave
• ntzwapi::ZwCallbackReturn
• ntzwapi::ZwCancelIoFile
• ntzwapi::ZwCancelIoFileEx
• ntzwapi::ZwCancelSynchronousIoFile
• ntzwapi::ZwCancelTimer2
• ntzwapi::ZwCancelWaitCompletionPacket
• ntzwapi::ZwChangeProcessState
• ntzwapi::ZwChangeThreadState
• ntzwapi::ZwClearEvent
• ntzwapi::ZwCloseObjectAuditAlarm
• ntzwapi::ZwCompactKeys
• ntzwapi::ZwCompareObjects
• ntzwapi::ZwCompareSigningLevels
• ntzwapi::ZwCompareTokens
• ntzwapi::ZwCompleteConnectPort
• ntzwapi::ZwCompressKey
• ntzwapi::ZwConnectPort
• ntzwapi::ZwContinue
• ntzwapi::ZwContinueEx
• ntzwapi::ZwCreateDebugObject
• ntzwapi::ZwCreateDirectoryObjectEx
• ntzwapi::ZwCreateEnclave
• ntzwapi::ZwCreateEventPair
• ntzwapi::ZwCreateIRTimer
• ntzwapi::ZwCreateIoCompletion
• ntzwapi::ZwCreateJobObject
• ntzwapi::ZwCreateJobSet
• ntzwapi::ZwCreateKeyedEvent
• ntzwapi::ZwCreateLowBoxToken
• ntzwapi::ZwCreateMailslotFile
• ntzwapi::ZwCreateMutant
• ntzwapi::ZwCreateNamedPipeFile
• ntzwapi::ZwCreatePagingFile
• ntzwapi::ZwCreatePartition
• ntzwapi::ZwCreatePort
• ntzwapi::ZwCreatePrivateNamespace
• ntzwapi::ZwCreateProcess
• ntzwapi::ZwCreateProcessEx
• ntzwapi::ZwCreateProcessStateChange
• ntzwapi::ZwCreateProfile
• ntzwapi::ZwCreateProfileEx
• ntzwapi::ZwCreateSectionEx
• ntzwapi::ZwCreateSemaphore
• ntzwapi::ZwCreateSymbolicLinkObject
• ntzwapi::ZwCreateThread
• ntzwapi::ZwCreateThreadEx
• ntzwapi::ZwCreateThreadStateChange
• ntzwapi::ZwCreateTimer2
• ntzwapi::ZwCreateToken
• ntzwapi::ZwCreateTokenEx
• ntzwapi::ZwCreateUserProcess
• ntzwapi::ZwCreateWaitCompletionPacket
• ntzwapi::ZwCreateWaitablePort
• ntzwapi::ZwCreateWnfStateName
• ntzwapi::ZwCreateWorkerFactory
• ntzwapi::ZwDebugActiveProcess
• ntzwapi::ZwDebugContinue
• ntzwapi::ZwDelayExecution
• ntzwapi::ZwDeleteAtom
• ntzwapi::ZwDeleteBootEntry
• ntzwapi::ZwDeleteDriverEntry
• ntzwapi::ZwDeleteObjectAuditAlarm
• ntzwapi::ZwDeletePrivateNamespace
• ntzwapi::ZwDeleteWnfStateData
• ntzwapi::ZwDeleteWnfStateName
• ntzwapi::ZwDisableLastKnownGood
• ntzwapi::ZwEnableLastKnownGood
• ntzwapi::ZwEnumerateBootEntries
• ntzwapi::ZwEnumerateDriverEntries
• ntzwapi::ZwEnumerateSystemEnvironmentValuesEx
• ntzwapi::ZwExtendSection
• ntzwapi::ZwFilterBootOption
• ntzwapi::ZwFilterToken
• ntzwapi::ZwFilterTokenEx
• ntzwapi::ZwFindAtom
• ntzwapi::ZwFlushInstallUILanguage
• ntzwapi::ZwFlushInstructionCache
• ntzwapi::ZwFlushProcessWriteBuffers
• ntzwapi::ZwFlushWriteBuffer
• ntzwapi::ZwFreeUserPhysicalPages
• ntzwapi::ZwFreezeRegistry
• ntzwapi::ZwFreezeTransactions
• ntzwapi::ZwGetCachedSigningLevel
• ntzwapi::ZwGetCompleteWnfStateSubscription
• ntzwapi::ZwGetContextThread
• ntzwapi::ZwGetCurrentProcessorNumber
• ntzwapi::ZwGetCurrentProcessorNumberEx
• ntzwapi::ZwGetDevicePowerState
• ntzwapi::ZwGetMUIRegistryInfo
• ntzwapi::ZwGetNextProcess
• ntzwapi::ZwGetNextThread
• ntzwapi::ZwGetNlsSectionPtr
• ntzwapi::ZwGetPlugPlayEvent
• ntzwapi::ZwGetWriteWatch
• ntzwapi::ZwImpersonateAnonymousToken
• ntzwapi::ZwImpersonateClientOfPort
• ntzwapi::ZwImpersonateThread
• ntzwapi::ZwInitializeEnclave
• ntzwapi::ZwInitializeNlsFiles
• ntzwapi::ZwInitializeRegistry
• ntzwapi::ZwInitiatePowerAction
• ntzwapi::ZwIsProcessInJob
• ntzwapi::ZwIsSystemResumeAutomatic
• ntzwapi::ZwIsUILanguageComitted
• ntzwapi::ZwListenPort
• ntzwapi::ZwLoadEnclaveData
• ntzwapi::ZwLoadKey
• ntzwapi::ZwLoadKey2
• ntzwapi::ZwLoadKey3
• ntzwapi::ZwLoadKeyEx
• ntzwapi::ZwLockProductActivationKeys
• ntzwapi::ZwLockRegistryKey
• ntzwapi::ZwLockVirtualMemory
• ntzwapi::ZwMakePermanentObject
• ntzwapi::ZwManagePartition
• ntzwapi::ZwMapCMFModule
• ntzwapi::ZwMapUserPhysicalPages
• ntzwapi::ZwMapUserPhysicalPagesScatter
• ntzwapi::ZwModifyBootEntry
• ntzwapi::ZwModifyDriverEntry
• ntzwapi::ZwNotifyChangeDirectoryFile
• ntzwapi::ZwNotifyChangeDirectoryFileEx
• ntzwapi::ZwNotifyChangeMultipleKeys
• ntzwapi::ZwNotifyChangeSession
• ntzwapi::ZwOpenEventPair
• ntzwapi::ZwOpenIoCompletion
• ntzwapi::ZwOpenJobObject
• ntzwapi::ZwOpenKeyedEvent
• ntzwapi::ZwOpenMutant
• ntzwapi::ZwOpenObjectAuditAlarm
• ntzwapi::ZwOpenPartition
• ntzwapi::ZwOpenPrivateNamespace
• ntzwapi::ZwOpenSemaphore
• ntzwapi::ZwOpenSession
• ntzwapi::ZwOpenThread
• ntzwapi::ZwOpenThreadToken
• ntzwapi::ZwPlugPlayControl
• ntzwapi::ZwPrivilegeCheck
• ntzwapi::ZwPrivilegeObjectAuditAlarm
• ntzwapi::ZwPrivilegedServiceAuditAlarm
• ntzwapi::ZwPropagationComplete
• ntzwapi::ZwPropagationFailed
• ntzwapi::ZwProtectVirtualMemory
• ntzwapi::ZwPulseEvent
• ntzwapi::ZwQueryAttributesFile
• ntzwapi::ZwQueryBootEntryOrder
• ntzwapi::ZwQueryBootOptions
• ntzwapi::ZwQueryDebugFilterState
• ntzwapi::ZwQueryDefaultLocale
• ntzwapi::ZwQueryDefaultUILanguage
• ntzwapi::ZwQueryDirectoryObject
• ntzwapi::ZwQueryDriverEntryOrder
• ntzwapi::ZwQueryEvent
• ntzwapi::ZwQueryInformationAtom
• ntzwapi::ZwQueryInformationJobObject
• ntzwapi::ZwQueryInformationPort
• ntzwapi::ZwQueryInformationProcess
• ntzwapi::ZwQueryInformationThread
• ntzwapi::ZwQueryInformationWorkerFactory
• ntzwapi::ZwQueryInstallUILanguage
• ntzwapi::ZwQueryIntervalProfile
• ntzwapi::ZwQueryIoCompletion
• ntzwapi::ZwQueryLicenseValue
• ntzwapi::ZwQueryMultipleValueKey
• ntzwapi::ZwQueryMutant
• ntzwapi::ZwQueryOpenSubKeys
• ntzwapi::ZwQueryOpenSubKeysEx
• ntzwapi::ZwQueryPerformanceCounter
• ntzwapi::ZwQuerySection
• ntzwapi::ZwQuerySecurityAttributesToken
• ntzwapi::ZwQuerySemaphore
• ntzwapi::ZwQuerySystemEnvironmentValue
• ntzwapi::ZwQuerySystemEnvironmentValueEx
• ntzwapi::ZwQuerySystemInformation
• ntzwapi::ZwQuerySystemInformationEx
• ntzwapi::ZwQuerySystemTime
• ntzwapi::ZwQueryTimer
• ntzwapi::ZwQueryTimerResolution
• ntzwapi::ZwQueryWnfStateData
• ntzwapi::ZwQueryWnfStateNameInformation
• ntzwapi::ZwQueueApcThread
• ntzwapi::ZwQueueApcThreadEx
• ntzwapi::ZwQueueApcThreadEx2
• ntzwapi::ZwRaiseException
• ntzwapi::ZwRaiseHardError
• ntzwapi::ZwReadFileScatter
• ntzwapi::ZwReadRequestData
• ntzwapi::ZwReadVirtualMemory
• ntzwapi::ZwRegisterProtocolAddressInformation
• ntzwapi::ZwRegisterThreadTerminatePort
• ntzwapi::ZwReleaseCMFViewOwnership
• ntzwapi::ZwReleaseKeyedEvent
• ntzwapi::ZwReleaseMutant
• ntzwapi::ZwReleaseSemaphore
• ntzwapi::ZwReleaseWorkerFactoryWorker
• ntzwapi::ZwRemoveIoCompletion
• ntzwapi::ZwRemoveIoCompletionEx
• ntzwapi::ZwRemoveProcessDebug
• ntzwapi::ZwRenameTransactionManager
• ntzwapi::ZwReplaceKey
• ntzwapi::ZwReplacePartitionUnit
• ntzwapi::ZwReplyPort
• ntzwapi::ZwReplyWaitReceivePort
• ntzwapi::ZwReplyWaitReceivePortEx
• ntzwapi::ZwReplyWaitReplyPort
• ntzwapi::ZwRequestPort
• ntzwapi::ZwRequestWaitReplyPort
• ntzwapi::ZwRequestWakeupLatency
• ntzwapi::ZwResetEvent
• ntzwapi::ZwResetWriteWatch
• ntzwapi::ZwResumeProcess
• ntzwapi::ZwResumeThread
• ntzwapi::ZwRevertContainerImpersonation
• ntzwapi::ZwSaveMergedKeys
• ntzwapi::ZwSecureConnectPort
• ntzwapi::ZwSerializeBoot
• ntzwapi::ZwSetBootEntryOrder
• ntzwapi::ZwSetBootOptions
• ntzwapi::ZwSetCachedSigningLevel
• ntzwapi::ZwSetContextThread
• ntzwapi::ZwSetDebugFilterState
• ntzwapi::ZwSetDefaultHardErrorPort
• ntzwapi::ZwSetDefaultLocale
• ntzwapi::ZwSetDefaultUILanguage
• ntzwapi::ZwSetDriverEntryOrder
• ntzwapi::ZwSetEventBoostPriority
• ntzwapi::ZwSetHighEventPair
• ntzwapi::ZwSetHighWaitLowEventPair
• ntzwapi::ZwSetIRTimer
• ntzwapi::ZwSetInformationDebugObject
• ntzwapi::ZwSetInformationJobObject
• ntzwapi::ZwSetInformationObject
• ntzwapi::ZwSetInformationProcess
• ntzwapi::ZwSetInformationSymbolicLink
• ntzwapi::ZwSetInformationWorkerFactory
• ntzwapi::ZwSetIntervalProfile
• ntzwapi::ZwSetIoCompletion
• ntzwapi::ZwSetIoCompletionEx
• ntzwapi::ZwSetLdtEntries
• ntzwapi::ZwSetLowEventPair
• ntzwapi::ZwSetLowWaitHighEventPair
• ntzwapi::ZwSetSystemEnvironmentValue
• ntzwapi::ZwSetSystemEnvironmentValueEx
• ntzwapi::ZwSetSystemInformation
• ntzwapi::ZwSetSystemPowerState
• ntzwapi::ZwSetSystemTime
• ntzwapi::ZwSetThreadExecutionState
• ntzwapi::ZwSetTimer2
• ntzwapi::ZwSetTimerResolution
• ntzwapi::ZwSetUuidSeed
• ntzwapi::ZwSetWnfProcessNotificationEvent
• ntzwapi::ZwShutdownSystem
• ntzwapi::ZwShutdownWorkerFactory
• ntzwapi::ZwSignalAndWaitForSingleObject
• ntzwapi::ZwStartProfile
• ntzwapi::ZwStopProfile
• ntzwapi::ZwSubscribeWnfStateChange
• ntzwapi::ZwSuspendProcess
• ntzwapi::ZwSuspendThread
• ntzwapi::ZwSystemDebugControl
• ntzwapi::ZwTerminateEnclave
• ntzwapi::ZwTerminateJobObject
• ntzwapi::ZwTerminateThread
• ntzwapi::ZwTestAlert
• ntzwapi::ZwThawRegistry
• ntzwapi::ZwThawTransactions
• ntzwapi::ZwTraceControl
• ntzwapi::ZwTraceEvent
• ntzwapi::ZwTranslateFilePath
• ntzwapi::ZwUmsThreadYield
• ntzwapi::ZwUnloadKey
• ntzwapi::ZwUnloadKey2
• ntzwapi::ZwUnloadKeyEx
• ntzwapi::ZwUnlockVirtualMemory
• ntzwapi::ZwUnmapViewOfSectionEx
• ntzwapi::ZwUnsubscribeWnfStateChange
• ntzwapi::ZwUpdateWnfStateData
• ntzwapi::ZwVdmControl
• ntzwapi::ZwWaitForAlertByThreadId
• ntzwapi::ZwWaitForDebugEvent
• ntzwapi::ZwWaitForKeyedEvent
• ntzwapi::ZwWaitForMultipleObjects
• ntzwapi::ZwWaitForMultipleObjects32
• ntzwapi::ZwWaitForWorkViaWorkerFactory
• ntzwapi::ZwWaitHighEventPair
• ntzwapi::ZwWaitLowEventPair
• ntzwapi::ZwWorkerFactoryWorkerReady
• ntzwapi::ZwWriteFileGather
• ntzwapi::ZwWriteRequestData
• ntzwapi::ZwWriteVirtualMemory
• ntzwapi::ZwYieldExecution
• subprocesstag::I_QueryTagInformation
• winsta::LogonIdFromWinStationNameW
• winsta::WinStationCloseServer
• winsta::WinStationConnectW
• winsta::WinStationDisconnect
• winsta::WinStationEnumerateProcesses
• winsta::WinStationEnumerateW
• winsta::WinStationFreeGAPMemory
• winsta::WinStationFreeMemory
• winsta::WinStationGetAllProcesses
• winsta::WinStationGetProcessSid
• winsta::WinStationGetTermSrvCountersValue
• winsta::WinStationNameFromLogonIdW
• winsta::WinStationOpenServerW
• winsta::WinStationQueryInformationW
• winsta::WinStationRegisterConsoleNotification
• winsta::WinStationReset
• winsta::WinStationRevertFromServicesSession
• winsta::WinStationSendMessageW
• winsta::WinStationServerPing
• winsta::WinStationSetInformationW
• winsta::WinStationShadow
• winsta::WinStationShadowStop
• winsta::WinStationShutdownSystem
• winsta::WinStationSwitchToServicesSession
• winsta::WinStationTerminateProcess
• winsta::WinStationUnRegisterConsoleNotification
• winsta::WinStationWaitSystemEvent
• winsta::_WinStationWaitForConnect

Type Definitions

• ntbcd::BCD_MESSAGE_CALLBACK
• ntexapi::PSYSTEM_WATCHDOG_HANDLER
• ntldr::PDELAYLOAD_FAILURE_SYSTEM_ROUTINE
• ntldr::PLDR_DLL_NOTIFICATION_FUNCTION
• ntldr::PLDR_ENUM_CALLBACK
• ntldr::PLDR_IMPORT_MODULE_CALLBACK
• ntldr::PLDR_INIT_ROUTINE
• ntpoapi::PENTER_STATE_HANDLER
• ntpoapi::PENTER_STATE_NOTIFY_HANDLER
• ntpoapi::PENTER_STATE_SYSTEM_HANDLER
• ntpoapi::PPROCESSOR_IDLE_HANDLER
• ntpoapi::PROCESSOR_IDLE_HANDLER
• ntpsapi::PPS_APC_ROUTINE
• ntpsapi::PUSER_THREAD_START_ROUTINE
• ntrtl::IN6_ADDR
• ntrtl::IN_ADDR
• ntrtl::PCIN6_ADDR
• ntrtl::PCIN_ADDR
• ntrtl::PIN_ADDR
• ntrtl::PRTLP_UNHANDLED_EXCEPTION_FILTER
• ntrtl::PRTL_ENUM_HEAPS_ROUTINE
• ntrtl::PRTL_EXIT_POOL_THREAD
• ntrtl::PRTL_FEATURE_CONFIGURATION_CHANGE_NOTIFICATION
• ntrtl::PRTL_HEAP_DEBUGGING_INTERCEPTOR_ROUTINE
• ntrtl::PRTL_HEAP_EXTENDED_ENUMERATION_ROUTINE
• ntrtl::PRTL_HEAP_LEAK_ENUMERATION_ROUTINE
• ntrtl::PRTL_SECURE_MEMORY_CACHE_CALLBACK
• ntrtl::PRTL_START_POOL_THREAD
• ntrtl::PWNF_USER_CALLBACK
• ntrtl::RTL_HEAP_STACK_WRITE_ROUTINE
• ntsam::PSAM_DELTA_NOTIFICATION_ROUTINE
• ntsam::PSAM_USER_TILE
• ntsam::SAM_SHELL_OBJECT_PROPERTIES
• ntsam::SAM_USER_TILE
• ntsxs::PACTIVATION_CONTEXT_NOTIFY_ROUTINE
• nttp::PTP_ALPC_CALLBACK
• nttp::PTP_ALPC_CALLBACK_EX
• nttp::PTP_IO_CALLBACK
• phnt_ntdef::PENCLAVE_ROUTINE
• phnt_ntdef::WAITORTIMERCALLBACKFUNC
• subprocesstag::PQUERY_TAG_INFORMATION
• winsta::CDNAME
• winsta::CLIENTDATANAME
• winsta::DEVICENAME
• winsta::DLLNAME
• winsta::MODEMNAME
• winsta::NASIFILESERVER
• winsta::NASIPASSWORD
• winsta::NASISESIONNAME
• winsta::NASISPECIFICNAME
• winsta::NASIUSERNAME
• winsta::PCACHE_STATISTICS
• winsta::PCLIENTDATANAME
• winsta::PDNAME
• winsta::WDNAME
• winsta::WDPREFIX

Statics

• ntldr::LdrSystemDllInitBlock
• ntnls::NlsAnsiCodePage
• ntnls::NlsMbCodePageTag
• ntnls::NlsMbOemCodePageTag

Constants

• ntbcd::BCD_ELEMENT_DESCRIPTION_VERSION
• ntbcd::BCD_OBJECT_DESCRIPTION_VERSION
• ntbcd::BCD_OBJECT_OSLOADER_TYPE
• ntbcd::GUID_BAD_MEMORY_GROUP
• ntbcd::GUID_BOOT_LOADER_SETTINGS_GROUP
• ntbcd::GUID_CURRENT_BOOT_ENTRY
• ntbcd::GUID_DEBUGGER_SETTINGS_GROUP
• ntbcd::GUID_DEFAULT_BOOT_ENTRY
• ntbcd::GUID_EMS_SETTINGS_GROUP
• ntbcd::GUID_FIRMWARE_BOOTMGR
• ntbcd::GUID_GLOBAL_SETTINGS_GROUP
• ntbcd::GUID_HYPERVISOR_SETTINGS_GROUP
• ntbcd::GUID_KERNEL_DEBUGGER_SETTINGS_GROUP
• ntbcd::GUID_RESUME_LOADER_SETTINGS_GROUP
• ntbcd::GUID_WINDOWS_BOOTMGR
• ntbcd::GUID_WINDOWS_LEGACY_NTLDR
• ntbcd::GUID_WINDOWS_MEMORY_TESTER
• ntbcd::GUID_WINDOWS_OS_TARGET_TEMPLATE_EFI
• ntbcd::GUID_WINDOWS_OS_TARGET_TEMPLATE_PCAT
• ntbcd::GUID_WINDOWS_RESUME_TARGET_TEMPLATE_EFI
• ntbcd::GUID_WINDOWS_RESUME_TARGET_TEMPLATE_PCAT
• ntbcd::GUID_WINDOWS_SETUP_BOOT_ENTRY
• ntbcd::GUID_WINDOWS_SETUP_EFI
• ntbcd::GUID_WINDOWS_SETUP_PCAT
• ntbcd::GUID_WINDOWS_SETUP_RAMDISK_OPTIONS
• ntdbg::DEBUG_ALL_ACCESS
• ntdbg::DEBUG_KILL_ON_CLOSE
• ntdbg::DEBUG_PROCESS_ASSIGN
• ntdbg::DEBUG_QUERY_INFORMATION
• ntdbg::DEBUG_READ_EVENT
• ntdbg::DEBUG_SET_INFORMATION
• ntexapi::CODEINTEGRITYPOLICY_HVCIOPTION_DEBUG
• ntexapi::CODEINTEGRITYPOLICY_HVCIOPTION_ENABLED
• ntexapi::CODEINTEGRITYPOLICY_HVCIOPTION_STRICT
• ntexapi::CODEINTEGRITYPOLICY_OPTION_AUDIT
• ntexapi::CODEINTEGRITYPOLICY_OPTION_CONDITIONAL_LOCKDOWN
• ntexapi::CODEINTEGRITYPOLICY_OPTION_DISABLED_FLIGHTSIGNING
• ntexapi::CODEINTEGRITYPOLICY_OPTION_DYNAMIC_CODE_POLICY_ENABLED
• ntexapi::CODEINTEGRITYPOLICY_OPTION_ENABLED
• ntexapi::CODEINTEGRITYPOLICY_OPTION_ENABLED_SECURE_SETTING_POLICY
• ntexapi::CODEINTEGRITYPOLICY_OPTION_ENABLED_UMCI
• ntexapi::CODEINTEGRITYPOLICY_OPTION_ENABLED_UNSIGNED_SYSTEMINTEGRITY_POLICY
• ntexapi::CODEINTEGRITYPOLICY_OPTION_ENABLED_UPDATE_POLICY_NOREBOOT
• ntexapi::CODEINTEGRITYPOLICY_OPTION_LOCKDOWN
• ntexapi::CODEINTEGRITYPOLICY_OPTION_NOLOCKDOWN
• ntexapi::CODEINTEGRITYPOLICY_OPTION_RELOAD_POLICY_NO_REBOOT
• ntexapi::CODEINTEGRITYPOLICY_OPTION_REQUIRE_WHQL
• ntexapi::CODEINTEGRITY_OPTION_WHQL_AUDITMODE_ENABLED
• ntexapi::CODEINTEGRITY_OPTION_WHQL_ENFORCEMENT_ENABLED
• ntexapi::EFI_VARIABLE_APPEND_WRITE
• ntexapi::EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS
• ntexapi::EFI_VARIABLE_BOOTSERVICE_ACCESS
• ntexapi::EFI_VARIABLE_ENHANCED_AUTHENTICATED_ACCESS
• ntexapi::EFI_VARIABLE_HARDWARE_ERROR_RECORD
• ntexapi::EFI_VARIABLE_NON_VOLATILE
• ntexapi::EFI_VARIABLE_RUNTIME_ACCESS
• ntexapi::EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS
• ntexapi::ETW_EXT_ENABLE_FLAGS
• ntexapi::ETW_EXT_PIDS
• ntexapi::ETW_EXT_POOLTAG_FILTER
• ntexapi::ETW_EXT_STACKWALK_FILTER
• ntexapi::ETW_EXT_STACK_CACHING
• ntexapi::ETW_MAX_POOLTAG_FILTER
• ntexapi::ETW_MAX_STACKWALK_FILTER
• ntexapi::ETW_MAX_TAG_FILTER
• ntexapi::ETW_MINIMUM_CACHED_STACK_LENGTH
• ntexapi::ETW_STACK_SW_ARRAY_SIZE
• ntexapi::ETW_SW_ARRAY_SIZE
• ntexapi::EVENT_PAIR_ALL_ACCESS
• ntexapi::EVENT_TRACE_FLAG_EXT_ITEMS
• ntexapi::EVENT_TRACE_FLAG_EXT_LEN_NEW_STRUCT
• ntexapi::EVENT_TRACE_GROUP_ALPC
• ntexapi::EVENT_TRACE_GROUP_CC
• ntexapi::EVENT_TRACE_GROUP_CONFIG
• ntexapi::EVENT_TRACE_GROUP_CRITSEC
• ntexapi::EVENT_TRACE_GROUP_DBGPRINT
• ntexapi::EVENT_TRACE_GROUP_DPC
• ntexapi::EVENT_TRACE_GROUP_FILE
• ntexapi::EVENT_TRACE_GROUP_HEADER
• ntexapi::EVENT_TRACE_GROUP_HEAP
• ntexapi::EVENT_TRACE_GROUP_HYPERVISOR
• ntexapi::EVENT_TRACE_GROUP_HYPERVISORX
• ntexapi::EVENT_TRACE_GROUP_IMAGE
• ntexapi::EVENT_TRACE_GROUP_IO
• ntexapi::EVENT_TRACE_GROUP_JOB
• ntexapi::EVENT_TRACE_GROUP_MEMORY
• ntexapi::EVENT_TRACE_GROUP_MODBOUND
• ntexapi::EVENT_TRACE_GROUP_OBJECT
• ntexapi::EVENT_TRACE_GROUP_PERFINFO
• ntexapi::EVENT_TRACE_GROUP_POOL
• ntexapi::EVENT_TRACE_GROUP_POWER
• ntexapi::EVENT_TRACE_GROUP_PROCESS
• ntexapi::EVENT_TRACE_GROUP_REGISTRY
• ntexapi::EVENT_TRACE_GROUP_SPARE1
• ntexapi::EVENT_TRACE_GROUP_SPLITIO
• ntexapi::EVENT_TRACE_GROUP_STACKWALK
• ntexapi::EVENT_TRACE_GROUP_TCPIP
• ntexapi::EVENT_TRACE_GROUP_THREAD
• ntexapi::EVENT_TRACE_GROUP_THREAD_POOL
• ntexapi::EVENT_TRACE_GROUP_UDPIP
• ntexapi::EVENT_TRACE_GROUP_UMS
• ntexapi::EVENT_TRACE_GROUP_WNF
• ntexapi::FLG_APPLICATION_VERIFIER
• ntexapi::FLG_BOOTONLY_VALID_BITS
• ntexapi::FLG_CRITSEC_EVENT_CREATION
• ntexapi::FLG_DEBUG_INITIAL_COMMAND
• ntexapi::FLG_DEBUG_INITIAL_COMMAND_EX
• ntexapi::FLG_DISABLE_DBGPRINT
• ntexapi::FLG_DISABLE_PAGE_KERNEL_STACKS
• ntexapi::FLG_DISABLE_PROTDLLS
• ntexapi::FLG_DISABLE_STACK_EXTENSION
• ntexapi::FLG_ENABLE_CLOSE_EXCEPTIONS
• ntexapi::FLG_ENABLE_CSRDEBUG
• ntexapi::FLG_ENABLE_EXCEPTION_LOGGING
• ntexapi::FLG_ENABLE_HANDLE_EXCEPTIONS
• ntexapi::FLG_ENABLE_HANDLE_TYPE_TAGGING
• ntexapi::FLG_ENABLE_KDEBUG_SYMBOL_LOAD
• ntexapi::FLG_ENABLE_SYSTEM_CRIT_BREAKS
• ntexapi::FLG_HEAP_DISABLE_COALESCING
• ntexapi::FLG_HEAP_ENABLE_FREE_CHECK
• ntexapi::FLG_HEAP_ENABLE_TAGGING
• ntexapi::FLG_HEAP_ENABLE_TAG_BY_DLL
• ntexapi::FLG_HEAP_ENABLE_TAIL_CHECK
• ntexapi::FLG_HEAP_PAGE_ALLOCS
• ntexapi::FLG_HEAP_VALIDATE_ALL
• ntexapi::FLG_HEAP_VALIDATE_PARAMETERS
• ntexapi::FLG_KERNELMODE_VALID_BITS
• ntexapi::FLG_KERNEL_STACK_TRACE_DB
• ntexapi::FLG_MAINTAIN_OBJECT_TYPELIST
• ntexapi::FLG_MONITOR_SILENT_PROCESS_EXIT
• ntexapi::FLG_POOL_ENABLE_TAGGING
• ntexapi::FLG_SHOW_LDR_SNAPS
• ntexapi::FLG_STOP_ON_EXCEPTION
• ntexapi::FLG_STOP_ON_HUNG_GUI
• ntexapi::FLG_STOP_ON_UNHANDLED_EXCEPTION
• ntexapi::FLG_USERMODE_VALID_BITS
• ntexapi::FLG_USER_STACK_TRACE_DB
• ntexapi::FLG_VALID_BITS
• ntexapi::HARDERROR_OVERRIDE_ERRORMODE
• ntexapi::KEYEDEVENT_ALL_ACCESS
• ntexapi::KEYEDEVENT_WAIT
• ntexapi::KEYEDEVENT_WAKE
• ntexapi::MAXIMUM_NODE_COUNT
• ntexapi::MAX_WOW64_SHARED_ENTRIES
• ntexapi::MEMORY_COMBINE_FLAGS_COMMON_PAGES_ONLY
• ntexapi::MM_WORKING_SET_MAX_HARD_DISABLE
• ntexapi::MM_WORKING_SET_MAX_HARD_ENABLE
• ntexapi::MM_WORKING_SET_MIN_HARD_DISABLE
• ntexapi::MM_WORKING_SET_MIN_HARD_ENABLE
• ntexapi::MUTANT_ALL_ACCESS
• ntexapi::PERFINFO_LOG_TYPE_ADDPOOLPAGE
• ntexapi::PERFINFO_LOG_TYPE_ADDPOOLPAGE_SESSION
• ntexapi::PERFINFO_LOG_TYPE_ALLOCATEPOOL
• ntexapi::PERFINFO_LOG_TYPE_ALLOCATEPOOL_SESSION
• ntexapi::PERFINFO_LOG_TYPE_ANTI_STARVATION_BOOST
• ntexapi::PERFINFO_LOG_TYPE_ASYNCMARK
• ntexapi::PERFINFO_LOG_TYPE_AUTO_BOOST_CLEAR_FLOOR
• ntexapi::PERFINFO_LOG_TYPE_AUTO_BOOST_NO_ENTRIES
• ntexapi::PERFINFO_LOG_TYPE_AUTO_BOOST_SET_FLOOR
• ntexapi::PERFINFO_LOG_TYPE_BACKTRACE
• ntexapi::PERFINFO_LOG_TYPE_BACKTRACE_USERSTACK
• ntexapi::PERFINFO_LOG_TYPE_BATTERY_LIFE_INFO
• ntexapi::PERFINFO_LOG_TYPE_BIGPOOLPAGE
• ntexapi::PERFINFO_LOG_TYPE_BIGPOOLPAGE_SESSION
• ntexapi::PERFINFO_LOG_TYPE_BIGPOOLSNAP_DC_END
• ntexapi::PERFINFO_LOG_TYPE_BIGPOOLSNAP_DC_START
• ntexapi::PERFINFO_LOG_TYPE_BOOT_PHASE_START
• ntexapi::PERFINFO_LOG_TYPE_BOOT_PREFETCH_INFORMATION
• ntexapi::PERFINFO_LOG_TYPE_BRANCH_ADDRESS_DEBUG
• ntexapi::PERFINFO_LOG_TYPE_BRANCH_TRACE
• ntexapi::PERFINFO_LOG_TYPE_BRANCH_TRACE_DEBUG
• ntexapi::PERFINFO_LOG_TYPE_CAP_COMMENT
• ntexapi::PERFINFO_LOG_TYPE_CAP_RUNDOWN
• ntexapi::PERFINFO_LOG_TYPE_CC_CAN_I_WRITE_FAIL
• ntexapi::PERFINFO_LOG_TYPE_CC_EXTRA_WRITEBEHIND_THREAD
• ntexapi::PERFINFO_LOG_TYPE_CC_FLUSH_CACHE
• ntexapi::PERFINFO_LOG_TYPE_CC_FLUSH_SECTION
• ntexapi::PERFINFO_LOG_TYPE_CC_LAZY_WRITE_SCAN
• ntexapi::PERFINFO_LOG_TYPE_CC_LOGGED_STREAM_INFO
• ntexapi::PERFINFO_LOG_TYPE_CC_READ_AHEAD
• ntexapi::PERFINFO_LOG_TYPE_CC_READ_AHEAD_PREFETCH
• ntexapi::PERFINFO_LOG_TYPE_CC_SCHEDULE_READ_AHEAD
• ntexapi::PERFINFO_LOG_TYPE_CC_WORKITEM_COMPLETE
• ntexapi::PERFINFO_LOG_TYPE_CC_WORKITEM_DEQUEUE
• ntexapi::PERFINFO_LOG_TYPE_CC_WORKITEM_ENQUEUE
• ntexapi::PERFINFO_LOG_TYPE_CC_WRITE_BEHIND
• ntexapi::PERFINFO_LOG_TYPE_CHARGE_WAKE_COUNTER_EXECUTION
• ntexapi::PERFINFO_LOG_TYPE_CHARGE_WAKE_COUNTER_INSTRUMENTATION
• ntexapi::PERFINFO_LOG_TYPE_CHARGE_WAKE_COUNTER_KERNEL
• ntexapi::PERFINFO_LOG_TYPE_CHARGE_WAKE_COUNTER_PRESERVE_PROCESS
• ntexapi::PERFINFO_LOG_TYPE_CHARGE_WAKE_COUNTER_USER
• ntexapi::PERFINFO_LOG_TYPE_CLOCK_CONFIGURATION
• ntexapi::PERFINFO_LOG_TYPE_CLOCK_DYNAMIC_TICK_VETO
• ntexapi::PERFINFO_LOG_TYPE_CLOCK_INTERRUPT
• ntexapi::PERFINFO_LOG_TYPE_CLOCK_MODE_SWITCH
• ntexapi::PERFINFO_LOG_TYPE_CLOCK_TIME_UPDATE
• ntexapi::PERFINFO_LOG_TYPE_CLOSE_HANDLE
• ntexapi::PERFINFO_LOG_TYPE_CMCELLREFERRED
• ntexapi::PERFINFO_LOG_TYPE_COMPRESSED_PAGE
• ntexapi::PERFINFO_LOG_TYPE_CONTEXTSWAP
• ntexapi::PERFINFO_LOG_TYPE_CONTEXTSWAP_BATCH
• ntexapi::PERFINFO_LOG_TYPE_CONTMEM_GENERATE
• ntexapi::PERFINFO_LOG_TYPE_COWBLOB
• ntexapi::PERFINFO_LOG_TYPE_COWBLOB_CLOSED
• ntexapi::PERFINFO_LOG_TYPE_COWHEADER
• ntexapi::PERFINFO_LOG_TYPE_CPU_CACHE_FLUSH
• ntexapi::PERFINFO_LOG_TYPE_CREATE_HANDLE
• ntexapi::PERFINFO_LOG_TYPE_CREATE_OBJECT
• ntexapi::PERFINFO_LOG_TYPE_CREATE_SESSION
• ntexapi::PERFINFO_LOG_TYPE_CRITSEC_COLLISION
• ntexapi::PERFINFO_LOG_TYPE_CRITSEC_ENTER
• ntexapi::PERFINFO_LOG_TYPE_CRITSEC_INITIALIZE
• ntexapi::PERFINFO_LOG_TYPE_CRITSEC_LEAVE
• ntexapi::PERFINFO_LOG_TYPE_DEBUGGER_ENABLED
• ntexapi::PERFINFO_LOG_TYPE_DEBUGGER_EXIT
• ntexapi::PERFINFO_LOG_TYPE_DEBUG_EVENT
• ntexapi::PERFINFO_LOG_TYPE_DEBUG_PRINT
• ntexapi::PERFINFO_LOG_TYPE_DELAYS_CC_CAN_I_WRITE
• ntexapi::PERFINFO_LOG_TYPE_DELAY_EXECUTION
• ntexapi::PERFINFO_LOG_TYPE_DELETE_OBJECT
• ntexapi::PERFINFO_LOG_TYPE_DEREFERENCE_OBJECT
• ntexapi::PERFINFO_LOG_TYPE_DFSS_PROCESS_IDLE_ONLY_QUEUE
• ntexapi::PERFINFO_LOG_TYPE_DFSS_START_NEW_INTERVAL
• ntexapi::PERFINFO_LOG_TYPE_DPC
• ntexapi::PERFINFO_LOG_TYPE_DPC_ENQUEUE
• ntexapi::PERFINFO_LOG_TYPE_DPC_EXECUTION
• ntexapi::PERFINFO_LOG_TYPE_DRIVER_ADD_DEVICE_CALL
• ntexapi::PERFINFO_LOG_TYPE_DRIVER_ADD_DEVICE_RETURN
• ntexapi::PERFINFO_LOG_TYPE_DRIVER_COMPLETE_REQUEST
• ntexapi::PERFINFO_LOG_TYPE_DRIVER_COMPLETE_REQUEST_RETURN
• ntexapi::PERFINFO_LOG_TYPE_DRIVER_COMPLETIONROUTINE_CALL
• ntexapi::PERFINFO_LOG_TYPE_DRIVER_COMPLETIONROUTINE_RETURN
• ntexapi::PERFINFO_LOG_TYPE_DRIVER_INIT
• ntexapi::PERFINFO_LOG_TYPE_DRIVER_INIT_COMPLETE
• ntexapi::PERFINFO_LOG_TYPE_DRIVER_MAJORFUNCTION_CALL
• ntexapi::PERFINFO_LOG_TYPE_DRIVER_MAJORFUNCTION_RETURN
• ntexapi::PERFINFO_LOG_TYPE_DRIVER_STARTIO_CALL
• ntexapi::PERFINFO_LOG_TYPE_DRIVER_STARTIO_RETURN
• ntexapi::PERFINFO_LOG_TYPE_DUPLICATE_HANDLE
• ntexapi::PERFINFO_LOG_TYPE_ERESOURCE_DC_END
• ntexapi::PERFINFO_LOG_TYPE_ERESOURCE_DC_START
• ntexapi::PERFINFO_LOG_TYPE_EXCEPTION_STACK
• ntexapi::PERFINFO_LOG_TYPE_FAULTADDR_WITH_IP
• ntexapi::PERFINFO_LOG_TYPE_FILENAME
• ntexapi::PERFINFO_LOG_TYPE_FILENAME_CREATE
• ntexapi::PERFINFO_LOG_TYPE_FILENAME_DELETE
• ntexapi::PERFINFO_LOG_TYPE_FILENAME_NULL
• ntexapi::PERFINFO_LOG_TYPE_FILENAME_RUNDOWN
• ntexapi::PERFINFO_LOG_TYPE_FILENAME_SAME
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_CLEANUP
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_CLOSE
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_CREATE
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_CREATE_NEW
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_DELETE
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_DELETE_PATH
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_DIRENUM
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_DIRNOTIFY
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_FLUSH
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_FS_CONTROL
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_OPERATION_END
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_QUERY_INFORMATION
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_READ
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_RENAME
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_RENAME_PATH
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_SETLINK
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_SETLINK_PATH
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_SET_INFORMATION
• ntexapi::PERFINFO_LOG_TYPE_FILE_IO_WRITE
• ntexapi::PERFINFO_LOG_TYPE_FILE_STORE_FAULT
• ntexapi::PERFINFO_LOG_TYPE_FLT_POSTOP_COMPLETION
• ntexapi::PERFINFO_LOG_TYPE_FLT_POSTOP_FAILURE
• ntexapi::PERFINFO_LOG_TYPE_FLT_POSTOP_INIT
• ntexapi::PERFINFO_LOG_TYPE_FLT_PREOP_COMPLETION
• ntexapi::PERFINFO_LOG_TYPE_FLT_PREOP_FAILURE
• ntexapi::PERFINFO_LOG_TYPE_FLT_PREOP_INIT
• ntexapi::PERFINFO_LOG_TYPE_FREEPOOL
• ntexapi::PERFINFO_LOG_TYPE_FREEPOOL_SESSION
• ntexapi::PERFINFO_LOG_TYPE_FUNCTION_CALL
• ntexapi::PERFINFO_LOG_TYPE_FUNCTION_ENTER
• ntexapi::PERFINFO_LOG_TYPE_FUNCTION_EXIT
• ntexapi::PERFINFO_LOG_TYPE_FUNCTION_RETURN
• ntexapi::PERFINFO_LOG_TYPE_HARDFAULT
• ntexapi::PERFINFO_LOG_TYPE_HEAP_AFFINITY_ASSIGN
• ntexapi::PERFINFO_LOG_TYPE_HEAP_AFFINITY_ENABLE
• ntexapi::PERFINFO_LOG_TYPE_HEAP_ALLOC
• ntexapi::PERFINFO_LOG_TYPE_HEAP_COMMIT
• ntexapi::PERFINFO_LOG_TYPE_HEAP_CONTRACT
• ntexapi::PERFINFO_LOG_TYPE_HEAP_CREATE
• ntexapi::PERFINFO_LOG_TYPE_HEAP_CREATE_SNAPSHOT
• ntexapi::PERFINFO_LOG_TYPE_HEAP_DECOMMIT
• ntexapi::PERFINFO_LOG_TYPE_HEAP_DESTROY
• ntexapi::PERFINFO_LOG_TYPE_HEAP_DESTROY_SNAPSHOT
• ntexapi::PERFINFO_LOG_TYPE_HEAP_EXTEND
• ntexapi::PERFINFO_LOG_TYPE_HEAP_EXTEND_SNAPSHOT
• ntexapi::PERFINFO_LOG_TYPE_HEAP_FREE
• ntexapi::PERFINFO_LOG_TYPE_HEAP_LOCK
• ntexapi::PERFINFO_LOG_TYPE_HEAP_RANGE_CREATE
• ntexapi::PERFINFO_LOG_TYPE_HEAP_RANGE_DESTROY
• ntexapi::PERFINFO_LOG_TYPE_HEAP_RANGE_RELEASE
• ntexapi::PERFINFO_LOG_TYPE_HEAP_RANGE_RESERVE
• ntexapi::PERFINFO_LOG_TYPE_HEAP_RANGE_RUNDOWN
• ntexapi::PERFINFO_LOG_TYPE_HEAP_REALLOC
• ntexapi::PERFINFO_LOG_TYPE_HEAP_REUSE_THRESHOLD_ACTIVATED
• ntexapi::PERFINFO_LOG_TYPE_HEAP_SNAPSHOT
• ntexapi::PERFINFO_LOG_TYPE_HEAP_SUBSEGMENT_ACTIVATED
• ntexapi::PERFINFO_LOG_TYPE_HEAP_SUBSEGMENT_ALLOC
• ntexapi::PERFINFO_LOG_TYPE_HEAP_SUBSEGMENT_ALLOC_CACHE
• ntexapi::PERFINFO_LOG_TYPE_HEAP_SUBSEGMENT_FREE
• ntexapi::PERFINFO_LOG_TYPE_HEAP_SUBSEGMENT_FREE_CACHE
• ntexapi::PERFINFO_LOG_TYPE_HEAP_SUBSEGMENT_INIT
• ntexapi::PERFINFO_LOG_TYPE_HEAP_UNLOCK
• ntexapi::PERFINFO_LOG_TYPE_HEAP_VALIDATE
• ntexapi::PERFINFO_LOG_TYPE_HEAP_WALK
• ntexapi::PERFINFO_LOG_TYPE_IDLE_STATE_CHANGE
• ntexapi::PERFINFO_LOG_TYPE_IMAGENAME
• ntexapi::PERFINFO_LOG_TYPE_INMEMORYACTIVE_RUNDOWN
• ntexapi::PERFINFO_LOG_TYPE_INMEMORY_STORE_FAULT
• ntexapi::PERFINFO_LOG_TYPE_INSERTATFRONT
• ntexapi::PERFINFO_LOG_TYPE_INSERTINFREELIST
• ntexapi::PERFINFO_LOG_TYPE_INSERTINLIST
• ntexapi::PERFINFO_LOG_TYPE_INSERTINMODIFIEDLIST
• ntexapi::PERFINFO_LOG_TYPE_INSWAPPROCESS
• ntexapi::PERFINFO_LOG_TYPE_INTERRUPT
• ntexapi::PERFINFO_LOG_TYPE_INTERRUPT_STEERING
• ntexapi::PERFINFO_LOG_TYPE_IOTIMER_EXPIRATION
• ntexapi::PERFINFO_LOG_TYPE_IOTIMER_START
• ntexapi::PERFINFO_LOG_TYPE_IOTIMER_STOP
• ntexapi::PERFINFO_LOG_TYPE_IPI
• ntexapi::PERFINFO_LOG_TYPE_KERNEL_MEMUSAGE
• ntexapi::PERFINFO_LOG_TYPE_KQUEUE_DEQUEUE
• ntexapi::PERFINFO_LOG_TYPE_KQUEUE_ENQUEUE
• ntexapi::PERFINFO_LOG_TYPE_KTIMER2_CANCEL
• ntexapi::PERFINFO_LOG_TYPE_KTIMER2_DISABLE
• ntexapi::PERFINFO_LOG_TYPE_KTIMER2_EXPIRATION
• ntexapi::PERFINFO_LOG_TYPE_KTIMER2_FINALIZATION
• ntexapi::PERFINFO_LOG_TYPE_KTIMER2_SET
• ntexapi::PERFINFO_LOG_TYPE_LDR_ABNORMAL
• ntexapi::PERFINFO_LOG_TYPE_LDR_APISET_HOSTED
• ntexapi::PERFINFO_LOG_TYPE_LDR_APISET_RESOLVING
• ntexapi::PERFINFO_LOG_TYPE_LDR_APISET_UNHOSTED
• ntexapi::PERFINFO_LOG_TYPE_LDR_APISET_UNRESOLVED
• ntexapi::PERFINFO_LOG_TYPE_LDR_CREATE_SECTION
• ntexapi::PERFINFO_LOG_TYPE_LDR_DLLMAIN_ENTER
• ntexapi::PERFINFO_LOG_TYPE_LDR_DLLMAIN_EXIT
• ntexapi::PERFINFO_LOG_TYPE_LDR_ERROR
• ntexapi::PERFINFO_LOG_TYPE_LDR_EXTERNAL_PATH
• ntexapi::PERFINFO_LOG_TYPE_LDR_FIND_DLL
• ntexapi::PERFINFO_LOG_TYPE_LDR_FOUND_KNOWN_DLL
• ntexapi::PERFINFO_LOG_TYPE_LDR_GENERATED_PATH
• ntexapi::PERFINFO_LOG_TYPE_LDR_HANDLE_NEW_DESCRIPTORS
• ntexapi::PERFINFO_LOG_TYPE_LDR_HANDLE_OLD_DESCRIPTORS
• ntexapi::PERFINFO_LOG_TYPE_LDR_IMAGE_RELOCATED
• ntexapi::PERFINFO_LOG_TYPE_LDR_LOADED
• ntexapi::PERFINFO_LOG_TYPE_LDR_LOADING
• ntexapi::PERFINFO_LOG_TYPE_LDR_LOCK_ACQUIRE_ATTEMPT
• ntexapi::PERFINFO_LOG_TYPE_LDR_LOCK_ACQUIRE_FAIL
• ntexapi::PERFINFO_LOG_TYPE_LDR_LOCK_ACQUIRE_SUCCESS
• ntexapi::PERFINFO_LOG_TYPE_LDR_LOCK_ACQUIRE_WAIT
• ntexapi::PERFINFO_LOG_TYPE_LDR_LOCK_RELEASE
• ntexapi::PERFINFO_LOG_TYPE_LDR_MAP_VIEW
• ntexapi::PERFINFO_LOG_TYPE_LDR_NEW_DESCRIPTORS_HANDLED
• ntexapi::PERFINFO_LOG_TYPE_LDR_NEW_DLL_AS_DATA
• ntexapi::PERFINFO_LOG_TYPE_LDR_NEW_DLL_LOAD
• ntexapi::PERFINFO_LOG_TYPE_LDR_OLD_DESCRIPTORS_HANDLED
• ntexapi::PERFINFO_LOG_TYPE_LDR_PLACEHOLDER
• ntexapi::PERFINFO_LOG_TYPE_LDR_PROC_INIT_DONE
• ntexapi::PERFINFO_LOG_TYPE_LDR_RDY_TO_INIT
• ntexapi::PERFINFO_LOG_TYPE_LDR_RDY_TO_RUN
• ntexapi::PERFINFO_LOG_TYPE_LDR_RELOCATE_IMAGE
• ntexapi::PERFINFO_LOG_TYPE_LDR_SEARCH_PATH_SECURITY
• ntexapi::PERFINFO_LOG_TYPE_LDR_SEARCH_SECURITY
• ntexapi::PERFINFO_LOG_TYPE_LDR_SECTION_CREATED
• ntexapi::PERFINFO_LOG_TYPE_LDR_SNAPPED
• ntexapi::PERFINFO_LOG_TYPE_LDR_SNAPPING
• ntexapi::PERFINFO_LOG_TYPE_LDR_VIEW_MAPPED
• ntexapi::PERFINFO_LOG_TYPE_LDR_VIEW_MAPPING
• ntexapi::PERFINFO_LOG_TYPE_MAPFILE
• ntexapi::PERFINFO_LOG_TYPE_MAPFILE_DC_END
• ntexapi::PERFINFO_LOG_TYPE_MAPFILE_DC_START
• ntexapi::PERFINFO_LOG_TYPE_MARK
• ntexapi::PERFINFO_LOG_TYPE_MEMINFO
• ntexapi::PERFINFO_LOG_TYPE_MEMINFOEX_SESSIONWS
• ntexapi::PERFINFO_LOG_TYPE_MEMINFOEX_WS
• ntexapi::PERFINFO_LOG_TYPE_MEMORYSNAPLITE
• ntexapi::PERFINFO_LOG_TYPE_MEM_RESET_INFO
• ntexapi::PERFINFO_LOG_TYPE_MMCSS_SCHEDULER_EVENT
• ntexapi::PERFINFO_LOG_TYPE_MMCSS_SCHEDULER_SLEEP
• ntexapi::PERFINFO_LOG_TYPE_MMCSS_SCHEDULER_SLEEP_RESP
• ntexapi::PERFINFO_LOG_TYPE_MMCSS_SCHEDULER_WAKEUP
• ntexapi::PERFINFO_LOG_TYPE_MMCSS_START
• ntexapi::PERFINFO_LOG_TYPE_MMCSS_STOP
• ntexapi::PERFINFO_LOG_TYPE_MM_STATS
• ntexapi::PERFINFO_LOG_TYPE_MODULEBOUND_CALL
• ntexapi::PERFINFO_LOG_TYPE_MODULEBOUND_CALLRET
• ntexapi::PERFINFO_LOG_TYPE_MODULEBOUND_ENT
• ntexapi::PERFINFO_LOG_TYPE_MODULEBOUND_FULLTRACE
• ntexapi::PERFINFO_LOG_TYPE_MODULEBOUND_INT2B
• ntexapi::PERFINFO_LOG_TYPE_MODULEBOUND_INT2E
• ntexapi::PERFINFO_LOG_TYPE_MODULEBOUND_JUMP
• ntexapi::PERFINFO_LOG_TYPE_MODULEBOUND_RET
• ntexapi::PERFINFO_LOG_TYPE_MSI_INTERRUPT
• ntexapi::PERFINFO_LOG_TYPE_OBJECT_HANDLE_DC_END
• ntexapi::PERFINFO_LOG_TYPE_OBJECT_HANDLE_DC_START
• ntexapi::PERFINFO_LOG_TYPE_OBJECT_TYPE_DC_END
• ntexapi::PERFINFO_LOG_TYPE_OBJECT_TYPE_DC_START
• ntexapi::PERFINFO_LOG_TYPE_OPTICAL_IO_FLUSH
• ntexapi::PERFINFO_LOG_TYPE_OPTICAL_IO_FLUSH_INIT
• ntexapi::PERFINFO_LOG_TYPE_OPTICAL_IO_READ
• ntexapi::PERFINFO_LOG_TYPE_OPTICAL_IO_READ_INIT
• ntexapi::PERFINFO_LOG_TYPE_OPTICAL_IO_WRITE
• ntexapi::PERFINFO_LOG_TYPE_OPTICAL_IO_WRITE_INIT
• ntexapi::PERFINFO_LOG_TYPE_PAGEFILE_BACK
• ntexapi::PERFINFO_LOG_TYPE_PAGEINMEMORY
• ntexapi::PERFINFO_LOG_TYPE_PAGEINMEMORY_ACTIVE
• ntexapi::PERFINFO_LOG_TYPE_PAGE_ACCESS
• ntexapi::PERFINFO_LOG_TYPE_PAGE_ACCESS_EX
• ntexapi::PERFINFO_LOG_TYPE_PAGE_COMBINE
• ntexapi::PERFINFO_LOG_TYPE_PAGE_RANGE_ACCESS
• ntexapi::PERFINFO_LOG_TYPE_PAGE_RANGE_RELEASE
• ntexapi::PERFINFO_LOG_TYPE_PAGE_RELEASE
• ntexapi::PERFINFO_LOG_TYPE_PASSIVE_INTERRUPT
• ntexapi::PERFINFO_LOG_TYPE_PFMAPPED_SECTION_CREATE
• ntexapi::PERFINFO_LOG_TYPE_PFMAPPED_SECTION_DELETE
• ntexapi::PERFINFO_LOG_TYPE_PFMAPPED_SECTION_OBJECT_CREATE
• ntexapi::PERFINFO_LOG_TYPE_PFMAPPED_SECTION_OBJECT_DELETE
• ntexapi::PERFINFO_LOG_TYPE_PFMAPPED_SECTION_RUNDOWN
• ntexapi::PERFINFO_LOG_TYPE_PMC_CONFIG
• ntexapi::PERFINFO_LOG_TYPE_PMC_INTERRUPT
• ntexapi::PERFINFO_LOG_TYPE_POOLSNAP_DC_END
• ntexapi::PERFINFO_LOG_TYPE_POOLSNAP_DC_START
• ntexapi::PERFINFO_LOG_TYPE_POOLSNAP_SESSION_DC_END
• ntexapi::PERFINFO_LOG_TYPE_POOLSNAP_SESSION_DC_START
• ntexapi::PERFINFO_LOG_TYPE_PO_CALIBRATED_PERFCOUNTER
• ntexapi::PERFINFO_LOG_TYPE_PO_NOTIFY_DEVICE
• ntexapi::PERFINFO_LOG_TYPE_PO_NOTIFY_DEVICE_COMPLETE
• ntexapi::PERFINFO_LOG_TYPE_PO_POSTSLEEP
• ntexapi::PERFINFO_LOG_TYPE_PO_PRESLEEP
• ntexapi::PERFINFO_LOG_TYPE_PO_SESSION_CALLOUT
• ntexapi::PERFINFO_LOG_TYPE_PO_SESSION_CALLOUT_RET
• ntexapi::PERFINFO_LOG_TYPE_PO_SIGNAL_RESUME_UI
• ntexapi::PERFINFO_LOG_TYPE_PO_SIGNAL_VIDEO_ON
• ntexapi::PERFINFO_LOG_TYPE_PPM_COORDINATED_IDLE_ENTER
• ntexapi::PERFINFO_LOG_TYPE_PPM_COORDINATED_IDLE_EXIT
• ntexapi::PERFINFO_LOG_TYPE_PPM_IDLE_EXIT_LATENCY
• ntexapi::PERFINFO_LOG_TYPE_PPM_IDLE_PLATFORM_SELECTION
• ntexapi::PERFINFO_LOG_TYPE_PPM_IDLE_PROCESSOR_SELECTION
• ntexapi::PERFINFO_LOG_TYPE_PPM_IDLE_STATE_CHANGE
• ntexapi::PERFINFO_LOG_TYPE_PPM_IDLE_STATE_ENTER
• ntexapi::PERFINFO_LOG_TYPE_PPM_IDLE_STATE_EXIT
• ntexapi::PERFINFO_LOG_TYPE_PPM_PERF_STATE_CHANGE
• ntexapi::PERFINFO_LOG_TYPE_PPM_PLATFORM_IDLE_STATE_ENTER
• ntexapi::PERFINFO_LOG_TYPE_PPM_THERMAL_CONSTRAINT
• ntexapi::PERFINFO_LOG_TYPE_PPM_THROTTLE_STATE_CHANGE
• ntexapi::PERFINFO_LOG_TYPE_PREFETCH_ACTION
• ntexapi::PERFINFO_LOG_TYPE_PREFETCH_READ
• ntexapi::PERFINFO_LOG_TYPE_PREFETCH_READLIST
• ntexapi::PERFINFO_LOG_TYPE_PREFETCH_REQUEST
• ntexapi::PERFINFO_LOG_TYPE_PROCESS_FREEZE
• ntexapi::PERFINFO_LOG_TYPE_PROCESS_PERFCTR_END
• ntexapi::PERFINFO_LOG_TYPE_PROCESS_PERFCTR_RD
• ntexapi::PERFINFO_LOG_TYPE_PROCESS_SET_AFFINITY
• ntexapi::PERFINFO_LOG_TYPE_PROCESS_THAW
• ntexapi::PERFINFO_LOG_TYPE_PUSHLOCK
• ntexapi::PERFINFO_LOG_TYPE_QUEUE
• ntexapi::PERFINFO_LOG_TYPE_READY_THREAD
• ntexapi::PERFINFO_LOG_TYPE_REFERENCE_OBJECT
• ntexapi::PERFINFO_LOG_TYPE_REG_CONFIG
• ntexapi::PERFINFO_LOG_TYPE_REG_COUNTERS
• ntexapi::PERFINFO_LOG_TYPE_REG_HIVE_DESTROY
• ntexapi::PERFINFO_LOG_TYPE_REG_HIVE_DIRTY
• ntexapi::PERFINFO_LOG_TYPE_REG_HIVE_INITIALIZE
• ntexapi::PERFINFO_LOG_TYPE_REG_HIVE_LINK
• ntexapi::PERFINFO_LOG_TYPE_REG_HIVE_RUNDOWN_DC_END
• ntexapi::PERFINFO_LOG_TYPE_REG_NOTIF_DELIVER
• ntexapi::PERFINFO_LOG_TYPE_REG_NOTIF_REGISTER
• ntexapi::PERFINFO_LOG_TYPE_REG_SET_VALUE
• ntexapi::PERFINFO_LOG_TYPE_RELEASE_WAKE_COUNTER_EXECUTION
• ntexapi::PERFINFO_LOG_TYPE_RELEASE_WAKE_COUNTER_INSTRUMENTATION
• ntexapi::PERFINFO_LOG_TYPE_RELEASE_WAKE_COUNTER_KERNEL
• ntexapi::PERFINFO_LOG_TYPE_RELEASE_WAKE_COUNTER_PRESERVE_PROCESS
• ntexapi::PERFINFO_LOG_TYPE_RELEASE_WAKE_COUNTER_USER
• ntexapi::PERFINFO_LOG_TYPE_REMOVEFROMWS
• ntexapi::PERFINFO_LOG_TYPE_REMOVEPAGEBYCOLOR
• ntexapi::PERFINFO_LOG_TYPE_REMOVEPAGEFROMLIST
• ntexapi::PERFINFO_LOG_TYPE_RESOURCE
• ntexapi::PERFINFO_LOG_TYPE_RUNDOWN_CHECKPOINT
• ntexapi::PERFINFO_LOG_TYPE_SAMPLED_PROFILE
• ntexapi::PERFINFO_LOG_TYPE_SAMPLED_PROFILE_CACHE
• ntexapi::PERFINFO_LOG_TYPE_SAMPLED_PROFILE_DC_END
• ntexapi::PERFINFO_LOG_TYPE_SAMPLED_PROFILE_DC_START
• ntexapi::PERFINFO_LOG_TYPE_SAMPLED_PROFILE_NMI
• ntexapi::PERFINFO_LOG_TYPE_SAMPLED_PROFILE_SET_INTERVAL
• ntexapi::PERFINFO_LOG_TYPE_SESSIONBIGPOOLSNAP_DC_END
• ntexapi::PERFINFO_LOG_TYPE_SESSIONBIGPOOLSNAP_DC_START
• ntexapi::PERFINFO_LOG_TYPE_SESSION_DELETE
• ntexapi::PERFINFO_LOG_TYPE_SESSION_RUNDOWN_DC_END
• ntexapi::PERFINFO_LOG_TYPE_SESSION_RUNDOWN_DC_START
• ntexapi::PERFINFO_LOG_TYPE_SET_DEVICES_STATE
• ntexapi::PERFINFO_LOG_TYPE_SET_DEVICES_STATE_RET
• ntexapi::PERFINFO_LOG_TYPE_SET_POWER_ACTION
• ntexapi::PERFINFO_LOG_TYPE_SET_POWER_ACTION_RET
• ntexapi::PERFINFO_LOG_TYPE_SHOULD_YIELD_PROCESSOR
• ntexapi::PERFINFO_LOG_TYPE_SPINLOCK
• ntexapi::PERFINFO_LOG_TYPE_SPINLOCK_ACQUIRE
• ntexapi::PERFINFO_LOG_TYPE_SPINLOCK_DC_END
• ntexapi::PERFINFO_LOG_TYPE_SPINLOCK_DC_START
• ntexapi::PERFINFO_LOG_TYPE_SPINLOCK_RELEASE
• ntexapi::PERFINFO_LOG_TYPE_SPLITIO_VOLMGR
• ntexapi::PERFINFO_LOG_TYPE_STACKTRACE_CREATE
• ntexapi::PERFINFO_LOG_TYPE_STACKTRACE_DELETE
• ntexapi::PERFINFO_LOG_TYPE_STACKTRACE_KEY_KERNEL
• ntexapi::PERFINFO_LOG_TYPE_STACKTRACE_KEY_USER
• ntexapi::PERFINFO_LOG_TYPE_STACKTRACE_RUNDOWN
• ntexapi::PERFINFO_LOG_TYPE_STACKWALK
• ntexapi::PERFINFO_LOG_TYPE_SYSCALL_ENTER
• ntexapi::PERFINFO_LOG_TYPE_SYSCALL_EXIT
• ntexapi::PERFINFO_LOG_TYPE_TAILCALL
• ntexapi::PERFINFO_LOG_TYPE_THREADED_DPC
• ntexapi::PERFINFO_LOG_TYPE_THREAD_MIGRATION
• ntexapi::PERFINFO_LOG_TYPE_THREAD_SET_AFFINITY
• ntexapi::PERFINFO_LOG_TYPE_THREAD_SET_BASE_PRIORITY
• ntexapi::PERFINFO_LOG_TYPE_THREAD_SET_IO_PRIORITY
• ntexapi::PERFINFO_LOG_TYPE_THREAD_SET_PAGE_PRIORITY
• ntexapi::PERFINFO_LOG_TYPE_THREAD_SET_PRIORITY
• ntexapi::PERFINFO_LOG_TYPE_THREAD_SUBPROCESSTAG_CHANGED
• ntexapi::PERFINFO_LOG_TYPE_TIMERDPC
• ntexapi::PERFINFO_LOG_TYPE_TIMER_CANCEL
• ntexapi::PERFINFO_LOG_TYPE_TIMER_EXPIRATION
• ntexapi::PERFINFO_LOG_TYPE_TIMER_EXPIRATION_START
• ntexapi::PERFINFO_LOG_TYPE_TIMER_SET_ONE_SHOT
• ntexapi::PERFINFO_LOG_TYPE_TIMER_SET_PERIODIC
• ntexapi::PERFINFO_LOG_TYPE_TIMER_SET_THREAD
• ntexapi::PERFINFO_LOG_TYPE_TIME_ADJUSTMENT
• ntexapi::PERFINFO_LOG_TYPE_TP_CALLBACK_CANCEL
• ntexapi::PERFINFO_LOG_TYPE_TP_CALLBACK_DEQUEUE
• ntexapi::PERFINFO_LOG_TYPE_TP_CALLBACK_ENQUEUE
• ntexapi::PERFINFO_LOG_TYPE_TP_CALLBACK_START
• ntexapi::PERFINFO_LOG_TYPE_TP_CALLBACK_STOP
• ntexapi::PERFINFO_LOG_TYPE_TP_POOL_CLOSE
• ntexapi::PERFINFO_LOG_TYPE_TP_POOL_CREATE
• ntexapi::PERFINFO_LOG_TYPE_TP_POOL_TH_MAX_SET
• ntexapi::PERFINFO_LOG_TYPE_TP_POOL_TH_MIN_SET
• ntexapi::PERFINFO_LOG_TYPE_TP_TIMER_CANCELLED
• ntexapi::PERFINFO_LOG_TYPE_TP_TIMER_CANCEL_NTTIMER
• ntexapi::PERFINFO_LOG_TYPE_TP_TIMER_EXPIRATION
• ntexapi::PERFINFO_LOG_TYPE_TP_TIMER_EXPIRATION_BEGIN
• ntexapi::PERFINFO_LOG_TYPE_TP_TIMER_EXPIRATION_END
• ntexapi::PERFINFO_LOG_TYPE_TP_TIMER_SET
• ntexapi::PERFINFO_LOG_TYPE_TP_TIMER_SET_NTTIMER
• ntexapi::PERFINFO_LOG_TYPE_TP_WORKER_NUMANODE_SWITCH
• ntexapi::PERFINFO_LOG_TYPE_TRAP
• ntexapi::PERFINFO_LOG_TYPE_TRIMPROCESS
• ntexapi::PERFINFO_LOG_TYPE_TRIMSESSION
• ntexapi::PERFINFO_LOG_TYPE_UMS_CONTEXT_SWITCH
• ntexapi::PERFINFO_LOG_TYPE_UMS_DIRECTED_SWITCH_END
• ntexapi::PERFINFO_LOG_TYPE_UMS_DIRECTED_SWITCH_START
• ntexapi::PERFINFO_LOG_TYPE_UMS_DISASSOCIATE
• ntexapi::PERFINFO_LOG_TYPE_UMS_PARK
• ntexapi::PERFINFO_LOG_TYPE_UNEXPECTED_INTERRUPT
• ntexapi::PERFINFO_LOG_TYPE_UNLINKFFREEORZERO
• ntexapi::PERFINFO_LOG_TYPE_UNLINKFROMSTANDBY
• ntexapi::PERFINFO_LOG_TYPE_UNMAPFILE
• ntexapi::PERFINFO_LOG_TYPE_VIRTUAL_ALLOC
• ntexapi::PERFINFO_LOG_TYPE_VIRTUAL_ALLOC_DC_END
• ntexapi::PERFINFO_LOG_TYPE_VIRTUAL_ALLOC_DC_START
• ntexapi::PERFINFO_LOG_TYPE_VIRTUAL_FREE
• ntexapi::PERFINFO_LOG_TYPE_VIRTUAL_ROTATE
• ntexapi::PERFINFO_LOG_TYPE_WAIT_MULTIPLE
• ntexapi::PERFINFO_LOG_TYPE_WAIT_SINGLE
• ntexapi::PERFINFO_LOG_TYPE_WAKE_DROP_EXECUTION
• ntexapi::PERFINFO_LOG_TYPE_WAKE_DROP_INSTRUMENTATION
• ntexapi::PERFINFO_LOG_TYPE_WAKE_DROP_KERNEL
• ntexapi::PERFINFO_LOG_TYPE_WAKE_DROP_PRESERVE_PROCESS
• ntexapi::PERFINFO_LOG_TYPE_WAKE_DROP_USER
• ntexapi::PERFINFO_LOG_TYPE_WAKE_EVENT_EXECUTION
• ntexapi::PERFINFO_LOG_TYPE_WAKE_EVENT_INSTRUMENTATION
• ntexapi::PERFINFO_LOG_TYPE_WAKE_EVENT_KERNEL
• ntexapi::PERFINFO_LOG_TYPE_WAKE_EVENT_PRESERVE_PROCESS
• ntexapi::PERFINFO_LOG_TYPE_WAKE_EVENT_USER
• ntexapi::PERFINFO_LOG_TYPE_WDF_DPC
• ntexapi::PERFINFO_LOG_TYPE_WDF_INTERRUPT
• ntexapi::PERFINFO_LOG_TYPE_WDF_PASSIVE_INTERRUPT
• ntexapi::PERFINFO_LOG_TYPE_WDF_WORK_ITEM
• ntexapi::PERFINFO_LOG_TYPE_WNF_CALLBACK
• ntexapi::PERFINFO_LOG_TYPE_WNF_NAME_SUB_RUNDOWN
• ntexapi::PERFINFO_LOG_TYPE_WNF_PUBLISH
• ntexapi::PERFINFO_LOG_TYPE_WNF_SUBSCRIBE
• ntexapi::PERFINFO_LOG_TYPE_WNF_UNSUBSCRIBE
• ntexapi::PERFINFO_LOG_TYPE_WORKER_THREAD_ITEM
• ntexapi::PERFINFO_LOG_TYPE_WORKER_THREAD_ITEM_END
• ntexapi::PERFINFO_LOG_TYPE_WORKER_THREAD_ITEM_START
• ntexapi::PERFINFO_LOG_TYPE_WORKINGSETMANAGER
• ntexapi::PERFINFO_LOG_TYPE_WSINFOPROCESS
• ntexapi::PERFINFO_LOG_TYPE_WSINFOSESSION
• ntexapi::PERFINFO_LOG_TYPE_WSSHAREABLE_RUNDOWN
• ntexapi::PERFINFO_LOG_TYPE_ZEROSHARECOUNT
• ntexapi::PERFINFO_LOG_TYPE_ZOMBIE_PROCESS
• ntexapi::PERFINFO_LOT_TYPE_THREAD_SET_BASE_PRIORITY
• ntexapi::PERF_AFFINITY
• ntexapi::PERF_ALL_FAULTS
• ntexapi::PERF_ALPC
• ntexapi::PERF_ANTI_STARVATION
• ntexapi::PERF_BACKTRACE
• ntexapi::PERF_CACHE_FLUSH
• ntexapi::PERF_CC
• ntexapi::PERF_CLOCK_INTERRUPT
• ntexapi::PERF_CLOCK_TIMER
• ntexapi::PERF_CLUSTER_OFF
• ntexapi::PERF_COMPACT_CSWITCH
• ntexapi::PERF_CONTEXT_SWITCH
• ntexapi::PERF_CONTMEM_GEN
• ntexapi::PERF_CPU_CONFIG
• ntexapi::PERF_DBGPRINT
• ntexapi::PERF_DEBUGGER
• ntexapi::PERF_DEBUG_EVENTS
• ntexapi::PERF_DFSS
• ntexapi::PERF_DISK_IO
• ntexapi::PERF_DISK_IO_INIT
• ntexapi::PERF_DISPATCHER
• ntexapi::PERF_DLL_FLUSH_WS
• ntexapi::PERF_DLL_INFO
• ntexapi::PERF_DPC
• ntexapi::PERF_DPC_QUEUE
• ntexapi::PERF_DRIVERS
• ntexapi::PERF_EVENTS
• ntexapi::PERF_FILENAME
• ntexapi::PERF_FILE_IO
• ntexapi::PERF_FILE_IO_INIT
• ntexapi::PERF_FLT_FASTIO
• ntexapi::PERF_FLT_IO
• ntexapi::PERF_FLT_IO_FAILURE
• ntexapi::PERF_FLT_IO_INIT
• ntexapi::PERF_FOOTPRINT
• ntexapi::PERF_FULLTRACE
• ntexapi::PERF_HARD_FAULTS
• ntexapi::PERF_HEAP
• ntexapi::PERF_HIBER_RUNDOWN
• ntexapi::PERF_HV_PROFILE
• ntexapi::PERF_IDLE_SELECTION
• ntexapi::PERF_INTERRUPT
• ntexapi::PERF_INTERRUPT_STEER
• ntexapi::PERF_IO_TIMER
• ntexapi::PERF_IPI
• ntexapi::PERF_JOB
• ntexapi::PERF_KERNEL_QUEUE
• ntexapi::PERF_LOADER
• ntexapi::PERF_LOAD_BALANCER
• ntexapi::PERF_MASK_GROUP
• ntexapi::PERF_MASK_INDEX
• ntexapi::PERF_MEMINFO
• ntexapi::PERF_MEMINFO_WS
• ntexapi::PERF_MEMORY
• ntexapi::PERF_MEMORY_CONTROL
• ntexapi::PERF_NETWORK
• ntexapi::PERF_NO_SYSCONFIG
• ntexapi::PERF_NUM_MASKS
• ntexapi::PERF_OBJECTS
• ntexapi::PERF_OB_HANDLE
• ntexapi::PERF_OB_OBJECT
• ntexapi::PERF_OPTICAL_IO
• ntexapi::PERF_OPTICAL_IO_INIT
• ntexapi::PERF_PERF_COUNTER
• ntexapi::PERF_PFN_LIST
• ntexapi::PERF_PFSECTION
• ntexapi::PERF_PMC_PROFILE
• ntexapi::PERF_POOL
• ntexapi::PERF_POOLTRACE
• ntexapi::PERF_POWER
• ntexapi::PERF_PPM_EXIT_LATENCY
• ntexapi::PERF_PREFETCH
• ntexapi::PERF_PRIORITY
• ntexapi::PERF_PROCESS
• ntexapi::PERF_PROCESSOR_IDLE
• ntexapi::PERF_PROCESS_FREEZE
• ntexapi::PERF_PROCESS_INSWAP
• ntexapi::PERF_PROC_ATTACH
• ntexapi::PERF_PROC_THREAD
• ntexapi::PERF_PROFILE
• ntexapi::PERF_PROFILING
• ntexapi::PERF_REFSET
• ntexapi::PERF_REGISTRY
• ntexapi::PERF_REG_HIVE
• ntexapi::PERF_REG_NOTIF
• ntexapi::PERF_SESSION
• ntexapi::PERF_SHOULD_YIELD
• ntexapi::PERF_SOFT_TRIM
• ntexapi::PERF_SPININSTR
• ntexapi::PERF_SPINLOCK
• ntexapi::PERF_SPINLOCK_CNTRS
• ntexapi::PERF_SPLIT_IO
• ntexapi::PERF_SYNC_OBJECTS
• ntexapi::PERF_SYSCALL
• ntexapi::PERF_SYSCFG_ALL
• ntexapi::PERF_SYSCFG_GRAPHICS
• ntexapi::PERF_SYSCFG_NETWORK
• ntexapi::PERF_SYSCFG_OPTICAL
• ntexapi::PERF_SYSCFG_PNP
• ntexapi::PERF_SYSCFG_SERVICES
• ntexapi::PERF_SYSCFG_STORAGE
• ntexapi::PERF_SYSCFG_SYSTEM
• ntexapi::PERF_THREAD
• ntexapi::PERF_TIMER
• ntexapi::PERF_UMS
• ntexapi::PERF_VAMAP
• ntexapi::PERF_VIRTUAL_ALLOC
• ntexapi::PERF_VULCAN
• ntexapi::PERF_WAKE_COUNTER
• ntexapi::PERF_WAKE_DROP
• ntexapi::PERF_WAKE_EVENT
• ntexapi::PERF_WDF_DPC
• ntexapi::PERF_WDF_INTERRUPT
• ntexapi::PERF_WORKER_THREAD
• ntexapi::PERF_WS
• ntexapi::PERF_WS_DETAIL
• ntexapi::PERF_WS_ENTRY
• ntexapi::PROFILE_ALL_ACCESS
• ntexapi::PROFILE_CONTROL
• ntexapi::SYSDBG_LIVEDUMP_CONTROL_SIZE
• ntexapi::SYSDBG_LIVEDUMP_CONTROL_SIZE_WIN11
• ntexapi::SYSDBG_LIVEDUMP_CONTROL_VERSION
• ntexapi::SYSDBG_LIVEDUMP_CONTROL_VERSION_WIN11
• ntexapi::SYSDBG_LIVEDUMP_SELECTIVE_CONTROL_VERSION
• ntexapi::SYSTEM_CACHE_CREATE_INFORMATION_VERSION
• ntexapi::SYSTEM_CACHE_DELETE_INFORMATION_VERSION
• ntexapi::SYSTEM_CACHE_LIST_INFORMATION_VERSION
• ntexapi::SYSTEM_CACHE_STATS_INFORMATION_VERSION
• ntexapi::SYSTEM_CACHE_STORE_CREATE_INFORMATION_VERSION
• ntexapi::SYSTEM_CACHE_STORE_DELETE_INFORMATION_VERSION
• ntexapi::SYSTEM_CACHE_STORE_RESIZE_INFORMATION_VERSION
• ntexapi::SYSTEM_STORE_COMPRESSION_INFORMATION_VERSION
• ntexapi::SYSTEM_STORE_CONFIG_INFORMATION_VERSION
• ntexapi::SYSTEM_STORE_CREATE_INFORMATION_VERSION
• ntexapi::SYSTEM_STORE_DELETE_INFORMATION_VERSION
• ntexapi::SYSTEM_STORE_HIGH_MEM_PRIORITY_INFORMATION_VERSION
• ntexapi::SYSTEM_STORE_INFORMATION_VERSION
• ntexapi::SYSTEM_STORE_LIST_INFORMATION_VERSION
• ntexapi::SYSTEM_STORE_REGISTRATION_INFORMATION_VERSION
• ntexapi::SYSTEM_STORE_RESIZE_INFORMATION_VERSION
• ntexapi::SYSTEM_STORE_STATS_INFORMATION_VERSION
• ntexapi::SYSTEM_STORE_TRIM_INFORMATION_VERSION
• ntexapi::TRACE_HEADER_ENUM_MASK
• ntexapi::TRACE_HEADER_EVENT_TRACE
• ntexapi::USER_SHARED_DATA
• ntexapi::WMI_LOG_TYPE_ALPC_CLOSE_PORT
• ntexapi::WMI_LOG_TYPE_ALPC_CONNECT_FAIL
• ntexapi::WMI_LOG_TYPE_ALPC_CONNECT_REQUEST
• ntexapi::WMI_LOG_TYPE_ALPC_CONNECT_SUCCESS
• ntexapi::WMI_LOG_TYPE_ALPC_RECEIVE_MESSAGE
• ntexapi::WMI_LOG_TYPE_ALPC_SEND_MESSAGE
• ntexapi::WMI_LOG_TYPE_ALPC_UNWAIT
• ntexapi::WMI_LOG_TYPE_ALPC_WAIT_FOR_NEW_MESSAGE
• ntexapi::WMI_LOG_TYPE_ALPC_WAIT_FOR_REPLY
• ntexapi::WMI_LOG_TYPE_BINARY_PATH
• ntexapi::WMI_LOG_TYPE_BUILD_LAB
• ntexapi::WMI_LOG_TYPE_CONFIG_CODEINTEGRITY
• ntexapi::WMI_LOG_TYPE_CONFIG_CPU
• ntexapi::WMI_LOG_TYPE_CONFIG_DPI
• ntexapi::WMI_LOG_TYPE_CONFIG_IDECHANNEL
• ntexapi::WMI_LOG_TYPE_CONFIG_IRQ
• ntexapi::WMI_LOG_TYPE_CONFIG_LOGICALDISK
• ntexapi::WMI_LOG_TYPE_CONFIG_MACHINEID
• ntexapi::WMI_LOG_TYPE_CONFIG_NIC
• ntexapi::WMI_LOG_TYPE_CONFIG_NUMANODE
• ntexapi::WMI_LOG_TYPE_CONFIG_OPTICALMEDIA
• ntexapi::WMI_LOG_TYPE_CONFIG_PHYSICALDISK
• ntexapi::WMI_LOG_TYPE_CONFIG_PLATFORM
• ntexapi::WMI_LOG_TYPE_CONFIG_PNP
• ntexapi::WMI_LOG_TYPE_CONFIG_POWER
• ntexapi::WMI_LOG_TYPE_CONFIG_PROCESSORGROUP
• ntexapi::WMI_LOG_TYPE_CONFIG_PROCESSORNUMBER
• ntexapi::WMI_LOG_TYPE_CONFIG_SERVICES
• ntexapi::WMI_LOG_TYPE_CONFIG_VIDEO
• ntexapi::WMI_LOG_TYPE_DBGID_NB10
• ntexapi::WMI_LOG_TYPE_DBGID_RSDS
• ntexapi::WMI_LOG_TYPE_GROUP_MASKS_END
• ntexapi::WMI_LOG_TYPE_HEADER
• ntexapi::WMI_LOG_TYPE_HEADER_EXTENSION
• ntexapi::WMI_LOG_TYPE_IMAGE_DC_END
• ntexapi::WMI_LOG_TYPE_IMAGE_DC_START
• ntexapi::WMI_LOG_TYPE_IMAGE_HYPERCALL_PAGE
• ntexapi::WMI_LOG_TYPE_IMAGE_KERNEL_BASE
• ntexapi::WMI_LOG_TYPE_IMAGE_LOAD
• ntexapi::WMI_LOG_TYPE_IMAGE_RELOCATION
• ntexapi::WMI_LOG_TYPE_IMAGE_UNLOAD
• ntexapi::WMI_LOG_TYPE_IO_FLUSH
• ntexapi::WMI_LOG_TYPE_IO_FLUSH_INIT
• ntexapi::WMI_LOG_TYPE_IO_READ
• ntexapi::WMI_LOG_TYPE_IO_READ_INIT
• ntexapi::WMI_LOG_TYPE_IO_REDIRECTED_INIT
• ntexapi::WMI_LOG_TYPE_IO_WRITE
• ntexapi::WMI_LOG_TYPE_IO_WRITE_INIT
• ntexapi::WMI_LOG_TYPE_JOB_ASSIGN_PROCESS
• ntexapi::WMI_LOG_TYPE_JOB_CREATE
• ntexapi::WMI_LOG_TYPE_JOB_OPEN
• ntexapi::WMI_LOG_TYPE_JOB_QUERY
• ntexapi::WMI_LOG_TYPE_JOB_QUERY_FAILED
• ntexapi::WMI_LOG_TYPE_JOB_QUERY_VIOLATION
• ntexapi::WMI_LOG_TYPE_JOB_REMOVE_PROCESS
• ntexapi::WMI_LOG_TYPE_JOB_SEND_NOTIFICATION
• ntexapi::WMI_LOG_TYPE_JOB_SET
• ntexapi::WMI_LOG_TYPE_JOB_SET_CPU_RATE
• ntexapi::WMI_LOG_TYPE_JOB_SET_FAILED
• ntexapi::WMI_LOG_TYPE_JOB_SET_NET_RATE
• ntexapi::WMI_LOG_TYPE_JOB_SET_NOTIFICATION
• ntexapi::WMI_LOG_TYPE_JOB_TERMINATE
• ntexapi::WMI_LOG_TYPE_PAGE_FAULT_ACCESS_VIOLATION
• ntexapi::WMI_LOG_TYPE_PAGE_FAULT_COPY_ON_WRITE
• ntexapi::WMI_LOG_TYPE_PAGE_FAULT_DEMAND_ZERO
• ntexapi::WMI_LOG_TYPE_PAGE_FAULT_GUARD_PAGE
• ntexapi::WMI_LOG_TYPE_PAGE_FAULT_HARD_PAGE_FAULT
• ntexapi::WMI_LOG_TYPE_PAGE_FAULT_TRANSITION
• ntexapi::WMI_LOG_TYPE_PROCESS_CREATE
• ntexapi::WMI_LOG_TYPE_PROCESS_DC_END
• ntexapi::WMI_LOG_TYPE_PROCESS_DC_START
• ntexapi::WMI_LOG_TYPE_PROCESS_DELETE
• ntexapi::WMI_LOG_TYPE_PROCESS_LOAD_IMAGE
• ntexapi::WMI_LOG_TYPE_PROCESS_TERMINATE
• ntexapi::WMI_LOG_TYPE_REG_RUNDOWNBEGIN
• ntexapi::WMI_LOG_TYPE_REG_RUNDOWNEND
• ntexapi::WMI_LOG_TYPE_RUNDOWN_BEGIN
• ntexapi::WMI_LOG_TYPE_RUNDOWN_COMPLETE
• ntexapi::WMI_LOG_TYPE_RUNDOWN_END
• ntexapi::WMI_LOG_TYPE_TCPIP_ACCEPT
• ntexapi::WMI_LOG_TYPE_TCPIP_ACCEPT_IPV6
• ntexapi::WMI_LOG_TYPE_TCPIP_ARPCOPY
• ntexapi::WMI_LOG_TYPE_TCPIP_ARPCOPY_IPV6
• ntexapi::WMI_LOG_TYPE_TCPIP_CONNECT
• ntexapi::WMI_LOG_TYPE_TCPIP_CONNECT_IPV6
• ntexapi::WMI_LOG_TYPE_TCPIP_DISCONNECT
• ntexapi::WMI_LOG_TYPE_TCPIP_DISCONNECT_IPV6
• ntexapi::WMI_LOG_TYPE_TCPIP_DUPACK
• ntexapi::WMI_LOG_TYPE_TCPIP_DUPACK_IPV6
• ntexapi::WMI_LOG_TYPE_TCPIP_FAIL
• ntexapi::WMI_LOG_TYPE_TCPIP_FAIL_IPV6
• ntexapi::WMI_LOG_TYPE_TCPIP_FULLACK
• ntexapi::WMI_LOG_TYPE_TCPIP_FULLACK_IPV6
• ntexapi::WMI_LOG_TYPE_TCPIP_PARTACK
• ntexapi::WMI_LOG_TYPE_TCPIP_PARTACK_IPV6
• ntexapi::WMI_LOG_TYPE_TCPIP_RECEIVE
• ntexapi::WMI_LOG_TYPE_TCPIP_RECEIVE_IPV6
• ntexapi::WMI_LOG_TYPE_TCPIP_RECONNECT
• ntexapi::WMI_LOG_TYPE_TCPIP_RECONNECT_IPV6
• ntexapi::WMI_LOG_TYPE_TCPIP_RETRANSMIT
• ntexapi::WMI_LOG_TYPE_TCPIP_RETRANSMIT_IPV6
• ntexapi::WMI_LOG_TYPE_TCPIP_SEND
• ntexapi::WMI_LOG_TYPE_TCPIP_SEND_IPV6
• ntexapi::WMI_LOG_TYPE_TCPIP_TCPCOPY
• ntexapi::WMI_LOG_TYPE_TCPIP_TCPCOPY_IPV6
• ntexapi::WMI_LOG_TYPE_THREAD_CREATE
• ntexapi::WMI_LOG_TYPE_THREAD_DC_END
• ntexapi::WMI_LOG_TYPE_THREAD_DC_START
• ntexapi::WMI_LOG_TYPE_THREAD_DELETE
• ntexapi::WMI_LOG_TYPE_UDP_FAIL
• ntexapi::WMI_LOG_TYPE_UDP_RECEIVE
• ntexapi::WMI_LOG_TYPE_UDP_RECEIVE_IPV6
• ntexapi::WMI_LOG_TYPE_UDP_SEND
• ntexapi::WMI_LOG_TYPE_UDP_SEND_IPV6
• ntexapi::WORKER_FACTORY_ALL_ACCESS
• ntexapi::WORKER_FACTORY_QUERY_INFORMATION
• ntexapi::WORKER_FACTORY_READY_WORKER
• ntexapi::WORKER_FACTORY_RELEASE_WORKER
• ntexapi::WORKER_FACTORY_SET_INFORMATION
• ntexapi::WORKER_FACTORY_SHUTDOWN
• ntexapi::WORKER_FACTORY_WAIT
• ntgdi::GDI_ALTTYPE_1
• ntgdi::GDI_ALTTYPE_2
• ntgdi::GDI_ALTTYPE_3
• ntgdi::GDI_BMFD_TYPE
• ntgdi::GDI_BRUSH_TYPE
• ntgdi::GDI_CACHE_TYPE
• ntgdi::GDI_CLIENTOBJ_TYPE
• ntgdi::GDI_CLIENT_ALTDC_TYPE
• ntgdi::GDI_CLIENT_BITMAP_TYPE
• ntgdi::GDI_CLIENT_BRUSH_TYPE
• ntgdi::GDI_CLIENT_CLIENTOBJ_TYPE
• ntgdi::GDI_CLIENT_DC_TYPE
• ntgdi::GDI_CLIENT_DIBSECTION_TYPE
• ntgdi::GDI_CLIENT_EXTPEN_TYPE
• ntgdi::GDI_CLIENT_FONT_TYPE
• ntgdi::GDI_CLIENT_METADC16_TYPE
• ntgdi::GDI_CLIENT_METAFILE16_TYPE
• ntgdi::GDI_CLIENT_METAFILE_TYPE
• ntgdi::GDI_CLIENT_PALETTE_TYPE
• ntgdi::GDI_CLIENT_PEN_TYPE
• ntgdi::GDI_CLIENT_REGION_TYPE
• ntgdi::GDI_DBRUSH_TYPE
• ntgdi::GDI_DCIOBJ_TYPE
• ntgdi::GDI_DC_TYPE
• ntgdi::GDI_DD_DIRECTDRAW_TYPE
• ntgdi::GDI_DD_SURFACE_TYPE
• ntgdi::GDI_DEF_TYPE
• ntgdi::GDI_DRVOBJ_TYPE
• ntgdi::GDI_EFSTATE_TYPE
• ntgdi::GDI_HANDLE_ALTTYPE_BITS
• ntgdi::GDI_HANDLE_ALTTYPE_MASK
• ntgdi::GDI_HANDLE_ALTTYPE_SHIFT
• ntgdi::GDI_HANDLE_INDEX_BITS
• ntgdi::GDI_HANDLE_INDEX_MASK
• ntgdi::GDI_HANDLE_INDEX_SHIFT
• ntgdi::GDI_HANDLE_STOCK_BITS
• ntgdi::GDI_HANDLE_STOCK_MASK
• ntgdi::GDI_HANDLE_STOCK_SHIFT
• ntgdi::GDI_HANDLE_TYPE_BITS
• ntgdi::GDI_HANDLE_TYPE_MASK
• ntgdi::GDI_HANDLE_TYPE_SHIFT
• ntgdi::GDI_HANDLE_UNIQUE_BITS
• ntgdi::GDI_HANDLE_UNIQUE_MASK
• ntgdi::GDI_HANDLE_UNIQUE_SHIFT
• ntgdi::GDI_ICMCXF_TYPE
• ntgdi::GDI_ICMDLL_TYPE
• ntgdi::GDI_ICMLCS_TYPE
• ntgdi::GDI_LFONT_TYPE
• ntgdi::GDI_MAX_HANDLE_COUNT
• ntgdi::GDI_META_TYPE
• ntgdi::GDI_PAL_TYPE
• ntgdi::GDI_PATH_TYPE
• ntgdi::GDI_PFE_TYPE
• ntgdi::GDI_PFF_TYPE
• ntgdi::GDI_PFT_TYPE
• ntgdi::GDI_RC_TYPE
• ntgdi::GDI_RFONT_TYPE
• ntgdi::GDI_RGN_TYPE
• ntgdi::GDI_SPACE_TYPE
• ntgdi::GDI_SPOOL_TYPE
• ntgdi::GDI_SURF_TYPE
• ntgdi::GDI_TEMP_TYPE
• ntgdi::GDI_TTFD_TYPE
• ntgdi::GDI_VTFD_TYPE
• ntimage::IMAGE_DEBUG_POGO_SIGNATURE_LTCG
• ntimage::IMAGE_DEBUG_POGO_SIGNATURE_PGU
• ntimage::IMAGE_DVRT_ARM64X_FIXUP_SIZE_2BYTES
• ntimage::IMAGE_DVRT_ARM64X_FIXUP_SIZE_4BYTES
• ntimage::IMAGE_DVRT_ARM64X_FIXUP_SIZE_8BYTES
• ntimage::IMAGE_DVRT_ARM64X_FIXUP_TYPE_DELTA
• ntimage::IMAGE_DVRT_ARM64X_FIXUP_TYPE_VALUE
• ntimage::IMAGE_DVRT_ARM64X_FIXUP_TYPE_ZEROFILL
• ntimage::IMAGE_DYNAMIC_RELOCATION_ARM64X
• ntimage::IMAGE_DYNAMIC_RELOCATION_KI_USER_SHARED_DATA64
• ntimage::IMAGE_DYNAMIC_RELOCATION_MM_SHARED_USER_DATA_VA
• ntimage::IMAGE_FILE_MACHINE_CHPE_X86
• ntioapi::CHECKSUM_ENFORCEMENT_OFF
• ntioapi::DEVICE_NAMED_PIPE
• ntioapi::DOS_MAX_COMPONENT_LENGTH
• ntioapi::DOS_MAX_PATH_LENGTH
• ntioapi::FILE_COPY_STRUCTURED_STORAGE
• ntioapi::FILE_INVALID_FILE_ID
• ntioapi::FILE_PIPE_SYMLINK_VALID_FLAGS
• ntioapi::FILE_PIPE_UNLIMITED_INSTANCES
• ntioapi::FILE_STRUCTURED_STORAGE
• ntioapi::IOCTL_KSEC_ALLOC_POOL
• ntioapi::IOCTL_KSEC_ALLOC_VM
• ntioapi::IOCTL_KSEC_CLIENT_CALLBACK
• ntioapi::IOCTL_KSEC_CLIENT_FREE_VM
• ntioapi::IOCTL_KSEC_CONNECT_LSA
• ntioapi::IOCTL_KSEC_COPY_POOL
• ntioapi::IOCTL_KSEC_COPY_VM
• ntioapi::IOCTL_KSEC_DECRYPT_MEMORY
• ntioapi::IOCTL_KSEC_DECRYPT_MEMORY_CROSS_PROC
• ntioapi::IOCTL_KSEC_DECRYPT_MEMORY_SAME_LOGON
• ntioapi::IOCTL_KSEC_DUPLICATE_HANDLE
• ntioapi::IOCTL_KSEC_ENCRYPT_MEMORY
• ntioapi::IOCTL_KSEC_ENCRYPT_MEMORY_CROSS_PROC
• ntioapi::IOCTL_KSEC_ENCRYPT_MEMORY_SAME_LOGON
• ntioapi::IOCTL_KSEC_FIPS_GET_FUNCTION_TABLE
• ntioapi::IOCTL_KSEC_FREE_POOL
• ntioapi::IOCTL_KSEC_FREE_VM
• ntioapi::IOCTL_KSEC_GET_BCRYPT_EXTENSION
• ntioapi::IOCTL_KSEC_GET_BCRYPT_EXTENSION2
• ntioapi::IOCTL_KSEC_GET_DEVICECONTROL_EXTENSION
• ntioapi::IOCTL_KSEC_GET_SSL_EXTENSION
• ntioapi::IOCTL_KSEC_INSERT_PROTECTED_PROCESS_ADDRESS
• ntioapi::IOCTL_KSEC_IPC_GET_QUEUED_FUNCTION_CALLS
• ntioapi::IOCTL_KSEC_IPC_SET_FUNCTION_RETURN
• ntioapi::IOCTL_KSEC_REGISTER_EXTENSION
• ntioapi::IOCTL_KSEC_REMOVE_PROTECTED_PROCESS_ADDRESS
• ntioapi::IOCTL_KSEC_RNG
• ntioapi::IOCTL_KSEC_RNG_REKEY
• ntioapi::IOCTL_MOUNTDEV_QUERY_DEVICE_NAME
• ntioapi::IOCTL_MOUNTMGR_AUTO_DL_ASSIGNMENTS
• ntioapi::IOCTL_MOUNTMGR_BOOT_DL_ASSIGNMENT
• ntioapi::IOCTL_MOUNTMGR_CANCEL_VOLUME_DELETE
• ntioapi::IOCTL_MOUNTMGR_CHANGE_NOTIFY
• ntioapi::IOCTL_MOUNTMGR_CHECK_UNPROCESSED_VOLUMES
• ntioapi::IOCTL_MOUNTMGR_CREATE_POINT
• ntioapi::IOCTL_MOUNTMGR_DELETE_POINTS
• ntioapi::IOCTL_MOUNTMGR_DELETE_POINTS_DBONLY
• ntioapi::IOCTL_MOUNTMGR_KEEP_LINKS_WHEN_OFFLINE
• ntioapi::IOCTL_MOUNTMGR_NEXT_DRIVE_LETTER
• ntioapi::IOCTL_MOUNTMGR_PREPARE_VOLUME_DELETE
• ntioapi::IOCTL_MOUNTMGR_QUERY_AUTO_MOUNT
• ntioapi::IOCTL_MOUNTMGR_QUERY_DOS_VOLUME_PATH
• ntioapi::IOCTL_MOUNTMGR_QUERY_DOS_VOLUME_PATHS
• ntioapi::IOCTL_MOUNTMGR_QUERY_POINTS
• ntioapi::IOCTL_MOUNTMGR_SCRUB_REGISTRY
• ntioapi::IOCTL_MOUNTMGR_SET_AUTO_MOUNT
• ntioapi::IOCTL_MOUNTMGR_SILO_ARRIVAL
• ntioapi::IOCTL_MOUNTMGR_TRACELOG_CACHE
• ntioapi::IOCTL_MOUNTMGR_VOLUME_ARRIVAL_NOTIFICATION
• ntioapi::IOCTL_MOUNTMGR_VOLUME_MOUNT_POINT_CREATED
• ntioapi::IOCTL_MOUNTMGR_VOLUME_MOUNT_POINT_DELETED
• ntioapi::IO_COMPLETION_ALL_ACCESS
• ntioapi::IO_COMPLETION_QUERY_STATE
• ntioapi::KSEC_DEVICE_NAME
• ntioapi::MAILSLOT_CLASS_FIRSTCLASS
• ntioapi::MAILSLOT_CLASS_SECONDCLASS
• ntioapi::MAILSLOT_SIZE_AUTO
• ntioapi::MOUNTDEVCONTROLTYPE
• ntioapi::MOUNTMGRCONTROLTYPE
• ntioapi::MOUNTMGR_DEVICE_NAME
• ntioapi::REPARSE_DATA_BUFFER_HEADER_SIZE
• ntldr::LDRP_CHPE_EMULATOR_IMAGE
• ntldr::LDRP_CHPE_IMAGE
• ntldr::LDRP_COMPAT_DATABASE_PROCESSED
• ntldr::LDRP_COR_DEFERRED_VALIDATE
• ntldr::LDRP_COR_IL_ONLY
• ntldr::LDRP_COR_IMAGE
• ntldr::LDRP_DONT_CALL_FOR_THREADS
• ntldr::LDRP_DONT_RELOCATE
• ntldr::LDRP_ENTRY_PROCESSED
• ntldr::LDRP_IMAGE_DLL
• ntldr::LDRP_IN_EXCEPTION_TABLE
• ntldr::LDRP_IN_INDEXES
• ntldr::LDRP_IN_LEGACY_LISTS
• ntldr::LDRP_LOAD_CONFIG_PROCESSED
• ntldr::LDRP_LOAD_IN_PROGRESS
• ntldr::LDRP_LOAD_NOTIFICATIONS_SENT
• ntldr::LDRP_MARKED_FOR_REMOVAL
• ntldr::LDRP_PACKAGED_BINARY
• ntldr::LDRP_PROCESS_ATTACH_CALLED
• ntldr::LDRP_PROCESS_ATTACH_FAILED
• ntldr::LDRP_PROCESS_STATIC_IMPORT
• ntldr::LDRP_PROTECT_DELAY_LOAD
• ntldr::LDRP_REDIRECTED
• ntldr::LDRP_SHIM_DLL
• ntldr::LDRP_TELEMETRY_ENTRY_PROCESSED
• ntldr::LDR_ADDREF_DLL_PIN
• ntldr::LDR_DATA_TABLE_ENTRY_SIZE_WIN10
• ntldr::LDR_DATA_TABLE_ENTRY_SIZE_WIN11
• ntldr::LDR_DATA_TABLE_ENTRY_SIZE_WIN7
• ntldr::LDR_DATA_TABLE_ENTRY_SIZE_WIN8
• ntldr::LDR_DATA_TABLE_ENTRY_SIZE_WINXP
• ntldr::LDR_DLL_NOTIFICATION_REASON_LOADED
• ntldr::LDR_DLL_NOTIFICATION_REASON_UNLOADED
• ntldr::LDR_GET_DLL_HANDLE_EX_PIN
• ntldr::LDR_GET_DLL_HANDLE_EX_UNCHANGED_REFCOUNT
• ntldr::LDR_GET_PROCEDURE_ADDRESS_DONT_RECORD_FORWARDER
• ntldr::LDR_LOCK_LOADER_LOCK_DISPOSITION_INVALID
• ntldr::LDR_LOCK_LOADER_LOCK_DISPOSITION_LOCK_ACQUIRED
• ntldr::LDR_LOCK_LOADER_LOCK_DISPOSITION_LOCK_NOT_ACQUIRED
• ntldr::LDR_LOCK_LOADER_LOCK_FLAG_RAISE_ON_ERRORS
• ntldr::LDR_LOCK_LOADER_LOCK_FLAG_TRY_ONLY
• ntldr::LDR_UNLOCK_LOADER_LOCK_FLAG_RAISE_ON_ERRORS
• ntldr::RESOURCE_DATA_LEVEL
• ntldr::RESOURCE_LANGUAGE_LEVEL
• ntldr::RESOURCE_NAME_LEVEL
• ntldr::RESOURCE_TYPE_LEVEL
• ntlpcapi::ALPC_ATTRFLG_ALLOCATEDATTR
• ntlpcapi::ALPC_ATTRFLG_KEEPRUNNINGATTR
• ntlpcapi::ALPC_ATTRFLG_VALIDATTR
• ntlpcapi::ALPC_CANCELFLGP_FLUSH
• ntlpcapi::ALPC_CANCELFLG_NO_CONTEXT_CHECK
• ntlpcapi::ALPC_CANCELFLG_TRY_CANCEL
• ntlpcapi::ALPC_COMPLETION_LIST_BUFFER_GRANULARITY_MASK
• ntlpcapi::ALPC_CREATEPORTSECTIONFLG_SECURE
• ntlpcapi::ALPC_HANDLEFLG_DUPLICATE_INHERIT
• ntlpcapi::ALPC_HANDLEFLG_DUPLICATE_SAME_ACCESS
• ntlpcapi::ALPC_HANDLEFLG_DUPLICATE_SAME_ATTRIBUTES
• ntlpcapi::ALPC_IMPERSONATEFLG_ANONYMOUS
• ntlpcapi::ALPC_IMPERSONATEFLG_REQUIRE_IMPERSONATE
• ntlpcapi::ALPC_MESSAGE_CONTEXT_ATTRIBUTE
• ntlpcapi::ALPC_MESSAGE_HANDLE_ATTRIBUTE
• ntlpcapi::ALPC_MESSAGE_SECURITY_ATTRIBUTE
• ntlpcapi::ALPC_MESSAGE_VIEW_ATTRIBUTE
• ntlpcapi::ALPC_MSGFLG_LPC_MODE
• ntlpcapi::ALPC_MSGFLG_RELEASE_MESSAGE
• ntlpcapi::ALPC_MSGFLG_REPLY_MESSAGE
• ntlpcapi::ALPC_MSGFLG_SYNC_REQUEST
• ntlpcapi::ALPC_MSGFLG_TRACK_PORT_REFERENCES
• ntlpcapi::ALPC_MSGFLG_WAIT_ALERTABLE
• ntlpcapi::ALPC_MSGFLG_WAIT_USER_MODE
• ntlpcapi::ALPC_MSGFLG_WOW64_CALL
• ntlpcapi::ALPC_PORFLG_ALLOW_DUP_OBJECT
• ntlpcapi::ALPC_PORFLG_ALLOW_IMPERSONATION
• ntlpcapi::ALPC_PORFLG_ALLOW_LPC_REQUESTS
• ntlpcapi::ALPC_PORFLG_ALLOW_MULTIHANDLE_ATTRIBUTE
• ntlpcapi::ALPC_PORFLG_DIRECT_MESSAGE
• ntlpcapi::ALPC_PORFLG_LPC_MODE
• ntlpcapi::ALPC_PORFLG_OBJECT_TYPE_ALL
• ntlpcapi::ALPC_PORFLG_OBJECT_TYPE_COMPOSITION
• ntlpcapi::ALPC_PORFLG_OBJECT_TYPE_EVENT
• ntlpcapi::ALPC_PORFLG_OBJECT_TYPE_FILE
• ntlpcapi::ALPC_PORFLG_OBJECT_TYPE_INVALID
• ntlpcapi::ALPC_PORFLG_OBJECT_TYPE_JOB
• ntlpcapi::ALPC_PORFLG_OBJECT_TYPE_MUTEX
• ntlpcapi::ALPC_PORFLG_OBJECT_TYPE_PROCESS
• ntlpcapi::ALPC_PORFLG_OBJECT_TYPE_REGKEY
• ntlpcapi::ALPC_PORFLG_OBJECT_TYPE_SECTION
• ntlpcapi::ALPC_PORFLG_OBJECT_TYPE_SEMAPHORE
• ntlpcapi::ALPC_PORFLG_OBJECT_TYPE_THREAD
• ntlpcapi::ALPC_PORFLG_OBJECT_TYPE_TOKEN
• ntlpcapi::ALPC_PORFLG_SYSTEM_PROCESS
• ntlpcapi::ALPC_PORFLG_WAITABLE_PORT
• ntlpcapi::ALPC_PORFLG_WAKE_POLICY1
• ntlpcapi::ALPC_PORFLG_WAKE_POLICY2
• ntlpcapi::ALPC_PORFLG_WAKE_POLICY3
• ntlpcapi::ALPC_SECFLG_CREATE_HANDLE
• ntlpcapi::ALPC_SECFLG_NOSECTIONHANDLE
• ntlpcapi::ALPC_VIEWFLG_NOT_SECURE
• ntlpcapi::LPC_CLIENT_DIED
• ntlpcapi::LPC_CONNECTION_REQUEST
• ntlpcapi::LPC_DATAGRAM
• ntlpcapi::LPC_DEBUG_EVENT
• ntlpcapi::LPC_ERROR_EVENT
• ntlpcapi::LPC_EXCEPTION
• ntlpcapi::LPC_KERNELMODE_MESSAGE
• ntlpcapi::LPC_LOST_REPLY
• ntlpcapi::LPC_MAX_CONNECTION_INFO_SIZE
• ntlpcapi::LPC_NO_IMPERSONATE
• ntlpcapi::LPC_PORT_CLOSED
• ntlpcapi::LPC_REPLY
• ntlpcapi::LPC_REQUEST
• ntlpcapi::PORT_ALL_ACCESS
• ntlpcapi::PORT_CONNECT
• ntlpcapi::PORT_TOTAL_MAXIMUM_MESSAGE_LENGTH
• ntlpcapi::PORT_VALID_OBJECT_ATTRIBUTES
• ntmisc::FLT_PORT_ALL_ACCESS
• ntmmapi::MAP_PROCESS
• ntmmapi::MAP_SYSTEM
• ntmmapi::MEMORY_PARTITION_ALL_ACCESS
• ntmmapi::MEM_64K_PAGES
• ntmmapi::MEM_DOS_LIM
• ntmmapi::MEM_EXECUTE_OPTION_DISABLE
• ntmmapi::MEM_EXECUTE_OPTION_DISABLE_THUNK_EMULATION
• ntmmapi::MEM_EXECUTE_OPTION_ENABLE
• ntmmapi::MEM_EXECUTE_OPTION_EXECUTE_DISPATCH_ENABLE
• ntmmapi::MEM_EXECUTE_OPTION_IMAGE_DISPATCH_ENABLE
• ntmmapi::MEM_EXECUTE_OPTION_PERMANENT
• ntmmapi::MEM_EXECUTE_OPTION_VALID_FLAGS
• ntmmapi::MMPFNLIST_ACTIVE
• ntmmapi::MMPFNLIST_BAD
• ntmmapi::MMPFNLIST_FREE
• ntmmapi::MMPFNLIST_MODIFIED
• ntmmapi::MMPFNLIST_MODIFIEDNOWRITE
• ntmmapi::MMPFNLIST_STANDBY
• ntmmapi::MMPFNLIST_TRANSITION
• ntmmapi::MMPFNLIST_ZERO
• ntmmapi::MMPFNUSE_AWEPAGE
• ntmmapi::MMPFNUSE_DRIVERLOCKPAGE
• ntmmapi::MMPFNUSE_FILE
• ntmmapi::MMPFNUSE_KERNELSTACK
• ntmmapi::MMPFNUSE_METAFILE
• ntmmapi::MMPFNUSE_NONPAGEDPOOL
• ntmmapi::MMPFNUSE_PAGEDPOOL
• ntmmapi::MMPFNUSE_PAGEFILEMAPPED
• ntmmapi::MMPFNUSE_PAGETABLE
• ntmmapi::MMPFNUSE_PROCESSPRIVATE
• ntmmapi::MMPFNUSE_SESSIONPRIVATE
• ntmmapi::MMPFNUSE_SYSTEMPTE
• ntmmapi::MemoryBadInformation
• ntmmapi::MemoryBadInformationAllProcesses
• ntmmapi::MemoryBasicInformationCapped
• ntmmapi::MemoryEnclaveImageInformation
• ntmmapi::MemoryImageInformation
• ntmmapi::MemoryMappedFilenameInformation
• ntmmapi::MemoryPhysicalContiguityInformation
• ntmmapi::MemoryPrivilegedBasicInformation
• ntmmapi::MemoryRegionInformation
• ntmmapi::MemoryRegionInformationEx
• ntmmapi::MemorySharedCommitInformation
• ntmmapi::MemoryWorkingSetExInformation
• ntmmapi::MemoryWorkingSetInformation
• ntmmapi::PROC_THREAD_ATTRIBUTE_BNO_ISOLATION
• ntmmapi::PROC_THREAD_ATTRIBUTE_CONSOLE_REFERENCE
• ntmmapi::PROC_THREAD_ATTRIBUTE_CREATE_STORE
• ntmmapi::PROC_THREAD_ATTRIBUTE_EXTENDED_FLAGS
• ntmmapi::PROC_THREAD_ATTRIBUTE_ISOLATION_MANIFEST
• ntmmapi::PROC_THREAD_ATTRIBUTE_OSMAXVERSIONTESTED
• ntmmapi::PROC_THREAD_ATTRIBUTE_PACKAGE_FULL_NAME
• ntmmapi::PROC_THREAD_ATTRIBUTE_SAFE_OPEN_PROMPT_ORIGIN_CLAIM
• ntmmapi::SEC_BASED
• ntmmapi::SEC_GLOBAL
• ntmmapi::SEC_NO_CHANGE
• ntmmapi::SystemMemoryPartitionAddPagefile
• ntmmapi::SystemMemoryPartitionClearAttributes
• ntmmapi::SystemMemoryPartitionCombineMemory
• ntmmapi::SystemMemoryPartitionCreateLargePages
• ntmmapi::SystemMemoryPartitionGetMemoryEvents
• ntmmapi::SystemMemoryPartitionInitialAddMemory
• ntmmapi::SystemMemoryPartitionMax
• ntmmapi::SystemMemoryPartitionMemoryChargeAttributes
• ntmmapi::SystemMemoryPartitionMoveMemory
• ntmmapi::SystemMemoryPartitionNodeInformation
• ntmmapi::SystemMemoryPartitionSetAttributes
• ntmmapi::SystemMemoryPartitionSetMemoryThresholds
• ntobapi::DIRECTORY_ALL_ACCESS
• ntobapi::OBJECT_BOUNDARY_DESCRIPTOR_VERSION
• ntobapi::OBJECT_TYPE_ALL_ACCESS
• ntobapi::OBJ_AUDIT_OBJECT_CLOSE
• ntobapi::OBJ_PROTECT_CLOSE
• ntobapi::ObjectHandleFlagInformation
• ntobapi::ObjectNameInformation
• ntobapi::ObjectSessionInformation
• ntobapi::ObjectSessionObjectInformation
• ntobapi::ObjectTypesInformation
• ntobapi::SYMBOLIC_LINK_ALL_ACCESS
• ntobapi::SYMBOLIC_LINK_ALL_ACCESS_EX
• ntpebteb::GDI_BATCH_BUFFER_SIZE
• ntpfapi::PF_BOOT_CONTROL_VERSION
• ntpfapi::PF_DEPRIORITIZE_OLD_PAGES_VERSION
• ntpfapi::PF_GPU_UTILIZATION_INFO_VERSION
• ntpfapi::PF_MEMORY_LIST_INFO_VERSION
• ntpfapi::PF_MIN_WS_AGE_RATE_CONTROL_VERSION
• ntpfapi::PF_PFN_PRIO_REQUEST_QUERY_MEMORY_LIST
• ntpfapi::PF_PFN_PRIO_REQUEST_VALID_FLAGS
• ntpfapi::PF_PFN_PRIO_REQUEST_VERSION
• ntpfapi::PF_PHYSICAL_MEMORY_RANGE_INFO_V1_VERSION
• ntpfapi::PF_PHYSICAL_MEMORY_RANGE_INFO_V2_VERSION
• ntpfapi::PF_PRIVSOURCE_QUERY_REQUEST_FLAGS_QUERYCOMPRESSEDPAGES
• ntpfapi::PF_PRIVSOURCE_QUERY_REQUEST_FLAGS_QUERYSKIPPAGES
• ntpfapi::PF_PRIVSOURCE_QUERY_REQUEST_FLAGS_QUERYWSPAGES
• ntpfapi::PF_PRIVSOURCE_QUERY_REQUEST_VERSION
• ntpfapi::PF_REPURPOSED_BY_PREFETCH_INFO_VERSION
• ntpfapi::PF_ROBUSTNESS_CONTROL_VERSION
• ntpfapi::PF_SCENARIO_PHASE_INFO_VERSION
• ntpfapi::PF_VIRTUAL_QUERY_VERSION
• ntpfapi::PREFETCHER_INFORMATION_MAGIC
• ntpfapi::PREFETCHER_INFORMATION_VERSION
• ntpfapi::SUPERFETCH_INFORMATION_MAGIC
• ntpfapi::SUPERFETCH_INFORMATION_VERSION
• ntpoapi::IDLE_STATE_FLAGS_C1_HLT
• ntpoapi::IDLE_STATE_FLAGS_C1_IO_HLT
• ntpoapi::IDLE_STATE_FLAGS_IO
• ntpoapi::IDLE_STATE_FLAGS_MWAIT
• ntpoapi::POWER_REQUEST_CONTEXT_NOT_SPECIFIED
• ntpoapi::POWER_REQUEST_SUPPORTED_TYPES_V1
• ntpoapi::POWER_REQUEST_SUPPORTED_TYPES_V2
• ntpoapi::POWER_REQUEST_SUPPORTED_TYPES_V3
• ntpoapi::POWER_REQUEST_SUPPORTED_TYPES_V4
• ntpoapi::PROCESSOR_STATE_TYPE_PERFORMANCE
• ntpoapi::PROCESSOR_STATE_TYPE_THROTTLE
• ntpsapi::CONTEXT_ARM_ALL
• ntpsapi::CONTEXT_ARM_CONTROL
• ntpsapi::CONTEXT_ARM_DEBUG_REGISTERS
• ntpsapi::CONTEXT_ARM_FLOATING_POINT
• ntpsapi::CONTEXT_ARM_FULL
• ntpsapi::CONTEXT_ARM_INTEGER
• ntpsapi::EXTENDED_PROCESS_CREATION_FLAG_ELEVATION_HANDLED
• ntpsapi::EXTENDED_PROCESS_CREATION_FLAG_FORCELUA
• ntpsapi::EXTENDED_PROCESS_CREATION_FLAG_FORCE_BREAKAWAY
• ntpsapi::GDI_HANDLE_BUFFER_SIZE
• ntpsapi::GDI_HANDLE_BUFFER_SIZE32
• ntpsapi::GDI_HANDLE_BUFFER_SIZE64
• ntpsapi::JOB_OBJECT_ALL_ACCESS
• ntpsapi::JOB_OBJECT_LIMIT_SILO_READY
• ntpsapi::JobObjectBackgroundInformation
• ntpsapi::JobObjectClearEvent
• ntpsapi::JobObjectClearPeakJobMemoryUsed
• ntpsapi::JobObjectContainerId
• ntpsapi::JobObjectContainerTelemetryId
• ntpsapi::JobObjectCycleTimeNotification
• ntpsapi::JobObjectEnergyTrackingState
• ntpsapi::JobObjectExtendedAccountingInformation
• ntpsapi::JobObjectFreezeInformation
• ntpsapi::JobObjectInterferenceInformation
• ntpsapi::JobObjectIoAttribution
• ntpsapi::JobObjectIoPriorityLimit
• ntpsapi::JobObjectIoRateControlInformation
• ntpsapi::JobObjectMemoryPartitionInformation
• ntpsapi::JobObjectMemoryUsageInformation
• ntpsapi::JobObjectPagePriorityLimit
• ntpsapi::JobObjectSchedulingRankBiasInformation
• ntpsapi::JobObjectServerSiloBasicInformation
• ntpsapi::JobObjectServerSiloInitialize
• ntpsapi::JobObjectServerSiloRunningState
• ntpsapi::JobObjectServerSiloUserSharedData
• ntpsapi::JobObjectSharedCommit
• ntpsapi::JobObjectSiloRootDirectory
• ntpsapi::JobObjectSiloSystemRoot
• ntpsapi::JobObjectThreadImpersonationInformation
• ntpsapi::JobObjectTimerVirtualizationInformation
• ntpsapi::JobObjectWakeInformation
• ntpsapi::MEMORY_BULK_INFORMATION_FLAG_BASIC
• ntpsapi::POWER_THROTTLING_PROCESS_VALID_FLAGS
• ntpsapi::PROCESS_CREATE_FLAGS_AUXILIARY_PROCESS
• ntpsapi::PROCESS_CREATE_FLAGS_BREAKAWAY
• ntpsapi::PROCESS_CREATE_FLAGS_CLONE_MINIMAL
• ntpsapi::PROCESS_CREATE_FLAGS_CLONE_MINIMAL_REDUCED_COMMIT
• ntpsapi::PROCESS_CREATE_FLAGS_CREATE_SESSION
• ntpsapi::PROCESS_CREATE_FLAGS_CREATE_STORE
• ntpsapi::PROCESS_CREATE_FLAGS_FORCE_BREAKAWAY
• ntpsapi::PROCESS_CREATE_FLAGS_INHERIT_FROM_PARENT
• ntpsapi::PROCESS_CREATE_FLAGS_INHERIT_HANDLES
• ntpsapi::PROCESS_CREATE_FLAGS_LARGE_PAGES
• ntpsapi::PROCESS_CREATE_FLAGS_LARGE_PAGE_SYSTEM_DLL
• ntpsapi::PROCESS_CREATE_FLAGS_MINIMAL_PROCESS
• ntpsapi::PROCESS_CREATE_FLAGS_NO_DEBUG_INHERIT
• ntpsapi::PROCESS_CREATE_FLAGS_OVERRIDE_ADDRESS_SPACE
• ntpsapi::PROCESS_CREATE_FLAGS_PROTECTED_PROCESS
• ntpsapi::PROCESS_CREATE_FLAGS_RELEASE_SECTION
• ntpsapi::PROCESS_CREATE_FLAGS_SUSPENDED
• ntpsapi::PROCESS_CREATE_FLAGS_USE_PROTECTED_ENVIRONMENT
• ntpsapi::PROCESS_EXCEPTION_PORT_ALL_STATE_FLAGS
• ntpsapi::PROCESS_GET_NEXT_FLAGS_PREVIOUS_PROCESS
• ntpsapi::PROCESS_HANDLE_RAISE_EXCEPTION_ON_INVALID_HANDLE_CLOSE_DISABLED
• ntpsapi::PROCESS_HANDLE_RAISE_EXCEPTION_ON_INVALID_HANDLE_CLOSE_ENABLED
• ntpsapi::PROCESS_HANDLE_TRACE_TYPE_BADREF
• ntpsapi::PROCESS_HANDLE_TRACE_TYPE_CLOSE
• ntpsapi::PROCESS_HANDLE_TRACE_TYPE_OPEN
• ntpsapi::PROCESS_HANDLE_TRACING_MAX_SLOTS
• ntpsapi::PROCESS_PRIORITY_CLASS_ABOVE_NORMAL
• ntpsapi::PROCESS_PRIORITY_CLASS_BELOW_NORMAL
• ntpsapi::PROCESS_PRIORITY_CLASS_HIGH
• ntpsapi::PROCESS_PRIORITY_CLASS_IDLE
• ntpsapi::PROCESS_PRIORITY_CLASS_NORMAL
• ntpsapi::PROCESS_PRIORITY_CLASS_REALTIME
• ntpsapi::PROCESS_PRIORITY_CLASS_UNKNOWN
• ntpsapi::PROCESS_READWRITEVM_LOGGING_ENABLE_READVM
• ntpsapi::PROCESS_READWRITEVM_LOGGING_ENABLE_READVM_V
• ntpsapi::PROCESS_READWRITEVM_LOGGING_ENABLE_WRITEVM
• ntpsapi::PROCESS_READWRITEVM_LOGGING_ENABLE_WRITEVM_V
• ntpsapi::PROCESS_SET_PORT
• ntpsapi::PS_ATTRIBUTE_ADDITIVE
• ntpsapi::PS_ATTRIBUTE_ALL_APPLICATION_PACKAGES_POLICY
• ntpsapi::PS_ATTRIBUTE_BNO_ISOLATION
• ntpsapi::PS_ATTRIBUTE_CHILD_PROCESS_POLICY
• ntpsapi::PS_ATTRIBUTE_CHPE
• ntpsapi::PS_ATTRIBUTE_CLIENT_ID
• ntpsapi::PS_ATTRIBUTE_COMPONENT_FILTER
• ntpsapi::PS_ATTRIBUTE_DEBUG_OBJECT
• ntpsapi::PS_ATTRIBUTE_DESKTOP_APP_POLICY
• ntpsapi::PS_ATTRIBUTE_ENABLE_OPTIONAL_XSTATE_FEATURES
• ntpsapi::PS_ATTRIBUTE_ERROR_MODE
• ntpsapi::PS_ATTRIBUTE_GROUP_AFFINITY
• ntpsapi::PS_ATTRIBUTE_HANDLE_LIST
• ntpsapi::PS_ATTRIBUTE_IDEAL_PROCESSOR
• ntpsapi::PS_ATTRIBUTE_IMAGE_INFO
• ntpsapi::PS_ATTRIBUTE_IMAGE_NAME
• ntpsapi::PS_ATTRIBUTE_INPUT
• ntpsapi::PS_ATTRIBUTE_JOB_LIST
• ntpsapi::PS_ATTRIBUTE_MACHINE_TYPE
• ntpsapi::PS_ATTRIBUTE_MEMORY_RESERVE
• ntpsapi::PS_ATTRIBUTE_MITIGATION_AUDIT_OPTIONS
• ntpsapi::PS_ATTRIBUTE_MITIGATION_OPTIONS
• ntpsapi::PS_ATTRIBUTE_NUMBER_MASK
• ntpsapi::PS_ATTRIBUTE_PARENT_PROCESS
• ntpsapi::PS_ATTRIBUTE_PREFERRED_NODE
• ntpsapi::PS_ATTRIBUTE_PRIORITY_CLASS
• ntpsapi::PS_ATTRIBUTE_PROTECTION_LEVEL
• ntpsapi::PS_ATTRIBUTE_SAFE_OPEN_PROMPT_ORIGIN_CLAIM
• ntpsapi::PS_ATTRIBUTE_SECURE_PROCESS
• ntpsapi::PS_ATTRIBUTE_STD_HANDLE_INFO
• ntpsapi::PS_ATTRIBUTE_TEB_ADDRESS
• ntpsapi::PS_ATTRIBUTE_THREAD
• ntpsapi::PS_ATTRIBUTE_TOKEN
• ntpsapi::PS_ATTRIBUTE_UMS_THREAD
• ntpsapi::PS_ATTRIBUTE_WIN32K_FILTER
• ntpsapi::PS_PROTECTED_AUDIT_MASK
• ntpsapi::PS_PROTECTED_SIGNER_MASK
• ntpsapi::PS_PROTECTED_TYPE_MASK
• ntpsapi::PS_STD_ERROR_HANDLE
• ntpsapi::PS_STD_INPUT_HANDLE
• ntpsapi::PS_STD_OUTPUT_HANDLE
• ntpsapi::ProcThreadAttributeBnoIsolation
• ntpsapi::ProcThreadAttributeConsoleReference
• ntpsapi::ProcThreadAttributeCreateStore
• ntpsapi::ProcThreadAttributeExtendedFlags
• ntpsapi::ProcThreadAttributeIsolationManifest
• ntpsapi::ProcThreadAttributeOsMaxVersionTested
• ntpsapi::ProcThreadAttributePackageFullName
• ntpsapi::QUEUE_USER_APC_SPECIAL_USER_APC
• ntpsapi::SILO_OBJECT_ROOT_DIRECTORY_INITIALIZE
• ntpsapi::SILO_OBJECT_ROOT_DIRECTORY_SHADOW_DOS_DEVICES
• ntpsapi::SILO_OBJECT_ROOT_DIRECTORY_SHADOW_ROOT
• ntpsapi::STATECHANGE_SET_ATTRIBUTES
• ntpsapi::THREAD_CREATE_FLAGS_BYPASS_PROCESS_FREEZE
• ntpsapi::THREAD_CREATE_FLAGS_CREATE_SUSPENDED
• ntpsapi::THREAD_CREATE_FLAGS_HIDE_FROM_DEBUGGER
• ntpsapi::THREAD_CREATE_FLAGS_LOADER_WORKER
• ntpsapi::THREAD_CREATE_FLAGS_NONE
• ntpsapi::THREAD_CREATE_FLAGS_SKIP_LOADER_INIT
• ntpsapi::THREAD_CREATE_FLAGS_SKIP_THREAD_ATTACH
• ntpsapi::TLS_EXPANSION_SLOTS
• ntpsapi::WIN32K_SYSCALL_FILTER_STATE_AUDIT
• ntpsapi::WIN32K_SYSCALL_FILTER_STATE_ENABLE
• ntregapi::CM_EXTENDED_PARAMETER_TYPE_BITS
• ntregapi::IOCTL_VR_CREATE_MULTIPLE_NAMESPACE_NODES
• ntregapi::IOCTL_VR_CREATE_NAMESPACE_NODE
• ntregapi::IOCTL_VR_GET_VIRTUAL_ROOT_KEY
• ntregapi::IOCTL_VR_INITIALIZE_JOB_FOR_VREG
• ntregapi::IOCTL_VR_LOAD_DIFFERENCING_HIVE
• ntregapi::IOCTL_VR_LOAD_DIFFERENCING_HIVE_FOR_HOST
• ntregapi::IOCTL_VR_MODIFY_FLAGS
• ntregapi::IOCTL_VR_UNLOAD_DIFFERENCING_HIVE_FOR_HOST
• ntregapi::IOCTL_VR_UNLOAD_DYNAMICALLY_LOADED_HIVES
• ntregapi::REG_FLAG_LINK
• ntregapi::REG_FLAG_VOLATILE
• ntregapi::REG_INIT_BOOT_ACCEPTED_BASE
• ntregapi::REG_INIT_BOOT_ACCEPTED_MAX
• ntregapi::REG_INIT_BOOT_SETUP
• ntregapi::REG_INIT_BOOT_SM
• ntregapi::REG_KEY_DONT_SILENT_FAIL
• ntregapi::REG_KEY_DONT_VIRTUALIZE
• ntregapi::REG_KEY_RECURSE_FLAG
• ntregapi::REG_MAX_KEY_NAME_LENGTH
• ntregapi::REG_MAX_KEY_VALUE_NAME_LENGTH
• ntregapi::VR_DEVICE_NAME
• ntregapi::VR_FLAG_INHERIT_TRUST_CLASS
• ntregapi::VR_FLAG_LOCAL_MACHINE_TRUST_CLASS
• ntregapi::VR_FLAG_WRITE_THROUGH_HIVE
• ntregapi::VR_KEY_COMROOT
• ntregapi::VR_KEY_CONTROL_SET
• ntregapi::VR_KEY_MACHINE_SOFTWARE
• ntrtl::ACTCTX_EMPTY
• ntrtl::ACTCTX_PROCESS_DEFAULT
• ntrtl::ACTCTX_SYSTEM_DEFAULT
• ntrtl::BOUNDARY_DESCRIPTOR_ADD_APPCONTAINER_SID
• ntrtl::BREAKAWAY_INHIBITED
• ntrtl::COMPOUND_ACE_IMPERSONATION
• ntrtl::CONTEXT_ALIGN
• ntrtl::CONTEXT_EX_LENGTH
• ntrtl::CONTEXT_EX_PADDING
• ntrtl::CONTEXT_FRAME_LENGTH
• ntrtl::FIND_ACTIVATION_CONTEXT_SECTION_KEY_RETURN_ACTIVATION_CONTEXT
• ntrtl::FIND_ACTIVATION_CONTEXT_SECTION_KEY_RETURN_ASSEMBLY_METADATA
• ntrtl::FIND_ACTIVATION_CONTEXT_SECTION_KEY_RETURN_FLAGS
• ntrtl::HEAP_STACK_CONTROL_FLAGS_STACKTRACE_DISABLE
• ntrtl::HEAP_STACK_CONTROL_FLAGS_STACKTRACE_ENABLE
• ntrtl::HEAP_STACK_CONTROL_VERSION
• ntrtl::HEAP_STACK_QUERY_VERSION
• ntrtl::HEAP_USAGE_ALLOCATED_BLOCKS
• ntrtl::HEAP_USAGE_FREE_BUFFER
• ntrtl::HeapDetailedFailureInformation
• ntrtl::HeapExtendedHeapBlockInformationLevel
• ntrtl::HeapExtendedHeapHeapPerfInformationLevel
• ntrtl::HeapExtendedHeapInformationLevel
• ntrtl::HeapExtendedHeapRangeInformationLevel
• ntrtl::HeapExtendedHeapRegionInformationLevel
• ntrtl::HeapExtendedInformation
• ntrtl::HeapExtendedProcessHeapInformationLevel
• ntrtl::HeapMemoryLimit
• ntrtl::HeapPerformanceCountersInformationSegmentHeapVersion
• ntrtl::HeapPerformanceCountersInformationStandardHeapVersion
• ntrtl::HeapSetDebuggingInformation
• ntrtl::HeapStackDatabase
• ntrtl::HeapTaggingInformation
• ntrtl::IMAGE_FILE_NATIVE_MACHINE_AMD64
• ntrtl::IMAGE_FILE_NATIVE_MACHINE_ARM64
• ntrtl::IMAGE_FILE_NATIVE_MACHINE_ARMNT
• ntrtl::IMAGE_FILE_NATIVE_MACHINE_I386
• ntrtl::INVALID_ACTIVATION_CONTEXT
• ntrtl::PHCM_APPLICATION_DEFAULT
• ntrtl::PHCM_DISGUISE_FULL_PLACEHOLDERS
• ntrtl::PHCM_DISGUISE_PLACEHOLDERS
• ntrtl::PHCM_ERROR_INVALID_PARAMETER
• ntrtl::PHCM_ERROR_NO_PEB
• ntrtl::PHCM_ERROR_NO_TEB
• ntrtl::PHCM_EXPOSE_PLACEHOLDERS
• ntrtl::PHCM_MAX
• ntrtl::PSM_ACTIVATION_TOKEN_DEVELOPMENT_APP
• ntrtl::PSM_ACTIVATION_TOKEN_FULL_TRUST
• ntrtl::PSM_ACTIVATION_TOKEN_NATIVE_SERVICE
• ntrtl::PSM_ACTIVATION_TOKEN_PACKAGED_APPLICATION
• ntrtl::PSM_ACTIVATION_TOKEN_SHARED_ENTITY
• ntrtl::RTL_ACQUIRE_PRIVILEGE_PROCESS
• ntrtl::RTL_ACQUIRE_PRIVILEGE_REVERT
• ntrtl::RTL_ACTIVATE_ACTIVATION_CONTEXT_EX_FLAG_RELEASE_ON_STACK_DEALLOCATION
• ntrtl::RTL_ATOM_INVALID_ATOM
• ntrtl::RTL_ATOM_MAXIMUM_INTEGER_ATOM
• ntrtl::RTL_ATOM_MAXIMUM_NAME_LENGTH
• ntrtl::RTL_ATOM_PINNED
• ntrtl::RTL_ATOM_TABLE_DEFAULT_NUMBER_OF_BUCKETS
• ntrtl::RTL_BARRIER_FLAGS_BLOCK_ONLY
• ntrtl::RTL_BARRIER_FLAGS_NO_DELETE
• ntrtl::RTL_BARRIER_FLAGS_SPIN_ONLY
• ntrtl::RTL_CLONE_PROCESS_FLAGS_CREATE_SUSPENDED
• ntrtl::RTL_CLONE_PROCESS_FLAGS_INHERIT_HANDLES
• ntrtl::RTL_CLONE_PROCESS_FLAGS_NO_SYNCHRONIZE
• ntrtl::RTL_CREATE_ENVIRONMENT_EMPTY
• ntrtl::RTL_CREATE_ENVIRONMENT_TRANSLATE
• ntrtl::RTL_CREATE_ENVIRONMENT_TRANSLATE_FROM_OEM
• ntrtl::RTL_DEACTIVATE_ACTIVATION_CONTEXT_FLAG_FORCE_EARLY_DEACTIVATION
• ntrtl::RTL_DOS_SEARCH_PATH_FLAG_APPLY_DEFAULT_EXTENSION_WHEN_NOT_RELATIVE_PATH_EVEN_IF_FILE_HAS_EXTENSION
• ntrtl::RTL_DOS_SEARCH_PATH_FLAG_APPLY_ISOLATION_REDIRECTION
• ntrtl::RTL_DOS_SEARCH_PATH_FLAG_DISALLOW_DOT_RELATIVE_PATH_SEARCH
• ntrtl::RTL_DRIVE_LETTER_VALID
• ntrtl::RTL_ERRORMODE_FAILCRITICALERRORS
• ntrtl::RTL_ERRORMODE_NOGPFAULTERRORBOX
• ntrtl::RTL_ERRORMODE_NOOPENFILEERRORBOX
• ntrtl::RTL_FIND_CHAR_IN_UNICODE_STRING_CASE_INSENSITIVE
• ntrtl::RTL_FIND_CHAR_IN_UNICODE_STRING_COMPLEMENT_CHAR_SET
• ntrtl::RTL_FIND_CHAR_IN_UNICODE_STRING_START_AT_END
• ntrtl::RTL_HANDLE_ALLOCATED
• ntrtl::RTL_HEAP_BUSY
• ntrtl::RTL_HEAP_PROTECTED_ENTRY
• ntrtl::RTL_HEAP_SEGMENT
• ntrtl::RTL_HEAP_SEGMENT_SIGNATURE
• ntrtl::RTL_HEAP_SETTABLE_FLAG1
• ntrtl::RTL_HEAP_SETTABLE_FLAG2
• ntrtl::RTL_HEAP_SETTABLE_FLAG3
• ntrtl::RTL_HEAP_SETTABLE_FLAGS
• ntrtl::RTL_HEAP_SETTABLE_VALUE
• ntrtl::RTL_HEAP_SIGNATURE
• ntrtl::RTL_HEAP_UNCOMMITTED_RANGE
• ntrtl::RTL_IMAGE_MITIGATION_FLAG_AUDIT
• ntrtl::RTL_IMAGE_MITIGATION_FLAG_OSDEFAULT
• ntrtl::RTL_IMAGE_MITIGATION_FLAG_REMOVE
• ntrtl::RTL_IMAGE_MITIGATION_FLAG_RESET
• ntrtl::RTL_IMAGE_MITIGATION_OPTION_FORCEMASK
• ntrtl::RTL_IMAGE_MITIGATION_OPTION_OPTIONMASK
• ntrtl::RTL_IMAGE_MITIGATION_OPTION_STATEMASK
• ntrtl::RTL_IMAGE_NT_HEADER_EX_FLAG_NO_RANGE_CHECK
• ntrtl::RTL_IMPORT_TABLE_HASH_REVISION
• ntrtl::RTL_MAX_DRIVE_LETTERS
• ntrtl::RTL_PROCESS_REFLECTION_FLAGS_INHERIT_HANDLES
• ntrtl::RTL_PROCESS_REFLECTION_FLAGS_NO_CLOSE_EVENT
• ntrtl::RTL_PROCESS_REFLECTION_FLAGS_NO_SUSPEND
• ntrtl::RTL_PROCESS_REFLECTION_FLAGS_NO_SYNCHRONIZE
• ntrtl::RTL_QUERY_INFORMATION_ACTIVATION_CONTEXT_FLAG_ACTIVATION_CONTEXT_IS_ADDRESS
• ntrtl::RTL_QUERY_INFORMATION_ACTIVATION_CONTEXT_FLAG_ACTIVATION_CONTEXT_IS_MODULE
• ntrtl::RTL_QUERY_INFORMATION_ACTIVATION_CONTEXT_FLAG_NO_ADDREF
• ntrtl::RTL_QUERY_INFORMATION_ACTIVATION_CONTEXT_FLAG_USE_ACTIVE_ACTIVATION_CONTEXT
• ntrtl::RTL_QUERY_PROCESS_BACKTRACES
• ntrtl::RTL_QUERY_PROCESS_CS_OWNER
• ntrtl::RTL_QUERY_PROCESS_HEAP_ENTRIES
• ntrtl::RTL_QUERY_PROCESS_HEAP_SEGMENTS
• ntrtl::RTL_QUERY_PROCESS_HEAP_SUMMARY
• ntrtl::RTL_QUERY_PROCESS_HEAP_TAGS
• ntrtl::RTL_QUERY_PROCESS_LOCKS
• ntrtl::RTL_QUERY_PROCESS_MODULES
• ntrtl::RTL_QUERY_PROCESS_MODULES32
• ntrtl::RTL_QUERY_PROCESS_MODULESEX
• ntrtl::RTL_QUERY_PROCESS_NONINVASIVE
• ntrtl::RTL_QUERY_PROCESS_NONINVASIVE_CS_OWNER
• ntrtl::RTL_QUERY_PROCESS_VERIFIER_OPTIONS
• ntrtl::RTL_RESOURCE_FLAG_LONG_TERM
• ntrtl::RTL_SEGHEAP_MEM_SOURCE_ANY_NODE
• ntrtl::RTL_TIMER_DELETE_WAIT_FOR_COMPLETION
• ntrtl::RTL_UNLOAD_EVENT_TRACE_NUMBER
• ntrtl::RTL_USER_PROCESS_EXTENDED_PARAMETERS_VERSION
• ntrtl::RTL_USER_PROC_APP_MANIFEST_PRESENT
• ntrtl::RTL_USER_PROC_CASE_SENSITIVE
• ntrtl::RTL_USER_PROC_CURDIR_CLOSE
• ntrtl::RTL_USER_PROC_CURDIR_INHERIT
• ntrtl::RTL_USER_PROC_DISABLE_HEAP_DECOMMIT
• ntrtl::RTL_USER_PROC_DLL_REDIRECTION_LOCAL
• ntrtl::RTL_USER_PROC_IMAGE_KEY_MISSING
• ntrtl::RTL_USER_PROC_OPTIN_PROCESS
• ntrtl::RTL_USER_PROC_PARAMS_NORMALIZED
• ntrtl::RTL_USER_PROC_PROFILE_KERNEL
• ntrtl::RTL_USER_PROC_PROFILE_SERVER
• ntrtl::RTL_USER_PROC_PROFILE_USER
• ntrtl::RTL_USER_PROC_RESERVE_16MB
• ntrtl::RTL_USER_PROC_RESERVE_1MB
• ntrtl::RTL_WAITER_DEREGISTER_WAIT_FOR_COMPLETION
• ntrtl::RTL_WALK_USER_MODE_STACK
• ntrtl::RTL_WALK_VALID_FLAGS
• ntrtl::RtlAlternateDosPathSeperatorString
• ntrtl::RtlDefaultExtension
• ntrtl::RtlDosDevicesPrefix
• ntrtl::RtlDosDevicesUncPrefix
• ntrtl::RtlDosPathSeperatorsString
• ntrtl::RtlNtPathSeperatorString
• ntrtl::RtlNtdllName
• ntrtl::RtlNullString
• ntrtl::RtlSlashSlashDot
• ntrtl::RtlWin32NtRoot
• ntrtl::RtlWin32NtRootSlash
• ntrtl::RtlWin32NtUncRoot
• ntrtl::RtlWin32NtUncRootSlash
• ntrtl::SecondsToStartOf1970
• ntrtl::SecondsToStartOf1980
• ntrtl::WNF_STATE_KEY
• ntsam::ALIAS_ADD_MEMBER
• ntsam::ALIAS_ALL_ACCESS
• ntsam::ALIAS_ALL_ADMIN_COMMENT
• ntsam::ALIAS_ALL_MEMBER_COUNT
• ntsam::ALIAS_ALL_NAME
• ntsam::ALIAS_ALL_SHELL_ADMIN_OBJECT_PROPERTIES
• ntsam::ALIAS_EXECUTE
• ntsam::ALIAS_LIST_MEMBERS
• ntsam::ALIAS_READ
• ntsam::ALIAS_READ_INFORMATION
• ntsam::ALIAS_REMOVE_MEMBER
• ntsam::ALIAS_WRITE
• ntsam::ALIAS_WRITE_ACCOUNT
• ntsam::DOMAIN_ADMINISTER_SERVER
• ntsam::DOMAIN_ALL_ACCESS
• ntsam::DOMAIN_CREATE_ALIAS
• ntsam::DOMAIN_CREATE_GROUP
• ntsam::DOMAIN_CREATE_USER
• ntsam::DOMAIN_EXECUTE
• ntsam::DOMAIN_GET_ALIAS_MEMBERSHIP
• ntsam::DOMAIN_LIST_ACCOUNTS
• ntsam::DOMAIN_LOOKUP
• ntsam::DOMAIN_PROMOTION_INCREMENT
• ntsam::DOMAIN_PROMOTION_MASK
• ntsam::DOMAIN_READ
• ntsam::DOMAIN_READ_OTHER_PARAMETERS
• ntsam::DOMAIN_READ_PASSWORD_PARAMETERS
• ntsam::DOMAIN_WRITE
• ntsam::DOMAIN_WRITE_OTHER_PARAMETERS
• ntsam::DOMAIN_WRITE_PASSWORD_PARAMS
• ntsam::GROUP_ADD_MEMBER
• ntsam::GROUP_ALL_ACCESS
• ntsam::GROUP_EXECUTE
• ntsam::GROUP_LIST_MEMBERS
• ntsam::GROUP_READ
• ntsam::GROUP_READ_INFORMATION
• ntsam::GROUP_REMOVE_MEMBER
• ntsam::GROUP_TYPE_ACCOUNT_GROUP
• ntsam::GROUP_TYPE_APP_BASIC_GROUP
• ntsam::GROUP_TYPE_APP_QUERY_GROUP
• ntsam::GROUP_TYPE_BUILTIN_LOCAL_GROUP
• ntsam::GROUP_TYPE_RESOURCE_BEHAVOIR
• ntsam::GROUP_TYPE_RESOURCE_GROUP
• ntsam::GROUP_TYPE_SECURITY_ENABLED
• ntsam::GROUP_TYPE_UNIVERSAL_GROUP
• ntsam::GROUP_WRITE
• ntsam::GROUP_WRITE_ACCOUNT
• ntsam::NEXT_FREE_ACCOUNT_CONTROL_BIT
• ntsam::SAM_DELTA_NOTIFY_ROUTINE
• ntsam::SAM_GLOBAL_GROUP_ACCOUNT
• ntsam::SAM_HOURS_PER_WEEK
• ntsam::SAM_LOCAL_GROUP_ACCOUNT
• ntsam::SAM_MAXIMUM_LOOKUP_COUNT
• ntsam::SAM_MAXIMUM_LOOKUP_LENGTH
• ntsam::SAM_MAX_PASSWORD_LENGTH
• ntsam::SAM_MINUTES_PER_WEEK
• ntsam::SAM_PASSWORD_ENCRYPTION_SALT_LEN
• ntsam::SAM_PWD_CHANGE_FAILED_BY_FILTER
• ntsam::SAM_PWD_CHANGE_FAILURE_REASON_MAX
• ntsam::SAM_PWD_CHANGE_FULLNAME_IN_PASSWORD
• ntsam::SAM_PWD_CHANGE_MACHINE_PASSWORD_NOT_DEFAULT
• ntsam::SAM_PWD_CHANGE_NOT_COMPLEX
• ntsam::SAM_PWD_CHANGE_NO_ERROR
• ntsam::SAM_PWD_CHANGE_PASSWORD_TOO_LONG
• ntsam::SAM_PWD_CHANGE_PASSWORD_TOO_SHORT
• ntsam::SAM_PWD_CHANGE_PWD_IN_HISTORY
• ntsam::SAM_PWD_CHANGE_USERNAME_IN_PASSWORD
• ntsam::SAM_SERVER_ALL_ACCESS
• ntsam::SAM_SERVER_CONNECT
• ntsam::SAM_SERVER_CREATE_DOMAIN
• ntsam::SAM_SERVER_ENUMERATE_DOMAINS
• ntsam::SAM_SERVER_EXECUTE
• ntsam::SAM_SERVER_INITIALIZE
• ntsam::SAM_SERVER_LOOKUP_DOMAIN
• ntsam::SAM_SERVER_READ
• ntsam::SAM_SERVER_SHUTDOWN
• ntsam::SAM_SERVER_WRITE
• ntsam::SAM_SID_COMPATIBILITY_ALL
• ntsam::SAM_SID_COMPATIBILITY_LAX
• ntsam::SAM_SID_COMPATIBILITY_STRICT
• ntsam::SAM_USER_ACCOUNT
• ntsam::SAM_VALIDATE_BAD_PASSWORD_COUNT
• ntsam::SAM_VALIDATE_BAD_PASSWORD_TIME
• ntsam::SAM_VALIDATE_LOCKOUT_TIME
• ntsam::SAM_VALIDATE_PASSWORD_HISTORY
• ntsam::SAM_VALIDATE_PASSWORD_HISTORY_LENGTH
• ntsam::SAM_VALIDATE_PASSWORD_LAST_SET
• ntsam::USER_ACCOUNT_TYPE_MASK
• ntsam::USER_ALL_ACCESS
• ntsam::USER_ALL_ACCOUNTEXPIRES
• ntsam::USER_ALL_ADMINCOMMENT
• ntsam::USER_ALL_BADPASSWORDCOUNT
• ntsam::USER_ALL_CODEPAGE
• ntsam::USER_ALL_COUNTRYCODE
• ntsam::USER_ALL_FULLNAME
• ntsam::USER_ALL_HOMEDIRECTORY
• ntsam::USER_ALL_HOMEDIRECTORYDRIVE
• ntsam::USER_ALL_LASTLOGOFF
• ntsam::USER_ALL_LASTLOGON
• ntsam::USER_ALL_LMPASSWORDPRESENT
• ntsam::USER_ALL_LOGONCOUNT
• ntsam::USER_ALL_LOGONHOURS
• ntsam::USER_ALL_NTPASSWORDPRESENT
• ntsam::USER_ALL_OWFPASSWORD
• ntsam::USER_ALL_PASSWORDCANCHANGE
• ntsam::USER_ALL_PASSWORDEXPIRED
• ntsam::USER_ALL_PASSWORDLASTSET
• ntsam::USER_ALL_PASSWORDMUSTCHANGE
• ntsam::USER_ALL_PRIMARYGROUPID
• ntsam::USER_ALL_PRIVATEDATA
• ntsam::USER_ALL_PROFILEPATH
• ntsam::USER_ALL_READ_ACCOUNT_MASK
• ntsam::USER_ALL_READ_CANT_MASK
• ntsam::USER_ALL_READ_GENERAL_MASK
• ntsam::USER_ALL_READ_LOGON_MASK
• ntsam::USER_ALL_READ_PREFERENCES_MASK
• ntsam::USER_ALL_READ_TRUSTED_MASK
• ntsam::USER_ALL_SCRIPTPATH
• ntsam::USER_ALL_SECURITYDESCRIPTOR
• ntsam::USER_ALL_UNDEFINED_MASK
• ntsam::USER_ALL_USERACCOUNTCONTROL
• ntsam::USER_ALL_USERCOMMENT
• ntsam::USER_ALL_USERID
• ntsam::USER_ALL_USERNAME
• ntsam::USER_ALL_WORKSTATIONS
• ntsam::USER_ALL_WRITE_ACCOUNT_MASK
• ntsam::USER_ALL_WRITE_CANT_MASK
• ntsam::USER_ALL_WRITE_FORCE_PASSWORD_CHANGE_MASK
• ntsam::USER_ALL_WRITE_PREFERENCES_MASK
• ntsam::USER_ALL_WRITE_TRUSTED_MASK
• ntsam::USER_CHANGE_PASSWORD
• ntsam::USER_COMPUTED_ACCOUNT_CONTROL_BITS
• ntsam::USER_EXECUTE
• ntsam::USER_EXTENDED_FIELD_A2D2
• ntsam::USER_EXTENDED_FIELD_DONT_SHOW_IN_LOGON_UI
• ntsam::USER_EXTENDED_FIELD_PASSWORD_HINT
• ntsam::USER_EXTENDED_FIELD_SHELL_ADMIN_OBJECT_PROPERTIES
• ntsam::USER_EXTENDED_FIELD_UPN
• ntsam::USER_EXTENDED_FIELD_USER_TILE
• ntsam::USER_FORCE_PASSWORD_CHANGE
• ntsam::USER_LIST_GROUPS
• ntsam::USER_MACHINE_ACCOUNT_MASK
• ntsam::USER_READ
• ntsam::USER_READ_ACCOUNT
• ntsam::USER_READ_GENERAL
• ntsam::USER_READ_GROUP_INFORMATION
• ntsam::USER_READ_LOGON
• ntsam::USER_READ_PREFERENCES
• ntsam::USER_WRITE
• ntsam::USER_WRITE_ACCOUNT
• ntsam::USER_WRITE_GROUP_INFORMATION
• ntsam::USER_WRITE_PREFERENCES
• ntseapi::TOKEN_SECURITY_ATTRIBUTES_INFORMATION_VERSION
• ntseapi::TOKEN_SECURITY_ATTRIBUTES_INFORMATION_VERSION_V1
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_COMPARE_IGNORE
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_CUSTOM_FLAGS
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_DISABLED
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_DISABLED_BY_DEFAULT
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_MANDATORY
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_NON_INHERITABLE
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_TYPE_BOOLEAN
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_TYPE_FQBN
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_TYPE_INT64
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_TYPE_INVALID
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_TYPE_OCTET_STRING
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_TYPE_SID
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_TYPE_STRING
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_TYPE_UINT64
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_USE_FOR_DENY_ONLY
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_VALID_FLAGS
• ntseapi::TOKEN_SECURITY_ATTRIBUTE_VALUE_CASE_SENSITIVE
• ntsxs::ACTIVATION_CONTEXT_DATA_APPLICATION_SETTINGS_FORMAT_LONGHORN
• ntsxs::ACTIVATION_CONTEXT_DATA_ASSEMBLY_INFORMATION_ASSEMBLY_POLICY_APPLIED
• ntsxs::ACTIVATION_CONTEXT_DATA_ASSEMBLY_INFORMATION_FORMAT_WHISTLER
• ntsxs::ACTIVATION_CONTEXT_DATA_ASSEMBLY_INFORMATION_POLICY_APPLIED
• ntsxs::ACTIVATION_CONTEXT_DATA_ASSEMBLY_INFORMATION_PRIVATE_ASSEMBLY
• ntsxs::ACTIVATION_CONTEXT_DATA_ASSEMBLY_INFORMATION_ROOT_ASSEMBLY
• ntsxs::ACTIVATION_CONTEXT_DATA_ASSEMBLY_INFORMATION_ROOT_POLICY_APPLIED
• ntsxs::ACTIVATION_CONTEXT_DATA_ASSEMBLY_ROSTER_ENTRY_INVALID
• ntsxs::ACTIVATION_CONTEXT_DATA_ASSEMBLY_ROSTER_ENTRY_ROOT
• ntsxs::ACTIVATION_CONTEXT_DATA_CLR_SURROGATE_FORMAT_WHISTLER
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_INTERFACE_REDIRECTION_FLAG_BASE_INTERFACE_VALID
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_INTERFACE_REDIRECTION_FLAG_NUM_METHODS_VALID
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_INTERFACE_REDIRECTION_FORMAT_WHISTLER
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_PROGID_REDIRECTION_FORMAT_WHISTLER
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_MISCSTATUS_FLAG_OFFSET
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_MISCSTATUS_HAS_CONTENT
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_MISCSTATUS_HAS_DEFAULT
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_MISCSTATUS_HAS_DOCPRINT
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_MISCSTATUS_HAS_ICON
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_MISCSTATUS_HAS_THUMBNAIL
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_REDIRECTION_FORMAT_WHISTLER
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_REDIRECTION_SHIM_TYPE_CLR_CLASS
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_REDIRECTION_SHIM_TYPE_OTHER
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_REDIRECTION_THREADING_MODEL_APARTMENT
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_REDIRECTION_THREADING_MODEL_BOTH
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_REDIRECTION_THREADING_MODEL_FREE
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_REDIRECTION_THREADING_MODEL_INVALID
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_REDIRECTION_THREADING_MODEL_NEUTRAL
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_SERVER_REDIRECTION_THREADING_MODEL_SINGLE
• ntsxs::ACTIVATION_CONTEXT_DATA_COM_TYPE_LIBRARY_REDIRECTION_FORMAT_WHISTLER
• ntsxs::ACTIVATION_CONTEXT_DATA_DLL_REDIRECTION_FORMAT_WHISTLER
• ntsxs::ACTIVATION_CONTEXT_DATA_DLL_REDIRECTION_PATH_EXPAND
• ntsxs::ACTIVATION_CONTEXT_DATA_DLL_REDIRECTION_PATH_INCLUDES_BASE_NAME
• ntsxs::ACTIVATION_CONTEXT_DATA_DLL_REDIRECTION_PATH_OMITS_ASSEMBLY_ROOT
• ntsxs::ACTIVATION_CONTEXT_DATA_DLL_REDIRECTION_PATH_SYSTEM_DEFAULT_REDIRECTED_SYSTEM32_DLL
• ntsxs::ACTIVATION_CONTEXT_DATA_FORMAT_WHISTLER
• ntsxs::ACTIVATION_CONTEXT_DATA_MAGIC
• ntsxs::ACTIVATION_CONTEXT_DATA_TOC_HEADER_DENSE
• ntsxs::ACTIVATION_CONTEXT_DATA_TOC_HEADER_INORDER
• ntsxs::ACTIVATION_CONTEXT_DATA_WINDOW_CLASS_REDIRECTION_FORMAT_WHISTLER
• ntsxs::ACTIVATION_CONTEXT_FLAG_NO_INHERIT
• ntsxs::ACTIVATION_CONTEXT_GUID_SECTION_ENTRIES_IN_ORDER
• ntsxs::ACTIVATION_CONTEXT_GUID_SECTION_FORMAT_WHISTLER
• ntsxs::ACTIVATION_CONTEXT_GUID_SECTION_MAGIC
• ntsxs::ACTIVATION_CONTEXT_NOTIFICATION_DESTROY
• ntsxs::ACTIVATION_CONTEXT_NOTIFICATION_USED
• ntsxs::ACTIVATION_CONTEXT_NOTIFICATION_ZOMBIFY
• ntsxs::ACTIVATION_CONTEXT_SECTION_FORMAT_GUID_TABLE
• ntsxs::ACTIVATION_CONTEXT_SECTION_FORMAT_STRING_TABLE
• ntsxs::ACTIVATION_CONTEXT_SECTION_FORMAT_UNKNOWN
• ntsxs::ACTIVATION_CONTEXT_STACK_FLAG_QUERIES_DISABLED
• ntsxs::ACTIVATION_CONTEXT_STRING_SECTION_CASE_INSENSITIVE
• ntsxs::ACTIVATION_CONTEXT_STRING_SECTION_ENTRIES_IN_PSEUDOKEY_ORDER
• ntsxs::ACTIVATION_CONTEXT_STRING_SECTION_FORMAT_WHISTLER
• ntsxs::ACTIVATION_CONTEXT_STRING_SECTION_MAGIC
• ntsxs::ASSEMBLY_STORAGE_MAP_ASSEMBLY_ARRAY_IS_HEAP_ALLOCATED
• ntsxs::RTL_ACTIVATION_CONTEXT_STACK_FRAME_FLAG_HEAP_ALLOCATED
• ntsxs::RTL_ACTIVATION_CONTEXT_STACK_FRAME_FLAG_NOT_REALLY_ACTIVATED
• ntsxs::RTL_ACTIVATION_CONTEXT_STACK_FRAME_FLAG_NO_DEACTIVATE
• ntsxs::RTL_ACTIVATION_CONTEXT_STACK_FRAME_FLAG_ON_FREE_LIST
• ntsxs::RTL_ACTIVATION_CONTEXT_STACK_FRAME_FLAG_RELEASE_ON_DEACTIVATION
• ntsxs::SXS_WINDOWS_SETTINGS_2011_NAMESPACE
• ntsxs::SXS_WINDOWS_SETTINGS_2013_NAMESPACE
• ntsxs::SXS_WINDOWS_SETTINGS_2014_NAMESPACE
• ntsxs::SXS_WINDOWS_SETTINGS_2016_NAMESPACE
• ntsxs::SXS_WINDOWS_SETTINGS_2017_NAMESPACE
• ntsxs::SXS_WINDOWS_SETTINGS_2019_NAMESPACE
• ntsxs::SXS_WINDOWS_SETTINGS_2020_NAMESPACE
• ntsxs::SXS_WINDOWS_SETTINGS_NAMESPACE
• ntwow64::LDR_DATA_TABLE_ENTRY_SIZE_WIN10_32
• ntwow64::LDR_DATA_TABLE_ENTRY_SIZE_WIN11_32
• ntwow64::LDR_DATA_TABLE_ENTRY_SIZE_WIN7_32
• ntwow64::LDR_DATA_TABLE_ENTRY_SIZE_WIN8_32
• ntwow64::LDR_DATA_TABLE_ENTRY_SIZE_WINXP_32
• ntwow64::WOW64_CPUFLAGS_IA64
• ntwow64::WOW64_CPUFLAGS_MSFT64
• ntwow64::WOW64_CPUFLAGS_SOFTWARE
• ntwow64::WOW64_SYSTEM_DIRECTORY
• ntwow64::WOW64_SYSTEM_DIRECTORY_U
• ntwow64::WOW64_X86_TAG
• ntwow64::WOW64_X86_TAG_U
• ntxcapi::KCONTINUE_FLAG_DELIVER_APC
• ntxcapi::KCONTINUE_FLAG_TEST_ALERT
• phnt_ntdef::DESKTOP_ALL_ACCESS
• phnt_ntdef::DESKTOP_GENERIC_EXECUTE
• phnt_ntdef::DESKTOP_GENERIC_READ
• phnt_ntdef::DESKTOP_GENERIC_WRITE
• phnt_ntdef::INT_ERROR
• phnt_ntdef::NT_FACILITY_MASK
• phnt_ntdef::NT_FACILITY_SHIFT
• phnt_ntdef::OBJ_PROTECT_CLOSE
• phnt_ntdef::WINSTA_GENERIC_EXECUTE
• phnt_ntdef::WINSTA_GENERIC_READ
• phnt_ntdef::WINSTA_GENERIC_WRITE
• phnt_ntdef::WMIGUID_GENERIC_EXECUTE
• phnt_ntdef::WMIGUID_GENERIC_READ
• phnt_ntdef::WMIGUID_GENERIC_WRITE
• winsta::CALLBACK_LENGTH
• winsta::CDNAME_LENGTH
• winsta::CLIENTDATANAME_LENGTH
• winsta::CLIENTLICENSE_LENGTH
• winsta::CLIENTMODEM_LENGTH
• winsta::CLIENT_PRODUCT_ID_LENGTH
• winsta::DEVICENAME_LENGTH
• winsta::DIRECTORY_LENGTH
• winsta::DLLNAME_LENGTH
• winsta::IMEFILENAME_LENGTH
• winsta::INITIALPROGRAM_LENGTH
• winsta::LOGONID_CURRENT
• winsta::MAX_BR_NAME
• winsta::MAX_COUNTER_EXTENSIONS
• winsta::MAX_THINWIRECACHE
• winsta::MODEMNAME_LENGTH
• winsta::NASIFILESERVER_LENGTH
• winsta::NASIPASSWORD_LENGTH
• winsta::NASISESSIONNAME_LENGTH
• winsta::NASISPECIFICNAME_LENGTH
• winsta::NASIUSERNAME_LENGTH
• winsta::PASSWORD_LENGTH
• winsta::PDNAME_LENGTH
• winsta::PROTOCOL_CONSOLE
• winsta::PROTOCOL_OTHERS
• winsta::PROTOCOL_RDP
• winsta::SERVERNAME_CURRENT
• winsta::SIZEOF_TS4_SYSTEM_PROCESS_INFORMATION
• winsta::SIZEOF_TS4_SYSTEM_THREAD_INFORMATION
• winsta::STACK_ADDRESS_LENGTH
• winsta::TERMSRV_CURRENT_ACTIVE_SESSIONS
• winsta::TERMSRV_CURRENT_DISC_SESSIONS
• winsta::TERMSRV_CURRENT_LOGGEDON_SESSIONS
• winsta::TERMSRV_CURRENT_TERMINATING_SESSIONS
• winsta::TERMSRV_DISC_SESSIONS
• winsta::TERMSRV_PENDING_SESSIONS
• winsta::TERMSRV_RECON_SESSIONS
• winsta::TERMSRV_SUCC_LOCAL_LOGONS
• winsta::TERMSRV_SUCC_REMOTE_LOGONS
• winsta::TERMSRV_SUCC_SESSION0_LOGONS
• winsta::TERMSRV_SUCC_TOTAL_LOGONS
• winsta::TERMSRV_TOTAL_SESSIONS
• winsta::TS_PROCESS_INFO_MAGIC_NT4
• winsta::WDNAME_LENGTH
• winsta::WDPREFIX_LENGTH
• winsta::WEVENT_ALL
• winsta::WEVENT_CONNECT
• winsta::WEVENT_CREATE
• winsta::WEVENT_DELETE
• winsta::WEVENT_DISCONNECT
• winsta::WEVENT_FLUSH
• winsta::WEVENT_LICENSE
• winsta::WEVENT_LOGOFF
• winsta::WEVENT_LOGON
• winsta::WEVENT_NONE
• winsta::WEVENT_RENAME
• winsta::WEVENT_STATECHANGE
• winsta::WINSTATION_ALL_ACCESS
• winsta::WINSTATION_ANY_SESSION
• winsta::WINSTATION_CONNECT
• winsta::WINSTATION_CURRENT_GUEST_ACCESS
• winsta::WINSTATION_CURRENT_SERVER
• winsta::WINSTATION_CURRENT_SERVER_HANDLE
• winsta::WINSTATION_CURRENT_SERVER_NAME
• winsta::WINSTATION_CURRENT_SESSION
• winsta::WINSTATION_CURRENT_USER_ACCESS
• winsta::WINSTATION_DISCONNECT
• winsta::WINSTATION_GUEST_ACCESS
• winsta::WINSTATION_LOGOFF
• winsta::WINSTATION_LOGON
• winsta::WINSTATION_MSG
• winsta::WINSTATION_QUERY
• winsta::WINSTATION_RESET
• winsta::WINSTATION_SET
• winsta::WINSTATION_SHADOW
• winsta::WINSTATION_USER_ACCESS
• winsta::WINSTATION_VIRTUAL
• winsta::WNOTIFY_ALL_SESSIONS
• winsta::WSD_LOGOFF
• winsta::WSD_POWEROFF
• winsta::WSD_REBOOT
• winsta::WSD_SHUTDOWN