Created
October 1, 2014 18:56
-
-
Save ntddk/0ad8cc29f19b203dca41 to your computer and use it in GitHub Desktop.
exports of ntoskrnl.exe #Windows10 Technical Preview
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Microsoft (R) COFF/PE Dumper Version 12.00.30501.0 | |
Copyright (C) Microsoft Corporation. All rights reserved. | |
Dump of file C:\Users\Administrator\Desktop\ntoskrnl.exe | |
File Type: EXECUTABLE IMAGE | |
Section contains the following exports for ntoskrnl.exe | |
00000000 characteristics | |
54139C44 time date stamp Sat Sep 13 10:22:12 2014 | |
0.00 version | |
1 ordinal base | |
2547 number of functions | |
2544 number of names | |
ordinal hint RVA name | |
4 0 000973C8 AlpcGetHeaderSize | |
5 1 00097254 AlpcGetMessageAttribute | |
6 2 00097370 AlpcInitializeMessageAttribute | |
7 3 006E415C BgkDisplayCharacter | |
8 4 006E4208 BgkGetConsoleState | |
9 5 006E4240 BgkGetCursorState | |
10 6 006E4294 BgkSetCursor | |
11 7 0018C624 CcAddDirtyPagesToExternalCache | |
12 8 0018D1DC CcAsyncCopyRead | |
13 9 0007F340 CcCanIWrite | |
14 A 0003921C CcCoherencyFlushAndPurgeCache | |
15 B 004A77D4 CcCopyRead | |
16 C 00042660 CcCopyReadEx | |
17 D 0018D548 CcCopyWrite | |
18 E 000666F0 CcCopyWriteEx | |
19 F 00081140 CcCopyWriteWontFlush | |
20 10 0018C6FC CcDeductDirtyPagesFromExternalCache | |
21 11 0018D568 CcDeferWrite | |
22 12 005E143C CcFastCopyRead | |
23 13 0018D640 CcFastCopyWrite | |
24 14 0030D7B0 CcFastMdlReadWait | |
25 15 000C07C4 CcFlushCache | |
26 16 000DFDF8 CcFlushCacheToLsn | |
27 17 000376A0 CcGetDirtyPages | |
28 18 0018C5A0 CcGetFileObjectFromBcb | |
29 19 0018C5B0 CcGetFileObjectFromSectionPtrs | |
30 1A 000FA3EC CcGetFileObjectFromSectionPtrsRef | |
31 1B 000AE904 CcGetFlushedValidData | |
32 1C 0018DBA0 CcGetLsnForFileObject | |
33 1D 0003AAA0 CcInitializeCacheMap | |
34 1E 0018DCD4 CcIsThereDirtyData | |
35 1F 0018DDD4 CcIsThereDirtyDataEx | |
36 20 000BA784 CcIsThereDirtyLoggedPages | |
37 21 0041E4A0 CcMapData | |
38 22 00435B98 CcMdlRead | |
39 23 004A4EEC CcMdlReadComplete | |
40 24 0018DFB4 CcMdlWriteAbort | |
41 25 004A4AEC CcMdlWriteComplete | |
42 26 0041E140 CcPinMappedData | |
43 27 0041D1D0 CcPinRead | |
44 28 000BF364 CcPrepareMdlWrite | |
45 29 00494648 CcPreparePinWrite | |
46 2A 0002F72C CcPurgeCacheSection | |
47 2B 0018CE40 CcRegisterExternalCache | |
48 2C 000AF930 CcRemapBcb | |
49 2D 0018D854 CcRepinBcb | |
50 2E 0018D954 CcScheduleReadAhead | |
51 2F 0007EDCC CcScheduleReadAheadEx | |
52 30 0003BE78 CcSetAdditionalCacheAttributes | |
53 31 0003BDB8 CcSetAdditionalCacheAttributesEx | |
54 32 005E150C CcSetBcbOwnerPointer | |
55 33 0018C5FC CcSetDirtyPageThreshold | |
56 34 00038C10 CcSetDirtyPinnedData | |
57 35 000C3A1C CcSetFileSizes | |
58 36 0003CB04 CcSetFileSizesEx | |
59 37 0018DE68 CcSetLogHandleForFile | |
60 38 000BDF04 CcSetLogHandleForFileEx | |
61 39 000E0F60 CcSetLoggedDataThreshold | |
62 3A 0003CEC0 CcSetParallelFlushFile | |
63 3B 000BC8CC CcSetReadAheadGranularity | |
64 3C 000C3C70 CcSetReadAheadGranularityEx | |
65 3D 0012EBC8 CcTestControl | |
66 3E 00036A20 CcUninitializeCacheMap | |
67 3F 000DE7A0 CcUnmapFileOffsetFromSystemCache | |
68 40 0041B080 CcUnpinData | |
69 41 005E1558 CcUnpinDataForThread | |
70 42 0018D95C CcUnpinRepinnedBcb | |
71 43 0018D0E4 CcUnregisterExternalCache | |
72 44 000CADB4 CcWaitForCurrentLazyWriterActivity | |
73 45 004D9260 CcZeroData | |
74 46 000DC468 CcZeroDataOnDisk | |
75 47 005E2E18 CmCallbackGetKeyObjectID | |
76 48 0049538C CmCallbackGetKeyObjectIDEx | |
77 49 004A0180 CmCallbackReleaseKeyObjectIDEx | |
78 4A 004E6EDC CmGetBoundTransaction | |
79 4B 005E2EF0 CmGetCallbackVersion | |
80 4C 00383838 CmKeyObjectType | |
81 4D 0053F244 CmRegisterCallback | |
82 4E 005E2F04 CmRegisterCallbackEx | |
83 4F 005E2F30 CmSetCallbackObjectContext | |
84 50 005E30C0 CmUnRegisterCallback | |
85 51 00128420 DbgBreakPoint | |
86 52 00128440 DbgBreakPointWithStatus | |
87 53 001E63FC DbgCommandString | |
88 54 000F0D7C DbgLoadImageSymbols | |
89 55 000FA174 DbgPrint | |
90 56 000A6840 DbgPrintEx | |
91 57 001E644C DbgPrintReturnControlC | |
92 58 001E648C DbgPrompt | |
93 59 001E64C8 DbgQueryDebugFilterState | |
94 5A 001032B0 DbgSetDebugFilterState | |
95 5B 001E64D0 DbgSetDebugPrintCallback | |
96 5C 00515070 DbgkLkmdRegisterCallback | |
97 5D 005F6FF0 DbgkLkmdUnregisterCallback | |
98 5E 005F7934 DbgkWerCaptureLiveKernelDump | |
99 5F 0039E504 EmClientQueryRuleState | |
100 60 005F8904 EmClientRuleDeregisterNotification | |
101 61 0039ED24 EmClientRuleEvaluate | |
102 62 005F8A08 EmClientRuleRegisterNotification | |
103 63 005F8C8C EmProviderDeregister | |
104 64 005F8E58 EmProviderDeregisterEntry | |
105 65 00519594 EmProviderRegister | |
106 66 005F8EE0 EmProviderRegisterEntry | |
107 67 005195B8 EmpProviderRegister | |
108 68 000BA400 EtwActivityIdControl | |
109 69 004C7C40 EtwEnableTrace | |
110 6A 00098AF0 EtwEventEnabled | |
111 6B 00034A94 EtwProviderEnabled | |
112 6C 004DA3A4 EtwRegister | |
113 6D 005055D4 EtwRegisterClassicProvider | |
114 6E 0020BA0C EtwSendTraceBuffer | |
115 6F 00500FFC EtwSetInformation | |
116 70 005011CC EtwUnregister | |
117 71 0009E160 EtwWrite | |
118 72 005080F4 EtwWriteEndScenario | |
119 73 000DA84C EtwWriteEx | |
120 74 00507A40 EtwWriteStartScenario | |
121 75 0020B3C4 EtwWriteString | |
122 76 00097584 EtwWriteTransfer | |
123 77 00212830 ExAcquireAutoExpandPushLockExclusive | |
124 78 002128BC ExAcquireAutoExpandPushLockShared | |
125 79 000AC160 ExAcquireCacheAwarePushLockExclusive | |
126 7A 00213274 ExAcquireCacheAwarePushLockExclusiveEx | |
127 7B 0008A970 ExAcquireCacheAwarePushLockSharedEx | |
128 7C 0008B400 ExAcquireFastMutex | |
129 7D 0008B2B0 ExAcquireFastMutexUnsafe | |
130 7E 00024540 ExAcquirePushLockExclusiveEx | |
131 7F 0009ABA0 ExAcquirePushLockSharedEx | |
132 80 0001DFF0 ExAcquireResourceExclusiveLite | |
133 81 0001E2C0 ExAcquireResourceSharedLite | |
134 82 00078720 ExAcquireRundownProtection | |
135 83 000AA320 ExAcquireRundownProtectionCacheAware | |
136 84 0009A460 ExAcquireRundownProtectionCacheAwareEx | |
137 85 0009D938 ExAcquireRundownProtectionEx | |
138 86 00043E50 ExAcquireSharedStarveExclusive | |
139 87 000C3324 ExAcquireSharedWaitForExclusive | |
140 88 0002E5C0 ExAcquireSpinLockExclusive | |
141 89 0000CD80 ExAcquireSpinLockExclusiveAtDpcLevel | |
142 8A 00034880 ExAcquireSpinLockShared | |
143 8B 000CCB90 ExAcquireSpinLockSharedAtDpcLevel | |
144 8C 0021296C ExAllocateAutoExpandPushLock | |
145 8D 000DE864 ExAllocateCacheAwarePushLock | |
146 8E 0048CE8C ExAllocateCacheAwareRundownProtection | |
147 8F 000C3BCC ExAllocatePool | |
148 90 00211030 ExAllocatePoolWithQuota | |
149 91 0000ACE0 ExAllocatePoolWithQuotaTag | |
150 92 00233000 ExAllocatePoolWithTag | |
151 93 000704E0 ExAllocatePoolWithTagPriority | |
152 94 000F821C ExAllocateTimer | |
153 95 000A8C58 ExBlockOnAddressPushLock | |
154 96 000A8CF8 ExBlockPushLock | |
155 97 000EA0D8 ExCancelTimer | |
156 98 002129B4 ExCleanupAutoExpandPushLock | |
157 99 000F990C ExCleanupRundownProtectionCacheAware | |
158 9A 003831A0 ExCompositionObjectType | |
159 9B 000B9850 ExConvertExclusiveToSharedLite | |
160 9C 004E043C ExCreateCallback | |
161 9D 000E01D8 ExDeleteLookasideListEx | |
162 9E 000E0960 ExDeleteNPagedLookasideList | |
163 9F 000BFE8C ExDeletePagedLookasideList | |
164 A0 000380A0 ExDeleteResourceLite | |
165 A1 000F911C ExDeleteTimer | |
166 A2 00383198 ExDesktopObjectType | |
167 A3 000E0090 ExDisableResourceBoostLite | |
168 A4 0008AED0 ExEnterCriticalRegionAndAcquireFastMutexUnsafe | |
169 A5 0001D0F0 ExEnterCriticalRegionAndAcquireResourceExclusive | |
170 A6 000C27FC ExEnterCriticalRegionAndAcquireResourceShared | |
171 A7 00213680 ExEnterCriticalRegionAndAcquireSharedWaitForExclusive | |
172 A8 0001CDA0 ExEnterPriorityRegionAndAcquireResourceExclusive | |
173 A9 0001CD20 ExEnterPriorityRegionAndAcquireResourceShared | |
174 AA 0048C450 ExEnumHandleTable | |
175 AB 00383020 ExEventObjectType | |
176 AC 002148D8 ExExtendZone | |
177 AD 0066F114 ExFetchLicenseData | |
178 AE 000DF908 ExFlushLookasideListEx | |
179 AF 002129D4 ExFreeAutoExpandPushLock | |
180 B0 000CAED0 ExFreeCacheAwarePushLock | |
181 B1 00001F58 ExFreeCacheAwareRundownProtection | |
182 B2 00233DA8 ExFreePool | |
183 B3 00233DB0 ExFreePoolWithTag | |
184 B4 000B45D0 ExGetCurrentProcessorCounts | |
185 B5 00212074 ExGetCurrentProcessorCpuUsage | |
186 B6 002136B0 ExGetExclusiveWaiterCount | |
187 B7 005424D4 ExGetFirmwareEnvironmentVariable | |
188 B8 0066F2EC ExGetLicenseTamperState | |
189 B9 00081200 ExGetPreviousMode | |
190 BA 002136B4 ExGetSharedWaiterCount | |
191 BB 00212A04 ExInitializeAutoExpandPushLock | |
192 BC 000BB6EC ExInitializeLookasideListEx | |
193 BD 000DD53C ExInitializeNPagedLookasideList | |
194 BE 00496350 ExInitializePagedLookasideList | |
195 BF 000C07E0 ExInitializePushLock | |
196 C0 0004E5D0 ExInitializeResourceLite | |
197 C1 000C07E0 ExInitializeRundownProtection | |
198 C2 0048CF90 ExInitializeRundownProtectionCacheAware | |
199 C3 000F990C ExInitializeRundownProtectionCacheAwareEx | |
200 C4 0010F670 ExInitializeZone | |
201 C5 000DFE18 ExInterlockedAddLargeInteger | |
202 C6 000F8458 ExInterlockedAddUlong | |
203 C7 00214934 ExInterlockedExtendZone | |
204 C8 000DA3F8 ExInterlockedInsertHeadList | |
205 C9 000B7FF8 ExInterlockedInsertTailList | |
206 CA 00214A78 ExInterlockedPopEntryList | |
207 CB 00214B10 ExInterlockedPushEntryList | |
208 CC 000B0230 ExInterlockedRemoveHeadList | |
209 CD 006719F8 ExIsManufacturingModeEnabled | |
210 CE 000FA69C ExIsProcessorFeaturePresent | |
211 CF 000AC140 ExIsResourceAcquiredExclusiveLite | |
212 D0 0001C500 ExIsResourceAcquiredSharedLite | |
213 D1 000F9B84 ExLocalTimeToSystemTime | |
214 D2 00211C80 ExNotifyBootDeviceRemoval | |
215 D3 000970B0 ExNotifyCallback | |
216 D4 000049C0 ExQueryDepthSList | |
217 D5 0066F558 ExQueryFastCacheAppOrigin | |
218 D6 0066F6A0 ExQueryFastCacheDevLicense | |
219 D7 0021145C ExQueryPoolBlockSize | |
220 D8 002115D4 ExQueryTimerResolution | |
221 D9 004DA14C ExQueryWnfStateData | |
222 DA 00078810 ExQueueWorkItem | |
223 DB 0067B450 ExRaiseAccessViolation | |
224 DC 0067B460 ExRaiseDatatypeMisalignment | |
225 DD 001E6BF0 ExRaiseException | |
226 DE 0067B470 ExRaiseHardError | |
227 DF 000BF058 ExRaiseStatus | |
228 E0 003831A8 ExRawInputManagerObjectType | |
229 E1 00111BC4 ExReInitializeRundownProtection | |
230 E2 000B0390 ExReInitializeRundownProtectionCacheAware | |
231 E3 000FA6B4 ExRealTimeIsUniversal | |
232 E4 00211CCC ExRegisterBootDevice | |
233 E5 000F8100 ExRegisterCallback | |
234 E6 0053358C ExRegisterExtension | |
235 E7 000B5534 ExReinitializeResourceLite | |
236 E8 00212A1C ExReleaseAutoExpandPushLockExclusive | |
237 E9 00212AC8 ExReleaseAutoExpandPushLockShared | |
238 EA 000AC970 ExReleaseCacheAwarePushLockExclusive | |
239 EB 002132C0 ExReleaseCacheAwarePushLockExclusiveEx | |
240 EC 0008B030 ExReleaseCacheAwarePushLockSharedEx | |
241 ED 00003D70 ExReleaseFastMutex | |
242 EE 000B6EF0 ExReleaseFastMutexUnsafe | |
243 EF 000AA580 ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | |
244 F0 0000B770 ExReleasePushLockEx | |
245 F1 0000B8F0 ExReleasePushLockExclusiveEx | |
246 F2 0000B700 ExReleasePushLockSharedEx | |
247 F3 0001DF90 ExReleaseResourceAndLeaveCriticalRegion | |
248 F4 0001D120 ExReleaseResourceAndLeavePriorityRegion | |
249 F5 000BD934 ExReleaseResourceForThreadLite | |
250 F6 0001E2B0 ExReleaseResourceLite | |
251 F7 00036080 ExReleaseRundownProtection | |
252 F8 000AA500 ExReleaseRundownProtectionCacheAware | |
253 F9 0009DF10 ExReleaseRundownProtectionCacheAwareEx | |
254 FA 00213B2C ExReleaseRundownProtectionEx | |
255 FB 00063390 ExReleaseSpinLockExclusive | |
256 FC 000633F0 ExReleaseSpinLockExclusiveFromDpcLevel | |
257 FD 00065620 ExReleaseSpinLockShared | |
258 FE 000CCB70 ExReleaseSpinLockSharedFromDpcLevel | |
259 FF 000C35A8 ExRundownCompleted | |
260 100 000B03F0 ExRundownCompletedCacheAware | |
261 101 00383180 ExSemaphoreObjectType | |
262 102 006744EC ExSetFirmwareEnvironmentVariable | |
263 103 0066FA6C ExSetLicenseTamperState | |
264 104 00089EC4 ExSetResourceOwnerPointer | |
265 105 0008B820 ExSetResourceOwnerPointerEx | |
266 106 00071110 ExSetTimer | |
267 107 000DD818 ExSetTimerResolution | |
268 108 00212C30 ExSizeOfAutoExpandPushLock | |
269 109 00540718 ExSizeOfRundownProtectionCacheAware | |
270 10A 004E5B10 ExSubscribeWnfStateChange | |
271 10B 00673168 ExSystemExceptionFilter | |
272 10C 000C3770 ExSystemTimeToLocalTime | |
273 10D 000A8D14 ExTimedWaitForUnblockPushLock | |
274 10E 003830C0 ExTimerObjectType | |
275 10F 00212C38 ExTryAcquireAutoExpandPushLockExclusive | |
276 110 00212D14 ExTryAcquireAutoExpandPushLockShared | |
277 111 00213350 ExTryAcquireCacheAwarePushLockExclusiveEx | |
278 112 0021341C ExTryAcquireCacheAwarePushLockSharedEx | |
279 113 0002E160 ExTryAcquirePushLockExclusiveEx | |
280 114 0008A7E0 ExTryAcquirePushLockSharedEx | |
281 115 000BE650 ExTryConvertPushLockSharedToExclusiveEx | |
282 116 00213B8C ExTryConvertSharedSpinLockExclusive | |
283 117 0007DA24 ExTryQueueWorkItem | |
284 118 00213608 ExTryToAcquireFastMutex | |
285 119 002137FC ExTryToAcquireResourceExclusiveLite | |
286 11A 00024754 ExUnblockOnAddressPushLockEx | |
287 11B 00024754 ExUnblockPushLockEx | |
288 11C 000FA1B8 ExUnregisterCallback | |
289 11D 0067BC7C ExUnregisterExtension | |
290 11E 004E7060 ExUnsubscribeWnfStateChange | |
291 11F 00407EE8 ExUuidCreate | |
292 120 0010DE08 ExVerifySuite | |
293 121 0008C6B8 ExWaitForRundownProtectionRelease | |
294 122 000B0960 ExWaitForRundownProtectionReleaseCacheAware | |
295 123 002134E0 ExWaitForUnblockPushLock | |
296 124 00383190 ExWindowStationObjectType | |
297 125 0009AFD0 ExfAcquirePushLockExclusive | |
298 126 0009ADAC ExfAcquirePushLockShared | |
299 127 00004700 ExfReleasePushLock | |
300 128 00004730 ExfReleasePushLockExclusive | |
301 129 00004780 ExfReleasePushLockShared | |
302 12A 0008AAE0 ExfTryAcquirePushLockShared | |
303 12B 000046D0 ExfTryToWakePushLock | |
304 12C 00213600 ExfUnblockPushLock | |
305 12D 00128540 ExpInterlockedFlushSList | |
306 12E 001284C0 ExpInterlockedPopEntrySList | |
307 12F 00128500 ExpInterlockedPushEntrySList | |
308 130 001284B0 FirstEntrySList | |
309 131 0042FEB0 FsRtlAcknowledgeEcp | |
310 132 0008A020 FsRtlAcquireEofLock | |
311 133 00423664 FsRtlAcquireFileExclusive | |
312 134 0008B560 FsRtlAcquireHeaderMutex | |
313 135 000B3CC0 FsRtlAddBaseMcbEntry | |
314 136 000B3CD4 FsRtlAddBaseMcbEntryEx | |
315 137 000B364C FsRtlAddLargeMcbEntry | |
316 138 0018FEB0 FsRtlAddMcbEntry | |
317 139 0045AED8 FsRtlAddToTunnelCache | |
318 13A 0048FAF4 FsRtlAllocateExtraCreateParameter | |
319 13B 00430500 FsRtlAllocateExtraCreateParameterFromLookasideList | |
320 13C 004305D0 FsRtlAllocateExtraCreateParameterList | |
321 13D 000C354C FsRtlAllocateFileLock | |
322 13E 00191118 FsRtlAllocatePool | |
323 13F 00191140 FsRtlAllocatePoolWithQuota | |
324 140 00191168 FsRtlAllocatePoolWithQuotaTag | |
325 141 00191188 FsRtlAllocatePoolWithTag | |
326 142 005F918C FsRtlAllocateResource | |
327 143 000A7690 FsRtlAreNamesEqual | |
328 144 001909E0 FsRtlAreThereCurrentOrInProgressFileLocks | |
329 145 0010022C FsRtlAreThereWaitingFileLocks | |
330 146 004A7F7C FsRtlAreVolumeStartupApplicationsComplete | |
331 147 004E6E5C FsRtlBalanceReads | |
332 148 00476EB4 FsRtlCancellableWaitForMultipleObjects | |
333 149 00476E88 FsRtlCancellableWaitForSingleObject | |
334 14A 000C01D8 FsRtlChangeBackingFileObject | |
335 14B 000C347C FsRtlCheckLockForOplockRequest | |
336 14C 000AF9C4 FsRtlCheckLockForReadAccess | |
337 14D 000DC8EC FsRtlCheckLockForWriteAccess | |
338 14E 00076480 FsRtlCheckOplock | |
339 14F 00076530 FsRtlCheckOplockEx | |
340 150 005076A0 FsRtlCheckUpperOplock | |
341 151 005F922C FsRtlCopyRead | |
342 152 005F9554 FsRtlCopyWrite | |
343 153 0000336C FsRtlCreateSectionForDataScan | |
344 154 00493BF4 FsRtlCurrentBatchOplock | |
345 155 000FF044 FsRtlCurrentOplock | |
346 156 00511BB0 FsRtlCurrentOplockH | |
347 157 005F91AC FsRtlDeleteExtraCreateParameterLookasideList | |
348 158 004D9988 FsRtlDeleteKeyFromTunnelCache | |
349 159 004AC89C FsRtlDeleteTunnelCache | |
350 15A 005FA3B0 FsRtlDeregisterUncProvider | |
351 15B 004AE5A8 FsRtlDismountComplete | |
352 15C 005FA9B4 FsRtlDissectDbcs | |
353 15D 000A87C0 FsRtlDissectName | |
354 15E 005FAA88 FsRtlDoesDbcsContainWildCards | |
355 15F 000A3C50 FsRtlDoesNameContainWildCards | |
356 160 000DCB10 FsRtlFastCheckLockForRead | |
357 161 000DC980 FsRtlFastCheckLockForWrite | |
358 162 000AA5E8 FsRtlFastUnlockAll | |
359 163 00190A04 FsRtlFastUnlockAllByKey | |
360 164 000AA9EC FsRtlFastUnlockSingle | |
361 165 0042FD80 FsRtlFindExtraCreateParameter | |
362 166 00489C68 FsRtlFindInTunnelCache | |
363 167 0041B008 FsRtlFreeExtraCreateParameter | |
364 168 0041AF50 FsRtlFreeExtraCreateParameterList | |
365 169 000E16A8 FsRtlFreeFileLock | |
366 16A 0042FD60 FsRtlGetEcpListFromIrp | |
367 16B 004A7AA8 FsRtlGetFileNameInformation | |
368 16C 003C4544 FsRtlGetFileSize | |
369 16D 00089FD0 FsRtlGetIoAtEof | |
370 16E 000B5CC0 FsRtlGetNextBaseMcbEntry | |
371 16F 004A476C FsRtlGetNextExtraCreateParameter | |
372 170 00190A6C FsRtlGetNextFileLock | |
373 171 0018FEC0 FsRtlGetNextLargeMcbEntry | |
374 172 0018FFB0 FsRtlGetNextMcbEntry | |
375 173 004DFFE4 FsRtlGetSectorSizeInformation | |
376 174 000E0EB4 FsRtlGetSupportedFeatures | |
377 175 000E0668 FsRtlGetVirtualDiskNestingLevel | |
378 176 005FB380 FsRtlHeatInit | |
379 177 005FB4A4 FsRtlHeatLogIo | |
380 178 005FB578 FsRtlHeatLogTierMove | |
381 179 005FB5CC FsRtlHeatUninit | |
382 17A 000FDBE8 FsRtlIncrementCcFastMdlReadWait | |
383 17B 0018FE44 FsRtlIncrementCcFastReadNoWait | |
384 17C 004E09AC FsRtlIncrementCcFastReadNotPossible | |
385 17D 0018FE50 FsRtlIncrementCcFastReadResourceMiss | |
386 17E 00495F88 FsRtlIncrementCcFastReadWait | |
387 17F 00541528 FsRtlInitExtraCreateParameterLookasideList | |
388 180 000C3264 FsRtlInitializeBaseMcb | |
389 181 00077C84 FsRtlInitializeBaseMcbEx | |
390 182 000BACA0 FsRtlInitializeEofLock | |
391 183 005F91BC FsRtlInitializeExtraCreateParameter | |
392 184 005F91F4 FsRtlInitializeExtraCreateParameterList | |
393 185 000C358C FsRtlInitializeFileLock | |
394 186 000C2B48 FsRtlInitializeLargeMcb | |
395 187 005FA3A0 FsRtlInitializeMcb | |
396 188 004A8130 FsRtlInitializeOplock | |
397 189 004E4250 FsRtlInitializeTunnelCache | |
398 18A 0048CC80 FsRtlInsertExtraCreateParameter | |
399 18B 00192960 FsRtlInsertPerFileContext | |
400 18C 000755F0 FsRtlInsertPerFileObjectContext | |
401 18D 00192AFC FsRtlInsertPerStreamContext | |
402 18E 00192CD0 FsRtlInsertReservedPerFileContext | |
403 18F 000BBA1C FsRtlInsertReservedPerStreamContext | |
404 190 005FAAF8 FsRtlIsDbcsInExpression | |
405 191 005F9218 FsRtlIsEcpAcknowledged | |
406 192 0049686C FsRtlIsEcpFromUserMode | |
407 193 00499D60 FsRtlIsFatDbcsLegal | |
408 194 005FB174 FsRtlIsHpfsDbcsLegal | |
409 195 000A3750 FsRtlIsNameInExpression | |
410 196 000E1488 FsRtlIsNtstatusExpected | |
411 197 000B43E0 FsRtlIsPagingFile | |
412 198 000C9550 FsRtlIsSystemPagingFile | |
413 199 000807AC FsRtlIsTotalDeviceFailure | |
414 19A 004E0344 FsRtlIssueDeviceIoControl | |
415 19B 0049E1C0 FsRtlKernelFsControlFile | |
416 19C 00250318 FsRtlLegalAnsiCharacterArray | |
417 19D 005F9A00 FsRtlLogCcFlushError | |
418 19E 000ABFF0 FsRtlLookupBaseMcbEntry | |
419 19F 00190010 FsRtlLookupLargeMcbEntry | |
420 1A0 000B808C FsRtlLookupLastBaseMcbEntry | |
421 1A1 000C0A08 FsRtlLookupLastBaseMcbEntryAndIndex | |
422 1A2 0019016C FsRtlLookupLastLargeMcbEntry | |
423 1A3 00190290 FsRtlLookupLastLargeMcbEntryAndIndex | |
424 1A4 001903C0 FsRtlLookupLastMcbEntry | |
425 1A5 00190404 FsRtlLookupMcbEntry | |
426 1A6 00192CD8 FsRtlLookupPerFileContext | |
427 1A7 000A8870 FsRtlLookupPerFileObjectContext | |
428 1A8 00192E34 FsRtlLookupPerStreamContextInternal | |
429 1A9 00193028 FsRtlLookupReservedPerFileContext | |
430 1AA 000A9D70 FsRtlLookupReservedPerStreamContext | |
431 1AB 004A4E64 FsRtlMdlRead | |
432 1AC 0018FE5C FsRtlMdlReadComplete | |
433 1AD 000BD060 FsRtlMdlReadCompleteDev | |
434 1AE 005F9C60 FsRtlMdlReadDev | |
435 1AF 004A4DF8 FsRtlMdlReadEx | |
436 1B0 005F9F08 FsRtlMdlWriteComplete | |
437 1B1 004A1CD4 FsRtlMdlWriteCompleteDev | |
438 1B2 005FA404 FsRtlMupGetProviderIdFromName | |
439 1B3 005FA41C FsRtlMupGetProviderInfoFromFileObject | |
440 1B4 000CB0A4 FsRtlNormalizeNtstatus | |
441 1B5 005FB9C8 FsRtlNotifyChangeDirectory | |
442 1B6 0042F014 FsRtlNotifyCleanup | |
443 1B7 005FBA1C FsRtlNotifyCleanupAll | |
444 1B8 004D8990 FsRtlNotifyFilterChangeDirectory | |
445 1B9 0042F314 FsRtlNotifyFilterChangeDirectoryLite | |
446 1BA 004D6FD8 FsRtlNotifyFilterReportChange | |
447 1BB 0042EA80 FsRtlNotifyFilterReportChangeLite | |
448 1BC 005FBB60 FsRtlNotifyFullChangeDirectory | |
449 1BD 005FBBBC FsRtlNotifyFullReportChange | |
450 1BE 004A2944 FsRtlNotifyInitializeSync | |
451 1BF 005FBC0C FsRtlNotifyReportChange | |
452 1C0 004A7670 FsRtlNotifyUninitializeSync | |
453 1C1 004AD284 FsRtlNotifyVolumeEvent | |
454 1C2 003BC784 FsRtlNotifyVolumeEventEx | |
455 1C3 000AFB40 FsRtlNumberOfRunsInBaseMcb | |
456 1C4 0019047C FsRtlNumberOfRunsInLargeMcb | |
457 1C5 0019053C FsRtlNumberOfRunsInMcb | |
458 1C6 0042E77C FsRtlOplockBreakH | |
459 1C7 001911A8 FsRtlOplockBreakToNone | |
460 1C8 001911E0 FsRtlOplockBreakToNoneEx | |
461 1C9 0042F75C FsRtlOplockFsctrl | |
462 1CA 0042F778 FsRtlOplockFsctrlEx | |
463 1CB 00493AD0 FsRtlOplockIsFastIoPossible | |
464 1CC 004972A0 FsRtlOplockIsSharedRequest | |
465 1CD 001913E8 FsRtlOplockKeysEqual | |
466 1CE 00193460 FsRtlPostPagingFileStackOverflow | |
467 1CF 00193468 FsRtlPostStackOverflow | |
468 1D0 004A4D70 FsRtlPrepareMdlWrite | |
469 1D1 005F9F6C FsRtlPrepareMdlWriteDev | |
470 1D2 004A4D04 FsRtlPrepareMdlWriteEx | |
471 1D3 005F9224 FsRtlPrepareToReuseEcp | |
472 1D4 000AACF0 FsRtlPrivateLock | |
473 1D5 000F9700 FsRtlProcessFileLock | |
474 1D6 004E6034 FsRtlQueryCachedVdl | |
475 1D7 00492A94 FsRtlQueryKernelEaFile | |
476 1D8 00111184 FsRtlQueryMaximumVirtualDiskNestingLevel | |
477 1D9 0011095C FsRtlRegisterFileSystemFilterCallbacks | |
478 1DA 005425D8 FsRtlRegisterFltMgrCalls | |
479 1DB 005425D0 FsRtlRegisterMupCalls | |
480 1DC 005FA434 FsRtlRegisterUncProvider | |
481 1DD 0053BF94 FsRtlRegisterUncProviderEx | |
482 1DE 0008A4D0 FsRtlReleaseEofLock | |
483 1DF 00423910 FsRtlReleaseFile | |
484 1E0 004A803C FsRtlReleaseFileNameInformation | |
485 1E1 000A89F0 FsRtlReleaseHeaderMutex | |
486 1E2 000B38D4 FsRtlRemoveBaseMcbEntry | |
487 1E3 00508540 FsRtlRemoveDotsFromPath | |
488 1E4 0042FE00 FsRtlRemoveExtraCreateParameter | |
489 1E5 00190544 FsRtlRemoveLargeMcbEntry | |
490 1E6 00190664 FsRtlRemoveMcbEntry | |
491 1E7 00193038 FsRtlRemovePerFileContext | |
492 1E8 00075468 FsRtlRemovePerFileObjectContext | |
493 1E9 001931C8 FsRtlRemovePerStreamContext | |
494 1EA 0019341C FsRtlRemoveReservedPerFileContext | |
495 1EB 00193440 FsRtlRemoveReservedPerStreamContext | |
496 1EC 000C3A24 FsRtlResetBaseMcb | |
497 1ED 00190670 FsRtlResetLargeMcb | |
498 1EE 000DCF80 FsRtlSendModernAppTermination | |
499 1EF 0052B348 FsRtlSetDriverBacking | |
500 1F0 004972D0 FsRtlSetEcpListIntoIrp | |
501 1F1 004E6A94 FsRtlSetKernelEaFile | |
502 1F2 0019073C FsRtlSplitBaseMcb | |
503 1F3 001908B4 FsRtlSplitLargeMcb | |
504 1F4 004A4620 FsRtlSyncVolumes | |
505 1F5 00498ECC FsRtlTeardownPerFileContexts | |
506 1F6 003BBC5C FsRtlTeardownPerStreamContexts | |
507 1F7 000B37F0 FsRtlTruncateBaseMcb | |
508 1F8 000B3724 FsRtlTruncateLargeMcb | |
509 1F9 001909D8 FsRtlTruncateMcb | |
510 1FA 000FEFCC FsRtlTryToAcquireHeaderMutex | |
511 1FB 000BF820 FsRtlUninitializeBaseMcb | |
512 1FC 000C2FCC FsRtlUninitializeFileLock | |
513 1FD 000BF7F0 FsRtlUninitializeLargeMcb | |
514 1FE 005FA3A8 FsRtlUninitializeMcb | |
515 1FF 000BD36C FsRtlUninitializeOplock | |
516 200 000BAAFC FsRtlUpdateDiskCounters | |
517 201 005FA44C FsRtlUpperOplockFsctrl | |
518 202 000DE3A4 FsRtlValidateReparsePointBuffer | |
519 203 002C68B0 HalDispatchTable | |
520 204 000D17EC HalExamineMBR | |
521 205 002C6540 HalPrivateDispatchTable | |
522 206 00104EC4 HeadlessDispatch | |
523 207 00194C0C HvlGetLpIndexFromApicId | |
524 208 00198E54 HvlPerformEndOfInterrupt | |
525 209 00194F98 HvlQueryActiveHypervisorProcessorCount | |
526 20A 00194FB4 HvlQueryActiveProcessors | |
527 20B 000D49F0 HvlQueryConnection | |
528 20C 00195020 HvlQueryHypervisorProcessorNodeNumber | |
529 20D 00195058 HvlQueryNumaDistance | |
530 20E 00195390 HvlQueryProcessorTopology | |
531 20F 001953EC HvlQueryProcessorTopologyCount | |
532 210 0019541C HvlQueryProcessorTopologyHighestId | |
533 211 0019AD94 HvlReadPerformanceStateCounters | |
534 212 00193FC0 HvlRegisterInterruptCallback | |
535 213 005FD500 HvlRegisterWheaErrorNotification | |
536 214 00194350 HvlUnregisterInterruptCallback | |
537 215 005FD538 HvlUnregisterWheaErrorNotification | |
538 216 0019C7F4 InbvAcquireDisplayOwnership | |
539 217 0019C858 InbvCheckDisplayOwnership | |
540 218 001017B8 InbvDisplayString | |
541 219 0019C874 InbvEnableBootDriver | |
542 21A 0019C894 InbvEnableDisplayString | |
543 21B 0019C8E8 InbvInstallDisplayStringFilter | |
544 21C 0010B00C InbvIsBootDriverInstalled | |
545 21D 000EB3FC InbvNotifyDisplayOwnershipChange | |
546 21E 0019C8F0 InbvNotifyDisplayOwnershipLost | |
547 21F 0019C934 InbvResetDisplay | |
548 220 0019C950 InbvSetScrollRegion | |
549 221 0019C970 InbvSetTextColor | |
550 222 0019C98C InbvSolidColorFill | |
551 223 0030DD94 InitSafeBootMode | |
552 224 000BB960 InitializeSListHead | |
553 225 00128570 InterlockedPushListSList | |
554 226 00075320 IoAcquireCancelSpinLock | |
555 227 00095800 IoAcquireRemoveLockEx | |
556 228 00001E10 IoAcquireVpbSpinLock | |
557 229 00384028 IoAdapterObjectType | |
558 22A 0019EC94 IoAdjustStackSizeForRedirection | |
559 22B 0019ED48 IoAllocateAdapterChannel | |
560 22C 0019ED50 IoAllocateController | |
561 22D 000F9190 IoAllocateDriverObjectExtension | |
562 22E 000F8EF8 IoAllocateErrorLogEntry | |
563 22F 00023BF8 IoAllocateIrp | |
564 230 00080BA0 IoAllocateMdl | |
565 231 0042B158 IoAllocateMiniCompletionPacket | |
566 232 0019EDC8 IoAllocateSfioStreamIdentifier | |
567 233 000BCD08 IoAllocateWorkItem | |
568 234 000326AC IoApplyPriorityInfoThread | |
569 235 00605AB8 IoAssignResources | |
570 236 00600250 IoAttachDevice | |
571 237 0019EE04 IoAttachDeviceByPointer | |
572 238 000F9B7C IoAttachDeviceToDeviceStack | |
573 239 000A48C0 IoAttachDeviceToDeviceStackSafe | |
574 23A 0019EE24 IoBoostThreadIo | |
575 23B 000BDCC0 IoBuildAsynchronousFsdRequest | |
576 23C 00081214 IoBuildDeviceIoControlRequest | |
577 23D 000A6B30 IoBuildPartialMdl | |
578 23E 004B56A8 IoBuildSynchronousFsdRequest | |
579 23F 000F9640 IoCallDriver | |
580 240 00600334 IoCancelFileOpen | |
581 241 00073AA0 IoCancelIrp | |
582 242 00600448 IoCheckDesiredAccess | |
583 243 0041AE50 IoCheckEaBufferValidity | |
584 244 0050A3E0 IoCheckFunctionAccess | |
585 245 0050AC74 IoCheckQuerySetFileInformation | |
586 246 0050B0F8 IoCheckQuerySetVolumeInformation | |
587 247 00600480 IoCheckQuotaBufferValidity | |
588 248 003BAA04 IoCheckShareAccess | |
589 249 003BAA20 IoCheckShareAccessEx | |
590 24A 000B94F8 IoClearActivityIdThread | |
591 24B 00606568 IoClearDependency | |
592 24C 0019EE7C IoClearIrpExtraCreateParameter | |
593 24D 0005A3B0 IoCompleteRequest | |
594 24E 00383A00 IoCompletionObjectType | |
595 24F 0053BC68 IoConnectInterrupt | |
596 250 004FAE18 IoConnectInterruptEx | |
597 251 00600534 IoConvertFileHandleToKernelHandle | |
598 252 00600684 IoCopyDeviceObjectHint | |
599 253 0052A5DC IoCreateArcName | |
600 254 00541138 IoCreateController | |
601 255 003B8ADC IoCreateDevice | |
602 256 005FD250 IoCreateDisk | |
603 257 0052B5DC IoCreateDriver | |
604 258 0041A120 IoCreateFile | |
605 259 0041A360 IoCreateFileEx | |
606 25A 004A52C8 IoCreateFileSpecifyDeviceObjectHint | |
607 25B 005403DC IoCreateNotificationEvent | |
608 25C 00600708 IoCreateStreamFileObject | |
609 25D 004E7020 IoCreateStreamFileObjectEx | |
610 25E 003BB638 IoCreateStreamFileObjectEx2 | |
611 25F 003BB5F8 IoCreateStreamFileObjectLite | |
612 260 00504890 IoCreateSymbolicLink | |
613 261 00600748 IoCreateSynchronizationEvent | |
614 262 00534CF8 IoCreateSystemThread | |
615 263 006007E4 IoCreateUnprotectedSymbolicLink | |
616 264 000BD9F0 IoCsqInitialize | |
617 265 000C39E4 IoCsqInitializeEx | |
618 266 000FA438 IoCsqInsertIrp | |
619 267 000B4FB0 IoCsqInsertIrpEx | |
620 268 000DA010 IoCsqRemoveIrp | |
621 269 000B7BE0 IoCsqRemoveNextIrp | |
622 26A 000C8F04 IoDecrementKeepAliveCount | |
623 26B 004555F0 IoDeleteAllDependencyRelations | |
624 26C 004987E0 IoDeleteController | |
625 26D 00001418 IoDeleteDevice | |
626 26E 004987E0 IoDeleteDriver | |
627 26F 00506FDC IoDeleteSymbolicLink | |
628 270 00001394 IoDetachDevice | |
629 271 00383EA4 IoDeviceHandlerObjectSize | |
630 272 00387490 IoDeviceHandlerObjectType | |
631 273 00383D38 IoDeviceObjectType | |
632 274 004FA994 IoDisconnectInterrupt | |
633 275 004ECB38 IoDisconnectInterruptEx | |
634 276 00383990 IoDriverObjectType | |
635 277 00606620 IoDuplicateDependency | |
636 278 00600838 IoEnqueueIrp | |
637 279 0010E820 IoEnumerateDeviceObjectList | |
638 27A 0053F0D0 IoEnumerateRegisteredFiltersList | |
639 27B 00600840 IoFastQueryNetworkAttributes | |
640 27C 00383840 IoFileObjectType | |
641 27D 0049EDA0 IoForwardAndCatchIrp | |
642 27E 0049EDA0 IoForwardIrpSynchronously | |
643 27F 0019EE8C IoFreeController | |
644 280 0019EEC0 IoFreeErrorLogEntry | |
645 281 0005BE30 IoFreeIrp | |
646 282 00065BF0 IoFreeMdl | |
647 283 0047F024 IoFreeMiniCompletionPacket | |
648 284 0019EF10 IoFreeSfioStreamIdentifier | |
649 285 000C0714 IoFreeWorkItem | |
650 286 000A8B50 IoGetActivityIdIrp | |
651 287 00001380 IoGetActivityIdThread | |
652 288 00110408 IoGetAffinityInterrupt | |
653 289 00024330 IoGetAttachedDevice | |
654 28A 00002750 IoGetAttachedDeviceReference | |
655 28B 0004E4DC IoGetBaseFileSystemDeviceObject | |
656 28C 00600878 IoGetBootDiskInformation | |
657 28D 005195A4 IoGetBootDiskInformationLite | |
658 28E 0052AB90 IoGetConfigurationInformation | |
659 28F 006013E4 IoGetContainerInformation | |
660 290 0000B750 IoGetCurrentProcess | |
661 291 000A515C IoGetDeviceAttachmentBaseRef | |
662 292 004A8FFC IoGetDeviceInterfaceAlias | |
663 293 00605CAC IoGetDeviceInterfacePropertyData | |
664 294 00455650 IoGetDeviceInterfaces | |
665 295 005073F0 IoGetDeviceNumaNode | |
666 296 00478224 IoGetDeviceObjectPointer | |
667 297 0045932C IoGetDeviceProperty | |
668 298 00462F74 IoGetDevicePropertyData | |
669 299 000E0F58 IoGetDeviceToVerify | |
670 29A 0019F004 IoGetDiskDeviceObject | |
671 29B 00537B04 IoGetDmaAdapter | |
672 29C 000C2EF0 IoGetDriverObjectExtension | |
673 29D 004937B4 IoGetFileObjectGenericMapping | |
674 29E 001A02A4 IoGetFsTrackOffsetState | |
675 29F 001A02DC IoGetFsZeroingOffset | |
676 2A0 000DB570 IoGetGenericIrpExtension | |
677 2A1 0060088C IoGetInitialStack | |
678 2A2 000E0344 IoGetInitiatorProcess | |
679 2A3 0004BAF0 IoGetIoPriorityHint | |
680 2A4 0042FD60 IoGetIrpExtraCreateParameter | |
681 2A5 000C36BC IoGetLowerDeviceObject | |
682 2A6 0019F08C IoGetOplockKeyContext | |
683 2A7 00077574 IoGetOplockKeyContextEx | |
684 2A8 000B4450 IoGetPagingIoPriority | |
685 2A9 0000CC40 IoGetRelatedDeviceObject | |
686 2AA 000AFA70 IoGetRequestorProcess | |
687 2AB 000AFA4C IoGetRequestorProcessId | |
688 2AC 000F9648 IoGetRequestorSessionId | |
689 2AD 0019F0B8 IoGetSfioStreamIdentifier | |
690 2AE 00028FF0 IoGetStackLimits | |
691 2AF 006015AC IoGetSymlinkSupportInformation | |
692 2B0 000A87A0 IoGetTopLevelIrp | |
693 2B1 000A7670 IoGetTransactionParameterBlock | |
694 2B2 000C8DF8 IoIncrementKeepAliveCount | |
695 2B3 000B02E0 IoInitializeIrp | |
696 2B4 006010C0 IoInitializeMiniCompletionPacket | |
697 2B5 000F8418 IoInitializeRemoveLockEx | |
698 2B6 00544680 IoInitializeTimer | |
699 2B7 000BE610 IoInitializeWorkItem | |
700 2B8 000D35CC IoInvalidateDeviceRelations | |
701 2B9 000F9678 IoInvalidateDeviceState | |
702 2BA 00093EC0 IoIs32bitProcess | |
703 2BB 000B71DC IoIsActivityTracingEnabled | |
704 2BC 004A674C IoIsFileObjectIgnoringSharing | |
705 2BD 000BF764 IoIsFileOriginRemote | |
706 2BE 000E0308 IoIsInitiator32bitProcess | |
707 2BF 00073EF0 IoIsOperationSynchronous | |
708 2C0 000B823C IoIsSystemThread | |
709 2C1 006BBA70 IoIsValidIrpStatus | |
710 2C2 006015F0 IoIsValidNameGraftingBuffer | |
711 2C3 0053FAEC IoIsWdmVersionAvailable | |
712 2C4 001A0FE4 IoLoadCrashDumpDriver | |
713 2C5 000BC9B8 IoMakeAssociatedIrp | |
714 2C6 0053BB74 IoOpenDeviceInterfaceRegistryKey | |
715 2C7 004D9400 IoOpenDeviceRegistryKey | |
716 2C8 000496D0 IoPageRead | |
717 2C9 000BE8B0 IoPropagateActivityIdToThread | |
718 2CA 000C9588 IoPropagateIrpExtension | |
719 2CB 000B5C54 IoPropagateIrpExtensionEx | |
720 2CC 004FBD40 IoQueryDeviceDescription | |
721 2CD 0041733C IoQueryFileDosDeviceName | |
722 2CE 0041877C IoQueryFileInformation | |
723 2CF 0019FF40 IoQueryFullDriverPath | |
724 2D0 00539770 IoQueryInterface | |
725 2D1 005187FC IoQueryVolumeInformation | |
726 2D2 000F9B98 IoQueueThreadIrp | |
727 2D3 00078770 IoQueueWorkItem | |
728 2D4 00078744 IoQueueWorkItemEx | |
729 2D5 0019FFFC IoQueueWorkItemToNode | |
730 2D6 0019F0E8 IoRaiseHardError | |
731 2D7 0019F384 IoRaiseInformationalHardError | |
732 2D8 005393E4 IoReadDiskSignature | |
733 2D9 0030A1F8 IoReadOperationCount | |
734 2DA 004B20AC IoReadPartitionTable | |
735 2DB 004AEE28 IoReadPartitionTableEx | |
736 2DC 0030A208 IoReadTransferCount | |
737 2DD 00541E10 IoRegisterBootDriverCallback | |
738 2DE 0053AF14 IoRegisterBootDriverReinitialization | |
739 2DF 0053CDB8 IoRegisterContainerNotification | |
740 2E0 005013FC IoRegisterDeviceInterface | |
741 2E1 0053AF90 IoRegisterDriverReinitialization | |
742 2E2 0052B184 IoRegisterFileSystem | |
743 2E3 00600914 IoRegisterFsRegistrationChange | |
744 2E4 0052AF78 IoRegisterFsRegistrationChangeMountAware | |
745 2E5 00601E14 IoRegisterIoTracking | |
746 2E6 0052B8D4 IoRegisterLastChanceShutdownNotification | |
747 2E7 004DBEB8 IoRegisterPlugPlayNotification | |
748 2E8 00101810 IoRegisterPriorityCallback | |
749 2E9 0052B934 IoRegisterShutdownNotification | |
750 2EA 000B5060 IoReleaseCancelSpinLock | |
751 2EB 001115EC IoReleaseRemoveLockAndWaitEx | |
752 2EC 000958F4 IoReleaseRemoveLockEx | |
753 2ED 000C3470 IoReleaseVpbSpinLock | |
754 2EE 003BA8D0 IoRemoveShareAccess | |
755 2EF 0060091C IoReplaceFileObjectName | |
756 2F0 00605CB4 IoReplacePartitionUnit | |
757 2F1 00519CD8 IoReportDetectedDevice | |
758 2F2 0074575C IoReportHalResourceUsage | |
759 2F3 000E9B0C IoReportInterruptActive | |
760 2F4 000EA038 IoReportInterruptInactive | |
761 2F5 00607C90 IoReportResourceForDetection | |
762 2F6 00607E70 IoReportResourceUsage | |
763 2F7 0053B000 IoReportRootDevice | |
764 2F8 004AC760 IoReportTargetDeviceChange | |
765 2F9 00001F7C IoReportTargetDeviceChangeAsynchronous | |
766 2FA 001A4CF4 IoRequestDeviceEject | |
767 2FB 001A4D04 IoRequestDeviceEjectEx | |
768 2FC 00608298 IoRequestDeviceRemovalForReset | |
769 2FD 00606724 IoReserveDependency | |
770 2FE 0010A3FC IoResolveDependency | |
771 2FF 0004B8C0 IoRetrievePriorityInfo | |
772 300 000AC230 IoReuseIrp | |
773 301 0019F6C8 IoSetActivityIdIrp | |
774 302 000B8F20 IoSetActivityIdThread | |
775 303 000BABDC IoSetCompletionRoutineEx | |
776 304 00606794 IoSetDependency | |
777 305 00535410 IoSetDeviceInterfacePropertyData | |
778 306 004C28E8 IoSetDeviceInterfaceState | |
779 307 00532A7C IoSetDevicePropertyData | |
780 308 00100250 IoSetDeviceToVerify | |
781 309 006009E8 IoSetFileObjectIgnoreSharing | |
782 30A 000FD138 IoSetFileOrigin | |
783 30B 001A030C IoSetFsTrackOffsetState | |
784 30C 001A0388 IoSetFsZeroingOffset | |
785 30D 001A03BC IoSetFsZeroingOffsetRequired | |
786 30E 000DAAE0 IoSetGenericIrpExtension | |
787 30F 000C2CD0 IoSetHardErrorOrVerifyDevice | |
788 310 004A7454 IoSetInformation | |
789 311 004AD30C IoSetIoCompletion | |
790 312 000A78A4 IoSetIoCompletionEx | |
791 313 000B0D80 IoSetIoPriorityHint | |
792 314 0019F750 IoSetIoPriorityHintIntoFileObject | |
793 315 0019F784 IoSetIoPriorityHintIntoThread | |
794 316 004972D8 IoSetIrpExtraCreateParameter | |
795 317 000B43F8 IoSetMasterIrpStatus | |
796 318 004ACBCC IoSetPartitionInformation | |
797 319 004ACB38 IoSetPartitionInformationEx | |
798 31A 003BB884 IoSetShareAccess | |
799 31B 00001E40 IoSetShareAccessEx | |
800 31C 00111AC8 IoSetStartIoAttributes | |
801 31D 00600A0C IoSetSystemPartition | |
802 31E 0003611C IoSetThreadHardErrorMode | |
803 31F 0004E6D0 IoSetTopLevelIrp | |
804 320 001A0424 IoSizeofGenericIrpExtension | |
805 321 000BE4E8 IoSizeofWorkItem | |
806 322 000C83AC IoStartNextPacket | |
807 323 0019F820 IoStartNextPacketByKey | |
808 324 000C863C IoStartPacket | |
809 325 0019F854 IoStartTimer | |
810 326 00397140 IoStatisticsLock | |
811 327 0019F878 IoStopTimer | |
812 328 000C00EC IoSynchronousCallDriver | |
813 329 00605D84 IoSynchronousInvalidateDeviceRelations | |
814 32A 000B61D4 IoSynchronousPageWrite | |
815 32B 001A4F30 IoTestDependency | |
816 32C 00029A80 IoThreadToProcess | |
817 32D 000CB0CC IoTransferActivityId | |
818 32E 001A55D4 IoTranslateBusAddress | |
819 32F 000C929C IoTryQueueWorkItem | |
820 330 000C09F4 IoUninitializeWorkItem | |
821 331 0076512C IoUnregisterBootDriverCallback | |
822 332 00601454 IoUnregisterContainerNotification | |
823 333 00600B74 IoUnregisterFileSystem | |
824 334 00600C60 IoUnregisterFsRegistrationChange | |
825 335 00601F78 IoUnregisterIoTracking | |
826 336 004E169C IoUnregisterPlugPlayNotification | |
827 337 004AE1F0 IoUnregisterPlugPlayNotificationEx | |
828 338 0019F884 IoUnregisterPriorityCallback | |
829 339 003B00A0 IoUnregisterShutdownNotification | |
830 33A 00493734 IoUpdateShareAccess | |
831 33B 000DE7C8 IoValidateDeviceIoControlAccess | |
832 33C 005FD288 IoVerifyPartitionTable | |
833 33D 00600D34 IoVerifyVolume | |
834 33E 00435DF4 IoVolumeDeviceToDosName | |
835 33F 004DD850 IoVolumeDeviceToGuid | |
836 340 004DD8D0 IoVolumeDeviceToGuidPath | |
837 341 00663D98 IoWMIAllocateInstanceIds | |
838 342 004EE05C IoWMIDeviceObjectToInstanceName | |
839 343 000F2C60 IoWMIDeviceObjectToProviderId | |
840 344 00663EDC IoWMIExecuteMethod | |
841 345 004EDFE8 IoWMIHandleToInstanceName | |
842 346 005066AC IoWMIOpenBlock | |
843 347 0053FA18 IoWMIQueryAllData | |
844 348 00664050 IoWMIQueryAllDataMultiple | |
845 349 005071AC IoWMIQuerySingleInstance | |
846 34A 00664114 IoWMIQuerySingleInstanceMultiple | |
847 34B 004F84FC IoWMIRegistrationControl | |
848 34C 00541FDC IoWMISetNotificationCallback | |
849 34D 006641E0 IoWMISetSingleInstance | |
850 34E 006642E8 IoWMISetSingleItem | |
851 34F 00664404 IoWMISuggestInstanceName | |
852 350 000F7FC8 IoWMIWriteEvent | |
853 351 000A7300 IoWithinStackLimits | |
854 352 000F8884 IoWriteErrorLogEntry | |
855 353 0030A1FC IoWriteOperationCount | |
856 354 005FBD5C IoWritePartitionTable | |
857 355 005FD300 IoWritePartitionTableEx | |
858 356 0030A210 IoWriteTransferCount | |
859 357 000240F0 IofCallDriver | |
860 358 0005A3B0 IofCompleteRequest | |
861 359 001A8568 KdAcquireDebuggerLock | |
862 35A 001A8690 KdChangeOption | |
863 35B 00306CE0 KdDebuggerEnabled | |
864 35C 00306CE1 KdDebuggerNotPresent | |
865 35D 001A8370 KdDeregisterPowerHandler | |
866 35E 00111AE4 KdDisableDebugger | |
867 35F 001A86F0 KdEnableDebugger | |
868 360 003058C8 KdEnteredDebugger | |
869 361 006B0A3C KdLogDbgPrint | |
870 362 001A8FD8 KdPollBreakIn | |
871 363 001A88D8 KdPowerTransition | |
872 364 00111C34 KdRefreshDebuggerNotPresent | |
873 365 001A846C KdRegisterPowerHandler | |
874 366 001A895C KdReleaseDebuggerLock | |
875 367 006AEFB0 KdSetEventLoggingPresent | |
876 368 00621674 KdSystemDebugControl | |
877 369 0008B400 KeAcquireGuardedMutex | |
878 36A 001A94E4 KeAcquireGuardedMutexUnsafe | |
879 36B 0005FCC0 KeAcquireInStackQueuedSpinLock | |
880 36C 00060F50 KeAcquireInStackQueuedSpinLockAtDpcLevel | |
881 36D 001AADEC KeAcquireInStackQueuedSpinLockForDpc | |
882 36E 001AA9C4 KeAcquireInStackQueuedSpinLockRaiseToSynch | |
883 36F 000AC4C0 KeAcquireInterruptSpinLock | |
884 370 0003E1B0 KeAcquireQueuedSpinLock | |
885 371 001AAA14 KeAcquireQueuedSpinLockRaiseToSynch | |
886 372 0007D780 KeAcquireSpinLockAtDpcLevel | |
887 373 001AAE0C KeAcquireSpinLockForDpc | |
888 374 0007D7B0 KeAcquireSpinLockRaiseToDpc | |
889 375 001AAF40 KeAcquireSpinLockRaiseToSynch | |
890 376 000FF504 KeAddGroupAffinityEx | |
891 377 001104DC KeAddProcessorAffinityEx | |
892 378 000FE8F0 KeAddProcessorGroupAffinity | |
893 379 005340DC KeAddSystemServiceTable | |
894 37A 000B4EC4 KeAlertThread | |
895 37B 005052AC KeAllocateCalloutStack | |
896 37C 004E108C KeAllocateCalloutStackEx | |
897 37D 000A4360 KeAndAffinityEx | |
898 37E 000FBE70 KeAndGroupAffinityEx | |
899 37F 000B0D40 KeAreAllApcsDisabled | |
900 380 000BF7DC KeAreApcsDisabled | |
901 381 000C30E4 KeAttachProcess | |
902 382 00122770 KeBugCheck | |
903 383 00122780 KeBugCheckEx | |
904 384 000953A0 KeCancelTimer | |
905 385 00070F84 KeCancelTimer2 | |
906 386 001A2A80 KeCapturePersistentThreadState | |
907 387 0010EBF0 KeCheckProcessorAffinityEx | |
908 388 001AB1C8 KeCheckProcessorGroupAffinity | |
909 389 0004A9E0 KeClearEvent | |
910 38A 00056070 KeClockInterruptNotify | |
911 38B 001A9384 KeClockTimerPowerChange | |
912 38C 001AB21C KeComplementAffinityEx | |
913 38D 000FC060 KeCopyAffinityEx | |
914 38E 000FFF48 KeCountSetBitsAffinityEx | |
915 38F 001AB884 KeCountSetBitsGroupAffinity | |
916 390 0007C400 KeDelayExecutionThread | |
917 391 001AC5DC KeDeregisterBugCheckCallback | |
918 392 0010F0AC KeDeregisterBugCheckReasonCallback | |
919 393 001A9E70 KeDeregisterNmiCallback | |
920 394 006229F4 KeDeregisterProcessorChangeCallback | |
921 395 000681C0 KeDetachProcess | |
922 396 001AD2A4 KeDispatchSecondaryInterrupt | |
923 397 000988B0 KeEnterCriticalRegion | |
924 398 000A83A0 KeEnterGuardedRegion | |
925 399 001AC69C KeEnterKernelDebugger | |
926 39A 000A4450 KeEnumerateNextProcessor | |
927 39B 000C3728 KeExpandKernelStackAndCallout | |
928 39C 00083E60 KeExpandKernelStackAndCalloutEx | |
929 39D 007633A8 KeFindConfigurationEntry | |
930 39E 007633C8 KeFindConfigurationNextEntry | |
931 39F 001AB270 KeFindFirstSetLeftAffinityEx | |
932 3A0 001AB2B0 KeFindFirstSetLeftGroupAffinity | |
933 3A1 001AB2D8 KeFindFirstSetRightAffinityEx | |
934 3A2 000FA364 KeFindFirstSetRightGroupAffinity | |
935 3A3 001AB324 KeFirstGroupAffinityEx | |
936 3A4 001ADB8C KeFlushEntireTb | |
937 3A5 000C3D30 KeFlushIoBuffers | |
938 3A6 000D863C KeFlushQueuedDpcs | |
939 3A7 003A87E0 KeForceEnableNx | |
940 3A8 004E6FC0 KeFreeCalloutStack | |
941 3A9 000B94CC KeGenericCallDpc | |
942 3AA 001A938C KeGetClockOwner | |
943 3AB 001A9394 KeGetClockTimerResolution | |
944 3AC 0000ACD0 KeGetCurrentIrql | |
945 3AD 000ACBC0 KeGetCurrentNodeNumber | |
946 3AE 000988D0 KeGetCurrentProcessorNumberEx | |
947 3AF 0000B8E0 KeGetCurrentThread | |
948 3B0 001A93A8 KeGetNextClockTickDuration | |
949 3B1 000A3E20 KeGetProcessorIndexFromNumber | |
950 3B2 000B4848 KeGetProcessorNumberFromIndex | |
951 3B3 000B0D74 KeGetRecommendedSharedDataAlignment | |
952 3B4 0011289C KeGetXSaveFeatureFlags | |
953 3B5 007601BC KeHwPolicyLocateResource | |
954 3B6 0010F654 KeInitializeAffinityEx | |
955 3B7 00083CD0 KeInitializeApc | |
956 3B8 001A30E4 KeInitializeCrashDumpHeader | |
957 3B9 000DF4C0 KeInitializeDeviceQueue | |
958 3BA 000822A0 KeInitializeDpc | |
959 3BB 000AF9B0 KeInitializeEnumerationContext | |
960 3BC 000F9910 KeInitializeEnumerationContextFromGroup | |
961 3BD 000240D0 KeInitializeEvent | |
962 3BE 0008162C KeInitializeGuardedMutex | |
963 3BF 000F5D74 KeInitializeInterrupt | |
964 3C0 0004D548 KeInitializeMutant | |
965 3C1 000C236C KeInitializeMutex | |
966 3C2 000BD93C KeInitializeQueue | |
967 3C3 00622B28 KeInitializeSecondaryInterruptServices | |
968 3C4 00082250 KeInitializeSemaphore | |
969 3C5 000B0380 KeInitializeSpinLock | |
970 3C6 00101510 KeInitializeThreadedDpc | |
971 3C7 000B24E0 KeInitializeTimer | |
972 3C8 00003658 KeInitializeTimer2 | |
973 3C9 0008227C KeInitializeTimerEx | |
974 3CA 000C8728 KeInsertByKeyDeviceQueue | |
975 3CB 001AE148 KeInsertDeviceQueue | |
976 3CC 001AE678 KeInsertHeadQueue | |
977 3CD 0006FA5C KeInsertQueue | |
978 3CE 000834B0 KeInsertQueueApc | |
979 3CF 0009EC40 KeInsertQueueDpc | |
980 3D0 001AB370 KeInterlockedClearProcessorAffinityEx | |
981 3D1 001AB3C0 KeInterlockedSetProcessorAffinityEx | |
982 3D2 000CC780 KeInvalidateAllCaches | |
983 3D3 000CCAC0 KeInvalidateRangeAllCaches | |
984 3D4 000F774C KeIpiGenericCall | |
985 3D5 000B0440 KeIsAttachedProcess | |
986 3D6 000ACBE0 KeIsEmptyAffinityEx | |
987 3D7 001AB40C KeIsEqualAffinityEx | |
988 3D8 00063BCC KeIsExecutingDpc | |
989 3D9 001AB484 KeIsSingleGroupAffinityEx | |
990 3DA 001AB4D4 KeIsSubsetAffinityEx | |
991 3DB 006223A0 KeIsWaitListEmpty | |
992 3DC 00383E9C KeLastBranchMSR | |
993 3DD 0000C180 KeLeaveCriticalRegion | |
994 3DE 0008B270 KeLeaveGuardedRegion | |
995 3DF 003A7B94 KeLoadMTRR | |
996 3E0 00386048 KeLoaderBlock | |
997 3E1 000633E0 KeLowerIrql | |
998 3E2 000F990C KeNotifyProcessorFreezeSupported | |
999 3E3 0038399A KeNumberProcessors | |
1000 3E4 001AB5F0 KeOrAffinityEx | |
1001 3E5 000C2378 KeProcessorGroupAffinity | |
1002 3E6 001AE6D8 KeProfileInterruptWithSource | |
1003 3E7 000B0590 KePulseEvent | |
1004 3E8 000A67D4 KeQueryActiveGroupCount | |
1005 3E9 00101EE8 KeQueryActiveProcessorAffinity | |
1006 3EA 001AA308 KeQueryActiveProcessorCount | |
1007 3EB 000B0A30 KeQueryActiveProcessorCountEx | |
1008 3EC 000EB324 KeQueryActiveProcessors | |
1009 3ED 000A3DC0 KeQueryDpcWatchdogInformation | |
1010 3EE 000D9CF0 KeQueryEffectivePriorityThread | |
1011 3EF 000C187C KeQueryGroupAffinity | |
1012 3F0 001AB70C KeQueryGroupAffinityEx | |
1013 3F1 00622EF8 KeQueryHardwareCounterConfiguration | |
1014 3F2 001A957C KeQueryHeteroCpuPolicyThread | |
1015 3F3 000B5B90 KeQueryHighestNodeNumber | |
1016 3F4 001AA144 KeQueryInterruptTimePrecise | |
1017 3F5 000B24FC KeQueryLogicalProcessorRelationship | |
1018 3F6 000B2F24 KeQueryMaximumGroupCount | |
1019 3F7 001AA3C4 KeQueryMaximumProcessorCount | |
1020 3F8 000B2E64 KeQueryMaximumProcessorCountEx | |
1021 3F9 000B5B9C KeQueryNodeActiveAffinity | |
1022 3FA 001113E0 KeQueryNodeMaximumProcessorCount | |
1023 3FB 000C38F4 KeQueryPrcbAddress | |
1024 3FC 0008A4B0 KeQueryPriorityThread | |
1025 3FD 00111934 KeQueryRuntimeThread | |
1026 3FE 00082150 KeQuerySystemTimePrecise | |
1027 3FF 000A4500 KeQueryTimeIncrement | |
1028 400 000DACFC KeQueryTotalCycleTimeThread | |
1029 401 000B0D10 KeQueryUnbiasedInterruptTime | |
1030 402 00060FC0 KeRaiseIrqlToDpcLevel | |
1031 403 001AA8FC KeRaiseUserException | |
1032 404 000AFB40 KeReadStateEvent | |
1033 405 000AFB40 KeReadStateMutant | |
1034 406 000AFB40 KeReadStateMutex | |
1035 407 000AFB40 KeReadStateQueue | |
1036 408 000AFB40 KeReadStateSemaphore | |
1037 409 000AFB40 KeReadStateTimer | |
1038 40A 00104980 KeRegisterBugCheckCallback | |
1039 40B 00104A78 KeRegisterBugCheckReasonCallback | |
1040 40C 001AA14C KeRegisterNmiCallback | |
1041 40D 005394AC KeRegisterProcessorChangeCallback | |
1042 40E 00003D70 KeReleaseGuardedMutex | |
1043 40F 000B6EBC KeReleaseGuardedMutexUnsafe | |
1044 410 0000AFC0 KeReleaseInStackQueuedSpinLock | |
1045 411 001AAE60 KeReleaseInStackQueuedSpinLockForDpc | |
1046 412 0001D410 KeReleaseInStackQueuedSpinLockFromDpcLevel | |
1047 413 000AF8E0 KeReleaseInterruptSpinLock | |
1048 414 00084B90 KeReleaseMutant | |
1049 415 00059F20 KeReleaseMutex | |
1050 416 00021410 KeReleaseQueuedSpinLock | |
1051 417 000601D0 KeReleaseSemaphore | |
1052 418 000A3720 KeReleaseSpinLock | |
1053 419 001AAED8 KeReleaseSpinLockForDpc | |
1054 41A 000A8370 KeReleaseSpinLockFromDpcLevel | |
1055 41B 001AE258 KeRemoveByKeyDeviceQueue | |
1056 41C 001AE3B8 KeRemoveByKeyDeviceQueueIfBusy | |
1057 41D 000C8528 KeRemoveDeviceQueue | |
1058 41E 001AE524 KeRemoveEntryDeviceQueue | |
1059 41F 001AB720 KeRemoveGroupAffinityEx | |
1060 420 00063BE0 KeRemoveProcessorAffinityEx | |
1061 421 001AB734 KeRemoveProcessorGroupAffinity | |
1062 422 000BF960 KeRemoveQueue | |
1063 423 000D4A08 KeRemoveQueueDpc | |
1064 424 000D4A10 KeRemoveQueueDpcEx | |
1065 425 00007980 KeRemoveQueueEx | |
1066 426 006223D0 KeRemoveSystemServiceTable | |
1067 427 001ADCF8 KeReportCacheIncoherentDevice | |
1068 428 0004A9E0 KeResetEvent | |
1069 429 000E5558 KeRestoreExtendedProcessorState | |
1070 42A 0011EA2C KeRestoreFloatingPointState | |
1071 42B 000BC4D0 KeRevertToUserAffinityThread | |
1072 42C 001A95E4 KeRevertToUserAffinityThreadEx | |
1073 42D 000BC50C KeRevertToUserGroupAffinityThread | |
1074 42E 000B57F0 KeRundownQueue | |
1075 42F 000E43C0 KeSaveExtendedProcessorState | |
1076 430 0011EA2C KeSaveFloatingPointState | |
1077 431 001232C0 KeSaveStateForHibernate | |
1078 432 00079710 KeSetActualBasePriorityThread | |
1079 433 000D8B28 KeSetAffinityThread | |
1080 434 000B9B94 KeSetBasePriorityThread | |
1081 435 00039F40 KeSetCoalescableTimer | |
1082 436 000F990C KeSetDmaIoCoherency | |
1083 437 0005D350 KeSetEvent | |
1084 438 001AB85C KeSetEventBoostPriority | |
1085 439 00622F40 KeSetHardwareCounterConfiguration | |
1086 43A 001A969C KeSetHeteroCpuPolicyThread | |
1087 43B 000CB6C0 KeSetIdealProcessorThread | |
1088 43C 000F9334 KeSetImportanceDpc | |
1089 43D 0004A9B0 KeSetKernelStackSwapEnable | |
1090 43E 0007A1D0 KeSetPriorityThread | |
1091 43F 00765134 KeSetProfileIrql | |
1092 440 001A96A8 KeSetSystemAffinityThread | |
1093 441 001A96B0 KeSetSystemAffinityThreadEx | |
1094 442 0007AF70 KeSetSystemGroupAffinityThread | |
1095 443 001ADE70 KeSetTargetProcessorDpc | |
1096 444 0010C524 KeSetTargetProcessorDpcEx | |
1097 445 00060800 KeSetTimer | |
1098 446 000A1350 KeSetTimer2 | |
1099 447 00039B70 KeSetTimerEx | |
1100 448 0000C580 KeShouldYieldProcessor | |
1101 449 000C2A58 KeSignalCallDpcDone | |
1102 44A 001ADF40 KeSignalCallDpcSynchronize | |
1103 44B 000612F0 KeStackAttachProcess | |
1104 44C 001AF828 KeStallWhileFrozen | |
1105 44D 006229FC KeStartDynamicProcessor | |
1106 44E 001AB758 KeSubtractAffinityEx | |
1107 44F 0012EA28 KeSweepLocalCaches | |
1108 450 001233C0 KeSynchronizeExecution | |
1109 451 000EA35C KeSynchronizeTimeToQpc | |
1110 452 001ADD04 KeSystemFullyCacheCoherent | |
1111 453 000826FC KeTestAlertThread | |
1112 454 000A6C30 KeTestSpinLock | |
1113 455 0002E3B0 KeTryToAcquireGuardedMutex | |
1114 456 001AAA6C KeTryToAcquireQueuedSpinLock | |
1115 457 001AAAE8 KeTryToAcquireQueuedSpinLockRaiseToSynch | |
1116 458 00001360 KeTryToAcquireSpinLockAtDpcLevel | |
1117 459 00060FD0 KeUnstackDetachProcess | |
1118 45A 001B01C4 KeUpdateThreadTag | |
1119 45B 004408C0 KeUserModeCallback | |
1120 45C 00008220 KeWaitForMultipleObjects | |
1121 45D 0000BBE0 KeWaitForMutexObject | |
1122 45E 0000BBE0 KeWaitForSingleObject | |
1123 45F 003B3710 KeWriteProtectPAT | |
1124 460 0000ACC0 KfRaiseIrql | |
1125 461 002F6AC0 KiBugCheckData | |
1126 462 0008B6A0 KiCheckForKernelApcDelivery | |
1127 463 00214EB8 KitLogFeatureUsage | |
1128 464 004EEB04 KseQueryDeviceData | |
1129 465 006253A4 KseQueryDeviceDataList | |
1130 466 004EE988 KseQueryDeviceFlags | |
1131 467 00521B38 KseRegisterShim | |
1132 468 00521B40 KseRegisterShimEx | |
1133 469 006255E4 KseSetDeviceFlags | |
1134 46A 00625FFC KseUnregisterShim | |
1135 46B 005285E4 LdrAccessResource | |
1136 46C 0064E758 LdrEnumResources | |
1137 46D 0064E9F4 LdrFindResourceDirectory_U | |
1138 46E 0064EA10 LdrFindResourceEx_U | |
1139 46F 005285EC LdrFindResource_U | |
1140 470 0046A60C LdrResFindResource | |
1141 471 00511400 LdrResFindResourceDirectory | |
1142 472 0046B2EC LdrResSearchResource | |
1143 473 003831C0 LpcPortObjectType | |
1144 474 00627CD8 LpcReplyWaitReplyPort | |
1145 475 003C83C4 LpcRequestPort | |
1146 476 005081B4 LpcRequestWaitReplyPort | |
1147 477 004918C8 LpcRequestWaitReplyPortEx | |
1148 478 00627CEC LpcSendWaitReceivePort | |
1149 479 00653EFC LsaCallAuthenticationPackage | |
1150 47A 00653F94 LsaDeregisterLogonProcess | |
1151 47B 00490DE4 LsaFreeReturnBuffer | |
1152 47C 00653FD8 LsaLogonUser | |
1153 47D 004E7110 LsaLookupAuthenticationPackage | |
1154 47E 004E718C LsaRegisterLogonProcess | |
1155 47F 0038399E Mm64BitPhysicalAddress | |
1156 480 0062B6FC MmAddPhysicalMemory | |
1157 481 0062B7B0 MmAddVerifierThunks | |
1158 482 001B9E2C MmAdjustWorkingSetSize | |
1159 483 001BA344 MmAdvanceMdl | |
1160 484 001BAA34 MmAllocateContiguousMemory | |
1161 485 000CAF74 MmAllocateContiguousMemorySpecifyCache | |
1162 486 001BAA70 MmAllocateContiguousMemorySpecifyCacheNode | |
1163 487 000C1328 MmAllocateContiguousNodeMemory | |
1164 488 004DB0D0 MmAllocateMappingAddress | |
1165 489 001BB260 MmAllocateMdlForIoSpace | |
1166 48A 000CBB70 MmAllocateNodePagesForMdlEx | |
1167 48B 0062B8B4 MmAllocateNonCachedMemory | |
1168 48C 000F9924 MmAllocatePagesForMdl | |
1169 48D 000CBB0C MmAllocatePagesForMdlEx | |
1170 48E 000C8340 MmAreMdlPagesCached | |
1171 48F 00383968 MmBadPointer | |
1172 490 000A8540 MmBuildMdlForNonPagedPool | |
1173 491 0002F6BC MmCanFileBeTruncated | |
1174 492 004DB780 MmCommitSessionMappedView | |
1175 493 001BC0DC MmCopyMemory | |
1176 494 00428F50 MmCopyVirtualMemory | |
1177 495 00093620 MmCreateMdl | |
1178 496 0062BF4C MmCreateMirror | |
1179 497 00423D80 MmCreateSection | |
1180 498 000BEC0C MmDisableModifiedWriteOfSection | |
1181 499 0004D810 MmDoesFileHaveUserWritableReferences | |
1182 49A 000BB294 MmFlushImageSection | |
1183 49B 000BB414 MmForceSectionClosed | |
1184 49C 000B1118 MmFreeContiguousMemory | |
1185 49D 000CB128 MmFreeContiguousMemorySpecifyCache | |
1186 49E 004DF468 MmFreeMappingAddress | |
1187 49F 0062BAE4 MmFreeNonCachedMemory | |
1188 4A0 000CB140 MmFreePagesFromMdl | |
1189 4A1 001BB364 MmGetCacheAttribute | |
1190 4A2 0062AEE0 MmGetMaximumFileSectionSize | |
1191 4A3 000AFB44 MmGetPhysicalAddress | |
1192 4A4 00505610 MmGetPhysicalMemoryRanges | |
1193 4A5 0046799C MmGetSystemRoutineAddress | |
1194 4A6 001BB3F0 MmGetVirtualForPhysical | |
1195 4A7 001BD548 MmGrowKernelStack | |
1196 4A8 00383808 MmHighestUserAddress | |
1197 4A9 00112C00 MmIsAddressValid | |
1198 4AA 006B6524 MmIsDriverSuspectForVerifier | |
1199 4AB 000EF9C4 MmIsDriverVerifying | |
1200 4AC 00507040 MmIsDriverVerifyingByAddress | |
1201 4AD 001BA4CC MmIsIoSpaceActive | |
1202 4AE 001BDA6C MmIsNonPagedSystemAddressValid | |
1203 4AF 001B63C0 MmIsRecursiveIoFault | |
1204 4B0 00001E2C MmIsThisAnNtAsSystem | |
1205 4B1 006B6394 MmIsVerifierEnabled | |
1206 4B2 004F2A00 MmLoadSystemImage | |
1207 4B3 00496420 MmLockPagableDataSection | |
1208 4B4 00496420 MmLockPagableImageSection | |
1209 4B5 0046CFE8 MmLockPagableSectionByHandle | |
1210 4B6 000B1690 MmMapIoSpace | |
1211 4B7 001BAF88 MmMapLockedPages | |
1212 4B8 00055A60 MmMapLockedPagesSpecifyCache | |
1213 4B9 001BAFAC MmMapLockedPagesWithReservedMapping | |
1214 4BA 000E43A4 MmMapMemoryDumpMdl | |
1215 4BB 003ABC20 MmMapUserAddressesToPage | |
1216 4BC 000B1690 MmMapVideoDisplay | |
1217 4BD 004DDCAC MmMapViewInSessionSpace | |
1218 4BE 004DDCD0 MmMapViewInSessionSpaceEx | |
1219 4BF 004E34CC MmMapViewInSystemSpace | |
1220 4C0 0042AC4C MmMapViewInSystemSpaceEx | |
1221 4C1 004390F0 MmMapViewOfSection | |
1222 4C2 001B92F8 MmMarkPhysicalMemoryAsBad | |
1223 4C3 001B96C4 MmMarkPhysicalMemoryAsGood | |
1224 4C4 000BDB74 MmMdlPageContentsState | |
1225 4C5 000E002C MmMdlPagesAreZero | |
1226 4C6 0049674C MmPageEntireDriver | |
1227 4C7 0041CFC0 MmPrefetchPages | |
1228 4C8 004D9C34 MmPrefetchVirtualAddresses | |
1229 4C9 00045620 MmProbeAndLockPages | |
1230 4CA 00492CE0 MmProbeAndLockProcessPages | |
1231 4CB 00044730 MmProbeAndLockSelectedPages | |
1232 4CC 000C0F50 MmProtectMdlSystemAddress | |
1233 4CD 000FA6C0 MmQuerySystemSize | |
1234 4CE 0062B704 MmRemovePhysicalMemory | |
1235 4CF 004965A8 MmResetDriverPaging | |
1236 4D0 004CE980 MmRotatePhysicalView | |
1237 4D1 00383948 MmSectionObjectType | |
1238 4D2 00493F40 MmSecureVirtualMemory | |
1239 4D3 0002B610 MmSetAddressRangeModified | |
1240 4D4 00112E00 MmSetBankedSection | |
1241 4D5 000936F0 MmSizeOfMdl | |
1242 4D6 00383920 MmSystemRangeStart | |
1243 4D7 001C0D14 MmTrimAllSystemPagableMemory | |
1244 4D8 004F5C50 MmUnloadSystemImage | |
1245 4D9 00098C78 MmUnlockPagableImageSection | |
1246 4DA 00061AF0 MmUnlockPages | |
1247 4DB 000B12C0 MmUnmapIoSpace | |
1248 4DC 00065A30 MmUnmapLockedPages | |
1249 4DD 001BB0B4 MmUnmapReservedMapping | |
1250 4DE 000B12C0 MmUnmapVideoDisplay | |
1251 4DF 004E68B8 MmUnmapViewInSessionSpace | |
1252 4E0 0042AC78 MmUnmapViewInSystemSpace | |
1253 4E1 0049D5E8 MmUnmapViewOfSection | |
1254 4E2 0042A7EC MmUnsecureVirtualMemory | |
1255 4E3 00383800 MmUserProbeAddress | |
1256 4E4 00700A90 NlsAnsiCodePage | |
1257 4E5 006A6180 NlsLeadByteInfo | |
1258 4E6 00700901 NlsMbCodePageTag | |
1259 4E7 00700900 NlsMbOemCodePageTag | |
1260 4E8 00700A94 NlsOemCodePage | |
1261 4E9 006A6168 NlsOemLeadByteInfo | |
1262 4EA 0067BEF8 NtAddAtom | |
1263 4EB 003C4A8C NtAdjustPrivilegesToken | |
1264 4EC 0048CCF0 NtAllocateLocallyUniqueId | |
1265 4ED 004A5874 NtAllocateUuids | |
1266 4EE 003D9ED0 NtAllocateVirtualMemory | |
1267 4EF 002372A0 NtBuildGUID | |
1268 4F0 00237400 NtBuildLab | |
1269 4F1 0024DFC0 NtBuildNumber | |
1270 4F2 003E6540 NtClose | |
1271 4F3 00001018 NtCommitComplete | |
1272 4F4 00001020 NtCommitEnlistment | |
1273 4F5 00001028 NtCommitTransaction | |
1274 4F6 003BDF94 NtConnectPort | |
1275 4F7 00001030 NtCreateEnlistment | |
1276 4F8 003E73B0 NtCreateEvent | |
1277 4F9 0041A4F0 NtCreateFile | |
1278 4FA 00001038 NtCreateResourceManager | |
1279 4FB 00423B00 NtCreateSection | |
1280 4FC 00001040 NtCreateTransaction | |
1281 4FD 00001048 NtCreateTransactionManager | |
1282 4FE 0049ED5C NtDeleteAtom | |
1283 4FF 00510440 NtDeleteFile | |
1284 500 003D7740 NtDeviceIoControlFile | |
1285 501 0043E3E0 NtDuplicateObject | |
1286 502 00423310 NtDuplicateToken | |
1287 503 00001050 NtEnumerateTransactionObject | |
1288 504 003F8490 NtFindAtom | |
1289 505 003D8D90 NtFreeVirtualMemory | |
1290 506 00001058 NtFreezeTransactions | |
1291 507 00419064 NtFsControlFile | |
1292 508 00678FDC NtGetEnvironmentVariableEx | |
1293 509 00001060 NtGetNotificationResourceManager | |
1294 50A 0030DDE0 NtGlobalFlag | |
1295 50B 0049B77C NtLockFile | |
1296 50C 004ADC70 NtMakePermanentObject | |
1297 50D 00425570 NtMapViewOfSection | |
1298 50E 00498BB4 NtNotifyChangeDirectoryFile | |
1299 50F 00001068 NtOpenEnlistment | |
1300 510 0041A48C NtOpenFile | |
1301 511 003E8A70 NtOpenProcess | |
1302 512 0048B62C NtOpenProcessToken | |
1303 513 0048B640 NtOpenProcessTokenEx | |
1304 514 00001070 NtOpenResourceManager | |
1305 515 003F1980 NtOpenThread | |
1306 516 003E9B60 NtOpenThreadToken | |
1307 517 003E9B80 NtOpenThreadTokenEx | |
1308 518 00001078 NtOpenTransaction | |
1309 519 00001080 NtOpenTransactionManager | |
1310 51A 00001088 NtPrePrepareComplete | |
1311 51B 00001090 NtPrePrepareEnlistment | |
1312 51C 00001098 NtPrepareComplete | |
1313 51D 000010A0 NtPrepareEnlistment | |
1314 51E 000010A8 NtPropagationComplete | |
1315 51F 000010B0 NtPropagationFailed | |
1316 520 0048A404 NtQueryDirectoryFile | |
1317 521 00493058 NtQueryEaFile | |
1318 522 00679AFC NtQueryEnvironmentVariableInfoEx | |
1319 523 00440734 NtQueryInformationAtom | |
1320 524 000010B8 NtQueryInformationEnlistment | |
1321 525 0041EC50 NtQueryInformationFile | |
1322 526 00467C10 NtQueryInformationProcess | |
1323 527 000010C0 NtQueryInformationResourceManager | |
1324 528 003FDB20 NtQueryInformationThread | |
1325 529 003F47E0 NtQueryInformationToken | |
1326 52A 000010C8 NtQueryInformationTransaction | |
1327 52B 000010D0 NtQueryInformationTransactionManager | |
1328 52C 00602828 NtQueryQuotaInformationFile | |
1329 52D 003F4410 NtQuerySecurityAttributesToken | |
1330 52E 00445370 NtQuerySecurityObject | |
1331 52F 003EB180 NtQuerySystemInformation | |
1332 530 0049A5DC NtQuerySystemInformationEx | |
1333 531 00420430 NtQueryVolumeInformationFile | |
1334 532 004352F0 NtReadFile | |
1335 533 000010D8 NtReadOnlyEnlistment | |
1336 534 000010E0 NtRecoverEnlistment | |
1337 535 000010E8 NtRecoverResourceManager | |
1338 536 000010F0 NtRecoverTransactionManager | |
1339 537 004D574C NtRequestPort | |
1340 538 004918F8 NtRequestWaitReplyPort | |
1341 539 000010F8 NtRollbackComplete | |
1342 53A 00001100 NtRollbackEnlistment | |
1343 53B 00001108 NtRollbackTransaction | |
1344 53C 00653A50 NtSetCachedSigningLevel | |
1345 53D 00602098 NtSetEaFile | |
1346 53E 00426960 NtSetEvent | |
1347 53F 00001110 NtSetInformationEnlistment | |
1348 540 000499F0 NtSetInformationFile | |
1349 541 0040C3F0 NtSetInformationProcess | |
1350 542 00001118 NtSetInformationResourceManager | |
1351 543 004334D0 NtSetInformationThread | |
1352 544 003C08F0 NtSetInformationToken | |
1353 545 00001120 NtSetInformationTransaction | |
1354 546 0044DAD8 NtSetInformationVirtualMemory | |
1355 547 006030F4 NtSetQuotaInformationFile | |
1356 548 00420C8C NtSetSecurityObject | |
1357 549 004AC33C NtSetVolumeInformationFile | |
1358 54A 00673798 NtShutdownSystem | |
1359 54B 00001128 NtThawTransactions | |
1360 54C 0046BE40 NtTraceControl | |
1361 54D 0009D960 NtTraceEvent | |
1362 54E 0049DE24 NtUnlockFile | |
1363 54F 00544E4C NtVdmControl | |
1364 550 003D3D20 NtWaitForSingleObject | |
1365 551 0041F770 NtWriteFile | |
1366 552 0050819C ObAssignSecurity | |
1367 553 00496D38 ObCheckCreateObjectAccess | |
1368 554 0048E780 ObCheckObjectAccess | |
1369 555 003E9A48 ObCloseHandle | |
1370 556 00425360 ObCreateObject | |
1371 557 00522D0C ObCreateObjectType | |
1372 558 0041CB5C ObDeleteCapturedInsertInfo | |
1373 559 000C09DC ObDereferenceObject | |
1374 55A 00036074 ObDereferenceObjectDeferDelete | |
1375 55B 00048AE0 ObDereferenceObjectDeferDeleteWithTag | |
1376 55C 00423040 ObDereferenceSecurityDescriptor | |
1377 55D 0043E590 ObDuplicateObject | |
1378 55E 0048C390 ObFindHandleForObject | |
1379 55F 00635C44 ObGetFilterVersion | |
1380 560 004E366C ObGetObjectSecurity | |
1381 561 004A20C8 ObGetObjectType | |
1382 562 003C4504 ObInsertObject | |
1383 563 0053A68C ObIsDosDeviceLocallyMapped | |
1384 564 000CA69C ObIsKernelHandle | |
1385 565 00422B30 ObLogSecurityDescriptor | |
1386 566 004E19B8 ObMakeTemporaryObject | |
1387 567 003CF9D0 ObOpenObjectByName | |
1388 568 003E9480 ObOpenObjectByPointer | |
1389 569 00634AB8 ObOpenObjectByPointerWithTag | |
1390 56A 0049A528 ObQueryNameInfo | |
1391 56B 00418CC0 ObQueryNameString | |
1392 56C 00499C44 ObQueryObjectAuditingByHandle | |
1393 56D 003D3E80 ObReferenceObjectByHandle | |
1394 56E 003D3EB0 ObReferenceObjectByHandleWithTag | |
1395 56F 003C2A80 ObReferenceObjectByName | |
1396 570 000A91F0 ObReferenceObjectByPointer | |
1397 571 000247D0 ObReferenceObjectByPointerWithTag | |
1398 572 0000CD00 ObReferenceObjectSafe | |
1399 573 0000CD40 ObReferenceObjectSafeWithTag | |
1400 574 00490D50 ObReferenceSecurityDescriptor | |
1401 575 005151F4 ObRegisterCallbacks | |
1402 576 0042281C ObReleaseObjectSecurity | |
1403 577 00494F64 ObSetHandleAttributes | |
1404 578 00421A00 ObSetSecurityDescriptorInfo | |
1405 579 00421840 ObSetSecurityObjectByPointer | |
1406 57A 00635C4C ObUnRegisterCallbacks | |
1407 57B 003D7150 ObWaitForMultipleObjects | |
1408 57C 004EC680 ObWaitForSingleObject | |
1409 57D 0000B7E0 ObfDereferenceObject | |
1410 57E 0000C1D0 ObfDereferenceObjectWithTag | |
1411 57F 0000B8A0 ObfReferenceObject | |
1412 580 0000B3C0 ObfReferenceObjectWithTag | |
1413 581 00325000 POGOBuffer | |
1414 582 004915A4 PcwAddInstance | |
1415 583 0050F7F4 PcwCloseInstance | |
1416 584 00539190 PcwCreateInstance | |
1417 585 00533C98 PcwRegister | |
1418 586 0067BFB8 PcwUnregister | |
1419 587 00085940 PfFileInfoNotify | |
1420 588 0064EC38 PfxFindPrefix | |
1421 589 0064ED04 PfxInitialize | |
1422 58A 0064ED10 PfxInsertPrefix | |
1423 58B 0064EE24 PfxRemovePrefix | |
1424 58C 000F9640 PoCallDriver | |
1425 58D 00112E00 PoCancelDeviceNotify | |
1426 58E 000DE264 PoClearPowerRequest | |
1427 58F 000C8DC4 PoCpuIdledSinceLastCallImprecise | |
1428 590 00478CC0 PoCreatePowerRequest | |
1429 591 004792C0 PoDeletePowerRequest | |
1430 592 00511480 PoDisableSleepStates | |
1431 593 001D7E1C PoEndDeviceBusy | |
1432 594 00082240 PoEnergyEstimationEnabled | |
1433 595 000955D4 PoFxActivateComponent | |
1434 596 00100080 PoFxCompleteDevicePowerNotRequired | |
1435 597 000C177C PoFxCompleteIdleCondition | |
1436 598 001D8014 PoFxCompleteIdleState | |
1437 599 0063AC08 PoFxEnableDStateReporting | |
1438 59A 00095940 PoFxIdleComponent | |
1439 59B 001D808C PoFxIssueComponentPerfStateChange | |
1440 59C 001D80B0 PoFxIssueComponentPerfStateChangeMultiple | |
1441 59D 000E9C64 PoFxNotifySurprisePowerOn | |
1442 59E 001D813C PoFxPowerControl | |
1443 59F 001D8210 PoFxPowerOnCrashdumpDevice | |
1444 5A0 00110D6C PoFxProcessorNotification | |
1445 5A1 001D8264 PoFxQueryCurrentComponentPerfState | |
1446 5A2 0063ACDC PoFxRegisterComponentPerfStates | |
1447 5A3 00530934 PoFxRegisterCoreDevice | |
1448 5A4 004EDECC PoFxRegisterCrashdumpDevice | |
1449 5A5 00530A54 PoFxRegisterDevice | |
1450 5A6 0063AD38 PoFxRegisterPlugin | |
1451 5A7 001D82C0 PoFxRegisterPluginEx | |
1452 5A8 0063AD44 PoFxRegisterPrimaryDevice | |
1453 5A9 000F4114 PoFxReportDevicePoweredOn | |
1454 5AA 00112770 PoFxSetComponentLatency | |
1455 5AB 00112634 PoFxSetComponentResidency | |
1456 5AC 001D82C8 PoFxSetComponentWake | |
1457 5AD 0010EEFC PoFxSetDeviceIdleTimeout | |
1458 5AE 0010C594 PoFxStartDevicePowerManagement | |
1459 5AF 0063AE4C PoFxUnregisterDevice | |
1460 5B0 001D5418 PoGetProcessorIdleAccounting | |
1461 5B1 000EA338 PoGetSystemWake | |
1462 5B2 001D5444 PoInitiateProcessorWake | |
1463 5B3 001DB410 PoLatencySensitivityHint | |
1464 5B4 001DB53C PoNotifyMediaBuffering | |
1465 5B5 00098590 PoNotifyVSyncChange | |
1466 5B6 000E9E6C PoQueryWatchdogTime | |
1467 5B7 0063B8A4 PoQueueShutdownWorkItem | |
1468 5B8 0063A7F4 PoReenableSleepStates | |
1469 5B9 0051545C PoRegisterCoalescingCallback | |
1470 5BA 000014F0 PoRegisterDeviceForIdleDetection | |
1471 5BB 00112E00 PoRegisterDeviceNotify | |
1472 5BC 004DB9B0 PoRegisterPowerSettingCallback | |
1473 5BD 001DC014 PoRegisterSystemState | |
1474 5BE 000F4D0C PoRequestPowerIrp | |
1475 5BF 00528168 PoRequestShutdownEvent | |
1476 5C0 001D7E24 PoSetDeviceBusyEx | |
1477 5C1 003A78BC PoSetFixedWakeSource | |
1478 5C2 000E40BC PoSetHiberRange | |
1479 5C3 000A48DC PoSetPowerRequest | |
1480 5C4 000F6DB4 PoSetPowerState | |
1481 5C5 001DC0E4 PoSetSystemState | |
1482 5C6 001D53C8 PoSetSystemWake | |
1483 5C7 000E0FB8 PoSetUserPresent | |
1484 5C8 0063C6C8 PoShutdownBugCheck | |
1485 5C9 001D7E2C PoStartDeviceBusy | |
1486 5CA 000F990C PoStartNextPowerIrp | |
1487 5CB 0063B9B4 PoUnregisterCoalescingCallback | |
1488 5CC 004AD338 PoUnregisterPowerSettingCallback | |
1489 5CD 001DC0F0 PoUnregisterSystemState | |
1490 5CE 004EA054 PoUserShutdownCancelled | |
1491 5CF 004E9184 PoUserShutdownInitiated | |
1492 5D0 0048FA60 ProbeForRead | |
1493 5D1 003CEFB0 ProbeForWrite | |
1494 5D2 00492CB4 PsAcquireProcessExitSynchronization | |
1495 5D3 00527300 PsAssignImpersonationToken | |
1496 5D4 000730E8 PsChargePoolQuota | |
1497 5D5 000160A0 PsChargeProcessNonPagedPoolQuota | |
1498 5D6 00482A8C PsChargeProcessPagedPoolQuota | |
1499 5D7 00073110 PsChargeProcessPoolQuota | |
1500 5D8 004A6768 PsChargeProcessWakeCounter | |
1501 5D9 0047BE00 PsCreateSystemThread | |
1502 5DA 0047BE40 PsCreateSystemThreadEx | |
1503 5DB 004A40A4 PsDereferenceImpersonationToken | |
1504 5DC 004A7F84 PsDereferenceKernelStack | |
1505 5DD 004987E0 PsDereferencePrimaryToken | |
1506 5DE 004E4F20 PsDisableImpersonation | |
1507 5DF 0001D0D0 PsEnterPriorityRegion | |
1508 5E0 00515140 PsEstablishWin32Callouts | |
1509 5E1 00646150 PsGetContextThread | |
1510 5E2 0000B750 PsGetCurrentProcess | |
1511 5E3 000194B0 PsGetCurrentProcessId | |
1512 5E4 0009B400 PsGetCurrentProcessSessionId | |
1513 5E5 000A83C0 PsGetCurrentProcessWin32Process | |
1514 5E6 000A34F0 PsGetCurrentProcessWow64Process | |
1515 5E7 0000B8E0 PsGetCurrentThread | |
1516 5E8 000B4888 PsGetCurrentThreadId | |
1517 5E9 000C282C PsGetCurrentThreadPreviousMode | |
1518 5EA 000C2674 PsGetCurrentThreadProcess | |
1519 5EB 000194B0 PsGetCurrentThreadProcessId | |
1520 5EC 001E3BC8 PsGetCurrentThreadStackBase | |
1521 5ED 001E3BD8 PsGetCurrentThreadStackLimit | |
1522 5EE 000BE6D8 PsGetCurrentThreadTeb | |
1523 5EF 00092B30 PsGetCurrentThreadWin32Thread | |
1524 5F0 000A3D90 PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion | |
1525 5F1 001E4080 PsGetEffectiveContainerId | |
1526 5F2 000C3CCC PsGetJobLock | |
1527 5F3 001E3BE8 PsGetJobSessionId | |
1528 5F4 000C35A0 PsGetJobUIRestrictionsClass | |
1529 5F5 001E3BF0 PsGetProcessCommonJob | |
1530 5F6 000BA9E8 PsGetProcessCreateTimeQuadPart | |
1531 5F7 000C325C PsGetProcessDebugPort | |
1532 5F8 000E0DFC PsGetProcessExitProcessCalled | |
1533 5F9 00643D30 PsGetProcessExitStatus | |
1534 5FA 0049379C PsGetProcessExitTime | |
1535 5FB 000B7084 PsGetProcessId | |
1536 5FC 000BDC08 PsGetProcessImageFileName | |
1537 5FD 000C2D60 PsGetProcessInheritedFromUniqueProcessId | |
1538 5FE 000BA168 PsGetProcessJob | |
1539 5FF 000BC690 PsGetProcessPeb | |
1540 600 001E3C28 PsGetProcessPriorityClass | |
1541 601 000C2688 PsGetProcessProtection | |
1542 602 0009790C PsGetProcessSectionBaseAddress | |
1543 603 0049FE18 PsGetProcessSecurityPort | |
1544 604 00036050 PsGetProcessSessionId | |
1545 605 0004BB20 PsGetProcessSessionIdEx | |
1546 606 001E3C74 PsGetProcessSignatureLevel | |
1547 607 000B5D38 PsGetProcessWin32Process | |
1548 608 000BD8D8 PsGetProcessWin32WindowStation | |
1549 609 000B7FF0 PsGetProcessWow64Process | |
1550 60A 001E3C30 PsGetThreadCreateTime | |
1551 60B 00643D38 PsGetThreadExitStatus | |
1552 60C 000E146C PsGetThreadFreezeCount | |
1553 60D 0011178C PsGetThreadHardErrorsAreDisabled | |
1554 60E 000B63C4 PsGetThreadId | |
1555 60F 00029A80 PsGetThreadProcess | |
1556 610 000BC12C PsGetThreadProcessId | |
1557 611 0046A3F4 PsGetThreadSessionId | |
1558 612 000B5F20 PsGetThreadTeb | |
1559 613 000B75C0 PsGetThreadWin32Thread | |
1560 614 000F92BC PsGetVersion | |
1561 615 004342F0 PsImpersonateClient | |
1562 616 00383830 PsInitialSystemProcess | |
1563 617 0004C154 PsIsCurrentThreadPrefetching | |
1564 618 0010AEC4 PsIsDiskCountersEnabled | |
1565 619 00643DA4 PsIsProcessBeingDebugged | |
1566 61A 000B8F38 PsIsProtectedProcess | |
1567 61B 000C22C4 PsIsProtectedProcessLight | |
1568 61C 00081D4C PsIsSystemProcess | |
1569 61D 000B823C PsIsSystemThread | |
1570 61E 0050AC68 PsIsThreadImpersonating | |
1571 61F 000BAD48 PsIsThreadTerminating | |
1572 620 00383A88 PsJobType | |
1573 621 0001D190 PsLeavePriorityRegion | |
1574 622 002EF8B0 PsLoadedModuleList | |
1575 623 002EF840 PsLoadedModuleResource | |
1576 624 0044CF3C PsLookupProcessByProcessId | |
1577 625 0049D1E0 PsLookupProcessThreadByCid | |
1578 626 003F19A8 PsLookupThreadByThreadId | |
1579 627 00383828 PsProcessType | |
1580 628 004A39AC PsQueryProcessAttributesByToken | |
1581 629 00643DB0 PsQueryProcessExceptionFlags | |
1582 62A 004AA2E0 PsQueryTotalCycleTimeProcess | |
1583 62B 00469F40 PsReferenceImpersonationToken | |
1584 62C 004A8110 PsReferenceKernelStack | |
1585 62D 003CF0E0 PsReferencePrimaryToken | |
1586 62E 004380C8 PsReferenceProcessFilePointer | |
1587 62F 00493AF8 PsReleaseProcessExitSynchronization | |
1588 630 00643FEC PsReleaseProcessWakeCounter | |
1589 631 00648F24 PsRemoveCreateThreadNotifyRoutine | |
1590 632 00649078 PsRemoveLoadImageNotifyRoutine | |
1591 633 005110E0 PsRestoreImpersonation | |
1592 634 004A57B0 PsResumeProcess | |
1593 635 00072C60 PsReturnPoolQuota | |
1594 636 000174A0 PsReturnProcessNonPagedPoolQuota | |
1595 637 00036148 PsReturnProcessPagedPoolQuota | |
1596 638 00541864 PsRevertThreadToSelf | |
1597 639 00645338 PsRevertToSelf | |
1598 63A 00646168 PsSetContextThread | |
1599 63B 00515454 PsSetCreateProcessNotifyRoutine | |
1600 63C 005153D8 PsSetCreateProcessNotifyRoutineEx | |
1601 63D 005153E0 PsSetCreateThreadNotifyRoutine | |
1602 63E 00417ECC PsSetCurrentThreadPrefetching | |
1603 63F 00645A24 PsSetLegoNotifyRoutine | |
1604 640 00515188 PsSetLoadImageNotifyRoutine | |
1605 641 0040DDC4 PsSetProcessPriorityByClass | |
1606 642 001E3C38 PsSetProcessPriorityClass | |
1607 643 00644040 PsSetProcessSecurityPort | |
1608 644 00498AA8 PsSetProcessWin32Process | |
1609 645 004A7B28 PsSetProcessWindowStation | |
1610 646 001113C8 PsSetThreadHardErrorsAreDisabled | |
1611 647 004A2F4C PsSetThreadWin32Thread | |
1612 648 006494D0 PsSuspendProcess | |
1613 649 0048FEC0 PsTerminateSystemThread | |
1614 64A 00383848 PsThreadType | |
1615 64B 00700A9C PsUILanguageComitted | |
1616 64C 001E3C40 PsUpdateComponentPower | |
1617 64D 000BA3AC PsUpdateDiskCounters | |
1618 64E 001E4054 PsWrapApcWow64Thread | |
1619 64F 004DE0E8 RtlAbsoluteToSelfRelativeSD | |
1620 650 003B9350 RtlAddAccessAllowedAce | |
1621 651 00536B40 RtlAddAccessAllowedAceEx | |
1622 652 0064BB40 RtlAddAccessAllowedObjectAce | |
1623 653 00536BD0 RtlAddAccessDeniedAceEx | |
1624 654 0064BB9C RtlAddAccessDeniedObjectAce | |
1625 655 0048D6F4 RtlAddAce | |
1626 656 004A7694 RtlAddAtomToAtomTable | |
1627 657 0008521C RtlAddAtomToAtomTableEx | |
1628 658 0064BC1C RtlAddAuditAccessAceEx | |
1629 659 0064BC40 RtlAddAuditAccessObjectAce | |
1630 65A 0051EFC4 RtlAddRange | |
1631 65B 0064BCA8 RtlAddResourceAttributeAce | |
1632 65C 000ADBC8 RtlAllocateHeap | |
1633 65D 00465F60 RtlAnsiCharToUnicodeChar | |
1634 65E 0064BA98 RtlAnsiStringToUnicodeSize | |
1635 65F 00465E64 RtlAnsiStringToUnicodeString | |
1636 660 0064BAE0 RtlAppendAsciizToString | |
1637 661 004A6B78 RtlAppendStringToString | |
1638 662 00032618 RtlAppendUnicodeStringToString | |
1639 663 00094150 RtlAppendUnicodeToString | |
1640 664 00490D68 RtlAreAllAccessesGranted | |
1641 665 004A8118 RtlAreAnyAccessesGranted | |
1642 666 000BA86C RtlAreBitsClear | |
1643 667 00062DE0 RtlAreBitsClearEx | |
1644 668 000BA6D0 RtlAreBitsSet | |
1645 669 00062840 RtlAreBitsSetEx | |
1646 66A 001E88BC RtlAssert | |
1647 66B 0004BD8C RtlAvlInsertNodeEx | |
1648 66C 00016F00 RtlAvlRemoveNode | |
1649 66D 001285E0 RtlCaptureContext | |
1650 66E 00027010 RtlCaptureStackBackTrace | |
1651 66F 005198F8 RtlCharToInteger | |
1652 670 000E0CC4 RtlCheckPortableOperatingSystem | |
1653 671 004E5C40 RtlCheckRegistryKey | |
1654 672 001E4CDC RtlCheckTokenCapability | |
1655 673 000F8C64 RtlCheckTokenMembership | |
1656 674 000F8C70 RtlCheckTokenMembershipEx | |
1657 675 00032A58 RtlClearAllBits | |
1658 676 000C13B0 RtlClearAllBitsEx | |
1659 677 000BDBA8 RtlClearBit | |
1660 678 001E72DC RtlClearBitEx | |
1661 679 00019220 RtlClearBits | |
1662 67A 00068990 RtlClearBitsEx | |
1663 67B 000F83C0 RtlCmDecodeMemIoResource | |
1664 67C 0010468C RtlCmEncodeMemIoResource | |
1665 67D 000C0AF0 RtlCompareAltitudes | |
1666 67E 00128B20 RtlCompareMemory | |
1667 67F 00128BA0 RtlCompareMemoryUlong | |
1668 680 0048B2C4 RtlCompareString | |
1669 681 0045E1E0 RtlCompareUnicodeString | |
1670 682 00474B20 RtlCompareUnicodeStrings | |
1671 683 000A316C RtlCompressBuffer | |
1672 684 0064B1BC RtlCompressChunks | |
1673 685 000DA3B8 RtlComputeCrc32 | |
1674 686 000AC850 RtlContractHashTable | |
1675 687 00467628 RtlConvertSidToUnicodeString | |
1676 688 000E5780 RtlCopyBitMap | |
1677 689 004A1144 RtlCopyLuid | |
1678 68A 0064D618 RtlCopyLuidAndAttributesArray | |
1679 68B 0012E2C0 RtlCopyMemory | |
1680 68C 00128BD0 RtlCopyMemoryNonTemporal | |
1681 68D 0051F9B8 RtlCopyRangeList | |
1682 68E 003F296C RtlCopySid | |
1683 68F 003F7810 RtlCopySidAndAttributesArray | |
1684 690 001E4CA0 RtlCopyString | |
1685 691 00023B80 RtlCopyUnicodeString | |
1686 692 001E8B1C RtlCrc32 | |
1687 693 000D814C RtlCrc64 | |
1688 694 003EF034 RtlCreateAcl | |
1689 695 004804F0 RtlCreateAtomTable | |
1690 696 000A79F8 RtlCreateAtomTableEx | |
1691 697 000DA48C RtlCreateHashTable | |
1692 698 00111BCC RtlCreateHashTableEx | |
1693 699 005015D8 RtlCreateHeap | |
1694 69A 0054231C RtlCreateRegistryKey | |
1695 69B 003B92BC RtlCreateSecurityDescriptor | |
1696 69C 004AD5E4 RtlCreateSystemVolumeInformationFolder | |
1697 69D 00465D5C RtlCreateUnicodeString | |
1698 69E 0064B7A8 RtlCreateUserThread | |
1699 69F 0052D454 RtlCultureNameToLCID | |
1700 6A0 0064C940 RtlCustomCPToUnicodeN | |
1701 6A1 001E4C24 RtlDecompressBuffer | |
1702 6A2 00088488 RtlDecompressBufferEx | |
1703 6A3 000F329C RtlDecompressBufferEx2 | |
1704 6A4 0064B318 RtlDecompressChunks | |
1705 6A5 0064B560 RtlDecompressFragment | |
1706 6A6 000DAB9C RtlDecompressFragmentEx | |
1707 6A7 000AB750 RtlDelete | |
1708 6A8 004AC97C RtlDeleteAce | |
1709 6A9 00440C88 RtlDeleteAtomFromAtomTable | |
1710 6AA 000AB57C RtlDeleteElementGenericTable | |
1711 6AB 00094B50 RtlDeleteElementGenericTableAvl | |
1712 6AC 00094C34 RtlDeleteElementGenericTableAvlEx | |
1713 6AD 000F9988 RtlDeleteHashTable | |
1714 6AE 000AB4B0 RtlDeleteNoSplay | |
1715 6AF 0051FD54 RtlDeleteOwnersRanges | |
1716 6B0 0051FC90 RtlDeleteRange | |
1717 6B1 0053E568 RtlDeleteRegistryValue | |
1718 6B2 0064B5F0 RtlDescribeChunk | |
1719 6B3 004A47EC RtlDestroyAtomTable | |
1720 6B4 0050760C RtlDestroyHeap | |
1721 6B5 0064B810 RtlDowncaseUnicodeChar | |
1722 6B6 00493B1C RtlDowncaseUnicodeString | |
1723 6B7 00464D58 RtlDuplicateUnicodeString | |
1724 6B8 0064F054 RtlEmptyAtomTable | |
1725 6B9 000BE904 RtlEndEnumerationHashTable | |
1726 6BA 000FE3AC RtlEndWeakEnumerationHashTable | |
1727 6BB 000A8A50 RtlEnumerateEntryHashTable | |
1728 6BC 000EA260 RtlEnumerateGenericTable | |
1729 6BD 000946BC RtlEnumerateGenericTableAvl | |
1730 6BE 000945B8 RtlEnumerateGenericTableLikeADirectory | |
1731 6BF 000AB344 RtlEnumerateGenericTableWithoutSplaying | |
1732 6C0 000946D0 RtlEnumerateGenericTableWithoutSplayingAvl | |
1733 6C1 0064D640 RtlEqualLuid | |
1734 6C2 000247A0 RtlEqualSid | |
1735 6C3 000AC9E0 RtlEqualString | |
1736 6C4 00464C30 RtlEqualUnicodeString | |
1737 6C5 0064FDEC RtlEqualWnfChangeStamps | |
1738 6C6 001E8D44 RtlEthernetAddressToStringA | |
1739 6C7 001E8F7C RtlEthernetAddressToStringW | |
1740 6C8 001E91E0 RtlEthernetStringToAddressA | |
1741 6C9 001E99E0 RtlEthernetStringToAddressW | |
1742 6CA 000FD99C RtlExpandHashTable | |
1743 6CB 001E72E8 RtlExtractBitMap | |
1744 6CC 00128CF0 RtlFillMemory | |
1745 6CD 00060750 RtlFindAceByType | |
1746 6CE 00050580 RtlFindClearBits | |
1747 6CF 0006E854 RtlFindClearBitsAndSet | |
1748 6D0 00069CB8 RtlFindClearBitsAndSetEx | |
1749 6D1 001E7478 RtlFindClearBitsEx | |
1750 6D2 000A31B0 RtlFindClearRuns | |
1751 6D3 001E8A74 RtlFindClosestEncodableLength | |
1752 6D4 000C2C38 RtlFindFirstRunClear | |
1753 6D5 000BA5A4 RtlFindLastBackwardRunClear | |
1754 6D6 000BA9D8 RtlFindLeastSignificantBit | |
1755 6D7 001E7A28 RtlFindLongestRunClear | |
1756 6D8 004D45F0 RtlFindMessage | |
1757 6D9 000B5E30 RtlFindMostSignificantBit | |
1758 6DA 0002C154 RtlFindNextForwardRunClear | |
1759 6DB 000E3E58 RtlFindNextForwardRunClearEx | |
1760 6DC 0051F33C RtlFindRange | |
1761 6DD 00050180 RtlFindSetBits | |
1762 6DE 001E7CC8 RtlFindSetBitsAndClear | |
1763 6DF 000CDE10 RtlFindSetBitsAndClearEx | |
1764 6E0 000E3ACC RtlFindSetBitsEx | |
1765 6E1 004899AC RtlFindUnicodePrefix | |
1766 6E2 003EDEC0 RtlFirstFreeAce | |
1767 6E3 00466FE8 RtlFormatCurrentUserKeyPath | |
1768 6E4 005433F4 RtlFormatMessage | |
1769 6E5 0041CAC8 RtlFreeAnsiString | |
1770 6E6 000AD230 RtlFreeHeap | |
1771 6E7 004A7F48 RtlFreeOemString | |
1772 6E8 0051FE20 RtlFreeRangeList | |
1773 6E9 0041CAC8 RtlFreeUnicodeString | |
1774 6EA 00459EE8 RtlGUIDFromString | |
1775 6EB 00490828 RtlGenerate8dot3Name | |
1776 6EC 00529F80 RtlGenerateClass5Guid | |
1777 6ED 000BE678 RtlGetAce | |
1778 6EE 001E5134 RtlGetAppContainerNamedObjectPath | |
1779 6EF 0064D658 RtlGetAppContainerParent | |
1780 6F0 004AB1FC RtlGetAppContainerSidType | |
1781 6F1 001E89DC RtlGetCallersAddress | |
1782 6F2 00088E28 RtlGetCompressionWorkSpaceSize | |
1783 6F3 004ADEB4 RtlGetControlSecurityDescriptor | |
1784 6F4 0003550C RtlGetDaclSecurityDescriptor | |
1785 6F5 004D6FC0 RtlGetDefaultCodePage | |
1786 6F6 000BB984 RtlGetElementGenericTable | |
1787 6F7 001E8C2C RtlGetElementGenericTableAvl | |
1788 6F8 001E9B1C RtlGetEnabledExtendedFeatures | |
1789 6F9 0051F614 RtlGetFirstRange | |
1790 6FA 00537800 RtlGetGroupSecurityDescriptor | |
1791 6FB 003F9F58 RtlGetIntegerAtom | |
1792 6FC 0051F670 RtlGetLastRange | |
1793 6FD 000AF8B0 RtlGetNextEntryHashTable | |
1794 6FE 0051F558 RtlGetNextRange | |
1795 6FF 0064F900 RtlGetNtGlobalFlags | |
1796 700 004991F0 RtlGetOwnerSecurityDescriptor | |
1797 701 0010E904 RtlGetProductInfo | |
1798 702 004151C8 RtlGetSaclSecurityDescriptor | |
1799 703 00506D84 RtlGetSetBootStatusData | |
1800 704 000DEA30 RtlGetThreadLangIdByIndex | |
1801 705 003B8380 RtlGetVersion | |
1802 706 0045E070 RtlHashUnicodeString | |
1803 707 0064FF20 RtlIdnToAscii | |
1804 708 0064FF40 RtlIdnToNameprepUnicode | |
1805 709 0064FF60 RtlIdnToUnicode | |
1806 70A 00098B40 RtlImageDirectoryEntryToData | |
1807 70B 00098C50 RtlImageNtHeader | |
1808 70C 00098F00 RtlImageNtHeaderEx | |
1809 70D 00097914 RtlInitAnsiString | |
1810 70E 00105124 RtlInitAnsiStringEx | |
1811 70F 005147C4 RtlInitCodePageTable | |
1812 710 000BD764 RtlInitEnumerationHashTable | |
1813 711 000B489C RtlInitString | |
1814 712 001E4CD4 RtlInitStringEx | |
1815 713 00023B40 RtlInitUnicodeString | |
1816 714 000941F0 RtlInitUnicodeStringEx | |
1817 715 000FE3B4 RtlInitWeakEnumerationHashTable | |
1818 716 000BEBE4 RtlInitializeBitMap | |
1819 717 001E8040 RtlInitializeBitMapEx | |
1820 718 000C2690 RtlInitializeGenericTable | |
1821 719 000BE858 RtlInitializeGenericTableAvl | |
1822 71A 0051AE7C RtlInitializeRangeList | |
1823 71B 0049CA64 RtlInitializeSid | |
1824 71C 001E558C RtlInitializeSidEx | |
1825 71D 005419A4 RtlInitializeUnicodePrefix | |
1826 71E 000AB5F8 RtlInsertElementGenericTable | |
1827 71F 000948C0 RtlInsertElementGenericTableAvl | |
1828 720 000AB658 RtlInsertElementGenericTableFull | |
1829 721 00094920 RtlInsertElementGenericTableFullAvl | |
1830 722 000AC390 RtlInsertEntryHashTable | |
1831 723 00489870 RtlInsertUnicodePrefix | |
1832 724 00465CD0 RtlInt64ToUnicodeString | |
1833 725 004662D8 RtlIntegerToChar | |
1834 726 004677F8 RtlIntegerToUnicode | |
1835 727 00465DE4 RtlIntegerToUnicodeString | |
1836 728 001E8048 RtlInterlockedClearBitRun | |
1837 729 001E80FC RtlInterlockedSetBitRun | |
1838 72A 000A1B38 RtlInterlockedSetClearRun | |
1839 72B 0051D8B8 RtlInvertRangeList | |
1840 72C 0051E71C RtlInvertRangeListEx | |
1841 72D 00104934 RtlIoDecodeMemIoResource | |
1842 72E 0010E4A4 RtlIoEncodeMemIoResource | |
1843 72F 000FCCF0 RtlIpv4AddressToStringA | |
1844 730 001E8DA8 RtlIpv4AddressToStringExA | |
1845 731 001E8FE4 RtlIpv4AddressToStringExW | |
1846 732 000FA440 RtlIpv4AddressToStringW | |
1847 733 001E9324 RtlIpv4StringToAddressA | |
1848 734 001E9588 RtlIpv4StringToAddressExA | |
1849 735 001100A4 RtlIpv4StringToAddressExW | |
1850 736 000BF184 RtlIpv4StringToAddressW | |
1851 737 000FE3F8 RtlIpv6AddressToStringA | |
1852 738 001E8E5C RtlIpv6AddressToStringExA | |
1853 739 001E90A4 RtlIpv6AddressToStringExW | |
1854 73A 000F9338 RtlIpv6AddressToStringW | |
1855 73B 0010A8D8 RtlIpv6StringToAddressA | |
1856 73C 001E975C RtlIpv6StringToAddressExA | |
1857 73D 000FF9C4 RtlIpv6StringToAddressExW | |
1858 73E 000BE948 RtlIpv6StringToAddressW | |
1859 73F 000ABC78 RtlIsGenericTableEmpty | |
1860 740 00094724 RtlIsGenericTableEmptyAvl | |
1861 741 0048F124 RtlIsNameLegalDOS8Dot3 | |
1862 742 00652A68 RtlIsNormalizedString | |
1863 743 00112B54 RtlIsNtDdiVersionAvailable | |
1864 744 0051F290 RtlIsRangeAvailable | |
1865 745 001E9B2C RtlIsServicePackVersionInstalled | |
1866 746 001E55DC RtlIsUntrustedObject | |
1867 747 0064FDF4 RtlIsValidOemCharacter | |
1868 748 0064FD78 RtlLCIDToCultureName | |
1869 749 003C41B8 RtlLengthRequiredSid | |
1870 74A 00422F50 RtlLengthSecurityDescriptor | |
1871 74B 00002934 RtlLengthSid | |
1872 74C 0064E278 RtlLoadString | |
1873 74D 0064E66C RtlLocalTimeToSystemTime | |
1874 74E 00507970 RtlLockBootStatusData | |
1875 74F 003F9A90 RtlLookupAtomInAtomTable | |
1876 750 000AB7E0 RtlLookupElementGenericTable | |
1877 751 00094500 RtlLookupElementGenericTableAvl | |
1878 752 001001F0 RtlLookupElementGenericTableFull | |
1879 753 00094780 RtlLookupElementGenericTableFullAvl | |
1880 754 000A3E70 RtlLookupEntryHashTable | |
1881 755 000FDBF4 RtlLookupFirstMatchingElementGenericTableAvl | |
1882 756 0002A530 RtlLookupFunctionEntry | |
1883 757 003EFBF0 RtlMapGenericMask | |
1884 758 000C2A5C RtlMapSecurityErrorToNtStatus | |
1885 759 0064B6A8 RtlMergeRangeLists | |
1886 75A 0012E2C0 RtlMoveMemory | |
1887 75B 00465FE0 RtlMultiByteToUnicodeN | |
1888 75C 004ABD3C RtlMultiByteToUnicodeSize | |
1889 75D 004D98D4 RtlNextUnicodePrefix | |
1890 75E 00652AEC RtlNormalizeString | |
1891 75F 0048FA98 RtlNtStatusToDosError | |
1892 760 000B476C RtlNtStatusToDosErrorNoTeb | |
1893 761 000C0754 RtlNumberGenericTableElements | |
1894 762 000B984C RtlNumberGenericTableElementsAvl | |
1895 763 000327D8 RtlNumberOfClearBits | |
1896 764 001E82B8 RtlNumberOfClearBitsEx | |
1897 765 001E82D8 RtlNumberOfClearBitsInRange | |
1898 766 00032800 RtlNumberOfSetBits | |
1899 767 001E82FC RtlNumberOfSetBitsEx | |
1900 768 001E8490 RtlNumberOfSetBitsInRange | |
1901 769 00063B70 RtlNumberOfSetBitsUlongPtr | |
1902 76A 0064B868 RtlOemStringToCountedUnicodeString | |
1903 76B 0064BA98 RtlOemStringToUnicodeSize | |
1904 76C 004A3DE4 RtlOemStringToUnicodeString | |
1905 76D 004A3ED4 RtlOemToUnicodeN | |
1906 76E 00502640 RtlOpenCurrentUser | |
1907 76F 000C09E8 RtlOwnerAcesPresent | |
1908 770 0010DBF0 RtlPcToFileHeader | |
1909 771 004A26D4 RtlPinAtomInAtomTable | |
1910 772 00128D00 RtlPrefetchMemoryNonTemporal | |
1911 773 0048B374 RtlPrefixString | |
1912 774 0045CDA0 RtlPrefixUnicodeString | |
1913 775 00441060 RtlQueryAtomInAtomTable | |
1914 776 0064F908 RtlQueryDynamicTimeZoneInformation | |
1915 777 00508230 RtlQueryElevationFlags | |
1916 778 00497098 RtlQueryInformationAcl | |
1917 779 0052E564 RtlQueryModuleInformation | |
1918 77A 000879A0 RtlQueryPackageIdentity | |
1919 77B 00457920 RtlQueryRegistryValues | |
1920 77C 00457580 RtlQueryRegistryValuesEx | |
1921 77D 0064F914 RtlQueryTimeZoneInformation | |
1922 77E 001EA730 RtlQueryValidationRunlevel | |
1923 77F 001E6BF0 RtlRaiseException | |
1924 780 00439AA0 RtlRandom | |
1925 781 00439AA0 RtlRandomEx | |
1926 782 0009FBA0 RtlRbInsertNodeEx | |
1927 783 000A0310 RtlRbRemoveNode | |
1928 784 001E8BC8 RtlRealPredecessor | |
1929 785 000DCD34 RtlRealSuccessor | |
1930 786 000B0540 RtlRemoveEntryHashTable | |
1931 787 004897A8 RtlRemoveUnicodePrefix | |
1932 788 0064D7BC RtlReplaceSidInSd | |
1933 789 0064B64C RtlReserveChunk | |
1934 78A 00128720 RtlRestoreContext | |
1935 78B 0043A6BC RtlRunOnceBeginInitialize | |
1936 78C 004A77FC RtlRunOnceComplete | |
1937 78D 0043A5E4 RtlRunOnceExecuteOnce | |
1938 78E 00523480 RtlRunOnceInitialize | |
1939 78F 00111880 RtlSecondsSince1970ToTime | |
1940 790 001E6298 RtlSecondsSince1980ToTime | |
1941 791 004DDF40 RtlSelfRelativeToAbsoluteSD | |
1942 792 0064EECC RtlSelfRelativeToAbsoluteSD2 | |
1943 793 000F859C RtlSetAllBits | |
1944 794 000FA590 RtlSetAllBitsEx | |
1945 795 000BD92C RtlSetBit | |
1946 796 001E8704 RtlSetBitEx | |
1947 797 000175C0 RtlSetBits | |
1948 798 000522F0 RtlSetBitsEx | |
1949 799 004ADB4C RtlSetControlSecurityDescriptor | |
1950 79A 003B9250 RtlSetDaclSecurityDescriptor | |
1951 79B 0064F920 RtlSetDynamicTimeZoneInformation | |
1952 79C 004DA0F4 RtlSetGroupSecurityDescriptor | |
1953 79D 004D8394 RtlSetOwnerSecurityDescriptor | |
1954 79E 001E8A38 RtlSetPortableOperatingSystem | |
1955 79F 003B92E8 RtlSetSaclSecurityDescriptor | |
1956 7A0 0064F92C RtlSetTimeZoneInformation | |
1957 7A1 0004E520 RtlSidHashInitialize | |
1958 7A2 00025FE0 RtlSidHashLookup | |
1959 7A3 001E6F20 RtlSizeHeap | |
1960 7A4 000AB850 RtlSplay | |
1961 7A5 00464D50 RtlStringFromGUID | |
1962 7A6 00026D88 RtlSubAuthorityCountSid | |
1963 7A7 00026B84 RtlSubAuthoritySid | |
1964 7A8 000ABBCC RtlSubtreePredecessor | |
1965 7A9 001E8C0C RtlSubtreeSuccessor | |
1966 7AA 00540B00 RtlSystemTimeToLocalTime | |
1967 7AB 000DEA24 RtlTestBit | |
1968 7AC 001E8710 RtlTestBitEx | |
1969 7AD 000D9E04 RtlTimeFieldsToTime | |
1970 7AE 0064E6CC RtlTimeToElapsedTimeFields | |
1971 7AF 001E62B8 RtlTimeToSecondsSince1970 | |
1972 7B0 001E62F4 RtlTimeToSecondsSince1980 | |
1973 7B1 000DB098 RtlTimeToTimeFields | |
1974 7B2 001EA82C RtlTraceDatabaseAdd | |
1975 7B3 001EA884 RtlTraceDatabaseCreate | |
1976 7B4 001EA9E8 RtlTraceDatabaseDestroy | |
1977 7B5 001EAA2C RtlTraceDatabaseEnumerate | |
1978 7B6 001EAAE8 RtlTraceDatabaseFind | |
1979 7B7 001EAB48 RtlTraceDatabaseLock | |
1980 7B8 001EAB50 RtlTraceDatabaseUnlock | |
1981 7B9 001EAB58 RtlTraceDatabaseValidate | |
1982 7BA 00652DA4 RtlUTF8ToUnicodeN | |
1983 7BB 0064BABC RtlUnicodeStringToAnsiSize | |
1984 7BC 004673A0 RtlUnicodeStringToAnsiString | |
1985 7BD 0048F058 RtlUnicodeStringToCountedOemString | |
1986 7BE 0064F7F8 RtlUnicodeStringToInt64 | |
1987 7BF 0048EA00 RtlUnicodeStringToInteger | |
1988 7C0 0064BABC RtlUnicodeStringToOemSize | |
1989 7C1 0048EEA4 RtlUnicodeStringToOemString | |
1990 7C2 0064CB94 RtlUnicodeToCustomCPN | |
1991 7C3 00467480 RtlUnicodeToMultiByteN | |
1992 7C4 004A20D8 RtlUnicodeToMultiByteSize | |
1993 7C5 0048F8A0 RtlUnicodeToOemN | |
1994 7C6 00539210 RtlUnicodeToUTF8N | |
1995 7C7 00507D9C RtlUnlockBootStatusData | |
1996 7C8 001E682C RtlUnwind | |
1997 7C9 00029D10 RtlUnwindEx | |
1998 7CA 00443620 RtlUpcaseUnicodeChar | |
1999 7CB 00441840 RtlUpcaseUnicodeString | |
2000 7CC 0064B988 RtlUpcaseUnicodeStringToAnsiString | |
2001 7CD 0048F2D0 RtlUpcaseUnicodeStringToCountedOemString | |
2002 7CE 0048EF64 RtlUpcaseUnicodeStringToOemString | |
2003 7CF 0064CDB0 RtlUpcaseUnicodeToCustomCPN | |
2004 7D0 0048B860 RtlUpcaseUnicodeToMultiByteN | |
2005 7D1 0048F424 RtlUpcaseUnicodeToOemN | |
2006 7D2 0048B414 RtlUpperChar | |
2007 7D3 0048B050 RtlUpperString | |
2008 7D4 003EEC70 RtlValidAcl | |
2009 7D5 00406170 RtlValidRelativeSecurityDescriptor | |
2010 7D6 003EDC30 RtlValidSecurityDescriptor | |
2011 7D7 003EF00C RtlValidSid | |
2012 7D8 0009706C RtlValidateUnicodeString | |
2013 7D9 000F736C RtlVerifyVersionInfo | |
2014 7DA 0002A91C RtlVirtualUnwind | |
2015 7DB 00435DF4 RtlVolumeDeviceToDosName | |
2016 7DC 000270B0 RtlWalkFrameChain | |
2017 7DD 000FDD80 RtlWeaklyEnumerateEntryHashTable | |
2018 7DE 004A1CF0 RtlWriteRegistryValue | |
2019 7DF 0064F200 RtlZeroHeap | |
2020 7E0 00128D20 RtlZeroMemory | |
2021 7E1 0064BA98 RtlxAnsiStringToUnicodeSize | |
2022 7E2 0064BA98 RtlxOemStringToUnicodeSize | |
2023 7E3 0064BABC RtlxUnicodeStringToAnsiSize | |
2024 7E4 0064BABC RtlxUnicodeStringToOemSize | |
2025 7E5 00021CC0 SeAccessCheck | |
2026 7E6 001032B8 SeAccessCheckEx | |
2027 7E7 000022B8 SeAccessCheckFromState | |
2028 7E8 000023E0 SeAccessCheckFromStateEx | |
2029 7E9 00021D30 SeAccessCheckWithHint | |
2030 7EA 003EF070 SeAdjustAccessStateForTrustLabel | |
2031 7EB 0048E938 SeAppendPrivileges | |
2032 7EC 00405C50 SeAssignSecurity | |
2033 7ED 0049F03C SeAssignSecurityEx | |
2034 7EE 00654D58 SeAuditHardLinkCreation | |
2035 7EF 00654D60 SeAuditHardLinkCreationWithTransaction | |
2036 7F0 0065523C SeAuditTransactionStateChange | |
2037 7F1 00656C84 SeAuditingAnyFileEventsWithContext | |
2038 7F2 000269B0 SeAuditingAnyFileEventsWithContextEx | |
2039 7F3 00656C8C SeAuditingFileEvents | |
2040 7F4 00656CC4 SeAuditingFileEventsWithContext | |
2041 7F5 001EF980 SeAuditingFileEventsWithContextEx | |
2042 7F6 00656CCC SeAuditingFileOrGlobalEvents | |
2043 7F7 00656DB4 SeAuditingHardLinkEvents | |
2044 7F8 004E70CC SeAuditingHardLinkEventsWithContext | |
2045 7F9 004817B4 SeAuditingWithTokenForSubcategory | |
2046 7FA 003EE2F0 SeCaptureSecurityDescriptor | |
2047 7FB 003EEEB0 SeCaptureSubjectContext | |
2048 7FC 003ED510 SeCaptureSubjectContextEx | |
2049 7FD 00657EF8 SeCloseObjectAuditAlarm | |
2050 7FE 00657F48 SeCloseObjectAuditAlarmForNonObObject | |
2051 7FF 000C0F24 SeComputeAutoInheritByObjectType | |
2052 800 003EF0F8 SeCreateAccessState | |
2053 801 0048168C SeCreateAccessStateEx | |
2054 802 00432C84 SeCreateClientSecurity | |
2055 803 003BDEB8 SeCreateClientSecurityEx | |
2056 804 004A4624 SeCreateClientSecurityFromSubjectContext | |
2057 805 001EFBB0 SeCreateClientSecurityFromSubjectContextEx | |
2058 806 0049D388 SeDeassignSecurity | |
2059 807 003F1278 SeDeleteAccessState | |
2060 808 00657F64 SeDeleteObjectAuditAlarm | |
2061 809 00657F6C SeDeleteObjectAuditAlarmWithTransaction | |
2062 80A 00657FCC SeExamineSacl | |
2063 80B 00700968 SeExports | |
2064 80C 006540D8 SeFilterToken | |
2065 80D 000B2F3C SeFreePrivileges | |
2066 80E 00495F94 SeGetCachedSigningLevel | |
2067 80F 00658B60 SeGetLinkedToken | |
2068 810 00658C64 SeGetLogonSessionToken | |
2069 811 00658858 SeImpersonateClient | |
2070 812 00496C7C SeImpersonateClientEx | |
2071 813 00654204 SeIsParentOfChildAppContainer | |
2072 814 0044AA58 SeLocateProcessImageName | |
2073 815 003E1EE0 SeLockSubjectContext | |
2074 816 004A6340 SeMarkLogonSessionForTerminationNotification | |
2075 817 0048E8E0 SeOpenObjectAuditAlarm | |
2076 818 0053E06C SeOpenObjectAuditAlarmForNonObObject | |
2077 819 003DE340 SeOpenObjectAuditAlarmWithTransaction | |
2078 81A 00658360 SeOpenObjectForDeleteAuditAlarm | |
2079 81B 006583B8 SeOpenObjectForDeleteAuditAlarmWithTransaction | |
2080 81C 003E75F0 SePrivilegeCheck | |
2081 81D 003F1310 SePrivilegeObjectAuditAlarm | |
2082 81E 00700B10 SePublicDefaultDacl | |
2083 81F 0049E688 SeQueryAuthenticationIdToken | |
2084 820 003FA000 SeQueryInformationToken | |
2085 821 00659ABC SeQuerySecureBootPolicyValue | |
2086 822 00449BA4 SeQuerySecurityAttributesToken | |
2087 823 00444900 SeQuerySecurityDescriptorInfo | |
2088 824 003F1B58 SeQuerySessionIdToken | |
2089 825 00542140 SeRegisterImageVerificationCallback | |
2090 826 0053DF5C SeRegisterLogonSessionTerminatedRoutine | |
2091 827 003EDF08 SeReleaseSecurityDescriptor | |
2092 828 003EEE60 SeReleaseSubjectContext | |
2093 829 001EF894 SeReportSecurityEvent | |
2094 82A 000A7D94 SeReportSecurityEventWithSubCategory | |
2095 82B 0046AF84 SeSecurityAttributePresent | |
2096 82C 006544C0 SeSetAccessStateGenericMapping | |
2097 82D 000B5124 SeSetAuditParameter | |
2098 82E 0065420C SeSetSecurityAttributesToken | |
2099 82F 004218A4 SeSetSecurityDescriptorInfo | |
2100 830 0065A180 SeSetSecurityDescriptorInfoEx | |
2101 831 003EEDF4 SeShouldCheckForAccessRightsFromParent | |
2102 832 003ED468 SeSinglePrivilegeCheck | |
2103 833 001EF668 SeSrpAccessCheck | |
2104 834 00700B20 SeSystemDefaultDacl | |
2105 835 00700E18 SeSystemDefaultSd | |
2106 836 00002294 SeTokenFromAccessInformation | |
2107 837 005285B4 SeTokenImpersonationLevel | |
2108 838 00487BA4 SeTokenIsAdmin | |
2109 839 000A91E0 SeTokenIsRestricted | |
2110 83A 000A9288 SeTokenIsWriteRestricted | |
2111 83B 00700030 SeTokenObjectType | |
2112 83C 004A20F4 SeTokenType | |
2113 83D 003E1E30 SeUnlockSubjectContext | |
2114 83E 00653C68 SeUnregisterImageVerificationCallback | |
2115 83F 00659624 SeUnregisterLogonSessionTerminatedRoutine | |
2116 840 003BD5E0 SeValidSecurityDescriptor | |
2117 841 00001130 TmCancelPropagationRequest | |
2118 842 00001138 TmCommitComplete | |
2119 843 00001140 TmCommitEnlistment | |
2120 844 00001148 TmCommitTransaction | |
2121 845 00001150 TmCreateEnlistment | |
2122 846 00001158 TmCurrentTransaction | |
2123 847 00001160 TmDereferenceEnlistmentKey | |
2124 848 00001168 TmEnableCallbacks | |
2125 849 00001170 TmEndPropagationRequest | |
2126 84A 00384030 TmEnlistmentObjectType | |
2127 84B 00001178 TmFreezeTransactions | |
2128 84C 00001180 TmGetTransactionId | |
2129 84D 00001008 TmInitSystem | |
2130 84E 00001010 TmInitSystemPhase2 | |
2131 84F 00001188 TmInitializeTransactionManager | |
2132 850 00001190 TmIsKTMCommitCoordinator | |
2133 851 00001198 TmIsTransactionActive | |
2134 852 000011A0 TmPrePrepareComplete | |
2135 853 000011A8 TmPrePrepareEnlistment | |
2136 854 000011B0 TmPrepareComplete | |
2137 855 000011B8 TmPrepareEnlistment | |
2138 856 000011C0 TmPropagationComplete | |
2139 857 000011C8 TmPropagationFailed | |
2140 858 000011D0 TmReadOnlyEnlistment | |
2141 859 000011D8 TmRecoverEnlistment | |
2142 85A 000011E0 TmRecoverResourceManager | |
2143 85B 000011E8 TmRecoverTransactionManager | |
2144 85C 000011F0 TmReferenceEnlistmentKey | |
2145 85D 000011F8 TmRenameTransactionManager | |
2146 85E 00001200 TmRequestOutcomeEnlistment | |
2147 85F 00383F28 TmResourceManagerObjectType | |
2148 860 00001208 TmRollbackComplete | |
2149 861 00001210 TmRollbackEnlistment | |
2150 862 00001218 TmRollbackTransaction | |
2151 863 00001220 TmSetCurrentTransaction | |
2152 864 00001228 TmSinglePhaseReject | |
2153 865 00001230 TmThawTransactions | |
2154 866 00383F20 TmTransactionManagerObjectType | |
2155 867 00383BE0 TmTransactionObjectType | |
2156 868 000F83E4 VerSetConditionMask | |
2157 869 002096B8 VfCheckNxPagePriority | |
2158 86A 002096D0 VfCheckNxPageProtection | |
2159 86B 002096E8 VfCheckNxPoolType | |
2160 86C 00111630 VfFailDeviceNode | |
2161 86D 00209700 VfFailDriver | |
2162 86E 00209728 VfFailSystemBIOS | |
2163 86F 0020975C VfInsertContext | |
2164 870 00111660 VfIsVerificationEnabled | |
2165 871 0020982C VfQueryDeviceContext | |
2166 872 00209A00 VfQueryDispatchTable | |
2167 873 00209860 VfQueryDriverContext | |
2168 874 0020989C VfQueryIrpContext | |
2169 875 002098D8 VfQueryThreadContext | |
2170 876 00209914 VfRemoveContext | |
2171 877 0020A884 VmAccessFault | |
2172 878 00662A34 VmCreateMemoryRange | |
2173 879 00662BB0 VmDeleteMemoryRange | |
2174 87A 0068029C WheaAddErrorSource | |
2175 87B 00680410 WheaAttemptPhysicalPageOffline | |
2176 87C 003AB894 WheaConfigureErrorSource | |
2177 87D 002177A0 WheaDeferredRecoveryService | |
2178 87E 00216A98 WheaGetErrorSource | |
2179 87F 0010FD74 WheaInitializeDeferredRecoveryObject | |
2180 880 00217430 WheaInitializeRecordHeader | |
2181 881 006804D4 WheaRegisterInUsePageOfflineNotification | |
2182 882 00216AC0 WheaReportHwError | |
2183 883 002177D0 WheaRequestDeferredRecovery | |
2184 884 00680650 WheaUnregisterInUsePageOfflineNotification | |
2185 885 0020BC54 WmiGetClock | |
2186 886 004C81D0 WmiQueryTraceInformation | |
2187 887 000C344C WmiTraceMessage | |
2188 888 0020BCB8 WmiTraceMessageVa | |
2189 889 0021505C XIPDispatch | |
2190 88A 0011F660 ZwAccessCheckAndAuditAlarm | |
2191 88B 0011FE40 ZwAddBootEntry | |
2192 88C 0011FE60 ZwAddDriverEntry | |
2193 88D 0011F960 ZwAdjustPrivilegesToken | |
2194 88E 0011FEE0 ZwAlertThread | |
2195 88F 0011FF20 ZwAllocateLocallyUniqueId | |
2196 890 0011F440 ZwAllocateVirtualMemory | |
2197 891 0011FFA0 ZwAlpcAcceptConnectPort | |
2198 892 0011FFC0 ZwAlpcCancelMessage | |
2199 893 0011FFE0 ZwAlpcConnectPort | |
2200 894 00120000 ZwAlpcConnectPortEx | |
2201 895 00120020 ZwAlpcCreatePort | |
2202 896 00120040 ZwAlpcCreatePortSection | |
2203 897 00120060 ZwAlpcCreateResourceReserve | |
2204 898 00120080 ZwAlpcCreateSectionView | |
2205 899 001200A0 ZwAlpcCreateSecurityContext | |
2206 89A 001200C0 ZwAlpcDeletePortSection | |
2207 89B 001200E0 ZwAlpcDeleteResourceReserve | |
2208 89C 00120100 ZwAlpcDeleteSectionView | |
2209 89D 00120120 ZwAlpcDeleteSecurityContext | |
2210 89E 00120140 ZwAlpcDisconnectPort | |
2211 89F 001201A0 ZwAlpcOpenSenderThread | |
2212 8A0 001201C0 ZwAlpcQueryInformation | |
2213 8A1 00120220 ZwAlpcSendWaitReceivePort | |
2214 8A2 00120240 ZwAlpcSetInformation | |
2215 8A3 00120280 ZwAssignProcessToJobObject | |
2216 8A4 001202A0 ZwAssociateWaitCompletionPacket | |
2217 8A5 0011FCE0 ZwCancelIoFile | |
2218 8A6 001202C0 ZwCancelIoFileEx | |
2219 8A7 0011FD60 ZwCancelTimer | |
2220 8A8 0011F900 ZwClearEvent | |
2221 8A9 0011F320 ZwClose | |
2222 8AA 0011F8A0 ZwCloseObjectAuditAlarm | |
2223 8AB 00120340 ZwCommitComplete | |
2224 8AC 00120360 ZwCommitEnlistment | |
2225 8AD 00120380 ZwCommitTransaction | |
2226 8AE 00120420 ZwConnectPort | |
2227 8AF 00120460 ZwCreateDirectoryObject | |
2228 8B0 001204A0 ZwCreateEnlistment | |
2229 8B1 0011FA40 ZwCreateEvent | |
2230 8B2 0011FBE0 ZwCreateFile | |
2231 8B3 00120500 ZwCreateIoCompletion | |
2232 8B4 00120520 ZwCreateJobObject | |
2233 8B5 0011F4E0 ZwCreateKey | |
2234 8B6 00120560 ZwCreateKeyTransacted | |
2235 8B7 001206E0 ZwCreateResourceManager | |
2236 8B8 0011FA80 ZwCreateSection | |
2237 8B9 00120720 ZwCreateSymbolicLinkObject | |
2238 8BA 00120760 ZwCreateTimer | |
2239 8BB 001207E0 ZwCreateTransaction | |
2240 8BC 00120800 ZwCreateTransactionManager | |
2241 8BD 00120840 ZwCreateWaitCompletionPacket | |
2242 8BE 00120880 ZwCreateWnfStateName | |
2243 8BF 00120920 ZwDeleteBootEntry | |
2244 8C0 00120940 ZwDeleteDriverEntry | |
2245 8C1 00120960 ZwDeleteFile | |
2246 8C2 00120980 ZwDeleteKey | |
2247 8C3 001209E0 ZwDeleteValueKey | |
2248 8C4 00120A00 ZwDeleteWnfStateData | |
2249 8C5 00120A20 ZwDeleteWnfStateName | |
2250 8C6 0011F220 ZwDeviceIoControlFile | |
2251 8C7 00120A60 ZwDisplayString | |
2252 8C8 0011F8C0 ZwDuplicateObject | |
2253 8C9 0011F980 ZwDuplicateToken | |
2254 8CA 00120AC0 ZwEnumerateBootEntries | |
2255 8CB 00120AE0 ZwEnumerateDriverEntries | |
2256 8CC 0011F780 ZwEnumerateKey | |
2257 8CD 00120B20 ZwEnumerateTransactionObject | |
2258 8CE 0011F3A0 ZwEnumerateValueKey | |
2259 8CF 0011FAA0 ZwFlushBuffersFile | |
2260 8D0 00120BC0 ZwFlushBuffersFileEx | |
2261 8D1 00120C00 ZwFlushInstructionCache | |
2262 8D2 00120C20 ZwFlushKey | |
2263 8D3 00120C60 ZwFlushVirtualMemory | |
2264 8D4 0011F500 ZwFreeVirtualMemory | |
2265 8D5 0011F860 ZwFsControlFile | |
2266 8D6 00120E20 ZwGetNotificationResourceManager | |
2267 8D7 00120E60 ZwImpersonateAnonymousToken | |
2268 8D8 00120EE0 ZwInitiatePowerAction | |
2269 8D9 0011FB20 ZwIsProcessInJob | |
2270 8DA 00120F60 ZwLoadDriver | |
2271 8DB 00120F80 ZwLoadKey | |
2272 8DC 00120FC0 ZwLoadKeyEx | |
2273 8DD 00120FE0 ZwLockFile | |
2274 8DE 00121000 ZwLockProductActivationKeys | |
2275 8DF 00121040 ZwLockVirtualMemory | |
2276 8E0 00121080 ZwMakeTemporaryObject | |
2277 8E1 0011F640 ZwMapViewOfSection | |
2278 8E2 001210E0 ZwModifyBootEntry | |
2279 8E3 00121100 ZwModifyDriverEntry | |
2280 8E4 00121140 ZwNotifyChangeKey | |
2281 8E5 00121180 ZwNotifyChangeSession | |
2282 8E6 0011FC40 ZwOpenDirectoryObject | |
2283 8E7 001211A0 ZwOpenEnlistment | |
2284 8E8 0011F940 ZwOpenEvent | |
2285 8E9 0011F7A0 ZwOpenFile | |
2286 8EA 00121200 ZwOpenJobObject | |
2287 8EB 0011F380 ZwOpenKey | |
2288 8EC 00121220 ZwOpenKeyEx | |
2289 8ED 00121240 ZwOpenKeyTransacted | |
2290 8EE 00121260 ZwOpenKeyTransactedEx | |
2291 8EF 0011F600 ZwOpenProcess | |
2292 8F0 00121300 ZwOpenProcessToken | |
2293 8F1 0011F740 ZwOpenProcessTokenEx | |
2294 8F2 00121320 ZwOpenResourceManager | |
2295 8F3 0011F820 ZwOpenSection | |
2296 8F4 00121360 ZwOpenSession | |
2297 8F5 00121380 ZwOpenSymbolicLinkObject | |
2298 8F6 001213A0 ZwOpenThread | |
2299 8F7 0011F5C0 ZwOpenThreadToken | |
2300 8F8 0011F720 ZwOpenThreadTokenEx | |
2301 8F9 001213C0 ZwOpenTimer | |
2302 8FA 001213E0 ZwOpenTransaction | |
2303 8FB 00121400 ZwOpenTransactionManager | |
2304 8FC 0011FD20 ZwPowerInformation | |
2305 8FD 00121440 ZwPrePrepareComplete | |
2306 8FE 00121460 ZwPrePrepareEnlistment | |
2307 8FF 00121480 ZwPrepareComplete | |
2308 900 001214A0 ZwPrepareEnlistment | |
2309 901 00121520 ZwPropagationComplete | |
2310 902 00121540 ZwPropagationFailed | |
2311 903 0011FB40 ZwProtectVirtualMemory | |
2312 904 00121560 ZwPulseEvent | |
2313 905 00121580 ZwQueryBootEntryOrder | |
2314 906 001215A0 ZwQueryBootOptions | |
2315 907 0011F3E0 ZwQueryDefaultLocale | |
2316 908 0011F9C0 ZwQueryDefaultUILanguage | |
2317 909 0011F7E0 ZwQueryDirectoryFile | |
2318 90A 001215E0 ZwQueryDirectoryObject | |
2319 90B 00121600 ZwQueryDriverEntryOrder | |
2320 90C 00121620 ZwQueryEaFile | |
2321 90D 00121640 ZwQueryFullAttributesFile | |
2322 90E 00121680 ZwQueryInformationEnlistment | |
2323 90F 0011F360 ZwQueryInformationFile | |
2324 910 001216A0 ZwQueryInformationJobObject | |
2325 911 0011F460 ZwQueryInformationProcess | |
2326 912 001216E0 ZwQueryInformationResourceManager | |
2327 913 0011F5E0 ZwQueryInformationThread | |
2328 914 0011F560 ZwQueryInformationToken | |
2329 915 00121700 ZwQueryInformationTransaction | |
2330 916 00121720 ZwQueryInformationTransactionManager | |
2331 917 00121760 ZwQueryInstallUILanguage | |
2332 918 0011F400 ZwQueryKey | |
2333 919 001217C0 ZwQueryLicenseValue | |
2334 91A 0011F340 ZwQueryObject | |
2335 91B 00121880 ZwQueryQuotaInformationFile | |
2336 91C 0011FB60 ZwQuerySection | |
2337 91D 001218A0 ZwQuerySecurityAttributesToken | |
2338 91E 001218C0 ZwQuerySecurityObject | |
2339 91F 00121900 ZwQuerySymbolicLinkObject | |
2340 920 00121940 ZwQuerySystemEnvironmentValueEx | |
2341 921 0011F800 ZwQuerySystemInformation | |
2342 922 00121960 ZwQuerySystemInformationEx | |
2343 923 0011F420 ZwQueryValueKey | |
2344 924 0011F5A0 ZwQueryVirtualMemory | |
2345 925 0011FA60 ZwQueryVolumeInformationFile | |
2346 926 001219A0 ZwQueryWnfStateData | |
2347 927 001219C0 ZwQueryWnfStateNameInformation | |
2348 928 0011F200 ZwReadFile | |
2349 929 00121A40 ZwReadOnlyEnlistment | |
2350 92A 00121A60 ZwRecoverEnlistment | |
2351 92B 00121A80 ZwRecoverResourceManager | |
2352 92C 00121AA0 ZwRecoverTransactionManager | |
2353 92D 0011F260 ZwRemoveIoCompletion | |
2354 92E 00121B40 ZwRemoveIoCompletionEx | |
2355 92F 00121B80 ZwRenameKey | |
2356 930 00121BC0 ZwReplaceKey | |
2357 931 00121C20 ZwRequestPort | |
2358 932 0011F580 ZwRequestWaitReplyPort | |
2359 933 00121C40 ZwResetEvent | |
2360 934 00121C80 ZwRestoreKey | |
2361 935 00121CC0 ZwRollbackComplete | |
2362 936 00121CE0 ZwRollbackEnlistment | |
2363 937 00121D00 ZwRollbackTransaction | |
2364 938 00121D40 ZwSaveKey | |
2365 939 00121D60 ZwSaveKeyEx | |
2366 93A 00121DA0 ZwSecureConnectPort | |
2367 93B 00121DE0 ZwSetBootEntryOrder | |
2368 93C 00121E00 ZwSetBootOptions | |
2369 93D 00121E20 ZwSetCachedSigningLevel | |
2370 93E 00121EA0 ZwSetDefaultLocale | |
2371 93F 00121EC0 ZwSetDefaultUILanguage | |
2372 940 00121EE0 ZwSetDriverEntryOrder | |
2373 941 00121F00 ZwSetEaFile | |
2374 942 0011F300 ZwSetEvent | |
2375 943 00121FA0 ZwSetInformationEnlistment | |
2376 944 0011F620 ZwSetInformationFile | |
2377 945 00121FC0 ZwSetInformationJobObject | |
2378 946 00121FE0 ZwSetInformationKey | |
2379 947 0011FCC0 ZwSetInformationObject | |
2380 948 0011F4C0 ZwSetInformationProcess | |
2381 949 00122000 ZwSetInformationResourceManager | |
2382 94A 0011F2E0 ZwSetInformationThread | |
2383 94B 00122020 ZwSetInformationToken | |
2384 94C 00122040 ZwSetInformationTransaction | |
2385 94D 00122080 ZwSetInformationVirtualMemory | |
2386 94E 00122180 ZwSetQuotaInformationFile | |
2387 94F 001221A0 ZwSetSecurityObject | |
2388 950 001221E0 ZwSetSystemEnvironmentValueEx | |
2389 951 00122200 ZwSetSystemInformation | |
2390 952 00122240 ZwSetSystemTime | |
2391 953 0011FD80 ZwSetTimer | |
2392 954 001222A0 ZwSetTimerEx | |
2393 955 0011FD40 ZwSetValueKey | |
2394 956 00122300 ZwSetVolumeInformationFile | |
2395 957 00122480 ZwTerminateJobObject | |
2396 958 0011F6C0 ZwTerminateProcess | |
2397 959 0011FD00 ZwTraceEvent | |
2398 95A 00122520 ZwTranslateFilePath | |
2399 95B 00122560 ZwUnloadDriver | |
2400 95C 00122580 ZwUnloadKey | |
2401 95D 001225C0 ZwUnloadKeyEx | |
2402 95E 001225E0 ZwUnlockFile | |
2403 95F 00122600 ZwUnlockVirtualMemory | |
2404 960 0011F680 ZwUnmapViewOfSection | |
2405 961 00122660 ZwUpdateWnfStateData | |
2406 962 0011FCA0 ZwWaitForMultipleObjects | |
2407 963 0011F1C0 ZwWaitForSingleObject | |
2408 964 0011F240 ZwWriteFile | |
2409 965 0011FA00 ZwYieldExecution | |
2410 966 00112C10 __C_specific_handler | |
2411 967 00128D40 __chkstk | |
2412 968 000F990C __misaligned_access | |
2413 969 00113200 _finite | |
2414 96A 00117B74 _i64toa_s | |
2415 96B 00117E24 _i64tow_s | |
2416 96C 0011322C _itoa | |
2417 96D 00117B98 _itoa_s | |
2418 96E 001132AC _itow | |
2419 96F 00117E48 _itow_s | |
2420 970 00113380 _local_unwind | |
2421 971 00117BC0 _ltoa_s | |
2422 972 00117E70 _ltow_s | |
2423 973 00118104 _makepath_s | |
2424 974 00214EA8 _purecall | |
2425 975 00129AD0 _setjmp | |
2426 976 00129B80 _setjmpex | |
2427 977 001133B0 _snprintf | |
2428 978 00118230 _snprintf_s | |
2429 979 001182E4 _snscanf_s | |
2430 97A 00113454 _snwprintf | |
2431 97B 0011831C _snwprintf_s | |
2432 97C 001183DC _snwscanf_s | |
2433 97D 00118414 _splitpath_s | |
2434 97E 00113560 _stricmp | |
2435 97F 00113568 _strlwr | |
2436 980 001135D8 _strnicmp | |
2437 981 001135E0 _strnset | |
2438 982 001186A0 _strnset_s | |
2439 983 001135F8 _strrev | |
2440 984 00113630 _strset | |
2441 985 00118720 _strset_s | |
2442 986 00113894 _strtoui64 | |
2443 987 00112F64 _strupr | |
2444 988 001138BC _swprintf | |
2445 989 00117BE4 _ui64toa_s | |
2446 98A 00117E94 _ui64tow_s | |
2447 98B 00117BF8 _ultoa_s | |
2448 98C 00117EA8 _ultow_s | |
2449 98D 00113098 _vsnprintf | |
2450 98E 00118250 _vsnprintf_s | |
2451 98F 00112FA8 _vsnwprintf | |
2452 990 0011833C _vsnwprintf_s | |
2453 991 00113970 _vswprintf | |
2454 992 00113A18 _wcsicmp | |
2455 993 00113A5C _wcslwr | |
2456 994 00113AA8 _wcslwr_s | |
2457 995 00113B1C _wcsnicmp | |
2458 996 00113B74 _wcsnset | |
2459 997 00113B94 _wcsnset_s | |
2460 998 00113C1C _wcsrev | |
2461 999 00113C5C _wcsset_s | |
2462 99A 00113CB4 _wcsupr | |
2463 99B 00118770 _wmakepath_s | |
2464 99C 001188D0 _wsplitpath_s | |
2465 99D 00113CE4 _wtoi | |
2466 99E 00113D04 _wtol | |
2467 99F 0011316C atoi | |
2468 9A0 0011318C atol | |
2469 9A1 00113D1C bsearch | |
2470 9A2 00113E10 bsearch_s | |
2471 9A3 00113F1C isdigit | |
2472 9A4 00113F3C islower | |
2473 9A5 00113F5C isprint | |
2474 9A6 00113F7C isspace | |
2475 9A7 00113F9C isupper | |
2476 9A8 00113FDC iswalnum | |
2477 9A9 00113FE8 iswdigit | |
2478 9AA 00113FF4 iswspace | |
2479 9AB 00113FBC isxdigit | |
2480 9AC 00112DD0 longjmp | |
2481 9AD 00114000 mbstowcs | |
2482 9AE 00119D38 mbtowc | |
2483 9AF 001140C0 memchr | |
2484 9B0 001140F0 memcmp | |
2485 9B1 0012E2C0 memcpy | |
2486 9B2 00118B7C memcpy_s | |
2487 9B3 0012E2C0 memmove | |
2488 9B4 00118C18 memmove_s | |
2489 9B5 0012E600 memset | |
2490 9B6 00700DCC psMUITest | |
2491 9B7 001141C0 qsort | |
2492 9B8 00114590 rand | |
2493 9B9 001145B8 sprintf | |
2494 9BA 00118C84 sprintf_s | |
2495 9BB 00114650 sqrt | |
2496 9BC 00114750 sqrtf | |
2497 9BD 001145B0 srand | |
2498 9BE 00118CEC sscanf_s | |
2499 9BF 00114840 strcat | |
2500 9C0 00118D38 strcat_s | |
2501 9C1 00114998 strchr | |
2502 9C2 001149D0 strcmp | |
2503 9C3 001148E0 strcpy | |
2504 9C4 00118DCC strcpy_s | |
2505 9C5 00114A90 strlen | |
2506 9C6 00114B50 strncat | |
2507 9C7 00118E4C strncat_s | |
2508 9C8 00112E50 strncmp | |
2509 9C9 00114D00 strncpy | |
2510 9CA 00118F3C strncpy_s | |
2511 9CB 00114E64 strnlen | |
2512 9CC 00114E7C strrchr | |
2513 9CD 00114EA4 strspn | |
2514 9CE 00112F08 strstr | |
2515 9CF 00119024 strtok_s | |
2516 9D0 001138BC swprintf | |
2517 9D1 00117B00 swprintf_s | |
2518 9D2 00119148 swscanf_s | |
2519 9D3 00114F6C tolower | |
2520 9D4 00114F9C toupper | |
2521 9D5 00114FFC towlower | |
2522 9D6 00115020 towupper | |
2523 9D7 000A6818 vDbgPrintEx | |
2524 9D8 0011252C vDbgPrintExWithPrefix | |
2525 9D9 0011509C vsprintf | |
2526 9DA 00118CA4 vsprintf_s | |
2527 9DB 00117B20 vswprintf_s | |
2528 9DC 001150A8 wcscat | |
2529 9DD 00119198 wcscat_s | |
2530 9DE 001150F0 wcschr | |
2531 9DF 00115110 wcscmp | |
2532 9E0 001150D4 wcscpy | |
2533 9E1 00119234 wcscpy_s | |
2534 9E2 0011514C wcscspn | |
2535 9E3 00115194 wcslen | |
2536 9E4 001151B0 wcsncat | |
2537 9E5 001192B8 wcsncat_s | |
2538 9E6 001151EC wcsncmp | |
2539 9E7 00115218 wcsncpy | |
2540 9E8 001193C0 wcsncpy_s | |
2541 9E9 00115260 wcsnlen | |
2542 9EA 00115280 wcsrchr | |
2543 9EB 001152AC wcsspn | |
2544 9EC 001152F8 wcsstr | |
2545 9ED 00115360 wcstombs | |
2546 9EE 00115638 wcstoul | |
2547 9EF 0011570C wctomb | |
1 00483C90 [NONAME] | |
2 00120820 [NONAME] | |
3 000F8234 [NONAME] | |
Summary | |
82000 .data | |
15000 .edata | |
46000 .pdata | |
85000 .rdata | |
4000 .reloc | |
33000 .rsrc | |
223000 .text | |
13000 ALMOSTRO | |
8000 CACHEALI | |
6C000 INIT | |
15000 INITDATA | |
F000 INITKDBG | |
2F7000 PAGE | |
7000 PAGEBGFX | |
10000 PAGEDATA | |
3000 PAGEHDLS | |
5000 PAGEKD | |
19000 PAGELK | |
5000 PAGEVRFB | |
C000 PAGEVRFD | |
29000 PAGEVRFY | |
3000 POOLCODE |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment