| 1 | LIBRARY ntoskrnl.exe
|
|---|
| 2 | EXPORTS
|
|---|
| 3 | ;CcCanIWrite
|
|---|
| 4 | ;CcCopyRead
|
|---|
| 5 | ;CcCopyWrite
|
|---|
| 6 | ;CcDeferWrite
|
|---|
| 7 | ;CcFastCopyRead
|
|---|
| 8 | ;CcFastCopyWrite
|
|---|
| 9 | ;CcFastMdlReadWait
|
|---|
| 10 | ;CcFastReadNotPossible
|
|---|
| 11 | ;CcFastReadWait
|
|---|
| 12 | ;CcFlushCache
|
|---|
| 13 | ;CcGetDirtyPages
|
|---|
| 14 | ;CcGetFileObjectFromBcb
|
|---|
| 15 | ;CcGetFileObjectFromSectionPtrs
|
|---|
| 16 | ;CcGetFlushedValidData
|
|---|
| 17 | ;CcGetLsnForFileObject
|
|---|
| 18 | ;CcInitializeCacheMap
|
|---|
| 19 | ;CcIsThereDirtyData
|
|---|
| 20 | ;CcMapData
|
|---|
| 21 | ;CcMdlRead
|
|---|
| 22 | ;CcMdlReadComplete
|
|---|
| 23 | ;CcMdlWriteAbort
|
|---|
| 24 | ;CcMdlWriteComplete
|
|---|
| 25 | ;CcPinMappedData
|
|---|
| 26 | ;CcPinRead
|
|---|
| 27 | ;CcPrepareMdlWrite
|
|---|
| 28 | ;CcPreparePinWrite
|
|---|
| 29 | ;CcPurgeCacheSection
|
|---|
| 30 | ;CcRemapBcb
|
|---|
| 31 | ;CcRepinBcb
|
|---|
| 32 | ;CcScheduleReadAhead
|
|---|
| 33 | ;CcSetAdditionalCacheAttributes
|
|---|
| 34 | ;CcSetBcbOwnerPointer
|
|---|
| 35 | ;CcSetDirtyPageThreshold
|
|---|
| 36 | ;CcSetDirtyPinnedData
|
|---|
| 37 | ;CcSetFileSizes
|
|---|
| 38 | ;CcSetLogHandleForFile
|
|---|
| 39 | ;CcSetReadAheadGranularity
|
|---|
| 40 | ;CcUninitializeCacheMap
|
|---|
| 41 | ;CcUnpinData
|
|---|
| 42 | ;CcUnpinDataForThread
|
|---|
| 43 | ;CcUnpinRepinnedBcb
|
|---|
| 44 | ;CcWaitForCurrentLazyWriterActivity
|
|---|
| 45 | ;CcZeroData
|
|---|
| 46 | CmRegisterCallback@12
|
|---|
| 47 | CmUnRegisterCallback@4
|
|---|
| 48 | DbgBreakPoint@0
|
|---|
| 49 | DbgBreakPointWithStatus@4
|
|---|
| 50 | ;DbgLoadImageSymbols
|
|---|
| 51 | DbgPrint
|
|---|
| 52 | DbgPrintEx
|
|---|
| 53 | DbgPrintReturnControlC
|
|---|
| 54 | ;DbgPrompt
|
|---|
| 55 | DbgQueryDebugFilterState@8
|
|---|
| 56 | DbgSetDebugFilterState@12
|
|---|
| 57 | @ExAcquireFastMutexUnsafe@4
|
|---|
| 58 | ExAcquireResourceExclusiveLite@8
|
|---|
| 59 | ExAcquireResourceSharedLite@8
|
|---|
| 60 | ;ExAcquireRundownProtection
|
|---|
| 61 | ExAcquireSharedStarveExclusive@8
|
|---|
| 62 | ExAcquireSharedWaitForExclusive@8
|
|---|
| 63 | ExAllocateFromPagedLookasideList@4
|
|---|
| 64 | ExAllocatePool@8
|
|---|
| 65 | ExAllocatePoolWithQuota@8
|
|---|
| 66 | ExAllocatePoolWithQuotaTag@12
|
|---|
| 67 | ExAllocatePoolWithTag@12
|
|---|
| 68 | ExAllocatePoolWithTagPriority@16
|
|---|
| 69 | ExConvertExclusiveToSharedLite@4
|
|---|
| 70 | ExCreateCallback@16
|
|---|
| 71 | ExDeleteNPagedLookasideList@4
|
|---|
| 72 | ExDeletePagedLookasideList@4
|
|---|
| 73 | ExDeleteResourceLite@4
|
|---|
| 74 | ExDesktopObjectType DATA
|
|---|
| 75 | ;ExDisableResourceBoostLite
|
|---|
| 76 | ;ExEnumHandleTable
|
|---|
| 77 | ExEventObjectType DATA
|
|---|
| 78 | ExExtendZone@12
|
|---|
| 79 | @Exfi386InterlockedDecrementLong@4
|
|---|
| 80 | @Exfi386InterlockedExchangeUlong@8
|
|---|
| 81 | @Exfi386InterlockedIncrementLong@4
|
|---|
| 82 | @ExfInterlockedAddUlong@12
|
|---|
| 83 | @ExfInterlockedInsertHeadList@12
|
|---|
| 84 | @ExfInterlockedInsertTailList@12
|
|---|
| 85 | @ExfInterlockedPopEntryList@8
|
|---|
| 86 | @ExfInterlockedPushEntryList@12
|
|---|
| 87 | @ExfInterlockedRemoveHeadList@8
|
|---|
| 88 | ExFreePool@4
|
|---|
| 89 | ExFreePoolWithTag@8
|
|---|
| 90 | ExFreeToPagedLookasideList@8
|
|---|
| 91 | ;ExGetCurrentProcessorCounts
|
|---|
| 92 | ;ExGetCurrentProcessorCpuUsage
|
|---|
| 93 | ExGetExclusiveWaiterCount@4
|
|---|
| 94 | ExGetPreviousMode@0
|
|---|
| 95 | ExGetSharedWaiterCount@4
|
|---|
| 96 | Exi386InterlockedDecrementLong@4
|
|---|
| 97 | Exi386InterlockedExchangeUlong@8
|
|---|
| 98 | Exi386InterlockedIncrementLong@4
|
|---|
| 99 | ExInitializeNPagedLookasideList@28
|
|---|
| 100 | ExInitializePagedLookasideList@28
|
|---|
| 101 | ExInitializeResourceLite@4
|
|---|
| 102 | ;ExInitializeRundownProtection
|
|---|
| 103 | ExInitializeZone@16
|
|---|
| 104 | ExInterlockedAddLargeInteger@12
|
|---|
| 105 | @ExInterlockedAddLargeStatistic@8
|
|---|
| 106 | ExInterlockedAddUlong@12
|
|---|
| 107 | @ExInterlockedCompareExchange64@16
|
|---|
| 108 | ExInterlockedDecrementLong@8
|
|---|
| 109 | ExInterlockedExchangeUlong@12
|
|---|
| 110 | ExInterlockedExtendZone@16
|
|---|
| 111 | @ExInterlockedFlushSList@4
|
|---|
| 112 | @ExInterlockedIncrementLong@8
|
|---|
| 113 | ExInterlockedInsertHeadList@12
|
|---|
| 114 | ExInterlockedInsertTailList@12
|
|---|
| 115 | ExInterlockedPopEntryList@8
|
|---|
| 116 | @ExInterlockedPopEntrySList@8
|
|---|
| 117 | ExInterlockedPushEntryList@12
|
|---|
| 118 | @ExInterlockedPushEntrySList@12
|
|---|
| 119 | ExInterlockedRemoveHeadList@8
|
|---|
| 120 | ExIsProcessorFeaturePresent@4
|
|---|
| 121 | ExIsResourceAcquiredExclusiveLite@4
|
|---|
| 122 | ExIsResourceAcquiredSharedLite@4
|
|---|
| 123 | ExLocalTimeToSystemTime@8
|
|---|
| 124 | ExNotifyCallback@12
|
|---|
| 125 | ;ExQueryPoolBlockSize
|
|---|
| 126 | ExQueueWorkItem@8
|
|---|
| 127 | ExRaiseAccessViolation@0
|
|---|
| 128 | ExRaiseDatatypeMisalignment@0
|
|---|
| 129 | ;ExRaiseException
|
|---|
| 130 | ;ExRaiseHardError
|
|---|
| 131 | ExRaiseStatus@4
|
|---|
| 132 | ;ExReInitializeRundownProtection
|
|---|
| 133 | ExRegisterCallback@12
|
|---|
| 134 | ExReinitializeResourceLite@4
|
|---|
| 135 | @ExReleaseFastMutexUnsafe@4
|
|---|
| 136 | ExReleaseResourceForThreadLite@8
|
|---|
| 137 | @ExReleaseResourceLite@4
|
|---|
| 138 | ;ExReleaseRundownProtection
|
|---|
| 139 | ;ExRundownCompleted
|
|---|
| 140 | ExSemaphoreObjectType DATA
|
|---|
| 141 | ExSetResourceOwnerPointer@8
|
|---|
| 142 | ExSetTimerResolution@8
|
|---|
| 143 | ;ExSystemExceptionFilter
|
|---|
| 144 | ExSystemTimeToLocalTime@8
|
|---|
| 145 | ExUnregisterCallback@4
|
|---|
| 146 | ExUuidCreate@4
|
|---|
| 147 | ExVerifySuite@4
|
|---|
| 148 | ;ExWaitForRundownProtectionRelease
|
|---|
| 149 | ExWindowStationObjectType DATA
|
|---|
| 150 | ;FsRtlAcquireFileExclusive
|
|---|
| 151 | ;FsRtlAddLargeMcbEntry
|
|---|
| 152 | ;FsRtlAddMcbEntry
|
|---|
| 153 | ;FsRtlAddToTunnelCache
|
|---|
| 154 | ;FsRtlAllocateFileLock
|
|---|
| 155 | ;FsRtlAllocatePool
|
|---|
| 156 | ;FsRtlAllocatePoolWithQuota
|
|---|
| 157 | ;FsRtlAllocatePoolWithQuotaTag
|
|---|
| 158 | ;FsRtlAllocatePoolWithTag
|
|---|
| 159 | ;FsRtlAllocateResource
|
|---|
| 160 | ;FsRtlAreNamesEqual
|
|---|
| 161 | ;FsRtlBalanceReads
|
|---|
| 162 | ;FsRtlCheckLockForReadAccess
|
|---|
| 163 | ;FsRtlCheckLockForWriteAccess
|
|---|
| 164 | ;FsRtlCheckOplock
|
|---|
| 165 | ;FsRtlCopyRead
|
|---|
| 166 | ;FsRtlCopyWrite
|
|---|
| 167 | ;FsRtlCurrentBatchOplock
|
|---|
| 168 | ;FsRtlDeleteKeyFromTunnelCache
|
|---|
| 169 | ;FsRtlDeleteTunnelCache
|
|---|
| 170 | ;FsRtlDeregisterUncProvider
|
|---|
| 171 | ;FsRtlDissectDbcs
|
|---|
| 172 | ;FsRtlDissectName
|
|---|
| 173 | ;FsRtlDoesDbcsContainWildCards
|
|---|
| 174 | ;FsRtlDoesNameContainWildCards
|
|---|
| 175 | ;FsRtlFastCheckLockForRead
|
|---|
| 176 | ;FsRtlFastCheckLockForWrite
|
|---|
| 177 | ;FsRtlFastUnlockAll
|
|---|
| 178 | ;FsRtlFastUnlockAllByKey
|
|---|
| 179 | ;FsRtlFastUnlockSingle
|
|---|
| 180 | ;FsRtlFindInTunnelCache
|
|---|
| 181 | ;FsRtlFreeFileLock
|
|---|
| 182 | ;FsRtlGetFileSize
|
|---|
| 183 | ;FsRtlGetNextFileLock
|
|---|
| 184 | ;FsRtlGetNextLargeMcbEntry
|
|---|
| 185 | ;FsRtlGetNextMcbEntry
|
|---|
| 186 | ;FsRtlIncrementCcFastReadNoWait
|
|---|
| 187 | ;FsRtlIncrementCcFastReadNotPossible
|
|---|
| 188 | ;FsRtlIncrementCcFastReadResourceMiss
|
|---|
| 189 | ;FsRtlIncrementCcFastReadWait
|
|---|
| 190 | ;FsRtlInitializeFileLock
|
|---|
| 191 | ;FsRtlInitializeLargeMcb
|
|---|
| 192 | ;FsRtlInitializeMcb
|
|---|
| 193 | ;FsRtlInitializeOplock
|
|---|
| 194 | ;FsRtlInitializeTunnelCache
|
|---|
| 195 | ;FsRtlInsertPerFileObjectContext
|
|---|
| 196 | ;FsRtlInsertPerStreamContext
|
|---|
| 197 | ;FsRtlIsDbcsInExpression
|
|---|
| 198 | ;FsRtlIsFatDbcsLegal
|
|---|
| 199 | ;FsRtlIsHpfsDbcsLegal
|
|---|
| 200 | ;FsRtlIsNameInExpression
|
|---|
| 201 | ;FsRtlIsNtstatusExpected
|
|---|
| 202 | ;FsRtlIsPagingFile
|
|---|
| 203 | FsRtlIsTotalDeviceFailure@4
|
|---|
| 204 | ;FsRtlLegalAnsiCharacterArray
|
|---|
| 205 | ;FsRtlLookupLargeMcbEntry
|
|---|
| 206 | ;FsRtlLookupLastLargeMcbEntry
|
|---|
| 207 | ;FsRtlLookupLastLargeMcbEntryAndIndex
|
|---|
| 208 | ;FsRtlLookupLastMcbEntry
|
|---|
| 209 | ;FsRtlLookupMcbEntry
|
|---|
| 210 | ;FsRtlLookupPerFileObjectContext
|
|---|
| 211 | ;FsRtlLookupPerStreamContextInternal
|
|---|
| 212 | ;FsRtlMdlRead
|
|---|
| 213 | ;FsRtlMdlReadComplete
|
|---|
| 214 | ;FsRtlMdlReadCompleteDev
|
|---|
| 215 | ;FsRtlMdlReadDev
|
|---|
| 216 | ;FsRtlMdlWriteComplete
|
|---|
| 217 | ;FsRtlMdlWriteCompleteDev
|
|---|
| 218 | ;FsRtlNormalizeNtstatus
|
|---|
| 219 | ;FsRtlNotifyChangeDirectory
|
|---|
| 220 | ;FsRtlNotifyCleanup
|
|---|
| 221 | ;FsRtlNotifyFilterChangeDirectory
|
|---|
| 222 | ;FsRtlNotifyFilterReportChange
|
|---|
| 223 | ;FsRtlNotifyFullChangeDirectory
|
|---|
| 224 | ;FsRtlNotifyFullReportChange
|
|---|
| 225 | ;FsRtlNotifyInitializeSync
|
|---|
| 226 | ;FsRtlNotifyReportChange
|
|---|
| 227 | ;FsRtlNotifyUninitializeSync
|
|---|
| 228 | ;FsRtlNotifyVolumeEvent
|
|---|
| 229 | ;FsRtlNumberOfRunsInLargeMcb
|
|---|
| 230 | ;FsRtlNumberOfRunsInMcb
|
|---|
| 231 | ;FsRtlOplockFsctrl
|
|---|
| 232 | ;FsRtlOplockIsFastIoPossible
|
|---|
| 233 | ;FsRtlPostPagingFileStackOverflow
|
|---|
| 234 | ;FsRtlPostStackOverflow
|
|---|
| 235 | ;FsRtlPrepareMdlWrite
|
|---|
| 236 | ;FsRtlPrepareMdlWriteDev
|
|---|
| 237 | ;FsRtlPrivateLock
|
|---|
| 238 | ;FsRtlProcessFileLock
|
|---|
| 239 | ;FsRtlRegisterFileSystemFilterCallbacks
|
|---|
| 240 | ;FsRtlRegisterUncProvider
|
|---|
| 241 | ;FsRtlReleaseFile
|
|---|
| 242 | ;FsRtlRemoveLargeMcbEntry
|
|---|
| 243 | ;FsRtlRemoveMcbEntry
|
|---|
| 244 | ;FsRtlRemovePerFileObjectContext
|
|---|
| 245 | ;FsRtlRemovePerStreamContext
|
|---|
| 246 | ;FsRtlResetLargeMcb
|
|---|
| 247 | ;FsRtlSplitLargeMcb
|
|---|
| 248 | ;FsRtlSyncVolumes
|
|---|
| 249 | ;FsRtlTeardownPerStreamContexts
|
|---|
| 250 | ;FsRtlTruncateLargeMcb
|
|---|
| 251 | ;FsRtlTruncateMcb
|
|---|
| 252 | ;FsRtlUninitializeFileLock
|
|---|
| 253 | ;FsRtlUninitializeLargeMcb
|
|---|
| 254 | ;FsRtlUninitializeMcb
|
|---|
| 255 | ;FsRtlUninitializeOplock
|
|---|
| 256 | ;HalDispatchTable DATA
|
|---|
| 257 | @HalExamineMBR@16
|
|---|
| 258 | ;HalPrivateDispatchTable DATA
|
|---|
| 259 | ;HeadlessDispatch
|
|---|
| 260 | ;InbvAcquireDisplayOwnership
|
|---|
| 261 | ;InbvCheckDisplayOwnership
|
|---|
| 262 | ;InbvDisplayString
|
|---|
| 263 | ;InbvEnableBootDriver
|
|---|
| 264 | ;InbvEnableDisplayString
|
|---|
| 265 | ;InbvInstallDisplayStringFilter
|
|---|
| 266 | ;InbvIsBootDriverInstalled
|
|---|
| 267 | ;InbvNotifyDisplayOwnershipLost
|
|---|
| 268 | ;InbvResetDisplay
|
|---|
| 269 | ;InbvSetScrollRegion
|
|---|
| 270 | ;InbvSetTextColor
|
|---|
| 271 | ;InbvSolidColorFill
|
|---|
| 272 | ;InitSafeBootMode DATA
|
|---|
| 273 | @InterlockedCompareExchange@12
|
|---|
| 274 | @InterlockedDecrement@4
|
|---|
| 275 | @InterlockedExchange@8
|
|---|
| 276 | @InterlockedExchangeAdd@8
|
|---|
| 277 | @InterlockedIncrement@4
|
|---|
| 278 | @InterlockedPopEntrySList@4
|
|---|
| 279 | @InterlockedPushEntrySList@8
|
|---|
| 280 | IoAcquireCancelSpinLock@4
|
|---|
| 281 | IoAcquireRemoveLockEx@20
|
|---|
| 282 | ;IoAcquireVpbSpinLock
|
|---|
| 283 | IoAdapterObjectType DATA
|
|---|
| 284 | IoAllocateAdapterChannel@20
|
|---|
| 285 | IoAllocateController@16
|
|---|
| 286 | IoAllocateDriverObjectExtension@16
|
|---|
| 287 | IoAllocateErrorLogEntry@8
|
|---|
| 288 | IoAllocateIrp@8
|
|---|
| 289 | IoAllocateMdl@20
|
|---|
| 290 | IoAllocateWorkItem@4
|
|---|
| 291 | ;IoAssignDriveLetters
|
|---|
| 292 | IoAssignResources@24
|
|---|
| 293 | IoAttachDevice@12
|
|---|
| 294 | IoAttachDeviceByPointer@8
|
|---|
| 295 | IoAttachDeviceToDeviceStack@8
|
|---|
| 296 | ;IoAttachDeviceToDeviceStackSafe
|
|---|
| 297 | IoBuildAsynchronousFsdRequest@24
|
|---|
| 298 | IoBuildDeviceIoControlRequest@36
|
|---|
| 299 | IoBuildPartialMdl@16
|
|---|
| 300 | IoBuildSynchronousFsdRequest@28
|
|---|
| 301 | ;IoCallDriver
|
|---|
| 302 | IoCancelFileOpen@8
|
|---|
| 303 | IoCancelIrp@4
|
|---|
| 304 | ;IoCheckDesiredAccess
|
|---|
| 305 | ;IoCheckEaBufferValidity
|
|---|
| 306 | ;IoCheckFunctionAccess
|
|---|
| 307 | ;IoCheckQuerySetFileInformation
|
|---|
| 308 | ;IoCheckQuerySetVolumeInformation
|
|---|
| 309 | ;IoCheckQuotaBufferValidity
|
|---|
| 310 | IoCheckShareAccess@20
|
|---|
| 311 | ;IoCompleteRequest
|
|---|
| 312 | IoConnectInterrupt@44
|
|---|
| 313 | IoCreateController@4
|
|---|
| 314 | IoCreateDevice@28
|
|---|
| 315 | IoCreateDisk@8
|
|---|
| 316 | ;IoCreateDriver
|
|---|
| 317 | IoCreateFile@56
|
|---|
| 318 | ;IoCreateFileSpecifyDeviceObjectHint
|
|---|
| 319 | IoCreateNotificationEvent@8
|
|---|
| 320 | ;IoCreateStreamFileObject
|
|---|
| 321 | ;IoCreateStreamFileObjectEx
|
|---|
| 322 | ;IoCreateStreamFileObjectLite
|
|---|
| 323 | IoCreateSymbolicLink@8
|
|---|
| 324 | IoCreateSynchronizationEvent@8
|
|---|
| 325 | IoCreateUnprotectedSymbolicLink@8
|
|---|
| 326 | IoCsqInitialize@28
|
|---|
| 327 | IoCsqInsertIrp@12
|
|---|
| 328 | IoCsqRemoveIrp@8
|
|---|
| 329 | IoCsqRemoveNextIrp@8
|
|---|
| 330 | IoDeleteController@4
|
|---|
| 331 | IoDeleteDevice@4
|
|---|
| 332 | ;IoDeleteDriver
|
|---|
| 333 | IoDeleteSymbolicLink@4
|
|---|
| 334 | IoDetachDevice@4
|
|---|
| 335 | IoDeviceHandlerObjectSize DATA
|
|---|
| 336 | IoDeviceHandlerObjectType DATA
|
|---|
| 337 | IoDeviceObjectType DATA
|
|---|
| 338 | IoDisconnectInterrupt@4
|
|---|
| 339 | IoDriverObjectType DATA
|
|---|
| 340 | ;IoEnqueueIrp
|
|---|
| 341 | ;IoEnumerateDeviceObjectList
|
|---|
| 342 | ;IoFastQueryNetworkAttributes
|
|---|
| 343 | IoFileObjectType DATA
|
|---|
| 344 | ;IoForwardAndCatchIrp
|
|---|
| 345 | IoForwardIrpSynchronously@8
|
|---|
| 346 | IoFreeController@4
|
|---|
| 347 | IoFreeErrorLogEntry@4
|
|---|
| 348 | IoFreeIrp@4
|
|---|
| 349 | IoFreeMdl@4
|
|---|
| 350 | IoFreeWorkItem@4
|
|---|
| 351 | IoGetAttachedDevice@4
|
|---|
| 352 | IoGetAttachedDeviceReference@4
|
|---|
| 353 | ;IoGetBaseFileSystemDeviceObject
|
|---|
| 354 | IoGetBootDiskInformation@8
|
|---|
| 355 | IoGetConfigurationInformation@0
|
|---|
| 356 | IoGetCurrentProcess@0
|
|---|
| 357 | ;IoGetDeviceAttachmentBaseRef
|
|---|
| 358 | IoGetDeviceInterfaceAlias@12
|
|---|
| 359 | IoGetDeviceInterfaces@16
|
|---|
| 360 | IoGetDeviceObjectPointer@16
|
|---|
| 361 | IoGetDeviceProperty@20
|
|---|
| 362 | IoGetDeviceToVerify@4
|
|---|
| 363 | ;IoGetDiskDeviceObject
|
|---|
| 364 | IoGetDmaAdapter@12
|
|---|
| 365 | IoGetDriverObjectExtension@8
|
|---|
| 366 | IoGetFileObjectGenericMapping@0
|
|---|
| 367 | IoGetInitialStack@0
|
|---|
| 368 | ;IoGetLowerDeviceObject
|
|---|
| 369 | IoGetRelatedDeviceObject@4
|
|---|
| 370 | ;IoGetRequestorProcess
|
|---|
| 371 | ;IoGetRequestorProcessId
|
|---|
| 372 | ;IoGetRequestorSessionId
|
|---|
| 373 | IoGetStackLimits@8
|
|---|
| 374 | ;IoGetTopLevelIrp
|
|---|
| 375 | IoInitializeIrp@12
|
|---|
| 376 | IoInitializeRemoveLockEx@20
|
|---|
| 377 | IoInitializeTimer@12
|
|---|
| 378 | IoInvalidateDeviceRelations@8
|
|---|
| 379 | IoInvalidateDeviceState@4
|
|---|
| 380 | ;IoIsFileOriginRemote
|
|---|
| 381 | ;IoIsOperationSynchronous
|
|---|
| 382 | ;IoIsSystemThread
|
|---|
| 383 | ;IoIsValidNameGraftingBuffer
|
|---|
| 384 | IoIsWdmVersionAvailable@8
|
|---|
| 385 | IoMakeAssociatedIrp@8
|
|---|
| 386 | IoOpenDeviceInterfaceRegistryKey@12
|
|---|
| 387 | IoOpenDeviceRegistryKey@16
|
|---|
| 388 | ;IoPageRead
|
|---|
| 389 | ;IoPnPDeliverServicePowerNotification
|
|---|
| 390 | IoQueryDeviceDescription@32
|
|---|
| 391 | ;IoQueryFileDosDeviceName
|
|---|
| 392 | ;IoQueryFileInformation
|
|---|
| 393 | ;IoQueryVolumeInformation
|
|---|
| 394 | ;IoQueueThreadIrp
|
|---|
| 395 | IoQueueWorkItem@16
|
|---|
| 396 | IoRaiseHardError@12
|
|---|
| 397 | IoRaiseInformationalHardError@12
|
|---|
| 398 | IoReadDiskSignature@12
|
|---|
| 399 | ;IoReadOperationCount DATA
|
|---|
| 400 | @IoReadPartitionTable@16
|
|---|
| 401 | IoReadPartitionTableEx@8
|
|---|
| 402 | ;IoReadTransferCount DATA
|
|---|
| 403 | IoRegisterBootDriverReinitialization@12
|
|---|
| 404 | IoRegisterDeviceInterface@16
|
|---|
| 405 | IoRegisterDriverReinitialization@12
|
|---|
| 406 | ;IoRegisterFileSystem
|
|---|
| 407 | ;IoRegisterFsRegistrationChange
|
|---|
| 408 | ;IoRegisterLastChanceShutdownNotification
|
|---|
| 409 | IoRegisterPlugPlayNotification@28
|
|---|
| 410 | IoRegisterShutdownNotification@4
|
|---|
| 411 | IoReleaseCancelSpinLock@4
|
|---|
| 412 | IoReleaseRemoveLockAndWaitEx@12
|
|---|
| 413 | IoReleaseRemoveLockEx@12
|
|---|
| 414 | ;IoReleaseVpbSpinLock
|
|---|
| 415 | IoRemoveShareAccess@8
|
|---|
| 416 | IoReportDetectedDevice@32
|
|---|
| 417 | ;IoReportHalResourceUsage
|
|---|
| 418 | IoReportResourceForDetection@28
|
|---|
| 419 | IoReportResourceUsage@36
|
|---|
| 420 | IoReportTargetDeviceChange@8
|
|---|
| 421 | IoReportTargetDeviceChangeAsynchronous@16
|
|---|
| 422 | IoRequestDeviceEject@4
|
|---|
| 423 | IoReuseIrp@8
|
|---|
| 424 | IoSetCompletionRoutineEx@28
|
|---|
| 425 | IoSetDeviceInterfaceState@8
|
|---|
| 426 | ;IoSetDeviceToVerify
|
|---|
| 427 | ;IoSetFileOrigin
|
|---|
| 428 | IoSetHardErrorOrVerifyDevice@8
|
|---|
| 429 | ;IoSetInformation
|
|---|
| 430 | ;IoSetIoCompletion
|
|---|
| 431 | @IoSetPartitionInformation@16
|
|---|
| 432 | IoSetPartitionInformationEx@12
|
|---|
| 433 | IoSetShareAccess@16
|
|---|
| 434 | IoSetStartIoAttributes@12
|
|---|
| 435 | IoSetSystemPartition@4
|
|---|
| 436 | IoSetThreadHardErrorMode@4
|
|---|
| 437 | ;IoSetTopLevelIrp
|
|---|
| 438 | IoStartNextPacket@8
|
|---|
| 439 | IoStartNextPacketByKey@12
|
|---|
| 440 | IoStartPacket@16
|
|---|
| 441 | IoStartTimer@4
|
|---|
| 442 | ;IoStatisticsLock DATA
|
|---|
| 443 | IoStopTimer@4
|
|---|
| 444 | ;IoSynchronousInvalidateDeviceRelations
|
|---|
| 445 | ;IoSynchronousPageWrite
|
|---|
| 446 | ;IoThreadToProcess
|
|---|
| 447 | ;IoUnregisterFileSystem
|
|---|
| 448 | ;IoUnregisterFsRegistrationChange
|
|---|
| 449 | IoUnregisterPlugPlayNotification@4
|
|---|
| 450 | IoUnregisterShutdownNotification@4
|
|---|
| 451 | IoUpdateShareAccess@8
|
|---|
| 452 | IoVerifyPartitionTable@8
|
|---|
| 453 | ;IoVerifyVolume
|
|---|
| 454 | IoVolumeDeviceToDosName@8
|
|---|
| 455 | IoWMIAllocateInstanceIds@12
|
|---|
| 456 | IoWMIDeviceObjectToInstanceName@12
|
|---|
| 457 | IoWMIExecuteMethod@24
|
|---|
| 458 | IoWMIHandleToInstanceName@12
|
|---|
| 459 | IoWMIOpenBlock@12
|
|---|
| 460 | IoWMIQueryAllData@12
|
|---|
| 461 | IoWMIQueryAllDataMultiple@16
|
|---|
| 462 | IoWMIQuerySingleInstance@16
|
|---|
| 463 | IoWMIQuerySingleInstanceMultiple@20
|
|---|
| 464 | IoWMIRegistrationControl@8
|
|---|
| 465 | IoWMISetNotificationCallback@12
|
|---|
| 466 | IoWMISetSingleInstance@20
|
|---|
| 467 | IoWMISetSingleItem@24
|
|---|
| 468 | IoWMISuggestInstanceName@16
|
|---|
| 469 | IoWMIWriteEvent@4
|
|---|
| 470 | IoWriteErrorLogEntry@4
|
|---|
| 471 | ;IoWriteOperationCount DATA
|
|---|
| 472 | @IoWritePartitionTable@20
|
|---|
| 473 | IoWritePartitionTableEx@8
|
|---|
| 474 | ;IoWriteTransferCount DATA
|
|---|
| 475 | @IofCallDriver@8
|
|---|
| 476 | @IofCompleteRequest@8
|
|---|
| 477 | ;KdDebuggerEnabled DATA
|
|---|
| 478 | ;KdDebuggerNotPresent DATA
|
|---|
| 479 | KdDisableDebugger@0
|
|---|
| 480 | KdEnableDebugger@0
|
|---|
| 481 | ;KdEnteredDebugger DATA
|
|---|
| 482 | ;KdPollBreakIn
|
|---|
| 483 | ;KdPowerTransition
|
|---|
| 484 | ;Ke386CallBios
|
|---|
| 485 | Ke386IoSetAccessProcess@8
|
|---|
| 486 | Ke386QueryIoAccessMap@8
|
|---|
| 487 | Ke386SetIoAccessMap@8
|
|---|
| 488 | @KeAcquireInStackQueuedSpinLockAtDpcLevel@8
|
|---|
| 489 | KeAcquireInterruptSpinLock@4
|
|---|
| 490 | ;KeAcquireSpinLockAtDpcLevel
|
|---|
| 491 | KeAddSystemServiceTable@20
|
|---|
| 492 | KeAreApcsDisabled@0
|
|---|
| 493 | KeAttachProcess@4
|
|---|
| 494 | KeBugCheck@4
|
|---|
| 495 | KeBugCheckEx@20
|
|---|
| 496 | KeCancelTimer@4
|
|---|
| 497 | KeClearEvent@4
|
|---|
| 498 | ;KeConnectInterrupt
|
|---|
| 499 | ;KeDcacheFlushCount DATA
|
|---|
| 500 | KeDelayExecutionThread@12
|
|---|
| 501 | KeDeregisterBugCheckCallback@4
|
|---|
| 502 | KeDetachProcess@0
|
|---|
| 503 | ;KeDisconnectInterrupt
|
|---|
| 504 | KeEnterCriticalRegion@0
|
|---|
| 505 | ;KeEnterKernelDebugger
|
|---|
| 506 | ;KeFindConfigurationEntry
|
|---|
| 507 | ;KeFindConfigurationNextEntry
|
|---|
| 508 | ;KeFlushEntireTb
|
|---|
| 509 | KeGetCurrentThread@0
|
|---|
| 510 | KeGetPreviousMode@0
|
|---|
| 511 | KeGetRecommendedSharedDataAlignment@0
|
|---|
| 512 | ;KeI386AbiosCall
|
|---|
| 513 | ;KeI386AllocateGdtSelectors
|
|---|
| 514 | ;KeI386Call16BitCStyleFunction
|
|---|
| 515 | ;KeI386Call16BitFunction
|
|---|
| 516 | ;KeI386FlatToGdtSelector
|
|---|
| 517 | ;KeI386GetLid
|
|---|
| 518 | ;KeI386MachineType DATA
|
|---|
| 519 | ;KeI386ReleaseGdtSelectors
|
|---|
| 520 | ;KeI386ReleaseLid
|
|---|
| 521 | ;KeI386SetGdtSelector
|
|---|
| 522 | ;KeIcacheFlushCount DATA
|
|---|
| 523 | KeInitializeApc@32
|
|---|
| 524 | KeInitializeDeviceQueue@4
|
|---|
| 525 | KeInitializeDpc@12
|
|---|
| 526 | KeInitializeEvent@12
|
|---|
| 527 | ;KeInitializeInterrupt
|
|---|
| 528 | ;KeInitializeMutant
|
|---|
| 529 | KeInitializeMutex@8
|
|---|
| 530 | ;KeInitializeQueue
|
|---|
| 531 | KeInitializeSemaphore@12
|
|---|
| 532 | KeInitializeSpinLock@4
|
|---|
| 533 | KeInitializeTimer@4
|
|---|
| 534 | KeInitializeTimerEx@8
|
|---|
| 535 | KeInsertByKeyDeviceQueue@12
|
|---|
| 536 | KeInsertDeviceQueue@8
|
|---|
| 537 | ;KeInsertHeadQueue
|
|---|
| 538 | ;KeInsertQueue
|
|---|
| 539 | ;KeInsertQueueApc
|
|---|
| 540 | KeInsertQueueDpc@12
|
|---|
| 541 | ;KeIsAttachedProcess
|
|---|
| 542 | ;KeIsExecutingDpc
|
|---|
| 543 | KeLeaveCriticalRegion@0
|
|---|
| 544 | ;KeLoaderBlock DATA
|
|---|
| 545 | ;KeNumberProcessors DATA
|
|---|
| 546 | ;KeProfileInterrupt
|
|---|
| 547 | ;KeProfileInterruptWithSource
|
|---|
| 548 | KePulseEvent@12
|
|---|
| 549 | ;KeQueryActiveProcessors
|
|---|
| 550 | KeQueryInterruptTime@0
|
|---|
| 551 | KeQueryPriorityThread@4
|
|---|
| 552 | ;KeQueryRuntimeThread
|
|---|
| 553 | KeQuerySystemTime@4
|
|---|
| 554 | KeQueryTickCount@4
|
|---|
| 555 | KeQueryTimeIncrement@0
|
|---|
| 556 | ;KeRaiseUserException
|
|---|
| 557 | KeReadStateEvent@4
|
|---|
| 558 | ;KeReadStateMutant
|
|---|
| 559 | KeReadStateMutex@4
|
|---|
| 560 | ;KeReadStateQueue
|
|---|
| 561 | KeReadStateSemaphore@4
|
|---|
| 562 | KeReadStateTimer@4
|
|---|
| 563 | KeRegisterBugCheckCallback@20
|
|---|
| 564 | KeReleaseInStackQueuedSpinLockFromDpcLevel@4
|
|---|
| 565 | KeReleaseInterruptSpinLock@8
|
|---|
| 566 | ;KeReleaseMutant
|
|---|
| 567 | KeReleaseMutex@8
|
|---|
| 568 | KeReleaseSemaphore@16
|
|---|
| 569 | ;KeReleaseSpinLockFromDpcLevel
|
|---|
| 570 | KeRemoveByKeyDeviceQueue@8
|
|---|
| 571 | ;KeRemoveByKeyDeviceQueueIfBusy
|
|---|
| 572 | KeRemoveDeviceQueue@4
|
|---|
| 573 | KeRemoveEntryDeviceQueue@8
|
|---|
| 574 | ;KeRemoveQueue
|
|---|
| 575 | KeRemoveQueueDpc@4
|
|---|
| 576 | ;KeRemoveSystemServiceTable
|
|---|
| 577 | KeResetEvent@4
|
|---|
| 578 | KeRestoreFloatingPointState@4
|
|---|
| 579 | ;KeRevertToUserAffinityThread
|
|---|
| 580 | ;KeRundownQueue
|
|---|
| 581 | KeSaveFloatingPointState@4
|
|---|
| 582 | ;KeSaveStateForHibernate
|
|---|
| 583 | ;KeServiceDescriptorTable DATA
|
|---|
| 584 | ;KeSetAffinityThread
|
|---|
| 585 | KeSetBasePriorityThread@8
|
|---|
| 586 | ;KeSetDmaIoCoherency
|
|---|
| 587 | KeSetEvent@12
|
|---|
| 588 | ;KeSetEventBoostPriority
|
|---|
| 589 | ;KeSetIdealProcessorThread
|
|---|
| 590 | KeSetImportanceDpc@8
|
|---|
| 591 | ;KeSetKernelStackSwapEnable
|
|---|
| 592 | KeSetPriorityThread@8
|
|---|
| 593 | ;KeSetProfileIrql
|
|---|
| 594 | ;KeSetSystemAffinityThread
|
|---|
| 595 | KeSetTargetProcessorDpc@8
|
|---|
| 596 | ;KeSetTimeIncrement
|
|---|
| 597 | @KeSetTimeUpdateNotifyRoutine@4
|
|---|
| 598 | KeSetTimer@16
|
|---|
| 599 | KeSetTimerEx@20
|
|---|
| 600 | ;KeStackAttachProcess
|
|---|
| 601 | KeSynchronizeExecution@12
|
|---|
| 602 | ;KeTerminateThread
|
|---|
| 603 | ;KeTickCount DATA
|
|---|
| 604 | ;KeUnstackDetachProcess
|
|---|
| 605 | ;KeUpdateRunTime
|
|---|
| 606 | ;KeUpdateSystemTime
|
|---|
| 607 | ;KeUserModeCallback
|
|---|
| 608 | KeWaitForMultipleObjects@32
|
|---|
| 609 | KeWaitForMutexObject@20
|
|---|
| 610 | KeWaitForSingleObject@20
|
|---|
| 611 | @KefAcquireSpinLockAtDpcLevel@4
|
|---|
| 612 | @KefReleaseSpinLockFromDpcLevel@4
|
|---|
| 613 | ;Kei386EoiHelper
|
|---|
| 614 | ;KiAcquireSpinLock
|
|---|
| 615 | ;KiBugCheckData DATA
|
|---|
| 616 | ;KiCoprocessorError
|
|---|
| 617 | ;KiDeliverApc
|
|---|
| 618 | ;KiDispatchInterrupt
|
|---|
| 619 | ;KiEnableTimerWatchdog DATA
|
|---|
| 620 | ;KiIpiServiceRoutine
|
|---|
| 621 | ;KiReleaseSpinLock
|
|---|
| 622 | ;KiUnexpectedInterrupt
|
|---|
| 623 | ;Kii386SpinOnSpinLock
|
|---|
| 624 | ;LdrAccessResource
|
|---|
| 625 | ;LdrEnumResources
|
|---|
| 626 | ;LdrFindResourceDirectory_U
|
|---|
| 627 | ;LdrFindResource_U
|
|---|
| 628 | LpcPortObjectType DATA
|
|---|
| 629 | ;LpcRequestPort
|
|---|
| 630 | ;LpcRequestWaitReplyPort
|
|---|
| 631 | ;LsaCallAuthenticationPackage
|
|---|
| 632 | ;LsaDeregisterLogonProcess
|
|---|
| 633 | ;LsaFreeReturnBuffer
|
|---|
| 634 | ;LsaLogonUser
|
|---|
| 635 | ;LsaLookupAuthenticationPackage
|
|---|
| 636 | ;LsaRegisterLogonProcess
|
|---|
| 637 | ;Mm64BitPhysicalAddress DATA
|
|---|
| 638 | ;MmAddPhysicalMemory
|
|---|
| 639 | ;MmAddVerifierThunks
|
|---|
| 640 | ;MmAdjustWorkingSetSize
|
|---|
| 641 | MmAdvanceMdl@8
|
|---|
| 642 | MmAllocateContiguousMemory@8
|
|---|
| 643 | MmAllocateContiguousMemorySpecifyCache@20
|
|---|
| 644 | MmAllocateMappingAddress@8
|
|---|
| 645 | MmAllocateNonCachedMemory@4
|
|---|
| 646 | MmAllocatePagesForMdl@28
|
|---|
| 647 | MmBuildMdlForNonPagedPool@4
|
|---|
| 648 | ;MmCanFileBeTruncated
|
|---|
| 649 | MmCreateMdl@12
|
|---|
| 650 | MmCreateSection@32
|
|---|
| 651 | ;MmDisableModifiedWriteOfSection
|
|---|
| 652 | MmFlushImageSection@8
|
|---|
| 653 | ;MmForceSectionClosed
|
|---|
| 654 | MmFreeContiguousMemory@4
|
|---|
| 655 | MmFreeContiguousMemorySpecifyCache@12
|
|---|
| 656 | MmFreeMappingAddress@8
|
|---|
| 657 | MmFreeNonCachedMemory@8
|
|---|
| 658 | MmFreePagesFromMdl@4
|
|---|
| 659 | MmGetPhysicalAddress@4
|
|---|
| 660 | MmGetPhysicalMemoryRanges@0
|
|---|
| 661 | MmGetSystemRoutineAddress@4
|
|---|
| 662 | MmGetVirtualForPhysical@4
|
|---|
| 663 | ;MmGrowKernelStack
|
|---|
| 664 | ;MmHighestUserAddress DATA
|
|---|
| 665 | MmIsAddressValid@4
|
|---|
| 666 | MmIsDriverVerifying@4
|
|---|
| 667 | MmIsNonPagedSystemAddressValid@4
|
|---|
| 668 | ;MmIsRecursiveIoFault
|
|---|
| 669 | MmIsThisAnNtAsSystem@0
|
|---|
| 670 | MmIsVerifierEnabled@4
|
|---|
| 671 | MmLockPagableDataSection@4
|
|---|
| 672 | MmLockPagableImageSection@4
|
|---|
| 673 | MmLockPagableSectionByHandle@4
|
|---|
| 674 | MmMapIoSpace@16
|
|---|
| 675 | MmMapLockedPages@8
|
|---|
| 676 | MmMapLockedPagesSpecifyCache@24
|
|---|
| 677 | MmMapLockedPagesWithReservedMapping@16
|
|---|
| 678 | ;MmMapMemoryDumpMdl
|
|---|
| 679 | MmMapUserAddressesToPage@12
|
|---|
| 680 | MmMapVideoDisplay@12
|
|---|
| 681 | MmMapViewInSessionSpace@12
|
|---|
| 682 | MmMapViewInSystemSpace@12
|
|---|
| 683 | ;MmMapViewOfSection
|
|---|
| 684 | MmMarkPhysicalMemoryAsBad@8
|
|---|
| 685 | MmMarkPhysicalMemoryAsGood@8
|
|---|
| 686 | MmPageEntireDriver@4
|
|---|
| 687 | ;MmPrefetchPages
|
|---|
| 688 | MmProbeAndLockPages@12
|
|---|
| 689 | MmProbeAndLockProcessPages@16
|
|---|
| 690 | ;MmProbeAndLockSelectedPages
|
|---|
| 691 | MmProtectMdlSystemAddress@8
|
|---|
| 692 | MmQuerySystemSize@0
|
|---|
| 693 | MmRemovePhysicalMemory@8
|
|---|
| 694 | MmResetDriverPaging@4
|
|---|
| 695 | MmSectionObjectType DATA
|
|---|
| 696 | MmSecureVirtualMemory@12
|
|---|
| 697 | ;MmSetAddressRangeModified
|
|---|
| 698 | ;MmSetBankedSection
|
|---|
| 699 | MmSizeOfMdl@8
|
|---|
| 700 | ;MmSystemRangeStart DATA
|
|---|
| 701 | ;MmTrimAllSystemPagableMemory
|
|---|
| 702 | MmUnlockPagableImageSection@4
|
|---|
| 703 | MmUnlockPages@4
|
|---|
| 704 | MmUnmapIoSpace@8
|
|---|
| 705 | MmUnmapLockedPages@8
|
|---|
| 706 | MmUnmapReservedMapping@12
|
|---|
| 707 | MmUnmapVideoDisplay@8
|
|---|
| 708 | MmUnmapViewInSessionSpace@4
|
|---|
| 709 | MmUnmapViewInSystemSpace@4
|
|---|
| 710 | ;MmUnmapViewOfSection
|
|---|
| 711 | MmUnsecureVirtualMemory@4
|
|---|
| 712 | ;MmUserProbeAddress DATA
|
|---|
| 713 | ;NlsAnsiCodePage DATA
|
|---|
| 714 | ;NlsLeadByteInfo
|
|---|
| 715 | ;NlsMbCodePageTag DATA
|
|---|
| 716 | ;NlsMbOemCodePageTag DATA
|
|---|
| 717 | ;NlsOemCodePage DATA
|
|---|
| 718 | ;NlsOemLeadByteInfo
|
|---|
| 719 | NtAddAtom@12
|
|---|
| 720 | NtAdjustPrivilegesToken@24
|
|---|
| 721 | NtAllocateLocallyUniqueId@4
|
|---|
| 722 | NtAllocateUuids@16
|
|---|
| 723 | NtAllocateVirtualMemory@24
|
|---|
| 724 | ;NtBuildNumber DATA
|
|---|
| 725 | NtClose@4
|
|---|
| 726 | NtConnectPort@32
|
|---|
| 727 | NtCreateEvent@20
|
|---|
| 728 | ;NtCreateFile
|
|---|
| 729 | NtCreateSection@28
|
|---|
| 730 | NtDeleteAtom@4
|
|---|
| 731 | NtDeleteFile@4
|
|---|
| 732 | NtDeviceIoControlFile@40
|
|---|
| 733 | NtDuplicateObject@28
|
|---|
| 734 | NtDuplicateToken@24
|
|---|
| 735 | NtFindAtom@12
|
|---|
| 736 | NtFreeVirtualMemory@16
|
|---|
| 737 | ;NtFsControlFile
|
|---|
| 738 | ;NtGlobalFlag DATA
|
|---|
| 739 | ;NtLockFile
|
|---|
| 740 | ;NtMakePermanentObject
|
|---|
| 741 | NtMapViewOfSection@40
|
|---|
| 742 | ;NtNotifyChangeDirectoryFile
|
|---|
| 743 | NtOpenFile@24
|
|---|
| 744 | NtOpenProcess@16
|
|---|
| 745 | NtOpenProcessToken@12
|
|---|
| 746 | ;NtOpenProcessTokenEx
|
|---|
| 747 | NtOpenThread@16
|
|---|
| 748 | NtOpenThreadToken@16
|
|---|
| 749 | ;NtOpenThreadTokenEx
|
|---|
| 750 | ;NtQueryDirectoryFile
|
|---|
| 751 | ;NtQueryEaFile
|
|---|
| 752 | NtQueryInformationAtom@20
|
|---|
| 753 | ;NtQueryInformationFile
|
|---|
| 754 | NtQueryInformationProcess@20
|
|---|
| 755 | NtQueryInformationThread@20
|
|---|
| 756 | NtQueryInformationToken@20
|
|---|
| 757 | ;NtQueryQuotaInformationFile
|
|---|
| 758 | NtQuerySecurityObject@20
|
|---|
| 759 | NtQuerySystemInformation@16
|
|---|
| 760 | ;NtQueryVolumeInformationFile
|
|---|
| 761 | NtReadFile@36
|
|---|
| 762 | NtRequestPort@8
|
|---|
| 763 | NtRequestWaitReplyPort@12
|
|---|
| 764 | ;NtSetEaFile
|
|---|
| 765 | NtSetEvent@8
|
|---|
| 766 | ;NtSetInformationFile
|
|---|
| 767 | NtSetInformationProcess@16
|
|---|
| 768 | NtSetInformationThread@16
|
|---|
| 769 | ;NtSetQuotaInformationFile
|
|---|
| 770 | NtSetSecurityObject@12
|
|---|
| 771 | ;NtSetVolumeInformationFile
|
|---|
| 772 | NtShutdownSystem@4
|
|---|
| 773 | ;NtTraceEvent
|
|---|
| 774 | ;NtUnlockFile
|
|---|
| 775 | NtVdmControl@8
|
|---|
| 776 | NtWaitForSingleObject@12
|
|---|
| 777 | NtWriteFile@36
|
|---|
| 778 | ObAssignSecurity@16
|
|---|
| 779 | ;ObCheckCreateObjectAccess
|
|---|
| 780 | ;ObCheckObjectAccess
|
|---|
| 781 | ;ObCloseHandle
|
|---|
| 782 | ObCreateObject@36
|
|---|
| 783 | ;ObCreateObjectType
|
|---|
| 784 | ;ObDereferenceObject
|
|---|
| 785 | ObDereferenceSecurityDescriptor@8
|
|---|
| 786 | ;ObFindHandleForObject
|
|---|
| 787 | ObGetObjectSecurity@12
|
|---|
| 788 | ObInsertObject@24
|
|---|
| 789 | ObLogSecurityDescriptor@12
|
|---|
| 790 | ObMakeTemporaryObject@4
|
|---|
| 791 | ObOpenObjectByName@28
|
|---|
| 792 | ObOpenObjectByPointer@28
|
|---|
| 793 | ;ObQueryNameString
|
|---|
| 794 | ObQueryObjectAuditingByHandle@8
|
|---|
| 795 | ObReferenceObjectByHandle@24
|
|---|
| 796 | ObReferenceObjectByName@32
|
|---|
| 797 | ObReferenceObjectByPointer@16
|
|---|
| 798 | ObReferenceSecurityDescriptor@8
|
|---|
| 799 | ObReleaseObjectSecurity@8
|
|---|
| 800 | ;ObSetHandleAttributes
|
|---|
| 801 | ;ObSetSecurityDescriptorInfo
|
|---|
| 802 | ;ObSetSecurityObjectByPointer
|
|---|
| 803 | @ObfDereferenceObject@4
|
|---|
| 804 | @ObfReferenceObject@4
|
|---|
| 805 | ;PfxFindPrefix
|
|---|
| 806 | ;PfxInitialize
|
|---|
| 807 | ;PfxInsertPrefix
|
|---|
| 808 | ;PfxRemovePrefix
|
|---|
| 809 | PoCallDriver@8
|
|---|
| 810 | ;PoCancelDeviceNotify
|
|---|
| 811 | ;PoQueueShutdownWorkItem
|
|---|
| 812 | PoRegisterDeviceForIdleDetection@16
|
|---|
| 813 | ;PoRegisterDeviceNotify
|
|---|
| 814 | PoRegisterSystemState@8
|
|---|
| 815 | PoRequestPowerIrp@24
|
|---|
| 816 | PoRequestShutdownEvent@4
|
|---|
| 817 | ;PoSetHiberRange
|
|---|
| 818 | PoSetPowerState@12
|
|---|
| 819 | PoSetSystemState@4
|
|---|
| 820 | ;PoShutdownBugCheck
|
|---|
| 821 | PoStartNextPowerIrp@4
|
|---|
| 822 | PoUnregisterSystemState@4
|
|---|
| 823 | ProbeForRead@12
|
|---|
| 824 | ProbeForWrite@12
|
|---|
| 825 | ;PsAssignImpersonationToken
|
|---|
| 826 | ;PsChargePoolQuota
|
|---|
| 827 | ;PsChargeProcessNonPagedPoolQuota
|
|---|
| 828 | ;PsChargeProcessPagedPoolQuota
|
|---|
| 829 | ;PsChargeProcessPoolQuota
|
|---|
| 830 | PsCreateSystemProcess@12
|
|---|
| 831 | PsCreateSystemThread@28
|
|---|
| 832 | ;PsDereferenceImpersonationToken
|
|---|
| 833 | ;PsDereferencePrimaryToken
|
|---|
| 834 | ;PsDisableImpersonation
|
|---|
| 835 | ;PsEstablishWin32Callouts
|
|---|
| 836 | ;PsGetCurrentProcess
|
|---|
| 837 | PsGetCurrentProcessId@0
|
|---|
| 838 | ;PsGetCurrentProcessSessionId
|
|---|
| 839 | ;PsGetCurrentThread
|
|---|
| 840 | PsGetCurrentThreadId@0
|
|---|
| 841 | ;PsGetCurrentThreadPreviousMode
|
|---|
| 842 | ;PsGetCurrentThreadStackBase
|
|---|
| 843 | ;PsGetCurrentThreadStackLimit
|
|---|
| 844 | ;PsGetJobLock
|
|---|
| 845 | ;PsGetJobSessionId
|
|---|
| 846 | ;PsGetJobUIRestrictionsClass
|
|---|
| 847 | ;PsGetProcessCreateTimeQuadPart
|
|---|
| 848 | ;PsGetProcessDebugPort
|
|---|
| 849 | ;PsGetProcessExitProcessCalled
|
|---|
| 850 | ;PsGetProcessExitStatus
|
|---|
| 851 | ;PsGetProcessExitTime
|
|---|
| 852 | ;PsGetProcessId
|
|---|
| 853 | ;PsGetProcessImageFileName
|
|---|
| 854 | ;PsGetProcessInheritedFromUniqueProcessId
|
|---|
| 855 | ;PsGetProcessJob
|
|---|
| 856 | ;PsGetProcessPeb
|
|---|
| 857 | ;PsGetProcessPriorityClass
|
|---|
| 858 | ;PsGetProcessSectionBaseAddress
|
|---|
| 859 | ;PsGetProcessSecurityPort
|
|---|
| 860 | ;PsGetProcessSessionId
|
|---|
| 861 | ;PsGetProcessWin32Process
|
|---|
| 862 | ;PsGetProcessWin32WindowStation
|
|---|
| 863 | ;PsGetThreadFreezeCount
|
|---|
| 864 | ;PsGetThreadHardErrorsAreDisabled
|
|---|
| 865 | ;PsGetThreadId
|
|---|
| 866 | ;PsGetThreadProcess
|
|---|
| 867 | ;PsGetThreadProcessId
|
|---|
| 868 | ;PsGetThreadSessionId
|
|---|
| 869 | ;PsGetThreadTeb
|
|---|
| 870 | ;PsGetThreadWin32Thread
|
|---|
| 871 | PsGetVersion@16
|
|---|
| 872 | ;PsImpersonateClient
|
|---|
| 873 | ;PsInitialSystemProcess DATA
|
|---|
| 874 | ;PsIsProcessBeingDebugged
|
|---|
| 875 | ;PsIsSystemThread
|
|---|
| 876 | ;PsIsThreadImpersonating
|
|---|
| 877 | ;PsIsThreadTerminating
|
|---|
| 878 | ;PsJobType DATA
|
|---|
| 879 | ;PsLookupProcessByProcessId
|
|---|
| 880 | ;PsLookupProcessThreadByCid
|
|---|
| 881 | ;PsLookupThreadByThreadId
|
|---|
| 882 | ;PsProcessType DATA
|
|---|
| 883 | ;PsReferenceImpersonationToken
|
|---|
| 884 | ;PsReferencePrimaryToken
|
|---|
| 885 | PsRemoveCreateThreadNotifyRoutine@4
|
|---|
| 886 | PsRemoveLoadImageNotifyRoutine@4
|
|---|
| 887 | ;PsRestoreImpersonation
|
|---|
| 888 | ;PsReturnPoolQuota
|
|---|
| 889 | ;PsReturnProcessNonPagedPoolQuota
|
|---|
| 890 | ;PsReturnProcessPagedPoolQuota
|
|---|
| 891 | ;PsRevertThreadToSelf
|
|---|
| 892 | ;PsRevertToSelf
|
|---|
| 893 | PsSetCreateProcessNotifyRoutine@8
|
|---|
| 894 | PsSetCreateThreadNotifyRoutine@4
|
|---|
| 895 | ;PsSetJobUIRestrictionsClass
|
|---|
| 896 | ;PsSetLegoNotifyRoutine
|
|---|
| 897 | PsSetLoadImageNotifyRoutine@4
|
|---|
| 898 | ;PsSetProcessPriorityByClass
|
|---|
| 899 | ;PsSetProcessPriorityClass
|
|---|
| 900 | ;PsSetProcessSecurityPort
|
|---|
| 901 | ;PsSetProcessWin32Process
|
|---|
| 902 | ;PsSetProcessWindowStation
|
|---|
| 903 | ;PsSetThreadHardErrorsAreDisabled
|
|---|
| 904 | ;PsSetThreadWin32Thread
|
|---|
| 905 | PsTerminateSystemThread@4
|
|---|
| 906 | ;PsThreadType DATA
|
|---|
| 907 | READ_REGISTER_BUFFER_UCHAR@12
|
|---|
| 908 | READ_REGISTER_BUFFER_ULONG@12
|
|---|
| 909 | READ_REGISTER_BUFFER_USHORT@12
|
|---|
| 910 | READ_REGISTER_UCHAR@4
|
|---|
| 911 | READ_REGISTER_ULONG@4
|
|---|
| 912 | READ_REGISTER_USHORT@4
|
|---|
| 913 | ;RtlAbsoluteToSelfRelativeSD
|
|---|
| 914 | ;RtlAddAccessAllowedAce
|
|---|
| 915 | ;RtlAddAce
|
|---|
| 916 | ;RtlAddAtomToAtomTable
|
|---|
| 917 | RtlAddRange@28
|
|---|
| 918 | ;RtlAllocateHeap
|
|---|
| 919 | ;RtlAnsiCharToUnicodeChar
|
|---|
| 920 | RtlAnsiStringToUnicodeSize@4
|
|---|
| 921 | RtlAnsiStringToUnicodeString@12
|
|---|
| 922 | ;RtlAppendAsciizToString
|
|---|
| 923 | ;RtlAppendStringToString
|
|---|
| 924 | RtlAppendUnicodeStringToString@8
|
|---|
| 925 | RtlAppendUnicodeToString@8
|
|---|
| 926 | ;RtlAreAllAccessesGranted
|
|---|
| 927 | ;RtlAreAnyAccessesGranted
|
|---|
| 928 | RtlAreBitsClear@12
|
|---|
| 929 | RtlAreBitsSet@12
|
|---|
| 930 | RtlAssert@16
|
|---|
| 931 | ;RtlCaptureContext
|
|---|
| 932 | ;RtlCaptureStackBackTrace
|
|---|
| 933 | RtlCharToInteger@12
|
|---|
| 934 | RtlCheckRegistryKey@8
|
|---|
| 935 | RtlClearAllBits@4
|
|---|
| 936 | RtlClearBit@8
|
|---|
| 937 | RtlClearBits@12
|
|---|
| 938 | RtlCompareMemory@12
|
|---|
| 939 | ;RtlCompareMemoryUlong
|
|---|
| 940 | RtlCompareString@12
|
|---|
| 941 | RtlCompareUnicodeString@12
|
|---|
| 942 | ;RtlCompressBuffer
|
|---|
| 943 | ;RtlCompressChunks
|
|---|
| 944 | RtlConvertLongToLargeInteger@4
|
|---|
| 945 | ;RtlConvertSidToUnicodeString
|
|---|
| 946 | RtlConvertUlongToLargeInteger@4
|
|---|
| 947 | ;RtlCopyLuid
|
|---|
| 948 | RtlCopyRangeList@8
|
|---|
| 949 | ;RtlCopySid
|
|---|
| 950 | RtlCopyString@8
|
|---|
| 951 | RtlCopyUnicodeString@8
|
|---|
| 952 | ;RtlCreateAcl
|
|---|
| 953 | ;RtlCreateAtomTable
|
|---|
| 954 | ;RtlCreateHeap
|
|---|
| 955 | RtlCreateRegistryKey@8
|
|---|
| 956 | RtlCreateSecurityDescriptor@8
|
|---|
| 957 | ;RtlCreateSystemVolumeInformationFolder
|
|---|
| 958 | ;RtlCreateUnicodeString
|
|---|
| 959 | ;RtlCustomCPToUnicodeN
|
|---|
| 960 | ;RtlDecompressBuffer
|
|---|
| 961 | ;RtlDecompressChunks
|
|---|
| 962 | ;RtlDecompressFragment
|
|---|
| 963 | ;RtlDelete
|
|---|
| 964 | ;RtlDeleteAce
|
|---|
| 965 | ;RtlDeleteAtomFromAtomTable
|
|---|
| 966 | ;RtlDeleteElementGenericTable
|
|---|
| 967 | ;RtlDeleteElementGenericTableAvl
|
|---|
| 968 | ;RtlDeleteNoSplay
|
|---|
| 969 | RtlDeleteOwnersRanges@8
|
|---|
| 970 | RtlDeleteRange@16
|
|---|
| 971 | RtlDeleteRegistryValue@12
|
|---|
| 972 | ;RtlDescribeChunk
|
|---|
| 973 | ;RtlDestroyAtomTable
|
|---|
| 974 | ;RtlDestroyHeap
|
|---|
| 975 | ;RtlDowncaseUnicodeString
|
|---|
| 976 | ;RtlEmptyAtomTable
|
|---|
| 977 | RtlEnlargedIntegerMultiply@8
|
|---|
| 978 | RtlEnlargedUnsignedDivide@12
|
|---|
| 979 | RtlEnlargedUnsignedMultiply@8
|
|---|
| 980 | ;RtlEnumerateGenericTable
|
|---|
| 981 | ;RtlEnumerateGenericTableAvl
|
|---|
| 982 | ;RtlEnumerateGenericTableLikeADirectory
|
|---|
| 983 | ;RtlEnumerateGenericTableWithoutSplaying
|
|---|
| 984 | ;RtlEnumerateGenericTableWithoutSplayingAvl
|
|---|
| 985 | ;RtlEqualLuid
|
|---|
| 986 | ;RtlEqualSid
|
|---|
| 987 | RtlEqualString@12
|
|---|
| 988 | RtlEqualUnicodeString@12
|
|---|
| 989 | RtlExtendedIntegerMultiply@8
|
|---|
| 990 | RtlExtendedLargeIntegerDivide@12
|
|---|
| 991 | RtlExtendedMagicDivide@12
|
|---|
| 992 | ;RtlFillMemory
|
|---|
| 993 | ;RtlFillMemoryUlong
|
|---|
| 994 | RtlFindClearBits@12
|
|---|
| 995 | RtlFindClearBitsAndSet@12
|
|---|
| 996 | RtlFindClearRuns@16
|
|---|
| 997 | RtlFindFirstRunClear@8
|
|---|
| 998 | RtlFindLastBackwardRunClear@12
|
|---|
| 999 | RtlFindLeastSignificantBit@4
|
|---|
| 1000 | RtlFindLongestRunClear@8
|
|---|
| 1001 | ;RtlFindMessage
|
|---|
| 1002 | RtlFindMostSignificantBit@4
|
|---|
| 1003 | RtlFindNextForwardRunClear@12
|
|---|
| 1004 | RtlFindRange@40
|
|---|
| 1005 | RtlFindSetBits@12
|
|---|
| 1006 | RtlFindSetBitsAndClear@12
|
|---|
| 1007 | ;RtlFindUnicodePrefix
|
|---|
| 1008 | ;RtlFormatCurrentUserKeyPath
|
|---|
| 1009 | RtlFreeAnsiString@4
|
|---|
| 1010 | ;RtlFreeHeap
|
|---|
| 1011 | ;RtlFreeOemString
|
|---|
| 1012 | RtlFreeRangeList@4
|
|---|
| 1013 | RtlFreeUnicodeString@4
|
|---|
| 1014 | RtlGUIDFromString@8
|
|---|
| 1015 | ;RtlGenerate8dot3Name
|
|---|
| 1016 | ;RtlGetAce
|
|---|
| 1017 | RtlGetCallersAddress@8
|
|---|
| 1018 | ;RtlGetCompressionWorkSpaceSize
|
|---|
| 1019 | ;RtlGetDaclSecurityDescriptor
|
|---|
| 1020 | ;RtlGetDefaultCodePage
|
|---|
| 1021 | ;RtlGetElementGenericTable
|
|---|
| 1022 | ;RtlGetElementGenericTableAvl
|
|---|
| 1023 | RtlGetFirstRange@12
|
|---|
| 1024 | ;RtlGetGroupSecurityDescriptor
|
|---|
| 1025 | RtlGetNextRange@12
|
|---|
| 1026 | ;RtlGetNtGlobalFlags
|
|---|
| 1027 | ;RtlGetOwnerSecurityDescriptor
|
|---|
| 1028 | ;RtlGetSaclSecurityDescriptor
|
|---|
| 1029 | ;RtlGetSetBootStatusData
|
|---|
| 1030 | RtlGetVersion@4
|
|---|
| 1031 | RtlHashUnicodeString@16
|
|---|
| 1032 | ;RtlImageDirectoryEntryToData
|
|---|
| 1033 | ;RtlImageNtHeader
|
|---|
| 1034 | RtlInitAnsiString@8
|
|---|
| 1035 | ;RtlInitCodePageTable
|
|---|
| 1036 | RtlInitString@8
|
|---|
| 1037 | RtlInitUnicodeString@8
|
|---|
| 1038 | RtlInitializeBitMap@12
|
|---|
| 1039 | ;RtlInitializeGenericTable
|
|---|
| 1040 | ;RtlInitializeGenericTableAvl
|
|---|
| 1041 | RtlInitializeRangeList@4
|
|---|
| 1042 | ;RtlInitializeSid
|
|---|
| 1043 | ;RtlInitializeUnicodePrefix
|
|---|
| 1044 | ;RtlInsertElementGenericTable
|
|---|
| 1045 | ;RtlInsertElementGenericTableAvl
|
|---|
| 1046 | ;RtlInsertElementGenericTableFull
|
|---|
| 1047 | ;RtlInsertElementGenericTableFullAvl
|
|---|
| 1048 | ;RtlInsertUnicodePrefix
|
|---|
| 1049 | RtlInt64ToUnicodeString@12
|
|---|
| 1050 | ;RtlIntegerToChar
|
|---|
| 1051 | ;RtlIntegerToUnicode
|
|---|
| 1052 | RtlIntegerToUnicodeString@12
|
|---|
| 1053 | RtlInvertRangeList@8
|
|---|
| 1054 | ;RtlIpv4AddressToStringA
|
|---|
| 1055 | ;RtlIpv4AddressToStringW
|
|---|
| 1056 | ;RtlIpv4StringToAddressA
|
|---|
| 1057 | ;RtlIpv4StringToAddressW
|
|---|
| 1058 | ;RtlIpv6AddressToStringA
|
|---|
| 1059 | ;RtlIpv6AddressToStringW
|
|---|
| 1060 | ;RtlIpv6StringToAddressA
|
|---|
| 1061 | ;RtlIpv6StringToAddressW
|
|---|
| 1062 | ;RtlIsGenericTableEmpty
|
|---|
| 1063 | ;RtlIsGenericTableEmptyAvl
|
|---|
| 1064 | ;RtlIsNameLegalDOS8Dot3
|
|---|
| 1065 | RtlIsRangeAvailable@32
|
|---|
| 1066 | ;RtlIsValidOemCharacter
|
|---|
| 1067 | RtlLargeIntegerAdd@8
|
|---|
| 1068 | RtlLargeIntegerArithmeticShift@8
|
|---|
| 1069 | RtlLargeIntegerDivide@12
|
|---|
| 1070 | RtlLargeIntegerNegate@4
|
|---|
| 1071 | RtlLargeIntegerShiftLeft@8
|
|---|
| 1072 | RtlLargeIntegerShiftRight@8
|
|---|
| 1073 | RtlLargeIntegerSubtract@8
|
|---|
| 1074 | ;RtlLengthRequiredSid
|
|---|
| 1075 | RtlLengthSecurityDescriptor@4
|
|---|
| 1076 | ;RtlLengthSid
|
|---|
| 1077 | ;RtlLockBootStatusData
|
|---|
| 1078 | ;RtlLookupAtomInAtomTable
|
|---|
| 1079 | ;RtlLookupElementGenericTable
|
|---|
| 1080 | ;RtlLookupElementGenericTableAvl
|
|---|
| 1081 | ;RtlLookupElementGenericTableFull
|
|---|
| 1082 | ;RtlLookupElementGenericTableFullAvl
|
|---|
| 1083 | RtlMapGenericMask@8
|
|---|
| 1084 | ;RtlMapSecurityErrorToNtStatus
|
|---|
| 1085 | RtlMergeRangeLists@16
|
|---|
| 1086 | ;RtlMoveMemory
|
|---|
| 1087 | ;RtlMultiByteToUnicodeN
|
|---|
| 1088 | ;RtlMultiByteToUnicodeSize
|
|---|
| 1089 | ;RtlNextUnicodePrefix
|
|---|
| 1090 | ;RtlNtStatusToDosError
|
|---|
| 1091 | ;RtlNtStatusToDosErrorNoTeb
|
|---|
| 1092 | ;RtlNumberGenericTableElements
|
|---|
| 1093 | ;RtlNumberGenericTableElementsAvl
|
|---|
| 1094 | RtlNumberOfClearBits@4
|
|---|
| 1095 | RtlNumberOfSetBits@4
|
|---|
| 1096 | ;RtlOemStringToCountedUnicodeString
|
|---|
| 1097 | ;RtlOemStringToUnicodeSize
|
|---|
| 1098 | ;RtlOemStringToUnicodeString
|
|---|
| 1099 | ;RtlOemToUnicodeN
|
|---|
| 1100 | ;RtlPinAtomInAtomTable
|
|---|
| 1101 | @RtlPrefetchMemoryNonTemporal@8
|
|---|
| 1102 | ;RtlPrefixString
|
|---|
| 1103 | RtlPrefixUnicodeString@12
|
|---|
| 1104 | ;RtlQueryAtomInAtomTable
|
|---|
| 1105 | RtlQueryRegistryValues@20
|
|---|
| 1106 | ;RtlQueryTimeZoneInformation
|
|---|
| 1107 | ;RtlRaiseException
|
|---|
| 1108 | ;RtlRandom
|
|---|
| 1109 | ;RtlRandomEx
|
|---|
| 1110 | ;RtlRealPredecessor
|
|---|
| 1111 | ;RtlRealSuccessor
|
|---|
| 1112 | ;RtlRemoveUnicodePrefix
|
|---|
| 1113 | ;RtlReserveChunk
|
|---|
| 1114 | ;RtlSecondsSince1970ToTime
|
|---|
| 1115 | ;RtlSecondsSince1980ToTime
|
|---|
| 1116 | ;RtlSelfRelativeToAbsoluteSD
|
|---|
| 1117 | ;RtlSelfRelativeToAbsoluteSD2
|
|---|
| 1118 | RtlSetAllBits@4
|
|---|
| 1119 | RtlSetBit@8
|
|---|
| 1120 | RtlSetBits@12
|
|---|
| 1121 | RtlSetDaclSecurityDescriptor@16
|
|---|
| 1122 | ;RtlSetGroupSecurityDescriptor
|
|---|
| 1123 | ;RtlSetOwnerSecurityDescriptor
|
|---|
| 1124 | ;RtlSetSaclSecurityDescriptor
|
|---|
| 1125 | ;RtlSetTimeZoneInformation
|
|---|
| 1126 | ;RtlSizeHeap
|
|---|
| 1127 | ;RtlSplay
|
|---|
| 1128 | RtlStringFromGUID@8
|
|---|
| 1129 | ;RtlSubAuthorityCountSid
|
|---|
| 1130 | ;RtlSubAuthoritySid
|
|---|
| 1131 | ;RtlSubtreePredecessor
|
|---|
| 1132 | ;RtlSubtreeSuccessor
|
|---|
| 1133 | RtlTestBit@8
|
|---|
| 1134 | RtlTimeFieldsToTime@8
|
|---|
| 1135 | ;RtlTimeToElapsedTimeFields
|
|---|
| 1136 | ;RtlTimeToSecondsSince1970
|
|---|
| 1137 | ;RtlTimeToSecondsSince1980
|
|---|
| 1138 | RtlTimeToTimeFields@8
|
|---|
| 1139 | ;RtlTraceDatabaseAdd
|
|---|
| 1140 | ;RtlTraceDatabaseCreate
|
|---|
| 1141 | ;RtlTraceDatabaseDestroy
|
|---|
| 1142 | ;RtlTraceDatabaseEnumerate
|
|---|
| 1143 | ;RtlTraceDatabaseFind
|
|---|
| 1144 | ;RtlTraceDatabaseLock
|
|---|
| 1145 | ;RtlTraceDatabaseUnlock
|
|---|
| 1146 | ;RtlTraceDatabaseValidate
|
|---|
| 1147 | @RtlUlongByteSwap@4
|
|---|
| 1148 | @RtlUlonglongByteSwap@4
|
|---|
| 1149 | RtlUnicodeStringToAnsiSize@4
|
|---|
| 1150 | RtlUnicodeStringToAnsiString@12
|
|---|
| 1151 | ;RtlUnicodeStringToCountedOemString
|
|---|
| 1152 | RtlUnicodeStringToInteger@12
|
|---|
| 1153 | ;RtlUnicodeStringToOemSize
|
|---|
| 1154 | ;RtlUnicodeStringToOemString
|
|---|
| 1155 | ;RtlUnicodeToCustomCPN
|
|---|
| 1156 | ;RtlUnicodeToMultiByteN
|
|---|
| 1157 | ;RtlUnicodeToMultiByteSize
|
|---|
| 1158 | ;RtlUnicodeToOemN
|
|---|
| 1159 | ;RtlUnlockBootStatusData
|
|---|
| 1160 | ;RtlUnwind
|
|---|
| 1161 | RtlUpcaseUnicodeChar@4
|
|---|
| 1162 | RtlUpcaseUnicodeString@12
|
|---|
| 1163 | ;RtlUpcaseUnicodeStringToAnsiString
|
|---|
| 1164 | ;RtlUpcaseUnicodeStringToCountedOemString
|
|---|
| 1165 | ;RtlUpcaseUnicodeStringToOemString
|
|---|
| 1166 | ;RtlUpcaseUnicodeToCustomCPN
|
|---|
| 1167 | ;RtlUpcaseUnicodeToMultiByteN
|
|---|
| 1168 | ;RtlUpcaseUnicodeToOemN
|
|---|
| 1169 | RtlUpperChar@4
|
|---|
| 1170 | RtlUpperString@8
|
|---|
| 1171 | RtlUshortByteSwap@4
|
|---|
| 1172 | RtlValidRelativeSecurityDescriptor@12
|
|---|
| 1173 | RtlValidSecurityDescriptor@4
|
|---|
| 1174 | ;RtlValidSid
|
|---|
| 1175 | RtlVerifyVersionInfo@12
|
|---|
| 1176 | RtlVolumeDeviceToDosName@8
|
|---|
| 1177 | RtlWalkFrameChain@12
|
|---|
| 1178 | RtlWriteRegistryValue@24
|
|---|
| 1179 | ;RtlZeroHeap
|
|---|
| 1180 | ;RtlZeroMemory
|
|---|
| 1181 | ;RtlxAnsiStringToUnicodeSize
|
|---|
| 1182 | ;RtlxOemStringToUnicodeSize
|
|---|
| 1183 | RtlxUnicodeStringToAnsiSize@4
|
|---|
| 1184 | ;RtlxUnicodeStringToOemSize
|
|---|
| 1185 | SeAccessCheck@40
|
|---|
| 1186 | ;SeAppendPrivileges
|
|---|
| 1187 | SeAssignSecurity@28
|
|---|
| 1188 | SeAssignSecurityEx@36
|
|---|
| 1189 | ;SeAuditHardLinkCreation
|
|---|
| 1190 | ;SeAuditingFileEvents
|
|---|
| 1191 | ;SeAuditingFileOrGlobalEvents
|
|---|
| 1192 | ;SeAuditingHardLinkEvents
|
|---|
| 1193 | ;SeCaptureSecurityDescriptor
|
|---|
| 1194 | ;SeCaptureSubjectContext
|
|---|
| 1195 | ;SeCloseObjectAuditAlarm
|
|---|
| 1196 | ;SeCreateAccessState
|
|---|
| 1197 | ;SeCreateClientSecurity
|
|---|
| 1198 | ;SeCreateClientSecurityFromSubjectContext
|
|---|
| 1199 | SeDeassignSecurity@4
|
|---|
| 1200 | ;SeDeleteAccessState
|
|---|
| 1201 | ;SeDeleteObjectAuditAlarm
|
|---|
| 1202 | ;SeExports DATA
|
|---|
| 1203 | ;SeFilterToken
|
|---|
| 1204 | ;SeFreePrivileges
|
|---|
| 1205 | ;SeImpersonateClient
|
|---|
| 1206 | ;SeImpersonateClientEx
|
|---|
| 1207 | ;SeLockSubjectContext
|
|---|
| 1208 | ;SeMarkLogonSessionForTerminationNotification
|
|---|
| 1209 | ;SeOpenObjectAuditAlarm
|
|---|
| 1210 | ;SeOpenObjectForDeleteAuditAlarm
|
|---|
| 1211 | ;SePrivilegeCheck
|
|---|
| 1212 | ;SePrivilegeObjectAuditAlarm
|
|---|
| 1213 | ;SePublicDefaultDacl DATA
|
|---|
| 1214 | ;SeQueryAuthenticationIdToken
|
|---|
| 1215 | ;SeQueryInformationToken
|
|---|
| 1216 | ;SeQuerySecurityDescriptorInfo
|
|---|
| 1217 | ;SeQuerySessionIdToken
|
|---|
| 1218 | ;SeRegisterLogonSessionTerminatedRoutine
|
|---|
| 1219 | ;SeReleaseSecurityDescriptor
|
|---|
| 1220 | ;SeReleaseSubjectContext
|
|---|
| 1221 | ;SeSetAccessStateGenericMapping
|
|---|
| 1222 | ;SeSetSecurityDescriptorInfo
|
|---|
| 1223 | ;SeSetSecurityDescriptorInfoEx
|
|---|
| 1224 | SeSinglePrivilegeCheck@8
|
|---|
| 1225 | ;SeSystemDefaultDacl DATA
|
|---|
| 1226 | ;SeTokenImpersonationLevel
|
|---|
| 1227 | ;SeTokenIsAdmin
|
|---|
| 1228 | ;SeTokenIsRestricted
|
|---|
| 1229 | SeTokenObjectType DATA
|
|---|
| 1230 | ;SeTokenType
|
|---|
| 1231 | ;SeUnlockSubjectContext
|
|---|
| 1232 | ;SeUnregisterLogonSessionTerminatedRoutine
|
|---|
| 1233 | SeValidSecurityDescriptor@8
|
|---|
| 1234 | VerSetConditionMask@16
|
|---|
| 1235 | ;VfFailDeviceNode
|
|---|
| 1236 | ;VfFailDriver
|
|---|
| 1237 | ;VfFailSystemBIOS
|
|---|
| 1238 | ;VfIsVerificationEnabled
|
|---|
| 1239 | WRITE_REGISTER_BUFFER_UCHAR@12
|
|---|
| 1240 | WRITE_REGISTER_BUFFER_ULONG@12
|
|---|
| 1241 | WRITE_REGISTER_BUFFER_USHORT@12
|
|---|
| 1242 | WRITE_REGISTER_UCHAR@8
|
|---|
| 1243 | WRITE_REGISTER_ULONG@8
|
|---|
| 1244 | WRITE_REGISTER_USHORT@8
|
|---|
| 1245 | ;WmiFlushTrace
|
|---|
| 1246 | ;WmiGetClock
|
|---|
| 1247 | ;WmiQueryTrace
|
|---|
| 1248 | WmiQueryTraceInformation@20
|
|---|
| 1249 | ;WmiStartTrace
|
|---|
| 1250 | ;WmiStopTrace
|
|---|
| 1251 | WmiTraceMessage
|
|---|
| 1252 | ;WmiTraceMessageVa
|
|---|
| 1253 | ;WmiUpdateTrace
|
|---|
| 1254 | ;XIPDispatch
|
|---|
| 1255 | ZwAccessCheckAndAuditAlarm@44
|
|---|
| 1256 | ;ZwAddBootEntry
|
|---|
| 1257 | ZwAdjustPrivilegesToken@24
|
|---|
| 1258 | ZwAlertThread@4
|
|---|
| 1259 | ZwAllocateVirtualMemory@24
|
|---|
| 1260 | ZwAssignProcessToJobObject@8
|
|---|
| 1261 | ZwCancelIoFile@8
|
|---|
| 1262 | ZwCancelTimer@8
|
|---|
| 1263 | ;ZwClearEvent
|
|---|
| 1264 | ZwClose@4
|
|---|
| 1265 | ZwCloseObjectAuditAlarm@12
|
|---|
| 1266 | ZwConnectPort@32
|
|---|
| 1267 | ZwCreateDirectoryObject@12
|
|---|
| 1268 | ZwCreateEvent@20
|
|---|
| 1269 | ZwCreateFile@44
|
|---|
| 1270 | ZwCreateJobObject@12
|
|---|
| 1271 | ZwCreateKey@28
|
|---|
| 1272 | ZwCreateSection@28
|
|---|
| 1273 | ZwCreateSymbolicLinkObject@16
|
|---|
| 1274 | ZwCreateTimer@16
|
|---|
| 1275 | ;ZwDeleteBootEntry
|
|---|
| 1276 | ZwDeleteFile@4
|
|---|
| 1277 | ZwDeleteKey@4
|
|---|
| 1278 | ZwDeleteValueKey@8
|
|---|
| 1279 | ZwDeviceIoControlFile@40
|
|---|
| 1280 | ZwDisplayString@4
|
|---|
| 1281 | ZwDuplicateObject@28
|
|---|
| 1282 | ZwDuplicateToken@24
|
|---|
| 1283 | ;ZwEnumerateBootEntries
|
|---|
| 1284 | ZwEnumerateKey@24
|
|---|
| 1285 | ZwEnumerateValueKey@24
|
|---|
| 1286 | ZwFlushInstructionCache@12
|
|---|
| 1287 | ZwFlushKey@4
|
|---|
| 1288 | ZwFlushVirtualMemory@16
|
|---|
| 1289 | ZwFreeVirtualMemory@16
|
|---|
| 1290 | ;ZwFsControlFile
|
|---|
| 1291 | ZwInitiatePowerAction@16
|
|---|
| 1292 | ;ZwIsProcessInJob
|
|---|
| 1293 | ZwLoadDriver@4
|
|---|
| 1294 | ZwLoadKey@8
|
|---|
| 1295 | ZwMakeTemporaryObject@4
|
|---|
| 1296 | ZwMapViewOfSection@40
|
|---|
| 1297 | ZwNotifyChangeKey@40
|
|---|
| 1298 | ZwOpenDirectoryObject@12
|
|---|
| 1299 | ;ZwOpenEvent
|
|---|
| 1300 | ZwOpenFile@24
|
|---|
| 1301 | ZwOpenJobObject@12
|
|---|
| 1302 | ZwOpenKey@12
|
|---|
| 1303 | ;ZwOpenProcess
|
|---|
| 1304 | ZwOpenProcessToken@12
|
|---|
| 1305 | ;ZwOpenProcessTokenEx
|
|---|
| 1306 | ZwOpenSection@12
|
|---|
| 1307 | ZwOpenSymbolicLinkObject@12
|
|---|
| 1308 | ZwOpenThread@16
|
|---|
| 1309 | ZwOpenThreadToken@16
|
|---|
| 1310 | ;ZwOpenThreadTokenEx
|
|---|
| 1311 | ZwOpenTimer@12
|
|---|
| 1312 | ZwPowerInformation@20
|
|---|
| 1313 | ;ZwPulseEvent
|
|---|
| 1314 | ;ZwQueryBootEntryOrder
|
|---|
| 1315 | ;ZwQueryBootOptions
|
|---|
| 1316 | ZwQueryDefaultLocale@8
|
|---|
| 1317 | ZwQueryDefaultUILanguage@4
|
|---|
| 1318 | ZwQueryDirectoryFile@44
|
|---|
| 1319 | ZwQueryDirectoryObject@28
|
|---|
| 1320 | ;ZwQueryEaFile
|
|---|
| 1321 | ZwQueryFullAttributesFile@8
|
|---|
| 1322 | ZwQueryInformationFile@20
|
|---|
| 1323 | ZwQueryInformationJobObject@20
|
|---|
| 1324 | ZwQueryInformationProcess@20
|
|---|
| 1325 | ZwQueryInformationThread@20
|
|---|
| 1326 | ZwQueryInformationToken@20
|
|---|
| 1327 | ZwQueryInstallUILanguage@4
|
|---|
| 1328 | ZwQueryKey@20
|
|---|
| 1329 | ZwQueryObject@20
|
|---|
| 1330 | ZwQuerySection@20
|
|---|
| 1331 | ZwQuerySecurityObject@20
|
|---|
| 1332 | ZwQuerySymbolicLinkObject@12
|
|---|
| 1333 | ZwQuerySystemInformation@16
|
|---|
| 1334 | ZwQueryValueKey@24
|
|---|
| 1335 | ZwQueryVolumeInformationFile@20
|
|---|
| 1336 | ZwReadFile@36
|
|---|
| 1337 | ZwReplaceKey@12
|
|---|
| 1338 | ZwRequestWaitReplyPort@12
|
|---|
| 1339 | ;ZwResetEvent
|
|---|
| 1340 | ZwRestoreKey@12
|
|---|
| 1341 | ZwSaveKey@8
|
|---|
| 1342 | ;ZwSaveKeyEx
|
|---|
| 1343 | ;ZwSetBootEntryOrder
|
|---|
| 1344 | ;ZwSetBootOptions
|
|---|
| 1345 | ZwSetDefaultLocale@8
|
|---|
| 1346 | ZwSetDefaultUILanguage@4
|
|---|
| 1347 | ;ZwSetEaFile
|
|---|
| 1348 | ZwSetEvent@8
|
|---|
| 1349 | ZwSetInformationFile@20
|
|---|
| 1350 | ZwSetInformationJobObject@16
|
|---|
| 1351 | ZwSetInformationObject@16
|
|---|
| 1352 | ZwSetInformationProcess@16
|
|---|
| 1353 | ZwSetInformationThread@16
|
|---|
| 1354 | ZwSetSecurityObject@12
|
|---|
| 1355 | ZwSetSystemInformation@12
|
|---|
| 1356 | ZwSetSystemTime@8
|
|---|
| 1357 | ZwSetTimer@28
|
|---|
| 1358 | ZwSetValueKey@24
|
|---|
| 1359 | ;ZwSetVolumeInformationFile
|
|---|
| 1360 | ZwTerminateJobObject@8
|
|---|
| 1361 | ZwTerminateProcess@8
|
|---|
| 1362 | ;ZwTranslateFilePath
|
|---|
| 1363 | ZwUnloadDriver@4
|
|---|
| 1364 | ZwUnloadKey@4
|
|---|
| 1365 | ZwUnmapViewOfSection@8
|
|---|
| 1366 | ;ZwWaitForMultipleObjects
|
|---|
| 1367 | ZwWaitForSingleObject@12
|
|---|
| 1368 | ZwWriteFile@36
|
|---|
| 1369 | ZwYieldExecution@0
|
|---|
| 1370 | ;_CIcos
|
|---|
| 1371 | ;_CIsin
|
|---|
| 1372 | ;_CIsqrt
|
|---|
| 1373 | ;_abnormal_termination
|
|---|
| 1374 | ;_alldiv
|
|---|
| 1375 | ;_alldvrm
|
|---|
| 1376 | ;_allmul
|
|---|
| 1377 | ;_alloca_probe
|
|---|
| 1378 | ;_allrem
|
|---|
| 1379 | ;_allshl
|
|---|
| 1380 | ;_allshr
|
|---|
| 1381 | ;_aulldiv
|
|---|
| 1382 | ;_aulldvrm
|
|---|
| 1383 | ;_aullrem
|
|---|
| 1384 | ;_aullshr
|
|---|
| 1385 | ;_except_handler2
|
|---|
| 1386 | ;_except_handler3
|
|---|
| 1387 | ;_global_unwind2
|
|---|
| 1388 | ;_itoa
|
|---|
| 1389 | ;_itow
|
|---|
| 1390 | ;_local_unwind2
|
|---|
| 1391 | ;_purecall
|
|---|
| 1392 | _snprintf
|
|---|
| 1393 | _snwprintf
|
|---|
| 1394 | _stricmp
|
|---|
| 1395 | _strlwr
|
|---|
| 1396 | _strnicmp
|
|---|
| 1397 | _strnset
|
|---|
| 1398 | _strrev
|
|---|
| 1399 | _strset
|
|---|
| 1400 | _strupr
|
|---|
| 1401 | _vsnprintf
|
|---|
| 1402 | _vsnwprintf
|
|---|
| 1403 | _wcsicmp@8
|
|---|
| 1404 | _wcslwr@4
|
|---|
| 1405 | _wcsnicmp@12
|
|---|
| 1406 | _wcsnset@12
|
|---|
| 1407 | _wcsrev@4
|
|---|
| 1408 | _wcsupr@4
|
|---|
| 1409 | ;atoi
|
|---|
| 1410 | ;atol
|
|---|
| 1411 | ;isdigit
|
|---|
| 1412 | ;islower
|
|---|
| 1413 | ;isprint
|
|---|
| 1414 | ;isspace
|
|---|
| 1415 | ;isupper
|
|---|
| 1416 | ;isxdigit
|
|---|
| 1417 | ;mbstowcs
|
|---|
| 1418 | ;mbtowc
|
|---|
| 1419 | memchr
|
|---|
| 1420 | memcpy
|
|---|
| 1421 | memmove
|
|---|
| 1422 | memset
|
|---|
| 1423 | ;qsort
|
|---|
| 1424 | ;rand
|
|---|
| 1425 | sprintf
|
|---|
| 1426 | ;srand
|
|---|
| 1427 | strcat
|
|---|
| 1428 | strchr
|
|---|
| 1429 | strcmp
|
|---|
| 1430 | strcpy
|
|---|
| 1431 | strlen
|
|---|
| 1432 | strncat
|
|---|
| 1433 | strncmp
|
|---|
| 1434 | strncpy
|
|---|
| 1435 | strrchr
|
|---|
| 1436 | strspn
|
|---|
| 1437 | strstr
|
|---|
| 1438 | swprintf
|
|---|
| 1439 | ;tolower
|
|---|
| 1440 | ;toupper
|
|---|
| 1441 | ;towlower
|
|---|
| 1442 | ;towupper
|
|---|
| 1443 | ;vDbgPrintEx
|
|---|
| 1444 | ;vDbgPrintExWithPrefix
|
|---|
| 1445 | ;vsprintf
|
|---|
| 1446 | wcscat
|
|---|
| 1447 | wcschr
|
|---|
| 1448 | wcscmp
|
|---|
| 1449 | wcscpy
|
|---|
| 1450 | wcscspn
|
|---|
| 1451 | wcslen
|
|---|
| 1452 | wcsncat
|
|---|
| 1453 | wcsncmp
|
|---|
| 1454 | wcsncpy
|
|---|
| 1455 | wcsrchr
|
|---|
| 1456 | wcsspn
|
|---|
| 1457 | wcsstr
|
|---|
| 1458 | ;wcstombs
|
|---|
| 1459 | ;wctomb
|
|---|
