542 lines
11 KiB
Plaintext
542 lines
11 KiB
Plaintext
MiZeroPhysicalPage
|
||
ExReleaseResourceLite
|
||
MmZeroPageThread
|
||
IopParseDevice
|
||
ExAllocatePoolWithTag
|
||
ExInterlockedPopEntrySList
|
||
ExFreePoolWithTag
|
||
CcMapData
|
||
RtlFindClearBits
|
||
memmove
|
||
CcFindBcb
|
||
IoAllocateIrp
|
||
FsRtlDissectName
|
||
KiInterruptDispatch
|
||
CcFastCopyRead
|
||
FsRtlIsNameInExpressionPrivate
|
||
RtlCompareMemory
|
||
MmCopyToCachedPage
|
||
RtlUpcaseUnicodeToOemN
|
||
CcPinFileData
|
||
ObpCaptureObjectCreateInformation
|
||
CcGetVirtualAddress
|
||
KiDispatchInterrupt
|
||
RtlCompareUnicodeString
|
||
Exfi386InterlockedDecrementLong
|
||
ExpAcquireResourceExclusiveLite
|
||
IofCompleteRequest
|
||
CcFastCopyWrite
|
||
MiFlushSectionInternal
|
||
RtlTimeToTimeFields
|
||
PsImpersonateClient
|
||
RtlSplay
|
||
IopAllocateIrp
|
||
ObOpenObjectByName
|
||
Exfi386InterlockedExchangeUlong
|
||
ExAcquireSharedWaitForExclusive
|
||
ObReferenceObjectByHandle
|
||
ExAcquireResourceSharedLite
|
||
ExInterlockedPushEntrySList
|
||
CcMapAndRead
|
||
FsRtlLookupLargeMcbEntry
|
||
InterlockedDecrement
|
||
SeCreateAccessState
|
||
ObpLookupObjectName
|
||
FsRtlIsFatDbcsLegal
|
||
ExfInterlockedAddUlong
|
||
MmProbeAndLockPages
|
||
CcUnpinFileData
|
||
ObpCaptureObjectName
|
||
ExAcquireHandleTableShared
|
||
IoCreateFile
|
||
ObfDereferenceObject
|
||
InterlockedIncrement
|
||
CcSetDirtyPinnedData
|
||
KeLeaveCriticalRegion
|
||
ExFreePool
|
||
CcUnpinData
|
||
IoFreeIrp
|
||
MmCheckCachedPageState
|
||
RtlEqualUnicodeString
|
||
RtlIsNameLegalDOS8Dot3
|
||
MiCleanSection
|
||
CcInitializeCacheMap
|
||
FsRtlFindLargeIndex
|
||
CcMapAndCopy
|
||
CcPinMappedData
|
||
MiRemovePageByColor
|
||
MmUnmapViewInSystemCache
|
||
RtlpCaptureContext
|
||
RtlFillMemoryUlong
|
||
ObpAllocateObject
|
||
RtlCopyUnicodeString
|
||
CcFreeVirtualAddress
|
||
ExAcquireFastMutexUnsafe
|
||
IopDeleteFile
|
||
FsRtlAllocateResource
|
||
KiSetCR0Bits
|
||
ExInterlockedCompareExchange64
|
||
ExAllocatePool
|
||
IoGetRelatedDeviceObject
|
||
KeRemoveQueue
|
||
ExReleaseHandleTableShared
|
||
CcAcquireByteRangeForWrite
|
||
IofCallDriver
|
||
FsRtlCheckOplock
|
||
ElapsedDaysToYears
|
||
IopCloseFile
|
||
KefAcquireSpinLockAtDpcLevel
|
||
ObpIncrementHandleCount
|
||
ExTryToAcquireResourceExclusiveLite
|
||
FsRtlAddToTunnelCache
|
||
IopCompleteRequest
|
||
CcFlushCache
|
||
CcGetVirtualAddressIfMapped
|
||
IoSetThreadHardErrorMode
|
||
ObCreateObject
|
||
IoFastQueryNetworkAttributes
|
||
CcPrepareMdlWrite
|
||
CcCanIWrite
|
||
CcWriteBehind
|
||
RtlExtendedMagicDivide
|
||
MiLocateAndReserveWsle
|
||
NtSetInformationFile
|
||
ObpAllocateObjectNameBuffer
|
||
CcLazyWriteScan
|
||
RtlNtStatusToDosErrorNoTeb
|
||
KeReadStateQueue
|
||
MiCheckProtoPtePageState
|
||
ObReferenceObjectByPointer
|
||
CcAllocateInitializeBcb
|
||
PsReferencePrimaryToken
|
||
CcSetDirtyInMask
|
||
FsRtlFindInTunnelCache
|
||
IopParseFile
|
||
KeSynchronizeExecution
|
||
_NLG_Return2
|
||
KeQuerySystemTime
|
||
CcGetVacbMiss
|
||
NtClose
|
||
ObpDecrementHandleCount
|
||
IoGetInitialStack
|
||
ObpCreateHandle
|
||
MiInsertPageInList
|
||
MiWaitForInPageComplete
|
||
FsRtlGetNextLargeMcbEntry
|
||
IopCheckDeviceAndDriver
|
||
KeInsertHeadQueue
|
||
MiDecrementShareCount2
|
||
RtlUpcaseUnicodeStringToOemString
|
||
ExAcquireSharedStarveExclusive
|
||
ExpFindCurrentThread
|
||
_abnormal_termination
|
||
CcMdlRead
|
||
CcUninitializeCacheMap
|
||
RtlUnicodeToOemN
|
||
FsRtlOplockFsctrl
|
||
IoAllocateMdl
|
||
ExReleaseHandleTableExclusive
|
||
MmSetAddressRangeModified
|
||
CcSetFileSizes
|
||
ExCreateHandle
|
||
KeEnterCriticalRegion
|
||
MiDecrementReferenceCount
|
||
MmUnlockPages
|
||
ObpFreeObject
|
||
PsAssignImpersonationToken
|
||
RtlMapGenericMask
|
||
CcCopyRead
|
||
PsReferenceImpersonationToken
|
||
IoGetRequestorProcess
|
||
SeTokenType
|
||
ObpFreeObjectNameBuffer
|
||
RtlUpcaseUnicodeString
|
||
IopCheckBackupRestorePrivilege
|
||
MmMapViewInSystemCache
|
||
RtlCompressChunks
|
||
RtlInsertElementGenericTable
|
||
CcPinRead
|
||
IoBuildSynchronousFsdRequest
|
||
MmFlushSection
|
||
IoAllocateErrorLogEntry
|
||
MiAllocatePoolPages
|
||
RtlUpcaseUnicodeChar
|
||
MmPurgeSection
|
||
FsRtlFastCheckLockForRead
|
||
MiReserveSystemPtes
|
||
PsOpenTokenOfProcess
|
||
FsRtlOplockCleanup
|
||
IoIsOperationSynchronous
|
||
MiFreePoolPages
|
||
SeAssignSecurity
|
||
SeDeleteAccessState
|
||
FsRtlRequestExclusiveOplock
|
||
IoBuildPartialMdl
|
||
IoCheckFunctionAccess
|
||
PsChargeSharedPoolQuota
|
||
RtlAreAnyAccessesGranted
|
||
FsRtlUninitializeOplock
|
||
IoEnqueueIrp
|
||
MmCreateSection
|
||
ObpDeleteNameCheck
|
||
IoCancelIrp
|
||
RtlpDidUnicodeToOemWork
|
||
CcFreeActiveVacb
|
||
ExAllocateFromPagedLookasideList
|
||
ExIsResourceAcquiredExclusiveLite
|
||
SeCaptureSubjectContext
|
||
DebugService
|
||
KeGetCurrentThread
|
||
MiCreateDataFileMap
|
||
RtlpGetStackLimits
|
||
CcMdlWriteComplete2
|
||
IoSetShareAccess
|
||
KeResetEvent
|
||
MiLocateWsle
|
||
MiUnlinkPageFromList
|
||
ObpRemoveObjectRoutine
|
||
ObWaitForSingleObject
|
||
CcPreparePinWrite
|
||
PspDeleteThreadSecurity
|
||
SeComputeQuotaInformationSize
|
||
ExDestroyHandle
|
||
FsRtlDoesNameContainWildCards
|
||
MiRemoveMappedPtes
|
||
MiUpdateWsle
|
||
RawCheckForDismount
|
||
RtlOemToUnicodeN
|
||
SeUnlockSubjectContext
|
||
CcWorkerThread
|
||
ExInitializeResourceLite
|
||
ExpAcquireResourceSharedLite
|
||
ExpWaitForResource
|
||
FsRtlIsNameInExpression
|
||
FsRtlOplockBreakToII
|
||
FsRtlPruneTunnelCache
|
||
MiDispatchFault
|
||
IoFreeMdl
|
||
IoInitializeIrp
|
||
KefReleaseSpinLockFromDpcLevel
|
||
KeInsertQueue
|
||
KeWaitForSingleObject
|
||
MiCheckControlArea
|
||
ObpIncrementUnnamedHandleCount
|
||
RtlDowncaseUnicodeString
|
||
RtlUnicodeStringToOemString
|
||
SepFilterPrivilegeAudits
|
||
ExAcquireHandleTableExclusive
|
||
FsRtlAreNamesEqual
|
||
IopDereferenceVpbAndFree
|
||
KeInitializeDpc
|
||
ObpLookupDirectoryEntry
|
||
CcDeallocateBcb
|
||
ExMapHandleToPointer
|
||
FsRtlRemoveMcbEntryPrivate
|
||
IopQueryName
|
||
IoSetTopLevelIrp
|
||
CcCopyReadExceptionFilter
|
||
ExGetSharedWaiterCount
|
||
ExInterlockedAddLargeInteger
|
||
ExpWorkerThread
|
||
ExReinitializeResourceLite
|
||
FsRtlFastCheckLockForWrite
|
||
FsRtlFastUnlockSingleExclusive
|
||
MmAccessFault
|
||
MmMapLockedPages
|
||
RtlOemStringToUnicodeString
|
||
RtlTimeToSecondsSince1970
|
||
RtlUpcaseUnicodeStringToCountedOemString
|
||
FsRtlRemoveLargeMcbEntry
|
||
IoGetTopLevelIrp
|
||
KeInsertDeviceQueue
|
||
MiRemoveZeroPage
|
||
RtlDelete
|
||
SeTokenImpersonationLevel
|
||
CcGetDirtyPages
|
||
ExDeletePagedLookasideList
|
||
FsRtlAddLargeMcbEntry
|
||
FsRtlFindFirstOverlappingExclusiveNode
|
||
IopErrorLogRequeueEntry
|
||
MiReleaseSystemPtes
|
||
ObpChargeQuotaForObject
|
||
RtlpLengthInheritedAce
|
||
SeSetAccessStateGenericMapping
|
||
CcPerformReadAhead
|
||
FsRtlRemoveAndCompleteWaitIrp
|
||
IoAcquireCancelSpinLock
|
||
IoBuildDeviceIoControlRequest
|
||
IoCheckShareAccess
|
||
IoSynchronousPageWrite
|
||
MiInitializeReadInProgressPfn
|
||
RtlUnicodeStringToCountedOemString
|
||
CcDeleteSharedCacheMap
|
||
ExSystemTimeToLocalTime
|
||
FsRtlAllocateOplock
|
||
FsRtlDeregisterUncProvider
|
||
FsRtlTruncateLargeMcb
|
||
FsRtlWaitOnIrp
|
||
IopCheckVpbMounted
|
||
KeInsertQueueDpc
|
||
KiSwapThread
|
||
MiInitializePfn
|
||
MmIsAddressValid
|
||
ObGetObjectPointerCount
|
||
RtlPrefixUnicodeString
|
||
VdmpDelayIntApcRoutine
|
||
ExFreeToPagedLookasideList
|
||
ExpAcquireSharedStarveExclusive
|
||
FsRtlOplockIsFastIoPossible
|
||
MiReleaseWsle
|
||
MiRemoveUnusedSegments
|
||
MiReserveSystemPtes2
|
||
ObSetSecurityDescriptorInfo
|
||
_allmul
|
||
ExAllocatePoolWithQuotaTag
|
||
FsRtlAcquireFileForCcFlush
|
||
IoStartPacket
|
||
KeInitializeEvent
|
||
KeWaitForMultipleObjects
|
||
MiInitializeCopyOnWritePfn
|
||
MiRemovePageFromList
|
||
MiSegmentDelete
|
||
MmBuildMdlForNonPagedPool
|
||
MmUnmapLockedPages
|
||
SeAuditingFileEvents
|
||
SwapSplayLinks
|
||
FsRtlLookupLastLargeMcbEntry
|
||
IopIsDeviceInstanceEnabled
|
||
KeInitializeSpinLock
|
||
KiAcquireSpinLock
|
||
MiRemoveAnyPage
|
||
MiRemoveWsleFromFreeList
|
||
MiResolveProtoPteFault
|
||
NtWaitForSingleObject
|
||
ObpInsertHandleCount
|
||
RtlpGetExtraStuffPointer
|
||
RtlSetBits
|
||
SeReleaseSubjectContext
|
||
SeValidSecurityDescriptor
|
||
DaysAndFractionToTime
|
||
ExInterlockedExchangeAddLargeInteger
|
||
FsRtlCurrentBatchOplock
|
||
FsRtlPrivateLock
|
||
IoCreateStreamFileObject
|
||
IopReportResourceUsage
|
||
KiDeliverApc
|
||
LpcpClosePort
|
||
MiAccessCheck
|
||
MiMakeProtectionMask
|
||
MiResolveMappedFileFault
|
||
ObInsertObject
|
||
ObpIncrementHandleDataBase
|
||
ObpValidateAccessMask
|
||
PsReturnSharedPoolQuota
|
||
PsWatchWorkingSet
|
||
RtlDeleteElementGenericTable
|
||
CcReleaseByteRangeFromWrite
|
||
ExCreateHandleTable
|
||
FsRtlPrivateFastUnlockAll
|
||
IoCheckDesiredAccess
|
||
IoCreateDevice
|
||
MiCompleteProtoPteFault
|
||
MiMakeSystemAddressValidPfnWs
|
||
MiMapPageInHyperSpace
|
||
ObpCreateUnnamedHandle
|
||
RtlExtendedLargeIntegerDivide
|
||
RtlSubtreePredecessor
|
||
SepAccessCheck
|
||
CcCopyWrite
|
||
CcUnmapVacbArray
|
||
CcUnpinDataForThread
|
||
ExNotifyCallback
|
||
ExReleaseResourceForThreadLite
|
||
FsRtlAcknowledgeOplockBreak
|
||
FsRtlAddLargeEntry
|
||
FsRtlInitializeLargeMcb
|
||
FsRtlMdlWriteCompleteDev
|
||
FsRtlPrivateCheckForExclusiveLockAccess
|
||
IoAllocateAdapterChannel
|
||
IoGetAttachedDevice
|
||
IoRaiseInformationalHardError
|
||
IoRemoveShareAccess
|
||
MiCheckControlAreaStatus
|
||
MiMakeSystemAddressValidPfn
|
||
MiRemoveWsle
|
||
ObDeleteCapturedInsertInfo
|
||
ObReferenceObjectByName
|
||
RtlClearBits
|
||
RtlpGenerateInheritedAce
|
||
RtlxOemStringToUnicodeSize
|
||
SepCheckAcl
|
||
CcPostWorkQueue
|
||
CcScheduleReadAhead
|
||
CcSetValidData
|
||
ExEnumHandleTable
|
||
ExQueueWorkItem
|
||
FsRtlReleaseFileForCcFlush
|
||
KeSetEvent
|
||
MiChargeCommitmentCantExpand
|
||
MiFindActualFaultingPte
|
||
MiGetEventCounter
|
||
NtDeleteFile
|
||
RtlAreBitsClear
|
||
RtlDeleteNoSplay
|
||
RtlInitializeSid
|
||
RtlLookupElementGenericTable
|
||
RtlpGenerateInheritAcl
|
||
CcMdlWriteComplete
|
||
ExAcquireResourceExclusiveLite
|
||
ExDeleteResourceLite
|
||
ExfInterlockedInsertTailList
|
||
ExIsResourceAcquiredSharedLite
|
||
FsRtlOplockBreakNotify
|
||
IoCheckEaBufferValidity
|
||
IopOpenLinkOrRenameTarget
|
||
IoQueueThreadIrp
|
||
IoRegisterShutdownNotification
|
||
Ke386GetGdtEntryThread
|
||
KeReadStateTimer
|
||
KeRemoveDeviceQueue
|
||
KiRetireDpcList
|
||
MiDeletePte
|
||
MiEnsureAvailablePageOrWait
|
||
MiGetInPageSupportBlock
|
||
MiSectionDelete
|
||
RtlLengthSecurityDescriptor
|
||
RtlRealSuccessor
|
||
RtlUpcaseUnicodeStringToAnsiString
|
||
SepAdtGenerateDiscardAudit
|
||
SepInheritAcl
|
||
SepSidInToken
|
||
CcCreateVacbArray
|
||
CcMdlReadComplete2
|
||
ExInterlockedAddLargeStatistic
|
||
FsRtlCheckForMatchingFileObject
|
||
FsRtlCheckLockForWriteAccess
|
||
FsRtlPrivateInsertLock
|
||
FsRtlPrivateLimitFreeLockList
|
||
FsRtlPrivateResetLowestLockOffset
|
||
IoCancelThreadIo
|
||
IoPageRead
|
||
IoReleaseCancelSpinLock
|
||
IoSetInformation
|
||
IoStartNextPacket
|
||
IoStopTimer
|
||
KeClearEvent
|
||
KeInitializeApc
|
||
KeInsertByKeyDeviceQueue
|
||
KeRemoveByKeyDeviceQueue
|
||
KiQuantumEnd
|
||
MiAddValidPageToWorkingSet
|
||
MiDeleteSystemPagableVm
|
||
MiInsertFrontModifiedNoWrite
|
||
MiLocateSubsection
|
||
MiRemoveWorkingSetPages
|
||
MiRestoreTransitionPte
|
||
MiTrimWorkingSet
|
||
RtlAreBitsSet
|
||
RtlConvertUlongToLargeInteger
|
||
RtlCopyLuidAndAttributesArray
|
||
RtlCreateAcl
|
||
RtlLargeIntegerDivide
|
||
RtlpLengthInheritAcl
|
||
SeAccessCheck
|
||
_wcsicmp
|
||
CcExtendVacbArray
|
||
CcSetReadAheadGranularity
|
||
CcUnmapVacb
|
||
ExfInterlockedInsertHeadList
|
||
FsRtlCheckLockForReadAccess
|
||
FsRtlFreeFirstMapping
|
||
FsRtlMdlReadComplete
|
||
FsRtlNumberOfRunsInLargeMcb
|
||
FsRtlOpBatchBreakClosePending
|
||
FsRtlPrivateCheckWaitingLocks
|
||
FsRtlPrivateInitializeFileLock
|
||
FsRtlPrivateInsertExclusiveLock
|
||
FsRtlReleaseFileForModWrite
|
||
FsRtlRemoveAndCompleteIrp
|
||
FsRtlUninitializeFileLock
|
||
IoCreateNotificationEvent
|
||
IoGetDeviceToVerify
|
||
IopMountVolume
|
||
IoUpdateShareAccess
|
||
KeReleaseWaitForSemaphore
|
||
KiTrap0E
|
||
MiCheckForControlAreaDeletion
|
||
MiDetermineUserGlobalPteMask
|
||
MiFlushInPageSupportBlock
|
||
MiFreeEventCounter
|
||
MiInitializeTransitionPfn
|
||
MiInsertWsle
|
||
MiMapPageToZeroInHyperSpace
|
||
MiModifiedPageWriterWorker
|
||
MiResolveDemandZeroFault
|
||
MiResolveTransitionFault
|
||
MmCanFileBeTruncated
|
||
MmCanFileBeTruncatedInternal
|
||
MmDeterminePoolType
|
||
MmFlushImageSection
|
||
RtlAllocateAndInitializeSid
|
||
RtlEnumerateGenericTable
|
||
RtlEqualPrefixSid
|
||
RtlEqualSid
|
||
RtlExtendedIntegerMultiply
|
||
RtlFirstFreeAce
|
||
RtlIsGenericTableEmpty
|
||
RtlOemStringToCountedUnicodeString
|
||
RtlUpperString
|
||
SeFreeCapturedSecurityQos
|
||
SeLockSubjectContext
|
||
_vsnprintf
|
||
CcGetLsnForFileObject
|
||
CcPurgeAndClearCacheSection
|
||
CcZeroData
|
||
ExecuteHandler
|
||
ExLocalTimeToSystemTime
|
||
ExRaiseException
|
||
ExReleaseFastMutexUnsafe
|
||
FsRtlCancelExclusiveIrp
|
||
FsRtlFastUnlockAll
|
||
FsRtlFastUnlockAllByKey
|
||
FsRtlFastUnlockSingleShared
|
||
FsRtlFindFirstOverlappingSharedNode
|
||
FsRtlGetNextMcbEntry
|
||
FsRtlPrivateInsertSharedLock
|
||
FsRtlPrivateRemoveLock
|
||
FsRtlRequestOplockII
|
||
FsRtlSyncVolumes
|
||
FsRtlUninitializeLargeMcb
|
||
IopTimerDispatch
|
||
IoUnregisterFsRegistrationChange
|
||
KeContextToKframes
|
||
KeFlushQueueApc
|
||
KeSetEventBoostPriority
|
||
KiReleaseSpinLock
|
||
KiSystemService
|
||
KiTimerExpiration
|
||
KiTimerListExpire
|
||
MiAddMappedPtes
|
||
MiCheckPdeForPagedPool
|
||
MiFlushPteList
|
||
MiFreeInPageSupportBlock
|
||
MiInitializePfnForOtherProcess
|
||
MiInsertVad
|
||
MiMakeOutswappedPageResident
|
||
MiReleasePageFileSpace
|
||
MiResolvePageFileFault
|
||
MmWorkingSetManager
|
||
PsReturnPoolQuota
|
||
RtlAddAuditAccessAce
|
||
RtlDispatchException
|
||
RtlInitializeGenericTable
|
||
RtlNumberOfClearBits
|
||
RtlpGetReturnAddress
|
||
RtlSecondsSince1970ToTime
|
||
RtlSetAllBits
|
||
RtlValidSecurityDescriptor
|
||
SepApplyAclToObject
|
||
SepConcatenatePrivileges
|
||
SepGetDefaultsSubjectContext
|
||
|
||
|