ntoskrnl.exe API hash lookup table
This page contains a lookup table of hashed ntoskrnl.exe APIs (file on VirusTotal, MD5: 406fc88dfff4874940822640f1bcf133, SHA-1: 5b2dba5f5614b762e1d921aeaa04bf2997e7e43e, SHA-256: 8396814c875f40fefacd91654ef6b031171f3c55713f2a08d9da2464354803cb). The hash algorithm used to produce the hashes is the one that ‘The Last Stage of Delirium Research Group’ introduced. The file version used in this post is 10.0.17763.253 (WinBuild.160101.0800).
The page is in essence an effort to document the exported APIs of important Windows libraries. Additional work has been documented in:
- iphlpapi.dll API hash lookup table
- kernel32.dll API hash lookup table
- ntdll.dll API hash lookup table
Look up table
| API name | hex hash | hash |
|---|---|---|
| AlpcCreateSecurityContext | 0xf6854348 | f6854348 |
| AlpcGetHeaderSize | 0x75e91891 | 75e91891 |
| AlpcGetMessageAttribute | 0xf6136902 | f6136902 |
| AlpcInitializeMessageAttribute | 0x92821bad | 92821bad |
| BgkDisplayCharacter | 0x7723fe99 | 7723fe99 |
| BgkGetConsoleState | 0x3b60340a | 3b60340a |
| BgkGetCursorState | 0x34cbfbee | 34cbfbee |
| BgkSetCursor | 0xb0349097 | b0349097 |
| CcAddDirtyPagesToExternalCache | 0x3799ea7 | 3799ea7 |
| CcAsyncCopyRead | 0xf32cd742 | f32cd742 |
| CcCanIWrite | 0x18c35909 | 18c35909 |
| CcCoherencyFlushAndPurgeCache | 0x8f760b51 | 8f760b51 |
| CcCopyRead | 0xa7c365b8 | a7c365b8 |
| CcCopyReadEx | 0xd96ebb7 | d96ebb7 |
| CcCopyWrite | 0xf8c35979 | f8c35979 |
| CcCopyWriteEx | 0xd65f0fb | d65f0fb |
| CcCopyWriteWontFlush | 0xd7c77c74 | d7c77c74 |
| CcDeductDirtyPagesFromExternalCache | 0xa4994596 | a4994596 |
| CcDeferWrite | 0x4cbf9b2f | 4cbf9b2f |
| CcFastCopyRead | 0xfc4d7744 | fc4d7744 |
| CcFastCopyWrite | 0x8a058b04 | 8a058b04 |
| CcFastMdlReadWait | 0x73f42a87 | 73f42a87 |
| CcFlushCache | 0xb777492a | b777492a |
| CcFlushCacheToLsn | 0x5ae7ad60 | 5ae7ad60 |
| CcGetCachedDirtyPageCountForFile | 0xe739f43c | e739f43c |
| CcGetDirtyPages | 0x9b8b274b | 9b8b274b |
| CcGetFileObjectFromBcb | 0xb0a68b98 | b0a68b98 |
| CcGetFileObjectFromSectionPtrs | 0xcbd9bc1e | cbd9bc1e |
| CcGetFileObjectFromSectionPtrsRef | 0xde10baf2 | de10baf2 |
| CcGetFlushedValidData | 0xe71abc58 | e71abc58 |
| CcGetLsnForFileObject | 0x26be4f51 | 26be4f51 |
| CcGetNumberOfMappedPages | 0x7ab43b61 | 7ab43b61 |
| CcInitializeCacheMap | 0x69f8cdbc | 69f8cdbc |
| CcInitializeCacheMapEx | 0xe336fabf | e336fabf |
| CcIsThereDirtyData | 0x2ccddfb5 | 2ccddfb5 |
| CcIsThereDirtyDataEx | 0x377eddcb | 377eddcb |
| CcIsThereDirtyLoggedPages | 0x73c2da06 | 73c2da06 |
| CcMapData | 0x923d90d | 923d90d |
| CcMdlRead | 0xeeae6b0 | eeae6b0 |
| CcMdlReadComplete | 0x8c1e5528 | 8c1e5528 |
| CcMdlWriteAbort | 0xd1fe31a4 | d1fe31a4 |
| CcMdlWriteComplete | 0x54b00bf7 | 54b00bf7 |
| CcPinMappedData | 0x6a5a909 | 6a5a909 |
| CcPinRead | 0xd90ae6b0 | d90ae6b0 |
| CcPrepareMdlWrite | 0x67838751 | 67838751 |
| CcPreparePinWrite | 0xab83876a | ab83876a |
| CcPurgeCacheSection | 0x1c3042e1 | 1c3042e1 |
| CcRegisterExternalCache | 0xd3e7746a | d3e7746a |
| CcRemapBcb | 0x2051da6c | 2051da6c |
| CcRepinBcb | 0x26d0da6c | 26d0da6c |
| CcScheduleReadAhead | 0xa138c896 | a138c896 |
| CcScheduleReadAheadEx | 0xe322639c | e322639c |
| CcSetAdditionalCacheAttributes | 0xcce39af1 | cce39af1 |
| CcSetAdditionalCacheAttributesEx | 0x8e6bd04b | 8e6bd04b |
| CcSetBcbOwnerPointer | 0x44fbb726 | 44fbb726 |
| CcSetDirtyPageThreshold | 0xdc8cfa9c | dc8cfa9c |
| CcSetDirtyPinnedData | 0xc31ab169 | c31ab169 |
| CcSetFileSizes | 0x2a893f03 | 2a893f03 |
| CcSetFileSizesEx | 0x24fc15c2 | 24fc15c2 |
| CcSetLogHandleForFile | 0xf0a02214 | f0a02214 |
| CcSetLogHandleForFileEx | 0x80885cda | 80885cda |
| CcSetLoggedDataThreshold | 0x43dffd9 | 43dffd9 |
| CcSetParallelFlushFile | 0x471a2d07 | 471a2d07 |
| CcSetReadAheadGranularity | 0x48290bc2 | 48290bc2 |
| CcSetReadAheadGranularityEx | 0xa42f1238 | a42f1238 |
| CcTestControl | 0x7f8ed02 | 7f8ed02 |
| CcUninitializeCacheMap | 0x99f959f5 | 99f959f5 |
| CcUnmapFileOffsetFromSystemCache | 0x67db49c3 | 67db49c3 |
| CcUnpinData | 0xda1c4b6d | da1c4b6d |
| CcUnpinDataForThread | 0xb828a55c | b828a55c |
| CcUnpinRepinnedBcb | 0x339dec8d | 339dec8d |
| CcUnregisterExternalCache | 0x1a040c6b | 1a040c6b |
| CcWaitForCurrentLazyWriterActivity | 0x36ed8e29 | 36ed8e29 |
| CcZeroData | 0x2b1c58cb | 2b1c58cb |
| CcZeroDataOnDisk | 0x6fcac8fe | 6fcac8fe |
| CmCallbackGetKeyObjectID | 0xa4947491 | a4947491 |
| CmCallbackGetKeyObjectIDEx | 0x51d24faa | 51d24faa |
| CmCallbackReleaseKeyObjectIDEx | 0x837203fd | 837203fd |
| CmGetBoundTransaction | 0x44e087f4 | 44e087f4 |
| CmGetCallbackVersion | 0x86386a68 | 86386a68 |
| CmKeyObjectType | 0xf1da496d | f1da496d |
| CmRegisterCallback | 0xf31f4f10 | f31f4f10 |
| CmRegisterCallbackEx | 0x7d3c4ce4 | 7d3c4ce4 |
| CmSetCallbackObjectContext | 0xd567f82b | d567f82b |
| CmUnRegisterCallback | 0x29604f34 | 29604f34 |
| DbgBreakPoint | 0x8ddde779 | 8ddde779 |
| DbgBreakPointWithStatus | 0x4b63e345 | 4b63e345 |
| DbgCommandString | 0x16bef003 | 16bef003 |
| DbgLoadImageSymbols | 0x3becd0ba | 3becd0ba |
| DbgPrint | 0x533ab46d | 533ab46d |
| DbgPrintEx | 0xead1be64 | ead1be64 |
| DbgPrintReturnControlC | 0xfe0a95f6 | fe0a95f6 |
| DbgPrompt | 0x6759899e | 6759899e |
| DbgQueryDebugFilterState | 0xd305aff6 | d305aff6 |
| DbgSetDebugFilterState | 0x8727eaff | 8727eaff |
| DbgSetDebugPrintCallback | 0xb4c64873 | b4c64873 |
| DbgkLkmdRegisterCallback | 0xa68fa3e8 | a68fa3e8 |
| DbgkLkmdUnregisterCallback | 0xeab4ae01 | eab4ae01 |
| DbgkWerCaptureLiveKernelDump | 0xba4ca092 | ba4ca092 |
| EmClientQueryRuleState | 0x914c2745 | 914c2745 |
| EmClientRuleDeregisterNotification | 0xe2b5b4de | e2b5b4de |
| EmClientRuleEvaluate | 0xf0ad5c72 | f0ad5c72 |
| EmClientRuleRegisterNotification | 0x70de6909 | 70de6909 |
| EmProviderDeregister | 0xc791dc38 | c791dc38 |
| EmProviderDeregisterEntry | 0x76180271 | 76180271 |
| EmProviderRegister | 0xb3f80f21 | b3f80f21 |
| EmProviderRegisterEntry | 0x47f0ced7 | 47f0ced7 |
| EmpProviderRegister | 0xccfb0f22 | ccfb0f22 |
| EtwActivityIdControl | 0x9a9f787b | 9a9f787b |
| EtwEnableTrace | 0x4c1cb582 | 4c1cb582 |
| EtwEventEnabled | 0xb6a7e0e5 | b6a7e0e5 |
| EtwProviderEnabled | 0x580b7291 | 580b7291 |
| EtwRegister | 0x15ee56bc | 15ee56bc |
| EtwRegisterClassicProvider | 0x23a594fd | 23a594fd |
| EtwSendTraceBuffer | 0xe7fb16d4 | e7fb16d4 |
| EtwSetInformation | 0xebc69a4f | ebc69a4f |
| EtwTelemetryCoverageReport | 0x7011eed0 | 7011eed0 |
| EtwUnregister | 0xa0b26ec0 | a0b26ec0 |
| EtwWrite | 0xf3aab52a | f3aab52a |
| EtwWriteEndScenario | 0x27ae519b | 27ae519b |
| EtwWriteEx | 0xaad4b4e6 | aad4b4e6 |
| EtwWriteStartScenario | 0xe3fa769b | e3fa769b |
| EtwWriteString | 0x6a655f72 | 6a655f72 |
| EtwWriteTransfer | 0xf3d052c2 | f3d052c2 |
| EtwpDisableStackWalkApc | 0x21fb69d9 | 21fb69d9 |
| EtwpReenableStackWalkApc | 0xa7aa2f5a | a7aa2f5a |
| ExAcquireAutoExpandPushLockExclusive | 0x9b4094df | 9b4094df |
| ExAcquireAutoExpandPushLockShared | 0xde744c6e | de744c6e |
| ExAcquireCacheAwarePushLockExclusive | 0x1a302755 | 1a302755 |
| ExAcquireCacheAwarePushLockExclusiveEx | 0xc09d5d80 | c09d5d80 |
| ExAcquireCacheAwarePushLockSharedEx | 0x7d294125 | 7d294125 |
| ExAcquireFastMutex | 0x3c7b67e7 | 3c7b67e7 |
| ExAcquireFastMutexUnsafe | 0x8039eb1f | 8039eb1f |
| ExAcquireFastResourceExclusive | 0x1df05251 | 1df05251 |
| ExAcquireFastResourceShared | 0x595751ce | 595751ce |
| ExAcquireFastResourceSharedStarveExclusive | 0xa4fea477 | a4fea477 |
| ExAcquirePushLockExclusiveEx | 0xe92c9536 | e92c9536 |
| ExAcquirePushLockSharedEx | 0xec959243 | ec959243 |
| ExAcquireResourceExclusiveLite | 0xb3614695 | b3614695 |
| ExAcquireResourceSharedLite | 0x866464a9 | 866464a9 |
| ExAcquireRundownProtection | 0x6cc595c2 | 6cc595c2 |
| ExAcquireRundownProtectionCacheAware | 0x255f89ee | 255f89ee |
| ExAcquireRundownProtectionCacheAwareEx | 0x7e27c1ad | 7e27c1ad |
| ExAcquireRundownProtectionEx | 0x165712cb | 165712cb |
| ExAcquireSharedStarveExclusive | 0x160f432d | 160f432d |
| ExAcquireSharedWaitForExclusive | 0x783abd1d | 783abd1d |
| ExAcquireSpinLockExclusive | 0x7bd20af | 7bd20af |
| ExAcquireSpinLockExclusiveAtDpcLevel | 0x4db91a3d | 4db91a3d |
| ExAcquireSpinLockShared | 0xf6132567 | f6132567 |
| ExAcquireSpinLockSharedAtDpcLevel | 0x609cd395 | 609cd395 |
| ExAllocateAutoExpandPushLock | 0x124f5c6f | 124f5c6f |
| ExAllocateCacheAwarePushLock | 0xa5fb53eb | a5fb53eb |
| ExAllocateCacheAwareRundownProtection | 0x6f143b5d | 6f143b5d |
| ExAllocatePool | 0xd0b7bd0e | d0b7bd0e |
| ExAllocatePoolWithQuota | 0xccee7f5d | ccee7f5d |
| ExAllocatePoolWithQuotaTag | 0x3fb042fe | 3fb042fe |
| ExAllocatePoolWithTag | 0x1f334514 | 1f334514 |
| ExAllocatePoolWithTagPriority | 0x8c6fc9b5 | 8c6fc9b5 |
| ExAllocateTimer | 0x1734996c | 1734996c |
| ExBlockOnAddressPushLock | 0xc343aa70 | c343aa70 |
| ExBlockPushLock | 0x8470a89d | 8470a89d |
| ExCancelTimer | 0xaa8ed248 | aa8ed248 |
| ExCleanupAutoExpandPushLock | 0x754cb5fa | 754cb5fa |
| ExCleanupRundownProtectionCacheAware | 0xc069bfb6 | c069bfb6 |
| ExCompositionObjectType | 0x19331f67 | 19331f67 |
| ExConvertExclusiveToSharedLite | 0x9ffe4114 | 9ffe4114 |
| ExConvertFastResourceExclusiveToShared | 0x3d23d87f | 3d23d87f |
| ExConvertPushLockExclusiveToShared | 0x19f788ca | 19f788ca |
| ExCoreMessagingObjectType | 0xdffa8e37 | dffa8e37 |
| ExCreateCallback | 0x7307be89 | 7307be89 |
| ExDeleteFastResource | 0xaa7a5c2 | aa7a5c2 |
| ExDeleteLookasideListEx | 0x430795ab | 430795ab |
| ExDeleteNPagedLookasideList | 0x11699c2b | 11699c2b |
| ExDeletePagedLookasideList | 0xc05fe828 | c05fe828 |
| ExDeleteResourceLite | 0x3002fffd | 3002fffd |
| ExDeleteTimer | 0x5c93505c | 5c93505c |
| ExDesktopObjectType | 0xa9fd7d6d | a9fd7d6d |
| ExDisableResourceBoostLite | 0xf310a6b | f310a6b |
| ExDisownFastResource | 0x9aabe048 | 9aabe048 |
| ExEnterCriticalRegionAndAcquireFastMutexUnsafe | 0x46e02b61 | 46e02b61 |
| ExEnterCriticalRegionAndAcquireResourceExclusive | 0x323c124e | 323c124e |
| ExEnterCriticalRegionAndAcquireResourceShared | 0xd9517a65 | d9517a65 |
| ExEnterCriticalRegionAndAcquireSharedWaitForExclusive | 0xad6cbf2b | ad6cbf2b |
| ExEnterPriorityRegionAndAcquireResourceExclusive | 0x28cf6cee | 28cf6cee |
| ExEnterPriorityRegionAndAcquireResourceShared | 0x8e91678c | 8e91678c |
| ExEnumHandleTable | 0x57677944 | 57677944 |
| ExEnumerateSystemFirmwareTables | 0x46bafced | 46bafced |
| ExEventObjectType | 0x968f0a01 | 968f0a01 |
| ExExtendZone | 0x46d7e5df | 46d7e5df |
| ExFetchLicenseData | 0xdacb6353 | dacb6353 |
| ExFlushLookasideListEx | 0xc4f50adb | c4f50adb |
| ExFreeAutoExpandPushLock | 0x5193f0f | 5193f0f |
| ExFreeCacheAwarePushLock | 0x98c5368b | 98c5368b |
| ExFreeCacheAwareRundownProtection | 0xab6839b6 | ab6839b6 |
| ExFreePool | 0x5082e499 | 5082e499 |
| ExFreePoolWithTag | 0x1d8c8168 | 1d8c8168 |
| ExGetCurrentProcessorCounts | 0x4fa66121 | 4fa66121 |
| ExGetCurrentProcessorCpuUsage | 0xd7f3ca83 | d7f3ca83 |
| ExGetExclusiveWaiterCount | 0x71f445ec | 71f445ec |
| ExGetFirmwareEnvironmentVariable | 0xc138c68e | c138c68e |
| ExGetFirmwareType | 0x8f7775c7 | 8f7775c7 |
| ExGetLicenseTamperState | 0xe7468a46 | e7468a46 |
| ExGetPreviousMode | 0x1b7634db | 1b7634db |
| ExGetSharedWaiterCount | 0xcea8d9bd | cea8d9bd |
| ExGetSystemFirmwareTable | 0x43a57eb4 | 43a57eb4 |
| ExInitializeAutoExpandPushLock | 0x1ac570cf | 1ac570cf |
| ExInitializeFastOwnerEntry | 0xa0347c94 | a0347c94 |
| ExInitializeFastResource | 0x18a3fc0 | 18a3fc0 |
| ExInitializeLookasideListEx | 0x9006911c | 9006911c |
| ExInitializeNPagedLookasideList | 0xc87e6c1a | c87e6c1a |
| ExInitializePagedLookasideList | 0x3e188ea8 | 3e188ea8 |
| ExInitializePushLock | 0xddecd665 | ddecd665 |
| ExInitializeResourceLite | 0x26e599fb | 26e599fb |
| ExInitializeRundownProtection | 0x9f63825b | 9f63825b |
| ExInitializeRundownProtectionCacheAware | 0xd7c45465 | d7c45465 |
| ExInitializeRundownProtectionCacheAwareEx | 0x1151a077 | 1151a077 |
| ExInitializeZone | 0x50de9539 | 50de9539 |
| ExInterlockedAddLargeInteger | 0x368953be | 368953be |
| ExInterlockedAddUlong | 0x22f81a35 | 22f81a35 |
| ExInterlockedExtendZone | 0xe3af9734 | e3af9734 |
| ExInterlockedInsertHeadList | 0x38e67d42 | 38e67d42 |
| ExInterlockedInsertTailList | 0x49667da1 | 49667da1 |
| ExInterlockedPopEntryList | 0xf4475266 | f4475266 |
| ExInterlockedPushEntryList | 0xbbdc03 | bbdc03 |
| ExInterlockedRemoveHeadList | 0xa60eee53 | a60eee53 |
| ExIsFastResourceContended | 0x9cc9f3d0 | 9cc9f3d0 |
| ExIsFastResourceHeld | 0x20adbdfb | 20adbdfb |
| ExIsFastResourceHeldExclusive | 0x574ae014 | 574ae014 |
| ExIsManufacturingModeEnabled | 0x5d5e1185 | 5d5e1185 |
| ExIsProcessorFeaturePresent | 0xdc6db8c9 | dc6db8c9 |
| ExIsResourceAcquiredExclusiveLite | 0x3ef3388b | 3ef3388b |
| ExIsResourceAcquiredSharedLite | 0x6a4f7bcd | 6a4f7bcd |
| ExIsSoftBoot | 0xb7cc6008 | b7cc6008 |
| ExLocalTimeToSystemTime | 0x65637ed4 | 65637ed4 |
| ExNotifyBootDeviceRemoval | 0x35a8e4ec | 35a8e4ec |
| ExNotifyCallback | 0x4aa6129f | 4aa6129f |
| ExQueryDepthSList | 0x608d70a2 | 608d70a2 |
| ExQueryFastCacheDevLicense | 0xfd3df277 | fd3df277 |
| ExQueryPoolBlockSize | 0x30bd3ebd | 30bd3ebd |
| ExQueryTimerResolution | 0x4f4ca86 | 4f4ca86 |
| ExQueryWnfStateData | 0xf0d6bc7 | f0d6bc7 |
| ExQueueWorkItem | 0xf6f97716 | f6f97716 |
| ExRaiseAccessViolation | 0x943d3669 | 943d3669 |
| ExRaiseDatatypeMisalignment | 0x7552d36c | 7552d36c |
| ExRaiseException | 0xd796e1d1 | d796e1d1 |
| ExRaiseHardError | 0x92e60821 | 92e60821 |
| ExRaiseStatus | 0x7ac6ebc9 | 7ac6ebc9 |
| ExRawInputManagerObjectType | 0xe9b4b654 | e9b4b654 |
| ExReInitializeRundownProtection | 0xb19448db | b19448db |
| ExReInitializeRundownProtectionCacheAware | 0xf1c49d28 | f1c49d28 |
| ExRealTimeIsUniversal | 0x8b420b7d | 8b420b7d |
| ExRegisterBootDevice | 0x6d85b6ac | 6d85b6ac |
| ExRegisterCallback | 0xf36a4f10 | f36a4f10 |
| ExRegisterExtension | 0x6012fdc6 | 6012fdc6 |
| ExReinitializeFastResource | 0x19edbfc9 | 19edbfc9 |
| ExReinitializeResourceLite | 0x3f491a04 | 3f491a04 |
| ExReleaseAutoExpandPushLockExclusive | 0x6f30a701 | 6f30a701 |
| ExReleaseAutoExpandPushLockShared | 0x2b7f44f | 2b7f44f |
| ExReleaseCacheAwarePushLockExclusive | 0xee203976 | ee203976 |
| ExReleaseCacheAwarePushLockExclusiveEx | 0x80e5e4d0 | 80e5e4d0 |
| ExReleaseCacheAwarePushLockSharedEx | 0x8bc8c1b6 | 8bc8c1b6 |
| ExReleaseDisownedFastResource | 0x53d7b988 | 53d7b988 |
| ExReleaseDisownedFastResourceExclusive | 0x96bc8679 | 96bc8679 |
| ExReleaseDisownedFastResourceShared | 0xc1a84366 | c1a84366 |
| ExReleaseFastMutex | 0x387ff05c | 387ff05c |
| ExReleaseFastMutexUnsafe | 0xbf3b0d3c | bf3b0d3c |
| ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | 0x1373b21 | 1373b21 |
| ExReleaseFastResource | 0xf6ce7128 | f6ce7128 |
| ExReleaseFastResourceExclusive | 0x6db09ad8 | 6db09ad8 |
| ExReleaseFastResourceShared | 0xea65f14e | ea65f14e |
| ExReleasePushLockEx | 0xd96f19c | d96f19c |
| ExReleasePushLockExclusiveEx | 0xb008549 | b008549 |
| ExReleasePushLockSharedEx | 0xccb9d5eb | ccb9d5eb |
| ExReleaseResourceAndLeaveCriticalRegion | 0x3a5813b4 | 3a5813b4 |
| ExReleaseResourceAndLeavePriorityRegion | 0x7a453a69 | 7a453a69 |
| ExReleaseResourceForThreadLite | 0xe4ca8213 | e4ca8213 |
| ExReleaseResourceLite | 0x1c29cb64 | 1c29cb64 |
| ExReleaseRundownProtection | 0x714e0abe | 714e0abe |
| ExReleaseRundownProtectionCacheAware | 0xf94f9c0f | f94f9c0f |
| ExReleaseRundownProtectionCacheAwareEx | 0x3e7048fd | 3e7048fd |
| ExReleaseRundownProtectionEx | 0x382b02dd | 382b02dd |
| ExReleaseSpinLockExclusive | 0xc4595ab | c4595ab |
| ExReleaseSpinLockExclusiveFromDpcLevel | 0xa08f0da3 | a08f0da3 |
| ExReleaseSpinLockShared | 0xe00b2e78 | e00b2e78 |
| ExReleaseSpinLockSharedFromDpcLevel | 0x7dcb6730 | 7dcb6730 |
| ExRundownCompleted | 0xa97911ba | a97911ba |
| ExRundownCompletedCacheAware | 0x15407cbc | 15407cbc |
| ExSemaphoreObjectType | 0x911a6133 | 911a6133 |
| ExSetFirmwareEnvironmentVariable | 0xc150c68e | c150c68e |
| ExSetLicenseTamperState | 0xe7468b06 | e7468b06 |
| ExSetResourceOwnerPointer | 0x49db5c6e | 49db5c6e |
| ExSetResourceOwnerPointerEx | 0x6d71c23f | 6d71c23f |
| ExSetTimer | 0x2d7f5bc4 | 2d7f5bc4 |
| ExSetTimerResolution | 0xea71100 | ea71100 |
| ExShareAddressSpaceWithDevice | 0xb7100f3 | b7100f3 |
| ExSizeOfAutoExpandPushLock | 0x2185e63d | 2185e63d |
| ExSizeOfRundownProtectionCacheAware | 0xe672153d | e672153d |
| ExSubscribeWnfStateChange | 0x448f044f | 448f044f |
| ExSvmBeginDeviceReset | 0xb2a0a117 | b2a0a117 |
| ExSvmFinalizeDeviceReset | 0xac943e7 | ac943e7 |
| ExSystemExceptionFilter | 0xd211794a | d211794a |
| ExSystemTimeToLocalTime | 0xe7c494dd | e7c494dd |
| ExTimedWaitForUnblockPushLock | 0x6de97e2f | 6de97e2f |
| ExTimerObjectType | 0x12070da8 | 12070da8 |
| ExTryAcquireAutoExpandPushLockExclusive | 0xd09718f1 | d09718f1 |
| ExTryAcquireAutoExpandPushLockShared | 0xe698b71b | e698b71b |
| ExTryAcquireCacheAwarePushLockExclusiveEx | 0x1aada656 | 1aada656 |
| ExTryAcquireCacheAwarePushLockSharedEx | 0xed3f546 | ed3f546 |
| ExTryAcquirePushLockExclusiveEx | 0xfb61ebba | fb61ebba |
| ExTryAcquirePushLockSharedEx | 0x999db6ae | 999db6ae |
| ExTryAcquireSpinLockExclusiveAtDpcLevel | 0x830f9e4f | 830f9e4f |
| ExTryAcquireSpinLockSharedAtDpcLevel | 0x68c13e42 | 68c13e42 |
| ExTryConvertPushLockSharedToExclusiveEx | 0x58f4da3e | 58f4da3e |
| ExTryConvertSharedSpinLockExclusive | 0xfdff59a6 | fdff59a6 |
| ExTryQueueWorkItem | 0x142259 | 142259 |
| ExTryToAcquireFastMutex | 0x22649d62 | 22649d62 |
| ExTryToAcquireResourceExclusiveLite | 0x61bfd9ed | 61bfd9ed |
| ExTryToConvertFastResourceSharedToExclusive | 0xc6c88ef6 | c6c88ef6 |
| ExUnblockOnAddressPushLockEx | 0x5a9f087 | 5a9f087 |
| ExUnblockPushLockEx | 0xe5b2372a | e5b2372a |
| ExUnregisterCallback | 0x55614f35 | 55614f35 |
| ExUnregisterExtension | 0x9ef30252 | 9ef30252 |
| ExUnsubscribeWnfStateChange | 0x54470572 | 54470572 |
| ExUpdateLicenseData | 0x389b2f0 | 389b2f0 |
| ExUuidCreate | 0xb1bf2b46 | b1bf2b46 |
| ExVerifySuite | 0x4d1484c | 4d1484c |
| ExWaitForRundownProtectionRelease | 0x699c3fe1 | 699c3fe1 |
| ExWaitForRundownProtectionReleaseCacheAware | 0xcddb7d48 | cddb7d48 |
| ExWaitForUnblockPushLock | 0xdfe9f0d1 | dfe9f0d1 |
| ExWindowStationObjectType | 0xeabb8a11 | eabb8a11 |
| ExfAcquirePushLockExclusive | 0x55ba4c3d | 55ba4c3d |
| ExfAcquirePushLockShared | 0x4d2fc162 | 4d2fc162 |
| ExfReleasePushLock | 0x29d5d5ba | 29d5d5ba |
| ExfReleasePushLockExclusive | 0x5a42c139 | 5a42c139 |
| ExfReleasePushLockShared | 0x3727ca73 | 3727ca73 |
| ExfTryAcquirePushLockShared | 0xb3a66885 | b3a66885 |
| ExfTryToWakePushLock | 0xb6d13f7c | b6d13f7c |
| ExfUnblockPushLock | 0x8d8bdc8b | 8d8bdc8b |
| ExpInterlockedFlushSList | 0x58cd43ef | 58cd43ef |
| ExpInterlockedPopEntrySList | 0xe14ba64c | e14ba64c |
| ExpInterlockedPushEntrySList | 0x17dcfbff | 17dcfbff |
| FirstEntrySList | 0xd2b0d6ea | d2b0d6ea |
| FsRtlAcknowledgeEcp | 0x9c9fb6d3 | 9c9fb6d3 |
| FsRtlAcquireEofLock | 0xb59f198e | b59f198e |
| FsRtlAcquireFileExclusive | 0x9a0df02f | 9a0df02f |
| FsRtlAcquireHeaderMutex | 0x355272c7 | 355272c7 |
| FsRtlAddBaseMcbEntry | 0xc1d3176d | c1d3176d |
| FsRtlAddBaseMcbEntryEx | 0x4c5dc01f | 4c5dc01f |
| FsRtlAddLargeMcbEntry | 0x51cc4ca2 | 51cc4ca2 |
| FsRtlAddMcbEntry | 0xff9c12a5 | ff9c12a5 |
| FsRtlAddToTunnelCache | 0x6c2f5157 | 6c2f5157 |
| FsRtlAddToTunnelCacheEx | 0xbd4566c8 | bd4566c8 |
| FsRtlAllocateExtraCreateParameter | 0xd9f67add | d9f67add |
| FsRtlAllocateExtraCreateParameterFromLookasideList | 0x63c662f5 | 63c662f5 |
| FsRtlAllocateExtraCreateParameterList | 0xae05523b | ae05523b |
| FsRtlAllocateFileLock | 0x1878d890 | 1878d890 |
| FsRtlAllocatePool | 0x110169ec | 110169ec |
| FsRtlAllocatePoolWithQuota | 0x28a2767 | 28a2767 |
| FsRtlAllocatePoolWithQuotaTag | 0x13b4ddcc | 13b4ddcc |
| FsRtlAllocatePoolWithTag | 0x2180abfe | 2180abfe |
| FsRtlAllocateResource | 0x272d64e9 | 272d64e9 |
| FsRtlAreNamesEqual | 0x7e5e32ea | 7e5e32ea |
| FsRtlAreThereCurrentOrInProgressFileLocks | 0xd3b8eefd | d3b8eefd |
| FsRtlAreThereWaitingFileLocks | 0xd60ffe9c | d60ffe9c |
| FsRtlAreVolumeStartupApplicationsComplete | 0x4d72cd47 | 4d72cd47 |
| FsRtlBalanceReads | 0x722fa2eb | 722fa2eb |
| FsRtlCancellableWaitForMultipleObjects | 0x1cda882a | 1cda882a |
| FsRtlCancellableWaitForSingleObject | 0xe31bf7f5 | e31bf7f5 |
| FsRtlChangeBackingFileObject | 0xd52aa0a | d52aa0a |
| FsRtlCheckLockForOplockRequest | 0xac51da0 | ac51da0 |
| FsRtlCheckLockForReadAccess | 0xf120ea69 | f120ea69 |
| FsRtlCheckLockForWriteAccess | 0xe031be39 | e031be39 |
| FsRtlCheckOplock | 0xdc537e69 | dc537e69 |
| FsRtlCheckOplockEx | 0x4df9b089 | 4df9b089 |
| FsRtlCheckUpperOplock | 0x6308737b | 6308737b |
| FsRtlCopyRead | 0x42918ebd | 42918ebd |
| FsRtlCopyWrite | 0x52887a0d | 52887a0d |
| FsRtlCreateSectionForDataScan | 0xe3638dc2 | e3638dc2 |
| FsRtlCurrentBatchOplock | 0x793778aa | 793778aa |
| FsRtlCurrentOplock | 0x1ac41f35 | 1ac41f35 |
| FsRtlCurrentOplockH | 0x5883e6eb | 5883e6eb |
| FsRtlDeleteExtraCreateParameterLookasideList | 0x72395faa | 72395faa |
| FsRtlDeleteKeyFromTunnelCache | 0xd048bebc | d048bebc |
| FsRtlDeleteTunnelCache | 0x6e09021b | 6e09021b |
| FsRtlDeregisterUncProvider | 0x7ab084db | 7ab084db |
| FsRtlDismountComplete | 0x818818e1 | 818818e1 |
| FsRtlDissectDbcs | 0x848378f0 | 848378f0 |
| FsRtlDissectName | 0x84887622 | 84887622 |
| FsRtlDoesDbcsContainWildCards | 0xc1aad024 | c1aad024 |
| FsRtlDoesNameContainWildCards | 0xbedcd029 | bedcd029 |
| FsRtlFastCheckLockForRead | 0xa88c88a3 | a88c88a3 |
| FsRtlFastCheckLockForWrite | 0x11e7b6da | 11e7b6da |
| FsRtlFastUnlockAll | 0x7ff71854 | 7ff71854 |
| FsRtlFastUnlockAllByKey | 0xad5da749 | ad5da749 |
| FsRtlFastUnlockSingle | 0xaffce9e0 | affce9e0 |
| FsRtlFindExtraCreateParameter | 0x28a6271d | 28a6271d |
| FsRtlFindInTunnelCache | 0xc28b2296 | c28b2296 |
| FsRtlFindInTunnelCacheEx | 0x2c8a6422 | 2c8a6422 |
| FsRtlFreeExtraCreateParameter | 0x28a8552d | 28a8552d |
| FsRtlFreeExtraCreateParameterList | 0x52fa3d59 | 52fa3d59 |
| FsRtlFreeFileLock | 0x3967d85 | 3967d85 |
| FsRtlGetEcpListFromIrp | 0xb230224d | b230224d |
| FsRtlGetFileNameInformation | 0x3f48adde | 3f48adde |
| FsRtlGetFileSize | 0x95a6975b | 95a6975b |
| FsRtlGetIoAtEof | 0x7e047d64 | 7e047d64 |
| FsRtlGetNextBaseMcbEntry | 0x167f9be9 | 167f9be9 |
| FsRtlGetNextExtraCreateParameter | 0x9e4c1871 | 9e4c1871 |
| FsRtlGetNextFileLock | 0x5dd2b1cc | 5dd2b1cc |
| FsRtlGetNextLargeMcbEntry | 0xe75cdc0c | e75cdc0c |
| FsRtlGetNextMcbEntry | 0xc7e3c7f0 | c7e3c7f0 |
| FsRtlGetSectorSizeInformation | 0x3d4749b8 | 3d4749b8 |
| FsRtlGetSupportedFeatures | 0xa0dd8f29 | a0dd8f29 |
| FsRtlGetVirtualDiskNestingLevel | 0x67472cb2 | 67472cb2 |
| FsRtlHeatInit | 0xa43d33f2 | a43d33f2 |
| FsRtlHeatLogIo | 0x87d6f163 | 87d6f163 |
| FsRtlHeatLogTierMove | 0x333e07d5 | 333e07d5 |
| FsRtlHeatUninit | 0xccfc025 | ccfc025 |
| FsRtlIncrementCcFastMdlReadWait | 0x5e14d745 | 5e14d745 |
| FsRtlIncrementCcFastReadNoWait | 0xddcaf06d | ddcaf06d |
| FsRtlIncrementCcFastReadNotPossible | 0x6121c83f | 6121c83f |
| FsRtlIncrementCcFastReadResourceMiss | 0xc5c67d4e | c5c67d4e |
| FsRtlIncrementCcFastReadWait | 0xb67bbd0b | b67bbd0b |
| FsRtlInitExtraCreateParameterLookasideList | 0x594033c6 | 594033c6 |
| FsRtlInitializeBaseMcb | 0xe96e7c84 | e96e7c84 |
| FsRtlInitializeBaseMcbEx | 0xb9f21cbd | b9f21cbd |
| FsRtlInitializeEofLock | 0xc492848e | c492848e |
| FsRtlInitializeExtraCreateParameter | 0x7a6be169 | 7a6be169 |
| FsRtlInitializeExtraCreateParameterList | 0x16bf5992 | 16bf5992 |
| FsRtlInitializeFileLock | 0x1fcf414a | 1fcf414a |
| FsRtlInitializeLargeMcb | 0x2bfb396f | 2bfb396f |
| FsRtlInitializeMcb | 0xabbc5ac2 | abbc5ac2 |
| FsRtlInitializeOplock | 0x32381ea9 | 32381ea9 |
| FsRtlInitializeTunnelCache | 0xd8db2b9a | d8db2b9a |
| FsRtlInsertExtraCreateParameter | 0xde73f0ff | de73f0ff |
| FsRtlInsertPerFileContext | 0xbfb74f3a | bfb74f3a |
| FsRtlInsertPerFileObjectContext | 0xe779518 | e779518 |
| FsRtlInsertPerStreamContext | 0xe962dc58 | e962dc58 |
| FsRtlIsDaxVolume | 0x2a5cd697 | 2a5cd697 |
| FsRtlIsDbcsInExpression | 0x6153f294 | 6153f294 |
| FsRtlIsEcpAcknowledged | 0x9e6ab802 | 9e6ab802 |
| FsRtlIsEcpFromUserMode | 0x93ebd612 | 93ebd612 |
| FsRtlIsExtentDangling | 0xb538524c | b538524c |
| FsRtlIsFatDbcsLegal | 0x263cab50 | 263cab50 |
| FsRtlIsHpfsDbcsLegal | 0x3b524305 | 3b524305 |
| FsRtlIsMobileOS | 0xe6814622 | e6814622 |
| FsRtlIsNameInExpression | 0x81544267 | 81544267 |
| FsRtlIsNameInUnUpcasedExpression | 0x162c6d72 | 162c6d72 |
| FsRtlIsNonEmptyDirectoryReparsePointAllowed | 0x357b38f6 | 357b38f6 |
| FsRtlIsNtstatusExpected | 0x128a6b94 | 128a6b94 |
| FsRtlIsPagingFile | 0x934c3a7 | 934c3a7 |
| FsRtlIsSystemPagingFile | 0x507b38c1 | 507b38c1 |
| FsRtlIsTotalDeviceFailure | 0x5dcd90e2 | 5dcd90e2 |
| FsRtlIssueDeviceIoControl | 0xdfba6b8d | dfba6b8d |
| FsRtlKernelFsControlFile | 0x3ae1f936 | 3ae1f936 |
| FsRtlLegalAnsiCharacterArray | 0xcaa50398 | caa50398 |
| FsRtlLogCcFlushError | 0xfe577a20 | fe577a20 |
| FsRtlLookupBaseMcbEntry | 0x6520a547 | 6520a547 |
| FsRtlLookupLargeMcbEntry | 0xbb7e07d6 | bb7e07d6 |
| FsRtlLookupLastBaseMcbEntry | 0xdbe9bfb7 | dbe9bfb7 |
| FsRtlLookupLastBaseMcbEntryAndIndex | 0x36885718 | 36885718 |
| FsRtlLookupLastLargeMcbEntry | 0x94a155e5 | 94a155e5 |
| FsRtlLookupLastLargeMcbEntryAndIndex | 0xee1e84d0 | ee1e84d0 |
| FsRtlLookupLastMcbEntry | 0x6a20b447 | 6a20b447 |
| FsRtlLookupMcbEntry | 0xd879acda | d879acda |
| FsRtlLookupPerFileContext | 0x433d663c | 433d663c |
| FsRtlLookupPerFileObjectContext | 0x6f591ad8 | 6f591ad8 |
| FsRtlLookupPerStreamContextInternal | 0x2d6d2df2 | 2d6d2df2 |
| FsRtlMdlRead | 0x33c157f8 | 33c157f8 |
| FsRtlMdlReadComplete | 0x628f9d4d | 628f9d4d |
| FsRtlMdlReadCompleteDev | 0xcea7ce5d | cea7ce5d |
| FsRtlMdlReadDev | 0xabfd36f6 | abfd36f6 |
| FsRtlMdlReadEx | 0x55fe9e7 | 55fe9e7 |
| FsRtlMdlWriteComplete | 0x22d91092 | 22d91092 |
| FsRtlMdlWriteCompleteDev | 0x884a2e82 | 884a2e82 |
| FsRtlMupGetProviderIdFromName | 0x224a6e26 | 224a6e26 |
| FsRtlMupGetProviderInfoFromFileObject | 0x8f7aed5e | 8f7aed5e |
| FsRtlNormalizeNtstatus | 0x12f82f5c | 12f82f5c |
| FsRtlNotifyChangeDirectory | 0x2c4c68d7 | 2c4c68d7 |
| FsRtlNotifyCleanup | 0xc1157ec6 | c1157ec6 |
| FsRtlNotifyCleanupAll | 0xbf647276 | bf647276 |
| FsRtlNotifyFilterChangeDirectory | 0x7ccb4193 | 7ccb4193 |
| FsRtlNotifyFilterChangeDirectoryLite | 0x195f7f99 | 195f7f99 |
| FsRtlNotifyFilterReportChange | 0xb3127f5f | b3127f5f |
| FsRtlNotifyFilterReportChangeLite | 0xf622e40c | f622e40c |
| FsRtlNotifyFilterReportChangeLiteEx | 0x8b903cf0 | 8b903cf0 |
| FsRtlNotifyFullChangeDirectory | 0x124d5730 | 124d5730 |
| FsRtlNotifyFullReportChange | 0xde4baa63 | de4baa63 |
| FsRtlNotifyInitializeSync | 0x6572b460 | 6572b460 |
| FsRtlNotifyReportChange | 0x199de62 | 199de62 |
| FsRtlNotifyUninitializeSync | 0xb7d05f49 | b7d05f49 |
| FsRtlNotifyVolumeEvent | 0x8a451b2b | 8a451b2b |
| FsRtlNotifyVolumeEventEx | 0x146cb741 | 146cb741 |
| FsRtlNumberOfRunsInBaseMcb | 0x1c00eefa | 1c00eefa |
| FsRtlNumberOfRunsInLargeMcb | 0x7e498815 | 7e498815 |
| FsRtlNumberOfRunsInMcb | 0xd2e3adeb | d2e3adeb |
| FsRtlOplockBreakH | 0x34ebb14a | 34ebb14a |
| FsRtlOplockBreakToNone | 0xb382a187 | b382a187 |
| FsRtlOplockBreakToNoneEx | 0xa8627e6 | a8627e6 |
| FsRtlOplockFsctrl | 0x3cfafe4e | 3cfafe4e |
| FsRtlOplockFsctrlEx | 0xebf9420b | ebf9420b |
| FsRtlOplockIsFastIoPossible | 0x7748b332 | 7748b332 |
| FsRtlOplockIsSharedRequest | 0xaad31367 | aad31367 |
| FsRtlOplockKeysEqual | 0xfa5b839e | fa5b839e |
| FsRtlPostPagingFileStackOverflow | 0xa62f2fb3 | a62f2fb3 |
| FsRtlPostStackOverflow | 0x9ab9b4f5 | 9ab9b4f5 |
| FsRtlPrepareMdlWrite | 0x3df4cf76 | 3df4cf76 |
| FsRtlPrepareMdlWriteDev | 0x67bc3c10 | 67bc3c10 |
| FsRtlPrepareMdlWriteEx | 0xd33de20f | d33de20f |
| FsRtlPrepareToReuseEcp | 0x59d6cffb | 59d6cffb |
| FsRtlPrivateLock | 0xa5c8c2ff | a5c8c2ff |
| FsRtlProcessFileLock | 0x18521326 | 18521326 |
| FsRtlQueryCachedVdl | 0x419086b8 | 419086b8 |
| FsRtlQueryInformationFile | 0x691e00ad | 691e00ad |
| FsRtlQueryKernelEaFile | 0x252cb8af | 252cb8af |
| FsRtlQueryMaximumVirtualDiskNestingLevel | 0x3efb7401 | 3efb7401 |
| FsRtlRegisterFileSystemFilterCallbacks | 0x94353336 | 94353336 |
| FsRtlRegisterFltMgrCalls | 0x89e0059b | 89e0059b |
| FsRtlRegisterMupCalls | 0xc6ae0128 | c6ae0128 |
| FsRtlRegisterUncProvider | 0x475013d5 | 475013d5 |
| FsRtlRegisterUncProviderEx | 0x404f5e35 | 404f5e35 |
| FsRtlRegisterUncProviderEx2 | 0x9ebc6da | 9ebc6da |
| FsRtlReleaseEofLock | 0xd2de1ab0 | d2de1ab0 |
| FsRtlReleaseFile | 0xa3cc0e91 | a3cc0e91 |
| FsRtlReleaseFileNameInformation | 0xc4727d4a | c4727d4a |
| FsRtlReleaseHeaderMutex | 0x477446b7 | 477446b7 |
| FsRtlRemoveBaseMcbEntry | 0xb5d69648 | b5d69648 |
| FsRtlRemoveDotsFromPath | 0x937f7843 | 937f7843 |
| FsRtlRemoveExtraCreateParameter | 0xf5467810 | f5467810 |
| FsRtlRemoveLargeMcbEntry | 0xd23c2800 | d23c2800 |
| FsRtlRemoveMcbEntry | 0x3789c1e6 | 3789c1e6 |
| FsRtlRemovePerFileContext | 0x1b016b7f | 1b016b7f |
| FsRtlRemovePerFileObjectContext | 0x254a1c29 | 254a1c29 |
| FsRtlRemovePerStreamContext | 0x11d3edc6 | 11d3edc6 |
| FsRtlResetBaseMcb | 0x345036e2 | 345036e2 |
| FsRtlResetLargeMcb | 0x88328518 | 88328518 |
| FsRtlSendModernAppTermination | 0x93483119 | 93483119 |
| FsRtlSetDriverBacking | 0x9a09118f | 9a09118f |
| FsRtlSetEcpListIntoIrp | 0x6a8d224e | 6a8d224e |
| FsRtlSetKernelEaFile | 0xce0ed8de | ce0ed8de |
| FsRtlSplitBaseMcb | 0x34fb5ae2 | 34fb5ae2 |
| FsRtlSplitLargeMcb | 0x9d970518 | 9d970518 |
| FsRtlSyncVolumes | 0xdc5a1fac | dc5a1fac |
| FsRtlTeardownPerFileContexts | 0x3df6d01a | 3df6d01a |
| FsRtlTeardownPerStreamContexts | 0x5ffcc8ac | 5ffcc8ac |
| FsRtlTruncateBaseMcb | 0xa8b3ce0b | a8b3ce0b |
| FsRtlTruncateLargeMcb | 0x14a56a47 | 14a56a47 |
| FsRtlTruncateMcb | 0xd4c6b7 | d4c6b7 |
| FsRtlTryToAcquireHeaderMutex | 0xf8b617fd | f8b617fd |
| FsRtlUninitializeBaseMcb | 0x701b54a1 | 701b54a1 |
| FsRtlUninitializeFileLock | 0xf56a44da | f56a44da |
| FsRtlUninitializeLargeMcb | 0x1963d00 | 1963d00 |
| FsRtlUninitializeMcb | 0x793e232d | 793e232d |
| FsRtlUninitializeOplock | 0x166d856a | 166d856a |
| FsRtlUpdateDiskCounters | 0xdff41471 | dff41471 |
| FsRtlUpperOplockFsctrl | 0x7a8a810b | 7a8a810b |
| FsRtlValidateReparsePointBuffer | 0xc4e1f4d1 | c4e1f4d1 |
| FsRtlVolumeDeviceToCorrelationId | 0x9ad5adbc | 9ad5adbc |
| HalDispatchTable | 0xbced3bb | bced3bb |
| HalExamineMBR | 0xcb4cd7ba | cb4cd7ba |
| HalPrivateDispatchTable | 0xe1786956 | e1786956 |
| HeadlessDispatch | 0xa4d78c0b | a4d78c0b |
| HviGetDebugDeviceOptions | 0x77225526 | 77225526 |
| HviGetEnlightenmentInformation | 0xc1425c62 | c1425c62 |
| HviGetHardwareFeatures | 0x2fa5ed1d | 2fa5ed1d |
| HviGetHypervisorFeatures | 0xfbb19a2c | fbb19a2c |
| HviGetHypervisorInterface | 0x17fd3751 | 17fd3751 |
| HviGetHypervisorVendorAndMaxFunction | 0xd6f735fe | d6f735fe |
| HviGetHypervisorVersion | 0xd0ecdc7a | d0ecdc7a |
| HviGetImplementationLimits | 0xf624f507 | f624f507 |
| HviIsAnyHypervisorPresent | 0xda74b2fc | da74b2fc |
| HviIsHypervisorMicrosoftCompatible | 0xa0cb8a07 | a0cb8a07 |
| HviIsHypervisorVendorMicrosoft | 0x1e44e6f6 | 1e44e6f6 |
| HviIsIommuInUse | 0xe51e083b | e51e083b |
| HvlGetLpIndexFromApicId | 0x6081d11f | 6081d11f |
| HvlInvokeFastExtendedHypercall | 0x79e7e166 | 79e7e166 |
| HvlInvokeHypercall | 0x740570f4 | 740570f4 |
| HvlPerformEndOfInterrupt | 0x3c34f807 | 3c34f807 |
| HvlQueryActiveHypervisorProcessorCount | 0x54d7f357 | 54d7f357 |
| HvlQueryActiveProcessors | 0x83233f3f | 83233f3f |
| HvlQueryConnection | 0xe4d1fa0a | e4d1fa0a |
| HvlQueryHypervisorProcessorNodeNumber | 0xfb8b1f88 | fb8b1f88 |
| HvlQueryNumaDistance | 0xcc290a51 | cc290a51 |
| HvlQueryProcessorTopology | 0xd5c17426 | d5c17426 |
| HvlQueryProcessorTopologyCount | 0x5214e51c | 5214e51c |
| HvlQueryProcessorTopologyEx | 0x5d0a46f | 5d0a46f |
| HvlQueryProcessorTopologyHighestId | 0xc5107f9e | c5107f9e |
| HvlReadPerformanceStateCounters | 0xc4028b1 | c4028b1 |
| HvlRegisterInterruptCallback | 0xf1a4541e | f1a4541e |
| HvlRegisterWheaErrorNotification | 0xea96c9cf | ea96c9cf |
| HvlUnregisterInterruptCallback | 0x523bc59b | 523bc59b |
| HvlUnregisterWheaErrorNotification | 0x25cd347 | 25cd347 |
| InbvAcquireDisplayOwnership | 0xe156ea0f | e156ea0f |
| InbvCheckDisplayOwnership | 0x76454bf7 | 76454bf7 |
| InbvDisplayString | 0x6421aabe | 6421aabe |
| InbvEnableBootDriver | 0x2bab5c16 | 2bab5c16 |
| InbvEnableDisplayString | 0x860c6f78 | 860c6f78 |
| InbvInstallDisplayStringFilter | 0xbe0c013e | be0c013e |
| InbvIsBootDriverInstalled | 0x5dc66c47 | 5dc66c47 |
| InbvNotifyDisplayOwnershipChange | 0x3f8844f7 | 3f8844f7 |
| InbvNotifyDisplayOwnershipLost | 0xec948053 | ec948053 |
| InbvResetDisplay | 0x640ee996 | 640ee996 |
| InbvSetScrollRegion | 0x47c5aa5c | 47c5aa5c |
| InbvSetTextColor | 0x778e79e4 | 778e79e4 |
| InbvSetVirtualFrameBuffer | 0xba6168e8 | ba6168e8 |
| InbvSolidColorFill | 0x1686a6ad | 1686a6ad |
| InitSafeBootMode | 0x107bd46b | 107bd46b |
| InitializeSListHead | 0x56075109 | 56075109 |
| InterlockedPushListSList | 0xaa5be2d1 | aa5be2d1 |
| IoAcquireCancelSpinLock | 0x74c0a38f | 74c0a38f |
| IoAcquireRemoveLockEx | 0xea9a0fd4 | ea9a0fd4 |
| IoAcquireVpbSpinLock | 0x7174d3bf | 7174d3bf |
| IoAdapterObjectType | 0xb3e270f7 | b3e270f7 |
| IoAdjustStackSizeForRedirection | 0xdb659580 | db659580 |
| IoAllocateAdapterChannel | 0xd3c0b06d | d3c0b06d |
| IoAllocateController | 0x7b540c52 | 7b540c52 |
| IoAllocateDriverObjectExtension | 0xb1a6b5ef | b1a6b5ef |
| IoAllocateErrorLogEntry | 0xdbb87b4b | dbb87b4b |
| IoAllocateIrp | 0x5205a246 | 5205a246 |
| IoAllocateIrpEx | 0x16892260 | 16892260 |
| IoAllocateMdl | 0x5205b082 | 5205b082 |
| IoAllocateMiniCompletionPacket | 0x82db9aff | 82db9aff |
| IoAllocateSfioStreamIdentifier | 0x95e2efa | 95e2efa |
| IoAllocateWorkItem | 0xd77a68c0 | d77a68c0 |
| IoApplyPriorityInfoThread | 0x75a6bdb3 | 75a6bdb3 |
| IoAssignResources | 0xc013786 | c013786 |
| IoAttachDevice | 0xa0eb9590 | a0eb9590 |
| IoAttachDeviceByPointer | 0x577b370c | 577b370c |
| IoAttachDeviceToDeviceStack | 0x49dfd553 | 49dfd553 |
| IoAttachDeviceToDeviceStackSafe | 0x555faf22 | 555faf22 |
| IoBoostThreadIo | 0x43cd036c | 43cd036c |
| IoBuildAsynchronousFsdRequest | 0xceeb57b1 | ceeb57b1 |
| IoBuildDeviceIoControlRequest | 0x377090ba | 377090ba |
| IoBuildPartialMdl | 0xa02e2f0a | a02e2f0a |
| IoBuildSynchronousFsdRequest | 0x7ad0f95f | 7ad0f95f |
| IoCallDriver | 0xb59b298d | b59b298d |
| IoCancelFileOpen | 0x6714bfa5 | 6714bfa5 |
| IoCancelIrp | 0x4db958d4 | 4db958d4 |
| IoCheckDesiredAccess | 0x4187f9d5 | 4187f9d5 |
| IoCheckEaBufferValidity | 0x44492af3 | 44492af3 |
| IoCheckFunctionAccess | 0x2a664783 | 2a664783 |
| IoCheckLinkShareAccess | 0xc438c69 | c438c69 |
| IoCheckQuerySetFileInformation | 0x49ccd1f4 | 49ccd1f4 |
| IoCheckQuerySetVolumeInformation | 0x9fe64fab | 9fe64fab |
| IoCheckQuotaBufferValidity | 0x7ae50fe | 7ae50fe |
| IoCheckShareAccess | 0x38cdba4d | 38cdba4d |
| IoCheckShareAccessEx | 0x36e93dfb | 36e93dfb |
| IoCleanupIrp | 0x49ce01f1 | 49ce01f1 |
| IoClearActivityIdThread | 0x1c14dffc | 1c14dffc |
| IoClearAdapterCryptoEngineExtension | 0x779c41fc | 779c41fc |
| IoClearFsTrackOffsetState | 0x31f41862 | 31f41862 |
| IoClearIrpExtraCreateParameter | 0x3f92a843 | 3f92a843 |
| IoCompleteRequest | 0x5b55c3b6 | 5b55c3b6 |
| IoCompletionObjectType | 0x20c24b11 | 20c24b11 |
| IoConnectInterrupt | 0xef06e3a4 | ef06e3a4 |
| IoConnectInterruptEx | 0x1b8e9cd4 | 1b8e9cd4 |
| IoConvertFileHandleToKernelHandle | 0x7f83047c | 7f83047c |
| IoCopyDeviceObjectHint | 0x1affcae4 | 1affcae4 |
| IoCreateArcName | 0x94f93c60 | 94f93c60 |
| IoCreateController | 0x4055c4f0 | 4055c4f0 |
| IoCreateDevice | 0xe1e1b617 | e1e1b617 |
| IoCreateDisk | 0x54b8880c | 54b8880c |
| IoCreateDriver | 0xe2ab6a64 | e2ab6a64 |
| IoCreateFile | 0x54b98726 | 54b98726 |
| IoCreateFileEx | 0xe61ca26a | e61ca26a |
| IoCreateFileSpecifyDeviceObjectHint | 0x3b077e20 | 3b077e20 |
| IoCreateNotificationEvent | 0xe02079f3 | e02079f3 |
| IoCreateStreamFileObject | 0x7bdfd08c | 7bdfd08c |
| IoCreateStreamFileObjectEx | 0x7f423b07 | 7f423b07 |
| IoCreateStreamFileObjectEx2 | 0xe8476121 | e8476121 |
| IoCreateStreamFileObjectLite | 0x8ef70e2 | 8ef70e2 |
| IoCreateSymbolicLink | 0x989ef913 | 989ef913 |
| IoCreateSynchronizationEvent | 0xfe68ebbd | fe68ebbd |
| IoCreateSystemThread | 0xaf02b91c | af02b91c |
| IoCreateUnprotectedSymbolicLink | 0xb9127b6a | b9127b6a |
| IoCsqInitialize | 0x4395582d | 4395582d |
| IoCsqInitializeEx | 0x5560be26 | 5560be26 |
| IoCsqInsertIrp | 0xa4b59fd6 | a4b59fd6 |
| IoCsqInsertIrpEx | 0xd67f63aa | d67f63aa |
| IoCsqRemoveIrp | 0x38ee288d | 38ee288d |
| IoCsqRemoveNextIrp | 0xaf8ec193 | af8ec193 |
| IoDecrementKeepAliveCount | 0xc1444fa1 | c1444fa1 |
| IoDeleteController | 0x8055c9be | 8055c9be |
| IoDeleteDevice | 0xe22e9a17 | e22e9a17 |
| IoDeleteDriver | 0xe2f84e64 | e2f84e64 |
| IoDeleteSymbolicLink | 0x98b23213 | 98b23213 |
| IoDetachDevice | 0xa22f9590 | a22f9590 |
| IoDeviceHandlerObjectSize | 0x67326ef4 | 67326ef4 |
| IoDeviceHandlerObjectType | 0x67332db4 | 67332db4 |
| IoDeviceObjectType | 0xda1b7201 | da1b7201 |
| IoDisconnectInterrupt | 0x830be86d | 830be86d |
| IoDisconnectInterruptEx | 0x2fa1bf24 | 2fa1bf24 |
| IoDriverObjectType | 0xab4f7528 | ab4f7528 |
| IoDuplicateDependency | 0xd24ad48 | d24ad48 |
| IoEnqueueIrp | 0x37c8c456 | 37c8c456 |
| IoEnumerateDeviceObjectList | 0x8bfb542d | 8bfb542d |
| IoEnumerateRegisteredFiltersList | 0x518ae850 | 518ae850 |
| IoFastQueryNetworkAttributes | 0xff380a8e | ff380a8e |
| IoFileObjectType | 0xd50c9c21 | d50c9c21 |
| IoForwardAndCatchIrp | 0xc6aa0790 | c6aa0790 |
| IoForwardIrpSynchronously | 0x70a1f068 | 70a1f068 |
| IoFreeController | 0x3f46f3f3 | 3f46f3f3 |
| IoFreeErrorLogEntry | 0x4f88dd45 | 4f88dd45 |
| IoFreeIrp | 0x6a83ff3a | 6a83ff3a |
| IoFreeMdl | 0x6a840d76 | 6a840d76 |
| IoFreeMiniCompletionPacket | 0x215eaacb | 215eaacb |
| IoFreeSfioStreamIdentifier | 0xa7e13ec5 | a7e13ec5 |
| IoFreeWorkItem | 0xbfab657a | bfab657a |
| IoGetActivityIdIrp | 0x43b21e42 | 43b21e42 |
| IoGetActivityIdThread | 0x2483c25d | 2483c25d |
| IoGetAdapterCryptoEngineExtension | 0x88233022 | 88233022 |
| IoGetAffinityInterrupt | 0xa7f3270 | a7f3270 |
| IoGetAttachedDevice | 0x3c47c191 | 3c47c191 |
| IoGetAttachedDeviceReference | 0x4986c190 | 4986c190 |
| IoGetBaseFileSystemDeviceObject | 0x2eaaf9f7 | 2eaaf9f7 |
| IoGetBootDiskInformation | 0xdfb4e247 | dfb4e247 |
| IoGetBootDiskInformationLite | 0x24a5ae33 | 24a5ae33 |
| IoGetConfigurationInformation | 0xc9cc6cfb | c9cc6cfb |
| IoGetContainerInformation | 0x813f9069 | 813f9069 |
| IoGetCurrentProcess | 0xa8227a16 | a8227a16 |
| IoGetDeviceAttachmentBaseRef | 0x10bb9c5b | 10bb9c5b |
| IoGetDeviceDirectory | 0x2bcd6416 | 2bcd6416 |
| IoGetDeviceInterfaceAlias | 0x99a11cf1 | 99a11cf1 |
| IoGetDeviceInterfacePropertyData | 0x4455491b | 4455491b |
| IoGetDeviceInterfaces | 0x96c5e9c8 | 96c5e9c8 |
| IoGetDeviceNumaNode | 0xdf13d602 | df13d602 |
| IoGetDeviceObjectPointer | 0x26fb99e1 | 26fb99e1 |
| IoGetDeviceProperty | 0x240f6426 | 240f6426 |
| IoGetDevicePropertyData | 0x4285d3d7 | 4285d3d7 |
| IoGetDeviceToVerify | 0x3165be85 | 3165be85 |
| IoGetDiskDeviceObject | 0x61100cfb | 61100cfb |
| IoGetDmaAdapter | 0xb2a2e04d | b2a2e04d |
| IoGetDriverDirectory | 0x6257042f | 6257042f |
| IoGetDriverObjectExtension | 0xe9b0cc3a | e9b0cc3a |
| IoGetFileObjectGenericMapping | 0xbdd47b09 | bdd47b09 |
| IoGetFsTrackOffsetState | 0xed7d9c83 | ed7d9c83 |
| IoGetFsZeroingOffset | 0x7e33d830 | 7e33d830 |
| IoGetGenericIrpExtension | 0x52e7150f | 52e7150f |
| IoGetInitialStack | 0x83fdb2bd | 83fdb2bd |
| IoGetInitiatorProcess | 0xa4c7e9a | a4c7e9a |
| IoGetIoAttributionHandle | 0xdb49cef | db49cef |
| IoGetIoPriorityHint | 0x7bb58a79 | 7bb58a79 |
| IoGetIommuInterface | 0x2bc1c2ed | 2bc1c2ed |
| IoGetIrpExtraCreateParameter | 0x8309bb4b | 8309bb4b |
| IoGetLowerDeviceObject | 0x4ac9fcac | 4ac9fcac |
| IoGetOplockKeyContext | 0x716805f5 | 716805f5 |
| IoGetOplockKeyContextEx | 0xa017dedd | a017dedd |
| IoGetPagingIoPriority | 0xcae6e273 | cae6e273 |
| IoGetRelatedDeviceObject | 0x9f6d4761 | 9f6d4761 |
| IoGetRequestorProcess | 0x1894c46a | 1894c46a |
| IoGetRequestorProcessId | 0x5311b1e6 | 5311b1e6 |
| IoGetRequestorSessionId | 0x734fa07f | 734fa07f |
| IoGetSfioStreamIdentifier | 0x631e7fac | 631e7fac |
| IoGetSilo | 0x916b7e79 | 916b7e79 |
| IoGetSiloParameters | 0x1a7c4d0a | 1a7c4d0a |
| IoGetStackLimits | 0xea257b7a | ea257b7a |
| IoGetSymlinkSupportInformation | 0x49d3acb4 | 49d3acb4 |
| IoGetTopLevelIrp | 0xbde7e97e | bde7e97e |
| IoGetTransactionParameterBlock | 0x66189e30 | 66189e30 |
| IoIncrementKeepAliveCount | 0xc145a1a1 | c145a1a1 |
| IoInitializeIrp | 0xa286b1f6 | a286b1f6 |
| IoInitializeIrpEx | 0x1ac7e3a2 | 1ac7e3a2 |
| IoInitializeMiniCompletionPacket | 0x78e5ab21 | 78e5ab21 |
| IoInitializeRemoveLockEx | 0xb9ae1c32 | b9ae1c32 |
| IoInitializeTimer | 0x1b735b9c | 1b735b9c |
| IoInitializeWorkItem | 0x381b6ae0 | 381b6ae0 |
| IoInvalidateDeviceRelations | 0xa8b4c370 | a8b4c370 |
| IoInvalidateDeviceState | 0xe7ab30d8 | e7ab30d8 |
| IoIrpHasFsTrackOffsetExtensionType | 0x1734ba92 | 1734ba92 |
| IoIs32bitProcess | 0x357a33e1 | 357a33e1 |
| IoIsActivityTracingEnabled | 0xb8ee55b2 | b8ee55b2 |
| IoIsFileObjectIgnoringSharing | 0xe0f8e5f | e0f8e5f |
| IoIsFileOriginRemote | 0xe973208d | e973208d |
| IoIsInitiator32bitProcess | 0x24ef2036 | 24ef2036 |
| IoIsOperationSynchronous | 0x62fddb78 | 62fddb78 |
| IoIsSystemThread | 0x4a2fdc21 | 4a2fdc21 |
| IoIsValidIrpStatus | 0xfeb49131 | feb49131 |
| IoIsValidNameGraftingBuffer | 0xe47e5d99 | e47e5d99 |
| IoIsWdmVersionAvailable | 0x683f07a4 | 683f07a4 |
| IoLoadCrashDumpDriver | 0x98c39409 | 98c39409 |
| IoMakeAssociatedIrp | 0xac0d9ca0 | ac0d9ca0 |
| IoMakeAssociatedIrpEx | 0x36728bc8 | 36728bc8 |
| IoOpenDeviceInterfaceRegistryKey | 0xa74bae80 | a74bae80 |
| IoOpenDeviceRegistryKey | 0xb54d2d00 | b54d2d00 |
| IoOpenDriverRegistryKey | 0xdbcd91da | dbcd91da |
| IoPageRead | 0x1484321d | 1484321d |
| IoPropagateActivityIdToThread | 0x89ccbf8d | 89ccbf8d |
| IoPropagateIrpExtension | 0x11e8ef95 | 11e8ef95 |
| IoPropagateIrpExtensionEx | 0xa3be5d5f | a3be5d5f |
| IoQueryDeviceDescription | 0x16a47860 | 16a47860 |
| IoQueryFileDosDeviceName | 0xdf9b4822 | df9b4822 |
| IoQueryFileInformation | 0xb5144f56 | b5144f56 |
| IoQueryFullDriverPath | 0xac0b3bea | ac0b3bea |
| IoQueryInformationByName | 0xbd9c7282 | bd9c7282 |
| IoQueryInterface | 0x55ae61bc | 55ae61bc |
| IoQueryVolumeInformation | 0xbddbd958 | bddbd958 |
| IoQueueThreadIrp | 0xd4a68e76 | d4a68e76 |
| IoQueueWorkItem | 0xf6f97804 | f6f97804 |
| IoQueueWorkItemEx | 0xe5e01cf3 | e5e01cf3 |
| IoQueueWorkItemToNode | 0xecd726e6 | ecd726e6 |
| IoRaiseHardError | 0x92e625e1 | 92e625e1 |
| IoRaiseInformationalHardError | 0xcc836939 | cc836939 |
| IoReadDiskSignature | 0x4adada15 | 4adada15 |
| IoReadOperationCount | 0x1b661b64 | 1b661b64 |
| IoReadPartitionTable | 0x32f7cf16 | 32f7cf16 |
| IoReadPartitionTableEx | 0xdf3c61e3 | df3c61e3 |
| IoReadTransferCount | 0xd530d98c | d530d98c |
| IoRecordIoAttribution | 0xa925440e | a925440e |
| IoRegisterBootDriverCallback | 0x6e5d8e46 | 6e5d8e46 |
| IoRegisterBootDriverReinitialization | 0xbba72b31 | bba72b31 |
| IoRegisterContainerNotification | 0x45d87f7d | 45d87f7d |
| IoRegisterDeviceInterface | 0xee36fcb | ee36fcb |
| IoRegisterDriverReinitialization | 0xf16d756d | f16d756d |
| IoRegisterFileSystem | 0xa8c4dcda | a8c4dcda |
| IoRegisterFsRegistrationChange | 0xab3c70ec | ab3c70ec |
| IoRegisterFsRegistrationChangeMountAware | 0x3009d25b | 3009d25b |
| IoRegisterIoTracking | 0x3611738 | 3611738 |
| IoRegisterLastChanceShutdownNotification | 0xbef5a85d | bef5a85d |
| IoRegisterPlugPlayNotification | 0xd16f264d | d16f264d |
| IoRegisterPriorityCallback | 0x38643e2a | 38643e2a |
| IoRegisterShutdownNotification | 0x917cc73a | 917cc73a |
| IoReleaseCancelSpinLock | 0x5eb8aca0 | 5eb8aca0 |
| IoReleaseRemoveLockAndWaitEx | 0x2aeac39b | 2aeac39b |
| IoReleaseRemoveLockEx | 0x2ed48dd7 | 2ed48dd7 |
| IoReleaseVpbSpinLock | 0x8396a7af | 8396a7af |
| IoRemoveLinkShareAccess | 0x21a8e6aa | 21a8e6aa |
| IoRemoveShareAccess | 0x8e71cba3 | 8e71cba3 |
| IoReplaceFileObjectName | 0x22fe2c96 | 22fe2c96 |
| IoReplacePartitionUnit | 0xf9d2ecf8 | f9d2ecf8 |
| IoReportDetectedDevice | 0xbca0ceaf | bca0ceaf |
| IoReportHalResourceUsage | 0xb1002d95 | b1002d95 |
| IoReportInterruptActive | 0x4b2b423a | 4b2b423a |
| IoReportInterruptInactive | 0x46a80894 | 46a80894 |
| IoReportResourceForDetection | 0x90a5d091 | 90a5d091 |
| IoReportResourceUsage | 0xb8f90424 | b8f90424 |
| IoReportRootDevice | 0xc2f90d81 | c2f90d81 |
| IoReportTargetDeviceChange | 0x9ce4433c | 9ce4433c |
| IoReportTargetDeviceChangeAsynchronous | 0xd752a079 | d752a079 |
| IoRequestDeviceEject | 0x404c606d | 404c606d |
| IoRequestDeviceEjectEx | 0x3181be19 | 3181be19 |
| IoRequestDeviceRemovalForReset | 0xb11debc8 | b11debc8 |
| IoReserveDependency | 0xb1467305 | b1467305 |
| IoResolveDependency | 0x51467319 | 51467319 |
| IoRetrievePriorityInfo | 0x4c81d327 | 4c81d327 |
| IoReuseIrp | 0x316d445a | 316d445a |
| IoSetActivityIdIrp | 0x43b27e42 | 43b27e42 |
| IoSetActivityIdThread | 0x5483c25d | 5483c25d |
| IoSetAdapterCryptoEngineExtension | 0x8b233022 | 8b233022 |
| IoSetCompletionRoutineEx | 0xc1c7bb0a | c1c7bb0a |
| IoSetDependency | 0x86cd4096 | 86cd4096 |
| IoSetDeviceInterfacePropertyData | 0x446d491b | 446d491b |
| IoSetDeviceInterfaceState | 0x9ac7ff43 | 9ac7ff43 |
| IoSetDevicePropertyData | 0x4285d497 | 4285d497 |
| IoSetDeviceToVerify | 0x3171be85 | 3171be85 |
| IoSetFileObjectIgnoreSharing | 0xecf0c84b | ecf0c84b |
| IoSetFileOrigin | 0x49af692b | 49af692b |
| IoSetFsTrackOffsetState | 0xed7d9d43 | ed7d9d43 |
| IoSetFsZeroingOffset | 0x7fb3d830 | 7fb3d830 |
| IoSetFsZeroingOffsetRequired | 0xdd5e882d | dd5e882d |
| IoSetGenericIrpExtension | 0x52e72d0f | 52e72d0f |
| IoSetHardErrorOrVerifyDevice | 0x697e1d3 | 697e1d3 |
| IoSetInformation | 0xeb80404f | eb80404f |
| IoSetIoAttributionIrp | 0x2e142188 | 2e142188 |
| IoSetIoCompletion | 0x451d1264 | 451d1264 |
| IoSetIoCompletionEx | 0x74499a2c | 74499a2c |
| IoSetIoPriorityHint | 0x7bc18a79 | 7bc18a79 |
| IoSetIoPriorityHintIntoFileObject | 0xf07e6c45 | f07e6c45 |
| IoSetIoPriorityHintIntoThread | 0x98aa2146 | 98aa2146 |
| IoSetIrpExtraCreateParameter | 0x309bb4d | 309bb4d |
| IoSetLinkShareAccess | 0x26053b7c | 26053b7c |
| IoSetMasterIrpStatus | 0x5fdd9fef | 5fdd9fef |
| IoSetPartitionInformation | 0x67c2d326 | 67c2d326 |
| IoSetPartitionInformationEx | 0xb4ca2b7 | b4ca2b7 |
| IoSetShareAccess | 0x53beebe9 | 53beebe9 |
| IoSetShareAccessEx | 0xfbafae66 | fbafae66 |
| IoSetStartIoAttributes | 0xe1784716 | e1784716 |
| IoSetSystemPartition | 0x21365b53 | 21365b53 |
| IoSetThreadHardErrorMode | 0x7776bf2a | 7776bf2a |
| IoSetTopLevelIrp | 0xbde7e996 | bde7e996 |
| IoSizeOfIrpEx | 0x59a46659 | 59a46659 |
| IoSizeofGenericIrpExtension | 0x86ea12da | 86ea12da |
| IoSizeofWorkItem | 0x797b0a4e | 797b0a4e |
| IoStartNextPacket | 0xf169ef9f | f169ef9f |
| IoStartNextPacketByKey | 0x44408cf8 | 44408cf8 |
| IoStartPacket | 0x6f1e1dc6 | 6f1e1dc6 |
| IoStartTimer | 0x93bd1837 | 93bd1837 |
| IoStatisticsLock | 0x7fb7c3f3 | 7fb7c3f3 |
| IoSteerInterrupt | 0x457fd36f | 457fd36f |
| IoStopTimer | 0xa6a877ce | a6a877ce |
| IoSynchronousCallDriver | 0x89f99f | 89f99f |
| IoSynchronousPageWrite | 0x1b345c88 | 1b345c88 |
| IoTestDependency | 0xadcf91e1 | adcf91e1 |
| IoThreadToProcess | 0x3f808837 | 3f808837 |
| IoTransferActivityId | 0xe1198d2 | e1198d2 |
| IoTranslateBusAddress | 0x38bbede3 | 38bbede3 |
| IoTryQueueWorkItem | 0x8b2259 | 8b2259 |
| IoUninitializeWorkItem | 0x381c03d6 | 381c03d6 |
| IoUnregisterBootDriverCallback | 0x6ef68446 | 6ef68446 |
| IoUnregisterContainerNotification | 0xc0d87fc9 | c0d87fc9 |
| IoUnregisterFileSystem | 0xa8c575d0 | a8c575d0 |
| IoUnregisterFsRegistrationChange | 0xf1470ef | f1470ef |
| IoUnregisterIoTracking | 0x361b02e | 361b02e |
| IoUnregisterPlugPlayNotification | 0x35472650 | 35472650 |
| IoUnregisterPlugPlayNotificationEx | 0x1c9949ed | 1c9949ed |
| IoUnregisterPriorityCallback | 0xb8646467 | b8646467 |
| IoUnregisterShutdownNotification | 0xf554c73c | f554c73c |
| IoUpdateLinkShareAccess | 0x7be6e6df | 7be6e6df |
| IoUpdateShareAccess | 0x6e752147 | 6e752147 |
| IoValidateDeviceIoControlAccess | 0xf179b43a | f179b43a |
| IoVerifyPartitionTable | 0x8efc954c | 8efc954c |
| IoVerifyVolume | 0xfca8eed | fca8eed |
| IoVolumeDeviceNameToGuid | 0x969f3360 | 969f3360 |
| IoVolumeDeviceNameToGuidPath | 0x3632fcdb | 3632fcdb |
| IoVolumeDeviceToDosName | 0xba94e6f9 | ba94e6f9 |
| IoVolumeDeviceToGuid | 0xa9eb0bfc | a9eb0bfc |
| IoVolumeDeviceToGuidPath | 0xbff43198 | bff43198 |
| IoWMIAllocateInstanceIds | 0x2a69ec2b | 2a69ec2b |
| IoWMIDeviceObjectToInstanceName | 0x745642fe | 745642fe |
| IoWMIDeviceObjectToProviderId | 0xcdbf2cd0 | cdbf2cd0 |
| IoWMIExecuteMethod | 0x77be52d4 | 77be52d4 |
| IoWMIHandleToInstanceName | 0x417541ce | 417541ce |
| IoWMIOpenBlock | 0x3d153bfe | 3d153bfe |
| IoWMIQueryAllData | 0xd9913718 | d9913718 |
| IoWMIQueryAllDataMultiple | 0xb0ad6944 | b0ad6944 |
| IoWMIQuerySingleInstance | 0xb894e0c | b894e0c |
| IoWMIQuerySingleInstanceMultiple | 0xa8c45c76 | a8c45c76 |
| IoWMIRegistrationControl | 0xcee84172 | cee84172 |
| IoWMISetNotificationCallback | 0x64eee3b8 | 64eee3b8 |
| IoWMISetSingleInstance | 0xf3930af2 | f3930af2 |
| IoWMISetSingleItem | 0xc62f56f | c62f56f |
| IoWMISuggestInstanceName | 0x902e2e4c | 902e2e4c |
| IoWMIWriteEvent | 0x663c0abd | 663c0abd |
| IoWithinStackLimits | 0x595d7cfe | 595d7cfe |
| IoWriteErrorLogEntry | 0x64b4992a | 64b4992a |
| IoWriteOperationCount | 0xbf6ab846 | bf6ab846 |
| IoWritePartitionTable | 0xd6fc6bf8 | d6fc6bf8 |
| IoWritePartitionTableEx | 0xf1afec73 | f1afec73 |
| IoWriteTransferCount | 0xea50fe73 | ea50fe73 |
| IofCallDriver | 0x58772992 | 58772992 |
| IofCompleteRequest | 0x649b7bb6 | 649b7bb6 |
| KdAcquireDebuggerLock | 0x15bd492b | 15bd492b |
| KdChangeOption | 0x4868443c | 4868443c |
| KdDebuggerEnabled | 0x7eba3776 | 7eba3776 |
| KdDebuggerNotPresent | 0xa7c58324 | a7c58324 |
| KdDeregisterPowerHandler | 0xb69d4a10 | b69d4a10 |
| KdDisableDebugger | 0x6de94225 | 6de94225 |
| KdEnableDebugger | 0x1d9d81dd | 1d9d81dd |
| KdEnteredDebugger | 0x8028616f | 8028616f |
| KdEventLoggingEnabled | 0x6a94e0d0 | 6a94e0d0 |
| KdGetDebugDevice | 0xd9ac281b | d9ac281b |
| KdLogDbgPrint | 0x3678fb72 | 3678fb72 |
| KdPollBreakIn | 0x4dd08504 | 4dd08504 |
| KdPowerTransition | 0x116cdc58 | 116cdc58 |
| KdPowerTransitionEx | 0xb371695d | b371695d |
| KdRefreshDebuggerNotPresent | 0x8d07eec1 | 8d07eec1 |
| KdRegisterPowerHandler | 0xb42c57f0 | b42c57f0 |
| KdReleaseDebuggerLock | 0x59f7c72d | 59f7c72d |
| KdSetEventLoggingPresent | 0x354eedab | 354eedab |
| KdSystemDebugControl | 0xb399448d | b399448d |
| KeAcquireGuardedMutex | 0x1341ba60 | 1341ba60 |
| KeAcquireGuardedMutexUnsafe | 0xb5eb7fbd | b5eb7fbd |
| KeAcquireInStackQueuedSpinLock | 0x514ec3cc | 514ec3cc |
| KeAcquireInStackQueuedSpinLockAtDpcLevel | 0xda2e4083 | da2e4083 |
| KeAcquireInStackQueuedSpinLockForDpc | 0xa77dcf56 | a77dcf56 |
| KeAcquireInStackQueuedSpinLockRaiseToSynch | 0xd314c742 | d314c742 |
| KeAcquireInterruptSpinLock | 0x4ff876e1 | 4ff876e1 |
| KeAcquireQueuedSpinLock | 0xb08907ac | b08907ac |
| KeAcquireQueuedSpinLockRaiseToSynch | 0xd9086b80 | d9086b80 |
| KeAcquireSpinLockAtDpcLevel | 0x7131916b | 7131916b |
| KeAcquireSpinLockForDpc | 0xdc8c48c6 | dc8c48c6 |
| KeAcquireSpinLockRaiseToDpc | 0x35b7d8eb | 35b7d8eb |
| KeAcquireSpinLockRaiseToSynch | 0xe058659e | e058659e |
| KeAddGroupAffinityEx | 0x6b9ba935 | 6b9ba935 |
| KeAddProcessorAffinityEx | 0xdd407103 | dd407103 |
| KeAddProcessorGroupAffinity | 0xfae42255 | fae42255 |
| KeAddSystemServiceTable | 0x2585135b | 2585135b |
| KeAddTriageDumpDataBlock | 0xa3b7faf2 | a3b7faf2 |
| KeAlertThread | 0x924c8936 | 924c8936 |
| KeAllocateCalloutStack | 0xde704e01 | de704e01 |
| KeAllocateCalloutStackEx | 0xc1381091 | c1381091 |
| KeAndAffinityEx | 0x6b6489f1 | 6b6489f1 |
| KeAndGroupAffinityEx | 0x6ba5a935 | 6ba5a935 |
| KeAreAllApcsDisabled | 0x2b24cb85 | 2b24cb85 |
| KeAreApcsDisabled | 0x9eddcb69 | 9eddcb69 |
| KeAttachProcess | 0x36ffbcb6 | 36ffbcb6 |
| KeBugCheck | 0x126f67f9 | 126f67f9 |
| KeBugCheckEx | 0xbd9fed61 | bd9fed61 |
| KeCancelTimer | 0x10ed249 | 10ed249 |
| KeCancelTimer2 | 0x21da4952 | 21da4952 |
| KeCapturePersistentThreadState | 0xf7f7803d | f7f7803d |
| KeCheckProcessorAffinityEx | 0x22017901 | 22017901 |
| KeCheckProcessorGroupAffinity | 0x7ee2c4b6 | 7ee2c4b6 |
| KeClearEvent | 0x4fa97175 | 4fa97175 |
| KeClockInterruptNotify | 0x55c9716d | 55c9716d |
| KeClockTimerPowerChange | 0x5fe1e912 | 5fe1e912 |
| KeComplementAffinityEx | 0xf5b88cf6 | f5b88cf6 |
| KeConnectInterruptForHal | 0xcef96575 | cef96575 |
| KeConvertAuxiliaryCounterToPerformanceCounter | 0xa69791d2 | a69791d2 |
| KeConvertPerformanceCounterToAuxiliaryCounter | 0x4b24f9a8 | 4b24f9a8 |
| KeCopyAffinityEx | 0x4cbae830 | 4cbae830 |
| KeCountSetBitsAffinityEx | 0x37e8891a | 37e8891a |
| KeCountSetBitsGroupAffinity | 0x6ef4faa | 6ef4faa |
| KeDelayExecutionThread | 0x540303c2 | 540303c2 |
| KeDeregisterBoundCallback | 0xf0254278 | f0254278 |
| KeDeregisterBugCheckCallback | 0xca51c7f6 | ca51c7f6 |
| KeDeregisterBugCheckReasonCallback | 0x4c24aee5 | 4c24aee5 |
| KeDeregisterNmiCallback | 0xfe56901e | fe56901e |
| KeDeregisterProcessorChangeCallback | 0x2205376e | 2205376e |
| KeDetachProcess | 0x5f7fbcb6 | 5f7fbcb6 |
| KeDispatchSecondaryInterrupt | 0x5b2f7434 | 5b2f7434 |
| KeDynamicPartitioningSupported | 0x797c4e12 | 797c4e12 |
| KeEnterCriticalRegion | 0xa31a0262 | a31a0262 |
| KeEnterGuardedRegion | 0x73a993df | 73a993df |
| KeEnterKernelDebugger | 0x3881814c | 3881814c |
| KeEnumerateNextProcessor | 0xe48124e9 | e48124e9 |
| KeExpandKernelStackAndCallout | 0x957e027b | 957e027b |
| KeExpandKernelStackAndCalloutEx | 0xf809f76d | f809f76d |
| KeFindConfigurationEntry | 0xe821d33e | e821d33e |
| KeFindConfigurationNextEntry | 0x34e7698f | 34e7698f |
| KeFindFirstSetLeftAffinityEx | 0xaf0475e9 | af0475e9 |
| KeFindFirstSetLeftGroupAffinity | 0xfd570b37 | fd570b37 |
| KeFindFirstSetRightAffinityEx | 0xb4a468bc | b4a468bc |
| KeFindFirstSetRightGroupAffinity | 0xf6c08e07 | f6c08e07 |
| KeFirstGroupAffinityEx | 0x1cbc583 | 1cbc583 |
| KeFlushCurrentTbImmediately | 0x96b12484 | 96b12484 |
| KeFlushEntireTb | 0x6ad7cb5 | 6ad7cb5 |
| KeFlushIoBuffers | 0x6cf0610f | 6cf0610f |
| KeFlushQueuedDpcs | 0x9bdc9f78 | 9bdc9f78 |
| KeForceEnableNx | 0xe1ac790a | e1ac790a |
| KeFreeCalloutStack | 0xaa44cdb1 | aa44cdb1 |
| KeGenericCallDpc | 0x119c3c61 | 119c3c61 |
| KeGetClockOwner | 0x3f862832 | 3f862832 |
| KeGetClockTimerResolution | 0x305f5a3f | 305f5a3f |
| KeGetCurrentIrql | 0xae83de0a | ae83de0a |
| KeGetCurrentNodeNumber | 0x8f29a92b | 8f29a92b |
| KeGetCurrentProcessorNumberEx | 0x8bd6130 | 8bd6130 |
| KeGetCurrentThread | 0x24d89b3e | 24d89b3e |
| KeGetEffectiveIrql | 0xc0e2af73 | c0e2af73 |
| KeGetNextClockTickDuration | 0x3c152937 | 3c152937 |
| KeGetProcessorIndexFromNumber | 0xc96635d5 | c96635d5 |
| KeGetProcessorNumberFromIndex | 0x12e01343 | 12e01343 |
| KeGetRecommendedSharedDataAlignment | 0x36c93b73 | 36c93b73 |
| KeGetXSaveFeatureFlags | 0xe61376bf | e61376bf |
| KeHwPolicyLocateResource | 0x1c9d4ae8 | 1c9d4ae8 |
| KeInitializeAffinityEx | 0x370073f8 | 370073f8 |
| KeInitializeApc | 0xa2869215 | a2869215 |
| KeInitializeCrashDumpHeader | 0xbd37f3c | bd37f3c |
| KeInitializeDeviceQueue | 0x15e8ef09 | 15e8ef09 |
| KeInitializeDpc | 0xa2869e15 | a2869e15 |
| KeInitializeEnumerationContext | 0x2c888f1b | 2c888f1b |
| KeInitializeEnumerationContextFromAffinity | 0x2a678b0d | 2a678b0d |
| KeInitializeEnumerationContextFromGroup | 0xb08e7a4d | b08e7a4d |
| KeInitializeEvent | 0x1a8b6cbe | 1a8b6cbe |
| KeInitializeGuardedMutex | 0xe26346a2 | e26346a2 |
| KeInitializeInterrupt | 0x79fc8eee | 79fc8eee |
| KeInitializeMutant | 0x6164e377 | 6164e377 |
| KeInitializeMutex | 0x1b0b27a2 | 1b0b27a2 |
| KeInitializeQueue | 0x1b4aed8f | 1b4aed8f |
| KeInitializeSecondaryInterruptServices | 0xa3aed43f | a3aed43f |
| KeInitializeSemaphore | 0xb1d780d5 | b1d780d5 |
| KeInitializeSpinLock | 0x3e4cd67f | 3e4cd67f |
| KeInitializeThreadedDpc | 0x95604646 | 95604646 |
| KeInitializeTimer | 0x1b750b9c | 1b750b9c |
| KeInitializeTimer2 | 0x6ea173b5 | 6ea173b5 |
| KeInitializeTimerEx | 0xd42e7985 | d42e7985 |
| KeInitializeTriageDumpDataArray | 0x20ebe0d4 | 20ebe0d4 |
| KeInsertByKeyDeviceQueue | 0x4211445e | 4211445e |
| KeInsertDeviceQueue | 0x2355c9f9 | 2355c9f9 |
| KeInsertHeadQueue | 0x71f12969 | 71f12969 |
| KeInsertQueue | 0x50fe594f | 50fe594f |
| KeInsertQueueApc | 0x2ca8bae2 | 2ca8bae2 |
| KeInsertQueueDpc | 0x2ca8c6e2 | 2ca8c6e2 |
| KeInterlockedClearProcessorAffinityEx | 0x2b454e4b | 2b454e4b |
| KeInterlockedSetProcessorAffinityEx | 0x36e2e5d1 | 36e2e5d1 |
| KeInvalidateAllCaches | 0xb0d93a4a | b0d93a4a |
| KeInvalidateRangeAllCaches | 0x4d353dca | 4d353dca |
| KeInvalidateRangeAllCachesNoIpi | 0x99b31ce4 | 99b31ce4 |
| KeIpiGenericCall | 0x8dfe950a | 8dfe950a |
| KeIsAttachedProcess | 0x96293438 | 96293438 |
| KeIsEmptyAffinityEx | 0x97a52085 | 97a52085 |
| KeIsEqualAffinityEx | 0xddf1208d | ddf1208d |
| KeIsExecutingDpc | 0x2d841702 | 2d841702 |
| KeIsSingleGroupAffinityEx | 0xe29edc74 | e29edc74 |
| KeIsSubsetAffinityEx | 0xa4ba2c95 | a4ba2c95 |
| KeIsWaitListEmpty | 0x4f09598a | 4f09598a |
| KeLastBranchMSR | 0x14c017ea | 14c017ea |
| KeLeaveCriticalRegion | 0xbde78722 | bde78722 |
| KeLeaveGuardedRegion | 0x74800005 | 74800005 |
| KeLoadMTRR | 0x8871a20e | 8871a20e |
| KeLoaderBlock | 0xc160d0a | c160d0a |
| KeLowerIrql | 0x927f4622 | 927f4622 |
| KeNotifyProcessorFreezeSupported | 0x73f3064b | 73f3064b |
| KeNumberProcessors | 0xef854e64 | ef854e64 |
| KeOrAffinityEx | 0x9c1c76ff | 9c1c76ff |
| KePrepareToDispatchVirtualProcessor | 0xcaa9ef | caa9ef |
| KeProcessorGroupAffinity | 0x191c611d | 191c611d |
| KeProfileInterruptWithSource | 0x5ed166fd | 5ed166fd |
| KePulseEvent | 0xb5ab1ab1 | b5ab1ab1 |
| KeQueryActiveGroupCount | 0x13d568c5 | 13d568c5 |
| KeQueryActiveProcessorAffinity | 0x598c3b7f | 598c3b7f |
| KeQueryActiveProcessorCount | 0x11316fbb | 11316fbb |
| KeQueryActiveProcessorCountEx | 0xc5bef55c | c5bef55c |
| KeQueryActiveProcessors | 0x80d8713f | 80d8713f |
| KeQueryAuxiliaryCounterFrequency | 0x2e926084 | 2e926084 |
| KeQueryDpcWatchdogInformation | 0x7648c1b8 | 7648c1b8 |
| KeQueryEffectivePriorityThread | 0x7668a41f | 7668a41f |
| KeQueryGroupAffinity | 0x1c2c0ab9 | 1c2c0ab9 |
| KeQueryGroupAffinityEx | 0xb02aed88 | b02aed88 |
| KeQueryHardwareCounterConfiguration | 0x48a0b1c7 | 48a0b1c7 |
| KeQueryHeteroCpuPolicyThread | 0x5ddfb435 | 5ddfb435 |
| KeQueryHighestNodeNumber | 0xc8bf9366 | c8bf9366 |
| KeQueryInterruptTimePrecise | 0x618b9d62 | 618b9d62 |
| KeQueryLogicalProcessorRelationship | 0x46e3d5e9 | 46e3d5e9 |
| KeQueryMaximumGroupCount | 0x8a88c827 | 8a88c827 |
| KeQueryMaximumProcessorCount | 0x758daf1 | 758daf1 |
| KeQueryMaximumProcessorCountEx | 0x636bcd35 | 636bcd35 |
| KeQueryNodeActiveAffinity | 0xfaeb446e | faeb446e |
| KeQueryNodeMaximumProcessorCount | 0x528e902c | 528e902c |
| KeQueryPrcbAddress | 0x7610ef05 | 7610ef05 |
| KeQueryPriorityThread | 0x180e010e | 180e010e |
| KeQueryRuntimeThread | 0x6999d2a4 | 6999d2a4 |
| KeQuerySystemTimePrecise | 0xcc499234 | cc499234 |
| KeQueryTimeIncrement | 0x3f61545c | 3f61545c |
| KeQueryTotalCycleTimeThread | 0x16002bb3 | 16002bb3 |
| KeQueryUnbiasedInterruptTime | 0x1e131867 | 1e131867 |
| KeQueryUnbiasedInterruptTimePrecise | 0xdb1bf612 | db1bf612 |
| KeRaiseIrqlToDpcLevel | 0xf9bc0d05 | f9bc0d05 |
| KeRaiseUserException | 0x3b02a0de | 3b02a0de |
| KeReadStateEvent | 0x50a9eb44 | 50a9eb44 |
| KeReadStateMutant | 0x2534b43e | 2534b43e |
| KeReadStateMutex | 0x5129a628 | 5129a628 |
| KeReadStateQueue | 0x51696c15 | 51696c15 |
| KeReadStateSemaphore | 0x9a3ae2bd | 9a3ae2bd |
| KeReadStateTimer | 0x51938a22 | 51938a22 |
| KeReenterRetpolinedCode | 0xfe7c6cc7 | fe7c6cc7 |
| KeRegisterBoundCallback | 0xa1ff0078 | a1ff0078 |
| KeRegisterBugCheckCallback | 0xa951a0e3 | a951a0e3 |
| KeRegisterBugCheckReasonCallback | 0x83e4a520 | 83e4a520 |
| KeRegisterNmiCallback | 0x7e43068e | 7e43068e |
| KeRegisterProcessorChangeCallback | 0x1a03fed5 | 1a03fed5 |
| KeReleaseGuardedMutex | 0x577c3862 | 577c3862 |
| KeReleaseGuardedMutexUnsafe | 0x46fa1f3e | 46fa1f3e |
| KeReleaseInStackQueuedSpinLock | 0xa10f0c53 | a10f0c53 |
| KeReleaseInStackQueuedSpinLockForDpc | 0x7b6de178 | 7b6de178 |
| KeReleaseInStackQueuedSpinLockFromDpcLevel | 0x29dba50e | 29dba50e |
| KeReleaseInterruptSpinLock | 0x5480ebdd | 5480ebdd |
| KeReleaseMutant | 0x35c8aa75 | 35c8aa75 |
| KeReleaseMutex | 0x9ae45da | 9ae45da |
| KeReleaseQueuedSpinLock | 0x9a8110bd | 9a8110bd |
| KeReleaseSemaphore | 0x95566b07 | 95566b07 |
| KeReleaseSpinLock | 0xcd68cdd0 | cd68cdd0 |
| KeReleaseSpinLockForDpc | 0xc68451d7 | c68451d7 |
| KeReleaseSpinLockFromDpcLevel | 0xfca14125 | fca14125 |
| KeRemoveByKeyDeviceQueue | 0x6a8255cb | 6a8255cb |
| KeRemoveByKeyDeviceQueueIfBusy | 0x7323784c | 7323784c |
| KeRemoveDeviceQueue | 0x5bde808d | 5bde808d |
| KeRemoveEntryDeviceQueue | 0x3a826b5e | 3a826b5e |
| KeRemoveGroupAffinityEx | 0x91814062 | 91814062 |
| KeRemoveProcessorAffinityEx | 0x5012cf5d | 5012cf5d |
| KeRemoveProcessorGroupAffinity | 0x2a10dbbf | 2a10dbbf |
| KeRemoveQueue | 0x332133a0 | 332133a0 |
| KeRemoveQueueDpc | 0x99d137f3 | 99d137f3 |
| KeRemoveQueueDpcEx | 0x44dfd77f | 44dfd77f |
| KeRemoveQueueEx | 0x84ce89e4 | 84ce89e4 |
| KeRemoveSystemServiceTable | 0xf11ba64d | f11ba64d |
| KeReportCacheIncoherentDevice | 0xe1310dd6 | e1310dd6 |
| KeResetEvent | 0x53ab4ae6 | 53ab4ae6 |
| KeRestoreExtendedProcessorState | 0xaae51157 | aae51157 |
| KeRestoreFloatingPointState | 0xc88746db | c88746db |
| KeRevertToUserAffinityThread | 0xf34d64d5 | f34d64d5 |
| KeRevertToUserAffinityThreadEx | 0x359360e5 | 359360e5 |
| KeRevertToUserGroupAffinityThread | 0xc2ff52fa | c2ff52fa |
| KeRundownQueue | 0x1c2e4b38 | 1c2e4b38 |
| KeSaveExtendedProcessorState | 0x6975e41b | 6975e41b |
| KeSaveFloatingPointState | 0xd5b382c4 | d5b382c4 |
| KeSaveStateForHibernate | 0x2b2d66d7 | 2b2d66d7 |
| KeSetActualBasePriorityThread | 0x93d09285 | 93d09285 |
| KeSetAffinityThread | 0xbc6312cc | bc6312cc |
| KeSetBasePriorityThread | 0x9dbd8e8e | 9dbd8e8e |
| KeSetCoalescableTimer | 0x9ce53eaa | 9ce53eaa |
| KeSetDmaIoCoherency | 0xbfcb0fc | bfcb0fc |
| KeSetEvent | 0x2c9669e6 | 2c9669e6 |
| KeSetEventBoostPriority | 0xba25d67 | ba25d67 |
| KeSetHardwareCounterConfiguration | 0xc4052920 | c4052920 |
| KeSetHeteroCpuPolicyThread | 0x8d4c4320 | 8d4c4320 |
| KeSetIdealProcessorThread | 0xbd1f7d6a | bd1f7d6a |
| KeSetImportanceDpc | 0xf479a648 | f479a648 |
| KeSetKernelStackSwapEnable | 0xf22392a5 | f22392a5 |
| KeSetLastBranchRecordInUse | 0xd4953f78 | d4953f78 |
| KeSetPriorityThread | 0x7dfb92eb | 7dfb92eb |
| KeSetProfileIrql | 0xa9c77ac3 | a9c77ac3 |
| KeSetSelectedCpuSetsThread | 0xdd5250bb | dd5250bb |
| KeSetSystemAffinityThread | 0x4481a277 | 4481a277 |
| KeSetSystemAffinityThreadEx | 0x689e62a | 689e62a |
| KeSetSystemGroupAffinityThread | 0x5a1bb76 | 5a1bb76 |
| KeSetTargetProcessorDpc | 0x71f89e9e | 71f89e9e |
| KeSetTargetProcessorDpcEx | 0xe27a82df | e27a82df |
| KeSetTimer | 0x2d8008c4 | 2d8008c4 |
| KeSetTimer2 | 0xb00118b7 | b00118b7 |
| KeSetTimerEx | 0x2319ce | 2319ce |
| KeShouldYieldProcessor | 0x7f214432 | 7f214432 |
| KeSignalCallDpcDone | 0x6662bc3a | 6662bc3a |
| KeSignalCallDpcSynchronize | 0x1e7bd583 | 1e7bd583 |
| KeStackAttachProcess | 0x55d6cae9 | 55d6cae9 |
| KeStallWhileFrozen | 0xd48a9750 | d48a9750 |
| KeStartDynamicProcessor | 0x6785dc8c | 6785dc8c |
| KeSubtractAffinityEx | 0x84fca474 | 84fca474 |
| KeSweepLocalCaches | 0x1f4929c7 | 1f4929c7 |
| KeSynchronizeExecution | 0x96279508 | 96279508 |
| KeSynchronizeTimeToQpc | 0x9814c3a7 | 9814c3a7 |
| KeSystemFullyCacheCoherent | 0xfd93b2dc | fd93b2dc |
| KeTestAlertThread | 0x1a1ac703 | 1a1ac703 |
| KeTestSpinLock | 0x54aaa01c | 54aaa01c |
| KeTryToAcquireGuardedMutex | 0xdaff2cfe | daff2cfe |
| KeTryToAcquireQueuedSpinLock | 0xa65382cb | a65382cb |
| KeTryToAcquireQueuedSpinLockRaiseToSynch | 0xc8651332 | c8651332 |
| KeTryToAcquireSpinLockAtDpcLevel | 0x2320ee13 | 2320ee13 |
| KeUnstackDetachProcess | 0xa657673e | a657673e |
| KeUpdateThreadTag | 0xc2ee920a | c2ee920a |
| KeUserModeCallback | 0x71033d8d | 71033d8d |
| KeWaitForMultipleObjects | 0xe22b22a6 | e22b22a6 |
| KeWaitForMutexObject | 0xedde1dd4 | edde1dd4 |
| KeWaitForSingleObject | 0x18158297 | 18158297 |
| KeWriteProtectPAT | 0x9c57fcb4 | 9c57fcb4 |
| KfRaiseIrql | 0x2daf6baf | 2daf6baf |
| KiBugCheckData | 0xbfb4b9d7 | bfb4b9d7 |
| KiCheckForKernelApcDelivery | 0xd6c75b63 | d6c75b63 |
| KitLogFeatureUsage | 0xedf85cee | edf85cee |
| KseQueryDeviceData | 0xa136b8dc | a136b8dc |
| KseQueryDeviceDataList | 0x8df1c63f | 8df1c63f |
| KseQueryDeviceFlags | 0x26fc50c7 | 26fc50c7 |
| KseRegisterShim | 0x4bec8def | 4bec8def |
| KseRegisterShimEx | 0xb237c647 | b237c647 |
| KseSetDeviceFlags | 0x1a035ca1 | 1a035ca1 |
| KseUnregisterShim | 0xec3b2c33 | ec3b2c33 |
| LdrAccessResource | 0x909e6777 | 909e6777 |
| LdrEnumResources | 0x2e6f0841 | 2e6f0841 |
| LdrFindResourceDirectory_U | 0x4f8174be | 4f8174be |
| LdrFindResourceEx_U | 0xf40b8a1d | f40b8a1d |
| LdrFindResource_U | 0x7a3d05fc | 7a3d05fc |
| LdrResFindResource | 0x8bc620c0 | 8bc620c0 |
| LdrResFindResourceDirectory | 0x14842397 | 14842397 |
| LdrResSearchResource | 0x4e166503 | 4e166503 |
| LpcPortObjectType | 0x3895d136 | 3895d136 |
| LpcReplyWaitReplyPort | 0x189540ea | 189540ea |
| LpcRequestPort | 0x603ee015 | 603ee015 |
| LpcRequestWaitReplyPort | 0x2498cc01 | 2498cc01 |
| LpcRequestWaitReplyPortEx | 0x63300daa | 63300daa |
| LpcSendWaitReceivePort | 0xd6e0a6b2 | d6e0a6b2 |
| LsaCallAuthenticationPackage | 0xee5135c6 | ee5135c6 |
| LsaDeregisterLogonProcess | 0x23e9f9b4 | 23e9f9b4 |
| LsaFreeReturnBuffer | 0xc4eaeb0f | c4eaeb0f |
| LsaLogonUser | 0xcce4c8a4 | cce4c8a4 |
| LsaLookupAuthenticationPackage | 0xdb42b7ac | db42b7ac |
| LsaRegisterLogonProcess | 0xd44d1763 | d44d1763 |
| Mm64BitPhysicalAddress | 0xb258bd07 | b258bd07 |
| MmAddPhysicalMemory | 0xa0c60a84 | a0c60a84 |
| MmAddVerifierSpecialThunks | 0x7d0841be | 7d0841be |
| MmAddVerifierThunks | 0xfb51abcb | fb51abcb |
| MmAdjustWorkingSetSize | 0xd9de1b99 | d9de1b99 |
| MmAdvanceMdl | 0x4aa048b5 | 4aa048b5 |
| MmAllocateContiguousMemory | 0xf8be714e | f8be714e |
| MmAllocateContiguousMemorySpecifyCache | 0x913b06dc | 913b06dc |
| MmAllocateContiguousMemorySpecifyCacheNode | 0x6df1dc95 | 6df1dc95 |
| MmAllocateContiguousNodeMemory | 0x49e80055 | 49e80055 |
| MmAllocateMappingAddress | 0x2390b6f4 | 2390b6f4 |
| MmAllocateMdlForIoSpace | 0xe57d077e | e57d077e |
| MmAllocateNodePagesForMdlEx | 0x1c9a45d8 | 1c9a45d8 |
| MmAllocateNonCachedMemory | 0xca97159 | ca97159 |
| MmAllocatePagesForMdl | 0x58e661c2 | 58e661c2 |
| MmAllocatePagesForMdlEx | 0x9987127b | 9987127b |
| MmAllocatePartitionNodePagesForMdlEx | 0x6a0c1d8 | 6a0c1d8 |
| MmAreMdlPagesCached | 0x574612b | 574612b |
| MmBadPointer | 0xd058147 | d058147 |
| MmBuildMdlForNonPagedPool | 0xc3b4c09b | c3b4c09b |
| MmCanFileBeTruncated | 0x52bbd733 | 52bbd733 |
| MmChangeImageProtection | 0xa7c88169 | a7c88169 |
| MmCommitSessionMappedView | 0x1cfea069 | 1cfea069 |
| MmCopyMemory | 0x8c51d58 | 8c51d58 |
| MmCopyVirtualMemory | 0x78c5d7d5 | 78c5d7d5 |
| MmCreateMdl | 0xab5a796 | ab5a796 |
| MmCreateMirror | 0xd41fdbac | d41fdbac |
| MmCreateSection | 0xfb0c5da9 | fb0c5da9 |
| MmDisableModifiedWriteOfSection | 0x318d3dc5 | 318d3dc5 |
| MmDoesFileHaveUserWritableReferences | 0x7fc19d19 | 7fc19d19 |
| MmFlushImageSection | 0x7895bab9 | 7895bab9 |
| MmForceSectionClosed | 0xae46ef4f | ae46ef4f |
| MmForceSectionClosedEx | 0x1bbd47d1 | 1bbd47d1 |
| MmFreeContiguousMemory | 0xabbb3316 | abbb3316 |
| MmFreeContiguousMemorySpecifyCache | 0xc6ad2f9 | c6ad2f9 |
| MmFreeMappingAddress | 0x957d7624 | 957d7624 |
| MmFreeNonCachedMemory | 0x4a415767 | 4a415767 |
| MmFreePagesFromMdl | 0xeec856e6 | eec856e6 |
| MmFreePagesFromMdlEx | 0x215ba4d3 | 215ba4d3 |
| MmGetCacheAttribute | 0x6fda0d30 | 6fda0d30 |
| MmGetMaximumFileSectionSize | 0xb5425648 | b5425648 |
| MmGetPhysicalAddress | 0x16f41c44 | 16f41c44 |
| MmGetPhysicalMemoryRanges | 0xd27baeb4 | d27baeb4 |
| MmGetPhysicalMemoryRangesEx | 0xeebadc61 | eebadc61 |
| MmGetSectionInformation | 0xe35a3060 | e35a3060 |
| MmGetSystemRoutineAddress | 0xfe2a0962 | fe2a0962 |
| MmGetVirtualForPhysical | 0x9bcd39bb | 9bcd39bb |
| MmGrowKernelStack | 0x4a752100 | 4a752100 |
| MmHighestUserAddress | 0xb749be6d | b749be6d |
| MmIsAddressValid | 0xfdb1b6a2 | fdb1b6a2 |
| MmIsDriverSuspectForVerifier | 0x7e013c7e | 7e013c7e |
| MmIsDriverVerifying | 0x672d7558 | 672d7558 |
| MmIsDriverVerifyingByAddress | 0xbd25f591 | bd25f591 |
| MmIsIoSpaceActive | 0x91969281 | 91969281 |
| MmIsNonPagedSystemAddressValid | 0xebb1a794 | ebb1a794 |
| MmIsRecursiveIoFault | 0xeb01a564 | eb01a564 |
| MmIsThisAnNtAsSystem | 0xfda34e33 | fda34e33 |
| MmIsVerifierEnabled | 0xba54f3f8 | ba54f3f8 |
| MmLoadSystemImage | 0x627423e3 | 627423e3 |
| MmLockPagableDataSection | 0xbcf07999 | bcf07999 |
| MmLockPagableImageSection | 0x23b24251 | 23b24251 |
| MmLockPagableSectionByHandle | 0x44ddba27 | 44ddba27 |
| MmLockPreChargedPagedPool | 0x4adb49f | 4adb49f |
| MmMapIoSpace | 0x4ba79558 | 4ba79558 |
| MmMapIoSpaceEx | 0x9e556a46 | 9e556a46 |
| MmMapLockedPages | 0x5672f365 | 5672f365 |
| MmMapLockedPagesSpecifyCache | 0xf7164efd | f7164efd |
| MmMapLockedPagesWithReservedMapping | 0x8261a960 | 8261a960 |
| MmMapMdl | 0xe049436f | e049436f |
| MmMapMemoryDumpMdl | 0xff5b17ea | ff5b17ea |
| MmMapUserAddressesToPage | 0x4f08e8e2 | 4f08e8e2 |
| MmMapVideoDisplay | 0x66b212c | 66b212c |
| MmMapViewInSessionSpace | 0xf7cccc84 | f7cccc84 |
| MmMapViewInSessionSpaceEx | 0x33321cf7 | 33321cf7 |
| MmMapViewInSystemSpace | 0xfa1f2aa9 | fa1f2aa9 |
| MmMapViewInSystemSpaceEx | 0x7caab100 | 7caab100 |
| MmMapViewOfSection | 0x309e65b9 | 309e65b9 |
| MmMarkPhysicalMemoryAsBad | 0xdb84617c | db84617c |
| MmMarkPhysicalMemoryAsGood | 0x708ee95f | 708ee95f |
| MmMdlPageContentsState | 0x72863ef9 | 72863ef9 |
| MmMdlPagesAreZero | 0x14606767 | 14606767 |
| MmObtainChargesToLockPagedPool | 0xc3d1311a | c3d1311a |
| MmPageEntireDriver | 0x4dacead0 | 4dacead0 |
| MmPrefetchPages | 0xcfd365eb | cfd365eb |
| MmPrefetchVirtualAddresses | 0xd3053916 | d3053916 |
| MmProbeAndLockPages | 0x4f6aa530 | 4f6aa530 |
| MmProbeAndLockProcessPages | 0x26cc5043 | 26cc5043 |
| MmProbeAndLockSelectedPages | 0xa9eb4d1c | a9eb4d1c |
| MmProtectMdlSystemAddress | 0x6e28f855 | 6e28f855 |
| MmQuerySystemSize | 0x5c3a8d8b | 5c3a8d8b |
| MmRemovePhysicalMemory | 0xf53bbe | f53bbe |
| MmResetDriverPaging | 0xcc1010fe | cc1010fe |
| MmReturnChargesToLockPagedPool | 0xd81932a6 | d81932a6 |
| MmRotatePhysicalView | 0x414f00cf | 414f00cf |
| MmSectionObjectType | 0x18a4797f | 18a4797f |
| MmSecureVirtualMemory | 0xfe60d34 | fe60d34 |
| MmSetAddressRangeModified | 0x4e7ccf96 | 4e7ccf96 |
| MmSetBankedSection | 0xecc12caf | ecc12caf |
| MmSetGraphicsPtes | 0x72feedff | 72feedff |
| MmSetPermanentCacheAttribute | 0x8cd4ec6 | 8cd4ec6 |
| MmSizeOfMdl | 0x50663753 | 50663753 |
| MmSystemRangeStart | 0xdb9ee6c | db9ee6c |
| MmTrimAllSystemPagableMemory | 0x63ab7b88 | 63ab7b88 |
| MmUnloadSystemImage | 0xa41c33e4 | a41c33e4 |
| MmUnlockPagableImageSection | 0xcbc24392 | cbc24392 |
| MmUnlockPages | 0xa31458a9 | a31458a9 |
| MmUnlockPreChargedPagedPool | 0xacbdb5e0 | acbdb5e0 |
| MmUnmapIoSpace | 0x1faf95f9 | 1faf95f9 |
| MmUnmapLockedPages | 0x608033e5 | 608033e5 |
| MmUnmapReservedMapping | 0xb39610a8 | b39610a8 |
| MmUnmapVideoDisplay | 0x4813312d | 4813312d |
| MmUnmapViewInSessionSpace | 0x4836d085 | 4836d085 |
| MmUnmapViewInSystemSpace | 0xfca27ac9 | fca27ac9 |
| MmUnmapViewOfSection | 0x65a065e1 | 65a065e1 |
| MmUnsecureVirtualMemory | 0xffa27b5 | ffa27b5 |
| MmUserProbeAddress | 0x6260ad9d | 6260ad9d |
| NlsAnsiCodePage | 0xe0c070d8 | e0c070d8 |
| NlsLeadByteInfo | 0x8616dfbd | 8616dfbd |
| NlsMbCodePageTag | 0xcac0afae | cac0afae |
| NlsMbOemCodePageTag | 0x9633a4e9 | 9633a4e9 |
| NlsOemCodePage | 0x8942a11c | 8942a11c |
| NlsOemLeadByteInfo | 0x304677ef | 304677ef |
| NtAddAtom | 0xe62affe | e62affe |
| NtAdjustPrivilegesToken | 0xaf56428e | af56428e |
| NtAllocateLocallyUniqueId | 0x25d27426 | 25d27426 |
| NtAllocateUuids | 0x174a8b85 | 174a8b85 |
| NtAllocateVirtualMemory | 0xf539d4f3 | f539d4f3 |
| NtBuildGUID | 0x1faba327 | 1faba327 |
| NtBuildLab | 0x18fd72b0 | 18fd72b0 |
| NtBuildNumber | 0xbe9f2190 | be9f2190 |
| NtClose | 0x6c67cad9 | 6c67cad9 |
| NtCommitComplete | 0xc97bc6a6 | c97bc6a6 |
| NtCommitEnlistment | 0x3e076850 | 3e076850 |
| NtCommitTransaction | 0x9a90eafd | 9a90eafd |
| NtCompareSigningLevels | 0xeca9730 | eca9730 |
| NtConnectPort | 0x28841c43 | 28841c43 |
| NtCreateEnlistment | 0x834b68ff | 834b68ff |
| NtCreateEvent | 0xe9a74a5e | e9a74a5e |
| NtCreateFile | 0x574d8726 | 574d8726 |
| NtCreateResourceManager | 0x1320790a | 1320790a |
| NtCreateSection | 0xfb0c5df7 | fb0c5df7 |
| NtCreateTransaction | 0x431100e6 | 431100e6 |
| NtCreateTransactionManager | 0x219a3058 | 219a3058 |
| NtDeleteAtom | 0x574b46c7 | 574b46c7 |
| NtDeleteFile | 0x574d9a5f | 574d9a5f |
| NtDeviceIoControlFile | 0x4a986a4c | 4a986a4c |
| NtDuplicateObject | 0x1c59177f | 1c59177f |
| NtDuplicateToken | 0x59394cc3 | 59394cc3 |
| NtEnumerateTransactionObject | 0xf52d70b6 | f52d70b6 |
| NtFindAtom | 0x226c9498 | 226c9498 |
| NtFreeVirtualMemory | 0x7da8eced | 7da8eced |
| NtFreezeTransactions | 0x62801e47 | 62801e47 |
| NtFsControlFile | 0xff7f180e | ff7f180e |
| NtGetEnvironmentVariableEx | 0xad1a82b6 | ad1a82b6 |
| NtGetNotificationResourceManager | 0xb4fe384a | b4fe384a |
| NtGlobalFlag | 0x71be0c18 | 71be0c18 |
| NtImageInfo | 0x15bd11b0 | 15bd11b0 |
| NtLockFile | 0x8cdee861 | 8cdee861 |
| NtMakePermanentObject | 0x3cf70b4e | 3cf70b4e |
| NtMapViewOfSection | 0x30c565b9 | 30c565b9 |
| NtNotifyChangeDirectoryFile | 0x8d041d14 | 8d041d14 |
| NtNotifyChangeDirectoryFileEx | 0x10745b4c | 10745b4c |
| NtOpenEnlistment | 0x61bbc154 | 61bbc154 |
| NtOpenFile | 0xd10ee879 | d10ee879 |
| NtOpenProcess | 0x66d8b5d | 66d8b5d |
| NtOpenProcessToken | 0xbf861424 | bf861424 |
| NtOpenProcessTokenEx | 0x18509c16 | 18509c16 |
| NtOpenResourceManager | 0xbcdd59ba | bcdd59ba |
| NtOpenThread | 0x5794f3c8 | 5794f3c8 |
| NtOpenThreadToken | 0x962862f5 | 962862f5 |
| NtOpenThreadTokenEx | 0xa18bdf70 | a18bdf70 |
| NtOpenTransaction | 0x111c0b82 | 111c0b82 |
| NtOpenTransactionManager | 0x91f28536 | 91f28536 |
| NtPrePrepareComplete | 0x53f872d | 53f872d |
| NtPrePrepareEnlistment | 0x4d09813f | 4d09813f |
| NtPrepareComplete | 0x2b1bff04 | 2b1bff04 |
| NtPrepareEnlistment | 0xbee8ddd6 | bee8ddd6 |
| NtPropagationComplete | 0x3b9c9149 | 3b9c9149 |
| NtPropagationFailed | 0x9e2cd63f | 9e2cd63f |
| NtQueryDirectoryFile | 0xfca1fe40 | fca1fe40 |
| NtQueryDirectoryFileEx | 0x87f90d0a | 87f90d0a |
| NtQueryEaFile | 0xeb87ba98 | eb87ba98 |
| NtQueryEnvironmentVariableInfoEx | 0x6005b5f7 | 6005b5f7 |
| NtQueryInformationAtom | 0x1f6ee195 | 1f6ee195 |
| NtQueryInformationEnlistment | 0x35545481 | 35545481 |
| NtQueryInformationFile | 0x1f71352d | 1f71352d |
| NtQueryInformationProcess | 0x2cc7328e | 2cc7328e |
| NtQueryInformationResourceManager | 0x16848ae1 | 16848ae1 |
| NtQueryInformationThread | 0xe0c7c101 | e0c7c101 |
| NtQueryInformationToken | 0xef09a211 | ef09a211 |
| NtQueryInformationTransaction | 0x842e711c | 842e711c |
| NtQueryInformationTransactionManager | 0x2a85b20a | 2a85b20a |
| NtQueryQuotaInformationFile | 0xf573fec3 | f573fec3 |
| NtQuerySecurityAttributesToken | 0x1242c5c5 | 1242c5c5 |
| NtQuerySecurityObject | 0xbac2019a | bac2019a |
| NtQuerySystemInformation | 0x42026b16 | 42026b16 |
| NtQuerySystemInformationEx | 0x9ac6220 | 9ac6220 |
| NtQueryVolumeInformationFile | 0x95b09236 | 95b09236 |
| NtReadFile | 0x86ee88f | 86ee88f |
| NtReadOnlyEnlistment | 0x200d557d | 200d557d |
| NtRecoverEnlistment | 0x89e7556 | 89e7556 |
| NtRecoverResourceManager | 0xc02b1f22 | c02b1f22 |
| NtRecoverTransactionManager | 0x74a686dd | 74a686dd |
| NtRequestPort | 0x48bedf7b | 48bedf7b |
| NtRequestWaitReplyPort | 0x24858911 | 24858911 |
| NtRollbackComplete | 0x9dff1cb8 | 9dff1cb8 |
| NtRollbackEnlistment | 0x4b5fafa2 | 4b5fafa2 |
| NtRollbackTransaction | 0x4599d53f | 4599d53f |
| NtSetCachedSigningLevel | 0x16fe56a5 | 16fe56a5 |
| NtSetEaFile | 0x917b882a | 917b882a |
| NtSetEvent | 0x2c96d8e6 | 2c96d8e6 |
| NtSetInformationEnlistment | 0xd3c0e1b0 | d3c0e1b0 |
| NtSetInformationFile | 0x992369eb | 992369eb |
| NtSetInformationProcess | 0x47266f67 | 47266f67 |
| NtSetInformationResourceManager | 0x75c163fb | 75c163fb |
| NtSetInformationThread | 0xa99abae8 | a99abae8 |
| NtSetInformationToken | 0x255039e1 | 255039e1 |
| NtSetInformationTransaction | 0x51c01710 | 51c01710 |
| NtSetInformationVirtualMemory | 0xde01602 | de01602 |
| NtSetQuotaInformationFile | 0x7267632d | 7267632d |
| NtSetSecurityObject | 0xae8f9340 | ae8f9340 |
| NtSetVolumeInformationFile | 0x341d1f66 | 341d1f66 |
| NtShutdownSystem | 0xea2add8d | ea2add8d |
| NtThawTransactions | 0xb38196ad | b38196ad |
| NtTraceControl | 0x10f05d29 | 10f05d29 |
| NtTraceEvent | 0xb7679755 | b7679755 |
| NtUnlockFile | 0xb5afc361 | b5afc361 |
| NtVdmControl | 0xcdf6fdc5 | cdf6fdc5 |
| NtWaitForSingleObject | 0x981582ce | 981582ce |
| NtWriteFile | 0x2fbb8c90 | 2fbb8c90 |
| ObAssignSecurity | 0x78be94b4 | 78be94b4 |
| ObCheckCreateObjectAccess | 0x886fa2ba | 886fa2ba |
| ObCheckObjectAccess | 0xa9ff2516 | a9ff2516 |
| ObCloseHandle | 0xf862909b | f862909b |
| ObCreateObject | 0x27aba632 | 27aba632 |
| ObCreateObjectType | 0x634e6d1f | 634e6d1f |
| ObDeleteCapturedInsertInfo | 0x607e9368 | 607e9368 |
| ObDereferenceObject | 0xc132f757 | c132f757 |
| ObDereferenceObjectDeferDelete | 0xbb8545a5 | bb8545a5 |
| ObDereferenceObjectDeferDeleteWithTag | 0x759f89cb | 759f89cb |
| ObDereferenceSecurityDescriptor | 0xb34cc296 | b34cc296 |
| ObDuplicateObject | 0x1c59877f | 1c59877f |
| ObFindHandleForObject | 0x5da4c254 | 5da4c254 |
| ObGetFilterVersion | 0xf1de6d20 | f1de6d20 |
| ObGetObjectSecurity | 0xacb5cf50 | acb5cf50 |
| ObGetObjectType | 0xb1c64c57 | b1c64c57 |
| ObInsertObject | 0xea9d6a25 | ea9d6a25 |
| ObIsDosDeviceLocallyMapped | 0xbae10d46 | bae10d46 |
| ObIsKernelHandle | 0xed6de041 | ed6de041 |
| ObLogSecurityDescriptor | 0x9d938627 | 9d938627 |
| ObMakeTemporaryObject | 0x2eaf8876 | 2eaf8876 |
| ObOpenObjectByName | 0x9f12cf0b | 9f12cf0b |
| ObOpenObjectByNameEx | 0x4b3c3794 | 4b3c3794 |
| ObOpenObjectByPointer | 0x34c2c9c | 34c2c9c |
| ObOpenObjectByPointerWithTag | 0xb3d6c17d | b3d6c17d |
| ObQueryNameInfo | 0x6c991541 | 6c991541 |
| ObQueryNameString | 0x78bafbd9 | 78bafbd9 |
| ObQueryObjectAuditingByHandle | 0x4b84f3cc | 4b84f3cc |
| ObReferenceObjectByHandle | 0xd41ff68c | d41ff68c |
| ObReferenceObjectByHandleWithTag | 0x3a751104 | 3a751104 |
| ObReferenceObjectByName | 0x29f807db | 29f807db |
| ObReferenceObjectByPointer | 0x9fb3f20e | 9fb3f20e |
| ObReferenceObjectByPointerWithTag | 0x9714ed12 | 9714ed12 |
| ObReferenceObjectSafe | 0x7592a102 | 7592a102 |
| ObReferenceObjectSafeWithTag | 0x460a64b1 | 460a64b1 |
| ObReferenceSecurityDescriptor | 0x9ec97096 | 9ec97096 |
| ObRegisterCallbacks | 0x9289e291 | 9289e291 |
| ObReleaseObjectSecurity | 0xa144c4e3 | a144c4e3 |
| ObSetHandleAttributes | 0x290f5315 | 290f5315 |
| ObSetSecurityDescriptorInfo | 0x69535e67 | 69535e67 |
| ObSetSecurityObjectByPointer | 0xd73138f8 | d73138f8 |
| ObUnRegisterCallbacks | 0xac09e7b2 | ac09e7b2 |
| ObWaitForMultipleObjects | 0xe24a62a6 | e24a62a6 |
| ObWaitForSingleObject | 0x981582d5 | 981582d5 |
| ObfDereferenceObject | 0x8db2f77f | 8db2f77f |
| ObfDereferenceObjectWithTag | 0x70d189a | 70d189a |
| ObfReferenceObject | 0x82f0f756 | 82f0f756 |
| ObfReferenceObjectWithTag | 0xb0fd1751 | b0fd1751 |
| POGOBuffer | 0x4b8ef65e | 4b8ef65e |
| PcwAddInstance | 0xda032bcf | da032bcf |
| PcwCloseInstance | 0xd53fa5db | d53fa5db |
| PcwCreateInstance | 0xc1d86276 | c1d86276 |
| PcwRegister | 0x161836bc | 161836bc |
| PcwUnregister | 0x48326ec1 | 48326ec1 |
| PfFileInfoNotify | 0x2acbdc98 | 2acbdc98 |
| PfxFindPrefix | 0xdc3d5226 | dc3d5226 |
| PfxInitialize | 0xd314510 | d314510 |
| PfxInsertPrefix | 0x4d9b0319 | 4d9b0319 |
| PfxRemovePrefix | 0x91f64d35 | 91f64d35 |
| PoCallDriver | 0xb91b298d | b91b298d |
| PoCancelDeviceNotify | 0x8b936725 | 8b936725 |
| PoClearPowerRequest | 0xe93de583 | e93de583 |
| PoCpuIdledSinceLastCallImprecise | 0x713f0d72 | 713f0d72 |
| PoCreatePowerRequest | 0x8fecacd1 | 8fecacd1 |
| PoCreateThermalRequest | 0x5aa7884b | 5aa7884b |
| PoDeletePowerRequest | 0x8fffe5d1 | 8fffe5d1 |
| PoDeleteThermalRequest | 0xa78b884b | a78b884b |
| PoDirectedDripsClearDeviceFlags | 0xa6c66154 | a6c66154 |
| PoDirectedDripsSetDeviceFlags | 0xcda82f41 | cda82f41 |
| PoDisableSleepStates | 0x6638f68c | 6638f68c |
| PoEndDeviceBusy | 0x950be086 | 950be086 |
| PoEnergyEstimationEnabled | 0x239327ea | 239327ea |
| PoFxActivateComponent | 0x60c9c3da | 60c9c3da |
| PoFxCompleteDevicePowerNotRequired | 0x9bdb49ae | 9bdb49ae |
| PoFxCompleteDirectedPowerTransition | 0x14e70d93 | 14e70d93 |
| PoFxCompleteIdleCondition | 0xa882531a | a882531a |
| PoFxCompleteIdleState | 0x6b0f1880 | 6b0f1880 |
| PoFxEnableDStateReporting | 0x3bf255a2 | 3bf255a2 |
| PoFxIdleComponent | 0xeb39133c | eb39133c |
| PoFxIssueComponentPerfStateChange | 0xf7c84bb7 | f7c84bb7 |
| PoFxIssueComponentPerfStateChangeMultiple | 0xe7c20862 | e7c20862 |
| PoFxNotifySurprisePowerOn | 0xf08e3b55 | f08e3b55 |
| PoFxPowerControl | 0x4ee9bb41 | 4ee9bb41 |
| PoFxPowerOnCrashdumpDevice | 0x6d9ad22b | 6d9ad22b |
| PoFxProcessorNotification | 0x7169c979 | 7169c979 |
| PoFxQueryCurrentComponentPerfState | 0xf3f3e460 | f3f3e460 |
| PoFxRegisterComponentPerfStates | 0xefe5ae3e | efe5ae3e |
| PoFxRegisterCoreDevice | 0x2d867db1 | 2d867db1 |
| PoFxRegisterCrashdumpDevice | 0x5e779ce8 | 5e779ce8 |
| PoFxRegisterDevice | 0x9e30d6b4 | 9e30d6b4 |
| PoFxRegisterDripsWatchdogCallback | 0x58362822 | 58362822 |
| PoFxRegisterInternalDevice | 0x4e555191 | 4e555191 |
| PoFxRegisterPlugin | 0xb6a04f7d | b6a04f7d |
| PoFxRegisterPluginEx | 0x813dfff2 | 813dfff2 |
| PoFxRegisterPrimaryDevice | 0x865fe4f1 | 865fe4f1 |
| PoFxReportDevicePoweredOn | 0xc94d350a | c94d350a |
| PoFxSetComponentLatency | 0x5be46dcb | 5be46dcb |
| PoFxSetComponentResidency | 0x59181468 | 59181468 |
| PoFxSetComponentWake | 0x51ea36a5 | 51ea36a5 |
| PoFxSetDeviceIdleTimeout | 0x6218d455 | 6218d455 |
| PoFxSetTargetDripsDevicePowerState | 0x82fe0232 | 82fe0232 |
| PoFxStartDevicePowerManagement | 0xf62ce501 | f62ce501 |
| PoFxUnregisterDevice | 0x58fa4c9e | 58fa4c9e |
| PoGetProcessorIdleAccounting | 0x9443e25c | 9443e25c |
| PoGetSystemWake | 0x7558035d | 7558035d |
| PoGetThermalRequestSupport | 0x4f9d3294 | 4f9d3294 |
| PoInitiateProcessorWake | 0x9316e312 | 9316e312 |
| PoLatencySensitivityHint | 0xefabdadb | efabdadb |
| PoNotifyMediaBuffering | 0xa1280de2 | a1280de2 |
| PoNotifyVSyncChange | 0x38c6b7a8 | 38c6b7a8 |
| PoQueryWatchdogTime | 0xefe35a8b | efe35a8b |
| PoQueueShutdownWorkItem | 0x41be441f | 41be441f |
| PoReenableSleepStates | 0x7654d39b | 7654d39b |
| PoRegisterCoalescingCallback | 0x7b4a3508 | 7b4a3508 |
| PoRegisterDeviceForIdleDetection | 0xb89f79fe | b89f79fe |
| PoRegisterDeviceNotify | 0xc81c3a56 | c81c3a56 |
| PoRegisterPowerSettingCallback | 0xb34a4b78 | b34a4b78 |
| PoRegisterSystemState | 0x7ed19486 | 7ed19486 |
| PoReportDirectedDripsCandidateDevice | 0xfcdc39c6 | fcdc39c6 |
| PoRequestPowerIrp | 0x100969e | 100969e |
| PoRequestShutdownEvent | 0xa9087692 | a9087692 |
| PoSetDeviceBusyEx | 0x2f8226db | 2f8226db |
| PoSetFixedWakeSource | 0x68104bba | 68104bba |
| PoSetHiberRange | 0x8dabc652 | 8dabc652 |
| PoSetPowerButtonHoldState | 0x680bd154 | 680bd154 |
| PoSetPowerRequest | 0xbb6af90a | bb6af90a |
| PoSetPowerState | 0x8dc61a9a | 8dc61a9a |
| PoSetSystemState | 0xaac9c60b | aac9c60b |
| PoSetSystemWake | 0x3558035e | 3558035e |
| PoSetSystemWakeDevice | 0x1be2b19d | 1be2b19d |
| PoSetThermalActiveCooling | 0xe9285de8 | e9285de8 |
| PoSetThermalPassiveCooling | 0x4e39c87 | 4e39c87 |
| PoSetUserPresent | 0x75f08745 | 75f08745 |
| PoShutdownBugCheck | 0x90a2a3ea | 90a2a3ea |
| PoStartDeviceBusy | 0x579f5952 | 579f5952 |
| PoStartNextPowerIrp | 0x6b646279 | 6b646279 |
| PoUnregisterCoalescingCallback | 0x7bf12788 | 7bf12788 |
| PoUnregisterPowerSettingCallback | 0x4f144b7b | 4f144b7b |
| PoUnregisterSystemState | 0x7ee672d6 | 7ee672d6 |
| PoUserShutdownCancelled | 0xe89d04e1 | e89d04e1 |
| PoUserShutdownInitiated | 0xcad7ab48 | cad7ab48 |
| ProbeForRead | 0x8f20e5be | 8f20e5be |
| ProbeForWrite | 0xe4735a36 | e4735a36 |
| PsAcquireProcessExitSynchronization | 0x9baac53f | 9baac53f |
| PsAcquireSiloHardReference | 0xcdc1277a | cdc1277a |
| PsAllocSiloContextSlot | 0x6df864f9 | 6df864f9 |
| PsAssignImpersonationToken | 0xc174176d | c174176d |
| PsAssignProcessToJobObject | 0x46d00cc6 | 46d00cc6 |
| PsAttachSiloToCurrentThread | 0x195ea0a8 | 195ea0a8 |
| PsChargePoolQuota | 0xe848e80b | e848e80b |
| PsChargeProcessNonPagedPoolQuota | 0x2208c958 | 2208c958 |
| PsChargeProcessPagedPoolQuota | 0xfe59db0 | fe59db0 |
| PsChargeProcessPoolQuota | 0x598be88c | 598be88c |
| PsChargeProcessWakeCounter | 0xa419c63c | a419c63c |
| PsCreateSiloContext | 0x679bdd08 | 679bdd08 |
| PsCreateSystemThread | 0x3f02b920 | 3f02b920 |
| PsCreateSystemThreadEx | 0xae48a14 | ae48a14 |
| PsDereferenceImpersonationToken | 0x467e3006 | 467e3006 |
| PsDereferenceKernelStack | 0x24ea9f02 | 24ea9f02 |
| PsDereferencePrimaryToken | 0x6a0dded4 | 6a0dded4 |
| PsDereferenceSiloContext | 0xacbb2baa | acbb2baa |
| PsDetachSiloFromCurrentThread | 0x7061c5b3 | 7061c5b3 |
| PsDisableImpersonation | 0x1d5d9b25 | 1d5d9b25 |
| PsEnterPriorityRegion | 0xe307296e | e307296e |
| PsEstablishWin32Callouts | 0x5884ae25 | 5884ae25 |
| PsFreeSiloContextSlot | 0xd6add2e1 | d6add2e1 |
| PsGetContextThread | 0x2276db8e | 2276db8e |
| PsGetCurrentProcess | 0xc4a27a16 | c4a27a16 |
| PsGetCurrentProcessId | 0x89e86496 | 89e86496 |
| PsGetCurrentProcessSessionId | 0xfc0c705d | fc0c705d |
| PsGetCurrentProcessWin32Process | 0x849f3f19 | 849f3f19 |
| PsGetCurrentProcessWow64Process | 0x84b86229 | 84b86229 |
| PsGetCurrentServerSilo | 0xfced675c | fced675c |
| PsGetCurrentServerSiloName | 0x75f860db | 75f860db |
| PsGetCurrentSilo | 0xae88e4ed | ae88e4ed |
| PsGetCurrentThread | 0x25869b3e | 25869b3e |
| PsGetCurrentThreadId | 0x1a6d021a | 1a6d021a |
| PsGetCurrentThreadPreviousMode | 0xbd85cbfd | bd85cbfd |
| PsGetCurrentThreadProcess | 0x1757fcd9 | 1757fcd9 |
| PsGetCurrentThreadProcessId | 0x5ff36de1 | 5ff36de1 |
| PsGetCurrentThreadStackBase | 0xe03aae2e | e03aae2e |
| PsGetCurrentThreadStackLimit | 0x7f9aed0 | 7f9aed0 |
| PsGetCurrentThreadTeb | 0x4da06fc5 | 4da06fc5 |
| PsGetCurrentThreadWin32Thread | 0xcf36f376 | cf36f376 |
| PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion | 0xdff83a5f | dff83a5f |
| PsGetEffectiveContainerId | 0x25816a7b | 25816a7b |
| PsGetEffectiveServerSilo | 0x41b090d7 | 41b090d7 |
| PsGetHostSilo | 0xe8144850 | e8144850 |
| PsGetJobLock | 0x8e1d117e | 8e1d117e |
| PsGetJobProperty | 0xf06d38ea | f06d38ea |
| PsGetJobServerSilo | 0x34d34cca | 34d34cca |
| PsGetJobSessionId | 0x13e5825b | 13e5825b |
| PsGetJobSilo | 0x8e207aa2 | 8e207aa2 |
| PsGetJobUIRestrictionsClass | 0xc83d6187 | c83d6187 |
| PsGetParentSilo | 0xc7c5ab83 | c7c5ab83 |
| PsGetPermanentSiloContext | 0xb6cfe8b8 | b6cfe8b8 |
| PsGetProcessCommonJob | 0x2e997f75 | 2e997f75 |
| PsGetProcessCreateTimeQuadPart | 0xad44bd36 | ad44bd36 |
| PsGetProcessDebugPort | 0x7e0b1494 | 7e0b1494 |
| PsGetProcessDxgProcess | 0x994c7201 | 994c7201 |
| PsGetProcessExitProcessCalled | 0xf85bfff3 | f85bfff3 |
| PsGetProcessExitStatus | 0x5b9bce5a | 5b9bce5a |
| PsGetProcessExitTime | 0xd1d73c60 | d1d73c60 |
| PsGetProcessId | 0xe1ae29d7 | e1ae29d7 |
| PsGetProcessImageFileName | 0x107ab065 | 107ab065 |
| PsGetProcessInheritedFromUniqueProcessId | 0x6d029d6b | 6d029d6b |
| PsGetProcessJob | 0x35c540be | 35c540be |
| PsGetProcessPeb | 0x35c5577e | 35c5577e |
| PsGetProcessPriorityClass | 0x5b0abf4e | 5b0abf4e |
| PsGetProcessProtection | 0x7e967bc5 | 7e967bc5 |
| PsGetProcessSectionBaseAddress | 0x61ab5093 | 61ab5093 |
| PsGetProcessSecurityPort | 0xdc2a2a17 | dc2a2a17 |
| PsGetProcessSequenceNumber | 0xac0408f5 | ac0408f5 |
| PsGetProcessServerSilo | 0xff764e7e | ff764e7e |
| PsGetProcessSessionId | 0xba3a9a68 | ba3a9a68 |
| PsGetProcessSessionIdEx | 0xea69ac00 | ea69ac00 |
| PsGetProcessSignatureLevel | 0x5253df83 | 5253df83 |
| PsGetProcessSilo | 0xb8ac8175 | b8ac8175 |
| PsGetProcessStartKey | 0xc1c6c3e3 | c1c6c3e3 |
| PsGetProcessWin32Process | 0x99a49e30 | 99a49e30 |
| PsGetProcessWin32WindowStation | 0x803103f3 | 803103f3 |
| PsGetProcessWow64Process | 0x99bdc140 | 99bdc140 |
| PsGetServerSiloServiceSessionId | 0x526cdf9b | 526cdf9b |
| PsGetSiloContainerId | 0xe6f758ff | e6f758ff |
| PsGetSiloContext | 0x3077d052 | 3077d052 |
| PsGetSiloIdentifier | 0x85347e04 | 85347e04 |
| PsGetSiloMonitorContextSlot | 0xd1ddc953 | d1ddc953 |
| PsGetThreadCreateTime | 0x59ab476b | 59ab476b |
| PsGetThreadExitStatus | 0xd8a23a9d | d8a23a9d |
| PsGetThreadFreezeCount | 0xb4680f20 | b4680f20 |
| PsGetThreadHardErrorsAreDisabled | 0xee33a9b6 | ee33a9b6 |
| PsGetThreadId | 0x252b3044 | 252b3044 |
| PsGetThreadProcess | 0x6b6d7935 | 6b6d7935 |
| PsGetThreadProcessId | 0xb5e4df31 | b5e4df31 |
| PsGetThreadProperty | 0x6e7f2346 | 6e7f2346 |
| PsGetThreadServerSilo | 0x7c7cbac2 | 7c7cbac2 |
| PsGetThreadSessionId | 0xd622cdca | d622cdca |
| PsGetThreadTeb | 0xa5663506 | a5663506 |
| PsGetThreadWin32Thread | 0x94fc34ce | 94fc34ce |
| PsGetVersion | 0x7b307b04 | 7b307b04 |
| PsGetWin32KFilterSet | 0xbe24b93a | be24b93a |
| PsImpersonateClient | 0x76eccbc0 | 76eccbc0 |
| PsInitialSystemProcess | 0x9f1613c3 | 9f1613c3 |
| PsInsertPermanentSiloContext | 0xf4d7ac8d | f4d7ac8d |
| PsInsertSiloContext | 0x4f21c090 | 4f21c090 |
| PsIsCurrentThreadInServerSilo | 0x394449e1 | 394449e1 |
| PsIsCurrentThreadPrefetching | 0x4dc20ceb | 4dc20ceb |
| PsIsDiskCountersEnabled | 0x48cb271e | 48cb271e |
| PsIsHostSilo | 0xd740c74b | d740c74b |
| PsIsProcessBeingDebugged | 0x389af142 | 389af142 |
| PsIsProcessCommitRelinquished | 0xa3f164e8 | a3f164e8 |
| PsIsProcessInAppSilo | 0x611b7bfe | 611b7bfe |
| PsIsProtectedProcess | 0x34d3a897 | 34d3a897 |
| PsIsProtectedProcessLight | 0x335fd0c5 | 335fd0c5 |
| PsIsSystemProcess | 0x59d1b67b | 59d1b67b |
| PsIsSystemThread | 0x4a301521 | 4a301521 |
| PsIsThreadImpersonating | 0x4822f3b3 | 4822f3b3 |
| PsIsThreadTerminating | 0x18602a35 | 18602a35 |
| PsIsWin32KFilterAuditEnabled | 0x2fa370a7 | 2fa370a7 |
| PsIsWin32KFilterAuditEnabledForProcess | 0xadc91405 | adc91405 |
| PsIsWin32KFilterEnabled | 0xa226358b | a226358b |
| PsIsWin32KFilterEnabledForProcess | 0xc15ade10 | c15ade10 |
| PsJobType | 0x644c4610 | 644c4610 |
| PsLeavePriorityRegion | 0xfdd4ae2e | fdd4ae2e |
| PsLoadedModuleList | 0x9d07419a | 9d07419a |
| PsLoadedModuleResource | 0x19962568 | 19962568 |
| PsLookupProcessByProcessId | 0xb714ffb8 | b714ffb8 |
| PsLookupProcessThreadByCid | 0x372d454d | 372d454d |
| PsLookupThreadByThreadId | 0xaa4aef52 | aa4aef52 |
| PsMakeSiloContextPermanent | 0x7c29c6a2 | 7c29c6a2 |
| PsPartitionType | 0x5762f40b | 5762f40b |
| PsProcessType | 0x682aa49c | 682aa49c |
| PsQueryProcessAttributesByToken | 0x65899029 | 65899029 |
| PsQueryProcessCommandLine | 0xcf24c4c2 | cf24c4c2 |
| PsQueryProcessExceptionFlags | 0xb4c85f1a | b4c85f1a |
| PsQueryTotalCycleTimeProcess | 0xd3d48b6c | d3d48b6c |
| PsReferenceImpersonationToken | 0x3198f686 | 3198f686 |
| PsReferenceKernelStack | 0x224df7d2 | 224df7d2 |
| PsReferencePrimaryToken | 0x1678f8d4 | 1678f8d4 |
| PsReferenceProcessFilePointer | 0x772e89c8 | 772e89c8 |
| PsReferenceSiloContext | 0xaa1e847a | aa1e847a |
| PsRegisterPicoProvider | 0x50944bdb | 50944bdb |
| PsRegisterSiloMonitor | 0x847a58c7 | 847a58c7 |
| PsReleaseProcessExitSynchronization | 0xaa4a45d0 | aa4a45d0 |
| PsReleaseProcessWakeCounter | 0xe42ace76 | e42ace76 |
| PsReleaseSiloHardReference | 0xd2499c76 | d2499c76 |
| PsRemoveCreateThreadNotifyRoutine | 0xf059903b | f059903b |
| PsRemoveLoadImageNotifyRoutine | 0xabea9855 | abea9855 |
| PsRemoveSiloContext | 0x87aa7724 | 87aa7724 |
| PsReplaceSiloContext | 0xdf9dceef | df9dceef |
| PsRestoreImpersonation | 0xd7104ac | d7104ac |
| PsResumeProcess | 0x3f7e47fb | 3f7e47fb |
| PsReturnPoolQuota | 0x19f60bc7 | 19f60bc7 |
| PsReturnProcessNonPagedPoolQuota | 0x8b26a2e5 | 8b26a2e5 |
| PsReturnProcessPagedPoolQuota | 0xc3006feb | c3006feb |
| PsRevertThreadToSelf | 0xf172945c | f172945c |
| PsRevertToSelf | 0x9be4b3b | 9be4b3b |
| PsSetContextThread | 0x22773b8e | 22773b8e |
| PsSetCreateProcessNotifyRoutine | 0x3f5c1480 | 3f5c1480 |
| PsSetCreateProcessNotifyRoutineEx | 0x70520a15 | 70520a15 |
| PsSetCreateProcessNotifyRoutineEx2 | 0xa4142e0 | a4142e0 |
| PsSetCreateThreadNotifyRoutine | 0x23afe1a6 | 23afe1a6 |
| PsSetCreateThreadNotifyRoutineEx | 0xbf86a1a6 | bf86a1a6 |
| PsSetCurrentThreadPrefetching | 0xcec71dee | cec71dee |
| PsSetJobProperty | 0xf06d3902 | f06d3902 |
| PsSetLegoNotifyRoutine | 0xa1b92600 | a1b92600 |
| PsSetLoadImageNotifyRoutine | 0x4ebeff02 | 4ebeff02 |
| PsSetLoadImageNotifyRoutineEx | 0xfbfc1252 | fbfc1252 |
| PsSetProcessDxgProcess | 0x994c7207 | 994c7207 |
| PsSetProcessFaultInformation | 0x47083a0e | 47083a0e |
| PsSetProcessPriorityByClass | 0xf19803f | f19803f |
| PsSetProcessPriorityClass | 0x5b0dbf4e | 5b0dbf4e |
| PsSetProcessSecurityPort | 0xdc2a4217 | dc2a4217 |
| PsSetProcessWin32Process | 0x99a4b630 | 99a4b630 |
| PsSetProcessWindowStation | 0x7e847c31 | 7e847c31 |
| PsSetThreadHardErrorsAreDisabled | 0xee4ba9b6 | ee4ba9b6 |
| PsSetThreadProperty | 0x6e8b2346 | 6e8b2346 |
| PsSetThreadWin32Thread | 0x94fc34d4 | 94fc34d4 |
| PsSiloContextNonPagedType | 0xe73558b7 | e73558b7 |
| PsSiloContextPagedType | 0x36cca186 | 36cca186 |
| PsStartSiloMonitor | 0x8ae5a3a7 | 8ae5a3a7 |
| PsSuspendProcess | 0x7672d175 | 7672d175 |
| PsTerminateServerSilo | 0x79ff82fa | 79ff82fa |
| PsTerminateSystemThread | 0xc04eec6a | c04eec6a |
| PsThreadType | 0x3242de0f | 3242de0f |
| PsUILanguageComitted | 0x23c89d85 | 23c89d85 |
| PsUnregisterSiloMonitor | 0x848f3f15 | 848f3f15 |
| PsUpdateComponentPower | 0xe26d1b7f | e26d1b7f |
| PsUpdateDiskCounters | 0xfbe1a93f | fbe1a93f |
| PsWow64GetProcessMachine | 0xc2e683a4 | c2e683a4 |
| PsWow64IsMachineSupported | 0xcab3fa61 | cab3fa61 |
| PsWrapApcWow64Thread | 0xb8fa1df4 | b8fa1df4 |
| RtlAbsoluteToSelfRelativeSD | 0x87787208 | 87787208 |
| RtlAddAccessAllowedAce | 0x50be6d45 | 50be6d45 |
| RtlAddAccessAllowedAceEx | 0xf9b51e5a | f9b51e5a |
| RtlAddAccessAllowedObjectAce | 0x649aba10 | 649aba10 |
| RtlAddAccessDeniedAceEx | 0x93b9ceed | 93b9ceed |
| RtlAddAccessDeniedObjectAce | 0x6dc45a5b | 6dc45a5b |
| RtlAddAccessFilterAce | 0xb6bf091 | b6bf097 |
| RtlAddAce | 0x88736680 | 88736680 |
| RtlAddAtomToAtomTable | 0x7fd7712c | 7fd7712c |
| RtlAddAtomToAtomTableEx | 0x5dc4bb17 | 5dc4bb17 |
| RtlAddAuditAccessAceEx | 0x863ab4e3 | 863ab4e3 |
| RtlAddAuditAccessObjectAce | 0xcd238269 | cd238269 |
| RtlAddProcessTrustLabelAce | 0x13213b5e | 13213b5e |
| RtlAddRange | 0xcea93366 | cea93366 |
| RtlAddResourceAttributeAce | 0x3e1659e8 | 3e1659e8 |
| RtlAllocateHeap | 0x10b3a830 | 10b3a830 |
| RtlAnsiCharToUnicodeChar | 0xe3698e38 | e3698e38 |
| RtlAnsiStringToUnicodeSize | 0x99c3e79d | 99c3e79d |
| RtlAnsiStringToUnicodeString | 0x104a948e | 104a948e |
| RtlAppendAsciizToString | 0x1f2a474f | 1f2a474f |
| RtlAppendStringToString | 0x36aad473 | 36aad473 |
| RtlAppendUnicodeStringToString | 0xceeda6c | ceeda6c |
| RtlAppendUnicodeToString | 0x82ac50 | 82ac50 |
| RtlAreAllAccessesGranted | 0xade0f305 | ade0f305 |
| RtlAreAnyAccessesGranted | 0xade35b05 | ade35b05 |
| RtlAreBitsClear | 0xccbc9b66 | ccbc9b66 |
| RtlAreBitsClearEx | 0xf26da44a | f26da44a |
| RtlAreBitsSet | 0xb5336e52 | b5336e52 |
| RtlAreBitsSetEx | 0xcdb953ec | cdb953ec |
| RtlAssert | 0x896b786f | 896b786f |
| RtlAvlInsertNodeEx | 0x9421d6f8 | 9421d6f8 |
| RtlAvlRemoveNode | 0xff361f45 | ff361f45 |
| RtlCapabilityCheck | 0x3332a1ba | 3332a1ba |
| RtlCapabilityCheckForSingleSessionSku | 0x80b5268b | 80b5268b |
| RtlCaptureContext | 0xef507439 | ef507439 |
| RtlCaptureStackBackTrace | 0x5f3abc36 | 5f3abc36 |
| RtlCharToInteger | 0x89096e79 | 89096e79 |
| RtlCheckPortableOperatingSystem | 0xa4e94ec6 | a4e94ec6 |
| RtlCheckRegistryKey | 0x6d20f650 | 6d20f650 |
| RtlCheckSystemBootStatusIntegrity | 0x2552782c | 2552782c |
| RtlCheckTokenCapability | 0x1c24545a | 1c24545a |
| RtlCheckTokenMembership | 0x62b912d9 | 62b912d9 |
| RtlCheckTokenMembershipEx | 0xe44b6ea2 | e44b6ea2 |
| RtlClearAllBits | 0x21fcd03 | 21fcd03 |
| RtlClearAllBitsEx | 0x7f341520 | 7f341520 |
| RtlClearBit | 0xd1a103c7 | d1a103c7 |
| RtlClearBitEx | 0x840f285e | 840f285e |
| RtlClearBits | 0x3420796d | 3420796d |
| RtlClearBitsEx | 0x81e5bde8 | 81e5bde8 |
| RtlCmDecodeMemIoResource | 0xd11e54a5 | d11e54a5 |
| RtlCmEncodeMemIoResource | 0xd63e54a5 | d63e54a5 |
| RtlCompareAltitudes | 0x62bf3633 | 62bf3633 |
| RtlCompareMemory | 0x49cd5d3f | 49cd5d3f |
| RtlCompareMemoryUlong | 0x841b64e1 | 841b64e1 |
| RtlCompareString | 0x56bfc4ad | 56bfc4ad |
| RtlCompareUnicodeString | 0xc0541893 | c0541893 |
| RtlCompareUnicodeStrings | 0xa8312eb | a8312eb |
| RtlCompressBuffer | 0x74290954 | 74290954 |
| RtlCompressChunks | 0x7560aa15 | 7560aa15 |
| RtlComputeCrc32 | 0xb1b4bbc6 | b1b4bbc6 |
| RtlContractHashTable | 0xc55375a4 | c55375a4 |
| RtlConvertSidToUnicodeString | 0x178c57ad | 178c57ad |
| RtlCopyBitMap | 0x26841334 | 26841334 |
| RtlCopyBitMapEx | 0x104cd9b2 | 104cd9b2 |
| RtlCopyLuid | 0xa90ecfb8 | a90ecfb8 |
| RtlCopyLuidAndAttributesArray | 0x9030f9c1 | 9030f9c1 |
| RtlCopyMemory | 0x3c411d5d | 3c411d5d |
| RtlCopyMemoryNonTemporal | 0xd11dc5d4 | d11dc5d4 |
| RtlCopyRangeList | 0xbdc9d5d4 | bdc9d5d4 |
| RtlCopySid | 0xa54890f5 | a54890f5 |
| RtlCopySidAndAttributesArray | 0x8421e0c6 | 8421e0c6 |
| RtlCopyString | 0x493384cb | 493384cb |
| RtlCopyUnicodeString | 0x53f21983 | 53f21983 |
| RtlCrc32 | 0xdc6a953f | dc6a953f |
| RtlCrc64 | 0xdc6a95a1 | dc6a95a1 |
| RtlCreateAcl | 0x34515776 | 34515776 |
| RtlCreateAtomTable | 0x2c866c4c | 2c866c4c |
| RtlCreateAtomTableEx | 0x19b139ca | 19b139ca |
| RtlCreateHashTable | 0x228672b5 | 228672b5 |
| RtlCreateHashTableEx | 0x19cadda2 | 19cadda2 |
| RtlCreateHeap | 0x8a2e75d6 | 8a2e75d6 |
| RtlCreateRegistryKey | 0xf96db3 | f96db3 |
| RtlCreateSecurityDescriptor | 0x3b44ed1 | 3b44ed1 |
| RtlCreateSystemVolumeInformationFolder | 0x65ec020b | 65ec020b |
| RtlCreateUnicodeString | 0x90d455a7 | 90d455a7 |
| RtlCreateUserThread | 0xd147ec1a | d147ec1a |
| RtlCultureNameToLCID | 0x577bfe00 | 577bfe00 |
| RtlCustomCPToUnicodeN | 0x40cc9f3 | 40cc9f3 |
| RtlDecompressBuffer | 0xcac187d5 | cac187d5 |
| RtlDecompressBufferEx | 0x61f6043 | 61f6043 |
| RtlDecompressBufferEx2 | 0xc3ec0892 | c3ec0892 |
| RtlDecompressChunks | 0xcbf92896 | cbf92896 |
| RtlDecompressFragment | 0x3c33317e | 3c33317e |
| RtlDecompressFragmentEx | 0xccc60208 | ccc60208 |
| RtlDelete | 0x8e87f8a0 | 8e87f8a0 |
| RtlDeleteAce | 0xfc515808 | fc515808 |
| RtlDeleteAtomFromAtomTable | 0x4e92883f | 4e92883f |
| RtlDeleteElementGenericTable | 0xd9c0bd04 | d9c0bd04 |
| RtlDeleteElementGenericTableAvl | 0x5e83800c | 5e83800c |
| RtlDeleteElementGenericTableAvlEx | 0xe003a92 | e003a92 |
| RtlDeleteHashTable | 0x948672db | 948672db |
| RtlDeleteNoSplay | 0xd7a981b1 | d7a981b1 |
| RtlDeleteOwnersRanges | 0x9c9b514a | 9c9b514a |
| RtlDeleteRange | 0x466f5536 | 466f5536 |
| RtlDeleteRegistryValue | 0xe8cbc708 | e8cbc708 |
| RtlDeriveCapabilitySidsFromName | 0x730eb26e | 730eb26e |
| RtlDescribeChunk | 0xc2c16568 | c2c16568 |
| RtlDestroyAtomTable | 0x712bb4d0 | 712bb4d0 |
| RtlDestroyHeap | 0xdcd2b7f8 | dcd2b7f8 |
| RtlDowncaseUnicodeChar | 0x10b08dc7 | 10b08dc7 |
| RtlDowncaseUnicodeString | 0xe2ff8669 | e2ff8669 |
| RtlDrainNonVolatileFlush | 0xfc12e347 | fc12e347 |
| RtlDuplicateUnicodeString | 0x896d39ba | 896d39ba |
| RtlEmptyAtomTable | 0xa9a73632 | a9a73632 |
| RtlEndEnumerationHashTable | 0xa3e88c3 | a3e88c3 |
| RtlEndStrongEnumerationHashTable | 0xd8559185 | d8559185 |
| RtlEndWeakEnumerationHashTable | 0x7a49e64a | 7a49e64a |
| RtlEnumerateEntryHashTable | 0x8b605e6e | 8b605e6e |
| RtlEnumerateGenericTable | 0x654ac447 | 654ac447 |
| RtlEnumerateGenericTableAvl | 0x6224c5d1 | 6224c5d1 |
| RtlEnumerateGenericTableLikeADirectory | 0x6a394496 | 6a394496 |
| RtlEnumerateGenericTableWithoutSplaying | 0xaa3b9a9f | aa3b9a9f |
| RtlEnumerateGenericTableWithoutSplayingAvl | 0xcd50e849 | cd50e849 |
| RtlEqualLuid | 0x33c5aa2a | 33c5aa2a |
| RtlEqualSid | 0x319e47c9 | 319e47c9 |
| RtlEqualString | 0x249d4af6 | 249d4af6 |
| RtlEqualUnicodeString | 0x2f404ada | 2f404ada |
| RtlEqualWnfChangeStamps | 0xc3b8b94b | c3b8b94b |
| RtlEthernetAddressToStringA | 0xb70cf65f | b70cf65f |
| RtlEthernetAddressToStringW | 0xb70cf675 | b70cf675 |
| RtlEthernetStringToAddressA | 0x4b57d98f | 4b57d98f |
| RtlEthernetStringToAddressW | 0x4b57d9a5 | 4b57d9a5 |
| RtlExpandHashTable | 0xd26e5341 | d26e5341 |
| RtlExtendCorrelationVector | 0xb64f17cf | b64f17cf |
| RtlExtractBitMap | 0x18ac92a2 | 18ac92a2 |
| RtlExtractBitMapEx | 0xb24a917a | b24a917a |
| RtlFillMemory | 0xfc417739 | fc417739 |
| RtlFindAceByType | 0x62036473 | 62036473 |
| RtlFindClearBits | 0x9f8a2749 | 9f8a2749 |
| RtlFindClearBitsAndSet | 0xf0f5e2e6 | f0f5e2e6 |
| RtlFindClearBitsAndSetEx | 0xd78ba4db | d78ba4db |
| RtlFindClearBitsEx | 0x289d2f96 | 289d2f96 |
| RtlFindClearRuns | 0x9f925689 | 9f925689 |
| RtlFindClosestEncodableLength | 0xcd4acb36 | cd4acb36 |
| RtlFindExportedRoutineByName | 0xbcd5b007 | bcd5b007 |
| RtlFindFirstRunClear | 0x9487dbb7 | 9487dbb7 |
| RtlFindLastBackwardRunClear | 0x8e9b940b | 8e9b940b |
| RtlFindLeastSignificantBit | 0x42d7adc0 | 42d7adc0 |
| RtlFindLongestRunClear | 0x5b1c569c | 5b1c569c |
| RtlFindMessage | 0x8890a324 | 8890a324 |
| RtlFindMostSignificantBit | 0x3e2ee76b | 3e2ee76b |
| RtlFindNextForwardRunClear | 0x7a0852c3 | 7a0852c3 |
| RtlFindNextForwardRunClearCapped | 0x6acbe1b5 | 6acbe1b5 |
| RtlFindNextForwardRunClearEx | 0x214b1700 | 214b1700 |
| RtlFindRange | 0x78300ea9 | 78300ea9 |
| RtlFindSetBits | 0x88844d4 | 88844d4 |
| RtlFindSetBitsAndClear | 0xd4ac76be | d4ac76be |
| RtlFindSetBitsAndClearEx | 0xb1db046a | b1db046a |
| RtlFindSetBitsEx | 0x2113593a | 2113593a |
| RtlFindUnicodePrefix | 0x4dce5c4a | 4dce5c4a |
| RtlFindUnicodeSubstring | 0x88d3dc25 | 88d3dc25 |
| RtlFirstFreeAce | 0x4f365ce6 | 4f365ce6 |
| RtlFlushNonVolatileMemory | 0xb7285e62 | b7285e62 |
| RtlFlushNonVolatileMemoryRanges | 0x5812c0ac | 5812c0ac |
| RtlFormatCurrentUserKeyPath | 0xf441b535 | f441b535 |
| RtlFormatMessage | 0xaac3c3d5 | aac3c3d5 |
| RtlFreeAnsiString | 0x41ecff6d | 41ecff6d |
| RtlFreeHeap | 0x51cc8edd | 51cc8edd |
| RtlFreeNonVolatileToken | 0x3dd2cbf8 | 3dd2cbf8 |
| RtlFreeOemString | 0x881e5247 | 881e5247 |
| RtlFreeRangeList | 0xef1b55d4 | ef1b55d4 |
| RtlFreeUnicodeString | 0x53f52e9b | 53f52e9b |
| RtlGUIDFromString | 0x6369a34e | 6369a34e |
| RtlGenerate8dot3Name | 0xdb7fb1bd | db7fb1bd |
| RtlGenerateClass5Guid | 0xae5ac02f | ae5ac02f |
| RtlGetAce | 0x948b6680 | 948b6680 |
| RtlGetActiveConsoleId | 0x9cd53a81 | 9cd53a81 |
| RtlGetAppContainerNamedObjectPath | 0x7175ab75 | 7175ab75 |
| RtlGetAppContainerParent | 0x9d1da1c2 | 9d1da1c2 |
| RtlGetAppContainerSidType | 0x72cbe439 | 72cbe439 |
| RtlGetCallersAddress | 0x3401fe33 | 3401fe33 |
| RtlGetCompressionWorkSpaceSize | 0x6f876743 | 6f876743 |
| RtlGetConsoleSessionForegroundProcessId | 0xab2d4f7e | ab2d4f7e |
| RtlGetControlSecurityDescriptor | 0x8d8251aa | 8d8251aa |
| RtlGetCurrentServiceSessionId | 0x2dcff709 | 2dcff709 |
| RtlGetDaclSecurityDescriptor | 0x7bc4b64f | 7bc4b64f |
| RtlGetDefaultCodePage | 0xda243ea5 | da243ea5 |
| RtlGetElementGenericTable | 0xe838553e | e838553e |
| RtlGetElementGenericTableAvl | 0x2aa08748 | 2aa08748 |
| RtlGetEnabledExtendedAndSupervisorFeatures | 0x5764d9a6 | 5764d9a6 |
| RtlGetEnabledExtendedFeatures | 0x97d72047 | 97d72047 |
| RtlGetFirstRange | 0x51ae1fcf | 51ae1fcf |
| RtlGetGroupSecurityDescriptor | 0xa370414 | a370414 |
| RtlGetIntegerAtom | 0x1cca5124 | 1cca5124 |
| RtlGetLastRange | 0x927529d9 | 927529d9 |
| RtlGetNextEntryHashTable | 0xe203b40 | e203b40 |
| RtlGetNextRange | 0xd2752bfa | d2752bfa |
| RtlGetNonVolatileToken | 0x91cd088a | 91cd088a |
| RtlGetNtGlobalFlags | 0x8eafd5aa | 8eafd5aa |
| RtlGetNtProductType | 0x7fa8f6d1 | 7fa8f6d1 |
| RtlGetNtSystemRoot | 0x448d199b | 448d199b |
| RtlGetOwnerSecurityDescriptor | 0x12390dfc | 12390dfc |
| RtlGetPersistedStateLocation | 0x9bbb2540 | 9bbb2540 |
| RtlGetProductInfo | 0x990ab301 | 990ab301 |
| RtlGetSaclSecurityDescriptor | 0x7bc4d44f | 7bc4d44f |
| RtlGetSessionProperties | 0xbd89db39 | bd89db39 |
| RtlGetSetBootStatusData | 0x3d9a1e77 | 3d9a1e77 |
| RtlGetSuiteMask | 0x139afefd | 139afefd |
| RtlGetSystemBootStatus | 0x4ac6744d | 4ac6744d |
| RtlGetSystemBootStatusEx | 0x19d13e43 | 19d13e43 |
| RtlGetThreadLangIdByIndex | 0x1c3e9ee2 | 1c3e9ee2 |
| RtlGetTokenNamedObjectPath | 0x92beee11 | 92beee11 |
| RtlGetVersion | 0xad147b09 | ad147b09 |
| RtlHashUnicodeString | 0x53f6aa21 | 53f6aa21 |
| RtlIdnToAscii | 0x3e04a114 | 3e04a114 |
| RtlIdnToNameprepUnicode | 0x453eecaa | 453eecaa |
| RtlIdnToUnicode | 0x8e175e2 | 8e175e2 |
| RtlImageDirectoryEntryToData | 0xcbdf3fc6 | cbdf3fc6 |
| RtlImageNtHeader | 0x5e96127c | 5e96127c |
| RtlImageNtHeaderEx | 0x5849fa92 | 5849fa92 |
| RtlIncrementCorrelationVector | 0x92178d0e | 92178d0e |
| RtlInitAnsiString | 0x428ff73 | 428ff73 |
| RtlInitAnsiStringEx | 0xa3fdd528 | a3fdd528 |
| RtlInitCodePageTable | 0xd65b945e | d65b945e |
| RtlInitEnumerationHashTable | 0x4130c10f | 4130c10f |
| RtlInitString | 0x9344392 | 9344392 |
| RtlInitStringEx | 0xd10e513c | d10e513c |
| RtlInitStrongEnumerationHashTable | 0xe6121f98 | e6121f98 |
| RtlInitUnicodeString | 0x53f80fb9 | 53f80fb9 |
| RtlInitUnicodeStringEx | 0xe03eee67 | e03eee67 |
| RtlInitWeakEnumerationHashTable | 0xff0d556d | ff0d556d |
| RtlInitializeBitMap | 0x97cb91d4 | 97cb91d4 |
| RtlInitializeBitMapEx | 0x2e475b77 | 2e475b77 |
| RtlInitializeCorrelationVector | 0x5c636079 | 5c636079 |
| RtlInitializeGenericTable | 0x33d452e1 | 33d452e1 |
| RtlInitializeGenericTableAvl | 0x2971ad16 | 2971ad16 |
| RtlInitializeRangeList | 0x7d1a0e78 | 7d1a0e78 |
| RtlInitializeSid | 0xa2897384 | a2897384 |
| RtlInitializeSidEx | 0x25ce1ba2 | 25ce1ba2 |
| RtlInitializeUnicodePrefix | 0xd80781f7 | d80781f7 |
| RtlInsertElementGenericTable | 0x5f0a7cec | 5f0a7cec |
| RtlInsertElementGenericTableAvl | 0x3e7742b1 | 3e7742b1 |
| RtlInsertElementGenericTableFull | 0xceead293 | ceead293 |
| RtlInsertElementGenericTableFullAvl | 0x694afaa1 | 694afaa1 |
| RtlInsertEntryHashTable | 0xf8279d81 | f8279d81 |
| RtlInsertUnicodePrefix | 0xa23be8b6 | a23be8b6 |
| RtlInt64ToUnicodeString | 0xbcf8a92a | bcf8a92a |
| RtlIntegerToChar | 0xf7f2e4b3 | f7f2e4b3 |
| RtlIntegerToUnicode | 0xfed444e2 | fed444e2 |
| RtlIntegerToUnicodeString | 0x6d2fc360 | 6d2fc360 |
| RtlInterlockedClearBitRun | 0x865069eb | 865069eb |
| RtlInterlockedSetBitRun | 0x38ea481e | 38ea481e |
| RtlInterlockedSetClearRun | 0x4c0e97fa | 4c0e97fa |
| RtlIntersectBitMaps | 0x3b2f7d94 | 3b2f7d94 |
| RtlIntersectBitMapsEx | 0xbdf65a04 | bdf65a04 |
| RtlInvertRangeList | 0xf385fb1b | f385fb1b |
| RtlInvertRangeListEx | 0x17ec78e6 | 17ec78e6 |
| RtlIoDecodeMemIoResource | 0xd11e5506 | d11e5506 |
| RtlIoEncodeMemIoResource | 0xd63e5506 | d63e5506 |
| RtlIpv4AddressToStringA | 0x52bc8d64 | 52bc8d64 |
| RtlIpv4AddressToStringExA | 0xf235b08b | f235b08b |
| RtlIpv4AddressToStringExW | 0xf235b0a1 | f235b0a1 |
| RtlIpv4AddressToStringW | 0x52bc8d7a | 52bc8d7a |
| RtlIpv4StringToAddressA | 0xe7077093 | e7077093 |
| RtlIpv4StringToAddressExA | 0x1dc26edd | 1dc26edd |
| RtlIpv4StringToAddressExW | 0x1dc26ef3 | 1dc26ef3 |
| RtlIpv4StringToAddressW | 0xe70770a9 | e70770a9 |
| RtlIpv6AddressToStringA | 0x52be8d64 | 52be8d64 |
| RtlIpv6AddressToStringExA | 0xfa35b08b | fa35b08b |
| RtlIpv6AddressToStringExW | 0xfa35b0a1 | fa35b0a1 |
| RtlIpv6AddressToStringW | 0x52be8d7a | 52be8d7a |
| RtlIpv6StringToAddressA | 0xe7097093 | e7097093 |
| RtlIpv6StringToAddressExA | 0x25c26edd | 25c26edd |
| RtlIpv6StringToAddressExW | 0x25c26ef3 | 25c26ef3 |
| RtlIpv6StringToAddressW | 0xe70970a9 | e70970a9 |
| RtlIsCloudFilesPlaceholder | 0x246ef6d5 | 246ef6d5 |
| RtlIsElevatedRid | 0xf927ec29 | f927ec29 |
| RtlIsGenericTableEmpty | 0x574a22ed | 574a22ed |
| RtlIsGenericTableEmptyAvl | 0x1177bed1 | 1177bed1 |
| RtlIsMultiSessionSku | 0x72a3cee6 | 72a3cee6 |
| RtlIsMultiUsersInSessionSku | 0xbb493794 | bb493794 |
| RtlIsNameLegalDOS8Dot3 | 0x907e286d | 907e286d |
| RtlIsNonEmptyDirectoryReparsePointAllowed | 0x3454d8f6 | 3454d8f6 |
| RtlIsNormalizedString | 0x694de16f | 694de16f |
| RtlIsNtDdiVersionAvailable | 0x539b0fff | 539b0fff |
| RtlIsPartialPlaceholder | 0xb4ef9e02 | b4ef9e02 |
| RtlIsPartialPlaceholderFileHandle | 0x4e5c9e1d | 4e5c9e1d |
| RtlIsPartialPlaceholderFileInfo | 0xe144a2f | e144a2f |
| RtlIsRangeAvailable | 0xb8896019 | b8896019 |
| RtlIsSandboxedToken | 0xad045155 | ad045155 |
| RtlIsServicePackVersionInstalled | 0x69076b12 | 69076b12 |
| RtlIsStateSeparationEnabled | 0xbffc0318 | bffc0318 |
| RtlIsUntrustedObject | 0xfd062663 | fd062663 |
| RtlIsValidOemCharacter | 0xc61f12ba | c61f12ba |
| RtlLCIDToCultureName | 0x80e1ccbb | 80e1ccbb |
| RtlLargeIntegerToChar | 0xb1d4e6c1 | b1d4e6c1 |
| RtlLengthRequiredSid | 0x7da7b2c7 | 7da7b2c7 |
| RtlLengthSecurityDescriptor | 0xff92131 | ff92131 |
| RtlLengthSid | 0x805328c8 | 805328c8 |
| RtlLoadString | 0x934a44e | 934a44e |
| RtlLocalTimeToSystemTime | 0x67ff26d4 | 67ff26d4 |
| RtlLocateSupervisorFeature | 0xc1695e85 | c1695e85 |
| RtlLockBootStatusData | 0xd4a0a2ad | d4a0a2ad |
| RtlLookupAtomInAtomTable | 0x13aa88ca | 13aa88ca |
| RtlLookupElementGenericTable | 0x6211891a | 6211891a |
| RtlLookupElementGenericTableAvl | 0xc48e4434 | c48e4434 |
| RtlLookupElementGenericTableFull | 0x91cb0304 | 91cb0304 |
| RtlLookupElementGenericTableFullAvl | 0x81835c11 | 81835c11 |
| RtlLookupEntryHashTable | 0x7badb483 | 7badb483 |
| RtlLookupFirstMatchingElementGenericTableAvl | 0x4aec5d2e | 4aec5d2e |
| RtlLookupFunctionEntry | 0x7b20d7b9 | 7b20d7b9 |
| RtlMapGenericMask | 0xa1d6dfb0 | a1d6dfb0 |
| RtlMapSecurityErrorToNtStatus | 0x60f816f2 | 60f816f2 |
| RtlMergeRangeLists | 0xeecc738e | eecc738e |
| RtlMoveMemory | 0x3c425d88 | 3c425d88 |
| RtlMultiByteToUnicodeN | 0x671874f5 | 671874f5 |
| RtlMultiByteToUnicodeSize | 0x3a7ee731 | 3a7ee731 |
| RtlNextUnicodePrefix | 0x4dd63eea | 4dd63eea |
| RtlNormalizeString | 0x50441376 | 50441376 |
| RtlNtStatusToDosError | 0xe11882b3 | e11882b3 |
| RtlNtStatusToDosErrorNoTeb | 0x6cdb0e07 | 6cdb0e07 |
| RtlNumberGenericTableElements | 0x9dc98641 | 9dc98641 |
| RtlNumberGenericTableElementsAvl | 0xc321e210 | c321e210 |
| RtlNumberOfClearBits | 0x715d7da2 | 715d7da2 |
| RtlNumberOfClearBitsEx | 0x75f692dd | 75f692dd |
| RtlNumberOfClearBitsInRange | 0xac3e326b | ac3e326b |
| RtlNumberOfSetBits | 0x9ebcb9a9 | 9ebcb9a9 |
| RtlNumberOfSetBitsEx | 0xf2e6af92 | f2e6af92 |
| RtlNumberOfSetBitsInRange | 0x173812a5 | 173812a5 |
| RtlNumberOfSetBitsUlongPtr | 0xa1ce7b54 | a1ce7b54 |
| RtlOemStringToCountedUnicodeString | 0xe258b397 | e258b397 |
| RtlOemStringToUnicodeSize | 0x380e68b5 | 380e68b5 |
| RtlOemStringToUnicodeString | 0x3a4ef307 | 3a4ef307 |
| RtlOemToUnicodeN | 0x7caabc8f | 7caabc8f |
| RtlOpenCurrentUser | 0xb63ee362 | b63ee362 |
| RtlOpenImageFileOptionsKey | 0xd6320539 | d6320539 |
| RtlOsDeploymentState | 0x8309cd25 | 8309cd25 |
| RtlOwnerAcesPresent | 0xcb8a8184 | cb8a8184 |
| RtlPcToFileHeader | 0x329d0532 | 329d0532 |
| RtlPcToFileName | 0x80f98bf | 80f98bf |
| RtlPcToFilePath | 0x81099a2 | 81099a2 |
| RtlPinAtomInAtomTable | 0x8190a12c | 8190a12c |
| RtlPrefetchMemoryNonTemporal | 0xebfa26d4 | ebfa26d4 |
| RtlPrefixString | 0x974fd0fc | 974fd0fc |
| RtlPrefixUnicodeString | 0xc4d47b0d | c4d47b0d |
| RtlQueryAtomInAtomTable | 0x284f62bb | 284f62bb |
| RtlQueryDynamicTimeZoneInformation | 0xc347d1af | c347d1af |
| RtlQueryElevationFlags | 0xe80582ff | e80582ff |
| RtlQueryImageFileKeyOption | 0x207df3b9 | 207df3b9 |
| RtlQueryInformationAcl | 0x40fc1b42 | 40fc1b42 |
| RtlQueryModuleInformation | 0x12a1759 | 12a1759 |
| RtlQueryPackageClaims | 0xb9a44137 | b9a44137 |
| RtlQueryPackageIdentity | 0x9958460d | 9958460d |
| RtlQueryProcessPlaceholderCompatibilityMode | 0xe914858e | e914858e |
| RtlQueryRegistryValueWithFallback | 0xa48abd1d | a48abd1d |
| RtlQueryRegistryValues | 0xca841323 | ca841323 |
| RtlQueryRegistryValuesEx | 0x104c9842 | 104c9842 |
| RtlQueryThreadPlaceholderCompatibilityMode | 0x7ed07e97 | 7ed07e97 |
| RtlQueryTimeZoneInformation | 0x40342dfd | 40342dfd |
| RtlQueryValidationRunlevel | 0x1540615e | 1540615e |
| RtlRaiseCustomSystemEventTrigger | 0x931a7047 | 931a7047 |
| RtlRaiseException | 0xd7ea56d1 | d7ea56d1 |
| RtlRaiseStatus | 0x64c6ec70 | 64c6ec70 |
| RtlRandom | 0xaa48f408 | aa48f408 |
| RtlRandomEx | 0x23d02bc1 | 23d02bc1 |
| RtlRbInsertNodeEx | 0xe9c0216f | e9c0216f |
| RtlRbRemoveNode | 0x9d0b86d8 | 9d0b86d8 |
| RtlRbReplaceNode | 0x5ed08a3b | 5ed08a3b |
| RtlRealPredecessor | 0x5e9177dc | 5e9177dc |
| RtlRealSuccessor | 0xe09fdef0 | e09fdef0 |
| RtlRemoveEntryHashTable | 0x5371b9c6 | 5371b9c6 |
| RtlRemoveUnicodePrefix | 0xc5163998 | c5163998 |
| RtlReplaceSidInSd | 0x227884ac | 227884ac |
| RtlReserveChunk | 0x3908c048 | 3908c048 |
| RtlRestoreContext | 0x30cfb458 | 30cfb458 |
| RtlRestoreSystemBootStatusDefaults | 0xde668dd0 | de668dd0 |
| RtlRunOnceBeginInitialize | 0x1e6b29e4 | 1e6b29e4 |
| RtlRunOnceComplete | 0xb533df8a | b533df8a |
| RtlRunOnceExecuteOnce | 0x4cd536f9 | 4cd536f9 |
| RtlRunOnceInitialize | 0xc93b095a | c93b095a |
| RtlSecondsSince1970ToTime | 0x621966e6 | 621966e6 |
| RtlSecondsSince1980ToTime | 0x621966ee | 621966ee |
| RtlSelfRelativeToAbsoluteSD | 0xabe6ff6c | abe6ff6c |
| RtlSelfRelativeToAbsoluteSD2 | 0x7cdfedc7 | 7cdfedc7 |
| RtlSetActiveConsoleId | 0x9e553a81 | 9e553a81 |
| RtlSetAllBits | 0x7a9d7ba9 | 7a9d7ba9 |
| RtlSetAllBitsEx | 0x75eeaf02 | 75eeaf02 |
| RtlSetBit | 0xac8b6b4f | ac8b6b4f |
| RtlSetBitEx | 0x2dad47ca | 2dad47ca |
| RtlSetBits | 0x916d6a68 | 916d6a68 |
| RtlSetBitsEx | 0xb5a9ab5d | b5a9ab5d |
| RtlSetConsoleSessionForegroundProcessId | 0xab334f7e | ab334f7e |
| RtlSetControlSecurityDescriptor | 0x8d8257aa | 8d8257aa |
| RtlSetDaclSecurityDescriptor | 0x87c4b64f | 87c4b64f |
| RtlSetDynamicTimeZoneInformation | 0xfbf4a066 | fbf4a066 |
| RtlSetGroupSecurityDescriptor | 0x8a370415 | 8a370415 |
| RtlSetOwnerSecurityDescriptor | 0x92390dfd | 92390dfd |
| RtlSetPortableOperatingSystem | 0x51c7c754 | 51c7c754 |
| RtlSetProcessPlaceholderCompatibilityMode | 0x82eb6ca4 | 82eb6ca4 |
| RtlSetSaclSecurityDescriptor | 0x87c4d44f | 87c4d44f |
| RtlSetSystemBootStatus | 0x7ac6744d | 7ac6744d |
| RtlSetSystemBootStatusEx | 0x19d13f03 | 19d13f03 |
| RtlSetThreadPlaceholderCompatibilityMode | 0x2b9f35d0 | 2b9f35d0 |
| RtlSetTimeZoneInformation | 0x2749c7d4 | 2749c7d4 |
| RtlShiftLeftBitMap | 0x5a5c9e74 | 5a5c9e74 |
| RtlShiftLeftBitMapEx | 0x7279da81 | 7279da81 |
| RtlSidHashInitialize | 0x147a6cc | 147a6cc |
| RtlSidHashLookup | 0x5454da0 | 5454d0a |
| RtlSizeHeap | 0x3bcc8f43 | 3bcc8f43 |
| RtlSplay | 0xdd69bf46 | dd69bf46 |
| RtlStringFromGUID | 0xdffcc25e | dffcc25e |
| RtlStronglyEnumerateEntryHashTable | 0x9977c260 | 9977c260 |
| RtlSubAuthorityCountSid | 0x3c68897b | 3c68897b |
| RtlSubAuthoritySid | 0xa6983ac9 | a6983ac9 |
| RtlSubtreePredecessor | 0x4b3235d2 | 4b3235d2 |
| RtlSubtreeSuccessor | 0x5e1b0720 | 5e1b0720 |
| RtlSuffixUnicodeString | 0xd1357b0d | d1357b0d |
| RtlSystemTimeToLocalTime | 0xea603cdd | ea603cdd |
| RtlTestBit | 0xd175cd09 | d175cd09 |
| RtlTestBitEx | 0xd734305d | d734305d |
| RtlTimeFieldsToTime | 0x3abb7c64 | 3abb7c64 |
| RtlTimeToElapsedTimeFields | 0xcc7d7baa | cc7d7baa |
| RtlTimeToSecondsSince1970 | 0xe9b58249 | e9b58249 |
| RtlTimeToSecondsSince1980 | 0xe9b58269 | e9b58269 |
| RtlTimeToTimeFields | 0xa579e496 | a579e496 |
| RtlTraceDatabaseAdd | 0x3eee54f | 3eee54f |
| RtlTraceDatabaseCreate | 0x778994dc | 778994dc |
| RtlTraceDatabaseDestroy | 0x181c1548 | 181c1548 |
| RtlTraceDatabaseEnumerate | 0xe186508d | e186508d |
| RtlTraceDatabaseFind | 0x7ddf3f84 | 7ddf3f84 |
| RtlTraceDatabaseLock | 0x7de2562b | 7de2562b |
| RtlTraceDatabaseUnlock | 0x9b4d4ac2 | 9b4d4ac2 |
| RtlTraceDatabaseValidate | 0xf4cb7156 | f4cb7156 |
| RtlUTF8ToUnicodeN | 0xbca9ca61 | bca9ca61 |
| RtlUnicodeStringToAnsiSize | 0x35bffd82 | 35bffd82 |
| RtlUnicodeStringToAnsiString | 0xa226fe | a226fe |
| RtlUnicodeStringToCountedOemString | 0xde571e5 | de571e5 |
| RtlUnicodeStringToInt64 | 0x943a68fd | 943a68fd |
| RtlUnicodeStringToInteger | 0xe9bc4f62 | e9bc4f62 |
| RtlUnicodeStringToOemSize | 0x574359f7 | 574359f7 |
| RtlUnicodeStringToOemString | 0xe13fb84 | e13fb84 |
| RtlUnicodeToCustomCPN | 0xde172413 | de172413 |
| RtlUnicodeToMultiByteN | 0xb4515571 | b4515571 |
| RtlUnicodeToMultiByteSize | 0xaabd0dcd | aabd0dcd |
| RtlUnicodeToOemN | 0x77cca205 | 77cca205 |
| RtlUnicodeToUTF8N | 0xf9eb223c | f9eb223c |
| RtlUnlockBootStatusData | 0x60b60c3e | 60b60c3e |
| RtlUnsignedMultiplyHigh | 0x8ef96be9 | 8ef96be9 |
| RtlUnwind | 0xb11d87df | b11d87df |
| RtlUnwindEx | 0x761f87dc | 761f87dc |
| RtlUpcaseUnicodeChar | 0xd02df27a | d02df27a |
| RtlUpcaseUnicodeString | 0xd8925567 | d8925567 |
| RtlUpcaseUnicodeStringToAnsiString | 0x96c86930 | 96c86930 |
| RtlUpcaseUnicodeStringToCountedOemString | 0xb36f0271 | b36f0271 |
| RtlUpcaseUnicodeStringToOemString | 0xa2c52d95 | a2c52d95 |
| RtlUpcaseUnicodeToCustomCPN | 0x30dbec5a | 30dbec5a |
| RtlUpcaseUnicodeToMultiByteN | 0xcea5e3c | cea5e3c |
| RtlUpcaseUnicodeToOemN | 0xda30c52e | da30c52e |
| RtlUpperChar | 0xfc21052e | fc21052e |
| RtlUpperString | 0xa4dd2617 | a4dd2617 |
| RtlValidAcl | 0x2019ff95 | 2019ff95 |
| RtlValidRelativeSecurityDescriptor | 0x34412ccd | 34412ccd |
| RtlValidSecurityDescriptor | 0x48f5462f | 48f5462f |
| RtlValidSid | 0x201a484d | 201a484d |
| RtlValidateCorrelationVector | 0xf020e3a0 | f020e3a0 |
| RtlValidateUnicodeString | 0xb66087c2 | b66087c2 |
| RtlVerifyVersionInfo | 0xa0c4a065 | a0c4a065 |
| RtlVirtualUnwind | 0x4776d825 | 4776d825 |
| RtlVolumeDeviceToDosName | 0xbd2fa0f9 | bd2fa0f9 |
| RtlWalkFrameChain | 0x56708266 | 56708266 |
| RtlWeaklyEnumerateEntryHashTable | 0x51a60278 | 51a60278 |
| RtlWriteNonVolatileMemory | 0xbac880bc | bac880bc |
| RtlWriteRegistryValue | 0x871140ed | 871140ed |
| RtlZeroHeap | 0x2c6c8f7a | 2c6c8f7a |
| RtlZeroMemory | 0xbc43f36a | bc43f36a |
| RtlxAnsiStringToUnicodeSize | 0xd223e8e9 | d223e8e9 |
| RtlxOemStringToUnicodeSize | 0x99d168bf | 99d168bf |
| RtlxUnicodeStringToAnsiSize | 0x6e1ffece | 6e1ffece |
| RtlxUnicodeStringToOemSize | 0xb9065a01 | b9065a01 |
| SeAccessCheck | 0xdf66716 | df66716 |
| SeAccessCheckEx | 0xd99c614f | d99c614f |
| SeAccessCheckFromState | 0x6c4e9e50 | 6c4e9e50 |
| SeAccessCheckFromStateEx | 0x3a794ac9 | 3a794ac9 |
| SeAccessCheckWithHint | 0x250ccb15 | 250ccb15 |
| SeAdjustAccessStateForAccessConstraints | 0x156e1436 | 156e1436 |
| SeAdjustAccessStateForTrustLabel | 0x25063411 | 25063411 |
| SeAdjustObjectSecurity | 0x81e4ebc1 | 81e4ebc1 |
| SeAppendPrivileges | 0xec55c35f | ec55c35f |
| SeAssignSecurity | 0x78beb574 | 78beb574 |
| SeAssignSecurityEx | 0xfad5dafa | fad5dafa |
| SeAuditFipsCryptoSelftests | 0x8a0c49b8 | 8a0c49b8 |
| SeAuditHardLinkCreation | 0xd5a9c6f9 | d5a9c6f9 |
| SeAuditHardLinkCreationWithTransaction | 0x4c023c22 | 4c023c22 |
| SeAuditTransactionStateChange | 0x433c72bd | 433c72bd |
| SeAuditingAnyFileEventsWithContext | 0xac2151f8 | ac2151f8 |
| SeAuditingAnyFileEventsWithContextEx | 0x8547ebc8 | 8547ebc8 |
| SeAuditingFileEvents | 0xb6d1aec6 | b6d1aec6 |
| SeAuditingFileEventsWithContext | 0x9e0a39d | 9e0a39d |
| SeAuditingFileEventsWithContextEx | 0x828e7d3f | 828e7d3f |
| SeAuditingFileOrGlobalEvents | 0x143a5fe1 | 143a5fe1 |
| SeAuditingHardLinkEvents | 0x51cc8758 | 51cc8758 |
| SeAuditingHardLinkEventsWithContext | 0x52ae2109 | 52ae2109 |
| SeAuditingWithTokenForSubcategory | 0x81ada426 | 81ada426 |
| SeCaptureSecurityDescriptor | 0xfba3ee11 | fba3ee11 |
| SeCaptureSubjectContext | 0x76dee275 | 76dee275 |
| SeCaptureSubjectContextEx | 0x7b89def3 | 7b89def3 |
| SeCheckForCriticalAceRemoval | 0xcf591657 | cf591657 |
| SeCloseObjectAuditAlarm | 0x7a7d4aaa | 7a7d4aaa |
| SeCloseObjectAuditAlarmForNonObObject | 0xedef9c96 | edef9c96 |
| SeCompareSigningLevels | 0xecaa040 | ecaa040 |
| SeComputeAutoInheritByObjectType | 0xeb8bd6f2 | eb8bd6f2 |
| SeConvertSecurityDescriptorToStringSecurityDescriptor | 0xef82ac4a | ef82ac4a |
| SeConvertSidToStringSid | 0x63b14c57 | 63b14c57 |
| SeConvertStringSecurityDescriptorToSecurityDescriptor | 0x1b1f4c5b | 1b1f4c5b |
| SeConvertStringSidToSid | 0xcf693f4d | cf693f4d |
| SeCreateAccessState | 0x77e30335 | 77e30335 |
| SeCreateAccessStateEx | 0x8c0cdef7 | 8c0cdef7 |
| SeCreateClientSecurity | 0x58b24feb | 58b24feb |
| SeCreateClientSecurityEx | 0xc93fb67a | c93fb67a |
| SeCreateClientSecurityFromSubjectContext | 0xde690752 | de690752 |
| SeCreateClientSecurityFromSubjectContextEx | 0xa41d5491 | a41d5491 |
| SeDeassignSecurity | 0x83833db4 | 83833db4 |
| SeDeleteAccessState | 0x77e39cfd | 77e39cfd |
| SeDeleteObjectAuditAlarm | 0x55398aca | 55398aca |
| SeDeleteObjectAuditAlarmWithTransaction | 0xca20c01e | ca20c01e |
| SeEtwWriteKMCveEvent | 0x37422040 | 37422040 |
| SeExamineSacl | 0x861e7554 | 861e7554 |
| SeExports | 0x3739ad2d | 3739ad2d |
| SeFilterToken | 0x8d1ec8cd | 8d1ec8cd |
| SeFreePrivileges | 0xad15504c | ad15504c |
| SeGetCachedSigningLevel | 0x16ff77e5 | 16ff77e5 |
| SeGetLinkedToken | 0x98b97c54 | 98b97c54 |
| SeGetLogonSessionToken | 0xcf6c4e8c | cf6c4e8c |
| SeILSigningPolicyPtr | 0xc21b5c6 | c21b5c6 |
| SeImpersonateClient | 0x812ccbc0 | 812ccbc0 |
| SeImpersonateClientEx | 0xb32f0b1c | b32f0b1c |
| SeIsParentOfChildAppContainer | 0xccc59b92 | ccc59b92 |
| SeLocateProcessImageName | 0x8e6cbb0d | 8e6cbb0d |
| SeLockSubjectContext | 0x45c2ddbe | 45c2ddbe |
| SeMarkLogonSessionForTerminationNotification | 0x49d14319 | 49d14319 |
| SeMarkLogonSessionForTerminationNotificationEx | 0x450c6e3f | 450c6e3f |
| SeOpenObjectAuditAlarm | 0xfcb168bb | fcb168bb |
| SeOpenObjectAuditAlarmForNonObObject | 0x7af720f7 | 7af720f7 |
| SeOpenObjectAuditAlarmWithTransaction | 0x89104d5a | 89104d5a |
| SeOpenObjectForDeleteAuditAlarm | 0x5f2df14 | 5f2df14 |
| SeOpenObjectForDeleteAuditAlarmWithTransaction | 0x94c30da4 | 94c30da4 |
| SePrivilegeCheck | 0xe4cde1f4 | e4cde1f4 |
| SePrivilegeObjectAuditAlarm | 0x4492f063 | 4492f063 |
| SePublicDefaultDacl | 0x3af45b52 | 3af45b52 |
| SeQueryAuthenticationIdToken | 0x6584fad4 | 6584fad4 |
| SeQueryInformationToken | 0xef0ac411 | ef0ac411 |
| SeQuerySecureBootPlatformManifest | 0x674ca3d6 | 674ca3d6 |
| SeQuerySecureBootPolicyValue | 0x963b6a4e | 963b6a4e |
| SeQuerySecurityAttributesToken | 0x124bd5c5 | 124bd5c5 |
| SeQuerySecurityAttributesTokenAccessInformation | 0x83e456ef | 83e456ef |
| SeQuerySecurityDescriptorInfo | 0xdbc200f1 | dbc200f1 |
| SeQueryServerSiloToken | 0xa132597d | a132597d |
| SeQuerySessionIdToken | 0x6bdb7fe1 | 6bdb7fe1 |
| SeQuerySessionIdTokenEx | 0x6dff8ec7 | 6dff8ec7 |
| SeRegisterImageVerificationCallback | 0xdc6d051c | dc6d051c |
| SeRegisterLogonSessionTerminatedRoutine | 0x12652ff8 | 12652ff8 |
| SeRegisterLogonSessionTerminatedRoutineEx | 0x94bfe961 | 94bfe961 |
| SeReleaseSecurityDescriptor | 0x8ac2ced2 | 8ac2ced2 |
| SeReleaseSubjectContext | 0x64eaeb67 | 64eaeb67 |
| SeReportSecurityEvent | 0x2fbb526b | 2fbb526b |
| SeReportSecurityEventWithSubCategory | 0x7e73bf01 | 7e73bf01 |
| SeSecurityAttributePresent | 0xbb4f6cf5 | bb4f6cf5 |
| SeSetAccessStateGenericMapping | 0x319f24b5 | 319f24b5 |
| SeSetAuditParameter | 0x25ad75c2 | 25ad75c2 |
| SeSetSecurityAttributesToken | 0xc4778682 | c4778682 |
| SeSetSecurityAttributesTokenEx | 0xde1a1429 | de1a1429 |
| SeSetSecurityDescriptorInfo | 0xc9535e77 | c9535e77 |
| SeSetSecurityDescriptorInfoEx | 0x4d79e83d | 4d79e83d |
| SeShouldCheckForAccessRightsFromParent | 0x94926db2 | 94926db2 |
| SeSinglePrivilegeCheck | 0x16f65670 | 16f65670 |
| SeSrpAccessCheck | 0x37918fe | 37918fe |
| SeSystemDefaultDacl | 0xfff77fa1 | fff77fa1 |
| SeSystemDefaultSd | 0xb57fffbf | b57fffbf |
| SeTokenFromAccessInformation | 0x8754592e | 8754592e |
| SeTokenImpersonationLevel | 0xa2077b80 | a2077b80 |
| SeTokenIsAdmin | 0xa60d8abd | a60d8abd |
| SeTokenIsRestricted | 0x4a11994c | 4a11994c |
| SeTokenIsWriteRestricted | 0xdb20a38b | db20a38b |
| SeTokenObjectType | 0xf20475b3 | f20475b3 |
| SeTokenType | 0x9264e9f8 | 9264e9f8 |
| SeUnlockSubjectContext | 0x6dc38a0f | 6dc38a0f |
| SeUnregisterImageVerificationCallback | 0xe1cf8e5c | e1cf8e5c |
| SeUnregisterLogonSessionTerminatedRoutine | 0xa6658620 | a6658620 |
| SeUnregisterLogonSessionTerminatedRoutineEx | 0x96188bb1 | 96188bb1 |
| SeValidSecurityDescriptor | 0xe7bd4624 | e7bd4624 |
| SkAcquirePushLockExclusive | 0xbaba4b24 | baba4b24 |
| SkAllocatePool | 0xb7bd2a | b7bd2a |
| SkFreePool | 0x50849799 | 50849799 |
| SkInitializePushLock | 0xa9ecd66c | a9ecd66c |
| SkIsSecureKernel | 0x37ae510f | 37ae510f |
| SkQuerySecureKernelInformation | 0x52f68c13 | 52f68c13 |
| SkReleasePushLockExclusive | 0xbf42c020 | bf42c020 |
| TmCancelPropagationRequest | 0x1d506c91 | 1d506c91 |
| TmCommitComplete | 0xc97bf4e6 | c97bf4e6 |
| TmCommitEnlistment | 0x3ec06850 | 3ec06850 |
| TmCommitTransaction | 0xb1b0eafd | b1b0eafd |
| TmCreateEnlistment | 0x840468ff | 840468ff |
| TmCurrentTransaction | 0x60a30458 | 60a30458 |
| TmDereferenceEnlistmentKey | 0x2bbb83f3 | 2bbb83f3 |
| TmEnableCallbacks | 0x21667a19 | 21667a19 |
| TmEndPropagationRequest | 0x8e3528aa | 8e3528aa |
| TmEnlistmentObjectType | 0xdc339ca3 | dc339ca3 |
| TmFreezeTransactions | 0x46801e4a | 46801e4a |
| TmGetTransactionId | 0x344ac9d3 | 344ac9d3 |
| TmInitSystem | 0xd988ee72 | d988ee72 |
| TmInitSystemPhase2 | 0x5d14946f | 5d14946f |
| TmInitializeTransactionManager | 0x8374f516 | 8374f516 |
| TmIsKTMCommitCoordinator | 0x80cf1e73 | 80cf1e73 |
| TmIsTransactionActive | 0x1d3e4e54 | 1d3e4e54 |
| TmPrePrepareComplete | 0xe93f872f | e93f872f |
| TmPrePrepareEnlistment | 0x4d098ccf | 4d098ccf |
| TmPrepareComplete | 0x2b21c704 | 2b21c704 |
| TmPrepareEnlistment | 0xd608ddd6 | d608ddd6 |
| TmPropagationComplete | 0xbb9c91a5 | bb9c91a5 |
| TmPropagationFailed | 0xb54cd63f | b54cd63f |
| TmReadOnlyEnlistment | 0x40d5580 | 40d5580 |
| TmRecoverEnlistment | 0x1fbe7556 | 1fbe7556 |
| TmRecoverResourceManager | 0xc0595f22 | c0595f22 |
| TmRecoverTransactionManager | 0x94a686f4 | 94a686f4 |
| TmReferenceEnlistmentKey | 0x3f3d43e8 | 3f3d43e8 |
| TmRenameTransactionManager | 0x5b0f0255 | 5b0f0255 |
| TmRequestOutcomeEnlistment | 0xa012230b | a012230b |
| TmResourceManagerObjectType | 0x3ff40300 | 3ff40300 |
| TmRollbackComplete | 0x9eb81cb8 | 9eb81cb8 |
| TmRollbackEnlistment | 0x2f5fafa5 | 2f5fafa5 |
| TmRollbackTransaction | 0xc599d59b | c599d59b |
| TmSetCurrentTransaction | 0xfcb8e390 | fcb8e390 |
| TmSinglePhaseReject | 0x3c4a69dc | 3c4a69dc |
| TmThawTransactions | 0xb43a96ad | b43a96ad |
| TmTransactionManagerObjectType | 0x8e2e6562 | 8e2e6562 |
| TmTransactionObjectType | 0x68fa38f8 | 68fa38f8 |
| TtmNotifyDeviceArrival | 0x6613fcb3 | 6613fcb3 |
| TtmNotifyDeviceDeparture | 0xbfbc82d4 | bfbc82d4 |
| TtmNotifyDeviceInput | 0xa577e7a | a577e7a |
| VerSetConditionMask | 0xf361b1b3 | f361b1b3 |
| VfCheckNxPagePriority | 0x1c24338e | 1c24338e |
| VfCheckNxPageProtection | 0xb66e06ef | b66e06ef |
| VfCheckNxPoolType | 0x287b6e98 | 287b6e98 |
| VfFailDeviceNode | 0x52b47bc2 | 52b47bc2 |
| VfFailDriver | 0xbbf78975 | bbf78975 |
| VfFailSystemBIOS | 0x172fd4fb | 172fd4fb |
| VfInsertContext | 0x6df4cf76 | 6df4cf76 |
| VfIsRuleClassEnabled | 0x371501f9 | 371501f9 |
| VfIsVerificationEnabled | 0x69cc02a9 | 69cc02a9 |
| VfQueryDeviceContext | 0xbc196f50 | bc196f50 |
| VfQueryDispatchTable | 0xae64c041 | ae64c041 |
| VfQueryDriverContext | 0xc26711b8 | c26711b8 |
| VfQueryIrpContext | 0x30627e36 | 30627e36 |
| VfQueryThreadContext | 0xbd88ed49 | bd88ed49 |
| VfRemoveContext | 0xf95e12fe | f95e12fe |
| VslCreateSecureSection | 0xf2fa0c2 | f2fa0c2 |
| VslDeleteSecureSection | 0x1196c0c2 | 1196c0c2 |
| VslExchangeEntropy | 0x944366e9 | 944366e9 |
| VslGetSecurePciDeviceAlternateFunctionNumberForVtl0Dma | 0x5fe63e79 | 5fe63e79 |
| VslGetSecurePciEnabled | 0xd5f888d2 | d5f888d2 |
| VslQuerySecureDevice | 0x63824bc7 | 63824bc7 |
| VslRetrieveMailbox | 0x8eaf24e5 | 8eaf24e5 |
| WheaAddErrorSource | 0xab9a4b22 | ab9a4b22 |
| WheaAttemptPhysicalPageOffline | 0xbfcfc4b5 | bfcfc4b5 |
| WheaConfigureErrorSource | 0xcdcb3d3e | cdcb3d3e |
| WheaDeferredRecoveryService | 0xb983cdf0 | b983cdf0 |
| WheaGetErrorSource | 0xc39a4b2e | c39a4b2e |
| WheaInitializeDeferredRecoveryObject | 0x5bc77cc7 | 5bc77cc7 |
| WheaInitializeRecordHeader | 0xb9e84417 | b9e84417 |
| WheaLogInternalEvent | 0x126d347d | 126d347d |
| WheaRegisterInUsePageOfflineNotification | 0xea88ccc1 | ea88ccc1 |
| WheaReportHwError | 0x4733860c | 4733860c |
| WheaRequestDeferredRecovery | 0x22f5362b | 22f5362b |
| WheaUnregisterInUsePageOfflineNotification | 0xb741530 | b741530 |
| WmiGetClock | 0x2dd1d41d | 2dd1d41d |
| WmiQueryTraceInformation | 0xe98db077 | e98db077 |
| WmiTraceMessage | 0xcd3fae21 | cd3fae21 |
| WmiTraceMessageVa | 0xfeb89255 | feb89255 |
| XIPDispatch | 0x2e9bcf03 | 2e9bcf03 |
| ZwAccessCheckAndAuditAlarm | 0x82ccf919 | 82ccf919 |
| ZwAddBootEntry | 0x3ea5a509 | 3ea5a509 |
| ZwAddDriverEntry | 0x9baa79cb | 9baa79cb |
| ZwAdjustPrivilegesToken | 0xaf59488e | af59488e |
| ZwAlertThread | 0x8b4c8937 | 8b4c8937 |
| ZwAllocateLocallyUniqueId | 0x31ea7426 | 31ea7426 |
| ZwAllocateReserveObject | 0xf70d4eb4 | f70d4eb4 |
| ZwAllocateVirtualMemory | 0xf53cdaf3 | f53cdaf3 |
| ZwAllocateVirtualMemoryEx | 0xf36bd8ec | f36bd8ec |
| ZwAlpcAcceptConnectPort | 0x153fc017 | 153fc017 |
| ZwAlpcCancelMessage | 0xead45684 | ead45684 |
| ZwAlpcConnectPort | 0x4061e55d | 4061e55d |
| ZwAlpcConnectPortEx | 0x87957e19 | 87957e19 |
| ZwAlpcCreatePort | 0x28118e3e | 28118e3e |
| ZwAlpcCreatePortSection | 0xd0f82454 | d0f82454 |
| ZwAlpcCreateResourceReserve | 0x7fdb0695 | 7fdb0695 |
| ZwAlpcCreateSectionView | 0x65a3d423 | 65a3d423 |
| ZwAlpcCreateSecurityContext | 0xd68544bf | d68544bf |
| ZwAlpcDeletePortSection | 0xd0f8be1c | d0f8be1c |
| ZwAlpcDeleteResourceReserve | 0x1c5b069f | 1c5b069f |
| ZwAlpcDeleteSectionView | 0x65a46deb | 65a46deb |
| ZwAlpcDeleteSecurityContext | 0x730544c9 | 730544c9 |
| ZwAlpcDisconnectPort | 0xbd13b5bb | bd13b5bb |
| ZwAlpcOpenSenderProcess | 0x1c3217e1 | 1c3217e1 |
| ZwAlpcOpenSenderThread | 0x7843182c | 7843182c |
| ZwAlpcQueryInformation | 0xfc643d86 | fc643d86 |
| ZwAlpcQueryInformationMessage | 0xf48cfd90 | f48cfd90 |
| ZwAlpcSendWaitReceivePort | 0x34a926b3 | 34a926b3 |
| ZwAlpcSetInformation | 0xd00d757e | d00d757e |
| ZwAssignProcessToJobObject | 0x8ad00cc7 | 8ad00cc7 |
| ZwAssociateWaitCompletionPacket | 0xcd4fd420 | cd4fd420 |
| ZwCancelIoFile | 0x2c26d8e4 | 2c26d8e4 |
| ZwCancelIoFileEx | 0x9b6399c8 | 9b6399c8 |
| ZwCancelTimer | 0xfa0ed249 | fa0ed249 |
| ZwCancelWaitCompletionPacket | 0x34061a1b | 34061a1b |
| ZwClearEvent | 0x57717175 | 57717175 |
| ZwClose | 0x7267cadc | 7267cadc |
| ZwCloseObjectAuditAlarm | 0x7a7f2eaa | 7a7f2eaa |
| ZwCommitComplete | 0xc97c2766 | c97c2766 |
| ZwCommitEnlistment | 0x3f8a6850 | 3f8a6850 |
| ZwCommitRegistryTransaction | 0x61e8decd | 61e8decd |
| ZwCommitTransaction | 0xcaf0eafd | caf0eafd |
| ZwCompareTokens | 0x58699e4f | 58699e4f |
| ZwConnectPort | 0xea041c43 | ea041c43 |
| ZwCreateDirectoryObject | 0xd9203fc6 | d9203fc6 |
| ZwCreateEnlistment | 0x84ce68ff | 84ce68ff |
| ZwCreateEvent | 0xab274a5f | ab274a5f |
| ZwCreateFile | 0x5d598726 | 5d598726 |
| ZwCreateIoCompletion | 0x39a5c630 | 39a5c630 |
| ZwCreateJobObject | 0xa711580f | a711580f |
| ZwCreateKey | 0xaeadfc3 | aeadfc3 |
| ZwCreateKeyTransacted | 0xeb5a7dd3 | eb5a7dd3 |
| ZwCreatePartition | 0xf1866f1d | f1866f1d |
| ZwCreateProcessEx | 0xf46126f | f46126f |
| ZwCreateProfileEx | 0x15825a6f | 15825a6f |
| ZwCreateRegistryTransaction | 0xe1fec775 | e1fec775 |
| ZwCreateResourceManager | 0x13237f0a | 13237f0a |
| ZwCreateSection | 0xfb0c60fd | fb0c60fd |
| ZwCreateSymbolicLinkObject | 0xb27e5f1b | b27e5f1b |
| ZwCreateTimer | 0xac10e93d | ac10e93d |
| ZwCreateTransaction | 0x737100e6 | 737100e6 |
| ZwCreateTransactionManager | 0xa49a3059 | a49a3059 |
| ZwCreateWaitCompletionPacket | 0x44bdb7ab | 44bdb7ab |
| ZwCreateWnfStateName | 0x9092ea1b | 9092ea1b |
| ZwDeleteBootEntry | 0xa1438e1e | a1438e1e |
| ZwDeleteDriverEntry | 0x134ecf56 | 134ecf56 |
| ZwDeleteFile | 0x5d599a5f | 5d599a5f |
| ZwDeleteKey | 0xd2eae05c | d2eae05c |
| ZwDeleteValueKey | 0xa7298f30 | a7298f30 |
| ZwDeleteWnfStateData | 0x90a123f7 | 90a123f7 |
| ZwDeleteWnfStateName | 0x90a6231b | 90a6231b |
| ZwDeviceIoControlFile | 0xca986b0d | ca986b0d |
| ZwDisplayString | 0x63d538c0 | 63d538c0 |
| ZwDuplicateObject | 0x1c652f7f | 1c652f7f |
| ZwDuplicateToken | 0x5939ad83 | 5939ad83 |
| ZwEnumerateBootEntries | 0xde2204a2 | de2204a2 |
| ZwEnumerateDriverEntries | 0xe231509f | e231509f |
| ZwEnumerateKey | 0xddbaca19 | ddbaca19 |
| ZwEnumerateTransactionObject | 0xf52d76c2 | f52d76c2 |
| ZwEnumerateValueKey | 0x213f2f04 | 213f2f04 |
| ZwFlushBuffersFile | 0x9c250720 | 9c250720 |
| ZwFlushBuffersFileEx | 0x941c8b88 | 941c8b88 |
| ZwFlushInstructionCache | 0xfe24c7ce | fe24c7ce |
| ZwFlushKey | 0xf170f264 | f170f264 |
| ZwFlushVirtualMemory | 0x1c0f08a1 | 1c0f08a1 |
| ZwFreeVirtualMemory | 0xae08eced | ae08eced |
| ZwFsControlFile | 0xff7f1b14 | ff7f1b14 |
| ZwGetCachedSigningLevel | 0x17015be5 | 17015be5 |
| ZwGetNextProcess | 0x766b2cdc | 766b2cdc |
| ZwGetNextThread | 0x5314e0d4 | 5314e0d4 |
| ZwGetNotificationResourceManager | 0x15be384b | 15be384b |
| ZwImpersonateAnonymousToken | 0xbb6a563f | bb6a563f |
| ZwInitiatePowerAction | 0x2e66cd79 | 2e66cd79 |
| ZwIsProcessInJob | 0x4a16ae1 | 4a16ae1 |
| ZwLoadDriver | 0xbe3c5733 | be3c5733 |
| ZwLoadKey | 0xe44396e4 | e44396e4 |
| ZwLoadKeyEx | 0xe5b9ca9 | e5b9ca9 |
| ZwLockFile | 0x8ce06b61 | 8ce06b61 |
| ZwLockProductActivationKeys | 0x89441a88 | 89441a88 |
| ZwLockVirtualMemory | 0xae0ed479 | ae0ed479 |
| ZwMakeTemporaryObject | 0xaeaf8930 | aeaf8930 |
| ZwManagePartition | 0x8152717c | 8152717c |
| ZwMapViewOfSection | 0x324865b9 | 324865b9 |
| ZwModifyBootEntry | 0x230e1072 | 230e1072 |
| ZwModifyDriverEntry | 0x3d581d5d | 3d581d5d |
| ZwNotifyChangeDirectoryFile | 0xed041d44 | ed041d44 |
| ZwNotifyChangeDirectoryFileEx | 0x10751ccc | 10751ccc |
| ZwNotifyChangeKey | 0x9928ebd7 | 9928ebd7 |
| ZwNotifyChangeSession | 0xbd54c4de | bd54c4de |
| ZwOpenDirectoryObject | 0x2da1b39 | 2da1b39 |
| ZwOpenEnlistment | 0x61bc2214 | 61bc2214 |
| ZwOpenEvent | 0x2203d4ce | 2203d4ce |
| ZwOpenFile | 0xd1106b79 | d1106b79 |
| ZwOpenJobObject | 0x4df8c5d8 | 4df8c5d8 |
| ZwOpenKey | 0xa68896e5 | a68896e5 |
| ZwOpenKeyEx | 0x225b9fb2 | 225b9fb2 |
| ZwOpenKeyTransacted | 0xc7e4ec4a | c7e4ec4a |
| ZwOpenKeyTransactedEx | 0x93b13437 | 93b13437 |
| ZwOpenPartition | 0x986ddce6 | 986ddce6 |
| ZwOpenProcess | 0xc7ed8b5d | c7ed8b5d |
| ZwOpenProcessToken | 0xc1091424 | c1091424 |
| ZwOpenProcessTokenEx | 0x24509c1c | 24509c1c |
| ZwOpenRegistryTransaction | 0x99216313 | 99216313 |
| ZwOpenResourceManager | 0x3cdd5a7c | 3cdd5a7c |
| ZwOpenSection | 0x6d361ad9 | 6d361ad9 |
| ZwOpenSession | 0x6e359ad9 | 6e359ad9 |
| ZwOpenSymbolicLinkObject | 0xa03773f8 | a03773f8 |
| ZwOpenThread | 0x5da0f3c8 | 5da0f3c8 |
| ZwOpenThreadToken | 0x96347af5 | 96347af5 |
| ZwOpenThreadTokenEx | 0xd1ebdf70 | d1ebdf70 |
| ZwOpenTimer | 0x22ed73ac | 22ed73ac |
| ZwOpenTransaction | 0x11282382 | 11282382 |
| ZwOpenTransactionManager | 0x92534536 | 92534536 |
| ZwPowerInformation | 0xf6377897 | f6377897 |
| ZwPrePrepareComplete | 0x113f8733 | 113f8733 |
| ZwPrePrepareEnlistment | 0x4d09996f | 4d09996f |
| ZwPrepareComplete | 0x2b281704 | 2b281704 |
| ZwPrepareEnlistment | 0xef48ddd6 | ef48ddd6 |
| ZwPropagationComplete | 0xbb9c920a | bb9c920a |
| ZwPropagationFailed | 0xce8cd63f | ce8cd63f |
| ZwProtectVirtualMemory | 0xd374024 | d374024 |
| ZwPulseEvent | 0xbd731ab1 | bd731ab1 |
| ZwQueryBootEntryOrder | 0x738c6377 | 738c6377 |
| ZwQueryBootOptions | 0x10c642f9 | 10c642f9 |
| ZwQueryDefaultLocale | 0xf9dff007 | f9dff007 |
| ZwQueryDefaultUILanguage | 0x4dca88c | 4dca88c |
| ZwQueryDirectoryFile | 0x8a1fe47 | 8a1fe47 |
| ZwQueryDirectoryFileEx | 0x87f9253a | 87f9253a |
| ZwQueryDirectoryObject | 0x998828f6 | 998828f6 |
| ZwQueryDriverEntryOrder | 0x2e4e5f75 | 2e4e5f75 |
| ZwQueryEaFile | 0xad07ba99 | ad07ba99 |
| ZwQueryFullAttributesFile | 0x982fe3bf | 982fe3bf |
| ZwQueryInformationByName | 0xbe267282 | be267282 |
| ZwQueryInformationEnlistment | 0x35545a8d | 35545a8d |
| ZwQueryInformationFile | 0x1f714d5d | 1f714d5d |
| ZwQueryInformationJobObject | 0x1495879c | 1495879c |
| ZwQueryInformationProcess | 0x38df328e | 38df328e |
| ZwQueryInformationResourceManager | 0x2e848aed | 2e848aed |
| ZwQueryInformationThread | 0xe1288101 | e1288101 |
| ZwQueryInformationToken | 0xef0ca811 | ef0ca811 |
| ZwQueryInformationTransaction | 0x842f329c | 842f329c |
| ZwQueryInformationTransactionManager | 0x2a8bbe0a | 2a8bbe0a |
| ZwQueryInstallUILanguage | 0xc4c1f3f0 | c4c1f3f0 |
| ZwQueryIntervalProfile | 0xc0926d17 | c0926d17 |
| ZwQueryKey | 0x116972bf | 116972bf |
| ZwQueryLicenseValue | 0xbe77c9bf | be77c9bf |
| ZwQueryObject | 0xc129a988 | c129a988 |
| ZwQueryQuotaInformationFile | 0x5573fef4 | 5573fef4 |
| ZwQuerySection | 0x2accc8e7 | 2accc8e7 |
| ZwQuerySecurityAttributesToken | 0x125af5c5 | 125af5c5 |
| ZwQuerySecurityObject | 0x3ac2025c | 3ac2025c |
| ZwQuerySymbolicLinkObject | 0xa7163f4f | a7163f4f |
| ZwQuerySystemEnvironmentValueEx | 0x81f97390 | 81f97390 |
| ZwQuerySystemInformation | 0x42632b16 | 42632b16 |
| ZwQuerySystemInformationEx | 0x8cac6221 | 8cac6221 |
| ZwQueryTimerResolution | 0x4f4f476 | 4f4f476 |
| ZwQueryValueKey | 0x6ba68c55 | 6ba68c55 |
| ZwQueryVirtualMemory | 0x1d778883 | 1d778883 |
| ZwQueryVolumeInformationFile | 0x95b09842 | 95b09842 |
| ZwQueryWnfStateData | 0x62ed6bc7 | 62ed6bc7 |
| ZwQueryWnfStateNameInformation | 0xd72f5518 | d72f5518 |
| ZwReadFile | 0x8706b8f | 8706b8f |
| ZwReadOnlyEnlistment | 0x2c0d5583 | 2c0d5583 |
| ZwRecoverEnlistment | 0x38fe7556 | 38fe7556 |
| ZwRecoverResourceManager | 0xc08bdf22 | c08bdf22 |
| ZwRecoverTransactionManager | 0xd4a6870d | d4a6870d |
| ZwRemoveIoCompletion | 0x3b7909b4 | 3b7909b4 |
| ZwRemoveIoCompletionEx | 0xe426da05 | e426da05 |
| ZwRenameKey | 0x4a7aee5d | 4a7aee5d |
| ZwReplaceKey | 0xf74a61b4 | f74a61b4 |
| ZwRequestPort | 0xa3edf7c | a3edf7c |
| ZwRequestWaitReplyPort | 0x2485a141 | 2485a141 |
| ZwResetEvent | 0x5b734ae6 | 5b734ae6 |
| ZwRestoreKey | 0x143a61cf | 143a61cf |
| ZwRollbackComplete | 0x9f821cb8 | 9f821cb8 |
| ZwRollbackEnlistment | 0x575fafa8 | 575fafa8 |
| ZwRollbackRegistryTransaction | 0xad3e1c8 | ad3e1c8 |
| ZwRollbackTransaction | 0xc599d600 | c599d600 |
| ZwSaveKey | 0x899416e6 | 899416e6 |
| ZwSaveKeyEx | 0x505ba33e | 505ba33e |
| ZwSecureConnectPort | 0xd83a5df0 | d83a5df0 |
| ZwSetBootEntryOrder | 0x17b9f45c | 17b9f45c |
| ZwSetBootOptions | 0x328f8b54 | 328f8b54 |
| ZwSetCachedSigningLevel | 0x17015ca5 | 17015ca5 |
| ZwSetDefaultLocale | 0x1f015c8f | 1f015c8f |
| ZwSetDefaultUILanguage | 0xcd4efaa2 | cd4efaa2 |
| ZwSetDriverEntryOrder | 0xe491f205 | e491f205 |
| ZwSetEaFile | 0x91abe82a | 91abe82a |
| ZwSetEvent | 0x2c985be6 | 2c985be6 |
| ZwSetInformationEnlistment | 0x56c0e1b2 | 56c0e1b2 |
| ZwSetInformationFile | 0xa52369f1 | a52369f1 |
| ZwSetInformationJobObject | 0x3da0ebd5 | 3da0ebd5 |
| ZwSetInformationKey | 0x65292ed9 | 65292ed9 |
| ZwSetInformationObject | 0x9f36d368 | 9f36d368 |
| ZwSetInformationProcess | 0x47297567 | 47297567 |
| ZwSetInformationResourceManager | 0x78c763fb | 78c763fb |
| ZwSetInformationThread | 0xa99ad318 | a99ad318 |
| ZwSetInformationToken | 0xa5503aa2 | a5503aa2 |
| ZwSetInformationTransaction | 0xb1c01740 | b1c01740 |
| ZwSetInformationVirtualMemory | 0xde0d782 | de0d782 |
| ZwSetIntervalProfile | 0x464489ac | 464489ac |
| ZwSetIoCompletion | 0x452e5264 | 452e5264 |
| ZwSetIoCompletionEx | 0xb9499a2c | b9499a2c |
| ZwSetQuotaInformationFile | 0x7e7f632d | 7e7f632d |
| ZwSetSecurityObject | 0xdeef9340 | deef9340 |
| ZwSetSystemEnvironmentValueEx | 0xc58c0446 | c58c0446 |
| ZwSetSystemInformation | 0xad57d2d | ad57d2d |
| ZwSetSystemTime | 0x3556a62e | 3556a62e |
| ZwSetTimer | 0x2d81fac4 | 2d81fac4 |
| ZwSetTimerEx | 0x7eb19ce | 7eb19ce |
| ZwSetTimerResolution | 0x8aa7110a | 8aa7110a |
| ZwSetValueKey | 0xfc5ccfe7 | fc5ccfe7 |
| ZwSetVolumeInformationFile | 0xb71d1f67 | b71d1f67 |
| ZwStartProfile | 0x86814855 | 86814855 |
| ZwStopProfile | 0xc7ffa47f | c7ffa47f |
| ZwTerminateJobObject | 0x1d9c3aad | 1d9c3aad |
| ZwTerminateProcess | 0xfd21743a | fd21743a |
| ZwTraceControl | 0x40f05d41 | 40f05d41 |
| ZwTraceEvent | 0xbd739755 | bd739755 |
| ZwTranslateFilePath | 0xfd442357 | fd442357 |
| ZwUnloadDriver | 0x2b9c57ef | 2b9c57ef |
| ZwUnloadKey | 0xe5ba71a4 | e5ba71a4 |
| ZwUnloadKey2 | 0xb74e34ce | b74e34ce |
| ZwUnloadKeyEx | 0xe9c69cae | e9c69cae |
| ZwUnlockFile | 0xbbbbc361 | bbbbc361 |
| ZwUnlockVirtualMemory | 0x190eda55 | 190eda55 |
| ZwUnmapViewOfSection | 0xda065e8 | da065e8 |
| ZwUpdateWnfStateData | 0x92cbe2f7 | 92cbe2f7 |
| ZwWaitForMultipleObjects | 0xe2a7a2a6 | e2a7a2a6 |
| ZwWaitForSingleObject | 0x18158390 | 18158390 |
| ZwWriteFile | 0x2febec90 | 2febec90 |
| ZwYieldExecution | 0xd1cb69a0 | d1cb69a0 |
| __C_specific_handler | 0x33fbf826 | 33fbf826 |
| __chkstk | 0x8cb75dfb | 8cb75dfb |
| __misaligned_access | 0x6ddb096 | 6ddb096 |
| _finite | 0x92c8b2fd | 92c8b2fd |
| _i64toa_s | 0xef7972a8 | ef7972a8 |
| _i64tow_s | 0xef79caa8 | ef79caa8 |
| _itoa | 0x6265e41 | 6265e41 |
| _itoa_s | 0x9979106b | 9979106b |
| _itow | 0x6265e57 | 6265e57 |
| _itow_s | 0x9979686b | 9979686b |
| _local_unwind | 0xd8e5f6a2 | d8e5f6a2 |
| _ltoa_s | 0x9f79106b | 9f79106b |
| _ltow_s | 0x9f79686b | 9f79686b |
| _makepath_s | 0x27d5b0c5 | 27d5b0c5 |
| _purecall | 0x2a83748a | 2a83748a |
| _setjmp | 0xac8bb628 | ac8bb628 |
| _setjmpex | 0x2ed8afca | 2ed8afca |
| _snprintf | 0x6756a99a | 6756a99a |
| _snprintf_s | 0x5aa675f0 | 5aa675f0 |
| _snscanf_s | 0x8c54fae0 | 8c54fae0 |
| _snwprintf | 0xa7629d74 | a7629d74 |
| _snwprintf_s | 0x8a75def0 | 8a75def0 |
| _snwscanf_s | 0x8dd37628 | 8dd37628 |
| _splitpath_s | 0x17a61bb9 | 17a61bb9 |
| _stricmp | 0xaf561d25 | af561d25 |
| _strlwr | 0xad7abf6a | ad7abf6a |
| _strnicmp | 0xeb167cc5 | eb167cc5 |
| _strnset | 0xaf58dc29 | af58dc29 |
| _strnset_s | 0x6370b310 | 6370b310 |
| _strrev | 0xad7ad52e | ad7ad52e |
| _strset | 0xad7ad92c | ad7ad92c |
| _strset_s | 0xeb64bf08 | eb64bf08 |
| _strtoui64 | 0x6f3881b1 | 6f3881b1 |
| _strupr | 0xad7ae28a | ad7ae28a |
| _swprintf | 0xa756a99c | a756a99c |
| _ui64toa_s | 0xef8568a8 | ef8568a8 |
| _ui64tow_s | 0xef85c0a8 | ef85c0a8 |
| _ultoa_s | 0x1f791369 | 1f791369 |
| _ultow_s | 0x1f796b69 | 1f796b69 |
| _vsnprintf | 0x6762a09a | 6762a09a |
| _vsnprintf_s | 0x8a8275f0 | 8a8275f0 |
| _vsnwprintf | 0xa8e17d74 | a8e17d74 |
| _vsnwprintf_s | 0x85f5def6 | 85f5def6 |
| _vswprintf | 0xa762a09c | a762a09c |
| _wcsicmp | 0x8d661d26 | 8d661d26 |
| _wcslwr | 0xb46b3f6a | b46b3f6a |
| _wcslwr_s | 0xacfdb724 | acfdb724 |
| _wcsnicmp | 0xad167ce1 | ad167ce1 |
| _wcsnset | 0x8d68dc2a | 8d68dc2a |
| _wcsnset_s | 0xa370b688 | a370b688 |
| _wcsrev | 0xb46b552e | b46b552e |
| _wcsset_s | 0xad64bf24 | ad64bf24 |
| _wcsupr | 0xb46b628a | b46b628a |
| _wmakepath_s | 0x57b5b0c5 | 57b5b0c5 |
| _wsplitpath_s | 0x13a61bbf | 13a61bbf |
| _wtoi | 0x62d5e49 | 62d5e49 |
| _wtol | 0x62d5e4c | 62d5e4c |
| atoi | 0x325e49 | 325e49 |
| atol | 0x325e4c | 325e4c |
| bsearch | 0x6c8254e1 | 6c8254e1 |
| bsearch_s | 0x9539205 | 9539205 |
| isdigit | 0x2c7629af | 2c7629af |
| islower | 0x2cf9692d | 2cf9692d |
| isprint | 0x2d3ab24f | 2d3ab24f |
| isspace | 0x2d6990e0 | 2d6990e0 |
| isupper | 0x2d89cd2d | 2d89cd2d |
| iswalnum | 0xb447ca72 | b447ca72 |
| iswdigit | 0xb4762cf9 | b4762cf9 |
| iswspace | 0xb569942a | b569942a |
| isxdigit | 0xb6762cf9 | b6762cf9 |
| longjmp | 0xe515362b | e515362b |
| mbstowcs | 0x6d796c54 | 6d796c54 |
| mbtowc | 0xe05bcb43 | e05bcb43 |
| memchr | 0xe0881972 | e0881972 |
| memcmp | 0xe0881a10 | e0881a10 |
| memcpy | 0xe0881a79 | e0881a79 |
| memcpy_s | 0x2069f3d5 | 2069f3d5 |
| memmove | 0x11084b41 | 11084b41 |
| memmove_s | 0x212d1097 | 212d1097 |
| memset | 0xe0885914 | e0885914 |
| psMUITest | 0xeebc167f | eebc167f |
| qsort | 0x74b4ab4 | 74b4ab4 |
| qsort_s | 0x2d2adc70 | 2d2adc70 |
| rand | 0x3a9224 | 3a9224 |
| sprintf | 0xa7564703 | a7564703 |
| sprintf_s | 0x591c1af0 | 591c1af0 |
| sqrt | 0x3b52b4 | 3b52b4 |
| sqrtf | 0x76a56e6 | 76a56e6 |
| srand | 0x76a9224 | 76a9224 |
| sscanf_s | 0x8c48a808 | 8c48a808 |
| strcat | 0xed7a9894 | ed7a9894 |
| strcat_s | 0xea626008 | ea626008 |
| strchr | 0xed7a9972 | ed7a9972 |
| strcmp | 0xed7a9a10 | ed7a9a10 |
| strcpy | 0xed7a9a79 | ed7a9a79 |
| strcpy_s | 0xea69f408 | ea69f408 |
| strlen | 0xed7abd0e | ed7abd0e |
| strncat | 0xaf5898b1 | af5898b1 |
| strncat_s | 0x6262d310 | 6262d310 |
| strncmp | 0xaf589a2d | af589a2d |
| strncpy | 0xaf589a96 | af589a96 |
| strncpy_s | 0x626a6710 | 626a6710 |
| strnlen | 0xaf58bd2b | af58bd2b |
| strrchr | 0xaf5a998f | af5a998f |
| strspn | 0xed7ada6e | ed7ada6e |
| strstr | 0xed7adaf2 | ed7adaf2 |
| strtok_s | 0xeb793c08 | eb793c08 |
| swprintf | 0xa7564a9c | a7564a9c |
| swprintf_s | 0x592a7ef0 | 592a7ef0 |
| swscanf_s | 0x8c491b28 | 8c491b28 |
| tolower | 0xe4f9692f | e4f9692f |
| toupper | 0xe589cd2f | e589cd2f |
| towlower | 0xb4f96cce | b4f96cce |
| towupper | 0xb589d0ce | b589d0ce |
| vDbgPrintEx | 0xeca9be64 | eca9be64 |
| vDbgPrintExWithPrefix | 0xa0f324f9 | a0f324f9 |
| vsprintf | 0xa7564ab3 | a7564ab3 |
| vsprintf_s | 0x592adaf0 | 592adaf0 |
| vswprintf_s | 0x5b027ef0 | 5b027ef0 |
| wcscat | 0xf46b1894 | f46b1894 |
| wcscat_s | 0xac626024 | ac626024 |
| wcschr | 0xf46b1972 | f46b1972 |
| wcscmp | 0xf46b1a10 | f46b1a10 |
| wcscpy | 0xf46b1a79 | f46b1a79 |
| wcscpy_s | 0xac69f424 | ac69f424 |
| wcscspn | 0x8d635a8c | 8d635a8c |
| wcslen | 0xf46b3d0e | f46b3d0e |
| wcsncat | 0x8d6898b2 | 8d6898b2 |
| wcsncat_s | 0xa262d688 | a262d688 |
| wcsncmp | 0x8d689a2e | 8d689a2e |
| wcsncpy | 0x8d689a97 | 8d689a97 |
| wcsncpy_s | 0xa26a6a88 | a26a6a88 |
| wcsnlen | 0x8d68bd2c | 8d68bd2c |
| wcsrchr | 0x8d6a9990 | 8d6a9990 |
| wcsspn | 0xf46b5a6e | f46b5a6e |
| wcsstr | 0xf46b5af2 | f46b5af2 |
| wcstombs | 0xad794484 | ad794484 |
| wcstoul | 0x8d6bcb2a | 8d6bcb2a |
| wctomb | 0xf46bca02 | f46bca02 |
tags: #API lookup