blob: dc01569d78eb16231644a9df07724aba33422a9f (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
|
MiZeroPhysicalPage
ExReleaseResourceLite
MmZeroPageThread
IopParseDevice
ExAllocatePoolWithTag
ExInterlockedPopEntrySList
ExFreePoolWithTag
CcMapData
RtlFindClearBits
memmove
CcFindBcb
IoAllocateIrp
FsRtlDissectName
KiInterruptDispatch
CcFastCopyRead
FsRtlIsNameInExpressionPrivate
RtlCompareMemory
MmCopyToCachedPage
RtlUpcaseUnicodeToOemN
CcPinFileData
ObpCaptureObjectCreateInformation
CcGetVirtualAddress
KiDispatchInterrupt
RtlCompareUnicodeString
Exfi386InterlockedDecrementLong
ExpAcquireResourceExclusiveLite
IofCompleteRequest
CcFastCopyWrite
MiFlushSectionInternal
RtlTimeToTimeFields
PsImpersonateClient
RtlSplay
IopAllocateIrp
ObOpenObjectByName
Exfi386InterlockedExchangeUlong
ExAcquireSharedWaitForExclusive
ObReferenceObjectByHandle
ExAcquireResourceSharedLite
ExInterlockedPushEntrySList
CcMapAndRead
FsRtlLookupLargeMcbEntry
InterlockedDecrement
SeCreateAccessState
ObpLookupObjectName
FsRtlIsFatDbcsLegal
ExfInterlockedAddUlong
MmProbeAndLockPages
CcUnpinFileData
ObpCaptureObjectName
ExAcquireHandleTableShared
IoCreateFile
ObfDereferenceObject
InterlockedIncrement
CcSetDirtyPinnedData
KeLeaveCriticalRegion
ExFreePool
CcUnpinData
IoFreeIrp
MmCheckCachedPageState
RtlEqualUnicodeString
RtlIsNameLegalDOS8Dot3
MiCleanSection
CcInitializeCacheMap
FsRtlFindLargeIndex
CcMapAndCopy
CcPinMappedData
MiRemovePageByColor
MmUnmapViewInSystemCache
RtlpCaptureContext
RtlFillMemoryUlong
ObpAllocateObject
RtlCopyUnicodeString
CcFreeVirtualAddress
ExAcquireFastMutexUnsafe
IopDeleteFile
FsRtlAllocateResource
KiSetCR0Bits
ExInterlockedCompareExchange64
ExAllocatePool
IoGetRelatedDeviceObject
KeRemoveQueue
ExReleaseHandleTableShared
CcAcquireByteRangeForWrite
IofCallDriver
FsRtlCheckOplock
ElapsedDaysToYears
IopCloseFile
KefAcquireSpinLockAtDpcLevel
ObpIncrementHandleCount
ExTryToAcquireResourceExclusiveLite
FsRtlAddToTunnelCache
IopCompleteRequest
CcFlushCache
CcGetVirtualAddressIfMapped
IoSetThreadHardErrorMode
ObCreateObject
IoFastQueryNetworkAttributes
CcPrepareMdlWrite
CcCanIWrite
CcWriteBehind
RtlExtendedMagicDivide
MiLocateAndReserveWsle
NtSetInformationFile
ObpAllocateObjectNameBuffer
CcLazyWriteScan
RtlNtStatusToDosErrorNoTeb
KeReadStateQueue
MiCheckProtoPtePageState
ObReferenceObjectByPointer
CcAllocateInitializeBcb
PsReferencePrimaryToken
CcSetDirtyInMask
FsRtlFindInTunnelCache
IopParseFile
KeSynchronizeExecution
_NLG_Return2
KeQuerySystemTime
CcGetVacbMiss
NtClose
ObpDecrementHandleCount
IoGetInitialStack
ObpCreateHandle
MiInsertPageInList
MiWaitForInPageComplete
FsRtlGetNextLargeMcbEntry
IopCheckDeviceAndDriver
KeInsertHeadQueue
MiDecrementShareCount2
RtlUpcaseUnicodeStringToOemString
ExAcquireSharedStarveExclusive
ExpFindCurrentThread
_abnormal_termination
CcMdlRead
CcUninitializeCacheMap
RtlUnicodeToOemN
FsRtlOplockFsctrl
IoAllocateMdl
ExReleaseHandleTableExclusive
MmSetAddressRangeModified
CcSetFileSizes
ExCreateHandle
KeEnterCriticalRegion
MiDecrementReferenceCount
MmUnlockPages
ObpFreeObject
PsAssignImpersonationToken
RtlMapGenericMask
CcCopyRead
PsReferenceImpersonationToken
IoGetRequestorProcess
SeTokenType
ObpFreeObjectNameBuffer
RtlUpcaseUnicodeString
IopCheckBackupRestorePrivilege
MmMapViewInSystemCache
RtlCompressChunks
RtlInsertElementGenericTable
CcPinRead
IoBuildSynchronousFsdRequest
MmFlushSection
IoAllocateErrorLogEntry
MiAllocatePoolPages
RtlUpcaseUnicodeChar
MmPurgeSection
FsRtlFastCheckLockForRead
MiReserveSystemPtes
PsOpenTokenOfProcess
FsRtlOplockCleanup
IoIsOperationSynchronous
MiFreePoolPages
SeAssignSecurity
SeDeleteAccessState
FsRtlRequestExclusiveOplock
IoBuildPartialMdl
IoCheckFunctionAccess
PsChargeSharedPoolQuota
RtlAreAnyAccessesGranted
FsRtlUninitializeOplock
IoEnqueueIrp
MmCreateSection
ObpDeleteNameCheck
IoCancelIrp
RtlpDidUnicodeToOemWork
CcFreeActiveVacb
ExAllocateFromPagedLookasideList
ExIsResourceAcquiredExclusiveLite
SeCaptureSubjectContext
DebugService
KeGetCurrentThread
MiCreateDataFileMap
RtlpGetStackLimits
CcMdlWriteComplete2
IoSetShareAccess
KeResetEvent
MiLocateWsle
MiUnlinkPageFromList
ObpRemoveObjectRoutine
ObWaitForSingleObject
CcPreparePinWrite
PspDeleteThreadSecurity
SeComputeQuotaInformationSize
ExDestroyHandle
FsRtlDoesNameContainWildCards
MiRemoveMappedPtes
MiUpdateWsle
RawCheckForDismount
RtlOemToUnicodeN
SeUnlockSubjectContext
CcWorkerThread
ExInitializeResourceLite
ExpAcquireResourceSharedLite
ExpWaitForResource
FsRtlIsNameInExpression
FsRtlOplockBreakToII
FsRtlPruneTunnelCache
MiDispatchFault
IoFreeMdl
IoInitializeIrp
KefReleaseSpinLockFromDpcLevel
KeInsertQueue
KeWaitForSingleObject
MiCheckControlArea
ObpIncrementUnnamedHandleCount
RtlDowncaseUnicodeString
RtlUnicodeStringToOemString
SepFilterPrivilegeAudits
ExAcquireHandleTableExclusive
FsRtlAreNamesEqual
IopDereferenceVpbAndFree
KeInitializeDpc
ObpLookupDirectoryEntry
CcDeallocateBcb
ExMapHandleToPointer
FsRtlRemoveMcbEntryPrivate
IopQueryName
IoSetTopLevelIrp
CcCopyReadExceptionFilter
ExGetSharedWaiterCount
ExInterlockedAddLargeInteger
ExpWorkerThread
ExReinitializeResourceLite
FsRtlFastCheckLockForWrite
FsRtlFastUnlockSingleExclusive
MmAccessFault
MmMapLockedPages
RtlOemStringToUnicodeString
RtlTimeToSecondsSince1970
RtlUpcaseUnicodeStringToCountedOemString
FsRtlRemoveLargeMcbEntry
IoGetTopLevelIrp
KeInsertDeviceQueue
MiRemoveZeroPage
RtlDelete
SeTokenImpersonationLevel
CcGetDirtyPages
ExDeletePagedLookasideList
FsRtlAddLargeMcbEntry
FsRtlFindFirstOverlappingExclusiveNode
IopErrorLogRequeueEntry
MiReleaseSystemPtes
ObpChargeQuotaForObject
RtlpLengthInheritedAce
SeSetAccessStateGenericMapping
CcPerformReadAhead
FsRtlRemoveAndCompleteWaitIrp
IoAcquireCancelSpinLock
IoBuildDeviceIoControlRequest
IoCheckShareAccess
IoSynchronousPageWrite
MiInitializeReadInProgressPfn
RtlUnicodeStringToCountedOemString
CcDeleteSharedCacheMap
ExSystemTimeToLocalTime
FsRtlAllocateOplock
FsRtlDeregisterUncProvider
FsRtlTruncateLargeMcb
FsRtlWaitOnIrp
IopCheckVpbMounted
KeInsertQueueDpc
KiSwapThread
MiInitializePfn
MmIsAddressValid
ObGetObjectPointerCount
RtlPrefixUnicodeString
VdmpDelayIntApcRoutine
ExFreeToPagedLookasideList
ExpAcquireSharedStarveExclusive
FsRtlOplockIsFastIoPossible
MiReleaseWsle
MiRemoveUnusedSegments
MiReserveSystemPtes2
ObSetSecurityDescriptorInfo
_allmul
ExAllocatePoolWithQuotaTag
FsRtlAcquireFileForCcFlush
IoStartPacket
KeInitializeEvent
KeWaitForMultipleObjects
MiInitializeCopyOnWritePfn
MiRemovePageFromList
MiSegmentDelete
MmBuildMdlForNonPagedPool
MmUnmapLockedPages
SeAuditingFileEvents
SwapSplayLinks
FsRtlLookupLastLargeMcbEntry
IopIsDeviceInstanceEnabled
KeInitializeSpinLock
KiAcquireSpinLock
MiRemoveAnyPage
MiRemoveWsleFromFreeList
MiResolveProtoPteFault
NtWaitForSingleObject
ObpInsertHandleCount
RtlpGetExtraStuffPointer
RtlSetBits
SeReleaseSubjectContext
SeValidSecurityDescriptor
DaysAndFractionToTime
ExInterlockedExchangeAddLargeInteger
FsRtlCurrentBatchOplock
FsRtlPrivateLock
IoCreateStreamFileObject
IopReportResourceUsage
KiDeliverApc
LpcpClosePort
MiAccessCheck
MiMakeProtectionMask
MiResolveMappedFileFault
ObInsertObject
ObpIncrementHandleDataBase
ObpValidateAccessMask
PsReturnSharedPoolQuota
PsWatchWorkingSet
RtlDeleteElementGenericTable
CcReleaseByteRangeFromWrite
ExCreateHandleTable
FsRtlPrivateFastUnlockAll
IoCheckDesiredAccess
IoCreateDevice
MiCompleteProtoPteFault
MiMakeSystemAddressValidPfnWs
MiMapPageInHyperSpace
ObpCreateUnnamedHandle
RtlExtendedLargeIntegerDivide
RtlSubtreePredecessor
SepAccessCheck
CcCopyWrite
CcUnmapVacbArray
CcUnpinDataForThread
ExNotifyCallback
ExReleaseResourceForThreadLite
FsRtlAcknowledgeOplockBreak
FsRtlAddLargeEntry
FsRtlInitializeLargeMcb
FsRtlMdlWriteCompleteDev
FsRtlPrivateCheckForExclusiveLockAccess
IoAllocateAdapterChannel
IoGetAttachedDevice
IoRaiseInformationalHardError
IoRemoveShareAccess
MiCheckControlAreaStatus
MiMakeSystemAddressValidPfn
MiRemoveWsle
ObDeleteCapturedInsertInfo
ObReferenceObjectByName
RtlClearBits
RtlpGenerateInheritedAce
RtlxOemStringToUnicodeSize
SepCheckAcl
CcPostWorkQueue
CcScheduleReadAhead
CcSetValidData
ExEnumHandleTable
ExQueueWorkItem
FsRtlReleaseFileForCcFlush
KeSetEvent
MiChargeCommitmentCantExpand
MiFindActualFaultingPte
MiGetEventCounter
NtDeleteFile
RtlAreBitsClear
RtlDeleteNoSplay
RtlInitializeSid
RtlLookupElementGenericTable
RtlpGenerateInheritAcl
CcMdlWriteComplete
ExAcquireResourceExclusiveLite
ExDeleteResourceLite
ExfInterlockedInsertTailList
ExIsResourceAcquiredSharedLite
FsRtlOplockBreakNotify
IoCheckEaBufferValidity
IopOpenLinkOrRenameTarget
IoQueueThreadIrp
IoRegisterShutdownNotification
Ke386GetGdtEntryThread
KeReadStateTimer
KeRemoveDeviceQueue
KiRetireDpcList
MiDeletePte
MiEnsureAvailablePageOrWait
MiGetInPageSupportBlock
MiSectionDelete
RtlLengthSecurityDescriptor
RtlRealSuccessor
RtlUpcaseUnicodeStringToAnsiString
SepAdtGenerateDiscardAudit
SepInheritAcl
SepSidInToken
CcCreateVacbArray
CcMdlReadComplete2
ExInterlockedAddLargeStatistic
FsRtlCheckForMatchingFileObject
FsRtlCheckLockForWriteAccess
FsRtlPrivateInsertLock
FsRtlPrivateLimitFreeLockList
FsRtlPrivateResetLowestLockOffset
IoCancelThreadIo
IoPageRead
IoReleaseCancelSpinLock
IoSetInformation
IoStartNextPacket
IoStopTimer
KeClearEvent
KeInitializeApc
KeInsertByKeyDeviceQueue
KeRemoveByKeyDeviceQueue
KiQuantumEnd
MiAddValidPageToWorkingSet
MiDeleteSystemPagableVm
MiInsertFrontModifiedNoWrite
MiLocateSubsection
MiRemoveWorkingSetPages
MiRestoreTransitionPte
MiTrimWorkingSet
RtlAreBitsSet
RtlConvertUlongToLargeInteger
RtlCopyLuidAndAttributesArray
RtlCreateAcl
RtlLargeIntegerDivide
RtlpLengthInheritAcl
SeAccessCheck
_wcsicmp
CcExtendVacbArray
CcSetReadAheadGranularity
CcUnmapVacb
ExfInterlockedInsertHeadList
FsRtlCheckLockForReadAccess
FsRtlFreeFirstMapping
FsRtlMdlReadComplete
FsRtlNumberOfRunsInLargeMcb
FsRtlOpBatchBreakClosePending
FsRtlPrivateCheckWaitingLocks
FsRtlPrivateInitializeFileLock
FsRtlPrivateInsertExclusiveLock
FsRtlReleaseFileForModWrite
FsRtlRemoveAndCompleteIrp
FsRtlUninitializeFileLock
IoCreateNotificationEvent
IoGetDeviceToVerify
IopMountVolume
IoUpdateShareAccess
KeReleaseWaitForSemaphore
KiTrap0E
MiCheckForControlAreaDeletion
MiDetermineUserGlobalPteMask
MiFlushInPageSupportBlock
MiFreeEventCounter
MiInitializeTransitionPfn
MiInsertWsle
MiMapPageToZeroInHyperSpace
MiModifiedPageWriterWorker
MiResolveDemandZeroFault
MiResolveTransitionFault
MmCanFileBeTruncated
MmCanFileBeTruncatedInternal
MmDeterminePoolType
MmFlushImageSection
RtlAllocateAndInitializeSid
RtlEnumerateGenericTable
RtlEqualPrefixSid
RtlEqualSid
RtlExtendedIntegerMultiply
RtlFirstFreeAce
RtlIsGenericTableEmpty
RtlOemStringToCountedUnicodeString
RtlUpperString
SeFreeCapturedSecurityQos
SeLockSubjectContext
_vsnprintf
CcGetLsnForFileObject
CcPurgeAndClearCacheSection
CcZeroData
ExecuteHandler
ExLocalTimeToSystemTime
ExRaiseException
ExReleaseFastMutexUnsafe
FsRtlCancelExclusiveIrp
FsRtlFastUnlockAll
FsRtlFastUnlockAllByKey
FsRtlFastUnlockSingleShared
FsRtlFindFirstOverlappingSharedNode
FsRtlGetNextMcbEntry
FsRtlPrivateInsertSharedLock
FsRtlPrivateRemoveLock
FsRtlRequestOplockII
FsRtlSyncVolumes
FsRtlUninitializeLargeMcb
IopTimerDispatch
IoUnregisterFsRegistrationChange
KeContextToKframes
KeFlushQueueApc
KeSetEventBoostPriority
KiReleaseSpinLock
KiSystemService
KiTimerExpiration
KiTimerListExpire
MiAddMappedPtes
MiCheckPdeForPagedPool
MiFlushPteList
MiFreeInPageSupportBlock
MiInitializePfnForOtherProcess
MiInsertVad
MiMakeOutswappedPageResident
MiReleasePageFileSpace
MiResolvePageFileFault
MmWorkingSetManager
PsReturnPoolQuota
RtlAddAuditAccessAce
RtlDispatchException
RtlInitializeGenericTable
RtlNumberOfClearBits
RtlpGetReturnAddress
RtlSecondsSince1970ToTime
RtlSetAllBits
RtlValidSecurityDescriptor
SepApplyAclToObject
SepConcatenatePrivileges
SepGetDefaultsSubjectContext
|
