Untitled diff

Created Diff never expires
439 removals
Words removed1735
Total words1735
Words removed (%)100.00
439 lines
1 addition
Words added0
Total words0
Words added (%)0.00
1 line

File pos Mem pos ID Text
======== ======= == ====
00000000004D 00007DE7004D 0 !This program cannot be run in DOS mode.
0000000001D0 00007DE701D0 0 .text
000000000220 00007DE70220 0 .data
000000000248 00007DE70248 0 .rsrc
00000000026F 00007DE7026F 0 @.reloc
000000005540 00007DE85140 0 ntdll.dll
00000000554A 00007DE8514A 0 A_SHAFinal
000000005555 00007DE85155 0 A_SHAInit
00000000555F 00007DE8515F 0 A_SHAUpdate
00000000556B 00007DE8516B 0 AlpcAdjustCompletionListConcurrencyCount
000000005594 00007DE85194 0 AlpcFreeCompletionListMessage
0000000055B2 00007DE851B2 0 AlpcGetCompletionListLastMessageInformation
0000000055DE 00007DE851DE 0 AlpcGetCompletionListMessageAttributes
000000005605 00007DE85205 0 AlpcGetHeaderSize
000000005617 00007DE85217 0 AlpcGetMessageAttribute
00000000562F 00007DE8522F 0 AlpcGetMessageFromCompletionList
000000005650 00007DE85250 0 AlpcGetOutstandingCompletionListMessageCount
00000000567D 00007DE8527D 0 AlpcInitializeMessageAttribute
00000000569C 00007DE8529C 0 AlpcMaxAllowedMessageLength
0000000056B8 00007DE852B8 0 AlpcRegisterCompletionList
0000000056D3 00007DE852D3 0 AlpcRegisterCompletionListWorkerThread
0000000056FA 00007DE852FA 0 AlpcRundownCompletionList
000000005714 00007DE85314 0 AlpcUnregisterCompletionList
000000005731 00007DE85331 0 AlpcUnregisterCompletionListWorkerThread
00000000575A 00007DE8535A 0 CsrAllocateCaptureBuffer
000000005773 00007DE85373 0 CsrAllocateMessagePointer
00000000578D 00007DE8538D 0 CsrCaptureMessageBuffer
0000000057A5 00007DE853A5 0 CsrCaptureMessageMultiUnicodeStringsInPlace
0000000057D1 00007DE853D1 0 CsrCaptureMessageString
0000000057E9 00007DE853E9 0 CsrCaptureTimeout
0000000057FB 00007DE853FB 0 CsrClientCallServer
00000000580F 00007DE8540F 0 CsrClientConnectToServer
000000005828 00007DE85428 0 CsrFreeCaptureBuffer
00000000583D 00007DE8543D 0 CsrGetProcessId
00000000584D 00007DE8544D 0 CsrIdentifyAlertableThread
000000005868 00007DE85468 0 CsrSetPriorityClass
00000000587C 00007DE8547C 0 CsrVerifyRegion
00000000588C 00007DE8548C 0 DbgBreakPoint
00000000589A 00007DE8549A 0 DbgPrint
0000000058A3 00007DE854A3 0 DbgPrintEx
0000000058AE 00007DE854AE 0 DbgPrintReturnControlC
0000000058C5 00007DE854C5 0 DbgPrompt
0000000058CF 00007DE854CF 0 DbgQueryDebugFilterState
0000000058E8 00007DE854E8 0 DbgSetDebugFilterState
0000000058FF 00007DE854FF 0 DbgUiConnectToDbg
000000005911 00007DE85511 0 DbgUiContinue
00000000591F 00007DE8551F 0 DbgUiConvertStateChangeStructure
000000005940 00007DE85540 0 DbgUiDebugActiveProcess
000000005958 00007DE85558 0 DbgUiGetThreadDebugObject
000000005972 00007DE85572 0 DbgUiIssueRemoteBreakin
00000000598A 00007DE8558A 0 DbgUiRemoteBreakin
00000000599D 00007DE8559D 0 DbgUiSetThreadDebugObject
0000000059B7 00007DE855B7 0 DbgUiStopDebugging
0000000059CA 00007DE855CA 0 DbgUiWaitStateChange
0000000059DF 00007DE855DF 0 DbgUserBreakPoint
0000000059F1 00007DE855F1 0 EtwCreateTraceInstanceId
000000005A0A 00007DE8560A 0 EtwDeliverDataBlock
000000005A1E 00007DE8561E 0 EtwEnumerateProcessRegGuids
000000005A3A 00007DE8563A 0 EtwEventActivityIdControl
000000005A54 00007DE85654 0 EtwEventEnabled
File pos Mem pos ID Text
======== ======= == ====
000000005A64 00007DE85664 0 EtwEventProviderEnabled
000000005A7C 00007DE8567C 0 EtwEventRegister
000000005A8D 00007DE8568D 0 EtwEventUnregister
000000005AA0 00007DE856A0 0 EtwEventWrite
000000005AAE 00007DE856AE 0 EtwEventWriteEndScenario
000000005AC7 00007DE856C7 0 EtwEventWriteEx
000000005AD7 00007DE856D7 0 EtwEventWriteFull
000000005AE9 00007DE856E9 0 EtwEventWriteNoRegistration
000000005B05 00007DE85705 0 EtwEventWriteStartScenario
000000005B20 00007DE85720 0 EtwEventWriteString
000000005B34 00007DE85734 0 EtwEventWriteTransfer
000000005B4A 00007DE8574A 0 EtwGetTraceEnableFlags
000000005B61 00007DE85761 0 EtwGetTraceEnableLevel
000000005B78 00007DE85778 0 EtwGetTraceLoggerHandle
000000005B90 00007DE85790 0 EtwLogTraceEvent
000000005BA1 00007DE857A1 0 EtwNotificationRegister
000000005BB9 00007DE857B9 0 EtwNotificationUnregister
000000005BD3 00007DE857D3 0 EtwProcessPrivateLoggerRequest
000000005BF2 00007DE857F2 0 EtwRegisterSecurityProvider
000000005C0E 00007DE8580E 0 EtwRegisterTraceGuidsA
000000005C25 00007DE85825 0 EtwRegisterTraceGuidsW
000000005C3C 00007DE8583C 0 EtwReplyNotification
000000005C51 00007DE85851 0 EtwSendNotification
000000005C65 00007DE85865 0 EtwSetMark
000000005C70 00007DE85870 0 EtwTraceEventInstance
000000005C86 00007DE85886 0 EtwTraceMessage
000000005C96 00007DE85896 0 EtwTraceMessageVa
000000005CA8 00007DE858A8 0 EtwUnregisterTraceGuids
000000005CC0 00007DE858C0 0 EtwWriteUMSecurityEvent
000000005CD8 00007DE858D8 0 EtwpCreateEtwThread
000000005CEC 00007DE858EC 0 EtwpGetCpuSpeed
000000005CFC 00007DE858FC 0 EtwpNotificationThread
000000005D13 00007DE85913 0 EvtIntReportAuthzEventAndSourceAsync
000000005D38 00007DE85938 0 EvtIntReportEventAndSourceAsync
000000005D58 00007DE85958 0 ExpInterlockedPopEntrySListEnd
000000005D77 00007DE85977 0 ExpInterlockedPopEntrySListFault
000000005D98 00007DE85998 0 ExpInterlockedPopEntrySListResume
000000005DBA 00007DE859BA 0 KiFastSystemCall
000000005DCB 00007DE859CB 0 KiFastSystemCallRet
000000005DDF 00007DE859DF 0 KiIntSystemCall
000000005DEF 00007DE859EF 0 KiRaiseUserExceptionDispatcher
000000005E0E 00007DE85A0E 0 KiUserApcDispatcher
000000005E22 00007DE85A22 0 KiUserCallbackDispatcher
000000005E3B 00007DE85A3B 0 KiUserExceptionDispatcher
000000005E55 00007DE85A55 0 LdrAccessResource
000000005E67 00007DE85A67 0 LdrAddLoadAsDataTable
000000005E7D 00007DE85A7D 0 LdrAddRefDll
000000005E8A 00007DE85A8A 0 LdrDisableThreadCalloutsForDll
000000005EA9 00007DE85AA9 0 LdrEnumResources
000000005EBA 00007DE85ABA 0 LdrEnumerateLoadedModules
000000005ED4 00007DE85AD4 0 LdrFindEntryForAddress
000000005EEB 00007DE85AEB 0 LdrFindResourceDirectory_U
000000005F06 00007DE85B06 0 LdrFindResourceEx_U
000000005F1A 00007DE85B1A 0 LdrFindResource_U
000000005F2C 00007DE85B2C 0 LdrFlushAlternateResourceModules
000000005F4D 00007DE85B4D 0 LdrGetDllHandle
000000005F5D 00007DE85B5D 0 LdrGetDllHandleByMapping
000000005F76 00007DE85B76 0 LdrGetDllHandleByName
000000005F8C 00007DE85B8C 0 LdrGetDllHandleEx
000000005F9E 00007DE85B9E 0 LdrGetFailureData
File pos Mem pos ID Text
======== ======= == ====
000000005FB0 00007DE85BB0 0 LdrGetFileNameFromLoadAsDataTable
000000005FD2 00007DE85BD2 0 LdrGetProcedureAddress
000000005FE9 00007DE85BE9 0 LdrGetProcedureAddressEx
000000006002 00007DE85C02 0 LdrHotPatchRoutine
000000006015 00007DE85C15 0 LdrInitShimEngineDynamic
00000000602E 00007DE85C2E 0 LdrInitializeThunk
000000006041 00007DE85C41 0 LdrLoadAlternateResourceModule
000000006060 00007DE85C60 0 LdrLoadAlternateResourceModuleEx
000000006081 00007DE85C81 0 LdrLoadDll
00000000608C 00007DE85C8C 0 LdrLockLoaderLock
00000000609E 00007DE85C9E 0 LdrOpenImageFileOptionsKey
0000000060B9 00007DE85CB9 0 LdrProcessRelocationBlock
0000000060D3 00007DE85CD3 0 LdrQueryImageFileExecutionOptions
0000000060F5 00007DE85CF5 0 LdrQueryImageFileExecutionOptionsEx
000000006119 00007DE85D19 0 LdrQueryImageFileKeyOption
000000006134 00007DE85D34 0 LdrQueryModuleServiceTags
00000000614E 00007DE85D4E 0 LdrQueryProcessModuleInformation
00000000616F 00007DE85D6F 0 LdrRegisterDllNotification
00000000618A 00007DE85D8A 0 LdrRemoveLoadAsDataTable
0000000061A3 00007DE85DA3 0 LdrResFindResource
0000000061B6 00007DE85DB6 0 LdrResFindResourceDirectory
0000000061D2 00007DE85DD2 0 LdrResGetRCConfig
0000000061E4 00007DE85DE4 0 LdrResRelease
0000000061F2 00007DE85DF2 0 LdrResSearchResource
000000006207 00007DE85E07 0 LdrRscIsTypeExist
000000006219 00007DE85E19 0 LdrSetAppCompatDllRedirectionCallback
00000000623F 00007DE85E3F 0 LdrSetDllManifestProber
000000006257 00007DE85E57 0 LdrSetMUICacheType
00000000626A 00007DE85E6A 0 LdrShutdownProcess
00000000627D 00007DE85E7D 0 LdrShutdownThread
00000000628F 00007DE85E8F 0 LdrUnloadAlternateResourceModule
0000000062B0 00007DE85EB0 0 LdrUnloadAlternateResourceModuleEx
0000000062D3 00007DE85ED3 0 LdrUnloadDll
0000000062E0 00007DE85EE0 0 LdrUnlockLoaderLock
0000000062F4 00007DE85EF4 0 LdrUnregisterDllNotification
000000006311 00007DE85F11 0 LdrVerifyImageMatchesChecksum
00000000632F 00007DE85F2F 0 LdrVerifyImageMatchesChecksumEx
00000000634F 00007DE85F4F 0 LdrWx86FormatVirtualImage
000000006369 00007DE85F69 0 LdrpResGetMappingSize
00000000637F 00007DE85F7F 0 LdrpResGetResourceDirectory
00000000639B 00007DE85F9B 0 MD4Final
0000000063A4 00007DE85FA4 0 MD4Init
0000000063AC 00007DE85FAC 0 MD4Update
0000000063B6 00007DE85FB6 0 MD5Final
0000000063BF 00007DE85FBF 0 MD5Init
0000000063C7 00007DE85FC7 0 MD5Update
0000000063D1 00007DE85FD1 0 NlsAnsiCodePage
0000000063E1 00007DE85FE1 0 NlsMbCodePageTag
0000000063F2 00007DE85FF2 0 NlsMbOemCodePageTag
000000006406 00007DE86006 0 NtAcceptConnectPort
00000000641A 00007DE8601A 0 NtAccessCheck
000000006428 00007DE86028 0 NtAccessCheckAndAuditAlarm
000000006443 00007DE86043 0 NtAccessCheckByType
000000006457 00007DE86057 0 NtAccessCheckByTypeAndAuditAlarm
000000006478 00007DE86078 0 NtAccessCheckByTypeResultList
000000006496 00007DE86096 0 NtAccessCheckByTypeResultListAndAuditAlarm
0000000064C1 00007DE860C1 0 NtAccessCheckByTypeResultListAndAuditAlarmByHandle
0000000064F4 00007DE860F4 0 NtAddAtom
0000000064FE 00007DE860FE 0 NtAddBootEntry
00000000650D 00007DE8610D 0 NtAddDriverEntry
File pos Mem pos ID Text
======== ======= == ====
00000000651E 00007DE8611E 0 NtAdjustGroupsToken
000000006532 00007DE86132 0 NtAdjustPrivilegesToken
00000000654A 00007DE8614A 0 NtAlertResumeThread
00000000655E 00007DE8615E 0 NtAlertThread
00000000656C 00007DE8616C 0 NtAllocateLocallyUniqueId
000000006586 00007DE86186 0 NtAllocateReserveObject
00000000659E 00007DE8619E 0 NtAllocateUserPhysicalPages
0000000065BA 00007DE861BA 0 NtAllocateUuids
0000000065CA 00007DE861CA 0 NtAllocateVirtualMemory
0000000065E2 00007DE861E2 0 NtAlpcAcceptConnectPort
0000000065FA 00007DE861FA 0 NtAlpcCancelMessage
00000000660E 00007DE8620E 0 NtAlpcConnectPort
000000006620 00007DE86220 0 NtAlpcCreatePort
000000006631 00007DE86231 0 NtAlpcCreatePortSection
000000006649 00007DE86249 0 NtAlpcCreateResourceReserve
000000006665 00007DE86265 0 NtAlpcCreateSectionView
00000000667D 00007DE8627D 0 NtAlpcCreateSecurityContext
000000006699 00007DE86299 0 NtAlpcDeletePortSection
0000000066B1 00007DE862B1 0 NtAlpcDeleteResourceReserve
0000000066CD 00007DE862CD 0 NtAlpcDeleteSectionView
0000000066E5 00007DE862E5 0 NtAlpcDeleteSecurityContext
000000006701 00007DE86301 0 NtAlpcDisconnectPort
000000006716 00007DE86316 0 NtAlpcImpersonateClientOfPort
000000006734 00007DE86334 0 NtAlpcOpenSenderProcess
00000000674C 00007DE8634C 0 NtAlpcOpenSenderThread
000000006763 00007DE86363 0 NtAlpcQueryInformation
00000000677A 00007DE8637A 0 NtAlpcQueryInformationMessage
000000006798 00007DE86398 0 NtAlpcRevokeSecurityContext
0000000067B4 00007DE863B4 0 NtAlpcSendWaitReceivePort
0000000067CE 00007DE863CE 0 NtAlpcSetInformation
0000000067E3 00007DE863E3 0 NtApphelpCacheControl
0000000067F9 00007DE863F9 0 NtAreMappedFilesTheSame
000000006811 00007DE86411 0 NtAssignProcessToJobObject
00000000682C 00007DE8642C 0 NtCallbackReturn
00000000683D 00007DE8643D 0 NtCancelIoFile
00000000684C 00007DE8644C 0 NtCancelIoFileEx
00000000685D 00007DE8645D 0 NtCancelSynchronousIoFile
000000006877 00007DE86477 0 NtCancelTimer
000000006885 00007DE86485 0 NtClearEvent
000000006892 00007DE86492 0 NtClose
00000000689A 00007DE8649A 0 NtCloseObjectAuditAlarm
0000000068B2 00007DE864B2 0 NtCommitComplete
0000000068C3 00007DE864C3 0 NtCommitEnlistment
0000000068D6 00007DE864D6 0 NtCommitTransaction
0000000068EA 00007DE864EA 0 NtCompactKeys
0000000068F8 00007DE864F8 0 NtCompareTokens
000000006908 00007DE86508 0 NtCompleteConnectPort
00000000691E 00007DE8651E 0 NtCompressKey
00000000692C 00007DE8652C 0 NtConnectPort
00000000693A 00007DE8653A 0 NtContinue
000000006945 00007DE86545 0 NtCreateDebugObject
000000006959 00007DE86559 0 NtCreateDirectoryObject
000000006971 00007DE86571 0 NtCreateEnlistment
000000006984 00007DE86584 0 NtCreateEvent
000000006992 00007DE86592 0 NtCreateEventPair
0000000069A4 00007DE865A4 0 NtCreateFile
0000000069B1 00007DE865B1 0 NtCreateIoCompletion
0000000069C6 00007DE865C6 0 NtCreateJobObject
0000000069D8 00007DE865D8 0 NtCreateJobSet
0000000069E7 00007DE865E7 0 NtCreateKey
File pos Mem pos ID Text
======== ======= == ====
0000000069F3 00007DE865F3 0 NtCreateKeyTransacted
000000006A09 00007DE86609 0 NtCreateKeyedEvent
000000006A1C 00007DE8661C 0 NtCreateMailslotFile
000000006A31 00007DE86631 0 NtCreateMutant
000000006A40 00007DE86640 0 NtCreateNamedPipeFile
000000006A56 00007DE86656 0 NtCreatePagingFile
000000006A69 00007DE86669 0 NtCreatePort
000000006A76 00007DE86676 0 NtCreatePrivateNamespace
000000006A8F 00007DE8668F 0 NtCreateProcess
000000006A9F 00007DE8669F 0 NtCreateProcessEx
000000006AB1 00007DE866B1 0 NtCreateProfile
000000006AC1 00007DE866C1 0 NtCreateProfileEx
000000006AD3 00007DE866D3 0 NtCreateResourceManager
000000006AEB 00007DE866EB 0 NtCreateSection
000000006AFB 00007DE866FB 0 NtCreateSemaphore
000000006B0D 00007DE8670D 0 NtCreateSymbolicLinkObject
000000006B28 00007DE86728 0 NtCreateThread
000000006B37 00007DE86737 0 NtCreateThreadEx
000000006B48 00007DE86748 0 NtCreateTimer
000000006B56 00007DE86756 0 NtCreateToken
000000006B64 00007DE86764 0 NtCreateTransaction
000000006B78 00007DE86778 0 NtCreateTransactionManager
000000006B93 00007DE86793 0 NtCreateUserProcess
000000006BA7 00007DE867A7 0 NtCreateWaitablePort
000000006BBC 00007DE867BC 0 NtCreateWorkerFactory
000000006BD2 00007DE867D2 0 NtCurrentTeb
000000006BDF 00007DE867DF 0 NtDebugActiveProcess
000000006BF4 00007DE867F4 0 NtDebugContinue
000000006C04 00007DE86804 0 NtDelayExecution
000000006C15 00007DE86815 0 NtDeleteAtom
000000006C22 00007DE86822 0 NtDeleteBootEntry
000000006C34 00007DE86834 0 NtDeleteDriverEntry
000000006C48 00007DE86848 0 NtDeleteFile
000000006C55 00007DE86855 0 NtDeleteKey
000000006C61 00007DE86861 0 NtDeleteObjectAuditAlarm
000000006C7A 00007DE8687A 0 NtDeletePrivateNamespace
000000006C93 00007DE86893 0 NtDeleteValueKey
000000006CA4 00007DE868A4 0 NtDeviceIoControlFile
000000006CBA 00007DE868BA 0 NtDisableLastKnownGood
000000006CD1 00007DE868D1 0 NtDisplayString
000000006CE1 00007DE868E1 0 NtDrawText
000000006CEC 00007DE868EC 0 NtDuplicateObject
000000006CFE 00007DE868FE 0 NtDuplicateToken
000000006D0F 00007DE8690F 0 NtEnableLastKnownGood
000000006D25 00007DE86925 0 NtEnumerateBootEntries
000000006D3C 00007DE8693C 0 NtEnumerateDriverEntries
000000006D55 00007DE86955 0 NtEnumerateKey
000000006D64 00007DE86964 0 NtEnumerateSystemEnvironmentValuesEx
000000006D89 00007DE86989 0 NtEnumerateTransactionObject
000000006DA6 00007DE869A6 0 NtEnumerateValueKey
000000006DBA 00007DE869BA 0 NtExtendSection
000000006DCA 00007DE869CA 0 NtFilterToken
000000006DD8 00007DE869D8 0 NtFindAtom
000000006DE3 00007DE869E3 0 NtFlushBuffersFile
000000006DF6 00007DE869F6 0 NtFlushInstallUILanguage
000000006E0F 00007DE86A0F 0 NtFlushInstructionCache
000000006E27 00007DE86A27 0 NtFlushKey
000000006E32 00007DE86A32 0 NtFlushProcessWriteBuffers
000000006E4D 00007DE86A4D 0 NtFlushVirtualMemory
000000006E62 00007DE86A62 0 NtFlushWriteBuffer
File pos Mem pos ID Text
======== ======= == ====
000000006E75 00007DE86A75 0 NtFreeUserPhysicalPages
000000006E8D 00007DE86A8D 0 NtFreeVirtualMemory
000000006EA1 00007DE86AA1 0 NtFreezeRegistry
000000006EB2 00007DE86AB2 0 NtFreezeTransactions
000000006EC7 00007DE86AC7 0 NtFsControlFile
000000006ED7 00007DE86AD7 0 NtGetContextThread
000000006EEA 00007DE86AEA 0 NtGetCurrentProcessorNumber
000000006F06 00007DE86B06 0 NtGetDevicePowerState
000000006F1C 00007DE86B1C 0 NtGetMUIRegistryInfo
000000006F31 00007DE86B31 0 NtGetNextProcess
000000006F42 00007DE86B42 0 NtGetNextThread
000000006F52 00007DE86B52 0 NtGetNlsSectionPtr
000000006F65 00007DE86B65 0 NtGetNotificationResourceManager
000000006F86 00007DE86B86 0 NtGetPlugPlayEvent
000000006F99 00007DE86B99 0 NtGetTickCount
000000006FA8 00007DE86BA8 0 NtGetWriteWatch
000000006FB8 00007DE86BB8 0 NtImpersonateAnonymousToken
000000006FD4 00007DE86BD4 0 NtImpersonateClientOfPort
000000006FEE 00007DE86BEE 0 NtImpersonateThread
000000007002 00007DE86C02 0 NtInitializeNlsFiles
000000007017 00007DE86C17 0 NtInitializeRegistry
00000000702C 00007DE86C2C 0 NtInitiatePowerAction
000000007042 00007DE86C42 0 NtIsProcessInJob
000000007053 00007DE86C53 0 NtIsSystemResumeAutomatic
00000000706D 00007DE86C6D 0 NtIsUILanguageComitted
000000007084 00007DE86C84 0 NtListenPort
000000007091 00007DE86C91 0 NtLoadDriver
00000000709E 00007DE86C9E 0 NtLoadKey
0000000070A8 00007DE86CA8 0 NtLoadKey2
0000000070B3 00007DE86CB3 0 NtLoadKeyEx
0000000070BF 00007DE86CBF 0 NtLockFile
0000000070CA 00007DE86CCA 0 NtLockProductActivationKeys
0000000070E6 00007DE86CE6 0 NtLockRegistryKey
0000000070F8 00007DE86CF8 0 NtLockVirtualMemory
00000000710C 00007DE86D0C 0 NtMakePermanentObject
000000007122 00007DE86D22 0 NtMakeTemporaryObject
000000007138 00007DE86D38 0 NtMapCMFModule
000000007147 00007DE86D47 0 NtMapUserPhysicalPages
00000000715E 00007DE86D5E 0 NtMapUserPhysicalPagesScatter
00000000717C 00007DE86D7C 0 NtMapViewOfSection
00000000718F 00007DE86D8F 0 NtModifyBootEntry
0000000071A1 00007DE86DA1 0 NtModifyDriverEntry
0000000071B5 00007DE86DB5 0 NtNotifyChangeDirectoryFile
0000000071D1 00007DE86DD1 0 NtNotifyChangeKey
0000000071E3 00007DE86DE3 0 NtNotifyChangeMultipleKeys
0000000071FE 00007DE86DFE 0 NtNotifyChangeSession
000000007214 00007DE86E14 0 NtOpenDirectoryObject
00000000722A 00007DE86E2A 0 NtOpenEnlistment
00000000723B 00007DE86E3B 0 NtOpenEvent
000000007247 00007DE86E47 0 NtOpenEventPair
000000007257 00007DE86E57 0 NtOpenFile
000000007262 00007DE86E62 0 NtOpenIoCompletion
000000007275 00007DE86E75 0 NtOpenJobObject
000000007285 00007DE86E85 0 NtOpenKey
00000000728F 00007DE86E8F 0 NtOpenKeyEx
00000000729B 00007DE86E9B 0 NtOpenKeyTransacted
0000000072AF 00007DE86EAF 0 NtOpenKeyTransactedEx
0000000072C5 00007DE86EC5 0 NtOpenKeyedEvent
0000000072D6 00007DE86ED6 0 NtOpenMutant
0000000072E3 00007DE86EE3 0 NtOpenObjectAuditAlarm
File pos Mem pos ID Text
======== ======= == ====
0000000072FA 00007DE86EFA 0 NtOpenPrivateNamespace
000000007311 00007DE86F11 0 NtOpenProcess
00000000731F 00007DE86F1F 0 NtOpenProcessToken
000000007332 00007DE86F32 0 NtOpenProcessTokenEx
000000007347 00007DE86F47 0 NtOpenResourceManager
00000000735D 00007DE86F5D 0 NtOpenSection
00000000736B 00007DE86F6B 0 NtOpenSemaphore
00000000737B 00007DE86F7B 0 NtOpenSession
000000007389 00007DE86F89 0 NtOpenSymbolicLinkObject
0000000073A2 00007DE86FA2 0 NtOpenThread
0000000073AF 00007DE86FAF 0 NtOpenThreadToken
0000000073C1 00007DE86FC1 0 NtOpenThreadTokenEx
0000000073D5 00007DE86FD5 0 NtOpenTimer
0000000073E1 00007DE86FE1 0 NtOpenTransaction
0000000073F3 00007DE86FF3 0 NtOpenTransactionManager
00000000740C 00007DE8700C 0 NtPlugPlayControl
00000000741E 00007DE8701E 0 NtPowerInformation
000000007431 00007DE87031 0 NtPrePrepareComplete
000000007446 00007DE87046 0 NtPrePrepareEnlistment
00000000745D 00007DE8705D 0 NtPrepareComplete
00000000746F 00007DE8706F 0 NtPrepareEnlistment
000000007483 00007DE87083 0 NtPrivilegeCheck
000000007494 00007DE87094 0 NtPrivilegeObjectAuditAlarm
0000000074B0 00007DE870B0 0 NtPrivilegedServiceAuditAlarm
0000000074CE 00007DE870CE 0 NtPropagationComplete
0000000074E4 00007DE870E4 0 NtPropagationFailed
0000000074F8 00007DE870F8 0 NtProtectVirtualMemory
00000000750F 00007DE8710F 0 NtPulseEvent
00000000751C 00007DE8711C 0 NtQueryAttributesFile
000000007532 00007DE87132 0 NtQueryBootEntryOrder
000000007548 00007DE87148 0 NtQueryBootOptions
00000000755B 00007DE8715B 0 NtQueryDebugFilterState
000000007573 00007DE87173 0 NtQueryDefaultLocale
000000007588 00007DE87188 0 NtQueryDefaultUILanguage
0000000075A1 00007DE871A1 0 NtQueryDirectoryFile
0000000075B6 00007DE871B6 0 NtQueryDirectoryObject
0000000075CD 00007DE871CD 0 NtQueryDriverEntryOrder
0000000075E5 00007DE871E5 0 NtQueryEaFile
0000000075F3 00007DE871F3 0 NtQueryEvent
000000007600 00007DE87200 0 NtQueryFullAttributesFile
00000000761A 00007DE8721A 0 NtQueryInformationAtom
000000007631 00007DE87231 0 NtQueryInformationEnlistment
00000000764E 00007DE8724E 0 NtQueryInformationFile
000000007665 00007DE87265 0 NtQueryInformationJobObject
000000007681 00007DE87281 0 NtQueryInformationPort
000000007698 00007DE87298 0 NtQueryInformationProcess
0000000076B2 00007DE872B2 0 NtQueryInformationResourceManager
0000000076D4 00007DE872D4 0 NtQueryInformationThread
0000000076ED 00007DE872ED 0 NtQueryInformationToken
000000007705 00007DE87305 0 NtQueryInformationTransaction
000000007723 00007DE87323 0 NtQueryInfo