obj\amd64\sdbp.obj
* CIL *
obj\amd64\se.obj
obj\amd64\kdp.obj
obj\amd64\mi.obj
obj\amd64\iomgr.obj
obj\amd64\psp.obj
obj\amd64\lpcp.obj
obj\amd64\cc.obj
obj\amd64\exp.obj
obj\amd64\pnpmgrp.obj
obj\amd64\cmp.obj
obj\amd64\obp.obj
obj\amd64\fsrtlp.obj
obj\amd64\ki.obj
obj\amd64\iop.obj
obj\amd64\perfp.obj
obj\amd64\triage.obj
obj\amd64\timersup.obj
obj\amd64\pnppower.obj
obj\amd64\iosubs.obj
obj\amd64\hivechek.obj
obj\amd64\setlog.obj
obj\amd64\tokenset.obj
obj\amd64\pidle.obj
obj\amd64\crashdmp.obj
obj\amd64\dpcsup.obj
obj\amd64\iofileutil.obj
obj\amd64\iodata.obj
obj\amd64\hivefree.obj
obj\amd64\fmutexc.obj
obj\amd64\compress.obj
obj\amd64\pinfo.obj
obj\amd64\allocpag.obj
obj\amd64\waitsup.obj
obj\amd64\ppcontrol.obj
obj\amd64\misc.obj
obj\amd64\cmsecache.obj
obj\amd64\resource.obj
obj\amd64\adtlog.obj
obj\amd64\sysvol.obj
obj\amd64\sidle.obj
obj\amd64\debugsup.obj
obj\amd64\thredsup.obj
obj\amd64\pphandle.obj
obj\amd64\cancelapi.obj
obj\amd64\cmchek.obj
obj\amd64\rundown.obj
obj\amd64\adtvars.obj
obj\amd64\splay.obj
obj\amd64\sysdev.obj
obj\amd64\dataamd.obj
obj\amd64\yield.obj
obj\amd64\dockhwp.obj
ltcg\obj\amd64\filter.obj
obj\amd64\query.obj
obj\amd64\hivesum.obj
obj\amd64\pool.obj
obj\amd64\sep.obj
obj\amd64\gentable.obj
obj\amd64\throttle.obj
obj\amd64\specpool.obj
obj\amd64\kdapi.obj
obj\amd64\complete.obj
obj\amd64\cmwrapr.obj
obj\amd64\callback.obj
obj\amd64\rmvars.obj
obj\amd64\avltable.obj
obj\amd64\pwork.obj
obj\amd64\mmquota.obj
obj\amd64\arbiter.obj
obj\amd64\kddata.obj
obj\amd64\dev2dos.obj
obj\amd64\cmtredel.obj
obj\amd64\lookasid.obj
obj\amd64\adtutil.obj
obj\amd64\message.obj
obj\amd64\switch.obj
obj\amd64\mmfault.obj
obj\amd64\ccperf.obj
obj\amd64\kdlock.obj
obj\amd64\dumpctl.obj
obj\amd64\cmvalue.obj
obj\amd64\win32.obj
obj\amd64\rmaudit.obj
obj\amd64\guid.obj
obj\amd64\physical.obj
obj\amd64\cmdat3.obj
obj\amd64\dbgctrl.obj
obj\amd64\create.obj
obj\amd64\cmindex.obj
obj\amd64\handle.obj
obj\amd64\adtinit.obj
obj\amd64\gen8dot3.obj
obj\amd64\pbatt.obj
obj\amd64\queryvm.obj
obj\amd64\pat.obj
obj\amd64\cmcontrl.obj
obj\amd64\kdinit.obj
obj\amd64\devctrl.obj
obj\amd64\cmsubs2.obj
obj\amd64\event.obj
obj\amd64\vdm.obj
obj\amd64\bootstatus.obj
obj\amd64\thermal.obj
obj\amd64\protect.obj
obj\amd64\cmdown.obj
obj\amd64\fsctrl.obj
obj\amd64\cmtree.obj
obj\amd64\zone.obj
obj\amd64\vfddi.obj
obj\amd64\version.obj
obj\amd64\psopen.obj
obj\amd64\querysec.obj
obj\amd64\dbgkobj.obj
obj\amd64\kdcmsup.obj
obj\amd64\lock.obj
obj\amd64\cmname.obj
obj\amd64\sysinfo.obj
obj\amd64\vfhal.obj
obj\amd64\imagedir.obj
obj\amd64\psquery.obj
obj\amd64\flushbuf.obj
obj\amd64\spinlock.obj
obj\amd64\dbgkport.obj
obj\amd64\kdcpuapi.obj
obj\amd64\dir.obj
obj\amd64\cmhvlist.obj
obj\amd64\exinit.obj
obj\amd64\vftriage.obj
obj\amd64\rtlimagentheader.obj
obj\amd64\security.obj
obj\amd64\wrtwatch.obj
obj\amd64\thredini.obj
obj\amd64\dbgkproc.obj
obj\amd64\kdmove.obj
obj\amd64\open.obj
obj\amd64\cminit.obj
obj\amd64\vfinit.obj
obj\amd64\add2stra.obj
obj\amd64\psquota.obj
obj\amd64\lockvm.obj
obj\amd64\decode.obj
obj\amd64\port.obj
obj\amd64\kdbreak.obj
obj\amd64\qsea.obj
obj\amd64\cmdelete.obj
obj\amd64\systime.obj
obj\amd64\vfirp.obj
obj\amd64\add2strw.obj
obj\amd64\create.obj
obj\amd64\vadtree.obj
obj\amd64\apcuser.obj
obj\amd64\netboot.obj
obj\amd64\kdtrap.obj
obj\amd64\qsinfo.obj
obj\amd64\cmtrecpy.obj
obj\amd64\worker.obj
obj\amd64\vfdeadlock.obj
obj\amd64\str2adda.obj
obj\amd64\psctx.obj
obj\amd64\trackirp.obj
obj\amd64\kddbgio.obj
obj\amd64\qsquota.obj
obj\amd64\cmse.obj
obj\amd64\raise.obj
obj\amd64\vfstack.obj
obj\amd64\str2addw.obj
obj\amd64\pshelper.obj
obj\amd64\addrsup.obj
obj\amd64\ipi.obj
obj\amd64\iovutil.obj
obj\amd64\print.obj
obj\amd64\qsfs.obj
obj\amd64\cmdelay.obj
obj\amd64\harderr.obj
obj\amd64\vfdevobj.obj
obj\amd64\exdsptch.obj
obj\amd64\psdelete.obj
obj\amd64\pfndec.obj
obj\amd64\raisexcp.obj
obj\amd64\sessnirp.obj
obj\amd64\read.obj
obj\amd64\cmdatini.obj
obj\amd64\semphore.obj
obj\amd64\vfmajor.obj
obj\amd64\error.obj
obj\amd64\psinit.obj
obj\amd64\deleteva.obj
obj\amd64\triage.obj
obj\amd64\hifreqlk.obj
obj\amd64\write.obj
obj\amd64\cmconfig.obj
obj\amd64\uuid.obj
obj\amd64\vfbugcheck.obj
obj\amd64\pctohdr.obj
obj\amd64\pscid.obj
obj\amd64\pfnlist.obj
obj\amd64\thkemul.obj
obj\amd64\pppagepath.obj
obj\amd64\queuelock.obj
obj\amd64\internal.obj
obj\amd64\initamd64.obj
obj\amd64\pushlock.obj
obj\amd64\vffileio.obj
obj\amd64\random.obj
obj\amd64\psenum.obj
obj\amd64\nolowmem.obj
obj\amd64\lpcinit.obj
obj\amd64\query.obj
obj\amd64\dpclock.obj
obj\amd64\ioinit.obj
obj\amd64\cmclose.obj
obj\amd64\hdlsterm.obj
obj\amd64\vfzwapi.obj
obj\amd64\time.obj
obj\amd64\psjob.obj
obj\amd64\wstree.obj
obj\amd64\lpcsend.obj
obj\amd64\file.obj
obj\amd64\interobj.obj
obj\amd64\cmparse.obj
obj\amd64\vfsettings.obj
d:\srvrtm\base\ntos\init\up\obj\amd64\hotpatch.obj
obj\amd64\tracedb.obj
obj\amd64\psspnd.obj
obj\amd64\hypermap.obj
obj\amd64\lpcconn.obj
obj\amd64\flushtb.obj
obj\amd64\miscc.obj
obj\amd64\ioverifier.obj
obj\amd64\cmquery.obj
obj\amd64\exatom.obj
obj\amd64\vfirplog.obj
obj\amd64\psimpers.obj
obj\amd64\sessload.obj
obj\amd64\lpcrecv.obj
obj\amd64\procobj.obj
obj\amd64\parse.obj
obj\amd64\cmboot.obj
obj\amd64\luid.obj
obj\amd64\vfutil.obj
d:\srvrtm\base\ntos\init\up\obj\amd64\ntoskrnl.obj
obj\amd64\misalign.obj
obj\amd64\psldt.obj
obj\amd64\mmpatch.obj
obj\amd64\lpcreply.obj
obj\amd64\kevutil.obj
obj\amd64\errorlog.obj
obj\amd64\hwprofil.obj
obj\amd64\probe.obj
obj\amd64\vfrandom.obj
obj\amd64\checksum.obj
obj\amd64\forksup.obj
obj\amd64\lpcpriv.obj
obj\amd64\profobj.obj
obj\amd64\timerobj.obj
obj\amd64\arcsec.obj
obj\amd64\cmwrapr2.obj
obj\amd64\xipdisp.obj
obj\amd64\vfpower.obj
obj\amd64\copysup.obj
obj\amd64\stktrace.obj
obj\amd64\psvdm.obj
obj\amd64\acceschk.obj
obj\amd64\lpccompl.obj
obj\amd64\obvutil.obj
obj\amd64\eventobj.obj
obj\amd64\objsup.obj
obj\amd64\hiveload.obj
obj\amd64\exhotp.obj
obj\amd64\vfirpdb.obj
obj\amd64\cachedat.obj
obj\amd64\rtlexec.obj
obj\amd64\initamd.obj
obj\amd64\lpccreat.obj
obj\amd64\obperf.obj
obj\amd64\intobj.obj
obj\amd64\loadunld.obj
obj\amd64\cmchek2.obj
obj\amd64\mutant.obj
obj\amd64\cachesub.obj
obj\amd64\vfpnp.obj
obj\amd64\excptdbg.obj
obj\amd64\kulookup.obj
obj\amd64\shutdown.obj
obj\amd64\lpclistn.obj
obj\amd64\wait.obj
obj\amd64\ioperf.obj
obj\amd64\hiveinit.obj
obj\amd64\profile.obj
obj\amd64\logsup.obj
obj\amd64\vfwmi.obj
obj\amd64\lookup.obj
obj\amd64\psctxamd64.obj
obj\amd64\wrtfault.obj
obj\amd64\lpcquery.obj
obj\amd64\bugcheck.obj
obj\amd64\remlock.obj
obj\amd64\initdat.obj
obj\amd64\delay.obj
obj\amd64\fssup.obj
obj\amd64\vfgeneric.obj
obj\amd64\ldrreloc.obj
obj\amd64\rawinit.obj
obj\amd64\dmpaddr.obj
obj\amd64\balmgr.obj
obj\amd64\assign.obj
obj\amd64\rules.obj
obj\amd64\timer.obj
obj\amd64\pinsup.obj
obj\amd64\vffilter.obj
obj\amd64\rtlpatch.obj
obj\amd64\rawdisp.obj
obj\amd64\obclose.obj
obj\amd64\lpcclose.obj
obj\amd64\config.obj
obj\amd64\pnpioapi.obj
obj\amd64\cmparse2.obj
obj\amd64\sysenv.obj
obj\amd64\mdlsup.obj
obj\amd64\vfpacket.obj
obj\amd64\xencode.obj
obj\amd64\fsctrl.obj
obj\amd64\obhandle.obj
obj\amd64\lpcqueue.obj
obj\amd64\dpcobj.obj
obj\amd64\devintrf.obj
obj\amd64\parseini.obj
obj\amd64\eventpr.obj
obj\amd64\lazyrite.obj
obj\amd64\vfprint.obj
obj\amd64\prodtype.obj
obj\amd64\readwrit.obj
obj\amd64\obdir.obj
obj\amd64\umapview.obj
obj\amd64\apcobj.obj
obj\amd64\notify.obj
obj\amd64\geninst.obj
obj\amd64\keyedevent.obj
obj\amd64\prefetch.obj
obj\amd64\vfmessage.obj
obj\amd64\intbits.obj
obj\amd64\create.obj
obj\amd64\obse.obj
obj\amd64\iosup.obj
obj\amd64\devquobj.obj
obj\amd64\report.obj
obj\amd64\tunnel.obj
obj\amd64\dbgctrl.obj
obj\amd64\api.obj
obj\amd64\rtldata.obj
obj\amd64\fileinfo.obj
obj\amd64\obwait.obj
obj\amd64\flushsec.obj
obj\amd64\mutntobj.obj
obj\amd64\pnpres.obj
obj\amd64\fastio.obj
obj\amd64\nbqueue.obj
obj\amd64\vacbsup.obj
obj\amd64\register.obj
obj\amd64\environ.obj
obj\amd64\close.obj
obj\amd64\obcreate.obj
obj\amd64\miglobal.obj
obj\amd64\queueobj.obj
obj\amd64\pnpinit.obj
obj\amd64\largemcb.obj
obj\amd64\exdata.obj
obj\amd64\prefparm.obj
obj\amd64\traceapi.obj
obj\amd64\lznt1.obj
obj\amd64\volinfo.obj
obj\amd64\obtype.obj
obj\amd64\dynmem.obj
obj\amd64\semphobj.obj
obj\amd64\pnpenum.obj
obj\amd64\filelock.obj
obj\amd64\prefboot.obj
obj\amd64\tracesup.obj
obj\amd64\cleanup.obj
obj\amd64\obref.obj
obj\amd64\verifier.obj
obj\amd64\flush.obj
obj\amd64\pnpsubs.obj
obj\amd64\filter.obj
obj\amd64\wowinfo.obj
obj\amd64\cmhook.obj
obj\amd64\tracelog.obj
obj\amd64\eballoc.obj
obj\amd64\strucsup.obj
obj\amd64\obsdata.obj
obj\amd64\wslist.obj
obj\amd64\xipi.obj
obj\amd64\pnpirp.obj
obj\amd64\fsrtlpc.obj
obj\amd64\hivehint.obj
obj\amd64\callouts.obj
obj\amd64\context.obj
obj\amd64\obinit.obj
obj\amd64\sectsup.obj
obj\amd64\initkr.obj
obj\amd64\pnpdel.obj
obj\amd64\name.obj
obj\amd64\austub.obj
obj\amd64\ntapi.obj
obj\amd64\consumer.obj
obj\amd64\debug.obj
obj\amd64\obinsert.obj
obj\amd64\allocvm.obj
obj\amd64\kernldat.obj
obj\amd64\pplastgood.obj
obj\amd64\faulttol.obj
obj\amd64\mca.obj
obj\amd64\cmalloc.obj
obj\amd64\tokenadj.obj
obj\amd64\raise.obj
obj\amd64\obquery.obj
obj\amd64\mirror.obj
obj\amd64\devnode.obj
obj\amd64\oplock.obj
obj\amd64\wmi.obj
obj\amd64\cmmapvw.obj
obj\amd64\tokendup.obj
obj\amd64\oblink.obj
obj\amd64\creasect.obj
obj\amd64\misc.obj
obj\amd64\fsfilter.obj
obj\amd64\secure.obj
obj\amd64\tokenopn.obj
obj\amd64\ldrrsrc.obj
obj\amd64\obdevmap.obj
obj\amd64\modwrite.obj
obj\amd64\thredobj.obj
obj\amd64\ppvutil.obj
obj\amd64\unc.obj
obj\amd64\notify.obj
obj\amd64\hivecell.obj
obj\amd64\tokenqry.obj
obj\amd64\nlsxlat.obj
obj\amd64\fastref.obj
obj\amd64\sysload.obj
obj\amd64\exceptn.obj
obj\amd64\pphotswap.obj
obj\amd64\dbcsname.obj
obj\amd64\provider.obj
obj\amd64\hivesync.obj
obj\amd64\accessck.obj
obj\amd64\prefix.obj
obj\amd64\procsup.obj
obj\amd64\kiinit.obj
obj\amd64\pnpdata.obj
obj\amd64\filtrctx.obj
obj\amd64\ds.obj
obj\amd64\cmwmi.obj
obj\amd64\seastate.obj
obj\amd64\rtlassig.obj
obj\amd64\sys.obj
obj\amd64\pagfault.obj
obj\amd64\pnpevent.obj
obj\amd64\notify.obj
obj\amd64\wmidata.obj
obj\amd64\cmdat2.obj
obj\amd64\seassign.obj
obj\amd64\acledit.obj
obj\amd64\pocall.obj
obj\amd64\mmsup.obj
obj\amd64\runtime.obj
obj\amd64\devices.obj
obj\amd64\pnp.obj
obj\amd64\enabdisa.obj
obj\amd64\cmdat.obj
obj\amd64\sepaudit.obj
obj\amd64\atom.obj
obj\amd64\notify.obj
obj\amd64\mminit.obj
obj\amd64\pnpstart.obj
obj\amd64\stackovf.obj
obj\amd64\cmsubs3.obj
obj\amd64\globalog.obj
obj\amd64\seaudit.obj
obj\amd64\range.obj
obj\amd64\poshtdwn.obj
obj\amd64\sysptes.obj
obj\amd64\callback.obj
obj\amd64\ppdrvdb.obj
obj\amd64\cmapi2.obj
obj\amd64\alloc.obj
obj\amd64\capture.obj
obj\amd64\heap.obj
obj\amd64\idle.obj
obj\amd64\mapview.obj
obj\amd64\apcsup.obj
obj\amd64\pnpmemio.obj
obj\amd64\halfnc.obj
obj\amd64\cmapi.obj
obj\amd64\chunk.obj
obj\amd64\subject.obj
obj\amd64\nls.obj
obj\amd64\attrib.obj
obj\amd64\pfsup.obj
obj\amd64\pnpdma.obj
obj\amd64\drivesup.obj
obj\amd64\cmsubs.obj
obj\amd64\mcaevent.obj
obj\amd64\seclient.obj
obj\amd64\string.obj
obj\amd64\hiber.obj
obj\amd64\wsmanage.obj
obj\amd64\pnpirq.obj
obj\amd64\ex.obj
obj\amd64\cmsysini.obj
obj\amd64\dataprov.obj
obj\amd64\seglobal.obj
obj\amd64\sertl.obj
obj\amd64\postate.obj
obj\amd64\freevm.obj
obj\amd64\gateobj.obj
obj\amd64\pnpbusno.obj
obj\amd64\translate.obj
obj\amd64\cmgquota.obj
obj\amd64\smbios.obj
obj\amd64\rmlogon.obj
obj\amd64\bitmap.obj
obj\amd64\paction.obj
obj\amd64\mapcache.obj
obj\amd64\debug.obj
obj\amd64\ppprofile.obj
obj\amd64\bootvid.obj
obj\amd64\cmworker.obj
obj\amd64\perfdata.obj
obj\amd64\privileg.obj
obj\amd64\assert.obj
obj\amd64\podata.obj
obj\amd64\extsect.obj
obj\amd64\mapper.obj
obj\amd64\init.obj
obj\amd64\cmnotify.obj
obj\amd64\logging.obj
obj\amd64\semethod.obj
obj\amd64\poinit.obj
obj\amd64\zeropage.obj
obj\amd64\allproc.obj
obj\amd64\pnpdd.obj
obj\amd64\anim.obj
obj\amd64\cmsavres.obj
obj\amd64\hooks.obj
obj\amd64\token.obj
obj\amd64\stkwalk.obj
obj\amd64\misc.obj
obj\amd64\readwrt.obj
obj\amd64\ppcddb.obj
obj\amd64\ioguid.obj
obj\amd64\hivemap.obj
obj\amd64\perfsup.obj
obj\amd64\rmmain.obj
obj\amd64\cnvint.obj
obj\amd64\volume.obj
obj\amd64\session.obj
obj\amd64\pnprlist.obj
obj\amd64\hivebin.obj
obj\amd64\seinit.obj
obj\amd64\regutil.obj
obj\amd64\ntapi.obj
d:\srvrtm\base\ntos\init\up\obj\amd64\ntoskrnl.res
d:\srvrtm\base\ntos\init\up\obj\amd64\ntoskrnl.exp
obj\amd64\apcint.obj
obj\amd64\callout.obj
obj\amd64\clockint.obj
obj\amd64\cpuid.obj
obj\amd64\ctxswap.obj
obj\amd64\dpcint.obj
obj\amd64\idle.obj
obj\amd64\intipi.obj
obj\amd64\intsup.obj
obj\amd64\miscs.obj
obj\amd64\procstat.obj
obj\amd64\profint.obj
obj\amd64\start.obj
obj\amd64\threadbg.obj
obj\amd64\trap.obj
obj\amd64\zero.obj
obj\amd64\sysstubs.obj
obj\amd64\systable.obj
obj\amd64\xsum.obj
obj\amd64\psctxwrap.obj
obj\amd64\capture.obj
obj\amd64\chkstk.obj
obj\amd64\debugstb.obj
obj\amd64\lznt1amd.obj
obj\amd64\movemem.obj
obj\amd64\slist.obj
obj\amd64\xcptmisc.obj
obj\amd64\hifreqlk.obj
obj\amd64\intrlock.obj
obj\amd64\hrderror.obj
obj\amd64\strstr.obj
obj\amd64\strspn.obj
obj\amd64\strset.obj
obj\amd64\strrev.obj
obj\amd64\strrchr.obj
obj\amd64\strnset.obj
obj\amd64\strnicmp.obj
obj\amd64\stricmp.obj
obj\amd64\strchr.obj
obj\amd64\memicmp.obj
obj\amd64\memchr.obj
obj\amd64\wcsupr.obj
obj\amd64\wcsstr.obj
obj\amd64\wcsspn.obj
obj\amd64\wcsrev.obj
obj\amd64\wcsrchr.obj
obj\amd64\wcsnset.obj
obj\amd64\wcsnicmp.obj
obj\amd64\wcsncpy.obj
obj\amd64\wcsncmp.obj
obj\amd64\wcsncat.obj
obj\amd64\wcslwr.obj
obj\amd64\wcslen.obj
obj\amd64\wcsicmp.obj
obj\amd64\wcscspn.obj
obj\amd64\wcscmp.obj
obj\amd64\wcschr.obj
obj\amd64\wcscat.obj
obj\amd64\strupr.obj
obj\amd64\strlwr.obj
obj\amd64\strncpy.obj
obj\amd64\strncmp.obj
obj\amd64\strncat.obj
obj\amd64\strlen.obj
obj\amd64\strcmp.obj
obj\amd64\strcat.obj
obj\amd64\memset.obj
obj\amd64\memcpy.obj
obj\amd64\memcmp.obj
obj\amd64\woutput.obj
obj\amd64\vsprintf.obj
obj\amd64\vsnwprnt.obj
obj\amd64\vsnprint.obj
obj\amd64\swprintf.obj
obj\amd64\sprintf.obj
obj\amd64\snwprint.obj
obj\amd64\snprintf.obj
obj\amd64\output.obj
obj\amd64\fputwc.obj
obj\amd64\_flswbuf.obj
obj\amd64\_flsbuf.obj
obj\amd64\crt0fp.obj
obj\amd64\rand.obj
obj\amd64\qsort.obj
obj\amd64\nlsdata1.obj
obj\amd64\ctype.obj
obj\amd64\cmiscdat.obj
obj\amd64\chandler.obj
obj\amd64\setjmpex.obj
obj\amd64\setjmp.obj
obj\amd64\notify.obj
obj\amd64\longjmp.obj
obj\amd64\jmpuwind.obj
obj\amd64\stubs.obj
obj\amd64\xtow.obj
obj\amd64\xtoa.obj
obj\amd64\wtox.obj
obj\amd64\wctomb.obj
obj\amd64\wcstombs.obj
obj\amd64\wcstol.obj
obj\amd64\wchtodig.obj
obj\amd64\towupper.obj
obj\amd64\towlower.obj
obj\amd64\toupper.obj
obj\amd64\tolower.obj
obj\amd64\strtol.obj
obj\amd64\mbtowc.obj
obj\amd64\mbstowcs.obj
obj\amd64\iswctype.obj
obj\amd64\isctype.obj
obj\amd64\atox.obj
obj\amd64\_mbslen.obj
obj\amd64\_ctype.obj
obj\amd64\amdsecgs.obj
noltcg\obj\amd64\patchgd.obj
noltcg\obj\amd64\patchgda.obj
HAL.dll
BOOTVID.dll
obj\amd64\sdbapi.obj
obj\amd64\read.obj
obj\amd64\findtag.obj
obj\amd64\dbaccess.obj
obj\amd64\attributes.obj
obj\amd64\index.obj
obj\amd64\guid.obj
obj\amd64\ntbase.obj
obj\amd64\ntver.obj
obj\amd64\ntkmode.obj
obj\amd64\ahcache.obj
KDCOM.dll
* Linker *
LpcpLock
IopPnpScratchBuffer1
RtlSetOwnerSecurityDescriptor
CmpUpdateParentForEachSon
PsReferenceImpersonationToken
MiPteRangeIndex
KiSetPriorityThread
KiInterruptDispatchNoEOI
RtlFindLastBackwardRunClear
ExpGetSystemFirmwareTableInformation
InbvEnableBootDriver
PsReturnProcessPageFileQuota
??_C@_1CG@HLJEMPNC@t?4xe?$AAt?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AA?$CF?$AAc?$AA?3?$AA?$AA@
PopAcRegName
??_C@_19EHJFODIJ@?$AAI?$AAD?$AAE?$AAP?$AA?$AA@
??_C@_0EB@BHDAIKJO@?4textException?5Processing?5Messag@
IoSetTopLevelIrp
WmipDataProviderPnpidGuid
WmipTraceIo
LpcpDestroyPortQueue
??_C@_1CC@BJKKJNPK@?$AAP?$AAo?$AAo?$AAl?$AAU?$AAs?$AAa?$AAg?$AAe?$AAM?$AAa?$AAx?$AAi?$AAm?$AAu?$AAm?$AA?$AA@
SdbpFindNextNamedTag
DbgQueryDebugFilterState
??_C@_1BO@BOFJECK@APEG?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAP?$AAr?$AAe?$AAf?$AAi?$AAx?$AA?$AA@
VerifierExInitializePagedLookasideList
g_bDBG
HalDispatchTable
WmipRegistryPath
??_C@_0CM@DHBDOJHE@PAGETerminating?5critical?5process@
CmpFree
Kd_LDR_Mask
KiServiceInternal
ZwCreateNamedPipeFile
MiRemoveNode
KeQueryTimerDueTime
ObpAuditBaseObjects
MiPteSListExpansionWorker
IopCancelRemoveLockedDeviceNode
NtGetContextThread
ZwCreateDirectoryObject
??_C@_0BA@JHHCJMCA@INIT?$CFd?4?$CFd?4?$CFd?4?$CFd?$AA@
??_C@_0FH@KIJDAJPJ@INITXIPMEGS?$DN?$CFd?5in?5boot?5options?5i@
??_C@_0BK@OJHAPPFL@GUID_DEVICE_START_REQUEST?$AA@
??_C@_1DA@CJOLPLKN@APEG?$AA?2?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAT?$AAR?$AAK?$AAW?$AAK?$AAS?$AA_?$AAP?$AAO?$AAR?$AAT?$AA?$AA@
tcpxsum
WmipWriteMBToObject
KiNmiCallbackListHead
MmNumberOfFreeNonPagedPool
RtlReadSingleHookValidation
??_C@_1M@NGEKBHII@?$AAM?$AAC?$AAH?$AAG?$AAR?$AA?$AA@
KiBugCheckDebugBreak
SeEnableDelegationPrivilege
??_C@_1BA@CNLHHNLD@NITI?$AAP?$AAa?$AAt?$AAh?$AA?$DN?$AA?$AA@
??_C@_1CC@IHOFNMBA@NITI?$AA?2?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?$AA@
strcpy
SepAdtInitializePrivilegeAuditing
??_C@_1CG@LKGHJKCL@APEG?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAa?$AAl?$AAP?$AAo?$AAw?$AAe?$AAr?$AAB?$AAu?$AAs?$AA?$AA@
??_C@_0FN@KMMFOCI@PAGEVRFCCaller?5has?5completed?5suc@
??_C@_0CN@OGBLJEPD@PAGEFailed?5to?5initialize?5a?5new?5s@
CcPfQueryPrefetcherInformation
MiRearrangeWorkingSetExpansionList
??_C@_1DM@PKNMJCMM@APEG?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAP?$AAa?$AAn?$AAe?$AAl?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAa?$AAt?$AAi?$AAo?$AAn?$AAa?$AAl?$AA?$AA@
ViDeadlockDatabaseLock
IopProcessDeferredRegistrations
??_C@_0L@JBPAIHOB@PAGEHDLS?$CFc?$AA@
PopInitSIdle
??_C@_1BE@DEAPIJA@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?$AA@
_strnset
ZwDeleteBootEntry
MmAllocateMappingAddress
KeAcquireInterruptSpinLock
KiKernelRetryMask
PsGetThreadProcessId
StackOverflowFallback
MiAllocateLargeZeroPages
??_C@_1BM@OOKPFNCM@APEG?$AAP?$AAn?$AAP?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
_fltused
ViIrpLogDatabase
PsGetProcessSessionId
MmUnusedSubsectionCountPeak
_cfltcvt_tab
MmLastUnloadedDriver
MmModifiedPageMaximum
MiCheckSecuredVad
MiMapCacheExceptionFilter
LpcpMaxMessageSize
WmipMarkHandleAsClosed
ObSetSecurityDescriptorInfo
WmipSMBiosChecked
NtDeleteValueKey
DbgLoadImageSymbols
ExfReleasePushLockShared
CmpFreeDelayItem
ZwWriteVirtualMemory
CcSetAdditionalCacheAttributes
??_C@_0CD@BOMECILP@PAGE?2Device?2Harddisk?$CFd?2Partition@
??_C@_1EM@FELANHFJ@APEG?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAs?$AA?2?$AA?$CF@
ViSwap
NtCreateProcessEx
??_C@_0BB@GFIMNGLA@INITGenuineIntel?$AA@
ObAssignSecurity
PsGetProcessInheritedFromUniqueProcessId
??_C@_1BI@BBPIKDCN@NITI?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AA?$AA@
IoCsqRemoveIrp
PspJobTimeLimitsInterval
??_C@_1CE@DAFBANKJ@APEG?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAU?$AAN?$AAC?$AA?$AA@
Kd_SETUP_Mask
CmpCmdRenameHive
FsRtlSplitLargeMcb
IovpAdvanceStackDownwards
IopPortAddAllocation
GuidFormat
WmipOpenBlock
MmNonPagedPoolLock
WmipWriteToEventlog
CmpMatchAcpiOemRevisionRule
PpCriticalGetDeviceLocationStrings
??_C@_0BF@EEAHCEJ@ZwQueryDefaultLocale?$AA@
KiCallUserMode
MmFirstReservedMappingPte
Mi4dBreak
NtSystemRoot
PopIdleScanDpc
KdPrintWritePointer
??_C@_0EG@NIHDEMIB@INITCmpFindRSDTTable?3?5Cannot?5ope@
MmImageProtectionArray
IopRemoveHardErrorPacket
MiConvertStaticSubsections
??_C@_0BK@PAFEOPMG@ObReferenceObjectByHandle?$AA@
GUID_VERIFIER_WMI_INTERFACE
CmpFileWrite
CmCSDVersionString
PsGetProcessDebugPort
ExResourceTimeoutCount
RtlGetVersion
FsRtlLockInfoLookasideList
RebalanceNode
FsRtlGetFileSize
RtlCompareString
VfZwYieldExecution
ViMessageBogusTemplate
FsRtlNumberOfRunsInBaseMcb
CmSelfHeal
??_C@_0CM@CFNEBCNM@PAGEVRFCIRP_MN_FILTER_RESOURCE_R@
??_C@_1BK@NLHNEPNF@APEG?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AAI?$AAD?$AA?$AA@
PopWriteHiberImage
PopAllocateHiberContext
PiQueueQueryAndRemoveEvent
wcsspn
MiShutdownSystem
KiDivideErrorFault
GUID_DEVCLASS_FSFILTER_COMPRESSION
??_C@_1DC@JNAFJMFM@APEG?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAs?$AA?2?$AA?$CF?$AA0?$AA4?$AAd?$AA?$AA@
PltRotBarStatus
VfZwCreateEvent
WmipGetSystemTime
IopCreateObjectTypes
IopGetDriverPathInformation
__imp_KeStallExecutionProcessor
??_C@_1CI@JLJLHGIJ@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
ZwAlertThread
CmpIsHiveAlreadyLoaded
RawReadWriteDeviceControl
perftouchbuffer
XIPlocate_breakin
IoReleaseRemoveLockEx
PARTITION_SYSTEM_GUID
??_C@_1BC@LIELKAOL@NITI?$AAD?$AAo?$AAc?$AAk?$AAI?$AAD?$AA?$AA@
??_C@_1IM@BMHDGNNL@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
FsRtlInitializeMcb
RtlGetCompressionWorkSpaceSize
CcMaxVacbLevelsSeen
VfZwQueryInformationToken
MiPagedPoolSListHead
CmpRegistryRootHandle
??_C@_1CE@GGBKLHGF@NITIOCSN?$AAT?$AAS?$AAE?$AAR?$AAI?$AAA?$AAL?$AA?5?$AAM?$AAO?$AAU?$AAS?$AAE?$AA?$AA@
towlower
MiProtectFreeNonPagedPool
??_C@_0M@KGPINBFB@ZwCreateKey?$AA@
??_C@_1FK@IEIHDBMJ@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
MmSpecialPagesInUse
ExpSessionPoolDescriptor
RtlGetGroupSecurityDescriptor
FsRtlAllocatePoolWithQuotaTag
IoAllocateDriverObjectExtension
ObpAccessProtectCloseBit
??_C@_0DE@FCDKODBM@?4textAllocated?5too?5many?5map?5regi@
CcMdlReadWaitMiss
CcWorkerThread
??_C@_1BA@JILCHCMP@?$AAN?$AAT?$AAO?$AAS?$AAP?$AAN?$AAP?$AA?$AA@
PopSetThrottle
KeContextToKframes
MmMapUserAddressesToPage
ExReturnPoolQuota
SdbpGetVersionAttributesNT
IopQueryNameInternal
StringCchCatW
VfPowerTestStartedPdoStack
MiImageFailure
IopRemoveRelationFromList
IoReportTargetDeviceChangeAsynchronous
ZeroPte
PspThreadMapping
WmipEnumerateGuids
IopInsertLegacyBusDeviceNode
xKdReleasePciDeviceForDebugging
IopIsAddressRangeValid
PiControlEnumerateDevice
MiLowPagedPoolThreshold
strrchr
HvpDoAllocateCell
MiDereferenceSessionFinal
??_C@_0M@DLGLIILC@INITCONSTv7?$AA@
??_C@_1CE@MPNJJGFH@APEG?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAU?$AAS?$AAE?$AAR?$AA?2?$AA?$AA@
PiQueryResourceRequirements
PiCriticalOpenDevicePreInstallKey
MiTrackIoLock
ZwIsProcessInJob
PopPerfDecreaseAbsoluteModifier
IopInitializeBuiltinDriver
??_C@_0BH@CLPAFBAF@GUID_DEVICE_ENUMERATED?$AA@
??_C@_0DK@OOBNFIHD@PAGEVRFYCannot?5flush?5buffers?5tha@
MmAllocationFragment
ExpAllocateStringRoutine
??_C@_1CG@PIHEKJHJ@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAL?$AAo?$AAa?$AAd?$AAi?$AAn?$AAg?$AA?5?$AA?$AA@
MmPagingFile
ExpAllocateHandleTableEntry
??_C@_1FM@PFBILGIN@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAp?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AA?5?$AAs?$AAy?$AAs?$AAt@
ViMapDoubleBuffer
MiUpdateLargeProtoPfns
ZwListenPort
ObpRootDirectoryObject
ExpGetObjectInformation
NtCancelDeviceWakeupRequest
??_C@_0DA@NLNNDBNK@INITCmpFindACPITable?3?5Cannot?5map@
ZwAcceptConnectPort
MmMinimumPageFileReduction
??_C@_1EM@GLLAFOJP@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?2?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAM?$AAa@
IopGroupIndex
ObInsertObject
MiPfFreeDummyPage
??_C@_0BD@KGKBMFPI@ZwTerminateProcess?$AA@
KeSetDisableQuantumProcess
ValidUserPte
PsMapSystemDll
SdbpQueryBinVersionInformation
MmUnusedSegmentForceFreeDefault
??_C@_1PC@LKGPNPPF@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
Kd_DMIO_Mask
CmSymbolicLinkValueName
_local_unwind
CmpDoCreateChild
NtQueryEaFile
IopCompareReqAlternativePriority
KeSetPriorityAndQuantumProcess
EmptyValue
RtlFindLongestRunClear
??_C@_0L@MDHMGON@ZwQueryKey?$AA@
IopQueryOperationLength
ZwOpenFile
RawShutdown
FsRtlCancelOplockIIIrp
??_C@_1CC@KNCNBCMO@NITI?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAB?$AAi?$AAo?$AAs?$AAD?$AAa?$AAt?$AAe?$AA?$AA@
??_C@_1M@FBPBKHKH@?$AAW?$AAO?$AAW?$AA6?$AA4?$AA?$AA@
CcThrowAway
IopLegacyResourceAllocation
??_C@_1CG@IGCNHEDC@APEG?$AAN?$AAT?$AA?5?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?5?$AAL?$AAo?$AAg?$AAg?$AAe?$AAr?$AA?$AA@
srand
RawCheckForDismount
HvpDelistBinFreeCells
GUID_DEVCLASS_ENUM1394
PsGetProcessSecurityPort
??_C@_06DHPCLKNK@INIT?$DN?$CB?$AA@
Kd_STORMINIPORT_Mask
??_C@_1BK@EPGDLBHB@NITI?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
KeSetTimeIncrement
ZwDebugActiveProcess
??_C@_1BE@OEMOMKBO@?$AAC?$AAR?$AAA?$AAS?$AAH?$AAD?$AAU?$AAM?$AAP?$AA?$AA@
ExUnlockHandleTableEntry
PiControlGetPropertyData
??_C@_0BF@OBJMHBJG@PAGEW32pServiceTable?$AA@
TraceDataSyms
ExpHydraEnabled
VfZwQueryInformationThread
??_C@_0CJ@JBEEHAPD@PAGELKState?5saved?0?5power?5off?5the@
??_C@_1BG@MBJNHIJD@APEG?$AA?$CF?$AAs?$AA?4?$AA?$CF?$AAx?$AA?4?$AA?$CF?$AAx?$AA?$AA@
FsRtlGetTunnelParameterValue
??_C@_1BM@ELFBNIIL@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AA3?$AA0?$AA3?$AA?$AA@
??_C@_1CI@CHELJDNP@APEG?$AA?2?$AAS?$AAe?$AAL?$AAs?$AAa?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
WmipSysId1394
IoWritePartitionTableEx
PsLookupProcessThreadByCid
NtQuerySemaphore
ViVerifierEnabled
??_C@_0BC@DFDCPMIM@INIT?2ArcName?2?$CFs?$CFs?$AA@
IoBuildPoDeviceNotifyList
??_C@_0DK@OJDDJPFB@PAGEVRFY?$CIB?$CJreak?0?5?$CII?$CJgnore?0?5?$CIW?$CJar@
MmMakeSectionAccess
KdPrintRolloverCount
FsRtlReleaseFileForCcFlush
??_C@_1CO@FMBGNOIE@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAP?$AAa?$AAg?$AAi?$AAn?$AAg?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
??_C@_1BM@CFCBIMDA@APEGOCSN?$AAT?$AAL?$AAa?$AAn?$AAm?$AAa?$AAn?$AAN?$AAT?$AA?$AA@
CcUninitializeCacheMap
NtLockRegistryKey
CmpCreateTemporaryHive
KySwitchKernelStackCallout
SeAssignWorldSecurityDescriptor
IopShutdownBaseFileSystems
ObDereferenceSecurityDescriptor
??_C@_1BK@ECGHGMEP@?$AAF?$AAL?$AAA?$AAG?$AAS?$AA_?$AAN?$AAT?$AAV?$AAD?$AAM?$AA2?$AA?$AA@
_ldused
KdTimerStart
ViDeadlockAddResource
IopCdRomFileSystemQueueHead
WatchStepOver
PopDispatchCallback
??_C@_1DK@JOBGKNAA@?$AAP?$AAe?$AAr?$AAf?$AAI?$AAn?$AAc?$AAr?$AAe?$AAa?$AAs?$AAe?$AAA?$AAb?$AAs?$AAo?$AAl?$AAu?$AAt?$AAe?$AAM?$AAo?$AAd?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?$AA@
IopDriverLoadingFailed
Kd_DMADMIN_Mask
WmipGetSMBiosEventlog
IopSynchronousServiceTail
??_C@_1CI@GHLHFCBK@APEGOCSN?$AAT?$AAT?$AAa?$AAp?$AAe?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
InbvDisplayState
KdPrintDefaultCircularBuffer
VfPowerIsSystemRestrictedIrp
??_C@_1CM@KBLGGFAD@?$AAP?$AAr?$AAi?$AAo?$AAr?$AAi?$AAt?$AAy?$AAQ?$AAu?$AAa?$AAn?$AAt?$AAu?$AAm?$AAM?$AAa?$AAt?$AAr?$AAi?$AAx?$AA?$AA@
MmIsSessionAddress
PopPolicyWorkerMain
PiDeferSetInterfaceState
MiPlatformCacheAttributes
??_C@_1HK@PGCAKKJG@NITI?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAN?$AAe?$AAt?$AAB?$AAT?$AA_?$AAT?$AAc?$AAp?$AAi?$AAp?$AA_?$AA?$HL?$AA5?$AA4?$AAC?$AA7?$AAD?$AA1?$AA4?$AA0?$AA?9@
CmpGetToken
WmipNPEvent
KeGenericCallDpc
NlsAnsiToUnicodeData
ObpCreateDosDevicesDirectory
KiSetAffinityThread
KdpBreakpointInstruction
ExInterlockedRemoveHeadList
VfPacketCreateAndLock
ViDdiDispatchWmi
??_C@_1BE@OLCKPKGE@NITI?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
Kd_SCCLIENT_Mask
NtFlushBuffersFile
CmpDestroyHiveViewList
??_C@_0O@BEIKPCG@PAGEKDNODEBUG?$AA@
KdpSendWaitContinue
VfZwWaitForSingleObject
??_C@_0BN@GCGAPABL@INITCONSTACPICreatorRevision?$AA@
??_C@_0CD@DENGAMJK@GUID_TARGET_DEVICE_REMOVE_COMPLE@
MiNotifyMemoryEvents
__security_cookie_complement
ExpPoolScanCount
IoAssignResources
NtQueryMultipleValueKey
??_C@_0GA@OBGIPNIC@INITXIP?3?5Malformed?5FAT?5Filesyste@
MmQueryWorkingSetInformation
??_C@_1CA@CNLKGGMC@APEG?$AA?2?$AAE?$AAr?$AAr?$AAo?$AAr?$AAL?$AAo?$AAg?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
CmpFileSetSize
IoCreateDriver
MmInitializeHandBuiltProcess2
??_C@_1DG@LELIGCIA@APEG?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?$AA@
Phase1Initialization
ZwTerminateJobObject
CmpBootType
MiDecrementReferenceCountForAwePage
??_C@_0BC@FOJPBJKO@ZwDeleteBootEntry?$AA@
KiProfileLock
KiNpxSegmentOverrunAbort
PipEnumerationInProgress
IoCreateSymbolicLink
MmUnusedSegmentForceFree
ZwQuerySystemEnvironmentValue
PoInitHiberServices
MmAddVerifierThunks
ExpTimerMapping
VerifierIoInitializeIrp
KeAcquireInStackQueuedSpinLock
??_C@_1II@OLMLJBJE@APEGOCSN?$AAT?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2@
WmipFileTable
??_C@_1BM@CEBDOBLJ@APEG?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
CcLazyWriteHotSpots
IopTCPSetInformationEx
SdbpGetModulePECheckSum
??_C@_1BI@GOLJPODB@?$AAP?$AAA?$AAT?$AAC?$AAH?$AA_?$AAT?$AAA?$AAG?$AAI?$AAD?$AA?$AA@
_output
SeExports
CcFastReadNotPossible
PARTITION_ENTRY_UNUSED_GUID
SeCaptureSidAndAttributesArray
??_C@_0DN@FIFFJKGM@PAGEHvpDoWriteHive?$FL12?0?$CFs?$FN?3?5CcSet@
CcGetVacbMiss
??_C@_1BC@LHFFKNGD@APEG?$AAP?$AAC?$AAI?$AAB?$AAu?$AAs?$AA?$AA@
SeDefaultObjectMethod
PopAttribNop
Kd_TCPIP_Mask
RtlpUnwindHandler
IopGetNetworkOpenInformation
??_C@_1DM@OHKEJLJE@NITIOCSN?$AAT?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAe?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
IopDisplayString
ExpFreeHandleTableEntry
Kd_AMLI_Mask
CmpCloseKeyObject
SeGetTokenControlInformation
NtAccessCheckByTypeResultList
ExpKeyManipLock
IopCreateArcNamesDisk
SdbpGUIDToUnicodeString
DECREMENT_COMMON_BUFFERS
??_C@_1BM@IFPGFGF@?$AAR?$AAT?$AAL?$AAT?$AAH?$AAR?$AAE?$AAA?$AAD?$AAP?$AAO?$AAO?$AAL?$AA?$AA@
??_C@_1CA@IHGGOMHG@APEG?$AAH?$AAi?$AAb?$AAe?$AAr?$AAC?$AAo?$AAp?$AAy?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
MmPagedPoolMutex
IoDeviceHandlerObjectType
PipApplyFunctionToServiceInstances
MiRemoveAnyPage
??_C@_1BK@DHCPHJEH@APEG?$AAA?$AAu?$AAt?$AAo?$AAS?$AAe?$AAl?$AAe?$AAc?$AAt?$AA?$AA@
NtRaiseException
??_C@_1BK@FCOLHEDB@APEG?$AAA?$AAu?$AAt?$AAo?$AAR?$AAe?$AAb?$AAo?$AAo?$AAt?$AA?$AA@
ExWorkerQueue
GUID_DOCK_INTERFACE
??_C@_1CM@JGIJKPEK@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?2?$AAP?$AAo?$AAw?$AAe?$AAr?$AA?$AA@
ViAllocateMapRegisterFile
??_C@_0P@DJNAHNCK@INITCONSTOemId?$AA@
??_C@_1DG@CLDNBDPK@NITI?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAL?$AAa?$AAs?$AAt?$AAG?$AAo?$AAo?$AAd?$AA?4?$AAT?$AAm?$AAp?$AA?$AA@
SepCleanupLUIDDeviceMapDirectory
??_C@_0BD@GLLKHJBH@PAGEVRFYCurrent?3?5?5?$AA@
ZwFlushInstructionCache
GUID_IO_DISK_CLONE_ARRIVAL
MiMdlsAdjusted
??_C@_0CF@KELICNGO@?4textMM?3?5Iospace?5mapping?5overlap@
??_C@_0BCK@BOPONBMF@PAGEVRFY?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK@
MmFlushVirtualMemory
IoWMIQuerySingleInstance
CmSetLazyFlushState
ZwDeviceIoControlFile
__imp_VidBitBlt
MiEnableVerifier
FsRtlMdlReadCompleteDev
RtlUnicodeToOemN
FsRtlCreateLockInfo
CmpNotifyChangeKey
CmpFileFlush
MiRemoveMappedPtes
IopInsertRemoveDevice
KiInitiateUserApc
GUID_DEVCLASS_AVC
??_C@_1BI@JPNBAAHA@APEG?$AAA?$AAl?$AAi?$AAa?$AAs?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
WmipDefaultAccessSd
VfZwOpenProcessToken
mbtowc
wctomb
CmpShiftKey
KiSwapEvent
PsImpersonateClient
MmVerifyDriverBuffer
ObDereferenceDeviceMap
IopErrorLogDisabledThisBoot
??_C@_1IA@FNBGKAIH@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAU@
SeLocateProcessImageName
MiSpecialPagesNonPagedMaximum
RtlAddRange
PerfInfoProcessRunDown
CcLazyWriteScan
IovUtilIsDeviceObjectMarked
oldpc
MmDriverCommit
ExpDefaultErrorPort
??_C@_1BI@OPCHDEMG@?$AAA?$AAC?$AAT?$AAI?$AAO?$AAN?$AA_?$AAT?$AAY?$AAP?$AAE?$AA?$AA@
KeUserPopEntrySListEnd
PopFreeHiberContext
??_C@_1BA@FGEIJNMJ@APEG?$AA?$CF?$AA0?$AA4?$AAd?$AA?$AA?$AA?$AA@
??_C@_1CM@FCIICEOF@?$AAP?$AAe?$AAr?$AAf?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AAT?$AAi?$AAm?$AAe?$AAD?$AAe?$AAl?$AAt?$AAa?$AA?$AA@
KdTimerStop
IopDisableDevice
KiScanBugCheckCallbackList
??_C@_1HA@KEACNHKN@APEGOCSN?$AAT?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu@
MiSessionTagPages
??_C@_1CG@FFOEBBPF@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
MiIoRetryMask
??_C@_1O@NCNDGEFJ@?$AAF?$AAU?$AAS?$AAI?$AAO?$AAN?$AA?$AA@
PopCompletePolicyIrp
WmipCheckIsWbemRunning
??_C@_0CM@JHMIEGBH@PAGEVRFCIRP_MN_QUERY_LEGACY_BUS_@
WmipParseSysIdTable
??_C@_0EB@ICJODGIK@?4textPopCreateHiberFileSecurityD@
CmRegistryMachineSystemCurrentControlSetControlSessionManagerMemoryManagement
??_C@_1BI@OEJEABMO@?$AAS?$AAT?$AAR?$AAI?$AAN?$AAG?$AAT?$AAA?$AAB?$AAL?$AAE?$AA?$AA@
PsSuspendThread
ExpSessionPoolLookaside
PpProfileCancelTransitioningDock
??_C@_0CD@KBNEAMII@INITKiRaiseUserExceptionDispatch@
ExpDeleteTimer
MiFlushAllPages
MmSectionBasedMutex
ObpSetCurrentProcessDeviceMap
KeLowerIrql
VfFilterDriverObject
FsRtlRemoveAndCompleteIrp
??_C@_19HLPJEMPA@?$AAD?$AAI?$AAS?$AAK?$AA?$AA@
CmpFlushOnLockRelease
NtSetSystemInformation
CmpDestroyHive
Kd_PREFETCHER_Mask
VfZwEnumerateDriverEntries
??_C@_1BM@ONPLJCJH@?$AAP?$AAe?$AAr?$AAf?$AAT?$AAi?$AAm?$AAe?$AAD?$AAe?$AAl?$AAt?$AAa?$AA?$AA@
RtlInitializeRangeList
??_C@_1BO@OGPCBOOK@NITI?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
PopGetDope
KiLogicalProcessors
IopIrqUnpackResource
??_C@_0L@CFHOPACI@PAGEwin32k?$AA@
ExpWorkerThreadBalanceManager
??_C@_0L@COGPECJP@PAGEuser32?$AA@
??_C@_0M@CCHALJPD@INITCONSTv6?$AA@
KdDisableDebugger
??_C@_17LFJDFBHF@?$AAH?$AAP?$AAS?$AA?$AA@
CmpAllocateDelayItem
GUID_ACPI_REGS_INTERFACE_STANDARD
??_C@_0CA@IGBNDJNB@PAGE?2DosDevices?2PhysicalDrive?$CFd?$AA@
KdRestore
IoIsSystemThread
CcPfGlobals
VfZwQueryDefaultLocale
LsaLookupAuthenticationPackage
??_C@_17KACLLMCF@?$AAP?$AAC?$AAI?$AA?$AA@
??_C@_19KAAJILFJ@APEG?$AA?$CF?$AAx?$AA?$AA@
CmMaxViewsPerHive
ExpExpandBigPageTable
??_C@_1BK@DKNOGBNH@APEG?$AAC?$AAS?$AAD?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
??_C@_1CK@OFHNBBIB@?$AAM?$AAS?$AAI?$AA_?$AAP?$AAA?$AAC?$AAK?$AAA?$AAG?$AAE?$AA_?$AAI?$AAD?$AA?$CI?$AAG?$AAU?$AAI?$AAD?$AA?$CJ?$AA?$AA@
??_C@_1BK@EPIEPCAA@NITIOCSN?$AAT?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
SdbpCheckExe
MiFreeInPageSupportBlock
VfDeadlockBeforeCallDriver
ExfReleaseRundownProtection
SePrivilegeCheck
CmpAddToDelayedClose
RtlCreateUserProcess
__imp_VidDisplayString
PpDisableFirmwareMapper
??_C@_1BG@ENHNBJKN@NITI?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AAF?$AA1?$AA2?$AA?$AA@
ErrorLogPort
FsRtlIsTotalDeviceFailure
??_C@_0DI@PCEIKECL@PAGEInvalid?5hotpatch?5validation?5@
RawDispatch
LpcpInitializePortQueue
FsRtlUninitializeLargeMcb
KeSetSystemTime
MmSystemLockPagesCount
GUID_DEVICE_EJECT_VETOED
MmQuerySystemSize
atoi
KeInitSystem
MiSlushDescriptorBase
MiDereferenceSegmentThread
??_C@_1CK@DMCPEOJL@APEGOCSN?$AAT?$AAO?$AAt?$AAh?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
IopGetSetObjectId
IopPerfLogFileCreate
MiIsAddressRangeValid
NtSuspendProcess
??_C@_0BF@MNDFANJG@ZwTerminateJobObject?$AA@
MiLoadUserSymbols
SepFilterPrivilegeAudits
??_C@_1BM@OBFIBAAA@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AA3?$AA0?$AA1?$AA?$AA@
KiAlignmentFault
IopBusNumberUnpackRequirement
??_C@_1O@KFHOOKDO@APEG?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
??_C@_1BI@FJKDNIFM@?$AAS?$AAn?$AAa?$AAp?$AAU?$AAn?$AAl?$AAo?$AAa?$AAd?$AAs?$AA?$AA@
DbgkCreateThread
PopFilterCapabilities
SeInitSystem
KeUpdateRunTime
KeBalanceSetManager
GenericMappingForMembershipCheck
??_C@_0O@OJGKKHJH@ZwCreateTimer?$AA@
ResourceCount
??_C@_1BO@JIOFBOPL@APEG?$AAN?$AAe?$AAx?$AAt?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
ViInjectDmaFailures
??_C@_1DI@EMHGGIEC@APEG?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAM?$AAo?$AAu?$AAn?$AAt?$AAP?$AAo?$AAi?$AAn?$AAt?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
FsRtlWaitOnIrp
SdbInitDatabaseInMemory
SepServicesFilterPrivileges
MiLargeVaStart
ExMutantObjectType
PopWaitForSystemPowerIrp
FirstEntrySList
PsChargeProcessPagedPoolQuota
RtlAreBitsSet
SymbolRecorded
MmGetVerifierInformation
ViDeadlockReservedThreads
CmpDelayDerefKeyControlBlock
??_C@_0O@PDDOCKDP@PAGEVRFCUlong?$AA@
KeSetEvent
CmpAllocate
GUID_IO_MEDIA_ARRIVAL
KeInvalidateAllCaches
ZwMakePermanentObject
RtlxUnicodeStringToAnsiSize
Kd_VERIFIER_Mask
MiLocateAddressInTree
WmipStaticInstanceNameSize
??_C@_19NKKEIHJJ@?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
NtRequestDeviceWakeup
IopApplySystemPartitionProt
??_C@_1DE@CPBINDHF@APEG?$AAD?$AAA?$AAT?$AAA?$AAB?$AAA?$AAS?$AAE?$AA?5?$AAM?$AAA?$AAP?$AAP?$AAI?$AAN?$AAG?$AA?5?$AAF?$AAA?$AAI?$AAL?$AAE?$AAD?$AA?$AA@
KdpSysWriteMsr
IopIsLegacyDriver
VfWmiVerifyIrpStackUpward
??_C@_1BC@LIHENDFM@NITI?$AA_?$AA_?$AAC?$AAD?$AA_?$AA_?$AA?$AA@
??_C@_1BO@FBIOEMGI@NITIOCSN?$AAT?$AAO?$AAL?$AAI?$AA_?$AA8?$AA3?$AAK?$AAE?$AAY?$AA?$AA@
??_C@_08BLEEEBEF@PAGETRUE?$AA@
ExTimerObjectType
RtlTraceDatabaseAdd
SeDeleteAccessState
PopConvertUsToPerfCount
ZwSetThreadExecutionState
??_C@_08MKKFEPKD@INIT?$CF04d?$AA@
FadePalette
HeapGuid
IovFreeIrpPrivate
IopUnlinkDeviceRemovalRelations
??_C@_0BP@OCPDEHCP@PAGEVRFCPowerSystemUnspecified?$AA@
MiMapBBTMemory
??_C@_1CM@BCKLNNAH@APEG?$AAT?$AAi?$AAm?$AAe?$AAZ?$AAo?$AAn?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
??_C@_0DE@BONGNLGJ@PAGEFailing?5creating?5uncommitted@
CmpDelayDerefKCBDpc
PnpCompletionRoutine
IopPrepareDriverLoading
GUID_DEVCLASS_FLOPPYDISK
IopWstrBusTranslated
HalpEnableAutomaticDriveLetterAssignment
isprint
IoWMIHandleToInstanceName
SdbpGetFileVersionInformation
SeSetAccessStateGenericMapping
ViDeadlockCheckDuplicatesAmongChildren
CcPfScanCommandLine
FsRtlGetNextFileLock
??_C@_1BA@CEHMLOOP@?$AAP?$AAo?$AAo?$AAl?$AAT?$AAa?$AAg?$AA?$AA@
??_C@_06JIEMBJMK@?4text?$FL?$AA@
SepRmLsaCallProcess
??_C@_0BA@EGKKOENG@PAGEVRFY?$FL0x?$CFp?$FN?5?$AA@
WSOThread
CmpSyncKeyValues
MiRemoveIoSpaceMap
??_C@_0EG@LKLCHAC@?4text?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK@
InbvPortPollOnly
WmipSecurityMethod
ApphelpCacheCompareEntries
ObpDosDevicesShortNamePrefix
PerfInfoSampledProfileFlushInProgress
??_C@_0CB@DMEMNGC@PAGEVRFCPOSTPONED?5WDM?5DRIVER?5BUG@
ViDeadlockDeleteResource
RtlpExecuteHandlerForException
NtCreateTimer
IopWriteSummaryDump
??_C@_0BO@BKBEBPGC@PAGEVRFCIRP_MN_DISABLE_EVENTS?$AA@
NtContinue
GUID_DEVCLASS_PROCESSOR
IopRemoveLockedDeviceNode
MmSystemCacheWorkingSetList
??_C@_0BB@GBLBEPGN@PAGEAsyncKernel?5?$AA@
??_C@_1BE@IHPNGNG@NITI?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
VfMajorVerifyFinalIrpStack
??_C@_1CE@PNLMMFHI@NITI?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAD?$AAo?$AAc?$AAk?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
KdReadRemoteFile
FsRtlNotifyUpdateBuffer
KdpCommandString
CmUnRegisterCallback
GUID_IO_VOLUME_DISMOUNT
MmPerfSnapShotValidPhysicalMemory
IopChangeInterfaceType
PspJobSchedulingClasses
?enable@?2??VF_ASSERT_MAX_IRQL@@9@9
IopWstrPhysicalMemory
MiSessionCreateInternal
??_C@_0P@LJGGIFNI@INITCONSTPMode?$AA@
??_C@_1BE@GGIHCLKH@NITI?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AA?$AA@
ExEnableHandleTracing
ExpSessionPoolBigPageTableSize
IopQueryResourceHandlerInterface
ZwDeleteKey
FsRtlCheckLockForWriteAccess
FsRtlWorkerQueues
GUID_DEVCLASS_VOLUMESNAPSHOT
??_C@_1M@EKLNDDIP@?$AAW?$AAI?$AAN?$AA3?$AA2?$AA?$AA@
??_C@_1BI@LIHNICPI@?$AAT?$AAS?$AAA?$AAp?$AAp?$AAC?$AAo?$AAm?$AAp?$AAa?$AAt?$AA?$AA@
MiDrainingMappedWrites
WmipLinkDataSourceToList
MiDecommitPages
PopPerfIncreaseTimeValue
??_C@_1BK@MGJBEAIM@?$AAM?$AAa?$AAx?$AAE?$AAv?$AAe?$AAn?$AAt?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
KiSystemSharedData
FsRtlOplockBreakToII
ObpIncrementHandleCount
ViDdiDispatchWmiQueryAllData
ViGetAdapterInformation
KeCopyPage
IopUserCompletion
KiSystemServiceExit
MiPhysicalViewRemover
MiRemoveViewsFromSection
KeUserApcDispatcher
??_C@_1BC@NLGAHLIN@?$AAR?$AAP?$AAC?$AAP?$AAR?$AAO?$AAX?$AAY?$AA?$AA@
CmpAllocateCmView
KiDpcInterruptBypass
PpvUtilCallAddDevice
ObSetDirectoryDeviceMap
KiInvalidTssFault
WmipCreateAdminSD
KeFindConfigurationEntry
??_C@_0BC@ONJLOMNO@INIT5?42?43790?41830?$AA@
??_C@_1DO@MDCOAGDG@?$AAM?$AAa?$AAx?$AAT?$AAi?$AAm?$AAe?$AAS?$AAe?$AAp?$AAa?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAB?$AAe?$AAf?$AAo?$AAr?$AAe?$AAC?$AAo?$AAr?$AAr?$AAe?$AAc?$AAt?$AA?$AA@
NtWaitForDebugEvent
IovpBuildDriverObjectList
_vsnwprintf
CmpShareSystemHives
??_C@_1CA@NGEBKOIC@NITIOCSN?$AAT?$AAO?$AAL?$AAI?$AA_?$AA1?$AA0?$AA2?$AAK?$AAE?$AAY?$AA?$AA@
KeBugCheckCount
ExpBootFinishedDispatch
??_C@_0M@GNDBCPDE@INITCONSTv1?$AA@
RtlSizeHeap
MmLowMemoryThreshold
IoRetryIrpCompletions
??_C@_0BC@JHKPHPDB@ZwNotifyChangeKey?$AA@
??_C@_1BG@ECHGLMMD@?$AAI?$AAN?$AAD?$AAE?$AAX?$AA_?$AAB?$AAI?$AAT?$AAS?$AA?$AA@
CmpParseInfBuffer
SePublicDefaultSd
RtlCompressBufferNS
FsRtlSharedLockLookasideList
??_C@_1BK@ODPJKEIE@APEG?$AAw?$AAi?$AAn?$AA3?$AA2?$AAk?$AA?4?$AAs?$AAy?$AAs?$AA?$AA@
ExInterlockedAddUlong
??_C@_1CG@NEPCKEJL@?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAC?$AAh?$AAe?$AAc?$AAk?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
??_C@_0P@IOFAAEEF@PAGE?5?$CIpadding?$CJ?$AA@
IopAllocateIrpPrivate
??_C@_0EG@BLOOKDLG@PAGE?6Please?5type?5the?5following?5i@
??_C@_0BA@DBENIKJK@INITCONSTSearch?$AA@
??_C@_1CC@KPMBFFK@?$AAL?$AAa?$AAr?$AAg?$AAe?$AAP?$AAa?$AAg?$AAe?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAs?$AA?$AA@
PopPassivePowerCall
MmHighestUserAddress
CmRegistryMachineHardwareDeviceMapName
??_C@_1BO@ELPJDGOH@APEG?$AAU?$AAp?$AAp?$AAe?$AAr?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
ExShutdownSystem
RtlGetDefaultCodePage
PpGetBlockedDriverList
??_C@_1CK@DFPJPCIB@APEG?$AAU?$AAu?$AAi?$AAd?$AAS?$AAe?$AAq?$AAu?$AAe?$AAn?$AAc?$AAe?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
MiTrimSegmentCache
IopUniqueDeviceObjectNumber
??_C@_1BI@NPAPILHD@?$AAO?$AAS?$AA_?$AAP?$AAL?$AAA?$AAT?$AAF?$AAO?$AAR?$AAM?$AA?$AA@
MiDoReplacement
??_C@_0N@NCEOHNAK@INITCONSTPCI?$AA@
??_C@_0HL@NFJHHKLM@PAGEVRFCA?5driver?5is?5attempting?5t@
??_C@_1BG@BCMHKNMC@APEG?$AAL?$AAa?$AAn?$AAm?$AAa?$AAn?$AAN?$AAt?$AA?$AA@
MiLargePageDriverList
RtlpStackWalksInProgress
??_C@_1BA@CGHNDOD@APEGKL?$AA0?$AAx?$AA?$CF?$AAx?$AA?$AA@
CmpFindACPITable
KeActiveProcessors
IopSetDefaultGateway
??_C@_0BJ@GKMCPBHF@PAGEVRFCWDM?5DRIVER?5ERROR?$AA@
MiSessionImagePteStart
ExSizeOfRundownProtectionCacheAware
PopPerfIdleDpc
??_C@_1FO@MHKPIPLD@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAA?$AAn?$AAs?$AAi?$AAT?$AAo?$AAU?$AAn?$AAi?$AAc?$AAo?$AAd@
MmFreeSpecialPool
ApphelpAVLTableFree
IopCompareResourceRequestPriority
??_C@_0N@GNNLDJLG@PAGE?4hotp1?5?5?$AA@
??_C@_0O@GBMBGNBB@INITCONST?$ICNCE?$AA@
__imp_HalGetEnvironmentVariable
??_C@_09MDLCFNJL@INIT?$CFu?4?$CFu?$AA@
LpcpClosePort
ExGetExclusiveWaiterCount
MmPteCodeEnd
PopHeuristics
MiRequestedSystemPtes
PiProfileDevicesInTransition
NtQueryDebugFilterState
??_C@_1DK@OHBNGMDC@APEGOCSN?$AAT?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAU?$AAs?$AAe?$AAr?$AA?2?$AA?4?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
CcMdlRead
ExpWin32CloseProcedure
??_C@_0O@HEGDBMJP@PAGELKignored?$AA@
??_C@_1BE@ODOMKMBJ@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAB?$AAI?$AAT?$AAS?$AA?$AA@
??_C@_1BK@MCMLANOK@?$AAP?$AAR?$AAI?$AAN?$AAT?$AAS?$AAP?$AAO?$AAO?$AAL?$AAE?$AAR?$AA?$AA@
KeFreezeExecution
ExRegisterCallback
GUID_BUS_TYPE_SERENUM
PsGetCurrentProcessId
MiHighNonPagedPoolEvent
??_C@_0N@HHPOMGJF@INITBOOTLOGO?$AA@
??_C@_0BI@LEEJKIGN@ZwFlushInstructionCache?$AA@
NtProtectVirtualMemory
VfAllocateCommonBuffer
IopDmaUnpackRequirement
PopPerfCriticalFrequencyDelta
??_C@_0BA@PGJHNBPB@PAGELKSYS?5STATE?$AA@
??_C@_1JK@BJHNIGD@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
DeleteNodeFromTree
KeAcquireSpinLockRaiseToDpc
??_C@_0DP@MJDFAKMA@PAGEVRFYArea?5before?5?$CFx?5byte?5allo@
PspReaper
KiMaximumDpcQueueDepth
MmTransitionSharedPagesPeak
??_C@_1DO@PPCLEAKI@?$AAA?$AAd?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAa?$AAl?$AAD?$AAe?$AAl?$AAa?$AAy?$AAe?$AAd?$AAW?$AAo?$AAr?$AAk?$AAe?$AAr?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAs?$AA?$AA@
CreateSystemRootLink
KeLeaveCriticalRegion
ObEnumerateObjectsByType
SepPublicDefaultUnrestrictedSd
??_C@_0EA@OEEIBGGI@PAGERtlQueryRegistryValues?3?5Misc@
??_C@_1BI@JPPDOBL@?$AAS?$AAT?$AAR?$AAT?$AAA?$AAB?$AA_?$AAI?$AAT?$AAE?$AAM?$AA?$AA@
??_C@_1GI@KINIAJPC@APEG?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAo@
Kd_CRASHDUMP_Mask
ExpWin32Initialization
WmipLoggerContext
IoPerfCallDriver
CmpDelayDerefKCBIntervalInSeconds
ZwSaveKey
PopUpdateProcessorThrottle
PsSystemDllBase
_woutput
VfZwFlushKey
PiControlGetBlockedDriverData
PsNtDllPathName
??_C@_1DE@KLLHAABG@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAL?$AAo?$AAa?$AAd?$AA?5?$AAs?$AAu?$AAc?$AAc?$AAe?$AAe?$AAd?$AAe?$AAd?$AA?4?$AA?$AA@
PoRunDownDeviceObject
FsRtlPrepareMdlWriteDev
ViBugcheckPrintBuffer
??_C@_0DO@IPKAMEAH@PAGEVRFYArea?5after?5?$CFx?5byte?5alloc@
?enable@?5??ADD_MAP_REGISTERS@@9@9
NtCreateKeyedEvent
??_C@_0O@DJMKOIEK@PAGEKDDISABLE?$AA@
??_C@_0DC@JKLLFMPE@PAGE?7?$CF08I64X?3?5PC32?5?$CF08X?5?9?$DO?5?$CF08X?5@
RtlDeleteAce
_PopInternalError
ApphelpCacheShutdown
LpcRequestWaitReplyPort
KeRemoveByKeyDeviceQueue
CcReleaseByteRangeFromWrite
IopFreeRelationList
IopDetermineResourceListSize
FsRtlPrivateInsertSharedLock
??_C@_0P@LEIBOHAK@ZwCancelIoFile?$AA@
VfZwOpenJobObject
??_C@_1DC@NICHCHGK@NITI?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAW?$AAM?$AAI?$AAA?$AAd?$AAm?$AAi?$AAn?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
SepComparePrivilegeAndAttributeArrays
RtlDnsHostNameToComputerName
??_C@_1CG@LHHFIEBC@NITI?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAr?$AAe?$AAd?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AA?$AA@
IoPerfInit
ExpWorkerThread
??_C@_0BB@NOBGMBBD@ZwDeleteValueKey?$AA@
WmipMBReply
xKdUnmapVirtualAddress
??_C@_07CENHIMEO@?4text?$CFd?$AA@
MmUnmapVideoDisplay
ExDisableHandleTracing
??_C@_0DN@NJILMJJG@PAGE?6?6Process?4Thread?5?3?5?$CFp?4?$CFp?5?$CI?$CFs@
VfZwSetValueKey
PspWaitForUsermodeExit
??_C@_1DG@DNIHPMPB@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?2?$AAI?$AA?1?$AAO?$AA?5?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
??_C@_1FO@PCMFIJFB@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAU?$AAn?$AAi?$AAc?$AAo?$AAd?$AAe?$AAT?$AAo?$AAA?$AAn?$AAs@
KiSystemServiceStart
??_C@_0GJ@IDJHHLOH@PAGEVRFCCaller?5has?5completed?5a?5I@
??_C@_1IC@KHLFCAAN@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAU@
ATAId
NtOpenTimer
IoCheckShareAccess
??_C@_0BJ@IOBGFOPH@PAGEVRFCIRP_MN_SET_POWER?$AA@
Kd_SCSERVER_Mask
PopIdleDetectList
MmResidentAvailablePages
GUID_DEVCLASS_FSFILTER_ACTIVITYMONITOR
PsReturnProcessPagedPoolQuota
??_C@_0DO@MLKHAPAK@PAGELogFile?5for?5hive?5?$CFp?5is?5?$CFlx?$DL?5@
RtlZeroHeap
VfZwInitiatePowerAction
ObpTypeObjectType
IopWstrSystemResources
ViDeadlockTrimResources
PipForAllDeviceNodesCallback
??_C@_1BG@HBCBKLBD@APEG?$AAS?$AAy?$AAs?$AAW?$AAo?$AAw?$AA6?$AA4?$AA?$AA@
VidSetTextColor
MiProtectSpecialPool
VfFlushAdapterBuffers
??_C@_00CNPNBAHC@?$AA@
??_C@_0BG@NLKCEPDF@ZwQueryBootEntryOrder?$AA@
NtQueryVirtualMemory
InbvAcquireDisplayOwnership
WmipWorkItemCounter
RtlUpcaseUnicodeToCustomCPN
??_C@_1BA@KMCENPHA@APEG?$AAN?$AAu?$AAB?$AAu?$AAs?$AA?$AA@
HvpDropPagedBins
ZwPowerInformation
MmModifiedPageListByColor
VfZwEnableSimulatedAttacks
??_C@_1CG@JBOJHNH@APEG?$AAB?$AAo?$AAo?$AAt?$AAA?$AAr?$AAc?$AAh?$AAi?$AAt?$AAe?$AAc?$AAt?$AAu?$AAr?$AAe?$AA?$AA@
CmpFindReusableCellFromCache
VerifierKeSynchronizeExecution
ViMessageClassFailDriverUnderDebugger
??_C@_1BK@GJFHDEAF@?$AAI?$AAH?$AAV?$AAS?$AAT?$AAR?$AAE?$AAA?$AAM?$AAI?$AAN?$AAG?$AA?$AA@
KdpReadControlSpace
??_C@_1BC@OFKBJJGO@APEG?$AAC?$AAl?$AAo?$AAn?$AAe?$AAd?$AA?$AA@
??_C@_1BI@KBKGFMKH@?$AAC?$AAo?$AAm?$AAp?$AAa?$AAn?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
??_C@_1CE@NIAFNIKL@NITI?$AAM?$AAo?$AAf?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
ExCreateHandle
VfZwDisplayString
MiFreeEventCounter
ZwQueryDirectoryFile
??_C@_0O@EPLEANHM@?4text?$CFZ?3?5?$CF3d?$AN?$AA@
WmipPushFreeBuffer
RtlStringCbPrintfA
MmEnforceWorkingSetLimit
MmWriteUnloadedDriverInformation
??_C@_1BM@GKNFAGEG@APEG?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
NtCreateFile
IopStartNextPacket
??_C@_0BH@GPEFDNNG@INITLdrInitializeThunk?$AA@
??_C@_1CA@MFCEBBAG@APEG?$AAC?$AAS?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
_NLG_Notify
RtlTraceDatabaseDestroy
CcIsThereDirtyData
PopHeuristicsRegName
CmpLoadWorkerEvent
FsRtlWaitingLockLookasideList
??_C@_1BC@BMCNIKPF@?$AAV?$AAD?$AAS?$AAD?$AAY?$AAN?$AAD?$AAR?$AA?$AA@
FsRtlPrivateCancelFileLockIrp
RtlAssert
ObpDirectoryObjectType
GUID_IO_VOLUME_NAME_CHANGE
DebugService2
PlugPlayHandlerTable
??_C@_0BA@OBJHJEOL@INITCONSTAddReg?$AA@
MiPteTrackerLock
ExWindowStationOpenProcedureCallout
WmipConstructMCAErrorEventIntel
??_C@_1BM@OFMNDBN@APEG?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAM?$AAu?$AAp?$AA?$AA@
??_C@_1CG@EBEKPIJB@NITI?$AA?2?$AAS?$AAe?$AAR?$AAm?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
ObpGetTraceIndex
??_C@_1BM@KPOBEHHP@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AAF?$AA0?$AA3?$AA?$AA@
WmipQuerySingleMultiple
KxSwitchKernelStackCallout
IopAddRemoteBootValuesToRegistry
PpDeviceReferenceTable
ExpBigTableExpansionFailed
IopQueryRebalance
VfZwAddDriverEntry
PopPerfMaxC3Frequency
PopNotifyPolicyDevice
PsReferencePrimaryToken
MmPlentyFreePages
InbvNotifyDisplayOwnershipLost
IopHwProfileNotifyLock
KiSwitchKernelStackAndCallout
??_C@_17BBCCHIGH@?$AAL?$AAD?$AAR?$AA?$AA@
RtlpCompareAces
WmipQueryAllData
ViIrpDatabaseLock
LsaFreeReturnBuffer
ExTryToAcquireResourceExclusiveLite
CcCreateVacbArray
FstubReadHeaderEFI
ExpExpirationDataIoSb
PoRequestShutdownEvent
ZwDeleteFile
IopQueryRemoveLockedDeviceNode
PsChangeQuantumTable
PpMarkDeviceStackStartPending
ZwSetContextThread
NtAllocateVirtualMemory
??_C@_1BG@NGKJKEAD@APEG?$AAP?$AAN?$AAP?$AA?5?$AAB?$AAI?$AAO?$AAS?$AA?$AA@
??_C@_1MA@CKOEPBFP@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
PsSetProcessPriorityByClass
ZwCreateSection
MmAddPhysicalMemoryEx
PpInitGetGroupOrderIndex
PsChargeProcessPageFileQuota
??_C@_1CA@OOKAPJHG@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAP?$AAo?$AAo?$AAl?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
CmpIsLoadType
ViDeadlockDebug
Kd_MOUCLASS_Mask
??_C@_08DACAFPCA@?4text?5?$CFx?$AA@
??_C@_1CC@NMDMNMI@NITIOCSN?$AAT?$AAP?$AAC?$AA9?$AA8?$AA_?$AA1?$AA0?$AA6?$AAK?$AAE?$AAY?$AA?$AA@
PopPolicyLock
WmipRegisterMcaHandler
InbvBitBlt
MiFreeMdlTracker
MmConsumedPoolPercentage
??_C@_0EB@MDHENBMD@?4textDriver?5has?5allocated?5too?5ma@
??_C@_1BI@DJHOAHDI@APEGOCSN?$AAT?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
ZwUnloadKey
WmiTraceAlignment
MiLocateExportName
MmNonPagedPoolStart
??_C@_1O@PFKKKDLL@?$AAN?$AAo?$AAr?$AAm?$AAa?$AAl?$AA?$AA@
CmpWmiDumpKcbTable
MiTrimRemovalPagesOnly
CmpMatchInstallRule
ExAcquireCacheAwarePushLockExclusive
??_C@_19GNFDFLLA@?$AAF?$AAI?$AAL?$AAE?$AA?$AA@
ExDupHandleTable
MmMapViewOfSection
CcDataPages
ExPoolCodeEnd
MmTotalNonPagedPoolQuota
KiTimeIncrementReciprocal
ExpFirmwareTableProviderListHead
KdpPortLocked
PipFreeGroupTree
IopPendingEjects
OemDefaultChar
WmipStartGlobalLogger
IopDereferenceVpbAndFree
PsLocateSystemDll
MmMinimumWorkingSetSize
GUID_DEVCLASS_FSFILTER_SECURITYENHANCER
??_C@_1DK@HABPCJAC@APEGOCSN?$AAT?$AAR?$AAe?$AAa?$AAl?$AAM?$AAo?$AAd?$AAe?$AAI?$AAr?$AAq?$AAR?$AAo?$AAu?$AAt?$AAi?$AAn?$AAg?$AAT?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
ExpCallbackMapping
IopBootDriverReinitializeQueueHead
??_C@_1JC@IELBKFCH@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
??_C@_0BN@MIADBE@PAGEVRFCPowerActionHibernate?$AA@
xKdCheckPowerButton
NtCreateSymbolicLinkObject
??_C@_1DE@DDJLPHPM@APEG?$AAV?$AAi?$AAd?$AAe?$AAo?$AAI?$AAn?$AAi?$AAt?$AAP?$AAa?$AAg?$AAe?$AAs?$AAP?$AAe?$AAr?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AA?$AA@
HvpGrowLog1
RtlFillMemory
IoDriverObjectType
KeRegisterNmiCallback
MiResolvePageFileFault
??_C@_0DA@LNEFHKGH@INITCmpFindACPITable?3?5Cannot?5map@
??_C@_0EI@GPMPNOIP@PAGEHvpDoWriteHive?$FL5?0?$CFs?$FN?3?5Failed@
HvpGrowLog2
??_C@_1O@LGOAAEGK@APEG?$AAC?$AAB?$AAu?$AAs?$AA?$AA@
KiDoubleFaultAbort
HdlspBugCheckProcessing
CmpNameCacheTable
PiDeviceRegistration
MmModifiedPageListHead
CmpSelfHealQueueListHead
NtImpersonateAnonymousToken
??_C@_0O@FAJNMAFC@INITCONST?$ICRSP?$AA@
??_C@_0DK@LBLOGMAK@PAGEKD?6KdPullRemoteFile?3?5Local?5f@
??_C@_0N@KMDKKMOJ@INITCONSTv?57?$AA@
??_C@_1CA@KLIKKPJI@NITIOCSN?$AAT?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAD?$AAe?$AAs?$AAc?$AA?$AA@
??_C@_1CC@PDONAOBC@APEG?$AAU?$AAn?$AAi?$AAq?$AAu?$AAe?$AAP?$AAa?$AAr?$AAe?$AAn?$AAt?$AAI?$AAD?$AA?$AA@
CmpCreateLinkNode
__IMPORT_DESCRIPTOR_HAL
VfZwSetInformationJobObject
??_C@_1CC@CCBGCEEO@?$AAL?$AAa?$AAr?$AAg?$AAe?$AAP?$AAa?$AAg?$AAe?$AAM?$AAi?$AAn?$AAi?$AAm?$AAu?$AAm?$AA?$AA@
??_C@_08NDNEIGOL@?4text?5?$CFs?$AA@
??_C@_1BM@DKJLDABE@APEG?$AA?$CF?$AAd?$AAT?$AA?4?$AA0?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA?5?$AA?$AA@
SeCaptureAcl
??_C@_0N@JGLBEHHB@ZwPulseEvent?$AA@
CmpNameSize
IoAllocateMdl
FstubWritePartitionTableEFI
??_C@_0CA@LPMBFFND@PAGEVRFCPowerSystemHibernate?4S4?$AA@
KiSignalTimer
KiIdealDpcRate
ZwSetIntervalProfile
??_C@_1BE@DOMKDNIB@APEG?$AAM?$AAP?$AAS?$AAA?$AAB?$AAu?$AAs?$AA?$AA@
??_C@_1JC@LKGNHIKJ@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
IopDiskFileSystemQueueHead
IopNotifyTargetDeviceChange
??_C@_1BM@GCBMBNBM@?$AAI?$AAN?$AAT?$AAE?$AAR?$AAN?$AAA?$AAL?$AA_?$AAN?$AAA?$AAM?$AAE?$AA?$AA@
ZwQueryIntervalProfile
??_C@_1BG@EDAEBFFN@?$AAP?$AAR?$AAE?$AAF?$AAE?$AAT?$AAC?$AAH?$AAE?$AAR?$AA?$AA@
WmipSysIdRead
GUID_IO_VOLUME_LOCK
??_C@_0HN@NFDOIGHF@PAGEVRFCPDO?5has?5forgotten?5to?5fil@
ArbAddOrdering
MiCacheStrings
ExFreeCacheAwareRundownProtection
??_C@_0O@HNILNMLD@ZwOpenSection?$AA@
LpcpDeletePort
KiBugCheckDispatch
MiSessionViewStart
MmCopyVirtualMemory
MiInitializeSessionIds
SeCreateClientSecurity
??_C@_1O@INKGFAFP@APEG?$AA?$CF?$AA0?$AA4?$AAd?$AA?$AA@
CmpCheckKeyAccess
IopRestoreResourcesInternal
IopCrashDumpLock
??_C@_1O@FNNLNCKF@APEG?$AA?4?$AAL?$AAO?$AAG?$AA?$AA@
KiInsertQueueApc
setjmp
DbgSetDebugFilterState
??_C@_1BO@IFCALIKG@NITI?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAL?$AAo?$AAg?$AAg?$AAe?$AAr?$AA?$AA@
RawDeviceCdRomObject
RtlUpcaseUnicodeChar
NtSetDebugFilterState
VfIsVerificationEnabled
??_C@_0CC@GEKDBCCJ@PAGEVRFCIRP_MN_CANCEL_STOP_DEVIC@
MmSessionImageSize
SeUnlockSubjectContext
MmSystemPageFileLocated
NtInitialUserProcessBuffer
PpLastGoodDoBootProcessing
PopIdleFrom0Delay
IopPortBacktrackAllocation
??_C@_0FC@KCCIHPNL@PAGEFailed?5to?5convert?5SYSTEM?5hiv@
??_C@_1O@OBCAHNEG@?$AAE?$AAN?$AAG?$AAI?$AAN?$AAE?$AA?$AA@
RtlTraceDatabaseFind
??_C@_1CG@EHPFGAKO@?$AAS?$AA1?$AA6?$AAB?$AAI?$AAT?$AA_?$AAM?$AAO?$AAD?$AAU?$AAL?$AAE?$AA_?$AAN?$AAA?$AAM?$AAE?$AA?$AA@
WmipCopyFromEventQueues
MiInsertAweInfo
MiAllocateLargePages
KiInSwapProcesses
??_C@_1CO@MFHFIDKO@?$AAI?$AAo?$AAF?$AAa?$AAi?$AAl?$AAZ?$AAe?$AAr?$AAo?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?$AA@
KiEnableHeadlessBlueScreen
IopGetSecondaryDumpDataLimits
??_C@_0DN@BKEIHFCK@PAGEHvpDoWriteHive?$FL4?0?$CFs?$FN?3?5Failed@
CmpDelayCloseDpc
VfZwQueryBootOptions
ApphelpAVLTableAllocate
RtlMergeRangeLists
IoWMISetSingleInstance
??_C@_1CG@MELMEINA@NITI?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAR?$AAa?$AAw?$AAC?$AAd?$AAR?$AAo?$AAm?$AA?$AA@
KiBreakpointTrap
WmipGenericMapping
PsWrapApcWow64Thread
ExHotpSyncRenameSequence
MiResolveVerifierExports
MiUpdateModifiedWriterMdls
XIPConfigured
IoReadTransferCount
MiNoPageOnRaiseIrql
IoUnregisterFsRegistrationChange
??_C@_1BA@CGJOBJKL@?$AAF?$AAA?$AAS?$AAT?$AAF?$AAA?$AAT?$AA?$AA@
WmipProviderIdCounter
MiMaximumWslesPerSweep
IopGetDeviceResourcesFromRegistry
??_C@_0N@IHBHPPCK@INITCONSTv?54?$AA@
HardErrorState
KiPreprocessKernelAccessFault
PspJobList
ZwReplaceKey
CcPfSetPrefetcherInformation
PpBusTypeGuidCountMax
CmpLoadWorkerIncrement
MiSetProtectionOnSection
ZwReadRequestData
ExpNextCenturyTimeFields
??_C@_1CI@IKJDAFOG@APEGOCSN?$AAT?$AAD?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
MiDereferenceSession
FsRtlFastCheckLockForRead
SdbpFindNextIndexedWildCardTag
ObpProcessDosDeviceSymbolicLink
KeTryToAcquireSpinLockAtDpcLevel
??_C@_1BG@HLPKFGKN@APEG?$AA?$CF?$AAx?$AA?$CG?$AA?$CF?$AAx?$AA?$CG?$AA?$CF?$AAx?$AA?$AA@
CcPfBuildDumpFromTrace
WmipAllocRegEntry
??_C@_0BA@PHKNKKDM@PAGEVRFY?$CIBogus?$CJ?$AA@
SepRmCommandServerThreadInit
PspLegoNotifyRoutine
MiFreeLargePageMemory
MiMappedWriteBurstCount
KiScanReadyQueues
SepQueryNameString
GUID_DEVICE_ENUMERATED
NtGlobalFlag
VfZwSetDefaultLocale
ExpRealTimeIsUniversal
KiProfileListHead
??_C@_1DA@BDDOHELD@APEGOCSN?$AAT?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAl?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
IoWMISetSingleItem
MY_WRITE_REGISTER_UCHAR
SepRemoveDisabledGroupsAndPrivileges
IoRegisterLastChanceShutdownNotification
NtCreateKey
SwapContext
ExDelayedWorkerThreads
SdbpUpcaseUnicodeStringToMultiByteN
??_C@_1CK@LBICFBMM@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAL?$AAe?$AAv?$AAe?$AAl?$AAD?$AAa?$AAt?$AAa?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
PoHiberInProgress
??_C@_0N@LBFGHDOI@INITKDBGINIT?$AA@
FsRtlCreateSectionForDataScan
FsRtlNotifySetCancelRoutine
CcMapDataWait
IopRemoveLegacyDeviceNode
MiAttemptPageFileReduction
??_C@_1BK@BLILCELB@APEG?$AAG?$AAL?$AAO?$AAB?$AAA?$AAL?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
ExSwapinWorkerThreads
CmpInitializeRegistryNames
FsRtlNotifyFullReportChange
??_C@_1BK@HGFLAMPH@APEG?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
NtSetSystemTime
KdInitSystem
CmpDoFlushAll
CmpFreeSectionList
IopSetupNotifyData
__misaligned_access
RtlCompressWorkSpaceSizeNS
IopExceptionCleanup
ZwCreateDebugObject
KdBreakAfterSymbolLoad
VerifierDeadlockFreePool
VfFailDriver
RtlpValidateTargetModule
??_C@_0CH@MNDHEMAF@PAGEd?3?2srvrtm?2base?2ntos?2wmi?2trac@
KdpDebuggerLock
IopInterlockedInsertTailList
MxFreeDescriptor
GUID_DEVCLASS_DECODER
CmpUnlockTwoHashEntries
??_C@_0CB@EELLMHKM@PAGEFileAddress?5?$DN?5?$CFlx?0?5Map?5?$DN?5?$CFlx@
??_C@_1BA@OLKEOMOK@NITI?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
??_C@_1O@OLODECGH@?$AAV?$AAE?$AAN?$AAD?$AAO?$AAR?$AA?$AA@
ZwClearEvent
NtPrivilegeCheck
PopPolicyWorkerNotify
??_C@_0O@BANKAJPB@INITCONST?$IBNEG?$AA@
??_C@_0OG@JGCKNJJJ@PAGEVRFCA?5device?5is?5deleting?5its@
MiSessionBasePte
CcNumberActiveWorkerThreads
NtSetEvent
KeFlushEntireTb
FsRtlGetNextMcbEntry
WmipRawMCASize
WmipTdiIoNotify
ExQuerySystemLockInformation
PpSetPlugPlayEvent
IoCreateUnprotectedSymbolicLink
MmNumberOfMappedMdls
CmpMoveBiosAliasTable
MmEnforceWriteProtection
ObpLUIDDeviceMapsEnabled
ExReleaseRundownProtectionEx
??_C@_0BK@BDBDIBMH@ZwQueryFullAttributesFile?$AA@
??_C@_1CE@JNILFDIM@NITI?$AA?2?$AAS?$AAe?$AAL?$AAs?$AAa?$AAI?$AAn?$AAi?$AAt?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
NlsAnsiCodePage
ExReferenceHandleDebugInfo
PopLoggingInformation
??_C@_0N@PNPAILHB@ZwReplaceKey?$AA@
??_C@_15KFCDODCM@?$AAS?$AAR?$AA?$AA@
RtlGetAce
szStandardBias
SdbpOpenAndMapFile
??_C@_0BF@COJKHJOP@PAGEVRFCIRP_MN_EJECT?$AA@
??_C@_1BA@PMCKLINB@NITI?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
??_C@_1BE@HOEGMLNH@NITI?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
VfZwLoadDriver
MiReleaseAllMemory
??_C@_1BA@KGNNEBEE@?$AAG?$AAE?$AAN?$AAE?$AAR?$AAA?$AAL?$AA?$AA@
ZwCreateTimer
MiUnmapViewOfSection
??_C@_1BM@OIDEACJH@APEG?$AAH?$AAi?$AAb?$AAe?$AAr?$AAI?$AAo?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
ZwContinue
CmpFindDrivers
CmpInitSecurityCache
ExpRegisterFirmwareTableInformationHandler
IopMountVolume
__imp_HalGetBusDataByOffset
PsGetCurrentThreadPreviousMode
??_C@_0KJ@DMOAKHOK@PAGEVRFCThe?5caller?5of?5IoComplete@
CmpSystemQuotaWarningWorker
??_C@_1BM@CICPCGKM@APEG?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAP?$AAn?$AAp?$AA?$AA@
??_C@_0BL@KNNHBHJN@PAGEVRFY?$CIRemovalRelations?$CJ?$AA@
strtol
PopShutdownPowerOffPolicyRegName
??_C@_15JEIFMHAO@?$AAM?$AAM?$AA?$AA@
??_C@_1BK@KIDELAPD@?$AAC?$AAO?$AAM?$AAP?$AAA?$AAN?$AAY?$AA_?$AAN?$AAA?$AAM?$AAE?$AA?$AA@
SepIdAssignableAsGroup
??_C@_0BK@PDBIPODP@ZwQueryInformationProcess?$AA@
??_C@_0CM@IBGODKCC@PAGEAVRF?3?5Invalid?5handle?5?$CFp?5in?5p@
__newctype
NtDeleteKey
MiLargeVaBitMap
RtlIsRangeAvailable
ExAllocatePool
WmipNtDllLoggerInfo
??_C@_09PPAIBPAO@PAGELKfyi?$AA@
VerifierReferenceObjectByHandle
KeStackAttachProcess
??_C@_0BP@JBBFKANI@INITInvalid?5operator?5?$CFs?5used?$CB?6?$AA@
??_C@_1BK@DCIBKFHA@NITIOCSN?$AAT?$AAA?$AAT?$AAT?$AA_?$AA3?$AA0?$AA2?$AA?$AA@
MiAgingShift
SeMakeAnonymousLogonToken
CmTypeName
CcMissCounter
KiSelectNextThread
RtlPcToFileHeader
??_C@_0DB@JCPJFMIL@PAGEVRFYCouldn?8t?5track?5common?5bu@
PspJobDelete
IoSetFileOrigin
MmSetBankedSection
MiCheckForContiguousMemory
??_C@_1IO@GIJPNAAO@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
PiEngineLock
SeCaptureAuditPolicy
CmpValidateHiveSecurityDescriptors
??_C@_0BG@EBIHBOPF@ZwOpenDirectoryObject?$AA@
??_C@_0CJ@KMNOPJLA@PAGEInvalid?5hotpatch?5hook?5array?5@
??_C@_1DC@HMFDIBPL@APEG?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA3?$AA2?$AA?2?$AAW?$AAI?$AAN?$AAL?$AAO?$AAG?$AAO?$AAN?$AA?4?$AAE?$AAX?$AAE?$AA?$AA@
KeSetDisableBoostProcess
??_C@_1BG@ENKFBHBP@?$AAD?$AAP?$AAC?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
??_C@_1CO@BNFPOLBM@APEGOCSN?$AAT?$AAP?$AAr?$AAi?$AAn?$AAt?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
ZwRequestDeviceWakeup
IopSetRemoteLink
??_C@_1BK@FKJGMACD@APEG?$AA?2?$AAG?$AAL?$AAO?$AAB?$AAA?$AAL?$AA?$DP?$AA?$DP?$AA?2?$AA?$AA@
WmipAdjustFreeBuffers
DbgkInitialize
IopfCompleteRequest
NtSetThreadExecutionState
PopRunDownSourceTargetList
VfZwWriteFile
CmpAddValueToList
MiMarkImageInSystem
MmHighestPossiblePhysicalPage
VerifierExAcquireFastMutexUnsafe
??_C@_0BF@LEDICBJL@PAGEVRFCIRP_MJ_WRITE?$AA@
PpSetCustomTargetEvent
errno
VfZwSetInformationThread
??_C@_1BC@JLKELIPB@?$AAS?$AAC?$AAC?$AAL?$AAI?$AAE?$AAN?$AAT?$AA?$AA@
??_C@_1DC@KJKLNCGK@APEG?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA3?$AA2?$AA?2?$AAU?$AAS?$AAE?$AAR?$AAI?$AAN?$AAI?$AAT?$AA?4?$AAE?$AAX?$AAE?$AA?$AA@
ExpProfileMapping
RtlpGenerateInheritAcl
??_C@_1BM@ODOLGIAJ@APEG?$AAM?$AAa?$AAx?$AAN?$AAu?$AAm?$AAP?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
MiSpecialPoolLastPte
FsRtlMdlWriteCompleteDev
PiResizeTargetDeviceBlock
WmipSetTraceNotify
InbvTerminalBkgdColor
KdpSearchEndPageFrame
KiDebugTrapOrFault
PopPromoteFromIdle0
MiUnsecureVirtualMemory
WmipSMBiosTableVirtualAddress
GUID_DEVCLASS_FDC
??_C@_1O@KIMIIFMC@?$AAP?$AAN?$AAP?$AAM?$AAG?$AAR?$AA?$AA@
PsCreateSystemThread
MiSlushDescriptorCount
ExReferenceCallBackBlock
IopNotifySetupDeviceArrival
RtlpTraceDatabaseInternalAdd
MiPteRanges
MmTotalClaim
CcPfPrefetchingForBoot
MmRotatingUniprocessorNumber
PARTITION_MSFT_RESERVED_GUID
IoBuildDeviceIoControlRequest
IopFilterResourceRequirementsList
RtlpIntegerWChars
RtlWorkSpaceProcs
VfZwCloseObjectAuditAlarm
MiTempEvent
MapperAdjustResourceList
WmipDoFindRegEntryByProviderId
KeMaximumIncrement
MmAddVerifierEntry
SepAdtPrivilegedServiceAuditAlarm
IoQueryVolumeInformation
??_C@_0BA@LIDAGFDG@PAGELKSleeping3?$AA@
KdpFillMemory
ExEnumHandleTable
IopVerifyDeviceObjectOnStack
??_C@_1CM@EKIOMBNO@?$AAP?$AAo?$AAo?$AAl?$AAT?$AAa?$AAg?$AAS?$AAm?$AAa?$AAl?$AAl?$AAT?$AAa?$AAb?$AAl?$AAe?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
KiServiceLimit
RtlTimeToTimeFields
??_C@_1DG@CFOHELLB@NITI?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAL?$AAa?$AAn?$AAm?$AAa?$AAn?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
KdPrintCircularBuffer
FsRtlLookupPerFileObjectContext
PiControlGetInterfaceDeviceList
??_C@_1O@PBAFJPAL@NITI?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
??_C@_0EC@KKFKMMEB@PAGEHEAP?3?5Free?5Heap?5block?5?$CFlx?5mo@
isxdigit
HvTrackCellRef
??_C@_1M@HIKGEDIA@?$AAT?$AAC?$AAP?$AAI?$AAP?$AA?$AA@
KiOp_PREF_NOP
MiCreatePagingFileMap
KeSaveFloatingPointState
??_C@_0CN@NLPBOLFK@?4text?$CK?$CK?$CK?$CK?5Bad?5IRQL?5?9?9?5needed?5?$CFx?0@
CpDoesPortExist
VfZwDeleteDriverEntry
SeCreateGlobalPrivilege
MiLargeZero
??_C@_1EA@BCJOJCPD@APEG?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AA?$CF?$AAd?$AA?2?$AAP?$AAa?$AAr?$AAt?$AAi?$AAt?$AAi?$AAo?$AAn?$AA0?$AA?$AA@
KiSetServerWaitClientEvent
??_C@_1BK@HIEEKPKI@NITI?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?$AA@
MMSECT
MiMapSinglePage
IoConfigureCrashDump
GUID_IO_VOLUME_CHANGE
IoReportHalResourceUsage
??_C@_1BO@ENLOGGJH@NITI?$AAn?$AAt?$AAo?$AAs?$AAk?$AAr?$AAn?$AAl?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
MmSystemCommitReserve
PopDispatchPolicyIrps
IopNotifyShutdownQueueHead
RtlInitNlsTables
??_C@_1DA@CEBNHLE@NITI?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AA?5?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
WmipRegLookaside
WmipLeaveTraceCritSection
??_C@_1BG@BJGGDKDC@APEG?$AAB?$AAu?$AAi?$AAl?$AAd?$AAL?$AAa?$AAb?$AA?$AA@
CcPfDecRef
IovpInitCalled
SeRestorePrivilege
PopAllocateDevState
RtlDescribeChunkProcs
SepDuplicateToken
ZwWaitForDebugEvent
GUID_DEVCLASS_NET
??_C@_1O@MFIBMGDO@NITI?$AA?4?$AAs?$AAy?$AAs?$AA?$AA@
ViDeadlockAnalyze
PiProcessShutdownPnpDevices
??_C@_1BM@IMGOPCII@APEG?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
PopCB
IoRemoteBootClient
SepSinglePrivilegeCheck
CcPfPrefetchFileMetadata
IopInitializeBootDrivers
PopShutdownPowerOffPolicy
RtlpValidatePeHeaderHash2
IopGenericTranslateOrdering
KeWaitForGate
FsRtlResetBaseMcb
??_C@_1DA@PIILGPGA@APEG?$AAR?$AAE?$AAA?$AAD?$AA?5?$AAD?$AAR?$AAI?$AAV?$AAE?$AAR?$AA?5?$AAI?$AAD?$AA?5?$AAF?$AAA?$AAI?$AAL?$AAE?$AAD?$AA?$AA@
SepAuditTypeList
PiCollapseEnumRequests
MiSystemPteSListHeadLock
ViGenericVerifyIrpStackUpward
CmpSelectLeaf
IopWarmEjectDevice
??_C@_0EG@NGIPIIMH@PAGEProcess?5?$CFp?5?$CIPID?5?$DN?5?$CFlx?5ImageF@
MmNumberOfPhysicalPages
RtlIntegerToUnicodeString
??_C@_06MKAEJEHJ@?4text?4?$AA@
??_C@_1BC@HPEOJKPK@NITI?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
??_C@_1BM@LHIICBBI@APEGOCSN?$AAT?$AAP?$AAe?$AAr?$AAs?$AAo?$AAn?$AAa?$AAl?$AA?$AA@
IopWstrBusRaw
CmpCreateObjectTypes
SdbpIsExeEntryEnabled
??_C@_1CO@FPBNOAAF@APEG?$AAD?$AAA?$AAT?$AAA?$AAB?$AAA?$AAS?$AAE?$AA?5?$AAO?$AAP?$AAE?$AAN?$AA?5?$AAF?$AAA?$AAI?$AAL?$AAE?$AAD?$AA?$AA@
ZwCreateKeyedEvent
CmpCleanUpKcbCacheWithLock
RtlTestBit
MiIssuePageExtendRequest
SeCreatePagefilePrivilege
RtlTimeFieldsToTime
MiEnablePagingOfDriver
PspDefaultNonPagedLimit
IopInvokeDumpIoCallbacks
??_C@_0BO@CPCKJMEP@IoBuildDeviceIoControlRequest?$AA@
KeAlertThread
ZwProtectVirtualMemory
FsRtlRemoveBaseMcbEntry
PopInsertLoggingEntry
ViInsertVerifierEntry
CmpMatchAcpiOemTableIdRule
KeReleaseSpinLockFromDpcLevel
KiBoundFault
MiCaptureUlongPtrArray
ZwQueryDebugFilterState
PiControlGetUserFlagsFromDeviceNode
CmpRegistryMachineSystemCurrentControlSetControlClassString
PopIdleTo0Percent
__imp_HalStartProfileInterrupt
IopProcessAssignResourcesWorker
RtlRandom
??_C@_0BC@DKGFBICA@INITCONSTRmPmSame?$AA@
??_C@_1DC@LBNAJLCL@?$AAI?$AAd?$AAl?$AAe?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAD?$AAe?$AAm?$AAo?$AAt?$AAe?$AAP?$AAe?$AAr?$AAc?$AAe?$AAn?$AAt?$AA?$AA@
??_C@_1HC@NKHJMFBP@NITI?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
MmResTrack
??_C@_1BE@LOMDLCE@?$AAT?$AAS?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
??_C@_1CA@KALEMHIH@APEG?$AAH?$AAi?$AAb?$AAe?$AAr?$AAF?$AAi?$AAl?$AAe?$AAR?$AAu?$AAn?$AAs?$AA?$AA@
NtSaveKey
WmipGlobalSequence
KiScanInterruptObjectList
??_C@_0O@LENMFCPP@INITCONST?$IBSPQ?$AA@
RtlCreateHeap
WmipAllocateFreeBuffers
??_C@_06PLGKNOHD@INIT?$DM?$DO?$AA@
??_C@_0N@EFLIAFLA@INITNOLOWMEM?$AA@
??_C@_1BG@ENFHGCAH@APEGOCSN?$AAT?$AAW?$AAi?$AAn?$AAN?$AAT?$AA?$AA@
CcPfPrefetchScenario
IopSetEaOrQuotaInformationFile
??_C@_0L@PNOKKBFP@ZwSetEvent?$AA@
??_C@_1IO@IHHBJCEO@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
PspW32ThreadCallout
NtQueryDirectoryFile
IopCompletionLookasideList
IopIsAnyDeviceInstanceEnabled
IopCsqCancelRoutine
GUID_DEVINTERFACE_CDCHANGER
WmipMSMCAEvent_InvalidErrorGuid
RtlCompressChunks
??_C@_1CA@MADEMJPK@?$AAP?$AAR?$AAO?$AAD?$AAU?$AAC?$AAT?$AA_?$AAV?$AAE?$AAR?$AAS?$AAI?$AAO?$AAN?$AA?$AA@
ZwCreateFile
MmSystemCacheEnd
RtlpReadSingleHookInformation
??_C@_09GIDHHNBM@?4text?$CFZ?$AN?6?$AA@
VfZwSetTimer
Kd_MCHGR_Mask
IopWriteTriageDump
NtPowerInformation
ArbpGetRegistryValue
??_C@_0BP@MINDMCJL@PAGEVRFCIRP_MJ_SET_INFORMATION?$AA@
KiDebugServiceTrap
MmNumberOfPagingFiles
PopPolicyWorkerActionPromote
??_C@_0BE@MACMJJBB@ZwModifyDriverEntry?$AA@
PopAction
??_C@_0CH@HODDCCPG@PAGEVRFCIRP_MJ_INTERNAL_DEVICE_C@
ObpNumTracedObjects
MmMapMemoryDumpMdl
IopLargeIrpLookasideList
MmSetVerifierInformation
CcCopyRead
StringCbCopyW
PsGetCurrentProcess
CmpLazyFlushHiveCount
MiCheckForConflictingNode
CmpDiskFullWorkerPopupDisplayed
_isctype
ExpGetHandleInformation
CmClassString
MmModifiedNoWritePageListHead
IopInitHalResources
WmipSwitchToNewFile
VerifierKeInitializeMutant
??_C@_1BO@EDPDEJHE@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
WmipWmiLibInfo
KiBugCheckDriver
IopRootPortArbiter
??_C@_1CO@OCMFDEKK@NITI?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAL?$AAa?$AAs?$AAt?$AAG?$AAo?$AAo?$AAd?$AA?$AA@
PspJobClose
RtlCreateUnicodeStringFromAsciiz
CcQueueThrottle
DbgPrintEx
ExpInitializeExecutive
VerifierKeInitializeMutex
ExpGetCurrentUserUILanguage
??_C@_1FI@CKBCPPPF@APEG?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAs?$AA?2?$AAd@
__nullstring
PsActiveProcessHead
PopPerfIncreasePercentModifier
CmpMatchAcpiCreatorRevisionRule
ZwOpenTimer
MmSpecialPoolStart
ExAllocatePoolWithTag
FsRtlNotifyReportChange
Kd_WMICORE_Mask
ExpProductTypeIoSb
CmpDelayedLRUListHead
??_C@_0BI@JIJCEPOP@INITCONSTACPIOemTableId?$AA@
??_C@_1CA@ICPICGGA@?$AAO?$AAS?$AA_?$AAS?$AAE?$AAR?$AAV?$AAI?$AAC?$AAE?$AA_?$AAP?$AAA?$AAC?$AAK?$AA?$AA@
VfAssert
KdPollBreakIn
WmipFlushLogger
IovpInternalDeferredCompletion
HeadlessInit
IopRootIrqArbiter
PopBuildMemoryImageHeader
??_C@_0CB@IOGLEGBB@PAGEVRFCIRP_MJ_QUERY_INFORMATION@
PspTerminateAllProcessesInJob
GUID_DEVICE_ARRIVAL
MiSessionPageTableRelease
MiMapPagesToZeroInHyperSpace
??_C@_19IKMAGEBF@APEG?$AA?$AN?$AA?6?$AA?$AA@
??_C@_0BL@OEDEBAMI@ZwAssignProcessToJobObject?$AA@
??_C@_0FI@GCKCOAMM@PAGEVRFCAny?5PNP?5IRP?5must?5have?5st@
wcsncat
ZwQueryVirtualMemory
MmSectionExtendSetResource
ExpTimeRefreshTimer
IopAddPageToPageMap
ArbpBuildAllocationStack
ViGenericVerifyFinalIrpStack
SepInitSystemDacls
ExAcquireResourceSharedLite
FsRtlTeardownPerStreamContexts
IopQuerySetFsAlignmentRequirement
IoCsqInsertIrp
ObGetProcessHandleCount
FsRtlFileLockCancelCollideLock
??_C@_1CG@DKIBJMII@NITIOCSN?$AAT?$AAC?$AAo?$AAm?$AAp?$AAa?$AAt?$AAi?$AAb?$AAl?$AAe?$AAI?$AAD?$AAs?$AA?$AA@
NtCreateSection
Kd_UNIMODEM_Mask
ExRaiseHardError
InbvUpdateProgressBar
??_C@_0BK@LOIPFHFL@ZwSetInformationJobObject?$AA@
??_C@_0DD@FNAIHIKG@PAGEVRFYVirtual?5address?5?$CFp?5out?5o@
FsRtlOplockBreakToNone
??_C@_1BG@DBFGANKN@APEG?$AAR?$AAo?$AAo?$AAt?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
XpressEncodeCreate
KdpPollBreakInWithPortLock
??_C@_1HM@BAFGICOL@APEG?$AA?2?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAm?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAc?$AAu?$AAr?$AAr?$AAe@
NtSetContextThread
ZwAllocateVirtualMemory
??_C@_1BE@DIAFCKMH@?$AAI?$AAN?$AAE?$AAX?$AAC?$AAL?$AAU?$AAD?$AAE?$AA?$AA@
PsEmbeddedNTMask
ObpRegisterObject
ExpDebuggerWorkItem
SepTokenPolicyCounter
KeUserCallbackDispatcher
ViHideCacheConflicts
SeIsChildTokenByPointer
KiReadyThread
IoSetPartitionInformationEx
ObpProcessRemoveObjectQueue
MiCacheOverride
MiAddWorkingSetPage
DbgkCopyProcessDebugPort
RtlpExtendStackTraceDataBase
ExAllocateFromPagedLookasideList
??_C@_1BA@MEFNBNCG@APEG?$AAd?$AAu?$AAm?$AAp?$AA_?$AA?$AA@
NtUnloadKey
HvpGetCellMap
PiCopyKeyRecursive
SdbReadQWORDTag
IopReleaseResourcesInternal
??_C@_0BP@FJNKBBFE@GUID_HWPROFILE_CHANGE_COMPLETE?$AA@
ExRemoveHeadNBQueue
PspWriteTebImpersonationInfo
??_C@_0DJ@MKLCAJE@PAGEVRFY?$CIWhichSpace?$DN?$CFx?0?5Buffer?$DN?$CF@
IoCsqInsertIrpEx
ExpSmallPagedPoolLookasideLists
IoGetTopLevelIrp
MiDeleteSessionSpecialPool
GUID_IO_VOLUME_PHYSICAL_CONFIGURATION_CHANGE
MapperMarkKey
FsRtlOplockIsFastIoPossible
__imp_HalAllProcessorsStarted
InbvIsBootDriverInstalled
ExDeleteResourceLite
ExAllocatePoolWithQuota
??_C@_09GLCGFILD@SAFEBOOT?3?$AA@
??_C@_0O@GDBLEMFD@INITCONST?$ICRES?$AA@
WmipLogger
PopNotifyLock
MmPeakCommitment
CmPhysicalAddressExtension
??_C@_0BC@JEDLPOL@IoInitializeTimer?$AA@
StringCchCopyW
VidBufferToScreenBlt
VidScreenToBufferBlt
IoCompletionObjectType
FsRtlLookupLastMcbEntry
IopDriverLoadResource
MmMinimumStackCommitInBytes
NtDeleteFile
CmpCacheOnFlag
SdbpGetMappedStringFromTable
Kd_IDEP_Mask
KdpSearchPageHitOffsets
??_C@_1FE@OGMHMEAN@APEGOCSN?$AAT?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?2@
SeDeassignSecurity
DECREMENT_ADAPTER_CHANNELS
FsRtlCopyWrite
CmpFindTagIndex
IopUnloadDriver
NtSetIntervalProfile
KeRemoveEntryDeviceQueue
CmpSystemHiveHysteresisHighSeen
??_C@_1BI@BGNDDIIK@t?4xe?$AAt?$AAM?$AAc?$AAa?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
PopReleasePolicyLock
KiTimeIncrementShiftCount
VfMajorVerifyIrpStackUpward
??_C@_1FK@GFMJHGCG@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?5?$AAr?$AAo?$AAo?$AAt?$AA?5@
CmpFindValueByName
NtQueryIntervalProfile
PiInitCacheGroupInformation
??_C@_0O@HDJBJFAL@ZwQueryEaFile?$AA@
VerifierExAcquireResourceExclusiveLite
??_C@_1BO@EEJFBNEI@APEG?$AAW?$AAM?$AAI?$AA?2?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
HdlspAddLogEntry
MiSectionMapping
CcDeleteSharedCacheMap
??_C@_17COBCPAGK@APEG?$AA?2?$AA?$AA@
CmpCacheLookup
ArbArbiterHandler
PpSaveDeviceCapabilities
IoWMISystemControl
ParallelId
??_C@_1CA@GCCCFBAN@APEG?$AAR?$AAo?$AAo?$AAt?$AAB?$AAu?$AAs?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
PopFlushVolumeWorker
FsRtlInitializeFileLock
GUID_DEVICE_START_REQUEST
??_C@_0BL@IPBOBFNI@PAGEVRFCWDM?5DRIVER?5WARNING?$AA@
MiLockCode
MiTotalUnloads
PiPagePathSetState
??_C@_0BO@PCEJGGC@PAGEVRFCIRP_MN_QUERY_ALL_DATA?$AA@
??_C@_1O@LPCHMKNG@?$AAD?$AAC?$AAO?$AAM?$AAS?$AAS?$AA?$AA@
KeBugCheckCallbackLock
??_C@_0M@GDMPEKJP@PAGEKDDEBUG?$AA@
??_C@_0BB@KGEIOFMC@PAGELKWaiting?5on?$AA@
??_C@_1CI@GIOAMECM@?$AAB?$AAI?$AAN?$AA_?$AAP?$AAR?$AAO?$AAD?$AAU?$AAC?$AAT?$AA_?$AAV?$AAE?$AAR?$AAS?$AAI?$AAO?$AAN?$AA?$AA@
WmipIsSMBiosKey
IoBuildPartialMdl
WmipCorrectedMCEHead
??_C@_1M@FFAJBNJK@t?4xe?$AAt?$AA?3?$AA?3?$AA?$AA@
??_C@_1CC@POGGJHPJ@APEG?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?2?$AA?$AA@
InbvSolidColorFill
KiStartUserThreadReturn
??_C@_1BM@MHJMODEB@APEG?$AAD?$AAu?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAe?$AAO?$AAf?$AA?$AA@
??_C@_0L@EIGLBALK@ZwSetTimer?$AA@
CmpFileRead
IopTimer
MiMakeSystemAddressValid
??_C@_0CC@NONMENKB@PAGENo?5hooks?5defined?5in?5hotpatch@
IopTimerDpc
KeInitializeThreadedDpc
DemandZeroPte
MiMapWithLargePages
SdbpCheckUptoVersion
ZwImpersonateAnonymousToken
GUID_DEVICE_KERNEL_INITIATED_EJECT
StringCbCatW
KeInsertByKeyDeviceQueue
DemandZeroPde
DbgBreakPoint
ExpWorkerInitialization
ZwCreateSymbolicLinkObject
MiFirstPageFileCreatedAndReady
??_C@_0BM@MGFOAFM@PAGE?7ObjectAttributes?5?$DN?5?$CFp?6?$AA@
??_C@_1BA@GIDKNJFM@?$AAA?$AAU?$AAT?$AAO?$AAC?$AAH?$AAK?$AA?$AA@
SeLockMemoryPrivilege
PiCollectOpenHandlesCallBack
VerifierKeWaitForSingleObject
??_C@_0O@GONIEANP@?4text?$CK?5?$CK?5VF?3?5?$AA@
SdbGetDatabaseID
ViDdiClassFailDeviceUnderDebugger
LookupEntryPoint
IoInitializeTimer
xHalHandlerForBus
CcGetDirtyPages
KeThreadDpcEnable
PipLoadBootFilterDriver
??_C@_0IE@DCDOKBOP@PAGEVRFCThe?5size?5field?5of?5the?5qu@
??_C@_1CE@NNEEHMDM@APEG?$AAA?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAO?$AAr?$AAd?$AAe?$AAr?$AA?$AA@
KiOpPatchCode
KiFreezeLockBackup
ExInterlockedInsertHeadList
RtlpCreateUnCommittedRange
SepRmCommandServerThread
PopDispatchProcessorPolicyCallout
??_C@_0FD@IIHCFODH@PAGEVRFCA?5driver?5has?5failed?5an?5I@
??_C@_0DH@BAELIADI@PAGE?$CK?5The?5system?5detected?5a?5bad?5@
CcRegularWorkQueue
GUID_BUS_TYPE_1394
GUID_DEVINTERFACE_WRITEONCEDISK
GUID_DEVCLASS_FSFILTER_SYSTEMRECOVERY
??_C@_1HM@FHHDCADO@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAU@
MiFeedSysPtePool
IopQueryAndSaveDeviceNodeCapabilities
PpDevNodeRemoveFromTree
MiSubsectionsConvertedToDynamic
??_C@_0L@LCNEJABC@INITMININT?$AA@
GUID_DEVCLASS_FSFILTER_COPYPROTECTION
CmpInitializeCache
MiInsertPageFileInList
PsEstablishWin32Callouts
??_C@_1BA@CGHKDFOI@APEG?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
PopClonePcr
PopThermalZoneDpc
RtlAddressInSectionTable
ViRecursionDepthLimitFromRegistry
??_C@_0DO@JNHCPKIN@PAGEVRFCPDO?5has?5not?5responded?5to@
PiFinalizeVetoedRemove
CmpGetValueKeyFromCache
??_C@_05ENMFGJHG@INIT?$DO?$AA@
PopApplyAdminPolicy
KiQueuedLockTableSize
MiFlushPteListFreePfns
RtlAppendStringToString
WmipSDRegistryQueryRoutine
NtReplaceKey
Kd_RTLTHREADPOOL_Mask
ViMessageClassCoreError
MiFirstReservedZeroingPte
MiReloadBootLoadedDrivers
??_C@_1CE@NAICKCLE@?$AAN?$AAo?$AAn?$AAP?$AAa?$AAg?$AAe?$AAd?$AAP?$AAo?$AAo?$AAl?$AAQ?$AAu?$AAo?$AAt?$AAa?$AA?$AA@
WmipGetSysIds
ExpLicenseInfo
MiPerformHotPatch
MmSpecialPoolRejected
MiInitMachineDependent
??_C@_0M@KHJPGLKE@INITMINIMAL?$AA@
NtReadRequestData
RtlpGetRegistryHandle
??_C@_1BK@JGDALIPB@APEG?$AAR?$AAo?$AAo?$AAt?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?$AA@
IoAllocateWorkItem
WmipIsWbemRunningTimer
LdrpSearchResourceSection_U
??_C@_0BA@IELBDHNO@PAGEVRFCHAL?4DLL?$AA@
??_C@_0IP@JFFEBJLF@PAGEVRFCThe?5UI?5Number?5field?5of?5t@
MmZeroPageFile
GUID_DEVCLASS_VOLUME
??_C@_1BE@FMIMMEOM@APEG?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
IoStartPacket
GUID_DEVICE_REMOVAL_VETOED
??_C@_0BG@DDDENKOA@?4text?3?3?$CFhs?$CFu?4?$CFu?4?$CFu?4?$CFu?$AA@
??_C@_0BB@KIFBPAKN@ZwAddDriverEntry?$AA@
??_C@_1BC@BGMOHEGK@?$AAA?$AAP?$AAP?$AA_?$AAN?$AAA?$AAM?$AAE?$AA?$AA@
PiInitializeDevice
MiInitializeMemoryEvents
??_C@_1BE@FAKKNCJN@APEG?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AA?$AA@
??_C@_1BM@OEAHGECE@APEGOCSN?$AAT?$AAH?$AAA?$AAR?$AAD?$AAW?$AAA?$AAR?$AAE?$AA?$AA@
PopCurrentLevel
CcPinReadNoWaitMiss
MiStackGrowthFailures
ZwSetDebugFilterState
??_C@_1BM@OIMLCGJJ@APEG?$AAc?$AAa?$AAn?$AAn?$AAo?$AAt?$AA?5?$AAf?$AAi?$AAn?$AAd?$AA?$AA@
PpBusTypeGuidArray
??_C@_04NKLNNIHE@PAGE?$AA@
KiDispatchInterrupt
??_C@_0CJ@LBKHBMOA@PAGECritical?5thread?50x?$CFp?5?$CIin?5?$CFs?$CJ@
??_C@_1CG@KKGDIKPJ@NITI?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAB?$AAo?$AAo?$AAt?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
ViInitializePadding
WmipUnreferenceEntry
RtlpDeCommitFreeBlock
??_C@_1BM@KFMHLDEE@APEGOCSN?$AAT?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
_wcsicmp
VfZwEnumerateValueKey
VfDeadlockReleaseResource
??_C@_0CB@OALOPDCL@PAGEVRFCIRP_MN_QUERY_STOP_DEVICE@
SeShutdownPrivilege
RtlInt64ToUnicodeString
??_C@_0BB@CMDBBIFA@PAGEHDLS?$BL?$FL?$CFd?$DL?$CFdH?$AA@
ObDereferenceObject
RtlCompareMemoryUlong
KeAcquireSpinLockRaiseToSynch
IoAttachDeviceToDeviceStackSafe
PopInrushPending
??_C@_0BE@PDOFHMMM@GUID_DEVICE_ARRIVAL?$AA@
CcPostWorkQueue
MmSetAddressRangeModified
RtlTraceDatabaseEnumerate
PoSetPowerState
RtlpRandomExAuxVarY
WatchStepOverHandle
PsSetProcessSecurityPort
IopConnectLinkTrackingPort
??_C@_0BA@EIIDCDCI@INITCONSTDelReg?$AA@
FsRtlDeregisterUncProvider
Phase1InitializationDiscard
CmpRegistryMachineHardwareDescriptionSystemString
??_C@_1BO@HHKJCIFL@APEG?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
??_C@_1DA@FHDEGJGM@APEGOCSN?$AAT?$AAD?$AAo?$AAc?$AAk?$AAi?$AAn?$AAg?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
NtClearEvent
ZwPrivilegeCheck
ObpCaptureHandleInformation
SeNullSid
KiTimerExpireDpc
MmProtectedPteList
NtCreateDebugObject
IopVerifyDiskSignature
GUID_DEVINTERFACE_FLOPPY
RtlOemStringToUnicodeString
SepAdtCloseObjectAuditAlarm
??_C@_1CK@KKLMMIFM@APEGOCSN?$AAT?$AAA?$AAu?$AAd?$AAi?$AAo?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
IopGetDumpStack
IopCurrentHardError
KdPrintBufferChanges
MmSharedUserDataPte
IopStartRamdisk
FsRtlAcquireFileExclusive
KiInterruptDispatch
MmLockAndCopyMemory
IopSelectFirstConfiguration
??_C@_0CA@NNALLAF@PAGEVRFY?$CIDeviceTextDescription?$CJ?$AA@
PsEnforceExecutionTimeLimits
??_C@_0BC@JMHOIME@ZwModifyBootEntry?$AA@
WmipCorrectedEventlogCounter
ZwSetEvent
??_C@_17JFHIPNKF@?$AAA?$AAP?$AAI?$AA?$AA@
StringCchPrintfExW
RotBarInit
SeCreateAccessState
ExDestroyHandle
MiInsertIoSpaceMap
SepSystemDefaultSd
??_C@_1BA@INAEFELG@?$AAH?$AAA?$AAL?$AAI?$AAA?$AA6?$AA4?$AA?$AA@
ZwCreateKey
MmUnmapIoSpace
??_C@_0EC@BDMAFDFB@?4textPopCreateHiberFileSecurityD@
??_C@_1CM@HNBBGHOC@APEGOCSN?$AAT?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
??_C@_1HA@NLLJNAPC@APEGDHSL?$AAE?$AAn?$AAt?$AAr?$AAy?$AA?5?$AAc?$AAo?$AAu?$AAl?$AAd?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAb?$AAe?$AA?5?$AAr?$AAe?$AAc?$AAo?$AAr?$AAd?$AAe?$AAd?$AA?5@
KiCodePatchCycle
KdpSwitchProcessor
MiIssuePageExtendRequestNoWait
??_C@_1CC@PGEKGGCH@NITI?$AAM?$AAa?$AAx?$AAi?$AAm?$AAu?$AAm?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAs?$AA?$AA@
VfZwReadFile
RtlBaseAceType
MmDeterminePoolType
IoOtherTransferCount
IoShutdownPnpDevices
??_C@_1CA@IDIHDDIM@NITI?$AAD?$AAh?$AAc?$AAp?$AAI?$AAP?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
??_C@_1CK@ICFBKDFH@APEG?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAB?$AAu?$AAi?$AAl?$AAd?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
PsGetCurrentThreadStackLimit
MiReturnPageTablePageCommitment
??_C@_1BC@JIAEDLOH@APEG?$AAL?$AAo?$AAc?$AAa?$AAl?$AAe?$AA?$AA@
CmpMarkKeyDirty
ZwSetSystemTime
PiAllocateCriticalMemory
PiNotifyUserModeRemoveVetoed
IoChangeFileObjectFilterContext
PsWatchEnabled
??_C@_1BC@IHJNOKFB@?$AAT?$AAW?$AAO?$AAT?$AAR?$AAA?$AAC?$AAK?$AA?$AA@
GUID_DEVICE_STANDBY_VETOED
memcpy
CmRegistryLogSizeLimit
MiUpdateImageHeaderPage
??_C@_0DK@MBONGKMP@PAGERTL?3?5Expand?5variables?5for?5?$CFw@
??_C@_1BM@GDPOIFFB@APEG?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
CmpAppendSection
ObpStackTraceLock
InbvPortInitialize
CmpGetValueDataFromCache
FsRtlCheckNotifyForDelete
VfPnpVerifyIrpStackUpward
??_C@_1DK@EADGDFCE@NITI?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAW?$AAM?$AAI?$AAA?$AAd?$AAm?$AAi?$AAn?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
ObReferenceObjectEx
WmipSMBiosVersionInfo
PsLoadedModuleResource
SdbFindNextStringIndexedTag
WmiWriteFailureLimit
??_C@_0L@JMPOHCLG@PAGELK?$CFws?5?$AA@
IopBootAllocation
ZwGetContextThread
NtCreateDirectoryObject
VfZwOpenProcess
CmpSetValueDataNew
MiSessionDataPages
KeInvalidAccessAllowed
GUID_DEVCLASS_1394DEBUG
EtwpDefaultTraceSecurityDescriptor
CcRemapBcb
??_C@_1CG@JIIJPBCG@APEGOCSN?$AAT?$AAU?$AAS?$AAE?$AAR?$AA?2?$AA?4?$AAD?$AAE?$AAF?$AAA?$AAU?$AAL?$AAT?$AA?$AA@
MmSession
SeCaptureSubjectContextEx
PspAssignPrimaryToken
ObpCloseHandleProcedure
PopProcessorIdle
??_C@_1EG@EILEPOGF@NITI?$AAD?$AAL?$AAL?$AAH?$AAO?$AAS?$AAT?$AA?4?$AAE?$AAX?$AAE?$AA?0?$AAM?$AAM?$AAC?$AA?4?$AAE?$AAX?$AAE?$AA?0?$AAR?$AAU?$AAN?$AAD?$AAL?$AAL?$AA3?$AA2?$AA?4?$AAE@
CmpRemoveFromDelayedClose
__imp_HalEnableSystemInterrupt
??_C@_0EK@GFPKGCF@PAGEHDLSNew?5log?5entries?5have?5bee@
??_C@_1DC@PDALFCJM@APEGOCSN?$AAT?$AAC?$AAo?$AAm?$AAm?$AAu?$AAn?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
??_C@_0DD@IPHHJNMD@PAGEHvpDoWriteHive?$FL14?0?$CFs?$FN?3?5Faile@
VeAllocatePoolWithTagPriority
KdpSymbol
CmRestoreKey
KiProcessNMI
PipProcessDevNodeTree
FsRtlFindInTunnelCache
ExpLuid
PspSystemDll
MiBadRefCount
??_C@_0BJ@LBCAOJIC@ZwQueryDefaultUILanguage?$AA@
IopCacheHitIncrement
RawInitialize
xHalSetWakeEnable
PsChangeJobMemoryUsage
??_C@_1BO@HEMHAOHG@NITI?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?$AA@
ObpLock
MmIsThisAnNtAsSystem
CmpFindMatchingDescriptorCell
ExpMaxTimeSeperationBeforeCorrect
NlsOemLeadByteInfoTable
PspInitialSystemProcessHandle
MiComputeInitialLargePage
??_C@_0BD@FOFAPLGI@?4textHOTP_ID_None?6?$AA@
CmNtSpBuildNumber
CmpMatchPointerRule
MmPoolFailureReasons
IopAllocateErrorLogEntry
ExpCenturyWorkItem
MiClearStackGuardBits
SeAuditHandleCreation
VfScatterGatherCallback
MiCheckProtoPtePageState
??_C@_1BE@JJMNONKL@APEG?$AAM?$AAI?$AAN?$AAI?$AAM?$AAA?$AAL?$AA?$AA@
??_C@_1CI@IKEANOOE@?$AAH?$AAi?$AAg?$AAh?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AA?$AA@
SeUnregisterLogonSessionTerminatedRoutine
??_C@_1BG@OAGNANOP@?$AAS?$AAH?$AAI?$AAM?$AA_?$AAT?$AAA?$AAG?$AAI?$AAD?$AA?$AA@
??_C@_1CE@JEOMIMOO@t?4xe?$AAt?$AAE?$AAj?$AAe?$AAc?$AAt?$AAa?$AAb?$AAl?$AAe?$AAD?$AAo?$AAc?$AAk?$AAs?$AA?$AA@
??_C@_1CK@CPCDFBHM@?$AAE?$AAm?$AAb?$AAe?$AAd?$AAd?$AAe?$AAd?$AAN?$AAT?$AA?2?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
MiAweViewRemover
NtCreateNamedPipeFile
IopWstrRequestedResources
??_C@_1CE@OMAJLJIP@?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
IopDisassociateThreadIrp
IopRegisterDeviceInterface
??_C@_0O@EODMOBGE@INITCONST?$ICCHL?$AA@
__isascii
RtlLookupElementGenericTableFullAvl
??_C@_0EA@NMMEBDFL@PAGE?5?5?$CIFailed?5Query?9Remove?5?9?5?$CKMi@
??_C@_1BO@FHHIGLDL@APEGOCSN?$AAT?$AAT?$AAc?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
FsRtlIsDbcsInExpression
MiModifiedPageWriterWorker
??_C@_1BK@LFGFKPJF@NITI?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAS?$AAS?$AA?$AA@
??_C@_1CG@KHHKKCCD@?$AAH?$AAe?$AAa?$AAp?$AAS?$AAe?$AAg?$AAm?$AAe?$AAn?$AAt?$AAR?$AAe?$AAs?$AAe?$AAr?$AAv?$AAe?$AA?$AA@
CmpFindSubKeyInRoot
CmpAssignSecurityDescriptor
MmSessionSize
IoInvalidateDeviceRelations
KiSuspendNop
??_C@_1JM@LJOFIBLK@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
PspFixedQuantums
MiRemoveWorkingSetPages
??_C@_0M@MIMAJPPI@INITXIPRAM?$DN?$AA@
MmDefaultMaximumNonPagedPool
??_C@_0BA@BEBJGGBP@ZwQueryValueKey?$AA@
??_C@_0FB@MCDJAKHH@PAGEVRFYCannot?5put?5adapter?5?$CFp?5un@
MmForceSectionClosed
??_C@_1CG@NHIOIKKP@?$AAL?$AAo?$AAw?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AA?$AA@
Kd_PCIIDE_Mask
MiReturnLargePages
CmpComputeKcbConvKey
??_C@_1BM@MLEMHCGF@?$AAP?$AAa?$AAg?$AAe?$AAd?$AAP?$AAo?$AAo?$AAl?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
KeReadStateQueue
ExpTimeZoneInformation
RtlDecompressFragmentProcs
??_C@_0L@FGJDHJDB@PAGEVRFY?$CFc?$AA@
MiCheckPteRelease
PerfInfoProfileObject
RawQueryVolumeInformation
VerifierKeReleaseSpinLock
IoWMIOpenBlock
KeIsWaitListEmpty
Kd_IHVSTREAMING_Mask
??_C@_1DA@MPJEAPHO@NITI?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAW?$AAM?$AAI?$AAD?$AAa?$AAt?$AAa?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
IovFreeIrp
KeTestSpinLock
SeSinglePrivilegeCheck
??_C@_0EM@DMHPHMAG@PAGERTL?3?5Expand?5variables?5for?5?$CFw@
ObpNumStackTraces
KeUserPopEntrySListEndWow64
??_C@_1DA@OFIAPNFD@APEG?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAP?$AAa?$AAn?$AAe?$AAl?$AA?2?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?$AA@
IopAllocateBootResourcesInternal
IopFilterResourceRequirementsCall
??_C@_1BI@HCCAONKE@?$AAF?$AAi?$AAl?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
NtDeleteBootEntry
MiAddWsleHash
CcTotalDirtyPages
??_C@_1BK@NCPAKMHJ@NITI?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAI?$AAp?$AA?$AA@
NtWriteVirtualMemory
PpQueryDeviceID
PiUserModeRunning
ZwCreateProcessEx
RtlpEnvironCacheName
GUID_LEGACY_DEVICE_DETECTION_STANDARD
WmiTraceMessage
CmpCheckOperator
CmpUnknownBusCount
FsRtlUninitializeOplock
??_C@_1CC@BINKNCGE@APEG?$AAH?$AAi?$AAb?$AAe?$AAr?$AAD?$AAu?$AAm?$AAp?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
__decimal_point
RtlGetFirstRange
xHalEndMirroring
ZwDeleteValueKey
CmpFindSubKeyInLeaf
sprintf
HvShutdownComplete
ExpGetUILanguagePolicy
RtlDestroyHeap
IopEliminateBogusConflict
KeSignalCallDpcSynchronize
RtlEqualUnicodeString
MiSpecialPoolLastPdeForSpecialPoolExpansion
BiosBegin
RtlpEnvironCacheValue
KiOpPrefetchPatchRetry
??_C@_1BC@CGJFNME@?$AAS?$AAC?$AAS?$AAE?$AAR?$AAV?$AAE?$AAR?$AA?$AA@
ExpWdHandlerContext
PspWin32SessionCallout
ExUuidCreate
GUID_PNP_LOCATION_INTERFACE
KeRemoveByKeyDeviceQueueIfBusy
KiInterruptDispatchNoLock
GUID_DEVCLASS_FSFILTER_CONTINUOUSBACKUP
??_C@_1EA@NCJEHECL@APEGOCSN?$AAT?$AAS?$AAm?$AAa?$AAl?$AAl?$AA?5?$AAB?$AAu?$AAs?$AAi?$AAn?$AAe?$AAs?$AAs?$AA?$CI?$AAR?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAe?$AAd?$AA?$CJ?$AA?$AA@
PpSetTargetDeviceRemove
??_C@_1BA@HCCLCMOH@?$AAR?$AAE?$AAD?$AAB?$AAO?$AAO?$AAK?$AA?$AA@
IoDeleteSymbolicLink
FstubCreateDiskRaw
CcCapturedSystemSize
SepPublicOpenUnrestrictedSd
??_C@_1BM@IBLHDHPJ@APEG?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAP?$AAa?$AAt?$AAh?$AAs?$AA?$AA@
GUID_DEVCLASS_MTD
SepRegQueryHelper
PpvUtilTestStartedPdoStack
NtIsProcessInJob
PopDcProcessorPolicy
PsNtosImageBase
CmpAppendDllSection
KeInitializeSemaphore
??_C@_0N@PDJGDHEJ@ZwRestoreKey?$AA@
IoArcHalDeviceName
??_C@_0O@LDDLOBIM@INITCONST?$IBOFF?$AA@
PpDeviceEventThread
CmpFreeKeyControlBlock
IopLargeIrpStackLocations
KeAcquireGuardedMutexUnsafe
IoCheckQuerySetFileInformation
SepLocalServicePublicSd
??_C@_1DE@GNOLNNIB@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAU?$AAs?$AAe?$AAr?$AA?2?$AA?4?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
NtAlertThread
CmpSetNetworkValue
??_C@_0BM@EFHNKOOO@PAGEVRFCIRP_MJ_LOCK_CONTROL?$AA@
PsGetProcessExitTime
IovUtilMarkStack
IopSetRegistryStringValue
MmVerifyDriverBufferLength
??_C@_1M@PBCAJEEF@?$AAF?$AAL?$AAA?$AAG?$AAS?$AA?$AA@
MiTriageSystem
KeInterruptTimeBias
ExCriticalWorkerThreads
VfIsPCIBus
MmFreePagesFromMdl
??_C@_0CD@OLPNPOKP@PAGEVRFCIRP_MN_QUERY_REMOVE_DEVI@
CmSuiteBuffer
MiLastModifiedWriteError
KiCFlushSize
SeDebugPrivilege
RtlpVerGetConditionMask
SepAuditFailed
CmpLazyFlushWorker
MiCheckPageFileMapping
??_C@_0BP@MIMIDCNL@PAGEUnsupported?5template?5type?6?$AA@
CcUnpinData
CmpCheckKey
ViDeadlockState
KeInitializeCrashDumpHeader
NtDebugActiveProcess
IopCommitConfiguration
MiDoneWithThisPageGetAnother
WmipInitializeRegistration
SeSystemEnvironmentPrivilege
SdbpInitializeSearchDBContext
CmRegistryMachineSystemCurrentControlSetControlBootLog
CmpRemoveKeyControlBlock
??_C@_1BC@EEPEKDPC@?$AAS?$AAH?$AAI?$AAM?$AA_?$AAR?$AAE?$AAF?$AA?$AA@
NtOpenFile
FsRtlTruncateBaseMcb
PiWalkDeviceList
MiAddValidPageToWorkingSet
??_C@_0O@CNOBKCEK@ZwCancelTimer?$AA@
SerialId
PsGetCurrentThreadProcessId
??_C@_0M@BKFBHBEE@PAGEenabled?$AA@
??_C@_1CI@NLDFKNMK@NITI?$AAW?$AAi?$AAn?$AA2?$AA0?$AA0?$AA0?$AAS?$AAt?$AAa?$AAr?$AAt?$AAO?$AAr?$AAd?$AAe?$AAr?$AA?$AA@
ZwQuerySemaphore
ExSystemTimeToLocalTime
??_C@_0HI@FLNGBDBL@PAGEVRFCThe?5code?5implementing?5th@
KiRetireDpcList
SeAssignPrimaryToken
??_C@_1M@HPAKMJON@APEG?$AAI?$AAs?$AAa?$AA?$AA@
CmpGlobalQuotaAllowed
KdpTimeSlipPending
??_C@_0BE@MMAIHNII@ZwSetBootEntryOrder?$AA@
PopGetPolicyWorker
PerfInfoFileNameRunDown
ExpInterlockedFlushSList
WmipDockUndockEventCallback
ZwCancelDeviceWakeupRequest
??_C@_1FM@JGENOLMO@APEG?$AA?2?$AAB?$AAa?$AAs?$AAe?$AAN?$AAa?$AAm?$AAe?$AAd?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?2?$AAP?$AAr?$AAe?$AAf?$AAe?$AAt?$AAc?$AAh?$AAP?$AAa?$AAr?$AAa@
??_C@_0N@PCCPOAKN@PAGEadvapi32?$AA@
IopTapeFileSystemQueueHead
WmipGEHeadPtr
HvpTruncateBins
CmpCheckHiveIndex
PiIsDriverBlocked
NtAcceptConnectPort
ApphelpCacheWrite
IoCsqInitializeEx
__C_specific_handler
??_C@_0BG@PINFAEP@PAGEVRFCPowerDeviceD1?$AA@
??_C@_1BE@DAJOLHOL@APEG?$AAh?$AAa?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
wcsncpy
NtListenPort
??_C@_0BC@DJJMPHLK@?4textUnrecognized?$AA@
??_C@_0CF@ELAMMGMF@PAGEVRFCIRP_MN_QUERY_SINGLE_INST@
IoDeleteDriver
VfZwEnumerateKey
ExVerifySuite
ZwQueryEaFile
ShowProgressBar
ExSetTimerResolution
IoGetDmaAdapter
KiOutSwapProcesses
SeAuditHardLinkCreation
KiCalibrateTimeAdjustment
CcDebugTraceLock
??_C@_1BC@HJJEILMB@NITI?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
SeAliasAccountOpsSid
??_C@_1CA@OMNGEHAM@t?4xe?$AAt?$AA?3?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?$AA@
??_C@_1BE@JHOCBNEO@?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AAO?$AAR?$AA?$AA@
ZwFlushBuffersFile
RtlpRandomConstantVector
MiGatherPagefilePages
MmGatherMemoryForHibernate
ObpUnsecureGlobalNamesBuffer
CmDisabledFloatingPointProcessor
PopPerfDegradeThrottleMinFrequency
??_C@_0O@COONLEMJ@ZwSetValueKey?$AA@
FsRtlFastUnlockAll
SepMaximumAccessCheck
ExPoolLookasideListHead
ViDeadlockSimultaneousLocksLimit
??_C@_1BC@FLNKIHIH@?$AAS?$AAC?$AAS?$AAI?$AAP?$AAO?$AAR?$AAT?$AA?$AA@
IopChainDereferenceComplete
ObGetObjectSecurity
CmpQuotaWarningPopupDisplayed
KdpReportLoadSymbolsStateChange
RtlCaptureContext
MmSysPteMinimumFree
__IMPORT_DESCRIPTOR_KDCOM
MMDB
__imp_KdSave
SepCreateLogonSessionTrack
??_C@_1M@IIBHAFND@?$AAW?$AAI?$AAN?$AA1?$AA6?$AA?$AA@
CmpRegistryMachineSystemCurrentControlSetControlBootLogString
IoGetDumpHiberRanges
??_C@_0EE@JEJONOLK@PAGELKChecksum?5for?5partial?5conte@
_setjmpexused
ZwQueryMultipleValueKey
IopSynchronousCall
MiIsProtectionCompatible
??_C@_0CF@MKDBCIJC@INITExpInterlockedPopEntrySListF@
??_C@_0CL@MDEAODNF@INIT?$CFu?5System?5Processor?5?$FL?$CFu?5MB?5M@
ExInitializeZone
ViFreeTrackedPool
PspJobTimeLimitsDpc
IoTranslateBusAddress
??_C@_0CI@BOOLBAKJ@PAGEVRFYVerification?5asserts?5dis@
??_C@_1CC@LHLPFFNI@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAD?$AAE?$AAS?$AAC?$AAR?$AAI?$AAP?$AAT?$AAI?$AAO?$AAN?$AA?$AA@
CmpDoCompareKeyName
NtTerminateJobObject
ExpFirmwareTableResource
??_C@_0O@MBEKEKKN@INITCONST?$ICSPS?$AA@
?enable@?2??DECREMENT_SCATTER_GATHER_LISTS@@9@9
GUID_IO_MEDIA_REMOVAL
MiMapPageInHyperSpace
ZwLockRegistryKey
VerifierMmMapLockedPages
ViAllocateMapRegistersFromFile
KdpLowWriteContent
MmSeventySeconds
??_C@_0KL@HKKEILDI@PAGEVRFCDriver?5has?5attempted?5to?5@
??_C@_1HM@IINEMKOC@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAL?$AAa?$AAs?$AAt?$AAK@
LpcpCreatePort
RtlLookupElementGenericTableAvl
??_C@_1BO@OGFNAHG@APEG?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAN?$AAu?$AAl?$AAl?$AA?$AA@
CmpSelfHealQueueLock
ExInitializePoolDescriptor
FsRtlpDRD
ExReleaseFastMutexUnsafe
CmpConfigurationAreaSize
IoWriteCrashDump
MiReplaceWorkingSetEntry
IopCmResourcesToIoResources
??_C@_1CO@KFGOODJE@?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AAS?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
RtlFindFirstRunClear
??_C@_08JJJDFCFB@PAGEVRFY?$AA@
??_C@_0CE@NNANNEGB@PAGEVRFY?$CIDeviceUsageTypeHibernat@
HvRefreshHive
IopBusNumberInitialize
??_C@_1BE@GPMIGAOG@?$AAL?$AAI?$AAN?$AAK?$AA_?$AAT?$AAE?$AAX?$AAT?$AA?$AA@
??_C@_1BI@EFAGGBAL@NITI?$AA?2?$AAG?$AAL?$AAO?$AAB?$AAA?$AAL?$AA?$DP?$AA?$DP?$AA?$AA@
CmpMiniNTBoot
IovpSessionDataBufferIO
GUID_HWPROFILE_CHANGE_COMPLETE
CmpAllocInited
Kd_FASTFAT_Mask
ZwRaiseException
MmPageFileExtension
??_C@_1O@EDBLBJGB@?$AAS?$AAE?$AAR?$AAI?$AAA?$AAL?$AA?$AA@
memmove
IopProfileNotifyList
ExpInterlockedPopEntrySListEnd
FsRtlDissectName
IopBuildCmResourceList
ViHookDmaAdapter
ExpDesktopMapping
CmpRebuildKcbCache
??_C@_0P@GGGCENKE@PAGEWILL?5BREAK?$AA@
KeSetIntervalProfile
KeTimeSynchronization
MiDeadPteTrackerSListHead
??_C@_0FG@EHKFOMLG@PAGEVRFYDriver?5has?5attempted?5to?5@
KdpReport
szDaylightBias
CmpAllocateKeyControlBlock
??_C@_0GL@BIEOMDII@PAGEVRFCCaller?5has?5completed?5a?5I@
NtDeviceIoControlFile
SeCaptureObjectTypeList
CmpMatchInfList
IoWMIQueryAllDataMultiple
SdbMakeIndexKeyFromString
??_C@_1HC@KPBGMFNB@APEGOCSN?$AAT?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu@
MiSessionSpaceWs
__imp_KdSendPacket
Kd_WSOCKTRANSPORT_Mask
IopTranslateAndAdjustReqDesc
WmiTraceProcess
NtFlushInstructionCache
??_C@_1BC@PFIHGJMD@APEG?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?$AA@
??_C@_1BK@FNPPACOG@?$AAI?$AAd?$AAe?$AAa?$AAl?$AAD?$AAp?$AAc?$AAR?$AAa?$AAt?$AAe?$AA?$AA@
??_C@_1BG@ELNNOAOH@APEG?$AAP?$AAr?$AAi?$AAs?$AAt?$AAi?$AAn?$AAe?$AA?$AA@
??_C@_1CA@OOCEFFDB@APEG?$AAH?$AAw?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAG?$AAu?$AAi?$AAd?$AA?$AA@
MiRundownHotpatchList
PsReportProcessMemoryLimitViolation
CcBeyondVacbs
ViDdiWmiMofKey
PspProcessMapping
??_C@_0HD@HGDOGJND@PAGEVRFCCaller?5of?5IoFreeIrp?5is?5f@
??_C@_1CC@PMGIDPBI@?$AAF?$AAL?$AAA?$AAG?$AA_?$AAM?$AAA?$AAS?$AAK?$AA_?$AAF?$AAU?$AAS?$AAI?$AAO?$AAN?$AA?$AA@
ComPortDBAdd
ExpControlKey
PiCriticalCopyCriticalDeviceProperties
LdrpAccessResourceDataNoMultipleLanguage
??_C@_1FG@PIIDHLBD@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc@
ExpSystemPrefixChangeBuffer
??_C@_1O@MMDMPNJE@NITI?$AAE?$AAn?$AAu?$AAm?$AA?$AA@
PopUserPresentSetWorker
NtQuerySystemEnvironmentValue
??_C@_1CC@KOGPJCCE@APEGOCSN?$AAT?$AAE?$AAi?$AAs?$AAa?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
KeBugCheckCallbackListHead
??_C@_0BI@NIPDHKHP@PAGEVRFCPowerActionNone?$AA@
_strnicmp
ObQueryTypeInfo
KdpSearchAddressRangeStart
MmGetSizeOfBigPoolAllocation
??_C@_0DF@NAPEONOK@PAGELKHIBER?3?5Init?5time?5?5?5?5?5?$CF3d?4?$CF@
??_C@_1BO@DBJJOGKB@NITI?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AA?$AA@
MmPfnLock
PipSetDevNodeState
MiEliminateWorkingSetEntry
SepRmCreateLogonSessionWrkr
??_C@_1BE@BPAIDDED@APEG?$AAN?$AAE?$AAT?$AAW?$AAO?$AAR?$AAK?$AA?$AA@
InitForceInline
RtlQueryRegistryValues
ZwAccessCheckByTypeResultList
__@@_PchSym_@00@UhieignUyzhvUmglhUokxUfkUlyqUznwGEUokxkOlyq@lpc
SdbFindFirstTag
MmPfnDereferenceSListHead
GUID_DEVCLASS_PRINTERUPGRADE
??_C@_1BM@NMABPDLP@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AAF?$AA1?$AA2?$AA?$AA@
CmpMarkKeyParentDirty
CmpRegistrySystemCloneString
IopSurpriseRemoveLockedDeviceNode
??_C@_1CA@EJHPIDFK@?$AAP?$AAr?$AAi?$AAo?$AAr?$AAi?$AAt?$AAy?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
CcIdleDelay
FsRtlAddBaseMcbEntry
IoOpenDeviceRegistryKey
RtlpBreakWithStatusInstruction
ExAcquireRundownProtectionCacheAware
ExpNextExpirationIsFatal
MiAvailablePagesEventHighSets
abWPAStringKey
MiLastStandbyRePurposed
CmpAddSubKey
MmDbgCopyMemory
KdpControlCPressed
PpRegistryDeviceResource
??_C@_0P@KBEJKOIE@PAGEHDLSreboot?$AA@
IovAllocateIrp
CcPfParametersRead
ZwSetSystemInformation
??_C@_19PFCDLDMI@?$AAN?$AAO?$AAN?$AAE?$AA?$AA@
??_C@_0FC@GLEMHFP@PAGEThe?5caller?5should?5not?5rely?5o@
VfFilterCreated
IopSurpriseRemoveListLock
??_C@_0CM@MNLNBMKJ@PAGEVRFY?6?$CK?$CK?$CK?5Verifier?5assertion?5@
KeInitializeGate
WmipCoalesceCorrectedErrorInterval
??_C@_1BM@MAFMKHBL@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AAF?$AA0?$AA9?$AA?$AA@
RtlZeroMemory
LpcpCopyRequestData
??_C@_0BI@NGIGCOE@PAGEVRFCIRP_MN_SET_LOCK?$AA@
??_C@_1CO@GNBGKGDI@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAL?$AAo?$AAa?$AAd?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?4?$AA?$AA@
??_C@_1BA@JAGAADAG@?$AAW?$AA3?$AA2?$AAT?$AAI?$AAM?$AAE?$AA?$AA@
??_C@_0CD@NADDKAFG@PAGEHook?5type?5not?5yet?5implemente@
??_C@_1BK@FANCMDKB@?$AAF?$AAL?$AAA?$AAG?$AAS?$AA_?$AAN?$AAT?$AAV?$AAD?$AAM?$AA1?$AA?$AA@
FsRtlDoesNameContainWildCards
??_C@_09OHOCAAIM@PAGEHDLS?$AH?$AA@
??_C@_1BC@MDBLBOGN@?$AAL?$AAI?$AAN?$AAK?$AA_?$AAU?$AAR?$AAL?$AA?$AA@
MmProductType
KeAreApcsDisabled
MmFreePagingSpaceLow
??_C@_1CC@GCFDAKOJ@?$AAB?$AAI?$AAN?$AA_?$AAF?$AAI?$AAL?$AAE?$AA_?$AAV?$AAE?$AAR?$AAS?$AAI?$AAO?$AAN?$AA?$AA@
??_C@_1HC@LFCEPON@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAU@
KiOpDecode
VfZwQueryDirectoryObject
??_C@_09PBJJLINO@?4text?6?$AN?$CFZ?$AA@
ViDdiInitialized
GUID_DEVICE_EJECT
??_C@_0BE@EIIJAFJP@PAGEVRFYIRP_MJ_SCSI?$AA@
??_C@_1CA@MDIPLKHK@NITI?$AAO?$AAU?$AAT?$AA?5?$AAO?$AAF?$AA?5?$AAM?$AAE?$AAM?$AAO?$AAR?$AAY?$AA?$AA@
IopInitializeDCB
CcPrepareMdlWrite
FsRtlLookupLastLargeMcbEntry
CmpDereferenceKeyControlBlock
??_C@_1DA@PFBFFIBK@APEGOCSN?$AAT?$AAK?$AAe?$AAy?$AAb?$AAo?$AAa?$AAr?$AAd?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
PopApmActiveFlag
MiMakePdeExistAndMakeValid
??_C@_1CM@HCAIKKLB@?$AAP?$AAe?$AAr?$AAf?$AAI?$AAn?$AAc?$AAr?$AAe?$AAa?$AAs?$AAe?$AAT?$AAi?$AAm?$AAe?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
CcMdlWriteAbort
WmipMSMCAEvent_MemoryHierarchyErrorGuid
FsRtlRequestExclusiveOplock
??_C@_1O@HIHGGBBM@?$AAO?$AAS?$AA_?$AAS?$AAK?$AAU?$AA?$AA@
IopWstrSpecialMemory
IopCheckDeviceAndDriver
FsRtlHalfSecond
KxDispatchInterrupt
??_C@_0BE@DKPBCEMK@?4text?6STOP?3?5?$CFlx?5?$CFs?6?$AA@
LdrFindResource_U
??_C@_19BMPFPCDA@APEGRVYF?$AA?$AA@
??_C@_1BO@NNJLCINI@?$AAM?$AAi?$AAn?$AAi?$AAm?$AAu?$AAm?$AAD?$AAp?$AAc?$AAR?$AAa?$AAt?$AAe?$AA?$AA@
RtlQueryAtomsInAtomTable
ViBucheckProcessParams
??_C@_0L@DHHMDIKD@PAGEVRFY?$CFp?$AA@
MmAllocatePagesForMdl
IopDeviceClassNotifyLock
RtlPrefetchMemoryNonTemporal
CmpAppendValue
CmpHoldLazyFlush
ViTrackIrqlIndex
MmPerfVadTreeWalk
FindBitmapResource
MiTrimAllSystemPagableMemory
MmSysPteTables
KeRaiseIrqlToDpcLevel
?enable@?2??VERIFY_BUFFER_LOCKED@@9@9
??_C@_1BK@BPAEJFHG@APEG?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
IopDuplicateDetection
CmpRegistryMachineSystemCurrentControlSetServicesEventLogString
KiEmulateAtlThunk
VfPacketFindAndLock
CmRegistrySizeLimitLength
KeClearEvent
KiSwapContext
WmipSwitchBuffer
HvShiftCell
WmipWriteMessageToGuid
WmipGenerateMofResourceNotification
??_C@_0BM@JNFLBAJB@PAGEBeginning?5handle?5dump?3?6?$AA@
??_C@_1BG@IOFFIGCI@APEG?$AAM?$AAi?$AAg?$AAr?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
KiIdleLoop
MiProcessValidPteList
RtlUpcaseUnicodeString
ExFreeToPagedLookasideList
EtwpPageLockHandle
??_C@_0DB@CEDKKNFN@PAGEHDLSType?5?$DP?5or?5Help?5for?5a?5lis@
RtlpInitializeHandleTableForAtomTable
??_C@_1BA@PAMFOGGK@NITI?$AAT?$AAo?$AAk?$AAe?$AAn?$AA?$AA@
??_C@_1BC@GPGHOLFA@NITI?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
NtMakePermanentObject
PiGetDeviceRegistryProperty
FsRtlIncrementCcFastReadNotPossible
MiInsertNode
ViIrpSynchronousCompletionRoutine
??_C@_1CG@GEGOGCNE@?$AAS?$AAe?$AAl?$AAf?$AAH?$AAe?$AAa?$AAl?$AAi?$AAn?$AAg?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
??_C@_0BD@KFNAOAKO@PAGEControlSet?$CF03d?$AA@
CmRegistryMachineSystemCurrentControlSetHardwareProfilesCurrent
GUID_DEVCLASS_HDC
KeSetDmaIoCoherency
??_C@_1BE@HJEEOIPD@APEG?$AAR?$AAo?$AAo?$AAt?$AAI?$AAR?$AAQ?$AA?$AA@
MiAllocateAweInfo
IoGetDeviceProperty
PopInitProcessorStateHandlers2
??_C@_1IK@HFOFGOIF@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAD?$AAe?$AAs@
IopBuildCmResourceLists
??_C@_1BA@GOEJPPPD@NITI?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?$AA@
??_C@_0DO@CEFPHGGN@PAGEVRFY?$FL?5DevObj?$DN?$CFp?0?5FileObject?$DN@
??_C@_1DE@BEFLENJI@?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAL?$AAa?$AAz?$AAy?$AAF?$AAl?$AAu?$AAs?$AAh?$AAI?$AAn?$AAt?$AAe?$AAr?$AAv?$AAa?$AAl?$AA?$AA@
ExpSystemPrefixValid
nullclass
MiCreateMemoryEvent
CmpCleanUpKCBCacheTable
MmCodeClusterSize
IopFreeIrp
IoStopTimer
PopDcPolicy
IopProcessRelation
PopThermalZoneCleanup
??_C@_1O@BBGFHLK@?$AAT?$AAC?$AAP?$AAI?$AAP?$AA6?$AA?$AA@
??_C@_0CA@NGMHLLCH@PAGEVRFCPowerSystemSleeping2?4S2?$AA@
??_C@_1JG@BOLHGJG@APEGOCSN?$AAT?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu@
ObpIncrementUnnamedHandleCount
??_C@_1CC@MBGHAOD@?$AAA?$AAu?$AAd?$AAi?$AAt?$AAB?$AAa?$AAs?$AAe?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?$AA@
CmpCheckKeyDebug
??_C@_1M@PLBADMGE@NITIOCSN?$AAT?$AA?$AA@
CmpRiseID
ZwSuspendProcess
MmMappedFileHeader
GUID_BOGUS_INTERFACE
ExReleaseResourceForThreadLite
??_C@_0BA@JKMPMOEJ@PAGEHDLSrestart?$AA@
??_C@_1CG@FHNFLCDO@NITI?$AAB?$AAo?$AAo?$AAt?$AAA?$AAr?$AAc?$AAh?$AAi?$AAt?$AAe?$AAc?$AAt?$AAu?$AAr?$AAe?$AA?$AA@
WmipAllocateTraceBufferPool
VfIrpWatermark
WmipDisableMCAPopups
MiSwapWslEntries
MmIsAddressValid
WmipReleaseTraceBuffer
CmpAddSecurityCellToCache
PopDispatchSetStateFailure
??_C@_1BO@GPHLOIG@APEGOCSN?$AAT?$AAU?$AAn?$AAd?$AAe?$AAf?$AAi?$AAn?$AAe?$AAd?$AA?$AA@
PopWorkerTypes
MiReleaseProcessReferenceToSessionDataPage
ObpCreateHandle
RtlGetOwnerSecurityDescriptor
??_C@_1CO@PDBCOIJF@APEGOCSN?$AAT?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
BootDriverLock
FsRtlReleaseFile
ExpExpirationThread
ZwCompressKey
MY_READ_PORT_UCHAR
??_C@_1CO@JEDKFBHI@APEG?$AAO?$AAv?$AAe?$AAr?$AAr?$AAi?$AAd?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAV?$AAe?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
CmInstallUILanguageIdType
??_C@_1BE@LCOLFKFD@?$AAD?$AAA?$AAT?$AAA?$AA_?$AAB?$AAI?$AAT?$AAS?$AA?$AA@
Kd_FLOPPY_Mask
PspForegroundQuantum
RtlpComputeMergedAcl
??_C@_1HC@NDLGIHEE@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
KeStopProfile
MmFreePageListHead
PopIdle
HeadlessKernelAddLogEntry
ObSwapObjectNames
WmipQueryWmiDataBlock
LpcWaitablePortObjectType
??_C@_1CA@HGOKPFMG@APEG?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAC?$AAd?$AAR?$AAo?$AAm?$AA?$AA@
RtlUpperChar
NtAlertResumeThread
NtCreateEvent
MiActiveVerifies
MiAddViewsForSectionWithPfn
??_C@_0BM@PIIFPAIC@ZwQueryInformationJobObject?$AA@
KiNmiInterrupt
??_C@_1DI@DNPAIOAD@APEG?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?5?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
CmpOverwriteHive
IopGetDeviceInterfaces
??_C@_05GGOIDKLF@INIT?$DN?$AA@
mbstowcs
Kd_SR_Mask
ViDmaOperations
ExpSystemErrorHandler2
??_C@_0BE@DEDCNMNA@PAGE1?92?93?5Preloader?$AA@
RtlpExecuteHandlerForUnwind
ExpInterlockedPopEntrySListResume
SystemStateNames
IoConnectInterrupt
RtlpComputeMergedAcl2
??_C@_04OHJIHAFH@None?$AA@
PopPresentIrp
KiDPCTimeout
??_C@_1CE@DPOPADMJ@NITI?$AAB?$AAo?$AAo?$AAt?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAR?$AAe?$AAp?$AAl?$AAy?$AA?$AA@
PsQuitNextProcess
CcDataFlushes
ZwOpenProcess
ExpNextSystemCutover
ZwCreateWaitablePort
RtlpInsertUnCommittedPages
CmpAddInfoAfterParseFailure
FsRtlpNopStackOverflowRoutine
ExfInitializeRundownProtection
??_C@_0M@DPMBOMBL@PAGEHDLS?$AI?5?$AI?$AA@
?enable@?2??DECREMENT_COMMON_BUFFERS@@9@9
??_C@_0DG@OCBMPDCF@PAGELKHIBER?3?5?$CFlu?5Pages?5processed@
RtlCaptureStackBackTrace
IopInitializePlugPlayNotification
ExpDebuggerPageIn
IoWriteTransferCount
MmFreePagesByColor
KiBugCheck3
PiForEachDriverQueryRoutine
FsRtlRegisterFileSystemFilterCallbacks
CmEnumerateValueKey
ExUnregisterCallback
KdpSearchStartPageFrame
ZwSaveKeyEx
PsMaximumWorkingSet
DelistKeyBodyFromKCB
CmpGetNameControlBlock
PiCompareInstancePath
PARTITION_LDM_METADATA_GUID
??_C@_1CK@DFPOFCLL@APEG?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA3?$AA2?$AA?2?$AAS?$AAM?$AAS?$AAS?$AA?4?$AAE?$AAX?$AAE?$AA?$AA@
??_C@_1FC@NDKJFBAP@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?5?$AAo?$AAb?$AAj?$AAe?$AAc@
SdbFindFirstNamedTag
CmpCheckValueListDebug
ExpTimerResolutionCount
??_C@_0CG@IEAEEKKD@PAGEVRFCIRP_MN_CHANGE_SINGLE_INS@
PopHiberFile
GUID_POWER_DEVICE_ENABLE
CmpCopyCell
PopSystemButtonHandler
??_C@_1O@GBFINDKL@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?$AA@
KiProfileIrql
SepExWorkItem
HdlspPutString
VidDisplayString
MiLargePageRanges
IoAcquireRemoveLockEx
MmAllocateContiguousMemorySpecifyCache
??_C@_0CD@GCEAGKPK@INIT?2Device?2Harddisk?$CFd?2Partition@
Kd_DMSYNTH_Mask
IopSetDeviceSecurityDescriptor
??_C@_1CO@JGCFELKE@?$AAL?$AAU?$AAI?$AAD?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAM?$AAa?$AAp?$AAs?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
MiUnmapSinglePage
MiFindEmptyAddressRangeDownTree
ObpStackSequence
ArbRollbackAllocation
PipNotifySetupDevices
SepCreateImpersonationTokenDacl
DisplayBootBitmap
PspGetSetContextInternal
ZwSetUuidSeed
NtWriteRequestData
SdbGetDatabaseMatch
__imp_KdRestore
MmWorkingSetManagerEvent
HvMarkDirty
IoRegisterDeviceInterface
PipTearDownPnpStacksOnShutdown
Kd_FUSION_Mask
CmShutdownSystem
PopCheckForWork
PopPreserveRange
VdmQueryDirectoryFile
IovUtilVerifierEnabled
IopInitializePlugPlayServices
??_C@_1BO@COKAMBIP@APEG?$AAD?$AAo?$AAc?$AAk?$AAi?$AAn?$AAg?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
??_C@_1FC@GILABEAE@NITI?$AA?2?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?2?$AAC?$AAr?$AAi?$AAt?$AAS?$AAe?$AAc?$AAO?$AAu?$AAt?$AAO?$AAf?$AAM?$AAe?$AAm@
IoFreeDumpStack
MmOutSwapProcess
FsRtlRequestOplockII
ZwInitiatePowerAction
RtlpApplyRelocationFixups
??_C@_0DN@JGHLHDJG@PAGECmpFileRead?3?7Failure2?3?5statu@
__NLG_Dispatch2
MiWorkingSetRequestFlags
PopUnlockAfterSleepWorkItem
KeInitializeInterrupt
GUID_DEVICE_QUERY_AND_REMOVE
KdDebuggerNotPresent
CmpProcessorNameString
SeOpenObjectAuditAlarm
CcScheduleLazyWriteScan
IopOpenDeviceParametersSubkey
??_C@_1O@NDGIMMPN@?$AAF?$AAL?$AAT?$AAM?$AAG?$AAR?$AA?$AA@
ExfAcquirePushLockShared
PipGenerateMadeupNodeName
SystemHiveFullPathName
MmWriteAllModifiedPages
FsRtlSetFileSize
??_C@_17PPLOPEO@APEG?$AA?5?$AA?$AA@
MmShutdownSystem
NtDelayExecution
Kd_REDBOOK_Mask
GUID_BUS_TYPE_ISAPNP
MiProcessLoaderEntry
PpForEachDeviceInstanceDriver
_wcsnicmp
MiProtectedPoolRemoveEntryList
IopComputeConfigurationPriority
??_C@_0L@HBDHNKEI@?4textffff?3?$AA@
MmIoHeader
MiCheckPteReserve
PipRequestDeviceRemovalWorker
??_C@_1BO@JMHHGEIF@NITI?$AAC?$AAa?$AAp?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAi?$AAe?$AAs?$AA?$AA@
NtSaveMergedKeys
MmFlushImageSection
MmLeakedLockedPages
??_C@_07KJDNPMMH@PAGE?5?$HN?6?$AA@
MmTotalSystemPtes
??_C@_1EC@ELIMGEMH@NITI?$AAM?$AAa?$AAx?$AAi?$AAm?$AAu?$AAm?$AAT?$AAu?$AAn?$AAn?$AAe?$AAl?$AAE?$AAn?$AAt?$AAr?$AAy?$AAA?$AAg?$AAe?$AAI?$AAn?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAs@
KeZeroSinglePage
CmpProcessorControl
RtlReserveChunkProcs
NtSetInformationJobObject
KeReleaseInterruptSpinLock
ExWindowStationParseProcedureCallout
??_C@_1BK@BEOLOMAE@APEG?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AA?$AA@
HvCheckBin
xHalSetWakeAlarm
CmRegisterCallback
MiFindContiguousMemoryInPool
??_C@_1BG@GFJAMJGO@APEG?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAa?$AAl?$AA?$AA@
ExpFreeHandleTable
RtlReadHookInformation
??_C@_1BC@GHOGJHGE@t?4xe?$AAt?$AAW?$AAO?$AAW?$AA6?$AA4?$AA?$AA@
??_C@_1II@GHBLLJNI@?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC@
ArbStartArbiter
SeUnsolicitedInputPrivilege
IoSetHardErrorOrVerifyDevice
RtlSetGroupSecurityDescriptor
??_C@_0N@DOFILMC@PAGEVRFY?$CFs?3?5?$AA@
PsSystemDllDllBase
??_C@_1CA@ODHJBADJ@NITI?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
??_C@_1DE@GGNOAJBP@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?2?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
SeMaximumAuditMask
KiRestoreDebugRegisterState
GUID_MF_ENUMERATION_INTERFACE
NtImpersonateThread
ZwQueryIoCompletion
RtlSetTimeZoneInformation
CmpFindValueByNameFromCache
PiNotificationInProgressLock
NtQueryKey
ZwOpenEvent
FsRtlPrepareMdlWrite
PspApplyJobLimitsToProcessSet
??_C@_1DC@NFJCCEEE@?$AAP?$AAe?$AAr?$AAf?$AAB?$AAu?$AAs?$AAy?$AAA?$AAd?$AAj?$AAm?$AAe?$AAn?$AAt?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AA?$AA@
IoCompleteRequest
CmpMHz
ViCheckTag
_amsg_exit
CmpUnmapUnusedViews
strncpy
CmpMatchRmPmSameRule
KiSystemServiceCopyEnd
MiFaultRetries
PiCollectOpenHandles
WmipProbeWnodeSingleItem
PopIdleDefaultPromoteFromC1Time
CcGetBcbListHeadLargeOffset
PspCreateThreadNotifyRoutineCount
WmiGetClock
CcDeferWrite
MmPfnDatabase
MmSevenMinutes
WmipWriteWnodeToObject
xHalAllocateMapRegisters
PspUseJobSchedulingClasses
GUID_DEVCLASS_MULTIFUNCTION
ArbCommitAllocation
??_C@_1CA@IMNJBPG@NITIOCSN?$AAT?$AAP?$AAC?$AAX?$AAT?$AA_?$AA8?$AA4?$AAK?$AAE?$AAY?$AA?$AA@
NtGetWriteWatch
RtlNextUnicodePrefix
??_C@_1BK@DBMIIALH@NITI?$AAB?$AAo?$AAo?$AAt?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
KdUpdateTimeSlipEvent
MiAppendSubsectionChain
GUID_DEVCLASS_FSFILTER_OPENFILEBACKUP
??_C@_1BC@DOHBBKB@NITI?$AAM?$AAi?$AAn?$AAi?$AAN?$AAT?$AA?$AA@
FsRtlAllocatePool
IopXxxControlFile
IovUtilMarkDeviceObject
HdlspEnableTerminal
IoFreeController
KiPollFreezeExecution
IopWriteAllocatedResourcesToRegistry
KdpSysReadBusData
RtlpInterlockedFlushSList
??_C@_06OEKKEDCM@?4text?3?$AA@
??_C@_1BG@BIIEPBLC@NITI?$AAM?$AAi?$AAg?$AAr?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
IoDetachDevice
ObpTracePoolTags
??_C@_0BE@JGCEKJAC@ZwSetSecurityObject?$AA@
RtlFindClearBitsAndSet
IoUpdateShareAccess
SeValidSecurityDescriptor
??_C@_0N@DCEOAFAG@PAGEHDLS?$BL?$FL2J?$AA@
ZwGetPlugPlayEvent
SdbpGetMappedTagData
??_C@_1BC@DILOKMOP@NITI?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?$AA@
PspExitThread
PspJobInfoLengths
??_C@_1BC@HBMJKFNP@?$AAS?$AAT?$AAO?$AAR?$AAP?$AAO?$AAR?$AAT?$AA?$AA@
??_C@_1CG@CIGJEOKH@NITI?$AAC?$AAr?$AAa?$AAs?$AAh?$AAO?$AAn?$AAA?$AAu?$AAd?$AAi?$AAt?$AAF?$AAa?$AAi?$AAl?$AA?$AA@
HvpGetCellPaged
PpBusTypeGuidLock
CmpSystemHiveHysteresisContext
MmPoisonedTb
KdpInternalBPs
SeAliasPowerUsersSid
CmpSaveKeyByFileCopy
WmipFastIoDeviceControl
??_C@_0EF@EKMKGAKM@INITMiTriageSystem?3?5Disabled?5ver@
MiTriageAddDrivers
RtlPinAtomInAtomTable
FsRtlUninitializeSmallMcb
NtSetValueKey
??_C@_0HL@EGPAFNCB@PAGEVRFCA?5driver?5has?5returned?5ST@
CmpTypeCount
WmipUpdateAddGuid
MiFlushSectionInternal
MmPaeMask
KiOp_PREFETCH3
ExMapHandleToPointer
NtAllocateLocallyUniqueId
VfZwQueryDriverEntryOrder
??_C@_1CI@BMLADFAI@?$AAU?$AAs?$AAe?$AAP?$AAe?$AAr?$AAf?$AAo?$AAr?$AAm?$AAa?$AAn?$AAc?$AAe?$AAC?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
SeSubProcessToken
KeDisconnectInterrupt
MmGetSessionMappedViewInformation
??_C@_09FGNAHGKG@PAGELK?$CFx?5?$AA@
HvAllocateCell
KdpWriteBreakPointEx
IopSetupRemoteBootCard
IoWMIDeviceObjectToProviderId
___entry_from_strcat_in_strcpy
KeQueryMultiThreadProcessorSet
__imp_HalAllocateCrashDumpRegisters
VfInitVerifier
KeFlushQueueApc
SePublicOpenUnrestrictedSd
ZwClose
WmipMRHeadPtr
RtlpInsertFreeBlock
IopSetDeviceSecurityDescriptors
MmPurgeSection
VfZwCreateFile
??_C@_1M@FEPKFEHB@NITI?$AAT?$AAa?$AAg?$AA?$AA@
SeQuerySessionIdToken
IoIsOperationSynchronous
MiAvailablePagesEventLowSets
??_C@_1EA@FEILHEOL@?$AAA?$AAd?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAa?$AAl?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AAW?$AAo?$AAr?$AAk?$AAe?$AAr?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAs?$AA?$AA@
MmSizeOfMdl
NtReleaseSemaphore
IoFreeErrorLogEntry
IopQueryConflictList
WmipSMMutex
g_rgDirectoryTags
ExfUnblockPushLock
GUID_DEVCLASS_SBP2
NullString
ExReadyForErrors
CcPfParametersInitialize
PiInitGroupOrderTableCount
??_C@_0M@JMDIMOCF@ZwSaveKeyEx?$AA@
ZwOpenMutant
MmSysPteListBySizeCount
IoInitializeDumpStack
KeInsertDeviceQueue
SdbpGetImageNTHeader
MmSystemLoadLock
CmpNameFromAttributes
ZwCompleteConnectPort
FsRtlDeleteKeyFromTunnelCache
islower
MiAddMdlTracker
MiTrackPtesAborted
InbvGetResourceAddress
??_C@_0N@CINBOACJ@PAGEHDLS?$BL?$FL0K?$AA@
CpGetByte
CcDeferredWrites
CcPagesYetToWrite
RtlSubtreePredecessor
VfBuildMdlFromScatterGatherList
SecondsToStartOf1970
IopPnPAddDevice
SdbGetFirstChild
PsConvertToGuiThread
ViFaultTracesLength
WmipFileSystemReady
DbgkpProcessDebugPortMutex
VerifierNtCreateFile
IopCopyBootLogRegistryToFile
ZwCreatePagingFile
??_C@_1BA@NHKFAMDI@?$AAA?$AAP?$AAP?$AAH?$AAE?$AAL?$AAP?$AA?$AA@
KeSynchronizeExecution
FsRtlInsertPerStreamContext
KeBootTime
MmPoolCodeEnd
PopIdleUpdateIdleHandler
MmPfnDeferredList
MiSystemPteAllocationFailed
MiChargeCommitmentCantExpand
WmipGuidObjectType
LZNT1DecompressChunk
FstubReadSector
HvpDelistFreeCell
SeLocalServicePublicDacl
??_C@_0M@BPJFFPAA@INITBOOTLOG?$AA@
MmSectionObjectType
KeUserExceptionDispatcher
??_C@_0BH@ELCDOMBD@PAGEVRFCIRP_MN_REGINFO?$AA@
??_C@_1FE@BDMLDIKN@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAr?$AAe?$AAa?$AAs?$AAs?$AAi?$AAg?$AAn?$AA?5?$AAs?$AAy?$AAs@
NtFindAtom
IntBPsSkipping
KeTryToAcquireQueuedSpinLockRaiseToSynch
??_C@_1BG@HAOFMFBM@APEG?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AAs?$AA?2?$AA?$AA@
IopGetSetSecurityObject
MiMakeSystemAddressValidPfn
WmipServiceDeviceObject
ZwPrivilegeObjectAuditAlarm
KiIdleSMTSummary
Kd_IHVDRIVER_Mask
VerifierKeAcquireSpinLockRaiseToDpc
FsRtlInitializeLargeMcbs
FadingIn
KdAutoEnableOnEvent
SeRegisterLogonSessionTerminatedRoutine
VfZwReplaceKey
RtlComputeCrc32
KiBugCodeMessages
RtlGetCallersAddress
??_C@_1BI@HDCEPGII@NITI?$AAC?$AAl?$AAo?$AAc?$AAk?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
IopIrqPackResource
??_C@_0BB@COOOOIJN@ZwSetBootOptions?$AA@
toupper
IopInterlockedDecrementUlong
??_C@_1BK@BMAEBGCH@APEGOCSN?$AAT?$AAD?$AAE?$AAF?$AAA?$AAU?$AAL?$AAT?$AA?$AA@
NtLoadDriver
MmRomPageListHead
??_C@_0CA@ICGCNLNB@PAGEVRFCIRP_MN_SURPRISE_REMOVAL?$AA@
FsRtlNotifyVolumeEvent
FsRtlReleaseFileForModWrite
ZwQueryQuotaInformationFile
MmLockPagableDataSection
MmGetPhysicalMemoryRanges
VerifierKeLeaveCriticalRegion
NtCreateMailslotFile
MiRepointWsleHashIndex
ViDdiWmiMofResourceName
??_C@_09OGBKBKLK@PAGEVRFY?6?$AA@
WmipGenerateBinaryMofNotification
??_C@_1FG@MOILGCDA@NITI?$AA?2?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?2?$AAH?$AAi?$AAg?$AAh?$AAN?$AAo?$AAn?$AAP?$AAa?$AAg?$AAe?$AAd?$AAP?$AAo?$AAo@
ExEventPairObjectType
PsGetProcessExitProcessCalled
__imp_KdReceivePacket
ViBugcheckProcessMessageText
Kd_TERMSRV_Mask
RtlCopyLuid
RtlEqualSid
??_C@_0BG@DJNHKNCA@ZwWaitForSingleObject?$AA@
??_C@_0CC@LOELFJPE@PAGEVRFCIRP_MN_QUERY_CAPABILITIE@
??_C@_1BO@FICHANLL@?$AAI?$AAd?$AAl?$AAe?$AA0?$AAT?$AAi?$AAm?$AAe?$AAC?$AAh?$AAe?$AAc?$AAk?$AA?$AA@
RtlFreeRangeList
PiControlRetrieveDockData
NtAccessCheck
??_C@_1BC@IDPCCENN@?$AAF?$AAL?$AAA?$AAG?$AA_?$AAR?$AAE?$AAF?$AA?$AA@
PspShutdownThread
WmipOpenGuidObject
IopReadDumpRegistry
CmpCheckNotifyAccess
ExpAllocateHandleTable
IoRegisterDriverReinitialization
??_C@_0L@BMFBGLGA@PAGEVRFY?$CFs?$AA@
ObpCaptureObjectCreateInformation
CmpLazyFlushCount
ObpLookupObjectName
PspGetJobFromSet
IoReportDetectedDevice
ExpInTextModeSetup
RtlLengthRequiredSid
NtDeleteObjectAuditAlarm
FsRtlInitializeTunnelCache
__@@_PchSym_@00@UhieignUyzhvUmglhUkhUfkUlyqUznwGEUkhkOlyq@ps
PoSystemIdleTimer
MiDbgTranslatePhysicalAddress
??_C@_1BG@NBIHJJI@APEG?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAN?$AAt?$AA?$AA@
??_C@_1CK@JHPBEMCN@NITI?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
IoWMIQuerySingleInstanceMultiple
??_C@_1BM@FJBOMJDH@NITI?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$DN?$AA?$AA@
VersionDataKeys
RtlpRangeListEntryLookasideList
??_C@_1CK@BAEMHHMD@APEGOCSN?$AAT?$AAC?$AAd?$AAR?$AAo?$AAm?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
Kd_SERENUM_Mask
MxPfnAllocation
CmpConstructName
Kd_IHVVIDEO_Mask
NtSetBootEntryOrder
KeInitializeDeviceQueue
MiHardTrim
CmpTraceRoutine
RtlInitUnicodeString
GUID_DEVCLASS_MONITOR
PsSetThreadWin32Thread
PopIdleScanTimer
IopDeviceTreeLock
IoSetCompletionRoutineEx
ViSearchedNodesLimitFromRegistry
??_C@_1IC@EFHBDIMJ@t?4xe?$AAt?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr@
VfPrintDumpIrp
ObPerfDumpHandleEntry
PopIdleUpdateIdleHandlers
CmRegistryMachineSystemCurrentControlSetControlClass
SepRmState
NlsOemLeadByteInfo
MiTrimInProgressCount
KeReleaseInStackQueuedSpinLock
??_C@_1BG@HAMJFCCN@NITI?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AAF?$AA0?$AAE?$AA?$AA@
PnPIrpNames
IoIsDeviceEjectable
NtMajorVersion
??_C@_1BE@JFKKDJEI@NITI?$AAc?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AA?$AA@
NtOpenEventPair
PsImageNotifyEnabled
PpDevNodeInsertIntoTree
??_C@_0DI@DEHMLGI@PAGENotification?0?5PostBlock?5?$CFp?5n@
IopUncacheInterfaceInformation
WmiSetMark
PipAreDriversLoaded
??_C@_0BM@DEMBCILO@PAGEVRFCIRP_MJ_SET_SECURITY?$AA@
PspActiveProcessMutex
??_C@_1GK@CAKGNEOG@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAw?$AAa?$AAi?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAb?$AAo?$AAo@
CmpFindSubKeyByName
IoRegisterFsRegistrationChange
??_C@_1CE@EMHOGMKE@NITI?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAR?$AAa?$AAm?$AAd?$AAi?$AAs?$AAk?$AA?$AA@
NtWaitHighEventPair
CmRegistryMachineName
SepCompareSidAndAttributeArrays
MmVerifierData
??_C@_0BJ@IBBAHCNP@ZwQueryInformationThread?$AA@
CcNumberWorkerThreads
??_C@_0O@IMPMAJE@INITCONST?$IBNCQ?$AA@
LpcpNextCallbackId
PopAdminRegName
CmpDestroySecurityCache
VfpPacketNotificationCallback
PopPerfDecreaseMinimumTime
IovDriverListHead
FsRtlRemoveNodeFromTunnel
PiGenerateLegacyDeviceInstance
IopFileUtilWalkDirectoryTreeHelper
??_C@_1BC@IMLEDPNC@APEG?$AAL?$AAi?$AAn?$AAk?$AAe?$AAd?$AA?$AA@
ZwCreateToken
ZwSuspendThread
GUID_DEVICE_NOOP
ViDeadlockVeryStrict
??_C@_1BC@NIJBFLJG@?$AAI?$AA8?$AA0?$AA4?$AA2?$AAP?$AAR?$AAT?$AA?$AA@
??_C@_1BK@PKNLALCK@?$AAF?$AAL?$AAA?$AAG?$AAS?$AA_?$AAN?$AAT?$AAV?$AAD?$AAM?$AA3?$AA?$AA@
SepSetAuditInfoForObjectType
IopInitializeDeviceInstanceKey
CmpSystemFileName
SepCrashOnAuditFail
IopCreateRootDirectories
??_C@_0BN@JJHODBGF@INIT?$CFws?2System32?2Drivers?2?$CFwZ?$AA@
??_C@_1BC@KGNJPLCF@?$AAV?$AAE?$AAR?$AAI?$AAF?$AAI?$AAE?$AAR?$AA?$AA@
WmipSingleBitEccErrorThreshold
??_C@_1BA@JGDGJAKM@?$AAS?$AAE?$AAR?$AAE?$AAN?$AAU?$AAM?$AA?$AA@
IoGetRequestorProcess
PsSetLegoNotifyRoutine
GUID_DEVICE_THERMAL_ZONE
MiInsertVadCharges
CcPfGetFileNamesWorkerRoutine
ExInitializeRundownProtectionCacheAware
??_C@_1BE@MLALCNIA@APEG?$AAR?$AAO?$AAO?$AAT?$AA?2?$AA?$CF?$AAs?$AA?$AA@
CcUnpinDataForThread
NtIsSystemResumeAutomatic
??_C@_1M@LEMDBLGE@?$AAL?$AAA?$AAY?$AAE?$AAR?$AA?$AA@
IopRestartDeviceNode
IopGenericUnpackRequirement
MiCaptureWriteWatchDirtyBit
KeRevertToUserAffinityThread
MmInitializeProcessAddressSpace
CmRegistryRootName
RtlSetActiveTimeBias
SdbpOpenDatabaseInMemory
??_C@_1JE@FGKPJPCP@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAU@
ExUnlockUserBuffer
ExpInitializeCallback
vDbgPrintExWithPrefixInternal
RtlDeleteNoSplay
PopEnableHiberFile
??_C@_0BI@LEHHCAFI@PAGEVRFY?0?5InPath?$DNFALSE?$CJ?$AA@
??_C@_0DA@JCBPDDDH@INITCmpFindACPITable?3?5Cannot?5map@
ZwCreateThread
RtlCreateUnicodeString
ZwSetInformationObject
ApphelpDuplicateUnicodeString
FsRtlTruncateLargeMcb
ExpMutantInitialization
ZwDeleteAtom
WmipTraceFileFlag
IopStoreSystemPartitionInformation
??_C@_1CK@FFMPONLC@?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAL?$AAo?$AAg?$AAS?$AAi?$AAz?$AAe?$AAL?$AAi?$AAm?$AAi?$AAt?$AA?$AA@
??_C@_0BG@DNLLDCMN@PAGEVRFCPowerDeviceD3?$AA@
IopPnPDispatch
KeResumeThread
GUID_PNP_CUSTOM_NOTIFICATION
??_C@_1CM@JDOGNEBC@APEG?$AAL?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
CmpDelayDerefKCBTimer
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
??_C@_1IC@BLMMLLLC@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?5?$AA?$CI@
??_C@_09GAHAFJDF@PAGEdxapi?$AA@
??_C@_17NMCEHFMB@NITI?$AA?2?$AA?$AA@
??_C@_1KA@IJHNINLG@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
PspQuotaLock
ExpEventPairMapping
FsRtlRegisterUncProvider
PsReferenceEffectiveToken
SeIsSiblingTokenByPointer
ExfAcquireRundownProtection
InitTableInfo
MiLowMemoryBitMap
ErrorLogPortConnected
MiCaptureImageExceptionValues
HdlspGetLine
CmpRegistryRootString
GUID_IO_VOLUME_DISMOUNT_FAILED
ZwRenameKey
KiSystemStartup
ArbBuildAssignmentOrdering
WmiIrpNames
MiSectionDelete
ExNotifyCallback
ExpLastWorkerThread
IoCreateSynchronizationEvent
KiInterruptDispatchLBControl
NtCreateJobSet
IopInitHalDeviceNode
RtlpUnwindHistoryTable
__imp_HalInitializeProcessor
ExpWatchExpirationDataWorkItem
??_C@_1DI@LACPHKAD@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AA?$AA@
IopInitReservedResourceList
ExpUuidGetValues
VfZwUnloadDriver
IopErrorLogObject
WmipPrepareHeader
PipRequestDeviceRemoval
PiProfileChangeSemaphore
PoVolumeDevice
MmTrackLockedPages
MiInitializeSessionPool
NtSetQuotaInformationFile
??_C@_0N@FBAOEANA@INITCONSTVME?$AA@
??_C@_1CI@DACKBCEK@APEGOCSN?$AAT?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
PiQueryDeviceRelations
ViMessageIoVerifierOverrides
GUID_IO_VOLUME_DEVICE_INTERFACE
??_C@_0BI@MJCDGMJB@INITKiUserApcDispatcher?$AA@
NtStopProfile
ExTimerRundown
IopLoadDumpDriver
??_C@_08KLANGAPL@INITC?3?$CFs?$AA@
??_C@_1CE@FHLEFEMN@?$AAD?$AAA?$AAT?$AAA?$AAB?$AAA?$AAS?$AAE?$AA_?$AAI?$AAD?$AA?$CI?$AAG?$AAU?$AAI?$AAD?$AA?$CJ?$AA?$AA@
CmpRefreshHive
IopErrorLogLock
KeRegisterBugCheckCallback
VfPowerVerifyIrpStackUpward
MiSessionImageEnd
RtlDeleteAtomFromAtomTable
xHalEndOfBoot
NtCreateProfile
MiHighMemoryEvent
??_C@_1O@FPOGGLHE@APEG?$AA?2?$AA?2?$AA?$DP?$AA?2?$AA?$AA@
??_C@_1BE@KNOPBFCG@NITI?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?$AA@
??_C@_1BG@JAGFAHEP@APEG?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$AA@
MmLockPagableSectionByHandle
PopDcRegName
RtlNumberOfSetBits
IopMdlLookasideList
KiTimeIncrement
FsRtlWorkerThread
IopFsRegistrationOps
KiReverseStallIpiLock
MiDecrementShareCount
??_C@_0FC@HNJALGPE@PAGEDisk?5is?5full?5while?5attemptin@
MiPteEndBitmap
VfZwTranslateFilePath
IopRunTimeContextOffsets
_vsnprintf
LpcExitThread
??_C@_1DC@PGKCAEHB@NITI?$AA?2?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAT?$AAR?$AAK?$AAW?$AAK?$AAS?$AA_?$AAE?$AAV?$AAE?$AAN?$AAT?$AA?$AA@
MmIsDriverVerifying
ZwSetInformationProcess
IopStartTcpIpForRemoteBoot
WmiStartTrace
PspSetLdtInformation
MiWorkingSetRequestEvent
MmMaxAdditionNonPagedPoolPerMb
CcVacbLru
KeAlertResumeThread
FsRtlPrivateCheckForExclusiveLockAccess
??_C@_0BG@CKOEGIOA@ZwMakeTemporaryObject?$AA@
??_C@_1BO@KEOCEBBE@APEG?$AAs?$AAc?$AAs?$AAi?$AAp?$AAo?$AAr?$AAt?$AA?4?$AAs?$AAy?$AAs?$AA?$AA@
SeBatchSid
KxNmiInterrupt
VfPnpTestStartedPdoStack
GUID_AGP_TARGET_BUS_INTERFACE_STANDARD
__@@_PchSym_@00@UhieignUyzhvUmglhUnnUfkUlyqUznwGEUnrOlyq@mm
??_C@_1BO@JKCJFCDF@APEG?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
CmpMarkKeyValuesDirty
ObpCheckTraverseAccess
VfZwVerifierSessionEnabled
??_C@_0BB@GCAHFBIL@PAGEAsyncUser?5?5?5?$AA@
IoFreeDumpRange
RtlpSameFunction
KeEnterGuardedRegion
??_C@_05MOEPFPIM@INITB?$AA@
MiLowestSystemPteVirtualAddress
g_ShimCache
InterlockedPushListSList
NtEnumerateDriverEntries
IopDeleteKeyRecursiveCallback
SdbpGetFileChecksum
WmipReserveTraceBuffer
ZwQueryPortInformationProcess
ExpNtInstallationDate
PerfInfoSysModuleRunDown
SepSidInSidAndAttributes
??_C@_1BE@GGEFAMGA@?$AAV?$AAE?$AAR?$AAF?$AAI?$AAL?$AAE?$AAO?$AAS?$AA?$AA@
CmpTrackHiveClose
KiOutSwapKernelStacks
SeCreateTokenPrivilege
BBTBuffer
PpSystemHiveTooLarge
WmipAddLogHeader
ExSyncRenameOwner
MiTrimPageParents
PsGetCurrentThreadTeb
MiReturnFailedSessionPages
RtlLookupElementGenericTableFull
Kd_HPS_Mask
HvCheckHiveDebug
FsRtlGetNextLargeMcbEntry
SepAdtCountEventsDiscarded
MiCreatePebOrTeb
KiTimerTableListHead
ObpReferenceProcessObjectByHandle
??_C@_0CB@DMIMOIF@PAGEVRFCIRP_MJ_DIRECTORY_CONTROL@
VerifierKeSetEvent
PopCreateHiberLinkFile
ViMajorVerifierRoutines
CcCleanSharedCacheMapList
MmClusterPageFileReads
IoNotifyPowerOperationVetoed
FsRtlAllocatePoolWithTag
IopReleaseDeviceResources
PiControlInitializeDevice
wcstol
InbvPortTerminate
MiSysPteTimeStamp
CmpDelayCloseWorker
??_C@_1O@BICMMCM@APEG?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AA?$AA@
??_C@_1BC@NIBCHNIE@?$AAI?$AAH?$AAV?$AAV?$AAI?$AAD?$AAE?$AAO?$AA?$AA@
RtlpStatusTable
KeQueryPriorityThread
SepInformLsaOfDeletedLogon
??_C@_0DB@IKNEDHCP@PAGEValidation?5failed?5for?5global@
KiServiceTable
Kd_DEFAULT_Mask
??_C@_1CE@HEBABMID@APEG?$AAI?$AAN?$AAI?$AAT?$AAS?$AAT?$AAA?$AAR?$AAT?$AAF?$AAA?$AAI?$AAL?$AAE?$AAD?$AA?$AA@
ExpInterlockedPushEntrySList
??_C@_1DA@MEDNABLL@APEGOCSN?$AAT?$AAK?$AAe?$AAy?$AAb?$AAo?$AAa?$AAr?$AAd?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
PsRevertToSelf
NtOpenObjectAuditAlarm
??_C@_1BO@NLAKDPNO@?$AAI?$AAd?$AAl?$AAe?$AAF?$AAr?$AAo?$AAm?$AA0?$AAD?$AAe?$AAl?$AAa?$AAy?$AA?$AA@
WmipQueueNotification
KeSetBasePriorityThread
PiProfileUpdateHardwareProfile
??_C@_0BA@NCONONMM@ZwDisplayString?$AA@
??_C@_0EC@EBFLFHOO@PAGEVRFYBreaking?5in?4?4?4?5?$CIpress?5g?$DM@
RtlClearBits
CcFastMdlReadNoWait
ViDmaVerifierTag
GUID_POWER_DEVICE_TIMEOUTS
MmStandbyPageListByPriority
ExDeleteNPagedLookasideList
ObSetDeviceMap
KdPrintBufferSize
PsInstallUILanguageId
__decimal_point_length
??_C@_1BG@MFCIOPNE@NITIOCSN?$AAT?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
??_C@_1FA@KPBKNCNC@APEG?$AA?2?$AAB?$AAa?$AAs?$AAe?$AAN?$AAa?$AAm?$AAe?$AAd?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?2?$AAP?$AAr?$AAe?$AAf?$AAe?$AAt?$AAc?$AAh?$AAT?$AAr?$AAa?$AAc@
ExpCallbackEvent
NlsUnicodeToOemData
KeReleaseInStackQueuedSpinLockFromDpcLevel
??_C@_0DN@OHFOJFHL@PAGEHvpDoWriteHive?$FL3?0?$CFs?$FN?3?5Failed@
??_C@_1EI@FEPIDECN@APEGOCSN?$AAT?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4@
NtRequestWaitReplyPort
IopCheckBackupRestorePrivilege
Kd_NETAPI_Mask
KdVersionBlock
ZwWaitForKeyedEvent
MxConvertToLargePage
_stricmp
PsGetThreadId
KeIpiGenericCall
NlsLeadByteInfoTable
IoWritePartitionTable
CmpSystemHiveHysteresisCallback
MiSessionWsList
CmpFindControlSet
PiDumpVetoedHandles
NtSetDefaultUILanguage
ViTrackIrqlLog
WmipTraceProcessRef
IopAddRelationToList
GUID_DEVCLASS_COMPUTER
PipRestoreDevNodeState
MmHighSectionBase
GUID_DEVCLASS_61883
KeSetDisableBoostThread
ExUpdateSystemTimeFromCmos
ViMessageClassFailDriverInField
??_C@_0DM@JOKKBHCK@PAGELKMemImage?9?$DOWakeCheck?5?$CFlx?5do@
PipIs32bitKey
VerifierKeLowerIrql
SepFilterPrivilegesLong
PiProcessClearDeviceProblem
SepRmCommandDispatch
ObpCheckObjectReference
NtYieldExecution
SeCreatorOwnerSid
??_C@_0BA@MABAKCK@INITCONSTBitReg?$AA@
MmResourcesAvailable
??_C@_0CF@HIMPEJNP@PAGEInvalid?5target?5validation?5ra@
Kd_SCSIPORT_Mask
LpcPortObjectType
MiZeroPhysicalPage
PiProcessBusRelations
KdpRestoreBreakPointEx
??_C@_1BC@HAGOAFFK@?$AAI?$AAD?$AAL?$AAE?$AAT?$AAA?$AAS?$AAK?$AA?$AA@
KeThawAllThreads
MiSessionImagePteEnd
NtCreateEventPair
WmipTranslateFileHandle
??_C@_1M@LFGFOCAF@?$AAF?$AAS?$AAT?$AAU?$AAB?$AA?$AA@
KdSpecialCalls
ApphelpCacheRead
MiCanFileBeTruncatedInternal
PspLoadImageNotifyRoutineCount
??_C@_1CA@KBACHDGM@APEG?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AA?$CF?$AA0?$AA8?$AAl?$AAx?$AA?$AA@
RamdiskBootDiskGuid
CmpDropFileObjectForHive
??_C@_1BG@KMCBNDPK@?$AAA?$AAu?$AAt?$AAo?$AAR?$AAe?$AAb?$AAo?$AAo?$AAt?$AA?$AA@
??_C@_1GG@DKKCNCHI@APEG?$AA?$CF?$AA0?$AA8?$AAx?$AA?9?$AA?$CF?$AA0?$AA4?$AAx?$AA?9?$AA?$CF?$AA0?$AA4?$AAx?$AA?9?$AA?$CF?$AA0?$AA2?$AAx?$AA?$CF?$AA0?$AA2?$AAx?$AA?9?$AA?$CF?$AA0?$AA2?$AAx?$AA?$CF?$AA0@
IopIsReportedAlready
??_C@_0CC@OABNGGAJ@INIT?2Device?2Harddisk?$CFd?2Partition@
MmPteCodeStart
RtlGetNtProductType
VfZwDeleteBootEntry
ZwQueryDefaultLocale
IopNotifyDeviceClassChange
__imp_HalSetEnvironmentVariable
IoOpenDeviceInterfaceRegistryKey
??_C@_1BM@PPBFANGB@NITIOCSN?$AAT?$AAX?$AAT?$AA_?$AA8?$AA4?$AAK?$AAE?$AAY?$AA?$AA@
??_C@_17BNEOEAKA@APEG?$AA?$CD?$AA?$AA@
Port
RtlpInheritAcl2
CmpQueryKeyValueData
SeAnonymousLogonTokenNoEveryone
Kd_WIN2000_Mask
MiWriteComplete
MmResidentAvailableAtInit
SePublicOpenUnrestrictedDacl
??_C@_0BE@OFKOPLHM@PAGE?$CFspartition?$CI?$CFd?$CJ?$AA@
__fastflag
CmpRegistryMachineHardwareString
??_C@_0BG@BGJGGBAO@PAGEVRFCPowerDeviceD0?$AA@
IoInitializeIrp
ViGenericVerifyNewIrp
DbgBreakPointWithStatus
VfPnpVerifyIrpStackDownward
NtSetSystemEnvironmentValueEx
??_C@_1BC@CGIBGHGI@APEG?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?$AA@
CcMdlWriteComplete2
ObpTraceEnabled
??_C@_06DLOMHFNP@?4text?6?$AA@
IoStatisticsLock
VfAllocateCrashDumpRegisters
??_C@_07IPICGNAN@ZwClose?$AA@
ZwWaitForSingleObject
??_C@_1BG@KOHDGOOM@NITI?$AAH?$AAo?$AAs?$AAt?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
MiCheckVirtualAddress
IopGetDumpControlBlockCheck
__@@_PchSym_@00@UhieignUyzhvUmglhUpwGEUfkUlyqUznwGEUpwkOlyq@kd
CcPfDetermineEnablePrefetcher
NtCancelIoFile
??_C@_0O@KOKHKHMB@INITCONST?$ICERR?$AA@
ObfDereferenceObject
??_C@_19KPGMKHOL@?$AAS?$AAM?$AAS?$AAS?$AA?$AA@
??_C@_0FC@MDPHEDDF@PAGEVRFCCaller?5of?5IoFreeIrp?5is?5f@
ExpCenturyDpc
RtlTimeToElapsedTimeFields
FsRtlPrivateInsertExclusiveLock
??_C@_1CC@GHBBFMKE@APEG?$AAR?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
??_C@_1CI@EEJPJOAB@?$AAO?$AAb?$AAT?$AAr?$AAa?$AAc?$AAe?$AAN?$AAo?$AAD?$AAe?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
KeSaveLegacyFloatingPointState
RtlpInheritAcl
__imp_HalTranslateBusAddress
KeReadStateEvent
ViGrowPoolAllocation
VfDeadlockInitializeResource
FsRtlpRegisterProviderWithMUP
??_C@_1II@MNLMPGFI@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
ObpShutdownCloseHandleProcedure
IopWriteToDisk
PipIsProblemReadonly
IoEnumerateDeviceObjectList
Kd_IHVBUS_Mask
CmpFreeAllMemory
MiUnloadsSkipped
InitializeSListHead
PspVariableQuantums
ApphelpCacheLookupEntry
GUID_IO_MEDIA_EJECT_REQUEST
??_C@_0DJ@MPFJEBLP@PAGELKHIBER?3?5?$CFlu?5Pages?5written?5i@
MmPagedPoolStart
ExpEnvironmentLock
KeBugCheckOwnerRecursionCount
CcMdlWriteComplete
KeQueryPrcbAddress
CcFreeVirtualAddress
??_C@_1CC@JIAGIOJL@NITI?$AAD?$AAh?$AAc?$AAp?$AAS?$AAu?$AAb?$AAn?$AAe?$AAt?$AAM?$AAa?$AAs?$AAk?$AA?$AA@
strncat
__imp_KdD3Transition
KeSetTargetProcessorDpc
??_C@_1CA@FOKNPKIC@NITI?$AAP?$AAn?$AAP?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AAI?$AAD?$AA?$AA@
HvMarkCellDirty
??_C@_1HE@DEECAKPB@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
SecondsToStartOf1980
ExpQueryLegacyDriverInformation
??_C@_0KI@GNGBLIN@PAGEVRFCAn?5IRP?5dispatch?5handler?5@
IoQueueThreadIrp
MiAddCachedRange
WmipMSMCAEvent_MemoryPageRemoved
??_C@_0BN@JNKNGNFM@PAGEVRFCIRP_MJ_FLUSH_BUFFERS?$AA@
??_C@_1M@DADFOLAB@?$AAB?$AAr?$AAa?$AAn?$AAd?$AA?$AA@
Kd_NTOSPNP_Mask
WmipFirmwareTableArray
IopStartNextPacketByKey
??_C@_0BI@HKENIFPC@ZwAllocateVirtualMemory?$AA@
VfZwIsProcessInJob
KeDeregisterNmiCallback
SdbpCheckAttribute
__@@_PchSym_@00@UhieignUyzhvUmglhUuhigoUfkUlyqUznwGEUuhigokOlyq@FsRtl
MmMakeProtectNotWriteCopy
MiLastVadBit
SepFilterPrivilegesShort
??_C@_1BK@CPGAGKMK@NITI?$AA_?$AA_?$AAA?$AAP?$AAP?$AAD?$AAI?$AAR?$AA_?$AA_?$AA?$AA@
VfZwClearEvent
PspSetQuotaLimits
??_C@_05GCIAPODO@?4text?$AA@
MiSetProtectionOnTransitionPte
??_C@_0BC@IHGIMNLF@ZwOpenThreadToken?$AA@
??_C@_1CC@EHJJJKNO@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAI?$AAm?$AAa?$AAg?$AAe?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
FsRtlIncrementCcFastReadResourceMiss
??_C@_0DJ@MAABHBDO@PAGEKD?6KdPullRemoteFile?3?5Local?5f@
??_C@_1BM@DIOALAEM@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AA3?$AA0?$AAb?$AA?$AA@
PPerfGlobalGroupMask
PspDefaultPagefileLimit
CmpHwprofileDefaultSelect
SePublicDefaultDacl
MmGetPhysicalAddress
MmProtectSpecialPool
PopPerfCounterFrequency
PoRegisterDeviceForIdleDetection
??_C@_1DA@DHHEKFHM@APEGOCSN?$AAT?$AAP?$AAa?$AAr?$AAa?$AAl?$AAl?$AAe?$AAl?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
ExpSemaphoreMapping
??_C@_1CK@NHECJEFE@APEGOCSN?$AAT?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAl?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
??_C@_0EG@NHGIGPEI@PAGE?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK@
WmipDSHeadPtr
PipAreDriversLoadedWorker
RtlValidSecurityDescriptor
PpCriticalProcessCriticalDevice
CcSetDirtyPinnedData
PsGetProcessSessionIdEx
ZwQueryInformationJobObject
MiDeleteAddressesInWorkingSet
PsGetCurrentProcessWow64Process
??_C@_0EF@PAAKOADO@PAGEHvpDoWriteHive?$FL8?0?$CFs?$FN?3?5Failed@
??_C@_1BM@HGFEPBEC@APEG?$AAR?$AAO?$AAO?$AAT?$AA?2?$AAL?$AAE?$AAG?$AAA?$AAC?$AAY?$AA?$AA@
ViDeadlockTrimThreshold
MiKernelResourceStartPte
??_C@_1BG@BGBHIOPB@NITI?$AA?2?$AAA?$AAr?$AAc?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
??_C@_1BG@LLHCAKLG@NITI?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAs?$AA?2?$AA?$AA@
RtlDecompressFragment
PsUseImpersonationToken
ExpGetProcessorIdleInformation
ExfWakePushLock
ZwAddDriverEntry
ZwSecureConnectPort
IoStartNextPacketByKey
??_C@_09FCILBGHL@?4text?$AN?6?$AN?6?$AA@
MiCheckDosCalls
IoGetStackLimits
CmpGlobalQuotaWarning
FsRtlRemoveLargeEntry
IovpSessionDataAttachSurrogate
CcMaxDirtyWrite
SdbpGetNextTagId
??_C@_0CH@KEIDPMGG@PAGEInvalid?5hotpatch?5relative?5ad@
??_C@_1BC@DONIHOID@?$AAV?$AAI?$AAD?$AAE?$AAO?$AAP?$AAR?$AAT?$AA?$AA@
??_C@_1BK@LNLIBJNG@NITIOCSN?$AAT?$AAP?$AAh?$AAa?$AAn?$AAt?$AAo?$AAm?$AA?$AA@
CmpWalkPath
FsRtlBalanceReads
VerifierDdiDriverName
RtlCompressWorkSpaceSizeLZNT1
SdbpPatternMatch
KiSaveProcessorControlState
??_C@_06HEKNODBI@?4text?$AN?$AA@
RtlInitString
ExQueryPoolUsage
ViIrpLogExposeWmiCallback
PopPerfDegradeThrottleMinCapacity
??_C@_19PDLMCIAJ@?$AAB?$AAi?$AAa?$AAs?$AA?$AA@
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion
VfZwFreeVirtualMemory
??_C@_0CF@LOGMBFCG@PAGEVRFCIRP_MN_QUERY_BUS_INFORMA@
CcCopyWrite
WmipMceEventDelivery
??_C@_19KIAHFBLC@t?4xe?$AAt?$AA?3?$AA?$AA@
??_C@_1BC@IOGFCALD@?$AAS?$AAE?$AAR?$AAM?$AAO?$AAU?$AAS?$AAE?$AA?$AA@
??_C@_0DK@JHGBOHGA@PAGEHDLSd?5?5?5?5?5?5?5?5Display?5all?5log@
WmipTLMutex
Kd_I8042PRT_Mask
??_C@_0BJ@FMJJNFFL@PAGEVRFY?$CIPowerRelations?$CJ?$AA@
CmpPostLock
ObpObjectBuckets
LpcRequestPort
KeReleaseSemaphore
SeAnonymousLogonSid
ObpObjectSecurityMode
IopCompressRelationList
??_C@_1BA@LJPODEB@APEG?$AAO?$AAt?$AAh?$AAe?$AAr?$AA?$AA@
WmipSendWmiIrp
PsPrioritySeperation
IopAddRunTimeTriageDataBlocks
SdbQueryData
FsRtlFreeFileLock
ExpGetLockInformation
RtlEqualLuid
MiNoLowMemory
??_C@_0N@DBMKNBGI@PAGEHDLS?$BL?$FL0J?$AA@
??_C@_1BA@NMDBGJA@?$AAW?$AAI?$AAN?$AA2?$AA0?$AA0?$AA0?$AA?$AA@
WmiGetCpuClock
Kd_DMCONFIG_Mask
FsRtlCancelNotify
WmipQueryAllDataMultiple
MmMaximumNonPagedPoolPercent
WmipIsISFlagsSet
CcPostDeferredWrites
MiFreeContiguousPages
??_C@_0N@LFCBJNKI@INITCONSTv?56?$AA@
??_C@_0CC@PECKGBDE@?4text?7by?5call?5stack?3?5?$CFp?5?$CFp?5?$CFp?5?$CFp@
CmpVendorID
IopUnloadSafeCompletion
KeNodeBlock
MmMemoryUsage
IoRaiseHardError
InitOemCodePageDataOffset
??_C@_0BI@IDLCOIHA@ZwCloseObjectAuditAlarm?$AA@
KdpPrintSpinLock
NlsMbCodePageTag
GUID_BUS_TYPE_PCMCIA
KeCompactServiceTable
IopSendMessageToTrackService
RawCreate
VfZwSaveKey
KeInsertQueue
MiLocateSubsection
IopIsRemoteBootCard
CcSetBcbOwnerPointer
RtlAppendAsciizToString
RtlLookupElementGenericTable
??_C@_1CA@CPEOMDEM@?$AAI?$AAo?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
??_C@_1O@CCEKCHDK@?$AAF?$AAL?$AAO?$AAP?$AAP?$AAY?$AA?$AA@
CmpFindRSDTTable
CmFlushKey
HvpEnlistFreeCell
??_C@_1CA@FLIMGBPL@APEG?$AA?2?$AAb?$AAo?$AAo?$AAt?$AAs?$AAt?$AAa?$AAt?$AA?4?$AAd?$AAa?$AAt?$AA?$AA@
CmpKeyObjectType
UnicodeDefaultChar
NtRemoveIoCompletion
MiFlushDirtyBitsToPfn
??_C@_0BL@NALDIKDH@?4textHOTP_ID_PeHeaderHash2?$AA@
??_C@_0CA@PEEFJNJI@PAGEVRFY?$CIBusQueryCompatibleIDs?$CJ?$AA@
MiMapLargePageSection
WmipCreatePumpThreadRoutine
MiCreatePageTablesForPhysicalRange
??_C@_0O@EKHFPBGG@INITCONST?$ICHLR?$AA@
??_C@_1BO@EOLOJLEG@APEG?$AAC?$AAr?$AAa?$AAs?$AAh?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
WmipMcaQueryInfo
MiDecrementReferenceCount
ExAcquireRundownProtectionEx
??_C@_1BM@CIFOALNP@NITI?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAT?$AAc?$AAp?$AA?$AA@
FsFilterCtrlFree
MiBuildPagedPool
IopPnpEnumerationRequestList
WmipWaitForCollectionEnabled
MiPfPrepareReadList
??_C@_1BK@NDOIPEFK@NITI?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
PsSetContextThread
NtFsControlFile
CmpInitHiveFromFile
??_C@_0CP@EGMELLC@PAGEVRFYMap?5registers?5needed?3?5?$CFx@
??_C@_1M@DLINFOLM@APEG?$AA?$CD?$AA?$CF?$AAu?$AA?$AA@
??_C@_1BK@PEMAEFGI@?$AAS?$AAC?$AAS?$AAI?$AAM?$AAI?$AAN?$AAI?$AAP?$AAO?$AAR?$AAT?$AA?$AA@
MmSpecialPoolTag
GUID_DEVICE_EVENT_RBC
??_C@_0N@PHFHPHLM@INITCONSTVer?$AA@
IopTimerDispatch
FstubWritePartitionTableMBR
??_C@_0GC@DAMBMMFF@PAGEVRFYhttp?3?1?1www?4microsoft?4com@
InitNlsTableBase
SepAdtMarshallAuditRecord
MmHighestPhysicalPage
??_C@_0BN@JAOBBMGK@GUID_DEVICE_QUERY_AND_REMOVE?$AA@
RotBarUpdate
MmAreMdlPagesLocked
SeLocalServicePublicSd
KeBugCheckActive
MiCheckPurgeAndUpMapCount
??_C@_0BK@IPDOLKNL@KeQueryPerformanceCounter?$AA@
MiLastMappedWriteError
FstubDetectPartitionStyle
??_C@_0DJ@HNMHHMKO@INITCONSTDriver?5Verifying?5Pre?9Wi@
??_C@_1NE@GNOOEOFG@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
PerfGetCycleCount
ZwSetSecurityObject
SeDeleteObjectAuditAlarm
CmpDelayCloseIntervalInSeconds
??_C@_1IG@GOMEEOEK@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
KeInitializeQueue
Magic10000000
KdpSysGetVersion
ViRefreshCallback
RawQueryFsSizeInfo
CmpRemoveSecurityCellList
HdlspKernelAddLogEntry
RtlFindClearBits
RtlGenerate8dot3Name
MmRemoveVerifierEntry
__imp_HalSetRealTimeClock
NtQueryTimer
SeAccessCheck
ExQueryPoolBlockSize
xHalLocateHiberRanges
InstrCountInternal
MmBuildMdlForNonPagedPool
??_C@_1CO@GLKGICMJ@APEG?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAe?$AAd?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAV?$AAe?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
MiDbgWriteCheck
MmProtectToPteMask
??_C@_0CN@LHALNLFJ@PAGEDump?5complete?5?9?5?$CFd?5total?5han@
IopCleanupDeviceRegistryValues
CmpSystemProcess
RawDeviceTapeObject
GUID_HWPROFILE_QUERY_CHANGE
ObpDefaultObject
CcPfHashValue
ZwCompactKeys
NtCompareTokens
RtlRealPredecessor
PopPolicySystemIdle
CcZeroEndOfLastPage
InstructionsTraced
MmHeapSegmentReserve
__imp_HalReportResourceUsage
??_C@_1DG@EJFAHLJJ@APEG?$AAD?$AAo?$AAn?$AAt?$AAR?$AAe?$AAt?$AAu?$AAr?$AAn?$AAV?$AAe?$AAt?$AAo?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
Kd_LSERMOUS_Mask
ZwQueryValueKey
MmSystemCodePage
MmMaximumDeadKernelStacks
??_C@_0FF@ICMIDBLM@?4textCC?3?5SharedCacheMap?9?$DOOpenCou@
??_C@_1BK@PLEMMPOO@APEG?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
SeIncreaseBasePriorityPrivilege
??_C@_0CJ@OHGEOACP@INITError?5on?5line?5?$CFd?5in?5CmpOpenI@
MiZeroAwePageWorker
??_C@_17ENFNLCDF@?$AAL?$AAS?$AAA?$AA?$AA@
NtCreatePort
NtRemoveProcessDebug
ViFilterDispatchGeneric
??_C@_0BN@LMMJEEC@PAGEVRFCPowerActionWarmEject?$AA@
WmipFastIoDispatch
IopRootBusNumberArbiter
??_C@_0O@NICFFCDG@ZwAlertThread?$AA@
??_C@_1BG@MBFIBCHF@NITI?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
IopDeadIrp
IopLinkTrackingServiceEventHandle
RtlSecondsSince1970ToTime
NtSetVolumeInformationFile
RtlIsSystemAceType
PiCompareDDBCacheEntries
RtlFormatCurrentUserKeyPath
??_C@_1CC@KCOCLHML@APEG?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AAT?$AAi?$AAm?$AAe?$AAB?$AAi?$AAa?$AAs?$AA?$AA@
CcVacbFreeList
IopWriteIpAddressToRegistry
CcPfParametersSetDefaults
FsRtlPrivateResetLowestLockOffset
??_C@_0OG@IJIIAICA@PAGEVRFCA?5Bus?5Filter?8s?5IRP?5dispa@
IovCallDriver
ObInitProcess
IoAttachDevice
MmSessionPoolSize
VfZwTerminateJobObject
PiRestartDevice
MiChargeCommitment
IopDecrementDeviceObjectRef
PopCallSystemState
IopWarmEjectPdo
??_C@_1CI@LJJLGLPA@APEG?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAP?$AAo?$AAp?$AAu?$AAp?$AA?$AA@
CmpShiftAllCells2
ExpKernelResolutionCount
NtAllocateUserPhysicalPages
KiOp_LSAHF
PiLookupInDDBCache
VfZwQueryDirectoryFile
GUID_INT_ROUTE_INTERFACE_STANDARD
MmSystemCachePage
KdpNextCallLevelChange
??_C@_0EA@FPLHJBAH@INITCONSTMaking?5accesses?5to?5free@
??_C@_1DA@JJABBNCH@?$AAC?$AAl?$AAe?$AAa?$AAr?$AAP?$AAa?$AAg?$AAe?$AAF?$AAi?$AAl?$AAe?$AAA?$AAt?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AA?$AA@
ZwFlushWriteBuffer
RtlpSysVolTakeOwnership
KiSystemServiceGdiTebAccess
??_C@_0JI@BJKOKPAK@PAGEVRFCCaller?5has?5copied?5the?5Ir@
PoolVector
RtlSetAllBits
??_C@_1BK@CADEAKJO@NITIOCSN?$AAT?$AAA?$AAT?$AAT?$AA_?$AA3?$AA0?$AA1?$AA?$AA@
PopZeroHiberFile
KeForceResumeThread
GUID_DEVCLASS_SOUND
MmSessionFailureCauses
IopInvalidateRelationsInList
FloppyId
HvLoadHive
KiTickOffset
KeProcessorRevision
??_C@_1BE@BCJPKDGG@APEG?$AAL?$AAo?$AAg?$AAC?$AAo?$AAn?$AAf?$AA?$AA@
??_C@_1BM@HMIPCILJ@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AA3?$AA0?$AA6?$AA?$AA@
CcFlushCache
ExpSemaphoreBoost
PopVerifyPowerActionPolicy
VfZwAccessCheckAndAuditAlarm
??_C@_1BA@OMLIOJCN@?$AAV?$AAD?$AAS?$AAU?$AAT?$AAI?$AAL?$AA?$AA@
SeTokenIsRestricted
NtQueryInformationThread
RtlpFunctionAddressTable
IopDumpControlBlockChecksum
??_C@_1CA@FOECMPGO@?$AAV?$AAS?$AA_?$AAV?$AAE?$AAR?$AAS?$AAI?$AAO?$AAN?$AA_?$AAI?$AAN?$AAF?$AAO?$AA?$AA@
??_C@_1CO@HJHAFCDM@APEG?$AAN?$AAo?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAA?$AAt?$AAI?$AAn?$AAi?$AAt?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
FsRtlSplitLocks
ViTrackIrqlQueue
FsRtlCheckLockForReadAccess
??_C@_0CC@NPLFEGHA@PAGEVRFY?$CIDeviceUsageTypeUndefine@
CmpFixHiveUsageCount
KiDebugSwitchRoutine
KiProfileAlignmentFixup
??_C@_0BG@KKKBEHBC@ZwInitiatePowerAction?$AA@
ProgressBarLeft
RtlValidateUnicodeString
FsRtlFileLockLookasideList
HvpReadFileImageAndBuildMap
KiApicMask
ViFilterDispatchPower
CmInstallUILanguageIdLength
FsRtlMdlReadComplete
ViCheckPadding
CmpShiftAllCells
IopLinkTrackingPacket
TraceDataBufferPosition
KdpNumInternalBreakpoints
Kd_BURNENG_Mask
MiFreePoolPages
CmpCheckRegistry2
??_C@_0CA@FHIDNDBG@GUID_HWPROFILE_CHANGE_CANCELLED?$AA@
MiTrimAllPageFaultCount
ExpKeyedEventInitialization
CmpComputeHashKeyForCompressedName
??_C@_1BO@OKEPMKJE@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
??_C@_1DC@PHHOMKNE@?$AAI?$AAd?$AAl?$AAe?$AAT?$AAh?$AAr?$AAo?$AAt?$AAt?$AAl?$AAe?$AAC?$AAh?$AAe?$AAc?$AAk?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
VidCleanUp
CcPfEndTrace
CmpCopySyncTree2
IopNumTriageDumpDataBlocks
CcPfBeginTrace
DbgCommandString
SeNetworkServiceSid
VfZwDeviceIoControlFile
??_C@_1DK@KJBIKGHM@t?4xe?$AAt?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAM?$AAo?$AAu?$AAn?$AAt?$AAP?$AAo?$AAi?$AAn?$AAt?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
SdbpSearchDB
WmipCreateGuidObject
PopSetDevicesSystemState
??_C@_0KM@HMLMAJE@PAGEVRFCCaller?5is?5forwarding?5an?5@
??_C@_1BO@DOALJKCJ@NITI?$AAD?$AAo?$AAc?$AAk?$AAi?$AAn?$AAg?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
IopErrorLogThread
__imp_HalHandleNMI
IoCreateController
CmpConfigurationData
GUID_DEVCLASS_INFRARED
PipMakeGloballyUniqueId
VfBugcheckThrowIoException
NtModifyDriverEntry
KiCheckForSListAddress
KeGetPrcb
RtlpTraceStandardHashFunction
??_C@_0BO@CPMFANCP@INITKiUserExceptionDispatcher?$AA@
??_C@_0EL@FFDLGKGE@?4textDriver?5has?5freed?5too?5many?5s@
??_C@_0CK@CNIGDBKM@PAGESAFEBOOT?3?5skipping?5device?5?$DN?5@
NtResumeThread
PopWorkerStatus
WmipTraceNetwork
RtlFreeUnicodeString
IoGetLowerDeviceObject
??_C@_1O@KNJFIJAH@?$AAK?$AAB?$AAD?$AAH?$AAI?$AAD?$AA?$AA@
atol
CmpCompareTwoCompressedNames
ExInitializePagedLookasideList
??_C@_08BALJOLKL@PAGEFree?$AA@
??_C@_0BO@KGDILPEO@PAGEVRFCIRP_MJ_DEVICE_CONTROL?$AA@
??_C@_1BG@IEFJIJH@APEGOCSN?$AAT?$AAB?$AAl?$AAa?$AAd?$AAe?$AA?$AA@
??_C@_1BG@DOJNKNGN@NITI?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AAF?$AA0?$AA3?$AA?$AA@
??_C@_0CG@OMNCFAFL@PAGE?$CF2d?5?$CF2d?5?$CF4d?5?$CF02d?3?$CF02d?3?$CF02d?4?$CF@
CmUnloadKeyEx
WmipDelayCreate
RtlpStackTraceDataBaseLock
CmpRemoveSubKeyCellNoCellRef
ZwQuerySystemEnvironmentValueEx
MiMakeSystemAddressValidPfnSystemWs
MiCheckForUserStackOverflow
??_C@_0N@HLDGFDL@ZwOpenThread?$AA@
MiMustFrameBeCached
??_C@_1EO@OGHNHBEL@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAl?$AAo?$AAc?$AAa?$AAt?$AAe?$AA?5?$AAs?$AAy?$AAs?$AAt?$AAe@
PpInitSystem
VfZwMapViewOfSection
VerifierFreeTrackedPool
WmipProbeWnodeMethodItem
PopUnlockComplete
WmipFindSysIdTable
??_C@_0CF@LEFIKNFB@PAGEIgnoring?5RtlDestroyHeap?$CI?5NUL@
WmipDeleteMethod
HalpDeleteMountLetter
IopMaxDeviceNodeLevel
FsRtlIsNameInExpression
IopCompleteUnloadOrDelete
__imp_VidBufferToScreenBlt
__imp_VidScreenToBufferBlt
CcPfBootWorker
CmpRebuildSecurityCache
PopMapInternalActionToIrpAction
ZwTerminateThread
MiCheckControlArea
CmpInsertSecurityCellList
SdbFindFirstStringIndexedTag
ExReleaseCacheAwarePushLockExclusive
CmpMasterHive
ExGetPoolTagInfo
NtSetIoCompletion
IopReferenceDriverObjectByName
??_C@_1CC@LIFGDLBE@NITIOCSN?$AAT?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
PfxInitialize
??_C@_0FF@LCPGOBLM@?4text?6?$CK?$CK?$CK?5Fatal?5System?5Error?3?50x@
PoUnregisterSystemState
??_C@_1CI@GMLPCOJB@?$AAT?$AAi?$AAm?$AAe?$AAZ?$AAo?$AAn?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
MiSnapThunk
ViGenericVerifyIrpStackDownward
??_C@_0O@EHBHKBHL@ZwQueryObject?$AA@
??_C@_17BALMPEHE@?$AAD?$AAO?$AAS?$AA?$AA@
??_C@_19ENNDBEJL@?$AAN?$AAT?$AAF?$AAS?$AA?$AA@
??_C@_0EG@LOEIHILF@PAGE?5?5?5?5for?5IRP_MN_QUERY_LEGACY_@
??_C@_1EO@NLDBOPLL@APEG?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
HvCheckHive
ExChangeHandle
MmUnmapViewOfSection
??_C@_0DI@DJBMHADJ@PAGEVRFYDMA?5adapters?5aren?8t?5supp@
??_C@_0IN@LMDFILHN@PAGEVRFCThe?5address?5field?5of?5the@
CmpOKToFollowLink
RtlpIsFrameInBounds
SeGetLogonIdDeviceMap
ArbBacktrackAllocation
VerifierKeRaiseIrqlToDpcLevel
IopLoadDriver
PspThreadDelete
CcPfEndBootTimerRoutine
RtlMapSecurityErrorToNtStatus
PiCriticalQueryRegistryValueCallback
?enable@?2??INCREMENT_ADAPTER_CHANNELS@@9@9
ZwEnumerateDriverEntries
__imp_HalSetBusDataByOffset
CcPfPrefetchDirectoryContents
CmSetKeyUserFlags
MiApplyDriverVerifier
NtQueryPortInformationProcess
??_C@_1CO@CELHPLEP@NITI?$AAM?$AAa?$AAx?$AAi?$AAm?$AAu?$AAm?$AAT?$AAu?$AAn?$AAn?$AAe?$AAl?$AAE?$AAn?$AAt?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
MiAllocatePfn
IopWstrLoaderReservedMemory
RtlConvertSidToUnicodeString
CmpShiftIndex
KiOpFetchBytes
LsaDeregisterLogonProcess
PerfInfoProfileSourceRequested
??_C@_0BN@NNEPKLGL@INIT?2Device?2LanmanRedirector?$AA@
??_C@_1DE@GPBBKOPM@NITIOCSN?$AAT?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAP?$AAo?$AAw?$AAe?$AAr?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
LpcpValidateClientPort
PopWakeTimer
IoDeleteController
RtlCustomCPToUnicodeN
KiOp_MOVAPS
GUID_DEVCLASS_FSFILTER_CONTENTSCREENER
??_C@_1IA@OFINPHPN@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
ExCbSetSystemTime
ViBadDriver
??_C@_0BH@OKJCIFPN@PAGEVRFCDEVICE?5FAILURE?$AA@
IopSmallIrpLookasideList
pIoFreeIrp
ZwCreateProfile
MxTotalFreePages
WmipCpeQueryInfo
WmipFireOffWmiEvent
MapperDeviceExtension
MiFlushTbAndCapture
MmUnusedSubsectionList
SepModifyTokenPolicyCounter
ArbInitializeArbiterInstance
??_C@_1CG@KKHGLAGN@APEG?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAP?$AAr?$AAe?$AAf?$AAe?$AAt?$AAc?$AAh?$AAe?$AAr?$AA?$AA@
KeAreAllApcsDisabled
ExpSessionPoolSmallLists
PiCriticalOpenCriticalDeviceKey
GUID_DEVCLASS_GPS
ExpSystemErrorHandler
ZwStopProfile
SepAdtObjectReferenceAuditAlarm
FsRtlLookupPerStreamContextInternal
AfdWorkQueueSpinLock
MmNumberOfSystemPtes
??_C@_0DP@HGGPNKGM@PAGEDumping?5untriggered?5notifica@
CmpTransmetaID
MiMovePageToEndOfStandbyList
GUID_DEVCLASS_SMARTCARDREADER
??_C@_1BA@KEDBFNHF@APEG?$AA1?$AA3?$AA9?$AA4?$AA?2?$AA?$AA@
WmipMCEState
MmPagedPoolInfo
MmCallDllInitialize
TriageImagePageSize
KeSetAutoAlignmentProcess
RtlCopySidAndAttributesArray
ExpScanCount
KeDetachProcess
IoWriteErrorLogEntry
??_C@_1BA@HLGGGPNC@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?$AA@
IoCreateFileSpecifyDeviceObjectHint
ExpLuidIncrement
ExpWin32DeleteProcedure
CmpSystemHiveConversionFailed
SeCreateClientSecurityFromSubjectContext
_memicmp
CreateFileInfo
CcMdlReadComplete
MmUnusedSegmentCleanup
KeQueryActiveProcessors
MiFlushTbForAttributeChange
CmRegistryIODebug
NtSetInformationProcess
ObpSymbolicLinkMapping
MmUnsecureVirtualMemory
CmpInitializeSystemHive
ZwYieldExecution
MiFlushDataSection
FsRtlPrivateCheckForSharedLockAccess
HalpGetFullGeometry
MmMinimumFreeDiskSpace
??_C@_0N@DNABNPOO@PAGEntoskrnl?$AA@
__mb_cur_max
CcPfTraceTimerRoutine
ViDeadlockDatabaseOwner
MiPurgeTransitionList
CmpSetValueDataExisting
WmipRefCount
MiLowNonPagedPoolThreshold
CmTypeString
??_C@_0CJ@GLIMFKOB@?4textKDTARGET?3?5Refreshing?5KD?5con@
ViDeadlockIssue
PpCheckInDriverDatabase
ObReferenceFileObjectForWrite
ViSufficientlyBootedForPcControl
NtQueryDefaultLocale
??_C@_07MCKANBBD@?4text?$CFx?$AA@
CcSetVacbLargeOffset
IoSynchronousInvalidateDeviceRelations
MmSysPteIndex
SepFilterToken
RtlIpv4StringToAddressExA
KeQueryRuntimeThread
ObWatchHandles
RtlUpperString
RtlClearAllBits
ZwCreateEventPair
??_C@_1CK@KFNHHFLH@NITI?$AAF?$AAi?$AAr?$AAm?$AAw?$AAa?$AAr?$AAe?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAf?$AAi?$AAe?$AAd?$AA?$AA@
CmpProcessAddRegLine
ZwOpenObjectAuditAlarm
??_C@_1DO@EHKLPJCG@APEGOCSN?$AAT?$AA?2?$AA$?$AAW?$AAI?$AAN?$AA_?$AAN?$AAT?$AA$?$AA?4?$AA?$HO?$AAB?$AAT?$AA?2?$AAd?$AAr?$AAv?$AAm?$AAa?$AAi?$AAn?$AA?4?$AAs?$AAd?$AAb?$AA?$AA@
LZNT1FindMatchStandard
RtlpGenerateInheritedAce
FsRtlNumberOfRunsInLargeMcb
??_C@_0N@DBGMBEKL@PAGEkernel32?$AA@
_flswbuf
VpPoolHitTag
CmpCallBackCount
MmSectionExtendResource
??_C@_0BB@CDCPGGAO@INITAuthenticAMD?$AA@
KeDelayExecutionThread
PopIdleThrottleCheckTimeout
??_C@_0P@LMJEKJML@PAGEVRFCDevObj?$AA@
NtWaitForKeyedEvent
RtlpDeleteRangeListEntry
??_C@_0BB@KLKOBDFJ@ZwDuplicateToken?$AA@
??_C@_0JN@LKDPEOCA@PAGEVRFCThe?5driver?5has?5not?5handl@
SepAdtMinListLength
MiReEnableVerifier
IopGetLegacyVetoListDrivers
IoShutdownSystem
PipIsDuplicatedDevices
ZwSetDefaultUILanguage
RtlIpv4StringToAddressExW
??_C@_1BC@KFCOAPLE@APEG?$AAD?$AAo?$AAc?$AAk?$AAe?$AAd?$AA?$AA@
??_C@_1BM@MFCPDBNO@APEG?$AAT?$AAi?$AAm?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AA?$AA@
??_C@_1DC@PCLODNFM@NITIOCSN?$AAT?$AAM?$AAI?$AAC?$AAR?$AAO?$AAS?$AAO?$AAF?$AAT?$AA?5?$AAB?$AAU?$AAS?$AA?5?$AAM?$AAO?$AAU?$AAS?$AAE?$AA?$AA@
??_C@_1CO@NFIOAAOE@?$AAU?$AAS?$AAE?$AA_?$AAS?$AAE?$AAR?$AAV?$AAI?$AAC?$AAE?$AA_?$AAP?$AAA?$AAC?$AAK?$AA_?$AAF?$AAI?$AAL?$AAE?$AAS?$AA?$AA@
PopFindPowerDependencies
NormalYearDaysPrecedingMonth
AnimBarPos
PopIrpSerialLock
ZwRequestWaitReplyPort
MiCheckSystemPteProtection
FsRtlIncrementCcFastReadWait
IopDriverReinitializeQueueHead
KeInitializeGuardedMutex
RtlDecompressBufferProcs
PiControlQueryDeviceRelations
??_C@_1DA@GEIHELHG@APEG?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA3?$AA2?$AA?2?$AAS?$AAV?$AAC?$AAH?$AAO?$AAS?$AAT?$AA?4?$AAE?$AAX?$AAE?$AA?$AA@
RtlpExtendHeap
HeadlessDispatch
IoIsWdmVersionAvailable
??_C@_09CKFGJIDF@PAGE?$CFs?5?$CFs?$AA@
WmipProbeAndCaptureGuidObjectAttributes
MmZeroedPageListHead
??_C@_17DMKHFPIE@APEG?$AA_?$AA?$AA@
MiSessionCommitPageTables
??_C@_1CC@LFIKIDHG@?$AAP?$AAR?$AAO?$AAB?$AAL?$AAE?$AAM?$AA_?$AAS?$AAE?$AAV?$AAE?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
MmIoTrackerLock
CmpControlSessionManager
__@@_PchSym_@00@UhieignUyzhvUmglhUlyUfkUlyqUznwGEUlykOlyq@ob
PopApplyPolicy
GUID_DEVINTERFACE_CDROM
GUID_DEVCLASS_FSFILTER_REPLICATION
??_C@_1EA@JJMCMOOG@?$AAP?$AAe?$AAr?$AAf?$AAD?$AAe?$AAg?$AAr?$AAa?$AAd?$AAe?$AAT?$AAh?$AAr?$AAo?$AAt?$AAt?$AAl?$AAe?$AAM?$AAi?$AAn?$AAF?$AAr?$AAe?$AAq?$AAu?$AAe?$AAn?$AAc?$AAy?$AA?$AA@
PopIOCallback
MmSizeOfSystemCacheInPages
CmpRaiseSelfHealWarningWorker
??_C@_1BG@MLPJIEIA@APEG?$AAN?$AAT?$AAO?$AAS?$AAB?$AAO?$AAO?$AAT?$AA?$AA@
??_C@_1BM@BHFNCABK@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AAF?$AA0?$AA2?$AA?$AA@
NlsLeadByteInfo
Kd_IHVAUDIO_Mask
PspCreateProcessNotifyRoutineCount
ViTrackIrqlQueueLength
CmpSelfHealWorkerActive
IoEnqueueIrp
WmipKernelLogger
RtlpExceptionHandler
KiGenericCallDpcMutex
GUID_IO_DRIVE_REQUIRES_CLEANING
PsDereferenceImpersonationToken
??_C@_0BO@ODEHDNHI@PAGEVRFY?$CIBusQueryHardwareIDs?$CJ?$AA@
WmipDereferenceEvent
??_C@_1DG@MOGNPAFA@NITIOCSN?$AAT?$AAL?$AAO?$AAG?$AAI?$AAT?$AAE?$AAC?$AAH?$AA?5?$AAS?$AAE?$AAR?$AAI?$AAA?$AAL?$AA?5?$AAM?$AAO?$AAU?$AAS?$AAE?$AA?$AA@
CcPinReadNoWait
PopAcProcessorPolicy
IopQueryDeviceRelations
WmiStopContextSwapTrace
??_C@_1DG@ENIBPCAI@APEG?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?$AA@
MiPageFileFull
VfZwDeleteFile
ExpOkToTimeRefresh
IopCombineCmResourceList
MiResolveMappedFileFault
??_C@_1DA@MLLCJJAO@NITI?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAF?$AAi?$AAr?$AAm?$AAw?$AAa?$AAr?$AAe?$AAM?$AAa?$AAp?$AAp?$AAe?$AAr?$AA?$AA@
??_C@_1FO@KPCPAPPE@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?5?$AAs@
CcPfBeginBootPhase
WmipIsWbemRunningDispatch
ZwSetSystemEnvironmentValueEx
CallLevelChange
MiCheckForConflictingVadExistence
??_C@_1BI@NMEKDKNM@APEG?$AA?2?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
MiLocateKernelSections
RtlCompareUnicodeString
PsGetThreadWin32Thread
SepRmSetAuditEventWrkr
PopResetCurrentPolicies
MmPageFaultNotifyRoutine
IopDeleteLockedDeviceNodes
??_C@_1O@CEDCILHN@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA@
LdrAccessResource
KeProfileInterruptWithSource
MiWslePteLoops
ArbTestAllocation
?enable@?2??ADD_MAP_REGISTERS@@9@9
MiExtendPagingFiles
??_C@_0M@BAEGNLHB@INITCONSTv4?$AA@
MmSystemSpaceLock
MiWaitForInPageComplete
FsRtlLookupLargeMcbEntry
ZwCancelIoFile
IopRebalance
FsRtlpRedirs
WmipIsLoggerOn
__imp_KdD0Transition
KiDeferredReadyThread
EnlistKeyBodyWithKCB
NtWaitForSingleObject
MmPagesAboveWsThreshold
??_C@_1BM@MENOOHOD@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AAF?$AA0?$AAC?$AA?$AA@
ExpWakeTimerList
WmipFileIndex
CmpCmdHiveClose
CmpGetValueData
IopFindBestConfiguration
NtAddDriverEntry
MmSystemCacheStart
NtSecureConnectPort
InternalBreakpointTimer
Kd_DMSERVER_Mask
??_C@_0DC@GBCGJANJ@?4textPhysical?5range?50x?$CFp?9?$DO?$CFp?5now@
SdbpFindFirstIndexedWildCardTag
??_C@_1FI@MCMKPPHK@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAH?$AAA?$AAR?$AAD?$AAW?$AAA?$AAR?$AAE?$AA?2@
CcFirstDelay
PopCompleteRequestIrp
NtQueryInformationJobObject
ObSetSecurityObjectByPointer
??_C@_1FE@OHPBOHOG@NITI?$AA?2?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?2?$AAL?$AAo?$AAw?$AAN?$AAo?$AAn?$AAP?$AAa?$AAg?$AAe?$AAd?$AAP?$AAo?$AAo?$AAl@
??_C@_1IA@FOIJBHBP@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
CmSetAcpiHwProfile
PspJobTimeLimitsTimer
MiInitializeSystemPtes
SeSetAuditParameter
MiCloneProcessAddressSpace
??_C@_08NJOEBGMI@?4text?$AN?6?$CK?$AA@
ExpSetSystemTime
RtlCopyUnicodeString
WmipProcessWmiRegInfo
RtlIpv6StringToAddressExA
MmSystemPteBase
RtlWriteRegistryValue
PsGetThreadFreezeCount
CmpRegistryMachineSystemCurrentControlSetString
CmVersionString
KdpTimeSlipEvent
MiGetHighestPteConsumer
PopIdleDefaultPromoteFromC1Percent
PaletteNum
KeRemoveQueue
ExpSetCurrentUserUILanguage
??_C@_0BH@BBJALJBF@ZwQueryDirectoryObject?$AA@
PerfInfoStopLog
MmSpecialPoolEnd
??_C@_1BA@HGHICEAL@NITI?$AAg?$AAr?$AAo?$AAu?$AAp?$AA?$AA@
InitIsWinPEMode
MmMapLockedPages
CcLostDelayedWrites
SepMakeTokenEffectiveOnly
MiAllocateLowMemory
MiCheckControlAreaStatus
??_C@_1CA@NOEJLICN@NITI?$AAL?$AAa?$AAs?$AAt?$AAK?$AAn?$AAo?$AAw?$AAn?$AAG?$AAo?$AAo?$AAd?$AA?$AA@
IoReadPartitionTableEx
??_C@_1JO@GFGKEDCH@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
MmProcessColorSeed
??_C@_1DK@KEILGJMB@NITI?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAB?$AAo?$AAo?$AAt?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
CpPutByte
RtlIpv6StringToAddressExW
KeyboardMap
CmNtCSDVersion
??_C@_0M@JFNOKDA@INITCONSTv5?$AA@
??_C@_1CG@KOBLMKND@APEGOCSN?$AAT?$AAP?$AAr?$AAi?$AAm?$AAa?$AAr?$AAy?$AAD?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
MiDeletePageTablesForPhysicalRange
VfZwCreateTimer
IoReportResourceUsage
GUID_MOF_RESOURCE_REMOVED_NOTIFICATION
??_C@_0BF@GEAAJNAA@ZwOpenProcessTokenEx?$AA@
KiOpOneByteTable
MiFreeNonPagedPool
GUID_DEVCLASS_HIDCLASS
VerifierExReleaseFastMutexUnsafe
Kd_HALIA64_Mask
IoAsynchronousPageWrite
SdbReadEntryInformation
MmCollidedLockEvent
??_C@_0PB@PIEENEPG@PAGEVRFCCaller?5of?5IoInitializeIr@
??_C@_1BE@MMFNEPDK@?$AAM?$AAi?$AAr?$AAr?$AAo?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
RtlRaiseStatus
PpPnpShuttingDown
RtlIpv6StringToAddressA
ZwRemoveIoCompletion
RtlMultiByteToUnicodeN
??_C@_1DG@BEFMKFIL@NITI?$AAW?$AAi?$AAn?$AA9?$AA5?$AAT?$AAr?$AAu?$AAn?$AAc?$AAa?$AAt?$AAe?$AAd?$AAE?$AAx?$AAt?$AAe?$AAn?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
??_C@_1IC@MMHJJINI@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAU@
PopGetNextRange
WmipRemoveDataSourceByDS
??_C@_1CC@EDDBMMHO@APEG?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAF?$AAl?$AAo?$AAp?$AAp?$AAy?$AA?$AA@
??_C@_1CK@NAILOCJL@APEG?$AAP?$AAr?$AAe?$AAs?$AAe?$AAr?$AAv?$AAe?$AAP?$AAr?$AAe?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AA?$AA@
KeThawExecution
IoDeviceNodeTreeSequence
ZwFsControlFile
RtlQueryAtomInAtomTable
??_C@_1BE@FDELBPHF@?$AAL?$AAI?$AAN?$AAK?$AA_?$AAD?$AAA?$AAT?$AAE?$AA?$AA@
CmMoveKey
CmpRegistryMachineHardwareDescriptionString
??_C@_1BM@HJFAKKFG@?$AAM?$AAS?$AAI?$AA?5?$AAT?$AAR?$AAA?$AAN?$AAS?$AAF?$AAO?$AAR?$AAM?$AA?$AA@
MmAllocateNonCachedMemory
IopAttachDeviceToDeviceStackSafe
KiUnwaitThread
CmpCreateHwProfileFriendlyName
MmGetSessionById
MmAllocatePagesForMdlEx
PiInitPhase1
MmSessionSpecialPoolEnd
??_C@_0M@CHFPBDHO@PAGELKAbort?$AA@
ExpAdditionalCriticalWorkerThreads
??_C@_0CB@EBHDDEGF@PAGEVRFCIRP_MN_ENABLE_COLLECTION@
MmDetachSession
??_C@_1DG@HHNHDENM@?$AAN?$AAo?$AAn?$AAP?$AAa?$AAg?$AAe?$AAd?$AAP?$AAo?$AAo?$AAl?$AAM?$AAa?$AAx?$AAi?$AAm?$AAu?$AAm?$AAP?$AAe?$AAr?$AAc?$AAe?$AAn?$AAt?$AA?$AA@
BreakpointsSuspended
ViSuperDebug
MiResidentPagesForSpan
??_C@_08HBEACJAN@INITYEAR?$AA@
CmpSetVersionData
RtlInitializeUnicodePrefix
CcSetValidData
ViFilterAddDevice
RtlIpv6StringToAddressW
CmpUnlockRegistry
FsRtlAcquireFileForCcFlushEx
Kd_KBDCLASS_Mask
IopErrorLogListHead
??_C@_1CM@OCLBCIKK@NITI?$AA?2?$AAA?$AAr?$AAc?$AAN?$AAa?$AAm?$AAe?$AA?2?$AAr?$AAa?$AAm?$AAd?$AAi?$AAs?$AAk?$AA?$CI?$AA0?$AA?$CJ?$AA?$AA@
PsRemoveLoadImageNotifyRoutine
SepLsaHandle
??_C@_06HEOINPBP@cached?$AA@
??_C@_07PFMBPIDF@PAGEirt?$AA@
HvpWriteLog
RtlpVerCompare
??_C@_1BO@BMGHNPCE@APEGOCSN?$AAT?$AAS?$AAe?$AAt?$AAu?$AAp?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
Kd_IMAPI_Mask
PopThermalLock
KiProcessorBlock
MmSystemShutdown
RtlRealSuccessor
HvpEnlistFreeCells
NtCompactKeys
ZwCompareTokens
WmipDoFindRegEntryByDevice
PopDebugHiberFileName
LdrEnumResources
SdbpReadMappedData
??_C@_0NA@JLLKFABA@PAGEVRFCCaller?5has?5forwarded?5an?5@
SepAdtDiscardingAudits
MiFindActualFaultingPte
??_C@_0DO@IPIPBIKN@PAGEHvpDoWriteHive?$FL2?0?$CFs?$FN?3?5Invali@
ObpDefaultSecurityDescriptorLength
IoSetDumpRange
ExCreateHandleTable
MapperProcessFirmwareTree
??_C@_1BE@DLPEOAAC@NITI?$AAS?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
??_C@_0CG@LKBKHNEC@?4textFreed?5too?5many?5map?5register@
_setjmp
ZwCreatePort
IopDeallocateApc
ZwRemoveProcessDebug
RtlInterlockedSetClearBits
SePrivilegeObjectAuditAlarm
??_C@_1DG@JDAJFNDN@NITI?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AA?5?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAP?$AAa?$AAr?$AAt?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
SepExports
??_C@_19LKMGGDHO@APEG?$AA?$CF?$AAd?$AA?$AA@
ExpProfileStateMutex
NtQueryValueKey
WmiEventLoggerGuid
??_C@_1CA@MGDNHHAM@?$AAM?$AAA?$AAT?$AAC?$AAH?$AA_?$AAL?$AAO?$AAG?$AAI?$AAC?$AA_?$AAN?$AAO?$AAT?$AA?$AA@
KiDmaIoCoherency
MiRemoveUnusedSegments
RtlpInitializeHeapSegment
?enable@?2??VF_ASSERT_IRQL@@9@9
IopGroupTable
MiMapCacheFailures
ViFaultTracesIndex
IoReuseIrp
CmDefaultLanguageIdType
??_C@_0BC@POHCBOGK@INITRDIMAGELENGTH?$AA@
??_C@_0CB@ENCDIJAI@PAGEVRFCPowerActionShutdownReset@
MiUpdateWsle
NtSetSecurityObject
MmLargePageDriverBufferType
??_C@_0M@HECKBOHF@INITCONSTv0?$AA@
??_C@_1BM@CIDKBFDA@NITIOCSN?$AAT?$AA?2?$AAL?$AAo?$AAg?$AAC?$AAo?$AAn?$AAf?$AA?$AA@
MmPlentyFreePagesValue
FsRtlFirstMappingLookasideList
KiExitDispatcher
PopAcquirePolicyLock
VfZwAdjustPrivilegesToken
??_C@_1CI@CEOPHINK@?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAS?$AAi?$AAm?$AAu?$AAl?$AAa?$AAt?$AAe?$AA?$AA@
ZwQueryTimer
FsRtlInitializeOplock
MiModifiedWriteBurstCount
VfWmiVerifyIrpStackDownward
??_C@_1DA@EGNMBAOO@APEGOCSN?$AAT?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?5?$AAA?$AAp?$AAp?$AAl?$AAi?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
PopPerfBusyAdjustmentThreshold
??_C@_0CJ@BNBPHEKK@PAGEVRFYFlushing?5too?5many?5map?5re@
??_C@_1BO@MOAGOFAC@NITI?$AA?2?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAT?$AAy?$AAp?$AAe?$AAs?$AA?$AA@
ExpCurrentTimeZoneId
SdbpDoesFileExists_U
??_C@_1BK@MHNEPFFF@?$AAV?$AAE?$AAR?$AA_?$AAL?$AAA?$AAN?$AAG?$AAU?$AAA?$AAG?$AAE?$AA?$AA@
??_C@_1GG@KPOLHOBB@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAH?$AAA?$AAR?$AAD?$AAW?$AAA?$AAR?$AAE?$AA?2@
Kd_DCOMSS_Mask
ArbGetNextAllocationRange
??_C@_0BI@PMBCGPFP@ZwQueryInformationToken?$AA@
VfDeadlockAcquireResource
??_C@_1O@DNDKEGKB@APEG?$AAP?$AAC?$AAI?$AA?2?$AA?$AA@
MmVerifyDriverBufferType
??_C@_1CA@FONFCEGC@APEG?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
_wtoi
HalExamineMBR
??_C@_0BO@JDBPDJJO@?4textHOTP_ID_PeDebugSignature?$AA@
??_C@_0CA@PCLMKDNG@PAGEVRFCPowerSystemSleeping3?4S3?$AA@
RtlIpv4StringToAddressA
WmipQueryGLRegistryRoutine
??_C@_1CK@OMMACOCP@?$AA0?$AAx?$AA?$CF?$AA?4?$AA2?$AAx?$AA?$CF?$AA?4?$AA2?$AAx?$AA?5?$AA?$FL?$AAM?$AAo?$AAd?$AAe?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?$AA@
_wtol
CmpDestroyTemporaryHive
FsRtlRemovePerStreamContext
??_C@_0EI@IDNMGDCF@PAGEHDLSNew?5log?5entries?5have?5bee@
MiTrimPte
??_C@_0O@FEPJHLEJ@ZwOpenProcess?$AA@
??_C@_0BP@NGKHMOKE@PAGEVRFYIRP_MJ_SYSTEM_CONTROL?4?$AA@
SeImpersonateClient
StringCopyExWorkerW
??_C@_09NDOHPKFA@?4text?$CK?5?$CK?6?$AA@
VfZwQueryEaFile
ZwQueryInformationThread
MmGetNumberOfFreeSystemPtes
??_C@_1CA@JLGADFDP@NITI?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
LZNT1FindMatchMaximum
PopVerifySystemPowerPolicy
??_C@_1CI@KCPLCKNP@APEG?$AAB?$AAa?$AAs?$AAi?$AAc?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAV?$AAe?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
??_C@_1CI@OCJEAJDG@t?4xe?$AAt?$AA?3?$AA?3?$AA?$CF?$AAh?$AAs?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?$AA@
MmGetVirtualForPhysical
MiInitializeNonPagedPool
RtlCreateAcl
KeSuspendThread
??_C@_1DI@JHEJPBNI@?$AAD?$AAe?$AAa?$AAd?$AAl?$AAo?$AAc?$AAk?$AAR?$AAe?$AAc?$AAu?$AAr?$AAs?$AAi?$AAo?$AAn?$AAD?$AAe?$AAp?$AAt?$AAh?$AAL?$AAi?$AAm?$AAi?$AAt?$AA?$AA@
MiUpdateThunks
KeReleaseSpinLock
PopIdleFrom0IdlePercent
GUID_IO_TAPE_ERASE
??_C@_1BC@ONGGPNBD@?$AAD?$AAM?$AAS?$AAE?$AAR?$AAV?$AAE?$AAR?$AA?$AA@
PopBuildPowerChannel
??_C@_0DD@IJEKIIJI@INITValue?5cannot?5be?5read?5for?5Bit@
??_C@_0CC@LILAJEMH@PAGE?2Device?2Harddisk?$CFd?2Partition@
KiSwitchKernelStackContinue
InbvInstallDisplayStringFilter
MiZeroPageFile
MiCompleteProtoPteFault
??_C@_0DF@MCABLIFM@?4textDMA?5Pages?5Not?5Locked?$CB?5MDL?5?$CF@
RtlpFreeAtom
KdCreateRemoteFile
ExAllocateCacheAwarePushLock
KdpReportCommandStringStateChange
??_C@_1BI@CJGIOPAN@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
KiPageFault
IopDeleteFile
CcMapDataWaitMiss
??_C@_07PICLCNFO@PAGELK?6?$AA@
KiSystemServiceRepeat
PoNotifySystemTimeSet
RtlpCoalesceFreeBlocks
_atoi64
KeBootTimeBias
SepAdtAuditingEnabled
IoCheckEaBufferValidity
RtlIpv4StringToAddressW
ZwSetVolumeInformationFile
PiMarkDeviceTreeForReenumeration
??_C@_1CI@ICEGEPEB@NITI?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
KiAcquireGuardedMutex
MiChargeTemporaryCommitmentForReduction
PsGetProcessPeb
NtFlushWriteBuffer
ExpTimeRefreshInterval
??_C@_19CEIKLEHF@?$AAU?$AAH?$AAC?$AAD?$AA?$AA@
MmGetSystemPageFile
IoSetDeviceInterfaceState
??_C@_0BA@NKAPPHKH@PAGE?2ArcName?2?$CFs?$AA@
??_C@_0FI@JFKEOFNI@PAGEVRFYDriver?5is?5trying?5to?5map?5@
ExpAltTimeZoneBias
MmTotalCommitLimit
RtlTraceDatabaseUnlock
ZwAllocateUserPhysicalPages
PipServiceInstanceToDeviceInstance
ExEnterCriticalRegionAndAcquireResourceShared
??_C@_0CD@KKCPBABL@PAGEInvalid?5hotpatch?5hook?5pointe@
PopSaveHiberContext
WmipConstructMCAErrorEventAMD
MiInsertInSystemSpace
WmipMaxKmWnodeEventSize
??_C@_1BI@PFCJLHGF@?$AAV?$AAE?$AAR?$AAF?$AAI?$AAL?$AAE?$AAT?$AAY?$AAP?$AAE?$AA?$AA@
VfZwDeleteValueKey
KiDisplayBlueScreen
??_C@_0BA@PIHPIHIM@IoGetDmaAdapter?$AA@
??_C@_1DE@LBPAGFPI@APEGOCSN?$AAT?$AAE?$AAm?$AAb?$AAe?$AAd?$AAd?$AAe?$AAd?$AA?$CI?$AAR?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAe?$AAd?$AA?$CJ?$AA?$AA@
CmpProfileLoaded
PopAllocatePages
CmpLoadWorkerDebugEvent
MmSessionSpecialPoolStart
??_C@_0P@KBOEPCGK@PAGEVRFCStatus?$AA@
??_C@_0DH@BGBHKGHA@?4textPhysical?5range?50x?$CFp?9?$DO?$CFp?5fir@
??_C@_1CA@OFCCNLFJ@?$AAP?$AAa?$AAg?$AAi?$AAn?$AAg?$AAF?$AAi?$AAl?$AAe?$AAQ?$AAu?$AAo?$AAt?$AAa?$AA?$AA@
??_C@_1CG@EKNAKNAG@NITI?$AAR?$AAe?$AAt?$AAu?$AAr?$AAn?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
ViIrpLogDdiLock
CmpDelayCloseWorkItem
KdPerformanceCounterRate
ObpCloseHandle
pIoAllocateIrp
IoCancelFileOpen
KdpOweBreakpoint
MiClusterWritesDisabled
??_C@_1BO@CBDCLNAH@APEG?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AA?$AA@
LZNT1Formats
NtQuerySystemEnvironmentValueEx
??_C@_0BN@LLHBLNJN@PAGEVRFCIRP_MJ_DEVICE_CHANGE?$AA@
HvpFreeHiveFreeDisplay
PiFreeGenericTableEntry
??_C@_0ED@DHHBLGNF@PAGEVRFYDVRF?3?5Driver?5switched?5st@
??_C@_1CA@GGLMMH@APEG?$AAC?$AAo?$AAm?$AAp?$AAa?$AAt?$AAi?$AAb?$AAl?$AAe?$AAI?$AAD?$AAs?$AA?$AA@
ViDeadlockReservedResources
??_C@_0BL@HCBCHLIJ@PAGEVRFCIRP_MN_STOP_DEVICE?$AA@
MiAllocateWsle
MmGetSessionId
??_C@_1IE@DDEOLJDM@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
ExSetHandleInfo
??_C@_1CM@FOPEDKLI@?$AAI?$AAd?$AAl?$AAe?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAD?$AAe?$AAm?$AAo?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
GUID_HWPROFILE_CHANGE_CANCELLED
RtlCopySid
KeContextFromKframes
WmipDeregisterDevice
NtTerminateThread
PopCleanupPowerState
IoCheckQuerySetVolumeInformation
CmpLazyFlushDpcRoutine
MiFreeInitializationCode
Kd_NTFS_Mask
WatchStepOverSuspended
InbvDisplayDebugStrings
RtlpAddKnownAce
ZwSetIoCompletion
ExpValidateLocale
VfWmiTestStartedPdoStack
??_C@_1CA@HEDOCFIF@APEGOCSN?$AAT?$AAB?$AAa?$AAc?$AAk?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?$AA@
PopFlushVolumes
??_C@_0BH@EKHBPACC@ZwSetInformationObject?$AA@
VfFailSystemBIOS
MmSizeOfPagedPoolInPages
??_C@_0O@PLFBHJNH@INITCONSTCBUS?$AA@
??_C@_0EG@GJNEPEFF@PAGESkipping?5hook?9specific?5valid@
??_C@_1BM@OCNNIJBC@?$AAP?$AAR?$AAE?$AAV?$AAO?$AAS?$AAB?$AAU?$AAI?$AAL?$AAD?$AAN?$AAO?$AA?$AA@
PsInitSystem
CcPfParametersSave
PopAcPolicy
SepAccessCheck
KdRefreshDebuggerNotPresent
CmpMultifunctionTypes
IopFsNotifyChangeQueueHead
KiPreprocessInvalidOpcodeFault
ZwResumeThread
MmProtectToValue
MiLowNonPagedPoolEvent
??_C@_1BK@GKFKDPPB@APEG?$AA?2?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?2?$AA?$AA@
RcConsolidateFrames
ObpAuditBaseDirectories
PopCompositeBatteryUpdateThrottleLimit
??_C@_1CE@DBAEGFMH@APEG?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AA?$CF?$AAc?$AA?3?$AA?$AA@
IoSetInformation
RtlxUnicodeStringToOemSize
CmEnumerateKey
VfZwAlertThread
KiInterruptTemplate
VfZwQueryInformationFile
KiOpPreprocessAccessViolation
ZwModifyDriverEntry
SdbCloseDatabaseRead
ObpQueryNameString
ViDdiClassFailDeviceInField
??_C@_1BA@IJBJIBMI@?$AAM?$AAO?$AAD?$AAT?$AAI?$AAM?$AAE?$AA?$AA@
MiInitializeWowPeb
MiSetPagingOfDriver
ExpSystemIsInCmosMode
RtlGetSetBootStatusData
VerifierSystemSufficientlyBooted
WmipInsertQueueMCEDpc
IoCountOperations
ViDeadlockSearchThread
KiInitializeBootStructures
??_C@_0GN@PPAOMOKL@PAGEVRFCA?5driver?5has?5called?5IoCa@
??_C@_1BM@BNMJBGBI@NITIOCSN?$AAT?$AAX?$AAT?$AA_?$AA8?$AA3?$AAK?$AAE?$AAY?$AA?$AA@
WmipInUseRegEntryCount
??_C@_0BN@LODIJCKM@ZwQueryVolumeInformationFile?$AA@
??_C@_1BG@OGBFMEDC@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAF?$AAl?$AAa?$AAg?$AA?$AA@
SdbpGetModuleType
CcPerformReadAhead
MiRemoveVadCharges
PsLoadedModuleSpinLock
FsRtlCompletionRoutinePriv
SepAdtOpenObjectForDeleteAuditAlarm
VfZwTerminateProcess
IoGetDeviceObjectPointer
PopInitializePowerPolicySimulate
SdbFindNextTag
LeapYearDaysPrecedingMonth
??_C@_0P@IBIICCAK@ZwUnloadDriver?$AA@
??_C@_1BG@MHAKMKJF@APEG?$AAS?$AAy?$AAs?$AAW?$AAO?$AAW?$AA6?$AA4?$AA?$AA@
RtlRandomEx
MmSessionDataPages
__@@_PchSym_@00@UhieignUyzhvUmglhUhvUfkUlyqUznwGEUhvOlyq@se
DbgkpDeleteObject
GUID_DEVCLASS_NODRIVER
IovpSessionDataFinalizeSurrogate
??_C@_0BO@MIIJPJOH@PAGEVRFCIRP_MN_EXECUTE_METHOD?$AA@
??_C@_1BM@GINPLDED@APEG?$AAR?$AAo?$AAo?$AAt?$AAD?$AAi?$AAr?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
IopErrorLogRequeueEntry
??_C@_1BE@EOJEJMOD@?$AAI?$AAN?$AAD?$AAE?$AAX?$AA_?$AAK?$AAE?$AAY?$AA?$AA@
Kd_PCI_Mask
VfFreeMapRegisters
NtSaveKeyEx
CmpRegistrySystemFileNameString
??_C@_0CI@DPALHFGD@PAGEVRFY?$CIDeviceTextLocationInfor@
??_C@_1BO@JFJHGLBJ@?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
NtOpenProcess
PoSimpleCheck
MmExtendSection
VfZwAddBootEntry
Kd_PROCESSOR_Mask
NtCreateWaitablePort
??_C@_1BC@JAEBCJAO@APEG?$AAL?$AAe?$AAg?$AAa?$AAc?$AAy?$AA?$AA@
MmUserProtectionToMask2
GUID_DEVCLASS_PNPPRINTERS
MmUserProtectionToMask1
??_C@_1CG@OLJCOKMH@NITI?$AAN?$AAe?$AAt?$AAC?$AAf?$AAg?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AAI?$AAD?$AA?$AA@
??_C@_1HM@NDEHAJBJ@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
PopPerfTimeTicks
PsGetContextThread
FsRtlLookupMcbEntry
NtCompressKey
WmiUpdateTrace
??_C@_1BA@LJOOBMED@NITI?$AAc?$AAs?$AAr?$AAs?$AAs?$AA?$AA@
SeUndockPrivilege
PiProcessSetDeviceProblem
__imp_HalStopProfileInterrupt
CmpSetValueKeyExisting
ObGetObjectInformation
IoControllerObjectType
??_C@_1GI@HPPLCAKJ@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAw?$AAa?$AAi?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAb?$AAo?$AAo@
MmClaimParameterAdjustUpTime
??_C@_1NE@LGKGMNDJ@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
SeRmInitPhase1
MiFillSystemPageDirectory
ExResourceCheckFlags
__imp_VidResetDisplay
VerifierMmUnmapIoSpace
??_C@_09PCMICMOO@PAGE?5?$CF02X?$AA@
??_C@_0BO@PEHIALAH@PAGEVRFCPowerSystemWorking?4S0?$AA@
??_C@_0DI@FAAIOHGL@PAGEVRFYDriver?5is?5attempting?5to?5@
strspn
CmpGetSectionLineIndexValueCount
CcDirtySharedCacheMapList
CmpSwitchStorageAndRebuildMappings
MiKernelResourceEndPte
XIPInit
KiOp_MOVDQA
ViVerifyDma
CmpDelayedCloseTableLock
WmipRawSMBiosTableHandler
??_C@_1DC@DMJADDGF@?$AAU?$AAP?$AAT?$AAO?$AA_?$AAB?$AAI?$AAN?$AA_?$AAP?$AAR?$AAO?$AAD?$AAU?$AAC?$AAT?$AA_?$AAV?$AAE?$AAR?$AAS?$AAI?$AAO?$AAN?$AA?$AA@
CmClassName
ZwAlertResumeThread
??_C@_1BI@NEKKIIOB@APEG?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
ZwCreateEvent
IoWMIQueryAllData
MiSystemViewStart
CmpDeleteKeyObject
KiTimerTableLock
MiVerifierThunksAdded
GUID_DEVICE_HIBERNATE_VETOED
NtInitiatePowerAction
ExpGetLookasideInformation
CmpAssignSecurityDescriptorWrapper
LpcpEventCounts
MiFindEmptyAddressRangeDownBasedTree
HvSyncHive
IoGetDiskDeviceObject
IoRegisterFileSystem
??_C@_1DI@KPAGACFN@APEG?$AAE?$AAv?$AAe?$AAr?$AAy?$AAo?$AAn?$AAe?$AAI?$AAn?$AAc?$AAl?$AAu?$AAd?$AAe?$AAs?$AAA?$AAn?$AAo?$AAn?$AAy?$AAm?$AAo?$AAu?$AAs?$AA?$AA@
ObpDestroyTypeArray
??_C@_0N@KMHEFPDE@INITCONSTRel?$AA@
FsRtlLookupLastBaseMcbEntryAndIndex
??_C@_0HJ@PAPGNAD@PAGEVRFCA?5driver?5has?5added?5a?5dev@
Kd_FSTUB_Mask
ExpCopyProcessInfo
MiZeroAllPageFiles
??_C@_1BK@PCKGDOLD@NITIOCSN?$AAT?$AA1?$AA0?$AA1?$AA?9?$AAK?$AAE?$AAY?$AA?$AA@
IoAllocateIrp
MiPfPutPagesInTransition
??_C@_0O@BKBJEGOA@INIT?2Security?$AA@
KiOpDecodeModRM
PopShutdownWorkItem
ZwDelayExecution
IopLoadUnloadDriver
ExpGetProcessInformation
MiDeleteVirtualAddresses
??_C@_0BG@HMIJCKHG@ZwDeviceIoControlFile?$AA@
??_C@_0M@MAILKIKO@ZwOpenTimer?$AA@
??_C@_1HE@LNJOFGHP@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAU@
PopSplitMdl
IopGetMountFlag
KeReleaseGuardedMutexUnsafe
??_C@_1M@NKDGBFEM@NITI?$AAK?$AAe?$AAy?$AA?$AA@
??_C@_1BI@JPCMFPH@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
??_C@_1BO@BMFECIBN@APEG?$AAS?$AAy?$AAm?$AAb?$AAo?$AAl?$AAi?$AAc?$AAL?$AAi?$AAn?$AAk?$AA?$AA@
SeWorldSid
ExBlockPushLock
RtlCopyRangeList
PiDDBLock
MmMakeFileAccess
PspExitNormalApc
SeAssignSecurity
IopIsDeviceInstanceEnabled
ExpGetSystemBasicInformation
ObpRemoveObjectList
InitAnsiCodePageDataOffset
SeSetSecurityDescriptorInfo
ObpReleaseLookupContextObject
MmAttachSession
SeBackupPrivilege
PiProcessDriverInstance
MmAdjustWorkingSetSizeEx
??_C@_19DDCEIOIB@?$AAF?$AAL?$AAA?$AAG?$AA?$AA@
pbih
VfZwBreakForIssues
MmGetSystemRoutineAddress
VerifierObDereferenceObject
??_C@_1CO@NPFMNNGA@APEGOCSN?$AAT?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
CmpEnableLazyFlushDpc
RtlCompressBufferLZNT1
NtSetUuidSeed
ZwWriteRequestData
IopAllocateBootResourcesRoutine
CmpUlongPtrLength
??_C@_0BH@ENILHPP@ZwEnumerateBootEntries?$AA@
ObpNameBufferLookasideList
HvpFindNextDirtyBlock
ExpUuidSaveSequenceNumber
wcscpy
InbvDriverInitialize
IopTriageDumpDataBlocks
ViGenericIsValidIrpStatus
WmipSysIdUuidCount
MiIssueNoPtesBugcheck
CmpDoOpen
ActionNames
ZeroKernelPte
MiDeletePteRange
Kd_IDLETASK_Mask
FsRtlAllocateResource
IoVolumeDeviceToDosName
FsRtlNotifyFilterChangeDirectory
NtInitialUserProcessBufferType
??_C@_1CG@LBOGFODA@t?4xe?$AAt?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAD?$AAo?$AAc?$AAk?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
MmProtectFreedNonPagedPool
MapperConstructRootEnumTree
IoCheckQuotaBufferValidity
ExAcquireResourceExclusiveLite
??_C@_1DG@IIGCGBDG@?$AAP?$AAe?$AAr?$AAf?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AAF?$AAr?$AAe?$AAq?$AAu?$AAe?$AAn?$AAc?$AAy?$AAD?$AAe?$AAl?$AAt?$AAa?$AA?$AA@
MiInitializePfn
RtlpCompareKnownObjectAces
PpHandleEnumerateHandlesAgainstPdoStack
??_C@_0BH@IAKOPMKC@ZwRequestWaitReplyPort?$AA@
??_C@_1BK@PDGBENOI@APEG?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAD?$AAe?$AAs?$AAc?$AA?$AA@
VfDevObjPostAddDevice
CmpBuildAndLockKcbArray
??_C@_0BA@IKEJKDHF@PAGEVRFCRoutine?$AA@
??_C@_1CK@NHPCKBME@?$AAI?$AAd?$AAl?$AAe?$AAF?$AAr?$AAo?$AAm?$AA0?$AAI?$AAd?$AAl?$AAe?$AAP?$AAe?$AAr?$AAc?$AAe?$AAn?$AAt?$AA?$AA@
VerifierIsTrackingPool
CmpFindNameInList
VfAllocateAdapterChannel
IovpVerifierFlags
MiInsertPageInList
ZwGetWriteWatch
PiHandleProcessWalkWorker
??_C@_0CO@JAHMOOHC@INITCONSTKeeping?5previous?5autotr@
ExDereferenceCallBackBlock
??_C@_1O@MNGPEMAN@APEG?$AAU?$AAS?$AAB?$AA?2?$AA?$AA@
KeSetProcess
MiGatherMappedPages
ExpTimeRefreshDpcRoutine
GUID_DEVCLASS_USB
MiCachedNonPagedPool
ZwSetInformationJobObject
IopBuildRemovalRelationList
??_C@_0DP@DAENIE@PAGEVRFYVerified?5driver?5or?5hardw@
MmKeepBootRegistry
PiControlGenerateLegacyDevice
CmpGetAddRegInfData
CmpMatchSearchRule
??_C@_1BO@IGDMFFA@?$AAP?$AAa?$AAg?$AAe?$AAd?$AAP?$AAo?$AAo?$AAl?$AAQ?$AAu?$AAo?$AAt?$AAa?$AA?$AA@
KdNumberOfSpecialCalls
??_C@_1BO@NKKAEJEB@NITIOCSN?$AAT?$AAP?$AAS?$AA2?$AA?5?$AAM?$AAO?$AAU?$AAS?$AAE?$AA?$AA@
ZwSaveMergedKeys
VERIFY_BUFFER_LOCKED
GUID_DEVCLASS_BIOMETRIC
ArbAllocateEntry
ArbRetestAllocation
KeWaitForSingleObject
NtQueryIoCompletion
ZwImpersonateThread
MmClaimParameterAdjustDownTime
ZwQueryKey
NtOpenEvent
MiHandleBankedSection
MmProcessCommit
GUID_BUS_TYPE_EISA
MiFindEmptyAddressRange
??_C@_1M@NFFGGLEH@?$AAT?$AAA?$AAG?$AAI?$AAD?$AA?$AA@
VfZwEnumerateBootEntries
MmQuerySpecialPoolBlockType
??_C@_1CK@IPKNCGG@?$AAA?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
PsGetJobLock
SepTokenDeleteMethod
SUBTRACT_MAP_REGISTERS
ObpLookupDirectoryEntry
MiFaultRetryMask
KdpSearchInProgress
MiRemoveFreePoolMemoryFromDump
CmpCyrixID
VfMajorVerifyNewIrp
MmIdentifyPhysicalMemory
WmipMangleInstanceName
CmRegistryMachineHardwareDescriptionName
??_C@_1BM@MHHOIHG@APEG?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
FsRtlDissectDbcs
FsRtlUninitializeBaseMcb
MmMarkPhysicalMemoryAsBad
??_C@_0BD@KODEDALN@ZwQueryBootOptions?$AA@
CmpSearchKeyControlBlockTree
IopNotifyLastChanceShutdownQueueHead
??_C@_0DF@DKJCFODL@PAGEInvalid?5flags?5?$CI?$CF08x?$CJ?5specifi@
KeReadStateThread
RtlpApplyAclToObject
MiProtectedPoolInsertList
ZwAllocateLocallyUniqueId
??_C@_1GK@KICBCNFL@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAU@
MmGetFileNameForSection
IoGetConfigurationInformation
ExpAllocateHandleTableEntrySlow
PaletteBmp
ViIrpDatabase
CcVacbSpinLock
SeDetailedAuditingWithToken
KeRemoveDeviceQueue
PiQueueDeviceRequest
MiMapViewOfPhysicalSection
ObpDeregisterObject
FsFilterPerformCallbacks
IopSynchronousApiServiceTail
??_C@_0FI@MICFKPLA@PAGEVRFCA?5driver?5has?5sent?5an?5IRP@
SeCheckPrivilegedObject
NtClose
SeCreatorGroupServerSid
??_C@_0P@GLDAFGAD@PAGELKShutdown?$AA@
FsRtlFastUnlockSingle
ExpSessionPoolBigPageTableHash
IopRaiseInformationalHardError
PiIrpQueryRemoveDeviceCompletionRoutine
??_C@_0EG@KFPMPEHE@INITMM?3?5Loader?1HAL?5memory?5block?5@
CmpStashBufferLock
??_C@_07GCNBHBCI@INITany?$AA@
CmpConvertLangId
NtGetPlugPlayEvent
RtlpLogCapturedStackTrace
??_C@_1BE@BKJDOABP@NITI?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
NtdllTraceGuid
VerifierExAllocatePoolWithQuota
??_C@_0CE@DDJFNPG@PAGECmpFileWrite?3?5error?5exiting?5@
??_C@_1BO@GGOLMBHB@NITI?$AAW?$AAa?$AAi?$AAt?$AAa?$AAb?$AAl?$AAe?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
PalettePtr
CmpCmdInit
MmAdvanceMdl
FsRtlAllocateFileLock
??_C@_1BK@OCJLMIBB@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAa?$AAl?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
ExpSessionPoolBigPageTable
MiRemoveFromSystemSpace
CcMdlReadWait
WmipEventLogger
GUID_DEVCLASS_PRINTER
ZwSetValueKey
CmBootLastKnownGood
VerifierLargePagedPoolMap
RtlpCaptureStackTraceForLogging
??_C@_0JJ@LEJPMFFC@PAGEVRFCAn?5IRP?5dispatch?5handler?5@
Mi4dPages
??_C@_0FP@KIICIMME@PAGEVRFCCaller?5has?5completed?5suc@
PopPolicy
wcsrchr
IoGetRequestorSessionId
KeUserPopEntrySListResume
MiRemovePageFromWorkingSet
ViMaxCommonBuffersPerAdapter
PopHibernationErrorSubtstitionString
PiProcessReenumeration
ViInitializeEntry
RtlIsGenericTableEmptyAvl
??_C@_07CJMPNEHH@PAGE?$CFwZ?$AA@
??_C@_1GK@IIPPDIKL@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
CmpFreeValueData
PsGetProcessId
MmLastReservedMappingPte
??_C@_1CO@FLCCMNBF@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?2?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?$AA@
ShortTime
ExSweepHandleTable
PopDumpStackPrefix
NtCreatePagingFile
MiSessionTagSizePages
PipOpenServiceEnumKeys
NtBuildLab
PopLogNotifyDevice
KeInitializeMutant
IopStartNetworkForRemoteBoot
IopRemovePageFromPageMap
ObReferenceSecurityDescriptor
??_C@_0LF@GDPHALDG@PAGEVRFCCaller?5has?5incorrectly?5f@
??_C@_0CJ@CHADLCDA@PAGECopyright?5?$CIC?$CJ?5Rational?5Syste@
PfVerifyTraceBuffer
??_C@_0FM@DBOIAADB@PAGEVRFCCaller?5has?5changed?5the?5s@
CcPfAppLaunchScenarioTypePrefix
SdbReadDWORDTag
CmpFreeSecurityDescriptor
VidBitBlt
IoCreateDisk
PiInitPhase0
WmiOneSecond
IoWMISuggestInstanceName
FsRtlFastUnlockAllByKey
MiCalculatePageCommitment
??_C@_0BJ@ODAMPGLM@ZwWaitForMultipleObjects?$AA@
??_C@_0KO@FINFKLOL@PAGEVRFCCaller?5has?5completed?5unt@
??_C@_1CA@JICGLCAE@APEG?$AAV?$AAi?$AAd?$AAe?$AAo?$AAI?$AAn?$AAi?$AAt?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
??_C@_0BJ@MALEAKLF@PAGEVRFCPowerActionSleep?$AA@
??_C@_1BM@MDLONIHD@NITI?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
WmipRawMCA
PopSwitches
NtOpenMutant
PopRemoveReasonRecordByReasonCode
MiModifiedPageWriterTimerDpc
ExEnterCriticalRegionAndAcquireResourceExclusive
SepProcessAuditSd
IoQueryFileInformation
IopFailZeroAccessCreate
??_C@_19GGDNNDFE@?$AAN?$AAA?$AAM?$AAE?$AA?$AA@
KeInitializeMutex
MmIsIoSpaceActive
PopShutdownHandler
??_C@_1CA@MFKJFOCE@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAD?$AAp?$AAc?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
KdpSysWriteBusData
ZwReleaseSemaphore
VerifierExAllocatePoolWithTag
CmpRaiseSelfHealWarning
IopIrqScoreRequirement
??_C@_09GLOEOINM@INIT?3?5?$CFwZ?$AA@
??_C@_1O@DDDBKPL@APEG?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
??_C@_1BE@EMFIGANI@?$AAI?$AAH?$AAV?$AAD?$AAR?$AAI?$AAV?$AAE?$AAR?$AA?$AA@
??_C@_1BI@JBPNEKAI@APEG?$AAI?$AAm?$AAa?$AAg?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
IopWstrSystem
IopExceptionFilter
IoRequestDeviceEject
InbvSetProgressBarSubset
PopInternalAddToDumpFile
VfCalculateScatterGatherListSize
KiStackFault
IoWMIDeviceObjectToInstanceName
??_C@_1CM@NCOEPDH@APEGOCSN?$AAT?$AAC?$AAe?$AAn?$AAt?$AAr?$AAa?$AAl?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAo?$AAr?$AA?$AA@
CmpProcessDelRegLine
??_C@_1BO@BGFMOFCA@NITIOCSN?$AAT?$AAU?$AAn?$AAd?$AAe?$AAf?$AAi?$AAn?$AAe?$AAd?$AA?$AA@
NtCompleteConnectPort
IopFreeReqAlternative
MiLargePageRangeIndex
PopDispatchPolicyCallout
MiPteHeader
RtlTimeToSecondsSince1970
RtlFindSetBitsAndClear
??_C@_1BO@HGEAJKNH@APEG?$AAW?$AAa?$AAi?$AAt?$AAa?$AAb?$AAl?$AAe?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
VfZwSetEaFile
WmipPumpThreadApc
WmipBuildInstanceSet
WmipFindSMBiosEPSHeader
__imp_VidSetScrollRegion
??_C@_0BJ@IOALJHII@ZwEnumerateDriverEntries?$AA@
ZwAccessCheck
CcWorkQueueSpinLock
??_C@_0BH@KHNFJKFB@ZwSetDefaultUILanguage?$AA@
RtlValidSid
SeAliasPrintOpsSid
VfZwOpenThreadTokenEx
CcPagesWrittenLastTime
GUID_DEVICE_REMOVE_PENDING
Magic10000
RtlSelfRelativeToAbsoluteSD2
??_C@_0M@GPNHOJIG@INITPERFMEM?$AA@
??_C@_0GJ@PGIFGGNC@PAGEVRFCIRP?5completion?5routines?5@
KdPitchDebugger
ZwSetBootEntryOrder
CmpAddToHiveFileList
WmipEventWorkQueueItem
PsCallImageNotifyRoutines
MiInitializeSystemSpaceMap
??_C@_0BG@CEKAADIM@PAGEVRFCPowerDeviceD2?$AA@
KdpContextSent
RtlSplay
ZwDeleteObjectAuditAlarm
??_C@_0BG@IBIOJLLP@ZwQuerySecurityObject?$AA@
??_C@_1CG@KNDLHHOC@APEG?$AAA?$AAc?$AAp?$AAi?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
IopQueryOperationAccess
$$VProc_ImageExportDirectory
CmpRunDownDelayDerefKCBEngine
??_C@_1BA@FNLENBLF@APEG?$AAW?$AAi?$AAn?$AAN?$AAt?$AA?$AA@
??_C@_1BI@LJEGPMKB@NITI?$AAE?$AAv?$AAe?$AAn?$AAt?$AAP?$AAa?$AAi?$AAr?$AA?$AA@
ExExtendZone
WmipProcessPrevMcaLogs
GUID_IO_VOLUME_LOCK_FAILED
VerifierRequiredTimeSinceBoot
??_C@_1CG@LLHEEIDO@?$AAP?$AAR?$AAE?$AAV?$AAO?$AAS?$AAM?$AAA?$AAJ?$AAO?$AAR?$AAV?$AAE?$AAR?$AAS?$AAI?$AAO?$AAN?$AA?$AA@
SepTokenMapping
IopMergeRelationLists
SdbpUnmapAndCloseFile
ZwFindAtom
MiGetStackPointer
KeNumberNodes
PsIsSystemProcess
RawDeviceDiskObject
IoForwardIrpSynchronously
??_C@_1BK@LPLAPKJI@APEG?$AAP?$AAn?$AAp?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
MmDynamicMemoryLock
KdpSearchAddressRangeEnd
NtPrivilegeObjectAuditAlarm
xHalReferenceHandler
ExpUuidSequenceNumberNotSaved
??_C@_1GA@EBDEHIBM@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAD?$AAe?$AAs@
CmpFlushNotify
SepAdtLsaDeadEvent
ZwCreateMailslotFile
RtlUnicodeToMultiByteSize
IoWMISetNotificationCallback
CmpRegistryMachineString
IoCreateStreamFileObjectEx
??_C@_0DO@HNIHAAAB@PAGE?5?5DeviceObject?3?$CFp?5ProcessID?3@
??_C@_1BO@CECOOFLH@NITI?$AAH?$AAT?$AAR?$AAE?$AAE?$AA?2?$AAR?$AAO?$AAO?$AAT?$AA?2?$AA0?$AA?$AA@
??_C@_1CE@NKJCIKKM@NITI?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAR?$AAA?$AAW?$AA?$AA@
CmpGlobalQuota
CmLoadKey
??_C@_1M@NAKNEHFP@NITI?$AAC?$AAO?$AAM?$AA?$AA@
ZwLoadDriver
StringCchPrintfW
HvpHeaderCheckSum
PopActionRetrieveInitialState
??_C@_1CC@OCMBLMD@APEG?$AAH?$AAi?$AAb?$AAe?$AAr?$AAC?$AAo?$AAp?$AAy?$AAB?$AAy?$AAt?$AAe?$AAs?$AA?$AA@
KeAttachProcess
VfZwQuerySection
GUID_BUS_TYPE_LPTENUM
NtQueryQuotaInformationFile
FsRtlDoesDbcsContainWildCards
??_C@_0O@PMMGJEPB@INITCONST?$ICNAK?$AA@
??_C@_0BG@MGCFPCJL@PAGEVRFCIRP_MJ_CREATE?$AA@
??_C@_0BM@OJGAMGMF@PAGEVRFYBreakpoint?5removed?6?$AA@
KiOpPrefixTable
WmipSysIdStatus
??_C@_1BO@GEGMFFNA@APEG?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?$AA@
SdbTagRefToTagID
KdSendPacket
CmRegistrySizeLimit
RtlpExceptionLogCount
??_C@_1HO@OBCLFMMO@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
KiInitSpinLocks
ZwWaitHighEventPair
MiSpecialPagesPagablePeak
IopGetDeviceInstanceCsConfigFlags
NtBuildNumber
PipAllocateDeviceNode
??_C@_1BE@NJOCILEH@?$AAP?$AAA?$AAT?$AAC?$AAH?$AA_?$AAR?$AAE?$AAF?$AA?$AA@
??_C@_1DI@IGCJPOBF@APEGOCSN?$AAT?$AAR?$AAe?$AAa?$AAl?$AAM?$AAo?$AAd?$AAe?$AAP?$AAC?$AAI?$AAE?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
MiSetPageModified
RtlpGetIntegerAtom
PsGetCurrentThreadWin32Thread
??_C@_1BA@GHOECOCL@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
??_C@_1CA@NGDFGHGA@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
CcPfPrefetchMetadata
??_C@_19FCGDFDIE@APEG?$AA?$CF?$AAu?$AA?$AA@
ObpCaseInsensitive
RtlCreateUserThread
PiRearrangeDeviceInstances
??_C@_0BE@KMLKHMJK@ZwFreeVirtualMemory?$AA@
CmRegistryMachineSystemCurrentControlSetControlBiosInfo
??_C@_1BM@HJBDADO@?$AAM?$AAA?$AAT?$AAC?$AAH?$AAI?$AAN?$AAG?$AA_?$AAF?$AAI?$AAL?$AAE?$AA?$AA@
NtCreateToken
Kd_STORPROP_Mask
WmiTraceFastEvent
??_C@_1EI@OOMDMBND@APEG?$AA?2?$AAA?$AAr?$AAc?$AAN?$AAa?$AAm?$AAe?$AA?2?$AAm?$AAu?$AAl?$AAt?$AAi?$AA?$CI?$AA0?$AA?$CJ?$AAd?$AAi?$AAs?$AAk?$AA?$CI?$AA0?$AA?$CJ?$AAr?$AAd?$AAi?$AAs?$AAk?$AA?$CI@
NtSuspendThread
CmpOpenHiveFiles
??_C@_1O@BAHOLLMK@?$AAC?$AAO?$AAN?$AAF?$AAI?$AAG?$AA?$AA@
??_C@_1BA@IMNNHBAG@?$AAI?$AAN?$AAC?$AAL?$AAU?$AAD?$AAE?$AA?$AA@
WmipTraceGuardedMutex
IopCancelSpinLock
RtlDecompressChunks
ExInterlockedInsertTailList
RtlUnicodeStringToAnsiString
GUID_DEVCLASS_FSFILTER_SYSTEM
MmFreeContiguousMemory
IopSelectNextConfiguration
IoCancelIrp
IopIrpStackProfiler
MiUnusedSubsectionPagedPoolPeak
ObAuditInheritedHandleProcedure
??_C@_0N@PEGGKEB@ZwLoadDriver?$AA@
??_C@_0O@PGDPBLCL@PAGELKWorking?$AA@
RtlCopyString
IopBusNumberUnpackResource
KfSanityCheckLowerIrql
IofCallDriver
CcPfNumActiveTraces
IoArcBootDeviceName
MmUnloadSystemImage
CmpRemoveValueFromList
MmIsNonPagedSystemAddressValid
??_C@_0BF@JJOMCPGN@PAGEVRFCIRP_MJ_POWER?$AA@
ExpNextCenturyTime
IopDeviceInterfaceKeysFromSymbolicLink
??_C@_0BB@FNLOFKKL@PAGEVRFY?$CK?5?$CK?5VF?3?5?$AA@
??_C@_1BA@KDJHCGPB@APEG?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?$AA@
_wcsnset
RtlpValidatePeChecksum
CmGetSystemDriverList
CcUnmapVacbArray
IoSetPartitionInformation
??_C@_17FKDGAAMC@?$AAV?$AAS?$AAS?$AA?$AA@
??_C@_1CM@DNGNOLDG@?$AAP?$AAe?$AAr?$AAf?$AAD?$AAe?$AAc?$AAr?$AAe?$AAa?$AAs?$AAe?$AAT?$AAi?$AAm?$AAe?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
PopWakeTimeoutDpc
MiIsPoolLargeSession
ExpCheckDynamicThreadCount
MmAdjustWorkingSetSize
ExReleaseRundownProtectionCacheAware
CcMapData
WmiShortTime
HvpAdjustHiveFreeDisplay
??_C@_0BJ@OBOMIMMA@INIT?2Registry?2Machine?2?$CFs?$AA@
MiLowMemoryEvent
??_C@_1BE@CLINPNMH@APEG?$AAL?$AAE?$AAG?$AAA?$AAC?$AAY?$AA_?$AA?$AA@
ZwOpenEventPair
MiAllocatePagesForMdl
MmSetPageFaultNotifyRoutine
??_C@_0BD@BCHICFIM@PAGEVRFYNext?3?5?5?5?5?$DO?$AA@
??_C@_0BP@MBKJMGMP@PAGEInvalid?5fixup?5information?6?$AA@
KiTestDividend
ObpDeleteNameCheck
CcFastMdlReadNotPossible
MiPageFileTraces
MmTrimAllSystemPagableMemory
PopLockGetDoDevicePowerState
??_C@_1CK@JEPLINHI@APEG?$AAF?$AAi?$AAr?$AAm?$AAw?$AAa?$AAr?$AAe?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAf?$AAi?$AAe?$AAd?$AA?$AA@
IopDeleteDriver
PopVerifyThrottle
PpSetPowerVetoEvent
MiReleaseModifiedWriter
CmpFreeDelayItemsListHead
VfDeadlockDeleteMemoryRange
??_C@_1BC@JHEFHMBN@?$AAR?$AAS?$AAF?$AAI?$AAL?$AAT?$AAE?$AAR?$AA?$AA@
ViPrintString
CmpCompareInIndex
??_C@_1BO@FNBFDNDB@APEG?$AAn?$AAt?$AAo?$AAs?$AAk?$AAr?$AAn?$AAl?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
GUID_DEVCLASS_DISPLAY
FsRtlOplockFsctrl
RtlInterlockedPopEntrySList
??_C@_1FK@BJHDAMG@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?5?$AAb@
MmSessionDelete
??_C@_0DO@BAFACCHI@INIT?6?6XIP?3?5debug?5timestamp?5at?5li@
NtRenameKey
MmIsVerifierEnabled
PsGetCurrentThreadId
KeQueryLogicalProcessorInformation
DbgkpCloseObject
ObOpenObjectByName
ShimExceptionHandler
FsRtlpSetSymbolicLink
IopQueueDeviceWorkItem
CcPurgeAndClearCacheSection
ObInitSystem
GUID_BUS_TYPE_HID
MmPagedPoolCommit
ZwSetQuotaInformationFile
MiEnsureAvailablePageOrWait
PiQueryAndAllocateBootResources
??_C@_1CA@NMLOFOGK@?$AAF?$AAL?$AAA?$AAG?$AA_?$AAM?$AAA?$AAS?$AAK?$AA_?$AAS?$AAH?$AAE?$AAL?$AAL?$AA?$AA@
KeTerminateThread
MmSizeOfPagedPoolInBytes
CcPfParametersSetChangedEvent
ZwCreateJobSet
PopPolicyWorkerAction
RtlLookupFunctionEntry
??_C@_0EF@FJNJLOMA@PAGEVRFYDeadlock?5detection?3?5Must@
IopCloseFile
KeReadStateMutant
WmipDoUnreferenceRegEntry
KdPowerTransition
PipPnPDriverEntry
ExpInitializeCallbacks
VerifierExAllocatePool
CcSetReadAheadGranularity
??_C@_1BC@CPLKIMMK@?$AAC?$AAL?$AAA?$AAS?$AAS?$AAP?$AAN?$AAP?$AA?$AA@
RtlpCreateServerAcl
IopInitializeSummaryDump
??_C@_1BI@DLINFHNO@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAP?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
ArbAddAllocation
SeProfileSingleProcessPrivilege
PsSuspendProcess
ExProfileObjectType
pIofCompleteRequest
xKdGetAcpiTablePhase0
PspSetLdtSize
NtCreateThread
MiSessionLeader
MiCreateDataFileMap
NtSetInformationObject
VfMajorTestStartedPdoStack
CmpCannotWriteConfiguration
??_C@_0DO@PEJFGGNC@?4textAllocating?5too?5many?5map?5reg@
??_C@_0CK@BFJLIPI@PAGEInserting?5?$CFu?5hooks?5into?5targ@
??_C@_1BI@CKKADGLP@?$AAP?$AAE?$AA_?$AAC?$AAH?$AAE?$AAC?$AAK?$AAS?$AAU?$AAM?$AA?$AA@
GUID_PNP_POWER_NOTIFICATION
ZwIsSystemResumeAutomatic
KeAcquireSpinLockAtDpcLevel
GUID_ARBITER_INTERFACE_STANDARD
CmpShiftSecurityCells
RtlLargeIntegerToUnicode
FsRtlPostPagingFileStackOverflow
??_C@_19PDBCBIHB@APEG?$AA0?$AAx?$AA?$AA@
??_C@_1BO@CDOAADKJ@APEG?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
FsRtlNotifyCleanup
SepImportantProcessSd
VfZwAssignProcessToJobObject
CcSetLogHandleForFile
ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
SdbGetFileInfo
IoRegisterBootDriverReinitialization
PpSystemHiveLimitCallback
RtlAddAce
HvpAddFreeCellHint
Mm64BitPhysicalAddress
SePrivilegePolicyCheck
ExAcquireFastMutexUnsafe
GUID_SETUP_DEVICE_ARRIVAL
IovpLocalCompletionRoutine
ExGetCurrentProcessorCounts
??_C@_1BG@FKHICKAJ@?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
NtDeleteAtom
ObpTracePoolTagsLength
ExEventObjectType
MiVerifierPoolThunks
WmipInitializeSecurity
??_C@_0BB@MEMCMILH@PAGEHDLS?$BL?$FL?$CFd?$DL?$CFdm?$AA@
KiOp_Priv
ExpDebuggerWork
MiIsAddressValid
FstubVerifyPartitionTableEFI
IoGetDeviceAttachmentBaseRef
??_C@_0BF@GPLFNEPA@INIT?$CIALTERNATESHELL?$CJ?$AA@
QStringTerminators
??_C@_0L@FGGADCAM@ZwFlushKey?$AA@
??_C@_17EEOFDCOB@?$AAV?$AAD?$AAS?$AA?$AA@
ZwQuerySystemInformation
FsRtlCheckNoSharedConflict
CmpDoFlushNextHive
IopRequestDeviceEjectWorker
ExpTimeZoneBias
??_C@_1CI@OCCHDDIE@APEGOCSN?$AAT?$AAL?$AAi?$AAn?$AAe?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
KeStartThread
??_C@_0CG@KGKMNPEA@PAGEVRFCIRP_MJ_SET_VOLUME_INFORM@
CmpSetSystemValues
ZwQueryInstallUILanguage
XIPDispatch
KdpTimeSlipTimer
??_C@_0CI@JBCDHIAG@PAGEVRFCIRP_MJ_QUERY_VOLUME_INFO@
HvpDoWriteHive
ExDisableResourceBoostLite
ExpWorkerThreadBalanceManagerPtr
DbgPrompt
RtlStringFromGUID
WmipWmiIrpCompletion
PopDispatchEventCodes
VerifierKeInitializeTimerEx
??_C@_0BB@HDJPPKBA@PAGEHDLSshutdown?$AA@
KeTimeAdjustment
ZwQueryOpenSubKeysEx
PiProfileConvertFakeDockToRealDock
??_C@_1BG@FOGLGDK@APEG?$AAU?$AAn?$AAd?$AAo?$AAc?$AAk?$AAe?$AAd?$AA?$AA@
??_C@_1CK@PIALCKAC@APEGOCSN?$AAT?$AAC?$AAo?$AAn?$AAc?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAL?$AAi?$AAm?$AAi?$AAt?$AA?$AA@
MmMappedPageWriterList
MiHighNonPagedPoolThreshold
??_C@_0BD@ODFMEHHA@PAGEVRFCIRP_MJ_PNP?$AA@
??_C@_1BC@LMJKNFEF@APEG?$AAV?$AAM?$AAE?$AAB?$AAu?$AAs?$AA?$AA@
KiInitialThread
MiUnmapLockedPagesInUserSpace
strlen
KeBugCheck
Kd_KBDHID_Mask
ViDoubleBufferDma
SdbpPatternMatchAnsi
??_C@_0EG@CJHNJIEB@?4text?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5HAL?5Verifie@
SepSidInToken
VfZwOpenEvent
TunnelMaxEntries
SdbpCreateSearchPathPartsFromPath
??_C@_0BA@OAIJJLBA@PAGEHDLS?6?$AN?$CBSAC?$DO?$AA@
ExpTooLateForErrors
PspSystemThreadStartup
ViCheckMdlPages
MmGrowKernelStackEx
??_C@_0BA@BHNBCOKF@INIT?2ArcName?2?$CFs?$AA@
??_C@_1BE@LLCMLFHN@APEG?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AAU?$AAN?$AAC?$AA?$AA@
??_C@_1BO@KKDIKMAA@APEG?$AAL?$AAo?$AAw?$AAe?$AAr?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
SeOpenObjectForDeleteAuditAlarm
VfZwFsControlFile
ObMakeTemporaryObject
RtlEnumerateGenericTableWithoutSplayingAvl
??_C@_1BI@CHDKLJDA@?$AAD?$AAE?$AAS?$AAC?$AAR?$AAI?$AAP?$AAT?$AAI?$AAO?$AAN?$AA?$AA@
PoCancelDeviceNotify
??_C@_1DE@EJOEBCMJ@APEGOCSN?$AAT?$AAF?$AAl?$AAo?$AAp?$AAp?$AAy?$AAD?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
GUID_DEVINTERFACE_PARTITION
PspQuotaBlockList
MmFirstFreeSystemCache
PopIdleThrottleCheckRate
ExCmosClockIsSane
MiNoPagesLastChance
MiDereferenceIoSpace
VfZwRequiredTimeSinceBoot
PerfProfileCache
FsRtlpUncSemaphore
PspCaptureTokenFilter
MatchAll
KeBugCheck2
InitNlsSectionPointer
NtReplyWaitReceivePort
??_C@_1CM@JBCHPEIG@APEGOCSN?$AAT?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAo?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
PsDefaultUILanguageId
MmInPageSupportSListHead
??_C@_0BN@BCFICPJK@PAGEVRFCIRP_MN_ENABLE_EVENTS?$AA@
??_C@_0GE@MGFMKPAB@?4textEX?3?5ExFreePool?$CI?5?$CFp?0?5?$CFlx?5?$CJ?5c@
PiNotificationInProgress
HvReleaseFreeCellRefArray
RtlIpv4AddressToStringExA
ZwEnumerateBootEntries
MiDeleteSystemPagableVm
RtlExpandEnvironmentStrings_U
CmpInitializeMachineDependentConfiguration
??_C@_1BI@OEOHCOKE@?$AAM?$AAS?$AAI?$AA?5?$AAP?$AAA?$AAC?$AAK?$AAA?$AAG?$AAE?$AA?$AA@
PpSetInvalidIDEvent
HalpIsOldStyleFloppy
xHalQuerySystemInformation
PsSetCreateThreadNotifyRoutine
??_C@_0GO@GCMDBPNA@PAGEVRFCA?5driver?5has?5detached?5it@
SePublicDefaultUnrestrictedSd
CmpCopyName
IopLogErrorEvent
??_C@_0EH@MKCPIEID@PAGEVRFYPerformance?5counter?5skip@
Kd_TAPE_Mask
VfZwSetBootOptions
ExpAddTagForBigPages
ViFreeMapRegisterFile
Kd_VIDEO_Mask
PiSetupDDBPath
IopIsNotNativeDriverImage
CcSetFileSizes
NtTerminateProcess
PiProcessHaltDevice
IopAllocateLegacyBootResources
CmpBuildSecurityCellMappingArray
??_C@_0BP@HMIAFAJL@PAGEVRFCIRP_MN_QUERY_INTERFACE?$AA@
WmiFlushTrace
MiContractPagingFiles
LdrFindResourceDirectory_U
DbgkOpenProcessDebugPort
PopRegKey
SdbGetEntryFlags
RtlIpv4AddressToStringExW
PiControlRegisterNewDevice
??_C@_1DI@NDMEFCNB@?$AAP?$AAe?$AAr?$AAf?$AAD?$AAe?$AAc?$AAr?$AAe?$AAa?$AAs?$AAe?$AAP?$AAe?$AAr?$AAc?$AAe?$AAn?$AAt?$AAM?$AAo?$AAd?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?$AA@
Kd_IHVNETWORK_Mask
LpcpPortMapping
PiNotifyUserMode
??_C@_1CI@LLLLFMEH@APEGOCSN?$AAT?$AAD?$AAi?$AAs?$AAk?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
IopQueryRebalanceWorker
MiQueryAddressState
??_C@_17LHLHMOIK@?$AAE?$AAX?$AAE?$AA?$AA@
VfZwQuerySecurityObject
ZwCancelTimer
HvpGetBinMemAlloc
MiSessionIdBitmap
MmMapLockedPagesWithReservedMapping
KeSwitchKernelStack
VerifierKeReleaseMutant
FsRtlNotifyFullChangeDirectory
??_C@_0BO@PAOFNJIG@IoBuildAsynchronousFsdRequest?$AA@
ViStackSwitchAlreadyReported
ZwQueueApcThread
HvpCoalesceDiscardedBins
RtlUnicodeStringToOemString
??_C@_1BM@GJEOADPD@APEG?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
ExSetPoolFlags
PopActionWaiters
ExDrainPoolLookasideList
ExIsResourceAcquiredSharedLite
??_C@_0BK@OAMNJJCG@ZwQuerySymbolicLinkObject?$AA@
IopCreateFile
MmFreeLoaderBlock
CritSecGuid
MmOneSecond
MiOutPageSingleKernelStack
??_C@_0BA@IKAGAHLE@PAGELKSleeping1?$AA@
NoAccessPte
CcNumberVacbs
MmSecureVirtualMemory
WmipInitializeDataStructs
??_C@_0MK@KAMMJPJG@PAGEVRFCPreviously?5set?5IRP_MJ_PO@
??_C@_1CE@KKBADDAL@?$AAO?$AAR?$AAI?$AAG?$AAI?$AAN?$AAA?$AAL?$AA_?$AAF?$AAI?$AAL?$AAE?$AAN?$AAA?$AAM?$AAE?$AA?$AA@
LsaRegisterLogonProcess
PerfInfoStartLog
IoGetDeviceInterfaceAlias
??_C@_06DDANECNM@INIT?0?5?$AA@
CmFirstTime
RtlFindUnicodePrefix
RtlDeleteElementGenericTableAvl
??_C@_1CC@FANIFDHE@APEGOCSN?$AAT?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
WmipFreeTraceBufferPool
MmNonPagedSystemStart
CmpDereferenceNameControlBlockWithLock
??_C@_0EL@GGPEKABF@PAGE?$CK?$CK?$CK?5IopQueryLegacyBusInforma@
WmipPushDirtyContextSwapBuffer
??_C@_0CG@KLEEABCO@PAGEHDLShelp?5?5?5?5?5Display?5this?5li@
??_C@_1BA@DEHLPEPD@t?4xe?$AAt?$AA?$FN?$AA?3?$AA?$CF?$AAu?$AA?$AA@
PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion
??_C@_1DA@JPANHHCN@NITIOCSN?$AAT?$AAL?$AAO?$AAG?$AAI?$AAT?$AAE?$AAC?$AAH?$AA?5?$AAP?$AAS?$AA2?$AA?5?$AAM?$AAO?$AAU?$AAS?$AAE?$AA?$AA@
IoCallDriver
LpcMaxEventLogs
??_C@_0N@OOEAHFII@PAGEHDLS?$BL?$FL7m?$AA@
XIPLocatePages
HalpQueryDriveLayout
MmCollidedFlushEvent
KeSwitchFrozenProcessor
??_C@_0BO@CIDILEI@?2REGISTRY?2MACHINE?2SYSTEM?2DISK?$AA@
NtSetEaFile
FsRtlCopyRead
KiDpcInterrupt
PoGetLightestSystemStateForEject
ZwLockVirtualMemory
??_C@_1CA@JGBAIPOO@?$AAF?$AAi?$AAl?$AAe?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
PsGetCurrentProcessSessionId
SeLocalSid
PiCriticalOpenFirstMatchingSubKey
??_C@_1EM@DJEMMONN@APEGOCSN?$AAT?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAA?$AAp?$AAp?$AAP?$AAa?$AAt?$AAc?$AAh?$AA?2?$AAd?$AAr?$AAv?$AAm?$AAa?$AAi@
MmDbgIsLowMemOk
MiInitializePoolEvents
CmpSymbolicLinkValueName
ZwWaitForMultipleObjects
??_C@_09FLIOMJDB@PAGEntdll?$AA@
??_C@_1CE@CMJBFDLN@NITI?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AAW?$AAM?$AAI?$AAx?$AAW?$AAD?$AAM?$AA?$AA@
CmpID2
PoCallDriver
PoolTrackTableExpansionSize
HvWriteHive
CcFastCopyWrite
ObpRemoveObjectWorkItem
??_C@_0BJ@IFLKMOKL@PAGEVRFCIRP_MJ_SET_QUOTA?$AA@
IoPerfReset
SystemHiveFullPathBuffer
ZwQueryPerformanceCounter
SepInitializePrivilegeSets
MmPagedPoolEnd
ViProtectBuffers
CheckHeapFillPattern
MiCopyHeaderIfResident
SeTokenImpersonationLevel
CmControlHive
CmpLockRegistry
CmpConfigureProcessors
PsSetCreateProcessNotifyRoutine
CcDeleteBcbs
ViFreeMapRegistersToFile
CmRegistryMachineSystemCurrentControlSetServicesEventLog
??_C@_1BO@NJOIKJEN@?$AAI?$AAd?$AAl?$AAe?$AAT?$AAo?$AA0?$AAP?$AAe?$AAr?$AAc?$AAe?$AAn?$AAt?$AA?$AA@
??_C@_1CI@FEBNENEB@APEGOCSN?$AAT?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
WmipUpdateRegistration
??_C@_0DJ@BPJOMAMO@PAGELKChecksum?5for?5context?5page?5@
??_C@_1CO@HBABGIKA@APEGOCSN?$AAT?$AAP?$AAo?$AAi?$AAn?$AAt?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
IopGenericUnpackResource
SeSystemAuthenticationId
RtlIpv6AddressToStringExA
??_C@_1DA@LIECLLEO@?$AAW?$AAi?$AAn?$AA3?$AA2?$AAP?$AAr?$AAi?$AAo?$AAr?$AAi?$AAt?$AAy?$AAS?$AAe?$AAp?$AAa?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
IopQueryDeviceResources
VfGetPDO
MmSpecialPoolCatchOverruns
WmipQueryLogger
MmCheckSystemImage
SeReleaseSubjectContext
??_C@_17GIEHFEFF@?$AAF?$AAD?$AAC?$AA?$AA@
PipReadDeviceConfiguration
??_C@_0N@FDLDAKGH@PAGEKDNOUMEX?$AA@
PopIdleTimeCheck
PopCaptureCounts
??_C@_0JL@LNBFNOAA@PAGEVRFCNon?9successful?5non?9STATU@
??_C@_0BBF@FHKAIJCH@PAGE?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK@
PnPBootDriversLoaded
KePulseEvent
MmSectionBasedRoot
PpIrpQueryCapabilities
CmpDiskFullWarningWorker
_pctype
Kd_CDROM_Mask
PiDDBCacheList
NtPlugPlayControl
??_C@_0BF@FBCKMIGM@INITNOEXECUTE?$DNOPTOUT?$AA@
InitWinPEModeType
HandleTableListLock
IoAdapterObjectType
FsRtlIsNtstatusExpected
PopVerifySystemPowerState
??_C@_1BO@OBKLGKDO@APEG?$AAL?$AAe?$AAg?$AAa?$AAc?$AAy?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
??_C@_1IO@MMOMMGMN@APEGOCSN?$AAT?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu@
RtlpWalkFrameChain
IopSecurityResource
MiCheckCacheAttributes
??_C@_0MH@LMECHHF@PAGEVRFCPreviously?5set?5IRP_MJ_PN@
??_C@_1BA@NJEEFIKO@?$AAS?$AAV?$AAC?$AAH?$AAO?$AAS?$AAT?$AA?$AA@
??_C@_1DA@GHAFCEPB@?$AAP?$AAe?$AAr?$AAf?$AAD?$AAe?$AAc?$AAr?$AAe?$AAa?$AAs?$AAe?$AAM?$AAi?$AAn?$AAi?$AAm?$AAu?$AAm?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
__imp_HalSetProfileInterval
Magic86400000
RawUserFsCtrl
ExpInterlockedPopEntrySList
PipCheckDependencies
RtlAddAccessAllowedAceEx
_wcsupr
CcDeleteMbcb
IopAbortRequest
??_C@_0BP@CGGELFOC@PAGEVRFCPowerActionShutdownOff?$AA@
KdD0Transition
??_C@_0L@BDJBEAFH@PAGEHDLS?$AN?6?$AA@
??_C@_1BA@CBHLHHIN@NITI?$AAT?$AAi?$AAm?$AAe?$AAr?$AA?$AA@
??_C@_1BM@PCAJMGOB@NITIOCSN?$AAT?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
WmipCloseMethod
NtSetInformationFile
ExSnapShotHandleTablesEx
IoReportResourceUsageInternal
KiMcheckAbort
SeAuditProcessCreation
InbvSetDisplayOwnership
IopCompleteDumpInitialization
CmpRegistryPerflibString
MmAvailablePagesEventHigh
RtlIpv6AddressToStringExW
ExpGetSystemEmulationProcessorInformation
VfZwLoadKey
RtlDecompressBuffer
MmPhysicalMemoryBlock
SepReferenceLogonSession
IopTargetDeviceNotifyLock
NtAccessCheckAndAuditAlarm
MiVerifierDriverAddedThunkListHead
??_C@_1CC@IILJJANH@?$AAC?$AAO?$AAM?$AAP?$AAI?$AAL?$AAE?$AAR?$AA_?$AAV?$AAE?$AAR?$AAS?$AAI?$AAO?$AAN?$AA?$AA@
??_C@_1CM@LDDGDJLH@NITI?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
MMVADKEY
ObpStackTable
PopScanIdleList
??_C@_0BL@FGKGDOEE@GUID_DEVICE_REMOVAL_VETOED?$AA@
CmpCallCallBacks
IopPendingSurpriseRemovals
??_C@_1BK@KLGBOMED@APEG?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
WmipSendEnableRequest
FsRtlInitializeWorkerThread
ViMessageClassDriverWarning
??_C@_1BG@MEBEMGBM@?$AAC?$AAS?$AAD?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
ExpNtExpirationDataLength
??_C@_1BC@BANCNNBG@NITI?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
ObpDeleteObjectType
MiSessionSpacePageTables
RtlpStackTraceDataBase
CmpRegistryMachineHardwareDeviceMapString
Kd_SYSTEM_Mask
LpcpRequestWaitReplyPort
CmpGetHiveName
CmpDumpKeyBodyList
PpProfileMarkAllTransitioningDocksEjected
??_C@_1O@CHJOAHHO@APEG?$AAS?$AA?9?$AA1?$AA?9?$AA?$AA@
PipRequestDeviceAction
??_C@_0BH@NBMDBHKO@PAGE?7?5?5?5?5?5?5?5?5?5?5None?$CFs?6?$AA@
??_C@_06NAEHINLA@INIT?$DM?$DN?$AA@
??_C@_1BI@FKCCCAP@?$AAM?$AAO?$AAD?$AAU?$AAL?$AAE?$AA_?$AAT?$AAY?$AAP?$AAE?$AA?$AA@
??_C@_1BK@CEBCMCDO@?$AAS?$AAT?$AAO?$AAR?$AAM?$AAI?$AAN?$AAI?$AAP?$AAO?$AAR?$AAT?$AA?$AA@
??_C@_1CG@KDMPMEJG@?$AAP?$AAe?$AAr?$AAf?$AAM?$AAa?$AAx?$AAC?$AA3?$AAF?$AAr?$AAe?$AAq?$AAu?$AAe?$AAn?$AAc?$AAy?$AA?$AA@
PiEnumerationLock
SepPrimaryDomainAdminSid
ExpExpirationDataKey
__imp_HalDisableSystemInterrupt
??_C@_1CI@JOBMBBGC@NITI?$AAU?$AAs?$AAe?$AAA?$AAl?$AAt?$AAe?$AAr?$AAn?$AAa?$AAt?$AAe?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?$AA@
HvInitializeHive
VfZwOpenProcessTokenEx
??_C@_1BA@KDAEEGIF@?$AAD?$AAE?$AAF?$AAA?$AAU?$AAL?$AAT?$AA?$AA@
CcLazyWriteIos
MmMakeLowMemory
??_C@_1CA@NCKHJPKA@NITI?$AAD?$AAH?$AAC?$AAP?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAA?$AAC?$AAK?$AA?$AA@
??_C@_1CO@OOHEIEMB@APEGOCSN?$AAT?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
PspW32JobCallout
SdbGetTagDataSize
KeSetEventBoostPriority
??_C@_0M@GIAFENEI@INITNETWORK?$AA@
RtlpInterlockedPopEntrySList
??_C@_07NBAGBKCA@PAGEhal?$AA@
MiLocateAddress
MiInsertPageInFreeList
RtlIpv6AddressToStringA
KiCheckForKernelApcDelivery
??_C@_1CK@CPCONEDC@NITI?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAR?$AAa?$AAm?$AAd?$AAi?$AAs?$AAk?$AA?$CF?$AAw?$AAZ?$AA?$AA@
??_C@_1FC@BPOJKIED@NITI?$AA?$HL?$AA4?$AAD?$AA3?$AA6?$AAE?$AA9?$AA7?$AA2?$AA?9?$AAE?$AA3?$AA2?$AA5?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AAB?$AAF?$AAC?$AA1?$AA?9?$AA0?$AA8?$AA0?$AA0?$AA2@
DisplayFilter
IopBuildSymbolicLinkStrings
MiMappedPageWriter
MmProtectMdlSystemAddress
??_C@_0O@OJAGHJLN@PAGEVRFY?$CFs?$CFs?6?$AA@
VfPutDmaAdapter
CmpUnLockKcbArray
PopDispatchFullWake
IopExecuteHwpDefaultSelect
ExpRemovePoolTrackerExpansion
KdpRemoteFiles
Kd_SOFTPCI_Mask
Kd_SERMOUSE_Mask
CmpSystemHiveHysteresisLowSeen
??_C@_0M@MAPNMCE@PAGEUnknown?$AA@
RotBarSelection
??_C@_1BK@KDGGFPPK@APEG?$AA?1?$AAp?$AAr?$AAe?$AAf?$AAe?$AAt?$AAc?$AAh?$AA?3?$AA?$AA@
tolower
PopUserIsAdmin
MiGetEventCounter
HalpNextMountLetter
VerifierMmUnlockPages
PsDefaultSystemLocaleId
VfZwQueryInformationProcess
??_C@_1BO@BOENJGGN@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?$AA@
PoolTrackTableExpansion
RtlIpv6AddressToStringW
PopNotifyWork
PspQueryDescriptorThread
GUID_MOF_RESOURCE_ADDED_NOTIFICATION
??_C@_0BP@DMNPMCKA@PAGE?6Dumping?5open?5handles?5?3?5?6?6?$AA@
RtlOemToUnicodeN
MmPageEntireDriver
ExSnapShotHandleTables
PsSetProcessPriorityClass
FinalizeBootLogo
IopAllocateBootResources
VfPowerVerifyIrpStackDownward
HvFreeHive
NtInitialUserProcessBufferLength
??_C@_1CC@NKLOGCLO@APEG?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
??_C@_0ID@OONFACGN@PAGEVRFCThe?5driver?5has?5responded@
??_C@_1BI@EHNDODDH@APEG?$AAP?$AAC?$AAM?$AAC?$AAI?$AAA?$AAB?$AAu?$AAs?$AA?$AA@
WmipFindGEByGuid
PopShutdownSystem
NtMapViewOfSection
KdpSearchPageHitIndex
MiCauseOverCommitPopup
RtlAddAccessAllowedAce
_strlwr
ViVerifyMode
MiEnablePagingTheExecutive
RtlTimeToSecondsSince1980
??_C@_1DC@EBODEAGG@NITIOCSN?$AAT?$AAM?$AAI?$AAC?$AAR?$AAO?$AAS?$AAO?$AAF?$AAT?$AA?5?$AAP?$AAS?$AA2?$AA?5?$AAM?$AAO?$AAU?$AAS?$AAE?$AA?$AA@
MiAttemptPageFileExtension
??_C@_1DE@KKPAFCKI@APEG?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAn?$AAt?$AAb?$AAt?$AAl?$AAo?$AAg?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
CmPrefetchHivePages
MiSessionCreateCharge
MiSetSystemCodeProtection
??_C@_1BA@CBHLHNHE@?$AAI?$AAN?$AAD?$AAE?$AAX?$AAE?$AAS?$AA?$AA@
??_C@_1DC@OGMJIKCK@APEG?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?2?$AAW?$AAM?$AAI?$AA?$AA@
RtlMultiByteToUnicodeSize
RtlxAnsiStringToUnicodeSize
??_C@_0O@GJMOJKKJ@INITCONST?$IBRQU?$AA@
??_C@_1DM@CJGDMIGB@NITI?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AA?$AA@
IopPnPSpinLock
PpSetDeviceRemovalSafe
ObpInsertDirectoryEntry
CcPfIsHostingApplication
MmThrottleBottom
SeSystemProfilePrivilege
??_C@_15MAAHCAL@NITI?$AA?$AA@
??_C@_0BE@JOIBNFC@INIT?2Device?2CdRom?$CFd?$AA@
PopSleepDeviceList
KdLogDbgPrint
VfIrpLogRetrieveWmiData
CmpAddToLeaf
CmpUnPinCmView
PpDeviceRegistration
ViBugCheckEmptyString
KeDeregisterBugCheckCallback
ExWindowStationOkToCloseProcedureCallout
??_C@_1O@MMKDDEDC@NITI?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
CcCopyReadNoWaitMiss
PopEnterNotification
PopWriteHiberPages
??_C@_1O@GFADGAKF@APEG?$AA?$CF?$AA0?$AA4?$AAu?$AA?$AA@
KiNoDebugRoutine
MmBadPageListHead
MmEmptyAllWorkingSets
GUID_DEVCLASS_DISKDRIVE
PipGetRegistryDwordWithFallback
??_C@_0BB@GKGFHBLD@PAGEVRFCACPI?4SYS?$AA@
??_C@_0BL@FLOANJEB@PAGEVRFCIRP_MJ_QUERY_QUOTA?$AA@
ExpTaggedPoolLock
FsRtlCurrentBatchOplock
ZwQuerySymbolicLinkObject
??_C@_0M@HFAKBJEL@ZwOpenEvent?$AA@
??_C@_1O@MHJJGBKB@?$AAW?$AAM?$AAI?$AAL?$AAI?$AAB?$AA?$AA@
??_C@_1O@FIMNCMGA@t?4xe?$AAt?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$AA@
??_C@_1BG@GEANJDCH@APEG?$AAD?$AAE?$AAT?$AAE?$AAC?$AAT?$AAE?$AAD?$AA?$AA@
??_C@_1BG@DIAIAOKA@?$AAM?$AAA?$AAT?$AAC?$AAH?$AA_?$AAM?$AAO?$AAD?$AAE?$AA?$AA@
CcScanDpc
??_C@_1BI@MFLHACCD@NITI?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
isupper
NtSetSystemEnvironmentValue
??_C@_1CK@KIADINH@NITIOCSN?$AAT?$AAO?$AAL?$AAI?$AA_?$AAA?$AA1?$AA0?$AA1?$AA_?$AA1?$AA0?$AA2?$AAK?$AAE?$AAY?$AA?$AA@
??_C@_1BM@BCOAFLE@NITI?$AAD?$AAe?$AAb?$AAu?$AAg?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?$AA@
PsGetVersion
ZwUnloadKey2
MmVerifyDriverLevel
VfZwSetSecurityObject
ZwLockProductActivationKeys
??_C@_0DN@PKFOKHOG@?4textDriver?5has?5freed?5too?5many?5s@
CmDumpKey
SeRestrictedSid
MmFreeMappingAddress
PerfProfileInterrupt
??_C@_0M@EGBMHMPH@INITCONSTv2?$AA@
WmiTraceEvent
ExpTimeZoneTimer
KeInitializeTimer
PsIsThreadTerminating
KiSaveInitialProcessorControlState
KeNumberProcessors
SeCaptureSecurityQos
ExpWorkerListHead
??_C@_1CA@EIGHDKGI@APEG?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
SeSystemtimePrivilege
MmWorkingSetExpansionHead
CmpDelayDerefKCBDpcRoutine
??_C@_1BG@KGDCLLHD@?$AAD?$AAA?$AAT?$AAA?$AA_?$AAQ?$AAW?$AAO?$AAR?$AAD?$AA?$AA@
RtlPrefixString
??_C@_0BO@KCMLDAEA@GUID_DEVICE_INTERFACE_REMOVAL?$AA@
??_C@_1BO@LHKHIHCM@NITIOCSN?$AAT?$AAO?$AAL?$AAI?$AA_?$AA8?$AA6?$AAK?$AAE?$AAY?$AA?$AA@
ZwQuerySection
KeInsertQueueDpc
SeAccessCheckByType
ExpInsertPoolTrackerExpansion
??_C@_1IE@FJDNKOOC@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAU@
ZwOpenKey
MiUnlockPagedAddress
PopEventCalloutDispatch
ExApplyCodePatch
PsDisableImpersonation
ExpKeyedEventObjectType
CcRepinBcb
??_C@_0EJ@PAGJCAFB@PAGEVRFYPadding?5after?5allocation@
??_C@_0CK@ELAFPBHK@PAGELKThe?5system?5may?5be?5powered?5@
FsRtlInitializeFileLocks
PsProcessType
InbvDisplayFilter
??_C@_0M@CIBPOIML@INITXIPROM?$DN?$AA@
CmNotifyRunDown
VfZwUnmapViewOfSection
IopCreateCmResourceList
CmpInitializeHive
??_C@_0O@CNOKDEBH@INITCONST?$ICRSU?$AA@
_itoa
MiHighPagedPoolEvent
MiMapNewPfns
MmBootImageSize
CmpLockTwoHashEntriesExclusive
GUID_DRIVER_BLOCKED
RtlIpv4AddressToStringA
ViAdapterList
IopDeviceClassNotifyList
??_C@_0CC@GNCAJNPJ@PAGEVRFCIRP_MN_CHANGE_SINGLE_ITE@
PopIdleDefaultDemotePercent
??_C@_0BA@JPDGLGCG@INITMar?524?52005?$AA@
??_C@_1BA@GDKMNJE@?$AAL?$AAI?$AAB?$AAR?$AAA?$AAR?$AAY?$AA?$AA@
ZwQueryEvent
__imp_VidCleanUp
CmpUpdateSignature
longjmp
FsRtlCheckOplock
SeCaptureSecurityDescriptor
CmpPostApc
PiRemoveDeferredSetInterfaceState
MiAddPtesList
CcCopyReadNoWait
PpProfileRetrievePreferredDockToEject
??_C@_1BM@NGIGOADC@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AA3?$AA0?$AA4?$AA?$AA@
KiFilterFiberContext
??_C@_0BH@HAKCPAGF@PAGEHDLS?$AH?$AH?$AH?$DM?$DPxml?$DO?$AH?$DMBP?$DO?$AA@
??_C@_1CK@JDMEECLM@?$AAA?$AAu?$AAd?$AAi?$AAt?$AAB?$AAa?$AAs?$AAe?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
NtOpenDirectoryObject
??_C@_0N@PDLCOCMP@INITXIPMEGS?$DN?$AA@
??_C@_06OJHGLDPL@?$CInull?$CJ?$AA@
??_C@_0M@PGIMMPAF@PAGEVRFY?4?$CFs?$AA@
SeImpersonatePrivilege
SepInitializationPhase0
MiDecrementCloneBlockReference
??_C@_1CO@MCPKDEEK@?$AAL?$AAa?$AAr?$AAg?$AAe?$AAI?$AAr?$AAp?$AAS?$AAt?$AAa?$AAc?$AAk?$AAL?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
InbvOldIrql
SepInitializationPhase1
KiTbFlushTimeStamp
??_C@_0L@OOLHNLPG@PAGEMININT?$AA@
ExpWstrCallback
ViDeadlockReservedNodes
IopCreateDefaultDeviceSecurityDescriptor
??_C@_0KO@OIKICJNE@PAGEVRFCAn?5IRP?5dispatch?5handler?5@
RtlIpv4AddressToStringW
??_C@_11LOCGONAA@?$AA?$AA@
??_C@_0L@JECNLNLK@ZwOpenFile?$AA@
??_C@_15EODNFOFM@?$AA?$AA?$AA?$AA?$AA?$AA@
rand
_itow
CcAcquireByteRangeForWrite
VerifierMmProbeAndLockPages
ZwOpenKeyedEvent
MiMirroringActive
??_C@_19EMIMDCLB@APEG?$AAp?$AAf?$AA?$AA@
MmSystemRangeStart
ExpCheckForResource
PpDeviceActionThread
ViFaultTracesLog
??_C@_0L@PFOGHILE@PAGE?$CFws?$CFwZ?$AA@
KeBugCheckEx
FsRtlAllocateOplock
ZwDebugContinue
PiControlMakeUserModeCallersCopy
??_C@_1CI@GLNOAFAC@APEG?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAo?$AAr?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAa?$AAl?$AA?$AA@
MmCreateTeb
CmpSetupConfigurationTree
PiControlGetRelatedDevice
FsRtlLookupLastLargeMcbEntryAndIndex
??_C@_0BE@DHJBGLNE@INIT?$CFspartition?$CI?$CFd?$CJ?$AA@
??_C@_1BI@DAPKBHEO@APEGOCSN?$AAT?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?$AA@
VfZwClose
ExFreePoolIndex
FsRtlPrivateLock
??_C@_1CE@HHAMPFCJ@NITI?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAR?$AAa?$AAw?$AAT?$AAa?$AAp?$AAe?$AA?$AA@
ZwQueryOpenSubKeys
NtSetInformationKey
CmpLockTwoHashEntriesShared
??_C@_1CC@FMDNMKNP@APEG?$AAC?$AAS?$AAD?$AAB?$AAu?$AAi?$AAl?$AAd?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
MmCreatePeb
MmAllocationPreference
CmpLoadOptions
SeMakeAnonymousLogonTokenNoEveryone
KdEnteredDebugger
MmPageFileCreationLock
GUID_DEVCLASS_SECURITYACCELERATOR
ViDeadlockCheckDuplicatesAmongRoots
KdpSetCommonState
MmInitSystem
KiApcInterrupt
IopIsFirmwareDisabled
ObFindHandleForObject
PiLookupInDDB
GUID_CLASS_INPUT
PpCreateLegacyDeviceIds
??_C@_0BM@FGKCJFM@PAGEVRFY?$CIEjectionRelations?$CJ?$AA@
??_C@_0BF@JBEEJNAN@PAGELKPopSave?3?5?$CFd?$CF?$CF?$AN?$AA@
VfZwCreateJobObject
ZwQueryDriverEntryOrder
??_C@_1CC@CNDKFCLM@NITI?$AAA?$AAl?$AAt?$AAe?$AAr?$AAn?$AAa?$AAt?$AAe?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?$AA@
PpUserBlock
HvpIsFreeNeighbor
ObpDirectoryMapping
KeExpandKernelStackAndCallout
PsGetJobSessionId
WmipWbemMinuteWait
IopInvokeSecondaryDumpDataCallbacks
??_C@_1HK@CGCHKFDJ@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
MiIdentifyPfn
KiInitializeUserApc
MmLargePageDriverBuffer
WmipDockUndockNotificationEntry
??_C@_1DC@GCHOLFMB@?$AAD?$AAe?$AAa?$AAd?$AAl?$AAo?$AAc?$AAk?$AAS?$AAe?$AAa?$AAr?$AAc?$AAh?$AAN?$AAo?$AAd?$AAe?$AAs?$AAL?$AAi?$AAm?$AAi?$AAt?$AA?$AA@
NtAddAtom
CcMdlReadNoWait
SeSyncAgentPrivilege
??_C@_0BP@MPMDEIPB@PAGEVRFCPowerDeviceUnspecified?$AA@
NtQueryObject
PopApplyProcessorPolicy
NtReplyWaitReceivePortEx
ObCreateObject
ZwSetInformationDebugObject
??_C@_0BD@PPCCBCGB@ZwMapViewOfSection?$AA@
??_C@_0CB@HAAMDPCP@PAGEVRFCIRP_MN_QUERY_DEVICE_TEXT@
ObpSetHandleAttributes
PopPerfCriticalTimeDelta
RtlFindRange
CmInitSystem1
WatchStepOverBreakAddr
ZwLoadKeyEx
NtUnloadDriver
?enable@?2??SUBTRACT_MAP_REGISTERS@@9@9
HvpEnlistBinInMap
KeSwapProcessOrStack
IopCombineLegacyResources
ZwEnumerateSystemEnvironmentValuesEx
??_C@_1CA@OKCKHHKG@?$AAA?$AAP?$AAP?$AAH?$AAE?$AAL?$AAP?$AA_?$AAC?$AAO?$AAN?$AAT?$AAA?$AAC?$AAT?$AA?$AA@
??_C@_0P@NJGBECCE@ZwAddBootEntry?$AA@
FsRtlMdlWriteComplete
DbgkpSectionToFileHandle
??_C@_0DI@FFPICNJE@?4textObpRegisterObject?5?9?5ExAlloc@
iswctype
CmpGetBiosVersion
MiReApplyVerifierToLoadedModules
PnPInitialized
MiPteSListExpand
WmipInsertStaticNames
CmpDelayedCloseSize
??_C@_0BN@CGMEGFHC@INIT?2ArcName?2?$CFspartition?$CI?$CFd?$CJ?$AA@
DbgUserBreakPoint
MiAddExpansionNonPagedPool
NtLockFile
RtlpCopyEffectiveAce
DebugPrompt
PipCreateMadeupNode
KeUnstackDetachProcess
KeServiceDescriptorTable
PopIOWrite
MmDataClusterSize
ObfReferenceObject
SeObjectReferenceAuditAlarm
MiTimerPending
MxPopulatePageDirectories
??_C@_1BE@OKAIMMAN@APEG?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$AA@
strcmp
NtNotifyChangeKey
GUID_BUS_TYPE_USBPRINT
SdbpGetFirstIndexedRecord
ViMessageBuiltInTables
GUID_PCMCIA_BUS_INTERFACE_STANDARD
??_C@_1BO@CEFEBJLB@APEG?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AA0?$AA8?$AAu?$AA?$AA@
??_C@_1BO@NNDHIHHN@?$AAA?$AAP?$AAP?$AAH?$AAE?$AAL?$AAP?$AA_?$AAL?$AAA?$AAN?$AAG?$AAI?$AAD?$AA?$AA@
??_C@_1MA@ENPFIN@NITI?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AA?2?$AA?$HL?$AA4?$AAD?$AA3?$AA6?$AAE?$AA9?$AA7?$AA2?$AA?9?$AAE?$AA3?$AA2?$AA5@
KeTimeIncrement
MiRemoveMappedView
WmipTraceLoadImage
MmTotalSystemCodePages
RtlpAtomMapAtomToHandleEntry
GUID_POWER_DEVICE_WAKE_ENABLE
PiLastGoodRevertLastKnownDirectory
PoSetHiberRange
ExPagedLookasideLock
??_C@_1CC@LHNJPMEF@NITI?$AAF?$AAi?$AAr?$AAm?$AAw?$AAa?$AAr?$AAe?$AAM?$AAe?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
??_C@_1DE@EEHAEEEG@APEG?$AAD?$AAA?$AAT?$AAA?$AAB?$AAA?$AAS?$AAE?$AA?5?$AAS?$AAE?$AAC?$AAT?$AAI?$AAO?$AAN?$AA?5?$AAF?$AAA?$AAI?$AAL?$AAE?$AAD?$AA?$AA@
ViDeadlockAgeWindow
MmIsRecursiveIoFault
IopReferenceVerifyVpb
RtlpFindAndCommitPages
PiControlGetDevicePowerData
??_C@_1BA@LEPJIIOK@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$AA@
NtFreeVirtualMemory
MmUserProbeAddress
??_C@_1EA@OJHIELGA@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAH?$AAA?$AAR?$AAD?$AAW?$AAA?$AAR?$AAE?$AA?$AA@
CcExpressWorkQueue
ObpCreateTypeArray
PspJobTimeLimitsShuttingDown
CcSetDirtyInMask
GUID_DEVCLASS_BATTERY
IopBusNumberPackResource
WorstCaseFill
MiCommitPopups
PsEnumProcesses
MiLowPagedPoolEvent
__imp_HalReturnToFirmware
pIofCallDriver
FsRtlAddLargeEntry
RtlSetDaclSecurityDescriptor
RtlGetElementGenericTable
ZwRestoreKey
MmSecondaryColorMask
FsRtlFastUnlockSingleExclusive
SeImpersonateClientEx
MiInitializeVerifyingComponents
??_C@_0BP@KKIMBGBM@INITCONSTLocked?5pages?5tracking?$AA@
??_C@_1CA@JPIELGIH@APEG?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
ArbAddReserved
MmSessionViewSize
CcPfBeginAppLaunch
RtlpBitsClearTotal
KeSetSystemAffinityThread
KeDeregisterBugCheckReasonCallback
PopWorkerPending
FsFilterCtrlInit
VerifierMmMapLockedPagesSpecifyCache
GUID_REGISTRATION_CHANGE_NOTIFICATION
SdbpFreeUnicodeString
MiInitializePfnForOtherProcess
ViGenericDumpIrpStack
__imp_VidSolidColorFill
RtlCopyMemoryNonTemporal
??_C@_19EBBDPBIL@?$AAA?$AAM?$AAL?$AAI?$AA?$AA@
??_C@_1CC@NGLKGAKK@APEG?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAe?$AAd?$AA?$AA@
CmpAddAcpiAliasEntry
ExLocalTimeToSystemTime
IoBuildAsynchronousFsdRequest
KdpPromptString
ZwAdjustGroupsToken
KdDebuggerInitialize0
ZwQueryFullAttributesFile
ExAllocateCacheAwareRundownProtection
??_C@_1JO@HMBGFMKG@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
HvpCleanMap
CcDirtyPageThreshold
KdDebuggerInitialize1
MiRemovePhysicalPages
VfZwModifyDriverEntry
??_C@_05NDEGEEPI@INIT0?$AA@
CmDeleteValueKey
PipGetRegistrySecurityWithFallback
??_C@_1BK@DDMEDNIN@APEG?$AAB?$AAo?$AAo?$AAt?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
ProbeForRead
RtlWalkFrameChain
??_C@_0GB@MKPCGHLE@PAGEVRFCCaller?5has?5changed?5the?5i@
IoFreeMdl
KeEnterKernelDebugger
MmMappedFileIoComplete
CmpRegistryUserString
WmipReceiveNotifications
RtlFindMessage
??_C@_1BM@OFJJCAO@?$AAA?$AAP?$AAP?$AAH?$AAE?$AAL?$AAP?$AA_?$AAT?$AAI?$AAT?$AAL?$AAE?$AA?$AA@
CmpHiveListHead
NtGetDevicePowerState
WmipSMBiosDataRegQueryRoutine
??_C@_0BF@DGFDKPKE@PAGEVRFYIRP_MJ_BOGUS?$AA@
HvpGetLogHeader
RtlCompressBufferProcs
??_C@_0FM@CNAKHBNA@?4textBreak?5repeatedly?0?5break?5Onc@
FsRtlAddLargeMcbEntry
IovpSessionDataCreate
SdbpCleanupAttributeMgr
PpCallerInitializesRequestTable
??_C@_0BB@NAIGLFPK@ZwYieldExecution?$AA@
ExFreePoolMask
RtlpValidateTargetRanges
??_C@_0GJ@GFNNNKJC@PAGEVRFYCannot?5flush?5map?5registe@
DbgkpSendApiMessage
WmipFindISinGEbyName
WmipDisableKernelTrace
ExInitializeTimeRefresh
??_C@_1M@FPINNANL@?$AAS?$AAA?$AAM?$AAS?$AAS?$AA?$AA@
NtCallbackReturn
MiVerifyingDriverUnloading
??_C@_0EB@KNANOFMF@PAGECM?3?5Registry?5security?5except@
KeFlushQueuedDpcs
MmMinimumFreePages
ObpAuditObjectAccess
CmpCompareCompressedName
LpcInitSystem
PspCreateThread
RtlFatIllegalTable
ZwOpenThreadTokenEx
??_C@_0OA@LJFPHFCA@PAGEVRFCCaller?5of?5IoInitializeIr@
??_C@_0EJ@DBBHFFKB@PAGEVRFY?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5@
GUID_DEVICE_INTERFACE_ARRIVAL
MmSecondaryColors
ExpTimeRefreshLock
PopIdleHandlerLookAsideList
??_C@_0BI@PGLJEMKC@ZwAdjustPrivilegesToken?$AA@
??_C@_1CK@LKHNEMCP@APEG?$AAM?$AAa?$AAx?$AAN?$AAu?$AAm?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AAT?$AAr?$AAa?$AAc?$AAe?$AAs?$AA?$AA@
__lookuptable
KiWaitTest
VF_ASSERT_IRQL
MiWaitForForkToComplete
FsRtlFastUnlockSingleShared
IopComputeHarddiskDerangements
??_C@_1O@FAEPPNJD@?$AAI?$AAS?$AAA?$AAP?$AAN?$AAP?$AA?$AA@
ObDupHandleProcedure
PopCompositeBatteryName
??_C@_0BB@HJCDFOCC@ZwIsProcessInJob?$AA@
RtlVerifyVersionInfo
??_C@_0BJ@CIAKDCJK@ZwQuerySystemInformation?$AA@
IoGetDeviceToVerify
??_C@_0N@MIFGGJON@INITCONSTv?53?$AA@
??_C@_0DG@PKDLKLCD@PAGEVRFYVirtual?5address?5?$CFp?5is?5be@
??_C@_1CA@PPHAONLB@?$AAO?$AAb?$AAT?$AAr?$AAa?$AAc?$AAe?$AAP?$AAo?$AAo?$AAl?$AAT?$AAa?$AAg?$AAs?$AA?$AA@
SeFreePrivileges
??_C@_0BF@PNJEKFCD@PAGEVRFCNTKRNLPA?4EXE?$AA@
IopDropIrp
OemTransUniDefaultChar
??_C@_19HJFLPAJK@?$AAS?$AAI?$AAZ?$AAE?$AA?$AA@
WmipEnableCollectOrEvent
??_C@_0EL@JDJGMEHD@PAGEVRFYCannot?5put?5adapter?5?$CFp?5un@
??_C@_1BM@GEPHODHC@APEGOCSN?$AAT?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?$AA@
??_C@_1BK@HJEDFNNB@NITI?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AAI?$AAd?$AA?$AA@
??_C@_1CK@JJDBCAFH@APEGOCSN?$AAT?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAD?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
WmipIoControl
PspGivebackQuota
CcPfInvalidScenarioTypePrefix
MiFillModuloPages
Nls844UnicodeUpcaseTable
NtAddBootEntry
??_C@_1DC@PLHEJCPM@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?2?$AAT?$AAh?$AAr?$AAo?$AAt?$AAt?$AAl?$AAe?$AA?$AA@
IoMakeAssociatedIrp
PoolBigPageTableHash
RtlAreAnyAccessesGranted
__security_check_cookie
GUID_DEVINTERFACE_VOLUME
??_C@_06MIJONGMG@INIT?$DN?$DM?$AA@
FstubWriteSector
??_C@_1BM@CFCCOOHO@?$AAV?$AAE?$AAR?$AAF?$AAI?$AAL?$AAE?$AAD?$AAA?$AAT?$AAE?$AAH?$AAI?$AA?$AA@
CmProcessorMismatch
MiPageFileTraceIndex
WmipIsWbemRunningWorker
ZwAdjustPrivilegesToken
??_C@_0BB@OPBCEPJL@PAGEVRFCNDIS?4SYS?$AA@
??_C@_1O@DDKLHGCE@APEG?$AAE?$AAi?$AAs?$AAa?$AA?$AA@
WmipTracePageFault
??_C@_0O@BEOCFEFA@PAGEDllUnload?$AA@
??_C@_1CA@FOJGKJED@?$AAT?$AAi?$AAm?$AAe?$AAr?$AAC?$AAh?$AAe?$AAc?$AAk?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
FstubCreateDiskMBR
CmpDelayedCloseElements
IopAssignNetworkDriveLetter
RtlMapGenericMask
IoIsFileOriginRemote
ZwRegisterThreadTerminatePort
NtfsStructLock
KiSwitchKernelStackAndCalloutHandler
CmpRegistryMachineSystemCurrentControlSetControlSessionManagerMemoryManagementString
KiSystemCall32
__imp_KeFlushWriteBuffer
PopIdleDefaultDemoteToC1Time
ZwRequestPort
ZwModifyBootEntry
MiDeleteValidSystemPte
NtWaitForMultipleObjects32
??_C@_1BM@OGMFDBLC@NITI?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
SepRmCallLsa
MiFreeLargePages
MiGetPageForHeader
KiSystemServiceCopyStart
??_C@_0EG@GGEIDHBL@INIT?2Registry?2Machine?2System?2Cur@
MiRemoveImageHeaderPage
MmVerifierTriageEnabled
VfZwSetInformationProcess
FsRtlCheckNoExclusiveConflict
KdPullRemoteFile
MiHighestUserPde
SdbGetStringTagPtr
??_C@_1DG@CGBCDEBP@APEG?$AAB?$AAU?$AAI?$AAL?$AAD?$AA?5?$AAD?$AAR?$AAI?$AAV?$AAE?$AAR?$AA?5?$AAP?$AAA?$AAT?$AAH?$AA?5?$AAF?$AAA?$AAI?$AAL?$AAE?$AAD?$AA?$AA@
MiActiveIoCounter
IopTimerCount
PipEnumerateCompleted
??_C@_1BI@OCNACKAP@APEG?$AAS?$AAe?$AAn?$AAd?$AAA?$AAl?$AAe?$AAr?$AAt?$AA?$AA@
strncmp
xKdMapPhysicalMemory64
MiInitializeCopyOnWritePfn
ViMaxMapRegistersPerAdapter
IopGetLegacyVetoListDeviceNode
IopWstrTranslated
VfQueryPerformanceCounter
SeInitializeProcessAuditName
??_C@_0FG@NKGDJFHF@PAGEVRFY?$CK?$CK?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5@
ObpFreeObject
??_C@_1BE@FAPDENKB@NITI?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
??_C@_1CA@BMNHPDDF@APEGOCSN?$AAT?$AAD?$AAt?$AAi?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
RtlReserveChunk
WmipDiskIoNotify
MiFreeSessionPoolBitMaps
MiSubsectionsProcessed
PsGetProcessWow64Process
??_C@_0O@CGPINIHF@INITCONST?$IBHLQ?$AA@
RtlLengthSid
CmRegistrySizeLimitType
RtlCompareMemory
RtlTraceDatabaseLock
PsGetProcessWin32Process
??_C@_1BE@CMAOBKBA@?$AAV?$AAA?$AAL?$AAU?$AAE?$AAT?$AAY?$AAP?$AAE?$AA?$AA@
??_C@_0CD@NGAMJBHE@PAGE?7?$CF08I64X?3?5jmp?5?$CF08X?5?$CIPC?$CL?$CF08X?$CJ@
NtQueryMutant
VfBuildScatterGatherList
PpBusTypeGuidCount
IopFileUtilClearAttributes
ObpAllocateObjectNameBuffer
KiProfileAlignmentFixupInterval
??_C@_1BO@OODJKOKP@APEG?$AAE?$AAr?$AAr?$AAo?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
MiSessionPoolEnd
PiCriticalDeviceDatabaseEnabled
??_C@_1CI@CGINDGLO@APEG?$AAM?$AAu?$AAl?$AAt?$AAi?$AAU?$AAI?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AAI?$AAd?$AA?$AA@
??_C@_1IA@BKLCFFEL@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
VidInitialize
??_C@_1EE@LFCJNLIB@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?2?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAm?$AAe?$AAn@
SdbGetIndex
CmpQueryKeyName
PpBusTypeGuidGet
PoRequestShutdownWait
MiInitializeReadInProgressPfn
PpProfileCancelHardwareProfileTransition
NtConnectPort
FsRtlIsPagingFile
WmipSMBiosIdentifierRegQueryRoutine
??_C@_1CA@NGFDFFBA@?$AAS?$AAp?$AAi?$AAn?$AAl?$AAo?$AAc?$AAk?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
PopCoolingMode
ObpDeleteSymbolicLink
??_C@_0ED@EKCDAJOK@PAGEVRFYPerformance?5counter?5has?5@
IoCreateStreamFileObjectLite
PsCreateSystemProcess
??_C@_1FE@IOCAMCHP@APEG?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAI?$AAR?$AAP?$AA_?$AAM?$AAN?$AA_?$AAQ?$AAU?$AAE?$AAR?$AAY?$AA_?$AAI?$AAD?$AA?9?$AAB?$AAu?$AAs?$AAQ?$AAu?$AAe?$AAr@
NtPulseEvent
PopGracefulShutdown
??_C@_0CD@DEEBEINC@PAGEVRFCIRP_MJ_FILE_SYSTEM_CONTR@
PspDereferenceQuotaBlock
ZwReplyPort
CmpCreatePerfKeys
ExpGetSystemEmulationBasicInformation
BBTPagesToReserve
PopShutdownListAvailable
MmCollidedLockWait
IopSetLegacyDeviceInstance
IoGetDriverObjectExtension
VfInitializeTimerInformation
HvpRemoveFreeCellHint
RtlUnlockBootStatusData
??_C@_1CC@KJBPCLHF@?$AAF?$AAL?$AAA?$AAG?$AA_?$AAM?$AAA?$AAS?$AAK?$AA_?$AAK?$AAE?$AAR?$AAN?$AAE?$AAL?$AA?$AA@
KxMcheckAbort
ExWaitForRundownProtectionReleaseCacheAware
HalPrivateDispatchTable
MmUnusedSegmentList
NtOpenSymbolicLinkObject
CcPfDeactivateTrace
WmipRegistrationWorker
??_C@_1O@CDGFIAHP@APEG?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
??_C@_1M@FFGIPDGH@?$AAI?$AAN?$AAD?$AAE?$AAX?$AA?$AA@
??_C@_0BF@NAAFNOOH@?4text?6HardError?5?$CFlx?6?$AA@
??_C@_0CP@HHPMOEGN@PAGEInvalid?5hotpatch?5validation?5@
??_C@_1BC@PCEBAGKP@APEG?$AAP?$AAN?$AAP?$AAB?$AAu?$AAs?$AA?$AA@
??_C@_1BE@CJKNINII@?$AAT?$AAr?$AAa?$AAc?$AAk?$AAP?$AAt?$AAe?$AAs?$AA?$AA@
CmpEnableLazyFlushTimer
??_C@_1CE@PLHGPECF@APEG?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAD?$AAo?$AAc?$AAk?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
??_C@_1IA@IGICCPAH@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
ExpShutdownWorker
??_C@_1M@MPCJPKCO@?$AAP?$AAA?$AAT?$AAC?$AAH?$AA?$AA@
??_C@_1BG@BNJKIKNO@APEG?$AAL?$AAo?$AAg?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
KiServiceLinkage
Kd_WMILIB_Mask
IoReadDiskSignature
??_C@_1BE@LOFHFNJL@NITI?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
RtlFreeOemString
??_C@_1DA@LFDDKJNN@APEG?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAC?$AAh?$AAa?$AAr?$AAa?$AAc?$AAt?$AAe?$AAr?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
RtlInitCodePageTable
MiZeroInParallel
PopHiberFileName
??_C@_1BO@NDNPMFCK@NITI?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAD?$AAr?$AAi?$AAv?$AAe?$AA?$DN?$AA?$AA@
KeCheckForTimer
CcScheduleReadAhead
??_C@_0O@HEKOFAMI@writecombined?$AA@
ADD_MAP_REGISTERS
PiCriticalPreInstallDevice
??_C@_0M@PEPDJEKA@ZwSetEaFile?$AA@
NtOpenSemaphore
PsSetLoadImageNotifyRoutine
??_C@_0BM@IIKINJBN@INITXIP?3?5Base?5?$CFx?5?5Count?5?$CFx?6?$AA@
KiSegmentNotPresentFault
GUID_DEVCLASS_FSFILTER_ANTIVIRUS
ExpCallBackFlush
SeTokenObjectType
NormalYearDayToMonth
RtlInsertInvertedFunctionTable
??_C@_1EK@LPEIDHIE@NITI?$AA?2?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?2?$AAH?$AAi?$AAg?$AAh?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AAC?$AAo?$AAn?$AAd?$AAi@
CmpUsedStorage
CmpLazyFlushPending
NtSetEventBoostPriority
RtlEnumerateGenericTable
KeInitThread
HvpFindFreeCellInBin
PspCatchCriticalBreak
RtlpSearchValidationCode
KiSuspendRundown
IopOpenOrCreateDeviceRegistryKey
SepNotifyFileSystems
ExpWdHandler
NtSetLowWaitHighEventPair
INCREMENT_ADAPTER_CHANNELS
KeAcquireQueuedSpinLockRaiseToSynch
??_C@_1DA@JIDKIOGH@?$AAP?$AAe?$AAr?$AAf?$AAI?$AAn?$AAc?$AAr?$AAe?$AAa?$AAs?$AAe?$AAM?$AAi?$AAn?$AAi?$AAm?$AAu?$AAm?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
MiMakeProtectionMask
MiReserveSystemPtes
CmQueryMultipleValueKey
??_C@_0GA@ICELKCPJ@PAGEVRFCA?5driver?5has?5marked?5an?5I@
??_C@_1BG@CGEJJJD@NITI?$AAP?$AAr?$AAe?$AAf?$AAe?$AAt?$AAc?$AAh?$AA?$AA@
SepCreateToken
NtResetWriteWatch
LZNT1CompressChunk
??_C@_1BO@IMNMDPCD@APEG?$AAC?$AAa?$AAp?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAi?$AAe?$AAs?$AA?$AA@
??_C@_1CG@HGKCGLEO@APEG?$AAC?$AAr?$AAa?$AAs?$AAh?$AAO?$AAn?$AAA?$AAu?$AAd?$AAi?$AAt?$AAF?$AAa?$AAi?$AAl?$AA?$AA@
VfPnpDumpIrpStack
KeUpdateSystemTime
??_C@_0N@LIOEHIEA@INITCONSTMCA?$AA@
MxMapLargePages
FsRtlNumberOfRunsInMcb
PspFreezeProcessWorker
PspSetContext
IoGetLegacyVetoList
KdSystemDebugControl
MmMapViewInSystemSpace
PARTITION_LDM_DATA_GUID
NtSystemDebugControl
IopRearrangeReqList
PopWakeTimeoutTimer
RtlUnicodeToMultiByteN
CmpBuildHashStackAndLookupCache
MiAddViewsForSection
MmSectionCommitMutex
IopCheckHardErrorEmpty
swprintf
FsRtlProcessFileLock
PsDefaultThreadLocaleId
??_C@_1IO@DBGJADMA@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
IopWritePageToDisk
CcMapDataForOverwrite
Kd_VIDEOPRT_Mask
??_C@_0CO@PFNANIGH@PAGETerminating?5critical?5thread?5@
NtWriteFileGather
MmMapViewInSystemCache
KeReadStateProcess
CcTwilightLookasideList
ExpUuidCachedValues
ViMessageIoVerifierTemplates
??_C@_0N@CLKAEMGH@INITCONSTISA?$AA@
??_C@_1DE@JLKKGAOO@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAU?$AAs?$AAe?$AAr?$AA?2?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA1?$AA8?$AA?$AA@
SdbpCheckVersion
PerfNullHookHandle
RtlIsGenericTableEmpty
CcCollisionDelay
PsGetProcessImageFileName
ObReferenceObjectByPointer
??_C@_0GN@OFEKBBOJ@PAGEVRFCA?5driver?5has?5deleted?5it?8@
??_C@_0HH@ECEKACHM@PAGEVRFCA?5driver?5has?5failed?5to?5c@
??_C@_1BI@HEIIMIAO@APEG?$AA?2?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?$DP?$AA?$DP?$AA?$AA@
ObpAllocateObject
MmUnmapLockedPages
PipDeviceEnumerationWorkItem
??_C@_1BK@HOGPOIGK@?$AAC?$AAO?$AAM?$AAM?$AAA?$AAN?$AAD?$AA_?$AAL?$AAI?$AAN?$AAE?$AA?$AA@
ZwAssignProcessToJobObject
PiControlCopyUserModeCallersBuffer
MiCheckForControlAreaDeletion
??_C@_1O@LFMAFHMH@?$AAO?$AAF?$AAF?$AAS?$AAE?$AAT?$AA?$AA@
ExpIsValidUILanguage
ObpCreateInfoLookasideList
??_C@_1BA@JKCEKNLO@?$AAD?$AAF?$AAR?$AAG?$AAI?$AAF?$AAC?$AA?$AA@
RtlUnwindEx
NtQueryAttributesFile
IopCreateSecurityDescriptorPerType
IoGetRelatedDeviceObject
PopDefaultProcessorPolicy
RtlInitializeGenericTable
IopBusNumberScoreRequirement
Kd_PNPMGR_Mask
Kd_VDSUTIL_Mask
KiReadyScanLast
MiDeletePteList
MmAssignProcessToJob
RtlReserveChunkLZNT1
MmLastFreeSystemCache
GUID_DEVCLASS_FSFILTER_UNDELETE
MiAccessCheck
MmMaximumWorkingSetSize
KiDummyLock
RtlDestroyAtomTable
IopDoNameTransmogrify
??_C@_1BE@JOHKIFBA@APEG?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?$AA@
MmModifiedPageLifeInSeconds
IovpInternalCompleteAfterWait
??_C@_0M@EHICNDGI@ZwWriteFile?$AA@
??_C@_0GH@EDADION@PAGEVRFYResource?5?$CFp?5acquired?5bef@
ExRaiseAccessViolation
CcSetDirtyPageThreshold
??_C@_0BA@HDPIFOFA@PAGEVRFY?$CIFalse?$CJ?$AA@
MmAccessFault
PopStateChangeNotify
IopMapDeviceObjectToDeviceInstance
IopSetOperationLength
IopDmaPackResource
NtFlushVirtualMemory
InbvSetTextColor
WmipEventWorkItems
??_C@_0EO@BPBGABDM@INITCmpFindRSDTTable?3?5ACPI?5BIOS?5@
ViPostPoolAllocation
CmpKeyControlBlockRoot
SeIncreaseQuotaPrivilege
CmpCreateKeyControlBlock
SepAdtPrivilegeObjectAuditAlarm
GUID_DEVCLASS_FSFILTER_QUOTAMANAGEMENT
MmUnmapReservedMapping
RtlSectionTableFromVirtualAddress
??_C@_0CL@BMJPOJEA@PAGEVRFCIRP_MN_QUERY_RESOURCE_RE@
??_C@_1DA@FFPGPPGI@APEG?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AA?5?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
MapperPeripheralCallback
GUID_BUS_TYPE_AVC
??_C@_08IGFJBFBF@INIT?$CFZ?$CFs?$AA@
MmDeadStackSListHead
RtlpIsDuplicateAce
MiSpecialPagesNonPagedPeak
CmpFindSubKeyByNumber
CcPinReadWait
RtlGUIDFromString
??_C@_0BF@HGOCHEBH@PAGEVRFY?$FL?$CFs?5?$EA?50x?$CFp?$FN?5?$AA@
CcFindBcb
WmipInitContext
WmipWriteMCAEventLogEvent
??_C@_1BC@KHBACBEB@?$AAM?$AAO?$AAU?$AAC?$AAL?$AAA?$AAS?$AAS?$AA?$AA@
??_C@_1CE@BDMILKLE@?$AAH?$AAe?$AAa?$AAp?$AAS?$AAe?$AAg?$AAm?$AAe?$AAn?$AAt?$AAC?$AAo?$AAm?$AAm?$AAi?$AAt?$AA?$AA@
ObpObjectTable
MxSlushDescriptor1
??_C@_0O@JEDOPPGP@INITSAFEBOOT?3?$AA@
??_C@_0O@DFHAPLEF@INITCONST?$IBAUT?$AA@
HvReallocateCell
FsRtlNotifyUninitializeSync
RtlpLookupFunctionEntryForStackWalks
??_C@_0IA@MNPJBCLJ@PAGEVRFCA?5driver?5has?5enumerated?5@
??_C@_1BO@PKBACOLK@?$AAC?$AAS?$AAD?$AAR?$AAe?$AAl?$AAe?$AAa?$AAs?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
??_C@_0L@JDLBGOHP@PAGE_UUID_?$AA@
??_C@_1CM@BCFFPDOD@APEG?$AAt?$AAo?$AAo?$AA?5?$AAm?$AAa?$AAn?$AAy?$AA?5?$AAs?$AAe?$AAp?$AAa?$AAr?$AAa?$AAt?$AAo?$AAr?$AAs?$AA?$AA@
??_C@_1BI@CDHEGEFP@APEG?$AAC?$AAl?$AAa?$AAs?$AAs?$AAG?$AAU?$AAI?$AAD?$AA?$AA@
MiSessionWideInitializeAddresses
??_C@_1BC@KFNGLLEF@APEGOCSN?$AAT?$AAS?$AAA?$AAM?$AA?$AA@
MmCopyToCachedPage
RtlInvertRangeList
SepNormalAccessCheck
??_C@_1BO@BNGKFINB@APEG?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AA?$AA@
KeTestAlertThread
MiZeroPageFileFirstPage
ObpKernelHandleTable
ViIrpAllocateLockedPacket
??_C@_0BD@FJKHNGHL@ZwPowerInformation?$AA@
ExInitializeResourceLite
??_C@_0BA@HCCGNJMJ@PAGELKHibernate?$AA@
GUID_BUS_TYPE_SD
RtlDescribeChunkNS
WmipMceWorkerRoutine
MiLoadImageSection
ObQueryObjectAuditingByHandle
MiFindContiguousMemory
HdlspSetBlueScreenInformation
??_C@_1CE@GKLBHEGC@APEGOCSN?$AAT?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?$AA@
MmPageLocationList
??_C@_0CB@BNKEADD@PAGEVRFY?$CIDeviceUsageTypeDumpFile@
CcPfCleanupTrace
IopCompletionMapping
PopPerfIncreaseMinimumTime
??_C@_1BG@JLKJDAJN@?$AAI?$AAN?$AAD?$AAE?$AAX?$AAF?$AAL?$AAA?$AAG?$AAS?$AA?$AA@
CmpDumpOneKeyBody
??_C@_1BM@NGMHOHOF@?$AAI?$AAd?$AAl?$AAe?$AAT?$AAi?$AAm?$AAe?$AAC?$AAh?$AAe?$AAc?$AAk?$AA?$AA@
CmpMachineHiveList
VfFreeCommonBuffer
NtAccessCheckByType
xHalAssignSlotResources
??_C@_0EE@IJNHDMGF@?4textPopCreateHiberFileSecurityD@
KdComponentTableSize
FsRtlInitializeBaseMcb
IopParseFile
ViTimerInformation
CcSetPrivateWriteFile
??_C@_0BA@KBCLFEHH@PAGELKSleeping2?$AA@
??_C@_1BK@CEOFPGFB@APEG?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
memchr
__chkstk
ZwQueryInformationFile
PerfInfoProfileSourceActive
??_C@_0BO@BOIJEBGK@PAGEVRFCIRP_MJ_QUERY_SECURITY?$AA@
KdSetDbgPrintBufferSize
CmpSystemHiveHysteresisLow
??_C@_1CA@BFEFAPOM@APEG?$AAR?$AAE?$AAG?$AAU?$AAP?$AAD?$AAA?$AAT?$AAE?$AAI?$AAN?$AAF?$AAO?$AA?$AA@
ZwOpenSection
IoFillDumpHeader
NtDuplicateObject
WmipRegisterDevice
??_C@_0BB@JEAHKKMC@PAGELKQueryPower?$AA@
??_C@_1BI@FOHAKEDL@NITI?$AAP?$AAS?$AA2?$AA_?$AAM?$AAO?$AAU?$AAS?$AAE?$AA?$AA@
KiIpiInterrupt
WmipStartLogger
??_C@_0BO@MANLCBLC@PAGEHDLS?$AN?6?$DM?1INSTANCE?$DO?$AN?6?$DM?1BP?$DO?$AH?$AA@
MmHeapDeCommitFreeBlockThreshold
ExpReadComPlusPackage
??_C@_08JJNHNMB@INITHKLM?$AA@
fputwc
??_C@_04LGGJDDML@INIT?$AA@
WmipKernelLoggerStartedOnce
IoQueueWorkItem
IoPnpDriverObject
MiGetPreviousNode
MiInsertPteTracker
CmIsLastKnownGoodBoot
NtImpersonateClientOfPort
NtQuerySystemTime
ViReleaseDmaAdapter
ExReleaseResourceLite
ZwSetDriverEntryOrder
??_C@_0BM@FFGLHJN@GUID_HWPROFILE_QUERY_CHANGE?$AA@
FsRtlMdlRead
ZwCreateSemaphore
ViFilterDriverEntry
MiInitializeDriverLargePageList
??_C@_1KA@IKCHAGPE@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
PspInitPhase0
KdpAddBreakpoint
MiResolveProtoPteFault
??_C@_0M@PEMGCJEA@INIT?$CFZ?5?$CFu?$CFc?$AA@
IopMountInitializeVpb
InbvEnableDisplayString
Kd_PRINTSPOOLER_Mask
ExAllocatePoolWithQuotaTag
MmCreateMdl
ObpTypeMapping
ZwTranslateFilePath
MiFirstDriverLoadEver
MiInsertStandbyListAtFront
CmpRegistryMachineHardwareOwnerMapString
ApphelpCacheFlush
CmpOpenRegKey
_setjmpex
TriagepVerifyDump
ExpUuidLastTimeAllocated
??_C@_1BM@FOIIPPE@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AAF?$AA0?$AA1?$AA?$AA@
IoAttachDeviceByPointer
RtlpRegistryPaths
ExfWaitForRundownProtectionRelease
CcAllocateObcb
NumTraceDataSyms
PopPerfTimeDelta
MiSessionInsertImage
IovBuildAsynchronousFsdRequest
??_C@_0M@LMPDJEHN@INITCONSTv8?$AA@
GUID_ACPI_PORT_RANGES_INTERFACE_STANDARD
CmpLinkHiveToMaster
VfPrintDumpIrpStack
ObpRemoveObjectRoutine
KeFreezeAllThreads
ExpTickCountMultiplier
KiProcessInSwapListHead
VfZwMakeTemporaryObject
??_C@_17LIGJOFLA@?$AAA?$AAP?$AAP?$AA?$AA@
??_C@_0BH@CNOBJAJK@PAGEVRFY?$CIBusRelations?$CJ?$AA@
NtRestoreKey
MmFlushSection
IopDmaOverrideConflict
PspTerminateThreadByPointer
ApphelpCacheControlValidateParameters
IoVerifyPartitionTable
??_C@_0BE@NFLJOEKL@PAGEVRFYIRP_MJ_PNP?4?$AA@
??_C@_1BE@MLPDMAIF@?$AAA?$AAp?$AAp?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AA?$AA@
??_C@_1DA@MJJLDCFG@t?4xe?$AAt?$AA?3?$AA?3?$AAf?$AAf?$AAf?$AAf?$AA?3?$AA0?$AA?3?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?$AA@
ExpSessionPoolTrackTable
IoReportResourceForDetection
PipChangeDeviceObjectFromRegistryProperties
CmRegistryMachineSystemCurrentControlSetServices
??_C@_1BG@IPGNPLMN@?$AAV?$AAS?$AAS?$AAD?$AAY?$AAN?$AAD?$AAI?$AAS?$AAK?$AA?$AA@
KiProcessProfileList
RtlTraceDatabaseValidate
WmipEnumerateMofResources
ViAllocationsFailedDeliberately
??_C@_1BG@CCPFMNPD@?$AAP?$AAA?$AAT?$AAC?$AAH?$AA_?$AAB?$AAI?$AAT?$AAS?$AA?$AA@
??_C@_1BO@HEDAMGEC@APEG?$AAs?$AAt?$AAo?$AAr?$AAp?$AAo?$AAr?$AAt?$AA?4?$AAs?$AAy?$AAs?$AA?$AA@
Kd_UHCD_Mask
READ_UCHAR
CmpSplitLeaf
GUID_DEVCLASS_MEDIUM_CHANGER
End
IopGetRelatedTargetDevice
CmpCacheTable
CmpGlobalQuotaUsed
ViDeadlockResourceTypeInfo
PopUserPresentSet
WmipAddMofResource
??_C@_1BC@JPKLBJEP@?$AAC?$AAH?$AAE?$AAC?$AAK?$AAS?$AAU?$AAM?$AA?$AA@
MiProcessWorkingSets
Kd_MM_Mask
IopInitFailCode
ArbFindSuitableRange
WmipNotificationIrpCancel
IoControlPnpDeviceActionQueue
WmipRegWorkQueue
KdpSysWriteIoSpace
MiRemovePteTracker
PsGetProcessPriorityClass
MiInPageSinglePages
ExpWakeTimerListLock
KeAcquireInStackQueuedSpinLockAtDpcLevel
ObpIsUnsecureName
ZwNotifyChangeKey
CcVacbLevelWithBcbsFreeList
FstubWriteEntryEFI
IopIgnoreDumpCheck
HvDuplicateCell
ZwLockFile
KiInvokeBugCheckEntryCallbacks
??_C@_0BO@IPEGOBCG@GUID_DEVICE_INTERFACE_ARRIVAL?$AA@
??_C@_1BM@JNDBIGBL@NITI?$AAN?$AAe?$AAt?$AAC?$AAa?$AAr?$AAd?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
VerifierMmProbeAndLockProcessPages
??_C@_1CA@NDFBIHBI@APEG?$AAR?$AAe?$AAm?$AAo?$AAv?$AAa?$AAl?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
xHalVectorToIDTEntry
MmNumberOfActiveMdlEntries
??_C@_15FHLCAIPN@APEG?$AA?$AA@
IoGetPagingIoPriority
xHalTranslateBusAddress
IopCallDriverReinitializationRoutines
PopVolumeLock
CcPfQueryScenarioInformation
MmSystemPtesStart
SepAdtLogInformation
CmpRegistryLock
RtlPrefixUnicodeString
WmipUpdateDeviceStackSize
PsResumeProcess
CmpLoadHiveVolatile
WmiTraceContextSwap
PopDcProcessorRegName
ObpReferenceSecurityDescriptor
ZwFreeVirtualMemory
KdpTimeSlipEventLock
PsChargeProcessPoolQuota
RtlNumberGenericTableElements
IopVerifierOn
IovpCallDriver1
CmpRemoveKeyHash
PsShutdownSystem
ZwCallbackReturn
PspDoingGiveBacks
IovpCallDriver2
??_C@_1BE@NKEAEGHO@APEG?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
NtOpenThreadTokenEx
LazyWriter
VfZwCancelIoFile
??_C@_0BC@JPJKFEGL@ZwCreateJobObject?$AA@
RawVerifyVolume
CmpMergeKeyValues
IopFinalCrashDumpStatus
??_C@_0BD@FICHFIDH@ZwOpenProcessToken?$AA@
PsGetThreadTeb
WmipMRChunkInfo
SeAuditProcessExit
ValidKernelPteLocal
PsGetCurrentThreadProcess
KeCancelTimer
SepLsaQueueLength
ExpTimeZoneDpcRoutine
ExWindowStationObjectType
IopGetVolumeId
KiTimerListExpire
MmResetDriverPaging
MiInitializeWorkingSetList
MmTransitionSharedPages
??_C@_0BF@LCBJKBFO@PAGEVRFYIRP_MN_BOGUS?$AA@
IopLegacyDeviceNode
PopSetNotificationWork
SeQueryAuthenticationIdToken
CmDefaultLanguageId
_ApphelpCacheFreeEntry
??_C@_1BA@EOKOFGEP@?$AAI?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?$AA@
MmSessionBase
CmpCopyCompressedName
CmpInitializeRegistryNode
KeAcquireInStackQueuedSpinLockForDpc
wcscat
CcPfEnablePrefetcher
??_C@_0BL@LBCFAPLA@ZwAccessCheckAndAuditAlarm?$AA@
??_C@_0CH@DAKINJOF@PAGEd?3?2srvrtm?2base?2ntos?2wmi?2enab@
VerifierExAcquireFastMutex
MmSystemViewSize
PoolBigPageTable
MiDetermineTrimAmount
??_C@_0BC@IGFLHBNG@GUID_DEVICE_EJECT?$AA@
??_C@_0GL@IJIGFLBJ@PAGEVRFCA?5driver?5has?5passed?5an?5i@
KiAdjustQuantumThread
MmPteFailures
MmSharedCommit
ExpProductTypeKey
ExfTryToWakePushLock
MmIsMemoryAvailable
NtAdjustGroupsToken
WmipCreatePumpThread
NtQueryFullAttributesFile
ValidKernelPdeLocal
VfZwQueryBootEntryOrder
MiMakeSystemAddressValidPfnWs
VerifierNtReadFile
KdpSysReadControlSpace
PopDispatchDisplayRequired
??_C@_0BN@OJJJEPKH@PAGEVRFY?$CIBusQueryInstanceID?$CJ?$AA@
??_C@_1CM@OCAEBBEB@APEG?$AAH?$AAi?$AAb?$AAe?$AAr?$AAP?$AAa?$AAg?$AAe?$AAs?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAe?$AAd?$AA?$AA@
MiHighPagedPoolThreshold
PspJobTimeLimitsDpcRoutine
FsRtlPrivateInitializeFileLock
ExpRaiseHardError
PsIsThreadImpersonating
DbgPrint
FsRtlSyncVolumes
NextTraceDataSym
KeMinimumIncrement
KiNpxNotAvailableFault
HvpFillFileName
CmpCompressKeyWorker
ZwGetDevicePowerState
FsRtlTruncateMcb
IoCheckFunctionAccess
PiHandleEnumerateHandlesAgainstDeviceObject
??_C@_0BF@PEDIMKOI@ZwFlushVirtualMemory?$AA@
??_C@_1BK@CKGFDMEE@NITI?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
??_C@_1BM@LNFEOIJB@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AAF?$AA0?$AA0?$AA?$AA@
CmpRemoveFromSecurityCache
IopInitializeDumpSpaceAndType
MmLockedIoPagesHead
SepRmDbLock
CcMapAndRead
PspPriorityTable
CcPfGetPrefetchInstructions
NtRequestPort
NtModifyBootEntry
ZwWaitForMultipleObjects32
MiGetFirstNode
SepQueryTypeString
KeWaitForMultipleObjects
??_C@_1BM@LHLCDEAG@NITIOCSN?$AAT?$AA?$CK?$AAn?$AAE?$AAC?$AA1?$AAF?$AA0?$AA0?$AA?$AA@
??_C@_1CC@CHLFCOJB@NITI?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAX?$AA?3?$AA?$AA@
_snprintf
CcPostTickWorkQueue
ExWindowStationCloseProcedureCallout
WmipFindMRByNames
KdpDebuggerDataListHead
PpInitializeNotification
??_C@_0N@KHAHDNLD@PAGEDISABLED?$AA@
IoFreeWorkItem
FstubCreateDiskEFI
RtlpDeleteFromMergedRange
IopFindLegacyBusDeviceNode
FsRtlAcquireFileExclusiveCommon
CcMasterSpinLock
MiMakeOutswappedPageResident
PopDopeGlobalLock
RtlpDidUnicodeToOemWork
KiBugCheckReturn
CmBootAcceptFirstTime
??_C@_1EI@FBEMOFFM@APEGOCSN?$AAT?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe@
IovpCompleteRequest4
IopErrorLogPortPending
CcAvailablePagesThreshold
??_C@_1BK@BPNGMCGM@NITI?$AAK?$AAe?$AAy?$AAe?$AAd?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
ZwAddBootEntry
KeProcessorLevel
ExpTimeRefreshWork
??_C@_1BK@HGJAIMGI@?$AAN?$AAl?$AAs?$AA?2?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AA?$AA@
PopSetRange
PowerIrpNames
Kd_STORPORT_Mask
GUID_DEVICE_INTERFACE_REMOVAL
VerifierIoFreeIrp
IopChildToRootTranslation
PnPBootDriversInitialized
VidResetDisplay
RtlCheckRegistryKey
WmipInstIdChunkHead
IoUnregisterFileSystem
MiInitializeSystemCache
SepTokenIsOwner
RtlInsertElementGenericTable
NtRegisterThreadTerminatePort
KdCheckForDebugBreak
MapperSeedKey
??_C@_0CA@KGNLDLEL@PAGELKirp?5?$CI?$CFx?$CJ?5?$CFs?9?$CFs?5status?5?$CFx?6?$AA@
??_C@_1BM@HGBIKAJH@APEGOCSN?$AAT?$AAS?$AAE?$AAC?$AAU?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
RtlpCreateStack
SeNtAuthoritySid
WmipVolMgrIoNotify
LdrProcessRelocationBlockLongLong
ViTrimSpaces
KdpSearchPfnValue
FsRtlOplockCleanup
NtAdjustPrivilegesToken
PsGetProcessWin32WindowStation
FsRtlNotifyCompleteIrp
MmGetPageFileInformation
IopAllocateIrpMustSucceed
??_C@_1BE@BAHIFAKL@APEG?$AAP?$AAC?$AAM?$AAC?$AAI?$AAA?$AA?2?$AA?$AA@
CcVacbLevelFreeList
IopProcessCompletedEject
WmipTraceFile
DbgkpSetProcessDebugObject
IopRootMemArbiter
PspInitializeProcessSecurity
VfGetDmaAdapter
NtReplyPort
StringVPrintfExWorkerW
CmpSpecialBootCondition
VfZwSetDefaultUILanguage
Start
??_C@_05HPPDALPE@INIT?$DM?$AA@
VfWmiDumpIrpStack
KeForceAttachProcess
ExpGetPoolTagInfoTarget
CompareNamesCaseSensitive
SdbpGetFileDirectoryAttributesNT
??_C@_19NCJMPEKA@?$AAD?$AAM?$AAI?$AAO?$AA?$AA@
??_C@_0EK@NLGGLPM@PAGEVRFYCannot?5put?5adapter?5?$CFp?5un@
PsLoadedModuleList
VerifierIoDeleteDevice
SdbpCreateSearchDBContext
??_C@_0CJ@JEMKEGMJ@PAGEVRFCIRP_MN_DEVICE_USAGE_NOTI@
??_C@_1BK@HKFLFMHH@NITI?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
??_C@_1CC@ODECEDD@NITI?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAB?$AAo?$AAo?$AAt?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
KeAcquireInStackQueuedSpinLockRaiseToSynch
MmSetExecuteOptions
IoGetFileObjectFilterContext
CmpQueryKeyData
PopOpenPowerKey
ArbPreprocessEntry
KiStartSystemThread
ZwOpenSymbolicLinkObject
SepAssemblePrivileges
PpSetDeviceClassChange
MiNonPagedPoolSListMaximum
??_C@_08KJLMADFD@INITIdle?$AA@
MiSessionInitializeWorkingSetList
MmSystemProcessWorkingSetMax
??_C@_0BI@OMNEIICC@ZwSetInformationProcess?$AA@
??_C@_0GF@CEDGBIBJ@PAGEVRFCCaller?5of?5IoFreeIrp?5is?5f@
ViFaultTraces
CmpInsertKeyHash
??_C@_09HGKDNNIA@ZwLoadKey?$AA@
??_C@_07OJPHNNDP@?4text?$AN?6?$AA@
SdbpCheckDll
MiGetProtoPteAddressExtended
WmipMRHead
IoCreateFile
SepAdjustPrivileges
CmpWasSetupBoot
MmSystemPtesEnd
ViInjectResourceFailure
IopProtectSystemPartition
WmipDisableCollectOrEvent
GUID_DEVCLASS_WCEUSBS
KiCpuIdFault
ArbOverrideConflict
ZwQueryMutant
KeServiceDescriptorTableShadow
MiRebalanceNode
PopIdleSwitchIdleHandlers
ViFilterDeviceUsageNotificationCompletionRoutine
ZwPulseEvent
IopErrorLogWorkItem
WmipSystemSubjectContext
IopInvalidateVolumesForDevice
??_C@_1BA@LAGKAMDF@NITI?$AAC?$AAS?$AAR?$AAS?$AAS?$AA?$AA@
ExpTimeRefreshWorkItem
ExNPagedLookasideListHead
ExpSessionPoolTrackTableMask
IopDeviceObjectToDeviceInstance
KiProcessListHead
MiCreatePhysicalVadRoot
??_C@_0L@DBJMEJMJ@PAGEwinsrv?$AA@
Kd_TCPIP6_Mask
MapperCallback
CmRegistrySystemCloneName
LsaLogonUser
ZwConnectPort
MiMirrorBitMap
IoVerifierOnByDefault
SepCreateClientSecurity
IovpInternalCompleteAtDPC
ObKillProcess
KeEnterCriticalRegion
MiResolveDemandZeroFault
IopQueuePendingSurpriseRemoval
ZwResetWriteWatch
??_C@_0N@NPEDMNEI@PAGEHDLShelp?$AA@
IopOpenOrCreateDeviceInterfaceSubKeys
_strset
PopShutdownEvent
IopDmaScoreRequirement
IoInvalidateDeviceState
??_C@_1BK@FINFFJHL@?$AAC?$AAr?$AAa?$AAs?$AAh?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
LpcpSaveDataInfoMessage
PopSIdle
PsGetCurrentThread
CcWaitForUninitializeCacheMap
_strrev
ZwSetLowWaitHighEventPair
IopQueryConflictFillConflicts
ZwSystemDebugControl
MiLeaveThisPageGetAnother
WmipIsWbemRunningWorkItem
PopPowerStateNotifyHandler
CcPfBootPhase
??_C@_1BE@ICJFECDF@NITI?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AA?$AA@
SepPublicOpenSd
KdPreviouslyEnabled
DesiredAccessForFunction
??_C@_0DD@LKAPNGFG@PAGEHvpDoWriteHive?$FL11?0?$CFs?$FN?3?5Faile@
WmiTraceUserMessage
KeSetProfileIrql
VfZwVerifierEnabled
WmipQueryLogAndFireEvent
MiLocateWsle
ExFreePool
KernelVerifierTickPage
IoAddTriageDumpDataBlock
WmipDisableCollectionForRemovedGuid
MiMirrorBitMap2
Mm30Milliseconds
KdpTimeSlipDpcRoutine
FsRtlInitializeTunnels
??_C@_0P@BFEBBKO@INITCONSTMPIPI?$AA@
RtlDescribeChunk
MmCanFileBeTruncated
CcPfBootScenarioTypePrefix
RtlCopyLuidAndAttributesArray
CcWaitForCurrentLazyWriterActivity
ReleaseOpsEvent
IoReadOperationCount
MmMaximumNonPagedPoolInBytes
??_C@_1EE@KGGJMHOF@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?5?$AAe?$AAv?$AAe?$AAn?$AAt@
LeapYearDayToMonth
IovUtilRelateDeviceObjects
ExIsResourceAcquiredExclusiveLite
??_C@_0BL@EBHBPCHL@ZwSetVolumeInformationFile?$AA@
MiPfExecuteReadList
PiFixupID
CmpSearchSectionByName
ZwSetEventBoostPriority
ExpUuidSequenceNumber
PopCompositeBatteryDeviceHandler
??_C@_0BF@DDBIELAM@PAGEW32pServiceLimit?$AA@
IopSystemControlDispatch
MiLargePageLock
RtlInsertUnicodePrefix
PsIsProcessBeingDebugged
KiSetCacheInformationIntel
ZwOpenSemaphore
VfGetDmaAlignment
CcCopyReadExceptionFilter
ReleaseOpsReservePool
CmRegistryMachineHardwareOwnerMapName
CmpDummyApc
CcFastMdlReadWait
PiInsertEventInQueue
IopFindLegacyDeviceNode
??_C@_1BA@EIJAPCBE@APEG?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
??_C@_1BE@MIKMHALH@APEG?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
KeLastBranchMSR
PopReadShutdownPolicy
FsRtlRemoveLargeMcbEntry
VfZwRequestWaitReplyPort
MiSubsectionActions
MiLastChanceLdwContext
PopThermalUpdateThrottle
??_C@_1BG@GCKILBDH@APEG?$AAU?$AAI?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
PspExitProcess
IopNetworkFileSystemQueueHead
??_C@_0M@GHIFNKKI@ZwDeleteKey?$AA@
VfFilterAttach
??_C@_1CG@MACAFKOI@NITI?$AAW?$AAM?$AAI?$AA?2?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAL?$AAo?$AAg?$AAg?$AAe?$AAr?$AA?$AA@
CmpUnmapCmView
HeadlessGlobals
RtlAreBitsClear
??_C@_0BB@JPFODPCC@PAGESynchronous?5?$AA@
KdpCurrentSymbolStart
MiUnmapViewInSystemSpace
InbvPortEnableFifo
??_C@_0CG@OHOMLKKA@PAGEVRFCIRP_MN_QUERY_DEVICE_RELA@
VfZwResetEvent
??_C@_1BA@PEIOANKM@NITI?$AAA?$AAl?$AAi?$AAa?$AAs?$AA?$AA@
??_C@_1BC@FLIOPKHL@APEG?$AAP?$AAC?$AAM?$AAC?$AAI?$AAA?$AA?$AA@
PiNormalDDBPath
xHalSetSystemInformation
SepProbeAndCaptureString_U
ExDesktopDeleteProcedureCallout
IopReportBootResources
NonPagedPoolDescriptor
WmipMceDpcRoutine
ViCopyBackModifiedBuffer
IoGetAttachedDeviceReference
??_C@_1CK@KBPAGCLL@APEG?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AAs?$AA?2?$AA?$AA@
PopSetPerfFlagAndUpdateThrottle
IoUnregisterShutdownNotification
??_C@_0CA@EBOIGJEJ@GUID_TARGET_DEVICE_QUERY_REMOVE?$AA@
ZwFlushVirtualMemory
??_C@_0BE@HENGLKFM@PAGEVRFCIRP_MJ_READ?$AA@
KdDebuggerDataBlock
NlsMbOemCodePageTag
PiControlGetSetDeviceStatus
SepAdtDeleteObjectAuditAlarm
PsRawPrioritySeparation
ExpGetProcessorPowerInformation
??_C@_1GK@NKGHPKLP@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAw?$AAa?$AAi?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAb?$AAo?$AAo@
PsThreadType
PiProcessTargetDeviceEvent
IopLockMountedDeviceForRemove
??_C@_0EK@BAEGDGHA@PAGEVRFYPadding?5before?5allocatio@
CmpDoQueueLateUnloadWorker
MmSnapUnloads
MiResetVirtualMemory
IopAllocateIrpCleanup
??_C@_1BM@CEOMDIOP@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AA3?$AA0?$AA9?$AA?$AA@
_snwprintf
MmHalfSecond
KeRundownThread
ZwWriteFileGather
MiDetachAndUnlockWorkingSet
ExpCallBackReturnRefs
GUID_DEVCLASS_UNKNOWN
FsRtlIncrementCcFastReadNoWait
PipAddDevicesToBootDriverWorker
ZwQueryAttributesFile
WmipBinaryMofGuid
CmpCentaurID
IopApcHardError
MmSystemDriverPage
CmSetLastWriteTimeKey
??_C@_1BM@FJOEHHGF@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AA3?$AA0?$AA0?$AA?$AA@
PpDDBHandle
NtAssignProcessToJobObject
??_C@_1BM@JMLFNGFO@?$AAW?$AAI?$AAL?$AAD?$AAC?$AAA?$AAR?$AAD?$AA_?$AAN?$AAA?$AAM?$AAE?$AA?$AA@
CmpLazyFlushTimer
PpBusTypeGuidGetIndex
HdlspProcessDumpCommand
PopShutdownPowerOffPolicyRegKey
ObpCaptureObjectName
PsInitialSystemProcess
??_C@_0DM@FFCMBIDJ@INIT?2Registry?2Machine?2System?2Cur@
??_C@_1O@OGMPALMC@?$AAV?$AAD?$AAS?$AAB?$AAA?$AAS?$AA?$AA@
WmipDSCleanup
PiDeferNotification
RtlSecondsSince1980ToTime
MmReadClusterSize
VerSetConditionMask
PiControlGetDeviceDepth
IopTestForReconfiguration
PopInvokeStateHandlerTargetProcessor
SepPrivilegeCheck
??_C@_1EI@CDLGJEAA@NITI?$AA?2?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?2?$AAL?$AAo?$AAw?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AAC?$AAo?$AAn?$AAd?$AAi?$AAt@
WmipQueryWmiRegInfo
MiModifiedPageWriterTimer
GUID_PCI_BUS_INTERFACE_STANDARD
??_C@_06NDMDFJNO@INIT?$DO?$DN?$AA@
IopDeviceEjectComplete
FsRtlFastMutexLookasideList
KeUserPopEntrySListResumeWow64
MiSpecialPoolNextPdeForSpecialPoolExpansion
MmLoadedUserImageList
shutdownlength
MiHighestUserPxe
KdpCurrentSymbolEnd
??_C@_0HB@JNNAEFLM@PAGEVRFCA?5driver?5has?5failed?5to?5c@
ZwAccessCheckByType
SepAuditAssignPrimaryToken
KiSuspendThread
CmpDuplicateIndex
MxSlushDescriptor2
PoolTrackTableSize
RtlRemoveUnicodePrefix
SearchStrings
WmipISCleanup
MiGetInPageSupportBlock
VfZwQueryInformationJobObject
RtlpRandomExConstantVector
MiEmptyWorkingSet
??_C@_1BA@MGAIFOED@?$AAD?$AAL?$AAL?$AAF?$AAI?$AAL?$AAE?$AA?$AA@
IovUtilIsPdo
ExpProfileDelete
RtlInsertElementGenericTableFull
CmpRegistryMachineSystemCurrentControlSetControlBiosInfoString
ExSystemLookasideListHead
??_C@_1M@PBHOBGFC@?$AAS?$AAE?$AAT?$AAU?$AAP?$AA?$AA@
SeSystemDefaultSd
KiGeneralProtectionFault
IopQueryDockRemovalInterface
WmipEnableCollectionForNewGuid
PsGetCurrentProcessWin32Process
IoVerifyVolume
PsChargePoolQuota
PopDispatchCallout
??_C@_1CG@GBEOIIJN@?$AAF?$AAL?$AAA?$AAG?$AAS?$AA_?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AAP?$AAA?$AAR?$AAA?$AAM?$AA?$AA@
MmSmallStacks
MmThrottleTop
RtlImageNtHeader
ObpWaitForMultipleObjects
__@@_PchSym_@00@UhieignUdrmwldhUzkkxlnkzgUhwyzkrUpnlwvUlyqUznwGEUhwykOlyq@sdbapint
CmpMatchMemoryRule
VfZwDuplicateToken
KeAcquireGuardedMutex
??_C@_1CO@MANDAKLC@?$AAI?$AAd?$AAl?$AAe?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAM?$AAi?$AAn?$AAT?$AAh?$AAr?$AAo?$AAt?$AAt?$AAl?$AAe?$AA?$AA@
PspSetProcessIoHandlers
MiInitializeLargePageSupport
SePublicOpenSd
MiSessionWideReserveImageAddress
??_C@_1BA@FLLOMPB@?$AAT?$AAE?$AAR?$AAM?$AAS?$AAR?$AAV?$AA?$AA@
ExReInitializeRundownProtectionCacheAware
??_C@_1BM@ICMOIINO@APEG?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AAK?$AAe?$AAy?$AA?$AA@
IopWstrOtherDrivers
??_C@_0N@DLBJKABL@PAGEcoverage?$AA@
??_C@_0NG@FOFDBFAD@PAGEVRFCAn?5IRP?5dispatch?5handler?5@
??_C@_1DO@OACFDBCF@?$AAH?$AAe?$AAa?$AAp?$AAD?$AAe?$AAC?$AAo?$AAm?$AAm?$AAi?$AAt?$AAT?$AAo?$AAt?$AAa?$AAl?$AAF?$AAr?$AAe?$AAe?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AA?$AA@
PspJobMapping
PopIdle0PromoteLimit
PiMarkDeviceTreeForReenumerationWorker
RtlpBitsClearHigh
??_C@_1BE@KOHOCMDB@NITI?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
PopAdvanceSystemPowerState
WmipMaxCorrectedMCEOutstanding
PipCallDriverAddDeviceQueryRoutine
MmShortTime
IopFileMapping
MiFreeWsleList
??_C@_1EG@IBJIGFPH@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?2?$AAD?$AAe?$AAb?$AAu?$AAg?$AA?5?$AAP?$AAr?$AAi?$AAn?$AAt?$AA?5?$AAF?$AAi?$AAl?$AAt@
??_C@_0N@CLEANDAH@PAGEVRFY?$CK?5?$CK?6?$AA@
KfRaiseIrql
IopGetRootDevices
NtTranslateFilePath
FsRtlPrivateCheckWaitingLocks
RtlFindClearRuns
RtlDosPathSeperatorsString
MiFindNodeOrParent
WmipSendNotification
KeAddSystemServiceTable
PopRestartSetSystemState
VfZwQueryValueKey
GUID_ACPI_CMOS_INTERFACE_STANDARD
??_C@_1BG@EINDJIAK@?$AAH?$AAT?$AAM?$AAL?$AAH?$AAE?$AAL?$AAP?$AAI?$AAD?$AA?$AA@
Kd_DISK_Mask
ExFreePoolTraces
ExFreePoolWithTag
MiPfCompletePrefetchIos
??_C@_1CO@EACJDBAB@APEGOCSN?$AAT?$AAP?$AAo?$AAi?$AAn?$AAt?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
MmPagesAboveWsMinimum
TransitionPde
InitializePool
SdbpGetTagHeadSize
MiActiveVerifierThunks
??_C@_0BE@IIIKCKBL@ZwEnumerateValueKey?$AA@
??_C@_0BJ@PAKKLNFE@GUID_DEVICE_EJECT_VETOED?$AA@
SeSubsystemName
MmUnlockCachedPage
vDbgPrintExWithPrefix
CmpGetSectionLineIndex
??_C@_0P@GMGACGJD@ZwEnumerateKey?$AA@
??_C@_1CA@BNBNAMEI@?$AAL?$AAE?$AAG?$AAA?$AAL?$AA_?$AAC?$AAO?$AAP?$AAY?$AAR?$AAI?$AAG?$AAH?$AAT?$AA?$AA@
XIPlocatecnt
KiPrefetchRetry
IoInitSystem
Kd_DFRGIFC_Mask
MmFirstFreeSystemPte
??_C@_0BA@DNHFIHCH@PAGE?$CIno?5change?$CJ?$AA@
??_C@_0BL@NKKEPJED@?4textDriver?5at?5fault?3?5?$CFs?4?6?$AA@
PipRegMultiSzToUnicodeStrings
MiRemoveUserPhysicalPagesVad
MmHiberPages
Kd_SAMSS_Mask
NtOpenSection
MmRaisePoolQuota
RtlResetRtlTranslations
??_C@_1DA@BHAMJNJM@APEG?$AAP?$AAr?$AAi?$AAo?$AAr?$AAi?$AAt?$AAy?$AAQ?$AAu?$AAa?$AAn?$AAt?$AAu?$AAm?$AAM?$AAa?$AAt?$AAr?$AAi?$AAx?$AA?$AA@
ZwDuplicateObject
ExQueryDepthSList
ExpUpdateDebugInfo
CcMapDataNoWaitMiss
ObpReferenceDeviceMap
??_C@_1CG@EHFFKIAF@NITI?$AAV?$AAi?$AAd?$AAe?$AAo?$AAB?$AAi?$AAo?$AAs?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
VerifierListLock
NtQueryInformationFile
PoInitSystem
MmInSwapProcess
Kd_RSFILTER_Mask
PpSystemHiveLimits
PnpDefaultInterfaceType
??_C@_0JB@NNKPDIOG@PAGEVRFCA?5driver?5has?5not?5copied?5@
Kd_FCPORT_Mask
ExpOkToTimeZoneRefresh
ExReleaseTimeRefreshLock
ZwImpersonateClientOfPort
ZwQuerySystemTime
WmipUpdateModifyGuid
NtSetDriverEntryOrder
ObQueryDeviceMapInformation
SeCaptureSid
CcBcbSpinLock
Kd_AUTOCHK_Mask
NtCreateSemaphore
PopResetRangeEnum
RtlEmptyAtomTable
ExIsProcessorFeaturePresent
IopSetupArbiterAndTranslators
??_C@_0P@CNFEJCK@INITramdisk?$CI0?$CJ?$AA@
??_C@_1CI@DDPGAJMP@NITI?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAG?$AAr?$AAo?$AAu?$AAp?$AAO?$AAr?$AAd?$AAe?$AAr?$AA?$AA@
PopNotifyEvents
RtlRaiseException
KiOldIrql
IopQueryFsOperationLength
PsExitSpecialApc
PopIdle0TimeCheck
CmpStashBuffer
HvpGetCellFlat
PopIdleDefaultMinThrottle
SeTcbPrivilege
??_C@_0FD@KDNIJNEF@PAGERtlpCallQueryRegistryRoutine@
strchr
LpcpTotalNumberOfMessages
??_C@_1BK@HEPMEEKC@APEG?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?$AA@
??_C@_1EC@EEEHINPC@APEG?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl@
RtlInitializeSid
CmDeleteKey
ObCloseHandle
GUID_DEVCLASS_MEDIA
ExEnterCriticalRegionAndAcquireSharedWaitForExclusive
SdbpSetAttribute
__@@_PchSym_@00@UhieignUyzhvUmglhUpvUfkUlyqUznwGEUprOlyq@ke
FsRtlpIsDfsEnabled
??_C@_09PAHNLMHH@PAGEHDLS?$DP?$AA@
ExNPagedLookasideLock
RtlInitAnsiStringEx
ZwReplyWaitReceivePort
CmpDoAccessCheckOnSubtree
IoWriteOperationCount
ExpThreadSetManagerShutdownEvent
Kd_INFINIBAND_Mask
WmipNPNotificationSpinlock
IopReportTargetDeviceChangeAsyncWorker
??_C@_1DI@JCAEJMJL@NITIOCSN?$AAT?$AAM?$AAI?$AAC?$AAR?$AAO?$AAS?$AAO?$AAF?$AAT?$AA?5?$AAI?$AAN?$AAP?$AAO?$AAR?$AAT?$AA?5?$AAM?$AAO?$AAU?$AAS?$AAE?$AA?$AA@
??_C@_1DK@BLKKKHFP@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAC?$AAL?$AAO?$AAN?$AAE?$AA?$AA@
MmHighMemoryThreshold
PipForAllChildDeviceNodes
RtlImageDirectoryEntryToData
KeGetRecommendedSharedDataAlignment
Kd_FDC_Mask
Kd_VDS_Mask
MmDeleteTeb
IoIs32bitProcess
ExSemaphoreObjectType
??_C@_06GPHHNOPH@INIT20?$AA@
??_C@_1BG@CBLDGOCA@?$AAI?$AAN?$AAF?$AAI?$AAN?$AAI?$AAB?$AAA?$AAN?$AAD?$AA?$AA@
??_C@_1BA@NLGEBLEF@APEG?$AA?2?$AA$?$AAM?$AAf?$AAt?$AA?$AA@
??_C@_1CG@EFPHNBGL@?$AAS?$AA1?$AA6?$AAB?$AAI?$AAT?$AA_?$AAD?$AAE?$AAS?$AAC?$AAR?$AAI?$AAP?$AAT?$AAI?$AAO?$AAN?$AA?$AA@
PopThermal
SepPrimaryDomainSid
??_C@_1CO@DHIOJFAB@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAe?$AAs?$AAT?$AAo?$AAA?$AAu?$AAd?$AAi?$AAt?$AA?$AA@
Kd_WOW64_Mask
ExPoolCodeStart
CmpAddAliasEntry
SdbpGetAttribute
BuildQueryDirectoryIrp
NtQueryInstallUILanguage
IopBootConfigsReserved
SepProbeAndCaptureQosData
??_C@_1BC@JHJJCMOK@APEG?$AA?$CF?$AAw?$AAs?$AA_?$AA?$CF?$AAd?$AA?$AA@
Kd_ISAPNP_Mask
GUID_DEVCLASS_MOUSE
ObCheckCreateObjectAccess
??_C@_1BA@LAKPCDKK@?$AAS?$AAO?$AAF?$AAT?$AAP?$AAC?$AAI?$AA?$AA@
MmSessionCreate
MmNonPagedPoolEnd
IopDeleteKeyRecursive
IopStartNextPacketByKeyEx
??_C@_06KOGIFBHN@?4text?$CK?$AA@
NtQuerySystemInformation
MiExtendPagingFileMaximum
PiProfileUpdateDeviceTreeWorker
MmNonPagedPoolEnd0
RtlInitializeBitMap
ExpCenturyTimer
KiSaveProcessorState
IovpPacketFromIrp
ExpSetupModeDetected
MmStandbyPageListHead
??_C@_1CE@HABDBJGK@APEGOCSN?$AAT?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAS?$AAu?$AAi?$AAt?$AAe?$AA?$AA@
Kd_VSS_Mask
KdpSearchPageHits
PopPolicyTimeChange
PopDispatchStateCallout
ViDeadlockSearchResource
GUID_DEVICE_ENUMERATE_REQUEST
ViTrimDeadlockPoolWorkItem
strstr
NtQueryOpenSubKeysEx
HdlspSendBlueScreenInfo
ExpScanSystemLookasideList
MiDereferenceControlAreaBySection
??_C@_1BO@GBCFPCKI@?$AAA?$AAp?$AAp?$AAC?$AAo?$AAm?$AAp?$AAa?$AAt?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
PspApplyJobLimitsToProcess
KeReadStateTimer
KeRemoveQueueDpc
WmipISChunkInfo
__imp_HalCalibratePerformanceCounter
??_C@_1O@HNINEICB@APEG?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
PiDDBCacheTable
??_C@_1CK@NINICOIO@NITI?$AA?2?$AA?$CF?$AAd?$AA_?$AA?$CF?$AAd?$AA_?$AA?$CF?$AAd?$AA_?$AA?$CF?$AAd?$AA_?$AA?$CF?$AAd?$AA_?$AA?$CF?$AAd?$AA?$AA@
WmipAllocEntry
CmpMatchOemIdRule
CmpDelayDerefKCBWorkItemActive
??_C@_0M@FPAHENLG@INITCONSTv3?$AA@
PpvUtilVerifierEnabled
MmLoadSystemImage
ObInheritDeviceMap
WmipDoDisableRequest
??_C@_1DA@PKENCOCE@NITI?$AAF?$AAu?$AAl?$AAl?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AAA?$AAu?$AAd?$AAi?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
RtlpSysVolSystemSid
PiCollectVetoedHandles
MmDecommittedPte
NtQueueApcThread
PpDeviceEventList
ViRequiredTimeSinceBoot
SepUpdateParentTypeList
??_C@_1CE@BBGEOAOP@NITIOCSN?$AAT?$AAP?$AAC?$AA9?$AA8?$AA_?$AAN?$AA1?$AA0?$AA6?$AAK?$AAE?$AAY?$AA?$AA@
IovUnloadDrivers
SepAdtOpenObjectAuditAlarm
WmipDSChunkInfo
??_C@_1LE@CJDOINDE@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAU@
NtCancelTimer
ExPoolFailures
RtlDecompressFragmentNS
??_C@_1BE@OCKBCHED@NITI?$AAh?$AAa?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
SeChangeNotifyPrivilege
WmipContextSwapProcessorBuffers
??_C@_1O@JMECDIHP@?$AAF?$AAC?$AAP?$AAO?$AAR?$AAT?$AA?$AA@
ExpWaitForResource
MxOldFreeDescriptor
ViDeadlockReportIssue
PiUnlockDeviceActionQueue
CmpComputeHashKey
PpResetProblemDevices
ExPagedLookasideListHead
FsRtlFastCheckLockForWrite
??_C@_0CN@EFFCFDHJ@INITIOINIT?3?5AnsiToUnicode?$CI?5?$CFZ?5?$CJ?5@
isalpha
xHalStartMirroring
CmNtCSDReleaseType
MY_WRITE_PORT_UCHAR
IopWstrReservedResources
??_C@_1DA@FIAIHGJJ@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AAO?$AAn?$AAl?$AAy?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
KeQueryTimeIncrement
CmpAmdID
CmpMatchAcpiOemIdRule
??_C@_07BHJFBINJ@?4text?3?3?$AA@
RtlFreeHeap
NtEnumerateBootEntries
??_C@_0DF@IEGIFIMO@?4text?$AN?6?$AN?6?$CK?$CK?$CK?5STOP?3?50x?$CF08lX?5?$CI0x?$CFp@
GUID_DEVCLASS_DOT4PRINT
CmRegistryMachineSystemName
??_C@_1CI@KKPKAJHD@NITI?$AAO?$AAl?$AAd?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAB?$AAi?$AAo?$AAs?$AAD?$AAa?$AAt?$AAe?$AA?$AA@
MmPagingFileHeader
InitializationPhase
VfZwOpenThreadToken
ViDeadlockAddThread
CmInstallUILanguageId
IopGetMaxValidMemorySize
VfZwSetInformationObject
ZwTerminateProcess
MmGetKernelDumpRange
IopDeleteSessionSymLinks
IopSetLegacyResourcesFlag
ObShutdownSystem
??_C@_0BE@JFIEIPOO@ZwDeleteDriverEntry?$AA@
??_C@_0BF@IPAHFEPJ@ZwUnmapViewOfSection?$AA@
CmpAddDockingInfo
??_C@_0M@PPEEHLMJ@INITXIPBOOT?$AA@
??_C@_1EO@JFEEBJHA@NITI?$AA0?$AA8?$AA1?$AA1?$AAc?$AA1?$AAa?$AAf?$AA?9?$AA7?$AAa?$AA0?$AA7?$AA?9?$AA4?$AAa?$AA0?$AA6?$AA?9?$AA8?$AA2?$AAe?$AAd?$AA?9?$AA8?$AA6?$AA9?$AA4?$AA5?$AA5@
FsRtlLookupLastBaseMcbEntry
KdReceivePacket
IoFileObjectType
NtWaitForMultipleObjects
WmiTraceThread
CmpProcessBitRegLine
SepAdtAuditThisEventWithContext
KeBugCheckReasonCallbackListHead
??_C@_0DO@EGBJDDAJ@PAGECmpFileFlush?3?7Failure1?3?5stat@
KdSetOwedBreakpoints
NtQueryPerformanceCounter
VfZwQueryKey
NtLockVirtualMemory
MiHighestUserPte
PsReturnPoolQuota
KiStackProtectTime
IopStartApcHardError
WmipOpenCloseCleanup
ObpTypeDirectoryObject
??_C@_1BA@MCNLHGKO@?$AAD?$AAM?$AAA?$AAD?$AAM?$AAI?$AAN?$AA?$AA@
PopRecalculateCBTriggerLevels
ExpAdditionalDelayedWorkerThreads
strtoul
PpRegistrySemaphore
VfZwQueryVolumeInformationFile
CmpRegistryMachineSystemCurrentControlSetEnumRootString
??_C@_1BE@BIOKDFNF@APEG?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AAC?$AA?3?$AA?$AA?$AA?$AA@
MmSystemCachePteBase
MiAllocateContiguousMemory
HalpQueryPartitionType
WmipMSMCAEvent_TLBErrorGuid
GUID_DEVCLASS_FSFILTER_PHYSICALQUOTAMANAGEMENT
RtlUpcaseUnicodeStringToAnsiString
KdpQuickMoveMemory
IopGetDriverNameFromKeyNode
??_C@_0BO@KPENNNHI@PAGEVRFCIRP_MN_POWER_SEQUENCE?$AA@
??_C@_0EC@BFHPGJDG@PAGEVRFYToo?5many?5outstanding?5ref@
SdbFree
MiRememberUnloadedDriver
RtlpGetColdpatchDebugSignature
??_C@_1CE@OCBGCGOB@APEG?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AAO?$AAr?$AAd?$AAe?$AAr?$AA?$AA@
IoAcquireVpbSpinLock
KeTryToAcquireGuardedMutex
??_C@_0BC@CBKCHNJG@PAGEDllInitialize?$AA@
KiOp_Illegal
PopResetActionDefaults
ViAllocateContiguousMemory
CmpAllocBucketLock
IopNotifyPnpWhenChainDereferenced
??_C@_0DL@JCFBMPHE@PAGEVRFYBreakpoint?5zapped?5?$CIOS?5wi@
??_C@_0O@OLICKKEK@INITCONST?$ICUNR?$AA@
CmpID1
CmSaveKey
Kd_VDSBAS_Mask
DebugPrint
__IMPORT_DESCRIPTOR_BOOTVID
PrototypePte
KiMoveApcState
PspDefaultQuotaBlock
MmCritsectTimeoutSeconds
ZwSetEaFile
ExCbPowerState
MiGetWorkingSetInfo
SeAliasAdminsSid
MmStandbyRePurposed
IopAutoReboot
RtlAreAllAccessesGranted
MmMakeKernelResourceSectionWritable
??_C@_1BG@KPBMEPBH@?$AAF?$AAL?$AAA?$AAG?$AA_?$AAT?$AAA?$AAG?$AAI?$AAD?$AA?$AA@
CcDeferredWriteSpinLock
CmpAquireFileObjectForFile
MiDereferenceLastChanceLdw
EventGuidTable
ZwSetInformationFile
IopRemoveDeviceInterfaces
??_C@_1BI@JKIIJEJJ@?$AAD?$AAA?$AAT?$AAA?$AA_?$AAS?$AAT?$AAR?$AAI?$AAN?$AAG?$AA?$AA@
??_C@_1DI@JEEEAFI@NITIOCSN?$AAT?$AAM?$AAI?$AAC?$AAR?$AAO?$AAS?$AAO?$AAF?$AAT?$AA?5?$AAS?$AAE?$AAR?$AAI?$AAA?$AAL?$AA?5?$AAM?$AAO?$AAU?$AAS?$AAE?$AA?$AA@
PopPolicyWorkerThread
MmCheckForSafeExecution
??_C@_0BB@KLEIHAJC@INITCONSTPointer?$AA@
VfMapTransfer
IopWriteDriverList
RtlpSysVolCheckOwnerAndSecurity
SeLoadDriverPrivilege
MmModifiedWriteClusterSize
CcTargetCleanDelay
ExpTimeZoneWorkItem
ViFilterDispatchPnp
PerfInfoProfileInterval
WmipAdminDeviceObject
RtlFindLeastSignificantBit
??_C@_1CC@DNIPPNG@APEG?$AAP?$AAa?$AAr?$AAe?$AAn?$AAt?$AAI?$AAd?$AAP?$AAr?$AAe?$AAf?$AAi?$AAx?$AA?$AA@
ExpRefreshFailures
ExpDefaultErrorPortProcess
MiReplacing
RtlpExceptionLogSize
WmipCreateNtFileName
KiProfileInterval
WmipCreateLogFile
ExpProfileInitialization
??_C@_1IO@PNPGLCCI@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
IoWMICompleteRequest
IoAcquireCancelSpinLock
KeReleaseSpinLockForDpc
IoFreePoDeviceNotifyList
VfZwSetVolumeInformationFile
??_C@_0BC@HCFKLLDN@PAGELastKnownGood?$AA@
KiQuantumEnd
ExpShuttingDown
XIPConfiguration
TotalTraceBuffers
RtlAllocateHeapSlowly
ZwAccessCheckAndAuditAlarm
FsRtlFileLockCancelCollideList
IoUnregisterPlugPlayNotification
CmpFreeKeyByCell
WmipGetSMBiosTableData
??_C@_0N@KMOLBMMD@ZwCreateFile?$AA@
CmpTryConvertKCBLockSharedToExclusive
WmipQueueRegWork
IopBuildFullDriverPath
RtlpNormalizePeHeaderForIdHash
??_C@_1O@KFOBCDJI@APEG?$AAE?$AAn?$AAu?$AAm?$AA?$AA@
KxStartSystemThread
MiInitialLargePage
PopShutdownListMutex
PopIdleDetectionMode
??_C@_1M@DABPOGCK@NITI?$AAJ?$AAo?$AAb?$AA?$AA@
KdD3Transition
InbvDisplayString
MiComputeSystemTrimCriteria
HvpScanForFreeCellInViewWindow
LsaCallAuthenticationPackage
ViMessageClassPostponedDriverIssue
??_C@_1CA@FAONJEMJ@APEGOCSN?$AAT?$AAE?$AAn?$AAt?$AAe?$AAr?$AAp?$AAr?$AAi?$AAs?$AAe?$AA?$AA@
CcFastReadNoWait
CcGetVirtualAddress
RtlLengthSecurityDescriptor
ObpUnsecureGlobalNamesLength
GUID_IO_VOLUME_MOUNT
MmAttemptForCantExtend
ObReferenceObjectSafe
WmipProbeWmiRegRequest
??_C@_1BG@GDHFCMPD@NITI?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
PopThermalDeviceHandler
??_C@_1CA@MEOKKOED@APEG?$AAE?$AAj?$AAe?$AAc?$AAt?$AAP?$AAr?$AAi?$AAo?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
??_C@_1O@LDPMBPKI@?$AAN?$AAE?$AAT?$AAA?$AAP?$AAI?$AA?$AA@
WmipDSHead
CmpParseKey
GUID_DEVICE_SAFE_REMOVAL
MmUnmapViewInSessionSpace
??_C@_1CI@OCGDEEHA@NITI?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAB?$AAi?$AAo?$AAs?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
RtlDeNormalizeProcessParams
PspProcessDelete
??_C@_19CAINCBFJ@?$AAA?$AAC?$AAP?$AAI?$AA?$AA@
??_C@_0CM@IHBJNIBA@PAGEVRFYDriver?5at?5address?5?$CFp?5has@
ZwPlugPlayControl
WmipUMProviderCallback
MmRemovePhysicalMemory
CmUnloadKey
MmCreateSection
__@@_PchSym_@00@UhieignUyzhvUmglhUrlUfkUlyqUznwGEUrlkOlyq@io
??_C@_0DF@ODOGNDEP@?4text?$CK?$CK?$CK?$CK?5Bad?5IRQL?5?9?9?5needed?5?$CFx?5@
KeQueryValuesProcess
PoRegisterSystemState
CmpGetAcpiProfileInformation
RtlRestoreContext
WmipAddDataSource
??_C@_0BF@MMBAAFCB@PAGEVRFCNTKRPAMP?4EXE?$AA@
??_C@_1BC@DMEKKFIJ@NITI?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AA?$AA@
CcUnpinRepinnedBcb
RtlAnsiCharToUnicodeChar
SeSetSecurityDescriptorInfoEx
MiPfAllocateMdls
MiShareSessionImage
IopCompletePageWrite
??_C@_1BK@GGGCDILO@?$AAS?$AAX?$AAS?$AA_?$AAM?$AAA?$AAN?$AAI?$AAF?$AAE?$AAS?$AAT?$AA?$AA@
ViDeadlockGlobals
??_C@_0BJ@FHOCGFHL@GUID_DEVICE_SAFE_REMOVAL?$AA@
??_C@_1CC@OPHEAOIL@APEG?$AAF?$AAi?$AAr?$AAm?$AAw?$AAa?$AAr?$AAe?$AAM?$AAe?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
KdpMessageBuffer
MiZeroingDisabled
CcGetLsnForFileObject
??_C@_1DM@KJFEPMCL@NITI?$AAD?$AAo?$AAN?$AAo?$AAt?$AAA?$AAu?$AAd?$AAi?$AAt?$AAC?$AAl?$AAo?$AAs?$AAe?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAE?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
ProgressBarTop
ExInsertPoolTag
PopDeleteHiberLinkFile
ZwMapViewOfSection
KeReleaseMutex
GUID_DEVICE_SYS_BUTTON
PopIssueActionRequest
VerifierExInitializeNPagedLookasideList
??_C@_0CB@BNAILGPP@PAGEVRFCIRP_MJ_CREATE_NAMED_PIPE@
SepLsaQueueLock
MiSessionUnloadAllImages
MmMaximumNonPagedPoolInPages
PspBootAccessToken
PiResetProblemDevicesWorker
??_C@_0DL@ONPCGAKD@?4text?$CFs?$CK?$CK?5?5?$CF12s?5?9?5Address?5?$CFp?5bas@
InitSafeBootMode
ExEnterCriticalRegionAndAcquireFastMutexUnsafe
MmRemovePhysicalMemoryEx
??_C@_1BC@GFBOIIBO@?$AAD?$AAA?$AAT?$AAA?$AAB?$AAA?$AAS?$AAE?$AA?$AA@
SeTokenIsAdmin
WmipSysId1394Count
ViPenalties
InbvBootDriverInstalled
??_C@_0CG@LPOHNDCD@INITExpInterlockedPopEntrySListR@
??_C@_0CM@CFPLELAB@PAGE?7?$CF08I64X?3?5VA64?5?$CF016I64X?5?9?$DO?5?$CF@
MiProbeRaises
CmpSystemHiveHysteresisWorker
??_C@_1CI@GACLFHFI@?$AAR?$AAe?$AAa?$AAl?$AAT?$AAi?$AAm?$AAe?$AAI?$AAs?$AAU?$AAn?$AAi?$AAv?$AAe?$AAr?$AAs?$AAa?$AAl?$AA?$AA@
??_C@_1CC@OEIAPMKE@?$AAN?$AAo?$AAn?$AAP?$AAa?$AAg?$AAe?$AAd?$AAP?$AAo?$AAo?$AAl?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
MmSystemCacheWsle
CcPfGetSectionObject
??_C@_1CA@BBJEFKJM@NITIOCSN?$AAT?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
PiProcessQueryDeviceState
ViDeadlockVerifyOnlySpinlocks
PpBootDDB
WmipIsQuerySetGuid
ExPushLockSpinCount
SepRmDbInitialization
??_C@_0DD@CHKLPGEE@PAGEVRFYVerifier?3?5deadlock?3?5stop@
CcCanIWrite
WmipCreateUMLogger
PopIdle0PromoteTicks
??_C@_0N@PKGAALGP@INITCONSTv?51?$AA@
??_C@_0N@OLAPGDAN@PAGEHDLS?$BL?$FL0m?$AA@
KiMinimumDpcRate
CmpDelayAllocBucketLock
RtlQueryEnvironmentVariable_U
??_C@_0BA@CPBCOFBN@INITCONSTMemory?$AA@
RtlFreeHeapSlowly
??_C@_0FF@LCHCGBA@PAGEHvpRecoverData?3?5SectorOffset@
MainPalette
PopAllocateOwnMemory
ObpDeferObjectDeletion
ZwSetSystemEnvironmentValue
WSOEsp
??_C@_1CG@CLKJBFLP@?$AAA?$AAd?$AAj?$AAu?$AAs?$AAt?$AAD?$AAp?$AAc?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AA?$AA@
??_C@_06KPJFDFBB@PAGE?$CFu?$AA@
IopPowerDispatch
MiPageFileContract
FsRtlNotifyChangeDirectory
KiSpuriousInterruptTemplate
FsRtlIsNameInExpressionPrivate
??_C@_0N@ODHLDKCO@INITCONSTv?50?$AA@
IopOrphanNotification
KiFreezeExecutionLock
IopMergeFilteredResourceRequirementsList
NtQuerySymbolicLinkObject
VfZwQueryDefaultUILanguage
ExCbSetSystemState
KeSetImportanceDpc
WmipSMBiosTablePhysicalAddress
??_C@_1CA@IDJEFKMK@NITI?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAS?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
MiDoMappedCopy
KeGetCurrentIrql
??_C@_0DA@LAAILECA@PAGEHvpDoWriteHive?$FL1?$FN?3?5Failed?5to@
??_C@_1BM@FDACKLPC@NITIOCSN?$AAT?$AA?$CK?$AAn?$AAE?$AAC?$AA1?$AA3?$AA0?$AA0?$AA?$AA@
NtUnloadKey2
KdpSysReadMsr
NtLockProductActivationKeys
??_C@_1CM@OOPLPMFL@?$AAO?$AAb?$AAU?$AAn?$AAs?$AAe?$AAc?$AAu?$AAr?$AAe?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAN?$AAa?$AAm?$AAe?$AAs?$AA?$AA@
MiSessionRemoveImage
WmipFindRegEntryByDevice
??_C@_1BI@HMLBBHOG@NITIOCSN?$AAT?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
Kd_PNPMEM_Mask
ViDeadlockMergeNodes
ObpGetDosDevicesProtection
??_C@_0CL@NLIHPGBG@PAGEMmLoadSystemImage?3?5Pulled?5?$CFw@
??_C@_1BO@GHACHDPN@NITI?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
PopUserPresentWorkItem
MmUnusedSubsectionCount
??_C@_06NBIFOHIH@INIT?$DN?$DN?$AA@
??_C@_0BJ@OEABBAMI@PAGEVRFCIRP_MN_WAIT_WAKE?$AA@
Kd_FLTMGR_Mask
ExReleaseFastMutex
MiRemoveCachedRange
ExSetResourceOwnerPointer
IopInitializeSystemDrivers
PsInvertedFunctionTable
CmpRegistryMachineSystemCurrentControlSetServicesString
__@@_PchSym_@00@UhieignUyzhvUmglhUxlmurtUfkUlyqUznwGEUxnkOlyq@config
KeSetAffinityProcess
WmipDriverEntry
RtlDecompressBufferLZNT1
PiCriticalCallbackVerifyCriticalEntry
??_C@_0HC@EONKGNH@PAGEVRFCA?5driver?5has?5not?5inherit@
PsWatchWorkingSet
RtlUpcaseUnicodeStringToCountedOemString
ExpDummyAllocate
CmpRefreshWorkerRoutine
CmpProcessForSimpleStringSub
VerifierNtWriteFile
MmKernelStackResident
MmTotalEstimatedAvailable
??_C@_0O@MCAIFEMD@INITCONSTMPSA?$AA@
WmipPushDirtyBuffer
MiChargeCommitmentFailures
??_C@_1BM@INBNPIKC@?$AAD?$AAp?$AAc?$AAQ?$AAu?$AAe?$AAu?$AAe?$AAD?$AAe?$AAp?$AAt?$AAh?$AA?$AA@
??_C@_1BC@FDGCEING@?$AAU?$AAN?$AAI?$AAM?$AAO?$AAD?$AAE?$AAM?$AA?$AA@
WmipLoggerCount
MiLastAdjustmentOfClaimParams
KiRaiseAssertion
PiProfileDeviceListHead
GUID_BUS_INTERFACE_STANDARD
??_C@_0GF@OCEOLFGO@PAGEVRFCA?5driver?5has?5forwarded?5a@
MmExpansionLock
CmpCreateRegistryRoot
RtlSubAuthorityCountSid
ExInterlockedPushEntryList
KiAttachProcess
MmPerfUnusedSegmentsEnumerate
g_SharedLock
PopWakeSystemTimeout
ExpSystemResourcesList
ExTryToAcquireFastMutex
ZwOpenDirectoryObject
MiHighestUserPpe
??_C@_1O@DJECJIJ@?$AAM?$AAO?$AAU?$AAH?$AAI?$AAD?$AA?$AA@
??_C@_0BP@MDCLODBD@?2Device?2Harddisk?$CFd?2Partition?$CFd?$AA@
??_C@_1CK@COMLFAAM@APEGOCSN?$AAT?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAI?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
CmReplaceKey
_purecall
MiResolveImageReferences
MmTotalCommitLimitMaximum
RtlAllocateHeap
IopTCPQueryInformationEx
ObpCloseHandleTableEntry
ExpDebuggerWorker
MiDelayPageFaults
GUID_DEVCLASS_1394
MiUpControlAreaRefs
RtlCreateSystemVolumeInformationFolder
CmpMatchAcpiRevisionRule
PiControlQueryAndRemoveDevice
IoEnumerateRegisteredFiltersList
RtlInitializeContext
WmipMRCleanup
ExpMutantMapping
NtOpenKeyedEvent
VidSetScrollRegion
FsRtlOplockBreakNotify
??_C@_06LMPDNLOH@INIT19?$AA@
TraceErrorGuid
VerifierMmMapIoSpace
??_C@_1BK@HKEIBCJC@APEG?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?$AA@
IopGetFileInformation
Kd_CONFIG_Mask
ObCheckObjectAccess
ExpQueryModuleInformation
??_C@_0M@FBFMMKPO@INITCleanup?$AA@
??_C@_0CI@HBDNOPBO@INITCmpFindACPITable?3?5Cannot?5fin@
??_C@_1CE@COMLBFPL@?$AAL?$AAA?$AAY?$AAE?$AAR?$AA_?$AAD?$AAI?$AAS?$AAP?$AAL?$AAA?$AAY?$AAN?$AAA?$AAM?$AAE?$AA?$AA@
ViDdiDriverEntry
DbgPrintReturnControlC
PspQueryPooledQuotaLimits
ViVerifyPerformanceCounter
SeAuditingState
??_C@_1BO@DOPGPGC@APEG?$AAF?$AAr?$AAi?$AAe?$AAn?$AAd?$AAl?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
??_C@_1BO@NOIIKBIH@?$AAL?$AAI?$AAN?$AAK?$AAE?$AAR?$AA_?$AAV?$AAE?$AAR?$AAS?$AAI?$AAO?$AAN?$AA?$AA@
KiXmmException
CmRegistryMachineHardwareName
MiInitializeReadInProgressSinglePfn
gRuleTable
??_C@_1FM@HOGHHPO@NITI?$AA?$HL?$AA4?$AAD?$AA3?$AA6?$AAE?$AA9?$AA7?$AA2?$AA?9?$AAE?$AA3?$AA2?$AA5?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AAB?$AAF?$AAC?$AA1?$AA?9?$AA0?$AA8?$AA0?$AA0?$AA2@
IoSetDeviceToVerify
NtQuerySection
WmipCmcQueryInfo
VfZwSetBootEntryOrder
ExFreePoolSanityChecks
ExpTimerInitialization
PipIsFirmwareMapperDevicePresent
PspExpandQuota
NtOpenKey
IovpSwapSurrogateIrp
FsRtlAllocatePoolWithQuota
HvpMapFileImageAndBuildMap
ExLockUserBuffer
KiPreprocessFault
??_C@_0O@BGINFEAB@INITCONST?$IBREQ?$AA@
MiRemoveLowPages
IovpExamineIrpStackForwarding
ExpGetSystemProcessorInformation
??_C@_0N@EKFKGNNE@ZwClearEvent?$AA@
??_C@_0CA@OILLBHLG@INITMICROSOFT?5?$CIR?$CJ?5WINDOWS?5?$CITM?$CJ?6?$AA@
NtQueryEvent
CmpSecurityMethod
??_C@_09JICLAJAB@INIT80387?$AA@
MiMapViewOfImageSection
SeMarkLogonSessionForTerminationNotification
??_C@_1M@EPGPFLF@?$AAV?$AAI?$AAD?$AAE?$AAO?$AA?$AA@
KiSwapThread
SwapSplayLinks
KeTimerCheckFlags
MmModifiedPageWriterEvent
??_C@_0O@FMICIMDP@INITNOGUIBOOT?$AA@
??_C@_1EE@EPFHLFAH@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAl?$AAe?$AAc@
KdpTimeSlipWorkItem
IopLoadFileSystemDriver
VfZwSaveKeyEx
KeAcquireQueuedSpinLock
??_C@_0N@GIELCLHA@ZwDeleteFile?$AA@
NtLoadKeyEx
IopCallArbiter
ZwUnloadDriver
??_C@_0MK@IJPCLOCM@PAGEVRFCAn?5IRP?5dispatch?5handler?5@
??_C@_1BK@OMHKDIBJ@APEGRVYF?$AAV?$AAE?$AAR?$AAI?$AAF?$AAI?$AAE?$AAR?$AA?$AA@
SePublicOpenDacl
IopTimerQueueHead
ZwAddAtom
IopWstrAssignmentOrdering
RtlSetSaclSecurityDescriptor
ZwQueryObject
MiHotPatchList
ZwReplyWaitReceivePortEx
memcmp
ExGetPreviousMode
RtlLargeIntegerToChar
NtSetInformationDebugObject
??_C@_0BJ@NHMNJML@PAGEVRFCINVALID_IRP_CODE?$AA@
MiCopyOnWrite
MiPteStartBitmap
??_C@_0DL@OBOHKMCH@?4textHeader?5too?5large?5?$CI?$CFu?$DO?$CFu?$CJ?5fo@
VfZwOpenThread
MiFindLargePageMemory
CmRegistryMachineSystemCurrentControlSet
WmipDeliverWnodeToDS
VfPowerVerifyNewRequest
IopProcessAssignResources
Square2
MmLargePageMinimum
ExpLicenseInfoCount
RtlpImageDirectoryEntryToData32
NtEnumerateSystemEnvironmentValuesEx
??_C@_1BG@LAIOFGA@APEG?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
??_C@_1BK@OGGEHBPM@APEG?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA3?$AA2?$AA?2?$AA?$AA@
Square3
_pwctype
SepAdtGenerateDiscardAudit
??_C@_0N@JOAMMOGL@INITCONSTv?55?$AA@
Square1
Kd_DFSC_Mask
SdbpScanIndexes
KeRaiseUserException
NtQueryOpenSubKeys
KeIsAttachedProcess
ZwSetInformationKey
GUID_DEVINTERFACE_TAPE
ExAcquireRundownProtectionCacheAwareEx
??_C@_1BK@OCMKLJBI@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAV?$AAE?$AAR?$AAS?$AAI?$AAO?$AAN?$AA?$AA@
RtlOpenCurrentUser
KdpSysCheckLowMemory
??_C@_1CG@DFNIOHIA@?$AAP?$AAR?$AAE?$AAV?$AAO?$AAS?$AAM?$AAI?$AAN?$AAO?$AAR?$AAV?$AAE?$AAR?$AAS?$AAI?$AAO?$AAN?$AA?$AA@
??_C@_1DC@DPCICGBD@NITI?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAP?$AAh?$AAy?$AAs?$AAi?$AAc?$AAa?$AAl?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?$AA@
CcPfLookUpSection
PopWakeDeviceList
??_C@_0BI@JELAFHDK@PAGEVRFCIRP_MJ_QUERY_EA?$AA@
??_C@_0LK@PANILNHG@PAGEVRFCA?5cancel?5routine?5has?5bee@
??_C@_1BC@OBEEBGAH@?$AAA?$AAd?$AAd?$AAi?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
Kd_CLASSPNP_Mask
NtDebugContinue
PsSetProcessWin32Process
ObDereferenceProcessHandleTable
??_C@_1M@NGEDDDAN@APEG?$AA?4?$AA?4?$AA?4?$AA?$AA@
KiMxCsrMask
SeLocalServiceSid
RtlTraceDatabaseCreate
IopSetFsOperationLength
KiOverflowTrap
MmProtectedPteLock
FsRtlRemoveMcbEntry
NtQueryDriverEntryOrder
VerifierExAllocatePoolWithTagPriority
??_C@_1BE@EANIBKPD@APEG?$AAR?$AAo?$AAo?$AAt?$AAD?$AAM?$AAA?$AA?$AA@
SepAdjustGroups
ApphelpCacheInitialize
??_C@_0BH@MJMDMBHC@PAGEVRFCIRP_MJ_CLEANUP?$AA@
ExpWindowStationMapping
MiResolveTransitionFault
??_C@_1CC@OGACLIIH@APEG?$AAM?$AAa?$AAx?$AAN?$AAu?$AAm?$AAS?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
??_C@_1BO@MPJAAPMB@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAV?$AAi?$AAe?$AAw?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
IopQueryName
CmpAddDriverToList
ExfAcquirePushLockExclusive
GUID_TARGET_DEVICE_REMOVE_COMPLETE
??_C@_1BE@NKMJLGC@NITI?$AAc?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
IoWMIRegistrationControl
KdpSearchMemory
GUID_DEVCLASS_FSFILTER_INFRASTRUCTURE
??_C@_0IA@DDDJKPDK@PAGEVRFCA?5driver?5has?5returned?5ST@
FstubWriteBootSectorEFI
??_C@_1II@DMDBKLHE@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
CmpAssignSecurityToKcb
??_C@_1JO@PPMKILGO@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
ExpTimerDpcRoutine
??_C@_1CI@LKBJIOEG@APEG?$AAH?$AAi?$AAb?$AAe?$AAr?$AAP?$AAa?$AAg?$AAe?$AAs?$AAW?$AAr?$AAi?$AAt?$AAt?$AAe?$AAn?$AA?$AA@
KeSetPriorityThread
PiLastGoodCopyKeyContents
ValidPdePde
KeResetEvent
CmpMatchNextMatchRule
ZwQueryInformationAtom
??_C@_0ED@FIGBMFBG@?4text?6?$CK?$CK?$CK?5Assertion?5failed?3?5?$CFs?$CFs@
??_C@_1CM@HJFPLHFG@?$AAI?$AAd?$AAl?$AAe?$AAT?$AAh?$AAr?$AAo?$AAt?$AAt?$AAl?$AAe?$AAC?$AAh?$AAe?$AAc?$AAk?$AAR?$AAa?$AAt?$AAe?$AA?$AA@
KdpStub
CmpDuplicateKey
SeAuditSystemTimeChange
Kd_SVCHOST_Mask
KiDispatchException
??_C@_0BI@NFMJNBCN@ZwQueryDriverEntryOrder?$AA@
??_C@_0CO@CPLFFJGA@PAGEInvalid?5source?5hotpatch?5vali@
KiTimerTableSize
ExpTimerApcRoutine
IopOpenLinkOrRenameTarget
PpDeviceReferenceTableLock
??_C@_1O@OHFHJGCM@NITI?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
??_C@_1BO@BPAMGJF@NITI?$AAN?$AAT?$AAK?$AAR?$AAN?$AAL?$AAM?$AAP?$AA?4?$AAE?$AAX?$AAE?$AA?$AA@
RtlFindSetBits
ViGenericBuildIrpLogEntry
ExAcquireSharedWaitForExclusive
RtlEnumerateGenericTableLikeADirectory
KeSetTimer
__wnullstring
ZwCreateProcess
??_C@_1BK@FMCEMFBG@APEG?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
PpLogEvent
SeTakeOwnershipPrivilege
FsRtlPrivateFastUnlockAll
ExpProductTypeChangeBuffer
VerifierExReleaseResourceLite
MiAgeWorkingSet
CmpFreeDriverList
KdpSysReadIoSpace
MmCleanProcessAddressSpace
CmDefaultLanguageIdLength
MmNonPagedPoolExpansionStart
??_C@_1CA@MACENBJA@NITI?$AAV?$AAi?$AAd?$AAe?$AAo?$AAB?$AAi?$AAo?$AAs?$AAD?$AAa?$AAt?$AAe?$AA?$AA@
??_C@_1CI@NNGKLPNE@APEGOCSN?$AAT?$AAW?$AAo?$AAr?$AAm?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
RtlpIntegerChars
MmLargePageDriverBufferLength
IopWstrHal
IopFileUtilWalkDirectoryTreeTopDown
CmpNoWrite
KernelVerifier
IoRegisterShutdownNotification
VerifierExAllocatePoolWithQuotaTag
??_C@_1O@CCMMDNHM@?$AAP?$AAC?$AAI?$AAI?$AAD?$AAE?$AA?$AA@
??_C@_0BC@HAIPHNKJ@?4text?$CFp?5?$CFp?5?$CFp?5?$CFp?6?$AA@
??_C@_1BM@JLNIPDLE@?$AAV?$AAE?$AAR?$AAF?$AAI?$AAL?$AAE?$AAD?$AAA?$AAT?$AAE?$AAL?$AAO?$AA?$AA@
PopCapabilities
PopSetPerfLevels
BOOTVID_NULL_THUNK_DATA
??_C@_1BK@BJIHJJIL@NITI?$AAG?$AAL?$AAO?$AAB?$AAA?$AAL?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
HvpAddBin
VfZwSetEvent
??_C@_0FG@GLNILNGB@PAGEVRFY?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK@
ExpUpdateComPlusPackage
KiBarrierWait
MmGetNextSession
SeAliasGuestsSid
IopPnpDriverStarted
ZwOpenProcessTokenEx
ZwUnmapViewOfSection
SdbpCheckAllAttributes
VfIrpDatabaseEntryInsertAndLock
PsSetThreadHardErrorsAreDisabled
??_C@_1CG@NPKJLHPB@APEG?$AAC?$AAr?$AAa?$AAs?$AAh?$AAD?$AAu?$AAm?$AAp?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
ExpLastShutDown
MiCaptureAndResetWorkingSetAccessBits
szBias
??_C@_1DK@NLMMDHLO@APEGOCSN?$AAT?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
IoAllocateErrorLogEntry
DECREMENT_SCATTER_GATHER_LISTS
??_C@_1BE@FOEFLAKJ@APEG?$AAP?$AAh?$AAa?$AAn?$AAt?$AAo?$AAm?$AA?$AA@
KdDisableDebuggerWithLock
??_C@_0OD@NLCPLHCJ@PAGEVRFCAn?5IRP?5dispatch?5handler?5@
IopGenericPackResource
CcNoDelay
IopDeleteDevice
FsRtlIsHpfsDbcsLegal
NtQueryBootEntryOrder
ViFilterStartCompletionRoutine
GUID_DEVINTERFACE_MEDIUMCHANGER
__imp_HalRequestSoftwareInterrupt
CmpSortDriverList
MmCrashDumpVa
HvpFindFreeCell
RtlpExceptionLog
RtlpQueryRegistryDirect
NtPrivilegedServiceAuditAlarm
??_C@_1BO@JBHNJNAA@NITI?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
FsRtlIsFatDbcsLegal
ObDereferenceObjectDeferDelete
??_C@_0EC@MHDCGCAL@PAGEVRFYIO?5SYSTEM?5VERIFICATION?5E@
??_C@_1GA@MMNAGGGI@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAU@
szDaylightName
ObReferenceObjectByName
??_C@_1IC@BKGJBCAE@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?5?$AA?$CI@
wcschr
PopHiberFileDebug
IopDoDeferredSetInterfaceState
FsRtlPrivateInsertLock
SepLsaQueue
ZwQueryInformationPort
??_C@_07FKBKOPOI@PAGELK?$DP?$AA@
??_C@_0L@OACDAINM@INITSystem?$AA@
WmipSystemControl
IopSetFsOperationAccess
ObpDecrementHandleCount
PspLookupKernelUserEntryPoints
??_C@_0BC@GNNBGLJJ@PAGEVRFYIRP_MJ_?$DP?$DP?$AA@
PopPerfDecreaseTimeValue
PopSimulateRegKey
VfZwDuplicateObject
VfZwPowerInformation
HvpRecoverData
KdDumpEnableOffset
RegChangeNotificationGuid
VfZwSetDriverEntryOrder
MmDebugPte
IopWstrBusValues
PpBusTypeGuidInitialize
WmipFindSMBiosTable
MiFinishPageFileExtension
??_C@_1BO@POJCPFAJ@NITI?$AAE?$AAr?$AAr?$AAo?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
RtlUnicodeToCustomCPN
RtlFindMostSignificantBit
CmpRegistryMachineHardwareResourceMapString
NtMapUserPhysicalPagesScatter
SeAppendPrivileges
CcGetActiveVacb
MmQuerySystemCacheWorkingSetInformation
PsMinimumWorkingSet
??_C@_1BO@CMPFHEFK@?$AAW?$AAS?$AAO?$AAC?$AAK?$AAT?$AAR?$AAA?$AAN?$AAS?$AAP?$AAO?$AAR?$AAT?$AA?$AA@
wcsstr
PsGetThreadSessionId
MmMaxTransitionCluster
??_C@_1CO@BEMNDCMB@?$AAE?$AAn?$AAf?$AAo?$AAr?$AAc?$AAe?$AAW?$AAr?$AAi?$AAt?$AAe?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
??_C@_1DM@DOAPAGJP@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?$AA@
??_C@_1BC@OKMCNIOK@?$AAI?$AAH?$AAV?$AAA?$AAU?$AAD?$AAI?$AAO?$AA?$AA@
??_C@_1BO@GPBKECKH@NITI?$AAN?$AAT?$AAO?$AAS?$AAK?$AAR?$AAN?$AAL?$AA?4?$AAE?$AAX?$AAE?$AA?$AA@
??_C@_1EC@KEHLBIKO@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAS?$AAA?$AAM@
ExpRefreshCount
ExpTimeRefreshDpc
SeAliasBackupOpsSid
HdlspSendStringAtBaud
??_C@_1CC@DMIDJKAN@NITI?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAB?$AAo?$AAo?$AAt?$AAC?$AAa?$AAr?$AAd?$AA?$AA@
PopDisplayRequired
ExMapHandleToPointerEx
RtlDowncaseUnicodeString
MiCleanPhysicalProcessPages
ZwReplyWaitReplyPort
ExpSeedHotTags
NlsOemCodePage
NtSetLowEventPair
PerfInfoAddToFileHash
NtOpenThread
KiInitializeKernel
MiSecureVirtualMemory
??_C@_0ID@BFDEPNLJ@PAGEVRFCDriver?5has?5returned?5a?5su@
HvRecoverDataDebug
CmpSearchForOpenSubKeys
CmpGetSymbolicLink
MiProtectVirtualMemory
PopInrushIrpReferenceCount
VfZwFlushInstructionCache
??_C@_1BG@LJEGPPCC@NITI?$AA?2?$AAL?$AAo?$AAg?$AAC?$AAo?$AAn?$AAf?$AA?$AA@
??_C@_1BC@BNDEIMGM@APEG?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
ExpTimeZoneDpc
??_C@_1FC@JNBLKGNJ@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAm?$AAa?$AAr?$AAk?$AAi?$AAn?$AAg?$AA?5?$AAb?$AAo?$AAo?$AAt?$AA?5?$AAp?$AAa@
ViBugCheckInitialControl
VfMajorVerifyNewRequest
PowerStateDisableReasonListHead
ViIrpLogDatabaseLock
IopFreeIrpAndMdls
KernelDemandZeroPte
PiProcessNewDeviceNode
VerifierMmUnmapLockedPages
CmpEnableLazyFlushDpcRoutine
PopPowerStateHandlers
PsLookupThreadByThreadId
MiGrowWsleHash
__imp_HalHandleMcheck
CcPfReferenceProcessTrace
MmCreateProcessAddressSpace
??_C@_17IJHGGEOH@?$AAT?$AAA?$AAG?$AA?$AA@
SeAuditingFileEvents
MxOldSlushDescriptor1
??_C@_0IH@EOLFIINO@PAGEVRFCThe?5version?5field?5of?5the@
IovpCompleteRequest2
RtlHashUnicodeString
ExpCurrentProfileUsage
MiFindImageSectionObject
ViMessageClassFailDriverLogoInFieldMode
NtFilterToken
ZwSetBootOptions
WmipMSMCAEvent_BusErrorGuid
GUID_TARGET_DEVICE_QUERY_REMOVE
MxOldSlushDescriptor2
??_C@_0M@LPADJMJM@PAGEHDLS?$AI?$CFc?$AA@
??_C@_1BG@CKJODHKE@NITI?$AAn?$AAd?$AAi?$AAs?$AA?4?$AAs?$AAy?$AAs?$AA?$AA@
ExpGetHandleInfo
PsGetJobUIRestrictionsClass
SeAuditingFileOrGlobalEvents
SeSystemTokenSource
NtSetHighWaitLowEventPair
IopPerfDriverUniqueMatchId
??_C@_0BM@ICINAOMF@PAGEVRFCPowerActionShutdown?$AA@
SeTokenType
PspJobListLock
RtlDeleteRange
RtlCreateAtomTable
ExfReInitializeRundownProtection
??_C@_0BJ@CLLKOGDP@ZwOpenSymbolicLinkObject?$AA@
??_C@_1EO@NIEOKDBI@NITI?$AA?2?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?2?$AAL?$AAo?$AAw?$AAP?$AAa?$AAg?$AAe?$AAd?$AAP?$AAo?$AAo?$AAl?$AAC?$AAo?$AAn@
IopIrqUnpackRequirement
ObReferenceProcessHandleTable
??_C@_0BP@DCKKNOLE@PAGEVRFCPowerSystemShutdown?4S5?$AA@
??_C@_1CK@IKDFELNN@NITI?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AAP?$AAn?$AAp?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
ArbBootAllocation
_wchartodigit
RtlInsertElementGenericTableAvl
WmipDecrementIrpCount
IoCreateDevice
MiDoCopyMemory
CmSuiteBufferType
GUID_DEVCLASS_SYSTEM
??_C@_0BM@EGKKDNCA@PAGEVRFCIRP_MN_START_DEVICE?$AA@
CcPfParametersWatcher
??_C@_1BM@DMIMACJB@APEG?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AAK?$AAe?$AAy?$AA?$AA@
PspExitApcRundown
CmpDiskFullWarning
RtlDecompressBufferNS
GUID_DEVCLASS_KEYBOARD
??_C@_0EJ@BDMBOKOC@PAGEVRFY?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5?$CK?5HAL?5Veri@
ZwQuerySecurityObject
MiModifiedPageWriterTimerDispatch
??_C@_1BA@HJMJFPDK@APEG?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
NlsUnicodeToMbAnsiData
IopQuerySetAlignmentRequirement
ExInsertTailNBQueue
CmpCheckRegistry2Debug
RtlDeleteRegistryValue
??_C@_0O@DGDHBLML@ZwConnectPort?$AA@
NtAccessCheckByTypeResultListAndAuditAlarm
MiDoPoolCopy
ZwOpenThreadToken
ZwSetTimerResolution
MmMappedPageWriterEvent
ExRundownCompletedCacheAware
ExGetCurrentProcessorCpuUsage
??_C@_1EG@CNPBAIDO@APEG?$AA?2?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?2?$AA0?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AA?$CF?$AA0?$AA8?$AAx?$AA?9?$AA?$CF?$AA0@
ResourceList
xHalMirrorVerify
CcMdlReadNoWaitMiss
??_C@_1CI@GFCNHOJC@?$AAP?$AAo?$AAo?$AAl?$AAT?$AAa?$AAg?$AAB?$AAi?$AAg?$AAT?$AAa?$AAb?$AAl?$AAe?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
PopCompleteFindIrp
PspJobTimeLimitsWorkItem
SeAnonymousAuthenticationId
CmpInitializeHardwareConfiguration
??_C@_19PEIJMLFP@NITI?$AA?4?$AA?4?$AA?$AA@
??_C@_1BK@DFILMBJE@?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
??_C@_1BM@JKLADBPD@?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAs?$AA?$AA@
??_C@_1CG@PBHKGECH@NITI?$AAC?$AAe?$AAn?$AAt?$AAr?$AAa?$AAl?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAo?$AAr?$AA?$AA@
SePublicDefaultUnrestrictedDacl
ExpInterlockedPopEntrySListFault
SeReleaseSecurityDescriptor
NtSetLdtEntries
IoGetDeviceInterfaces
MiFillWsleHash
IopDeleteLegacyKey
IopHardErrorThread
PerfInfoSampledProfileCaching
??_C@_17BNBCBNNG@NITI?$AA?4?$AA?$AA@
DbgkpOpenHandles
WmipProcessEvent
VfBugcheckThrowException
??_C@_1BC@DJCOAHEK@APEG?$AAB?$AAo?$AAu?$AAn?$AAd?$AAs?$AA?$AA@
KiInitialPCR
WmipQuerySetExecuteSI
KeSetKernelStackSwapEnable
IopInitializeBootLogging
??_C@_1CE@FOHJBOIJ@?$AAM?$AAS?$AAI?$AA?5?$AAC?$AAU?$AAS?$AAT?$AAO?$AAM?$AA?5?$AAA?$AAC?$AAT?$AAI?$AAO?$AAN?$AA?$AA@
HdlspDispatch
MiCleanSection
CmLockKcbForWrite
RtlpAtomAllocateTag
xHalInitPowerManagement
IopQueryLegacyBusInformation
??_C@_08ELONDAED@INITv?4?$CFu?$AA@
??_C@_1CK@KGNNLEOC@APEG?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
KiCpuId
??_C@_1M@NEPFDHKI@?$AAC?$AAD?$AAR?$AAO?$AAM?$AA?$AA@
??_C@_1CI@CCKAKIJJ@APEGOCSN?$AAT?$AAS?$AAt?$AAo?$AAr?$AAa?$AAg?$AAe?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
??_C@_1DI@PBOIOMID@NITI?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAW?$AAM?$AAI?$AAD?$AAa?$AAt?$AAa?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
pIoQueryBusDescription
??_C@_1HO@EEFMOLIL@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
ApphelpFreeUnicodeString
InbvCheckDisplayOwnership
ObpLUIDDeviceMapsDisabled
??_C@_0BA@MOGBMDLL@ZwFsControlFile?$AA@
SeServiceSid
HotPatchBuffer
CcPfActivateTrace
??_C@_0BJ@GJJANIEK@ZwQueryInstallUILanguage?$AA@
DbgkpSuspendProcess
KiDivide6432
GUID_BUS_TYPE_DOT4PRT
??_C@_1CG@BJOBLKII@APEGOCSN?$AAT?$AAP?$AAr?$AAi?$AAm?$AAa?$AAr?$AAy?$AAI?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
GUID_DEVICE_WARM_EJECT_VETOED
??_C@_1HE@MCDCNMEF@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAL?$AAa?$AAs?$AAt?$AAK@
XpressEncode
ZwReleaseKeyedEvent
MapperTranslatePnPId
RtlNtStatusToDosErrorNoTeb
??_C@_06PKKILEEE@INIT?$DN?$DO?$AA@
??_C@_1II@GBFCEIMP@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
KiExceptionExit
PopProcessorInformation
??_C@_1CC@OBHLPOMF@APEGOCSN?$AAT?$AAS?$AAc?$AAs?$AAi?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
ExpPoolFlags
KeStartProfile
IopRemoteBootCardInitialized
??_C@_1BI@KANNCEAP@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?$AA@
IoSetSystemPartition
MmGetFileNameForAddress
??_C@_0BP@DCBGHJN@PAGEHDLS?$CF02d?3?$CF02d?3?$CF02d?4?$CF03d?5?3?5?$AA@
??_C@_1CE@DBGKJHHN@?$AAM?$AAS?$AAI?$AA?5?$AAT?$AAR?$AAA?$AAN?$AAS?$AAF?$AAO?$AAR?$AAM?$AA?5?$AAR?$AAE?$AAF?$AA?$AA@
MmSystemSize
VfPutScatterGatherList
KeSetQuantumProcess
CmpLateUnloadHiveWorker
CmpOpenFileWithExtremePrejudice
PsChargeProcessNonPagedPoolQuota
??_C@_0BB@BFEJIOKN@PAGEKDAUTOENABLE?$AA@
RtlSetBits
??_C@_0BF@NDILABKM@PAGEVRFCIRP_MJ_CLOSE?$AA@
HvCheckBinDebug
ObLogSecurityDescriptor
MmDereferenceSegmentHeader
??_C@_0CM@EPKLDPKI@PAGEHDLS?$AN?6?$DMINSTANCE?5CLASSNAME?$DN?$CCB@
MmKernelStackPages
ViDeadlockCanProceed
KeQueryBasePriorityThread
MmCommitSessionMappedView
PsChargeSharedPoolQuota
GUID_DEVCLASS_INFINIBAND
RtlOemStringToCountedUnicodeString
??_C@_1DI@JPLFEBOP@APEGOCSN?$AAT?$AAF?$AAl?$AAo?$AAa?$AAt?$AAi?$AAn?$AAg?$AAP?$AAo?$AAi?$AAn?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAo?$AAr?$AA?$AA@
_mbstrlen
ExpNumberOfNonPagedPools
FsRtlResetLargeMcb
CmpUnmapCmViewSurroundingOffset
InbvPortGetByte
??_C@_0BB@FKIBFMAF@INITCONSTInstall?$AA@
FindFileInfo
KeGetBugMessageText
??_C@_0N@GBFCFAPG@PAGEDOSCALLS?$AA@
??_C@_0EH@OCFLPIJD@PAGECmpFileSetSize?3?7Handle?$DN?$CF08lx@
CmpFeatureBits
MmSecondaryColorNodeShift
PiLastGoodRevertCopyCallback
MiBuildForkPageTable
RtlInitUnicodeStringEx
IopLinkTrackingPortObject
??_C@_1DG@LHEPEEHN@?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAL?$AAa?$AAz?$AAy?$AAF?$AAl?$AAu?$AAs?$AAh?$AAH?$AAi?$AAv?$AAe?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
KeSetAffinityThread
GUID_DEVCLASS_PCMCIA
MiSafeBooted
MiAddMappedPtes
RtlpSingleRangeValidate
??_C@_1M@JGJEDNGC@t?4xe?$AAt?$AA?$CF?$AAx?$AA?$AA@
IovpInternalCompletionTrap
KeCheckIfStackExpandCalloutActive
SeCreatePermanentPrivilege
??_C@_19NHGGBNEB@?$AAL?$AAI?$AAN?$AAK?$AA?$AA@
KdTimerDifference
CmpStashBufferSize
InitNlsTableSize
FsRtlInsertPerFileObjectContext
StackOverflowFallbackSerialEvent
??_C@_15MNCACJLI@?$AA?2?$AA?1?$AA?$AA@
InbvPortPutByte
ExpResourceSpinLock
NtDeleteDriverEntry
RtlIntegerToUnicode
MiVerifyImageHeader
RtlpAddIntersectingRanges
RawClose
NtFlushKey
PopSaveHeuristics
PspDefaultPagedLimit
CcPfUpdateVolumeList
ExGetSessionPoolTagInformation
MiSystemPteNBHead
PopPolicyIrpQueue
??_C@_0CH@KPEDMJMD@PAGEd?3?2srvrtm?2base?2ntos?2wmi?2cons@
NtDisplayString
PopCurrentPowerState
KeRestoreFloatingPointState
WRITE_UCHAR
KiBugCheckData
KeGetCurrentThread
??_C@_0BD@CIFKDNMJ@IofCompleteRequest?$AA@
Kd_ACPI_Mask
PipCreateEntry
CcPinMappedData
CmpDeleteTree
InbvProgressState
GUID_DEVCLASS_TAPEDRIVE
NtGetCurrentProcessorNumber
GUID_TRANSLATOR_INTERFACE_STANDARD
??_C@_1DO@BLMMFEFN@APEG?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?2?$AA?$AA@
MiLargeVaInUse
MmMinimumFreePagesToZero
RtlInitializeStackTraceDataBase
VfFailDeviceNode
NtQueryVolumeInformationFile
PoolTrackTable
RtlCharToInteger
RtlNumberOfClearBits
??_C@_1CC@EJFEGJPG@NITI?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
??_C@_1CK@KPDDCMHM@NITI?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAS?$AAt?$AAa?$AAr?$AAt?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
RtlCrc32Table
ObpTraceNoDeregister
??_C@_0O@EJNMNLDD@INITNOEXECUTE?$AA@
??_C@_0DH@JEHALFHA@PAGEIoStatusBlock?5pointing?5onto?5@
??_C@_1BM@PDONLPOO@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AA3?$AA0?$AA2?$AA?$AA@
ArbQueryConflict
IoSynchronousPageWrite
??_C@_1GK@FBAHLAMC@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
IopTrackLink
FsRtlUninitializeFileLock
WmipSysIdUuid
CmNtGlobalFlag
qsort
PopIdle0
MmZeroingPageThreadActive
??_C@_0BD@LCBNEEEG@PAGEVRFCSWENUM?4SYS?$AA@
ZwOpenIoCompletion
RtlClearBit
HvpGetHiveHeader
??_C@_1CE@LLLFBDPK@?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAS?$AAi?$AAz?$AAe?$AAL?$AAi?$AAm?$AAi?$AAt?$AA?$AA@
HvpRecoverWholeHive
PiProfileUpdateDeviceTreeCallback
KeInitializeProfile
IopGetModeInformation
??_C@_1O@KNINEFBA@?$AAI?$AAH?$AAV?$AAB?$AAU?$AAS?$AA?$AA@
NtLoadKey2
MiDereferenceImports
MiRemoveViewsFromSectionWithPfn
??_C@_1BI@NEDCFKNG@NITI?$AAI?$AAm?$AAa?$AAg?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
PsReaperListHead
IopExecuteHardwareProfileChange
RtlpUnlockAtomTable
MiCachedNonPagedPoolCount
PopIOResume
Kd_ENDOFTABLE_Mask
MiModifiedPageLife
PopClearHiberFileSignature
IopVpbSpinLock
VfZwBreakForVspaceOps
MiDecrementSubsections
_ApphelpCacheDeleteEntry
ExpShutdownWorkerThreads
CcAdjustVacbLevelLockCount
??_C@_1CK@NAHBHDK@APEGOCSN?$AAT?$AAO?$AAt?$AAh?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
KiDebugRoutine
FsRtlNotifyFilterReportChange
MiCreatePageDirectoriesForPhysicalRange
IopWstrAssignedResources
??_C@_1IM@CBAFOBIO@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
ExfReleasePushLock
??_C@_0P@ODPEOFEH@INITKDBGPAGEKD?$AA@
??_C@_1DE@HBHABCPE@?$AAI?$AAd?$AAl?$AAe?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAP?$AAr?$AAo?$AAm?$AAo?$AAt?$AAe?$AAP?$AAe?$AAr?$AAc?$AAe?$AAn?$AAt?$AA?$AA@
KeInsertHeadQueue
NtUnlockVirtualMemory
RtlAppendUnicodeStringToString
MiSessionSpaceEnd
ExpUuidSequenceNumberValid
??_C@_0P@NBNHGLGE@PAGELKSetPower?$AA@
??_C@_1BG@MAJDPFI@NITI?$AAF?$AAi?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
??_C@_1BO@EAFFNCKE@?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AAT?$AAi?$AAm?$AAe?$AAB?$AAi?$AAa?$AAs?$AA?$AA@
??_C@_1CI@BAOLBIAG@APEG?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
??_C@_1FK@DJEKHCP@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
CcPfInitializePrefetcher
xHalMirrorPhysicalMemory
IoCsqRemoveNextIrp
MmFreeContiguousMemorySpecifyCache
CcInitializeCacheManager
??_C@_1BO@NJNALMCI@NITIOCSN?$AAT?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAo?$AAr?$AA?$AA@
??_C@_1CA@IDJGKNKF@NITIOCSN?$AAT?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AAI?$AAD?$AA?$AA@
??_C@_08LKCKJGJG@?4text?3?$CFu?$AA@
CcUnpinFileDataEx
SeLockSubjectContext
PsRestoreImpersonation
CmpFindSubKeyByHash
ObpIncrementHandleDataBase
??_C@_1CM@KCNKCMNL@?$AAM?$AAa?$AAp?$AAA?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAF?$AAr?$AAa?$AAg?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
WmipGECleanup
FsRtlAreNamesEqual
ObpCreateUnnamedHandle
WmipFlushActiveBuffers
PsGetProcessJob
PopSystemRequiredSet
IopDumpControlBlock
IoAllocateController
SepTokenInitialization
??_C@_0DB@DNGLBJLA@?4textPE?5header?5hash?5ID?5comparsio@
ZwApphelpCacheControl
LpcpFreeToPortZone
ExpAllocateLowLevelTable
??_C@_0CC@HENNGHIG@PAGEVRFCIRP_MN_DISABLE_COLLECTIO@
ZwReadFile
WmipBuildMcaCmcEvent
IopWriteSummaryHeader
VfWmiVerifyNewRequest
??_C@_0EN@MNOEOHPO@?4textInitializeSListHead?5unalign@
??_C@_0FC@JKDOFBCH@PAGESharedCacheMap?5still?5has?5dir@
PpHotSwapUpdateRemovalPolicy
??_C@_0CE@OMGMKNO@PAGEVRFCIRP_MN_CANCEL_REMOVE_DEV@
WMIInitialize
WmiReserveWithSystemHeader
__imp_KeQueryPerformanceCounter
??_C@_1BO@OFHJCMJG@APEG?$AAD?$AAu?$AAm?$AAp?$AAF?$AAi?$AAl?$AAe?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
VfZwCreateKey
NtMinorVersion
KiFindFirstSetRight
ExReinitializeResourceLite
DbgkpPostFakeThreadMessages
KeRemoveSystemServiceTable
KiPhysicalProcessors
MiUserFaultRetryMask
VfIrpLogUnlockDatabase
??_C@_0BI@FAAECJJJ@PAGEVRFCIRP_MN_QUERY_ID?$AA@
KiDumpParameterImages
IopMemFindSuitableRange
KdpContext
CmpMarkCurrentValueDirty
IoInitializeRemoveLockEx
ObGetSecurityMode
MmLargeSystemCache
??_C@_1CG@JDBCHHNB@APEG?$AAH?$AAi?$AAb?$AAe?$AAr?$AAE?$AAl?$AAa?$AAp?$AAs?$AAe?$AAd?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
CmpRegistryMachineSystemString
RtlInsertElementGenericTableFullAvl
SeCaptureSubjectContext
??_C@_1O@PCLENAGM@APEG?$AA?4?$AAS?$AAY?$AAS?$AA?$AA@
RtlCutoverTimeToSystemTime
??_C@_0BN@IAIKKEHM@INITKiUserCallbackDispatcher?$AA@
??_C@_1CI@BBKCPMFJ@APEG?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
SeCreatorOwnerServerSid
ObpCreateSymbolicLinkName
??_C@_0BO@OCNLMHJA@HalAllocateCrashDumpRegisters?$AA@
WmipGlobalBufferCallback
??_C@_0BC@JEABGHIF@PAGELKUnspecified?$AA@
PopCreateHiberFileSecurityDescriptor
CmpDoFileSetSize
VfZwSetSystemInformation
NtReleaseMutant
??_C@_1BC@BNJLNOFI@APEG?$AAM?$AAP?$AAI?$AAB?$AAu?$AAs?$AA?$AA@
??_C@_0DP@EJJOGDAG@PAGELKHIBER?3?5I?1O?5time?5?5?5?5?5?$CF3d?4?$CF0@
CmpHashTableSize
MmMapVideoDisplay
WmiQueryTraceInformation
PsGetProcessSectionBaseAddress
CmpCompareNewValueDataAgainstKCBCache
CmpMapPhysicalAddress
PspQueryLdtInformation
??_C@_1CC@EDBKDIJO@NITI?$AAG?$AAr?$AAo?$AAu?$AAp?$AAO?$AAr?$AAd?$AAe?$AAr?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
RtlpCreateHandleForAtom
KeSaveStateForHibernate
VerifierFilterDriverName
??_C@_1CC@ICNJJBPB@?$AAL?$AAa?$AAr?$AAg?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
ZwOpenJobObject
WmipGetPerfCounter
RtlUpcaseUnicodeStringToOemString
??_C@_1CM@JNBOFAHB@?$AAU?$AAP?$AAT?$AAO?$AA_?$AAB?$AAI?$AAN?$AA_?$AAF?$AAI?$AAL?$AAE?$AA_?$AAV?$AAE?$AAR?$AAS?$AAI?$AAO?$AAN?$AA?$AA@
IopFreeDCB
??_C@_0BL@IMDBMKPE@ZwCreateSymbolicLinkObject?$AA@
BBTMemoryDescriptor
MiFindInitializationCode
IopDeferredRegistrationList
ZwEnumerateKey
LpcpNextMessageId
IopInterlockedInsertHeadList
ExpTimeout
KeSetTimerEx
VerifierObfReferenceObject
GlobalLoggerGuid
MmUnloadedDrivers
VfZwWaitForMultipleObjects
CmpSystemHiveHysteresisHitRatio
PiProfileDeviceCount
KdpLowRestoreBreakpoint
KiInitSystem
HvFreeCell
NtCloseObjectAuditAlarm
??_C@_09IDJLKACI@noncached?$AA@
??_C@_1BO@GINEOFLE@APEG?$AAN?$AAe?$AAx?$AAt?$AAP?$AAa?$AAr?$AAe?$AAn?$AAt?$AAI?$AAD?$AA?$AA@
CcAggressiveZeroCount
PpIrpQueryResourceRequirements
UTF8Encode
ZwQueryBootOptions
??_C@_1EK@GPNNLFAO@APEGDHSL?$AAK?$AAR?$AAN?$AAL?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAf?$AAi?$AAn?$AAd?$AA?5?$AAa?$AAn?$AAy?$AA?5?$AAg?$AAr?$AAo@
KdpPrompt
HvIsCellAllocated
ZwInitializeRegistry
RtlFindNextForwardRunClear
??_C@_0EJ@CEHDNHJE@PAGEVRFYExtra?5transfer?5length?5cr@
KdpTimeSlipDpc
NtAllocateUuids
MiGetPageProtection
??_C@_0BA@OMGKHHDA@INITCONSTPCMCIA?$AA@
InitialSP
__security_cookie
CmpSetValueKeyNew
MiAllowWorkingSetExpansion
??_C@_1JG@IJAJAFPC@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
FsRtlMdlReadDev
IoValidateDeviceIoControlAccess
??_C@_1KE@IPDIKBLN@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
ExpDeleteCallback
CcIdleWorkerThreadList
IoQueryFileDosDeviceName
??_C@_1CO@LGDJJGMP@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
PopAdminPolicy
ZwOpenProcessToken
MiRemoveImageSectionObject
KeUserPopEntrySListFaultWow64
??_C@_1BK@ELELIOFJ@NITI?$AAF?$AAl?$AAu?$AAs?$AAh?$AAT?$AAi?$AAm?$AAe?$AAr?$AA?$AA@
RawMountVolume
SdbGetTagFromTagID
MmMapLockedPagesSpecifyCache
KxFlushEntireTb
PsIsSystemThread
KeSetIdealProcessorThread
PiControlQueryTargetDeviceRelation
??_C@_0CD@FKJEPNJO@INITExpInterlockedPopEntrySListE@
PopShutdownQueue
WmipPrepareWnodeSI
SdbpGetNextIndexedRecord
??_C@_1CE@BOPLDLFP@APEG?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAC?$AAd?$AAR?$AAo?$AAm?$AA?$CF?$AAd?$AA?$AA@
RtlUnwind
NtUnloadKeyEx
IopDestroyDeviceNode
IopDeferredRegistrationLock
MiSessionProcessGlobalSubsections
IoPageReadNonPagefileIrpAllocationFailure
KiContinueEx
IopRootDeviceNode
CmpDoFindSubKeyByNumber
IoGetBaseFileSystemDeviceObject
VfZwConnectPort
SeReportSecurityEvent
ZwMakeTemporaryObject
FsRtlPagingIoResourceSelector
CcExtendVacbArray
KdDebuggerEnabled
SeAuditHandleDuplication
SepAccessCheckAndAuditAlarm
NtResetEvent
IopAppendBuffer
NtResumeProcess
ExMinimumLookasideDepth
PspAddProcessToJob
CmRegistryMachineSystemCurrentControlSetEnumRootName
PfVerifyScenarioBuffer
??_C@_0BG@BLPABKLP@PAGEVRFYIRP_MJ_POWER?4?$AA@
CmpNoMasterCreates
_fptrap
IrpMajorNames
FsRtlSafeExtensions
SeAuditingFileEventsWithContext
??_C@_0BD@DHFOEOIC@INITCONSTACPIOemId?$AA@
strcat
g_rgAttributeTags
__imp_VidInitialize
GUID_DEVCLASS_MODEM
ExpDummyGetAtomTable
PspQueryWorkingSetWatch
IovpCheckIrpForCriticalTracking
PiControlDeviceClassAssociation
RtlUnicodeStringToCountedOemString
?enable@?2??DECREMENT_ADAPTER_CHANNELS@@9@9
MiLargeVaRanges
IoCreateNotificationEvent
KiExecuteDpc
PfxFindPrefix
??_C@_0M@LHEBNILJ@PAGEVRFY?$CFs?6?$AA@
WmipLeaveCritSection
CmpDelayDerefKCBWorker
ViSufficientlyBootedForDmaFailure
??_C@_0BHE@IGEAIPKM@?4text?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK@
VfZwOpenTimer
IoWMIWriteEvent
ObDereferenceObjectEx
CmpHiveRootSecurityDescriptor
PpProfileCommitTransitioningDock
??_C@_0O@FMOLBGHC@ZwCreateEvent?$AA@
??_C@_0CL@PIBHOECC@PAGEVRFYBreak?0?5Ignore?0?5Disable?5a@
??_C@_1BE@MAFINNNO@?$AAI?$AAN?$AAD?$AAE?$AAX?$AA_?$AAT?$AAA?$AAG?$AA?$AA@
NtSetTimer
PsReaperWorkItem
SepInitProcessAuditSd
__@@_PchSym_@00@UhieignUyzhvUmglhUvcUfkUlyqUznwGEUvckOlyq@ex
ViDeadlockDeleteThread
MiBuildImportsForBootDrivers
IopWstrRaw
NtEnumerateValueKey
SeExchangePrimaryToken
RtlGetDaclSecurityDescriptor
NtQueryTimerResolution
VfZwFlushVirtualMemory
WmipSaveGuidSecurityDescriptor
??_C@_1FA@PIFIDAJA@NITI?$AA?2?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?2?$AAH?$AAi?$AAg?$AAh?$AAP?$AAa?$AAg?$AAe?$AAd?$AAP?$AAo?$AAo?$AAl?$AAC?$AAo@
CmpFreeValue
SdbReadWORDTag
PsReturnProcessNonPagedPoolQuota
PoRegisterDeviceNotify
??_C@_1DE@GMADOGDK@?$AAM?$AAi?$AAn?$AAi?$AAm?$AAu?$AAm?$AAS?$AAt?$AAa?$AAc?$AAk?$AAC?$AAo?$AAm?$AAm?$AAi?$AAt?$AAI?$AAn?$AAB?$AAy?$AAt?$AAe?$AAs?$AA?$AA@
??_C@_1CI@KMBJBF@APEGOCSN?$AAT?$AAS?$AAm?$AAa?$AAl?$AAl?$AA?5?$AAB?$AAu?$AAs?$AAi?$AAn?$AAe?$AAs?$AAs?$AA?$AA@
PopIdleDefaultPromotePercent
ZwExtendSection
KdIgnoreUmExceptions
MiInitialLargePageSize
MiEnablePagingOfDriverAtInit
??_C@_1BC@DAMPBOIF@?$AAD?$AAM?$AAC?$AAO?$AAN?$AAF?$AAI?$AAG?$AA?$AA@
??_C@_1CC@ICGIMKKN@?$AAR?$AAU?$AAN?$AAT?$AAI?$AAM?$AAE?$AA_?$AAP?$AAL?$AAA?$AAT?$AAF?$AAO?$AAR?$AAM?$AA?$AA@
PsReturnSharedPoolQuota
??_C@_0FC@IOLGOGDL@PAGEVRFYFLUSH?3?5Can?5only?5flush?5?$CFx@
MmPreemptiveTrims
MmHotPatchRoutine
SepDeleteLogonSessionTrack
MmMinAdditionNonPagedPoolPerMb
PopStateCallout
SeSecurityPrivilege
GUID_IO_VOLUME_UNLOCK
MiRemoveWsle
KiAdjustDpcThreshold
StringCbPrintfW
VfIrpLogRecordEvent
RtlLookupFunctionTable
??_C@_1CA@FKDBKHNK@NITI?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
GUID_DEVCLASS_SCSIADAPTER
PpRemoveDeviceActionRequests
__imp_HalQueryRealTimeClock
NtReadFileScatter
??_C@_1CA@HNCMOGDF@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AA?$AA@
CcReferenceFileOffset
WmipEventNotification
IoSetShareAccess
??_C@_17KPMJEAHA@APEG?$AA?$AA?$AA?$AA@
??_C@_0DH@DGAMCINB@?4textA?5driver?5has?5leaked?5?$CFd?5byte@
InbvResetDisplay
NtRequestWakeupLatency
ViDdiBuildWmiRegInfoData
MiReleasePageFileSpace
MiEndOfInitialPoolFrame
WmipDetermineInstanceBaseIndex
??_C@_1BC@NEFJHNBI@?$AAL?$AAS?$AAE?$AAR?$AAM?$AAO?$AAU?$AAS?$AA?$AA@
IopDeviceObjectFromDeviceInstance
KiIdleSummary
RtlSelfRelativeToAbsoluteSD
RtlpCopyAces
PopIrpSerialList
GUID_DEVCLASS_LEGACYDRIVER
??_C@_0BB@CHFFCKNF@?4text?$CFu?4?$CFu?4?$CFu?4?$CFu?$AA@
??_C@_0EB@LNLCJJMJ@PAGEHvpDoWriteHive?$FL10?0?$CFs?$FN?3?5Faile@
MiLdwPopupWorker
ViFlushDoubleBuffer
SepInitializeWorkList
KiInterruptHandler
GUID_DEVICE_INVALID_ID
CmRegistryMachineHardwareDescriptionSystemName
??_C@_1BC@FLJLACIH@?$AAK?$AAB?$AAD?$AAC?$AAL?$AAA?$AAS?$AAS?$AA?$AA@
WmipGEChunkInfo
KeThreadSwitchCounters
??_C@_0CE@CLDCDALM@GUID_TARGET_DEVICE_REMOVE_CANCEL@
??_C@_1BA@POOLOHAD@?$AAC?$AAD?$AAA?$AAU?$AAD?$AAI?$AAO?$AA?$AA@
??_C@_1M@ELGABMNJ@APEG?$AA0?$AA0?$AA9?$AA?$AA@
KiFloatingErrorFault
PopVerifyProcessorPowerPolicy
??_C@_1CG@MOCIPCHL@NITIOCSN?$AAT?$AAP?$AAC?$AAA?$AAT?$AA_?$AAE?$AAN?$AAH?$AAA?$AAN?$AAC?$AAE?$AAD?$AA?$AA@
SepAdtLogAuditRecord
IopQueryReconfiguration
CmpCallBackVector
CcGetFlushedValidData
NtSetSystemPowerState
MiFlushCacheForAttributeChange
ExDesktopOkToCloseProcedureCallout
IopRaiseHardError
??_C@_1BA@JKCEGEJL@APEG?$AAE?$AAn?$AAu?$AAm?$AA?2?$AA?$AA@
??_C@_0BA@ODLAGFHJ@ZwCreateSection?$AA@
ZwCreateMutant
PopUpdateAllThrottles
KdpReportExceptionStateChange
??_C@_0BP@LFFHOCBK@PAGEVRFCIRP_MN_QUERY_RESOURCES?$AA@
??_C@_1BK@KOLEIOGI@?$AAP?$AAR?$AAO?$AAD?$AAU?$AAC?$AAT?$AA_?$AAN?$AAA?$AAM?$AAE?$AA?$AA@
KiProcessListLock
FsRtlCancelWaitIrp
PopAllocateHiberContextCallback
MmProbeAndLockPages
PipGetDriverTagPriority
RtlDecompressFragmentLZNT1
??_C@_1CC@BBPJJLDI@APEG?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
MmGetSectionRange
MiSessionBigPoolPages
MiHandleForkTransitionPte
??_C@_0FE@LAHHIGK@PAGEHDLS?$AN?6?$DMPROPERTY?5NAME?$DN?$CCSTOPCO@
WmipPrepareForWnodeAD
PspFoldProcessAccountingIntoJob
??_C@_0N@OBHHFNCO@ZwResetEvent?$AA@
SePrivilegedServiceAuditAlarm
??_C@_0DD@OBBAFPGJ@PAGE?6?5Subkeys?5open?5inside?5the?5hi@
PopGetRangeCount
VfZwSetInformationFile
ExpPoolIndex
NtShutdownSystem
PipApplyFunctionToSubKeys
CmpAdjustSecurityCacheSize
CmQueryKey
SepSidInTokenEx
SeMakeSystemToken
xHalGetInterruptTranslator
PpProfileQueryHardwareProfileChange
GUID_DEVCLASS_ADAPTER
RtlDescribeChunkLZNT1
??_C@_0IE@EJAPMFHA@PAGEVRFCA?5driver?5has?5set?5both?5th@
CmpGenInstall
MmGrowKernelStack
PsGetThreadProcess
??_C@_0N@DCLJIBGH@INITCONSTv?59?$AA@
PopEventCallout
ExGetSharedWaiterCount
??_C@_1DO@CFPIGLJP@?$AAP?$AAe?$AAr?$AAf?$AAD?$AAe?$AAg?$AAr?$AAa?$AAd?$AAe?$AAT?$AAh?$AAr?$AAo?$AAt?$AAt?$AAl?$AAe?$AAM?$AAi?$AAn?$AAC?$AAa?$AAp?$AAa?$AAc?$AAi?$AAt?$AAy?$AA?$AA@
MiAllocatePoolPages
ZwWriteFile
NtCreateJobObject
MiUseLargeDriverPage
PipCallDriverAddDevice
IopCleanupSelectedConfiguration
??_C@_0CM@LFCFBIPK@PAGELKHIBER?3?5Elapsed?5time?5?$CF3d?4?$CF0@
??_C@_1JI@CKIMAGLH@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2@
GUID_BUS_TYPE_MCA
??_C@_0BM@DGCGADMP@PAGEVRFCIRP_MN_WRITE_CONFIG?$AA@
??_C@_0CD@NOLGJMJB@INITLSA_AUTHENTICATION_INITIALIZ@
FsRtlNotifyInitializeSync
CmpFindSecurityCellCacheIndex
WmipInUseRegEntryHead
GUID_DEVCLASS_FSFILTER_HSM
ExpSessionPoolTrackTableSize
IopCompleteRequest
MiIsEntireRangeCommitted
SeFilterToken
CmSaveMergedKeys
MiExpandSpecialPool
IoPerfCompleteRequest
CmBrand
VfZwNotifyChangeKey
VidSolidColorFill
CcPfGetCompletedTrace
CmpMarkValueDataDirty
CmpRemoveSubKey
IovpCompleteRequest3
PopPerfIncreaseAbsoluteModifier
??_C@_19DBABIMLO@?$AAS?$AAH?$AAP?$AAC?$AA?$AA@
PerfGlobalGroupMask
NtFreeUserPhysicalPages
PopApplyThermalThrottle
WmipTranslatePDOInstanceNames
KxContextToKframes
MmSizeOfNonPagedPoolInBytes
ExpThreadSetManagerEvent
??_C@_1BI@GHLJONFJ@NITI?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?$AA@
IopErrorLogDpc
??_C@_0O@GEECOJIH@INITCONST?$ICNCR?$AA@
KeSetAutoAlignmentThread
IopSafebootDriverLoad
SepVariableInitialization
VerifierKeInitializeTimer
??_C@_1BE@NJDEJMON@?$AAL?$AAS?$AAA?$AA?2?$AAa?$AAu?$AAd?$AAi?$AAt?$AA?$AA@
KeInitializeDpc
PopProcessorPolicy
PoSystemIdleWorker
SepFilterPrivileges
??_C@_1BE@GMGIMNDD@APEG?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
NtUnlockFile
RtlpInterlockedPushEntrySList
??_C@_0M@CCILBBII@PAGELKRetry?$AA@
KeInitializeApc
SeRemoteShutdownPrivilege
??_C@_1CA@OGJAFOOC@?$AAA?$AAP?$AAP?$AAL?$AAY?$AA_?$AAA?$AAL?$AAL?$AA_?$AAS?$AAH?$AAI?$AAM?$AAS?$AA?$AA@
CmSetValueKey
Kd_TWOTRACK_Mask
CcPreparePinWrite
KeQueryRuntimeProcess
IopQueryXxxInformation
GUID_IO_DISK_LAYOUT_CHANGE
??_C@_0EE@HELEMCBK@PAGEVRFYMaster?5devices?5should?5re@
MmFreeGoal
KdpBreakpointTable
??_C@_0N@NBENFIKM@INITCONSTv?52?$AA@
??_C@_1BE@DJHAJDEM@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAv?$AAe?$AA?$AA@
CmpProcessReg
CmpPostApcRunDown
??_C@_17JAOENEEM@?$AAW?$AAM?$AAI?$AA?$AA@
MiFreeSessionSpaceMap
SystemTraceControlGuid
MmSystemProcessWorkingSetMin
??_C@_06MELJLNJD@INIT?$CB?$DN?$AA@
MiSessionPoolStart
DbgkDebugObjectType
CcGetFileObjectFromSectionPtrs
??_C@_0BA@GJOBDCAM@ZwSetSystemTime?$AA@
RealSuccessor
MiSegmentDelete
ViGenericIsNewRequest
MiInitializeSpecialPool
WmipDataProviderPnPIdInstanceNamesGuid
RtlpAllocateAtom
CmpDelayDerefKCBLock
FsRtlOpBatchBreakClosePending
KiPcToFileHeader
WmipShutdown
VfZwOpenFile
??_C@_1CK@LNJCDIOC@APEG?$AAM?$AAU?$AAI?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AA?$AA@
??_C@_1FC@JFIHCDOL@APEG?$AA?$HL?$AA8?$AAE?$AAC?$AAC?$AA0?$AA5?$AA5?$AAD?$AA?9?$AA0?$AA4?$AA7?$AAF?$AA?9?$AA1?$AA1?$AAD?$AA1?$AA?9?$AAA?$AA5?$AA3?$AA7?$AA?9?$AA0?$AA0?$AA0?$AA0?$AAF@
??_C@_0BG@BDHJIAKK@INITCONSTACPIRevision?$AA@
IovpCancelIrp
MapperValueSeed
SepExamineSaclEx
MiExpansionPoolPagesInUse
??_C@_1CI@MKECPLIE@APEG?$AAM?$AAa?$AAx?$AAN?$AAu?$AAm?$AAS?$AAa?$AAv?$AAe?$AAd?$AAT?$AAr?$AAa?$AAc?$AAe?$AAs?$AA?$AA@
InbvSetProgressBarCoordinates
_wcsrev
PoRequestPowerIrp
??_C@_0BB@MMGEPNNL@PAGEUniprocessor?$AA@
PsGetNextProcess
NlsOemToUnicodeData
IopInitializeResourceMap
??_C@_1BI@PIMBKOIO@APEG?$AAA?$AAc?$AAp?$AAi?$AAA?$AAl?$AAi?$AAa?$AAs?$AA?$AA@
??_C@_1FI@HIHKMOBF@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAH?$AAA?$AAR?$AAD?$AAW?$AAA?$AAR?$AAE?$AA?2@
CmpPrefetchHiveFile
RtlpUnwindOpSlotTable
KiProcessOutSwapListHead
??_C@_0DD@NPIMEIIN@PAGEHDLSrestart?5?5Restart?5the?5sys@
MmUnlockPages
IopReserveIrpAllocator
IopCancelAlertedRequest
PopInvalidNotifyBlockCount
KiRestoreProcessorControlState
??_C@_0BG@EMHFEHPC@ZwSetDriverEntryOrder?$AA@
GUID_DEVCLASS_DOT4
DbgkForwardException
??_C@_1BO@BKEHPMEF@APEG?$AAF?$AAo?$AAr?$AAc?$AAe?$AAd?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
MiDispatchFault
MmTriageActionTaken
WmipPollingDpcRoutine
??_C@_0EH@CEMONDGM@?4textDriver?5did?5not?5flush?5adapte@
??_C@_0CH@HBLLEPBN@PAGECritical?5process?50x?$CFp?5?$CI?$CFs?$CJ?5e@
??_C@_1CO@LBPIDPKG@APEG?$AAI?$AAN?$AAI?$AAT?$AA?5?$AAD?$AAA?$AAT?$AAA?$AAB?$AAA?$AAS?$AAE?$AA?5?$AAF?$AAA?$AAI?$AAL?$AAE?$AAD?$AA?$AA@
NtStartProfile
PopApplyAttributeState
ObpDeviceMapLock
SeInteractiveSid
??_C@_0EP@IMCNGLNH@?4textWithout?5a?5debugger?5attached@
RtlDelete
KdpSendTraceData
CmpFreeKCBListHead
PiGetRelatedDevice
PoolBigPageTableSize
ViBugCheckParamTable
MiWriteProtectSystemImage
PopUnlockAfterSleepWorker
WmipGEHead
HvShrinkHive
IoGetInitialStack
ArbpQueryConflictCallback
IopResourceRequirementsListToReqList
ZwSetDefaultLocale
CcDrainVacbLevelZone
ExpFreeTablePagedPool
??_C@_0BD@NIKPMALD@INITCONSTNextMatch?$AA@
IopFreeReqList
CmpMatchDateRule
PiControlUserResponse
??_C@_0BB@ENLGGDKH@INITKDBGPAGESPEC?$AA@
FstubWriteHeaderEFI
SepExamineSacl
KDCOM_NULL_THUNK_DATA
GUID_DEVCLASS_IMAGE
ExpPoolBigEntriesInUse
PsGetProcessExitStatus
MmCriticalSectionTimeout
PopAttributes
IopCompletionLock
GUID_BUS_TYPE_INTERNAL
ExpBootFinishedTimerDpc
ExWaitForUnblockPushLock
??_C@_1CG@OJLOKBPL@APEG?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAr?$AAe?$AAd?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AA?$AA@
MiInsertWsleHash
MiSectionInitialization
??_C@_1CC@NBPKMPDA@APEG?$AA?$CK?$AAN?$AAe?$AAw?$AAl?$AAy?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAd?$AA?$CK?$AA?$AA@
KeProcessorArchitecture
??_C@_1BM@HIOAMAHO@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AAF?$AA0?$AA8?$AA?$AA@
RtlpGetStackLimits
ExpWin32OpenProcedure
VfReadDmaCounter
PspSetPrimaryToken
InbvSetScrollRegion
??_C@_19JCAOHIEH@?$AAB?$AAo?$AAo?$AAt?$AA?$AA@
??_C@_1CC@OEHMJDHJ@APEG?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAl?$AAo?$AAa?$AAd?$AA?$AA@
PcAnsiToUnicode
MiStartOfInitialPoolFrame
ZwQueryInformationProcess
RtlNumberGenericTableElementsAvl
GUID_PCI_DEVICE_PRESENT_INTERFACE
ExpUuidLock
BestCaseFill
IopLinkTrackingServiceEvent
IovCompleteRequest
??_C@_0L@GMNHFDKO@PAGELK?$CFs?3?5?$AA@
??_C@_0CA@CPCLBILF@PAGEVRFCIRP_MN_REMOVE_DEVICE?5?9?5?$AA@
??_C@_1BA@GACOBJMJ@APEG?$AAS?$AAB?$AAP?$AA2?$AA?2?$AA?$AA@
SeAuditPrivilege
ExpPagedPoolMutex
SdbpVerQueryValue
xHalInitPnpDriver
IopTranslatorHandlerIo
NtAreMappedFilesTheSame
??_C@_0P@GGNCMCPH@PAGEVRFY?$CITrue?$CJ?$AA@
CmpSyncSubKeysAfterDelete
IopAssignResourcesToDevices
IopCallBootDriverReinitializationRoutines
??_C@_1DI@HCEHANEM@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAA?$AAM?$AA?2?$AAS?$AAA?$AAM?$AA?$AA@
ExpBootFinishedTimer
ExpAllocateTablePagedPool
xHalQueryBusSlots
??_C@_0BH@KLIAFKCO@PAGEVRFY?0?5InPath?$DNTRUE?$CJ?$AA@
PspCidTable
IopBootLogToFile
RtlLockBootStatusData
KeClearTimer
IoGetRequestorProcessId
KiTimerExpiration
CcCopyReadWait
CcDeallocateBcb
PopSimulateRegName
ExpLastTimeZoneBias
NtAccessCheckByTypeAndAuditAlarm
IoLoaderArcBootDeviceName
??_C@_1BC@HFHCGFMH@APEG?$AAD?$AAo?$AAc?$AAk?$AAI?$AAD?$AA?$AA@
WmipForwardWmiIrp
WmipGetFreeBuffer
NtReadVirtualMemory
SdbpGetHeaderAttributes
PspGetContext
PopDemoteIdleness
??_C@_0BC@FNJGGJEK@INITRDIMAGEOFFSET?$AA@
vsprintf
??_C@_1O@EGMJLLKA@t?4xe?$AAt?$AA?3?$AA?$CF?$AAu?$AA?$AA@
CmControlVector
PopHiberComplete
CmpCheckValueList
IoInitializeCrashDump
MiMapViewInSystemSpace
RtlNtStatusToDosError
PiIrpQueryRemoveDevice
WmipDisableTraceProviders
ZwNotifyChangeMultipleKeys
??_C@_1BI@IEDPGDNO@APEG?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAv?$AAe?$AA?$AA@
??_C@_1CC@HOHLGPCL@?$AAM?$AAo?$AAd?$AAi?$AAf?$AAi?$AAe?$AAd?$AAP?$AAa?$AAg?$AAe?$AAL?$AAi?$AAf?$AAe?$AA?$AA@
MiUnlinkWorkingSet
??_C@_1DI@OGLIBBHD@?$AAP?$AAe?$AAr?$AAf?$AAI?$AAn?$AAc?$AAr?$AAe?$AAa?$AAs?$AAe?$AAP?$AAe?$AAr?$AAc?$AAe?$AAn?$AAt?$AAM?$AAo?$AAd?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?$AA@
PopNotifyDevice
SdbpBinarySearchFirst
_flsbuf
ZwRaiseHardError
WmipVerifyLoggerInfo
IopAcquireFileObjectLock
WmipQueryGuidInfo
??_C@_0M@MLCGKKKL@INITEXECUTE?$AA@
??_C@_1FE@FMEMCOM@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr@
DeviceStateNames
KeInitializeEvent
MmSystemCacheWsMinimum
RtlEnumerateGenericTableWithoutSplaying
??_C@_1CI@ECBCKNIN@APEG?$AAR?$AAe?$AAs?$AAe?$AAr?$AAv?$AAe?$AAd?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAs?$AA?$AA@
IopQueryFsOperationAccess
__@@_PchSym_@00@UhieignUyzhvUmglhUxzxsvUfkUlyqUznwGEUxxOlyq@cache
??_C@_1CK@KMFCKJPP@?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
__imp_HalSetTimeIncrement
PspCreateProcessNotifyRoutine
PpHotSwapGetDevnodeRemovalPolicy
MiDeferredUnlockPages
MiInPageSingleKernelStack
??_C@_1EO@PMMLBCDN@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4@
WmipIsWbemRunningDpc
IoSetStartIoAttributes
MiGetWorkingSetInfoList
PspWorkingSetChangeHead
CcPfEndTraceWorkerThreadRoutine
ZwLoadKey
MiAllocateSpecialPool
MiMarkPoolLargeSession
ZwDuplicateToken
CmpSystemHiveHysteresisHigh
??_C@_1BO@FEGNNCPL@APEG?$AAT?$AAu?$AAr?$AAb?$AAo?$AAC?$AAh?$AAa?$AAn?$AAn?$AAe?$AAl?$AA?$AA@
IopCheckVpbMounted
??_C@_0BL@ENCCPAMK@GUID_DEVICE_REMOVE_PENDING?$AA@
??_C@_1BO@NKKJJFP@?$AAT?$AAr?$AAa?$AAc?$AAe?$AAA?$AAl?$AAi?$AAg?$AAn?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
ExpWorkersCanSwap
RtlEqualString
IopErrorLogGetEntry
??_C@_0DD@EPMHLJG@?4textFailed?5to?5normalize?5PE?5head@
NtQueryDefaultUILanguage
MmUnusedSegmentCount
??_C@_07GOBHKBPN@INITSOS?$AA@
??_C@_0CE@MCMMNDMI@PAGE?7?$CF08I64X?3?5VA32?5?$CF08X?5?9?$DO?5?$CF08X?5@
PopCompleteSystemPowerIrp
IopWarmEjectLock
MiInitializeTransitionPfn
PopSimulate
NtTestAlert
RtlValidAcl
MmPrefetchPages
KiRaiseException
PiControlQueryConflictList
HvpFindFreeCellInThisViewWindow
??_C@_0BH@PJNIMGNG@INITNOEXECUTE?$DNALWAYSON?$AA@
??_C@_1BM@OBLFLIDP@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AAF?$AA0?$AAE?$AA?$AA@
Kd_CDAUDIO_Mask
MiSessionWideVaBitMap
NlsMbOemCodePageTables
VfZwOpenSymbolicLinkObject
MmSystemCacheWs
SdbpGetMappedData
CmpUpdateSystemHiveHysteresis
??_C@_0EA@LPEKHMLM@PAGEValidation?5failure?4?5Source?5?$DN@
gSearchAddress
WmipAddProviderIdToPIList
InternalBreakpointCheckDpc
??_C@_1BO@NGHCFKNA@APEG?$AAM?$AAi?$AAc?$AAr?$AAo?$AAC?$AAh?$AAa?$AAn?$AAn?$AAe?$AAl?$AA?$AA@
??_C@_0O@GNHDHGE@INITCONST?$IBAU2?$AA@
??_C@_19IFFENJMA@?$AAT?$AAI?$AAM?$AAE?$AA?$AA@
PiProfileDeviceListLock
Kd_VSSDYNDISK_Mask
CcDirtyPageTarget
KiIpiProcessRequests
PipDeviceActionWorker
CmpCheckLexicographicalOrder
KeFindConfigurationNextEntry
NtSignalAndWaitForSingleObject
CmSuiteBufferLength
PiUpdateDriverDBCache
MiMapViewOfDataSection
ViSpecialFreeCommonBuffer
ObDeleteCapturedInsertInfo
??_C@_1BA@BFNBODGB@?$AAW?$AAM?$AAI?$AAC?$AAO?$AAR?$AAE?$AA?$AA@
SeAssignPrimaryTokenPrivilege
??_C@_0BA@BMDCPOLM@ZwOpenJobObject?$AA@
??_C@_1O@EKLIFOHD@NITI?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
KdpCopyMemoryChunks
ViBugCheckControlOverride
NtVdmControl
szDaylightStart
KeInsertQueueApc
ObClearProcessHandleTable
RtlUpcaseUnicodeToMultiByteN
CmpMapCmView
IopCreateArcNamesCd
__@@_PchSym_@00@UhieignUyzhvUmglhUkviuUfkUlyqUznwGEUkviukOlyq@perf
GUID_BUS_TYPE_IRDA
xHalRegisterBusHandler
MmMarkPhysicalMemoryAsGood
IopBootLog
KeLargestCacheLine
WmipFinalizeHeader
RtlSubtreeSuccessor
CmpDelayCloseWorkItemActive
??_C@_09MFJCLPLH@?4text?$CF?$CF?$CFu?$AA@
KdEnableDebugger
PspJobTimeLimitsWork
IoWMIAllocateInstanceIds
IopDmaUnpackResource
ApphelpCacheInsertEntry
CmRegistryMachineHardwareResourceMapName
Kd_W32TIME_Mask
VfZwRestoreKey
??_C@_0BD@BJMMIMNH@ZwSetDefaultLocale?$AA@
??_C@_0DC@ONMMHLLH@INITCmpFindACPITable?3?5Cannot?5map@
PiLockDeviceActionQueue
IopGetRegistryKeyInformation
FsRtlAddMcbEntry
KdDeleteAllBreakpoints
IopPortFindSuitableRange
??_C@_0M@GDPKHEED@INITStrings?$AA@
??_C@_1CI@PNINLHEA@?$AAM?$AAS?$AAI?$AA_?$AAT?$AAR?$AAA?$AAN?$AAS?$AAF?$AAO?$AAR?$AAM?$AA_?$AAT?$AAA?$AAG?$AAI?$AAD?$AA?$AA@
??_C@_1BM@NBCOAEHL@NITI?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
GUID_DEVCLASS_CDROM
MiSpecialPoolFirstPte
PspQueueApcSpecialApc
PiLoggedErrorEventsMask
ExCompareExchangeCallBack
ObpStacksPerObject
CmpSelfHeal
CcPfLogPageFault
ViDdiClassFailDeviceLogo
CcTune
CcPurgeCacheSection
MmCreateKernelStack
PopInrushIrpPointer
PiProcessResourceRequirementsChanged
??_C@_1BK@NIIHNGOB@?$AAE?$AAX?$AAE?$AA_?$AAI?$AAD?$AA?$CI?$AAG?$AAU?$AAI?$AAD?$AA?$CJ?$AA?$AA@
ZwSetHighEventPair
MiSpecialPagesNonPaged
FsRtlGetCompatibilityModeValue
WmiTraceMessageVa
VfRealHalAllocateMapRegisters
HvMapHive
WmipSendEnableDisableRequest
??_C@_0BB@MINDJCFK@GUID_DEVICE_NOOP?$AA@
KeReleaseMutant
PpProfileIncludeInHardwareProfileTransition
WmipMSMCAEvent_InvalidErrGuid
??_C@_0BH@DLOJOCLP@ZwQueryInformationFile?$AA@
??_C@_1BO@BDJLIJPK@t?4xe?$AAt?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?$AA@
ZwSetInformationToken
IopGetResourceRequirementsForAssignTable
??_C@_0DK@KEFKLANK@PAGEVRFYBreak?0?5Ignore?0?5Zap?0?5Remo@
ObQueryNameString
??_C@_1O@IOIKEICA@APEG?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
??_C@_0BM@JENEBOPH@PAGEPhar?5Lap?5Software?0?5Inc?4?$AA@
ZwMapUserPhysicalPages
GUID_DEVINTERFACE_STORAGEPORT
KiHardwareTrigger
MiCreateImageFileMap
RtlAddAtomToAtomTable
MmUnmapViewInSystemCache
ExInitSystem
ObpInsertHandleCount
MmCheckCachedPageState
PoShutdownBugCheck
??_C@_0CH@MBADEKDL@PAGEHDLS?9?9?9?9Press?5?$DMEnter?$DO?5for?5mo@
PiBuildUnsafeRemovalDeviceBlock
MiUnmapLargePages
??_C@_0BH@IPIGODMO@PAGE?7?$CF08I64X?3?5Unknown?6?$AA@
ValidKernelPte
IoOtherOperationCount
ZwSetInformationThread
FsRtlAcknowledgeOplockBreak
ZwNotifyChangeDirectoryFile
ExReleaseResourceAndLeaveCriticalRegion
??_C@_1CI@FGJPALLL@APEGOCSN?$AAT?$AAT?$AAa?$AAp?$AAe?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
MiGetNextNode
MmTotalPagedPoolQuota
NtQueryDirectoryObject
MiSpecialPagesInUsePeak
FstubReadPartitionTableMBR
KeRestoreProcessorSpecificFeatures
??_C@_0JH@GCOEALMI@PAGEVRFCNon?9successful?5non?9STATU@
PopDispatchAcDcCallback
??_C@_0N@CLKCLACG@INITCONSTv?58?$AA@
??_C@_0DO@BEECAIKC@PAGEHvpDoWriteHive?$FL13?0?$CFs?$FN?3?5Faile@
IopGroupListHead
ObReferenceObjectByHandle
VfZwCreateSection
ExGlobalAtomTableCallout
??_C@_1BA@BLONPGFC@?$AAB?$AAU?$AAR?$AAN?$AAE?$AAN?$AAG?$AA?$AA@
CcPfQueryVolumeInfo
KiSystemServiceHandler
ObpTracePoolTagsBuffer
KeInitializeTimerEx
PopDumpStatistics
MiFindEmptyAddressRangeInTree
ZwTraceEvent
StringCbPrintfExW
KiInterruptInitTable
SeCheckAuditPrivilege
ZwSetDefaultHardErrorPort
ExpWin32OkayToCloseProcedure
IoRegisterPlugPlayNotification
KeBugCheckUnicodeToAnsi
??_C@_0KM@EBIDNMGM@PAGEVRFCCaller?5is?5completing?5an?5@
SeCloseObjectAuditAlarm
CcAggressiveZeroThreshold
WmipTraceVolMgr
MmZeroPageThread
PopFindLoadedModule
MiAttachAndLockWorkingSet
PoolTrackTableExpansionPages
??_C@_1BG@DOFDKBOE@t?4xe?$AAt?$AAP?$AAC?$AAI?$AA?5?$AAb?$AAu?$AAs?$AA?$AA@
ValidKernelPde
MiUnProtectFreeNonPagedPool
??_C@_1M@INDAALOD@APEG?$AAM?$AAf?$AAg?$AA?$AA@
KeBoostPriorityThread
MmWriteTriageInformation
GUID_ACPI_INTERFACE_STANDARD
ZwWaitLowEventPair
??_C@_0OP@NOJLIILC@PAGEVRFCA?5driver?8s?5completion?5ro@
??_C@_0M@KFOIKFDM@INITCONSTv9?$AA@
ZwQueryInformationToken
ZwCreateIoCompletion
FsRtlNotifyCompletion
FsRtlLegalAnsiCharacterArray
FsFilterPerformCompletionCallbacks
CcGetFileObjectFromBcb
LdrpCompareResourceNames_U
CmpDereferenceHiveViewWithLock
??_C@_1BI@FOBBICBE@APEG?$AAt?$AAr?$AAa?$AAc?$AAe?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
WmipUnregisterGuids
xKdSetupPciDeviceForDebugging
VfZwOpenKey
RtlpCopyRangeListEntry
WmipFirmwareTableHandler
PiDDBPath
IopGetRegistryValue
FstubGetDiskGeometry
??_C@_09EBKIFMJK@PAGEVRFY?$CI?$AA@
??_C@_0BP@KDGDOALD@PAGEVRFY?$CITargetDeviceRelation?$CJ?$AA@
??_C@_1BI@PFHGBGGN@NITI?$AAS?$AAe?$AAm?$AAa?$AAp?$AAh?$AAo?$AAr?$AAe?$AA?$AA@
Mi4dFiles
VerifierModifyableOptions
??_C@_0M@DIPDOEGK@PAGEVRFCIrp?$AA@
??_C@_1CG@KJCGOJMP@APEG?$AAF?$AAi?$AAr?$AAm?$AAw?$AAa?$AAr?$AAe?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
??_C@_0BK@HLPHCICI@PAGEVRFCCORE?5DRIVER?5ERROR?$AA@
??_C@_1BA@OEAEEGOP@?$AAD?$AAM?$AAS?$AAY?$AAN?$AAT?$AAH?$AA?$AA@
??_C@_1DG@COMIKFP@NITIOCSN?$AAT?$AAN?$AAE?$AAC?$AA?5?$AAP?$AAC?$AA?9?$AA9?$AA8?$AA0?$AA0?$AA?5?$AAB?$AAU?$AAS?$AA?5?$AAM?$AAO?$AAU?$AAS?$AAE?$AA?$AA@
Kd_SIS_Mask
IoPageRead
ZwEnumerateValueKey
ApphelpCacheRemoveEntry
IopInterlockedIncrementUlong
ObpMaxStacks
Win32kFullPath
ZwQueryTimerResolution
IovBuildDeviceIoControlRequest
PiControlGetInterfaceDeviceAlias
??_C@_1BA@DJFANEKO@APEG?$AAA?$AAl?$AAi?$AAa?$AAs?$AA?$AA@
??_C@_19PFAHKINO@?$AAS?$AAH?$AAI?$AAM?$AA?$AA@
CmpMatchDescription
WmiQueryTrace
MiChargeResidentAvailable
??_C@_1BG@IJPNAOHM@NITI?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
NtExtendSection
PspJobInfoAlign
??_C@_0BL@EKOGPNHJ@PAGEVRFCIRP_MN_QUERY_POWER?$AA@
??_C@_1BE@DCLNNKKE@NITI?$AAE?$AAI?$AAS?$AAA?$AA?2?$AA?$CF?$AAs?$AA?$AA@
CmRegistryUserName
IopReallocateResources
CmpSystemQuotaWarningPopupDisplayed
MiDeletePte
WmipLookupLoggerIdByName
MmFreeNonCachedMemory
MmSessionSpace
MmPagedPoolPage
MiTriageActionStrings
PpQueryBusInformation
MmUnlockPagableImageSection
Kd_SXS_Mask
HalpNextDriveLetter
??_C@_0NA@FEDHJHHG@PAGEBreak?5top?5of?5XIPLocatePages?4@
ExInterlockedPopEntryList
HvpAllocateMap
FsRtlFreeLockTreeNode
??_C@_17BLMAKGOG@t?4xe?$AAt?$AA?$AA@
??_C@_1BA@HJDGPDHJ@APEG?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAd?$AA?$AA@
PspCreateProcess
KiQueueReadyThread
IoAssignDriveLetters
NtMakeTemporaryObject
IoSetThreadHardErrorMode
ValidPtePte
SeAliasUsersSid
ObpProtectionMode
MiEnumerateGenericTableWithoutSplayingAvl
ZwResetEvent
ZwResumeProcess
KeConnectInterrupt
PopFailedHibernationAttempt
IopUnlockMountedDeviceForRemove
ExCreateCallback
ZwSetTimer
DbgkpPostFakeModuleMessages
??_C@_1BG@KNCIKEEB@APEG?$AAM?$AAc?$AAa?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
MmPoolCodeStart
ExDesktopOpenProcedureCallout
PopRequestedIrps
??_C@_1BM@PGPJNNHC@APEG?$AAA?$AAl?$AAl?$AAo?$AAc?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
ExpTimeZoneWork
MiVerifyAllDrivers
ViMessageClassFailDriverLogo
ExAllocatePoolWithTagPriority
CmCompressKey
RtlGetNextRange
Kd_SERIAL_Mask
ZwSetSystemPowerState
??_C@_17HIBBPOGF@?$AAS?$AAX?$AAS?$AA?$AA@
RtlSubAuthoritySid
KeRemoveQueueApc
MiInitializeLoadedModuleList
wcscmp
NtCreateMutant
KdBlockEnable
ExpCenturyDpcRoutine
MiMakeControlAreaRom
??_C@_1BM@CKFFBPKC@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AA3?$AA0?$AAa?$AA?$AA@
MmPoolFailures
CmCheckRegistry
KiLastProcessor
IopLegacyBusInformationTable
KdSave
VfZwSetSystemTime
PsJobType
WmipRegistrationSpinLock
RtlInitializeGenericTableAvl
CcCopyReadWaitMiss
PoolHitTag
MiSystemPteSListHead
VfIrpDatabaseEntryReleaseLock
??_C@_0BL@DKEEDJIK@PAGEVRFCIRP_MN_READ_CONFIG?$AA@
MmFrontOfList
ZwShutdownSystem
WmipFlushBuffer
SepExpandDynamic
IopGetServiceType
WmipUpdateDataSource
VfZwQuerySymbolicLinkObject
MiExpansionPoolPagesInitialCharge
??_C@_17LAJLCPFL@?$AAS?$AAI?$AAS?$AA?$AA@
??_C@_0BI@BPIHCBGG@ZwCreateDirectoryObject?$AA@
??_C@_1JI@EBENKFEM@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
MmMapIoSpace
SepAdtMaxListLength
??_C@_0L@KICNCAKG@ZwReadFile?$AA@
??_C@_1CC@EOKENMMJ@NITI?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAC?$AA?3?$AA?$AA@
KiOpTwoByteTable
VfZwModifyBootEntry
RtlValidRelativeSecurityDescriptor
CcWriteBehind
AcquireOpsEvent
??_C@_1FC@IEHBNAKN@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAH?$AAA?$AAR?$AAD?$AAW?$AAA?$AAR?$AAE?$AA?2@
ZwRequestWakeupLatency
IopMapVirtualToPhysicalMdl
??_C@_1CO@EMOOIIAK@NITI?$AAI?$AAN?$AAI?$AAT?$AA?5?$AAD?$AAA?$AAT?$AAA?$AAB?$AAA?$AAS?$AAE?$AA?5?$AAF?$AAA?$AAI?$AAL?$AAE?$AAD?$AA?$AA@
??_C@_0BH@JHOFABAM@ZwSetInformationThread?$AA@
CcFastReadWait
PointerMap
VfSettingsInit
PopShutdownCleanly
ObpParseSymbolicLink
ZwReadFileScatter
IopIrpStackProfilerTimer
SdbpReadStringRef
ViDdiDeviceObjectArray
IoReadPartitionTable
PopConnectToPolicyDevice
??_C@_1CC@LHCKBPFM@?$AAP?$AAR?$AAE?$AAV?$AAO?$AAS?$AAP?$AAL?$AAA?$AAT?$AAF?$AAO?$AAR?$AAM?$AAI?$AAD?$AA?$AA@
MiRemoveZeroPage
PsRemoveCreateThreadNotifyRoutine
AcquireOpsReservePool
VfZwAllocateVirtualMemory
CmpShiftValueList
MiPurgeImageSection
CmpReferenceKeyControlBlock
MmDeleteKernelStack
IoStartNextPacket
??_C@_06GMPDAKJJ@INIT00?$AA@
RtlDeleteElementGenericTable
WmiUsePerfClock
KdCloseRemoteFile
FsRtlUninitializeMcb
NlsMbAnsiCodePageTables
RawUnload
IoStartTimer
SdbFreeFileInfo
IoPnPDeliverServicePowerNotification
CmpCopyKeyPartial
KyStartUserThread
SepLogonSessions
KiChainedDispatch
WmipFindRegEntryByProviderId
FsRtlLockTreeNodeLookasideList
??_C@_1FE@OLPMCCKK@APEGOCSN?$AAT?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAH?$AAA?$AAR?$AAD?$AAW?$AAA?$AAR?$AAE?$AA?2@
gInfRuleTable
KiStartUserThread
ZwFreeUserPhysicalPages
MiVerifierStackProtectTime
IopLoaderBlock
ExDeferredFreePool
IopReleaseResources
??_C@_0BE@ONNANPEN@ZwOpenThreadTokenEx?$AA@
ZwUnlockFile
KdpSearchCheckPoint
MmLocateUnloadedDriver
ExFreeCacheAwarePushLock
IopFreeResourceRequirementsForAssignTable
??_C@_1BA@KANFMBIH@APEG?$AA?$CF?$AAs?$AA?$CG?$AA?$CF?$AAs?$AA?$AA@
KeReleaseInStackQueuedSpinLockForDpc
??_C@_0P@NHBMKANJ@ZwQuerySection?$AA@
??_C@_0BO@KOIOMFAB@GUID_DEVICE_ENUMERATE_REQUEST?$AA@
WmiStopTrace
ExpInitSystemPhase1
SeOperationAuditAlarm
??_C@_0O@ELGFBILF@INITCONSTDate?$AA@
ExpInitSystemPhase0
??_C@_1KM@HEAAFHCD@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
KeZeroPages
MiMappedPagesTooOldEvent
MiInitializeAndChargePfn
KdChangeOption
CcFastMdlReadResourceMiss
PiProfileRetrievePreferredCallback
ExWindowStationDeleteProcedureCallout
??_C@_1BI@BPNBDDHK@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AA6?$AA4?$AAB?$AAi?$AAt?$AA?$AA@
GUID_BUS_TYPE_USB
IopPnPCompleteRequest
MmCompatibleProtectionMask
NtWriteFile
MmSubsectionBase
RtlpBitsClearLow
ZwCreateJobObject
MiInitializePfnAndMakePteValid
??_C@_0LA@BEIAAAJE@PAGEVRFCCaller?5has?5completed?5unt@
KdpSearchPhysicalPage
KiOpLocateDecodeEntry
RtlInitializeHistoryTable
VerifierExReleaseFastMutex
SeAuditingHardLinkEventsWithContext
towupper
CcFreeActiveVacb
IoAllocateAdapterChannel
PiControlStartDevice
MmAvailablePagesEvent
KiDeliverApc
Kd_VDSDYNDR_Mask
??_C@_06FEIHLJPH@?4text?5?$AA@
??_C@_1BI@GPANIPBN@APEG?$AAP?$AAN?$AAP?$AAI?$AAS?$AAA?$AAB?$AAu?$AAs?$AA?$AA@
RtlInitAnsiString
DbgkMapViewOfSection
??_C@_1CG@NJPIFLMC@APEG?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAF?$AAl?$AAo?$AAp?$AAp?$AAy?$AA?$CF?$AAd?$AA?$AA@
MmMirroring
SdbTagIDToTagRef
VerifierExTryToAcquireFastMutex
??_C@_0EK@LFFMMGIC@?4textPopCreateHiberFileSecurityD@
??_C@_1CA@OFLGMBEF@?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AA?5?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
PopCloneRange
??_C@_09POLIELFF@IoFreeIrp?$AA@
CmpLazyWorkItem
KdpDebuggerStructuresInitialized
PopEventCode
RtlUpcaseUnicodeToOemN
StringTerminators
WmipCheckGuidAccess
FsRtlPostStackOverflow
VfZwQuerySystemInformation
??_C@_1DO@PIGCMHBI@?$AAH?$AAe?$AAa?$AAp?$AAD?$AAe?$AAC?$AAo?$AAm?$AAm?$AAi?$AAt?$AAF?$AAr?$AAe?$AAe?$AAB?$AAl?$AAo?$AAc?$AAk?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AA?$AA@
SepRmNotifyMutex
NlsUnicodeToAnsiData
??_C@_1CK@JPNHCMPN@APEGOCSN?$AAT?$AAM?$AAo?$AAd?$AAe?$AAm?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
ObpDosDevicesShortName
VfZwCreateSymbolicLinkObject
KxUnexpectedInterrupt0
??_C@_1GG@ELAGJLFC@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
ObpGetShadowDirectory
??_C@_0CF@BJAECPMC@INITd?3?2srvrtm?2base?2ntos?2ex?2xipdi@
??_C@_1CA@OAPBJMDA@APEGOCSN?$AAT?$AAE?$AAm?$AAb?$AAe?$AAd?$AAd?$AAe?$AAd?$AAN?$AAT?$AA?$AA@
RtlReserveChunkNS
SdbpFindMatchingName
??_C@_1DG@PLEFBIIB@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
PopIdleScanTime
SdbReleaseDatabase
MiSpecialPagesPagable
CcLazyWritePages
HvpGetCellMapped
NtSetDefaultLocale
ExInitializeNPagedLookasideList
??_C@_1BA@EDNBJHNM@APEG?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAu?$AA?$AA@
??_C@_1CM@NICPGNKN@NITI?$AAD?$AAA?$AAT?$AAA?$AAB?$AAA?$AAS?$AAE?$AA?5?$AAN?$AAO?$AAT?$AA?5?$AAL?$AAO?$AAA?$AAD?$AAE?$AAD?$AA?$AA@
g_bCacheEnabled
PspW32ProcessCallout
??_C@_0CG@IPKDMMLO@PAGEVRFCIRP_MN_QUERY_PNP_DEVICE_@
IopDatabaseResource
GUID_DEVCLASS_NETTRANS
GUID_DEVCLASS_BLUETOOTH
PiHotSwapGetDefaultBusRemovalPolicy
LsapPort
ZwStartProfile
CcMapDataNoWait
VfMajorIsNewRequest
DbgkpPostFakeProcessCreateMessages
HandleTableListHead
MiWriteCombiningPtes
VerifierKeReleaseMutex
RtlVirtualUnwind
CmpDelayCloseDpcRoutine
??_C@_09KNNDMOPB@PAGEgdi32?$AA@
IoDisconnectInterrupt
ExDereferenceHandleDebugInfo
wcscspn
IoDeviceObjectType
IoGetCurrentProcess
RtlIsValidOemCharacter
ObpCaptureHandleInformationEx
??_C@_1CA@BMPALPHO@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAV?$AAi?$AAe?$AAw?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
PoSetSystemState
ObCreateObjectType
SePrincipalSelfSid
VfGetScatterGatherList
CmpCreateRootNode
KeUserModeCallback
ObsSecurityDescriptorCache
??_C@_0BH@GCJLIFKA@PAGE?2Device?2ScsiPort?$CFd?$AA@
isspace
ExpEventBoost
IoBuildSynchronousFsdRequest
KiDispatcherLock
??_C@_1BM@CNMPBMJJ@APEGOCSN?$AAT?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AA?$AA@
ExpMultiUserTS
??_C@_19CLJNMBNE@t?4xe?$AAt?$AA?$FL?$AA?$AA@
CmpMatchPModeRule
MiFreeWsle
szStandardName
ExpPagedPoolDescriptor
??_C@_0GL@KEKKLPKG@PAGEVRFCThis?5driver?5has?5not?5fill@
??_C@_1BE@CHJPEEPE@NITI?$AAW?$AAm?$AAi?$AAG?$AAu?$AAi?$AAd?$AA?$AA@
??_C@_1BK@HJNBLNLJ@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAS?$AAu?$AAi?$AAt?$AAe?$AA?$AA@
RcFrameConsolidation
??_C@_0CA@LKEKJCDE@PAGEVRFCPowerSystemSleeping1?4S1?$AA@
IoCheckDesiredAccess
WmipIsWbemRunningFlag
PiAllocateGenericTableEntry
wcsncmp
VfHalDeleteDevice
PsGetNextProcessThread
SdbpResolveAndSplitPath
GUID_DEVCLASS_APMSUPPORT
IoGetFileObjectGenericMapping
SeFastTraverseCheck
ZwAccessCheckByTypeAndAuditAlarm
SeCreatorGroupSid
PspQueryQuotaLimits
PsGetThreadHardErrorsAreDisabled
CmpMapThisBin
CmpGetBiosDate
ObpInitStackTrace
??_C@_0MP@EHDOKGFO@PAGEVRFCAn?5IRP?5dispatch?5handler?5@
IoCsqInitialize
RtlGetElementGenericTableAvl
ObpSymbolicLinkObjectType
VfHalAllocateMapRegisters
??_C@_0BN@CAJJEMII@GUID_PNP_CUSTOM_NOTIFICATION?$AA@
WmipGenerateMCAEventlog
RtlIntegerToChar
MiEstimationShift
IopErrorLogConnectPort
??_C@_0FE@KDCGFHBJ@PAGERtlpCallQueryRegistryRoutine@
KeReadyThread
DbgkpQueueMessage
RtlCreateHotPatch
KiConvertToGuiThread
NtNotifyChangeMultipleKeys
PopShutdownThreadList
MmFreeDriverInitialization
InitUnicodeCaseTableDataOffset
GUID_TARGET_DEVICE_REMOVE_CANCELLED
NtRaiseHardError
ZwReadVirtualMemory
VF_ASSERT_MAX_IRQL
IopNotifyHwProfileChange
IopCreateArcNames
GUID_DEVICE_SURPRISE_REMOVAL
TunnelMaxAge
WmipNotifyLogger
FsRtlNormalizeNtstatus
??_C@_1CK@KLGHKDNF@NITI?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAB?$AAo?$AAo?$AAt?$AA?$AA@
??_C@_1DE@ELLKECAN@APEGOCSN?$AAT?$AAM?$AAu?$AAl?$AAt?$AAi?$AAf?$AAu?$AAn?$AAc?$AAt?$AAi?$AAo?$AAn?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
CmpCopyValue
SeSystemDefaultDacl
IopReassignSystemRoot
IopParseSymbolicLinkName
??_C@_0MK@FMOOPEIL@PAGEVRFCA?5driver?5has?5succeeded?5I@
CcZeroData
xHalHaltSystem
WmipFindISByGuid
KdpPathBuffer
??_C@_1CI@GLOCCJLC@NITI?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AAs?$AA?2?$AA?$AA@
HvpDropAllPagedBins
PopFullWake
IopUserRundown
MiClaimAdjustmentThreshold
KdComponentTable
PspReleaseReturnedQuota
PsSetProcessWindowStation
??_C@_05JNJGHMJM@INITS?$AA@
??_C@_0CG@KOEDLMOD@PAGEHDLS?$DP?5?5?5?5?5?5?5?5Display?5this?5li@
??_C@_1CG@NPJALPFJ@?$AAM?$AAS?$AAI?$AA_?$AAT?$AAR?$AAA?$AAN?$AAS?$AAF?$AAO?$AAR?$AAM?$AA_?$AAF?$AAI?$AAL?$AAE?$AA?$AA@
ZwAreMappedFilesTheSame
KiNode0
PopCreateHiberFile
??_C@_09KJDCDIOI@PAGEHDLSd?$AA@
??_C@_1BI@GABNHH@?$AAL?$AAA?$AAY?$AAE?$AAR?$AA_?$AAT?$AAA?$AAG?$AAI?$AAD?$AA?$AA@
VfZwOpenSection
CcLogError
WmipRegisterUMGuids
NtQueryInformationProcess
GUID_IO_DEVICE_BECOMING_READY
??_C@_0BF@KFGCPIE@PAGEVRFCNTOSKRNL?4EXE?$AA@
ExAcquireTimeRefreshLock
IoFastQueryNetworkAttributes
RtlpRegistryQueryInitialBuffersize
PopApmFlag
ExpNumberOfPagedPools
KeGdiFlushUserBatch
ExpNonPagedPoolDescriptor
MmPagedPoolMaximumDesired
RtlxOemStringToUnicodeSize
MmAvailablePages
CcSetActiveVacb
HvpFlushMappedData
IoWMIExecuteMethod
ZwTestAlert
InbvResetDisplayParameters
KdpTimeSlipWork
MmUnmapViewInSystemSpace
??_C@_0BM@ICFFAOPA@PAGEVRFCPowerActionReserved?$AA@
HvpBuildMapAndCopy
CmpFilterAcpiDockingState
RtlAnsiStringToUnicodeString
??_C@_0L@CJGIGJBC@PAGE_1394_?$AA@
FsRtlLookupBaseMcbEntry
FsRtlInitSystem
ExpSetSwappingKernelApc
KeRaiseUserExceptionDispatcher
??_C@_1CE@BOEMPCME@APEGOCSN?$AAT?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAP?$AAr?$AAe?$AAf?$AAi?$AAx?$AA?$AA@
MmReadWrite
WmipMceDelivery
CmpHiveListHeadLock
CcPrefillVacbLevelZone
IovpVerifierLevel
PpInitializeBootDDB
ExDeletePagedLookasideList
ZwSignalAndWaitForSingleObject
??_C@_0BI@LMCMELOI@PAGEVRFCIRP_MJ_SHUTDOWN?$AA@
SepAuditOptions
KiSetCacheInformationAmd
MmTotalPagesForPagingFile
MiMapLockedPagesInUserSpace
??_C@_1CA@BFNKNOIB@?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAl?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
NtLoadKey
KeReleaseGuardedMutex
KdpSysWriteControlSpace
WmipFindSMBiosStructure
IopCalculateRequiredDumpSpace
PopIdleDefaultDemoteToC1Percent
PopIrpSerialListLength
MmTotalCommittedPages
PopVolumeDevices
IoGetBootDiskInformation
??_C@_0DA@MKBOLCGD@PAGELKpo?3?5POP_WAKE_DEVICE_AFTER_@
??_C@_1BK@NAMBIDAB@APEG?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAi?$AAe?$AAs?$AA?$AA@
PiControlHaltDevice
FsRtlCancelExclusiveIrp
MmHeapDeCommitTotalFreeThreshold
__report_gsfailure
KeSignalCallDpcDone
ObpTryReferenceNameInfoExclusive
TraceDataBuffer
ObpPushStackInfo
ZwQueryDefaultUILanguage
??_C@_1CI@LLGBPMMM@APEG?$AAi?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AAc?$AAh?$AAa?$AAr?$AAa?$AAc?$AAt?$AAe?$AAr?$AA?$AA@
??_C@_1EM@DFCCCMFD@NITIOCSN?$AAT?$AAM?$AAI?$AAC?$AAR?$AAO?$AAS?$AAO?$AAF?$AAT?$AA?5?$AAB?$AAA?$AAL?$AAL?$AAP?$AAO?$AAI?$AAN?$AAT?$AA?5?$AAS?$AAE?$AAR?$AAI?$AAA?$AAL?$AA?5@
WmipRegWorkList
SeLocalSystemSid
WmipEnableKernelTrace
??_C@_0BF@IOCOIHLM@ZwSetInformationFile?$AA@
CmpDelayCloseTimer
IopResurrectDriver
IoAttachDeviceToDeviceStack
??_C@_0BE@KMEIDNLK@ZwTranslateFilePath?$AA@
NtDuplicateToken
ObOpenObjectByPointer
Kd_RPCPROXY_Mask
CmCheckRegistryDebug
ExpInsertPoolTracker
ExpExpandResourceOwnerTable
??_C@_1DA@PMLNIFJC@NITIOCSN?$AAT?$AAF?$AAi?$AAr?$AAm?$AAw?$AAa?$AAr?$AAe?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAf?$AAi?$AAe?$AAd?$AA?$AA@
??_C@_1HC@NKMPBOBN@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
ExpSetupKey
MiExtendedSubsectionsConvertedToDynamic
IopCheckUnloadDriver
PsSetJobUIRestrictionsClass
??_C@_1CA@IPGEDILN@APEGOCSN?$AAT?$AAD?$AAa?$AAt?$AAa?$AAC?$AAe?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
KdpPrintString
NtSetHighEventPair
PopPolicyWorker
SdbReadBinaryTag
SdbpCheckForMatch
ExpAllocateMidLevelTable
??_C@_0FG@EEIEEHDI@PAGEVRFY?$CK?$CK?5Deadlock?5detected?$CB?5Ty@
HvCloneHive
SeAliasSystemOpsSid
WmiReserveWithPerfHeader
IoPageReadIrpAllocationFailure
??_C@_1O@ONHKGDAA@?$AAP?$AAN?$AAP?$AAM?$AAE?$AAM?$AA?$AA@
??_C@_0EN@HJGKKJDN@PAGEVRFYCannot?5put?5adapter?5?$CFp?5un@
ExpDebuggerProcessAttach
KdpPrint
IopStartDevice
MmVadPhysicalPages
KiStackOutSwapRequest
RtlUnicodeStringToInteger
FsRtlRemovePerFileObjectContext
FstubSetPartitionInformationEFI
??_C@_0BN@BEIGAFIO@GUID_DEVICE_SURPRISE_REMOVAL?$AA@
??_C@_1BO@EONDKLEN@?$AAF?$AAL?$AAA?$AAG?$AA_?$AAM?$AAA?$AAS?$AAK?$AA_?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
CmpPinCmView
NtMapUserPhysicalPages
CmpRegistryMachineSystemCurrentControlSetControlSafeBootString
PopPerfIdle
CcVacbs
MiUnlinkFreeOrZeroedPage
??_C@_0HP@BGKLBODL@PAGEVRFCThis?5IRP?5is?5about?5to?5run@
??_C@_0CI@CDBABDPE@?4textExecute?5?8?4cxr?5?$CFp?8?5to?5dump?5c@
IoGetDeviceInstanceName
PopWorkerSpinLock
NtSetInformationToken
??_C@_1CC@GOGJAIAG@NITI?$AAM?$AAi?$AAn?$AAi?$AAm?$AAu?$AAm?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAs?$AA?$AA@
PspTerminateProcess
ViIrpCallStackDataList
ExpWorkerApcDisabledMessage
??_C@_1CE@OHLELLPC@?$AAO?$AAb?$AAC?$AAa?$AAs?$AAe?$AAI?$AAn?$AAs?$AAe?$AAn?$AAs?$AAi?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
PopWorkerLock
PsContinueWaiting
PopGatherMemoryForHibernate
CmpGetPnPBIOSTableAddress
??_C@_1CI@LPIFAHFA@?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAN?$AAo?$AAn?$AAP?$AAa?$AAg?$AAe?$AAd?$AAP?$AAo?$AAo?$AAl?$AA?$AA@
ExpEventMapping
PopDumpSystemIrp
PsLookupProcessByProcessId
ZwVdmControl
PspLoadImageNotifyRoutine
WmipSendGuidUpdateNotifications
GUID_DEVCLASS_MULTIPORTSERIAL
??_C@_0BA@PEKAJINF@INITKDBGPAGEVRF?$AA@
??_C@_1BG@FGNEGMJP@NITI?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?$AA@
KiAcquireFastMutex
KeLeaveGuardedRegion
PspUserThreadStartup
IopTimerLock
ObpObjectTypes
MiAddHalIoMappings
??_C@_1BM@LIFGDFOI@NITI?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAP?$AAn?$AAp?$AA?$AA@
PerfInfoLogBytes
CcLazyWriterCursor
VfZwQueryInstallUILanguage
MiSuspectDriverList
??_C@_1CE@HCNKCNNO@NITI?$AAI?$AAN?$AAI?$AAT?$AAS?$AAT?$AAA?$AAR?$AAT?$AAF?$AAA?$AAI?$AAL?$AAE?$AAD?$AA?$AA@
KiSpinlockTimeout
MmZeroingPageEvent
ViDdiDispatchWmiRegInfoEx
CmpResolveDriverDependencies
__@@_PchSym_@00@UhieignUyzhvUmglhUrlUkmkntiUfkUlyqUznwGEUkmkntikOlyq@pnpmgr
??_C@_1CI@NOHFNEJH@NITIOCSN?$AAT?$AAP?$AAC?$AA9?$AA8?$AA_?$AAL?$AAa?$AAp?$AAt?$AAo?$AAp?$AAK?$AAE?$AAY?$AA?$AA@
ExpSystemPrefixIoSb
PoStartNextPowerIrp
VfZwDeleteKey
??_C@_0BB@LKMLMLNN@PAGEVRFCSnapshot?$AA@
MiVerifierThunks
CmpDontGrowLogFile
FstubReadPartitionTableEFI
CmpOpenSubKeys
DbgkpMarkProcessPeb
KiInitializeContextThread
ExQueueWorkItem
MmSystemPageColor
NtWaitLowEventPair
NtTraceEvent
VfZwUnloadKey
MiReportPhysicalMemory
KiSaveDebugRegisterState
NtSetDefaultHardErrorPort
??_C@_0N@LIOLDOFE@INITCSD?5?$CF04x?$AA@
??_C@_1BK@CBFJJLNN@APEG?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAD?$AAf?$AAs?$AA?$AA@
MmCreateMirror
IopSetOperationAccess
MiLargePageAllDrivers
HvpFreeMap
MiProtectAweRegion
IopInitializeDeviceKey
MmNonPagedPoolFreeListHead
CmRenameKey
KdpDataSpinLock
IopCacheNetbiosNameForIpAddress
FsRtlEmptyFreePoolList
ExpFindAndRemoveTagBigPages
RtlpImageDirectoryEntryToData64
??_C@_0M@NGOMOGP@PAGEPrimary?$AA@
??_C@_0N@BMFJKFOP@INITCONSTRev?$AA@
IopEjectDevice
FsRtlDeleteTunnelCache
PspGetSetContextSpecialApc
ExGetBigPoolInfo
PipProcessStartPhase1
CmpDelayDerefKCBWorkItem
WmipUuidFromString
ExpRemovePoolTracker
WmipFreeLoggerContext
NtQueryInformationToken
KeGetCurrentStackPointer
??_C@_1O@MEDHBBHD@?$AAM?$AAO?$AAD?$AAU?$AAL?$AAE?$AA?$AA@
MiFreeLowMemory
CmpGetBinaryField
NtCreateIoCompletion
PipProcessStartPhase3
RawCompletionRoutine
PipProcessStartPhase2
??_C@_09MOGNEBFM@INIT?5?9?5?$CFx?$AA@
??_C@_1CA@DACEDMJK@?$AAP?$AAR?$AAO?$AAB?$AAL?$AAE?$AAM?$AA_?$AAD?$AAE?$AAT?$AAA?$AAI?$AAL?$AAS?$AA?$AA@
CcPinReadWaitMiss
??_C@_0BG@CLOGMOKL@PAGEVRFCIRP_MJ_SET_EA?$AA@
KeReadStateSemaphore
NtSetInformationThread
NtNotifyChangeDirectoryFile
??_C@_1EC@MGMPKBPE@APEG?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AA?$CF?$AAd?$AA?2?$AAP?$AAa?$AAr?$AAt?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$CF?$AAd@
ZwQueryDirectoryObject
CmpQueryKeyDataFromCache
KiProfileSourceListHead
WmipFlushBuffersWithMarker
??_C@_1CA@CALMADDN@NITIOCSN?$AAT?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
Kd_SMSS_Mask
IopInvalidDeviceRequest
SeQuerySecurityDescriptorInfo
__@@_PchSym_@00@UhieignUyzhvUmglhUrlUrlntiUfkUlyqUznwGEUrlntiOlyq@iomgr
XIPlocate_noisy
CmpInitializeHiveList
GUID_IO_DEVICE_EXTERNAL_REQUEST
CmpForceForceFlush
??_C@_0EJ@OEEOKBLG@?4textPopCreateHiberFileSecurityD@
IopProcessWorkItem
ExpNtExpirationDate
MiReleaseSystemPtes
GUID_DEVCLASS_FSFILTER_CFSMETADATASERVER
??_C@_0FK@NPLEFBOF@PAGEVRFCAny?5Power?5IRP?5must?5have?5@
CmpIntelID
ExpWorkerSwapinMutex
ExpGetHandleInformationEx
WmipSMBiosTableLength
??_C@_0GA@ECILHHAD@PAGEVRFCA?5driver?5has?5mistakenly?5@
ExpSetupSystemPrefix
FsRtlNotifyCompleteIrpList
MmTrackPtes
MiTrimWorkingSet
GUID_BUS_TYPE_PCI
ExpNtExpirationData
??_C@_1CO@IFJNEKBM@APEGOCSN?$AAT?$AAS?$AAy?$AAm?$AAb?$AAo?$AAl?$AAi?$AAc?$AAL?$AAi?$AAn?$AAk?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
FsRtlSplitBaseMcb
??_C@_1M@MCCJOFEL@APEG?$AAR?$AAA?$AAW?$AA?$AA@
??_C@_0CO@CPNDFBEJ@INITIOINIT?3?5UnicodeToAnsi?$CI?5?$CFwZ?5?$CJ@
IoSetIoCompletion
SdbpBinarySearchUnique
??_C@_1BM@GOMGDHMF@NITI?$AAC?$AAo?$AAm?$AAD?$AAB?$AA?5?$AAM?$AAe?$AAr?$AAg?$AAe?$AA?$AA@
MiFullyInitialized
Kd_MOUHID_Mask
IopAllocateResources
??_C@_0FC@MJPCENLC@PAGEVRFCCaller?5has?5passed?5in?5NUL@
NtOpenProcessTokenEx
NtUnmapViewOfSection
ExpExpirationDataChangeBuffer
SeAuditingHardLinkEvents
KeFeatureBits
??_C@_1O@MBKECEEP@NITI?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
VfZwCancelTimer
IopInterlockedRemoveHeadList
??_C@_1M@ENABOFNC@?$AAI?$AAM?$AAA?$AAP?$AAI?$AA?$AA@
SeNetworkSid
CmpAppendStringToMultiSz
??_C@_1BO@LBICKDIB@?$AAU?$AAP?$AAT?$AAO?$AA_?$AAL?$AAI?$AAN?$AAK?$AA_?$AAD?$AAA?$AAT?$AAE?$AA?$AA@
MiRemovePageByColor
VerifierKfRaiseIrql
MY_READ_REGISTER_UCHAR
KeUserPopEntrySListFault
??_C@_0CD@OMDPMLPH@?4textFreed?5too?5many?5common?5buffe@
??_C@_1EA@FNMDEEJP@APEG?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAs?$AA?2?$AA?$AA@
ZwQueryBootEntryOrder
WmipIncludeStaticNames
KeTryToAcquireQueuedSpinLock
??_C@_0L@HDAAKKOE@?4text?$CF4lx?5?$AA@
??_C@_1O@IOPJCHJP@NITI?$AAl?$AAi?$AAs?$AAt?$AA?$AA@
??_C@_1BC@EOACBBEA@NITI?$AAM?$AAu?$AAt?$AAa?$AAn?$AAt?$AA?$AA@
ObFastDereferenceObject
RtlFindCharInUnicodeString
CcAllocateInitializeBcb
CmRegistryMachineSystemCurrentControlSetControlSafeBoot
VerifierExFreePoolWithTag
ObReleaseObjectSecurity
MiReserveAlignedSystemPtes
IovInitializeTimer
NlsUnicodeToMbOemData
RtlDeleteOwnersRanges
IoReleaseCancelSpinLock
KeAcquireSpinLockForDpc
MmLargeStacks
KiOpPrefetchPatchCount
NtQueryInformationAtom
ExpUuidLoadSequenceNumber
MiNonPagedPoolSListHead
??_C@_0KP@DDMHPEBG@PAGEVRFCCaller?5has?5manually?5copi@
KdpTrap
CmpRehashKcbSubtree
MmLowestPhysicalPage
KeAdjustInterruptTime
PopIdleDefaultPromoteTime
??_C@_1BM@GODKIHFH@NITIOCSN?$AAT?$AA?$CK?$AAP?$AAN?$AAP?$AA0?$AA3?$AA0?$AA5?$AA?$AA@
ExPageLockHandle
PpReleaseBootDDB
HalpSetMountLetter
RtlpNewSecurityObject
CmpDereferenceKeyControlBlockWithLock
MiTerminateWsle
CcInitializeCacheMap
KeSignalGateBoostPriority
Kd_SCSIMINIPORT_Mask
CmpReportNotify
ExpDeleteMutant
IovpExamineDevObjForwarding
PoolTrackTableMask
MiUnlinkPageFromList
WmipRegisterOrUpdateDS
CmpCleanUpKcbValueCache
MiInsertImageSectionObject
MiMapPageInHyperSpaceAtDpc
CmpLazyFlushIntervalInSeconds
??_C@_1BM@DKPOFIGK@APEGOCSN?$AAT?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAN?$AAT?$AA?$AA@
NtCreateProcess
PopAcProcessorRegName
ViDeadlockCertify
VfZwOpenDirectoryObject
ExpCheckForWorker
MiLockPagedAddress
SdbQueryDataExTagID
SeCreateAccessStateEx
MiSetMemoryPriorityProcess
PpNotifyUserModeRemovalSafe
DbgkpConvertKernelToUserStateChange
ZwMapUserPhysicalPagesScatter
RtlFreeHotPatchData
PARTITION_BASIC_DATA_GUID
??_C@_09DJPOCKIN@INITcdrom?$AA@
?enable@?2??INCREASE_MAPPED_TRANSFER_BYTE_COUNT@@9@9
MmProbeAndLockSelectedPages
IopGenericScoreRequirement
KiContinuePreviousModeUser
??_C@_1CK@KGDDCGDN@NITI?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAI?$AAD?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAD?$AAB?$AA?$AA@
VfPowerDumpIrpStack
RtlFreeStringRoutine
WmipIsEqualInstanceSets
KiStackInSwapListHead
HvpFreeAllocatedBins
RtlStringCbPrintfExA
ArbShareDriverExclusive
MmEnableModifiedWriteOfSection
??_C@_0N@FBEOPLON@INITDSREPAIR?$AA@
wcstombs
MmTransitionPrivatePages
??_C@_0FI@LPJNGACN@PAGEVRFCAny?5WMI?5IRP?5must?5have?5st@
wcslen
MiModifiedPageWriter
xHalGetPartialGeometry
??_C@_1CA@JFOPPFFI@NITI?$AAD?$AAe?$AAp?$AAe?$AAn?$AAd?$AAO?$AAn?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?$AA@
ViDeadlockDetectionEnabled
FsRtlRemoveAndCompleteWaitIrp
NtReplyWaitReplyPort
MmDebugVa
MiPfnBitMap
RtlCreateRegistryKey
PopIdleDefaultDemoteTime
MiLargeVaRangeIndex
IopQueryConflictListInternal
PiNotifyUserModeRemoveVetoedByList
TriageGetLoaderEntry
IopDeleteIoCompletion
ObfDereferenceDeviceMap
RtlStringVPrintfExWorkerA
IopDisableDeviceInterfaces
KiInitialProcess
FsRtlPagingIoResources
??_C@_1CK@CMMKFIKL@NITI?$AAD?$AAh?$AAc?$AAp?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAG?$AAa?$AAt?$AAe?$AAw?$AAa?$AAy?$AA?$AA@
PsTerminateProcess
??_C@_09LIJLGMPD@ZwOpenKey?$AA@
ObpTraceDepth
CmpCleanUpSubKeyInfo
MmTotalSystemDriverPages
ExpSmallNPagedPoolLookasideLists
IopAppendLegacyVeto
IoReleaseVpbSpinLock
MmInPageSupportMinimum
RtlMakeSelfRelativeSD
MiDereferenceControlArea
PopInvokeSystemStateHandler
KeRegisterBugCheckReasonCallback
MmPaeErrMask
VfPnpVerifyNewRequest
ZwPrivilegedServiceAuditAlarm
CcPerfFileRunDown
PopSetPowerAction
MmEventCountSListHead
MiFreeAllExpansionNonPagedPool
MmIsSystemAddressLocked
SeAuthenticatedUsersSid
LpcpMessagesLookaside
??_C@_0DI@JDHPIMCD@PAGEHeap?5missing?5last?5entry?5in?5c@
CmpLoadHiveLock
VfPnpAdvanceIrpStatus
??_C@_09KALEJOMJ@ZwSaveKey?$AA@
VfMajorVerifyIrpStackDownward
GUID_DEVCLASS_FSFILTER_ENCRYPTION
MmCrashDumpPte
MmHeapSegmentCommit
NtQueryInformationPort
MiAllMainMemoryMustBeCached
ObpEnumFindHandleProcedure
SeDialupSid
CmpCreateControlSet
ObpDosDevicesShortNameRoot
CmpFlushStarveWriters
RtlIsNameLegalDOS8Dot3
CmpDoCreate
??_C@_1HA@FDPKMMDI@NITI?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
CmpCopySyncTree
ZwSetHighWaitLowEventPair
SeTokenCanImpersonate
??_C@_1CC@OEFBDJFJ@?$AAD?$AAe?$AAb?$AAu?$AAg?$AAg?$AAe?$AAr?$AA?5?$AAR?$AAe?$AAt?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
KxStartUserThread
PpvUtilFailDriver
VfZwPulseEvent
KiFindFirstSetLeft
CcDirtyPagesLastScan
SepRmDeleteLogonSessionWrkr
CmpRegistryMachineSystemCurrentControlSetHardwareProfilesCurrentString
ZwFilterToken
NtSetBootOptions
RtlpEnvironCacheValid
MmAllocatedNonPagedPool
MmMapViewInSessionSpace
RtlQueryTimeZoneInformation
??_C@_0M@OHLHELHF@ZwUnloadKey?$AA@
MiStopBadMaps
g_szGuidFormat
KdReportTraceData
MiRestoreTransitionPte
IoIsValidNameGraftingBuffer
??_C@_1EC@OPJFNKKI@NITI?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAL?$AAa?$AAn?$AAm?$AAa?$AAn?$AAD?$AAa?$AAt?$AAa?$AAg?$AAr?$AAa?$AAm?$AAR?$AAe?$AAc?$AAe?$AAi?$AAv?$AAe?$AAr@
CcPinMappedDataCount
PsRevertThreadToSelf
MmAllocateContiguousMemory
PiProfileChangeCancelRequired
SepQueueWorkItem
PopAddPagesToCompressedPageSet
??_C@_19OJPJNDDA@?$AAT?$AAA?$AAP?$AAE?$AA?$AA@
??_C@_1BO@MPPHDLL@NITI?$AAS?$AAy?$AAm?$AAb?$AAo?$AAl?$AAi?$AAc?$AAL?$AAi?$AAn?$AAk?$AA?$AA@
MiNonCachedCollisions
__imp_KdDebuggerInitialize1
IopFileUtilRename
__imp_KdDebuggerInitialize0
??_C@_0BP@IPCGCFCO@PAGEVRFCIRP_MJ_CREATE_MAILSLOT?$AA@
VerifierIrqlData
IoReleaseRemoveLockAndWaitEx
ViSpecialAllocateCommonBuffer
??_C@_0BI@CDPPAENK@?4textUnknown?5Hard?5Error?$AA@
FsRtlMdlReadCompleteDevEx
CmpFreePostBlock
PspInsertQuotaBlock
IovpCompleteRequest1
ExpUuidCacheValid
IoThreadToProcess
??_C@_1CO@MOGIBLOG@?$AAI?$AAd?$AAl?$AAe?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAP?$AAr?$AAo?$AAm?$AAo?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
??_C@_1EC@EBPDFMID@APEG?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp@
CcPinFileData
CmpDelayDerefKCBListHead
ExDesktopCloseProcedureCallout
??_C@_1BC@ODMDPEJM@APEG?$AAs?$AAe?$AAl?$AAe?$AAc?$AAt?$AA?$AA@
CmpLazyFlush
ZwSetLowEventPair
??_C@_1BI@KFGMGNPG@APEG?$AA?2?$AAW?$AAm?$AAi?$AAG?$AAu?$AAi?$AAd?$AA?2?$AA?$AA@
KiSystemCall64
KiInSwapKernelStacks
??_C@_0BB@HGLHBBFE@PAGEKDCRASHDEBUG?$AA@
??_C@_0BC@LFLAJKLI@ZwDuplicateObject?$AA@
ZwOpenThread
MiAddRangeToCrashDump
LpcpFreeConMsg
CmDeleteKeyRecursive
IoQueryDeviceDescription
CmpGetInfData
CmpLazyFlushDpc
MiDeletePageDirectoriesForPhysicalRange
??_C@_19GHGNHGLD@?$AAD?$AAF?$AAS?$AAC?$AA?$AA@
WmipGenerateFileName
SepAdtCurrentListLength
RtlpCopyContext
KeRundownQueue
??_C@_1BG@FDDPAKEP@?$AAI?$AAH?$AAV?$AAN?$AAE?$AAT?$AAW?$AAO?$AAR?$AAK?$AA?$AA@
??_C@_0BI@MHHJBGBM@INITNOEXECUTE?$DNALWAYSOFF?$AA@
??_C@_0BO@EBOGFHOM@PAGEVRFCIRP_MJ_SYSTEM_CONTROL?$AA@
??_C@_0FB@GMCMDGNM@PAGEVRFCCaller?5has?5trashed?5or?5ha@
MiUnusedSubsectionPagedPool
??_C@_1BK@DPDDBEPK@APEG?$AAV?$AAG?$AAA?$AAP?$AAN?$AAP?$AA?4?$AAS?$AAY?$AAS?$AA?$AA@
??_C@_1BO@GKFGPCF@NITI?$AAP?$AAS?$AA2?$AA_?$AAK?$AAE?$AAY?$AAB?$AAO?$AAA?$AAR?$AAD?$AA?$AA@
??_C@_1GK@KFJFHJCO@NITI?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
??_C@_0DP@GHJHJJKK@PAGELKHIBER?3?5Copy?5time?5?5?5?5?5?$CF3d?4?$CF@
CcMapAndCopy
??_C@_1CC@CHBCEHAO@?$AAO?$AAr?$AAi?$AAg?$AAi?$AAn?$AAa?$AAl?$AAF?$AAi?$AAl?$AAe?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
??_C@_1CC@DDDDJONN@?$AAT?$AAr?$AAa?$AAc?$AAk?$AAL?$AAo?$AAc?$AAk?$AAe?$AAd?$AAP?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
??_C@_1CK@HJJNPICP@?$AAP?$AAo?$AAC?$AAl?$AAe?$AAa?$AAn?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
IopHardError
RtlGetNtGlobalFlags
KiUnexpectedInterrupt
??_C@_0BJ@LMJIFHGM@INITCONSTACPIOemRevision?$AA@
??_C@_1BO@HEANCHJA@NITI?$AAI?$AAo?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
WmipGlobalCallbackContext
??_C@_1BI@GGLLHEIB@NITI?$AAC?$AAl?$AAa?$AAs?$AAs?$AAG?$AAU?$AAI?$AAD?$AA?$AA@
??_C@_1EK@NOHGIPMN@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
_wcslwr
MMTEMPORARY
RtlpSetSecurityObject
CmpFileWriteThroughCache
KiNMILock
NtReleaseKeyedEvent
_wctype
KiGetGdtIdt
vDbgPrintEx
PerfSetLogging
IopRootDmaArbiter
ObSetHandleAttributes
??_C@_0GK@MPHPGEIB@PAGEVRFCA?5driver?5has?5completed?5a@
WmipTraceRegistry
CmpShiftHiveFreeBins
PiInitGroupOrderTable
PsWaitForAllProcesses
ObpChargeQuotaForObject
DbgkClearProcessDebugObject
IopProcessSetInterfaceState
??_C@_1DK@FIHNDMLB@NITIOCSN?$AAT?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAe?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
WmipGuidList
MmTwentySeconds
MiSessionRemoveProcess
ProbeForWrite
DbgUnLoadImageSymbols
MmFreedExpansionPoolMaximum
??_C@_0BF@NMACOFBK@ZwQueryDirectoryFile?$AA@
NtQuerySecurityObject
KdDisableCount
PiControlResetDevice
ExpProductTypeValueInfo
ZwAccessCheckByTypeResultListAndAuditAlarm
NtOpenThreadToken
NtSetTimerResolution
SepProcessAccessesToAudit
KiExceptionDispatch
??_C@_0EH@KGADMLCG@?4textTrace?5database?3?5failing?5att@
RtlCompressBuffer
RtlFreeAnsiString
VerifierExFreePool
CmpReportNotifyHelper
SepDeReferenceLogonSession
??_C@_1BA@HEHOBCBI@t?4xe?$AAt?$AA?$CF?$AA?$CF?$AA?$CF?$AAu?$AA?$AA@
??_C@_1BO@DAFANMIE@?$AAL?$AAe?$AAg?$AAa?$AAl?$AAC?$AAo?$AAp?$AAy?$AAr?$AAi?$AAg?$AAh?$AAt?$AA?$AA@
CcPfPrefetchSections
ZwSetLdtEntries
PopPerfDecreasePercentModifier
KiOp_PREFETCHx
PiProcessQueryRemoveAndEject
??_C@_0BK@BHAODJFH@?4text?3?3ffff?30?3?$CFu?4?$CFu?4?$CFu?4?$CFu?$AA@
WmipResetBufferHeader
SeAssignSecurityEx
MMCONTROL
MiSessionIdMutex
??_C@_0P@FGFKEJHM@PAGESMBiosData?$AA@
??_C@_0BA@JGPKCMIH@INIT?2SystemRoot?$AA@
??_C@_0DK@FDNPNNDN@INITCmpAppendStringToMultiSz?3?5Fa@
WmipStopLoggerInstance
IovpCancelCount
MiRemovePhysicalMemory
MiPagedPoolSListMaximum
Nls844UnicodeLowercaseTable
MiCheckSessionPoolAllocations
MiSessionLeaderExists
__imp_VidSetTextColor
IopMarkBootPartition
PiControlDeregisterDevice
MiFindContiguousPages
KeReleaseQueuedSpinLock
ExpRefreshTimeZoneInformation
??_C@_0CO@LFOLPEMH@PAGEAbandoning?5uncommitted?5range@
??_C@_0CB@DMGFJFMD@PAGEInvalid?5hook?5type?5specified?6@
??_C@_1BC@LCHHFPNG@APEG?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
_strupr
CcFastReadResourceMiss
IopTranslatorHandlerCm
??_C@_1CK@DAMOJMDP@APEG?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?9?$AA?$CF?$AA0?$AA8?$AAX?$AA?4?$AA?$CF?$AAw?$AAs?$AA?$AA@
KeLoaderBlock
RtlpBitsClearAnywhere
IopErrorLogAllocation
FsRtlGetNextBaseMcbEntry
??_C@_0O@KHMBHBOJ@PAGEVRFCPvoid?$AA@
MapperKeySeed
IopRequestHwProfileChangeNotification
ZwDisplayString
RtlLookupAtomInAtomTable
RtlEnumerateGenericTableAvl
MiCacheImageSymbols
KiInvalidOpcodeFault
??_C@_1CE@OFAMGKOJ@NITI?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAR?$AAa?$AAw?$AAD?$AAi?$AAs?$AAk?$AA?$AA@
IoDeleteDevice
KiSetProcessorType
MmReferenceCountCheck
MiSessionImageStart
ZwDeleteDriverEntry
??_C@_0OH@NLPJBOCE@PAGEVRFCIRP_MJ_SYSTEM_CONTROL?5ha@
RtlSetBit
ZwFlushKey
BreakPointTimerStarted
KiSecondaryClockInterrupt
ViGenericVerifyNewRequest
ExRaiseDatatypeMisalignment
PsGetProcessCreateTimeQuadPart
IopDatabaseLock
??_C@_1BM@FCEHOMH@?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?$AA@
PoWakeState
IopAllocateReserveIrp
ExInterlockedExtendZone
isdigit
ExReleaseRundownProtectionCacheAwareEx
RawCleanup
??_C@_1BE@CAJFDKPL@?$AAW?$AAM?$AAI?$AA?2?$AAT?$AAr?$AAa?$AAc?$AAe?$AA?$AA@
HvpBuildMap
VfSettingsGlobal
CmGetSystemControlValues
EtwpDefaultSecurityDescriptor
PerfInfoLogBytesAndUnicodeString
szStandardStart
MmIsSpecialPoolAddress
IofCompleteRequest
PsTerminateSystemThread
CmpCheckCreateAccess
PiNotifyUserModeKernelInitiatedEject
MmMinimumNonPagedPoolSize
??_C@_0CM@PEFCAOIH@INIT?2Registry?2Machine?2System?2Con@
CmpSaveBootControlSet
??_C@_09FILDGNNL@PAGEVRFY?$CJ?$AA@
??_C@_1DK@ONPCFGDN@?$AAP?$AAe?$AAr?$AAf?$AAD?$AAe?$AAc?$AAr?$AAe?$AAa?$AAs?$AAe?$AAA?$AAb?$AAs?$AAo?$AAl?$AAu?$AAt?$AAe?$AAM?$AAo?$AAd?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?$AA@
CcIdleDelayTick
PopCriticalShutdown
CompareUnicodeStrings
InbvProgressIndicator
??_C@_1CC@CKJPMMD@APEG?$AAH?$AAo?$AAs?$AAt?$AAi?$AAn?$AAg?$AAA?$AAp?$AAp?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
??_C@_1BG@DCBDDNII@APEG?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
PfxRemovePrefix
CcVacbLevelWithBcbsEntries
CmQueryValueKey
CmpAllocatePostBlock
MiReferenceSubsection
MmDeleteProcessAddressSpace
SeCaptureLuidAndAttributesArray
ZwLoadKey2
ExBurnMemory
VerifierOptionChanges
??_C@_0BO@LMJBBHJG@PAGELK?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5?5?$AA@
CmpDoSort
PsDereferencePrimaryToken
PsAssignImpersonationToken
??_C@_1BA@JNEFEMNP@APEG?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
??_C@_1BG@DCIJCBJP@?$AAD?$AAA?$AAT?$AAA?$AA_?$AAD?$AAW?$AAO?$AAR?$AAD?$AA?$AA@
RtlCreateSecurityDescriptor
SeFileSystemNotifyRoutinesHead
IoAllocateGenericErrorLogEntry
MmDisablePagingExecutive
CcPfOpenVolumesForPrefetch
RtlpCallQueryRegistryRoutine
MiInitializeDriverVerifierList
CmpCloneHwProfile
ExCallbackObjectType
SeAnonymousLogonToken
PoQueueShutdownWorkItem
ZwUnlockVirtualMemory
FsRtlAcquireFileForModWriteEx
??_C@_0L@JODPLIK@PAGE16STUB?$AA@
??_C@_1FO@MCOCJNAJ@APEG?$AA?2?$AAB?$AAa?$AAs?$AAe?$AAN?$AAa?$AAm?$AAe?$AAd?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?2?$AAW?$AAB?$AAE?$AAM?$AA_?$AAE?$AAS?$AAS?$AA_?$AAO?$AAP?$AAE@
??_C@_0BF@DDBHIJBD@PAGEVRFCNTKRNLMP?4EXE?$AA@
IovUtilWatermarkIrp
GUID_DEVCLASS_NETSERVICE
??_C@_0N@LAMBNALD@INIT15?325?330?$AA@
??_C@_0BP@GKOKKIGF@PAGEVRFY?$CIDeviceUsageTypePaging?$AA@
HvFreeHivePartial
CmpRegistryMachineSystemCurrentControlSetEnumString
??_C@_0CD@GECIDDGI@INITCONSTSystem?5PTE?5usage?5tracki@
IoFreeIrp
ObQueryTypeName
XIPlocate_disable
KdpSearchHammingDistance
IopLinkTrackingServiceObject
ViPnpVerifyMinorWasProcessedProperly
??_C@_0BE@DFHFHEPE@INITNOEXECUTE?$DNOPTIN?$AA@
SdbAlloc
IopFreeMiniPacket
ExSystemExceptionFilter
CcReadAheadIos
ZwGetCurrentProcessorNumber
VfPnpIsSystemRestrictedIrp
KiFreezeFlag
PspCreateThreadNotifyRoutine
ZwQueryVolumeInformationFile
WmipExtendBase
VfZwQueryObject
??_C@_09BDNNNLAO@INITINRAM?$AA@
GUID_DEVICE_BATTERY
IopDelayedRemoveWorker
PopUndockPolicyRegName
ExInterlockedAddLargeInteger
??_C@_0EB@CCBBHGNL@PAGE?6?6?5Current?5process?5is?5openin@
ExfRundownCompleted
??_C@_0BL@PLJONJPE@?4textHOTP_ID_PeHeaderHash1?$AA@
??_C@_1BO@HGHBHPJN@APEG?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AA?$AA@
CcFastCopyRead
IoDeviceHandlerObjectSize
NtOpenIoCompletion
GUID_DEVCLASS_PORTS
ExpDebuggerProcessKill
FsRtlExclusiveLockLookasideList
??_C@_1CA@NKJIAFDO@NITIOCSN?$AAT?$AAP?$AAC?$AAA?$AAT?$AA_?$AA8?$AA6?$AAK?$AAE?$AAY?$AA?$AA@
MiInDebugger
MmDisableModifiedWriteOfSection
??_C@_09EEKFDHA@?4text?$FN?3?$CFu?$AA@
MiFlushComplete
KiSwappingThread
ExpWatchProductTypeWorkItem
MiWsleFailures
ExpMoveFreeHandles
IoGetAttachedDevice
IopParentToRawTranslation
RtlpSysVolCreateSecurityDescriptor
TunnelLookasideList
IoReportTargetDeviceChange
ExpWatchSystemPrefixWorkItem
WmipDefaultAccessSecurityDescriptor
ArbPruneOrdering
HvpInitMap
ZwReleaseMutant
PiEventQueueEmpty
IoRemoveShareAccess
CmpInterlockedFunction
??_C@_0BL@ELJJOIJ@PAGEVRFY?$CIBusQueryDeviceID?$CJ?$AA@
CmpAppendLine
??_C@_0P@LHFENLHA@INITBURNMEMORY?$AA@
??_C@_0BH@DOPPEBEJ@ZwSetSystemInformation?$AA@
WmipAllocGuidEntryX
RtlpRunTable
PerfInfoLogInterrupt
VfZwCreateDirectoryObject
CcVacbLevelEntries
RtlpHashStringToAtom
VfFreeAdapterChannel
FsRtlAddToTunnelCache
??_C@_1BE@DJBFGKMM@APEG?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
__imp_HalInitSystem
ArbpUpdatePriority
ExDesktopObjectType
NtApphelpCacheControl
KiOp_Div
??_C@_0BH@NMHOHNGG@INITMachineDescription?$AA@
??_C@_0BM@PHMHABGM@PAGEBreak?0?5or?5Ignore?5?$CIbi?$CJ?$DP?5?$AA@
MiPteStart
ExAcquireFastMutex
WmipRegWorkItemCount
InbvRotateGuiBootDisplay
CmpSetSecurityDescriptorInfo
??_C@_1O@LGOHJNPM@?$AAA?$AAC?$AAT?$AAI?$AAO?$AAN?$AA?$AA@
RtlAllocateStringRoutine
??_C@_0EO@FICIAHJC@PAGE?6?6?5Current?5process?5is?5creati@
??_C@_1BC@KGFNAHDH@?$AAS?$AAT?$AAO?$AAR?$AAP?$AAR?$AAO?$AAP?$AA?$AA@
CcPfParametersVerify
pIoQueryDeviceDescription
??_C@_0DF@DJEPKHNJ@PAGEVRFYVirtual?5address?5?$CFp?5is?5af@
PopPolicyLockThread
WmipWaitingMCAEvents
ExConvertExclusiveToSharedLite
??_C@_0BC@CIEMNDDG@?4text?3?$CFu?4?$CFu?4?$CFu?4?$CFu?$AA@
LsapEvent
??_C@_1BM@BDGNAFP@?$AAM?$AAa?$AAk?$AAe?$AAL?$AAo?$AAw?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?$AA@
PsGetCurrentThreadStackBase
NtReadFile
RtlpUnwindPrologue
RtlAppendUnicodeToString
CmpFreeKeyValues
PsIdleProcess
CmpLoadHiveThread
CmpMarkIndexDirty
HvpReleaseCellMapped
MmMdlPagesAllocated
RtlDispatchException
WmipEnableDisableTrace
??_C@_1BM@NPPCAHHG@NITI?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
HAL_NULL_THUNK_DATA
GUID_DEVINTERFACE_DISK
Kd_SHPC_Mask
MiUserFaultRetries
ApphelpCacheParseBuffer
SdbGetNextChild
ObDuplicateObject
NtQueryBootOptions
MmAddPhysicalMemory
MiRemovePageFromList
NtInitializeRegistry
IopCreateRegistryKeyEx
ZwAllocateUuids
ObSystemDeviceMap
RtlGetSaclSecurityDescriptor
RtlInitializeRangeListPackage
MiSessionLastPte
PpProcessClearProblem
RtlAbsoluteToSelfRelativeSD
SepPublicDefaultSd
ExShortTime
ZwUnloadKeyEx
GUID_DEVCLASS_NETCLIENT
MiCancelWriteOfMappedPfn
ExfReleasePushLockExclusive
NtOpenProcessToken
PspJobTimeLimitsLock
memset
__NULL_IMPORT_DESCRIPTOR
ExpWin32ParseProcedure
FsRtlInitializeLargeMcb
MmDynamicPfn
??_C@_0M@NFLANMNO@PAGEHDLS?$BL?$FLH?$AA@
??_C@_1CO@BEOKKO@APEGOCSN?$AAT?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
MmProbeAndLockProcessPages
PfxInsertPrefix
SepValidOwnerSubjectContext
IopParseDevice
NtEnumerateKey
SeQueryInformationToken
MmTotalFreeSystemPtes
VfAdapterCallback
CmpGetRegistryValue
InbvTerminalTextColor
IoCreateStreamFileObject
CmpPostNotify
PoInitDriverServices
PoPowerSequence
NtOpenJobObject
NonPagedPoolLock
FsRtlStackOverflowRead
IopGetDevicePDO
ZwCloseObjectAuditAlarm
??_C@_1HG@MBMIJBBF@APEG?$AAn?$AAo?$AAt?$AA?5?$AAt?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAt?$AAe?$AAd?$AA?0?$AA?5?$AAt?$AAo?$AAo?$AA?5?$AAl?$AAo?$AAn?$AAg?$AA?5?$AAo?$AAr?$AA?5?$AAi?$AAn@
SeManageVolumePrivilege
IopUnregisterDeviceInterface
??_C@_0P@POOPILO@INITXIPVERBOSE?$AA@
CmRegistryMachineSystemCurrentControlSetEnumName
PiFindDevInstMatch
VfZwQueryFullAttributesFile
IoRaiseInformationalHardError
KeCapturePersistentThreadState
??_C@_1CA@GKCKBGIO@?$AAP?$AAo?$AAo?$AAl?$AAT?$AAa?$AAg?$AAO?$AAv?$AAe?$AAr?$AAr?$AAu?$AAn?$AAs?$AA?$AA@
CcPinRead
IopNumberDeviceNodes
ExAcquireSharedStarveExclusive
ExAcquireSharedStarveExclusive
ExAcquireSharedStarveExclusive
ExAcquireSharedStarveExclusive
ExAcquireSharedStarveExclusive
ExAcquireSharedStarveExclusive
ExAcquireSharedStarveExclusive
ExAcquireSharedStarveExclusive
LIST_ENTRY64
Flink
Blink
Blink
LIST_ENTRY64
Flink
Blink
LIST_ENTRY32
Flink
Blink
Blink
LIST_ENTRY32
Flink
Blink
Blink
Blink
Blink
Blink
_ULARGE_INTEGER
LowPart
HighPart
u
QuadPart
<unnamed-tag>
LowPart
HighPart
_ULARGE_INTEGER
LowPart
HighPart
u
QuadPart
_LIST_ENTRY
Flink
Blink
Blink
_LIST_ENTRY
Flink
Blink
_IMAGE_NT_HEADERS64
Signature
FileHeader
OptionalHeader
OptionalHeader
_IMAGE_FILE_HEADER
Machine
NumberOfSections
TimeDateStamp
PointerToSymbolTable
NumberOfSymbols
SizeOfOptionalHeader
Characteristics
_IMAGE_OPTIONAL_HEADER64
Magic
MajorLinkerVersion
MinorLinkerVersion
SizeOfCode
SizeOfInitializedData
SizeOfUninitializedData
AddressOfEntryPoint
BaseOfCode
ImageBase
SectionAlignment
FileAlignment
MajorOperatingSystemVersion
MinorOperatingSystemVersion
MajorImageVersion
MinorImageVersion
MajorSubsystemVersion
MinorSubsystemVersion
Win32VersionValue
SizeOfImage
SizeOfHeaders
CheckSum
Subsystem
DllCharacteristics
SizeOfStackReserve
SizeOfStackCommit
SizeOfHeapReserve
SizeOfHeapCommit
LoaderFlags
NumberOfRvaAndSizes
DataDirectory
_IMAGE_NT_HEADERS64
Signature
FileHeader
OptionalHeader
OptionalHeader
OptionalHeader
_LARGE_INTEGER
LowPart
HighPart
u
QuadPart
<unnamed-tag>
LowPart
HighPart
_LARGE_INTEGER
LowPart
HighPart
u
QuadPart
QuadPart
_RTL_BITMAP
SizeOfBitMap
Buffer
Buffer
_RTL_BITMAP
SizeOfBitMap
Buffer
_LUID
LowPart
HighPart
_LUID
LowPart
HighPart
HighPart
HighPart
HighPart
HighPart
HighPart
HighPart
_KPRCB
MxCsr
Number
NestingLevel
InterruptRequest
IdleHalt
CurrentThread
NextThread
IdleThread
UserRsp
RspBase
PrcbLock
SetMember
ProcessorState
CpuType
CpuID
CpuStep
MHz
HalReserved
MinorVersion
MajorVersion
BuildType
CpuVendor
InitialApicId
LogicalProcessorsPerPhysicalProcessor
ApicMask
CFlushSize
PrcbPad0x
AcpiReserved
PrcbPad00
LockQueue
PPLookasideList
PPNPagedLookasideList
PPPagedLookasideList
PacketBarrier
DeferredReadyListHead
MmPageFaultCount
MmCopyOnWriteCount
MmTransitionCount
MmCacheTransitionCount
MmDemandZeroCount
MmPageReadCount
MmPageReadIoCount
MmCacheReadCount
MmCacheIoCount
MmDirtyPagesWriteCount
MmDirtyWriteIoCount
MmMappedPagesWriteCount
MmMappedWriteIoCount
LookasideIrpFloat
KeSystemCalls
IoReadOperationCount
IoWriteOperationCount
IoOtherOperationCount
IoReadTransferCount
IoWriteTransferCount
IoOtherTransferCount
KeContextSwitches
PrcbPad2
TargetSet
IpiFrozen
PrcbPad3
RequestMailbox
SenderSummary
PrcbPad4
DpcData
DpcStack
SavedRsp
MaximumDpcQueueDepth
DpcRequestRate
MinimumDpcRate
DpcInterruptRequested
DpcThreadRequested
DpcRoutineActive
DpcThreadActive
TimerHand
TimerRequest
TickOffset
MasterOffset
DpcLastCount
ThreadDpcEnable
QuantumEnd
PrcbPad50
IdleSchedule
DpcSetEventRequest
PrcbPad40
DpcThread
DpcEvent
CallDpc
PrcbPad7
WaitListHead
ReadySummary
QueueIndex
DispatcherReadyListHead
InterruptCount
KernelTime
UserTime
DpcTime
InterruptTime
AdjustDpcThreshold
SkipTick
DebuggerSavedIRQL
PollSlot
PrcbPad8
ParentNode
MultiThreadProcessorSet
MultiThreadSetMaster
Sleeping
PrcbPad90
DebugDpcTime
PageColor
NodeColor
NodeShiftedColor
SecondaryColorMask
PrcbPad9
CcFastReadNoWait
CcFastReadWait
CcFastReadNotPossible
CcCopyReadNoWait
CcCopyReadWait
CcCopyReadNoWaitMiss
KeAlignmentFixupCount
KeDcacheFlushCount
KeExceptionDispatchCount
KeFirstLevelTbFills
KeFloatingEmulationCount
KeIcacheFlushCount
KeSecondLevelTbFills
VendorString
PrcbPad10
FeatureBits
UpdateSignature
PowerState
Cache
CacheCount
CacheCount
_KTHREAD
Header
MutantListHead
InitialStack
StackLimit
KernelStack
ThreadLock
ApcState
ApcStateFill
ApcQueueable
NextProcessor
DeferredProcessor
AdjustReason
AdjustIncrement
ApcQueueLock
WaitStatus
WaitBlockList
GateObject
Alertable
WaitNext
WaitReason
Priority
EnableStackSwap
SwapBusy
Alerted
WaitListEntry
SwapListEntry
Queue
Teb
Timer
TimerFill
AutoAlignment
DisableBoost
ReservedFlags
ThreadFlags
WaitBlock
WaitBlockFill0
SystemAffinityActive
WaitBlockFill1
PreviousMode
WaitBlockFill2
ResourceIndex
WaitBlockFill3
LargeStack
WaitBlockFill4
ContextSwitches
WaitBlockFill5
State
NpxState
WaitIrql
WaitMode
WaitBlockFill6
WaitTime
WaitBlockFill7
KernelApcDisable
SpecialApcDisable
CombinedApcDisable
QueueListEntry
TrapFrame
CallbackStack
ServiceTable
KernelLimit
ApcStateIndex
IdealProcessor
Preempted
ProcessReadyQueue
Win32kTable
Win32kLimit
KernelStackResident
BasePriority
PriorityDecrement
Saturation
UserAffinity
Process
Affinity
ApcStatePointer
SavedApcState
SavedApcStateFill
FreezeCount
SuspendCount
UserIdealProcessor
CalloutActive
CodePatchInProgress
Win32Thread
StackBase
SuspendApc
SuspendApcFill0
Quantum
SuspendApcFill1
QuantumReset
SuspendApcFill2
KernelTime
SuspendApcFill3
TlsArray
SuspendApcFill4
LegoData
SuspendApcFill5
PowerState
UserTime
SuspendSemaphore
SuspendSemaphorefill
SListFaultCount
ThreadListEntry
SListFaultAddress
ReadOperationCount
WriteOperationCount
OtherOperationCount
ReadTransferCount
WriteTransferCount
OtherTransferCount
OtherTransferCount
_KPROCESSOR_STATE
SpecialRegisters
ContextFrame



_KSPIN_LOCK_QUEUE
Next
Lock

_PP_LOOKASIDE_LIST
P
L



_SINGLE_LIST_ENTRY
Next


_REQUEST_MAILBOX
RequestSummary
RequestPacket
Virtual


_KDPC_DATA
DpcListHead
DpcLock
DpcQueueDepth
DpcCount

_KEVENT
Header
_KDPC
Type
Importance
Number
Expedite
DpcListEntry
DeferredRoutine
DeferredContext
SystemArgument1
SystemArgument2
DpcData


_KNODE
DeadStackList
PfnDereferenceSListHead
Alignment
ProcessorMask
Color
Seed
NodeNumber
Flags
MmShiftedColor
FreeCount
PfnDeferredList
PfnDeferredList


_PROCESSOR_POWER_STATE
IdleFunction
Idle0KernelTimeLimit
Idle0LastTime
IdleHandlers
IdleState
IdleHandlersCount
LastCheck
IdleTimes
IdleTime1
PromotionCheck
IdleTime2
CurrentThrottle
ThermalThrottleLimit
CurrentThrottleIndex
ThermalThrottleIndex
LastKernelUserTime
PerfIdleTime
DebugDelta
DebugCount
LastSysTime
TotalIdleStateTime
TotalIdleTransitions
PreviousC3StateTime
KneeThrottleIndex
ThrottleLimitIndex
PerfStatesCount
ProcessorMinThrottle
ProcessorMaxThrottle
LastBusyPercentage
LastC3Percentage
LastAdjustedBusyPercentage
PromotionCount
DemotionCount
ErrorCount
RetryCount
Flags
PerfCounterFrequency
PerfTickCount
PerfTimer
PerfDpc
PerfStates
PerfSetThrottle
LastC3KernelUserTime
Spare1
_CACHE_DESCRIPTOR
Level
Associativity
LineSize
Size
Type

_KPRCB
MxCsr
Number
NestingLevel
InterruptRequest
IdleHalt
CurrentThread
NextThread
IdleThread
UserRsp
RspBase
PrcbLock
SetMember
ProcessorState
CpuType
CpuID
CpuStep
MHz
HalReserved
MinorVersion
MajorVersion
BuildType
CpuVendor
InitialApicId
LogicalProcessorsPerPhysicalProcessor
ApicMask
CFlushSize
PrcbPad0x
AcpiReserved
PrcbPad00
LockQueue
PPLookasideList
PPNPagedLookasideList
PPPagedLookasideList
PacketBarrier
DeferredReadyListHead
MmPageFaultCount
MmCopyOnWriteCount
MmTransitionCount
MmCacheTransitionCount
MmDemandZeroCount
MmPageReadCount
MmPageReadIoCount
MmCacheReadCount
MmCacheIoCount
MmDirtyPagesWriteCount
MmDirtyWriteIoCount
MmMappedPagesWriteCount
MmMappedWriteIoCount
LookasideIrpFloat
KeSystemCalls
IoReadOperationCount
IoWriteOperationCount
IoOtherOperationCount
IoReadTransferCount
IoWriteTransferCount
IoOtherTransferCount
KeContextSwitches
PrcbPad2
TargetSet
IpiFrozen
PrcbPad3
RequestMailbox
SenderSummary
PrcbPad4
DpcData
DpcStack
SavedRsp
MaximumDpcQueueDepth
DpcRequestRate
MinimumDpcRate
DpcInterruptRequested
DpcThreadRequested
DpcRoutineActive
DpcThreadActive
TimerHand
TimerRequest
TickOffset
MasterOffset
DpcLastCount
ThreadDpcEnable
QuantumEnd
PrcbPad50
IdleSchedule
DpcSetEventRequest
PrcbPad40
DpcThread
DpcEvent
CallDpc
PrcbPad7
WaitListHead
ReadySummary
QueueIndex
DispatcherReadyListHead
InterruptCount
KernelTime
UserTime
DpcTime
InterruptTime
AdjustDpcThreshold
SkipTick
DebuggerSavedIRQL
PollSlot
PrcbPad8
ParentNode
MultiThreadProcessorSet
MultiThreadSetMaster
Sleeping
PrcbPad90
DebugDpcTime
PageColor
NodeColor
NodeShiftedColor
SecondaryColorMask
PrcbPad9
CcFastReadNoWait
CcFastReadWait
CcFastReadNotPossible
CcCopyReadNoWait
CcCopyReadWait
CcCopyReadNoWaitMiss
KeAlignmentFixupCount
KeDcacheFlushCount
KeExceptionDispatchCount
KeFirstLevelTbFills
KeFloatingEmulationCount
KeIcacheFlushCount
KeSecondLevelTbFills
VendorString
PrcbPad10
FeatureBits
UpdateSignature
PowerState
Cache
CacheCount
CacheCount
_SINGLE_LIST_ENTRY
Next
_KDPC_IMPORTANCE
LowImportance
MediumImportance
HighImportance
HighImportance
HighImportance
HighImportance
HighImportance
HighImportance
HighImportance
HighImportance
_KDPC
Type
Importance
Number
Expedite
DpcListEntry
DeferredRoutine
DeferredContext
SystemArgument1
SystemArgument2
DpcData
_KERNEL_STACK_CONTROL
XmmSaveArea
Fill
Current
Previous
Previous
_XMM_SAVE_AREA32
ControlWord
StatusWord
TagWord
Reserved1
ErrorOpcode
ErrorOffset
ErrorSelector
Reserved2
DataOffset
DataSelector
Reserved3
MxCsr
MxCsr_Mask
FloatRegisters
XmmRegisters
Reserved4

_KERNEL_STACK_SEGMENT
StackBase
StackLimit
KernelStack
InitialStack
ActualLimit
_KERNEL_STACK_CONTROL
XmmSaveArea
Fill
Current
Previous
_DISPATCHER_HEADER
Type
Absolute
NpxIrql
Size
Hand
Inserted
DebugActive
Lock
SignalState
WaitListHead
_KAPC_STATE
ApcListHead
Process
KernelApcInProgress
KernelApcPending
UserApcPending

_KWAIT_BLOCK
WaitListEntry
Thread
Object
NextWaitBlock
WaitKey
WaitType
SpareByte
SpareLong
SpareLong
_KGATE
Header
Header
_KQUEUE
Header
EntryListHead
CurrentCount
MaximumCount
ThreadListHead
ThreadListHead
_KTIMER
Header
DueTime
TimerListEntry
Dpc
Period









_KTRAP_FRAME
P1Home
P2Home
P3Home
P4Home
P5
PreviousMode
PreviousIrql
FaultIndicator
ExceptionActive
MxCsr
Rax
Rcx
Rdx
R8
R9
R10
R11
GsBase
GsSwap
Xmm0
Xmm1
Xmm2
Xmm3
Xmm4
Xmm5
FaultAddress
ContextRecord
TimeStamp
Dr0
Dr1
Dr2
Dr3
Dr6
Dr7
DebugControl
LastBranchToRip
LastBranchFromRip
LastExceptionToRip
LastExceptionFromRip
LastBranchControl
LastBranchMSR
SegDs
SegEs
SegFs
SegGs
TrapFrame
Rbx
Rdi
Rsi
Rbp
ErrorCode
ExceptionFrame
Rip
SegCs
Fill1
EFlags
Fill2
Rsp
SegSs
Fill3
CodePatchCycle
CodePatchCycle
_KPROCESS
Header
ProfileListHead
DirectoryTableBase
IopmOffset
ActiveProcessors
KernelTime
UserTime
ReadyListHead
SwapListEntry
Reserved1
ThreadListHead
ProcessLock
Affinity
AutoAlignment
DisableBoost
DisableQuantum
ReservedFlags
ProcessFlags
BasePriority
QuantumReset
State
ThreadSeed
PowerState
IdealNode
Visited
Flags
ExecuteOptions
StackCount
ProcessListEntry
ProcessListEntry
ProcessListEntry

_KAPC
Type
SpareByte0
Size
SpareByte1
SpareLong0
Thread
ApcListEntry
KernelRoutine
RundownRoutine
NormalRoutine
NormalContext
SystemArgument1
SystemArgument2
ApcStateIndex
ApcMode
Inserted





_KSEMAPHORE
Header
Limit

_KTHREAD
Header
MutantListHead
InitialStack
StackLimit
KernelStack
ThreadLock
ApcState
ApcStateFill
ApcQueueable
NextProcessor
DeferredProcessor
AdjustReason
AdjustIncrement
ApcQueueLock
WaitStatus
WaitBlockList
GateObject
Alertable
WaitNext
WaitReason
Priority
EnableStackSwap
SwapBusy
Alerted
WaitListEntry
SwapListEntry
Queue
Teb
Timer
TimerFill
AutoAlignment
DisableBoost
ReservedFlags
ThreadFlags
WaitBlock
WaitBlockFill0
SystemAffinityActive
WaitBlockFill1
PreviousMode
WaitBlockFill2
ResourceIndex
WaitBlockFill3
LargeStack
WaitBlockFill4
ContextSwitches
WaitBlockFill5
State
NpxState
WaitIrql
WaitMode
WaitBlockFill6
WaitTime
WaitBlockFill7
KernelApcDisable
SpecialApcDisable
CombinedApcDisable
QueueListEntry
TrapFrame
CallbackStack
ServiceTable
KernelLimit
ApcStateIndex
IdealProcessor
Preempted
ProcessReadyQueue
Win32kTable
Win32kLimit
KernelStackResident
BasePriority
PriorityDecrement
Saturation
UserAffinity
Process
Affinity
ApcStatePointer
SavedApcState
SavedApcStateFill
FreezeCount
SuspendCount
UserIdealProcessor
CalloutActive
CodePatchInProgress
Win32Thread
StackBase
SuspendApc
SuspendApcFill0
Quantum
SuspendApcFill1
QuantumReset
SuspendApcFill2
KernelTime
SuspendApcFill3
TlsArray
SuspendApcFill4
LegoData
SuspendApcFill5
PowerState
UserTime
SuspendSemaphore
SuspendSemaphorefill
SListFaultCount
ThreadListEntry
SListFaultAddress
ReadOperationCount
WriteOperationCount
OtherOperationCount
ReadTransferCount
WriteTransferCount
OtherTransferCount
OtherTransferCount
_KERNEL_STACK_SEGMENT
StackBase
StackLimit
KernelStack
InitialStack
ActualLimit
_FAST_MUTEX
Count
Owner
Contention
Gate
OldIrql
OldIrql
_FAST_MUTEX
Count
Owner
Contention
Gate
OldIrql
_SLIST_HEADER
Alignment
Region
Region
_SLIST_HEADER
Alignment
Region
_NPAGED_LOOKASIDE_LIST
L
L
_GENERAL_LOOKASIDE
ListHead
Depth
MaximumDepth
TotalAllocates
AllocateMisses
AllocateHits
TotalFrees
FreeMisses
FreeHits
Type
Tag
Size
Allocate
Free
ListEntry
LastTotalAllocates
LastAllocateMisses
LastAllocateHits
Future
_NPAGED_LOOKASIDE_LIST
L
_PAGED_LOOKASIDE_LIST
L
L
_PAGED_LOOKASIDE_LIST
L
_PP_NPAGED_LOOKASIDE_NUMBER
LookasideSmallIrpList
LookasideLargeIrpList
LookasideMdlList
LookasideCreateInfoList
LookasideNameBufferList
LookasideTwilightList
LookasideCompletionList
LookasideMaximumList
LookasideMaximumList
_POOL_TYPE
NonPagedPool
PagedPool
NonPagedPoolMustSucceed
DontUseThisType
NonPagedPoolCacheAligned
PagedPoolCacheAligned
NonPagedPoolCacheAlignedMustS
MaxPoolType
NonPagedPoolSession
PagedPoolSession
NonPagedPoolMustSucceedSession
DontUseThisTypeSession
NonPagedPoolCacheAlignedSession
PagedPoolCacheAlignedSession
NonPagedPoolCacheAlignedMustSSession
NonPagedPoolCacheAlignedMustSSession
NonPagedPoolCacheAlignedMustSSession
NonPagedPoolCacheAlignedMustSSession
NonPagedPoolCacheAlignedMustSSession
NonPagedPoolCacheAlignedMustSSession
NonPagedPoolCacheAlignedMustSSession
NonPagedPoolCacheAlignedMustSSession
NonPagedPoolCacheAlignedMustSSession

_GENERAL_LOOKASIDE
ListHead
Depth
MaximumDepth
TotalAllocates
AllocateMisses
AllocateHits
TotalFrees
FreeMisses
FreeHits
Type
Tag
Size
Allocate
Free
ListEntry
LastTotalAllocates
LastAllocateMisses
LastAllocateHits
Future
Future
_QUAD
UseThisFieldToCopy
DoNotUseThisField
DoNotUseThisField
_QUAD
UseThisFieldToCopy
DoNotUseThisField
DoNotUseThisField
_UNICODE_STRING
Length
MaximumLength
Buffer
Buffer
_UNICODE_STRING
Length
MaximumLength
Buffer
_IO_STATUS_BLOCK
Status
Pointer
Information
Information
_IO_STATUS_BLOCK
Status
Pointer
Information
Information
_EX_RUNDOWN_REF
Count
Ptr
Ptr
_EX_RUNDOWN_REF
Count
Ptr
_EX_FAST_REF
Object
RefCnt
Value
_EX_FAST_REF
Object
RefCnt
Value
Value
_EX_PUSH_LOCK
Locked
Waiting
Waking
MultipleShared
Shared
Value
Ptr
Ptr
_EX_PUSH_LOCK
Locked
Waiting
Waking
MultipleShared
Shared
Value
Ptr
_EX_PUSH_LOCK_WAIT_BLOCK
WakeGate
WakeEvent
Next
Last
Previous
ShareCount
Flags
Flags
_EX_PUSH_LOCK_WAIT_BLOCK
WakeGate
WakeEvent
Next
Last
Previous
ShareCount
Flags
_EX_PUSH_LOCK_CACHE_AWARE
Locks
Locks

_EX_PUSH_LOCK_CACHE_AWARE
Locks
_ETHREAD
Tcb
CreateTime
ExitTime
LpcReplyChain
KeyedWaitChain
ExitStatus
OfsChain
PostBlockList
TerminationPort
ReaperLink
KeyedWaitValue
ActiveTimerListLock
ActiveTimerListHead
Cid
LpcReplySemaphore
KeyedWaitSemaphore
LpcReplyMessage
LpcWaitingOnPort
ImpersonationInfo
IrpList
TopLevelIrp
DeviceToVerify
ThreadsProcess
StartAddress
Win32StartAddress
LpcReceivedMessageId
ThreadListEntry
RundownProtect
ThreadLock
LpcReplyMessageId
ReadClusterSize
GrantedAccess
CrossThreadFlags
Terminated
DeadThread
HideFromDebugger
ActiveImpersonationInfo
SystemThread
HardErrorsAreDisabled
BreakOnTermination
SkipCreationMsg
SkipTerminationMsg
SameThreadPassiveFlags
ActiveExWorker
ExWorkerCanWaitUser
MemoryMaker
KeyedEventInUse
SameThreadApcFlags
LpcReceivedMsgIdValid
LpcExitThreadCalled
AddressSpaceOwner
OwnsProcessWorkingSetExclusive
OwnsProcessWorkingSetShared
OwnsSystemWorkingSetExclusive
OwnsSystemWorkingSetShared
OwnsSessionWorkingSetExclusive
OwnsSessionWorkingSetShared
ApcNeeded
ForwardClusterOnly
DisablePageFaultClustering
ActiveFaultCount
ActiveFaultCount
_TERMINATION_PORT
Next
Port
Port
_CLIENT_ID
UniqueProcess
UniqueThread
_PS_IMPERSONATION_INFORMATION
Token
CopyOnOpen
EffectiveOnly
ImpersonationLevel
ImpersonationLevel
_DEVICE_OBJECT
Type
Size
ReferenceCount
DriverObject
NextDevice
AttachedDevice
CurrentIrp
Timer
Flags
Characteristics
Vpb
DeviceExtension
DeviceType
StackSize
Queue
AlignmentRequirement
DeviceQueue
Dpc
ActiveThreadCount
SecurityDescriptor
DeviceLock
SectorSize
Spare1
DeviceObjectExtension
Reserved
Reserved
_EPROCESS
Pcb
ProcessLock
CreateTime
ExitTime
RundownProtect
UniqueProcessId
ActiveProcessLinks
QuotaUsage
QuotaPeak
CommitCharge
PeakVirtualSize
VirtualSize
SessionProcessLinks
DebugPort
ExceptionPort
ObjectTable
Token
WorkingSetPage
AddressCreationLock
HyperSpaceLock
ForkInProgress
HardwareTrigger
PhysicalVadRoot
CloneRoot
NumberOfPrivatePages
NumberOfLockedPages
Win32Process
Job
SectionObject
SectionBaseAddress
QuotaBlock
WorkingSetWatch
Win32WindowStation
InheritedFromUniqueProcessId
LdtInformation
VadFreeHint
VdmObjects
DeviceMap
Spare0
PageDirectoryPte
Filler
Session
ImageFileName
JobLinks
LockedPagesList
ThreadListHead
SecurityPort
Wow64Process
ActiveThreads
GrantedAccess
DefaultHardErrorProcessing
LastThreadExitStatus
Peb
PrefetchTrace
ReadOperationCount
WriteOperationCount
OtherOperationCount
ReadTransferCount
WriteTransferCount
OtherTransferCount
CommitChargeLimit
CommitChargePeak
AweInfo
SeAuditProcessCreationInfo
Vm
Spares
ModifiedPageCount
JobStatus
Flags
CreateReported
NoDebugInherit
ProcessExiting
ProcessDelete
Wow64SplitPages
VmDeleted
OutswapEnabled
Outswapped
ForkFailed
Wow64VaSpace4Gb
AddressSpaceInitialized
SetTimerResolution
BreakOnTermination
SessionCreationUnderway
WriteWatch
ProcessInSession
OverrideAddressSpace
HasAddressSpace
LaunchPrefetched
InjectInpageErrors
VmTopDown
ImageNotifyDone
PdeUpdateNeeded
VdmAllowed
SmapAllowed
CreateFailed
DefaultIoPriority
Spare1
Spare2
ExitStatus
NextPageColor
SubSystemMinorVersion
SubSystemMajorVersion
SubSystemVersion
PriorityClass
VadRoot
Cookie
Cookie
_ETHREAD
Tcb
CreateTime
ExitTime
LpcReplyChain
KeyedWaitChain
ExitStatus
OfsChain
PostBlockList
TerminationPort
ReaperLink
KeyedWaitValue
ActiveTimerListLock
ActiveTimerListHead
Cid
LpcReplySemaphore
KeyedWaitSemaphore
LpcReplyMessage
LpcWaitingOnPort
ImpersonationInfo
IrpList
TopLevelIrp
DeviceToVerify
ThreadsProcess
StartAddress
Win32StartAddress
LpcReceivedMessageId
ThreadListEntry
RundownProtect
ThreadLock
LpcReplyMessageId
ReadClusterSize
GrantedAccess
CrossThreadFlags
Terminated
DeadThread
HideFromDebugger
ActiveImpersonationInfo
SystemThread
HardErrorsAreDisabled
BreakOnTermination
SkipCreationMsg
SkipTerminationMsg
SameThreadPassiveFlags
ActiveExWorker
ExWorkerCanWaitUser
MemoryMaker
KeyedEventInUse
SameThreadApcFlags
LpcReceivedMsgIdValid
LpcExitThreadCalled
AddressSpaceOwner
OwnsProcessWorkingSetExclusive
OwnsProcessWorkingSetShared
OwnsSystemWorkingSetExclusive
OwnsSystemWorkingSetShared
OwnsSessionWorkingSetExclusive
OwnsSessionWorkingSetShared
ApcNeeded
ForwardClusterOnly
DisablePageFaultClustering
ActiveFaultCount

_HANDLE_TABLE
TableCode
QuotaProcess
UniqueProcessId
HandleTableLock
HandleTableList
HandleContentionEvent
DebugInfo
ExtraInfoPages
FirstFree
LastFree
NextHandleNeedingPool
HandleCount
Flags
StrictFIFO
StrictFIFO
_KGUARDED_MUTEX
Count
Owner
Contention
Gate
KernelApcDisable
SpecialApcDisable
CombinedApcDisable
_MM_AVL_TABLE
BalancedRoot
DepthOfTree
Unused
NumberGenericTableElements
NodeHint
NodeFreeHint
NodeFreeHint
_EJOB
Event
JobLinks
ProcessListHead
JobLock
TotalUserTime
TotalKernelTime
ThisPeriodTotalUserTime
ThisPeriodTotalKernelTime
TotalPageFaultCount
TotalProcesses
ActiveProcesses
TotalTerminatedProcesses
PerProcessUserTimeLimit
PerJobUserTimeLimit
LimitFlags
MinimumWorkingSetSize
MaximumWorkingSetSize
ActiveProcessLimit
Affinity
PriorityClass
UIRestrictionsClass
SecurityLimitFlags
Token
Filter
EndOfJobTimeAction
CompletionPort
CompletionKey
SessionId
SchedulingClass
ReadOperationCount
WriteOperationCount
OtherOperationCount
ReadTransferCount
WriteTransferCount
OtherTransferCount
IoInfo
ProcessMemoryLimit
JobMemoryLimit
PeakProcessMemoryUsed
PeakJobMemoryUsed
CurrentJobMemoryUsed
MemoryLimitsLock
JobSetLinks
MemberLevel
JobFlags
JobFlags
_EPROCESS_QUOTA_BLOCK
QuotaEntry
QuotaList
ReferenceCount
ProcessCount
ProcessCount
_PAGEFAULT_HISTORY
CurrentIndex
MaxIndex
SpinLock
Reserved
WatchInfo
WatchInfo

_HARDWARE_PTE
Valid
Write
Owner
WriteThrough
CacheDisable
Accessed
Dirty
LargePage
Global
CopyOnWrite
Prototype
reserved0
PageFrameNumber
reserved1
SoftwareWsIndex
NoExecute

_WOW64_PROCESS
Wow64
Wow64
_PEB
InheritedAddressSpace
ReadImageFileExecOptions
BeingDebugged
BitField
ImageUsesLargePages
SpareBits
Mutant
ImageBaseAddress
Ldr
ProcessParameters
SubSystemData
ProcessHeap
FastPebLock
AtlThunkSListPtr
SparePtr2
EnvironmentUpdateCount
KernelCallbackTable
SystemReserved
SpareUlong
FreeList
TlsExpansionCounter
TlsBitmap
TlsBitmapBits
ReadOnlySharedMemoryBase
ReadOnlySharedMemoryHeap
ReadOnlyStaticServerData
AnsiCodePageData
OemCodePageData
UnicodeCaseTableData
NumberOfProcessors
NtGlobalFlag
CriticalSectionTimeout
HeapSegmentReserve
HeapSegmentCommit
HeapDeCommitTotalFreeThreshold
HeapDeCommitFreeBlockThreshold
NumberOfHeaps
MaximumNumberOfHeaps
ProcessHeaps
GdiSharedHandleTable
ProcessStarterHelper
GdiDCAttributeList
LoaderLock
OSMajorVersion
OSMinorVersion
OSBuildNumber
OSCSDVersion
OSPlatformId
ImageSubsystem
ImageSubsystemMajorVersion
ImageSubsystemMinorVersion
ImageProcessAffinityMask
GdiHandleBuffer
PostProcessInitRoutine
TlsExpansionBitmap
TlsExpansionBitmapBits
SessionId
AppCompatFlags
AppCompatFlagsUser
pShimData
AppCompatInfo
CSDVersion
ActivationContextData
ProcessAssemblyStorageMap
SystemDefaultActivationContextData
SystemAssemblyStorageMap
MinimumStackCommit
FlsCallback
FlsListHead
FlsBitmap
FlsBitmapBits
FlsHighIndex
FlsHighIndex
_SE_AUDIT_PROCESS_CREATION_INFO
ImageFileName
_MMSUPPORT
WorkingSetExpansionLinks
LastTrimTime
Flags
PageFaultCount
PeakWorkingSetSize
GrowthSinceLastEstimate
MinimumWorkingSetSize
MaximumWorkingSetSize
VmWorkingSetList
Claim
NextEstimationSlot
NextAgingSlot
EstimatedAvailable
WorkingSetSize
WorkingSetMutex
_EPROCESS
Pcb
ProcessLock
CreateTime
ExitTime
RundownProtect
UniqueProcessId
ActiveProcessLinks
QuotaUsage
QuotaPeak
CommitCharge
PeakVirtualSize
VirtualSize
SessionProcessLinks
DebugPort
ExceptionPort
ObjectTable
Token
WorkingSetPage
AddressCreationLock
HyperSpaceLock
ForkInProgress
HardwareTrigger
PhysicalVadRoot
CloneRoot
NumberOfPrivatePages
NumberOfLockedPages
Win32Process
Job
SectionObject
SectionBaseAddress
QuotaBlock
WorkingSetWatch
Win32WindowStation
InheritedFromUniqueProcessId
LdtInformation
VadFreeHint
VdmObjects
DeviceMap
Spare0
PageDirectoryPte
Filler
Session
ImageFileName
JobLinks
LockedPagesList
ThreadListHead
SecurityPort
Wow64Process
ActiveThreads
GrantedAccess
DefaultHardErrorProcessing
LastThreadExitStatus
Peb
PrefetchTrace
ReadOperationCount
WriteOperationCount
OtherOperationCount
ReadTransferCount
WriteTransferCount
OtherTransferCount
CommitChargeLimit
CommitChargePeak
AweInfo
SeAuditProcessCreationInfo
Vm
Spares
ModifiedPageCount
JobStatus
Flags
CreateReported
NoDebugInherit
ProcessExiting
ProcessDelete
Wow64SplitPages
VmDeleted
OutswapEnabled
Outswapped
ForkFailed
Wow64VaSpace4Gb
AddressSpaceInitialized
SetTimerResolution
BreakOnTermination
SessionCreationUnderway
WriteWatch
ProcessInSession
OverrideAddressSpace
HasAddressSpace
LaunchPrefetched
InjectInpageErrors
VmTopDown
ImageNotifyDone
PdeUpdateNeeded
VdmAllowed
SmapAllowed
CreateFailed
DefaultIoPriority
Spare1
Spare2
ExitStatus
NextPageColor
SubSystemMinorVersion
SubSystemMajorVersion
SubSystemVersion
PriorityClass
VadRoot
Cookie
_OBJECT_HEADER
PointerCount
HandleCount
NextToFree
Type
NameInfoOffset
HandleInfoOffset
QuotaInfoOffset
Flags
ObjectCreateInfo
QuotaBlockCharged
SecurityDescriptor
Body
Body
_OBJECT_TYPE
Mutex
TypeList
Name
DefaultObject
Index
TotalNumberOfObjects
TotalNumberOfHandles
HighWaterNumberOfObjects
HighWaterNumberOfHandles
TypeInfo
Key
ObjectLocks
ObjectLocks
_OBJECT_CREATE_INFORMATION
Attributes
RootDirectory
ParseContext
ProbeMode
PagedPoolCharge
NonPagedPoolCharge
SecurityDescriptorCharge
SecurityDescriptor
SecurityQos
SecurityQualityOfService
SecurityQualityOfService
_OBJECT_HEADER
PointerCount
HandleCount
NextToFree
Type
NameInfoOffset
HandleInfoOffset
QuotaInfoOffset
Flags
ObjectCreateInfo
QuotaBlockCharged
SecurityDescriptor
Body
_OBJECT_HEADER_QUOTA_INFO
PagedPoolCharge
NonPagedPoolCharge
SecurityDescriptorCharge
ExclusiveProcess
Reserved
Reserved
_OBJECT_HEADER_QUOTA_INFO
PagedPoolCharge
NonPagedPoolCharge
SecurityDescriptorCharge
ExclusiveProcess
Reserved
_OBJECT_HEADER_HANDLE_INFO
HandleCountDataBase
SingleEntry
SingleEntry
_OBJECT_HANDLE_COUNT_DATABASE
CountEntries
HandleCountEntries
HandleCountEntries
_OBJECT_HANDLE_COUNT_ENTRY
Process
HandleCount
_OBJECT_HEADER_HANDLE_INFO
HandleCountDataBase
SingleEntry
_OBJECT_HEADER_NAME_INFO
Directory
Name
QueryReferences
QueryReferences
_OBJECT_DIRECTORY
HashBuckets
Lock
DeviceMap
SessionId
SessionId
_OBJECT_HEADER_NAME_INFO
Directory
Name
QueryReferences
_OBJECT_HEADER_CREATOR_INFO
TypeList
CreatorUniqueProcess
CreatorBackTraceIndex
Reserved
Reserved
_OBJECT_HEADER_CREATOR_INFO
TypeList
CreatorUniqueProcess
CreatorBackTraceIndex
Reserved
_OBJECT_ATTRIBUTES
Length
RootDirectory
ObjectName
Attributes
SecurityDescriptor
SecurityQualityOfService
SecurityQualityOfService
_OBJECT_ATTRIBUTES
Length
RootDirectory
ObjectName
Attributes
SecurityDescriptor
SecurityQualityOfService
_ERESOURCE
SystemResourcesList
OwnerTable
ActiveCount
Flag
SharedWaiters
ExclusiveWaiters
OwnerThreads
ContentionCount
NumberOfSharedWaiters
NumberOfExclusiveWaiters
Address
CreatorBackTraceIndex
SpinLock
_OBJECT_TYPE_INITIALIZER
Length
UseDefaultObject
CaseInsensitive
InvalidAttributes
GenericMapping
ValidAccessMask
SecurityRequired
MaintainHandleCount
MaintainTypeList
PoolType
DefaultPagedPoolCharge
DefaultNonPagedPoolCharge
DumpProcedure
OpenProcedure
CloseProcedure
DeleteProcedure
ParseProcedure
SecurityProcedure
QueryNameProcedure
OkayToCloseProcedure

_OBJECT_TYPE
Mutex
TypeList
Name
DefaultObject
Index
TotalNumberOfObjects
TotalNumberOfHandles
HighWaterNumberOfObjects
HighWaterNumberOfHandles
TypeInfo
Key
ObjectLocks
_OBJECT_HANDLE_INFORMATION
HandleAttributes
GrantedAccess
GrantedAccess
_OBJECT_HANDLE_INFORMATION
HandleAttributes
GrantedAccess
_PERFINFO_GROUPMASK
Masks
Masks

_PERFINFO_GROUPMASK
Masks
Masks
_KGUARDED_MUTEX
Count
Owner
Contention
Gate
KernelApcDisable
SpecialApcDisable
CombinedApcDisable
_MMPTE
u
u
_MMPTE_HARDWARE
Valid
Write
Owner
WriteThrough
CacheDisable
Accessed
Dirty
LargePage
Global
CopyOnWrite
Prototype
reserved0
PageFrameNumber
reserved1
SoftwareWsIndex
NoExecute
_MMPTE_HARDWARE_LARGEPAGE
Valid
Write
Owner
WriteThrough
CacheDisable
Accessed
Dirty
LargePage
Global
CopyOnWrite
Prototype
reserved0
PAT
reserved1
PageFrameNumber
reserved2
_MMPTE_PROTOTYPE
Valid
Unused0
ReadOnly
Unused1
Prototype
Protection
ProtoAddress
_MMPTE_SOFTWARE
Valid
PageFileLow
Protection
Prototype
Transition
UsedPageTableEntries
Reserved
PageFileHigh
_MMPTE_TRANSITION
Valid
Write
Owner
WriteThrough
CacheDisable
Protection
Prototype
Transition
PageFrameNumber
Unused
_MMPTE_SUBSECTION
Valid
Unused0
Protection
Prototype
Unused1
SubsectionAddress
_MMPTE_LIST
Valid
OneEntry
filler0
Protection
Prototype
Transition
filler1
NextEntry
<unnamed-tag>
Long
Hard
HardLarge
Flush
Proto
Soft
Trans
Subsect
List
_MMPTE
u
_MEMORY_CACHING_TYPE
MmNonCached
MmCached
MmWriteCombined
MmHardwareCoherentCached
MmNonCachedUnordered
MmUSWCCached
MmMaximumCacheType
_MI_PFN_CACHE_ATTRIBUTE
MiNonCached
MiCached
MiWriteCombined
MiNotMapped
_MMPFN
u1
PteAddress
u2
u3
UsedPageTableEntries
OriginalPte
AweReferenceCount
u4
u4
u4
<unnamed-tag>
Flink
WsIndex
Event
ReadStatus
NextStackPfn
<unnamed-tag>
Blink
ShareCount
_MMPFNENTRY
Modified
ReadInProgress
WriteInProgress
PrototypePte
PageColor
PageLocation
RemovalRequested
CacheAttribute
Rom
ParityError
<unnamed-tag>
ReferenceCount
ShortFlags
<unnamed-tag>
ReferenceCount
e1
e2
<unnamed-tag>
EntireFrame
PteFrame
InPageError
VerifierAllocation
AweAllocation
Priority
MustBeCached
_MMPFN
u1
PteAddress
u2
u3
UsedPageTableEntries
OriginalPte
AweReferenceCount
u4
_MMVAD
u1
LeftChild
RightChild
StartingVpn
EndingVpn
u
ControlArea
FirstPrototypePte
LastContiguousPte
u2
u2
<unnamed-tag>
Balance
Parent
_MMVAD_FLAGS
CommitCharge
NoChange
VadType
MemCommit
Protection
Spare
PrivateMemory
<unnamed-tag>
LongFlags
VadFlags
_CONTROL_AREA
Segment
DereferenceList
NumberOfSectionReferences
NumberOfPfnReferences
NumberOfMappedViews
NumberOfSystemCacheViews
NumberOfUserReferences
u
FilePointer
WaitingForDeletion
ModifiedWriteCount
FlushInProgressCount
WritableUserReferences
WritableUserReferences
_MMVAD_FLAGS2
FileOffset
SecNoChange
OneSecured
MultipleSecured
ReadOnly
LongVad
ExtendableFile
Inherit
CopyOnWrite
<unnamed-tag>
LongFlags2
VadFlags2
_MMVAD
u1
LeftChild
RightChild
StartingVpn
EndingVpn
u
ControlArea
FirstPrototypePte
LastContiguousPte
u2
_MMADDRESS_NODE
u1
LeftChild
RightChild
StartingVpn
EndingVpn
_MM_AVL_TABLE
BalancedRoot
DepthOfTree
Unused
NumberGenericTableElements
NodeHint
NodeFreeHint
_MMPTE_FLUSH_LIST
Count
FlushVa
FlushVa

_MMPTE_FLUSH_LIST
Count
FlushVa
_SUBSECTION
ControlArea
u
StartingSector
NumberOfFullSectors
SubsectionBase
UnusedPtes
PtesInSubsection
NextSubsection
NextSubsection
_MMSUBSECTION_FLAGS
ReadOnly
ReadWrite
SubsectionStatic
GlobalMemory
Protection
Spare
StartingSector4132
SectorEndOffset
<unnamed-tag>
LongFlags
SubsectionFlags
_SUBSECTION
ControlArea
u
StartingSector
NumberOfFullSectors
SubsectionBase
UnusedPtes
PtesInSubsection
NextSubsection
_MMPAGING_FILE
Size
MaximumSize
MinimumSize
FreeSpace
CurrentUsage
PeakUsage
HighestPage
File
Entry
PageFileName
Bitmap
PageFileNumber
ReferenceCount
BootPartition
Reserved
FileHandle
FileHandle
_FILE_OBJECT
Type
Size
DeviceObject
Vpb
FsContext
FsContext2
SectionObjectPointer
PrivateCacheMap
FinalStatus
RelatedFileObject
LockOperation
DeletePending
ReadAccess
WriteAccess
DeleteAccess
SharedRead
SharedWrite
SharedDelete
Flags
FileName
CurrentByteOffset
Waiters
Busy
LastLock
Lock
Event
CompletionContext
CompletionContext
_MMMOD_WRITER_MDL_ENTRY
Links
WriteOffset
u
Irp
LastPageToWrite
PagingListHead
CurrentList
PagingFile
File
ControlArea
FileResource
IssueTime
Mdl
Page
Page

_MMPAGING_FILE
Size
MaximumSize
MinimumSize
FreeSpace
CurrentUsage
PeakUsage
HighestPage
File
Entry
PageFileName
Bitmap
PageFileNumber
ReferenceCount
BootPartition
Reserved
FileHandle
_EXCEPTION_RECORD64
ExceptionCode
ExceptionFlags
ExceptionRecord
ExceptionAddress
NumberParameters
__unusedAlignment
ExceptionInformation
ExceptionInformation

_EXCEPTION_RECORD64
ExceptionCode
ExceptionFlags
ExceptionRecord
ExceptionAddress
NumberParameters
__unusedAlignment
ExceptionInformation
_EXCEPTION_RECORD32
ExceptionCode
ExceptionFlags
ExceptionRecord
ExceptionAddress
NumberParameters
ExceptionInformation
ExceptionInformation

_EXCEPTION_RECORD32
ExceptionCode
ExceptionFlags
ExceptionRecord
ExceptionAddress
NumberParameters
ExceptionInformation
_DBGKM_EXCEPTION64
ExceptionRecord
FirstChance
FirstChance
_DBGKM_EXCEPTION64
ExceptionRecord
FirstChance
_DBGKM_EXCEPTION32
ExceptionRecord
FirstChance
FirstChance
_DBGKM_EXCEPTION32
ExceptionRecord
FirstChance
_DBGKD_LOAD_SYMBOLS64
PathNameLength
BaseOfDll
ProcessId
CheckSum
SizeOfImage
UnloadSymbols
UnloadSymbols
_DBGKD_LOAD_SYMBOLS64
PathNameLength
BaseOfDll
ProcessId
CheckSum
SizeOfImage
UnloadSymbols
_DBGKD_LOAD_SYMBOLS32
PathNameLength
BaseOfDll
ProcessId
CheckSum
SizeOfImage
UnloadSymbols
UnloadSymbols
_DBGKD_LOAD_SYMBOLS32
PathNameLength
BaseOfDll
ProcessId
CheckSum
SizeOfImage
UnloadSymbols
_DBGKD_READ_MEMORY64
TargetBaseAddress
TransferCount
ActualBytesRead
ActualBytesRead
_DBGKD_READ_MEMORY64
TargetBaseAddress
TransferCount
ActualBytesRead
_DBGKD_READ_MEMORY32
TargetBaseAddress
TransferCount
ActualBytesRead
ActualBytesRead
_DBGKD_READ_MEMORY32
TargetBaseAddress
TransferCount
ActualBytesRead
_DBGKD_WRITE_MEMORY64
TargetBaseAddress
TransferCount
ActualBytesWritten
ActualBytesWritten
_DBGKD_WRITE_MEMORY64
TargetBaseAddress
TransferCount
ActualBytesWritten
_DBGKD_WRITE_MEMORY32
TargetBaseAddress
TransferCount
ActualBytesWritten
ActualBytesWritten
_DBGKD_WRITE_MEMORY32
TargetBaseAddress
TransferCount
ActualBytesWritten
_DBGKD_WRITE_BREAKPOINT64
BreakPointAddress
BreakPointHandle
BreakPointHandle
_DBGKD_WRITE_BREAKPOINT64
BreakPointAddress
BreakPointHandle
_DBGKD_WRITE_BREAKPOINT32
BreakPointAddress
BreakPointHandle
BreakPointHandle
_DBGKD_WRITE_BREAKPOINT32
BreakPointAddress
BreakPointHandle
_DBGKD_READ_WRITE_IO64
IoAddress
DataSize
DataValue
DataValue
_DBGKD_READ_WRITE_IO64
IoAddress
DataSize
DataValue
_DBGKD_READ_WRITE_IO32
DataSize
IoAddress
DataValue
DataValue
_DBGKD_READ_WRITE_IO32
DataSize
IoAddress
DataValue
_DBGKD_READ_WRITE_IO_EXTENDED64
DataSize
InterfaceType
BusNumber
AddressSpace
IoAddress
DataValue
DataValue
_DBGKD_READ_WRITE_IO_EXTENDED64
DataSize
InterfaceType
BusNumber
AddressSpace
IoAddress
DataValue
_DBGKD_READ_WRITE_IO_EXTENDED32
DataSize
InterfaceType
BusNumber
AddressSpace
IoAddress
DataValue
DataValue
_DBGKD_READ_WRITE_IO_EXTENDED32
DataSize
InterfaceType
BusNumber
AddressSpace
IoAddress
DataValue
_DBGKD_SET_SPECIAL_CALL32
SpecialCall
SpecialCall
_DBGKD_SET_SPECIAL_CALL32
SpecialCall
_DBGKD_SET_SPECIAL_CALL64
SpecialCall
SpecialCall
_DBGKD_SET_SPECIAL_CALL64
SpecialCall
_DBGKD_SET_INTERNAL_BREAKPOINT32
BreakpointAddress
Flags
Flags
_DBGKD_SET_INTERNAL_BREAKPOINT32
BreakpointAddress
Flags
_DBGKD_SET_INTERNAL_BREAKPOINT64
BreakpointAddress
Flags
Flags
_DBGKD_SET_INTERNAL_BREAKPOINT64
BreakpointAddress
Flags
_DBGKD_GET_INTERNAL_BREAKPOINT64
BreakpointAddress
Flags
Calls
MaxCallsPerPeriod
MinInstructions
MaxInstructions
TotalInstructions
TotalInstructions
_DBGKD_GET_INTERNAL_BREAKPOINT64
BreakpointAddress
Flags
Calls
MaxCallsPerPeriod
MinInstructions
MaxInstructions
TotalInstructions
_DBGKD_GET_INTERNAL_BREAKPOINT32
BreakpointAddress
Flags
Calls
MaxCallsPerPeriod
MinInstructions
MaxInstructions
TotalInstructions
TotalInstructions
_DBGKD_GET_INTERNAL_BREAKPOINT32
BreakpointAddress
Flags
Calls
MaxCallsPerPeriod
MinInstructions
MaxInstructions
TotalInstructions
_DBGKD_MANIPULATE_STATE64
ApiNumber
ProcessorLevel
Processor
ReturnStatus
u
u
_DBGKD_GET_CONTEXT
Unused
_DBGKD_SET_CONTEXT
ContextFlags
_DBGKD_RESTORE_BREAKPOINT
BreakPointHandle
_DBGKD_CONTINUE
ContinueStatus
_DBGKD_CONTINUE2
ContinueStatus
ControlSet
AnyControlSet
_DBGKD_QUERY_SPECIAL_CALLS
NumberOfSpecialCalls
_DBGKD_GET_VERSION64
MajorVersion
MinorVersion
ProtocolVersion
KdSecondaryVersion
Flags
MachineType
MaxPacketType
MaxStateChange
MaxManipulate
Simulation
Unused
KernBase
PsLoadedModuleList
DebuggerDataList
_DBGKD_BREAKPOINTEX
BreakPointCount
ContinueStatus
_DBGKD_READ_WRITE_MSR
Msr
DataValueLow
DataValueHigh
_DBGKD_SEARCH_MEMORY
SearchAddress
FoundAddress
SearchLength
PatternLength
_DBGKD_GET_SET_BUS_DATA
BusDataType
BusNumber
SlotNumber
Offset
Length
_DBGKD_FILL_MEMORY
Address
Length
Flags
PatternLength
_DBGKD_QUERY_MEMORY
Address
Reserved
AddressSpace
Flags
_DBGKD_SWITCH_PARTITION
Partition
<unnamed-tag>
ReadMemory
WriteMemory
GetContext
SetContext
WriteBreakPoint
RestoreBreakPoint
Continue
Continue2
ReadWriteIo
ReadWriteIoExtended
QuerySpecialCalls
SetSpecialCall
SetInternalBreakpoint
GetInternalBreakpoint
GetVersion64
BreakPointEx
ReadWriteMsr
SearchMemory
GetSetBusData
FillMemory
QueryMemory
SwitchPartition
_DBGKD_MANIPULATE_STATE64
ApiNumber
ProcessorLevel
Processor
ReturnStatus
u
_DBGKD_MANIPULATE_STATE32
ApiNumber
ProcessorLevel
Processor
ReturnStatus
u
u
_DBGKD_GET_VERSION32
MajorVersion
MinorVersion
ProtocolVersion
Flags
KernBase
PsLoadedModuleList
MachineType
ThCallbackStack
NextCallback
FramePointer
KiCallUserMode
KeUserCallbackDispatcher
BreakpointWithStatus
DebuggerDataList
<unnamed-tag>
ReadMemory
WriteMemory
ReadMemory64
WriteMemory64
GetContext
SetContext
WriteBreakPoint
RestoreBreakPoint
Continue
Continue2
ReadWriteIo
ReadWriteIoExtended
QuerySpecialCalls
SetSpecialCall
SetInternalBreakpoint
GetInternalBreakpoint
GetVersion32
BreakPointEx
ReadWriteMsr
SearchMemory
_DBGKD_MANIPULATE_STATE32
ApiNumber
ProcessorLevel
Processor
ReturnStatus
u
u
u
u
u
u
u
_KLOCK_QUEUE_HANDLE
LockQueue
OldIrql
OldIrql
_KLOCK_QUEUE_HANDLE
LockQueue
OldIrql
_SHARED_CACHE_MAP
NodeTypeCode
NodeByteSize
OpenCount
FileSize
BcbList
SectionSize
ValidDataLength
ValidDataGoal
InitialVacbs
Vacbs
FileObject
ActiveVacb
NeedToZero
ActivePage
NeedToZeroPage
ActiveVacbSpinLock
VacbActiveCount
DirtyPages
SharedCacheMapLinks
Flags
Status
Mbcb
Section
CreateEvent
WaitOnActiveCount
PagesToWrite
BeyondLastFlush
Callbacks
LazyWriteContext
PrivateList
LogHandle
FlushToLsnRoutine
DirtyPageThreshold
LazyWritePassCount
UninitializeEvent
NeedToZeroVacb
BcbSpinLock
Reserved
Event
VacbPushLock
PrivateCacheMap
PrivateCacheMap
_VACB
BaseAddress
SharedCacheMap
Overlay
LruList
LruList




_MBCB
NodeTypeCode
NodeIsInZone
PagesToWrite
DirtyPages
Reserved
BitmapRanges
ResumeWritePage
BitmapRange1
BitmapRange2
BitmapRange3
BitmapRange3
_CACHE_MANAGER_CALLBACKS
AcquireForLazyWrite
ReleaseFromLazyWrite
AcquireForReadAhead
ReleaseFromReadAhead
ReleaseFromReadAhead
ReleaseFromReadAhead
ReleaseFromReadAhead
ReleaseFromReadAhead
ReleaseFromReadAhead
_CACHE_UNINITIALIZE_EVENT
Next
Event
Event
_PRIVATE_CACHE_MAP
NodeTypeCode
Flags
UlongFlags
ReadAheadMask
FileObject
FileOffset1
BeyondLastByte1
FileOffset2
BeyondLastByte2
ReadAheadOffset
ReadAheadLength
ReadAheadSpinLock
PrivateLinks
_SHARED_CACHE_MAP
NodeTypeCode
NodeByteSize
OpenCount
FileSize
BcbList
SectionSize
ValidDataLength
ValidDataGoal
InitialVacbs
Vacbs
FileObject
ActiveVacb
NeedToZero
ActivePage
NeedToZeroPage
ActiveVacbSpinLock
VacbActiveCount
DirtyPages
SharedCacheMapLinks
Flags
Status
Mbcb
Section
CreateEvent
WaitOnActiveCount
PagesToWrite
BeyondLastFlush
Callbacks
LazyWriteContext
PrivateList
LogHandle
FlushToLsnRoutine
DirtyPageThreshold
LazyWritePassCount
UninitializeEvent
NeedToZeroVacb
BcbSpinLock
Reserved
Event
VacbPushLock
PrivateCacheMap
_VPB
Type
Size
Flags
VolumeLabelLength
DeviceObject
RealDevice
SerialNumber
ReferenceCount
VolumeLabel
VolumeLabel
_SECTION_OBJECT_POINTERS
DataSectionObject
SharedCacheMap
ImageSectionObject
ImageSectionObject
_IO_COMPLETION_CONTEXT
Port
Key
Key
_FILE_OBJECT
Type
Size
DeviceObject
Vpb
FsContext
FsContext2
SectionObjectPointer
PrivateCacheMap
FinalStatus
RelatedFileObject
LockOperation
DeletePending
ReadAccess
WriteAccess
DeleteAccess
SharedRead
SharedWrite
SharedDelete
Flags
FileName
CurrentByteOffset
Waiters
Busy
LastLock
Lock
Event
CompletionContext
<unnamed-tag>
FileOffset
ActiveCount
_VACB
BaseAddress
SharedCacheMap
Overlay
LruList
_VACB_LEVEL_REFERENCE
Reference
SpecialReference
SpecialReference
_VACB_LEVEL_REFERENCE
Reference
SpecialReference
_HEAP
Entry
Signature
Flags
ForceFlags
VirtualMemoryThreshold
SegmentReserve
SegmentCommit
DeCommitFreeBlockThreshold
DeCommitTotalFreeThreshold
TotalFreeSize
MaximumAllocationSize
ProcessHeapsListIndex
HeaderValidateLength
HeaderValidateCopy
NextAvailableTagIndex
MaximumTagIndex
TagEntries
UCRSegments
UnusedUnCommittedRanges
AlignRound
AlignMask
VirtualAllocdBlocks
Segments
u
u2
AllocatorBackTraceIndex
NonDedicatedListLength
LargeBlocksIndex
PseudoTagEntries
FreeLists
LockVariable
CommitRoutine
FrontEndHeap
FrontHeapLockCount
FrontEndHeapType
LastSegmentIndex
LastSegmentIndex
_HEAP_ENTRY
PreviousBlockPrivateData
Size
PreviousSize
SmallTagIndex
Flags
UnusedBytes
SegmentIndex
CompactHeader
_HEAP_TAG_ENTRY
Allocs
Frees
Size
TagIndex
CreatorBackTraceIndex
TagName
TagName
_HEAP_UCR_SEGMENT
Next
ReservedSize
CommittedSize
filler
filler
_HEAP_UNCOMMMTTED_RANGE
Next
Address
Size
filler
filler
_HEAP_SEGMENT
Entry
Signature
Flags
Heap
LargestUnCommittedRange
BaseAddress
NumberOfPages
FirstEntry
LastValidEntry
NumberOfUnCommittedPages
NumberOfUnCommittedRanges
UnCommittedRanges
AllocatorBackTraceIndex
Reserved
LastEntryInSegment
LastEntryInSegment


<unnamed-tag>
FreeListsInUseUlong
FreeListsInUseBytes
<unnamed-tag>
FreeListsInUseTerminate
DecommitCount
_HEAP_PSEUDO_TAG_ENTRY
Allocs
Frees
Size
Size

_HEAP_LOCK
Lock
Lock
Lock
Lock
Lock
Lock
Lock
_HEAP
Entry
Signature
Flags
ForceFlags
VirtualMemoryThreshold
SegmentReserve
SegmentCommit
DeCommitFreeBlockThreshold
DeCommitTotalFreeThreshold
TotalFreeSize
MaximumAllocationSize
ProcessHeapsListIndex
HeaderValidateLength
HeaderValidateCopy
NextAvailableTagIndex
MaximumTagIndex
TagEntries
UCRSegments
UnusedUnCommittedRanges
AlignRound
AlignMask
VirtualAllocdBlocks
Segments
u
u2
AllocatorBackTraceIndex
NonDedicatedListLength
LargeBlocksIndex
PseudoTagEntries
FreeLists
LockVariable
CommitRoutine
FrontEndHeap
FrontHeapLockCount
FrontEndHeapType
LastSegmentIndex
LastSegmentIndex
_HEAP_ENTRY
PreviousBlockPrivateData
Size
PreviousSize
SmallTagIndex
Flags
UnusedBytes
SegmentIndex
CompactHeader
_HEAP_SEGMENT
Entry
Signature
Flags
Heap
LargestUnCommittedRange
BaseAddress
NumberOfPages
FirstEntry
LastValidEntry
NumberOfUnCommittedPages
NumberOfUnCommittedRanges
UnCommittedRanges
AllocatorBackTraceIndex
Reserved
LastEntryInSegment
_HEAP_SUBSEGMENT
Bucket
UserBlocks
AggregateExchg
BlockSize
FreeThreshold
BlockCount
SizeIndex
AffinityIndex
Alignment
SFreeListEntry
Lock
Lock
_HEAP_USERDATA_HEADER
SFreeListEntry
SubSegment
HeapHandle
SizeIndex
Signature
_HEAP_USERDATA_HEADER
SFreeListEntry
SubSegment
HeapHandle
SizeIndex
Signature
Signature
_INTERLOCK_SEQ
Depth
FreeEntryOffset
OffsetAndDepth
Sequence
Exchg
_HEAP_SUBSEGMENT
Bucket
UserBlocks
AggregateExchg
BlockSize
FreeThreshold
BlockCount
SizeIndex
AffinityIndex
Alignment
SFreeListEntry
Lock
_EXCEPTION_RECORD
ExceptionCode
ExceptionFlags
ExceptionRecord
ExceptionAddress
NumberParameters
ExceptionInformation
ExceptionInformation
_EXCEPTION_RECORD
ExceptionCode
ExceptionFlags
ExceptionRecord
ExceptionAddress
NumberParameters
ExceptionInformation
_TOKEN
TokenSource
TokenId
AuthenticationId
ParentTokenId
ExpirationTime
TokenLock
AuditPolicy
ModifiedId
SessionId
UserAndGroupCount
RestrictedSidCount
PrivilegeCount
VariableLength
DynamicCharged
DynamicAvailable
DefaultOwnerIndex
UserAndGroups
RestrictedSids
PrimaryGroup
Privileges
DynamicPart
DefaultDacl
TokenType
ImpersonationLevel
TokenFlags
TokenInUse
ProxyData
AuditData
LogonSession
OriginatingLogonSession
VariablePart
VariablePart
_TOKEN_SOURCE
SourceName
SourceIdentifier
SourceIdentifier
_SEP_AUDIT_POLICY
PolicyElements
PolicyOverlay
Overlay
_SID_AND_ATTRIBUTES
Sid
Attributes
Attributes
_LUID_AND_ATTRIBUTES
Luid
Attributes
Attributes
_ACL
AclRevision
Sbz1
AclSize
AceCount
Sbz2
Sbz2
_TOKEN_TYPE
TokenPrimary
TokenImpersonation
_SECURITY_IMPERSONATION_LEVEL
SecurityAnonymous
SecurityIdentification
SecurityImpersonation
SecurityDelegation
_SECURITY_TOKEN_PROXY_DATA
Length
ProxyClass
PathInfo
ContainerMask
ObjectMask
ObjectMask
_SECURITY_TOKEN_AUDIT_DATA
Length
GrantMask
DenyMask
DenyMask
_SEP_LOGON_SESSION_REFERENCES
Next
LogonId
ReferenceCount
Flags
pDeviceMap
pDeviceMap
_TOKEN
TokenSource
TokenId
AuthenticationId
ParentTokenId
ExpirationTime
TokenLock
AuditPolicy
ModifiedId
SessionId
UserAndGroupCount
RestrictedSidCount
PrivilegeCount
VariableLength
DynamicCharged
DynamicAvailable
DefaultOwnerIndex
UserAndGroups
RestrictedSids
PrimaryGroup
Privileges
DynamicPart
DefaultDacl
TokenType
ImpersonationLevel
TokenFlags
TokenInUse
ProxyData
AuditData
LogonSession
OriginatingLogonSession
VariablePart
_DEVICE_MAP
DosDevicesDirectory
GlobalDosDevicesDirectory
ReferenceCount
DriveMap
DriveType
DriveType
_SEP_LOGON_SESSION_REFERENCES
Next
LogonId
ReferenceCount
Flags
pDeviceMap
pDeviceMap
pDeviceMap
pDeviceMap
_TEB
NtTib
EnvironmentPointer
ClientId
ActiveRpcHandle
ThreadLocalStoragePointer
ProcessEnvironmentBlock
LastErrorValue
CountOfOwnedCriticalSections
CsrClientThread
Win32ThreadInfo
User32Reserved
UserReserved
WOW32Reserved
CurrentLocale
FpSoftwareStatusRegister
SystemReserved1
ExceptionCode
ActivationContextStackPointer
SpareBytes1
GdiTebBatch
RealClientId
GdiCachedProcessHandle
GdiClientPID
GdiClientTID
GdiThreadLocalInfo
Win32ClientInfo
glDispatchTable
glReserved1
glReserved2
glSectionInfo
glSection
glTable
glCurrentRC
glContext
LastStatusValue
StaticUnicodeString
StaticUnicodeBuffer
DeallocationStack
TlsSlots
TlsLinks
Vdm
ReservedForNtRpc
DbgSsReserved
HardErrorMode
Instrumentation
SubProcessTag
EtwTraceData
WinSockData
GdiBatchCount
InDbgPrint
FreeStackOnTermination
HasFiberData
IdealProcessor
GuaranteedStackBytes
ReservedForPerf
ReservedForOle
WaitingOnLoaderLock
SparePointer1
SoftPatchPtr1
SoftPatchPtr2
TlsExpansionSlots
DeallocationBStore
BStoreLimit
ImpersonationLocale
IsImpersonating
NlsCache
pShimData
HeapVirtualAffinity
CurrentTransactionHandle
ActiveFrame
FlsData
SafeThunkCall
BooleanSpare
BooleanSpare
BooleanSpare
_NT_TIB
ExceptionList
StackBase
StackLimit
SubSystemTib
FiberData
Version
ArbitraryUserPointer
Self



_ACTIVATION_CONTEXT_STACK
ActiveFrame
FrameListCache
Flags
NextCookieSequenceNumber
StackId
StackId
_GDI_TEB_BATCH
Offset
HDC
Buffer







_TEB_ACTIVE_FRAME
Flags
Previous
Context
Context
_TEB
NtTib
EnvironmentPointer
ClientId
ActiveRpcHandle
ThreadLocalStoragePointer
ProcessEnvironmentBlock
LastErrorValue
CountOfOwnedCriticalSections
CsrClientThread
Win32ThreadInfo
User32Reserved
UserReserved
WOW32Reserved
CurrentLocale
FpSoftwareStatusRegister
SystemReserved1
ExceptionCode
ActivationContextStackPointer
SpareBytes1
GdiTebBatch
RealClientId
GdiCachedProcessHandle
GdiClientPID
GdiClientTID
GdiThreadLocalInfo
Win32ClientInfo
glDispatchTable
glReserved1
glReserved2
glSectionInfo
glSection
glTable
glCurrentRC
glContext
LastStatusValue
StaticUnicodeString
StaticUnicodeBuffer
DeallocationStack
TlsSlots
TlsLinks
Vdm
ReservedForNtRpc
DbgSsReserved
HardErrorMode
Instrumentation
SubProcessTag
EtwTraceData
WinSockData
GdiBatchCount
InDbgPrint
FreeStackOnTermination
HasFiberData
IdealProcessor
GuaranteedStackBytes
ReservedForPerf
ReservedForOle
WaitingOnLoaderLock
SparePointer1
SoftPatchPtr1
SoftPatchPtr2
TlsExpansionSlots
DeallocationBStore
BStoreLimit
ImpersonationLocale
IsImpersonating
NlsCache
pShimData
HeapVirtualAffinity
CurrentTransactionHandle
ActiveFrame
FlsData
SafeThunkCall
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
BooleanSpare
_HEAP_UCR_SEGMENT
Next
ReservedSize
CommittedSize
filler
_HMAP_TABLE
Table
_HMAP_ENTRY
BlockAddress
BinAddress
CmView
MemAlloc

_HMAP_TABLE
Table
_OWNER_ENTRY
OwnerThread
OwnerCount
TableSize
TableSize
TableSize

_ERESOURCE
SystemResourcesList
OwnerTable
ActiveCount
Flag
SharedWaiters
ExclusiveWaiters
OwnerThreads
ContentionCount
NumberOfSharedWaiters
NumberOfExclusiveWaiters
Address
CreatorBackTraceIndex
SpinLock
_OBJECT_SYMBOLIC_LINK
CreationTime
LinkTarget
LinkTargetRemaining
LinkTargetObject
DosDeviceDriveIndex
_OBJECT_SYMBOLIC_LINK
CreationTime
LinkTarget
LinkTargetRemaining
LinkTargetObject
DosDeviceDriveIndex
_POOL_BLOCK_HEAD
Header
List
_POOL_HEADER
PreviousSize
PoolIndex
BlockSize
PoolType
Ulong1
PoolTag
ProcessBilled
AllocatorBackTraceIndex
PoolTagHash
_POOL_BLOCK_HEAD
Header
List
_DISPATCHER_HEADER
Type
Absolute
NpxIrql
Size
Hand
Inserted
DebugActive
Lock
SignalState
WaitListHead
_LDR_DATA_TABLE_ENTRY
InLoadOrderLinks
InMemoryOrderLinks
InInitializationOrderLinks
DllBase
EntryPoint
SizeOfImage
FullDllName
BaseDllName
Flags
LoadCount
TlsIndex
HashLinks
SectionPointer
CheckSum
TimeDateStamp
LoadedImports
EntryPointActivationContext
PatchInformation
_ACTIVATION_CONTEXT
_ACTIVATION_CONTEXT
_LDR_DATA_TABLE_ENTRY
InLoadOrderLinks
InMemoryOrderLinks
InInitializationOrderLinks
DllBase
EntryPoint
SizeOfImage
FullDllName
BaseDllName
Flags
LoadCount
TlsIndex
HashLinks
SectionPointer
CheckSum
TimeDateStamp
LoadedImports
EntryPointActivationContext
PatchInformation
_HEAP_UNCOMMMTTED_RANGE
Next
Address
Size
filler
_LUID_AND_ATTRIBUTES
Luid
Attributes
_VI_DEADLOCK_GLOBALS
Nodes
Resources
Threads
TimeAcquire
TimeRelease
BytesAllocated
ResourceDatabase
ThreadDatabase
AllocationFailures
NodesTrimmedBasedOnAge
NodesTrimmedBasedOnCount
NodesSearched
MaxNodesSearched
SequenceNumber
RecursionDepthLimit
SearchedNodesLimit
DepthLimitHits
SearchLimitHits
ABC_ACB_Skipped
OutOfOrderReleases
NodesReleasedOutOfOrder
TotalReleases
RootNodesDeleted
ForgetHistoryCounter
PoolTrimCounter
FreeResourceList
FreeThreadList
FreeNodeList
FreeResourceCount
FreeThreadCount
FreeNodeCount
Instigator
NumberOfParticipants
Participant
CacheReductionInProgress
_VI_DEADLOCK_NODE
Parent
ChildrenList
SiblingsList
ResourceList
FreeListEntry
Root
ThreadEntry
Active
OnlyTryAcquireUsed
ReleasedOutOfOrder
SequenceNumber
StackTrace
ParentStackTrace
ParentStackTrace

_VI_DEADLOCK_GLOBALS
Nodes
Resources
Threads
TimeAcquire
TimeRelease
BytesAllocated
ResourceDatabase
ThreadDatabase
AllocationFailures
NodesTrimmedBasedOnAge
NodesTrimmedBasedOnCount
NodesSearched
MaxNodesSearched
SequenceNumber
RecursionDepthLimit
SearchedNodesLimit
DepthLimitHits
SearchLimitHits
ABC_ACB_Skipped
OutOfOrderReleases
NodesReleasedOutOfOrder
TotalReleases
RootNodesDeleted
ForgetHistoryCounter
PoolTrimCounter
FreeResourceList
FreeThreadList
FreeNodeList
FreeResourceCount
FreeThreadCount
FreeNodeCount
Instigator
NumberOfParticipants
Participant
CacheReductionInProgress
_PF_SCENARIO_TYPE
PfApplicationLaunchScenarioType
PfSystemBootScenarioType
PfMaxScenarioType
_THERMAL_INFORMATION
ThermalStamp
ThermalConstant1
ThermalConstant2
Processors
SamplingPeriod
CurrentTemperature
PassiveTripPoint
CriticalTripPoint
ActiveTripPointCount
ActiveTripPoint

_THERMAL_INFORMATION
ThermalStamp
ThermalConstant1
ThermalConstant2
Processors
SamplingPeriod
CurrentTemperature
PassiveTripPoint
CriticalTripPoint
ActiveTripPointCount
ActiveTripPoint
_DBGKD_SEARCH_MEMORY
SearchAddress
FoundAddress
SearchLength
PatternLength
_SECTION_OBJECT
StartingVa
EndingVa
Parent
LeftChild
RightChild
Segment
_SEGMENT_OBJECT
BaseAddress
TotalNumberOfPtes
SizeOfSegment
NonExtendedPtes
ImageCommitment
ControlArea
Subsection
LargeControlArea
MmSectionFlags
MmSubSectionFlags
MmSubSectionFlags
_SECTION_OBJECT
StartingVa
EndingVa
Parent
LeftChild
RightChild
Segment
_POWER_STATE
SystemState
DeviceState
_SYSTEM_POWER_STATE
PowerSystemUnspecified
PowerSystemWorking
PowerSystemSleeping1
PowerSystemSleeping2
PowerSystemSleeping3
PowerSystemHibernate
PowerSystemShutdown
PowerSystemMaximum
_DEVICE_POWER_STATE
PowerDeviceUnspecified
PowerDeviceD0
PowerDeviceD1
PowerDeviceD2
PowerDeviceD3
PowerDeviceMaximum
_POWER_STATE
SystemState
DeviceState
DeviceState
DeviceState
DeviceState
DeviceState
DeviceState
DeviceState
DeviceState
DeviceState
DeviceState
DeviceState
DeviceState
DeviceState
DeviceState
DeviceState
DeviceState
DeviceState
DeviceState
_KAPC
Type
SpareByte0
Size
SpareByte1
SpareLong0
Thread
ApcListEntry
KernelRoutine
RundownRoutine
NormalRoutine
NormalContext
SystemArgument1
SystemArgument2
ApcStateIndex
ApcMode
Inserted
_LARGE_CONTROL_AREA
Segment
DereferenceList
NumberOfSectionReferences
NumberOfPfnReferences
NumberOfMappedViews
NumberOfSystemCacheViews
NumberOfUserReferences
u
FilePointer
WaitingForDeletion
ModifiedWriteCount
FlushInProgressCount
WritableUserReferences
StartingFrame
UserGlobalList
SessionId
SessionId
_MMSECTION_FLAGS
BeingDeleted
BeingCreated
BeingPurged
NoModifiedWriting
FailAllIo
Image
Based
File
Networked
NoCache
PhysicalMemory
CopyOnWrite
Reserve
Commit
FloppyMedia
WasPurged
UserReference
GlobalMemory
DeleteOnClose
FilePointerNull
DebugSymbolsLoaded
SetMappedFileIoComplete
CollidedFlush
NoChange
filler0
ImageMappedInSystemSpace
UserWritable
Accessed
GlobalOnlyPerSession
Rom
WriteCombined
filler
filler
filler
_SEGMENT_OBJECT
BaseAddress
TotalNumberOfPtes
SizeOfSegment
NonExtendedPtes
ImageCommitment
ControlArea
Subsection
LargeControlArea
MmSectionFlags
MmSubSectionFlags
_SEGMENT
ControlArea
TotalNumberOfPtes
NonExtendedPtes
Spare0
SizeOfSegment
SegmentPteTemplate
NumberOfCommittedPages
ExtendInfo
SegmentFlags
BasedAddress
u1
u2
PrototypePte
ThePtes
ThePtes
<unnamed-tag>
LongFlags
Flags
_EVENT_COUNTER
ListEntry
RefCount
Event
Event
_CONTROL_AREA
Segment
DereferenceList
NumberOfSectionReferences
NumberOfPfnReferences
NumberOfMappedViews
NumberOfSystemCacheViews
NumberOfUserReferences
u
FilePointer
WaitingForDeletion
ModifiedWriteCount
FlushInProgressCount
WritableUserReferences

_HANDLE_TRACE_DEBUG_INFO
RefCount
TableSize
BitMaskFlags
CloseCompactionLock
CurrentStackIndex
TraceDb
TraceDb
_HANDLE_TABLE
TableCode
QuotaProcess
UniqueProcessId
HandleTableLock
HandleTableList
HandleContentionEvent
DebugInfo
ExtraInfoPages
FirstFree
LastFree
NextHandleNeedingPool
HandleCount
Flags
StrictFIFO
_POOL_HEADER
PreviousSize
PoolIndex
BlockSize
PoolType
Ulong1
PoolTag
ProcessBilled
AllocatorBackTraceIndex
PoolTagHash
_MMVAD_FLAGS2
FileOffset
SecNoChange
OneSecured
MultipleSecured
ReadOnly
LongVad
ExtendableFile
Inherit
CopyOnWrite
_TEB_ACTIVE_FRAME_CONTEXT
Flags
FrameName
_TEB_ACTIVE_FRAME_CONTEXT
Flags
FrameName
FrameName
_TEB_ACTIVE_FRAME
Flags
Previous
Context
_M128A
Low
High



_XMM_SAVE_AREA32
ControlWord
StatusWord
TagWord
Reserved1
ErrorOpcode
ErrorOffset
ErrorSelector
Reserved2
DataOffset
DataSelector
Reserved3
MxCsr
MxCsr_Mask
FloatRegisters
XmmRegisters
Reserved4
_KWAIT_BLOCK
WaitListEntry
Thread
Object
NextWaitBlock
WaitKey
WaitType
SpareByte
SpareLong
_MMPTE_PROTOTYPE
Valid
Unused0
ReadOnly
Unused1
Prototype
Protection
ProtoAddress
_MMSUPPORT_FLAGS
SessionSpace
BeingTrimmed
SessionLeader
TrimHard
MaximumWorkingSetHard
ForceTrim
MinimumWorkingSetHard
Available0
MemoryPriority
GrowWsleHash
AcquiredUnsafe
Available
_MMWSL
FirstFree
FirstDynamic
LastEntry
NextSlot
Wsle
LastInitializedWsle
NonDirectCount
HashTable
HashTableSize
NumberOfCommittedPageTables
HashTableStart
HighestPermittedHashAddress
NumberOfImageWaiters
VadBitMapHint
HighestUserAddress
MaximumUserPageTablePages
MaximumUserPageDirectoryPages
CommittedPageTables
NumberOfCommittedPageDirectories
CommittedPageDirectories
NumberOfCommittedPageDirectoryParents
CommittedPageDirectoryParents
CommittedPageDirectoryParents
_MMSUPPORT
WorkingSetExpansionLinks
LastTrimTime
Flags
PageFaultCount
PeakWorkingSetSize
GrowthSinceLastEstimate
MinimumWorkingSetSize
MaximumWorkingSetSize
VmWorkingSetList
Claim
NextEstimationSlot
NextAgingSlot
EstimatedAvailable
WorkingSetSize
WorkingSetMutex
_EX_WORK_QUEUE
WorkerQueue
DynamicThreadCount
WorkItemsProcessed
WorkItemsProcessedLastPass
QueueDepthLastPass
Info
EX_QUEUE_WORKER_INFO
QueueDisabled
MakeThreadsAsNecessary
WaitMode
WorkerCount
QueueWorkerInfo
_EX_WORK_QUEUE
WorkerQueue
DynamicThreadCount
WorkItemsProcessed
WorkItemsProcessedLastPass
QueueDepthLastPass
Info
_MMSUBSECTION_FLAGS
ReadOnly
ReadWrite
SubsectionStatic
GlobalMemory
Protection
Spare
StartingSector4132
SectorEndOffset

_HEAP_TAG_ENTRY
Allocs
Frees
Size
TagIndex
CreatorBackTraceIndex
TagName
_KEVENT
Header
_EPROCESS_QUOTA_ENTRY
Usage
Limit
Peak
Return

_EPROCESS_QUOTA_BLOCK
QuotaEntry
QuotaList
ReferenceCount
ProcessCount
_UNICODE_STRING
Length
MaximumLength
Buffer
_EXCEPTION_REGISTRATION_RECORD
Next
Handler
Handler
Handler
_NT_TIB
ExceptionList
StackBase
StackLimit
SubSystemTib
FiberData
Version
ArbitraryUserPointer
Self
_SLIST_ENTRY
Next
_EVENT_COUNTER
ListEntry
RefCount
Event
_PS_JOB_TOKEN_FILTER
CapturedSidCount
CapturedSids
CapturedSidsLength
CapturedGroupCount
CapturedGroups
CapturedGroupsLength
CapturedPrivilegeCount
CapturedPrivileges
CapturedPrivilegesLength
CapturedPrivilegesLength
_IO_COUNTERS
ReadOperationCount
WriteOperationCount
OtherOperationCount
ReadTransferCount
WriteTransferCount
OtherTransferCount
_EJOB
Event
JobLinks
ProcessListHead
JobLock
TotalUserTime
TotalKernelTime
ThisPeriodTotalUserTime
ThisPeriodTotalKernelTime
TotalPageFaultCount
TotalProcesses
ActiveProcesses
TotalTerminatedProcesses
PerProcessUserTimeLimit
PerJobUserTimeLimit
LimitFlags
MinimumWorkingSetSize
MaximumWorkingSetSize
ActiveProcessLimit
Affinity
PriorityClass
UIRestrictionsClass
SecurityLimitFlags
Token
Filter
EndOfJobTimeAction
CompletionPort
CompletionKey
SessionId
SchedulingClass
ReadOperationCount
WriteOperationCount
OtherOperationCount
ReadTransferCount
WriteTransferCount
OtherTransferCount
IoInfo
ProcessMemoryLimit
JobMemoryLimit
PeakProcessMemoryUsed
PeakJobMemoryUsed
CurrentJobMemoryUsed
MemoryLimitsLock
JobSetLinks
MemberLevel
JobFlags
_LARGE_CONTROL_AREA
Segment
DereferenceList
NumberOfSectionReferences
NumberOfPfnReferences
NumberOfMappedViews
NumberOfSystemCacheViews
NumberOfUserReferences
u
FilePointer
WaitingForDeletion
ModifiedWriteCount
FlushInProgressCount
WritableUserReferences
StartingFrame
UserGlobalList
SessionId
_KGATE
Header
_PS_JOB_TOKEN_FILTER
CapturedSidCount
CapturedSids
CapturedSidsLength
CapturedGroupCount
CapturedGroups
CapturedGroupsLength
CapturedPrivilegeCount
CapturedPrivileges
CapturedPrivilegesLength
_MM_DRIVER_VERIFIER_DATA
Level
RaiseIrqls
AcquireSpinLocks
SynchronizeExecutions
AllocationsAttempted
AllocationsSucceeded
AllocationsSucceededSpecialPool
AllocationsWithNoTag
TrimRequests
Trims
AllocationsFailed
AllocationsFailedDeliberately
Loads
Unloads
UnTrackedPool
UserTrims
CurrentPagedPoolAllocations
CurrentNonPagedPoolAllocations
PeakPagedPoolAllocations
PeakNonPagedPoolAllocations
PagedBytes
NonPagedBytes
PeakPagedBytes
PeakNonPagedBytes
BurstAllocationsFailedDeliberately
SessionTrims
Reserved
_MM_DRIVER_VERIFIER_DATA
Level
RaiseIrqls
AcquireSpinLocks
SynchronizeExecutions
AllocationsAttempted
AllocationsSucceeded
AllocationsSucceededSpecialPool
AllocationsWithNoTag
TrimRequests
Trims
AllocationsFailed
AllocationsFailedDeliberately
Loads
Unloads
UnTrackedPool
UserTrims
CurrentPagedPoolAllocations
CurrentNonPagedPoolAllocations
PeakPagedPoolAllocations
PeakNonPagedPoolAllocations
PagedBytes
NonPagedBytes
PeakPagedBytes
PeakNonPagedBytes
BurstAllocationsFailedDeliberately
SessionTrims
Reserved
_IMAGE_FILE_HEADER
Machine
NumberOfSections
TimeDateStamp
PointerToSymbolTable
NumberOfSymbols
SizeOfOptionalHeader
Characteristics
_MMPTE_HARDWARE
Valid
Write
Owner
WriteThrough
CacheDisable
Accessed
Dirty
LargePage
Global
CopyOnWrite
Prototype
reserved0
PageFrameNumber
reserved1
SoftwareWsIndex
NoExecute
_IO_COMPLETION_CONTEXT
Port
Key
_CALL_HASH_ENTRY
ListEntry
CallersAddress
CallersCaller
CallCount
_CALL_HASH_ENTRY
ListEntry
CallersAddress
CallersCaller
CallCount
_CM_VIEW_OF_FILE
LRUViewList
PinViewList
FileOffset
Size
ViewAddress
Bcb
UseCount
UseCount
_HMAP_ENTRY
BlockAddress
BinAddress
CmView
MemAlloc
_DBGKD_SET_CONTEXT
ContextFlags
_MMLISTS
ZeroedPageList
FreePageList
StandbyPageList
ModifiedPageList
ModifiedNoWritePageList
BadPageList
ActiveAndValid
TransitionPage
_MMSECTION_FLAGS
BeingDeleted
BeingCreated
BeingPurged
NoModifiedWriting
FailAllIo
Image
Based
File
Networked
NoCache
PhysicalMemory
CopyOnWrite
Reserve
Commit
FloppyMedia
WasPurged
UserReference
GlobalMemory
DeleteOnClose
FilePointerNull
DebugSymbolsLoaded
SetMappedFileIoComplete
CollidedFlush
NoChange
filler0
ImageMappedInSystemSpace
UserWritable
Accessed
GlobalOnlyPerSession
Rom
WriteCombined
filler
_DEFERRED_WRITE
NodeTypeCode
NodeByteSize
FileObject
BytesToWrite
DeferredWriteLinks
Event
PostRoutine
Context1
Context2
LimitModifiedPages
LimitModifiedPages
LimitModifiedPages
LimitModifiedPages
LimitModifiedPages
_DEFERRED_WRITE
NodeTypeCode
NodeByteSize
FileObject
BytesToWrite
DeferredWriteLinks
Event
PostRoutine
Context1
Context2
LimitModifiedPages
_SID_AND_ATTRIBUTES
Sid
Attributes
_HIVE_LIST_ENTRY
Name
BaseName
CmHive
HHiveFlags
CmHiveFlags
CmHive2
ThreadFinished
ThreadStarted
Allocate
_CMHIVE
Hive
FileHandles
NotifyList
HiveList
HiveLock
ViewLock
WriterLock
FlusherLock
SecurityLock
LRUViewListHead
PinViewListHead
FileObject
FileFullPath
FileUserName
MappedViews
PinnedViews
UseCount
SecurityCount
SecurityCacheSize
SecurityHitHint
SecurityCache
SecurityHash
UnloadEvent
RootKcb
Frozen
UnloadWorkItem
GrowOnlyMode
GrowOffset
KcbConvertListHead
KnodeConvertListHead
CellRemapArray
Flags
TrustClassEntry
FlushCount
CreatorOwner
CreatorOwner
_HIVE_LIST_ENTRY
Name
BaseName
CmHive
HHiveFlags
CmHiveFlags
CmHive2
ThreadFinished
ThreadStarted
Allocate
_MMVAD_FLAGS
CommitCharge
NoChange
VadType
MemCommit
Protection
Spare
PrivateMemory
PrivateMemory
PrivateMemory
_KSPIN_LOCK_QUEUE
Next
Lock
_PS_IMPERSONATION_INFORMATION
Token
CopyOnOpen
EffectiveOnly
ImpersonationLevel
_DEVICE_NODE
Sibling
Child
Parent
LastChild
Level
Notify
State
PreviousState
StateHistory
StateHistoryEntry
CompletionStatus
PendingIrp
Flags
UserFlags
Problem
PhysicalDeviceObject
ResourceList
ResourceListTranslated
InstancePath
ServiceName
DuplicatePDO
ResourceRequirements
InterfaceType
BusNumber
ChildInterfaceType
ChildBusNumber
ChildBusTypeIndex
RemovalPolicy
HardwareRemovalPolicy
TargetDeviceNotify
DeviceArbiterList
DeviceTranslatorList
NoTranslatorMask
QueryTranslatorMask
NoArbiterMask
QueryArbiterMask
OverUsed1
OverUsed2
BootResources
CapabilityFlags
DockInfo
DisableableDepends
PendedSetInterfaceState
LegacyBusListEntry
DriverUnloadRetryCount
PreviousParent
DeletedChildren
DeletedChildren
_PO_DEVICE_NOTIFY
Link
TargetDevice
WakeNeeded
OrderLevel
DeviceObject
Node
DeviceName
DriverName
ChildCount
ActiveChild
ActiveChild
_PNP_DEVNODE_STATE
DeviceNodeUnspecified
DeviceNodeUninitialized
DeviceNodeInitialized
DeviceNodeDriversAdded
DeviceNodeResourcesAssigned
DeviceNodeStartPending
DeviceNodeStartCompletion
DeviceNodeStartPostWork
DeviceNodeStarted
DeviceNodeQueryStopped
DeviceNodeStopped
DeviceNodeRestartCompletion
DeviceNodeEnumeratePending
DeviceNodeEnumerateCompletion
DeviceNodeAwaitingQueuedDeletion
DeviceNodeAwaitingQueuedRemoval
DeviceNodeQueryRemoved
DeviceNodeRemovePendingCloses
DeviceNodeRemoved
DeviceNodeDeletePendingCloses
DeviceNodeDeleted
MaxDeviceNodeState

_IRP
Type
Size
MdlAddress
Flags
AssociatedIrp
ThreadListEntry
IoStatus
RequestorMode
PendingReturned
StackCount
CurrentLocation
Cancel
CancelIrql
ApcEnvironment
AllocationFlags
UserIosb
UserEvent
Overlay
CancelRoutine
UserBuffer
Tail
Tail
_CM_RESOURCE_LIST
Count
List
List
_IO_RESOURCE_REQUIREMENTS_LIST
ListSize
InterfaceType
BusNumber
SlotNumber
Reserved
AlternativeLists
List
List
_INTERFACE_TYPE
InterfaceTypeUndefined
Internal
Isa
Eisa
MicroChannel
TurboChannel
PCIBus
VMEBus
NuBus
PCMCIABus
CBus
MPIBus
MPSABus
ProcessorInternal
InternalPowerBus
PNPISABus
PNPBus
MaximumInterfaceType
_DEVICE_RELATIONS
Count
Objects
Objects
<unnamed-tag>
LegacyDeviceNode
PendingDeviceRelations
<unnamed-tag>
NextResourceDeviceNode
PROFILE_STATUS
DOCK_NOTDOCKDEVICE
DOCK_QUIESCENT
DOCK_ARRIVING
DOCK_DEPARTING
DOCK_EJECTIRP_COMPLETED
<unnamed-tag>
DockStatus
ListEntry
SerialNumber
_DEVICE_NODE
Sibling
Child
Parent
LastChild
Level
Notify
State
PreviousState
StateHistory
StateHistoryEntry
CompletionStatus
PendingIrp
Flags
UserFlags
Problem
PhysicalDeviceObject
ResourceList
ResourceListTranslated
InstancePath
ServiceName
DuplicatePDO
ResourceRequirements
InterfaceType
BusNumber
ChildInterfaceType
ChildBusNumber
ChildBusTypeIndex
RemovalPolicy
HardwareRemovalPolicy
TargetDeviceNotify
DeviceArbiterList
DeviceTranslatorList
NoTranslatorMask
QueryTranslatorMask
NoArbiterMask
QueryArbiterMask
OverUsed1
OverUsed2
BootResources
CapabilityFlags
DockInfo
DisableableDepends
PendedSetInterfaceState
LegacyBusListEntry
DriverUnloadRetryCount
PreviousParent
DeletedChildren
_RTL_CRITICAL_SECTION
DebugInfo
LockCount
RecursionCount
OwningThread
LockSemaphore
SpinCount
<unnamed-tag>
CriticalSection
Resource
_HEAP_LOCK
Lock
_PEB64
InheritedAddressSpace
ReadImageFileExecOptions
BeingDebugged
BitField
ImageUsesLargePages
SpareBits
Mutant
ImageBaseAddress
Ldr
ProcessParameters
SubSystemData
ProcessHeap
FastPebLock
AtlThunkSListPtr
SparePtr2
EnvironmentUpdateCount
KernelCallbackTable
SystemReserved
SpareUlong
FreeList
TlsExpansionCounter
TlsBitmap
TlsBitmapBits
ReadOnlySharedMemoryBase
ReadOnlySharedMemoryHeap
ReadOnlyStaticServerData
AnsiCodePageData
OemCodePageData
UnicodeCaseTableData
NumberOfProcessors
NtGlobalFlag
CriticalSectionTimeout
HeapSegmentReserve
HeapSegmentCommit
HeapDeCommitTotalFreeThreshold
HeapDeCommitFreeBlockThreshold
NumberOfHeaps
MaximumNumberOfHeaps
ProcessHeaps
GdiSharedHandleTable
ProcessStarterHelper
GdiDCAttributeList
LoaderLock
OSMajorVersion
OSMinorVersion
OSBuildNumber
OSCSDVersion
OSPlatformId
ImageSubsystem
ImageSubsystemMajorVersion
ImageSubsystemMinorVersion
ImageProcessAffinityMask
GdiHandleBuffer
PostProcessInitRoutine
TlsExpansionBitmap
TlsExpansionBitmapBits
SessionId
AppCompatFlags
AppCompatFlagsUser
pShimData
AppCompatInfo
CSDVersion
ActivationContextData
ProcessAssemblyStorageMap
SystemDefaultActivationContextData
SystemAssemblyStorageMap
MinimumStackCommit
FlsCallback
FlsListHead
FlsBitmap
FlsBitmapBits
FlsHighIndex


_STRING64
Length
MaximumLength
Buffer
_PEB64
InheritedAddressSpace
ReadImageFileExecOptions
BeingDebugged
BitField
ImageUsesLargePages
SpareBits
Mutant
ImageBaseAddress
Ldr
ProcessParameters
SubSystemData
ProcessHeap
FastPebLock
AtlThunkSListPtr
SparePtr2
EnvironmentUpdateCount
KernelCallbackTable
SystemReserved
SpareUlong
FreeList
TlsExpansionCounter
TlsBitmap
TlsBitmapBits
ReadOnlySharedMemoryBase
ReadOnlySharedMemoryHeap
ReadOnlyStaticServerData
AnsiCodePageData
OemCodePageData
UnicodeCaseTableData
NumberOfProcessors
NtGlobalFlag
CriticalSectionTimeout
HeapSegmentReserve
HeapSegmentCommit
HeapDeCommitTotalFreeThreshold
HeapDeCommitFreeBlockThreshold
NumberOfHeaps
MaximumNumberOfHeaps
ProcessHeaps
GdiSharedHandleTable
ProcessStarterHelper
GdiDCAttributeList
LoaderLock
OSMajorVersion
OSMinorVersion
OSBuildNumber
OSCSDVersion
OSPlatformId
ImageSubsystem
ImageSubsystemMajorVersion
ImageSubsystemMinorVersion
ImageProcessAffinityMask
GdiHandleBuffer
PostProcessInitRoutine
TlsExpansionBitmap
TlsExpansionBitmapBits
SessionId
AppCompatFlags
AppCompatFlagsUser
pShimData
AppCompatInfo
CSDVersion
ActivationContextData
ProcessAssemblyStorageMap
SystemDefaultActivationContextData
SystemAssemblyStorageMap
MinimumStackCommit
FlsCallback
FlsListHead
FlsBitmap
FlsBitmapBits
FlsHighIndex
_KPCR
NtTib
GdtBase
TssBase
PerfGlobalGroupMask
Self
CurrentPrcb
LockArray
Used_Self
IdtBase
Unused
Irql
SecondLevelCacheAssociativity
ObsoleteNumber
Fill0
Unused0
MajorVersion
MinorVersion
StallScaleFactor
Unused1
KernelReserved
SecondLevelCacheSize
HalReserved
Unused2
KdVersionBlock
Unused3
PcrAlign1
Prcb
_KGDTENTRY64
LimitLow
BaseLow
Bytes
Bits
BaseUpper
MustBeZero
Alignment
Alignment
_KTSS64
Reserved0
Rsp0
Rsp1
Rsp2
Ist
Reserved1
Reserved2
IoMapBase
IoMapBase
IoMapBase
IoMapBase
_KIDTENTRY64
OffsetLow
Selector
IstIndex
Reserved0
Type
Dpl
Present
OffsetMiddle
OffsetHigh
Reserved1
Alignment
Alignment




_KPCR
NtTib
GdtBase
TssBase
PerfGlobalGroupMask
Self
CurrentPrcb
LockArray
Used_Self
IdtBase
Unused
Irql
SecondLevelCacheAssociativity
ObsoleteNumber
Fill0
Unused0
MajorVersion
MinorVersion
StallScaleFactor
Unused1
KernelReserved
SecondLevelCacheSize
HalReserved
Unused2
KdVersionBlock
Unused3
PcrAlign1
Prcb
_MMCOLOR_TABLES
Flink
Blink
Count
Count

_MMCOLOR_TABLES
Flink
Blink
Count
_ACL
AclRevision
Sbz1
AclSize
AceCount
Sbz2
_DBGKD_FILL_MEMORY
Address
Length
Flags
PatternLength
_PP_LOOKASIDE_LIST
P
L
_KEXECUTE_OPTIONS
ExecuteDisable
ExecuteEnable
DisableThunkEmulation
Permanent
ExecuteDispatchEnable
ImageDispatchEnable
Spare
_KPROCESS
Header
ProfileListHead
DirectoryTableBase
IopmOffset
ActiveProcessors
KernelTime
UserTime
ReadyListHead
SwapListEntry
Reserved1
ThreadListHead
ProcessLock
Affinity
AutoAlignment
DisableBoost
DisableQuantum
ReservedFlags
ProcessFlags
BasePriority
QuantumReset
State
ThreadSeed
PowerState
IdealNode
Visited
Flags
ExecuteOptions
StackCount
ProcessListEntry
_PHYSICAL_MEMORY_RUN
BasePage
PageCount
_PHYSICAL_MEMORY_RUN
BasePage
PageCount
_MM_SESSION_SPACE
GlobalVirtualAddress
ReferenceCount
u
SessionId
ProcessList
LastProcessSwappedOutTime
SessionPageDirectoryIndex
NonPagablePages
CommittedPages
PagedPoolStart
PagedPoolEnd
PagedPoolBasePde
Color
ResidentProcessCount
SessionPoolAllocationFailures
ImageList
LocaleId
AttachCount
AttachEvent
LastProcess
ProcessReferenceToSession
WsListEntry
Lookaside
Session
PagedPoolMutex
PagedPoolInfo
Vm
Wsle
Win32KDriverUnload
PagedPool
PageDirectory
SpecialPoolFirstPte
SpecialPoolLastPte
NextPdeForSpecialPoolExpansion
LastPdeForSpecialPoolExpansion
SpecialPagesInUse
ImageLoadingCount
ImageLoadingCount
_MM_SESSION_SPACE_FLAGS
Initialized
DeletePending
Filler
<unnamed-tag>
LongFlags
Flags

_MMSESSION
SystemSpaceViewLock
SystemSpaceViewLockPointer
SystemSpaceViewStart
SystemSpaceViewTable
SystemSpaceHashSize
SystemSpaceHashEntries
SystemSpaceHashKey
BitmapFailures
SystemSpaceBitMap
_MM_PAGED_POOL_INFO
PagedPoolAllocationMap
EndOfPagedPoolBitmap
FirstPteForPagedPool
LastPteForPagedPool
NextPdeForPagedPoolExpansion
PagedPoolHint
PagedPoolCommit
AllocatedPagedPool
_MMWSLE
u1
u1
_DRIVER_OBJECT
Type
Size
DeviceObject
Flags
DriverStart
DriverSize
DriverSection
DriverExtension
DriverName
HardwareDatabase
FastIoDispatch
DriverInit
DriverStartIo
DriverUnload
MajorFunction
MajorFunction
MajorFunction
MajorFunction
MajorFunction
_POOL_DESCRIPTOR
PoolType
PoolIndex
RunningAllocs
RunningDeAllocs
TotalPages
TotalBigPages
Threshold
LockAddress
PendingFrees
PendingFreeDepth
TotalBytes
Spare0
ListHeads
_MM_SESSION_SPACE
GlobalVirtualAddress
ReferenceCount
u
SessionId
ProcessList
LastProcessSwappedOutTime
SessionPageDirectoryIndex
NonPagablePages
CommittedPages
PagedPoolStart
PagedPoolEnd
PagedPoolBasePde
Color
ResidentProcessCount
SessionPoolAllocationFailures
ImageList
LocaleId
AttachCount
AttachEvent
LastProcess
ProcessReferenceToSession
WsListEntry
Lookaside
Session
PagedPoolMutex
PagedPoolInfo
Vm
Wsle
Win32KDriverUnload
PagedPool
PageDirectory
SpecialPoolFirstPte
SpecialPoolLastPte
NextPdeForSpecialPoolExpansion
LastPdeForSpecialPoolExpansion
SpecialPagesInUse
ImageLoadingCount
_PEB_LDR_DATA
Length
Initialized
SsHandle
InLoadOrderModuleList
InMemoryOrderModuleList
InInitializationOrderModuleList
EntryInProgress
EntryInProgress
_RTL_USER_PROCESS_PARAMETERS
MaximumLength
Length
Flags
DebugFlags
ConsoleHandle
ConsoleFlags
StandardInput
StandardOutput
StandardError
CurrentDirectory
DllPath
ImagePathName
CommandLine
Environment
StartingX
StartingY
CountX
CountY
CountCharsX
CountCharsY
FillAttribute
WindowFlags
ShowWindowFlags
WindowTitle
DesktopInfo
ShellInfo
RuntimeData
CurrentDirectores
CurrentDirectores
CurrentDirectores
_PEB_FREE_BLOCK
Next
Size
Size
Size
_ACTIVATION_CONTEXT_DATA
_ACTIVATION_CONTEXT_DATA
_ACTIVATION_CONTEXT_DATA
_ASSEMBLY_STORAGE_MAP
_ASSEMBLY_STORAGE_MAP
_PEB
InheritedAddressSpace
ReadImageFileExecOptions
BeingDebugged
BitField
ImageUsesLargePages
SpareBits
Mutant
ImageBaseAddress
Ldr
ProcessParameters
SubSystemData
ProcessHeap
FastPebLock
AtlThunkSListPtr
SparePtr2
EnvironmentUpdateCount
KernelCallbackTable
SystemReserved
SpareUlong
FreeList
TlsExpansionCounter
TlsBitmap
TlsBitmapBits
ReadOnlySharedMemoryBase
ReadOnlySharedMemoryHeap
ReadOnlyStaticServerData
AnsiCodePageData
OemCodePageData
UnicodeCaseTableData
NumberOfProcessors
NtGlobalFlag
CriticalSectionTimeout
HeapSegmentReserve
HeapSegmentCommit
HeapDeCommitTotalFreeThreshold
HeapDeCommitFreeBlockThreshold
NumberOfHeaps
MaximumNumberOfHeaps
ProcessHeaps
GdiSharedHandleTable
ProcessStarterHelper
GdiDCAttributeList
LoaderLock
OSMajorVersion
OSMinorVersion
OSBuildNumber
OSCSDVersion
OSPlatformId
ImageSubsystem
ImageSubsystemMajorVersion
ImageSubsystemMinorVersion
ImageProcessAffinityMask
GdiHandleBuffer
PostProcessInitRoutine
TlsExpansionBitmap
TlsExpansionBitmapBits
SessionId
AppCompatFlags
AppCompatFlagsUser
pShimData
AppCompatInfo
CSDVersion
ActivationContextData
ProcessAssemblyStorageMap
SystemDefaultActivationContextData
SystemAssemblyStorageMap
MinimumStackCommit
FlsCallback
FlsListHead
FlsBitmap
FlsBitmapBits
FlsHighIndex
_HEAP_FREE_ENTRY
PreviousBlockPrivateData
Size
PreviousSize
SmallTagIndex
Flags
UnusedBytes
SegmentIndex
CompactHeader
FreeList
_HEAP_FREE_ENTRY
PreviousBlockPrivateData
Size
PreviousSize
SmallTagIndex
Flags
UnusedBytes
SegmentIndex
CompactHeader
FreeList
_DBGKD_GET_CONTEXT
Unused
_TEB_ACTIVE_FRAME_CONTEXT
Flags
FrameName
_MMPTE_SOFTWARE
Valid
PageFileLow
Protection
Prototype
Transition
UsedPageTableEntries
Reserved
PageFileHigh
_IO_RESOURCE_LIST
Version
Revision
Count
Descriptors

_IO_RESOURCE_REQUIREMENTS_LIST
ListSize
InterfaceType
BusNumber
SlotNumber
Reserved
AlternativeLists
List
<unnamed-tag>
IoStatus
LastByte
_MMMOD_WRITER_LISTHEAD
ListHead
Event
Event
_MDL
Next
Size
MdlFlags
Process
MappedSystemVa
StartVa
ByteCount
ByteOffset

_MMMOD_WRITER_MDL_ENTRY
Links
WriteOffset
u
Irp
LastPageToWrite
PagingListHead
CurrentList
PagingFile
File
ControlArea
FileResource
IssueTime
Mdl
Page
_CACHE_UNINITIALIZE_EVENT
Next
Event
_SECURITY_TOKEN_AUDIT_DATA
Length
GrantMask
DenyMask
_CM_FULL_RESOURCE_DESCRIPTOR
InterfaceType
BusNumber
PartialResourceList

_CM_RESOURCE_LIST
Count
List
_TEB32
NtTib
EnvironmentPointer
ClientId
ActiveRpcHandle
ThreadLocalStoragePointer
ProcessEnvironmentBlock
LastErrorValue
CountOfOwnedCriticalSections
CsrClientThread
Win32ThreadInfo
User32Reserved
UserReserved
WOW32Reserved
CurrentLocale
FpSoftwareStatusRegister
SystemReserved1
ExceptionCode
ActivationContextStackPointer
SpareBytes1
GdiTebBatch
RealClientId
GdiCachedProcessHandle
GdiClientPID
GdiClientTID
GdiThreadLocalInfo
Win32ClientInfo
glDispatchTable
glReserved1
glReserved2
glSectionInfo
glSection
glTable
glCurrentRC
glContext
LastStatusValue
StaticUnicodeString
StaticUnicodeBuffer
DeallocationStack
TlsSlots
TlsLinks
Vdm
ReservedForNtRpc
DbgSsReserved
HardErrorMode
Instrumentation
SubProcessTag
EtwTraceData
WinSockData
GdiBatchCount
InDbgPrint
FreeStackOnTermination
HasFiberData
IdealProcessor
GuaranteedStackBytes
ReservedForPerf
ReservedForOle
WaitingOnLoaderLock
SparePointer1
SoftPatchPtr1
SoftPatchPtr2
TlsExpansionSlots
ImpersonationLocale
IsImpersonating
NlsCache
pShimData
HeapVirtualAffinity
CurrentTransactionHandle
ActiveFrame
FlsData
SafeThunkCall
BooleanSpare
_NT_TIB32
ExceptionList
StackBase
StackLimit
SubSystemTib
FiberData
Version
ArbitraryUserPointer
Self
_CLIENT_ID32
UniqueProcess
UniqueThread


_GDI_TEB_BATCH32
Offset
HDC
Buffer



_STRING32
Length
MaximumLength
Buffer


_TEB32
NtTib
EnvironmentPointer
ClientId
ActiveRpcHandle
ThreadLocalStoragePointer
ProcessEnvironmentBlock
LastErrorValue
CountOfOwnedCriticalSections
CsrClientThread
Win32ThreadInfo
User32Reserved
UserReserved
WOW32Reserved
CurrentLocale
FpSoftwareStatusRegister
SystemReserved1
ExceptionCode
ActivationContextStackPointer
SpareBytes1
GdiTebBatch
RealClientId
GdiCachedProcessHandle
GdiClientPID
GdiClientTID
GdiThreadLocalInfo
Win32ClientInfo
glDispatchTable
glReserved1
glReserved2
glSectionInfo
glSection
glTable
glCurrentRC
glContext
LastStatusValue
StaticUnicodeString
StaticUnicodeBuffer
DeallocationStack
TlsSlots
TlsLinks
Vdm
ReservedForNtRpc
DbgSsReserved
HardErrorMode
Instrumentation
SubProcessTag
EtwTraceData
WinSockData
GdiBatchCount
InDbgPrint
FreeStackOnTermination
HasFiberData
IdealProcessor
GuaranteedStackBytes
ReservedForPerf
ReservedForOle
WaitingOnLoaderLock
SparePointer1
SoftPatchPtr1
SoftPatchPtr2
TlsExpansionSlots
ImpersonationLocale
IsImpersonating
NlsCache
pShimData
HeapVirtualAffinity
CurrentTransactionHandle
ActiveFrame
FlsData
SafeThunkCall
BooleanSpare
_CM_PARTIAL_RESOURCE_LIST
Version
Revision
Count
PartialDescriptors
_CM_FULL_RESOURCE_DESCRIPTOR
InterfaceType
BusNumber
PartialResourceList
_EPROCESS_QUOTA_ENTRY
Usage
Limit
Peak
Return
_CM_CACHED_VALUE_INDEX
CellIndex
Data
_CELL_DATA
u
<unnamed-tag>
CellData
List
_CM_CACHED_VALUE_INDEX
CellIndex
Data
_KSEMAPHORE
Header
Limit
Limit
Limit
Limit
Limit
PROCESSOR_IDLE_TIMES
StartTime
EndTime
IdleHandlerReserved
PROCESSOR_PERF_STATE
PercentFrequency
MinCapacity
Power
IncreaseLevel
DecreaseLevel
Flags
IncreaseTime
DecreaseTime
IncreaseCount
DecreaseCount
PerformanceTime
PerformanceTime
PerformanceTime
PerformanceTime
PerformanceTime
_PROCESSOR_POWER_STATE
IdleFunction
Idle0KernelTimeLimit
Idle0LastTime
IdleHandlers
IdleState
IdleHandlersCount
LastCheck
IdleTimes
IdleTime1
PromotionCheck
IdleTime2
CurrentThrottle
ThermalThrottleLimit
CurrentThrottleIndex
ThermalThrottleIndex
LastKernelUserTime
PerfIdleTime
DebugDelta
DebugCount
LastSysTime
TotalIdleStateTime
TotalIdleTransitions
PreviousC3StateTime
KneeThrottleIndex
ThrottleLimitIndex
PerfStatesCount
ProcessorMinThrottle
ProcessorMaxThrottle
LastBusyPercentage
LastC3Percentage
LastAdjustedBusyPercentage
PromotionCount
DemotionCount
ErrorCount
RetryCount
Flags
PerfCounterFrequency
PerfTickCount
PerfTimer
PerfDpc
PerfStates
PerfSetThrottle
LastC3KernelUserTime
Spare1
_DBGKD_READ_WRITE_MSR
Msr
DataValueLow
DataValueHigh
_MMPFNENTRY
Modified
ReadInProgress
WriteInProgress
PrototypePte
PageColor
PageLocation
RemovalRequested
CacheAttribute
Rom
ParityError
_IO_COUNTERS
ReadOperationCount
WriteOperationCount
OtherOperationCount
ReadTransferCount
WriteTransferCount
OtherTransferCount

_TOKEN_SOURCE
SourceName
SourceIdentifier
_DBGKD_QUERY_MEMORY
Address
Reserved
AddressSpace
Flags
_DEVICE_OBJECT_POWER_EXTENSION
IdleCount
ConservationIdleTime
PerformanceIdleTime
DeviceObject
IdleList
DeviceType
State
NotifySourceList
NotifyTargetList
PowerChannelSummary
Volume
_POWER_CHANNEL_SUMMARY
Signature
TotalCount
D0Count
NotifyList
_DEVICE_OBJECT_POWER_EXTENSION
IdleCount
ConservationIdleTime
PerformanceIdleTime
DeviceObject
IdleList
DeviceType
State
NotifySourceList
NotifyTargetList
PowerChannelSummary
Volume
LSA_FOREST_TRUST_RECORD_TYPE
ForestTrustTopLevelName
ForestTrustTopLevelNameEx
ForestTrustDomainInfo
ForestTrustRecordTypeLast
_MMSUPPORT_FLAGS
SessionSpace
BeingTrimmed
SessionLeader
TrimHard
MaximumWorkingSetHard
ForceTrim
MinimumWorkingSetHard
Available0
MemoryPriority
GrowWsleHash
AcquiredUnsafe
Available
EX_QUEUE_WORKER_INFO
QueueDisabled
MakeThreadsAsNecessary
WaitMode
WorkerCount
QueueWorkerInfo
PROCESSOR_PERF_STATE
PercentFrequency
MinCapacity
Power
IncreaseLevel
DecreaseLevel
Flags
IncreaseTime
DecreaseTime
IncreaseCount
DecreaseCount
PerformanceTime
PROCESSOR_IDLE_TIMES
StartTime
EndTime
IdleHandlerReserved
_TERMINATION_PORT
Next
Port
_MMMOD_WRITER_LISTHEAD
ListHead
Event
_SYSTEM_POWER_POLICY
Revision
PowerButton
SleepButton
LidClose
LidOpenWake
Reserved
Idle
IdleTimeout
IdleSensitivity
DynamicThrottle
Spare2
MinSleep
MaxSleep
ReducedLatencySleep
WinLogonFlags
Spare3
DozeS4Timeout
BroadcastCapacityResolution
DischargePolicy
VideoTimeout
VideoDimDisplay
VideoReserved
SpindownTimeout
OptimizeForPower
FanThrottleTolerance
ForcedThrottle
MinThrottle
OverThrottled
POWER_ACTION_POLICY
Action
Flags
EventCode
SYSTEM_POWER_LEVEL
Enable
Spare
BatteryLevel
PowerPolicy
MinSystemState

_SYSTEM_POWER_POLICY
Revision
PowerButton
SleepButton
LidClose
LidOpenWake
Reserved
Idle
IdleTimeout
IdleSensitivity
DynamicThrottle
Spare2
MinSleep
MaxSleep
ReducedLatencySleep
WinLogonFlags
Spare3
DozeS4Timeout
BroadcastCapacityResolution
DischargePolicy
VideoTimeout
VideoDimDisplay
VideoReserved
SpindownTimeout
OptimizeForPower
FanThrottleTolerance
ForcedThrottle
MinThrottle
OverThrottled

_GDI_TEB_BATCH
Offset
HDC
Buffer
_POP_THERMAL_ZONE
Link
State
Flags
Mode
PendingMode
ActivePoint
PendingActivePoint
Throttle
LastTime
SampleRate
LastTemp
PassiveTimer
PassiveDpc
OverThrottled
Irp
Info
_POP_ACTION_TRIGGER
Type
Flags
Spare
Battery
Wait
_POP_THERMAL_ZONE
Link
State
Flags
Mode
PendingMode
ActivePoint
PendingActivePoint
Throttle
LastTime
SampleRate
LastTemp
PassiveTimer
PassiveDpc
OverThrottled
Irp
Info
_AMD64_DBGKD_CONTROL_SET
TraceFlag
Dr7
CurrentSymbolStart
CurrentSymbolEnd
_DBGKD_ANY_CONTROL_SET
X86ControlSet
AlphaControlSet
IA64ControlSet
Amd64ControlSet
_DBGKD_CONTINUE2
ContinueStatus
ControlSet
AnyControlSet
_PROXY_CLASS
ProxyFull
ProxyService
ProxyTree
ProxyDirectory
_SECURITY_TOKEN_PROXY_DATA
Length
ProxyClass
PathInfo
ContainerMask
ObjectMask
_PROCESSOR_POWER_POLICY
Revision
DynamicThrottle
Spare
DisableCStates
Reserved
PolicyCount
Policy
_PROCESSOR_POWER_POLICY_INFO
TimeCheck
DemoteLimit
PromoteLimit
DemotePercent
PromotePercent
Spare
AllowDemotion
AllowPromotion
Reserved

_PROCESSOR_POWER_POLICY
Revision
DynamicThrottle
Spare
DisableCStates
Reserved
PolicyCount
Policy

_OBJECT_HANDLE_COUNT_DATABASE
CountEntries
HandleCountEntries
_IMAGE_DOS_HEADER
e_magic
e_cblp
e_cp
e_crlc
e_cparhdr
e_minalloc
e_maxalloc
e_ss
e_sp
e_csum
e_ip
e_cs
e_lfarlc
e_ovno
e_res
e_oemid
e_oeminfo
e_res2
e_lfanew


_IMAGE_DOS_HEADER
e_magic
e_cblp
e_cp
e_crlc
e_cparhdr
e_minalloc
e_maxalloc
e_ss
e_sp
e_csum
e_ip
e_cs
e_lfarlc
e_ovno
e_res
e_oemid
e_oeminfo
e_res2
e_lfanew
_OWNER_ENTRY
OwnerThread
OwnerCount
TableSize
_HEAP_VIRTUAL_ALLOC_ENTRY
Entry
ExtraStuff
CommitSize
ReserveSize
BusyBlock
_HEAP_ENTRY_EXTRA
AllocatorBackTraceIndex
TagIndex
Settable
ZeroInit
ZeroInit1
_HEAP_VIRTUAL_ALLOC_ENTRY
Entry
ExtraStuff
CommitSize
ReserveSize
BusyBlock
_RTL_ATOM_TABLE
Signature
CriticalSection
RtlHandleTable
NumberOfBuckets
Buckets
_RTL_HANDLE_TABLE
MaximumNumberOfHandles
SizeOfHandleTableEntry
Reserved
FreeHandles
CommittedHandles
UnCommittedHandles
MaxReservedHandles
_RTL_ATOM_TABLE_ENTRY
HashLink
HandleIndex
Atom
ReferenceCount
Flags
NameLength
Name
Name

_RTL_ATOM_TABLE
Signature
CriticalSection
RtlHandleTable
NumberOfBuckets
Buckets
_TEB64
NtTib
EnvironmentPointer
ClientId
ActiveRpcHandle
ThreadLocalStoragePointer
ProcessEnvironmentBlock
LastErrorValue
CountOfOwnedCriticalSections
CsrClientThread
Win32ThreadInfo
User32Reserved
UserReserved
WOW32Reserved
CurrentLocale
FpSoftwareStatusRegister
SystemReserved1
ExceptionCode
ActivationContextStackPointer
SpareBytes1
GdiTebBatch
RealClientId
GdiCachedProcessHandle
GdiClientPID
GdiClientTID
GdiThreadLocalInfo
Win32ClientInfo
glDispatchTable
glReserved1
glReserved2
glSectionInfo
glSection
glTable
glCurrentRC
glContext
LastStatusValue
StaticUnicodeString
StaticUnicodeBuffer
DeallocationStack
TlsSlots
TlsLinks
Vdm
ReservedForNtRpc
DbgSsReserved
HardErrorMode
Instrumentation
SubProcessTag
EtwTraceData
WinSockData
GdiBatchCount
InDbgPrint
FreeStackOnTermination
HasFiberData
IdealProcessor
GuaranteedStackBytes
ReservedForPerf
ReservedForOle
WaitingOnLoaderLock
SparePointer1
SoftPatchPtr1
SoftPatchPtr2
TlsExpansionSlots
DeallocationBStore
BStoreLimit
ImpersonationLocale
IsImpersonating
NlsCache
pShimData
HeapVirtualAffinity
CurrentTransactionHandle
ActiveFrame
FlsData
SafeThunkCall
BooleanSpare
_NT_TIB64
ExceptionList
StackBase
StackLimit
SubSystemTib
FiberData
Version
ArbitraryUserPointer
Self
_CLIENT_ID64
UniqueProcess
UniqueThread

_GDI_TEB_BATCH64
Offset
HDC
Buffer



_TEB64
NtTib
EnvironmentPointer
ClientId
ActiveRpcHandle
ThreadLocalStoragePointer
ProcessEnvironmentBlock
LastErrorValue
CountOfOwnedCriticalSections
CsrClientThread
Win32ThreadInfo
User32Reserved
UserReserved
WOW32Reserved
CurrentLocale
FpSoftwareStatusRegister
SystemReserved1
ExceptionCode
ActivationContextStackPointer
SpareBytes1
GdiTebBatch
RealClientId
GdiCachedProcessHandle
GdiClientPID
GdiClientTID
GdiThreadLocalInfo
Win32ClientInfo
glDispatchTable
glReserved1
glReserved2
glSectionInfo
glSection
glTable
glCurrentRC
glContext
LastStatusValue
StaticUnicodeString
StaticUnicodeBuffer
DeallocationStack
TlsSlots
TlsLinks
Vdm
ReservedForNtRpc
DbgSsReserved
HardErrorMode
Instrumentation
SubProcessTag
EtwTraceData
WinSockData
GdiBatchCount
InDbgPrint
FreeStackOnTermination
HasFiberData
IdealProcessor
GuaranteedStackBytes
ReservedForPerf
ReservedForOle
WaitingOnLoaderLock
SparePointer1
SoftPatchPtr1
SoftPatchPtr2
TlsExpansionSlots
DeallocationBStore
BStoreLimit
ImpersonationLocale
IsImpersonating
NlsCache
pShimData
HeapVirtualAffinity
CurrentTransactionHandle
ActiveFrame
FlsData
SafeThunkCall
BooleanSpare
_IMAGE_ROM_OPTIONAL_HEADER
Magic
MajorLinkerVersion
MinorLinkerVersion
SizeOfCode
SizeOfInitializedData
SizeOfUninitializedData
AddressOfEntryPoint
BaseOfCode
BaseOfData
BaseOfBss
GprMask
CprMask
GpValue
_IMAGE_ROM_OPTIONAL_HEADER
Magic
MajorLinkerVersion
MinorLinkerVersion
SizeOfCode
SizeOfInitializedData
SizeOfUninitializedData
AddressOfEntryPoint
BaseOfCode
BaseOfData
BaseOfBss
GprMask
CprMask
GpValue
_iobuf
_ptr
_cnt
_base
_flag
_file
_charbuf
_bufsiz
_tmpfname

_iobuf
_ptr
_cnt
_base
_flag
_file
_charbuf
_bufsiz
_tmpfname
_MMPTE_LIST
Valid
OneEntry
filler0
Protection
Prototype
Transition
filler1
NextEntry
_HHIVE
Signature
GetCellRoutine
ReleaseCellRoutine
Allocate
Free
FileSetSize
FileWrite
FileRead
FileFlush
BaseBlock
DirtyVector
DirtyCount
DirtyAlloc
BaseBlockAlloc
Cluster
Flat
ReadOnly
Log
DirtyFlag
HiveFlags
LogSize
RefreshCount
StorageTypeCount
Version
Storage
_CM_KEY_SECURITY_CACHE_ENTRY
Cell
CachedSecurity
CachedSecurity

_CM_KEY_CONTROL_BLOCK
RefCount
Flags
ExtFlags
PrivateAlloc
Delete
DelayedCloseIndex
TotalLevels
KeyHash
ConvKey
NextHash
KeyHive
KeyCell
ParentKcb
NameBlock
CachedSecurity
ValueCache
IndexHint
HashKey
SubKeyCount
KeyBodyListHead
FreeListEntry
KeyBodyArray
DelayCloseEntry
KcbLastWriteTime
KcbMaxNameLen
KcbMaxValueNameLen
KcbMaxValueDataLen
RealKeyName
RealKeyName
_WORK_QUEUE_ITEM
List
WorkerRoutine
Parameter
Parameter
_CM_CELL_REMAP_BLOCK
OldCell
NewCell
NewCell
_CMHIVE
Hive
FileHandles
NotifyList
HiveList
HiveLock
ViewLock
WriterLock
FlusherLock
SecurityLock
LRUViewListHead
PinViewListHead
FileObject
FileFullPath
FileUserName
MappedViews
PinnedViews
UseCount
SecurityCount
SecurityCacheSize
SecurityHitHint
SecurityCache
SecurityHash
UnloadEvent
RootKcb
Frozen
UnloadWorkItem
GrowOnlyMode
GrowOffset
KcbConvertListHead
KnodeConvertListHead
CellRemapArray
Flags
TrustClassEntry
FlushCount
CreatorOwner
_HANDLE_TRACE_DB_ENTRY
ClientId
Handle
Type
StackTrace

_HANDLE_TRACE_DEBUG_INFO
RefCount
TableSize
BitMaskFlags
CloseCompactionLock
CurrentStackIndex
TraceDb
TraceDb
_MDL
Next
Size
MdlFlags
Process
MappedSystemVa
StartVa
ByteCount
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
ByteOffset
CMP_OFFSET_ARRAY
FileOffset
DataBuffer
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
DataLength
_HBASE_BLOCK
Signature
Sequence1
Sequence2
TimeStamp
Major
Minor
Type
Format
RootCell
Length
Cluster
FileName
Reserved1
CheckSum
Reserved2
BootType
BootRecover
BootRecover
_DUAL
Length
Map
SmallDir
Guard
FreeDisplay
FreeSummary
FreeBins

_HHIVE
Signature
GetCellRoutine
ReleaseCellRoutine
Allocate
Free
FileSetSize
FileWrite
FileRead
FileFlush
BaseBlock
DirtyVector
DirtyCount
DirtyAlloc
BaseBlockAlloc
Cluster
Flat
ReadOnly
Log
DirtyFlag
HiveFlags
LogSize
RefreshCount
StorageTypeCount
Version
Storage
_PROCESS_WS_WATCH_INFORMATION
FaultingPc
FaultingVa

_PAGEFAULT_HISTORY
CurrentIndex
MaxIndex
SpinLock
Reserved
WatchInfo

_RTL_ATOM_TABLE_ENTRY
HashLink
HandleIndex
Atom
ReferenceCount
Flags
NameLength
Name
_MM_SESSION_SPACE_FLAGS
Initialized
DeletePending
Filler
_CM_PARTIAL_RESOURCE_DESCRIPTOR
Type
ShareDisposition
Flags
u

_CM_PARTIAL_RESOURCE_LIST
Version
Revision
Count
PartialDescriptors
_SECURITY_QUALITY_OF_SERVICE
Length
ImpersonationLevel
ContextTrackingMode
EffectiveOnly
EffectiveOnly
_OBJECT_CREATE_INFORMATION
Attributes
RootDirectory
ParseContext
ProbeMode
PagedPoolCharge
NonPagedPoolCharge
SecurityDescriptorCharge
SecurityDescriptor
SecurityQos
SecurityQualityOfService
_IO_TIMER
Type
TimerFlag
TimerList
TimerRoutine
Context
DeviceObject
DeviceObject
_WAIT_CONTEXT_BLOCK
WaitQueueEntry
DeviceRoutine
DeviceContext
NumberOfMapRegisters
DeviceObject
CurrentIrp
BufferChainingDpc
<unnamed-tag>
ListEntry
Wcb
_KDEVICE_QUEUE
Type
Size
DeviceListHead
Lock
Busy
Reserved
Hint
_DEVOBJ_EXTENSION
Type
Size
DeviceObject
PowerFlags
Dope
ExtensionFlags
DeviceNode
AttachedTo
StartIoCount
StartIoKey
StartIoFlags
Vpb
Vpb
_DEVICE_OBJECT
Type
Size
ReferenceCount
DriverObject
NextDevice
AttachedDevice
CurrentIrp
Timer
Flags
Characteristics
Vpb
DeviceExtension
DeviceType
StackSize
Queue
AlignmentRequirement
DeviceQueue
Dpc
ActiveThreadCount
SecurityDescriptor
DeviceLock
SectorSize
Spare1
DeviceObjectExtension
Reserved
_SECTION_OBJECT_POINTERS
DataSectionObject
SharedCacheMap
ImageSectionObject
_SEP_AUDIT_POLICY_CATEGORIES
System
Logon
ObjectAccess
PrivilegeUse
DetailedTracking
PolicyChange
AccountManagement
DirectoryServiceAccess
AccountLogon
_SEP_AUDIT_POLICY_OVERLAY
PolicyBits
SetBit
_SEP_AUDIT_POLICY
PolicyElements
PolicyOverlay
Overlay
_PEB32
InheritedAddressSpace
ReadImageFileExecOptions
BeingDebugged
BitField
ImageUsesLargePages
SpareBits
Mutant
ImageBaseAddress
Ldr
ProcessParameters
SubSystemData
ProcessHeap
FastPebLock
AtlThunkSListPtr
SparePtr2
EnvironmentUpdateCount
KernelCallbackTable
SystemReserved
SpareUlong
FreeList
TlsExpansionCounter
TlsBitmap
TlsBitmapBits
ReadOnlySharedMemoryBase
ReadOnlySharedMemoryHeap
ReadOnlyStaticServerData
AnsiCodePageData
OemCodePageData
UnicodeCaseTableData
NumberOfProcessors
NtGlobalFlag
CriticalSectionTimeout
HeapSegmentReserve
HeapSegmentCommit
HeapDeCommitTotalFreeThreshold
HeapDeCommitFreeBlockThreshold
NumberOfHeaps
MaximumNumberOfHeaps
ProcessHeaps
GdiSharedHandleTable
ProcessStarterHelper
GdiDCAttributeList
LoaderLock
OSMajorVersion
OSMinorVersion
OSBuildNumber
OSCSDVersion
OSPlatformId
ImageSubsystem
ImageSubsystemMajorVersion
ImageSubsystemMinorVersion
ImageProcessAffinityMask
GdiHandleBuffer
PostProcessInitRoutine
TlsExpansionBitmap
TlsExpansionBitmapBits
SessionId
AppCompatFlags
AppCompatFlagsUser
pShimData
AppCompatInfo
CSDVersion
ActivationContextData
ProcessAssemblyStorageMap
SystemDefaultActivationContextData
SystemAssemblyStorageMap
MinimumStackCommit
FlsCallback
FlsListHead
FlsBitmap
FlsBitmapBits
FlsHighIndex

_PEB32
InheritedAddressSpace
ReadImageFileExecOptions
BeingDebugged
BitField
ImageUsesLargePages
SpareBits
Mutant
ImageBaseAddress
Ldr
ProcessParameters
SubSystemData
ProcessHeap
FastPebLock
AtlThunkSListPtr
SparePtr2
EnvironmentUpdateCount
KernelCallbackTable
SystemReserved
SpareUlong
FreeList
TlsExpansionCounter
TlsBitmap
TlsBitmapBits
ReadOnlySharedMemoryBase
ReadOnlySharedMemoryHeap
ReadOnlyStaticServerData
AnsiCodePageData
OemCodePageData
UnicodeCaseTableData
NumberOfProcessors
NtGlobalFlag
CriticalSectionTimeout
HeapSegmentReserve
HeapSegmentCommit
HeapDeCommitTotalFreeThreshold
HeapDeCommitFreeBlockThreshold
NumberOfHeaps
MaximumNumberOfHeaps
ProcessHeaps
GdiSharedHandleTable
ProcessStarterHelper
GdiDCAttributeList
LoaderLock
OSMajorVersion
OSMinorVersion
OSBuildNumber
OSCSDVersion
OSPlatformId
ImageSubsystem
ImageSubsystemMajorVersion
ImageSubsystemMinorVersion
ImageProcessAffinityMask
GdiHandleBuffer
PostProcessInitRoutine
TlsExpansionBitmap
TlsExpansionBitmapBits
SessionId
AppCompatFlags
AppCompatFlagsUser
pShimData
AppCompatInfo
CSDVersion
ActivationContextData
ProcessAssemblyStorageMap
SystemDefaultActivationContextData
SystemAssemblyStorageMap
MinimumStackCommit
FlsCallback
FlsListHead
FlsBitmap
FlsBitmapBits
FlsHighIndex
_BITMAP_RANGE
Links
BasePage
FirstDirtyPage
LastDirtyPage
DirtyPages
Bitmap
_MBCB
NodeTypeCode
NodeIsInZone
PagesToWrite
DirtyPages
Reserved
BitmapRanges
ResumeWritePage
BitmapRange1
BitmapRange2
BitmapRange3
_POWER_CHANNEL_SUMMARY
Signature
TotalCount
D0Count
NotifyList
_CM_VIEW_OF_FILE
LRUViewList
PinViewList
FileOffset
Size
ViewAddress
Bcb
UseCount
UseCount
_SLIST_ENTRY
Next
_KDEVICE_QUEUE
Type
Size
DeviceListHead
Lock
Busy
Reserved
Hint
_KUSER_SHARED_DATA
TickCountLowDeprecated
TickCountMultiplier
InterruptTime
SystemTime
TimeZoneBias
ImageNumberLow
ImageNumberHigh
NtSystemRoot
MaxStackTraceDepth
CryptoExponent
TimeZoneId
LargePageMinimum
Reserved2
NtProductType
ProductTypeIsValid
NtMajorVersion
NtMinorVersion
ProcessorFeatures
Reserved1
Reserved3
TimeSlip
AlternativeArchitecture
SystemExpirationDate
SuiteMask
KdDebuggerEnabled
NXSupportPolicy
ActiveConsoleId
DismountCount
ComPlusPackage
LastSystemRITEventTickCount
NumberOfPhysicalPages
SafeBootMode
TraceLogging
TestRetInstruction
SystemCall
SystemCallReturn
SystemCallPad
TickCount
TickCountQuad
Cookie
Wow64SharedInformation
_KSYSTEM_TIME
LowPart
High1Time
High2Time
_KSYSTEM_TIME
LowPart
High1Time
High2Time


_NT_PRODUCT_TYPE
NtProductWinNt
NtProductLanManNt
NtProductServer
_ALTERNATIVE_ARCHITECTURE_TYPE
StandardDesign
NEC98x86
EndAlternatives
_KUSER_SHARED_DATA
TickCountLowDeprecated
TickCountMultiplier
InterruptTime
SystemTime
TimeZoneBias
ImageNumberLow
ImageNumberHigh
NtSystemRoot
MaxStackTraceDepth
CryptoExponent
TimeZoneId
LargePageMinimum
Reserved2
NtProductType
ProductTypeIsValid
NtMajorVersion
NtMinorVersion
ProcessorFeatures
Reserved1
Reserved3
TimeSlip
AlternativeArchitecture
SystemExpirationDate
SuiteMask
KdDebuggerEnabled
NXSupportPolicy
ActiveConsoleId
DismountCount
ComPlusPackage
LastSystemRITEventTickCount
NumberOfPhysicalPages
SafeBootMode
TraceLogging
TestRetInstruction
SystemCall
SystemCallReturn
SystemCallPad
TickCount
TickCountQuad
Cookie
Wow64SharedInformation
_GENERIC_MAPPING
GenericRead
GenericWrite
GenericExecute
GenericAll
_OBJECT_DUMP_CONTROL
Stream
Detail
Detail
Detail
Detail
Detail
Detail
_OB_OPEN_REASON
ObCreateHandle
ObOpenHandle
ObDuplicateHandle
ObInheritHandle
ObMaxOpenReason
ObMaxOpenReason
ObMaxOpenReason
ObMaxOpenReason
ObMaxOpenReason
ObMaxOpenReason
ObMaxOpenReason
ObMaxOpenReason
ObMaxOpenReason
ObMaxOpenReason
ObMaxOpenReason
ObMaxOpenReason
ObMaxOpenReason
ObMaxOpenReason
ObMaxOpenReason
_ACCESS_STATE
OperationID
SecurityEvaluated
GenerateAudit
GenerateOnClose
PrivilegesAllocated
Flags
RemainingDesiredAccess
PreviouslyGrantedAccess
OriginalDesiredAccess
SubjectSecurityContext
SecurityDescriptor
AuxData
Privileges
AuditPrivileges
ObjectName
ObjectTypeName
ObjectTypeName
ObjectTypeName
ObjectTypeName
ObjectTypeName
ObjectTypeName
ObjectTypeName
ObjectTypeName
ObjectTypeName
ObjectTypeName
ObjectTypeName
ObjectTypeName
ObjectTypeName
ObjectTypeName
_SECURITY_OPERATION_CODE
SetSecurityDescriptor
QuerySecurityDescriptor
DeleteSecurityDescriptor
AssignSecurityDescriptor
AssignSecurityDescriptor
AssignSecurityDescriptor
AssignSecurityDescriptor
AssignSecurityDescriptor
AssignSecurityDescriptor
AssignSecurityDescriptor
AssignSecurityDescriptor
AssignSecurityDescriptor
AssignSecurityDescriptor
AssignSecurityDescriptor
AssignSecurityDescriptor
_OBJECT_NAME_INFORMATION
Name
Name
Name
Name
Name
Name
Name
Name
Name
Name
Name
Name
Name
Name
Name
Name
_OBJECT_TYPE_INITIALIZER
Length
UseDefaultObject
CaseInsensitive
InvalidAttributes
GenericMapping
ValidAccessMask
SecurityRequired
MaintainHandleCount
MaintainTypeList
PoolType
DefaultPagedPoolCharge
DefaultNonPagedPoolCharge
DumpProcedure
OpenProcedure
CloseProcedure
DeleteProcedure
ParseProcedure
SecurityProcedure
QueryNameProcedure
OkayToCloseProcedure
_LARGE_INTEGER
LowPart
HighPart
u
QuadPart
_KSPECIAL_REGISTERS
Cr0
Cr2
Cr3
Cr4
KernelDr0
KernelDr1
KernelDr2
KernelDr3
KernelDr6
KernelDr7
Gdtr
Idtr
Tr
Ldtr
MxCsr
DebugControl
LastBranchToRip
LastBranchFromRip
LastExceptionToRip
LastExceptionFromRip
Cr8
MsrGsBase
MsrGsSwap
MsrStar
MsrLStar
MsrCStar
MsrSyscallMask
_CONTEXT
P1Home
P2Home
P3Home
P4Home
P5Home
P6Home
ContextFlags
MxCsr
SegCs
SegDs
SegEs
SegFs
SegGs
SegSs
EFlags
Dr0
Dr1
Dr2
Dr3
Dr6
Dr7
Rax
Rcx
Rdx
Rbx
Rsp
Rbp
Rsi
Rdi
R8
R9
R10
R11
R12
R13
R14
R15
Rip
FltSave
Header
Legacy
Xmm0
Xmm1
Xmm2
Xmm3
Xmm4
Xmm5
Xmm6
Xmm7
Xmm8
Xmm9
Xmm10
Xmm11
Xmm12
Xmm13
Xmm14
Xmm15
VectorRegister
VectorControl
DebugControl
LastBranchToRip
LastBranchFromRip
LastExceptionToRip
LastExceptionFromRip
_KPROCESSOR_STATE
SpecialRegisters
ContextFrame
_MMVAD_LONG
u1
LeftChild
RightChild
StartingVpn
EndingVpn
u
ControlArea
FirstPrototypePte
LastContiguousPte
u2
u3
u4
_MMADDRESS_LIST
StartVpn
EndVpn
<unnamed-tag>
List
Secured
_MMBANKED_SECTION
BasePhysicalPage
BasedPte
BankSize
BankShift
BankedRoutine
Context
CurrentMappedPte
BankTemplate
BankTemplate
_MMEXTEND_INFO
CommittedSize
ReferenceCount
ReferenceCount
<unnamed-tag>
Banked
ExtendedInfo
_MMVAD_LONG
u1
LeftChild
RightChild
StartingVpn
EndingVpn
u
ControlArea
FirstPrototypePte
LastContiguousPte
u2
u3
u4
_KEXECUTE_OPTIONS
ExecuteDisable
ExecuteEnable
DisableThunkEmulation
Permanent
ExecuteDispatchEnable
ImageDispatchEnable
Spare

_POOL_DESCRIPTOR
PoolType
PoolIndex
RunningAllocs
RunningDeAllocs
TotalPages
TotalBigPages
Threshold
LockAddress
PendingFrees
PendingFreeDepth
TotalBytes
Spare0
ListHeads
_HARDWARE_PTE
Valid
Write
Owner
WriteThrough
CacheDisable
Accessed
Dirty
LargePage
Global
CopyOnWrite
Prototype
reserved0
PageFrameNumber
reserved1
SoftwareWsIndex
NoExecute
_WOW64_PROCESS
Wow64
_PEB_LDR_DATA
Length
Initialized
SsHandle
InLoadOrderModuleList
InMemoryOrderModuleList
InInitializationOrderModuleList
EntryInProgress
_DBGKD_SWITCH_PARTITION
Partition
_DBGKD_GET_VERSION32
MajorVersion
MinorVersion
ProtocolVersion
Flags
KernBase
PsLoadedModuleList
MachineType
ThCallbackStack
NextCallback
FramePointer
KiCallUserMode
KeUserCallbackDispatcher
BreakpointWithStatus
DebuggerDataList
_MM_PAGED_POOL_INFO
PagedPoolAllocationMap
EndOfPagedPoolBitmap
FirstPteForPagedPool
LastPteForPagedPool
NextPdeForPagedPoolExpansion
PagedPoolHint
PagedPoolCommit
AllocatedPagedPool
_INTERLOCK_SEQ
Depth
FreeEntryOffset
OffsetAndDepth
Sequence
Exchg

_VPB
Type
Size
Flags
VolumeLabelLength
DeviceObject
RealDevice
SerialNumber
ReferenceCount
VolumeLabel
_PROCESSOR_CACHE_TYPE
CacheUnified
CacheInstruction
CacheData
CacheTrace
_CACHE_DESCRIPTOR
Level
Associativity
LineSize
Size
Type
_MMVIEW
Entry
ControlArea
ControlArea
_MMSESSION
SystemSpaceViewLock
SystemSpaceViewLockPointer
SystemSpaceViewStart
SystemSpaceViewTable
SystemSpaceHashSize
SystemSpaceHashEntries
SystemSpaceHashKey
BitmapFailures
SystemSpaceBitMap
_GENERIC_MAPPING
GenericRead
GenericWrite
GenericExecute
GenericAll
_MEMORY_CACHING_TYPE_ORIG
MmFrameBufferCached
_DBGKD_RESTORE_BREAKPOINT
BreakPointHandle
_EXCEPTION_DISPOSITION
ExceptionContinueExecution
ExceptionContinueSearch
ExceptionNestedException
ExceptionCollidedUnwind
ExceptionCollidedUnwind
ExceptionCollidedUnwind
ExceptionCollidedUnwind
ExceptionCollidedUnwind
ExceptionCollidedUnwind
ExceptionCollidedUnwind
ExceptionCollidedUnwind
_EXCEPTION_REGISTRATION_RECORD
Next
Handler
_SEP_AUDIT_POLICY_OVERLAY
PolicyBits
SetBit
_POOL_TRACKER_BIG_PAGES
Va
Key
NumberOfPages
QuotaObject
_POOL_TRACKER_BIG_PAGES
Va
Key
NumberOfPages
QuotaObject
_PROCESS_WS_WATCH_INFORMATION
FaultingPc
FaultingVa
_MMPTE_SUBSECTION
Valid
Unused0
Protection
Prototype
Unused1
SubsectionAddress
_VI_DEADLOCK_RESOURCE
Type
NodeCount
RecursionCount
ResourceAddress
ThreadOwner
ResourceList
HashChainList
FreeListEntry
StackTrace
LastAcquireTrace
LastReleaseTrace
LastReleaseTrace
_VI_DEADLOCK_THREAD
Thread
CurrentSpinNode
CurrentOtherNode
ListEntry
FreeListEntry
NodeCount
PagingCount
PagingCount

_VI_DEADLOCK_NODE
Parent
ChildrenList
SiblingsList
ResourceList
FreeListEntry
Root
ThreadEntry
Active
OnlyTryAcquireUsed
ReleasedOutOfOrder
SequenceNumber
StackTrace
ParentStackTrace
_SECURITY_QUALITY_OF_SERVICE
Length
ImpersonationLevel
ContextTrackingMode
EffectiveOnly


_CONTEXT
P1Home
P2Home
P3Home
P4Home
P5Home
P6Home
ContextFlags
MxCsr
SegCs
SegDs
SegEs
SegFs
SegGs
SegSs
EFlags
Dr0
Dr1
Dr2
Dr3
Dr6
Dr7
Rax
Rcx
Rdx
Rbx
Rsp
Rbp
Rsi
Rdi
R8
R9
R10
R11
R12
R13
R14
R15
Rip
FltSave
Header
Legacy
Xmm0
Xmm1
Xmm2
Xmm3
Xmm4
Xmm5
Xmm6
Xmm7
Xmm8
Xmm9
Xmm10
Xmm11
Xmm12
Xmm13
Xmm14
Xmm15
VectorRegister
VectorControl
DebugControl
LastBranchToRip
LastBranchFromRip
LastExceptionToRip
LastExceptionFromRip
_MMPTE_HARDWARE_LARGEPAGE
Valid
Write
Owner
WriteThrough
CacheDisable
Accessed
Dirty
LargePage
Global
CopyOnWrite
Prototype
reserved0
PAT
reserved1
PageFrameNumber
reserved2
_DBGKD_QUERY_SPECIAL_CALLS
NumberOfSpecialCalls
CMP_OFFSET_ARRAY
FileOffset
DataBuffer
DataLength
_PCI_PDO_EXTENSION
Next
ExtensionType
IrpDispatchTable
DeviceState
TentativeNextState
SecondaryExtLock
Slot
PhysicalDeviceObject
ParentFdoExtension
SecondaryExtension
BusInterfaceReferenceCount
AgpInterfaceReferenceCount
VendorId
DeviceId
SubsystemVendorId
SubsystemId
RevisionId
ProgIf
SubClass
BaseClass
AdditionalResourceCount
AdjustedInterruptLine
InterruptPin
RawInterruptLine
CapabilitiesPtr
SavedLatencyTimer
SavedCacheLineSize
HeaderType
NotPresent
ReportedMissing
ExpectedWritebackFailure
NoTouchPmeEnable
LegacyDriver
UpdateHardware
MovedDevice
DisablePowerDown
NeedsHotPlugConfiguration
IDEInNativeMode
BIOSAllowsIDESwitchToNativeMode
IoSpaceUnderNativeIdeControl
OnDebugPath
IoSpaceNotRequired
PowerState
Dependent
HackFlags
Resources
BridgeFdoExtension
NextBridge
NextHashEntry
Lock
PowerCapabilities
TargetAgpCapabilityId
CommandEnables
InitialCommand
InitialCommand
PCI_SIGNATURE
PciPdoExtensionType
PciFdoExtensionType
PciArb_Io
PciArb_Memory
PciArb_Interrupt
PciArb_BusNumber
PciTrans_Interrupt
PciInterface_BusHandler
PciInterface_IntRouteHandler
PciInterface_PciCb
PciInterface_LegacyDeviceDetection
PciInterface_PmeHandler
PciInterface_DevicePresent
PciInterface_NativeIde
PciInterface_Location
PciInterface_AgpTarget
_PCI_MJ_DISPATCH_TABLE
PnpIrpMaximumMinorFunction
PnpIrpDispatchTable
PowerIrpMaximumMinorFunction
PowerIrpDispatchTable
SystemControlIrpDispatchStyle
SystemControlIrpDispatchFunction
OtherIrpDispatchStyle
OtherIrpDispatchFunction
OtherIrpDispatchFunction
_PCI_SLOT_NUMBER
u
_PCI_FDO_EXTENSION
List
ExtensionType
IrpDispatchTable
DeviceState
TentativeNextState
SecondaryExtLock
PhysicalDeviceObject
FunctionalDeviceObject
AttachedDeviceObject
ChildListLock
ChildPdoList
BusRootFdoExtension
ParentFdoExtension
ChildBridgePdoList
PciBusInterface
MaxSubordinateBus
BusHandler
BaseBus
Fake
ChildDelete
Scanned
ArbitersInitialized
BrokenVideoHackApplied
Hibernated
PowerState
SecondaryExtension
ChildWaitWakeCount
PreservedConfig
Lock
HotPlugParameters
BusHackFlags
BusHackFlags
PCI_POWER_STATE
CurrentSystemState
CurrentDeviceState
SystemWakeLevel
DeviceWakeLevel
SystemStateMapping
WaitWakeIrp
SavedCancelRoutine
Paging
Hibernate
CrashDump
PCI_HEADER_TYPE_DEPENDENT
type0
type1
type2
PCI_FUNCTION_RESOURCES
Limit
Current
Current
_PCI_LOCK
Atom
OldIrql
_PCI_PMC
Version
PMEClock
Rsvd1
DeviceSpecificInitialization
Rsvd2
Support
_PCI_PDO_EXTENSION
Next
ExtensionType
IrpDispatchTable
DeviceState
TentativeNextState
SecondaryExtLock
Slot
PhysicalDeviceObject
ParentFdoExtension
SecondaryExtension
BusInterfaceReferenceCount
AgpInterfaceReferenceCount
VendorId
DeviceId
SubsystemVendorId
SubsystemId
RevisionId
ProgIf
SubClass
BaseClass
AdditionalResourceCount
AdjustedInterruptLine
InterruptPin
RawInterruptLine
CapabilitiesPtr
SavedLatencyTimer
SavedCacheLineSize
HeaderType
NotPresent
ReportedMissing
ExpectedWritebackFailure
NoTouchPmeEnable
LegacyDriver
UpdateHardware
MovedDevice
DisablePowerDown
NeedsHotPlugConfiguration
IDEInNativeMode
BIOSAllowsIDESwitchToNativeMode
IoSpaceUnderNativeIdeControl
OnDebugPath
IoSpaceNotRequired
PowerState
Dependent
HackFlags
Resources
BridgeFdoExtension
NextBridge
NextHashEntry
Lock
PowerCapabilities
TargetAgpCapabilityId
CommandEnables
InitialCommand
_HMAP_DIRECTORY
Directory
Directory

_HMAP_DIRECTORY
Directory
_NT_TIB32
ExceptionList
StackBase
StackLimit
SubSystemTib
FiberData
Version
ArbitraryUserPointer
Self
_SECURITY_DESCRIPTOR
Revision
Sbz1
Control
Owner
Group
Sacl
Dacl
_SECURITY_DESCRIPTOR
Revision
Sbz1
Control
Owner
Group
Sacl
Dacl
_RTLP_RANGE_LIST_ENTRY
Start
End
Allocated
Merged
Attributes
PublicFlags
PrivateFlags
ListEntry
<unnamed-tag>
UserData
Owner
<unnamed-tag>
ListHead
_RTLP_RANGE_LIST_ENTRY
Start
End
Allocated
Merged
Attributes
PublicFlags
PrivateFlags
ListEntry

_KAPC_STATE
ApcListHead
Process
KernelApcInProgress
KernelApcPending
UserApcPending
_HEAP_STOP_ON_VALUES
AllocAddress
AllocTag
ReAllocAddress
ReAllocTag
FreeAddress
FreeTag
_HEAP_STOP_ON_TAG
HeapAndTagIndex
TagIndex
HeapIndex
_HEAP_STOP_ON_VALUES
AllocAddress
AllocTag
ReAllocAddress
ReAllocTag
FreeAddress
FreeTag

_DEVICE_RELATIONS
Count
Objects
_MODE
KernelMode
UserMode
MaximumMode

_DEVICE_MAP
DosDevicesDirectory
GlobalDosDevicesDirectory
ReferenceCount
DriveMap
DriveType
_HEAP_PSEUDO_TAG_ENTRY
Allocs
Frees
Size
_IO_RESOURCE_DESCRIPTOR
Option
Type
ShareDisposition
Spare1
Flags
Spare2
u

_IO_RESOURCE_LIST
Version
Revision
Count
Descriptors
Descriptors
Descriptors
Descriptors
Descriptors
Descriptors

_MMBANKED_SECTION
BasePhysicalPage
BasedPte
BankSize
BankShift
BankedRoutine
Context
CurrentMappedPte
BankTemplate
_RTL_CRITICAL_SECTION_DEBUG
Type
CreatorBackTraceIndex
CriticalSection
ProcessLocksList
EntryCount
ContentionCount
Spare
Spare
_RTL_CRITICAL_SECTION
DebugInfo
LockCount
RecursionCount
OwningThread
LockSemaphore
SpinCount
_KTSS64
Reserved0
Rsp0
Rsp1
Rsp2
Ist
Reserved1
Reserved2
IoMapBase

_KTRAP_FRAME
P1Home
P2Home
P3Home
P4Home
P5
PreviousMode
PreviousIrql
FaultIndicator
ExceptionActive
MxCsr
Rax
Rcx
Rdx
R8
R9
R10
R11
GsBase
GsSwap
Xmm0
Xmm1
Xmm2
Xmm3
Xmm4
Xmm5
FaultAddress
ContextRecord
TimeStamp
Dr0
Dr1
Dr2
Dr3
Dr6
Dr7
DebugControl
LastBranchToRip
LastBranchFromRip
LastExceptionToRip
LastExceptionFromRip
LastBranchControl
LastBranchMSR
SegDs
SegEs
SegFs
SegGs
TrapFrame
Rbx
Rdi
Rsi
Rbp
ErrorCode
ExceptionFrame
Rip
SegCs
Fill1
EFlags
Fill2
Rsp
SegSs
Fill3
CodePatchCycle
_PCI_BUS_INTERFACE_STANDARD
Size
Version
Context
InterfaceReference
InterfaceDereference
ReadConfig
WriteConfig
PinToLine
LineToPin
LineToPin
_BUS_HANDLER
Version
InterfaceType
ConfigurationType
BusNumber
DeviceObject
ParentHandler
BusData
DeviceControlExtensionSize
BusAddresses
Reserved
GetBusData
SetBusData
AdjustResourceList
AssignSlotResources
GetInterruptVector
TranslateBusAddress
Spare1
Spare2
Spare3
Spare4
Spare5
Spare6
Spare7
Spare8
Spare8
_PCI_COMMON_CONFIG
VendorID
DeviceID
Command
Status
RevisionID
ProgIf
SubClass
BaseClass
CacheLineSize
LatencyTimer
HeaderType
BIST
u
DeviceSpecific
DeviceSpecific
<unnamed-tag>
Acquired
CacheLineSize
LatencyTimer
EnablePERR
EnableSERR
_PCI_FDO_EXTENSION
List
ExtensionType
IrpDispatchTable
DeviceState
TentativeNextState
SecondaryExtLock
PhysicalDeviceObject
FunctionalDeviceObject
AttachedDeviceObject
ChildListLock
ChildPdoList
BusRootFdoExtension
ParentFdoExtension
ChildBridgePdoList
PciBusInterface
MaxSubordinateBus
BusHandler
BaseBus
Fake
ChildDelete
Scanned
ArbitersInitialized
BrokenVideoHackApplied
Hibernated
PowerState
SecondaryExtension
ChildWaitWakeCount
PreservedConfig
Lock
HotPlugParameters
BusHackFlags
<unnamed-tag>
Start
Length
<unnamed-tag>
Level
Vector
Affinity
<unnamed-tag>
Channel
Port
Reserved1
<unnamed-tag>
Data
<unnamed-tag>
Start
Length
Reserved
<unnamed-tag>
DataSize
Reserved1
Reserved2
<unnamed-tag>
Generic
Port
Interrupt
Memory
Dma
DevicePrivate
BusNumber
DeviceSpecificData
_CM_PARTIAL_RESOURCE_DESCRIPTOR
Type
ShareDisposition
Flags
u
_KDEVICE_QUEUE_ENTRY
DeviceListEntry
SortKey
Inserted
_IO_ALLOCATION_ACTION
KeepObject
DeallocateObject
DeallocateObjectKeepRegisters
DeallocateObjectKeepRegisters
DeallocateObjectKeepRegisters
DeallocateObjectKeepRegisters
DeallocateObjectKeepRegisters
DeallocateObjectKeepRegisters
DeallocateObjectKeepRegisters
_WAIT_CONTEXT_BLOCK
WaitQueueEntry
DeviceRoutine
DeviceContext
NumberOfMapRegisters
DeviceObject
CurrentIrp
BufferChainingDpc
_KREQUEST_PACKET
CurrentPacket
WorkerRoutine

_REQUEST_MAILBOX
RequestSummary
RequestPacket
Virtual

_CM_KEY_HASH
ConvKey
NextHash
KeyHive
KeyCell
KeyCell
_CM_NAME_CONTROL_BLOCK
Compressed
RefCount
NameHash
ConvKey
NextHash
NameLength
Name
Name
_CM_KEY_SECURITY_CACHE
Cell
ConvKey
List
DescriptorLength
Descriptor
Descriptor
_CACHED_CHILD_LIST
Count
ValueList
RealKcb
_CM_INDEX_HINT_BLOCK
Count
HashKey
HashKey
_CM_KEY_BODY
Type
KeyControlBlock
NotifyBlock
ProcessID
KeyBodyList
KeyBodyList

_CM_KEY_CONTROL_BLOCK
RefCount
Flags
ExtFlags
PrivateAlloc
Delete
DelayedCloseIndex
TotalLevels
KeyHash
ConvKey
NextHash
KeyHive
KeyCell
ParentKcb
NameBlock
CachedSecurity
ValueCache
IndexHint
HashKey
SubKeyCount
KeyBodyListHead
FreeListEntry
KeyBodyArray
DelayCloseEntry
KcbLastWriteTime
KcbMaxNameLen
KcbMaxValueNameLen
KcbMaxValueDataLen
RealKeyName
_M128A
Low
High
High
High
High
High
High
High
High
High
High
High
High
High
High
High
High
High
High
_PCI_BUS_INTERFACE_STANDARD
Size
Version
Context
InterfaceReference
InterfaceDereference
ReadConfig
WriteConfig
PinToLine
LineToPin
_WORK_QUEUE_ITEM
List
WorkerRoutine
Parameter
_PI_RESOURCE_ARBITER_ENTRY
DeviceArbiterList
ResourceType
ArbiterInterface
Level
ResourceList
BestResourceList
BestConfig
ActiveArbiterList
State
ResourcesChanged
_ARBITER_INTERFACE
Size
Version
Context
InterfaceReference
InterfaceDereference
ArbiterHandler
Flags
Flags
_PI_RESOURCE_ARBITER_ENTRY
DeviceArbiterList
ResourceType
ArbiterInterface
Level
ResourceList
BestResourceList
BestConfig
ActiveArbiterList
State
ResourcesChanged
_INTERLOCKED_RESULT
ResultNegative
ResultZero
ResultPositive
_KTIMER
Header
DueTime
TimerListEntry
Dpc
Period
_SEP_AUDIT_POLICY_CATEGORIES
System
Logon
ObjectAccess
PrivilegeUse
DetailedTracking
PolicyChange
AccountManagement
DirectoryServiceAccess
AccountLogon
_CM_KEY_HASH
ConvKey
NextHash
KeyHive
KeyCell
<unnamed-tag>
MasterIrp
IrpCount
SystemBuffer
SystemBuffer
SystemBuffer
SystemBuffer
SystemBuffer
SystemBuffer
<unnamed-tag>
UserApcRoutine
UserApcContext
<unnamed-tag>
AsynchronousParameters
AllocationSize
AllocationSize
AllocationSize
AllocationSize
AllocationSize

_IO_STACK_LOCATION
MajorFunction
MinorFunction
Flags
Control
Parameters
DeviceObject
FileObject
CompletionRoutine
Context
Context
<unnamed-tag>
DeviceQueueEntry
DriverContext
Thread
AuxiliaryBuffer
ListEntry
CurrentStackLocation
PacketType
OriginalFileObject
<unnamed-tag>
Overlay
Apc
CompletionKey
_IRP
Type
Size
MdlAddress
Flags
AssociatedIrp
ThreadListEntry
IoStatus
RequestorMode
PendingReturned
StackCount
CurrentLocation
Cancel
CancelIrql
ApcEnvironment
AllocationFlags
UserIosb
UserEvent
Overlay
CancelRoutine
UserBuffer
Tail
_PCI_LOCK
Atom
OldIrql
_CM_KEY_SECURITY_CACHE_ENTRY
Cell
CachedSecurity
_KOBJECTS
EventNotificationObject
EventSynchronizationObject
MutantObject
ProcessObject
QueueObject
SemaphoreObject
ThreadObject
GateObject
TimerNotificationObject
TimerSynchronizationObject
Spare2Object
Spare3Object
Spare4Object
Spare5Object
Spare6Object
Spare7Object
Spare8Object
Spare9Object
ApcObject
DpcObject
DeviceQueueObject
EventPairObject
InterruptObject
ProfileObject
ThreadedDpcObject
MaximumKernelObject
_GDI_TEB_BATCH32
Offset
HDC
Buffer
_IMAGE_SECTION_HEADER
Name
Misc
VirtualAddress
SizeOfRawData
PointerToRawData
PointerToRelocations
PointerToLinenumbers
NumberOfRelocations
NumberOfLinenumbers
Characteristics

<unnamed-tag>
PhysicalAddress
VirtualSize
_IMAGE_SECTION_HEADER
Name
Misc
VirtualAddress
SizeOfRawData
PointerToRawData
PointerToRelocations
PointerToLinenumbers
NumberOfRelocations
NumberOfLinenumbers
Characteristics
POP_POLICY_DEVICE_TYPE
PolicyDeviceSystemButton
PolicyDeviceThermalZone
PolicyDeviceBattery
PolicyInitiatePowerActionAPI
PolicySetPowerStateAPI
PolicyImmediateDozeS4
PolicySystemIdle
<unnamed-tag>
Level
_POP_TRIGGER_WAIT
Event
Status
Link
Trigger
Trigger
_POP_ACTION_TRIGGER
Type
Flags
Spare
Battery
Wait
_ETIMER
KeTimer
TimerApc
TimerDpc
ActiveTimerListEntry
Lock
Period
ApcAssociated
WakeTimer
WakeTimerListEntry
_ETIMER
KeTimer
TimerApc
TimerDpc
ActiveTimerListEntry
Lock
Period
ApcAssociated
WakeTimer
WakeTimerListEntry
_POLICY_AUDIT_EVENT_TYPE
AuditCategorySystem
AuditCategoryLogon
AuditCategoryObjectAccess
AuditCategoryPrivilegeUse
AuditCategoryDetailedTracking
AuditCategoryPolicyChange
AuditCategoryAccountManagement
AuditCategoryDirectoryServiceAccess
AuditCategoryAccountLogon
_DBGKD_BREAKPOINTEX
BreakPointCount
ContinueStatus
_IMAGE_DATA_DIRECTORY
VirtualAddress
Size

_IMAGE_OPTIONAL_HEADER64
Magic
MajorLinkerVersion
MinorLinkerVersion
SizeOfCode
SizeOfInitializedData
SizeOfUninitializedData
AddressOfEntryPoint
BaseOfCode
ImageBase
SectionAlignment
FileAlignment
MajorOperatingSystemVersion
MinorOperatingSystemVersion
MajorImageVersion
MinorImageVersion
MajorSubsystemVersion
MinorSubsystemVersion
Win32VersionValue
SizeOfImage
SizeOfHeaders
CheckSum
Subsystem
DllCharacteristics
SizeOfStackReserve
SizeOfStackCommit
SizeOfHeapReserve
SizeOfHeapCommit
LoaderFlags
NumberOfRvaAndSizes
DataDirectory
_KIDTENTRY64
OffsetLow
Selector
IstIndex
Reserved0
Type
Dpl
Present
OffsetMiddle
OffsetHigh
Reserved1
Alignment
_CM_CELL_REMAP_BLOCK
OldCell
NewCell
_PM_SUPPORT
Rsvd2
D1
D2
PMED0
PMED1
PMED2
PMED3Hot
PMED3Cold
_PCI_PMC
Version
PMEClock
Rsvd1
DeviceSpecificInitialization
Rsvd2
Support
_DBGKD_CONTINUE
ContinueStatus
_MMWSLENTRY
Valid
LockedInWs
LockedInMemory
Protection
Hashed
Direct
Age
VirtualPageNumber
<unnamed-tag>
VirtualAddress
Long
e1
_MMWSLE
u1
_EXCEPTION_POINTERS
ExceptionRecord
ContextRecord
_EXCEPTION_POINTERS
ExceptionRecord
ContextRecord
_KQUEUE
Header
EntryListHead
CurrentCount
MaximumCount
ThreadListHead
ThreadListHead
<unnamed-tag>
Balance
Parent
_MMADDRESS_NODE
u1
LeftChild
RightChild
StartingVpn
EndingVpn
_CURDIR
DosPath
Handle
_RTL_DRIVE_LETTER_CURDIR
Flags
Length
TimeStamp
DosPath

_RTL_USER_PROCESS_PARAMETERS
MaximumLength
Length
Flags
DebugFlags
ConsoleHandle
ConsoleFlags
StandardInput
StandardOutput
StandardError
CurrentDirectory
DllPath
ImagePathName
CommandLine
Environment
StartingX
StartingY
CountX
CountY
CountCharsX
CountCharsY
FillAttribute
WindowFlags
ShowWindowFlags
WindowTitle
DesktopInfo
ShellInfo
RuntimeData
CurrentDirectores
CurrentDirectores
CurrentDirectores
CurrentDirectores
CurrentDirectores
_CACHE_MANAGER_CALLBACKS
AcquireForLazyWrite
ReleaseFromLazyWrite
AcquireForReadAhead
ReleaseFromReadAhead
_KDESCRIPTOR
Pad
Limit
Base
_KSPECIAL_REGISTERS
Cr0
Cr2
Cr3
Cr4
KernelDr0
KernelDr1
KernelDr2
KernelDr3
KernelDr6
KernelDr7
Gdtr
Idtr
Tr
Ldtr
MxCsr
DebugControl
LastBranchToRip
LastBranchFromRip
LastExceptionToRip
LastExceptionFromRip
Cr8
MsrGsBase
MsrGsSwap
MsrStar
MsrLStar
MsrCStar
MsrSyscallMask
_u
KeyNode
KeyValue
KeySecurity
KeyIndex
ValueData
KeyList
KeyString
_CELL_DATA
u
_SE_AUDIT_PROCESS_CREATION_INFO
ImageFileName
_HEAP_ENTRY_EXTRA
AllocatorBackTraceIndex
TagIndex
Settable
ZeroInit
ZeroInit1
_VI_DEADLOCK_RESOURCE_TYPE
VfDeadlockUnknown
VfDeadlockMutex
VfDeadlockMutexAbandoned
VfDeadlockFastMutex
VfDeadlockFastMutexUnsafe
VfDeadlockSpinLock
VfDeadlockQueuedSpinLock
VfDeadlockTypeMaximum
_VI_DEADLOCK_RESOURCE
Type
NodeCount
RecursionCount
ResourceAddress
ThreadOwner
ResourceList
HashChainList
FreeListEntry
StackTrace
LastAcquireTrace
LastReleaseTrace

_OBJECT_HANDLE_COUNT_ENTRY
Process
HandleCount
_CLIENT_ID
UniqueProcess
UniqueThread
_PEB_FREE_BLOCK
Next
Size
_PO_DEVICE_NOTIFY
Link
TargetDevice
WakeNeeded
OrderLevel
DeviceObject
Node
DeviceName
DriverName
ChildCount
ActiveChild
_MMPFNLIST
Total
ListName
Flink
Blink
_MMPFNLIST
Total
ListName
Flink
Blink
<unnamed-tag>
Spare
<unnamed-tag>
PrimaryBus
SecondaryBus
SubordinateBus
SubtractiveDecode
IsaBitSet
VgaBitSet
WeChangedBusNumbers
IsaBitRequired
PCI_HEADER_TYPE_DEPENDENT
type0
type1
type2
_DBGKD_GET_SET_BUS_DATA
BusDataType
BusNumber
SlotNumber
Offset
Length
_KINTERRUPT
Type
Size
InterruptListEntry
ServiceRoutine
ServiceContext
SpinLock
TickCount
ActualLock
DispatchAddress
Vector
Irql
SynchronizeIrql
FloatingSave
Connected
Number
ShareVector
Mode
ServiceCount
DispatchCount
TrapFrame
Reserved
DispatchCode
DispatchCode
DispatchCode
DispatchCode
DispatchCode
DispatchCode
_KINTERRUPT_MODE
LevelSensitive
Latched
_KINTERRUPT
Type
Size
InterruptListEntry
ServiceRoutine
ServiceContext
SpinLock
TickCount
ActualLock
DispatchAddress
Vector
Irql
SynchronizeIrql
FloatingSave
Connected
Number
ShareVector
Mode
ServiceCount
DispatchCount
TrapFrame
Reserved
DispatchCode

_BITMAP_RANGE
Links
BasePage
FirstDirtyPage
LastDirtyPage
DirtyPages
Bitmap
_PCI_ARBITER_INSTANCE
Header
Interface
BusFdoExtension
InstanceName
CommonInstance
PCI_SECONDARY_EXTENSION
List
ExtensionType
Destructor
_PCI_INTERFACE
InterfaceType
MinSize
MinVersion
MaxVersion
Flags
ReferenceCount
Signature
Constructor
Initializer
Initializer
_ARBITER_INSTANCE
Signature
MutexEvent
Name
ResourceType
Allocation
PossibleAllocation
OrderingList
ReservedList
ReferenceCount
Interface
AllocationStackMaxSize
AllocationStack
UnpackRequirement
PackResource
UnpackResource
ScoreRequirement
TestAllocation
RetestAllocation
CommitAllocation
RollbackAllocation
BootAllocation
QueryArbitrate
QueryConflict
AddReserved
StartArbiter
PreprocessEntry
AllocateEntry
GetNextAllocationRange
FindSuitableRange
AddAllocation
BacktrackAllocation
OverrideConflict
TransactionInProgress
Extension
BusDeviceObject
ConflictCallbackContext
ConflictCallback
_PCI_ARBITER_INSTANCE
Header
Interface
BusFdoExtension
InstanceName
CommonInstance
_NT_TIB64
ExceptionList
StackBase
StackLimit
SubSystemTib
FiberData
Version
ArbitraryUserPointer
Self


_HANDLE_TRACE_DB_ENTRY
ClientId
Handle
Type
StackTrace
_BUS_EXTENSION_LIST
Next
BusExtension
_PI_BUS_EXTENSION
Flags
NumberCSNs
ReadDataPort
DataPortMapped
AddressPort
AddrPortMapped
CommandPort
CmdPortMapped
NextSlotNumber
DeviceList
CardList
PhysicalBusDevice
FunctionalBusDevice
AttachedDevice
BusNumber
SystemPowerState
DevicePowerState
DevicePowerState
_BUS_EXTENSION_LIST
Next
BusExtension
_PCI_MN_DISPATCH_TABLE
DispatchStyle
DispatchFunction
DispatchFunction
_PCI_DISPATCH_STYLE
IRP_COMPLETE
IRP_DOWNWARD
IRP_UPWARD
IRP_DISPATCH
_PCI_COMMON_EXTENSION
Next
ExtensionType
IrpDispatchTable
DeviceState
TentativeNextState
SecondaryExtLock
SecondaryExtLock
SecondaryExtLock
SecondaryExtLock
SecondaryExtLock
SecondaryExtLock
SecondaryExtLock
_PCI_MJ_DISPATCH_TABLE
PnpIrpMaximumMinorFunction
PnpIrpDispatchTable
PowerIrpMaximumMinorFunction
PowerIrpDispatchTable
SystemControlIrpDispatchStyle
SystemControlIrpDispatchFunction
OtherIrpDispatchStyle
OtherIrpDispatchFunction
ReplacesCorHdrNumericDefines
COMIMAGE_FLAGS_ILONLY
COMIMAGE_FLAGS_32BITREQUIRED
COMIMAGE_FLAGS_IL_LIBRARY
COMIMAGE_FLAGS_STRONGNAMESIGNED
COMIMAGE_FLAGS_TRACKDEBUGDATA
COR_VERSION_MAJOR_V2
COR_VERSION_MAJOR
COR_VERSION_MINOR
COR_DELETED_NAME_LENGTH
COR_VTABLEGAP_NAME_LENGTH
NATIVE_TYPE_MAX_CB
COR_ILMETHOD_SECT_SMALL_MAX_DATASIZE
IMAGE_COR_MIH_METHODRVA
IMAGE_COR_MIH_EHRVA
IMAGE_COR_MIH_BASICBLOCK
COR_VTABLE_32BIT
COR_VTABLE_64BIT
COR_VTABLE_FROM_UNMANAGED
COR_VTABLE_CALL_MOST_DERIVED
IMAGE_COR_EATJ_THUNK_SIZE
MAX_CLASS_NAME
MAX_PACKAGE_NAME
MAX_PACKAGE_NAME
_POP_TRIGGER_WAIT
Event
Status
Link
Trigger
_MEMORY_TYPE
MemoryExceptionBlock
MemorySystemBlock
MemoryFree
MemoryBad
MemoryLoadedProgram
MemoryFirmwareTemporary
MemoryFirmwarePermanent
MemoryFreeContiguous
MemorySpecialMemory
MemoryMaximum
MemoryMaximum
MemoryMaximum
MemoryMaximum
MemoryMaximum
_IO_TIMER
Type
TimerFlag
TimerList
TimerRoutine
Context
DeviceObject
_MMWSLENTRY
Valid
LockedInWs
LockedInMemory
Protection
Hashed
Direct
Age
VirtualPageNumber
<unnamed-tag>
BaseMiddle
Flags1
Flags2
BaseHigh
<unnamed-tag>
BaseMiddle
Type
Dpl
Present
LimitHigh
System
LongMode
DefaultBig
Granularity
BaseHigh
_KGDTENTRY64
LimitLow
BaseLow
Bytes
Bits
BaseUpper
MustBeZero
Alignment
_OBJECT_DIRECTORY_ENTRY
ChainLink
Object
HashValue
HashValue

_OBJECT_DIRECTORY
HashBuckets
Lock
DeviceMap
SessionId
_HEAP_LOOKASIDE
ListHead
Depth
MaximumDepth
TotalAllocates
AllocateMisses
TotalFrees
FreeMisses
LastTotalAllocates
LastAllocateMisses
Counters
_HEAP_LOOKASIDE
ListHead
Depth
MaximumDepth
TotalAllocates
AllocateMisses
TotalFrees
FreeMisses
LastTotalAllocates
LastAllocateMisses
Counters
_CLIENT_ID64
UniqueProcess
UniqueThread
_KDPC_DATA
DpcListHead
DpcLock
DpcQueueDepth
DpcCount
_ARBITER_ACTION
ArbiterActionTestAllocation
ArbiterActionRetestAllocation
ArbiterActionCommitAllocation
ArbiterActionRollbackAllocation
ArbiterActionQueryAllocatedResources
ArbiterActionWriteReservedResources
ArbiterActionQueryConflict
ArbiterActionQueryArbitrate
ArbiterActionAddReserved
ArbiterActionBootAllocation
_ARBITER_PARAMETERS
Parameters
Parameters
Parameters
Parameters
Parameters
Parameters
Parameters
_ARBITER_INTERFACE
Size
Version
Context
InterfaceReference
InterfaceDereference
ArbiterHandler
Flags
_AMD64_DBGKD_CONTROL_SET
TraceFlag
Dr7
CurrentSymbolStart
CurrentSymbolEnd
_CALL_PERFORMANCE_DATA
SpinLock
HashTable
_CALL_PERFORMANCE_DATA
SpinLock
HashTable
_MMWSLE_HASH
Key
Index
Index
_MMWSL
FirstFree
FirstDynamic
LastEntry
NextSlot
Wsle
LastInitializedWsle
NonDirectCount
HashTable
HashTableSize
NumberOfCommittedPageTables
HashTableStart
HighestPermittedHashAddress
NumberOfImageWaiters
VadBitMapHint
HighestUserAddress
MaximumUserPageTablePages
MaximumUserPageDirectoryPages
CommittedPageTables
NumberOfCommittedPageDirectories
CommittedPageDirectories
NumberOfCommittedPageDirectoryParents
CommittedPageDirectoryParents
_RTL_ACTIVATION_CONTEXT_STACK_FRAME
Previous
ActivationContext
Flags
Flags
_ACTIVATION_CONTEXT_STACK
ActiveFrame
FrameListCache
Flags
NextCookieSequenceNumber
StackId
_STRING
Length
MaximumLength
Buffer
_RTL_DRIVE_LETTER_CURDIR
Flags
Length
TimeStamp
DosPath


PCI_FUNCTION_RESOURCES
Limit
Current
_KMUTANT
Header
MutantListEntry
OwnerThread
Abandoned
ApcDisable
_KMUTANT
Header
MutantListEntry
OwnerThread
Abandoned
ApcDisable
_SEGMENT_FLAGS
TotalNumberOfPtes4132
ExtraSharedWowSubsections
LargePages
Spare
<unnamed-tag>
ImageCommitment
CreatingProcess
_SECTION_IMAGE_INFORMATION
TransferAddress
ZeroBits
MaximumStackSize
CommittedStackSize
SubSystemType
SubSystemMinorVersion
SubSystemMajorVersion
SubSystemVersion
GpValue
ImageCharacteristics
DllCharacteristics
Machine
ImageContainsCode
Spare1
LoaderFlags
ImageFileSize
Reserved
Reserved
<unnamed-tag>
ImageInformation
FirstMappedVa
_SEGMENT
ControlArea
TotalNumberOfPtes
NonExtendedPtes
Spare0
SizeOfSegment
SegmentPteTemplate
NumberOfCommittedPages
ExtendInfo
SegmentFlags
BasedAddress
u1
u2
PrototypePte
ThePtes
_PCI_COMMON_EXTENSION
Next
ExtensionType
IrpDispatchTable
DeviceState
TentativeNextState
SecondaryExtLock
_MI_VERIFIER_DRIVER_ENTRY
Links
Loads
Unloads
BaseName
StartAddress
EndAddress
Flags
Signature
PoolPageHeaders
PoolTrackers
CurrentPagedPoolAllocations
CurrentNonPagedPoolAllocations
PeakPagedPoolAllocations
PeakNonPagedPoolAllocations
PagedBytes
NonPagedBytes
PeakPagedBytes
PeakNonPagedBytes
_MI_VERIFIER_DRIVER_ENTRY
Links
Loads
Unloads
BaseName
StartAddress
EndAddress
Flags
Signature
PoolPageHeaders
PoolTrackers
CurrentPagedPoolAllocations
CurrentNonPagedPoolAllocations
PeakPagedPoolAllocations
PeakNonPagedPoolAllocations
PagedBytes
NonPagedBytes
PeakPagedBytes
PeakNonPagedBytes
_PRIVATE_CACHE_MAP_FLAGS
DontUse
ReadAheadActive
ReadAheadEnabled
Available

_PRIVATE_CACHE_MAP
NodeTypeCode
Flags
UlongFlags
ReadAheadMask
FileObject
FileOffset1
BeyondLastByte1
FileOffset2
BeyondLastByte2
ReadAheadOffset
ReadAheadLength
ReadAheadSpinLock
PrivateLinks
_RTL_HANDLE_TABLE_ENTRY
Flags
NextFree
NextFree
_RTL_HANDLE_TABLE
MaximumNumberOfHandles
SizeOfHandleTableEntry
Reserved
FreeHandles
CommittedHandles
UnCommittedHandles
MaxReservedHandles
_POP_IDLE_HANDLER
Latency
TimeCheck
DemoteLimit
PromoteLimit
PromoteCount
Demote
Promote
PromotePercent
DemotePercent
State
Spare
IdleFunction
IdleFunction
IdleFunction
IdleFunction
IdleFunction
_POP_IDLE_HANDLER
Latency
TimeCheck
DemoteLimit
PromoteLimit
PromoteCount
Demote
Promote
PromotePercent
DemotePercent
State
Spare
IdleFunction
SYSTEM_POWER_CAPABILITIES
PowerButtonPresent
SleepButtonPresent
LidPresent
SystemS1
SystemS2
SystemS3
SystemS4
SystemS5
HiberFilePresent
FullWake
VideoDimPresent
ApmPresent
UpsPresent
ThermalControl
ProcessorThrottle
ProcessorMinThrottle
ProcessorMaxThrottle
spare2
DiskSpinDown
spare3
SystemBatteriesPresent
BatteriesAreShortTerm
BatteryScale
AcOnLineWake
SoftLidWake
RtcWake
MinDeviceWakeState
DefaultLowLatencyWake
BATTERY_REPORTING_SCALE
Granularity
Capacity

SYSTEM_POWER_CAPABILITIES
PowerButtonPresent
SleepButtonPresent
LidPresent
SystemS1
SystemS2
SystemS3
SystemS4
SystemS5
HiberFilePresent
FullWake
VideoDimPresent
ApmPresent
UpsPresent
ThermalControl
ProcessorThrottle
ProcessorMinThrottle
ProcessorMaxThrottle
spare2
DiskSpinDown
spare3
SystemBatteriesPresent
BatteriesAreShortTerm
BatteryScale
AcOnLineWake
SoftLidWake
RtcWake
MinDeviceWakeState
DefaultLowLatencyWake
DefaultLowLatencyWake
_DEVOBJ_EXTENSION
Type
Size
DeviceObject
PowerFlags
Dope
ExtensionFlags
DeviceNode
AttachedTo
StartIoCount
StartIoKey
StartIoFlags
Vpb
_DBGKD_GET_VERSION64
MajorVersion
MinorVersion
ProtocolVersion
KdSecondaryVersion
Flags
MachineType
MaxPacketType
MaxStateChange
MaxManipulate
Simulation
Unused
KernBase
PsLoadedModuleList
DebuggerDataList
_STRING32
Length
MaximumLength
Buffer
_MMVIEW
Entry
ControlArea
_KSYSTEM_TIME
LowPart
High1Time
High2Time
PCI_SECONDARY_EXTENSION
List
ExtensionType
Destructor
_PCI_HEADER_TYPE_0
BaseAddresses
CIS
SubVendorID
SubSystemID
ROMBaseAddress
CapabilitiesPtr
Reserved1
Reserved2
InterruptLine
InterruptPin
MinimumGrant
MaximumLatency
_PCI_HEADER_TYPE_1
BaseAddresses
PrimaryBus
SecondaryBus
SubordinateBus
SecondaryLatency
IOBase
IOLimit
SecondaryStatus
MemoryBase
MemoryLimit
PrefetchBase
PrefetchLimit
PrefetchBaseUpper32
PrefetchLimitUpper32
IOBaseUpper16
IOLimitUpper16
CapabilitiesPtr
Reserved1
ROMBaseAddress
InterruptLine
InterruptPin
BridgeControl
_PCI_HEADER_TYPE_2
SocketRegistersBaseAddress
CapabilitiesPtr
Reserved
SecondaryStatus
PrimaryBus
SecondaryBus
SubordinateBus
SecondaryLatency
Range
InterruptLine
InterruptPin
BridgeControl
<unnamed-tag>
type0
type1
type2

_PCI_COMMON_CONFIG
VendorID
DeviceID
Command
Status
RevisionID
ProgIf
SubClass
BaseClass
CacheLineSize
LatencyTimer
HeaderType
BIST
u
DeviceSpecific
_HEAP_FREE_ENTRY_EXTRA
TagIndex
FreeBackTraceIndex
_HEAP_FREE_ENTRY_EXTRA
TagIndex
FreeBackTraceIndex
_SECTION_IMAGE_INFORMATION
TransferAddress
ZeroBits
MaximumStackSize
CommittedStackSize
SubSystemType
SubSystemMinorVersion
SubSystemMajorVersion
SubSystemVersion
GpValue
ImageCharacteristics
DllCharacteristics
Machine
ImageContainsCode
Spare1
LoaderFlags
ImageFileSize
Reserved
_POOL_TRACKER_TABLE
Key
NonPagedAllocs
NonPagedFrees
NonPagedBytes
PagedAllocs
PagedFrees
PagedBytes
_POOL_TRACKER_TABLE
Key
NonPagedAllocs
NonPagedFrees
NonPagedBytes
PagedAllocs
PagedFrees
PagedBytes
_PS_QUOTA_TYPE
PsNonPagedPool
PsPagedPool
PsPageFile
PsQuotaTypes
_flags
Removable
Fill
_KNODE
DeadStackList
PfnDereferenceSListHead
Alignment
ProcessorMask
Color
Seed
NodeNumber
Flags
MmShiftedColor
FreeCount
PfnDeferredList
_PHYSICAL_MEMORY_DESCRIPTOR
NumberOfRuns
NumberOfPages
Run

_PHYSICAL_MEMORY_DESCRIPTOR
NumberOfRuns
NumberOfPages
Run
_SEGMENT_FLAGS
TotalNumberOfPtes4132
ExtraSharedWowSubsections
LargePages
Spare
_PI_BUS_EXTENSION
Flags
NumberCSNs
ReadDataPort
DataPortMapped
AddressPort
AddrPortMapped
CommandPort
CmdPortMapped
NextSlotNumber
DeviceList
CardList
PhysicalBusDevice
FunctionalBusDevice
AttachedDevice
BusNumber
SystemPowerState
DevicePowerState
_CLIENT_ID32
UniqueProcess
UniqueThread
_VI_DEADLOCK_THREAD
Thread
CurrentSpinNode
CurrentOtherNode
ListEntry
FreeListEntry
NodeCount
PagingCount
_MMEXTEND_INFO
CommittedSize
ReferenceCount
_GDI_TEB_BATCH64
Offset
HDC
Buffer
_IMAGE_DEBUG_DIRECTORY
Characteristics
TimeDateStamp
MajorVersion
MinorVersion
Type
SizeOfData
AddressOfRawData
PointerToRawData
_IMAGE_DEBUG_DIRECTORY
Characteristics
TimeDateStamp
MajorVersion
MinorVersion
Type
SizeOfData
AddressOfRawData
PointerToRawData
_GUID
Data1
Data2
Data3
Data4
_GUID
Data1
Data2
Data3
Data4
Data4
_INTERFACE
Size
Version
Context
InterfaceReference
InterfaceDereference
InterfaceDereference
InterfaceDereference
InterfaceDereference
InterfaceDereference
InterfaceDereference
InterfaceDereference
InterfaceDereference
InterfaceDereference
InterfaceDereference
InterfaceDereference
InterfaceDereference
InterfaceDereference
InterfaceDereference
_PCI_INTERFACE
InterfaceType
MinSize
MinVersion
MaxVersion
Flags
ReferenceCount
Signature
Constructor
Initializer
_POP_POWER_ACTION
Updates
State
Shutdown
Action
LightestState
Flags
Status
IrpMinor
SystemState
NextSystemState
ShutdownBugCode
DevState
HiberContext
LastWakeState
WakeTime
SleepTime
POWER_ACTION
PowerActionNone
PowerActionReserved
PowerActionSleep
PowerActionHibernate
PowerActionShutdown
PowerActionShutdownReset
PowerActionShutdownOff
PowerActionWarmEject
_POP_SHUTDOWN_BUG_CHECK
Code
Parameter1
Parameter2
Parameter3
Parameter4
Parameter4
_POP_DEVICE_SYS_STATE
IrpMinor
SystemState
Event
SpinLock
Thread
GetNewDeviceList
Order
Status
FailedDevice
Waking
Cancelled
IgnoreErrors
IgnoreNotImplemented
WaitAny
WaitAll
PresentIrpQueue
Head
PowerIrpState
PowerIrpState
_POP_HIBER_CONTEXT
WriteToFile
ReserveLoaderMemory
ReserveFreeMemory
VerifyOnWake
Reset
HiberFlags
LinkFile
LinkFileHandle
Lock
MapFrozen
MemoryMap
ClonedRanges
ClonedRangeCount
NextCloneRange
NextPreserve
LoaderMdl
Clones
NextClone
NoClones
Spares
PagesOut
IoPage
CurrentMcb
DumpStack
WakeState
NoRanges
HiberVa
HiberPte
Status
MemoryImage
TableHead
CompressionWorkspace
CompressedWriteBuffer
PerformanceStats
CompressionBlock
DmaIO
TemporaryHeap
PerfInfo
PerfInfo
_POP_POWER_ACTION
Updates
State
Shutdown
Action
LightestState
Flags
Status
IrpMinor
SystemState
NextSystemState
ShutdownBugCode
DevState
HiberContext
LastWakeState
WakeTime
SleepTime
_LPCP_MESSAGE
Entry
FreeEntry
Reserved0
SenderPort
RepliedToThread
PortContext
Request
_PORT_MESSAGE
u1
u2
ClientId
DoNotUseThisField
MessageId
ClientViewSize
CallbackId
_LPCP_MESSAGE
Entry
FreeEntry
Reserved0
SenderPort
RepliedToThread
PortContext
Request
_MMVAD_SHORT
u1
LeftChild
RightChild
StartingVpn
EndingVpn
u
_MMVAD_SHORT
u1
LeftChild
RightChild
StartingVpn
EndingVpn
u
_SECURITY_SUBJECT_CONTEXT
ClientToken
ImpersonationLevel
PrimaryToken
ProcessAuditId
_INITIAL_PRIVILEGE_SET
PrivilegeCount
Control
Privilege
_PRIVILEGE_SET
PrivilegeCount
Control
Privilege
<unnamed-tag>
InitialPrivilegeSet
PrivilegeSet
_ACCESS_STATE
OperationID
SecurityEvaluated
GenerateAudit
GenerateOnClose
PrivilegesAllocated
Flags
RemainingDesiredAccess
PreviouslyGrantedAccess
OriginalDesiredAccess
SubjectSecurityContext
SecurityDescriptor
AuxData
Privileges
AuditPrivileges
ObjectName
ObjectTypeName
_PNP_DEVICE_EVENT_ENTRY
ListEntry
Argument
CallerEvent
Callback
Context
VetoType
VetoName
Data
_PNP_VETO_TYPE
PNP_VetoTypeUnknown
PNP_VetoLegacyDevice
PNP_VetoPendingClose
PNP_VetoWindowsApp
PNP_VetoWindowsService
PNP_VetoOutstandingOpen
PNP_VetoDevice
PNP_VetoDriver
PNP_VetoIllegalDeviceRequest
PNP_VetoInsufficientPower
PNP_VetoNonDisableable
PNP_VetoLegacyDriver
PNP_VetoInsufficientRights
PNP_VetoInsufficientRights
_PLUGPLAY_EVENT_BLOCK
EventGuid
EventCategory
Result
Flags
TotalSize
DeviceObject
u
_PNP_DEVICE_EVENT_ENTRY
ListEntry
Argument
CallerEvent
Callback
Context
VetoType
VetoName
Data
_PRIVATE_CACHE_MAP_FLAGS
DontUse
ReadAheadActive
ReadAheadEnabled
Available
_PNP_DEVICE_EVENT_LIST
Status
EventQueueMutex
Lock
List
_PNP_DEVICE_EVENT_LIST
Status
EventQueueMutex
Lock
List
_MMPTE_TRANSITION
Valid
Write
Owner
WriteThrough
CacheDisable
Protection
Prototype
Transition
PageFrameNumber
Unused
Unused
Unused
Unused
Unused
Unused
Unused
_KREQUEST_PACKET
CurrentPacket
WorkerRoutine
_WOW64_SHARED_INFORMATION
SharedNtdll32LdrInitializeThunk
SharedNtdll32KiUserExceptionDispatcher
SharedNtdll32KiUserApcDispatcher
SharedNtdll32KiUserCallbackDispatcher
SharedNtdll32LdrHotPatchRoutine
SharedNtdll32ExpInterlockedPopEntrySListFault
SharedNtdll32ExpInterlockedPopEntrySListResume
SharedNtdll32ExpInterlockedPopEntrySListEnd
SharedNtdll32Reserved2
Wow64SharedPageEntriesCount
_STRING
Length
MaximumLength
Buffer
_flags
Removable
Fill
_SECURITY_DESCRIPTOR_RELATIVE
Revision
Sbz1
Control
Owner
Group
Sacl
Dacl
_CM_KEY_SECURITY_CACHE
Cell
ConvKey
List
DescriptorLength
Descriptor
_PROCESSOR_POWER_POLICY_INFO
TimeCheck
DemoteLimit
PromoteLimit
DemotePercent
PromotePercent
Spare
AllowDemotion
AllowPromotion
Reserved
_REG_NOTIFY_CLASS
RegNtDeleteKey
RegNtPreDeleteKey
RegNtSetValueKey
RegNtPreSetValueKey
RegNtDeleteValueKey
RegNtPreDeleteValueKey
RegNtSetInformationKey
RegNtPreSetInformationKey
RegNtRenameKey
RegNtPreRenameKey
RegNtEnumerateKey
RegNtPreEnumerateKey
RegNtEnumerateValueKey
RegNtPreEnumerateValueKey
RegNtQueryKey
RegNtPreQueryKey
RegNtQueryValueKey
RegNtPreQueryValueKey
RegNtQueryMultipleValueKey
RegNtPreQueryMultipleValueKey
RegNtPreCreateKey
RegNtPostCreateKey
RegNtPreOpenKey
RegNtPostOpenKey
RegNtKeyHandleClose
RegNtPreKeyHandleClose
RegNtPostDeleteKey
RegNtPostSetValueKey
RegNtPostDeleteValueKey
RegNtPostSetInformationKey
RegNtPostRenameKey
RegNtPostEnumerateKey
RegNtPostEnumerateValueKey
RegNtPostQueryKey
RegNtPostQueryValueKey
RegNtPostQueryMultipleValueKey
RegNtPostKeyHandleClose
RegNtPreCreateKeyEx
RegNtPostCreateKeyEx
RegNtPreOpenKeyEx
RegNtPostOpenKeyEx
_GUID
Data1
Data2
Data3
Data4
_RTL_RANGE_LIST
ListHead
Flags
Count
Stamp
Stamp
_ARBITER_ORDERING_LIST
Count
Maximum
Orderings
_ARBITER_ALLOCATION_STATE
Start
End
CurrentMinimum
CurrentMaximum
Entry
CurrentAlternative
AlternativeCount
Alternatives
Flags
RangeAttributes
RangeAvailableAttributes
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
WorkSpace
_ARBITER_CONFLICT_INFO
OwningObject
Start
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
End
_RTL_RANGE
Start
End
UserData
Owner
Attributes
Flags
Flags
Flags
Flags
Flags
Flags
_ARBITER_INSTANCE
Signature
MutexEvent
Name
ResourceType
Allocation
PossibleAllocation
OrderingList
ReservedList
ReferenceCount
Interface
AllocationStackMaxSize
AllocationStack
UnpackRequirement
PackResource
UnpackResource
ScoreRequirement
TestAllocation
RetestAllocation
CommitAllocation
RollbackAllocation
BootAllocation
QueryArbitrate
QueryConflict
AddReserved
StartArbiter
PreprocessEntry
AllocateEntry
GetNextAllocationRange
FindSuitableRange
AddAllocation
BacktrackAllocation
OverrideConflict
TransactionInProgress
Extension
BusDeviceObject
ConflictCallbackContext
ConflictCallback
_BUS_DATA_TYPE
ConfigurationSpaceUndefined
Cmos
EisaConfiguration
Pos
CbusConfiguration
PCIConfiguration
VMEConfiguration
NuBusConfiguration
PCMCIAConfiguration
MPIConfiguration
MPSAConfiguration
PNPISAConfiguration
SgiInternalConfiguration
MaximumBusDataType
_SUPPORTED_RANGES
Version
Sorted
Reserved
NoIO
IO
NoMemory
Memory
NoPrefetchMemory
PrefetchMemory
NoDma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
Dma
_BUS_HANDLER
Version
InterfaceType
ConfigurationType
BusNumber
DeviceObject
ParentHandler
BusData
DeviceControlExtensionSize
BusAddresses
Reserved
GetBusData
SetBusData
AdjustResourceList
AssignSlotResources
GetInterruptVector
TranslateBusAddress
Spare1
Spare2
Spare3
Spare4
Spare5
Spare6
Spare7
Spare8
SYSTEM_POWER_LEVEL
Enable
Spare
BatteryLevel
PowerPolicy
MinSystemState
_PCI_MN_DISPATCH_TABLE
DispatchStyle
DispatchFunction
_PO_DEVICE_NOTIFY_ORDER
DevNodeSequence
WarmEjectPdoPointer
OrderLevel
_POP_DEVICE_POWER_IRP
Free
Irp
Notify
Pending
Complete
Abort
Failed

_POP_DEVICE_SYS_STATE
IrpMinor
SystemState
Event
SpinLock
Thread
GetNewDeviceList
Order
Status
FailedDevice
Waking
Cancelled
IgnoreErrors
IgnoreNotImplemented
WaitAny
WaitAll
PresentIrpQueue
Head
PowerIrpState
_OBJECT_DUMP_CONTROL
Stream
Detail
_SECURITY_SUBJECT_CONTEXT
ClientToken
ImpersonationLevel
PrimaryToken
ProcessAuditId
_HEAP_STOP_ON_TAG
HeapAndTagIndex
TagIndex
HeapIndex
_MMSYSTEM_PTE_POOL_TYPE
SystemPteSpace
NonPagedPoolExpansion
MaximumPtePoolTypes
_MMWSLE_HASH
Key
Index
_CM_NAME_HASH
ConvKey
NextHash
NameLength
Name
_CM_NAME_CONTROL_BLOCK
Compressed
RefCount
NameHash
ConvKey
NextHash
NameLength
Name
_CM_NOTIFY_BLOCK
HiveList
PostList
KeyControlBlock
KeyBody
Filter
WatchTree
NotifyPending
SubjectContext
SubjectContext
_CM_KEY_BODY
Type
KeyControlBlock
NotifyBlock
ProcessID
KeyBodyList
_HANDLE_TABLE_ENTRY
Object
ObAttributes
InfoTable
Value
GrantedAccess
GrantedAccessIndex
CreatorBackTraceIndex
NextFreeTableEntry
_HANDLE_TABLE_ENTRY_INFO
AuditMask
AuditMask
_HANDLE_TABLE_ENTRY
Object
ObAttributes
InfoTable
Value
GrantedAccess
GrantedAccessIndex
CreatorBackTraceIndex
NextFreeTableEntry
_HEAP_USERDATA_HEADER
SFreeListEntry
SubSegment
HeapHandle
SizeIndex
Signature
_LPCP_PORT_OBJECT
ConnectionPort
ConnectedPort
MsgQueue
Creator
ClientSectionBase
ServerSectionBase
PortContext
ClientThread
SecurityQos
StaticSecurity
LpcReplyChainHead
LpcDataInfoChainHead
ServerProcess
MappingProcess
MaxMessageLength
MaxConnectionInfoLength
Flags
WaitEvent
WaitEvent
_LPCP_PORT_QUEUE
NonPagedPortQueue
Semaphore
ReceiveHead
_SECURITY_CLIENT_CONTEXT
SecurityQos
ClientToken
DirectlyAccessClientToken
DirectAccessEffectiveOnly
ServerIsRemote
ClientTokenControl
_LPCP_PORT_OBJECT
ConnectionPort
ConnectedPort
MsgQueue
Creator
ClientSectionBase
ServerSectionBase
PortContext
ClientThread
SecurityQos
StaticSecurity
LpcReplyChainHead
LpcDataInfoChainHead
ServerProcess
MappingProcess
MaxMessageLength
MaxConnectionInfoLength
Flags
WaitEvent

PCI_POWER_STATE
CurrentSystemState
CurrentDeviceState
SystemWakeLevel
DeviceWakeLevel
SystemStateMapping
WaitWakeIrp
SavedCancelRoutine
Paging
Hibernate
CrashDump
_STRING64
Length
MaximumLength
Buffer
_POOL_HACKER
Header
Contents
_POOL_HACKER
Header
Contents
_CM_INDEX_HINT_BLOCK
Count
HashKey
_IO_SECURITY_CONTEXT
SecurityQos
AccessState
DesiredAccess
FullCreateOptions
FullCreateOptions
<unnamed-tag>
SecurityContext
Options
FileAttributes
ShareAccess
EaLength
_NAMED_PIPE_CREATE_PARAMETERS
NamedPipeType
ReadMode
CompletionMode
MaximumInstances
InboundQuota
OutboundQuota
DefaultTimeout
TimeoutSpecified
TimeoutSpecified
<unnamed-tag>
SecurityContext
Options
Reserved
ShareAccess
Parameters
_MAILSLOT_CREATE_PARAMETERS
MailslotQuota
MaximumMessageSize
ReadTimeout
TimeoutSpecified
TimeoutSpecified
<unnamed-tag>
SecurityContext
Options
Reserved
ShareAccess
Parameters
<unnamed-tag>
Length
Key
ByteOffset
_FILE_INFORMATION_CLASS
FileDirectoryInformation
FileFullDirectoryInformation
FileBothDirectoryInformation
FileBasicInformation
FileStandardInformation
FileInternalInformation
FileEaInformation
FileAccessInformation
FileNameInformation
FileRenameInformation
FileLinkInformation
FileNamesInformation
FileDispositionInformation
FilePositionInformation
FileFullEaInformation
FileModeInformation
FileAlignmentInformation
FileAllInformation
FileAllocationInformation
FileEndOfFileInformation
FileAlternateNameInformation
FileStreamInformation
FilePipeInformation
FilePipeLocalInformation
FilePipeRemoteInformation
FileMailslotQueryInformation
FileMailslotSetInformation
FileCompressionInformation
FileObjectIdInformation
FileCompletionInformation
FileMoveClusterInformation
FileQuotaInformation
FileReparsePointInformation
FileNetworkOpenInformation
FileAttributeTagInformation
FileTrackingInformation
FileIdBothDirectoryInformation
FileIdFullDirectoryInformation
FileValidDataLengthInformation
FileShortNameInformation
FileMaximumInformation
<unnamed-tag>
Length
FileName
FileInformationClass
FileIndex
<unnamed-tag>
Length
CompletionFilter
<unnamed-tag>
Length
FileInformationClass
<unnamed-tag>
Length
FileInformationClass
FileObject
ReplaceIfExists
AdvanceOnly
ClusterCount
DeleteHandle
<unnamed-tag>
Length
EaList
EaListLength
EaIndex
<unnamed-tag>
Length
_FSINFOCLASS
FileFsVolumeInformation
FileFsLabelInformation
FileFsSizeInformation
FileFsDeviceInformation
FileFsAttributeInformation
FileFsControlInformation
FileFsFullSizeInformation
FileFsObjectIdInformation
FileFsDriverPathInformation
FileFsMaximumInformation
<unnamed-tag>
Length
FsInformationClass
<unnamed-tag>
OutputBufferLength
InputBufferLength
FsControlCode
Type3InputBuffer
<unnamed-tag>
Length
Key
ByteOffset
<unnamed-tag>
OutputBufferLength
InputBufferLength
IoControlCode
Type3InputBuffer
<unnamed-tag>
SecurityInformation
Length
<unnamed-tag>
SecurityInformation
SecurityDescriptor
<unnamed-tag>
Vpb
DeviceObject
_SCSI_REQUEST_BLOCK
_SCSI_REQUEST_BLOCK
<unnamed-tag>
Srb
_FILE_GET_QUOTA_INFORMATION
NextEntryOffset
SidLength
Sid
Sid
<unnamed-tag>
Length
StartSid
SidList
SidListLength
_DEVICE_RELATION_TYPE
BusRelations
EjectionRelations
PowerRelations
RemovalRelations
TargetDeviceRelation
SingleBusRelations
<unnamed-tag>
Type
<unnamed-tag>
InterfaceType
Size
Version
Interface
InterfaceSpecificData
_DEVICE_CAPABILITIES
Size
Version
DeviceD1
DeviceD2
LockSupported
EjectSupported
Removable
DockDevice
UniqueID
SilentInstall
RawDeviceOK
SurpriseRemovalOK
WakeFromD0
WakeFromD1
WakeFromD2
WakeFromD3
HardwareDisabled
NonDynamic
WarmEjectSupported
NoDisplayInUI
Reserved
Address
UINumber
DeviceState
SystemWake
DeviceWake
D1Latency
D2Latency
D3Latency
D3Latency
<unnamed-tag>
Capabilities
<unnamed-tag>
IoResourceRequirementList
<unnamed-tag>
WhichSpace
Buffer
Offset
Length
<unnamed-tag>
Lock
BUS_QUERY_ID_TYPE
BusQueryDeviceID
BusQueryHardwareIDs
BusQueryCompatibleIDs
BusQueryInstanceID
BusQueryDeviceSerialNumber
<unnamed-tag>
IdType
DEVICE_TEXT_TYPE
DeviceTextDescription
DeviceTextLocationInformation
<unnamed-tag>
DeviceTextType
LocaleId
_DEVICE_USAGE_NOTIFICATION_TYPE
DeviceUsageTypeUndefined
DeviceUsageTypePaging
DeviceUsageTypeHibernation
DeviceUsageTypeDumpFile
<unnamed-tag>
InPath
Reserved
Type
<unnamed-tag>
PowerState
_POWER_SEQUENCE
SequenceD1
SequenceD2
SequenceD3
SequenceD3
<unnamed-tag>
PowerSequence
_POWER_STATE_TYPE
SystemPowerState
DevicePowerState
<unnamed-tag>
SystemContext
Type
State
ShutdownType
<unnamed-tag>
AllocatedResources
AllocatedResourcesTranslated
<unnamed-tag>
ProviderId
DataPath
BufferSize
Buffer
<unnamed-tag>
Argument1
Argument2
Argument3
Argument4
<unnamed-tag>
Create
CreatePipe
CreateMailslot
Read
Write
QueryDirectory
NotifyDirectory
QueryFile
SetFile
QueryEa
SetEa
QueryVolume
SetVolume
FileSystemControl
LockControl
DeviceIoControl
QuerySecurity
SetSecurity
MountVolume
VerifyVolume
Scsi
QueryQuota
SetQuota
QueryDeviceRelations
QueryInterface
DeviceCapabilities
FilterResourceRequirements
ReadWriteConfig
SetLock
QueryId
QueryDeviceText
UsageNotification
WaitWake
PowerSequence
Power
StartDevice
WMI
Others
Others
Others
Others
Others
Others
_IO_STACK_LOCATION
MajorFunction
MinorFunction
Flags
Control
Parameters
DeviceObject
FileObject
CompletionRoutine
Context
<unnamed-tag>
Length
Alignment
MinimumAddress
MaximumAddress
<unnamed-tag>
MinimumVector
MaximumVector
<unnamed-tag>
MinimumChannel
MaximumChannel
<unnamed-tag>
Length
MinBusNumber
MaxBusNumber
Reserved
<unnamed-tag>
Priority
Reserved1
Reserved2
<unnamed-tag>
Port
Memory
Interrupt
Dma
Generic
DevicePrivate
BusNumber
ConfigData
_IO_RESOURCE_DESCRIPTOR
Option
Type
ShareDisposition
Spare1
Flags
Spare2
u
_MI_VERIFIER_POOL_HEADER
VerifierPoolEntry
_VI_POOL_ENTRY
PageHeader
InUse
NextFree
NextFree
_MI_VERIFIER_POOL_HEADER
VerifierPoolEntry
<unnamed-tag>
DataLength
TotalLength
<unnamed-tag>
s1
Length
<unnamed-tag>
Type
DataInfoOffset
<unnamed-tag>
s2
ZeroInit
_PORT_MESSAGE
u1
u2
ClientId
DoNotUseThisField
MessageId
ClientViewSize
CallbackId
_X86_DBGKD_CONTROL_SET
TraceFlag
Dr7
CurrentSymbolStart
CurrentSymbolEnd
_IA64_DBGKD_CONTROL_SET
Continue
CurrentSymbolStart
CurrentSymbolEnd
_DBGKD_ANY_CONTROL_SET
X86ControlSet
AlphaControlSet
IA64ControlSet
Amd64ControlSet
_ARBITER_ORDERING
Start
End
End
_ARBITER_ORDERING_LIST
Count
Maximum
Orderings


_HBASE_BLOCK
Signature
Sequence1
Sequence2
TimeStamp
Major
Minor
Type
Format
RootCell
Length
Cluster
FileName
Reserved1
CheckSum
Reserved2
BootType
BootRecover
BootRecover
_FREE_DISPLAY
RealVectorSize
Display

_DUAL
Length
Map
SmallDir
Guard
FreeDisplay
FreeSummary
FreeBins
_VI_POOL_PAGE_HEADER
NextPage
VerifierEntry
Signature
_VI_POOL_ENTRY_INUSE
VirtualAddress
CallingAddress
NumberOfBytes
Tag
_VI_POOL_ENTRY
PageHeader
InUse
NextFree
_LPCP_NONPAGED_PORT_QUEUE
Semaphore
BackPointer
BackPointer
_LPCP_PORT_QUEUE
NonPagedPortQueue
Semaphore
ReceiveHead

_INITIAL_PRIVILEGE_SET
PrivilegeCount
Control
Privilege
_DUMP_STACK_CONTEXT
Init
PartitionOffset
DumpPointers
PointersLength
ModulePrefix
DriverList
InitMsg
ProgMsg
DoneMsg
FileObject
UsageType
UsageType
UsageType
PO_MEMORY_IMAGE
Signature
Version
CheckSum
LengthSelf
PageSelf
PageSize
ImageType
SystemTime
InterruptTime
FeatureFlags
HiberFlags
spare
NoHiberPtes
HiberVa
HiberPte
NoFreePages
FreeMapCheck
WakeCheck
TotalPages
FirstTablePage
LastFilePage
PerfInfo
PerfInfo
_PO_MEMORY_RANGE_ARRAY
Range
Link
Link
_PO_HIBER_PERF
IoTicks
InitTicks
CopyTicks
StartCount
ElapsedTime
IoTime
CopyTime
InitTime
PagesWritten
PagesProcessed
BytesCopied
DumpCount
FileRuns
_POP_HIBER_CONTEXT
WriteToFile
ReserveLoaderMemory
ReserveFreeMemory
VerifyOnWake
Reset
HiberFlags
LinkFile
LinkFileHandle
Lock
MapFrozen
MemoryMap
ClonedRanges
ClonedRangeCount
NextCloneRange
NextPreserve
LoaderMdl
Clones
NextClone
NoClones
Spares
PagesOut
IoPage
CurrentMcb
DumpStack
WakeState
NoRanges
HiberVa
HiberPte
Status
MemoryImage
TableHead
CompressionWorkspace
CompressedWriteBuffer
PerformanceStats
CompressionBlock
DmaIO
TemporaryHeap
PerfInfo
_SID
Revision
SubAuthorityCount
IdentifierAuthority
SubAuthority
_FILE_GET_QUOTA_INFORMATION
NextEntryOffset
SidLength
Sid
_MMADDRESS_LIST
StartVpn
EndVpn
_OBJECT_NAME_INFORMATION
Name
_KDESCRIPTOR
Pad
Limit
Base
_DUMP_INITIALIZATION_CONTEXT
Length
Reserved
MemoryBlock
CommonBuffer
PhysicalAddress
StallRoutine
OpenRoutine
WriteRoutine
FinishRoutine
AdapterObject
MappedRegisterBase
PortConfiguration
CrashDump
MaximumTransferSize
CommonBufferSize
TargetAddress
WritePendingRoutine
PartitionStyle
DiskInfo
_DUMP_STACK_CONTEXT
Init
PartitionOffset
DumpPointers
PointersLength
ModulePrefix
DriverList
InitMsg
ProgMsg
DoneMsg
FileObject
UsageType
_POP_SHUTDOWN_BUG_CHECK
Code
Parameter1
Parameter2
Parameter3
Parameter4
<unnamed-tag>
DeviceNumber
FunctionNumber
Reserved
<unnamed-tag>
bits
AsULONG
_PCI_SLOT_NUMBER
u
_CM_NOTIFY_BLOCK
HiveList
PostList
KeyControlBlock
KeyBody
Filter
WatchTree
NotifyPending
SubjectContext
_SID_IDENTIFIER_AUTHORITY
Value
_SID
Revision
SubAuthorityCount
IdentifierAuthority
SubAuthority
_RTL_HANDLE_TABLE_ENTRY
Flags
NextFree
_VI_POOL_ENTRY_INUSE
VirtualAddress
CallingAddress
NumberOfBytes
Tag
_INTERFACE
Size
Version
Context
InterfaceReference
InterfaceDereference
_SUPPORTED_RANGE
Next
SystemAddressSpace
SystemBase
Base
Limit
_SUPPORTED_RANGES
Version
Sorted
Reserved
NoIO
IO
NoMemory
Memory
NoPrefetchMemory
PrefetchMemory
NoDma
Dma
_DRIVER_EXTENSION
DriverObject
AddDevice
Count
ServiceKeyName
ClientDriverExtension
FsFilterCallbacks
FsFilterCallbacks
_FAST_IO_DISPATCH
SizeOfFastIoDispatch
FastIoCheckIfPossible
FastIoRead
FastIoWrite
FastIoQueryBasicInfo
FastIoQueryStandardInfo
FastIoLock
FastIoUnlockSingle
FastIoUnlockAll
FastIoUnlockAllByKey
FastIoDeviceControl
AcquireFileForNtCreateSection
ReleaseFileForNtCreateSection
FastIoDetachDevice
FastIoQueryNetworkOpenInfo
AcquireForModWrite
MdlRead
MdlReadComplete
PrepareMdlWrite
MdlWriteComplete
FastIoReadCompressed
FastIoWriteCompressed
MdlReadCompleteCompressed
MdlWriteCompleteCompressed
FastIoQueryOpen
ReleaseForModWrite
AcquireForCcFlush
ReleaseForCcFlush
ReleaseForCcFlush
ReleaseForCcFlush
ReleaseForCcFlush
ReleaseForCcFlush
ReleaseForCcFlush
ReleaseForCcFlush
ReleaseForCcFlush
ReleaseForCcFlush
ReleaseForCcFlush

_DRIVER_OBJECT
Type
Size
DeviceObject
Flags
DriverStart
DriverSize
DriverSection
DriverExtension
DriverName
HardwareDatabase
FastIoDispatch
DriverInit
DriverStartIo
DriverUnload
MajorFunction

_SID_IDENTIFIER_AUTHORITY
Value
_SECURITY_DESCRIPTOR_RELATIVE
Revision
Sbz1
Control
Owner
Group
Sacl
Dacl
Dacl
Dacl
Dacl
Dacl
_IO_CLIENT_EXTENSION
NextExtension
ClientIdentificationAddress
ClientIdentificationAddress
_FS_FILTER_CALLBACKS
SizeOfFsFilterCallbacks
Reserved
PreAcquireForSectionSynchronization
PostAcquireForSectionSynchronization
PreReleaseForSectionSynchronization
PostReleaseForSectionSynchronization
PreAcquireForCcFlush
PostAcquireForCcFlush
PreReleaseForCcFlush
PostReleaseForCcFlush
PreAcquireForModifiedPageWriter
PostAcquireForModifiedPageWriter
PreReleaseForModifiedPageWriter
PostReleaseForModifiedPageWriter
PostReleaseForModifiedPageWriter
_DRIVER_EXTENSION
DriverObject
AddDevice
Count
ServiceKeyName
ClientDriverExtension
FsFilterCallbacks
_PM_SUPPORT
Rsvd2
D1
D2
PMED0
PMED1
PMED2
PMED3Hot
PMED3Cold
<unnamed-tag>
ArbitrationList
AllocateFromCount
AllocateFrom
<unnamed-tag>
ArbitrationList
ArbitrationList
ArbitrationList
<unnamed-tag>
AllocatedResources
<unnamed-tag>
PhysicalDeviceObject
ConflictingResource
ConflictCount
Conflicts
<unnamed-tag>
ReserveDevice
<unnamed-tag>
TestAllocation
RetestAllocation
BootAllocation
QueryAllocatedResources
QueryConflict
QueryArbitrate
AddReserved
_ARBITER_PARAMETERS
Parameters
POWER_ACTION_POLICY
Action
Flags
EventCode
_HANDLE_TABLE_ENTRY_INFO
AuditMask
_POWER_SEQUENCE
SequenceD1
SequenceD2
SequenceD3
_IMAGE_DATA_DIRECTORY
VirtualAddress
Size
PO_MEMORY_IMAGE
Signature
Version
CheckSum
LengthSelf
PageSelf
PageSize
ImageType
SystemTime
InterruptTime
FeatureFlags
HiberFlags
spare
NoHiberPtes
HiberVa
HiberPte
NoFreePages
FreeMapCheck
WakeCheck
TotalPages
FirstTablePage
LastFilePage
PerfInfo
BATTERY_REPORTING_SCALE
Granularity
Capacity
_CURDIR
DosPath
Handle
_PO_HIBER_PERF
IoTicks
InitTicks
CopyTicks
StartCount
ElapsedTime
IoTime
CopyTime
InitTime
PagesWritten
PagesProcessed
BytesCopied
DumpCount
FileRuns
_FREE_DISPLAY
RealVectorSize
Display
_KDEVICE_QUEUE_ENTRY
DeviceListEntry
SortKey
Inserted
_DEVICE_CAPABILITIES
Size
Version
DeviceD1
DeviceD2
LockSupported
EjectSupported
Removable
DockDevice
UniqueID
SilentInstall
RawDeviceOK
SurpriseRemovalOK
WakeFromD0
WakeFromD1
WakeFromD2
WakeFromD3
HardwareDisabled
NonDynamic
WarmEjectSupported
NoDisplayInUI
Reserved
Address
UINumber
DeviceState
SystemWake
DeviceWake
D1Latency
D2Latency
D3Latency
_VI_POOL_PAGE_HEADER
NextPage
VerifierEntry
Signature
_RTL_RANGE_LIST
ListHead
Flags
Count
Stamp
_RTL_CRITICAL_SECTION_DEBUG
Type
CreatorBackTraceIndex
CriticalSection
ProcessLocksList
EntryCount
ContentionCount
Spare
_PLUGPLAY_EVENT_CATEGORY
HardwareProfileChangeEvent
TargetDeviceChangeEvent
DeviceClassChangeEvent
CustomDeviceEvent
DeviceInstallEvent
DeviceArrivalEvent
PowerEvent
VetoEvent
BlockedDriverEvent
InvalidIDEvent
MaxPlugEventCategory
<unnamed-tag>
ClassGuid
SymbolicLinkName
<unnamed-tag>
DeviceIds
<unnamed-tag>
DeviceId
<unnamed-tag>
NotificationStructure
DeviceIds
<unnamed-tag>
Notification
<unnamed-tag>
NotificationCode
NotificationData
<unnamed-tag>
VetoType
DeviceIdVetoNameBuffer
<unnamed-tag>
BlockedDriverGuid
<unnamed-tag>
ParentId
<unnamed-tag>
DeviceClass
TargetDevice
InstallDevice
CustomNotification
ProfileNotification
PowerNotification
VetoNotification
BlockedDriverNotification
InvalidIDNotification
_PLUGPLAY_EVENT_BLOCK
EventGuid
EventCategory
Result
Flags
TotalSize
DeviceObject
u
_CACHED_CHILD_LIST
Count
ValueList
RealKcb
_PO_MEMORY_RANGE_ARRAY_RANGE
PageNo
StartPage
EndPage
CheckSum
_PO_MEMORY_RANGE_ARRAY_LINK
Next
NextTable
CheckSum
EntryCount
_PO_MEMORY_RANGE_ARRAY
Range
Link
Link
Link
Link
Link
Link
Link
Link
Link
Link
Link
_ADAPTER_OBJECT
_ADAPTER_OBJECT
_ADAPTER_OBJECT
_ADAPTER_OBJECT
_ADAPTER_OBJECT
_ADAPTER_OBJECT
_ADAPTER_OBJECT
_ADAPTER_OBJECT
<unnamed-tag>
Signature
CheckSum
<unnamed-tag>
DiskId
<unnamed-tag>
Mbr
Gpt
_DUMP_INITIALIZATION_CONTEXT
Length
Reserved
MemoryBlock
CommonBuffer
PhysicalAddress
StallRoutine
OpenRoutine
WriteRoutine
FinishRoutine
AdapterObject
MappedRegisterBase
PortConfiguration
CrashDump
MaximumTransferSize
CommonBufferSize
TargetAddress
WritePendingRoutine
PartitionStyle
DiskInfo
_IO_CLIENT_EXTENSION
NextExtension
ClientIdentificationAddress
ClientIdentificationAddress
_CM_NAME_HASH
ConvKey
NextHash
NameLength
Name
_ARBITER_LIST_ENTRY
ListEntry
AlternativeCount
Alternatives
PhysicalDeviceObject
RequestSource
Flags
WorkSpace
InterfaceType
SlotNumber
BusNumber
Assignment
SelectedAlternative
Result
Result
_ARBITER_ALTERNATIVE
Minimum
Maximum
Length
Alignment
Priority
Flags
Descriptor
Reserved
Reserved
_ARBITER_ALLOCATION_STATE
Start
End
CurrentMinimum
CurrentMaximum
Entry
CurrentAlternative
AlternativeCount
Alternatives
Flags
RangeAttributes
RangeAvailableAttributes
WorkSpace

_PCI_HEADER_TYPE_0
BaseAddresses
CIS
SubVendorID
SubSystemID
ROMBaseAddress
CapabilitiesPtr
Reserved1
Reserved2
InterruptLine
InterruptPin
MinimumGrant
MaximumLatency
MaximumLatency
_PO_NOTIFY_ORDER_LEVEL
LevelReady
DeviceCount
ActiveCount
WaitSleep
ReadySleep
Pending
Complete
ReadyS0
WaitS0

_PO_DEVICE_NOTIFY_ORDER
DevNodeSequence
WarmEjectPdoPointer
OrderLevel
_FS_FILTER_CALLBACK_DATA
SizeOfFsFilterCallbackData
Operation
Reserved
DeviceObject
FileObject
Parameters
Parameters
Parameters
Parameters
Parameters
Parameters
Parameters
Parameters
Parameters
Parameters
Parameters
_FS_FILTER_CALLBACKS
SizeOfFsFilterCallbacks
Reserved
PreAcquireForSectionSynchronization
PostAcquireForSectionSynchronization
PreReleaseForSectionSynchronization
PostReleaseForSectionSynchronization
PreAcquireForCcFlush
PostAcquireForCcFlush
PreReleaseForCcFlush
PostReleaseForCcFlush
PreAcquireForModifiedPageWriter
PostAcquireForModifiedPageWriter
PreReleaseForModifiedPageWriter
PostReleaseForModifiedPageWriter
_IA64_DBGKD_CONTROL_SET
Continue
CurrentSymbolStart
CurrentSymbolEnd
_PO_MEMORY_RANGE_ARRAY_RANGE
PageNo
StartPage
EndPage
CheckSum
_CM_KEY_NODE
Signature
Flags
LastWriteTime
Spare
Parent
SubKeyCounts
SubKeyLists
ValueList
ChildHiveReference
Security
Class
MaxNameLen
MaxClassLen
MaxValueNameLen
MaxValueDataLen
WorkVar
NameLength
ClassLength
Name
_CM_KEY_VALUE
Signature
NameLength
DataLength
Data
Type
Flags
Spare
Name
_CM_KEY_SECURITY
Signature
Reserved
Flink
Blink
ReferenceCount
DescriptorLength
Descriptor
_CM_KEY_INDEX
Signature
Count
List
_CM_BIG_DATA
Signature
Count
List
_u
KeyNode
KeyValue
KeySecurity
KeyIndex
ValueData
KeyList
KeyString
_ARBITER_CONFLICT_INFO
OwningObject
Start
End
_PO_NOTIFY_ORDER_LEVEL
LevelReady
DeviceCount
ActiveCount
WaitSleep
ReadySleep
Pending
Complete
ReadyS0
WaitS0
<unnamed-tag>
Base
Limit

_PCI_HEADER_TYPE_2
SocketRegistersBaseAddress
CapabilitiesPtr
Reserved
SecondaryStatus
PrimaryBus
SecondaryBus
SubordinateBus
SecondaryLatency
Range
InterruptLine
InterruptPin
BridgeControl
_CM_KEY_VALUE
Signature
NameLength
DataLength
Data
Type
Flags
Spare
Name
_FS_FILTER_PARAMETERS
AcquireForModifiedPageWriter
ReleaseForModifiedPageWriter
AcquireForSectionSynchronization
Others
_FS_FILTER_CALLBACK_DATA
SizeOfFsFilterCallbackData
Operation
Reserved
DeviceObject
FileObject
Parameters
_PO_MEMORY_RANGE_ARRAY_LINK
Next
NextTable
CheckSum
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
EntryCount
_FILE_BASIC_INFORMATION
CreationTime
LastAccessTime
LastWriteTime
ChangeTime
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
_FILE_STANDARD_INFORMATION
AllocationSize
EndOfFile
NumberOfLinks
DeletePending
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
Directory
_FILE_NETWORK_OPEN_INFORMATION
CreationTime
LastAccessTime
LastWriteTime
ChangeTime
AllocationSize
EndOfFile
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
FileAttributes
_COMPRESSED_DATA_INFO
CompressionFormatAndEngine
CompressionUnitShift
ChunkShift
ClusterShift
Reserved
NumberOfChunks
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
CompressedChunkSizes
_FAST_IO_DISPATCH
SizeOfFastIoDispatch
FastIoCheckIfPossible
FastIoRead
FastIoWrite
FastIoQueryBasicInfo
FastIoQueryStandardInfo
FastIoLock
FastIoUnlockSingle
FastIoUnlockAll
FastIoUnlockAllByKey
FastIoDeviceControl
AcquireFileForNtCreateSection
ReleaseFileForNtCreateSection
FastIoDetachDevice
FastIoQueryNetworkOpenInfo
AcquireForModWrite
MdlRead
MdlReadComplete
PrepareMdlWrite
MdlWriteComplete
FastIoReadCompressed
FastIoWriteCompressed
MdlReadCompleteCompressed
MdlWriteCompleteCompressed
FastIoQueryOpen
ReleaseForModWrite
AcquireForCcFlush
ReleaseForCcFlush
_OBJECT_DIRECTORY_ENTRY
ChainLink
Object
HashValue
_POP_DEVICE_POWER_IRP
Free
Irp
Notify
Pending
Complete
Abort
Failed
_FILE_BASIC_INFORMATION
CreationTime
LastAccessTime
LastWriteTime
ChangeTime
FileAttributes
_RTL_RANGE
Start
End
UserData
Owner
Attributes
Flags
_PCI_HEADER_TYPE_1
BaseAddresses
PrimaryBus
SecondaryBus
SubordinateBus
SecondaryLatency
IOBase
IOLimit
SecondaryStatus
MemoryBase
MemoryLimit
PrefetchBase
PrefetchLimit
PrefetchBaseUpper32
PrefetchLimitUpper32
IOBaseUpper16
IOLimitUpper16
CapabilitiesPtr
Reserved1
ROMBaseAddress
InterruptLine
InterruptPin
BridgeControl

_PRIVILEGE_SET
PrivilegeCount
Control
Privilege
_TOKEN_CONTROL
TokenId
AuthenticationId
ModifiedId
TokenSource
_SECURITY_CLIENT_CONTEXT
SecurityQos
ClientToken
DirectlyAccessClientToken
DirectAccessEffectiveOnly
ServerIsRemote
ClientTokenControl
_IO_SECURITY_CONTEXT
SecurityQos
AccessState
DesiredAccess
FullCreateOptions
_X86_DBGKD_CONTROL_SET
TraceFlag
Dr7
CurrentSymbolStart
CurrentSymbolEnd
_RTL_ACTIVATION_CONTEXT_STACK_FRAME
Previous
ActivationContext
Flags
_MAILSLOT_CREATE_PARAMETERS
MailslotQuota
MaximumMessageSize
ReadTimeout
TimeoutSpecified
_NAMED_PIPE_CREATE_PARAMETERS
NamedPipeType
ReadMode
CompletionMode
MaximumInstances
InboundQuota
OutboundQuota
DefaultTimeout
TimeoutSpecified
_CM_BIG_DATA
Signature
Count
List
List
_SUPPORTED_RANGE
Next
SystemAddressSpace
SystemBase
Base
Limit
_CHILD_LIST
Count
List
_CM_KEY_REFERENCE
KeyCell
KeyHive
_CM_KEY_NODE
Signature
Flags
LastWriteTime
Spare
Parent
SubKeyCounts
SubKeyLists
ValueList
ChildHiveReference
Security
Class
MaxNameLen
MaxClassLen
MaxValueNameLen
MaxValueDataLen
WorkVar
NameLength
ClassLength
Name
_ARBITER_ORDERING
Start
End
_ARBITER_REQUEST_SOURCE
ArbiterRequestUndefined
ArbiterRequestLegacyReported
ArbiterRequestHalReported
ArbiterRequestLegacyAssigned
ArbiterRequestPnpDetected
ArbiterRequestPnpEnumerated
_ARBITER_RESULT
ArbiterResultUndefined
ArbiterResultSuccess
ArbiterResultExternalConflict
ArbiterResultNullRequest
_ARBITER_LIST_ENTRY
ListEntry
AlternativeCount
Alternatives
PhysicalDeviceObject
RequestSource
Flags
WorkSpace
InterfaceType
SlotNumber
BusNumber
Assignment
SelectedAlternative
Result
_LPCP_NONPAGED_PORT_QUEUE
Semaphore
BackPointer
_CM_KEY_INDEX
Signature
Count
List
_FILE_NETWORK_OPEN_INFORMATION
CreationTime
LastAccessTime
LastWriteTime
ChangeTime
AllocationSize
EndOfFile
FileAttributes
_CM_KEY_REFERENCE
KeyCell
KeyHive
_ARBITER_ALTERNATIVE
Minimum
Maximum
Length
Alignment
Priority
Flags
Descriptor
Reserved
_TOKEN_CONTROL
TokenId
AuthenticationId
ModifiedId
TokenSource
<unnamed-tag>
EndingOffset
ResourceToRelease
<unnamed-tag>
ResourceToRelease
_FS_FILTER_SECTION_SYNC_TYPE
SyncTypeOther
SyncTypeCreateSection
<unnamed-tag>
SyncType
PageProtection
<unnamed-tag>
Argument1
Argument2
Argument3
Argument4
Argument5
_FS_FILTER_PARAMETERS
AcquireForModifiedPageWriter
ReleaseForModifiedPageWriter
AcquireForSectionSynchronization
Others
_COMPRESSED_DATA_INFO
CompressionFormatAndEngine
CompressionUnitShift
ChunkShift
ClusterShift
Reserved
NumberOfChunks
CompressedChunkSizes
_FILE_STANDARD_INFORMATION
AllocationSize
EndOfFile
NumberOfLinks
DeletePending
Directory
_CHILD_LIST
Count
List
_CM_KEY_SECURITY
Signature
Reserved
Flink
Blink
ReferenceCount
DescriptorLength
Descriptor