Quantcast
Channel: windows deep internals
Viewing all 264 articles
Browse latest View live

KiServiceTable from windows 10 Technical Preview 64bit

$
0
0
KiServiceLimit .eq. 0x1B1

NtAccessCheck
NtWorkerFactoryWorkerReady
NtAcceptConnectPort
NtMapUserPhysicalPagesScatter
NtWaitForSingleObject
NtCallbackReturn
NtReadFile
NtDeviceIoControlFile
NtWriteFile
NtRemoveIoCompletion
NtReleaseSemaphore
NtReplyWaitReceivePort
NtReplyPort
NtSetInformationThread
NtSetEvent
NtClose
NtQueryObject
NtQueryInformationFile
NtOpenKey
NtEnumerateValueKey
NtFindAtom
NtQueryDefaultLocale
NtQueryKey
NtQueryValueKey
NtAllocateVirtualMemory
NtQueryInformationProcess
NtWaitForMultipleObjects32
NtWriteFileGather
NtSetInformationProcess
NtCreateKey
NtFreeVirtualMemory
NtImpersonateClientOfPort
NtReleaseMutant
NtQueryInformationToken
NtRequestWaitReplyPort
NtQueryVirtualMemory
NtOpenThreadToken
NtQueryInformationThread
NtOpenProcess
NtSetInformationFile
NtMapViewOfSection
NtAccessCheckAndAuditAlarm
NtUnmapViewOfSection
NtReplyWaitReceivePortEx
NtTerminateProcess
NtSetEventBoostPriority
NtReadFileScatter
NtOpenThreadTokenEx
NtOpenProcessTokenEx
NtQueryPerformanceCounter
NtEnumerateKey
NtOpenFile
NtDelayExecution
NtQueryDirectoryFile
NtQuerySystemInformation
NtOpenSection
NtQueryTimer
NtFsControlFile
NtWriteVirtualMemory
NtCloseObjectAuditAlarm
NtDuplicateObject
NtQueryAttributesFile
NtClearEvent
NtReadVirtualMemory
NtOpenEvent
NtAdjustPrivilegesToken
NtDuplicateToken
NtContinue
NtQueryDefaultUILanguage
NtQueueApcThread
NtYieldExecution
NtAddAtom
NtCreateEvent
NtQueryVolumeInformationFile
NtCreateSection
NtFlushBuffersFile
NtApphelpCacheControl
NtCreateProcessEx
NtCreateThread
NtIsProcessInJob
NtProtectVirtualMemory
NtQuerySection
NtResumeThread
NtTerminateThread
NtReadRequestData
NtCreateFile
NtQueryEvent
NtWriteRequestData
NtOpenDirectoryObject
NtAccessCheckByTypeAndAuditAlarm
NtQuerySystemTime
NtWaitForMultipleObjects
NtSetInformationObject
NtCancelIoFile
NtTraceEvent
NtPowerInformation
NtSetValueKey
NtCancelTimer
NtSetTimer
NtAccessCheckByType
NtAccessCheckByTypeResultList
NtAccessCheckByTypeResultListAndAuditAlarm
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
NtAddAtomEx
NtAddBootEntry
NtAddDriverEntry
NtAdjustGroupsToken
NtAdjustTokenClaimsAndDeviceGroups
NtAlertResumeThread
NtAlertThread
NtAlertThreadByThreadId
NtAllocateLocallyUniqueId
NtAllocateReserveObject
NtAllocateUserPhysicalPages
NtAllocateUuids
NtAlpcAcceptConnectPort
NtAlpcCancelMessage
NtAlpcConnectPort
NtAlpcConnectPortEx
NtAlpcCreatePort
NtAlpcCreatePortSection
NtAlpcCreateResourceReserve
NtAlpcCreateSectionView
NtAlpcCreateSecurityContext
NtAlpcDeletePortSection
NtAlpcDeleteResourceReserve
NtAlpcDeleteSectionView
NtAlpcDeleteSecurityContext
NtAlpcDisconnectPort
NtAlpcImpersonateClientOfPort
NtAlpcOpenSenderProcess
NtAlpcOpenSenderThread
NtAlpcQueryInformation
NtAlpcQueryInformationMessage
NtAlpcRevokeSecurityContext
NtAlpcSendWaitReceivePort
NtAlpcSetInformation
NtAreMappedFilesTheSame
NtAssignProcessToJobObject
NtAssociateWaitCompletionPacket
NtCancelIoFileEx
NtCancelSynchronousIoFile
NtCancelTimer2
NtCancelWaitCompletionPacket
NtCommitComplete
NtCommitEnlistment
NtCommitTransaction
NtCompactKeys
NtCompareTokens
NtCompleteConnectPort
NtCompressKey
NtConnectPort
NtCreateDebugObject
NtCreateDirectoryObject
NtCreateDirectoryObjectEx
NtCreateEnlistment
NtCreateEventPair
NtCreateIRTimer
NtCreateIoCompletion
NtCreateJobObject
NtCreateJobSet
NtCreateKeyTransacted
NtCreateKeyedEvent
NtCreateLowBoxToken
NtCreateMailslotFile
NtCreateMutant
NtCreateNamedPipeFile
NtCreatePagingFile
NtCreatePort
NtCreatePrivateNamespace
NtCreateProcess
NtCreateProfile
NtCreateProfileEx
NtCreateResourceManager
NtCreateSemaphore
NtCreateSymbolicLinkObject
NtCreateThreadEx
NtCreateTimer
NtCreateTimer2
NtCreateToken
NtCreateTokenEx
NtCreateTransaction
NtCreateTransactionManager
NtCreateUserProcess
NtCreateWaitCompletionPacket
NtCreateWaitablePort
NtCreateWnfStateName
NtCreateWorkerFactory
NtDebugActiveProcess
NtDebugContinue
NtDeleteAtom
NtDeleteBootEntry
NtDeleteDriverEntry
NtDeleteFile
NtDeleteKey
NtDeleteObjectAuditAlarm
NtDeletePrivateNamespace
NtDeleteValueKey
NtDeleteWnfStateData
NtDeleteWnfStateName
NtDisableLastKnownGood
NtDisplayString
NtDrawText
NtEnableLastKnownGood
NtEnumerateBootEntries
NtEnumerateDriverEntries
NtEnumerateSystemEnvironmentValuesEx
NtEnumerateTransactionObject
NtExtendSection
NtFilterBootOption
NtFilterToken
NtFilterTokenEx
NtFlushBuffersFileEx
NtFlushInstallUILanguage
NtFlushInstructionCache
NtFlushKey
NtFlushProcessWriteBuffers
NtFlushVirtualMemory
NtFlushWriteBuffer
NtFreeUserPhysicalPages
NtFreezeRegistry
NtFreezeTransactions
NtGetCachedSigningLevel
NtGetCompleteWnfStateSubscription
NtGetContextThread
NtGetCurrentProcessorNumber
NtGetDevicePowerState
NtGetMUIRegistryInfo
NtGetNextProcess
NtGetNextThread
NtGetNlsSectionPtr
NtGetNotificationResourceManager
NtGetWriteWatch
NtImpersonateAnonymousToken
NtImpersonateThread
NtInitializeNlsFiles
NtInitializeRegistry
NtInitiatePowerAction
NtIsSystemResumeAutomatic
NtIsUILanguageComitted
NtListenPort
NtLoadDriver
NtLoadKey
NtLoadKey2
NtLoadKeyEx
NtLockFile
NtLockProductActivationKeys
NtLockRegistryKey
NtLockVirtualMemory
NtMakePermanentObject
NtMakeTemporaryObject
NtMapCMFModule
NtMapUserPhysicalPages
NtModifyBootEntry
NtModifyDriverEntry
NtNotifyChangeDirectoryFile
NtNotifyChangeKey
NtNotifyChangeMultipleKeys
NtNotifyChangeSession
NtOpenEnlistment
NtOpenEventPair
NtOpenIoCompletion
NtOpenJobObject
NtOpenKeyEx
NtOpenKeyTransacted
NtOpenKeyTransactedEx
NtOpenKeyedEvent
NtOpenMutant
NtOpenObjectAuditAlarm
NtOpenPrivateNamespace
NtOpenProcessToken
NtOpenResourceManager
NtOpenSemaphore
NtOpenSession
NtOpenSymbolicLinkObject
NtOpenThread
NtOpenTimer
NtOpenTransaction
NtOpenTransactionManager
NtPlugPlayControl
NtPrePrepareComplete
NtPrePrepareEnlistment
NtPrepareComplete
NtPrepareEnlistment
NtPrivilegeCheck
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtPropagationComplete
NtPropagationFailed
NtPulseEvent
NtQueryBootEntryOrder
NtQueryBootOptions
NtQueryDebugFilterState
NtQueryDirectoryObject
NtQueryDriverEntryOrder
NtQueryEaFile
NtQueryFullAttributesFile
NtQueryInformationAtom
NtQueryInformationEnlistment
NtQueryInformationJobObject
NtQueryInformationPort
NtQueryInformationResourceManager
NtQueryInformationTransaction
NtQueryInformationTransactionManager
NtQueryInformationWorkerFactory
NtQueryInstallUILanguage
NtQueryIntervalProfile
NtQueryIoCompletion
NtQueryLicenseValue
NtQueryMultipleValueKey
NtQueryMutant
NtQueryOpenSubKeys
NtQueryOpenSubKeysEx
NtQueryPortInformationProcess
NtQueryQuotaInformationFile
NtQuerySecurityAttributesToken
NtQuerySecurityObject
NtQuerySemaphore
NtQuerySymbolicLinkObject
NtQuerySystemEnvironmentValue
NtQuerySystemEnvironmentValueEx
NtQuerySystemInformationEx
NtQueryTimerResolution
NtQueryWnfStateData
NtQueryWnfStateNameInformation
NtQueueApcThreadEx
NtRaiseException
NtRaiseHardError
NtReadOnlyEnlistment
NtRecoverEnlistment
NtRecoverResourceManager
NtRecoverTransactionManager
NtRegisterProtocolAddressInformation
NtRegisterThreadTerminatePort
NtReleaseKeyedEvent
NtReleaseWorkerFactoryWorker
NtRemoveIoCompletionEx
NtRemoveProcessDebug
NtRenameKey
NtRenameTransactionManager
NtReplaceKey
NtReplacePartitionUnit
NtReplyWaitReplyPort
NtRequestPort
NtResetEvent
NtResetWriteWatch
NtRestoreKey
NtResumeProcess
NtRollbackComplete
NtRollbackEnlistment
NtRollbackTransaction
NtRollforwardTransactionManager
NtSaveKey
NtSaveKeyEx
NtSaveMergedKeys
NtSecureConnectPort
NtSerializeBoot
NtSetBootEntryOrder
NtSetBootOptions
NtSetCachedSigningLevel
NtSetContextThread
NtSetDebugFilterState
NtSetDefaultHardErrorPort
NtSetDefaultLocale
NtSetDefaultUILanguage
NtSetDriverEntryOrder
NtSetEaFile
NtSetHighEventPair
NtSetHighWaitLowEventPair
NtSetIRTimer
NtSetInformationDebugObject
NtSetInformationEnlistment
NtSetInformationJobObject
NtSetInformationKey
NtSetInformationResourceManager
NtSetInformationToken
NtSetInformationTransaction
NtSetInformationTransactionManager
NtSetInformationVirtualMemory
NtSetInformationWorkerFactory
NtSetIntervalProfile
NtSetIoCompletion
NtSetIoCompletionEx
NtSetLdtEntries
NtSetLowEventPair
NtSetLowWaitHighEventPair
NtSetQuotaInformationFile
NtSetSecurityObject
NtSetSystemEnvironmentValue
NtSetSystemEnvironmentValueEx
NtSetSystemInformation
NtSetSystemPowerState
NtSetSystemTime
NtSetThreadExecutionState
NtSetTimer2
NtSetTimerEx
NtSetTimerResolution
NtSetUuidSeed
NtSetVolumeInformationFile
NtSetWnfProcessNotificationEvent
NtShutdownSystem
NtShutdownWorkerFactory
NtSignalAndWaitForSingleObject
NtSinglePhaseReject
NtStartProfile
NtStopProfile
NtSubscribeWnfStateChange
NtSuspendProcess
NtSuspendThread
NtSystemDebugControl
NtTerminateJobObject
NtTestAlert
NtThawRegistry
NtThawTransactions
NtTraceControl
NtTranslateFilePath
NtUmsThreadYield
NtUnloadDriver
NtUnloadKey
NtUnloadKey2
NtUnloadKeyEx
NtUnlockFile
NtUnlockVirtualMemory
NtUnmapViewOfSectionEx
NtUnsubscribeWnfStateChange
NtUpdateWnfStateData
NtVdmControl
NtWaitForAlertByThreadId
NtWaitForDebugEvent
NtWaitForKeyedEvent
NtWaitForWorkViaWorkerFactory
NtWaitHighEventPair
NtWaitLowEventPair


W32pServiceTable from windows 10 Technical Preview 64bit

$
0
0
W32pServiceLimit .eq. 0x443

NtUserGetOwnerTransformedMonitorRect
NtUserYieldTask
NtUserSetSensorPresence
NtUserGetThreadState
NtUserPeekMessage
NtUserCallOneParam
NtUserGetKeyState
NtUserInvalidateRect
NtUserCallNoParam
NtUserGetMessage
NtUserMessageCall
NtGdiBitBlt
NtGdiGetCharSet
NtUserGetDC
NtGdiSelectBitmap
NtUserWaitMessage
NtUserTranslateMessage
NtUserGetProp
NtUserPostMessage
NtUserQueryWindow
NtUserTranslateAccelerator
NtGdiFlush
NtUserRedrawWindow
NtUserWindowFromPoint
NtUserCallMsgFilter
NtUserValidateTimerCallback
NtUserBeginPaint
NtUserSetTimer
NtUserEndPaint
NtUserSetCursor
NtUserKillTimer
NtUserBuildHwndList
NtUserSelectPalette
NtUserCallNextHookEx
NtUserHideCaret
NtGdiIntersectClipRect
NtUserCallHwndLock
NtUserGetProcessWindowStation
NtGdiDeleteObjectApp
NtUserSetWindowPos
NtUserShowCaret
NtUserEndDeferWindowPosEx
NtUserCallHwndParamLock
NtUserVkKeyScanEx
NtGdiSetDIBitsToDeviceInternal
NtUserCallTwoParam
NtGdiGetRandomRgn
NtUserCopyAcceleratorTable
NtUserNotifyWinEvent
NtGdiExtSelectClipRgn
NtUserIsClipboardFormatAvailable
NtUserSetScrollInfo
NtGdiStretchBlt
NtUserCreateCaret
NtGdiRectVisible
NtGdiCombineRgn
NtGdiGetDCObject
NtUserDispatchMessage
NtUserRegisterWindowMessage
NtGdiExtTextOutW
NtGdiSelectFont
NtGdiRestoreDC
NtGdiSaveDC
NtUserGetForegroundWindow
NtUserShowScrollBar
NtUserFindExistingCursorIcon
NtGdiGetDCDword
NtGdiGetRegionData
NtGdiLineTo
NtUserSystemParametersInfo
NtGdiGetAppClipBox
NtUserGetAsyncKeyState
NtUserGetCPD
NtUserRemoveProp
NtGdiDoPalette
NtGdiPolyPolyDraw
NtUserSetCapture
NtUserEnumDisplayMonitors
NtGdiCreateCompatibleBitmap
NtUserSetProp
NtGdiGetTextCharsetInfo
NtUserSBGetParms
NtUserGetIconInfo
NtUserExcludeUpdateRgn
NtUserSetFocus
NtGdiExtGetObjectW
NtUserGetUpdateRect
NtGdiCreateCompatibleDC
NtUserGetClipboardSequenceNumber
NtGdiCreatePen
NtUserShowWindow
NtUserGetKeyboardLayoutList
NtGdiPatBlt
NtUserMapVirtualKeyEx
NtUserSetWindowLong
NtGdiHfontCreate
NtUserMoveWindow
NtUserPostThreadMessage
NtUserDrawIconEx
NtUserGetSystemMenu
NtGdiDrawStream
NtUserInternalGetWindowText
NtUserGetWindowDC
NtGdiD3dDrawPrimitives2
NtGdiInvertRgn
NtGdiGetRgnBox
NtGdiGetAndSetDCDword
NtGdiMaskBlt
NtGdiGetWidthTable
NtUserScrollDC
NtUserGetObjectInformation
NtGdiCreateBitmap
NtUserFindWindowEx
NtGdiPolyPatBlt
NtUserUnhookWindowsHookEx
NtGdiGetNearestColor
NtGdiTransformPoints
NtGdiGetDCPoint
NtGdiCreateDIBBrush
NtGdiGetTextMetricsW
NtUserCreateWindowEx
NtUserSetParent
NtUserGetKeyboardState
NtUserToUnicodeEx
NtUserGetControlBrush
NtUserGetClassName
NtGdiAlphaBlend
NtGdiDdBlt
NtGdiOffsetRgn
NtUserDefSetText
NtGdiGetTextFaceW
NtGdiStretchDIBitsInternal
NtUserSendInput
NtUserGetThreadDesktop
NtGdiCreateRectRgn
NtGdiGetDIBitsInternal
NtUserGetUpdateRgn
NtGdiDeleteClientObj
NtUserGetIconSize
NtUserFillWindow
NtGdiExtCreateRegion
NtGdiComputeXformCoefficients
NtUserSetWindowsHookEx
NtUserNotifyProcessCreate
NtGdiUnrealizeObject
NtUserGetTitleBarInfo
NtGdiRectangle
NtUserSetThreadDesktop
NtUserGetDCEx
NtUserGetScrollBarInfo
NtGdiGetTextExtent
NtUserSetWindowFNID
NtGdiSetLayout
NtUserCalcMenuBar
NtUserThunkedMenuItemInfo
NtGdiExcludeClipRect
NtGdiCreateDIBSection
NtGdiGetDCforBitmap
NtUserDestroyCursor
NtUserDestroyWindow
NtUserCallHwndParam
NtGdiCreateDIBitmapInternal
NtUserOpenWindowStation
NtGdiDdDeleteSurfaceObject
NtGdiDdCanCreateSurface
NtGdiDdCreateSurface
NtUserSetCursorIconData
NtGdiDdDestroySurface
NtUserCloseDesktop
NtUserOpenDesktop
NtUserSetProcessWindowStation
NtUserGetAtomName
NtGdiDdResetVisrgn
NtGdiExtCreatePen
NtGdiCreatePaletteInternal
NtGdiSetBrushOrg
NtUserBuildNameList
NtGdiSetPixel
NtUserRegisterClassExWOW
NtGdiCreatePatternBrushInternal
NtUserGetAncestor
NtGdiGetOutlineTextMetricsInternalW
NtGdiSetBitmapBits
NtUserCloseWindowStation
NtUserGetDoubleClickTime
NtUserEnableScrollBar
NtGdiCreateSolidBrush
NtUserGetClassInfoEx
NtGdiCreateClientObj
NtUserUnregisterClass
NtUserDeleteMenu
NtGdiRectInRegion
NtUserScrollWindowEx
NtGdiGetPixel
NtUserSetClassLong
NtUserGetMenuBarInfo
NtGdiDdCreateSurfaceEx
NtGdiDdCreateSurfaceObject
NtGdiGetNearestPaletteIndex
NtGdiDdLockD3D
NtGdiDdUnlockD3D
NtGdiGetCharWidthW
NtUserInvalidateRgn
NtUserGetClipboardOwner
NtUserSetWindowRgn
NtUserBitBltSysBmp
NtGdiGetCharWidthInfo
NtUserValidateRect
NtUserCloseClipboard
NtUserOpenClipboard
NtGdiGetStockObject
NtUserSetClipboardData
NtUserEnableMenuItem
NtUserAlterWindowStyle
NtGdiFillRgn
NtUserGetWindowPlacement
NtGdiModifyWorldTransform
NtGdiGetFontData
NtUserGetOpenClipboardWindow
NtUserSetThreadState
NtGdiOpenDCW
NtUserTrackMouseEvent
NtGdiGetTransform
NtUserDestroyMenu
NtGdiGetBitmapBits
NtUserConsoleControl
NtUserSetActiveWindow
NtUserSetInformationThread
NtUserSetWindowPlacement
NtUserGetControlColor
NtGdiSetMetaRgn
NtGdiSetMiterLimit
NtGdiSetVirtualResolution
NtGdiGetRasterizerCaps
NtUserSetWindowWord
NtUserGetClipboardFormatName
NtUserRealInternalGetMessage
NtUserCreateLocalMemHandle
NtUserAttachThreadInput
NtGdiCreateHalftonePalette
NtUserPaintMenuBar
NtUserSetKeyboardState
NtGdiCombineTransform
NtUserCreateAcceleratorTable
NtUserGetCursorFrameInfo
NtUserGetAltTabInfo
NtUserGetCaretBlinkTime
NtGdiQueryFontAssocInfo
NtUserProcessConnect
NtUserEnumDisplayDevices
NtUserEmptyClipboard
NtUserGetClipboardData
NtUserRemoveMenu
NtGdiSetBoundsRect
NtGdiGetBitmapDimension
NtUserConvertMemHandle
NtUserDestroyAcceleratorTable
NtUserGetGUIThreadInfo
NtGdiCloseFigure
NtUserSetWindowsHookAW
NtUserSetMenuDefaultItem
NtUserCheckMenuItem
NtUserSetWinEventHook
NtUserUnhookWinEvent
NtUserLockWindowUpdate
NtUserSetSystemMenu
NtUserThunkedMenuInfo
NtGdiBeginPath
NtGdiEndPath
NtGdiFillPath
NtUserCallHwnd
NtUserDdeInitialize
NtUserModifyUserStartupInfoFlags
NtUserCountClipboardFormats
NtGdiAddFontMemResourceEx
NtGdiEqualRgn
NtGdiGetSystemPaletteUse
NtGdiRemoveFontMemResourceEx
NtUserEnumDisplaySettings
NtUserPaintDesktop
NtGdiExtEscape
NtGdiSetBitmapDimension
NtGdiSetFontEnumeration
NtUserChangeClipboardChain
NtUserSetClipboardViewer
NtUserShowWindowAsync
NtGdiCreateColorSpace
NtGdiDeleteColorSpace
NtUserActivateKeyboardLayout
NtBindCompositionSurface
NtCompositionInputThread
NtCreateCompositionInputSink
NtCreateCompositionSurfaceHandle
NtDCompositionAddCrossDeviceVisualChild
NtDCompositionAddVisualChild
NtDCompositionBeginFrame
NtDCompositionCommitChannel
NtDCompositionConfirmFrame
NtDCompositionConnectPipe
NtDCompositionCreateAndBindSharedSection
NtDCompositionCreateChannel
NtDCompositionCreateConnection
NtDCompositionCreateDwmChannel
NtDCompositionCreateResource
NtDCompositionCurrentBatchId
NtDCompositionDestroyChannel
NtDCompositionDestroyConnection
NtDCompositionDiscardFrame
NtDCompositionDuplicateHandleToProcess
NtDCompositionDwmSyncFlush
NtDCompositionGetAnimationTime
NtDCompositionGetChannels
NtDCompositionGetConnectionBatch
NtDCompositionGetDeletedResources
NtDCompositionGetFrameLegacyTokens
NtDCompositionGetFrameStatistics
NtDCompositionGetFrameSurfaceUpdates
NtDCompositionOpenSharedResource
NtDCompositionOpenSharedResourceHandle
NtDCompositionReferenceSharedResourceOnDwmChannel
NtDCompositionRegisterThumbnailVisual
NtDCompositionRegisterVirtualDesktopVisual
NtDCompositionReleaseAllResources
NtDCompositionReleaseResource
NtDCompositionRemoveCrossDeviceVisualChild
NtDCompositionRemoveVisualChild
NtDCompositionReplaceVisualChildren
NtDCompositionRetireFrame
NtDCompositionSetChannelCommitCompletionEvent
NtDCompositionSetDebugCounter
NtDCompositionSetMessageKey
NtDCompositionSetResourceAnimationProperty
NtDCompositionSetResourceBufferProperty
NtDCompositionSetResourceDeletedNotificationTag
NtDCompositionSetResourceFloatProperty
NtDCompositionSetResourceHandleProperty
NtDCompositionSetResourceIntegerProperty
NtDCompositionSetResourceReferenceArrayProperty
NtDCompositionSetResourceReferenceProperty
NtDCompositionSetVisualInputSink
NtDCompositionSignalGpuFence
NtDCompositionSubmitDWMBatch
NtDCompositionSynchronize
NtDCompositionTelemetryAnimationScenarioBegin
NtDCompositionTelemetryAnimationScenarioReference
NtDCompositionTelemetryAnimationScenarioUnreference
NtDCompositionTelemetrySetApplicationId
NtDCompositionTelemetryTouchInteractionBegin
NtDCompositionTelemetryTouchInteractionEnd
NtDCompositionTelemetryTouchInteractionUpdate
NtDCompositionWaitForChannel
NtDuplicateCompositionInputSink
NtGdiAbortDoc
NtGdiAbortPath
NtGdiAddEmbFontToDC
NtGdiAddFontResourceW
NtGdiAddRemoteFontToDC
NtGdiAddRemoteMMInstanceToDC
NtGdiAngleArc
NtGdiAnyLinkedFonts
NtGdiArcInternal
NtGdiBRUSHOBJ_DeleteRbrush
NtGdiBRUSHOBJ_hGetColorTransform
NtGdiBRUSHOBJ_pvAllocRbrush
NtGdiBRUSHOBJ_pvGetRbrush
NtGdiBRUSHOBJ_ulGetBrushColor
NtGdiBeginGdiRendering
NtGdiCLIPOBJ_bEnum
NtGdiCLIPOBJ_cEnumStart
NtGdiCLIPOBJ_ppoGetPath
NtGdiCancelDC
NtGdiChangeGhostFont
NtGdiCheckBitmapBits
NtGdiClearBitmapAttributes
NtGdiClearBrushAttributes
NtGdiColorCorrectPalette
NtGdiConfigureOPMProtectedOutput
NtGdiConvertMetafileRect
NtGdiCreateBitmapFromDxSurface
NtGdiCreateBitmapFromDxSurface2
NtGdiCreateColorTransform
NtGdiCreateEllipticRgn
NtGdiCreateHatchBrushInternal
NtGdiCreateMetafileDC
NtGdiCreateOPMProtectedOutputs
NtGdiCreateRoundRectRgn
NtGdiCreateServerMetaFile
NtGdiCreateSessionMappedDIBSection
NtGdiD3dContextCreate
NtGdiD3dContextDestroy
NtGdiD3dContextDestroyAll
NtGdiD3dValidateTextureStageState
NtGdiDDCCIGetCapabilitiesString
NtGdiDDCCIGetCapabilitiesStringLength
NtGdiDDCCIGetTimingReport
NtGdiDDCCIGetVCPFeature
NtGdiDDCCISaveCurrentSettings
NtGdiDDCCISetVCPFeature
NtGdiDdAddAttachedSurface
NtGdiDdAlphaBlt
NtGdiDdAttachSurface
NtGdiDdBeginMoCompFrame
NtGdiDdCanCreateD3DBuffer
NtGdiDdColorControl
NtGdiDdCreateD3DBuffer
NtGdiDdCreateDirectDrawObject
NtGdiDdCreateFullscreenSprite
NtGdiDdCreateMoComp
NtGdiDdDDIAbandonSwapChain
NtGdiDdDDIAcquireKeyedMutex
NtGdiDdDDIAcquireKeyedMutex2
NtGdiDdDDIAcquireSwapChain
NtGdiDdDDICacheHybridQueryValue
NtGdiDdDDIChangeVideoMemoryReservation
NtGdiDdDDICheckExclusiveOwnership
NtGdiDdDDICheckMonitorPowerState
NtGdiDdDDICheckMultiPlaneOverlaySupport
NtGdiDdDDICheckMultiPlaneOverlaySupport2
NtGdiDdDDICheckOcclusion
NtGdiDdDDICheckSharedResourceAccess
NtGdiDdDDICheckVidPnExclusiveOwnership
NtGdiDdDDICloseAdapter
NtGdiDdDDIConfigureSharedResource
NtGdiDdDDICreateAllocation
NtGdiDdDDICreateContext
NtGdiDdDDICreateContextVirtual
NtGdiDdDDICreateDCFromMemory
NtGdiDdDDICreateDevice
NtGdiDdDDICreateKeyedMutex
NtGdiDdDDICreateKeyedMutex2
NtGdiDdDDICreateOutputDupl
NtGdiDdDDICreateOverlay
NtGdiDdDDICreatePagingQueue
NtGdiDdDDICreateSwapChain
NtGdiDdDDICreateSynchronizationObject
NtGdiDdDDIDestroyAllocation
NtGdiDdDDIDestroyAllocation2
NtGdiDdDDIDestroyContext
NtGdiDdDDIDestroyDCFromMemory
NtGdiDdDDIDestroyDevice
NtGdiDdDDIDestroyKeyedMutex
NtGdiDdDDIDestroyOutputDupl
NtGdiDdDDIDestroyOverlay
NtGdiDdDDIDestroyPagingQueue
NtGdiDdDDIDestroySynchronizationObject
NtGdiDdDDIEnumAdapters
NtGdiDdDDIEnumAdapters2
NtGdiDdDDIEscape
NtGdiDdDDIEvict
NtGdiDdDDIFlipOverlay
NtGdiDdDDIFreeGpuVirtualAddress
NtGdiDdDDIGetCachedHybridQueryValue
NtGdiDdDDIGetContextInProcessSchedulingPriority
NtGdiDdDDIGetContextSchedulingPriority
NtGdiDdDDIGetDWMVerticalBlankEvent
NtGdiDdDDIGetDeviceState
NtGdiDdDDIGetDisplayModeList
NtGdiDdDDIGetMultisampleMethodList
NtGdiDdDDIGetOverlayState
NtGdiDdDDIGetPresentHistory
NtGdiDdDDIGetPresentQueueEvent
NtGdiDdDDIGetProcessSchedulingPriorityClass
NtGdiDdDDIGetRuntimeData
NtGdiDdDDIGetScanLine
NtGdiDdDDIGetSharedPrimaryHandle
NtGdiDdDDIGetSharedResourceAdapterLuid
NtGdiDdDDIGetSwapChainMetadata
NtGdiDdDDIInvalidateActiveVidPn
NtGdiDdDDIInvalidateCache
NtGdiDdDDILock
NtGdiDdDDILock2
NtGdiDdDDIMakeResident
NtGdiDdDDIMapGpuVirtualAddress
NtGdiDdDDINetDispGetNextChunkInfo
NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus
NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport
NtGdiDdDDINetDispStartMiracastDisplayDevice
NtGdiDdDDINetDispStopMiracastDisplayDevice
NtGdiDdDDINetDispStopSessions
NtGdiDdDDIOfferAllocations
NtGdiDdDDIOpenAdapterFromDeviceName
NtGdiDdDDIOpenAdapterFromHdc
NtGdiDdDDIOpenAdapterFromLuid
NtGdiDdDDIOpenKeyedMutex
NtGdiDdDDIOpenKeyedMutex2
NtGdiDdDDIOpenNtHandleFromName
NtGdiDdDDIOpenResource
NtGdiDdDDIOpenResourceFromNtHandle
NtGdiDdDDIOpenSwapChain
NtGdiDdDDIOpenSyncObjectFromNtHandle
NtGdiDdDDIOpenSyncObjectFromNtHandle2
NtGdiDdDDIOpenSyncObjectNtHandleFromName
NtGdiDdDDIOpenSynchronizationObject
NtGdiDdDDIOutputDuplGetFrameInfo
NtGdiDdDDIOutputDuplGetMetaData
NtGdiDdDDIOutputDuplGetPointerShapeData
NtGdiDdDDIOutputDuplPresent
NtGdiDdDDIOutputDuplReleaseFrame
NtGdiDdDDIPinDirectFlipResources
NtGdiDdDDIPollDisplayChildren
NtGdiDdDDIPresent
NtGdiDdDDIPresentMultiPlaneOverlay
NtGdiDdDDIPresentMultiPlaneOverlay2
NtGdiDdDDIQueryAdapterInfo
NtGdiDdDDIQueryAllocationResidency
NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName
NtGdiDdDDIQueryResourceInfo
NtGdiDdDDIQueryResourceInfoFromNtHandle
NtGdiDdDDIQueryStatistics
NtGdiDdDDIQueryVideoMemoryInfo
NtGdiDdDDIReclaimAllocations
NtGdiDdDDIReclaimAllocations2
NtGdiDdDDIReleaseKeyedMutex
NtGdiDdDDIReleaseKeyedMutex2
NtGdiDdDDIReleaseProcessVidPnSourceOwners
NtGdiDdDDIReleaseSwapChain
NtGdiDdDDIRender
NtGdiDdDDIReserveGpuVirtualAddress
NtGdiDdDDISetAllocationPriority
NtGdiDdDDISetContextInProcessSchedulingPriority
NtGdiDdDDISetContextSchedulingPriority
NtGdiDdDDISetDisplayMode
NtGdiDdDDISetDisplayPrivateDriverFormat
NtGdiDdDDISetDodIndirectSwapchain
NtGdiDdDDISetGammaRamp
NtGdiDdDDISetProcessSchedulingPriorityClass
NtGdiDdDDISetQueuedLimit
NtGdiDdDDISetStereoEnabled
NtGdiDdDDISetSyncRefreshCountWaitTarget
NtGdiDdDDISetVidPnSourceOwner
NtGdiDdDDISetVidPnSourceOwner1
NtGdiDdDDIShareObjects
NtGdiDdDDISharedPrimaryLockNotification
NtGdiDdDDISharedPrimaryUnLockNotification
NtGdiDdDDISignalSynchronizationObject
NtGdiDdDDISignalSynchronizationObjectFromCpu
NtGdiDdDDISignalSynchronizationObjectFromGpu
NtGdiDdDDISignalSynchronizationObjectFromGpu2
NtGdiDdDDISubmitCommand
NtGdiDdDDIUnlock
NtGdiDdDDIUnlock2
NtGdiDdDDIUnpinDirectFlipResources
NtGdiDdDDIUpdateGpuVirtualAddress
NtGdiDdDDIUpdateOverlay
NtGdiDdDDIWaitForIdle
NtGdiDdDDIWaitForSynchronizationObject
NtGdiDdDDIWaitForSynchronizationObjectFromCpu
NtGdiDdDDIWaitForSynchronizationObjectFromGpu
NtGdiDdDDIWaitForVerticalBlankEvent
NtGdiDdDDIWaitForVerticalBlankEvent2
NtGdiDdDeleteDirectDrawObject
NtGdiDdDestroyD3DBuffer
NtGdiDdDestroyFullscreenSprite
NtGdiDdDestroyMoComp
NtGdiDdEndMoCompFrame
NtGdiDdFlip
NtGdiDdFlipToGDISurface
NtGdiDdGetAvailDriverMemory
NtGdiDdGetBltStatus
NtGdiDdGetDC
NtGdiDdGetDriverInfo
NtGdiDdGetDriverState
NtGdiDdGetDxHandle
NtGdiDdGetFlipStatus
NtGdiDdGetInternalMoCompInfo
NtGdiDdGetMoCompBuffInfo
NtGdiDdGetMoCompFormats
NtGdiDdGetMoCompGuids
NtGdiDdGetScanLine
NtGdiDdLock
NtGdiDdNotifyFullscreenSpriteUpdate
NtGdiDdQueryDirectDrawObject
NtGdiDdQueryMoCompStatus
NtGdiDdQueryVisRgnUniqueness
NtGdiDdReenableDirectDrawObject
NtGdiDdReleaseDC
NtGdiDdRenderMoComp
NtGdiDdSetColorKey
NtGdiDdSetExclusiveMode
NtGdiDdSetGammaRamp
NtGdiDdSetOverlayPosition
NtGdiDdUnattachSurface
NtGdiDdUnlock
NtGdiDdUpdateOverlay
NtGdiDdWaitForVerticalBlank
NtGdiDeleteColorTransform
NtGdiDescribePixelFormat
NtGdiDestroyOPMProtectedOutput
NtGdiDestroyPhysicalMonitor
NtGdiDoBanding
NtGdiDrawEscape
NtGdiDvpAcquireNotification
NtGdiDvpCanCreateVideoPort
NtGdiDvpColorControl
NtGdiDvpCreateVideoPort
NtGdiDvpDestroyVideoPort
NtGdiDvpFlipVideoPort
NtGdiDvpGetVideoPortBandwidth
NtGdiDvpGetVideoPortConnectInfo
NtGdiDvpGetVideoPortField
NtGdiDvpGetVideoPortFlipStatus
NtGdiDvpGetVideoPortInputFormats
NtGdiDvpGetVideoPortLine
NtGdiDvpGetVideoPortOutputFormats
NtGdiDvpGetVideoSignalStatus
NtGdiDvpReleaseNotification
NtGdiDvpUpdateVideoPort
NtGdiDvpWaitForVideoPortSync
NtGdiDwmCreatedBitmapRemotingOutput
NtGdiDxgGenericThunk
NtGdiEllipse
NtGdiEnableEudc
NtGdiEndDoc
NtGdiEndGdiRendering
NtGdiEndPage
NtGdiEngAlphaBlend
NtGdiEngAssociateSurface
NtGdiEngBitBlt
NtGdiEngCheckAbort
NtGdiEngComputeGlyphSet
NtGdiEngCopyBits
NtGdiEngCreateBitmap
NtGdiEngCreateClip
NtGdiEngCreateDeviceBitmap
NtGdiEngCreateDeviceSurface
NtGdiEngCreatePalette
NtGdiEngDeleteClip
NtGdiEngDeletePalette
NtGdiEngDeletePath
NtGdiEngDeleteSurface
NtGdiEngEraseSurface
NtGdiEngFillPath
NtGdiEngGradientFill
NtGdiEngLineTo
NtGdiEngLockSurface
NtGdiEngMarkBandingSurface
NtGdiEngPaint
NtGdiEngPlgBlt
NtGdiEngStretchBlt
NtGdiEngStretchBltROP
NtGdiEngStrokeAndFillPath
NtGdiEngStrokePath
NtGdiEngTextOut
NtGdiEngTransparentBlt
NtGdiEngUnlockSurface
NtGdiEnumFonts
NtGdiEnumObjects
NtGdiEudcLoadUnloadLink
NtGdiExtFloodFill
NtGdiFONTOBJ_cGetAllGlyphHandles
NtGdiFONTOBJ_cGetGlyphs
NtGdiFONTOBJ_pQueryGlyphAttrs
NtGdiFONTOBJ_pfdg
NtGdiFONTOBJ_pifi
NtGdiFONTOBJ_pvTrueTypeFontFile
NtGdiFONTOBJ_pxoGetXform
NtGdiFONTOBJ_vGetInfo
NtGdiFlattenPath
NtGdiFontIsLinked
NtGdiForceUFIMapping
NtGdiFrameRgn
NtGdiFullscreenControl
NtGdiGetBoundsRect
NtGdiGetCOPPCompatibleOPMInformation
NtGdiGetCertificate
NtGdiGetCertificateSize
NtGdiGetCharABCWidthsW
NtGdiGetCharacterPlacementW
NtGdiGetColorAdjustment
NtGdiGetColorSpaceforBitmap
NtGdiGetCurrentDpiInfo
NtGdiGetDeviceCaps
NtGdiGetDeviceCapsAll
NtGdiGetDeviceGammaRamp
NtGdiGetDeviceWidth
NtGdiGetDhpdev
NtGdiGetETM
NtGdiGetEmbUFI
NtGdiGetEmbedFonts
NtGdiGetEudcTimeStampEx
NtGdiGetFontFileData
NtGdiGetFontFileInfo
NtGdiGetFontResourceInfoInternalW
NtGdiGetFontUnicodeRanges
NtGdiGetGlyphIndicesW
NtGdiGetGlyphIndicesWInternal
NtGdiGetGlyphOutline
NtGdiGetKerningPairs
NtGdiGetLinkedUFIs
NtGdiGetMiterLimit
NtGdiGetMonitorID
NtGdiGetNumberOfPhysicalMonitors
NtGdiGetOPMInformation
NtGdiGetOPMRandomNumber
NtGdiGetObjectBitmapHandle
NtGdiGetPath
NtGdiGetPerBandInfo
NtGdiGetPhysicalMonitorDescription
NtGdiGetPhysicalMonitors
NtGdiGetRealizationInfo
NtGdiGetServerMetaFileBits
NtGdiGetSpoolMessage
NtGdiGetStats
NtGdiGetStringBitmapW
NtGdiGetSuggestedOPMProtectedOutputArraySize
NtGdiGetTextExtentExW
NtGdiGetUFI
NtGdiGetUFIPathname
NtGdiGradientFill
NtGdiHLSurfGetInformation
NtGdiHLSurfSetInformation
NtGdiHT_Get8BPPFormatPalette
NtGdiHT_Get8BPPMaskPalette
NtGdiIcmBrushInfo
NtGdiInit
NtGdiInitSpool
NtGdiMakeFontDir
NtGdiMakeInfoDC
NtGdiMakeObjectUnXferable
NtGdiMakeObjectXferable
NtGdiMirrorWindowOrg
NtGdiMonoBitmap
NtGdiMoveTo
NtGdiOffsetClipRgn
NtGdiPATHOBJ_bEnum
NtGdiPATHOBJ_bEnumClipLines
NtGdiPATHOBJ_vEnumStart
NtGdiPATHOBJ_vEnumStartClipLines
NtGdiPATHOBJ_vGetBounds
NtGdiPathToRegion
NtGdiPlgBlt
NtGdiPolyDraw
NtGdiPolyTextOutW
NtGdiPtInRegion
NtGdiPtVisible
NtGdiQueryFonts
NtGdiRemoveFontResourceW
NtGdiRemoveMergeFont
NtGdiResetDC
NtGdiResizePalette
NtGdiRoundRect
NtGdiSTROBJ_bEnum
NtGdiSTROBJ_bEnumPositionsOnly
NtGdiSTROBJ_bGetAdvanceWidths
NtGdiSTROBJ_dwGetCodePage
NtGdiSTROBJ_vEnumStart
NtGdiScaleViewportExtEx
NtGdiScaleWindowExtEx
NtGdiSelectBrush
NtGdiSelectClipPath
NtGdiSelectPen
NtGdiSetBitmapAttributes
NtGdiSetBrushAttributes
NtGdiSetColorAdjustment
NtGdiSetColorSpace
NtGdiSetDeviceGammaRamp
NtGdiSetFontXform
NtGdiSetIcmMode
NtGdiSetLinkedUFIs
NtGdiSetMagicColors
NtGdiSetOPMSigningKeyAndSequenceNumbers
NtGdiSetPUMPDOBJ
NtGdiSetPixelFormat
NtGdiSetRectRgn
NtGdiSetSizeDevice
NtGdiSetSystemPaletteUse
NtGdiSetTextJustification
NtGdiSetUMPDSandboxState
NtGdiStartDoc
NtGdiStartPage
NtGdiStrokeAndFillPath
NtGdiStrokePath
NtGdiSwapBuffers
NtGdiTransparentBlt
NtGdiUMPDEngFreeUserMem
NtGdiUnloadPrinterDriver
NtGdiUnmapMemFont
NtGdiUpdateColors
NtGdiUpdateTransform
NtGdiWidenPath
NtGdiXFORMOBJ_bApplyXform
NtGdiXFORMOBJ_iGetXform
NtGdiXLATEOBJ_cGetPalette
NtGdiXLATEOBJ_hGetColorTransform
NtGdiXLATEOBJ_iXlate
NtNotifyPresentToCompositionSurface
NtOpenCompositionSurfaceDirtyRegion
NtOpenCompositionSurfaceSectionInfo
NtOpenCompositionSurfaceSwapChainHandleInfo
NtQueryCompositionInputQueueAndTransform
NtQueryCompositionInputSink
NtQueryCompositionInputSinkLuid
NtQueryCompositionSurfaceBinding
NtQueryCompositionSurfaceRenderingRealization
NtQueryCompositionSurfaceStatistics
NtSetCompositionSurfaceBufferCompositionMode
NtSetCompositionSurfaceIndependentFlipInfo
NtSetCompositionSurfaceOutOfFrameDirectFlipNotification
NtSetCompositionSurfaceStatistics
NtTokenManagerCreateCompositionTokenHandle
NtTokenManagerDeleteOutstandingDirectFlipTokens
NtTokenManagerGetOutOfFrameDirectFlipSurfaceUpdates
NtTokenManagerOpenSectionAndEvents
NtTokenManagerThread
NtUnBindCompositionSurface
NtUpdateInputSinkTransforms
NtUserAcquireIAMKey
NtUserAddClipboardFormatListener
NtUserAssociateInputContext
NtUserAutoPromoteMouseInPointer
NtUserAutoRotateScreen
NtUserBlockInput
NtUserBuildHimcList
NtUserBuildPropList
NtUserCalculatePopupWindowPosition
NtUserCallHwndOpt
NtUserCanBrokerForceForeground
NtUserChangeDisplaySettings
NtUserChangeWindowMessageFilterEx
NtUserCheckAccessForIntegrityLevel
NtUserCheckProcessForClipboardAccess
NtUserCheckProcessSession
NtUserCheckWindowThreadDesktop
NtUserChildWindowFromPointEx
NtUserClearForeground
NtUserClipCursor
NtUserCompositionInputSinkLuidFromPoint
NtUserCreateDCompositionHwndTarget
NtUserCreateDesktopEx
NtUserCreateInputContext
NtUserCreateWindowStation
NtUserCtxDisplayIOCtl
NtUserDeferWindowPosAndBand
NtUserDelegateCapturePointers
NtUserDelegateInput
NtUserDestroyDCompositionHwndTarget
NtUserDestroyInputContext
NtUserDisableImmersiveOwner
NtUserDisableProcessWindowFiltering
NtUserDisableThreadIme
NtUserDiscardPointerFrameMessages
NtUserDisplayConfigGetDeviceInfo
NtUserDisplayConfigSetDeviceInfo
NtUserDoSoundConnect
NtUserDoSoundDisconnect
NtUserDragDetect
NtUserDragObject
NtUserDrawAnimatedRects
NtUserDrawCaption
NtUserDrawCaptionTemp
NtUserDrawMenuBarTemp
NtUserDwmGetRemoteSessionOcclusionEvent
NtUserDwmGetRemoteSessionOcclusionState
NtUserDwmStartRedirection
NtUserDwmStopRedirection
NtUserDwmValidateWindow
NtUserEnableIAMAccess
NtUserEnableMouseInPointer
NtUserEnableMouseInputForCursorSuppression
NtUserEnableTouchPad
NtUserEndMenu
NtUserEvent
NtUserFlashWindowEx
NtUserFrostCrashedWindow
NtUserGetAppImeLevel
NtUserGetAutoRotationState
NtUserGetCIMSSM
NtUserGetCaretPos
NtUserGetClipCursor
NtUserGetClipboardAccessToken
NtUserGetClipboardViewer
NtUserGetComboBoxInfo
NtUserGetCurrentInputMessageSource
NtUserGetCursorDims
NtUserGetCursorInfo
NtUserGetDManipHookInitFunction
NtUserGetDesktopID
NtUserGetDisplayAutoRotationPreferences
NtUserGetDisplayAutoRotationPreferencesByProcessId
NtUserGetDisplayConfigBufferSizes
NtUserGetDpiForMonitor
NtUserGetDpiSystemMetrics
NtUserGetGestureConfig
NtUserGetGestureExtArgs
NtUserGetGestureInfo
NtUserGetGuiResources
NtUserGetHimetricScaleFactorFromPixelLocation
NtUserGetImeHotKey
NtUserGetImeInfoEx
NtUserGetInputLocaleInfo
NtUserGetInternalWindowPos
NtUserGetKeyNameText
NtUserGetKeyboardLayoutName
NtUserGetLayeredWindowAttributes
NtUserGetListBoxInfo
NtUserGetMenuIndex
NtUserGetMenuItemRect
NtUserGetMouseMovePointsEx
NtUserGetPhysicalDeviceRect
NtUserGetPointerCursorId
NtUserGetPointerDevice
NtUserGetPointerDeviceCursors
NtUserGetPointerDeviceProperties
NtUserGetPointerDeviceRects
NtUserGetPointerDevices
NtUserGetPointerFrameArrivalTimes
NtUserGetPointerInfoList
NtUserGetPointerInputTransform
NtUserGetPointerType
NtUserGetPrecisionTouchPadConfiguration
NtUserGetPriorityClipboardFormat
NtUserGetProcessDpiAwareness
NtUserGetProcessUIContextInformation
NtUserGetQueueEventStatus
NtUserGetRawInputBuffer
NtUserGetRawInputData
NtUserGetRawInputDeviceInfo
NtUserGetRawInputDeviceList
NtUserGetRawPointerDeviceData
NtUserGetRegisteredRawInputDevices
NtUserGetTopLevelWindow
NtUserGetTouchInputInfo
NtUserGetTouchValidationStatus
NtUserGetUpdatedClipboardFormats
NtUserGetWOWClass
NtUserGetWindowBand
NtUserGetWindowCompositionAttribute
NtUserGetWindowCompositionInfo
NtUserGetWindowDisplayAffinity
NtUserGetWindowFeedbackSetting
NtUserGetWindowMinimizeRect
NtUserGetWindowRgnEx
NtUserGhostWindowFromHungWindow
NtUserHandleDelegatedInput
NtUserHardErrorControl
NtUserHidePointerContactVisualization
NtUserHiliteMenuItem
NtUserHungWindowFromGhostWindow
NtUserHwndQueryRedirectionInfo
NtUserHwndSetRedirectionInfo
NtUserImpersonateDdeClientWindow
NtUserInitTask
NtUserInitialize
NtUserInitializeClientPfnArrays
NtUserInitializeInputDeviceInjection
NtUserInitializePointerDeviceInjection
NtUserInitializeTouchInjection
NtUserInjectDeviceInput
NtUserInjectGesture
NtUserInjectPointerInput
NtUserInjectTouchInput
NtUserInternalClipCursor
NtUserInternalGetWindowIcon
NtUserIsMouseInPointerEnabled
NtUserIsMouseInputEnabled
NtUserIsTopLevelWindow
NtUserIsTouchWindow
NtUserLayoutCompleted
NtUserLinkDpiCursor
NtUserLoadKeyboardLayoutEx
NtUserLockWindowStation
NtUserLockWorkStation
NtUserLogicalToPerMonitorDPIPhysicalPoint
NtUserLogicalToPhysicalPoint
NtUserMNDragLeave
NtUserMNDragOver
NtUserMagControl
NtUserMagGetContextInformation
NtUserMagSetContextInformation
NtUserMenuItemFromPoint
NtUserMinMaximize
NtUserModifyWindowTouchCapability
NtUserNotifyIMEStatus
NtUserOpenInputDesktop
NtUserOpenThreadDesktop
NtUserPaintMonitor
NtUserPerMonitorDPIPhysicalToLogicalPoint
NtUserPhysicalToLogicalPoint
NtUserPrintWindow
NtUserPromoteMouseInPointer
NtUserPromotePointer
NtUserQueryBSDRWindow
NtUserQueryDisplayConfig
NtUserQueryInformationThread
NtUserQueryInputContext
NtUserQuerySendMessage
NtUserRealChildWindowFromPoint
NtUserRealWaitMessageEx
NtUserRegisterBSDRWindow
NtUserRegisterDManipHook
NtUserRegisterEdgy
NtUserRegisterErrorReportingDialog
NtUserRegisterHotKey
NtUserRegisterManipulationThread
NtUserRegisterPointerDeviceNotifications
NtUserRegisterPointerInputTarget
NtUserRegisterRawInputDevices
NtUserRegisterServicesProcess
NtUserRegisterSessionPort
NtUserRegisterShellPTPListener
NtUserRegisterTasklist
NtUserRegisterTouchHitTestingWindow
NtUserRegisterTouchPadCapable
NtUserRegisterUserApiHook
NtUserRemoteConnect
NtUserRemoteRedrawRectangle
NtUserRemoteRedrawScreen
NtUserRemoteStopScreenUpdates
NtUserRemoveClipboardFormatListener
NtUserReportInertia
NtUserResolveDesktopForWOW
NtUserSendEventMessage
NtUserSetActivationFilter
NtUserSetActiveProcessForMonitor
NtUserSetAppImeLevel
NtUserSetAutoRotation
NtUserSetBrokeredForeground
NtUserSetCalibrationData
NtUserSetChildWindowNoActivate
NtUserSetClassWord
NtUserSetCursorContents
NtUserSetDisplayAutoRotationPreferences
NtUserSetDisplayConfig
NtUserSetDisplayMapping
NtUserSetFallbackForeground
NtUserSetFeatureReportResponse
NtUserSetGestureConfig
NtUserSetImeHotKey
NtUserSetImeInfoEx
NtUserSetImeOwnerWindow
NtUserSetImmersiveBackgroundWindow
NtUserSetInternalWindowPos
NtUserSetLayeredWindowAttributes
NtUserSetManipulationInputTarget
NtUserSetMenu
NtUserSetMenuContextHelpId
NtUserSetMenuFlagRtoL
NtUserSetMirrorRendering
NtUserSetObjectInformation
NtUserSetPrecisionTouchPadConfiguration
NtUserSetProcessDpiAwareness
NtUserSetProcessRestrictionExemption
NtUserSetProcessUIAccessZorder
NtUserSetShellWindowEx
NtUserSetSysColors
NtUserSetSystemCursor
NtUserSetSystemTimer
NtUserSetThreadInputBlocked
NtUserSetThreadLayoutHandles
NtUserSetWindowBand
NtUserSetWindowCompositionAttribute
NtUserSetWindowCompositionTransition
NtUserSetWindowDisplayAffinity
NtUserSetWindowFeedbackSetting
NtUserSetWindowRgnEx
NtUserSetWindowStationUser
NtUserShowSystemCursor
NtUserShutdownBlockReasonCreate
NtUserShutdownBlockReasonQuery
NtUserShutdownReasonDestroy
NtUserSignalRedirectionStartComplete
NtUserSlicerControl
NtUserSoundSentry
NtUserSwitchDesktop
NtUserTestForInteractiveUser
NtUserTrackPopupMenuEx
NtUserTransformPoint
NtUserTransformRect
NtUserUndelegateInput
NtUserUnloadKeyboardLayout
NtUserUnlockWindowStation
NtUserUnregisterHotKey
NtUserUnregisterSessionPort
NtUserUnregisterUserApiHook
NtUserUpdateDefaultDesktopThumbnail
NtUserUpdateInputContext
NtUserUpdateInstance
NtUserUpdateLayeredWindow
NtUserUpdatePerUserSystemParameters
NtUserUpdateWindowInputSinkHints
NtUserUpdateWindowTransform
NtUserUserHandleGrantAccess
NtUserValidateHandleSecure
NtUserWaitAvailableMessageEx
NtUserWaitForInputIdle
NtUserWaitForMsgAndEvent
NtUserWaitForRedirectionStartComplete
NtUserWindowFromPhysicalPoint
NtValidateCompositionSurfaceHandle
NtUserSetClassLongPtr
NtUserSetWindowLongPtr

windows 10 Technical Preview ntoskrnl.exe exports

$
0
0
I see that MmLoadSystemImage & MmUnloadSystemImage now exported, he-he

AlpcGetHeaderSizew8.1w10tp
AlpcGetMessageAttributew8.1w10tp
AlpcInitializeMessageAttributew8.1w10tp
BgkDisplayCharacterw8.1w10tp
BgkGetConsoleStatew8.1w10tp
BgkGetCursorStatew8.1w10tp
BgkSetCursorw8.1w10tp
CcAddDirtyPagesToExternalCachew8.1w10tp
CcAsyncCopyRead w10tp
CcCanIWritew8.1w10tp
CcCoherencyFlushAndPurgeCachew8.1w10tp
CcCopyReadw8.1w10tp
CcCopyReadExw8.1w10tp
CcCopyWritew8.1w10tp
CcCopyWriteExw8.1w10tp
CcCopyWriteWontFlushw8.1w10tp
CcDeductDirtyPagesFromExternalCachew8.1w10tp
CcDeferWritew8.1w10tp
CcFastCopyReadw8.1w10tp
CcFastCopyWritew8.1w10tp
CcFastMdlReadWaitw8.1w10tp
CcFlushCachew8.1w10tp
CcFlushCacheToLsnw8.1w10tp
CcGetDirtyPagesw8.1w10tp
CcGetFileObjectFromBcbw8.1w10tp
CcGetFileObjectFromSectionPtrsw8.1w10tp
CcGetFileObjectFromSectionPtrsRefw8.1w10tp
CcGetFlushedValidDataw8.1w10tp
CcGetLsnForFileObjectw8.1w10tp
CcInitializeCacheMapw8.1w10tp
CcIsThereDirtyDataw8.1w10tp
CcIsThereDirtyDataExw8.1w10tp
CcIsThereDirtyLoggedPagesw8.1w10tp
CcMapDataw8.1w10tp
CcMdlReadw8.1w10tp
CcMdlReadCompletew8.1w10tp
CcMdlWriteAbortw8.1w10tp
CcMdlWriteCompletew8.1w10tp
CcPinMappedDataw8.1w10tp
CcPinReadw8.1w10tp
CcPrepareMdlWritew8.1w10tp
CcPreparePinWritew8.1w10tp
CcPurgeCacheSectionw8.1w10tp
CcRegisterExternalCachew8.1w10tp
CcRemapBcbw8.1w10tp
CcRepinBcbw8.1w10tp
CcScheduleReadAheadw8.1w10tp
CcScheduleReadAheadExw8.1w10tp
CcSetAdditionalCacheAttributesw8.1w10tp
CcSetAdditionalCacheAttributesExw8.1w10tp
CcSetBcbOwnerPointerw8.1w10tp
CcSetDirtyPageThresholdw8.1w10tp
CcSetDirtyPinnedDataw8.1w10tp
CcSetFileSizesw8.1w10tp
CcSetFileSizesExw8.1w10tp
CcSetLogHandleForFilew8.1w10tp
CcSetLogHandleForFileExw8.1w10tp
CcSetLoggedDataThresholdw8.1w10tp
CcSetParallelFlushFilew8.1w10tp
CcSetReadAheadGranularityw8.1w10tp
CcSetReadAheadGranularityExw8.1w10tp
CcTestControlw8.1w10tp
CcUninitializeCacheMapw8.1w10tp
CcUnmapFileOffsetFromSystemCachew8.1w10tp
CcUnpinDataw8.1w10tp
CcUnpinDataForThreadw8.1w10tp
CcUnpinRepinnedBcbw8.1w10tp
CcUnregisterExternalCachew8.1w10tp
CcWaitForCurrentLazyWriterActivityw8.1w10tp
CcZeroDataw8.1w10tp
CcZeroDataOnDiskw8.1w10tp
CmCallbackGetKeyObjectIDw8.1w10tp
CmCallbackGetKeyObjectIDExw8.1w10tp
CmCallbackReleaseKeyObjectIDExw8.1w10tp
CmGetBoundTransactionw8.1w10tp
CmGetCallbackVersionw8.1w10tp
CmKeyObjectTypew8.1w10tp
CmRegisterCallbackw8.1w10tp
CmRegisterCallbackExw8.1w10tp
CmSetCallbackObjectContextw8.1w10tp
CmUnRegisterCallbackw8.1w10tp
DbgBreakPointw8.1w10tp
DbgBreakPointWithStatusw8.1w10tp
DbgCommandStringw8.1w10tp
DbgLoadImageSymbolsw8.1w10tp
DbgPrintw8.1w10tp
DbgPrintExw8.1w10tp
DbgPrintReturnControlCw8.1w10tp
DbgPromptw8.1w10tp
DbgQueryDebugFilterStatew8.1w10tp
DbgSetDebugFilterStatew8.1w10tp
DbgSetDebugPrintCallbackw8.1w10tp
DbgkLkmdRegisterCallbackw8.1w10tp
DbgkLkmdUnregisterCallbackw8.1w10tp
DbgkWerCaptureLiveKernelDump w10tp
EmClientQueryRuleStatew8.1w10tp
EmClientRuleDeregisterNotificationw8.1w10tp
EmClientRuleEvaluatew8.1w10tp
EmClientRuleRegisterNotificationw8.1w10tp
EmProviderDeregisterw8.1w10tp
EmProviderDeregisterEntryw8.1w10tp
EmProviderRegisterw8.1w10tp
EmProviderRegisterEntryw8.1w10tp
EmpProviderRegisterw8.1w10tp
EtwActivityIdControlw8.1w10tp
EtwEnableTracew8.1w10tp
EtwEventEnabledw8.1w10tp
EtwProviderEnabledw8.1w10tp
EtwRegisterw8.1w10tp
EtwRegisterClassicProviderw8.1w10tp
EtwSendTraceBufferw8.1w10tp
EtwSetInformation w10tp
EtwUnregisterw8.1w10tp
EtwWritew8.1w10tp
EtwWriteEndScenariow8.1w10tp
EtwWriteExw8.1w10tp
EtwWriteStartScenariow8.1w10tp
EtwWriteStringw8.1w10tp
EtwWriteTransferw8.1w10tp
ExAcquireAutoExpandPushLockExclusive w10tp
ExAcquireAutoExpandPushLockShared w10tp
ExAcquireCacheAwarePushLockExclusivew8.1w10tp
ExAcquireCacheAwarePushLockExclusiveExw8.1w10tp
ExAcquireCacheAwarePushLockSharedExw8.1w10tp
ExAcquireFastMutexw8.1w10tp
ExAcquireFastMutexUnsafew8.1w10tp
ExAcquirePushLockExclusiveExw8.1w10tp
ExAcquirePushLockSharedExw8.1w10tp
ExAcquireResourceExclusiveLitew8.1w10tp
ExAcquireResourceSharedLitew8.1w10tp
ExAcquireRundownProtectionw8.1w10tp
ExAcquireRundownProtectionCacheAwarew8.1w10tp
ExAcquireRundownProtectionCacheAwareExw8.1w10tp
ExAcquireRundownProtectionExw8.1w10tp
ExAcquireSharedStarveExclusivew8.1w10tp
ExAcquireSharedWaitForExclusivew8.1w10tp
ExAcquireSpinLockExclusivew8.1w10tp
ExAcquireSpinLockExclusiveAtDpcLevelw8.1w10tp
ExAcquireSpinLockSharedw8.1w10tp
ExAcquireSpinLockSharedAtDpcLevelw8.1w10tp
ExAllocateAutoExpandPushLock w10tp
ExAllocateCacheAwarePushLockw8.1w10tp
ExAllocateCacheAwareRundownProtectionw8.1w10tp
ExAllocateFromPagedLookasideListw8.1w10tp
ExAllocatePoolw8.1w10tp
ExAllocatePoolWithQuotaw8.1w10tp
ExAllocatePoolWithQuotaTagw8.1w10tp
ExAllocatePoolWithTagw8.1w10tp
ExAllocatePoolWithTagPriorityw8.1w10tp
ExAllocateTimerw8.1w10tp
ExBlockOnAddressPushLockw8.1w10tp
ExBlockPushLockw8.1w10tp
ExCancelTimerw8.1w10tp
ExCleanupAutoExpandPushLock w10tp
ExCleanupRundownProtectionCacheAware w10tp
ExCompositionObjectTypew8.1w10tp
ExConvertExclusiveToSharedLitew8.1w10tp
ExCreateCallbackw8.1w10tp
ExDeleteLookasideListExw8.1w10tp
ExDeleteNPagedLookasideListw8.1w10tp
ExDeletePagedLookasideListw8.1w10tp
ExDeleteResourceLitew8.1w10tp
ExDeleteTimerw8.1w10tp
ExDesktopObjectTypew8.1w10tp
ExDisableResourceBoostLitew8.1w10tp
ExEnterCriticalRegionAndAcquireFastMutexUnsafew8.1w10tp
ExEnterCriticalRegionAndAcquireResourceExclusivew8.1w10tp
ExEnterCriticalRegionAndAcquireResourceSharedw8.1w10tp
ExEnterCriticalRegionAndAcquireSharedWaitForExclusivew8.1w10tp
ExEnterPriorityRegionAndAcquireResourceExclusivew8.1w10tp
ExEnterPriorityRegionAndAcquireResourceSharedw8.1w10tp
ExEnumHandleTablew8.1w10tp
ExEventObjectTypew8.1w10tp
ExExtendZonew8.1w10tp
ExFetchLicenseDataw8.1w10tp
ExFlushLookasideListExw8.1w10tp
ExFreeAutoExpandPushLock w10tp
ExFreeCacheAwarePushLockw8.1w10tp
ExFreeCacheAwareRundownProtectionw8.1w10tp
ExFreePoolw8.1w10tp
ExFreePoolWithTagw8.1w10tp
ExFreeToPagedLookasideListw8.1w10tp
ExGetCurrentProcessorCountsw8.1w10tp
ExGetCurrentProcessorCpuUsagew8.1w10tp
ExGetExclusiveWaiterCountw8.1w10tp
ExGetFirmwareEnvironmentVariablew8.1w10tp
ExGetLicenseTamperStatew8.1w10tp
ExGetPreviousModew8.1w10tp
ExGetSharedWaiterCountw8.1w10tp
ExInitializeAutoExpandPushLock w10tp
ExInitializeLookasideListExw8.1w10tp
ExInitializeNPagedLookasideListw8.1w10tp
ExInitializePagedLookasideListw8.1w10tp
ExInitializePushLockw8.1w10tp
ExInitializeResourceLitew8.1w10tp
ExInitializeRundownProtectionw8.1w10tp
ExInitializeRundownProtectionCacheAwarew8.1w10tp
ExInitializeRundownProtectionCacheAwareEx w10tp
ExInitializeZonew8.1w10tp
ExInterlockedAddLargeIntegerw8.1w10tp
ExInterlockedAddLargeStatisticw8.1w10tp
ExInterlockedAddUlongw8.1w10tp
ExInterlockedCompareExchange64w8.1w10tp
ExInterlockedDecrementLongw8.1w10tp
ExInterlockedExchangeUlongw8.1w10tp
ExInterlockedExtendZonew8.1w10tp
ExInterlockedFlushSListw8.1w10tp
ExInterlockedIncrementLongw8.1w10tp
ExInterlockedInsertHeadListw8.1w10tp
ExInterlockedInsertTailListw8.1w10tp
ExInterlockedPopEntryListw8.1w10tp
ExInterlockedPopEntrySListw8.1w10tp
ExInterlockedPushEntryListw8.1w10tp
ExInterlockedPushEntrySListw8.1w10tp
ExInterlockedRemoveHeadListw8.1w10tp
ExIsManufacturingModeEnabled w10tp
ExIsProcessorFeaturePresentw8.1w10tp
ExIsResourceAcquiredExclusiveLitew8.1w10tp
ExIsResourceAcquiredSharedLitew8.1w10tp
ExLocalTimeToSystemTimew8.1w10tp
ExNotifyBootDeviceRemovalw8.1w10tp
ExNotifyCallbackw8.1w10tp
ExQueryFastCacheAppOriginw8.1w10tp
ExQueryFastCacheDevLicensew8.1w10tp
ExQueryPoolBlockSizew8.1w10tp
ExQueryTimerResolutionw8.1w10tp
ExQueryWnfStateDataw8.1w10tp
ExQueueWorkItemw8.1w10tp
ExRaiseAccessViolationw8.1w10tp
ExRaiseDatatypeMisalignmentw8.1w10tp
ExRaiseExceptionw8.1w10tp
ExRaiseHardErrorw8.1w10tp
ExRaiseStatusw8.1w10tp
ExRawInputManagerObjectType w10tp
ExReInitializeRundownProtectionw8.1w10tp
ExReInitializeRundownProtectionCacheAwarew8.1w10tp
ExRealTimeIsUniversalw8.1w10tp
ExRegisterBootDevicew8.1w10tp
ExRegisterCallbackw8.1w10tp
ExRegisterExtensionw8.1w10tp
ExReinitializeResourceLitew8.1w10tp
ExReleaseAutoExpandPushLockExclusive w10tp
ExReleaseAutoExpandPushLockShared w10tp
ExReleaseCacheAwarePushLockExclusivew8.1w10tp
ExReleaseCacheAwarePushLockExclusiveExw8.1w10tp
ExReleaseCacheAwarePushLockSharedExw8.1w10tp
ExReleaseFastMutexw8.1w10tp
ExReleaseFastMutexUnsafew8.1w10tp
ExReleaseFastMutexUnsafeAndLeaveCriticalRegionw8.1w10tp
ExReleasePushLockExw8.1w10tp
ExReleasePushLockExclusiveExw8.1w10tp
ExReleasePushLockSharedExw8.1w10tp
ExReleaseResourceAndLeaveCriticalRegionw8.1w10tp
ExReleaseResourceAndLeavePriorityRegionw8.1w10tp
ExReleaseResourceForThreadLitew8.1w10tp
ExReleaseResourceLitew8.1w10tp
ExReleaseRundownProtectionw8.1w10tp
ExReleaseRundownProtectionCacheAwarew8.1w10tp
ExReleaseRundownProtectionCacheAwareExw8.1w10tp
ExReleaseRundownProtectionExw8.1w10tp
ExReleaseSpinLockExclusivew8.1w10tp
ExReleaseSpinLockExclusiveFromDpcLevelw8.1w10tp
ExReleaseSpinLockSharedw8.1w10tp
ExReleaseSpinLockSharedFromDpcLevelw8.1w10tp
ExRundownCompletedw8.1w10tp
ExRundownCompletedCacheAwarew8.1w10tp
ExSemaphoreObjectTypew8.1w10tp
ExSetFirmwareEnvironmentVariablew8.1w10tp
ExSetLicenseTamperStatew8.1w10tp
ExSetResourceOwnerPointerw8.1w10tp
ExSetResourceOwnerPointerExw8.1w10tp
ExSetTimerw8.1w10tp
ExSetTimerResolutionw8.1w10tp
ExShareAddressSpaceWithDevicew8.1 
ExSizeOfAutoExpandPushLock w10tp
ExSizeOfRundownProtectionCacheAwarew8.1w10tp
ExSubscribeWnfStateChangew8.1w10tp
ExSystemExceptionFilterw8.1w10tp
ExSystemTimeToLocalTimew8.1w10tp
ExTimedWaitForUnblockPushLockw8.1w10tp
ExTimerObjectType w10tp
ExTryAcquireAutoExpandPushLockExclusive w10tp
ExTryAcquireAutoExpandPushLockShared w10tp
ExTryAcquireCacheAwarePushLockExclusiveEx w10tp
ExTryAcquireCacheAwarePushLockSharedEx w10tp
ExTryAcquirePushLockExclusiveExw8.1w10tp
ExTryAcquirePushLockSharedExw8.1w10tp
ExTryConvertPushLockSharedToExclusiveExw8.1w10tp
ExTryConvertSharedSpinLockExclusivew8.1w10tp
ExTryQueueWorkItemw8.1w10tp
ExTryToAcquireFastMutexw8.1w10tp
ExTryToAcquireResourceExclusiveLitew8.1w10tp
ExUnblockOnAddressPushLockExw8.1w10tp
ExUnblockPushLockExw8.1w10tp
ExUnregisterCallbackw8.1w10tp
ExUnregisterExtensionw8.1w10tp
ExUnsubscribeWnfStateChangew8.1w10tp
ExUuidCreatew8.1w10tp
ExVerifySuitew8.1w10tp
ExWaitForRundownProtectionReleasew8.1w10tp
ExWaitForRundownProtectionReleaseCacheAwarew8.1w10tp
ExWaitForUnblockPushLockw8.1w10tp
ExWindowStationObjectTypew8.1w10tp
ExfAcquirePushLockExclusivew8.1w10tp
ExfAcquirePushLockSharedw8.1w10tp
ExfInterlockedAddUlongw8.1w10tp
ExfInterlockedCompareExchange64w8.1w10tp
ExfInterlockedInsertHeadListw8.1w10tp
ExfInterlockedInsertTailListw8.1w10tp
ExfInterlockedPopEntryListw8.1w10tp
ExfInterlockedPushEntryListw8.1w10tp
ExfInterlockedRemoveHeadListw8.1w10tp
ExfReleasePushLockw8.1w10tp
ExfReleasePushLockExclusivew8.1w10tp
ExfReleasePushLockSharedw8.1w10tp
ExfTryAcquirePushLockSharedw8.1w10tp
ExfTryToWakePushLockw8.1w10tp
ExfUnblockPushLockw8.1w10tp
Exfi386InterlockedDecrementLongw8.1w10tp
Exfi386InterlockedExchangeUlongw8.1w10tp
Exfi386InterlockedIncrementLongw8.1w10tp
Exi386InterlockedDecrementLongw8.1w10tp
Exi386InterlockedExchangeUlongw8.1w10tp
Exi386InterlockedIncrementLongw8.1w10tp
ExiAcquireFastMutexw8.1w10tp
ExiReleaseFastMutexw8.1w10tp
ExiTryToAcquireFastMutexw8.1w10tp
FirstEntrySListw8.1w10tp
FsRtlAcknowledgeEcpw8.1w10tp
FsRtlAcquireEofLockw8.1w10tp
FsRtlAcquireFileExclusivew8.1w10tp
FsRtlAcquireHeaderMutexw8.1w10tp
FsRtlAddBaseMcbEntryw8.1w10tp
FsRtlAddBaseMcbEntryExw8.1w10tp
FsRtlAddLargeMcbEntryw8.1w10tp
FsRtlAddMcbEntryw8.1w10tp
FsRtlAddToTunnelCachew8.1w10tp
FsRtlAllocateExtraCreateParameterw8.1w10tp
FsRtlAllocateExtraCreateParameterFromLookasideListw8.1w10tp
FsRtlAllocateExtraCreateParameterListw8.1w10tp
FsRtlAllocateFileLockw8.1w10tp
FsRtlAllocatePoolw8.1w10tp
FsRtlAllocatePoolWithQuotaw8.1w10tp
FsRtlAllocatePoolWithQuotaTagw8.1w10tp
FsRtlAllocatePoolWithTagw8.1w10tp
FsRtlAllocateResourcew8.1w10tp
FsRtlAreNamesEqualw8.1w10tp
FsRtlAreThereCurrentOrInProgressFileLocksw8.1w10tp
FsRtlAreThereWaitingFileLocksw8.1w10tp
FsRtlAreVolumeStartupApplicationsCompletew8.1w10tp
FsRtlBalanceReadsw8.1w10tp
FsRtlCancellableWaitForMultipleObjectsw8.1w10tp
FsRtlCancellableWaitForSingleObjectw8.1w10tp
FsRtlChangeBackingFileObjectw8.1w10tp
FsRtlCheckLockForOplockRequestw8.1w10tp
FsRtlCheckLockForReadAccessw8.1w10tp
FsRtlCheckLockForWriteAccessw8.1w10tp
FsRtlCheckOplockw8.1w10tp
FsRtlCheckOplockExw8.1w10tp
FsRtlCheckUpperOplockw8.1w10tp
FsRtlCopyReadw8.1w10tp
FsRtlCopyWritew8.1w10tp
FsRtlCreateSectionForDataScanw8.1w10tp
FsRtlCurrentBatchOplockw8.1w10tp
FsRtlCurrentOplockw8.1w10tp
FsRtlCurrentOplockHw8.1w10tp
FsRtlDeleteExtraCreateParameterLookasideListw8.1w10tp
FsRtlDeleteKeyFromTunnelCachew8.1w10tp
FsRtlDeleteTunnelCachew8.1w10tp
FsRtlDeregisterUncProviderw8.1w10tp
FsRtlDismountCompletew8.1w10tp
FsRtlDissectDbcsw8.1w10tp
FsRtlDissectNamew8.1w10tp
FsRtlDoesDbcsContainWildCardsw8.1w10tp
FsRtlDoesNameContainWildCardsw8.1w10tp
FsRtlFastCheckLockForReadw8.1w10tp
FsRtlFastCheckLockForWritew8.1w10tp
FsRtlFastUnlockAllw8.1w10tp
FsRtlFastUnlockAllByKeyw8.1w10tp
FsRtlFastUnlockSinglew8.1w10tp
FsRtlFindExtraCreateParameterw8.1w10tp
FsRtlFindInTunnelCachew8.1w10tp
FsRtlFreeExtraCreateParameterw8.1w10tp
FsRtlFreeExtraCreateParameterListw8.1w10tp
FsRtlFreeFileLockw8.1w10tp
FsRtlGetEcpListFromIrpw8.1w10tp
FsRtlGetFileNameInformationw8.1w10tp
FsRtlGetFileSizew8.1w10tp
FsRtlGetIoAtEofw8.1w10tp
FsRtlGetNextBaseMcbEntryw8.1w10tp
FsRtlGetNextExtraCreateParameterw8.1w10tp
FsRtlGetNextFileLockw8.1w10tp
FsRtlGetNextLargeMcbEntryw8.1w10tp
FsRtlGetNextMcbEntryw8.1w10tp
FsRtlGetSectorSizeInformationw8.1w10tp
FsRtlGetSupportedFeaturesw8.1w10tp
FsRtlGetVirtualDiskNestingLevelw8.1w10tp
FsRtlHeatInitw8.1w10tp
FsRtlHeatLogIow8.1w10tp
FsRtlHeatLogTierMove w10tp
FsRtlHeatUninitw8.1w10tp
FsRtlIncrementCcFastMdlReadWaitw8.1w10tp
FsRtlIncrementCcFastReadNoWaitw8.1w10tp
FsRtlIncrementCcFastReadNotPossiblew8.1w10tp
FsRtlIncrementCcFastReadResourceMissw8.1w10tp
FsRtlIncrementCcFastReadWaitw8.1w10tp
FsRtlInitExtraCreateParameterLookasideListw8.1w10tp
FsRtlInitializeBaseMcbw8.1w10tp
FsRtlInitializeBaseMcbExw8.1w10tp
FsRtlInitializeEofLockw8.1w10tp
FsRtlInitializeExtraCreateParameterw8.1w10tp
FsRtlInitializeExtraCreateParameterListw8.1w10tp
FsRtlInitializeFileLockw8.1w10tp
FsRtlInitializeLargeMcbw8.1w10tp
FsRtlInitializeMcbw8.1w10tp
FsRtlInitializeOplockw8.1w10tp
FsRtlInitializeTunnelCachew8.1w10tp
FsRtlInsertExtraCreateParameterw8.1w10tp
FsRtlInsertPerFileContextw8.1w10tp
FsRtlInsertPerFileObjectContextw8.1w10tp
FsRtlInsertPerStreamContextw8.1w10tp
FsRtlInsertReservedPerFileContextw8.1w10tp
FsRtlInsertReservedPerStreamContextw8.1w10tp
FsRtlIsDbcsInExpressionw8.1w10tp
FsRtlIsEcpAcknowledgedw8.1w10tp
FsRtlIsEcpFromUserModew8.1w10tp
FsRtlIsFatDbcsLegalw8.1w10tp
FsRtlIsHpfsDbcsLegalw8.1w10tp
FsRtlIsNameInExpressionw8.1w10tp
FsRtlIsNtstatusExpectedw8.1w10tp
FsRtlIsPagingFilew8.1w10tp
FsRtlIsSystemPagingFilew8.1w10tp
FsRtlIsTotalDeviceFailurew8.1w10tp
FsRtlIssueDeviceIoControlw8.1w10tp
FsRtlKernelFsControlFilew8.1w10tp
FsRtlLegalAnsiCharacterArrayw8.1w10tp
FsRtlLogCcFlushErrorw8.1w10tp
FsRtlLookupBaseMcbEntryw8.1w10tp
FsRtlLookupLargeMcbEntryw8.1w10tp
FsRtlLookupLastBaseMcbEntryw8.1w10tp
FsRtlLookupLastBaseMcbEntryAndIndexw8.1w10tp
FsRtlLookupLastLargeMcbEntryw8.1w10tp
FsRtlLookupLastLargeMcbEntryAndIndexw8.1w10tp
FsRtlLookupLastMcbEntryw8.1w10tp
FsRtlLookupMcbEntryw8.1w10tp
FsRtlLookupPerFileContextw8.1w10tp
FsRtlLookupPerFileObjectContextw8.1w10tp
FsRtlLookupPerStreamContextInternalw8.1w10tp
FsRtlLookupReservedPerFileContextw8.1w10tp
FsRtlLookupReservedPerStreamContextw8.1w10tp
FsRtlMdlReadw8.1w10tp
FsRtlMdlReadCompletew8.1w10tp
FsRtlMdlReadCompleteDevw8.1w10tp
FsRtlMdlReadDevw8.1w10tp
FsRtlMdlReadExw8.1w10tp
FsRtlMdlWriteCompletew8.1w10tp
FsRtlMdlWriteCompleteDevw8.1w10tp
FsRtlMupGetProviderIdFromNamew8.1w10tp
FsRtlMupGetProviderInfoFromFileObjectw8.1w10tp
FsRtlNormalizeNtstatusw8.1w10tp
FsRtlNotifyChangeDirectoryw8.1w10tp
FsRtlNotifyCleanupw8.1w10tp
FsRtlNotifyCleanupAllw8.1w10tp
FsRtlNotifyFilterChangeDirectoryw8.1w10tp
FsRtlNotifyFilterChangeDirectoryLite w10tp
FsRtlNotifyFilterReportChangew8.1w10tp
FsRtlNotifyFilterReportChangeLite w10tp
FsRtlNotifyFullChangeDirectoryw8.1w10tp
FsRtlNotifyFullReportChangew8.1w10tp
FsRtlNotifyInitializeSyncw8.1w10tp
FsRtlNotifyReportChangew8.1w10tp
FsRtlNotifyUninitializeSyncw8.1w10tp
FsRtlNotifyVolumeEventw8.1w10tp
FsRtlNotifyVolumeEventExw8.1w10tp
FsRtlNumberOfRunsInBaseMcbw8.1w10tp
FsRtlNumberOfRunsInLargeMcbw8.1w10tp
FsRtlNumberOfRunsInMcbw8.1w10tp
FsRtlOplockBreakHw8.1w10tp
FsRtlOplockBreakToNonew8.1w10tp
FsRtlOplockBreakToNoneExw8.1w10tp
FsRtlOplockFsctrlw8.1w10tp
FsRtlOplockFsctrlExw8.1w10tp
FsRtlOplockIsFastIoPossiblew8.1w10tp
FsRtlOplockIsSharedRequestw8.1w10tp
FsRtlOplockKeysEqualw8.1w10tp
FsRtlPostPagingFileStackOverfloww8.1w10tp
FsRtlPostStackOverfloww8.1w10tp
FsRtlPrepareMdlWritew8.1w10tp
FsRtlPrepareMdlWriteDevw8.1w10tp
FsRtlPrepareMdlWriteExw8.1w10tp
FsRtlPrepareToReuseEcpw8.1w10tp
FsRtlPrivateLockw8.1w10tp
FsRtlProcessFileLockw8.1w10tp
FsRtlQueryCachedVdlw8.1w10tp
FsRtlQueryKernelEaFilew8.1w10tp
FsRtlQueryMaximumVirtualDiskNestingLevelw8.1w10tp
FsRtlRangeTrackAddEntryw8.1 
FsRtlRangeTrackBufferExtentsw8.1 
FsRtlRangeTrackCopyRangesw8.1 
FsRtlRangeTrackDefineRangew8.1 
FsRtlRangeTrackDetachFromSourcew8.1 
FsRtlRangeTrackGetNextEntryw8.1 
FsRtlRangeTrackInitializew8.1 
FsRtlRangeTrackLookupEntryw8.1 
FsRtlRangeTrackLookupLastEntryw8.1 
FsRtlRangeTrackNumberOfRangesw8.1 
FsRtlRangeTrackNumberOfRunsInRangew8.1 
FsRtlRangeTrackRemoveEntryw8.1 
FsRtlRangeTrackResetw8.1 
FsRtlRangeTrackUninitializew8.1 
FsRtlRangeTrackUnloadRangew8.1 
FsRtlRegisterFileSystemFilterCallbacksw8.1w10tp
FsRtlRegisterFltMgrCallsw8.1w10tp
FsRtlRegisterMupCallsw8.1w10tp
FsRtlRegisterUncProviderw8.1w10tp
FsRtlRegisterUncProviderExw8.1w10tp
FsRtlReleaseEofLockw8.1w10tp
FsRtlReleaseFilew8.1w10tp
FsRtlReleaseFileNameInformationw8.1w10tp
FsRtlReleaseHeaderMutexw8.1w10tp
FsRtlRemoveBaseMcbEntryw8.1w10tp
FsRtlRemoveDotsFromPathw8.1w10tp
FsRtlRemoveExtraCreateParameterw8.1w10tp
FsRtlRemoveLargeMcbEntryw8.1w10tp
FsRtlRemoveMcbEntryw8.1w10tp
FsRtlRemovePerFileContextw8.1w10tp
FsRtlRemovePerFileObjectContextw8.1w10tp
FsRtlRemovePerStreamContextw8.1w10tp
FsRtlRemoveReservedPerFileContextw8.1w10tp
FsRtlRemoveReservedPerStreamContextw8.1w10tp
FsRtlResetBaseMcbw8.1w10tp
FsRtlResetLargeMcbw8.1w10tp
FsRtlSendModernAppTermination w10tp
FsRtlSetDriverBacking w10tp
FsRtlSetEcpListIntoIrpw8.1w10tp
FsRtlSetKernelEaFilew8.1w10tp
FsRtlSplitBaseMcbw8.1w10tp
FsRtlSplitLargeMcbw8.1w10tp
FsRtlSyncVolumesw8.1w10tp
FsRtlTeardownPerFileContextsw8.1w10tp
FsRtlTeardownPerStreamContextsw8.1w10tp
FsRtlTruncateBaseMcbw8.1w10tp
FsRtlTruncateLargeMcbw8.1w10tp
FsRtlTruncateMcbw8.1w10tp
FsRtlTryToAcquireHeaderMutexw8.1w10tp
FsRtlUninitializeBaseMcbw8.1w10tp
FsRtlUninitializeFileLockw8.1w10tp
FsRtlUninitializeLargeMcbw8.1w10tp
FsRtlUninitializeMcbw8.1w10tp
FsRtlUninitializeOplockw8.1w10tp
FsRtlUpdateDiskCountersw8.1w10tp
FsRtlUpperOplockFsctrlw8.1w10tp
FsRtlValidateReparsePointBufferw8.1w10tp
HalDispatchTablew8.1w10tp
HalExamineMBRw8.1w10tp
HalPrivateDispatchTablew8.1w10tp
HeadlessDispatchw8.1w10tp
HvlGetLpIndexFromApicIdw8.1w10tp
HvlQueryActiveHypervisorProcessorCountw8.1w10tp
HvlQueryActiveProcessorsw8.1w10tp
HvlQueryConnectionw8.1w10tp
HvlQueryHypervisorProcessorNodeNumberw8.1w10tp
HvlQueryNumaDistancew8.1w10tp
HvlQueryProcessorTopologyw8.1w10tp
HvlQueryProcessorTopologyCountw8.1w10tp
HvlQueryProcessorTopologyHighestIdw8.1w10tp
HvlReadPerformanceStateCounters w10tp
HvlRegisterInterruptCallbackw8.1w10tp
HvlRegisterWheaErrorNotificationw8.1w10tp
HvlUnregisterInterruptCallbackw8.1w10tp
HvlUnregisterWheaErrorNotificationw8.1w10tp
InbvAcquireDisplayOwnershipw8.1w10tp
InbvCheckDisplayOwnershipw8.1w10tp
InbvDisplayStringw8.1w10tp
InbvEnableBootDriverw8.1w10tp
InbvEnableDisplayStringw8.1w10tp
InbvInstallDisplayStringFilterw8.1w10tp
InbvIsBootDriverInstalledw8.1w10tp
InbvNotifyDisplayOwnershipChangew8.1w10tp
InbvNotifyDisplayOwnershipLostw8.1w10tp
InbvResetDisplayw8.1w10tp
InbvSetScrollRegionw8.1w10tp
InbvSetTextColorw8.1w10tp
InbvSolidColorFillw8.1w10tp
InitSafeBootModew8.1w10tp
InterlockedCompareExchangew8.1w10tp
InterlockedDecrementw8.1w10tp
InterlockedExchangew8.1w10tp
InterlockedExchangeAddw8.1w10tp
InterlockedIncrementw8.1w10tp
InterlockedPopEntrySListw8.1w10tp
InterlockedPushEntrySListw8.1w10tp
InterlockedPushListSListw8.1w10tp
IoAcquireCancelSpinLockw8.1w10tp
IoAcquireRemoveLockExw8.1w10tp
IoAcquireVpbSpinLockw8.1w10tp
IoAdapterObjectTypew8.1w10tp
IoAdjustStackSizeForRedirectionw8.1w10tp
IoAllocateAdapterChannelw8.1w10tp
IoAllocateControllerw8.1w10tp
IoAllocateDriverObjectExtensionw8.1w10tp
IoAllocateErrorLogEntryw8.1w10tp
IoAllocateIrpw8.1w10tp
IoAllocateMdlw8.1w10tp
IoAllocateMiniCompletionPacketw8.1w10tp
IoAllocateSfioStreamIdentifierw8.1w10tp
IoAllocateWorkItemw8.1w10tp
IoApplyPriorityInfoThreadw8.1w10tp
IoAssignResourcesw8.1w10tp
IoAttachDevicew8.1w10tp
IoAttachDeviceByPointerw8.1w10tp
IoAttachDeviceToDeviceStackw8.1w10tp
IoAttachDeviceToDeviceStackSafew8.1w10tp
IoBoostThreadIow8.1w10tp
IoBuildAsynchronousFsdRequestw8.1w10tp
IoBuildDeviceIoControlRequestw8.1w10tp
IoBuildPartialMdlw8.1w10tp
IoBuildSynchronousFsdRequestw8.1w10tp
IoCallDriverw8.1w10tp
IoCancelFileOpenw8.1w10tp
IoCancelIrpw8.1w10tp
IoCaptureLiveDumpw8.1 
IoCheckDesiredAccessw8.1w10tp
IoCheckEaBufferValidityw8.1w10tp
IoCheckFunctionAccessw8.1w10tp
IoCheckQuerySetFileInformationw8.1w10tp
IoCheckQuerySetVolumeInformationw8.1w10tp
IoCheckQuotaBufferValidityw8.1w10tp
IoCheckShareAccessw8.1w10tp
IoCheckShareAccessExw8.1w10tp
IoClearActivityIdThreadw8.1w10tp
IoClearDependencyw8.1w10tp
IoClearIrpExtraCreateParameterw8.1w10tp
IoCompleteRequestw8.1w10tp
IoCompletionObjectTypew8.1w10tp
IoConnectInterruptw8.1w10tp
IoConnectInterruptExw8.1w10tp
IoConvertFileHandleToKernelHandlew8.1w10tp
IoCopyDeviceObjectHintw8.1w10tp
IoCreateArcNamew8.1w10tp
IoCreateControllerw8.1w10tp
IoCreateDevicew8.1w10tp
IoCreateDiskw8.1w10tp
IoCreateDriverw8.1w10tp
IoCreateFilew8.1w10tp
IoCreateFileExw8.1w10tp
IoCreateFileSpecifyDeviceObjectHintw8.1w10tp
IoCreateNotificationEventw8.1w10tp
IoCreateStreamFileObjectw8.1w10tp
IoCreateStreamFileObjectExw8.1w10tp
IoCreateStreamFileObjectEx2w8.1w10tp
IoCreateStreamFileObjectLitew8.1w10tp
IoCreateSymbolicLinkw8.1w10tp
IoCreateSynchronizationEventw8.1w10tp
IoCreateSystemThreadw8.1w10tp
IoCreateUnprotectedSymbolicLinkw8.1w10tp
IoCsqInitializew8.1w10tp
IoCsqInitializeExw8.1w10tp
IoCsqInsertIrpw8.1w10tp
IoCsqInsertIrpExw8.1w10tp
IoCsqRemoveIrpw8.1w10tp
IoCsqRemoveNextIrpw8.1w10tp
IoDecrementKeepAliveCountw8.1w10tp
IoDeleteAllDependencyRelationsw8.1w10tp
IoDeleteControllerw8.1w10tp
IoDeleteDevicew8.1w10tp
IoDeleteDriverw8.1w10tp
IoDeleteSymbolicLinkw8.1w10tp
IoDetachDevicew8.1w10tp
IoDeviceHandlerObjectSizew8.1w10tp
IoDeviceHandlerObjectTypew8.1w10tp
IoDeviceObjectTypew8.1w10tp
IoDisconnectInterruptw8.1w10tp
IoDisconnectInterruptExw8.1w10tp
IoDriverObjectTypew8.1w10tp
IoDuplicateDependencyw8.1w10tp
IoEnqueueIrpw8.1w10tp
IoEnumerateDeviceObjectListw8.1w10tp
IoEnumerateRegisteredFiltersListw8.1w10tp
IoFastQueryNetworkAttributesw8.1w10tp
IoFileObjectTypew8.1w10tp
IoForwardAndCatchIrpw8.1w10tp
IoForwardIrpSynchronouslyw8.1w10tp
IoFreeControllerw8.1w10tp
IoFreeErrorLogEntryw8.1w10tp
IoFreeIrpw8.1w10tp
IoFreeMdlw8.1w10tp
IoFreeMiniCompletionPacketw8.1w10tp
IoFreeSfioStreamIdentifierw8.1w10tp
IoFreeWorkItemw8.1w10tp
IoGetActivityIdIrpw8.1w10tp
IoGetActivityIdThreadw8.1w10tp
IoGetAffinityInterruptw8.1w10tp
IoGetAttachedDevicew8.1w10tp
IoGetAttachedDeviceReferencew8.1w10tp
IoGetBaseFileSystemDeviceObjectw8.1w10tp
IoGetBootDiskInformationw8.1w10tp
IoGetBootDiskInformationLitew8.1w10tp
IoGetConfigurationInformationw8.1w10tp
IoGetContainerInformationw8.1w10tp
IoGetCurrentProcessw8.1w10tp
IoGetDeviceAttachmentBaseRefw8.1w10tp
IoGetDeviceInterfaceAliasw8.1w10tp
IoGetDeviceInterfacePropertyDataw8.1w10tp
IoGetDeviceInterfacesw8.1w10tp
IoGetDeviceNumaNodew8.1w10tp
IoGetDeviceObjectPointerw8.1w10tp
IoGetDevicePropertyw8.1w10tp
IoGetDevicePropertyDataw8.1w10tp
IoGetDeviceToVerifyw8.1w10tp
IoGetDiskDeviceObjectw8.1w10tp
IoGetDmaAdapterw8.1w10tp
IoGetDriverObjectExtensionw8.1w10tp
IoGetFileObjectGenericMappingw8.1w10tp
IoGetFsTrackOffsetState w10tp
IoGetFsZeroingOffset w10tp
IoGetGenericIrpExtensionw8.1w10tp
IoGetInitialStackw8.1w10tp
IoGetInitiatorProcessw8.1w10tp
IoGetIoPriorityHintw8.1w10tp
IoGetIrpExtraCreateParameterw8.1w10tp
IoGetLowerDeviceObjectw8.1w10tp
IoGetOplockKeyContextw8.1w10tp
IoGetOplockKeyContextExw8.1w10tp
IoGetPagingIoPriorityw8.1w10tp
IoGetRelatedDeviceObjectw8.1w10tp
IoGetRequestorProcessw8.1w10tp
IoGetRequestorProcessIdw8.1w10tp
IoGetRequestorSessionIdw8.1w10tp
IoGetSfioStreamIdentifierw8.1w10tp
IoGetStackLimitsw8.1w10tp
IoGetSymlinkSupportInformationw8.1w10tp
IoGetTopLevelIrpw8.1w10tp
IoGetTransactionParameterBlockw8.1w10tp
IoIncrementKeepAliveCountw8.1w10tp
IoInitializeIrpw8.1w10tp
IoInitializeMiniCompletionPacketw8.1w10tp
IoInitializeRemoveLockExw8.1w10tp
IoInitializeTimerw8.1w10tp
IoInitializeWorkItemw8.1w10tp
IoInvalidateDeviceRelationsw8.1w10tp
IoInvalidateDeviceStatew8.1w10tp
IoIsActivityTracingEnabledw8.1w10tp
IoIsFileObjectIgnoringSharingw8.1w10tp
IoIsFileOriginRemotew8.1w10tp
IoIsOperationSynchronousw8.1w10tp
IoIsSystemThreadw8.1w10tp
IoIsValidIrpStatusw8.1w10tp
IoIsValidNameGraftingBufferw8.1w10tp
IoIsWdmVersionAvailablew8.1w10tp
IoMakeAssociatedIrpw8.1w10tp
IoOpenDeviceInterfaceRegistryKeyw8.1w10tp
IoOpenDeviceRegistryKeyw8.1w10tp
IoPageReadw8.1w10tp
IoPropagateActivityIdToThreadw8.1w10tp
IoPropagateIrpExtensionw8.1w10tp
IoPropagateIrpExtensionEx w10tp
IoQueryDeviceDescriptionw8.1w10tp
IoQueryFileDosDeviceNamew8.1w10tp
IoQueryFileInformationw8.1w10tp
IoQueryFullDriverPathw8.1w10tp
IoQueryInterface w10tp
IoQueryVolumeInformationw8.1w10tp
IoQueueThreadIrpw8.1w10tp
IoQueueWorkItemw8.1w10tp
IoQueueWorkItemExw8.1w10tp
IoQueueWorkItemToNodew8.1w10tp
IoRaiseHardErrorw8.1w10tp
IoRaiseInformationalHardErrorw8.1w10tp
IoReadDiskSignaturew8.1w10tp
IoReadOperationCountw8.1w10tp
IoReadPartitionTablew8.1w10tp
IoReadPartitionTableExw8.1w10tp
IoReadTransferCountw8.1w10tp
IoRegisterBootDriverCallbackw8.1w10tp
IoRegisterBootDriverReinitializationw8.1w10tp
IoRegisterContainerNotificationw8.1w10tp
IoRegisterDeviceInterfacew8.1w10tp
IoRegisterDriverReinitializationw8.1w10tp
IoRegisterFileSystemw8.1w10tp
IoRegisterFsRegistrationChangew8.1w10tp
IoRegisterFsRegistrationChangeMountAwarew8.1w10tp
IoRegisterIoTrackingw8.1w10tp
IoRegisterLastChanceShutdownNotificationw8.1w10tp
IoRegisterPlugPlayNotificationw8.1w10tp
IoRegisterPriorityCallbackw8.1w10tp
IoRegisterShutdownNotificationw8.1w10tp
IoReleaseCancelSpinLockw8.1w10tp
IoReleaseRemoveLockAndWaitExw8.1w10tp
IoReleaseRemoveLockExw8.1w10tp
IoReleaseVpbSpinLockw8.1w10tp
IoRemoveShareAccessw8.1w10tp
IoReplaceFileObjectNamew8.1w10tp
IoReplacePartitionUnitw8.1w10tp
IoReportDetectedDevicew8.1w10tp
IoReportHalResourceUsagew8.1w10tp
IoReportInterruptActivew8.1w10tp
IoReportInterruptInactivew8.1w10tp
IoReportResourceForDetectionw8.1w10tp
IoReportResourceUsagew8.1w10tp
IoReportRootDevicew8.1w10tp
IoReportTargetDeviceChangew8.1w10tp
IoReportTargetDeviceChangeAsynchronousw8.1w10tp
IoRequestDeviceEjectw8.1w10tp
IoRequestDeviceEjectExw8.1w10tp
IoRequestDeviceRemovalForReset w10tp
IoReserveDependencyw8.1w10tp
IoResolveDependencyw8.1w10tp
IoRetrievePriorityInfow8.1w10tp
IoReuseIrpw8.1w10tp
IoSetActivityIdIrpw8.1w10tp
IoSetActivityIdThreadw8.1w10tp
IoSetCompletionRoutineExw8.1w10tp
IoSetDependencyw8.1w10tp
IoSetDeviceInterfacePropertyDataw8.1w10tp
IoSetDeviceInterfaceStatew8.1w10tp
IoSetDevicePropertyDataw8.1w10tp
IoSetDeviceToVerifyw8.1w10tp
IoSetFileObjectIgnoreSharingw8.1w10tp
IoSetFileOriginw8.1w10tp
IoSetFsTrackOffsetState w10tp
IoSetFsZeroingOffset w10tp
IoSetFsZeroingOffsetRequired w10tp
IoSetGenericIrpExtensionw8.1w10tp
IoSetHardErrorOrVerifyDevicew8.1w10tp
IoSetInformationw8.1w10tp
IoSetIoCompletionw8.1w10tp
IoSetIoCompletionExw8.1w10tp
IoSetIoPriorityHintw8.1w10tp
IoSetIoPriorityHintIntoFileObjectw8.1w10tp
IoSetIoPriorityHintIntoThreadw8.1w10tp
IoSetIrpExtraCreateParameterw8.1w10tp
IoSetMasterIrpStatusw8.1w10tp
IoSetPartitionInformationw8.1w10tp
IoSetPartitionInformationExw8.1w10tp
IoSetShareAccessw8.1w10tp
IoSetShareAccessExw8.1w10tp
IoSetStartIoAttributesw8.1w10tp
IoSetSystemPartitionw8.1w10tp
IoSetThreadHardErrorModew8.1w10tp
IoSetTopLevelIrpw8.1w10tp
IoSizeofGenericIrpExtensionw8.1w10tp
IoSizeofWorkItemw8.1w10tp
IoStartNextPacketw8.1w10tp
IoStartNextPacketByKeyw8.1w10tp
IoStartPacketw8.1w10tp
IoStartTimerw8.1w10tp
IoStatisticsLockw8.1w10tp
IoStopTimerw8.1w10tp
IoSynchronousCallDriverw8.1w10tp
IoSynchronousInvalidateDeviceRelationsw8.1w10tp
IoSynchronousPageWritew8.1w10tp
IoTestDependency w10tp
IoThreadToProcessw8.1w10tp
IoTransferActivityIdw8.1w10tp
IoTranslateBusAddressw8.1w10tp
IoTryQueueWorkItemw8.1w10tp
IoUninitializeWorkItemw8.1w10tp
IoUnregisterBootDriverCallbackw8.1w10tp
IoUnregisterContainerNotificationw8.1w10tp
IoUnregisterFileSystemw8.1w10tp
IoUnregisterFsRegistrationChangew8.1w10tp
IoUnregisterIoTrackingw8.1w10tp
IoUnregisterPlugPlayNotificationw8.1w10tp
IoUnregisterPlugPlayNotificationExw8.1w10tp
IoUnregisterPriorityCallbackw8.1w10tp
IoUnregisterShutdownNotificationw8.1w10tp
IoUpdateShareAccessw8.1w10tp
IoValidateDeviceIoControlAccessw8.1w10tp
IoVerifyPartitionTablew8.1w10tp
IoVerifyVolumew8.1w10tp
IoVolumeDeviceToDosNamew8.1w10tp
IoVolumeDeviceToGuidw8.1w10tp
IoVolumeDeviceToGuidPathw8.1w10tp
IoWMIAllocateInstanceIdsw8.1w10tp
IoWMIDeviceObjectToInstanceNamew8.1w10tp
IoWMIExecuteMethodw8.1w10tp
IoWMIHandleToInstanceNamew8.1w10tp
IoWMIOpenBlockw8.1w10tp
IoWMIQueryAllDataw8.1w10tp
IoWMIQueryAllDataMultiplew8.1w10tp
IoWMIQuerySingleInstancew8.1w10tp
IoWMIQuerySingleInstanceMultiplew8.1w10tp
IoWMIRegistrationControlw8.1w10tp
IoWMISetNotificationCallbackw8.1w10tp
IoWMISetSingleInstancew8.1w10tp
IoWMISetSingleItemw8.1w10tp
IoWMISuggestInstanceNamew8.1w10tp
IoWMIWriteEventw8.1w10tp
IoWithinStackLimitsw8.1w10tp
IoWriteErrorLogEntryw8.1w10tp
IoWriteOperationCountw8.1w10tp
IoWritePartitionTablew8.1w10tp
IoWritePartitionTableExw8.1w10tp
IoWriteTransferCountw8.1w10tp
IofCallDriverw8.1w10tp
IofCompleteRequestw8.1w10tp
KdAcquireDebuggerLock w10tp
KdChangeOptionw8.1w10tp
KdDebuggerEnabledw8.1w10tp
KdDebuggerNotPresentw8.1w10tp
KdDeregisterPowerHandler w10tp
KdDisableDebuggerw8.1w10tp
KdEnableDebuggerw8.1w10tp
KdEnteredDebuggerw8.1w10tp
KdLogDbgPrintw8.1w10tp
KdPollBreakInw8.1w10tp
KdPowerTransitionw8.1w10tp
KdRefreshDebuggerNotPresentw8.1w10tp
KdRegisterPowerHandler w10tp
KdReleaseDebuggerLock w10tp
KdSetEventLoggingPresent w10tp
KdSystemDebugControlw8.1w10tp
Ke386IoSetAccessProcessw8.1w10tp
Ke386QueryIoAccessMapw8.1w10tp
Ke386SetIoAccessMapw8.1w10tp
KeAcquireGuardedMutexw8.1w10tp
KeAcquireGuardedMutexUnsafew8.1w10tp
KeAcquireInStackQueuedSpinLockw8.1w10tp
KeAcquireInStackQueuedSpinLockAtDpcLevelw8.1w10tp
KeAcquireInStackQueuedSpinLockForDpcw8.1w10tp
KeAcquireInStackQueuedSpinLockRaiseToSynchw8.1w10tp
KeAcquireInterruptSpinLockw8.1w10tp
KeAcquireQueuedSpinLockw8.1w10tp
KeAcquireQueuedSpinLockRaiseToSynchw8.1w10tp
KeAcquireSpinLockw8.1w10tp
KeAcquireSpinLockAtDpcLevelw8.1w10tp
KeAcquireSpinLockForDpcw8.1w10tp
KeAcquireSpinLockRaiseToSynchw8.1w10tp
KeAddGroupAffinityExw8.1w10tp
KeAddProcessorAffinityExw8.1w10tp
KeAddProcessorGroupAffinityw8.1w10tp
KeAddSystemServiceTablew8.1w10tp
KeAlertThreadw8.1w10tp
KeAllocateCalloutStackw8.1w10tp
KeAllocateCalloutStackExw8.1w10tp
KeAndAffinityExw8.1w10tp
KeAndGroupAffinityExw8.1w10tp
KeAreAllApcsDisabledw8.1w10tp
KeAreApcsDisabledw8.1w10tp
KeAttachProcessw8.1w10tp
KeBugCheckw8.1w10tp
KeBugCheckExw8.1w10tp
KeCancelTimerw8.1w10tp
KeCancelTimer2 w10tp
KeCapturePersistentThreadStatew8.1w10tp
KeCheckProcessorAffinityExw8.1w10tp
KeCheckProcessorGroupAffinityw8.1w10tp
KeClearEventw8.1w10tp
KeClockInterruptNotifyw8.1w10tp
KeClockTimerPowerChangew8.1w10tp
KeComplementAffinityExw8.1w10tp
KeCopyAffinityExw8.1w10tp
KeCountSetBitsAffinityExw8.1w10tp
KeCountSetBitsGroupAffinityw8.1w10tp
KeDelayExecutionThreadw8.1w10tp
KeDeregisterBugCheckCallbackw8.1w10tp
KeDeregisterBugCheckReasonCallbackw8.1w10tp
KeDeregisterNmiCallbackw8.1w10tp
KeDeregisterProcessorChangeCallbackw8.1w10tp
KeDetachProcessw8.1w10tp
KeDispatchSecondaryInterruptw8.1w10tp
KeEnterCriticalRegionw8.1w10tp
KeEnterGuardedRegionw8.1w10tp
KeEnterKernelDebuggerw8.1w10tp
KeEnumerateNextProcessorw8.1w10tp
KeExpandKernelStackAndCalloutw8.1w10tp
KeExpandKernelStackAndCalloutExw8.1w10tp
KeFindConfigurationEntryw8.1w10tp
KeFindConfigurationNextEntryw8.1w10tp
KeFindFirstSetLeftAffinityExw8.1w10tp
KeFindFirstSetLeftGroupAffinityw8.1w10tp
KeFindFirstSetRightAffinityExw8.1w10tp
KeFindFirstSetRightGroupAffinityw8.1w10tp
KeFirstGroupAffinityExw8.1w10tp
KeFlushEntireTbw8.1w10tp
KeFlushIoBuffers w10tp
KeFlushQueuedDpcsw8.1w10tp
KeForceEnableNxw8.1w10tp
KeFreeCalloutStackw8.1w10tp
KeGenericCallDpcw8.1w10tp
KeGetClockOwnerw8.1w10tp
KeGetClockTimerResolutionw8.1w10tp
KeGetCurrentNodeNumberw8.1w10tp
KeGetCurrentProcessorNumberExw8.1w10tp
KeGetCurrentThreadw8.1w10tp
KeGetNextClockTickDurationw8.1w10tp
KeGetPreviousModew8.1w10tp
KeGetProcessorIndexFromNumberw8.1w10tp
KeGetProcessorNumberFromIndexw8.1w10tp
KeGetRecommendedSharedDataAlignmentw8.1w10tp
KeGetXSaveFeatureFlagsw8.1w10tp
KeHwPolicyLocateResourcew8.1w10tp
KeI386MachineTypew8.1w10tp
KeInitializeAffinityExw8.1w10tp
KeInitializeApcw8.1w10tp
KeInitializeCrashDumpHeaderw8.1w10tp
KeInitializeDeviceQueuew8.1w10tp
KeInitializeDpcw8.1w10tp
KeInitializeEnumerationContextw8.1w10tp
KeInitializeEnumerationContextFromGroupw8.1w10tp
KeInitializeEventw8.1w10tp
KeInitializeGuardedMutexw8.1w10tp
KeInitializeInterruptw8.1w10tp
KeInitializeMutantw8.1w10tp
KeInitializeMutexw8.1w10tp
KeInitializeQueuew8.1w10tp
KeInitializeSecondaryInterruptServicesw8.1w10tp
KeInitializeSemaphorew8.1w10tp
KeInitializeSpinLockw8.1w10tp
KeInitializeThreadedDpcw8.1w10tp
KeInitializeTimerw8.1w10tp
KeInitializeTimer2 w10tp
KeInitializeTimerExw8.1w10tp
KeInsertByKeyDeviceQueuew8.1w10tp
KeInsertDeviceQueuew8.1w10tp
KeInsertHeadQueuew8.1w10tp
KeInsertQueuew8.1w10tp
KeInsertQueueApcw8.1w10tp
KeInsertQueueDpcw8.1w10tp
KeInterlockedClearProcessorAffinityExw8.1w10tp
KeInterlockedSetProcessorAffinityExw8.1w10tp
KeInvalidateAllCachesw8.1w10tp
KeInvalidateRangeAllCachesw8.1w10tp
KeIpiGenericCallw8.1w10tp
KeIsAttachedProcessw8.1w10tp
KeIsEmptyAffinityExw8.1w10tp
KeIsEqualAffinityExw8.1w10tp
KeIsExecutingDpcw8.1w10tp
KeIsSingleGroupAffinityExw8.1w10tp
KeIsSubsetAffinityExw8.1w10tp
KeIsWaitListEmptyw8.1w10tp
KeLeaveCriticalRegionw8.1w10tp
KeLeaveGuardedRegionw8.1w10tp
KeLoadMTRRw8.1w10tp
KeLoaderBlockw8.1w10tp
KeNotifyProcessorFreezeSupported w10tp
KeNumberProcessorsw8.1w10tp
KeOrAffinityExw8.1w10tp
KePollFreezeExecutionw8.1w10tp
KeProcessorGroupAffinityw8.1w10tp
KeProfileInterruptWithSourcew8.1w10tp
KePulseEventw8.1w10tp
KeQueryActiveGroupCountw8.1w10tp
KeQueryActiveProcessorAffinityw8.1w10tp
KeQueryActiveProcessorCountw8.1w10tp
KeQueryActiveProcessorCountExw8.1w10tp
KeQueryActiveProcessorsw8.1w10tp
KeQueryDpcWatchdogInformationw8.1w10tp
KeQueryEffectivePriorityThreadw8.1w10tp
KeQueryGroupAffinityw8.1w10tp
KeQueryGroupAffinityExw8.1w10tp
KeQueryHardwareCounterConfigurationw8.1w10tp
KeQueryHeteroCpuPolicyThread w10tp
KeQueryHighestNodeNumberw8.1w10tp
KeQueryInterruptTimew8.1w10tp
KeQueryInterruptTimePrecisew8.1w10tp
KeQueryLogicalProcessorRelationshipw8.1w10tp
KeQueryMaximumGroupCountw8.1w10tp
KeQueryMaximumProcessorCountw8.1w10tp
KeQueryMaximumProcessorCountExw8.1w10tp
KeQueryNodeActiveAffinityw8.1w10tp
KeQueryNodeMaximumProcessorCountw8.1w10tp
KeQueryPriorityThreadw8.1w10tp
KeQueryRuntimeThreadw8.1w10tp
KeQuerySystemTimew8.1w10tp
KeQuerySystemTimePrecisew8.1w10tp
KeQueryTickCountw8.1w10tp
KeQueryTimeIncrementw8.1w10tp
KeQueryTotalCycleTimeThreadw8.1w10tp
KeQueryUnbiasedInterruptTimew8.1w10tp
KeRaiseUserExceptionw8.1w10tp
KeReadStateEventw8.1w10tp
KeReadStateMutantw8.1w10tp
KeReadStateMutexw8.1w10tp
KeReadStateQueuew8.1w10tp
KeReadStateSemaphorew8.1w10tp
KeReadStateTimerw8.1w10tp
KeRegisterBugCheckCallbackw8.1w10tp
KeRegisterBugCheckReasonCallbackw8.1w10tp
KeRegisterNmiCallbackw8.1w10tp
KeRegisterProcessorChangeCallbackw8.1w10tp
KeReleaseGuardedMutexw8.1w10tp
KeReleaseGuardedMutexUnsafew8.1w10tp
KeReleaseInStackQueuedSpinLockw8.1w10tp
KeReleaseInStackQueuedSpinLockForDpcw8.1w10tp
KeReleaseInStackQueuedSpinLockFromDpcLevelw8.1w10tp
KeReleaseInterruptSpinLockw8.1w10tp
KeReleaseMutantw8.1w10tp
KeReleaseMutexw8.1w10tp
KeReleaseQueuedSpinLockw8.1w10tp
KeReleaseSemaphorew8.1w10tp
KeReleaseSpinLockw8.1w10tp
KeReleaseSpinLockForDpcw8.1w10tp
KeReleaseSpinLockFromDpcLevelw8.1w10tp
KeRemoveByKeyDeviceQueuew8.1w10tp
KeRemoveByKeyDeviceQueueIfBusyw8.1w10tp
KeRemoveDeviceQueuew8.1w10tp
KeRemoveEntryDeviceQueuew8.1w10tp
KeRemoveGroupAffinityExw8.1w10tp
KeRemoveProcessorAffinityExw8.1w10tp
KeRemoveProcessorGroupAffinityw8.1w10tp
KeRemoveQueuew8.1w10tp
KeRemoveQueueDpcw8.1w10tp
KeRemoveQueueDpcExw8.1w10tp
KeRemoveQueueExw8.1w10tp
KeRemoveSystemServiceTablew8.1w10tp
KeReportCacheIncoherentDevice w10tp
KeResetEventw8.1w10tp
KeRestoreExtendedProcessorStatew8.1w10tp
KeRestoreFloatingPointStatew8.1w10tp
KeRevertToUserAffinityThreadw8.1w10tp
KeRevertToUserAffinityThreadExw8.1w10tp
KeRevertToUserGroupAffinityThreadw8.1w10tp
KeRundownQueuew8.1w10tp
KeSaveExtendedProcessorStatew8.1w10tp
KeSaveFloatingPointStatew8.1w10tp
KeSaveStateForHibernatew8.1w10tp
KeServiceDescriptorTablew8.1w10tp
KeSetActualBasePriorityThreadw8.1w10tp
KeSetAffinityThreadw8.1w10tp
KeSetBasePriorityThreadw8.1w10tp
KeSetCoalescableTimerw8.1w10tp
KeSetDmaIoCoherencyw8.1w10tp
KeSetEventw8.1w10tp
KeSetEventBoostPriorityw8.1w10tp
KeSetHardwareCounterConfigurationw8.1w10tp
KeSetHeteroCpuPolicyThread w10tp
KeSetIdealProcessorThreadw8.1w10tp
KeSetImportanceDpcw8.1w10tp
KeSetKernelStackSwapEnablew8.1w10tp
KeSetPriorityThreadw8.1w10tp
KeSetProfileIrqlw8.1w10tp
KeSetSystemAffinityThreadw8.1w10tp
KeSetSystemAffinityThreadExw8.1w10tp
KeSetSystemGroupAffinityThreadw8.1w10tp
KeSetTargetProcessorDpcw8.1w10tp
KeSetTargetProcessorDpcExw8.1w10tp
KeSetTimerw8.1w10tp
KeSetTimer2 w10tp
KeSetTimerExw8.1w10tp
KeShouldYieldProcessor w10tp
KeSignalCallDpcDonew8.1w10tp
KeSignalCallDpcSynchronizew8.1w10tp
KeStackAttachProcessw8.1w10tp
KeStallWhileFrozenw8.1w10tp
KeStartDynamicProcessorw8.1w10tp
KeSubtractAffinityExw8.1w10tp
KeSweepLocalCachesw8.1w10tp
KeSynchronizeExecutionw8.1w10tp
KeSynchronizeTimeToQpc w10tp
KeSystemFullyCacheCoherent w10tp
KeTestAlertThreadw8.1w10tp
KeTestSpinLockw8.1w10tp
KeTickCountw8.1w10tp
KeTryToAcquireGuardedMutexw8.1w10tp
KeTryToAcquireQueuedSpinLockw8.1w10tp
KeTryToAcquireQueuedSpinLockRaiseToSynchw8.1w10tp
KeTryToAcquireSpinLockAtDpcLevelw8.1w10tp
KeUnstackDetachProcessw8.1w10tp
KeUpdateThreadTag w10tp
KeUserModeCallbackw8.1w10tp
KeWaitForMultipleObjectsw8.1w10tp
KeWaitForMutexObjectw8.1w10tp
KeWaitForSingleObjectw8.1w10tp
KeWriteProtectPATw8.1w10tp
KefAcquireSpinLockAtDpcLevelw8.1w10tp
KefReleaseSpinLockFromDpcLevelw8.1w10tp
Kei386EoiHelperw8.1w10tp
KfAcquireSpinLockw8.1w10tp
KfReleaseSpinLockw8.1w10tp
KiAccumulateCycleStats w10tp
KiAcquireSpinLockw8.1w10tp
KiBeginThreadAccountingPeriod w10tp
KiBugCheckDataw8.1w10tp
KiCheckForKernelApcDeliveryw8.1w10tp
KiCheckForSListAddressw8.1w10tp
KiCpuIdw8.1 
KiDeliverApcw8.1w10tp
KiDispatchInterruptw8.1w10tp
KiEndThreadAccountingPeriodw8.1w10tp
KiEntropyQueueDpcw8.1w10tp
KiGetNextTimer2ExpirationDueTimew8.1 
KiIpiServiceRoutinew8.1w10tp
KiReleaseSpinLockw8.1w10tp
KiUnexpectedInterruptw8.1w10tp
KitLogFeatureUsagew8.1w10tp
KseQueryDeviceDataw8.1w10tp
KseQueryDeviceDataListw8.1w10tp
KseQueryDeviceFlagsw8.1w10tp
KseRegisterShimw8.1w10tp
KseRegisterShimExw8.1w10tp
KseSetDeviceFlagsw8.1w10tp
KseUnregisterShimw8.1w10tp
LdrAccessResourcew8.1w10tp
LdrEnumResourcesw8.1w10tp
LdrFindResourceDirectory_Uw8.1w10tp
LdrFindResourceEx_Uw8.1w10tp
LdrFindResource_Uw8.1w10tp
LdrResFindResourcew8.1w10tp
LdrResFindResourceDirectoryw8.1w10tp
LdrResSearchResourcew8.1w10tp
LpcPortObjectTypew8.1w10tp
LpcReplyWaitReplyPortw8.1w10tp
LpcRequestPortw8.1w10tp
LpcRequestWaitReplyPortw8.1w10tp
LpcRequestWaitReplyPortExw8.1w10tp
LpcSendWaitReceivePortw8.1w10tp
LsaCallAuthenticationPackagew8.1w10tp
LsaDeregisterLogonProcessw8.1w10tp
LsaFreeReturnBufferw8.1w10tp
LsaLogonUserw8.1w10tp
LsaLookupAuthenticationPackagew8.1w10tp
LsaRegisterLogonProcessw8.1w10tp
Mm64BitPhysicalAddressw8.1w10tp
MmAddPhysicalMemoryw8.1w10tp
MmAddVerifierThunksw8.1w10tp
MmAdjustWorkingSetSizew8.1w10tp
MmAdvanceMdlw8.1w10tp
MmAllocateContiguousMemoryw8.1w10tp
MmAllocateContiguousMemorySpecifyCachew8.1w10tp
MmAllocateContiguousMemorySpecifyCacheNodew8.1w10tp
MmAllocateContiguousNodeMemoryw8.1w10tp
MmAllocateMappingAddressw8.1w10tp
MmAllocateMdlForIoSpacew8.1w10tp
MmAllocateNodePagesForMdlExw8.1w10tp
MmAllocateNonCachedMemoryw8.1w10tp
MmAllocatePagesForMdlw8.1w10tp
MmAllocatePagesForMdlExw8.1w10tp
MmAreMdlPagesCachedw8.1w10tp
MmBadPointerw8.1w10tp
MmBuildMdlForNonPagedPoolw8.1w10tp
MmCanFileBeTruncatedw8.1w10tp
MmCommitSessionMappedVieww8.1w10tp
MmCopyMemory w10tp
MmCopyVirtualMemoryw8.1w10tp
MmCreateMdlw8.1w10tp
MmCreateMirrorw8.1w10tp
MmCreateSectionw8.1w10tp
MmDisableModifiedWriteOfSectionw8.1w10tp
MmDoesFileHaveUserWritableReferencesw8.1w10tp
MmFlushImageSectionw8.1w10tp
MmForceSectionClosedw8.1w10tp
MmFreeContiguousMemoryw8.1w10tp
MmFreeContiguousMemorySpecifyCachew8.1w10tp
MmFreeMappingAddressw8.1w10tp
MmFreeNonCachedMemoryw8.1w10tp
MmFreePagesFromMdlw8.1w10tp
MmGetCacheAttribute w10tp
MmGetMaximumFileSectionSizew8.1w10tp
MmGetPhysicalAddressw8.1w10tp
MmGetPhysicalMemoryRangesw8.1w10tp
MmGetSystemRoutineAddressw8.1w10tp
MmGetVirtualForPhysicalw8.1w10tp
MmGrowKernelStackw8.1w10tp
MmHighestUserAddressw8.1w10tp
MmIsAddressValidw8.1w10tp
MmIsDriverSuspectForVerifierw8.1w10tp
MmIsDriverVerifyingw8.1w10tp
MmIsDriverVerifyingByAddressw8.1w10tp
MmIsIoSpaceActivew8.1w10tp
MmIsNonPagedSystemAddressValidw8.1w10tp
MmIsRecursiveIoFaultw8.1w10tp
MmIsThisAnNtAsSystemw8.1w10tp
MmIsVerifierEnabledw8.1w10tp
MmLoadSystemImage w10tp
MmLockPagableDataSectionw8.1w10tp
MmLockPagableImageSectionw8.1w10tp
MmLockPagableSectionByHandlew8.1w10tp
MmMapIoSpacew8.1w10tp
MmMapLockedPagesw8.1w10tp
MmMapLockedPagesSpecifyCachew8.1w10tp
MmMapLockedPagesWithReservedMappingw8.1w10tp
MmMapMemoryDumpMdlw8.1w10tp
MmMapUserAddressesToPagew8.1w10tp
MmMapVideoDisplayw8.1w10tp
MmMapViewInSessionSpacew8.1w10tp
MmMapViewInSessionSpaceExw8.1w10tp
MmMapViewInSystemSpacew8.1w10tp
MmMapViewInSystemSpaceExw8.1w10tp
MmMapViewOfSectionw8.1w10tp
MmMarkPhysicalMemoryAsBadw8.1w10tp
MmMarkPhysicalMemoryAsGoodw8.1w10tp
MmMdlPageContentsStatew8.1w10tp
MmMdlPagesAreZerow8.1w10tp
MmPageEntireDriverw8.1w10tp
MmPrefetchPagesw8.1w10tp
MmPrefetchVirtualAddressesw8.1w10tp
MmProbeAndLockPagesw8.1w10tp
MmProbeAndLockProcessPagesw8.1w10tp
MmProbeAndLockSelectedPagesw8.1w10tp
MmProtectMdlSystemAddressw8.1w10tp
MmQuerySystemSizew8.1w10tp
MmRemovePhysicalMemoryw8.1w10tp
MmResetDriverPagingw8.1w10tp
MmRotatePhysicalVieww8.1w10tp
MmSectionObjectTypew8.1w10tp
MmSecureVirtualMemoryw8.1w10tp
MmSetAddressRangeModifiedw8.1w10tp
MmSetBankedSectionw8.1w10tp
MmSizeOfMdlw8.1w10tp
MmSystemRangeStartw8.1w10tp
MmTrimAllSystemPagableMemoryw8.1w10tp
MmUnloadSystemImage w10tp
MmUnlockPagableImageSectionw8.1w10tp
MmUnlockPagesw8.1w10tp
MmUnmapIoSpacew8.1w10tp
MmUnmapLockedPagesw8.1w10tp
MmUnmapReservedMappingw8.1w10tp
MmUnmapVideoDisplayw8.1w10tp
MmUnmapViewInSessionSpacew8.1w10tp
MmUnmapViewInSystemSpacew8.1w10tp
MmUnmapViewOfSectionw8.1w10tp
MmUnsecureVirtualMemoryw8.1w10tp
MmUserProbeAddressw8.1w10tp
NlsAnsiCodePagew8.1w10tp
NlsLeadByteInfow8.1w10tp
NlsMbCodePageTagw8.1w10tp
NlsMbOemCodePageTagw8.1w10tp
NlsOemCodePagew8.1w10tp
NlsOemLeadByteInfow8.1w10tp
NtAddAtomw8.1w10tp
NtAdjustPrivilegesTokenw8.1w10tp
NtAllocateLocallyUniqueIdw8.1w10tp
NtAllocateUuidsw8.1w10tp
NtAllocateVirtualMemoryw8.1w10tp
NtBuildGUIDw8.1w10tp
NtBuildLabw8.1w10tp
NtBuildNumberw8.1w10tp
NtClosew8.1w10tp
NtCommitCompletew8.1w10tp
NtCommitEnlistmentw8.1w10tp
NtCommitTransactionw8.1w10tp
NtConnectPortw8.1w10tp
NtCreateEnlistmentw8.1w10tp
NtCreateEventw8.1w10tp
NtCreateFilew8.1w10tp
NtCreateResourceManagerw8.1w10tp
NtCreateSectionw8.1w10tp
NtCreateTransactionw8.1w10tp
NtCreateTransactionManagerw8.1w10tp
NtDeleteAtomw8.1w10tp
NtDeleteFilew8.1w10tp
NtDeviceIoControlFilew8.1w10tp
NtDuplicateObjectw8.1w10tp
NtDuplicateTokenw8.1w10tp
NtEnumerateTransactionObjectw8.1w10tp
NtFindAtomw8.1w10tp
NtFreeVirtualMemoryw8.1w10tp
NtFreezeTransactionsw8.1w10tp
NtFsControlFilew8.1w10tp
NtGetEnvironmentVariableExw8.1w10tp
NtGetNotificationResourceManagerw8.1w10tp
NtGlobalFlagw8.1w10tp
NtLockFilew8.1w10tp
NtMakePermanentObjectw8.1w10tp
NtMapViewOfSectionw8.1w10tp
NtNotifyChangeDirectoryFilew8.1w10tp
NtOpenEnlistmentw8.1w10tp
NtOpenFilew8.1w10tp
NtOpenProcessw8.1w10tp
NtOpenProcessTokenw8.1w10tp
NtOpenProcessTokenExw8.1w10tp
NtOpenResourceManagerw8.1w10tp
NtOpenThreadw8.1w10tp
NtOpenThreadTokenw8.1w10tp
NtOpenThreadTokenExw8.1w10tp
NtOpenTransactionw8.1w10tp
NtOpenTransactionManagerw8.1w10tp
NtPrePrepareCompletew8.1w10tp
NtPrePrepareEnlistmentw8.1w10tp
NtPrepareCompletew8.1w10tp
NtPrepareEnlistmentw8.1w10tp
NtPropagationCompletew8.1w10tp
NtPropagationFailedw8.1w10tp
NtQueryDirectoryFilew8.1w10tp
NtQueryEaFilew8.1w10tp
NtQueryEnvironmentVariableInfoExw8.1w10tp
NtQueryInformationAtomw8.1w10tp
NtQueryInformationEnlistmentw8.1w10tp
NtQueryInformationFilew8.1w10tp
NtQueryInformationProcessw8.1w10tp
NtQueryInformationResourceManagerw8.1w10tp
NtQueryInformationThreadw8.1w10tp
NtQueryInformationTokenw8.1w10tp
NtQueryInformationTransactionw8.1w10tp
NtQueryInformationTransactionManagerw8.1w10tp
NtQueryQuotaInformationFilew8.1w10tp
NtQuerySecurityAttributesTokenw8.1w10tp
NtQuerySecurityObjectw8.1w10tp
NtQuerySystemInformationw8.1w10tp
NtQuerySystemInformationExw8.1w10tp
NtQueryVolumeInformationFilew8.1w10tp
NtReadFilew8.1w10tp
NtReadOnlyEnlistmentw8.1w10tp
NtRecoverEnlistmentw8.1w10tp
NtRecoverResourceManagerw8.1w10tp
NtRecoverTransactionManagerw8.1w10tp
NtRequestPortw8.1w10tp
NtRequestWaitReplyPortw8.1w10tp
NtRollbackCompletew8.1w10tp
NtRollbackEnlistmentw8.1w10tp
NtRollbackTransactionw8.1w10tp
NtSetCachedSigningLevelw8.1w10tp
NtSetEaFilew8.1w10tp
NtSetEventw8.1w10tp
NtSetInformationEnlistmentw8.1w10tp
NtSetInformationFilew8.1w10tp
NtSetInformationProcessw8.1w10tp
NtSetInformationResourceManagerw8.1w10tp
NtSetInformationThreadw8.1w10tp
NtSetInformationTokenw8.1w10tp
NtSetInformationTransactionw8.1w10tp
NtSetInformationVirtualMemoryw8.1w10tp
NtSetQuotaInformationFilew8.1w10tp
NtSetSecurityObjectw8.1w10tp
NtSetVolumeInformationFilew8.1w10tp
NtShutdownSystemw8.1w10tp
NtThawTransactionsw8.1w10tp
NtTraceControlw8.1w10tp
NtTraceEventw8.1w10tp
NtUnlockFilew8.1w10tp
NtVdmControlw8.1w10tp
NtWaitForSingleObjectw8.1w10tp
NtWriteFilew8.1w10tp
ObAssignSecurityw8.1w10tp
ObCheckCreateObjectAccessw8.1w10tp
ObCheckObjectAccessw8.1w10tp
ObCloseHandlew8.1w10tp
ObCreateObjectw8.1w10tp
ObCreateObjectTypew8.1w10tp
ObDeleteCapturedInsertInfow8.1w10tp
ObDereferenceObjectw8.1w10tp
ObDereferenceObjectDeferDeletew8.1w10tp
ObDereferenceObjectDeferDeleteWithTagw8.1w10tp
ObDereferenceSecurityDescriptorw8.1w10tp
ObDuplicateObjectw8.1w10tp
ObFindHandleForObjectw8.1w10tp
ObGetFilterVersionw8.1w10tp
ObGetObjectSecurityw8.1w10tp
ObGetObjectTypew8.1w10tp
ObInsertObjectw8.1w10tp
ObIsDosDeviceLocallyMappedw8.1w10tp
ObIsKernelHandlew8.1w10tp
ObLogSecurityDescriptorw8.1w10tp
ObMakeTemporaryObjectw8.1w10tp
ObOpenObjectByNamew8.1w10tp
ObOpenObjectByPointerw8.1w10tp
ObOpenObjectByPointerWithTagw8.1w10tp
ObQueryNameInfow8.1w10tp
ObQueryNameStringw8.1w10tp
ObQueryObjectAuditingByHandlew8.1w10tp
ObReferenceObjectByHandlew8.1w10tp
ObReferenceObjectByHandleWithTagw8.1w10tp
ObReferenceObjectByNamew8.1w10tp
ObReferenceObjectByPointerw8.1w10tp
ObReferenceObjectByPointerWithTagw8.1w10tp
ObReferenceObjectSafew8.1w10tp
ObReferenceObjectSafeWithTagw8.1w10tp
ObReferenceSecurityDescriptorw8.1w10tp
ObRegisterCallbacksw8.1w10tp
ObReleaseObjectSecurityw8.1w10tp
ObSetHandleAttributesw8.1w10tp
ObSetSecurityDescriptorInfow8.1w10tp
ObSetSecurityObjectByPointerw8.1w10tp
ObUnRegisterCallbacksw8.1w10tp
ObWaitForMultipleObjectsw8.1w10tp
ObWaitForSingleObjectw8.1w10tp
ObfDereferenceObjectw8.1w10tp
ObfDereferenceObjectWithTagw8.1w10tp
ObfReferenceObjectw8.1w10tp
ObfReferenceObjectWithTagw8.1w10tp
POGOBufferw8.1w10tp
PcwAddInstancew8.1w10tp
PcwCloseInstancew8.1w10tp
PcwCreateInstancew8.1w10tp
PcwRegisterw8.1w10tp
PcwUnregisterw8.1w10tp
PfFileInfoNotifyw8.1w10tp
PfxFindPrefixw8.1w10tp
PfxInitializew8.1w10tp
PfxInsertPrefixw8.1w10tp
PfxRemovePrefixw8.1w10tp
PoCallDriverw8.1w10tp
PoCancelDeviceNotifyw8.1w10tp
PoClearPowerRequestw8.1w10tp
PoCpuIdledSinceLastCallImprecise w10tp
PoCreatePowerRequestw8.1w10tp
PoDeletePowerRequestw8.1w10tp
PoDisableSleepStatesw8.1w10tp
PoEndDeviceBusyw8.1w10tp
PoEnergyEstimationEnabled w10tp
PoFxActivateComponentw8.1w10tp
PoFxCompleteDevicePowerNotRequiredw8.1w10tp
PoFxCompleteIdleConditionw8.1w10tp
PoFxCompleteIdleStatew8.1w10tp
PoFxEnableDStateReporting w10tp
PoFxIdleComponentw8.1w10tp
PoFxIssueComponentPerfStateChange w10tp
PoFxIssueComponentPerfStateChangeMultiple w10tp
PoFxNotifySurprisePowerOnw8.1w10tp
PoFxPowerControlw8.1w10tp
PoFxPowerOnCrashdumpDevicew8.1w10tp
PoFxProcessorNotificationw8.1w10tp
PoFxQueryCurrentComponentPerfState w10tp
PoFxRegisterComponentPerfStates w10tp
PoFxRegisterCoreDevicew8.1w10tp
PoFxRegisterCrashdumpDevicew8.1w10tp
PoFxRegisterDevicew8.1w10tp
PoFxRegisterPluginw8.1w10tp
PoFxRegisterPluginExw8.1w10tp
PoFxRegisterPrimaryDevicew8.1w10tp
PoFxReportDevicePoweredOnw8.1w10tp
PoFxSetComponentLatencyw8.1w10tp
PoFxSetComponentResidencyw8.1w10tp
PoFxSetComponentWakew8.1w10tp
PoFxSetDeviceIdleTimeoutw8.1w10tp
PoFxStartDevicePowerManagementw8.1w10tp
PoFxUnregisterDevicew8.1w10tp
PoGetProcessorIdleAccountingw8.1w10tp
PoGetSystemWakew8.1w10tp
PoInitiateProcessorWakew8.1w10tp
PoLatencySensitivityHintw8.1w10tp
PoNotifyMediaBuffering w10tp
PoNotifyVSyncChangew8.1w10tp
PoQueryWatchdogTimew8.1w10tp
PoQueueShutdownWorkItemw8.1w10tp
PoReenableSleepStatesw8.1w10tp
PoRegisterCoalescingCallbackw8.1w10tp
PoRegisterDeviceForIdleDetectionw8.1w10tp
PoRegisterDeviceNotifyw8.1w10tp
PoRegisterPowerSettingCallbackw8.1w10tp
PoRegisterSystemStatew8.1w10tp
PoRequestPowerIrpw8.1w10tp
PoRequestShutdownEventw8.1w10tp
PoSetDeviceBusyExw8.1w10tp
PoSetFixedWakeSourcew8.1w10tp
PoSetHiberRangew8.1w10tp
PoSetPowerRequestw8.1w10tp
PoSetPowerStatew8.1w10tp
PoSetSystemStatew8.1w10tp
PoSetSystemWakew8.1w10tp
PoSetUserPresentw8.1w10tp
PoShutdownBugCheckw8.1w10tp
PoStartDeviceBusyw8.1w10tp
PoStartNextPowerIrpw8.1w10tp
PoUnregisterCoalescingCallbackw8.1w10tp
PoUnregisterPowerSettingCallbackw8.1w10tp
PoUnregisterSystemStatew8.1w10tp
PoUserShutdownCancelledw8.1w10tp
PoUserShutdownInitiatedw8.1w10tp
ProbeForReadw8.1w10tp
ProbeForWritew8.1w10tp
PsAcquireProcessExitSynchronizationw8.1w10tp
PsAssignImpersonationTokenw8.1w10tp
PsChargePoolQuotaw8.1w10tp
PsChargeProcessNonPagedPoolQuotaw8.1w10tp
PsChargeProcessPagedPoolQuotaw8.1w10tp
PsChargeProcessPoolQuotaw8.1w10tp
PsChargeProcessWakeCounterw8.1w10tp
PsCreateSystemThreadw8.1w10tp
PsCreateSystemThreadExw8.1w10tp
PsDereferenceImpersonationTokenw8.1w10tp
PsDereferenceKernelStackw8.1w10tp
PsDereferencePrimaryTokenw8.1w10tp
PsDisableImpersonationw8.1w10tp
PsEnterPriorityRegionw8.1w10tp
PsEstablishWin32Calloutsw8.1w10tp
PsGetContextThreadw8.1w10tp
PsGetCurrentProcessw8.1w10tp
PsGetCurrentProcessIdw8.1w10tp
PsGetCurrentProcessSessionIdw8.1w10tp
PsGetCurrentProcessWin32Processw8.1w10tp
PsGetCurrentThreadw8.1w10tp
PsGetCurrentThreadIdw8.1w10tp
PsGetCurrentThreadPreviousModew8.1w10tp
PsGetCurrentThreadProcessw8.1w10tp
PsGetCurrentThreadProcessIdw8.1w10tp
PsGetCurrentThreadStackBasew8.1w10tp
PsGetCurrentThreadStackLimitw8.1w10tp
PsGetCurrentThreadTebw8.1w10tp
PsGetCurrentThreadWin32Threadw8.1w10tp
PsGetCurrentThreadWin32ThreadAndEnterCriticalRegionw8.1w10tp
PsGetEffectiveContainerId w10tp
PsGetJobLockw8.1w10tp
PsGetJobSessionIdw8.1w10tp
PsGetJobUIRestrictionsClassw8.1w10tp
PsGetProcessCommonJobw8.1w10tp
PsGetProcessCreateTimeQuadPartw8.1w10tp
PsGetProcessDebugPortw8.1w10tp
PsGetProcessExitProcessCalledw8.1w10tp
PsGetProcessExitStatusw8.1w10tp
PsGetProcessExitTimew8.1w10tp
PsGetProcessIdw8.1w10tp
PsGetProcessImageFileNamew8.1w10tp
PsGetProcessInheritedFromUniqueProcessIdw8.1w10tp
PsGetProcessJobw8.1w10tp
PsGetProcessPebw8.1w10tp
PsGetProcessPriorityClassw8.1w10tp
PsGetProcessProtectionw8.1w10tp
PsGetProcessSectionBaseAddressw8.1w10tp
PsGetProcessSecurityPortw8.1w10tp
PsGetProcessSessionIdw8.1w10tp
PsGetProcessSessionIdExw8.1w10tp
PsGetProcessSignatureLevelw8.1w10tp
PsGetProcessWin32Processw8.1w10tp
PsGetProcessWin32WindowStationw8.1w10tp
PsGetThreadCreateTime w10tp
PsGetThreadExitStatusw8.1w10tp
PsGetThreadFreezeCountw8.1w10tp
PsGetThreadHardErrorsAreDisabledw8.1w10tp
PsGetThreadIdw8.1w10tp
PsGetThreadProcessw8.1w10tp
PsGetThreadProcessIdw8.1w10tp
PsGetThreadSessionIdw8.1w10tp
PsGetThreadTebw8.1w10tp
PsGetThreadWin32Threadw8.1w10tp
PsGetVersionw8.1w10tp
PsImpersonateClientw8.1w10tp
PsInitialSystemProcessw8.1w10tp
PsIsCurrentThreadPrefetchingw8.1w10tp
PsIsDiskCountersEnabledw8.1w10tp
PsIsProcessBeingDebuggedw8.1w10tp
PsIsProtectedProcessw8.1w10tp
PsIsProtectedProcessLightw8.1w10tp
PsIsSystemProcessw8.1w10tp
PsIsSystemThreadw8.1w10tp
PsIsThreadImpersonatingw8.1w10tp
PsIsThreadTerminatingw8.1w10tp
PsJobTypew8.1w10tp
PsLeavePriorityRegionw8.1w10tp
PsLoadedModuleList w10tp
PsLoadedModuleResource w10tp
PsLookupProcessByProcessIdw8.1w10tp
PsLookupProcessThreadByCidw8.1w10tp
PsLookupThreadByThreadIdw8.1w10tp
PsProcessTypew8.1w10tp
PsQueryProcessAttributesByTokenw8.1w10tp
PsQueryProcessExceptionFlagsw8.1w10tp
PsQueryTotalCycleTimeProcessw8.1w10tp
PsReferenceImpersonationTokenw8.1w10tp
PsReferenceKernelStackw8.1w10tp
PsReferencePrimaryTokenw8.1w10tp
PsReferenceProcessFilePointerw8.1w10tp
PsReleaseProcessExitSynchronizationw8.1w10tp
PsReleaseProcessWakeCounterw8.1w10tp
PsRemoveCreateThreadNotifyRoutinew8.1w10tp
PsRemoveLoadImageNotifyRoutinew8.1w10tp
PsRestoreImpersonationw8.1w10tp
PsResumeProcessw8.1w10tp
PsReturnPoolQuotaw8.1w10tp
PsReturnProcessNonPagedPoolQuotaw8.1w10tp
PsReturnProcessPagedPoolQuotaw8.1w10tp
PsRevertThreadToSelfw8.1w10tp
PsRevertToSelfw8.1w10tp
PsSetContextThreadw8.1w10tp
PsSetCreateProcessNotifyRoutinew8.1w10tp
PsSetCreateProcessNotifyRoutineExw8.1w10tp
PsSetCreateThreadNotifyRoutinew8.1w10tp
PsSetCurrentThreadPrefetchingw8.1w10tp
PsSetLegoNotifyRoutinew8.1w10tp
PsSetLoadImageNotifyRoutinew8.1w10tp
PsSetProcessPriorityByClassw8.1w10tp
PsSetProcessPriorityClassw8.1w10tp
PsSetProcessSecurityPortw8.1w10tp
PsSetProcessWin32Processw8.1w10tp
PsSetProcessWindowStationw8.1w10tp
PsSetThreadHardErrorsAreDisabledw8.1w10tp
PsSetThreadWin32Threadw8.1w10tp
PsSuspendProcessw8.1w10tp
PsTerminateSystemThreadw8.1w10tp
PsThreadTypew8.1w10tp
PsUILanguageComittedw8.1w10tp
PsUpdateComponentPower w10tp
PsUpdateDiskCountersw8.1w10tp
PsWrapApcWow64Threadw8.1w10tp
READ_REGISTER_BUFFER_UCHARw8.1w10tp
READ_REGISTER_BUFFER_ULONGw8.1w10tp
READ_REGISTER_BUFFER_USHORTw8.1w10tp
READ_REGISTER_UCHARw8.1w10tp
READ_REGISTER_ULONGw8.1w10tp
READ_REGISTER_USHORTw8.1w10tp
RtlAbsoluteToSelfRelativeSDw8.1w10tp
RtlAddAccessAllowedAcew8.1w10tp
RtlAddAccessAllowedAceExw8.1w10tp
RtlAddAccessAllowedObjectAce w10tp
RtlAddAccessDeniedAceEx w10tp
RtlAddAccessDeniedObjectAce w10tp
RtlAddAcew8.1w10tp
RtlAddAtomToAtomTablew8.1w10tp
RtlAddAtomToAtomTableExw8.1w10tp
RtlAddAuditAccessAceEx w10tp
RtlAddAuditAccessObjectAce w10tp
RtlAddRangew8.1w10tp
RtlAddResourceAttributeAcew8.1w10tp
RtlAllocateHeapw8.1w10tp
RtlAnsiCharToUnicodeCharw8.1w10tp
RtlAnsiStringToUnicodeSizew8.1w10tp
RtlAnsiStringToUnicodeStringw8.1w10tp
RtlAppendAsciizToStringw8.1w10tp
RtlAppendStringToStringw8.1w10tp
RtlAppendUnicodeStringToStringw8.1w10tp
RtlAppendUnicodeToStringw8.1w10tp
RtlAreAllAccessesGrantedw8.1w10tp
RtlAreAnyAccessesGrantedw8.1w10tp
RtlAreBitsClearw8.1w10tp
RtlAreBitsSetw8.1w10tp
RtlAssertw8.1w10tp
RtlAvlInsertNodeExw8.1w10tp
RtlAvlRemoveNodew8.1w10tp
RtlCaptureContextw8.1w10tp
RtlCaptureStackBackTracew8.1w10tp
RtlCharToIntegerw8.1w10tp
RtlCheckPortableOperatingSystemw8.1w10tp
RtlCheckRegistryKeyw8.1w10tp
RtlCheckTokenCapabilityw8.1w10tp
RtlCheckTokenMembershipw8.1w10tp
RtlCheckTokenMembershipExw8.1w10tp
RtlClearAllBitsw8.1w10tp
RtlClearBitw8.1w10tp
RtlClearBitsw8.1w10tp
RtlCmDecodeMemIoResourcew8.1w10tp
RtlCmEncodeMemIoResourcew8.1w10tp
RtlCompareAltitudesw8.1w10tp
RtlCompareMemoryw8.1w10tp
RtlCompareMemoryUlongw8.1w10tp
RtlCompareStringw8.1w10tp
RtlCompareUnicodeStringw8.1w10tp
RtlCompareUnicodeStringsw8.1w10tp
RtlCompressBufferw8.1w10tp
RtlCompressChunksw8.1w10tp
RtlComputeCrc32w8.1w10tp
RtlContractHashTablew8.1w10tp
RtlConvertLongToLargeIntegerw8.1w10tp
RtlConvertSidToUnicodeStringw8.1w10tp
RtlConvertUlongToLargeIntegerw8.1w10tp
RtlCopyBitMapw8.1w10tp
RtlCopyLuidw8.1w10tp
RtlCopyLuidAndAttributesArrayw8.1w10tp
RtlCopyRangeListw8.1w10tp
RtlCopySidw8.1w10tp
RtlCopySidAndAttributesArrayw8.1w10tp
RtlCopyStringw8.1w10tp
RtlCopyUnicodeStringw8.1w10tp
RtlCrc32w8.1w10tp
RtlCrc64w8.1w10tp
RtlCreateAclw8.1w10tp
RtlCreateAtomTablew8.1w10tp
RtlCreateAtomTableExw8.1w10tp
RtlCreateHashTablew8.1w10tp
RtlCreateHashTableExw8.1w10tp
RtlCreateHeapw8.1w10tp
RtlCreateRegistryKeyw8.1w10tp
RtlCreateSecurityDescriptorw8.1w10tp
RtlCreateSystemVolumeInformationFolderw8.1w10tp
RtlCreateUnicodeStringw8.1w10tp
RtlCreateUserThreadw8.1w10tp
RtlCultureNameToLCIDw8.1w10tp
RtlCustomCPToUnicodeNw8.1w10tp
RtlDecompressBufferw8.1w10tp
RtlDecompressBufferExw8.1w10tp
RtlDecompressBufferEx2 w10tp
RtlDecompressChunksw8.1w10tp
RtlDecompressFragmentw8.1w10tp
RtlDecompressFragmentEx w10tp
RtlDeletew8.1w10tp
RtlDeleteAcew8.1w10tp
RtlDeleteAtomFromAtomTablew8.1w10tp
RtlDeleteElementGenericTablew8.1w10tp
RtlDeleteElementGenericTableAvlw8.1w10tp
RtlDeleteElementGenericTableAvlExw8.1w10tp
RtlDeleteHashTablew8.1w10tp
RtlDeleteNoSplayw8.1w10tp
RtlDeleteOwnersRangesw8.1w10tp
RtlDeleteRangew8.1w10tp
RtlDeleteRegistryValuew8.1w10tp
RtlDescribeChunkw8.1w10tp
RtlDestroyAtomTablew8.1w10tp
RtlDestroyHeapw8.1w10tp
RtlDowncaseUnicodeCharw8.1w10tp
RtlDowncaseUnicodeStringw8.1w10tp
RtlDuplicateUnicodeStringw8.1w10tp
RtlEmptyAtomTablew8.1w10tp
RtlEndEnumerationHashTablew8.1w10tp
RtlEndWeakEnumerationHashTablew8.1w10tp
RtlEnlargedIntegerMultiplyw8.1w10tp
RtlEnlargedUnsignedDividew8.1w10tp
RtlEnlargedUnsignedMultiplyw8.1w10tp
RtlEnumerateEntryHashTablew8.1w10tp
RtlEnumerateGenericTablew8.1w10tp
RtlEnumerateGenericTableAvlw8.1w10tp
RtlEnumerateGenericTableLikeADirectoryw8.1w10tp
RtlEnumerateGenericTableWithoutSplayingw8.1w10tp
RtlEnumerateGenericTableWithoutSplayingAvlw8.1w10tp
RtlEqualLuidw8.1w10tp
RtlEqualSidw8.1w10tp
RtlEqualStringw8.1w10tp
RtlEqualUnicodeStringw8.1w10tp
RtlEqualWnfChangeStampsw8.1w10tp
RtlEthernetAddressToStringAw8.1w10tp
RtlEthernetAddressToStringWw8.1w10tp
RtlEthernetStringToAddressAw8.1w10tp
RtlEthernetStringToAddressWw8.1w10tp
RtlExpandHashTablew8.1w10tp
RtlExtendedIntegerMultiplyw8.1w10tp
RtlExtendedLargeIntegerDividew8.1w10tp
RtlExtendedMagicDividew8.1w10tp
RtlExtractBitMapw8.1w10tp
RtlFillMemoryw8.1w10tp
RtlFillMemoryUlongw8.1w10tp
RtlFillMemoryUlonglongw8.1w10tp
RtlFindAceByTypew8.1w10tp
RtlFindClearBitsw8.1w10tp
RtlFindClearBitsAndSetw8.1w10tp
RtlFindClearRunsw8.1w10tp
RtlFindClosestEncodableLengthw8.1w10tp
RtlFindFirstRunClearw8.1w10tp
RtlFindLastBackwardRunClearw8.1w10tp
RtlFindLeastSignificantBitw8.1w10tp
RtlFindLongestRunClearw8.1w10tp
RtlFindMessagew8.1w10tp
RtlFindMostSignificantBitw8.1w10tp
RtlFindNextForwardRunClearw8.1w10tp
RtlFindRangew8.1w10tp
RtlFindSetBitsw8.1w10tp
RtlFindSetBitsAndClearw8.1w10tp
RtlFindUnicodePrefixw8.1w10tp
RtlFirstFreeAce w10tp
RtlFormatCurrentUserKeyPathw8.1w10tp
RtlFormatMessagew8.1w10tp
RtlFreeAnsiStringw8.1w10tp
RtlFreeHeapw8.1w10tp
RtlFreeOemStringw8.1w10tp
RtlFreeRangeListw8.1w10tp
RtlFreeUnicodeStringw8.1w10tp
RtlGUIDFromStringw8.1w10tp
RtlGenerate8dot3Namew8.1w10tp
RtlGenerateClass5Guidw8.1w10tp
RtlGetAcew8.1w10tp
RtlGetAppContainerNamedObjectPathw8.1w10tp
RtlGetAppContainerParentw8.1w10tp
RtlGetAppContainerSidTypew8.1w10tp
RtlGetCallersAddressw8.1w10tp
RtlGetCompressionWorkSpaceSizew8.1w10tp
RtlGetControlSecurityDescriptor w10tp
RtlGetDaclSecurityDescriptorw8.1w10tp
RtlGetDefaultCodePagew8.1w10tp
RtlGetElementGenericTablew8.1w10tp
RtlGetElementGenericTableAvlw8.1w10tp
RtlGetEnabledExtendedFeaturesw8.1w10tp
RtlGetFirstRangew8.1w10tp
RtlGetGroupSecurityDescriptorw8.1w10tp
RtlGetIntegerAtomw8.1w10tp
RtlGetLastRangew8.1w10tp
RtlGetNextEntryHashTablew8.1w10tp
RtlGetNextRangew8.1w10tp
RtlGetNtGlobalFlagsw8.1w10tp
RtlGetOwnerSecurityDescriptorw8.1w10tp
RtlGetProductInfow8.1w10tp
RtlGetSaclSecurityDescriptorw8.1w10tp
RtlGetSetBootStatusDataw8.1w10tp
RtlGetThreadLangIdByIndexw8.1w10tp
RtlGetVersionw8.1w10tp
RtlHashUnicodeStringw8.1w10tp
RtlIdnToAsciiw8.1w10tp
RtlIdnToNameprepUnicodew8.1w10tp
RtlIdnToUnicodew8.1w10tp
RtlImageDirectoryEntryToDataw8.1w10tp
RtlImageNtHeaderw8.1w10tp
RtlImageNtHeaderExw8.1w10tp
RtlInitAnsiStringw8.1w10tp
RtlInitAnsiStringExw8.1w10tp
RtlInitCodePageTablew8.1w10tp
RtlInitEnumerationHashTablew8.1w10tp
RtlInitStringw8.1w10tp
RtlInitStringEx w10tp
RtlInitUnicodeStringw8.1w10tp
RtlInitUnicodeStringExw8.1w10tp
RtlInitWeakEnumerationHashTablew8.1w10tp
RtlInitializeBitMapw8.1w10tp
RtlInitializeGenericTablew8.1w10tp
RtlInitializeGenericTableAvlw8.1w10tp
RtlInitializeRangeListw8.1w10tp
RtlInitializeSidw8.1w10tp
RtlInitializeSidEx w10tp
RtlInitializeUnicodePrefixw8.1w10tp
RtlInsertElementGenericTablew8.1w10tp
RtlInsertElementGenericTableAvlw8.1w10tp
RtlInsertElementGenericTableFullw8.1w10tp
RtlInsertElementGenericTableFullAvlw8.1w10tp
RtlInsertEntryHashTablew8.1w10tp
RtlInsertUnicodePrefixw8.1w10tp
RtlInt64ToUnicodeStringw8.1w10tp
RtlIntegerToCharw8.1w10tp
RtlIntegerToUnicodew8.1w10tp
RtlIntegerToUnicodeStringw8.1w10tp
RtlInterlockedClearBitRunw8.1w10tp
RtlInterlockedSetBitRunw8.1w10tp
RtlInterlockedSetClearRunw8.1w10tp
RtlInvertRangeListw8.1w10tp
RtlInvertRangeListExw8.1w10tp
RtlIoDecodeMemIoResourcew8.1w10tp
RtlIoEncodeMemIoResourcew8.1w10tp
RtlIpv4AddressToStringAw8.1w10tp
RtlIpv4AddressToStringExAw8.1w10tp
RtlIpv4AddressToStringExWw8.1w10tp
RtlIpv4AddressToStringWw8.1w10tp
RtlIpv4StringToAddressAw8.1w10tp
RtlIpv4StringToAddressExAw8.1w10tp
RtlIpv4StringToAddressExWw8.1w10tp
RtlIpv4StringToAddressWw8.1w10tp
RtlIpv6AddressToStringAw8.1w10tp
RtlIpv6AddressToStringExAw8.1w10tp
RtlIpv6AddressToStringExWw8.1w10tp
RtlIpv6AddressToStringWw8.1w10tp
RtlIpv6StringToAddressAw8.1w10tp
RtlIpv6StringToAddressExAw8.1w10tp
RtlIpv6StringToAddressExWw8.1w10tp
RtlIpv6StringToAddressWw8.1w10tp
RtlIsGenericTableEmptyw8.1w10tp
RtlIsGenericTableEmptyAvlw8.1w10tp
RtlIsNameLegalDOS8Dot3w8.1w10tp
RtlIsNormalizedStringw8.1w10tp
RtlIsNtDdiVersionAvailablew8.1w10tp
RtlIsRangeAvailablew8.1w10tp
RtlIsServicePackVersionInstalledw8.1w10tp
RtlIsUntrustedObjectw8.1w10tp
RtlIsValidOemCharacterw8.1w10tp
RtlLCIDToCultureNamew8.1w10tp
RtlLargeIntegerAddw8.1w10tp
RtlLargeIntegerArithmeticShiftw8.1w10tp
RtlLargeIntegerDividew8.1w10tp
RtlLargeIntegerNegatew8.1w10tp
RtlLargeIntegerShiftLeftw8.1w10tp
RtlLargeIntegerShiftRightw8.1w10tp
RtlLargeIntegerSubtractw8.1w10tp
RtlLengthRequiredSidw8.1w10tp
RtlLengthSecurityDescriptorw8.1w10tp
RtlLengthSidw8.1w10tp
RtlLoadStringw8.1w10tp
RtlLocalTimeToSystemTimew8.1w10tp
RtlLockBootStatusDataw8.1w10tp
RtlLookupAtomInAtomTablew8.1w10tp
RtlLookupElementGenericTablew8.1w10tp
RtlLookupElementGenericTableAvlw8.1w10tp
RtlLookupElementGenericTableFullw8.1w10tp
RtlLookupElementGenericTableFullAvlw8.1w10tp
RtlLookupEntryHashTablew8.1w10tp
RtlLookupFirstMatchingElementGenericTableAvlw8.1w10tp
RtlMapGenericMaskw8.1w10tp
RtlMapSecurityErrorToNtStatusw8.1w10tp
RtlMergeRangeListsw8.1w10tp
RtlMoveMemoryw8.1w10tp
RtlMultiByteToUnicodeNw8.1w10tp
RtlMultiByteToUnicodeSizew8.1w10tp
RtlNextUnicodePrefixw8.1w10tp
RtlNormalizeStringw8.1w10tp
RtlNtStatusToDosErrorw8.1w10tp
RtlNtStatusToDosErrorNoTebw8.1w10tp
RtlNumberGenericTableElementsw8.1w10tp
RtlNumberGenericTableElementsAvlw8.1w10tp
RtlNumberOfClearBitsw8.1w10tp
RtlNumberOfClearBitsInRangew8.1w10tp
RtlNumberOfSetBitsw8.1w10tp
RtlNumberOfSetBitsInRangew8.1w10tp
RtlNumberOfSetBitsUlongPtrw8.1w10tp
RtlOemStringToCountedUnicodeStringw8.1w10tp
RtlOemStringToUnicodeSizew8.1w10tp
RtlOemStringToUnicodeStringw8.1w10tp
RtlOemToUnicodeNw8.1w10tp
RtlOpenCurrentUserw8.1w10tp
RtlOwnerAcesPresentw8.1w10tp
RtlPinAtomInAtomTablew8.1w10tp
RtlPrefetchMemoryNonTemporalw8.1w10tp
RtlPrefixStringw8.1w10tp
RtlPrefixUnicodeStringw8.1w10tp
RtlQueryAtomInAtomTablew8.1w10tp
RtlQueryDynamicTimeZoneInformationw8.1w10tp
RtlQueryElevationFlagsw8.1w10tp
RtlQueryInformationAclw8.1w10tp
RtlQueryModuleInformationw8.1w10tp
RtlQueryPackageIdentityw8.1w10tp
RtlQueryRegistryValuesw8.1w10tp
RtlQueryRegistryValuesExw8.1w10tp
RtlQueryTimeZoneInformationw8.1w10tp
RtlQueryValidationRunlevelw8.1w10tp
RtlRaiseExceptionw8.1w10tp
RtlRandomw8.1w10tp
RtlRandomExw8.1w10tp
RtlRbInsertNodeExw8.1w10tp
RtlRbRemoveNodew8.1w10tp
RtlRealPredecessorw8.1w10tp
RtlRealSuccessorw8.1w10tp
RtlRemoveEntryHashTablew8.1w10tp
RtlRemoveUnicodePrefixw8.1w10tp
RtlReplaceSidInSdw8.1w10tp
RtlReserveChunkw8.1w10tp
RtlRunOnceBeginInitializew8.1w10tp
RtlRunOnceCompletew8.1w10tp
RtlRunOnceExecuteOncew8.1w10tp
RtlRunOnceInitializew8.1w10tp
RtlSecondsSince1970ToTimew8.1w10tp
RtlSecondsSince1980ToTimew8.1w10tp
RtlSelfRelativeToAbsoluteSDw8.1w10tp
RtlSelfRelativeToAbsoluteSD2w8.1w10tp
RtlSetAllBitsw8.1w10tp
RtlSetBitw8.1w10tp
RtlSetBitsw8.1w10tp
RtlSetControlSecurityDescriptorw8.1w10tp
RtlSetDaclSecurityDescriptorw8.1w10tp
RtlSetDynamicTimeZoneInformationw8.1w10tp
RtlSetGroupSecurityDescriptorw8.1w10tp
RtlSetOwnerSecurityDescriptorw8.1w10tp
RtlSetPortableOperatingSystemw8.1w10tp
RtlSetSaclSecurityDescriptorw8.1w10tp
RtlSetTimeZoneInformationw8.1w10tp
RtlSidHashInitializew8.1w10tp
RtlSidHashLookupw8.1w10tp
RtlSizeHeapw8.1w10tp
RtlSplayw8.1w10tp
RtlStringFromGUIDw8.1w10tp
RtlSubAuthorityCountSidw8.1w10tp
RtlSubAuthoritySidw8.1w10tp
RtlSubtreePredecessorw8.1w10tp
RtlSubtreeSuccessorw8.1w10tp
RtlSystemTimeToLocalTimew8.1w10tp
RtlTestBitw8.1w10tp
RtlTimeFieldsToTimew8.1w10tp
RtlTimeToElapsedTimeFieldsw8.1w10tp
RtlTimeToSecondsSince1970w8.1w10tp
RtlTimeToSecondsSince1980w8.1w10tp
RtlTimeToTimeFieldsw8.1w10tp
RtlTraceDatabaseAddw8.1w10tp
RtlTraceDatabaseCreatew8.1w10tp
RtlTraceDatabaseDestroyw8.1w10tp
RtlTraceDatabaseEnumeratew8.1w10tp
RtlTraceDatabaseFindw8.1w10tp
RtlTraceDatabaseLockw8.1w10tp
RtlTraceDatabaseUnlockw8.1w10tp
RtlTraceDatabaseValidatew8.1w10tp
RtlUTF8ToUnicodeNw8.1w10tp
RtlUlongByteSwapw8.1w10tp
RtlUlonglongByteSwapw8.1w10tp
RtlUnicodeStringToAnsiSizew8.1w10tp
RtlUnicodeStringToAnsiStringw8.1w10tp
RtlUnicodeStringToCountedOemStringw8.1w10tp
RtlUnicodeStringToInt64 w10tp
RtlUnicodeStringToIntegerw8.1w10tp
RtlUnicodeStringToOemSizew8.1w10tp
RtlUnicodeStringToOemStringw8.1w10tp
RtlUnicodeToCustomCPNw8.1w10tp
RtlUnicodeToMultiByteNw8.1w10tp
RtlUnicodeToMultiByteSizew8.1w10tp
RtlUnicodeToOemNw8.1w10tp
RtlUnicodeToUTF8Nw8.1w10tp
RtlUnlockBootStatusDataw8.1w10tp
RtlUnwindw8.1w10tp
RtlUpcaseUnicodeCharw8.1w10tp
RtlUpcaseUnicodeStringw8.1w10tp
RtlUpcaseUnicodeStringToAnsiStringw8.1w10tp
RtlUpcaseUnicodeStringToCountedOemStringw8.1w10tp
RtlUpcaseUnicodeStringToOemStringw8.1w10tp
RtlUpcaseUnicodeToCustomCPNw8.1w10tp
RtlUpcaseUnicodeToMultiByteNw8.1w10tp
RtlUpcaseUnicodeToOemNw8.1w10tp
RtlUpperCharw8.1w10tp
RtlUpperStringw8.1w10tp
RtlUshortByteSwapw8.1w10tp
RtlValidAcl w10tp
RtlValidRelativeSecurityDescriptorw8.1w10tp
RtlValidSecurityDescriptorw8.1w10tp
RtlValidSidw8.1w10tp
RtlValidateUnicodeStringw8.1w10tp
RtlVerifyVersionInfow8.1w10tp
RtlVolumeDeviceToDosNamew8.1w10tp
RtlWalkFrameChainw8.1w10tp
RtlWeaklyEnumerateEntryHashTablew8.1w10tp
RtlWriteRegistryValuew8.1w10tp
RtlZeroHeapw8.1w10tp
RtlZeroMemoryw8.1w10tp
RtlxAnsiStringToUnicodeSizew8.1w10tp
RtlxOemStringToUnicodeSizew8.1w10tp
RtlxUnicodeStringToAnsiSizew8.1w10tp
RtlxUnicodeStringToOemSizew8.1w10tp
SeAccessCheckw8.1w10tp
SeAccessCheckExw8.1w10tp
SeAccessCheckFromStatew8.1w10tp
SeAccessCheckFromStateExw8.1w10tp
SeAccessCheckWithHintw8.1w10tp
SeAdjustAccessStateForTrustLabel w10tp
SeAppendPrivilegesw8.1w10tp
SeAssignSecurityw8.1w10tp
SeAssignSecurityExw8.1w10tp
SeAuditHardLinkCreationw8.1w10tp
SeAuditHardLinkCreationWithTransactionw8.1w10tp
SeAuditTransactionStateChangew8.1w10tp
SeAuditingAnyFileEventsWithContextw8.1w10tp
SeAuditingAnyFileEventsWithContextExw8.1w10tp
SeAuditingFileEventsw8.1w10tp
SeAuditingFileEventsWithContextw8.1w10tp
SeAuditingFileEventsWithContextExw8.1w10tp
SeAuditingFileOrGlobalEventsw8.1w10tp
SeAuditingHardLinkEventsw8.1w10tp
SeAuditingHardLinkEventsWithContextw8.1w10tp
SeAuditingWithTokenForSubcategoryw8.1w10tp
SeCaptureSecurityDescriptorw8.1w10tp
SeCaptureSubjectContextw8.1w10tp
SeCaptureSubjectContextExw8.1w10tp
SeCloseObjectAuditAlarmw8.1w10tp
SeCloseObjectAuditAlarmForNonObObjectw8.1w10tp
SeComputeAutoInheritByObjectTypew8.1w10tp
SeCreateAccessStatew8.1w10tp
SeCreateAccessStateExw8.1w10tp
SeCreateClientSecurityw8.1w10tp
SeCreateClientSecurityExw8.1w10tp
SeCreateClientSecurityFromSubjectContextw8.1w10tp
SeCreateClientSecurityFromSubjectContextExw8.1w10tp
SeDeassignSecurityw8.1w10tp
SeDeleteAccessStatew8.1w10tp
SeDeleteObjectAuditAlarmw8.1w10tp
SeDeleteObjectAuditAlarmWithTransactionw8.1w10tp
SeExamineSaclw8.1w10tp
SeExportsw8.1w10tp
SeFilterTokenw8.1w10tp
SeFreePrivilegesw8.1w10tp
SeGetCachedSigningLevelw8.1w10tp
SeGetLinkedTokenw8.1w10tp
SeGetLogonSessionTokenw8.1w10tp
SeImpersonateClientw8.1w10tp
SeImpersonateClientExw8.1w10tp
SeIsParentOfChildAppContainerw8.1w10tp
SeLocateProcessImageNamew8.1w10tp
SeLockSubjectContextw8.1w10tp
SeMarkLogonSessionForTerminationNotificationw8.1w10tp
SeOpenObjectAuditAlarmw8.1w10tp
SeOpenObjectAuditAlarmForNonObObjectw8.1w10tp
SeOpenObjectAuditAlarmWithTransactionw8.1w10tp
SeOpenObjectForDeleteAuditAlarmw8.1w10tp
SeOpenObjectForDeleteAuditAlarmWithTransactionw8.1w10tp
SePrivilegeCheckw8.1w10tp
SePrivilegeObjectAuditAlarmw8.1w10tp
SePublicDefaultDaclw8.1w10tp
SeQueryAuthenticationIdTokenw8.1w10tp
SeQueryInformationTokenw8.1w10tp
SeQuerySecureBootPolicyValuew8.1w10tp
SeQuerySecurityAttributesTokenw8.1w10tp
SeQuerySecurityDescriptorInfow8.1w10tp
SeQuerySessionIdTokenw8.1w10tp
SeRegisterImageVerificationCallback w10tp
SeRegisterLogonSessionTerminatedRoutinew8.1w10tp
SeReleaseSecurityDescriptorw8.1w10tp
SeReleaseSubjectContextw8.1w10tp
SeReportSecurityEventw8.1w10tp
SeReportSecurityEventWithSubCategoryw8.1w10tp
SeSecurityAttributePresentw8.1w10tp
SeSetAccessStateGenericMappingw8.1w10tp
SeSetAuditParameterw8.1w10tp
SeSetSecurityAttributesTokenw8.1w10tp
SeSetSecurityDescriptorInfow8.1w10tp
SeSetSecurityDescriptorInfoExw8.1w10tp
SeShouldCheckForAccessRightsFromParent w10tp
SeSinglePrivilegeCheckw8.1w10tp
SeSrpAccessCheckw8.1w10tp
SeSystemDefaultDaclw8.1w10tp
SeSystemDefaultSdw8.1w10tp
SeTokenFromAccessInformationw8.1w10tp
SeTokenImpersonationLevelw8.1w10tp
SeTokenIsAdminw8.1w10tp
SeTokenIsRestrictedw8.1w10tp
SeTokenIsWriteRestrictedw8.1w10tp
SeTokenObjectTypew8.1w10tp
SeTokenTypew8.1w10tp
SeUnlockSubjectContextw8.1w10tp
SeUnregisterImageVerificationCallback w10tp
SeUnregisterLogonSessionTerminatedRoutinew8.1w10tp
SeValidSecurityDescriptorw8.1w10tp
TmCancelPropagationRequestw8.1w10tp
TmCommitCompletew8.1w10tp
TmCommitEnlistmentw8.1w10tp
TmCommitTransactionw8.1w10tp
TmCreateEnlistmentw8.1w10tp
TmCurrentTransactionw8.1w10tp
TmDereferenceEnlistmentKeyw8.1w10tp
TmEnableCallbacksw8.1w10tp
TmEndPropagationRequestw8.1w10tp
TmEnlistmentObjectTypew8.1w10tp
TmFreezeTransactionsw8.1w10tp
TmGetTransactionIdw8.1w10tp
TmInitSystemw8.1w10tp
TmInitSystemPhase2w8.1w10tp
TmInitializeTransactionManagerw8.1w10tp
TmIsKTMCommitCoordinatorw8.1w10tp
TmIsTransactionActivew8.1w10tp
TmPrePrepareCompletew8.1w10tp
TmPrePrepareEnlistmentw8.1w10tp
TmPrepareCompletew8.1w10tp
TmPrepareEnlistmentw8.1w10tp
TmPropagationCompletew8.1w10tp
TmPropagationFailedw8.1w10tp
TmReadOnlyEnlistmentw8.1w10tp
TmRecoverEnlistmentw8.1w10tp
TmRecoverResourceManagerw8.1w10tp
TmRecoverTransactionManagerw8.1w10tp
TmReferenceEnlistmentKeyw8.1w10tp
TmRenameTransactionManagerw8.1w10tp
TmRequestOutcomeEnlistmentw8.1w10tp
TmResourceManagerObjectTypew8.1w10tp
TmRollbackCompletew8.1w10tp
TmRollbackEnlistmentw8.1w10tp
TmRollbackTransactionw8.1w10tp
TmSetCurrentTransactionw8.1w10tp
TmSinglePhaseRejectw8.1w10tp
TmThawTransactionsw8.1w10tp
TmTransactionManagerObjectTypew8.1w10tp
TmTransactionObjectTypew8.1w10tp
VerSetConditionMaskw8.1w10tp
VfCheckNxPagePriority w10tp
VfCheckNxPageProtection w10tp
VfCheckNxPoolType w10tp
VfFailDeviceNodew8.1w10tp
VfFailDriverw8.1w10tp
VfFailSystemBIOSw8.1w10tp
VfInsertContextw8.1w10tp
VfIsVerificationEnabledw8.1w10tp
VfQueryDeviceContextw8.1w10tp
VfQueryDispatchTablew8.1w10tp
VfQueryDriverContextw8.1w10tp
VfQueryIrpContextw8.1w10tp
VfQueryThreadContextw8.1w10tp
VfRemoveContextw8.1w10tp
VmAccessFault w10tp
VmCreateMemoryRange w10tp
VmDeleteMemoryRange w10tp
WRITE_REGISTER_BUFFER_UCHARw8.1w10tp
WRITE_REGISTER_BUFFER_ULONGw8.1w10tp
WRITE_REGISTER_BUFFER_USHORTw8.1w10tp
WRITE_REGISTER_UCHARw8.1w10tp
WRITE_REGISTER_ULONGw8.1w10tp
WRITE_REGISTER_USHORTw8.1w10tp
WheaAddErrorSourcew8.1w10tp
WheaConfigureErrorSourcew8.1w10tp
WheaGetErrorSourcew8.1w10tp
WheaInitializeRecordHeaderw8.1w10tp
WheaReportHwErrorw8.1w10tp
WmiGetClockw8.1w10tp
WmiQueryTraceInformationw8.1w10tp
WmiTraceMessagew8.1w10tp
WmiTraceMessageVaw8.1w10tp
XIPDispatchw8.1w10tp
ZwAccessCheckAndAuditAlarmw8.1w10tp
ZwAddBootEntryw8.1w10tp
ZwAddDriverEntryw8.1w10tp
ZwAdjustPrivilegesTokenw8.1w10tp
ZwAlertThreadw8.1w10tp
ZwAllocateLocallyUniqueIdw8.1w10tp
ZwAllocateVirtualMemoryw8.1w10tp
ZwAlpcAcceptConnectPortw8.1w10tp
ZwAlpcCancelMessagew8.1w10tp
ZwAlpcConnectPortw8.1w10tp
ZwAlpcConnectPortExw8.1w10tp
ZwAlpcCreatePortw8.1w10tp
ZwAlpcCreatePortSectionw8.1w10tp
ZwAlpcCreateResourceReservew8.1w10tp
ZwAlpcCreateSectionVieww8.1w10tp
ZwAlpcCreateSecurityContextw8.1w10tp
ZwAlpcDeletePortSectionw8.1w10tp
ZwAlpcDeleteResourceReservew8.1w10tp
ZwAlpcDeleteSectionVieww8.1w10tp
ZwAlpcDeleteSecurityContextw8.1w10tp
ZwAlpcDisconnectPortw8.1w10tp
ZwAlpcOpenSenderThread w10tp
ZwAlpcQueryInformationw8.1w10tp
ZwAlpcSendWaitReceivePortw8.1w10tp
ZwAlpcSetInformationw8.1w10tp
ZwAssignProcessToJobObjectw8.1w10tp
ZwAssociateWaitCompletionPacketw8.1w10tp
ZwCancelIoFilew8.1w10tp
ZwCancelIoFileEx w10tp
ZwCancelTimerw8.1w10tp
ZwClearEventw8.1w10tp
ZwClosew8.1w10tp
ZwCloseObjectAuditAlarmw8.1w10tp
ZwCommitCompletew8.1w10tp
ZwCommitEnlistmentw8.1w10tp
ZwCommitTransactionw8.1w10tp
ZwConnectPortw8.1w10tp
ZwCreateDirectoryObjectw8.1w10tp
ZwCreateEnlistmentw8.1w10tp
ZwCreateEventw8.1w10tp
ZwCreateFilew8.1w10tp
ZwCreateIoCompletionw8.1w10tp
ZwCreateJobObjectw8.1w10tp
ZwCreateKeyw8.1w10tp
ZwCreateKeyTransactedw8.1w10tp
ZwCreateResourceManagerw8.1w10tp
ZwCreateSectionw8.1w10tp
ZwCreateSymbolicLinkObjectw8.1w10tp
ZwCreateTimerw8.1w10tp
ZwCreateTransactionw8.1w10tp
ZwCreateTransactionManagerw8.1w10tp
ZwCreateWaitCompletionPacketw8.1w10tp
ZwCreateWnfStateNamew8.1w10tp
ZwDeleteBootEntryw8.1w10tp
ZwDeleteDriverEntryw8.1w10tp
ZwDeleteFilew8.1w10tp
ZwDeleteKeyw8.1w10tp
ZwDeleteValueKeyw8.1w10tp
ZwDeleteWnfStateDataw8.1w10tp
ZwDeleteWnfStateNamew8.1w10tp
ZwDeviceIoControlFilew8.1w10tp
ZwDisplayStringw8.1w10tp
ZwDuplicateObjectw8.1w10tp
ZwDuplicateTokenw8.1w10tp
ZwEnumerateBootEntriesw8.1w10tp
ZwEnumerateDriverEntriesw8.1w10tp
ZwEnumerateKeyw8.1w10tp
ZwEnumerateTransactionObjectw8.1w10tp
ZwEnumerateValueKeyw8.1w10tp
ZwFlushBuffersFilew8.1w10tp
ZwFlushBuffersFileExw8.1w10tp
ZwFlushInstructionCachew8.1w10tp
ZwFlushKeyw8.1w10tp
ZwFlushVirtualMemoryw8.1w10tp
ZwFreeVirtualMemoryw8.1w10tp
ZwFsControlFilew8.1w10tp
ZwGetNotificationResourceManagerw8.1w10tp
ZwImpersonateAnonymousTokenw8.1w10tp
ZwInitiatePowerActionw8.1w10tp
ZwIsProcessInJobw8.1w10tp
ZwLoadDriverw8.1w10tp
ZwLoadKeyw8.1w10tp
ZwLoadKeyExw8.1w10tp
ZwLockFilew8.1w10tp
ZwLockProductActivationKeysw8.1w10tp
ZwLockVirtualMemoryw8.1w10tp
ZwMakeTemporaryObjectw8.1w10tp
ZwMapViewOfSectionw8.1w10tp
ZwModifyBootEntryw8.1w10tp
ZwModifyDriverEntryw8.1w10tp
ZwNotifyChangeKeyw8.1w10tp
ZwNotifyChangeSessionw8.1w10tp
ZwOpenDirectoryObjectw8.1w10tp
ZwOpenEnlistmentw8.1w10tp
ZwOpenEventw8.1w10tp
ZwOpenFilew8.1w10tp
ZwOpenJobObjectw8.1w10tp
ZwOpenKeyw8.1w10tp
ZwOpenKeyExw8.1w10tp
ZwOpenKeyTransactedw8.1w10tp
ZwOpenKeyTransactedExw8.1w10tp
ZwOpenProcessw8.1w10tp
ZwOpenProcessTokenw8.1w10tp
ZwOpenProcessTokenExw8.1w10tp
ZwOpenResourceManagerw8.1w10tp
ZwOpenSectionw8.1w10tp
ZwOpenSessionw8.1w10tp
ZwOpenSymbolicLinkObjectw8.1w10tp
ZwOpenThreadw8.1w10tp
ZwOpenThreadTokenw8.1w10tp
ZwOpenThreadTokenExw8.1w10tp
ZwOpenTimerw8.1w10tp
ZwOpenTransactionw8.1w10tp
ZwOpenTransactionManagerw8.1w10tp
ZwPowerInformationw8.1w10tp
ZwPrePrepareCompletew8.1w10tp
ZwPrePrepareEnlistmentw8.1w10tp
ZwPrepareCompletew8.1w10tp
ZwPrepareEnlistmentw8.1w10tp
ZwPropagationCompletew8.1w10tp
ZwPropagationFailedw8.1w10tp
ZwProtectVirtualMemory w10tp
ZwPulseEventw8.1w10tp
ZwQueryBootEntryOrderw8.1w10tp
ZwQueryBootOptionsw8.1w10tp
ZwQueryDefaultLocalew8.1w10tp
ZwQueryDefaultUILanguagew8.1w10tp
ZwQueryDirectoryFilew8.1w10tp
ZwQueryDirectoryObjectw8.1w10tp
ZwQueryDriverEntryOrderw8.1w10tp
ZwQueryEaFilew8.1w10tp
ZwQueryFullAttributesFilew8.1w10tp
ZwQueryInformationEnlistmentw8.1w10tp
ZwQueryInformationFilew8.1w10tp
ZwQueryInformationJobObjectw8.1w10tp
ZwQueryInformationProcessw8.1w10tp
ZwQueryInformationResourceManagerw8.1w10tp
ZwQueryInformationThreadw8.1w10tp
ZwQueryInformationTokenw8.1w10tp
ZwQueryInformationTransactionw8.1w10tp
ZwQueryInformationTransactionManagerw8.1w10tp
ZwQueryInstallUILanguagew8.1w10tp
ZwQueryKeyw8.1w10tp
ZwQueryLicenseValuew8.1w10tp
ZwQueryObjectw8.1w10tp
ZwQueryQuotaInformationFilew8.1w10tp
ZwQuerySectionw8.1w10tp
ZwQuerySecurityAttributesTokenw8.1w10tp
ZwQuerySecurityObjectw8.1w10tp
ZwQuerySymbolicLinkObjectw8.1w10tp
ZwQuerySystemEnvironmentValueExw8.1w10tp
ZwQuerySystemInformationw8.1w10tp
ZwQuerySystemInformationExw8.1w10tp
ZwQueryValueKeyw8.1w10tp
ZwQueryVirtualMemoryw8.1w10tp
ZwQueryVolumeInformationFilew8.1w10tp
ZwQueryWnfStateDataw8.1w10tp
ZwQueryWnfStateNameInformationw8.1w10tp
ZwReadFilew8.1w10tp
ZwReadOnlyEnlistmentw8.1w10tp
ZwRecoverEnlistmentw8.1w10tp
ZwRecoverResourceManagerw8.1w10tp
ZwRecoverTransactionManagerw8.1w10tp
ZwRemoveIoCompletionw8.1w10tp
ZwRemoveIoCompletionExw8.1w10tp
ZwRenameKeyw8.1w10tp
ZwReplaceKeyw8.1w10tp
ZwRequestPortw8.1w10tp
ZwRequestWaitReplyPortw8.1w10tp
ZwResetEventw8.1w10tp
ZwRestoreKeyw8.1w10tp
ZwRollbackCompletew8.1w10tp
ZwRollbackEnlistmentw8.1w10tp
ZwRollbackTransactionw8.1w10tp
ZwSaveKeyw8.1w10tp
ZwSaveKeyExw8.1w10tp
ZwSecureConnectPortw8.1w10tp
ZwSetBootEntryOrderw8.1w10tp
ZwSetBootOptionsw8.1w10tp
ZwSetCachedSigningLevelw8.1w10tp
ZwSetDefaultLocalew8.1w10tp
ZwSetDefaultUILanguagew8.1w10tp
ZwSetDriverEntryOrderw8.1w10tp
ZwSetEaFilew8.1w10tp
ZwSetEventw8.1w10tp
ZwSetInformationEnlistmentw8.1w10tp
ZwSetInformationFilew8.1w10tp
ZwSetInformationJobObjectw8.1w10tp
ZwSetInformationKeyw8.1w10tp
ZwSetInformationObjectw8.1w10tp
ZwSetInformationProcessw8.1w10tp
ZwSetInformationResourceManagerw8.1w10tp
ZwSetInformationThreadw8.1w10tp
ZwSetInformationTokenw8.1w10tp
ZwSetInformationTransactionw8.1w10tp
ZwSetInformationVirtualMemoryw8.1w10tp
ZwSetQuotaInformationFilew8.1w10tp
ZwSetSecurityObjectw8.1w10tp
ZwSetSystemEnvironmentValueExw8.1w10tp
ZwSetSystemInformationw8.1w10tp
ZwSetSystemTimew8.1w10tp
ZwSetTimerw8.1w10tp
ZwSetTimerExw8.1w10tp
ZwSetValueKeyw8.1w10tp
ZwSetVolumeInformationFilew8.1w10tp
ZwTerminateJobObjectw8.1w10tp
ZwTerminateProcessw8.1w10tp
ZwTraceEventw8.1w10tp
ZwTranslateFilePathw8.1w10tp
ZwUnloadDriverw8.1w10tp
ZwUnloadKeyw8.1w10tp
ZwUnloadKeyExw8.1w10tp
ZwUnlockFilew8.1w10tp
ZwUnlockVirtualMemoryw8.1w10tp
ZwUnmapViewOfSectionw8.1w10tp
ZwUpdateWnfStateDataw8.1w10tp
ZwWaitForMultipleObjectsw8.1w10tp
ZwWaitForSingleObjectw8.1w10tp
ZwWriteFilew8.1w10tp
ZwYieldExecutionw8.1w10tp
_CIcosw8.1w10tp
_CIsinw8.1w10tp
_CIsqrtw8.1w10tp
_abnormal_terminationw8.1w10tp
_alldivw8.1w10tp
_alldvrmw8.1w10tp
_allmulw8.1w10tp
_alloca_probew8.1w10tp
_alloca_probe_16w8.1w10tp
_alloca_probe_8w8.1w10tp
_allremw8.1w10tp
_allshlw8.1w10tp
_allshrw8.1w10tp
_aulldivw8.1w10tp
_aulldvrmw8.1w10tp
_aullremw8.1w10tp
_aullshrw8.1w10tp
_chkstkw8.1w10tp
_except_handler2w8.1w10tp
_except_handler3w8.1w10tp
_finite w10tp
_global_unwind2w8.1w10tp
_i64toa_sw8.1w10tp
_i64tow_sw8.1w10tp
_itoaw8.1w10tp
_itoa_sw8.1w10tp
_itoww8.1w10tp
_itow_sw8.1w10tp
_local_unwind2w8.1w10tp
_ltoa_sw8.1w10tp
_ltow_sw8.1w10tp
_makepath_sw8.1w10tp
_purecallw8.1w10tp
_snprintfw8.1w10tp
_snprintf_sw8.1w10tp
_snscanf_sw8.1w10tp
_snwprintfw8.1w10tp
_snwprintf_sw8.1w10tp
_snwscanf_sw8.1w10tp
_splitpath_sw8.1w10tp
_stricmpw8.1w10tp
_strlwrw8.1w10tp
_strnicmpw8.1w10tp
_strnsetw8.1w10tp
_strnset_sw8.1w10tp
_strrevw8.1w10tp
_strsetw8.1w10tp
_strset_sw8.1w10tp
_strtoui64w8.1w10tp
_struprw8.1w10tp
_swprintfw8.1w10tp
_ui64toa_sw8.1w10tp
_ui64tow_sw8.1w10tp
_ultoa_sw8.1w10tp
_ultow_sw8.1w10tp
_vsnprintfw8.1w10tp
_vsnprintf_sw8.1w10tp
_vsnwprintfw8.1w10tp
_vsnwprintf_sw8.1w10tp
_vswprintfw8.1w10tp
_wcsicmpw8.1w10tp
_wcslwrw8.1w10tp
_wcslwr_s w10tp
_wcsnicmpw8.1w10tp
_wcsnsetw8.1w10tp
_wcsnset_sw8.1w10tp
_wcsrevw8.1w10tp
_wcsset_sw8.1w10tp
_wcsuprw8.1w10tp
_wmakepath_sw8.1w10tp
_wsplitpath_sw8.1w10tp
_wtoiw8.1w10tp
_wtolw8.1w10tp
atoiw8.1w10tp
atolw8.1w10tp
bsearchw8.1w10tp
bsearch_sw8.1w10tp
isdigitw8.1w10tp
islowerw8.1w10tp
isprintw8.1w10tp
isspacew8.1w10tp
isupperw8.1w10tp
iswalnum w10tp
iswdigit w10tp
iswspace w10tp
isxdigitw8.1w10tp
mbstowcsw8.1w10tp
mbtowcw8.1w10tp
memchrw8.1w10tp
memcmpw8.1w10tp
memcpyw8.1w10tp
memcpy_sw8.1w10tp
memmovew8.1w10tp
memmove_sw8.1w10tp
memsetw8.1w10tp
psMUITestw8.1w10tp
qsortw8.1w10tp
randw8.1w10tp
sprintfw8.1w10tp
sprintf_sw8.1w10tp
srandw8.1w10tp
sscanf_sw8.1w10tp
strcatw8.1w10tp
strcat_sw8.1w10tp
strchrw8.1w10tp
strcmpw8.1w10tp
strcpyw8.1w10tp
strcpy_sw8.1w10tp
strlenw8.1w10tp
strncatw8.1w10tp
strncat_sw8.1w10tp
strncmpw8.1w10tp
strncpyw8.1w10tp
strncpy_sw8.1w10tp
strnlenw8.1w10tp
strrchrw8.1w10tp
strspnw8.1w10tp
strstrw8.1w10tp
strtok_sw8.1w10tp
swprintfw8.1w10tp
swprintf_sw8.1w10tp
swscanf_sw8.1w10tp
tolowerw8.1w10tp
toupperw8.1w10tp
towlowerw8.1w10tp
towupperw8.1w10tp
vDbgPrintExw8.1w10tp
vDbgPrintExWithPrefixw8.1w10tp
vsprintfw8.1w10tp
vsprintf_sw8.1w10tp
vswprintf_sw8.1w10tp
wcscatw8.1w10tp
wcscat_sw8.1w10tp
wcschrw8.1w10tp
wcscmpw8.1w10tp
wcscpyw8.1w10tp
wcscpy_sw8.1w10tp
wcscspnw8.1w10tp
wcslenw8.1w10tp
wcsncatw8.1w10tp
wcsncat_sw8.1w10tp
wcsncmpw8.1w10tp
wcsncpyw8.1w10tp
wcsncpy_sw8.1w10tp
wcsnlenw8.1w10tp
wcsrchrw8.1w10tp
wcsspnw8.1w10tp
wcsstrw8.1w10tp
wcstombsw8.1w10tp
wcstoulw8.1w10tp
wctombw8.1w10tp

WdfFunctions.idc for windows 10 Technical Preview 64bit

$
0
0
since w8.1 only pfnWdfDeviceStopIdleActual & pfnWdfDeviceResumeIdleActual was added


#include

static add_struct(size)
{
 auto id, mid;
 id = AddStrucEx(-1,"WDFFUNCTIONS",0);
 if ( -1 == id )
   id = GetStrucIdByName("WDFFUNCTIONS");
 if ( -1 == id )
   return -1;
    mid = AddStrucMember(id,"pfnWdfChildListCreate",    0X0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfChildListGetDevice",    0X8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfChildListRetrievePdo",    0X10,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfChildListRetrieveAddressDescription",    0X18,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfChildListBeginScan",    0X20,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfChildListEndScan",    0X28,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfChildListBeginIteration",    0X30,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfChildListRetrieveNextDevice",    0X38,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfChildListEndIteration",    0X40,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfChildListAddOrUpdateChildDescriptionAsPresent",    0X48,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfChildListUpdateChildDescriptionAsMissing",    0X50,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfChildListUpdateAllChildDescriptionsAsPresent",    0X58,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfChildListRequestChildEject",    0X60,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCollectionCreate",    0X68,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCollectionGetCount",    0X70,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCollectionAdd",    0X78,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCollectionRemove",    0X80,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCollectionRemoveItem",    0X88,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCollectionGetItem",    0X90,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCollectionGetFirstItem",    0X98,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCollectionGetLastItem",    0XA0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCommonBufferCreate",    0XA8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCommonBufferGetAlignedVirtualAddress",    0XB0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCommonBufferGetAlignedLogicalAddress",    0XB8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCommonBufferGetLength",    0XC0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfControlDeviceInitAllocate",    0XC8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfControlDeviceInitSetShutdownNotification",    0XD0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfControlFinishInitializing",    0XD8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceGetDeviceState",    0XE0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceSetDeviceState",    0XE8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWdmDeviceGetWdfDeviceHandle",    0XF0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceWdmGetDeviceObject",    0XF8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceWdmGetAttachedDevice",    0X100,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceWdmGetPhysicalDevice",    0X108,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceWdmDispatchPreprocessedIrp",    0X110,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceAddDependentUsageDeviceObject",    0X118,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceAddRemovalRelationsPhysicalDevice",    0X120,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceRemoveRemovalRelationsPhysicalDevice",    0X128,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceClearRemovalRelationsDevices",    0X130,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceGetDriver",    0X138,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceRetrieveDeviceName",    0X140,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceAssignMofResourceName",    0X148,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceGetIoTarget",    0X150,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceGetDevicePnpState",    0X158,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceGetDevicePowerState",    0X160,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceGetDevicePowerPolicyState",    0X168,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceAssignS0IdleSettings",    0X170,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceAssignSxWakeSettings",    0X178,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceOpenRegistryKey",    0X180,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceSetSpecialFileSupport",    0X188,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceSetCharacteristics",    0X190,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceGetCharacteristics",    0X198,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceGetAlignmentRequirement",    0X1A0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceSetAlignmentRequirement",    0X1A8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitFree",    0X1B0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitSetPnpPowerEventCallbacks",    0X1B8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitSetPowerPolicyEventCallbacks",    0X1C0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitSetPowerPolicyOwnership",    0X1C8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitRegisterPnpStateChangeCallback",    0X1D0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitRegisterPowerStateChangeCallback",    0X1D8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitRegisterPowerPolicyStateChangeCallback",    0X1E0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitSetIoType",    0X1E8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitSetExclusive",    0X1F0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitSetPowerNotPageable",    0X1F8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitSetPowerPageable",    0X200,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitSetPowerInrush",    0X208,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitSetDeviceType",    0X210,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitAssignName",    0X218,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitAssignSDDLString",    0X220,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitSetDeviceClass",    0X228,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitSetCharacteristics",    0X230,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitSetFileObjectConfig",    0X238,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitSetRequestAttributes",    0X240,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitAssignWdmIrpPreprocessCallback",    0X248,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceInitSetIoInCallerContextCallback",    0X250,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceCreate",    0X258,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceSetStaticStopRemove",    0X260,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceCreateDeviceInterface",    0X268,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceSetDeviceInterfaceState",    0X270,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceRetrieveDeviceInterfaceString",    0X278,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceCreateSymbolicLink",    0X280,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceQueryProperty",    0X288,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceAllocAndQueryProperty",    0X290,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceSetPnpCapabilities",    0X298,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceSetPowerCapabilities",    0X2A0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceSetBusInformationForChildren",    0X2A8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceIndicateWakeStatus",    0X2B0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceSetFailed",    0X2B8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceStopIdle",    0X2C0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceResumeIdle",    0X2C8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceGetFileObject",    0X2D0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceEnqueueRequest",    0X2D8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceGetDefaultQueue",    0X2E0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceConfigureRequestDispatching",    0X2E8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaEnablerCreate",    0X2F0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaEnablerGetMaximumLength",    0X2F8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaEnablerGetMaximumScatterGatherElements",    0X300,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaEnablerSetMaximumScatterGatherElements",    0X308,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaTransactionCreate",    0X310,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaTransactionInitialize",    0X318,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaTransactionInitializeUsingRequest",    0X320,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaTransactionExecute",    0X328,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaTransactionRelease",    0X330,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaTransactionDmaCompleted",    0X338,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaTransactionDmaCompletedWithLength",    0X340,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaTransactionDmaCompletedFinal",    0X348,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaTransactionGetBytesTransferred",    0X350,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaTransactionSetMaximumLength",    0X358,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaTransactionGetRequest",    0X360,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaTransactionGetCurrentDmaTransferLength",    0X368,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaTransactionGetDevice",    0X370,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDpcCreate",    0X378,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDpcEnqueue",    0X380,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDpcCancel",    0X388,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDpcGetParentObject",    0X390,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDpcWdmGetDpc",    0X398,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDriverCreate",    0X3A0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDriverGetRegistryPath",    0X3A8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDriverWdmGetDriverObject",    0X3B0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDriverOpenParametersRegistryKey",    0X3B8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWdmDriverGetWdfDriverHandle",    0X3C0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDriverRegisterTraceInfo",    0X3C8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDriverRetrieveVersionString",    0X3D0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDriverIsVersionAvailable",    0X3D8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFdoInitWdmGetPhysicalDevice",    0X3E0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFdoInitOpenRegistryKey",    0X3E8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFdoInitQueryProperty",    0X3F0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFdoInitAllocAndQueryProperty",    0X3F8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFdoInitSetEventCallbacks",    0X400,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFdoInitSetFilter",    0X408,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFdoInitSetDefaultChildListConfig",    0X410,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFdoQueryForInterface",    0X418,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFdoGetDefaultChildList",    0X420,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFdoAddStaticChild",    0X428,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFdoLockStaticChildListForIteration",    0X430,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFdoRetrieveNextStaticChild",    0X438,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFdoUnlockStaticChildListFromIteration",    0X440,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFileObjectGetFileName",    0X448,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFileObjectGetFlags",    0X450,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFileObjectGetDevice",    0X458,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfFileObjectWdmGetFileObject",    0X460,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfInterruptCreate",    0X468,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfInterruptQueueDpcForIsr",    0X470,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfInterruptSynchronize",    0X478,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfInterruptAcquireLock",    0X480,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfInterruptReleaseLock",    0X488,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfInterruptEnable",    0X490,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfInterruptDisable",    0X498,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfInterruptWdmGetInterrupt",    0X4A0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfInterruptGetInfo",    0X4A8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfInterruptSetPolicy",    0X4B0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfInterruptGetDevice",    0X4B8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoQueueCreate",    0X4C0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoQueueGetState",    0X4C8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoQueueStart",    0X4D0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoQueueStop",    0X4D8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoQueueStopSynchronously",    0X4E0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoQueueGetDevice",    0X4E8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoQueueRetrieveNextRequest",    0X4F0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoQueueRetrieveRequestByFileObject",    0X4F8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoQueueFindRequest",    0X500,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoQueueRetrieveFoundRequest",    0X508,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoQueueDrainSynchronously",    0X510,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoQueueDrain",    0X518,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoQueuePurgeSynchronously",    0X520,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoQueuePurge",    0X528,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoQueueReadyNotify",    0X530,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetCreate",    0X538,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetOpen",    0X540,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetCloseForQueryRemove",    0X548,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetClose",    0X550,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetStart",    0X558,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetStop",    0X560,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetGetState",    0X568,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetGetDevice",    0X570,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetQueryTargetProperty",    0X578,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetAllocAndQueryTargetProperty",    0X580,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetQueryForInterface",    0X588,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetWdmGetTargetDeviceObject",    0X590,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetWdmGetTargetPhysicalDevice",    0X598,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetWdmGetTargetFileObject",    0X5A0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetWdmGetTargetFileHandle",    0X5A8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetSendReadSynchronously",    0X5B0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetFormatRequestForRead",    0X5B8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetSendWriteSynchronously",    0X5C0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetFormatRequestForWrite",    0X5C8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetSendIoctlSynchronously",    0X5D0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetFormatRequestForIoctl",    0X5D8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetSendInternalIoctlSynchronously",    0X5E0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetFormatRequestForInternalIoctl",    0X5E8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetSendInternalIoctlOthersSynchronously",    0X5F0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoTargetFormatRequestForInternalIoctlOthers",    0X5F8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfMemoryCreate",    0X600,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfMemoryCreatePreallocated",    0X608,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfMemoryGetBuffer",    0X610,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfMemoryAssignBuffer",    0X618,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfMemoryCopyToBuffer",    0X620,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfMemoryCopyFromBuffer",    0X628,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfLookasideListCreate",    0X630,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfMemoryCreateFromLookaside",    0X638,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceMiniportCreate",    0X640,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDriverMiniportUnload",    0X648,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfObjectGetTypedContextWorker",    0X650,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfObjectAllocateContext",    0X658,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfObjectContextGetObject",    0X660,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfObjectReferenceActual",    0X668,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfObjectDereferenceActual",    0X670,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfObjectCreate",    0X678,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfObjectDelete",    0X680,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfObjectQuery",    0X688,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoInitAllocate",    0X690,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoInitSetEventCallbacks",    0X698,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoInitAssignDeviceID",    0X6A0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoInitAssignInstanceID",    0X6A8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoInitAddHardwareID",    0X6B0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoInitAddCompatibleID",    0X6B8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoInitAddDeviceText",    0X6C0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoInitSetDefaultLocale",    0X6C8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoInitAssignRawDevice",    0X6D0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoMarkMissing",    0X6D8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoRequestEject",    0X6E0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoGetParent",    0X6E8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoRetrieveIdentificationDescription",    0X6F0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoRetrieveAddressDescription",    0X6F8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoUpdateAddressDescription",    0X700,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoAddEjectionRelationsPhysicalDevice",    0X708,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoRemoveEjectionRelationsPhysicalDevice",    0X710,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoClearEjectionRelationsDevices",    0X718,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceAddQueryInterface",    0X720,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryOpenKey",    0X728,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryCreateKey",    0X730,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryClose",    0X738,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryWdmGetHandle",    0X740,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryRemoveKey",    0X748,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryRemoveValue",    0X750,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryQueryValue",    0X758,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryQueryMemory",    0X760,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryQueryMultiString",    0X768,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryQueryUnicodeString",    0X770,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryQueryString",    0X778,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryQueryULong",    0X780,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryAssignValue",    0X788,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryAssignMemory",    0X790,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryAssignMultiString",    0X798,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryAssignUnicodeString",    0X7A0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryAssignString",    0X7A8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRegistryAssignULong",    0X7B0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestCreate",    0X7B8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestCreateFromIrp",    0X7C0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestReuse",    0X7C8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestChangeTarget",    0X7D0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestFormatRequestUsingCurrentType",    0X7D8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestWdmFormatUsingStackLocation",    0X7E0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestSend",    0X7E8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestGetStatus",    0X7F0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestMarkCancelable",    0X7F8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestUnmarkCancelable",    0X800,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestIsCanceled",    0X808,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestCancelSentRequest",    0X810,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestIsFrom32BitProcess",    0X818,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestSetCompletionRoutine",    0X820,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestGetCompletionParams",    0X828,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestAllocateTimer",    0X830,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestComplete",    0X838,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestCompleteWithPriorityBoost",    0X840,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestCompleteWithInformation",    0X848,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestGetParameters",    0X850,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestRetrieveInputMemory",    0X858,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestRetrieveOutputMemory",    0X860,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestRetrieveInputBuffer",    0X868,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestRetrieveOutputBuffer",    0X870,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestRetrieveInputWdmMdl",    0X878,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestRetrieveOutputWdmMdl",    0X880,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestRetrieveUnsafeUserInputBuffer",    0X888,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestRetrieveUnsafeUserOutputBuffer",    0X890,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestSetInformation",    0X898,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestGetInformation",    0X8A0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestGetFileObject",    0X8A8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestProbeAndLockUserBufferForRead",    0X8B0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestProbeAndLockUserBufferForWrite",    0X8B8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestGetRequestorMode",    0X8C0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestForwardToIoQueue",    0X8C8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestGetIoQueue",    0X8D0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestRequeue",    0X8D8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestStopAcknowledge",    0X8E0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestWdmGetIrp",    0X8E8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoResourceRequirementsListSetSlotNumber",    0X8F0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoResourceRequirementsListSetInterfaceType",    0X8F8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoResourceRequirementsListAppendIoResList",    0X900,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoResourceRequirementsListInsertIoResList",    0X908,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoResourceRequirementsListGetCount",    0X910,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoResourceRequirementsListGetIoResList",    0X918,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoResourceRequirementsListRemove",    0X920,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoResourceRequirementsListRemoveByIoResList",    0X928,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoResourceListCreate",    0X930,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoResourceListAppendDescriptor",    0X938,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoResourceListInsertDescriptor",    0X940,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoResourceListUpdateDescriptor",    0X948,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoResourceListGetCount",    0X950,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoResourceListGetDescriptor",    0X958,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoResourceListRemove",    0X960,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoResourceListRemoveByDescriptor",    0X968,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCmResourceListAppendDescriptor",    0X970,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCmResourceListInsertDescriptor",    0X978,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCmResourceListGetCount",    0X980,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCmResourceListGetDescriptor",    0X988,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCmResourceListRemove",    0X990,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfCmResourceListRemoveByDescriptor",    0X998,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfStringCreate",    0X9A0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfStringGetUnicodeString",    0X9A8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfObjectAcquireLock",    0X9B0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfObjectReleaseLock",    0X9B8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWaitLockCreate",    0X9C0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWaitLockAcquire",    0X9C8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWaitLockRelease",    0X9D0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfSpinLockCreate",    0X9D8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfSpinLockAcquire",    0X9E0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfSpinLockRelease",    0X9E8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfTimerCreate",    0X9F0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfTimerStart",    0X9F8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfTimerStop",    0XA00,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfTimerGetParentObject",    0XA08,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceCreate",    0XA10,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceRetrieveInformation",    0XA18,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceGetDeviceDescriptor",    0XA20,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceRetrieveConfigDescriptor",    0XA28,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceQueryString",    0XA30,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceAllocAndQueryString",    0XA38,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceFormatRequestForString",    0XA40,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceGetNumInterfaces",    0XA48,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceSelectConfig",    0XA50,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceWdmGetConfigurationHandle",    0XA58,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceRetrieveCurrentFrameNumber",    0XA60,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceSendControlTransferSynchronously",    0XA68,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceFormatRequestForControlTransfer",    0XA70,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceIsConnectedSynchronous",    0XA78,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceResetPortSynchronously",    0XA80,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceCyclePortSynchronously",    0XA88,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceFormatRequestForCyclePort",    0XA90,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceSendUrbSynchronously",    0XA98,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceFormatRequestForUrb",    0XAA0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeGetInformation",    0XAA8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeIsInEndpoint",    0XAB0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeIsOutEndpoint",    0XAB8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeGetType",    0XAC0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeSetNoMaximumPacketSizeCheck",    0XAC8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeWriteSynchronously",    0XAD0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeFormatRequestForWrite",    0XAD8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeReadSynchronously",    0XAE0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeFormatRequestForRead",    0XAE8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeConfigContinuousReader",    0XAF0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeAbortSynchronously",    0XAF8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeFormatRequestForAbort",    0XB00,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeResetSynchronously",    0XB08,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeFormatRequestForReset",    0XB10,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeSendUrbSynchronously",    0XB18,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeFormatRequestForUrb",    0XB20,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbInterfaceGetInterfaceNumber",    0XB28,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbInterfaceGetNumEndpoints",    0XB30,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbInterfaceGetDescriptor",    0XB38,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbInterfaceSelectSetting",    0XB40,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbInterfaceGetEndpointInformation",    0XB48,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetDeviceGetInterface",    0XB50,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbInterfaceGetConfiguredSettingIndex",    0XB58,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbInterfaceGetNumConfiguredPipes",    0XB60,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbInterfaceGetConfiguredPipe",    0XB68,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfUsbTargetPipeWdmGetPipeHandle",    0XB70,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfVerifierDbgBreakPoint",    0XB78,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfVerifierKeBugCheck",    0XB80,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWmiProviderCreate",    0XB88,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWmiProviderGetDevice",    0XB90,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWmiProviderIsEnabled",    0XB98,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWmiProviderGetTracingHandle",    0XBA0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWmiInstanceCreate",    0XBA8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWmiInstanceRegister",    0XBB0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWmiInstanceDeregister",    0XBB8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWmiInstanceGetDevice",    0XBC0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWmiInstanceGetProvider",    0XBC8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWmiInstanceFireEvent",    0XBD0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWorkItemCreate",    0XBD8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWorkItemEnqueue",    0XBE0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWorkItemGetParentObject",    0XBE8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfWorkItemFlush",    0XBF0,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
 if ( size == 0x17f )
   return id;
    mid = AddStrucMember(id,"pfnWdfCommonBufferCreateWithConfig",    0XBF8,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaEnablerGetFragmentLength",    0XC00,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDmaEnablerWdmGetDmaAdapter",    0XC08,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
 if ( size == 0x182 ) // vista
   return id;
    mid = AddStrucMember(id,"pfnWdfUsbInterfaceGetNumSettings",    0XC10,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
 if ( size == 0x183 ) // vista    sp2
   return id;
    mid = AddStrucMember(id,"pfnWdfDeviceRemoveDependentUsageDeviceObject",    0XC18,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfDeviceGetSystemPowerAction",    0XC20,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfInterruptSetExtendedPolicy",    0XC28,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfIoQueueAssignForwardProgressPolicy",    0XC30,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoInitAssignContainerID",    0XC38,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfPdoInitAllowForwardingRequestToParent",    0XC40,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestMarkCancelableEx",    0XC48,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestIsReserved",    0XC50,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
    mid = AddStrucMember(id,"pfnWdfRequestForwardToParentDeviceIoQueue",    0XC58,    0x35500400,    0XFFFFFFFFFFFFFFFF,    8,    0XFFFFFFFFFFFFFFFF,    0X0,    0x000009);
  if ( size == 0x18c ) // w7
    return id;
    AddStrucMember(id,"pfnWdfCxDeviceInitAllocate",    0Xc60,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfCxDeviceInitAssignWdmIrpPreprocessCallback",    0Xc68,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfCxDeviceInitSetIoInCallerContextCallback",    0Xc70,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfCxDeviceInitSetRequestAttributes",    0Xc78,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfCxDeviceInitSetFileObjectConfig",    0Xc80,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDeviceWdmDispatchIrp",            0Xc88,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDeviceWdmDispatchIrpToIoQueue",    0Xc90,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDeviceInitSetRemoveLockOptions",    0Xc98,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDeviceConfigureWdmIrpDispatchCallback",0Xca0,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDmaEnablerConfigureSystemProfile",    0Xca8,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDmaTransactionInitializeUsingOffset",    0Xcb0,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDmaTransactionGetTransferInfo",    0Xcb8,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDmaTransactionSetChannelConfigurationCallback",0Xcc0,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDmaTransactionSetTransferCompleteCallback",    0Xcc8,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDmaTransactionSetImmediateExecution",    0Xcd0,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDmaTransactionAllocateResources",    0Xcd8,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDmaTransactionSetDeviceAddressOffset",    0Xce0,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDmaTransactionFreeResources",    0Xce8,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDmaTransactionCancel",        0Xcf0,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDmaTransactionWdmGetTransferContext",    0XCf8,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfInterruptQueueWorkItemForIsr",    0Xd00,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfInterruptTryToAcquireLock",    0Xd08,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfIoQueueStopAndPurge",    0Xd10,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfIoQueueStopAndPurgeSynchronously",    0Xd18,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfIoTargetPurge",    0Xd20,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfUsbTargetDeviceCreateWithParameters",    0Xd28,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfUsbTargetDeviceQueryUsbCapability",    0Xd30,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfUsbTargetDeviceCreateUrb",    0Xd38,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfUsbTargetDeviceCreateIsochUrb",    0Xd40,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDeviceWdmAssignPowerFrameworkSettings",    0Xd48,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDmaTransactionStopSystemTransfer",    0Xd50,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfCxVerifierKeBugCheck",    0Xd58,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfInterruptReportActive",    0Xd60,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfInterruptReportInactive",    0Xd68,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfDeviceInitSetReleaseHardwareOrderOnFailure",    0Xd70,    0x35500400,    -1,    8);
    AddStrucMember(id,"pfnWdfGetTriageInfo",    0Xd78,    0x35500400,    -1,    8);
  if ( size == 0x1b0 ) // w8
    return id;
        AddStrucMember(id,"pfnWdfDeviceInitSetIoTypeEx",    0Xd80,    0x35500400,    -1,    8);
        AddStrucMember(id,"pfnWdfDeviceQueryPropertyEx",    0Xd88,    0x35500400,    -1,    8);
        AddStrucMember(id,"pfnWdfDeviceAllocAndQueryPropertyEx",0Xd90,    0x35500400,    -1,    8);
        AddStrucMember(id,"pfnWdfDeviceAssignProperty",        0Xd98,    0x35500400,    -1,    8);
        AddStrucMember(id,"pfnWdfFdoInitQueryPropertyEx",    0Xda0,    0x35500400,    -1,    8);
        AddStrucMember(id,"pfnWdfFdoInitAllocAndQueryPropertyEx",0Xda8,    0x35500400,    -1,    8);
  if ( size == 0x1b6 ) // w8.1
    return id;
        AddStrucMember(id,"pfnWdfDeviceStopIdleActual",            0Xdb0,    0x35500400,    -1,    8);
        AddStrucMember(id,"pfnWdfDeviceResumeIdleActual",    0Xdb8,    0x35500400,    -1,    8);
  return id;
}

static main(void)
{
  auto data_start;
  auto data_end;
  auto idx;
  // out data
  auto wdf_size;
  auto wdf_func;

  data_end = data_start = BADADDR;
  wdf_size = 0;
  wdf_func = BADADDR;
  // find .data section
  for ( idx = FirstSeg(); idx != BADADDR; idx = NextSeg(idx) )
  {
    auto sname;
    sname = SegName(idx);
    if ( (strlen(sname) == 5) &&
         strstr(sname, ".data") != 0
       )
    {
      data_start = SegStart(idx);
      data_end   = SegEnd(idx);
      break;
    }
  }
  if ( data_start == BADADDR )
    return;
  // find "KmdfLibrary" unicode string in .data section
  idx = data_start;
  while(1)
  {
    auto addr, id;
    idx = FindBinary(idx, SEARCH_DOWN, "4B 00 6D 00 64 00 66 00 4C 00 69 00 62 00 72 00 61 00 72 00 79 00");
    if ( idx == BADADDR )
      break;
    Message("found at %X\n", idx);
    addr = DfirstB(idx);
    if ( addr != BADADDR )
    {
      id = 0;
      Message("ref from %X\n", addr);
      wdf_size = Dword(addr + 0x14);
      wdf_func = Qword(addr + 0x18);
      if ( wdf_size != 0 )
      {
        id = add_struct(wdf_size);
      }
      if ( id != 0 )
      {
        auto ssize;
        ssize = GetStrucSize(id);
        MakeUnknown(wdf_func, ssize, 0);
        if ( MakeData(wdf_func, FF_STRU, ssize, id) )
        {
          return;
        }
        Message("MakeData failed at %X, size %X\n", wdf_func, ssize);
      }
    }
    idx = idx + 22; /* length of unicode string KmdfLibrary */
  }
}

w10tp kernel mode RPC

$
0
0
From the time of windows 8 there are yet new several drivers using kernel-mode rpc:
  • CEA.sys - "Event Aggregation Kernel Mode Library". Use interface D09BDEB5-6171-4A34-BFE2-06FA82652568 from BrokerLib.dll
  • fastfat.sys - use interface 04EEB297-CBF4-466B-8A2A-BFD6A2F10BBA from efssvc.dll
  • wfplwfs.sys - "WFP NDIS 6.30 Lightweight Filter Driver". Use interface C605F9FB-F0A3-4E2A-A073-73560F8D9E3E from bisrv.dll

apisetschema.dll from windows 10 build 9879 64bit

$
0
0
only api-ms-win-core-ums-l1-1-0 was added

api-ms-win-appmodel-identity-l1-2-0kernel.appcore.dll 
api-ms-win-appmodel-runtime-internal-l1-1-0kernel.appcore.dll 
api-ms-win-appmodel-runtime-internal-l1-1-1kernel.appcore.dll 
api-ms-win-appmodel-runtime-internal-l1-1-2kernel.appcore.dll 
api-ms-win-appmodel-runtime-l1-1-0kernel.appcore.dll 
api-ms-win-appmodel-runtime-l1-1-1kernel.appcore.dll 
api-ms-win-appmodel-state-l1-1-0kernel.appcore.dll 
api-ms-win-appmodel-state-l1-1-1kernel.appcore.dll 
api-ms-win-appmodel-state-l1-1-2kernel.appcore.dll 
api-ms-win-appmodel-state-l1-2-0kernel.appcore.dll 
api-ms-win-base-bootconfig-l1-1-0advapi32.dll 
api-ms-win-base-util-l1-1-0advapi32.dll 
api-ms-win-composition-redirection-l1-1-0dwmredir.dll 
api-ms-win-composition-windowmanager-l1-1-0udwm.dll 
api-ms-win-core-apiquery-l1-1-0ntdll.dll 
api-ms-win-core-appcompat-l1-1-0kernelbase.dll 
api-ms-win-core-appcompat-l1-1-1kernelbase.dll 
api-ms-win-core-appinit-l1-1-0kernel32.dllkernelbase.dll
api-ms-win-core-atoms-l1-1-0kernel32.dll 
api-ms-win-core-bicltapi-l1-1-1bi.dll 
api-ms-win-core-bicltapi-l1-1-2bi.dll 
api-ms-win-core-biplmapi-l1-1-0twinapi.appcore.dll 
api-ms-win-core-biplmapi-l1-1-1twinapi.appcore.dll 
api-ms-win-core-biplmapi-l1-1-2twinapi.appcore.dll 
api-ms-win-core-biptcltapi-l1-1-1twinapi.appcore.dll 
api-ms-win-core-biptcltapi-l1-1-3twinapi.appcore.dll 
api-ms-win-core-calendar-l1-1-0kernel32.dll 
api-ms-win-core-com-l1-1-0combase.dll 
api-ms-win-core-com-l1-1-1combase.dll 
api-ms-win-core-com-l2-1-1coml2.dll 
api-ms-win-core-com-midlproxystub-l1-1-0combase.dll 
api-ms-win-core-com-private-l1-1-0combase.dll 
api-ms-win-core-com-private-l1-1-1combase.dll 
api-ms-win-core-comm-l1-1-0kernelbase.dll 
api-ms-win-core-console-l1-1-0kernelbase.dll 
api-ms-win-core-console-l2-1-0kernelbase.dll 
api-ms-win-core-crt-l1-1-0ntdll.dll 
api-ms-win-core-crt-l2-1-0kernelbase.dll 
api-ms-win-core-datetime-l1-1-0kernelbase.dll 
api-ms-win-core-datetime-l1-1-1kernelbase.dll 
api-ms-win-core-debug-l1-1-0kernelbase.dll 
api-ms-win-core-debug-l1-1-1kernelbase.dll 
api-ms-win-core-delayload-l1-1-0kernelbase.dll 
api-ms-win-core-delayload-l1-1-1kernelbase.dll 
api-ms-win-core-errorhandling-l1-1-0kernelbase.dll 
api-ms-win-core-errorhandling-l1-1-1kernelbase.dll 
api-ms-win-core-errorhandling-l1-1-2kernelbase.dll 
api-ms-win-core-fibers-l1-1-0kernelbase.dll 
api-ms-win-core-fibers-l1-1-1kernelbase.dll 
api-ms-win-core-fibers-l2-1-0kernel32.dll 
api-ms-win-core-fibers-l2-1-1kernel32.dll 
api-ms-win-core-file-l1-1-0kernelbase.dll 
api-ms-win-core-file-l1-1-1kernelbase.dll 
api-ms-win-core-file-l1-2-0kernelbase.dll 
api-ms-win-core-file-l1-2-1kernelbase.dll 
api-ms-win-core-file-l1-2-2kernelbase.dll 
api-ms-win-core-file-l2-1-0kernelbase.dll 
api-ms-win-core-file-l2-1-1kernelbase.dll 
api-ms-win-core-file-l2-1-2kernelbase.dll 
api-ms-win-core-firmware-l1-1-0kernel32.dll 
api-ms-win-core-handle-l1-1-0kernelbase.dll 
api-ms-win-core-heap-l1-1-0kernelbase.dll 
api-ms-win-core-heap-l1-2-0kernelbase.dll 
api-ms-win-core-heap-l2-1-0kernelbase.dll 
api-ms-win-core-heap-obsolete-l1-1-0kernel32.dll 
api-ms-win-core-interlocked-l1-1-0kernelbase.dll 
api-ms-win-core-interlocked-l1-1-1kernelbase.dll 
api-ms-win-core-interlocked-l1-2-0kernelbase.dll 
api-ms-win-core-io-l1-1-0kernel32.dllkernelbase.dll
api-ms-win-core-io-l1-1-1kernel32.dllkernelbase.dll
api-ms-win-core-job-l1-1-0kernelbase.dll 
api-ms-win-core-job-l2-1-0kernel32.dll 
api-ms-win-core-kernel32-legacy-l1-1-0kernel32.dll 
api-ms-win-core-kernel32-legacy-l1-1-1kernel32.dll 
api-ms-win-core-kernel32-legacy-l1-1-2kernel32.dll 
api-ms-win-core-kernel32-private-l1-1-0kernel32.dll 
api-ms-win-core-kernel32-private-l1-1-1kernel32.dll 
api-ms-win-core-kernel32-private-l1-1-2kernel32.dll 
api-ms-win-core-libraryloader-l1-1-0kernelbase.dll 
api-ms-win-core-libraryloader-l1-1-1kernelbase.dll 
api-ms-win-core-libraryloader-l1-2-0kernelbase.dll 
api-ms-win-core-libraryloader-l1-2-1kernelbase.dll 
api-ms-win-core-libraryloader-l2-1-0kernelbase.dll 
api-ms-win-core-libraryloader-private-l1-1-0kernelbase.dll 
api-ms-win-core-localization-l1-1-0kernelbase.dll 
api-ms-win-core-localization-l1-2-0kernelbase.dll 
api-ms-win-core-localization-l1-2-1kernelbase.dll 
api-ms-win-core-localization-l2-1-0kernelbase.dll 
api-ms-win-core-localization-obsolete-l1-1-0kernelbase.dll 
api-ms-win-core-localization-obsolete-l1-2-0kernelbase.dll 
api-ms-win-core-localization-private-l1-1-0kernelbase.dll 
api-ms-win-core-localregistry-l1-1-0kernelbase.dll 
api-ms-win-core-marshal-l1-1-0combase.dll 
api-ms-win-core-memory-l1-1-0kernelbase.dll 
api-ms-win-core-memory-l1-1-1kernelbase.dll 
api-ms-win-core-memory-l1-1-2kernelbase.dll 
api-ms-win-core-memory-l1-1-3kernelbase.dll 
api-ms-win-core-misc-l1-1-0kernelbase.dll 
api-ms-win-core-multipleproviderrouter-l1-1-0mpr.dll 
api-ms-win-core-namedpipe-l1-1-0kernelbase.dll 
api-ms-win-core-namedpipe-l1-2-0kernelbase.dll 
api-ms-win-core-namedpipe-l1-2-1kernelbase.dll 
api-ms-win-core-namespace-l1-1-0kernelbase.dll 
api-ms-win-core-normalization-l1-1-0kernelbase.dll 
api-ms-win-core-path-l1-1-0kernelbase.dll 
api-ms-win-core-perfcounters-l1-1-0kernelbase.dll 
api-ms-win-core-privateprofile-l1-1-0kernel32.dll 
api-ms-win-core-privateprofile-l1-1-1kernel32.dll 
api-ms-win-core-processenvironment-l1-1-0kernelbase.dll 
api-ms-win-core-processenvironment-l1-1-1kernelbase.dll 
api-ms-win-core-processenvironment-l1-2-0kernelbase.dll 
api-ms-win-core-processsecurity-l1-1-0kernel32.dllkernelbase.dll
api-ms-win-core-processsnapshot-l1-1-0kernelbase.dll 
api-ms-win-core-processthreads-l1-1-0kernel32.dllkernelbase.dll
api-ms-win-core-processthreads-l1-1-1kernel32.dllkernelbase.dll
api-ms-win-core-processthreads-l1-1-2kernel32.dllkernelbase.dll
api-ms-win-core-processtopology-l1-1-0kernelbase.dll 
api-ms-win-core-processtopology-l1-2-0kernelbase.dll 
api-ms-win-core-processtopology-obsolete-l1-1-0kernel32.dll 
api-ms-win-core-processtopology-private-l1-1-0kernelbase.dll 
api-ms-win-core-profile-l1-1-0kernelbase.dll 
api-ms-win-core-psapi-ansi-l1-1-0kernelbase.dll 
api-ms-win-core-psapi-l1-1-0kernelbase.dll 
api-ms-win-core-psapi-obsolete-l1-1-0kernelbase.dll 
api-ms-win-core-psapiansi-l1-1-0kernelbase.dll 
api-ms-win-core-psm-app-l1-1-0twinapi.appcore.dll 
api-ms-win-core-psm-appnotify-l1-1-0twinapi.appcore.dll 
api-ms-win-core-psm-info-l1-1-0appsruprov.dll 
api-ms-win-core-psm-key-l1-1-0kernelbase.dll 
api-ms-win-core-psm-plm-l1-1-0twinapi.appcore.dll 
api-ms-win-core-psm-plm-l1-1-1twinapi.appcore.dll 
api-ms-win-core-psm-plm-l1-1-2twinapi.appcore.dll 
api-ms-win-core-psm-tc-l1-1-0twinapi.appcore.dll 
api-ms-win-core-quirks-l1-1-0kernelbase.dll 
api-ms-win-core-realtime-l1-1-0kernelbase.dll 
api-ms-win-core-registry-l1-1-0kernelbase.dll 
api-ms-win-core-registry-l1-1-1kernelbase.dll 
api-ms-win-core-registry-l2-1-0advapi32.dll 
api-ms-win-core-registry-l2-2-0advapi32.dll 
api-ms-win-core-registry-private-l1-1-0advapi32.dll 
api-ms-win-core-registryuserspecific-l1-1-0kernelbase.dll 
api-ms-win-core-rtlsupport-l1-1-0ntdll.dll 
api-ms-win-core-rtlsupport-l1-1-1ntdll.dll 
api-ms-win-core-rtlsupport-l1-2-0ntdll.dll 
api-ms-win-core-shlwapi-legacy-l1-1-0kernelbase.dll 
api-ms-win-core-shlwapi-obsolete-l1-1-0kernelbase.dll 
api-ms-win-core-shlwapi-obsolete-l1-2-0kernelbase.dll 
api-ms-win-core-shutdown-l1-1-0advapi32.dll 
api-ms-win-core-shutdown-l1-1-1advapi32.dll 
api-ms-win-core-sidebyside-l1-1-0kernelbase.dll 
api-ms-win-core-string-l1-1-0kernelbase.dll 
api-ms-win-core-string-l2-1-0kernelbase.dll 
api-ms-win-core-string-l2-1-1kernelbase.dll 
api-ms-win-core-string-obsolete-l1-1-0kernel32.dll 
api-ms-win-core-string-obsolete-l1-1-1kernel32.dll 
api-ms-win-core-stringansi-l1-1-0kernelbase.dll 
api-ms-win-core-stringloader-l1-1-0kernelbase.dll 
api-ms-win-core-stringloader-l1-1-1kernelbase.dll 
api-ms-win-core-synch-l1-1-0kernelbase.dll 
api-ms-win-core-synch-l1-1-1kernelbase.dll 
api-ms-win-core-synch-l1-2-0kernelbase.dll 
api-ms-win-core-synch-l1-2-1kernelbase.dll 
api-ms-win-core-sysinfo-l1-1-0kernelbase.dll 
api-ms-win-core-sysinfo-l1-1-1kernelbase.dll 
api-ms-win-core-sysinfo-l1-2-0kernelbase.dll 
api-ms-win-core-sysinfo-l1-2-1kernelbase.dll 
api-ms-win-core-sysinfo-l1-2-2kernelbase.dll 
api-ms-win-core-sysinfo-l1-2-3kernelbase.dll 
api-ms-win-core-systemtopology-l1-1-0kernelbase.dll 
api-ms-win-core-textinput-client-l1-1-0msctf.dll 
api-ms-win-core-threadpool-l1-1-0kernelbase.dll 
api-ms-win-core-threadpool-l1-2-0kernelbase.dll 
api-ms-win-core-threadpool-legacy-l1-1-0kernelbase.dll 
api-ms-win-core-threadpool-private-l1-1-0kernelbase.dll 
api-ms-win-core-timezone-l1-1-0kernelbase.dll 
api-ms-win-core-timezone-private-l1-1-0kernelbase.dll 
api-ms-win-core-toolhelp-l1-1-0kernel32.dll 
api-ms-win-core-ums-l1-1-0kernel32.dll 
api-ms-win-core-url-l1-1-0kernelbase.dll 
api-ms-win-core-util-l1-1-0kernel32.dllkernelbase.dll
api-ms-win-core-util-l1-1-1kernel32.dllkernelbase.dll
api-ms-win-core-version-l1-1-0kernelbase.dll 
api-ms-win-core-version-private-l1-1-0kernelbase.dll 
api-ms-win-core-versionansi-l1-1-0kernelbase.dll 
api-ms-win-core-windowserrorreporting-l1-1-0kernelbase.dll 
api-ms-win-core-winrt-error-l1-1-0combase.dll 
api-ms-win-core-winrt-error-l1-1-1combase.dll 
api-ms-win-core-winrt-errorprivate-l1-1-0combase.dll 
api-ms-win-core-winrt-errorprivate-l1-1-1combase.dll 
api-ms-win-core-winrt-l1-1-0combase.dll 
api-ms-win-core-winrt-propertysetprivate-l1-1-0wintypes.dll 
api-ms-win-core-winrt-propertysetprivate-l1-1-1wintypes.dll 
api-ms-win-core-winrt-registration-l1-1-0combase.dll 
api-ms-win-core-winrt-robuffer-l1-1-0wintypes.dll 
api-ms-win-core-winrt-roparameterizediid-l1-1-0combase.dll 
api-ms-win-core-winrt-string-l1-1-0combase.dll 
api-ms-win-core-wow64-l1-1-0kernelbase.dll 
api-ms-win-core-wow64-l1-1-1kernelbase.dll 
api-ms-win-core-xstate-l1-1-0ntdll.dll 
api-ms-win-core-xstate-l1-1-1ntdll.dll 
api-ms-win-core-xstate-l2-1-0kernelbase.dll 
api-ms-win-deprecated-apis-obsolete-l1-1-0kernelbase.dll 
api-ms-win-devices-config-l1-1-0cfgmgr32.dll 
api-ms-win-devices-config-l1-1-1cfgmgr32.dll 
api-ms-win-devices-query-l1-1-0cfgmgr32.dll 
api-ms-win-devices-query-l1-1-1cfgmgr32.dll 
api-ms-win-devices-swdevice-l1-1-0cfgmgr32.dll 
api-ms-win-devices-swdevice-l1-1-1cfgmgr32.dll 
api-ms-win-downlevel-advapi32-l1-1-0kernelbase.dll 
api-ms-win-downlevel-advapi32-l1-1-1kernelbase.dll 
api-ms-win-downlevel-advapi32-l2-1-0sechost.dll 
api-ms-win-downlevel-advapi32-l2-1-1sechost.dll 
api-ms-win-downlevel-advapi32-l3-1-0ntmarta.dll 
api-ms-win-downlevel-advapi32-l4-1-0advapi32.dll 
api-ms-win-downlevel-kernel32-l1-1-0kernelbase.dll 
api-ms-win-downlevel-kernel32-l2-1-0kernel32.dll 
api-ms-win-downlevel-normaliz-l1-1-0kernelbase.dll 
api-ms-win-downlevel-ole32-l1-1-0combase.dll 
api-ms-win-downlevel-ole32-l1-1-1combase.dll 
api-ms-win-downlevel-shell32-l1-1-0shcore.dll 
api-ms-win-downlevel-shlwapi-l1-1-0kernelbase.dll 
api-ms-win-downlevel-shlwapi-l1-1-1kernelbase.dll 
api-ms-win-downlevel-shlwapi-l2-1-0shcore.dll 
api-ms-win-downlevel-shlwapi-l2-1-1shcore.dll 
api-ms-win-downlevel-user32-l1-1-0kernelbase.dll 
api-ms-win-downlevel-user32-l1-1-1kernelbase.dll 
api-ms-win-downlevel-version-l1-1-0kernelbase.dll 
api-ms-win-dwmapi-l1-1-0dwmapi.dll 
api-ms-win-dx-d3dkmt-l1-1-0gdi32.dll 
api-ms-win-dx-d3dkmt-l1-1-1gdi32.dll 
api-ms-win-eventing-classicprovider-l1-1-0kernelbase.dll 
api-ms-win-eventing-consumer-l1-1-0sechost.dll 
api-ms-win-eventing-controller-l1-1-0sechost.dll 
api-ms-win-eventing-legacy-l1-1-0advapi32.dll 
api-ms-win-eventing-obsolete-l1-1-0sechost.dll 
api-ms-win-eventing-provider-l1-1-0kernelbase.dll 
api-ms-win-eventlog-legacy-l1-1-0advapi32.dll 
api-ms-win-eventlog-private-l1-1-0advapi32.dll 
api-ms-win-gdi-dpiinfo-l1-1-0gdi32.dll 
api-ms-win-http-time-l1-1-0kernelbase.dll 
api-ms-win-legacy-shlwapi-l1-1-0kernelbase.dll 
api-ms-win-mm-joystick-l1-1-0winmmbase.dll 
api-ms-win-mm-mci-l1-1-0winmm.dll 
api-ms-win-mm-misc-l1-1-0winmmbase.dll 
api-ms-win-mm-misc-l1-1-1winmmbase.dll 
api-ms-win-mm-misc-l2-1-0winmm.dll 
api-ms-win-mm-mme-l1-1-0winmmbase.dll 
api-ms-win-mm-playsound-l1-1-0winmm.dll 
api-ms-win-mm-time-l1-1-0kernel32.dll 
api-ms-win-net-isolation-l1-1-0firewallapi.dll 
api-ms-win-net-isolation-l1-1-1firewallapi.dll 
api-ms-win-ntuser-ie-message-l1-1-0user32.dll 
api-ms-win-ntuser-ie-window-l1-1-0user32.dll 
api-ms-win-ntuser-ie-wmpointer-l1-1-0user32.dll 
api-ms-win-ntuser-rectangle-l1-1-0user32.dll 
api-ms-win-ntuser-sysparams-l1-1-0user32.dll 
api-ms-win-obsolete-localization-l1-1-0kernelbase.dll 
api-ms-win-obsolete-psapi-l1-1-0kernelbase.dll 
api-ms-win-obsolete-shlwapi-l1-1-0kernelbase.dll 
api-ms-win-ole32-ie-l1-1-0ole32.dll 
api-ms-win-oobe-notification-l1-1-0kernel32.dll 
api-ms-win-perf-legacy-l1-1-0advapi32.dll 
api-ms-win-power-base-l1-1-0powrprof.dll 
api-ms-win-power-setting-l1-1-0powrprof.dll 
api-ms-win-ro-typeresolution-l1-1-0wintypes.dll 
api-ms-win-rtcore-ntuser-clipboard-l1-1-0user32.dll 
api-ms-win-rtcore-ntuser-draw-l1-1-0user32.dll 
api-ms-win-rtcore-ntuser-powermanagement-l1-1-0user32.dll 
api-ms-win-rtcore-ntuser-private-l1-1-0user32.dll 
api-ms-win-rtcore-ntuser-private-l1-1-1user32.dll 
api-ms-win-rtcore-ntuser-private-l1-1-2user32.dll 
api-ms-win-rtcore-ntuser-shell-l1-1-0user32.dll 
api-ms-win-rtcore-ntuser-synch-l1-1-0user32.dll 
api-ms-win-rtcore-ntuser-window-l1-1-0user32.dll 
api-ms-win-rtcore-ntuser-winevent-l1-1-0user32.dll 
api-ms-win-rtcore-ntuser-wmpointer-l1-1-0user32.dll 
api-ms-win-rtcore-ntuser-wmpointer-l1-1-1user32.dll 
api-ms-win-rtcore-ole32-clipboard-l1-1-0ole32.dll 
api-ms-win-security-accesshlpr-l1-1-0sechost.dll 
api-ms-win-security-activedirectoryclient-l1-1-0kernelbase.dll 
api-ms-win-security-appcontainer-l1-1-0kernelbase.dll 
api-ms-win-security-audit-l1-1-0sechost.dll 
api-ms-win-security-audit-l1-1-1sechost.dll 
api-ms-win-security-base-l1-1-0kernelbase.dll 
api-ms-win-security-base-l1-1-1kernelbase.dll 
api-ms-win-security-base-l1-2-0kernelbase.dll 
api-ms-win-security-base-private-l1-1-0kernelbase.dll 
api-ms-win-security-base-private-l1-1-1kernelbase.dll 
api-ms-win-security-capability-l1-1-0sechost.dll 
api-ms-win-security-credentials-l1-1-0sechost.dll 
api-ms-win-security-credentials-l2-1-0sechost.dll 
api-ms-win-security-cryptoapi-l1-1-0cryptsp.dll 
api-ms-win-security-grouppolicy-l1-1-0kernelbase.dll 
api-ms-win-security-logon-l1-1-0advapi32.dll 
api-ms-win-security-lsalookup-l1-1-0sechost.dll 
api-ms-win-security-lsalookup-l1-1-1sechost.dll 
api-ms-win-security-lsalookup-l1-1-2sechost.dll 
api-ms-win-security-lsalookup-l2-1-0advapi32.dll 
api-ms-win-security-lsalookup-l2-1-1advapi32.dll 
api-ms-win-security-lsapolicy-l1-1-0sechost.dll 
api-ms-win-security-provider-l1-1-0ntmarta.dll 
api-ms-win-security-sddl-ansi-l1-1-0advapi32.dll 
api-ms-win-security-sddl-l1-1-0sechost.dll 
api-ms-win-security-sddlparsecond-l1-1-0sechost.dll 
api-ms-win-security-systemfunctions-l1-1-0advapi32.dll 
api-ms-win-security-trustee-l1-1-0advapi32.dll 
api-ms-win-security-trustee-l1-1-1advapi32.dll 
api-ms-win-service-core-l1-1-0sechost.dll 
api-ms-win-service-core-l1-1-1sechost.dll 
api-ms-win-service-management-l1-1-0sechost.dll 
api-ms-win-service-management-l2-1-0sechost.dll 
api-ms-win-service-private-l1-1-0sechost.dll 
api-ms-win-service-private-l1-1-1sechost.dll 
api-ms-win-service-winsvc-l1-1-0sechost.dll 
api-ms-win-service-winsvc-l1-2-0sechost.dll 
api-ms-win-shcore-comhelpers-l1-1-0shcore.dll 
api-ms-win-shcore-obsolete-l1-1-0shcore.dll 
api-ms-win-shcore-registry-l1-1-0shcore.dll 
api-ms-win-shcore-registry-l1-1-1shcore.dll 
api-ms-win-shcore-scaling-l1-1-0shcore.dll 
api-ms-win-shcore-scaling-l1-1-1shcore.dll 
api-ms-win-shcore-scaling-l1-1-2shcore.dll 
api-ms-win-shcore-stream-l1-1-0shcore.dll 
api-ms-win-shcore-stream-winrt-l1-1-0shcore.dll 
api-ms-win-shcore-sysinfo-l1-1-0shcore.dll 
api-ms-win-shcore-thread-l1-1-0shcore.dll 
api-ms-win-shcore-unicodeansi-l1-1-0shcore.dll 
api-ms-win-shell-shellcom-l1-1-0kernelbase.dll 
api-ms-win-shell-shellfolders-l1-1-0kernelbase.dll 
api-ms-win-shlwapi-ie-l1-1-0shlwapi.dll 
api-ms-win-shlwapi-winrt-storage-l1-1-0shlwapi.dll 
api-ms-win-shlwapi-winrt-storage-l1-1-1shlwapi.dll 
API-ext-ms-win-advapi32-auth-l1-1-0advapi32.dll 
API-ext-ms-win-advapi32-encryptedfile-l1-1-0advapi32.dll 
API-ext-ms-win-advapi32-eventingcontroller-l1-1-0advapi32.dll 
API-ext-ms-win-advapi32-eventlog-l1-1-0advapi32.dll 
API-ext-ms-win-advapi32-hwprof-l1-1-0advapi32.dll 
API-ext-ms-win-advapi32-idletask-l1-1-0advapi32.dll 
API-ext-ms-win-advapi32-lsa-l1-1-0advapi32.dll 
API-ext-ms-win-advapi32-msi-l1-1-0advapi32.dll 
API-ext-ms-win-advapi32-ntmarta-l1-1-0advapi32.dll 
API-ext-ms-win-advapi32-psm-app-l1-1-0twinapi.appcore.dll 
API-ext-ms-win-advapi32-registry-l1-1-0advapi32.dll 
API-ext-ms-win-advapi32-safer-l1-1-0advapi32.dll 
API-ext-ms-win-advapi32-shutdown-l1-1-0advapi32.dll 
API-ext-ms-win-appmodel-opc-l1-1-0opcservices.dll 
API-ext-ms-win-appmodel-state-ext-l1-2-0kernel.appcore.dll 
API-ext-ms-win-appxdeploymentclient-appxdeploy-l1-1-0appxdeploymentclient.dll 
API-ext-ms-win-authz-claimpolicies-l1-1-0authz.dll 
API-ext-ms-win-authz-context-l1-1-0authz.dll 
API-ext-ms-win-authz-remote-l1-1-0logoncli.dll 
API-ext-ms-win-biometrics-winbio-core-l1-1-0winbio.dll 
API-ext-ms-win-biometrics-winbio-l1-1-0winbio.dll 
API-ext-ms-win-biometrics-winbio-l1-2-0winbioext.dll 
API-ext-ms-win-bluetooth-apis-l1-1-0bluetoothapis.dll 
API-ext-ms-win-bluetooth-apis-private-l1-1-0bluetoothapis.dll 
API-ext-ms-win-branding-winbrand-l1-1-0winbrand.dll 
API-ext-ms-win-cluster-clusapi-l1-1-0clusapi.dll 
API-ext-ms-win-cluster-clusapi-l1-1-1clusapi.dll 
API-ext-ms-win-cluster-clusapi-l1-1-2clusapi.dll 
API-ext-ms-win-cluster-resutils-l1-1-0resutils.dll 
API-ext-ms-win-cluster-resutils-l1-1-1resutils.dll 
API-ext-ms-win-cmd-util-l1-1-0cmdext.dll 
API-ext-ms-win-cng-rng-l1-1-0bcryptprimitives.dll 
API-ext-ms-win-com-clbcatq-l1-1-0clbcatq.dll 
API-ext-ms-win-com-coml2-l1-1-1coml2.dll 
API-ext-ms-win-com-ole32-l1-1-0ole32.dll 
API-ext-ms-win-com-ole32-l1-1-1ole32.dll 
API-ext-ms-win-com-ole32-l1-1-2ole32.dll 
API-ext-ms-win-com-ole32-l1-1-3ole32.dll 
API-ext-ms-win-com-psmregister-l1-1-0kernel.appcore.dll 
API-ext-ms-win-composition-ghost-l1-1-0dwmghost.dll 
API-ext-ms-win-composition-init-l1-1-0dwminit.dll 
API-ext-ms-win-compositor-hosting-l1-1-0user32.dll 
API-ext-ms-win-devmgmt-dm-l1-1-0dmapisetextimpl.dll 
API-ext-ms-win-domainjoin-netjoin-l1-1-0netjoin.dll 
API-ext-ms-win-dwmapi-ext-l1-1-0dwmapi.dll 
API-ext-ms-win-dx-d3d9-l1-1-0d3d9.dll 
API-ext-ms-win-els-elscore-l1-1-0elscore.dll 
API-ext-ms-win-familysafety-childaccount-l1-1-0familysafetyext.dll 
API-ext-ms-win-firewallapi-webproxy-l1-1-0firewallapi.dll 
API-ext-ms-win-firewallapi-webproxy-l1-1-1firewallapi.dll 
API-ext-ms-win-fs-clfs-l1-1-0clfs.sys 
API-ext-ms-win-fsutilext-ifsutil-l1-1-0fsutilext.dll 
API-ext-ms-win-fsutilext-ulib-l1-1-0fsutilext.dll 
API-ext-ms-win-fveapi-query-l1-1-0fveapi.dll 
API-ext-ms-win-gdi-clipping-l1-1-0gdi32.dll 
API-ext-ms-win-gdi-dc-create-l1-1-0gdi32.dll 
API-ext-ms-win-gdi-dc-create-l1-1-1gdi32.dll 
API-ext-ms-win-gdi-dc-create-l1-1-2gdi32.dll 
API-ext-ms-win-gdi-dc-l1-2-0gdi32.dll 
API-ext-ms-win-gdi-dc-l1-2-1gdi32.dll 
API-ext-ms-win-gdi-devcaps-l1-1-0gdi32.dll 
API-ext-ms-win-gdi-draw-l1-1-0gdi32.dll 
API-ext-ms-win-gdi-draw-l1-1-1gdi32.dll 
API-ext-ms-win-gdi-draw-l1-1-2gdi32.dll 
API-ext-ms-win-gdi-font-l1-1-0gdi32.dll 
API-ext-ms-win-gdi-font-l1-1-1gdi32.dll 
API-ext-ms-win-gdi-font-l1-1-2gdi32.dll 
API-ext-ms-win-gdi-metafile-l1-1-0gdi32.dll 
API-ext-ms-win-gdi-metafile-l1-1-1gdi32.dll 
API-ext-ms-win-gdi-metafile-l1-1-2gdi32.dll 
API-ext-ms-win-gdi-path-l1-1-0gdi32.dll 
API-ext-ms-win-gdi-print-l1-1-0gdi32.dll 
API-ext-ms-win-gdi-private-l1-1-0gdi32.dll 
API-ext-ms-win-gdi-render-l1-1-0gdi32.dll 
API-ext-ms-win-gdi-rgn-l1-1-0gdi32.dll 
API-ext-ms-win-gdi-wcs-l1-1-0gdi32.dll 
API-ext-ms-win-globalization-collation-l1-1-0globcollationhost.dll 
API-ext-ms-win-globalization-input-l1-1-0globinputhost.dll 
API-ext-ms-win-gpapi-grouppolicy-l1-1-0gpapi.dll 
API-ext-ms-win-gpsvc-grouppolicy-l1-1-0gpsvc.dll 
API-ext-ms-win-gui-dui70-l1-1-0dui70.dll 
API-ext-ms-win-gui-ieui-l1-1-0ieui.dll 
API-ext-ms-win-gui-uxinit-l1-1-0uxinit.dll 
API-ext-ms-win-imm-l1-1-0imm32.dll 
API-ext-ms-win-imm-l1-1-1imm32.dll 
API-ext-ms-win-kernel32-appcompat-l1-1-0kernel32.dll 
API-ext-ms-win-kernel32-datetime-l1-1-0kernel32.dll 
API-ext-ms-win-kernel32-elevation-l1-1-0kernel32.dll 
API-ext-ms-win-kernel32-errorhandling-l1-1-0kernel32.dll 
API-ext-ms-win-kernel32-file-l1-1-0kernel32.dll 
API-ext-ms-win-kernel32-localization-l1-1-0kernel32.dll 
API-ext-ms-win-kernel32-package-current-l1-1-0kernel.appcore.dll 
API-ext-ms-win-kernel32-package-l1-1-0kernel.appcore.dll 
API-ext-ms-win-kernel32-package-l1-1-1kernel.appcore.dll 
API-ext-ms-win-kernel32-package-l1-1-2kernel.appcore.dll 
API-ext-ms-win-kernel32-quirks-l1-1-0kernel32.dll 
API-ext-ms-win-kernel32-registry-l1-1-0kernel32.dll 
API-ext-ms-win-kernel32-sidebyside-l1-1-0kernel32.dll 
API-ext-ms-win-kernel32-transacted-l1-1-0kernel32.dll 
API-ext-ms-win-kernel32-windowserrorreporting-l1-1-0kernel32.dll 
API-ext-ms-win-kernel32-windowserrorreporting-l1-1-1kernel32.dll 
API-ext-ms-win-kernelbase-processthread-l1-1-0kernel32.dll 
API-ext-ms-win-mm-msacm-l1-1-0msacm32.dll 
API-ext-ms-win-mm-pehelper-l1-1-0mf.dll 
API-ext-ms-win-mm-wmdrmsdk-l1-1-0wmdrmsdk.dll 
API-ext-ms-win-moderncore-win32k-base-ntgdi-l1-1-0win32kfull.sys 
API-ext-ms-win-moderncore-win32k-base-ntuser-l1-1-0win32kfull.sys 
API-ext-ms-win-moderncore-win32k-base-sysentry-l1-1-0win32k.sys 
API-ext-ms-win-mpr-multipleproviderrouter-l1-1-0mprext.dll 
API-ext-ms-win-mrmcorer-resmanager-l1-1-0mrmcorer.dll 
API-ext-ms-win-msa-ui-l1-1-0msauserext.dll 
API-ext-ms-win-msa-user-l1-1-0msauserext.dll 
API-ext-ms-win-msa-user-l1-1-1msauserext.dll 
API-ext-ms-win-msi-misc-l1-1-0msi.dll 
API-ext-ms-win-msiltcfg-msi-l1-1-0msiltcfg.dll 
API-ext-ms-win-msimg-draw-l1-1-0msimg32.dll 
API-ext-ms-win-net-httpproxyext-l1-1-0httpprxc.dll 
API-ext-ms-win-net-isoext-l1-1-0firewallapi.dll 
API-ext-ms-win-netprovision-netprovfw-l1-1-0netprovfw.dll 
API-ext-ms-win-networking-wcmapi-l1-1-0wcmapi.dll 
API-ext-ms-win-networking-winipsec-l1-1-0winipsec.dll 
API-ext-ms-win-networking-wlanapi-l1-1-0wlanapi.dll 
API-ext-ms-win-newdev-config-l1-1-0newdev.dll 
API-ext-ms-win-ntdsa-activedirectoryserver-l1-1-0ntdsa.dll 
API-ext-ms-win-ntdsapi-activedirectoryclient-l1-1-0ntdsapi.dll 
API-ext-ms-win-ntos-clipsp-l1-1-0clipsp.sys 
API-ext-ms-win-ntos-kcminitcfg-l1-1-0cmimcext.sys 
API-ext-ms-win-ntos-tm-l1-1-0tm.sys 
API-ext-ms-win-ntos-ucode-l1-1-0ntosext.sys 
API-ext-ms-win-ntos-werkernel-l1-1-0werkernel.sys 
API-ext-ms-win-ntuser-caret-l1-1-0user32.dll 
API-ext-ms-win-ntuser-chartranslation-l1-1-0user32.dll 
API-ext-ms-win-ntuser-dc-access-ext-l1-1-0user32.dll 
API-ext-ms-win-ntuser-dialogbox-l1-1-0user32.dll 
API-ext-ms-win-ntuser-dialogbox-l1-1-1user32.dll 
API-ext-ms-win-ntuser-dialogbox-l1-1-2user32.dll 
API-ext-ms-win-ntuser-draw-l1-1-0user32.dll 
API-ext-ms-win-ntuser-draw-l1-1-1user32.dll 
API-ext-ms-win-ntuser-draw-l1-1-2user32.dll 
API-ext-ms-win-ntuser-gui-l1-1-0user32.dll 
API-ext-ms-win-ntuser-gui-l1-1-1user32.dll 
API-ext-ms-win-ntuser-gui-l1-2-0user32.dll 
API-ext-ms-win-ntuser-gui-l1-2-1user32.dll 
API-ext-ms-win-ntuser-keyboard-l1-1-0user32.dll 
API-ext-ms-win-ntuser-keyboard-l1-1-1user32.dll 
API-ext-ms-win-ntuser-keyboard-l1-1-2user32.dll 
API-ext-ms-win-ntuser-menu-l1-1-0user32.dll 
API-ext-ms-win-ntuser-menu-l1-1-1user32.dll 
API-ext-ms-win-ntuser-menu-l1-1-2user32.dll 
API-ext-ms-win-ntuser-message-l1-1-0user32.dll 
API-ext-ms-win-ntuser-message-l1-1-1user32.dll 
API-ext-ms-win-ntuser-misc-l1-1-0user32.dll 
API-ext-ms-win-ntuser-misc-l1-2-0user32.dll 
API-ext-ms-win-ntuser-misc-l1-3-0user32.dll 
API-ext-ms-win-ntuser-misc-l1-3-1user32.dll 
API-ext-ms-win-ntuser-mouse-l1-1-0user32.dll 
API-ext-ms-win-ntuser-powermanagement-l1-1-0user32.dll 
API-ext-ms-win-ntuser-private-l1-1-0user32.dll 
API-ext-ms-win-ntuser-private-l1-1-1user32.dll 
API-ext-ms-win-ntuser-private-l1-1-2user32.dll 
API-ext-ms-win-ntuser-rectangle-ext-l1-1-0user32.dll 
API-ext-ms-win-ntuser-rim-l1-1-0user32.dll 
API-ext-ms-win-ntuser-rotationmanager-l1-1-0user32.dll 
API-ext-ms-win-ntuser-rotationmanager-l1-1-1user32.dll 
API-ext-ms-win-ntuser-server-l1-1-0user32.dll 
API-ext-ms-win-ntuser-string-l1-1-0user32.dll 
API-ext-ms-win-ntuser-synch-l1-1-0user32.dll 
API-ext-ms-win-ntuser-sysparams-ext-l1-1-0user32.dll 
API-ext-ms-win-ntuser-touch-hittest-l1-1-0user32.dll 
API-ext-ms-win-ntuser-uicontext-ext-l1-1-0user32.dll 
API-ext-ms-win-ntuser-window-l1-1-0user32.dll 
API-ext-ms-win-ntuser-window-l1-1-1user32.dll 
API-ext-ms-win-ntuser-window-l1-1-2user32.dll 
API-ext-ms-win-ntuser-window-l1-1-3user32.dll 
API-ext-ms-win-ntuser-windowclass-l1-1-0user32.dll 
API-ext-ms-win-ntuser-windowclass-l1-1-1user32.dll 
API-ext-ms-win-ntuser-windowclass-l1-1-2user32.dll 
API-ext-ms-win-ntuser-windowstation-l1-1-0user32.dll 
API-ext-ms-win-ntuser-windowstation-l1-1-1user32.dll 
API-ext-ms-win-ole32-bindctx-l1-1-0ole32.dll 
API-ext-ms-win-ole32-ie-ext-l1-1-0ole32.dll 
API-ext-ms-win-ole32-oleautomation-l1-1-0ole32.dll 
API-ext-ms-win-oleacc-l1-1-0oleacc.dll 
API-ext-ms-win-oleacc-l1-1-1oleacc.dll 
API-ext-ms-win-printer-winspool-l1-1-0winspool.drv 
API-ext-ms-win-printer-winspool-l1-1-1winspool.drv 
API-ext-ms-win-printer-winspool-l1-1-2winspool.drv 
API-ext-ms-win-profile-extender-l1-1-0userenv.dll 
API-ext-ms-win-profile-profsvc-l1-1-0profsvcext.dll 
API-ext-ms-win-profile-userenv-l1-1-0profext.dll 
API-ext-ms-win-provisioning-platform-l1-1-0provplatformstub.dll 
API-ext-ms-win-ras-rasapi32-l1-1-0rasapi32.dll 
API-ext-ms-win-ras-rasapi32-l1-1-1rasapi32.dll 
API-ext-ms-win-ras-rasdlg-l1-1-0rasdlg.dll 
API-ext-ms-win-ras-rasman-l1-1-0rasman.dll 
API-ext-ms-win-ras-tapi32-l1-1-0tapi32.dll 
API-ext-ms-win-raschapext-eap-l1-1-0raschapext.dll 
API-ext-ms-win-rastlsext-eap-l1-1-0rastlsext.dll 
API-ext-ms-win-reinfo-query-l1-1-0reinfo.dll 
API-ext-ms-win-resources-mrmcloudextensions-l1-1-0mrmcloudext.dll 
API-ext-ms-win-rometadata-dispenser-l1-1-0rometadata.dll 
API-ext-ms-win-rpc-firewallportuse-l1-1-0rpcrtremote.dll 
API-ext-ms-win-rpc-ssl-l1-1-0rpcrtremote.dll 
API-ext-ms-win-rtcore-gdi-devcaps-l1-1-0gdi32.dll 
API-ext-ms-win-rtcore-gdi-object-l1-1-0gdi32.dll 
API-ext-ms-win-rtcore-gdi-rgn-l1-1-0gdi32.dll 
API-ext-ms-win-rtcore-gdi-rgn-l1-1-1gdi32.dll 
API-ext-ms-win-rtcore-ntuser-dc-access-l1-1-0user32.dll 
API-ext-ms-win-rtcore-ntuser-dpi-l1-1-0user32.dll 
API-ext-ms-win-rtcore-ntuser-iam-l1-1-0user32.dll 
API-ext-ms-win-rtcore-ntuser-synch-ext-l1-1-0user32.dll 
API-ext-ms-win-rtcore-ntuser-syscolors-l1-1-0user32.dll 
API-ext-ms-win-rtcore-ntuser-sysparams-l1-1-0user32.dll 
API-ext-ms-win-rtcore-ntuser-window-ext-l1-1-0user32.dll 
API-ext-ms-win-samsrv-accountstore-l1-1-0samsrv.dll 
API-ext-ms-win-scesrv-server-l1-1-0scesrv.dll 
API-ext-ms-win-secur32-translatename-l1-1-0secur32.dll 
API-ext-ms-win-security-credui-l1-1-0credui.dll 
API-ext-ms-win-security-credui-l1-1-1credui.dll 
API-ext-ms-win-security-cryptui-l1-1-0cryptui.dll 
API-ext-ms-win-security-cryptui-l1-1-1cryptui.dll 
API-ext-ms-win-security-efs-l1-1-0efsext.dll 
API-ext-ms-win-security-kerberos-l1-1-0kerberos.dll 
API-ext-ms-win-security-tokenbrokerui-l1-1-0tokenbrokerui.dll 
API-ext-ms-win-security-vaultcli-l1-1-0vaultcli.dll 
API-ext-ms-win-security-vaultcli-l1-1-1vaultcli.dll 
API-ext-ms-win-sensors-core-private-l1-1-0sensorsnativeapi.dll 
API-ext-ms-win-sensors-utilities-private-l1-1-0sensorsutilsv2.dll 
API-ext-ms-win-session-userinit-l1-1-0userinitext.dll 
API-ext-ms-win-session-usermgr-l1-1-0usermgrcli.dll 
API-ext-ms-win-session-usertoken-l1-1-0wtsapi32.dll 
API-ext-ms-win-session-wininit-l1-1-0wininitext.dll 
API-ext-ms-win-session-winlogon-l1-1-0winlogonext.dll 
API-ext-ms-win-session-winsta-l1-1-0winsta.dll 
API-ext-ms-win-session-wtsapi32-l1-1-0wtsapi32.dll 
API-ext-ms-win-setupapi-classinstallers-l1-1-0setupapi.dll 
API-ext-ms-win-setupapi-classinstallers-l1-1-1setupapi.dll 
API-ext-ms-win-setupapi-inf-l1-1-0setupapi.dll 
API-ext-ms-win-setupapi-logging-l1-1-0setupapi.dll 
API-ext-ms-win-shell-comctl32-l1-1-0comctl32.dll 
API-ext-ms-win-shell-comdlg32-l1-1-0comdlg32.dll 
API-ext-ms-win-shell-propsys-l1-1-0propsys.dll 
API-ext-ms-win-shell-settingsync-l1-1-0settingsyncpolicy.dll 
API-ext-ms-win-shell-settingsync-l1-1-1settingsyncpolicy.dll 
API-ext-ms-win-shell-shell32-l1-2-0shell32.dll 
API-ext-ms-win-shell-shell32-l1-2-1shell32.dll 
API-ext-ms-win-shell-shlwapi-l1-1-0shlwapi.dll 
API-ext-ms-win-shell32-shellcom-l1-1-0shell32.dll 
API-ext-ms-win-shell32-shellfolders-l1-1-0shell32.dll 
API-ext-ms-win-shell32-shellfolders-l1-1-1shell32.dll 
API-ext-ms-win-smbshare-browser-l1-1-0browser.dll 
API-ext-ms-win-smbshare-sscore-l1-1-0sscoreext.dll 
API-ext-ms-win-spinf-inf-l1-1-0spinf.dll 
API-ext-ms-win-storage-iscsidsc-l1-1-0iscsidsc.dll 
API-ext-ms-win-sxs-oleautomation-l1-1-0sxs.dll 
API-ext-ms-win-tsf-msctf-l1-1-0msctf.dll 
API-ext-ms-win-ttlsext-eap-l1-1-0ttlsext.dll 
API-ext-ms-win-uiacore-l1-1-0uiautomationcore.dll 
API-ext-ms-win-uiacore-l1-1-1uiautomationcore.dll 
API-ext-ms-win-uiacore-l1-1-2uiautomationcore.dll 
API-ext-ms-win-umpoext-umpo-l1-1-0umpoext.dll 
API-ext-ms-win-usp10-l1-1-0gdi32.dll 
API-ext-ms-win-uxtheme-themes-l1-1-0uxtheme.dll 
API-ext-ms-win-uxtheme-themes-l1-1-1uxtheme.dll 
API-ext-ms-win-webio-pal-l1-1-0webio.dll 
API-ext-ms-win-wer-reporting-l1-1-0wer.dll 
API-ext-ms-win-wer-ui-l1-1-0werui.dll 
API-ext-ms-win-wer-wct-l1-1-0wer.dll 
API-ext-ms-win-wevtapi-eventlog-l1-1-0wevtapi.dll 
API-ext-ms-win-wevtapi-eventlog-l1-1-1wevtapi.dll 
API-ext-ms-win-wevtapi-eventlog-l1-1-2wevtapi.dll 
API-ext-ms-win-winbici-l1-1-0winbici.dll 
API-ext-ms-win-winhttp-pal-l1-1-0winhttp.dll 
API-ext-ms-win-winrt-storage-l1-1-0shell32.dll 
API-ext-ms-win-wlan-grouppolicy-l1-1-0wlgpclnt.dll 
API-ext-ms-win-wlan-onexui-l1-1-0onexui.dll 
API-ext-ms-win-wlan-scard-l1-1-0winscard.dll 
API-ext-ms-win-wsclient-devlicense-l1-1-0wsclient.dll 
API-ext-ms-win-wsclient-devlicense-l1-1-1wsclient.dll 
API-ext-ms-win-wwaext-misc-l1-1-0wwaext.dll 
API-ext-ms-win-wwaext-module-l1-1-0wwaext.dll 
API-ext-ms-win-wwan-wwapi-l1-1-0wwapi.dll 
API-ext-ms-win-wwan-wwapi-l1-1-1wwapi.dll 
API-ext-ms-win-xaml-controls-l1-1-0windows.ui.xaml.phone.dll 

windows 10 build 9879 KPRCB 64bit

$
0
0
Just to complete the collection
nt!_KPRCB
   +0x000 MxCsr            : Uint4B
   +0x004 LegacyNumber     : UChar
   +0x005 ReservedMustBeZero : UChar
   +0x006 InterruptRequest : UChar
   +0x007 IdleHalt         : UChar
   +0x008 CurrentThread    : Ptr64 _KTHREAD
   +0x010 NextThread       : Ptr64 _KTHREAD
   +0x018 IdleThread       : Ptr64 _KTHREAD
   +0x020 NestingLevel     : UChar
   +0x021 ClockOwner       : UChar
   +0x022 PendingTickFlags : UChar
   +0x022 PendingTick      : Pos 0, 1 Bit
   +0x022 PendingBackupTick : Pos 1, 1 Bit
   +0x023 IdleState        : UChar
   +0x024 Number           : Uint4B
   +0x028 RspBase          : Uint8B
   +0x030 PrcbLock         : Uint8B
   +0x038 PriorityState    : Ptr64 Char
   +0x040 ProcessorState   : _KPROCESSOR_STATE
   +0x5f0 CpuType          : Char
   +0x5f1 CpuID            : Char
   +0x5f2 CpuStep          : Uint2B
   +0x5f2 CpuStepping      : UChar
   +0x5f3 CpuModel         : UChar
   +0x5f4 MHz              : Uint4B
   +0x5f8 HalReserved      : [8] Uint8B
   +0x638 MinorVersion     : Uint2B
   +0x63a MajorVersion     : Uint2B
   +0x63c BuildType        : UChar
   +0x63d CpuVendor        : UChar
   +0x63e CoresPerPhysicalProcessor : UChar
   +0x63f LogicalProcessorsPerCore : UChar
   +0x640 ParentNode       : Ptr64 _KNODE
   +0x648 GroupSetMember   : Uint8B
   +0x650 Group            : UChar
   +0x651 GroupIndex       : UChar
   +0x652 PrcbPad05        : [2] UChar
   +0x654 InitialApicId    : Uint4B
   +0x658 ScbOffset        : Uint4B
   +0x65c ApicMask         : Uint4B
   +0x660 AcpiReserved     : Ptr64 Void
   +0x668 CFlushSize       : Uint4B
   +0x66c PrcbPad10        : Uint4B
   +0x670 LockQueue        : [17] _KSPIN_LOCK_QUEUE
   +0x780 PPLookasideList  : [16] _PP_LOOKASIDE_LIST
   +0x880 PPNxPagedLookasideList : [32] _GENERAL_LOOKASIDE_POOL
   +0x1480 PPNPagedLookasideList : [32] _GENERAL_LOOKASIDE_POOL
   +0x2080 PPPagedLookasideList : [32] _GENERAL_LOOKASIDE_POOL
   +0x2c80 PrcbPad20        : Uint8B
   +0x2c88 DeferredReadyListHead : _SINGLE_LIST_ENTRY
   +0x2c90 MmPageFaultCount : Int4B
   +0x2c94 MmCopyOnWriteCount : Int4B
   +0x2c98 MmTransitionCount : Int4B
   +0x2c9c MmDemandZeroCount : Int4B
   +0x2ca0 MmPageReadCount  : Int4B
   +0x2ca4 MmPageReadIoCount : Int4B
   +0x2ca8 MmDirtyPagesWriteCount : Int4B
   +0x2cac MmDirtyWriteIoCount : Int4B
   +0x2cb0 MmMappedPagesWriteCount : Int4B
   +0x2cb4 MmMappedWriteIoCount : Int4B
   +0x2cb8 KeSystemCalls    : Uint4B
   +0x2cbc KeContextSwitches : Uint4B
   +0x2cc0 LdtSelector      : Uint2B
   +0x2cc2 PrcbPad40        : Uint2B
   +0x2cc4 CcFastReadNoWait : Uint4B
   +0x2cc8 CcFastReadWait   : Uint4B
   +0x2ccc CcFastReadNotPossible : Uint4B
   +0x2cd0 CcCopyReadNoWait : Uint4B
   +0x2cd4 CcCopyReadWait   : Uint4B
   +0x2cd8 CcCopyReadNoWaitMiss : Uint4B
   +0x2cdc IoReadOperationCount : Int4B
   +0x2ce0 IoWriteOperationCount : Int4B
   +0x2ce4 IoOtherOperationCount : Int4B
   +0x2ce8 IoReadTransferCount : _LARGE_INTEGER
   +0x2cf0 IoWriteTransferCount : _LARGE_INTEGER
   +0x2cf8 IoOtherTransferCount : _LARGE_INTEGER
   +0x2d00 PacketBarrier    : Int4B
   +0x2d04 TargetCount      : Int4B
   +0x2d08 IpiFrozen        : Uint4B
   +0x2d10 IsrDpcStats      : Ptr64 Void
   +0x2d18 DeviceInterrupts : Uint4B
   +0x2d1c LookasideIrpFloat : Int4B
   +0x2d20 InterruptLastCount : Uint4B
   +0x2d24 InterruptRate    : Uint4B
   +0x2d28 PrcbPad41        : [22] Uint4B
   +0x2d80 DpcData          : [2] _KDPC_DATA
   +0x2dd0 DpcStack         : Ptr64 Void
   +0x2dd8 MaximumDpcQueueDepth : Int4B
   +0x2ddc DpcRequestRate   : Uint4B
   +0x2de0 MinimumDpcRate   : Uint4B
   +0x2de4 DpcLastCount     : Uint4B
   +0x2de8 ThreadDpcEnable  : UChar
   +0x2de9 QuantumEnd       : UChar
   +0x2dea DpcRoutineActive : UChar
   +0x2deb IdleSchedule     : UChar
   +0x2dec DpcRequestSummary : Int4B
   +0x2dec DpcRequestSlot   : [2] Int2B
   +0x2dec NormalDpcState   : Int2B
   +0x2dee ThreadDpcState   : Int2B
   +0x2dec DpcNormalProcessingActive : Pos 0, 1 Bit
   +0x2dec DpcNormalProcessingRequested : Pos 1, 1 Bit
   +0x2dec DpcNormalThreadSignal : Pos 2, 1 Bit
   +0x2dec DpcNormalTimerExpiration : Pos 3, 1 Bit
   +0x2dec DpcNormalDpcPresent : Pos 4, 1 Bit
   +0x2dec DpcNormalLocalInterrupt : Pos 5, 1 Bit
   +0x2dec DpcNormalSpare   : Pos 6, 10 Bits
   +0x2dec DpcThreadActive  : Pos 16, 1 Bit
   +0x2dec DpcThreadRequested : Pos 17, 1 Bit
   +0x2dec DpcThreadSpare   : Pos 18, 14 Bits
   +0x2df0 LastTimerHand    : Uint4B
   +0x2df4 LastTick         : Uint4B
   +0x2df8 ClockInterrupts  : Uint4B
   +0x2dfc ReadyScanTick    : Uint4B
   +0x2e00 InterruptObject  : [256] Ptr64 Void
   +0x3600 TimerTable       : _KTIMER_TABLE
   +0x5800 DpcGate          : _KGATE
   +0x5818 PrcbPad52        : Ptr64 Void
   +0x5820 CallDpc          : _KDPC
   +0x5860 ClockKeepAlive   : Int4B
   +0x5864 PrcbPad60        : [2] UChar
   +0x5866 NmiActive        : Uint2B
   +0x5868 DpcWatchdogPeriod : Int4B
   +0x586c DpcWatchdogCount : Int4B
   +0x5870 KeSpinLockOrdering : Int4B
   +0x5874 PrcbPad70        : [1] Uint4B
   +0x5878 CachedPtes       : Ptr64 Void
   +0x5880 WaitListHead     : _LIST_ENTRY
   +0x5890 WaitLock         : Uint8B
   +0x5898 ReadySummary     : Uint4B
   +0x589c AffinitizedSelectionMask : Int4B
   +0x58a0 QueueIndex       : Uint4B
   +0x58a4 PrcbPad75        : [3] Uint4B
   +0x58b0 TimerExpirationDpc : _KDPC
   +0x58f0 ScbQueue         : _RTL_RB_TREE
   +0x5900 DispatcherReadyListHead : [32] _LIST_ENTRY
   +0x5b00 InterruptCount   : Uint4B
   +0x5b04 KernelTime       : Uint4B
   +0x5b08 UserTime         : Uint4B
   +0x5b0c DpcTime          : Uint4B
   +0x5b10 InterruptTime    : Uint4B
   +0x5b14 AdjustDpcThreshold : Uint4B
   +0x5b18 DebuggerSavedIRQL : UChar
   +0x5b19 GroupSchedulingOverQuota : UChar
   +0x5b1a DeepSleep        : UChar
   +0x5b1b PrcbPad80        : [5] UChar
   +0x5b20 DpcTimeCount     : Uint4B
   +0x5b24 DpcTimeLimit     : Uint4B
   +0x5b28 PeriodicCount    : Uint4B
   +0x5b2c PeriodicBias     : Uint4B
   +0x5b30 AvailableTime    : Uint4B
   +0x5b34 KeExceptionDispatchCount : Uint4B
   +0x5b38 StartCycles      : Uint8B
   +0x5b40 TaggedCyclesStart : Uint8B
   +0x5b48 TaggedCycles     : [2] Uint8B
   +0x5b58 GenerationTarget : Uint8B
   +0x5b60 AffinitizedCycles : Uint8B
   +0x5b68 DeviceInterruptCount : Uint4B
   +0x5b6c PrcbPad81        : [28] Uint4B
   +0x5bdc MmSpinLockOrdering : Int4B
   +0x5be0 PageColor        : Uint4B
   +0x5be4 NodeColor        : Uint4B
   +0x5be8 NodeShiftedColor : Uint4B
   +0x5bec SecondaryColorMask : Uint4B
   +0x5bf0 PrcbPad83        : Uint4B
   +0x5bf8 CycleTime        : Uint8B
   +0x5c00 Cycles           : [4] [2] Uint8B
   +0x5c40 PrcbPad84        : [16] Uint4B
   +0x5c80 CcFastMdlReadNoWait : Uint4B
   +0x5c84 CcFastMdlReadWait : Uint4B
   +0x5c88 CcFastMdlReadNotPossible : Uint4B
   +0x5c8c CcMapDataNoWait  : Uint4B
   +0x5c90 CcMapDataWait    : Uint4B
   +0x5c94 CcPinMappedDataCount : Uint4B
   +0x5c98 CcPinReadNoWait  : Uint4B
   +0x5c9c CcPinReadWait    : Uint4B
   +0x5ca0 CcMdlReadNoWait  : Uint4B
   +0x5ca4 CcMdlReadWait    : Uint4B
   +0x5ca8 CcLazyWriteHotSpots : Uint4B
   +0x5cac CcLazyWriteIos   : Uint4B
   +0x5cb0 CcLazyWritePages : Uint4B
   +0x5cb4 CcDataFlushes    : Uint4B
   +0x5cb8 CcDataPages      : Uint4B
   +0x5cbc CcLostDelayedWrites : Uint4B
   +0x5cc0 CcFastReadResourceMiss : Uint4B
   +0x5cc4 CcCopyReadWaitMiss : Uint4B
   +0x5cc8 CcFastMdlReadResourceMiss : Uint4B
   +0x5ccc CcMapDataNoWaitMiss : Uint4B
   +0x5cd0 CcMapDataWaitMiss : Uint4B
   +0x5cd4 CcPinReadNoWaitMiss : Uint4B
   +0x5cd8 CcPinReadWaitMiss : Uint4B
   +0x5cdc CcMdlReadNoWaitMiss : Uint4B
   +0x5ce0 CcMdlReadWaitMiss : Uint4B
   +0x5ce4 CcReadAheadIos   : Uint4B
   +0x5ce8 MmCacheTransitionCount : Int4B
   +0x5cec MmCacheReadCount : Int4B
   +0x5cf0 MmCacheIoCount   : Int4B
   +0x5cf4 PrcbPad91        : [3] Uint4B
   +0x5d00 PowerState       : _PROCESSOR_POWER_STATE
   +0x5eb8 ScbList          : _LIST_ENTRY
   +0x5ec8 PrcbPad92        : [13] Uint4B
   +0x5efc KeAlignmentFixupCount : Uint4B
   +0x5f00 DpcWatchdogDpc   : _KDPC
   +0x5f40 DpcWatchdogTimer : _KTIMER
   +0x5f80 Cache            : [5] _CACHE_DESCRIPTOR
   +0x5fbc CacheCount       : Uint4B
   +0x5fc0 CachedCommit     : Uint4B
   +0x5fc4 CachedResidentAvailable : Uint4B
   +0x5fc8 HyperPte         : Ptr64 Void
   +0x5fd0 WheaInfo         : Ptr64 Void
   +0x5fd8 EtwSupport       : Ptr64 Void
   +0x5fe0 InterruptObjectPool : _SLIST_HEADER
   +0x5ff0 HypercallPageList : _SLIST_HEADER
   +0x6000 HypercallCachedPages : Ptr64 Void
   +0x6008 VirtualApicAssist : Ptr64 Void
   +0x6010 StatisticsPage   : Ptr64 Uint8B
   +0x6018 PackageProcessorSet : _KAFFINITY_EX
   +0x60c0 SharedReadyQueueMask : Uint8B
   +0x60c8 SharedReadyQueue : Ptr64 _KSHARED_READY_QUEUE
   +0x60d0 CoreProcessorSet : Uint8B
   +0x60d8 ScanSiblingMask  : Uint8B
   +0x60e0 LLCMask          : Uint8B
   +0x60e8 CacheProcessorMask : [5] Uint8B
   +0x6110 ScanSiblingIndex : Uint4B
   +0x6118 ProcessorProfileControlArea : Ptr64 _PROCESSOR_PROFILE_CONTROL_AREA
   +0x6120 ProfileEventIndexAddress : Ptr64 Void
   +0x6128 PrcbPad94        : [11] Uint8B
   +0x6180 SynchCounters    : _SYNCH_COUNTERS
   +0x6238 PteBitCache      : Uint8B
   +0x6240 PteBitOffset     : Uint4B
   +0x6248 FsCounters       : _FILESYSTEM_DISK_COUNTERS
   +0x6258 VendorString     : [13] UChar
   +0x6265 PrcbPad100       : [3] UChar
   +0x6268 FeatureBits      : Uint8B
   +0x6270 PrcbPad110       : Uint4B
   +0x6278 UpdateSignature  : _LARGE_INTEGER
   +0x6280 Context          : Ptr64 _CONTEXT
   +0x6288 ContextFlagsInit : Uint4B
   +0x6290 ExtendedState    : Ptr64 _XSAVE_AREA
   +0x6298 IsrStack         : Ptr64 Void
   +0x62a0 EntropyTimingState : _KENTROPY_TIMING_STATE
   +0x63f0 AbSelfIoBoostsList : _SINGLE_LIST_ENTRY
   +0x63f8 AbPropagateBoostsList : _SINGLE_LIST_ENTRY
   +0x6400 AbDpc            : _KDPC
   +0x6440 IoIrpStackProfilerCurrent : _IOP_IRP_STACK_PROFILER
   +0x6494 IoIrpStackProfilerPrevious : _IOP_IRP_STACK_PROFILER
   +0x6500 LocalSharedReadyQueue : _KSHARED_READY_QUEUE
   +0x6768 TimerExpirationTrace : [16] _KTIMER_EXPIRATION_TRACE
   +0x6868 TimerExpirationTraceCount : Uint4B
   +0x6870 ExSaPageArray    : Ptr64 Void
   +0x6880 Mailbox          : Ptr64 _REQUEST_MAILBOX
   +0x68c0 RequestMailbox   : [1] _REQUEST_MAILBOX

windows 10 Technical Preview KPRCB 64bit

$
0
0
to compare with


ntdll!_KPRCB
   +0x000 MxCsr            : Uint4B
   +0x004 LegacyNumber     : UChar
   +0x005 ReservedMustBeZero : UChar
   +0x006 InterruptRequest : UChar
   +0x007 IdleHalt         : UChar
   +0x008 CurrentThread    : Ptr64 _KTHREAD
   +0x010 NextThread       : Ptr64 _KTHREAD
   +0x018 IdleThread       : Ptr64 _KTHREAD
   +0x020 NestingLevel     : UChar
   +0x021 ClockOwner       : UChar
   +0x022 PendingTickFlags : UChar
   +0x022 PendingTick      : Pos 0, 1 Bit
   +0x022 PendingBackupTick : Pos 1, 1 Bit
   +0x023 IdleState        : UChar
   +0x024 Number           : Uint4B
   +0x028 RspBase          : Uint8B
   +0x030 PrcbLock         : Uint8B
   +0x038 PriorityState    : Ptr64 Char
   +0x040 ProcessorState   : _KPROCESSOR_STATE
   +0x5f0 CpuType          : Char
   +0x5f1 CpuID            : Char
   +0x5f2 CpuStep          : Uint2B
   +0x5f2 CpuStepping      : UChar
   +0x5f3 CpuModel         : UChar
   +0x5f4 MHz              : Uint4B
   +0x5f8 HalReserved      : [8] Uint8B
   +0x638 MinorVersion     : Uint2B
   +0x63a MajorVersion     : Uint2B
   +0x63c BuildType        : UChar
   +0x63d CpuVendor        : UChar
   +0x63e CoresPerPhysicalProcessor : UChar
   +0x63f LogicalProcessorsPerCore : UChar
   +0x640 ParentNode       : Ptr64 _KNODE
   +0x648 GroupSetMember   : Uint8B
   +0x650 Group            : UChar
   +0x651 GroupIndex       : UChar
   +0x652 PrcbPad05        : [2] UChar
   +0x654 InitialApicId    : Uint4B
   +0x658 ScbOffset        : Uint4B
   +0x65c ApicMask         : Uint4B
   +0x660 AcpiReserved     : Ptr64 Void
   +0x668 CFlushSize       : Uint4B
   +0x66c PrcbPad10        : Uint4B
   +0x670 LockQueue        : [17] _KSPIN_LOCK_QUEUE
   +0x780 PPLookasideList  : [16] _PP_LOOKASIDE_LIST
   +0x880 PPNxPagedLookasideList : [32] _GENERAL_LOOKASIDE_POOL
   +0x1480 PPNPagedLookasideList : [32] _GENERAL_LOOKASIDE_POOL
   +0x2080 PPPagedLookasideList : [32] _GENERAL_LOOKASIDE_POOL
   +0x2c80 PrcbPad20        : Uint8B
   +0x2c88 DeferredReadyListHead : _SINGLE_LIST_ENTRY
   +0x2c90 MmPageFaultCount : Int4B
   +0x2c94 MmCopyOnWriteCount : Int4B
   +0x2c98 MmTransitionCount : Int4B
   +0x2c9c MmDemandZeroCount : Int4B
   +0x2ca0 MmPageReadCount  : Int4B
   +0x2ca4 MmPageReadIoCount : Int4B
   +0x2ca8 MmDirtyPagesWriteCount : Int4B
   +0x2cac MmDirtyWriteIoCount : Int4B
   +0x2cb0 MmMappedPagesWriteCount : Int4B
   +0x2cb4 MmMappedWriteIoCount : Int4B
   +0x2cb8 KeSystemCalls    : Uint4B
   +0x2cbc KeContextSwitches : Uint4B
   +0x2cc0 LdtSelector      : Uint2B
   +0x2cc2 PrcbPad40        : Uint2B
   +0x2cc4 CcFastReadNoWait : Uint4B
   +0x2cc8 CcFastReadWait   : Uint4B
   +0x2ccc CcFastReadNotPossible : Uint4B
   +0x2cd0 CcCopyReadNoWait : Uint4B
   +0x2cd4 CcCopyReadWait   : Uint4B
   +0x2cd8 CcCopyReadNoWaitMiss : Uint4B
   +0x2cdc IoReadOperationCount : Int4B
   +0x2ce0 IoWriteOperationCount : Int4B
   +0x2ce4 IoOtherOperationCount : Int4B
   +0x2ce8 IoReadTransferCount : _LARGE_INTEGER
   +0x2cf0 IoWriteTransferCount : _LARGE_INTEGER
   +0x2cf8 IoOtherTransferCount : _LARGE_INTEGER
   +0x2d00 PacketBarrier    : Int4B
   +0x2d04 TargetCount      : Int4B
   +0x2d08 IpiFrozen        : Uint4B
   +0x2d10 IsrDpcStats      : Ptr64 Void
   +0x2d18 DeviceInterrupts : Uint4B
   +0x2d1c LookasideIrpFloat : Int4B
   +0x2d20 InterruptLastCount : Uint4B
   +0x2d24 InterruptRate    : Uint4B
   +0x2d28 PrcbPad41        : [22] Uint4B
   +0x2d80 DpcData          : [2] _KDPC_DATA
   +0x2dd0 DpcStack         : Ptr64 Void
   +0x2dd8 MaximumDpcQueueDepth : Int4B
   +0x2ddc DpcRequestRate   : Uint4B
   +0x2de0 MinimumDpcRate   : Uint4B
   +0x2de4 DpcLastCount     : Uint4B
   +0x2de8 ThreadDpcEnable  : UChar
   +0x2de9 QuantumEnd       : UChar
   +0x2dea DpcRoutineActive : UChar
   +0x2deb IdleSchedule     : UChar
   +0x2dec DpcRequestSummary : Int4B
   +0x2dec DpcRequestSlot   : [2] Int2B
   +0x2dec NormalDpcState   : Int2B
   +0x2dee ThreadDpcState   : Int2B
   +0x2dec DpcNormalProcessingActive : Pos 0, 1 Bit
   +0x2dec DpcNormalProcessingRequested : Pos 1, 1 Bit
   +0x2dec DpcNormalThreadSignal : Pos 2, 1 Bit
   +0x2dec DpcNormalTimerExpiration : Pos 3, 1 Bit
   +0x2dec DpcNormalDpcPresent : Pos 4, 1 Bit
   +0x2dec DpcNormalLocalInterrupt : Pos 5, 1 Bit
   +0x2dec DpcNormalSpare   : Pos 6, 10 Bits
   +0x2dec DpcThreadActive  : Pos 16, 1 Bit
   +0x2dec DpcThreadRequested : Pos 17, 1 Bit
   +0x2dec DpcThreadSpare   : Pos 18, 14 Bits
   +0x2df0 LastTimerHand    : Uint4B
   +0x2df4 LastTick         : Uint4B
   +0x2df8 ClockInterrupts  : Uint4B
   +0x2dfc ReadyScanTick    : Uint4B
   +0x2e00 InterruptObject  : [208] Ptr64 Void
   +0x3480 TimerTable       : _KTIMER_TABLE
   +0x5680 DpcGate          : _KGATE
   +0x5698 PrcbPad52        : Ptr64 Void
   +0x56a0 CallDpc          : _KDPC
   +0x56e0 ClockKeepAlive   : Int4B
   +0x56e4 PrcbPad60        : [2] UChar
   +0x56e6 NmiActive        : Uint2B
   +0x56e8 DpcWatchdogPeriod : Int4B
   +0x56ec DpcWatchdogCount : Int4B
   +0x56f0 KeSpinLockOrdering : Int4B
   +0x56f4 PrcbPad70        : [1] Uint4B
   +0x56f8 CachedPtes       : Ptr64 Void
   +0x5700 WaitListHead     : _LIST_ENTRY
   +0x5710 WaitLock         : Uint8B
   +0x5718 ReadySummary     : Uint4B
   +0x571c AffinitizedSelectionMask : Int4B
   +0x5720 QueueIndex       : Uint4B
   +0x5724 PrcbPad75        : [3] Uint4B
   +0x5730 TimerExpirationDpc : _KDPC
   +0x5770 ScbQueue         : _RTL_RB_TREE
   +0x5780 DispatcherReadyListHead : [32] _LIST_ENTRY
   +0x5980 InterruptCount   : Uint4B
   +0x5984 KernelTime       : Uint4B
   +0x5988 UserTime         : Uint4B
   +0x598c DpcTime          : Uint4B
   +0x5990 InterruptTime    : Uint4B
   +0x5994 AdjustDpcThreshold : Uint4B
   +0x5998 DebuggerSavedIRQL : UChar
   +0x5999 GroupSchedulingOverQuota : UChar
   +0x599a DeepSleep        : UChar
   +0x599b PrcbPad80        : [5] UChar
   +0x59a0 DpcTimeCount     : Uint4B
   +0x59a4 DpcTimeLimit     : Uint4B
   +0x59a8 PeriodicCount    : Uint4B
   +0x59ac PeriodicBias     : Uint4B
   +0x59b0 AvailableTime    : Uint4B
   +0x59b4 KeExceptionDispatchCount : Uint4B
   +0x59b8 StartCycles      : Uint8B
   +0x59c0 TaggedCyclesStart : Uint8B
   +0x59c8 TaggedCycles     : [2] Uint8B
   +0x59d8 GenerationTarget : Uint8B
   +0x59e0 AffinitizedCycles : Uint8B
   +0x59e8 DeviceInterruptCount : Uint4B
   +0x59ec PrcbPad81        : [28] Uint4B
   +0x5a5c MmSpinLockOrdering : Int4B
   +0x5a60 PageColor        : Uint4B
   +0x5a64 NodeColor        : Uint4B
   +0x5a68 NodeShiftedColor : Uint4B
   +0x5a6c SecondaryColorMask : Uint4B
   +0x5a70 PrcbPad83        : Uint4B
   +0x5a78 CycleTime        : Uint8B
   +0x5a80 CcFastMdlReadNoWait : Uint4B
   +0x5a84 CcFastMdlReadWait : Uint4B
   +0x5a88 CcFastMdlReadNotPossible : Uint4B
   +0x5a8c CcMapDataNoWait  : Uint4B
   +0x5a90 CcMapDataWait    : Uint4B
   +0x5a94 CcPinMappedDataCount : Uint4B
   +0x5a98 CcPinReadNoWait  : Uint4B
   +0x5a9c CcPinReadWait    : Uint4B
   +0x5aa0 CcMdlReadNoWait  : Uint4B
   +0x5aa4 CcMdlReadWait    : Uint4B
   +0x5aa8 CcLazyWriteHotSpots : Uint4B
   +0x5aac CcLazyWriteIos   : Uint4B
   +0x5ab0 CcLazyWritePages : Uint4B
   +0x5ab4 CcDataFlushes    : Uint4B
   +0x5ab8 CcDataPages      : Uint4B
   +0x5abc CcLostDelayedWrites : Uint4B
   +0x5ac0 CcFastReadResourceMiss : Uint4B
   +0x5ac4 CcCopyReadWaitMiss : Uint4B
   +0x5ac8 CcFastMdlReadResourceMiss : Uint4B
   +0x5acc CcMapDataNoWaitMiss : Uint4B
   +0x5ad0 CcMapDataWaitMiss : Uint4B
   +0x5ad4 CcPinReadNoWaitMiss : Uint4B
   +0x5ad8 CcPinReadWaitMiss : Uint4B
   +0x5adc CcMdlReadNoWaitMiss : Uint4B
   +0x5ae0 CcMdlReadWaitMiss : Uint4B
   +0x5ae4 CcReadAheadIos   : Uint4B
   +0x5ae8 MmCacheTransitionCount : Int4B
   +0x5aec MmCacheReadCount : Int4B
   +0x5af0 MmCacheIoCount   : Int4B
   +0x5af4 PrcbPad91        : [3] Uint4B
   +0x5b00 PowerState       : _PROCESSOR_POWER_STATE
   +0x5cd0 ScbList          : _LIST_ENTRY
   +0x5ce0 PrcbPad92        : [7] Uint4B
   +0x5cfc KeAlignmentFixupCount : Uint4B
   +0x5d00 DpcWatchdogDpc   : _KDPC
   +0x5d40 DpcWatchdogTimer : _KTIMER
   +0x5d80 Cache            : [5] _CACHE_DESCRIPTOR
   +0x5dbc CacheCount       : Uint4B
   +0x5dc0 CachedCommit     : Uint4B
   +0x5dc4 CachedResidentAvailable : Uint4B
   +0x5dc8 HyperPte         : Ptr64 Void
   +0x5dd0 WheaInfo         : Ptr64 Void
   +0x5dd8 EtwSupport       : Ptr64 Void
   +0x5de0 InterruptObjectPool : _SLIST_HEADER
   +0x5df0 HypercallPageList : _SLIST_HEADER
   +0x5e00 HypercallPageVirtual : Ptr64 Void
   +0x5e08 VirtualApicAssist : Ptr64 Void
   +0x5e10 StatisticsPage   : Ptr64 Uint8B
   +0x5e18 PackageProcessorSet : _KAFFINITY_EX
   +0x5ec0 SharedReadyQueueMask : Uint8B
   +0x5ec8 SharedReadyQueue : Ptr64 _KSHARED_READY_QUEUE
   +0x5ed0 CoreProcessorSet : Uint8B
   +0x5ed8 ScanSiblingMask  : Uint8B
   +0x5ee0 LLCMask          : Uint8B
   +0x5ee8 CacheProcessorMask : [5] Uint8B
   +0x5f10 ScanSiblingIndex : Uint4B
   +0x5f18 ProcessorProfileControlArea : Ptr64 _PROCESSOR_PROFILE_CONTROL_AREA
   +0x5f20 ProfileEventIndexAddress : Ptr64 Void
   +0x5f28 PrcbPad94        : [11] Uint8B
   +0x5f80 SynchCounters    : _SYNCH_COUNTERS
   +0x6038 PteBitCache      : Uint8B
   +0x6040 PteBitOffset     : Uint4B
   +0x6048 FsCounters       : _FILESYSTEM_DISK_COUNTERS
   +0x6058 VendorString     : [13] UChar
   +0x6065 PrcbPad100       : [3] UChar
   +0x6068 FeatureBits      : Uint8B
   +0x6070 PrcbPad110       : Uint4B
   +0x6078 UpdateSignature  : _LARGE_INTEGER
   +0x6080 Context          : Ptr64 _CONTEXT
   +0x6088 ContextFlagsInit : Uint4B
   +0x6090 ExtendedState    : Ptr64 _XSAVE_AREA
   +0x6098 IsrStack         : Ptr64 Void
   +0x60a0 EntropyTimingState : _KENTROPY_TIMING_STATE
   +0x61f0 AbSelfIoBoostsList : _SINGLE_LIST_ENTRY
   +0x61f8 AbPropagateBoostsList : _SINGLE_LIST_ENTRY
   +0x6200 AbDpc            : _KDPC
   +0x6240 IoIrpStackProfilerCurrent : _IOP_IRP_STACK_PROFILER
   +0x6294 IoIrpStackProfilerPrevious : _IOP_IRP_STACK_PROFILER
   +0x6300 LocalSharedReadyQueue : _KSHARED_READY_QUEUE
   +0x6568 TimerExpirationTrace : [16] _KTIMER_EXPIRATION_TRACE
   +0x6668 TimerExpirationTraceCount : Uint4B
   +0x6670 ExSaPageArray    : Ptr64 Void
   +0x6680 Mailbox          : Ptr64 _REQUEST_MAILBOX
   +0x66c0 RequestMailbox   : [1] _REQUEST_MAILBOX


interrupts in w10 build 9879 64bit

$
0
0
it seems that Microsoft completely removed KiInterruptTemplate in this version of windows and interrutps now stored in KPRCB (like in w8.1)
Lets see on function KiConnectInterrupt

 mov    rax, gs:20h ; load KPCR.CurrentPrcb
 mov    r10, [rax+rdi*8+2E00h] ;
KPRCB.InterruptObject
 test   r10, r10
 jnz    short loc_1401006FC
 cmp    [rbx+_KINTERRUPT.SynchronizeIrql], r10b
 jz     loc_1401918E5

loc_1401006A1: 

 mov    r14b, 1
 mov    [rbx+_KINTERRUPT.Connected], r14b



loc_1401006A8:
 mov    rax, gs:20h
 mov    [rax+rdi*8+2E00h], rbx ; store this interrupt in

KPRCB.InterruptObject[rdi]
From this code it's obvious that KINTERRUPTS now stored in KPRCB.InterruptObject

sample of wincheck output from this w10 build:
KInterrupt 35 (FFFFF800F484E000):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF800F4828790 \SystemRoot\system32\hal.dll
 DispatchAddress FFFFF800F499CCF0 
KInterrupt 50 (FFFFD001A9D5FC00):
 Size F0 type 16
 Flink FFFFD001A9D5F708
 Blink FFFFD001A9D5F708
 ServiceRoutine  FFFFF80140293390 \SystemRoot\System32\drivers\storport.sys
 DispatchAddress FFFFF800F499C1C0 
KInterrupt 50 (FFFFD001A9D5F700):
 Size F0 type 16
 Flink FFFFD001A9D5FC08
 Blink FFFFD001A9D5FC08
 ServiceRoutine  FFFFF80141F728C0 \SystemRoot\System32\drivers\HDAudBus.sys
 DispatchAddress FFFFF800F499C8E0 
KInterrupt 60 (FFFFD001A9D5FD00):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF8014020E140 \SystemRoot\System32\drivers\ataport.SYS
 DispatchAddress FFFFF800F499C8E0 
KInterrupt 70 (FFFFD001A9D5FE00):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF8014020E140 \SystemRoot\System32\drivers\ataport.SYS
 DispatchAddress FFFFF800F499C8E0 
KInterrupt 90 (FFFFD001A9D5F900):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF801414E7AD0 \SystemRoot\System32\drivers\i8042prt.sys
 DispatchAddress FFFFF800F499C8E0 
KInterrupt 91 (FFFFD001A9D5F800):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF80140658710 \SystemRoot\system32\drivers\ndis.sys
 DispatchAddress FFFFF800F499C8E0 
KInterrupt A0 (FFFFD001A9D5FA00):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF801414E5F10 \SystemRoot\System32\drivers\i8042prt.sys
 DispatchAddress FFFFF800F499C8E0 
KInterrupt A1 (FFFFD001A9D5F600):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF80141A03680 \SystemRoot\System32\drivers\USBPORT.SYS
 DispatchAddress FFFFF800F499C8E0 
KInterrupt B0 (FFFFD001A9D5FF00):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF8013FE8E710 \SystemRoot\System32\drivers\ACPI.sys
 DispatchAddress FFFFF800F499C8E0 
KInterrupt B1 (FFFFD001A9D5FB00):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF801417612A0 \SystemRoot\system32\DRIVERS\VBoxGuest.sys
 DispatchAddress FFFFF800F499C8E0 
KInterrupt CE (FFFFF800F484E870):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF800F482DE98 \SystemRoot\system32\hal.dll
 DispatchAddress FFFFF800F499CCF0 
KInterrupt D1 (FFFFF800F484E780):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF800F4803BA0 \SystemRoot\system32\hal.dll
 DispatchAddress FFFFF800F499CEE0 
KInterrupt D2 (FFFFF800F484E690):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF800F48049A0 \SystemRoot\system32\hal.dll
 DispatchAddress FFFFF800F499CEE0 
KInterrupt D7 (FFFFF800F484E4B0):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF800F48287B4 \SystemRoot\system32\hal.dll
 DispatchAddress FFFFF800F499CCF0 
KInterrupt D8 (FFFFF800F484E2D0):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF800F4828818 \SystemRoot\system32\hal.dll
 DispatchAddress FFFFF800F499CCF0 
KInterrupt DF (FFFFF800F484E1E0):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF800F48287F8 \SystemRoot\system32\hal.dll
 DispatchAddress FFFFF800F499D2B0 
KInterrupt E2 (FFFFF800F484E3C0):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF800F480A2E8 \SystemRoot\system32\hal.dll
 DispatchAddress FFFFF800F499CCF0 
KInterrupt E3 (FFFFF800F484E0F0):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF800F48287A0 \SystemRoot\system32\hal.dll
 DispatchAddress FFFFF800F499CCF0 
KInterrupt FE (FFFFF800F484E5A0):
 Size F0 type 16
 Flink 0000000000000000
 Blink 0000000000000000
 ServiceRoutine  FFFFF800F4826570 \SystemRoot\system32\hal.dll
 DispatchAddress FFFFF800F499CEE0 

apisetschema.dll from windows 10 build 9926

$
0
0
apisetschema.dll now has version 6

api-ms-win-appmodel-identity-l1-2-0kernel.appcore.dll
api-ms-win-appmodel-runtime-internal-l1-1-2kernel.appcore.dll
api-ms-win-appmodel-runtime-l1-1-1kernel.appcore.dll
api-ms-win-appmodel-state-l1-1-2kernel.appcore.dll
api-ms-win-appmodel-state-l1-2-0kernel.appcore.dll
api-ms-win-base-bootconfig-l1-1-0advapi32.dll
api-ms-win-base-util-l1-1-0advapi32.dll
api-ms-win-composition-redirection-l1-1-0dwmredir.dll
api-ms-win-composition-windowmanager-l1-1-0udwm.dll
api-ms-win-core-apiquery-l1-1-0ntdll.dll
api-ms-win-core-appcompat-l1-1-1kernelbase.dll
api-ms-win-core-appinit-l1-1-0kernel32.dllkernelbase.dll
api-ms-win-core-atoms-l1-1-0kernel32.dll
api-ms-win-core-bicltapi-l1-1-2bi.dll
api-ms-win-core-biplmapi-l1-1-2twinapi.appcore.dll
api-ms-win-core-biptcltapi-l1-1-3twinapi.appcore.dll
api-ms-win-core-calendar-l1-1-0kernel32.dll
api-ms-win-core-com-l1-1-1combase.dll
api-ms-win-core-com-l2-1-1coml2.dll
api-ms-win-core-com-midlproxystub-l1-1-0combase.dll
api-ms-win-core-com-private-l1-1-1combase.dll
api-ms-win-core-comm-l1-1-0kernelbase.dll
api-ms-win-core-console-l1-1-0kernelbase.dll
api-ms-win-core-console-l2-1-0kernelbase.dll
api-ms-win-core-crt-l1-1-0ntdll.dll
api-ms-win-core-crt-l2-1-0kernelbase.dll
api-ms-win-core-datetime-l1-1-1kernelbase.dll
api-ms-win-core-debug-l1-1-1kernelbase.dll
api-ms-win-core-delayload-l1-1-1kernelbase.dll
api-ms-win-core-errorhandling-l1-1-2kernelbase.dll
api-ms-win-core-fibers-l1-1-1kernelbase.dll
api-ms-win-core-fibers-l2-1-1kernelbase.dll
api-ms-win-core-file-l1-1-1kernelbase.dll
api-ms-win-core-file-l1-2-2kernelbase.dll
api-ms-win-core-file-l2-1-2kernelbase.dll
api-ms-win-core-firmware-l1-1-0kernel32.dll
api-ms-win-core-handle-l1-1-0kernelbase.dll
api-ms-win-core-heap-l1-1-0kernelbase.dll
api-ms-win-core-heap-l1-2-0kernelbase.dll
api-ms-win-core-heap-l2-1-0kernelbase.dll
api-ms-win-core-heap-obsolete-l1-1-0kernel32.dll
api-ms-win-core-interlocked-l1-1-1kernelbase.dll
api-ms-win-core-interlocked-l1-2-0kernelbase.dll
api-ms-win-core-io-l1-1-1kernel32.dllkernelbase.dll
api-ms-win-core-job-l1-1-0kernelbase.dll
api-ms-win-core-job-l2-1-0kernel32.dll
api-ms-win-core-kernel32-legacy-l1-1-2kernel32.dll
api-ms-win-core-kernel32-private-l1-1-2kernel32.dll
api-ms-win-core-libraryloader-l1-1-1kernelbase.dll
api-ms-win-core-libraryloader-l1-2-1kernelbase.dll
api-ms-win-core-libraryloader-l2-1-0kernelbase.dll
api-ms-win-core-libraryloader-private-l1-1-0kernelbase.dll
api-ms-win-core-localization-l1-1-0kernelbase.dll
api-ms-win-core-localization-l1-2-1kernelbase.dll
api-ms-win-core-localization-l2-1-0kernelbase.dll
api-ms-win-core-localization-obsolete-l1-1-0kernelbase.dll
api-ms-win-core-localization-obsolete-l1-2-0kernelbase.dll
api-ms-win-core-localization-private-l1-1-0kernelbase.dll
api-ms-win-core-localregistry-l1-1-0kernelbase.dll
api-ms-win-core-marshal-l1-1-0combase.dll
api-ms-win-core-memory-l1-1-3kernelbase.dll
api-ms-win-core-misc-l1-1-0kernelbase.dll
api-ms-win-core-multipleproviderrouter-l1-1-0mpr.dll
api-ms-win-core-namedpipe-l1-1-0kernelbase.dll
api-ms-win-core-namedpipe-l1-2-1kernelbase.dll
api-ms-win-core-namespace-l1-1-0kernelbase.dll
api-ms-win-core-normalization-l1-1-0kernelbase.dll
api-ms-win-core-path-l1-1-0kernelbase.dll
api-ms-win-core-perfcounters-l1-1-0kernelbase.dll
api-ms-win-core-privateprofile-l1-1-1kernel32.dll
api-ms-win-core-processenvironment-l1-1-1kernelbase.dll
api-ms-win-core-processenvironment-l1-2-0kernelbase.dll
api-ms-win-core-processsecurity-l1-1-0kernel32.dllkernelbase.dll
api-ms-win-core-processsnapshot-l1-1-0kernelbase.dll
api-ms-win-core-processthreads-l1-1-2kernel32.dllkernelbase.dll
api-ms-win-core-processtopology-l1-1-0kernelbase.dll
api-ms-win-core-processtopology-l1-2-0kernelbase.dll
api-ms-win-core-processtopology-obsolete-l1-1-0kernel32.dll
api-ms-win-core-processtopology-private-l1-1-0kernelbase.dll
api-ms-win-core-profile-l1-1-0kernelbase.dll
api-ms-win-core-psapi-ansi-l1-1-0kernelbase.dll
api-ms-win-core-psapi-l1-1-0kernelbase.dll
api-ms-win-core-psapi-obsolete-l1-1-0kernelbase.dll
api-ms-win-core-psapiansi-l1-1-0kernelbase.dll
api-ms-win-core-psm-app-l1-1-0twinapi.appcore.dll
api-ms-win-core-psm-appnotify-l1-1-0twinapi.appcore.dll
api-ms-win-core-psm-info-l1-1-0appsruprov.dll
api-ms-win-core-psm-key-l1-1-0kernelbase.dll
api-ms-win-core-psm-plm-l1-1-2twinapi.appcore.dll
api-ms-win-core-psm-tc-l1-1-1twinapi.appcore.dll
api-ms-win-core-quirks-l1-1-0kernelbase.dll
api-ms-win-core-realtime-l1-1-1kernelbase.dll
api-ms-win-core-registry-l1-1-1kernelbase.dll
api-ms-win-core-registry-l2-1-0advapi32.dll
api-ms-win-core-registry-l2-2-0advapi32.dll
api-ms-win-core-registry-private-l1-1-0advapi32.dll
api-ms-win-core-registryuserspecific-l1-1-0kernelbase.dll
api-ms-win-core-rtlsupport-l1-1-1ntdll.dll
api-ms-win-core-rtlsupport-l1-2-0ntdll.dll
api-ms-win-core-shlwapi-legacy-l1-1-0kernelbase.dll
api-ms-win-core-shlwapi-obsolete-l1-1-0kernelbase.dll
api-ms-win-core-shlwapi-obsolete-l1-2-0kernelbase.dll
api-ms-win-core-shutdown-l1-1-1advapi32.dll
api-ms-win-core-sidebyside-l1-1-0kernelbase.dll
api-ms-win-core-string-l1-1-0kernelbase.dll
api-ms-win-core-string-l2-1-1kernelbase.dll
api-ms-win-core-string-obsolete-l1-1-1kernel32.dll
api-ms-win-core-stringansi-l1-1-0kernelbase.dll
api-ms-win-core-stringloader-l1-1-1kernelbase.dll
api-ms-win-core-synch-l1-1-1kernelbase.dll
api-ms-win-core-synch-l1-2-1kernelbase.dll
api-ms-win-core-sysinfo-l1-1-1kernelbase.dll
api-ms-win-core-sysinfo-l1-2-3kernelbase.dll
api-ms-win-core-systemtopology-l1-1-0kernelbase.dll
api-ms-win-core-textinput-client-l1-1-0msctf.dll
api-ms-win-core-threadpool-l1-1-0kernelbase.dll
api-ms-win-core-threadpool-l1-2-0kernelbase.dll
api-ms-win-core-threadpool-legacy-l1-1-0kernelbase.dll
api-ms-win-core-threadpool-private-l1-1-0kernelbase.dll
api-ms-win-core-timezone-l1-1-0kernelbase.dll
api-ms-win-core-timezone-private-l1-1-0kernelbase.dll
api-ms-win-core-toolhelp-l1-1-0kernel32.dll
api-ms-win-core-url-l1-1-0kernelbase.dll
api-ms-win-core-util-l1-1-1kernel32.dllkernelbase.dll
api-ms-win-core-version-l1-1-0kernelbase.dll
api-ms-win-core-version-private-l1-1-0kernelbase.dll
api-ms-win-core-versionansi-l1-1-0kernelbase.dll
api-ms-win-core-windowserrorreporting-l1-1-0kernelbase.dll
api-ms-win-core-winrt-error-l1-1-1combase.dll
api-ms-win-core-winrt-errorprivate-l1-1-1combase.dll
api-ms-win-core-winrt-l1-1-0combase.dll
api-ms-win-core-winrt-propertysetprivate-l1-1-1wintypes.dll
api-ms-win-core-winrt-registration-l1-1-0combase.dll
api-ms-win-core-winrt-robuffer-l1-1-0wintypes.dll
api-ms-win-core-winrt-roparameterizediid-l1-1-0combase.dll
api-ms-win-core-winrt-string-l1-1-0combase.dll
api-ms-win-core-wow64-l1-1-1kernelbase.dll
api-ms-win-core-xstate-l1-1-1ntdll.dll
api-ms-win-core-xstate-l2-1-0kernelbase.dll
api-ms-win-crt-conio-l1-1-0ucrtbase.dll
api-ms-win-crt-convert-l1-1-0ucrtbase.dll
api-ms-win-crt-environment-l1-1-0ucrtbase.dll
api-ms-win-crt-filesystem-l1-1-0ucrtbase.dll
api-ms-win-crt-heap-l1-1-0ucrtbase.dll
api-ms-win-crt-locale-l1-1-0ucrtbase.dll
api-ms-win-crt-math-l1-1-0ucrtbase.dll
api-ms-win-crt-multibyte-l1-1-0ucrtbase.dll
api-ms-win-crt-private-l1-1-0ucrtbase.dll
api-ms-win-crt-process-l1-1-0ucrtbase.dll
api-ms-win-crt-runtime-l1-1-0ucrtbase.dll
api-ms-win-crt-stdio-l1-1-0ucrtbase.dll
api-ms-win-crt-string-l1-1-0ucrtbase.dll
api-ms-win-crt-time-l1-1-0ucrtbase.dll
api-ms-win-crt-utility-l1-1-0ucrtbase.dll
api-ms-win-deprecated-apis-obsolete-l1-1-0kernelbase.dll
api-ms-win-devices-config-l1-1-1cfgmgr32.dll
api-ms-win-devices-query-l1-1-1cfgmgr32.dll
api-ms-win-devices-swdevice-l1-1-1cfgmgr32.dll
api-ms-win-downlevel-advapi32-l1-1-1kernelbase.dll
api-ms-win-downlevel-advapi32-l2-1-1sechost.dll
api-ms-win-downlevel-advapi32-l3-1-0ntmarta.dll
api-ms-win-downlevel-advapi32-l4-1-0advapi32.dll
api-ms-win-downlevel-kernel32-l1-1-0kernelbase.dll
api-ms-win-downlevel-kernel32-l2-1-0kernel32.dll
api-ms-win-downlevel-normaliz-l1-1-0kernelbase.dll
api-ms-win-downlevel-ole32-l1-1-1combase.dll
api-ms-win-downlevel-shell32-l1-1-0shcore.dll
api-ms-win-downlevel-shlwapi-l1-1-1kernelbase.dll
api-ms-win-downlevel-shlwapi-l2-1-1shcore.dll
api-ms-win-downlevel-user32-l1-1-1kernelbase.dll
api-ms-win-downlevel-version-l1-1-0kernelbase.dll
api-ms-win-dwmapi-l1-1-0dwmapi.dll
api-ms-win-dx-d3dkmt-l1-1-1gdi32.dll
api-ms-win-eventing-classicprovider-l1-1-0kernelbase.dll
api-ms-win-eventing-consumer-l1-1-0sechost.dll
api-ms-win-eventing-controller-l1-1-0sechost.dll
api-ms-win-eventing-legacy-l1-1-0advapi32.dll
api-ms-win-eventing-obsolete-l1-1-0sechost.dll
api-ms-win-eventing-provider-l1-1-0kernelbase.dll
api-ms-win-eventlog-legacy-l1-1-0advapi32.dll
api-ms-win-eventlog-private-l1-1-0advapi32.dll
api-ms-win-gdi-dpiinfo-l1-1-0gdi32.dll
api-ms-win-http-time-l1-1-0kernelbase.dll
api-ms-win-legacy-shlwapi-l1-1-0kernelbase.dll
api-ms-win-mm-joystick-l1-1-0winmmbase.dll
api-ms-win-mm-mci-l1-1-0winmm.dll
api-ms-win-mm-misc-l1-1-1winmmbase.dll
api-ms-win-mm-misc-l2-1-0winmm.dll
api-ms-win-mm-mme-l1-1-0winmmbase.dll
api-ms-win-mm-playsound-l1-1-0winmm.dll
api-ms-win-mm-time-l1-1-0kernel32.dll
api-ms-win-net-isolation-l1-1-1firewallapi.dll
api-ms-win-networking-interfacecontexts-l1-1-0ondemandconnroutehelper.dll
api-ms-win-ntuser-ie-message-l1-1-0user32.dll
api-ms-win-ntuser-ie-window-l1-1-0user32.dll
api-ms-win-ntuser-ie-wmpointer-l1-1-0user32.dll
api-ms-win-ntuser-rectangle-l1-1-0user32.dll
api-ms-win-ntuser-sysparams-l1-1-0user32.dll
api-ms-win-obsolete-localization-l1-1-0kernelbase.dll
api-ms-win-obsolete-psapi-l1-1-0kernelbase.dll
api-ms-win-obsolete-shlwapi-l1-1-0kernelbase.dll
api-ms-win-ole32-ie-l1-1-0ole32.dll
api-ms-win-oobe-notification-l1-1-0kernel32.dll
api-ms-win-perf-legacy-l1-1-0advapi32.dll
api-ms-win-power-base-l1-1-0powrprof.dll
api-ms-win-power-setting-l1-1-0powrprof.dll
api-ms-win-ro-typeresolution-l1-1-0wintypes.dll
api-ms-win-rtcore-ntuser-clipboard-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-draw-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-powermanagement-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-private-l1-1-2user32.dll
api-ms-win-rtcore-ntuser-shell-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-synch-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-window-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-winevent-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-wmpointer-l1-1-1user32.dll
api-ms-win-rtcore-ole32-clipboard-l1-1-0ole32.dll
api-ms-win-security-accesshlpr-l1-1-0sechost.dll
api-ms-win-security-activedirectoryclient-l1-1-0kernelbase.dll
api-ms-win-security-appcontainer-l1-1-0kernelbase.dll
api-ms-win-security-audit-l1-1-1sechost.dll
api-ms-win-security-base-l1-1-1kernelbase.dll
api-ms-win-security-base-l1-2-0kernelbase.dll
api-ms-win-security-base-private-l1-1-1kernelbase.dll
api-ms-win-security-capability-l1-1-0sechost.dll
api-ms-win-security-credentials-l1-1-0sechost.dll
api-ms-win-security-credentials-l2-1-0sechost.dll
api-ms-win-security-cryptoapi-l1-1-0cryptsp.dll
api-ms-win-security-grouppolicy-l1-1-0kernelbase.dll
api-ms-win-security-logon-l1-1-0advapi32.dll
api-ms-win-security-lsalookup-l1-1-2sechost.dll
api-ms-win-security-lsalookup-l2-1-1advapi32.dll
api-ms-win-security-lsapolicy-l1-1-0sechost.dll
api-ms-win-security-provider-l1-1-0ntmarta.dll
api-ms-win-security-sddl-ansi-l1-1-0advapi32.dll
api-ms-win-security-sddl-l1-1-0sechost.dll
api-ms-win-security-sddlparsecond-l1-1-0sechost.dll
api-ms-win-security-systemfunctions-l1-1-0advapi32.dll
api-ms-win-security-trustee-l1-1-1advapi32.dll
api-ms-win-service-core-l1-1-1sechost.dll
api-ms-win-service-management-l1-1-0sechost.dll
api-ms-win-service-management-l2-1-0sechost.dll
api-ms-win-service-private-l1-1-1sechost.dll
api-ms-win-service-winsvc-l1-1-0sechost.dll
api-ms-win-service-winsvc-l1-2-0sechost.dll
api-ms-win-shcore-comhelpers-l1-1-0shcore.dll
api-ms-win-shcore-obsolete-l1-1-0shcore.dll
api-ms-win-shcore-registry-l1-1-1shcore.dll
api-ms-win-shcore-scaling-l1-1-2shcore.dll
api-ms-win-shcore-stream-l1-1-0shcore.dll
api-ms-win-shcore-stream-winrt-l1-1-0shcore.dll
api-ms-win-shcore-sysinfo-l1-1-0shcore.dll
api-ms-win-shcore-thread-l1-1-0shcore.dll
api-ms-win-shcore-unicodeansi-l1-1-0shcore.dll
api-ms-win-shell-shellcom-l1-1-0kernelbase.dll
api-ms-win-shell-shellfolders-l1-1-0kernelbase.dll
api-ms-win-shlwapi-ie-l1-1-0shlwapi.dll
api-ms-win-shlwapi-winrt-storage-l1-1-1shlwapi.dll
API-ext-ms-onecore-appmodel-veventdispatcher-l1-1-0veeventdispatcher.dll
API-ext-ms-win-advapi32-auth-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-encryptedfile-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-eventingcontroller-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-eventlog-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-hwprof-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-idletask-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-lsa-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-msi-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-ntmarta-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-psm-app-l1-1-0twinapi.appcore.dll
API-ext-ms-win-advapi32-registry-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-safer-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-shutdown-l1-1-0advapi32.dll
API-ext-ms-win-appcompat-apphelp-l1-1-0apphelp.dll
API-ext-ms-win-appmodel-opc-l1-1-0opcservices.dll
API-ext-ms-win-appmodel-state-ext-l1-2-0kernel.appcore.dll
API-ext-ms-win-appxdeploymentclient-appxdeploy-l1-1-0appxdeploymentclient.dll
API-ext-ms-win-authz-claimpolicies-l1-1-0authz.dll
API-ext-ms-win-authz-context-l1-1-0authz.dll
API-ext-ms-win-authz-remote-l1-1-0logoncli.dll
API-ext-ms-win-biometrics-winbio-core-l1-1-0winbio.dll
API-ext-ms-win-biometrics-winbio-l1-1-0winbio.dll
API-ext-ms-win-biometrics-winbio-l1-2-0winbioext.dll
API-ext-ms-win-bluetooth-apis-l1-1-0bluetoothapis.dll
API-ext-ms-win-bluetooth-apis-private-l1-1-0bluetoothapis.dll
API-ext-ms-win-branding-winbrand-l1-1-0winbrand.dll
API-ext-ms-win-cluster-clusapi-l1-1-2clusapi.dll
API-ext-ms-win-cluster-resutils-l1-1-1resutils.dll
API-ext-ms-win-cmd-util-l1-1-0cmdext.dll
API-ext-ms-win-cng-rng-l1-1-0bcryptprimitives.dll
API-ext-ms-win-com-clbcatq-l1-1-0clbcatq.dll
API-ext-ms-win-com-coml2-l1-1-1coml2.dll
API-ext-ms-win-com-ole32-l1-1-3ole32.dll
API-ext-ms-win-com-psmregister-l1-1-0kernel.appcore.dll
API-ext-ms-win-composition-ghost-l1-1-0dwmghost.dll
API-ext-ms-win-composition-init-l1-1-0dwminit.dll
API-ext-ms-win-compositor-hosting-l1-1-0user32.dll
API-ext-ms-win-core-psm-service-l1-1-1psmserviceexthost.dll
API-ext-ms-win-core-resourcemanager-l1-1-0rmclient.dll
API-ext-ms-win-devmgmt-dm-l1-1-0dmapisetextimpl.dll
API-ext-ms-win-domainjoin-netjoin-l1-1-0netjoin.dll
API-ext-ms-win-dwmapi-ext-l1-1-0dwmapi.dll
API-ext-ms-win-dx-d3d9-l1-1-0d3d9.dll
API-ext-ms-win-els-elscore-l1-1-0elscore.dll
API-ext-ms-win-familysafety-childaccount-l1-1-0familysafetyext.dll
API-ext-ms-win-feclient-encryptedfile-l1-1-0feclient.dll
API-ext-ms-win-firewallapi-webproxy-l1-1-1firewallapi.dll
API-ext-ms-win-fs-clfs-l1-1-0clfs.sys
API-ext-ms-win-fsutilext-ifsutil-l1-1-0fsutilext.dll
API-ext-ms-win-fsutilext-ulib-l1-1-0fsutilext.dll
API-ext-ms-win-fveapi-query-l1-1-0fveapi.dll
API-ext-ms-win-gdi-clipping-l1-1-0gdi32.dll
API-ext-ms-win-gdi-dc-create-l1-1-2gdi32.dll
API-ext-ms-win-gdi-dc-l1-2-1gdi32.dll
API-ext-ms-win-gdi-devcaps-l1-1-0gdi32.dll
API-ext-ms-win-gdi-draw-l1-1-2gdi32.dll
API-ext-ms-win-gdi-font-l1-1-2gdi32.dll
API-ext-ms-win-gdi-metafile-l1-1-2gdi32.dll
API-ext-ms-win-gdi-path-l1-1-0gdi32.dll
API-ext-ms-win-gdi-print-l1-1-0gdi32.dll
API-ext-ms-win-gdi-private-l1-1-0gdi32.dll
API-ext-ms-win-gdi-render-l1-1-0gdi32.dll
API-ext-ms-win-gdi-rgn-l1-1-0gdi32.dll
API-ext-ms-win-gdi-wcs-l1-1-0gdi32.dll
API-ext-ms-win-globalization-collation-l1-1-0globcollationhost.dll
API-ext-ms-win-globalization-input-l1-1-0globinputhost.dll
API-ext-ms-win-gpapi-grouppolicy-l1-1-0gpapi.dll
API-ext-ms-win-gpsvc-grouppolicy-l1-1-0gpsvc.dll
API-ext-ms-win-gui-dui70-l1-1-0dui70.dll
API-ext-ms-win-gui-ieui-l1-1-0ieui.dll
API-ext-ms-win-gui-uxinit-l1-1-0uxinit.dll
API-ext-ms-win-imm-l1-1-1imm32.dll
API-ext-ms-win-kernel32-appcompat-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-datetime-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-elevation-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-errorhandling-l1-1-0kernel32.dllfaultrep.dll
API-ext-ms-win-kernel32-file-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-localization-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-package-current-l1-1-0kernel.appcore.dll
API-ext-ms-win-kernel32-package-l1-1-2kernel.appcore.dll
API-ext-ms-win-kernel32-quirks-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-registry-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-sidebyside-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-transacted-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-windowserrorreporting-l1-1-1kernel32.dll
API-ext-ms-win-kernelbase-processthread-l1-1-0kernel32.dll
API-ext-ms-win-mm-msacm-l1-1-0msacm32.dll
API-ext-ms-win-mm-pehelper-l1-1-0mf.dll
API-ext-ms-win-mm-wmdrmsdk-l1-1-0wmdrmsdk.dll
API-ext-ms-win-moderncore-win32k-base-ntgdi-l1-1-0win32kfull.sys
API-ext-ms-win-moderncore-win32k-base-ntuser-l1-1-0win32kfull.sys
API-ext-ms-win-moderncore-win32k-base-sysentry-l1-1-0win32k.sys
API-ext-ms-win-mpr-multipleproviderrouter-l1-1-0mprext.dll
API-ext-ms-win-mrmcorer-resmanager-l1-1-0mrmcorer.dll
API-ext-ms-win-msa-ui-l1-1-0msauserext.dll
API-ext-ms-win-msa-user-l1-1-1msauserext.dll
API-ext-ms-win-msi-misc-l1-1-0msi.dll
API-ext-ms-win-msiltcfg-msi-l1-1-0msiltcfg.dll
API-ext-ms-win-msimg-draw-l1-1-0msimg32.dll
API-ext-ms-win-net-httpproxyext-l1-1-0httpprxc.dll
API-ext-ms-win-net-isoext-l1-1-0firewallapi.dll
API-ext-ms-win-netprovision-netprovfw-l1-1-0netprovfw.dll
API-ext-ms-win-networking-nlaapi-l1-1-0nlaapi.dll
API-ext-ms-win-networking-wcmapi-l1-1-0wcmapi.dll
API-ext-ms-win-networking-winipsec-l1-1-0winipsec.dll
API-ext-ms-win-networking-wlanapi-l1-1-0wlanapi.dll
API-ext-ms-win-newdev-config-l1-1-0newdev.dll
API-ext-ms-win-ntdsa-activedirectoryserver-l1-1-0ntdsa.dll
API-ext-ms-win-ntdsapi-activedirectoryclient-l1-1-0ntdsapi.dll
API-ext-ms-win-ntos-clipsp-l1-1-0clipsp.sys
API-ext-ms-win-ntos-kcminitcfg-l1-1-0cmimcext.sys
API-ext-ms-win-ntos-tm-l1-1-0tm.sys
API-ext-ms-win-ntos-ucode-l1-1-0ntosext.sys
API-ext-ms-win-ntos-werkernel-l1-1-0werkernel.sys
API-ext-ms-win-ntuser-caret-l1-1-0user32.dll
API-ext-ms-win-ntuser-chartranslation-l1-1-0user32.dll
API-ext-ms-win-ntuser-dc-access-ext-l1-1-0user32.dll
API-ext-ms-win-ntuser-dialogbox-l1-1-2user32.dll
API-ext-ms-win-ntuser-draw-l1-1-2user32.dll
API-ext-ms-win-ntuser-gui-l1-1-1user32.dll
API-ext-ms-win-ntuser-gui-l1-2-1user32.dll
API-ext-ms-win-ntuser-keyboard-l1-1-2user32.dll
API-ext-ms-win-ntuser-menu-l1-1-2user32.dll
API-ext-ms-win-ntuser-message-l1-1-2user32.dll
API-ext-ms-win-ntuser-misc-l1-1-0user32.dll
API-ext-ms-win-ntuser-misc-l1-2-0user32.dll
API-ext-ms-win-ntuser-misc-l1-3-1user32.dll
API-ext-ms-win-ntuser-mouse-l1-1-0user32.dll
API-ext-ms-win-ntuser-powermanagement-l1-1-0user32.dll
API-ext-ms-win-ntuser-private-l1-1-2user32.dll
API-ext-ms-win-ntuser-rectangle-ext-l1-1-0user32.dll
API-ext-ms-win-ntuser-rim-l1-1-0user32.dll
API-ext-ms-win-ntuser-rotationmanager-l1-1-1user32.dll
API-ext-ms-win-ntuser-server-l1-1-0user32.dll
API-ext-ms-win-ntuser-string-l1-1-0user32.dll
API-ext-ms-win-ntuser-synch-l1-1-0user32.dll
API-ext-ms-win-ntuser-sysparams-ext-l1-1-0user32.dll
API-ext-ms-win-ntuser-touch-hittest-l1-1-0user32.dll
API-ext-ms-win-ntuser-uicontext-ext-l1-1-0user32.dll
API-ext-ms-win-ntuser-window-l1-1-3user32.dll
API-ext-ms-win-ntuser-windowclass-l1-1-2user32.dll
API-ext-ms-win-ntuser-windowstation-l1-1-1user32.dll
API-ext-ms-win-ole32-bindctx-l1-1-0ole32.dll
API-ext-ms-win-ole32-ie-ext-l1-1-0ole32.dll
API-ext-ms-win-ole32-oleautomation-l1-1-0ole32.dll
API-ext-ms-win-oleacc-l1-1-1oleacc.dll
API-ext-ms-win-printer-prntvpt-l1-1-0prntvpt.dll
API-ext-ms-win-printer-winspool-l1-1-2winspool.drv
API-ext-ms-win-profile-extender-l1-1-0userenv.dll
API-ext-ms-win-profile-profsvc-l1-1-0profsvcext.dll
API-ext-ms-win-profile-userenv-l1-1-0profext.dll
API-ext-ms-win-provisioning-platform-l1-1-0provplatformdesktop.dll
API-ext-ms-win-ras-rasapi32-l1-1-1rasapi32.dll
API-ext-ms-win-ras-rasdlg-l1-1-0rasdlg.dll
API-ext-ms-win-ras-rasman-l1-1-0rasman.dll
API-ext-ms-win-ras-tapi32-l1-1-0tapi32.dll
API-ext-ms-win-raschapext-eap-l1-1-0raschapext.dll
API-ext-ms-win-rastlsext-eap-l1-1-0rastlsext.dll
API-ext-ms-win-reinfo-query-l1-1-0reinfo.dll
API-ext-ms-win-resources-mrmcloudextensions-l1-1-0mrmcloudext.dll
API-ext-ms-win-rometadata-dispenser-l1-1-0rometadata.dll
API-ext-ms-win-rpc-firewallportuse-l1-1-0rpcrtremote.dll
API-ext-ms-win-rpc-ssl-l1-1-0rpcrtremote.dll
API-ext-ms-win-rtcore-gdi-devcaps-l1-1-1gdi32.dll
API-ext-ms-win-rtcore-gdi-object-l1-1-0gdi32.dll
API-ext-ms-win-rtcore-gdi-rgn-l1-1-1gdi32.dll
API-ext-ms-win-rtcore-ntuser-dc-access-l1-1-1user32.dll
API-ext-ms-win-rtcore-ntuser-dpi-l1-1-0user32.dll
API-ext-ms-win-rtcore-ntuser-iam-l1-1-0user32.dll
API-ext-ms-win-rtcore-ntuser-synch-ext-l1-1-0user32.dll
API-ext-ms-win-rtcore-ntuser-syscolors-l1-1-0user32.dll
API-ext-ms-win-rtcore-ntuser-sysparams-l1-1-0user32.dll
API-ext-ms-win-rtcore-ntuser-window-ext-l1-1-0user32.dll
API-ext-ms-win-samsrv-accountstore-l1-1-0samsrv.dll
API-ext-ms-win-scesrv-server-l1-1-0scesrv.dll
API-ext-ms-win-secur32-translatename-l1-1-0secur32.dll
API-ext-ms-win-security-capauthz-l1-1-0capauthz.dll
API-ext-ms-win-security-credui-l1-1-1credui.dll
API-ext-ms-win-security-cryptui-l1-1-1cryptui.dll
API-ext-ms-win-security-efs-l1-1-0efsext.dll
API-ext-ms-win-security-kerberos-l1-1-0kerberos.dll
API-ext-ms-win-security-tokenbrokerui-l1-1-0tokenbrokerui.dll
API-ext-ms-win-security-vaultcli-l1-1-1vaultcli.dll
API-ext-ms-win-sensors-core-private-l1-1-0sensorsnativeapi.dll
API-ext-ms-win-sensors-utilities-private-l1-1-0sensorsutilsv2.dll
API-ext-ms-win-session-userinit-l1-1-0userinitext.dll
API-ext-ms-win-session-usermgr-l1-1-0usermgrcli.dll
API-ext-ms-win-session-usertoken-l1-1-0wtsapi32.dll
API-ext-ms-win-session-wininit-l1-1-0wininitext.dll
API-ext-ms-win-session-winlogon-l1-1-0winlogonext.dll
API-ext-ms-win-session-winsta-l1-1-0winsta.dll
API-ext-ms-win-session-wtsapi32-l1-1-0wtsapi32.dll
API-ext-ms-win-setupapi-classinstallers-l1-1-1setupapi.dll
API-ext-ms-win-setupapi-inf-l1-1-0setupapi.dll
API-ext-ms-win-setupapi-logging-l1-1-0setupapi.dll
API-ext-ms-win-shell-comctl32-init-l1-1-0comctl32.dll
API-ext-ms-win-shell-comctl32-l1-1-0comctl32.dll
API-ext-ms-win-shell-comdlg32-l1-1-0comdlg32.dll
API-ext-ms-win-shell-propsys-l1-1-0propsys.dll
API-ext-ms-win-shell-settingsync-l1-1-1settingsyncpolicy.dll
API-ext-ms-win-shell-shell32-l1-2-1shell32.dll
API-ext-ms-win-shell-shlwapi-l1-1-1shlwapi.dll
API-ext-ms-win-shell32-shellcom-l1-1-0shell32.dll
API-ext-ms-win-shell32-shellfolders-l1-1-1shell32.dll
API-ext-ms-win-smbshare-browser-l1-1-0browser.dll
API-ext-ms-win-smbshare-sscore-l1-1-0sscoreext.dll
API-ext-ms-win-spinf-inf-l1-1-0spinf.dll
API-ext-ms-win-srhinproc-entrypoint-l1-1-0srhinproc.dll
API-ext-ms-win-storage-iscsidsc-l1-1-0iscsidsc.dll
API-ext-ms-win-sxs-oleautomation-l1-1-0sxs.dll
API-ext-ms-win-tsf-msctf-l1-1-0msctf.dll
API-ext-ms-win-ttlsext-eap-l1-1-0ttlsext.dll
API-ext-ms-win-uiacore-l1-1-2uiautomationcore.dll
API-ext-ms-win-umpoext-umpo-l1-1-0umpoext.dll
API-ext-ms-win-usp10-l1-1-0gdi32.dll
API-ext-ms-win-uxtheme-themes-l1-1-1uxtheme.dll
API-ext-ms-win-webio-pal-l1-1-0webio.dll
API-ext-ms-win-wer-reporting-l1-1-0wer.dll
API-ext-ms-win-wer-ui-l1-1-0werui.dll
API-ext-ms-win-wer-wct-l1-1-0wer.dll
API-ext-ms-win-wevtapi-eventlog-l1-1-2wevtapi.dll
API-ext-ms-win-winbici-l1-1-0winbici.dll
API-ext-ms-win-winhttp-pal-l1-1-0winhttp.dll
API-ext-ms-win-winrt-storage-l1-1-0shell32.dll
API-ext-ms-win-wlan-grouppolicy-l1-1-0wlgpclnt.dll
API-ext-ms-win-wlan-onexui-l1-1-0onexui.dll
API-ext-ms-win-wlan-scard-l1-1-0winscard.dll
API-ext-ms-win-wsclient-devlicense-l1-1-1wsclient.dll
API-ext-ms-win-wwaext-misc-l1-1-0wwaext.dll
API-ext-ms-win-wwaext-module-l1-1-0wwaext.dll
API-ext-ms-win-wwan-wwapi-l1-1-1wwapi.dll
API-ext-ms-win-xaml-controls-l1-1-0windows.ui.xaml.phone.dll

apisetschema.dll from windows 10 build 9926 x64

$
0
0
only api-ms-win-core-ums-l1-1-0 was added


api-ms-win-appmodel-identity-l1-2-0kernel.appcore.dll
api-ms-win-appmodel-runtime-internal-l1-1-2kernel.appcore.dll
api-ms-win-appmodel-runtime-l1-1-1kernel.appcore.dll
api-ms-win-appmodel-state-l1-1-2kernel.appcore.dll
api-ms-win-appmodel-state-l1-2-0kernel.appcore.dll
api-ms-win-base-bootconfig-l1-1-0advapi32.dll
api-ms-win-base-util-l1-1-0advapi32.dll
api-ms-win-composition-redirection-l1-1-0dwmredir.dll
api-ms-win-composition-windowmanager-l1-1-0udwm.dll
api-ms-win-core-apiquery-l1-1-0ntdll.dll
api-ms-win-core-appcompat-l1-1-1kernelbase.dll
api-ms-win-core-appinit-l1-1-0kernel32.dllkernelbase.dll
api-ms-win-core-atoms-l1-1-0kernel32.dll
api-ms-win-core-bicltapi-l1-1-2bi.dll
api-ms-win-core-biplmapi-l1-1-2twinapi.appcore.dll
api-ms-win-core-biptcltapi-l1-1-3twinapi.appcore.dll
api-ms-win-core-calendar-l1-1-0kernel32.dll
api-ms-win-core-com-l1-1-1combase.dll
api-ms-win-core-com-l2-1-1coml2.dll
api-ms-win-core-com-midlproxystub-l1-1-0combase.dll
api-ms-win-core-com-private-l1-1-1combase.dll
api-ms-win-core-comm-l1-1-0kernelbase.dll
api-ms-win-core-console-l1-1-0kernelbase.dll
api-ms-win-core-console-l2-1-0kernelbase.dll
api-ms-win-core-crt-l1-1-0ntdll.dll
api-ms-win-core-crt-l2-1-0kernelbase.dll
api-ms-win-core-datetime-l1-1-1kernelbase.dll
api-ms-win-core-debug-l1-1-1kernelbase.dll
api-ms-win-core-delayload-l1-1-1kernelbase.dll
api-ms-win-core-errorhandling-l1-1-2kernelbase.dll
api-ms-win-core-fibers-l1-1-1kernelbase.dll
api-ms-win-core-fibers-l2-1-1kernelbase.dll
api-ms-win-core-file-l1-1-1kernelbase.dll
api-ms-win-core-file-l1-2-2kernelbase.dll
api-ms-win-core-file-l2-1-2kernelbase.dll
api-ms-win-core-firmware-l1-1-0kernel32.dll
api-ms-win-core-handle-l1-1-0kernelbase.dll
api-ms-win-core-heap-l1-1-0kernelbase.dll
api-ms-win-core-heap-l1-2-0kernelbase.dll
api-ms-win-core-heap-l2-1-0kernelbase.dll
api-ms-win-core-heap-obsolete-l1-1-0kernel32.dll
api-ms-win-core-interlocked-l1-1-1kernelbase.dll
api-ms-win-core-interlocked-l1-2-0kernelbase.dll
api-ms-win-core-io-l1-1-1kernel32.dllkernelbase.dll
api-ms-win-core-job-l1-1-0kernelbase.dll
api-ms-win-core-job-l2-1-0kernel32.dll
api-ms-win-core-kernel32-legacy-l1-1-2kernel32.dll
api-ms-win-core-kernel32-private-l1-1-2kernel32.dll
api-ms-win-core-libraryloader-l1-1-1kernelbase.dll
api-ms-win-core-libraryloader-l1-2-1kernelbase.dll
api-ms-win-core-libraryloader-l2-1-0kernelbase.dll
api-ms-win-core-libraryloader-private-l1-1-0kernelbase.dll
api-ms-win-core-localization-l1-1-0kernelbase.dll
api-ms-win-core-localization-l1-2-1kernelbase.dll
api-ms-win-core-localization-l2-1-0kernelbase.dll
api-ms-win-core-localization-obsolete-l1-1-0kernelbase.dll
api-ms-win-core-localization-obsolete-l1-2-0kernelbase.dll
api-ms-win-core-localization-private-l1-1-0kernelbase.dll
api-ms-win-core-localregistry-l1-1-0kernelbase.dll
api-ms-win-core-marshal-l1-1-0combase.dll
api-ms-win-core-memory-l1-1-3kernelbase.dll
api-ms-win-core-misc-l1-1-0kernelbase.dll
api-ms-win-core-multipleproviderrouter-l1-1-0mpr.dll
api-ms-win-core-namedpipe-l1-1-0kernelbase.dll
api-ms-win-core-namedpipe-l1-2-1kernelbase.dll
api-ms-win-core-namespace-l1-1-0kernelbase.dll
api-ms-win-core-normalization-l1-1-0kernelbase.dll
api-ms-win-core-path-l1-1-0kernelbase.dll
api-ms-win-core-perfcounters-l1-1-0kernelbase.dll
api-ms-win-core-privateprofile-l1-1-1kernel32.dll
api-ms-win-core-processenvironment-l1-1-1kernelbase.dll
api-ms-win-core-processenvironment-l1-2-0kernelbase.dll
api-ms-win-core-processsecurity-l1-1-0kernel32.dllkernelbase.dll
api-ms-win-core-processsnapshot-l1-1-0kernelbase.dll
api-ms-win-core-processthreads-l1-1-2kernel32.dllkernelbase.dll
api-ms-win-core-processtopology-l1-1-0kernelbase.dll
api-ms-win-core-processtopology-l1-2-0kernelbase.dll
api-ms-win-core-processtopology-obsolete-l1-1-0kernel32.dll
api-ms-win-core-processtopology-private-l1-1-0kernelbase.dll
api-ms-win-core-profile-l1-1-0kernelbase.dll
api-ms-win-core-psapi-ansi-l1-1-0kernelbase.dll
api-ms-win-core-psapi-l1-1-0kernelbase.dll
api-ms-win-core-psapi-obsolete-l1-1-0kernelbase.dll
api-ms-win-core-psapiansi-l1-1-0kernelbase.dll
api-ms-win-core-psm-app-l1-1-0twinapi.appcore.dll
api-ms-win-core-psm-appnotify-l1-1-0twinapi.appcore.dll
api-ms-win-core-psm-info-l1-1-0appsruprov.dll
api-ms-win-core-psm-key-l1-1-0kernelbase.dll
api-ms-win-core-psm-plm-l1-1-2twinapi.appcore.dll
api-ms-win-core-psm-tc-l1-1-1twinapi.appcore.dll
api-ms-win-core-quirks-l1-1-0kernelbase.dll
api-ms-win-core-realtime-l1-1-1kernelbase.dll
api-ms-win-core-registry-l1-1-1kernelbase.dll
api-ms-win-core-registry-l2-1-0advapi32.dll
api-ms-win-core-registry-l2-2-0advapi32.dll
api-ms-win-core-registry-private-l1-1-0advapi32.dll
api-ms-win-core-registryuserspecific-l1-1-0kernelbase.dll
api-ms-win-core-rtlsupport-l1-1-1ntdll.dll
api-ms-win-core-rtlsupport-l1-2-0ntdll.dll
api-ms-win-core-shlwapi-legacy-l1-1-0kernelbase.dll
api-ms-win-core-shlwapi-obsolete-l1-1-0kernelbase.dll
api-ms-win-core-shlwapi-obsolete-l1-2-0kernelbase.dll
api-ms-win-core-shutdown-l1-1-1advapi32.dll
api-ms-win-core-sidebyside-l1-1-0kernelbase.dll
api-ms-win-core-string-l1-1-0kernelbase.dll
api-ms-win-core-string-l2-1-1kernelbase.dll
api-ms-win-core-string-obsolete-l1-1-1kernel32.dll
api-ms-win-core-stringansi-l1-1-0kernelbase.dll
api-ms-win-core-stringloader-l1-1-1kernelbase.dll
api-ms-win-core-synch-l1-1-1kernelbase.dll
api-ms-win-core-synch-l1-2-1kernelbase.dll
api-ms-win-core-sysinfo-l1-1-1kernelbase.dll
api-ms-win-core-sysinfo-l1-2-3kernelbase.dll
api-ms-win-core-systemtopology-l1-1-0kernelbase.dll
api-ms-win-core-textinput-client-l1-1-0msctf.dll
api-ms-win-core-threadpool-l1-1-0kernelbase.dll
api-ms-win-core-threadpool-l1-2-0kernelbase.dll
api-ms-win-core-threadpool-legacy-l1-1-0kernelbase.dll
api-ms-win-core-threadpool-private-l1-1-0kernelbase.dll
api-ms-win-core-timezone-l1-1-0kernelbase.dll
api-ms-win-core-timezone-private-l1-1-0kernelbase.dll
api-ms-win-core-toolhelp-l1-1-0kernel32.dll
api-ms-win-core-ums-l1-1-0kernel32.dll
api-ms-win-core-url-l1-1-0kernelbase.dll
api-ms-win-core-util-l1-1-1kernel32.dllkernelbase.dll
api-ms-win-core-version-l1-1-0kernelbase.dll
api-ms-win-core-version-private-l1-1-0kernelbase.dll
api-ms-win-core-versionansi-l1-1-0kernelbase.dll
api-ms-win-core-windowserrorreporting-l1-1-0kernelbase.dll
api-ms-win-core-winrt-error-l1-1-1combase.dll
api-ms-win-core-winrt-errorprivate-l1-1-1combase.dll
api-ms-win-core-winrt-l1-1-0combase.dll
api-ms-win-core-winrt-propertysetprivate-l1-1-1wintypes.dll
api-ms-win-core-winrt-registration-l1-1-0combase.dll
api-ms-win-core-winrt-robuffer-l1-1-0wintypes.dll
api-ms-win-core-winrt-roparameterizediid-l1-1-0combase.dll
api-ms-win-core-winrt-string-l1-1-0combase.dll
api-ms-win-core-wow64-l1-1-1kernelbase.dll
api-ms-win-core-xstate-l1-1-1ntdll.dll
api-ms-win-core-xstate-l2-1-0kernelbase.dll
api-ms-win-crt-conio-l1-1-0ucrtbase.dll
api-ms-win-crt-convert-l1-1-0ucrtbase.dll
api-ms-win-crt-environment-l1-1-0ucrtbase.dll
api-ms-win-crt-filesystem-l1-1-0ucrtbase.dll
api-ms-win-crt-heap-l1-1-0ucrtbase.dll
api-ms-win-crt-locale-l1-1-0ucrtbase.dll
api-ms-win-crt-math-l1-1-0ucrtbase.dll
api-ms-win-crt-multibyte-l1-1-0ucrtbase.dll
api-ms-win-crt-private-l1-1-0ucrtbase.dll
api-ms-win-crt-process-l1-1-0ucrtbase.dll
api-ms-win-crt-runtime-l1-1-0ucrtbase.dll
api-ms-win-crt-stdio-l1-1-0ucrtbase.dll
api-ms-win-crt-string-l1-1-0ucrtbase.dll
api-ms-win-crt-time-l1-1-0ucrtbase.dll
api-ms-win-crt-utility-l1-1-0ucrtbase.dll
api-ms-win-deprecated-apis-obsolete-l1-1-0kernelbase.dll
api-ms-win-devices-config-l1-1-1cfgmgr32.dll
api-ms-win-devices-query-l1-1-1cfgmgr32.dll
api-ms-win-devices-swdevice-l1-1-1cfgmgr32.dll
api-ms-win-downlevel-advapi32-l1-1-1kernelbase.dll
api-ms-win-downlevel-advapi32-l2-1-1sechost.dll
api-ms-win-downlevel-advapi32-l3-1-0ntmarta.dll
api-ms-win-downlevel-advapi32-l4-1-0advapi32.dll
api-ms-win-downlevel-kernel32-l1-1-0kernelbase.dll
api-ms-win-downlevel-kernel32-l2-1-0kernel32.dll
api-ms-win-downlevel-normaliz-l1-1-0kernelbase.dll
api-ms-win-downlevel-ole32-l1-1-1combase.dll
api-ms-win-downlevel-shell32-l1-1-0shcore.dll
api-ms-win-downlevel-shlwapi-l1-1-1kernelbase.dll
api-ms-win-downlevel-shlwapi-l2-1-1shcore.dll
api-ms-win-downlevel-user32-l1-1-1kernelbase.dll
api-ms-win-downlevel-version-l1-1-0kernelbase.dll
api-ms-win-dwmapi-l1-1-0dwmapi.dll
api-ms-win-dx-d3dkmt-l1-1-1gdi32.dll
api-ms-win-eventing-classicprovider-l1-1-0kernelbase.dll
api-ms-win-eventing-consumer-l1-1-0sechost.dll
api-ms-win-eventing-controller-l1-1-0sechost.dll
api-ms-win-eventing-legacy-l1-1-0advapi32.dll
api-ms-win-eventing-obsolete-l1-1-0sechost.dll
api-ms-win-eventing-provider-l1-1-0kernelbase.dll
api-ms-win-eventlog-legacy-l1-1-0advapi32.dll
api-ms-win-eventlog-private-l1-1-0advapi32.dll
api-ms-win-gdi-dpiinfo-l1-1-0gdi32.dll
api-ms-win-http-time-l1-1-0kernelbase.dll
api-ms-win-legacy-shlwapi-l1-1-0kernelbase.dll
api-ms-win-mm-joystick-l1-1-0winmmbase.dll
api-ms-win-mm-mci-l1-1-0winmm.dll
api-ms-win-mm-misc-l1-1-1winmmbase.dll
api-ms-win-mm-misc-l2-1-0winmm.dll
api-ms-win-mm-mme-l1-1-0winmmbase.dll
api-ms-win-mm-playsound-l1-1-0winmm.dll
api-ms-win-mm-time-l1-1-0kernel32.dll
api-ms-win-net-isolation-l1-1-1firewallapi.dll
api-ms-win-networking-interfacecontexts-l1-1-0ondemandconnroutehelper.dll
api-ms-win-ntuser-ie-message-l1-1-0user32.dll
api-ms-win-ntuser-ie-window-l1-1-0user32.dll
api-ms-win-ntuser-ie-wmpointer-l1-1-0user32.dll
api-ms-win-ntuser-rectangle-l1-1-0user32.dll
api-ms-win-ntuser-sysparams-l1-1-0user32.dll
api-ms-win-obsolete-localization-l1-1-0kernelbase.dll
api-ms-win-obsolete-psapi-l1-1-0kernelbase.dll
api-ms-win-obsolete-shlwapi-l1-1-0kernelbase.dll
api-ms-win-ole32-ie-l1-1-0ole32.dll
api-ms-win-oobe-notification-l1-1-0kernel32.dll
api-ms-win-perf-legacy-l1-1-0advapi32.dll
api-ms-win-power-base-l1-1-0powrprof.dll
api-ms-win-power-setting-l1-1-0powrprof.dll
api-ms-win-ro-typeresolution-l1-1-0wintypes.dll
api-ms-win-rtcore-ntuser-clipboard-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-draw-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-powermanagement-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-private-l1-1-2user32.dll
api-ms-win-rtcore-ntuser-shell-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-synch-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-window-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-winevent-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-wmpointer-l1-1-1user32.dll
api-ms-win-rtcore-ole32-clipboard-l1-1-0ole32.dll
api-ms-win-security-accesshlpr-l1-1-0sechost.dll
api-ms-win-security-activedirectoryclient-l1-1-0kernelbase.dll
api-ms-win-security-appcontainer-l1-1-0kernelbase.dll
api-ms-win-security-audit-l1-1-1sechost.dll
api-ms-win-security-base-l1-1-1kernelbase.dll
api-ms-win-security-base-l1-2-0kernelbase.dll
api-ms-win-security-base-private-l1-1-1kernelbase.dll
api-ms-win-security-capability-l1-1-0sechost.dll
api-ms-win-security-credentials-l1-1-0sechost.dll
api-ms-win-security-credentials-l2-1-0sechost.dll
api-ms-win-security-cryptoapi-l1-1-0cryptsp.dll
api-ms-win-security-grouppolicy-l1-1-0kernelbase.dll
api-ms-win-security-logon-l1-1-0advapi32.dll
api-ms-win-security-lsalookup-l1-1-2sechost.dll
api-ms-win-security-lsalookup-l2-1-1advapi32.dll
api-ms-win-security-lsapolicy-l1-1-0sechost.dll
api-ms-win-security-provider-l1-1-0ntmarta.dll
api-ms-win-security-sddl-ansi-l1-1-0advapi32.dll
api-ms-win-security-sddl-l1-1-0sechost.dll
api-ms-win-security-sddlparsecond-l1-1-0sechost.dll
api-ms-win-security-systemfunctions-l1-1-0advapi32.dll
api-ms-win-security-trustee-l1-1-1advapi32.dll
api-ms-win-service-core-l1-1-1sechost.dll
api-ms-win-service-management-l1-1-0sechost.dll
api-ms-win-service-management-l2-1-0sechost.dll
api-ms-win-service-private-l1-1-1sechost.dll
api-ms-win-service-winsvc-l1-1-0sechost.dll
api-ms-win-service-winsvc-l1-2-0sechost.dll
api-ms-win-shcore-comhelpers-l1-1-0shcore.dll
api-ms-win-shcore-obsolete-l1-1-0shcore.dll
api-ms-win-shcore-registry-l1-1-1shcore.dll
api-ms-win-shcore-scaling-l1-1-2shcore.dll
api-ms-win-shcore-stream-l1-1-0shcore.dll
api-ms-win-shcore-stream-winrt-l1-1-0shcore.dll
api-ms-win-shcore-sysinfo-l1-1-0shcore.dll
api-ms-win-shcore-thread-l1-1-0shcore.dll
api-ms-win-shcore-unicodeansi-l1-1-0shcore.dll
api-ms-win-shell-shellcom-l1-1-0kernelbase.dll
api-ms-win-shell-shellfolders-l1-1-0kernelbase.dll
api-ms-win-shlwapi-ie-l1-1-0shlwapi.dll
api-ms-win-shlwapi-winrt-storage-l1-1-1shlwapi.dll
API-ext-ms-onecore-appmodel-veventdispatcher-l1-1-0veeventdispatcher.dll
API-ext-ms-win-advapi32-auth-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-encryptedfile-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-eventingcontroller-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-eventlog-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-hwprof-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-idletask-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-lsa-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-msi-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-ntmarta-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-psm-app-l1-1-0twinapi.appcore.dll
API-ext-ms-win-advapi32-registry-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-safer-l1-1-0advapi32.dll
API-ext-ms-win-advapi32-shutdown-l1-1-0advapi32.dll
API-ext-ms-win-appcompat-apphelp-l1-1-0apphelp.dll
API-ext-ms-win-appmodel-opc-l1-1-0opcservices.dll
API-ext-ms-win-appmodel-state-ext-l1-2-0kernel.appcore.dll
API-ext-ms-win-appxdeploymentclient-appxdeploy-l1-1-0appxdeploymentclient.dll
API-ext-ms-win-authz-claimpolicies-l1-1-0authz.dll
API-ext-ms-win-authz-context-l1-1-0authz.dll
API-ext-ms-win-authz-remote-l1-1-0logoncli.dll
API-ext-ms-win-biometrics-winbio-core-l1-1-0winbio.dll
API-ext-ms-win-biometrics-winbio-l1-1-0winbio.dll
API-ext-ms-win-biometrics-winbio-l1-2-0winbioext.dll
API-ext-ms-win-bluetooth-apis-l1-1-0bluetoothapis.dll
API-ext-ms-win-bluetooth-apis-private-l1-1-0bluetoothapis.dll
API-ext-ms-win-branding-winbrand-l1-1-0winbrand.dll
API-ext-ms-win-cluster-clusapi-l1-1-2clusapi.dll
API-ext-ms-win-cluster-resutils-l1-1-1resutils.dll
API-ext-ms-win-cmd-util-l1-1-0cmdext.dll
API-ext-ms-win-cng-rng-l1-1-0bcryptprimitives.dll
API-ext-ms-win-com-clbcatq-l1-1-0clbcatq.dll
API-ext-ms-win-com-coml2-l1-1-1coml2.dll
API-ext-ms-win-com-ole32-l1-1-3ole32.dll
API-ext-ms-win-com-psmregister-l1-1-0kernel.appcore.dll
API-ext-ms-win-composition-ghost-l1-1-0dwmghost.dll
API-ext-ms-win-composition-init-l1-1-0dwminit.dll
API-ext-ms-win-compositor-hosting-l1-1-0user32.dll
API-ext-ms-win-core-psm-service-l1-1-1psmserviceexthost.dll
API-ext-ms-win-core-resourcemanager-l1-1-0rmclient.dll
API-ext-ms-win-devmgmt-dm-l1-1-0dmapisetextimpl.dll
API-ext-ms-win-domainjoin-netjoin-l1-1-0netjoin.dll
API-ext-ms-win-dwmapi-ext-l1-1-0dwmapi.dll
API-ext-ms-win-dx-d3d9-l1-1-0d3d9.dll
API-ext-ms-win-els-elscore-l1-1-0elscore.dll
API-ext-ms-win-familysafety-childaccount-l1-1-0familysafetyext.dll
API-ext-ms-win-feclient-encryptedfile-l1-1-0feclient.dll
API-ext-ms-win-firewallapi-webproxy-l1-1-1firewallapi.dll
API-ext-ms-win-fs-clfs-l1-1-0clfs.sys
API-ext-ms-win-fsutilext-ifsutil-l1-1-0fsutilext.dll
API-ext-ms-win-fsutilext-ulib-l1-1-0fsutilext.dll
API-ext-ms-win-fveapi-query-l1-1-0fveapi.dll
API-ext-ms-win-gdi-clipping-l1-1-0gdi32.dll
API-ext-ms-win-gdi-dc-create-l1-1-2gdi32.dll
API-ext-ms-win-gdi-dc-l1-2-1gdi32.dll
API-ext-ms-win-gdi-devcaps-l1-1-0gdi32.dll
API-ext-ms-win-gdi-draw-l1-1-2gdi32.dll
API-ext-ms-win-gdi-font-l1-1-2gdi32.dll
API-ext-ms-win-gdi-metafile-l1-1-2gdi32.dll
API-ext-ms-win-gdi-path-l1-1-0gdi32.dll
API-ext-ms-win-gdi-print-l1-1-0gdi32.dll
API-ext-ms-win-gdi-private-l1-1-0gdi32.dll
API-ext-ms-win-gdi-render-l1-1-0gdi32.dll
API-ext-ms-win-gdi-rgn-l1-1-0gdi32.dll
API-ext-ms-win-gdi-wcs-l1-1-0gdi32.dll
API-ext-ms-win-globalization-collation-l1-1-0globcollationhost.dll
API-ext-ms-win-globalization-input-l1-1-0globinputhost.dll
API-ext-ms-win-gpapi-grouppolicy-l1-1-0gpapi.dll
API-ext-ms-win-gpsvc-grouppolicy-l1-1-0gpsvc.dll
API-ext-ms-win-gui-dui70-l1-1-0dui70.dll
API-ext-ms-win-gui-ieui-l1-1-0ieui.dll
API-ext-ms-win-gui-uxinit-l1-1-0uxinit.dll
API-ext-ms-win-imm-l1-1-1imm32.dll
API-ext-ms-win-kernel32-appcompat-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-datetime-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-elevation-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-errorhandling-l1-1-0kernel32.dllfaultrep.dll
API-ext-ms-win-kernel32-file-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-localization-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-package-current-l1-1-0kernel.appcore.dll
API-ext-ms-win-kernel32-package-l1-1-2kernel.appcore.dll
API-ext-ms-win-kernel32-quirks-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-registry-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-sidebyside-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-transacted-l1-1-0kernel32.dll
API-ext-ms-win-kernel32-windowserrorreporting-l1-1-1kernel32.dll
API-ext-ms-win-kernelbase-processthread-l1-1-0kernel32.dll
API-ext-ms-win-mm-msacm-l1-1-0msacm32.dll
API-ext-ms-win-mm-pehelper-l1-1-0mf.dll
API-ext-ms-win-mm-wmdrmsdk-l1-1-0wmdrmsdk.dll
API-ext-ms-win-moderncore-win32k-base-ntgdi-l1-1-0win32kfull.sys
API-ext-ms-win-moderncore-win32k-base-ntuser-l1-1-0win32kfull.sys
API-ext-ms-win-moderncore-win32k-base-sysentry-l1-1-0win32k.sys
API-ext-ms-win-mpr-multipleproviderrouter-l1-1-0mprext.dll
API-ext-ms-win-mrmcorer-resmanager-l1-1-0mrmcorer.dll
API-ext-ms-win-msa-ui-l1-1-0msauserext.dll
API-ext-ms-win-msa-user-l1-1-1msauserext.dll
API-ext-ms-win-msi-misc-l1-1-0msi.dll
API-ext-ms-win-msiltcfg-msi-l1-1-0msiltcfg.dll
API-ext-ms-win-msimg-draw-l1-1-0msimg32.dll
API-ext-ms-win-net-httpproxyext-l1-1-0httpprxc.dll
API-ext-ms-win-net-isoext-l1-1-0firewallapi.dll
API-ext-ms-win-netprovision-netprovfw-l1-1-0netprovfw.dll
API-ext-ms-win-networking-nlaapi-l1-1-0nlaapi.dll
API-ext-ms-win-networking-wcmapi-l1-1-0wcmapi.dll
API-ext-ms-win-networking-winipsec-l1-1-0winipsec.dll
API-ext-ms-win-networking-wlanapi-l1-1-0wlanapi.dll
API-ext-ms-win-newdev-config-l1-1-0newdev.dll
API-ext-ms-win-ntdsa-activedirectoryserver-l1-1-0ntdsa.dll
API-ext-ms-win-ntdsapi-activedirectoryclient-l1-1-0ntdsapi.dll
API-ext-ms-win-ntos-clipsp-l1-1-0clipsp.sys
API-ext-ms-win-ntos-kcminitcfg-l1-1-0cmimcext.sys
API-ext-ms-win-ntos-tm-l1-1-0tm.sys
API-ext-ms-win-ntos-ucode-l1-1-0ntosext.sys
API-ext-ms-win-ntos-werkernel-l1-1-0werkernel.sys
API-ext-ms-win-ntuser-caret-l1-1-0user32.dll
API-ext-ms-win-ntuser-chartranslation-l1-1-0user32.dll
API-ext-ms-win-ntuser-dc-access-ext-l1-1-0user32.dll
API-ext-ms-win-ntuser-dialogbox-l1-1-2user32.dll
API-ext-ms-win-ntuser-draw-l1-1-2user32.dll
API-ext-ms-win-ntuser-gui-l1-1-1user32.dll
API-ext-ms-win-ntuser-gui-l1-2-1user32.dll
API-ext-ms-win-ntuser-keyboard-l1-1-2user32.dll
API-ext-ms-win-ntuser-menu-l1-1-2user32.dll
API-ext-ms-win-ntuser-message-l1-1-2user32.dll
API-ext-ms-win-ntuser-misc-l1-1-0user32.dll
API-ext-ms-win-ntuser-misc-l1-2-0user32.dll
API-ext-ms-win-ntuser-misc-l1-3-1user32.dll
API-ext-ms-win-ntuser-mouse-l1-1-0user32.dll
API-ext-ms-win-ntuser-powermanagement-l1-1-0user32.dll
API-ext-ms-win-ntuser-private-l1-1-2user32.dll
API-ext-ms-win-ntuser-rectangle-ext-l1-1-0user32.dll
API-ext-ms-win-ntuser-rim-l1-1-0user32.dll
API-ext-ms-win-ntuser-rotationmanager-l1-1-1user32.dll
API-ext-ms-win-ntuser-server-l1-1-0user32.dll
API-ext-ms-win-ntuser-string-l1-1-0user32.dll
API-ext-ms-win-ntuser-synch-l1-1-0user32.dll
API-ext-ms-win-ntuser-sysparams-ext-l1-1-0user32.dll
API-ext-ms-win-ntuser-touch-hittest-l1-1-0user32.dll
API-ext-ms-win-ntuser-uicontext-ext-l1-1-0user32.dll
API-ext-ms-win-ntuser-window-l1-1-3user32.dll
API-ext-ms-win-ntuser-windowclass-l1-1-2user32.dll
API-ext-ms-win-ntuser-windowstation-l1-1-1user32.dll
API-ext-ms-win-ole32-bindctx-l1-1-0ole32.dll
API-ext-ms-win-ole32-ie-ext-l1-1-0ole32.dll
API-ext-ms-win-ole32-oleautomation-l1-1-0ole32.dll
API-ext-ms-win-oleacc-l1-1-1oleacc.dll
API-ext-ms-win-printer-prntvpt-l1-1-0prntvpt.dll
API-ext-ms-win-printer-winspool-l1-1-2winspool.drv
API-ext-ms-win-profile-extender-l1-1-0userenv.dll
API-ext-ms-win-profile-profsvc-l1-1-0profsvcext.dll
API-ext-ms-win-profile-userenv-l1-1-0profext.dll
API-ext-ms-win-provisioning-platform-l1-1-0provplatformdesktop.dll
API-ext-ms-win-ras-rasapi32-l1-1-1rasapi32.dll
API-ext-ms-win-ras-rasdlg-l1-1-0rasdlg.dll
API-ext-ms-win-ras-rasman-l1-1-0rasman.dll
API-ext-ms-win-ras-tapi32-l1-1-0tapi32.dll
API-ext-ms-win-raschapext-eap-l1-1-0raschapext.dll
API-ext-ms-win-rastlsext-eap-l1-1-0rastlsext.dll
API-ext-ms-win-reinfo-query-l1-1-0reinfo.dll
API-ext-ms-win-resources-mrmcloudextensions-l1-1-0mrmcloudext.dll
API-ext-ms-win-rometadata-dispenser-l1-1-0rometadata.dll
API-ext-ms-win-rpc-firewallportuse-l1-1-0rpcrtremote.dll
API-ext-ms-win-rpc-ssl-l1-1-0rpcrtremote.dll
API-ext-ms-win-rtcore-gdi-devcaps-l1-1-1gdi32.dll
API-ext-ms-win-rtcore-gdi-object-l1-1-0gdi32.dll
API-ext-ms-win-rtcore-gdi-rgn-l1-1-1gdi32.dll
API-ext-ms-win-rtcore-ntuser-dc-access-l1-1-1user32.dll
API-ext-ms-win-rtcore-ntuser-dpi-l1-1-0user32.dll
API-ext-ms-win-rtcore-ntuser-iam-l1-1-0user32.dll
API-ext-ms-win-rtcore-ntuser-synch-ext-l1-1-0user32.dll
API-ext-ms-win-rtcore-ntuser-syscolors-l1-1-0user32.dll
API-ext-ms-win-rtcore-ntuser-sysparams-l1-1-0user32.dll
API-ext-ms-win-rtcore-ntuser-window-ext-l1-1-0user32.dll
API-ext-ms-win-samsrv-accountstore-l1-1-0samsrv.dll
API-ext-ms-win-scesrv-server-l1-1-0scesrv.dll
API-ext-ms-win-secur32-translatename-l1-1-0secur32.dll
API-ext-ms-win-security-capauthz-l1-1-0capauthz.dll
API-ext-ms-win-security-credui-l1-1-1credui.dll
API-ext-ms-win-security-cryptui-l1-1-1cryptui.dll
API-ext-ms-win-security-efs-l1-1-0efsext.dll
API-ext-ms-win-security-kerberos-l1-1-0kerberos.dll
API-ext-ms-win-security-tokenbrokerui-l1-1-0tokenbrokerui.dll
API-ext-ms-win-security-vaultcli-l1-1-1vaultcli.dll
API-ext-ms-win-sensors-core-private-l1-1-0sensorsnativeapi.dll
API-ext-ms-win-sensors-utilities-private-l1-1-0sensorsutilsv2.dll
API-ext-ms-win-session-userinit-l1-1-0userinitext.dll
API-ext-ms-win-session-usermgr-l1-1-0usermgrcli.dll
API-ext-ms-win-session-usertoken-l1-1-0wtsapi32.dll
API-ext-ms-win-session-wininit-l1-1-0wininitext.dll
API-ext-ms-win-session-winlogon-l1-1-0winlogonext.dll
API-ext-ms-win-session-winsta-l1-1-0winsta.dll
API-ext-ms-win-session-wtsapi32-l1-1-0wtsapi32.dll
API-ext-ms-win-setupapi-classinstallers-l1-1-1setupapi.dll
API-ext-ms-win-setupapi-inf-l1-1-0setupapi.dll
API-ext-ms-win-setupapi-logging-l1-1-0setupapi.dll
API-ext-ms-win-shell-comctl32-init-l1-1-0comctl32.dll
API-ext-ms-win-shell-comctl32-l1-1-0comctl32.dll
API-ext-ms-win-shell-comdlg32-l1-1-0comdlg32.dll
API-ext-ms-win-shell-propsys-l1-1-0propsys.dll
API-ext-ms-win-shell-settingsync-l1-1-1settingsyncpolicy.dll
API-ext-ms-win-shell-shell32-l1-2-1shell32.dll
API-ext-ms-win-shell-shlwapi-l1-1-1shlwapi.dll
API-ext-ms-win-shell32-shellcom-l1-1-0shell32.dll
API-ext-ms-win-shell32-shellfolders-l1-1-1shell32.dll
API-ext-ms-win-smbshare-browser-l1-1-0browser.dll
API-ext-ms-win-smbshare-sscore-l1-1-0sscoreext.dll
API-ext-ms-win-spinf-inf-l1-1-0spinf.dll
API-ext-ms-win-srhinproc-entrypoint-l1-1-0srhinproc.dll
API-ext-ms-win-storage-iscsidsc-l1-1-0iscsidsc.dll
API-ext-ms-win-sxs-oleautomation-l1-1-0sxs.dll
API-ext-ms-win-tsf-msctf-l1-1-0msctf.dll
API-ext-ms-win-ttlsext-eap-l1-1-0ttlsext.dll
API-ext-ms-win-uiacore-l1-1-2uiautomationcore.dll
API-ext-ms-win-umpoext-umpo-l1-1-0umpoext.dll
API-ext-ms-win-usp10-l1-1-0gdi32.dll
API-ext-ms-win-uxtheme-themes-l1-1-1uxtheme.dll
API-ext-ms-win-webio-pal-l1-1-0webio.dll
API-ext-ms-win-wer-reporting-l1-1-0wer.dll
API-ext-ms-win-wer-ui-l1-1-0werui.dll
API-ext-ms-win-wer-wct-l1-1-0wer.dll
API-ext-ms-win-wevtapi-eventlog-l1-1-2wevtapi.dll
API-ext-ms-win-winbici-l1-1-0winbici.dll
API-ext-ms-win-winhttp-pal-l1-1-0winhttp.dll
API-ext-ms-win-winrt-storage-l1-1-0shell32.dll
API-ext-ms-win-wlan-grouppolicy-l1-1-0wlgpclnt.dll
API-ext-ms-win-wlan-onexui-l1-1-0onexui.dll
API-ext-ms-win-wlan-scard-l1-1-0winscard.dll
API-ext-ms-win-wsclient-devlicense-l1-1-1wsclient.dll
API-ext-ms-win-wwaext-misc-l1-1-0wwaext.dll
API-ext-ms-win-wwaext-module-l1-1-0wwaext.dll
API-ext-ms-win-wwan-wwapi-l1-1-1wwapi.dll
API-ext-ms-win-xaml-controls-l1-1-0windows.ui.xaml.phone.dll

windows 10 build 9926 KPRCB

$
0
0
For collection


nt!_KPRCB
   +0x000 MinorVersion     : Uint2B
   +0x002 MajorVersion     : Uint2B
   +0x004 CurrentThread    : Ptr32 _KTHREAD
   +0x008 NextThread       : Ptr32 _KTHREAD
   +0x00c IdleThread       : Ptr32 _KTHREAD
   +0x010 LegacyNumber     : UChar
   +0x011 NestingLevel     : UChar
   +0x012 BuildType        : Uint2B
   +0x014 CpuType          : Char
   +0x015 CpuID            : Char
   +0x016 CpuStep          : Uint2B
   +0x016 CpuStepping      : UChar
   +0x017 CpuModel         : UChar
   +0x018 ProcessorState   : _KPROCESSOR_STATE
   +0x338 ParentNode       : Ptr32 _KNODE
   +0x33c PriorityState    : Ptr32 Char
   +0x340 KernelReserved   : [14] Uint4B
   +0x378 HalReserved      : [16] Uint4B
   +0x3b8 CFlushSize       : Uint4B
   +0x3bc CoresPerPhysicalProcessor : UChar
   +0x3bd LogicalProcessorsPerCore : UChar
   +0x3be CpuVendor        : UChar
   +0x3bf PrcbPad0         : [1] UChar
   +0x3c0 MHz              : Uint4B
   +0x3c4 GroupIndex       : UChar
   +0x3c5 Group            : UChar
   +0x3c6 PrcbPad05        : [2] UChar
   +0x3c8 GroupSetMember   : Uint4B
   +0x3cc Number           : Uint4B
   +0x3d0 ClockOwner       : UChar
   +0x3d1 PendingTickFlags : UChar
   +0x3d1 PendingTick      : Pos 0, 1 Bit
   +0x3d1 PendingBackupTick : Pos 1, 1 Bit
   +0x3d2 PrcbPad10        : [70] UChar
   +0x418 LockQueue        : [17] _KSPIN_LOCK_QUEUE
   +0x4a0 InterruptCount   : Uint4B
   +0x4a4 KernelTime       : Uint4B
   +0x4a8 UserTime         : Uint4B
   +0x4ac DpcTime          : Uint4B
   +0x4b0 DpcTimeCount     : Uint4B
   +0x4b4 InterruptTime    : Uint4B
   +0x4b8 AdjustDpcThreshold : Uint4B
   +0x4bc PageColor        : Uint4B
   +0x4c0 DebuggerSavedIRQL : UChar
   +0x4c1 NodeColor        : UChar
   +0x4c2 DeepSleep        : UChar
   +0x4c3 PrcbPad20        : [5] UChar
   +0x4c8 NodeShiftedColor : Uint4B
   +0x4cc SecondaryColorMask : Uint4B
   +0x4d0 DpcTimeLimit     : Uint4B
   +0x4d4 DeviceInterruptCount : Uint4B
   +0x4d8 PrcbPad21        : [2] Uint4B
   +0x4e0 CcFastReadNoWait : Uint4B
   +0x4e4 CcFastReadWait   : Uint4B
   +0x4e8 CcFastReadNotPossible : Uint4B
   +0x4ec CcCopyReadNoWait : Uint4B
   +0x4f0 CcCopyReadWait   : Uint4B
   +0x4f4 CcCopyReadNoWaitMiss : Uint4B
   +0x4f8 MmSpinLockOrdering : Int4B
   +0x4fc IoReadOperationCount : Int4B
   +0x500 IoWriteOperationCount : Int4B
   +0x504 IoOtherOperationCount : Int4B
   +0x508 IoReadTransferCount : _LARGE_INTEGER
   +0x510 IoWriteTransferCount : _LARGE_INTEGER
   +0x518 IoOtherTransferCount : _LARGE_INTEGER
   +0x520 CcFastMdlReadNoWait : Uint4B
   +0x524 CcFastMdlReadWait : Uint4B
   +0x528 CcFastMdlReadNotPossible : Uint4B
   +0x52c CcMapDataNoWait  : Uint4B
   +0x530 CcMapDataWait    : Uint4B
   +0x534 CcPinMappedDataCount : Uint4B
   +0x538 CcPinReadNoWait  : Uint4B
   +0x53c CcPinReadWait    : Uint4B
   +0x540 CcMdlReadNoWait  : Uint4B
   +0x544 CcMdlReadWait    : Uint4B
   +0x548 CcLazyWriteHotSpots : Uint4B
   +0x54c CcLazyWriteIos   : Uint4B
   +0x550 CcLazyWritePages : Uint4B
   +0x554 CcDataFlushes    : Uint4B
   +0x558 CcDataPages      : Uint4B
   +0x55c CcLostDelayedWrites : Uint4B
   +0x560 CcFastReadResourceMiss : Uint4B
   +0x564 CcCopyReadWaitMiss : Uint4B
   +0x568 CcFastMdlReadResourceMiss : Uint4B
   +0x56c CcMapDataNoWaitMiss : Uint4B
   +0x570 CcMapDataWaitMiss : Uint4B
   +0x574 CcPinReadNoWaitMiss : Uint4B
   +0x578 CcPinReadWaitMiss : Uint4B
   +0x57c CcMdlReadNoWaitMiss : Uint4B
   +0x580 CcMdlReadWaitMiss : Uint4B
   +0x584 CcReadAheadIos   : Uint4B
   +0x588 KeAlignmentFixupCount : Uint4B
   +0x58c KeExceptionDispatchCount : Uint4B
   +0x590 KeSystemCalls    : Uint4B
   +0x594 AvailableTime    : Uint4B
   +0x598 PrcbPad22        : [2] Uint4B
   +0x5a0 PPLookasideList  : [16] _PP_LOOKASIDE_LIST
   +0x620 PPNxPagedLookasideList : [32] _GENERAL_LOOKASIDE_POOL
   +0xf20 PPNPagedLookasideList : [32] _GENERAL_LOOKASIDE_POOL
   +0x1820 PPPagedLookasideList : [32] _GENERAL_LOOKASIDE_POOL
   +0x2120 PacketBarrier    : Int4B
   +0x2124 ReverseStall     : Int4B
   +0x2128 IpiFrame         : Ptr32 Void
   +0x212c PrcbPad3         : [52] UChar
   +0x2160 CurrentPacket    : [3] Ptr32 Void
   +0x216c TargetSet        : Uint4B
   +0x2170 WorkerRoutine    : Ptr32     void
   +0x2174 IpiFrozen        : Uint4B
   +0x2178 PrcbPad4         : [40] UChar
   +0x21a0 RequestSummary   : Uint4B
   +0x21a4 TargetCount      : Int4B
   +0x21a8 PrcbPad50        : [40] UChar
   +0x21d0 InterruptLastCount : Uint4B
   +0x21d4 InterruptRate    : Uint4B
   +0x21d8 DeviceInterrupts : Uint4B
   +0x21dc IsrDpcStats      : Ptr32 Void
   +0x21e0 DpcData          : [2] _KDPC_DATA
   +0x2210 DpcStack         : Ptr32 Void
   +0x2214 MaximumDpcQueueDepth : Int4B
   +0x2218 DpcRequestRate   : Uint4B
   +0x221c MinimumDpcRate   : Uint4B
   +0x2220 DpcLastCount     : Uint4B
   +0x2224 PrcbLock         : Uint4B
   +0x2228 DpcGate          : _KGATE
   +0x2238 IdleState        : UChar
   +0x2239 QuantumEnd       : UChar
   +0x223a DpcRoutineActive : UChar
   +0x223b IdleSchedule     : UChar
   +0x223c DpcRequestSummary : Int4B
   +0x223c DpcRequestSlot   : [2] Int2B
   +0x223c NormalDpcState   : Int2B
   +0x223e ThreadDpcState   : Int2B
   +0x223c DpcNormalProcessingActive : Pos 0, 1 Bit
   +0x223c DpcNormalProcessingRequested : Pos 1, 1 Bit
   +0x223c DpcNormalThreadSignal : Pos 2, 1 Bit
   +0x223c DpcNormalTimerExpiration : Pos 3, 1 Bit
   +0x223c DpcNormalDpcPresent : Pos 4, 1 Bit
   +0x223c DpcNormalLocalInterrupt : Pos 5, 1 Bit
   +0x223c DpcNormalSpare   : Pos 6, 10 Bits
   +0x223c DpcThreadActive  : Pos 16, 1 Bit
   +0x223c DpcThreadRequested : Pos 17, 1 Bit
   +0x223c DpcThreadSpare   : Pos 18, 14 Bits
   +0x2240 LastTimerHand    : Uint4B
   +0x2244 LastTick         : Uint4B
   +0x2248 PeriodicCount    : Uint4B
   +0x224c PeriodicBias     : Uint4B
   +0x2250 ClockInterrupts  : Uint4B
   +0x2254 ReadyScanTick    : Uint4B
   +0x2258 GroupSchedulingOverQuota : UChar
   +0x2259 ThreadDpcEnable  : UChar
   +0x225a PrcbPad41        : [2] UChar
   +0x2260 TimerTable       : _KTIMER_TABLE
   +0x3aa0 CallDpc          : _KDPC
   +0x3ac0 ClockKeepAlive   : Int4B
   +0x3ac4 PrcbPad6         : [4] UChar
   +0x3ac8 DpcWatchdogPeriod : Int4B
   +0x3acc DpcWatchdogCount : Int4B
   +0x3ad0 KeSpinLockOrdering : Int4B
   +0x3ad4 PrcbPad70        : [1] Uint4B
   +0x3ad8 QueueIndex       : Uint4B
   +0x3adc DeferredReadyListHead : _SINGLE_LIST_ENTRY
   +0x3ae0 ReadySummary     : Uint4B
   +0x3ae4 AffinitizedSelectionMask : Int4B
   +0x3ae8 WaitLock         : Uint4B
   +0x3aec WaitListHead     : _LIST_ENTRY
   +0x3af4 ScbOffset        : Uint4B
   +0x3af8 StartCycles      : Uint8B
   +0x3b00 TaggedCyclesStart : Uint8B
   +0x3b08 TaggedCycles     : [2] Uint8B
   +0x3b18 GenerationTarget : Uint8B
   +0x3b20 CycleTime        : Uint8B
   +0x3b28 AffinitizedCycles : Uint8B
   +0x3b30 HighCycleTime    : Uint4B
   +0x3b38 Cycles           : [4] [2] Uint8B
   +0x3b78 PrcbPad71        : [10] Uint4B
   +0x3ba0 DispatcherReadyListHead : [32] _LIST_ENTRY
   +0x3ca0 ChainedInterruptList : Ptr32 Void
   +0x3ca4 LookasideIrpFloat : Int4B
   +0x3ca8 ScbQueue         : _RTL_RB_TREE
   +0x3cb0 ScbList          : _LIST_ENTRY
   +0x3cb8 MmPageFaultCount : Int4B
   +0x3cbc MmCopyOnWriteCount : Int4B
   +0x3cc0 MmTransitionCount : Int4B
   +0x3cc4 MmCacheTransitionCount : Int4B
   +0x3cc8 MmDemandZeroCount : Int4B
   +0x3ccc MmPageReadCount  : Int4B
   +0x3cd0 MmPageReadIoCount : Int4B
   +0x3cd4 MmCacheReadCount : Int4B
   +0x3cd8 MmCacheIoCount   : Int4B
   +0x3cdc MmDirtyPagesWriteCount : Int4B
   +0x3ce0 MmDirtyWriteIoCount : Int4B
   +0x3ce4 MmMappedPagesWriteCount : Int4B
   +0x3ce8 MmMappedWriteIoCount : Int4B
   +0x3cec CachedCommit     : Uint4B
   +0x3cf0 CachedResidentAvailable : Uint4B
   +0x3cf4 HyperPte         : Ptr32 Void
   +0x3cf8 PrcbPad8         : [4] UChar
   +0x3cfc VendorString     : [13] UChar
   +0x3d09 InitialApicId    : UChar
   +0x3d0a LogicalProcessorsPerPhysicalProcessor : UChar
   +0x3d0b PrcbPad9         : [1] UChar
   +0x3d10 FeatureBits      : Uint8B
   +0x3d18 UpdateSignature  : _LARGE_INTEGER
   +0x3d20 IsrTime          : Uint8B
   +0x3d28 PrcbPad90        : [2] Uint4B
   +0x3d30 PowerState       : _PROCESSOR_POWER_STATE
   +0x3e98 PrcbPad91        : [23] Uint4B
   +0x3ef4 DpcWatchdogDpc   : _KDPC
   +0x3f18 DpcWatchdogTimer : _KTIMER
   +0x3f40 HypercallPageList : _SLIST_HEADER
   +0x3f48 HypercallCachedPages : Ptr32 Void
   +0x3f4c VirtualApicAssist : Ptr32 Void
   +0x3f50 StatisticsPage   : Ptr32 Uint8B
   +0x3f54 Cache            : [5] _CACHE_DESCRIPTOR
   +0x3f90 CacheCount       : Uint4B
   +0x3f94 PackageProcessorSet : _KAFFINITY_EX
   +0x3fa0 SharedReadyQueueMask : Uint4B
   +0x3fa4 SharedReadyQueue : Ptr32 _KSHARED_READY_QUEUE
   +0x3fa8 CoreProcessorSet : Uint4B
   +0x3fac ScanSiblingMask  : Uint4B
   +0x3fb0 LLCMask          : Uint4B
   +0x3fb4 CacheProcessorMask : [5] Uint4B
   +0x3fc8 ScanSiblingIndex : Uint4B
   +0x3fcc WheaInfo         : Ptr32 Void
   +0x3fd0 EtwSupport       : Ptr32 Void
   +0x3fd8 InterruptObjectPool : _SLIST_HEADER
   +0x3fe0 PrcbPad92        : [3] Uint4B
   +0x3fec PteBitCache      : Uint4B
   +0x3ff0 PteBitOffset     : Uint4B
   +0x3ff4 PrcbPad93        : Uint4B
   +0x3ff8 ProcessorProfileControlArea : Ptr32 _PROCESSOR_PROFILE_CONTROL_AREA
   +0x3ffc ProfileEventIndexAddress : Ptr32 Void
   +0x4000 TimerExpirationDpc : _KDPC
   +0x4020 SynchCounters    : _SYNCH_COUNTERS
   +0x40d8 FsCounters       : _FILESYSTEM_DISK_COUNTERS
   +0x40e8 Context          : Ptr32 _CONTEXT
   +0x40ec ContextFlagsInit : Uint4B
   +0x40f0 ExtendedState    : Ptr32 _XSAVE_AREA
   +0x40f4 EntropyTimingState : _KENTROPY_TIMING_STATE
   +0x421c IsrStack         : Ptr32 Void
   +0x4220 VectorToInterruptObject : [208] Ptr32 _KINTERRUPT
   +0x4560 AbSelfIoBoostsList : _SINGLE_LIST_ENTRY
   +0x4564 AbPropagateBoostsList : _SINGLE_LIST_ENTRY
   +0x4568 AbDpc            : _KDPC
   +0x4588 IoIrpStackProfilerCurrent : _IOP_IRP_STACK_PROFILER
   +0x45dc IoIrpStackProfilerPrevious : _IOP_IRP_STACK_PROFILER
   +0x4630 TimerExpirationTrace : [16] _KTIMER_EXPIRATION_TRACE
   +0x4730 TimerExpirationTraceCount : Uint4B
   +0x4734 ExSaPageArray    : Ptr32 Void
   +0x4738 PrcbPad100       : [10] Uint4B
   +0x4760 LocalSharedReadyQueue : _KSHARED_READY_QUEUE
   +0x489c PrcbPad95        : [4] UChar
   +0x48a0 Mailbox          : Ptr32 _REQUEST_MAILBOX
   +0x48a4 PrcbPad          : [60] UChar
   +0x48e0 RequestMailbox   : [1] _REQUEST_MAILBOX

KiServiceTable from windows 10 build 9926

$
0
0
KiServiceLimit .eq. 1b4

NtAccessCheck
NtWorkerFactoryWorkerReady
NtAcceptConnectPort
NtYieldExecution
NtWriteVirtualMemory
NtWriteRequestData
NtWriteFileGather
NtWriteFile
NtWaitLowEventPair
NtWaitHighEventPair
NtWaitForWorkViaWorkerFactory
NtWaitForSingleObject
NtWaitForMultipleObjects32
NtWaitForMultipleObjects
NtWaitForKeyedEvent
NtWaitForDebugEvent
NtWaitForAlertByThreadId
NtVdmControl
NtUnsubscribeWnfStateChange
NtUpdateWnfStateData
NtUnmapViewOfSection
NtUnmapViewOfSectionEx
NtUnlockVirtualMemory
NtUnlockFile
NtUnloadKeyEx
NtUnloadKey2
NtUnloadKey
NtUnloadDriver
NtUmsThreadYield
NtTranslateFilePath
NtTraceEvent
NtTraceControl
NtThawTransactions
NtThawRegistry
NtTestAlert
NtTerminateThread
NtTerminateProcess
NtTerminateJobObject
NtSystemDebugControl
NtSuspendThread
NtSuspendProcess
NtSubscribeWnfStateChange
NtStopProfile
NtStartProfile
NtSinglePhaseReject
NtSignalAndWaitForSingleObject
NtShutdownWorkerFactory
NtShutdownSystem
NtSetWnfProcessNotificationEvent
NtSetVolumeInformationFile
NtSetValueKey
NtSetUuidSeed
NtSetTimerResolution
NtSetTimerEx
NtSetTimer
NtSetThreadExecutionState
NtSetSystemTime
NtSetSystemPowerState
NtSetSystemInformation
NtSetSystemEnvironmentValueEx
NtSetSystemEnvironmentValue
NtSetSecurityObject
NtSetQuotaInformationFile
NtSetLowWaitHighEventPair
NtSetLowEventPair
NtSetLdtEntries
NtSetIRTimer
NtSetTimer2
NtCancelTimer2
NtSetIoCompletionEx
NtSetIoCompletion
NtSetIntervalProfile
NtSetInformationWorkerFactory
NtSetInformationTransactionManager
NtSetInformationTransaction
NtSetInformationToken
NtSetInformationThread
NtSetInformationResourceManager
NtSetInformationProcess
NtSetInformationObject
NtSetInformationKey
NtSetInformationJobObject
NtSetInformationFile
NtSetInformationEnlistment
NtSetInformationDebugObject
NtSetHighWaitLowEventPair
NtSetHighEventPair
NtSetEventBoostPriority
NtSetEvent
NtSetEaFile
NtSetDriverEntryOrder
NtSetDefaultUILanguage
NtSetDefaultLocale
NtSetDefaultHardErrorPort
NtSetDebugFilterState
NtSetContextThread
NtSetCachedSigningLevel
NtSetBootOptions
NtSetBootEntryOrder
NtSerializeBoot
NtSecureConnectPort
NtSaveMergedKeys
NtSaveKeyEx
NtSaveKey
NtRollforwardTransactionManager
NtRollbackTransaction
NtRollbackEnlistment
NtRollbackComplete
NtRevertContainerImpersonation
NtResumeThread
NtResumeProcess
NtRestoreKey
NtResetWriteWatch
NtResetEvent
NtRequestWaitReplyPort
NtRequestPort
NtReplyWaitReplyPort
NtReplyWaitReceivePortEx
NtReplyWaitReceivePort
NtReplyPort
NtReplacePartitionUnit
NtReplaceKey
NtRenameTransactionManager
NtRenameKey
NtRemoveProcessDebug
NtRemoveIoCompletionEx
NtRemoveIoCompletion
NtReleaseWorkerFactoryWorker
NtReleaseSemaphore
NtReleaseMutant
NtReleaseKeyedEvent
NtRegisterThreadTerminatePort
NtRegisterProtocolAddressInformation
NtRecoverTransactionManager
NtRecoverResourceManager
NtRecoverEnlistment
NtReadVirtualMemory
NtReadRequestData
NtReadOnlyEnlistment
NtReadFileScatter
NtReadFile
NtRaiseHardError
NtRaiseException
NtQueueApcThreadEx
NtQueueApcThread
NtQueryWnfStateData
NtQueryWnfStateNameInformation
NtQueryVolumeInformationFile
NtQueryVirtualMemory
NtQueryValueKey
NtQueryTimerResolution
NtQueryTimer
NtQuerySystemTime
NtQuerySystemInformationEx
NtQuerySystemInformation
NtQuerySystemEnvironmentValueEx
NtQuerySystemEnvironmentValue
NtQuerySymbolicLinkObject
NtQuerySemaphore
NtQuerySecurityObject
NtQuerySecurityAttributesToken
NtQuerySection
NtQueryQuotaInformationFile
NtQueryPortInformationProcess
NtQueryPerformanceCounter
NtQueryOpenSubKeysEx
NtQueryOpenSubKeys
NtQueryObject
NtQueryMutant
NtQueryMultipleValueKey
NtQueryLicenseValue
NtQueryKey
NtQueryIoCompletion
NtQueryIntervalProfile
NtQueryInstallUILanguage
NtQueryInformationWorkerFactory
NtQueryInformationTransactionManager
NtQueryInformationTransaction
NtQueryInformationToken
NtQueryInformationThread
NtQueryInformationResourceManager
NtQueryInformationProcess
NtQueryInformationPort
NtQueryInformationJobObject
NtQueryInformationFile
NtQueryInformationEnlistment
NtQueryInformationAtom
NtQueryFullAttributesFile
NtQueryEvent
NtQueryEaFile
NtQueryDriverEntryOrder
NtQueryDirectoryObject
NtQueryDirectoryFile
NtQueryDefaultUILanguage
NtQueryDefaultLocale
NtQueryDebugFilterState
NtQueryBootOptions
NtQueryBootEntryOrder
NtQueryAttributesFile
NtPulseEvent
NtProtectVirtualMemory
NtPropagationFailed
NtPropagationComplete
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtPrivilegeCheck
NtSetInformationVirtualMemory
NtPrePrepareEnlistment
NtPrePrepareComplete
NtPrepareEnlistment
NtPrepareComplete
NtPowerInformation
NtPlugPlayControl
NtOpenTransactionManager
NtOpenTransaction
NtOpenTimer
NtOpenThreadTokenEx
NtOpenThreadToken
NtOpenThread
NtOpenSymbolicLinkObject
NtOpenSession
NtOpenSemaphore
NtOpenSection
NtOpenResourceManager
NtOpenProcessTokenEx
NtOpenProcessToken
NtOpenProcess
NtOpenPrivateNamespace
NtOpenObjectAuditAlarm
NtOpenMutant
NtOpenKeyTransactedEx
NtOpenKeyTransacted
NtOpenKeyEx
NtOpenKeyedEvent
NtOpenKey
NtOpenJobObject
NtOpenIoCompletion
NtOpenFile
NtOpenEventPair
NtOpenEvent
NtOpenEnlistment
NtOpenDirectoryObject
NtNotifyChangeSession
NtNotifyChangeMultipleKeys
NtNotifyChangeKey
NtNotifyChangeDirectoryFile
NtModifyDriverEntry
NtModifyBootEntry
NtMapViewOfSection
NtMapUserPhysicalPagesScatter
NtMapUserPhysicalPages
NtMapCMFModule
NtMakeTemporaryObject
NtMakePermanentObject
NtLockVirtualMemory
NtLockRegistryKey
NtLockProductActivationKeys
NtLockFile
NtLoadKeyEx
NtLoadKey2
NtLoadKey
NtLoadDriver
NtListenPort
NtIsUILanguageComitted
NtIsSystemResumeAutomatic
NtIsProcessInJob
NtInitiatePowerAction
NtInitializeRegistry
NtInitializeNlsFiles
NtImpersonateThread
NtImpersonateClientOfPort
NtImpersonateAnonymousToken
NtGetWriteWatch
NtGetNotificationResourceManager
NtGetNlsSectionPtr
NtGetNextThread
NtGetNextProcess
NtGetMUIRegistryInfo
NtGetDevicePowerState
NtGetCurrentProcessorNumber
NtGetContextThread
NtGetCompleteWnfStateSubscription
NtGetCachedSigningLevel
NtFsControlFile
NtFreezeTransactions
NtFreezeRegistry
NtFreeVirtualMemory
NtFreeUserPhysicalPages
NtFlushWriteBuffer
NtFlushVirtualMemory
NtFlushProcessWriteBuffers
NtFlushKey
NtFlushInstructionCache
NtFlushInstallUILanguage
NtFlushBuffersFile
NtFlushBuffersFileEx
NtFindAtom
NtFilterToken
NtFilterTokenEx
NtFilterBootOption
NtExtendSection
NtEnumerateValueKey
NtEnumerateTransactionObject
NtEnumerateSystemEnvironmentValuesEx
NtEnumerateKey
NtEnumerateDriverEntries
NtEnumerateBootEntries
NtEnableLastKnownGood
NtDuplicateToken
NtDuplicateObject
NtDrawText
NtDisplayString
NtDisableLastKnownGood
NtDeviceIoControlFile
NtDeleteWnfStateName
NtDeleteWnfStateData
NtDeleteValueKey
NtDeletePrivateNamespace
NtDeleteObjectAuditAlarm
NtDeleteKey
NtDeleteFile
NtDeleteDriverEntry
NtDeleteBootEntry
NtDeleteAtom
NtDelayExecution
NtDebugContinue
NtDebugActiveProcess
NtCreateWorkerFactory
NtCreateWnfStateName
NtCreateWaitCompletionPacket
NtCreateWaitablePort
NtCreateUserProcess
NtCreateTransactionManager
NtCreateTransaction
NtCreateToken
NtCreateLowBoxToken
NtCreateTokenEx
NtCreateTimer
NtCreateThreadEx
NtCreateThread
NtCreateSymbolicLinkObject
NtCreateSemaphore
NtCreateSection
NtCreateResourceManager
NtCreateProfileEx
NtCreateProfile
NtCreateProcessEx
NtCreateProcess
NtCreatePrivateNamespace
NtCreatePort
NtCreatePagingFile
NtCreateNamedPipeFile
NtCreateMutant
NtCreateMailslotFile
NtCreateKeyTransacted
NtCreateKeyedEvent
NtCreateKey
NtCreateJobSet
NtCreateJobObject
NtCreateIRTimer
NtCreateTimer2
NtCreateIoCompletion
NtCreateFile
NtCreateEventPair
NtCreateEvent
NtCreateEnlistment
NtCreateDirectoryObjectEx
NtCreateDirectoryObject
NtCreateDebugObject
NtContinue
NtConnectPort
NtCompressKey
NtCompleteConnectPort
NtCompareTokens
NtCompareObjects
NtCompactKeys
NtCommitTransaction
NtCommitEnlistment
NtCommitComplete
NtCloseObjectAuditAlarm
NtClose
NtClearEvent
NtCancelWaitCompletionPacket
NtCancelTimer
NtCancelSynchronousIoFile
NtCancelIoFileEx
NtCancelIoFile
NtCallbackReturn
NtAssociateWaitCompletionPacket
NtAssignProcessToJobObject
NtAreMappedFilesTheSame
NtApphelpCacheControl
NtAlpcSetInformation
NtAlpcSendWaitReceivePort
NtAlpcRevokeSecurityContext
NtAlpcQueryInformationMessage
NtAlpcQueryInformation
NtAlpcOpenSenderThread
NtAlpcOpenSenderProcess
NtAlpcImpersonateClientOfPort
NtAlpcImpersonateClientContainerOfPort
NtAlpcDisconnectPort
NtAlpcDeleteSecurityContext
NtAlpcDeleteSectionView
NtAlpcDeleteResourceReserve
NtAlpcDeletePortSection
NtAlpcCreateSecurityContext
NtAlpcCreateSectionView
NtAlpcCreateResourceReserve
NtAlpcCreatePortSection
NtAlpcCreatePort
NtAlpcConnectPort
NtAlpcConnectPortEx
NtAlpcCancelMessage
NtAlpcAcceptConnectPort
NtAllocateVirtualMemory
NtAllocateUuids
NtAllocateUserPhysicalPages
NtAllocateReserveObject
NtAllocateLocallyUniqueId
NtAlertThreadByThreadId
NtAlertThread
NtAlertResumeThread
NtAdjustPrivilegesToken
NtAdjustGroupsToken
NtAdjustTokenClaimsAndDeviceGroups
NtAddDriverEntry
NtAddBootEntry
NtAddAtom
NtAddAtomEx
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
NtAccessCheckByTypeResultListAndAuditAlarm
NtAccessCheckByTypeResultList
NtAccessCheckByTypeAndAuditAlarm
NtAccessCheckByType
NtAccessCheckAndAuditAlarm

modernexecserver.dll RPC interface

$
0
0
version info says "Modern Execution Server". I don`t know what this means
8EC21E98-B5CE-4916-A3D6-449FA428A007 version 0.0
19 methods:
  • FmMuxSrvRegisterCoreUIEndpoints
  • FmMuxSrvLaunchTask
  • FmMuxSrvResumeTask
  • FmMuxSrvPauseTask
  • FmMuxSrvCancelTask
  • FmMuxSrvAbortTask
  • FmMuxSrvGetTaskPid
  • FmMuxSrvSetTaskDehydrationEligibility
  • FmMuxSrvResolveApplicationUri
  • FmMuxSrvGetActivationPolicy
  • FmMuxSrvShutdown
  • FmMuxSrvSetForegroundTaskInstanceId
  • FmMuxSrvGenerateActivationInstanceId
  • FmMuxSrvActivationPrerequisitePhase
  • FmMuxSrvIsCBETask
  • FmMuxSrvIsValidTaskPid
  • FmMuxSrvResumePrerequisitePhase
  • FmMuxSrvGetForegroundTaskInstanceId
  • FmMuxSrvActivationBypass

0FC77B1A-95D8-4A2E-A0C0-CFF54237462B version 0.0
9 methods:
  • FmMuxSrvRegisterFGNotificationCoreUIEndpoint
  • FmMuxSrvUnRegisterFGNotificationCoreUIEndpoint
  • FmMuxSrvGetForegroundProductId
  • FmMuxSrvIsForegroundProductId
  • FmMuxSrvGetProductIdFromProcessId
  • FmMuxSrvGenerateWatsonReport
  • FmMuxSrvGetProcessProductId
  • FmMuxSrvDehydrateHost
  • FmMuxSrvIsCallingProcessForeground
  •  

B1EF227E-DFA5-421E-82BB-67A6A129C496 version 0.0
11 methods:
  • FmMuxSrvIsActivationBeingDebugged
  • FmMuxSrvIsForegroundActivation
  • FmMuxSrvGetForegroundActivationInstanceId
  • FmMuxSrvGetApplicationId
  • FmMuxSrvGetPackageFamilyName
  • FmMuxSrvGetPackageFullName
  • FmMuxSrvGetPSMKey
  • FmMuxSrvDehydrateApplication
  • FmMuxSrvSetAutoDehydrateFlag
  • FmMuxSrvGetAutoDehydrateFlag
  • FmMuxSrvReloadSettings

bug in vs2010 inlined function

$
0
0
All know how to calculate the crc32, yeah ?
Let`s see output from visual studio 2010 for inlined version of crc32:

Here list is alias for ecx register:

  mov     [ebp+params.list_rva], list  
not     cl
  movzx   list, cl ; ok, now in ECX 00 00 00 cl
  mov     eax, ds:CRCTable[list*4]
  xor     eax, 0FFFFFFh
  movzx   ebx, al
  movzx   list, ch ; wait, CH now zero bcs of previous movzx ecx, cl !
  shr     eax, 8
  xor     list, ebx
  xor     eax, ds:CRCTable[list*4]
  movzx   list, byte ptr [ebp+params.list_rva+2]
  movzx   ebx, al
  shr     eax, 8
  xor     list, ebx
  xor     eax, ds:CRCTable[list*4]
  movzx   list, byte ptr [ebp+params.list_rva+3]
  movzx   ebx, al
it is obvious that the result of this functions is incorrect

windows 10 build 9926 W32pServiceTable

$
0
0
W32pServiceLimit .eq. 0x45C

NtUserGetOwnerTransformedMonitorRect
NtUserYieldTask
NtUserSetSensorPresence
NtGdiWidenPath
NtGdiUpdateColors
NtGdiUnrealizeObject
NtGdiUnmapMemFont
NtGdiUnloadPrinterDriver
NtGdiTransparentBlt
NtGdiTransformPoints
NtGdiScaleRgn
NtGdiScaleValues
NtGdiGetDCDpiScaleValue
NtGdiGetBitmapDpiScaleValue
NtGdiSwapBuffers
NtGdiStrokePath
NtGdiStrokeAndFillPath
NtGdiStretchDIBitsInternal
NtGdiStretchBlt
NtGdiStartPage
NtGdiStartDoc
NtGdiSetSizeDevice
NtGdiSetVirtualResolution
NtGdiSetTextJustification
NtGdiSetSystemPaletteUse
NtGdiSetRectRgn
NtGdiSetPixelFormat
NtGdiSetPixel
NtGdiSetOPMSigningKeyAndSequenceNumbers
NtGdiSetLayout
NtGdiMirrorWindowOrg
NtGdiGetDeviceWidth
NtGdiSetMiterLimit
NtGdiSetMetaRgn
NtGdiSetMagicColors
NtGdiSetLinkedUFIs
NtGdiSetIcmMode
NtGdiSetFontXform
NtGdiSetFontEnumeration
NtGdiSetDIBitsToDeviceInternal
NtGdiSetDeviceGammaRamp
NtGdiSetColorSpace
NtGdiSetColorAdjustment
NtGdiSetBrushOrg
NtGdiSetBrushAttributes
NtGdiSetBoundsRect
NtGdiSetBitmapDimension
NtGdiSetBitmapBits
NtGdiSetBitmapAttributes
NtGdiSelectPen
NtGdiSelectFont
NtGdiSelectClipPath
NtGdiSelectBrush
NtGdiSelectBitmap
NtGdiScaleWindowExtEx
NtGdiScaleViewportExtEx
NtGdiSaveDC
NtGdiRoundRect
NtGdiRestoreDC
NtGdiResizePalette
NtGdiResetDC
NtGdiRemoveFontMemResourceEx
NtGdiRemoveFontResourceW
NtGdiRectVisible
NtGdiRectInRegion
NtGdiRectangle
NtGdiQueryFontAssocInfo
NtGdiQueryFonts
NtGdiPtVisible
NtGdiPtInRegion
NtGdiPolyTextOutW
NtGdiPolyPolyDraw
NtGdiPolyDraw
NtGdiPlgBlt
NtGdiPathToRegion
NtGdiPolyPatBlt
NtGdiPatBlt
NtGdiOpenDCW
NtGdiOffsetRgn
NtGdiOffsetClipRgn
NtGdiMoveTo
NtGdiMonoBitmap
NtGdiModifyWorldTransform
NtGdiMaskBlt
NtGdiMakeInfoDC
NtGdiMakeFontDir
NtGdiLineTo
NtGdiInvertRgn
NtGdiIntersectClipRect
NtGdiInitSpool
NtGdiInit
NtGdiIcmBrushInfo
NtGdiHfontCreate
NtGdiGradientFill
NtGdiGetWidthTable
NtGdiGetFontUnicodeRanges
NtGdiAddEmbFontToDC
NtGdiChangeGhostFont
NtGdiGetEmbedFonts
NtGdiGetUFIPathname
NtGdiGetEmbUFI
NtGdiGetUFI
NtGdiGetTransform
NtGdiGetTextMetricsW
NtGdiGetTextFaceW
NtGdiGetTextExtentExW
NtGdiGetTextExtent
NtGdiGetTextCharsetInfo
NtGdiGetSystemPaletteUse
NtGdiGetSuggestedOPMProtectedOutputArraySize
NtGdiGetStringBitmapW
NtGdiGetStockObject
NtGdiGetStats
NtGdiGetSpoolMessage
NtGdiGetServerMetaFileBits
NtGdiGetRgnBox
NtGdiGetRegionData
NtGdiGetRealizationInfo
NtGdiGetRasterizerCaps
NtGdiGetRandomRgn
NtGdiGetPixel
NtGdiGetPath
NtGdiGetOutlineTextMetricsInternalW
NtGdiGetOPMRandomNumber
NtGdiGetObjectBitmapHandle
NtGdiGetNearestPaletteIndex
NtGdiGetNearestColor
NtGdiGetMonitorID
NtGdiGetMiterLimit
NtGdiGetLinkedUFIs
NtGdiGetKerningPairs
NtGdiGetOPMInformation
NtGdiGetGlyphOutline
NtGdiGetGlyphIndicesWInternal
NtGdiGetGlyphIndicesW
NtGdiGetFontResourceInfoInternalW
NtGdiGetFontFileInfo
NtGdiGetFontFileData
NtGdiGetFontData
NtGdiGetEudcTimeStampEx
NtGdiGetETM
NtGdiGetDIBitsInternal
NtGdiGetDeviceCapsAll
NtGdiGetDeviceGammaRamp
NtGdiGetDeviceCaps
NtGdiGetDCPoint
NtGdiGetDCObject
NtGdiGetDCforBitmap
NtGdiGetDCDword
NtGdiGetCurrentDpiInfo
NtGdiGetCOPPCompatibleOPMInformation
NtGdiGetColorSpaceforBitmap
NtGdiGetColorAdjustment
NtGdiGetCharWidthInfo
NtGdiGetCharWidthW
NtGdiGetCharSet
NtGdiGetCharacterPlacementW
NtGdiGetCharABCWidthsW
NtGdiGetCertificateSize
NtGdiGetCertificate
NtGdiGetBoundsRect
NtGdiGetBitmapDimension
NtGdiGetBitmapBits
NtGdiGetAppClipBox
NtGdiGetAndSetDCDword
NtGdiFullscreenControl
NtGdiFrameRgn
NtGdiForceUFIMapping
NtGdiFlush
NtGdiFlattenPath
NtGdiFillRgn
NtGdiFillPath
NtGdiExtTextOutW
NtGdiExtSelectClipRgn
NtGdiExtGetObjectW
NtGdiExtFloodFill
NtGdiExtEscape
NtGdiExtCreateRegion
NtGdiExtCreatePen
NtGdiExcludeClipRect
NtGdiEudcLoadUnloadLink
NtGdiEqualRgn
NtGdiEnumObjects
NtGdiEnumFonts
NtGdiEndPath
NtGdiEndPage
NtGdiEndGdiRendering
NtGdiEndDoc
NtGdiEnableEudc
NtGdiEllipse
NtGdiDrawEscape
NtGdiDoPalette
NtGdiDoBanding
NtGdiGetPerBandInfo
NtGdiDestroyOPMProtectedOutput
NtGdiDescribePixelFormat
NtGdiDeleteObjectApp
NtGdiDeleteColorTransform
NtGdiDeleteColorSpace
NtGdiDeleteClientObj
NtGdiDxgGenericThunk
NtGdiDvpReleaseNotification
NtGdiDvpAcquireNotification
NtGdiDvpWaitForVideoPortSync
NtGdiDvpUpdateVideoPort
NtGdiDvpGetVideoSignalStatus
NtGdiDvpGetVideoPortConnectInfo
NtGdiDvpGetVideoPortOutputFormats
NtGdiDvpGetVideoPortLine
NtGdiDvpGetVideoPortInputFormats
NtGdiDvpGetVideoPortFlipStatus
NtGdiDvpGetVideoPortField
NtGdiDvpGetVideoPortBandwidth
NtGdiDvpFlipVideoPort
NtGdiDvpDestroyVideoPort
NtGdiDvpCreateVideoPort
NtGdiDvpColorControl
NtGdiDvpCanCreateVideoPort
NtGdiDdWaitForVerticalBlank
NtGdiDdUpdateOverlay
NtGdiDdUnlockD3D
NtGdiDdUnlock
NtGdiDdUnattachSurface
NtGdiDdSetOverlayPosition
NtGdiDdCreateSurfaceEx
NtGdiDdSetGammaRamp
NtGdiDdSetExclusiveMode
NtGdiDdSetColorKey
NtGdiDdResetVisrgn
NtGdiDdRenderMoComp
NtGdiDdReleaseDC
NtGdiDdReenableDirectDrawObject
NtGdiDdQueryMoCompStatus
NtGdiDdQueryDirectDrawObject
NtGdiDdLockD3D
NtGdiDdLock
NtGdiDdGetScanLine
NtGdiDdGetMoCompFormats
NtGdiDdGetMoCompGuids
NtGdiDdGetMoCompBuffInfo
NtGdiDdGetInternalMoCompInfo
NtGdiDdGetFlipStatus
NtGdiDdGetDxHandle
NtGdiDdGetDriverInfo
NtGdiDdGetDC
NtGdiDdGetBltStatus
NtGdiDdGetAvailDriverMemory
NtGdiDdFlipToGDISurface
NtGdiDdFlip
NtGdiDdEndMoCompFrame
NtGdiDdDestroyD3DBuffer
NtGdiDdDestroySurface
NtGdiDdDestroyMoComp
NtGdiDdDeleteSurfaceObject
NtGdiDdDeleteDirectDrawObject
NtGdiDdCreateSurfaceObject
NtGdiDdCreateMoComp
NtGdiDdCreateD3DBuffer
NtGdiDdCreateSurface
NtGdiDdCreateDirectDrawObject
NtGdiDdColorControl
NtGdiDdCanCreateD3DBuffer
NtGdiDdCanCreateSurface
NtGdiDdBlt
NtGdiDdBeginMoCompFrame
NtGdiDdAttachSurface
NtGdiDdAlphaBlt
NtGdiDdAddAttachedSurface
NtGdiDdGetDriverState
NtGdiD3dDrawPrimitives2
NtGdiD3dValidateTextureStageState
NtGdiD3dContextDestroyAll
NtGdiD3dContextDestroy
NtGdiD3dContextCreate
NtGdiCreateSolidBrush
NtGdiCreateServerMetaFile
NtGdiCreateRoundRectRgn
NtGdiCreateRectRgn
NtGdiCreatePen
NtGdiCreatePatternBrushInternal
NtGdiCreatePaletteInternal
NtGdiCreateOPMProtectedOutputs
NtGdiCreateMetafileDC
NtGdiCreateHatchBrushInternal
NtGdiCreateHalftonePalette
NtGdiCreateEllipticRgn
NtGdiCreateSessionMappedDIBSection
NtGdiCreateDIBSection
NtGdiCreateDIBitmapInternal
NtGdiCreateDIBBrush
NtGdiCreateCompatibleDC
NtGdiCreateCompatibleBitmap
NtGdiCreateColorTransform
NtGdiCreateColorSpace
NtGdiCreateClientObj
NtGdiCreateBitmapFromDxSurface2
NtGdiCreateBitmapFromDxSurface
NtGdiCreateBitmap
NtGdiConvertMetafileRect
NtGdiConfigureOPMProtectedOutput
NtGdiComputeXformCoefficients
NtGdiCombineTransform
NtGdiCombineRgn
NtGdiColorCorrectPalette
NtGdiClearBrushAttributes
NtGdiClearBitmapAttributes
NtGdiCloseFigure
NtGdiCheckBitmapBits
NtGdiCancelDC
NtGdiBitBlt
NtGdiBeginPath
NtGdiBeginGdiRendering
NtGdiArcInternal
NtGdiFontIsLinked
NtGdiAnyLinkedFonts
NtGdiAngleArc
NtGdiAlphaBlend
NtGdiAddRemoteMMInstanceToDC
NtGdiRemoveMergeFont
NtGdiAddFontMemResourceEx
NtGdiAddRemoteFontToDC
NtGdiAddFontResourceW
NtGdiAbortPath
NtGdiAbortDoc
NtUserDefSetText
NtUserDeferWindowPosAndBand
NtUserDdeInitialize
NtUserCanBrokerForceForeground
NtUserCreateWindowStation
NtUserCreateWindowEx
NtUserCreateLocalMemHandle
NtUserCreateInputContext
NtUserCreateDesktopEx
NtUserCreateCaret
NtUserCreateAcceleratorTable
NtUserCountClipboardFormats
NtUserCopyAcceleratorTable
NtUserConvertMemHandle
NtUserConsoleControl
NtUserCloseWindowStation
NtUserCloseDesktop
NtUserCloseClipboard
NtUserClipCursor
NtUserChildWindowFromPointEx
NtUserCheckMenuItem
NtUserCheckWindowThreadDesktop
NtUserDwmValidateWindow
NtUserCheckAccessForIntegrityLevel
NtUserDisplayConfigSetDeviceInfo
NtUserDisplayConfigGetDeviceInfo
NtUserQueryDisplayConfig
NtUserSetDisplayConfig
NtUserGetDisplayConfigBufferSizes
NtUserChangeDisplaySettings
NtUserChangeClipboardChain
NtUserCallTwoParam
NtUserCallOneParam
NtUserCallNoParam
NtUserCallNextHookEx
NtUserCallMsgFilter
NtUserCallHwndParamLock
NtUserCallHwndParam
NtUserCallHwndOpt
NtUserCallHwndLock
NtUserCallHwnd
NtUserBuildPropList
NtUserBuildNameList
NtUserBuildHwndList
NtUserBuildHimcList
NtUserBlockInput
NtUserBitBltSysBmp
NtUserBeginPaint
NtUserAttachThreadInput
NtUserAssociateInputContext
NtUserAlterWindowStyle
NtUserAddClipboardFormatListener
NtUserActivateKeyboardLayout
NtUserDelegateCapturePointers
NtUserDelegateInput
NtUserDispatchMessage
NtUserDisableProcessWindowFiltering
NtUserDisableThreadIme
NtUserDestroyWindow
NtUserDestroyMenu
NtUserDestroyInputContext
NtUserDestroyCursor
NtUserDestroyAcceleratorTable
NtUserDeleteMenu
NtUserDoSoundDisconnect
NtUserDoSoundConnect
NtUserGhostWindowFromHungWindow
NtUserGetWOWClass
NtUserGetWindowPlacement
NtUserGetWindowDisplayAffinity
NtUserGetWindowDC
NtUserGetWindowCompositionAttribute
NtUserGetWindowCompositionInfo
NtUserGetWindowBand
NtUserGetUpdateRgn
NtUserGetUpdateRect
NtUserGetUpdatedClipboardFormats
NtUserGetTopLevelWindow
NtUserGetTitleBarInfo
NtUserGetThreadState
NtUserGetThreadDesktop
NtUserGetSystemMenu
NtUserGetScrollBarInfo
NtUserGetRegisteredRawInputDevices
NtUserGetRawInputDeviceList
NtUserGetRawInputDeviceInfo
NtUserGetRawInputData
NtUserGetRawInputBuffer
NtUserGetProcessWindowStation
NtUserGetPriorityClipboardFormat
NtUserGetOpenClipboardWindow
NtUserGetObjectInformation
NtUserGetMouseMovePointsEx
NtUserGetMessage
NtUserGetMenuItemRect
NtUserGetMenuIndex
NtUserGetMenuBarInfo
NtUserGetListBoxInfo
NtUserGetKeyState
NtUserGetKeyNameText
NtUserGetKeyboardState
NtUserGetKeyboardLayoutName
NtUserGetKeyboardLayoutList
NtUserGetInternalWindowPos
NtUserGetInputLocaleInfo
NtUserGetImeInfoEx
NtUserGetImeHotKey
NtUserGetIconSize
NtUserGetIconInfo
NtUserGetGUIThreadInfo
NtUserGetGuiResources
NtUserGetForegroundWindow
NtUserGetDpiSystemMetrics
NtUserGetDoubleClickTime
NtUserGetDesktopID
NtUserGetDCEx
NtUserGetDC
NtUserGetCursorInfo
NtUserGetCursorFrameInfo
NtUserGetCurrentInputMessageSource
NtUserGetCIMSSM
NtUserGetCPD
NtUserGetControlColor
NtUserGetControlBrush
NtUserGetComboBoxInfo
NtUserGetClipCursor
NtUserGetClipboardViewer
NtUserGetClipboardSequenceNumber
NtUserGetClipboardOwner
NtUserGetClipboardFormatName
NtUserGetClipboardData
NtUserGetClassName
NtUserGetClassInfoEx
NtUserGetCaretPos
NtUserGetCaretBlinkTime
NtUserGetAtomName
NtUserGetAsyncKeyState
NtUserGetAppImeLevel
NtUserGetAncestor
NtUserGetAltTabInfo
NtUserFrostCrashedWindow
NtUserFlashWindowEx
NtUserFindWindowEx
NtUserFindExistingCursorIcon
NtUserFillWindow
NtUserExcludeUpdateRgn
NtUserEvent
NtUserEnumDisplaySettings
NtUserEnumDisplayMonitors
NtUserEnumDisplayDevices
NtUserEndPaint
NtUserEndMenu
NtUserEndDeferWindowPosEx
NtUserEnableScrollBar
NtUserEnableMenuItem
NtUserEmptyClipboard
NtUserDrawMenuBarTemp
NtUserDrawIconEx
NtUserDrawCaptionTemp
NtUserDrawCaption
NtUserDrawAnimatedRects
NtUserDragObject
NtUserDragDetect
NtUserHandleDelegatedInput
NtUserRealChildWindowFromPoint
NtUserQueryWindow
NtUserQuerySendMessage
NtUserQueryInputContext
NtUserQueryInformationThread
NtUserQueryBSDRWindow
NtUserPerMonitorDPIPhysicalToLogicalPoint
NtUserProcessConnect
NtUserPrintWindow
NtUserPostThreadMessage
NtUserPostMessage
NtUserPhysicalToLogicalPoint
NtUserPeekMessage
NtUserPaintMonitor
NtUserPaintDesktop
NtUserOpenWindowStation
NtUserOpenThreadDesktop
NtUserOpenInputDesktop
NtUserOpenDesktop
NtUserOpenClipboard
NtUserNotifyWinEvent
NtUserNotifyProcessCreate
NtUserNotifyIMEStatus
NtUserMoveWindow
NtUserModifyUserStartupInfoFlags
NtUserMNDragOver
NtUserMNDragLeave
NtUserMinMaximize
NtUserMessageCall
NtUserMenuItemFromPoint
NtUserMapVirtualKeyEx
NtUserLayoutCompleted
NtUserLogicalToPerMonitorDPIPhysicalPoint
NtUserLogicalToPhysicalPoint
NtUserLockWorkStation
NtUserLockWindowUpdate
NtUserLockWindowStation
NtUserLoadKeyboardLayoutEx
NtUserKillTimer
NtUserIsTopLevelWindow
NtUserIsClipboardFormatAvailable
NtUserInvalidateRgn
NtUserInvalidateRect
NtUserInternalGetWindowIcon
NtUserInternalGetWindowText
NtUserInitTask
NtUserInitializeClientPfnArrays
NtUserInitialize
NtUserImpersonateDdeClientWindow
NtUserHungWindowFromGhostWindow
NtUserHiliteMenuItem
NtUserHideCaret
NtUserHardErrorControl
NtUserRealInternalGetMessage
NtUserRealWaitMessageEx
NtUserReleaseDwmHitTestWaiters
NtUserTranslateMessage
NtUserTranslateAccelerator
NtUserPaintMenuBar
NtUserCalcMenuBar
NtUserCalculatePopupWindowPosition
NtUserTrackPopupMenuEx
NtUserTrackMouseEvent
NtUserToUnicodeEx
NtUserThunkedMenuItemInfo
NtUserThunkedMenuInfo
NtUserTestForInteractiveUser
NtUserSendEventMessage
NtUserSystemParametersInfo
NtUserSwitchDesktop
NtUserSoundSentry
NtUserShutdownReasonDestroy
NtUserShutdownBlockReasonQuery
NtUserShutdownBlockReasonCreate
NtUserShowWindowAsync
NtUserShowWindow
NtUserShowScrollBar
NtUserShowCaret
NtUserSetWinEventHook
NtUserSetWindowWord
NtUserSetWindowStationUser
NtUserSetWindowsHookEx
NtUserSetWindowsHookAW
NtUserSetWindowRgnEx
NtUserGetWindowRgnEx
NtUserSetWindowRgn
NtUserSetWindowPos
NtUserSetWindowPlacement
NtUserSetWindowLong
NtUserSetWindowFNID
NtUserSetWindowDisplayAffinity
NtUserSetWindowCompositionTransition
NtUserUpdateDefaultDesktopThumbnail
NtUserSetWindowCompositionAttribute
NtUserSetWindowBand
NtUserSetProcessUIAccessZorder
NtUserSetProcessDpiAwareness
NtUserEnableChildWindowDpiMessage
NtUserIsChildWindowDpiMessageEnabled
NtUserSetTimer
NtUserSetThreadState
NtUserSetThreadLayoutHandles
NtUserSetThreadDesktop
NtUserSetThreadInputBlocked
NtUserSetSystemTimer
NtUserSetSystemMenu
NtUserSetSystemCursor
NtUserSetSysColors
NtUserSetShellWindowEx
NtUserSetImmersiveBackgroundWindow
NtUserSetScrollInfo
NtUserSetProp
NtUserGetProp
NtUserSetProcessWindowStation
NtUserSetParent
NtUserSetObjectInformation
NtUserSetMenuFlagRtoL
NtUserSetMenuDefaultItem
NtUserSetMenuContextHelpId
NtUserSetMenu
NtUserSetKeyboardState
NtUserSetInternalWindowPos
NtUserSetInformationThread
NtUserSetImeOwnerWindow
NtUserSetImeInfoEx
NtUserSetImeHotKey
NtUserSetFocus
NtUserSetCursorIconData
NtUserSetCursorContents
NtUserSetCursor
NtUserSetClipboardViewer
NtUserSetClipboardData
NtUserSetClassWord
NtUserSetClassLong
NtUserSetChildWindowNoActivate
NtUserSetCapture
NtUserSetAppImeLevel
NtUserSetActiveWindow
NtUserSendInput
NtUserSelectPalette
NtUserScrollWindowEx
NtUserScrollDC
NtUserSBGetParms
NtUserResolveDesktopForWOW
NtUserRemoveProp
NtUserRemoveMenu
NtUserRemoveClipboardFormatListener
NtUserRegisterWindowMessage
NtUserRegisterTasklist
NtUserRegisterServicesProcess
NtUserRegisterRawInputDevices
NtUserRegisterHotKey
NtUserRegisterDManipHook
NtUserGetDManipHookInitFunction
NtUserRegisterManipulationThread
NtUserSetManipulationInputTarget
NtUserRegisterUserApiHook
NtUserRegisterErrorReportingDialog
NtUserRegisterClassExWOW
NtUserRegisterBSDRWindow
NtUserRedrawWindow
NtUserUndelegateInput
NtUserGetWindowMinimizeRect
NtUserDwmGetRemoteSessionOcclusionEvent
NtUserDwmGetRemoteSessionOcclusionState
NtUserDwmKernelShutdown
NtUserDwmKernelStartup
NtUserUpdateWindowTransform
NtUserCheckProcessSession
NtUserUnregisterSessionPort
NtUserRegisterSessionPort
NtUserCtxDisplayIOCtl
NtUserRemoteStopScreenUpdates
NtUserRemoteRedrawScreen
NtUserRemoteRedrawRectangle
NtUserRemoteConnect
NtUserWaitAvailableMessageEx
NtUserWindowFromPoint
NtUserWindowFromPhysicalPoint
NtUserWaitMessage
NtUserWaitForMsgAndEvent
NtUserWaitForInputIdle
NtUserVkKeyScanEx
NtUserValidateTimerCallback
NtUserValidateRect
NtUserValidateHandleSecure
NtUserUserHandleGrantAccess
NtUserUpdatePerUserSystemParameters
NtUserSetLayeredWindowAttributes
NtUserGetLayeredWindowAttributes
NtUserUpdateLayeredWindow
NtUserUpdateInstance
NtUserUpdateInputContext
NtUserUnregisterHotKey
NtUserUnregisterUserApiHook
NtUserUnregisterClass
NtUserUnlockWindowStation
NtUserUnloadKeyboardLayout
NtUserUnhookWinEvent
NtUserUnhookWindowsHookEx
NtUserGetTouchInputInfo
NtUserIsTouchWindow
NtUserModifyWindowTouchCapability
NtGdiEngStretchBltROP
NtGdiEngTextOut
NtGdiEngTransparentBlt
NtGdiEngGradientFill
NtGdiEngAlphaBlend
NtGdiEngLineTo
NtGdiEngPaint
NtGdiEngStrokeAndFillPath
NtGdiEngFillPath
NtGdiEngStrokePath
NtGdiEngMarkBandingSurface
NtGdiEngPlgBlt
NtGdiEngStretchBlt
NtGdiEngBitBlt
NtGdiEngLockSurface
NtGdiEngUnlockSurface
NtGdiEngEraseSurface
NtGdiEngDeleteSurface
NtGdiEngDeletePalette
NtGdiEngCopyBits
NtGdiEngComputeGlyphSet
NtGdiEngCreatePalette
NtGdiEngCreateDeviceBitmap
NtGdiEngCreateDeviceSurface
NtGdiEngCreateBitmap
NtGdiEngAssociateSurface
NtUserSetWindowFeedbackSetting
NtUserRegisterEdgy
NtUserRegisterShellPTPListener
NtUserGetWindowFeedbackSetting
NtUserHidePointerContactVisualization
NtUserGetTouchValidationStatus
NtUserInitializeTouchInjection
NtUserInjectTouchInput
NtUserRegisterTouchHitTestingWindow
NtUserSetDisplayMapping
NtUserSetCalibrationData
NtUserGetPhysicalDeviceRect
NtUserRegisterTouchPadCapable
NtUserGetRawPointerDeviceData
NtUserGetPointerDeviceCursors
NtUserGetPointerDeviceRects
NtUserRegisterPointerDeviceNotifications
NtUserGetPointerDeviceProperties
NtUserGetPointerDevice
NtUserGetPointerDevices
NtUserEnableTouchPad
NtUserGetPrecisionTouchPadConfiguration
NtUserSetPrecisionTouchPadConfiguration
NtUserPromotePointer
NtUserDiscardPointerFrameMessages
NtUserRegisterPointerInputTarget
NtUserGetPointerFrameArrivalTimes
NtUserGetPointerInputTransform
NtUserGetPointerInfoList
NtUserGetPointerCursorId
NtUserGetPointerType
NtUserGetGestureConfig
NtUserSetGestureConfig
NtUserGetGestureExtArgs
NtUserGetGestureInfo
NtUserInjectGesture
NtUserChangeWindowMessageFilterEx
NtGdiXLATEOBJ_hGetColorTransform
NtGdiXLATEOBJ_iXlate
NtGdiXLATEOBJ_cGetPalette
NtGdiEngDeleteClip
NtGdiEngCreateClip
NtGdiEngDeletePath
NtGdiCLIPOBJ_ppoGetPath
NtGdiCLIPOBJ_cEnumStart
NtGdiCLIPOBJ_bEnum
NtGdiBRUSHOBJ_hGetColorTransform
NtGdiBRUSHOBJ_pvGetRbrush
NtGdiBRUSHOBJ_pvAllocRbrush
NtGdiBRUSHOBJ_ulGetBrushColor
NtGdiXFORMOBJ_iGetXform
NtGdiXFORMOBJ_bApplyXform
NtGdiFONTOBJ_pQueryGlyphAttrs
NtGdiFONTOBJ_pfdg
NtGdiFONTOBJ_pifi
NtGdiFONTOBJ_cGetGlyphs
NtGdiFONTOBJ_pxoGetXform
NtGdiFONTOBJ_vGetInfo
NtGdiFONTOBJ_cGetAllGlyphHandles
NtGdiFONTOBJ_pvTrueTypeFontFile
NtGdiSTROBJ_dwGetCodePage
NtGdiSTROBJ_vEnumStart
NtGdiSTROBJ_bGetAdvanceWidths
NtGdiSTROBJ_bEnumPositionsOnly
NtGdiSTROBJ_bEnum
NtGdiPATHOBJ_bEnumClipLines
NtGdiPATHOBJ_vEnumStartClipLines
NtGdiPATHOBJ_vEnumStart
NtGdiPATHOBJ_bEnum
NtGdiPATHOBJ_vGetBounds
NtGdiEngCheckAbort
NtGdiGetDhpdev
NtGdiHT_Get8BPPMaskPalette
NtGdiHT_Get8BPPFormatPalette
NtGdiUpdateTransform
NtGdiUMPDEngFreeUserMem
NtGdiBRUSHOBJ_DeleteRbrush
NtGdiSetPUMPDOBJ
NtGdiSetUMPDSandboxState
NtGdiDrawStream
NtGdiHLSurfSetInformation
NtGdiHLSurfGetInformation
NtGdiDwmCreatedBitmapRemotingOutput
NtGdiDdDDIGetScanLine
NtGdiDdDDIReleaseProcessVidPnSourceOwners
NtGdiDdDDIGetProcessSchedulingPriorityClass
NtGdiDdDDISetProcessSchedulingPriorityClass
NtGdiDdDDIGetContextSchedulingPriority
NtGdiDdDDISetContextSchedulingPriority
NtGdiDdDDIDestroyDCFromMemory
NtGdiDdDDICreateDCFromMemory
NtGdiDdDDIGetDeviceState
NtGdiDdDDISetGammaRamp
NtGdiDdDDIWaitForVerticalBlankEvent
NtGdiDdDDIDestroyOverlay
NtGdiDdDDIFlipOverlay
NtGdiDdDDIUpdateOverlay
NtGdiDdDDICreateOverlay
NtGdiDdDDIGetPresentQueueEvent
NtGdiDdDDIGetPresentHistory
NtGdiDdDDISetVidPnSourceOwner1
NtGdiDdDDISetVidPnSourceOwner
NtGdiDdDDIQueryStatistics
NtGdiDdDDIEscape
NtGdiDdDDIGetSharedPrimaryHandle
NtGdiDdDDICloseAdapter
NtGdiDdDDIOpenAdapterFromLuid
NtGdiDdDDIEnumAdapters
NtGdiDdDDIEnumAdapters2
NtGdiDdDDIOpenAdapterFromHdc
NtGdiDdDDIOpenAdapterFromDeviceName
NtGdiDdDDIRender
NtGdiDdDDIPresent
NtGdiDdDDIGetMultisampleMethodList
NtGdiDdDDISetDisplayMode
NtGdiDdDDIGetDisplayModeList
NtGdiDdDDIUnlock
NtGdiDdDDILock
NtGdiDdDDIQueryAdapterInfo
NtGdiDdDDIGetRuntimeData
NtGdiDdDDISignalSynchronizationObject
NtGdiDdDDIWaitForSynchronizationObject
NtGdiDdDDIDestroySynchronizationObject
NtGdiDdDDIOpenSynchronizationObject
NtGdiDdDDICreateSynchronizationObject
NtGdiDdDDIDestroyContext
NtGdiDdDDICreateContext
NtGdiDdDDIDestroyDevice
NtGdiDdDDICreateDevice
NtGdiDdDDIQueryAllocationResidency
NtGdiDdDDISetAllocationPriority
NtGdiDdDDIDestroyAllocation
NtGdiDdDDIDestroyAllocation2
NtGdiDdDDIOpenResourceFromNtHandle
NtGdiDdDDIOpenSyncObjectFromNtHandle
NtGdiDdDDIOpenSyncObjectFromNtHandle2
NtGdiDdDDIOpenResource
NtGdiDdDDIOpenNtHandleFromName
NtGdiDdDDIOpenSyncObjectNtHandleFromName
NtGdiDdDDIShareObjects
NtGdiDdDDIQueryResourceInfoFromNtHandle
NtGdiDdDDIQueryResourceInfo
NtGdiDdDDICreateAllocation
NtGdiDdDDIOutputDuplReleaseFrame
NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName
NtGdiDdDDIOutputDuplPresent
NtGdiDdDDIReleaseKeyedMutex2
NtGdiDdDDIAcquireKeyedMutex2
NtGdiDdDDIOpenKeyedMutex2
NtGdiDdDDICreateKeyedMutex2
NtGdiDdDDIOutputDuplGetPointerShapeData
NtGdiDdDDIOutputDuplGetMetaData
NtGdiDdDDIOutputDuplGetFrameInfo
NtGdiDdDDIDestroyOutputDupl
NtGdiDdDDICreateOutputDupl
NtGdiDdDDIReclaimAllocations
NtGdiDdDDIOfferAllocations
NtGdiDdDDICheckSharedResourceAccess
NtGdiDdDDICheckVidPnExclusiveOwnership
NtGdiDdDDIGetOverlayState
NtGdiDdDDIConfigureSharedResource
NtGdiDdDDIReleaseKeyedMutex
NtGdiDdDDIAcquireKeyedMutex
NtGdiDdDDIDestroyKeyedMutex
NtGdiDdDDIOpenKeyedMutex
NtGdiDdDDICreateKeyedMutex
NtGdiDdDDISharedPrimaryUnLockNotification
NtGdiDdDDISharedPrimaryLockNotification
NtGdiDdDDISetDisplayPrivateDriverFormat
NtGdiDdDDICheckExclusiveOwnership
NtGdiDdDDICheckMonitorPowerState
NtGdiDdDDIWaitForIdle
NtGdiDdDDICheckOcclusion
NtGdiDdDDIInvalidateActiveVidPn
NtGdiDdDDIPollDisplayChildren
NtGdiDdDDISetQueuedLimit
NtGdiDdDDIPinDirectFlipResources
NtGdiDdDDIUnpinDirectFlipResources
NtGdiDdDDIWaitForVerticalBlankEvent2
NtGdiDdDDIGetDWMVerticalBlankEvent
NtGdiDdDDISetSyncRefreshCountWaitTarget
NtGdiDdDDISetContextInProcessSchedulingPriority
NtGdiDdDDIGetContextInProcessSchedulingPriority
NtGdiDdDDIGetSharedResourceAdapterLuid
NtGdiDdDDISetStereoEnabled
NtGdiDdDDIPresentMultiPlaneOverlay
NtGdiDdDDICheckMultiPlaneOverlaySupport
NtGdiDdDDIMakeResident
NtGdiDdDDIEvict
NtGdiDdDDIWaitForSynchronizationObjectFromCpu
NtGdiDdDDISignalSynchronizationObjectFromCpu
NtGdiDdDDIWaitForSynchronizationObjectFromGpu
NtGdiDdDDISignalSynchronizationObjectFromGpu
NtGdiDdDDISignalSynchronizationObjectFromGpu2
NtGdiDdDDICreatePagingQueue
NtGdiDdDDIDestroyPagingQueue
NtGdiDdDDILock2
NtGdiDdDDIUnlock2
NtGdiDdDDIInvalidateCache
NtGdiDdDDIGetResourcePresentPrivateDriverData
NtGdiDdDDIMapGpuVirtualAddress
NtGdiDdDDIReserveGpuVirtualAddress
NtGdiDdDDIFreeGpuVirtualAddress
NtGdiDdDDIUpdateGpuVirtualAddress
NtGdiDdDDICreateContextVirtual
NtGdiDdDDISubmitCommand
NtGdiDdDDIGetCachedHybridQueryValue
NtGdiDdDDICacheHybridQueryValue
NtGdiDdDDINetDispGetNextChunkInfo
NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport
NtGdiDdDDINetDispStartMiracastDisplayDevice
NtGdiDdDDINetDispStopMiracastDisplayDevice
NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus
NtGdiDdDDINetDispStopSessions
NtGdiDdDDIQueryVideoMemoryInfo
NtGdiDdDDIChangeVideoMemoryReservation
NtGdiDdDDICreateSwapChain
NtGdiDdDDIOpenSwapChain
NtGdiDdDDIGetSetSwapChainMetadata
NtGdiDdDDIAcquireSwapChain
NtGdiDdDDIReleaseSwapChain
NtGdiDdDDIAbandonSwapChain
NtGdiDdDDISetDodIndirectSwapchain
NtGdiDdDDICheckMultiPlaneOverlaySupport2
NtGdiDdDDIPresentMultiPlaneOverlay2
NtGdiDdDDIReclaimAllocations2
NtGdiDdDDISetStablePowerState
NtGdiDdDDIQueryClockCalibration
NtGdiMakeObjectUnXferable
NtGdiMakeObjectXferable
NtGdiDestroyPhysicalMonitor
NtGdiGetPhysicalMonitorDescription
NtGdiGetPhysicalMonitors
NtGdiGetNumberOfPhysicalMonitors
NtGdiDDCCIGetTimingReport
NtGdiDDCCIGetCapabilitiesString
NtGdiDDCCIGetCapabilitiesStringLength
NtGdiDDCCISaveCurrentSettings
NtGdiDDCCISetVCPFeature
NtGdiDDCCIGetVCPFeature
NtGdiDdQueryVisRgnUniqueness
NtGdiDdDestroyFullscreenSprite
NtGdiDdNotifyFullscreenSpriteUpdate
NtGdiDdCreateFullscreenSprite
NtUserShowSystemCursor
NtUserSetMirrorRendering
NtUserMagGetContextInformation
NtUserMagSetContextInformation
NtUserMagControl
NtUserSlicerControl
NtUserHwndSetRedirectionInfo
NtUserHwndQueryRedirectionInfo
NtCreateCompositionSurfaceHandle
NtValidateCompositionSurfaceHandle
NtBindCompositionSurface
NtUnBindCompositionSurface
NtQueryCompositionSurfaceBinding
NtNotifyPresentToCompositionSurface
NtQueryCompositionSurfaceStatistics
NtOpenCompositionSurfaceSectionInfo
NtOpenCompositionSurfaceSwapChainHandleInfo
NtQueryCompositionSurfaceRenderingRealization
NtOpenCompositionSurfaceDirtyRegion
NtSetCompositionSurfaceOutOfFrameDirectFlipNotification
NtSetCompositionSurfaceStatistics
NtSetCompositionSurfaceBufferCompositionMode
NtSetCompositionSurfaceIndependentFlipInfo
NtDesktopCaptureBits
NtCreateCompositionInputSink
NtDuplicateCompositionInputSink
NtQueryCompositionInputSink
NtQueryCompositionInputSinkLuid
NtUpdateInputSinkTransforms
NtCompositionInputThread
NtQueryCompositionInputQueueAndTransform
NtTokenManagerOpenSectionAndEvents
NtTokenManagerThread
NtTokenManagerGetOutOfFrameDirectFlipSurfaceUpdates
NtTokenManagerDeleteOutstandingDirectFlipTokens
NtTokenManagerCreateCompositionTokenHandle
NtDCompositionBeginFrame
NtDCompositionConfirmFrame
NtDCompositionRetireFrame
NtDCompositionDiscardFrame
NtDCompositionGetFrameSurfaceUpdates
NtDCompositionGetFrameLegacyTokens
NtDCompositionDestroyConnection
NtDCompositionGetConnectionBatch
NtDCompositionGetFrameStatistics
NtDCompositionGetDeletedResources
NtDCompositionSetResourceDeletedNotificationTag
NtDCompositionCreateConnection
NtDCompositionDestroyChannel
NtDCompositionReleaseAllResources
NtDCompositionSubmitDWMBatch
NtDCompositionCommitChannel
NtDCompositionWaitForChannel
NtDCompositionSetChannelCommitCompletionEvent
NtDCompositionTelemetryTouchInteractionBegin
NtDCompositionTelemetryTouchInteractionUpdate
NtDCompositionTelemetryTouchInteractionEnd
NtDCompositionTelemetrySetApplicationId
NtDCompositionTelemetryAnimationScenarioBegin
NtDCompositionTelemetryAnimationScenarioReference
NtDCompositionTelemetryAnimationScenarioUnreference
NtDCompositionCurrentBatchId
NtDCompositionReleaseResource
NtDCompositionRemoveCrossDeviceVisualChild
NtDCompositionRemoveVisualChild
NtDCompositionAddCrossDeviceVisualChild
NtDCompositionAddVisualChild
NtDCompositionReplaceVisualChildren
NtDCompositionSetResourceAnimationProperty
NtDCompositionSetResourceReferenceArrayProperty
NtDCompositionSetResourceReferenceProperty
NtDCompositionSetResourceBufferProperty
NtDCompositionSetResourceIntegerProperty
NtDCompositionSetResourceFloatProperty
NtDCompositionSetResourceHandleProperty
NtDCompositionCreateResource
NtDCompositionOpenSharedResource
NtDCompositionOpenSharedResourceHandle
NtDCompositionCreateDwmChannel
NtDCompositionCreateChannel
NtDCompositionSynchronize
NtDCompositionDwmSyncFlush
NtDCompositionReferenceSharedResourceOnDwmChannel
NtDCompositionSignalGpuFence
NtDCompositionCreateAndBindSharedSection
NtDCompositionSetDebugCounter
NtDCompositionGetChannels
NtDCompositionConnectPipe
NtDCompositionRegisterThumbnailVisual
NtDCompositionRegisterVirtualDesktopVisual
NtDCompositionDuplicateHandleToProcess
NtDCompositionSetVisualInputSink
NtDCompositionSetMessageKey
NtDCompositionGetAnimationTime
NtDCompositionUpdatePointerCapture
NtDCompositionCapturePointer
NtDCompositionSetChannelCallbackId
NtDCompositionSetResourceCallbackId
NtDCompositionDuplicateSwapchainHandleToDwm
NtUserDestroyDCompositionHwndTarget
NtUserCreateDCompositionHwndTarget
NtUserWaitForRedirectionStartComplete
NtUserSignalRedirectionStartComplete
NtUserSetActiveProcessForMonitor
NtUserGetDisplayAutoRotationPreferencesByProcessId
NtUserGetDisplayAutoRotationPreferences
NtUserSetDisplayAutoRotationPreferences
NtUserSetAutoRotation
NtUserGetAutoRotationState
NtUserAutoRotateScreen
NtUserAcquireIAMKey
NtUserSetActivationFilter
NtUserSetFallbackForeground
NtUserSetBrokeredForeground
NtUserDisableImmersiveOwner
NtUserClearForeground
NtUserEnableIAMAccess
NtUserGetProcessUIContextInformation
NtUserSetProcessRestrictionExemption
NtUserSetWindowArrangement
NtUserEnableMouseInPointer
NtUserIsMouseInPointerEnabled
NtUserPromoteMouseInPointer
NtUserAutoPromoteMouseInPointer
NtUserEnableMouseInputForCursorSuppression
NtUserIsMouseInputEnabled
NtUserInternalClipCursor
NtUserCheckProcessForClipboardAccess
NtUserGetClipboardAccessToken
NtUserGetQueueEventStatus
NtUserCompositionInputSinkLuidFromPoint
NtUserUpdateWindowInputSinkHints
NtUserTransformPoint
NtUserTransformRect
NtUserGetHimetricScaleFactorFromPixelLocation
NtUserGetProcessDpiAwareness
NtUserGetDpiForMonitor
NtUserReportInertia
NtUserLinkDpiCursor
NtUserGetCursorDims
NtUserInitializeInputDeviceInjection
NtUserInitializePointerDeviceInjection
NtUserSetFeatureReportResponse
NtUserInjectDeviceInput
NtUserInjectMouseInput
NtUserInjectKeyboardInput
NtUserInjectPointerInput
NtRIMAddInputObserver
NtRIMDisableInputObservers
NtRIMEnableInputObservers
NtRIMRemoveInputObserver
NtRIMUpdateInputObserverRegistration
NtRIMObserveNextInput
NtRIMGetDevicePreparsedDataLockfree
NtUserSetCoreWindow

W32pServiceTable from windows 10 build 9926 64bit

$
0
0
W32pServiceLimit .eq. 0x45E

NtUserGetOwnerTransformedMonitorRect
NtUserYieldTask
NtUserSetSensorPresence
NtUserGetThreadState
NtUserPeekMessage
NtUserCallOneParam
NtUserGetKeyState
NtUserInvalidateRect
NtUserCallNoParam
NtUserGetMessage
NtUserMessageCall
NtGdiBitBlt
NtGdiGetCharSet
NtUserGetDC
NtGdiSelectBitmap
NtUserWaitMessage
NtUserTranslateMessage
NtUserGetProp
NtUserPostMessage
NtUserQueryWindow
NtUserTranslateAccelerator
NtGdiFlush
NtUserRedrawWindow
NtUserWindowFromPoint
NtUserCallMsgFilter
NtUserValidateTimerCallback
NtUserBeginPaint
NtUserSetTimer
NtUserEndPaint
NtUserSetCursor
NtUserKillTimer
NtUserBuildHwndList
NtUserSelectPalette
NtUserCallNextHookEx
NtUserHideCaret
NtGdiIntersectClipRect
NtUserCallHwndLock
NtUserGetProcessWindowStation
NtGdiDeleteObjectApp
NtUserSetWindowPos
NtUserShowCaret
NtUserEndDeferWindowPosEx
NtUserCallHwndParamLock
NtUserVkKeyScanEx
NtGdiSetDIBitsToDeviceInternal
NtUserCallTwoParam
NtGdiGetRandomRgn
NtUserCopyAcceleratorTable
NtUserNotifyWinEvent
NtGdiExtSelectClipRgn
NtUserIsClipboardFormatAvailable
NtUserSetScrollInfo
NtGdiStretchBlt
NtUserCreateCaret
NtGdiRectVisible
NtGdiCombineRgn
NtGdiGetDCObject
NtUserDispatchMessage
NtUserRegisterWindowMessage
NtGdiExtTextOutW
NtGdiSelectFont
NtGdiRestoreDC
NtGdiSaveDC
NtUserGetForegroundWindow
NtUserShowScrollBar
NtUserFindExistingCursorIcon
NtGdiGetDCDword
NtGdiGetRegionData
NtGdiLineTo
NtUserSystemParametersInfo
NtGdiGetAppClipBox
NtUserGetAsyncKeyState
NtUserGetCPD
NtUserRemoveProp
NtGdiDoPalette
NtGdiPolyPolyDraw
NtUserSetCapture
NtUserEnumDisplayMonitors
NtGdiCreateCompatibleBitmap
NtUserSetProp
NtGdiGetTextCharsetInfo
NtUserSBGetParms
NtUserGetIconInfo
NtUserExcludeUpdateRgn
NtUserSetFocus
NtGdiExtGetObjectW
NtUserGetUpdateRect
NtGdiCreateCompatibleDC
NtUserGetClipboardSequenceNumber
NtGdiCreatePen
NtUserShowWindow
NtUserGetKeyboardLayoutList
NtGdiPatBlt
NtUserMapVirtualKeyEx
NtUserSetWindowLong
NtGdiHfontCreate
NtUserMoveWindow
NtUserPostThreadMessage
NtUserDrawIconEx
NtUserGetSystemMenu
NtGdiDrawStream
NtUserInternalGetWindowText
NtUserGetWindowDC
NtGdiD3dDrawPrimitives2
NtGdiInvertRgn
NtGdiGetRgnBox
NtGdiGetAndSetDCDword
NtGdiMaskBlt
NtGdiGetWidthTable
NtUserScrollDC
NtUserGetObjectInformation
NtGdiCreateBitmap
NtUserFindWindowEx
NtGdiPolyPatBlt
NtUserUnhookWindowsHookEx
NtGdiGetNearestColor
NtGdiTransformPoints
NtGdiGetDCPoint
NtGdiCreateDIBBrush
NtGdiGetTextMetricsW
NtUserCreateWindowEx
NtUserSetParent
NtUserGetKeyboardState
NtUserToUnicodeEx
NtUserGetControlBrush
NtUserGetClassName
NtGdiAlphaBlend
NtGdiDdBlt
NtGdiOffsetRgn
NtUserDefSetText
NtGdiGetTextFaceW
NtGdiStretchDIBitsInternal
NtUserSendInput
NtUserGetThreadDesktop
NtGdiCreateRectRgn
NtGdiGetDIBitsInternal
NtUserGetUpdateRgn
NtGdiDeleteClientObj
NtUserGetIconSize
NtUserFillWindow
NtGdiExtCreateRegion
NtGdiComputeXformCoefficients
NtUserSetWindowsHookEx
NtUserNotifyProcessCreate
NtGdiUnrealizeObject
NtUserGetTitleBarInfo
NtGdiRectangle
NtUserSetThreadDesktop
NtUserGetDCEx
NtUserGetScrollBarInfo
NtGdiGetTextExtent
NtUserSetWindowFNID
NtGdiSetLayout
NtUserCalcMenuBar
NtUserThunkedMenuItemInfo
NtGdiExcludeClipRect
NtGdiCreateDIBSection
NtGdiGetDCforBitmap
NtUserDestroyCursor
NtUserDestroyWindow
NtUserCallHwndParam
NtGdiCreateDIBitmapInternal
NtUserOpenWindowStation
NtGdiDdDeleteSurfaceObject
NtGdiDdCanCreateSurface
NtGdiDdCreateSurface
NtUserSetCursorIconData
NtGdiDdDestroySurface
NtUserCloseDesktop
NtUserOpenDesktop
NtUserSetProcessWindowStation
NtUserGetAtomName
NtGdiDdResetVisrgn
NtGdiExtCreatePen
NtGdiCreatePaletteInternal
NtGdiSetBrushOrg
NtUserBuildNameList
NtGdiSetPixel
NtUserRegisterClassExWOW
NtGdiCreatePatternBrushInternal
NtUserGetAncestor
NtGdiGetOutlineTextMetricsInternalW
NtGdiSetBitmapBits
NtUserCloseWindowStation
NtUserGetDoubleClickTime
NtUserEnableScrollBar
NtGdiCreateSolidBrush
NtUserGetClassInfoEx
NtGdiCreateClientObj
NtUserUnregisterClass
NtUserDeleteMenu
NtGdiRectInRegion
NtUserScrollWindowEx
NtGdiGetPixel
NtUserSetClassLong
NtUserGetMenuBarInfo
NtGdiDdCreateSurfaceEx
NtGdiDdCreateSurfaceObject
NtGdiGetNearestPaletteIndex
NtGdiDdLockD3D
NtGdiDdUnlockD3D
NtGdiGetCharWidthW
NtUserInvalidateRgn
NtUserGetClipboardOwner
NtUserSetWindowRgn
NtUserBitBltSysBmp
NtGdiGetCharWidthInfo
NtUserValidateRect
NtUserCloseClipboard
NtUserOpenClipboard
NtGdiGetStockObject
NtUserSetClipboardData
NtUserEnableMenuItem
NtUserAlterWindowStyle
NtGdiFillRgn
NtUserGetWindowPlacement
NtGdiModifyWorldTransform
NtGdiGetFontData
NtUserGetOpenClipboardWindow
NtUserSetThreadState
NtGdiOpenDCW
NtUserTrackMouseEvent
NtGdiGetTransform
NtUserDestroyMenu
NtGdiGetBitmapBits
NtUserConsoleControl
NtUserSetActiveWindow
NtUserSetInformationThread
NtUserSetWindowPlacement
NtUserGetControlColor
NtGdiSetMetaRgn
NtGdiSetMiterLimit
NtGdiSetVirtualResolution
NtGdiGetRasterizerCaps
NtUserSetWindowWord
NtUserGetClipboardFormatName
NtUserRealInternalGetMessage
NtUserCreateLocalMemHandle
NtUserAttachThreadInput
NtGdiCreateHalftonePalette
NtUserPaintMenuBar
NtUserSetKeyboardState
NtGdiCombineTransform
NtUserCreateAcceleratorTable
NtUserGetCursorFrameInfo
NtUserGetAltTabInfo
NtUserGetCaretBlinkTime
NtGdiQueryFontAssocInfo
NtUserProcessConnect
NtUserEnumDisplayDevices
NtUserEmptyClipboard
NtUserGetClipboardData
NtUserRemoveMenu
NtGdiSetBoundsRect
NtGdiGetBitmapDimension
NtUserConvertMemHandle
NtUserDestroyAcceleratorTable
NtUserGetGUIThreadInfo
NtGdiCloseFigure
NtUserSetWindowsHookAW
NtUserSetMenuDefaultItem
NtUserCheckMenuItem
NtUserSetWinEventHook
NtUserUnhookWinEvent
NtUserLockWindowUpdate
NtUserSetSystemMenu
NtUserThunkedMenuInfo
NtGdiBeginPath
NtGdiEndPath
NtGdiFillPath
NtUserCallHwnd
NtUserDdeInitialize
NtUserModifyUserStartupInfoFlags
NtUserCountClipboardFormats
NtGdiAddFontMemResourceEx
NtGdiEqualRgn
NtGdiGetSystemPaletteUse
NtGdiRemoveFontMemResourceEx
NtUserEnumDisplaySettings
NtUserPaintDesktop
NtGdiExtEscape
NtGdiSetBitmapDimension
NtGdiSetFontEnumeration
NtUserChangeClipboardChain
NtUserSetClipboardViewer
NtUserShowWindowAsync
NtGdiCreateColorSpace
NtGdiDeleteColorSpace
NtUserActivateKeyboardLayout
NtBindCompositionSurface
NtCompositionInputThread
NtCreateCompositionInputSink
NtCreateCompositionSurfaceHandle
NtDCompositionAddCrossDeviceVisualChild
NtDCompositionAddVisualChild
NtDCompositionBeginFrame
NtDCompositionCapturePointer
NtDCompositionCommitChannel
NtDCompositionConfirmFrame
NtDCompositionConnectPipe
NtDCompositionCreateAndBindSharedSection
NtDCompositionCreateChannel
NtDCompositionCreateConnection
NtDCompositionCreateDwmChannel
NtDCompositionCreateResource
NtDCompositionCurrentBatchId
NtDCompositionDestroyChannel
NtDCompositionDestroyConnection
NtDCompositionDiscardFrame
NtDCompositionDuplicateHandleToProcess
NtDCompositionDuplicateSwapchainHandleToDwm
NtDCompositionDwmSyncFlush
NtDCompositionGetAnimationTime
NtDCompositionGetChannels
NtDCompositionGetConnectionBatch
NtDCompositionGetDeletedResources
NtDCompositionGetFrameLegacyTokens
NtDCompositionGetFrameStatistics
NtDCompositionGetFrameSurfaceUpdates
NtDCompositionOpenSharedResource
NtDCompositionOpenSharedResourceHandle
NtDCompositionReferenceSharedResourceOnDwmChannel
NtDCompositionRegisterThumbnailVisual
NtDCompositionRegisterVirtualDesktopVisual
NtDCompositionReleaseAllResources
NtDCompositionReleaseResource
NtDCompositionRemoveCrossDeviceVisualChild
NtDCompositionRemoveVisualChild
NtDCompositionReplaceVisualChildren
NtDCompositionRetireFrame
NtDCompositionSetChannelCallbackId
NtDCompositionSetChannelCommitCompletionEvent
NtDCompositionSetDebugCounter
NtDCompositionSetMessageKey
NtDCompositionSetResourceAnimationProperty
NtDCompositionSetResourceBufferProperty
NtDCompositionSetResourceCallbackId
NtDCompositionSetResourceDeletedNotificationTag
NtDCompositionSetResourceFloatProperty
NtDCompositionSetResourceHandleProperty
NtDCompositionSetResourceIntegerProperty
NtDCompositionSetResourceReferenceArrayProperty
NtDCompositionSetResourceReferenceProperty
NtDCompositionSetVisualInputSink
NtDCompositionSignalGpuFence
NtDCompositionSubmitDWMBatch
NtDCompositionSynchronize
NtDCompositionTelemetryAnimationScenarioBegin
NtDCompositionTelemetryAnimationScenarioReference
NtDCompositionTelemetryAnimationScenarioUnreference
NtDCompositionTelemetrySetApplicationId
NtDCompositionTelemetryTouchInteractionBegin
NtDCompositionTelemetryTouchInteractionEnd
NtDCompositionTelemetryTouchInteractionUpdate
NtDCompositionUpdatePointerCapture
NtDCompositionWaitForChannel
NtDesktopCaptureBits
NtDuplicateCompositionInputSink
NtGdiAbortDoc
NtGdiAbortPath
NtGdiAddEmbFontToDC
NtGdiAddFontResourceW
NtGdiAddRemoteFontToDC
NtGdiAddRemoteMMInstanceToDC
NtGdiAngleArc
NtGdiAnyLinkedFonts
NtGdiArcInternal
NtGdiBRUSHOBJ_DeleteRbrush
NtGdiBRUSHOBJ_hGetColorTransform
NtGdiBRUSHOBJ_pvAllocRbrush
NtGdiBRUSHOBJ_pvGetRbrush
NtGdiBRUSHOBJ_ulGetBrushColor
NtGdiBeginGdiRendering
NtGdiCLIPOBJ_bEnum
NtGdiCLIPOBJ_cEnumStart
NtGdiCLIPOBJ_ppoGetPath
NtGdiCancelDC
NtGdiChangeGhostFont
NtGdiCheckBitmapBits
NtGdiClearBitmapAttributes
NtGdiClearBrushAttributes
NtGdiColorCorrectPalette
NtGdiConfigureOPMProtectedOutput
NtGdiConvertMetafileRect
NtGdiCreateBitmapFromDxSurface
NtGdiCreateBitmapFromDxSurface2
NtGdiCreateColorTransform
NtGdiCreateEllipticRgn
NtGdiCreateHatchBrushInternal
NtGdiCreateMetafileDC
NtGdiCreateOPMProtectedOutputs
NtGdiCreateRoundRectRgn
NtGdiCreateServerMetaFile
NtGdiCreateSessionMappedDIBSection
NtGdiD3dContextCreate
NtGdiD3dContextDestroy
NtGdiD3dContextDestroyAll
NtGdiD3dValidateTextureStageState
NtGdiDDCCIGetCapabilitiesString
NtGdiDDCCIGetCapabilitiesStringLength
NtGdiDDCCIGetTimingReport
NtGdiDDCCIGetVCPFeature
NtGdiDDCCISaveCurrentSettings
NtGdiDDCCISetVCPFeature
NtGdiDdAddAttachedSurface
NtGdiDdAlphaBlt
NtGdiDdAttachSurface
NtGdiDdBeginMoCompFrame
NtGdiDdCanCreateD3DBuffer
NtGdiDdColorControl
NtGdiDdCreateD3DBuffer
NtGdiDdCreateDirectDrawObject
NtGdiDdCreateFullscreenSprite
NtGdiDdCreateMoComp
NtGdiDdDDIAbandonSwapChain
NtGdiDdDDIAcquireKeyedMutex
NtGdiDdDDIAcquireKeyedMutex2
NtGdiDdDDIAcquireSwapChain
NtGdiDdDDICacheHybridQueryValue
NtGdiDdDDIChangeVideoMemoryReservation
NtGdiDdDDICheckExclusiveOwnership
NtGdiDdDDICheckMonitorPowerState
NtGdiDdDDICheckMultiPlaneOverlaySupport
NtGdiDdDDICheckMultiPlaneOverlaySupport2
NtGdiDdDDICheckOcclusion
NtGdiDdDDICheckSharedResourceAccess
NtGdiDdDDICheckVidPnExclusiveOwnership
NtGdiDdDDICloseAdapter
NtGdiDdDDIConfigureSharedResource
NtGdiDdDDICreateAllocation
NtGdiDdDDICreateContext
NtGdiDdDDICreateContextVirtual
NtGdiDdDDICreateDCFromMemory
NtGdiDdDDICreateDevice
NtGdiDdDDICreateKeyedMutex
NtGdiDdDDICreateKeyedMutex2
NtGdiDdDDICreateOutputDupl
NtGdiDdDDICreateOverlay
NtGdiDdDDICreatePagingQueue
NtGdiDdDDICreateSwapChain
NtGdiDdDDICreateSynchronizationObject
NtGdiDdDDIDestroyAllocation
NtGdiDdDDIDestroyAllocation2
NtGdiDdDDIDestroyContext
NtGdiDdDDIDestroyDCFromMemory
NtGdiDdDDIDestroyDevice
NtGdiDdDDIDestroyKeyedMutex
NtGdiDdDDIDestroyOutputDupl
NtGdiDdDDIDestroyOverlay
NtGdiDdDDIDestroyPagingQueue
NtGdiDdDDIDestroySynchronizationObject
NtGdiDdDDIEnumAdapters
NtGdiDdDDIEnumAdapters2
NtGdiDdDDIEscape
NtGdiDdDDIEvict
NtGdiDdDDIFlipOverlay
NtGdiDdDDIFreeGpuVirtualAddress
NtGdiDdDDIGetCachedHybridQueryValue
NtGdiDdDDIGetContextInProcessSchedulingPriority
NtGdiDdDDIGetContextSchedulingPriority
NtGdiDdDDIGetDWMVerticalBlankEvent
NtGdiDdDDIGetDeviceState
NtGdiDdDDIGetDisplayModeList
NtGdiDdDDIGetMultisampleMethodList
NtGdiDdDDIGetOverlayState
NtGdiDdDDIGetPresentHistory
NtGdiDdDDIGetPresentQueueEvent
NtGdiDdDDIGetProcessSchedulingPriorityClass
NtGdiDdDDIGetResourcePresentPrivateDriverData
NtGdiDdDDIGetRuntimeData
NtGdiDdDDIGetScanLine
NtGdiDdDDIGetSetSwapChainMetadata
NtGdiDdDDIGetSharedPrimaryHandle
NtGdiDdDDIGetSharedResourceAdapterLuid
NtGdiDdDDIInvalidateActiveVidPn
NtGdiDdDDIInvalidateCache
NtGdiDdDDILock
NtGdiDdDDILock2
NtGdiDdDDIMakeResident
NtGdiDdDDIMapGpuVirtualAddress
NtGdiDdDDINetDispGetNextChunkInfo
NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus
NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport
NtGdiDdDDINetDispStartMiracastDisplayDevice
NtGdiDdDDINetDispStopMiracastDisplayDevice
NtGdiDdDDINetDispStopSessions
NtGdiDdDDIOfferAllocations
NtGdiDdDDIOpenAdapterFromDeviceName
NtGdiDdDDIOpenAdapterFromHdc
NtGdiDdDDIOpenAdapterFromLuid
NtGdiDdDDIOpenKeyedMutex
NtGdiDdDDIOpenKeyedMutex2
NtGdiDdDDIOpenNtHandleFromName
NtGdiDdDDIOpenResource
NtGdiDdDDIOpenResourceFromNtHandle
NtGdiDdDDIOpenSwapChain
NtGdiDdDDIOpenSyncObjectFromNtHandle
NtGdiDdDDIOpenSyncObjectFromNtHandle2
NtGdiDdDDIOpenSyncObjectNtHandleFromName
NtGdiDdDDIOpenSynchronizationObject
NtGdiDdDDIOutputDuplGetFrameInfo
NtGdiDdDDIOutputDuplGetMetaData
NtGdiDdDDIOutputDuplGetPointerShapeData
NtGdiDdDDIOutputDuplPresent
NtGdiDdDDIOutputDuplReleaseFrame
NtGdiDdDDIPinDirectFlipResources
NtGdiDdDDIPollDisplayChildren
NtGdiDdDDIPresent
NtGdiDdDDIPresentMultiPlaneOverlay
NtGdiDdDDIPresentMultiPlaneOverlay2
NtGdiDdDDIQueryAdapterInfo
NtGdiDdDDIQueryAllocationResidency
NtGdiDdDDIQueryClockCalibration
NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName
NtGdiDdDDIQueryResourceInfo
NtGdiDdDDIQueryResourceInfoFromNtHandle
NtGdiDdDDIQueryStatistics
NtGdiDdDDIQueryVideoMemoryInfo
NtGdiDdDDIReclaimAllocations
NtGdiDdDDIReclaimAllocations2
NtGdiDdDDIReleaseKeyedMutex
NtGdiDdDDIReleaseKeyedMutex2
NtGdiDdDDIReleaseProcessVidPnSourceOwners
NtGdiDdDDIReleaseSwapChain
NtGdiDdDDIRender
NtGdiDdDDIReserveGpuVirtualAddress
NtGdiDdDDISetAllocationPriority
NtGdiDdDDISetContextInProcessSchedulingPriority
NtGdiDdDDISetContextSchedulingPriority
NtGdiDdDDISetDisplayMode
NtGdiDdDDISetDisplayPrivateDriverFormat
NtGdiDdDDISetDodIndirectSwapchain
NtGdiDdDDISetGammaRamp
NtGdiDdDDISetProcessSchedulingPriorityClass
NtGdiDdDDISetQueuedLimit
NtGdiDdDDISetStablePowerState
NtGdiDdDDISetStereoEnabled
NtGdiDdDDISetSyncRefreshCountWaitTarget
NtGdiDdDDISetVidPnSourceOwner
NtGdiDdDDISetVidPnSourceOwner1
NtGdiDdDDIShareObjects
NtGdiDdDDISharedPrimaryLockNotification
NtGdiDdDDISharedPrimaryUnLockNotification
NtGdiDdDDISignalSynchronizationObject
NtGdiDdDDISignalSynchronizationObjectFromCpu
NtGdiDdDDISignalSynchronizationObjectFromGpu
NtGdiDdDDISignalSynchronizationObjectFromGpu2
NtGdiDdDDISubmitCommand
NtGdiDdDDIUnlock
NtGdiDdDDIUnlock2
NtGdiDdDDIUnpinDirectFlipResources
NtGdiDdDDIUpdateGpuVirtualAddress
NtGdiDdDDIUpdateOverlay
NtGdiDdDDIWaitForIdle
NtGdiDdDDIWaitForSynchronizationObject
NtGdiDdDDIWaitForSynchronizationObjectFromCpu
NtGdiDdDDIWaitForSynchronizationObjectFromGpu
NtGdiDdDDIWaitForVerticalBlankEvent
NtGdiDdDDIWaitForVerticalBlankEvent2
NtGdiDdDeleteDirectDrawObject
NtGdiDdDestroyD3DBuffer
NtGdiDdDestroyFullscreenSprite
NtGdiDdDestroyMoComp
NtGdiDdEndMoCompFrame
NtGdiDdFlip
NtGdiDdFlipToGDISurface
NtGdiDdGetAvailDriverMemory
NtGdiDdGetBltStatus
NtGdiDdGetDC
NtGdiDdGetDriverInfo
NtGdiDdGetDriverState
NtGdiDdGetDxHandle
NtGdiDdGetFlipStatus
NtGdiDdGetInternalMoCompInfo
NtGdiDdGetMoCompBuffInfo
NtGdiDdGetMoCompFormats
NtGdiDdGetMoCompGuids
NtGdiDdGetScanLine
NtGdiDdLock
NtGdiDdNotifyFullscreenSpriteUpdate
NtGdiDdQueryDirectDrawObject
NtGdiDdQueryMoCompStatus
NtGdiDdQueryVisRgnUniqueness
NtGdiDdReenableDirectDrawObject
NtGdiDdReleaseDC
NtGdiDdRenderMoComp
NtGdiDdSetColorKey
NtGdiDdSetExclusiveMode
NtGdiDdSetGammaRamp
NtGdiDdSetOverlayPosition
NtGdiDdUnattachSurface
NtGdiDdUnlock
NtGdiDdUpdateOverlay
NtGdiDdWaitForVerticalBlank
NtGdiDeleteColorTransform
NtGdiDescribePixelFormat
NtGdiDestroyOPMProtectedOutput
NtGdiDestroyPhysicalMonitor
NtGdiDoBanding
NtGdiDrawEscape
NtGdiDvpAcquireNotification
NtGdiDvpCanCreateVideoPort
NtGdiDvpColorControl
NtGdiDvpCreateVideoPort
NtGdiDvpDestroyVideoPort
NtGdiDvpFlipVideoPort
NtGdiDvpGetVideoPortBandwidth
NtGdiDvpGetVideoPortConnectInfo
NtGdiDvpGetVideoPortField
NtGdiDvpGetVideoPortFlipStatus
NtGdiDvpGetVideoPortInputFormats
NtGdiDvpGetVideoPortLine
NtGdiDvpGetVideoPortOutputFormats
NtGdiDvpGetVideoSignalStatus
NtGdiDvpReleaseNotification
NtGdiDvpUpdateVideoPort
NtGdiDvpWaitForVideoPortSync
NtGdiDwmCreatedBitmapRemotingOutput
NtGdiDxgGenericThunk
NtGdiEllipse
NtGdiEnableEudc
NtGdiEndDoc
NtGdiEndGdiRendering
NtGdiEndPage
NtGdiEngAlphaBlend
NtGdiEngAssociateSurface
NtGdiEngBitBlt
NtGdiEngCheckAbort
NtGdiEngComputeGlyphSet
NtGdiEngCopyBits
NtGdiEngCreateBitmap
NtGdiEngCreateClip
NtGdiEngCreateDeviceBitmap
NtGdiEngCreateDeviceSurface
NtGdiEngCreatePalette
NtGdiEngDeleteClip
NtGdiEngDeletePalette
NtGdiEngDeletePath
NtGdiEngDeleteSurface
NtGdiEngEraseSurface
NtGdiEngFillPath
NtGdiEngGradientFill
NtGdiEngLineTo
NtGdiEngLockSurface
NtGdiEngMarkBandingSurface
NtGdiEngPaint
NtGdiEngPlgBlt
NtGdiEngStretchBlt
NtGdiEngStretchBltROP
NtGdiEngStrokeAndFillPath
NtGdiEngStrokePath
NtGdiEngTextOut
NtGdiEngTransparentBlt
NtGdiEngUnlockSurface
NtGdiEnumFonts
NtGdiEnumObjects
NtGdiEudcLoadUnloadLink
NtGdiExtFloodFill
NtGdiFONTOBJ_cGetAllGlyphHandles
NtGdiFONTOBJ_cGetGlyphs
NtGdiFONTOBJ_pQueryGlyphAttrs
NtGdiFONTOBJ_pfdg
NtGdiFONTOBJ_pifi
NtGdiFONTOBJ_pvTrueTypeFontFile
NtGdiFONTOBJ_pxoGetXform
NtGdiFONTOBJ_vGetInfo
NtGdiFlattenPath
NtGdiFontIsLinked
NtGdiForceUFIMapping
NtGdiFrameRgn
NtGdiFullscreenControl
NtGdiGetBitmapDpiScaleValue
NtGdiGetBoundsRect
NtGdiGetCOPPCompatibleOPMInformation
NtGdiGetCertificate
NtGdiGetCertificateSize
NtGdiGetCharABCWidthsW
NtGdiGetCharacterPlacementW
NtGdiGetColorAdjustment
NtGdiGetColorSpaceforBitmap
NtGdiGetCurrentDpiInfo
NtGdiGetDCDpiScaleValue
NtGdiGetDeviceCaps
NtGdiGetDeviceCapsAll
NtGdiGetDeviceGammaRamp
NtGdiGetDeviceWidth
NtGdiGetDhpdev
NtGdiGetETM
NtGdiGetEmbUFI
NtGdiGetEmbedFonts
NtGdiGetEudcTimeStampEx
NtGdiGetFontFileData
NtGdiGetFontFileInfo
NtGdiGetFontResourceInfoInternalW
NtGdiGetFontUnicodeRanges
NtGdiGetGlyphIndicesW
NtGdiGetGlyphIndicesWInternal
NtGdiGetGlyphOutline
NtGdiGetKerningPairs
NtGdiGetLinkedUFIs
NtGdiGetMiterLimit
NtGdiGetMonitorID
NtGdiGetNumberOfPhysicalMonitors
NtGdiGetOPMInformation
NtGdiGetOPMRandomNumber
NtGdiGetObjectBitmapHandle
NtGdiGetPath
NtGdiGetPerBandInfo
NtGdiGetPhysicalMonitorDescription
NtGdiGetPhysicalMonitors
NtGdiGetRealizationInfo
NtGdiGetServerMetaFileBits
NtGdiGetSpoolMessage
NtGdiGetStats
NtGdiGetStringBitmapW
NtGdiGetSuggestedOPMProtectedOutputArraySize
NtGdiGetTextExtentExW
NtGdiGetUFI
NtGdiGetUFIPathname
NtGdiGradientFill
NtGdiHLSurfGetInformation
NtGdiHLSurfSetInformation
NtGdiHT_Get8BPPFormatPalette
NtGdiHT_Get8BPPMaskPalette
NtGdiIcmBrushInfo
NtGdiInit
NtGdiInitSpool
NtGdiMakeFontDir
NtGdiMakeInfoDC
NtGdiMakeObjectUnXferable
NtGdiMakeObjectXferable
NtGdiMirrorWindowOrg
NtGdiMonoBitmap
NtGdiMoveTo
NtGdiOffsetClipRgn
NtGdiPATHOBJ_bEnum
NtGdiPATHOBJ_bEnumClipLines
NtGdiPATHOBJ_vEnumStart
NtGdiPATHOBJ_vEnumStartClipLines
NtGdiPATHOBJ_vGetBounds
NtGdiPathToRegion
NtGdiPlgBlt
NtGdiPolyDraw
NtGdiPolyTextOutW
NtGdiPtInRegion
NtGdiPtVisible
NtGdiQueryFonts
NtGdiRemoveFontResourceW
NtGdiRemoveMergeFont
NtGdiResetDC
NtGdiResizePalette
NtGdiRoundRect
NtGdiSTROBJ_bEnum
NtGdiSTROBJ_bEnumPositionsOnly
NtGdiSTROBJ_bGetAdvanceWidths
NtGdiSTROBJ_dwGetCodePage
NtGdiSTROBJ_vEnumStart
NtGdiScaleRgn
NtGdiScaleValues
NtGdiScaleViewportExtEx
NtGdiScaleWindowExtEx
NtGdiSelectBrush
NtGdiSelectClipPath
NtGdiSelectPen
NtGdiSetBitmapAttributes
NtGdiSetBrushAttributes
NtGdiSetColorAdjustment
NtGdiSetColorSpace
NtGdiSetDeviceGammaRamp
NtGdiSetFontXform
NtGdiSetIcmMode
NtGdiSetLinkedUFIs
NtGdiSetMagicColors
NtGdiSetOPMSigningKeyAndSequenceNumbers
NtGdiSetPUMPDOBJ
NtGdiSetPixelFormat
NtGdiSetRectRgn
NtGdiSetSizeDevice
NtGdiSetSystemPaletteUse
NtGdiSetTextJustification
NtGdiSetUMPDSandboxState
NtGdiStartDoc
NtGdiStartPage
NtGdiStrokeAndFillPath
NtGdiStrokePath
NtGdiSwapBuffers
NtGdiTransparentBlt
NtGdiUMPDEngFreeUserMem
NtGdiUnloadPrinterDriver
NtGdiUnmapMemFont
NtGdiUpdateColors
NtGdiUpdateTransform
NtGdiWidenPath
NtGdiXFORMOBJ_bApplyXform
NtGdiXFORMOBJ_iGetXform
NtGdiXLATEOBJ_cGetPalette
NtGdiXLATEOBJ_hGetColorTransform
NtGdiXLATEOBJ_iXlate
NtNotifyPresentToCompositionSurface
NtOpenCompositionSurfaceDirtyRegion
NtOpenCompositionSurfaceSectionInfo
NtOpenCompositionSurfaceSwapChainHandleInfo
NtQueryCompositionInputQueueAndTransform
NtQueryCompositionInputSink
NtQueryCompositionInputSinkLuid
NtQueryCompositionSurfaceBinding
NtQueryCompositionSurfaceRenderingRealization
NtQueryCompositionSurfaceStatistics
NtRIMAddInputObserver
NtRIMDisableInputObservers
NtRIMEnableInputObservers
NtRIMGetDevicePreparsedDataLockfree
NtRIMObserveNextInput
NtRIMRemoveInputObserver
NtRIMUpdateInputObserverRegistration
NtSetCompositionSurfaceBufferCompositionMode
NtSetCompositionSurfaceIndependentFlipInfo
NtSetCompositionSurfaceOutOfFrameDirectFlipNotification
NtSetCompositionSurfaceStatistics
NtTokenManagerCreateCompositionTokenHandle
NtTokenManagerDeleteOutstandingDirectFlipTokens
NtTokenManagerGetOutOfFrameDirectFlipSurfaceUpdates
NtTokenManagerOpenSectionAndEvents
NtTokenManagerThread
NtUnBindCompositionSurface
NtUpdateInputSinkTransforms
NtUserAcquireIAMKey
NtUserAddClipboardFormatListener
NtUserAssociateInputContext
NtUserAutoPromoteMouseInPointer
NtUserAutoRotateScreen
NtUserBlockInput
NtUserBuildHimcList
NtUserBuildPropList
NtUserCalculatePopupWindowPosition
NtUserCallHwndOpt
NtUserCanBrokerForceForeground
NtUserChangeDisplaySettings
NtUserChangeWindowMessageFilterEx
NtUserCheckAccessForIntegrityLevel
NtUserCheckProcessForClipboardAccess
NtUserCheckProcessSession
NtUserCheckWindowThreadDesktop
NtUserChildWindowFromPointEx
NtUserClearForeground
NtUserClipCursor
NtUserCompositionInputSinkLuidFromPoint
NtUserCreateDCompositionHwndTarget
NtUserCreateDesktopEx
NtUserCreateInputContext
NtUserCreateWindowStation
NtUserCtxDisplayIOCtl
NtUserDeferWindowPosAndBand
NtUserDelegateCapturePointers
NtUserDelegateInput
NtUserDestroyDCompositionHwndTarget
NtUserDestroyInputContext
NtUserDisableImmersiveOwner
NtUserDisableProcessWindowFiltering
NtUserDisableThreadIme
NtUserDiscardPointerFrameMessages
NtUserDisplayConfigGetDeviceInfo
NtUserDisplayConfigSetDeviceInfo
NtUserDoSoundConnect
NtUserDoSoundDisconnect
NtUserDragDetect
NtUserDragObject
NtUserDrawAnimatedRects
NtUserDrawCaption
NtUserDrawCaptionTemp
NtUserDrawMenuBarTemp
NtUserDwmGetRemoteSessionOcclusionEvent
NtUserDwmGetRemoteSessionOcclusionState
NtUserDwmKernelShutdown
NtUserDwmKernelStartup
NtUserDwmValidateWindow
NtUserEnableChildWindowDpiMessage
NtUserEnableIAMAccess
NtUserEnableMouseInPointer
NtUserEnableMouseInputForCursorSuppression
NtUserEnableTouchPad
NtUserEndMenu
NtUserEvent
NtUserFlashWindowEx
NtUserFrostCrashedWindow
NtUserGetAppImeLevel
NtUserGetAutoRotationState
NtUserGetCIMSSM
NtUserGetCaretPos
NtUserGetClipCursor
NtUserGetClipboardAccessToken
NtUserGetClipboardViewer
NtUserGetComboBoxInfo
NtUserGetCurrentInputMessageSource
NtUserGetCursorDims
NtUserGetCursorInfo
NtUserGetDManipHookInitFunction
NtUserGetDesktopID
NtUserGetDisplayAutoRotationPreferences
NtUserGetDisplayAutoRotationPreferencesByProcessId
NtUserGetDisplayConfigBufferSizes
NtUserGetDpiForMonitor
NtUserGetDpiSystemMetrics
NtUserGetGestureConfig
NtUserGetGestureExtArgs
NtUserGetGestureInfo
NtUserGetGuiResources
NtUserGetHimetricScaleFactorFromPixelLocation
NtUserGetImeHotKey
NtUserGetImeInfoEx
NtUserGetInputLocaleInfo
NtUserGetInternalWindowPos
NtUserGetKeyNameText
NtUserGetKeyboardLayoutName
NtUserGetLayeredWindowAttributes
NtUserGetListBoxInfo
NtUserGetMenuIndex
NtUserGetMenuItemRect
NtUserGetMouseMovePointsEx
NtUserGetPhysicalDeviceRect
NtUserGetPointerCursorId
NtUserGetPointerDevice
NtUserGetPointerDeviceCursors
NtUserGetPointerDeviceProperties
NtUserGetPointerDeviceRects
NtUserGetPointerDevices
NtUserGetPointerFrameArrivalTimes
NtUserGetPointerInfoList
NtUserGetPointerInputTransform
NtUserGetPointerType
NtUserGetPrecisionTouchPadConfiguration
NtUserGetPriorityClipboardFormat
NtUserGetProcessDpiAwareness
NtUserGetProcessUIContextInformation
NtUserGetQueueEventStatus
NtUserGetRawInputBuffer
NtUserGetRawInputData
NtUserGetRawInputDeviceInfo
NtUserGetRawInputDeviceList
NtUserGetRawPointerDeviceData
NtUserGetRegisteredRawInputDevices
NtUserGetTopLevelWindow
NtUserGetTouchInputInfo
NtUserGetTouchValidationStatus
NtUserGetUpdatedClipboardFormats
NtUserGetWOWClass
NtUserGetWindowBand
NtUserGetWindowCompositionAttribute
NtUserGetWindowCompositionInfo
NtUserGetWindowDisplayAffinity
NtUserGetWindowFeedbackSetting
NtUserGetWindowMinimizeRect
NtUserGetWindowRgnEx
NtUserGhostWindowFromHungWindow
NtUserHandleDelegatedInput
NtUserHardErrorControl
NtUserHidePointerContactVisualization
NtUserHiliteMenuItem
NtUserHungWindowFromGhostWindow
NtUserHwndQueryRedirectionInfo
NtUserHwndSetRedirectionInfo
NtUserImpersonateDdeClientWindow
NtUserInitTask
NtUserInitialize
NtUserInitializeClientPfnArrays
NtUserInitializeInputDeviceInjection
NtUserInitializePointerDeviceInjection
NtUserInitializeTouchInjection
NtUserInjectDeviceInput
NtUserInjectGesture
NtUserInjectKeyboardInput
NtUserInjectMouseInput
NtUserInjectPointerInput
NtUserInjectTouchInput
NtUserInternalClipCursor
NtUserInternalGetWindowIcon
NtUserIsChildWindowDpiMessageEnabled
NtUserIsMouseInPointerEnabled
NtUserIsMouseInputEnabled
NtUserIsTopLevelWindow
NtUserIsTouchWindow
NtUserLayoutCompleted
NtUserLinkDpiCursor
NtUserLoadKeyboardLayoutEx
NtUserLockWindowStation
NtUserLockWorkStation
NtUserLogicalToPerMonitorDPIPhysicalPoint
NtUserLogicalToPhysicalPoint
NtUserMNDragLeave
NtUserMNDragOver
NtUserMagControl
NtUserMagGetContextInformation
NtUserMagSetContextInformation
NtUserMenuItemFromPoint
NtUserMinMaximize
NtUserModifyWindowTouchCapability
NtUserNotifyIMEStatus
NtUserOpenInputDesktop
NtUserOpenThreadDesktop
NtUserPaintMonitor
NtUserPerMonitorDPIPhysicalToLogicalPoint
NtUserPhysicalToLogicalPoint
NtUserPrintWindow
NtUserPromoteMouseInPointer
NtUserPromotePointer
NtUserQueryBSDRWindow
NtUserQueryDisplayConfig
NtUserQueryInformationThread
NtUserQueryInputContext
NtUserQuerySendMessage
NtUserRealChildWindowFromPoint
NtUserRealWaitMessageEx
NtUserRegisterBSDRWindow
NtUserRegisterDManipHook
NtUserRegisterEdgy
NtUserRegisterErrorReportingDialog
NtUserRegisterHotKey
NtUserRegisterManipulationThread
NtUserRegisterPointerDeviceNotifications
NtUserRegisterPointerInputTarget
NtUserRegisterRawInputDevices
NtUserRegisterServicesProcess
NtUserRegisterSessionPort
NtUserRegisterShellPTPListener
NtUserRegisterTasklist
NtUserRegisterTouchHitTestingWindow
NtUserRegisterTouchPadCapable
NtUserRegisterUserApiHook
NtUserReleaseDwmHitTestWaiters
NtUserRemoteConnect
NtUserRemoteRedrawRectangle
NtUserRemoteRedrawScreen
NtUserRemoteStopScreenUpdates
NtUserRemoveClipboardFormatListener
NtUserReportInertia
NtUserResolveDesktopForWOW
NtUserSendEventMessage
NtUserSetActivationFilter
NtUserSetActiveProcessForMonitor
NtUserSetAppImeLevel
NtUserSetAutoRotation
NtUserSetBrokeredForeground
NtUserSetCalibrationData
NtUserSetChildWindowNoActivate
NtUserSetClassWord
NtUserSetCoreWindow
NtUserSetCursorContents
NtUserSetDisplayAutoRotationPreferences
NtUserSetDisplayConfig
NtUserSetDisplayMapping
NtUserSetFallbackForeground
NtUserSetFeatureReportResponse
NtUserSetGestureConfig
NtUserSetImeHotKey
NtUserSetImeInfoEx
NtUserSetImeOwnerWindow
NtUserSetImmersiveBackgroundWindow
NtUserSetInternalWindowPos
NtUserSetLayeredWindowAttributes
NtUserSetManipulationInputTarget
NtUserSetMenu
NtUserSetMenuContextHelpId
NtUserSetMenuFlagRtoL
NtUserSetMirrorRendering
NtUserSetObjectInformation
NtUserSetPrecisionTouchPadConfiguration
NtUserSetProcessDpiAwareness
NtUserSetProcessRestrictionExemption
NtUserSetProcessUIAccessZorder
NtUserSetShellWindowEx
NtUserSetSysColors
NtUserSetSystemCursor
NtUserSetSystemTimer
NtUserSetThreadInputBlocked
NtUserSetThreadLayoutHandles
NtUserSetWindowArrangement
NtUserSetWindowBand
NtUserSetWindowCompositionAttribute
NtUserSetWindowCompositionTransition
NtUserSetWindowDisplayAffinity
NtUserSetWindowFeedbackSetting
NtUserSetWindowRgnEx
NtUserSetWindowStationUser
NtUserShowSystemCursor
NtUserShutdownBlockReasonCreate
NtUserShutdownBlockReasonQuery
NtUserShutdownReasonDestroy
NtUserSignalRedirectionStartComplete
NtUserSlicerControl
NtUserSoundSentry
NtUserSwitchDesktop
NtUserTestForInteractiveUser
NtUserTrackPopupMenuEx
NtUserTransformPoint
NtUserTransformRect
NtUserUndelegateInput
NtUserUnloadKeyboardLayout
NtUserUnlockWindowStation
NtUserUnregisterHotKey
NtUserUnregisterSessionPort
NtUserUnregisterUserApiHook
NtUserUpdateDefaultDesktopThumbnail
NtUserUpdateInputContext
NtUserUpdateInstance
NtUserUpdateLayeredWindow
NtUserUpdatePerUserSystemParameters
NtUserUpdateWindowInputSinkHints
NtUserUpdateWindowTransform
NtUserUserHandleGrantAccess
NtUserValidateHandleSecure
NtUserWaitAvailableMessageEx
NtUserWaitForInputIdle
NtUserWaitForMsgAndEvent
NtUserWaitForRedirectionStartComplete
NtUserWindowFromPhysicalPoint
NtValidateCompositionSurfaceHandle
NtUserSetClassLongPtr
NtUserSetWindowLongPtr

wincheck rc8.52

lsasrv.dll!LsapLoadLsaDbExtensionDll

$
0
0
It seems that since windows8 lsasrv.dll allows you to load some arbitrary .dll inside lsass process.
Let`s check function LsapLoadLsaDbExtensionDll:

  lea   eax, [ebp+LibFileName]
  push  eax
  push  0
  push  6
  push  offset aLsadbextpt              ; "LsaDbExtPt"
  push  offset aSystemCurrentc          ; "SYSTEM\\CurrentControlSet\\Services\\NTDS"
  push  80000002h
  call  ds:__imp__RegGetValueW@28       ; RegGetValueW(x,x,x,x,x,x,x)
  test  eax, eax
  jz    loc_509D269B
...

loc_509D269B:                          
  push  8                               ; dwFlags
  push  0                               ; hFile
  lea   eax, [ebp+LibFileName]
  push  eax                             ; lpLibFileName
  call  ds:__imp__LoadLibraryExW@12     ; LoadLibraryExW(x,x,x)
  mov   edi, eax
  test  edi, edi
  jz    loc_509342CB
  push  offset aInitializelsad          ; "InitializeLsaDbExtension"
  push  edi                             ; hModule
  call  ds:__imp__GetProcAddress@8      ; GetProcAddress(x,x)
  mov   esi, eax
  test  esi, esi
  jnz   short loc_509D26D2
  mov   esi, STATUS_ENTRYPOINT_NOT_FOUND
  jmp   loc_509342CB
...

loc_509D26D2:                          
  mov   eax, large fs:30h
  push  150h
  push  0
  push  dword ptr [eax+18h]
  call  ds:__imp__RtlAllocateHeap@12    ; RtlAllocateHeap(x,x,x)
  mov   ebx, eax
  test  ebx, ebx
  jnz   short loc_509D26F8
  mov   esi, STATUS_NO_MEMORY
  jmp   loc_509342CB
...

  push  ebx
  call  esi
  mov   esi, eax
  test  esi, esi
  js    loc_509342CB
  push  0                               ; Comperand
  push  ebx                             ; Exchange
  push  offset _g_pLsaExtensionTableLsaDb ; Destination
  call  ds:__imp__InterlockedCompareExchange@12 ; InterlockedCompareExchange(x,x,x)
  test  eax, eax
  jnz   loc_50954E98
This code reads value of (undocumented) key LsaDbExtPt from SYSTEM\CurrentControlSet\Services\NTDS, load dll whose name located in this key, allocates some memory (size 0x150, in x64 0x2A0) and call exported function InitializeLsaDbExtension
Check how this g_pLsaExtensionTableLsaDb used:
loc_509DEB4D:                           ; CODE XREF: LsarLookupPrivilegeValue_notify()+7 j
  mov   eax, _g_pLsaExtensionTableLsaDb
  push  offset aLsarlookuppr_1          ; "LsarLookupPrivilegeValue"
  call  dword ptr [eax+9Ch]
  retn

It seems that this is just table with functions pointers

wincheck rc8.53

Viewing all 264 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>