Quantcast
Channel: windows deep internals
Viewing all 264 articles
Browse latest View live
↧

W32pServiceTable from windows 10 build 10586 64bit

November 18, 2015, 1:04 pm
$
0
0
W32pServiceLimit .eq. 0x46F

NtUserGetOwnerTransformedMonitorRect
NtUserYieldTask
NtUserSetSensorPresence
NtUserGetThreadState
NtUserPeekMessage
NtUserCallOneParam
NtUserGetKeyState
NtUserInvalidateRect
NtUserCallNoParam
NtUserGetMessage
NtUserMessageCall
NtGdiBitBlt
NtGdiGetCharSet
NtUserGetDC
NtGdiSelectBitmap
NtUserWaitMessage
NtUserTranslateMessage
NtUserGetProp
NtUserPostMessage
NtUserQueryWindow
NtUserTranslateAccelerator
NtGdiFlush
NtUserRedrawWindow
NtUserWindowFromPoint
NtUserCallMsgFilter
NtUserValidateTimerCallback
NtUserBeginPaint
NtUserSetTimer
NtUserEndPaint
NtUserSetCursor
NtUserKillTimer
NtUserBuildHwndList
NtUserSelectPalette
NtUserCallNextHookEx
NtUserHideCaret
NtGdiIntersectClipRect
NtUserCallHwndLock
NtUserGetProcessWindowStation
NtGdiDeleteObjectApp
NtUserSetWindowPos
NtUserShowCaret
NtUserEndDeferWindowPosEx
NtUserCallHwndParamLock
NtUserVkKeyScanEx
NtGdiSetDIBitsToDeviceInternal
NtUserCallTwoParam
NtGdiGetRandomRgn
NtUserCopyAcceleratorTable
NtUserNotifyWinEvent
NtGdiExtSelectClipRgn
NtUserIsClipboardFormatAvailable
NtUserSetScrollInfo
NtGdiStretchBlt
NtUserCreateCaret
NtGdiRectVisible
NtGdiCombineRgn
NtGdiGetDCObject
NtUserDispatchMessage
NtUserRegisterWindowMessage
NtGdiExtTextOutW
NtGdiSelectFont
NtGdiRestoreDC
NtGdiSaveDC
NtUserGetForegroundWindow
NtUserShowScrollBar
NtUserFindExistingCursorIcon
NtGdiGetDCDword
NtGdiGetRegionData
NtGdiLineTo
NtUserSystemParametersInfo
NtGdiGetAppClipBox
NtUserGetAsyncKeyState
NtUserGetCPD
NtUserRemoveProp
NtGdiDoPalette
NtGdiPolyPolyDraw
NtUserSetCapture
NtUserEnumDisplayMonitors
NtGdiCreateCompatibleBitmap
NtUserSetProp
NtGdiGetTextCharsetInfo
NtUserSBGetParms
NtUserGetIconInfo
NtUserExcludeUpdateRgn
NtUserSetFocus
NtGdiExtGetObjectW
NtUserGetUpdateRect
NtGdiCreateCompatibleDC
NtUserGetClipboardSequenceNumber
NtGdiCreatePen
NtUserShowWindow
NtUserGetKeyboardLayoutList
NtGdiPatBlt
NtUserMapVirtualKeyEx
NtUserSetWindowLong
NtGdiHfontCreate
NtUserMoveWindow
NtUserPostThreadMessage
NtUserDrawIconEx
NtUserGetSystemMenu
NtGdiDrawStream
NtUserInternalGetWindowText
NtUserGetWindowDC
NtGdiD3dDrawPrimitives2
NtGdiInvertRgn
NtGdiGetRgnBox
NtGdiGetAndSetDCDword
NtGdiMaskBlt
NtGdiGetWidthTable
NtUserScrollDC
NtUserGetObjectInformation
NtGdiCreateBitmap
NtUserFindWindowEx
NtGdiPolyPatBlt
NtUserUnhookWindowsHookEx
NtGdiGetNearestColor
NtGdiTransformPoints
NtGdiGetDCPoint
NtGdiCreateDIBBrush
NtGdiGetTextMetricsW
NtUserCreateWindowEx
NtUserSetParent
NtUserGetKeyboardState
NtUserToUnicodeEx
NtUserGetControlBrush
NtUserGetClassName
NtGdiAlphaBlend
NtGdiDdBlt
NtGdiOffsetRgn
NtUserDefSetText
NtGdiGetTextFaceW
NtGdiStretchDIBitsInternal
NtUserSendInput
NtUserGetThreadDesktop
NtGdiCreateRectRgn
NtGdiGetDIBitsInternal
NtUserGetUpdateRgn
NtGdiDeleteClientObj
NtUserGetIconSize
NtUserFillWindow
NtGdiExtCreateRegion
NtGdiComputeXformCoefficients
NtUserSetWindowsHookEx
NtUserNotifyProcessCreate
NtGdiUnrealizeObject
NtUserGetTitleBarInfo
NtGdiRectangle
NtUserSetThreadDesktop
NtUserGetDCEx
NtUserGetScrollBarInfo
NtGdiGetTextExtent
NtUserSetWindowFNID
NtGdiSetLayout
NtUserCalcMenuBar
NtUserThunkedMenuItemInfo
NtGdiExcludeClipRect
NtGdiCreateDIBSection
NtGdiGetDCforBitmap
NtUserDestroyCursor
NtUserDestroyWindow
NtUserCallHwndParam
NtGdiCreateDIBitmapInternal
NtUserOpenWindowStation
NtGdiDdDeleteSurfaceObject
NtGdiDdCanCreateSurface
NtGdiDdCreateSurface
NtUserSetCursorIconData
NtGdiDdDestroySurface
NtUserCloseDesktop
NtUserOpenDesktop
NtUserSetProcessWindowStation
NtUserGetAtomName
NtGdiDdResetVisrgn
NtGdiExtCreatePen
NtGdiCreatePaletteInternal
NtGdiSetBrushOrg
NtUserBuildNameList
NtGdiSetPixel
NtUserRegisterClassExWOW
NtGdiCreatePatternBrushInternal
NtUserGetAncestor
NtGdiGetOutlineTextMetricsInternalW
NtGdiSetBitmapBits
NtUserCloseWindowStation
NtUserGetDoubleClickTime
NtUserEnableScrollBar
NtGdiCreateSolidBrush
NtUserGetClassInfoEx
NtGdiCreateClientObj
NtUserUnregisterClass
NtUserDeleteMenu
NtGdiRectInRegion
NtUserScrollWindowEx
NtGdiGetPixel
NtUserSetClassLong
NtUserGetMenuBarInfo
NtGdiDdCreateSurfaceEx
NtGdiDdCreateSurfaceObject
NtGdiGetNearestPaletteIndex
NtGdiDdLockD3D
NtGdiDdUnlockD3D
NtGdiGetCharWidthW
NtUserInvalidateRgn
NtUserGetClipboardOwner
NtUserSetWindowRgn
NtUserBitBltSysBmp
NtGdiGetCharWidthInfo
NtUserValidateRect
NtUserCloseClipboard
NtUserOpenClipboard
NtGdiGetStockObject
NtUserSetClipboardData
NtUserEnableMenuItem
NtUserAlterWindowStyle
NtGdiFillRgn
NtUserGetWindowPlacement
NtGdiModifyWorldTransform
NtGdiGetFontData
NtUserGetOpenClipboardWindow
NtUserSetThreadState
NtGdiOpenDCW
NtUserTrackMouseEvent
NtGdiGetTransform
NtUserDestroyMenu
NtGdiGetBitmapBits
NtUserConsoleControl
NtUserSetActiveWindow
NtUserSetInformationThread
NtUserSetWindowPlacement
NtUserGetControlColor
NtGdiSetMetaRgn
NtGdiSetMiterLimit
NtGdiSetVirtualResolution
NtGdiGetRasterizerCaps
NtUserSetWindowWord
NtUserGetClipboardFormatName
NtUserRealInternalGetMessage
NtUserCreateLocalMemHandle
NtUserAttachThreadInput
NtGdiCreateHalftonePalette
NtUserPaintMenuBar
NtUserSetKeyboardState
NtGdiCombineTransform
NtUserCreateAcceleratorTable
NtUserGetCursorFrameInfo
NtUserGetAltTabInfo
NtUserGetCaretBlinkTime
NtGdiQueryFontAssocInfo
NtUserProcessConnect
NtUserEnumDisplayDevices
NtUserEmptyClipboard
NtUserGetClipboardData
NtUserRemoveMenu
NtGdiSetBoundsRect
NtGdiGetBitmapDimension
NtUserConvertMemHandle
NtUserDestroyAcceleratorTable
NtUserGetGUIThreadInfo
NtGdiCloseFigure
NtUserSetWindowsHookAW
NtUserSetMenuDefaultItem
NtUserCheckMenuItem
NtUserSetWinEventHook
NtUserUnhookWinEvent
NtUserLockWindowUpdate
NtUserSetSystemMenu
NtUserThunkedMenuInfo
NtGdiBeginPath
NtGdiEndPath
NtGdiFillPath
NtUserCallHwnd
NtUserDdeInitialize
NtUserModifyUserStartupInfoFlags
NtUserCountClipboardFormats
NtGdiAddFontMemResourceEx
NtGdiEqualRgn
NtGdiGetSystemPaletteUse
NtGdiRemoveFontMemResourceEx
NtUserEnumDisplaySettings
NtUserPaintDesktop
NtGdiExtEscape
NtGdiSetBitmapDimension
NtGdiSetFontEnumeration
NtUserChangeClipboardChain
NtUserSetClipboardViewer
NtUserShowWindowAsync
NtGdiCreateColorSpace
NtGdiDeleteColorSpace
NtUserActivateKeyboardLayout
NtBindCompositionSurface
NtCompositionInputThread
NtCompositionSetDropTarget
NtCreateCompositionInputSink
NtCreateCompositionSurfaceHandle
NtCreateImplicitCompositionInputSink
NtDCompositionAddCrossDeviceVisualChild
NtDCompositionAddVisualChild
NtDCompositionAttachMouseWheelToHwnd
NtDCompositionBeginFrame
NtDCompositionCapturePointer
NtDCompositionCommitChannel
NtDCompositionConfirmFrame
NtDCompositionConnectPipe
NtDCompositionCreateAndBindSharedSection
NtDCompositionCreateChannel
NtDCompositionCreateConnection
NtDCompositionCreateDwmChannel
NtDCompositionCreateResource
NtDCompositionCurrentBatchId
NtDCompositionDestroyChannel
NtDCompositionDestroyConnection
NtDCompositionDiscardFrame
NtDCompositionDuplicateHandleToProcess
NtDCompositionDuplicateSwapchainHandleToDwm
NtDCompositionEnableDDASupport
NtDCompositionEnableMMCSS
NtDCompositionGetAnimationTime
NtDCompositionGetChannels
NtDCompositionGetConnectionBatch
NtDCompositionGetDeletedResources
NtDCompositionGetFrameLegacyTokens
NtDCompositionGetFrameStatistics
NtDCompositionGetFrameSurfaceUpdates
NtDCompositionOpenSharedResource
NtDCompositionOpenSharedResourceHandle
NtDCompositionReferenceSharedResourceOnDwmChannel
NtDCompositionRegisterThumbnailVisual
NtDCompositionRegisterVirtualDesktopVisual
NtDCompositionReleaseAllResources
NtDCompositionReleaseResource
NtDCompositionRemoveCrossDeviceVisualChild
NtDCompositionRemoveVisualChild
NtDCompositionReplaceVisualChildren
NtDCompositionRetireFrame
NtDCompositionSetChannelCallbackId
NtDCompositionSetChannelCommitCompletionEvent
NtDCompositionSetDebugCounter
NtDCompositionSetResourceAnimationProperty
NtDCompositionSetResourceBufferProperty
NtDCompositionSetResourceCallbackId
NtDCompositionSetResourceDeletedNotificationTag
NtDCompositionSetResourceFloatProperty
NtDCompositionSetResourceHandleProperty
NtDCompositionSetResourceIntegerProperty
NtDCompositionSetResourceReferenceArrayProperty
NtDCompositionSetResourceReferenceProperty
NtDCompositionSetVisualInputSink
NtDCompositionSubmitDWMBatch
NtDCompositionSynchronize
NtDCompositionTelemetryAnimationScenarioBegin
NtDCompositionTelemetryAnimationScenarioReference
NtDCompositionTelemetryAnimationScenarioUnreference
NtDCompositionTelemetrySetApplicationId
NtDCompositionTelemetryTouchInteractionBegin
NtDCompositionTelemetryTouchInteractionEnd
NtDCompositionTelemetryTouchInteractionUpdate
NtDCompositionUpdatePointerCapture
NtDCompositionWaitForChannel
NtDesktopCaptureBits
NtDuplicateCompositionInputSink
NtGdiAbortDoc
NtGdiAbortPath
NtGdiAddEmbFontToDC
NtGdiAddFontResourceW
NtGdiAddRemoteFontToDC
NtGdiAddRemoteMMInstanceToDC
NtGdiAngleArc
NtGdiAnyLinkedFonts
NtGdiArcInternal
NtGdiBRUSHOBJ_DeleteRbrush
NtGdiBRUSHOBJ_hGetColorTransform
NtGdiBRUSHOBJ_pvAllocRbrush
NtGdiBRUSHOBJ_pvGetRbrush
NtGdiBRUSHOBJ_ulGetBrushColor
NtGdiBeginGdiRendering
NtGdiCLIPOBJ_bEnum
NtGdiCLIPOBJ_cEnumStart
NtGdiCLIPOBJ_ppoGetPath
NtGdiCancelDC
NtGdiChangeGhostFont
NtGdiCheckBitmapBits
NtGdiClearBitmapAttributes
NtGdiClearBrushAttributes
NtGdiColorCorrectPalette
NtGdiConfigureOPMProtectedOutput
NtGdiConvertMetafileRect
NtGdiCreateBitmapFromDxSurface
NtGdiCreateBitmapFromDxSurface2
NtGdiCreateColorTransform
NtGdiCreateEllipticRgn
NtGdiCreateHatchBrushInternal
NtGdiCreateMetafileDC
NtGdiCreateOPMProtectedOutputs
NtGdiCreateRoundRectRgn
NtGdiCreateServerMetaFile
NtGdiCreateSessionMappedDIBSection
NtGdiD3dContextCreate
NtGdiD3dContextDestroy
NtGdiD3dContextDestroyAll
NtGdiD3dValidateTextureStageState
NtGdiDDCCIGetCapabilitiesString
NtGdiDDCCIGetCapabilitiesStringLength
NtGdiDDCCIGetTimingReport
NtGdiDDCCIGetVCPFeature
NtGdiDDCCISaveCurrentSettings
NtGdiDDCCISetVCPFeature
NtGdiDdAddAttachedSurface
NtGdiDdAlphaBlt
NtGdiDdAttachSurface
NtGdiDdBeginMoCompFrame
NtGdiDdCanCreateD3DBuffer
NtGdiDdColorControl
NtGdiDdCreateD3DBuffer
NtGdiDdCreateDirectDrawObject
NtGdiDdCreateFullscreenSprite
NtGdiDdCreateMoComp
NtGdiDdDDIAbandonSwapChain
NtGdiDdDDIAcquireKeyedMutex
NtGdiDdDDIAcquireKeyedMutex2
NtGdiDdDDIAcquireSwapChain
NtGdiDdDDIAdjustFullscreenGamma
NtGdiDdDDICacheHybridQueryValue
NtGdiDdDDIChangeVideoMemoryReservation
NtGdiDdDDICheckExclusiveOwnership
NtGdiDdDDICheckMonitorPowerState
NtGdiDdDDICheckMultiPlaneOverlaySupport
NtGdiDdDDICheckMultiPlaneOverlaySupport2
NtGdiDdDDICheckOcclusion
NtGdiDdDDICheckSharedResourceAccess
NtGdiDdDDICheckVidPnExclusiveOwnership
NtGdiDdDDICloseAdapter
NtGdiDdDDIConfigureSharedResource
NtGdiDdDDICreateAllocation
NtGdiDdDDICreateContext
NtGdiDdDDICreateContextVirtual
NtGdiDdDDICreateDCFromMemory
NtGdiDdDDICreateDevice
NtGdiDdDDICreateKeyedMutex
NtGdiDdDDICreateKeyedMutex2
NtGdiDdDDICreateOutputDupl
NtGdiDdDDICreateOverlay
NtGdiDdDDICreatePagingQueue
NtGdiDdDDICreateSwapChain
NtGdiDdDDICreateSynchronizationObject
NtGdiDdDDIDestroyAllocation
NtGdiDdDDIDestroyAllocation2
NtGdiDdDDIDestroyContext
NtGdiDdDDIDestroyDCFromMemory
NtGdiDdDDIDestroyDevice
NtGdiDdDDIDestroyKeyedMutex
NtGdiDdDDIDestroyOutputDupl
NtGdiDdDDIDestroyOverlay
NtGdiDdDDIDestroyPagingQueue
NtGdiDdDDIDestroySynchronizationObject
NtGdiDdDDIEnumAdapters
NtGdiDdDDIEnumAdapters2
NtGdiDdDDIEscape
NtGdiDdDDIEvict
NtGdiDdDDIFlipOverlay
NtGdiDdDDIFlushHeapTransitions
NtGdiDdDDIFreeGpuVirtualAddress
NtGdiDdDDIGetCachedHybridQueryValue
NtGdiDdDDIGetContextInProcessSchedulingPriority
NtGdiDdDDIGetContextSchedulingPriority
NtGdiDdDDIGetDWMVerticalBlankEvent
NtGdiDdDDIGetDeviceState
NtGdiDdDDIGetDisplayModeList
NtGdiDdDDIGetMultisampleMethodList
NtGdiDdDDIGetOverlayState
NtGdiDdDDIGetPresentHistory
NtGdiDdDDIGetPresentQueueEvent
NtGdiDdDDIGetProcessSchedulingPriorityClass
NtGdiDdDDIGetResourcePresentPrivateDriverData
NtGdiDdDDIGetRuntimeData
NtGdiDdDDIGetScanLine
NtGdiDdDDIGetSetSwapChainMetadata
NtGdiDdDDIGetSharedPrimaryHandle
NtGdiDdDDIGetSharedResourceAdapterLuid
NtGdiDdDDIInvalidateActiveVidPn
NtGdiDdDDIInvalidateCache
NtGdiDdDDILock
NtGdiDdDDILock2
NtGdiDdDDIMakeResident
NtGdiDdDDIMapGpuVirtualAddress
NtGdiDdDDIMarkDeviceAsError
NtGdiDdDDINetDispGetNextChunkInfo
NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus
NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport
NtGdiDdDDINetDispStartMiracastDisplayDevice
NtGdiDdDDINetDispStopMiracastDisplayDevice
NtGdiDdDDINetDispStopSessions
NtGdiDdDDIOfferAllocations
NtGdiDdDDIOpenAdapterFromDeviceName
NtGdiDdDDIOpenAdapterFromHdc
NtGdiDdDDIOpenAdapterFromLuid
NtGdiDdDDIOpenKeyedMutex
NtGdiDdDDIOpenKeyedMutex2
NtGdiDdDDIOpenNtHandleFromName
NtGdiDdDDIOpenResource
NtGdiDdDDIOpenResourceFromNtHandle
NtGdiDdDDIOpenSwapChain
NtGdiDdDDIOpenSyncObjectFromNtHandle
NtGdiDdDDIOpenSyncObjectFromNtHandle2
NtGdiDdDDIOpenSyncObjectNtHandleFromName
NtGdiDdDDIOpenSynchronizationObject
NtGdiDdDDIOutputDuplGetFrameInfo
NtGdiDdDDIOutputDuplGetMetaData
NtGdiDdDDIOutputDuplGetPointerShapeData
NtGdiDdDDIOutputDuplPresent
NtGdiDdDDIOutputDuplReleaseFrame
NtGdiDdDDIPinDirectFlipResources
NtGdiDdDDIPollDisplayChildren
NtGdiDdDDIPresent
NtGdiDdDDIPresentMultiPlaneOverlay
NtGdiDdDDIPresentMultiPlaneOverlay2
NtGdiDdDDIQueryAdapterInfo
NtGdiDdDDIQueryAllocationResidency
NtGdiDdDDIQueryClockCalibration
NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName
NtGdiDdDDIQueryResourceInfo
NtGdiDdDDIQueryResourceInfoFromNtHandle
NtGdiDdDDIQueryStatistics
NtGdiDdDDIQueryVidPnExclusiveOwnership
NtGdiDdDDIQueryVideoMemoryInfo
NtGdiDdDDIReclaimAllocations
NtGdiDdDDIReclaimAllocations2
NtGdiDdDDIReleaseKeyedMutex
NtGdiDdDDIReleaseKeyedMutex2
NtGdiDdDDIReleaseProcessVidPnSourceOwners
NtGdiDdDDIReleaseSwapChain
NtGdiDdDDIRender
NtGdiDdDDIReserveGpuVirtualAddress
NtGdiDdDDISetAllocationPriority
NtGdiDdDDISetContextInProcessSchedulingPriority
NtGdiDdDDISetContextSchedulingPriority
NtGdiDdDDISetDisplayMode
NtGdiDdDDISetDisplayPrivateDriverFormat
NtGdiDdDDISetDodIndirectSwapchain
NtGdiDdDDISetGammaRamp
NtGdiDdDDISetHwProtectionTeardownRecovery
NtGdiDdDDISetProcessSchedulingPriorityClass
NtGdiDdDDISetQueuedLimit
NtGdiDdDDISetStablePowerState
NtGdiDdDDISetStereoEnabled
NtGdiDdDDISetSyncRefreshCountWaitTarget
NtGdiDdDDISetVidPnSourceHwProtection
NtGdiDdDDISetVidPnSourceOwner
NtGdiDdDDISetVidPnSourceOwner1
NtGdiDdDDIShareObjects
NtGdiDdDDISharedPrimaryLockNotification
NtGdiDdDDISharedPrimaryUnLockNotification
NtGdiDdDDISignalSynchronizationObject
NtGdiDdDDISignalSynchronizationObjectFromCpu
NtGdiDdDDISignalSynchronizationObjectFromGpu
NtGdiDdDDISignalSynchronizationObjectFromGpu2
NtGdiDdDDISubmitCommand
NtGdiDdDDIUnlock
NtGdiDdDDIUnlock2
NtGdiDdDDIUnpinDirectFlipResources
NtGdiDdDDIUpdateGpuVirtualAddress
NtGdiDdDDIUpdateOverlay
NtGdiDdDDIWaitForIdle
NtGdiDdDDIWaitForSynchronizationObject
NtGdiDdDDIWaitForSynchronizationObjectFromCpu
NtGdiDdDDIWaitForSynchronizationObjectFromGpu
NtGdiDdDDIWaitForVerticalBlankEvent
NtGdiDdDDIWaitForVerticalBlankEvent2
NtGdiDdDeleteDirectDrawObject
NtGdiDdDestroyD3DBuffer
NtGdiDdDestroyFullscreenSprite
NtGdiDdDestroyMoComp
NtGdiDdEndMoCompFrame
NtGdiDdFlip
NtGdiDdFlipToGDISurface
NtGdiDdGetAvailDriverMemory
NtGdiDdGetBltStatus
NtGdiDdGetDC
NtGdiDdGetDriverInfo
NtGdiDdGetDriverState
NtGdiDdGetDxHandle
NtGdiDdGetFlipStatus
NtGdiDdGetInternalMoCompInfo
NtGdiDdGetMoCompBuffInfo
NtGdiDdGetMoCompFormats
NtGdiDdGetMoCompGuids
NtGdiDdGetScanLine
NtGdiDdLock
NtGdiDdNotifyFullscreenSpriteUpdate
NtGdiDdQueryDirectDrawObject
NtGdiDdQueryMoCompStatus
NtGdiDdQueryVisRgnUniqueness
NtGdiDdReenableDirectDrawObject
NtGdiDdReleaseDC
NtGdiDdRenderMoComp
NtGdiDdSetColorKey
NtGdiDdSetExclusiveMode
NtGdiDdSetGammaRamp
NtGdiDdSetOverlayPosition
NtGdiDdUnattachSurface
NtGdiDdUnlock
NtGdiDdUpdateOverlay
NtGdiDdWaitForVerticalBlank
NtGdiDeleteColorTransform
NtGdiDescribePixelFormat
NtGdiDestroyOPMProtectedOutput
NtGdiDestroyPhysicalMonitor
NtGdiDoBanding
NtGdiDrawEscape
NtGdiDvpAcquireNotification
NtGdiDvpCanCreateVideoPort
NtGdiDvpColorControl
NtGdiDvpCreateVideoPort
NtGdiDvpDestroyVideoPort
NtGdiDvpFlipVideoPort
NtGdiDvpGetVideoPortBandwidth
NtGdiDvpGetVideoPortConnectInfo
NtGdiDvpGetVideoPortField
NtGdiDvpGetVideoPortFlipStatus
NtGdiDvpGetVideoPortInputFormats
NtGdiDvpGetVideoPortLine
NtGdiDvpGetVideoPortOutputFormats
NtGdiDvpGetVideoSignalStatus
NtGdiDvpReleaseNotification
NtGdiDvpUpdateVideoPort
NtGdiDvpWaitForVideoPortSync
NtGdiDwmCreatedBitmapRemotingOutput
NtGdiDxgGenericThunk
NtGdiEllipse
NtGdiEnableEudc
NtGdiEndDoc
NtGdiEndGdiRendering
NtGdiEndPage
NtGdiEngAlphaBlend
NtGdiEngAssociateSurface
NtGdiEngBitBlt
NtGdiEngCheckAbort
NtGdiEngComputeGlyphSet
NtGdiEngCopyBits
NtGdiEngCreateBitmap
NtGdiEngCreateClip
NtGdiEngCreateDeviceBitmap
NtGdiEngCreateDeviceSurface
NtGdiEngCreatePalette
NtGdiEngDeleteClip
NtGdiEngDeletePalette
NtGdiEngDeletePath
NtGdiEngDeleteSurface
NtGdiEngEraseSurface
NtGdiEngFillPath
NtGdiEngGradientFill
NtGdiEngLineTo
NtGdiEngLockSurface
NtGdiEngMarkBandingSurface
NtGdiEngPaint
NtGdiEngPlgBlt
NtGdiEngStretchBlt
NtGdiEngStretchBltROP
NtGdiEngStrokeAndFillPath
NtGdiEngStrokePath
NtGdiEngTextOut
NtGdiEngTransparentBlt
NtGdiEngUnlockSurface
NtGdiEnumFonts
NtGdiEnumObjects
NtGdiEudcLoadUnloadLink
NtGdiExtFloodFill
NtGdiFONTOBJ_cGetAllGlyphHandles
NtGdiFONTOBJ_cGetGlyphs
NtGdiFONTOBJ_pQueryGlyphAttrs
NtGdiFONTOBJ_pfdg
NtGdiFONTOBJ_pifi
NtGdiFONTOBJ_pvTrueTypeFontFile
NtGdiFONTOBJ_pxoGetXform
NtGdiFONTOBJ_vGetInfo
NtGdiFlattenPath
NtGdiFontIsLinked
NtGdiForceUFIMapping
NtGdiFrameRgn
NtGdiFullscreenControl
NtGdiGetBoundsRect
NtGdiGetCOPPCompatibleOPMInformation
NtGdiGetCertificate
NtGdiGetCertificateByHandle
NtGdiGetCertificateSize
NtGdiGetCertificateSizeByHandle
NtGdiGetCharABCWidthsW
NtGdiGetCharacterPlacementW
NtGdiGetColorAdjustment
NtGdiGetColorSpaceforBitmap
NtGdiGetCurrentDpiInfo
NtGdiGetDeviceCaps
NtGdiGetDeviceCapsAll
NtGdiGetDeviceGammaRamp
NtGdiGetDeviceWidth
NtGdiGetDhpdev
NtGdiGetETM
NtGdiGetEmbUFI
NtGdiGetEmbedFonts
NtGdiGetEudcTimeStampEx
NtGdiGetFontFileData
NtGdiGetFontFileInfo
NtGdiGetFontResourceInfoInternalW
NtGdiGetFontUnicodeRanges
NtGdiGetGlyphIndicesW
NtGdiGetGlyphIndicesWInternal
NtGdiGetGlyphOutline
NtGdiGetKerningPairs
NtGdiGetLinkedUFIs
NtGdiGetMiterLimit
NtGdiGetMonitorID
NtGdiGetNumberOfPhysicalMonitors
NtGdiGetOPMInformation
NtGdiGetOPMRandomNumber
NtGdiGetObjectBitmapHandle
NtGdiGetPath
NtGdiGetPerBandInfo
NtGdiGetPhysicalMonitorDescription
NtGdiGetPhysicalMonitors
NtGdiGetRealizationInfo
NtGdiGetServerMetaFileBits
NtGdiGetSpoolMessage
NtGdiGetStats
NtGdiGetStringBitmapW
NtGdiGetSuggestedOPMProtectedOutputArraySize
NtGdiGetTextExtentExW
NtGdiGetUFI
NtGdiGetUFIPathname
NtGdiGradientFill
NtGdiHLSurfGetInformation
NtGdiHLSurfSetInformation
NtGdiHT_Get8BPPFormatPalette
NtGdiHT_Get8BPPMaskPalette
NtGdiIcmBrushInfo
NtGdiInit
NtGdiInitSpool
NtGdiMakeFontDir
NtGdiMakeInfoDC
NtGdiMakeObjectUnXferable
NtGdiMakeObjectXferable
NtGdiMirrorWindowOrg
NtGdiMonoBitmap
NtGdiMoveTo
NtGdiOffsetClipRgn
NtGdiPATHOBJ_bEnum
NtGdiPATHOBJ_bEnumClipLines
NtGdiPATHOBJ_vEnumStart
NtGdiPATHOBJ_vEnumStartClipLines
NtGdiPATHOBJ_vGetBounds
NtGdiPathToRegion
NtGdiPlgBlt
NtGdiPolyDraw
NtGdiPolyTextOutW
NtGdiPtInRegion
NtGdiPtVisible
NtGdiQueryFonts
NtGdiRemoveFontResourceW
NtGdiRemoveMergeFont
NtGdiResetDC
NtGdiResizePalette
NtGdiRoundRect
NtGdiSTROBJ_bEnum
NtGdiSTROBJ_bEnumPositionsOnly
NtGdiSTROBJ_bGetAdvanceWidths
NtGdiSTROBJ_dwGetCodePage
NtGdiSTROBJ_vEnumStart
NtGdiScaleViewportExtEx
NtGdiScaleWindowExtEx
NtGdiSelectBrush
NtGdiSelectClipPath
NtGdiSelectPen
NtGdiSetBitmapAttributes
NtGdiSetBrushAttributes
NtGdiSetColorAdjustment
NtGdiSetColorSpace
NtGdiSetDeviceGammaRamp
NtGdiSetFontXform
NtGdiSetIcmMode
NtGdiSetLinkedUFIs
NtGdiSetMagicColors
NtGdiSetOPMSigningKeyAndSequenceNumbers
NtGdiSetPUMPDOBJ
NtGdiSetPixelFormat
NtGdiSetRectRgn
NtGdiSetSizeDevice
NtGdiSetSystemPaletteUse
NtGdiSetTextJustification
NtGdiSetUMPDSandboxState
NtGdiStartDoc
NtGdiStartPage
NtGdiStrokeAndFillPath
NtGdiStrokePath
NtGdiSwapBuffers
NtGdiTransparentBlt
NtGdiUMPDEngFreeUserMem
NtGdiUnloadPrinterDriver
NtGdiUnmapMemFont
NtGdiUpdateColors
NtGdiUpdateTransform
NtGdiWidenPath
NtGdiXFORMOBJ_bApplyXform
NtGdiXFORMOBJ_iGetXform
NtGdiXLATEOBJ_cGetPalette
NtGdiXLATEOBJ_hGetColorTransform
NtGdiXLATEOBJ_iXlate
NtHWCursorUpdatePointer
NtNotifyPresentToCompositionSurface
NtOpenCompositionSurfaceDirtyRegion
NtOpenCompositionSurfaceSectionInfo
NtOpenCompositionSurfaceSwapChainHandleInfo
NtQueryCompositionInputIsImplicit
NtQueryCompositionInputQueueAndTransform
NtQueryCompositionInputSink
NtQueryCompositionInputSinkLuid
NtQueryCompositionInputSinkViewId
NtQueryCompositionSurfaceBinding
NtQueryCompositionSurfaceRenderingRealization
NtQueryCompositionSurfaceStatistics
NtRIMAddInputObserver
NtRIMGetDevicePreparsedDataLockfree
NtRIMObserveNextInput
NtRIMRemoveInputObserver
NtRIMUpdateInputObserverRegistration
NtSetCompositionSurfaceAnalogExclusive
NtSetCompositionSurfaceBufferCompositionModeAndOrientation
NtSetCompositionSurfaceIndependentFlipInfo
NtSetCompositionSurfaceOutOfFrameDirectFlipNotification
NtSetCompositionSurfaceStatistics
NtTokenManagerConfirmOutstandingAnalogToken
NtTokenManagerCreateCompositionTokenHandle
NtTokenManagerDeleteOutstandingDirectFlipTokens
NtTokenManagerGetAnalogExclusiveSurfaceUpdates
NtTokenManagerGetAnalogExclusiveTokenEvent
NtTokenManagerGetOutOfFrameDirectFlipSurfaceUpdates
NtTokenManagerOpenSectionAndEvents
NtTokenManagerThread
NtUnBindCompositionSurface
NtUpdateInputSinkTransforms
NtUserAcquireIAMKey
NtUserAddClipboardFormatListener
NtUserAssociateInputContext
NtUserAutoPromoteMouseInPointer
NtUserAutoRotateScreen
NtUserBlockInput
NtUserBuildHimcList
NtUserBuildPropList
NtUserCalculatePopupWindowPosition
NtUserCallHwndOpt
NtUserCanBrokerForceForeground
NtUserChangeDisplaySettings
NtUserChangeWindowMessageFilterEx
NtUserCheckAccessForIntegrityLevel
NtUserCheckProcessForClipboardAccess
NtUserCheckProcessSession
NtUserCheckWindowThreadDesktop
NtUserChildWindowFromPointEx
NtUserClearForeground
NtUserClipCursor
NtUserCompositionInputSinkLuidFromPoint
NtUserCreateDCompositionHwndTarget
NtUserCreateDesktopEx
NtUserCreateInputContext
NtUserCreateWindowStation
NtUserCtxDisplayIOCtl
NtUserDeferWindowPosAndBand
NtUserDelegateCapturePointers
NtUserDelegateInput
NtUserDestroyDCompositionHwndTarget
NtUserDestroyInputContext
NtUserDisableImmersiveOwner
NtUserDisableProcessWindowFiltering
NtUserDisableThreadIme
NtUserDiscardPointerFrameMessages
NtUserDisplayConfigGetDeviceInfo
NtUserDisplayConfigSetDeviceInfo
NtUserDoSoundConnect
NtUserDoSoundDisconnect
NtUserDragDetect
NtUserDragObject
NtUserDrawAnimatedRects
NtUserDrawCaption
NtUserDrawCaptionTemp
NtUserDrawMenuBarTemp
NtUserDwmGetRemoteSessionOcclusionEvent
NtUserDwmGetRemoteSessionOcclusionState
NtUserDwmKernelShutdown
NtUserDwmKernelStartup
NtUserDwmValidateWindow
NtUserEnableChildWindowDpiMessage
NtUserEnableIAMAccess
NtUserEnableMouseInPointer
NtUserEnableMouseInputForCursorSuppression
NtUserEnableTouchPad
NtUserEndMenu
NtUserEvent
NtUserFlashWindowEx
NtUserFrostCrashedWindow
NtUserGetAppImeLevel
NtUserGetAutoRotationState
NtUserGetCIMSSM
NtUserGetCaretPos
NtUserGetClipCursor
NtUserGetClipboardAccessToken
NtUserGetClipboardViewer
NtUserGetComboBoxInfo
NtUserGetCurrentInputMessageSource
NtUserGetCursorDims
NtUserGetCursorInfo
NtUserGetDManipHookInitFunction
NtUserGetDesktopID
NtUserGetDisplayAutoRotationPreferences
NtUserGetDisplayAutoRotationPreferencesByProcessId
NtUserGetDisplayConfigBufferSizes
NtUserGetDpiForMonitor
NtUserGetDpiSystemMetrics
NtUserGetGestureConfig
NtUserGetGestureExtArgs
NtUserGetGestureInfo
NtUserGetGuiResources
NtUserGetHimetricScaleFactorFromPixelLocation
NtUserGetImeHotKey
NtUserGetImeInfoEx
NtUserGetInputLocaleInfo
NtUserGetInternalWindowPos
NtUserGetKeyNameText
NtUserGetKeyboardLayoutName
NtUserGetLayeredWindowAttributes
NtUserGetListBoxInfo
NtUserGetMenuIndex
NtUserGetMenuItemRect
NtUserGetMouseMovePointsEx
NtUserGetPhysicalDeviceRect
NtUserGetPointerCursorId
NtUserGetPointerDevice
NtUserGetPointerDeviceCursors
NtUserGetPointerDeviceProperties
NtUserGetPointerDeviceRects
NtUserGetPointerDevices
NtUserGetPointerFrameArrivalTimes
NtUserGetPointerInfoList
NtUserGetPointerInputTransform
NtUserGetPointerType
NtUserGetPrecisionTouchPadConfiguration
NtUserGetPriorityClipboardFormat
NtUserGetProcessDpiAwareness
NtUserGetProcessUIContextInformation
NtUserGetQueueEventStatus
NtUserGetRawInputBuffer
NtUserGetRawInputData
NtUserGetRawInputDeviceInfo
NtUserGetRawInputDeviceList
NtUserGetRawPointerDeviceData
NtUserGetRegisteredRawInputDevices
NtUserGetTopLevelWindow
NtUserGetTouchInputInfo
NtUserGetTouchValidationStatus
NtUserGetUpdatedClipboardFormats
NtUserGetWOWClass
NtUserGetWindowBand
NtUserGetWindowCompositionAttribute
NtUserGetWindowCompositionInfo
NtUserGetWindowDisplayAffinity
NtUserGetWindowFeedbackSetting
NtUserGetWindowMinimizeRect
NtUserGetWindowRgnEx
NtUserGhostWindowFromHungWindow
NtUserHandleDelegatedInput
NtUserHardErrorControl
NtUserHidePointerContactVisualization
NtUserHiliteMenuItem
NtUserHungWindowFromGhostWindow
NtUserHwndQueryRedirectionInfo
NtUserHwndSetRedirectionInfo
NtUserImpersonateDdeClientWindow
NtUserInitTask
NtUserInitialize
NtUserInitializeClientPfnArrays
NtUserInitializeInputDeviceInjection
NtUserInitializePointerDeviceInjection
NtUserInitializeTouchInjection
NtUserInjectDeviceInput
NtUserInjectGesture
NtUserInjectKeyboardInput
NtUserInjectMouseInput
NtUserInjectPointerInput
NtUserInjectTouchInput
NtUserInternalClipCursor
NtUserInternalGetWindowIcon
NtUserIsChildWindowDpiMessageEnabled
NtUserIsMouseInPointerEnabled
NtUserIsMouseInputEnabled
NtUserIsTopLevelWindow
NtUserIsTouchWindow
NtUserIsWindowBroadcastingDpiToChildren
NtUserLayoutCompleted
NtUserLinkDpiCursor
NtUserLoadKeyboardLayoutEx
NtUserLockWindowStation
NtUserLockWorkStation
NtUserLogicalToPerMonitorDPIPhysicalPoint
NtUserLogicalToPhysicalPoint
NtUserMNDragLeave
NtUserMNDragOver
NtUserMagControl
NtUserMagGetContextInformation
NtUserMagSetContextInformation
NtUserMenuItemFromPoint
NtUserMinMaximize
NtUserModifyWindowTouchCapability
NtUserNavigateFocus
NtUserNotifyIMEStatus
NtUserOpenInputDesktop
NtUserOpenThreadDesktop
NtUserPaintMonitor
NtUserPerMonitorDPIPhysicalToLogicalPoint
NtUserPhysicalToLogicalPoint
NtUserPrintWindow
NtUserPromoteMouseInPointer
NtUserPromotePointer
NtUserQueryBSDRWindow
NtUserQueryDisplayConfig
NtUserQueryInformationThread
NtUserQueryInputContext
NtUserQuerySendMessage
NtUserRealChildWindowFromPoint
NtUserRealWaitMessageEx
NtUserRegisterBSDRWindow
NtUserRegisterDManipHook
NtUserRegisterEdgy
NtUserRegisterErrorReportingDialog
NtUserRegisterHotKey
NtUserRegisterManipulationThread
NtUserRegisterPointerDeviceNotifications
NtUserRegisterPointerInputTarget
NtUserRegisterRawInputDevices
NtUserRegisterServicesProcess
NtUserRegisterSessionPort
NtUserRegisterShellPTPListener
NtUserRegisterTasklist
NtUserRegisterTouchHitTestingWindow
NtUserRegisterTouchPadCapable
NtUserRegisterUserApiHook
NtUserReleaseDwmHitTestWaiters
NtUserRemoteConnect
NtUserRemoteRedrawRectangle
NtUserRemoteRedrawScreen
NtUserRemoteStopScreenUpdates
NtUserRemoveClipboardFormatListener
NtUserRemoveInjectionDevice
NtUserReportInertia
NtUserResolveDesktopForWOW
NtUserSendEventMessage
NtUserSetActivationFilter
NtUserSetActiveProcessForMonitor
NtUserSetAppImeLevel
NtUserSetAutoRotation
NtUserSetBrokeredForeground
NtUserSetCalibrationData
NtUserSetChildWindowNoActivate
NtUserSetClassWord
NtUserSetCoreWindow
NtUserSetCoreWindowPartner
NtUserSetCursorContents
NtUserSetDisplayAutoRotationPreferences
NtUserSetDisplayConfig
NtUserSetDisplayMapping
NtUserSetFallbackForeground
NtUserSetFeatureReportResponse
NtUserSetGestureConfig
NtUserSetImeHotKey
NtUserSetImeInfoEx
NtUserSetImeOwnerWindow
NtUserSetInternalWindowPos
NtUserSetLayeredWindowAttributes
NtUserSetManipulationInputTarget
NtUserSetMenu
NtUserSetMenuContextHelpId
NtUserSetMenuFlagRtoL
NtUserSetMirrorRendering
NtUserSetObjectInformation
NtUserSetPrecisionTouchPadConfiguration
NtUserSetProcessDpiAwareness
NtUserSetProcessRestrictionExemption
NtUserSetProcessUIAccessZorder
NtUserSetShellWindowEx
NtUserSetSysColors
NtUserSetSystemCursor
NtUserSetSystemTimer
NtUserSetThreadInputBlocked
NtUserSetThreadLayoutHandles
NtUserSetWindowArrangement
NtUserSetWindowBand
NtUserSetWindowCompositionAttribute
NtUserSetWindowCompositionTransition
NtUserSetWindowDisplayAffinity
NtUserSetWindowFeedbackSetting
NtUserSetWindowRgnEx
NtUserSetWindowShowState
NtUserSetWindowStationUser
NtUserShowSystemCursor
NtUserShutdownBlockReasonCreate
NtUserShutdownBlockReasonQuery
NtUserShutdownReasonDestroy
NtUserSignalRedirectionStartComplete
NtUserSlicerControl
NtUserSoundSentry
NtUserSwitchDesktop
NtUserTestForInteractiveUser
NtUserTrackPopupMenuEx
NtUserTransformPoint
NtUserTransformRect
NtUserUndelegateInput
NtUserUnloadKeyboardLayout
NtUserUnlockWindowStation
NtUserUnregisterHotKey
NtUserUnregisterSessionPort
NtUserUnregisterUserApiHook
NtUserUpdateDefaultDesktopThumbnail
NtUserUpdateInputContext
NtUserUpdateInstance
NtUserUpdateLayeredWindow
NtUserUpdatePerUserSystemParameters
NtUserUpdateWindowInputSinkHints
NtUserUpdateWindowTrackingInfo
NtUserUpdateWindowTransform
NtUserUserHandleGrantAccess
NtUserValidateHandleSecure
NtUserWaitAvailableMessageEx
NtUserWaitForInputIdle
NtUserWaitForMsgAndEvent
NtUserWaitForRedirectionStartComplete
NtUserWindowFromPhysicalPoint
NtValidateCompositionSurfaceHandle
NtVisualCaptureBits
NtUserSetClassLongPtr
NtUserSetWindowLongPtr
↧
Search

WNF identifiers

December 5, 2015, 8:42 am
$
0
0
I have made a mistake in my previous articleabout WNF. It seems that WNF idenificators are not standard IID but pair of DWORDs, so struct my_wnf_item actually looks like:
// struct can be ripped from ntdll!RtlpCreateWnfNameSubscription
struct wnf_name
{
/*  0x0 */  DWORD tag; // 0x980912 under x64, 0x700912 under x86
/*  0x4 */  DWORD unk4;
/*  0x8 */  DWORD unk8;
/*  0xC */  DWORD unkC;
/* 0x10 */  DWORD id1;
/* 0x14 */  DWORD id2;
};
 
struct my_wnf_item
{
  LIST_ENTRY List; // linked list of my_wnf_item
  wnf_name *wnfId;
  PBYTE notify;
};

Sample from windows 10 build 10586:
CheckProcess PID 420 (csrss.exe):
PEB.NtGlobalFlag: 0
PEB.Ldr: 00007FF946ED5200
PEB.GdiSharedHandleTable: 000001EFD8BC0000
WnfRoot: 000001EFD8A05BF0
 Wnf[0] at 000001EFD8A08238: id1 A3BC4035 id2 96003D (WNF_PNPA_PORTS_CHANGED_SESSION) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
 Wnf[1] at 000001EFD8A080C8: id1 A3BC3875 id2 96003D (WNF_PNPA_PORTS_CHANGED) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
 Wnf[2] at 000001EFD8A07F58: id1 A3BC3035 id2 96003D (WNF_PNPA_HARDWAREPROFILES_CHANGED_SESSION) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
 Wnf[3] at 000001EFD8A07DE8: id1 A3BC2875 id2 96003D (WNF_PNPA_HARDWAREPROFILES_CHANGED) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
 Wnf[4] at 000001EFD8A07C78: id1 A3BC2035 id2 96003D (WNF_PNPA_VOLUMES_CHANGED_SESSION) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
 Wnf[5] at 000001EFD8A07B08: id1 A3BC1875 id2 96003D (WNF_PNPA_VOLUMES_CHANGED) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
 Wnf[6] at 000001EFD8A04EF8: id1 A3BC1035 id2 96003D (WNF_PNPA_DEVNODES_CHANGED_SESSION) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
 Wnf[7] at 000001EFD8A05058: id1 A3BC0875 id2 96003D (WNF_PNPA_DEVNODES_CHANGED) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)

List of some WNF identifiers (sure is not completed):

Id1Id2NameModule
0xA3B95C750x41C6193FWNF_RW_CA_ENABLEDwifinetworkmanager.dll
0xA3BC08350xF810121WNF_LOGN_EOA_FLYOUT_POSITIONWindows.UI.Logon.dll
0xA3BC08350xF840539WNF_TKBN_KEYBOARD_VISIBILITYIMETIP.DLL
0xA3BC08350xF950324WNF_IMSN_MONITORMODECHANGEDtwinapi.dll
0xA3BC08350x13810338WNF_UMGR_SIHOST_READYfveskybackup.dll
0xA3BC08350x41870A38WNF_UDA_STORE_CHANGEDPimIndexMaintenance.dll
0xA3BC08350x41871D20WNF_MSA_ACCOUNTSTATECHANGEwlidsvc.dll
0xA3BC08350x418B0A38WNF_UDM_SERVICE_INITIALIZEDUserDataService.dll
0xA3BC08350x418F1E3EWNF_SPI_LOGICALDPIOVERRIDEApplicationFrame.dll
0xA3BC08750x96003DWNF_PNPA_DEVNODES_CHANGEDwinsrv.dll
0xA3BC08750x2831628WNF_EXEC_OSTASKCOMPLETION_REVOKEDmodernexecserver.dll
0xA3BC08750x28A182CWNF_AVLC_DRIVER_REQUESTaudiosrv.dll
0xA3BC08750x396003DWNF_PNPB_AWAITING_RESPONSEmodernexecserver.dll
0xA3BC08750x4960139WNF_TOPE_INP_POINTER_DEVICE_ACTIVITYSensorCustomAdbAlgorithm.dll
0xA3BC08750x5941822WNF_OVRD_OVERRIDESCALEUPDATEDApplicationFrame.dll
0xA3BC08750x6880F21WNF_LANG_FOD_INSTALLATION_STARTEDSettingsHandlers_nt.dll
0xA3BC08750x7851E3FWNF_RPCF_FWMAN_RUNNINGRpcEpMap.dll
0xA3BC08750x880073AWNF_WIFI_CONNECTION_STATUSwificonnapi.dll
0xA3BC08750x9920B39WNF_TETH_TETHERING_STATEtetheringclient.dll
0xA3BC08750xA811629WNF_DXGK_ADAPTER_TDR_NOTIFICATIONdcomp.dll
0xA3BC08750xA840A2BWNF_FDBK_QUESTION_NOTIFICATIONshell32.dll
0xA3BC08750xC960C38WNF_UBPM_POWER_SOURCEdab.dll
0xA3BC08750xD83063EWNF_SHEL_IMMERSIVE_SHELL_RUNNINGProximityServicePal.dll
0xA3BC08750xD891E2AWNF_GPOL_SYSTEM_CHANGESgpapi.dll
0xA3BC08750xD8A0B2EWNF_CELL_POWER_STATE_MODEM0wwansvc.dll
0xA3BC08750xF850339WNF_TMCN_ISTABLETMODEApplicationFrame.dll
0xA3BC08750xF87193AWNF_WWAN_OBJECT_LISTwwansvc.dll
0xA3BC08750x118F022EWNF_CLIP_CONTENT_CHANGEDClipboardServer.dll
0xA3BC08750x1192063AWNF_WHTP_WINHTTP_PROXY_DISCOVEREDncsi.dll
0xA3BC08750x12821A3FWNF_RTDS_RPC_INTERFACE_TRIGGER_CHANGEDdab.dll
0xA3BC08750x1287083AWNF_WFAS_FIREWALL_NETWORK_CHANGE_READYMPSSVC.dll
0xA3BC08750x128F0A23WNF_NDIS_ADAPTER_ARRIVALNetSetupSvc.dll
0xA3BC08750x12960F2EWNF_CAPS_CENTRAL_ACCESS_POLICIES_CHANGEDauthz.dll
0xA3BC08750x13891A3EWNF_STOR_CONFIGURATION_DEVICE_INFO_UPDATEDwuaueng.dll
0xA3BC08750x13920028WNF_ENTR_DEVICELOCK_POLICY_VALUE_CHANGEDNgcCtnrSvc.dll
0xA3BC08750x1583002EWNF_CNET_RADIO_ACTIVITYwcmsvc.dll
0xA3BC08750x159F022BWNF_FLYT_IDS_CHANGEDdiagtrack.dll
0xA3BC08750x17891C3DWNF_PROV_TURN_COMPLETEumpo.dll
0xA3BC08750x4182012BWNF_FOD_STATE_CHANGESettingsHandlers_nt.dll
0xA3BC08750x4183182BWNF_FVE_DE_SUPPORTshell32.dll
0xA3BC08750x41840B3EWNF_SEB_INTERNET_PRESENTdiagtrack.dll
0xA3BC08750x41840D23WNF_NCB_APP_AVAILABLEncbservice.dll
0xA3BC08750x41841D38WNF_USB_TYPE_C_PARTNER_STATEUcmCx.dll
0xA3BC08750x41850121WNF_LOC_DEVICE_BROKER_ACCESS_CHANGEDLocationPermissions.dll
0xA3BC08750x41851C3EWNF_SRC_SYSTEM_RADIO_CHANGEDauthui.dll
0xA3BC08750x41851D2EWNF_CSC_SERVICE_STARTcscsvc.dll
0xA3BC08750x41851D3AWNF_WSC_SECURITY_CENTER_USER_NOTIFICATIONwscapi.dll
0xA3BC08750x41870223WNF_NLA_CAPABILITY_CHANGEncsi.dll
0xA3BC08750x41870C29WNF_DBA_DEVICE_ACCESS_CHANGEDSensorService.dll
0xA3BC08750x4187182CWNF_AVA_SOUNDDETECTOR_PATTERN_MATCHNUIVoiceWBSAdapters.dll
0xA3BC08750x41880F3BWNF_VAN_VANUI_STATUSauthui.dll
0xA3BC08750x41891D38WNF_USO_STATE_CHANGEMusUpdateHandlers.dll
0xA3BC08750x418A063EWNF_SHL_DEVICE_LOCK_STATEmodernexecserver.dll
0xA3BC08750x418B0223WNF_NLM_VPN_RECONNECT_CHANGEnetprofmsvc.dll
0xA3BC08750x418B0D3AWNF_WCM_INTERFACE_LISTshell32.dll
0xA3BC08750x418B0D3EWNF_SCM_AUTOSTART_STATEumpo.dll
0xA3BC08750x418B1E39WNF_TPM_OWNERSHIP_TAKENbdesvc.dll
0xA3BC08750x41901D26WNF_KSV_STREAMSTATEauthui.dll
0xA3BC08750x4192022BWNF_FLT_RUNDOWN_WAITmodernexecserver.dll
0xA3BC08750x41921C3EWNF_SRT_WINRE_CONFIGURATION_CHANGEbdesvc.dll
0xA3BC08750x41940B3AWNF_WER_SERVICE_STARTmodernexecserver.dll
0xA3BC08750x41941B20WNF_MUR_MEDIA_UI_REQUEST_WLANWlanMediaManager.dll
0xA3BC08750x4195003AWNF_WNS_CONNECTIVITY_STATUSncbservice.dll
0xA3BC08750x4195083AWNF_WFS_SETTINGSwlidsvc.dll
0xA3BC08750x4196032FWNF_BMP_BG_PLAYSTATE_CHANGEDBackgroundMediaPolicy.dll
0xA3BC08750x41C6013DWNF_PO_SCENARIO_CHANGEmodernexecserver.dll
0xA3BC08750x41C60320WNF_MM_BAD_MEMORY_PENDING_REMOVALKernelBase.dll
0xA3BC08750x41C6072FWNF_BI_BROKER_WAKEUP_CHANNELsrumsvc.dll
0xA3BC08750x41C60C39WNF_TB_SYSTEM_TIME_CHANGEDWPTaskScheduler.dll
0xA3BC08750x41C61D3DWNF_PS_WAKE_CHARGE_RESOURCE_POLICYmodernexecserver.dll
0xA3BC08B50x2821B2CWNF_AUDC_CPUSET_IDRTWorkQ.dll
0xA3BC08B50xD920D2EWNF_CCTL_BUTTON_REQUESTSCallButtons.dll
0xA3BC08F50x13840539WNF_TKBR_CHANGE_SYSTEMAzureSettingSyncProvider.dll
0xA3BC08F50x41871B3AWNF_WUA_NUM_PER_USER_UPDATESWSShared.dll
0xA3BC0C750x418B1D29WNF_DSM_DSMAPPINSTALLEDDeviceSetupManagerAPI.dll
0xA3BC0C750x41960B29WNF_DEP_OOBE_COMPLETEbdesvc.dll
0xA3BC0C750x41C61629WNF_DX_STEREO_CONFIGdxgi.dll
0xA3BC10350x96003DWNF_PNPA_DEVNODES_CHANGED_SESSIONwinsrv.dll
0xA3BC10350xF840539WNF_TKBN_RESTRICTED_KEYBOARD_VISIBILITYIMETIP.DLL
0xA3BC10350xF950324WNF_IMSN_LAUNCHERVISIBILITYtwinapi.dll
0xA3BC10350x41870A38WNF_UDA_CALENDAR_FOLDER_ISHIDDEN_CHANGEDPimIndexMaintenance.dll
0xA3BC10350x41C61629WNF_DX_MODE_CHANGE_NOTIFICATIONApplicationFrame.dll
0xA3BC10750x2821B2CWNF_AUDC_PHONECALL_ACTIVEsapi_onecore.dll
0xA3BC10750x28A182CWNF_AVLC_VOLUME_WARNING_ACCEPTEDaudiosrv.dll
0xA3BC10750x880073AWNF_WIFI_CPL_STATUSwifinetworkmanager.dll
0xA3BC10750xD83063EWNF_SHEL_NOTIFICATIONSNotificationController.dll
0xA3BC10750xD8A0B2EWNF_CELL_SIGNAL_STRENGTH_BARS_CAN0wwansvc.dll
0xA3BC10750xD941D2BWNF_FSRL_OPLOCK_BREAKmodernexecserver.dll
0xA3BC10750x128F0A23WNF_NDIS_CORRUPTED_STORENetSetupSvc.dll
0xA3BC10750x12960F20WNF_MAPS_MAPLOADER_PROGRESSSettingsHandlers_Maps.dll
0xA3BC10750x13920028WNF_ENTR_WIFI_POLICY_VALUE_CHANGEDwifinetworkmanager.dll
0xA3BC10750x1583002EWNF_CNET_DPU_GLOBAL_STATE_OVER_LIMITwcmsvc.dll
0xA3BC10750x1589012FWNF_BOOT_INVALID_TIME_SOURCEmsoobeplugins.dll
0xA3BC10750x4183182BWNF_FVE_DE_MANAGED_VOLUMES_COUNTshell32.dll
0xA3BC10750x41840B3EWNF_SEB_FREE_NETWORK_PRESENTdiagtrack.dll
0xA3BC10750x41850721WNF_LIC_HARDWAREID_IN_DEVICE_LICENSE_OUT_OF_TOLERANCEwlidsvc.dll
0xA3BC10750x41870223WNF_NLA_ENTER_SUSPECT_STATEncsi.dll
0xA3BC10750x41891D38WNF_USO_STATE_ATTENTION_REQUIREDMusUpdateHandlers.dll
0xA3BC10750x418A0B39WNF_TEL_CRASH_STATEmodernexecserver.dll
0xA3BC10750x418B0223WNF_NLM_INTERNET_PRESENTMapControlCore.dll
0xA3BC10750x418B0D3AWNF_WCM_SERVICE_STATUSwcmsvc.dll
0xA3BC10750x418B1E39WNF_TPM_DEVICEID_STATEtbs.dll
0xA3BC10750x4194063EWNF_SHR_DHCP_IPv4_LEASE_LISTwlansvc.dll
0xA3BC10750x41941B20WNF_MUR_MEDIA_UI_REQUEST_LANdot3api.dll
0xA3BC10750x41950029WNF_DNS_ALL_SERVER_TIMEOUTdnsapi.dll
0xA3BC10750x41950821WNF_LFS_RUNNING_STATEGeolocation.dll
0xA3BC10750x41C6013DWNF_PO_COMPOSITE_BATTERYWindows.Energy.dll
0xA3BC10750x41C6072FWNF_BI_USER_LOGON_CHANNELbisrv.dll
0xA3BC10750x41C61439WNF_TZ_STORE_CHANGEDUserDataService.dll
0xA3BC10F50xD891E2AWNF_GPOL_USER_CHANGESgpapi.dll
0xA3BC10F50x41960A28WNF_EDP_IDENTITY_REVOKEDefscore.dll
0xA3BC14750x418B1D29WNF_DSM_DSMAPPREMOVEDDeviceSetupManagerAPI.dll
0xA3BC14750x41951A38WNF_UTS_LOCKSCREEN_DISMISSAL_TRIGGEREDauthui.dll
0xA3BC18350xF950324WNF_IMSN_IMMERSIVEMONITORCHANGEDdxgi.dll
0xA3BC18350x41870A38WNF_UDA_APPOINTMENT_CHANGEDPimIndexMaintenance.dll
0xA3BC18350x41C61629WNF_DX_OCCLUSION_CHANGE_NOTIFICATIONdxgi.dll
0xA3BC18750x96003DWNF_PNPA_VOLUMES_CHANGEDwinsrv.dll
0xA3BC18750x2831628WNF_EXEC_THERMAL_LIMITERbisrv.dll
0xA3BC18750x28A182CWNF_AVLC_SHOW_VOLUMELIMITWARNINGaudiosrv.dll
0xA3BC18750xC960C38WNF_UBPM_FRMU_ALLOWEDdab.dll
0xA3BC18750xD83063EWNF_SHEL_LOGON_COMPLETEwifinetworkmanager.dll
0xA3BC18750xD8A0B2EWNF_CELL_SYSTEM_TYPE_CAN0wwansvc.dll
0xA3BC18750x12821A3FWNF_RTDS_NAMED_PIPE_TRIGGER_CHANGEDdab.dll
0xA3BC18750x12960F20WNF_MAPS_MAPLOADER_STATUS_CHANGEmapsupdatetask.dll
0xA3BC18750x13920028WNF_ENTR_SYSTEM_POLICY_VALUE_CHANGEDdiagtrack.dll
0xA3BC18750x1583002EWNF_CNET_DPU_GLOBAL_STATE_OFF_TRACKSubscriptionMgr.dll
0xA3BC18750x4183182BWNF_FVE_WIM_HASH_GENERATION_TRIGGERWofTasks.dll
0xA3BC18750x41841D38WNF_USB_PEER_DEVICE_STATEUcmCx.dll
0xA3BC18750x41850721WNF_LIC_HARDWAREID_IN_DEVICE_LICENSE_IN_TOLERANCEwlidsvc.dll
0xA3BC18750x41850923WNF_NGC_PRO_CSP_POLICY_CHANGEDNgcCtnrSvc.dll
0xA3BC18750x41891D38WNF_USO_UPDATE_PROGRESSMusUpdateHandlers.dll
0xA3BC18750x418B0D3AWNF_WCM_MAPPING_POLICY_UPDATEDwcmsvc.dll
0xA3BC18750x41921C20WNF_MRT_PERSISTENT_QUALIFIER_CHANGEDMrmCoreR.dll
0xA3BC18750x41950223WNF_NLS_USER_DEFAULT_LOCALE_CHANGEDKernelBase.dll
0xA3BC18750x41950821WNF_LFS_MASTERSWITCH_STATEWalletService.dll
0xA3BC18750x41960A28WNF_EDP_DPL_KEYS_STATEefscore.dll
0xA3BC18750x41C6013DWNF_PO_POWER_STATE_CHANGESettingsHandlers_OneCore_BatterySaver.dll
0xA3BC18750x41C6072FWNF_BI_USER_LOGOFF_CHANNELbisrv.dll
0xA3BC18750x41C61439WNF_TZ_TIMEZONE_CHANGEDKernelBase.dll
0xA3BC20350x96003DWNF_PNPA_VOLUMES_CHANGED_SESSIONwinsrv.dll
0xA3BC20350x41870A38WNF_UDA_TASK_CHANGEDPimIndexMaintenance.dll
0xA3BC20350x41C61629WNF_DX_NETWORK_DISPLAY_STATE_CHANGE_NOTIFICATIONDisplayManager.dll
0xA3BC20750x880073AWNF_WIFI_SERVICE_NOTIFICATIONSwificonnapi.dll
0xA3BC20750xD8A0B2EWNF_CELL_REGISTRATION_STATUS_CAN0wwansvc.dll
0xA3BC20750x12960F20WNF_MAPS_MAPLOADER_PACKAGE_CHANGESettingsHandlers_Maps.dll
0xA3BC20750x1583002EWNF_CNET_DPU_GLOBAL_STATE_ON_TRACKSubscriptionMgr.dll
0xA3BC20750x4183182BWNF_FVE_WIM_HASH_GENERATION_COMPLETIONWofTasks.dll
0xA3BC20750x41840B3EWNF_SEB_NETWORK_STATE_CHANGESAPHostService.dll
0xA3BC20750x41841D38WNF_USB_CHARGING_STATEUcmCx.dll
0xA3BC20750x41850721WNF_LIC_DEVICE_LICENSE_UPDATEDLicenseManagerSvc.dll
0xA3BC20750x418B0D3AWNF_WCM_PROFILE_CONFIG_UPDATEDwwansvc.dll
0xA3BC20750x41950821WNF_LFS_GEOFENCETRACKING_STATELocationGeofences.dll
0xA3BC20750x41C6013DWNF_PO_ENERGY_SAVER_STATEAuthExt.dll
0xA3BC20750x41C6072FWNF_BI_SESSION_CONNECT_CHANNELbisrv.dll
0xA3BC24750xD83063EWNF_SHEL_OOBE_USER_LOGON_COMPLETEwifinetworkmanager.dll
0xA3BC28350x41870A38WNF_UDA_CONTACT_SORT_CHANGEDPimIndexMaintenance.dll
0xA3BC28350x41960A28WNF_EDP_DIALOG_CANCELefswrt.dll
0xA3BC28350x41C61629WNF_DX_MONITOR_CHANGE_NOTIFICATIONApplicationFrame.dll
0xA3BC28750x96003DWNF_PNPA_HARDWAREPROFILES_CHANGEDwinsrv.dll
0xA3BC28750x880073AWNF_WIFI_HOTSPOT_HOST_READYwifinetworkmanager.dll
0xA3BC28750xD83063EWNF_SHEL_VEEVENT_DISPATCHER_CLIENT_PIPE_CLOSEDtwinui.dll
0xA3BC28750xD8A0B2EWNF_CELL_UICC_STATUS_SLOT0wwansvc.dll
0xA3BC28750x1583002EWNF_CNET_DPU_GLOBAL_STATE_UNDER_TRACKSubscriptionMgr.dll
0xA3BC28750x41840B3EWNF_SEB_MBAE_NOTIFICATION_RECEIVEDtetheringservice.dll
0xA3BC28750x41891D38WNF_USO_ACTIVE_SESSIONmusdialoghandlers.dll
0xA3BC28750x41950223WNF_NLS_LOCALE_INFO_CHANGEDKernelBase.dll
0xA3BC28750x41C6013DWNF_PO_ENERGY_SAVER_SETTINGWindows.Energy.dll
0xA3BC28750x41C6072FWNF_BI_SESSION_DISCONNECT_CHANNELbisrv.dll
0xA3BC28750x41C61D22WNF_OS_BATTERY_AC_ONLINEwpncore.dll
0xA3BC30350x96003DWNF_PNPA_HARDWAREPROFILES_CHANGED_SESSIONwinsrv.dll
0xA3BC30350xF950324WNF_IMSN_KILL_LOGICAL_FOCUSdui70.dll
0xA3BC30750x1583002EWNF_CNET_DPU_GLOBAL_STATE_NOT_TRACKEDSubscriptionMgr.dll
0xA3BC30750x41850721WNF_LIC_DEVICE_LICENSE_MISSINGwlidsvc.dll
0xA3BC30750x41950223WNF_NLS_GEOID_CHANGEDkernel32.dll
0xA3BC30750x41950821WNF_LFS_POSITION_AVAILABLELocationPeComposite.dll
0xA3BC30750x41C6013DWNF_PO_ENERGY_SAVER_OVERRIDESettingsHandlers_OneCore_BatterySaver.dll
0xA3BC30750x41C6072FWNF_BI_APPLICATION_UNINSTALL_CHANNELbisrv.dll
0xA3BC30750x41C61D22WNF_OS_USER_PRESENCEwpncore.dll
0xA3BC30B50x41C61629WNF_DX_VIDMM_TRIM_NOTIFICATIONgdi32.dll
0xA3BC38350xF950324WNF_IMSN_PROJECTIONDISPLAYAVAILABLEtwinapi.appcore.dll
0xA3BC38750x96003DWNF_PNPA_PORTS_CHANGEDwinsrv.dll
0xA3BC38750xD83063EWNF_SHEL_NOTIFICATION_SETTINGS_CHANGEDNotificationController.dll
0xA3BC38750xD8A0B2EWNF_CELL_OPERATOR_NAME_CAN0wwansvc.dll
0xA3BC38750x418A063EWNF_SHL_START_READYLocationPermissions.dll
0xA3BC38750x41950821WNF_LFS_CLIENT_RECALCULATE_PERMISSIONSLocationPermissions.dll
0xA3BC38750x41C6072FWNF_BI_APPLICATION_SERVICING_START_CHANNELbisrv.dll
0xA3BC38750x41C61629WNF_DX_VIDMM_BUDGETCHANGE_NOTIFICATIONdxgi.dll
0xA3BC40350x96003DWNF_PNPA_PORTS_CHANGED_SESSIONwinsrv.dll
0xA3BC40750xD83063EWNF_SHEL_SOFTLANDING_RULE_TRIGGEREDdiagtrack.dll
0xA3BC40750xD8A0B2EWNF_CELL_CDMA_ACTIVATION_CAN0wwansvc.dll
0xA3BC40750x13920028WNF_ENTR_BROWSER_POLICY_VALUE_CHANGEDEnterpriseAppMgmtSvc.dll
0xA3BC40750x41840B3EWNF_SEB_ONLINE_ID_CONNECTED_STATE_CHANGEwlidsvc.dll
0xA3BC40750x41950821WNF_LFS_PERMISSION_TO_SHOW_ICON_CHANGEDSettingsHandlers_Geolocation.dll
0xA3BC40750x41C6072FWNF_BI_APPLICATION_SERVICING_STOP_CHANNELbisrv.dll
0xA3BC40750x41C61629WNF_DX_HARDWARE_CONTENT_PROTECTION_TILT_NOTIFICATIONdxgi.dll
0xA3BC40750x41C61D22WNF_OS_BATTERY_SAVINGS_STATErascustom.dll
0xA3BC48750x880073AWNF_WIFI_AOAC_STATUSwifinetworkmanager.dll
0xA3BC48750xD83063EWNF_SHEL_START_LAYOUT_READYSharedStartModel.dll
0xA3BC48750xD8A0B2EWNF_CELL_NETWORK_TIME_CAN0wwansvc.dll
0xA3BC48750x1583002EWNF_CNET_CELLULAR_CONNECTIONS_AVAILABLEwcmsvc.dll
0xA3BC48750x41C6072FWNF_BI_LOCK_SCREEN_UPDATE_CHANNELbisrv.dll
0xA3BC48750x41C61629WNF_DX_INTERNAL_PANEL_DIMENSIONSKernelBase.dll
0xA3BC50350x41C61629WNF_DX_MODERN_OUTPUTDUPLICATIONuDWM.dll
0xA3BC50750xD83063EWNF_SHEL_APPRESOLVER_SCANshell32.dll
0xA3BC50750xD8A0B2EWNF_CELL_AVAILABLE_OPERATORS_CAN0wwansvc.dll
0xA3BC50750x11900B29WNF_DEVP_ENTERPRISE_ENFORCE_POLICYEnterpriseAppMgmtSvc.dll
0xA3BC50750x1583002EWNF_CNET_NON_CELLULAR_CONNECTIONS_AVAILABLEwcmsvc.dll
0xA3BC50750x19890C35WNF_XBOX_APPLICATION_NO_LONGER_RUNNINGXblAuthManager.til
0xA3BC50750x41C6013DWNF_PO_DISCHARGE_ESTIMATEWindows.Energy.dll
0xA3BC50750x41C6072FWNF_BI_EVENT_DELETIONbisrv.dll
0xA3BC58350xD83063EWNF_SHEL_LOCKSCREEN_ACTIVELogonController.dll
0xA3BC58350x41C61629WNF_DX_DISPLAY_CONFIG_CHANGE_NOTIFICATIONDisplayManager.dll
0xA3BC58750xD8A0B2EWNF_CELL_DEVICE_INFO_CAN0wwansvc.dll
0xA3BC58750xF911D22WNF_OSWN_SYSTEM_CLOCK_CHANGEDStorSvc.dll
0xA3BC58750x13920028WNF_ENTR_APPLICATIONMANAGEMENT_POLICY_VALUE_CHANGEDEnterpriseAppMgmtSvc.dll
0xA3BC58750x41C6072FWNF_BI_PSM_TEST_HOOK_CHANNELpsmsrv.dll
0xA3BC60750x880073AWNF_WIFI_TILE_UPDATEwifinetworkmanager.dll
0xA3BC60750xD83063EWNF_SHEL_START_APPLIFECYCLE_INSTALL_FINISHEDshell32.dll
0xA3BC60750xF911D22WNF_OSWN_STORAGE_PRESENCE_CHANGEStorSvc.dll
0xA3BC60750x41C6013DWNF_PO_CHARGE_ESTIMATESettingsHandlers_OneCore_BatterySaver.dll
0xA3BC60750x41C6072FWNF_BI_QUIET_MODE_UPDATE_CHANNELbisrv.dll
0xA3BC64750xD8A0B2EWNF_CELL_DATA_ENABLED_BY_USER_MODEM0wwansvc.dll
0xA3BC68350xF840539WNF_TKBN_KEYBOARD_GESTUREmsctfuimanager.dll
0xA3BC68350x41C6072FWNF_BI_BI_READYBrokerLib.dll
0xA3BC68750x880073AWNF_WIFI_AVERAGE_TRANSMITncsi.dll
0xA3BC68750xD83063EWNF_SHEL_START_APPLIFECYCLE_DOWNLOAD_STARTEDshell32.dll
0xA3BC68750xD8A0B2EWNF_CELL_PHONE_NUMBER_CAN0wwansvc.dll
0xA3BC68750xF911D22WNF_OSWN_STORAGE_VOLUME_STATUS_CHANGEStorSvc.dll
0xA3BC68750x1583002EWNF_CNET_NON_CELLULAR_CONNECTEDqmgr.dll
0xA3BC68750x41840B3EWNF_SEB_USER_PRESENTRDXTaskFactory.dll
0xA3BC70350xF840539WNF_TKBN_RESTRICTED_KEYBOARD_GESTUREmsctfuimanager.dll
0xA3BC70750x880073AWNF_WIFI_MEDIA_STREAMING_MODEwlansvc.dll
0xA3BC70750xD8A0B2EWNF_CELL_VOICEMAIL_NUMBER_CAN0wwansvc.dll
0xA3BC70750xF911D22WNF_OSWN_STORAGE_FREE_SPACE_CHANGEStorSvc.dll
0xA3BC70750x1583002EWNF_CNET_RADIO_ACTIVITY_OR_NON_CELLULAR_CONNECTEDwcmsvc.dll
0xA3BC70750x19890C35WNF_XBOX_LIVE_CONNECTIVITY_CHANGEDXblAuthManager.til
0xA3BC70750x41840B3EWNF_SEB_SYSTEM_ACdiagtrack.dll
0xA3BC70750x41C6072FWNF_BI_NOTIFY_NEW_SESSIONbisrv.dll
0xA3BC78350xF840539WNF_TKBN_CANDIDATE_WINDOW_STATEmsctfuimanager.dll
0xA3BC78750x880073AWNF_WIFI_TASK_TRIGGERwifinetworkmanager.dll
0xA3BC78750xF911D22WNF_OSWN_STORAGE_TEMP_CLEANUP_CHANGEStorSvc.dll
0xA3BC78750x13920028WNF_ENTR_ABOVELOCK_POLICY_VALUE_CHANGEDNotificationController.dll
0xA3BC78750x41840B3EWNF_SEB_MONITOR_ONSyncController.dll
0xA3BC7C750xD8A0B2EWNF_CELL_REGISTRATION_PREFERENCES_CAN0wwansvc.dll
0xA3BC80750x880073AWNF_WIFI_L3_AUTH_STATEwifinetworkmanager.dll
0xA3BC80750xD8A0B2EWNF_CELL_CAN_STATE_CAN0wwansvc.dll
0xA3BC8C750xD8A0B2EWNF_CELL_USER_PREFERRED_POWER_STATE_MODEM0wwansvc.dll
0xA3BC90750xD83063EWNF_SHEL_ENTERPRISE_START_LAYOUT_POLICY_VALUE_CHANGEDSharedStartModel.dll
0xA3BC90750x41840B3EWNF_SEB_BACKGROUND_WORK_COST_HIGHpsmsrv.dll
0xA3BC98750xD8A0B2EWNF_CELL_POSSIBLE_DATA_ACTIVITY_CHANGE_MODEM0wwansvc.dll
0xA3BC98750x41840B3EWNF_SEB_SYSTEM_LPEwuaueng.dll
0xA3BCA0750xD83063EWNF_SHEL_SOFTLANDING_RULES_UPDATEDdiagtrack.dll
0xA3BCA0750x19890C35WNF_XBOX_SYSTEM_CONSTRAINED_MODE_STATUS_CHANGEDMiracastReceiver.dll
0xA3BCA4750xD8A0B2EWNF_CELL_SYSTEM_CONFIGwwansvc.dll
0xA3BCA8750xD83063EWNF_SHEL_NOTIFICATIONS_CRITICALNotificationController.dll
0xA3BCA8750xD8A0B2EWNF_CELL_REGISTRATION_STATUS_DETAILS_CAN0wwansvc.dll
0xA3BCA8750x41840B3EWNF_SEB_SYSTEM_MAINTENANCEubpm.dll
0xA3BCAC750x41C6193FWNF_RW_WALLET_HAS_WEBSERVICE_WORKWalletService.dll
0xA3BCB0750xD83063EWNF_SHEL_START_VISIBILITY_CHANGEDtwinapi.appcore.dll
0xA3BCB0750xD8A0B2EWNF_CELL_SUPPORTED_SYSTEM_TYPES_CAN0wwansvc.dll
0xA3BCB0750x41840B3EWNF_SEB_GEOLOCATIONSystemEventsBrokerServer.dll
0xA3BCB8750xD8A0B2EWNF_CELL_PERSO_STATUS_CAN0wwansvc.dll
0xA3BCB8750xF911D22WNF_OSWN_STORAGE_FINISHED_USAGE_CATEGORY_UPDATEStorSvc.dll
0xA3BCB8750x41C6193FWNF_RW_WALLET_GEOFENCE_STATECHANGEDWalletService.dll
0xA3BCC0750xD8A0B2EWNF_CELL_HOME_OPERATOR_CAN0wwansvc.dll
0xA3BCC0750xF911D22WNF_OSWN_STORAGE_SHELLHWD_EVENTStorSvc.dll
0xA3BCC8750xD8A0B2EWNF_CELL_HOME_PRL_ID_CAN0wwansvc.dll
0xA3BCD8750x13920028WNF_ENTR_BLUETOOTH_POLICY_VALUE_CHANGEDbthserv.dll
0xA3BCE0750x13920028WNF_ENTR_EDPNETWORKING_POLICY_CHANGEDMPSSVC.dll
0xA3BCE0750x41840B3EWNF_SEB_OFFLOADED_AUDIOaudiosrv.dll
0xA3BCE8750xD8A0B2EWNF_CELL_UTK_SETUP_MENU_SLOT0MbaeApi.dll
0xA3BCE8750x19890C35WNF_XBOX_XAM_READY_FOR_DEVKIT_REBOOTXblAuthManager.til
0xA3BCE8750x41840B3EWNF_SEB_NON_OFFLOADED_AUDIOaudiosrv.dll
0xA3BCF8750x19890C35WNF_XBOX_EXIT_SILENT_BOOT_MODEMiracastReceiver.dll
0xA3BD00750xD8A0B2EWNF_CELL_CALLFORWARDING_STATUS_CAN0CellularAPI.dll
0xA3BD0C750xD8A0B2EWNF_CELL_RADIO_TYPE_MODEM0wwansvc.dll
0xA3BD10750xD8A0B2EWNF_CELL_SIGNAL_STRENGTH_BARS_CAN1wwansvc.dll
0xA3BD18750xD8A0B2EWNF_CELL_SYSTEM_TYPE_CAN1wwansvc.dll
0xA3BD20750xD8A0B2EWNF_CELL_REGISTRATION_STATUS_CAN1wwansvc.dll
0xA3BD20750x13920028WNF_ENTR_ALLOWUPDATESERVICE_POLICY_VALUE_CHANGEDwuaueng.dll
0xA3BD20750x19890C35WNF_XBOX_MSA_ENVIRONMENT_CONFIGUREDXblAuthManager.til
0xA3BD28750xD8A0B2EWNF_CELL_UICC_STATUS_SLOT1wwansvc.dll
0xA3BD28750x13920028WNF_ENTR_UPDATESERVICEURL_POLICY_VALUE_CHANGEDwuaueng.dll
0xA3BD30750x13920028WNF_ENTR_ALLOWNONMICROSOFTSIGNEDUPDATE_POLICY_VALUE_CHANGEDwuaueng.dll
0xA3BD30750x19890C35WNF_XBOX_SYSTEM_GAME_STREAMING_STATE_CHANGEDMiracastReceiver.dll
0xA3BD40750xD8A0B2EWNF_CELL_OPERATOR_NAME_CAN1wwansvc.dll
0xA3BD48750xD8A0B2EWNF_CELL_CDMA_ACTIVATION_CAN1wwansvc.dll
0xA3BD48750x418A063EWNF_SHL_OOBE_PROCESS_COMPLETEwifinetworkmanager.dll
0xA3BD50750xD8A0B2EWNF_CELL_NETWORK_TIME_CAN1wwansvc.dll
0xA3BD58750xD8A0B2EWNF_CELL_AVAILABLE_OPERATORS_CAN1wwansvc.dll
0xA3BD60750xD8A0B2EWNF_CELL_DEVICE_INFO_CAN1wwansvc.dll
0xA3BD70750xD8A0B2EWNF_CELL_PHONE_NUMBER_CAN1wwansvc.dll
0xA3BD78750x41840B3EWNF_SEB_MOBILE_BROADBAND_REGISTRATION_STATE_CHANGEwwansvc.dll
0xA3BD80750x41840B3EWNF_SEB_MOBILE_BROADBAND_RADIO_STATE_CHANGEwwansvc.dll
0xA3BD88750x41840B3EWNF_SEB_MOBILE_BROADBAND_PIN_LOCK_STATE_CHANGEwwansvc.dll
0xA3BD8C750xD8A0B2EWNF_CELL_REGISTRATION_PREFERENCES_CAN1wwansvc.dll
0xA3BD90750xD8A0B2EWNF_CELL_CAN_STATE_CAN1wwansvc.dll
0xA3BD90750x41840B3EWNF_SEB_MOBILE_BROADBAND_DEVICE_SERVICE_NOTIFICATIONwwansvc.dll
0xA3BD98750xD8A0B2EWNF_CELL_REGISTRATION_STATUS_DETAILS_CAN1wwansvc.dll
0xA3BDA0750xD8A0B2EWNF_CELL_SUPPORTED_SYSTEM_TYPES_CAN1wwansvc.dll
0xA3BDA8750xD8A0B2EWNF_CELL_HOME_OPERATOR_CAN1wwansvc.dll
0xA3BDB0750xD8A0B2EWNF_CELL_HOME_PRL_ID_CAN1wwansvc.dll
0xA3BDC8750x418A063EWNF_SHL_DICTATION_RUNNINGDictationManager.dll
0xA3BDD0750xD8A0B2EWNF_CELL_UTK_SETUP_MENU_SLOT1MbaeApi.dll
0xA3BDE0750xD8A0B2EWNF_CELL_CALLFORWARDING_STATUS_CAN1CellularAPI.dll
0xA3BDE8750xD8A0B2EWNF_CELL_PERSO_STATUS_CAN1wwansvc.dll
0xA3BDF4750xD8A0B2EWNF_CELL_CONFIGURED_LINES_CAN0wwansvc.dll
0xA3BDFC750xD8A0B2EWNF_CELL_CONFIGURED_LINES_CAN1wwansvc.dll
0xA3BE00750xD8A0B2EWNF_CELL_UICC_STATUS_DETAILS_SLOT0wwansvc.dll
0xA3BE08750xD8A0B2EWNF_CELL_UICC_STATUS_DETAILS_SLOT1wwansvc.dll
0xA3BE10750xD8A0B2EWNF_CELL_PREFERRED_LANGUAGES_SLOT0wwansvc.dll
0xA3BE18750xD8A0B2EWNF_CELL_PREFERRED_LANGUAGES_SLOT1wwansvc.dll
0xA3BE20750xD8A0B2EWNF_CELL_IMSI_CAN0wwansvc.dll
0xA3BE28750xD8A0B2EWNF_CELL_IMSI_CAN1wwansvc.dll
0xA3BE30750xD8A0B2EWNF_CELL_LEGACY_SETTINGS_MIGRATIONCellularAPI.dll
0xA3BE38750xD8A0B2EWNF_CELL_UICC_ATR_SLOT0wwansvc.dll
0xA3BE40750xD8A0B2EWNF_CELL_UICC_ATR_SLOT1wwansvc.dll
0xA3BE48750xD8A0B2EWNF_CELL_UICC_SIMSEC_SLOT0wwansvc.dll
0xA3BE50750xD8A0B2EWNF_CELL_UICC_SIMSEC_SLOT1wwansvc.dll
0xA3BE58750xD8A0B2EWNF_CELL_CAN_CONFIGURATION_SET_COMPLETE_MODEM0wwansvc.dll
0xA3BE60750xD8A0B2EWNF_CELL_REGISTRATION_CHANGED_TRIGGER_MVwwansvc.dll
0xA3BE68750xD8A0B2EWNF_CELL_EMERGENCY_CALLBACK_MODE_STATUSwwansvc.dll
0xA3BE70750xD8A0B2EWNF_CELL_SIGNAL_STRENGTH_DETAILS_CAN0wwansvc.dll
0xA3BE78750xD8A0B2EWNF_CELL_SIGNAL_STRENGTH_DETAILS_CAN1wwansvc.dll
0xA3BE80750xD8A0B2EWNF_CELL_IMS_STATUS_CAN0wwansvc.dll
0xA3BE88750xD8A0B2EWNF_CELL_IMS_STATUS_CAN1wwansvc.dll
0xA3BE90750xD8A0B2EWNF_CELL_IWLAN_AVAILABILITY_CAN0wwansvc.dll
0xA3BE98750xD8A0B2EWNF_CELL_IWLAN_AVAILABILITY_CAN1wwansvc.dll
↧
↧

CFG with LLVM

January 8, 2016, 3:30 am
$
0
0
On holydays I read book "LLVM Cookbook" (not very good - lots of meaningless copy-pasted code blocks are annoying) and played a bit with fresh llvm-3.7.1 (was released 5 january)

So I decided to check whether it is possible to implement MSCFG in llvm. I have two news - good and bad, as usually

Good: yes, you can easy add instrumentation in llvm - just add some plugin for IR derived from FunctionPass and add call to your guard_check_icall before each VTBL call (or even on any ptr call). I think it will take one day for any CS-student

Bad: you need integration with MS linker and it seems that support of CFG in COFF files is totally undocumented. LLVM itself cannot make load_config and even more - their definition of coff_load_configuration in include\llvm\Object\COFF.h has no fields for CFG (like GuardCFCheckFunctionPointer and GuardCFFunctionTable)
↧

lxcore syscall table

March 3, 2016, 6:04 am
$
0
0
I can`t get symbols for lxcore.sys so I just write simple idc scipt. Each item in table has very simple structure:
PAGE:00000001C0046620   imul  r14, r12, 38h      ; size of item in syscall table
PAGE:00000001C0046624   mov   r15, rax
PAGE:00000001C0046627   lea   rax, lx_ssdt
PAGE:00000001C004662E   add   r14, rax
PAGE:00000001C0046631   cmp   r12, 136h          ; count of items in syscall table
PAGE:00000001C0046638   jnb   loc_1C00467AE

string with name of method and arguments located at offset 0x10
IDC script to dump syscall table from lxcore.sys:
#include <idc.idc>

static main(void)
{
  auto addr, name, fp, idx, s_addr;
  fp = fopen("lx.dmp", "w");
  if ( !fp )
  {
    return;
  }
  addr = 0x1C0008110;
  for ( idx = 0; idx < 0x136; idx = idx + 1, addr = addr + 0x38 )
  {
    s_addr = Qword(addr + 0x10);
    fprintf(fp, "%X\t", idx);
    if ( s_addr != 0 )
    {
      // dump string
      for ( ; ; s_addr = s_addr + 1 )
      {
        name = Byte(s_addr);
        if ( !name )
          break;
        fprintf(fp, "%c", name);
      }
    }
    fprintf(fp, "\n");
  }
  fclose(fp);
}
And table itself
0    READ - %u, {%p}, %u
1    WRITE - %d, {%p}, %u
2    OPEN - {%p}, 0x%x, 0x%x
3    CLOSE - %u
4    STAT64 - {%p}, {%p}
5    FSTAT64 - %u, {%p}
6    LSTAT64 - {%p}, {%p}
7    POLL - {%p}, %u, %d
8    LSEEK - %u, %u, %u
9    MMAP - {%p}, 0x%x, %Iu, 0x%x, %d, %Iu
A    MPROTECT - {%p}, 0x%x, 0x%x
B    MUNMAP - {%p}, 0x%x
C    BRK - {%p}
D    RT_SIGACTION - %u, {%p}, {%p} %lu
E    RT_SIGPROCMASK - %u, {%p}, {%p}, %lu
F    RT_SIGRETURN
10    IOCTL - %d, 0x%x, {%p}
11    PREAD64 - %d, {%p}, %u, %u, %u
12    PWRITE64 - %d, {%p}, %u, %u, %u
13    READV - %d, {%p}, %u
14    WRITEV - %d, {%p}, %u
15    ACCESS - {%p}, %u
16    PIPE - {%p}
17    SELECT - %d, {%p}, {%p}, {%p}, {%p}
18    SCHED_YIELD
19    MREMAP - {%p}, 0x%Ix, 0x%Ix, 0x%x, {%p}
1A    MSYNC - {%p}, 0x%x, 0x%x
1B  
1C    MADVISE - {%p}, 0x%x, %u
1D  
1E  
1F  
20    DUP - %u
21    DUP2 - %d, %d
22    PAUSE
23    NANOSLEEP - {%p}, {%p}
24  
25  
26    SETITIMER %d, {%p}, {%p}
27    GETPID
28  
29    SOCKET - %d, %d, %d
2A    CONNECT - %d, {%p}, %d
2B    ACCEPT - %d, {%p}, {%p}
2C    SENDTO - %d, {%p}, %Iu, %d, {%p}, %d
2D    RECVFROM - %d, {%p}, %Iu, %d, {%p}, {%p}
2E    SENDMSG - %d, {%p}, %d
2F    RECVMSG - %d, {%p}, %d
30    SHUTDOWN - %d, %d
31    BIND - %d, {%p}, %d
32    LISTEN - %d, %d
33    GETSOCKNAME - %d, {%p}, {%p}
34    GETPEERNAME (stub) - %d, {%p}, {%p}
35    SOCKETPAIR - %d, %d, %d, {%p}
36    SETSOCKOPT - %d, %d, %d, {%p}, %d
37    GETSOCKOPT - %d, %d, %d, {%p}, {%p}
38    CLONE - 0x%x, {%p}, {%p}, {%p}, {%p}
39    FORK
3A    VFORK
3B    EXECVE - {%p}, {%p}, {%p}
3C    EXIT - %x
3D    WAIT4 - %u, {%p}, %u, {%p}
3E    KILL - 0x%x, %u
3F    NEWUNAME - {%p}
40  
41  
42  
43  
44  
45  
46  
47  
48    FCNTL64 - %u, %u, 0x%x
49    FLOCK - %u %u
4A    FSYNC - %u
4B    FDATASYNC - %u
4C    TRUNCATE64 - {%p}, %d, %d
4D    FTRUNCATE64 - %d, %I64
4E    GETDENTS - %d, {%p}, %u
4F    GETCWD - {%p}, %u
50    CHDIR - {%p}
51    FCHDIR - %u
52    RENAME - {%p} {%p}
53    MKDIR - {%p}, 0x%x
54    RMDIR - {%p}
55    CREAT - {%p}, 0x%x
56    LINK - {%p}, {%p}
57    UNLINK - {%p}
58    SYMLINK - {%p}, {%p}
59    READLINK (stub) - {%p}, {%p}, %u
5A    CHMOD - {%p}, %u
5B    FCHMOD - {%d}, %u
5C    CHOWN - {%p}, %u, %u
5D    FCHOWN - %u, %u, %u
5E    LCHOWN - {%p}, %u, %u
5F    UMASK - 0%o
60    GETTIMEOFDAY - {%p}, {%p}
61    GETRLIMIT (stub) - %u, {%p}
62    GETRUSAGE%d, {%p}
63    SYSINFO (stub) - {%p}
64    TIMES - {%p}
65    PTRACE (stub) - %u, %u, {%p}, {%p}
66    GETUID
67  
68    GETGID
69    SETUID - %u
6A    SETGID - %u
6B    GETEUID
6C    GETEGID
6D    SETPGID - %u, %u
6E    GETPPID
6F    GETPGRP
70    SETSID
71    SETREUID - %u, %u
72    SETREGID - %u, %u
73    GETGROUPS%d, {%p}
74    SETGROUPS (stub) - %u, {%p}
75    SETRESUID - %u, %u, %u
76    GETRESUID - {%p}, {%p}, {%p}
77    SETRESGID - %u, %u, %u
78    GETRESGID - {%p}, {%p}, {%p}
79    GETPGID - 0x%x
7A  
7B  
7C    GETSID - 0x%x
7D    CAPGET - {%p}, {%p}
7E    CAPSET - {%p}, {%p}
7F    RT_SIGPENDING - {%p}, %lu
80    RT_SIGTIMEDWAIT (stub-err) - {%p}, {%p}, {%p}, %lu
81  
82    RT_SIGSUSPEND - {%p}, %lu
83    SIGALTSTACK (stub) {%p}, {%p}
84    UTIME - {%p}, {%p}
85    MKNOD (stub) - {%p}, %x, %x
86  
87    PERSONALITY - 0x%Ix
88  
89    STATFS64 - {%p}, %u, {%p}
8A    FSTATFS64- %u %u {%p}
8B  
8C    GETPRIORITY - %d, %d
8D    SETPRIORITY - %d, %d, %d
8E    SCHED_SETPARAM - %u, {%p}
8F    SCHED_GETPARAM - %u, {%p}
90    SCHED_SETSCHEDULER - %u, %d, {%p}
91    SCHED_GETSCHEDULER - %u
92    SCHED_GET_PRIORITY_MAX - %u
93    SCHED_GET_PRIORITY_MIN - %u
94  
95    MLOCK (stub) - {%p}, %u
96    MUNLOCK (stub) - {%p}, %u
97  
98  
99  
9A  
9B  
9C  
9D    PRCTL - %u, 0x%x, 0x%x, 0x%x, 0x%x
9E    ARCH_PRCTL - %d, {%p}
9F  
A0    SETRLIMIT (stub) - %d, {%p}
A1  
A2    SYNC
A3  
A4    SETTIMEOFDAY - {%p}, {%p}
A5    MOUNT (stub) - {%p}, {%p}, {%p}, 0x%x, {%p}
A6    UMOUNT2 (stub) - {%p}, 0x%x
A7  
A8  
A9    REBOOT - %x, %x, %d, {%p}
AA  
AB  
AC  
AD  
AE  
AF  
B0  
B1  
B2  
B3  
B4  
B5  
B6  
B7  
B8  
B9  
BA    GETTID
BB  
BC    SETXATTR - {%p}, {%p}, {%p}, 0x%x, %d
BD  
BE    FSETXATTR - %d, {%p}, {%p}, 0x%x, %d
BF    GETXATTR(stub) - {%p}, {%p}, {%p}, %Iu
C0  
C1  
C2  
C3  
C4  
C5  
C6  
C7  
C8    TKILL (stub) - 0x%x, %u
C9    TIME - {%p}
CA    FUTEX - {%p}, 0x%x, 0x%x, {%p}, {%p}, 0x%x
CB    SCHED_SETAFFINITY (stub) - %u, %u, {%p}
CC  
CD    SET_THREAD_AREA - {%p}
CE  
CF  
D0  
D1  
D2  
D3    GET_THREAD_AREA (stub) - {%p}
D4  
D5    EPOLL_CREATE - %d
D6  
D7  
D8  
D9    GETDENTS64 - %d, {%p}, %u
DA    SET_TID_ADDRESS - {%p}
DB  
DC  
DD    FADVISE64 (stub) - %d, %lld, %lu, %d
DE  
DF  
E0  
E1  
E2  
E3  
E4    CLOCK_GETTIME - %u, {%p}
E5    CLOCK_GETRES - %u, {%p}
E6    CLOCK_NANOSLEEP - %u, 0x%x, {%p}, {%p}
E7    EXIT_GROUP - %x
E8    EPOLL_WAIT - %d, {%p}, %d, %d
E9    EPOLL_CTL - %d, %d, %d, {%p}
EA    TGKILL (stub) - 0x%x, 0x%x, %u
EB    UTIMES - {%p}, {%p}
EC  
ED  
EE  
EF  
F0  
F1  
F2  
F3  
F4  
F5  
F6  
F7  
F8  
F9  
FA  
FB    IOPRIO_SET (stub) - 0x%x 0x%x 0x%x
FC  
FD    INOTIFY_INIT (stub)
FE    INOTIFY_ADD_WATCH (stub) - %u {%p} %d
FF    INOTIFY_RM_WATCH (stub) - %u %u
100  
101    OPENAT - %u {%p}, 0x%x, 0x%x
102    MKDIRAT - %u, {%p}, 0x%x
103  
104    FCHOWNAT - %d, {%p}, %u, %u, %d
105  
106    FSTATAT64 - %u {%p} {%p} %u
107    UNLINKAT - %u, {%p}, 0x%x
108  
109    LINKAT - %d, {%p}, %d, {%p}, %d
10A  
10B  
10C    FCHMODAT - {%d}, {%p}, %u
10D    FACCESSAT - %d, {%p}, %d, %d
10E    PSELECT6 - %d, {%p}, {%p}, {%p}, {%p}, {%p}
10F  
110    UNSHARE (stub) - 0x%x
111    SET_ROBUST_LIST (stub) - {%p}, %Iu
112    GET_ROBUST_LIST (stub) - %u {%p}, {%p}
113    SPLICE - %u, {%p}, %u, {%p}, %d, %d
114    TEE - %d, %d, %u, %d
115  
116  
117  
118    UTIMENSAT - %u, {%p} {%p} 0x%x
119  
11A  
11B    TIMERFD_CREATE - {%d} {%d}
11C    EVENTFD (stub) - 0x%x
11D  
11E    TIMERFD_SETTIME - {%d}, {%d}, {%p}, {%p}
11F    TIMERFD_GETTIME - {%d}, {%p}
120    ACCEPT4 - %d, {%p}, {%p}, %d
121  
122    EVENTFD2 (stub) - 0x%x 0x%x
123    EPOLL_CREATE1 - %d
124    DUP3 - %d, %d, %d
125    PIPE2 (stub) - %p %u
126  
127  
128  
129  
12A    PERF_EVENT_OPEN (stub) - {%p}, %u, %u, %u, 0x%Ix
12B  
12C  
12D  
12E  
12F  
130  
131  
132  
133    SENDMMSG - %d, {%p}, %u, %u
134  
135    GETCPU (stub) - {%p}, {%p}, {%p}
↧

apisetschema.dll from windows 10 build 14279

March 14, 2016, 6:24 am
$
0
0
Several new modules was added:
  • onecoreuap-print-render
  • onecoreuap-settingsync-status
  • win-core-ums
  • win-gdi-internal-uap
  • net-eap-sim
  • win-audiocore-coreaudiopolicymanager
  • win-casting-shell
  • win-com-psmregister
  • win-desktopappx
  • win-direct2d-desktop
  • win-dx-ddraw
  • win-gaming-xinput
  • win-kernelbase-packagebreakaway
  • win-media-avi
  •  win-mf-vfw
  • win-ntuser-private
  • win-rtcore-ntuser-wmpointer
  • win-security-shutdownext
  • win-uwf-servicing-apis

api-ms-onecoreuap-print-render-l1-1-0printrenderapihost.dll
api-ms-onecoreuap-settingsync-status-l1-1-0settingsynccore.dll
api-ms-win-appmodel-identity-l1-2-0kernel.appcore.dll
api-ms-win-appmodel-runtime-internal-l1-1-2kernel.appcore.dll
api-ms-win-appmodel-runtime-l1-1-1kernel.appcore.dll
api-ms-win-appmodel-state-l1-1-2kernel.appcore.dll
api-ms-win-appmodel-state-l1-2-0kernel.appcore.dll
api-ms-win-appmodel-unlock-l1-1-0kernel.appcore.dll
api-ms-win-base-bootconfig-l1-1-0advapi32.dll
api-ms-win-base-util-l1-1-0advapi32.dll
api-ms-win-composition-redirection-l1-1-0dwmredir.dll
api-ms-win-composition-windowmanager-l1-1-0udwm.dll
api-ms-win-core-apiquery-l1-1-0ntdll.dll
api-ms-win-core-appcompat-l1-1-1kernelbase.dll
api-ms-win-core-appinit-l1-1-0kernel32.dllkernelbase.dll
api-ms-win-core-atoms-l1-1-0kernel32.dll
api-ms-win-core-bicltapi-l1-1-4bi.dll
api-ms-win-core-biplmapi-l1-1-5twinapi.appcore.dll
api-ms-win-core-biptcltapi-l1-1-3twinapi.appcore.dll
api-ms-win-core-calendar-l1-1-0kernel32.dll
api-ms-win-core-com-l1-1-1combase.dll
api-ms-win-core-com-l2-1-1coml2.dll
api-ms-win-core-com-midlproxystub-l1-1-0combase.dll
api-ms-win-core-com-private-l1-1-1combase.dll
api-ms-win-core-comm-l1-1-0kernelbase.dll
api-ms-win-core-console-ansi-l2-1-0kernel32.dll
api-ms-win-core-console-l1-1-0kernelbase.dll
api-ms-win-core-console-l2-1-0kernelbase.dll
api-ms-win-core-crt-l1-1-0ntdll.dll
api-ms-win-core-crt-l2-1-0kernelbase.dll
api-ms-win-core-datetime-l1-1-2kernelbase.dll
api-ms-win-core-debug-l1-1-2kernelbase.dll
api-ms-win-core-debug-minidump-l1-1-0dbgcore.dll
api-ms-win-core-delayload-l1-1-1kernelbase.dll
api-ms-win-core-enclave-l1-1-0kernelbase.dll
api-ms-win-core-errorhandling-l1-1-3kernelbase.dll
api-ms-win-core-fibers-l1-1-1kernelbase.dll
api-ms-win-core-fibers-l2-1-1kernelbase.dll
api-ms-win-core-file-ansi-l1-1-0kernel32.dll
api-ms-win-core-file-ansi-l2-1-0kernel32.dll
api-ms-win-core-file-l1-1-1kernelbase.dll
api-ms-win-core-file-l1-2-2kernelbase.dll
api-ms-win-core-file-l2-1-2kernelbase.dll
api-ms-win-core-firmware-l1-1-0kernel32.dll
api-ms-win-core-handle-l1-1-0kernelbase.dll
api-ms-win-core-heap-l1-1-0kernelbase.dll
api-ms-win-core-heap-l1-2-0kernelbase.dll
api-ms-win-core-heap-l2-1-0kernelbase.dll
api-ms-win-core-heap-obsolete-l1-1-0kernel32.dll
api-ms-win-core-interlocked-l1-1-1kernelbase.dll
api-ms-win-core-interlocked-l1-2-0kernelbase.dll
api-ms-win-core-io-l1-1-1kernel32.dllkernelbase.dll
api-ms-win-core-job-l1-1-0kernelbase.dll
api-ms-win-core-job-l2-1-1kernel32.dll
api-ms-win-core-kernel32-legacy-ansi-l1-1-0kernel32.dll
api-ms-win-core-kernel32-legacy-l1-1-4kernel32.dll
api-ms-win-core-kernel32-private-l1-1-2kernel32.dll
api-ms-win-core-largeinteger-l1-1-0kernelbase.dll
api-ms-win-core-libraryloader-l1-1-1kernelbase.dll
api-ms-win-core-libraryloader-l1-2-1kernelbase.dll
api-ms-win-core-libraryloader-l2-1-0kernelbase.dll
api-ms-win-core-libraryloader-private-l1-1-0kernelbase.dll
api-ms-win-core-localization-ansi-l1-1-0kernel32.dll
api-ms-win-core-localization-l1-1-0kernelbase.dll
api-ms-win-core-localization-l1-2-2kernelbase.dll
api-ms-win-core-localization-l2-1-0kernelbase.dll
api-ms-win-core-localization-obsolete-l1-1-0kernelbase.dll
api-ms-win-core-localization-obsolete-l1-2-0kernelbase.dll
api-ms-win-core-localization-obsolete-l1-3-0kernelbase.dll
api-ms-win-core-localization-private-l1-1-0kernelbase.dll
api-ms-win-core-localregistry-l1-1-0kernelbase.dll
api-ms-win-core-marshal-l1-1-0combase.dll
api-ms-win-core-memory-l1-1-3kernelbase.dll
api-ms-win-core-misc-l1-1-0kernelbase.dll
api-ms-win-core-multipleproviderrouter-l1-1-0mpr.dll
api-ms-win-core-namedpipe-ansi-l1-1-1kernel32.dll
api-ms-win-core-namedpipe-l1-1-0kernelbase.dll
api-ms-win-core-namedpipe-l1-2-2kernelbase.dll
api-ms-win-core-namespace-ansi-l1-1-0kernel32.dll
api-ms-win-core-namespace-l1-1-0kernelbase.dll
api-ms-win-core-normalization-l1-1-0kernelbase.dll
api-ms-win-core-path-l1-1-0kernelbase.dll
api-ms-win-core-perfcounters-l1-1-0kernelbase.dll
api-ms-win-core-privateprofile-l1-1-1kernel32.dll
api-ms-win-core-processenvironment-ansi-l1-1-0kernel32.dll
api-ms-win-core-processenvironment-l1-1-1kernelbase.dll
api-ms-win-core-processenvironment-l1-2-0kernelbase.dll
api-ms-win-core-processsecurity-l1-1-0kernel32.dllkernelbase.dll
api-ms-win-core-processsnapshot-l1-1-0kernelbase.dll
api-ms-win-core-processthreads-l1-1-3kernel32.dllkernelbase.dll
api-ms-win-core-processtopology-l1-1-0kernelbase.dll
api-ms-win-core-processtopology-l1-2-0kernelbase.dll
api-ms-win-core-processtopology-obsolete-l1-1-0kernel32.dll
api-ms-win-core-processtopology-private-l1-1-0kernelbase.dll
api-ms-win-core-profile-l1-1-0kernelbase.dll
api-ms-win-core-psapi-ansi-l1-1-0kernelbase.dll
api-ms-win-core-psapi-l1-1-0kernelbase.dll
api-ms-win-core-psapi-obsolete-l1-1-0kernelbase.dll
api-ms-win-core-psapiansi-l1-1-0kernelbase.dll
api-ms-win-core-psm-app-l1-1-0twinapi.appcore.dll
api-ms-win-core-psm-appnotify-l1-1-0twinapi.appcore.dll
api-ms-win-core-psm-info-l1-1-0appsruprov.dll
api-ms-win-core-psm-key-l1-1-1kernelbase.dll
api-ms-win-core-psm-plm-l1-1-3twinapi.appcore.dll
api-ms-win-core-psm-rtimer-l1-1-1twinapi.appcore.dll
api-ms-win-core-psm-tc-l1-1-1twinapi.appcore.dll
api-ms-win-core-quirks-l1-1-1kernelbase.dll
api-ms-win-core-realtime-l1-1-1kernelbase.dll
api-ms-win-core-registry-l1-1-1kernelbase.dll
api-ms-win-core-registry-l2-1-0advapi32.dll
api-ms-win-core-registry-l2-2-0advapi32.dll
api-ms-win-core-registry-private-l1-1-0advapi32.dll
api-ms-win-core-registryuserspecific-l1-1-0kernelbase.dll
api-ms-win-core-rtlsupport-l1-1-1ntdll.dll
api-ms-win-core-rtlsupport-l1-2-0ntdll.dll
api-ms-win-core-shlwapi-legacy-l1-1-0kernelbase.dll
api-ms-win-core-shlwapi-obsolete-l1-1-0kernelbase.dll
api-ms-win-core-shlwapi-obsolete-l1-2-0kernelbase.dll
api-ms-win-core-shutdown-l1-1-1advapi32.dll
api-ms-win-core-sidebyside-ansi-l1-1-0kernel32.dll
api-ms-win-core-sidebyside-l1-1-0kernelbase.dll
api-ms-win-core-slapi-l1-1-0slc.dll
api-ms-win-core-string-l1-1-0kernelbase.dll
api-ms-win-core-string-l2-1-1kernelbase.dll
api-ms-win-core-string-obsolete-l1-1-1kernel32.dll
api-ms-win-core-stringansi-l1-1-0kernelbase.dll
api-ms-win-core-stringloader-l1-1-1kernelbase.dll
api-ms-win-core-synch-ansi-l1-1-0kernel32.dll
api-ms-win-core-synch-l1-1-1kernelbase.dll
api-ms-win-core-synch-l1-2-1kernelbase.dll
api-ms-win-core-sysinfo-l1-1-1kernelbase.dll
api-ms-win-core-sysinfo-l1-2-3kernelbase.dll
api-ms-win-core-sysinfo-l2-1-0advapi32.dll
api-ms-win-core-systemtopology-l1-1-0kernelbase.dll
api-ms-win-core-textinput-client-l1-1-0textinputframework.dll
api-ms-win-core-threadpool-l1-1-0kernelbase.dll
api-ms-win-core-threadpool-l1-2-0kernelbase.dll
api-ms-win-core-threadpool-legacy-l1-1-0kernelbase.dll
api-ms-win-core-threadpool-private-l1-1-0kernelbase.dll
api-ms-win-core-timezone-l1-1-0kernelbase.dll
api-ms-win-core-timezone-private-l1-1-0kernelbase.dll
api-ms-win-core-toolhelp-l1-1-0kernel32.dll
api-ms-win-core-ums-l1-1-0kernel32.dll
api-ms-win-core-url-l1-1-0kernelbase.dll
api-ms-win-core-util-l1-1-1kernel32.dllkernelbase.dll
api-ms-win-core-version-l1-1-1kernelbase.dll
api-ms-win-core-version-private-l1-1-0kernelbase.dll
api-ms-win-core-versionansi-l1-1-1kernelbase.dll
api-ms-win-core-windowsceip-l1-1-0kernelbase.dll
api-ms-win-core-windowserrorreporting-l1-1-0kernelbase.dll
api-ms-win-core-winrt-error-l1-1-1combase.dll
api-ms-win-core-winrt-errorprivate-l1-1-1combase.dll
api-ms-win-core-winrt-l1-1-0combase.dll
api-ms-win-core-winrt-propertysetprivate-l1-1-1wintypes.dll
api-ms-win-core-winrt-registration-l1-1-0combase.dll
api-ms-win-core-winrt-robuffer-l1-1-0wintypes.dll
api-ms-win-core-winrt-roparameterizediid-l1-1-0combase.dll
api-ms-win-core-winrt-string-l1-1-1combase.dll
api-ms-win-core-wow64-l1-1-1kernelbase.dll
api-ms-win-core-xstate-l1-1-1ntdll.dll
api-ms-win-core-xstate-l2-1-0kernelbase.dll
api-ms-win-crt-conio-l1-1-0ucrtbase.dll
api-ms-win-crt-convert-l1-1-0ucrtbase.dll
api-ms-win-crt-environment-l1-1-0ucrtbase.dll
api-ms-win-crt-filesystem-l1-1-0ucrtbase.dll
api-ms-win-crt-heap-l1-1-0ucrtbase.dll
api-ms-win-crt-locale-l1-1-0ucrtbase.dll
api-ms-win-crt-math-l1-1-0ucrtbase.dll
api-ms-win-crt-multibyte-l1-1-0ucrtbase.dll
api-ms-win-crt-private-l1-1-0ucrtbase.dll
api-ms-win-crt-process-l1-1-0ucrtbase.dll
api-ms-win-crt-runtime-l1-1-0ucrtbase.dll
api-ms-win-crt-stdio-l1-1-0ucrtbase.dll
api-ms-win-crt-string-l1-1-0ucrtbase.dll
api-ms-win-crt-time-l1-1-0ucrtbase.dll
api-ms-win-crt-utility-l1-1-0ucrtbase.dll
api-ms-win-deprecated-apis-obsolete-l1-1-0kernelbase.dll
api-ms-win-devices-config-l1-1-1cfgmgr32.dll
api-ms-win-devices-query-l1-1-1cfgmgr32.dll
api-ms-win-devices-swdevice-l1-1-1cfgmgr32.dll
api-ms-win-downlevel-advapi32-l1-1-1kernelbase.dll
api-ms-win-downlevel-advapi32-l2-1-1sechost.dll
api-ms-win-downlevel-advapi32-l3-1-0ntmarta.dll
api-ms-win-downlevel-advapi32-l4-1-0advapi32.dll
api-ms-win-downlevel-kernel32-l1-1-0kernelbase.dll
api-ms-win-downlevel-kernel32-l2-1-0kernel32.dll
api-ms-win-downlevel-normaliz-l1-1-0kernelbase.dll
api-ms-win-downlevel-ole32-l1-1-1combase.dll
api-ms-win-downlevel-shell32-l1-1-0shcore.dll
api-ms-win-downlevel-shlwapi-l1-1-1kernelbase.dll
api-ms-win-downlevel-shlwapi-l2-1-1shcore.dll
api-ms-win-downlevel-user32-l1-1-1kernelbase.dll
api-ms-win-downlevel-version-l1-1-0kernelbase.dll
api-ms-win-dwmapi-l1-1-0dwmapi.dll
api-ms-win-dx-d3dkmt-l1-1-2gdi32.dll
api-ms-win-eventing-classicprovider-l1-1-0kernelbase.dll
api-ms-win-eventing-consumer-l1-1-0sechost.dll
api-ms-win-eventing-controller-l1-1-0sechost.dll
api-ms-win-eventing-legacy-l1-1-0advapi32.dll
api-ms-win-eventing-obsolete-l1-1-0sechost.dll
api-ms-win-eventing-provider-l1-1-1kernelbase.dll
api-ms-win-eventing-tdh-l1-1-0tdh.dllmintdh.dll
api-ms-win-eventlog-legacy-l1-1-0advapi32.dll
api-ms-win-eventlog-private-l1-1-0advapi32.dll
api-ms-win-gaming-tcui-l1-1-1gamingtcui.dll
api-ms-win-gdi-dpiinfo-l1-1-0gdi32.dll
api-ms-win-gdi-internal-uap-l1-1-0gdi32.dll
api-ms-win-http-time-l1-1-0kernelbase.dll
api-ms-win-legacy-shlwapi-l1-1-0kernelbase.dll
api-ms-win-mm-joystick-l1-1-0winmmbase.dll
api-ms-win-mm-mci-l1-1-0winmm.dll
api-ms-win-mm-misc-l1-1-1winmmbase.dll
api-ms-win-mm-misc-l2-1-0winmm.dll
api-ms-win-mm-mme-l1-1-0winmmbase.dll
api-ms-win-mm-playsound-l1-1-0winmm.dll
api-ms-win-mm-time-l1-1-0kernel32.dll
api-ms-win-net-isolation-l1-1-1firewallapi.dll
api-ms-win-networking-interfacecontexts-l1-1-0ondemandconnroutehelper.dll
api-ms-win-ntuser-ie-message-l1-1-0user32.dll
api-ms-win-ntuser-ie-window-l1-1-0user32.dll
api-ms-win-ntuser-ie-wmpointer-l1-1-0user32.dll
api-ms-win-ntuser-rectangle-l1-1-0user32.dll
api-ms-win-ntuser-sysparams-l1-1-0user32.dll
api-ms-win-obsolete-localization-l1-1-0kernelbase.dll
api-ms-win-obsolete-psapi-l1-1-0kernelbase.dll
api-ms-win-obsolete-shlwapi-l1-1-0kernelbase.dll
api-ms-win-ole32-ie-l1-1-0ole32.dll
api-ms-win-oobe-notification-l1-1-0kernel32.dll
api-ms-win-perf-legacy-l1-1-0advapi32.dll
api-ms-win-power-base-l1-1-0powrprof.dll
api-ms-win-power-limitsmanagement-l1-1-0powrprof.dll
api-ms-win-power-setting-l1-1-0powrprof.dll
api-ms-win-ro-typeresolution-l1-1-0wintypes.dll
api-ms-win-rtcore-ntuser-clipboard-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-draw-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-powermanagement-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-private-l1-1-4user32.dll
api-ms-win-rtcore-ntuser-shell-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-synch-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-window-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-winevent-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-wmpointer-l1-1-3user32.dll
api-ms-win-rtcore-ole32-clipboard-l1-1-0ole32.dll
api-ms-win-security-accesshlpr-l1-1-0sechost.dll
api-ms-win-security-activedirectoryclient-l1-1-1kernelbase.dll
api-ms-win-security-appcontainer-l1-1-0kernelbase.dll
api-ms-win-security-audit-l1-1-1sechost.dll
api-ms-win-security-base-ansi-l1-1-0advapi32.dll
api-ms-win-security-base-l1-1-1kernelbase.dll
api-ms-win-security-base-l1-2-0kernelbase.dll
api-ms-win-security-base-private-l1-1-1kernelbase.dll
api-ms-win-security-capability-l1-1-0sechost.dll
api-ms-win-security-cpwl-l1-1-0advapi32.dll
api-ms-win-security-credentials-l1-1-0sechost.dll
api-ms-win-security-credentials-l2-1-0sechost.dll
api-ms-win-security-cryptoapi-l1-1-0cryptsp.dll
api-ms-win-security-grouppolicy-l1-1-0kernelbase.dll
api-ms-win-security-logon-l1-1-1advapi32.dll
api-ms-win-security-lsalookup-ansi-l2-1-0advapi32.dll
api-ms-win-security-lsalookup-l1-1-2sechost.dll
api-ms-win-security-lsalookup-l2-1-1advapi32.dll
api-ms-win-security-lsapolicy-l1-1-1sechost.dll
api-ms-win-security-provider-ansi-l1-1-0advapi32.dll
api-ms-win-security-provider-l1-1-0ntmarta.dll
api-ms-win-security-sddl-ansi-l1-1-0advapi32.dll
api-ms-win-security-sddl-l1-1-0sechost.dll
api-ms-win-security-sddlparsecond-l1-1-0sechost.dll
api-ms-win-security-systemfunctions-l1-1-0advapi32.dll
api-ms-win-security-trustee-l1-1-1advapi32.dll
api-ms-win-service-core-ansi-l1-1-0advapi32.dll
api-ms-win-service-core-l1-1-2sechost.dll
api-ms-win-service-management-l1-1-0sechost.dll
api-ms-win-service-management-l2-1-0sechost.dll
api-ms-win-service-private-l1-1-2sechost.dll
api-ms-win-service-winsvc-l1-1-0sechost.dll
api-ms-win-service-winsvc-l1-2-0sechost.dll
api-ms-win-shcore-comhelpers-l1-1-0shcore.dll
api-ms-win-shcore-obsolete-l1-1-0shcore.dll
api-ms-win-shcore-registry-l1-1-1shcore.dll
api-ms-win-shcore-scaling-l1-1-2shcore.dll
api-ms-win-shcore-stream-l1-1-0shcore.dll
api-ms-win-shcore-stream-winrt-l1-1-0shcore.dll
api-ms-win-shcore-sysinfo-l1-1-0shcore.dll
api-ms-win-shcore-thread-l1-1-0shcore.dll
api-ms-win-shcore-unicodeansi-l1-1-0shcore.dll
api-ms-win-shell-shdirectory-l1-1-0shcore.dll
api-ms-win-shell-shellcom-l1-1-0kernelbase.dll
api-ms-win-shell-shellfolders-l1-1-0windows.storage.dll
api-ms-win-shlwapi-ie-l1-1-0shlwapi.dll
api-ms-win-shlwapi-winrt-storage-l1-1-1shlwapi.dll
api-ms-win-storage-exports-external-l1-1-0windows.storage.dll
api-ms-win-storage-exports-internal-l1-1-0windows.storage.dll
api-ms-win-winrt-search-folder-l1-1-0windows.storage.search.dll
ext-ms-net-eap-sim-l1-1-0eapsimextdesktop.dll
ext-ms-onecore-appmodel-plm-l1-1-0execmodelclient.dll
ext-ms-onecore-appmodel-staterepository-internal-l1-1-0windows.staterepositoryclient.dll
ext-ms-onecore-appmodel-veventdispatcher-l1-1-0veeventdispatcher.dll
ext-ms-onecore-dcomp-l1-1-0dcomp.dll
ext-ms-win-advapi32-auth-l1-1-0advapi32.dll
ext-ms-win-advapi32-encryptedfile-l1-1-0advapi32.dll
ext-ms-win-advapi32-eventingcontroller-l1-1-0advapi32.dll
ext-ms-win-advapi32-eventlog-ansi-l1-1-0advapi32.dll
ext-ms-win-advapi32-eventlog-l1-1-1advapi32.dll
ext-ms-win-advapi32-hwprof-l1-1-0advapi32.dll
ext-ms-win-advapi32-idletask-l1-1-0advapi32.dll
ext-ms-win-advapi32-lsa-l1-1-1advapi32.dll
ext-ms-win-advapi32-msi-l1-1-0advapi32.dll
ext-ms-win-advapi32-npusername-l1-1-0advapi32.dll
ext-ms-win-advapi32-ntmarta-l1-1-0advapi32.dll
ext-ms-win-advapi32-psm-app-l1-1-0twinapi.appcore.dll
ext-ms-win-advapi32-registry-l1-1-0advapi32.dll
ext-ms-win-advapi32-safer-l1-1-0advapi32.dll
ext-ms-win-advapi32-shutdown-l1-1-0advapi32.dll
ext-ms-win-appcompat-apphelp-l1-1-0apphelp.dll
ext-ms-win-appmodel-opc-l1-1-0opcservices.dll
ext-ms-win-appmodel-state-ext-l1-2-0kernel.appcore.dll
ext-ms-win-appxdeploymentclient-appxdeploy-l1-1-0appxdeploymentclient.dll
ext-ms-win-appxdeploymentclient-appxdeployonecore-l1-1-0appxdeploymentclient.dll
ext-ms-win-audiocore-coreaudiopolicymanager-l1-1-0coreaudiopolicymanagerext.dll
ext-ms-win-authz-claimpolicies-l1-1-0authz.dll
ext-ms-win-authz-context-l1-1-0authz.dll
ext-ms-win-authz-remote-l1-1-0logoncli.dll
ext-ms-win-biometrics-winbio-core-l1-1-0winbio.dll
ext-ms-win-biometrics-winbio-l1-1-0winbio.dll
ext-ms-win-biometrics-winbio-l1-2-0winbioext.dll
ext-ms-win-bluetooth-apis-l1-1-0bluetoothapis.dll
ext-ms-win-bluetooth-apis-private-l1-1-0bluetoothapis.dll
ext-ms-win-branding-winbrand-l1-1-0winbrand.dll
ext-ms-win-casting-shell-l1-1-0castingshellext.dll
ext-ms-win-cluster-clusapi-l1-1-2clusapi.dll
ext-ms-win-cluster-resutils-l1-1-1resutils.dll
ext-ms-win-cmd-util-l1-1-0cmdext.dll
ext-ms-win-cng-rng-l1-1-1bcryptprimitives.dll
ext-ms-win-com-clbcatq-l1-1-0clbcatq.dll
ext-ms-win-com-coml2-l1-1-1coml2.dll
ext-ms-win-com-ole32-l1-1-4ole32.dll
ext-ms-win-com-psmregister-l1-1-0kernel.appcore.dll
ext-ms-win-com-psmregister-l1-2-0kernel.appcore.dll
ext-ms-win-composition-ghost-l1-1-0dwmghost.dll
ext-ms-win-composition-init-l1-1-0dwminit.dll
ext-ms-win-compositor-hosting-l1-1-0user32.dll
ext-ms-win-core-psm-service-l1-1-2psmserviceexthost.dll
ext-ms-win-core-resourcemanager-l1-1-0rmclient.dll
ext-ms-win-core-resourcemanager-l1-2-0rmclient.dll
ext-ms-win-core-resourcepolicy-l1-1-1resourcepolicyclient.dll
ext-ms-win-core-resourcepolicyserver-l1-1-0resourcepolicyserver.dll
ext-ms-win-core-storelicensing-l1-1-0licensemanagerapi.dll
ext-ms-win-coreui-navshutdown-l1-1-0navshutdown.dll
ext-ms-win-desktopappx-l1-1-0daxexec.dll
ext-ms-win-devmgmt-dm-l1-1-0dmapisetextimpldesktop.dll
ext-ms-win-devmgmt-policy-l1-1-0policymanager.dll
ext-ms-win-direct2d-desktop-l1-1-0direct2ddesktop.dll
ext-ms-win-domainjoin-netjoin-l1-1-0netjoin.dll
ext-ms-win-dwmapi-ext-l1-1-0dwmapi.dll
ext-ms-win-dwmapidxgi-ext-l1-1-0dwmapi.dll
ext-ms-win-dx-d3d9-l1-1-0d3d9.dll
ext-ms-win-dx-ddraw-l1-1-0ddraw.dll
ext-ms-win-edputil-policy-l1-1-0edputil.dll
ext-ms-win-els-elscore-l1-1-0elscore.dll
ext-ms-win-eventing-tdh-ext-l1-1-0tdh.dll
ext-ms-win-familysafety-childaccount-l1-1-0familysafetyext.dll
ext-ms-win-feclient-encryptedfile-l1-1-0feclient.dll
ext-ms-win-firewallapi-webproxy-l1-1-1firewallapi.dll
ext-ms-win-font-fontgroups-l1-1-0fontgroupsoverride.dll
ext-ms-win-fs-clfs-l1-1-0clfs.sys
ext-ms-win-fsutilext-ifsutil-l1-1-0fsutilext.dll
ext-ms-win-fsutilext-ulib-l1-1-0fsutilext.dll
ext-ms-win-fveapi-query-l1-1-0fveapi.dll
ext-ms-win-gaming-xinput-l1-1-0xinputuap.dll
ext-ms-win-gdi-clipping-l1-1-0gdi32.dll
ext-ms-win-gdi-dc-create-l1-1-2gdi32.dll
ext-ms-win-gdi-dc-l1-2-1gdi32.dll
ext-ms-win-gdi-devcaps-l1-1-0gdi32.dll
ext-ms-win-gdi-draw-l1-1-3gdi32.dll
ext-ms-win-gdi-font-l1-1-3gdi32.dll
ext-ms-win-gdi-internal-desktop-l1-1-0gdi32.dll
ext-ms-win-gdi-metafile-l1-1-2gdi32.dll
ext-ms-win-gdi-path-l1-1-0gdi32.dll
ext-ms-win-gdi-print-l1-1-0gdi32.dll
ext-ms-win-gdi-private-l1-1-0gdi32.dll
ext-ms-win-gdi-render-l1-1-0gdi32.dll
ext-ms-win-gdi-rgn-l1-1-0gdi32.dll
ext-ms-win-gdi-wcs-l1-1-0gdi32.dll
ext-ms-win-globalization-collation-l1-1-0globcollationhost.dll
ext-ms-win-globalization-input-l1-1-1globinputhost.dll
ext-ms-win-gpapi-grouppolicy-l1-1-0gpapi.dll
ext-ms-win-gpsvc-grouppolicy-l1-1-0gpsvc.dll
ext-ms-win-gui-dui70-l1-1-0dui70.dll
ext-ms-win-gui-ieui-l1-1-0ieui.dll
ext-ms-win-gui-uxinit-l1-1-0uxinit.dll
ext-ms-win-imm-l1-1-1imm32.dll
ext-ms-win-kernel32-appcompat-l1-1-0kernel32.dll
ext-ms-win-kernel32-datetime-l1-1-0kernel32.dll
ext-ms-win-kernel32-elevation-l1-1-0kernel32.dll
ext-ms-win-kernel32-errorhandling-l1-1-0kernel32.dllfaultrep.dll
ext-ms-win-kernel32-file-l1-1-0kernel32.dll
ext-ms-win-kernel32-localization-l1-1-0kernel32.dll
ext-ms-win-kernel32-package-current-l1-1-0kernel.appcore.dll
ext-ms-win-kernel32-package-l1-1-2kernel.appcore.dll
ext-ms-win-kernel32-quirks-l1-1-1kernel32.dll
ext-ms-win-kernel32-registry-l1-1-0kernel32.dll
ext-ms-win-kernel32-sidebyside-l1-1-0kernel32.dll
ext-ms-win-kernel32-transacted-l1-1-0kernel32.dll
ext-ms-win-kernel32-windowserrorreporting-l1-1-1kernel32.dll
ext-ms-win-kernelbase-packagebreakaway-l1-1-0daxexec.dll
ext-ms-win-kernelbase-processthread-l1-1-0kernel32.dll
ext-ms-win-media-avi-l1-1-0avifil32.dll
ext-ms-win-mf-vfw-l1-1-0mfvfw.dll
ext-ms-win-mininput-systeminputhost-l1-1-0ism32k.dll
ext-ms-win-mm-msacm-l1-1-0msacm32.dll
ext-ms-win-mm-pehelper-l1-1-0mf.dll
ext-ms-win-moderncore-win32k-base-ntgdi-l1-1-0win32kfull.sys
ext-ms-win-moderncore-win32k-base-ntuser-l1-1-0win32kfull.sys
ext-ms-win-moderncore-win32k-base-sysentry-l1-1-0win32k.sys
ext-ms-win-mpr-multipleproviderrouter-l1-1-0mprext.dll
ext-ms-win-mrmcorer-resmanager-l1-1-0mrmcorer.dll
ext-ms-win-msa-ui-l1-1-0msauserext.dll
ext-ms-win-msa-user-l1-1-1msauserext.dll
ext-ms-win-msi-misc-l1-1-0msi.dll
ext-ms-win-msiltcfg-msi-l1-1-0msiltcfg.dll
ext-ms-win-msimg-draw-l1-1-0msimg32.dll
ext-ms-win-net-cmvpn-l1-1-0cmintegrator.dll
ext-ms-win-net-httpproxyext-l1-1-0httpprxc.dll
ext-ms-win-net-isoext-l1-1-0firewallapi.dll
ext-ms-win-netprovision-netprovfw-l1-1-0netprovfw.dll
ext-ms-win-networking-nlaapi-l1-1-0nlaapi.dll
ext-ms-win-networking-wcmapi-l1-1-0wcmapi.dll
ext-ms-win-networking-winipsec-l1-1-0winipsec.dll
ext-ms-win-networking-wlanapi-l1-1-0wlanapi.dll
ext-ms-win-newdev-config-l1-1-1newdev.dll
ext-ms-win-ntdsa-activedirectoryserver-l1-1-0ntdsa.dll
ext-ms-win-ntdsapi-activedirectoryclient-l1-1-1ntdsapi.dll
ext-ms-win-ntos-clipsp-l1-1-0clipsp.sys
ext-ms-win-ntos-kcminitcfg-l1-1-0cmimcext.sys
ext-ms-win-ntos-tm-l1-1-0tm.sys
ext-ms-win-ntos-ucode-l1-1-0ntosext.sys
ext-ms-win-ntos-werkernel-l1-1-0werkernel.sys
ext-ms-win-ntuser-caret-l1-1-0user32.dll
ext-ms-win-ntuser-chartranslation-l1-1-0user32.dll
ext-ms-win-ntuser-dc-access-ext-l1-1-0user32.dll
ext-ms-win-ntuser-dialogbox-l1-1-2user32.dll
ext-ms-win-ntuser-draw-l1-1-2user32.dll
ext-ms-win-ntuser-gui-l1-1-1user32.dll
ext-ms-win-ntuser-gui-l1-2-0user32.dll
ext-ms-win-ntuser-gui-l1-3-0user32.dll
ext-ms-win-ntuser-keyboard-l1-1-1user32.dll
ext-ms-win-ntuser-keyboard-l1-2-1user32.dll
ext-ms-win-ntuser-menu-l1-1-3user32.dll
ext-ms-win-ntuser-message-l1-1-3user32.dll
ext-ms-win-ntuser-misc-l1-1-0user32.dll
ext-ms-win-ntuser-misc-l1-2-0user32.dll
ext-ms-win-ntuser-misc-l1-3-0user32.dll
ext-ms-win-ntuser-misc-l1-5-1user32.dll
ext-ms-win-ntuser-mouse-l1-1-0user32.dll
ext-ms-win-ntuser-powermanagement-l1-1-0user32.dll
ext-ms-win-ntuser-private-l1-1-1user32.dll
ext-ms-win-ntuser-private-l1-2-0user32.dll
ext-ms-win-ntuser-private-l1-3-1user32.dll
ext-ms-win-ntuser-rectangle-ext-l1-1-0user32.dll
ext-ms-win-ntuser-rim-l1-1-0user32.dll
ext-ms-win-ntuser-rotationmanager-l1-1-1user32.dll
ext-ms-win-ntuser-server-l1-1-0user32.dll
ext-ms-win-ntuser-string-l1-1-0user32.dll
ext-ms-win-ntuser-synch-l1-1-0user32.dll
ext-ms-win-ntuser-sysparams-ext-l1-1-0user32.dll
ext-ms-win-ntuser-touch-hittest-l1-1-0user32.dll
ext-ms-win-ntuser-uicontext-ext-l1-1-0user32.dll
ext-ms-win-ntuser-window-l1-1-4user32.dll
ext-ms-win-ntuser-windowclass-l1-1-2user32.dll
ext-ms-win-ntuser-windowstation-ansi-l1-1-0user32.dll
ext-ms-win-ntuser-windowstation-l1-1-1user32.dll
ext-ms-win-ole32-bindctx-l1-1-0ole32.dll
ext-ms-win-ole32-ie-ext-l1-1-0ole32.dll
ext-ms-win-ole32-oleautomation-l1-1-0ole32.dll
ext-ms-win-oleacc-l1-1-1oleacc.dll
ext-ms-win-printer-prntvpt-l1-1-0prntvpt.dll
ext-ms-win-printer-winspool-l1-1-2winspool.drv
ext-ms-win-profile-extender-l1-1-0userenv.dll
ext-ms-win-profile-profsvc-l1-1-0profsvcext.dll
ext-ms-win-profile-userenv-l1-1-1profext.dll
ext-ms-win-provisioning-platform-l1-1-0provplatformdesktop.dll
ext-ms-win-ras-rasapi32-l1-1-1rasapi32.dll
ext-ms-win-ras-rasdlg-l1-1-0rasdlg.dll
ext-ms-win-ras-rasman-l1-1-0rasman.dll
ext-ms-win-ras-tapi32-l1-1-0tapi32.dll
ext-ms-win-raschapext-eap-l1-1-0raschapext.dll
ext-ms-win-rastlsext-eap-l1-1-0rastlsext.dll
ext-ms-win-reinfo-query-l1-1-0reinfo.dll
ext-ms-win-rometadata-dispenser-l1-1-0rometadata.dll
ext-ms-win-rpc-firewallportuse-l1-1-0rpcrtremote.dll
ext-ms-win-rpc-ssl-l1-1-0rpcrtremote.dll
ext-ms-win-rtcore-gdi-devcaps-l1-1-1gdi32.dll
ext-ms-win-rtcore-gdi-object-l1-1-0gdi32.dll
ext-ms-win-rtcore-gdi-rgn-l1-1-1gdi32.dll
ext-ms-win-rtcore-ntuser-cursor-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-dc-access-l1-1-1user32.dll
ext-ms-win-rtcore-ntuser-dpi-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-iam-l1-1-1user32.dll
ext-ms-win-rtcore-ntuser-inputintercept-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-integration-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-rawinput-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-synch-ext-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-syscolors-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-sysparams-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-window-ext-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-wmpointer-l1-1-0user32.dll
ext-ms-win-samsrv-accountstore-l1-1-0samsrv.dll
ext-ms-win-scesrv-server-l1-1-0scesrv.dll
ext-ms-win-search-folder-l1-1-0searchfolder.dll
ext-ms-win-secur32-translatename-l1-1-1secur32.dll
ext-ms-win-security-authbrokerui-l1-1-0authbrokerui.dll
ext-ms-win-security-capauthz-l1-1-0capauthz.dll
ext-ms-win-security-credui-l1-1-1credui.dll
ext-ms-win-security-cryptui-l1-1-1cryptui.dll
ext-ms-win-security-efs-l1-1-0efsext.dll
ext-ms-win-security-efswrt-l1-1-1efswrt.dll
ext-ms-win-security-kerberos-l1-1-0kerberos.dll
ext-ms-win-security-shutdownext-l1-1-0shutdownext.dll
ext-ms-win-security-srp-l1-1-0srpapi.dll
ext-ms-win-security-tokenbrokerui-l1-1-0tokenbrokerui.dll
ext-ms-win-security-vaultcli-l1-1-1vaultcli.dll
ext-ms-win-security-winscard-l1-1-0winscard.dll
ext-ms-win-sensors-core-private-l1-1-0sensorsnativeapi.dll
ext-ms-win-sensors-utilities-private-l1-1-1sensorsutilsv2.dll
ext-ms-win-session-userinit-l1-1-0userinitext.dll
ext-ms-win-session-usermgr-l1-1-0usermgrcli.dll
ext-ms-win-session-usertoken-l1-1-0wtsapi32.dll
ext-ms-win-session-wininit-l1-1-0wininitext.dll
ext-ms-win-session-winlogon-l1-1-0winlogonext.dll
ext-ms-win-session-winsta-l1-1-2winsta.dll
ext-ms-win-session-wtsapi32-l1-1-0wtsapi32.dll
ext-ms-win-setupapi-classinstallers-l1-1-2setupapi.dll
ext-ms-win-setupapi-inf-l1-1-1setupapi.dll
ext-ms-win-setupapi-logging-l1-1-0setupapi.dll
ext-ms-win-shell-comctl32-init-l1-1-1comctl32.dll
ext-ms-win-shell-comctl32-l1-1-0comctl32.dll
ext-ms-win-shell-comdlg32-l1-1-0comdlg32.dll
ext-ms-win-shell-directory-l1-1-0windows.storage.dll
ext-ms-win-shell-embeddedmode-l1-1-0embeddedmodesvcapi.dll
ext-ms-win-shell-exports-internal-l1-1-0shell32.dll
ext-ms-win-shell-propsys-l1-1-0propsys.dll
ext-ms-win-shell-settingsync-l1-1-3settingsyncpolicy.dll
ext-ms-win-shell-shell32-l1-2-2shell32.dll
ext-ms-win-shell-shlwapi-l1-1-2shlwapi.dll
ext-ms-win-shell32-shellcom-l1-1-0windows.storage.dll
ext-ms-win-shell32-shellfolders-l1-1-1windows.storage.dll
ext-ms-win-smbshare-browser-l1-1-0browser.dll
ext-ms-win-smbshare-sscore-l1-1-0sscoreext.dll
ext-ms-win-spinf-inf-l1-1-0spinf.dll
ext-ms-win-srhinproc-entrypoint-l1-1-0srhinproc.dll
ext-ms-win-storage-iscsidsc-l1-1-0iscsidsc.dll
ext-ms-win-storage-sense-l1-1-0storageusage.dll
ext-ms-win-sxs-oleautomation-l1-1-0sxs.dll
ext-ms-win-tsf-msctf-l1-1-0msctf.dll
ext-ms-win-ttlsext-eap-l1-1-0ttlsext.dll
ext-ms-win-uiacore-l1-1-2uiautomationcore.dll
ext-ms-win-umpoext-umpo-l1-1-0umpoext.dll
ext-ms-win-usp10-l1-1-0gdi32.dll
ext-ms-win-uwf-servicing-apis-l1-1-0uwfservicingapi.dll
ext-ms-win-uxtheme-themes-l1-1-1uxtheme.dll
ext-ms-win-wer-reporting-l1-1-1wer.dll
ext-ms-win-wer-ui-l1-1-0werui.dll
ext-ms-win-wer-wct-l1-1-0wer.dll
ext-ms-win-wevtapi-eventlog-l1-1-3wevtapi.dll
ext-ms-win-winbici-l1-1-0winbici.dll
ext-ms-win-winrt-storage-l1-1-0windows.storage.dll
ext-ms-win-wlan-grouppolicy-l1-1-0wlgpclnt.dll
ext-ms-win-wlan-onexui-l1-1-0onexui.dll
ext-ms-win-wlan-scard-l1-1-0winscard.dll
ext-ms-win-wsclient-devlicense-l1-1-1wsclient.dll
ext-ms-win-wwaext-misc-l1-1-0wwaext.dll
ext-ms-win-wwaext-module-l1-1-0wwaext.dll
ext-ms-win-wwan-wwapi-l1-1-1wwapi.dll
ext-ms-win-xaml-controls-l1-1-0windows.ui.xaml.phone.dll
↧
↧

W32pServiceTable from windows 10 build 14279 64bit

March 14, 2016, 9:01 am
$
0
0
W32pServiceLimit .eq. 0x47D

NtUserGetOwnerTransformedMonitorRect
NtUserYieldTask
NtUserSetSensorPresence
NtUserGetThreadState
NtUserPeekMessage
NtUserCallOneParam
NtUserGetKeyState
NtUserInvalidateRect
NtUserCallNoParam
NtUserGetMessage
NtUserMessageCall
NtGdiBitBlt
NtGdiGetCharSet
NtUserGetDC
NtGdiSelectBitmap
NtUserWaitMessage
NtUserTranslateMessage
NtUserGetProp
NtUserPostMessage
NtUserQueryWindow
NtUserTranslateAccelerator
NtGdiFlush
NtUserRedrawWindow
NtUserWindowFromPoint
NtUserCallMsgFilter
NtUserValidateTimerCallback
NtUserBeginPaint
NtUserSetTimer
NtUserEndPaint
NtUserSetCursor
NtUserKillTimer
NtUserBuildHwndList
NtUserSelectPalette
NtUserCallNextHookEx
NtUserHideCaret
NtGdiIntersectClipRect
NtUserCallHwndLock
NtUserGetProcessWindowStation
NtGdiDeleteObjectApp
NtUserSetWindowPos
NtUserShowCaret
NtUserEndDeferWindowPosEx
NtUserCallHwndParamLock
NtUserVkKeyScanEx
NtGdiSetDIBitsToDeviceInternal
NtUserCallTwoParam
NtGdiGetRandomRgn
NtUserCopyAcceleratorTable
NtUserNotifyWinEvent
NtGdiExtSelectClipRgn
NtUserIsClipboardFormatAvailable
NtUserSetScrollInfo
NtGdiStretchBlt
NtUserCreateCaret
NtGdiRectVisible
NtGdiCombineRgn
NtGdiGetDCObject
NtUserDispatchMessage
NtUserRegisterWindowMessage
NtGdiExtTextOutW
NtGdiSelectFont
NtGdiRestoreDC
NtGdiSaveDC
NtUserGetForegroundWindow
NtUserShowScrollBar
NtUserFindExistingCursorIcon
NtGdiGetDCDword
NtGdiGetRegionData
NtGdiLineTo
NtUserSystemParametersInfo
NtGdiGetAppClipBox
NtUserGetAsyncKeyState
NtUserGetCPD
NtUserRemoveProp
NtGdiDoPalette
NtGdiPolyPolyDraw
NtUserSetCapture
NtUserEnumDisplayMonitors
NtGdiCreateCompatibleBitmap
NtUserSetProp
NtGdiGetTextCharsetInfo
NtUserSBGetParms
NtUserGetIconInfo
NtUserExcludeUpdateRgn
NtUserSetFocus
NtGdiExtGetObjectW
NtUserGetUpdateRect
NtGdiCreateCompatibleDC
NtUserGetClipboardSequenceNumber
NtGdiCreatePen
NtUserShowWindow
NtUserGetKeyboardLayoutList
NtGdiPatBlt
NtUserMapVirtualKeyEx
NtUserSetWindowLong
NtGdiHfontCreate
NtUserMoveWindow
NtUserPostThreadMessage
NtUserDrawIconEx
NtUserGetSystemMenu
NtGdiDrawStream
NtUserInternalGetWindowText
NtUserGetWindowDC
NtGdiD3dDrawPrimitives2
NtGdiInvertRgn
NtGdiGetRgnBox
NtGdiGetAndSetDCDword
NtGdiMaskBlt
NtGdiGetWidthTable
NtUserScrollDC
NtUserGetObjectInformation
NtGdiCreateBitmap
NtUserFindWindowEx
NtGdiPolyPatBlt
NtUserUnhookWindowsHookEx
NtGdiGetNearestColor
NtGdiTransformPoints
NtGdiGetDCPoint
NtGdiCreateDIBBrush
NtGdiGetTextMetricsW
NtUserCreateWindowEx
NtUserSetParent
NtUserGetKeyboardState
NtUserToUnicodeEx
NtUserGetControlBrush
NtUserGetClassName
NtGdiAlphaBlend
NtGdiDdBlt
NtGdiOffsetRgn
NtUserDefSetText
NtGdiGetTextFaceW
NtGdiStretchDIBitsInternal
NtUserSendInput
NtUserGetThreadDesktop
NtGdiCreateRectRgn
NtGdiGetDIBitsInternal
NtUserGetUpdateRgn
NtGdiDeleteClientObj
NtUserGetIconSize
NtUserFillWindow
NtGdiExtCreateRegion
NtGdiComputeXformCoefficients
NtUserSetWindowsHookEx
NtUserNotifyProcessCreate
NtGdiUnrealizeObject
NtUserGetTitleBarInfo
NtGdiRectangle
NtUserSetThreadDesktop
NtUserGetDCEx
NtUserGetScrollBarInfo
NtGdiGetTextExtent
NtUserSetWindowFNID
NtGdiSetLayout
NtUserCalcMenuBar
NtUserThunkedMenuItemInfo
NtGdiExcludeClipRect
NtGdiCreateDIBSection
NtGdiGetDCforBitmap
NtUserDestroyCursor
NtUserDestroyWindow
NtUserCallHwndParam
NtGdiCreateDIBitmapInternal
NtUserOpenWindowStation
NtGdiDdDeleteSurfaceObject
NtGdiDdCanCreateSurface
NtGdiDdCreateSurface
NtUserSetCursorIconData
NtGdiDdDestroySurface
NtUserCloseDesktop
NtUserOpenDesktop
NtUserSetProcessWindowStation
NtUserGetAtomName
NtGdiDdResetVisrgn
NtGdiExtCreatePen
NtGdiCreatePaletteInternal
NtGdiSetBrushOrg
NtUserBuildNameList
NtGdiSetPixel
NtUserRegisterClassExWOW
NtGdiCreatePatternBrushInternal
NtUserGetAncestor
NtGdiGetOutlineTextMetricsInternalW
NtGdiSetBitmapBits
NtUserCloseWindowStation
NtUserGetDoubleClickTime
NtUserEnableScrollBar
NtGdiCreateSolidBrush
NtUserGetClassInfoEx
NtGdiCreateClientObj
NtUserUnregisterClass
NtUserDeleteMenu
NtGdiRectInRegion
NtUserScrollWindowEx
NtGdiGetPixel
NtUserSetClassLong
NtUserGetMenuBarInfo
NtGdiDdCreateSurfaceEx
NtGdiDdCreateSurfaceObject
NtGdiGetNearestPaletteIndex
NtGdiDdLockD3D
NtGdiDdUnlockD3D
NtGdiGetCharWidthW
NtUserInvalidateRgn
NtUserGetClipboardOwner
NtUserSetWindowRgn
NtUserBitBltSysBmp
NtGdiGetCharWidthInfo
NtUserValidateRect
NtUserCloseClipboard
NtUserOpenClipboard
NtUserSetClipboardData
NtUserEnableMenuItem
NtUserAlterWindowStyle
NtGdiFillRgn
NtUserGetWindowPlacement
NtGdiModifyWorldTransform
NtGdiGetFontData
NtUserGetOpenClipboardWindow
NtUserSetThreadState
NtGdiOpenDCW
NtUserTrackMouseEvent
NtGdiGetTransform
NtUserDestroyMenu
NtGdiGetBitmapBits
NtUserConsoleControl
NtUserSetActiveWindow
NtUserSetInformationThread
NtUserSetWindowPlacement
NtUserGetControlColor
NtGdiSetMetaRgn
NtGdiSetMiterLimit
NtGdiSetVirtualResolution
NtGdiGetRasterizerCaps
NtUserSetWindowWord
NtUserGetClipboardFormatName
NtUserRealInternalGetMessage
NtUserCreateLocalMemHandle
NtUserAttachThreadInput
NtGdiCreateHalftonePalette
NtUserPaintMenuBar
NtUserSetKeyboardState
NtGdiCombineTransform
NtUserCreateAcceleratorTable
NtUserGetCursorFrameInfo
NtUserGetAltTabInfo
NtUserGetCaretBlinkTime
NtGdiQueryFontAssocInfo
NtUserProcessConnect
NtUserEnumDisplayDevices
NtUserEmptyClipboard
NtUserGetClipboardData
NtUserRemoveMenu
NtGdiSetBoundsRect
NtGdiGetBitmapDimension
NtUserConvertMemHandle
NtUserDestroyAcceleratorTable
NtUserGetGUIThreadInfo
NtGdiCloseFigure
NtUserSetWindowsHookAW
NtUserSetMenuDefaultItem
NtUserCheckMenuItem
NtUserSetWinEventHook
NtUserUnhookWinEvent
NtUserLockWindowUpdate
NtUserSetSystemMenu
NtUserThunkedMenuInfo
NtGdiBeginPath
NtGdiEndPath
NtGdiFillPath
NtUserCallHwnd
NtUserDdeInitialize
NtUserModifyUserStartupInfoFlags
NtUserCountClipboardFormats
NtGdiAddFontMemResourceEx
NtGdiEqualRgn
NtGdiGetSystemPaletteUse
NtGdiRemoveFontMemResourceEx
NtUserEnumDisplaySettings
NtUserPaintDesktop
NtGdiExtEscape
NtGdiSetBitmapDimension
NtGdiSetFontEnumeration
NtUserChangeClipboardChain
NtUserSetClipboardViewer
NtUserShowWindowAsync
NtGdiCreateColorSpace
NtGdiDeleteColorSpace
NtUserActivateKeyboardLayout
NtBindCompositionSurface
NtCompositionInputThread
NtCompositionSetDropTarget
NtCreateCompositionInputSink
NtCreateCompositionSurfaceHandle
NtCreateImplicitCompositionInputSink
NtDCompositionAddCrossDeviceVisualChild
NtDCompositionAddVisualChild
NtDCompositionAttachMouseWheelToHwnd
NtDCompositionBeginFrame
NtDCompositionCapturePointer
NtDCompositionCommitChannel
NtDCompositionConfirmFrame
NtDCompositionConnectPipe
NtDCompositionCreateAndBindSharedSection
NtDCompositionCreateChannel
NtDCompositionCreateConnection
NtDCompositionCreateDwmChannel
NtDCompositionCreateResource
NtDCompositionCurrentBatchId
NtDCompositionDestroyChannel
NtDCompositionDestroyConnection
NtDCompositionDiscardFrame
NtDCompositionDuplicateHandleToProcess
NtDCompositionDuplicateSwapchainHandleToDwm
NtDCompositionEnableDDASupport
NtDCompositionEnableMMCSS
NtDCompositionGetAnimationTime
NtDCompositionGetChannels
NtDCompositionGetConnectionBatch
NtDCompositionGetDeletedResources
NtDCompositionGetFrameLegacyTokens
NtDCompositionGetFrameStatistics
NtDCompositionGetFrameSurfaceUpdates
NtDCompositionOpenSharedResource
NtDCompositionOpenSharedResourceHandle
NtDCompositionReferenceSharedResourceOnDwmChannel
NtDCompositionRegisterThumbnailVisual
NtDCompositionRegisterVirtualDesktopVisual
NtDCompositionReleaseAllResources
NtDCompositionReleaseResource
NtDCompositionRemoveCrossDeviceVisualChild
NtDCompositionRemoveVisualChild
NtDCompositionReplaceVisualChildren
NtDCompositionRetireFrame
NtDCompositionSetChannelCallbackId
NtDCompositionSetChannelCommitCompletionEvent
NtDCompositionSetDebugCounter
NtDCompositionSetResourceAnimationProperty
NtDCompositionSetResourceBufferProperty
NtDCompositionSetResourceCallbackId
NtDCompositionSetResourceDeletedNotificationTag
NtDCompositionSetResourceFloatProperty
NtDCompositionSetResourceHandleProperty
NtDCompositionSetResourceIntegerProperty
NtDCompositionSetResourceReferenceArrayProperty
NtDCompositionSetResourceReferenceProperty
NtDCompositionSetVisualInputSink
NtDCompositionSubmitDWMBatch
NtDCompositionSynchronize
NtDCompositionTelemetryAnimationScenarioBegin
NtDCompositionTelemetryAnimationScenarioReference
NtDCompositionTelemetryAnimationScenarioUnreference
NtDCompositionTelemetrySetApplicationId
NtDCompositionTelemetryTouchInteractionBegin
NtDCompositionTelemetryTouchInteractionEnd
NtDCompositionTelemetryTouchInteractionUpdate
NtDCompositionUpdatePointerCapture
NtDCompositionWaitForChannel
NtDesktopCaptureBits
NtDuplicateCompositionInputSink
NtGdiAbortDoc
NtGdiAbortPath
NtGdiAddEmbFontToDC
NtGdiAddFontResourceW
NtGdiAddRemoteFontToDC
NtGdiAddRemoteMMInstanceToDC
NtGdiAngleArc
NtGdiAnyLinkedFonts
NtGdiArcInternal
NtGdiBRUSHOBJ_DeleteRbrush
NtGdiBRUSHOBJ_hGetColorTransform
NtGdiBRUSHOBJ_pvAllocRbrush
NtGdiBRUSHOBJ_pvGetRbrush
NtGdiBRUSHOBJ_ulGetBrushColor
NtGdiBeginGdiRendering
NtGdiCLIPOBJ_bEnum
NtGdiCLIPOBJ_cEnumStart
NtGdiCLIPOBJ_ppoGetPath
NtGdiCancelDC
NtGdiChangeGhostFont
NtGdiCheckBitmapBits
NtGdiClearBitmapAttributes
NtGdiClearBrushAttributes
NtGdiColorCorrectPalette
NtGdiConfigureOPMProtectedOutput
NtGdiConvertMetafileRect
NtGdiCreateBitmapFromDxSurface
NtGdiCreateBitmapFromDxSurface2
NtGdiCreateColorTransform
NtGdiCreateEllipticRgn
NtGdiCreateHatchBrushInternal
NtGdiCreateMetafileDC
NtGdiCreateOPMProtectedOutputs
NtGdiCreateRoundRectRgn
NtGdiCreateServerMetaFile
NtGdiCreateSessionMappedDIBSection
NtGdiD3dContextCreate
NtGdiD3dContextDestroy
NtGdiD3dContextDestroyAll
NtGdiD3dValidateTextureStageState
NtGdiDDCCIGetCapabilitiesString
NtGdiDDCCIGetCapabilitiesStringLength
NtGdiDDCCIGetTimingReport
NtGdiDDCCIGetVCPFeature
NtGdiDDCCISaveCurrentSettings
NtGdiDDCCISetVCPFeature
NtGdiDdAddAttachedSurface
NtGdiDdAlphaBlt
NtGdiDdAttachSurface
NtGdiDdBeginMoCompFrame
NtGdiDdCanCreateD3DBuffer
NtGdiDdColorControl
NtGdiDdCreateD3DBuffer
NtGdiDdCreateDirectDrawObject
NtGdiDdCreateFullscreenSprite
NtGdiDdCreateMoComp
NtGdiDdDDIAbandonSwapChain
NtGdiDdDDIAcquireKeyedMutex
NtGdiDdDDIAcquireKeyedMutex2
NtGdiDdDDIAcquireSwapChain
NtGdiDdDDIAdjustFullscreenGamma
NtGdiDdDDICacheHybridQueryValue
NtGdiDdDDIChangeVideoMemoryReservation
NtGdiDdDDICheckExclusiveOwnership
NtGdiDdDDICheckMonitorPowerState
NtGdiDdDDICheckMultiPlaneOverlaySupport
NtGdiDdDDICheckMultiPlaneOverlaySupport2
NtGdiDdDDICheckMultiPlaneOverlaySupport3
NtGdiDdDDICheckOcclusion
NtGdiDdDDICheckSharedResourceAccess
NtGdiDdDDICheckVidPnExclusiveOwnership
NtGdiDdDDICloseAdapter
NtGdiDdDDIConfigureSharedResource
NtGdiDdDDICreateAllocation
NtGdiDdDDICreateContext
NtGdiDdDDICreateContextVirtual
NtGdiDdDDICreateDCFromMemory
NtGdiDdDDICreateDevice
NtGdiDdDDICreateKeyedMutex
NtGdiDdDDICreateKeyedMutex2
NtGdiDdDDICreateOutputDupl
NtGdiDdDDICreateOverlay
NtGdiDdDDICreatePagingQueue
NtGdiDdDDICreateSwapChain
NtGdiDdDDICreateSynchronizationObject
NtGdiDdDDIDestroyAllocation
NtGdiDdDDIDestroyAllocation2
NtGdiDdDDIDestroyContext
NtGdiDdDDIDestroyDCFromMemory
NtGdiDdDDIDestroyDevice
NtGdiDdDDIDestroyKeyedMutex
NtGdiDdDDIDestroyOutputDupl
NtGdiDdDDIDestroyOverlay
NtGdiDdDDIDestroyPagingQueue
NtGdiDdDDIDestroySynchronizationObject
NtGdiDdDDIEnumAdapters
NtGdiDdDDIEnumAdapters2
NtGdiDdDDIEscape
NtGdiDdDDIEvict
NtGdiDdDDIFlipOverlay
NtGdiDdDDIFlushHeapTransitions
NtGdiDdDDIFreeGpuVirtualAddress
NtGdiDdDDIGetCachedHybridQueryValue
NtGdiDdDDIGetContextInProcessSchedulingPriority
NtGdiDdDDIGetContextSchedulingPriority
NtGdiDdDDIGetDWMVerticalBlankEvent
NtGdiDdDDIGetDeviceState
NtGdiDdDDIGetDisplayModeList
NtGdiDdDDIGetMultisampleMethodList
NtGdiDdDDIGetOverlayState
NtGdiDdDDIGetPresentHistory
NtGdiDdDDIGetPresentQueueEvent
NtGdiDdDDIGetProcessSchedulingPriorityClass
NtGdiDdDDIGetResourcePresentPrivateDriverData
NtGdiDdDDIGetRuntimeData
NtGdiDdDDIGetScanLine
NtGdiDdDDIGetSetSwapChainMetadata
NtGdiDdDDIGetSharedPrimaryHandle
NtGdiDdDDIGetSharedResourceAdapterLuid
NtGdiDdDDIInvalidateActiveVidPn
NtGdiDdDDIInvalidateCache
NtGdiDdDDILock
NtGdiDdDDILock2
NtGdiDdDDIMakeResident
NtGdiDdDDIMapGpuVirtualAddress
NtGdiDdDDIMarkDeviceAsError
NtGdiDdDDINetDispGetNextChunkInfo
NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus
NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport
NtGdiDdDDINetDispStartMiracastDisplayDevice
NtGdiDdDDINetDispStopMiracastDisplayDevice
NtGdiDdDDINetDispStopSessions
NtGdiDdDDIOfferAllocations
NtGdiDdDDIOpenAdapterFromDeviceName
NtGdiDdDDIOpenAdapterFromHdc
NtGdiDdDDIOpenAdapterFromLuid
NtGdiDdDDIOpenKeyedMutex
NtGdiDdDDIOpenKeyedMutex2
NtGdiDdDDIOpenNtHandleFromName
NtGdiDdDDIOpenResource
NtGdiDdDDIOpenResourceFromNtHandle
NtGdiDdDDIOpenSwapChain
NtGdiDdDDIOpenSyncObjectFromNtHandle
NtGdiDdDDIOpenSyncObjectFromNtHandle2
NtGdiDdDDIOpenSyncObjectNtHandleFromName
NtGdiDdDDIOpenSynchronizationObject
NtGdiDdDDIOutputDuplGetFrameInfo
NtGdiDdDDIOutputDuplGetMetaData
NtGdiDdDDIOutputDuplGetPointerShapeData
NtGdiDdDDIOutputDuplPresent
NtGdiDdDDIOutputDuplReleaseFrame
NtGdiDdDDIPinDirectFlipResources
NtGdiDdDDIPollDisplayChildren
NtGdiDdDDIPresent
NtGdiDdDDIPresentMultiPlaneOverlay
NtGdiDdDDIPresentMultiPlaneOverlay2
NtGdiDdDDIPresentMultiPlaneOverlay3
NtGdiDdDDIQueryAdapterInfo
NtGdiDdDDIQueryAllocationResidency
NtGdiDdDDIQueryClockCalibration
NtGdiDdDDIQueryProcessOfferInfo
NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName
NtGdiDdDDIQueryResourceInfo
NtGdiDdDDIQueryResourceInfoFromNtHandle
NtGdiDdDDIQueryStatistics
NtGdiDdDDIQueryVidPnExclusiveOwnership
NtGdiDdDDIQueryVideoMemoryInfo
NtGdiDdDDIReclaimAllocations
NtGdiDdDDIReclaimAllocations2
NtGdiDdDDIReleaseKeyedMutex
NtGdiDdDDIReleaseKeyedMutex2
NtGdiDdDDIReleaseProcessVidPnSourceOwners
NtGdiDdDDIReleaseSwapChain
NtGdiDdDDIRender
NtGdiDdDDIReserveGpuVirtualAddress
NtGdiDdDDISetAllocationPriority
NtGdiDdDDISetContextInProcessSchedulingPriority
NtGdiDdDDISetContextSchedulingPriority
NtGdiDdDDISetDisplayMode
NtGdiDdDDISetDisplayPrivateDriverFormat
NtGdiDdDDISetDodIndirectSwapchain
NtGdiDdDDISetGammaRamp
NtGdiDdDDISetHwProtectionTeardownRecovery
NtGdiDdDDISetProcessSchedulingPriorityClass
NtGdiDdDDISetQueuedLimit
NtGdiDdDDISetStablePowerState
NtGdiDdDDISetStereoEnabled
NtGdiDdDDISetSyncRefreshCountWaitTarget
NtGdiDdDDISetVidPnSourceHwProtection
NtGdiDdDDISetVidPnSourceOwner
NtGdiDdDDISetVidPnSourceOwner1
NtGdiDdDDIShareObjects
NtGdiDdDDISharedPrimaryLockNotification
NtGdiDdDDISharedPrimaryUnLockNotification
NtGdiDdDDISignalSynchronizationObject
NtGdiDdDDISignalSynchronizationObjectFromCpu
NtGdiDdDDISignalSynchronizationObjectFromGpu
NtGdiDdDDISignalSynchronizationObjectFromGpu2
NtGdiDdDDISubmitCommand
NtGdiDdDDITrimProcessCommitment
NtGdiDdDDIUnlock
NtGdiDdDDIUnlock2
NtGdiDdDDIUnpinDirectFlipResources
NtGdiDdDDIUpdateAllocationProperty
NtGdiDdDDIUpdateGpuVirtualAddress
NtGdiDdDDIUpdateOverlay
NtGdiDdDDIWaitForIdle
NtGdiDdDDIWaitForSynchronizationObject
NtGdiDdDDIWaitForSynchronizationObjectFromCpu
NtGdiDdDDIWaitForSynchronizationObjectFromGpu
NtGdiDdDDIWaitForVerticalBlankEvent
NtGdiDdDDIWaitForVerticalBlankEvent2
NtGdiDdDeleteDirectDrawObject
NtGdiDdDestroyD3DBuffer
NtGdiDdDestroyFullscreenSprite
NtGdiDdDestroyMoComp
NtGdiDdEndMoCompFrame
NtGdiDdFlip
NtGdiDdFlipToGDISurface
NtGdiDdGetAvailDriverMemory
NtGdiDdGetBltStatus
NtGdiDdGetDC
NtGdiDdGetDriverInfo
NtGdiDdGetDriverState
NtGdiDdGetDxHandle
NtGdiDdGetFlipStatus
NtGdiDdGetInternalMoCompInfo
NtGdiDdGetMoCompBuffInfo
NtGdiDdGetMoCompFormats
NtGdiDdGetMoCompGuids
NtGdiDdGetScanLine
NtGdiDdLock
NtGdiDdNotifyFullscreenSpriteUpdate
NtGdiDdQueryDirectDrawObject
NtGdiDdQueryMoCompStatus
NtGdiDdQueryVisRgnUniqueness
NtGdiDdReenableDirectDrawObject
NtGdiDdReleaseDC
NtGdiDdRenderMoComp
NtGdiDdSetColorKey
NtGdiDdSetExclusiveMode
NtGdiDdSetGammaRamp
NtGdiDdSetOverlayPosition
NtGdiDdUnattachSurface
NtGdiDdUnlock
NtGdiDdUpdateOverlay
NtGdiDdWaitForVerticalBlank
NtGdiDeleteColorTransform
NtGdiDescribePixelFormat
NtGdiDestroyOPMProtectedOutput
NtGdiDestroyPhysicalMonitor
NtGdiDoBanding
NtGdiDrawEscape
NtGdiDvpAcquireNotification
NtGdiDvpCanCreateVideoPort
NtGdiDvpColorControl
NtGdiDvpCreateVideoPort
NtGdiDvpDestroyVideoPort
NtGdiDvpFlipVideoPort
NtGdiDvpGetVideoPortBandwidth
NtGdiDvpGetVideoPortConnectInfo
NtGdiDvpGetVideoPortField
NtGdiDvpGetVideoPortFlipStatus
NtGdiDvpGetVideoPortInputFormats
NtGdiDvpGetVideoPortLine
NtGdiDvpGetVideoPortOutputFormats
NtGdiDvpGetVideoSignalStatus
NtGdiDvpReleaseNotification
NtGdiDvpUpdateVideoPort
NtGdiDvpWaitForVideoPortSync
NtGdiDwmCreatedBitmapRemotingOutput
NtGdiDxgGenericThunk
NtGdiEllipse
NtGdiEnableEudc
NtGdiEndDoc
NtGdiEndGdiRendering
NtGdiEndPage
NtGdiEngAlphaBlend
NtGdiEngAssociateSurface
NtGdiEngBitBlt
NtGdiEngCheckAbort
NtGdiEngComputeGlyphSet
NtGdiEngCopyBits
NtGdiEngCreateBitmap
NtGdiEngCreateClip
NtGdiEngCreateDeviceBitmap
NtGdiEngCreateDeviceSurface
NtGdiEngCreatePalette
NtGdiEngDeleteClip
NtGdiEngDeletePalette
NtGdiEngDeletePath
NtGdiEngDeleteSurface
NtGdiEngEraseSurface
NtGdiEngFillPath
NtGdiEngGradientFill
NtGdiEngLineTo
NtGdiEngLockSurface
NtGdiEngMarkBandingSurface
NtGdiEngPaint
NtGdiEngPlgBlt
NtGdiEngStretchBlt
NtGdiEngStretchBltROP
NtGdiEngStrokeAndFillPath
NtGdiEngStrokePath
NtGdiEngTextOut
NtGdiEngTransparentBlt
NtGdiEngUnlockSurface
NtGdiEnumFonts
NtGdiEnumObjects
NtGdiEudcLoadUnloadLink
NtGdiExtFloodFill
NtGdiFONTOBJ_cGetAllGlyphHandles
NtGdiFONTOBJ_cGetGlyphs
NtGdiFONTOBJ_pQueryGlyphAttrs
NtGdiFONTOBJ_pfdg
NtGdiFONTOBJ_pifi
NtGdiFONTOBJ_pvTrueTypeFontFile
NtGdiFONTOBJ_pxoGetXform
NtGdiFONTOBJ_vGetInfo
NtGdiFlattenPath
NtGdiFontIsLinked
NtGdiForceUFIMapping
NtGdiFrameRgn
NtGdiFullscreenControl
NtGdiGetBoundsRect
NtGdiGetCOPPCompatibleOPMInformation
NtGdiGetCertificate
NtGdiGetCertificateByHandle
NtGdiGetCertificateSize
NtGdiGetCertificateSizeByHandle
NtGdiGetCharABCWidthsW
NtGdiGetCharacterPlacementW
NtGdiGetColorAdjustment
NtGdiGetColorSpaceforBitmap
NtGdiGetCurrentDpiInfo
NtGdiGetDeviceCaps
NtGdiGetDeviceCapsAll
NtGdiGetDeviceGammaRamp
NtGdiGetDeviceWidth
NtGdiGetDhpdev
NtGdiGetETM
NtGdiGetEmbUFI
NtGdiGetEmbedFonts
NtGdiGetEudcTimeStampEx
NtGdiGetFontFileData
NtGdiGetFontFileInfo
NtGdiGetFontResourceInfoInternalW
NtGdiGetFontUnicodeRanges
NtGdiGetGlyphIndicesW
NtGdiGetGlyphIndicesWInternal
NtGdiGetGlyphOutline
NtGdiGetKerningPairs
NtGdiGetLinkedUFIs
NtGdiGetMiterLimit
NtGdiGetMonitorID
NtGdiGetNumberOfPhysicalMonitors
NtGdiGetOPMInformation
NtGdiGetOPMRandomNumber
NtGdiGetObjectBitmapHandle
NtGdiGetPath
NtGdiGetPerBandInfo
NtGdiGetPhysicalMonitorDescription
NtGdiGetPhysicalMonitors
NtGdiGetProcessSessionFonts
NtGdiGetRealizationInfo
NtGdiGetServerMetaFileBits
NtGdiGetSpoolMessage
NtGdiGetStats
NtGdiGetStringBitmapW
NtGdiGetSuggestedOPMProtectedOutputArraySize
NtGdiGetTextExtentExW
NtGdiGetUFI
NtGdiGetUFIPathname
NtGdiGradientFill
NtGdiHLSurfGetInformation
NtGdiHLSurfSetInformation
NtGdiHT_Get8BPPFormatPalette
NtGdiHT_Get8BPPMaskPalette
NtGdiIcmBrushInfo
NtGdiInit
NtGdiInitSpool
NtGdiMakeFontDir
NtGdiMakeInfoDC
NtGdiMakeObjectUnXferable
NtGdiMakeObjectXferable
NtGdiMirrorWindowOrg
NtGdiMonoBitmap
NtGdiMoveTo
NtGdiOffsetClipRgn
NtGdiPATHOBJ_bEnum
NtGdiPATHOBJ_bEnumClipLines
NtGdiPATHOBJ_vEnumStart
NtGdiPATHOBJ_vEnumStartClipLines
NtGdiPATHOBJ_vGetBounds
NtGdiPathToRegion
NtGdiPlgBlt
NtGdiPolyDraw
NtGdiPolyTextOutW
NtGdiPtInRegion
NtGdiPtVisible
NtGdiQueryFonts
NtGdiRemoveFontResourceW
NtGdiRemoveMergeFont
NtGdiResetDC
NtGdiResizePalette
NtGdiRoundRect
NtGdiSTROBJ_bEnum
NtGdiSTROBJ_bEnumPositionsOnly
NtGdiSTROBJ_bGetAdvanceWidths
NtGdiSTROBJ_dwGetCodePage
NtGdiSTROBJ_vEnumStart
NtGdiScaleViewportExtEx
NtGdiScaleWindowExtEx
NtGdiSelectBrush
NtGdiSelectClipPath
NtGdiSelectPen
NtGdiSetBitmapAttributes
NtGdiSetBrushAttributes
NtGdiSetColorAdjustment
NtGdiSetColorSpace
NtGdiSetDeviceGammaRamp
NtGdiSetFontXform
NtGdiSetIcmMode
NtGdiSetLinkedUFIs
NtGdiSetMagicColors
NtGdiSetOPMSigningKeyAndSequenceNumbers
NtGdiSetPUMPDOBJ
NtGdiSetPixelFormat
NtGdiSetRectRgn
NtGdiSetSizeDevice
NtGdiSetSystemPaletteUse
NtGdiSetTextJustification
NtGdiSetUMPDSandboxState
NtGdiStartDoc
NtGdiStartPage
NtGdiStrokeAndFillPath
NtGdiStrokePath
NtGdiSwapBuffers
NtGdiTransparentBlt
NtGdiUMPDEngFreeUserMem
NtGdiUnloadPrinterDriver
NtGdiUnmapMemFont
NtGdiUpdateColors
NtGdiUpdateTransform
NtGdiWidenPath
NtGdiXFORMOBJ_bApplyXform
NtGdiXFORMOBJ_iGetXform
NtGdiXLATEOBJ_cGetPalette
NtGdiXLATEOBJ_hGetColorTransform
NtGdiXLATEOBJ_iXlate
NtHWCursorUpdatePointer
NtNotifyPresentToCompositionSurface
NtOpenCompositionSurfaceDirtyRegion
NtOpenCompositionSurfaceSectionInfo
NtOpenCompositionSurfaceSwapChainHandleInfo
NtQueryCompositionInputIsImplicit
NtQueryCompositionInputQueueAndTransform
NtQueryCompositionInputSink
NtQueryCompositionInputSinkLuid
NtQueryCompositionInputSinkViewId
NtQueryCompositionSurfaceBinding
NtQueryCompositionSurfaceRenderingRealization
NtQueryCompositionSurfaceStatistics
NtRIMAddInputObserver
NtRIMGetDevicePreparsedDataLockfree
NtRIMObserveNextInput
NtRIMRemoveInputObserver
NtRIMUpdateInputObserverRegistration
NtSetCompositionSurfaceAnalogExclusive
NtSetCompositionSurfaceBufferCompositionModeAndOrientation
NtSetCompositionSurfaceIndependentFlipInfo
NtSetCompositionSurfaceOutOfFrameDirectFlipNotification
NtSetCompositionSurfaceStatistics
NtTokenManagerConfirmOutstandingAnalogToken
NtTokenManagerCreateCompositionTokenHandle
NtTokenManagerDeleteOutstandingDirectFlipTokens
NtTokenManagerGetAnalogExclusiveSurfaceUpdates
NtTokenManagerGetAnalogExclusiveTokenEvent
NtTokenManagerGetOutOfFrameDirectFlipSurfaceUpdates
NtTokenManagerOpenSectionAndEvents
NtTokenManagerThread
NtUnBindCompositionSurface
NtUpdateInputSinkTransforms
NtUserAcquireIAMKey
NtUserAcquireInteractiveControlBackgroundAccess
NtUserAddClipboardFormatListener
NtUserAssociateInputContext
NtUserAutoPromoteMouseInPointer
NtUserAutoRotateScreen
NtUserBlockInput
NtUserBuildHimcList
NtUserBuildPropList
NtUserCalculatePopupWindowPosition
NtUserCallHwndOpt
NtUserCanBrokerForceForeground
NtUserChangeDisplaySettings
NtUserChangeWindowMessageFilterEx
NtUserCheckAccessForIntegrityLevel
NtUserCheckProcessForClipboardAccess
NtUserCheckProcessSession
NtUserCheckWindowThreadDesktop
NtUserChildWindowFromPointEx
NtUserClearForeground
NtUserClipCursor
NtUserCompositionInputSinkLuidFromPoint
NtUserCreateDCompositionHwndTarget
NtUserCreateDesktopEx
NtUserCreateInputContext
NtUserCreateWindowStation
NtUserCtxDisplayIOCtl
NtUserDeferWindowPosAndBand
NtUserDelegateCapturePointers
NtUserDelegateInput
NtUserDestroyDCompositionHwndTarget
NtUserDestroyInputContext
NtUserDisableImmersiveOwner
NtUserDisableProcessWindowFiltering
NtUserDisableThreadIme
NtUserDiscardPointerFrameMessages
NtUserDisplayConfigGetDeviceInfo
NtUserDisplayConfigSetDeviceInfo
NtUserDoSoundConnect
NtUserDoSoundDisconnect
NtUserDragDetect
NtUserDragObject
NtUserDrawAnimatedRects
NtUserDrawCaption
NtUserDrawCaptionTemp
NtUserDrawMenuBarTemp
NtUserDwmGetRemoteSessionOcclusionEvent
NtUserDwmGetRemoteSessionOcclusionState
NtUserDwmKernelShutdown
NtUserDwmKernelStartup
NtUserDwmValidateWindow
NtUserEnableChildWindowDpiMessage
NtUserEnableIAMAccess
NtUserEnableMouseInPointer
NtUserEnableMouseInputForCursorSuppression
NtUserEnableTouchPad
NtUserEndMenu
NtUserEvent
NtUserFlashWindowEx
NtUserFrostCrashedWindow
NtUserGetAppImeLevel
NtUserGetAutoRotationState
NtUserGetCIMSSM
NtUserGetCaretPos
NtUserGetClipCursor
NtUserGetClipboardAccessToken
NtUserGetClipboardViewer
NtUserGetComboBoxInfo
NtUserGetCurrentInputMessageSource
NtUserGetCursorDims
NtUserGetCursorInfo
NtUserGetDManipHookInitFunction
NtUserGetDesktopID
NtUserGetDisplayAutoRotationPreferences
NtUserGetDisplayAutoRotationPreferencesByProcessId
NtUserGetDisplayConfigBufferSizes
NtUserGetDpiForMonitor
NtUserGetDpiSystemMetrics
NtUserGetGestureConfig
NtUserGetGestureExtArgs
NtUserGetGestureInfo
NtUserGetGuiResources
NtUserGetHimetricScaleFactorFromPixelLocation
NtUserGetImeHotKey
NtUserGetImeInfoEx
NtUserGetInputLocaleInfo
NtUserGetInteractiveControlDeviceInfo
NtUserGetInteractiveControlInfo
NtUserGetInternalWindowPos
NtUserGetKeyNameText
NtUserGetKeyboardLayoutName
NtUserGetLayeredWindowAttributes
NtUserGetListBoxInfo
NtUserGetMenuIndex
NtUserGetMenuItemRect
NtUserGetMouseMovePointsEx
NtUserGetPhysicalDeviceRect
NtUserGetPointerCursorId
NtUserGetPointerDevice
NtUserGetPointerDeviceCursors
NtUserGetPointerDeviceProperties
NtUserGetPointerDeviceRects
NtUserGetPointerDevices
NtUserGetPointerFrameArrivalTimes
NtUserGetPointerInfoList
NtUserGetPointerInputTransform
NtUserGetPointerType
NtUserGetPrecisionTouchPadConfiguration
NtUserGetPriorityClipboardFormat
NtUserGetProcessDpiAwareness
NtUserGetProcessUIContextInformation
NtUserGetQueueEventStatus
NtUserGetRawInputBuffer
NtUserGetRawInputData
NtUserGetRawInputDeviceInfo
NtUserGetRawInputDeviceList
NtUserGetRawPointerDeviceData
NtUserGetRegisteredRawInputDevices
NtUserGetTopLevelWindow
NtUserGetTouchInputInfo
NtUserGetTouchValidationStatus
NtUserGetUpdatedClipboardFormats
NtUserGetWOWClass
NtUserGetWindowBand
NtUserGetWindowCompositionAttribute
NtUserGetWindowCompositionInfo
NtUserGetWindowDisplayAffinity
NtUserGetWindowFeedbackSetting
NtUserGetWindowMinimizeRect
NtUserGetWindowRgnEx
NtUserGhostWindowFromHungWindow
NtUserHandleDelegatedInput
NtUserHardErrorControl
NtUserHidePointerContactVisualization
NtUserHiliteMenuItem
NtUserHungWindowFromGhostWindow
NtUserHwndQueryRedirectionInfo
NtUserHwndSetRedirectionInfo
NtUserImpersonateDdeClientWindow
NtUserInitTask
NtUserInitialize
NtUserInitializeClientPfnArrays
NtUserInitializeInputDeviceInjection
NtUserInitializePointerDeviceInjection
NtUserInitializeTouchInjection
NtUserInjectDeviceInput
NtUserInjectGesture
NtUserInjectKeyboardInput
NtUserInjectMouseInput
NtUserInjectPointerInput
NtUserInjectTouchInput
NtUserInteractiveControlQueryUsage
NtUserInternalClipCursor
NtUserInternalGetWindowIcon
NtUserIsChildWindowDpiMessageEnabled
NtUserIsInteractiveControlFocusSet
NtUserIsMouseInPointerEnabled
NtUserIsMouseInputEnabled
NtUserIsTopLevelWindow
NtUserIsTouchWindow
NtUserIsWindowBroadcastingDpiToChildren
NtUserLayoutCompleted
NtUserLinkDpiCursor
NtUserLoadKeyboardLayoutEx
NtUserLockWindowStation
NtUserLockWorkStation
NtUserLogicalToPerMonitorDPIPhysicalPoint
NtUserLogicalToPhysicalPoint
NtUserMNDragLeave
NtUserMNDragOver
NtUserMagControl
NtUserMagGetContextInformation
NtUserMagSetContextInformation
NtUserMenuItemFromPoint
NtUserMinMaximize
NtUserModifyWindowTouchCapability
NtUserNavigateFocus
NtUserNotifyIMEStatus
NtUserOpenInputDesktop
NtUserOpenThreadDesktop
NtUserPaintMonitor
NtUserPerMonitorDPIPhysicalToLogicalPoint
NtUserPhysicalToLogicalPoint
NtUserPrintWindow
NtUserPromoteMouseInPointer
NtUserPromotePointer
NtUserQueryBSDRWindow
NtUserQueryDisplayConfig
NtUserQueryInformationThread
NtUserQueryInputContext
NtUserQuerySendMessage
NtUserRealChildWindowFromPoint
NtUserRealWaitMessageEx
NtUserRegisterBSDRWindow
NtUserRegisterDManipHook
NtUserRegisterEdgy
NtUserRegisterErrorReportingDialog
NtUserRegisterHotKey
NtUserRegisterManipulationThread
NtUserRegisterPointerDeviceNotifications
NtUserRegisterPointerInputTarget
NtUserRegisterRawInputDevices
NtUserRegisterServicesProcess
NtUserRegisterSessionPort
NtUserRegisterShellPTPListener
NtUserRegisterTasklist
NtUserRegisterTouchHitTestingWindow
NtUserRegisterTouchPadCapable
NtUserRegisterUserApiHook
NtUserReleaseDwmHitTestWaiters
NtUserRemoteConnect
NtUserRemoteRedrawRectangle
NtUserRemoteRedrawScreen
NtUserRemoteStopScreenUpdates
NtUserRemoveClipboardFormatListener
NtUserRemoveInjectionDevice
NtUserReportInertia
NtUserResolveDesktopForWOW
NtUserSendEventMessage
NtUserSendInteractiveControlHapticsReport
NtUserSetActivationFilter
NtUserSetActiveProcessForMonitor
NtUserSetAppImeLevel
NtUserSetAutoRotation
NtUserSetBrokeredForeground
NtUserSetCalibrationData
NtUserSetChildWindowNoActivate
NtUserSetClassWord
NtUserSetCoreWindow
NtUserSetCoreWindowPartner
NtUserSetCursorContents
NtUserSetDisplayAutoRotationPreferences
NtUserSetDisplayConfig
NtUserSetDisplayMapping
NtUserSetFallbackForeground
NtUserSetFeatureReportResponse
NtUserSetGestureConfig
NtUserSetImeHotKey
NtUserSetImeInfoEx
NtUserSetImeOwnerWindow
NtUserSetInteractiveControlFocus
NtUserSetInternalWindowPos
NtUserSetLayeredWindowAttributes
NtUserSetManipulationInputTarget
NtUserSetMenu
NtUserSetMenuContextHelpId
NtUserSetMenuFlagRtoL
NtUserSetMirrorRendering
NtUserSetObjectInformation
NtUserSetPrecisionTouchPadConfiguration
NtUserSetProcessDpiAwareness
NtUserSetProcessRestrictionExemption
NtUserSetProcessUIAccessZorder
NtUserSetShellWindowEx
NtUserSetSysColors
NtUserSetSystemCursor
NtUserSetSystemTimer
NtUserSetThreadDPIAwarenessContext
NtUserSetThreadDPIAwarenessContextFromWindow
NtUserSetThreadInputBlocked
NtUserSetThreadLayoutHandles
NtUserSetWindowArrangement
NtUserSetWindowBand
NtUserSetWindowCompositionAttribute
NtUserSetWindowCompositionTransition
NtUserSetWindowDisplayAffinity
NtUserSetWindowFeedbackSetting
NtUserSetWindowRgnEx
NtUserSetWindowShowState
NtUserSetWindowStationUser
NtUserShowSystemCursor
NtUserShutdownBlockReasonCreate
NtUserShutdownBlockReasonQuery
NtUserShutdownReasonDestroy
NtUserSignalRedirectionStartComplete
NtUserSlicerControl
NtUserSoundSentry
NtUserSwitchDesktop
NtUserTestForInteractiveUser
NtUserTrackPopupMenuEx
NtUserTransformPoint
NtUserTransformRect
NtUserUndelegateInput
NtUserUnloadKeyboardLayout
NtUserUnlockWindowStation
NtUserUnregisterHotKey
NtUserUnregisterSessionPort
NtUserUnregisterUserApiHook
NtUserUpdateDefaultDesktopThumbnail
NtUserUpdateInputContext
NtUserUpdateInstance
NtUserUpdateLayeredWindow
NtUserUpdatePerUserSystemParameters
NtUserUpdateWindowInputSinkHints
NtUserUpdateWindowTrackingInfo
NtUserUpdateWindowTransform
NtUserUserHandleGrantAccess
NtUserValidateHandleSecure
NtUserWaitAvailableMessageEx
NtUserWaitForInputIdle
NtUserWaitForMsgAndEvent
NtUserWaitForRedirectionStartComplete
NtUserWindowFromPhysicalPoint
NtValidateCompositionSurfaceHandle
NtVisualCaptureBits
NtUserSetClassLongPtr
NtUserSetWindowLongPtr
↧

CmControlVector from windows 10 build 14279

March 17, 2016, 4:17 am
$
0
0
IoBlockLegacyFsFilters - wut ?


KeyValueName1058614279
Session Manager\Debug Print FilterACPI_Kd_ACPI_Mask1058614279
Session Manager\Debug Print FilterALPC_Kd_ALPC_Mask1058614279
Session Manager\Debug Print FilterAMLI_Kd_AMLI_Mask1058614279
Session Manager\Debug Print FilterAPPCOMPAT_Kd_APPCOMPAT_Mask1058614279
Session Manager\Debug Print FilterAUTOCHK_Kd_AUTOCHK_Mask1058614279
PowerActiveIdleLevel_PopFxActiveIdleLevel1058614279
PowerActiveIdleThreshold_PopFxActiveIdleThreshold1058614279
PowerActiveIdleTimeout_PopFxActiveIdleTimeout1058614279
TimeZoneInformationActiveTimeBias_ExpLastTimeZoneBias1058614279
Session Manager\ExecutiveAdditionalCriticalWorkerThreads_ExpAdditionalCriticalWorkerThreads1058614279
Session Manager\ExecutiveAdditionalDelayedWorkerThreads_ExpAdditionalDelayedWorkerThreads1058614279
Session Manager\KernelAdjustDpcThreshold_KiAdjustDpcThreshold1058614279
Session Manager\Memory ManagementAllocationPreferencedword_62914C1058614279
Session ManagerAlpcMessageLog_AlpcpMessageLogEnabled1058614279
Session ManagerAlpcWakePolicy_AlpcpWakePolicyDefault1058614279
Session Manager\KernelAlwaysTrackIoBoosting_PspAlwaysTrackIoBoosting1058614279
Session Manager\Quota SystemApplicationBlockedMessageLimit_PspJobNoWakeChargeLimit1058614279
LSAAuditBaseDirectories_ObpAuditBaseDirectories1058614279
LSAAuditBaseObjects_ObpAuditBaseObjects1058614279
CrashControlAutoReboot_IopAutoReboot1058614279
Session Manager\Debug Print FilterBURNENG_Kd_BURNENG_Mask1058614279
TimeZoneInformationBias_ExpAltTimeZoneBias1058614279
Session Manager\KernelBugCheckUnexpectedInterrupts_KiBugCheckUnexpectedInterrupts1058614279
Session Manager\Debug Print FilterCACHEMGR_Kd_CACHEMGR_Mask1058614279
Session Manager\Debug Print FilterCAPIMG_Kd_CAPIMG_Mask1058614279
Session Manager\Debug Print FilterCDAUDIO_Kd_CDAUDIO_Mask1058614279
Session Manager\Debug Print FilterCDROM_Kd_CDROM_Mask1058614279
Session Manager\Debug Print FilterCFR_Kd_CFR_Mask1058614279
Session Manager\Debug Print FilterCLASSPNP_Kd_CLASSPNP_Mask1058614279
Session Manager\Debug Print FilterCNG_Kd_CNG_Mask1058614279
Session Manager\Debug Print FilterCONFIG_Kd_CONFIG_Mask1058614279
Session Manager\Debug Print FilterCOVERAGE_Kd_COVERAGE_Mask1058614279
Session Manager\Debug Print FilterCRASHDUMP_Kd_CRASHDUMP_Mask1058614279
Session Manager\Debug Print FilterCRASHDUMPXHCI_Kd_CRASHDUMPXHCI_Mask1058614279
WindowsCSDBuildNumber_CmNtSpBuildNumber1058614279
WindowsCSDReleaseType_CmNtCSDReleaseType1058614279
WindowsCSDVersion_CmNtCSDVersion1058614279
Session ManagerCWDIllegalInDLLSearch_PspCurDirDevicesSkippedForDlls1058614279
Session Manager\KernelCacheErrataOverride_KiTLBCOverride1058614279
PowerCheckPowerSourceAfterRtcWakeTime_PopCheckPowerSourceAfterRtcWakeTime1058614279
PowerClass1InitialUnparkCount_PpmParkInitialClass1UnParkCount1058614279
PowerCoalescingFlushInterval_PopCoalescingFlushInterval1058614279
PowerCoalescingTimerInterval_PopCoalescingTimerInterval1058614279
Session Manager\I/O SystemCountOperations_IoCountOperations1058614279
Session Manager\ExecutiveCoverageMaxPagedPool_ExCovMaxPagedPoolToUse1058614279
Session ManagerCriticalSectionTimeoutdword_6291501058614279
PowerCsEnabled_PopCsEnabledReg1058614279
Session Manager\Debug Print FilterDCOMSS_Kd_DCOMSS_Mask1058614279
Session Manager\Debug Print FilterDEFAULT_Kd_DEFAULT_Mask1058614279
Session Manager\Debug Print FilterDFRGIFC_Kd_DFRGIFC_Mask1058614279
Session Manager\Debug Print FilterDFSC_Kd_DFSC_Mask1058614279
Session Manager\Debug Print FilterDISK_Kd_DISK_Mask1058614279
Session Manager\Debug Print FilterDMADMIN_Kd_DMADMIN_Mask1058614279
Session Manager\Debug Print FilterDMCONFIG_Kd_DMCONFIG_Mask1058614279
Session Manager\Debug Print FilterDMIO_Kd_DMIO_Mask1058614279
Session Manager\Debug Print FilterDMSERVER_Kd_DMSERVER_Mask1058614279
Session Manager\Debug Print FilterDMSYNTH_Kd_DMSYNTH_Mask1058614279
Session Manager\KernelDPCTimeout_KiDPCTimeout1058614279
Session Manager\Debug Print FilterDRIVEEXTENDER_Kd_DRIVEEXTENDER_Mask1058614279
Session Manager\Memory ManagementDeadlockRecursionDepthLimit_ViRecursionDepthLimitFromRegistry1058614279
Session Manager\Memory ManagementDeadlockSearchNodesLimit_ViSearchedNodesLimitFromRegistry1058614279
Session Manager\KernelDebugPollInterval_KiDebugPollInterval1058614279
Session ManagerDebugger Retries_KdpContext1058614279
Session Manager\KernelDebuggerIsStallOwner_KiDebuggerIsStallOwner1058614279
Session ManagerDebuggerMaxModuleMsgs_DbgkpMaxModuleMsgs1058614279
PowerDeepIoCoalescingEnabled_PopDeepIoCoalescingEnabled1058614279
Nls\LanguageDefault1058614279
Session Manager\Configuration ManagerDelayCloseSize_CmpDelayedCloseSize1058614279
Session Manager\Configuration ManagerDelayDerefKCBLimit_CmpDelayDerefKCBLimit1058614279
Session Manager\KernelDisableAutoBoost_KiAbForceDisable1058614279
Session Manager\I/O SystemDisableDiskCounters_PsDisableDiskCounters1058614279
Session Manager\KernelDisableExceptionChainValidation_PspSehValidationPolicy1058614279
Session Manager\KernelDisableLightWeightSuspend_KiDisableLightWeightSuspend1058614279
WHEA\PolicyDisableOffline_WheaRegPolicyDisableOffline1058614279
Session Manager\Memory ManagementDisablePageCombiningdword_62912C1058614279
Session Manager\Memory ManagementDisablePagingExecutivebyte_61D1341058614279
PowerDisableVsyncLatencyUpdate_PpmDisableVsyncLatencyUpdate1058614279
Session Manager\KnownDLLsDllDirectory1058614279
Session Manager\KernelDpcQueueDepth_KiMaximumDpcQueueDepth1058614279
Session Manager\KernelDpcWatchdogPeriod_KeDpcWatchdogPeriod1058614279
PowerDripsWatchdogAction_PopDripsWatchdogAction1058614279
PowerDripsWatchdogTimeout_PopDripsWatchdogTimeout1058614279
Session Manager\Memory ManagementDynamicMemory_MmDynamicPfn1058614279
Session Manager\Debug Print FilterEMS_Kd_EMS_Mask1058614279
Session Manager\Debug Print FilterENVIRON_Kd_ENVIRON_Mask1058614279
Session Manager\Debug Print FilterEXFAT_Kd_EXFAT_Mask1058614279
Session Manager\Memory ManagementEnableCfgdword_62912410586
Session Manager\Memory ManagementEnableCoolingunk_61D14C1058614279
Session Manager\Configuration ManagerEnablePeriodicBackup_CmpDoIdleProcessing1058614279
Session Manager\Configuration ManagerEnableVReg_CmEnableVReg14279
Session Manager\Configuration Manager\LastKnownGoodEnabled_CmpLKGEnabled1058614279
PowerEnergyEstimationDisabled_PopEnergyEstimationDisabled1058614279
PowerEnforceConsoleLockScreenTimeout_PopEnforceConsoleLockScreenTimeout1058614279
PowerEnforceDisconnectedStandby_PopEnforceDisconnectedStandby1058614279
Session ManagerErrorPortCommTimeout_DbgkErrorPortCommTimeout1058614279
Session ManagerErrorPortStartTimeout_DbgkErrorPortStartTimeout1058614279
PowerExitLatencyCheckEnabled_PpmExitLatencyCheckEnabled1058614279
Session Manager\Debug Print FilterFASTFAT_Kd_FASTFAT_Mask1058614279
Session Manager\Debug Print FilterFCPORT_Kd_FCPORT_Mask1058614279
Session Manager\Debug Print FilterFDC_Kd_FDC_Mask1058614279
Session Manager\Debug Print FilterFILETRACE_Kd_FILETRACE_Mask1058614279
Session Manager\Debug Print FilterFLOPPY_Kd_FLOPPY_Mask1058614279
Session Manager\Debug Print FilterFLTMGR_Kd_FLTMGR_Mask1058614279
Session Manager\Debug Print FilterFLTREGRESS_Kd_FLTREGRESS_Mask1058614279
Session Manager\Debug Print FilterFSLIB_Kd_FSLIB_Mask14279
Session Manager\Debug Print FilterFSTUB_Kd_FSTUB_Mask1058614279
Session Manager\Debug Print FilterFUSION_Kd_FUSION_Mask1058614279
Session Manager\Debug Print FilterFVEVOL_Kd_FVEVOL_Mask1058614279
Session Manager\Configuration ManagerFastBoot_CmFastBoot1058614279
Session Manager\PowerFlushPolicy_PopFlushPolicy1058614279
Session Manager\Memory ManagementForceValidateIodword_6291381058614279
Session Manager\Configuration ManagerFreezeThawTimeoutInSeconds_CmFreezeThawTimeoutInSeconds1058614279
Session Manager\Debug Print FilterGPIO_Kd_GPIO_Mask1058614279
ValidationRunlevelsGlobal1058614279
Session ManagerGlobalFlag1058614279
Session Manager\Debug Print FilterHALIA64_Kd_HALIA64_Mask1058614279
Session Manager\Debug Print FilterHEAP_Kd_HEAP_Mask1058614279
Session Manager\Debug Print FilterHPS_Kd_HPS_Mask1058614279
Session ManagerHeapDeCommitFreeBlockThresholddword_62915C1058614279
Session ManagerHeapDeCommitTotalFreeThresholddword_6291601058614279
Session ManagerHeapSegmentCommitdword_6291641058614279
Session ManagerHeapSegmentReservedword_6291681058614279
PowerHiberFileSizePercent_PopHiberFileSizePercent1058614279
PowerHiberFileType_PopHiberFileType1058614279
PowerHiberbootEnabled_PopHiberbootEnabledReg1058614279
PowerHibernateChecksummingEnabled_PopHiberChecksummingEnabledReg1058614279
PowerHibernateEnabled_PopHiberEnabledReg1058614279
Session Manager\Memory ManagementHighMemoryThresholddword_6291701058614279
PowerHighPerfDurationBoot_PpmHighPerfDuration1058614279
PowerHighPerfDurationCSExitunk_61D6541058614279
PowerHighPerfDurationSxExitunk_61D6581058614279
Session Manager\KernelHyperStartDisabled_HvlVpStartDisabled1058614279
Session Manager\Debug Print FilterI8042PRT_Kd_I8042PRT_Mask1058614279
Session Manager\Debug Print FilterIDEP_Kd_IDEP_Mask1058614279
Session Manager\Debug Print FilterIDLETASK_Kd_IDLETASK_Mask1058614279
Session Manager\Debug Print FilterIHVAUDIO_Kd_IHVAUDIO_Mask1058614279
Session Manager\Debug Print FilterIHVBUS_Kd_IHVBUS_Mask1058614279
Session Manager\Debug Print FilterIHVDRIVER_Kd_IHVDRIVER_Mask1058614279
Session Manager\Debug Print FilterIHVNETWORK_Kd_IHVNETWORK_Mask1058614279
Session Manager\Debug Print FilterIHVSTREAMING_Kd_IHVSTREAMING_Mask1058614279
Session Manager\Debug Print FilterIHVVIDEO_Kd_IHVVIDEO_Mask1058614279
Session Manager\Debug Print FilterIMAPI_Kd_IMAPI_Mask1058614279
Session Manager\Debug Print FilterINFINIBAND_Kd_INFINIBAND_Mask1058614279
Session Manager\Debug Print FilterIOSTRESS_Kd_IOSTRESS_Mask1058614279
Session Manager\Debug Print FilterISAPNP_Kd_ISAPNP_Mask1058614279
Session Manager\KernelIdealDpcRate_KiIdealDpcRate1058614279
Session Manager\PowerIdleScanInterval_PopIdleScanInterval1058614279
PowerIdleStateTimeout_PopPepIdleStateTimeout1058614279
PowerIgnoreCsComplianceCheck_PopIgnoreCsComplianceCheck1058614279
WHEA\PolicyIgnoreDummyWrite_WheaRegPolicyIgnoreDummyWrite1058614279
Session ManagerImageExecutionOptions_ViImageExecutionOptions1058614279
Session ManagerInitConsoleFlags_InitConsoleFlags1058614279
Nls\LanguageInstallLanguage1058614279
Session Manager\KernelInterruptSteeringDisabled_KiInterruptSteeringDisabled1058614279
Session Manager\I/O SystemIoAllowLoadCrashDumpDriver_IopAllowLoadCrashDumpDriver1058614279
Session Manager\I/O SystemIoBlockLegacyFsFilters_IopBlockLegacyFsFilters14279
Session Manager\I/O SystemIoCaseInsensitive_IopCaseInsensitive1058614279
Session Manager\I/O SystemIoEnableSessionZeroAccessCheck_IopSessionZeroAccessCheckEnabled1058614279
Session Manager\I/O SystemIoFailZeroAccessCreate_IopFailZeroAccessCreate1058614279
Session Manager\I/O SystemIoIrpCompletionTimeoutInSeconds_IopIrpCompletionTimeoutInSeconds1058614279
PowerIpiLastClockOwnerDisable_PpmIpiLastClockOwnerDisable1058614279
Session Manager\Debug Print FilterKBDCLASS_Kd_KBDCLASS_Mask1058614279
Session Manager\Debug Print FilterKBDHID_Kd_KBDHID_Mask1058614279
Session Manager\Debug Print FilterKSECDD_Kd_KSECDD_Mask1058614279
Session Manager\Debug Print FilterKTM_Kd_KTM_Mask1058614279
EmbeddedNT\ExecutiveKernelOnlyConfiguration_PsEmbeddedNTMask1058614279
Session Manager\KernelKernelSEHOPEnabled_KiI386SEHOPEnabled1058614279
Session Manager\ExecutiveKernelWorkerTestFlags_ExpWorkerQueueTestFlags1058614279
Session Manager\Debug Print FilterLDR_Kd_LDR_Mask1058614279
Session Manager\Debug Print FilterLSASS_Kd_LSASS_Mask1058614279
Session Manager\Debug Print FilterLSERMOUS_Kd_LSERMOUS_Mask1058614279
Session Manager\Debug Print FilterLUAFV_Kd_LUAFV_Mask1058614279
Session Manager\I/O SystemLargeIrpStackLocations_IopLargeIrpStackLocations1058614279
Session Manager\Memory ManagementLargePageDrivers_MmLargePageDriverBuffer1058614279
Session Manager\Memory ManagementLargePageMinimumdword_6291341058614279
PowerLatencyToleranceDefault_PpmLatencyToleranceLimit1058614279
PowerLatencyToleranceFSVPdword_62967C1058614279
PowerLatencyToleranceIdleResiliencydword_6296801058614279
PowerLatencyToleranceVSyncEnableddword_6296781058614279
Session Manager\Memory ManagementLowMemoryThresholddword_62916C1058614279
Session Manager\Debug Print FilterMCHGR_Kd_MCHGR_Mask1058614279
Session Manager\Debug Print FilterMM_Kd_MM_Mask1058614279
Session Manager\Debug Print FilterMMCSS_Kd_MMCSS_Mask1058614279
Session Manager\Debug Print FilterMOUCLASS_Kd_MOUCLASS_Mask1058614279
Session Manager\Debug Print FilterMOUHID_Kd_MOUHID_Mask1058614279
Session Manager\Debug Print FilterMOUNTMGR_Kd_MOUNTMGR_Mask1058614279
Session Manager\Debug Print FilterMPIO_Kd_MPIO_Mask1058614279
Session Manager\Debug Print FilterMSDSM_Kd_MSDSM_Mask1058614279
WHEAMaxCorrectedMCEOutstanding_WheapMaxCorrectedMCEOutstanding1058614279
Session Manager\KernelMaxDynamicTickDuration_KiMaxDynamicTickDuration1058614279
Session Manager\ExecutiveMaxTimeSeparationBeforeCorrect_ExpMaxTimeSeperationBeforeCorrect1058614279
Session Manager\ExecutiveMaximumKernelWorkerThreads_ExpMaximumKernelWorkerThreads1058614279
Session Manager\KernelMaximumSharedReadyQueueSize_KiMaximumSharedReadyQueueSize1058614279
Session Manager\I/O SystemMediumIrpStackLocations_IopMediumIrpStackLocations1058614279
WMI\TraceMemInfoInterval_EtwpMemInfoInterval1058614279
WHEA\PolicyMemPersistOffline_WheaRegPolicyMemPersistOffline1058614279
WHEA\PolicyMemPfaDisable_WheaRegPolicyMemPfaDisable1058614279
WHEA\PolicyMemPfaPageCount_WheaRegPolicyMemPfaPageCount1058614279
WHEA\PolicyMemPfaThreshold_WheaRegPolicyMemPfaThreshold1058614279
WHEA\PolicyMemPfaTimeout_WheaRegPolicyMemPfaTimeout1058614279
PowerMfBufferingThreshold_PpmMfBufferingThreshold1058614279
PowerMfOverridesDisabled_PpmMfOverridesDisabled1058614279
Session Manager\KernelMinimumDpcRate_KiMinimumDpcRate1058614279
Session Manager\Memory ManagementMinimumStackCommitInBytesdword_6291541058614279
Session Manager\Memory ManagementMirroringdword_62913C1058614279
Session Manager\KernelMitigationOptions_PspSystemMitigationOptions1058614279
Session Manager\Memory ManagementModifiedWriteMaximumdword_6291481058614279
Session Manager\Memory ManagementMoveImages_MmRegistryState1058614279
PowerMultiparkGranularity_PpmParkMultiparkGranularity1058614279
Session Manager\Debug Print FilterNDIS_Kd_NDIS_Mask1058614279
Session Manager\Debug Print FilterNETAPI_Kd_NETAPI_Mask1058614279
Session Manager\Debug Print FilterNTFS_Kd_NTFS_Mask1058614279
Session Manager\Debug Print FilterNTOSPNP_Kd_NTOSPNP_Mask1058614279
Session Manager\Debug Print FilterNVCTRACE_Kd_NVCTRACE_Mask1058614279
Session Manager\Memory ManagementNonPagedPoolLimit_MmNonPagedPoolLimit1058614279
Session Manager\Memory ManagementNonPagedPoolQuota_PspDefaultResourceLimits1058614279
Session ManagerNumberOfInitialSessions_RtlpNumberOfInitialSessions10586
Session Manager\KernelObCaseInsensitive_ObpCaseInsensitive1058614279
Session Manager\KernelObObjectSecurityInheritance_ObpObjectSecurityInheritance1058614279
Session Manager\KernelObTracePermanent_ObpTracePermanent1058614279
Session Manager\KernelObTracePoolTags_ObpTracePoolTagsBuffer1058614279
Session Manager\KernelObTraceProcessName_ObpTraceProcessNameBuffer1058614279
Session Manager\KernelObUnsecureGlobalNames_ObpUnsecureGlobalNamesBuffer1058614279
Session ManagerObjectSecurityMode_ObpObjectSecurityMode1058614279
Session Manager\Debug Print FilterPCI_Kd_PCI_Mask1058614279
Session Manager\Debug Print FilterPCIIDE_Kd_PCIIDE_Mask1058614279
Session Manager\Debug Print FilterPERFLIB_Kd_PERFLIB_Mask1058614279
Session Manager\Debug Print FilterPNPMEM_Kd_PNPMEM_Mask1058614279
Session Manager\Debug Print FilterPNPMGR_Kd_PNPMGR_Mask1058614279
Session Manager\Debug Print FilterPOWER_Kd_POWER_Mask1058614279
Session Manager\Debug Print FilterPREFETCHER_Kd_PREFETCHER_Mask1058614279
Session Manager\Debug Print FilterPRINTSPOOLER_Kd_PRINTSPOOLER_Mask1058614279
Session Manager\Debug Print FilterPROCESSOR_Kd_PROCESSOR_Mask1058614279
Session Manager\Debug Print FilterPSHED_Kd_PSHED_Mask1058614279
Session Manager\Memory ManagementPageValidationAction_MmPageValidationAction1058614279
Session Manager\Memory ManagementPageValidationFrequency_MmPageValidationFrequency1058614279
Session Manager\Memory ManagementPagedPoolLimit_MmPagedPoolLimit1058614279
Session Manager\Memory ManagementPagedPoolQuotaunk_928DDC1058614279
Session Manager\Memory ManagementPagingFileQuotaunk_928DE01058614279
PowerParkWithCoreGranularity_PpmParkUseCoreGranularity1058614279
Session Manager\KernelPassiveWatchdogTimeout_KiPassiveWatchdogTimeout1058614279
Power\HiberFileBucketPercent16GBFullunk_61D7081058614279
Power\HiberFileBucketPercent16GBReducedunk_61D7041058614279
Power\HiberFileBucketPercent1GBFullunk_61D6A81058614279
Power\HiberFileBucketPercent1GBReducedunk_61D6A41058614279
Power\HiberFileBucketPercent2GBFullunk_61D6C01058614279
Power\HiberFileBucketPercent2GBReducedunk_61D6BC1058614279
Power\HiberFileBucketPercent32GBFullunk_61D7201058614279
Power\HiberFileBucketPercent32GBReducedunk_61D71C1058614279
Power\HiberFileBucketPercent4GBFullunk_61D6D81058614279
Power\HiberFileBucketPercent4GBReducedunk_61D6D41058614279
Power\HiberFileBucketPercent8GBFullunk_61D6F01058614279
Power\HiberFileBucketPercent8GBReducedunk_61D6EC1058614279
Power\HiberFileBucketPercentUnlimitedFullunk_61D7381058614279
Power\HiberFileBucketPercentUnlimitedReducedunk_61D7341058614279
PowerPerfArtificialDomain_PpmPerfArtificialDomainSetting1058614279
PowerPerfBoostAtGuaranteed_PpmPerfBoostAtGuaranteed1058614279
PowerPerfCalculateActualUtilization_PpmPerfCalculateActualUtilization1058614279
PowerPerfIdealAggressiveIncreasePolicyThreshold_PpmPerfIdealAggressiveIncreaseThreshold1058614279
PowerPerfQueryOnDevicePowerChanges_PopFxPerfQueryOnDevicePowerChanges1058614279
PowerPerfSingleStepSize_PpmPerfSingleStepSize1058614279
PowerPlatformAoAcOverride1058614279
PowerPlatformRoleOverride1058614279
Session Manager\KernelPoCleanShutdownFlags_PopShutdownCleanly1058614279
Session Manager\Memory ManagementPoolTag_MmSpecialPoolTag1058614279
Session Manager\Memory ManagementPoolTagOverruns_MmSpecialPoolCatchOverruns1058614279
Session Manager\Memory ManagementPoolTagSmallTableSize_PoolTrackTableSize1058614279
Session Manager\Memory ManagementPoolUsageMaximumdword_6291441058614279
Session Manager\KernelPowerOffFrozenProcessors_KiPowerOffFrozenProcessors1058614279
Session ManagerPowerPolicySimulate_PopSimulate1058614279
Session ManagerPowerSimulateHiberBugcheck_PopSimulateHiberBugcheck1058614279
LSA\auditProcessAccessesToAudit_SepProcessAccessesToAudit1058614279
ProductOptionsProductPolicy1058614279
ProductOptionsProductSuite1058614279
ProductOptionsProductTypedword_6291581058614279
WMI\TraceProfileInterval_EtwpProfileInterval1058614279
Session Manager\Memory ManagementProtectNonPagedPool_MmProtectFreedNonPagedPool1058614279
Session ManagerProtectionMode_ObpProtectionMode1058614279
Session Manager\Debug Print FilterREDBOOK_Kd_REDBOOK_Mask1058614279
Session Manager\Debug Print FilterREFS_Kd_REFS_Mask1058614279
Session Manager\Kernel\RNGRNGAuxiliarySeed_ExpRNGAuxiliarySeed1058614279
Session Manager\Debug Print FilterRPCPROXY_Kd_RPCPROXY_Mask1058614279
Session Manager\Debug Print FilterRSFILTER_Kd_RSFILTER_Mask1058614279
Session Manager\Debug Print FilterRTLTHREADPOOL_Kd_RTLTHREADPOOL_Mask1058614279
TimeZoneInformationRealTimeIsUniversal_ExpRealTimeIsUniversal1058614279
Session Manager\Configuration ManagerRegistryFlushGlobalFlags_CmpGlobalFlushControlFlags1058614279
Session Manager\Configuration ManagerRegistryLazyFlushInterval_CmpLazyFlushIntervalInSeconds1058614279
Session Manager\Configuration ManagerRegistryLazyReconcileInterval_CmpLazyReconcileIntervalInSeconds1058614279
RegistryLockTable_CmRegistryLockTablePages1058614279
Session Manager\Configuration ManagerRegistryLogFileSizeCap_CmpLogFileSizeCap1058614279
Session Manager\Configuration ManagerRegistryReorganizationLimit_CmpReorganizeLimit1058614279
Session Manager\Configuration ManagerRegistryReorganizationLimitDays_CmpReorganizeDelayDays1058614279
RegistrySizeLimit_CmRegistrySizeLimit1058614279
Session Manager\Memory ManagementRemoteFileDirtyPageThreshold_CcRemoteFileDPInlineFlushThreshold1058614279
Session ManagerResourceCheckFlags_ExResourceCheckFlags1058614279
Session ManagerResourceTimeoutCount_ExResourceTimeoutCount1058614279
Session Manager\Debug Print FilterSAMSS_Kd_SAMSS_Mask1058614279
Session Manager\Debug Print FilterSBP2PORT_Kd_SBP2PORT_Mask1058614279
Session Manager\Debug Print FilterSCCLIENT_Kd_SCCLIENT_Mask1058614279
Session Manager\Debug Print FilterSCSERVER_Kd_SCSERVER_Mask1058614279
Session Manager\Debug Print FilterSCSIMINIPORT_Kd_SCSIMINIPORT_Mask1058614279
Session Manager\Debug Print FilterSCSIPORT_Kd_SCSIPORT_Mask1058614279
Session Manager\Debug Print FilterSE_Kd_SE_Mask1058614279
Session Manager\Debug Print FilterSERENUM_Kd_SERENUM_Mask1058614279
Session Manager\Debug Print FilterSERIAL_Kd_SERIAL_Mask1058614279
Session Manager\Debug Print FilterSERMOUSE_Kd_SERMOUSE_Mask1058614279
Session Manager\Debug Print FilterSETUP_Kd_SETUP_Mask1058614279
Session Manager\Debug Print FilterSHPC_Kd_SHPC_Mask1058614279
Session Manager\Debug Print FilterSIS_Kd_SIS_Mask1058614279
Session Manager\Debug Print FilterSMSS_Kd_SMSS_Mask1058614279
Session Manager\Debug Print FilterSOFTPCI_Kd_SOFTPCI_Mask1058614279
Session Manager\Debug Print FilterSR_Kd_SR_Mask1058614279
Session Manager\Debug Print FilterSSPICLI_Kd_SSPICLI_Mask1058614279
Session Manager\Debug Print FilterSTORAGECLASSMEMORY_Kd_STORAGECLASSMEMORY_Mask1058614279
Session Manager\Debug Print FilterSTORMINIPORT_Kd_STORMINIPORT_Mask1058614279
Session Manager\Debug Print FilterSTORPORT_Kd_STORPORT_Mask1058614279
Session Manager\Debug Print FilterSTORPROP_Kd_STORPROP_Mask1058614279
Session Manager\Debug Print FilterSTORVSP_Kd_STORVSP_Mask1058614279
Session Manager\Debug Print FilterSVCHOST_Kd_SVCHOST_Mask1058614279
Session Manager\Debug Print FilterSXS_Kd_SXS_Mask1058614279
Session Manager\Debug Print FilterSYSTEM_Kd_SYSTEM_Mask1058614279
Session Manager\KernelSeAllowAllApplicationAceRemoval_SepAllowAllApplicationAceRemoval1058614279
Session Manager\KernelSeAllowSessionImpersonationCapability_SepAllowSessionImpersonationCap1058614279
Session Manager\KernelSeCompatFlags_SeCompatFlags1058614279
Session Manager\KernelSeTokenLeakDiag_SeTokenLeakTracking14279
Session Manager\KernelSeTokenSingletonAttributesConfig_SepTokenSingletonAttributesConfig1058614279
Session Manager\Configuration ManagerSelfHealingEnabled_CmSelfHeal1058614279
Session Manager\KernelSerializeTimerExpiration_KiSerializeTimerExpiration1058614279
Session Manager\Memory ManagementSessionSpaceLimit_MmSessionSpaceLimit1058614279
WHEASingleBitEccErrorThreshold_WheapSingleBitEccErrorThreshold1058614279
Session Manager\PowerSkipTickOverride_PopSkipTickPolicy1058614279
Session Manager\PowerSleepStudyDeviceAccountingLevel_PopSleepStudyDeviceAccountingLevel1058614279
Session Manager\PowerSleepStudyDisabled_PopSleepStudyDisabled1058614279
PowerSmartUserPresenceCheckTimeout_PopSmartUserPresenceCheckTimeout1058614279
PowerSmartUserPresenceGracePeriod_PopSmartUserPresenceGracePeriod1058614279
PowerSmartUserPresenceWakeOffset_PopSmartUserPresenceWakeOffset1058614279
WMI\TraceStackCaptureTimeout_EtwpStackCaptureTimeout1058614279
PowerStandbyConnectivityGracePeriod_PopStandbyConnectivityGracePeriod14279
Session Manager\Quota SystemSystemBlockedMessageLimit_PspSystemNoWakeChargeLimit1058614279
Session Manager\Configuration ManagerSystemCacheBacked_CmpSystemCacheBackedHivesDesired1058614279
Session Manager\Memory ManagementSystemCacheLimit_MmSystemCacheLimit1058614279
Session Manager\Configuration ManagerSystemHiveLimitSize_CmSystemHiveLimitSize1058614279
Session Manager\Memory ManagementSystemPtesLimit_MmSystemPtesLimit1058614279
Session Manager\Debug Print FilterTAPE_Kd_TAPE_Mask1058614279
Session Manager\Debug Print FilterTCPIP_Kd_TCPIP_Mask1058614279
Session Manager\Debug Print FilterTCPIP6_Kd_TCPIP6_Mask1058614279
Session Manager\Debug Print FilterTERMSRV_Kd_TERMSRV_Mask1058614279
Session Manager\Debug Print FilterTHREADORDER_Kd_THREADORDER_Mask1058614279
Session Manager\Debug Print FilterTPM_Kd_TPM_Mask1058614279
Terminal ServerTSAppCompat1058614279
Session Manager\Debug Print FilterTWOTRACK_Kd_TWOTRACK_Mask1058614279
Session Manager\Debug Print FilterTXF_Kd_TXF_Mask1058614279
Session Manager\KernelThreadDpcEnable_KeThreadDpcEnable1058614279
Session Manager\ExecutiveTickcountRolloverDelay1058614279
Session Manager\KernelTimerCheckFlags_KeTimerCheckFlags1058614279
PowerTimerRebaseThresholdOnDripsExit_KiTimerRebaseThresholdOnDripsExit1058614279
Session Manager\Memory ManagementTrackLockedPages_MmTrackLockedPages1058614279
Session Manager\Memory ManagementTrackPtesdword_6291301058614279
PowerTtmEnabled_TtmpEnabled14279
Session Manager\Debug Print FilterUDFS_Kd_UDFS_Mask1058614279
Session Manager\Debug Print FilterUHCD_Kd_UHCD_Mask1058614279
Session Manager\Debug Print FilterUNIMODEM_Kd_UNIMODEM_Mask1058614279
Session Manager\Debug Print FilterUSBSTOR_Kd_USBSTOR_Mask1058614279
Session Manager\Debug Print FilterUSERGDI_Kd_USERGDI_Mask1058614279
PowerUserBatteryDischargeEstimator_PopUserBatteryDischargeEstimator1058614279
Session Manager\Debug Print FilterVDS_Kd_VDS_Mask1058614279
Session Manager\Debug Print FilterVDSBAS_Kd_VDSBAS_Mask1058614279
Session Manager\Debug Print FilterVDSDYN_Kd_VDSDYN_Mask1058614279
Session Manager\Debug Print FilterVDSDYNDR_Kd_VDSDYNDR_Mask1058614279
Session Manager\Debug Print FilterVDSLDR_Kd_VDSLDR_Mask1058614279
Session Manager\Debug Print FilterVDSUTIL_Kd_VDSUTIL_Mask1058614279
Session Manager\Debug Print FilterVERIFIER_Kd_VERIFIER_Mask1058614279
Session Manager\Debug Print FilterVIDEO_Kd_VIDEO_Mask1058614279
Session Manager\Debug Print FilterVIDEOPRT_Kd_VIDEOPRT_Mask1058614279
Session Manager\Debug Print FilterVPCI_Kd_VPCI_Mask1058614279
Session Manager\Debug Print FilterVSS_Kd_VSS_Mask1058614279
Session Manager\Debug Print FilterVSSDYNDISK_Kd_VSSDYNDISK_Mask1058614279
Session Manager\KernelVerifierDpcScalingFactor_KeVerifierDpcScalingFactor1058614279
Session Manager\Memory ManagementVerifierFaultApplications_VerifierFaultApplicationsBuffer1058614279
Session Manager\Memory ManagementVerifierFaultBootMinutes_VfFaultInjectionBootMinutes1058614279
Session Manager\Memory ManagementVerifierFaultProbability_VfFaultInjectionProbability1058614279
Session Manager\Memory ManagementVerifierFaultTags_VerifierFaultTagsBuffer1058614279
Session Manager\Memory ManagementVerifierHandleTraces_VfHandleTracingEntries1058614279
Session Manager\Memory ManagementVerifierIrpStackTraces_IovIrpTracesLength1058614279
Session Manager\Memory ManagementVerifierIrpTimeout_VfWdIrpTimeoutMsec1058614279
Session Manager\Memory ManagementVerifierOptions_VfOptionFlags1058614279
Session Manager\Memory ManagementVerifierPoolTracesLength_VfPoolTracesLength1058614279
Session Manager\Memory ManagementVerifierRandomTargets_VfRandomVerifiedDrivers1058614279
Session Manager\Memory ManagementVerifyBTSBufferSize_ViVerifyBTSBufferSize1058614279
Session Manager\Memory ManagementVerifyDriverLevel_MmVerifyDriverLevel1058614279
Session Manager\Memory ManagementVerifyDrivers1058614279
Session Manager\Memory ManagementVerifyDriversSuppress1058614279
Session Manager\Memory ManagementVerifyMode_VfVerifyMode1058614279
Session Manager\Memory ManagementVerifyTriage_ViVerifyTriage1058614279
Session Manager\Memory ManagementVerifyTriageRules_ViVerifyTriageRules1058614279
Session Manager\Configuration ManagerVirtualizationEnabled_CmVEEnabled1058614279
Session Manager\Configuration ManagerVolatileBoot_CmpVolatileBoot1058614279
Session Manager\Debug Print FilterW32TIME_Kd_W32TIME_Mask1058614279
Session Manager\Debug Print FilterWDI_Kd_WDI_Mask1058614279
Session Manager\Debug Print FilterWDT_Kd_WDT_Mask1058614279
Session Manager\Debug Print FilterWER_Kd_WER_Mask1058614279
Session Manager\Debug Print FilterWHEA_Kd_WHEA_Mask1058614279
Session Manager\Debug Print FilterWIN2000_Kd_WIN2000_Mask1058614279
Session Manager\Debug Print FilterWMICORE_Kd_WMICORE_Mask1058614279
Session Manager\Debug Print FilterWMILIB_Kd_WMILIB_Mask1058614279
Session Manager\Debug Print FilterWOW64_Kd_WOW64_Mask1058614279
Session Manager\Debug Print FilterWSOCKTRANSPORT_Kd_WSOCKTRANSPORT_Mask1058614279
Session Manager\PowerWatchdogResumeTimeout_PopWatchdogResumeTimeout1058614279
Session Manager\PowerWatchdogSleepTimeout_PopWatchdogSleepTimeout1058614279
PowerWatchdogWorkOrderTimeout_PopFxWatchdogWorkOrderTimeout1058614279
PriorityControlWin32PrioritySeparation1058614279
Session Manager\ExecutiveWorkerFactoryThreadCreationTimeout_ExpWorkerFactoryThreadCreationTimeoutInSeconds1058614279
Session Manager\ExecutiveWorkerFactoryThreadIdleTimeout_ExpWorkerFactoryThreadIdleTimeoutInSeconds1058614279
Session Manager\ExecutiveWorkerThreadTimeoutInSeconds_ExpWorkerThreadTimeoutInSeconds1058614279
Session Manager\Memory ManagementWorkingSetPagesQuotaunk_928DE41058614279
Session Manager\Memory ManagementWorkingSetSwapSharedPages_PspOutSwapSharedPages1058614279
Session Manager\KernelXMMIZeroingEnable_KiXMMIZeroingEnable1058614279
Session Manager\Debug Print FilterXSAVE_Kd_XSAVE_Mask1058614279
↧

xxxSetAuditingInterface

April 18, 2016, 6:59 am
$
0
0
Nice piece of code from lsasrv:
_GetCngAuditFunctions@4 proc near   ; CODE XREF: SrvPrepKeyIso(x)+33p
                                    ; LsapInitCNGAuditing()+Dp
  test  ecx, ecx
  jz    short loc_5095F661
  mov   dword ptr [ecx], offset _AuditFunctionTable
  xor   eax, eax
  retn

_AuditFunctionTable:
_AuditFunctionTable db    1
  db    0
  db    0
  db    0
  dd offset _CngAdtSelfTest@12              ; offset 4
  dd offset _CngAdtKeyFileOperation@32      ; offset 8
  dd offset _CngAdtKeyMigrationOperation@28 ; offset C
  dd offset _CngAdtVerificationFailure@24   ; offset 10
  dd offset _CngAdtCryptOperation@28        ; offset 14
  dd offset _CngAdtPrimitiveFailure@16      ; offset 18

This table used in SrvPrepKeyIso & LsapInitCNGAuditing functions:

SrvPrepKeyIso:

  push  offset aKeyisosetaudit          ; "KeyIsoSetAuditingInterface"
  push  [ebp+hModule]  
  call  ds:__imp__GetProcAddress@8 
  mov   esi, eax
  test  esi, esi
  jz    short loc_5095F609
  lea   ecx, [ebp+var_8]
  call  _GetCngAuditFunctions@4 
  test  eax, eax
  js    short loc_5095F609
  push  [ebp+var_8]
  mov   ecx, esi
  call  ds:___guard_check_icall_fptr    ; _guard_check_icall_nop(x)
  call  esi ; keyiso.dll!KeyIsoSetAuditingInterface

LsapInitCNGAuditing:
  lea   ecx, [ebp+var_4]
  call  _GetCngAuditFunctions@4     
  test  eax, eax
  js    short loc_5095F64B
  push  [ebp+var_4]
  call  ds:__imp__BCryptSetAuditingInterface@4 ; bcrypt.dll!BCryptSetAuditingInterface
  test  eax, eax
  js    short loc_5095F64B
  push  [ebp+var_4]
  call  ds:__imp__NCryptSetAuditingInterface@4 ; ncrypt.dll!NCryptSetAuditingInterface

Lets see how this audit table is used.
 
keyiso.dll
keyiso.dll!KeyIsoSetAuditingInterface is just forwarded export to NCRYPTPROV.SetAuditingInterface, so look inside ncryptprov.dll. It first checks SE_TCB_PRIVILEGE for current process and then store ptr into g_pAuditingFuncs

KspCryptAuditKeyFileOperation - call function in table g_pAuditingFuncs with offset 8 
SPCryptImportKey, SPCryptSetKeyProperty, KspCryptAuditKeyMigrationOperation - offset C
KspCryptAuditVerificationFailure - offset 10
SPCryptFinalizeKey, KspCryptAuditCryptOperation - offset 14

ncrypt.dll
ncrypt.dll!NCryptSetAuditingInterface checks SE_TCB_PRIVILEGE for current process and this is all

bcrypt.dll
bcrypt.dll!BCryptSetAuditingInterface checks SE_TCB_PRIVILEGE for current process and this is all
↧
Search

wincheck rc8.56

April 21, 2016, 7:25 am
$
0
0
download
mirror

changelog:
  • add support of windows 10rtm, build 14279 & 14295
  • add dumping of g_pAuditingFuncs
  • add dumping of hal!InterruptController
  • add dumping of PICO. Sample of output:
    PspPicoProviderRoutines at FFFFF803D2F42EA0:
     DispatchSystemCall: FFFFF803B997B4B0 \SystemRoot\system32\drivers\LXCORE.SYS
     ExitThread:         FFFFF803B997B4E0 \SystemRoot\system32\drivers\LXCORE.SYS
     ExitProcess:        FFFFF803B997B450 \SystemRoot\system32\drivers\LXCORE.SYS
     DispatchException:  FFFFF803B997B1E0 \SystemRoot\system32\drivers\LXCORE.SYS
     ProcessTerminate:   FFFFF803B997B480 \SystemRoot\system32\drivers\LXCORE.SYS
     WalkUserStack:      FFFFF803B997B630 \SystemRoot\system32\drivers\LXCORE.SYS
     ProtectedRanges:    FFFFF803B9930400 \SystemRoot\system32\drivers\LXCORE.SYS
     GetAllocatedProcessImageName: FFFFF803B997B650 \SystemRoot\system32\drivers\LXCORE.SYS
  • fix wnf identifiers
  • fix WFP callouts for w8.1 & w10
  • lots of bugs were fixed
↧
↧

KiServiceTable from windows 10 build 14316 64bit

April 22, 2016, 8:46 am
$
0
0
KiServiceLimit .eq. 0x1C1

NtAccessCheck
NtWorkerFactoryWorkerReady
NtAcceptConnectPort
NtMapUserPhysicalPagesScatter
NtWaitForSingleObject
NtCallbackReturn
NtReadFile
NtDeviceIoControlFile
NtWriteFile
NtRemoveIoCompletion
NtReleaseSemaphore
NtReplyWaitReceivePort
NtReplyPort
NtSetInformationThread
NtSetEvent
NtClose
NtQueryObject
NtQueryInformationFile
NtOpenKey
NtEnumerateValueKey
NtFindAtom
NtQueryDefaultLocale
NtQueryKey
NtQueryValueKey
NtAllocateVirtualMemory
NtQueryInformationProcess
NtWaitForMultipleObjects32
NtWriteFileGather
NtSetInformationProcess
NtCreateKey
NtFreeVirtualMemory
NtImpersonateClientOfPort
NtReleaseMutant
NtQueryInformationToken
NtRequestWaitReplyPort
NtQueryVirtualMemory
NtOpenThreadToken
NtQueryInformationThread
NtOpenProcess
NtSetInformationFile
NtMapViewOfSection
NtAccessCheckAndAuditAlarm
NtUnmapViewOfSection
NtReplyWaitReceivePortEx
NtTerminateProcess
NtSetEventBoostPriority
NtReadFileScatter
NtOpenThreadTokenEx
NtOpenProcessTokenEx
NtQueryPerformanceCounter
NtEnumerateKey
NtOpenFile
NtDelayExecution
NtQueryDirectoryFile
NtQuerySystemInformation
NtOpenSection
NtQueryTimer
NtFsControlFile
NtWriteVirtualMemory
NtCloseObjectAuditAlarm
NtDuplicateObject
NtQueryAttributesFile
NtClearEvent
NtReadVirtualMemory
NtOpenEvent
NtAdjustPrivilegesToken
NtDuplicateToken
NtContinue
NtQueryDefaultUILanguage
NtQueueApcThread
NtYieldExecution
NtAddAtom
NtCreateEvent
NtQueryVolumeInformationFile
NtCreateSection
NtFlushBuffersFile
NtApphelpCacheControl
NtCreateProcessEx
NtCreateThread
NtIsProcessInJob
NtProtectVirtualMemory
NtQuerySection
NtResumeThread
NtTerminateThread
NtReadRequestData
NtCreateFile
NtQueryEvent
NtWriteRequestData
NtOpenDirectoryObject
NtAccessCheckByTypeAndAuditAlarm
NtQuerySystemTime
NtWaitForMultipleObjects
NtSetInformationObject
NtCancelIoFile
NtTraceEvent
NtPowerInformation
NtSetValueKey
NtCancelTimer
NtSetTimer
NtAccessCheckByType
NtAccessCheckByTypeResultList
NtAccessCheckByTypeResultListAndAuditAlarm
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
NtAddAtomEx
NtAddBootEntry
NtAddDriverEntry
NtAdjustGroupsToken
NtAdjustTokenClaimsAndDeviceGroups
NtAlertResumeThread
NtAlertThread
NtAlertThreadByThreadId
NtAllocateLocallyUniqueId
NtAllocateReserveObject
NtAllocateUserPhysicalPages
NtAllocateUuids
NtAlpcAcceptConnectPort
NtAlpcCancelMessage
NtAlpcConnectPort
NtAlpcConnectPortEx
NtAlpcCreatePort
NtAlpcCreatePortSection
NtAlpcCreateResourceReserve
NtAlpcCreateSectionView
NtAlpcCreateSecurityContext
NtAlpcDeletePortSection
NtAlpcDeleteResourceReserve
NtAlpcDeleteSectionView
NtAlpcDeleteSecurityContext
NtAlpcDisconnectPort
NtAlpcImpersonateClientContainerOfPort
NtAlpcImpersonateClientOfPort
NtAlpcOpenSenderProcess
NtAlpcOpenSenderThread
NtAlpcQueryInformation
NtAlpcQueryInformationMessage
NtAlpcRevokeSecurityContext
NtAlpcSendWaitReceivePort
NtAlpcSetInformation
NtAreMappedFilesTheSame
NtAssignProcessToJobObject
NtAssociateWaitCompletionPacket
NtCancelIoFileEx
NtCancelSynchronousIoFile
NtCancelTimer2
NtCancelWaitCompletionPacket
NtCommitComplete
NtCommitEnlistment
NtCommitRegistryTransaction
NtCommitTransaction
NtCompactKeys
NtCompareObjects
NtCompareTokens
NtCompleteConnectPort
NtCompressKey
NtConnectPort
NtCreateDebugObject
NtCreateDirectoryObject
NtCreateDirectoryObjectEx
NtCreateEnclave
NtCreateEnlistment
NtCreateEventPair
NtCreateIRTimer
NtCreateIoCompletion
NtCreateJobObject
NtCreateJobSet
NtCreateKeyTransacted
NtCreateKeyedEvent
NtCreateLowBoxToken
NtCreateMailslotFile
NtCreateMutant
NtCreateNamedPipeFile
NtCreatePagingFile
NtCreatePartition
NtCreatePort
NtCreatePrivateNamespace
NtCreateProcess
NtCreateProfile
NtCreateProfileEx
NtCreateRegistryTransaction
NtCreateResourceManager
NtCreateSemaphore
NtCreateSymbolicLinkObject
NtCreateThreadEx
NtCreateTimer
NtCreateTimer2
NtCreateToken
NtCreateTokenEx
NtCreateTransaction
NtCreateTransactionManager
NtCreateUserProcess
NtCreateWaitCompletionPacket
NtCreateWaitablePort
NtCreateWnfStateName
NtCreateWorkerFactory
NtDebugActiveProcess
NtDebugContinue
NtDeleteAtom
NtDeleteBootEntry
NtDeleteDriverEntry
NtDeleteFile
NtDeleteKey
NtDeleteObjectAuditAlarm
NtDeletePrivateNamespace
NtDeleteValueKey
NtDeleteWnfStateData
NtDeleteWnfStateName
NtDisableLastKnownGood
NtDisplayString
NtDrawText
NtEnableLastKnownGood
NtEnumerateBootEntries
NtEnumerateDriverEntries
NtEnumerateSystemEnvironmentValuesEx
NtEnumerateTransactionObject
NtExtendSection
NtFilterBootOption
NtFilterToken
NtFilterTokenEx
NtFlushBuffersFileEx
NtFlushInstallUILanguage
NtFlushInstructionCache
NtFlushKey
NtFlushProcessWriteBuffers
NtFlushVirtualMemory
NtFlushWriteBuffer
NtFreeUserPhysicalPages
NtFreezeRegistry
NtFreezeTransactions
NtGetCachedSigningLevel
NtGetCompleteWnfStateSubscription
NtGetContextThread
NtGetCurrentProcessorNumber
NtGetCurrentProcessorNumberEx
NtGetDevicePowerState
NtGetMUIRegistryInfo
NtGetNextProcess
NtGetNextThread
NtGetNlsSectionPtr
NtGetNotificationResourceManager
NtGetWriteWatch
NtImpersonateAnonymousToken
NtImpersonateThread
NtInitializeEnclave
NtInitializeNlsFiles
NtInitializeRegistry
NtInitiatePowerAction
NtIsSystemResumeAutomatic
NtIsUILanguageComitted
NtListenPort
NtLoadDriver
NtLoadEnclaveData
NtLoadKey
NtLoadKey2
NtLoadKeyEx
NtLockFile
NtLockProductActivationKeys
NtLockRegistryKey
NtLockVirtualMemory
NtMakePermanentObject
NtMakeTemporaryObject
NtManagePartition
NtMapCMFModule
NtMapUserPhysicalPages
NtModifyBootEntry
NtModifyDriverEntry
NtNotifyChangeDirectoryFile
NtNotifyChangeKey
NtNotifyChangeMultipleKeys
NtNotifyChangeSession
NtOpenEnlistment
NtOpenEventPair
NtOpenIoCompletion
NtOpenJobObject
NtOpenKeyEx
NtOpenKeyTransacted
NtOpenKeyTransactedEx
NtOpenKeyedEvent
NtOpenMutant
NtOpenObjectAuditAlarm
NtOpenPartition
NtOpenPrivateNamespace
NtOpenProcessToken
NtOpenRegistryTransaction
NtOpenResourceManager
NtOpenSemaphore
NtOpenSession
NtOpenSymbolicLinkObject
NtOpenThread
NtOpenTimer
NtOpenTransaction
NtOpenTransactionManager
NtPlugPlayControl
NtPrePrepareComplete
NtPrePrepareEnlistment
NtPrepareComplete
NtPrepareEnlistment
NtPrivilegeCheck
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtPropagationComplete
NtPropagationFailed
NtPulseEvent
NtQueryBootEntryOrder
NtQueryBootOptions
NtQueryDebugFilterState
NtQueryDirectoryObject
NtQueryDriverEntryOrder
NtQueryEaFile
NtQueryFullAttributesFile
NtQueryInformationAtom
NtQueryInformationEnlistment
NtQueryInformationJobObject
NtQueryInformationPort
NtQueryInformationResourceManager
NtQueryInformationTransaction
NtQueryInformationTransactionManager
NtQueryInformationWorkerFactory
NtQueryInstallUILanguage
NtQueryIntervalProfile
NtQueryIoCompletion
NtQueryLicenseValue
NtQueryMultipleValueKey
NtQueryMutant
NtQueryOpenSubKeys
NtQueryOpenSubKeysEx
NtQueryPortInformationProcess
NtQueryQuotaInformationFile
NtQuerySecurityAttributesToken
NtQuerySecurityObject
NtQuerySecurityPolicy
NtQuerySemaphore
NtQuerySymbolicLinkObject
NtQuerySystemEnvironmentValue
NtQuerySystemEnvironmentValueEx
NtQuerySystemInformationEx
NtQueryTimerResolution
NtQueryWnfStateData
NtQueryWnfStateNameInformation
NtQueueApcThreadEx
NtRaiseException
NtRaiseHardError
NtReadOnlyEnlistment
NtRecoverEnlistment
NtRecoverResourceManager
NtRecoverTransactionManager
NtRegisterProtocolAddressInformation
NtRegisterThreadTerminatePort
NtReleaseKeyedEvent
NtReleaseWorkerFactoryWorker
NtRemoveIoCompletionEx
NtRemoveProcessDebug
NtRenameKey
NtRenameTransactionManager
NtReplaceKey
NtReplacePartitionUnit
NtReplyWaitReplyPort
NtRequestPort
NtResetEvent
NtResetWriteWatch
NtRestoreKey
NtResumeProcess
NtRevertContainerImpersonation
NtRollbackComplete
NtRollbackEnlistment
NtRollbackRegistryTransaction
NtRollbackTransaction
NtRollforwardTransactionManager
NtSaveKey
NtSaveKeyEx
NtSaveMergedKeys
NtSecureConnectPort
NtSerializeBoot
NtSetBootEntryOrder
NtSetBootOptions
NtSetCachedSigningLevel
NtSetContextThread
NtSetDebugFilterState
NtSetDefaultHardErrorPort
NtSetDefaultLocale
NtSetDefaultUILanguage
NtSetDriverEntryOrder
NtSetEaFile
NtSetHighEventPair
NtSetHighWaitLowEventPair
NtSetIRTimer
NtSetInformationDebugObject
NtSetInformationEnlistment
NtSetInformationJobObject
NtSetInformationKey
NtSetInformationResourceManager
NtSetInformationSymbolicLink
NtSetInformationToken
NtSetInformationTransaction
NtSetInformationTransactionManager
NtSetInformationVirtualMemory
NtSetInformationWorkerFactory
NtSetIntervalProfile
NtSetIoCompletion
NtSetIoCompletionEx
NtSetLdtEntries
NtSetLowEventPair
NtSetLowWaitHighEventPair
NtSetQuotaInformationFile
NtSetSecurityObject
NtSetSystemEnvironmentValue
NtSetSystemEnvironmentValueEx
NtSetSystemInformation
NtSetSystemPowerState
NtSetSystemTime
NtSetThreadExecutionState
NtSetTimer2
NtSetTimerEx
NtSetTimerResolution
NtSetUuidSeed
NtSetVolumeInformationFile
NtSetWnfProcessNotificationEvent
NtShutdownSystem
NtShutdownWorkerFactory
NtSignalAndWaitForSingleObject
NtSinglePhaseReject
NtStartProfile
NtStopProfile
NtSubscribeWnfStateChange
NtSuspendProcess
NtSuspendThread
NtSystemDebugControl
NtTerminateJobObject
NtTestAlert
NtThawRegistry
NtThawTransactions
NtTraceControl
NtTranslateFilePath
NtUmsThreadYield
NtUnloadDriver
NtUnloadKey
NtUnloadKey2
NtUnloadKeyEx
NtUnlockFile
NtUnlockVirtualMemory
NtUnmapViewOfSectionEx
NtUnsubscribeWnfStateChange
NtUpdateWnfStateData
NtVdmControl
NtWaitForAlertByThreadId
NtWaitForDebugEvent
NtWaitForKeyedEvent
NtWaitForWorkViaWorkerFactory
NtWaitHighEventPair
NtWaitLowEventPair
↧

KiServiceTable from windows 10 build 14316

April 23, 2016, 7:18 am
$
0
0
KiServiceLimit .eq. 1c1

NtAccessCheck
NtWorkerFactoryWorkerReady
NtAcceptConnectPort
NtYieldExecution
NtWriteVirtualMemory
NtWriteRequestData
NtWriteFileGather
NtWriteFile
NtWaitLowEventPair
NtWaitHighEventPair
NtWaitForWorkViaWorkerFactory
NtWaitForSingleObject
NtWaitForMultipleObjects32
NtWaitForMultipleObjects
NtWaitForKeyedEvent
NtWaitForDebugEvent
NtWaitForAlertByThreadId
NtVdmControl
NtUnsubscribeWnfStateChange
NtUpdateWnfStateData
NtUnmapViewOfSection
NtUnmapViewOfSectionEx
NtUnlockVirtualMemory
NtUnlockFile
NtUnloadKeyEx
NtUnloadKey2
NtUnloadKey
NtUnloadDriver
NtUmsThreadYield
NtTranslateFilePath
NtTraceEvent
NtTraceControl
NtThawTransactions
NtThawRegistry
NtTestAlert
NtTerminateThread
NtTerminateProcess
NtTerminateJobObject
NtSystemDebugControl
NtSuspendThread
NtSuspendProcess
NtSubscribeWnfStateChange
NtStopProfile
NtStartProfile
NtSinglePhaseReject
NtSignalAndWaitForSingleObject
NtShutdownWorkerFactory
NtShutdownSystem
NtSetWnfProcessNotificationEvent
NtSetVolumeInformationFile
NtSetValueKey
NtSetUuidSeed
NtSetTimerResolution
NtSetTimerEx
NtSetTimer
NtSetThreadExecutionState
NtSetSystemTime
NtSetSystemPowerState
NtSetSystemInformation
NtSetSystemEnvironmentValueEx
NtSetSystemEnvironmentValue
NtSetSecurityObject
NtSetQuotaInformationFile
NtSetLowWaitHighEventPair
NtSetLowEventPair
NtSetLdtEntries
NtSetIRTimer
NtSetTimer2
NtCancelTimer2
NtSetIoCompletionEx
NtSetIoCompletion
NtSetIntervalProfile
NtSetInformationWorkerFactory
NtSetInformationTransactionManager
NtSetInformationTransaction
NtSetInformationToken
NtSetInformationThread
NtSetInformationResourceManager
NtSetInformationProcess
NtSetInformationObject
NtSetInformationKey
NtSetInformationJobObject
NtSetInformationFile
NtSetInformationEnlistment
NtSetInformationDebugObject
NtSetHighWaitLowEventPair
NtSetHighEventPair
NtSetEventBoostPriority
NtSetEvent
NtSetEaFile
NtSetDriverEntryOrder
NtSetDefaultUILanguage
NtSetDefaultLocale
NtSetDefaultHardErrorPort
NtSetDebugFilterState
NtSetContextThread
NtSetCachedSigningLevel
NtSetBootOptions
NtSetBootEntryOrder
NtSerializeBoot
NtSecureConnectPort
NtSaveMergedKeys
NtSaveKeyEx
NtSaveKey
NtRollforwardTransactionManager
NtRollbackTransaction
NtRollbackEnlistment
NtRollbackComplete
NtRevertContainerImpersonation
NtResumeThread
NtResumeProcess
NtRestoreKey
NtResetWriteWatch
NtResetEvent
NtRequestWaitReplyPort
NtRequestPort
NtReplyWaitReplyPort
NtReplyWaitReceivePortEx
NtReplyWaitReceivePort
NtReplyPort
NtReplacePartitionUnit
NtReplaceKey
NtRenameTransactionManager
NtRenameKey
NtRemoveProcessDebug
NtRemoveIoCompletionEx
NtRemoveIoCompletion
NtReleaseWorkerFactoryWorker
NtReleaseSemaphore
NtReleaseMutant
NtReleaseKeyedEvent
NtRegisterThreadTerminatePort
NtRegisterProtocolAddressInformation
NtRecoverTransactionManager
NtRecoverResourceManager
NtRecoverEnlistment
NtReadVirtualMemory
NtReadRequestData
NtReadOnlyEnlistment
NtReadFileScatter
NtReadFile
NtRaiseHardError
NtRaiseException
NtQueueApcThreadEx
NtQueueApcThread
NtQueryWnfStateData
NtQueryWnfStateNameInformation
NtQueryVolumeInformationFile
NtQueryVirtualMemory
NtQueryValueKey
NtQueryTimerResolution
NtQueryTimer
NtQuerySystemTime
NtQuerySystemInformationEx
NtQuerySystemInformation
NtQuerySystemEnvironmentValueEx
NtQuerySystemEnvironmentValue
NtQuerySymbolicLinkObject
NtQuerySemaphore
NtQuerySecurityPolicy
NtQuerySecurityObject
NtQuerySecurityAttributesToken
NtQuerySection
NtQueryQuotaInformationFile
NtQueryPortInformationProcess
NtQueryPerformanceCounter
NtQueryOpenSubKeysEx
NtQueryOpenSubKeys
NtQueryObject
NtQueryMutant
NtQueryMultipleValueKey
NtQueryLicenseValue
NtQueryKey
NtQueryIoCompletion
NtQueryIntervalProfile
NtQueryInstallUILanguage
NtQueryInformationWorkerFactory
NtQueryInformationTransactionManager
NtQueryInformationTransaction
NtQueryInformationToken
NtQueryInformationThread
NtQueryInformationResourceManager
NtQueryInformationProcess
NtQueryInformationPort
NtQueryInformationJobObject
NtQueryInformationFile
NtQueryInformationEnlistment
NtQueryInformationAtom
NtQueryFullAttributesFile
NtQueryEvent
NtQueryEaFile
NtQueryDriverEntryOrder
NtQueryDirectoryObject
NtQueryDirectoryFile
NtQueryDefaultUILanguage
NtQueryDefaultLocale
NtQueryDebugFilterState
NtQueryBootOptions
NtQueryBootEntryOrder
NtQueryAttributesFile
NtPulseEvent
NtProtectVirtualMemory
NtPropagationFailed
NtPropagationComplete
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtPrivilegeCheck
NtSetInformationVirtualMemory
NtPrePrepareEnlistment
NtPrePrepareComplete
NtPrepareEnlistment
NtPrepareComplete
NtPowerInformation
NtPlugPlayControl
NtOpenTransactionManager
NtOpenTransaction
NtOpenTimer
NtOpenThreadTokenEx
NtOpenThreadToken
NtOpenThread
NtOpenSymbolicLinkObject
NtOpenSession
NtOpenSemaphore
NtOpenSection
NtOpenResourceManager
NtOpenPartition
NtOpenProcessTokenEx
NtOpenProcessToken
NtOpenProcess
NtOpenPrivateNamespace
NtOpenObjectAuditAlarm
NtOpenMutant
NtOpenKeyTransactedEx
NtOpenKeyTransacted
NtOpenKeyEx
NtOpenKeyedEvent
NtOpenKey
NtOpenJobObject
NtOpenIoCompletion
NtOpenFile
NtOpenEventPair
NtOpenEvent
NtOpenEnlistment
NtOpenDirectoryObject
NtNotifyChangeSession
NtNotifyChangeMultipleKeys
NtNotifyChangeKey
NtNotifyChangeDirectoryFile
NtManagePartition
NtModifyDriverEntry
NtModifyBootEntry
NtMapViewOfSection
NtMapUserPhysicalPagesScatter
NtMapUserPhysicalPages
NtMapCMFModule
NtMakeTemporaryObject
NtMakePermanentObject
NtLockVirtualMemory
NtLockRegistryKey
NtLockProductActivationKeys
NtLockFile
NtLoadKeyEx
NtLoadKey2
NtLoadKey
NtLoadEnclaveData
NtLoadDriver
NtListenPort
NtIsUILanguageComitted
NtIsSystemResumeAutomatic
NtIsProcessInJob
NtInitiatePowerAction
NtInitializeRegistry
NtInitializeNlsFiles
NtInitializeEnclave
NtImpersonateThread
NtImpersonateClientOfPort
NtImpersonateAnonymousToken
NtGetWriteWatch
NtGetNotificationResourceManager
NtGetNlsSectionPtr
NtGetNextThread
NtGetNextProcess
NtGetMUIRegistryInfo
NtGetDevicePowerState
NtGetCurrentProcessorNumberEx
NtGetCurrentProcessorNumber
NtGetContextThread
NtGetCompleteWnfStateSubscription
NtGetCachedSigningLevel
NtFsControlFile
NtFreezeTransactions
NtFreezeRegistry
NtFreeVirtualMemory
NtFreeUserPhysicalPages
NtFlushWriteBuffer
NtFlushVirtualMemory
NtFlushProcessWriteBuffers
NtFlushKey
NtFlushInstructionCache
NtFlushInstallUILanguage
NtFlushBuffersFile
NtFlushBuffersFileEx
NtFindAtom
NtFilterToken
NtFilterTokenEx
NtFilterBootOption
NtExtendSection
NtEnumerateValueKey
NtEnumerateTransactionObject
NtEnumerateSystemEnvironmentValuesEx
NtEnumerateKey
NtEnumerateDriverEntries
NtEnumerateBootEntries
NtEnableLastKnownGood
NtDuplicateToken
NtDuplicateObject
NtDrawText
NtDisplayString
NtDisableLastKnownGood
NtDeviceIoControlFile
NtDeleteWnfStateName
NtDeleteWnfStateData
NtDeleteValueKey
NtDeletePrivateNamespace
NtDeleteObjectAuditAlarm
NtDeleteKey
NtDeleteFile
NtDeleteDriverEntry
NtDeleteBootEntry
NtDeleteAtom
NtDelayExecution
NtDebugContinue
NtDebugActiveProcess
NtCreatePartition
NtCreateWorkerFactory
NtCreateWnfStateName
NtCreateWaitCompletionPacket
NtCreateWaitablePort
NtCreateUserProcess
NtCreateTransactionManager
NtCreateTransaction
NtCreateToken
NtCreateLowBoxToken
NtCreateTokenEx
NtCreateTimer
NtCreateThreadEx
NtCreateThread
NtCreateSymbolicLinkObject
NtCreateSemaphore
NtCreateSection
NtCreateResourceManager
NtCreateProfileEx
NtCreateProfile
NtCreateProcessEx
NtCreateProcess
NtCreatePrivateNamespace
NtCreatePort
NtCreatePagingFile
NtCreateNamedPipeFile
NtCreateMutant
NtCreateMailslotFile
NtCreateKeyTransacted
NtCreateKeyedEvent
NtCreateKey
NtCreateJobSet
NtCreateJobObject
NtCreateIRTimer
NtCreateTimer2
NtCreateIoCompletion
NtCreateFile
NtCreateEventPair
NtCreateEvent
NtCreateEnlistment
NtCreateEnclave
NtCreateDirectoryObjectEx
NtCreateDirectoryObject
NtCreateDebugObject
NtContinue
NtConnectPort
NtCompressKey
NtCompleteConnectPort
NtCompareTokens
NtCompareObjects
NtCompactKeys
NtCommitTransaction
NtCommitEnlistment
NtCommitComplete
NtCloseObjectAuditAlarm
NtClose
NtClearEvent
NtCancelWaitCompletionPacket
NtCancelTimer
NtCancelSynchronousIoFile
NtCancelIoFileEx
NtCancelIoFile
NtCallbackReturn
NtAssociateWaitCompletionPacket
NtAssignProcessToJobObject
NtAreMappedFilesTheSame
NtApphelpCacheControl
NtAlpcSetInformation
NtAlpcSendWaitReceivePort
NtAlpcRevokeSecurityContext
NtAlpcQueryInformationMessage
NtAlpcQueryInformation
NtAlpcOpenSenderThread
NtAlpcOpenSenderProcess
NtAlpcImpersonateClientOfPort
NtAlpcImpersonateClientContainerOfPort
NtAlpcDisconnectPort
NtAlpcDeleteSecurityContext
NtAlpcDeleteSectionView
NtAlpcDeleteResourceReserve
NtAlpcDeletePortSection
NtAlpcCreateSecurityContext
NtAlpcCreateSectionView
NtAlpcCreateResourceReserve
NtAlpcCreatePortSection
NtAlpcCreatePort
NtAlpcConnectPort
NtAlpcConnectPortEx
NtAlpcCancelMessage
NtAlpcAcceptConnectPort
NtAllocateVirtualMemory
NtAllocateUuids
NtAllocateUserPhysicalPages
NtAllocateReserveObject
NtAllocateLocallyUniqueId
NtAlertThreadByThreadId
NtAlertThread
NtAlertResumeThread
NtAdjustPrivilegesToken
NtAdjustGroupsToken
NtAdjustTokenClaimsAndDeviceGroups
NtAddDriverEntry
NtAddBootEntry
NtAddAtom
NtAddAtomEx
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
NtAccessCheckByTypeResultListAndAuditAlarm
NtAccessCheckByTypeResultList
NtAccessCheckByTypeAndAuditAlarm
NtAccessCheckByType
NtAccessCheckAndAuditAlarm
NtSetInformationSymbolicLink
NtCreateRegistryTransaction
NtOpenRegistryTransaction
NtCommitRegistryTransaction
NtRollbackRegistryTransaction

↧

W32pServiceTable from windows 10 build 14316

April 24, 2016, 3:12 am
$
0
0
W32pServiceLimit .eq. 0x471

NtUserGetOwnerTransformedMonitorRect
NtUserYieldTask
NtUserSetSensorPresence
NtGdiWidenPath
NtGdiUpdateColors
NtGdiUnrealizeObject
NtGdiUnmapMemFont
NtGdiUnloadPrinterDriver
NtGdiTransparentBlt
NtGdiTransformPoints
NtGdiSwapBuffers
NtGdiStrokePath
NtGdiStrokeAndFillPath
NtGdiStretchDIBitsInternal
NtGdiStretchBlt
NtGdiStartPage
NtGdiStartDoc
NtGdiSetSizeDevice
NtGdiSetVirtualResolution
NtGdiSetTextJustification
NtGdiSetSystemPaletteUse
NtGdiSetRectRgn
NtGdiSetPixelFormat
NtGdiSetPixel
NtGdiSetOPMSigningKeyAndSequenceNumbers
NtGdiSetLayout
NtGdiMirrorWindowOrg
NtGdiGetDeviceWidth
NtGdiSetMiterLimit
NtGdiSetMetaRgn
NtGdiSetMagicColors
NtGdiSetLinkedUFIs
NtGdiSetIcmMode
NtGdiSetFontXform
NtGdiSetFontEnumeration
NtGdiSetDIBitsToDeviceInternal
NtGdiSetDeviceGammaRamp
NtGdiSetColorSpace
NtGdiSetColorAdjustment
NtGdiSetBrushOrg
NtGdiSetBrushAttributes
NtGdiSetBoundsRect
NtGdiSetBitmapDimension
NtGdiSetBitmapBits
NtGdiSetBitmapAttributes
NtGdiSelectPen
NtGdiSelectFont
NtGdiSelectClipPath
NtGdiSelectBrush
NtGdiSelectBitmap
NtGdiScaleWindowExtEx
NtGdiScaleViewportExtEx
NtGdiSaveDC
NtGdiRoundRect
NtGdiRestoreDC
NtGdiResizePalette
NtGdiResetDC
NtGdiRemoveFontMemResourceEx
NtGdiRemoveFontResourceW
NtGdiRectVisible
NtGdiRectInRegion
NtGdiRectangle
NtGdiQueryFontAssocInfo
NtGdiQueryFonts
NtGdiPtVisible
NtGdiPtInRegion
NtGdiPolyTextOutW
NtGdiPolyPolyDraw
NtGdiPolyDraw
NtGdiPlgBlt
NtGdiPathToRegion
NtGdiPolyPatBlt
NtGdiPatBlt
NtGdiOpenDCW
NtGdiOffsetRgn
NtGdiOffsetClipRgn
NtGdiMoveTo
NtGdiMonoBitmap
NtGdiModifyWorldTransform
NtGdiMaskBlt
NtGdiMakeInfoDC
NtGdiMakeFontDir
NtGdiLineTo
NtGdiInvertRgn
NtGdiIntersectClipRect
NtGdiInitSpool
NtGdiInit
NtGdiIcmBrushInfo
NtGdiHfontCreate
NtGdiGradientFill
NtGdiGetWidthTable
NtGdiGetFontUnicodeRanges
NtGdiAddEmbFontToDC
NtGdiChangeGhostFont
NtGdiGetEmbedFonts
NtGdiGetUFIPathname
NtGdiGetEmbUFI
NtGdiGetUFI
NtGdiGetTransform
NtGdiGetTextMetricsW
NtGdiGetTextFaceW
NtGdiGetTextExtentExW
NtGdiGetTextExtent
NtGdiGetTextCharsetInfo
NtGdiGetSystemPaletteUse
NtGdiGetSuggestedOPMProtectedOutputArraySize
NtGdiGetStringBitmapW
NtGdiGetStats
NtGdiGetSpoolMessage
NtGdiGetServerMetaFileBits
NtGdiGetRgnBox
NtGdiGetRegionData
NtGdiGetRealizationInfo
NtGdiGetRasterizerCaps
NtGdiGetRandomRgn
NtGdiGetPixel
NtGdiGetPath
NtGdiGetOutlineTextMetricsInternalW
NtGdiGetOPMRandomNumber
NtGdiGetObjectBitmapHandle
NtGdiGetNearestPaletteIndex
NtGdiGetNearestColor
NtGdiGetMonitorID
NtGdiGetMiterLimit
NtGdiGetLinkedUFIs
NtGdiGetKerningPairs
NtGdiGetOPMInformation
NtGdiGetGlyphOutline
NtGdiGetGlyphIndicesWInternal
NtGdiGetGlyphIndicesW
NtGdiGetFontResourceInfoInternalW
NtGdiGetFontFileInfo
NtGdiGetFontFileData
NtGdiGetFontData
NtGdiGetEudcTimeStampEx
NtGdiGetETM
NtGdiGetEntry
NtGdiGetDIBitsInternal
NtGdiGetDeviceCapsAll
NtGdiGetDeviceGammaRamp
NtGdiGetDeviceCaps
NtGdiGetDCPoint
NtGdiGetDCObject
NtGdiGetDCforBitmap
NtGdiGetDCDword
NtGdiGetCurrentDpiInfo
NtGdiGetCOPPCompatibleOPMInformation
NtGdiGetColorSpaceforBitmap
NtGdiGetColorAdjustment
NtGdiGetCharWidthInfo
NtGdiGetCharWidthW
NtGdiGetCharSet
NtGdiGetCharacterPlacementW
NtGdiGetCharABCWidthsW
NtGdiGetCertificateSize
NtGdiGetCertificate
NtGdiGetCertificateSizeByHandle
NtGdiGetCertificateByHandle
NtGdiGetBoundsRect
NtGdiGetBitmapDimension
NtGdiGetBitmapBits
NtGdiGetAppClipBox
NtGdiGetAndSetDCDword
NtGdiFullscreenControl
NtGdiFrameRgn
NtGdiForceUFIMapping
NtGdiFlush
NtGdiFlattenPath
NtGdiFillRgn
NtGdiFillPath
NtGdiExtTextOutW
NtGdiExtSelectClipRgn
NtGdiExtGetObjectW
NtGdiExtFloodFill
NtGdiExtEscape
NtGdiExtCreateRegion
NtGdiExtCreatePen
NtGdiExcludeClipRect
NtGdiEudcLoadUnloadLink
NtGdiEqualRgn
NtGdiEnumObjects
NtGdiEnumFonts
NtGdiEndPath
NtGdiEndPage
NtGdiEndGdiRendering
NtGdiEndDoc
NtGdiEnableEudc
NtGdiEllipse
NtGdiDrawEscape
NtGdiDoPalette
NtGdiDoBanding
NtGdiGetPerBandInfo
NtGdiDestroyOPMProtectedOutput
NtGdiDescribePixelFormat
NtGdiDeleteObjectApp
NtGdiDeleteColorTransform
NtGdiDeleteColorSpace
NtGdiDeleteClientObj
NtGdiDxgGenericThunk
NtGdiDvpReleaseNotification
NtGdiDvpAcquireNotification
NtGdiDvpWaitForVideoPortSync
NtGdiDvpUpdateVideoPort
NtGdiDvpGetVideoSignalStatus
NtGdiDvpGetVideoPortConnectInfo
NtGdiDvpGetVideoPortOutputFormats
NtGdiDvpGetVideoPortLine
NtGdiDvpGetVideoPortInputFormats
NtGdiDvpGetVideoPortFlipStatus
NtGdiDvpGetVideoPortField
NtGdiDvpGetVideoPortBandwidth
NtGdiDvpFlipVideoPort
NtGdiDvpDestroyVideoPort
NtGdiDvpCreateVideoPort
NtGdiDvpColorControl
NtGdiDvpCanCreateVideoPort
NtGdiDdWaitForVerticalBlank
NtGdiDdUpdateOverlay
NtGdiDdUnlockD3D
NtGdiDdUnlock
NtGdiDdUnattachSurface
NtGdiDdSetOverlayPosition
NtGdiDdCreateSurfaceEx
NtGdiDdSetGammaRamp
NtGdiDdSetExclusiveMode
NtGdiDdSetColorKey
NtGdiDdResetVisrgn
NtGdiDdRenderMoComp
NtGdiDdReleaseDC
NtGdiDdReenableDirectDrawObject
NtGdiDdQueryMoCompStatus
NtGdiDdQueryDirectDrawObject
NtGdiDdLockD3D
NtGdiDdLock
NtGdiDdGetScanLine
NtGdiDdGetMoCompFormats
NtGdiDdGetMoCompGuids
NtGdiDdGetMoCompBuffInfo
NtGdiDdGetInternalMoCompInfo
NtGdiDdGetFlipStatus
NtGdiDdGetDxHandle
NtGdiDdGetDriverInfo
NtGdiDdGetDC
NtGdiDdGetBltStatus
NtGdiDdGetAvailDriverMemory
NtGdiDdFlipToGDISurface
NtGdiDdFlip
NtGdiDdEndMoCompFrame
NtGdiDdDestroyD3DBuffer
NtGdiDdDestroySurface
NtGdiDdDestroyMoComp
NtGdiDdDeleteSurfaceObject
NtGdiDdDeleteDirectDrawObject
NtGdiDdCreateSurfaceObject
NtGdiDdCreateMoComp
NtGdiDdCreateD3DBuffer
NtGdiDdCreateSurface
NtGdiDdCreateDirectDrawObject
NtGdiDdColorControl
NtGdiDdCanCreateD3DBuffer
NtGdiDdCanCreateSurface
NtGdiDdBlt
NtGdiDdBeginMoCompFrame
NtGdiDdAttachSurface
NtGdiDdAlphaBlt
NtGdiDdAddAttachedSurface
NtGdiDdGetDriverState
NtGdiD3dDrawPrimitives2
NtGdiD3dValidateTextureStageState
NtGdiD3dContextDestroyAll
NtGdiD3dContextDestroy
NtGdiD3dContextCreate
NtGdiCreateSolidBrush
NtGdiCreateServerMetaFile
NtGdiCreateRoundRectRgn
NtGdiCreateRectRgn
NtGdiCreatePen
NtGdiCreatePatternBrushInternal
NtGdiCreatePaletteInternal
NtGdiCreateOPMProtectedOutputs
NtGdiCreateMetafileDC
NtGdiCreateHatchBrushInternal
NtGdiCreateHalftonePalette
NtGdiCreateEllipticRgn
NtGdiCreateSessionMappedDIBSection
NtGdiCreateDIBSection
NtGdiCreateDIBitmapInternal
NtGdiCreateDIBBrush
NtGdiCreateCompatibleDC
NtGdiCreateCompatibleBitmap
NtGdiCreateColorTransform
NtGdiCreateColorSpace
NtGdiCreateClientObj
NtGdiCreateBitmapFromDxSurface2
NtGdiCreateBitmapFromDxSurface
NtGdiCreateBitmap
NtGdiConvertMetafileRect
NtGdiConfigureOPMProtectedOutput
NtGdiComputeXformCoefficients
NtGdiCombineTransform
NtGdiCombineRgn
NtGdiColorCorrectPalette
NtGdiClearBrushAttributes
NtGdiClearBitmapAttributes
NtGdiCloseFigure
NtGdiCheckBitmapBits
NtGdiCancelDC
NtGdiBitBlt
NtGdiBeginPath
NtGdiBeginGdiRendering
NtGdiArcInternal
NtGdiFontIsLinked
NtGdiAnyLinkedFonts
NtGdiAngleArc
NtGdiAlphaBlend
NtGdiAddRemoteMMInstanceToDC
NtGdiRemoveMergeFont
NtGdiAddFontMemResourceEx
NtGdiAddRemoteFontToDC
NtGdiAddFontResourceW
NtGdiAbortPath
NtGdiAbortDoc
NtUserDefSetText
NtUserDeferWindowPosAndBand
NtUserDdeInitialize
NtUserCanBrokerForceForeground
NtUserCreateWindowStation
NtUserCreateWindowEx
NtUserCreateLocalMemHandle
NtUserCreateInputContext
NtUserCreateDesktopEx
NtUserCreateCaret
NtUserCreateAcceleratorTable
NtUserCountClipboardFormats
NtUserCopyAcceleratorTable
NtUserConvertMemHandle
NtUserConsoleControl
NtUserCloseWindowStation
NtUserCloseDesktop
NtUserCloseClipboard
NtUserClipCursor
NtUserChildWindowFromPointEx
NtUserCheckMenuItem
NtUserCheckWindowThreadDesktop
NtUserDwmValidateWindow
NtUserCheckAccessForIntegrityLevel
NtUserDisplayConfigSetDeviceInfo
NtUserDisplayConfigGetDeviceInfo
NtUserQueryDisplayConfig
NtUserSetDisplayConfig
NtUserGetDisplayConfigBufferSizes
NtUserChangeDisplaySettings
NtUserChangeClipboardChain
NtUserCallTwoParam
NtUserCallOneParam
NtUserCallNoParam
NtUserCallNextHookEx
NtUserCallMsgFilter
NtUserCallHwndParamLock
NtUserCallHwndParam
NtUserCallHwndOpt
NtUserCallHwndLock
NtUserCallHwnd
NtUserBuildPropList
NtUserBuildNameList
NtUserBuildHwndList
NtUserBuildHimcList
NtUserBlockInput
NtUserBitBltSysBmp
NtUserBeginPaint
NtUserAttachThreadInput
NtUserAssociateInputContext
NtUserAlterWindowStyle
NtUserAddClipboardFormatListener
NtUserActivateKeyboardLayout
NtUserDelegateCapturePointers
NtUserDelegateInput
NtUserDispatchMessage
NtUserDisableProcessWindowFiltering
NtUserDisableThreadIme
NtUserDestroyWindow
NtUserDestroyMenu
NtUserDestroyInputContext
NtUserDestroyCursor
NtUserDestroyAcceleratorTable
NtUserDeleteMenu
NtUserDoSoundDisconnect
NtUserDoSoundConnect
NtUserGhostWindowFromHungWindow
NtUserGetWOWClass
NtUserGetWindowPlacement
NtUserGetWindowDisplayAffinity
NtUserGetWindowDC
NtUserGetWindowCompositionAttribute
NtUserGetWindowCompositionInfo
NtUserGetWindowBand
NtUserGetUpdateRgn
NtUserGetUpdateRect
NtUserGetUpdatedClipboardFormats
NtUserGetTopLevelWindow
NtUserGetTitleBarInfo
NtUserGetThreadState
NtUserGetThreadDesktop
NtUserGetSystemMenu
NtUserGetScrollBarInfo
NtUserGetRegisteredRawInputDevices
NtUserGetRawInputDeviceList
NtUserGetRawInputDeviceInfo
NtUserGetRawInputData
NtUserGetRawInputBuffer
NtUserGetProcessDpiAwarenessContext
NtUserGetProcessWindowStation
NtUserGetPriorityClipboardFormat
NtUserGetOpenClipboardWindow
NtUserGetObjectInformation
NtUserGetMouseMovePointsEx
NtUserGetMessage
NtUserGetMenuItemRect
NtUserGetMenuIndex
NtUserGetMenuBarInfo
NtUserGetListBoxInfo
NtUserGetKeyState
NtUserGetKeyNameText
NtUserGetKeyboardState
NtUserGetKeyboardLayoutName
NtUserGetKeyboardLayoutList
NtUserGetInternalWindowPos
NtUserGetInputLocaleInfo
NtUserGetImeInfoEx
NtUserGetImeHotKey
NtUserGetIconSize
NtUserGetIconInfo
NtUserGetGUIThreadInfo
NtUserGetGuiResources
NtUserGetForegroundWindow
NtUserGetSystemMetricsForDpi
NtUserGetDoubleClickTime
NtUserGetDesktopID
NtUserGetDCEx
NtUserGetDC
NtUserGetCursorInfo
NtUserGetCursorFrameInfo
NtUserGetCurrentInputMessageSource
NtUserGetCIMSSM
NtUserGetCPD
NtUserGetControlColor
NtUserGetControlBrush
NtUserGetComboBoxInfo
NtUserGetClipCursor
NtUserGetClipboardViewer
NtUserGetClipboardSequenceNumber
NtUserGetClipboardOwner
NtUserGetClipboardFormatName
NtUserGetClipboardData
NtUserGetClassName
NtUserGetClassInfoEx
NtUserGetCaretPos
NtUserGetCaretBlinkTime
NtUserGetAtomName
NtUserGetAsyncKeyState
NtUserGetAppImeLevel
NtUserGetAncestor
NtUserGetAltTabInfo
NtUserFrostCrashedWindow
NtUserFlashWindowEx
NtUserFindWindowEx
NtUserFindExistingCursorIcon
NtUserFillWindow
NtUserExcludeUpdateRgn
NtUserEvent
NtUserEnumDisplaySettings
NtUserEnumDisplayMonitors
NtUserEnumDisplayDevices
NtUserEndPaint
NtUserEndMenu
NtUserEndDeferWindowPosEx
NtUserEnableScrollBar
NtUserEnableMenuItem
NtUserEmptyClipboard
NtUserDrawMenuBarTemp
NtUserDrawIconEx
NtUserDrawCaptionTemp
NtUserDrawCaption
NtUserDrawAnimatedRects
NtUserDragObject
NtUserDragDetect
NtUserHandleDelegatedInput
NtUserRealChildWindowFromPoint
NtUserQueryWindow
NtUserQuerySendMessage
NtUserQueryInputContext
NtUserQueryInformationThread
NtUserQueryBSDRWindow
NtUserPerMonitorDPIPhysicalToLogicalPoint
NtUserProcessConnect
NtUserPrintWindow
NtUserPostThreadMessage
NtUserPostMessage
NtUserPhysicalToLogicalPoint
NtUserPeekMessage
NtUserPaintMonitor
NtUserPaintDesktop
NtUserOpenWindowStation
NtUserOpenThreadDesktop
NtUserOpenInputDesktop
NtUserOpenDesktop
NtUserOpenClipboard
NtUserOverrideWindowDpiContext
NtUserNotifyWinEvent
NtUserNotifyProcessCreate
NtUserNotifyIMEStatus
NtUserMoveWindow
NtUserModifyUserStartupInfoFlags
NtUserMNDragOver
NtUserMNDragLeave
NtUserMinMaximize
NtUserMessageCall
NtUserMenuItemFromPoint
NtUserMapVirtualKeyEx
NtUserLayoutCompleted
NtUserLogicalToPerMonitorDPIPhysicalPoint
NtUserLogicalToPhysicalPoint
NtUserLockWorkStation
NtUserLockWindowUpdate
NtUserLockWindowStation
NtUserLoadKeyboardLayoutEx
NtUserKillTimer
NtUserIsTopLevelWindow
NtUserIsClipboardFormatAvailable
NtUserInvalidateRgn
NtUserInvalidateRect
NtUserInternalGetWindowIcon
NtUserInternalGetWindowText
NtUserInitTask
NtUserInitializeClientPfnArrays
NtUserInitialize
NtUserImpersonateDdeClientWindow
NtUserHungWindowFromGhostWindow
NtUserHiliteMenuItem
NtUserHideCaret
NtUserHardErrorControl
NtUserSetThreadDpiAwarenessContext
NtUserSetThreadDpiAwarenessContextFromWindow
NtUserRealInternalGetMessage
NtUserRealWaitMessageEx
NtUserReleaseDwmHitTestWaiters
NtUserTranslateMessage
NtUserTranslateAccelerator
NtUserPaintMenuBar
NtUserCalcMenuBar
NtUserCalculatePopupWindowPosition
NtUserTrackPopupMenuEx
NtUserTrackMouseEvent
NtUserToUnicodeEx
NtUserThunkedMenuItemInfo
NtUserThunkedMenuInfo
NtUserTestForInteractiveUser
NtUserSendEventMessage
NtUserSystemParametersInfo
NtUserSystemParametersInfoForDpi
NtUserSwitchDesktop
NtUserSoundSentry
NtUserShutdownReasonDestroy
NtUserShutdownBlockReasonQuery
NtUserShutdownBlockReasonCreate
NtUserShowWindowAsync
NtUserShowWindow
NtUserShowScrollBar
NtUserShowCaret
NtUserSetWinEventHook
NtUserSetWindowWord
NtUserSetWindowStationUser
NtUserSetWindowsHookEx
NtUserSetWindowsHookAW
NtUserSetWindowRgnEx
NtUserGetWindowRgnEx
NtUserSetWindowRgn
NtUserSetWindowPos
NtUserSetWindowPlacement
NtUserSetWindowLong
NtUserSetWindowFNID
NtUserSetWindowDisplayAffinity
NtUserSetWindowCompositionTransition
NtUserUpdateDefaultDesktopThumbnail
NtUserSetWindowCompositionAttribute
NtUserSetWindowBand
NtUserSetProcessUIAccessZorder
NtUserSetProcessDpiAwarenessContext
NtUserEnableChildWindowDpiMessage
NtUserIsChildWindowDpiMessageEnabled
NtUserEnableNonClientDpiScaling
NtUserIsNonClientDpiScalingEnabled
NtUserIsWindowBroadcastingDpiToChildren
NtUserSetTimer
NtUserSetThreadState
NtUserSetThreadLayoutHandles
NtUserSetThreadDesktop
NtUserSetThreadInputBlocked
NtUserSetSystemTimer
NtUserSetSystemMenu
NtUserSetSystemCursor
NtUserSetSysColors
NtUserSetShellWindowEx
NtUserSetScrollInfo
NtUserSetProp
NtUserGetProp
NtUserSetProcessWindowStation
NtUserSetParent
NtUserSetObjectInformation
NtUserSetMenuFlagRtoL
NtUserSetMenuDefaultItem
NtUserSetMenuContextHelpId
NtUserSetMenu
NtUserSetKeyboardState
NtUserSetInternalWindowPos
NtUserSetInformationThread
NtUserSetImeOwnerWindow
NtUserSetImeInfoEx
NtUserSetImeHotKey
NtUserSetFocus
NtUserSetCursorIconData
NtUserSetCursorContents
NtUserSetCursor
NtUserSetClipboardViewer
NtUserSetClipboardData
NtUserSetClassWord
NtUserSetClassLong
NtUserSetChildWindowNoActivate
NtUserSetCapture
NtUserSetAppImeLevel
NtUserSetActiveWindow
NtUserSendInput
NtUserSelectPalette
NtUserScrollWindowEx
NtUserScrollDC
NtUserSBGetParms
NtUserResolveDesktopForWOW
NtUserRemoveProp
NtUserRemoveMenu
NtUserRemoveClipboardFormatListener
NtUserRegisterWindowMessage
NtUserRegisterTasklist
NtUserRegisterServicesProcess
NtUserRegisterRawInputDevices
NtUserRegisterHotKey
NtUserRegisterDManipHook
NtUserGetDManipHookInitFunction
NtUserRegisterManipulationThread
NtUserSetManipulationInputTarget
NtUserRegisterUserApiHook
NtUserRegisterErrorReportingDialog
NtUserRegisterClassExWOW
NtUserRegisterBSDRWindow
NtUserRedrawWindow
NtUserUndelegateInput
NtUserGetWindowMinimizeRect
NtUserDwmGetRemoteSessionOcclusionEvent
NtUserDwmGetRemoteSessionOcclusionState
NtUserDwmKernelShutdown
NtUserDwmKernelStartup
NtUserUpdateWindowTransform
NtUserCheckProcessSession
NtUserUnregisterSessionPort
NtUserRegisterSessionPort
NtUserCtxDisplayIOCtl
NtUserRemoteStopScreenUpdates
NtUserRemoteRedrawScreen
NtUserRemoteRedrawRectangle
NtUserRemoteConnect
NtUserWaitAvailableMessageEx
NtUserWindowFromPoint
NtUserWindowFromPhysicalPoint
NtUserWaitMessage
NtUserWaitForMsgAndEvent
NtUserWaitForInputIdle
NtUserVkKeyScanEx
NtUserValidateTimerCallback
NtUserValidateRect
NtUserValidateHandleSecure
NtUserUserHandleGrantAccess
NtUserUpdatePerUserSystemParameters
NtUserSetLayeredWindowAttributes
NtUserGetLayeredWindowAttributes
NtUserUpdateLayeredWindow
NtUserUpdateInstance
NtUserUpdateInputContext
NtUserUnregisterHotKey
NtUserUnregisterUserApiHook
NtUserUnregisterClass
NtUserUnlockWindowStation
NtUserUnloadKeyboardLayout
NtUserUnhookWinEvent
NtUserUnhookWindowsHookEx
NtUserGetTouchInputInfo
NtUserIsTouchWindow
NtUserModifyWindowTouchCapability
NtGdiEngStretchBltROP
NtGdiEngTextOut
NtGdiEngTransparentBlt
NtGdiEngGradientFill
NtGdiEngAlphaBlend
NtGdiEngLineTo
NtGdiEngPaint
NtGdiEngStrokeAndFillPath
NtGdiEngFillPath
NtGdiEngStrokePath
NtGdiEngMarkBandingSurface
NtGdiEngPlgBlt
NtGdiEngStretchBlt
NtGdiEngBitBlt
NtGdiEngLockSurface
NtGdiEngUnlockSurface
NtGdiEngEraseSurface
NtGdiEngDeleteSurface
NtGdiEngDeletePalette
NtGdiEngCopyBits
NtGdiEngComputeGlyphSet
NtGdiEngCreatePalette
NtGdiEngCreateDeviceBitmap
NtGdiEngCreateDeviceSurface
NtGdiEngCreateBitmap
NtGdiEngAssociateSurface
NtUserSetWindowFeedbackSetting
NtUserRegisterEdgy
NtUserRegisterShellPTPListener
NtUserGetWindowFeedbackSetting
NtUserHidePointerContactVisualization
NtUserGetTouchValidationStatus
NtUserInitializeTouchInjection
NtUserInjectTouchInput
NtUserRegisterTouchHitTestingWindow
NtUserSetDisplayMapping
NtUserSetCalibrationData
NtUserGetPhysicalDeviceRect
NtUserRegisterTouchPadCapable
NtUserGetRawPointerDeviceData
NtUserGetPointerDeviceCursors
NtUserGetPointerDeviceRects
NtUserRegisterPointerDeviceNotifications
NtUserGetPointerDeviceProperties
NtUserGetPointerDevice
NtUserGetPointerDevices
NtUserEnableTouchPad
NtUserGetPrecisionTouchPadConfiguration
NtUserSetPrecisionTouchPadConfiguration
NtUserPromotePointer
NtUserDiscardPointerFrameMessages
NtUserRegisterPointerInputTarget
NtUserGetPointerFrameArrivalTimes
NtUserGetPointerInputTransform
NtUserGetPointerInfoList
NtUserGetPointerCursorId
NtUserGetPointerType
NtUserGetGestureConfig
NtUserSetGestureConfig
NtUserGetGestureExtArgs
NtUserGetGestureInfo
NtUserInjectGesture
NtUserChangeWindowMessageFilterEx
NtGdiXLATEOBJ_hGetColorTransform
NtGdiXLATEOBJ_iXlate
NtGdiXLATEOBJ_cGetPalette
NtGdiEngDeleteClip
NtGdiEngCreateClip
NtGdiEngDeletePath
NtGdiCLIPOBJ_ppoGetPath
NtGdiCLIPOBJ_cEnumStart
NtGdiCLIPOBJ_bEnum
NtGdiBRUSHOBJ_hGetColorTransform
NtGdiBRUSHOBJ_pvGetRbrush
NtGdiBRUSHOBJ_pvAllocRbrush
NtGdiBRUSHOBJ_ulGetBrushColor
NtGdiXFORMOBJ_iGetXform
NtGdiXFORMOBJ_bApplyXform
NtGdiFONTOBJ_pQueryGlyphAttrs
NtGdiFONTOBJ_pfdg
NtGdiFONTOBJ_pifi
NtGdiFONTOBJ_cGetGlyphs
NtGdiFONTOBJ_pxoGetXform
NtGdiFONTOBJ_vGetInfo
NtGdiFONTOBJ_cGetAllGlyphHandles
NtGdiFONTOBJ_pvTrueTypeFontFile
NtGdiSTROBJ_dwGetCodePage
NtGdiSTROBJ_vEnumStart
NtGdiSTROBJ_bGetAdvanceWidths
NtGdiSTROBJ_bEnumPositionsOnly
NtGdiSTROBJ_bEnum
NtGdiPATHOBJ_bEnumClipLines
NtGdiPATHOBJ_vEnumStartClipLines
NtGdiPATHOBJ_vEnumStart
NtGdiPATHOBJ_bEnum
NtGdiPATHOBJ_vGetBounds
NtGdiEngCheckAbort
NtGdiGetDhpdev
NtGdiHT_Get8BPPMaskPalette
NtGdiHT_Get8BPPFormatPalette
NtGdiUpdateTransform
NtGdiUMPDEngFreeUserMem
NtGdiBRUSHOBJ_DeleteRbrush
NtGdiSetPUMPDOBJ
NtGdiSetUMPDSandboxState
NtGdiDrawStream
NtGdiHLSurfSetInformation
NtGdiHLSurfGetInformation
NtGdiDwmCreatedBitmapRemotingOutput
NtGdiDdDDIGetScanLine
NtGdiDdDDIReleaseProcessVidPnSourceOwners
NtGdiDdDDIGetProcessSchedulingPriorityClass
NtGdiDdDDISetProcessSchedulingPriorityClass
NtGdiDdDDIGetContextSchedulingPriority
NtGdiDdDDISetContextSchedulingPriority
NtGdiDdDDIDestroyDCFromMemory
NtGdiDdDDICreateDCFromMemory
NtGdiDdDDIGetDeviceState
NtGdiDdDDISetGammaRamp
NtGdiDdDDIWaitForVerticalBlankEvent
NtGdiDdDDIDestroyOverlay
NtGdiDdDDIFlipOverlay
NtGdiDdDDIUpdateOverlay
NtGdiDdDDICreateOverlay
NtGdiDdDDIGetPresentQueueEvent
NtGdiDdDDIGetPresentHistory
NtGdiDdDDISetVidPnSourceOwner1
NtGdiDdDDISetVidPnSourceOwner
NtGdiDdDDIQueryStatistics
NtGdiDdDDIEscape
NtGdiDdDDIGetSharedPrimaryHandle
NtGdiDdDDICloseAdapter
NtGdiDdDDIOpenAdapterFromLuid
NtGdiDdDDIEnumAdapters
NtGdiDdDDIEnumAdapters2
NtGdiDdDDIOpenAdapterFromHdc
NtGdiDdDDIOpenAdapterFromDeviceName
NtGdiDdDDIRender
NtGdiDdDDIPresent
NtGdiDdDDIGetMultisampleMethodList
NtGdiDdDDISetDisplayMode
NtGdiDdDDIGetDisplayModeList
NtGdiDdDDIUnlock
NtGdiDdDDILock
NtGdiDdDDIQueryAdapterInfo
NtGdiDdDDIGetRuntimeData
NtGdiDdDDISignalSynchronizationObject
NtGdiDdDDIWaitForSynchronizationObject
NtGdiDdDDIDestroySynchronizationObject
NtGdiDdDDIOpenSynchronizationObject
NtGdiDdDDICreateSynchronizationObject
NtGdiDdDDIDestroyContext
NtGdiDdDDICreateContext
NtGdiDdDDIDestroyDevice
NtGdiDdDDICreateDevice
NtGdiDdDDIQueryAllocationResidency
NtGdiDdDDISetAllocationPriority
NtGdiDdDDIDestroyAllocation
NtGdiDdDDIDestroyAllocation2
NtGdiDdDDIOpenResourceFromNtHandle
NtGdiDdDDIOpenSyncObjectFromNtHandle
NtGdiDdDDIOpenSyncObjectFromNtHandle2
NtGdiDdDDIOpenResource
NtGdiDdDDIOpenNtHandleFromName
NtGdiDdDDIOpenSyncObjectNtHandleFromName
NtGdiDdDDIShareObjects
NtGdiDdDDIQueryResourceInfoFromNtHandle
NtGdiDdDDIQueryResourceInfo
NtGdiDdDDICreateAllocation
NtGdiDdDDIOutputDuplReleaseFrame
NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName
NtGdiDdDDIOutputDuplPresent
NtGdiDdDDIReleaseKeyedMutex2
NtGdiDdDDIAcquireKeyedMutex2
NtGdiDdDDIOpenKeyedMutex2
NtGdiDdDDICreateKeyedMutex2
NtGdiDdDDIOutputDuplGetPointerShapeData
NtGdiDdDDIOutputDuplGetMetaData
NtGdiDdDDIOutputDuplGetFrameInfo
NtGdiDdDDIDestroyOutputDupl
NtGdiDdDDICreateOutputDupl
NtGdiDdDDIReclaimAllocations
NtGdiDdDDIOfferAllocations
NtGdiDdDDICheckSharedResourceAccess
NtGdiDdDDICheckVidPnExclusiveOwnership
NtGdiDdDDIGetOverlayState
NtGdiDdDDIConfigureSharedResource
NtGdiDdDDIReleaseKeyedMutex
NtGdiDdDDIAcquireKeyedMutex
NtGdiDdDDIDestroyKeyedMutex
NtGdiDdDDIOpenKeyedMutex
NtGdiDdDDICreateKeyedMutex
NtGdiDdDDISharedPrimaryUnLockNotification
NtGdiDdDDISharedPrimaryLockNotification
NtGdiDdDDISetDisplayPrivateDriverFormat
NtGdiDdDDICheckExclusiveOwnership
NtGdiDdDDICheckMonitorPowerState
NtGdiDdDDIWaitForIdle
NtGdiDdDDICheckOcclusion
NtGdiDdDDIInvalidateActiveVidPn
NtGdiDdDDIPollDisplayChildren
NtGdiDdDDISetQueuedLimit
NtGdiDdDDIPinDirectFlipResources
NtGdiDdDDIUnpinDirectFlipResources
NtGdiDdDDIWaitForVerticalBlankEvent2
NtGdiDdDDIGetDWMVerticalBlankEvent
NtGdiDdDDISetSyncRefreshCountWaitTarget
NtGdiDdDDISetContextInProcessSchedulingPriority
NtGdiDdDDIGetContextInProcessSchedulingPriority
NtGdiDdDDIGetSharedResourceAdapterLuid
NtGdiDdDDISetStereoEnabled
NtGdiDdDDIPresentMultiPlaneOverlay
NtGdiDdDDICheckMultiPlaneOverlaySupport
NtGdiDdDDIMakeResident
NtGdiDdDDIEvict
NtGdiDdDDIUpdateAllocationProperty
NtGdiDdDDIWaitForSynchronizationObjectFromCpu
NtGdiDdDDISignalSynchronizationObjectFromCpu
NtGdiDdDDIWaitForSynchronizationObjectFromGpu
NtGdiDdDDISignalSynchronizationObjectFromGpu
NtGdiDdDDISignalSynchronizationObjectFromGpu2
NtGdiDdDDICreatePagingQueue
NtGdiDdDDIDestroyPagingQueue
NtGdiDdDDILock2
NtGdiDdDDIUnlock2
NtGdiDdDDIInvalidateCache
NtGdiDdDDIGetResourcePresentPrivateDriverData
NtGdiDdDDIMapGpuVirtualAddress
NtGdiDdDDIReserveGpuVirtualAddress
NtGdiDdDDIFreeGpuVirtualAddress
NtGdiDdDDIUpdateGpuVirtualAddress
NtGdiDdDDICreateContextVirtual
NtGdiDdDDISubmitCommand
NtGdiDdDDIGetCachedHybridQueryValue
NtGdiDdDDICacheHybridQueryValue
NtGdiDdDDINetDispGetNextChunkInfo
NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport
NtGdiDdDDINetDispStartMiracastDisplayDevice
NtGdiDdDDINetDispStopMiracastDisplayDevice
NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus
NtGdiDdDDINetDispStopSessions
NtGdiDdDDIQueryVideoMemoryInfo
NtGdiDdDDIChangeVideoMemoryReservation
NtGdiDdDDICreateSwapChain
NtGdiDdDDIOpenSwapChain
NtGdiDdDDIGetSetSwapChainMetadata
NtGdiDdDDIAcquireSwapChain
NtGdiDdDDIReleaseSwapChain
NtGdiDdDDIAbandonSwapChain
NtGdiDdDDISetDodIndirectSwapchain
NtGdiDdDDICheckMultiPlaneOverlaySupport2
NtGdiDdDDIPresentMultiPlaneOverlay2
NtGdiDdDDIReclaimAllocations2
NtGdiDdDDISetStablePowerState
NtGdiDdDDIQueryClockCalibration
NtGdiDdDDIQueryVidPnExclusiveOwnership
NtGdiDdDDIAdjustFullscreenGamma
NtGdiDdDDISetVidPnSourceHwProtection
NtGdiDdDDIMarkDeviceAsError
NtGdiDdDDIFlushHeapTransitions
NtGdiDdDDISetHwProtectionTeardownRecovery
NtGdiDdDDIQueryProcessOfferInfo
NtGdiDdDDITrimProcessCommitment
NtGdiDdDDICheckMultiPlaneOverlaySupport3
NtGdiDdDDIPresentMultiPlaneOverlay3
NtGdiDdDDISetFSEBlock
NtGdiDdDDIQueryFSEBlock
NtGdiMakeObjectUnXferable
NtGdiMakeObjectXferable
NtGdiDestroyPhysicalMonitor
NtGdiGetPhysicalMonitorDescription
NtGdiGetPhysicalMonitors
NtGdiGetNumberOfPhysicalMonitors
NtGdiDDCCIGetTimingReport
NtGdiDDCCIGetCapabilitiesString
NtGdiDDCCIGetCapabilitiesStringLength
NtGdiDDCCISaveCurrentSettings
NtGdiDDCCISetVCPFeature
NtGdiDDCCIGetVCPFeature
NtGdiDdQueryVisRgnUniqueness
NtGdiDdDestroyFullscreenSprite
NtGdiDdNotifyFullscreenSpriteUpdate
NtGdiDdCreateFullscreenSprite
NtGdiGetProcessSessionFonts
NtGdiGetPublicFontTableChangeCookie
NtUserShowSystemCursor
NtUserSetMirrorRendering
NtUserMagGetContextInformation
NtUserMagSetContextInformation
NtUserMagControl
NtUserSlicerControl
NtUserHwndSetRedirectionInfo
NtUserHwndQueryRedirectionInfo
NtCreateCompositionSurfaceHandle
NtValidateCompositionSurfaceHandle
NtBindCompositionSurface
NtUnBindCompositionSurface
NtQueryCompositionSurfaceBinding
NtNotifyPresentToCompositionSurface
NtQueryCompositionSurfaceStatistics
NtOpenCompositionSurfaceSectionInfo
NtOpenCompositionSurfaceSwapChainHandleInfo
NtQueryCompositionSurfaceRenderingRealization
NtOpenCompositionSurfaceDirtyRegion
NtQueryCompositionSurfaceHDRMetaData
NtSetCompositionSurfaceHDRMetaData
NtSetCompositionSurfaceDirectFlipState
NtSetCompositionSurfaceStatistics
NtSetCompositionSurfaceBufferCompositionModeAndOrientation
NtSetCompositionSurfaceIndependentFlipInfo
NtDesktopCaptureBits
NtDCompositionEnableMMCSS
NtVisualCaptureBits
NtDCompositionEnableDDASupport
NtCreateCompositionInputSink
NtCreateImplicitCompositionInputSink
NtDuplicateCompositionInputSink
NtQueryCompositionInputSink
NtQueryCompositionInputSinkLuid
NtQueryCompositionInputSinkViewId
NtUpdateInputSinkTransforms
NtCompositionInputThread
NtQueryCompositionInputQueueAndTransform
NtQueryCompositionInputIsImplicit
NtCompositionSetDropTarget
NtTokenManagerOpenSectionAndEvents
NtTokenManagerThread
NtTokenManagerCreateCompositionTokenHandle
NtTokenManagerGetAnalogExclusiveTokenEvent
NtTokenManagerGetAnalogExclusiveSurfaceUpdates
NtTokenManagerConfirmOutstandingAnalogToken
NtSetCompositionSurfaceAnalogExclusive
NtDCompositionBeginFrame
NtDCompositionConfirmFrame
NtDCompositionRetireFrame
NtDCompositionDiscardFrame
NtDCompositionGetFrameSurfaceUpdates
NtDCompositionGetFrameLegacyTokens
NtDCompositionDestroyConnection
NtDCompositionGetConnectionBatch
NtDCompositionGetFrameStatistics
NtDCompositionGetDeletedResources
NtDCompositionCreateConnection
NtDCompositionDestroyChannel
NtDCompositionReleaseAllResources
NtDCompositionSubmitDWMBatch
NtDCompositionProcessChannelBatchBuffer
NtDCompositionCommitChannel
NtDCompositionWaitForChannel
NtDCompositionSetChannelCommitCompletionEvent
NtDCompositionTelemetryTouchInteractionBegin
NtDCompositionTelemetryTouchInteractionUpdate
NtDCompositionTelemetryTouchInteractionEnd
NtDCompositionTelemetrySetApplicationId
NtDCompositionTelemetryAnimationScenarioBegin
NtDCompositionTelemetryAnimationScenarioReference
NtDCompositionTelemetryAnimationScenarioUnreference
NtDCompositionCurrentBatchId
NtDCompositionRemoveCrossDeviceVisualChild
NtDCompositionAddCrossDeviceVisualChild
NtDCompositionCreateDwmChannel
NtDCompositionCreateChannel
NtDCompositionSynchronize
NtDCompositionReferenceSharedResourceOnDwmChannel
NtDCompositionCreateAndBindSharedSection
NtDCompositionSetDebugCounter
NtDCompositionGetChannels
NtDCompositionConnectPipe
NtDCompositionRegisterThumbnailVisual
NtDCompositionRegisterVirtualDesktopVisual
NtDCompositionDuplicateHandleToProcess
NtDCompositionUpdatePointerCapture
NtDCompositionSetChannelCallbackId
NtDCompositionDuplicateSwapchainHandleToDwm
NtUserDestroyDCompositionHwndTarget
NtUserCreateDCompositionHwndTarget
NtUserWaitForRedirectionStartComplete
NtUserSignalRedirectionStartComplete
NtUserSetActiveProcessForMonitor
NtUserGetDisplayAutoRotationPreferencesByProcessId
NtUserGetDisplayAutoRotationPreferences
NtUserSetDisplayAutoRotationPreferences
NtUserSetAutoRotation
NtUserGetAutoRotationState
NtUserAutoRotateScreen
NtUserAcquireIAMKey
NtUserSetActivationFilter
NtUserSetFallbackForeground
NtUserSetBrokeredForeground
NtUserDisableImmersiveOwner
NtUserClearForeground
NtUserEnableIAMAccess
NtUserGetProcessUIContextInformation
NtUserSetProcessRestrictionExemption
NtUserSetWindowArrangement
NtUserSetWindowShowState
NtUserUpdateWindowTrackingInfo
NtUserEnableMouseInPointer
NtUserIsMouseInPointerEnabled
NtUserPromoteMouseInPointer
NtUserAutoPromoteMouseInPointer
NtUserEnableMouseInputForCursorSuppression
NtUserIsMouseInputEnabled
NtUserInternalClipCursor
NtUserCheckProcessForClipboardAccess
NtUserGetClipboardAccessToken
NtUserGetQueueEventStatus
NtUserCompositionInputSinkLuidFromPoint
NtUserUpdateWindowInputSinkHints
NtUserTransformPoint
NtUserTransformRect
NtUserGetHimetricScaleFactorFromPixelLocation
NtUserGetDpiForMonitor
NtUserReportInertia
NtUserLinkDpiCursor
NtUserGetCursorDims
NtUserInitializeInputDeviceInjection
NtUserInitializePointerDeviceInjection
NtUserRemoveInjectionDevice
NtUserSetFeatureReportResponse
NtUserInjectDeviceInput
NtUserInjectMouseInput
NtUserInjectKeyboardInput
NtUserInjectPointerInput
NtRIMAddInputObserver
NtRIMRemoveInputObserver
NtRIMUpdateInputObserverRegistration
NtRIMObserveNextInput
NtRIMGetDevicePreparsedDataLockfree
NtUserSetCoreWindow
NtUserSetCoreWindowPartner
NtUserNavigateFocus
NtHWCursorUpdatePointer
NtUserAcquireInteractiveControlBackgroundAccess
NtUserGetInteractiveControlInfo
NtUserGetInteractiveControlDeviceInfo
NtUserSendInteractiveControlHapticsReport
NtUserSetInteractiveControlFocus
NtUserInteractiveControlQueryUsage
NtUserSetInteractiveCtrlRotationAngle
NtUserSetProcessInteractionFlags

↧

KiServiceTable from w10 build 14342 x64

May 25, 2016, 9:14 am
$
0
0
In healthy windows (for example w10 build 14332) KiServiceTable looks like:
.rdata:00000001402DE4C0 KiServiceTable  dq offset NtAccessCheck ; DATA XREF: KiInitializeKernel+5EF o
.rdata:00000001402DE4C8        dq offset NtWorkerFactoryWorkerReady
.rdata:00000001402DE4D0        dq offset NtAcceptConnectPort
.rdata:00000001402DE4D8        dq offset NtMapUserPhysicalPagesScatter

And in w10 build 14342 like:
.rdata:00000001402E1380 KiServiceTable  dd 0DECCCh              ; DATA XREF: KiInitializeKernel+600 o
.rdata:00000001402E1384        dd 0E44ECh
.rdata:00000001402E1388        dd 4E3470h
.rdata:00000001402E138C        db  20h
.rdata:00000001402E138D        db 0AFh ; ï
.rdata:00000001402E138E        db  64h ; d
.rdata:00000001402E138F        db    0

so I had to write a IDC script to convert this offsets to normal view:
#include <idc.idc>

static get_pe_base()
{
  auto addr, segm;
  addr = GetLongPrm(INF_MIN_EA);
  segm = SegByName("HEADER");
  if ( segm != BADADDR )
    return addr;
  return addr - 0x1000; // ditry hack
}

static main(void)
{
  auto base, cnt, addr, tab, i;
  base = get_pe_base();
  addr = LocByName("KiServiceLimit");
  if ( addr == BADADDR )
  {
    Warn("Cannot find KiServiceLimit");
    return;
  }
  cnt = Dword(addr);
  tab = LocByName("KiServiceTable");
  if ( tab == BADADDR )
  {
    Warn("Cannot find KiServiceTable");
    return;
  }
  for ( i = 0; i< cnt; i++, tab = tab + 4 )
  {
    MakeDword(tab);
    addr = Dword(tab);
    MakeComm(tab, sprintf("%x", addr + base));
    add_dref(tab, addr + base, dr_O);
  }
}

KiServiceLimit .eq. 0x1c2
NtAccessCheck
NtWorkerFactoryWorkerReady
NtAcceptConnectPort
NtMapUserPhysicalPagesScatter
NtWaitForSingleObject
NtCallbackReturn
NtReadFile
NtDeviceIoControlFile
NtWriteFile
NtRemoveIoCompletion
NtReleaseSemaphore
NtReplyWaitReceivePort
NtReplyPort
NtSetInformationThread
NtSetEvent
NtClose
NtQueryObject
NtQueryInformationFile
NtOpenKey
NtEnumerateValueKey
NtFindAtom
NtQueryDefaultLocale
NtQueryKey
NtQueryValueKey
NtAllocateVirtualMemory
NtQueryInformationProcess
NtWaitForMultipleObjects32
NtWriteFileGather
NtSetInformationProcess
NtCreateKey
NtFreeVirtualMemory
NtImpersonateClientOfPort
NtReleaseMutant
NtQueryInformationToken
NtRequestWaitReplyPort
NtQueryVirtualMemory
NtOpenThreadToken
NtQueryInformationThread
NtOpenProcess
NtSetInformationFile
NtMapViewOfSection
NtAccessCheckAndAuditAlarm
NtUnmapViewOfSection
NtReplyWaitReceivePortEx
NtTerminateProcess
NtSetEventBoostPriority
NtReadFileScatter
NtOpenThreadTokenEx
NtOpenProcessTokenEx
NtQueryPerformanceCounter
NtEnumerateKey
NtOpenFile
NtDelayExecution
NtQueryDirectoryFile
NtQuerySystemInformation
NtOpenSection
NtQueryTimer
NtFsControlFile
NtWriteVirtualMemory
NtCloseObjectAuditAlarm
NtDuplicateObject
NtQueryAttributesFile
NtClearEvent
NtReadVirtualMemory
NtOpenEvent
NtAdjustPrivilegesToken
NtDuplicateToken
NtContinue
NtQueryDefaultUILanguage
NtQueueApcThread
NtYieldExecution
NtAddAtom
NtCreateEvent
NtQueryVolumeInformationFile
NtCreateSection
NtFlushBuffersFile
NtApphelpCacheControl
NtCreateProcessEx
NtCreateThread
NtIsProcessInJob
NtProtectVirtualMemory
NtQuerySection
NtResumeThread
NtTerminateThread
NtReadRequestData
NtCreateFile
NtQueryEvent
NtWriteRequestData
NtOpenDirectoryObject
NtAccessCheckByTypeAndAuditAlarm
NtQuerySystemTime
NtWaitForMultipleObjects
NtSetInformationObject
NtCancelIoFile
NtTraceEvent
NtPowerInformation
NtSetValueKey
NtCancelTimer
NtSetTimer
NtAccessCheckByType
NtAccessCheckByTypeResultList
NtAccessCheckByTypeResultListAndAuditAlarm
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
NtAddAtomEx
NtAddBootEntry
NtAddDriverEntry
NtAdjustGroupsToken
NtAdjustTokenClaimsAndDeviceGroups
NtAlertResumeThread
NtAlertThread
NtAlertThreadByThreadId
NtAllocateLocallyUniqueId
NtAllocateReserveObject
NtAllocateUserPhysicalPages
NtAllocateUuids
NtAlpcAcceptConnectPort
NtAlpcCancelMessage
NtAlpcConnectPort
NtAlpcConnectPortEx
NtAlpcCreatePort
NtAlpcCreatePortSection
NtAlpcCreateResourceReserve
NtAlpcCreateSectionView
NtAlpcCreateSecurityContext
NtAlpcDeletePortSection
NtAlpcDeleteResourceReserve
NtAlpcDeleteSectionView
NtAlpcDeleteSecurityContext
NtAlpcDisconnectPort
NtAlpcImpersonateClientContainerOfPort
NtAlpcImpersonateClientOfPort
NtAlpcOpenSenderProcess
NtAlpcOpenSenderThread
NtAlpcQueryInformation
NtAlpcQueryInformationMessage
NtAlpcRevokeSecurityContext
NtAlpcSendWaitReceivePort
NtAlpcSetInformation
NtAreMappedFilesTheSame
NtAssignProcessToJobObject
NtAssociateWaitCompletionPacket
NtCancelIoFileEx
NtCancelSynchronousIoFile
NtCancelTimer2
NtCancelWaitCompletionPacket
NtCommitComplete
NtCommitEnlistment
NtCommitRegistryTransaction
NtCommitTransaction
NtCompactKeys
NtCompareObjects
NtCompareTokens
NtCompleteConnectPort
NtCompressKey
NtConnectPort
NtCreateDebugObject
NtCreateDirectoryObject
NtCreateDirectoryObjectEx
NtCreateEnclave
NtCreateEnlistment
NtCreateEventPair
NtCreateIRTimer
NtCreateIoCompletion
NtCreateJobObject
NtCreateJobSet
NtCreateKeyTransacted
NtCreateKeyedEvent
NtCreateLowBoxToken
NtCreateMailslotFile
NtCreateMutant
NtCreateNamedPipeFile
NtCreatePagingFile
NtCreatePartition
NtCreatePort
NtCreatePrivateNamespace
NtCreateProcess
NtCreateProfile
NtCreateProfileEx
NtCreateRegistryTransaction
NtCreateResourceManager
NtCreateSemaphore
NtCreateSymbolicLinkObject
NtCreateThreadEx
NtCreateTimer
NtCreateTimer2
NtCreateToken
NtCreateTokenEx
NtCreateTransaction
NtCreateTransactionManager
NtCreateUserProcess
NtCreateWaitCompletionPacket
NtCreateWaitablePort
NtCreateWnfStateName
NtCreateWorkerFactory
NtDebugActiveProcess
NtDebugContinue
NtDeleteAtom
NtDeleteBootEntry
NtDeleteDriverEntry
NtDeleteFile
NtDeleteKey
NtDeleteObjectAuditAlarm
NtDeletePrivateNamespace
NtDeleteValueKey
NtDeleteWnfStateData
NtDeleteWnfStateName
NtDisableLastKnownGood
NtDisplayString
NtDrawText
NtEnableLastKnownGood
NtEnumerateBootEntries
NtEnumerateDriverEntries
NtEnumerateSystemEnvironmentValuesEx
NtEnumerateTransactionObject
NtExtendSection
NtFilterBootOption
NtFilterToken
NtFilterTokenEx
NtFlushBuffersFileEx
NtFlushInstallUILanguage
NtFlushInstructionCache
NtFlushKey
NtFlushProcessWriteBuffers
NtFlushVirtualMemory
NtFlushWriteBuffer
NtFreeUserPhysicalPages
NtFreezeRegistry
NtFreezeTransactions
NtGetCachedSigningLevel
NtGetCompleteWnfStateSubscription
NtGetContextThread
NtGetCurrentProcessorNumber
NtGetCurrentProcessorNumberEx
NtGetDevicePowerState
NtGetMUIRegistryInfo
NtGetNextProcess
NtGetNextThread
NtGetNlsSectionPtr
NtGetNotificationResourceManager
NtGetWriteWatch
NtImpersonateAnonymousToken
NtImpersonateThread
NtInitializeEnclave
NtInitializeNlsFiles
NtInitializeRegistry
NtInitiatePowerAction
NtIsSystemResumeAutomatic
NtIsUILanguageComitted
NtListenPort
NtLoadDriver
NtLoadEnclaveData
NtLoadKey
NtLoadKey2
NtLoadKeyEx
NtLockFile
NtLockProductActivationKeys
NtLockRegistryKey
NtLockVirtualMemory
NtMakePermanentObject
NtMakeTemporaryObject
NtManagePartition
NtMapCMFModule
NtMapUserPhysicalPages
NtModifyBootEntry
NtModifyDriverEntry
NtNotifyChangeDirectoryFile
NtNotifyChangeKey
NtNotifyChangeMultipleKeys
NtNotifyChangeSession
NtOpenEnlistment
NtOpenEventPair
NtOpenIoCompletion
NtOpenJobObject
NtOpenKeyEx
NtOpenKeyTransacted
NtOpenKeyTransactedEx
NtOpenKeyedEvent
NtOpenMutant
NtOpenObjectAuditAlarm
NtOpenPartition
NtOpenPrivateNamespace
NtOpenProcessToken
NtOpenRegistryTransaction
NtOpenResourceManager
NtOpenSemaphore
NtOpenSession
NtOpenSymbolicLinkObject
NtOpenThread
NtOpenTimer
NtOpenTransaction
NtOpenTransactionManager
NtPlugPlayControl
NtPrePrepareComplete
NtPrePrepareEnlistment
NtPrepareComplete
NtPrepareEnlistment
NtPrivilegeCheck
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtPropagationComplete
NtPropagationFailed
NtPulseEvent
NtQueryBootEntryOrder
NtQueryBootOptions
NtQueryDebugFilterState
NtQueryDirectoryObject
NtQueryDriverEntryOrder
NtQueryEaFile
NtQueryFullAttributesFile
NtQueryInformationAtom
NtQueryInformationEnlistment
NtQueryInformationJobObject
NtQueryInformationPort
NtQueryInformationResourceManager
NtQueryInformationTransaction
NtQueryInformationTransactionManager
NtQueryInformationWorkerFactory
NtQueryInstallUILanguage
NtQueryIntervalProfile
NtQueryIoCompletion
NtQueryLicenseValue
NtQueryMultipleValueKey
NtQueryMutant
NtQueryOpenSubKeys
NtQueryOpenSubKeysEx
NtQueryPortInformationProcess
NtQueryQuotaInformationFile
NtQuerySecurityAttributesToken
NtQuerySecurityObject
NtQuerySecurityPolicy
NtQuerySemaphore
NtQuerySymbolicLinkObject
NtQuerySystemEnvironmentValue
NtQuerySystemEnvironmentValueEx
NtQuerySystemInformationEx
NtQueryTimerResolution
NtQueryWnfStateData
NtQueryWnfStateNameInformation
NtQueueApcThreadEx
NtRaiseException
NtRaiseHardError
NtReadOnlyEnlistment
NtRecoverEnlistment
NtRecoverResourceManager
NtRecoverTransactionManager
NtRegisterProtocolAddressInformation
NtRegisterThreadTerminatePort
NtReleaseKeyedEvent
NtReleaseWorkerFactoryWorker
NtRemoveIoCompletionEx
NtRemoveProcessDebug
NtRenameKey
NtRenameTransactionManager
NtReplaceKey
NtReplacePartitionUnit
NtReplyWaitReplyPort
NtRequestPort
NtResetEvent
NtResetWriteWatch
NtRestoreKey
NtResumeProcess
NtRevertContainerImpersonation
NtRollbackComplete
NtRollbackEnlistment
NtRollbackRegistryTransaction
NtRollbackTransaction
NtRollforwardTransactionManager
NtSaveKey
NtSaveKeyEx
NtSaveMergedKeys
NtSecureConnectPort
NtSerializeBoot
NtSetBootEntryOrder
NtSetBootOptions
NtSetCachedSigningLevel
NtSetCachedSigningLevel2
NtSetContextThread
NtSetDebugFilterState
NtSetDefaultHardErrorPort
NtSetDefaultLocale
NtSetDefaultUILanguage
NtSetDriverEntryOrder
NtSetEaFile
NtSetHighEventPair
NtSetHighWaitLowEventPair
NtSetIRTimer
NtSetInformationDebugObject
NtSetInformationEnlistment
NtSetInformationJobObject
NtSetInformationKey
NtSetInformationResourceManager
NtSetInformationSymbolicLink
NtSetInformationToken
NtSetInformationTransaction
NtSetInformationTransactionManager
NtSetInformationVirtualMemory
NtSetInformationWorkerFactory
NtSetIntervalProfile
NtSetIoCompletion
NtSetIoCompletionEx
NtSetLdtEntries
NtSetLowEventPair
NtSetLowWaitHighEventPair
NtSetQuotaInformationFile
NtSetSecurityObject
NtSetSystemEnvironmentValue
NtSetSystemEnvironmentValueEx
NtSetSystemInformation
NtSetSystemPowerState
NtSetSystemTime
NtSetThreadExecutionState
NtSetTimer2
NtSetTimerEx
NtSetTimerResolution
NtSetUuidSeed
NtSetVolumeInformationFile
NtSetWnfProcessNotificationEvent
NtShutdownSystem
NtShutdownWorkerFactory
NtSignalAndWaitForSingleObject
NtSinglePhaseReject
NtStartProfile
NtStopProfile
NtSubscribeWnfStateChange
NtSuspendProcess
NtSuspendThread
NtSystemDebugControl
NtTerminateJobObject
NtTestAlert
NtThawRegistry
NtThawTransactions
NtTraceControl
NtTranslateFilePath
NtUmsThreadYield
NtUnloadDriver
NtUnloadKey
NtUnloadKey2
NtUnloadKeyEx
NtUnlockFile
NtUnlockVirtualMemory
NtUnmapViewOfSectionEx
NtUnsubscribeWnfStateChange
NtUpdateWnfStateData
NtVdmControl
NtWaitForAlertByThreadId
NtWaitForDebugEvent
NtWaitForKeyedEvent
NtWaitForWorkViaWorkerFactory
NtWaitLowEventPair
↧
↧

apisetschema.dll from windows 10 build 14352

June 8, 2016, 5:53 am
$
0
0
nothing new - only ext-ms-net-vpn-soh-l1-1-0 was added


api-ms-onecoreuap-print-render-l1-1-0printrenderapihost.dll
api-ms-onecoreuap-settingsync-status-l1-1-0settingsynccore.dll
api-ms-win-appmodel-identity-l1-2-0kernel.appcore.dll
api-ms-win-appmodel-runtime-internal-l1-1-2kernel.appcore.dll
api-ms-win-appmodel-runtime-l1-1-2kernel.appcore.dll
api-ms-win-appmodel-state-l1-1-2kernel.appcore.dll
api-ms-win-appmodel-state-l1-2-0kernel.appcore.dll
api-ms-win-appmodel-unlock-l1-1-0kernel.appcore.dll
api-ms-win-base-bootconfig-l1-1-0advapi32.dll
api-ms-win-base-util-l1-1-0advapi32.dll
api-ms-win-composition-redirection-l1-1-0dwmredir.dll
api-ms-win-composition-windowmanager-l1-1-0udwm.dll
api-ms-win-core-apiquery-l1-1-0ntdll.dll
api-ms-win-core-appcompat-l1-1-1kernelbase.dll
api-ms-win-core-appinit-l1-1-0kernel32.dllkernelbase.dll
api-ms-win-core-atoms-l1-1-0kernel32.dll
api-ms-win-core-bicltapi-l1-1-4bi.dll
api-ms-win-core-biplmapi-l1-1-5twinapi.appcore.dll
api-ms-win-core-biptcltapi-l1-1-4twinapi.appcore.dll
api-ms-win-core-calendar-l1-1-0kernel32.dll
api-ms-win-core-com-l1-1-1combase.dll
api-ms-win-core-com-l2-1-1coml2.dll
api-ms-win-core-com-midlproxystub-l1-1-0combase.dll
api-ms-win-core-com-private-l1-1-1combase.dll
api-ms-win-core-comm-l1-1-0kernelbase.dll
api-ms-win-core-console-ansi-l2-1-0kernel32.dll
api-ms-win-core-console-l1-1-0kernelbase.dll
api-ms-win-core-console-l2-1-0kernelbase.dll
api-ms-win-core-crt-l1-1-0ntdll.dll
api-ms-win-core-crt-l2-1-0kernelbase.dll
api-ms-win-core-datetime-l1-1-2kernelbase.dll
api-ms-win-core-debug-l1-1-2kernelbase.dll
api-ms-win-core-debug-minidump-l1-1-0dbgcore.dll
api-ms-win-core-delayload-l1-1-1kernelbase.dll
api-ms-win-core-enclave-l1-1-0kernelbase.dll
api-ms-win-core-errorhandling-l1-1-3kernelbase.dll
api-ms-win-core-featurestaging-l1-1-0shcore.dll
api-ms-win-core-fibers-l1-1-1kernelbase.dll
api-ms-win-core-fibers-l2-1-1kernelbase.dll
api-ms-win-core-file-ansi-l1-1-0kernel32.dll
api-ms-win-core-file-ansi-l2-1-0kernel32.dll
api-ms-win-core-file-l1-1-1kernelbase.dll
api-ms-win-core-file-l1-2-2kernelbase.dll
api-ms-win-core-file-l2-1-2kernelbase.dll
api-ms-win-core-firmware-l1-1-0kernel32.dll
api-ms-win-core-guard-l1-1-0kernelbase.dll
api-ms-win-core-handle-l1-1-0kernelbase.dll
api-ms-win-core-heap-l1-1-0kernelbase.dll
api-ms-win-core-heap-l1-2-0kernelbase.dll
api-ms-win-core-heap-l2-1-0kernelbase.dll
api-ms-win-core-heap-obsolete-l1-1-0kernel32.dll
api-ms-win-core-interlocked-l1-1-1kernelbase.dll
api-ms-win-core-interlocked-l1-2-0kernelbase.dll
api-ms-win-core-io-l1-1-1kernel32.dllkernelbase.dll
api-ms-win-core-job-l1-1-0kernelbase.dll
api-ms-win-core-job-l2-1-1kernel32.dll
api-ms-win-core-kernel32-legacy-ansi-l1-1-0kernel32.dll
api-ms-win-core-kernel32-legacy-l1-1-5kernel32.dll
api-ms-win-core-kernel32-private-l1-1-2kernel32.dll
api-ms-win-core-largeinteger-l1-1-0kernelbase.dll
api-ms-win-core-libraryloader-l1-1-1kernelbase.dll
api-ms-win-core-libraryloader-l1-2-2kernelbase.dll
api-ms-win-core-libraryloader-l2-1-0kernelbase.dll
api-ms-win-core-libraryloader-private-l1-1-0kernelbase.dll
api-ms-win-core-localization-ansi-l1-1-0kernel32.dll
api-ms-win-core-localization-l1-1-0kernelbase.dll
api-ms-win-core-localization-l1-2-2kernelbase.dll
api-ms-win-core-localization-l2-1-0kernelbase.dll
api-ms-win-core-localization-obsolete-l1-1-0kernelbase.dll
api-ms-win-core-localization-obsolete-l1-2-0kernelbase.dll
api-ms-win-core-localization-obsolete-l1-3-0kernelbase.dll
api-ms-win-core-localization-private-l1-1-0kernelbase.dll
api-ms-win-core-localregistry-l1-1-0kernelbase.dll
api-ms-win-core-marshal-l1-1-0combase.dll
api-ms-win-core-memory-l1-1-3kernelbase.dll
api-ms-win-core-misc-l1-1-0kernelbase.dll
api-ms-win-core-multipleproviderrouter-l1-1-0mpr.dll
api-ms-win-core-namedpipe-ansi-l1-1-1kernel32.dll
api-ms-win-core-namedpipe-l1-1-0kernelbase.dll
api-ms-win-core-namedpipe-l1-2-2kernelbase.dll
api-ms-win-core-namespace-ansi-l1-1-0kernel32.dll
api-ms-win-core-namespace-l1-1-0kernelbase.dll
api-ms-win-core-normalization-l1-1-0kernelbase.dll
api-ms-win-core-path-l1-1-0kernelbase.dll
api-ms-win-core-perfcounters-l1-1-0kernelbase.dll
api-ms-win-core-privateprofile-l1-1-1kernel32.dll
api-ms-win-core-processenvironment-ansi-l1-1-0kernel32.dll
api-ms-win-core-processenvironment-l1-1-1kernelbase.dll
api-ms-win-core-processenvironment-l1-2-0kernelbase.dll
api-ms-win-core-processsecurity-l1-1-0kernel32.dllkernelbase.dll
api-ms-win-core-processsnapshot-l1-1-0kernelbase.dll
api-ms-win-core-processthreads-l1-1-3kernel32.dllkernelbase.dll
api-ms-win-core-processtopology-l1-1-0kernelbase.dll
api-ms-win-core-processtopology-l1-2-0kernelbase.dll
api-ms-win-core-processtopology-obsolete-l1-1-0kernel32.dll
api-ms-win-core-processtopology-private-l1-1-0kernelbase.dll
api-ms-win-core-profile-l1-1-0kernelbase.dll
api-ms-win-core-psapi-ansi-l1-1-0kernelbase.dll
api-ms-win-core-psapi-l1-1-0kernelbase.dll
api-ms-win-core-psapi-obsolete-l1-1-0kernelbase.dll
api-ms-win-core-psapiansi-l1-1-0kernelbase.dll
api-ms-win-core-psm-app-l1-1-0twinapi.appcore.dll
api-ms-win-core-psm-appnotify-l1-1-0twinapi.appcore.dll
api-ms-win-core-psm-info-l1-1-1appsruprov.dll
api-ms-win-core-psm-key-l1-1-1kernelbase.dll
api-ms-win-core-psm-plm-l1-1-3twinapi.appcore.dll
api-ms-win-core-psm-plm-l1-2-0twinapi.appcore.dll
api-ms-win-core-psm-rtimer-l1-1-1twinapi.appcore.dll
api-ms-win-core-psm-tc-l1-1-1twinapi.appcore.dll
api-ms-win-core-quirks-l1-1-1kernelbase.dll
api-ms-win-core-realtime-l1-1-1kernelbase.dll
api-ms-win-core-registry-l1-1-1kernelbase.dll
api-ms-win-core-registry-l2-1-0advapi32.dll
api-ms-win-core-registry-l2-2-0advapi32.dll
api-ms-win-core-registry-private-l1-1-0advapi32.dll
api-ms-win-core-registryuserspecific-l1-1-0kernelbase.dll
api-ms-win-core-rtlsupport-l1-1-1ntdll.dll
api-ms-win-core-rtlsupport-l1-2-0ntdll.dll
api-ms-win-core-shlwapi-legacy-l1-1-0kernelbase.dll
api-ms-win-core-shlwapi-obsolete-l1-1-0kernelbase.dll
api-ms-win-core-shlwapi-obsolete-l1-2-0kernelbase.dll
api-ms-win-core-shutdown-ansi-l1-1-0advapi32.dll
api-ms-win-core-shutdown-l1-1-1advapi32.dll
api-ms-win-core-sidebyside-ansi-l1-1-0kernel32.dll
api-ms-win-core-sidebyside-l1-1-0kernelbase.dll
api-ms-win-core-slapi-l1-1-0clipc.dll
api-ms-win-core-string-l1-1-0kernelbase.dll
api-ms-win-core-string-l2-1-1kernelbase.dll
api-ms-win-core-string-obsolete-l1-1-1kernel32.dll
api-ms-win-core-stringansi-l1-1-0kernelbase.dll
api-ms-win-core-stringloader-l1-1-1kernelbase.dll
api-ms-win-core-synch-ansi-l1-1-0kernel32.dll
api-ms-win-core-synch-l1-1-1kernelbase.dll
api-ms-win-core-synch-l1-2-1kernelbase.dll
api-ms-win-core-sysinfo-l1-1-1kernelbase.dll
api-ms-win-core-sysinfo-l1-2-3kernelbase.dll
api-ms-win-core-sysinfo-l2-1-0advapi32.dll
api-ms-win-core-systemtopology-l1-1-1kernelbase.dll
api-ms-win-core-textinput-client-l1-1-0textinputframework.dll
api-ms-win-core-threadpool-l1-1-0kernelbase.dll
api-ms-win-core-threadpool-l1-2-0kernelbase.dll
api-ms-win-core-threadpool-legacy-l1-1-0kernelbase.dll
api-ms-win-core-threadpool-private-l1-1-0kernelbase.dll
api-ms-win-core-timezone-l1-1-0kernelbase.dll
api-ms-win-core-timezone-private-l1-1-0kernelbase.dll
api-ms-win-core-toolhelp-l1-1-1kernel32.dll
api-ms-win-core-ums-l1-1-0kernel32.dll
api-ms-win-core-url-l1-1-0kernelbase.dll
api-ms-win-core-util-l1-1-1kernel32.dllkernelbase.dll
api-ms-win-core-version-l1-1-1kernelbase.dll
api-ms-win-core-version-private-l1-1-0kernelbase.dll
api-ms-win-core-versionansi-l1-1-1kernelbase.dll
api-ms-win-core-windowsceip-l1-1-0kernelbase.dll
api-ms-win-core-windowserrorreporting-l1-1-0kernelbase.dll
api-ms-win-core-winrt-error-l1-1-1combase.dll
api-ms-win-core-winrt-errorprivate-l1-1-1combase.dll
api-ms-win-core-winrt-l1-1-0combase.dll
api-ms-win-core-winrt-propertysetprivate-l1-1-1wintypes.dll
api-ms-win-core-winrt-registration-l1-1-0combase.dll
api-ms-win-core-winrt-robuffer-l1-1-0wintypes.dll
api-ms-win-core-winrt-roparameterizediid-l1-1-0combase.dll
api-ms-win-core-winrt-string-l1-1-1combase.dll
api-ms-win-core-wow64-l1-1-1kernelbase.dll
api-ms-win-core-xstate-l1-1-2ntdll.dll
api-ms-win-core-xstate-l2-1-0kernelbase.dll
api-ms-win-crt-conio-l1-1-0ucrtbase.dll
api-ms-win-crt-convert-l1-1-0ucrtbase.dll
api-ms-win-crt-environment-l1-1-0ucrtbase.dll
api-ms-win-crt-filesystem-l1-1-0ucrtbase.dll
api-ms-win-crt-heap-l1-1-0ucrtbase.dll
api-ms-win-crt-locale-l1-1-0ucrtbase.dll
api-ms-win-crt-math-l1-1-0ucrtbase.dll
api-ms-win-crt-multibyte-l1-1-0ucrtbase.dll
api-ms-win-crt-private-l1-1-0ucrtbase.dll
api-ms-win-crt-process-l1-1-0ucrtbase.dll
api-ms-win-crt-runtime-l1-1-0ucrtbase.dll
api-ms-win-crt-stdio-l1-1-0ucrtbase.dll
api-ms-win-crt-string-l1-1-0ucrtbase.dll
api-ms-win-crt-time-l1-1-0ucrtbase.dll
api-ms-win-crt-utility-l1-1-0ucrtbase.dll
api-ms-win-deprecated-apis-obsolete-l1-1-0kernelbase.dll
api-ms-win-devices-config-l1-1-1cfgmgr32.dll
api-ms-win-devices-query-l1-1-1cfgmgr32.dll
api-ms-win-devices-swdevice-l1-1-1cfgmgr32.dll
api-ms-win-downlevel-advapi32-l1-1-1kernelbase.dll
api-ms-win-downlevel-advapi32-l2-1-1sechost.dll
api-ms-win-downlevel-advapi32-l3-1-0ntmarta.dll
api-ms-win-downlevel-advapi32-l4-1-0advapi32.dll
api-ms-win-downlevel-kernel32-l1-1-0kernelbase.dll
api-ms-win-downlevel-kernel32-l2-1-0kernel32.dll
api-ms-win-downlevel-normaliz-l1-1-0kernelbase.dll
api-ms-win-downlevel-ole32-l1-1-1combase.dll
api-ms-win-downlevel-shell32-l1-1-0shcore.dll
api-ms-win-downlevel-shlwapi-l1-1-1kernelbase.dll
api-ms-win-downlevel-shlwapi-l2-1-1shcore.dll
api-ms-win-downlevel-user32-l1-1-1kernelbase.dll
api-ms-win-downlevel-version-l1-1-0kernelbase.dll
api-ms-win-dwmapi-l1-1-0dwmapi.dll
api-ms-win-dx-d3dkmt-l1-1-2gdi32.dll
api-ms-win-eventing-classicprovider-l1-1-0kernelbase.dll
api-ms-win-eventing-consumer-l1-1-0sechost.dll
api-ms-win-eventing-controller-l1-1-0sechost.dll
api-ms-win-eventing-legacy-l1-1-0advapi32.dll
api-ms-win-eventing-obsolete-l1-1-0sechost.dll
api-ms-win-eventing-provider-l1-1-0kernelbase.dll
api-ms-win-eventing-tdh-l1-1-0tdh.dllmintdh.dll
api-ms-win-eventlog-legacy-l1-1-0advapi32.dll
api-ms-win-eventlog-private-l1-1-0advapi32.dll
api-ms-win-gaming-tcui-l1-1-2gamingtcui.dll
api-ms-win-gdi-dpiinfo-l1-1-0gdi32.dll
api-ms-win-gdi-internal-uap-l1-1-0gdi32full.dll
api-ms-win-http-time-l1-1-0kernelbase.dll
api-ms-win-legacy-shlwapi-l1-1-0kernelbase.dll
api-ms-win-mm-joystick-l1-1-0winmmbase.dll
api-ms-win-mm-mci-l1-1-0winmm.dll
api-ms-win-mm-misc-l1-1-1winmmbase.dll
api-ms-win-mm-misc-l2-1-0winmm.dll
api-ms-win-mm-mme-l1-1-0winmmbase.dll
api-ms-win-mm-playsound-l1-1-0winmm.dll
api-ms-win-mm-time-l1-1-0kernel32.dll
api-ms-win-net-isolation-l1-1-1firewallapi.dll
api-ms-win-networking-interfacecontexts-l1-1-0ondemandconnroutehelper.dll
api-ms-win-ntuser-ie-message-l1-1-0user32.dll
api-ms-win-ntuser-ie-window-l1-1-0user32.dll
api-ms-win-ntuser-ie-wmpointer-l1-1-0user32.dll
api-ms-win-ntuser-rectangle-l1-1-0user32.dll
api-ms-win-ntuser-sysparams-l1-1-0user32.dll
api-ms-win-obsolete-localization-l1-1-0kernelbase.dll
api-ms-win-obsolete-psapi-l1-1-0kernelbase.dll
api-ms-win-obsolete-shlwapi-l1-1-0kernelbase.dll
api-ms-win-ole32-ie-l1-1-0ole32.dll
api-ms-win-oobe-notification-l1-1-0kernel32.dll
api-ms-win-perf-legacy-l1-1-0advapi32.dll
api-ms-win-power-base-l1-1-0powrprof.dll
api-ms-win-power-limitsmanagement-l1-1-0powrprof.dll
api-ms-win-power-setting-l1-1-0powrprof.dll
api-ms-win-ro-typeresolution-l1-1-0wintypes.dll
api-ms-win-rtcore-ntuser-clipboard-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-draw-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-powermanagement-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-private-l1-1-4user32.dll
api-ms-win-rtcore-ntuser-shell-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-synch-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-window-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-winevent-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-wmpointer-l1-1-3user32.dll
api-ms-win-rtcore-ole32-clipboard-l1-1-1ole32.dll
api-ms-win-security-accesshlpr-l1-1-0sechost.dll
api-ms-win-security-activedirectoryclient-l1-1-1kernelbase.dll
api-ms-win-security-appcontainer-l1-1-0kernelbase.dll
api-ms-win-security-audit-l1-1-1sechost.dll
api-ms-win-security-base-ansi-l1-1-0advapi32.dll
api-ms-win-security-base-l1-1-1kernelbase.dll
api-ms-win-security-base-l1-2-1kernelbase.dll
api-ms-win-security-base-private-l1-1-1kernelbase.dll
api-ms-win-security-capability-l1-1-0sechost.dll
api-ms-win-security-cpwl-l1-1-0advapi32.dll
api-ms-win-security-credentials-l1-1-0sechost.dll
api-ms-win-security-credentials-l2-1-0sechost.dll
api-ms-win-security-cryptoapi-l1-1-0cryptsp.dll
api-ms-win-security-grouppolicy-l1-1-0kernelbase.dll
api-ms-win-security-logon-l1-1-1advapi32.dll
api-ms-win-security-lsalookup-ansi-l2-1-0advapi32.dll
api-ms-win-security-lsalookup-l1-1-2sechost.dll
api-ms-win-security-lsalookup-l2-1-1advapi32.dll
api-ms-win-security-lsapolicy-l1-1-1sechost.dll
api-ms-win-security-provider-ansi-l1-1-0advapi32.dll
api-ms-win-security-provider-l1-1-0ntmarta.dll
api-ms-win-security-sddl-ansi-l1-1-0advapi32.dll
api-ms-win-security-sddl-l1-1-0sechost.dll
api-ms-win-security-sddlparsecond-l1-1-0sechost.dll
api-ms-win-security-systemfunctions-l1-1-0advapi32.dll
api-ms-win-security-trustee-l1-1-1advapi32.dll
api-ms-win-service-core-ansi-l1-1-1advapi32.dll
api-ms-win-service-core-l1-1-2sechost.dll
api-ms-win-service-management-l1-1-0sechost.dll
api-ms-win-service-management-l2-1-0sechost.dll
api-ms-win-service-private-l1-1-2sechost.dll
api-ms-win-service-winsvc-l1-1-0sechost.dll
api-ms-win-service-winsvc-l1-2-0sechost.dll
api-ms-win-shcore-comhelpers-l1-1-0shcore.dll
api-ms-win-shcore-obsolete-l1-1-0shcore.dll
api-ms-win-shcore-registry-l1-1-1shcore.dll
api-ms-win-shcore-scaling-l1-1-2shcore.dll
api-ms-win-shcore-stream-l1-1-0shcore.dll
api-ms-win-shcore-stream-winrt-l1-1-0shcore.dll
api-ms-win-shcore-sysinfo-l1-1-0shcore.dll
api-ms-win-shcore-thread-l1-1-0shcore.dll
api-ms-win-shcore-unicodeansi-l1-1-0shcore.dll
api-ms-win-shell-associations-l1-1-0windows.storage.dll
api-ms-win-shell-changenotify-l1-1-0windows.storage.dll
api-ms-win-shell-dataobject-l1-1-0windows.storage.dll
api-ms-win-shell-namespace-l1-1-0windows.storage.dll
api-ms-win-shell-shdirectory-l1-1-0shcore.dll
api-ms-win-shell-shellcom-l1-1-0kernelbase.dll
api-ms-win-shell-shellfolders-l1-1-0windows.storage.dll
api-ms-win-shlwapi-ie-l1-1-0shlwapi.dll
api-ms-win-shlwapi-winrt-storage-l1-1-1shlwapi.dll
api-ms-win-storage-exports-external-l1-1-0windows.storage.dll
api-ms-win-storage-exports-internal-l1-1-0windows.storage.dll
api-ms-win-winrt-search-folder-l1-1-0windows.storage.search.dll
ext-ms-net-eap-sim-l1-1-0eapsimextdesktop.dll
ext-ms-net-vpn-soh-l1-1-0vpnsohdesktop.dll
ext-ms-onecore-appdefaults-l1-1-0windows.storage.dll
ext-ms-onecore-appmodel-plm-l1-1-0execmodelclient.dll
ext-ms-onecore-appmodel-staterepository-internal-l1-1-0windows.staterepositoryclient.dll
ext-ms-onecore-appmodel-veventdispatcher-l1-1-0veeventdispatcher.dll
ext-ms-onecore-dcomp-l1-1-0dcomp.dll
ext-ms-onecore-hlink-l1-1-0hlink.dll
ext-ms-win-advapi32-auth-l1-1-0advapi32.dll
ext-ms-win-advapi32-encryptedfile-l1-1-1advapi32.dll
ext-ms-win-advapi32-eventlog-ansi-l1-1-0advapi32.dll
ext-ms-win-advapi32-eventlog-l1-1-1advapi32.dll
ext-ms-win-advapi32-hwprof-l1-1-0advapi32.dll
ext-ms-win-advapi32-idletask-l1-1-0advapi32.dll
ext-ms-win-advapi32-lsa-l1-1-1advapi32.dll
ext-ms-win-advapi32-msi-l1-1-0advapi32.dll
ext-ms-win-advapi32-npusername-l1-1-0advapi32.dll
ext-ms-win-advapi32-ntmarta-l1-1-0advapi32.dll
ext-ms-win-advapi32-psm-app-l1-1-0twinapi.appcore.dll
ext-ms-win-advapi32-registry-l1-1-0advapi32.dll
ext-ms-win-advapi32-safer-l1-1-0advapi32.dll
ext-ms-win-advapi32-shutdown-l1-1-0advapi32.dll
ext-ms-win-appcompat-apphelp-l1-1-0apphelp.dll
ext-ms-win-appmodel-daxcore-l1-1-0daxexec.dll
ext-ms-win-appmodel-opc-l1-1-0opcservices.dll
ext-ms-win-appmodel-state-ext-l1-2-0kernel.appcore.dll
ext-ms-win-appxdeploymentclient-appxdeploy-l1-1-0appxdeploymentclient.dll
ext-ms-win-appxdeploymentclient-appxdeployonecore-l1-1-0appxdeploymentclient.dll
ext-ms-win-audiocore-coreaudiopolicymanager-l1-1-0coreaudiopolicymanagerext.dll
ext-ms-win-authz-claimpolicies-l1-1-0authz.dll
ext-ms-win-authz-context-l1-1-0authz.dll
ext-ms-win-authz-remote-l1-1-0logoncli.dll
ext-ms-win-biometrics-winbio-core-l1-1-1winbio.dll
ext-ms-win-biometrics-winbio-l1-1-0winbio.dll
ext-ms-win-biometrics-winbio-l1-2-0winbioext.dll
ext-ms-win-biometrics-winbio-l1-3-0winbioext.dll
ext-ms-win-bluetooth-apis-l1-1-0bluetoothapis.dll
ext-ms-win-bluetooth-apis-private-l1-1-0bluetoothapis.dll
ext-ms-win-branding-winbrand-l1-1-0winbrand.dll
ext-ms-win-casting-lockscreen-l1-1-0castingshellext.dll
ext-ms-win-casting-shell-l1-1-0castingshellext.dll
ext-ms-win-cluster-clusapi-l1-1-2clusapi.dll
ext-ms-win-cluster-resutils-l1-1-1resutils.dll
ext-ms-win-cmd-util-l1-1-0cmdext.dll
ext-ms-win-cng-rng-l1-1-1bcryptprimitives.dll
ext-ms-win-com-clbcatq-l1-1-0clbcatq.dll
ext-ms-win-com-coml2-l1-1-1coml2.dll
ext-ms-win-com-ole32-l1-1-4ole32.dll
ext-ms-win-com-psmregister-l1-1-0kernel.appcore.dll
ext-ms-win-com-psmregister-l1-2-1kernel.appcore.dll
ext-ms-win-composition-ghost-l1-1-0dwmghost.dll
ext-ms-win-composition-init-l1-1-0dwminit.dll
ext-ms-win-compositor-hosting-l1-1-0user32.dll
ext-ms-win-core-psm-service-l1-1-3psmserviceexthost.dll
ext-ms-win-core-resourcemanager-l1-1-0rmclient.dll
ext-ms-win-core-resourcemanager-l1-2-0rmclient.dll
ext-ms-win-core-resourcepolicy-l1-1-1resourcepolicyclient.dll
ext-ms-win-core-resourcepolicyserver-l1-1-0resourcepolicyserver.dll
ext-ms-win-core-storelicensing-l1-1-0licensemanagerapi.dll
ext-ms-win-coreui-navshutdown-l1-1-0navshutdown.dll
ext-ms-win-desktopappx-l1-1-0daxexec.dll
ext-ms-win-devmgmt-dm-l1-1-0dmapisetextimpldesktop.dll
ext-ms-win-devmgmt-policy-l1-1-0policymanager.dll
ext-ms-win-direct2d-desktop-l1-1-0direct2ddesktop.dll
ext-ms-win-domainjoin-netjoin-l1-1-0netjoin.dll
ext-ms-win-dwmapi-ext-l1-1-0dwmapi.dll
ext-ms-win-dwmapidxgi-ext-l1-1-0dwmapi.dll
ext-ms-win-dx-d3d9-l1-1-0d3d9.dll
ext-ms-win-dx-ddraw-l1-1-0ddraw.dll
ext-ms-win-edputil-policy-l1-1-0edputil.dll
ext-ms-win-els-elscore-l1-1-0elscore.dll
ext-ms-win-eventing-rundown-l1-1-0etwrundown.dll
ext-ms-win-eventing-tdh-ext-l1-1-0tdh.dll
ext-ms-win-familysafety-childaccount-l1-1-0familysafetyext.dll
ext-ms-win-feclient-encryptedfile-l1-1-0feclient.dll
ext-ms-win-firewallapi-webproxy-l1-1-1firewallapi.dll
ext-ms-win-font-fontgroups-l1-1-0fontgroupsoverride.dll
ext-ms-win-fs-clfs-l1-1-0clfs.sys
ext-ms-win-fs-vssapi-l1-1-0vssapi.dll
ext-ms-win-fsutilext-ifsutil-l1-1-0fsutilext.dll
ext-ms-win-fsutilext-ulib-l1-1-0fsutilext.dll
ext-ms-win-fveapi-query-l1-1-0fveapi.dll
ext-ms-win-gaming-xblgamesave-l1-1-0xblgamesaveext.dll
ext-ms-win-gaming-xinput-l1-1-0xinputuap.dll
ext-ms-win-gdi-clipping-l1-1-0gdi32full.dll
ext-ms-win-gdi-dc-create-l1-1-2gdi32full.dll
ext-ms-win-gdi-dc-l1-2-1gdi32full.dll
ext-ms-win-gdi-devcaps-l1-1-0gdi32full.dll
ext-ms-win-gdi-draw-l1-1-3gdi32full.dll
ext-ms-win-gdi-font-l1-1-3gdi32full.dll
ext-ms-win-gdi-internal-desktop-l1-1-0gdi32full.dll
ext-ms-win-gdi-metafile-l1-1-2gdi32full.dll
ext-ms-win-gdi-path-l1-1-0gdi32full.dll
ext-ms-win-gdi-print-l1-1-0gdi32full.dll
ext-ms-win-gdi-private-l1-1-0gdi32full.dll
ext-ms-win-gdi-render-l1-1-0gdi32.dll
ext-ms-win-gdi-rgn-l1-1-0gdi32full.dll
ext-ms-win-gdi-wcs-l1-1-0gdi32full.dll
ext-ms-win-globalization-collation-l1-1-0globcollationhost.dll
ext-ms-win-globalization-input-l1-1-1globinputhost.dll
ext-ms-win-gpapi-grouppolicy-l1-1-0gpapi.dll
ext-ms-win-gpsvc-grouppolicy-l1-1-0gpsvc.dll
ext-ms-win-gui-dui70-l1-1-0dui70.dll
ext-ms-win-gui-ieui-l1-1-0ieui.dll
ext-ms-win-gui-uxinit-l1-1-0uxinit.dll
ext-ms-win-imm-l1-1-1imm32.dll
ext-ms-win-kernel32-appcompat-l1-1-0kernel32.dll
ext-ms-win-kernel32-datetime-l1-1-0kernel32.dll
ext-ms-win-kernel32-elevation-l1-1-0kernel32.dll
ext-ms-win-kernel32-errorhandling-l1-1-0kernel32.dllfaultrep.dll
ext-ms-win-kernel32-file-l1-1-0kernel32.dll
ext-ms-win-kernel32-localization-l1-1-0kernel32.dll
ext-ms-win-kernel32-package-current-l1-1-0kernel.appcore.dll
ext-ms-win-kernel32-package-l1-1-2kernel.appcore.dll
ext-ms-win-kernel32-quirks-l1-1-1kernel32.dll
ext-ms-win-kernel32-registry-l1-1-0kernel32.dll
ext-ms-win-kernel32-sidebyside-l1-1-0kernel32.dll
ext-ms-win-kernel32-transacted-l1-1-0kernel32.dll
ext-ms-win-kernel32-windowserrorreporting-l1-1-1kernel32.dll
ext-ms-win-kernelbase-processthread-l1-1-0kernel32.dll
ext-ms-win-media-avi-l1-1-0avifil32.dll
ext-ms-win-mf-vfw-l1-1-0mfvfw.dll
ext-ms-win-mininput-systeminputhost-l1-1-0ism32k.dll
ext-ms-win-mm-msacm-l1-1-0msacm32.dll
ext-ms-win-mm-pehelper-l1-1-0mf.dll
ext-ms-win-moderncore-win32k-base-ntgdi-l1-1-0win32kfull.sys
ext-ms-win-moderncore-win32k-base-ntuser-l1-1-0win32kfull.sys
ext-ms-win-moderncore-win32k-base-sysentry-l1-1-0win32k.sys
ext-ms-win-mpr-multipleproviderrouter-l1-1-0mprext.dll
ext-ms-win-mrmcorer-resmanager-l1-1-0mrmcorer.dll
ext-ms-win-msa-ui-l1-1-0msauserext.dll
ext-ms-win-msa-user-l1-1-1msauserext.dll
ext-ms-win-msi-misc-l1-1-0msi.dll
ext-ms-win-msiltcfg-msi-l1-1-0msiltcfg.dll
ext-ms-win-msimg-draw-l1-1-0msimg32.dll
ext-ms-win-net-cmvpn-l1-1-0cmintegrator.dll
ext-ms-win-net-httpproxyext-l1-1-0httpprxc.dll
ext-ms-win-net-isoext-l1-1-0firewallapi.dll
ext-ms-win-netprovision-netprovfw-l1-1-0netprovfw.dll
ext-ms-win-networking-nlaapi-l1-1-0nlaapi.dll
ext-ms-win-networking-radiomonitor-l1-1-0windows.devices.radios.dll
ext-ms-win-networking-wcmapi-l1-1-0wcmapi.dll
ext-ms-win-networking-winipsec-l1-1-0winipsec.dll
ext-ms-win-networking-wlanapi-l1-1-0wlanapi.dll
ext-ms-win-newdev-config-l1-1-1newdev.dll
ext-ms-win-ntdsa-activedirectoryserver-l1-1-0ntdsa.dll
ext-ms-win-ntdsapi-activedirectoryclient-l1-1-1ntdsapi.dll
ext-ms-win-ntos-clipsp-l1-1-0clipsp.sys
ext-ms-win-ntos-kcminitcfg-l1-1-0cmimcext.sys
ext-ms-win-ntos-tm-l1-1-0tm.sys
ext-ms-win-ntos-ucode-l1-1-0ntosext.sys
ext-ms-win-ntos-werkernel-l1-1-0werkernel.sys
ext-ms-win-ntuser-caret-l1-1-0user32.dll
ext-ms-win-ntuser-chartranslation-l1-1-0user32.dll
ext-ms-win-ntuser-dc-access-ext-l1-1-0user32.dll
ext-ms-win-ntuser-dialogbox-l1-1-2user32.dll
ext-ms-win-ntuser-draw-l1-1-2user32.dll
ext-ms-win-ntuser-gui-l1-1-1user32.dll
ext-ms-win-ntuser-gui-l1-2-0user32.dll
ext-ms-win-ntuser-gui-l1-3-0user32.dll
ext-ms-win-ntuser-keyboard-l1-1-1user32.dll
ext-ms-win-ntuser-keyboard-l1-2-0user32.dll
ext-ms-win-ntuser-keyboard-l1-3-0user32.dll
ext-ms-win-ntuser-menu-l1-1-3user32.dll
ext-ms-win-ntuser-message-l1-1-3user32.dll
ext-ms-win-ntuser-misc-l1-1-0user32.dll
ext-ms-win-ntuser-misc-l1-2-0user32.dll
ext-ms-win-ntuser-misc-l1-3-0user32.dll
ext-ms-win-ntuser-misc-l1-5-1user32.dll
ext-ms-win-ntuser-mouse-l1-1-0user32.dll
ext-ms-win-ntuser-powermanagement-l1-1-0user32.dll
ext-ms-win-ntuser-private-l1-1-1user32.dll
ext-ms-win-ntuser-private-l1-2-0user32.dll
ext-ms-win-ntuser-private-l1-3-1user32.dll
ext-ms-win-ntuser-rectangle-ext-l1-1-0user32.dll
ext-ms-win-ntuser-rim-l1-1-0user32.dll
ext-ms-win-ntuser-rotationmanager-l1-1-1user32.dll
ext-ms-win-ntuser-server-l1-1-0user32.dll
ext-ms-win-ntuser-string-l1-1-0user32.dll
ext-ms-win-ntuser-synch-l1-1-0user32.dll
ext-ms-win-ntuser-sysparams-ext-l1-1-0user32.dll
ext-ms-win-ntuser-touch-hittest-l1-1-0user32.dll
ext-ms-win-ntuser-uicontext-ext-l1-1-0user32.dll
ext-ms-win-ntuser-window-l1-1-4user32.dll
ext-ms-win-ntuser-windowclass-l1-1-2user32.dll
ext-ms-win-ntuser-windowstation-ansi-l1-1-1user32.dll
ext-ms-win-ntuser-windowstation-l1-1-2user32.dll
ext-ms-win-ole32-bindctx-l1-1-0ole32.dll
ext-ms-win-ole32-ie-ext-l1-1-0ole32.dll
ext-ms-win-ole32-oleautomation-l1-1-0ole32.dll
ext-ms-win-oleacc-l1-1-1oleacc.dll
ext-ms-win-pinenrollment-enrollment-l1-1-0pinenrollmenthelper.dll
ext-ms-win-printer-prntvpt-l1-1-0prntvpt.dll
ext-ms-win-printer-winspool-l1-1-3winspool.drv
ext-ms-win-profile-extender-l1-1-0userenv.dll
ext-ms-win-profile-profsvc-l1-1-0profsvcext.dll
ext-ms-win-profile-userenv-l1-1-1profext.dll
ext-ms-win-provisioning-platform-l1-1-0provplatformdesktop.dll
ext-ms-win-ras-rasapi32-l1-1-1rasapi32.dll
ext-ms-win-ras-rasdlg-l1-1-0rasdlg.dll
ext-ms-win-ras-rasman-l1-1-0rasman.dll
ext-ms-win-ras-tapi32-l1-1-0tapi32.dll
ext-ms-win-raschapext-eap-l1-1-0raschapext.dll
ext-ms-win-rastlsext-eap-l1-1-0rastlsext.dll
ext-ms-win-rdr-davhlpr-l1-1-0davhlpr.dll
ext-ms-win-reinfo-query-l1-1-0reinfo.dll
ext-ms-win-resourcemanager-gamemode-l1-1-0rmclient.dll
ext-ms-win-ro-typeresolution-l1-1-0wintypes.dll
ext-ms-win-rometadata-dispenser-l1-1-0rometadata.dll
ext-ms-win-rpc-firewallportuse-l1-1-0rpcrtremote.dll
ext-ms-win-rpc-ssl-l1-1-0rpcrtremote.dll
ext-ms-win-rtcore-gdi-devcaps-l1-1-1gdi32.dll
ext-ms-win-rtcore-gdi-object-l1-1-0gdi32.dll
ext-ms-win-rtcore-gdi-rgn-l1-1-1gdi32.dll
ext-ms-win-rtcore-ntuser-cursor-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-dc-access-l1-1-1user32.dll
ext-ms-win-rtcore-ntuser-dpi-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-dpi-l1-2-0user32.dll
ext-ms-win-rtcore-ntuser-iam-l1-1-1user32.dll
ext-ms-win-rtcore-ntuser-inputintercept-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-integration-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-rawinput-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-synch-ext-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-syscolors-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-sysparams-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-window-ext-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-wmpointer-l1-1-0user32.dll
ext-ms-win-samsrv-accountstore-l1-1-0samsrv.dll
ext-ms-win-scesrv-server-l1-1-0scesrv.dll
ext-ms-win-search-folder-l1-1-0searchfolder.dll
ext-ms-win-secur32-translatename-l1-1-1secur32.dll
ext-ms-win-security-authbrokerui-l1-1-0authbrokerui.dll
ext-ms-win-security-capauthz-l1-1-0capauthz.dll
ext-ms-win-security-credui-internal-l1-1-0wincredui.dll
ext-ms-win-security-credui-l1-1-1credui.dll
ext-ms-win-security-cryptui-l1-1-1cryptui.dll
ext-ms-win-security-efs-l1-1-0efsext.dll
ext-ms-win-security-efswrt-l1-1-1efswrt.dll
ext-ms-win-security-kerberos-l1-1-0kerberos.dll
ext-ms-win-security-shutdownext-l1-1-0shutdownext.dll
ext-ms-win-security-srp-l1-1-1srpapi.dll
ext-ms-win-security-tokenbrokerui-l1-1-0tokenbrokerui.dll
ext-ms-win-security-vaultcli-l1-1-1vaultcli.dll
ext-ms-win-security-winscard-l1-1-0winscard.dll
ext-ms-win-sensors-core-private-l1-1-1sensorsnativeapi.dll
ext-ms-win-sensors-utilities-private-l1-1-1sensorsutilsv2.dll
ext-ms-win-session-userinit-l1-1-0userinitext.dll
ext-ms-win-session-usermgr-l1-1-0usermgrcli.dll
ext-ms-win-session-usertoken-l1-1-0wtsapi32.dll
ext-ms-win-session-wininit-l1-1-0wininitext.dll
ext-ms-win-session-winlogon-l1-1-0winlogonext.dll
ext-ms-win-session-winsta-l1-1-2winsta.dll
ext-ms-win-session-wtsapi32-l1-1-0wtsapi32.dll
ext-ms-win-setupapi-classinstallers-l1-1-2setupapi.dll
ext-ms-win-setupapi-inf-l1-1-1setupapi.dll
ext-ms-win-setupapi-logging-l1-1-0setupapi.dll
ext-ms-win-shell-comctl32-init-l1-1-1comctl32.dll
ext-ms-win-shell-comctl32-l1-1-0comctl32.dll
ext-ms-win-shell-comdlg32-l1-1-0comdlg32.dll
ext-ms-win-shell-directory-l1-1-0windows.storage.dll
ext-ms-win-shell-embeddedmode-l1-1-0embeddedmodesvcapi.dll
ext-ms-win-shell-exports-internal-l1-1-0shell32.dll
ext-ms-win-shell-propsys-l1-1-0propsys.dll
ext-ms-win-shell-settingsync-l1-1-3settingsyncpolicy.dll
ext-ms-win-shell-shell32-l1-2-2shell32.dll
ext-ms-win-shell-shlwapi-l1-1-2shlwapi.dll
ext-ms-win-shell32-shellcom-l1-1-0windows.storage.dll
ext-ms-win-shell32-shellfolders-l1-1-1windows.storage.dll
ext-ms-win-smbshare-browser-l1-1-0browser.dll
ext-ms-win-smbshare-browserclient-l1-1-0browcli.dll
ext-ms-win-smbshare-sscore-l1-1-0sscoreext.dll
ext-ms-win-spinf-inf-l1-1-0spinf.dll
ext-ms-win-srhinproc-entrypoint-l1-1-0srhinproc.dll
ext-ms-win-storage-iscsidsc-l1-1-0iscsidsc.dll
ext-ms-win-storage-sense-l1-1-0storageusage.dll
ext-ms-win-sxs-oleautomation-l1-1-0sxs.dll
ext-ms-win-tsf-msctf-l1-1-0msctf.dll
ext-ms-win-ttlsext-eap-l1-1-0ttlsext.dll
ext-ms-win-uiacore-l1-1-3uiautomationcore.dll
ext-ms-win-umpoext-umpo-l1-1-0umpoext.dll
ext-ms-win-usp10-l1-1-0gdi32full.dll
ext-ms-win-uwf-servicing-apis-l1-1-0uwfservicingapi.dll
ext-ms-win-uxtheme-themes-l1-1-1uxtheme.dll
ext-ms-win-wer-reporting-l1-1-1wer.dll
ext-ms-win-wer-ui-l1-1-0werui.dll
ext-ms-win-wer-wct-l1-1-0wer.dll
ext-ms-win-wevtapi-eventlog-l1-1-3wevtapi.dll
ext-ms-win-winbici-l1-1-0winbici.dll
ext-ms-win-winrt-storage-l1-1-0windows.storage.dll
ext-ms-win-wlan-grouppolicy-l1-1-0wlgpclnt.dll
ext-ms-win-wlan-onexui-l1-1-0onexui.dll
ext-ms-win-wlan-scard-l1-1-0winscard.dll
ext-ms-win-wrp-sfc-l1-1-0sfc.dll
ext-ms-win-wsclient-devlicense-l1-1-1wsclient.dll
ext-ms-win-wwaext-misc-l1-1-0wwaext.dll
ext-ms-win-wwaext-module-l1-1-0wwaext.dll
ext-ms-win-wwan-wwapi-l1-1-1wwapi.dll
ext-ms-win-xaml-controls-l1-1-0windows.ui.xaml.phone.dll
↧

tcpip port pools in fresh windows 10 builds

June 30, 2016, 6:24 am
$
0
0
It seems that old good TcpPortPool& UdpPortPool were removed since est. build 14251 and were replaced with more complex structure stored in TcpCompartmentSet & UdpCompartmentSet

Lets see how we can get accessto port pools
from InetCreatePortPool:
  push  50506E49h                       ; Tag
  push  26A8h                           ; NumberOfBytes
  mov   edi, ecx
  mov   esi, edx
  push  200h                            ; PoolType
  mov   [ebp+var_4], edi
  call  ds:__imp__ExAllocatePoolWithTag@12

some memory was alloced with tag InPP. Time for windbg

kd> dd tcpip!TcpCompartmentSet
8614b974  895e42f0 ffffffff 00000000 00000000
kd> !pool 895e42f0 2
Pool page 895e42f0 region is Nonpaged pool
*895e42e8 size:  188 previous size:   30  (Allocated) *InCS
        Owning component : Unknown (update pooltag.txt)

IDA says that this memory was alloced in function InetCreateCompartmentSet:
  push  'SCnI'                          ; Tag
  push  180h                            ; NumberOfBytes
  push  200h                            ; PoolType
  mov   ebx, edx
  mov   [ebp+var_4], ecx
  xor   edi, edi
  call  ds:__imp__ExAllocatePoolWithTag@12
  mov   esi, eax
  test  esi, esi
  jz    loc_CE3A8
  push  180h                            ; size_t
  push  edi                             ; int
  push  esi                             ; void *
  call  _memset

also almost all references to TcpCompartmentSet call function InetGetCompartmentContext:
  mov   edi, [esi+144h]
  mov   eax, [edi+14h]
  pop   edi
  pop   esi
  mov   esp, ebp
  pop   ebp
  retn

so check this in windbg:
kd> dd 895e42f0 + 144
895e4434  89b23d88 86072efc 860c681d 00000000
kd> !pool 89b23d88 2
Pool page 89b23d88 region is Nonpaged pool
*89b23d80 size:   20 previous size:   20  (Allocated) *InCo
        Owning component : Unknown (update pooltag.txt)
kd> dd 89b23d88 + 14
89b23d9c  89b1d5a0 04040004 41506e49 00000000
kd> !pool 89b1d5a0 2
Pool page 89b1d5a0 region is Nonpaged pool
*89b1d598 size:   10 previous size:  598  (Allocated) *TcCo
        Owning component : Unknown (update pooltag.txt)

IDA says that this memory was alloced in unnamed function called from TcpStartInetModule:
  push  ebx
  push  edi
  push  6F436354h                       ; Tag
  push  4                               ; NumberOfBytes
  push  200h                            ; PoolType
  call  ds:__imp__ExAllocatePoolWithTag@12 ; ExAllocatePoolWithTag(x,x,x)
  mov   ebx, eax
  test  ebx, ebx
  jnz   short loc_82F28
  mov   edi, STATUS_NO_MEMORY
  jmp   loc_830EF
 full schizophrenia - alloc 4 byte from NonPagedPoolNx to hold 1 pointer ! Lets check next in windbg:
kd> dd 89b1d5a0
89b1d5a0  89b24000 89b0f7ec 04040002 41506e49
kd> !pool 89b24000 2
Pool page 89b24000 region is Nonpaged pool
*89b24000 : large page allocation, tag is InPP, size is 0x26a8 bytes
        Pooltag InPP : Inet Port pool, Binary : tcpip.sys

Yeah baby, now we finally got our structure for ports pool !
↧
Search

FilterConnectionPorts

July 13, 2016, 7:19 am
$
0
0
Under windows 10 there are some very strange objects in root directory
They are created by Filter Manager (fltmgr.sys) and is used for communication between user-mode applications and filesystem minifilters. Lets see how we can enumerate and dump this


from function fltmgr!FltCreateCommunicationPort:
PAGE:0003A159   lea   eax, [ebp+var_20]
PAGE:0003A15C   push  eax
PAGE:0003A15D   xor   eax, eax
PAGE:0003A15F   push  eax
PAGE:0003A160   push  eax
PAGE:0003A161   push  28h ; size
PAGE:0003A163   push  eax
PAGE:0003A164   push  eax
PAGE:0003A165   push  [ebp+arg_8]
PAGE:0003A168   push  FilterConnectionPortType ; object type
PAGE:0003A16E   push  eax
PAGE:0003A16F   call  ds:__imp__ObCreateObject@36   

so size of FilterConnectionPort is 0x28 and this is _FLT_SERVER_PORT_OBJECT struct:
kd> dt fltmgr!_FLT_SERVER_PORT_OBJECT
   +0x000 FilterLink       : _LIST_ENTRY
   +0x008 ConnectNotify    : Ptr32     long
   +0x00c DisconnectNotify : Ptr32     void
   +0x010 MessageNotify    : Ptr32     long
   +0x014 Filter           : Ptr32 _FLT_FILTER
   +0x018 Cookie           : Ptr32 Void
   +0x01c Flags            : Uint4B
   +0x020 NumberOfConnections : Int4B
   +0x024 MaxConnections   : Int4B

Sample of wincheck output:
FilterConnectionPortType 8998CBF0 at 84DBBDF0
MicrosoftMalwareProtectionControlPortWD:
 ConnectNotify: 81A68DA8 \SystemRoot\system32\drivers\WdFilter.sys
 DisconnectNotify: 81A79706 \SystemRoot\system32\drivers\WdFilter.sys
 MessageNotify: 81A60EE0 \SystemRoot\system32\drivers\WdFilter.sys
 Cookie: 899958AC
 Flags:  0
 NumberOfConnections: 1
 MaxConnections:      1
storqosfltport:
 ConnectNotify: 858DD716 \SystemRoot\system32\drivers\storqosflt.sys
 DisconnectNotify: 858DD7CE \SystemRoot\system32\drivers\storqosflt.sys
 MessageNotify: 858DD818 \SystemRoot\system32\drivers\storqosflt.sys
 Cookie: 00000000
 Flags:  0
 NumberOfConnections: 0
 MaxConnections:      1
MicrosoftMalwareProtectionAsyncPortWD:
 ConnectNotify: 81A68DA8 \SystemRoot\system32\drivers\WdFilter.sys
 DisconnectNotify: 81A79706 \SystemRoot\system32\drivers\WdFilter.sys
 Cookie: 899958CC
 Flags:  0
 NumberOfConnections: 1
 MaxConnections:      1
MicrosoftMalwareProtectionPortWD:
 ConnectNotify: 81A68DA8 \SystemRoot\system32\drivers\WdFilter.sys
 DisconnectNotify: 81A79706 \SystemRoot\system32\drivers\WdFilter.sys
 Cookie: 899958B4
 Flags:  0
 NumberOfConnections: 1
 MaxConnections:      1
WcifsPort:
 ConnectNotify: 8DBAE402 \SystemRoot\system32\drivers\wcifs.sys
 DisconnectNotify: 8DBAE41A \SystemRoot\system32\drivers\wcifs.sys
 MessageNotify: 8DBAE43E \SystemRoot\system32\drivers\wcifs.sys
 Cookie: 00000000
 Flags:  0
 NumberOfConnections: 0
 MaxConnections:      3E8
MicrosoftMalwareProtectionRemoteIoPortWD:
 ConnectNotify: 81A68DA8 \SystemRoot\system32\drivers\WdFilter.sys
 DisconnectNotify: 81A79706 \SystemRoot\system32\drivers\WdFilter.sys
 Cookie: 899958C4
 Flags:  0
 NumberOfConnections: 1
 MaxConnections:      1
WcnfsPort:
 ConnectNotify: 8DBC8D84 \SystemRoot\system32\drivers\wcnfs.sys
 DisconnectNotify: 8DBC8D9C \SystemRoot\system32\drivers\wcnfs.sys
 MessageNotify: 8DBC8DC0 \SystemRoot\system32\drivers\wcnfs.sys
 Cookie: 00000000
 Flags:  0
 NumberOfConnections: 0
 MaxConnections:      3E8
MicrosoftMalwareProtectionVeryLowIoPortWD:
 ConnectNotify: 81A68DA8 \SystemRoot\system32\drivers\WdFilter.sys
 DisconnectNotify: 81A79706 \SystemRoot\system32\drivers\WdFilter.sys
 Cookie: 899958BC
 Flags:  0
 NumberOfConnections: 1
 MaxConnections:      1
↧

apisetschema.dll from windows 10 build 14388

July 28, 2016, 5:05 am
$
0
0
nothing new - only api-ms-win-core-ums was added


api-ms-onecoreuap-print-render-l1-1-0printrenderapihost.dll
api-ms-onecoreuap-settingsync-status-l1-1-0settingsynccore.dll
api-ms-win-appmodel-identity-l1-2-0kernel.appcore.dll
api-ms-win-appmodel-runtime-internal-l1-1-3kernel.appcore.dll
api-ms-win-appmodel-runtime-l1-1-2kernel.appcore.dll
api-ms-win-appmodel-state-l1-1-2kernel.appcore.dll
api-ms-win-appmodel-state-l1-2-0kernel.appcore.dll
api-ms-win-appmodel-unlock-l1-1-0kernel.appcore.dll
api-ms-win-base-bootconfig-l1-1-0advapi32.dll
api-ms-win-base-util-l1-1-0advapi32.dll
api-ms-win-composition-redirection-l1-1-0dwmredir.dll
api-ms-win-composition-windowmanager-l1-1-0udwm.dll
api-ms-win-core-apiquery-l1-1-0ntdll.dll
api-ms-win-core-appcompat-l1-1-1kernelbase.dll
api-ms-win-core-appinit-l1-1-0kernel32.dllkernelbase.dll
api-ms-win-core-atoms-l1-1-0kernel32.dll
api-ms-win-core-bicltapi-l1-1-4bi.dll
api-ms-win-core-biplmapi-l1-1-5twinapi.appcore.dll
api-ms-win-core-biptcltapi-l1-1-4twinapi.appcore.dll
api-ms-win-core-calendar-l1-1-0kernel32.dll
api-ms-win-core-com-l1-1-1combase.dll
api-ms-win-core-com-l2-1-1coml2.dll
api-ms-win-core-com-midlproxystub-l1-1-0combase.dll
api-ms-win-core-com-private-l1-1-1combase.dll
api-ms-win-core-comm-l1-1-0kernelbase.dll
api-ms-win-core-console-ansi-l2-1-0kernel32.dll
api-ms-win-core-console-l1-1-0kernelbase.dll
api-ms-win-core-console-l2-1-0kernelbase.dll
api-ms-win-core-crt-l1-1-0ntdll.dll
api-ms-win-core-crt-l2-1-0kernelbase.dll
api-ms-win-core-datetime-l1-1-2kernelbase.dll
api-ms-win-core-debug-l1-1-2kernelbase.dll
api-ms-win-core-debug-minidump-l1-1-0dbgcore.dll
api-ms-win-core-delayload-l1-1-1kernelbase.dll
api-ms-win-core-enclave-l1-1-0kernelbase.dll
api-ms-win-core-errorhandling-l1-1-3kernelbase.dll
api-ms-win-core-featurestaging-l1-1-0shcore.dll
api-ms-win-core-fibers-l1-1-1kernelbase.dll
api-ms-win-core-fibers-l2-1-1kernelbase.dll
api-ms-win-core-file-ansi-l1-1-0kernel32.dll
api-ms-win-core-file-ansi-l2-1-0kernel32.dll
api-ms-win-core-file-l1-1-1kernelbase.dll
api-ms-win-core-file-l1-2-2kernelbase.dll
api-ms-win-core-file-l2-1-2kernelbase.dll
api-ms-win-core-firmware-l1-1-0kernel32.dll
api-ms-win-core-guard-l1-1-0kernelbase.dll
api-ms-win-core-handle-l1-1-0kernelbase.dll
api-ms-win-core-heap-l1-1-0kernelbase.dll
api-ms-win-core-heap-l1-2-0kernelbase.dll
api-ms-win-core-heap-l2-1-0kernelbase.dll
api-ms-win-core-heap-obsolete-l1-1-0kernel32.dll
api-ms-win-core-interlocked-l1-1-1kernelbase.dll
api-ms-win-core-interlocked-l1-2-0kernelbase.dll
api-ms-win-core-io-l1-1-1kernel32.dllkernelbase.dll
api-ms-win-core-job-l1-1-0kernelbase.dll
api-ms-win-core-job-l2-1-1kernel32.dll
api-ms-win-core-kernel32-legacy-ansi-l1-1-0kernel32.dll
api-ms-win-core-kernel32-legacy-l1-1-5kernel32.dll
api-ms-win-core-kernel32-private-l1-1-2kernel32.dll
api-ms-win-core-largeinteger-l1-1-0kernelbase.dll
api-ms-win-core-libraryloader-l1-1-1kernelbase.dll
api-ms-win-core-libraryloader-l1-2-2kernelbase.dll
api-ms-win-core-libraryloader-l2-1-0kernelbase.dll
api-ms-win-core-libraryloader-private-l1-1-0kernelbase.dll
api-ms-win-core-localization-ansi-l1-1-0kernel32.dll
api-ms-win-core-localization-l1-1-0kernelbase.dll
api-ms-win-core-localization-l1-2-2kernelbase.dll
api-ms-win-core-localization-l2-1-0kernelbase.dll
api-ms-win-core-localization-obsolete-l1-1-0kernelbase.dll
api-ms-win-core-localization-obsolete-l1-2-0kernelbase.dll
api-ms-win-core-localization-obsolete-l1-3-0kernelbase.dll
api-ms-win-core-localization-private-l1-1-0kernelbase.dll
api-ms-win-core-localregistry-l1-1-0kernelbase.dll
api-ms-win-core-marshal-l1-1-0combase.dll
api-ms-win-core-memory-l1-1-4kernelbase.dll
api-ms-win-core-misc-l1-1-0kernelbase.dll
api-ms-win-core-multipleproviderrouter-l1-1-0mpr.dll
api-ms-win-core-namedpipe-ansi-l1-1-1kernel32.dll
api-ms-win-core-namedpipe-l1-1-0kernelbase.dll
api-ms-win-core-namedpipe-l1-2-2kernelbase.dll
api-ms-win-core-namespace-ansi-l1-1-0kernel32.dll
api-ms-win-core-namespace-l1-1-0kernelbase.dll
api-ms-win-core-normalization-l1-1-0kernelbase.dll
api-ms-win-core-path-l1-1-0kernelbase.dll
api-ms-win-core-perfcounters-l1-1-0kernelbase.dll
api-ms-win-core-privateprofile-l1-1-1kernel32.dll
api-ms-win-core-processenvironment-ansi-l1-1-0kernel32.dll
api-ms-win-core-processenvironment-l1-1-1kernelbase.dll
api-ms-win-core-processenvironment-l1-2-0kernelbase.dll
api-ms-win-core-processsecurity-l1-1-0kernel32.dllkernelbase.dll
api-ms-win-core-processsnapshot-l1-1-0kernelbase.dll
api-ms-win-core-processthreads-l1-1-3kernel32.dllkernelbase.dll
api-ms-win-core-processtopology-l1-1-0kernelbase.dll
api-ms-win-core-processtopology-l1-2-0kernelbase.dll
api-ms-win-core-processtopology-obsolete-l1-1-1kernel32.dll
api-ms-win-core-processtopology-private-l1-1-0kernelbase.dll
api-ms-win-core-profile-l1-1-0kernelbase.dll
api-ms-win-core-psapi-ansi-l1-1-0kernelbase.dll
api-ms-win-core-psapi-l1-1-0kernelbase.dll
api-ms-win-core-psapi-obsolete-l1-1-0kernelbase.dll
api-ms-win-core-psapiansi-l1-1-0kernelbase.dll
api-ms-win-core-psm-app-l1-1-0twinapi.appcore.dll
api-ms-win-core-psm-appnotify-l1-1-0twinapi.appcore.dll
api-ms-win-core-psm-info-l1-1-1appsruprov.dll
api-ms-win-core-psm-key-l1-1-1kernelbase.dll
api-ms-win-core-psm-plm-l1-1-3twinapi.appcore.dll
api-ms-win-core-psm-plm-l1-2-0twinapi.appcore.dll
api-ms-win-core-psm-rtimer-l1-1-1twinapi.appcore.dll
api-ms-win-core-psm-tc-l1-1-1twinapi.appcore.dll
api-ms-win-core-quirks-l1-1-1kernelbase.dll
api-ms-win-core-realtime-l1-1-1kernelbase.dll
api-ms-win-core-registry-l1-1-1kernelbase.dll
api-ms-win-core-registry-l2-1-0advapi32.dll
api-ms-win-core-registry-l2-2-0advapi32.dll
api-ms-win-core-registry-private-l1-1-0advapi32.dll
api-ms-win-core-registryuserspecific-l1-1-0kernelbase.dll
api-ms-win-core-rtlsupport-l1-1-1ntdll.dll
api-ms-win-core-rtlsupport-l1-2-0ntdll.dll
api-ms-win-core-shlwapi-legacy-l1-1-0kernelbase.dll
api-ms-win-core-shlwapi-obsolete-l1-1-0kernelbase.dll
api-ms-win-core-shlwapi-obsolete-l1-2-0kernelbase.dll
api-ms-win-core-shutdown-ansi-l1-1-0advapi32.dll
api-ms-win-core-shutdown-l1-1-1advapi32.dll
api-ms-win-core-sidebyside-ansi-l1-1-0kernel32.dll
api-ms-win-core-sidebyside-l1-1-0kernelbase.dll
api-ms-win-core-slapi-l1-1-0clipc.dll
api-ms-win-core-string-l1-1-0kernelbase.dll
api-ms-win-core-string-l2-1-1kernelbase.dll
api-ms-win-core-string-obsolete-l1-1-1kernel32.dll
api-ms-win-core-stringansi-l1-1-0kernelbase.dll
api-ms-win-core-stringloader-l1-1-1kernelbase.dll
api-ms-win-core-synch-ansi-l1-1-0kernel32.dll
api-ms-win-core-synch-l1-1-1kernelbase.dll
api-ms-win-core-synch-l1-2-1kernelbase.dll
api-ms-win-core-sysinfo-l1-1-1kernelbase.dll
api-ms-win-core-sysinfo-l1-2-3kernelbase.dll
api-ms-win-core-sysinfo-l2-1-0advapi32.dll
api-ms-win-core-systemtopology-l1-1-1kernelbase.dll
api-ms-win-core-textinput-client-l1-1-0textinputframework.dll
api-ms-win-core-threadpool-l1-1-0kernelbase.dll
api-ms-win-core-threadpool-l1-2-0kernelbase.dll
api-ms-win-core-threadpool-legacy-l1-1-0kernelbase.dll
api-ms-win-core-threadpool-private-l1-1-0kernelbase.dll
api-ms-win-core-timezone-l1-1-0kernelbase.dll
api-ms-win-core-timezone-private-l1-1-0kernelbase.dll
api-ms-win-core-toolhelp-l1-1-1kernel32.dll
api-ms-win-core-ums-l1-1-0kernel32.dll
api-ms-win-core-url-l1-1-0kernelbase.dll
api-ms-win-core-util-l1-1-1kernel32.dllkernelbase.dll
api-ms-win-core-version-l1-1-1kernelbase.dll
api-ms-win-core-version-private-l1-1-0kernelbase.dll
api-ms-win-core-versionansi-l1-1-1kernelbase.dll
api-ms-win-core-windowsceip-l1-1-0kernelbase.dll
api-ms-win-core-windowserrorreporting-l1-1-0kernelbase.dll
api-ms-win-core-winrt-error-l1-1-1combase.dll
api-ms-win-core-winrt-errorprivate-l1-1-1combase.dll
api-ms-win-core-winrt-l1-1-0combase.dll
api-ms-win-core-winrt-propertysetprivate-l1-1-1wintypes.dll
api-ms-win-core-winrt-registration-l1-1-0combase.dll
api-ms-win-core-winrt-robuffer-l1-1-0wintypes.dll
api-ms-win-core-winrt-roparameterizediid-l1-1-0combase.dll
api-ms-win-core-winrt-string-l1-1-1combase.dll
api-ms-win-core-wow64-l1-1-1kernelbase.dll
api-ms-win-core-xstate-l1-1-2ntdll.dll
api-ms-win-core-xstate-l2-1-0kernelbase.dll
api-ms-win-crt-conio-l1-1-0ucrtbase.dll
api-ms-win-crt-convert-l1-1-0ucrtbase.dll
api-ms-win-crt-environment-l1-1-0ucrtbase.dll
api-ms-win-crt-filesystem-l1-1-0ucrtbase.dll
api-ms-win-crt-heap-l1-1-0ucrtbase.dll
api-ms-win-crt-locale-l1-1-0ucrtbase.dll
api-ms-win-crt-math-l1-1-0ucrtbase.dll
api-ms-win-crt-multibyte-l1-1-0ucrtbase.dll
api-ms-win-crt-private-l1-1-0ucrtbase.dll
api-ms-win-crt-process-l1-1-0ucrtbase.dll
api-ms-win-crt-runtime-l1-1-0ucrtbase.dll
api-ms-win-crt-stdio-l1-1-0ucrtbase.dll
api-ms-win-crt-string-l1-1-0ucrtbase.dll
api-ms-win-crt-time-l1-1-0ucrtbase.dll
api-ms-win-crt-utility-l1-1-0ucrtbase.dll
api-ms-win-deprecated-apis-obsolete-l1-1-0kernelbase.dll
api-ms-win-devices-config-l1-1-1cfgmgr32.dll
api-ms-win-devices-query-l1-1-1cfgmgr32.dll
api-ms-win-devices-swdevice-l1-1-1cfgmgr32.dll
api-ms-win-downlevel-advapi32-l1-1-1kernelbase.dll
api-ms-win-downlevel-advapi32-l2-1-1sechost.dll
api-ms-win-downlevel-advapi32-l3-1-0ntmarta.dll
api-ms-win-downlevel-advapi32-l4-1-0advapi32.dll
api-ms-win-downlevel-kernel32-l1-1-0kernelbase.dll
api-ms-win-downlevel-kernel32-l2-1-0kernel32.dll
api-ms-win-downlevel-normaliz-l1-1-0kernelbase.dll
api-ms-win-downlevel-ole32-l1-1-1combase.dll
api-ms-win-downlevel-shell32-l1-1-0shcore.dll
api-ms-win-downlevel-shlwapi-l1-1-1kernelbase.dll
api-ms-win-downlevel-shlwapi-l2-1-1shcore.dll
api-ms-win-downlevel-user32-l1-1-1kernelbase.dll
api-ms-win-downlevel-version-l1-1-0kernelbase.dll
api-ms-win-dwmapi-l1-1-0dwmapi.dll
api-ms-win-dx-d3dkmt-l1-1-2gdi32.dll
api-ms-win-eventing-classicprovider-l1-1-0kernelbase.dll
api-ms-win-eventing-consumer-l1-1-0sechost.dll
api-ms-win-eventing-controller-l1-1-0sechost.dll
api-ms-win-eventing-legacy-l1-1-0advapi32.dll
api-ms-win-eventing-obsolete-l1-1-0sechost.dll
api-ms-win-eventing-provider-l1-1-0kernelbase.dll
api-ms-win-eventing-tdh-l1-1-0tdh.dllmintdh.dll
api-ms-win-eventlog-legacy-l1-1-0advapi32.dll
api-ms-win-eventlog-private-l1-1-0advapi32.dll
api-ms-win-gaming-tcui-l1-1-2gamingtcui.dll
api-ms-win-gdi-dpiinfo-l1-1-0gdi32.dll
api-ms-win-gdi-internal-uap-l1-1-0gdi32full.dll
api-ms-win-http-time-l1-1-0kernelbase.dll
api-ms-win-legacy-shlwapi-l1-1-0kernelbase.dll
api-ms-win-mm-joystick-l1-1-0winmmbase.dll
api-ms-win-mm-mci-l1-1-0winmm.dll
api-ms-win-mm-misc-l1-1-1winmmbase.dll
api-ms-win-mm-misc-l2-1-0winmm.dll
api-ms-win-mm-mme-l1-1-0winmmbase.dll
api-ms-win-mm-playsound-l1-1-0winmm.dll
api-ms-win-mm-time-l1-1-0kernel32.dll
api-ms-win-net-isolation-l1-1-1firewallapi.dll
api-ms-win-networking-interfacecontexts-l1-1-0ondemandconnroutehelper.dll
api-ms-win-ntuser-ie-message-l1-1-0user32.dll
api-ms-win-ntuser-ie-window-l1-1-0user32.dll
api-ms-win-ntuser-ie-wmpointer-l1-1-0user32.dll
api-ms-win-ntuser-rectangle-l1-1-0user32.dll
api-ms-win-ntuser-sysparams-l1-1-0user32.dll
api-ms-win-obsolete-localization-l1-1-0kernelbase.dll
api-ms-win-obsolete-psapi-l1-1-0kernelbase.dll
api-ms-win-obsolete-shlwapi-l1-1-0kernelbase.dll
api-ms-win-ole32-ie-l1-1-0ole32.dll
api-ms-win-oobe-notification-l1-1-0kernel32.dll
api-ms-win-perf-legacy-l1-1-0advapi32.dll
api-ms-win-power-base-l1-1-0powrprof.dll
api-ms-win-power-limitsmanagement-l1-1-0powrprof.dll
api-ms-win-power-setting-l1-1-0powrprof.dll
api-ms-win-ro-typeresolution-l1-1-0wintypes.dll
api-ms-win-rtcore-ntuser-clipboard-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-draw-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-powermanagement-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-private-l1-1-4user32.dll
api-ms-win-rtcore-ntuser-shell-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-synch-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-window-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-winevent-l1-1-0user32.dll
api-ms-win-rtcore-ntuser-wmpointer-l1-1-3user32.dll
api-ms-win-rtcore-ole32-clipboard-l1-1-1ole32.dll
api-ms-win-security-accesshlpr-l1-1-0sechost.dll
api-ms-win-security-activedirectoryclient-l1-1-1kernelbase.dll
api-ms-win-security-appcontainer-l1-1-0kernelbase.dll
api-ms-win-security-audit-l1-1-1sechost.dll
api-ms-win-security-base-ansi-l1-1-0advapi32.dll
api-ms-win-security-base-l1-1-1kernelbase.dll
api-ms-win-security-base-l1-2-1kernelbase.dll
api-ms-win-security-base-private-l1-1-1kernelbase.dll
api-ms-win-security-capability-l1-1-0sechost.dll
api-ms-win-security-cpwl-l1-1-0advapi32.dll
api-ms-win-security-credentials-l1-1-0sechost.dll
api-ms-win-security-credentials-l2-1-0sechost.dll
api-ms-win-security-cryptoapi-l1-1-0cryptsp.dll
api-ms-win-security-grouppolicy-l1-1-0kernelbase.dll
api-ms-win-security-logon-l1-1-1advapi32.dll
api-ms-win-security-lsalookup-ansi-l2-1-0advapi32.dll
api-ms-win-security-lsalookup-l1-1-2sechost.dll
api-ms-win-security-lsalookup-l2-1-1advapi32.dll
api-ms-win-security-lsapolicy-l1-1-1sechost.dll
api-ms-win-security-provider-ansi-l1-1-0advapi32.dll
api-ms-win-security-provider-l1-1-0ntmarta.dll
api-ms-win-security-sddl-ansi-l1-1-0advapi32.dll
api-ms-win-security-sddl-l1-1-0sechost.dll
api-ms-win-security-sddlparsecond-l1-1-0sechost.dll
api-ms-win-security-systemfunctions-l1-1-0advapi32.dll
api-ms-win-security-trustee-l1-1-1advapi32.dll
api-ms-win-service-core-ansi-l1-1-1advapi32.dll
api-ms-win-service-core-l1-1-2sechost.dll
api-ms-win-service-management-l1-1-0sechost.dll
api-ms-win-service-management-l2-1-0sechost.dll
api-ms-win-service-private-l1-1-2sechost.dll
api-ms-win-service-winsvc-l1-1-0sechost.dll
api-ms-win-service-winsvc-l1-2-0sechost.dll
api-ms-win-shcore-comhelpers-l1-1-0shcore.dll
api-ms-win-shcore-obsolete-l1-1-0shcore.dll
api-ms-win-shcore-registry-l1-1-1shcore.dll
api-ms-win-shcore-scaling-l1-1-2shcore.dll
api-ms-win-shcore-stream-l1-1-0shcore.dll
api-ms-win-shcore-stream-winrt-l1-1-0shcore.dll
api-ms-win-shcore-sysinfo-l1-1-0shcore.dll
api-ms-win-shcore-thread-l1-1-0shcore.dll
api-ms-win-shcore-unicodeansi-l1-1-0shcore.dll
api-ms-win-shell-associations-l1-1-0windows.storage.dll
api-ms-win-shell-changenotify-l1-1-0windows.storage.dll
api-ms-win-shell-dataobject-l1-1-0windows.storage.dll
api-ms-win-shell-namespace-l1-1-0windows.storage.dll
api-ms-win-shell-shdirectory-l1-1-0shcore.dll
api-ms-win-shell-shellcom-l1-1-0kernelbase.dll
api-ms-win-shell-shellfolders-l1-1-0windows.storage.dll
api-ms-win-shlwapi-ie-l1-1-0shlwapi.dll
api-ms-win-shlwapi-winrt-storage-l1-1-1shlwapi.dll
api-ms-win-storage-exports-external-l1-1-0windows.storage.dll
api-ms-win-storage-exports-internal-l1-1-0windows.storage.dll
api-ms-win-winrt-search-folder-l1-1-0windows.storage.search.dll
ext-ms-net-eap-sim-l1-1-0eapsimextdesktop.dll
ext-ms-net-vpn-soh-l1-1-0vpnsohdesktop.dll
ext-ms-onecore-appdefaults-l1-1-0windows.storage.dll
ext-ms-onecore-appmodel-plm-l1-1-1execmodelclient.dll
ext-ms-onecore-appmodel-staterepository-internal-l1-1-0windows.staterepositoryclient.dll
ext-ms-onecore-appmodel-veventdispatcher-l1-1-0veeventdispatcher.dll
ext-ms-onecore-dcomp-l1-1-0dcomp.dll
ext-ms-onecore-hlink-l1-1-0hlink.dll
ext-ms-win-advapi32-auth-l1-1-0advapi32.dll
ext-ms-win-advapi32-encryptedfile-l1-1-1advapi32.dll
ext-ms-win-advapi32-eventlog-ansi-l1-1-0advapi32.dll
ext-ms-win-advapi32-eventlog-l1-1-1advapi32.dll
ext-ms-win-advapi32-hwprof-l1-1-0advapi32.dll
ext-ms-win-advapi32-idletask-l1-1-0advapi32.dll
ext-ms-win-advapi32-lsa-l1-1-1advapi32.dll
ext-ms-win-advapi32-msi-l1-1-0advapi32.dll
ext-ms-win-advapi32-npusername-l1-1-0advapi32.dll
ext-ms-win-advapi32-ntmarta-l1-1-0advapi32.dll
ext-ms-win-advapi32-psm-app-l1-1-0twinapi.appcore.dll
ext-ms-win-advapi32-registry-l1-1-0advapi32.dll
ext-ms-win-advapi32-safer-l1-1-0advapi32.dll
ext-ms-win-advapi32-shutdown-l1-1-0advapi32.dll
ext-ms-win-appcompat-apphelp-l1-1-0apphelp.dll
ext-ms-win-appmodel-daxcore-l1-1-0daxexec.dll
ext-ms-win-appmodel-opc-l1-1-0opcservices.dll
ext-ms-win-appmodel-state-ext-l1-2-0kernel.appcore.dll
ext-ms-win-appxdeploymentclient-appxdeploy-l1-1-0appxdeploymentclient.dll
ext-ms-win-appxdeploymentclient-appxdeployonecore-l1-1-0appxdeploymentclient.dll
ext-ms-win-audiocore-coreaudiopolicymanager-l1-1-0coreaudiopolicymanagerext.dll
ext-ms-win-authz-claimpolicies-l1-1-0authz.dll
ext-ms-win-authz-context-l1-1-0authz.dll
ext-ms-win-authz-remote-l1-1-0logoncli.dll
ext-ms-win-biometrics-winbio-core-l1-1-1winbio.dll
ext-ms-win-biometrics-winbio-l1-1-0winbio.dll
ext-ms-win-biometrics-winbio-l1-2-0winbioext.dll
ext-ms-win-biometrics-winbio-l1-3-0winbioext.dll
ext-ms-win-bluetooth-apis-l1-1-0bluetoothapis.dll
ext-ms-win-bluetooth-apis-private-l1-1-0bluetoothapis.dll
ext-ms-win-branding-winbrand-l1-1-1winbrand.dll
ext-ms-win-casting-lockscreen-l1-1-0castingshellext.dll
ext-ms-win-casting-shell-l1-1-0castingshellext.dll
ext-ms-win-cluster-clusapi-l1-1-2clusapi.dll
ext-ms-win-cluster-resutils-l1-1-1resutils.dll
ext-ms-win-cmd-util-l1-1-0cmdext.dll
ext-ms-win-cng-rng-l1-1-1bcryptprimitives.dll
ext-ms-win-com-clbcatq-l1-1-0clbcatq.dll
ext-ms-win-com-coml2-l1-1-1coml2.dll
ext-ms-win-com-ole32-l1-1-4ole32.dll
ext-ms-win-com-psmregister-l1-1-0kernel.appcore.dll
ext-ms-win-com-psmregister-l1-2-1kernel.appcore.dll
ext-ms-win-composition-ghost-l1-1-0dwmghost.dll
ext-ms-win-composition-init-l1-1-0dwminit.dll
ext-ms-win-compositor-hosting-l1-1-0user32.dll
ext-ms-win-core-psm-service-l1-1-3psmserviceexthost.dll
ext-ms-win-core-resourcemanager-l1-1-0rmclient.dll
ext-ms-win-core-resourcemanager-l1-2-0rmclient.dll
ext-ms-win-core-resourcepolicy-l1-1-1resourcepolicyclient.dll
ext-ms-win-core-resourcepolicyserver-l1-1-0resourcepolicyserver.dll
ext-ms-win-core-storelicensing-l1-1-0licensemanagerapi.dll
ext-ms-win-coreui-navshutdown-l1-1-0navshutdown.dll
ext-ms-win-desktopappx-l1-1-0daxexec.dll
ext-ms-win-devmgmt-dm-l1-1-0dmapisetextimpldesktop.dll
ext-ms-win-devmgmt-policy-l1-1-0policymanager.dll
ext-ms-win-direct2d-desktop-l1-1-0direct2ddesktop.dll
ext-ms-win-domainjoin-netjoin-l1-1-0netjoin.dll
ext-ms-win-dwmapi-ext-l1-1-0dwmapi.dll
ext-ms-win-dwmapidxgi-ext-l1-1-0dwmapi.dll
ext-ms-win-dx-d3d9-l1-1-0d3d9.dll
ext-ms-win-dx-ddraw-l1-1-0ddraw.dll
ext-ms-win-edputil-policy-l1-1-0edputil.dll
ext-ms-win-els-elscore-l1-1-0elscore.dll
ext-ms-win-eventing-rundown-l1-1-0etwrundown.dll
ext-ms-win-eventing-tdh-ext-l1-1-0tdh.dll
ext-ms-win-familysafety-childaccount-l1-1-0familysafetyext.dll
ext-ms-win-feclient-encryptedfile-l1-1-0feclient.dll
ext-ms-win-firewallapi-webproxy-l1-1-1firewallapi.dll
ext-ms-win-font-fontgroups-l1-1-0fontgroupsoverride.dll
ext-ms-win-fs-clfs-l1-1-0clfs.sys
ext-ms-win-fs-vssapi-l1-1-0vssapi.dll
ext-ms-win-fsutilext-ifsutil-l1-1-0fsutilext.dll
ext-ms-win-fsutilext-ulib-l1-1-0fsutilext.dll
ext-ms-win-fveapi-query-l1-1-0fveapi.dll
ext-ms-win-gaming-xblgamesave-l1-1-0xblgamesaveext.dll
ext-ms-win-gaming-xinput-l1-1-0xinputuap.dll
ext-ms-win-gdi-clipping-l1-1-0gdi32full.dll
ext-ms-win-gdi-dc-create-l1-1-2gdi32full.dll
ext-ms-win-gdi-dc-l1-2-1gdi32full.dll
ext-ms-win-gdi-devcaps-l1-1-0gdi32full.dll
ext-ms-win-gdi-draw-l1-1-3gdi32full.dll
ext-ms-win-gdi-font-l1-1-3gdi32full.dll
ext-ms-win-gdi-internal-desktop-l1-1-0gdi32full.dll
ext-ms-win-gdi-metafile-l1-1-2gdi32full.dll
ext-ms-win-gdi-path-l1-1-0gdi32full.dll
ext-ms-win-gdi-print-l1-1-0gdi32full.dll
ext-ms-win-gdi-private-l1-1-0gdi32full.dll
ext-ms-win-gdi-render-l1-1-0gdi32.dll
ext-ms-win-gdi-rgn-l1-1-0gdi32full.dll
ext-ms-win-gdi-wcs-l1-1-0gdi32full.dll
ext-ms-win-globalization-collation-l1-1-0globcollationhost.dll
ext-ms-win-globalization-input-l1-1-1globinputhost.dll
ext-ms-win-gpapi-grouppolicy-l1-1-0gpapi.dll
ext-ms-win-gpsvc-grouppolicy-l1-1-0gpsvc.dll
ext-ms-win-gui-dui70-l1-1-0dui70.dll
ext-ms-win-gui-ieui-l1-1-0ieui.dll
ext-ms-win-gui-uxinit-l1-1-0uxinit.dll
ext-ms-win-imm-l1-1-1imm32.dll
ext-ms-win-kernel32-appcompat-l1-1-0kernel32.dll
ext-ms-win-kernel32-datetime-l1-1-0kernel32.dll
ext-ms-win-kernel32-elevation-l1-1-0kernel32.dll
ext-ms-win-kernel32-errorhandling-l1-1-0kernel32.dllfaultrep.dll
ext-ms-win-kernel32-file-l1-1-0kernel32.dll
ext-ms-win-kernel32-localization-l1-1-0kernel32.dll
ext-ms-win-kernel32-package-current-l1-1-0kernel.appcore.dll
ext-ms-win-kernel32-package-l1-1-2kernel.appcore.dll
ext-ms-win-kernel32-quirks-l1-1-1kernel32.dll
ext-ms-win-kernel32-registry-l1-1-0kernel32.dll
ext-ms-win-kernel32-sidebyside-l1-1-0kernel32.dll
ext-ms-win-kernel32-transacted-l1-1-0kernel32.dll
ext-ms-win-kernel32-windowserrorreporting-l1-1-1kernel32.dll
ext-ms-win-kernelbase-processthread-l1-1-0kernel32.dll
ext-ms-win-media-avi-l1-1-0avifil32.dll
ext-ms-win-mf-vfw-l1-1-0mfvfw.dll
ext-ms-win-mininput-systeminputhost-l1-1-0ism32k.dll
ext-ms-win-mm-msacm-l1-1-0msacm32.dll
ext-ms-win-mm-pehelper-l1-1-0mf.dll
ext-ms-win-moderncore-win32k-base-ntgdi-l1-1-0win32kfull.sys
ext-ms-win-moderncore-win32k-base-ntuser-l1-1-0win32kfull.sys
ext-ms-win-moderncore-win32k-base-sysentry-l1-1-0win32k.sys
ext-ms-win-mpr-multipleproviderrouter-l1-1-0mprext.dll
ext-ms-win-mrmcorer-resmanager-l1-1-0mrmcorer.dll
ext-ms-win-msa-ui-l1-1-0msauserext.dll
ext-ms-win-msa-user-l1-1-1msauserext.dll
ext-ms-win-msi-misc-l1-1-0msi.dll
ext-ms-win-msiltcfg-msi-l1-1-0msiltcfg.dll
ext-ms-win-msimg-draw-l1-1-0msimg32.dll
ext-ms-win-net-cmvpn-l1-1-0cmintegrator.dll
ext-ms-win-net-httpproxyext-l1-1-0httpprxc.dll
ext-ms-win-net-isoext-l1-1-0firewallapi.dll
ext-ms-win-netprovision-netprovfw-l1-1-0netprovfw.dll
ext-ms-win-networking-nlaapi-l1-1-0nlaapi.dll
ext-ms-win-networking-radiomonitor-l1-1-0windows.devices.radios.dll
ext-ms-win-networking-wcmapi-l1-1-0wcmapi.dll
ext-ms-win-networking-winipsec-l1-1-0winipsec.dll
ext-ms-win-networking-wlanapi-l1-1-0wlanapi.dll
ext-ms-win-newdev-config-l1-1-1newdev.dll
ext-ms-win-ntdsa-activedirectoryserver-l1-1-0ntdsa.dll
ext-ms-win-ntdsapi-activedirectoryclient-l1-1-1ntdsapi.dll
ext-ms-win-ntos-clipsp-l1-1-0clipsp.sys
ext-ms-win-ntos-kcminitcfg-l1-1-0cmimcext.sys
ext-ms-win-ntos-tm-l1-1-0tm.sys
ext-ms-win-ntos-ucode-l1-1-0ntosext.sys
ext-ms-win-ntos-werkernel-l1-1-0werkernel.sys
ext-ms-win-ntuser-caret-l1-1-0user32.dll
ext-ms-win-ntuser-chartranslation-l1-1-0user32.dll
ext-ms-win-ntuser-dc-access-ext-l1-1-0user32.dll
ext-ms-win-ntuser-dialogbox-l1-1-2user32.dll
ext-ms-win-ntuser-draw-l1-1-2user32.dll
ext-ms-win-ntuser-gui-l1-1-1user32.dll
ext-ms-win-ntuser-gui-l1-2-0user32.dll
ext-ms-win-ntuser-gui-l1-3-0user32.dll
ext-ms-win-ntuser-keyboard-l1-1-1user32.dll
ext-ms-win-ntuser-keyboard-l1-2-0user32.dll
ext-ms-win-ntuser-keyboard-l1-3-0user32.dll
ext-ms-win-ntuser-menu-l1-1-3user32.dll
ext-ms-win-ntuser-message-l1-1-3user32.dll
ext-ms-win-ntuser-misc-l1-1-0user32.dll
ext-ms-win-ntuser-misc-l1-2-0user32.dll
ext-ms-win-ntuser-misc-l1-3-0user32.dll
ext-ms-win-ntuser-misc-l1-5-1user32.dll
ext-ms-win-ntuser-mouse-l1-1-0user32.dll
ext-ms-win-ntuser-powermanagement-l1-1-0user32.dll
ext-ms-win-ntuser-private-l1-1-1user32.dll
ext-ms-win-ntuser-private-l1-2-0user32.dll
ext-ms-win-ntuser-private-l1-3-1user32.dll
ext-ms-win-ntuser-rectangle-ext-l1-1-0user32.dll
ext-ms-win-ntuser-rim-l1-1-0user32.dll
ext-ms-win-ntuser-rotationmanager-l1-1-1user32.dll
ext-ms-win-ntuser-server-l1-1-0user32.dll
ext-ms-win-ntuser-string-l1-1-0user32.dll
ext-ms-win-ntuser-synch-l1-1-0user32.dll
ext-ms-win-ntuser-sysparams-ext-l1-1-0user32.dll
ext-ms-win-ntuser-touch-hittest-l1-1-0user32.dll
ext-ms-win-ntuser-uicontext-ext-l1-1-0user32.dll
ext-ms-win-ntuser-window-l1-1-4user32.dll
ext-ms-win-ntuser-windowclass-l1-1-2user32.dll
ext-ms-win-ntuser-windowstation-ansi-l1-1-1user32.dll
ext-ms-win-ntuser-windowstation-l1-1-2user32.dll
ext-ms-win-ole32-bindctx-l1-1-0ole32.dll
ext-ms-win-ole32-ie-ext-l1-1-0ole32.dll
ext-ms-win-ole32-oleautomation-l1-1-0ole32.dll
ext-ms-win-oleacc-l1-1-1oleacc.dll
ext-ms-win-pinenrollment-enrollment-l1-1-0pinenrollmenthelper.dll
ext-ms-win-printer-prntvpt-l1-1-0prntvpt.dll
ext-ms-win-printer-winspool-l1-1-3winspool.drv
ext-ms-win-profile-extender-l1-1-0userenv.dll
ext-ms-win-profile-profsvc-l1-1-0profsvcext.dll
ext-ms-win-profile-userenv-l1-1-1profext.dll
ext-ms-win-provisioning-platform-l1-1-0provplatformdesktop.dll
ext-ms-win-ras-rasapi32-l1-1-1rasapi32.dll
ext-ms-win-ras-rasdlg-l1-1-0rasdlg.dll
ext-ms-win-ras-rasman-l1-1-0rasman.dll
ext-ms-win-ras-tapi32-l1-1-0tapi32.dll
ext-ms-win-raschapext-eap-l1-1-0raschapext.dll
ext-ms-win-rastlsext-eap-l1-1-0rastlsext.dll
ext-ms-win-rdr-davhlpr-l1-1-0davhlpr.dll
ext-ms-win-reinfo-query-l1-1-0reinfo.dll
ext-ms-win-resourcemanager-gamemode-l1-1-0rmclient.dll
ext-ms-win-ro-typeresolution-l1-1-0wintypes.dll
ext-ms-win-rometadata-dispenser-l1-1-0rometadata.dll
ext-ms-win-rpc-firewallportuse-l1-1-0rpcrtremote.dll
ext-ms-win-rpc-ssl-l1-1-0rpcrtremote.dll
ext-ms-win-rtcore-gdi-devcaps-l1-1-1gdi32.dll
ext-ms-win-rtcore-gdi-object-l1-1-0gdi32.dll
ext-ms-win-rtcore-gdi-rgn-l1-1-1gdi32.dll
ext-ms-win-rtcore-ntuser-cursor-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-dc-access-l1-1-1user32.dll
ext-ms-win-rtcore-ntuser-dpi-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-dpi-l1-2-0user32.dll
ext-ms-win-rtcore-ntuser-iam-l1-1-1user32.dll
ext-ms-win-rtcore-ntuser-inputintercept-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-integration-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-rawinput-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-synch-ext-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-syscolors-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-sysparams-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-window-ext-l1-1-0user32.dll
ext-ms-win-rtcore-ntuser-wmpointer-l1-1-0user32.dll
ext-ms-win-samsrv-accountstore-l1-1-0samsrv.dll
ext-ms-win-scesrv-server-l1-1-0scesrv.dll
ext-ms-win-search-folder-l1-1-0searchfolder.dll
ext-ms-win-secur32-translatename-l1-1-1secur32.dll
ext-ms-win-security-authbrokerui-l1-1-0authbrokerui.dll
ext-ms-win-security-capauthz-l1-1-0capauthz.dll
ext-ms-win-security-credui-internal-l1-1-0wincredui.dll
ext-ms-win-security-credui-l1-1-1credui.dll
ext-ms-win-security-cryptui-l1-1-1cryptui.dll
ext-ms-win-security-efs-l1-1-0efsext.dll
ext-ms-win-security-efswrt-l1-1-1efswrt.dll
ext-ms-win-security-kerberos-l1-1-0kerberos.dll
ext-ms-win-security-shutdownext-l1-1-0shutdownext.dll
ext-ms-win-security-srp-l1-1-1srpapi.dll
ext-ms-win-security-tokenbrokerui-l1-1-0tokenbrokerui.dll
ext-ms-win-security-vaultcli-l1-1-1vaultcli.dll
ext-ms-win-security-winscard-l1-1-0winscard.dll
ext-ms-win-sensors-core-private-l1-1-1sensorsnativeapi.dll
ext-ms-win-sensors-utilities-private-l1-1-1sensorsutilsv2.dll
ext-ms-win-session-userinit-l1-1-0userinitext.dll
ext-ms-win-session-usermgr-l1-1-0usermgrcli.dll
ext-ms-win-session-usertoken-l1-1-0wtsapi32.dll
ext-ms-win-session-wininit-l1-1-0wininitext.dll
ext-ms-win-session-winlogon-l1-1-0winlogonext.dll
ext-ms-win-session-winsta-l1-1-2winsta.dll
ext-ms-win-session-wtsapi32-l1-1-0wtsapi32.dll
ext-ms-win-setupapi-classinstallers-l1-1-2setupapi.dll
ext-ms-win-setupapi-inf-l1-1-1setupapi.dll
ext-ms-win-setupapi-logging-l1-1-0setupapi.dll
ext-ms-win-shell-comctl32-init-l1-1-1comctl32.dll
ext-ms-win-shell-comctl32-l1-1-0comctl32.dll
ext-ms-win-shell-comdlg32-l1-1-0comdlg32.dll
ext-ms-win-shell-directory-l1-1-0windows.storage.dll
ext-ms-win-shell-embeddedmode-l1-1-0embeddedmodesvcapi.dll
ext-ms-win-shell-exports-internal-l1-1-0shell32.dll
ext-ms-win-shell-propsys-l1-1-0propsys.dll
ext-ms-win-shell-settingsync-l1-1-3settingsyncpolicy.dll
ext-ms-win-shell-shell32-l1-2-2shell32.dll
ext-ms-win-shell-shlwapi-l1-1-2shlwapi.dll
ext-ms-win-shell32-shellcom-l1-1-0windows.storage.dll
ext-ms-win-shell32-shellfolders-l1-1-1windows.storage.dll
ext-ms-win-smbshare-browser-l1-1-0browser.dll
ext-ms-win-smbshare-browserclient-l1-1-0browcli.dll
ext-ms-win-smbshare-sscore-l1-1-0sscoreext.dll
ext-ms-win-spinf-inf-l1-1-0spinf.dll
ext-ms-win-srhinproc-entrypoint-l1-1-0srhinproc.dll
ext-ms-win-storage-iscsidsc-l1-1-0iscsidsc.dll
ext-ms-win-storage-sense-l1-1-0storageusage.dll
ext-ms-win-sxs-oleautomation-l1-1-0sxs.dll
ext-ms-win-tsf-msctf-l1-1-1msctf.dll
ext-ms-win-ttlsext-eap-l1-1-0ttlsext.dll
ext-ms-win-uiacore-l1-1-3uiautomationcore.dll
ext-ms-win-umpoext-umpo-l1-1-0umpoext.dll
ext-ms-win-usp10-l1-1-0gdi32full.dll
ext-ms-win-uwf-servicing-apis-l1-1-0uwfservicingapi.dll
ext-ms-win-uxtheme-themes-l1-1-1uxtheme.dll
ext-ms-win-wer-reporting-l1-1-1wer.dll
ext-ms-win-wer-ui-l1-1-0werui.dll
ext-ms-win-wer-wct-l1-1-0wer.dll
ext-ms-win-wevtapi-eventlog-l1-1-3wevtapi.dll
ext-ms-win-winbici-l1-1-0winbici.dll
ext-ms-win-winrt-storage-l1-1-0windows.storage.dll
ext-ms-win-wlan-grouppolicy-l1-1-0wlgpclnt.dll
ext-ms-win-wlan-onexui-l1-1-0onexui.dll
ext-ms-win-wlan-scard-l1-1-0winscard.dll
ext-ms-win-wrp-sfc-l1-1-0sfc.dll
ext-ms-win-wsclient-devlicense-l1-1-1wsclient.dll
ext-ms-win-wwaext-misc-l1-1-0wwaext.dll
ext-ms-win-wwaext-module-l1-1-0wwaext.dll
ext-ms-win-wwan-wwapi-l1-1-1wwapi.dll
ext-ms-win-xaml-controls-l1-1-0windows.ui.xaml.phone.dll
↧
↧

ida 6.95 has been released

August 9, 2016, 4:57 am
$
0
0
changelog
useful changes:
  • PE: added detection of entry point from incremental linking by Visual Studio 
  • FLIRT: added signatures for Windows Driver Kits 7-10
  • FLIRT: added detection of GsDriverEntry for Windows Drivers 
but still no support of apisetschema in PE imports, yeah
↧

how to build mbedtls-2.3.0 with wdk7

August 30, 2016, 9:27 am
$
0
0
Lets say that you want to have some Diffie-Hellman-Merkle algorithm & hmac inside your driver. I found plain C library mbedtls which is very suitable for this, but has one minor problem - it does not support wdk7. So I just made port for it

In file sources define WDK_BUILD for our WDK build:

TARGETTYPE=DRIVER_LIBRARY
TARGETNAME=mbedtls

TARGETLIBS=$(TARGETLIBS) \


C_DEFINES= $(C_DEFINES) -DWDK_BUILD

INCLUDES=$(INCLUDES); \
                    ..\include;

SOURCES=aes.c        aesni.c        arc4.c           \
        asn1parse.c    asn1write.c    base64.c       \
        bignum.c    blowfish.c    camellia.c         \
        ccm.c        cipher.c    cipher_wrap.c       \
        ctr_drbg.c    des.c        dhm.c             \
        ecdh.c        ecdsa.c        ecjpake.c       \
        ecp.c                                        \
        ecp_curves.c    entropy.c    entropy_poll.c  \
        error.c        gcm.c        havege.c         \
        hmac_drbg.c    md.c        md2.c             \
        md4.c        md5.c        md_wrap.c          \
        memory_buffer_alloc.c        oid.c           \
        padlock.c    pem.c        pk.c               \
        pk_wrap.c    pkcs12.c    pkcs5.c             \
        pkparse.c    pkwrite.c    platform.c         \
        ripemd160.c    rsa.c        sha1.c           \
        sha256.c    sha512.c    threading.c          \
        timing.c    version.c                        \
        version_features.c        xtea.c

simple Makefile:
!INCLUDE $(NTMAKEENV)\makefile.def

also you need apply this patch bcs in WDK warning treated as error:
diff -up D:\work\src\crypto\mbedtls-2.3.0\library/asn1write.c D:\work\src\mbedtls-2.3.0\library/asn1write.c
*** D:\work\src\crypto\mbedtls-2.3.0\library/asn1write.c    Mon Jun 27 21:50:36 2016
--- D:\work\src\mbedtls-2.3.0\library/asn1write.c    Tue Aug 30 19:30:17 2016
*************** int mbedtls_asn1_write_int( unsigned cha
*** 213,219 ****
          return( MBEDTLS_ERR_ASN1_BUF_TOO_SMALL );
 
      len += 1;
!     *--(*p) = val;
 
      if( val > 0 && **p & 0x80 )
      {
--- 213,219 ----
          return( MBEDTLS_ERR_ASN1_BUF_TOO_SMALL );
 
      len += 1;
!     *--(*p) = (unsigned char)val;
 
      if( val > 0 && **p & 0x80 )
      {
diff -up D:\work\src\crypto\mbedtls-2.3.0\library/base64.c D:\work\src\mbedtls-2.3.0\library/base64.c
*** D:\work\src\crypto\mbedtls-2.3.0\library/base64.c    Mon Jun 27 21:50:36 2016
--- D:\work\src\mbedtls-2.3.0\library/base64.c    Tue Aug 30 18:02:29 2016
***************
*** 29,35 ****
 
  #include "mbedtls/base64.h"
 
! #include <stdint.h>
 
  #if defined(MBEDTLS_SELF_TEST)
  #include <string.h>
--- 29,39 ----
 
  #include "mbedtls/base64.h"
 
! #ifdef WDK_BUILD
! # include "mbedtls/stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #if defined(MBEDTLS_SELF_TEST)
  #include <string.h>
diff -up D:\work\src\crypto\mbedtls-2.3.0\library/blowfish.c D:\work\src\mbedtls-2.3.0\library/blowfish.c
*** D:\work\src\crypto\mbedtls-2.3.0\library/blowfish.c    Mon Jun 27 21:50:36 2016
--- D:\work\src\mbedtls-2.3.0\library/blowfish.c    Tue Aug 30 18:03:35 2016
*************** static const uint32_t P[MBEDTLS_BLOWFISH
*** 76,82 ****
  };
 
  /* declarations of data at the end of this file */
! static const uint32_t S[4][256];
 
  static uint32_t F( mbedtls_blowfish_context *ctx, uint32_t x )
  {
--- 76,339 ----
  };
 
  /* declarations of data at the end of this file */
! static const uint32_t S[4][256] = {
!     {   0xD1310BA6L, 0x98DFB5ACL, 0x2FFD72DBL, 0xD01ADFB7L,
!         0xB8E1AFEDL, 0x6A267E96L, 0xBA7C9045L, 0xF12C7F99L,
!         0x24A19947L, 0xB3916CF7L, 0x0801F2E2L, 0x858EFC16L,
!         0x636920D8L, 0x71574E69L, 0xA458FEA3L, 0xF4933D7EL,
!         0x0D95748FL, 0x728EB658L, 0x718BCD58L, 0x82154AEEL,
!         0x7B54A41DL, 0xC25A59B5L, 0x9C30D539L, 0x2AF26013L,
!         0xC5D1B023L, 0x286085F0L, 0xCA417918L, 0xB8DB38EFL,
!         0x8E79DCB0L, 0x603A180EL, 0x6C9E0E8BL, 0xB01E8A3EL,
!         0xD71577C1L, 0xBD314B27L, 0x78AF2FDAL, 0x55605C60L,
!         0xE65525F3L, 0xAA55AB94L, 0x57489862L, 0x63E81440L,
!         0x55CA396AL, 0x2AAB10B6L, 0xB4CC5C34L, 0x1141E8CEL,
!         0xA15486AFL, 0x7C72E993L, 0xB3EE1411L, 0x636FBC2AL,
!         0x2BA9C55DL, 0x741831F6L, 0xCE5C3E16L, 0x9B87931EL,
!         0xAFD6BA33L, 0x6C24CF5CL, 0x7A325381L, 0x28958677L,
!         0x3B8F4898L, 0x6B4BB9AFL, 0xC4BFE81BL, 0x66282193L,
!         0x61D809CCL, 0xFB21A991L, 0x487CAC60L, 0x5DEC8032L,
!         0xEF845D5DL, 0xE98575B1L, 0xDC262302L, 0xEB651B88L,
!         0x23893E81L, 0xD396ACC5L, 0x0F6D6FF3L, 0x83F44239L,
!         0x2E0B4482L, 0xA4842004L, 0x69C8F04AL, 0x9E1F9B5EL,
!         0x21C66842L, 0xF6E96C9AL, 0x670C9C61L, 0xABD388F0L,
!         0x6A51A0D2L, 0xD8542F68L, 0x960FA728L, 0xAB5133A3L,
!         0x6EEF0B6CL, 0x137A3BE4L, 0xBA3BF050L, 0x7EFB2A98L,
!         0xA1F1651DL, 0x39AF0176L, 0x66CA593EL, 0x82430E88L,
!         0x8CEE8619L, 0x456F9FB4L, 0x7D84A5C3L, 0x3B8B5EBEL,
!         0xE06F75D8L, 0x85C12073L, 0x401A449FL, 0x56C16AA6L,
!         0x4ED3AA62L, 0x363F7706L, 0x1BFEDF72L, 0x429B023DL,
!         0x37D0D724L, 0xD00A1248L, 0xDB0FEAD3L, 0x49F1C09BL,
!         0x075372C9L, 0x80991B7BL, 0x25D479D8L, 0xF6E8DEF7L,
!         0xE3FE501AL, 0xB6794C3BL, 0x976CE0BDL, 0x04C006BAL,
!         0xC1A94FB6L, 0x409F60C4L, 0x5E5C9EC2L, 0x196A2463L,
!         0x68FB6FAFL, 0x3E6C53B5L, 0x1339B2EBL, 0x3B52EC6FL,
!         0x6DFC511FL, 0x9B30952CL, 0xCC814544L, 0xAF5EBD09L,
!         0xBEE3D004L, 0xDE334AFDL, 0x660F2807L, 0x192E4BB3L,
!         0xC0CBA857L, 0x45C8740FL, 0xD20B5F39L, 0xB9D3FBDBL,
!         0x5579C0BDL, 0x1A60320AL, 0xD6A100C6L, 0x402C7279L,
!         0x679F25FEL, 0xFB1FA3CCL, 0x8EA5E9F8L, 0xDB3222F8L,
!         0x3C7516DFL, 0xFD616B15L, 0x2F501EC8L, 0xAD0552ABL,
!         0x323DB5FAL, 0xFD238760L, 0x53317B48L, 0x3E00DF82L,
!         0x9E5C57BBL, 0xCA6F8CA0L, 0x1A87562EL, 0xDF1769DBL,
!         0xD542A8F6L, 0x287EFFC3L, 0xAC6732C6L, 0x8C4F5573L,
!         0x695B27B0L, 0xBBCA58C8L, 0xE1FFA35DL, 0xB8F011A0L,
!         0x10FA3D98L, 0xFD2183B8L, 0x4AFCB56CL, 0x2DD1D35BL,
!         0x9A53E479L, 0xB6F84565L, 0xD28E49BCL, 0x4BFB9790L,
!         0xE1DDF2DAL, 0xA4CB7E33L, 0x62FB1341L, 0xCEE4C6E8L,
!         0xEF20CADAL, 0x36774C01L, 0xD07E9EFEL, 0x2BF11FB4L,
!         0x95DBDA4DL, 0xAE909198L, 0xEAAD8E71L, 0x6B93D5A0L,
!         0xD08ED1D0L, 0xAFC725E0L, 0x8E3C5B2FL, 0x8E7594B7L,
!         0x8FF6E2FBL, 0xF2122B64L, 0x8888B812L, 0x900DF01CL,
!         0x4FAD5EA0L, 0x688FC31CL, 0xD1CFF191L, 0xB3A8C1ADL,
!         0x2F2F2218L, 0xBE0E1777L, 0xEA752DFEL, 0x8B021FA1L,
!         0xE5A0CC0FL, 0xB56F74E8L, 0x18ACF3D6L, 0xCE89E299L,
!         0xB4A84FE0L, 0xFD13E0B7L, 0x7CC43B81L, 0xD2ADA8D9L,
!         0x165FA266L, 0x80957705L, 0x93CC7314L, 0x211A1477L,
!         0xE6AD2065L, 0x77B5FA86L, 0xC75442F5L, 0xFB9D35CFL,
!         0xEBCDAF0CL, 0x7B3E89A0L, 0xD6411BD3L, 0xAE1E7E49L,
!         0x00250E2DL, 0x2071B35EL, 0x226800BBL, 0x57B8E0AFL,
!         0x2464369BL, 0xF009B91EL, 0x5563911DL, 0x59DFA6AAL,
!         0x78C14389L, 0xD95A537FL, 0x207D5BA2L, 0x02E5B9C5L,
!         0x83260376L, 0x6295CFA9L, 0x11C81968L, 0x4E734A41L,
!         0xB3472DCAL, 0x7B14A94AL, 0x1B510052L, 0x9A532915L,
!         0xD60F573FL, 0xBC9BC6E4L, 0x2B60A476L, 0x81E67400L,
!         0x08BA6FB5L, 0x571BE91FL, 0xF296EC6BL, 0x2A0DD915L,
!         0xB6636521L, 0xE7B9F9B6L, 0xFF34052EL, 0xC5855664L,
!         0x53B02D5DL, 0xA99F8FA1L, 0x08BA4799L, 0x6E85076AL   },
!     {   0x4B7A70E9L, 0xB5B32944L, 0xDB75092EL, 0xC4192623L,
!         0xAD6EA6B0L, 0x49A7DF7DL, 0x9CEE60B8L, 0x8FEDB266L,
!         0xECAA8C71L, 0x699A17FFL, 0x5664526CL, 0xC2B19EE1L,
!         0x193602A5L, 0x75094C29L, 0xA0591340L, 0xE4183A3EL,
!         0x3F54989AL, 0x5B429D65L, 0x6B8FE4D6L, 0x99F73FD6L,
!         0xA1D29C07L, 0xEFE830F5L, 0x4D2D38E6L, 0xF0255DC1L,
!         0x4CDD2086L, 0x8470EB26L, 0x6382E9C6L, 0x021ECC5EL,
!         0x09686B3FL, 0x3EBAEFC9L, 0x3C971814L, 0x6B6A70A1L,
!         0x687F3584L, 0x52A0E286L, 0xB79C5305L, 0xAA500737L,
!         0x3E07841CL, 0x7FDEAE5CL, 0x8E7D44ECL, 0x5716F2B8L,
!         0xB03ADA37L, 0xF0500C0DL, 0xF01C1F04L, 0x0200B3FFL,
!         0xAE0CF51AL, 0x3CB574B2L, 0x25837A58L, 0xDC0921BDL,
!         0xD19113F9L, 0x7CA92FF6L, 0x94324773L, 0x22F54701L,
!         0x3AE5E581L, 0x37C2DADCL, 0xC8B57634L, 0x9AF3DDA7L,
!         0xA9446146L, 0x0FD0030EL, 0xECC8C73EL, 0xA4751E41L,
!         0xE238CD99L, 0x3BEA0E2FL, 0x3280BBA1L, 0x183EB331L,
!         0x4E548B38L, 0x4F6DB908L, 0x6F420D03L, 0xF60A04BFL,
!         0x2CB81290L, 0x24977C79L, 0x5679B072L, 0xBCAF89AFL,
!         0xDE9A771FL, 0xD9930810L, 0xB38BAE12L, 0xDCCF3F2EL,
!         0x5512721FL, 0x2E6B7124L, 0x501ADDE6L, 0x9F84CD87L,
!         0x7A584718L, 0x7408DA17L, 0xBC9F9ABCL, 0xE94B7D8CL,
!         0xEC7AEC3AL, 0xDB851DFAL, 0x63094366L, 0xC464C3D2L,
!         0xEF1C1847L, 0x3215D908L, 0xDD433B37L, 0x24C2BA16L,
!         0x12A14D43L, 0x2A65C451L, 0x50940002L, 0x133AE4DDL,
!         0x71DFF89EL, 0x10314E55L, 0x81AC77D6L, 0x5F11199BL,
!         0x043556F1L, 0xD7A3C76BL, 0x3C11183BL, 0x5924A509L,
!         0xF28FE6EDL, 0x97F1FBFAL, 0x9EBABF2CL, 0x1E153C6EL,
!         0x86E34570L, 0xEAE96FB1L, 0x860E5E0AL, 0x5A3E2AB3L,
!         0x771FE71CL, 0x4E3D06FAL, 0x2965DCB9L, 0x99E71D0FL,
!         0x803E89D6L, 0x5266C825L, 0x2E4CC978L, 0x9C10B36AL,
!         0xC6150EBAL, 0x94E2EA78L, 0xA5FC3C53L, 0x1E0A2DF4L,
!         0xF2F74EA7L, 0x361D2B3DL, 0x1939260FL, 0x19C27960L,
!         0x5223A708L, 0xF71312B6L, 0xEBADFE6EL, 0xEAC31F66L,
!         0xE3BC4595L, 0xA67BC883L, 0xB17F37D1L, 0x018CFF28L,
!         0xC332DDEFL, 0xBE6C5AA5L, 0x65582185L, 0x68AB9802L,
!         0xEECEA50FL, 0xDB2F953BL, 0x2AEF7DADL, 0x5B6E2F84L,
!         0x1521B628L, 0x29076170L, 0xECDD4775L, 0x619F1510L,
!         0x13CCA830L, 0xEB61BD96L, 0x0334FE1EL, 0xAA0363CFL,
!         0xB5735C90L, 0x4C70A239L, 0xD59E9E0BL, 0xCBAADE14L,
!         0xEECC86BCL, 0x60622CA7L, 0x9CAB5CABL, 0xB2F3846EL,
!         0x648B1EAFL, 0x19BDF0CAL, 0xA02369B9L, 0x655ABB50L,
!         0x40685A32L, 0x3C2AB4B3L, 0x319EE9D5L, 0xC021B8F7L,
!         0x9B540B19L, 0x875FA099L, 0x95F7997EL, 0x623D7DA8L,
!         0xF837889AL, 0x97E32D77L, 0x11ED935FL, 0x16681281L,
!         0x0E358829L, 0xC7E61FD6L, 0x96DEDFA1L, 0x7858BA99L,
!         0x57F584A5L, 0x1B227263L, 0x9B83C3FFL, 0x1AC24696L,
!         0xCDB30AEBL, 0x532E3054L, 0x8FD948E4L, 0x6DBC3128L,
!         0x58EBF2EFL, 0x34C6FFEAL, 0xFE28ED61L, 0xEE7C3C73L,
!         0x5D4A14D9L, 0xE864B7E3L, 0x42105D14L, 0x203E13E0L,
!         0x45EEE2B6L, 0xA3AAABEAL, 0xDB6C4F15L, 0xFACB4FD0L,
!         0xC742F442L, 0xEF6ABBB5L, 0x654F3B1DL, 0x41CD2105L,
!         0xD81E799EL, 0x86854DC7L, 0xE44B476AL, 0x3D816250L,
!         0xCF62A1F2L, 0x5B8D2646L, 0xFC8883A0L, 0xC1C7B6A3L,
!         0x7F1524C3L, 0x69CB7492L, 0x47848A0BL, 0x5692B285L,
!         0x095BBF00L, 0xAD19489DL, 0x1462B174L, 0x23820E00L,
!         0x58428D2AL, 0x0C55F5EAL, 0x1DADF43EL, 0x233F7061L,
!         0x3372F092L, 0x8D937E41L, 0xD65FECF1L, 0x6C223BDBL,
!         0x7CDE3759L, 0xCBEE7460L, 0x4085F2A7L, 0xCE77326EL,
!         0xA6078084L, 0x19F8509EL, 0xE8EFD855L, 0x61D99735L,
!         0xA969A7AAL, 0xC50C06C2L, 0x5A04ABFCL, 0x800BCADCL,
!         0x9E447A2EL, 0xC3453484L, 0xFDD56705L, 0x0E1E9EC9L,
!         0xDB73DBD3L, 0x105588CDL, 0x675FDA79L, 0xE3674340L,
!         0xC5C43465L, 0x713E38D8L, 0x3D28F89EL, 0xF16DFF20L,
!         0x153E21E7L, 0x8FB03D4AL, 0xE6E39F2BL, 0xDB83ADF7L   },
!     {   0xE93D5A68L, 0x948140F7L, 0xF64C261CL, 0x94692934L,
!         0x411520F7L, 0x7602D4F7L, 0xBCF46B2EL, 0xD4A20068L,
!         0xD4082471L, 0x3320F46AL, 0x43B7D4B7L, 0x500061AFL,
!         0x1E39F62EL, 0x97244546L, 0x14214F74L, 0xBF8B8840L,
!         0x4D95FC1DL, 0x96B591AFL, 0x70F4DDD3L, 0x66A02F45L,
!         0xBFBC09ECL, 0x03BD9785L, 0x7FAC6DD0L, 0x31CB8504L,
!         0x96EB27B3L, 0x55FD3941L, 0xDA2547E6L, 0xABCA0A9AL,
!         0x28507825L, 0x530429F4L, 0x0A2C86DAL, 0xE9B66DFBL,
!         0x68DC1462L, 0xD7486900L, 0x680EC0A4L, 0x27A18DEEL,
!         0x4F3FFEA2L, 0xE887AD8CL, 0xB58CE006L, 0x7AF4D6B6L,
!         0xAACE1E7CL, 0xD3375FECL, 0xCE78A399L, 0x406B2A42L,
!         0x20FE9E35L, 0xD9F385B9L, 0xEE39D7ABL, 0x3B124E8BL,
!         0x1DC9FAF7L, 0x4B6D1856L, 0x26A36631L, 0xEAE397B2L,
!         0x3A6EFA74L, 0xDD5B4332L, 0x6841E7F7L, 0xCA7820FBL,
!         0xFB0AF54EL, 0xD8FEB397L, 0x454056ACL, 0xBA489527L,
!         0x55533A3AL, 0x20838D87L, 0xFE6BA9B7L, 0xD096954BL,
!         0x55A867BCL, 0xA1159A58L, 0xCCA92963L, 0x99E1DB33L,
!         0xA62A4A56L, 0x3F3125F9L, 0x5EF47E1CL, 0x9029317CL,
!         0xFDF8E802L, 0x04272F70L, 0x80BB155CL, 0x05282CE3L,
!         0x95C11548L, 0xE4C66D22L, 0x48C1133FL, 0xC70F86DCL,
!         0x07F9C9EEL, 0x41041F0FL, 0x404779A4L, 0x5D886E17L,
!         0x325F51EBL, 0xD59BC0D1L, 0xF2BCC18FL, 0x41113564L,
!         0x257B7834L, 0x602A9C60L, 0xDFF8E8A3L, 0x1F636C1BL,
!         0x0E12B4C2L, 0x02E1329EL, 0xAF664FD1L, 0xCAD18115L,
!         0x6B2395E0L, 0x333E92E1L, 0x3B240B62L, 0xEEBEB922L,
!         0x85B2A20EL, 0xE6BA0D99L, 0xDE720C8CL, 0x2DA2F728L,
!         0xD0127845L, 0x95B794FDL, 0x647D0862L, 0xE7CCF5F0L,
!         0x5449A36FL, 0x877D48FAL, 0xC39DFD27L, 0xF33E8D1EL,
!         0x0A476341L, 0x992EFF74L, 0x3A6F6EABL, 0xF4F8FD37L,
!         0xA812DC60L, 0xA1EBDDF8L, 0x991BE14CL, 0xDB6E6B0DL,
!         0xC67B5510L, 0x6D672C37L, 0x2765D43BL, 0xDCD0E804L,
!         0xF1290DC7L, 0xCC00FFA3L, 0xB5390F92L, 0x690FED0BL,
!         0x667B9FFBL, 0xCEDB7D9CL, 0xA091CF0BL, 0xD9155EA3L,
!         0xBB132F88L, 0x515BAD24L, 0x7B9479BFL, 0x763BD6EBL,
!         0x37392EB3L, 0xCC115979L, 0x8026E297L, 0xF42E312DL,
!         0x6842ADA7L, 0xC66A2B3BL, 0x12754CCCL, 0x782EF11CL,
!         0x6A124237L, 0xB79251E7L, 0x06A1BBE6L, 0x4BFB6350L,
!         0x1A6B1018L, 0x11CAEDFAL, 0x3D25BDD8L, 0xE2E1C3C9L,
!         0x44421659L, 0x0A121386L, 0xD90CEC6EL, 0xD5ABEA2AL,
!         0x64AF674EL, 0xDA86A85FL, 0xBEBFE988L, 0x64E4C3FEL,
!         0x9DBC8057L, 0xF0F7C086L, 0x60787BF8L, 0x6003604DL,
!         0xD1FD8346L, 0xF6381FB0L, 0x7745AE04L, 0xD736FCCCL,
!         0x83426B33L, 0xF01EAB71L, 0xB0804187L, 0x3C005E5FL,
!         0x77A057BEL, 0xBDE8AE24L, 0x55464299L, 0xBF582E61L,
!         0x4E58F48FL, 0xF2DDFDA2L, 0xF474EF38L, 0x8789BDC2L,
!         0x5366F9C3L, 0xC8B38E74L, 0xB475F255L, 0x46FCD9B9L,
!         0x7AEB2661L, 0x8B1DDF84L, 0x846A0E79L, 0x915F95E2L,
!         0x466E598EL, 0x20B45770L, 0x8CD55591L, 0xC902DE4CL,
!         0xB90BACE1L, 0xBB8205D0L, 0x11A86248L, 0x7574A99EL,
!         0xB77F19B6L, 0xE0A9DC09L, 0x662D09A1L, 0xC4324633L,
!         0xE85A1F02L, 0x09F0BE8CL, 0x4A99A025L, 0x1D6EFE10L,
!         0x1AB93D1DL, 0x0BA5A4DFL, 0xA186F20FL, 0x2868F169L,
!         0xDCB7DA83L, 0x573906FEL, 0xA1E2CE9BL, 0x4FCD7F52L,
!         0x50115E01L, 0xA70683FAL, 0xA002B5C4L, 0x0DE6D027L,
!         0x9AF88C27L, 0x773F8641L, 0xC3604C06L, 0x61A806B5L,
!         0xF0177A28L, 0xC0F586E0L, 0x006058AAL, 0x30DC7D62L,
!         0x11E69ED7L, 0x2338EA63L, 0x53C2DD94L, 0xC2C21634L,
!         0xBBCBEE56L, 0x90BCB6DEL, 0xEBFC7DA1L, 0xCE591D76L,
!         0x6F05E409L, 0x4B7C0188L, 0x39720A3DL, 0x7C927C24L,
!         0x86E3725FL, 0x724D9DB9L, 0x1AC15BB4L, 0xD39EB8FCL,
!         0xED545578L, 0x08FCA5B5L, 0xD83D7CD3L, 0x4DAD0FC4L,
!         0x1E50EF5EL, 0xB161E6F8L, 0xA28514D9L, 0x6C51133CL,
!         0x6FD5C7E7L, 0x56E14EC4L, 0x362ABFCEL, 0xDDC6C837L,
!         0xD79A3234L, 0x92638212L, 0x670EFA8EL, 0x406000E0L  },
!     {   0x3A39CE37L, 0xD3FAF5CFL, 0xABC27737L, 0x5AC52D1BL,
!         0x5CB0679EL, 0x4FA33742L, 0xD3822740L, 0x99BC9BBEL,
!         0xD5118E9DL, 0xBF0F7315L, 0xD62D1C7EL, 0xC700C47BL,
!         0xB78C1B6BL, 0x21A19045L, 0xB26EB1BEL, 0x6A366EB4L,
!         0x5748AB2FL, 0xBC946E79L, 0xC6A376D2L, 0x6549C2C8L,
!         0x530FF8EEL, 0x468DDE7DL, 0xD5730A1DL, 0x4CD04DC6L,
!         0x2939BBDBL, 0xA9BA4650L, 0xAC9526E8L, 0xBE5EE304L,
!         0xA1FAD5F0L, 0x6A2D519AL, 0x63EF8CE2L, 0x9A86EE22L,
!         0xC089C2B8L, 0x43242EF6L, 0xA51E03AAL, 0x9CF2D0A4L,
!         0x83C061BAL, 0x9BE96A4DL, 0x8FE51550L, 0xBA645BD6L,
!         0x2826A2F9L, 0xA73A3AE1L, 0x4BA99586L, 0xEF5562E9L,
!         0xC72FEFD3L, 0xF752F7DAL, 0x3F046F69L, 0x77FA0A59L,
!         0x80E4A915L, 0x87B08601L, 0x9B09E6ADL, 0x3B3EE593L,
!         0xE990FD5AL, 0x9E34D797L, 0x2CF0B7D9L, 0x022B8B51L,
!         0x96D5AC3AL, 0x017DA67DL, 0xD1CF3ED6L, 0x7C7D2D28L,
!         0x1F9F25CFL, 0xADF2B89BL, 0x5AD6B472L, 0x5A88F54CL,
!         0xE029AC71L, 0xE019A5E6L, 0x47B0ACFDL, 0xED93FA9BL,
!         0xE8D3C48DL, 0x283B57CCL, 0xF8D56629L, 0x79132E28L,
!         0x785F0191L, 0xED756055L, 0xF7960E44L, 0xE3D35E8CL,
!         0x15056DD4L, 0x88F46DBAL, 0x03A16125L, 0x0564F0BDL,
!         0xC3EB9E15L, 0x3C9057A2L, 0x97271AECL, 0xA93A072AL,
!         0x1B3F6D9BL, 0x1E6321F5L, 0xF59C66FBL, 0x26DCF319L,
!         0x7533D928L, 0xB155FDF5L, 0x03563482L, 0x8ABA3CBBL,
!         0x28517711L, 0xC20AD9F8L, 0xABCC5167L, 0xCCAD925FL,
!         0x4DE81751L, 0x3830DC8EL, 0x379D5862L, 0x9320F991L,
!         0xEA7A90C2L, 0xFB3E7BCEL, 0x5121CE64L, 0x774FBE32L,
!         0xA8B6E37EL, 0xC3293D46L, 0x48DE5369L, 0x6413E680L,
!         0xA2AE0810L, 0xDD6DB224L, 0x69852DFDL, 0x09072166L,
!         0xB39A460AL, 0x6445C0DDL, 0x586CDECFL, 0x1C20C8AEL,
!         0x5BBEF7DDL, 0x1B588D40L, 0xCCD2017FL, 0x6BB4E3BBL,
!         0xDDA26A7EL, 0x3A59FF45L, 0x3E350A44L, 0xBCB4CDD5L,
!         0x72EACEA8L, 0xFA6484BBL, 0x8D6612AEL, 0xBF3C6F47L,
!         0xD29BE463L, 0x542F5D9EL, 0xAEC2771BL, 0xF64E6370L,
!         0x740E0D8DL, 0xE75B1357L, 0xF8721671L, 0xAF537D5DL,
!         0x4040CB08L, 0x4EB4E2CCL, 0x34D2466AL, 0x0115AF84L,
!         0xE1B00428L, 0x95983A1DL, 0x06B89FB4L, 0xCE6EA048L,
!         0x6F3F3B82L, 0x3520AB82L, 0x011A1D4BL, 0x277227F8L,
!         0x611560B1L, 0xE7933FDCL, 0xBB3A792BL, 0x344525BDL,
!         0xA08839E1L, 0x51CE794BL, 0x2F32C9B7L, 0xA01FBAC9L,
!         0xE01CC87EL, 0xBCC7D1F6L, 0xCF0111C3L, 0xA1E8AAC7L,
!         0x1A908749L, 0xD44FBD9AL, 0xD0DADECBL, 0xD50ADA38L,
!         0x0339C32AL, 0xC6913667L, 0x8DF9317CL, 0xE0B12B4FL,
!         0xF79E59B7L, 0x43F5BB3AL, 0xF2D519FFL, 0x27D9459CL,
!         0xBF97222CL, 0x15E6FC2AL, 0x0F91FC71L, 0x9B941525L,
!         0xFAE59361L, 0xCEB69CEBL, 0xC2A86459L, 0x12BAA8D1L,
!         0xB6C1075EL, 0xE3056A0CL, 0x10D25065L, 0xCB03A442L,
!         0xE0EC6E0EL, 0x1698DB3BL, 0x4C98A0BEL, 0x3278E964L,
!         0x9F1F9532L, 0xE0D392DFL, 0xD3A0342BL, 0x8971F21EL,
!         0x1B0A7441L, 0x4BA3348CL, 0xC5BE7120L, 0xC37632D8L,
!         0xDF359F8DL, 0x9B992F2EL, 0xE60B6F47L, 0x0FE3F11DL,
!         0xE54CDA54L, 0x1EDAD891L, 0xCE6279CFL, 0xCD3E7E6FL,
!         0x1618B166L, 0xFD2C1D05L, 0x848FD2C5L, 0xF6FB2299L,
!         0xF523F357L, 0xA6327623L, 0x93A83531L, 0x56CCCD02L,
!         0xACF08162L, 0x5A75EBB5L, 0x6E163697L, 0x88D273CCL,
!         0xDE966292L, 0x81B949D0L, 0x4C50901BL, 0x71C65614L,
!         0xE6C6C7BDL, 0x327A140AL, 0x45E1D006L, 0xC3F27B9AL,
!         0xC9AA53FDL, 0x62A80F00L, 0xBB25BFE2L, 0x35BDD2F6L,
!         0x71126905L, 0xB2040222L, 0xB6CBCF7CL, 0xCD769C2BL,
!         0x53113EC0L, 0x1640E3D3L, 0x38ABBD60L, 0x2547ADF0L,
!         0xBA38209CL, 0xF746CE76L, 0x77AFA1C5L, 0x20756060L,
!         0x85CBFE4EL, 0x8AE88DD8L, 0x7AAAF9B0L, 0x4CF9AA7EL,
!         0x1948C25CL, 0x02FB8A8CL, 0x01C36AE4L, 0xD6EBE1F9L,
!         0x90D4F869L, 0xA65CDEA0L, 0x3F09252DL, 0xC208E69FL,
!         0xB74E6132L, 0xCE77E25BL, 0x578FDFE3L, 0x3AC372E6L  }
! };
 
  static uint32_t F( mbedtls_blowfish_context *ctx, uint32_t x )
  {
*************** int mbedtls_blowfish_crypt_ctr( mbedtls_
*** 392,656 ****
      return( 0 );
  }
  #endif /* MBEDTLS_CIPHER_MODE_CTR */
-
- static const uint32_t S[4][256] = {
-     {   0xD1310BA6L, 0x98DFB5ACL, 0x2FFD72DBL, 0xD01ADFB7L,
-         0xB8E1AFEDL, 0x6A267E96L, 0xBA7C9045L, 0xF12C7F99L,
-         0x24A19947L, 0xB3916CF7L, 0x0801F2E2L, 0x858EFC16L,
-         0x636920D8L, 0x71574E69L, 0xA458FEA3L, 0xF4933D7EL,
-         0x0D95748FL, 0x728EB658L, 0x718BCD58L, 0x82154AEEL,
-         0x7B54A41DL, 0xC25A59B5L, 0x9C30D539L, 0x2AF26013L,
-         0xC5D1B023L, 0x286085F0L, 0xCA417918L, 0xB8DB38EFL,
-         0x8E79DCB0L, 0x603A180EL, 0x6C9E0E8BL, 0xB01E8A3EL,
-         0xD71577C1L, 0xBD314B27L, 0x78AF2FDAL, 0x55605C60L,
-         0xE65525F3L, 0xAA55AB94L, 0x57489862L, 0x63E81440L,
-         0x55CA396AL, 0x2AAB10B6L, 0xB4CC5C34L, 0x1141E8CEL,
-         0xA15486AFL, 0x7C72E993L, 0xB3EE1411L, 0x636FBC2AL,
-         0x2BA9C55DL, 0x741831F6L, 0xCE5C3E16L, 0x9B87931EL,
-         0xAFD6BA33L, 0x6C24CF5CL, 0x7A325381L, 0x28958677L,
-         0x3B8F4898L, 0x6B4BB9AFL, 0xC4BFE81BL, 0x66282193L,
-         0x61D809CCL, 0xFB21A991L, 0x487CAC60L, 0x5DEC8032L,
-         0xEF845D5DL, 0xE98575B1L, 0xDC262302L, 0xEB651B88L,
-         0x23893E81L, 0xD396ACC5L, 0x0F6D6FF3L, 0x83F44239L,
-         0x2E0B4482L, 0xA4842004L, 0x69C8F04AL, 0x9E1F9B5EL,
-         0x21C66842L, 0xF6E96C9AL, 0x670C9C61L, 0xABD388F0L,
-         0x6A51A0D2L, 0xD8542F68L, 0x960FA728L, 0xAB5133A3L,
-         0x6EEF0B6CL, 0x137A3BE4L, 0xBA3BF050L, 0x7EFB2A98L,
-         0xA1F1651DL, 0x39AF0176L, 0x66CA593EL, 0x82430E88L,
-         0x8CEE8619L, 0x456F9FB4L, 0x7D84A5C3L, 0x3B8B5EBEL,
-         0xE06F75D8L, 0x85C12073L, 0x401A449FL, 0x56C16AA6L,
-         0x4ED3AA62L, 0x363F7706L, 0x1BFEDF72L, 0x429B023DL,
-         0x37D0D724L, 0xD00A1248L, 0xDB0FEAD3L, 0x49F1C09BL,
-         0x075372C9L, 0x80991B7BL, 0x25D479D8L, 0xF6E8DEF7L,
-         0xE3FE501AL, 0xB6794C3BL, 0x976CE0BDL, 0x04C006BAL,
-         0xC1A94FB6L, 0x409F60C4L, 0x5E5C9EC2L, 0x196A2463L,
-         0x68FB6FAFL, 0x3E6C53B5L, 0x1339B2EBL, 0x3B52EC6FL,
-         0x6DFC511FL, 0x9B30952CL, 0xCC814544L, 0xAF5EBD09L,
-         0xBEE3D004L, 0xDE334AFDL, 0x660F2807L, 0x192E4BB3L,
-         0xC0CBA857L, 0x45C8740FL, 0xD20B5F39L, 0xB9D3FBDBL,
-         0x5579C0BDL, 0x1A60320AL, 0xD6A100C6L, 0x402C7279L,
-         0x679F25FEL, 0xFB1FA3CCL, 0x8EA5E9F8L, 0xDB3222F8L,
-         0x3C7516DFL, 0xFD616B15L, 0x2F501EC8L, 0xAD0552ABL,
-         0x323DB5FAL, 0xFD238760L, 0x53317B48L, 0x3E00DF82L,
-         0x9E5C57BBL, 0xCA6F8CA0L, 0x1A87562EL, 0xDF1769DBL,
-         0xD542A8F6L, 0x287EFFC3L, 0xAC6732C6L, 0x8C4F5573L,
-         0x695B27B0L, 0xBBCA58C8L, 0xE1FFA35DL, 0xB8F011A0L,
-         0x10FA3D98L, 0xFD2183B8L, 0x4AFCB56CL, 0x2DD1D35BL,
-         0x9A53E479L, 0xB6F84565L, 0xD28E49BCL, 0x4BFB9790L,
-         0xE1DDF2DAL, 0xA4CB7E33L, 0x62FB1341L, 0xCEE4C6E8L,
-         0xEF20CADAL, 0x36774C01L, 0xD07E9EFEL, 0x2BF11FB4L,
-         0x95DBDA4DL, 0xAE909198L, 0xEAAD8E71L, 0x6B93D5A0L,
-         0xD08ED1D0L, 0xAFC725E0L, 0x8E3C5B2FL, 0x8E7594B7L,
-         0x8FF6E2FBL, 0xF2122B64L, 0x8888B812L, 0x900DF01CL,
-         0x4FAD5EA0L, 0x688FC31CL, 0xD1CFF191L, 0xB3A8C1ADL,
-         0x2F2F2218L, 0xBE0E1777L, 0xEA752DFEL, 0x8B021FA1L,
-         0xE5A0CC0FL, 0xB56F74E8L, 0x18ACF3D6L, 0xCE89E299L,
-         0xB4A84FE0L, 0xFD13E0B7L, 0x7CC43B81L, 0xD2ADA8D9L,
-         0x165FA266L, 0x80957705L, 0x93CC7314L, 0x211A1477L,
-         0xE6AD2065L, 0x77B5FA86L, 0xC75442F5L, 0xFB9D35CFL,
-         0xEBCDAF0CL, 0x7B3E89A0L, 0xD6411BD3L, 0xAE1E7E49L,
-         0x00250E2DL, 0x2071B35EL, 0x226800BBL, 0x57B8E0AFL,
-         0x2464369BL, 0xF009B91EL, 0x5563911DL, 0x59DFA6AAL,
-         0x78C14389L, 0xD95A537FL, 0x207D5BA2L, 0x02E5B9C5L,
-         0x83260376L, 0x6295CFA9L, 0x11C81968L, 0x4E734A41L,
-         0xB3472DCAL, 0x7B14A94AL, 0x1B510052L, 0x9A532915L,
-         0xD60F573FL, 0xBC9BC6E4L, 0x2B60A476L, 0x81E67400L,
-         0x08BA6FB5L, 0x571BE91FL, 0xF296EC6BL, 0x2A0DD915L,
-         0xB6636521L, 0xE7B9F9B6L, 0xFF34052EL, 0xC5855664L,
-         0x53B02D5DL, 0xA99F8FA1L, 0x08BA4799L, 0x6E85076AL   },
-     {   0x4B7A70E9L, 0xB5B32944L, 0xDB75092EL, 0xC4192623L,
-         0xAD6EA6B0L, 0x49A7DF7DL, 0x9CEE60B8L, 0x8FEDB266L,
-         0xECAA8C71L, 0x699A17FFL, 0x5664526CL, 0xC2B19EE1L,
-         0x193602A5L, 0x75094C29L, 0xA0591340L, 0xE4183A3EL,
-         0x3F54989AL, 0x5B429D65L, 0x6B8FE4D6L, 0x99F73FD6L,
-         0xA1D29C07L, 0xEFE830F5L, 0x4D2D38E6L, 0xF0255DC1L,
-         0x4CDD2086L, 0x8470EB26L, 0x6382E9C6L, 0x021ECC5EL,
-         0x09686B3FL, 0x3EBAEFC9L, 0x3C971814L, 0x6B6A70A1L,
-         0x687F3584L, 0x52A0E286L, 0xB79C5305L, 0xAA500737L,
-         0x3E07841CL, 0x7FDEAE5CL, 0x8E7D44ECL, 0x5716F2B8L,
-         0xB03ADA37L, 0xF0500C0DL, 0xF01C1F04L, 0x0200B3FFL,
-         0xAE0CF51AL, 0x3CB574B2L, 0x25837A58L, 0xDC0921BDL,
-         0xD19113F9L, 0x7CA92FF6L, 0x94324773L, 0x22F54701L,
-         0x3AE5E581L, 0x37C2DADCL, 0xC8B57634L, 0x9AF3DDA7L,
-         0xA9446146L, 0x0FD0030EL, 0xECC8C73EL, 0xA4751E41L,
-         0xE238CD99L, 0x3BEA0E2FL, 0x3280BBA1L, 0x183EB331L,
-         0x4E548B38L, 0x4F6DB908L, 0x6F420D03L, 0xF60A04BFL,
-         0x2CB81290L, 0x24977C79L, 0x5679B072L, 0xBCAF89AFL,
-         0xDE9A771FL, 0xD9930810L, 0xB38BAE12L, 0xDCCF3F2EL,
-         0x5512721FL, 0x2E6B7124L, 0x501ADDE6L, 0x9F84CD87L,
-         0x7A584718L, 0x7408DA17L, 0xBC9F9ABCL, 0xE94B7D8CL,
-         0xEC7AEC3AL, 0xDB851DFAL, 0x63094366L, 0xC464C3D2L,
-         0xEF1C1847L, 0x3215D908L, 0xDD433B37L, 0x24C2BA16L,
-         0x12A14D43L, 0x2A65C451L, 0x50940002L, 0x133AE4DDL,
-         0x71DFF89EL, 0x10314E55L, 0x81AC77D6L, 0x5F11199BL,
-         0x043556F1L, 0xD7A3C76BL, 0x3C11183BL, 0x5924A509L,
-         0xF28FE6EDL, 0x97F1FBFAL, 0x9EBABF2CL, 0x1E153C6EL,
-         0x86E34570L, 0xEAE96FB1L, 0x860E5E0AL, 0x5A3E2AB3L,
-         0x771FE71CL, 0x4E3D06FAL, 0x2965DCB9L, 0x99E71D0FL,
-         0x803E89D6L, 0x5266C825L, 0x2E4CC978L, 0x9C10B36AL,
-         0xC6150EBAL, 0x94E2EA78L, 0xA5FC3C53L, 0x1E0A2DF4L,
-         0xF2F74EA7L, 0x361D2B3DL, 0x1939260FL, 0x19C27960L,
-         0x5223A708L, 0xF71312B6L, 0xEBADFE6EL, 0xEAC31F66L,
-         0xE3BC4595L, 0xA67BC883L, 0xB17F37D1L, 0x018CFF28L,
-         0xC332DDEFL, 0xBE6C5AA5L, 0x65582185L, 0x68AB9802L,
-         0xEECEA50FL, 0xDB2F953BL, 0x2AEF7DADL, 0x5B6E2F84L,
-         0x1521B628L, 0x29076170L, 0xECDD4775L, 0x619F1510L,
-         0x13CCA830L, 0xEB61BD96L, 0x0334FE1EL, 0xAA0363CFL,
-         0xB5735C90L, 0x4C70A239L, 0xD59E9E0BL, 0xCBAADE14L,
-         0xEECC86BCL, 0x60622CA7L, 0x9CAB5CABL, 0xB2F3846EL,
-         0x648B1EAFL, 0x19BDF0CAL, 0xA02369B9L, 0x655ABB50L,
-         0x40685A32L, 0x3C2AB4B3L, 0x319EE9D5L, 0xC021B8F7L,
-         0x9B540B19L, 0x875FA099L, 0x95F7997EL, 0x623D7DA8L,
-         0xF837889AL, 0x97E32D77L, 0x11ED935FL, 0x16681281L,
-         0x0E358829L, 0xC7E61FD6L, 0x96DEDFA1L, 0x7858BA99L,
-         0x57F584A5L, 0x1B227263L, 0x9B83C3FFL, 0x1AC24696L,
-         0xCDB30AEBL, 0x532E3054L, 0x8FD948E4L, 0x6DBC3128L,
-         0x58EBF2EFL, 0x34C6FFEAL, 0xFE28ED61L, 0xEE7C3C73L,
-         0x5D4A14D9L, 0xE864B7E3L, 0x42105D14L, 0x203E13E0L,
-         0x45EEE2B6L, 0xA3AAABEAL, 0xDB6C4F15L, 0xFACB4FD0L,
-         0xC742F442L, 0xEF6ABBB5L, 0x654F3B1DL, 0x41CD2105L,
-         0xD81E799EL, 0x86854DC7L, 0xE44B476AL, 0x3D816250L,
-         0xCF62A1F2L, 0x5B8D2646L, 0xFC8883A0L, 0xC1C7B6A3L,
-         0x7F1524C3L, 0x69CB7492L, 0x47848A0BL, 0x5692B285L,
-         0x095BBF00L, 0xAD19489DL, 0x1462B174L, 0x23820E00L,
-         0x58428D2AL, 0x0C55F5EAL, 0x1DADF43EL, 0x233F7061L,
-         0x3372F092L, 0x8D937E41L, 0xD65FECF1L, 0x6C223BDBL,
-         0x7CDE3759L, 0xCBEE7460L, 0x4085F2A7L, 0xCE77326EL,
-         0xA6078084L, 0x19F8509EL, 0xE8EFD855L, 0x61D99735L,
-         0xA969A7AAL, 0xC50C06C2L, 0x5A04ABFCL, 0x800BCADCL,
-         0x9E447A2EL, 0xC3453484L, 0xFDD56705L, 0x0E1E9EC9L,
-         0xDB73DBD3L, 0x105588CDL, 0x675FDA79L, 0xE3674340L,
-         0xC5C43465L, 0x713E38D8L, 0x3D28F89EL, 0xF16DFF20L,
-         0x153E21E7L, 0x8FB03D4AL, 0xE6E39F2BL, 0xDB83ADF7L   },
-     {   0xE93D5A68L, 0x948140F7L, 0xF64C261CL, 0x94692934L,
-         0x411520F7L, 0x7602D4F7L, 0xBCF46B2EL, 0xD4A20068L,
-         0xD4082471L, 0x3320F46AL, 0x43B7D4B7L, 0x500061AFL,
-         0x1E39F62EL, 0x97244546L, 0x14214F74L, 0xBF8B8840L,
-         0x4D95FC1DL, 0x96B591AFL, 0x70F4DDD3L, 0x66A02F45L,
-         0xBFBC09ECL, 0x03BD9785L, 0x7FAC6DD0L, 0x31CB8504L,
-         0x96EB27B3L, 0x55FD3941L, 0xDA2547E6L, 0xABCA0A9AL,
-         0x28507825L, 0x530429F4L, 0x0A2C86DAL, 0xE9B66DFBL,
-         0x68DC1462L, 0xD7486900L, 0x680EC0A4L, 0x27A18DEEL,
-         0x4F3FFEA2L, 0xE887AD8CL, 0xB58CE006L, 0x7AF4D6B6L,
-         0xAACE1E7CL, 0xD3375FECL, 0xCE78A399L, 0x406B2A42L,
-         0x20FE9E35L, 0xD9F385B9L, 0xEE39D7ABL, 0x3B124E8BL,
-         0x1DC9FAF7L, 0x4B6D1856L, 0x26A36631L, 0xEAE397B2L,
-         0x3A6EFA74L, 0xDD5B4332L, 0x6841E7F7L, 0xCA7820FBL,
-         0xFB0AF54EL, 0xD8FEB397L, 0x454056ACL, 0xBA489527L,
-         0x55533A3AL, 0x20838D87L, 0xFE6BA9B7L, 0xD096954BL,
-         0x55A867BCL, 0xA1159A58L, 0xCCA92963L, 0x99E1DB33L,
-         0xA62A4A56L, 0x3F3125F9L, 0x5EF47E1CL, 0x9029317CL,
-         0xFDF8E802L, 0x04272F70L, 0x80BB155CL, 0x05282CE3L,
-         0x95C11548L, 0xE4C66D22L, 0x48C1133FL, 0xC70F86DCL,
-         0x07F9C9EEL, 0x41041F0FL, 0x404779A4L, 0x5D886E17L,
-         0x325F51EBL, 0xD59BC0D1L, 0xF2BCC18FL, 0x41113564L,
-         0x257B7834L, 0x602A9C60L, 0xDFF8E8A3L, 0x1F636C1BL,
-         0x0E12B4C2L, 0x02E1329EL, 0xAF664FD1L, 0xCAD18115L,
-         0x6B2395E0L, 0x333E92E1L, 0x3B240B62L, 0xEEBEB922L,
-         0x85B2A20EL, 0xE6BA0D99L, 0xDE720C8CL, 0x2DA2F728L,
-         0xD0127845L, 0x95B794FDL, 0x647D0862L, 0xE7CCF5F0L,
-         0x5449A36FL, 0x877D48FAL, 0xC39DFD27L, 0xF33E8D1EL,
-         0x0A476341L, 0x992EFF74L, 0x3A6F6EABL, 0xF4F8FD37L,
-         0xA812DC60L, 0xA1EBDDF8L, 0x991BE14CL, 0xDB6E6B0DL,
-         0xC67B5510L, 0x6D672C37L, 0x2765D43BL, 0xDCD0E804L,
-         0xF1290DC7L, 0xCC00FFA3L, 0xB5390F92L, 0x690FED0BL,
-         0x667B9FFBL, 0xCEDB7D9CL, 0xA091CF0BL, 0xD9155EA3L,
-         0xBB132F88L, 0x515BAD24L, 0x7B9479BFL, 0x763BD6EBL,
-         0x37392EB3L, 0xCC115979L, 0x8026E297L, 0xF42E312DL,
-         0x6842ADA7L, 0xC66A2B3BL, 0x12754CCCL, 0x782EF11CL,
-         0x6A124237L, 0xB79251E7L, 0x06A1BBE6L, 0x4BFB6350L,
-         0x1A6B1018L, 0x11CAEDFAL, 0x3D25BDD8L, 0xE2E1C3C9L,
-         0x44421659L, 0x0A121386L, 0xD90CEC6EL, 0xD5ABEA2AL,
-         0x64AF674EL, 0xDA86A85FL, 0xBEBFE988L, 0x64E4C3FEL,
-         0x9DBC8057L, 0xF0F7C086L, 0x60787BF8L, 0x6003604DL,
-         0xD1FD8346L, 0xF6381FB0L, 0x7745AE04L, 0xD736FCCCL,
-         0x83426B33L, 0xF01EAB71L, 0xB0804187L, 0x3C005E5FL,
-         0x77A057BEL, 0xBDE8AE24L, 0x55464299L, 0xBF582E61L,
-         0x4E58F48FL, 0xF2DDFDA2L, 0xF474EF38L, 0x8789BDC2L,
-         0x5366F9C3L, 0xC8B38E74L, 0xB475F255L, 0x46FCD9B9L,
-         0x7AEB2661L, 0x8B1DDF84L, 0x846A0E79L, 0x915F95E2L,
-         0x466E598EL, 0x20B45770L, 0x8CD55591L, 0xC902DE4CL,
-         0xB90BACE1L, 0xBB8205D0L, 0x11A86248L, 0x7574A99EL,
-         0xB77F19B6L, 0xE0A9DC09L, 0x662D09A1L, 0xC4324633L,
-         0xE85A1F02L, 0x09F0BE8CL, 0x4A99A025L, 0x1D6EFE10L,
-         0x1AB93D1DL, 0x0BA5A4DFL, 0xA186F20FL, 0x2868F169L,
-         0xDCB7DA83L, 0x573906FEL, 0xA1E2CE9BL, 0x4FCD7F52L,
-         0x50115E01L, 0xA70683FAL, 0xA002B5C4L, 0x0DE6D027L,
-         0x9AF88C27L, 0x773F8641L, 0xC3604C06L, 0x61A806B5L,
-         0xF0177A28L, 0xC0F586E0L, 0x006058AAL, 0x30DC7D62L,
-         0x11E69ED7L, 0x2338EA63L, 0x53C2DD94L, 0xC2C21634L,
-         0xBBCBEE56L, 0x90BCB6DEL, 0xEBFC7DA1L, 0xCE591D76L,
-         0x6F05E409L, 0x4B7C0188L, 0x39720A3DL, 0x7C927C24L,
-         0x86E3725FL, 0x724D9DB9L, 0x1AC15BB4L, 0xD39EB8FCL,
-         0xED545578L, 0x08FCA5B5L, 0xD83D7CD3L, 0x4DAD0FC4L,
-         0x1E50EF5EL, 0xB161E6F8L, 0xA28514D9L, 0x6C51133CL,
-         0x6FD5C7E7L, 0x56E14EC4L, 0x362ABFCEL, 0xDDC6C837L,
-         0xD79A3234L, 0x92638212L, 0x670EFA8EL, 0x406000E0L  },
-     {   0x3A39CE37L, 0xD3FAF5CFL, 0xABC27737L, 0x5AC52D1BL,
-         0x5CB0679EL, 0x4FA33742L, 0xD3822740L, 0x99BC9BBEL,
-         0xD5118E9DL, 0xBF0F7315L, 0xD62D1C7EL, 0xC700C47BL,
-         0xB78C1B6BL, 0x21A19045L, 0xB26EB1BEL, 0x6A366EB4L,
-         0x5748AB2FL, 0xBC946E79L, 0xC6A376D2L, 0x6549C2C8L,
-         0x530FF8EEL, 0x468DDE7DL, 0xD5730A1DL, 0x4CD04DC6L,
-         0x2939BBDBL, 0xA9BA4650L, 0xAC9526E8L, 0xBE5EE304L,
-         0xA1FAD5F0L, 0x6A2D519AL, 0x63EF8CE2L, 0x9A86EE22L,
-         0xC089C2B8L, 0x43242EF6L, 0xA51E03AAL, 0x9CF2D0A4L,
-         0x83C061BAL, 0x9BE96A4DL, 0x8FE51550L, 0xBA645BD6L,
-         0x2826A2F9L, 0xA73A3AE1L, 0x4BA99586L, 0xEF5562E9L,
-         0xC72FEFD3L, 0xF752F7DAL, 0x3F046F69L, 0x77FA0A59L,
-         0x80E4A915L, 0x87B08601L, 0x9B09E6ADL, 0x3B3EE593L,
-         0xE990FD5AL, 0x9E34D797L, 0x2CF0B7D9L, 0x022B8B51L,
-         0x96D5AC3AL, 0x017DA67DL, 0xD1CF3ED6L, 0x7C7D2D28L,
-         0x1F9F25CFL, 0xADF2B89BL, 0x5AD6B472L, 0x5A88F54CL,
-         0xE029AC71L, 0xE019A5E6L, 0x47B0ACFDL, 0xED93FA9BL,
-         0xE8D3C48DL, 0x283B57CCL, 0xF8D56629L, 0x79132E28L,
-         0x785F0191L, 0xED756055L, 0xF7960E44L, 0xE3D35E8CL,
-         0x15056DD4L, 0x88F46DBAL, 0x03A16125L, 0x0564F0BDL,
-         0xC3EB9E15L, 0x3C9057A2L, 0x97271AECL, 0xA93A072AL,
-         0x1B3F6D9BL, 0x1E6321F5L, 0xF59C66FBL, 0x26DCF319L,
-         0x7533D928L, 0xB155FDF5L, 0x03563482L, 0x8ABA3CBBL,
-         0x28517711L, 0xC20AD9F8L, 0xABCC5167L, 0xCCAD925FL,
-         0x4DE81751L, 0x3830DC8EL, 0x379D5862L, 0x9320F991L,
-         0xEA7A90C2L, 0xFB3E7BCEL, 0x5121CE64L, 0x774FBE32L,
-         0xA8B6E37EL, 0xC3293D46L, 0x48DE5369L, 0x6413E680L,
-         0xA2AE0810L, 0xDD6DB224L, 0x69852DFDL, 0x09072166L,
-         0xB39A460AL, 0x6445C0DDL, 0x586CDECFL, 0x1C20C8AEL,
-         0x5BBEF7DDL, 0x1B588D40L, 0xCCD2017FL, 0x6BB4E3BBL,
-         0xDDA26A7EL, 0x3A59FF45L, 0x3E350A44L, 0xBCB4CDD5L,
-         0x72EACEA8L, 0xFA6484BBL, 0x8D6612AEL, 0xBF3C6F47L,
-         0xD29BE463L, 0x542F5D9EL, 0xAEC2771BL, 0xF64E6370L,
-         0x740E0D8DL, 0xE75B1357L, 0xF8721671L, 0xAF537D5DL,
-         0x4040CB08L, 0x4EB4E2CCL, 0x34D2466AL, 0x0115AF84L,
-         0xE1B00428L, 0x95983A1DL, 0x06B89FB4L, 0xCE6EA048L,
-         0x6F3F3B82L, 0x3520AB82L, 0x011A1D4BL, 0x277227F8L,
-         0x611560B1L, 0xE7933FDCL, 0xBB3A792BL, 0x344525BDL,
-         0xA08839E1L, 0x51CE794BL, 0x2F32C9B7L, 0xA01FBAC9L,
-         0xE01CC87EL, 0xBCC7D1F6L, 0xCF0111C3L, 0xA1E8AAC7L,
-         0x1A908749L, 0xD44FBD9AL, 0xD0DADECBL, 0xD50ADA38L,
-         0x0339C32AL, 0xC6913667L, 0x8DF9317CL, 0xE0B12B4FL,
-         0xF79E59B7L, 0x43F5BB3AL, 0xF2D519FFL, 0x27D9459CL,
-         0xBF97222CL, 0x15E6FC2AL, 0x0F91FC71L, 0x9B941525L,
-         0xFAE59361L, 0xCEB69CEBL, 0xC2A86459L, 0x12BAA8D1L,
-         0xB6C1075EL, 0xE3056A0CL, 0x10D25065L, 0xCB03A442L,
-         0xE0EC6E0EL, 0x1698DB3BL, 0x4C98A0BEL, 0x3278E964L,
-         0x9F1F9532L, 0xE0D392DFL, 0xD3A0342BL, 0x8971F21EL,
-         0x1B0A7441L, 0x4BA3348CL, 0xC5BE7120L, 0xC37632D8L,
-         0xDF359F8DL, 0x9B992F2EL, 0xE60B6F47L, 0x0FE3F11DL,
-         0xE54CDA54L, 0x1EDAD891L, 0xCE6279CFL, 0xCD3E7E6FL,
-         0x1618B166L, 0xFD2C1D05L, 0x848FD2C5L, 0xF6FB2299L,
-         0xF523F357L, 0xA6327623L, 0x93A83531L, 0x56CCCD02L,
-         0xACF08162L, 0x5A75EBB5L, 0x6E163697L, 0x88D273CCL,
-         0xDE966292L, 0x81B949D0L, 0x4C50901BL, 0x71C65614L,
-         0xE6C6C7BDL, 0x327A140AL, 0x45E1D006L, 0xC3F27B9AL,
-         0xC9AA53FDL, 0x62A80F00L, 0xBB25BFE2L, 0x35BDD2F6L,
-         0x71126905L, 0xB2040222L, 0xB6CBCF7CL, 0xCD769C2BL,
-         0x53113EC0L, 0x1640E3D3L, 0x38ABBD60L, 0x2547ADF0L,
-         0xBA38209CL, 0xF746CE76L, 0x77AFA1C5L, 0x20756060L,
-         0x85CBFE4EL, 0x8AE88DD8L, 0x7AAAF9B0L, 0x4CF9AA7EL,
-         0x1948C25CL, 0x02FB8A8CL, 0x01C36AE4L, 0xD6EBE1F9L,
-         0x90D4F869L, 0xA65CDEA0L, 0x3F09252DL, 0xC208E69FL,
-         0xB74E6132L, 0xCE77E25BL, 0x578FDFE3L, 0x3AC372E6L  }
- };
 
  #endif /* !MBEDTLS_BLOWFISH_ALT */
  #endif /* MBEDTLS_BLOWFISH_C */
--- 649,654 ----
diff -up D:\work\src\crypto\mbedtls-2.3.0\library/ctr_drbg.c D:\work\src\mbedtls-2.3.0\library/ctr_drbg.c
*** D:\work\src\crypto\mbedtls-2.3.0\library/ctr_drbg.c    Mon Jun 27 21:50:36 2016
--- D:\work\src\mbedtls-2.3.0\library/ctr_drbg.c    Tue Aug 30 18:04:09 2016
*************** static int block_cipher_df( unsigned cha
*** 178,184 ****
      buf_len = MBEDTLS_CTR_DRBG_BLOCKSIZE + 8 + data_len + 1;
 
      for( i = 0; i < MBEDTLS_CTR_DRBG_KEYSIZE; i++ )
!         key[i] = i;
 
      mbedtls_aes_setkey_enc( &aes_ctx, key, MBEDTLS_CTR_DRBG_KEYBITS );
 
--- 178,184 ----
      buf_len = MBEDTLS_CTR_DRBG_BLOCKSIZE + 8 + data_len + 1;
 
      for( i = 0; i < MBEDTLS_CTR_DRBG_KEYSIZE; i++ )
!         key[i] = (unsigned char)i;
 
      mbedtls_aes_setkey_enc( &aes_ctx, key, MBEDTLS_CTR_DRBG_KEYBITS );
 
diff -up D:\work\src\crypto\mbedtls-2.3.0\library/ecp.c D:\work\src\mbedtls-2.3.0\library/ecp.c
*** D:\work\src\crypto\mbedtls-2.3.0\library/ecp.c    Mon Jun 27 21:50:36 2016
--- D:\work\src\mbedtls-2.3.0\library/ecp.c    Tue Aug 30 18:04:35 2016
*************** static int ecp_mul_mxz( mbedtls_ecp_grou
*** 1580,1586 ****
      i = mbedtls_mpi_bitlen( m ); /* one past the (zero-based) most significant bit */
      while( i-- > 0 )
      {
!         b = mbedtls_mpi_get_bit( m, i );
          /*
           *  if (b) R = 2R + P else R = 2R,
           * which is:
--- 1580,1586 ----
      i = mbedtls_mpi_bitlen( m ); /* one past the (zero-based) most significant bit */
      while( i-- > 0 )
      {
!         b = (unsigned char)mbedtls_mpi_get_bit( m, i );
          /*
           *  if (b) R = 2R + P else R = 2R,
           * which is:
diff -up D:\work\src\crypto\mbedtls-2.3.0\library/md.c D:\work\src\mbedtls-2.3.0\library/md.c
*** D:\work\src\crypto\mbedtls-2.3.0\library/md.c    Mon Jun 27 21:50:36 2016
--- D:\work\src\mbedtls-2.3.0\library/md.c    Tue Aug 30 18:05:03 2016
*************** unsigned char mbedtls_md_get_size( const
*** 449,455 ****
      if( md_info == NULL )
          return( 0 );
 
!     return md_info->size;
  }
 
  mbedtls_md_type_t mbedtls_md_get_type( const mbedtls_md_info_t *md_info )
--- 449,455 ----
      if( md_info == NULL )
          return( 0 );
 
!     return (unsigned char)md_info->size;
  }
 
  mbedtls_md_type_t mbedtls_md_get_type( const mbedtls_md_info_t *md_info )
diff -up D:\work\src\crypto\mbedtls-2.3.0\library/platform.c D:\work\src\mbedtls-2.3.0\library/platform.c
*** D:\work\src\crypto\mbedtls-2.3.0\library/platform.c    Mon Jun 27 21:50:36 2016
--- D:\work\src\mbedtls-2.3.0\library/platform.c    Tue Aug 30 18:32:44 2016
***************
*** 25,30 ****
--- 25,35 ----
  #include MBEDTLS_CONFIG_FILE
  #endif
 
+ #ifdef WDK_BUILD
+ # include <ntstatus.h>
+ # include <ntstrsafe.h>
+ #endif /* WDK_BUILD */
+
  #if defined(MBEDTLS_PLATFORM_C)
 
  #include "mbedtls/platform.h"
diff -up D:\work\src\crypto\mbedtls-2.3.0\library/rsa.c D:\work\src\mbedtls-2.3.0\library/rsa.c
*** D:\work\src\crypto\mbedtls-2.3.0\library/rsa.c    Mon Jun 27 21:50:36 2016
--- D:\work\src\mbedtls-2.3.0\library/rsa.c    Tue Aug 30 18:06:17 2016
*************** int mbedtls_rsa_rsassa_pkcs1_v15_sign( m
*** 1096,1102 ****
          *p++ = MBEDTLS_ASN1_NULL;
          *p++ = 0x00;
          *p++ = MBEDTLS_ASN1_OCTET_STRING;
!         *p++ = hashlen;
          memcpy( p, hash, hashlen );
      }
 
--- 1096,1102 ----
          *p++ = MBEDTLS_ASN1_NULL;
          *p++ = 0x00;
          *p++ = MBEDTLS_ASN1_OCTET_STRING;
!         *p++ = (unsigned char)hashlen;
          memcpy( p, hash, hashlen );
      }
 


and finally you need patch your config.h and replace include to your home-made "stdint.h":
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/aes.h d:\work\src\mbedtls-2.3.0\include\mbedtls/aes.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/aes.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/aes.h    Wed Aug 31 14:43:34 2016
***************
*** 30,36 ****
  #endif
 
  #include <stddef.h>
! #include <stdint.h>
 
  /* padlock.c and aesni.c rely on these values! */
  #define MBEDTLS_AES_ENCRYPT     1
--- 30,40 ----
  #endif
 
  #include <stddef.h>
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  /* padlock.c and aesni.c rely on these values! */
  #define MBEDTLS_AES_ENCRYPT     1
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/bignum.h d:\work\src\mbedtls-2.3.0\include\mbedtls/bignum.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/bignum.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/bignum.h    Wed Aug 31 14:44:03 2016
***************
*** 30,36 ****
  #endif
 
  #include <stddef.h>
! #include <stdint.h>
 
  #if defined(MBEDTLS_FS_IO)
  #include <stdio.h>
--- 30,40 ----
  #endif
 
  #include <stddef.h>
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #if defined(MBEDTLS_FS_IO)
  #include <stdio.h>
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/blowfish.h d:\work\src\mbedtls-2.3.0\include\mbedtls/blowfish.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/blowfish.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/blowfish.h    Wed Aug 31 14:44:24 2016
***************
*** 30,36 ****
  #endif
 
  #include <stddef.h>
! #include <stdint.h>
 
  #define MBEDTLS_BLOWFISH_ENCRYPT     1
  #define MBEDTLS_BLOWFISH_DECRYPT     0
--- 30,40 ----
  #endif
 
  #include <stddef.h>
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #define MBEDTLS_BLOWFISH_ENCRYPT     1
  #define MBEDTLS_BLOWFISH_DECRYPT     0
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/camellia.h d:\work\src\mbedtls-2.3.0\include\mbedtls/camellia.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/camellia.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/camellia.h    Wed Aug 31 14:44:54 2016
***************
*** 30,36 ****
  #endif
 
  #include <stddef.h>
! #include <stdint.h>
 
  #define MBEDTLS_CAMELLIA_ENCRYPT     1
  #define MBEDTLS_CAMELLIA_DECRYPT     0
--- 30,40 ----
  #endif
 
  #include <stddef.h>
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #define MBEDTLS_CAMELLIA_ENCRYPT     1
  #define MBEDTLS_CAMELLIA_DECRYPT     0
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/config.h d:\work\src\mbedtls-2.3.0\include\mbedtls/config.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/config.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/config.h    Tue Aug 30 18:11:07 2016
***************
*** 28,34 ****
  #ifndef MBEDTLS_CONFIG_H
  #define MBEDTLS_CONFIG_H
 
! #if defined(_MSC_VER) && !defined(_CRT_SECURE_NO_DEPRECATE)
  #define _CRT_SECURE_NO_DEPRECATE 1
  #endif
 
--- 28,34 ----
  #ifndef MBEDTLS_CONFIG_H
  #define MBEDTLS_CONFIG_H
 
! #if defined(_MSC_VER) && !defined(_CRT_SECURE_NO_DEPRECATE) && !defined(WDK_BUILD)
  #define _CRT_SECURE_NO_DEPRECATE 1
  #endif
 
***************
*** 109,115 ****
   *
   * Enable this layer to allow use of alternative memory allocators.
   */
! //#define MBEDTLS_PLATFORM_MEMORY
 
  /**
   * \def MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
--- 109,117 ----
   *
   * Enable this layer to allow use of alternative memory allocators.
   */
! #ifdef WDK_BUILD
! # define MBEDTLS_PLATFORM_MEMORY
! #endif /* WDK_BUILD */
 
  /**
   * \def MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
***************
*** 128,134 ****
   * Uncomment to prevent default assignment of standard functions in the
   * platform layer.
   */
! //#define MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
 
  /**
   * \def MBEDTLS_PLATFORM_EXIT_ALT
--- 130,138 ----
   * Uncomment to prevent default assignment of standard functions in the
   * platform layer.
   */
! #ifdef WDK_BUILD
! # define MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
! #endif /* WDK_BUILD */
 
  /**
   * \def MBEDTLS_PLATFORM_EXIT_ALT
***************
*** 775,781 ****
   *
   * Enable functions that use the filesystem.
   */
! #define MBEDTLS_FS_IO
 
  /**
   * \def MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
--- 779,787 ----
   *
   * Enable functions that use the filesystem.
   */
! #ifndef WDK_BUILD
! # define MBEDTLS_FS_IO
! #endif /* !WDK_BUILD */
 
  /**
   * \def MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
***************
*** 916,922 ****
   *
   * Enable the checkup functions (*_self_test).
   */
! #define MBEDTLS_SELF_TEST
 
  /**
   * \def MBEDTLS_SHA256_SMALLER
--- 922,930 ----
   *
   * Enable the checkup functions (*_self_test).
   */
! #ifndef WDK_BUILD
! # define MBEDTLS_SELF_TEST
! #endif /* WDK_BUILD */
 
  /**
   * \def MBEDTLS_SHA256_SMALLER
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/des.h d:\work\src\mbedtls-2.3.0\include\mbedtls/des.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/des.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/des.h    Wed Aug 31 14:45:19 2016
***************
*** 30,36 ****
  #endif
 
  #include <stddef.h>
! #include <stdint.h>
 
  #define MBEDTLS_DES_ENCRYPT     1
  #define MBEDTLS_DES_DECRYPT     0
--- 30,40 ----
  #endif
 
  #include <stddef.h>
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #define MBEDTLS_DES_ENCRYPT     1
  #define MBEDTLS_DES_DECRYPT     0
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/gcm.h d:\work\src\mbedtls-2.3.0\include\mbedtls/gcm.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/gcm.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/gcm.h    Wed Aug 31 14:45:44 2016
***************
*** 25,31 ****
 
  #include "cipher.h"
 
! #include <stdint.h>
 
  #define MBEDTLS_GCM_ENCRYPT     1
  #define MBEDTLS_GCM_DECRYPT     0
--- 25,35 ----
 
  #include "cipher.h"
 
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #define MBEDTLS_GCM_ENCRYPT     1
  #define MBEDTLS_GCM_DECRYPT     0
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/md4.h d:\work\src\mbedtls-2.3.0\include\mbedtls/md4.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/md4.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/md4.h    Wed Aug 31 14:46:08 2016
***************
*** 30,36 ****
  #endif
 
  #include <stddef.h>
! #include <stdint.h>
 
  #if !defined(MBEDTLS_MD4_ALT)
  // Regular implementation
--- 30,40 ----
  #endif
 
  #include <stddef.h>
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #if !defined(MBEDTLS_MD4_ALT)
  // Regular implementation
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/md5.h d:\work\src\mbedtls-2.3.0\include\mbedtls/md5.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/md5.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/md5.h    Wed Aug 31 14:46:28 2016
***************
*** 30,36 ****
  #endif
 
  #include <stddef.h>
! #include <stdint.h>
 
  #if !defined(MBEDTLS_MD5_ALT)
  // Regular implementation
--- 30,40 ----
  #endif
 
  #include <stddef.h>
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #if !defined(MBEDTLS_MD5_ALT)
  // Regular implementation
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/net.h d:\work\src\mbedtls-2.3.0\include\mbedtls/net.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/net.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/net.h    Wed Aug 31 14:46:58 2016
***************
*** 32,38 ****
  #include "ssl.h"
 
  #include <stddef.h>
! #include <stdint.h>
 
  #define MBEDTLS_ERR_NET_SOCKET_FAILED                     -0x0042  /**< Failed to open a socket. */
  #define MBEDTLS_ERR_NET_CONNECT_FAILED                    -0x0044  /**< The connection to the given server / port failed. */
--- 32,42 ----
  #include "ssl.h"
 
  #include <stddef.h>
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #define MBEDTLS_ERR_NET_SOCKET_FAILED                     -0x0042  /**< Failed to open a socket. */
  #define MBEDTLS_ERR_NET_CONNECT_FAILED                    -0x0044  /**< The connection to the given server / port failed. */
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/padlock.h d:\work\src\mbedtls-2.3.0\include\mbedtls/padlock.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/padlock.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/padlock.h    Wed Aug 31 14:47:26 2016
***************
*** 42,48 ****
  #define MBEDTLS_HAVE_X86
  #endif
 
! #include <stdint.h>
 
  #define MBEDTLS_PADLOCK_RNG 0x000C
  #define MBEDTLS_PADLOCK_ACE 0x00C0
--- 42,52 ----
  #define MBEDTLS_HAVE_X86
  #endif
 
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #define MBEDTLS_PADLOCK_RNG 0x000C
  #define MBEDTLS_PADLOCK_ACE 0x00C0
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/pkcs5.h d:\work\src\mbedtls-2.3.0\include\mbedtls/pkcs5.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/pkcs5.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/pkcs5.h    Wed Aug 31 14:47:44 2016
***************
*** 29,35 ****
  #include "md.h"
 
  #include <stddef.h>
! #include <stdint.h>
 
  #define MBEDTLS_ERR_PKCS5_BAD_INPUT_DATA                  -0x2f80  /**< Bad input parameters to function. */
  #define MBEDTLS_ERR_PKCS5_INVALID_FORMAT                  -0x2f00  /**< Unexpected ASN.1 data. */
--- 29,39 ----
  #include "md.h"
 
  #include <stddef.h>
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #define MBEDTLS_ERR_PKCS5_BAD_INPUT_DATA                  -0x2f80  /**< Bad input parameters to function. */
  #define MBEDTLS_ERR_PKCS5_INVALID_FORMAT                  -0x2f00  /**< Unexpected ASN.1 data. */
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/ripemd160.h d:\work\src\mbedtls-2.3.0\include\mbedtls/ripemd160.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/ripemd160.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/ripemd160.h    Wed Aug 31 14:48:04 2016
***************
*** 30,36 ****
  #endif
 
  #include <stddef.h>
! #include <stdint.h>
 
  #if !defined(MBEDTLS_RIPEMD160_ALT)
  // Regular implementation
--- 30,40 ----
  #endif
 
  #include <stddef.h>
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #if !defined(MBEDTLS_RIPEMD160_ALT)
  // Regular implementation
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/sha1.h d:\work\src\mbedtls-2.3.0\include\mbedtls/sha1.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/sha1.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/sha1.h    Wed Aug 31 14:48:26 2016
***************
*** 30,36 ****
  #endif
 
  #include <stddef.h>
! #include <stdint.h>
 
  #if !defined(MBEDTLS_SHA1_ALT)
  // Regular implementation
--- 30,40 ----
  #endif
 
  #include <stddef.h>
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #if !defined(MBEDTLS_SHA1_ALT)
  // Regular implementation
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/sha256.h d:\work\src\mbedtls-2.3.0\include\mbedtls/sha256.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/sha256.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/sha256.h    Wed Aug 31 14:48:45 2016
***************
*** 30,36 ****
  #endif
 
  #include <stddef.h>
! #include <stdint.h>
 
  #if !defined(MBEDTLS_SHA256_ALT)
  // Regular implementation
--- 30,40 ----
  #endif
 
  #include <stddef.h>
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #if !defined(MBEDTLS_SHA256_ALT)
  // Regular implementation
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/sha512.h d:\work\src\mbedtls-2.3.0\include\mbedtls/sha512.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/sha512.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/sha512.h    Wed Aug 31 14:49:05 2016
***************
*** 30,36 ****
  #endif
 
  #include <stddef.h>
! #include <stdint.h>
 
  #if !defined(MBEDTLS_SHA512_ALT)
  // Regular implementation
--- 30,40 ----
  #endif
 
  #include <stddef.h>
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #if !defined(MBEDTLS_SHA512_ALT)
  // Regular implementation
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/timing.h d:\work\src\mbedtls-2.3.0\include\mbedtls/timing.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/timing.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/timing.h    Wed Aug 31 14:49:26 2016
***************
*** 33,39 ****
  // Regular implementation
  //
 
! #include <stdint.h>
 
  #ifdef __cplusplus
  extern "C" {
--- 33,43 ----
  // Regular implementation
  //
 
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #ifdef __cplusplus
  extern "C" {
diff -up D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/xtea.h d:\work\src\mbedtls-2.3.0\include\mbedtls/xtea.h
*** D:\work\src\crypto\mbedtls-2.3.0\include\mbedtls/xtea.h    Mon Jun 27 21:50:36 2016
--- d:\work\src\mbedtls-2.3.0\include\mbedtls/xtea.h    Wed Aug 31 14:49:46 2016
***************
*** 30,36 ****
  #endif
 
  #include <stddef.h>
! #include <stdint.h>
 
  #define MBEDTLS_XTEA_ENCRYPT     1
  #define MBEDTLS_XTEA_DECRYPT     0
--- 30,40 ----
  #endif
 
  #include <stddef.h>
! #ifdef WDK_BUILD
! # include "stdint.h"
! #else
! # include <stdint.h>
! #endif /* WDK_BUILD */
 
  #define MBEDTLS_XTEA_ENCRYPT     1
  #define MBEDTLS_XTEA_DECRYPT     0


In WKD no file stdint.h so you can use mine:
#ifndef _STDINT
typedef signed char        int8_t;
typedef short              int16_t;
typedef int                int32_t;
typedef long long          int64_t;
typedef unsigned char      uint8_t;
typedef unsigned short     uint16_t;
typedef unsigned int       uint32_t;
typedef unsigned long long uint64_t;
#endif /* _STDINT */
↧

bugs in mbedtls DH client/server

August 31, 2016, 8:30 am
$
0
0
1) altough always used constant MBEDTLS_MD_SHA256 parameters are signed with sha1 and then we have MBEDTLS_ERR_RSA_VERIFY_FAILED in library\rsa.c on line 1435
2) in dh_server.c when receiving client's public value length of buffer must be dhm.len

Nice cryptolibrary, totally ready to work in kernel mode I think
patch:


diff -up D:\work\src\crypto\mbedtls-2.3.0\programs\pkey/dh_client.c D:\work\src\mbedtls-2.3.0\programs\pkey/dh_client.c
*** D:\work\src\crypto\mbedtls-2.3.0\programs\pkey/dh_client.c    Mon Jun 27 21:50:36 2016
--- D:\work\src\mbedtls-2.3.0\programs\pkey/dh_client.c    Wed Aug 31 17:58:33 2016
***************
*** 41,47 ****
  #include "mbedtls/aes.h"
  #include "mbedtls/dhm.h"
  #include "mbedtls/rsa.h"
! #include "mbedtls/sha1.h"
  #include "mbedtls/entropy.h"
  #include "mbedtls/ctr_drbg.h"
 
--- 41,47 ----
  #include "mbedtls/aes.h"
  #include "mbedtls/dhm.h"
  #include "mbedtls/rsa.h"
! #include "mbedtls/sha256.h"
  #include "mbedtls/entropy.h"
  #include "mbedtls/ctr_drbg.h"
 
*************** int main( void )
*** 210,216 ****
          goto exit;
      }
 
!     mbedtls_sha1( buf, (int)( p - 2 - buf ), hash );
 
      if( ( ret = mbedtls_rsa_pkcs1_verify( &rsa, NULL, NULL, MBEDTLS_RSA_PUBLIC,
                                    MBEDTLS_MD_SHA256, 0, hash, p ) ) != 0 )
--- 210,216 ----
          goto exit;
      }
 
!     mbedtls_sha256( buf, (int)( p - 2 - buf ), hash, 0 );
 
      if( ( ret = mbedtls_rsa_pkcs1_verify( &rsa, NULL, NULL, MBEDTLS_RSA_PUBLIC,
                                    MBEDTLS_MD_SHA256, 0, hash, p ) ) != 0 )
diff -up D:\work\src\crypto\mbedtls-2.3.0\programs\pkey/dh_server.c D:\work\src\mbedtls-2.3.0\programs\pkey/dh_server.c
*** D:\work\src\crypto\mbedtls-2.3.0\programs\pkey/dh_server.c    Mon Jun 27 21:50:36 2016
--- D:\work\src\mbedtls-2.3.0\programs\pkey/dh_server.c    Wed Aug 31 18:12:33 2016
***************
*** 41,47 ****
  #include "mbedtls/aes.h"
  #include "mbedtls/dhm.h"
  #include "mbedtls/rsa.h"
! #include "mbedtls/sha1.h"
  #include "mbedtls/entropy.h"
  #include "mbedtls/ctr_drbg.h"
 
--- 41,47 ----
  #include "mbedtls/aes.h"
  #include "mbedtls/dhm.h"
  #include "mbedtls/rsa.h"
! #include "mbedtls/sha256.h"
  #include "mbedtls/entropy.h"
  #include "mbedtls/ctr_drbg.h"
 
*************** int main( void )
*** 201,207 ****
      /*
       * 5. Sign the parameters and send them
       */
!     mbedtls_sha1( buf, n, hash );
 
      buf[n    ] = (unsigned char)( rsa.len >> 8 );
      buf[n + 1] = (unsigned char)( rsa.len      );
--- 201,207 ----
      /*
       * 5. Sign the parameters and send them
       */
!     mbedtls_sha256( buf, n, hash, 0 );
 
      buf[n    ] = (unsigned char)( rsa.len >> 8 );
      buf[n + 1] = (unsigned char)( rsa.len      );
*************** int main( void )
*** 232,238 ****
 
      memset( buf, 0, sizeof( buf ) );
 
!     if( ( ret = mbedtls_net_recv( &client_fd, buf, n ) ) != (int) n )
      {
          mbedtls_printf( " failed\n  ! mbedtls_net_recv returned %d\n\n", ret );
          goto exit;
--- 232,238 ----
 
      memset( buf, 0, sizeof( buf ) );
 
!     if( ( ret = mbedtls_net_recv( &client_fd, buf, dhm.len ) ) != (int)dhm.len )
      {
          mbedtls_printf( " failed\n  ! mbedtls_net_recv returned %d\n\n", ret );
          goto exit;
↧
Viewing all 264 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>