Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- kd> dps nt!KiServiceTable L 1ad
- fffff800`028e8300 fffff800`02cf5ca0 nt!NtMapUserPhysicalPagesScatter
- fffff800`028e8308 fffff800`02bdd8c0 nt!NtWaitForSingleObject
- fffff800`028e8310 fffff800`028df1a0 nt!NtCallbackReturn
- fffff800`028e8318 fffff800`02bd0a80 nt!NtReadFile
- fffff800`028e8320 fffff800`02c027a0 nt!NtDeviceIoControlFile
- fffff800`028e8328 fffff800`02bf99a0 nt!NtWriteFile
- fffff800`028e8330 fffff800`02ba3c90 nt!NtRemoveIoCompletion
- fffff800`028e8338 fffff800`02b9d220 nt!NtReleaseSemaphore
- fffff800`028e8340 fffff800`02bfafc4 nt!NtReplyWaitReceivePort
- fffff800`028e8348 fffff800`02cc5a40 nt!NtReplyPort
- fffff800`028e8350 fffff800`02bb0770 nt!NtSetInformationThread
- fffff800`028e8358 fffff800`02bd0010 nt!NtSetEvent
- fffff800`028e8360 fffff800`02bdeb10 nt!NtClose
- fffff800`028e8368 fffff800`02bc8530 nt!NtQueryObject
- fffff800`028e8370 fffff800`02bc5360 nt!NtQueryInformationFile
- fffff800`028e8378 fffff800`02bc1910 nt!NtOpenKey
- fffff800`028e8380 fffff800`02bc7760 nt!NtEnumerateValueKey
- fffff800`028e8388 fffff800`02bd9b60 nt!NtFindAtom
- fffff800`028e8390 fffff800`02b95350 nt!NtQueryDefaultLocale
- fffff800`028e8398 fffff800`02bb72e0 nt!NtQueryKey
- fffff800`028e83a0 fffff800`02bb84d0 nt!NtQueryValueKey
- fffff800`028e83a8 fffff800`02bdec90 nt!NtAllocateVirtualMemory
- fffff800`028e83b0 fffff800`02bf8410 nt!NtQueryInformationProcess
- fffff800`028e83b8 fffff800`02c0bfa0 nt!NtWaitForMultipleObjects32
- fffff800`028e83c0 fffff800`02d3df30 nt!NtWriteFileGather
- fffff800`028e83c8 fffff800`02bd559c nt!NtSetInformationProcess
- fffff800`028e83d0 fffff800`02b9b170 nt!NtCreateKey
- fffff800`028e83d8 fffff800`028d44d0 nt!NtFreeVirtualMemory
- fffff800`028e83e0 fffff800`02d24580 nt!NtImpersonateClientOfPort
- fffff800`028e83e8 fffff800`02bdd404 nt!NtReleaseMutant
- fffff800`028e83f0 fffff800`02bad5c0 nt!NtQueryInformationToken
- fffff800`028e83f8 fffff800`02bfa9c0 nt!NtRequestWaitReplyPort
- fffff800`028e8400 fffff800`02bc1930 nt!NtQueryVirtualMemory
- fffff800`028e8408 fffff800`02bbb338 nt!NtOpenThreadToken
- fffff800`028e8410 fffff800`02bd4a30 nt!NtQueryInformationThread
- fffff800`028e8418 fffff800`02bba2ec nt!NtOpenProcess
- fffff800`028e8420 fffff800`02bc5cb0 nt!NtSetInformationFile
- fffff800`028e8428 fffff800`02c009e0 nt!NtMapViewOfSection
- fffff800`028e8430 fffff800`02bcb0a0 nt!NtAccessCheckAndAuditAlarm
- fffff800`028e8438 fffff800`02bfead4 nt!NtUnmapViewOfSection
- fffff800`028e8440 fffff800`02bfafe0 nt!NtReplyWaitReceivePortEx
- fffff800`028e8448 fffff800`02ba05a4 nt!NtTerminateProcess
- fffff800`028e8450 fffff800`02cfa980 nt!NtSetEventBoostPriority
- fffff800`028e8458 fffff800`02b4f6c4 nt!NtReadFileScatter
- fffff800`028e8460 fffff800`02bbad80 nt!NtOpenThreadTokenEx
- fffff800`028e8468 fffff800`02bc2c40 nt!NtOpenProcessTokenEx
- fffff800`028e8470 fffff800`02b98150 nt!NtQueryPerformanceCounter
- fffff800`028e8478 fffff800`02b9f670 nt!NtEnumerateKey
- fffff800`028e8480 fffff800`02bd00dc nt!NtOpenFile
- fffff800`028e8488 fffff800`02bdd9d4 nt!NtDelayExecution
- fffff800`028e8490 fffff800`02bd07b0 nt!NtQueryDirectoryFile
- fffff800`028e8498 fffff800`02bf18fc nt!NtQuerySystemInformation
- fffff800`028e84a0 fffff800`02c00d80 nt!NtOpenSection
- fffff800`028e84a8 fffff800`02cfa520 nt!NtQueryTimer
- fffff800`028e84b0 fffff800`02bc1870 nt!NtFsControlFile
- fffff800`028e84b8 fffff800`02b8e850 nt!NtWriteVirtualMemory
- fffff800`028e84c0 fffff800`02bbdc3c nt!NtCloseObjectAuditAlarm
- fffff800`028e84c8 fffff800`02bc0c10 nt!NtDuplicateObject
- fffff800`028e84d0 fffff800`02bc2e20 nt!NtQueryAttributesFile
- fffff800`028e84d8 fffff800`02bd1588 nt!NtClearEvent
- fffff800`028e84e0 fffff800`02b8e9c0 nt!NtReadVirtualMemory
- fffff800`028e84e8 fffff800`02bc8e44 nt!NtOpenEvent
- fffff800`028e84f0 fffff800`02b9c334 nt!NtAdjustPrivilegesToken
- fffff800`028e84f8 fffff800`02b8db08 nt!NtDuplicateToken
- fffff800`028e8500 fffff800`028e9140 nt!NtContinue
- fffff800`028e8508 fffff800`02c92450 nt!NtQueryDefaultUILanguage
- fffff800`028e8510 fffff800`02bcbefc nt!NtQueueApcThread
- fffff800`028e8518 fffff800`028b6568 nt!NtYieldExecution
- fffff800`028e8520 fffff800`02b3a06c nt!NtAddAtom
- fffff800`028e8528 fffff800`02bace60 nt!NtCreateEvent
- fffff800`028e8530 fffff800`02bfbfc0 nt!NtQueryVolumeInformationFile
- fffff800`028e8538 fffff800`02bc29b0 nt!NtCreateSection
- fffff800`028e8540 fffff800`02b86700 nt!NtFlushBuffersFile
- fffff800`028e8548 fffff800`02bc7a34 nt!NtApphelpCacheControl
- fffff800`028e8550 fffff800`02d57f20 nt!NtCreateProcessEx
- fffff800`028e8558 fffff800`02cc5b70 nt!NtCreateThread
- fffff800`028e8560 fffff800`02cfafd0 nt!NtIsProcessInJob
- fffff800`028e8568 fffff800`02bffb2c nt!NtProtectVirtualMemory
- fffff800`028e8570 fffff800`02c03db0 nt!NtQuerySection
- fffff800`028e8578 fffff800`02bd81c8 nt!NtResumeThread
- fffff800`028e8580 fffff800`02bbd530 nt!NtTerminateThread
- fffff800`028e8588 fffff800`02d4ba10 nt!NtReadRequestData
- fffff800`028e8590 fffff800`02bef400 nt!NtCreateFile
- fffff800`028e8598 fffff800`02b81284 nt!NtQueryEvent
- fffff800`028e85a0 fffff800`02d4b990 nt!NtWriteRequestData
- fffff800`028e85a8 fffff800`02c01900 nt!NtOpenDirectoryObject
- fffff800`028e85b0 fffff800`02b88ba4 nt!NtAccessCheckByTypeAndAuditAlarm
- fffff800`028e85b8 fffff800`02c6eea0 nt!NtQuerySystemTime
- fffff800`028e85c0 fffff800`02bddf58 nt!NtWaitForMultipleObjects
- fffff800`028e85c8 fffff800`02b8396c nt!NtSetInformationObject
- fffff800`028e85d0 fffff800`02cf9e10 nt!NtCancelIoFile
- fffff800`028e85d8 fffff800`028ccc2c nt!NtTraceEvent
- fffff800`028e85e0 fffff800`02ba3e3c nt!NtPowerInformation
- fffff800`028e85e8 fffff800`02b9b1b0 nt!NtSetValueKey
- fffff800`028e85f0 fffff800`0289c46c nt!NtCancelTimer
- fffff800`028e85f8 fffff800`028d40a4 nt!NtSetTimer
- fffff800`028e8600 fffff800`02ba12e0 nt!NtAcceptConnectPort
- fffff800`028e8608 fffff800`028adad4 nt!NtAccessCheck
- fffff800`028e8610 fffff800`028c24d4 nt!NtAccessCheckByType
- fffff800`028e8618 fffff800`029fce20 nt!NtAccessCheckByTypeResultList
- fffff800`028e8620 fffff800`02d0c560 nt!NtAccessCheckByTypeResultListAndAuditAlarm
- fffff800`028e8628 fffff800`02d0c4a0 nt!NtAccessCheckByTypeResultListAndAuditAlarmByHandle
- fffff800`028e8630 fffff800`02d29030 nt!NtAddBootEntry
- fffff800`028e8638 fffff800`02d28d90 nt!NtAddDriverEntry
- fffff800`028e8640 fffff800`02b672e0 nt!NtAdjustGroupsToken
- fffff800`028e8648 fffff800`02d0e080 nt!NtAlertResumeThread
- fffff800`028e8650 fffff800`02bced4c nt!NtAlertThread
- fffff800`028e8658 fffff800`02b7ed80 nt!NtAllocateLocallyUniqueId
- fffff800`028e8660 fffff800`02cc5020 nt!NtAllocateReserveObject
- fffff800`028e8668 fffff800`02d3c480 nt!NtAllocateUserPhysicalPages
- fffff800`028e8670 fffff800`02b34b20 nt!NtAllocateUuids
- fffff800`028e8678 fffff800`02bc4730 nt!NtAlpcAcceptConnectPort
- fffff800`028e8680 fffff800`02b4f15c nt!NtAlpcCancelMessage
- fffff800`028e8688 fffff800`02bc95dc nt!NtAlpcConnectPort
- fffff800`028e8690 fffff800`02bcf428 nt!NtAlpcCreatePort
- fffff800`028e8698 fffff800`02b847a4 nt!NtAlpcCreatePortSection
- fffff800`028e86a0 fffff800`02bcf870 nt!NtAlpcCreateResourceReserve
- fffff800`028e86a8 fffff800`02b83a10 nt!NtAlpcCreateSectionView
- fffff800`028e86b0 fffff800`02b88524 nt!NtAlpcCreateSecurityContext
- fffff800`028e86b8 fffff800`02b7bb44 nt!NtAlpcDeletePortSection
- fffff800`028e86c0 fffff800`02cb62d0 nt!NtAlpcDeleteResourceReserve
- fffff800`028e86c8 fffff800`02ba07fc nt!NtAlpcDeleteSectionView
- fffff800`028e86d0 fffff800`02b886f0 nt!NtAlpcDeleteSecurityContext
- fffff800`028e86d8 fffff800`02ba0290 nt!NtAlpcDisconnectPort
- fffff800`028e86e0 fffff800`02bbab50 nt!NtAlpcImpersonateClientOfPort
- fffff800`028e86e8 fffff800`02bca32c nt!NtAlpcOpenSenderProcess
- fffff800`028e86f0 fffff800`02ba37a0 nt!NtAlpcOpenSenderThread
- fffff800`028e86f8 fffff800`02b78180 nt!NtAlpcQueryInformation
- fffff800`028e8700 fffff800`02bba6c0 nt!NtAlpcQueryInformationMessage
- fffff800`028e8708 fffff800`02cb6150 nt!NtAlpcRevokeSecurityContext
- fffff800`028e8710 fffff800`02bf46c0 nt!NtAlpcSendWaitReceivePort
- fffff800`028e8718 fffff800`02bce490 nt!NtAlpcSetInformation
- fffff800`028e8720 fffff800`02b34850 nt!NtAreMappedFilesTheSame
- fffff800`028e8728 fffff800`02b9ecd4 nt!NtAssignProcessToJobObject
- fffff800`028e8730 fffff800`02c0afd0 nt!NtCancelIoFileEx
- fffff800`028e8738 fffff800`02d0ee70 nt!NtCancelSynchronousIoFile
- fffff800`028e8740 fffff800`02d10470 nt!NtCommitComplete
- fffff800`028e8748 fffff800`02d37000 nt!NtCommitEnlistment
- fffff800`028e8750 fffff800`02b75220 nt!NtCommitTransaction
- fffff800`028e8758 fffff800`02d13ef0 nt!NtCompactKeys
- fffff800`028e8760 fffff800`02bac730 nt!NtCompareTokens
- fffff800`028e8768 fffff800`02b71a00 nt!FsRtlSyncVolumes
- fffff800`028e8770 fffff800`02d651f0 nt!NtCompressKey
- fffff800`028e8778 fffff800`02b95148 nt!NtConnectPort
- fffff800`028e8780 fffff800`02cc4da0 nt!NtCreateDebugObject
- fffff800`028e8788 fffff800`02b7e7c0 nt!NtCreateDirectoryObject
- fffff800`028e8790 fffff800`02b6dd78 nt!NtCreateEnlistment
- fffff800`028e8798 fffff800`02cc4f20 nt!NtCreateEventPair
- fffff800`028e87a0 fffff800`02bc9d30 nt!NtCreateIoCompletion
- fffff800`028e87a8 fffff800`02cc56a0 nt!NtCreateJobObject
- fffff800`028e87b0 fffff800`02d0a350 nt!NtCreateJobSet
- fffff800`028e87b8 fffff800`02b708e8 nt!NtCreateKeyTransacted
- fffff800`028e87c0 fffff800`02b9a28c nt!NtCreateKeyedEvent
- fffff800`028e87c8 fffff800`02b5b450 nt!NtCreateMailslotFile
- fffff800`028e87d0 fffff800`02b8de40 nt!NtCreateMutant
- fffff800`028e87d8 fffff800`02ba8fe0 nt!NtCreateNamedPipeFile
- fffff800`028e87e0 fffff800`02d4f1c0 nt!NtCreatePagingFile
- fffff800`028e87e8 fffff800`02ba373c nt!NtCreatePort
- fffff800`028e87f0 fffff800`02b58cc4 nt!NtCreatePrivateNamespace
- fffff800`028e87f8 fffff800`02d57fb0 nt!NtCreateProcess
- fffff800`028e8800 fffff800`02d0c360 nt!NtCreateProfile
- fffff800`028e8808 fffff800`02d0c430 nt!NtCreateProfileEx
- fffff800`028e8810 fffff800`02b71bf8 nt!NtCreateResourceManager
- fffff800`028e8818 fffff800`02b8e344 nt!NtCreateSemaphore
- fffff800`028e8820 fffff800`02b7ee00 nt!NtCreateSymbolicLinkObject
- fffff800`028e8828 fffff800`02bd7128 nt!NtCreateThreadEx
- fffff800`028e8830 fffff800`02b7c038 nt!NtCreateTimer
- fffff800`028e8838 fffff800`02b7dd5c nt!NtCreateToken
- fffff800`028e8840 fffff800`02b6afe0 nt!NtCreateTransaction
- fffff800`028e8848 fffff800`02b70ff0 nt!NtCreateTransactionManager
- fffff800`028e8850 fffff800`02b924a0 nt!NtCreateUserProcess
- fffff800`028e8858 fffff800`02d05d60 nt!NtCreateWaitablePort
- fffff800`028e8860 fffff800`02bc9e38 nt!NtCreateWorkerFactory
- fffff800`028e8868 fffff800`02d351f0 nt!NtDebugActiveProcess
- fffff800`028e8870 fffff800`02d0cb90 nt!NtDebugContinue
- fffff800`028e8878 fffff800`02d1ef00 nt!NtDeleteAtom
- fffff800`028e8880 fffff800`02cd7fa0 nt!NtDeleteBootEntry
- fffff800`028e8888 fffff800`02cd7a80 nt!NtDeleteDriverEntry
- fffff800`028e8890 fffff800`02b41780 nt!NtDeleteFile
- fffff800`028e8898 fffff800`02b681d0 nt!NtDeleteKey
- fffff800`028e88a0 fffff800`02d0b6d0 nt!NtDeleteObjectAuditAlarm
- fffff800`028e88a8 fffff800`02c07ef0 nt!NtDeletePrivateNamespace
- fffff800`028e88b0 fffff800`02b66b1c nt!NtDeleteValueKey
- fffff800`028e88b8 fffff800`02cb5ec0 nt!NtDisableLastKnownGood
- fffff800`028e88c0 fffff800`02d3e890 nt!NtDisplayString
- fffff800`028e88c8 fffff800`02a042b0 nt!NtDrawText
- fffff800`028e88d0 fffff800`02d02770 nt!NtEnableLastKnownGood
- fffff800`028e88d8 fffff800`02d443a0 nt!NtEnumerateBootEntries
- fffff800`028e88e0 fffff800`02d43980 nt!NtEnumerateDriverEntries
- fffff800`028e88e8 fffff800`02d44960 nt!NtEnumerateSystemEnvironmentValuesEx
- fffff800`028e88f0 fffff800`02d09e00 nt!NtEnumerateTransactionObject
- fffff800`028e88f8 fffff800`02d16c70 nt!NtExtendSection
- fffff800`028e8900 fffff800`02c0b36c nt!NtFilterToken
- fffff800`028e8908 fffff800`02d1a6a0 nt!NtFlushInstallUILanguage
- fffff800`028e8910 fffff800`02b588c4 nt!NtFlushInstructionCache
- fffff800`028e8918 fffff800`02b876ac nt!NtFlushKey
- fffff800`028e8920 fffff800`02887898 nt!NtFlushProcessWriteBuffers
- fffff800`028e8928 fffff800`02b4c370 nt!NtFlushVirtualMemory
- fffff800`028e8930 fffff800`02c53e50 nt!NtFlushWriteBuffer
- fffff800`028e8938 fffff800`02d10b60 nt!NtFreeUserPhysicalPages
- fffff800`028e8940 fffff800`029decb0 nt!NtFreezeRegistry
- fffff800`028e8948 fffff800`02d0df90 nt!NtFreezeTransactions
- fffff800`028e8950 fffff800`02b36ae8 nt!NtGetContextThread
- fffff800`028e8958 fffff800`02b771e0 nt!NtGetCurrentProcessorNumber
- fffff800`028e8960 fffff800`02d08db0 nt!NtGetDevicePowerState
- fffff800`028e8968 fffff800`02b9a0a0 nt!NtGetMUIRegistryInfo
- fffff800`028e8970 fffff800`02d172a0 nt!NtGetNextProcess
- fffff800`028e8978 fffff800`02d16fb0 nt!NtGetNextThread
- fffff800`028e8980 fffff800`02d15ef0 nt!NtGetNlsSectionPtr
- fffff800`028e8988 fffff800`02d0de10 nt!NtGetNotificationResourceManager
- fffff800`028e8990 fffff800`02b52320 nt!NtGetPlugPlayEvent
- fffff800`028e8998 fffff800`028878a8 nt!NtGetWriteWatch
- fffff800`028e89a0 fffff800`02b7c220 nt!NtImpersonateAnonymousToken
- fffff800`028e89a8 fffff800`02b8e6d4 nt!NtImpersonateThread
- fffff800`028e89b0 fffff800`02b8f228 nt!NtInitializeNlsFiles
- fffff800`028e89b8 fffff800`02b40740 nt!NtInitializeRegistry
- fffff800`028e89c0 fffff800`02d30140 nt!NtInitiatePowerAction
- fffff800`028e89c8 fffff800`02c52620 nt!NtIsSystemResumeAutomatic
- fffff800`028e89d0 fffff800`02ba7d10 nt!NtIsUILanguageComitted
- fffff800`028e89d8 fffff800`02d142b0 nt!NtListenPort
- fffff800`028e89e0 fffff800`02d604f0 nt!NtLoadDriver
- fffff800`028e89e8 fffff800`02b65594 nt!NtLoadKey
- fffff800`028e89f0 fffff800`02d659a0 nt!NtLoadKey2
- fffff800`028e89f8 fffff800`02b645a4 nt!NtLoadKeyEx
- fffff800`028e8a00 fffff800`02b5bb9c nt!NtLockFile
- fffff800`028e8a08 fffff800`02cfbad0 nt!NtLockProductActivationKeys
- fffff800`028e8a10 fffff800`02d135e0 nt!NtLockRegistryKey
- fffff800`028e8a18 fffff800`029f91d0 nt!NtLockVirtualMemory
- fffff800`028e8a20 fffff800`02d1c8d0 nt!NtMakePermanentObject
- fffff800`028e8a28 fffff800`02b80b58 nt!NtMakeTemporaryObject
- fffff800`028e8a30 fffff800`02b90610 nt!NtMapCMFModule
- fffff800`028e8a38 fffff800`02cf64b0 nt!NtMapUserPhysicalPages
- fffff800`028e8a40 fffff800`02d29000 nt!NtModifyBootEntry
- fffff800`028e8a48 fffff800`02d28d60 nt!NtModifyDriverEntry
- fffff800`028e8a50 fffff800`02b4d20c nt!NtNotifyChangeDirectoryFile
- fffff800`028e8a58 fffff800`02b9d144 nt!NtNotifyChangeKey
- fffff800`028e8a60 fffff800`02b9c884 nt!NtNotifyChangeMultipleKeys
- fffff800`028e8a68 fffff800`02d0eab0 nt!NtNotifyChangeSession
- fffff800`028e8a70 fffff800`02d06e90 nt!NtOpenEnlistment
- fffff800`028e8a78 fffff800`02cccd90 nt!NtOpenEventPair
- fffff800`028e8a80 fffff800`02ccca10 nt!NtOpenIoCompletion
- fffff800`028e8a88 fffff800`02cccf00 nt!NtOpenJobObject
- fffff800`028e8a90 fffff800`02bb8c90 nt!NtOpenKeyEx
- fffff800`028e8a98 fffff800`02d0a8a0 nt!NtOpenKeyTransacted
- fffff800`028e8aa0 fffff800`02b70d00 nt!NtOpenKeyTransactedEx
- fffff800`028e8aa8 fffff800`02cccce0 nt!NtOpenKeyedEvent
- fffff800`028e8ab0 fffff800`02c00e04 nt!NtOpenMutant
- fffff800`028e8ab8 fffff800`02d0b7e0 nt!NtOpenObjectAuditAlarm
- fffff800`028e8ac0 fffff800`02b7fe74 nt!NtOpenPrivateNamespace
- fffff800`028e8ac8 fffff800`02b8df70 nt!NtOpenProcessToken
- fffff800`028e8ad0 fffff800`02c0a8ec nt!NtOpenResourceManager
- fffff800`028e8ad8 fffff800`02b4ef68 nt!NtOpenSemaphore
- fffff800`028e8ae0 fffff800`02ccc980 nt!NtOpenSession
- fffff800`028e8ae8 fffff800`02b8e060 nt!NtOpenSymbolicLinkObject
- fffff800`028e8af0 fffff800`02bd973c nt!NtOpenThread
- fffff800`028e8af8 fffff800`02ccce50 nt!NtOpenTimer
- fffff800`028e8b00 fffff800`02d06bf0 nt!NtOpenTransaction
- fffff800`028e8b08 fffff800`02d09ae0 nt!NtOpenTransactionManager
- fffff800`028e8b10 fffff800`02babb3c nt!NtPlugPlayControl
- fffff800`028e8b18 fffff800`02d105d0 nt!NtPrePrepareComplete
- fffff800`028e8b20 fffff800`02d370b0 nt!NtPrePrepareEnlistment
- fffff800`028e8b28 fffff800`02d10680 nt!NtPrepareComplete
- fffff800`028e8b30 fffff800`02d37160 nt!NtPrepareEnlistment
- fffff800`028e8b38 fffff800`02b81040 nt!NtPrivilegeCheck
- fffff800`028e8b40 fffff800`02d0bfd0 nt!NtPrivilegeObjectAuditAlarm
- fffff800`028e8b48 fffff800`02b51764 nt!NtPrivilegedServiceAuditAlarm
- fffff800`028e8b50 fffff800`02d3d5e0 nt!NtPropagationComplete
- fffff800`028e8b58 fffff800`02d0e600 nt!NtPropagationFailed
- fffff800`028e8b60 fffff800`02b4c1c0 nt!NtPulseEvent
- fffff800`028e8b68 fffff800`02d44100 nt!NtQueryBootEntryOrder
- fffff800`028e8b70 fffff800`02cd7c80 nt!NtQueryBootOptions
- fffff800`028e8b78 fffff800`02922720 nt!NtQueryDebugFilterState
- fffff800`028e8b80 fffff800`02c01344 nt!NtQueryDirectoryObject
- fffff800`028e8b88 fffff800`02d43e60 nt!NtQueryDriverEntryOrder
- fffff800`028e8b90 fffff800`02d4c780 nt!NtQueryEaFile
- fffff800`028e8b98 fffff800`02b790d4 nt!NtQueryFullAttributesFile
- fffff800`028e8ba0 fffff800`02cd99e0 nt!NtQueryInformationAtom
- fffff800`028e8ba8 fffff800`02d05150 nt!NtQueryInformationEnlistment
- fffff800`028e8bb0 fffff800`02d26710 nt!NtQueryInformationJobObject
- fffff800`028e8bb8 fffff800`02cb5df0 nt!NtQueryInformationPort
- fffff800`028e8bc0 fffff800`02d04820 nt!NtQueryInformationResourceManager
- fffff800`028e8bc8 fffff800`02d04a90 nt!NtQueryInformationTransaction
- fffff800`028e8bd0 fffff800`02c0a460 nt!NtQueryInformationTransactionManager
- fffff800`028e8bd8 fffff800`029fb510 nt!NtQueryInformationWorkerFactory
- fffff800`028e8be0 fffff800`02ba61c0 nt!NtQueryInstallUILanguage
- fffff800`028e8be8 fffff800`02c640a0 nt!NtQueryIntervalProfile
- fffff800`028e8bf0 fffff800`02cfa110 nt!NtQueryIoCompletion
- fffff800`028e8bf8 fffff800`02bcbf28 nt!NtQueryLicenseValue
- fffff800`028e8c00 fffff800`02b9bd44 nt!NtQueryMultipleValueKey
- fffff800`028e8c08 fffff800`02cfa690 nt!NtQueryMutant
- fffff800`028e8c10 fffff800`02d31ed0 nt!NtQueryOpenSubKeys
- fffff800`028e8c18 fffff800`02d31ae0 nt!NtQueryOpenSubKeysEx
- fffff800`028e8c20 fffff800`02c523c0 nt!NtQueryPortInformationProcess
- fffff800`028e8c28 fffff800`02d4ba90 nt!NtQueryQuotaInformationFile
- fffff800`028e8c30 fffff800`02bab940 nt!NtQuerySecurityAttributesToken
- fffff800`028e8c38 fffff800`02b7c350 nt!NtQuerySecurityObject
- fffff800`028e8c40 fffff800`02cfa840 nt!NtQuerySemaphore
- fffff800`028e8c48 fffff800`02b9227c nt!NtQuerySymbolicLinkObject
- fffff800`028e8c50 fffff800`02d293d0 nt!NtQuerySystemEnvironmentValue
- fffff800`028e8c58 fffff800`02d4d9a0 nt!NtQuerySystemEnvironmentValueEx
- fffff800`028e8c60 fffff800`02bc9c90 nt!NtQuerySystemInformationEx
- fffff800`028e8c68 fffff800`02b4d81c nt!NtQueryTimerResolution
- fffff800`028e8c70 fffff800`02bcbdc0 nt!NtQueueApcThreadEx
- fffff800`028e8c78 fffff800`028e9380 nt!NtRaiseException
- fffff800`028e8c80 fffff800`02d162a0 nt!NtRaiseHardError
- fffff800`028e8c88 fffff800`02d10520 nt!NtReadOnlyEnlistment
- fffff800`028e8c90 fffff800`02d36050 nt!NtRecoverEnlistment
- fffff800`028e8c98 fffff800`02b6e828 nt!NtRecoverResourceManager
- fffff800`028e8ca0 fffff800`02b6e410 nt!NtRecoverTransactionManager
- fffff800`028e8ca8 fffff800`02d3d6f0 nt!NtRegisterProtocolAddressInformation
- fffff800`028e8cb0 fffff800`02cfb0c0 nt!NtRegisterThreadTerminatePort
- fffff800`028e8cb8 fffff800`02bce820 nt!NtReleaseKeyedEvent
- fffff800`028e8cc0 fffff800`028d3aac nt!NtReleaseWorkerFactoryWorker
- fffff800`028e8cc8 fffff800`02b86324 nt!NtRemoveIoCompletionEx
- fffff800`028e8cd0 fffff800`02cfa3b0 nt!NtRemoveProcessDebug
- fffff800`028e8cd8 fffff800`02d38440 nt!NtRenameKey
- fffff800`028e8ce0 fffff800`02d26540 nt!NtRenameTransactionManager
- fffff800`028e8ce8 fffff800`02d64ab0 nt!NtReplaceKey
- fffff800`028e8cf0 fffff800`02a09e90 nt!NtReplacePartitionUnit
- fffff800`028e8cf8 fffff800`02cd5cd0 nt!NtReplyWaitReplyPort
- fffff800`028e8d00 fffff800`02bd98e0 nt!NtRequestPort
- fffff800`028e8d08 fffff800`02cfaa00 nt!NtResetEvent
- fffff800`028e8d10 fffff800`02887440 nt!NtResetWriteWatch
- fffff800`028e8d18 fffff800`02d64d90 nt!NtRestoreKey
- fffff800`028e8d20 fffff800`02d33560 nt!NtResumeProcess
- fffff800`028e8d28 fffff800`02d0e6a0 nt!NtRollbackComplete
- fffff800`028e8d30 fffff800`02d2f3a0 nt!NtRollbackEnlistment
- fffff800`028e8d38 fffff800`02d356f0 nt!NtRollbackTransaction
- fffff800`028e8d40 fffff800`02d37210 nt!NtRollforwardTransactionManager
- fffff800`028e8d48 fffff800`02d62d00 nt!NtSaveKey
- fffff800`028e8d50 fffff800`02d62a50 nt!NtSaveKeyEx
- fffff800`028e8d58 fffff800`02d62880 nt!NtSaveMergedKeys
- fffff800`028e8d60 fffff800`02b935f4 nt!NtSecureConnectPort
- fffff800`028e8d68 fffff800`02cb9c10 nt!NtSerializeBoot
- fffff800`028e8d70 fffff800`02d28dc0 nt!NtSetBootEntryOrder
- fffff800`028e8d78 fffff800`02cda040 nt!NtSetBootOptions
- fffff800`028e8d80 fffff800`02b36410 nt!NtSetContextThread
- fffff800`028e8d88 fffff800`02cb5fc0 nt!NtSetDebugFilterState
- fffff800`028e8d90 fffff800`02cba150 nt!NtSetDefaultHardErrorPort
- fffff800`028e8d98 fffff800`02c924d0 nt!NtSetDefaultLocale
- fffff800`028e8da0 fffff800`02c93bb0 nt!NtSetDefaultUILanguage
- fffff800`028e8da8 fffff800`02d28b20 nt!NtSetDriverEntryOrder
- fffff800`028e8db0 fffff800`02d4c300 nt!NtSetEaFile
- fffff800`028e8db8 fffff800`02d0d9a0 nt!NtSetHighEventPair
- fffff800`028e8dc0 fffff800`02d0e150 nt!NtSetHighWaitLowEventPair
- fffff800`028e8dc8 fffff800`02d0a6d0 nt!NtSetInformationDebugObject
- fffff800`028e8dd0 fffff800`02d0a0a0 nt!NtSetInformationEnlistment
- fffff800`028e8dd8 fffff800`02d321f0 nt!NtSetInformationJobObject
- fffff800`028e8de0 fffff800`02b894c0 nt!NtSetInformationKey
- fffff800`028e8de8 fffff800`02d3d2c0 nt!NtSetInformationResourceManager
- fffff800`028e8df0 fffff800`02b7c7b8 nt!NtSetInformationToken
- fffff800`028e8df8 fffff800`02d3ea60 nt!NtSetInformationTransaction
- fffff800`028e8e00 fffff800`02d264a0 nt!NtSetInformationTransactionManager
- fffff800`028e8e08 fffff800`028d6df0 nt!NtSetInformationWorkerFactory
- fffff800`028e8e10 fffff800`02c8faf0 nt!NtSetIntervalProfile
- fffff800`028e8e18 fffff800`02b79010 nt!NtSetIoCompletion
- fffff800`028e8e20 fffff800`02cf9fd0 nt!NtSetIoCompletionEx
- fffff800`028e8e28 fffff800`0296c210 nt!xKdReleasePciDeviceForDebugging
- fffff800`028e8e30 fffff800`02d0da10 nt!NtSetLowEventPair
- fffff800`028e8e38 fffff800`02d0e1d0 nt!NtSetLowWaitHighEventPair
- fffff800`028e8e40 fffff800`02d4e0c0 nt!NtSetQuotaInformationFile
- fffff800`028e8e48 fffff800`02b83538 nt!NtSetSecurityObject
- fffff800`028e8e50 fffff800`02d29060 nt!NtSetSystemEnvironmentValue
- fffff800`028e8e58 fffff800`02d4d680 nt!NtSetSystemEnvironmentValueEx
- fffff800`028e8e60 fffff800`02d5b1a0 nt!NtSetSystemInformation
- fffff800`028e8e68 fffff800`02b30450 nt!NtSetSystemPowerState
- fffff800`028e8e70 fffff800`02d012b0 nt!NtSetSystemTime
- fffff800`028e8e78 fffff800`02d2b650 nt!NtSetThreadExecutionState
- fffff800`028e8e80 fffff800`028957c4 nt!NtSetTimerEx
- fffff800`028e8e88 fffff800`02d0c7a0 nt!NtSetTimerResolution
- fffff800`028e8e90 fffff800`02d3cf00 nt!NtSetUuidSeed
- fffff800`028e8e98 fffff800`02c0a040 nt!NtSetVolumeInformationFile
- fffff800`028e8ea0 fffff800`02d66db0 nt!NtShutdownSystem
- fffff800`028e8ea8 fffff800`02b9ddd8 nt!NtShutdownWorkerFactory
- fffff800`028e8eb0 fffff800`029f5ee0 nt!NtSignalAndWaitForSingleObject
- fffff800`028e8eb8 fffff800`02d36f50 nt!NtSinglePhaseReject
- fffff800`028e8ec0 fffff800`02d45ab0 nt!NtStartProfile
- fffff800`028e8ec8 fffff800`02d11360 nt!NtStopProfile
- fffff800`028e8ed0 fffff800`02d34c30 nt!NtSuspendProcess
- fffff800`028e8ed8 fffff800`02b36930 nt!NtSuspendThread
- fffff800`028e8ee0 fffff800`02b78ab0 nt!NtSystemDebugControl
- fffff800`028e8ee8 fffff800`02b45890 nt!NtTerminateJobObject
- fffff800`028e8ef0 fffff800`02bd976c nt!NtTestAlert
- fffff800`028e8ef8 fffff800`029def40 nt!NtThawRegistry
- fffff800`028e8f00 fffff800`02cbb5c0 nt!NtThawTransactions
- fffff800`028e8f08 fffff800`02b8d0a0 nt!NtTraceControl
- fffff800`028e8f10 fffff800`02d0b3c0 nt!NtTranslateFilePath
- fffff800`028e8f18 fffff800`02c6c310 nt!NtUmsThreadYield
- fffff800`028e8f20 fffff800`02ccddc0 nt!NtUnloadDriver
- fffff800`028e8f28 fffff800`02b73b40 nt!NtUnloadKey
- fffff800`028e8f30 fffff800`02b6bea4 nt!NtUnloadKey2
- fffff800`028e8f38 fffff800`02d36730 nt!NtUnloadKeyEx
- fffff800`028e8f40 fffff800`02b5b7fc nt!NtUnlockFile
- fffff800`028e8f48 fffff800`029f5410 nt!NtUnlockVirtualMemory
- fffff800`028e8f50 fffff800`02d4acd0 nt!NtVdmControl
- fffff800`028e8f58 fffff800`02d1e3d0 nt!NtWaitForDebugEvent
- fffff800`028e8f60 fffff800`02bceab4 nt!NtWaitForKeyedEvent
- fffff800`028e8f68 fffff800`028d32a0 nt!NtWaitForWorkViaWorkerFactory
- fffff800`028e8f70 fffff800`02d04600 nt!NtWaitHighEventPair
- fffff800`028e8f78 fffff800`02d04690 nt!NtWaitLowEventPair
- fffff800`028e8f80 fffff800`028db750 nt!NtWorkerFactoryWorkerReady
Advertisement
Add Comment
Please, Sign In to add comment