mirror of https://github.com/tongzx/nt5src
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
423 lines
11 KiB
423 lines
11 KiB
4589 KiIdleLoop
|
|
1887 KiInterruptException
|
|
1556 OtsMove
|
|
914 RtlCopyBytes
|
|
522 KiUnlockDispatcherDatabase
|
|
501 ExReleaseResourceLite
|
|
435 KeSynchronizeExecution
|
|
405 ExAcquireResourceExclusiveLite
|
|
325 ExAllocatePoolWithTag
|
|
273 IopParseDevice
|
|
271 RtlFindClearBits
|
|
257 ExAcquireFastMutex
|
|
257 KiSwapThreadExit
|
|
237 ExpInterlockedPopEntrySListFault
|
|
235 OtsZero
|
|
210 IofCompleteRequest
|
|
197 RtlCompareMemory
|
|
195 ExReleaseFastMutex
|
|
190 ExpInterlockedPushEntrySList
|
|
190 KiRetireDpcList
|
|
180 KiDispatchInterrupt
|
|
175 RtlUpcaseUnicodeToOemN
|
|
173 CcMapData
|
|
170 ExFreePoolWithTag
|
|
153 FsRtlDissectName
|
|
146 FsRtlIsNameInExpressionPrivate
|
|
142 CcGetVirtualAddress
|
|
128 ExAcquireResourceSharedLite
|
|
118 KeFlushIoBuffers
|
|
118 KeReleaseSpinLock
|
|
117 KeAcquireSpinLockRaiseToDpc
|
|
115 CcPinFileData
|
|
105 ObReferenceObjectByHandle
|
|
105 OtsFieldInsert
|
|
91 PsImpersonateClient
|
|
88 ObfDereferenceObject
|
|
85 IoGetRelatedDeviceObject
|
|
84 CcFindBcb
|
|
80 RtlSplay
|
|
77 IoAllocateIrp
|
|
77 ObOpenObjectByName
|
|
76 KeRemoveQueue
|
|
75 ExInterlockedAddUlong
|
|
74 ExpFindCurrentThread
|
|
73 IofCallDriver
|
|
73 RtlpGetStackLimits
|
|
71 ObpLookupObjectName
|
|
69 ExpInterlockedPopEntrySList
|
|
67 MmProbeAndLockPages
|
|
66 CcFreeVirtualAddress
|
|
66 RtlCompareUnicodeString
|
|
61 KeInsertQueue
|
|
60 IoSetTopLevelIrp
|
|
58 IoFreeIrp
|
|
57 IopCheckBackupRestorePrivilege
|
|
57 ObpCaptureObjectCreateInformation
|
|
54 PsReferencePrimaryToken
|
|
53 CcFlushCache
|
|
53 CcUnpinFileData
|
|
53 KeAcquireSpinLockAtDpcLevel
|
|
52 KeLeaveCriticalRegion
|
|
51 CcSetDirtyPinnedData
|
|
51 FsRtlLookupLargeMcbEntry
|
|
50 CcCanIWrite
|
|
50 MmCheckCachedPageState
|
|
48 CcSetDirtyInMask
|
|
47 ExReleaseFastMutexUnsafe
|
|
46 IopAllocateIrp
|
|
45 CcFastCopyRead
|
|
44 ObpAllocateObject
|
|
43 IoAllocateMdl
|
|
42 ExAcquireFastMutexUnsafe
|
|
42 ExIsResourceAcquiredExclusiveLite
|
|
42 FsRtlFindLargeIndex
|
|
42 IoGetTopLevelIrp
|
|
41 CcAcquireByteRangeForWrite
|
|
41 ExpInterlockedCompareExchange64
|
|
41 KeQuerySystemTime
|
|
41 KiReleaseSpinLock
|
|
41 MmUnlockPages
|
|
41 RtlTimeToTimeFields
|
|
40 MiFlushSectionInternal
|
|
39 FsRtlIsFatDbcsLegal
|
|
38 memcmp
|
|
38 PsReferenceImpersonationToken
|
|
37 CcFastCopyWrite
|
|
37 KiRestoreVolatileIntegerState
|
|
37 RtlEqualUnicodeString
|
|
36 CcInitializeCacheMap
|
|
36 CcUninitializeCacheMap
|
|
36 CcWriteBehind
|
|
36 IopCloseFile
|
|
36 ObpFreeObjectNameBuffer
|
|
36 SeCreateAccessState
|
|
35 IoCreateFile
|
|
35 ObpIncrementHandleCount
|
|
35 OtsStringCompareEql
|
|
34 CcMapAndRead
|
|
34 FsRtlCheckOplock
|
|
34 IopDeleteFile
|
|
33 IopParseFile
|
|
33 RtlIsNameLegalDOS8Dot3
|
|
32 CcMapAndCopy
|
|
32 IoBuildPartialMdl
|
|
32 IoFreeMdl
|
|
32 MmUnmapViewInSystemCache
|
|
31 CcPrepareMdlWrite
|
|
31 RtlMapGenericMask
|
|
31 RtlNtStatusToDosErrorNoTeb
|
|
30 FsRtlOplockFsctrl
|
|
30 IopCompleteRequest
|
|
30 ObpCaptureObjectName
|
|
30 RtlCopyUnicodeString
|
|
29 CcUnpinData
|
|
29 ExpAcquireResourceSharedLite
|
|
28 MmCreateSection
|
|
27 ExAcquireSharedStarveExclusive
|
|
27 MmMapLockedPages
|
|
27 ObpAllocateObjectNameBuffer
|
|
27 ObpCreateHandle
|
|
27 RtlUpcaseUnicodeChar
|
|
26 ExAcquireHandleTableShared
|
|
26 MiDecrementReferenceCount
|
|
26 MmIsAddressValid
|
|
25 MmFlushSection
|
|
24 CcPinMappedData
|
|
24 FsRtlRequestExclusiveOplock
|
|
24 ObCreateObject
|
|
24 RtlUnicodeToOemN
|
|
23 CcMdlWriteComplete2
|
|
23 ElapsedDaysToYears
|
|
23 ExTryToAcquireFastMutex
|
|
23 IopCheckDeviceAndDriver
|
|
23 KeWaitForSingleObject
|
|
23 MiReserveSystemPtes
|
|
23 RtlUpcaseUnicodeStringToOemString
|
|
22 KeEnterCriticalRegion
|
|
22 PsAssignImpersonationToken
|
|
22 SeReleaseSubjectContext
|
|
21 CcLazyWriteScan
|
|
21 ExFreePool
|
|
21 FsRtlDoesNameContainWildCards
|
|
21 IoCheckFunctionAccess
|
|
21 IoIsOperationSynchronous
|
|
21 KiMb
|
|
21 NtClose
|
|
21 PsChargeSharedPoolQuota
|
|
21 SeAuditingFileEvents
|
|
20 KiDeliverApc
|
|
20 MiLocateAndReserveWsle
|
|
20 SeAssignSecurity
|
|
20 SeCaptureSubjectContext
|
|
20 SeDeleteAccessState
|
|
19 CcMdlRead
|
|
19 ExCreateHandle
|
|
19 ExDestroyHandle
|
|
19 IoFastQueryNetworkAttributes
|
|
19 MiDecrementShareCount2
|
|
19 MmSetAddressRangeModified
|
|
19 ObpDecrementHandleCount
|
|
19 RtlOemToUnicodeN
|
|
17 ExReleaseHandleTableShared
|
|
17 FsRtlAddToTunnelCache
|
|
17 KiInterruptDistribution
|
|
16 CcSetFileSizes
|
|
16 FsRtlGetNextLargeMcbEntry
|
|
16 KeSetEvent
|
|
16 MiInsertPageInList
|
|
16 MiRestoreTransitionPte
|
|
16 SeSetAccessStateGenericMapping
|
|
15 CcGetVacbMiss
|
|
15 ExAcquireHandleTableExclusive
|
|
15 FsRtlFastCheckLockForRead
|
|
15 FsRtlFindInTunnelCache
|
|
15 IoRemoveShareAccess
|
|
15 MiCheckControlArea
|
|
15 RtlUpcaseUnicodeString
|
|
14 IoSetShareAccess
|
|
14 MiUpdateWsle
|
|
14 NtSetInformationFile
|
|
14 ObpChargeQuotaForObject
|
|
14 OtsStringCompareEqlSameLen
|
|
13 CcPinRead
|
|
13 CcWorkerThread
|
|
13 ExpAcquireSharedStarveExclusive
|
|
13 ExReleaseHandleTableExclusive
|
|
13 FsRtlOplockCleanup
|
|
13 FsRtlOplockIsFastIoPossible
|
|
13 MmAccessFault
|
|
13 ObpIncrementHandleDataBase
|
|
13 OtsFill
|
|
13 RtlOemStringToUnicodeString
|
|
12 FsRtlAddLargeMcbEntry
|
|
12 FsRtlCurrentBatchOplock
|
|
12 MiCreateDataFileMap
|
|
12 ObpFreeObject
|
|
12 ObpRemoveObjectRoutine
|
|
12 ObpValidateAccessMask
|
|
12 RtlSetBits
|
|
12 RtlUpcaseUnicodeStringToCountedOemString
|
|
12 SeTokenImpersonationLevel
|
|
11 ExpWorkerThread
|
|
11 MiLocateWsle
|
|
11 MiRemoveZeroPage
|
|
11 MmCopyToCachedPage
|
|
11 RtlUnicodeStringToOemString
|
|
10 CcAllocateInitializeBcb
|
|
10 ExInitializeResourceLite
|
|
10 ExInterlockedAddLargeStatistic
|
|
10 ExpInterlockedExchangeAddLargeInteger
|
|
10 FsRtlIsNameInExpression
|
|
10 FsRtlPruneTunnelCache
|
|
10 IoAcquireCancelSpinLock
|
|
10 MmMapViewInSystemCache
|
|
10 RtlpDidUnicodeToOemWork
|
|
9 CcDeleteSharedCacheMap
|
|
9 ExMapHandleToPointer
|
|
9 FsRtlPrivateFastUnlockAll
|
|
9 IoCheckDesiredAccess
|
|
9 IoSynchronousPageWrite
|
|
9 KeInsertByKeyDeviceQueue
|
|
9 KiSaveVolatileIntegerState
|
|
9 MmUnmapLockedPages
|
|
9 ObpDeleteNameCheck
|
|
9 RtlpGenerateInheritedAce
|
|
9 SepInheritAcl
|
|
8 ExSystemTimeToLocalTime
|
|
8 FsRtlMdlWriteCompleteDev
|
|
8 IoCheckShareAccess
|
|
8 KeInsertDeviceQueue
|
|
8 MiDispatchFault
|
|
8 MiReleaseSystemPtes
|
|
8 MiRemovePageFromList
|
|
8 MmPurgeSection
|
|
8 RtlClearBits
|
|
7 CcUnmapVacbArray
|
|
7 ExDeleteResourceLite
|
|
7 FsRtlFastCheckLockForWrite
|
|
7 IoAllocateAdapterChannel
|
|
7 IoStartPacket
|
|
7 KiMemoryManagementDispatch
|
|
7 MiCheckProtoPtePageState
|
|
7 MiMakeSystemAddressValidPfn
|
|
7 ObpIncrementUnnamedHandleCount
|
|
7 RtlVirtualUnwind
|
|
6 CcCopyWrite
|
|
6 CcDeallocateBcb
|
|
6 CcFreeActiveVacb
|
|
6 ExAcquireSharedWaitForExclusive
|
|
6 ExpWaitForResource
|
|
6 FsRtlAreNamesEqual
|
|
6 FsRtlFastUnlockSingleExclusive
|
|
6 FsRtlOplockBreakToII
|
|
6 FsRtlPrivateLock
|
|
6 FsRtlRemoveAndCompleteWaitIrp
|
|
6 FsRtlRemoveMcbEntryPrivate
|
|
6 FsRtlWaitOnIrp
|
|
6 KeRemoveByKeyDeviceQueue
|
|
6 KiMemoryManagementException
|
|
6 MiFreePoolPages
|
|
6 MiInitializePfn
|
|
6 MiRemoveWsle
|
|
6 ObpCreateUnnamedHandle
|
|
6 RtlDelete
|
|
6 RtlExtendedMagicDivide
|
|
6 RtlFillMemoryUlong
|
|
6 RtlpLengthInheritedAce
|
|
6 RtlSecondsSince1980ToTime
|
|
5 CcMdlReadComplete2
|
|
5 ExAllocatePoolWithQuotaTag
|
|
5 ExInterlockedInsertTailList
|
|
5 ExReinitializeResourceLite
|
|
5 FsRtlAllocateOplock
|
|
5 IoCreateStreamFileObject
|
|
5 IoGetCurrentProcess
|
|
5 IoStartNextPacket
|
|
5 KeInitializeApc
|
|
5 KeInsertHeadQueue
|
|
5 MiAllocatePoolPages
|
|
5 MiCheckForControlAreaDeletion
|
|
5 MiGetInPageSupportBlock
|
|
5 MiRemovePageByColor
|
|
5 MiResolveProtoPteFault
|
|
5 MiUnlinkPageFromList
|
|
5 MmCanFileBeTruncatedInternal
|
|
5 RtlLengthSecurityDescriptor
|
|
5 RtlNumberGenericTableElements
|
|
5 RtlpGenerateInheritAcl
|
|
5 SepCheckAcl
|
|
4 CcCreateVacbArray
|
|
4 CcGetDirtyPages
|
|
4 CcGetVirtualAddressIfMapped
|
|
4 CcPerformReadAhead
|
|
4 CcReleaseByteRangeFromWrite
|
|
4 CcUnmapAndPurge
|
|
4 FsRtlCheckLockForReadAccess
|
|
4 FsRtlFastUnlockSingle
|
|
4 FsRtlInitializeLargeMcb
|
|
4 FsRtlLookupLastLargeMcbEntry
|
|
4 IopDereferenceVpbAndFree
|
|
4 KeInitializeSpinLock
|
|
4 KeInsertQueueApc
|
|
4 KiActivateWaiterQueue
|
|
4 KiApcInterrupt
|
|
4 MiGetEventCounter
|
|
4 MiRemoveAnyPage
|
|
4 MiResolveMappedFileFault
|
|
4 OtsDivide
|
|
4 PsReturnSharedPoolQuota
|
|
4 RtlAreBitsClear
|
|
4 RtlFillBytes
|
|
4 RtlInsertElementGenericTable
|
|
4 RtlLookupFunctionEntry
|
|
3 CcCopyRead
|
|
3 CcIsThereDirtyData
|
|
3 CcPreparePinWrite
|
|
3 CcSetReadAheadGranularity
|
|
3 CcSetValidData
|
|
3 ExIsResourceAcquiredSharedLite
|
|
3 ExpAcquireResourceExclusiveLite
|
|
3 ExReleaseResourceForThreadLite
|
|
3 FsRtlFindFirstOverlappingExclusiveNode
|
|
3 FsRtlTruncateLargeMcb
|
|
3 FsRtlUninitializeOplock
|
|
3 KeInitializeEvent
|
|
3 KeRemoveDeviceQueue
|
|
3 KeSetEventBoostPriority
|
|
3 KiAlternateExit
|
|
3 KiGenerateTrapFrame
|
|
3 KiSaveVolatileFloatState
|
|
3 MiFindActualFaultingPte
|
|
3 MiFreeInPageSupportBlock
|
|
3 MiModifiedPageWriterWorker
|
|
3 MiResolveTransitionFault
|
|
3 MiSectionDelete
|
|
3 MiSetDirtyBit
|
|
3 MmDeterminePoolType
|
|
3 ObDeleteCapturedInsertInfo
|
|
3 RtlAreBitsSet
|
|
3 RtlConvertUlongToLargeInteger
|
|
3 RtlCreateAcl
|
|
3 RtlEqualPrefixSid
|
|
3 RtlFindClearBitsAndSet
|
|
3 RtlTimeToSecondsSince1970
|
|
3 SepGetDefaultsSubjectContext
|
|
3 SeUnlockSubjectContext
|
|
3 SeValidSecurityDescriptor
|
|
2 ExDisableResourceBoostLite
|
|
2 FsRtlAcquireFileForCcFlush
|
|
2 FsRtlAddLargeEntry
|
|
2 FsRtlPrivateCheckForExclusiveLockAccess
|
|
2 FsRtlPrivateInitializeFileLock
|
|
2 FsRtlPrivateLimitFreeLockList
|
|
2 FsRtlPrivateResetLowestLockOffset
|
|
2 FsRtlUninitializeLargeMcb
|
|
2 IoPageRead
|
|
2 IoQueueThreadIrp
|
|
2 KiExceptionExit
|
|
2 MiCompleteProtoPteFault
|
|
2 MmCanFileBeTruncated
|
|
2 NtDeleteFile
|
|
2 ObInsertObject
|
|
2 RtlInitializeBitMap
|
|
2 RtlpLengthInheritAcl
|
|
2 RtlpRestoreContext
|
|
2 RtlSecondsSince1970ToTime
|
|
2 RtlUnicodeStringToCountedOemString
|
|
2 SepAccessCheck
|
|
2 SepSidInToken
|
|
1 CcPostWorkQueue
|
|
1 CcScheduleReadAhead
|
|
1 CcUnpinDataForThread
|
|
1 ExQueueWorkItem
|
|
1 FsRtlAcknowledgeOplockBreak
|
|
1 FsRtlCheckLockForWriteAccess
|
|
1 FsRtlInitializeOplock
|
|
1 FsRtlMdlReadCompleteDev
|
|
1 FsRtlNotifyCompletion
|
|
1 FsRtlNumberOfRunsInLargeMcb
|
|
1 FsRtlOplockBreakNotify
|
|
1 FsRtlPrivateInsertLock
|
|
1 FsRtlUninitializeFileLock
|
|
1 IoGetFileObjectGenericMapping
|
|
1 IoGetInitialStack
|
|
1 IoGetRequestorProcess
|
|
1 IopErrorLogRequeueEntry
|
|
1 IopSynchronousServiceTail
|
|
1 IopTimerDispatch
|
|
1 IoUpdateShareAccess
|
|
1 KeClearEvent
|
|
1 KeGetCurrentIrql
|
|
1 KiFlushMultipleTb
|
|
1 KiRestoreVolatileFloatState
|
|
1 KiSystemServiceExit
|
|
1 KiTimerExpiration
|
|
1 MiAccessCheck
|
|
1 MiAddValidPageToWorkingSet
|
|
1 MiCheckControlAreaStatus
|
|
1 MiDeleteSystemPagableVm
|
|
1 MiFlushInPageSupportBlock
|
|
1 MiFreeEventCounter
|
|
1 MiInitializeReadInProgressPfn
|
|
1 MiMakeProtectionMask
|
|
1 MiMapPageInHyperSpace
|
|
1 MiReleasePageFileSpace
|
|
1 MiReleaseWsle
|
|
1 MiWaitForInPageComplete
|
|
1 MmBuildMdlForNonPagedPool
|
|
1 MmFlushImageSection
|
|
1 NtQueryVolumeInformationFile
|
|
1 OtsDivide32Unsigned
|
|
1 RtlCreateSecurityDescriptor
|
|
1 RtlFirstFreeAce
|
|
1 RtlImageDirectoryEntryToData
|
|
1 RtlInitializeSid
|
|
1 RtlLookupElementGenericTable
|
|
1 RtlNumberOfClearBits
|
|
1 RtlPcToFileHeader
|
|
1 RtlRealSuccessor
|
|
1 RtlSubtreePredecessor
|
|
1 SeLockSubjectContext
|
|
1 wcsicmp
|
|
|