| |
|
|
| <h1>PropertyLengthAsVariant</h1> 1. function name: ~~~PropertyLengthAsVariant~~~ 1. function address in the Process: 2005532945 1. function address ex Offset the Moduls: 131345 1. function address the Verweises in the Process: 2005651080
<h1>RtlConvertPropertyToVariant</h1> 2. function name: ~~~RtlConvertPropertyToVariant~~~ 2. function address in the Process: 2005532794 2. function address ex Offset the Moduls: 131194 2. function address the Verweises in the Process: 2005651084
<h1>RtlConvertVariantToProperty</h1> 3. function name: ~~~RtlConvertVariantToProperty~~~ 3. function address in the Process: 2005532634 3. function address ex Offset the Moduls: 131034 3. function address the Verweises in the Process: 2005651088
<h1>RtlUlongByteSwap</h1> 4. function name: ~~~RtlUlongByteSwap~~~ 4. function address in the Process: 2005647746 4. function address ex Offset the Moduls: 246146 4. function address the Verweises in the Process: 2005651092
<h1>RtlUlonglongByteSwap</h1> 5. function name: ~~~RtlUlonglongByteSwap~~~ 5. function address in the Process: 2005647751 5. function address ex Offset the Moduls: 246151 5. function address the Verweises in the Process: 2005651096
<h1>RtlUshortByteSwap</h1> 6. function name: ~~~RtlUshortByteSwap~~~ 6. function address in the Process: 2005647741 6. function address ex Offset the Moduls: 246141 6. function address the Verweises in the Process: 2005651100
<h1>CsrAllocateCaptureBuffer</h1> 7. function name: ~~~CsrAllocateCaptureBuffer~~~ 7. function address in the Process: 2005459760 7. function address ex Offset the Moduls: 58160 7. function address the Verweises in the Process: 2005651104
<h1>CsrAllocateMessagePointer</h1> 8. function name: ~~~CsrAllocateMessagePointer~~~ 8. function address in the Process: 2005459881 8. function address ex Offset the Moduls: 58281 8. function address the Verweises in the Process: 2005651108
<h1>CsrCaptureMessageBuffer</h1> 9. function name: ~~~CsrCaptureMessageBuffer~~~ 9. function address in the Process: 2005460021 9. function address ex Offset the Moduls: 58421 9. function address the Verweises in the Process: 2005651112
<h1>CsrCaptureMessageString</h1> 10. function name: ~~~CsrCaptureMessageString~~~ 10. function address in the Process: 2005406249 10. function address ex Offset the Moduls: 4649 10. function address the Verweises in the Process: 2005651116
<h1>CsrCaptureTimeout</h1> 11. function name: ~~~CsrCaptureTimeout~~~ 11. function address in the Process: 2005509886 11. function address ex Offset the Moduls: 108286 11. function address the Verweises in the Process: 2005651120
<h1>CsrClientCallServer</h1> 12. function name: ~~~CsrClientCallServer~~~ 12. function address in the Process: 2005410384 12. function address ex Offset the Moduls: 8784 12. function address the Verweises in the Process: 2005651124
<h1>CsrClientConnectToServer</h1> 13. function name: ~~~CsrClientConnectToServer~~~ 13. function address in the Process: 2005468662 13. function address ex Offset the Moduls: 67062 13. function address the Verweises in the Process: 2005651128
<h1>CsrFreeCaptureBuffer</h1> 14. function name: ~~~CsrFreeCaptureBuffer~~~ 14. function address in the Process: 2005459861 14. function address ex Offset the Moduls: 58261 14. function address the Verweises in the Process: 2005651132
<h1>CsrIdentifyAlertableThread</h1> 15. function name: ~~~CsrIdentifyAlertableThread~~~ 15. function address in the Process: 2005509714 15. function address ex Offset the Moduls: 108114 15. function address the Verweises in the Process: 2005651136
<h1>CsrNewThread</h1> 16. function name: ~~~CsrNewThread~~~ 16. function address in the Process: 2005426238 16. function address ex Offset the Moduls: 24638 16. function address the Verweises in the Process: 2005651140
<h1>CsrProbeForRead</h1> 17. function name: ~~~CsrProbeForRead~~~ 17. function address in the Process: 2005510000 17. function address ex Offset the Moduls: 108400 17. function address the Verweises in the Process: 2005651144
<h1>CsrProbeForWrite</h1> 18. function name: ~~~CsrProbeForWrite~~~ 18. function address in the Process: 2005509928 18. function address ex Offset the Moduls: 108328 18. function address the Verweises in the Process: 2005651148
<h1>CsrSetPriorityClass</h1> 19. function name: ~~~CsrSetPriorityClass~~~ 19. function address in the Process: 2005509761 19. function address ex Offset the Moduls: 108161 19. function address the Verweises in the Process: 2005651152
<h1>DbgBreakPoint</h1> 20. function name: ~~~DbgBreakPoint~~~ 20. function address in the Process: 2005533068 20. function address ex Offset the Moduls: 131468 20. function address the Verweises in the Process: 2005651156
<h1>DbgPrint</h1> 21. function name: ~~~DbgPrint~~~ 21. function address in the Process: 2005483072 21. function address ex Offset the Moduls: 81472 21. function address the Verweises in the Process: 2005651160
<h1>DbgPrintReturnControlC</h1> 22. function name: ~~~DbgPrintReturnControlC~~~ 22. function address in the Process: 2005533253 22. function address ex Offset the Moduls: 131653 22. function address the Verweises in the Process: 2005651164
<h1>DbgPrompt</h1> 23. function name: ~~~DbgPrompt~~~ 23. function address in the Process: 2005533390 23. function address ex Offset the Moduls: 131790 23. function address the Verweises in the Process: 2005651168
<h1>DbgSsHandleKmApiMsg</h1> 24. function name: ~~~DbgSsHandleKmApiMsg~~~ 24. function address in the Process: 2005510759 24. function address ex Offset the Moduls: 109159 24. function address the Verweises in the Process: 2005651172
<h1>DbgSsInitialize</h1> 25. function name: ~~~DbgSsInitialize~~~ 25. function address in the Process: 2005510689 25. function address ex Offset the Moduls: 109089 25. function address the Verweises in the Process: 2005651176
<h1>DbgUiConnectToDbg</h1> 26. function name: ~~~DbgUiConnectToDbg~~~ 26. function address in the Process: 2005511332 26. function address ex Offset the Moduls: 109732 26. function address the Verweises in the Process: 2005651180
<h1>DbgUiContinue</h1> 27. function name: ~~~DbgUiContinue~~~ 27. function address in the Process: 2005511803 27. function address ex Offset the Moduls: 110203 27. function address the Verweises in the Process: 2005651184
<h1>DbgUiWaitStateChange</h1> 28. function name: ~~~DbgUiWaitStateChange~~~ 28. function address in the Process: 2005511572 28. function address ex Offset the Moduls: 109972 28. function address the Verweises in the Process: 2005651188
<h1>DbgUserBreakPoint</h1> 29. function name: ~~~DbgUserBreakPoint~~~ 29. function address in the Process: 2005533070 29. function address ex Offset the Moduls: 131470 29. function address the Verweises in the Process: 2005651192
<h1>KiRaiseUserExceptionDispatcher</h1> 30. function name: ~~~KiRaiseUserExceptionDispatcher~~~ 30. function address in the Process: 2005533572 30. function address ex Offset the Moduls: 131972 30. function address the Verweises in the Process: 2005651196
<h1>KiUserApcDispatcher</h1> 31. function name: ~~~KiUserApcDispatcher~~~ 31. function address in the Process: 2005533452 31. function address ex Offset the Moduls: 131852 31. function address the Verweises in the Process: 2005651200
<h1>KiUserCallbackDispatcher</h1> 32. function name: ~~~KiUserCallbackDispatcher~~~ 32. function address in the Process: 2005533468 32. function address ex Offset the Moduls: 131868 32. function address the Verweises in the Process: 2005651204
<h1>KiUserExceptionDispatcher</h1> 33. function name: ~~~KiUserExceptionDispatcher~~~ 33. function address in the Process: 2005533496 33. function address ex Offset the Moduls: 131896 33. function address the Verweises in the Process: 2005651208
<h1>LdrAccessResource</h1> 34. function name: ~~~LdrAccessResource~~~ 34. function address in the Process: 2005422368 34. function address ex Offset the Moduls: 20768 34. function address the Verweises in the Process: 2005651212
<h1>LdrAlternateResourcesEnabled</h1> 35. function name: ~~~LdrAlternateResourcesEnabled~~~ 35. function address in the Process: 2005422215 35. function address ex Offset the Moduls: 20615 35. function address the Verweises in the Process: 2005651216
<h1>LdrDisableThreadCalloutsForDll</h1> 36. function name: ~~~LdrDisableThreadCalloutsForDll~~~ 36. function address in the Process: 2005454928 36. function address ex Offset the Moduls: 53328 36. function address the Verweises in the Process: 2005651220
<h1>LdrEnumResources</h1> 37. function name: ~~~LdrEnumResources~~~ 37. function address in the Process: 2005534245 37. function address ex Offset the Moduls: 132645 37. function address the Verweises in the Process: 2005651224
<h1>LdrFindEntryForAddress</h1> 38. function name: ~~~LdrFindEntryForAddress~~~ 38. function address in the Process: 2005533724 38. function address ex Offset the Moduls: 132124 38. function address the Verweises in the Process: 2005651228
<h1>LdrFindResourceDirectory_U</h1> 39. function name: ~~~LdrFindResourceDirectory_U~~~ 39. function address in the Process: 2005406581 39. function address ex Offset the Moduls: 4981 39. function address the Verweises in the Process: 2005651232
<h1>LdrFindResource_U</h1> 40. function name: ~~~LdrFindResource_U~~~ 40. function address in the Process: 2005421220 40. function address ex Offset the Moduls: 19620 40. function address the Verweises in the Process: 2005651236
<h1>LdrFlushAlternateResourceModules</h1> 41. function name: ~~~LdrFlushAlternateResourceModules~~~ 41. function address in the Process: 2005536406 41. function address ex Offset the Moduls: 134806 41. function address the Verweises in the Process: 2005651240
<h1>LdrGetDllHandle</h1> 42. function name: ~~~LdrGetDllHandle~~~ 42. function address in the Process: 2005427494 42. function address ex Offset the Moduls: 25894 42. function address the Verweises in the Process: 2005651244
<h1>LdrGetProcedureAddress</h1> 43. function name: ~~~LdrGetProcedureAddress~~~ 43. function address in the Process: 2005427468 43. function address ex Offset the Moduls: 25868 43. function address the Verweises in the Process: 2005651248
<h1>LdrInitializeThunk</h1> 44. function name: ~~~LdrInitializeThunk~~~ 44. function address in the Process: 2005425940 44. function address ex Offset the Moduls: 24340 44. function address the Verweises in the Process: 2005651252
<h1>LdrLoadAlternateResourceModule</h1> 45. function name: ~~~LdrLoadAlternateResourceModule~~~ 45. function address in the Process: 2005422260 45. function address ex Offset the Moduls: 20660 45. function address the Verweises in the Process: 2005651256
<h1>LdrLoadDll</h1> 46. function name: ~~~LdrLoadDll~~~ 46. function address in the Process: 2005430012 46. function address ex Offset the Moduls: 28412 46. function address the Verweises in the Process: 2005651260
<h1>LdrProcessRelocationBlock</h1> 47. function name: ~~~LdrProcessRelocationBlock~~~ 47. function address in the Process: 2005474079 47. function address ex Offset the Moduls: 72479 47. function address the Verweises in the Process: 2005651264
<h1>LdrQueryImageFileExecutionOptions</h1> 48. function name: ~~~LdrQueryImageFileExecutionOptions~~~ 48. function address in the Process: 2005468359 48. function address ex Offset the Moduls: 66759 48. function address the Verweises in the Process: 2005651268
<h1>LdrQueryProcessModuleInformation</h1> 49. function name: ~~~LdrQueryProcessModuleInformation~~~ 49. function address in the Process: 2005519475 49. function address ex Offset the Moduls: 117875 49. function address the Verweises in the Process: 2005651272
<h1>LdrShutdownProcess</h1> 50. function name: ~~~LdrShutdownProcess~~~ 50. function address in the Process: 2005458206 50. function address ex Offset the Moduls: 56606 50. function address the Verweises in the Process: 2005651276
<h1>LdrShutdownThread</h1> 51. function name: ~~~LdrShutdownThread~~~ 51. function address in the Process: 2005419512 51. function address ex Offset the Moduls: 17912 51. function address the Verweises in the Process: 2005651280
<h1>LdrUnloadAlternateResourceModule</h1> 52. function name: ~~~LdrUnloadAlternateResourceModule~~~ 52. function address in the Process: 2005448528 52. function address ex Offset the Moduls: 46928 52. function address the Verweises in the Process: 2005651284
<h1>LdrUnloadDll</h1> 53. function name: ~~~LdrUnloadDll~~~ 53. function address in the Process: 2005418987 53. function address ex Offset the Moduls: 17387 53. function address the Verweises in the Process: 2005651288
<h1>LdrVerifyImageMatchesChecksum</h1> 54. function name: ~~~LdrVerifyImageMatchesChecksum~~~ 54. function address in the Process: 2005519075 54. function address ex Offset the Moduls: 117475 54. function address the Verweises in the Process: 2005651292
<h1>NPXEMULATORTABLE</h1> 55. function name: ~~~NPXEMULATORTABLE~~~ 55. function address in the Process: 2005689780 55. function address ex Offset the Moduls: 288180 55. function address the Verweises in the Process: 2005651296
<h1>NlsAnsiCodePage</h1> 56. function name: ~~~NlsAnsiCodePage~~~ 56. function address in the Process: 2005729838 56. function address ex Offset the Moduls: 328238 56. function address the Verweises in the Process: 2005651300
<h1>NlsMbCodePageTag</h1> 57. function name: ~~~NlsMbCodePageTag~~~ 57. function address in the Process: 2005725972 57. function address ex Offset the Moduls: 324372 57. function address the Verweises in the Process: 2005651304
<h1>NlsMbOemCodePageTag</h1> 58. function name: ~~~NlsMbOemCodePageTag~~~ 58. function address in the Process: 2005725976 58. function address ex Offset the Moduls: 324376 58. function address the Verweises in the Process: 2005651308
<h1>NtAcceptConnectPort</h1> 59. function name: ~~~NtAcceptConnectPort~~~ 59. function address in the Process: 2005433199 59. function address ex Offset the Moduls: 31599 59. function address the Verweises in the Process: 2005651312
<h1>NtAccessCheck</h1> 60. function name: ~~~NtAccessCheck~~~ 60. function address in the Process: 2005433527 60. function address ex Offset the Moduls: 31927 60. function address the Verweises in the Process: 2005651316
<h1>NtAccessCheckAndAuditAlarm</h1> 61. function name: ~~~NtAccessCheckAndAuditAlarm~~~ 61. function address in the Process: 2005414314 61. function address ex Offset the Moduls: 12714 61. function address the Verweises in the Process: 2005651320
<h1>NtAccessCheckByType</h1> 62. function name: ~~~NtAccessCheckByType~~~ 62. function address in the Process: 2005507175 62. function address ex Offset the Moduls: 105575 62. function address the Verweises in the Process: 2005651324
<h1>NtAccessCheckByTypeAndAuditAlarm</h1> 63. function name: ~~~NtAccessCheckByTypeAndAuditAlarm~~~ 63. function address in the Process: 2005465206 63. function address ex Offset the Moduls: 63606 63. function address the Verweises in the Process: 2005651328
<h1>NtAccessCheckByTypeResultList</h1> 64. function name: ~~~NtAccessCheckByTypeResultList~~~ 64. function address in the Process: 2005507189 64. function address ex Offset the Moduls: 105589 64. function address the Verweises in the Process: 2005651332
<h1>NtAccessCheckByTypeResultListAndAuditAlarm</h1> 65. function name: ~~~NtAccessCheckByTypeResultListAndAuditAlarm~~~ 65. function address in the Process: 2005507203 65. function address ex Offset the Moduls: 105603 65. function address the Verweises in the Process: 2005651336
<h1>NtAccessCheckByTypeResultListAndAuditAlarmByHandle</h1> 66. function name: ~~~NtAccessCheckByTypeResultListAndAuditAlarmByHandle~~~ 66. function address in the Process: 2005507217 66. function address ex Offset the Moduls: 105617 66. function address the Verweises in the Process: 2005651340
<h1>NtAddAtom</h1> 67. function name: ~~~NtAddAtom~~~ 67. function address in the Process: 2005420613 67. function address ex Offset the Moduls: 19013 67. function address the Verweises in the Process: 2005651344
<h1>NtAdjustGroupsToken</h1> 68. function name: ~~~NtAdjustGroupsToken~~~ 68. function address in the Process: 2005507231 68. function address ex Offset the Moduls: 105631 68. function address the Verweises in the Process: 2005651348
<h1>NtAdjustPrivilegesToken</h1> 69. function name: ~~~NtAdjustPrivilegesToken~~~ 69. function address in the Process: 2005414300 69. function address ex Offset the Moduls: 12700 69. function address the Verweises in the Process: 2005651352
<h1>NtAlertResumeThread</h1> 70. function name: ~~~NtAlertResumeThread~~~ 70. function address in the Process: 2005507245 70. function address ex Offset the Moduls: 105645 70. function address the Verweises in the Process: 2005651356
<h1>NtAlertThread</h1> 71. function name: ~~~NtAlertThread~~~ 71. function address in the Process: 2005417278 71. function address ex Offset the Moduls: 15678 71. function address the Verweises in the Process: 2005651360
<h1>NtAllocateLocallyUniqueId</h1> 72. function name: ~~~NtAllocateLocallyUniqueId~~~ 72. function address in the Process: 2005414286 72. function address ex Offset the Moduls: 12686 72. function address the Verweises in the Process: 2005651364
<h1>NtAllocateUserPhysicalPages</h1> 73. function name: ~~~NtAllocateUserPhysicalPages~~~ 73. function address in the Process: 2005507259 73. function address ex Offset the Moduls: 105659 73. function address the Verweises in the Process: 2005651368
<h1>NtAllocateUuids</h1> 74. function name: ~~~NtAllocateUuids~~~ 74. function address in the Process: 2005433379 74. function address ex Offset the Moduls: 31779 74. function address the Verweises in the Process: 2005651372
<h1>NtAllocateVirtualMemory</h1> 75. function name: ~~~NtAllocateVirtualMemory~~~ 75. function address in the Process: 2005413590 75. function address ex Offset the Moduls: 11990 75. function address the Verweises in the Process: 2005651376
<h1>NtAreMappedFilesTheSame</h1> 76. function name: ~~~NtAreMappedFilesTheSame~~~ 76. function address in the Process: 2005507273 76. function address ex Offset the Moduls: 105673 76. function address the Verweises in the Process: 2005651380
<h1>NtAssignProcessToJobObject</h1> 77. function name: ~~~NtAssignProcessToJobObject~~~ 77. function address in the Process: 2005507287 77. function address ex Offset the Moduls: 105687 77. function address the Verweises in the Process: 2005651384
<h1>NtCallbackReturn</h1> 78. function name: ~~~NtCallbackReturn~~~ 78. function address in the Process: 2005413884 78. function address ex Offset the Moduls: 12284 78. function address the Verweises in the Process: 2005651388
<h1>NtCancelDeviceWakeupRequest</h1> 79. function name: ~~~NtCancelDeviceWakeupRequest~~~ 79. function address in the Process: 2005507318 79. function address ex Offset the Moduls: 105718 79. function address the Verweises in the Process: 2005651392
<h1>NtCancelIoFile</h1> 80. function name: ~~~NtCancelIoFile~~~ 80. function address in the Process: 2005507304 80. function address ex Offset the Moduls: 105704 80. function address the Verweises in the Process: 2005651396
<h1>NtCancelTimer</h1> 81. function name: ~~~NtCancelTimer~~~ 81. function address in the Process: 2005441556 81. function address ex Offset the Moduls: 39956 81. function address the Verweises in the Process: 2005651400
<h1>NtClearEvent</h1> 82. function name: ~~~NtClearEvent~~~ 82. function address in the Process: 2005412045 82. function address ex Offset the Moduls: 10445 82. function address the Verweises in the Process: 2005651404
<h1>NtClose</h1> 83. function name: ~~~NtClose~~~ 83. function address in the Process: 2005411846 83. function address ex Offset the Moduls: 10246 83. function address the Verweises in the Process: 2005651408
<h1>NtCloseObjectAuditAlarm</h1> 84. function name: ~~~NtCloseObjectAuditAlarm~~~ 84. function address in the Process: 2005424873 84. function address ex Offset the Moduls: 23273 84. function address the Verweises in the Process: 2005651412
<h1>NtCompleteConnectPort</h1> 85. function name: ~~~NtCompleteConnectPort~~~ 85. function address in the Process: 2005433213 85. function address ex Offset the Moduls: 31613 85. function address the Verweises in the Process: 2005651416
<h1>NtConnectPort</h1> 86. function name: ~~~NtConnectPort~~~ 86. function address in the Process: 2005433227 86. function address ex Offset the Moduls: 31627 86. function address the Verweises in the Process: 2005651420
<h1>NtContinue</h1> 87. function name: ~~~NtContinue~~~ 87. function address in the Process: 2005411954 87. function address ex Offset the Moduls: 10354 87. function address the Verweises in the Process: 2005651424
<h1>NtCreateChannel</h1> 88. function name: ~~~NtCreateChannel~~~ 88. function address in the Process: 2005508494 88. function address ex Offset the Moduls: 106894 88. function address the Verweises in the Process: 2005651428
<h1>NtCreateDirectoryObject</h1> 89. function name: ~~~NtCreateDirectoryObject~~~ 89. function address in the Process: 2005507335 89. function address ex Offset the Moduls: 105735 89. function address the Verweises in the Process: 2005651432
<h1>NtCreateEvent</h1> 90. function name: ~~~NtCreateEvent~~~ 90. function address in the Process: 2005413604 90. function address ex Offset the Moduls: 12004 90. function address the Verweises in the Process: 2005651436
<h1>NtCreateEventPair</h1> 91. function name: ~~~NtCreateEventPair~~~ 91. function address in the Process: 2005507349 91. function address ex Offset the Moduls: 105749 91. function address the Verweises in the Process: 2005651440
<h1>NtCreateFile</h1> 92. function name: ~~~NtCreateFile~~~ 92. function address in the Process: 2005440148 92. function address ex Offset the Moduls: 38548 92. function address the Verweises in the Process: 2005651444
<h1>NtCreateIoCompletion</h1> 93. function name: ~~~NtCreateIoCompletion~~~ 93. function address in the Process: 2005426646 93. function address ex Offset the Moduls: 25046 93. function address the Verweises in the Process: 2005651448
<h1>NtCreateJobObject</h1> 94. function name: ~~~NtCreateJobObject~~~ 94. function address in the Process: 2005507363 94. function address ex Offset the Moduls: 105763 94. function address the Verweises in the Process: 2005651452
<h1>NtCreateKey</h1> 95. function name: ~~~NtCreateKey~~~ 95. function address in the Process: 2005418216 95. function address ex Offset the Moduls: 16616 95. function address the Verweises in the Process: 2005651456
<h1>NtCreateMailslotFile</h1> 96. function name: ~~~NtCreateMailslotFile~~~ 96. function address in the Process: 2005406035 96. function address ex Offset the Moduls: 4435 96. function address the Verweises in the Process: 2005651460
<h1>NtCreateMutant</h1> 97. function name: ~~~NtCreateMutant~~~ 97. function address in the Process: 2005414198 97. function address ex Offset the Moduls: 12598 97. function address the Verweises in the Process: 2005651464
<h1>NtCreateNamedPipeFile</h1> 98. function name: ~~~NtCreateNamedPipeFile~~~ 98. function address in the Process: 2005435350 98. function address ex Offset the Moduls: 33750 98. function address the Verweises in the Process: 2005651468
<h1>NtCreatePagingFile</h1> 99. function name: ~~~NtCreatePagingFile~~~ 99. function address in the Process: 2005507377 99. function address ex Offset the Moduls: 105777 99. function address the Verweises in the Process: 2005651472
<h1>NtCreatePort</h1> 100. function name: ~~~NtCreatePort~~~ 100. function address in the Process: 2005466212 100. function address ex Offset the Moduls: 64612 100. function address the Verweises in the Process: 2005651476
<h1>NtCreateProcess</h1> 101. function name: ~~~NtCreateProcess~~~ 101. function address in the Process: 2005472232 101. function address ex Offset the Moduls: 70632 101. function address the Verweises in the Process: 2005651480
<h1>NtCreateProfile</h1> 102. function name: ~~~NtCreateProfile~~~ 102. function address in the Process: 2005507391 102. function address ex Offset the Moduls: 105791 102. function address the Verweises in the Process: 2005651484
<h1>NtCreateSection</h1> 103. function name: ~~~NtCreateSection~~~ 103. function address in the Process: 2005418162 103. function address ex Offset the Moduls: 16562 103. function address the Verweises in the Process: 2005651488
<h1>NtCreateSemaphore</h1> 104. function name: ~~~NtCreateSemaphore~~~ 104. function address in the Process: 2005414184 104. function address ex Offset the Moduls: 12584 104. function address the Verweises in the Process: 2005651492
<h1>NtCreateSymbolicLinkObject</h1> 105. function name: ~~~NtCreateSymbolicLinkObject~~~ 105. function address in the Process: 2005461641 105. function address ex Offset the Moduls: 60041 105. function address the Verweises in the Process: 2005651496
<h1>NtCreateThread</h1> 106. function name: ~~~NtCreateThread~~~ 106. function address in the Process: 2005425926 106. function address ex Offset the Moduls: 24326 106. function address the Verweises in the Process: 2005651500
<h1>NtCreateTimer</h1> 107. function name: ~~~NtCreateTimer~~~ 107. function address in the Process: 2005492468 107. function address ex Offset the Moduls: 90868 107. function address the Verweises in the Process: 2005651504
<h1>NtCreateToken</h1> 108. function name: ~~~NtCreateToken~~~ 108. function address in the Process: 2005507405 108. function address ex Offset the Moduls: 105805 108. function address the Verweises in the Process: 2005651508
<h1>NtCreateWaitablePort</h1> 109. function name: ~~~NtCreateWaitablePort~~~ 109. function address in the Process: 2005507419 109. function address ex Offset the Moduls: 105819 109. function address the Verweises in the Process: 2005651512
<h1>NtCurrentTeb</h1> 110. function name: ~~~NtCurrentTeb~~~ 110. function address in the Process: 2005543194 110. function address ex Offset the Moduls: 141594 110. function address the Verweises in the Process: 2005651516
<h1>NtDelayExecution</h1> 111. function name: ~~~NtDelayExecution~~~ 111. function address in the Process: 2005410342 111. function address ex Offset the Moduls: 8742 111. function address the Verweises in the Process: 2005651520
<h1>NtDeleteAtom</h1> 112. function name: ~~~NtDeleteAtom~~~ 112. function address in the Process: 2005420627 112. function address ex Offset the Moduls: 19027 112. function address the Verweises in the Process: 2005651524
<h1>NtDeleteFile</h1> 113. function name: ~~~NtDeleteFile~~~ 113. function address in the Process: 2005507433 113. function address ex Offset the Moduls: 105833 113. function address the Verweises in the Process: 2005651528
<h1>NtDeleteKey</h1> 114. function name: ~~~NtDeleteKey~~~ 114. function address in the Process: 2005440937 114. function address ex Offset the Moduls: 39337 114. function address the Verweises in the Process: 2005651532
<h1>NtDeleteObjectAuditAlarm</h1> 115. function name: ~~~NtDeleteObjectAuditAlarm~~~ 115. function address in the Process: 2005507447 115. function address ex Offset the Moduls: 105847 115. function address the Verweises in the Process: 2005651536
<h1>NtDeleteValueKey</h1> 116. function name: ~~~NtDeleteValueKey~~~ 116. function address in the Process: 2005429125 116. function address ex Offset the Moduls: 27525 116. function address the Verweises in the Process: 2005651540
<h1>NtDeviceIoControlFile</h1> 117. function name: ~~~NtDeviceIoControlFile~~~ 117. function address in the Process: 2005414042 117. function address ex Offset the Moduls: 12442 117. function address the Verweises in the Process: 2005651544
<h1>NtDisplayString</h1> 118. function name: ~~~NtDisplayString~~~ 118. function address in the Process: 2005507461 118. function address ex Offset the Moduls: 105861 118. function address the Verweises in the Process: 2005651548
<h1>NtDuplicateObject</h1> 119. function name: ~~~NtDuplicateObject~~~ 119. function address in the Process: 2005413856 119. function address ex Offset the Moduls: 12256 119. function address the Verweises in the Process: 2005651552
<h1>NtDuplicateToken</h1> 120. function name: ~~~NtDuplicateToken~~~ 120. function address in the Process: 2005412487 120. function address ex Offset the Moduls: 10887 120. function address the Verweises in the Process: 2005651556
<h1>NtEnumerateKey</h1> 121. function name: ~~~NtEnumerateKey~~~ 121. function address in the Process: 2005424845 121. function address ex Offset the Moduls: 23245 121. function address the Verweises in the Process: 2005651560
<h1>NtEnumerateValueKey</h1> 122. function name: ~~~NtEnumerateValueKey~~~ 122. function address in the Process: 2005429052 122. function address ex Offset the Moduls: 27452 122. function address the Verweises in the Process: 2005651564
<h1>NtExtendSection</h1> 123. function name: ~~~NtExtendSection~~~ 123. function address in the Process: 2005507475 123. function address ex Offset the Moduls: 105875 123. function address the Verweises in the Process: 2005651568
<h1>NtFilterToken</h1> 124. function name: ~~~NtFilterToken~~~ 124. function address in the Process: 2005507489 124. function address ex Offset the Moduls: 105889 124. function address the Verweises in the Process: 2005651572
<h1>NtFindAtom</h1> 125. function name: ~~~NtFindAtom~~~ 125. function address in the Process: 2005420599 125. function address ex Offset the Moduls: 18999 125. function address the Verweises in the Process: 2005651576
<h1>NtFlushBuffersFile</h1> 126. function name: ~~~NtFlushBuffersFile~~~ 126. function address in the Process: 2005414084 126. function address ex Offset the Moduls: 12484 126. function address the Verweises in the Process: 2005651580
<h1>NtFlushInstructionCache</h1> 127. function name: ~~~NtFlushInstructionCache~~~ 127. function address in the Process: 2005430078 127. function address ex Offset the Moduls: 28478 127. function address the Verweises in the Process: 2005651584
<h1>NtFlushKey</h1> 128. function name: ~~~NtFlushKey~~~ 128. function address in the Process: 2005449475 128. function address ex Offset the Moduls: 47875 128. function address the Verweises in the Process: 2005651588
<h1>NtFlushVirtualMemory</h1> 129. function name: ~~~NtFlushVirtualMemory~~~ 129. function address in the Process: 2005420662 129. function address ex Offset the Moduls: 19062 129. function address the Verweises in the Process: 2005651592
<h1>NtFlushWriteBuffer</h1> 130. function name: ~~~NtFlushWriteBuffer~~~ 130. function address in the Process: 2005507503 130. function address ex Offset the Moduls: 105903 130. function address the Verweises in the Process: 2005651596
<h1>NtFreeUserPhysicalPages</h1> 131. function name: ~~~NtFreeUserPhysicalPages~~~ 131. function address in the Process: 2005507515 131. function address ex Offset the Moduls: 105915 131. function address the Verweises in the Process: 2005651600
<h1>NtFreeVirtualMemory</h1> 132. function name: ~~~NtFreeVirtualMemory~~~ 132. function address in the Process: 2005412011 132. function address ex Offset the Moduls: 10411 132. function address the Verweises in the Process: 2005651604
<h1>NtFsControlFile</h1> 133. function name: ~~~NtFsControlFile~~~ 133. function address in the Process: 2005413618 133. function address ex Offset the Moduls: 12018 133. function address the Verweises in the Process: 2005651608
<h1>NtGetContextThread</h1> 134. function name: ~~~NtGetContextThread~~~ 134. function address in the Process: 2005496852 134. function address ex Offset the Moduls: 95252 134. function address the Verweises in the Process: 2005651612
<h1>NtGetDevicePowerState</h1> 135. function name: ~~~NtGetDevicePowerState~~~ 135. function address in the Process: 2005507529 135. function address ex Offset the Moduls: 105929 135. function address the Verweises in the Process: 2005651616
<h1>NtGetPlugPlayEvent</h1> 136. function name: ~~~NtGetPlugPlayEvent~~~ 136. function address in the Process: 2005462022 136. function address ex Offset the Moduls: 60422 136. function address the Verweises in the Process: 2005651620
<h1>NtGetTickCount</h1> 137. function name: ~~~NtGetTickCount~~~ 137. function address in the Process: 2005507543 137. function address ex Offset the Moduls: 105943 137. function address the Verweises in the Process: 2005651624
<h1>NtGetWriteWatch</h1> 138. function name: ~~~NtGetWriteWatch~~~ 138. function address in the Process: 2005507555 138. function address ex Offset the Moduls: 105955 138. function address the Verweises in the Process: 2005651628
<h1>NtImpersonateAnonymousToken</h1> 139. function name: ~~~NtImpersonateAnonymousToken~~~ 139. function address in the Process: 2005507569 139. function address ex Offset the Moduls: 105969 139. function address the Verweises in the Process: 2005651632
<h1>NtImpersonateClientOfPort</h1> 140. function name: ~~~NtImpersonateClientOfPort~~~ 140. function address in the Process: 2005417264 140. function address ex Offset the Moduls: 15664 140. function address the Verweises in the Process: 2005651636
<h1>NtImpersonateThread</h1> 141. function name: ~~~NtImpersonateThread~~~ 141. function address in the Process: 2005434172 141. function address ex Offset the Moduls: 32572 141. function address the Verweises in the Process: 2005651640
<h1>NtInitializeRegistry</h1> 142. function name: ~~~NtInitializeRegistry~~~ 142. function address in the Process: 2005507583 142. function address ex Offset the Moduls: 105983 142. function address the Verweises in the Process: 2005651644
<h1>NtInitiatePowerAction</h1> 143. function name: ~~~NtInitiatePowerAction~~~ 143. function address in the Process: 2005507597 143. function address ex Offset the Moduls: 105997 143. function address the Verweises in the Process: 2005651648
<h1>NtIsSystemResumeAutomatic</h1> 144. Funkt
|
|
|
| |
|
|