Retail 5838 Function Ledger - Mainkill1/SpiritBoot GitHub Wiki
Retail 5838: complete current inferred-entry ledger
Companion: Retail-5838-BIOS-Size-and-Layout. These 638 rows are the complete output of the current rooted walk, not a claim to recover all original functions. Labels for anonymous entries are investigator identifiers only. Sizes are inferred decoded walks; address envelopes include holes, and shared bytes appear in multiple rows. Do not sum rows into image usage or claim unobserved entries are unused. Exact original compiler body boundaries are unavailable in the stripped reference.
Root evidence includes public exports, public OBJECT_TYPE callback fields, installed IDT gates, the PE entry, and discovered direct entry/tail targets. Runtime-use qualification is absent. Indirect sites and invalid decode frontiers remain explicit. Cross-function helper closure costs are not included in a public entry size.
| Entry / public API | Entry VA | Root evidence | Section | Decoded bytes | Exclusive bytes | Shared bytes | Envelope bytes | Unresolved indirect sites | Invalid decode frontiers |
|---|---|---|---|---|---|---|---|---|---|
| ExInterlockedAddLargeStatistic | 0x80012ba0 | public export | .text | 7 | 7 | 0 | 7 | 0 | 0 |
| ExfInterlockedInsertHeadList | 0x80012ba8 | public export | .text | 22 | 22 | 0 | 22 | 0 | 0 |
| ExfInterlockedInsertTailList | 0x80012bc0 | public export | .text | 23 | 23 | 0 | 23 | 0 | 0 |
| ExfInterlockedRemoveHeadList | 0x80012bd8 | public export | .text | 21 | 21 | 0 | 21 | 0 | 0 |
| InterlockedPopEntrySList | 0x80012bf0 | public export | .text | 33 | 33 | 0 | 33 | 0 | 0 |
| InterlockedPushEntrySList | 0x80012c14 | public export | .text | 31 | 31 | 0 | 31 | 0 | 0 |
| InterlockedFlushSList | 0x80012c34 | public export | .text | 33 | 33 | 0 | 33 | 0 | 0 |
| InterlockedExchange | 0x80012c58 | public export | .text | 8 | 8 | 0 | 8 | 0 | 0 |
| InterlockedIncrement | 0x80012c60 | public export | .text | 10 | 10 | 0 | 10 | 0 | 0 |
| InterlockedDecrement | 0x80012c6c | public export | .text | 10 | 10 | 0 | 10 | 0 | 0 |
| InterlockedCompareExchange | 0x80012c78 | public export | .text | 10 | 10 | 0 | 10 | 0 | 0 |
| ExInterlockedCompareExchange64 | 0x80012c84 | public export | .text | 27 | 27 | 0 | 27 | 0 | 0 |
| InterlockedExchangeAdd | 0x80012ca0 | public export | .text | 6 | 6 | 0 | 6 | 0 | 0 |
| ExAcquireReadWriteLockExclusive | 0x80012ca8 | public export | .text | 35 | 35 | 0 | 35 | 0 | 0 |
| ExAcquireReadWriteLockShared | 0x80012ccc | public export | .text | 48 | 48 | 0 | 48 | 0 | 0 |
| ExReleaseReadWriteLock | 0x80012cfc | public export | .text | 86 | 86 | 0 | 86 | 0 | 0 |
| inferred_internal_0016 | 0x80012d52 | direct-call or known-entry tail target | .text | 79 | 79 | 0 | 79 | 0 | 0 |
| ExAllocatePoolWithTag | 0x80012da1 | public OBJECT_TYPE callback; public export | .text | 439 | 439 | 0 | 439 | 0 | 0 |
| ExFreePool | 0x80012f58 | public OBJECT_TYPE callback; public export | .text | 349 | 349 | 0 | 349 | 0 | 0 |
| ExQueryPoolBlockSize | 0x800130b5 | public export | .text | 31 | 31 | 0 | 31 | 0 | 0 |
| ExAllocatePool | 0x800130d4 | public export | .text | 17 | 17 | 0 | 17 | 0 | 0 |
| NtClearEvent | 0x800130e5 | public export | .text | 49 | 49 | 0 | 49 | 0 | 0 |
| NtCreateEvent | 0x80013116 | public export | .text | 107 | 107 | 0 | 107 | 0 | 0 |
| NtPulseEvent | 0x80013181 | public export | .text | 67 | 67 | 0 | 67 | 0 | 0 |
| NtQueryEvent | 0x800131c4 | public export | .text | 60 | 60 | 0 | 60 | 0 | 0 |
| NtSetEvent | 0x80013200 | public export | .text | 67 | 67 | 0 | 67 | 0 | 0 |
| ExInitializeReadWriteLock | 0x80013243 | public export | .text | 55 | 55 | 0 | 55 | 0 | 0 |
| ExInterlockedAddLargeInteger | 0x8001327c | public export | .text | 49 | 49 | 0 | 49 | 0 | 0 |
| inferred_internal_0028 | 0x800132d3 | public OBJECT_TYPE callback | .text | 18 | 18 | 0 | 18 | 0 | 0 |
| NtCreateMutant | 0x800132e5 | public export | .text | 58 | 58 | 0 | 58 | 0 | 0 |
| NtReleaseMutant | 0x8001331f | public export | .text | 88 | 88 | 0 | 88 | 0 | 0 |
| NtQueryMutant | 0x80013399 | public export | .text | 80 | 80 | 0 | 80 | 0 | 0 |
| ExRaiseException | 0x800133ec | public export | .text | 152 | 152 | 0 | 152 | 0 | 0 |
| ExRaiseStatus | 0x80013484 | public export | .text | 178 | 178 | 0 | 178 | 0 | 0 |
| NtCreateSemaphore | 0x80013536 | public export | .text | 85 | 85 | 0 | 85 | 0 | 0 |
| NtQuerySemaphore | 0x8001358b | public export | .text | 60 | 60 | 0 | 60 | 0 | 0 |
| NtReleaseSemaphore | 0x800135c7 | public export | .text | 102 | 102 | 0 | 102 | 0 | 0 |
| inferred_internal_0037 | 0x8001367f | public OBJECT_TYPE callback | .text | 5 | 5 | 0 | 5 | 0 | 0 |
| NtCreateTimer | 0x80013684 | public export | .text | 105 | 105 | 0 | 105 | 0 | 0 |
| NtCancelTimer | 0x800136ed | public export | .text | 156 | 156 | 0 | 156 | 0 | 0 |
| NtQueryTimer | 0x80013789 | public export | .text | 100 | 100 | 0 | 100 | 0 | 0 |
| inferred_internal_0041 | 0x8001384b | direct-call or known-entry tail target | .text | 171 | 171 | 0 | 171 | 0 | 0 |
| NtSetTimerEx | 0x800138f6 | public export | .text | 366 | 366 | 0 | 366 | 0 | 0 |
| NtSetSystemTime | 0x80013a64 | public export | .text | 125 | 125 | 0 | 125 | 0 | 0 |
| HalRequestSoftwareInterrupt | 0x80013ae4 | public export | .text | 50 | 50 | 0 | 50 | 1 | 0 |
| HalClearSoftwareInterrupt | 0x80013b18 | public export | .text | 16 | 16 | 0 | 16 | 0 | 0 |
| KfRaiseIrql | 0x80013cf4 | public export | .text | 14 | 14 | 0 | 14 | 0 | 0 |
| KeRaiseIrqlToDpcLevel | 0x80013d04 | public export | .text | 15 | 15 | 0 | 15 | 0 | 0 |
| KeRaiseIrqlToSynchLevel | 0x80013d14 | public export | .text | 15 | 15 | 0 | 15 | 0 | 0 |
| KfLowerIrql | 0x80013d24 | public export | .text | 82 | 82 | 0 | 83 | 2 | 0 |
| KeGetCurrentIrql | 0x80013f60 | public export | .text | 8 | 8 | 0 | 8 | 0 | 0 |
| inferred_internal_0051 | 0x80013f98 | direct-call or known-entry tail target | .text | 48 | 48 | 0 | 48 | 0 | 0 |
| inferred_internal_0052 | 0x80013fc8 | direct-call or known-entry tail target | .text | 42 | 42 | 0 | 42 | 0 | 0 |
| inferred_internal_0053 | 0x80013ff2 | direct-call or known-entry tail target | .text | 83 | 83 | 0 | 83 | 0 | 0 |
| inferred_internal_0054 | 0x80014045 | direct-call or known-entry tail target | .text | 97 | 97 | 0 | 97 | 0 | 0 |
| inferred_internal_0055 | 0x800140a6 | direct-call or known-entry tail target | .text | 105 | 105 | 0 | 105 | 0 | 0 |
| inferred_internal_0056 | 0x8001410f | direct-call or known-entry tail target | .text | 35 | 35 | 0 | 35 | 0 | 0 |
| ExQueryNonVolatileSetting | 0x80014132 | public export | .text | 394 | 394 | 0 | 394 | 0 | 0 |
| ExSaveNonVolatileSetting | 0x800142bc | public export | .text | 478 | 478 | 0 | 478 | 0 | 0 |
| ExReadWriteRefurbInfo | 0x8001449a | public export | .text | 262 | 262 | 0 | 262 | 0 | 0 |
| inferred_internal_0060 | 0x800145a0 | direct-call or known-entry tail target | .text | 81 | 81 | 0 | 81 | 0 | 0 |
| HalReadSMBusValue | 0x800145f1 | public export | .text | 190 | 190 | 0 | 190 | 0 | 0 |
| inferred_internal_0062 | 0x800146af | direct-call or known-entry tail target | .text | 34 | 34 | 0 | 34 | 0 | 0 |
| inferred_internal_0063 | 0x800146d1 | direct-call or known-entry tail target | .text | 114 | 114 | 0 | 114 | 0 | 0 |
| HalWriteSMBusValue | 0x80014743 | public export | .text | 158 | 158 | 0 | 158 | 0 | 0 |
| inferred_internal_0065 | 0x80014814 | direct-call or known-entry tail target | .text | 107 | 107 | 0 | 107 | 0 | 0 |
| HalReadSMCTrayState | 0x80014f17 | public export | .text | 132 | 132 | 0 | 132 | 0 | 0 |
| HalIsResetOrShutdownPending | 0x80014fba | public export | .text | 11 | 11 | 0 | 11 | 0 | 0 |
| HalInitiateShutdown | 0x80014fc5 | public export | .text | 113 | 113 | 0 | 25278 | 0 | 0 |
| HalWriteSMCScratchRegister | 0x80014ff3 | public export | .text | 24 | 24 | 0 | 24 | 0 | 0 |
| HalEnableSecureTrayEject | 0x8001500b | public export | .text | 34 | 34 | 0 | 34 | 0 | 0 |
| inferred_internal_0071 | 0x80015070 | direct-call or known-entry tail target | .text | 7 | 7 | 0 | 7 | 1 | 0 |
| inferred_internal_0072 | 0x800150a4 | direct-call or known-entry tail target | .text | 191 | 45 | 146 | 92 | 0 | 0 |
| inferred_internal_0073 | 0x80015128 | direct-call or known-entry tail target | .text | 179 | 33 | 146 | 33 | 0 | 0 |
| HalDisableSystemInterrupt | 0x8001514c | public export | .text | 43 | 43 | 0 | 43 | 0 | 0 |
| HalEnableSystemInterrupt | 0x80015178 | public export | .text | 96 | 96 | 0 | 96 | 0 | 0 |
| HalGetInterruptVector | 0x800151d8 | public export | .text | 34 | 34 | 0 | 34 | 0 | 0 |
| HalReadWritePCISpace | 0x8001530c | public export | .text | 117 | 117 | 0 | 117 | 1 | 0 |
| inferred_internal_0078 | 0x80015381 | direct-call or known-entry tail target | .text | 2 | 2 | 0 | 2 | 0 | 0 |
| HalRegisterShutdownNotification | 0x80015385 | public export | .text | 135 | 135 | 0 | 135 | 0 | 0 |
| inferred_internal_0080 | 0x8001540c | direct-call or known-entry tail target | .text | 31 | 31 | 0 | 31 | 0 | 0 |
| HalReturnToFirmware | 0x8001542d | public export | .text | 123 | 123 | 0 | 123 | 1 | 0 |
| KeQueryPerformanceCounter | 0x800154a8 | public export | .text | 59 | 59 | 0 | 59 | 0 | 0 |
| KeQueryPerformanceFrequency | 0x800154e4 | public export | .text | 8 | 8 | 0 | 8 | 0 | 0 |
| inferred_internal_0084 | 0x800154ec | direct-call or known-entry tail target | .text | 58 | 58 | 0 | 58 | 0 | 0 |
| KeStallExecutionProcessor | 0x80015530 | public export | .text | 42 | 42 | 0 | 56 | 0 | 0 |
| READ_PORT_BUFFER_UCHAR | 0x80015568 | public export | .text | 21 | 21 | 0 | 21 | 0 | 0 |
| READ_PORT_BUFFER_USHORT | 0x80015580 | public export | .text | 22 | 22 | 0 | 22 | 0 | 0 |
| READ_PORT_BUFFER_ULONG | 0x80015598 | public export | .text | 21 | 21 | 0 | 21 | 0 | 0 |
| WRITE_PORT_BUFFER_UCHAR | 0x800155b0 | public export | .text | 21 | 21 | 0 | 21 | 0 | 0 |
| WRITE_PORT_BUFFER_USHORT | 0x800155c8 | public export | .text | 22 | 22 | 0 | 22 | 0 | 0 |
| WRITE_PORT_BUFFER_ULONG | 0x800155e0 | public export | .text | 21 | 21 | 0 | 21 | 0 | 0 |
| inferred_internal_0092 | 0x80015710 | direct-call or known-entry tail target | .text | 275 | 275 | 0 | 276 | 0 | 0 |
| inferred_internal_0093 | 0x80015864 | direct-call or known-entry tail target | .text | 20 | 20 | 0 | 20 | 0 | 0 |
| inferred_internal_0094 | 0x80015878 | direct-call or known-entry tail target | .text | 38 | 38 | 0 | 38 | 0 | 0 |
| inferred_internal_0095 | 0x800158a0 | direct-call or known-entry tail target | .text | 9 | 9 | 0 | 9 | 0 | 0 |
| inferred_internal_0096 | 0x800158ac | direct-call or known-entry tail target | .text | 8 | 8 | 0 | 8 | 0 | 0 |
| inferred_internal_0097 | 0x800158b4 | direct-call or known-entry tail target | .text | 75 | 75 | 0 | 75 | 0 | 0 |
| IoAllocateIrp | 0x80015a77 | public export | .text | 114 | 114 | 0 | 114 | 0 | 0 |
| IofCallDriver | 0x80015ae9 | public export | .text | 51 | 51 | 0 | 51 | 1 | 0 |
| inferred_internal_0100 | 0x80015b1c | direct-call or known-entry tail target | .text | 107 | 107 | 0 | 107 | 0 | 0 |
| IoCheckShareAccess | 0x80015b87 | public export | .text | 301 | 301 | 0 | 301 | 0 | 0 |
| IoCreateDevice | 0x80015cb4 | public export | .text | 368 | 368 | 0 | 368 | 0 | 0 |
| IoCreateFile | 0x80015e24 | public export | .text | 410 | 410 | 0 | 410 | 0 | 0 |
| IoCreateSymbolicLink | 0x80015fbe | public export | .text | 61 | 61 | 0 | 61 | 0 | 0 |
| IoDeleteDevice | 0x80015ffb | public export | .text | 60 | 60 | 0 | 60 | 0 | 0 |
| IoDeleteSymbolicLink | 0x80016037 | public export | .text | 72 | 72 | 0 | 72 | 0 | 0 |
| IoDismountVolume | 0x8001607f | public export | .text | 81 | 81 | 0 | 81 | 1 | 0 |
| IoDismountVolumeByName | 0x800160d0 | public export | .text | 56 | 56 | 0 | 56 | 0 | 0 |
| IoFreeIrp | 0x80016108 | public export | .text | 40 | 40 | 0 | 40 | 0 | 0 |
| IoInitializeIrp | 0x80016130 | public export | .text | 83 | 83 | 0 | 83 | 0 | 0 |
| inferred_internal_0111 | 0x80016183 | direct-call or known-entry tail target | .text | 39 | 39 | 0 | 39 | 0 | 0 |
| IoMarkIrpMustComplete | 0x800161aa | public export | .text | 28 | 28 | 0 | 28 | 0 | 0 |
| IoQueryFileInformation | 0x800161c6 | public export | .text | 29 | 29 | 0 | 29 | 0 | 0 |
| IoQueryVolumeInformation | 0x800161e3 | public export | .text | 29 | 29 | 0 | 29 | 0 | 0 |
| IoQueueThreadIrp | 0x80016200 | public export | .text | 51 | 51 | 0 | 51 | 0 | 0 |
| IoRemoveShareAccess | 0x80016233 | public export | .text | 73 | 73 | 0 | 73 | 0 | 0 |
| IoSetShareAccess | 0x8001627c | public export | .text | 206 | 206 | 0 | 206 | 0 | 0 |
| inferred_internal_0118 | 0x8001634a | direct-call or known-entry tail target | .text | 47 | 47 | 0 | 47 | 1 | 0 |
| inferred_internal_0119 | 0x80016379 | direct-call or known-entry tail target | .text | 51 | 51 | 0 | 51 | 1 | 0 |
| inferred_internal_0120 | 0x800163ac | direct-call or known-entry tail target | .text | 42 | 42 | 0 | 42 | 0 | 0 |
| IoStartNextPacket | 0x800163d6 | public export | .text | 43 | 43 | 0 | 43 | 0 | 0 |
| IoStartNextPacketByKey | 0x80016401 | public export | .text | 52 | 52 | 0 | 52 | 0 | 0 |
| IoStartPacket | 0x80016435 | public export | .text | 104 | 104 | 0 | 104 | 1 | 0 |
| IoBuildAsynchronousFsdRequest | 0x8001649d | public export | .text | 113 | 113 | 0 | 113 | 0 | 0 |
| IoBuildDeviceIoControlRequest | 0x8001650e | public export | .text | 168 | 168 | 0 | 168 | 0 | 0 |
| IoBuildSynchronousFsdRequest | 0x800165b6 | public export | .text | 88 | 88 | 0 | 88 | 0 | 0 |
| IofCompleteRequest | 0x8001660e | public export | .text | 490 | 490 | 0 | 490 | 1 | 0 |
| IoInvalidDeviceRequest | 0x800167f8 | public export | .text | 26 | 26 | 0 | 26 | 0 | 0 |
| IoSynchronousDeviceIoControlRequest | 0x80016812 | public export | .text | 123 | 123 | 0 | 123 | 0 | 0 |
| IoSynchronousFsdRequest | 0x8001688d | public export | .text | 105 | 105 | 0 | 105 | 0 | 0 |
| NtCreateIoCompletion | 0x800168f6 | public export | .text | 72 | 72 | 0 | 72 | 0 | 0 |
| NtQueryIoCompletion | 0x8001693e | public export | .text | 52 | 52 | 0 | 52 | 0 | 0 |
| NtRemoveIoCompletion | 0x80016972 | public export | .text | 167 | 167 | 0 | 167 | 0 | 0 |
| IoSetIoCompletion | 0x80016a19 | public export | .text | 72 | 72 | 0 | 72 | 0 | 0 |
| inferred_internal_0135 | 0x80016a61 | public OBJECT_TYPE callback | .text | 55 | 55 | 0 | 55 | 0 | 0 |
| NtSetIoCompletion | 0x80016a98 | public export | .text | 64 | 64 | 0 | 64 | 0 | 0 |
| NtCreateFile | 0x80016ad8 | public export | .text | 41 | 41 | 0 | 41 | 0 | 0 |
| NtOpenFile | 0x80016b01 | public export | .text | 37 | 37 | 0 | 37 | 0 | 0 |
| NtDeleteFile | 0x80016b26 | public export | .text | 110 | 110 | 0 | 110 | 0 | 0 |
| NtQueryFullAttributesFile | 0x80016b94 | public export | .text | 109 | 109 | 0 | 109 | 0 | 0 |
| NtUserIoApcDispatcher | 0x80016c01 | public export | .text | 46 | 46 | 0 | 46 | 1 | 0 |
| NtFlushBuffersFile | 0x80016c2f | public export | .text | 221 | 221 | 0 | 221 | 0 | 0 |
| NtDeviceIoControlFile | 0x80016d0c | public export | .text | 44 | 44 | 0 | 44 | 0 | 0 |
| NtFsControlFile | 0x80016d38 | public export | .text | 44 | 44 | 0 | 44 | 0 | 0 |
| NtQueryDirectoryFile | 0x80016d64 | public export | .text | 281 | 281 | 0 | 281 | 0 | 0 |
| inferred_internal_0146 | 0x80016e7d | direct-call or known-entry tail target | .text | 46 | 46 | 0 | 46 | 0 | 0 |
| NtQueryInformationFile | 0x80016eab | public export | .text | 571 | 571 | 0 | 571 | 0 | 0 |
| NtSetInformationFile | 0x800170e6 | public export | .text | 948 | 948 | 0 | 948 | 0 | 0 |
| NtQueryVolumeInformationFile | 0x8001749a | public export | .text | 332 | 332 | 0 | 332 | 0 | 0 |
| NtReadFile | 0x800175e6 | public export | .text | 460 | 460 | 0 | 460 | 0 | 0 |
| NtReadFileScatter | 0x800177b2 | public export | .text | 501 | 501 | 0 | 501 | 0 | 0 |
| NtWriteFile | 0x800179a7 | public export | .text | 482 | 482 | 0 | 482 | 0 | 0 |
| NtWriteFileGather | 0x80017b89 | public export | .text | 523 | 523 | 0 | 523 | 0 | 0 |
| inferred_internal_0154 | 0x80017d94 | direct-call or known-entry tail target | .text | 47 | 47 | 0 | 47 | 0 | 0 |
| inferred_internal_0155 | 0x80017dc3 | direct-call or known-entry tail target | .text | 47 | 47 | 0 | 47 | 0 | 0 |
| inferred_internal_0156 | 0x80017df2 | direct-call or known-entry tail target | .text | 46 | 46 | 0 | 46 | 1 | 0 |
| inferred_internal_0157 | 0x80017e20 | direct-call or known-entry tail target | .text | 62 | 62 | 0 | 62 | 0 | 0 |
| inferred_internal_0158 | 0x80017e5e | direct-call or known-entry tail target | .text | 51 | 51 | 0 | 51 | 0 | 0 |
| inferred_internal_0159 | 0x80017e91 | direct-call or known-entry tail target | .text | 48 | 48 | 0 | 48 | 0 | 0 |
| inferred_internal_0160 | 0x80017ec1 | direct-call or known-entry tail target | .text | 171 | 171 | 0 | 171 | 0 | 0 |
| inferred_internal_0161 | 0x80017f6c | direct-call or known-entry tail target | .text | 51 | 51 | 0 | 51 | 0 | 0 |
| inferred_internal_0162 | 0x80017fbf | direct-call or known-entry tail target | .text | 469 | 469 | 0 | 469 | 0 | 0 |
| inferred_internal_0163 | 0x80018194 | direct-call or known-entry tail target | .text | 104 | 104 | 0 | 104 | 0 | 0 |
| inferred_internal_0164 | 0x800181fc | direct-call or known-entry tail target | .text | 315 | 315 | 0 | 315 | 0 | 0 |
| inferred_internal_0165 | 0x80018337 | direct-call or known-entry tail target | .text | 164 | 164 | 0 | 164 | 0 | 0 |
| inferred_internal_0166 | 0x800183db | direct-call or known-entry tail target | .text | 324 | 324 | 0 | 324 | 0 | 0 |
| inferred_internal_0167 | 0x8001851f | direct-call or known-entry tail target | .text | 122 | 122 | 0 | 122 | 0 | 0 |
| inferred_internal_0168 | 0x80018599 | public OBJECT_TYPE callback | .text | 1054 | 1054 | 0 | 1054 | 0 | 0 |
| inferred_internal_0169 | 0x800189b7 | public OBJECT_TYPE callback | .text | 64 | 64 | 0 | 64 | 0 | 0 |
| inferred_internal_0170 | 0x800189f7 | public OBJECT_TYPE callback | .text | 254 | 254 | 0 | 254 | 0 | 0 |
| inferred_internal_0171 | 0x80018af5 | public OBJECT_TYPE callback | .text | 275 | 275 | 0 | 275 | 0 | 0 |
| inferred_internal_0172 | 0x80018c08 | direct-call or known-entry tail target | .text | 22 | 22 | 0 | 22 | 0 | 0 |
| inferred_internal_0173 | 0x80018c20 | direct-call or known-entry tail target | .text | 20 | 20 | 0 | 20 | 0 | 0 |
| inferred_internal_0174 | 0x80018cd9 | direct-call or known-entry tail target | .text | 53 | 53 | 0 | 53 | 0 | 0 |
| KiUnlockDispatcherDatabase | 0x80018d10 | public export | .text | 148 | 148 | 0 | 148 | 0 | 0 |
| inferred_internal_0176 | 0x80018da4 | direct-call or known-entry tail target | .text | 237 | 237 | 0 | 238 | 0 | 0 |
| inferred_internal_0177 | 0x80018f30 | direct-call or known-entry tail target | .text | 119 | 119 | 0 | 119 | 0 | 0 |
| inferred_internal_0178 | 0x80018fa8 | direct-call or known-entry tail target | .text | 7 | 7 | 0 | 7 | 0 | 0 |
| inferred_internal_0179 | 0x80018fb0 | direct-call or known-entry tail target | .text | 11 | 11 | 0 | 11 | 0 | 0 |
| inferred_internal_0180 | 0x80018fbb | direct-call or known-entry tail target | .text | 249 | 249 | 0 | 249 | 0 | 0 |
| KeAlertThread | 0x800190b4 | public export | .text | 81 | 81 | 0 | 81 | 0 | 0 |
| KeAlertResumeThread | 0x80019105 | public export | .text | 103 | 103 | 0 | 103 | 0 | 0 |
| KeBoostPriorityThread | 0x8001916c | public export | .text | 73 | 73 | 0 | 73 | 0 | 0 |
| inferred_internal_0184 | 0x800191b5 | direct-call or known-entry tail target | .text | 30 | 30 | 0 | 30 | 0 | 0 |
| inferred_internal_0185 | 0x800191d3 | direct-call or known-entry tail target | .text | 30 | 30 | 0 | 30 | 0 | 0 |
| inferred_internal_0186 | 0x800191f1 | direct-call or known-entry tail target | .text | 58 | 58 | 0 | 58 | 0 | 0 |
| KeQueryBasePriorityThread | 0x8001922b | public export | .text | 49 | 49 | 0 | 49 | 0 | 0 |
| inferred_internal_0188 | 0x8001925c | direct-call or known-entry tail target | .text | 28 | 28 | 0 | 28 | 0 | 0 |
| KeResumeThread | 0x80019278 | public export | .text | 63 | 63 | 0 | 63 | 0 | 0 |
| KeSetBasePriorityThread | 0x800192b7 | public export | .text | 206 | 206 | 0 | 206 | 0 | 0 |
| KeSetDisableBoostThread | 0x80019385 | public export | .text | 34 | 34 | 0 | 34 | 0 | 0 |
| KeSetPriorityThread | 0x800193a7 | public export | .text | 57 | 57 | 0 | 57 | 0 | 0 |
| KeSuspendThread | 0x800193e0 | public export | .text | 91 | 91 | 0 | 91 | 0 | 0 |
| inferred_internal_0194 | 0x8001943b | direct-call or known-entry tail target | .text | 154 | 154 | 0 | 154 | 0 | 0 |
| KeTestAlertThread | 0x800194d5 | public export | .text | 66 | 66 | 0 | 66 | 0 | 0 |
| inferred_internal_0196 | 0x80019517 | direct-call or known-entry tail target | .text | 85 | 85 | 0 | 85 | 0 | 0 |
| inferred_internal_0197 | 0x8001956c | direct-call or known-entry tail target | .text | 42 | 42 | 0 | 42 | 0 | 0 |
| KeBugCheckEx | 0x800195b2 | public export | .text | 110 | 110 | 0 | 110 | 0 | 0 |
| KeBugCheck | 0x80019620 | public export | .text | 16 | 16 | 0 | 16 | 0 | 0 |
| KeInitializeTimerEx | 0x80019630 | public export | .text | 45 | 45 | 0 | 45 | 0 | 0 |
| KeCancelTimer | 0x8001965d | public export | .text | 47 | 47 | 0 | 47 | 0 | 0 |
| KeSetTimerEx | 0x8001968c | public export | .text | 186 | 186 | 0 | 186 | 0 | 0 |
| KeSetTimer | 0x80019746 | public export | .text | 26 | 26 | 0 | 26 | 0 | 0 |
| KeConnectInterrupt | 0x80019760 | public export | .text | 128 | 128 | 0 | 128 | 0 | 0 |
| KeDisconnectInterrupt | 0x800197e0 | public export | .text | 104 | 104 | 0 | 104 | 0 | 0 |
| inferred_internal_0206 | 0x80019848 | direct-call or known-entry tail target | .text | 131 | 131 | 0 | 131 | 0 | 0 |
| KeInitializeInterrupt | 0x800198cb | public export | .text | 121 | 121 | 0 | 121 | 0 | 0 |
| inferred_internal_0208 | 0x80019944 | direct-call or known-entry tail target | .text | 89 | 89 | 0 | 89 | 0 | 0 |
| inferred_internal_0209 | 0x8001999d | direct-call or known-entry tail target | .text | 106 | 106 | 0 | 106 | 0 | 0 |
| KeDelayExecutionThread | 0x80019a07 | public export | .text | 465 | 465 | 0 | 465 | 0 | 0 |
| KeWaitForMultipleObjects | 0x80019bd8 | public export | .text | 769 | 769 | 0 | 769 | 0 | 0 |
| KeWaitForSingleObject | 0x80019ed9 | public export | .text | 619 | 619 | 0 | 619 | 0 | 0 |
| KeQueryInterruptTime | 0x8001a144 | public export | .text | 24 | 24 | 0 | 24 | 0 | 0 |
| KeQuerySystemTime | 0x8001a15c | public export | .text | 35 | 35 | 0 | 35 | 0 | 0 |
| inferred_internal_0215 | 0x8001a17f | direct-call or known-entry tail target | .text | 346 | 346 | 0 | 346 | 0 | 0 |
| KeEnterCriticalRegion | 0x8001a2d9 | public export | .text | 9 | 9 | 0 | 9 | 0 | 0 |
| KeLeaveCriticalRegion | 0x8001a2e2 | public export | .text | 33 | 33 | 0 | 33 | 0 | 0 |
| KeGetCurrentThread | 0x8001a314 | public export | .text | 6 | 6 | 0 | 6 | 0 | 0 |
| KeIsExecutingDpc | 0x8001a31c | public export | .text | 6 | 6 | 0 | 6 | 0 | 0 |
| KeInitializeApc | 0x8001a322 | public export | .text | 68 | 68 | 0 | 68 | 0 | 0 |
| inferred_internal_0221 | 0x8001a366 | direct-call or known-entry tail target | .text | 67 | 67 | 0 | 67 | 0 | 0 |
| KeInsertQueueApc | 0x8001a3a9 | public export | .text | 63 | 63 | 0 | 63 | 0 | 0 |
| inferred_internal_0223 | 0x8001a3e8 | direct-call or known-entry tail target | .text | 91 | 91 | 0 | 91 | 0 | 0 |
| KeInitializeDeviceQueue | 0x8001a443 | public export | .text | 28 | 28 | 0 | 28 | 0 | 0 |
| KeInsertDeviceQueue | 0x8001a45f | public export | .text | 46 | 46 | 0 | 46 | 0 | 0 |
| KeInsertByKeyDeviceQueue | 0x8001a48d | public export | .text | 72 | 72 | 0 | 72 | 0 | 0 |
| KeRemoveDeviceQueue | 0x8001a4d5 | public export | .text | 37 | 37 | 0 | 37 | 0 | 0 |
| KeRemoveByKeyDeviceQueue | 0x8001a4fa | public export | .text | 79 | 79 | 0 | 79 | 0 | 0 |
| KeRemoveEntryDeviceQueue | 0x8001a549 | public export | .text | 47 | 47 | 0 | 47 | 0 | 0 |
| KeInitializeDpc | 0x8001a578 | public export | .text | 30 | 30 | 0 | 30 | 0 | 0 |
| KeRemoveQueueDpc | 0x8001a596 | public export | .text | 33 | 33 | 0 | 33 | 0 | 0 |
| KeInsertQueueDpc | 0x8001a5b7 | public export | .text | 120 | 120 | 0 | 120 | 0 | 0 |
| KeInitializeEvent | 0x8001a62f | public export | .text | 33 | 33 | 0 | 33 | 0 | 0 |
| KeResetEvent | 0x8001a650 | public export | .text | 30 | 30 | 0 | 30 | 0 | 0 |
| KeSetEventBoostPriority | 0x8001a66e | public export | .text | 72 | 72 | 0 | 72 | 0 | 0 |
| KePulseEvent | 0x8001a6b6 | public export | .text | 86 | 86 | 0 | 86 | 0 | 0 |
| KeSetEvent | 0x8001a70c | public export | .text | 119 | 119 | 0 | 119 | 0 | 0 |
| KeInitializeMutant | 0x8001a783 | public export | .text | 93 | 93 | 0 | 93 | 0 | 0 |
| KeReleaseMutant | 0x8001a7e0 | public export | .text | 165 | 165 | 0 | 165 | 0 | 0 |
| KeInitializeQueue | 0x8001a885 | public export | .text | 66 | 66 | 0 | 66 | 0 | 0 |
| KeRundownQueue | 0x8001a8c7 | public export | .text | 73 | 73 | 0 | 73 | 0 | 0 |
| inferred_internal_0242 | 0x8001a910 | direct-call or known-entry tail target | .text | 61 | 61 | 0 | 61 | 0 | 0 |
| KeRemoveQueue | 0x8001a94d | public export | .text | 456 | 456 | 0 | 456 | 0 | 0 |
| inferred_internal_0244 | 0x8001ab15 | direct-call or known-entry tail target | .text | 162 | 162 | 0 | 162 | 0 | 0 |
| KeInsertQueue | 0x8001abb7 | public export | .text | 40 | 40 | 0 | 40 | 0 | 0 |
| KeInsertHeadQueue | 0x8001abdf | public export | .text | 40 | 40 | 0 | 40 | 0 | 0 |
| KeInitializeSemaphore | 0x8001ac07 | public export | .text | 36 | 36 | 0 | 36 | 0 | 0 |
| KeReleaseSemaphore | 0x8001ac2b | public export | .text | 117 | 117 | 0 | 117 | 0 | 0 |
| KeSaveFloatingPointState | 0x8001aca0 | public export | .text | 336 | 336 | 0 | 336 | 0 | 0 |
| KeRestoreFloatingPointState | 0x8001adf0 | public export | .text | 268 | 268 | 0 | 268 | 0 | 0 |
| inferred_internal_0251 | 0x8001aefc | direct-call or known-entry tail target | .text | 34 | 34 | 0 | 34 | 0 | 0 |
| KeSetPriorityProcess | 0x8001af1e | public export | .text | 250 | 250 | 0 | 250 | 0 | 0 |
| KeSynchronizeExecution | 0x8001b020 | public export | .text | 45 | 45 | 0 | 45 | 1 | 0 |
| NtYieldExecution | 0x8001b0e3 | public export | .text | 166 | 166 | 0 | 166 | 0 | 0 |
| inferred_internal_0255 | 0x8001b18c | direct-call or known-entry tail target | .text | 207 | 142 | 65 | 207 | 0 | 0 |
| inferred_internal_0256 | 0x8001b283 | direct-call or known-entry tail target | .text | 66 | 66 | 0 | 66 | 1 | 0 |
| inferred_internal_0257 | 0x8001b2da | installed IDT gate | .text | 318 | 10 | 308 | 595 | 2 | 0 |
| inferred_internal_0258 | 0x8001b2e4 | installed IDT gate | .text | 318 | 10 | 308 | 585 | 2 | 0 |
| inferred_internal_0259 | 0x8001b2f8 | installed IDT gate | .text | 318 | 10 | 308 | 565 | 2 | 0 |
| inferred_internal_0260 | 0x8001b302 | installed IDT gate | .text | 318 | 10 | 308 | 555 | 2 | 0 |
| inferred_internal_0261 | 0x8001b30c | installed IDT gate | .text | 318 | 10 | 308 | 545 | 2 | 0 |
| inferred_internal_0262 | 0x8001b316 | installed IDT gate | .text | 318 | 10 | 308 | 535 | 2 | 0 |
| inferred_internal_0263 | 0x8001b32a | installed IDT gate | .text | 318 | 10 | 308 | 515 | 2 | 0 |
| inferred_internal_0264 | 0x8001b334 | installed IDT gate | .text | 318 | 10 | 308 | 505 | 2 | 0 |
| inferred_internal_0265 | 0x8001b352 | installed IDT gate | .text | 318 | 10 | 308 | 475 | 2 | 0 |
| inferred_internal_0266 | 0x8001b366 | installed IDT gate | .text | 318 | 10 | 308 | 455 | 2 | 0 |
| inferred_internal_0267 | 0x8001b370 | installed IDT gate | .text | 48 | 48 | 0 | 48 | 0 | 0 |
| inferred_internal_0268 | 0x8001b3a0 | installed IDT gate | .text | 118 | 37 | 81 | 118 | 0 | 0 |
| inferred_internal_0269 | 0x8001b54c | direct-call or known-entry tail target | .text | 164 | 61 | 103 | 61 | 0 | 0 |
| inferred_internal_0270 | 0x8001b58c | installed IDT gate | .text | 75 | 44 | 31 | 44 | 0 | 0 |
| inferred_internal_0271 | 0x8001b5b8 | installed IDT gate | .text | 80 | 49 | 31 | 49 | 0 | 0 |
| inferred_internal_0272 | 0x8001b614 | installed IDT gate | .text | 70 | 43 | 27 | 112 | 0 | 0 |
| inferred_internal_0273 | 0x8001b640 | installed IDT gate | .text | 68 | 41 | 27 | 68 | 0 | 0 |
| inferred_internal_0274 | 0x8001b684 | installed IDT gate | .text | 75 | 44 | 31 | 44 | 0 | 0 |
| inferred_internal_0275 | 0x8001b6b0 | installed IDT gate | .text | 74 | 43 | 31 | 43 | 0 | 0 |
| inferred_internal_0276 | 0x8001b6dc | installed IDT gate | .text | 74 | 43 | 31 | 43 | 0 | 0 |
| inferred_internal_0277 | 0x8001b708 | installed IDT gate | .text | 510 | 137 | 373 | 394 | 0 | 0 |
| inferred_internal_0278 | 0x8001b894 | installed IDT gate | .text | 55 | 40 | 15 | 843 | 0 | 0 |
| inferred_internal_0279 | 0x8001b8bc | installed IDT gate | .text | 53 | 38 | 15 | 803 | 0 | 0 |
| inferred_internal_0280 | 0x8001b8e4 | installed IDT gate | .text | 56 | 44 | 12 | 44 | 0 | 0 |
| inferred_internal_0281 | 0x8001b910 | installed IDT gate | .text | 340 | 227 | 113 | 227 | 0 | 0 |
| inferred_internal_0282 | 0x8001b9f4 | installed IDT gate | .text | 55 | 40 | 15 | 491 | 0 | 0 |
| inferred_internal_0283 | 0x8001ba1c | installed IDT gate | .text | 450 | 77 | 373 | 66 | 0 | 0 |
| inferred_internal_0284 | 0x8001ba60 | installed IDT gate | .text | 53 | 38 | 15 | 383 | 0 | 0 |
| inferred_internal_0285 | 0x8001ba88 | installed IDT gate | .text | 276 | 252 | 24 | 252 | 0 | 0 |
| inferred_internal_0286 | 0x8001bb84 | direct-call or known-entry tail target | .text | 67 | 67 | 0 | 67 | 0 | 0 |
| inferred_internal_0287 | 0x8001bbc8 | direct-call or known-entry tail target | .text | 8 | 8 | 0 | 8 | 0 | 0 |
| inferred_internal_0288 | 0x8001bbe0 | direct-call or known-entry tail target | .text | 235 | 51 | 184 | 51 | 0 | 0 |
| inferred_internal_0289 | 0x8001bc14 | direct-call or known-entry tail target | .text | 13 | 13 | 0 | 13 | 0 | 0 |
| inferred_internal_0290 | 0x8001bc24 | direct-call or known-entry tail target | .text | 145 | 42 | 103 | 42 | 0 | 0 |
| inferred_internal_0291 | 0x8001bc50 | direct-call or known-entry tail target | .text | 17 | 17 | 0 | 17 | 0 | 0 |
| inferred_internal_0292 | 0x8001bc61 | direct-call or known-entry tail target | .text | 204 | 204 | 0 | 204 | 0 | 0 |
| inferred_internal_0293 | 0x8001bd2d | direct-call or known-entry tail target | .text | 238 | 238 | 0 | 238 | 3 | 0 |
| inferred_internal_0294 | 0x8001be1b | direct-call or known-entry tail target | .text | 146 | 146 | 0 | 146 | 2 | 0 |
| inferred_internal_0295 | 0x8001bed0 | direct-call or known-entry tail target | .text | 136 | 136 | 0 | 136 | 0 | 0 |
| inferred_internal_0296 | 0x8001bf58 | direct-call or known-entry tail target | .text | 187 | 187 | 0 | 187 | 0 | 0 |
| inferred_internal_0297 | 0x8001c013 | direct-call or known-entry tail target | .text | 190 | 190 | 0 | 190 | 0 | 0 |
| inferred_internal_0298 | 0x8001c0eb | direct-call or known-entry tail target | .text | 187 | 187 | 0 | 187 | 0 | 0 |
| inferred_internal_0299 | 0x8001c1a6 | direct-call or known-entry tail target | .text | 125 | 125 | 0 | 125 | 0 | 0 |
| inferred_internal_0300 | 0x8001c223 | direct-call or known-entry tail target | .text | 218 | 218 | 0 | 218 | 0 | 0 |
| inferred_internal_0301 | 0x8001c2fd | direct-call or known-entry tail target | .text | 271 | 271 | 0 | 271 | 1 | 0 |
| inferred_internal_0302 | 0x8001c536 | direct-call or known-entry tail target | .text | 133 | 133 | 0 | 133 | 0 | 0 |
| inferred_internal_0303 | 0x8001c5bb | direct-call or known-entry tail target | .text | 176 | 176 | 0 | 176 | 0 | 0 |
| inferred_internal_0304 | 0x8001c66b | direct-call or known-entry tail target | .text | 128 | 128 | 0 | 128 | 0 | 0 |
| inferred_internal_0305 | 0x8001c6eb | direct-call or known-entry tail target | .text | 93 | 93 | 0 | 93 | 0 | 0 |
| inferred_internal_0306 | 0x8001c748 | direct-call or known-entry tail target | .text | 74 | 74 | 0 | 74 | 0 | 0 |
| inferred_internal_0307 | 0x8001c792 | direct-call or known-entry tail target | .text | 80 | 80 | 0 | 80 | 0 | 0 |
| inferred_internal_0308 | 0x8001c7e2 | direct-call or known-entry tail target | .text | 51 | 51 | 0 | 51 | 0 | 0 |
| inferred_internal_0309 | 0x8001c815 | direct-call or known-entry tail target | .text | 292 | 292 | 0 | 292 | 0 | 0 |
| inferred_internal_0310 | 0x8001c948 | direct-call or known-entry tail target | .text | 23 | 23 | 0 | 23 | 0 | 0 |
| inferred_internal_0311 | 0x8001c95f | direct-call or known-entry tail target | .text | 59 | 59 | 0 | 59 | 0 | 0 |
| inferred_internal_0312 | 0x8001c99a | direct-call or known-entry tail target | .text | 218 | 218 | 0 | 218 | 0 | 0 |
| inferred_internal_0313 | 0x8001ca74 | direct-call or known-entry tail target | .text | 203 | 203 | 0 | 203 | 0 | 0 |
| inferred_internal_0314 | 0x8001cb3f | direct-call or known-entry tail target | .text | 176 | 176 | 0 | 176 | 2 | 0 |
| inferred_internal_0315 | 0x8001cbef | direct-call or known-entry tail target | .text | 45 | 45 | 0 | 45 | 0 | 0 |
| inferred_internal_0316 | 0x8001cc1c | direct-call or known-entry tail target | .text | 60 | 60 | 0 | 60 | 0 | 0 |
| inferred_internal_0317 | 0x8001cc58 | direct-call or known-entry tail target | .text | 462 | 462 | 0 | 469 | 0 | 0 |
| inferred_internal_0318 | 0x8001ce64 | direct-call or known-entry tail target | .text | 136 | 136 | 0 | 136 | 0 | 0 |
| inferred_internal_0319 | 0x8001ceec | direct-call or known-entry tail target | .text | 71 | 71 | 0 | 71 | 0 | 0 |
| inferred_internal_0320 | 0x8001cf33 | direct-call or known-entry tail target | .text | 91 | 91 | 0 | 91 | 0 | 0 |
| inferred_internal_0321 | 0x8001cf8e | direct-call or known-entry tail target | .text | 244 | 244 | 0 | 244 | 0 | 0 |
| FscGetCacheSize | 0x8001d082 | public export | .text | 6 | 6 | 0 | 6 | 0 | 0 |
| inferred_internal_0323 | 0x8001d088 | direct-call or known-entry tail target | .text | 88 | 88 | 0 | 88 | 0 | 0 |
| inferred_internal_0324 | 0x8001d0e0 | direct-call or known-entry tail target | .text | 51 | 51 | 0 | 51 | 0 | 0 |
| inferred_internal_0325 | 0x8001d196 | direct-call or known-entry tail target | .text | 141 | 141 | 0 | 141 | 0 | 0 |
| inferred_internal_0326 | 0x8001d223 | direct-call or known-entry tail target | .text | 16 | 16 | 0 | 16 | 0 | 0 |
| FscInvalidateIdleBlocks | 0x8001d26b | public export | .text | 121 | 121 | 0 | 121 | 0 | 0 |
| inferred_internal_0328 | 0x8001d2e4 | direct-call or known-entry tail target | .text | 411 | 411 | 0 | 411 | 0 | 0 |
| FscSetCacheSize | 0x8001d47f | public export | .text | 102 | 102 | 0 | 102 | 0 | 0 |
| inferred_internal_0330 | 0x8001d4e5 | direct-call or known-entry tail target | .text | 97 | 97 | 0 | 97 | 0 | 0 |
| inferred_internal_0331 | 0x8001d546 | direct-call or known-entry tail target | .text | 46 | 46 | 0 | 46 | 0 | 0 |
| inferred_internal_0332 | 0x8001d614 | direct-call or known-entry tail target | .text | 104 | 104 | 0 | 104 | 0 | 0 |
| inferred_internal_0333 | 0x8001d67c | direct-call or known-entry tail target | .text | 114 | 114 | 0 | 114 | 0 | 0 |
| inferred_internal_0334 | 0x8001d867 | direct-call or known-entry tail target | .text | 535 | 535 | 0 | 535 | 0 | 0 |
| MmGetPhysicalAddress | 0x8001ddd4 | public export | .text | 78 | 78 | 0 | 78 | 0 | 0 |
| MmAllocateContiguousMemoryEx | 0x8001de22 | public export | .text | 450 | 450 | 0 | 450 | 0 | 0 |
| MmQueryAllocationSize | 0x8001dfe4 | public export | .text | 61 | 61 | 0 | 61 | 0 | 0 |
| MmPersistContiguousMemory | 0x8001e021 | public export | .text | 96 | 96 | 0 | 96 | 0 | 0 |
| MmMapIoSpace | 0x8001e081 | public export | .text | 201 | 201 | 0 | 201 | 0 | 0 |
| MmUnmapIoSpace | 0x8001e14a | public export | .text | 83 | 83 | 0 | 83 | 0 | 0 |
| MmLockUnlockBufferPages | 0x8001e19d | public export | .text | 143 | 143 | 0 | 143 | 0 | 0 |
| MmLockUnlockPhysicalPage | 0x8001e22c | public export | .text | 62 | 62 | 0 | 62 | 0 | 0 |
| inferred_internal_0343 | 0x8001e26a | direct-call or known-entry tail target | .text | 258 | 258 | 0 | 258 | 0 | 0 |
| inferred_internal_0344 | 0x8001e36c | direct-call or known-entry tail target | .text | 171 | 171 | 0 | 171 | 0 | 0 |
| MmClaimGpuInstanceMemory | 0x8001e417 | public export | .text | 188 | 188 | 0 | 188 | 0 | 0 |
| MmAllocateContiguousMemory | 0x8001e4d3 | public export | .text | 20 | 20 | 0 | 20 | 0 | 0 |
| MmFreeContiguousMemory | 0x8001e4e7 | public export | .text | 99 | 99 | 0 | 99 | 0 | 0 |
| MmIsAddressValid | 0x8001e54a | public export | .text | 80 | 80 | 0 | 80 | 0 | 0 |
| inferred_internal_0349 | 0x8001e59a | direct-call or known-entry tail target | .text | 136 | 136 | 0 | 136 | 0 | 0 |
| inferred_internal_0350 | 0x8001e622 | direct-call or known-entry tail target | .text | 68 | 68 | 0 | 68 | 0 | 0 |
| inferred_internal_0351 | 0x8001e666 | direct-call or known-entry tail target | .text | 56 | 56 | 0 | 56 | 0 | 0 |
| MmQueryAddressProtect | 0x8001e69e | public export | .text | 97 | 97 | 0 | 97 | 0 | 0 |
| MmQueryStatistics | 0x8001e6ff | public export | .text | 118 | 118 | 0 | 118 | 0 | 0 |
| inferred_internal_0354 | 0x8001e7bb | direct-call or known-entry tail target | .text | 237 | 237 | 0 | 237 | 1 | 0 |
| inferred_internal_0355 | 0x8001e8a8 | direct-call or known-entry tail target | .text | 186 | 186 | 0 | 186 | 0 | 0 |
| MmSetAddressProtect | 0x8001e962 | public export | .text | 131 | 131 | 0 | 131 | 0 | 0 |
| MmAllocateSystemMemory | 0x8001e9e5 | public export | .text | 30 | 30 | 0 | 30 | 0 | 0 |
| MmFreeSystemMemory | 0x8001ea03 | public export | .text | 21 | 21 | 0 | 21 | 0 | 0 |
| inferred_internal_0359 | 0x8001ea18 | direct-call or known-entry tail target | .text | 28 | 28 | 0 | 28 | 0 | 0 |
| inferred_internal_0360 | 0x8001ea34 | direct-call or known-entry tail target | .text | 19 | 19 | 0 | 19 | 0 | 0 |
| MmCreateKernelStack | 0x8001ea47 | public export | .text | 42 | 42 | 0 | 42 | 0 | 0 |
| MmDeleteKernelStack | 0x8001ea71 | public export | .text | 32 | 32 | 0 | 32 | 0 | 0 |
| inferred_internal_0363 | 0x8001ea91 | direct-call or known-entry tail target | .text | 232 | 232 | 0 | 232 | 0 | 0 |
| inferred_internal_0364 | 0x8001ecfb | direct-call or known-entry tail target | .text | 105 | 105 | 0 | 105 | 0 | 0 |
| NtQueryVirtualMemory | 0x8001ed64 | public export | .text | 516 | 516 | 0 | 516 | 0 | 0 |
| NtProtectVirtualMemory | 0x8001ef68 | public export | .text | 387 | 387 | 0 | 387 | 0 | 0 |
| NtAllocateVirtualMemory | 0x8001f0eb | public export | .text | 1047 | 1047 | 0 | 1076 | 1 | 0 |
| NtFreeVirtualMemory | 0x8001f51f | public export | .text | 684 | 684 | 0 | 684 | 0 | 0 |
| inferred_internal_0369 | 0x8001f7cb | direct-call or known-entry tail target | .text | 216 | 216 | 0 | 216 | 0 | 0 |
| inferred_internal_0370 | 0x8001f8a3 | direct-call or known-entry tail target | .text | 225 | 225 | 0 | 225 | 0 | 0 |
| inferred_internal_0371 | 0x8001f984 | direct-call or known-entry tail target | .text | 340 | 340 | 0 | 340 | 1 | 0 |
| inferred_internal_0372 | 0x8001fad8 | direct-call or known-entry tail target | .text | 129 | 129 | 0 | 129 | 0 | 0 |
| inferred_internal_0373 | 0x8001fb59 | direct-call or known-entry tail target | .text | 33 | 33 | 0 | 33 | 0 | 0 |
| inferred_internal_0374 | 0x8001fb7a | direct-call or known-entry tail target | .text | 116 | 116 | 0 | 116 | 0 | 0 |
| inferred_internal_0375 | 0x8001fbee | direct-call or known-entry tail target | .text | 114 | 114 | 0 | 114 | 0 | 0 |
| inferred_internal_0376 | 0x8001fc91 | direct-call or known-entry tail target | .text | 26 | 26 | 0 | 26 | 0 | 0 |
| inferred_internal_0377 | 0x8001fcab | direct-call or known-entry tail target | .text | 81 | 81 | 0 | 81 | 0 | 0 |
| inferred_internal_0378 | 0x8001fcfc | direct-call or known-entry tail target | .text | 120 | 120 | 0 | 120 | 0 | 0 |
| inferred_internal_0379 | 0x8001fd74 | direct-call or known-entry tail target | .text | 352 | 352 | 0 | 352 | 0 | 0 |
| inferred_internal_0380 | 0x8001fed4 | direct-call or known-entry tail target | .text | 26 | 26 | 0 | 26 | 0 | 0 |
| inferred_internal_0381 | 0x8001fef0 | direct-call or known-entry tail target | .text | 56 | 56 | 0 | 56 | 0 | 0 |
| inferred_internal_0382 | 0x8001ff48 | direct-call or known-entry tail target | .text | 415 | 415 | 0 | 415 | 0 | 0 |
| inferred_internal_0383 | 0x800200e7 | direct-call or known-entry tail target | .text | 42 | 42 | 0 | 42 | 0 | 0 |
| inferred_internal_0384 | 0x80020111 | direct-call or known-entry tail target | .text | 38 | 38 | 0 | 38 | 0 | 0 |
| inferred_internal_0385 | 0x80020137 | direct-call or known-entry tail target | .text | 92 | 92 | 0 | 92 | 0 | 0 |
| inferred_internal_0386 | 0x80020193 | direct-call or known-entry tail target | .text | 402 | 402 | 0 | 402 | 0 | 0 |
| inferred_internal_0387 | 0x80020325 | direct-call or known-entry tail target | .text | 59 | 59 | 0 | 59 | 0 | 0 |
| inferred_internal_0388 | 0x80020360 | direct-call or known-entry tail target | .text | 38 | 38 | 0 | 38 | 0 | 0 |
| inferred_internal_0389 | 0x80020386 | direct-call or known-entry tail target | .text | 234 | 234 | 0 | 234 | 0 | 0 |
| inferred_internal_0390 | 0x80020470 | direct-call or known-entry tail target | .text | 271 | 271 | 0 | 271 | 0 | 0 |
| inferred_internal_0391 | 0x8002057f | direct-call or known-entry tail target | .text | 48 | 48 | 0 | 48 | 0 | 0 |
| inferred_internal_0392 | 0x800205af | direct-call or known-entry tail target | .text | 59 | 59 | 0 | 59 | 0 | 0 |
| inferred_internal_0393 | 0x800205ea | direct-call or known-entry tail target | .text | 42 | 42 | 0 | 42 | 0 | 0 |
| inferred_internal_0394 | 0x80020614 | direct-call or known-entry tail target | .text | 125 | 125 | 0 | 125 | 0 | 0 |
| ObReferenceObjectByName | 0x80020691 | public export | .text | 29 | 29 | 0 | 29 | 0 | 0 |
| ObfReferenceObject | 0x800206ae | public export | .text | 21 | 21 | 0 | 21 | 0 | 0 |
| ObReferenceObjectByPointer | 0x800206c3 | public export | .text | 45 | 45 | 0 | 45 | 0 | 0 |
| ObfDereferenceObject | 0x800206f0 | public export | .text | 62 | 62 | 0 | 62 | 2 | 0 |
| ObOpenObjectByPointer | 0x8002072e | public export | .text | 80 | 80 | 0 | 80 | 0 | 0 |
| ObReferenceObjectByHandle | 0x8002077e | public export | .text | 119 | 119 | 0 | 119 | 0 | 0 |
| ObOpenObjectByName | 0x800207f5 | public export | .text | 97 | 97 | 0 | 97 | 0 | 0 |
| inferred_internal_0402 | 0x80020856 | direct-call or known-entry tail target | .text | 154 | 154 | 0 | 154 | 0 | 0 |
| NtClose | 0x800208f0 | public export | .text | 136 | 136 | 0 | 136 | 1 | 0 |
| NtDuplicateObject | 0x80020978 | public export | .text | 77 | 77 | 0 | 77 | 0 | 0 |
| ObMakeTemporaryObject | 0x800209c5 | public export | .text | 56 | 56 | 0 | 56 | 0 | 0 |
| inferred_internal_0406 | 0x800209fd | direct-call or known-entry tail target | .text | 47 | 47 | 0 | 47 | 0 | 0 |
| NtCreateDirectoryObject | 0x80020a2c | public export | .text | 58 | 58 | 0 | 58 | 0 | 0 |
| NtOpenDirectoryObject | 0x80020a66 | public export | .text | 23 | 23 | 0 | 23 | 0 | 0 |
| NtQueryDirectoryObject | 0x80020a7d | public export | .text | 239 | 239 | 0 | 239 | 0 | 0 |
| inferred_internal_0410 | 0x80020b6c | direct-call or known-entry tail target | .text | 58 | 58 | 0 | 58 | 0 | 0 |
| inferred_internal_0411 | 0x80020ba6 | direct-call or known-entry tail target | .text | 164 | 164 | 0 | 164 | 0 | 0 |
| inferred_internal_0412 | 0x80020c4a | direct-call or known-entry tail target | .text | 502 | 502 | 0 | 502 | 1 | 0 |
| inferred_internal_0413 | 0x80020e40 | direct-call or known-entry tail target | .text | 305 | 305 | 0 | 305 | 1 | 0 |
| inferred_internal_0414 | 0x80020f71 | direct-call or known-entry tail target | .text | 146 | 146 | 0 | 146 | 0 | 0 |
| NtOpenSymbolicLinkObject | 0x80021003 | public export | .text | 23 | 23 | 0 | 23 | 0 | 0 |
| NtQuerySymbolicLinkObject | 0x8002101a | public export | .text | 119 | 119 | 0 | 119 | 0 | 0 |
| inferred_internal_0417 | 0x80021091 | public OBJECT_TYPE callback | .text | 14 | 14 | 0 | 14 | 0 | 0 |
| NtSignalAndWaitForSingleObjectEx | 0x8002109f | public export | .text | 219 | 219 | 0 | 277 | 0 | 0 |
| NtWaitForSingleObjectEx | 0x800211b4 | public export | .text | 97 | 97 | 0 | 117 | 0 | 0 |
| NtWaitForMultipleObjectsEx | 0x80021229 | public export | .text | 333 | 333 | 0 | 353 | 0 | 0 |
| NtWaitForSingleObject | 0x8002138a | public export | .text | 22 | 22 | 0 | 22 | 0 | 0 |
| ObCreateObject | 0x800213a0 | public export | .text | 270 | 270 | 0 | 270 | 2 | 0 |
| ObInsertObject | 0x800214ae | public export | .text | 496 | 496 | 0 | 496 | 0 | 0 |
| inferred_internal_0424 | 0x8002169e | direct-call or known-entry tail target | .text | 210 | 210 | 0 | 210 | 0 | 0 |
| inferred_internal_0425 | 0x80021770 | direct-call or known-entry tail target | .text | 81 | 81 | 0 | 81 | 0 | 0 |
| inferred_internal_0426 | 0x800217c1 | direct-call or known-entry tail target | .text | 75 | 75 | 0 | 75 | 0 | 0 |
| inferred_internal_0427 | 0x8002180c | direct-call or known-entry tail target | .text | 50 | 50 | 0 | 50 | 0 | 0 |
| inferred_internal_0428 | 0x8002183e | direct-call or known-entry tail target | .text | 79 | 79 | 0 | 79 | 0 | 0 |
| inferred_internal_0429 | 0x8002188d | direct-call or known-entry tail target | .text | 78 | 78 | 0 | 78 | 0 | 0 |
| inferred_internal_0430 | 0x800218db | direct-call or known-entry tail target | .text | 118 | 118 | 0 | 118 | 0 | 0 |
| inferred_internal_0431 | 0x80021951 | direct-call or known-entry tail target | .text | 117 | 117 | 0 | 117 | 0 | 0 |
| NtQueueApcThread | 0x800219d2 | public export | .text | 122 | 122 | 0 | 122 | 0 | 0 |
| NtResumeThread | 0x80021a4c | public export | .text | 59 | 59 | 0 | 59 | 0 | 0 |
| NtSuspendThread | 0x80021a87 | public export | .text | 119 | 119 | 0 | 165 | 0 | 0 |
| PsCreateSystemThreadEx | 0x80021b56 | public export | .text | 416 | 416 | 0 | 416 | 1 | 0 |
| PsSetCreateThreadNotifyRoutine | 0x80021cf6 | public export | .text | 47 | 47 | 0 | 47 | 0 | 0 |
| PsCreateSystemThread | 0x80021d25 | public export | .text | 42 | 42 | 0 | 42 | 0 | 0 |
| PsQueryStatistics | 0x80021d4f | public export | .text | 45 | 45 | 0 | 45 | 0 | 0 |
| PsTerminateSystemThread | 0x80021dc0 | public export | .text | 282 | 282 | 0 | 282 | 2 | 0 |
| inferred_internal_0440 | 0x80021eda | direct-call or known-entry tail target | .text | 61 | 61 | 0 | 61 | 0 | 0 |
| RtlUshortByteSwap | 0x80021f20 | public export | .text | 5 | 5 | 0 | 5 | 0 | 0 |
| RtlUlongByteSwap | 0x80021f30 | public export | .text | 5 | 5 | 0 | 5 | 0 | 0 |
| DbgBreakPoint | 0x80021f38 | public export | .text | 1 | 1 | 0 | 1 | 0 | 0 |
| DbgBreakPointWithStatus | 0x80021f3c | public export | .text | 5 | 5 | 0 | 5 | 0 | 0 |
| DbgPrint | 0x80021f44 | public export | .text | 90 | 90 | 0 | 90 | 0 | 0 |
| DbgPrompt | 0x80021f9e | public export | .text | 63 | 63 | 0 | 63 | 0 | 0 |
| RtlAnsiStringToUnicodeString | 0x80021fdd | public export | .text | 158 | 158 | 0 | 158 | 0 | 0 |
| RtlUnicodeStringToAnsiString | 0x8002207b | public export | .text | 179 | 179 | 0 | 179 | 0 | 0 |
| RtlUpcaseUnicodeString | 0x8002212e | public export | .text | 211 | 211 | 0 | 211 | 0 | 0 |
| RtlDowncaseUnicodeString | 0x80022201 | public export | .text | 209 | 209 | 0 | 209 | 0 | 0 |
| RtlUpcaseUnicodeChar | 0x800222d2 | public export | .text | 75 | 75 | 0 | 75 | 0 | 0 |
| RtlDowncaseUnicodeChar | 0x8002231d | public export | .text | 78 | 78 | 0 | 78 | 0 | 0 |
| RtlFreeAnsiString / RtlFreeUnicodeString | 0x8002236b | public export | .text | 26 | 26 | 0 | 26 | 0 | 0 |
| RtlCompareUnicodeString | 0x80022385 | public export | .text | 334 | 334 | 0 | 334 | 0 | 0 |
| RtlEqualUnicodeString | 0x800224d3 | public export | .text | 260 | 260 | 0 | 260 | 0 | 0 |
| RtlCopyUnicodeString | 0x800225d7 | public export | .text | 94 | 94 | 0 | 94 | 0 | 0 |
| RtlAppendUnicodeToString | 0x80022635 | public export | .text | 113 | 113 | 0 | 113 | 0 | 0 |
| RtlAppendUnicodeStringToString | 0x800226a6 | public export | .text | 102 | 102 | 0 | 102 | 0 | 0 |
| RtlCreateUnicodeString | 0x8002270c | public export | .text | 74 | 74 | 0 | 74 | 0 | 0 |
| RtlCopyString | 0x80022756 | public export | .text | 66 | 66 | 0 | 66 | 0 | 0 |
| RtlUpperChar | 0x80022798 | public export | .text | 92 | 92 | 0 | 92 | 0 | 0 |
| RtlLowerChar | 0x800227f4 | public export | .text | 92 | 92 | 0 | 92 | 0 | 0 |
| RtlCompareString | 0x80022850 | public export | .text | 140 | 140 | 0 | 140 | 0 | 0 |
| RtlEqualString | 0x800228dc | public export | .text | 115 | 115 | 0 | 115 | 0 | 0 |
| RtlUpperString | 0x800229d5 | public export | .text | 64 | 64 | 0 | 64 | 0 | 0 |
| RtlAppendStringToString | 0x80022a15 | public export | .text | 76 | 76 | 0 | 76 | 0 | 0 |
| RtlAssert | 0x80022a61 | public export | .text | 158 | 158 | 0 | 158 | 0 | 0 |
| RtlRip | 0x80022aff | public export | .text | 151 | 151 | 0 | 151 | 0 | 0 |
| inferred_internal_0469 | 0x80022b98 | direct-call or known-entry tail target | .text | 65 | 7 | 58 | 74 | 1 | 0 |
| inferred_internal_0470 | 0x80022ba0 | direct-call or known-entry tail target | .text | 66 | 8 | 58 | 66 | 1 | 0 |
| inferred_internal_0471 | 0x80022c30 | direct-call or known-entry tail target | .text | 16 | 16 | 0 | 16 | 0 | 0 |
| RtlCaptureContext | 0x80022c40 | public export | .text | 96 | 46 | 50 | 163 | 0 | 0 |
| inferred_internal_0473 | 0x80022c70 | direct-call or known-entry tail target | .text | 115 | 65 | 50 | 115 | 0 | 0 |
| inferred_internal_0474 | 0x80022ce4 | direct-call or known-entry tail target | .text | 27 | 27 | 0 | 27 | 0 | 0 |
| inferred_internal_0475 | 0x80022d00 | direct-call or known-entry tail target | .text | 7 | 7 | 0 | 7 | 0 | 0 |
| inferred_internal_0476 | 0x80022d08 | direct-call or known-entry tail target | .text | 4 | 4 | 0 | 4 | 0 | 0 |
| RtlWalkFrameChain | 0x80022d0c | public export | .text | 161 | 161 | 0 | 168 | 0 | 0 |
| RtlCaptureStackBackTrace | 0x80022db4 | public export | .text | 112 | 112 | 0 | 112 | 0 | 0 |
| RtlIntegerToChar | 0x80022e24 | public export | .text | 216 | 216 | 0 | 240 | 0 | 0 |
| RtlCharToInteger | 0x80022f14 | public export | .text | 266 | 266 | 0 | 290 | 0 | 0 |
| RtlUnicodeStringToInteger | 0x80023036 | public export | .text | 360 | 360 | 0 | 384 | 0 | 0 |
| RtlIntegerToUnicodeString | 0x800231b6 | public export | .text | 73 | 73 | 0 | 73 | 0 | 0 |
| RtlCompareMemory | 0x80023200 | public export | .text | 71 | 71 | 0 | 71 | 0 | 0 |
| RtlCompareMemoryUlong | 0x80023250 | public export | .text | 33 | 33 | 0 | 33 | 0 | 0 |
| RtlFillMemory | 0x80023280 | public export | .text | 49 | 49 | 0 | 49 | 0 | 0 |
| RtlFillMemoryUlong | 0x800232c0 | public export | .text | 22 | 22 | 0 | 22 | 0 | 0 |
| RtlZeroMemory | 0x800232e0 | public export | .text | 36 | 36 | 0 | 36 | 0 | 0 |
| RtlMoveMemory | 0x80023310 | public export | .text | 67 | 67 | 0 | 67 | 0 | 0 |
| RtlEnterCriticalSectionAndRegion | 0x80023360 | public export | .text | 81 | 31 | 50 | 101 | 0 | 0 |
| RtlEnterCriticalSection | 0x80023380 | public export | .text | 65 | 15 | 50 | 69 | 0 | 0 |
| RtlLeaveCriticalSectionAndRegion | 0x800233d0 | public export | .text | 74 | 74 | 0 | 86 | 0 | 0 |
| RtlLeaveCriticalSection | 0x80023430 | public export | .text | 41 | 41 | 0 | 54 | 0 | 0 |
| RtlTryEnterCriticalSection | 0x80023468 | public export | .text | 72 | 72 | 0 | 72 | 0 | 0 |
| RtlExtendedLargeIntegerDivide | 0x800234b0 | public export | .text | 89 | 89 | 0 | 90 | 0 | 0 |
| RtlExtendedMagicDivide | 0x8002350c | public export | .text | 142 | 142 | 0 | 142 | 0 | 0 |
| RtlExtendedIntegerMultiply | 0x8002359c | public export | .text | 86 | 86 | 0 | 86 | 0 | 0 |
| RtlGetCallersAddress | 0x800235f4 | public export | .text | 133 | 133 | 0 | 133 | 0 | 0 |
| RtlInitAnsiString | 0x8002368c | public export | .text | 43 | 43 | 0 | 43 | 0 | 0 |
| RtlInitUnicodeString | 0x800236b8 | public export | .text | 47 | 47 | 0 | 47 | 0 | 0 |
| RtlInitializeCriticalSection | 0x800236e7 | public export | .text | 37 | 37 | 0 | 37 | 0 | 0 |
| RtlMapGenericMask | 0x8002370c | public export | .text | 80 | 80 | 0 | 80 | 0 | 0 |
| RtlMultiByteToUnicodeN | 0x8002375c | public export | .text | 61 | 61 | 0 | 61 | 0 | 0 |
| RtlMultiByteToUnicodeSize | 0x80023799 | public export | .text | 17 | 17 | 0 | 17 | 0 | 0 |
| RtlUnicodeToMultiByteSize | 0x800237aa | public export | .text | 17 | 17 | 0 | 17 | 0 | 0 |
| RtlUnicodeToMultiByteN | 0x800237bb | public export | .text | 68 | 68 | 0 | 68 | 0 | 0 |
| RtlUpcaseUnicodeToMultiByteN | 0x800237ff | public export | .text | 180 | 180 | 0 | 180 | 0 | 0 |
| RtlNtStatusToDosError | 0x800238b3 | public export | .text | 215 | 215 | 0 | 215 | 0 | 0 |
| RtlRaiseException | 0x8002398c | public export | .text | 154 | 154 | 0 | 154 | 0 | 0 |
| RtlRaiseStatus | 0x80023a26 | public export | .text | 40 | 40 | 0 | 40 | 0 | 0 |
| inferred_internal_0510 | 0x80023a4e | direct-call or known-entry tail target | .text | 112 | 112 | 0 | 112 | 0 | 0 |
| inferred_internal_0511 | 0x80023abe | direct-call or known-entry tail target | .text | 56 | 56 | 0 | 56 | 0 | 0 |
| RtlTimeToTimeFields | 0x80023af6 | public export | .text | 310 | 310 | 0 | 310 | 0 | 0 |
| RtlTimeFieldsToTime | 0x80023c2c | public export | .text | 399 | 399 | 0 | 399 | 0 | 0 |
| inferred_internal_0514 | 0x80023dbb | direct-call or known-entry tail target | .text | 247 | 247 | 0 | 247 | 0 | 0 |
| RtlUnwind | 0x80023eb2 | public export | .text | 420 | 420 | 0 | 420 | 0 | 0 |
| inferred_internal_0516 | 0x80024056 | direct-call or known-entry tail target | .text | 63 | 63 | 0 | 63 | 0 | 0 |
| inferred_internal_0517 | 0x80024195 | direct-call or known-entry tail target | .text | 16 | 16 | 0 | 16 | 0 | 0 |
| inferred_internal_0518 | 0x800241af | direct-call or known-entry tail target | .text | 26 | 26 | 0 | 26 | 0 | 0 |
| inferred_internal_0519 | 0x800241d3 | direct-call or known-entry tail target | .text | 24 | 24 | 0 | 24 | 0 | 0 |
| inferred_internal_0520 | 0x80024862 | direct-call or known-entry tail target | .text | 62 | 62 | 0 | 62 | 0 | 0 |
| inferred_internal_0521 | 0x80024b7c | direct-call or known-entry tail target | .text | 39 | 39 | 0 | 39 | 0 | 0 |
| inferred_internal_0522 | 0x80024ffc | direct-call or known-entry tail target | .text | 73 | 73 | 0 | 73 | 0 | 0 |
| inferred_internal_0523 | 0x80026a14 | direct-call or known-entry tail target | .text | 196 | 196 | 0 | 196 | 0 | 0 |
| inferred_internal_0524 | 0x80026ad8 | direct-call or known-entry tail target | .text | 19 | 19 | 0 | 19 | 0 | 0 |
| inferred_internal_0525 | 0x80026aeb | direct-call or known-entry tail target | .text | 43 | 43 | 0 | 43 | 0 | 0 |
| inferred_internal_0526 | 0x80026fa9 | direct-call or known-entry tail target | .text | 198 | 198 | 0 | 198 | 0 | 0 |
| inferred_internal_0527 | 0x8002706f | direct-call or known-entry tail target | .text | 50 | 50 | 0 | 50 | 0 | 0 |
| inferred_internal_0528 | 0x800270a1 | direct-call or known-entry tail target | .text | 405 | 405 | 0 | 405 | 0 | 0 |
| inferred_internal_0529 | 0x80027236 | direct-call or known-entry tail target | .text | 221 | 221 | 0 | 221 | 0 | 0 |
| inferred_internal_0530 | 0x80027313 | direct-call or known-entry tail target | .text | 367 | 367 | 0 | 367 | 0 | 0 |
| inferred_internal_0531 | 0x80027c91 | direct-call or known-entry tail target | .text | 59 | 59 | 0 | 59 | 0 | 0 |
| inferred_internal_0532 | 0x8002803a | direct-call or known-entry tail target | .text | 19 | 19 | 0 | 19 | 0 | 0 |
| inferred_internal_0533 | 0x8002804d | direct-call or known-entry tail target | .text | 43 | 43 | 0 | 43 | 0 | 0 |
| inferred_internal_0534 | 0x800282db | direct-call or known-entry tail target | .text | 316 | 316 | 0 | 316 | 0 | 0 |
| inferred_internal_0535 | 0x8002aded | direct-call or known-entry tail target | .text | 130 | 130 | 0 | 130 | 0 | 0 |
| inferred_internal_0536 | 0x8002af34 | direct-call or known-entry tail target | .text | 63 | 63 | 0 | 63 | 0 | 0 |
| inferred_internal_0537 | 0x8002af73 | direct-call or known-entry tail target | .text | 191 | 191 | 0 | 191 | 0 | 0 |
| inferred_internal_0538 | 0x8002b032 | direct-call or known-entry tail target | .text | 269 | 269 | 0 | 269 | 0 | 0 |
| inferred_internal_0539 | 0x8002b13f | direct-call or known-entry tail target | .text | 190 | 190 | 0 | 190 | 0 | 0 |
| inferred_internal_0540 | 0x8002b314 | direct-call or known-entry tail target | .text | 44 | 44 | 0 | 44 | 0 | 0 |
| inferred_internal_0541 | 0x8002bef7 | direct-call or known-entry tail target | .text | 63 | 63 | 0 | 63 | 0 | 0 |
| inferred_internal_0542 | 0x8002bf36 | direct-call or known-entry tail target | .text | 63 | 63 | 0 | 63 | 0 | 0 |
| inferred_internal_0543 | 0x8002bf75 | direct-call or known-entry tail target | .text | 285 | 285 | 0 | 285 | 0 | 0 |
| inferred_internal_0544 | 0x8002c092 | direct-call or known-entry tail target | .text | 109 | 109 | 0 | 109 | 0 | 0 |
| inferred_internal_0545 | 0x8002c0ff | direct-call or known-entry tail target | .text | 77 | 77 | 0 | 77 | 0 | 0 |
| inferred_internal_0546 | 0x8002c14c | direct-call or known-entry tail target | .text | 117 | 117 | 0 | 117 | 0 | 0 |
| inferred_internal_0547 | 0x8002c1c1 | direct-call or known-entry tail target | .text | 187 | 187 | 0 | 187 | 0 | 0 |
| inferred_internal_0548 | 0x8002c27c | direct-call or known-entry tail target | .text | 350 | 350 | 0 | 350 | 0 | 0 |
| inferred_internal_0549 | 0x8002c3da | direct-call or known-entry tail target | .text | 326 | 326 | 0 | 326 | 0 | 0 |
| inferred_internal_0550 | 0x8002c520 | direct-call or known-entry tail target | .text | 205 | 205 | 0 | 205 | 0 | 0 |
| inferred_internal_0551 | 0x8002c5ed | direct-call or known-entry tail target | .text | 273 | 273 | 0 | 273 | 0 | 0 |
| inferred_internal_0552 | 0x8002c6fe | direct-call or known-entry tail target | .text | 549 | 549 | 0 | 549 | 0 | 0 |
| inferred_internal_0553 | 0x8002c980 | direct-call or known-entry tail target | .text | 44 | 44 | 0 | 44 | 0 | 0 |
| inferred_internal_0554 | 0x8002c9ac | direct-call or known-entry tail target | .text | 39 | 39 | 0 | 39 | 0 | 0 |
| inferred_internal_0555 | 0x8002cb61 | direct-call or known-entry tail target | .text | 68 | 68 | 0 | 68 | 0 | 0 |
| inferred_internal_0556 | 0x8002da00 | direct-call or known-entry tail target | .text | 52 | 52 | 0 | 52 | 0 | 0 |
| inferred_internal_0557 | 0x8002da34 | direct-call or known-entry tail target | .text | 96 | 96 | 0 | 96 | 0 | 0 |
| inferred_internal_0558 | 0x8002da94 | direct-call or known-entry tail target | .text | 96 | 96 | 0 | 96 | 0 | 0 |
| inferred_internal_0559 | 0x8002daf4 | direct-call or known-entry tail target | .text | 130 | 130 | 0 | 130 | 0 | 0 |
| inferred_internal_0560 | 0x8002db76 | direct-call or known-entry tail target | .text | 61 | 61 | 0 | 61 | 0 | 0 |
| PhyInitialize | 0x8002dbb3 | public export | .text | 423 | 423 | 0 | 423 | 0 | 0 |
| PhyGetLinkState | 0x8002dd5a | public export | .text | 63 | 63 | 0 | 63 | 0 | 0 |
| RtlSnprintf | 0x8002dd99 | public export | .text | 87 | 87 | 0 | 87 | 0 | 0 |
| RtlSprintf | 0x8002ddf0 | public export | .text | 88 | 88 | 0 | 88 | 0 | 0 |
| RtlVsnprintf | 0x8002de48 | public export | .text | 86 | 86 | 0 | 86 | 0 | 0 |
| RtlVsprintf | 0x8002de9e | public export | .text | 87 | 87 | 0 | 87 | 0 | 0 |
| inferred_internal_0567 | 0x8002def8 | direct-call or known-entry tail target | .text | 57 | 57 | 0 | 57 | 0 | 0 |
| inferred_internal_0568 | 0x8002df31 | direct-call or known-entry tail target | .text | 17 | 17 | 0 | 17 | 0 | 0 |
| inferred_internal_0569 | 0x8002e030 | direct-call or known-entry tail target | .text | 52 | 52 | 0 | 52 | 0 | 0 |
| inferred_internal_0570 | 0x8002e070 | direct-call or known-entry tail target | .text | 176 | 176 | 0 | 491 | 8 | 0 |
| inferred_internal_0571 | 0x8002e3a5 | direct-call or known-entry tail target | .text | 22 | 22 | 0 | 22 | 0 | 0 |
| inferred_internal_0572 | 0x8002e4a0 | direct-call or known-entry tail target | .text | 31 | 31 | 0 | 31 | 0 | 0 |
| inferred_internal_0573 | 0x8002e4df | direct-call or known-entry tail target | .text | 12 | 12 | 0 | 12 | 0 | 0 |
| inferred_internal_0574 | 0x8002e579 | direct-call or known-entry tail target | .text | 126 | 126 | 0 | 1607 | 1 | 0 |
| inferred_internal_0575 | 0x8002ed95 | direct-call or known-entry tail target | .text | 53 | 53 | 0 | 53 | 0 | 0 |
| inferred_internal_0576 | 0x8002edca | direct-call or known-entry tail target | .text | 65 | 65 | 0 | 65 | 0 | 0 |
| inferred_internal_0577 | 0x8002ee0b | direct-call or known-entry tail target | .text | 65 | 65 | 0 | 65 | 0 | 0 |
| inferred_internal_0578 | 0x8002ee4c | direct-call or known-entry tail target | .text | 83 | 83 | 0 | 83 | 0 | 0 |
| inferred_internal_0579 | 0x8002ee9f | direct-call or known-entry tail target | .text | 101 | 101 | 0 | 101 | 0 | 0 |
| inferred_internal_0580 | 0x8002ef04 | direct-call or known-entry tail target | .text | 170 | 170 | 0 | 170 | 0 | 0 |
| XeLoadSection | 0x8002efae | public export | .text | 111 | 111 | 0 | 111 | 0 | 0 |
| XeUnloadSection | 0x8002f01d | public export | .text | 58 | 58 | 0 | 58 | 0 | 0 |
| inferred_internal_0583 | 0x8002f960 | direct-call or known-entry tail target | .text | 92 | 92 | 0 | 92 | 0 | 0 |
| XcUpdateCrypto | 0x8002fcf6 | public export | .text | 235 | 235 | 0 | 235 | 0 | 0 |
| XcSHAInit | 0x8002fde1 | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcSHAUpdate | 0x8002fde7 | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcSHAFinal | 0x8002fded | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcRC4Key | 0x8002fdf3 | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcRC4Crypt | 0x8002fdf9 | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcHMAC | 0x8002fdff | public export | .text | 10 | 10 | 0 | 10 | 1 | 0 |
| XcPKEncPublic | 0x8002fe09 | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcPKDecPrivate | 0x8002fe0f | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcPKGetKeyLen | 0x8002fe15 | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcVerifyPKCS1Signature | 0x8002fe1b | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcModExp | 0x8002fe21 | public export | .text | 10 | 10 | 0 | 10 | 1 | 0 |
| XcDESKeyParity | 0x8002fe2b | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcKeyTable | 0x8002fe31 | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcBlockCrypt | 0x8002fe37 | public export | .text | 10 | 10 | 0 | 10 | 1 | 0 |
| XcBlockCryptCBC | 0x8002fe41 | public export | .text | 10 | 10 | 0 | 10 | 1 | 0 |
| XcCryptService | 0x8002fe4b | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| inferred_internal_0601 | 0x8002fe67 | direct-call or known-entry tail target | .text | 68 | 68 | 0 | 68 | 0 | 0 |
| AvGetSavedDataAddress | 0x8002ff5d | public export | .text | 6 | 6 | 0 | 6 | 0 | 0 |
| AvSetSavedDataAddress | 0x8002ff63 | public export | .text | 12 | 12 | 0 | 12 | 0 | 0 |
| inferred_internal_0604 | 0x8002ffe8 | direct-call or known-entry tail target | .text | 62 | 62 | 0 | 62 | 0 | 0 |
| inferred_internal_0605 | 0x80030026 | direct-call or known-entry tail target | .text | 585 | 585 | 0 | 585 | 0 | 0 |
| inferred_internal_0606 | 0x800305c8 | direct-call or known-entry tail target | .text | 311 | 311 | 0 | 311 | 0 | 0 |
| inferred_internal_0607 | 0x800306ff | direct-call or known-entry tail target | .text | 291 | 291 | 0 | 291 | 0 | 0 |
| AvSendTVEncoderOption | 0x80030822 | public export | .text | 78 | 78 | 0 | 1743 | 1 | 0 |
| AvSetDisplayMode | 0x80030f3d | public export | .text | 1687 | 1687 | 0 | 1687 | 0 | 0 |
| inferred_internal_0610 | 0x8003183d | direct-call or known-entry tail target | .text | 47 | 47 | 0 | 47 | 0 | 0 |
| inferred_internal_0611 | 0x8003186c | direct-call or known-entry tail target | .text | 10 | 10 | 0 | 10 | 0 | 0 |
| inferred_internal_0612 | 0x800319cc | direct-call or known-entry tail target | .text | 64 | 64 | 0 | 64 | 0 | 0 |
| inferred_internal_0613 | 0x80031a6c | installed IDT gate | .text | 336 | 98 | 238 | 98 | 2 | 0 |
| inferred_internal_0614 | 0x80031ad0 | installed IDT gate | .text | 368 | 115 | 253 | 115 | 2 | 0 |
| inferred_internal_0615 | 0x80031b44 | installed IDT gate | .text | 345 | 92 | 253 | 92 | 2 | 0 |
| inferred_internal_0616 | 0x80031cf0 | direct-call or known-entry tail target | .text | 3 | 3 | 0 | 3 | 0 | 0 |
| inferred_internal_0617 | 0x80031cf4 | direct-call or known-entry tail target | .text | 17 | 17 | 0 | 17 | 0 | 0 |
| inferred_internal_0618 | 0x80031d08 | installed IDT gate | .text | 553 | 315 | 238 | 317 | 2 | 0 |
| inferred_internal_0619 | 0x80031e50 | direct-call or known-entry tail target | .text | 4 | 4 | 0 | 4 | 0 | 0 |
| inferred_internal_0620 | 0x800321f0 | direct-call or known-entry tail target | .text | 50 | 50 | 0 | 50 | 0 | 0 |
| inferred_internal_0621 | 0x80032230 | direct-call or known-entry tail target | .text | 282 | 282 | 0 | 282 | 0 | 0 |
| inferred_internal_0622 | 0x80032350 | direct-call or known-entry tail target | .text | 187 | 187 | 0 | 187 | 0 | 0 |
| inferred_internal_0623 | 0x80032410 | direct-call or known-entry tail target | .text | 2903 | 2903 | 0 | 2903 | 0 | 0 |
| inferred_internal_0624 | 0x80032f70 | direct-call or known-entry tail target | .text | 56 | 56 | 0 | 56 | 0 | 0 |
| inferred_internal_0625 | 0x8004c658 | installed IDT gate | INIT | 344 | 91 | 253 | 53 | 4 | 0 |
| inferred_internal_0626 | 0x800548a0 | direct-call or known-entry tail target | INIT | 76 | 76 | 0 | 76 | 0 | 0 |
| kernel_entry | 0x800548ec | PE entry | INIT | 53 | 53 | 0 | 53 | 0 | 0 |
| inferred_internal_0628 | 0x80054921 | direct-call or known-entry tail target | INIT | 167 | 167 | 0 | 167 | 0 | 0 |
| inferred_internal_0629 | 0x80054faa | direct-call or known-entry tail target | INIT | 41 | 41 | 0 | 41 | 0 | 0 |
| inferred_internal_0630 | 0x80054fd4 | direct-call or known-entry tail target | INIT | 237 | 172 | 65 | 172 | 0 | 0 |
| inferred_internal_0631 | 0x80055080 | direct-call or known-entry tail target | INIT | 53 | 53 | 0 | 53 | 0 | 0 |
| inferred_internal_0632 | 0x800550b5 | direct-call or known-entry tail target | INIT | 319 | 319 | 0 | 319 | 0 | 0 |
| inferred_internal_0633 | 0x80061d38 | direct-call or known-entry tail target | INIT | 142 | 142 | 0 | 93 | 0 | 0 |
| inferred_internal_0634 | 0x80061d98 | direct-call or known-entry tail target | INIT | 91 | 91 | 0 | 91 | 0 | 0 |
| inferred_internal_0635 | 0x80061df4 | direct-call or known-entry tail target | INIT | 48 | 48 | 0 | 48 | 0 | 0 |
| inferred_internal_0636 | 0x80062e24 | direct-call or known-entry tail target | INIT | 888 | 888 | 0 | 888 | 0 | 0 |
| inferred_internal_0637 | 0x8006319c | direct-call or known-entry tail target | INIT | 25 | 25 | 0 | 25 | 0 | 0 |