четверг, 24 февраля 2011 г.

VfOrderDependentThunks & VfPoolThunks

вдогон еще по паре таблиц под каждую версию windows

vista
VfOrderDependentThunks
ExAcquireFastMutexUnsafe
ExReleaseFastMutexUnsafe
ExiAcquireFastMutex
ExiTryToAcquireFastMutex
ExiReleaseFastMutex
KeInitializeMutex
KeInitializeMutant
KeInitializeSpinLock
KeAcquireSpinLock
KeReleaseSpinLock
KefAcquireSpinLockAtDpcLevel
KefReleaseSpinLockFromDpcLevel
KfAcquireSpinLock
KfReleaseSpinLock
KeTryToAcquireSpinLockAtDpcLevel
KeAcquireInStackQueuedSpinLock
KeAcquireInStackQueuedSpinLockRaiseToSynch
KeAcquireQueuedSpinLockRaiseToSynch
KeReleaseInStackQueuedSpinLock
KeTryToAcquireQueuedSpinLock
KeTryToAcquireQueuedSpinLockRaiseToSynch

VfPoolThunks
ExAllocatePool
ExAllocatePoolWithQuota
ExAllocatePoolWithQuotaTag
ExAllocatePoolWithTag
ExAllocatePoolWithTagPriority
ExFreePool
ExFreePoolWithTag

vista sp2
VfOrderDependentThunks
KeWaitForSingleObject
KeWaitForMultipleObjects
KeInitializeMutex
KeInitializeMutant
KeReleaseMutex
KeReleaseMutant
ExAcquireFastMutexUnsafe
ExReleaseFastMutexUnsafe
ExiAcquireFastMutex
ExiTryToAcquireFastMutex
ExiReleaseFastMutex
KeInitializeSpinLock
KeAcquireSpinLock
KeReleaseSpinLock
KefAcquireSpinLockAtDpcLevel
KefReleaseSpinLockFromDpcLevel
KfAcquireSpinLock
KfReleaseSpinLock
KeTryToAcquireSpinLockAtDpcLevel
KeAcquireInStackQueuedSpinLock
KeAcquireInStackQueuedSpinLockRaiseToSynch
KeAcquireQueuedSpinLockRaiseToSynch
KeReleaseInStackQueuedSpinLock
KeTryToAcquireQueuedSpinLock
KeTryToAcquireQueuedSpinLockRaiseToSynch

VfPoolThunks
ExAllocatePool
ExAllocatePoolWithQuota
ExAllocatePoolWithQuotaTag
ExAllocatePoolWithTag
ExAllocatePoolWithTagPriority
ExFreePool
ExFreePoolWithTag

windows 7
VfOrderDependentThunks
KeWaitForSingleObject
KeWaitForMultipleObjects
KeInitializeMutex
KeInitializeMutant
KeReleaseMutex
KeReleaseMutant
ExAcquireFastMutexUnsafe
ExReleaseFastMutexUnsafe
ExiAcquireFastMutex
ExiTryToAcquireFastMutex
ExiReleaseFastMutex
KeInitializeSpinLock
KeAcquireSpinLock
KeReleaseSpinLock
KefAcquireSpinLockAtDpcLevel
KefReleaseSpinLockFromDpcLevel
KfAcquireSpinLock
KfReleaseSpinLock
KeTryToAcquireSpinLockAtDpcLevel
KeAcquireInStackQueuedSpinLock
KeAcquireInStackQueuedSpinLockAtDpcLevel
KeAcquireInStackQueuedSpinLockForDpc
KeReleaseInStackQueuedSpinLock
KeReleaseInStackQueuedSpinLockFromDpcLevel
KeReleaseInStackQueuedSpinLockForDpc
KeAcquireInStackQueuedSpinLockRaiseToSynch
ExAcquireResourceExclusiveLite
ExEnterCriticalRegionAndAcquireResourceExclusive
ExEnterPriorityRegionAndAcquireResourceExclusive
ExAcquireResourceSharedLite
ExEnterCriticalRegionAndAcquireResourceShared
ExEnterPriorityRegionAndAcquireResourceShared
ExAcquireSharedStarveExclusive
ExAcquireSharedWaitForExclusive
ExReleaseResourceLite
ExReleaseResourceAndLeaveCriticalRegion
ExReleaseResourceAndLeavePriorityRegion
ExReleaseResourceForThreadLite
IoConnectInterrupt
IoDisconnectInterrupt
IoConnectInterruptEx
IoDisconnectInterruptEx

VfPoolThunks
ExAllocatePool
ExAllocatePoolWithQuota
ExAllocatePoolWithQuotaTag
ExAllocatePoolWithTag
ExAllocatePoolWithTagPriority
ExFreePool
ExFreePoolWithTag
IoAllocateIrp
IoAllocateMdl
IoSetCompletionRoutineEx
RtlAnsiStringToUnicodeString
RtlUnicodeStringToAnsiString
RtlUpcaseUnicodeStringToAnsiString
RtlOemStringToUnicodeString
RtlUnicodeStringToOemString
RtlUpcaseUnicodeStringToOemString
RtlOemStringToCountedUnicodeString
RtlUnicodeStringToCountedOemString
RtlUpcaseUnicodeStringToCountedOemString
RtlUpcaseUnicodeString
RtlDowncaseUnicodeString
RtlCreateUnicodeString
RtlDuplicateUnicodeString

Комментариев нет:

Отправить комментарий