w8 VfXdvThunks

а вот например в ядре w8 driver verifier состоит нынче аж из четырех таблиц:

1. VfXdvThunks
2. VfPoolThunks
3. VfMandatoryThunks
4. VfRegularThunks

Соотв-но VfXdvThunks содержит в себе следующие ф-ции (303 штуки !):

CcWaitForCurrentLazyWriterActivity
CmRegisterCallback
CmUnRegisterCallback
CmRegisterCallbackEx
DbgBreakPointWithStatus
ExAcquireRundownProtection
ExAcquireRundownProtectionCacheAware
ExAcquireRundownProtectionCacheAwareEx
ExAcquireRundownProtectionEx
ExConvertExclusiveToSharedLite
ExCreateCallback
ExEnterCriticalRegionAndAcquireSharedWaitForExclusive
ExfInterlockedCompareExchange64
ExfInterlockedInsertHeadList
ExfInterlockedInsertTailList
ExfInterlockedPopEntryList
ExfInterlockedPushEntryList
ExfInterlockedRemoveHeadList
ExGetExclusiveWaiterCount
ExGetSharedWaiterCount
ExInterlockedAddLargeInteger
ExfInterlockedInsertHeadList
ExfInterlockedInsertTailList
ExfInterlockedPopEntryList
ExfInterlockedPushEntryList
ExfInterlockedRemoveHeadList
ExIsProcessorFeaturePresent
ExIsResourceAcquiredExclusiveLite
ExIsResourceAcquiredSharedLite
ExRaiseAccessViolation
ExRaiseDatatypeMisalignment
ExRaiseStatus
ExRegisterCallback
ExReinitializeResourceLite
ExReleaseRundownProtection
ExReleaseRundownProtectionCacheAware
ExReleaseRundownProtectionEx
ExSetResourceOwnerPointer
ExSetResourceOwnerPointerEx
ExSetTimerResolution
ExUnregisterCallback
ExUuidCreate
ExWaitForRundownProtectionRelease
ExWaitForRundownProtectionReleaseCacheAware
FsRtlAllocateFileLock
FsRtlAreNamesEqual
FsRtlBalanceReads
FsRtlCancellableWaitForMultipleObjects
FsRtlCancellableWaitForSingleObject
FsRtlCheckLockForReadAccess
FsRtlCheckLockForWriteAccess
FsRtlCopyWrite
FsRtlDeregisterUncProvider
FsRtlDissectName
FsRtlDoesNameContainWildCards
FsRtlFastCheckLockForRead
FsRtlFastCheckLockForWrite
FsRtlFastUnlockAll
FsRtlFastUnlockAllByKey
FsRtlFastUnlockSingle
FsRtlFreeFileLock
FsRtlGetFileSize
FsRtlGetNextFileLock
FsRtlIncrementCcFastReadNoWait
FsRtlIncrementCcFastReadWait
FsRtlInitializeFileLock
FsRtlIsNameInExpression
FsRtlMdlReadCompleteDev
FsRtlMdlWriteCompleteDev
FsRtlNotifyFilterChangeDirectory
FsRtlNotifyFilterReportChange
FsRtlNotifyFullChangeDirectory
FsRtlNotifyFullReportChange
FsRtlPrivateLock
FsRtlProcessFileLock
FsRtlRegisterUncProvider
FsRtlRegisterUncProviderEx
FsRtlRemoveDotsFromPath
FsRtlUninitializeFileLock
FsRtlValidateReparsePointBuffer
HalExamineMBR
HalGetInterruptVector
InterlockedPopEntrySList
InterlockedPushEntrySList
IoAcquireCancelSpinLock
IoAcquireVpbSpinLock
IoAllocateController
IoAttachDevice
IoAttachDeviceToDeviceStack
IoAttachDeviceToDeviceStackSafe
IoCancelIrp
IoCheckShareAccess
IoCreateController
IoCreateFile
IoCreateNotificationEvent
IoCreateSymbolicLink
IoCreateSynchronizationEvent
IoCreateUnprotectedSymbolicLink
IoDeleteController
IoDeleteDevice
IoDeleteSymbolicLink
IoDetachDevice
IofCallDriver
IoFreeController
IoGetAttachedDeviceReference
IoGetConfigurationInformation
IoGetDeviceInterfaceAlias
IoGetDeviceInterfaces
IoGetDeviceNumaNode
IoGetDeviceObjectPointer
IoGetDeviceProperty
IoGetDevicePropertyData
IoGetDeviceToVerify
IoGetFileObjectGenericMapping
IoGetInitialStack
IoInitializeIrp
IoInvalidateDeviceRelations
IoIsWdmVersionAvailable
IoOpenDeviceInterfaceRegistryKey
IoOpenDeviceRegistryKey
IoRaiseHardError
IoRaiseInformationalHardError
IoReadPartitionTable
IoReadPartitionTableEx
IoRegisterBootDriverReinitialization
IoRegisterDeviceInterface
IoRegisterDriverReinitialization
IoRegisterLastChanceShutdownNotification
IoRegisterPlugPlayNotification
IoRegisterShutdownNotification
IoReleaseCancelSpinLock
IoReleaseVpbSpinLock
IoRemoveShareAccess
IoReplacePartitionUnit
IoReportDetectedDevice
IoReportTargetDeviceChange
IoReportTargetDeviceChangeAsynchronous
IoReuseIrp
IoSetDeviceInterfaceState
IoSetDevicePropertyData
IoSetPartitionInformation
IoSetPartitionInformationEx
IoSetShareAccess
IoSetStartIoAttributes
IoStartNextPacket
IoUnregisterPlugPlayNotification
IoUnregisterPlugPlayNotificationEx
IoUnregisterShutdownNotification
IoUpdateShareAccess
IoWMIAllocateInstanceIds
IoWritePartitionTable
IoWritePartitionTableEx
KeAcquireGuardedMutex
KeAcquireGuardedMutexUnsafe
KeAcquireInterruptSpinLock
KeAcquireQueuedSpinLock
KeAcquireSpinLockForDpc
KeAreAllApcsDisabled
KeAreApcsDisabled
KeCancelTimer
KeClearEvent
KeDeregisterNmiCallback
KeEnterGuardedRegion
KeFlushQueuedDpcs
KeInitializeDeviceQueue
KeInitializeGuardedMutex
KeInsertByKeyDeviceQueue
KeInsertDeviceQueue
KeInsertHeadQueue
KeInsertQueue
KeLeaveGuardedRegion
KePulseEvent
KeQueryActiveProcessors
KeRevertToUserAffinityThreadEx
KeSetSystemAffinityThread
KeQueryPriorityThread
KeQueryRuntimeThread
KeReadStateEvent
KeReadStateMutex
KeReadStateSemaphore
KeReadStateTimer
KeRegisterNmiCallback
KeReleaseGuardedMutex
KeReleaseGuardedMutexUnsafe
KeReleaseInterruptSpinLock
KeReleaseQueuedSpinLock
KeReleaseSemaphore
KeReleaseSpinLockForDpc
KeRemoveByKeyDeviceQueue
KeRemoveDeviceQueue
KeRemoveEntryDeviceQueue
KeRemoveQueue
KeResetEvent
KeSaveFloatingPointState
KeSetSystemGroupAffinityThread
KeSetTimer
KeSetTimerEx
KeTestSpinLock
KeTryToAcquireGuardedMutex
MmAddPhysicalMemory
MmAllocateNonCachedMemory
MmCreateMirror
MmDoesFileHaveUserWritableReferences
MmFreeNonCachedMemory
MmGetPhysicalMemoryRanges
MmLockPagableDataSection
MmLockPagableSectionByHandle
MmMapLockedPagesWithReservedMapping
MmPageEntireDriver
MmPrefetchPages
MmRemovePhysicalMemory
MmResetDriverPaging
MmSecureVirtualMemory
MmUnlockPagableImageSection
MmUnsecureVirtualMemory
NtLockFile
NtUnlockFile
ObfDereferenceObject
ObfDereferenceObjectWithTag
ObfReferenceObjectWithTag
ObGetObjectSecurity
ObReferenceObjectByHandleWithTag
ObReferenceObjectByPointerWithTag
ObReleaseObjectSecurity
PoCallDriver
PoFxActivateComponent
PoFxCompleteDevicePowerNotRequired
PoFxCompleteIdleCondition
PoFxCompleteIdleState
PoFxIdleComponent
PoFxNotifySurprisePowerOn
PoFxPowerControl
PoFxRegisterDevice
PoFxReportDevicePoweredOn
PoFxSetComponentLatency
PoFxSetComponentResidency
PoFxSetComponentWake
PoFxSetDeviceIdleTimeout
PoFxStartDevicePowerManagement
PoFxUnregisterDevice
PoRequestPowerIrp
ProbeForRead
ProbeForWrite
PsAssignImpersonationToken
PsCreateSystemThread
PsDereferenceImpersonationToken
PsDereferencePrimaryToken
PsDisableImpersonation
PsGetVersion
PsImpersonateClient
PsReferenceImpersonationToken
PsReferencePrimaryToken
PsRemoveLoadImageNotifyRoutine
PsRestoreImpersonation
PsRevertToSelf
PsSetCreateProcessNotifyRoutine
PsSetCreateProcessNotifyRoutineEx
PsSetCreateThreadNotifyRoutine
PsSetLoadImageNotifyRoutine
PsTerminateSystemThread
RtlDeleteRegistryValue
SeAccessCheck
SeAssignSecurity
SeAssignSecurityEx
SeDeassignSecurity
SeLockSubjectContext
SeReleaseSubjectContext
SeSinglePrivilegeCheck
SeUnlockSubjectContext
SeValidSecurityDescriptor
ZwAllocateLocallyUniqueId
ZwClose
ZwCommitComplete
ZwCommitTransaction
ZwCreateKeyTransacted
ZwCreateResourceManager
ZwDeleteKey
ZwEnumerateTransactionObject
ZwFlushBuffersFile
ZwFlushKey
ZwGetNotificationResourceManager
ZwLockFile
ZwMakeTemporaryObject
ZwOpenKeyEx
ZwOpenKeyTransacted
ZwOpenKeyTransactedEx
ZwOpenResourceManager
ZwPrePrepareComplete
ZwQueryInformationResourceManager
ZwQueryQuotaInformationFile
ZwReadOnlyEnlistment
ZwRecoverEnlistment
ZwRecoverTransactionManager
ZwRenameKey
ZwRollbackComplete
ZwRollbackTransaction
ZwSetInformationResourceManager
ZwSetInformationToken
ZwSetQuotaInformationFile
ZwSetTimerEx
ZwTerminateProcess
ZwUnlockFile
ZwUnmapViewOfSection