win32k.sys
EngBugCheckEx
EngDeleteSurface
EngAssociateSurface
EngCreateDeviceSurface
EngAllocMem
EngCreateBitmap
EngUnlockSurface
EngDeletePalette
EngLockSurface
EngFreeMem
EngCreatePalette
EngDeviceIoControl
EngCopyBits
EngStrokePath
PATHOBJ_vEnumStart
PATHOBJ_bEnum
XLATEOBJ_iXlate
EngBitBlt
PATHOBJ_vGetBounds
EngTextOut
EngGetCurrentProcessId
EngGetCurrentThreadId
CLIPOBJ_cEnumStart
CLIPOBJ_bEnum
EngQueryPerformanceCounter
EngQueryPerformanceFrequency
XLATEOBJ_cGetPalette
RtlAnsiCharToUnicodeChar
ntoskrnl.exe
ZwOpenProcessTokenEx
ZwClose
ZwQueryInformationToken
RtlSubAuthoritySid
RtlLengthRequiredSid
ExAllocatePoolWithTag
ExFreePoolWithTag
RtlCreateAcl
RtlSetDaclSecurityDescriptor
RtlInitUnicodeString
KeSetEvent
IoGetFileObjectGenericMapping
RtlAddAccessAllowedAce
MmMapViewInSystemSpace
IoCreateSynchronizationEvent
IoGetDeviceObjectPointer
RtlMapGenericMask
MmUnmapViewInSystemSpace
ObReferenceObjectByHandle
RtlInitializeSid
SeExports
ObfDereferenceObject
ZwCreateSection
KeWaitForMultipleObjects
PsGetCurrentProcessSessionId
ZwOpenSection
RtlLengthSid
RtlCreateSecurityDescriptor
ZwOpenProcess
RtlLookupElementGenericTableAvl
generic
count=69,
id=1,
productName=Unmarked objects,
count=5,
id=239,
version=40116,
count=3,
id=243,
version=40116,
count=12,
id=242,
version=40116,
count=5,
id=241,
version=40116,
count=51,
id=247,
version=40116,
count=1,
id=237,
version=40116,
count=1,
id=240,
version=40116,