Repository navigation
Retail 5838 Function Ledger
Codex edited this page Oct 10, 2026
·
1 revision
Companion: Retail-5838-BIOS-Size-and-Layout. These 638 rows are the complete output of the current rooted walk, not a claim to recover all original functions. Labels for anonymous entries are investigator identifiers only. Sizes are inferred decoded walks; address envelopes include holes, and shared bytes appear in multiple rows. Do not sum rows into image usage or claim unobserved entries are unused. Exact original compiler body boundaries are unavailable in the stripped reference.
Root evidence includes public exports, public OBJECT_TYPE callback fields, installed IDT gates, the PE entry, and discovered direct entry/tail targets. Runtime-use qualification is absent. Indirect sites and invalid decode frontiers remain explicit. Cross-function helper closure costs are not included in a public entry size.
| Entry / public API | Entry VA | Root evidence | Section | Decoded bytes | Exclusive bytes | Shared bytes | Envelope bytes | Unresolved indirect sites | Invalid decode frontiers |
|---|---|---|---|---|---|---|---|---|---|
| ExInterlockedAddLargeStatistic | 0x80012ba0 | public export | .text | 7 | 7 | 0 | 7 | 0 | 0 |
| ExfInterlockedInsertHeadList | 0x80012ba8 | public export | .text | 22 | 22 | 0 | 22 | 0 | 0 |
| ExfInterlockedInsertTailList | 0x80012bc0 | public export | .text | 23 | 23 | 0 | 23 | 0 | 0 |
| ExfInterlockedRemoveHeadList | 0x80012bd8 | public export | .text | 21 | 21 | 0 | 21 | 0 | 0 |
| InterlockedPopEntrySList | 0x80012bf0 | public export | .text | 33 | 33 | 0 | 33 | 0 | 0 |
| InterlockedPushEntrySList | 0x80012c14 | public export | .text | 31 | 31 | 0 | 31 | 0 | 0 |
| InterlockedFlushSList | 0x80012c34 | public export | .text | 33 | 33 | 0 | 33 | 0 | 0 |
| InterlockedExchange | 0x80012c58 | public export | .text | 8 | 8 | 0 | 8 | 0 | 0 |
| InterlockedIncrement | 0x80012c60 | public export | .text | 10 | 10 | 0 | 10 | 0 | 0 |
| InterlockedDecrement | 0x80012c6c | public export | .text | 10 | 10 | 0 | 10 | 0 | 0 |
| InterlockedCompareExchange | 0x80012c78 | public export | .text | 10 | 10 | 0 | 10 | 0 | 0 |
| ExInterlockedCompareExchange64 | 0x80012c84 | public export | .text | 27 | 27 | 0 | 27 | 0 | 0 |
| InterlockedExchangeAdd | 0x80012ca0 | public export | .text | 6 | 6 | 0 | 6 | 0 | 0 |
| ExAcquireReadWriteLockExclusive | 0x80012ca8 | public export | .text | 35 | 35 | 0 | 35 | 0 | 0 |
| ExAcquireReadWriteLockShared | 0x80012ccc | public export | .text | 48 | 48 | 0 | 48 | 0 | 0 |
| ExReleaseReadWriteLock | 0x80012cfc | public export | .text | 86 | 86 | 0 | 86 | 0 | 0 |
| inferred_internal_0016 | 0x80012d52 | direct-call or known-entry tail target | .text | 79 | 79 | 0 | 79 | 0 | 0 |
| ExAllocatePoolWithTag | 0x80012da1 | public OBJECT_TYPE callback; public export | .text | 439 | 439 | 0 | 439 | 0 | 0 |
| ExFreePool | 0x80012f58 | public OBJECT_TYPE callback; public export | .text | 349 | 349 | 0 | 349 | 0 | 0 |
| ExQueryPoolBlockSize | 0x800130b5 | public export | .text | 31 | 31 | 0 | 31 | 0 | 0 |
| ExAllocatePool | 0x800130d4 | public export | .text | 17 | 17 | 0 | 17 | 0 | 0 |
| NtClearEvent | 0x800130e5 | public export | .text | 49 | 49 | 0 | 49 | 0 | 0 |
| NtCreateEvent | 0x80013116 | public export | .text | 107 | 107 | 0 | 107 | 0 | 0 |
| NtPulseEvent | 0x80013181 | public export | .text | 67 | 67 | 0 | 67 | 0 | 0 |
| NtQueryEvent | 0x800131c4 | public export | .text | 60 | 60 | 0 | 60 | 0 | 0 |
| NtSetEvent | 0x80013200 | public export | .text | 67 | 67 | 0 | 67 | 0 | 0 |
| ExInitializeReadWriteLock | 0x80013243 | public export | .text | 55 | 55 | 0 | 55 | 0 | 0 |
| ExInterlockedAddLargeInteger | 0x8001327c | public export | .text | 49 | 49 | 0 | 49 | 0 | 0 |
| inferred_internal_0028 | 0x800132d3 | public OBJECT_TYPE callback | .text | 18 | 18 | 0 | 18 | 0 | 0 |
| NtCreateMutant | 0x800132e5 | public export | .text | 58 | 58 | 0 | 58 | 0 | 0 |
| NtReleaseMutant | 0x8001331f | public export | .text | 88 | 88 | 0 | 88 | 0 | 0 |
| NtQueryMutant | 0x80013399 | public export | .text | 80 | 80 | 0 | 80 | 0 | 0 |
| ExRaiseException | 0x800133ec | public export | .text | 152 | 152 | 0 | 152 | 0 | 0 |
| ExRaiseStatus | 0x80013484 | public export | .text | 178 | 178 | 0 | 178 | 0 | 0 |
| NtCreateSemaphore | 0x80013536 | public export | .text | 85 | 85 | 0 | 85 | 0 | 0 |
| NtQuerySemaphore | 0x8001358b | public export | .text | 60 | 60 | 0 | 60 | 0 | 0 |
| NtReleaseSemaphore | 0x800135c7 | public export | .text | 102 | 102 | 0 | 102 | 0 | 0 |
| inferred_internal_0037 | 0x8001367f | public OBJECT_TYPE callback | .text | 5 | 5 | 0 | 5 | 0 | 0 |
| NtCreateTimer | 0x80013684 | public export | .text | 105 | 105 | 0 | 105 | 0 | 0 |
| NtCancelTimer | 0x800136ed | public export | .text | 156 | 156 | 0 | 156 | 0 | 0 |
| NtQueryTimer | 0x80013789 | public export | .text | 100 | 100 | 0 | 100 | 0 | 0 |
| inferred_internal_0041 | 0x8001384b | direct-call or known-entry tail target | .text | 171 | 171 | 0 | 171 | 0 | 0 |
| NtSetTimerEx | 0x800138f6 | public export | .text | 366 | 366 | 0 | 366 | 0 | 0 |
| NtSetSystemTime | 0x80013a64 | public export | .text | 125 | 125 | 0 | 125 | 0 | 0 |
| HalRequestSoftwareInterrupt | 0x80013ae4 | public export | .text | 50 | 50 | 0 | 50 | 1 | 0 |
| HalClearSoftwareInterrupt | 0x80013b18 | public export | .text | 16 | 16 | 0 | 16 | 0 | 0 |
| KfRaiseIrql | 0x80013cf4 | public export | .text | 14 | 14 | 0 | 14 | 0 | 0 |
| KeRaiseIrqlToDpcLevel | 0x80013d04 | public export | .text | 15 | 15 | 0 | 15 | 0 | 0 |
| KeRaiseIrqlToSynchLevel | 0x80013d14 | public export | .text | 15 | 15 | 0 | 15 | 0 | 0 |
| KfLowerIrql | 0x80013d24 | public export | .text | 82 | 82 | 0 | 83 | 2 | 0 |
| KeGetCurrentIrql | 0x80013f60 | public export | .text | 8 | 8 | 0 | 8 | 0 | 0 |
| inferred_internal_0051 | 0x80013f98 | direct-call or known-entry tail target | .text | 48 | 48 | 0 | 48 | 0 | 0 |
| inferred_internal_0052 | 0x80013fc8 | direct-call or known-entry tail target | .text | 42 | 42 | 0 | 42 | 0 | 0 |
| inferred_internal_0053 | 0x80013ff2 | direct-call or known-entry tail target | .text | 83 | 83 | 0 | 83 | 0 | 0 |
| inferred_internal_0054 | 0x80014045 | direct-call or known-entry tail target | .text | 97 | 97 | 0 | 97 | 0 | 0 |
| inferred_internal_0055 | 0x800140a6 | direct-call or known-entry tail target | .text | 105 | 105 | 0 | 105 | 0 | 0 |
| inferred_internal_0056 | 0x8001410f | direct-call or known-entry tail target | .text | 35 | 35 | 0 | 35 | 0 | 0 |
| ExQueryNonVolatileSetting | 0x80014132 | public export | .text | 394 | 394 | 0 | 394 | 0 | 0 |
| ExSaveNonVolatileSetting | 0x800142bc | public export | .text | 478 | 478 | 0 | 478 | 0 | 0 |
| ExReadWriteRefurbInfo | 0x8001449a | public export | .text | 262 | 262 | 0 | 262 | 0 | 0 |
| inferred_internal_0060 | 0x800145a0 | direct-call or known-entry tail target | .text | 81 | 81 | 0 | 81 | 0 | 0 |
| HalReadSMBusValue | 0x800145f1 | public export | .text | 190 | 190 | 0 | 190 | 0 | 0 |
| inferred_internal_0062 | 0x800146af | direct-call or known-entry tail target | .text | 34 | 34 | 0 | 34 | 0 | 0 |
| inferred_internal_0063 | 0x800146d1 | direct-call or known-entry tail target | .text | 114 | 114 | 0 | 114 | 0 | 0 |
| HalWriteSMBusValue | 0x80014743 | public export | .text | 158 | 158 | 0 | 158 | 0 | 0 |
| inferred_internal_0065 | 0x80014814 | direct-call or known-entry tail target | .text | 107 | 107 | 0 | 107 | 0 | 0 |
| HalReadSMCTrayState | 0x80014f17 | public export | .text | 132 | 132 | 0 | 132 | 0 | 0 |
| HalIsResetOrShutdownPending | 0x80014fba | public export | .text | 11 | 11 | 0 | 11 | 0 | 0 |
| HalInitiateShutdown | 0x80014fc5 | public export | .text | 113 | 113 | 0 | 25278 | 0 | 0 |
| HalWriteSMCScratchRegister | 0x80014ff3 | public export | .text | 24 | 24 | 0 | 24 | 0 | 0 |
| HalEnableSecureTrayEject | 0x8001500b | public export | .text | 34 | 34 | 0 | 34 | 0 | 0 |
| inferred_internal_0071 | 0x80015070 | direct-call or known-entry tail target | .text | 7 | 7 | 0 | 7 | 1 | 0 |
| inferred_internal_0072 | 0x800150a4 | direct-call or known-entry tail target | .text | 191 | 45 | 146 | 92 | 0 | 0 |
| inferred_internal_0073 | 0x80015128 | direct-call or known-entry tail target | .text | 179 | 33 | 146 | 33 | 0 | 0 |
| HalDisableSystemInterrupt | 0x8001514c | public export | .text | 43 | 43 | 0 | 43 | 0 | 0 |
| HalEnableSystemInterrupt | 0x80015178 | public export | .text | 96 | 96 | 0 | 96 | 0 | 0 |
| HalGetInterruptVector | 0x800151d8 | public export | .text | 34 | 34 | 0 | 34 | 0 | 0 |
| HalReadWritePCISpace | 0x8001530c | public export | .text | 117 | 117 | 0 | 117 | 1 | 0 |
| inferred_internal_0078 | 0x80015381 | direct-call or known-entry tail target | .text | 2 | 2 | 0 | 2 | 0 | 0 |
| HalRegisterShutdownNotification | 0x80015385 | public export | .text | 135 | 135 | 0 | 135 | 0 | 0 |
| inferred_internal_0080 | 0x8001540c | direct-call or known-entry tail target | .text | 31 | 31 | 0 | 31 | 0 | 0 |
| HalReturnToFirmware | 0x8001542d | public export | .text | 123 | 123 | 0 | 123 | 1 | 0 |
| KeQueryPerformanceCounter | 0x800154a8 | public export | .text | 59 | 59 | 0 | 59 | 0 | 0 |
| KeQueryPerformanceFrequency | 0x800154e4 | public export | .text | 8 | 8 | 0 | 8 | 0 | 0 |
| inferred_internal_0084 | 0x800154ec | direct-call or known-entry tail target | .text | 58 | 58 | 0 | 58 | 0 | 0 |
| KeStallExecutionProcessor | 0x80015530 | public export | .text | 42 | 42 | 0 | 56 | 0 | 0 |
| READ_PORT_BUFFER_UCHAR | 0x80015568 | public export | .text | 21 | 21 | 0 | 21 | 0 | 0 |
| READ_PORT_BUFFER_USHORT | 0x80015580 | public export | .text | 22 | 22 | 0 | 22 | 0 | 0 |
| READ_PORT_BUFFER_ULONG | 0x80015598 | public export | .text | 21 | 21 | 0 | 21 | 0 | 0 |
| WRITE_PORT_BUFFER_UCHAR | 0x800155b0 | public export | .text | 21 | 21 | 0 | 21 | 0 | 0 |
| WRITE_PORT_BUFFER_USHORT | 0x800155c8 | public export | .text | 22 | 22 | 0 | 22 | 0 | 0 |
| WRITE_PORT_BUFFER_ULONG | 0x800155e0 | public export | .text | 21 | 21 | 0 | 21 | 0 | 0 |
| inferred_internal_0092 | 0x80015710 | direct-call or known-entry tail target | .text | 275 | 275 | 0 | 276 | 0 | 0 |
| inferred_internal_0093 | 0x80015864 | direct-call or known-entry tail target | .text | 20 | 20 | 0 | 20 | 0 | 0 |
| inferred_internal_0094 | 0x80015878 | direct-call or known-entry tail target | .text | 38 | 38 | 0 | 38 | 0 | 0 |
| inferred_internal_0095 | 0x800158a0 | direct-call or known-entry tail target | .text | 9 | 9 | 0 | 9 | 0 | 0 |
| inferred_internal_0096 | 0x800158ac | direct-call or known-entry tail target | .text | 8 | 8 | 0 | 8 | 0 | 0 |
| inferred_internal_0097 | 0x800158b4 | direct-call or known-entry tail target | .text | 75 | 75 | 0 | 75 | 0 | 0 |
| IoAllocateIrp | 0x80015a77 | public export | .text | 114 | 114 | 0 | 114 | 0 | 0 |
| IofCallDriver | 0x80015ae9 | public export | .text | 51 | 51 | 0 | 51 | 1 | 0 |
| inferred_internal_0100 | 0x80015b1c | direct-call or known-entry tail target | .text | 107 | 107 | 0 | 107 | 0 | 0 |
| IoCheckShareAccess | 0x80015b87 | public export | .text | 301 | 301 | 0 | 301 | 0 | 0 |
| IoCreateDevice | 0x80015cb4 | public export | .text | 368 | 368 | 0 | 368 | 0 | 0 |
| IoCreateFile | 0x80015e24 | public export | .text | 410 | 410 | 0 | 410 | 0 | 0 |
| IoCreateSymbolicLink | 0x80015fbe | public export | .text | 61 | 61 | 0 | 61 | 0 | 0 |
| IoDeleteDevice | 0x80015ffb | public export | .text | 60 | 60 | 0 | 60 | 0 | 0 |
| IoDeleteSymbolicLink | 0x80016037 | public export | .text | 72 | 72 | 0 | 72 | 0 | 0 |
| IoDismountVolume | 0x8001607f | public export | .text | 81 | 81 | 0 | 81 | 1 | 0 |
| IoDismountVolumeByName | 0x800160d0 | public export | .text | 56 | 56 | 0 | 56 | 0 | 0 |
| IoFreeIrp | 0x80016108 | public export | .text | 40 | 40 | 0 | 40 | 0 | 0 |
| IoInitializeIrp | 0x80016130 | public export | .text | 83 | 83 | 0 | 83 | 0 | 0 |
| inferred_internal_0111 | 0x80016183 | direct-call or known-entry tail target | .text | 39 | 39 | 0 | 39 | 0 | 0 |
| IoMarkIrpMustComplete | 0x800161aa | public export | .text | 28 | 28 | 0 | 28 | 0 | 0 |
| IoQueryFileInformation | 0x800161c6 | public export | .text | 29 | 29 | 0 | 29 | 0 | 0 |
| IoQueryVolumeInformation | 0x800161e3 | public export | .text | 29 | 29 | 0 | 29 | 0 | 0 |
| IoQueueThreadIrp | 0x80016200 | public export | .text | 51 | 51 | 0 | 51 | 0 | 0 |
| IoRemoveShareAccess | 0x80016233 | public export | .text | 73 | 73 | 0 | 73 | 0 | 0 |
| IoSetShareAccess | 0x8001627c | public export | .text | 206 | 206 | 0 | 206 | 0 | 0 |
| inferred_internal_0118 | 0x8001634a | direct-call or known-entry tail target | .text | 47 | 47 | 0 | 47 | 1 | 0 |
| inferred_internal_0119 | 0x80016379 | direct-call or known-entry tail target | .text | 51 | 51 | 0 | 51 | 1 | 0 |
| inferred_internal_0120 | 0x800163ac | direct-call or known-entry tail target | .text | 42 | 42 | 0 | 42 | 0 | 0 |
| IoStartNextPacket | 0x800163d6 | public export | .text | 43 | 43 | 0 | 43 | 0 | 0 |
| IoStartNextPacketByKey | 0x80016401 | public export | .text | 52 | 52 | 0 | 52 | 0 | 0 |
| IoStartPacket | 0x80016435 | public export | .text | 104 | 104 | 0 | 104 | 1 | 0 |
| IoBuildAsynchronousFsdRequest | 0x8001649d | public export | .text | 113 | 113 | 0 | 113 | 0 | 0 |
| IoBuildDeviceIoControlRequest | 0x8001650e | public export | .text | 168 | 168 | 0 | 168 | 0 | 0 |
| IoBuildSynchronousFsdRequest | 0x800165b6 | public export | .text | 88 | 88 | 0 | 88 | 0 | 0 |
| IofCompleteRequest | 0x8001660e | public export | .text | 490 | 490 | 0 | 490 | 1 | 0 |
| IoInvalidDeviceRequest | 0x800167f8 | public export | .text | 26 | 26 | 0 | 26 | 0 | 0 |
| IoSynchronousDeviceIoControlRequest | 0x80016812 | public export | .text | 123 | 123 | 0 | 123 | 0 | 0 |
| IoSynchronousFsdRequest | 0x8001688d | public export | .text | 105 | 105 | 0 | 105 | 0 | 0 |
| NtCreateIoCompletion | 0x800168f6 | public export | .text | 72 | 72 | 0 | 72 | 0 | 0 |
| NtQueryIoCompletion | 0x8001693e | public export | .text | 52 | 52 | 0 | 52 | 0 | 0 |
| NtRemoveIoCompletion | 0x80016972 | public export | .text | 167 | 167 | 0 | 167 | 0 | 0 |
| IoSetIoCompletion | 0x80016a19 | public export | .text | 72 | 72 | 0 | 72 | 0 | 0 |
| inferred_internal_0135 | 0x80016a61 | public OBJECT_TYPE callback | .text | 55 | 55 | 0 | 55 | 0 | 0 |
| NtSetIoCompletion | 0x80016a98 | public export | .text | 64 | 64 | 0 | 64 | 0 | 0 |
| NtCreateFile | 0x80016ad8 | public export | .text | 41 | 41 | 0 | 41 | 0 | 0 |
| NtOpenFile | 0x80016b01 | public export | .text | 37 | 37 | 0 | 37 | 0 | 0 |
| NtDeleteFile | 0x80016b26 | public export | .text | 110 | 110 | 0 | 110 | 0 | 0 |
| NtQueryFullAttributesFile | 0x80016b94 | public export | .text | 109 | 109 | 0 | 109 | 0 | 0 |
| NtUserIoApcDispatcher | 0x80016c01 | public export | .text | 46 | 46 | 0 | 46 | 1 | 0 |
| NtFlushBuffersFile | 0x80016c2f | public export | .text | 221 | 221 | 0 | 221 | 0 | 0 |
| NtDeviceIoControlFile | 0x80016d0c | public export | .text | 44 | 44 | 0 | 44 | 0 | 0 |
| NtFsControlFile | 0x80016d38 | public export | .text | 44 | 44 | 0 | 44 | 0 | 0 |
| NtQueryDirectoryFile | 0x80016d64 | public export | .text | 281 | 281 | 0 | 281 | 0 | 0 |
| inferred_internal_0146 | 0x80016e7d | direct-call or known-entry tail target | .text | 46 | 46 | 0 | 46 | 0 | 0 |
| NtQueryInformationFile | 0x80016eab | public export | .text | 571 | 571 | 0 | 571 | 0 | 0 |
| NtSetInformationFile | 0x800170e6 | public export | .text | 948 | 948 | 0 | 948 | 0 | 0 |
| NtQueryVolumeInformationFile | 0x8001749a | public export | .text | 332 | 332 | 0 | 332 | 0 | 0 |
| NtReadFile | 0x800175e6 | public export | .text | 460 | 460 | 0 | 460 | 0 | 0 |
| NtReadFileScatter | 0x800177b2 | public export | .text | 501 | 501 | 0 | 501 | 0 | 0 |
| NtWriteFile | 0x800179a7 | public export | .text | 482 | 482 | 0 | 482 | 0 | 0 |
| NtWriteFileGather | 0x80017b89 | public export | .text | 523 | 523 | 0 | 523 | 0 | 0 |
| inferred_internal_0154 | 0x80017d94 | direct-call or known-entry tail target | .text | 47 | 47 | 0 | 47 | 0 | 0 |
| inferred_internal_0155 | 0x80017dc3 | direct-call or known-entry tail target | .text | 47 | 47 | 0 | 47 | 0 | 0 |
| inferred_internal_0156 | 0x80017df2 | direct-call or known-entry tail target | .text | 46 | 46 | 0 | 46 | 1 | 0 |
| inferred_internal_0157 | 0x80017e20 | direct-call or known-entry tail target | .text | 62 | 62 | 0 | 62 | 0 | 0 |
| inferred_internal_0158 | 0x80017e5e | direct-call or known-entry tail target | .text | 51 | 51 | 0 | 51 | 0 | 0 |
| inferred_internal_0159 | 0x80017e91 | direct-call or known-entry tail target | .text | 48 | 48 | 0 | 48 | 0 | 0 |
| inferred_internal_0160 | 0x80017ec1 | direct-call or known-entry tail target | .text | 171 | 171 | 0 | 171 | 0 | 0 |
| inferred_internal_0161 | 0x80017f6c | direct-call or known-entry tail target | .text | 51 | 51 | 0 | 51 | 0 | 0 |
| inferred_internal_0162 | 0x80017fbf | direct-call or known-entry tail target | .text | 469 | 469 | 0 | 469 | 0 | 0 |
| inferred_internal_0163 | 0x80018194 | direct-call or known-entry tail target | .text | 104 | 104 | 0 | 104 | 0 | 0 |
| inferred_internal_0164 | 0x800181fc | direct-call or known-entry tail target | .text | 315 | 315 | 0 | 315 | 0 | 0 |
| inferred_internal_0165 | 0x80018337 | direct-call or known-entry tail target | .text | 164 | 164 | 0 | 164 | 0 | 0 |
| inferred_internal_0166 | 0x800183db | direct-call or known-entry tail target | .text | 324 | 324 | 0 | 324 | 0 | 0 |
| inferred_internal_0167 | 0x8001851f | direct-call or known-entry tail target | .text | 122 | 122 | 0 | 122 | 0 | 0 |
| inferred_internal_0168 | 0x80018599 | public OBJECT_TYPE callback | .text | 1054 | 1054 | 0 | 1054 | 0 | 0 |
| inferred_internal_0169 | 0x800189b7 | public OBJECT_TYPE callback | .text | 64 | 64 | 0 | 64 | 0 | 0 |
| inferred_internal_0170 | 0x800189f7 | public OBJECT_TYPE callback | .text | 254 | 254 | 0 | 254 | 0 | 0 |
| inferred_internal_0171 | 0x80018af5 | public OBJECT_TYPE callback | .text | 275 | 275 | 0 | 275 | 0 | 0 |
| inferred_internal_0172 | 0x80018c08 | direct-call or known-entry tail target | .text | 22 | 22 | 0 | 22 | 0 | 0 |
| inferred_internal_0173 | 0x80018c20 | direct-call or known-entry tail target | .text | 20 | 20 | 0 | 20 | 0 | 0 |
| inferred_internal_0174 | 0x80018cd9 | direct-call or known-entry tail target | .text | 53 | 53 | 0 | 53 | 0 | 0 |
| KiUnlockDispatcherDatabase | 0x80018d10 | public export | .text | 148 | 148 | 0 | 148 | 0 | 0 |
| inferred_internal_0176 | 0x80018da4 | direct-call or known-entry tail target | .text | 237 | 237 | 0 | 238 | 0 | 0 |
| inferred_internal_0177 | 0x80018f30 | direct-call or known-entry tail target | .text | 119 | 119 | 0 | 119 | 0 | 0 |
| inferred_internal_0178 | 0x80018fa8 | direct-call or known-entry tail target | .text | 7 | 7 | 0 | 7 | 0 | 0 |
| inferred_internal_0179 | 0x80018fb0 | direct-call or known-entry tail target | .text | 11 | 11 | 0 | 11 | 0 | 0 |
| inferred_internal_0180 | 0x80018fbb | direct-call or known-entry tail target | .text | 249 | 249 | 0 | 249 | 0 | 0 |
| KeAlertThread | 0x800190b4 | public export | .text | 81 | 81 | 0 | 81 | 0 | 0 |
| KeAlertResumeThread | 0x80019105 | public export | .text | 103 | 103 | 0 | 103 | 0 | 0 |
| KeBoostPriorityThread | 0x8001916c | public export | .text | 73 | 73 | 0 | 73 | 0 | 0 |
| inferred_internal_0184 | 0x800191b5 | direct-call or known-entry tail target | .text | 30 | 30 | 0 | 30 | 0 | 0 |
| inferred_internal_0185 | 0x800191d3 | direct-call or known-entry tail target | .text | 30 | 30 | 0 | 30 | 0 | 0 |
| inferred_internal_0186 | 0x800191f1 | direct-call or known-entry tail target | .text | 58 | 58 | 0 | 58 | 0 | 0 |
| KeQueryBasePriorityThread | 0x8001922b | public export | .text | 49 | 49 | 0 | 49 | 0 | 0 |
| inferred_internal_0188 | 0x8001925c | direct-call or known-entry tail target | .text | 28 | 28 | 0 | 28 | 0 | 0 |
| KeResumeThread | 0x80019278 | public export | .text | 63 | 63 | 0 | 63 | 0 | 0 |
| KeSetBasePriorityThread | 0x800192b7 | public export | .text | 206 | 206 | 0 | 206 | 0 | 0 |
| KeSetDisableBoostThread | 0x80019385 | public export | .text | 34 | 34 | 0 | 34 | 0 | 0 |
| KeSetPriorityThread | 0x800193a7 | public export | .text | 57 | 57 | 0 | 57 | 0 | 0 |
| KeSuspendThread | 0x800193e0 | public export | .text | 91 | 91 | 0 | 91 | 0 | 0 |
| inferred_internal_0194 | 0x8001943b | direct-call or known-entry tail target | .text | 154 | 154 | 0 | 154 | 0 | 0 |
| KeTestAlertThread | 0x800194d5 | public export | .text | 66 | 66 | 0 | 66 | 0 | 0 |
| inferred_internal_0196 | 0x80019517 | direct-call or known-entry tail target | .text | 85 | 85 | 0 | 85 | 0 | 0 |
| inferred_internal_0197 | 0x8001956c | direct-call or known-entry tail target | .text | 42 | 42 | 0 | 42 | 0 | 0 |
| KeBugCheckEx | 0x800195b2 | public export | .text | 110 | 110 | 0 | 110 | 0 | 0 |
| KeBugCheck | 0x80019620 | public export | .text | 16 | 16 | 0 | 16 | 0 | 0 |
| KeInitializeTimerEx | 0x80019630 | public export | .text | 45 | 45 | 0 | 45 | 0 | 0 |
| KeCancelTimer | 0x8001965d | public export | .text | 47 | 47 | 0 | 47 | 0 | 0 |
| KeSetTimerEx | 0x8001968c | public export | .text | 186 | 186 | 0 | 186 | 0 | 0 |
| KeSetTimer | 0x80019746 | public export | .text | 26 | 26 | 0 | 26 | 0 | 0 |
| KeConnectInterrupt | 0x80019760 | public export | .text | 128 | 128 | 0 | 128 | 0 | 0 |
| KeDisconnectInterrupt | 0x800197e0 | public export | .text | 104 | 104 | 0 | 104 | 0 | 0 |
| inferred_internal_0206 | 0x80019848 | direct-call or known-entry tail target | .text | 131 | 131 | 0 | 131 | 0 | 0 |
| KeInitializeInterrupt | 0x800198cb | public export | .text | 121 | 121 | 0 | 121 | 0 | 0 |
| inferred_internal_0208 | 0x80019944 | direct-call or known-entry tail target | .text | 89 | 89 | 0 | 89 | 0 | 0 |
| inferred_internal_0209 | 0x8001999d | direct-call or known-entry tail target | .text | 106 | 106 | 0 | 106 | 0 | 0 |
| KeDelayExecutionThread | 0x80019a07 | public export | .text | 465 | 465 | 0 | 465 | 0 | 0 |
| KeWaitForMultipleObjects | 0x80019bd8 | public export | .text | 769 | 769 | 0 | 769 | 0 | 0 |
| KeWaitForSingleObject | 0x80019ed9 | public export | .text | 619 | 619 | 0 | 619 | 0 | 0 |
| KeQueryInterruptTime | 0x8001a144 | public export | .text | 24 | 24 | 0 | 24 | 0 | 0 |
| KeQuerySystemTime | 0x8001a15c | public export | .text | 35 | 35 | 0 | 35 | 0 | 0 |
| inferred_internal_0215 | 0x8001a17f | direct-call or known-entry tail target | .text | 346 | 346 | 0 | 346 | 0 | 0 |
| KeEnterCriticalRegion | 0x8001a2d9 | public export | .text | 9 | 9 | 0 | 9 | 0 | 0 |
| KeLeaveCriticalRegion | 0x8001a2e2 | public export | .text | 33 | 33 | 0 | 33 | 0 | 0 |
| KeGetCurrentThread | 0x8001a314 | public export | .text | 6 | 6 | 0 | 6 | 0 | 0 |
| KeIsExecutingDpc | 0x8001a31c | public export | .text | 6 | 6 | 0 | 6 | 0 | 0 |
| KeInitializeApc | 0x8001a322 | public export | .text | 68 | 68 | 0 | 68 | 0 | 0 |
| inferred_internal_0221 | 0x8001a366 | direct-call or known-entry tail target | .text | 67 | 67 | 0 | 67 | 0 | 0 |
| KeInsertQueueApc | 0x8001a3a9 | public export | .text | 63 | 63 | 0 | 63 | 0 | 0 |
| inferred_internal_0223 | 0x8001a3e8 | direct-call or known-entry tail target | .text | 91 | 91 | 0 | 91 | 0 | 0 |
| KeInitializeDeviceQueue | 0x8001a443 | public export | .text | 28 | 28 | 0 | 28 | 0 | 0 |
| KeInsertDeviceQueue | 0x8001a45f | public export | .text | 46 | 46 | 0 | 46 | 0 | 0 |
| KeInsertByKeyDeviceQueue | 0x8001a48d | public export | .text | 72 | 72 | 0 | 72 | 0 | 0 |
| KeRemoveDeviceQueue | 0x8001a4d5 | public export | .text | 37 | 37 | 0 | 37 | 0 | 0 |
| KeRemoveByKeyDeviceQueue | 0x8001a4fa | public export | .text | 79 | 79 | 0 | 79 | 0 | 0 |
| KeRemoveEntryDeviceQueue | 0x8001a549 | public export | .text | 47 | 47 | 0 | 47 | 0 | 0 |
| KeInitializeDpc | 0x8001a578 | public export | .text | 30 | 30 | 0 | 30 | 0 | 0 |
| KeRemoveQueueDpc | 0x8001a596 | public export | .text | 33 | 33 | 0 | 33 | 0 | 0 |
| KeInsertQueueDpc | 0x8001a5b7 | public export | .text | 120 | 120 | 0 | 120 | 0 | 0 |
| KeInitializeEvent | 0x8001a62f | public export | .text | 33 | 33 | 0 | 33 | 0 | 0 |
| KeResetEvent | 0x8001a650 | public export | .text | 30 | 30 | 0 | 30 | 0 | 0 |
| KeSetEventBoostPriority | 0x8001a66e | public export | .text | 72 | 72 | 0 | 72 | 0 | 0 |
| KePulseEvent | 0x8001a6b6 | public export | .text | 86 | 86 | 0 | 86 | 0 | 0 |
| KeSetEvent | 0x8001a70c | public export | .text | 119 | 119 | 0 | 119 | 0 | 0 |
| KeInitializeMutant | 0x8001a783 | public export | .text | 93 | 93 | 0 | 93 | 0 | 0 |
| KeReleaseMutant | 0x8001a7e0 | public export | .text | 165 | 165 | 0 | 165 | 0 | 0 |
| KeInitializeQueue | 0x8001a885 | public export | .text | 66 | 66 | 0 | 66 | 0 | 0 |
| KeRundownQueue | 0x8001a8c7 | public export | .text | 73 | 73 | 0 | 73 | 0 | 0 |
| inferred_internal_0242 | 0x8001a910 | direct-call or known-entry tail target | .text | 61 | 61 | 0 | 61 | 0 | 0 |
| KeRemoveQueue | 0x8001a94d | public export | .text | 456 | 456 | 0 | 456 | 0 | 0 |
| inferred_internal_0244 | 0x8001ab15 | direct-call or known-entry tail target | .text | 162 | 162 | 0 | 162 | 0 | 0 |
| KeInsertQueue | 0x8001abb7 | public export | .text | 40 | 40 | 0 | 40 | 0 | 0 |
| KeInsertHeadQueue | 0x8001abdf | public export | .text | 40 | 40 | 0 | 40 | 0 | 0 |
| KeInitializeSemaphore | 0x8001ac07 | public export | .text | 36 | 36 | 0 | 36 | 0 | 0 |
| KeReleaseSemaphore | 0x8001ac2b | public export | .text | 117 | 117 | 0 | 117 | 0 | 0 |
| KeSaveFloatingPointState | 0x8001aca0 | public export | .text | 336 | 336 | 0 | 336 | 0 | 0 |
| KeRestoreFloatingPointState | 0x8001adf0 | public export | .text | 268 | 268 | 0 | 268 | 0 | 0 |
| inferred_internal_0251 | 0x8001aefc | direct-call or known-entry tail target | .text | 34 | 34 | 0 | 34 | 0 | 0 |
| KeSetPriorityProcess | 0x8001af1e | public export | .text | 250 | 250 | 0 | 250 | 0 | 0 |
| KeSynchronizeExecution | 0x8001b020 | public export | .text | 45 | 45 | 0 | 45 | 1 | 0 |
| NtYieldExecution | 0x8001b0e3 | public export | .text | 166 | 166 | 0 | 166 | 0 | 0 |
| inferred_internal_0255 | 0x8001b18c | direct-call or known-entry tail target | .text | 207 | 142 | 65 | 207 | 0 | 0 |
| inferred_internal_0256 | 0x8001b283 | direct-call or known-entry tail target | .text | 66 | 66 | 0 | 66 | 1 | 0 |
| inferred_internal_0257 | 0x8001b2da | installed IDT gate | .text | 318 | 10 | 308 | 595 | 2 | 0 |
| inferred_internal_0258 | 0x8001b2e4 | installed IDT gate | .text | 318 | 10 | 308 | 585 | 2 | 0 |
| inferred_internal_0259 | 0x8001b2f8 | installed IDT gate | .text | 318 | 10 | 308 | 565 | 2 | 0 |
| inferred_internal_0260 | 0x8001b302 | installed IDT gate | .text | 318 | 10 | 308 | 555 | 2 | 0 |
| inferred_internal_0261 | 0x8001b30c | installed IDT gate | .text | 318 | 10 | 308 | 545 | 2 | 0 |
| inferred_internal_0262 | 0x8001b316 | installed IDT gate | .text | 318 | 10 | 308 | 535 | 2 | 0 |
| inferred_internal_0263 | 0x8001b32a | installed IDT gate | .text | 318 | 10 | 308 | 515 | 2 | 0 |
| inferred_internal_0264 | 0x8001b334 | installed IDT gate | .text | 318 | 10 | 308 | 505 | 2 | 0 |
| inferred_internal_0265 | 0x8001b352 | installed IDT gate | .text | 318 | 10 | 308 | 475 | 2 | 0 |
| inferred_internal_0266 | 0x8001b366 | installed IDT gate | .text | 318 | 10 | 308 | 455 | 2 | 0 |
| inferred_internal_0267 | 0x8001b370 | installed IDT gate | .text | 48 | 48 | 0 | 48 | 0 | 0 |
| inferred_internal_0268 | 0x8001b3a0 | installed IDT gate | .text | 118 | 37 | 81 | 118 | 0 | 0 |
| inferred_internal_0269 | 0x8001b54c | direct-call or known-entry tail target | .text | 164 | 61 | 103 | 61 | 0 | 0 |
| inferred_internal_0270 | 0x8001b58c | installed IDT gate | .text | 75 | 44 | 31 | 44 | 0 | 0 |
| inferred_internal_0271 | 0x8001b5b8 | installed IDT gate | .text | 80 | 49 | 31 | 49 | 0 | 0 |
| inferred_internal_0272 | 0x8001b614 | installed IDT gate | .text | 70 | 43 | 27 | 112 | 0 | 0 |
| inferred_internal_0273 | 0x8001b640 | installed IDT gate | .text | 68 | 41 | 27 | 68 | 0 | 0 |
| inferred_internal_0274 | 0x8001b684 | installed IDT gate | .text | 75 | 44 | 31 | 44 | 0 | 0 |
| inferred_internal_0275 | 0x8001b6b0 | installed IDT gate | .text | 74 | 43 | 31 | 43 | 0 | 0 |
| inferred_internal_0276 | 0x8001b6dc | installed IDT gate | .text | 74 | 43 | 31 | 43 | 0 | 0 |
| inferred_internal_0277 | 0x8001b708 | installed IDT gate | .text | 510 | 137 | 373 | 394 | 0 | 0 |
| inferred_internal_0278 | 0x8001b894 | installed IDT gate | .text | 55 | 40 | 15 | 843 | 0 | 0 |
| inferred_internal_0279 | 0x8001b8bc | installed IDT gate | .text | 53 | 38 | 15 | 803 | 0 | 0 |
| inferred_internal_0280 | 0x8001b8e4 | installed IDT gate | .text | 56 | 44 | 12 | 44 | 0 | 0 |
| inferred_internal_0281 | 0x8001b910 | installed IDT gate | .text | 340 | 227 | 113 | 227 | 0 | 0 |
| inferred_internal_0282 | 0x8001b9f4 | installed IDT gate | .text | 55 | 40 | 15 | 491 | 0 | 0 |
| inferred_internal_0283 | 0x8001ba1c | installed IDT gate | .text | 450 | 77 | 373 | 66 | 0 | 0 |
| inferred_internal_0284 | 0x8001ba60 | installed IDT gate | .text | 53 | 38 | 15 | 383 | 0 | 0 |
| inferred_internal_0285 | 0x8001ba88 | installed IDT gate | .text | 276 | 252 | 24 | 252 | 0 | 0 |
| inferred_internal_0286 | 0x8001bb84 | direct-call or known-entry tail target | .text | 67 | 67 | 0 | 67 | 0 | 0 |
| inferred_internal_0287 | 0x8001bbc8 | direct-call or known-entry tail target | .text | 8 | 8 | 0 | 8 | 0 | 0 |
| inferred_internal_0288 | 0x8001bbe0 | direct-call or known-entry tail target | .text | 235 | 51 | 184 | 51 | 0 | 0 |
| inferred_internal_0289 | 0x8001bc14 | direct-call or known-entry tail target | .text | 13 | 13 | 0 | 13 | 0 | 0 |
| inferred_internal_0290 | 0x8001bc24 | direct-call or known-entry tail target | .text | 145 | 42 | 103 | 42 | 0 | 0 |
| inferred_internal_0291 | 0x8001bc50 | direct-call or known-entry tail target | .text | 17 | 17 | 0 | 17 | 0 | 0 |
| inferred_internal_0292 | 0x8001bc61 | direct-call or known-entry tail target | .text | 204 | 204 | 0 | 204 | 0 | 0 |
| inferred_internal_0293 | 0x8001bd2d | direct-call or known-entry tail target | .text | 238 | 238 | 0 | 238 | 3 | 0 |
| inferred_internal_0294 | 0x8001be1b | direct-call or known-entry tail target | .text | 146 | 146 | 0 | 146 | 2 | 0 |
| inferred_internal_0295 | 0x8001bed0 | direct-call or known-entry tail target | .text | 136 | 136 | 0 | 136 | 0 | 0 |
| inferred_internal_0296 | 0x8001bf58 | direct-call or known-entry tail target | .text | 187 | 187 | 0 | 187 | 0 | 0 |
| inferred_internal_0297 | 0x8001c013 | direct-call or known-entry tail target | .text | 190 | 190 | 0 | 190 | 0 | 0 |
| inferred_internal_0298 | 0x8001c0eb | direct-call or known-entry tail target | .text | 187 | 187 | 0 | 187 | 0 | 0 |
| inferred_internal_0299 | 0x8001c1a6 | direct-call or known-entry tail target | .text | 125 | 125 | 0 | 125 | 0 | 0 |
| inferred_internal_0300 | 0x8001c223 | direct-call or known-entry tail target | .text | 218 | 218 | 0 | 218 | 0 | 0 |
| inferred_internal_0301 | 0x8001c2fd | direct-call or known-entry tail target | .text | 271 | 271 | 0 | 271 | 1 | 0 |
| inferred_internal_0302 | 0x8001c536 | direct-call or known-entry tail target | .text | 133 | 133 | 0 | 133 | 0 | 0 |
| inferred_internal_0303 | 0x8001c5bb | direct-call or known-entry tail target | .text | 176 | 176 | 0 | 176 | 0 | 0 |
| inferred_internal_0304 | 0x8001c66b | direct-call or known-entry tail target | .text | 128 | 128 | 0 | 128 | 0 | 0 |
| inferred_internal_0305 | 0x8001c6eb | direct-call or known-entry tail target | .text | 93 | 93 | 0 | 93 | 0 | 0 |
| inferred_internal_0306 | 0x8001c748 | direct-call or known-entry tail target | .text | 74 | 74 | 0 | 74 | 0 | 0 |
| inferred_internal_0307 | 0x8001c792 | direct-call or known-entry tail target | .text | 80 | 80 | 0 | 80 | 0 | 0 |
| inferred_internal_0308 | 0x8001c7e2 | direct-call or known-entry tail target | .text | 51 | 51 | 0 | 51 | 0 | 0 |
| inferred_internal_0309 | 0x8001c815 | direct-call or known-entry tail target | .text | 292 | 292 | 0 | 292 | 0 | 0 |
| inferred_internal_0310 | 0x8001c948 | direct-call or known-entry tail target | .text | 23 | 23 | 0 | 23 | 0 | 0 |
| inferred_internal_0311 | 0x8001c95f | direct-call or known-entry tail target | .text | 59 | 59 | 0 | 59 | 0 | 0 |
| inferred_internal_0312 | 0x8001c99a | direct-call or known-entry tail target | .text | 218 | 218 | 0 | 218 | 0 | 0 |
| inferred_internal_0313 | 0x8001ca74 | direct-call or known-entry tail target | .text | 203 | 203 | 0 | 203 | 0 | 0 |
| inferred_internal_0314 | 0x8001cb3f | direct-call or known-entry tail target | .text | 176 | 176 | 0 | 176 | 2 | 0 |
| inferred_internal_0315 | 0x8001cbef | direct-call or known-entry tail target | .text | 45 | 45 | 0 | 45 | 0 | 0 |
| inferred_internal_0316 | 0x8001cc1c | direct-call or known-entry tail target | .text | 60 | 60 | 0 | 60 | 0 | 0 |
| inferred_internal_0317 | 0x8001cc58 | direct-call or known-entry tail target | .text | 462 | 462 | 0 | 469 | 0 | 0 |
| inferred_internal_0318 | 0x8001ce64 | direct-call or known-entry tail target | .text | 136 | 136 | 0 | 136 | 0 | 0 |
| inferred_internal_0319 | 0x8001ceec | direct-call or known-entry tail target | .text | 71 | 71 | 0 | 71 | 0 | 0 |
| inferred_internal_0320 | 0x8001cf33 | direct-call or known-entry tail target | .text | 91 | 91 | 0 | 91 | 0 | 0 |
| inferred_internal_0321 | 0x8001cf8e | direct-call or known-entry tail target | .text | 244 | 244 | 0 | 244 | 0 | 0 |
| FscGetCacheSize | 0x8001d082 | public export | .text | 6 | 6 | 0 | 6 | 0 | 0 |
| inferred_internal_0323 | 0x8001d088 | direct-call or known-entry tail target | .text | 88 | 88 | 0 | 88 | 0 | 0 |
| inferred_internal_0324 | 0x8001d0e0 | direct-call or known-entry tail target | .text | 51 | 51 | 0 | 51 | 0 | 0 |
| inferred_internal_0325 | 0x8001d196 | direct-call or known-entry tail target | .text | 141 | 141 | 0 | 141 | 0 | 0 |
| inferred_internal_0326 | 0x8001d223 | direct-call or known-entry tail target | .text | 16 | 16 | 0 | 16 | 0 | 0 |
| FscInvalidateIdleBlocks | 0x8001d26b | public export | .text | 121 | 121 | 0 | 121 | 0 | 0 |
| inferred_internal_0328 | 0x8001d2e4 | direct-call or known-entry tail target | .text | 411 | 411 | 0 | 411 | 0 | 0 |
| FscSetCacheSize | 0x8001d47f | public export | .text | 102 | 102 | 0 | 102 | 0 | 0 |
| inferred_internal_0330 | 0x8001d4e5 | direct-call or known-entry tail target | .text | 97 | 97 | 0 | 97 | 0 | 0 |
| inferred_internal_0331 | 0x8001d546 | direct-call or known-entry tail target | .text | 46 | 46 | 0 | 46 | 0 | 0 |
| inferred_internal_0332 | 0x8001d614 | direct-call or known-entry tail target | .text | 104 | 104 | 0 | 104 | 0 | 0 |
| inferred_internal_0333 | 0x8001d67c | direct-call or known-entry tail target | .text | 114 | 114 | 0 | 114 | 0 | 0 |
| inferred_internal_0334 | 0x8001d867 | direct-call or known-entry tail target | .text | 535 | 535 | 0 | 535 | 0 | 0 |
| MmGetPhysicalAddress | 0x8001ddd4 | public export | .text | 78 | 78 | 0 | 78 | 0 | 0 |
| MmAllocateContiguousMemoryEx | 0x8001de22 | public export | .text | 450 | 450 | 0 | 450 | 0 | 0 |
| MmQueryAllocationSize | 0x8001dfe4 | public export | .text | 61 | 61 | 0 | 61 | 0 | 0 |
| MmPersistContiguousMemory | 0x8001e021 | public export | .text | 96 | 96 | 0 | 96 | 0 | 0 |
| MmMapIoSpace | 0x8001e081 | public export | .text | 201 | 201 | 0 | 201 | 0 | 0 |
| MmUnmapIoSpace | 0x8001e14a | public export | .text | 83 | 83 | 0 | 83 | 0 | 0 |
| MmLockUnlockBufferPages | 0x8001e19d | public export | .text | 143 | 143 | 0 | 143 | 0 | 0 |
| MmLockUnlockPhysicalPage | 0x8001e22c | public export | .text | 62 | 62 | 0 | 62 | 0 | 0 |
| inferred_internal_0343 | 0x8001e26a | direct-call or known-entry tail target | .text | 258 | 258 | 0 | 258 | 0 | 0 |
| inferred_internal_0344 | 0x8001e36c | direct-call or known-entry tail target | .text | 171 | 171 | 0 | 171 | 0 | 0 |
| MmClaimGpuInstanceMemory | 0x8001e417 | public export | .text | 188 | 188 | 0 | 188 | 0 | 0 |
| MmAllocateContiguousMemory | 0x8001e4d3 | public export | .text | 20 | 20 | 0 | 20 | 0 | 0 |
| MmFreeContiguousMemory | 0x8001e4e7 | public export | .text | 99 | 99 | 0 | 99 | 0 | 0 |
| MmIsAddressValid | 0x8001e54a | public export | .text | 80 | 80 | 0 | 80 | 0 | 0 |
| inferred_internal_0349 | 0x8001e59a | direct-call or known-entry tail target | .text | 136 | 136 | 0 | 136 | 0 | 0 |
| inferred_internal_0350 | 0x8001e622 | direct-call or known-entry tail target | .text | 68 | 68 | 0 | 68 | 0 | 0 |
| inferred_internal_0351 | 0x8001e666 | direct-call or known-entry tail target | .text | 56 | 56 | 0 | 56 | 0 | 0 |
| MmQueryAddressProtect | 0x8001e69e | public export | .text | 97 | 97 | 0 | 97 | 0 | 0 |
| MmQueryStatistics | 0x8001e6ff | public export | .text | 118 | 118 | 0 | 118 | 0 | 0 |
| inferred_internal_0354 | 0x8001e7bb | direct-call or known-entry tail target | .text | 237 | 237 | 0 | 237 | 1 | 0 |
| inferred_internal_0355 | 0x8001e8a8 | direct-call or known-entry tail target | .text | 186 | 186 | 0 | 186 | 0 | 0 |
| MmSetAddressProtect | 0x8001e962 | public export | .text | 131 | 131 | 0 | 131 | 0 | 0 |
| MmAllocateSystemMemory | 0x8001e9e5 | public export | .text | 30 | 30 | 0 | 30 | 0 | 0 |
| MmFreeSystemMemory | 0x8001ea03 | public export | .text | 21 | 21 | 0 | 21 | 0 | 0 |
| inferred_internal_0359 | 0x8001ea18 | direct-call or known-entry tail target | .text | 28 | 28 | 0 | 28 | 0 | 0 |
| inferred_internal_0360 | 0x8001ea34 | direct-call or known-entry tail target | .text | 19 | 19 | 0 | 19 | 0 | 0 |
| MmCreateKernelStack | 0x8001ea47 | public export | .text | 42 | 42 | 0 | 42 | 0 | 0 |
| MmDeleteKernelStack | 0x8001ea71 | public export | .text | 32 | 32 | 0 | 32 | 0 | 0 |
| inferred_internal_0363 | 0x8001ea91 | direct-call or known-entry tail target | .text | 232 | 232 | 0 | 232 | 0 | 0 |
| inferred_internal_0364 | 0x8001ecfb | direct-call or known-entry tail target | .text | 105 | 105 | 0 | 105 | 0 | 0 |
| NtQueryVirtualMemory | 0x8001ed64 | public export | .text | 516 | 516 | 0 | 516 | 0 | 0 |
| NtProtectVirtualMemory | 0x8001ef68 | public export | .text | 387 | 387 | 0 | 387 | 0 | 0 |
| NtAllocateVirtualMemory | 0x8001f0eb | public export | .text | 1047 | 1047 | 0 | 1076 | 1 | 0 |
| NtFreeVirtualMemory | 0x8001f51f | public export | .text | 684 | 684 | 0 | 684 | 0 | 0 |
| inferred_internal_0369 | 0x8001f7cb | direct-call or known-entry tail target | .text | 216 | 216 | 0 | 216 | 0 | 0 |
| inferred_internal_0370 | 0x8001f8a3 | direct-call or known-entry tail target | .text | 225 | 225 | 0 | 225 | 0 | 0 |
| inferred_internal_0371 | 0x8001f984 | direct-call or known-entry tail target | .text | 340 | 340 | 0 | 340 | 1 | 0 |
| inferred_internal_0372 | 0x8001fad8 | direct-call or known-entry tail target | .text | 129 | 129 | 0 | 129 | 0 | 0 |
| inferred_internal_0373 | 0x8001fb59 | direct-call or known-entry tail target | .text | 33 | 33 | 0 | 33 | 0 | 0 |
| inferred_internal_0374 | 0x8001fb7a | direct-call or known-entry tail target | .text | 116 | 116 | 0 | 116 | 0 | 0 |
| inferred_internal_0375 | 0x8001fbee | direct-call or known-entry tail target | .text | 114 | 114 | 0 | 114 | 0 | 0 |
| inferred_internal_0376 | 0x8001fc91 | direct-call or known-entry tail target | .text | 26 | 26 | 0 | 26 | 0 | 0 |
| inferred_internal_0377 | 0x8001fcab | direct-call or known-entry tail target | .text | 81 | 81 | 0 | 81 | 0 | 0 |
| inferred_internal_0378 | 0x8001fcfc | direct-call or known-entry tail target | .text | 120 | 120 | 0 | 120 | 0 | 0 |
| inferred_internal_0379 | 0x8001fd74 | direct-call or known-entry tail target | .text | 352 | 352 | 0 | 352 | 0 | 0 |
| inferred_internal_0380 | 0x8001fed4 | direct-call or known-entry tail target | .text | 26 | 26 | 0 | 26 | 0 | 0 |
| inferred_internal_0381 | 0x8001fef0 | direct-call or known-entry tail target | .text | 56 | 56 | 0 | 56 | 0 | 0 |
| inferred_internal_0382 | 0x8001ff48 | direct-call or known-entry tail target | .text | 415 | 415 | 0 | 415 | 0 | 0 |
| inferred_internal_0383 | 0x800200e7 | direct-call or known-entry tail target | .text | 42 | 42 | 0 | 42 | 0 | 0 |
| inferred_internal_0384 | 0x80020111 | direct-call or known-entry tail target | .text | 38 | 38 | 0 | 38 | 0 | 0 |
| inferred_internal_0385 | 0x80020137 | direct-call or known-entry tail target | .text | 92 | 92 | 0 | 92 | 0 | 0 |
| inferred_internal_0386 | 0x80020193 | direct-call or known-entry tail target | .text | 402 | 402 | 0 | 402 | 0 | 0 |
| inferred_internal_0387 | 0x80020325 | direct-call or known-entry tail target | .text | 59 | 59 | 0 | 59 | 0 | 0 |
| inferred_internal_0388 | 0x80020360 | direct-call or known-entry tail target | .text | 38 | 38 | 0 | 38 | 0 | 0 |
| inferred_internal_0389 | 0x80020386 | direct-call or known-entry tail target | .text | 234 | 234 | 0 | 234 | 0 | 0 |
| inferred_internal_0390 | 0x80020470 | direct-call or known-entry tail target | .text | 271 | 271 | 0 | 271 | 0 | 0 |
| inferred_internal_0391 | 0x8002057f | direct-call or known-entry tail target | .text | 48 | 48 | 0 | 48 | 0 | 0 |
| inferred_internal_0392 | 0x800205af | direct-call or known-entry tail target | .text | 59 | 59 | 0 | 59 | 0 | 0 |
| inferred_internal_0393 | 0x800205ea | direct-call or known-entry tail target | .text | 42 | 42 | 0 | 42 | 0 | 0 |
| inferred_internal_0394 | 0x80020614 | direct-call or known-entry tail target | .text | 125 | 125 | 0 | 125 | 0 | 0 |
| ObReferenceObjectByName | 0x80020691 | public export | .text | 29 | 29 | 0 | 29 | 0 | 0 |
| ObfReferenceObject | 0x800206ae | public export | .text | 21 | 21 | 0 | 21 | 0 | 0 |
| ObReferenceObjectByPointer | 0x800206c3 | public export | .text | 45 | 45 | 0 | 45 | 0 | 0 |
| ObfDereferenceObject | 0x800206f0 | public export | .text | 62 | 62 | 0 | 62 | 2 | 0 |
| ObOpenObjectByPointer | 0x8002072e | public export | .text | 80 | 80 | 0 | 80 | 0 | 0 |
| ObReferenceObjectByHandle | 0x8002077e | public export | .text | 119 | 119 | 0 | 119 | 0 | 0 |
| ObOpenObjectByName | 0x800207f5 | public export | .text | 97 | 97 | 0 | 97 | 0 | 0 |
| inferred_internal_0402 | 0x80020856 | direct-call or known-entry tail target | .text | 154 | 154 | 0 | 154 | 0 | 0 |
| NtClose | 0x800208f0 | public export | .text | 136 | 136 | 0 | 136 | 1 | 0 |
| NtDuplicateObject | 0x80020978 | public export | .text | 77 | 77 | 0 | 77 | 0 | 0 |
| ObMakeTemporaryObject | 0x800209c5 | public export | .text | 56 | 56 | 0 | 56 | 0 | 0 |
| inferred_internal_0406 | 0x800209fd | direct-call or known-entry tail target | .text | 47 | 47 | 0 | 47 | 0 | 0 |
| NtCreateDirectoryObject | 0x80020a2c | public export | .text | 58 | 58 | 0 | 58 | 0 | 0 |
| NtOpenDirectoryObject | 0x80020a66 | public export | .text | 23 | 23 | 0 | 23 | 0 | 0 |
| NtQueryDirectoryObject | 0x80020a7d | public export | .text | 239 | 239 | 0 | 239 | 0 | 0 |
| inferred_internal_0410 | 0x80020b6c | direct-call or known-entry tail target | .text | 58 | 58 | 0 | 58 | 0 | 0 |
| inferred_internal_0411 | 0x80020ba6 | direct-call or known-entry tail target | .text | 164 | 164 | 0 | 164 | 0 | 0 |
| inferred_internal_0412 | 0x80020c4a | direct-call or known-entry tail target | .text | 502 | 502 | 0 | 502 | 1 | 0 |
| inferred_internal_0413 | 0x80020e40 | direct-call or known-entry tail target | .text | 305 | 305 | 0 | 305 | 1 | 0 |
| inferred_internal_0414 | 0x80020f71 | direct-call or known-entry tail target | .text | 146 | 146 | 0 | 146 | 0 | 0 |
| NtOpenSymbolicLinkObject | 0x80021003 | public export | .text | 23 | 23 | 0 | 23 | 0 | 0 |
| NtQuerySymbolicLinkObject | 0x8002101a | public export | .text | 119 | 119 | 0 | 119 | 0 | 0 |
| inferred_internal_0417 | 0x80021091 | public OBJECT_TYPE callback | .text | 14 | 14 | 0 | 14 | 0 | 0 |
| NtSignalAndWaitForSingleObjectEx | 0x8002109f | public export | .text | 219 | 219 | 0 | 277 | 0 | 0 |
| NtWaitForSingleObjectEx | 0x800211b4 | public export | .text | 97 | 97 | 0 | 117 | 0 | 0 |
| NtWaitForMultipleObjectsEx | 0x80021229 | public export | .text | 333 | 333 | 0 | 353 | 0 | 0 |
| NtWaitForSingleObject | 0x8002138a | public export | .text | 22 | 22 | 0 | 22 | 0 | 0 |
| ObCreateObject | 0x800213a0 | public export | .text | 270 | 270 | 0 | 270 | 2 | 0 |
| ObInsertObject | 0x800214ae | public export | .text | 496 | 496 | 0 | 496 | 0 | 0 |
| inferred_internal_0424 | 0x8002169e | direct-call or known-entry tail target | .text | 210 | 210 | 0 | 210 | 0 | 0 |
| inferred_internal_0425 | 0x80021770 | direct-call or known-entry tail target | .text | 81 | 81 | 0 | 81 | 0 | 0 |
| inferred_internal_0426 | 0x800217c1 | direct-call or known-entry tail target | .text | 75 | 75 | 0 | 75 | 0 | 0 |
| inferred_internal_0427 | 0x8002180c | direct-call or known-entry tail target | .text | 50 | 50 | 0 | 50 | 0 | 0 |
| inferred_internal_0428 | 0x8002183e | direct-call or known-entry tail target | .text | 79 | 79 | 0 | 79 | 0 | 0 |
| inferred_internal_0429 | 0x8002188d | direct-call or known-entry tail target | .text | 78 | 78 | 0 | 78 | 0 | 0 |
| inferred_internal_0430 | 0x800218db | direct-call or known-entry tail target | .text | 118 | 118 | 0 | 118 | 0 | 0 |
| inferred_internal_0431 | 0x80021951 | direct-call or known-entry tail target | .text | 117 | 117 | 0 | 117 | 0 | 0 |
| NtQueueApcThread | 0x800219d2 | public export | .text | 122 | 122 | 0 | 122 | 0 | 0 |
| NtResumeThread | 0x80021a4c | public export | .text | 59 | 59 | 0 | 59 | 0 | 0 |
| NtSuspendThread | 0x80021a87 | public export | .text | 119 | 119 | 0 | 165 | 0 | 0 |
| PsCreateSystemThreadEx | 0x80021b56 | public export | .text | 416 | 416 | 0 | 416 | 1 | 0 |
| PsSetCreateThreadNotifyRoutine | 0x80021cf6 | public export | .text | 47 | 47 | 0 | 47 | 0 | 0 |
| PsCreateSystemThread | 0x80021d25 | public export | .text | 42 | 42 | 0 | 42 | 0 | 0 |
| PsQueryStatistics | 0x80021d4f | public export | .text | 45 | 45 | 0 | 45 | 0 | 0 |
| PsTerminateSystemThread | 0x80021dc0 | public export | .text | 282 | 282 | 0 | 282 | 2 | 0 |
| inferred_internal_0440 | 0x80021eda | direct-call or known-entry tail target | .text | 61 | 61 | 0 | 61 | 0 | 0 |
| RtlUshortByteSwap | 0x80021f20 | public export | .text | 5 | 5 | 0 | 5 | 0 | 0 |
| RtlUlongByteSwap | 0x80021f30 | public export | .text | 5 | 5 | 0 | 5 | 0 | 0 |
| DbgBreakPoint | 0x80021f38 | public export | .text | 1 | 1 | 0 | 1 | 0 | 0 |
| DbgBreakPointWithStatus | 0x80021f3c | public export | .text | 5 | 5 | 0 | 5 | 0 | 0 |
| DbgPrint | 0x80021f44 | public export | .text | 90 | 90 | 0 | 90 | 0 | 0 |
| DbgPrompt | 0x80021f9e | public export | .text | 63 | 63 | 0 | 63 | 0 | 0 |
| RtlAnsiStringToUnicodeString | 0x80021fdd | public export | .text | 158 | 158 | 0 | 158 | 0 | 0 |
| RtlUnicodeStringToAnsiString | 0x8002207b | public export | .text | 179 | 179 | 0 | 179 | 0 | 0 |
| RtlUpcaseUnicodeString | 0x8002212e | public export | .text | 211 | 211 | 0 | 211 | 0 | 0 |
| RtlDowncaseUnicodeString | 0x80022201 | public export | .text | 209 | 209 | 0 | 209 | 0 | 0 |
| RtlUpcaseUnicodeChar | 0x800222d2 | public export | .text | 75 | 75 | 0 | 75 | 0 | 0 |
| RtlDowncaseUnicodeChar | 0x8002231d | public export | .text | 78 | 78 | 0 | 78 | 0 | 0 |
| RtlFreeAnsiString / RtlFreeUnicodeString | 0x8002236b | public export | .text | 26 | 26 | 0 | 26 | 0 | 0 |
| RtlCompareUnicodeString | 0x80022385 | public export | .text | 334 | 334 | 0 | 334 | 0 | 0 |
| RtlEqualUnicodeString | 0x800224d3 | public export | .text | 260 | 260 | 0 | 260 | 0 | 0 |
| RtlCopyUnicodeString | 0x800225d7 | public export | .text | 94 | 94 | 0 | 94 | 0 | 0 |
| RtlAppendUnicodeToString | 0x80022635 | public export | .text | 113 | 113 | 0 | 113 | 0 | 0 |
| RtlAppendUnicodeStringToString | 0x800226a6 | public export | .text | 102 | 102 | 0 | 102 | 0 | 0 |
| RtlCreateUnicodeString | 0x8002270c | public export | .text | 74 | 74 | 0 | 74 | 0 | 0 |
| RtlCopyString | 0x80022756 | public export | .text | 66 | 66 | 0 | 66 | 0 | 0 |
| RtlUpperChar | 0x80022798 | public export | .text | 92 | 92 | 0 | 92 | 0 | 0 |
| RtlLowerChar | 0x800227f4 | public export | .text | 92 | 92 | 0 | 92 | 0 | 0 |
| RtlCompareString | 0x80022850 | public export | .text | 140 | 140 | 0 | 140 | 0 | 0 |
| RtlEqualString | 0x800228dc | public export | .text | 115 | 115 | 0 | 115 | 0 | 0 |
| RtlUpperString | 0x800229d5 | public export | .text | 64 | 64 | 0 | 64 | 0 | 0 |
| RtlAppendStringToString | 0x80022a15 | public export | .text | 76 | 76 | 0 | 76 | 0 | 0 |
| RtlAssert | 0x80022a61 | public export | .text | 158 | 158 | 0 | 158 | 0 | 0 |
| RtlRip | 0x80022aff | public export | .text | 151 | 151 | 0 | 151 | 0 | 0 |
| inferred_internal_0469 | 0x80022b98 | direct-call or known-entry tail target | .text | 65 | 7 | 58 | 74 | 1 | 0 |
| inferred_internal_0470 | 0x80022ba0 | direct-call or known-entry tail target | .text | 66 | 8 | 58 | 66 | 1 | 0 |
| inferred_internal_0471 | 0x80022c30 | direct-call or known-entry tail target | .text | 16 | 16 | 0 | 16 | 0 | 0 |
| RtlCaptureContext | 0x80022c40 | public export | .text | 96 | 46 | 50 | 163 | 0 | 0 |
| inferred_internal_0473 | 0x80022c70 | direct-call or known-entry tail target | .text | 115 | 65 | 50 | 115 | 0 | 0 |
| inferred_internal_0474 | 0x80022ce4 | direct-call or known-entry tail target | .text | 27 | 27 | 0 | 27 | 0 | 0 |
| inferred_internal_0475 | 0x80022d00 | direct-call or known-entry tail target | .text | 7 | 7 | 0 | 7 | 0 | 0 |
| inferred_internal_0476 | 0x80022d08 | direct-call or known-entry tail target | .text | 4 | 4 | 0 | 4 | 0 | 0 |
| RtlWalkFrameChain | 0x80022d0c | public export | .text | 161 | 161 | 0 | 168 | 0 | 0 |
| RtlCaptureStackBackTrace | 0x80022db4 | public export | .text | 112 | 112 | 0 | 112 | 0 | 0 |
| RtlIntegerToChar | 0x80022e24 | public export | .text | 216 | 216 | 0 | 240 | 0 | 0 |
| RtlCharToInteger | 0x80022f14 | public export | .text | 266 | 266 | 0 | 290 | 0 | 0 |
| RtlUnicodeStringToInteger | 0x80023036 | public export | .text | 360 | 360 | 0 | 384 | 0 | 0 |
| RtlIntegerToUnicodeString | 0x800231b6 | public export | .text | 73 | 73 | 0 | 73 | 0 | 0 |
| RtlCompareMemory | 0x80023200 | public export | .text | 71 | 71 | 0 | 71 | 0 | 0 |
| RtlCompareMemoryUlong | 0x80023250 | public export | .text | 33 | 33 | 0 | 33 | 0 | 0 |
| RtlFillMemory | 0x80023280 | public export | .text | 49 | 49 | 0 | 49 | 0 | 0 |
| RtlFillMemoryUlong | 0x800232c0 | public export | .text | 22 | 22 | 0 | 22 | 0 | 0 |
| RtlZeroMemory | 0x800232e0 | public export | .text | 36 | 36 | 0 | 36 | 0 | 0 |
| RtlMoveMemory | 0x80023310 | public export | .text | 67 | 67 | 0 | 67 | 0 | 0 |
| RtlEnterCriticalSectionAndRegion | 0x80023360 | public export | .text | 81 | 31 | 50 | 101 | 0 | 0 |
| RtlEnterCriticalSection | 0x80023380 | public export | .text | 65 | 15 | 50 | 69 | 0 | 0 |
| RtlLeaveCriticalSectionAndRegion | 0x800233d0 | public export | .text | 74 | 74 | 0 | 86 | 0 | 0 |
| RtlLeaveCriticalSection | 0x80023430 | public export | .text | 41 | 41 | 0 | 54 | 0 | 0 |
| RtlTryEnterCriticalSection | 0x80023468 | public export | .text | 72 | 72 | 0 | 72 | 0 | 0 |
| RtlExtendedLargeIntegerDivide | 0x800234b0 | public export | .text | 89 | 89 | 0 | 90 | 0 | 0 |
| RtlExtendedMagicDivide | 0x8002350c | public export | .text | 142 | 142 | 0 | 142 | 0 | 0 |
| RtlExtendedIntegerMultiply | 0x8002359c | public export | .text | 86 | 86 | 0 | 86 | 0 | 0 |
| RtlGetCallersAddress | 0x800235f4 | public export | .text | 133 | 133 | 0 | 133 | 0 | 0 |
| RtlInitAnsiString | 0x8002368c | public export | .text | 43 | 43 | 0 | 43 | 0 | 0 |
| RtlInitUnicodeString | 0x800236b8 | public export | .text | 47 | 47 | 0 | 47 | 0 | 0 |
| RtlInitializeCriticalSection | 0x800236e7 | public export | .text | 37 | 37 | 0 | 37 | 0 | 0 |
| RtlMapGenericMask | 0x8002370c | public export | .text | 80 | 80 | 0 | 80 | 0 | 0 |
| RtlMultiByteToUnicodeN | 0x8002375c | public export | .text | 61 | 61 | 0 | 61 | 0 | 0 |
| RtlMultiByteToUnicodeSize | 0x80023799 | public export | .text | 17 | 17 | 0 | 17 | 0 | 0 |
| RtlUnicodeToMultiByteSize | 0x800237aa | public export | .text | 17 | 17 | 0 | 17 | 0 | 0 |
| RtlUnicodeToMultiByteN | 0x800237bb | public export | .text | 68 | 68 | 0 | 68 | 0 | 0 |
| RtlUpcaseUnicodeToMultiByteN | 0x800237ff | public export | .text | 180 | 180 | 0 | 180 | 0 | 0 |
| RtlNtStatusToDosError | 0x800238b3 | public export | .text | 215 | 215 | 0 | 215 | 0 | 0 |
| RtlRaiseException | 0x8002398c | public export | .text | 154 | 154 | 0 | 154 | 0 | 0 |
| RtlRaiseStatus | 0x80023a26 | public export | .text | 40 | 40 | 0 | 40 | 0 | 0 |
| inferred_internal_0510 | 0x80023a4e | direct-call or known-entry tail target | .text | 112 | 112 | 0 | 112 | 0 | 0 |
| inferred_internal_0511 | 0x80023abe | direct-call or known-entry tail target | .text | 56 | 56 | 0 | 56 | 0 | 0 |
| RtlTimeToTimeFields | 0x80023af6 | public export | .text | 310 | 310 | 0 | 310 | 0 | 0 |
| RtlTimeFieldsToTime | 0x80023c2c | public export | .text | 399 | 399 | 0 | 399 | 0 | 0 |
| inferred_internal_0514 | 0x80023dbb | direct-call or known-entry tail target | .text | 247 | 247 | 0 | 247 | 0 | 0 |
| RtlUnwind | 0x80023eb2 | public export | .text | 420 | 420 | 0 | 420 | 0 | 0 |
| inferred_internal_0516 | 0x80024056 | direct-call or known-entry tail target | .text | 63 | 63 | 0 | 63 | 0 | 0 |
| inferred_internal_0517 | 0x80024195 | direct-call or known-entry tail target | .text | 16 | 16 | 0 | 16 | 0 | 0 |
| inferred_internal_0518 | 0x800241af | direct-call or known-entry tail target | .text | 26 | 26 | 0 | 26 | 0 | 0 |
| inferred_internal_0519 | 0x800241d3 | direct-call or known-entry tail target | .text | 24 | 24 | 0 | 24 | 0 | 0 |
| inferred_internal_0520 | 0x80024862 | direct-call or known-entry tail target | .text | 62 | 62 | 0 | 62 | 0 | 0 |
| inferred_internal_0521 | 0x80024b7c | direct-call or known-entry tail target | .text | 39 | 39 | 0 | 39 | 0 | 0 |
| inferred_internal_0522 | 0x80024ffc | direct-call or known-entry tail target | .text | 73 | 73 | 0 | 73 | 0 | 0 |
| inferred_internal_0523 | 0x80026a14 | direct-call or known-entry tail target | .text | 196 | 196 | 0 | 196 | 0 | 0 |
| inferred_internal_0524 | 0x80026ad8 | direct-call or known-entry tail target | .text | 19 | 19 | 0 | 19 | 0 | 0 |
| inferred_internal_0525 | 0x80026aeb | direct-call or known-entry tail target | .text | 43 | 43 | 0 | 43 | 0 | 0 |
| inferred_internal_0526 | 0x80026fa9 | direct-call or known-entry tail target | .text | 198 | 198 | 0 | 198 | 0 | 0 |
| inferred_internal_0527 | 0x8002706f | direct-call or known-entry tail target | .text | 50 | 50 | 0 | 50 | 0 | 0 |
| inferred_internal_0528 | 0x800270a1 | direct-call or known-entry tail target | .text | 405 | 405 | 0 | 405 | 0 | 0 |
| inferred_internal_0529 | 0x80027236 | direct-call or known-entry tail target | .text | 221 | 221 | 0 | 221 | 0 | 0 |
| inferred_internal_0530 | 0x80027313 | direct-call or known-entry tail target | .text | 367 | 367 | 0 | 367 | 0 | 0 |
| inferred_internal_0531 | 0x80027c91 | direct-call or known-entry tail target | .text | 59 | 59 | 0 | 59 | 0 | 0 |
| inferred_internal_0532 | 0x8002803a | direct-call or known-entry tail target | .text | 19 | 19 | 0 | 19 | 0 | 0 |
| inferred_internal_0533 | 0x8002804d | direct-call or known-entry tail target | .text | 43 | 43 | 0 | 43 | 0 | 0 |
| inferred_internal_0534 | 0x800282db | direct-call or known-entry tail target | .text | 316 | 316 | 0 | 316 | 0 | 0 |
| inferred_internal_0535 | 0x8002aded | direct-call or known-entry tail target | .text | 130 | 130 | 0 | 130 | 0 | 0 |
| inferred_internal_0536 | 0x8002af34 | direct-call or known-entry tail target | .text | 63 | 63 | 0 | 63 | 0 | 0 |
| inferred_internal_0537 | 0x8002af73 | direct-call or known-entry tail target | .text | 191 | 191 | 0 | 191 | 0 | 0 |
| inferred_internal_0538 | 0x8002b032 | direct-call or known-entry tail target | .text | 269 | 269 | 0 | 269 | 0 | 0 |
| inferred_internal_0539 | 0x8002b13f | direct-call or known-entry tail target | .text | 190 | 190 | 0 | 190 | 0 | 0 |
| inferred_internal_0540 | 0x8002b314 | direct-call or known-entry tail target | .text | 44 | 44 | 0 | 44 | 0 | 0 |
| inferred_internal_0541 | 0x8002bef7 | direct-call or known-entry tail target | .text | 63 | 63 | 0 | 63 | 0 | 0 |
| inferred_internal_0542 | 0x8002bf36 | direct-call or known-entry tail target | .text | 63 | 63 | 0 | 63 | 0 | 0 |
| inferred_internal_0543 | 0x8002bf75 | direct-call or known-entry tail target | .text | 285 | 285 | 0 | 285 | 0 | 0 |
| inferred_internal_0544 | 0x8002c092 | direct-call or known-entry tail target | .text | 109 | 109 | 0 | 109 | 0 | 0 |
| inferred_internal_0545 | 0x8002c0ff | direct-call or known-entry tail target | .text | 77 | 77 | 0 | 77 | 0 | 0 |
| inferred_internal_0546 | 0x8002c14c | direct-call or known-entry tail target | .text | 117 | 117 | 0 | 117 | 0 | 0 |
| inferred_internal_0547 | 0x8002c1c1 | direct-call or known-entry tail target | .text | 187 | 187 | 0 | 187 | 0 | 0 |
| inferred_internal_0548 | 0x8002c27c | direct-call or known-entry tail target | .text | 350 | 350 | 0 | 350 | 0 | 0 |
| inferred_internal_0549 | 0x8002c3da | direct-call or known-entry tail target | .text | 326 | 326 | 0 | 326 | 0 | 0 |
| inferred_internal_0550 | 0x8002c520 | direct-call or known-entry tail target | .text | 205 | 205 | 0 | 205 | 0 | 0 |
| inferred_internal_0551 | 0x8002c5ed | direct-call or known-entry tail target | .text | 273 | 273 | 0 | 273 | 0 | 0 |
| inferred_internal_0552 | 0x8002c6fe | direct-call or known-entry tail target | .text | 549 | 549 | 0 | 549 | 0 | 0 |
| inferred_internal_0553 | 0x8002c980 | direct-call or known-entry tail target | .text | 44 | 44 | 0 | 44 | 0 | 0 |
| inferred_internal_0554 | 0x8002c9ac | direct-call or known-entry tail target | .text | 39 | 39 | 0 | 39 | 0 | 0 |
| inferred_internal_0555 | 0x8002cb61 | direct-call or known-entry tail target | .text | 68 | 68 | 0 | 68 | 0 | 0 |
| inferred_internal_0556 | 0x8002da00 | direct-call or known-entry tail target | .text | 52 | 52 | 0 | 52 | 0 | 0 |
| inferred_internal_0557 | 0x8002da34 | direct-call or known-entry tail target | .text | 96 | 96 | 0 | 96 | 0 | 0 |
| inferred_internal_0558 | 0x8002da94 | direct-call or known-entry tail target | .text | 96 | 96 | 0 | 96 | 0 | 0 |
| inferred_internal_0559 | 0x8002daf4 | direct-call or known-entry tail target | .text | 130 | 130 | 0 | 130 | 0 | 0 |
| inferred_internal_0560 | 0x8002db76 | direct-call or known-entry tail target | .text | 61 | 61 | 0 | 61 | 0 | 0 |
| PhyInitialize | 0x8002dbb3 | public export | .text | 423 | 423 | 0 | 423 | 0 | 0 |
| PhyGetLinkState | 0x8002dd5a | public export | .text | 63 | 63 | 0 | 63 | 0 | 0 |
| RtlSnprintf | 0x8002dd99 | public export | .text | 87 | 87 | 0 | 87 | 0 | 0 |
| RtlSprintf | 0x8002ddf0 | public export | .text | 88 | 88 | 0 | 88 | 0 | 0 |
| RtlVsnprintf | 0x8002de48 | public export | .text | 86 | 86 | 0 | 86 | 0 | 0 |
| RtlVsprintf | 0x8002de9e | public export | .text | 87 | 87 | 0 | 87 | 0 | 0 |
| inferred_internal_0567 | 0x8002def8 | direct-call or known-entry tail target | .text | 57 | 57 | 0 | 57 | 0 | 0 |
| inferred_internal_0568 | 0x8002df31 | direct-call or known-entry tail target | .text | 17 | 17 | 0 | 17 | 0 | 0 |
| inferred_internal_0569 | 0x8002e030 | direct-call or known-entry tail target | .text | 52 | 52 | 0 | 52 | 0 | 0 |
| inferred_internal_0570 | 0x8002e070 | direct-call or known-entry tail target | .text | 176 | 176 | 0 | 491 | 8 | 0 |
| inferred_internal_0571 | 0x8002e3a5 | direct-call or known-entry tail target | .text | 22 | 22 | 0 | 22 | 0 | 0 |
| inferred_internal_0572 | 0x8002e4a0 | direct-call or known-entry tail target | .text | 31 | 31 | 0 | 31 | 0 | 0 |
| inferred_internal_0573 | 0x8002e4df | direct-call or known-entry tail target | .text | 12 | 12 | 0 | 12 | 0 | 0 |
| inferred_internal_0574 | 0x8002e579 | direct-call or known-entry tail target | .text | 126 | 126 | 0 | 1607 | 1 | 0 |
| inferred_internal_0575 | 0x8002ed95 | direct-call or known-entry tail target | .text | 53 | 53 | 0 | 53 | 0 | 0 |
| inferred_internal_0576 | 0x8002edca | direct-call or known-entry tail target | .text | 65 | 65 | 0 | 65 | 0 | 0 |
| inferred_internal_0577 | 0x8002ee0b | direct-call or known-entry tail target | .text | 65 | 65 | 0 | 65 | 0 | 0 |
| inferred_internal_0578 | 0x8002ee4c | direct-call or known-entry tail target | .text | 83 | 83 | 0 | 83 | 0 | 0 |
| inferred_internal_0579 | 0x8002ee9f | direct-call or known-entry tail target | .text | 101 | 101 | 0 | 101 | 0 | 0 |
| inferred_internal_0580 | 0x8002ef04 | direct-call or known-entry tail target | .text | 170 | 170 | 0 | 170 | 0 | 0 |
| XeLoadSection | 0x8002efae | public export | .text | 111 | 111 | 0 | 111 | 0 | 0 |
| XeUnloadSection | 0x8002f01d | public export | .text | 58 | 58 | 0 | 58 | 0 | 0 |
| inferred_internal_0583 | 0x8002f960 | direct-call or known-entry tail target | .text | 92 | 92 | 0 | 92 | 0 | 0 |
| XcUpdateCrypto | 0x8002fcf6 | public export | .text | 235 | 235 | 0 | 235 | 0 | 0 |
| XcSHAInit | 0x8002fde1 | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcSHAUpdate | 0x8002fde7 | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcSHAFinal | 0x8002fded | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcRC4Key | 0x8002fdf3 | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcRC4Crypt | 0x8002fdf9 | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcHMAC | 0x8002fdff | public export | .text | 10 | 10 | 0 | 10 | 1 | 0 |
| XcPKEncPublic | 0x8002fe09 | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcPKDecPrivate | 0x8002fe0f | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcPKGetKeyLen | 0x8002fe15 | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcVerifyPKCS1Signature | 0x8002fe1b | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcModExp | 0x8002fe21 | public export | .text | 10 | 10 | 0 | 10 | 1 | 0 |
| XcDESKeyParity | 0x8002fe2b | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcKeyTable | 0x8002fe31 | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| XcBlockCrypt | 0x8002fe37 | public export | .text | 10 | 10 | 0 | 10 | 1 | 0 |
| XcBlockCryptCBC | 0x8002fe41 | public export | .text | 10 | 10 | 0 | 10 | 1 | 0 |
| XcCryptService | 0x8002fe4b | public export | .text | 6 | 6 | 0 | 6 | 1 | 0 |
| inferred_internal_0601 | 0x8002fe67 | direct-call or known-entry tail target | .text | 68 | 68 | 0 | 68 | 0 | 0 |
| AvGetSavedDataAddress | 0x8002ff5d | public export | .text | 6 | 6 | 0 | 6 | 0 | 0 |
| AvSetSavedDataAddress | 0x8002ff63 | public export | .text | 12 | 12 | 0 | 12 | 0 | 0 |
| inferred_internal_0604 | 0x8002ffe8 | direct-call or known-entry tail target | .text | 62 | 62 | 0 | 62 | 0 | 0 |
| inferred_internal_0605 | 0x80030026 | direct-call or known-entry tail target | .text | 585 | 585 | 0 | 585 | 0 | 0 |
| inferred_internal_0606 | 0x800305c8 | direct-call or known-entry tail target | .text | 311 | 311 | 0 | 311 | 0 | 0 |
| inferred_internal_0607 | 0x800306ff | direct-call or known-entry tail target | .text | 291 | 291 | 0 | 291 | 0 | 0 |
| AvSendTVEncoderOption | 0x80030822 | public export | .text | 78 | 78 | 0 | 1743 | 1 | 0 |
| AvSetDisplayMode | 0x80030f3d | public export | .text | 1687 | 1687 | 0 | 1687 | 0 | 0 |
| inferred_internal_0610 | 0x8003183d | direct-call or known-entry tail target | .text | 47 | 47 | 0 | 47 | 0 | 0 |
| inferred_internal_0611 | 0x8003186c | direct-call or known-entry tail target | .text | 10 | 10 | 0 | 10 | 0 | 0 |
| inferred_internal_0612 | 0x800319cc | direct-call or known-entry tail target | .text | 64 | 64 | 0 | 64 | 0 | 0 |
| inferred_internal_0613 | 0x80031a6c | installed IDT gate | .text | 336 | 98 | 238 | 98 | 2 | 0 |
| inferred_internal_0614 | 0x80031ad0 | installed IDT gate | .text | 368 | 115 | 253 | 115 | 2 | 0 |
| inferred_internal_0615 | 0x80031b44 | installed IDT gate | .text | 345 | 92 | 253 | 92 | 2 | 0 |
| inferred_internal_0616 | 0x80031cf0 | direct-call or known-entry tail target | .text | 3 | 3 | 0 | 3 | 0 | 0 |
| inferred_internal_0617 | 0x80031cf4 | direct-call or known-entry tail target | .text | 17 | 17 | 0 | 17 | 0 | 0 |
| inferred_internal_0618 | 0x80031d08 | installed IDT gate | .text | 553 | 315 | 238 | 317 | 2 | 0 |
| inferred_internal_0619 | 0x80031e50 | direct-call or known-entry tail target | .text | 4 | 4 | 0 | 4 | 0 | 0 |
| inferred_internal_0620 | 0x800321f0 | direct-call or known-entry tail target | .text | 50 | 50 | 0 | 50 | 0 | 0 |
| inferred_internal_0621 | 0x80032230 | direct-call or known-entry tail target | .text | 282 | 282 | 0 | 282 | 0 | 0 |
| inferred_internal_0622 | 0x80032350 | direct-call or known-entry tail target | .text | 187 | 187 | 0 | 187 | 0 | 0 |
| inferred_internal_0623 | 0x80032410 | direct-call or known-entry tail target | .text | 2903 | 2903 | 0 | 2903 | 0 | 0 |
| inferred_internal_0624 | 0x80032f70 | direct-call or known-entry tail target | .text | 56 | 56 | 0 | 56 | 0 | 0 |
| inferred_internal_0625 | 0x8004c658 | installed IDT gate | INIT | 344 | 91 | 253 | 53 | 4 | 0 |
| inferred_internal_0626 | 0x800548a0 | direct-call or known-entry tail target | INIT | 76 | 76 | 0 | 76 | 0 | 0 |
| kernel_entry | 0x800548ec | PE entry | INIT | 53 | 53 | 0 | 53 | 0 | 0 |
| inferred_internal_0628 | 0x80054921 | direct-call or known-entry tail target | INIT | 167 | 167 | 0 | 167 | 0 | 0 |
| inferred_internal_0629 | 0x80054faa | direct-call or known-entry tail target | INIT | 41 | 41 | 0 | 41 | 0 | 0 |
| inferred_internal_0630 | 0x80054fd4 | direct-call or known-entry tail target | INIT | 237 | 172 | 65 | 172 | 0 | 0 |
| inferred_internal_0631 | 0x80055080 | direct-call or known-entry tail target | INIT | 53 | 53 | 0 | 53 | 0 | 0 |
| inferred_internal_0632 | 0x800550b5 | direct-call or known-entry tail target | INIT | 319 | 319 | 0 | 319 | 0 | 0 |
| inferred_internal_0633 | 0x80061d38 | direct-call or known-entry tail target | INIT | 142 | 142 | 0 | 93 | 0 | 0 |
| inferred_internal_0634 | 0x80061d98 | direct-call or known-entry tail target | INIT | 91 | 91 | 0 | 91 | 0 | 0 |
| inferred_internal_0635 | 0x80061df4 | direct-call or known-entry tail target | INIT | 48 | 48 | 0 | 48 | 0 | 0 |
| inferred_internal_0636 | 0x80062e24 | direct-call or known-entry tail target | INIT | 888 | 888 | 0 | 888 | 0 | 0 |
| inferred_internal_0637 | 0x8006319c | direct-call or known-entry tail target | INIT | 25 | 25 | 0 | 25 | 0 | 0 |
Source baseline: SpiritBoot 27149596, Roswell 1569e2e8 plus ordered patches. See Clean-Room-and-Validation for evidence boundaries and Export-Index for complete export coverage.
- Retail-5838-BIOS-Size-and-Layout
- Retail-5838-Function-Ledger
- Retail-5838-Public-API-Comparison
- Retail-5838-Data-and-Physical-Atlas
- Retail-5838-Unclassified-Image-Ranges
- SpiritBoot-Main-Emitted-Extent-Ledger
- SpiritBoot-Main-Physical-Ownership
- SpiritBoot-Latest-Candidate-Extent-Ledger
- Memory-Reduction-Targets
- Memory-Comparison-and-Removal-Guide
- Memory-Three-BIOS-Public-API-Comparison
- Memory-Reduction-Workbook — physical-owner challenge ledger, game headroom, allocation pressure and removal decisions.
- Memory-Pool-Reuse-Cost-and-Attribution — current 64 KiB candidate saving, eight-run allocator costs and Conker attribution limits.
- Kernel-Overhaul-Size-and-Performance — lower-level subsystem specialization, runtime roots, performance work and focused PR delivery.