We define abstraction as selective ignorance.



0	nt!NtMapUserPhysicalPagesScatter (fffff800`01a036f0)
1	nt!NtWaitForSingleObject (fffff800`018e4da0)
2	nt!NtCallbackReturn (fffff800`016636d0)
3	nt!NtReadFile (fffff800`018d3500)
4	nt!NtDeviceIoControlFile (fffff800`01907f20)
5	nt!NtWriteFile (fffff800`018f6b90)
6	nt!NtRemoveIoCompletion (fffff800`018d7bb0)
7	nt!NtReleaseSemaphore (fffff800`018df570)
8	nt!NtReplyWaitReceivePort (fffff800`018a72c4)
9	nt!NtReplyPort (fffff800`018a72e0)
10	nt!NtSetInformationThread (fffff800`018aeb20)
11	nt!NtSetEvent (fffff800`018d676c)
12	nt!NtClose (fffff800`018e7a80)
13	nt!NtQueryObject (fffff800`018b6744)
14	nt!NtQueryInformationFile (fffff800`018bc5f0)
15	nt!NtOpenKey (fffff800`018da384)
16	nt!NtEnumerateValueKey (fffff800`018c1900)
17	nt!NtFindAtom (fffff800`018dda60)
18	nt!NtQueryDefaultLocale (fffff800`018c8944)
19	nt!NtQueryKey (fffff800`018a4bbc)
20	nt!NtQueryValueKey (fffff800`018b2ca0)
21	nt!NtAllocateVirtualMemory (fffff800`018e7f20)
22	nt!NtQueryInformationProcess (fffff800`018e5570)
23	nt!NtWaitForMultipleObjects32 (fffff800`0185ca30)
24	nt!NtWriteFileGather (fffff800`01a384c0)
25	nt!NtSetInformationProcess (fffff800`01900528)
26	nt!NtCreateKey (fffff800`018a4afc)
27	nt!NtFreeVirtualMemory (fffff800`016a7910)
28	nt!NtImpersonateClientOfPort (fffff800`018a8f08)
29	nt!NtReleaseMutant (fffff800`018e4f08)
30	nt!NtQueryInformationToken (fffff800`018d4900)
31	nt!NtRequestWaitReplyPort (fffff800`018fd908)
32	nt!NtQueryVirtualMemory (fffff800`018b72e0)
33	nt!NtOpenThreadToken (fffff800`018b0700)
34	nt!NtQueryInformationThread (fffff800`018e4fe4)
35	nt!NtOpenProcess (fffff800`018a11a0)
36	nt!NtSetInformationFile (fffff800`018b82e0)
37	nt!NtMapViewOfSection (fffff800`01906740)
38	nt!NtAccessCheckAndAuditAlarm (fffff800`018a73ac)
39	nt!NtUnmapViewOfSection (fffff800`01906aac)
40	nt!NtReplyWaitReceivePortEx (fffff800`018a6c98)
41	nt!NtTerminateProcess (fffff800`018c8b80)
42	nt!NtSetEventBoostPriority (fffff800`019d0d10)
43	nt!NtReadFileScatter (fffff800`0187a1b0)
44	nt!NtOpenThreadTokenEx (fffff800`018b0290)
45	nt!NtOpenProcessTokenEx (fffff800`018db168)
46	nt!NtQueryPerformanceCounter (fffff800`0191215c)
47	nt!NtEnumerateKey (fffff800`018b64b0)
48	nt!NtOpenFile (fffff800`018d75e4)
49	nt!NtDelayExecution (fffff800`018e4ea0)
50	nt!NtQueryDirectoryFile (fffff800`018d3cb0)
51	nt!NtQuerySystemInformation (fffff800`018e0770)
52	nt!NtOpenSection (fffff800`01906b24)
53	nt!NtQueryTimer (fffff800`019d61e0)
54	nt!NtFsControlFile (fffff800`018f79b0)
55	nt!NtWriteVirtualMemory (fffff800`018b3b84)
56	nt!NtCloseObjectAuditAlarm (fffff800`018cb7e4)
57	nt!NtDuplicateObject (fffff800`018ae970)
58	nt!NtQueryAttributesFile (fffff800`018bbaec)
59	nt!NtClearEvent (fffff800`018dc730)
60	nt!NtReadVirtualMemory (fffff800`018c335c)
61	nt!NtOpenEvent (fffff800`0189ce08)
62	nt!NtAdjustPrivilegesToken (fffff800`018a6dd8)
63	nt!NtDuplicateToken (fffff800`018cc370)
64	nt!NtContinue (fffff800`0166dae0)
65	nt!NtQueryDefaultUILanguage (fffff800`01989af0)
66	nt!NtQueueApcThread (fffff800`0189d3d0)
67	nt!NtYieldExecution (fffff800`01638e20)
68	nt!NtAddAtom (fffff800`01885d04)
69	nt!NtCreateEvent (fffff800`018f8e80)
70	nt!NtQueryVolumeInformationFile (fffff800`018fa720)
71	nt!NtCreateSection (fffff800`018b9268)
72	nt!NtFlushBuffersFile (fffff800`018db2e0)
73	nt!NtApphelpCacheControl (fffff800`018b9eb8)
74	nt!NtCreateProcessEx (fffff800`01a482c0)
75	nt!NtCreateThread (fffff800`019bd5e0)
76	nt!NtIsProcessInJob (fffff800`019d0e00)
77	nt!NtProtectVirtualMemory (fffff800`018ff080)
78	nt!NtQuerySection (fffff800`01912028)
79	nt!NtResumeThread (fffff800`01904080)
80	nt!NtTerminateThread (fffff800`01911fd4)
81	nt!NtReadRequestData (fffff800`01a38440)
82	nt!NtCreateFile (fffff800`018fb8f0)
83	nt!NtQueryEvent (fffff800`0188ee0c)
84	nt!NtWriteRequestData (fffff800`01a383c0)
85	nt!NtOpenDirectoryObject (fffff800`019070ac)
86	nt!NtAccessCheckByTypeAndAuditAlarm (fffff800`018cb738)
87	nt!NtQuerySystemTime (fffff800`01983460)
88	nt!NtWaitForMultipleObjects (fffff800`018e6680)
89	nt!NtSetInformationObject (fffff800`018e02e0)
90	nt!NtCancelIoFile (fffff800`019d00e0)
91	nt!NtTraceEvent (fffff800`0162b604)
92	nt!NtPowerInformation (fffff800`0188c490)
93	nt!NtSetValueKey (fffff800`018a9d7c)
94	nt!NtCancelTimer (fffff800`0162edd4)
95	nt!NtSetTimer (fffff800`0168501c)
96	nt!NtAcceptConnectPort (fffff800`0187a890)
97	nt!NtAccessCheck (fffff800`0164b478)
98	nt!NtAccessCheckByType (fffff800`016412c0)
99	nt!NtAccessCheckByTypeResultList (fffff800`0173af80)
100	nt!NtAccessCheckByTypeResultListAndAuditAlarm (fffff800`01a0a9c0)
101	nt!NtAccessCheckByTypeResultListAndAuditAlarmByHandle (fffff800`01a0a900)
102	nt!NtAcquireCMFViewOwnership (fffff800`019ef1d0)
103	nt!NtAddBootEntry (fffff800`01a07620)
104	nt!NtAddDriverEntry (fffff800`01a07380)
105	nt!NtAdjustGroupsToken (fffff800`0187955c)
106	nt!NtAlertResumeThread (fffff800`019d3a80)
107	nt!NtAlertThread (fffff800`018918dc)
108	nt!NtAllocateLocallyUniqueId (fffff800`0187ad20)
109	nt!NtAllocateUserPhysicalPages (fffff800`019ffca0)
110	nt!NtAllocateUuids (fffff800`0185f08c)
111	nt!NtAlpcAcceptConnectPort (fffff800`018bf5a8)
112	nt!NtAlpcCancelMessage (fffff800`0188e780)
113	nt!NtAlpcConnectPort (fffff800`018a50a0)
114	nt!NtAlpcCreatePort (fffff800`01884984)
115	nt!NtAlpcCreatePortSection (fffff800`01888db8)
116	nt!NtAlpcCreateResourceReserve (fffff800`0188738c)
117	nt!NtAlpcCreateSectionView (fffff800`01898b10)
118	nt!NtAlpcCreateSecurityContext (fffff800`018a0d80)
119	nt!NtAlpcDeletePortSection (fffff800`018885ac)
120	nt!NtAlpcDeleteResourceReserve (fffff800`019b7390)
121	nt!NtAlpcDeleteSectionView (fffff800`018beb28)
122	nt!NtAlpcDeleteSecurityContext (fffff800`0189de8c)
123	nt!NtAlpcDisconnectPort (fffff800`018be180)
124	nt!NtAlpcImpersonateClientOfPort (fffff800`0189fd50)
125	nt!NtAlpcOpenSenderProcess (fffff800`018a93f0)
126	nt!NtAlpcOpenSenderThread (fffff800`018a5540)
127	nt!NtAlpcQueryInformation (fffff800`01885734)
128	nt!NtAlpcQueryInformationMessage (fffff800`018db910)
129	nt!NtAlpcRevokeSecurityContext (fffff800`019b7220)
130	nt!NtAlpcSendWaitReceivePort (fffff800`018ee0e0)
131	nt!NtAlpcSetInformation (fffff800`01888978)
132	nt!NtAreMappedFilesTheSame (fffff800`018632d8)
133	nt!NtAssignProcessToJobObject (fffff800`018aa118)
134	nt!NtCancelDeviceWakeupRequest (fffff800`0195b540)
135	nt!NtCancelIoFileEx (fffff800`01861064)
136	nt!NtCancelSynchronousIoFile (fffff800`019dc800)
137	nt!NtCommitComplete (fffff800`019d97f0)
138	nt!NtCommitEnlistment (fffff800`019f9b60)
139	nt!NtCommitTransaction (fffff800`019f9a30)
140	nt!NtCompactKeys (fffff800`01a04e10)
141	nt!NtCompareTokens (fffff800`01898784)
142	nt!NtCompleteConnectPort (fffff800`0187a930)
143	nt!NtCompressKey (fffff800`01a50fe0)
144	nt!NtConnectPort (fffff800`018c4f64)
145	nt!NtCreateDebugObject (fffff800`019bcf10)
146	nt!NtCreateDirectoryObject (fffff800`018890ec)
147	nt!NtCreateEnlistment (fffff800`019fb420)
148	nt!NtCreateEventPair (fffff800`019bd0c0)
149	nt!NtCreateIoCompletion (fffff800`018d0ec0)
150	nt!NtCreateJobObject (fffff800`019c95a0)
151	nt!NtCreateJobSet (fffff800`01a023a0)
152	nt!NtCreateKeyTransacted (fffff800`019dab20)
153	nt!NtCreateKeyedEvent (fffff800`01886fa0)
154	nt!NtCreateMailslotFile (fffff800`0186344c)
155	nt!NtCreateMutant (fffff800`018bbc94)
156	nt!NtCreateNamedPipeFile (fffff800`018cbc30)
157	nt!NtCreatePagingFile (fffff800`01a37360)
158	nt!NtCreatePort (fffff800`019d87c0)
159	nt!NtCreatePrivateNamespace (fffff800`0188939c)
160	nt!NtCreateProcess (fffff800`01a48350)
161	nt!NtCreateProfile (fffff800`019d6340)
162	nt!NtCreateResourceManager (fffff800`01870920)
163	nt!NtCreateSemaphore (fffff800`018ba0c4)
164	nt!NtCreateSymbolicLinkObject (fffff800`0186b2f4)
165	nt!NtCreateThreadEx (fffff800`01904678)
166	nt!NtCreateTimer (fffff800`01886b00)
167	nt!NtCreateToken (fffff800`0187ba38)
168	nt!NtCreateTransaction (fffff800`01a092c0)
169	nt!NtCreateTransactionManager (fffff800`01870584)
170	nt!NtCreateUserProcess (fffff800`018ad5c0)
171	nt!NtCreateWaitablePort (fffff800`019d8750)
172	nt!NtCreateWorkerFactory (fffff800`01886c68)
173	nt!NtDebugActiveProcess (fffff800`01a10b90)
174	nt!NtDebugContinue (fffff800`019d58a0)
175	nt!NtDeleteAtom (fffff800`0187ffd0)
176	nt!NtDeleteBootEntry (fffff800`0197fb10)
177	nt!NtDeleteDriverEntry (fffff800`0197f620)
178	nt!NtDeleteFile (fffff800`0186d540)
179	nt!NtDeleteKey (fffff800`01894d00)
180	nt!NtDeleteObjectAuditAlarm (fffff800`01a080e0)
181	nt!NtDeletePrivateNamespace (fffff800`01a4d410)
182	nt!NtDeleteValueKey (fffff800`01889d40)
183	nt!NtDisplayString (fffff800`01a017a0)
184	nt!NtEnumerateBootEntries (fffff800`01a15d10)
185	nt!NtEnumerateDriverEntries (fffff800`01a15860)
186	nt!NtEnumerateSystemEnvironmentValuesEx (fffff800`019a8240)
187	nt!NtEnumerateTransactionObject (fffff800`019db530)
188	nt!NtExtendSection (fffff800`01a0f7a0)
189	nt!NtFilterToken (fffff800`0187d8b0)
190	nt!NtFlushInstallUILanguage (fffff800`019f4800)
191	nt!NtFlushInstructionCache (fffff800`0188cf44)
192	nt!NtFlushKey (fffff800`01871d4c)
193	nt!NtFlushProcessWriteBuffers (fffff800`01638644)
194	nt!NtFlushVirtualMemory (fffff800`018732d8)
195	nt!NtFlushWriteBuffer (fffff800`01958e60)
196	nt!NtFreeUserPhysicalPages (fffff800`01a03080)
197	nt!NtFreezeRegistry (fffff800`01722690)
198	nt!NtFreezeTransactions (fffff800`019e20f0)
199	nt!NtGetContextThread (fffff800`018ca278)
200	nt!NtGetCurrentProcessorNumber (fffff800`018933b0)
201	nt!NtGetDevicePowerState (fffff800`01864810)
202	nt!NtGetMUIRegistryInfo (fffff800`018d0c40)
203	nt!NtGetNextProcess (fffff800`019dd450)
204	nt!NtGetNextThread (fffff800`019d0ef0)
205	nt!NtGetNlsSectionPtr (fffff800`01883f4c)
206	nt!NtGetNotificationResourceManager (fffff800`018741b0)
207	nt!NtGetPlugPlayEvent (fffff800`0187e7a0)
208	nt!NtGetWriteWatch (fffff800`01637fa0)
209	nt!NtImpersonateAnonymousToken (fffff800`01884864)
210	nt!NtImpersonateThread (fffff800`018bf2e0)
211	nt!NtInitializeNlsFiles (fffff800`018bf050)
212	nt!NtInitializeRegistry (fffff800`018727c0)
213	nt!NtInitiatePowerAction (fffff800`01a208f0)
214	nt!NtIsSystemResumeAutomatic (fffff800`019578d0)
215	nt!NtIsUILanguageComitted (fffff800`018ca7bc)
216	nt!NtListenPort (fffff800`019f5c20)
217	nt!NtLoadDriver (fffff800`01a40ce0)
218	nt!NtLoadKey (fffff800`01a52e60)
219	nt!NtLoadKey2 (fffff800`01a52e30)
220	nt!NtLoadKeyEx (fffff800`01a524b0)
221	nt!NtLockFile (fffff800`0188b6f0)
222	nt!NtLockProductActivationKeys (fffff800`0186587c)
223	nt!NtLockRegistryKey (fffff800`019d6150)
224	nt!NtLockVirtualMemory (fffff800`0161e3c0)
225	nt!NtMakePermanentObject (fffff800`019d1830)
226	nt!NtMakeTemporaryObject (fffff800`0186ce60)
227	nt!NtMapCMFModule (fffff800`018a5d40)
228	nt!NtMapUserPhysicalPages (fffff800`01a03e10)
229	nt!NtModifyBootEntry (fffff800`01a075f0)
230	nt!NtModifyDriverEntry (fffff800`01a07350)
231	nt!NtNotifyChangeDirectoryFile (fffff800`0188b240)
232	nt!NtNotifyChangeKey (fffff800`0188d1c0)
233	nt!NtNotifyChangeMultipleKeys (fffff800`0188d230)
234	nt!NtOpenEnlistment (fffff800`019dae50)
235	nt!NtOpenEventPair (fffff800`019abfc0)
236	nt!NtOpenIoCompletion (fffff800`019abd00)
237	nt!NtOpenJobObject (fffff800`019ac130)
238	nt!NtOpenKeyTransacted (fffff800`019daa90)
239	nt!NtOpenKeyedEvent (fffff800`019adce0)
240	nt!NtOpenMutant (fffff800`01907714)
241	nt!NtOpenObjectAuditAlarm (fffff800`01a081f0)
242	nt!NtOpenPrivateNamespace (fffff800`01a4d550)
243	nt!NtOpenProcessToken (fffff800`018db2b4)
244	nt!NtOpenResourceManager (fffff800`018742f0)
245	nt!NtOpenSemaphore (fffff800`01876b38)
246	nt!NtOpenSession (fffff800`019abc70)
247	nt!NtOpenSymbolicLinkObject (fffff800`018bdfe0)
248	nt!NtOpenThread (fffff800`019042f0)
249	nt!NtOpenTimer (fffff800`019ac080)
250	nt!NtOpenTransaction (fffff800`019db7d0)
251	nt!NtOpenTransactionManager (fffff800`01877408)
252	nt!NtPlugPlayControl (fffff800`0189c28c)
253	nt!NtPrePrepareComplete (fffff800`019d98a0)
254	nt!NtPrePrepareEnlistment (fffff800`019f9c10)
255	nt!NtPrepareComplete (fffff800`019d9950)
256	nt!NtPrepareEnlistment (fffff800`019f9cc0)
257	nt!NtPrivilegeCheck (fffff800`01882d4c)
258	nt!NtPrivilegeObjectAuditAlarm (fffff800`01a089e0)
259	nt!NtPrivilegedServiceAuditAlarm (fffff800`0187aaa0)
260	nt!NtPropagationComplete (fffff800`01a07d10)
261	nt!NtPropagationFailed (fffff800`019f5590)
262	nt!NtPulseEvent (fffff800`018749c0)
263	nt!NtQueryBootEntryOrder (fffff800`019a7fe0)
264	nt!NtQueryBootOptions (fffff800`0197f810)
265	nt!NtQueryDebugFilterState (fffff800`016a78c0)
266	nt!NtQueryDirectoryObject (fffff800`01907140)
267	nt!NtQueryDriverEntryOrder (fffff800`019a7d80)
268	nt!NtQueryEaFile (fffff800`01a30ef0)
269	nt!NtQueryFullAttributesFile (fffff800`0188e5a0)
270	nt!NtQueryInformationAtom (fffff800`01880000)
271	nt!NtQueryInformationEnlistment (fffff800`019d6ff0)
272	nt!NtQueryInformationJobObject (fffff800`01878668)
273	nt!NtQueryInformationPort (fffff800`019d0030)
274	nt!NtQueryInformationResourceManager (fffff800`019d6700)
275	nt!NtQueryInformationTransaction (fffff800`019d6960)
276	nt!NtQueryInformationTransactionManager (fffff800`01873428)
277	nt!NtQueryInformationWorkerFactory (fffff800`0172ed80)
278	nt!NtQueryInstallUILanguage (fffff800`018ca318)
279	nt!NtQueryIntervalProfile (fffff800`01966660)
280	nt!NtQueryIoCompletion (fffff800`019d5d60)
281	nt!NtQueryLicenseValue (fffff800`018b6e70)
282	nt!NtQueryMultipleValueKey (fffff800`01a32960)
283	nt!NtQueryMutant (fffff800`019d0b60)
284	nt!NtQueryOpenSubKeys (fffff800`01a32650)
285	nt!NtQueryOpenSubKeysEx (fffff800`01a32210)
286	nt!NtQueryPortInformationProcess (fffff800`019575c0)
287	nt!NtQueryQuotaInformationFile (fffff800`01a30210)
288	nt!NtQuerySecurityObject (fffff800`01891a70)
289	nt!NtQuerySemaphore (fffff800`019d65b0)
290	nt!NtQuerySymbolicLinkObject (fffff800`018be394)
291	nt!NtQuerySystemEnvironmentValue (fffff800`01a079b0)
292	nt!NtQuerySystemEnvironmentValueEx (fffff800`01a349b0)
293	nt!NtQueryTimerResolution (fffff800`01872b68)
294	nt!NtRaiseException (fffff800`0166dce0)
295	nt!NtRaiseHardError (fffff800`019dc8e0)
296	nt!NtReadOnlyEnlistment (fffff800`019d9740)
297	nt!NtRecoverEnlistment (fffff800`019f9d70)
298	nt!NtRecoverResourceManager (fffff800`019e2080)
299	nt!NtRecoverTransactionManager (fffff800`01874934)
300	nt!NtRegisterProtocolAddressInformation (fffff800`01878ec4)
301	nt!NtRegisterThreadTerminatePort (fffff800`019d1250)
302	nt!NtReleaseCMFViewOwnership (fffff800`019ef110)
303	nt!NtReleaseKeyedEvent (fffff800`018913d4)
304	nt!NtReleaseWorkerFactoryWorker (fffff800`0168549c)
305	nt!NtRemoveIoCompletionEx (fffff800`018a87bc)
306	nt!NtRemoveProcessDebug (fffff800`019d0510)
307	nt!NtRenameKey (fffff800`01a31ee0)
308	nt!NtRenameTransactionManager (fffff800`01a07e20)
309	nt!NtReplaceKey (fffff800`01a522f0)
310	nt!NtReplacePartitionUnit (fffff800`01742620)
311	nt!NtReplyWaitReplyPort (fffff800`019c9200)
312	nt!NtCancelDeviceWakeupRequest (fffff800`0195b540)
313	nt!NtRequestPort (fffff800`01907ce4)
314	nt!NtRequestWakeupLatency (fffff800`0198b9e0)
315	nt!NtResetEvent (fffff800`018c8f78)
316	nt!NtResetWriteWatch (fffff800`01638660)
317	nt!NtRestoreKey (fffff800`01a510d0)
318	nt!NtResumeProcess (fffff800`019d11e0)
319	nt!NtRollbackComplete (fffff800`019d8dd0)
320	nt!NtRollbackEnlistment (fffff800`019eff60)
321	nt!NtRollbackTransaction (fffff800`019f95c0)
322	nt!NtRollforwardTransactionManager (fffff800`01a4d4a0)
323	nt!NtSaveKey (fffff800`01a4fed0)
324	nt!NtSaveKeyEx (fffff800`01a4fd40)
325	nt!NtSaveMergedKeys (fffff800`01a4fb80)
326	nt!NtSecureConnectPort (fffff800`018b9624)
327	nt!NtSetBootEntryOrder (fffff800`01a073b0)
328	nt!NtSetBootOptions (fffff800`019d53d0)
329	nt!NtSetContextThread (fffff800`018ca71c)
330	nt!NtSetDebugFilterState (fffff800`01975b80)
331	nt!NtSetDefaultHardErrorPort (fffff800`0198c510)
332	nt!NtSetDefaultLocale (fffff800`01989b70)
333	nt!NtSetDefaultUILanguage (fffff800`0198aae0)
334	nt!NtSetDriverEntryOrder (fffff800`01a07110)
335	nt!NtSetEaFile (fffff800`01a30a60)
336	nt!NtSetHighEventPair (fffff800`019d0860)
337	nt!NtSetHighWaitLowEventPair (fffff800`019d0940)
338	nt!NtSetInformationDebugObject (fffff800`019d50a0)
339	nt!NtSetInformationEnlistment (fffff800`01a02020)
340	nt!NtSetInformationJobObject (fffff800`0187893c)
341	nt!NtSetInformationKey (fffff800`01a2cbd0)
342	nt!NtSetInformationResourceManager (fffff800`018715e4)
343	nt!NtSetInformationToken (fffff800`018a79b8)
344	nt!NtSetInformationTransaction (fffff800`01a01d20)
345	nt!NtSetInformationTransactionManager (fffff800`019da640)
346	nt!NtSetInformationWorkerFactory (fffff800`01624b88)
347	nt!NtSetIntervalProfile (fffff800`019cf6e0)
348	nt!NtSetIoCompletion (fffff800`0188f794)
349	nt!xHalAllocateMapRegisters (fffff800`016ded00)
350	nt!NtSetLowEventPair (fffff800`019d08d0)
351	nt!NtSetLowWaitHighEventPair (fffff800`019d09c0)
352	nt!NtSetQuotaInformationFile (fffff800`01a38e10)
353	nt!NtSetSecurityObject (fffff800`018a4374)
354	nt!NtSetSystemEnvironmentValue (fffff800`01a07650)
355	nt!NtSetSystemEnvironmentValueEx (fffff800`01a346a0)
356	nt!NtSetSystemInformation (fffff800`01a54960)
357	nt!NtSetSystemPowerState (fffff800`018568c0)
358	nt!NtSetSystemTime (fffff800`01a52ed0)
359	nt!NtSetThreadExecutionState (fffff800`0198c410)
360	nt!NtSetTimerResolution (fffff800`01994f70)
361	nt!NtSetUuidSeed (fffff800`019d5610)
362	nt!NtSetVolumeInformationFile (fffff800`0185b904)
363	nt!NtShutdownSystem (fffff800`01a55990)
364	nt!NtShutdownWorkerFactory (fffff800`01872bf4)
365	nt!NtSignalAndWaitForSingleObject (fffff800`0172f420)
366	nt!NtSinglePhaseReject (fffff800`019f9ab0)
367	nt!NtStartProfile (fffff800`01a15620)
368	nt!NtStopProfile (fffff800`019e0120)
369	nt!NtSuspendProcess (fffff800`019d7480)
370	nt!NtSuspendThread (fffff800`01868690)
371	nt!NtSystemDebugControl (fffff800`018dcee8)
372	nt!NtTerminateJobObject (fffff800`0186b850)
373	nt!NtTestAlert (fffff800`01903234)
374	nt!NtThawRegistry (fffff800`01722d60)
375	nt!NtThawTransactions (fffff800`0198ecc0)
376	nt!NtTraceControl (fffff800`018b4630)
377	nt!NtTranslateFilePath (fffff800`01a06e00)
378	nt!NtUnloadDriver (fffff800`01a40cd0)
379	nt!NtUnloadKey (fffff800`01a33b70)
380	nt!NtUnloadKey2 (fffff800`01a33390)
381	nt!NtUnloadKeyEx (fffff800`01a32cf0)
382	nt!NtUnlockFile (fffff800`0188bc10)
383	nt!NtUnlockVirtualMemory (fffff800`016327f0)
384	nt!NtVdmControl (fffff800`01a2f7a0)
385	nt!NtWaitForDebugEvent (fffff800`019db0c0)
386	nt!NtWaitForKeyedEvent (fffff800`01891658)
387	nt!NtWaitForWorkViaWorkerFactory (fffff800`01684abc)
388	nt!NtWaitHighEventPair (fffff800`019d0a40)
389	nt!NtWaitLowEventPair (fffff800`019d0ad0)
390	nt!NtWorkerFactoryWorkerReady (fffff800`016a734c)


3: kd> .fnent fffff800`018e4da0
Debugger function entry 00000000`020892a0 for:
(fffff800`018e4da0)   nt!NtWaitForSingleObject   |  (fffff800`018e4ea0)   nt!NtDelayExecution
Exact matches:
    nt!NtWaitForSingleObject = <no type information>

BeginAddress      = 00000000`002d0da0
EndAddress        = 00000000`002d0e96
UnwindInfoAddress = 00000000`00158bc0

Unwind info at fffff800`0176cbc0, 1c bytes
  version 1, flags 1, prolog 18, codes 8
  handler routine: nt!_C_specific_handler (fffff800`0167c75c), data 2
  00: offs 18, unwind op 4, op info 6	UWOP_SAVE_NONVOL FrameOffset: 68 reg: rsi.
  02: offs 18, unwind op 4, op info 3	UWOP_SAVE_NONVOL FrameOffset: 60 reg: rbx.
  04: offs 18, unwind op 2, op info 7	UWOP_ALLOC_SMALL.
  05: offs 14, unwind op 0, op info d	UWOP_PUSH_NONVOL reg: r13.
  06: offs 12, unwind op 0, op info c	UWOP_PUSH_NONVOL reg: r12.
  07: offs 10, unwind op 0, op info 7	UWOP_PUSH_NONVOL reg: rdi.


3: kd> uf /c fffff800`018e4da0
nt!NtWaitForSingleObject (fffff800`018e4da0)
  nt!NtWaitForSingleObject+0x58 (fffff800`018e4df8):
    call to nt!ObReferenceObjectByHandle (fffff800`018e4760)
  nt!NtWaitForSingleObject+0x93 (fffff800`018e4e33):
    call to nt!KeWaitForSingleObject (fffff800`016700b0)
  nt!NtWaitForSingleObject+0xaa (fffff800`018e4e4a):
    call to nt!ObfDereferenceObject (fffff800`01670d90)


HOME Windows Crash Dump Analysis Basics


Copyright©Takashi Toyota 2004- 2012
It is 2012-05-20 today.