Author: Mateusz "j00ru" Jurczyk (j00ru.vx tech blog)
Team Vexillium
| BaseRegCloseKey | |
| BaseRegCreateKey | |
| BaseRegDeleteKeyEx | |
| BaseRegDeleteValue | |
| BaseRegFlushKey | |
| BaseRegGetVersion | |
| BaseRegLoadKey | |
| BaseRegOpenKey | |
| BaseRegRestoreKey | |
| BaseRegSaveKeyEx | |
| BaseRegSetKeySecurity | |
| BaseRegSetValue | |
| BaseRegUnLoadKey | |
| CheckForHiberboot | |
| EnumerateTraces | |
| EtwLogSysConfigExtension | |
| EventSetInformation | |
| GetStringConditionFromBinary | |
| I_ScRegisterPreshutdownRestart | |
| LsaGetAvailableCAPIDs | |
| LsaLookupSids2 | |
| LsaQueryCAPs | |
| LsaSetCAPs | |
| MIDL_user_free_Ext | |
| OperationEnd | |
| OperationStart | |
| PerfRegCloseKey | |
| PerfRegEnumKey | |
| PerfRegEnumValue | |
| PerfRegQueryInfoKey | |
| PerfRegQueryValue | |
| PerfRegSetValue | |
| PsmAdjustActivationToken | |
| PsmBlockAppStateChangeCompletion | |
| PsmEnableApplicationSandbox | |
| PsmRegisterAppStateChangeNotification | |
| PsmRegisterApplicationProcess | |
| PsmUnblockAppStateChangeCompletion | |
| PsmUnregisterAppStateChangeNotification | |
| PsmWaitForAppResume | |
| QueryServiceDynamicInformation | |
| RemoteRegEnumKeyWrapper | |
| RemoteRegEnumValueWrapper | |
| RemoteRegQueryInfoKeyWrapper | |
| RemoteRegQueryValueWrapper | |
| SafeBaseRegGetKeySecurity | |
| TraceQueryInformation | |
| WaitServiceState |