Author: Mateusz "j00ru" Jurczyk (j00ru.vx tech blog)
Team Vexillium
| ActivateActCtxWorker | |
| AddRefActCtxWorker | |
| AppContainerDeriveSidFromMoniker | |
| AppContainerFreeMemory | |
| AppContainerLookupDisplayName | |
| AppContainerLookupMoniker | |
| AppContainerRegisterSid | |
| AppContainerUnregisterSid | |
| AppXFreeMemory | |
| AppXGetApplicationData | |
| AppXGetDevelopmentMode | |
| AppXGetOSMaxVersionTested | |
| AppXGetPackageCapabilities | |
| AppXGetPackageSid | |
| AppXGetPackageState | |
| AppXLookupDisplayName | |
| AppXLookupMoniker | |
| AppXSetPackageState | |
| BaseCheckAppcompatCacheExWorker | |
| BaseCheckAppcompatCacheWorker | |
| BaseCheckElevation | |
| BaseCleanupAppcompatCacheSupportWorker | |
| BaseDestroyVDMEnvironment | |
| BaseDumpAppcompatCacheWorker | |
| BaseElevationPostProcessing | |
| BaseFlushAppcompatCacheWorker | |
| BaseInitAppcompatCacheSupportWorker | |
| BaseIsAppcompatInfrastructureDisabledWorker | |
| BaseIsDosApplication | |
| BaseUpdateAppcompatCacheWorker | |
| BaseUpdateVDMEntry | |
| BaseWriteErrorElevationRequiredEvent | |
| BasepAppCompatHookDLL | |
| BasepAppContainerEnvironmentExtension | |
| BasepAppXExtension | |
| BasepCheckWebBladeHashes | |
| BasepConstructSxsCreateProcessMessage | |
| BasepCopyEncryption | |
| BasepGetAppCompatData | |
| BasepGetComputerNameFromNtPath | |
| BasepGetExeArchType | |
| BasepIsProcessAllowed | |
| BasepNotifyLoadStringResource | |
| BasepPostSuccessAppXExtension | |
| BasepProcessInvalidImage | |
| BasepQueryAppCompat | |
| BasepReleaseAppXContext | |
| BasepReleaseSxsCreateProcessUtilityStruct | |
| BasepReportFault | |
| BasepSetFileEncryptionCompression | |
| CallbackDetectedUnrecoverableError | |
| CheckAllowDecryptedRemoteDestinationPolicy | |
| CheckForReadOnlyResourceFilter | |
| CheckTokenCapability | |
| CheckTokenMembershipEx | |
| ClosePackageInfo | |
| CloseState | |
| CloseStateAtom | |
| CloseStateContainer | |
| CommitStateAtom | |
| CommitStateAtomDeprecated | |
| CopyContext | |
| CopyFile2 | |
| CreateActCtxWWorker | |
| CreateFile2 | |
| CreateStateAtom | |
| CreateStateAtomDeprecated | |
| CreateStateContainer | |
| CreateStateSubcontainer | |
| DeactivateActCtxWorker | |
| DeleteStateAtomValue | |
| DeleteStateContainer | |
| DeleteStateContainerAtom | |
| DeleteStateContainerValue | |
| DuplicateEncryptionInfoFileExt | |
| DuplicateStateContainerHandle | |
| EnumerateStateAtomValues | |
| EnumerateStateContainerItems | |
| EnumerateStateContainerItemsDeprecated | |
| FindActCtxSectionGuidWorker | |
| FindActCtxSectionStringWWorker | |
| GetAppContainerAce | |
| GetAppContainerNamedObjectPath | |
| GetApplicationRecoveryCallbackWorker | |
| GetApplicationRestartSettingsWorker | |
| GetCurrentActCtxWorker | |
| GetCurrentPackageFamilyMonikerW | |
| GetCurrentPackageFamilyName | |
| GetCurrentPackageFamilyNameW | |
| GetCurrentPackageFullName | |
| GetCurrentPackageFullNameW | |
| GetCurrentPackageId | |
| GetCurrentPackageIdW | |
| GetCurrentPackageInfo | |
| GetCurrentPackageInfoW | |
| GetCurrentPackageMonikerW | |
| GetCurrentPackagePath | |
| GetCurrentPackagePathW | |
| GetCurrentThreadStackLimits | |
| GetDateFormatAWorker | |
| GetDateFormatWWorker | |
| GetEnabledXStateFeatures | |
| GetFirmwareType | |
| GetHivePath | |
| GetOverlappedResultEx | |
| GetPackageFamilyName | |
| GetPackageFullName | |
| GetPackageFullNameW | |
| GetPackageId | |
| GetPackageIdW | |
| GetPackageInfo | |
| GetPackageMonikerW | |
| GetPackagePath | |
| GetPackagePathW | |
| GetPackagesByPackageFamily | |
| GetPackagesByPackageFamilyW | |
| GetProcessInformation | |
| GetProcessMitigationPolicy | |
| GetStateFolder | |
| GetStateVersion | |
| GetSystemAppDataFolder | |
| GetSystemAppDataKey | |
| GetSystemTimePreciseAsFileTime | |
| GetThreadInformation | |
| GetTimeFormatAWorker | |
| GetTimeFormatWWorker | |
| GetXStateFeaturesMask | |
| GlobalAddAtomExA | |
| GlobalAddAtomExW | |
| InitializeContext | |
| IsNativeVhdBoot | |
| IsValidNLSVersion | |
| LoadPackagedLibrary | |
| LocateXStateFeature | |
| NtVdm64CreateProcessInternalW | |
| OpenConsoleWStub | |
| OpenPackageInfoByFullName | |
| OpenRoamingMutexes | |
| OpenRoamingNotificationEvent | |
| OpenState | |
| OpenStateAtom | |
| OpenStateExplicit | |
| PackageFamilyMonikerFromIdW | |
| PackageFamilyMonikerFromMonikerW | |
| PackageFamilyNameFromFullName | |
| PackageFamilyNameFromFullNameW | |
| PackageFamilyNameFromId | |
| PackageFamilyNameFromIdW | |
| PackageFullNameFromId | |
| PackageFullNameFromIdW | |
| PackageIdFromFullName | |
| PackageIdFromFullNameW | |
| PackageIdFromMonikerW | |
| PackageMonikerFromIdW | |
| PackageNameAndPublisherIdFromFamilyName | |
| PrefetchVirtualMemory | |
| QueryActCtxSettingsWWorker | |
| QueryActCtxWWorker | |
| QueryStateAtomValueInfo | |
| QueryStateContainerItemInfo | |
| RaiseInvalid16BitExeError | |
| ReadStateAtomValue | |
| ReadStateContainerValue | |
| RegCopyTreeW | |
| RegisterBadMemoryNotification | |
| ReleaseActCtxWorker | |
| ResetState | |
| ResolveDelayLoadedAPI | |
| ResolveDelayLoadsFromDll | |
| SetProcessInformation | |
| SetProcessMitigationPolicy | |
| SetStateVersion | |
| SetThreadInformation | |
| SetThreadpoolTimerEx | |
| SetThreadpoolWaitEx | |
| SetVolumeMountPointWStub | |
| SetXStateFeaturesMask | |
| TermsrvConvertSysRootToUserDir | |
| TermsrvCreateRegEntry | |
| TermsrvDeleteKey | |
| TermsrvDeleteValue | |
| TermsrvGetPreSetValue | |
| TermsrvGetWindowsDirectoryA | |
| TermsrvGetWindowsDirectoryW | |
| TermsrvOpenRegEntry | |
| TermsrvOpenUserClasses | |
| TermsrvRestoreKey | |
| TermsrvSetKeySecurity | |
| TermsrvSetValueKey | |
| TermsrvSyncUserIniFileExt | |
| UnmapViewOfFileEx | |
| UnregisterBadMemoryNotification | |
| WerRegisterMemoryBlockWorker | |
| WerUnregisterMemoryBlockWorker | |
| WerpGetDebugger | |
| WerpLaunchAeDebug | |
| WerpNotifyLoadStringResourceWorker | |
| WerpNotifyUseStringResourceWorker | |
| WriteStateAtomValue | |
| WriteStateContainerValue | |
| ZombifyActCtxWorker | |
| timeBeginPeriod | |
| timeEndPeriod | |
| timeGetDevCaps | |
| timeGetSystemTime | |
| timeGetTime | |
| AddDllDirectory | |
| CopyExtendedContext | |
| GetEnabledExtendedFeatures | |
| GetExtendedContextLength | |
| GetExtendedFeaturesMask | |
| InitializeExtendedContext | |
| IsTimeZoneRedirectionEnabled | |
| LocateExtendedFeature | |
| LocateLegacyContext | |
| RegKrnGetGlobalState | |
| RegKrnInitialize | |
| RemoveDllDirectory | |
| SetClientTimeZoneInformation | |
| SetDefaultDllDirectories | |
| SetExtendedFeaturesMask |