ExAllocatePoolWithTag
VOID **__fastcall ExAllocatePoolWithTag(UINT64 a1, UINT64 a2, INT64 a3){
unsigned int v3;
int v4;
unsigned int v6;
unsigned int v7;
VOID **v8;
unsigned int NextNode;
VOID **HeapPool;
_QWORD *v12;
UINT64 v13;
UINT64 LookupIndex;
v3 = a3;
v4 = (unsigned __int16)KeNumberNodes;
v6 = a1;
v7 = KeGetCurrentPrcb()->ParentNode->Affinity.Reserved[0];
v8 = 0i64;
NextNode = v7;
LODWORD(LookupIndex) = 0;
do
{
LODWORD(v13) = 0;
HeapPool = (VOID **)ExAllocateHeapPool(v6, a2, v3, NextNode, v13);
if( HeapPool )
return HeapPool;
if( !--v4 )
break;
NextNode = MmGetNextNode(v7, &LookupIndex);
}
while( NextNode != -1 );
++ExPoolFailures;
if( (v6 & 2) != 0 )
{
v12 = (_QWORD *)qword_140C57E00[0];
if( (v6 & 0x200) != 0 )
v12 = (_QWORD *)qword_140C57E08;
KeBugCheckEx(
0x41u,
(PVOID)a2,
(PVOID)(unsigned int)v12[17],
(PVOID)((unsigned int)v12[21] + (unsigned int)v12[23]),
0i64);
}
if( (v6 & 0x10) != 0 )
RtlRaiseStatus(-1073741670);
return v8;
}Referenced by:
AdtpAppendString
AdtpBuildAccessReasonAuditString
AdtpBuildAccessReasonAuditStringInternal
AdtpBuildAccessesString
AdtpBuildGuidString
AdtpBuildHexInt64String
AdtpBuildIPv4Strings
AdtpBuildIPv6Strings
AdtpBuildMacStrings
AdtpBuildMessageString
AdtpBuildMultiSzStringListString
AdtpBuildPrivilegeAuditString
AdtpBuildRegistryValueString
AdtpBuildSecurityDescriptorUnicodeString
AdtpBuildSidListString
AdtpBuildStagingReasonAuditStringInternal
AdtpBuildStringListString
AdtpBuildUlongString
AdtpBuildUserAccountControlString
AdtpEtwBuildString
AdtpInitializeDriveLetters
AdtpObjsInitialize
AhcCacheQueryHwId
AllocateMemory
AlpcAddHandleTableEntry
AlpcRegisterLogRoutine
AlpcpAllocateBlob
AlpcpAllocateBuffer
AlpcpAllocateCompletionPacketLookaside
AlpcpAllocateMessageFromExtendedTables
AlpcpAllocateMessageFunction
AlpcpCaptureHandleAttributeInternal
AlpcpCaptureMessageData
AlpcpCaptureMessageDataSafe
AlpcpGetPortNameInformation
AlpcpInitSystem
AlpcpInitializeCompletionList
AlpcpInitializeMessageLog
AlpcpLogWaitForNewMessage
ApiSetComposeSchema
ApiSetLoadSchemaEx
ApiSetpConstructPathToExtension
ArbAddMmConfigRangeAsBootReserved
ArbAddOrdering
ArbInitializeOrderingList
ArbPruneOrdering
ArbQueryConflict
ArbpBuildAllocationStack
ArbpGetRegistryValue
AslAlloc
AslPathWildcardFindFirst
AslPathWildcardFindNext
AuthzBasepAllocateSecurityAttribute
AuthzBasepAllocateSecurityAttributeValue
AuthzBasepDuplicateSecurityAttributes
AuthzBasepMemAlloc
AuthzBasepUnicodeStringFromOperandValue
B_TREE<_SM_PAGE_KEY,SMKM_STORE_MGR::SMKM_FRONTEND_ENTRY,4096,B_TREE_DUMMY_NODE_POOL,B_TREE_KEY_COMPARATOR<_SM_PAGE_KEY>>::BTreeNewNode
BapdRecordFirmwareBootStats
BapdpMarshallBootDataToRegistry
BapdpProcessBitlockerStatus
BapdpProcessBootMetadata
BapdpProcessEDrvHintInfo
BapdpProcessFwUpdateResults
BapdpProcessHSTIResults
BapdpProcessResumeInformation
BapdpProcessVsmKeyBlobs
BapdpProcessWmdResults
BapdpRegisterWbclData
BcdGetSystemStorePath
BgkDisplayString
BgpFwAllocateMemory
BgpFwQueryBootGraphicsInformation
BiAddBootEntryToEfiBootManagerDisplayOrder
BiAddBootEntryToNvramDisplayOrder
BiBindEfiBootManager
BiBuildIdentifierList
BiConvertBootEnvironmentDeviceToNt
BiConvertBootEnvironmentDeviceToQualifiedPartition
BiConvertBootEnvironmentDeviceToUnknown
BiConvertElementToRegistryData
BiConvertNtDeviceToBootEnvironment
BiConvertNtFilePathToBootEnvironment
BiConvertQualifiedPartitionToBootEnvironment
BiCreateBootEntry
BiCreateFileDeviceElement
BiCreateKeySecurityDescriptor
BiCreateMergedBootEntry
BiCreatePartitionDevice
BiEnumerateSubKeys
BiExportEfiBootManager
BiGetDeviceFromEfiPath
BiGetElement
BiGetFilePathFromEfiPath
BiGetKeyName
BiGetNtPartitionPath
BiGetObjectReferenceFromEfiEntry
BiGetPartitionVhdFilePathFromUnicodeString
BiGetPhysicalDriveName
BiGetRegistryValue
BiGetSystemPartition
BiGetVolumeDiskExtentsInformation
BiHandleFirmwareDefaultEntry
BiIssueGetDriveLayoutIoctl
BiLoadSystemStore
BiLogFileOwnerProcess
BiMapEfiDeviceForSpaces
BiResolveLocateDevice
BiSpacesUpdatePhysicalDevicePath
BiTranslateFilePath
BiTranslateSymbolicLink
BiTranslateSymbolicLinkFile
BiUnloadHiveByName
BiUpdateBcdObject
BiUpdateObjectReferenceInEfiEntry
BiVerifyBootPartition
BvgaSaveResources
CMFAllocFn
CMFCreateSecurityDescriptor
CMFFlushHitsFile
CMFSystemThreadRoutine
CcAllocateInitializeMbcb
CcAllocateInitializeVacbArray
CcAllocateObcb
CcAsyncCopyRead
CcCreatePartition
CcCreateVacbArray
CcDeferWrite
CcExtendVacbArray
CcInitializeBcbProfiler
CcInitializeCacheManager
CcInitializeCacheMapEx
CcInitializePartition
CcInitializeProcessor
CcInitializeVolumeCacheMap
CcPostWorkQueueAsyncRead
CcQueryRegKeyValue
CcRegisterExternalCache
CcSetupWatchForRegistryChanges
CcWriteBehind
CmAddLogForAction
CmAppendDeclarativeFilterLevel
CmDeleteCommonClassRegKeyWorker
CmDeleteDeviceContainerRegKeyWorker
CmDeleteDeviceContainerWorker
CmDeleteDeviceInterfaceRegKeyWorker
CmDeleteDeviceInterfaceWorker
CmDeleteDevicePanelRegKeyWorker
CmDeleteDevicePanelWorker
CmDeleteDeviceRegKeyWorker
CmDeleteDeviceWorker
CmDeleteInstallerClassWorker
CmDeleteInterfaceClassWorker
CmDeleteKeyRecursive
CmDeviceClassesSubkeyCallback
CmDevicePanelEnumSubkeyCallback
CmEnumDevicesInContainerWithCallbackWorker
CmEnumSubkeyCallback
CmFcManagerStartRuntimePhase
CmGetDeviceCompoundFiltersWorker
CmGetDeviceInterfaceMappedPropertyFromComposite
CmGetDeviceInterfaceRegKeyPath
CmGetDeviceMappedPropertyFromRegProp
CmGetDeviceSiblings
CmGetDevicesInBaseContainerList
CmGetInstallerClassCompoundFiltersWorker
CmGetInstallerClassMappedPropertyFromRegProp
CmGetMatchingCommonClassListWorker
CmGetMatchingDeviceListForSubkey
CmGetMatchingDevicePanelListWorker
CmGetMatchingFilteredDeviceInterfaceListWorker
CmGetParentDeviceContainerId
CmGetRegKeySecurityDescriptor
CmGetSystemDriverList
CmInitializeProcessor
CmLoadKey
CmLogMcUpdateStatus
CmOpenCommonClassRegKeyWorker
CmOpenDeviceContainerRegKeyWorker
CmOpenDeviceInterfaceRegKeyWorker
CmOpenDevicePanelRegKeyWorker
CmOpenDeviceRegKey
CmOpenDeviceRegKeyWorker
CmQueryDevicePanelPldProperty
CmRealKCBToVirtualPath
CmRegisterMachineHiveLoadedNotification
CmServiceFilterCallback
CmSetAcpiHwProfile
CmSetCallbackObjectContext
CmSiAllocateMemory
CmUpdateDevicePanel
CmUpdateDevicePanelInterface
CmVirtualKCBToRealPath
CmpAddRemoveContainerToCLFSLog
CmpAddStringToMapping
CmpAdminSystemSecurityDescriptor
CmpAllocate
CmpAllocateLayerInfoForKcb
CmpAllocateTransientPoolWithTag
CmpAllocateUnitOfWork
CmpAppendLine
CmpAppendSection
CmpAppendValue
CmpBuildVirtualReplicationStack
CmpCallCallBacksEx
CmpCanGrowHive
CmpCheckExeOwnerForPca
CmpClaimGlobalQuota
CmpClearKeyAccessBits
CmpCloneHwProfile
CmpCmdInit
CmpCmdRenameHive
CmpCommitDeleteValueKeyUoW
CmpCommitSetValueKeyUoW
CmpComputeLogFillLevel
CmpCopySyncTree
CmpCopySyncTree2
CmpDiskFullWarning
CmpDoQueueSystemHiveHysteresis
CmpDoTransWriteLogRecord
CmpDoWritethroughReparse
CmpGenerateAppHiveSecurityDescriptor
CmpGetAcpiProfileInformation
CmpGetRegistryValue
CmpGetSymbolicLinkTarget
CmpGetToken
CmpGetValueData
CmpGetVirtualizationID
CmpHiveRootSecurityDescriptor
CmpInitCmRM
CmpInitHiveFromFile
CmpInitializeDriverStores
CmpInitializeHardwareConfiguration
CmpInitializeKcbCache
CmpInitializeLoadOptions
CmpInitializeMachineDependentConfiguration
CmpInitializeMachineHiveLoadedCallbacks
CmpInitializeNameCache
CmpInitializePreloadedHive
CmpInitializeRegistryNode
CmpInitializeSystemBiosInformation
CmpInitializeSystemHive
CmpInitializeSystemHivesLoad
CmpInitializeTrustedInstallerSid
CmpLightWeightPrepareDeleteValueKeyUoW
CmpLightWeightPrepareSetSecDescUoW
CmpLightWeightPrepareSetValueKeyUoW
CmpLinkHiveToMaster
CmpLoadHiveVolatile
CmpLockIXLockIntent
CmpLogCheckpoint
CmpMarkIndexDirty
CmpMergeKeyValues
CmpMountPreloadedHives
CmpOpenHiveFile
CmpOpenSystemDriverHiveContext
CmpParseInfBuffer
CmpPreserveSystemHiveData
CmpQueryFileSecurityDescriptor
CmpQueryNameString
CmpRecordUnloadEventForHive
CmpRegisterCallbackInternal
CmpSetSystemBiosInformation
CmpSetVideoBiosInformation
CmpSnapshotTxOwnerArray
CmpStartCLFSLog
CmpStartRMLog
CmpTransAllocateTrans
CmpUndoDeleteKeyForTrans
CmpVEExecuteVirtualStoreParseLogic
CmpValueEnumStackStartFromKeyNodeStack
CreateMiniNtBootKey
CreateNewEventEntry
CreateTlgAggregateSession
DbgUnicodeStringToAnsiString
DbgkCaptureLiveDump
DbgkQueueUserExceptionReport
DbgkWerAddSecondaryData
DbgkWerCaptureLiveKernelDump
DbgkpCreateNotificationEvent
DbgkpLkmdLaunchSnapApc
DbgkpTriageDumpInitialize
DbgkpWerAllocateNonpagedPool
DbgkpWerAllocatePool
DbgkpWerCaptureLiveFullDump
DbgkpWerCaptureLiveTriageDump
DbgpInsertDebugPrintCallback
DrvDbCreateDatabaseNode
DrvDbDeleteObjectSubKey
DrvDbGetDeviceIdDriverInfMatches
DrvDbGetDriverPackageMappedProperty
DrvDbGetObjectSubKeyCallback
DrvDbGetSecurityDescriptor
DrvDbOpenContext
DrvDbSetDeviceIdDriverInfMatches
DrvDbSetDriverPackageMappedProperty
EmInitSystem
EmProviderRegisterEntry
EmpAllocatePool
EmpClientRuleRegisterNotification
EmpEvaluateTargetRule
EmpEvaluateUpdateRuleEvalState
EmpParseCallbacks
EmpParseRuleExpression
EmpParseRuleTerm
EmpParseRules
EmpParseStrings
EmpParseTargetRuleStringIndexList
EmpParseTargetRules
EmpProviderRegister
EmpQueueRuleUpdateState
EmpRuleParserStackPush
EtwInitializeProcessor
EtwInitializeSiloState
EtwRegisterEventCallback
EtwSetPerformanceTraceInformation
EtwStartAutoLogger
EtwTelemetryCoverageReport
EtwTiLogInsertQueueUserApc
EtwpAddDataSource
EtwpAddMicroarchitecturalPmcToPmcGroup
EtwpAddMicroarchitecturalPmcToRegistry
EtwpAddRegEntryToGroup
EtwpAllocDataBlock
EtwpAllocGuidEntry
EtwpAllocateEventNameFilter
EtwpAllocateKeyNameEntry
EtwpAllocateLbrData
EtwpAllocatePayloadFilterData
EtwpAllocatePmcData
EtwpAllocateStringFilterData
EtwpAllocateTraceBuffer
EtwpApplyContainerFilter
EtwpApplyEventNameFilter
EtwpCCSwapInitializeProcessor
EtwpCCSwapStart
EtwpCapturePreviousRegistryData
EtwpCaptureRegistryData
EtwpCaptureString
EtwpConstructIptData
EtwpCovSampCaptureAllocateApc
EtwpCovSampCaptureAllocateCaptureBuffer
EtwpCovSampCaptureAllocateSampleBuffer
EtwpCovSampCaptureContextStart
EtwpCovSampContextGetModule
EtwpCovSampProcessAddModule
EtwpCovSampProcessEnsureContext
EtwpCovSampStackHashTableAlloc
EtwpCoverageEnsureContext
EtwpCoverageEnsureStringBuffer
EtwpCoverageResetCP
EtwpCoverageSamplerAllocateTable
EtwpCoverageSamplerQuery
EtwpCreateNtFileName
EtwpCreatePerfectHashFunction
EtwpCreateUmReplyObject
EtwpCrimsonProvEnableCallback
EtwpDequeueBufferPendingCompression
EtwpEnableAutoLoggerProvider
EtwpEnableStackCaching
EtwpEnableTrace
EtwpEnumerateAddressSpace
EtwpEnumerateAutologgerPath
EtwpEnumerateWorkingSet
EtwpEventWriteFull
EtwpExpandFileName
EtwpFinalizeHeader
EtwpFindDebugId
EtwpGenerateFileName
EtwpGetAutoLoggerEventNameFilter
EtwpGetAutoLoggerLevelKwFilter
EtwpGetAutoLoggerProviderFilter
EtwpGetGuidSecurityDescriptor
EtwpGetTrackingLockSlotForThread
EtwpInitLoggerContext
EtwpInitializeAutoLoggers
EtwpInitializeCompressedWriter
EtwpInitializeCompression
EtwpInitializeStackTracing
EtwpLoadMicroarchitecturalPmcs
EtwpLoadMicroarchitecturalProfileGroup
EtwpLoadMicroarchitecturalProfileSource
EtwpLogMemInfoWs
EtwpLogMemNodeInfo
EtwpLogPmcCounterRundown
EtwpLogSessionWorkingSetInfo
EtwpMdlHashTableAllocator
EtwpObjectHandleEnumCallback
EtwpObjectTypeRundown
EtwpPoolRunDown
EtwpPreserveLogger
EtwpPreserveMdlList
EtwpProcessThreadImageRundown
EtwpProcessorRundown
EtwpQueryPartitionRegistryInformation
EtwpQueryPersistedMemory
EtwpQueryProcessCommandLine
EtwpQueueNotification
EtwpQueuePerfMemInfoWorkItem
EtwpQueueReply
EtwpReadConfigParameters
EtwpRealtimeCreateLogfile
EtwpRealtimeFlushSavedBuffers
EtwpRealtimeNotifyConsumers
EtwpReferenceLastBranchLookasideList
EtwpReferenceStackLookasideList
EtwpRegisterPartitionPages
EtwpRegisterPrivateSession
EtwpRegisterProvider
EtwpRemoveMicroarchitecturalPmcFromPmcGroup
EtwpRemoveMicroarchitecturalPmcFromRegistry
EtwpSavePersistedLoggersWorker
EtwpSendDbgId
EtwpSetPmcProfileSource
EtwpSetProviderTraitsKm
EtwpSetProviderTraitsUm
EtwpSetSoftRestartInformation
EtwpTiAllocVadQueryEventWriteWorkItemContext
EtwpTiQueryVad
EtwpTiVadQueryEventWriteCallback
EtwpTraceHandle
EtwpTrackBinaryForSession
EtwpTrackDecodeGuidForSession
EtwpUpdateDisallowedGuids
EtwpUpdateFileHeader
EtwpUpdateFilterData
EtwpUpdateLevelKwFilter
EtwpUpdatePeriodicCaptureState
EtwpUpdatePidFilterData
EtwpUpdateSchematizedFilterData
ExAllocateAutoExpandPushLock
ExAllocateCacheAwarePushLock
ExAllocateCacheAwareRundownProtection
ExAllocateCallBack
ExAllocatePool
ExAllocatePoolWithQuotaTag
ExAllocateTimerInternal2
ExCopyWakeTimerInfo
ExEnableHandleTracing
ExEnumerateSystemFirmwareTables
ExGetNextWakeTime
ExGetPoolTagInfo
ExGetSessionPoolTagInfo
ExGetSystemFirmwareTable
ExHandleSPCall2
ExInitializeLeapSecondData
ExInitializeProcessor
ExInitializeSessionHeapManager
ExRegisterBootDevice
ExRegisterCallback
ExRegisterHost
ExShareAddressSpaceWithDevice
ExStartRecordingIRTimerExpiries
ExpAllocateAsid
ExpAllocateHandleTable
ExpAllocateOwnerEntryForLegacyShim
ExpAllocateStringRoutine
ExpAllocateTablePagedPoolNoZero
ExpConvertArcName
ExpConvertSignatureName
ExpCovCreateUnloadedModuleEntry
ExpCovQueryHypervisorInformation
ExpCovQueryInformation
ExpCovReadRequestBuffer
ExpExpandResourceOwnerTable
ExpFindArcName
ExpFindDiskSignature
ExpGenuinePolicyPostProcess
ExpGetDriveGeometry
ExpGetPartitionTableInfo
ExpGetProcessInformation
ExpGetSystemFlushInformation
ExpGetSystemPlatformBinary
ExpInitSystemPhase1
ExpInitializeSvm
ExpKdPullRemoteFileForUser
ExpKeyedEventInitialization
ExpOsProductCacheProviderHelper
ExpParseAndUpdateLeapSecondData
ExpParseEfiPath
ExpParseSignatureName
ExpPartitionCreatePoolInternal
ExpPartitionInitialize
ExpPrepareNewSvmDevice
ExpQuerySystemInformation
ExpReadLeapSecondData
ExpRegisterFirmwareTableInformationHandler
ExpSaInitialize
ExpSaPageGroupDescriptorAllocate
ExpSetBootEntry
ExpSetDriverEntry
ExpSetKernelDataProtection
ExpSystemErrorHandler2
ExpTimeZoneInitSiloState
ExpTranslateEfiPath
ExpTranslateNtPath
ExpTranslateSymbolicLink
ExpUnicodeStringToNonpagedWStr
ExpWaitForResource
ExpWatchLicenseInfoWork
ExpWatchProductTypeInitialization
ExpWnfAllocateScopeInstance
ExpWnfAllocateScopeMap
ExpWnfCreateNameInstance
ExpWnfCreateProcessContext
ExpWnfGetPermanentPerUserDataStoreHandle
ExpWnfLookupPermanentName
ExpWnfPopulateStateData
ExpWnfPopulateStateDataRemoteCallback
ExpWnfResolveScopeInstance
ExpWnfSubscribeNameInstance
ExpWnfWriteStateData
ExpWorkQueueManagerThread
FsFilterAllocateCompletionStack
FsFilterInit
FsRtlAddEntry
FsRtlAddToTunnelCacheEx
FsRtlAllocateExtraCreateParameter
FsRtlAllocatePool
FsRtlAllocatePoolWithTag
FsRtlCancelNotify
FsRtlFindInTunnelCacheEx
FsRtlGetCompatibilityModeValue
FsRtlGetTunnelParameterValue
FsRtlInitSystem
FsRtlInsertPerFileContext
FsRtlInsertPerFileObjectContext
FsRtlIsDbcsInExpression
FsRtlNotifyFilterChangeDirectory
FsRtlNotifyFilterChangeDirectoryLite
FsRtlNotifyFilterReportChange
FsRtlNotifyFilterReportChangeLiteEx
FsRtlNotifyInitializeSync
FsRtlRegisterFileSystemFilterCallbacks
FsRtlTruncateBaseMcb
FsRtlpAcknowledgeOplockBreakByCacheFlags
FsRtlpAllocateOplock
FsRtlpHeatRegisterVolume
FsRtlpOplockFsctrlInternal
FsRtlpOplockSendModernAppTermination
FsRtlpOplockStoreKeyForDeleteOperation
FsRtlpPostStackOverflow
FsRtlpQueryValueKey
FsRtlpRegisterProviderWithMUP
FsRtlpWaitOnIrp
HalBuildScatterGatherListV2
HalInitializeBios
HalacpiIrqTranslateResourceRequirementsIsa
HalpAllocateCommonBufferThin
HalpAllocateDomainCommonBufferInternal
HalpAllocateKInterrupt
HalpAuditAllocateRsdtArrayTable
HalpAuditQuerySlicAddresses
HalpBuildScatterGatherList
HalpBuildScatterGatherListThin
HalpCopyDebugDescriptor
HalpCreateSecondaryIcEntry
HalpDmaFinalizeDoubleBufferingDisposition
HalpDmaInsertDeviceObjectByToken
HalpDpReplaceBegin
HalpHandlePreviousMcaErrors
HalpHvInitMcaPcrContext
HalpInitChipHacks
HalpInitGenericErrorSourceEntry
HalpInitGenericErrorSourceEntryV2
HalpIrtExtendApertureRange
HalpIrtExtendRemappingRange
HalpIumGetNextVariableName
HalpIumGetVariable
HalpIumSetVariable
HalpKdEnumerateDebuggingDevices
HalpMcExportAllData
HalpMcRecordProcessorInfo
HalpMmAllocCtxAllocBuffer
HalpPciReportMmConfigAddressRange
HalpPmemErrorDeferredRecovery
HalpPreAllocateKInterrupts
HalpQueryAcpiResourceRequirements
HalpQueryDeviceRelations
HalpQueryIdFdo
HalpQueryIdPdo
HalpQueryResources
HalpQueueMapBufferWorker
HalpRegisterDeviceInUse
HalpReportResourceUsage
HdlspAddLogEntry
HdlspSetBlueScreenInformation
HeadlessInit
HeadlessTerminalAddResources
HsaGrowPasidTable
HvSnapshotHiveToOffsetArray
HvStoreModifiedData
HvValidateOrInvalidatePrimaryFileHeader
HvWriteExternal
HvWriteHivePrimaryFile
HvlpAllocatePageListResources
HvlpInitializeSvmIommuSupport
HvpAllocateLogBuffers
HvpFindNextDirtyBlock
HvpGenerateLogEntry
HvpMapHiveImageFromFile
IdnaMemAlloc
InitBootProcessor
IoAcquireRemoveLockEx
IoAllocateDriverObjectExtension
IoAllocateMdl
IoBoostThreadIoPriority
IoCaptureLiveDump
IoCreateDeviceSecure
IoDiskIoAttributionAllocate
IoGetDeviceInterfaceAlias
IoGetDeviceProperty
IoInitializeProcessor
IoInitializeTimer
IoIsValidNameGraftingBuffer
IoMakeAssociatedIrpPriv
IoQueryDeviceDescription
IoQueryFileDosDeviceName
IoRaiseHardError
IoRaiseInformationalHardError
IoReadPartitionTable
IoRegisterBootDriverReinitialization
IoRegisterContainerNotification
IoRegisterDriverReinitialization
IoRegisterFsRegistrationChangeMountAware
IoRegisterIoTracking
IoRegisterLastChanceShutdownNotification
IoRegisterPlugPlayNotification
IoRegisterPriorityCallback
IoRegisterShutdownNotification
IoReplaceFileObjectName
IoReportDetectedDevice
IoReportHalResourceUsage
IoReportTargetDeviceChangeAsynchronous
IoRequestDeviceEjectEx
IoRequestDeviceRemovalForReset
IoReserveKsrPersistentMemory
IoSetCompletionRoutineEx
IoVolumeDeviceNameToGuidPath
IoVolumeDeviceToDosName
IoWMIAllocateInstanceIds
IoWMIDeviceObjectToInstanceName
IoWMIQuerySingleInstance
IoWMISuggestInstanceName
IoWMIWriteEvent
IoWritePartitionTable
IommupHvInitializeLibrary
IopAllocateErrorLogEntry
IopAllocateGenericTableEntry
IopAllocateIrpExtension
IopAllocateIrpPrivate
IopAllocatePassiveInterruptBlock
IopAllocateUnicodeString
IopAppendLegacyVeto
IopAttachDeviceToDeviceStackSafe
IopBuildGlobalSymbolicLinkString
IopCaptureObjectName
IopChangeInterfaceType
IopChildToRootTranslation
IopCombineCmResourceList
IopCombineLegacyResources
IopConnectInterrupt
IopConnectLineBasedInterrupt
IopConnectMessageBasedInterrupt
IopCreateArcName
IopCreateCmResourceList
IopCreateDefaultDeviceSecurityDescriptor
IopCreateFile
IopCreateLegacyDeviceIds
IopCreateSecurityDescriptorPerType
IopCreateVpb
IopDeviceObjectFromSymbolicName
IopExecuteHardwareProfileChange
IopFileUtilRename
IopFileUtilWalkDirectoryTreeBottomUp
IopFileUtilWalkDirectoryTreeHelper
IopGetBootDiskInformation
IopGetDeviceInterfaces
IopGetInterruptConnectionData
IopGetLegacyVetoListDrivers
IopGetPersistedStateLocation
IopGetPhysicalMemoryBlock
IopGetRelatedFileName
IopGetRootDevices
IopGetSetStreamIdentifier
IopGraftName
IopInitDumpCapsuleSupport
IopInitializeBootDrivers
IopInitializeDeviceInstanceKey
IopInitializeResourceMap
IopInitializeTriageDumpData
IopIsPciRootBus
IopLegacyResourceAllocation
IopLiveDumpAllocAndInitResources
IopLiveDumpAllocateDumpBuffers
IopLiveDumpAllocateMappingResources
IopLiveDumpWriteDumpFile
IopLiveDumpWriteDumpFileWithExtraPages
IopLoadBootHotPatches
IopParseDevice
IopPnPDispatch
IopProcessSetInterfaceState
IopQueryBusResourceUpdateInterface
IopQueryDeviceResources
IopQueryDockRemovalInterface
IopQueryNameInternal
IopQueryResourceHandlerInterface
IopRegisterDeviceInterface
IopReportBootResources
IopResourceRequirementsListToReqList
IopSetFileMemoryPartitionInformation
IopSetFileObjectIosbRange
IopSetupArbiterAndTranslators
IopSymlinkApplyToOpenedName
IopSymlinkRememberJunction
IopSymlinkUpdateECP
IopTranslateAndAdjustReqDesc
IopTranslatorHandlerIo
IopUpdateSecureDeviceClassState
IopValidateJunctionTarget
IopVerifierExAllocatePool
IopVerifierExAllocatePoolWithQuota_1
IopVerifierExAllocatePool_0
IopVerifierExAllocatePool_1
IopVerifierExAllocatePool_2
IopVerifierExAllocatePool_3
IopVerifierExAllocatePool_4
IopVerifierExAllocatePool_5
IovpBuildDriverObjectList
IovpSessionDataCreate
KGetAppModelStateSeparatedRegKeyPath
KdInitSystem
KdPullRemoteFileEx
KdRegisterPowerHandler
KdSetDbgPrintBufferSize
KeAllocateCalloutStackEx
KeAllocateXStateContext
KeInitSystem
KeInitializeSecondaryInterruptServices
KeInitializeTimerTable
KeInitializeUmsThread
KeProcessorProfileControlArea
KeQueryNumaGraph
KeSetTracepoint
KeStartAllProcessors
KeStartProfile
KiAllocateCpuSetData
KiComputeNumaCosts
KiDpcRuntimeHistoryHashTableAllocate
KiGetSystemServiceTraceTable
KiInitializeMTRR
KiInitializeProcessor
KiInsertNewDpcRuntime
KiIntRedirectConnnect
KiIntSteerConnect
KiPerformGroupConfiguration
KiRegisterNmiSxCallback
KiSwInterruptDispatch
KiTpBuildExcludedKernelTracepointRangeList
KiUpdateSavedSupervisorState
KsepPoolAllocateNonPaged
KsepPoolAllocatePaged
LdrUnloadAlternateResourceModuleEx
LdrpQueryValueKey
LdrpSetAlternateResourceModuleHandle
LkmdTelCreateReport
MIDL_user_allocate
MUIInitializeResourceLock
MdlInvariantInsertMdlInfo
MfgInitSystem
MiMarkHugePfnBad
MuiRegAllocArray
NP_CONTEXT::NpNodeAllocate
NP_CONTEXT::NpStart
NormalizationListEntry_Alloc
NtDisplayString
NtDrawText
NtEnumerateBootEntries
NtEnumerateDriverEntries
NtFilterBootOption
NtInitiatePowerAction
NtMapCMFModule
NtNotifyChangeSession
NtOpenObjectAuditAlarm
NtPowerInformation
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtQueryLicenseValue
NtQuerySystemEnvironmentValue
NtQuerySystemEnvironmentValueEx
NtSetBootEntryOrder
NtSetCachedSigningLevel2
NtSetDriverEntryOrder
NtSetInformationFile
NtSetInformationJobObject
NtSetInformationProcess
NtSetInformationThread
NtSetSystemEnvironmentValue
NtSetSystemEnvironmentValueEx
NtSetSystemInformation
NtSetUuidSeed
NtStartProfile
NtSystemDebugControl
NtTranslateFilePath
NtWaitForWorkViaWorkerFactory
ObCreateKernelObjectsSD
ObCreateObjectTypeEx
ObCreateSymbolicLink
ObGetObjectInformation
ObGetSiloRootDirectoryPath
ObInitializeProcessor
ObRegisterCallbacks
ObWaitForMultipleObjects
ObpAllocateAndQuerySecurityDescriptorInfo
ObpAllocateObject
ObpCallPreOperationCallbacks
ObpCaptureBoundaryDescriptor
ObpCaptureObjectName
ObpCreateCacheEntry
ObpCreateDefaultObjectTypeSD
ObpCreateHandle
ObpCreateTypeArray
ObpGetDosDevicesProtection
ObpGetObjectRefInfo
ObpGetObjectSecurity
ObpGetSilosRootDirectory
ObpGetTraceIndex
ObpInitStackAndObjectTables
ObpInitStackTrace
ObpInsertDirectoryEntry
ObpInsertHandleCount
ObpLookupObjectName
ObpParseSymbolicLinkEx
ObpRefillWorkItemFreeList
ObpRegisterObject
ObpSetDeviceMap
ObpSetObjectAuditInfo
ObpStartRuntimeStackTrace
PdcPortOpenCommon
PdcTaskClientRegister
PerfDiagpRequestState
PerfDiagpSaveActiveDCLLogFileName
PerfDiagpStartPerfDiagLogger
PerfLogImageUnload
PfFbBufferListAllocate
PfFbBufferListAllocateTemporary
PfSetSuperfetchInformation
PfSnAllocateEnablePrefetcherTimer
PfSnArrayGrow
PfSnAsyncPrefetchWorker
PfSnBeginTrace
PfSnBuildDumpFromTrace
PfSnGetFileInformation
PfSnGetPrefetchInstructions
PfSnInitializePrefetcher
PfSnOpenVolumesForPrefetch
PfSnPopulateReadList
PfSnPreallocatePrefetchHeader
PfSnPrefetchCacheCtxStart
PfSnPrefetchScenario
PfSnScenarioAlloc
PfSnTraceBufferAllocate
PfTAllocateBuffers
PfTCreateTraceDump
PfpCopyUserPfnPrioRequest
PfpCreateEvent
PfpFileBuildReadList
PfpPrefetchFiles
PfpPrefetchRequest
PfpPrefetchRequestPerform
PfpQueryFileExtentsRequest
PfpRpCHashDeleteEntries
PfpRpCHashGrow
PfpRpControlRequestCopy
PfpRpFileKeyUpdate
PfpServiceMainThreadBoostPrep
PfpSourceBuildVaArray
PfpStartLoggingHardFaultEvents
PfpVolumeOpenAndVerify
PiAuAllocateAndInitializeSid
PiAuCheckClientInteractive
PiAuCheckTokenMembership
PiAuCreateLocalSystemSecurityObject
PiAuCreateStandardSecurityObject
PiAuGetDriverDataDirectorySecurityObject
PiAuGetServiceStateSecurityObject
PiAuGetStateDirectorySecurityObject
PiAuditDeviceOperation
PiBuildDeviceNodeInstancePath
PiCMCreateDevice
PiCMEnumerateSubKeys
PiCMGenerateDeviceInstance
PiCMGetDeviceIdList
PiCMGetDeviceInterfaceAlias
PiCMGetObjectList
PiCMGetObjectProperty
PiCMGetObjectPropertyKeys
PiCMGetRegistryProperty
PiCMGetRelatedDeviceInstance
PiCMQueryRemove
PiControlGetDeviceStack
PiControlGetSetDeviceStatus
PiCreateDriverSwDeviceCallback
PiDcAllocateGenericTableEntry
PiDcInitUpdateProperties
PiDcResetChildDeviceContainerCallback
PiDeferSetInterfaceState
PiDevCfgConfigureDevice
PiDevCfgConfigureDeviceInterfaces
PiDevCfgConfigureSoftwareDevices
PiDevCfgConvertPropertyFromValue
PiDevCfgCopyDeviceKey
PiDevCfgCopyObjectProperties
PiDevCfgCopyVariableData
PiDevCfgFindDeviceDriver
PiDevCfgFindDeviceMigrationNode
PiDevCfgGetKeySecurityDescriptor
PiDevCfgInitDriverDatabaseCallback
PiDevCfgInitResolveContext
PiDevCfgProcessDeviceCallback
PiDevCfgPushCopyKeyEntry
PiDevCfgPushDriverNodeEntry
PiDevCfgQueryDeviceMigrationNode
PiDevCfgQueryDriverNode
PiDevCfgQueryIncludedDriverNode
PiDevCfgQueryObjectProperties
PiDevCfgQueryPolicyStringList
PiDevCfgQueryResolveValue
PiDevCfgResolveMultiSzValue
PiDevCfgResolveVariable
PiDevCfgResolveVariableConstant
PiDevCfgResolveVariableDeviceProperty
PiDevCfgResolveVariableExpression
PiDevCfgResolveVariableFormatString
PiDevCfgResolveVariableGenerateGuid
PiDevCfgResolveVariableKeyHandle
PiDevCfgResolveVariableKeyValue
PiDeviceRegistration
PiDmAllocateGenericTableEntry
PiDmCacheDataEncode
PiDmListEnumObjectsWithCallback
PiDmListInitEnumCallback
PiDmObjectCreate
PiDmObjectManagerPopulate
PiDmObjectProcessPropertyChange
PiDmaGuardQueueInsertEntry
PiDqActionDataCreate
PiDqActionDataGetRequestedProperties
PiDqAllocateGenericTableEntry
PiDqGetRelativeObjectRegPath
PiDqGrowPropertyArray
PiDqIrpQueryCreate
PiDqObjectActionQueueEntryCreate
PiDqObjectManagerServiceActionQueue
PiDqPnPGetObjectProperty
PiDqPnPGetObjectPropertyKeys
PiDqPnPGetObjectPropertyLocales
PiDqQueryActionQueueEntryCreate
PiDqQueryCreate
PiDqQueryEvaluateFilter
PiDqSerializationAlloc
PiDrvDbCreateNode
PiDrvDbEnumDriverStoreNodes
PiDrvDbOverlayCopyKeys
PiDrvDbOverlayNodeHive
PiDrvDbQuerySyncNodesUpdated
PiDrvDbRegisterNode
PiDrvDbRegisterNodeCallback
PiDrvDbResolveFilePathKeyValues
PiEventAllocatePendingEjectRelations
PiFindDevInstMatch
PiGetDefaultMessageString
PiGetDeviceRegProperty
PiGetStateRootPath
PiInitializeDevice
PiIommuAllocateExtension
PiLastGoodCopyKeyContents
PiLastGoodRevertCopyCallback
PiLastGoodRevertLastKnownDirectory
PiNormalizeDeviceText
PiNotifyCiDriverBlocked
PiPnpAddDeviceToPdoDeviceListEnumContext
PiPnpRtlBeginOperation
PiPnpRtlCmActionCallback
PiPnpRtlGatherContainerRemoveInfo
PiPnpRtlGatherDeviceDeleteInfo
PiPnpRtlGatherInstallerClassChangeInfo
PiPnpRtlGatherInterfaceDeleteInfo
PiPnpRtlGatherPanelRemoveInfo
PiPnpRtlGetFilteredDeviceList
PiPnpRtlInterfaceFilterCallback
PiPnpRtlObjectActionCallback
PiPnpRtlObjectEventCreate
PiPnpRtlObjectEventWorker
PiPnpRtlOperationAllocateGenericTableEntry
PiPnpRtlServiceFilterCallback
PiProcessDriverInstance
PiProfileUpdateDeviceTree
PiQueryDeviceRelations
PiQueryPowerDependencyRelations
PiQueryPowerRelations
PiQueryRemovableDeviceOverride
PiRegisterKernelSoftRestartNotification
PiSwAddPdoAssociation
PiSwAllocMem
PiSwAllocateGenericTableEntry
PiSwDeviceCreate
PiSwDeviceMakeCompatibleIds
PiSwInterfaceCreate
PiSwPdoPnPDispatch
PiSwPnPInfoInit
PiSwQueuedCreateInfoCreate
PiSwUpdateArrayProperties
PiUEventInitClientRegistrationContext
PiUEventNotifyClient
PiUEventNotifyTargetDeviceChange
PiUEventNotifyUserMode
PiUEventProcessBroadcastNotifications
PiUEventQueueBroadcastEventEntry
PiUpdateDriverDBCache
PipAddRequestToEdge
PipAllocateDeviceNode
PipApplyFunctionToServiceInstances
PipCallDriverAddDevice
PipCallDriverAddDeviceQueryRoutine
PipCreateComputerId
PipCreateEntry
PipCreateNewDependencyEdge
PipFindDeviceOverrideEntry
PipGenerateContainerID
PipGetDeviceObjectLocation
PipGetPersistentMemory
PipGetRegistrySecurityWithFallback
PipInitComputerIds
PipInitDeviceOverrideCache
PipIommuRetrieveDeviceId
PipMakeGloballyUniqueId
PipMigrateCleanServiceCallback
PipProcessPendingObjects
PipResetDevices
PipUpdateDeviceProducts
PnpAddVetoInformation
PnpAllocateCriticalMemory
PnpAllocateDeviceInstancePath
PnpAllocateGenericTableEntry
PnpAllocateMultiSZ
PnpAllocatePWSTR
PnpAllocateWatchdog
PnpBootPhaseComplete
PnpBuildCmResourceList
PnpBuildUnsafeRemovalDeviceList
PnpBusTypeGuidGetIndex
PnpBusTypeGuidInitialize
PnpCallDriverQueryServiceHelper
PnpCheckDeviceIdsChanged
PnpCmResourcesToIoResources
PnpConcatPWSTR
PnpCopyDevProperty
PnpCopyDevPropertyArray
PnpCopyResourceList
PnpCreateDeviceEventEntry
PnpCtxCreateNode
PnpCtxOpenMachine
PnpDeferNotification
PnpDeleteDeviceInterfaces
PnpDeviceCompletionRequestCreate
PnpDisableDeviceInterfaces
PnpFilterResourceRequirementsList
PnpGetDeviceLocationStrings
PnpGetDeviceResourcesFromRegistry
PnpGetEnumSecurityDescriptor
PnpGetPropertiesSecurityDescriptor
PnpHardwareConfigCreateBootDriverFlags
PnpInitializeDeviceEvents
PnpInitializeNotifyEntry
PnpInsertEventInQueue
PnpLogDeviceConflictingResource
PnpLookupArbitersNewResources
PnpMergeFilteredResourceRequirementsList
PnpMultiSzDeleteString
PnpOpenPropertiesKey
PnpProcessAssignResources
PnpProfileUpdateHardwareProfile
PnpQueueQueryAndRemoveEvent
PnpReadDeviceConfiguration
PnpRebalance
PnpRecordBlackboxDelayedRemoveWorkerInformation
PnpRecordBlackboxDeviceCompletionQueueInformation
PnpRecordBlackboxPnpEventInformation
PnpRecordBlackboxPnpEventWorkerInformation
PnpRegMultiSzToUnicodeStrings
PnpRegQueryValueIndirect
PnpRemoveLockedDeviceNode
PnpRequestDeviceAction
PnpSetInterruptInformation
PnpUnicodeStringToWstr
PnpUnloadAttachedDriver
PnprAddMemoryResources
PnprAddProcessorResources
PnprAllocateMappingReserves
PnprCollectResources
PnprGetPluginDriverImagePath
PnprInitiateReplaceOperation
PnprMmAddRange
PoCreateThermalRequest
PoDiagCaptureUsermodeStack
PoDisableSleepStates
PoFxRegisterDebugger
PoFxSetTargetDripsDevicePowerState
PoInitializeBroadcast
PoRegisterCoalescingCallback
PoRegisterPowerSettingCallback
PopAnsiStringToUnicodeString
PopAssociateThermalRequest
PopAvlAllocatePowerRequestStats
PopBcdReadElement
PopBcdSetDefaultResumeObjectElements
PopBcdSetupResumeObject
PopBlackBoxUpdate
PopBootStatCheckIntegrity
PopBootStatGet
PopBootStatSet
PopCaptureReasonContext
PopCloneRange
PopCloneUnicodeString
PopCreateHiberFileSecurityDescriptor
PopCreateTimebrokerServiceSid
PopDiagQueryDevicePropertyString
PopDiagTraceCsExitReason
PopDiagTracePowerRequestCreate
PopDirectedDripsDiagBroadcastTreeBegin
PopDirectedDripsDiagCreateDeviceDiagnostic
PopDirectedDripsDiagInsertErrorRecord
PopDirectedDripsUmCreateTestDevice
PopDirectedDripsUmQueryCapabilities
PopDirectedDripsUmTestDeviceAllocate
PopEnableHiberFile
PopEtAggregateGet
PopEtBucketsAllocate
PopEtInit
PopEtInternerAllocate
PopEtProcessSnapshotCreate
PopExtendConnectionState
PopFxBuildDripsBlockingDeviceList
PopFxConvertV1Components
PopFxCreateDeviceCommon
PopFxDuplicateUniqueId
PopFxInitializeSocSubsystemStaticInfo
PopFxLogSocSubsystemMetadata
PopFxPepPerfInfoQuery
PopFxQueryBiosDeviceName
PopFxRegisterComponentPerfStates
PopFxRegisterDeviceWorker
PopFxRegisterPluginEx
PopFxTraceDeviceRegistration
PopFxTracePerfRegistration
PopFxVerifyDependencies
PopGenerateDeviceFriendlyName
PopGetBitlockerKeyLocation
PopGetCurrentWakeInfos
PopGetDope
PopGetHwConfigurationSignature
PopGetPowerRequestListInfo
PopHiberInitializeResources
PopIdleWakeGenerateDescriptionString
PopIdleWakeNotifyModernStandbyEnter
PopIdleWakeSystemImageCallback
PopInitPlatformSettings
PopLoadResumeContext
PopLogDisabledSleepReason
PopLogSleepDisabled
PopLoggingInformation
PopNetInitialize
PopNewWakeInfo
PopNewWakeSource
PopPdcCsDeviceNotification
PopPepRegisterDevice
PopPlInitComponent
PopPlInitComponents
PopPlInitDevice
PopPlInitDevices
PopPlInitPowerPlane
PopPlInitWString
PopPluginQuerySocSubsystemMetadata
PopPowerAggregatorSnapDiagnosticContext
PopPowerInformationInternal
PopPowerRequestAllocate
PopPreallocateHibernateMemory
PopProcessWakeSourceWork
PopReadPagesFromHiberFile
PopReadRegKeyValue
PopRecordPepWorkorderBlackboxInformation
PopRecordPoIrpBlackboxInformation
PopRecordPowerWatchdogBlackboxInformation
PopRegisterCoolingExtensionProtection
PopRequestShutdownWait
PopSetHiberFileMcb
PopSetPowerSettingValue
PopSetWatchdog
PopSnapSystemIdleContext
PopThermalHandlePreviousShutdown
PopTraceThermalRequestActiveActivity
PopTraceThermalRequestPassiveHistogram
PopUmpoInitializeChannel
PopUmpoProcessMessages
PopUmpoSendPowerMessage
PopUmpoSendPowerRequestCreate
PopUmpoSendPowerRequestOverrideQuery
PopUnicodeStringDeepCopy
PopUpdateWakeSource
PopWakeSourceGetDeviceProperty
PpBootDDBHelper
PpForEachDeviceInstanceDriver
PpmAllocWmiEvent
PpmAllocatePerfCheck
PpmAllocateQueryTable
PpmEventTraceCoordinatedIdleStates
PpmEventTracePlatformIdleAccounting
PpmEventTracePreVetoAccounting
PpmEventTraceProcessorIdle
PpmEventTraceProcessorIdleAccounting
PpmEventTraceProcessorPerformanceDomainRundown
PpmIdleInitializeConcurrency
PpmInitHeteroEngine
PpmInstallCoordinatedIdleStates
PpmInstallNewIdleStates
PpmInstallPlatformIdleStates
PpmParkRegisterParking
PpmParkSteerInterrupts
PpmPerfResizeHistory
PpmQueryPlatformStateResidency
PpmRegisterPerfStates
PpmRegisterProfiles
PpmSetSimulatedLoad
PpmUpdateIdleVeto
PpmWmiIdleAccountingProcedure
PsAdjustBasicEnclaveThreadList
PsBoostThreadIoEx
PsDispatchIumService
PsGetAllocatedFullProcessImageName
PsGetProcessEnclaveModuleInfo
PsInitializeQuotaSystem
PsLoadVsmEnclaveData
PsRegisterSiloMonitor
PsSetProcessWin32Process
PspAddProcessToWorkingSetChangeList
PspAllocStorage
PspAllocateAndQueryNotificationChannel
PspAllocateProcess
PspAllocateRateControl
PspAllocateThread
PspAssignProcessQuotaBlock
PspConvertSiloToServerSilo
PspCreateSecureThread
PspEstablishJobHierarchy
PspInitPhase0
PspInitializeFullProcessImageName
PspInitializeProtectedProcessParameters
PspInitializeSiloStructures
PspInitializeSystemPartitionPhase0
PspInsertProperty
PspIumAllocatePartitionState
PspIumAllocateSecurePool
PspLazyInitializeStorageExpansion
PspQueryRateControlHistory
PspReadDfssConfigurationValues
PspRecordCrashedProcessIntoBlackbox
PspSetJobIoRateControlForVolume
PspSetMinimalProcessName
PspSiloInitializeSystemRootSymlink
QueryRegistryHideMachine
RawInitializeVcb
RawQueryFileSystemInformation
RegRtlCopyTreeInternal
RegRtlCreateTreeTransacted
RegRtlDeletePathInternal
RegRtlDeleteTreeInternal
RegRtlEnumKey
RegRtlEnumKeyWithCallback
RegRtlEnumValue
RegRtlQueryKeyPathName
RegRtlQueryValue
ResFwpPageOutBackground
RtlCheckBootStatusIntegrity
RtlCreateRvaList
RtlCreateSystemVolumeInformationFolder
RtlExpandHashTable
RtlGenerateClass5Guid
RtlGetPersistedStateLocation
RtlInitializeBootStatDataCache
RtlInitializeExceptionLog
RtlNormalizeSecurityDescriptor
RtlQueryRegistryValueWithFallback
RtlUpdateImportRelocationsInImage
RtlpAllocDeallocQueryBuffer
RtlpAllocateAtom
RtlpAllocateSecondLevelDir
RtlpAllowsLowBoxAccess
RtlpCombineAcls
RtlpComputeMergedAcl
RtlpCreateHashTable
RtlpCreateServerAcl
RtlpCtAllocateMemory
RtlpCtContextInit
RtlpCtInitializeNotificationEvent
RtlpCtInitializeWorkItem
RtlpFcNotifyFeatureUsageTarget
RtlpGetBootStatusPathFromRegistry
RtlpGetWindowsPolicy
RtlpIsNameInExpressionPrivate
RtlpLoadPolicyLanguageSpec
RtlpMuiRegAddAlternateCodePage
RtlpMuiRegCreateKernelRegistryInfo
RtlpMuiRegCreateRegistryInfo
RtlpMuiRegLoadLicInformation
RtlpNewSecurityObject
RtlpSetSecurityObject
RtlpSysVolCheckOwnerAndSecurity
RtlpSysVolCreateSecurityDescriptor
RtlpTraceDatabaseAllocate
RtlpUpcaseUnicodeStringPrivate
SC_ENV::Allocate
SLGetSubscriptionPfn
SLQueryLicenseValueInternal
SLUpdateLicenseDataInternal
SMKM_STORE::SmStOutSwapPrepareStore
SMKM_STORE::SmStOutSwapStore
SMKM_STORE::SmStStart
SMKM_STORE::SmStTrimWsStoreBatch
SMKM_STORE_MGR::SmCompressCtxCreateThreadParams
SMKM_STORE_MGR::SmPageRead
SMKM_STORE_MGR::SmPageWrite
SMKM_STORE_MGR::SmPerformStoreMaintenance
SMKM_STORE_MGR::SmStoreContentsRundown
SMKM_STORE_MGR::SmStoreTerminate
SPCallServerHandleAuthenticateCaller
SPCallServerHandleCheckLicense
SPCallServerHandleClepKdf
SPCallServerHandleFileIntegrityQuery
SPCallServerHandleFileIntegrityUpdate
SPCallServerHandleFileUsnQuery
SPCallServerHandleGetAppPolicyValue
SPCallServerHandleIsAppLicensed
SPCallServerHandleQueryPolicy
SPCallServerHandleUpdatePolicies
SPCallServerHandleWaitForDisplayWindow
SSHSupportAllocateNonPaged
SSHSupportAllocatePaged
ST_STORE::StAcquireReadContext
ST_STORE::StDeviceIoBuild
ST_STORE::StDmCombineRegion
ST_STORE::StDmStart
ST_STORE::StStart
SafeAllocBlob
SafeReallocBlob
SaveNodeDistanceInformation
SbpAddTransportToInstance
SbpStartLanman
SddlpAlloc
SddlpReAlloc
SddlpUuidToString
SeAccessCheckByTypeWithAdminlessChecks
SeAppendPrivileges
SeAuditProcessCreation
SeCaptureAcl
SeCaptureLuidAndAttributesArray
SeCaptureObjectTypeList
SeCaptureSecurityDescriptor
SeCaptureSid
SeCaptureSidAndAttributesArray
SeCaptureUnicodeStringStructures
SeCodeIntegritySetInformationProcess
SeLogAccessFailure
SeMakeAnonymousLogonToken
SeMakeAnonymousLogonTokenNoEveryone
SeMakeSystemToken
SeOpenObjectAuditAlarmWithTransaction
SeOpenObjectForDeleteAuditAlarmWithTransaction
SePrivilegePolicyCheck
SeQueryInformationToken
SeRegisterLogonSessionTerminatedRoutine
SeRegisterLogonSessionTerminatedRoutineEx
SeRmReferenceFindCapName
SeSecureBootRegisterPolicy
SeSetLearningModeObjectInformation
SecureDump_EncryptSymmetricKeyWithPublicKey
SecureDump_ReadRegistry
SecureDump_SymmetricEncryptionSetup
SendCaptureStateNotificationsWorker
SepAccessCheckAndAuditAlarmWithAdminlessChecks
SepAddLuidToIndexEntry
SepAddTokenLogonSession
SepAdtDetermineInsertQueue
SepAdtLogAuditRecord
SepAdtMarshallAuditRecord
SepAdtOpenObjectAuditAlarm
SepAdtStagingEvent
SepAdtTokenRightAdjusted
SepAllocateAndInitializeCachedHandleEntry
SepAppendAceToTokenDefaultDacl
SepAppendAceToTokenObjectAcl
SepAssemblePrivileges
SepBuildDefaultCap
SepBuildDefaultCape
SepCaptureAuditPolicy
SepCaptureFqbnArray
SepCaptureHandles
SepCaptureInt64Array
SepCaptureOctetStringArray
SepCaptureTokenSecurityAttributesAndOperationsInformation
SepCaptureTokenSecurityAttributesInformation
SepCaptureTokenSecurityOperations
SepCaptureUnicodeStringArray
SepCheckAndCopySelfRelativeSD
SepCleanupLUIDDeviceMapDirectory
SepCommonAccessCheckExWithAdminlessChecks
SepCopyObjectTypeList
SepCreateClaimAttributes
SepCreateImpersonationTokenDacl
SepCreateLogonSessionTrack
SepCreateSidValuesBlock
SepCreateTokenEx
SepDuplicateClaimAttributes
SepDuplicateSid
SepDuplicateToken
SepExpandDynamic
SepExpandSingletonArrays
SepFilterToken
SepFlattenAcl
SepGetLearningModeObjectInformation
SepGetLogonSessionAccountInfo
SepGetLowBoxNumberEntry
SepGetSidValuesDump
SepGetTokenSessionMapEntry
SepInformFileSystemsOfDeletedLogon
SepInformLsaOfDeletedLogon
SepInitProcessAuditSd
SepInitSystemDacls
SepInitializationPhase1
SepInitializeLowBoxNumberTable
SepInitializeSingletonAttributesStructures
SepInsertOrReferenceSharedSidEntries
SepLengthSidAndAttributesArray
SepLoadNgenLocations
SepMandatorySubProcessToken
SepProbeAndCaptureString_U
SepQueryNameString
SepQueryTypeString
SepReadAndInsertCaps
SepReadAndPopulateCapes
SepReadSingleCap
SepRmCapPoolExpand
SepRmDbInitialization
SepRmFetchGlobalSacl
SepRmGlobalSaclSetWrkr
SepScheduleImageVerificationCallbacks
SepSecureBootCorrectBcd
SepSecureBootUpdateBcdDataForRule
SepSetSingletonEntry
SepSetSystemPaths
SepSetTokenCachedHandles
SepSetTokenCapabilities
SepSetTokenPackage
SepUpdateLogonSessionTrack
SepValidateAndCopyGlobalEntry
SepVariableInitialization
SepVerifyDesktopAppxImage
SepVerifyDesktopAppxPackageName
SiBootEntryGetNtFilePath
SiGetBiosSystemDisk
SiGetBiosSystemPartition
SiGetBootDeviceName
SiGetDriveLayoutInformation
SiGetEfiSystemDevice
SiGetEspFromFirmware
SiGetRegistryValue
SiQueryProperty
SiQuerySystemInformationString
SiTranslateSymbolicLink
SleepstudyHelperBuildBlocker
SleepstudyHelperCreateBlockerFromComponent
SleepstudyHelperCreateBlockerFromDevice
SmAllocWrapper
SmArrayGrow
SmBinaryArrayGrow
SmFpAllocate
SmFpPreAllocate
SmHpBufferAlloc
SmKmAllocateMdlForLock
SmKmStoreFileMakeSecurityDescriptor
SmPrepareForFatalHeapCorruption
SmPrepareForFatalPageError
SshpGenerateDeviceFriendlyName
StEtaStart
StartFirstUserProcess
SysCtxOpenMachine
SysCtxRegOpenCurrentUserKey
TtmDispatchApi
TtmNotifyDeviceArrival
TtmiSetDisplayPowerRequest
TtmiWriteEventToSingleQueue
TtmpInsertPowerRequestToSession
TtmpPowerRequestHashAllocator
TtmpQueueTerminalDisplayStateOntoDevice
VerifierExAllocatePoolWithTag
VfAllocateDomainCommonBuffer
VfAvlInitializeTreeEx
VfAvlReserveNode
VfDeadlockInitialize
VfGetVerifierInformation
VfInitVerifierComponents
VfInitializeBranchTracing
VfIrpDatabaseInit
VfIrpLogRecordEvent
VfIrpLogRetrieveWmiData
VfProbeAndCaptureUnicodeStringBuffer
VfSuspectDriversAllocateEntry
VfSuspectExcludedDriversAllocateEntry
VfTargetEtwRegister
VfThunkAddSpecialDriverThunks
VhdInitialize
VhdiInitializeBootDisk
VhdiMountVhdFile
VhdiQueryVolumeVhdFilePath
VhdiVerifyBootDisk
ViAllocateContiguousMemory
ViAllocateMapRegisterFile
ViCtxAllocateIsrContext
ViDdiDriverEntry
ViDeadlockKernelVerifierLookasideAllocate
ViDifAllocateCallbackStorage
ViFaultsAddAppNoDuplicates
ViFaultsAddTagNoDuplicates
ViHookDmaAdapter
ViInitializeLocalSystemDescriptor
ViPendingDelayCompletion
ViSpecialAllocateCommonBuffer
ViTargetDriversAllocateVerifiedData
ViTargetTrackContiguousMemory
ViThunkCreateSharedExportInformation
ViThunkCreateThunkTable
ViThunkFindAllSpecialTables
VmCreateMemoryRange
VmPrefetchVirtualAddresses
VmpAllocateMemoryRanges
VmpPrefetchForVirtualFault
VmpPrefetchVirtualAddresses
VrpAddNamespaceNodeToList
VrpAllocateDiffHiveEntry
VrpAllocateKeyContext
VrpBuildKeyPath
VrpCreateNamespaceNode
VrpDestroyNamespaceNode
VrpHandleIoctlCreateMultipleNamespaceNodes
VrpHandleIoctlInitializeJobForVreg
VrpHandleIoctlLoadDifferencingHive
VrpInitializeLoadedDifferencingHives
VrpInitializeNamespaceNodeList
VrpPostEnumerateKey
VrpPreLoadKey
VrpPreOpenOrCreate
VrpProcessBufferParameter
VslAllocatePool
VslFinishStartSecureProcessor
VslGetEtwDebugId
VslObtainHotPatchUndoTable
VslStartSecureProcessor
VslpFlushBufferArray
VslpLockPagesForTransfer
VslpSkStartProfiling
WbAlloc
WdipAccessCheck
WdipSemLoadLocalGroupPolicy
WdtpAllocateTimer
WheaAddErrorSource
WheaAddErrorSourceDeviceDriver
WheaInitializeProcessor
WheaPersistBadPageToBcd
WheaRegisterInUsePageOfflineNotification
WheapAllocErrorRecord
WheapCreatePerProcessorInfo
WheapInitErrorReportDeviceDriver
WheapInitializeErrorSource
WheapInitializeErrorSourceTable
WheapLogInitEvent
WheapPfaMemoryCheck
WheapReportPersistedErrorRecord
WheapSaveRecordForLiveDump
WmiVerifierCopyEvent
WmipAddMofResource
WmipAddProviderIdToPIList
WmipAllocGuidEntry
WmipAllocateSingleInstanceWnode
WmipBuildInstanceSet
WmipBuildTraceDeviceList
WmipCachePtrs
WmipCountedToSz
WmipDereferenceEvent
WmipGenerateBinaryMofNotification
WmipGenerateMofResourceNotification
WmipGetGuidSecurityDescriptor
WmipGetRegistryHideMachine
WmipGetSysIds
WmipIncludeStaticNames
WmipInitializeSecurity
WmipInsertMofResource
WmipLegacyEtwCallback
WmipQueryAllDataMultiple
WmipQuerySingleMultiple
WmipQueueLegacyEtwWork
WmipQueueNotification
WmipReceiveNotifications
WmipRegisterEtwProvider
WmipRegisterOrUpdateDS
WmipSDRegistryQueryRoutine
WmipSaveGuidSecurityDescriptor
WmipSecurityMethod
WmipSendEnableDisableRequest
WmipSendGuidUpdateNotifications
WmipUnregisterEtwProvider
pIoQueryBusDescription
sub_1403DCCA0
sub_1405BD220
sub_1405BD7FC
sub_1405F50F8
sub_14095EFC4
sub_14095F3C0
sub_14095F834
sub_14095FBDC
sub_14095FE3C
sub_1409601E0
sub_140960810
sub_140960EA4
sub_1409612A0
sub_140961B08
sub_140961F8C
sub_14096222C
sub_140962840
sub_140962CA8
sub_140962F0C
sub_140963044
sub_1409632A8
sub_140963760
wil_details_StagingConfig_Load