KeGetCurrentThread
PKTHREAD __stdcall KeGetCurrentThread(){
return KeGetCurrentThread();
}Referenced by:
AdtpBuildAccessesString
AlpcCreateSecurityContext
AlpcViewDestroyProcedure
AlpciDestroyDeferredMessageContext
AlpcpAcceptConnectPort
AlpcpAssociateIoCompletionPort
AlpcpCaptureAttributes
AlpcpCaptureDirectAttribute
AlpcpCaptureHandleAttribute
AlpcpCaptureHandleAttributeInternal
AlpcpCaptureIdMessage
AlpcpCaptureSecurityAttribute
AlpcpCaptureSecurityAttributeInternal
AlpcpCaptureViewAttribute
AlpcpCaptureWorkOnBehalfAttribute
AlpcpCleanupProcessViews
AlpcpClosePort
AlpcpCompleteDispatchMessage
AlpcpConnectPort
AlpcpCreateClientPort
AlpcpCreateConnectionPort
AlpcpCreateRegion
AlpcpCreateReserve
AlpcpCreateSection
AlpcpDeletePort
AlpcpDispatchConnectionRequest
AlpcpDispatchNewMessage
AlpcpDispatchReplyToPort
AlpcpDispatchReplyToWaitingThread
AlpcpExposeHandleAttribute
AlpcpExposeTokenAttribute
AlpcpFormatConnectionRequest
AlpcpFreeMessageFunction
AlpcpImpersonateMessage
AlpcpInitSystem
AlpcpInitializeCompletionList
AlpcpLogClosePort
AlpcpLogConnectFail
AlpcpLogConnectRequest
AlpcpLogConnectSuccess
AlpcpLogReceiveMessage
AlpcpLogSendMessage
AlpcpLogUnwait
AlpcpLogWaitForNewMessage
AlpcpLogWaitForReply
AlpcpLookupMessage
AlpcpMapLegacyPortView
AlpcpOpenPort
AlpcpProcessSynchronousRequest
AlpcpQueryHandleInformationMessage
AlpcpReceiveLegacyConnectionReply
AlpcpReceiveLegacyMessage
AlpcpReceiveMessage
AlpcpReceiveMessagePort
AlpcpReceiveSynchronousReply
AlpcpReplyLegacySynchronousRequest
AlpcpRestoreWriteAccess
AlpcpSendCloseMessage
AlpcpSendLegacySynchronousRequest
AlpcpSendMessage
AlpcpSetOwnerProcessPort
AlpcpSignalAndWait
AlpcpValidateAndSetPortAttributes
AlpcpWaitForPortReferences
AlpcpWaitForSingleObject
ArbArbiterHandler
ArbBuildAssignmentOrdering
BgkpLockBgfxCodeSection
BgkpUnlockBgfxCodeSection
BiAdjustPrivilege
BuildQueryDirectoryIrp
CMFFlushHitsFile
CcAcquireByteRangeForWrite
CcAmILowPriorityWriter
CcApplyLowIoPriorityToThread
CcAsyncCopyRead
CcAsyncReadPrefetch
CcBoostLowPriorityWorkerThread
CcCanIWrite
CcChangeBackingFileObject
CcChargeThreadForReadAhead
CcCompleteAsyncRead
CcCopyReadEx
CcCopyWriteEx
CcCopyWriteWontFlush
CcForceWriteThrough
CcInitializeCacheMapEx
CcMapAndCopyInToCache
CcMapAndRead
CcMapData
CcMapDataCommon
CcMapDataForOverwrite
CcMdlRead
CcPerformReadAhead
CcPinFileData
CcPinRead
CcPrepareMdlWrite
CcScheduleReadAheadEx
CcSetDirtyInMask
CcSetDirtyPinnedData
CcSetValidData
CcUnmapVacb
CcUnpinFileDataEx
CcWaitForUninitializeCacheMap
CcWorkerThread
CcZeroDataInCache
CcZeroEndOfLastPage
CmCreateKey
CmDoVirtualTest
CmEnumerateValueKey
CmFcManagerDrainAllFeatureUsageNotifications
CmFcManagerNotifyFeatureUsage
CmFcManagerQueryFeatureConfigurationSectionInformation
CmFcManagerRegisterFeatureConfigurationChangeNotification
CmFcManagerStartRuntimePhase
CmFcManagerUnregisterFeatureConfigurationChangeNotification
CmFcManagerUpdateFeatureUsageSubscriptions
CmFcpManagerDrainUsageNotificationsWorker
CmFcpManagerRetryUsageNotificationsWorker
CmFcpManagerSoftwareHiveReady
CmFreezeRegistry
CmGetDeviceSoftwareKey
CmKtmNotification
CmLoadAppKey
CmLoadDifferencingKey
CmLoadKey
CmLockKeyForWrite
CmNotifyRunDown
CmOpenKey
CmQueryKey
CmQueryLayeredKey
CmReconcileAndValidateAllHives
CmRmFinalizeRecovery
CmSetCallbackObjectContext
CmSetValueKey
CmSnapshotRMTxArray
CmThawRegistry
CmUnRegisterCallback
CmUnloadKey
CmpAccountForLogReservation
CmpAcquireShutdownRundown
CmpAcquireWriteQueue
CmpAddRemoveContainerToCLFSLog
CmpAssignKeySecurity
CmpAttachToRegistryProcess
CmpCallCallBacksEx
CmpCallbackFillObjectContext
CmpCheckHivePrimaryFileReadWriteAccess
CmpCheckKeySecurityDescriptorAccess
CmpCheckOpenAccessOnKeyBody
CmpCleanupLightWeightTransaction
CmpCloseKeyObject
CmpCmdHiveOpen
CmpCoalescingCallback
CmpCommitPreparedLightWeightTransaction
CmpCompleteUnloadKey
CmpConstructNameWithStatus
CmpCreateKeyBody
CmpCreateKeyControlBlock
CmpCreateRegistryRoot
CmpDeleteKeyObject
CmpDereferenceKeyControlBlock
CmpDereferenceKeyControlBlockWithLock
CmpDoAccessCheckOnKCB
CmpDoFileWrite
CmpDoLocalizeNextHive
CmpDoParseKey
CmpDoQueryKeyName
CmpEnumerateCallback
CmpFileFlushAndPurge
CmpFinishSystemHivesLoad
CmpForceFlushWorker
CmpFreeCallbackObjectContexts
CmpGetCallbackObjectContext
CmpGetSecurityDescriptorNode
CmpGlobalLockKeyForWrite
CmpGlobalUnlockKeyForWrite
CmpHandlePageFileOpenNotification
CmpInitHiveFromFile
CmpInsertCallbackInListByAltitude
CmpIsCmRm
CmpIsHiveLoadingOnOtherThread
CmpIsSystemEntity
CmpLazyCommitWorker
CmpLinkHiveToMaster
CmpLoadKeyCommon
CmpLockDeletedHashEntryExclusiveByKcb
CmpLockHashEntryExclusive
CmpLockHashEntryExclusiveByKcb
CmpLockKcbExclusive
CmpLockRegistry
CmpLockRegistryExclusive
CmpLogCheckpoint
CmpLogDirtyVectorUse
CmpNotifyChangeKey
CmpOpenHiveFile
CmpParseKey
CmpPerformCompleteKcbCacheLookup
CmpPerformSingleKcbCacheLookup
CmpPostApc
CmpPostApcRunDown
CmpQueryKeySecurity
CmpQueueLazyCommitWorker
CmpReleaseShutdownRundown
CmpRunDownCmRM
CmpSearchKeyControlBlockTreeEx
CmpSecurityMethod
CmpSetKeySecurity
CmpStartCLFSLog
CmpStartRMLog
CmpStartSiloKeyLockTracker
CmpStopRMLog
CmpStopSiloKeyLockTracker
CmpSyncNextBackupHive
CmpTransInitializeTransaction
CmpTransMgrRollback
CmpTransSearchAddLightWeightTrans
CmpTransSearchAddTrans
CmpTransWriteLog
CmpTryConvertKcbLockSharedToExclusive
CmpTryToLockHashEntryExclusive
CmpTryToLockKcbExclusive
CmpUnlockKcb
CmpUnlockKcbStack
CmpUnlockRegistry
CmpUnlockTwoKcbs
CmpVEExecuteParseLogic
CmpVEPerformOpenAccessCheck
CmpWalkOneLevel
CreateMiniNtBootKey
DbgkCaptureLiveDump
DbgkCaptureLiveKernelDump
DbgkCopyProcessDebugPort
DbgkExitProcess
DbgkExitThread
DbgkFlushErrorPort
DbgkForwardException
DbgkMapViewOfSection
DbgkOpenProcessDebugPort
DbgkQueueUserExceptionReport
DbgkRegisterErrorPort
DbgkSendSystemDllMessages
DbgkUnMapViewOfSection
DbgkWerCaptureLiveKernelDump
DbgkpLkmdFireCallbacks
DbgkpLkmdSnapThreadApc
DbgkpOpenHandles
DbgkpPostFakeThreadMessages
DbgkpQueueMessage
DbgkpSendApiMessage
DbgkpSendApiMessageLpc
DbgkpSendErrorMessage
DbgkpSetProcessDebugObject
DbgkpSuppressDbgMsg
DbgkpSuspendProcess
DbgkpWerDeferredWriteRoutine
DelistKeyBodyFromKCB
DrvDbAcquireDatabaseNodeBaseKey
DrvDbOpenDriverDatabaseRegKey
DrvDbReleaseDatabaseNodeBaseKey
DrvDbSetDriverDatabaseMappedProperty
EmpParseInfDatabase
EmpQueueRuleUpdateState
EmpRuleUpdateWorkerThread
EtwActivityIdControl
EtwDeleteSiloState
EtwInitializeSiloState
EtwQueryPerformanceTraceInformation
EtwQueryProcessTelemetryCoverage
EtwRegisterEventCallback
EtwSetPerformanceTraceInformation
EtwSetProcessTelemetryCoverage
EtwTiLogAllocExecVm
EtwTiLogInsertQueueUserApc
EtwTiLogMapExecView
EtwTiLogProtectExecVm
EtwTiLogReadWriteVm
EtwTiLogSetContextThread
EtwTiLogSuspendResumeProcess
EtwTiLogSuspendResumeThread
EtwTimLogProhibitChildProcessCreation
EtwTimLogProhibitLowILImageMap
EtwTimLogProhibitNonMicrosoftBinaries
EtwTraceAdminlessAccessFailure
EtwTraceAppStateChange
EtwTraceEvent
EtwTracePageFault
EtwTracePool
EtwTraceSystemTimeChange
EtwTraceThread
EtwUnregister
EtwpAcquireTokenAccessInformation
EtwpAddGuidEntry
EtwpAddLogHeader
EtwpAddNotificationEvent
EtwpAddRegEntryToGroup
EtwpAdjustTraceBuffers
EtwpBufferingModeCompressionFlush
EtwpCaptureString
EtwpCheckNotificationAccess
EtwpClearSessionAndUnreferenceEntry
EtwpCloseLogger
EtwpCompressPendingBuffers
EtwpCompressionProc
EtwpCovSampAcquireSamplerRundown
EtwpCovSampCaptureApc
EtwpCovSampCaptureBufferMapAddressesAndQueue
EtwpCovSampCaptureBufferProcess
EtwpCovSampCaptureContextStop
EtwpCovSampCaptureQueueApc
EtwpCovSampCaptureSample
EtwpCovSampCaptureUserStack
EtwpCovSampContextAddSamples
EtwpCovSampContextCleanup
EtwpCovSampContextGetModule
EtwpCovSampContextPruneModules
EtwpCovSampEnumerateProcess
EtwpCovSampHashMakeRoomAndAcquireLock
EtwpCovSampImageNotify
EtwpCovSampProcessAddModule
EtwpCovSampProcessMapAddresses
EtwpCovSampProfileInterrupt
EtwpCovSampSafeForUserAddressCapture
EtwpCovSampSampleBufferProcess
EtwpCoverageCheckCP
EtwpCoverageEnsureContext
EtwpCoverageEnsureUserModeView
EtwpCoverageProvEnableCallback
EtwpCoverageRecord
EtwpCoverageReset
EtwpCoverageResetCP
EtwpCoverageSamplerClose
EtwpCoverageSamplerPageFault
EtwpCoverageSamplerQuery
EtwpCoverageSamplerReadyThread
EtwpCoverageSamplerSetBloomFilter
EtwpCoverageSamplerStart
EtwpCoverageSamplerStop
EtwpCoverageSamplerUnloadImage
EtwpDeleteRegistrationObject
EtwpDeleteSessionDemuxObject
EtwpDemuxPrivateTraceHandle
EtwpDisableCompression
EtwpDisableKernelTrace
EtwpDisableStackWalkApc
EtwpDisallowedGuidAddition
EtwpDisallowedGuidRemoval
EtwpEnableGuid
EtwpEventWriteFull
EtwpFindGuidEntryByGuid
EtwpFlushCoverage
EtwpFlushTrace
EtwpFreeCompression
EtwpFreeGuidEntry
EtwpGetLoggerInfoFromContext
EtwpGetNextGuidEntry
EtwpGetPrivateSessionTraceHandle
EtwpGetPsmKeyExtendedHeaderItem
EtwpGetSidExtendedHeaderItem
EtwpGetSoftRestartInformation
EtwpGetStackExtendedHeaderItem
EtwpGetTraceGroupInfo
EtwpGetTraceGuidInfo
EtwpGetTrackingLockSlotForThread
EtwpLocateDbgIdForRegEntry
EtwpLogKernelEvent
EtwpLogRegistryEvent
EtwpLogger
EtwpNotifyGuid
EtwpOpenConsumer
EtwpOpenLogger
EtwpPmcInterrupt
EtwpProcessEnumCallback
EtwpProfileInterrupt
EtwpPsProvProcessEnumCallback
EtwpPsProvTraceThread
EtwpQueryReferenceTime
EtwpQueueNotification
EtwpQueueStackWalkApc
EtwpRealtimeConnect
EtwpRealtimeDisconnectConsumerByHandle
EtwpReceiveNotification
EtwpReenableStackWalkApc
EtwpReferenceLoggerSecurityDescriptor
EtwpRegisterPrivateSession
EtwpRegisterProvider
EtwpRegisterUMGuid
EtwpRundownNotifications
EtwpSendReplyDataBlock
EtwpSetCompressionSettings
EtwpSetMark
EtwpSetPartitionContext
EtwpSetSoftRestartInformation
EtwpStackTraceDispatcher
EtwpStackWalkApc
EtwpStartLogger
EtwpStartTrace
EtwpStopLoggerInstance
EtwpStopTrace
EtwpThreadRundownApc
EtwpTiQueryVad
EtwpTimLogMitigationForProcess
EtwpTraceFileName
EtwpTraceLastBranchRecord
EtwpTraceMessageVa
EtwpTraceProcessorTrace
EtwpTraceStackWalk
EtwpTraceThreadRundown
EtwpTraceThreadRundownWithStack
EtwpTracingProvEnableCallback
EtwpTrackGuidEntryRegistrations
EtwpTrackProviderBinary
EtwpUnreferenceGuidEntry
EtwpUpdateGroupMasks
EtwpUpdateLoggerSecurityDescriptor
EtwpUpdateTrace
EtwpWriteProcessEvent
EtwpWriteUserEvent
ExAcquireAutoExpandPushLockShared
ExAcquireCacheAwarePushLockSharedEx
ExAcquireFastMutex
ExAcquireFastMutexUnsafe
ExAcquireFastResourceExclusive
ExAcquireFastResourceShared
ExAcquireFastResourceSharedStarveExclusive
ExAcquirePushLockExclusiveEx
ExAcquirePushLockSharedEx
ExAcquireResourceExclusiveLite
ExAcquireResourceSharedLite
ExAcquireSharedStarveExclusive
ExAcquireSharedWaitForExclusive
ExAcquireTimeRefreshLock
ExAllocateHeapPool
ExAllocatePoolWithQuotaTag
ExCleanTimerResolutionRequest
ExCleanupSessionHeapManager
ExConvertExclusiveToSharedLite
ExConvertFastResourceExclusiveToShared
ExCovReadjustUnloadedModuleEntry
ExCpuSetResourceManagerAccessCheck
ExCreateHandleEx
ExDeleteResourceLite
ExDestroyHandle
ExDisableHandleTracing
ExDisownFastResource
ExDupHandleTable
ExEnableHandleExceptions
ExEnableHandleTracing
ExEnableRaiseUMExceptionOnInvalidHandleClose
ExEnterCriticalRegionAndAcquireFastMutexUnsafe
ExEnterCriticalRegionAndAcquireResourceExclusive
ExEnterCriticalRegionAndAcquireResourceShared
ExEnterCriticalRegionAndAcquireSharedWaitForExclusive
ExEnterPriorityRegionAndAcquireResourceExclusive
ExEnterPriorityRegionAndAcquireResourceShared
ExEnumHandleTable
ExFetchLicenseData
ExFlushTb
ExFreeHeapPool
ExFreeSvmAsid
ExGetHeapFromType
ExGetLicenseTamperState
ExGetPreviousMode
ExGetSessionBigPoolInformation
ExGetSessionPoolTagInfo
ExGetSessionPoolTagInformation
ExGetWakeTimerList
ExHandleLogBadReference
ExInitLicenseData
ExInitializeFastOwnerEntry
ExInitializeSessionHeapManager
ExIsFastResourceHeld
ExIsFastResourceHeldExclusive
ExIsResourceAcquiredExclusiveLite
ExIsResourceAcquiredSharedLite
ExNotifyPlatformBinaryExecuted
ExQueryHandleExceptionsPermanency
ExQueryWnfStateData
ExReferenceHandleDebugInfo
ExRegisterExtension
ExRegisterHost
ExReinitializeResourceLite
ExReleaseCacheAwarePushLockSharedEx
ExReleaseDisownedFastResource
ExReleaseDisownedFastResourceExclusive
ExReleaseDisownedFastResourceShared
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion
ExReleaseFastResource
ExReleaseFastResourceExclusive
ExReleaseFastResourceShared
ExReleasePushLockEx
ExReleasePushLockExclusiveEx
ExReleaseResourceAndLeaveCriticalRegion
ExReleaseResourceAndLeavePriorityRegion
ExReleaseResourceForThreadLite
ExReleaseResourceLite
ExSaAllocate
ExSaFree
ExSetLicenseTamperState
ExShareAddressSpaceWithDevice
ExSubscribeWnfStateChange
ExSvmBeginDeviceReset
ExSvmFinalizeDeviceReset
ExSwapinWorkerThreads
ExSweepHandleTable
ExSystemExceptionFilter
ExTimerRundown
ExTryAcquirePushLockExclusiveEx
ExTryAcquirePushLockSharedEx
ExTryToAcquireFastMutex
ExTryToAcquireResourceExclusiveLite
ExTryToConvertFastResourceSharedToExclusive
ExUnregisterExtension
ExUnsubscribeWnfStateChange
ExUuidCreate
ExWnfCleanupServerSiloState
ExWnfExitProcess
ExfReleasePushLockSharedEx
ExpAcquireResourceExclusiveLite
ExpAcquireResourceSharedLite
ExpAcquireSharedStarveExclusive
ExpAllocateAsid
ExpAllocateHandleTable
ExpAllocateOwnerEntryForLegacyShim
ExpApplyPrewaitBoost
ExpApplyPriorityBoost
ExpApplyRewaitBoost
ExpCheckForFreedEnhancedTimer
ExpCheckThreadHistory
ExpCheckWakeTimerAccess
ExpConvertExclusiveToSharedLite
ExpCovCreateUnloadedModuleEntry
ExpCovQueryInformation
ExpCovResetInformation
ExpDeleteCallback
ExpDeleteTimer
ExpExpandResourceOwnerTable
ExpFastResourceLegacyConvertExclusiveToShared
ExpFastResourceLegacyIsAcquiredShared
ExpFastResourceLegacyRelease
ExpFindCurrentThread
ExpFindEmptyEntry
ExpFirmwareAccessAppContainerCheck
ExpFreeAsid
ExpGetFirmwareEnvironmentVariable
ExpGetGlobalLocaleSection
ExpGetHandleInformation
ExpGetHandleInformationEx
ExpGetLockInformation
ExpGetLookasideInformation
ExpGetNextCallback
ExpGetObjectInformation
ExpGetProcessInformation
ExpGetSystemFirmwareTableInformation
ExpGetSystemPlatformBinary
ExpHpCompactSessionPools
ExpHpIsSpecialPoolHeap
ExpInsertPoolTrackerExpansion
ExpKdPullRemoteFileForUser
ExpLoadAndSortLicensingCacheDescriptors
ExpMutantInitialization
ExpNtDeleteWnfStateData
ExpNtUpdateWnfStateData
ExpProfileCreate
ExpQueryChannelInformation
ExpQueryCodeIntegrityCertificateInfo
ExpQueryElamCertInfo
ExpQueryInterruptSteeringInformation
ExpQueryNumaAvailableMemory
ExpQuerySingleModuleInformation
ExpQuerySystemInformation
ExpQuerySystemPerformanceInformation
ExpRaiseHardError
ExpReadLeapSecondData
ExpRegisterFirmwareTableInformationHandler
ExpReleaseFastMutexContended
ExpReleaseResourceSharedForThreadLite
ExpRemoveCurrentThreadFromThreadHistory
ExpRemoveHandleTable
ExpRemovePoolTrackerExpansion
ExpRemoveTagForBigPages
ExpSaAllocatorAllocate
ExpSaAllocatorFree
ExpSaPageGroupAllocateMemory
ExpSaPageGroupDescriptorAllocate
ExpSaPageGroupDescriptorFree
ExpSaPageGroupFreeMemory
ExpSetBootEntry
ExpSetDriverEntry
ExpSetFirmwareEnvironmentVariable
ExpSetPendingUILanguage
ExpSetResourceOwnerPointerEx
ExpSetSwappingKernelApc
ExpSetTimer2
ExpSetTimerObject
ExpSnapShotHandleTables
ExpSvmDereferenceDevice
ExpSvmServicePageFault
ExpSystemErrorHandler2
ExpTimerApcRoutine
ExpTryConvertSharedToExclusiveLite
ExpTryToAcquireResourceExclusiveLite
ExpWaitForResource
ExpWakePushLock
ExpWnfCheckCrossScopeAccess
ExpWnfGetCurrentScopeInstance
ExpWnfResolveScopeInstance
ExpWnfSubscribeWnfStateChange
ExpWnfWorkItemRoutine
ExpWnfWriteStateData
ExpWorkQueueManagerThread
ExpWorkerFactoryCreateThread
ExpWorkerInitialization
ExpWorkerThread
FlushLookUpTableBucket
FsFilterAllocateCompletionStack
FsRtlAcquireEofLock
FsRtlAcquireFileExclusiveCommon
FsRtlAcquireFileForCcFlushEx
FsRtlAcquireHeaderMutex
FsRtlCancelNotify
FsRtlCancellableWaitForMultipleObjects
FsRtlCheckOplockEx2
FsRtlCopyRead
FsRtlCopyWrite
FsRtlCreateSectionForDataScan
FsRtlGetCurrentProcessLoaderList
FsRtlGetDirectImageOriginalBase
FsRtlGetFileExtents
FsRtlGetFileSize
FsRtlGetIoAtEof
FsRtlInsertPerFileContext
FsRtlInsertPerFileObjectContext
FsRtlInsertPerStreamContext
FsRtlKernelFsControlFile
FsRtlLookupPerFileContext
FsRtlLookupPerFileObjectContext
FsRtlLookupPerStreamContextInternal
FsRtlMdlReadDev
FsRtlNotifyCleanup
FsRtlNotifyCleanupAll
FsRtlNotifyFilterChangeDirectory
FsRtlNotifyFilterChangeDirectoryLite
FsRtlNotifyFilterReportChange
FsRtlNotifyFilterReportChangeLiteEx
FsRtlPrepareMdlWriteDev
FsRtlQueryInformationFile
FsRtlQueryKernelEaFile
FsRtlQueryOpen
FsRtlReleaseEofLock
FsRtlRemovePerFileContext
FsRtlRemovePerFileObjectContext
FsRtlRemovePerStreamContext
FsRtlSetFileSize
FsRtlSetKernelEaFile
FsRtlStackOverflowRead
FsRtlTeardownPerFileContexts
FsRtlTeardownPerStreamContexts
FsRtlWorkerThread
FsRtlpAcknowledgeOplockBreakByCacheFlags
FsRtlpGrantAnyOplockFromExclusive
FsRtlpModifyThreadPriorities
FsRtlpRequestExclusiveOplock
FsRtlpRequestShareableOplock
HaliGetDmaAdapter
HalpIommuBlockDevice
HalpIommuUnblockDevice
HalpLeaveDmaDomain
HvUnCOWReconciledPages
HvpGetCellPaged
InsertEventEntryInLookUpTable
InsertTailListPte
IoAsynchronousPageWrite
IoCallDriverWithTracing
IoCancelFileOpen
IoCancelThreadIo
IoCaptureLiveDump
IoCheckRedirectionTrustLevel
IoClearActivityIdThread
IoConfigureCrashDump
IoConvertFileHandleToKernelHandle
IoCreateDriver
IoDisconnectInterrupt
IoEnumerateRegisteredFiltersList
IoFastQueryNetworkAttributes
IoFillTriageDumpBuffer
IoGetActivityIdThread
IoGetDeviceInterfaceAlias
IoGetDeviceObjectPointer
IoGetDmaAdapter
IoGetInitialStack
IoGetTopLevelIrp
IoInitializeCrashDump
IoInitializeIrp
IoIs32bitProcess
IoMakeAssociatedIrpPriv
IoOpenDeviceInterfaceRegistryKey
IoOpenDeviceRegistryKey
IoPropagateActivityIdToThread
IoQueryInformationByName
IoRaiseHardError
IoRaiseInformationalHardError
IoRegisterContainerNotification
IoRegisterFileSystem
IoRegisterFsRegistrationChangeMountAware
IoRegisterIoTracking
IoRemoveIoCompletion
IoReplacePartitionUnit
IoReportDetectedDevice
IoReportRootDevice
IoRetrievePriorityInfo
IoReuseIrp
IoSetActivityIdIrp
IoSetActivityIdThread
IoSetDeviceInterfaceState
IoSetDiskIoAttributionFromThread
IoSetInformation
IoSetThreadHardErrorMode
IoSetTopLevelIrp
IoSynchronousPageWriteEx
IoUnregisterContainerNotification
IoUnregisterFsRegistrationChange
IoUnregisterIoTracking
IoUnregisterPriorityCallback
IoUpdateDumpPhysicalRanges
IoVerifyVolume
IoWithinStackLimits
IommuBeginDeviceReset
IommuFinalizeDeviceReset
IopAcquireReleaseConnectLockInternal
IopAcquireReleaseDispatcherLock
IopAllocateBackpocketIrp
IopAllocateBootResources
IopAllocateIrpPrivate
IopAttachDeviceToDeviceStackSafe
IopBootLogToFile
IopBuildAsynchronousFsdRequest
IopBuildDeviceIoControlRequest
IopCallDriverReference
IopCancelIrpsInCurrentThreadListApcRoutine
IopCancelIrpsInCurrentThreadListSpecialApc
IopCancelIrpsInThreadList
IopCancelIrpsInThreadListForCurrentProcess
IopCheckInitiatorHint
IopCheckSessionDeviceAccess
IopCleanupNotifications
IopCloseFile
IopCompleteRequest
IopConstructInMemoryDumpHeader
IopCopyBootLogRegistryToFile
IopCreateFile
IopDeleteFile
IopDestroyActiveConnectBlock
IopDisassociateThreadIrp
IopDoDeferredSetInterfaceState
IopEjectDevice
IopFileObjectRevoked
IopFilterResourceRequirementsCall
IopFreeBandwidthContract
IopGetDeviceInterfaces
IopGetFileInformation
IopGetRootDevices
IopGetSetSecurityObject
IopInitActivityIdIrp
IopInitializeBuiltinDriver
IopInsertLegacyBusDeviceNode
IopInvalidateVolumesForDevice
IopKeepAliveWorker
IopLegacyResourceAllocation
IopLiveDumpEndMirroringCallback
IopLiveDumpWriteDumpFile
IopLiveDumpWriteDumpFileWithExtraPages
IopLoadDriver
IopLoadDriverImage
IopMarkApcRoutineIfAsynchronousIo32
IopMountVolume
IopOpenLinkOrRenameTarget
IopParseDevice
IopProcessIoTracking
IopProcessWorkItem
IopQueryConflictList
IopQueryProcessIdsUsingFile
IopQueryXxxInformation
IopQueueIrpToFileObject
IopQueueWorkItemProlog
IopRaiseHardError
IopReferenceFileObject
IopRegisterDeviceInterface
IopReleaseDeviceResources
IopReleaseFileObjectLock
IopRetrieveSystemDeviceName
IopRetrieveTransactionParameters
IopSendMessageToTrackService
IopSetDeviceSecurityDescriptor
IopSetEaOrQuotaInformationFile
IopSetFileObjectIosbRange
IopSynchronousCall
IopSynchronousServiceTail
IopUncacheInterfaceInformation
IopUnloadDriver
IopUpdateWriteTransferCount
IopVerifierExAllocatePoolWithQuota_1
IopWaitAndAcquireFileObjectLock
IopWaitForLockAlertable
IopWaitForSynchronousIo
IopWriteAllocatedResourcesToRegistry
IopXxxControlFile
IopfCompleteRequest
IovpCallDriver1
IovpLogStackTrace
IovpUnloadDriver
KCBNeedsVirtualImage
KCBNeedsVirtualImage_0
KdPullRemoteFileEx
KdpAddBreakpoint
KdpCreateFileCallback
KdpSetCommonState
KdpSetOwedBreakpoints
KeAbCrossThreadDelete
KeAbCrossThreadDeleteDpcRoutine
KeAbMarkCrossThreadReleasable
KeAbPostRelease
KeAbPostReleaseEx
KeAbPreAcquire
KeAcquireGuardedMutex
KeAreAllApcsDisabled
KeAreApcsDisabled
KeAttachProcess
KeBalanceSetManager
KeBugCheck2
KeCapturePersistentThreadState
KeCleanupImageTracepoints
KeContextFromKframes
KeDelayExecutionThread
KeDeleteMutant
KeDeregisterBoundCallback
KeDetachProcess
KeEnterCriticalRegion
KeEnterGuardedRegion
KeExpandKernelStackAndCalloutInternal
KeFlushMultipleRangeTb
KeFlushSingleCurrentTb
KeFlushTb
KeForceAttachProcess
KeGenericProcessorCallback
KeGetCurrentThread
KeGetCurrentUmsTeb
KeInitializeCrashDumpHeader
KeInsertQueueApc
KeIsTraceCallbackAllowed
KeLeaveCriticalRegion
KeLeaveGuardedRegion
KePopulateContinuationContext
KeProfileInterruptWithSource
KeQueryCurrentStackInformationEx
KeQueryTotalCycleTimeThread
KeRaiseUserException
KeReleaseMutant
KeRemovePriQueue
KeRemoveQueueEx
KeRemoveSystemServiceTable
KeRemoveUmsThreadCidOwnership
KeRestoreExtendedAndSupervisorState
KeRevertToUserGroupAffinityThread
KeSaveExtendedAndSupervisorState
KeSetCurrentUmsTeb
KeSetIdealProcessorThread
KeSetIdealProcessorThreadByNumber
KeSetIdealProcessorThreadEx
KeSetKernelStackSwapEnable
KeSetSystemServiceCallback
KeSetTimer2
KeSetTimerEx
KeSetTracepoint
KeSpecialUserApcKernelRoutine
KeStackAttachProcess
KeStartDynamicProcessor
KeStartThread
KeSwapProcessOrStack
KeSynchronizeSecurityDomain
KeTestAlertThread
KeUnsecureThread
KeUnstackDetachProcess
KeUpdateThreadTag
KeUpdateUmsThreadState
KeUserModeCallback
KeWaitForAlertByThreadId
KeWaitForGate
KeWaitForMultipleObjects
KeWaitForSingleObject
KeWriteProtectPAT
KeYieldExecution
KiAbFindWakeupLockEntry
KiAcquireSecondaryPassiveConnectLock
KiAlignmentFault
KiApcInterrupt
KiBeginThreadAccountingPeriod
KiBoundFault
KiBreakpointTrap
KiCallUserMode
KiCheckForKernelApcDelivery
KiConnectSecondaryInterrupt
KiContinueEx
KiContinuePreviousModeUser
KiControlProtectionFault
KiDebugServiceTrap
KiDeliverApc
KiDetachProcess
KiDisconnectInterruptCommon
KiDisconnectSecondaryInterrupt
KiDispatchException
KiDivideErrorFault
KiDoubleFaultAbort
KiDpcInterrupt
KiDpcInterruptBypass
KiEmulateAtlThunk
KiEnableKvaShadowing
KiEpfStart
KiExceptionDispatch
KiExecuteDpc
KiExpandKernelStackAndCalloutOnStackSegment
KiExpandKernelStackAndCalloutSwitchStack
KiFastFailDispatch
KiFloatingErrorFault
KiFlushAffinity
KiFlushCurrentTbOnly
KiFlushCurrentTbWorker
KiFlushRangeTb
KiFlushRangeWorker
KiFlushSingleTbWorker
KiForceSymbolReferences
KiGeneralProtectionFault
KiHandleBound
KiHvInterrupt
KiInSwapProcesses
KiInitializeKernel
KiInitializeMutant
KiInitializeTimer2
KiInitializeUserApc
KiInvalidOpcodeFault
KiInvalidTssFault
KiInvokeInterruptServiceRoutine
KiIpiInterrupt
KiIpiProcessRequests
KiIsPrimaryPresent
KiIsSecureProcessFlush
KiKernelSysretExit
KiLogControlProtectionUserModeReturnMismatch
KiLogUserCetSetContextIpValidationFailure
KiMcheckAbort
KiNmiInterruptStart
KiNpxNotAvailableFault
KiNpxSegmentOverrunAbort
KiOpComputeLinearAddress
KiOp_MOVAPS
KiOp_MOVDQA
KiOverflowTrap
KiPageFault
KiParkUmsThread
KiPrepareFlushParameters
KiPreprocessFault
KiProcessControlProtection
KiRaiseAssertion
KiRaiseException
KiRaiseSecurityCheckFailure
KiRemoveThreadFromSchedulingGroup
KiRestoreSetContextState
KiSchedulerApcTerminate
KiSchedulerDpc
KiSegmentNotPresentFault
KiServiceInternal
KiSetTimerEx
KiSetupForInstrumentationReturn
KiSpuriousDispatchNoEOI
KiStackAttachProcess
KiStackFault
KiStartSavingSupervisorState
KiSwInterrupt
KiSwapDirectoryTableBaseTarget
KiSwapToUmsThread
KiSwapToUmsThreadContinue
KiSwitchKernelStackAndCallout
KiSynchronizeAddressPolicyTarget
KiSynchronizePassiveInterruptExecution
KiSynchronizeSecurityDomainTarget
KiSystemCall32
KiSystemCall32Shadow
KiSystemCall64
KiSystemCall64Shadow
KiSystemService
KiSystemServiceHandler
KiSystemStartup
KiTpHandleTrap
KiTraceSetTimer
KiTrackSystemCallEntry
KiUmsFastReturnToUser
KiUmsRestoreUch
KiUnstackDetachProcess
KiUpdateStibpPairing
KiVirtualizationException
KiVmbusInterrupt0
KiVmbusInterrupt1
KiVmbusInterrupt2
KiVmbusInterrupt3
KiWaitForAllObjects
KiXmmException
KseAddHardwareId
KseDriverUnloadImage
KseLookupHardwareId
KseRegisterShimEx
KseResetDeviceCache
KseShimDatabaseBootRelease
KseShimDatabaseClose
KseShimDatabaseOpen
KseUnregisterShim
KsepCacheLock
KsepCacheUnlock
KsepDbCacheInsertDevice
KsepDbCacheQueryDevice
KsepGetShimsForDriver
KsepIsModuleShimmed
KsepResolveApplicableShimsForDriver
KsepShimDbChanged
KxContextToKframes
KxDebugTrapOrFault
KxIsrLinkage
KxMcheckAlternateReturn
KxStartUserThread
KyStartUserThread
LOCK_CM_RM_LIST
LOCK_HIVE_LOAD
LOCK_TRANSACTION_LIST
LZNT1DecompressChunkNewThread
LdrpKrnGetDataTableEntry
LockShutdownExclusive
LockShutdownShared
LpcRequestPort
LpcRequestWaitReplyPortEx
LpcSendWaitReceivePort
LpcpCopyRequestData
LpcpRequestWaitReplyPort
MI_CLEAR_RESET_PTE
MI_MAKE_PROTECT_WRITE_COPY
MI_PAGEFILE_WRITE
MI_UNLOCK_RELOCATIONS_EXCLUSIVE
MI_WRITE_INVALID_PTE_TB_FLUSH_NEEDED
MiAbortCombineScan
MiAccessCheck
MiActOnPte
MiAddMappedPtes
MiAddPagesToEnclave
MiAddPartitionHugeRange
MiAddPhysicalMemory
MiAddViewsForSection
MiAgePteWorker
MiAgeWorkingSetTail
MiAllocateAweInfo
MiAllocateChildVads
MiAllocateContiguousMemory
MiAllocateEnclaveVad
MiAllocateFastLargePagesForMdl
MiAllocateFileExtents
MiAllocateFromSubAllocatedRegion
MiAllocateKernelStackPages
MiAllocateNewSubAllocatedRegion
MiAllocatePartitionId
MiAllocatePerSessionProtos
MiAllocateTopLevelPage
MiAllocateUserPhysicalPages
MiAllocateVirtualMemoryPrepare
MiAllocateWsle
MiAllowGuardFault
MiApplyCommitDelay
MiArbitraryCodeBlocked
MiAssignInitialPageAttribute
MiAssignNonPagedPoolPte
MiAttachSession
MiAweViewInserter
MiBeginHoldingDirtyFaults
MiBeginPageAccessor
MiBuildForkPageTable
MiBuildForkPte
MiBuildImageControlArea
MiBuildMdlForMappedFileFault
MiBuildReservationCluster
MiCanDeleteEnclave
MiCancelPhase0Locking
MiCaptureRetpolineImportInfo
MiCaptureSecureImageBaseAddress
MiCaptureUlongPtrArray
MiCfgInitializeProcess
MiChangePageAttribute
MiChargeCommit
MiChargeSegmentCommit
MiCheckAndUpdateIoAttribution
MiCheckForUserStackOverflow
MiCheckSecuredVad
MiCheckSessionPoolAllocations
MiCheckUserVirtualAddress
MiCheckVirtualAddress
MiCleanCfg
MiClearDriverHotPatchPtes
MiClearPageFileHash
MiClearPartitionPageBitMap
MiClearPteAccessed
MiClearVadBits
MiCloneCaptureVadCommit
MiCloneProcessAddressSpace
MiCloneVads
MiCoalesceFreeLargePages
MiCoalescePlaceholderAllocations
MiCombineAllPhysicalMemory
MiCombineIdenticalPages
MiCombinePte
MiCombineWorkingSetTail
MiCombiningInProgress
MiCommitEnclavePages
MiCommitExistingVad
MiCommitHotPatchTable
MiCommitPageTableRangesForVad
MiCommitPageTablesForVad
MiCommitRequestFailed
MiCommitVadCfgBits
MiComparePteProtections
MiCompletePrivateZeroFault
MiCompleteProtoPteFault
MiCompleteRestrictedImageFault
MiComputeFaultNode
MiComputeNodeMemory
MiComputePageCommitment
MiComputePreferredNode
MiContractWsSwapPageFileWorker
MiControlAreaRequiresCharge
MiConvertHiberPhasePte
MiConvertPrivateToProto
MiConvertStandbyToProto
MiCopyDataPageToImagePage
MiCopyFileOnlyGlobalSubsectionPage
MiCopyImageExtentContents
MiCopyOnWrite
MiCopyOnWriteCheckConditions
MiCopyPage
MiCopyPagesIntoEnclave
MiCopySinglePage
MiCopyToCfgBitMap
MiCopyToUserVa
MiCountSharedPages
MiCountSystemPool
MiCreateAweInfoBitMap
MiCreateCloneChain
MiCreateDecayPfn
MiCreateForkWsles
MiCreateHardwareEnclave
MiCreateImageOrDataSection
MiCreateLargePageVad
MiCreateLargePfnList
MiCreatePagingFile
MiCreatePagingFileMap
MiCreatePerSessionProtos
MiCreatePlaceholderStorage
MiCreateProcessDefaultAweInfo
MiCreatePrototypePtes
MiCreateRotateView
MiCreateSectionCommon
MiCreateSectionForDriver
MiCreateSharedZeroPages
MiCreateSystemPageTable
MiDbgReleaseAddress
MiDbgWriteCheck
MiDecommitHardwareEnclavePages
MiDecommitLargePoolVa
MiDecommitLargePte
MiDecommitPages
MiDecommitRegion
MiDecrementAndInsertStandbyPages
MiDecrementCloneBlockReference
MiDecrementSubsectionViewCount
MiDelayFaultingThread
MiDeleteAllHardwareEnclaves
MiDeleteAweInfoPages
MiDeleteBootRange
MiDeleteCachedSubsection
MiDeleteClusterPage
MiDeleteClusterSection
MiDeleteEmptyPageTableCommit
MiDeleteEmptyPageTables
MiDeleteEnclavePage
MiDeleteEnclavePages
MiDeleteFinalPageTables
MiDeleteHotPatchEntry
MiDeleteHotPatchRecord
MiDeleteImageHotPatchState
MiDeleteInsertedCloneVads
MiDeleteLargeUserPde
MiDeleteNonPagedPoolPte
MiDeletePagablePteRange
MiDeletePartialCloneVads
MiDeletePartialVad
MiDeletePartitionResources
MiDeletePteList
MiDeletePteRun
MiDeleteRotateAndStopFaults
MiDeleteSystemPagableVm
MiDeleteSystemPageTable
MiDeleteTransitionPte
MiDeleteVa
MiDeleteVad
MiDeleteValidSystemPage
MiDeleteVirtualAddresses
MiDemoteCombinedPte
MiDemoteLocalLargePage
MiDemoteValidLargePageOneLevel
MiDeprioritizeVad
MiDereferenceExtendInfo
MiDereferencePerSessionProtos
MiDereferenceSegmentThread
MiDereferenceSession
MiDereferenceSessionFinal
MiDetachProcessFromSession
MiDoStackCopy
MiDuplicateCloneLeaf
MiEmptyWorkingSetInitiate
MiEmptyWorkingSetPrivatePagesByVa
MiEnablePartitionMappedWrites
MiEncodeProtoFill
MiExceptionForMappedVa
MiExpandPtes
MiExpandSharedZeroCluster
MiExpandVadBitMap
MiExpandVadBitMapDown
MiFaultGetFileExtents
MiFillGapPtes
MiFillHyperPtes
MiFillPageWithImageExtentContents
MiFillPerSessionProtos
MiFillPhysicalPages
MiFillPoolCommitPageTable
MiFindEmptyAddressRange
MiFindEmptyAddressRangeDown
MiFindHotPatchRecord
MiFindLargeNodePage
MiFindNextEnclaveBoundary
MiFindPlaceholderVadToReplace
MiFindProcessImageHotPatchRecord
MiFinishCreateSection
MiFinishHardFault
MiFinishHoldingDirtyFaults
MiFinishLastForkPageTable
MiFinishMdlForMappedFileFault
MiFinishPlaceholderVadReplacement
MiFinishVadDeletion
MiFlushAllHintedStorePages
MiFlushAllPagesWorker
MiFlushControlArea
MiFlushSectionInternal
MiFlushTbAsNeeded
MiFlushTbList
MiFlushTbListEarly
MiForceCrashForInvalidAccess
MiFreeEmptyBootPageTable
MiFreeInPageSupportBlock
MiFreeLargePageCrossPartitionCharges
MiFreeLargePageView
MiFreePartitionId
MiFreePatchTableProtos
MiFreePhysicalPageChain
MiFreePhysicalPages
MiFreePlaceholderVadEvent
MiFreeRetpolineImportInfo
MiFreeRotateVadEvent
MiFreeSessionSpaceMap
MiFreeToSubAllocatedRegion
MiFreeUltraMapping
MiFreeUnusedPfnPages
MiFreeWsleList
MiGatherMappedPages
MiGatherPagefilePages
MiGenerateAccessViolation
MiGetAweInfoPartition
MiGetAweNode
MiGetAweVadPartition
MiGetChannelInformation
MiGetClusterPage
MiGetHotPatchEntry
MiGetImageProtoProtection
MiGetNextPageTable
MiGetNextPageTablePte
MiGetNextSession
MiGetPageChain
MiGetPageForHeader
MiGetPageProtection
MiGetPfnProtection
MiGetPhysicalMemoryRanges
MiGetPoolPages
MiGetProtoPteAddress
MiGetPteFromCopyList
MiGetSessionIdForVa
MiGetSessionVm
MiGetUltraMapping
MiGetVadWakeList
MiGetWorkingSetInfo
MiGetWorkingSetInfoEx
MiGetWorkingSetInfoList
MiGetWsAndMakePageTablesNx
MiHandleCollidedFault
MiHandleForkTransitionPte
MiHandleTransitionFault
MiHotAddPartitionMemory
MiHotPatchImage
MiHotPatchProcess
MiHugePageOperation
MiIdealClusterPage
MiImageProtoChargedCommit
MiInPagePageTable
MiInSwapStore
MiIncrementAweMapCount
MiIncrementSubsectionViewCount
MiInitNucleus
MiInitSystem
MiInitializeColorBase
MiInitializeCreateSectionPacket
MiInitializeDynamicBitmap
MiInitializeEnclaveMetadataPage
MiInitializeGapFrames
MiInitializeImageProtos
MiInitializeInPageSupport
MiInitializeKernelCfg
MiInitializeKernelStacks
MiInitializeMdlPages
MiInitializeMirroring
MiInitializeNewUltraHugeContext
MiInitializePageColorBase
MiInitializePagedPoolEvents
MiInitializePartition
MiInitializePfn
MiInitializePoolCommitPacket
MiInitializeProtoPfn
MiInitializeReadInProgressPfn
MiInitializeRetpoline
MiInitializeScrubPacket
MiInitializeSessionGlobals
MiInitializeSharedUserData
MiInitializeSlowPte
MiInitializeSystemPageTable
MiInitializeTbFlush
MiInitializeTbFlushStamps
MiInitializeTransitionPfn
MiInitializeUnusablePfns
MiInitializeVadBitMap
MiInitializeVsmEnclave
MiInsertCachedPte
MiInsertChildVads
MiInsertHotPatchRecord
MiInsertInSystemSpace
MiInsertLargeUserMapping
MiInsertLargeVadMapping
MiInsertPageFileInList
MiInsertPageInList
MiInsertPartitionPages
MiInsertPhysicalPteMapping
MiInsertSharedCommitNode
MiInsertVadCharges
MiInsertVadEvent
MiInsertViewOfPhysicalSection
MiInvalidateCollidedIos
MiIsCfgBitMapPageShared
MiIsExtentDangling
MiIsPageTableLocked
MiIsProcessCfgEnabled
MiIsProcessCfgExportSuppressionEnabled
MiIsRangeFullyCommitted
MiIsWorkingSetTrimThread
MiIssueHardFault
MiIssueHardFaultIo
MiIssuePageExtendRequest
MiJoinSession
MiJumpStackTarget
MiLargePageFault
MiLeapPrefetch
MiLinkPoolCommitChain
MiLoadDataIntoVsmEnclave
MiLoadHotPatchForUserSid
MiLoadSectionIntoVsmEnclave
MiLocateAddress
MiLocateOldestSecure
MiLockAddressSpaceToo
MiLockCode
MiLockControlAreaSectionExtend
MiLockImageExtentsExclusive
MiLockImageSection
MiLockLoaderEntry
MiLockPageTableInternal
MiLockPageTableRange
MiLockProtoPage
MiLockUnlockCommon
MiLockVadRange
MiLockWorkingSetForLargeMapping
MiLogHotPatchManagement
MiLogHotPatchOperation
MiLogHotPatchOperationStatus
MiLogHotPatchPagesLocked
MiLogHotPatchRundown
MiLogPinDriverAddress
MiLogRelocationRva
MiLogReserveVaFailed
MiLookupDataTableEntry
MiMakeCombineCandidateClean
MiMakeDriverPagesPrivate
MiMakeHyperPteDemandZero
MiMakeHyperRangeAccessible
MiMakeImageReadOnly
MiMakeLargePageTable
MiMakeOutswappedPageResident
MiMakePageAvoidRead
MiMakeProtoLeafValid
MiMakeProtoPrivate
MiMakeProtoReadOnly
MiMakeProtoTransition
MiMakePteClean
MiMakeSecureExclusive
MiMakeSystemAddressValid
MiMakeSystemCacheRangeValid
MiMakeSystemLeavesNonZero
MiMakeVaRangeNoAccess
MiMakeZeroedPageTablesEx
MiMapArbitraryPage
MiMapBBTMemory
MiMapDummyPages
MiMapFrame
MiMapImageInSystemProcess
MiMapImageInSystemSpace
MiMapLockedPagesInUserSpace
MiMapLockedPagesInUserSpaceHelper
MiMapMdlCommon
MiMapMemoryDumpMdl
MiMapNewPfns
MiMapNewSession
MiMapPageFileHash
MiMapPageInHyperSpaceWorker
MiMapPagesToZero
MiMapParametersInitialize
MiMapPatchTable
MiMapRetpolineStubs
MiMapSinglePage
MiMapSystemImage
MiMapUserLargePages
MiMapViewOfDataSection
MiMapViewOfImageSection
MiMapViewOfPhysicalSection
MiMapViewOfSection
MiMapWithLargePages
MiMappedPageWriter
MiMarkBootGuardPage
MiMarkHugePfnBad
MiMarkHugePfnGood
MiMarkKernelImageCfgBits
MiMarkSharedImageCfgBits
MiMarkSystemVaAllocated
MiMigratePfn
MiModifiedPageWriter
MiMoveDirtyBitsToPfns
MiObtainReferencedSecureVad
MiObtainReferencedVadEx
MiObtainRelocationBits
MiObtainSectionForDriver
MiObtainSessionVa
MiObtainSystemCacheView
MiObtainSystemCharges
MiOkToSetPteDirtyForNotValidFault
MiOpenHotPatchFile
MiOutPageSingleKernelStack
MiOutSwapWorkingSetPte
MiPageAvailableEx
MiPageTableLockIsContended
MiParseImageSectionHeaders
MiPartitionObjectToPartition
MiPartitionWorkingSetManager
MiPerformImageHotPatch
MiPfExecuteReadList
MiPfPrepareReadList
MiPfPrepareSequentialReadList
MiPfPutPagesInTransition
MiPfnShareCountIsZero
MiPickClusterForMappedFileFault
MiPreUnlockWorkingSetShared
MiPrefetchControlArea
MiPrefetchRestOfCluster
MiPrefetchVirtualMemory
MiPrepareImagePagesForHotPatch
MiPrepareVadDelete
MiPrivateFixup
MiProbeAndLockPrepare
MiProcessCommitIntact
MiProcessCrcList
MiProcessLoaderEntry
MiProcessTransitionHeatBatch
MiProcessVaContiguityInformation
MiProcessWsInSwapRanges
MiProtectAweRegion
MiProtectEnclavePages
MiProtectPrivateMemory
MiPurgeImageSection
MiPurgeSubsection
MiQueryAddressSpan
MiQueryAddressState
MiQueryEPTAccessedState
MiQueryLoadedPatches
MiQueryMemoryPhysicalContiguity
MiQueryProcessActivePatches
MiRaisedIrqlFault
MiReAcquireOutSwappedProcessCommit
MiReInsertPlaceholderVad
MiReadWriteAnyLevelShadowPte
MiReadWriteVirtualMemory
MiReadyStandbyPageForActive
MiRebaseDynamicRelocationRegions
MiRebuildLargePage
MiRebuildLargePagesThread
MiReferenceCfgVad
MiReferenceCloneProto
MiReferenceControlArea
MiReleaseArbitraryPage
MiReleaseCommitForResetPages
MiReleaseDriverPtes
MiReleaseFaultPte
MiReleaseKernelCfgLock
MiReleaseLargePteMappings
MiReleaseOutSwappedProcessCommit
MiReleaseProcessReferenceToSessionDataPage
MiReleaseSessionVa
MiReleaseSystemCacheView
MiReleaseVadEventBlocks
MiReloadBootLoadedDrivers
MiRelocateImage
MiRelocateImageAgain
MiRelocateImagePfn
MiRememberUnloadedDriver
MiRemoveBadPages
MiRemoveFromSystemSpace
MiRemoveMappedPtes
MiRemovePhysicalMemory
MiRemovePlaceholderVad
MiRemoveSecureEntry
MiRemoveUserPhysicalPagesView
MiRemoveVadEvent
MiReplacePfnWithGapMapping
MiReplaceRotateWithDemandZero
MiReplaceTransitionPage
MiReplenishBitMap
MiReplicatePteChange
MiReplicatePteChangeToProcess
MiReserveDriverPtes
MiReservePageFileSpaceForPage
MiReservePoolMemory
MiReserveUserMemory
MiResetAccessBitPte
MiResetVirtualMemory
MiResizeAweBitMap
MiResolveDemandZeroFault
MiResolveMappedFileFault
MiResolveMemoryEvent
MiResolvePageFileFault
MiResolvePrivateZeroFault
MiResolveProtoCombine
MiResolveProtoPteFault
MiResolveSharedZeroFault
MiResolveTransitionFault
MiRestoreTransitionPte
MiRetryNonPagedAllocation
MiReturnImageBase
MiReturnSystemCharges
MiRevertValidPte
MiRewriteTrimPteAsDemandZero
MiRotateComplete
MiScrubAwePage
MiScrubLargeMappedPage
MiScrubNodeLargePageList
MiScrubPage
MiScrubProcessLargePages
MiScrubProcessPhysicalPages
MiSectionCreated
MiSectionDelete
MiSegmentDelete
MiSelectOverflowDllBase
MiSelectRelocationStartHint
MiSelectUserAddress
MiSessionCreate
MiSessionCreateInternal
MiSessionInsertImage
MiSessionLookupImage
MiSessionObjectCreate
MiSessionRemoveImage
MiSessionUpdateImageCharges
MiSetGraphicsPtes
MiSetIdealProcessorThread
MiSetImageHotPatchAllowed
MiSetPagesModified
MiSetProtectionOnSection
MiSetProtectionOnTransitionPte
MiSetReadOnlyOnSectionView
MiSetSystemCodeProtection
MiSetVadBits
MiSharePages
MiSharedVaToPartition
MiShutdownSystem
MiSlowRotateCopy
MiSmallVaStillMapsFrame
MiSoftFaultMappedView
MiSplitDirectMapPage
MiSplitPrivatePage
MiSplitReducedCommitClonePage
MiStoreWriteModifiedPages
MiSwapHardFaultPage
MiSwapNumaStandbyPage
MiSwapStackPage
MiSwitchBaseAddress
MiSwitchToTransition
MiSystemFault
MiTerminateEnclave
MiTerminateWsleCluster
MiThreadIdealNode
MiTimeSingleLargePageZeroWorker
MiTradeActivePage
MiTranslatePageForCopy
MiTrimAllSystemPagableMemory
MiTrimOrAgeWorkingSet
MiTrimSection
MiTrimSharedPageFromViews
MiTrimSystemImagePages
MiTrimUnusedPageFileRegionsWorker
MiTryLockVad
MiUnlinkFreeOrZeroedPage
MiUnlinkStandbyPfn
MiUnloadApproved
MiUnloadHotPatchForUserSid
MiUnlockAndDereferenceVad
MiUnlockAndDereferenceVadShared
MiUnlockBootPageSections
MiUnlockControlAreaFileObjectShared
MiUnlockControlAreaSectionExtend
MiUnlockDriverMappings
MiUnlockDynamicMemoryExclusive
MiUnlockDynamicMemoryNestedParentExclusive
MiUnlockImageExtentsExclusive
MiUnlockImageSection
MiUnlockLoaderEntry
MiUnlockNestedPageTableWritePte
MiUnlockPageTableInternal
MiUnlockPageTableRange
MiUnlockPartitionSystemThreads
MiUnlockVad
MiUnlockVadRange
MiUnlockWorkingSetExclusive
MiUnlockWsle
MiUnmapFrameBuffer
MiUnmapImageInSystemSpace
MiUnmapLargePages
MiUnmapLockedPagesInUserSpace
MiUnmapMdlCommon
MiUnmapPageInHyperSpaceWorker
MiUnmapPatchTable
MiUnmapRetpolineStubs
MiUnmapVad
MiUnmapViewOfSection
MiUnsecureVirtualMemoryAgainstWrites
MiUpControlAreaRefs
MiUpdateImagePfnImportRelocations
MiUpdateLargePageSectionPfns
MiUpdatePartitionLargePfnBitMap
MiUpdatePfnBackingStore
MiUpdatePrefetchPriority
MiUpdateSessionPdeMaster
MiUpdateSystemPdes
MiUpdateUserMappings
MiUpdateVadBits
MiUserFault
MiVadIsCfgBitmap
MiValidFault
MiValidateControlAreaPartition
MiValidateExistingImage
MiValidateImagePfn
MiValidateInPage
MiValidateSectionCreate
MiValidateSectionSigningPolicy
MiWaitForFreePage
MiWaitForInPageComplete
MiWaitForRotateToComplete
MiWaitForVadDeletion
MiWalkEntireImage
MiWalkPageTablesRecursively
MiWalkResetCommitPages
MiWalkVaRange
MiWorkingSetManager
MiWriteAwePtes
MiWriteEnclavePte
MiWriteProtectSystemImages
MiWritePteShadow
MiWriteSharedDemandZeroPte
MiWriteTopLevelPxe
MiWriteUselessChildPte
MiWriteValidPteNewPage
MiWriteValidPteNewProtection
MiWsleFlush
MiWsleFree
MiZeroAllPageFiles
MiZeroAndFlushPtes
MiZeroCfgSystemWideBitmapWorker
MiZeroFault
MiZeroInParallel
MiZeroInParallelWorker
MiZeroLargePage
MiZeroLargePages
MiZeroPage
MiZeroPageThread
MiZeroPhysicalPage
MiZeroWithSystemPtes
MiZeroWithUltraSpace
MmAccessFault
MmAcquireLoadLock
MmAcquireSessionPoolRundown
MmAddRangeToCrashDump
MmAdjustWorkingSetSizeEx
MmAllocateIndependentPagesEx
MmAllocateMappingAddressEx
MmAllocateNonCachedMemory
MmAllocatePagesForMdl
MmAllocatePagesForMdlEx
MmAssignProcessToJob
MmAttachSession
MmChangeKernelCfgBitmap
MmChangeSectionBackingFile
MmCheckCachedPageStates
MmCheckForSafeExecution
MmCheckProcessShadow
MmCleanProcessAddressSpace
MmCombineIdenticalPages
MmCommitSessionMappedView
MmCopyMemory
MmCopyVirtualMemory
MmCreateMirror
MmCreateProcessAddressSpace
MmCreateShadowMapping
MmDeleteShadowMapping
MmDuplicateMemory
MmEnableProcessSvm
MmEnforceWorkingSetLimit
MmEnumerateAddressSpaceAndReferenceImages
MmEnumerateSystemImages
MmExtendSection
MmFlushSection
MmFlushVirtualMemory
MmFreeIndependentPages
MmFreeLoaderBlock
MmFreePoolMemory
MmFreeVirtualMemory
MmGetAvailablePagesBelowPriority
MmGetCacheAttributeEx
MmGetCfgBitMapInformation
MmGetImageInformation
MmGetMaximumUserAddress
MmGetPageFileForCrashDump
MmGetSectionRange
MmGetSessionById
MmGetSessionLocaleId
MmGetSessionMappedViewInformation
MmGrowKernelStackEx
MmInitializeHandBuiltProcess
MmInitializeHandBuiltProcess2
MmInitializeProcessAddressSpace
MmInvalidateDumpAddresses
MmIsDriverVerifyingByAddress
MmIsFileMapped
MmIsSessionInCurrentServerSilo
MmLinkJobProcess
MmLockPagableDataSection
MmManageFaultRange
MmManagePartitionMoveMemory
MmManagePartitionNodeInformation
MmMapLockedPagesSpecifyCache
MmMapMdl
MmMapViewInSessionSpaceEx
MmMapViewInSystemCache
MmMarkHiberPhase
MmMarkPhysicalMemoryAsBad
MmOutSwapProcess
MmOutSwapVirtualAddresses
MmOutSwapWorkingSet
MmPerformMemoryListCommand
MmPostHotPatchDbgModuleMessages
MmPrefetchForCacheManager
MmPrefetchPagesEx
MmPrefetchVirtualAddresses
MmPrefetchVirtualMemory
MmProbeAndLockProcessPages
MmProcessWorkingSetControl
MmProtectMdlSystemAddress
MmProtectPool
MmProtectVirtualMemory
MmQueryMemoryListInformation
MmQueryVirtualMemory
MmQueryWorkingSetInformation
MmRelocatePfnList
MmRemoveExecuteGrants
MmRemoveSystemCacheFromDump
MmResourcesAvailable
MmRotatePhysicalView
MmSecureVirtualMemoryAgainstWrites
MmSecureVirtualMemoryEx
MmSessionGetWin32Callouts
MmSessionSetUnloadAddress
MmSetAddressRangeModifiedEx
MmSetCommitReleaseEligibility
MmSetGraphicsPtes
MmSetPfnListInfo
MmStealTopLevelPage
MmStoreAllocateVirtualMemory
MmStoreDecommitVirtualMemory
MmStoreFreeVirtualMemory
MmStoreProbeAndLockPages
MmUnmapIoSpace
MmUnmapViewInSystemCache
MmUnmapViewInSystemSpace
MmUnsecureVirtualMemory
MmUpdateOldWorkingSetPages
MmUpdateUserShadowStackValue
MmValidateUserCallTarget
MmVerifyCallbackFunctionCheckFlags
MmWaitForCacheManagerPrefetch
MxCopyPage
MxCreateFreePfns
MxMapVa
MxSwapPages
MxZeroBootMappings
NormalizationList__Lock
NormalizationList__Unlock
NtAcceptConnectPort
NtAcquireCrossVmMutant
NtAcquireProcessActivityReference
NtAddAtomEx
NtAdjustGroupsToken
NtAdjustPrivilegesToken
NtAlertResumeThread
NtAlertThread
NtAlertThreadByThreadId
NtAllocateLocallyUniqueId
NtAllocateReserveObject
NtAllocateUuids
NtAllocateVirtualMemory
NtAlpcAcceptConnectPort
NtAlpcCancelMessage
NtAlpcCreatePort
NtAlpcCreatePortSection
NtAlpcCreateResourceReserve
NtAlpcCreateSectionView
NtAlpcCreateSecurityContext
NtAlpcDeletePortSection
NtAlpcDeleteResourceReserve
NtAlpcDeleteSectionView
NtAlpcDeleteSecurityContext
NtAlpcDisconnectPort
NtAlpcImpersonateClientContainerOfPort
NtAlpcImpersonateClientOfPort
NtAlpcOpenSenderProcess
NtAlpcOpenSenderThread
NtAlpcQueryInformation
NtAlpcQueryInformationMessage
NtAlpcRevokeSecurityContext
NtAlpcSendWaitReceivePort
NtAlpcSetInformation
NtAreMappedFilesTheSame
NtAssignProcessToJobObject
NtAssociateWaitCompletionPacket
NtCallEnclave
NtCallbackReturn
NtCancelIoFile
NtCancelIoFileEx
NtCancelSynchronousIoFile
NtCancelTimer
NtCancelWaitCompletionPacket
NtClearEvent
NtClose
NtCloseObjectAuditAlarm
NtCompactKeys
NtCompareObjects
NtCompareTokens
NtCompressKey
NtContinueEx
NtConvertBetweenAuxiliaryCounterAndPerformanceCounter
NtCreateCrossVmEvent
NtCreateCrossVmMutant
NtCreateDebugObject
NtCreateEnclave
NtCreateEvent
NtCreateIoCompletion
NtCreateKeyTransacted
NtCreateKeyedEvent
NtCreateLowBoxToken
NtCreateMailslotFile
NtCreateMutant
NtCreateNamedPipeFile
NtCreatePagingFile
NtCreatePartition
NtCreatePort
NtCreatePrivateNamespace
NtCreateProcessEx
NtCreateRegistryTransaction
NtCreateSemaphore
NtCreateSymbolicLinkObject
NtCreateThread
NtCreateThreadEx
NtCreateTimer
NtCreateTimer2
NtCreateTokenEx
NtCreateUserProcess
NtCreateWaitCompletionPacket
NtCreateWaitablePort
NtCreateWnfStateName
NtCreateWorkerFactory
NtDebugActiveProcess
NtDebugContinue
NtDelayExecution
NtDeleteBootEntry
NtDeleteDriverEntry
NtDeleteFile
NtDeleteKey
NtDeleteObjectAuditAlarm
NtDeletePrivateNamespace
NtDeleteValueKey
NtDeleteWnfStateName
NtDisableLastKnownGood
NtDisplayString
NtDrawText
NtDuplicateObject
NtDuplicateToken
NtEnableLastKnownGood
NtEnumerateBootEntries
NtEnumerateDriverEntries
NtEnumerateKey
NtEnumerateSystemEnvironmentValuesEx
NtEnumerateValueKey
NtExtendSection
NtFilterBootOption
NtFilterToken
NtFindAtom
NtFlushBuffersFileEx
NtFlushInstallUILanguage
NtFlushKey
NtFlushVirtualMemory
NtFreeUserPhysicalPages
NtFreeVirtualMemory
NtFreezeRegistry
NtGetCachedSigningLevel
NtGetCompleteWnfStateSubscription
NtGetContextThread
NtGetCurrentProcessorNumber
NtGetCurrentProcessorNumberEx
NtGetDevicePowerState
NtGetEnvironmentVariableEx
NtGetMUIRegistryInfo
NtGetNextProcess
NtGetNextThread
NtGetNlsSectionPtr
NtGetWriteWatch
NtImpersonateAnonymousToken
NtImpersonateThread
NtInitializeEnclave
NtInitializeNlsFiles
NtInitializeRegistry
NtInitiatePowerAction
NtIsProcessInJob
NtLoadEnclaveData
NtLoadKey3
NtLockFile
NtLockProductActivationKeys
NtLockRegistryKey
NtLockVirtualMemory
NtMakePermanentObject
NtMakeTemporaryObject
NtManageHotPatch
NtManagePartition
NtMapCMFModule
NtMapUserPhysicalPages
NtMapUserPhysicalPagesScatter
NtMapViewOfSection
NtMapViewOfSectionEx
NtNotifyChangeDirectoryFileEx
NtNotifyChangeMultipleKeys
NtNotifyChangeSession
NtOpenDirectoryObject
NtOpenEvent
NtOpenIoCompletion
NtOpenJobObject
NtOpenKeyTransactedEx
NtOpenKeyedEvent
NtOpenMutant
NtOpenObjectAuditAlarm
NtOpenPartition
NtOpenPrivateNamespace
NtOpenProcess
NtOpenProcessTokenEx
NtOpenRegistryTransaction
NtOpenSection
NtOpenSemaphore
NtOpenSession
NtOpenSymbolicLinkObject
NtOpenThread
NtOpenThreadTokenEx
NtOpenTimer
NtPlugPlayControl
NtPowerInformation
NtPrivilegeCheck
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtProtectVirtualMemory
NtPssCaptureVaSpaceBulk
NtPulseEvent
NtQueryAttributesFile
NtQueryAuxiliaryCounterFrequency
NtQueryBootEntryOrder
NtQueryBootOptions
NtQueryDefaultLocale
NtQueryDirectoryObject
NtQueryDriverEntryOrder
NtQueryEaFile
NtQueryEnvironmentVariableInfoEx
NtQueryEvent
NtQueryFullAttributesFile
NtQueryInformationAtom
NtQueryInformationFile
NtQueryInformationJobObject
NtQueryInformationPort
NtQueryInformationProcess
NtQueryInformationThread
NtQueryInformationToken
NtQueryInformationWorkerFactory
NtQueryInstallUILanguage
NtQueryIntervalProfile
NtQueryIoCompletion
NtQueryKey
NtQueryLicenseValue
NtQueryMultipleValueKey
NtQueryMutant
NtQueryObject
NtQueryOpenSubKeys
NtQueryOpenSubKeysEx
NtQueryPerformanceCounter
NtQueryQuotaInformationFile
NtQuerySection
NtQuerySecurityAttributesToken
NtQuerySecurityObject
NtQuerySecurityPolicy
NtQuerySemaphore
NtQuerySymbolicLinkObject
NtQuerySystemEnvironmentValue
NtQuerySystemEnvironmentValueEx
NtQuerySystemInformationEx
NtQuerySystemTime
NtQueryTimer
NtQueryTimerResolution
NtQueryValueKey
NtQueryVolumeInformationFile
NtQueryWnfStateData
NtQueryWnfStateNameInformation
NtQueueApcThreadEx
NtRaiseException
NtRaiseHardError
NtReadFile
NtReadFileScatter
NtReadRequestData
NtRegisterThreadTerminatePort
NtReleaseKeyedEvent
NtReleaseMutant
NtReleaseSemaphore
NtReleaseWorkerFactoryWorker
NtRemoveIoCompletion
NtRemoveIoCompletionEx
NtRemoveProcessDebug
NtRenameKey
NtReplaceKey
NtReplacePartitionUnit
NtReplyPort
NtReplyWaitReceivePortEx
NtReplyWaitReplyPort
NtRequestPort
NtRequestWaitReplyPort
NtResetEvent
NtResetWriteWatch
NtRestoreKey
NtResumeProcess
NtResumeThread
NtRevertContainerImpersonation
NtRollbackRegistryTransaction
NtSaveKeyEx
NtSaveMergedKeys
NtSecureConnectPort
NtSerializeBoot
NtSetBootEntryOrder
NtSetBootOptions
NtSetCachedSigningLevel2
NtSetContextThread
NtSetDebugFilterState
NtSetDefaultHardErrorPort
NtSetDefaultLocale
NtSetDriverEntryOrder
NtSetEaFile
NtSetEvent
NtSetEventBoostPriority
NtSetInformationDebugObject
NtSetInformationFile
NtSetInformationJobObject
NtSetInformationKey
NtSetInformationObject
NtSetInformationProcess
NtSetInformationSymbolicLink
NtSetInformationThread
NtSetInformationToken
NtSetInformationVirtualMemory
NtSetInformationWorkerFactory
NtSetIntervalProfile
NtSetIoCompletion
NtSetIoCompletionEx
NtSetSecurityObject
NtSetSystemEnvironmentValue
NtSetSystemEnvironmentValueEx
NtSetSystemInformation
NtSetSystemTime
NtSetThreadExecutionState
NtSetTimer
NtSetTimerEx
NtSetTimerResolution
NtSetUuidSeed
NtSetValueKey
NtSetVolumeInformationFile
NtSetWnfProcessNotificationEvent
NtShutdownSystem
NtShutdownWorkerFactory
NtSignalAndWaitForSingleObject
NtStartProfile
NtStopProfile
NtSubscribeWnfStateChange
NtSuspendProcess
NtSuspendThread
NtSystemDebugControl
NtTerminateEnclave
NtTerminateJobObject
NtTerminateProcess
NtTerminateThread
NtTestAlert
NtThawRegistry
NtTraceControl
NtTraceEvent
NtTranslateFilePath
NtUmsThreadYield
NtUnlockFile
NtUnmapViewOfSectionEx
NtUnsubscribeWnfStateChange
NtWaitForAlertByThreadId
NtWaitForDebugEvent
NtWaitForKeyedEvent
NtWaitForMultipleObjects
NtWaitForMultipleObjects32
NtWaitForSingleObject
NtWaitForWorkViaWorkerFactory
NtWorkerFactoryWorkerReady
NtWriteFile
NtWriteFileGather
NtWriteRequestData
ObAdjustSecurityQuota
ObCheckActiveHandles
ObCheckRefTraceProcess
ObCloseHandleTableEntry
ObCreateObjectTypeEx
ObDereferenceDeviceMap
ObDereferenceSecurityDescriptor
ObDestroyHandleRevocationBlock
ObEnableEtwReferenceTrace
ObHandleRevocationBlockAddObject
ObInitSystem
ObInsertObjectEx
ObIsDosDeviceLocallyMapped
ObLogSecurityDescriptor
ObMakeTemporaryObject
ObOpenObjectByNameEx
ObOpenObjectByPointer
ObQueryDeviceMapInformation
ObQueryNameStringMode
ObQueryObjectAuditingByHandle
ObQueryRefTraceInformation
ObReferenceFileObjectForWrite
ObRegisterCallbacks
ObRevokeHandles
ObSetCurrentProcessDeviceMap
ObSetHandleAttributes
ObSetRefTraceInformation
ObSetSecurityDescriptorInfo
ObSetSecurityObjectByPointer
ObShutdownSystem
ObUnRegisterCallbacks
ObWaitForMultipleObjects
ObfDereferenceDeviceMap
ObfDereferenceObjectWithTag
ObpAllocateObject
ObpAssignSecurity
ObpAuditObjectAccess
ObpCallPreOperationCallbacks
ObpCaptureBoundaryDescriptor
ObpCaptureObjectCreateInformation
ObpCaptureObjectName
ObpCloseHandle
ObpCreateDirectoryObject
ObpCreateHandle
ObpCreateSymbolicLinkName
ObpCreateTypeArray
ObpDecrementHandleCount
ObpDeleteNameCheck
ObpDeleteSymbolicLinkName
ObpDeregisterObject
ObpFreeObject
ObpFreeWorkItemBlock
ObpGetShadowDirectory
ObpHandleRevocationBlockRemoveInsertedObject
ObpIncrementHandleCountEx
ObpInsertCallbackByAltitude
ObpLockDirectoryExclusive
ObpLockDirectoryShared
ObpLookupObjectName
ObpMarkDirectoryObjectsTemporary
ObpMarkDirectoryTreeTemporary
ObpPushRefDerefInfo
ObpReferenceDeviceMap
ObpReferenceObjectByHandleWithTag
ObpReferenceProcessObjectByHandle
ObpReferenceSecurityDescriptor
ObpRegisterObject
ObpRemoveNamespaceFromTable
ObpSetDeviceMap
ObpSetObjectAuditInfo
ObpStartRuntimeStackTrace
ObpStopRuntimeStackTrace
ObpVerifyAccessToBoundaryEntry
ObpVerifyCreatorAccessCheck
PdcAcquireRwLockExclusive
PdcTaskClientRequest
PerfDiagpProxyWorker
PerfInfoLogSysCallEntry
PerfInfoLogSysCallExit
PerfLogExecutiveResourceInitialize
PerfLogExecutiveResourceRelease
PerfLogExecutiveResourceSetOwnerPointer
PerfLogExecutiveResourceWait
PerfLogImageUnload
PerfLogSpinLockRelease
PfCheckDeprioritizeImage
PfFileInfoNotify
PfGenerateTrace
PfHardFaultLog
PfLockExclusiveAcquire
PfLockExclusiveRelease
PfLockSharedTryAcquire
PfQuerySuperfetchInformation
PfSnAppLaunchScenarioControl
PfSnAsyncContextInitialize
PfSnBeginScenario
PfSnCheckActionsNeeded
PfSnCheckModernApp
PfSnEndTrace
PfSnGetCompletedTrace
PfSnGetPrefetchInstructions
PfSnGetUnsafeProcessParameters
PfSnIsHostingApplication
PfSnLogPageFault
PfSnOperationProcess
PfSnPopulateReadList
PfSnPrefetchCacheEntryUpdate
PfSnPrefetchScenario
PfSnPrefetchSections
PfSnPrefetchSectionsCleanup
PfSnQueryPrefetcherInformation
PfSnSectionInfoCleanupWorkItem
PfTAccessTracingCleanup
PfTAccessTracingStart
PfTCleanup
PfTLoggingWorker
PfTSetTraceWorkerPriority
PfTSetTracingPriority
PfpParametersPropagate
PfpParametersWatcher
PfpPfnPrioRequest
PfpPrefetchRequestPerform
PfpQueryGpuUtilization
PfpRpCHashAddEntries
PfpRpCHashDeleteEntries
PfpRpCHashEmpty
PfpRpCHashGrow
PfpRpFileKeyUpdate
PfpRpShutdown
PfpScenCtxPrefetchAbortSet
PfpScenCtxPrefetchStateSet
PfpScenCtxPrefetchWait
PfpScenCtxQueryScenarioInformation
PfpScenCtxScenarioSet
PfpScenCtxServiceThreadSet
PiAuCheckTokenMembership
PiAuDoesClientHavePrivilege
PiAuVerifyAccessToObject
PiCMCaptureCreateDeviceInputData
PiCMCaptureDeviceListInputData
PiCMCaptureInterfaceAliasInputData
PiCMCaptureInterfaceListInputData
PiCMCaptureObjectInputData
PiCMCapturePropertyInputData
PiCMCaptureRegisterInterfaceInputData
PiCMCaptureRegistryInputData
PiCMCaptureRegistryPropertyInputData
PiCMCreateDevice
PiCMDeleteDevice
PiCMGenerateDeviceInstance
PiCMGetDeviceIdList
PiCMGetDeviceInterfaceAlias
PiCMGetDeviceInterfaceList
PiCMOpenClassKey
PiCMOpenDeviceInterfaceKey
PiCMOpenDeviceKey
PiCMOpenObjectKey
PiCMRegisterDeviceInterface
PiCMReleaseObjectInputData
PiCMReleasePropertyInputData
PiCMReleaseRegistryInputData
PiCMReleaseRegistryPropertyInputData
PiCMUnregisterDeviceInterface
PiControlGetDeviceInterfaceEnabled
PiDcHandleCustomDeviceEvent
PiDmAddCacheReferenceForObject
PiDmEnumObjectsWithCallback
PiDmGetObject
PiDmGetObjectCount
PiDmListAddList
PiDmListAddObject
PiDmListEnumObjectsWithCallback
PiDmListRemoveList
PiDmListRemoveObject
PiDmObjectGetAggregatedBooleanPropertyData
PiDmObjectGetCachedObjectPropertyData
PiDmObjectGetCachedObjectReference
PiDmObjectIsEnumerable
PiDmObjectProcessPropertyChange
PiDmObjectReleaseLock
PiDmObjectUpdateCachedObjectProperty
PiDmRemoveCacheReferenceForObject
PiDmaGuardQueueFlush
PiDmaGuardQueueRemoveEntry
PiDqDispatch
PiDqIrpQueryCreate
PiDqIrpQueryGetResult
PiDqObjectManagerServiceActionQueue
PiDqQueryApplyObjectEvent
PiDqQueryLock
PiDqQuerySerializeActionQueue
PiDqQueryUnlock
PiDrvDbLoadNode
PiDrvDbUnloadNode
PiDrvDbUnloadNodeWaitWorkerCallback
PiDrvDbUnloadNodeWorkerCallback
PiGetDeviceRegistryProperty
PiGetRelatedDevice
PiInitializeDevice
PiPnpRtlBeginOperation
PiPnpRtlCacheObjectBaseKey
PiPnpRtlEndOperation
PiPnpRtlEnsureObjectCached
PiPnpRtlGetCurrentOperation
PiPnpRtlObjectEventWorker
PiPnpRtlSetDeviceRegProperty
PiPnpRtlSetObjectProperty
PiProcessNewDeviceNode
PiQueryAndAllocateBootResources
PiQueryResourceRequirements
PiSwCompleteCreate
PiSwDeviceFree
PiSwIrpCancelStartCreate
PiSwIrpCleanup
PiSwIrpGetLifetime
PiSwIrpInterfacePropertySet
PiSwIrpPropertySet
PiSwIrpSetLifetime
PiSwLock
PiSwPdoPnPDispatch
PiSwProcessParentRemoveIrp
PiSwProcessParentStartIrp
PiSwStopDestroy
PiSwUnlock
PiUEventGetDeviceInstanceIdFromUserHandle
PipDgqInsertEntry
PipGenerateContainerID
PipKsrNotifyDrivers
PipMakeGloballyUniqueId
PipProcessStartPhase3
PipResetDevices
PnpAllocateResources
PnpAsynchronousCall
PnpCallAddDevice
PnpCallDriverEntry
PnpCancelDeviceActionRequest
PnpChainDereferenceComplete
PnpCtxCloseMachine
PnpDelayedRemoveWorker
PnpDeleteDeviceInterfaces
PnpDeviceActionWorker
PnpDeviceEventWorker
PnpDisableDeviceInterfaces
PnpDriverLoadingFailed
PnpGetDeviceInstancePropertyData
PnpGetDeviceInstanceRegistryValue
PnpGetDeviceInterfacePropertyData
PnpGetDevicePropertyData
PnpInitializeNotifyEntry
PnpIsSafeToExamineUserModeTeb
PnpNotifyDeviceClassChange
PnpNotifyDriverCallback
PnpNotifyHwProfileChange
PnpNotifyTargetDeviceChange
PnpNotifyTargetDeviceChangeNotifyEntry
PnpProcessRebalance
PnpQueuePendingSurpriseRemoval
PnpReallocateResources
PnpRequestDeviceAction
PnpSetDeviceInterfacePropertyData
PnpSetDevicePropertyData
PnpShutdownDevices
PnpUnlinkDeviceRemovalRelations
PnpUnregisterPlugPlayNotification
PoClearPowerRequestInternal
PoEnergyContextStart
PoFxActivateComponent
PoFxPrepareDevice
PoFxStartDevicePowerManagement
PoFxSystemLatencyNotify
PoGetIdleTimes
PoGetRequester
PoInitializeBroadcast
PoIssueCoalescingNotification
PoNotifyMediaBuffering
PoQueryProcessEnergyTrackingState
PoRequestShutdownEvent
PoSetPowerRequestInternal
PoShutdownBugCheck
PoTraceSystemTimerResolution
PoUnregisterCoalescingCallback
PoUnregisterPowerSettingCallback
PopAcquireAdaptiveLock
PopAcquireAwaymodeLock
PopAcquirePolicyLock
PopAcquirePowerRequestPushLock
PopAcquireRwLockExclusive
PopAcquireRwLockShared
PopAcquireTransitionLock
PopAcquireUmpoPushLock
PopBatteryDeviceState
PopBatteryEtwCallback
PopBlackBoxUpdate
PopBootStatCheckIntegrity
PopBootStatGet
PopBootStatSet
PopBootStatUnlock
PopCallPowerSettingCallback
PopCheckForWork
PopCoalescingNotify
PopCreatePowerRequestObject
PopCreateUserPowerRequest
PopCurrentPowerState
PopDiagTraceFxRundown
PopDirectedDripsDiagTraceNotifyDevices
PopDirectedDripsNotifyResiliencyCompletionWorker
PopDirectedDripsUmMarkTestDevices
PopDispatchAcDcCallback
PopDispatchCallback
PopDispatchFullWake
PopDispatchNotificationsToList
PopDispatchShutdownEvent
PopDripsWatchdogAcquireContextLock
PopDripsWatchdogDiagnosticWorker
PopDripsWatchdogNotifySessionStart
PopDripsWatchdogReleaseContextLock
PopDripsWatchdogStartWatchdog
PopDripsWatchdogStopWatchdog
PopEtEnergyTrackerCreate
PopEtEnergyTrackerQuery
PopEtGetNextEnergyTracker
PopEtInternerLock
PopEtProcessEnumSnapshotCallback
PopEventCalloutDispatch
PopFanReportBootStartDevices
PopFxAcpiPrepareDevice
PopFxActivateComponent
PopFxActivateDevicesForSx
PopFxAddLogEntry
PopFxBuildDirectedDripsCandidateDeviceList
PopFxBuildDripsBlockingDeviceList
PopFxClearDirectedDripsCandidateDeviceList
PopFxDestroyDirectedDripsCandidateDeviceList
PopFxDestroyDripsBlockingDeviceList
PopFxEmergencyWorker
PopFxFindAcpiDeviceByUniqueId
PopFxFindAndReferenceAcpiDevice
PopFxIdleDevicesFromSx
PopFxInsertAcpiDevice
PopFxLowPowerEpochCallback
PopFxPauseDeviceAccounting
PopFxPrepareDevicesForShutdown
PopFxProcessWorkPool
PopFxRegisterDeviceWithPep
PopFxRegisterPluginEx
PopFxRemoveAcpiDevice
PopFxRemoveDevice
PopFxResidentTimeoutRoutine
PopFxResumeDeviceAccounting
PopFxSetDeviceAccountingCsPlatformState
PopFxStartDeviceAccounting
PopFxStopDeviceAccounting
PopGetEnergyCounter
PopGetSessionId
PopGetSettingNotificationName
PopGetSettingValue
PopGracefulShutdown
PopHandleNextState
PopInvokeWin32Callout
PopIrpWorker
PopPdcCsDeviceNotification
PopPepDeviceStarted
PopPepIdleTimeoutRoutine
PopPepIterateDeviceList
PopPepPlatformStateRegistered
PopPepRemoveDevice
PopPepResetDeviceAccountingLevel
PopPepWork
PopPolicySystemIdle
PopPolicyWorkerAction
PopPolicyWorkerActionPromote
PopPolicyWorkerNotify
PopPowerActionWatchdog
PopPowerAggregatorWorker
PopPowerButtonBugcheckConfigure
PopPowerInformationInternal
PopPowerRequestActionInfo
PopPowerRequestCreateInfo
PopProcessorInformation
PopQueryPowerButtonBugcheckEnabled
PopReleaseAdaptiveLock
PopReleaseAwaymodeLock
PopReleasePolicyLock
PopSetDisplayStatus
PopSetWatchdog
PopThermalPollingPowerSettingCallback
PopThermalSxEntry
PopThermalSxExit
PopThermalTelemetryWorker
PopThermalZoneUpdateCoolingPolicy
PopTransitionSystemPowerStateEx
PopTransitionToSleep
PopUnlockAfterSleepWorker
PpCheckInDriverDatabase
PpDevCfgProcessDevices
PpDevNodeLockTree
PpDeviceRegistration
PpIrpAllocateDeviceUsageNotification
PpReleaseBootDDB
PpmAcquireLock
PpmCheckCustomRun
PpmEventTraceControlCallback
PpmIdleExecuteTransition
PpmIdleUsingStateSelection
PpmQueryPlatformStateResidency
PpmReleaseLock
PpmTryAcquireLock
PpmWmiGetAllData
PsAdjustBasicEnclaveThreadList
PsAltSystemCallDispatch
PsAssignImpersonationToken
PsAttachSiloToCurrentThread
PsBoostThreadIoEx
PsCallEnclave
PsCallImageNotifyRoutines
PsCaptureExceptionPort
PsChangeQuantumTable
PsConvertToGuiThread
PsCreateVsmEnclave
PsDetachSiloFromCurrentThread
PsDisableImpersonation
PsDispatchIumService
PsEnterPriorityRegion
PsFreezeProcess
PsGetCurrentProcess
PsGetCurrentProcessSessionId
PsGetCurrentProcessWin32Process
PsGetCurrentProcessWow64Process
PsGetCurrentServerSilo
PsGetCurrentServerSiloGlobals
PsGetCurrentSilo
PsGetCurrentThreadId
PsGetCurrentThreadPreviousMode
PsGetCurrentThreadProcess
PsGetCurrentThreadProcessId
PsGetCurrentThreadStackBase
PsGetCurrentThreadStackLimit
PsGetCurrentThreadTeb
PsGetCurrentThreadWin32Thread
PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion
PsGetEffectiveContainerId
PsGetIoPriorityThread
PsGetNextProcess
PsGetNextProcessThread
PsGetPreviousProcess
PsGetProcessDeepFreezeStats
PsGetProcessEnclaveModuleInfo
PsGetProcessExitTime
PsGetThreadProperty
PsGetWin32KFilterSet
PsGetWorkOnBehalfThread
PsImpersonateClient
PsImpersonateContainerOfThread
PsInitializeQuotaSystem
PsInitializeVsmEnclave
PsInsertPermanentSiloContextEx
PsInvokeWin32Callout
PsIsComponentEnabled
PsIsCurrentThreadInServerSilo
PsIsCurrentThreadPrefetching
PsIsVsmEnclaveTerminated
PsIsWin32KFilterAuditEnabled
PsIsWin32KFilterEnabled
PsIumEnableOnDemandDebugWithResponse
PsIumGetOnDemandDebugChallenge
PsLeavePriorityRegion
PsLoadVsmEnclaveData
PsLookupProcessByProcessId
PsLookupThreadByThreadId
PsMapSystemDlls
PsNotifyCoreDriversInitialized
PsOpenProcess
PsPicoWalkUserStack
PsQueryProcessCommandLine
PsQueryProcessEnergyValues
PsQueryProcessExceptionFlags
PsQueryRuntimeProcess
PsQuerySectionSignatureInformation
PsQueryStatisticsProcess
PsQueryTotalCycleTimeProcess
PsReferenceEffectiveToken
PsReferenceImpersonationTokenEx
PsReferencePartitionByHandle
PsReferencePartitionSystemProcess
PsReferencePrimaryToken
PsRegisterAltSystemCallHandler
PsRemoveCreateThreadNotifyRoutine
PsRemoveLoadImageNotifyRoutine
PsReportProcessMemoryLimitViolation
PsRestoreImpersonation
PsResumeProcess
PsResumeThread
PsRevertToSelf
PsSetCurrentThreadPrefetching
PsSetProcessFaultInformation
PsSetProcessTelemetryAppState
PsSetProcessWin32Process
PsShutdownSystem
PsStartSiloMonitor
PsSuspendProcess
PsSuspendThread
PsSwapImpersonationToken
PsSwapProcessWorkingSet
PsTerminateMinimalProcess
PsTerminateProcess
PsTerminateSystemThread
PsTerminateVsmEnclave
PsThawProcess
PsUnregisterSiloMonitor
PsUpdateActiveProcessAffinity
PsWatchWorkingSet
PsWrapApcWow64Thread
PspAllocateProcess
PspAllocateRateControl
PspAllocateThread
PspApplyJobLimitsToProcess
PspApplyTimerDelayProcess
PspApplyWorkingSetLimitsToProcess
PspAssignProcessQuotaBlock
PspAssignProcessToJob
PspAssignProcessToJobList
PspAttachThreadToUmsCompletionList
PspBoostJobIoPriorityCallback
PspCallJobHierarchyCallbacks
PspCallProcessNotifyRoutines
PspCatchCriticalBreak
PspChangeJobMemoryUsageByProcess
PspChargeJobWakeCounter
PspChargeProcessWakeCounter
PspCompleteServerSiloShutdownDeferred
PspConvertSiloToServerSilo
PspCopyAndFixupParameters
PspCreateActivityReference
PspCreatePicoProcess
PspCreatePicoThread
PspCreateProcess
PspCreateSilo
PspCreateThread
PspDetachThreadFromUmsCompletionList
PspEnableAltSystemCallHandling
PspEnforceLimitsJobPostCallback
PspEnumJobsAndProcessesInJobHierarchy
PspEvaluateAndNotifyEmptyJob
PspExecuteJobFreezeThawCallback
PspExitProcess
PspExitThread
PspFindThreadForTeb
PspFreeUserFiberShadowStack
PspGetContext
PspGetContextThreadInternal
PspGetJobLockHierarchyForDeletion
PspGetMemoryPartitionFromJobList
PspGetMemoryPartitionImplicit
PspGetNextChildJob
PspGetNextJob
PspGetPreviousProcessThread
PspGetSetContextInternal
PspImplicitAssignProcessToJob
PspInitPhase0
PspInitializeThunkContext
PspInsertThread
PspIumGetPhysicalPage
PspJobClose
PspJobDelete
PspJobNotificationWorker
PspLocateSystemDll
PspLockQuotaExpansion
PspLookupProcessQuotaBlock
PspMapView
PspMarkServerSiloAsTerminating
PspNotificationPacketCallback
PspNotifyProcessBackgroundTransition
PspNotifyServerSiloCreation
PspNotifyServerSiloTermination
PspPrepareSystemDllInitBlock
PspProcessClose
PspProcessDynamicEHContinuationTargets
PspProcessDynamicEnforcedAddressRanges
PspPropagateHandle
PspQueryJobHierarchyAccountingInformation
PspQueryJobHierarchyProcessIdList
PspQueryLastCallThread
PspQueryWorkingSetWatch
PspQueueDeferredWorkAndWait
PspReferenceSystemDll
PspRelinquishUmsThreadSpecialApc
PspRemoveEnclaveThreadWait
PspRemoveProcessFromJobChain
PspRemoveQuotaBlock
PspRundownSingleProcess
PspSelectVsmEnclaveByNumber
PspSendProcessNotificationToJobChain
PspSetContext
PspSetContextThreadInternal
PspSetCpuRateControlJobPostCallback
PspSetCreateProcessNotifyRoutine
PspSetJobIoRateControl
PspSetNetRateControl
PspSetPicoThreadDescriptorBase
PspSetProcessAffinityUpdateMode
PspSetProcessForegroundBackgroundRequest
PspSetProcessPriorityClass
PspSetQuotaLimits
PspSetupUserProcessAddressSpace
PspStorageEmptyArrayNonReadonly
PspSystemThreadStartup
PspTeardownPartition
PspTerminatePicoProcess
PspTerminateProcessesJobCallback
PspTerminateThreadByPointer
PspThreadDelete
PspThreadFromTicket
PspUmsUnInitThread
PspUnlockAffinityUpdateExclusive
PspUnlockProcessExclusive
PspUnlockProcessExclusiveUnsafe
PspUnlockProcessListExclusive
PspUnlockQuotaExpansion
PspUnlockQuotaListExclusive
PspUnlockThreadSecurityExclusive
PspUnlockWorkingSetChangeExclusiveUnsafe
PspUpdateCreateInfo
PspUserThreadStartup
PspValidateThread
PspWaitOnAllProcessesJobCallback
PspWow64ReadOrWriteThreadCpuArea
PspWow64SetContextThread
PspWow64ThunkProcessParameters
RawDispatch
RemoveListEntryPte
RemoveListHeadPte
RtlAcquirePrivilege
RtlCSparseBitmapEnterLockingRegion
RtlCSparseBitmapLeaveLockingRegion
RtlCheckTokenCapability
RtlCheckTokenMembershipEx
RtlCreateUserStack
RtlFindDynamicEnforcedAddressInRanges
RtlGetActiveConsoleId
RtlGetCurrentServiceSessionId
RtlGetNtProductType
RtlGetThreadLangIdByIndex
RtlGuardIsValidStackPointer
RtlGuardIsValidWow64StackPointer
RtlInsertDynamicFunctionTable
RtlIsSandboxedTokenHandle
RtlNtStatusToDosError
RtlPcToFilePath
RtlQueryProcessPlaceholderCompatibilityMode
RtlQueryThreadPlaceholderCompatibilityMode
RtlRemoveDynamicFunctionTable
RtlRunOnceExecuteOnce
RtlSetProcessPlaceholderCompatibilityMode
RtlSetThreadPlaceholderCompatibilityMode
RtlWalkFrameChain
RtlpAcquireBootStatusLock
RtlpAllocateAtom
RtlpAllowsLowBoxAccess
RtlpCSparseBitmapLock
RtlpCSparseBitmapUnlock
RtlpFcEnterRegion
RtlpFindDynamicEHContinuationTarget
RtlpHpAcquireLockExclusive
RtlpHpAcquireLockShared
RtlpHpAcquireQueuedLockExclusive
RtlpHpAcquireReleaseLockExclusive
RtlpHpEnvGetHeapManager
RtlpHpFixedVsAllocate
RtlpHpFixedVsFree
RtlpHpFreeHeap
RtlpHpHeapCompact
RtlpHpHeapExtendContext
RtlpHpLargeAlloc
RtlpHpLargeAllocSetExtraPresent
RtlpHpLargeAllocSize
RtlpHpLargeFree
RtlpHpLfhBucketAddSubsegment
RtlpHpLfhBucketAllocate
RtlpHpLfhBucketGetSubsegment
RtlpHpLfhBucketUpdateAffinityMapping
RtlpHpLfhContextCompact
RtlpHpLfhOwnerCompact
RtlpHpLfhSlotAllocate
RtlpHpLfhSubsegmentCreate
RtlpHpLfhSubsegmentDecommitPages
RtlpHpLfhSubsegmentFreeBlock
RtlpHpLfhSubsegmentIncBlockCounts
RtlpHpLfhSubsegmentInitialize
RtlpHpReleaseQueuedLockExclusive
RtlpHpSegContextCompact
RtlpHpSegMgrCommitComplete
RtlpHpSegMgrCommitInitiate
RtlpHpSegMgrVaCtxAlloc
RtlpHpSegMgrVaCtxFree
RtlpHpSegMgrVaCtxInsert
RtlpHpSegPageRangeAllocate
RtlpHpSegPageRangeCoalesce
RtlpHpSegPageRangeShrink
RtlpHpSizeHeap
RtlpHpVaMgrAlloc
RtlpHpVaMgrCtxFree
RtlpHpVsChunkSplit
RtlpHpVsSubsegmentCommitPages
RtlpInsertStringAtom
RtlpIsFrameInBoundsEx
RtlpIsUtf8Process
RtlpLfhIncrementDataSlot
RtlpLockAtomTable
RtlpLogExceptionDispatch
RtlpLogExceptionHandler
RtlpLookupUserFunctionTable
RtlpNewSecurityObject
RtlpOpenBaseImageFileOptionsKeyEx
RtlpOpenImageFileOptionsKeyEx
RtlpProcessIFEOKeyFilter
RtlpQueryLowBoxId
RtlpRunOnceWaitForInit
RtlpTerminateCurrentProcess
RtlpTraceDatabaseAcquireLock
RtlpWalkFrameChain
RtlpWalkWowStack
RtlpWow64CreateUserStack
SLGetSubscriptionPfn
SLQueryLicenseValueInternal
SLUpdateLicenseDataInternal
SMKM_STORE::SmStAcquireStoreLockExclusive
SMKM_STORE::SmStCleanup
SMKM_STORE::SmStCompareRegionDataCallback
SMKM_STORE::SmStDirectRead
SMKM_STORE::SmStDirectReadIssue
SMKM_STORE::SmStHelperSendCommand
SMKM_STORE::SmStInSwapStore
SMKM_STORE::SmStMapPhysicalRegion
SMKM_STORE::SmStMapVirtualRegion
SMKM_STORE::SmStOutSwapStore
SMKM_STORE::SmStPrioritizeRegionsStore
SMKM_STORE::SmStReadThread
SMKM_STORE::SmStTrimWsStore
SMKM_STORE::SmStTrimWsStoreBatch
SMKM_STORE::SmStUnmapVirtualRegion
SMKM_STORE::SmStWorkItemQueue
SMKM_STORE::SmStWorker
SMKM_STORE_MGR::SmCompressCtxBalancerThread
SMKM_STORE_MGR::SmCompressCtxWorkerThread
SMKM_STORE_MGR::SmFeAddInitiate
SMKM_STORE_MGR::SmFeEmpty
SMKM_STORE_MGR::SmFeEvictComplete
SMKM_STORE_MGR::SmFeEvictInitiate
SMKM_STORE_MGR::SmFeReadInitiate
SMKM_STORE_MGR::SmFeSetEvictFailed
SMKM_STORE_MGR::SmFeStoreDelete
SMKM_STORE_MGR::SmFeStoreEvictKeys
SSHSupportReleasePushLockExclusive
ST_STORE::StDmHandleDecompressionFailure
ST_STORE::StDmPageRemove
ST_STORE::StDmSinglePageCopy
ST_STORE::StDmpSinglePageAdd
ST_STORE::StDmpSinglePageRetrieve
ST_STORE::StMapAndLockRegion
ST_STORE::StUnlockAndUnmapRegion
SeAccessCheckByType
SeAccessCheckByTypeWithAdminlessChecks
SeCaptureAtomTableCallout
SeCaptureSubjectContext
SeCaptureSubjectContextEx
SeClearLearningModeObjectInformation
SeComputeAutoInheritByObjectTypeEx
SeComputeCreatorDeniedRights
SeCreateAccessState
SeCreateClientSecurity
SeCreateClientSecurityEx
SeDefaultObjectMethod
SeExamineGlobalSacl
SeExchangePrimaryToken
SeGetImageRequiredSigningLevel
SeGetTokenControlInformation
SeImpersonateClientEx
SeIsTokenAssignableToProcess
SeLockSubjectContext
SeLogAccessFailure
SeMarkLogonSessionForTerminationNotificationEx
SeMaximumAuditMaskFromGlobalSacl
SeOpenObjectAuditAlarmForNonObObject
SeQueryInformationToken
SeQuerySecurityAttributesToken
SeQueryServerSiloToken
SeQuerySessionIdToken
SeQuerySessionIdTokenEx
SeQueryTrustedPlatformModuleInformation
SeQueryUserSidToken
SeRegisterLogonSessionTerminatedRoutine
SeRegisterLogonSessionTerminatedRoutineEx
SeRegisterObjectTypeMandatoryPolicy
SeReleaseSubjectContext
SeSecurityAttributePresent
SeSetLearningModeObjectInformation
SeSetMandatoryPolicyToken
SeSetPrivateNameSpaceToken
SeSetSecurityAttributesTokenEx
SeSetSessionIdToken
SeSetSessionIdTokenWithLinked
SeSetVirtualizationToken
SeSubProcessToken
SeTokenGetNoChildProcessRestricted
SeTokenGetRedirectionTrustPolicy
SeTokenIsNoChildProcessRestrictionEnforced
SeTokenSetNoChildProcessRestricted
SeTokenSetRedirectionTrustPolicy
SeUnregisterLogonSessionTerminatedRoutine
SeUnregisterLogonSessionTerminatedRoutineEx
SendCaptureStateNotificationsWorker
SepAccessCheckAndAuditAlarmWithAdminlessChecks
SepAcquireOrderedReadLocks
SepAddLuidToIndexEntry
SepAddTokenLogonSession
SepAdtLogAuditRecord
SepBlockAccessForLogonSession
SepCanTokenMatchAllPackageSid
SepCheckForCriticalAceRemoval
SepCleanupLUIDDeviceMapDirectory
SepCreateClientSecurityEx
SepCreateLogonSessionTrack
SepCreateTokenEx
SepDeReferenceLogonSession
SepDeReferenceSharedSidEntries
SepDeleteLogonSessionTrack
SepDeleteSessionLowboxEntries
SepDeleteUnreferencedLogonSessionsInSilo
SepDereferenceCachedHandlesEntry
SepDereferenceLowBoxNumberEntry
SepDuplicateToken
SepExamineGlobalSaclEx
SepFilterCheck
SepFilterToken
SepGetCurrentLogLevel
SepGetLearningModeObjectInformation
SepGetLogonSessionAccountInfo
SepGetProcUniqueLuidAndIndexFromTokenEx
SepIdAssignableAsGroup
SepInitializationPhase0
SepInitializationPhase1
SepInsertOrReferenceSharedSidEntries
SepInternalSetSecurityAttributesToken
SepIsChildTokenByPointer
SepIsParentOfChildAppContainer
SepIsSiblingTokenByPointer
SepIsValidProcUniqueLuid
SepLogLpacAccessFailure
SepLogTokenSidManagement
SepLogUnmatchedSessionFlagImpersonationAttempt
SepMakeLogonSessionsSiblings
SepMandatoryIntegrityCheck
SepNotifyFileSystems
SepQueueWorkItem
SepReferenceLogonSessionSilo
SepReferenceTokenUsingPseudoHandle
SepRemoveTokenLogonSession
SepRmCallLsa
SepRmCapUpdateWrkr
SepRmCommandServerThread
SepRmGlobalSaclFind
SepRmGlobalSaclSetWrkr
SepRmReferenceFindCap
SepSetServerSiloToken
SepSetTokenCachedHandles
SepSetTokenClaims
SepSetTokenLowboxNumber
SepSetTokenUserAndGroups
SepTrustLevelCheck
SepUpdateLogonSessionTrack
SepValidLabelSubjectContext
SepValidOwnerSubjectContext
SepVerifyDesktopAppPolicyOverrideCaller
SkipVirtualAccessCheck
SmFirstTimeInit
SmGetRegistrationInfo
SmKmCleanup
SmKmIssueVolumeIo
SmKmKeyGenGenerate
SmKmKeyGenKeyDelete
SmKmKeyGenNewKey
SmKmStoreAdd
SmKmStoreDelete
SmKmStoreHelperCommandProcess
SmKmStoreHelperWorker
SmKmVirtualLockContextIncreaseWsMin
SmKmVirtualLockCtxLockMemory
SmKmVirtualLockCtxMemoryUnlocked
SmPerformStoreSwapOperation
SmProcessCompressionInfoRequest
SmProcessCreateRequest
SmProcessStoreMemoryPriorityRequest
SmSetThreadPagePriority
SmSetThreadSystemPagePriority
SmStoreCompressionStart
SmStoreCompressionStop
SmStoreSetProcessVaRanges
SmSwapStore
SmcCacheAdd
SmcCacheCreatePrepare
SmcCacheRemove
SmcGetCacheStats
SmcStoreDelete
SmcStoreResize
SmcStoreSlotAbort
SmcStoreSlotCommit
SmcStoreSlotReserve
SmpFpWaitForResource
SmpKeyedStoreEntryGet
SmpKeyedStoreReference
SmpKeyedStoreSetVaRanges
SmpSystemStoreCreate
SshpSetCollectionActive
StLockTryAcquireExclusive
TryLockShutdownShared
TtmiAcquireCurrentSession
TtmiCloseEventQueue
TtmiCreateEventQueue
TtmiLogCalloutStart
TtmiLogCalloutStop
TtmiLogCalloutWatchdogCrashSkipped
TtmiLogCleanupCurrentSessionStart
TtmiLogCleanupCurrentSessionStop
TtmiLogDeviceArrivalNotified
TtmiLogDeviceArrivedTerminalEvent
TtmiLogDeviceAssignedTerminalEvent
TtmiLogDeviceDepartedTerminalEvent
TtmiLogDeviceDepartureNotified
TtmiLogDeviceEnumeratedTerminalEvent
TtmiLogDeviceFromTerminalRemoved
TtmiLogDeviceInputNotified
TtmiLogDeviceSetInputWakeCapability
TtmiLogDeviceToTerminalAssigned
TtmiLogDispatchApiStart
TtmiLogDispatchApiStop
TtmiLogDisplayPowerRequestSet
TtmiLogEnterProximity
TtmiLogError
TtmiLogExitProximity
TtmiLogInitCurrentSessionStart
TtmiLogInitCurrentSessionStop
TtmiLogInitiateModernStandbyTransitionStart
TtmiLogInitiateModernStandbyTransitionStop
TtmiLogProximityBlockedRequest
TtmiLogProximityPowerPress
TtmiLogQueueCreated
TtmiLogSessionActivate
TtmiLogSessionDeactivate
TtmiLogSessionDeviceAssignmentPolicySet
TtmiLogSessionPowerControlStart
TtmiLogSessionPowerControlStop
TtmiLogSessionPowerStateChange
TtmiLogTerminalCreated
TtmiLogTerminalDisplayStateChangedEvent
TtmiLogTerminalOffRequest
TtmiLogTerminalOnRequest
TtmiLogTerminalStateMachine
TtmiRetrieveEventFromQueue
TtmiWriteEventToSingleQueue
TtmpAcquireSessionById
TtmpAcquireSessionFromTerminalHandle
TtmpCalloutArmWatchdog
TtmpCloseTerminalHandle
TtmpDeleteQueue
TtmpDispatchCreateTerminal
TtmpDispatchGetTerminalEvent
TtmpDispatchOpenTerminal
TtmpInitiateModernStandbyTransition
TtmpScheduledEvaluationWorker
TtmpSessionPowerControl
TtmpSessionWorker
TtmpStopCallout
TtmpTerminal0PowerSettingCallback
UNLOCK_ADDRESS_SPACE
UNLOCK_ADDRESS_SPACE_UNORDERED
UNLOCK_CM_RM_LIST
UNLOCK_HIVE_LOAD
UNLOCK_PAGE_TABLE_COMMITMENT
UNLOCK_TRANSACTION_LIST
UnlockShutdown
VerifierExAcquireFastMutex
VerifierExAcquireFastMutexUnsafe
VerifierExAcquireResourceExclusiveLite
VerifierExAcquireResourceSharedLite
VerifierExAcquireSharedStarveExclusive
VerifierExAcquireSharedWaitForExclusive
VerifierExAllocatePoolWithQuota
VerifierExAllocatePoolWithQuotaTag
VerifierExEnterCriticalRegionAndAcquireResourceExclusive
VerifierExEnterCriticalRegionAndAcquireResourceShared
VerifierExEnterPriorityRegionAndAcquireResourceExclusive
VerifierExEnterPriorityRegionAndAcquireResourceShared
VerifierExReleaseFastMutex
VerifierExReleaseFastMutexUnsafe
VerifierExTryToAcquireFastMutex
VerifierIoAllocateIrp
VerifierKeAcquireInStackQueuedSpinLock
VerifierKeAcquireInStackQueuedSpinLockAtDpcLevel
VerifierKeAcquireInStackQueuedSpinLockForDpc
VerifierKeAcquireInStackQueuedSpinLockRaiseToSynch
VerifierKeAcquireSpinLockAtDpcLevel
VerifierKeAcquireSpinLockRaiseToDpc
VerifierKeInitializeMutant
VerifierKeLeaveCriticalRegion
VerifierKeReleaseInStackQueuedSpinLock
VerifierKeReleaseInStackQueuedSpinLockForDpc
VerifierKeReleaseInStackQueuedSpinLockFromDpcLevel
VerifierKeReleaseMutant
VerifierKeReleaseMutex
VerifierKeReleaseSpinLock
VerifierKeReleaseSpinLockFromDpcLevel
VerifierKeTryToAcquireSpinLockAtDpcLevel
VerifierMmUnmapLockedPages
VerifierObReferenceObjectByHandle
VerifierPortExAllocatePoolWithQuotaTag
VerifierPortIoAllocateIrp
VfAfterCallDriver
VfBeforeCallDriver
VfCheckUserHandle
VfDeadlockAfterCallDriver
VfDeadlockBeforeCallDriver
VfDriverLock
VfFastIoCheckState
VfFaultsInjectResourceFailure
VfGetDmaAdapter
VfIoCompletionCheckState
VfPendingStartLogging
VfPoolIsInternalFree
ViAvlNodeInitializeSessionId
ViDeadlockAddResource
ViDeadlockCanProceed
ViDeadlockDetectionLock
ViDeadlockDetectionTryConvertSharedToExclusive
ViExCheckAPCsDisabled
ViFaultsInjectionNotification
ViFaultsIsCurrentAppTarget
ViIoCallbackSnapState
ViIrpAllocateLockedPacket
ViIrpCheckKernelAddressForIrp
ViIsThreadInsidePagingCodePaths
ViKeInjectStatusAlerted
ViKeIrqlLogCommon
ViKeLogCriticalRegionStackTrace
ViKeObjectAcquired
ViKeWaitForMultipleObjectsCommon
ViKeWaitForSingleObjectCommon
ViPendingQueuePassiveLevelCompletion
ViPoolLogStackTrace
ViResourceAcquireSanityChecks
ViResourceReleaseSanityChecks
ViShutdownScheduleWatchdog
ViZwCheckApcRequirement
ViZwShouldCheck
VmAccessFault
VmColdPagesHint
VmCreateMemoryRange
VmDeleteMemoryRange
VmFlushTb
VmFreePreallocationForRangeCreate
VmMergeMemoryRanges
VmPauseResumeNotify
VmPreallocateForRangeCreate
VmPrefetchVirtualAddresses
VmSplitMemoryRange
VmpLogAccessFault
VmpLogColdHint
VmpLogLargeSlatFill
VmpLogSparseSlatFill
VmpLogTbFlushSlatInvalidate
VmpPauseResumeNotify
VrpBecomeDiffHiveEntryTransitionOwner
VrpDecrementSiloCount
VrpDereferenceDiffHiveEntry
VrpFindOrCreateDiffHiveEntryForMountPoint
VrpHandleIoctlCreateMultipleNamespaceNodes
VrpHandleIoctlCreateNamespaceNode
VrpHandleIoctlGetVirtualRootKey
VrpHandleIoctlInitializeJobForVreg
VrpHandleIoctlLoadDifferencingHive
VrpHandleIoctlUnloadDynamicallyLoadedHives
VrpIncrementSiloCount
VrpLockDiffHiveEntry
VrpLockJobContextExclusive
VrpPostEnumerateKey
VrpPostUnloadKey
VrpPreLoadKey
VrpPreUnloadKey
VrpRelinquishDiffHiveEntryTransitionOwner
VrpTranslatePath
VrpUnloadDifferencingHive
VrpUnlockDiffHiveEntry
VrpUnlockJobContextExclusive
VrpWaitForDiffHiveEntryTransitionOwnerToLeave
VslCallEnclave
VslFastFlushSecureRangeList
VslFlushSecureAddressSpace
VslSlowFlushSecureRangeList
VslTerminateSecureThread
VslpEnterIumSecureMode
WbAddHeapExecutedBlockToCache
WbAddHeapExecutedBlockToLRU
WbAddWarbirdEncryptionSegment
WbAllocateMemoryBlock
WbAllocateSlots
WbAllocateUserMemory
WbCreateHeapExecutedBlock
WbDecryptEncryptionSegment
WbDispatchOperation
WbFreeMemoryBlock
WbFreeMemoryBlockRegion
WbGetHeapExecutedBlock
WbGetInitializedEncryptionSegment
WbGetTrapFrame
WbGetWarbirdEncryptionSegment
WbGetWarbirdProcess
WbGetWarbirdThread
WbGetWowTrapFrame
WbHeapExecuteCall
WbHeapExecutionUnloadModule
WbInPlaceEncryptionUnloadModule
WbMoveHeapExecutedBlockToBackOfLRU
WbReEncryptEncryptionSegment
WbReleaseLeastRecentlyUsedHeapExecutedBlocks
WbRemoveWarbirdProcess
WbSetTrapFrame
WbSetWowTrapFrame
WbValidateHeapExecuteCallArguments
WdipSemActivateInstance
WdipSemDeleteTransitionalInstance
WdipSemDisableContextProvider
WdipSemDisableScenario
WdipSemEnableContextProvider
WdipSemEnableScenario
WdipSemInitialize
WdipSemMarkInstanceForDeletion
WdipSemMarkNextTimedOutInstanceForDeletion
WdipSemReserveInstanceTableEntry
WdipSemSqmLogInflightLimitExceededDataPoints
WdipSemUpdate
WdipSemUpdateFrequentScenarioTable
WdipTimeoutCheckRoutine
WheaAttemptClearPoison
WheaAttemptPhysicalPageOffline
WheaInitialize
WheaTerminateProcess
WmiAcquireSmbiosLockExclusive
WmiQueryTraceInformation
WmiReleaseSmbiosLockExclusive
WmipFindSMBiosStructure
WmipGetSMBiosEventlog
WmipGetSMBiosTableData
WmipGetSysIds
WmipSendWmiIrp
WmipSendWmiIrpToTraceDeviceList
sub_1403B8E0C
sub_1405B03A8
sub_1405BC6E0
sub_1405F50F8
sub_14065DA88
sub_14094DC8C