KeBugCheckEx
VOID __stdcall __noreturn KeBugCheckEx(
ULONG BugCheckCode,
ULONG_PTR BugCheckParameter1,
ULONG_PTR BugCheckParameter2,
ULONG_PTR BugCheckParameter3,
ULONG_PTR BugCheckParameter4){
_QWORD *v5;
char *v6;
void *v7;
signed __int8 CurrentIrql;
__int64 v9;
char *retaddr;
UINT64 *TotalTransitions;
char v12;
TotalTransitions = *(UINT64 **)&BugCheckCode;
_disable();
RtlCaptureContext(*((PCONTEXT *)KeGetCurrentPrcb() + 4280));
KiSaveProcessorControlState((_KPROCESSOR_STATE *)((char *)KeGetCurrentPrcb() + 256));
v5 = (_QWORD *)*((_QWORD *)KeGetCurrentPrcb() + 4280);
v5[16] = TotalTransitions;
*(_QWORD *)((char *)v5 + 68) = v9;
if( &byte_1403FA079 == retaddr )
{
v6 = &v12;
v7 = KeBugCheck;
}
else
{
v6 = (char *)&retaddr;
v7 = KeBugCheckEx;
}
v5[19] = v6;
v5[31] = v7;
CurrentIrql = KeGetCurrentIrql();
__writegsbyte(0x8018u, CurrentIrql);
if( CurrentIrql < 2 )
__writecr8(2ui64);
if( (v9 & 0x200) != 0 )
_enable();
_InterlockedIncrement(&KiHardwareTrigger);
if( &byte_1403FA079 != retaddr )
KeBugCheck2(TotalTransitions);
KeBugCheck2(TotalTransitions);
}Referenced by:
AlpcpCompleteDispatchMessage
AlpcpDereferenceBlobEx
AlpcpLockForCachedReferenceBlob
AlpcpLookupMessage
AlpcpReceiveMessage
AlpcpReceiveSynchronousReply
AlpcpReferenceBlob
AlpcpSendMessage
AlpcpTryLockForCachedReferenceBlob
AlpcpUnlockBlob
Amd64InitializeProfiling
Argument1
CcAcquireByteRangeForWrite
CcAllocateVacbLevel
CcAmILowPriorityWriter
CcApplyLowIoPriorityToThread
CcAsyncCopyRead
CcBoostLowPriorityWorkerThread
CcChangeBackingFileObject
CcChargeDirtyPages
CcChargeThreadForReadAhead
CcCompleteAsyncRead
CcCopyReadEx
CcDeductDirtyPages
CcDeleteBcbs
CcDeleteSectionsForPartition
CcDeleteSharedCacheMap
CcDereferenceVacbArray
CcFlushCachePriv
CcFreeVacbArray
CcGetDirtyPagesHelper
CcGetFlushedValidData
CcGetPartition
CcGetPartitionWithCreate
CcGetVacbFromFreeList
CcGetVacbMiss
CcGetVirtualAddress
CcIncrementVacbActiveCount
CcInitializeBcbProfiler
CcInitializeCacheManager
CcInitializeCacheMapEx
CcIsFatalWriteError
CcMapAndCopyInToCache
CcNotifyOfMappedWrite
CcNotifyOfMappedWriteComplete
CcPerformReadAhead
CcPinFileData
CcPurgeCacheSection
CcReferenceVacbArray
CcRegisterExternalCache
CcReleaseByteRangeFromWrite
CcRemapBcb
CcRemoveExternalCache
CcRemoveVacbArray
CcRepinBcb
CcScanLogHandleList
CcSetAdditionalCacheAttributes
CcSetAdditionalCacheAttributesEx
CcSetDirtyInMask
CcSetDirtyPinnedData
CcSetLogHandleForFile
CcSetVacbInFreeList
CcUninitializeCacheMap
CcUninitializePartitionVacbs
CcUninitializeVolumeCacheMap
CcUnmapFileOffsetFromSystemCache
CcUnmapVacbArray
CcUnpinFileDataEx
CcUnpinRepinnedBcb
CcWorkerThread
CcWriteBehindInternal
CmCompleteRegistryInitialization
CmCreateKey
CmGetSystemDriverList
CmInitSystem1
CmInitSystem2
CmSiBugCheck
CmpAdminSystemSecurityDescriptor
CmpApplyAdminSdOnHiveFiles
CmpAssignSecurityToKcb
CmpCallbackFatalFilter
CmpCreateKeyBody
CmpDelayDerefKeyControlBlock
CmpDereferenceKeyControlBlock
CmpDereferenceKeyControlBlockUnsafe
CmpDummyThreadRoutine
CmpFatalFilter
CmpFinishSystemHivesLoad
CmpFreeAllMemory
CmpFreeKeyControlBlock
CmpGetSystemControlValues
CmpHiveRootSecurityDescriptor
CmpInitializeLazyWriters
CmpInitializeLoadOptions
CmpInitializeNameCache
CmpInitializePreloadedHive
CmpInitializePreloadedHives
CmpInitializeSystemHive
CmpInitializeSystemHivesLoad
CmpLoadHiveThread
CmpLockDeletedHashEntryExclusiveByKcb
CmpLockHashEntryExclusive
CmpLockHashEntryExclusiveByKcb
CmpLockHashEntryShared
CmpLockHashEntrySharedByKcb
CmpMachineHiveCallbackFatalFilter
CmpMountPreloadedHives
CmpOpenHiveFile
CmpPerformSingleKcbCacheLookup
CmpReferenceKeyControlBlock
CmpReferenceKeyControlBlockLockNotHeld
CmpReferenceKeyControlBlockUnsafe
CmpReleaseGlobalQuota
CmpRundownUnitOfWork
CmpSearchKeyControlBlockTreeEx
CmpSecurityMethod
CmpSetSecurityDescriptorInfo
CmpTryToLockHashEntryExclusive
CmpValueToData
CmpWalkOneLevel
CreateMiniNtBootKey
CreateSystemRootLink
DbgkInitialize
EmpParseInfDatabase
EmpQueueRuleUpdateState
EmpRuleUpdateWorkerThread
EtwUnregister
EtwpBufferingModeCompressionFlush
EtwpCompressPendingBuffers
EtwpCompressionProc
EtwpDeleteRegistrationObject
EtwpDequeueFreeBuffer
EtwpDisableCompression
EtwpEnqueueAvailableBuffer
EtwpEventWriteFull
EtwpFreeCompression
EtwpInitialize
EtwpInitializeCoverageSampler
EtwpReferenceGuidEntry
EtwpSetCompressionSettings
EtwpUnreferenceGuidEntry
ExAcquireAutoExpandPushLockExclusive
ExAcquireAutoExpandPushLockShared
ExAcquireCacheAwarePushLockSharedEx
ExAcquireFastMutex
ExAcquireFastMutexUnsafe
ExAcquireFastResourceExclusive
ExAcquireFastResourceShared
ExAcquireFastResourceSharedStarveExclusive
ExAcquirePushLockExclusiveEx
ExAcquirePushLockSharedEx
ExAcquireResourceExclusiveLite
ExAcquireResourceSharedLite
ExAcquireSharedStarveExclusive
ExAcquireSharedWaitForExclusive
ExAllocateHeapPool
ExAllocateHeapSpecialPool
ExAllocatePoolWithQuotaTag
ExAllocatePoolWithTag
ExAllocateTimer
ExAllocateTimerInternal2
ExConvertExclusiveToSharedLite
ExConvertFastResourceExclusiveToShared
ExDeleteFastResource
ExDeleteResourceLite
ExDeleteTimer
ExDisableHandleTracing
ExDisableResourceBoostLite
ExDisownFastResource
ExEnterCriticalRegionAndAcquireResourceExclusive
ExEnterCriticalRegionAndAcquireResourceShared
ExEnterPriorityRegionAndAcquireResourceShared
ExFreeHeapPool
ExGetExclusiveWaiterCount
ExGetHeapFromVA
ExGetSharedWaiterCount
ExGetWakeTimerList
ExHandleLogBadReference
ExInitSystem
ExInitializeFastOwnerEntry
ExInitializeFastResource
ExIsFastResourceContended
ExIsFastResourceHeld
ExIsFastResourceHeldExclusive
ExIsResourceAcquiredExclusiveLite
ExIsResourceAcquiredSharedLite
ExQueryHandleExceptionsPermanency
ExQueueWorkItem
ExQueueWorkItemFromIo
ExQueueWorkItemToPartition
ExQueueWorkItemToPrivatePool
ExReinitializeFastResource
ExReinitializeResourceLite
ExReleaseAutoExpandPushLockExclusive
ExReleaseAutoExpandPushLockShared
ExReleaseCacheAwarePushLockExclusiveEx
ExReleaseCacheAwarePushLockSharedEx
ExReleaseDisownedFastResource
ExReleaseDisownedFastResourceExclusive
ExReleaseDisownedFastResourceShared
ExReleaseFastResource
ExReleaseFastResourceExclusive
ExReleaseFastResourceShared
ExReleasePushLockEx
ExReleasePushLockExclusiveEx
ExReleasePushLockSharedEx
ExReleaseResourceAndLeaveCriticalRegion
ExReleaseResourceForThreadLite
ExReleaseResourceLite
ExRemovePoolTag
ExSaAllocate
ExSetResourceOwnerPointer
ExSetResourceOwnerPointerEx
ExSetTimer
ExShareAddressSpaceWithDevice
ExSvmBeginDeviceReset
ExSvmFinalizeDeviceReset
ExTimerRundown
ExTryAcquireAutoExpandPushLockExclusive
ExTryAcquireAutoExpandPushLockShared
ExTryAcquireCacheAwarePushLockExclusiveEx
ExTryAcquireCacheAwarePushLockSharedEx
ExTryAcquirePushLockExclusiveEx
ExTryAcquirePushLockSharedEx
ExTryConvertPushLockSharedToExclusiveEx
ExTryConvertSharedToExclusiveLite
ExTryToAcquireResourceExclusiveLite
ExTryToConvertFastResourceSharedToExclusive
ExUnblockOnAddressPushLockEx
ExUnblockPushLockEx
ExpAllocatePoolWithTagFromNode
ExpApplyPriorityBoost
ExpCheckForFreedEnhancedTimer
ExpCheckForWorker
ExpDeleteTimer
ExpFastResourceLegacyConvertExclusiveToShared
ExpFastResourceLegacyRelease
ExpFreeHeapSpecialPool
ExpGetBilledProcess
ExpLicenseWatchInitWorker
ExpPartitionDestroy
ExpReleaseResourceExclusiveForThreadLite
ExpReleaseResourceSharedForThreadLite
ExpRemoveTagForBigPages
ExpSaAllocatorAllocate
ExpSaAllocatorFree
ExpSaPageGroupAllocateMemory
ExpSaPageGroupDescriptorAllocate
ExpSaPageGroupDescriptorFree
ExpSaPageGroupFreeMemory
ExpSetResourceOwnerPointerEx
ExpSetTimerObject
ExpSvmDereferenceDevice
ExpSvmReferenceAsid
ExpSystemErrorHandler2
ExpUpdateProductSuiteTypeInRegistry
ExpValidateLoader
ExpValidateWorkItem
ExpWaitForBootDevices
ExpWatchLicenseInfoWork
ExpWatchProductTypeInitialization
ExpWatchProductTypeWork
ExpWorkQueueManagerThread
ExpWorkerThread
ExtEnvCriticalFailure
ExtEnvSetVpptTarget
FlushLookUpTableBucket
FsFilterPerformCallbacks
FsRtlAcquireEofLock
FsRtlCheckOplockEx2
FsRtlReleaseEofLock
FsRtlWorkerThread
FsRtlpPrepareExtraCreateParametersForCreate
HalAllocateCommonBufferVector
HalBugCheckSystem
HalFreeCommonBufferFromVector
HalFreeCommonBufferVector
HalGetCommonBufferFromVectorByIndex
HalInitSystem
HalQueryMaximumProcessorCount
HalRequestClockInterrupt
HalRequestIpi
HalpAcpiCopyBiosTable
HalpAcpiGetFacsMapping
HalpAcpiInitializePmRegisters
HalpAcpiTableCacheInit
HalpAddDevice
HalpBlkInitSystem
HalpBlkPoBusyWait
HalpBlkPoGetPackageId
HalpBlkPoReadPerfIoPort
HalpBlkPoReadPerfMsr
HalpBlkPoRegisterIdleState
HalpBlkPoWritePerfIoPort
HalpBlkPoWritePerfMsr
HalpBlkStartBlockedProcessor
HalpBlkWdFatalExceptionCheck
HalpCmciInitializeErrorPacket
HalpConnectThermalInterrupt
HalpCreateInterrupt
HalpDispatchSystemStateTransition
HalpDmaAcquireBufferMappings
HalpDmaConfigureInterrupt
HalpDmaControllerFlushChannel
HalpDmaDereferenceDomainObject
HalpDmaFlushBuffer
HalpDmaFlushBufferWithEmergencyResources
HalpDmaFreeMapRegisters
HalpDmaSyncMapBuffers
HalpDmaSyncMapBuffersWithEmergencyResources
HalpDmaZeroMapBuffers
HalpDpStartProcessor
HalpEfiInitializeOnResume
HalpExtRegisterResourceDescriptor
HalpFirmwareInitDiscard
HalpGetChipHacks
HalpHvInitMcaPcrContext
HalpHvInitMcaStatusMsrCache
HalpInitSystemHelper
HalpInitializeInterrupts
HalpInitializeInterruptsBspLate
HalpInitializeInterruptsPn
HalpInitializePmcCounterSetInfo
HalpInitializePnTimers
HalpInitializeTimers
HalpInterruptEnableNmi
HalpInterruptEnsureLineSwapComplete
HalpInterruptGetHighestPriorityInterrupt
HalpInterruptInitializeIpis
HalpInterruptInitializeLocalUnit
HalpInterruptPowerChange
HalpInterruptReinitialize
HalpInterruptReinitializeThisProcessor
HalpInterruptRestoreAllControllerState
HalpInterruptRestoreClock
HalpInterruptServiceActiveBoth
HalpInterruptSetDestinationInternal
HalpInterruptSetLineState
HalpInterruptSwapProcessorIdentifiers
HalpIommuBlockDevice
HalpIommuDomainUnmapLogicalRange
HalpIommuLeaveDmaDomain
HalpIommuProcessMemoryErrata
HalpIommuRegisterDispatchTable
HalpIommuReportIommuFault
HalpIommuUnblockDevice
HalpIvtProcessDrhdEntry
HalpLeaveDmaDomain
HalpMcaInitializePcrContext
HalpMcaReportError
HalpMceInitializeErrorPacket
HalpMiscInitDiscard
HalpMmAllocCtxAlloc
HalpMmAllocateMemoryInternal
HalpPCIConfig
HalpPerfInterrupt
HalpPiix4Detect
HalpPowerInitNvsRegionData
HalpPowerStateCallback
HalpPteReserveResources
HalpReportResourceUsage
HalpTimerClockArm
HalpTimerClockInitialize
HalpTimerClockPowerChange
HalpTimerDpcRoutine
HalpTimerInitializeClock
HalpTimerPerformanceCounterPowerChange
HalpTimerPowerChange
HalpTimerPrepareClockInterrupt
HalpTimerRestorePerformanceCounter
HalpTimerSelectFallbackPerformanceCounter
HalpTimerStallCounterPowerChange
HalpTimerWatchdogPreResetInterrupt
HalpTscReserveResources
HalpWatchdogCheckPreResetNMI
HalpWheaInitDiscard
HsaGetPageFault
HsaSetPasidAddressSpace
HsaUpdateInterruptDestination
HsaUpdateRemappingTableEntry
HvCheckAndUpdateHiveBackupTimeStamp
HvFreeCell
HvFreeHivePartial
HvWriteExternal
HvlCrashdumpCallbackRoutine
HvlRestoreEnlightenment
HvlSkCrashdumpCallbackRoutine
HvlpVtlCallExceptionHandler
HvpAddBin
HvpAddFreeCellHint
HvpCopyModifiedData
HvpDropPagedBins
HvpFindFreeCell
HvpFindNextDirtyBlock
HvpMarkCellDirty
HvpPointMapEntriesToBuffer
HvpReleaseCellPaged
HvpRemoveFreeCellHint
HvpSetRangeProtection
HvpTruncateBins
InitBootProcessor
InsertEventEntryInLookUpTable
IoAcquireKsrPersistentMemory
IoAssignResources
IoBuildPartialMdl
IoCancelFileOpen
IoCancelIrp
IoCleanupIrp
IoConnectInterrupt
IoConnectInterruptEx
IoCreateSystemThread
IoDisconnectInterrupt
IoDisconnectInterruptEx
IoFreeKsrPersistentMemory
IoFreeWorkItem
IoGetDeviceInstanceName
IoGetDeviceInterfaces
IoGetDevicePropertyData
IoGetDmaAdapter
IoGetIommuInterface
IoInitializeWorkItem
IoInvalidateDeviceRelations
IoInvalidateDeviceState
IoQueryKsrPersistentMemorySize
IoReportInterruptActive
IoReportInterruptInactive
IoReportResourceForDetection
IoReportResourceUsage
IoReportTargetDeviceChange
IoReportTargetDeviceChangeAsynchronous
IoRequestDeviceEjectEx
IoReserveKsrPersistentMemory
IoSetDevicePropertyData
IoSteerInterrupt
IoUninitializeWorkItem
IoWriteKsrPersistentMemory
IofCallDriver
IommuBeginDeviceReset
IommuDisableDevicePasid
IommuFinalizeDeviceReset
IommuHvDevicePowerChange
IommuHvSetAddressSpace
IommuMapIdentityRange
IommuUnmapIdentityRange
IommupHvDismissPageFault
IommupHvGetPageFault
IommupHvUnmapDevice
IopAllocateBackpocketIrp
IopCheckDeviceAndDriver
IopCheckVpbMounted
IopCompleteRequest
IopConnectInterrupt
IopDecrementCompletionContextUsageCount
IopDecrementDeviceObjectRef
IopDecrementDeviceObjectRefCount
IopDeleteFile
IopDestroyDeviceNode
IopDropIrp
IopFreeIrp
IopIncrementCompletionContextUsageCountAndReadData
IopIncrementDeviceObjectRefCount
IopIncrementVpbRefCount
IopLoadDriver
IopMountVolume
IopParseDevice
IopProcessWorkItem
IopQueueIrpToFileObject
IopReleaseFileObjectLock
IopVerifierExAllocatePoolWithQuota_1
IopfCallDriver
IopfCompleteRequest
IvtHandleInterrupt
IvtInitializeIommu
IvtUpdateGlobalCommand
IvtUpdateInterruptDestination
IvtUpdateRemappingTableEntry
KdpSendWaitContinue
KeAbPostRelease
KeAbPostReleaseEx
KeAbPreAcquire
KeAccumulateTicks
KeAcquireInterruptSpinLock
KeAttachProcess
KeBugCheck
KeCheckForTimer
KeClearSystemPriority
KeExpandKernelStackAndCalloutInternal
KeFlushIoBuffers
KeForceAttachProcess
KeInitSystem
KeInitializeClock
KeReleaseInterruptSpinLock
KeReleaseMutant
KeRemoveQueueEx
KeRestoreExtendedAndSupervisorState
KeRundownApcQueues
KeSaveExtendedAndSupervisorState
KeSaveExtendedProcessorState
KeSetThreadSchedulerAssist
KeStackAttachProcess
KeStartAllProcessors
KeTerminateThread
KeUserModeCallback
KiAbApplyWakeupBoost
KiAbCleanupThreadState
KiAbSetMinimumThreadPriority
KiAbThreadUnboostCpuPriority
KiAttemptFastRemovePriQueue
KiAttemptFastRemoveQueue
KiBugCheckDispatch
KiCheckMicrocode
KiDeferredReadySingleThread
KiDeliverApc
KiDetectKvaLeakage
KiDirectSwitchThread
KiDispatchException
KiExceptionStackSwitchHandler
KiExecuteAllDpcs
KiExpandKernelStackAndCalloutOnStackSegment
KiExpandKernelStackAndCalloutSwitchStack
KiExpireTimer2
KiExpireTimerTable
KiFatalExceptionFilter
KiFatalFilter
KiFlushRangeAllCaches
KiForwardTick
KiInitializeDynamicProcessor
KiInitializeKernel
KiInitializeMTRR
KiInitializeXSave
KiInsertQueueDpc
KiIntRedirectQueueRequestOnProcessor
KiIntSteerSetDestination
KiInterruptHandler
KiIpiGenericCallTarget
KiIpiSendRequest
KiLockExtendedServiceTable
KiLockServiceTable
KiMcaDeferredRecoveryService
KiMcheckFastForward
KiOpPreprocessSecureFault
KiPerformGroupConfiguration
KiProcessExpiredTimerList
KiRetireDpcList
KiRundownMutants
KiSetFeatureBits
KiSetHardwareSpeculationControlFeatures
KiSetProcessorSignature
KiStackAttachProcess
KiStartDynamicProcessor
KiUpdateVPBackingThreadPriority
KiUpdateVpBackingThreadPriorityFromTopLevel
KiVerifyPdata
KiVerifyScopesExecute
KsepShimDbChanged
MI_UNLOCK_RELOCATIONS_EXCLUSIVE
MUIBugCheck
MiAddMdlTracker
MiAddViewsForSection
MiAllocateDummyPage
MiAllocateEntireImageFileExtents
MiAllocateWsle
MiApplyCompressedFixups
MiApplyDriverHotPatch
MiApplyRawFixups
MiBadRefCount
MiBadShareCount
MiCanDeleteEnclave
MiCheckFatalAccessViolation
MiCheckKernelShadow
MiCheckLargePageOk
MiCheckLargePageSystemImage
MiCheckPteRelease
MiCheckPteReserve
MiCheckSystemNxFault
MiCheckSystemPageTables
MiClearDriverHotPatchPtes
MiClearPartitionPageBitMap
MiClearPfnImageVerified
MiCoalesceFreePages
MiCommitExistingVad
MiCommitPageTableRangesForVad
MiCompleteProtoPteFault
MiContractWsSwapPageFileWorker
MiConvertStaticSubsections
MiCopyOnWrite
MiCopyPage
MiCopyToCfgBitMap
MiCreateBootSlabEntries
MiCreatePrototypePtes
MiCreateSlabAllocationsFromLoaderBlock
MiDecommitHardwareEnclavePages
MiDecreaseUsedPtesCount
MiDecrementCloneBlockReference
MiDecrementShareCount
MiDecrementSubsectionViewCount
MiDeleteCachedKernelStack
MiDeleteCachedSubsection
MiDeleteClusterPage
MiDeleteClusterSection
MiDeleteEnclavePages
MiDeleteFinalPageTables
MiDeleteNonPagedPoolPte
MiDeletePartialVad
MiDeletePartitionResources
MiDeletePteRun
MiDeleteTransitionPte
MiDeleteVa
MiDeleteVadBitmap
MiDeleteValidSystemPage
MiDereferenceExtendInfo
MiDoGangAssignment
MiEmptyPageAccessLog
MiExpandPtes
MiFillPageWithImageExtentContents
MiFillPerSessionProtos
MiFillPhysicalPages
MiFillPoolCommitPageTable
MiFillSystemPtes
MiFinishVadDeletion
MiFlushTbAsNeeded
MiFreeBootPageTable
MiFreeMdlTracker
MiFreePagesFromMdl
MiFreePartitionPhysicalPages
MiFreePrivateFixupEntryForSystemImage
MiFreeSessionSpaceMap
MiFreeUnusedPfnPages
MiGetBaseResidentPage
MiGetNextPageTablePte
MiGetPage
MiGetPageChain
MiGetPageProtection
MiGetProtectionFromPte
MiGetSinglePageToZero
MiGetTopLevelPfn
MiHandleTransitionFault
MiIdentifyPfn
MiInPagePageTable
MiInPageSingleKernelStack
MiIncrementAweMapCount
MiIncrementSubsectionViewCount
MiInitializeMirroring
MiInitializePagedPoolEvents
MiInitializePoolCommitPacket
MiInitializeSessionIds
MiInitializeSystemDefaults
MiInsertAndUnlockStandbyPages
MiInsertInSystemSpace
MiInsertPageInFreeOrZeroedList
MiInsertPageInList
MiInsertPhysicalPteMapping
MiIssueNoPtesBugcheck
MiLimitLoaderBlockHighMemory
MiLimitLoaderBlockTotalMemory
MiLinkPoolCommitChain
MiLockCode
MiLockNonPagedPoolPte
MiLockPagableImageSection
MiLockPagedAddress
MiLockPoolCommitPageTable
MiLockTransitionLeafPage
MiMakeDriverPagesPrivate
MiMakeOutswappedPageResident
MiMakeSystemAddressValid
MiMakeSystemRangeAvailable
MiMapContiguousMemoryLarge
MiMarkPfnVerified
MiMarkSystemVaAllocated
MiNoPagesLastChance
MiNonPagedPoolToNode
MiObtainReferencedSecureVad
MiObtainSessionVa
MiObtainSystemCacheView
MiPageNotZero
MiPartitionObjectToPartition
MiPfCompleteCoalescedIo
MiPfnReferenceCountIsZero
MiProcessLoaderEntry
MiProtectPrivateMemory
MiPurgeFileOnlyPfn
MiPurgeSubsection
MiRaisedIrqlFault
MiReadWriteAnyLevelShadowPte
MiReduceShareCount
MiReferenceControlAreaFile
MiReleaseDriverPtes
MiReleasePartitionHugeIoSpace
MiReleasePtes
MiReleaseSessionVa
MiReloadBootLoadedDrivers
MiRemoveFromSystemSpace
MiRemoveLowestPriorityStandbyPage
MiRemoveMappingNode
MiRemovePlaceholderVad
MiRemovePteTracker
MiRemoveSecureEntry
MiReplenishBitMap
MiResolveTransitionFault
MiSearchChannelTable
MiSearchNumaNodeTable
MiSessionRemoveImage
MiSetProtectionOnSection
MiShowBadMapper
MiStoreFaultComplete
MiSwitchToTransition
MiSystemFault
MiTransferPartitionPageRun
MiTrimOrAgeWorkingSet
MiTrimUnusedPageFileRegionsWorker
MiUnlinkFreeOrZeroedPage
MiUnlinkPageFromList
MiUnloadApproved
MiUnloadSystemImage
MiUnlockAndDereferenceVad
MiUnlockDriverMappings
MiUnlockDynamicMemoryExclusive
MiUnlockDynamicMemoryNestedParentExclusive
MiUnlockImageSection
MiUnlockLoaderEntry
MiUnlockPageTableCharges
MiUnlockPageTableInternal
MiUnlockPartitionSystemThreads
MiUnlockVad
MiUnmapFrameBuffer
MiUnmapLockedPagesInUserSpace
MiUnmapMdlCommon
MiUpControlAreaRefs
MiUpdateCfgSystemWideBitmapWorker
MiUpdateImportRelocationsOnDriverPrivatePages
MiUpdateSlabPagePlaceholderState
MiUserFault
MiValidFault
MiValidateMdlTracker
MiValidatePagefilePageHash
MiValidateSectionCreate
MiVerifyLargeSectionLayout
MiWaitForInPageComplete
MiWalkEntireImage
MiWriteComplete
MiZeroFault
MiZeroLargePages
MmAccessFault
MmAllocateMappingAddressEx
MmAllocateSecurePoolMemory
MmBackSystemImageWithPagefile
MmBuildMdlForNonPagedPool
MmCommitSessionMappedView
MmCopyToCachedPage
MmCreateKernelStack
MmDeleteKernelStack
MmDeleteProcessAddressSpace
MmForceSectionClosedEx
MmFreeContiguousMemory
MmFreeMappingAddress
MmFreeNonChargedSecurePages
MmFreePagesFromMdlEx
MmFreePoolMemory
MmFreeSecurePoolMemory
MmFreeSystemCacheReserveView
MmGetCacheAttributeEx
MmLockPagableDataSection
MmManageFaultRange
MmMapLockedPagesWithReservedMapping
MmMapViewInSystemCache
MmOutSwapVirtualAddresses
MmOutSwapWorkingSet
MmProtectMdlSystemAddress
MmPurgeSection
MmQueryMemoryListInformation
MmRemoveSystemCacheFromDump
MmReplaceImportEntry
MmSetGraphicsPtes
MmStoreProbeAndLockPages
MmUnlockPages
MmUnmapReservedMapping
MmUnmapViewInSystemCache
MmUpdateMdlTrackerForMdlSwitch
MmUpdateSlabRangeProtection
MxCopyPage
NormalizationList__Unlock
NtCallbackReturn
NtCancelTimer
NtClose
NtosSecureKernelImportBugcheck
ObCloseHandleTableEntry
ObDereferenceObjectDeferDelete
ObDereferenceObjectDeferDeleteWithTag
ObDereferenceObjectEx
ObFastReferenceObject
ObFastReplaceObject
ObReferenceObjectByPointer
ObReferenceObjectByPointerWithTag
ObReferenceObjectExWithTag
ObfDereferenceObjectWithTag
ObfReferenceObject
ObfReferenceObjectWithTag
ObpCloseHandle
ObpCreateHandle
ObpGetObjectSecurity
ObpIncrPointerCount
ObpIncrPointerCountEx
ObpReferenceObjectByHandleWithTag
ObpRemoveObjectRoutine
PfFileInfoNotify
PfLockExclusiveRelease
PfTSetTraceWorkerPriority
PfpFileCheckAttributesForPrefetch
PfpPrefetchDirectoryStream
PfpQueryFileExtentsRequest
PfpVolumeOpenAndVerify
PfpVolumePrefetchMetadata
Phase1InitializationDiscard
Phase1InitializationIoReady
PiCslIsConsoleLocked
PiDmaGuardProcessNewDeviceNode
PiDmaGuardProcessPostRemove
PiGetDmaAdapterFromBusInterface
PiIommuFreeExtension
PiIommuGetInterface
PiPnpRtlPdoRaiseNtPlugPlayPropertyChangeEvent
PiProcessCanceledRemoveForReset
PiProcessNewDeviceNode
PiQueryPowerRelations
PiValidatePowerRelations
PipCslStateChangeCallback
PipDmaGuardBlockAddDevice
PipDmgFlushQueueAndRestartDevices
PipDmgRequestRestartOnBlockedDevice
PipGetDeviceObjectLocation
PipGetPersistentMemory
PipIommuValidateDeviceId
PipProcessEnumeratedChildDevice
PipProcessStartPhase1
PnpBootDeviceWait
PnpBugcheckPowerTimeout
PnpCancelStopDeviceNode
PnpDeleteLockedDeviceNode
PnpDeleteLockedDeviceNodes
PnpDeviceCompletionProcessCompletedRequest
PnpNotifyDriverCallback
PnpProcessRelation
PnpWatchdogBugcheck
PoBroadcastSystemState
PoSetHiberRange
PoShutdownBugCheck
PopAllocateHiberContext
PopAllocateIrp
PopCallPowerSettingCallback
PopCheckpointSystemSleep
PopCreateDumpMdl
PopDecompressHiberBlocks
PopDirectedDripsDiagTraceNotifyDevices
PopDirectedDripsNotifyResiliencyCompletionWorker
PopEndMirroring
PopFxBugCheck
PopFxBuildDirectedDripsCandidateDeviceList
PopFxBuildDripsBlockingDeviceList
PopFxClearDirectedDripsCandidateDeviceList
PopFxDirectedWorkOrderWatchdog
PopFxEnforceDirectedPowerTransition
PopFxInsertAcpiDevice
PopFxPrepareDevicesForShutdown
PopFxRegisterPluginEx
PopFxRemoveAcpiDevice
PopFxRemoveDevice
PopGracefulShutdown
PopHandleSystemIdleReset
PopHiberChecksumHiberFileData
PopHiberReadChecksums
PopInitPlatformSettings
PopInternalError
PopInvokeSystemStateHandler
PopIrpWatchdogBugcheck
PopIrpWorker
PopPepPlatformStateRegistered
PopPepRemoveDevice
PopPolicySystemIdle
PopPowerActionWatchdog
PopPowerButtonWorkCallback
PopRequestRead
PopRequestWrite
PopRestoreHiberContext
PopSaveHiberContext
PopSetRange
PopSystemIdleWorker
PopThermalWorker
PopUpdateSystemIdleContext
PopWatchdogWorker
PopWriteHeaderPages
PopWriteHiberPages
PopWriteImageHeader
PopWriteSecurePages
PpInitSystem
PpmExitCoordinatedIdle
PpmIdleExecuteTransition
PpmIdleTransitionStall
PsAdjustBasicEnclaveThreadList
PsAltSystemCallDispatch
PsCreateSystemThreadEx
PsFreeSiloContextSlot
PsGetProcessEnclaveModuleInfo
PsImpersonateContainerOfThread
PsInitSystem
PsLoadVsmEnclaveData
PsLocateSystemDlls
PsRegisterAltSystemCallHandler
PspAssignProcessToJob
PspCatchCriticalBreak
PspDeletePartition
PspExitThread
PspInitializeSystemDlls
PspLocateSystemDll
PspReturnQuota
PspStorageEmptyArrayNonReadonly
PspTeardownPartition
PspThreadDelete
PspUnlockAffinityUpdateExclusive
PspUnlockProcessExclusive
PspUnlockProcessExclusiveUnsafe
PspUnlockProcessListExclusive
PspUnlockQuotaExpansion
PspUnlockQuotaListExclusive
PspUnlockThreadSecurityExclusive
PspUnlockWorkingSetChangeExclusiveUnsafe
RamdiskStart
RawDispatch
RemoveListHeadPte
RtlInsertDynamicFunctionTable
RtlMarkHiberPhase
RtlQueryFeatureConfiguration
RtlRemoveDynamicFunctionTable
RtlpCSparseBitmapUnlock
RtlpHeapHandleError
RtlpHpAcquireReleaseLockExclusive
RtlpHpFixedVsAllocate
RtlpHpFixedVsFree
RtlpHpHeapExtendContext
RtlpHpLargeAlloc
RtlpHpLargeFree
RtlpHpLfhBucketAddSubsegment
RtlpHpLfhBucketGetSubsegment
RtlpHpLfhBucketUpdateAffinityMapping
RtlpHpLfhSlotAllocate
RtlpHpLfhSubsegmentDecommitPages
RtlpHpLfhSubsegmentFreeBlock
RtlpHpLfhSubsegmentIncBlockCounts
RtlpHpReleaseQueuedLockExclusive
RtlpHpSegContextCompact
RtlpHpSegMgrCommitComplete
RtlpHpSegMgrCommitInitiate
RtlpHpSegMgrVaCtxAlloc
RtlpHpSegMgrVaCtxFree
RtlpHpSegMgrVaCtxInsert
RtlpHpSegPageRangeAllocate
RtlpHpSegPageRangeCoalesce
RtlpHpSegPageRangeShrink
RtlpHpVaMgrAlloc
RtlpHpVaMgrCtxFree
RtlpHpVsChunkSplit
RtlpHpVsSubsegmentCommitPages
SMKM_STORE::SmStCleanup
SMKM_STORE::SmStHelperSendCommand
SMKM_STORE::SmStUnhandledExceptionFilter
SMKM_STORE::SmStWorker
SMKM_STORE_MGR::SmFeAddInitiate
SMKM_STORE_MGR::SmFeEmpty
SMKM_STORE_MGR::SmFeEvictComplete
SMKM_STORE_MGR::SmFeEvictInitiate
SMKM_STORE_MGR::SmFeSetEvictFailed
SMKM_STORE_MGR::SmFeStoreDelete
SMKM_STORE_MGR::SmFeStoreEvictKeys
SSHSupportReleasePushLockExclusive
ST_STORE::StDmHandleDecompressionFailure
ST_STORE::StDmPageError
ST_STORE::StDmPageRemove
ST_STORE::StDmpSinglePageAdd
SeDefaultObjectMethod
SeInitServerSilo
SeInitSystem
SeRegisterObjectTypeMandatoryPolicy
SeRmCleanupSiloState
SeSecureBootRegisterPolicy
SeSecurityAttributePresent
SepAuditFailed
SepDeReferenceLogonSession
SepDeleteSessionLowboxEntries
SepMandatoryIntegrityCheck
SepRmVerifyLsaProtectionLevel
SmFirstTimeInit
SmHpBufferProtectEx
SmKmVirtualLockContextIncreaseWsMin
SmKmVirtualLockCtxMemoryUnlocked
SmpKeyedStoreEntryGet
SmpKeyedStoreSetVaRanges
SshpSetCollectionActive
StartFirstUserProcess
SwapContext
SymCryptFatalEnvWindowsKernelmodeWin8_1nLater
TtmInit
TtmpCalloutWatchdogCallback
UNLOCK_ADDRESS_SPACE
UNLOCK_ADDRESS_SPACE_UNORDERED
UNLOCK_PAGE_TABLE_COMMITMENT
VRegSetup
VerifierBugCheckIfAppropriate
VerifierInitSystem
VfBugCheckNoStackUsage
VhdInitialize
VhdiMountVhdFile
VslBindNtIum
VslConnectSwInterrupt
VslpIumPhase0Initialize
VslpIumPhase4Initialize
WheaInitialize
WheaReportHwError
WheapCreatePerProcessorInfo
WmipDSCleanup
WmipReferenceEntry
WmipSecurityMethod
WmipUnreferenceEntry
_report_gsfailure
_report_rangecheckfailure
guard_icall_bugcheck
guard_icall_handler
sub_140A0C0FC
sub_140A1BFE4
xHalTranslateBusAddress