ExFreePoolWithTag

VOID *__stdcall ExFreePoolWithTag(PVOID P, UINT32 Tag){
  VOID *result; 

  LODWORD(result) = ExFreeHeapPool(P);
  return result;
}

Referenced by:

AdtpAppendString
AdtpBuildGuidString
AdtpBuildHexInt64String
AdtpBuildIPv4Strings
AdtpBuildIPv6Strings
AdtpBuildMacStrings
AdtpBuildMessageString
AdtpBuildObjectTypeStrings
AdtpBuildRegistryValueString
AdtpBuildSecurityDescriptorChangeString
AdtpBuildSecurityDescriptorUnicodeString
AdtpBuildSidListString
AdtpInitializeDriveLetters
AdtpObjsInitialize
AhcCacheQueryHwId
AlpcAddHandleTableEntry
AlpcMessageDestroyProcedure
AlpcRegisterLogRoutine
AlpcUnregisterLogRoutine
AlpcpAllocateCompletionPacketLookaside
AlpcpAllocateMessageFromExtendedTables
AlpcpAllocateMessageFunction
AlpcpCaptureHandleAttributeInternal
AlpcpCaptureMessageData
AlpcpCaptureMessageDataSafe
AlpcpDeferredFreeCompletionPacketLookaside
AlpcpDereferenceBlobEx
AlpcpDestroyBlob
AlpcpFreeCompletionList
AlpcpFreeMessageFunction
AlpcpGetPortNameInformation
AlpcpInitializeCompletionList
AlpcpInitializeMessageLog
AlpcpLogWaitForNewMessage
AlpcpPortQueryServerInfo
AlpcpUnlockBlob
ApiSetpConstructPathToExtension
ApiSetpLoadSchemaExtension
AppModelFreeUnicodeString
AppendCondition
ArbAddInaccessibleAllocationRange
ArbAddMmConfigRangeAsBootReserved
ArbAddOrdering
ArbAllocateEntry
ArbBuildAssignmentOrdering
ArbFreeOrderingList
ArbPruneOrdering
ArbQueryConflict
ArbRetestAllocation
ArbpBuildAllocationStack
ArbpGetRegistryValue
AslEnvExpandStrings2
AslFileMappingDelete
AslFree
AslGuidToString_UStr
AslHashFree
AslPathWildcardFindFirst
AslPathWildcardFindNext
AslRegWildcardFindClose
AslRegistryGetKey
AslStringAnsiToUnicode
AslStringDuplicate
AslStringUpcaseToMultiByteN
AslpFileLargeMapDelete
AslpFileVerQueryBlock
AslpPathWildcardFreeFindContext
AslpPathWildcardFreeMatchNode
AslpProcessMatchRegNode
AuthzBasepCommitSecurityAttributeChanges
AuthzBasepCompareFQBNOperands
AuthzBasepCompareUnicodeStringOperands
AuthzBasepDeleteSecurityAttribute
AuthzBasepDeleteSecurityAttributeValues
AuthzBasepEvaluateAceCondition
AuthzBasepFinaliseSecurityAttributesList
AuthzBasepFreeSecurityAttributeValues
AuthzBasepFreeSecurityAttributesList
AuthzBasepInitializeResourceClaimsFromSacl
AuthzBasepResetOperands
AuthzBasepRollbackSecurityAttributeChanges
B_TREE<_SM_PAGE_KEY,SMKM_STORE_MGR::SMKM_FRONTEND_ENTRY,4096,B_TREE_DUMMY_NODE_POOL,B_TREE_KEY_COMPARATOR<_SM_PAGE_KEY>>::BTreeDeleteEx
B_TREE<_SM_PAGE_KEY,SMKM_STORE_MGR::SMKM_FRONTEND_ENTRY,4096,B_TREE_DUMMY_NODE_POOL,B_TREE_KEY_COMPARATOR<_SM_PAGE_KEY>>::BTreeMergeNodes
B_TREE<_SM_PAGE_KEY,SMKM_STORE_MGR::SMKM_FRONTEND_ENTRY,4096,B_TREE_DUMMY_NODE_POOL,B_TREE_KEY_COMPARATOR<_SM_PAGE_KEY>>::BTreeNodeFree
B_TREE<_SM_PAGE_KEY,SMKM_STORE_MGR::SMKM_FRONTEND_ENTRY,4096,B_TREE_DUMMY_NODE_POOL,B_TREE_KEY_COMPARATOR<_SM_PAGE_KEY>>::BTreeSplitChild
B_TREE<_SM_PAGE_KEY,ST_STORE::_ST_PAGE_ENTRY,4096,NP_CONTEXT,B_TREE_KEY_COMPARATOR<_SM_PAGE_KEY>>::BTreeSearchResultCleanup
BapdRecordFirmwareBootStats
BapdpMarshallBootDataToRegistry
BapdpProcessBitlockerStatus
BapdpProcessEDrvHintInfo
BapdpProcessFwUpdateResults
BapdpProcessHSTIResults
BapdpProcessResumeInformation
BapdpProcessVsmKeyBlobs
BapdpProcessWmdResults
BapdpRegisterWbclData
BcdEnumerateObjects
BcdGetElementDataWithFlags
BcdGetSystemStorePath
BcdSetElementDataWithFlags
BgkDisplayString
BiAddBootEntryToEfiBootManagerDisplayOrder
BiAddBootEntryToNvramDisplayOrder
BiBindEfiBootManager
BiBindEfiEntryToBcdObject
BiBuildIdentifierList
BiCleanupLoadedStores
BiCloseKey
BiConvertBootEnvironmentDeviceToNt
BiConvertBootEnvironmentDeviceToQualifiedPartition
BiConvertElementToRegistryData
BiConvertNtDeviceToBootEnvironment
BiConvertNtFilePathToBootEnvironment
BiConvertQualifiedPartitionToBootEnvironment
BiConvertRegistryDataToElement
BiCreateBootEntry
BiCreateEfiEntry
BiCreateFileDeviceElement
BiCreateKey
BiCreateKeySecurityDescriptor
BiCreateMergedBootEntry
BiCreatePartitionDevice
BiDeleteKey
BiEnumerateSubKeys
BiExportEfiBootManager
BiFreeIdentifierList
BiGetDeviceFromEfiPath
BiGetDriveLayoutBlock
BiGetElement
BiGetKeyName
BiGetNtPartitionPath
BiGetObjectDescription
BiGetObjectIdentifier
BiGetObjectReferenceFromEfiEntry
BiGetPartitionVhdFilePathFromUnicodeString
BiGetPhysicalDriveName
BiGetRegistryValue
BiGetSavedBootEntry
BiGetSystemPartition
BiGetVolumeDiskExtentsInformation
BiHandleFirmwareDefaultEntry
BiIsPortableWorkspaceBoot
BiIsSystemStore
BiIsWinPEBoot
BiIssueGetDriveLayoutIoctl
BiLoadSystemStore
BiMarkTreatAsSystemStore
BiOpenKey
BiOpenSystemStore
BiRemoveBootEntryFromNvramDisplayOrder
BiResolveLocateDevice
BiTranslateFilePath
BiTranslateSymbolicLink
BiTranslateSymbolicLinkFile
BiUnloadHiveByHandle
BiUnloadHiveByName
BiUpdateBcdObject
BiUpdateEfiEntry
BiUpdateObjectReferenceInEfiEntry
BiVerifyBootPartition
BuildQueryDirectoryIrp
BvgaReleaseResources
CMFCheckAccess
CMFCreateSecurityDescriptor
CMFFlushHitsFile
CMFFreeFn
CMFSystemThreadRoutine
CMFUnmapModules
CcAsyncCopyRead
CcAsyncReadWorker
CcCompleteAsyncReadWorker
CcDeallocateBcb
CcDeleteMbcb
CcDeletePartition
CcDeleteSharedCacheMap
CcExtendVacbArray
CcFreeVacbArray
CcInitializeCacheMapEx
CcInitializeVolumeCacheMap
CcMmLogLostDelayedWriteError
CcPostDeferredWrites
CcQueryRegKeyValue
CcRegistryChangeCallback
CcScanLogHandleList
CcUninitializeAsyncRead
CcUninitializeCacheMap
CcUninitializeVolumeCacheMap
CcUnpinData
CcUnpinDataForThread
CcUnregisterExternalCache
CcWriteBehind
CmAddLogForAction
CmAppendDeclarativeFilterLevel
CmDeleteCommonClassRegKeyWorker
CmDeleteDeviceContainerRegKeyWorker
CmDeleteDeviceContainerWorker
CmDeleteDeviceInterfaceRegKeyWorker
CmDeleteDeviceInterfaceWorker
CmDeleteDevicePanelRegKeyWorker
CmDeleteDevicePanelWorker
CmDeleteDeviceRegKeyWorker
CmDeleteDeviceWorker
CmDeleteInstallerClassWorker
CmDeleteInterfaceClassWorker
CmDeleteKeyRecursive
CmDeviceClassesSubkeyCallback
CmDevicePanelEnumSubkeyCallback
CmEnumDevicesInContainerWithCallbackWorker
CmEnumSubkeyCallback
CmFcManagerUnregisterFeatureConfigurationChangeNotification
CmGetDeviceCompoundFiltersWorker
CmGetDeviceInterfaceMappedPropertyFromComposite
CmGetDeviceInterfaceRegKeyPath
CmGetDeviceInterfaceRegKeySecurityDescriptor
CmGetDeviceMappedPropertyFromRegProp
CmGetDeviceRegKeySecurityDescriptor
CmGetDeviceSiblings
CmGetDevicesInBaseContainerList
CmGetInstallerClassCompoundFiltersWorker
CmGetInstallerClassMappedPropertyFromRegProp
CmGetMatchingCommonClassListWorker
CmGetMatchingDeviceListForSubkey
CmGetMatchingDevicePanelListWorker
CmGetMatchingFilteredDeviceInterfaceListWorker
CmGetMatchingFilteredDeviceListWorker
CmGetParentDeviceContainerId
CmGetRegKeySecurityDescriptor
CmGetSystemDriverList
CmInitSystem1
CmInitializeProcessor
CmKeyBodyRemapToVirtualForEnum
CmLoadAppKey
CmLoadDifferencingKey
CmLoadKey
CmLogMcUpdateStatus
CmMoveBaseContainer
CmOpenCommonClassRegKeyWorker
CmOpenDeviceContainerRegKeyWorker
CmOpenDeviceInterfaceRegKeyWorker
CmOpenDevicePanelRegKeyWorker
CmOpenDeviceRegKey
CmOpenDeviceRegKeyWorker
CmQueryDevicePanelPldProperty
CmQueryLayeredKey
CmQueryMultipleValueForLayeredKey
CmQueryMultipleValueKey
CmRenameKey
CmRmFinalizeRecovery
CmServiceFilterCallback
CmSetAcpiHwProfile
CmSiFreeMemory
CmUnRegisterCallback
CmUnregisterMachineHiveLoadedNotification
CmUpdateDevicePanel
CmUpdateDevicePanelInterface
CmpAddRemoveContainerToCLFSLog
CmpAddStringToMapping
CmpAdminSystemSecurityDescriptor
CmpAllocatePostBlock
CmpBuildAdminInformation
CmpBuildVirtualReplicationStack
CmpCallCallBacksEx
CmpCheckAdminAccess
CmpCheckExeOwnerForPca
CmpCleanUpKcbCacheWithLock
CmpCleanUpSubKeyInfo
CmpCleanupLightWeightPrepare
CmpClearKeyAccessBits
CmpCloneHwProfile
CmpCmdInit
CmpCmdRenameHive
CmpCommitDeleteValueKeyUoW
CmpCommitSetValueKeyUoW
CmpCompareNewValueDataAgainstKCBCache
CmpCompleteUnloadKey
CmpComputeLogFillLevel
CmpCopySyncTree
CmpCopySyncTree2
CmpCopyValue
CmpCreateChild
CmpCreateHiveRootCell
CmpCreateKeyControlBlock
CmpCreateRegistryProcessToken
CmpCreateRegistryRoot
CmpDelayedDerefKeys
CmpDeleteKcbCache
CmpDeleteLightWeightTransaction
CmpDoQueryKeyName
CmpDoTransWriteLogRecord
CmpDoWritethroughReparse
CmpFindTagIndex
CmpFinishSystemHivesLoad
CmpFlushNotify
CmpFree
CmpFreeAllMemory
CmpFreeCallbackContext
CmpFreeCallbackObjectContexts
CmpFreeKeyControlBlock
CmpFreeLineList
CmpFreeOffsetArray
CmpFreePostBlock
CmpFreeSectionList
CmpFreeTransientPoolWithTag
CmpFreeUnitOfWork
CmpGenerateAppHiveSecurityDescriptor
CmpGetAcpiProfileInformation
CmpGetRegistryValue
CmpGetSymbolicLinkTarget
CmpGetValueData
CmpGetValueForAudit
CmpHiveRootSecurityDescriptor
CmpInitCmRM
CmpInitHiveFromFile
CmpInitializeDriverStores
CmpInitializeHardwareConfiguration
CmpInitializeMachineDependentConfiguration
CmpInitializePreloadedHive
CmpInitializePreloadedHives
CmpInitializeRegistryNode
CmpInitializeSystemBiosInformation
CmpInitializeSystemHive
CmpLightWeightCommitSetSecDescUoW
CmpLightWeightPrepareDeleteValueKeyUoW
CmpLightWeightPrepareSetValueKeyUoW
CmpLoadHiveThread
CmpLoadHiveVolatile
CmpLockIXLockIntent
CmpLogCheckpoint
CmpLogHiveFileInaccessible
CmpMarkIndexDirty
CmpMergeKeyValues
CmpMountPreloadedHives
CmpOpenHiveFile
CmpOpenSystemDriverHiveContext
CmpParseInfBuffer
CmpPreserveSystemHiveData
CmpQueryFileSecurityDescriptor
CmpQueryKeyValueData
CmpQueryNameString
CmpRecordUnloadEventForHive
CmpRegisterCallbackInternal
CmpReplicateKeyToVirtual
CmpReportAuditVirtualizationEvent
CmpRmAnalysisPhase
CmpRmUnDoPhase
CmpRollbackTransactionArray
CmpRundownUnitOfWork
CmpSaveKeyByFileCopy
CmpSetSecurityDescriptorInfo
CmpSetSystemBiosInformation
CmpSetVersionData
CmpSetVideoBiosInformation
CmpStartCLFSLog
CmpStartRMLog
CmpTransSearchAddLightWeightTrans
CmpTransSearchAddTrans
CmpUndoDeleteKeyForTrans
CmpVEExecuteCreateLogic
CmpVEExecuteOpenLogic
CmpVEExecuteRealStoreParseLogic
CmpVEExecuteVirtualStoreParseLogic
CmpVERemoveHiveFromSIDMappingTable
CmpValueToData
CmpVolumeContextStart
CmpWorkerEngineWorker
CreateMiniNtBootKey
DbgLoadImageSymbolsUnicode
DbgUnLoadImageSymbolsUnicode
DbgUnicodeStringToAnsiString
DbgkCaptureLiveDump
DbgkLkmdRegisterCallback
DbgkLkmdUnregisterCallback
DbgkPostModuleMessage
DbgkQueueUserExceptionReport
DbgkRegisterErrorPort
DbgkUserReportWorkRoutine
DbgkWerAddSecondaryData
DbgkWerCaptureLiveKernelDump
DbgkpCreateNotificationEvent
DbgkpDeleteErrorPort
DbgkpFreeDebugEvent
DbgkpLkmdLaunchSnapApc
DbgkpLkmdSnapThreadApc
DbgkpQueueMessage
DbgkpSectionToFileHandle
DbgkpWerCleanupContext
DbgkpWerFreePool
DbgpRemoveDebugPrintCallback
DecodeAttributeName
DestroyAggregateSession
DestroyEventEntry
DrvDbCreateDatabaseNode
DrvDbDeleteObjectSubKey
DrvDbDestroyDatabaseNode
DrvDbGetDeviceIdDriverInfMatches
DrvDbGetDriverPackageMappedProperty
DrvDbGetObjectSubKeyCallback
DrvDbGetSecurityDescriptor
DrvDbLoadDatabaseNode
DrvDbOpenContext
DrvDbSetDeviceIdDriverInfMatches
DrvDbSetDriverPackageMappedProperty
EmClientRuleDeregisterNotification
EmInitSystem
EmProviderDeregister
EmProviderRegisterEntry
EmpClientRuleRegisterNotification
EmpEvaluateTargetRule
EmpEvaluateUpdateRuleEvalState
EmpFreePool
EmpParseCallbacks
EmpParseInfDatabase
EmpParseRuleExpression
EmpParseRuleTerm
EmpParseRules
EmpParseStrings
EmpParseTargetRuleStringIndexList
EmpParseTargetRules
EmpProviderDeregisterEntry
EmpProviderRegister
EmpRuleParserStackPop
EmpRuleUpdateWorkerThread
EncloseSubCondition
EtwDeleteSiloState
EtwExitProcess
EtwInitializeSiloState
EtwQueryProcessTelemetryInfo
EtwRegisterEventCallback
EtwSetPerformanceTraceInformation
EtwStartAutoLogger
EtwTelemetryCoverageReport
EtwTiLogInsertQueueUserApc
EtwTimLogBlockNonCetBinaries
EtwTimLogControlProtectionUserModeReturnMismatch
EtwTimLogProhibitChildProcessCreation
EtwTimLogProhibitLowILImageMap
EtwTimLogProhibitNonMicrosoftBinaries
EtwTimLogRedirectionTrustPolicy
EtwTimLogUserCetSetContextIpValidationFailure
EtwTraceAppStateChange
EtwTraceProcess
EtwUnregister
EtwpAcquireTokenAccessInformation
EtwpAddDataSource
EtwpAddMicroarchitecturalPmcToPmcGroup
EtwpAddMicroarchitecturalPmcToRegistry
EtwpAddRegEntryToGroup
EtwpAdjustTraceBuffers
EtwpAllocGuidEntry
EtwpAllocateEventNameFilter
EtwpAllocatePartitionMemory
EtwpAllocatePmcData
EtwpAllocateTraceBuffer
EtwpApplyEventIdPayloadFilter
EtwpApplyEventNameFilter
EtwpCCSwapDeleteProcessor
EtwpCCSwapStart
EtwpCancelTraceImageUnloadApc
EtwpCapturePreviousRegistryData
EtwpCaptureString
EtwpConstructIptData
EtwpCovSampCaptureContextStop
EtwpCovSampCaptureFreeLookasides
EtwpCovSampContextCleanup
EtwpCovSampContextGetModule
EtwpCovSampContextPruneModules
EtwpCovSampContextRemoveAndFreeModule
EtwpCovSampEnumerateProcess
EtwpCovSampLookasideGrow
EtwpCovSampModuleCleanup
EtwpCovSampProcessAddModule
EtwpCovSampProcessCleanup
EtwpCovSampProcessEnsureContext
EtwpCovSampStackHashTableAlloc
EtwpCoverageEnsureContext
EtwpCoverageFreeStringBuffers
EtwpCoverageHighIrqlCPWorkItemCallback
EtwpCoverageResetCP
EtwpCoverageSamplerAllocateTable
EtwpCoverageSamplerFreeTable
EtwpCoverageSamplerQuery
EtwpCreateNtFileName
EtwpCreateUmReplyObject
EtwpCrimsonStackWalkApc
EtwpDelayCreate
EtwpDeleteRegistrationObject
EtwpDeleteSessionDemuxObject
EtwpEnableAutoLoggerProvider
EtwpEnableTrace
EtwpEnumerateAddressSpace
EtwpEnumerateAutologgerPath
EtwpEnumerateWorkingSet
EtwpEventWriteFull
EtwpFinalizeHeader
EtwpFreeCompression
EtwpFreeEventNameFilter
EtwpFreeFilterInfo
EtwpFreeGuidEntry
EtwpFreeKeyNameEntry
EtwpFreeLoggerContext
EtwpFreePartitionMemory
EtwpFreePlaceholderList
EtwpFreeSecurityDescriptor
EtwpFreeStackCache
EtwpFreeTraceBuffer
EtwpFreeTraceBufferPool
EtwpGenerateFileName
EtwpGetAutoLoggerEventNameFilter
EtwpGetAutoLoggerLevelKwFilter
EtwpGetAutoLoggerProviderFilter
EtwpGetGuidSecurityDescriptor
EtwpGetTrackingLockSlotForThread
EtwpInitLoggerContext
EtwpInitializeAutoLoggers
EtwpInitializeStackTracing
EtwpLoadMicroarchitecturalPmcs
EtwpLoadMicroarchitecturalProfileGroup
EtwpLoadMicroarchitecturalProfileSource
EtwpLogMemInfoWs
EtwpLogMemNodeInfo
EtwpLogPmcCounterRundown
EtwpLogSessionWorkingSetInfo
EtwpMdlHashTableDeallocator
EtwpObjectHandleEnumCallback
EtwpObjectTypeRundown
EtwpPerfMemInfoWork
EtwpPoolRunDown
EtwpPreserveLogger
EtwpPreserveMdlList
EtwpProcessThreadImageRundown
EtwpProcessorRundown
EtwpProviderArrivalCallback
EtwpPsProvTraceProcess
EtwpQueryPartitionRegistryInformation
EtwpQueryPersistedMemory
EtwpRealtimeCreateLogfile
EtwpRealtimeFlushSavedBuffers
EtwpRealtimeNotifyConsumers
EtwpReceiveReplyDataBlock
EtwpRegTraceCallback
EtwpRegisterPartitionPages
EtwpRegisterPrivateSession
EtwpRegisterProvider
EtwpReleaseProviderTraitsReference
EtwpReleaseQueueEntry
EtwpRemoveMicroarchitecturalPmcFromPmcGroup
EtwpRemoveMicroarchitecturalPmcFromRegistry
EtwpSavePersistedLogger
EtwpSavePersistedLoggersWorker
EtwpSendDbgId
EtwpSetPmcProfileSource
EtwpSetProviderTraitsCommon
EtwpStartLogger
EtwpTiQueryVad
EtwpTiVadQueryEventWriteCallback
EtwpTimLogMitigationForProcess
EtwpTraceHandle
EtwpTraceImageUnloadApc
EtwpTraceProcessRundown
EtwpTrackBinaryForSession
EtwpUnreferenceDataBlock
EtwpUnregisterPartitionPages
EtwpUpdateDisallowedGuids
EtwpUpdateFileHeader
EtwpUpdateFilterData
EtwpUpdateKernelGroupsWork
EtwpUpdatePeriodicCaptureState
EtwpUpdatePidFilterData
EtwpUpdateSchematizedFilterData
EtwpUpdateStringFilterData
EtwpUserInAdminOrLogUsersGroup
ExAcquireResourceSharedLite
ExAllocateCacheAwareRundownProtection
ExAllocatePoolWithQuotaTag
ExCleanupSessionHeapManager
ExDereferenceHandleDebugInfo
ExEnterCriticalRegionAndAcquireResourceShared
ExEnterPriorityRegionAndAcquireResourceShared
ExEnumerateSystemFirmwareTables
ExFreeSvmAsid
ExGetFirmwareEnvironmentVariable
ExGetNextWakeTime
ExGetPoolTagInfo
ExGetSystemFirmwareTable
ExHandleSPCall2
ExInitLicenseData
ExNotifyPlatformBinaryExecuted
ExRegisterCallback
ExSetFirmwareEnvironmentVariable
ExShareAddressSpaceWithDevice
ExStartRecordingIRTimerExpiries
ExStopRecordingIRTimerExpiries
ExUnlockUserBuffer
ExUnregisterCallback
ExWnfCleanupServerSiloState
ExpAllocateHandleTable
ExpAllocateTablePagedPoolNoZero
ExpConvertArcName
ExpConvertSignatureName
ExpCovFreeUnloadedModuleEntry
ExpCovQueryHypervisorInformation
ExpCovQueryInformation
ExpCovReadRequestBuffer
ExpCreateOutputARC
ExpCreateOutputSIGNATURE
ExpDeleteSiloState
ExpDeleteWorkerFactory
ExpDereferenceHost
ExpExpandResourceOwnerTable
ExpFastResourceLegacyAcquireExclusive
ExpFastResourceLegacyAcquireSharedStarveExclusive
ExpFastResourceLegacyRelease
ExpFindArcName
ExpFindDiskSignature
ExpFreeHandleTable
ExpFreeTablePagedPool
ExpGenuinePolicyPostProcess
ExpGetDeviceDataInformation
ExpGetDriveGeometry
ExpGetLookasideInformation
ExpGetPartitionTableInfo
ExpGetProcessInformation
ExpGetSystemFirmwareTableInformation
ExpGetSystemFlushInformation
ExpGetSystemPlatformBinary
ExpKdPullRemoteFileForUser
ExpKeyedEventInitialization
ExpNtDeleteWnfStateData
ExpNtUpdateWnfStateData
ExpOsProductCacheProviderHelper
ExpParseAndUpdateLeapSecondData
ExpParseEfiPath
ExpParseSignatureName
ExpPartitionCreatePoolInternal
ExpPartitionDestroy
ExpProfileDelete
ExpQueryChannelInformation
ExpQueryElamCertInfo
ExpQueryLegacyDriverInformation
ExpQueryMemoryTopologyInformation
ExpQueryNumaAvailableMemory
ExpQueryPortableWorkspaceEfiLauncherInformation
ExpQuerySystemInformation
ExpReadLeapSecondData
ExpRegisterFirmwareTableInformationHandler
ExpSetBootEntry
ExpSetDriverEntry
ExpSetKernelDataProtection
ExpSvmDereferenceDevice
ExpSystemErrorHandler2
ExpTranslateEfiPath
ExpTranslateNtPath
ExpTranslateSymbolicLink
ExpWatchLicenseInfoWork
ExpWatchProductTypeInitialization
ExpWnfCheckCrossScopeAccess
ExpWnfCreateNameInstance
ExpWnfDeleteNameInstance
ExpWnfDeleteProcessContext
ExpWnfDeleteStateData
ExpWnfDeleteSubscription
ExpWnfFreeScopeInstance
ExpWnfGetPermanentPerUserDataStoreHandle
ExpWnfLookupPermanentName
ExpWnfPopulateStateData
ExpWnfResolveScopeInstance
ExpWnfSubscribeNameInstance
ExpWnfSubscribeWnfStateChange
ExpWnfWriteStateData
ExpWorkQueueManagerThread
FreeOperandValue
FsFilterFreeCompletionStack
FsFilterInit
FsRtlAddEntry
FsRtlCancelNotify
FsRtlCheckOplockEx2
FsRtlDeleteTunnelCache
FsRtlEmptyFreePoolList
FsRtlFreeExtraCreateParameter
FsRtlGetCompatibilityModeValue
FsRtlGetTunnelParameterValue
FsRtlHeatInit
FsRtlInsertPerFileContext
FsRtlInsertPerFileObjectContext
FsRtlIsDbcsInExpression
FsRtlNotifyCompleteIrp
FsRtlNotifyFilterChangeDirectory
FsRtlNotifyFilterChangeDirectoryLite
FsRtlNotifyFilterReportChange
FsRtlNotifyFilterReportChangeLiteEx
FsRtlNotifyUninitializeSync
FsRtlPTeardownPerFileObjectContexts
FsRtlStackOverflowRead
FsRtlTeardownPerFileContexts
FsRtlTruncateBaseMcb
FsRtlUninitializeBaseMcb
FsRtlUninitializeOplock
FsRtlpAcknowledgeOplockBreakByCacheFlags
FsRtlpHeatUnregisterVolume
FsRtlpOplockCleanup
FsRtlpOplockFsctrlInternal
FsRtlpOplockSendModernAppTermination
FsRtlpQueryValueKey
FsRtlpRegisterProviderWithMUP
FsRtlpRemoveAndBreakRHIrp
FsRtlpRemoveAndCompleteRHIrp
FsRtlpRemoveAndCompleteWaitingIrp
FsRtlpRequestExclusiveOplock
FsRtlpRequestShareableOplock
GetOperandValue
GetOperatorIndexByName
GetPrintableAttributeName
GetPrintableOperandValue
HalAllocateCommonBufferVector
HalBuildScatterGatherListV2
HalCancelAdapterChannel
HalCancelAdapterChannelThin
HalFreeCommonBufferThin
HalFreeCommonBufferV3
HalFreeCommonBufferVector
HalInitializeBios
HalPutScatterGatherList
HalPutScatterGatherListThin
HalPutScatterGatherListV3
HalacpiIrqTranslateResourceRequirementsIsa
HalpAllocateDomainCommonBufferInternal
HalpAuditAcpiTables
HalpAuditAllocateRsdtArrayTable
HalpAuditEnumerateRsdts
HalpBuildScatterGatherList
HalpBuildScatterGatherListThin
HalpDeleteSecondaryIcEntry
HalpDmaAllocateLocalContiguousPool
HalpDmaAllocateLocalScatterPool
HalpDmaAllocateMapRegisters
HalpDmaFinalizeDoubleBufferingDisposition
HalpDmaFindDeviceObjectByToken
HalpDmaFreeChildAdapter
HalpDmaGrowContiguousMapBuffers
HalpDmaGrowScatterMapBuffers
HalpDpReplaceBegin
HalpDpReplaceEnd
HalpGrowMapBufferWorker
HalpHandlePreviousMcaErrors
HalpHvInitMcaPcrContext
HalpInitChipHacks
HalpInitGenericErrorSourceEntry
HalpInitGenericErrorSourceEntryV2
HalpInitializeGenericErrorSource
HalpInitializeInterruptRemappingBspLate
HalpIrtExtendApertureRange
HalpIrtExtendRemappingRange
HalpIumGetNextVariableName
HalpIumGetVariable
HalpIumSetVariable
HalpLoadMicrocode
HalpMcExportAllData
HalpMcExportAndChargeNeededData
HalpMcSetUpdateInfoInvalid
HalpMmAllocCtxBufferCleanup
HalpPciReportMmConfigAddressRange
HalpPmemErrorDeferredHandler
HalpPmemErrorDeferredRecovery
HalpQueryResources
HalpReportResourceUsage
HalpUnloadMicrocode
HdlspAddLogEntry
HdlspSetBlueScreenInformation
HeadlessInit
HvFreeDirtyData
HvFreeUnreconciledData
HvHiveCleanup
HvSnapshotHiveToOffsetArray
HvStoreModifiedData
HvValidateOrInvalidatePrimaryFileHeader
HvWriteExternal
HvWriteHivePrimaryFile
HvlpDepositPages
HvpAllocateLogBuffers
HvpGenerateLogEntry
HvpMapHiveImageFromFile
InitBootProcessor
InsertEventEntryInLookUpTable
IoAllocateDriverObjectExtension
IoBoostThreadIoPriority
IoCaptureLiveDump
IoConnectInterruptEx
IoCreateDevice
IoCreateDeviceSecure
IoCreateSystemThread
IoDeleteDevice
IoDisconnectInterrupt
IoDisconnectInterruptEx
IoDiskIoAttributionDereference
IoFillDumpHeader
IoFreeErrorLogEntry
IoFreeKsrPersistentMemory
IoFreeMdl
IoFreeSfioStreamIdentifier
IoFreeWorkItem
IoGetDeviceDirectory
IoGetDeviceInterfaceAlias
IoGetDeviceProperty
IoGetLegacyVetoList
IoIsValidNameGraftingBuffer
IoMakeAssociatedIrpPriv
IoOpenDriverRegistryKey
IoQueryDeviceDescription
IoQueryFileDosDeviceName
IoQueryInformationByName
IoRaiseInformationalHardError
IoReadDiskSignature
IoReadPartitionTable
IoRegisterContainerNotification
IoRegisterDeviceInterface
IoRegisterPlugPlayNotification
IoReleaseRemoveLockAndWaitEx
IoReleaseRemoveLockEx
IoReplaceFileObjectName
IoReportDetectedDevice
IoReportHalResourceUsage
IoReportResourceUsageInternal
IoReserveKsrPersistentMemory
IoShutdownSystem
IoTranslateBusAddress
IoUnregisterContainerNotification
IoUnregisterFsRegistrationChange
IoUnregisterIoTracking
IoUnregisterShutdownNotification
IoVolumeDeviceNameToGuid
IoVolumeDeviceNameToGuidPath
IoVolumeDeviceToDosName
IoVolumeDeviceToGuid
IoWMIExecuteMethod
IoWMIQuerySingleInstance
IoWMISetSingleInstance
IoWMISetSingleItem
IoWMISuggestInstanceName
IoWMISystemControl
IoWriteDeferredLiveDumpData
IoWriteErrorLogEntry
IoWritePartitionTable
IommupHvInitializeLibrary
IopAdjustFileObjectKeepAliveCount
IopAllocateBootResourcesInternal
IopAllocateFileObjectExtension
IopAllocateIrpPrivate
IopAllocateLegacyBootResources
IopAllocatePassiveInterruptBlock
IopAllowRemoteDASD
IopApcHardError
IopAppendLegacyVeto
IopApplySystemPartitionProt
IopAttachDeviceToDeviceStackSafe
IopBuildDeviceIoControlRequest
IopBuildFullDriverPath
IopBuildGlobalSymbolicLinkString
IopCallBootDriverReinitializationRoutines
IopCallDriverReinitializationRoutines
IopChildToRootTranslation
IopCleanupFileObjectIosbRange
IopCleanupNotifications
IopCompleteRequest
IopConnectInterrupt
IopConnectLineBasedInterrupt
IopConnectMessageBasedInterrupt
IopCopyBootLogRegistryToFile
IopCopyOverNewPath
IopCreateArcName
IopCreateArcNamesCd
IopCreateArcNamesDisk
IopCreateCmResourceList
IopCreateFile
IopCreateLegacyDeviceIds
IopCreateSecureDeviceClassSettings
IopCreateSecurityCheck
IopCreateUmdfDirectory
IopDeleteDevice
IopDeleteDriver
IopDeleteFile
IopDeleteFileObjectExtension
IopDereferencePassiveInterruptBlock
IopDereferenceVpbAndFree
IopDestroyDeviceNode
IopDeviceObjectFromSymbolicName
IopDeviceRemovalForResetComplete
IopDoDeferredSetInterfaceState
IopDropIrp
IopDuplicateDetection
IopEnumerateEnvironmentVariablesTrEE
IopErrorLogDpc
IopErrorLogThread
IopExceptionCleanup
IopExecuteHardwareProfileChange
IopFileUtilRename
IopFileUtilWalkDirectoryTreeBottomUp
IopFileUtilWalkDirectoryTreeHelper
IopFileUtilWalkDirectoryTreeTopDown
IopFreeGenericTableEntry
IopFreeIrp
IopFreeIrpExtension
IopFreeMiniCompletionPacket
IopFreePoDeviceNotifyListHead
IopFreeRelationList
IopFreeReqAlternative
IopFreeReqList
IopFreeResetRemovalContext
IopGetBootDiskInformation
IopGetDeviceInterfaces
IopGetDriverNameFromKeyNode
IopGetEnvironmentVariableSysEnv
IopGetEnvironmentVariableTrEE
IopGetInterruptConnectionData
IopGetLegacyVetoListDrivers
IopGetPersistedStateLocation
IopGetPhysicalMemoryBlock
IopGetRegistryKeyInformation
IopGetRegistryValue
IopGetRelatedFileName
IopGetRootDevices
IopGetSetSecurityObject
IopGetSetSpecificExtension
IopGraftName
IopInitializeBootDrivers
IopInitializeDeviceInstanceKey
IopInitializeOfflineCrashDump
IopInitializePlugPlayServices
IopInitializeResourceMap
IopInitializeSystemDrivers
IopInitializeTriageDumpData
IopIsBitlockerOn
IopIsPciRootBus
IopIsReportedAlready
IopKeepAliveWorker
IopLegacyResourceAllocation
IopLiveDumpAllocAndInitResources
IopLiveDumpAllocateDumpBuffers
IopLiveDumpAllocateFromVMMemoryPartition
IopLiveDumpFreeDumpBuffers
IopLiveDumpFreeMappingResources
IopLiveDumpInitRegistrySettings
IopLiveDumpReleaseResources
IopLiveDumpWriteDumpFile
IopLiveDumpWriteDumpFileWithExtraPages
IopLoadBootHotPatches
IopLoadDriver
IopLoadDriverImage
IopMountVolume
IopOpenSystemVariableDevice
IopParseDevice
IopPnPDispatch
IopProcessSetInterfaceState
IopQueryBusResourceUpdateInterface
IopQueryConflictListInternal
IopQueryDeviceResetRegistrySettings
IopQueryDeviceResources
IopQueryDockRemovalInterface
IopQueryLegacyBusInformation
IopQueryNameInternal
IopQueryRegistryKeySystemPath
IopQueryResourceHandlerInterface
IopQuerySecureDeviceClassState
IopRaiseHardError
IopReadDumpRegistry
IopRegisterDeviceInterface
IopReleaseFilteredBootResources
IopReleaseResources
IopRemoveDumpCapsuleSupport
IopReplaceCompletionPort
IopReplaceSymlinkPath
IopReportBootResources
IopSafebootDriverLoad
IopSendMessageToTrackService
IopSessionChangeWorker
IopSetDeviceSecurityDescriptor
IopSetEaOrQuotaInformationFile
IopSetEnvironmentVariableSysEnv
IopSetEnvironmentVariableTrEE
IopSetFileMemoryPartitionInformation
IopSetFileObjectIosbRange
IopSetLockOperationProcess
IopStartApcHardError
IopStoreArcInformation
IopSymlinkApplyToOpenedName
IopSymlinkFreeRelatedMountPointChain
IopSymlinkRememberJunction
IopSymlinkUpdateECP
IopSynchronousApiServiceTail
IopThreadStart
IopTrackLink
IopTranslateAndAdjustReqDesc
IopUncacheInterfaceInformation
IopUnloadDriver
IopUnloadSafeCompletion
IopUpdateSecureDeviceClassState
IopValidateJunctionTarget
IopVerifierExAllocatePoolWithQuota_1
IopXxxControlFile
IopfCompleteRequest
IovpBuildDriverObjectList
KGetAppModelStateSeparatedRegKeyPath
KdDeregisterPowerHandler
KdPullRemoteFileEx
KdSetDbgPrintBufferSize
KeAllocateCalloutStackEx
KeCleanupImageTracepoints
KeDisableProfiling
KeDisconnectInterrupt
KeFreeCalloutStack
KeFreeXStateContext
KeInitializeUmsThread
KeProcessorProfileControlArea
KeRundownApcQueues
KeSetTracepoint
KeStartProfile
KeStopProfile
KeUnInitializeUmsThread
KiComputeNumaCosts
KiDeregisterNmiSxCallback
KiFilterFiberContext
KiGetSystemServiceTraceTable
KiInitializeMTRR
KiIntSteerConnect
KiIntSteerDisable
KiLogUserCetSetContextIpValidationFailure
KiLogUserCetSetContextIpValidationFailureWorker
KiPerformGroupConfiguration
KiStartDynamicProcessor
KiTpBuildExcludedKernelTracepointRangeList
KiTpIsExcludedKernelTracepointLocation
KiUpdateSavedSupervisorState
KsepCacheHwIdFree
KsepCompletionSafeWrapper
KsepEvntLogShimsApplied
KsepPoolFreeNonPaged
KsepPoolFreePaged
LdrUnloadAlternateResourceModuleEx
LdrpQueryValueKey
LdrpSetAlternateResourceModuleHandle
LkmdTelCreateReport
LocalConvertAclToString
LocalConvertSDToStringSD_Rev1
LocalConvertStringSDToSD_Rev1
LocalGetAclForString
LocalGetConditionForString
LocalGetRelativeAttributeForString
LocalGetStringForRelativeAttribute
LocalpConvertStringSidToSid
LocalpGetStringForCondition
MIDL_user_free
MUIInitializeResourceLock
MiAddPhysicalMemory
MiAddPrivateFixupEntryForSystemImage
MiAddRangeToPartitionTree
MiAgeWorkingSet
MiAllocateAweInfo
MiAllocateCalibrationResultsMemory
MiAllocateChildVads
MiAllocateCombineProto
MiAllocateEnclaveVad
MiAllocateEntireImageFileExtents
MiAllocateFileExtents
MiAllocateModWriterEntry
MiAllocateNewSubAllocatedRegion
MiAllocatePartitionPhysicalPages
MiAllocatePerSessionProtos
MiAllocatePfnRepurposeLogDispatch
MiAllocateSlabEntry
MiAllocateUserPhysicalPages
MiAllocateVad
MiApplyDriverHotPatch
MiApplyHotPatchToLoadedDriver
MiBuildImageControlArea
MiBuildImportsForBootDrivers
MiBuildNewCloneDescriptor
MiBuildReservationCluster
MiCheckSessionPoolAllocations
MiClearRangeInPartitionTree
MiCloneDiscardVadCommit
MiCloneProcessAddressSpace
MiCloneVads
MiCombineAllPhysicalMemory
MiCombineWorkingSet
MiCommitPageTableRangesForVad
MiCompleteProtoPteFault
MiCompressImportList
MiCompressRelocations
MiComputeIdealFirstSubsection
MiConstructLoaderEntry
MiCopyPagesIntoEnclave
MiCopyToCfgBitMap
MiCreateAweInfoBitMap
MiCreateCloneChain
MiCreateDataFileMap
MiCreateImageFileMap
MiCreateLargePageVad
MiCreateMdl
MiCreateMemoryEventSD
MiCreateNodeLists
MiCreatePagingFile
MiCreatePagingFileMap
MiCreatePatchTableProtos
MiCreatePlaceholderStorage
MiCreatePrototypePtes
MiCreateRotateView
MiCreateVadEventBitmap
MiCreateZeroThreadContext
MiDecrementHugeContext
MiDeleteAweBitMap
MiDeleteAweInfo
MiDeleteCachedSubsection
MiDeleteCloneDescriptor
MiDeleteCloneZombies
MiDeleteColorAnchors
MiDeleteControlArea
MiDeleteEmptySubsections
MiDeleteEnclavePages
MiDeleteHotPatchEntry
MiDeleteHotPatchRecord
MiDeleteImageCreationMdls
MiDeleteImageExtentList
MiDeleteKernelStackNode
MiDeletePageFileSectionNodes
MiDeletePagefile
MiDeletePartialCloneVads
MiDeletePartialVad
MiDeletePartition
MiDeletePartitionResources
MiDeletePerSessionProtos
MiDeletePxeSharedLocks
MiDeleteStaleCacheMaps
MiDeleteSubsectionPages
MiDeleteWorkingSetList
MiDeleteZeroThreadContext
MiDeprioritizeVad
MiDereferenceEnclaveModule
MiDereferenceExtendInfo
MiDereferencePageRunsEx
MiDriverLoadSucceeded
MiEmptyAccessLogs
MiEmptyPageAccessLog
MiEndDpcGang
MiExpandPartitionIds
MiExpandSystemCache
MiExtendPagingFileMaximum
MiExtendSection
MiFindLargePageMemory
MiFindPageFileWriteCluster
MiFinishVadDeletion
MiFlushComplete
MiFlushControlArea
MiFlushDeferredRetpolineImageLoadEvents
MiFlushSectionInternal
MiFlushStrongCodeDriverLoadFailures
MiFormFullImageName
MiFreeCloneDescriptor
MiFreeClonePool
MiFreeCombineMdls
MiFreeCombinePool
MiFreeImageCfgContext
MiFreeImageLoadConfig
MiFreeImageRetpolineContext
MiFreeInPageSupportBlock
MiFreeLoadedImportList
MiFreeModWriterEntry
MiFreeOverlappedFlushEntry
MiFreePartitionTree
MiFreePatchTableProtos
MiFreePlaceholderStorage
MiFreePlaceholderVadEvent
MiFreePrivateFixupEntryForSystemImage
MiFreeRelocations
MiFreeRetpolineImportInfo
MiFreeRetpolineRelocationInformation
MiFreeRotateView
MiFreeSlabEntry
MiFreeTransitionPageHeatList
MiFreeVadEventBitmap
MiFreeVadEvents
MiFreeVadRange
MiFreeWorkingSetSwapContext
MiGetFileOnlyRanges
MiGetHugePageToZero
MiGetPhysicalMemoryRanges
MiGetProcessHotPatchContext
MiGetUltraMdlContext
MiGetWorkingSetInfo
MiGetWorkingSetInfoList
MiHotAddPartitionMemory
MiHotRemoveHugeRange
MiInSwapStoreContextDereference
MiIncrementCombineMdl
MiInitializeCacheFlushing
MiInitializeDriverPtes
MiInitializeEnclaveMetadataPage
MiInitializeHugePfnDatabase
MiInitializeMemoryEvents
MiInsertHotPatchRecord
MiInsertInSystemSpace
MiInsertPartitionPages
MiInsertPteTracker
MiInsertSecureImageActivePatch
MiLdwPopupWorker
MiLoadDataIntoVsmEnclave
MiLoadHotPatch
MiLoadHotPatchForUserSid
MiLoadSectionIntoVsmEnclave
MiLockWorkingSetForLargeMapping
MiMakeIoRangePermanent
MiMakePartitionMemoryBlock
MiMapLockedPagesInUserSpace
MiMapViewOfDataSection
MiMapViewOfImageSection
MiMapViewOfPhysicalSection
MiMarkHugePfnBad
MiMarkHugePfnGood
MiPerformImageHotPatch
MiPfCompleteCoalescedIo
MiPfPrepareReadList
MiPfPrepareSequentialReadList
MiPfPutPagesInTransition
MiPrefetchControlArea
MiPrepareToHotPatchImage
MiProcessCrcList
MiQueryMemoryPhysicalContiguity
MiReAcquireOutSwappedProcessCommit
MiReclaimUnusedUltraMdlMaps
MiReleaseDriverPtes
MiReleaseHotPatchResources
MiReleaseOutSwappedProcessCommit
MiReleaseReadListResources
MiReleaseScrubPacket
MiReleaseSystemCacheView
MiReleaseVadEventBlocks
MiRelocateImage
MiRemoveFromSystemSpace
MiRemoveMdlPages
MiRemovePhysicalMemory
MiRemoveSecureEntry
MiReserveBootDriverPtes
MiReserveDriverPtes
MiReserveUserMemory
MiResolveImageReferences
MiReturnMdlExcess
MiReturnProcessVads
MiScrubProcessLargePages
MiSectionInitialization
MiSegmentDelete
MiSessionCreate
MiSessionCreateInternal
MiSessionInsertImage
MiSessionObjectCreate
MiSessionObjectDelete
MiSharePages
MiShutdownSystem
MiSnapThunk
MiStoreEvictThread
MiStoreFreeWriteSupport
MiStoreWriteModifiedPages
MiSwapStackPage
MiTrimSharedPageFromViews
MiUnapplyDriverHotPatch
MiUnloadHotPatch
MiUnloadHotPatchForUserSid
MiUnlockAndDereferenceNestedVad
MiUnlockAndDereferenceVad
MiUnlockAndDereferenceVadShared
MiUnlockDriverPages
MiUnlockWorkingSetExclusive
MiValidateImagePfn
MiValidateSectionCreate
MiViewMayContainPage
MiWriteComplete
MiZeroBootLargePages
MiZeroLargePageThread
MiZeroNodePages
MiZeroPage
MiZeroPageCalibrate
MiZeroPageFile
MmAllocateMappingAddressEx
MmAllocateNonCachedMemory
MmAllocateSecureKernelPages
MmCallDllInitialize
MmCopyVirtualMemory
MmDeleteProcessAddressSpace
MmDeleteProcessor
MmEnumerateBadPages
MmFreeAccessPfnBuffer
MmFreeBootRegistry
MmFreeContiguousMemory
MmFreeLoaderBlock
MmFreeMappingAddress
MmFreeNonCachedMemory
MmGetFileNameForAddress
MmGetFileNameForSection
MmInSwapVirtualAddresses
MmInSwapWorkingSet
MmInitSystem
MmInitializeMemoryLimits
MmInitializeProcessor
MmLinkJobProcess
MmLoadSystemImageEx
MmLogSystemShareablePfnInfo
MmManageFaultRange
MmManagePartitionInitialAddMemory
MmManagePartitionNodeInformation
MmOutSwapVirtualAddresses
MmOutSwapWorkingSet
MmPostHotPatchDbgModuleMessages
MmPrefetchForCacheManager
MmPrefetchPagesEx
MmProbeAndLockSelectedPages
MmRemoveImportOptimizationForDriverVerifier
MmRotatePhysicalView
MmSetPermanentCacheAttribute
MmStoreRegister
MmWaitForCacheManagerPrefetch
NP_CONTEXT::NpCleanup
NP_CONTEXT::NpNodeFree
NP_CONTEXT::NpStart
NtCloseObjectAuditAlarm
NtCreateEnclave
NtCreateLowBoxToken
NtCreatePrivateNamespace
NtCreateWorkerFactory
NtDeleteObjectAuditAlarm
NtDeleteWnfStateName
NtDisplayString
NtDrawText
NtEnableLastKnownGood
NtEnumerateBootEntries
NtEnumerateDriverEntries
NtFilterBootOption
NtFlushBuffersFileEx
NtGetMUIRegistryInfo
NtGetWriteWatch
NtInitializeEnclave
NtInitiatePowerAction
NtLoadEnclaveData
NtLockVirtualMemory
NtManageHotPatch
NtMapCMFModule
NtMapUserPhysicalPages
NtMapUserPhysicalPagesScatter
NtNotifyChangeSession
NtOpenObjectAuditAlarm
NtOpenPrivateNamespace
NtOpenThreadTokenEx
NtPowerInformation
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtQueryDirectoryObject
NtQueryEaFile
NtQueryInformationJobObject
NtQueryInformationProcess
NtQueryLicenseValue
NtQueryQuotaInformationFile
NtQuerySecurityAttributesToken
NtQuerySecurityPolicy
NtQuerySystemEnvironmentValue
NtQuerySystemEnvironmentValueEx
NtQueryVolumeInformationFile
NtQueryWnfStateData
NtQueryWnfStateNameInformation
NtReadFileScatter
NtRemoveIoCompletionEx
NtReplaceKey
NtReplacePartitionUnit
NtSetBootEntryOrder
NtSetCachedSigningLevel2
NtSetDriverEntryOrder
NtSetEaFile
NtSetInformationFile
NtSetInformationJobObject
NtSetInformationProcess
NtSetInformationThread
NtSetInformationToken
NtSetInformationVirtualMemory
NtSetSecurityObject
NtSetSystemEnvironmentValue
NtSetSystemEnvironmentValueEx
NtSetTimerResolution
NtSetUuidSeed
NtSetVolumeInformationFile
NtStartProfile
NtStopProfile
NtSystemDebugControl
NtTraceControl
NtTranslateFilePath
NtUnlockFile
NtWriteFileGather
ObAssignObjectSecurityDescriptor
ObCleanupSecurityDescriptor
ObCreateKernelObjectsSD
ObCreateObjectTypeEx
ObDereferenceSecurityDescriptor
ObGetObjectInformation
ObInsertObjectEx
ObLogSecurityDescriptor
ObOpenObjectByNameEx
ObRegisterCallbacks
ObReleaseObjectSecurity
ObSetSecurityDescriptorInfo
ObShutdownSystem
ObUnRegisterCallbacks
ObWaitForMultipleObjects
ObfDereferenceDeviceMap
ObpAllocateAndQuerySecurityDescriptorInfo
ObpAssignSecurity
ObpCallPostOperationCallbacks
ObpCaptureBoundaryDescriptor
ObpCreateDefaultObjectTypeSD
ObpCreateDosDevicesDirectory
ObpCreateHandle
ObpDeleteDirectoryEntry
ObpDeleteSymbolicLink
ObpDeregisterObject
ObpDestroyStackAndObjectTables
ObpDestroyTypeArray
ObpFreeObject
ObpFreeObjectNameBuffer
ObpFreeWorkItemBlock
ObpGetObjectRefInfo
ObpGetObjectSecurity
ObpGetSilosRootDirectory
ObpInitObjectTypeSD
ObpInitStackAndObjectTables
ObpInitStackTrace
ObpInsertHandleCount
ObpLookupObjectName
ObpMarkDirectoryObjectsTemporary
ObpMarkDirectoryTreeTemporary
ObpParseSymbolicLinkEx
ObpSetDeviceMap
ObpSetObjectAuditInfo
ObpStartRuntimeStackTrace
ObpStopRuntimeStackTrace
ObpVerifyCreatorAccessCheck
PdcPortOpenCommon
PdcTaskClientRegister
PdcpPortReleaseResources
PerfDiagpProxyWorker
PerfDiagpSaveActiveDCLLogFileName
PerfDiagpStartPerfDiagLogger
PerfLogImageUnload
PfCalculateProcessHash
PfFbBufferListCleanup
PfFbBufferListInsertInFree
PfProcessCreateNotification
PfSetSuperfetchInformation
PfSnArrayGrow
PfSnAsyncContextCleanup
PfSnAsyncPrefetchWorker
PfSnBeginAppLaunch
PfSnBeginScenario
PfSnBeginTrace
PfSnBuildDumpFromTrace
PfSnEnablePrefetcherTimerRoutine
PfSnEndTrace
PfSnGetCompletedTrace
PfSnGetFileInformation
PfSnGetPrefetchInstructions
PfSnNameRemove
PfSnOpenVolumesForPrefetch
PfSnOperationProcess
PfSnPopulateReadList
PfSnPrefetchScenario
PfSnSectionInfoCleanupWorkItem
PfSnTraceGetLogEntry
PfSnTracingStateExWorkerRoutine
PfTCleanupBuffers
PfTCreateTraceDump
PfTFreeTraceDump
PfpCopyUserPfnPrioRequest
PfpCreateEvent
PfpFileBuildReadSupport
PfpMemoryRangesQuery
PfpPfnPrioRequest
PfpPowerActionDpcRoutine
PfpPrefetchFiles
PfpPrefetchPrivatePages
PfpPrefetchRequest
PfpPrefetchRequestPerform
PfpPrefetchSharedDeref
PfpPrefetchVolumesCleanup
PfpQueryFileExtentsRequest
PfpReadSupportCleanup
PfpRpCHashAddEntries
PfpRpCHashDeleteEntries
PfpRpCHashEmpty
PfpRpControlRequest
PfpRpFileKeyUpdate
PfpRpShutdown
PfpScenCtxScenarioSet
PfpServiceMainThreadUnboost
PfpSourceBuildVaArray
PfpVolumeOpenAndVerify
PiAuAllocateAndInitializeSid
PiAuCheckClientInteractive
PiAuCheckTokenMembership
PiAuCreateLocalSystemSecurityObject
PiAuCreateStandardSecurityObject
PiAuFreeUserSids
PiAuGetDriverDataDirectorySecurityObject
PiAuGetServiceStateSecurityObject
PiAuGetStateDirectorySecurityObject
PiAuditDeviceOperation
PiBuildDeviceNodeInstancePath
PiCMCreateDevice
PiCMEnumerateSubKeys
PiCMGenerateDeviceInstance
PiCMGetDeviceIdList
PiCMGetDeviceInterfaceAlias
PiCMGetDeviceInterfaceList
PiCMGetObjectList
PiCMGetObjectProperty
PiCMGetObjectPropertyKeys
PiCMGetRegistryProperty
PiCMGetRelatedDeviceInstance
PiCMQueryRemove
PiCMRegisterDeviceInterface
PiControlFreeUserModeCallersBuffer
PiControlGetDeviceStack
PiControlGetSetDeviceStatus
PiControlMakeUserModeCallersCopy
PiCreateDriverDataDirectoryRoot
PiCreateDriverRedirectedStateKey
PiCreateDriverSwDeviceCallback
PiDcFreeGenericTableEntry
PiDcInitUpdateProperties
PiDcResetChildDeviceContainerCallback
PiDcResetChildDeviceContainers
PiDeferSetInterfaceState
PiDevCfgBuildIndirectString
PiDevCfgConfigureDevice
PiDevCfgConfigureDeviceInterfaces
PiDevCfgConfigureDeviceKeys
PiDevCfgConfigureSoftwareDevices
PiDevCfgConvertPropertyFromValue
PiDevCfgCopyDeviceKey
PiDevCfgCopyDeviceKeys
PiDevCfgCopyObjectProperties
PiDevCfgEnforceDevicePolicy
PiDevCfgFindDeviceDriver
PiDevCfgFindDeviceMigrationNode
PiDevCfgFreeDeviceMigrationNode
PiDevCfgFreeDriverNode
PiDevCfgFreeResolveContext
PiDevCfgGetKeySecurityDescriptor
PiDevCfgInitDriverDatabaseCallback
PiDevCfgMakeServiceBootStart
PiDevCfgMigrateDevice
PiDevCfgMigrateRootDevice
PiDevCfgPopCopyKeyEntry
PiDevCfgProcessDeviceCallback
PiDevCfgPushCopyKeyEntry
PiDevCfgQueryDriverNode
PiDevCfgQueryIncludedDriverConfigurations
PiDevCfgQueryIncludedDriverNode
PiDevCfgQueryObjectProperties
PiDevCfgQueryPolicyEnabled
PiDevCfgQueryPolicyStringList
PiDevCfgQueryResolveValue
PiDevCfgResolveMultiSzValue
PiDevCfgResolveVariable
PiDevCfgResolveVariableConstant
PiDevCfgResolveVariableDeviceProperty
PiDevCfgResolveVariableExpression
PiDevCfgResolveVariableFormatString
PiDevCfgResolveVariableKeyCopy
PiDevCfgResolveVariableKeyHandle
PiDevCfgResolveVariableKeyValue
PiDevCfgResolveVariableSwitchCase
PiDevCfgVerifyDeviceAllowed
PiDevCfgVerifyService
PiDeviceRegistration
PiDmCacheDataFree
PiDmFreeGenericTableEntry
PiDmGetReferencedObjectFromProperty
PiDmListEnumObjectsWithCallback
PiDmListInit
PiDmListInitEnumCallback
PiDmObjectManagerPopulate
PiDmObjectProcessPropertyChange
PiDmObjectRelease
PiDmObjectUpdateCachedObjectProperty
PiDqActionDataFree
PiDqActionDataGetAllPropertiesInAllLanguages
PiDqActionDataGetAllPropertiesInBestLanguage
PiDqDeleteUserObject
PiDqFreeGenericTableEntry
PiDqGetRelativeObjectRegPath
PiDqGrowPropertyArray
PiDqIrpPropertySet
PiDqIrpQueryCreate
PiDqObjectManagerServiceActionQueue
PiDqOpenUserObjectRegKey
PiDqPnPGetObjectProperty
PiDqPnPGetObjectPropertyKeys
PiDqPnPGetObjectPropertyLocales
PiDqQueryActionQueueEntryFree
PiDqQueryRelease
PiDqQuerySerializeActionQueue
PiDqSerializationAlloc
PiDrvDbDestroyNode
PiDrvDbEnumDriverStoreNodes
PiDrvDbOverlayCopyKeys
PiDrvDbOverlayNodeHive
PiDrvDbQuerySyncNodesUpdated
PiDrvDbQuerySystemPathWin32
PiDrvDbRegisterNode
PiDrvDbRegisterNodeCallback
PiDrvDbResolveFilePathKeyValues
PiDrvDbResolveSystemFilePath
PiEventAllocateVetoBuffer
PiFindDevInstMatch
PiGetDeviceRegProperty
PiGetDeviceRegistryProperty
PiGetStateRootPath
PiInitCacheGroupInformation
PiInitializeDevice
PiIommuFreeExtension
PiLastGoodCopyKeyContents
PiLastGoodRevertCopyCallback
PiLastGoodRevertLastKnownDirectory
PiNormalizeDeviceText
PiNotifyCiDriverBlocked
PiOpenDirectoryWithRoot
PiPnpAddDeviceToPdoDeviceListEnumContext
PiPnpFreePdoDeviceList
PiPnpRtlApplyMandatoryDeviceInterfaceFilters
PiPnpRtlCmActionCallback
PiPnpRtlEndOperation
PiPnpRtlFreeDeviceDeleteInfo
PiPnpRtlFreeInstallerClassChangeInfo
PiPnpRtlFreeInterfaceDeleteInfo
PiPnpRtlFreePanelRemoveInfo
PiPnpRtlGatherDeviceDeleteInfo
PiPnpRtlGatherInterfaceDeleteInfo
PiPnpRtlGetFilteredDeviceList
PiPnpRtlInterfaceFilterCallback
PiPnpRtlIsDeviceEnumerableForUser
PiPnpRtlObjectActionCallback
PiPnpRtlObjectEventRelease
PiPnpRtlObjectEventWorker
PiPnpRtlOperationFreeGenericTableEntry
PiPnpRtlServiceFilterCallback
PiProcessDriverInstance
PiProcessNewDeviceNode
PiProcessQueryAndCancelRemoval
PiProcessSetDeviceProblem
PiProfileUpdateDeviceTreeWorker
PiQueryAndAllocateBootResources
PiQueryDeviceRelations
PiQueryPowerDependencyRelations
PiQueryPowerRelations
PiQueryRemovableDeviceOverride
PiQueryResourceRequirements
PiRearrangeDeviceInstances
PiRegisterKernelSoftRestartNotification
PiRemoveDeferredSetInterfaceState
PiSwBusRelationAdd
PiSwBusRelationRemove
PiSwCompleteCreate
PiSwDeviceDereference
PiSwDeviceFree
PiSwDeviceInterfaceSetState
PiSwDeviceInterfacesUpdateState
PiSwFreeGenericTableEntry
PiSwFreeMem
PiSwGetChildPdo
PiSwInstanceInfoFree
PiSwInterfaceFree
PiSwIrpInterfacePropertySet
PiSwIrpInterfaceRegister
PiSwIrpPropertySet
PiSwIrpStartCreate
PiSwPdoAssociationFree
PiSwPnPInfoFree
PiSwProcessRemove
PiSwQueuedCreateInfoFree
PiSwStopDestroy
PiSwUpdateArrayProperties
PiUEventBroadcastEventWorker
PiUEventCacheObjectProperties
PiUEventDequeuePendingEventWorker
PiUEventFreeClientRegistrationContext
PiUEventFreeEventEntry
PiUEventHandleVetoEvent
PiUEventInitClientRegistrationContext
PiUEventNotifyTargetDeviceChange
PiUEventProcessBroadcastNotifications
PiUpdateDeviceResourceLists
PiUpdateDriverDBCache
PipApplyFunctionToServiceInstances
PipCallDriverAddDevice
PipChangeDeviceObjectFromRegistryProperties
PipCheckDependencies
PipCheckForDenyExecute
PipCheckSystemFirmwareUpdated
PipCreateComputerId
PipCreateNewDependencyEdge
PipDeleteDependencyNode
PipDgqFreeEntry
PipDmgInitReadGroupPolicy
PipEnumerateCompleted
PipFindDeviceOverrideEntry
PipFreeBindingId
PipFreeBindingRequestEntry
PipFreeDependencyEdge
PipFreeGroupTree
PipGetDeviceObjectLocation
PipGetDriverKsrGuidRegistryValue
PipGetDriverTagPriority
PipGetPersistentMemory
PipGetRegistrySecurityWithFallback
PipGrowDeviceObjectList
PipHardwareConfigInit
PipInitComputerIds
PipInitDeviceOverrideCache
PipInitializeCoreDriversByGroup
PipInitializeEarlyLaunchDrivers
PipIommuRetrieveDeviceId
PipIommuRetrieveSecondaryDeviceId
PipMakeGloballyUniqueId
PipMigrateCleanServiceCallback
PipProcessPendingObjects
PipProcessStartPhase3
PipRemoveDevicesInRelationList
PipResetDevices
PipSendQueryRemoveIrpAndCheckOpenHandles
PipServiceInstanceToDeviceInstance
PipUpdateDeviceProducts
PipUpdateSetupInProgress
PnpAddVetoInformation
PnpAllocatePWSTR
PnpAllocateWatchdog
PnpBootDeviceWait
PnpBuildCmResourceList
PnpBuildCmResourceLists
PnpBusTypeGuidGetIndex
PnpCallDriverEntry
PnpCallDriverQueryServiceHelper
PnpCancelRemoveOnHungDevices
PnpCheckDeviceIdsChanged
PnpCheckPossibleBootStartDriver
PnpCompleteDeviceEvent
PnpConcatPWSTR
PnpCopyDevPropertyArray
PnpCtxCloseMachine
PnpCtxCreateNode
PnpCtxDestroyNode
PnpCtxGetCachedNodeBaseKey
PnpCtxOpenMachine
PnpDelayedRemoveWorker
PnpDeleteDeviceActionRequest
PnpDeleteDeviceInterfaces
PnpDeviceCompletionRequestDestroyWorkItem
PnpDeviceEventWorker
PnpDisableDeviceInterfaces
PnpDisableWatchdog
PnpDriverLoadingFailed
PnpFilterResourceRequirementsList
PnpFreeDevProperty
PnpFreeDevPropertyArray
PnpFreeDeviceInstancePath
PnpFreeInterruptInformation
PnpFreeResourceRequirementsForAssignTable
PnpFreeUnicodeStringList
PnpFreeWatchdog
PnpGetDeviceInstanceCsConfigFlags
PnpGetDeviceLocationStrings
PnpGetDeviceResourcesFromRegistry
PnpGetEnumSecurityDescriptor
PnpGetPropertiesSecurityDescriptor
PnpGetRegistryDword
PnpGetRelatedTargetDevice
PnpGetResourceRequirementsForAssignTable
PnpHardwareConfigCreateBootDriverFlags
PnpLoadBootFilterDriver
PnpLogVetoInformation
PnpMultiSzDeleteString
PnpOpenPropertiesKey
PnpPrepareDriverLoading
PnpProcessAssignResources
PnpProcessCompletedEject
PnpProcessDeferredRegistrations
PnpProcessQueryRemoveAndEject
PnpProcessRelation
PnpProfileUpdateHardwareProfile
PnpQueryBusInformation
PnpQueryDeviceText
PnpQueryID
PnpQueuePendingSurpriseRemoval
PnpQueueQueryAndRemoveEvent
PnpReadDeviceConfiguration
PnpRebalance
PnpRecordBlackboxDelayedRemoveWorkerInformation
PnpRecordBlackboxDeviceCompletionQueueInformation
PnpRecordBlackboxPnpEventInformation
PnpRecordBlackboxPnpEventWorkerInformation
PnpRegQueryValueIndirect
PnpReleaseBootResourcesForFilteredRequirements
PnpRemoveEventFromQueue
PnpRemoveLockedDeviceNode
PnpReportTargetDeviceChangeAsyncWorker
PnpRequestDeviceEjectExWorker
PnpRestartDeviceNode
PnpRestoreResourcesInternal
PnpSetInterruptInformation
PnpShutdownDevices
PnpUnicodeStringToWstrFree
PnpUnloadAttachedDriver
PnpUnregisterPlugPlayNotification
PnprAddMemoryResources
PnprAddProcessorResources
PnprAllocateMappingReserves
PnprCollectResources
PnprGetPluginDriverImagePath
PnprIsMemoryDevice
PnprIsProcessorDevice
PnprLoadPluginDriver
PnprMmFree
PnprQuiesceWorker
PoClearBroadcast
PoCreateThermalRequest
PoDeleteThermalRequest
PoDestroyReasonContext
PoDiagCaptureUsermodeStack
PoDiagFreeUsermodeStack
PoFxRegisterCoreDevice
PoFxRegisterDebugger
PoFxRegisterDevice
PoFxRegisterPrimaryDevice
PoReenableSleepStates
PoRunDownDeviceObject
PoUnregisterCoalescingCallback
PopAnsiStringToUnicodeString
PopAvlFreePowerRequestStats
PopBcdReadElement
PopBcdRegenerateResumeObject
PopBcdSetDefaultResumeObjectElements
PopBcdSetupResumeObject
PopBootStatCheckIntegrity
PopBootStatGet
PopBootStatSet
PopCallPowerSettingCallback
PopCaptureReasonContext
PopCleanCoolingExtension
PopClearTransitionCheckpoints
PopCloneRange
PopCloneUnicodeString
PopCreateHiberFileSecurityDescriptor
PopCreateTimebrokerServiceSid
PopDeferDoze
PopDereferenceWakeInfos
PopDiagQueryDevicePropertyString
PopDiagTraceControlCallback
PopDiagTraceCsExitReason
PopDiagTraceFxComponentAccounting
PopDiagTraceFxDeviceAccounting
PopDiagTracePowerRequestCreate
PopDirectedDripsDiagFreeDeviceDiagnostic
PopDirectedDripsDiagRundownBroadcastTrees
PopDirectedDripsUmDirectedFxAddTestDevice
PopDirectedDripsUmTestDeviceFree
PopDispatchPowerSettingCallbacks
PopEnableHiberFile
PopEtAggregateGet
PopEtBucketsFree
PopEtEnergyTrackerCleanup
PopEtEnergyTrackerCleanupAggregates
PopEtInternerFree
PopEtProcessSnapshotCreate
PopEtProcessSnapshotUpdate
PopExtendConnectionState
PopFinalizeWakeInfo
PopFreeRegistration
PopFreeUnicodeString
PopFreeWakeInfo
PopFreeWakeSource
PopFxConvertV1Components
PopFxCreateDeviceCommon
PopFxDestroyDeviceCommon
PopFxDestroyDeviceDpm
PopFxDestroyDripsBlockingDeviceList
PopFxFindDeviceAndAllocateUniqueId
PopFxFreeUniqueId
PopFxInitializeSocSubsystemStaticInfo
PopFxLogSocSubsystemMetadata
PopFxPepPerfInfoFree
PopFxRegisterDeviceWorker
PopFxRegisterPluginEx
PopFxTraceDeviceRegistration
PopFxTracePerfRegistration
PopFxUpdateVetoMaskWork
PopFxVerifyDependencies
PopGenerateDeviceFriendlyName
PopGetBitlockerKeyLocation
PopGetDope
PopGetHwConfigurationSignature
PopGetPowerRequestListInfo
PopGracefulShutdown
PopHiberInitializeResources
PopIdlePhaseWatchdogCallback
PopIdleWakeNotifyModernStandbyExit
PopInitPlatformSettings
PopIsWakeTimerImmanent
PopLoadResumeContext
PopLogDisabledSleepReason
PopMarshalSettingValues
PopNetInitialize
PopPdcCsDeviceNotification
PopPepRegisterDevice
PopPepUnregisterDevice
PopPlInitComponents
PopPlInitDevice
PopPlInitDevices
PopPlInitPowerPlane
PopPlInitWString
PopPluginQuerySocSubsystemMetadata
PopPolicyDeviceTargetChange
PopPowerInformationInternal
PopPowerRequestFree
PopPreallocateHibernateMemory
PopReadPagesFromHiberFile
PopReadRegKeyValue
PopReadResumeContext
PopRecordPepWorkorderBlackboxInformation
PopRecordPoIrpBlackboxInformation
PopRecordPowerWatchdogBlackboxInformation
PopRegisterCoolingExtensionProtection
PopRemoveReasonRecordByReasonCode
PopRequestShutdownWait
PopResetIdlePhaseWatchdogDiagnosticContext
PopSetHiberFileMcb
PopSetPowerSettingValue
PopSetWatchdog
PopThermalHandlePreviousShutdown
PopThermalZoneRemove
PopTraceThermalRequestActiveActivity
PopTraceThermalRequestPassiveHistogram
PopUmpoInitializeChannel
PopUmpoProcessMessages
PopUmpoSendPowerMessage
PopUmpoSendPowerRequestCreate
PopUmpoSendPowerRequestOverrideQuery
PopUnicodeStringDeepCopy
PopUnregisterPowerSettingCallback
PopUpdateWakeSource
PopUpdateWakeSourceWorker
PopWakeSourceGetDeviceProperty
PpBootDDBHelper
PpCheckInDriverDatabase
PpDevCfgProcessDevices
PpDevNodeRemoveFromTree
PpForEachDeviceInstanceDriver
PpInitGetGroupOrderIndex
PpProfileCommitTransitioningDock
PpProfileIncludeInHardwareProfileTransition
PpReleaseBootDDB
PpmClearSimulatedLoad
PpmEventTraceCoordinatedIdleStates
PpmEventTracePlatformIdleAccounting
PpmEventTracePreVetoAccounting
PpmEventTraceProcessorIdle
PpmEventTraceProcessorIdleAccounting
PpmEventTraceProcessorPerformanceDomainRundown
PpmFireWmiEvent
PpmHeteroInitializeHgsSupport
PpmInitHeteroEngine
PpmInstallNewIdleStates
PpmParkRegisterParking
PpmPerfResizeHistory
PpmQueryPlatformStateResidency
PpmRegisterPerfStates
PpmRegisterSpmSettings
PpmRemoveIdleStates
PpmSetSimulatedLoad
PpmUpdateIdleVeto
PpmWmiFireIdleAccountingEvent
PsAdjustBasicEnclaveThreadList
PsBoostThreadIoEx
PsCallEnclave
PsCreateVsmEnclave
PsDereferenceVsmEnclave
PsDispatchIumService
PsFreeEnclaveModuleInfo
PsInitializeVsmEnclave
PsLoadVsmEnclaveData
PsRegisterSiloMonitor
PsRemoveCreateThreadNotifyRoutine
PsRemoveLoadImageNotifyRoutine
PsSetCpuQuotaInformation
PsSetLoadImageNotifyRoutineEx
PsUnregisterSiloMonitor
PspAllocateAndQueryNotificationChannel
PspAllocateProcess
PspAllocateRateControl
PspAllocateThread
PspApplyWorkingSetLimits
PspCaptureUserProcessParameters
PspCreateSecureThread
PspDeleteCreateProcessContext
PspDeleteProtectedProcessParameters
PspDeleteServerSiloGlobals
PspDereferenceQuotaBlock
PspEstablishJobHierarchy
PspExitThread
PspFreeRateControl
PspFreeStorage
PspInitializeFullProcessImageName
PspInitializeSystemPartitionPhase0
PspInsertProperty
PspIsDfssEnabled
PspIumAllocatePartitionState
PspIumAllocatePhysicalPages
PspIumAllocateSecurePool
PspIumFreePartitionState
PspIumVerifyParentSd
PspJobDelete
PspJobIoRateControlDisable
PspLazyInitializeStorageExpansion
PspProcessDynamicEHContinuationTargets
PspQueryRateControlHistory
PspReadDfssConfigurationValues
PspReadIFEOPerfOptions
PspRecordCrashedProcessIntoBlackbox
PspRemoveProperty
PspRundownSingleProcess
PspSetCreateProcessNotifyRoutine
PspSetJobIoRateControlForVolume
PspSetMinimalProcessName
PspSiloInitializeSystemRootSymlink
PspThreadDelete
PspTimerDelayWorkerRoutine
QueryRegistryHideMachine
RawCleanupVcb
RawQueryFileSystemInformation
RegRtlCopyTreeInternal
RegRtlCreateTreeTransacted
RegRtlDeletePathInternal
RegRtlDeleteTreeInternal
RegRtlEnumKey
RegRtlEnumKeyWithCallback
RegRtlEnumValue
RegRtlQueryKeyPathName
RegRtlQueryValue
ResFwBackgroundTransition
ResFwFreeContext
ResFwpPageOutBackground
RtlAcquirePrivilege
RtlAddDynamicEnforcedAddressRange
RtlAddResourceAttributeAce
RtlAnsiStringToUnicodeString
RtlCheckBootStatusIntegrity
RtlCreateRvaList
RtlCreateSystemVolumeInformationFolder
RtlDeleteHashTable
RtlExpandHashTable
RtlFreeAnsiString
RtlFreeOemString
RtlFreeUTF8String
RtlGenerateClass5Guid
RtlGetAppContainerParent
RtlGetPersistedStateLocation
RtlIdnToUnicode
RtlInsertDynamicFunctionTable
RtlIsUntrustedObject
RtlLockBootStatusData
RtlNormalizeSecurityDescriptor
RtlOemStringToCountedUnicodeString
RtlOemStringToUnicodeString
RtlQueryImageFileKeyOption
RtlQueryModuleInformation
RtlQueryRegistryValueWithFallback
RtlReleasePrivilege
RtlRemoveDynamicEnforcedAddressRange
RtlTraceDatabaseDestroy
RtlUTF8StringToUnicodeString
RtlUnicodeStringToAnsiString
RtlUnicodeStringToCountedOemString
RtlUnicodeStringToOemString
RtlUnicodeStringToUTF8String
RtlUnlockBootStatusData
RtlUpcaseUnicodeStringToAnsiString
RtlUpcaseUnicodeStringToCountedOemString
RtlUpcaseUnicodeStringToOemString
RtlUpdateImportRelocationsInImage
RtlpAllocDeallocQueryBuffer
RtlpAllocateAtom
RtlpAllowsLowBoxAccess
RtlpCombineAcls
RtlpComputeMergedAcl
RtlpConstructCrossVmObjectPath
RtlpCtContextFree
RtlpCtFreeMemory
RtlpFcNotifyFeatureUsageTarget
RtlpFreeAtom
RtlpFreeRangeListEntry
RtlpGetBootStatusPathFromRegistry
RtlpGetNormalization
RtlpGetPolicyValueForSystemCapability
RtlpGetTokenNamedObjectPath
RtlpGetWindowsPolicy
RtlpIdnToUnicodeWorker
RtlpIsNameInExpressionPrivate
RtlpLoadInstallLanguageFallback
RtlpLoadLanguageConfigList
RtlpLoadPolicyLanguageSpec
RtlpMuiRegConfigMatchesInstalled
RtlpMuiRegFreeRegistryInfo
RtlpMuiRegGetInstalledLanguageIndexByLangId
RtlpMuiRegLangInfoMatchesSpec
RtlpMuiRegResizeStringPool
RtlpMuiRegValidateInstalled
RtlpNameprepAsciiWorker
RtlpNewSecurityObject
RtlpProcessIFEOKeyFilter
RtlpSetSecurityObject
RtlpSysVolCheckOwnerAndSecurity
RtlpSysVolCreateSecurityDescriptor
SC_ENV::Free
SLGetSubscriptionPfn
SLQueryLicenseValueInternal
SLUpdateLicenseDataInternal
SMKM_STORE::SmStCleanup
SMKM_STORE::SmStCompareRegionDataCallback
SMKM_STORE::SmStInSwapStore
SMKM_STORE::SmStOutSwapStore
SMKM_STORE::SmStTrimWsStoreBatch
SMKM_STORE_MGR::SmCompressContextDeleteThreadParams
SMKM_STORE_MGR::SmCompressCtxProcessReadyQueue
SMKM_STORE_MGR::SmDrainSList
SMKM_STORE_MGR::SmPageWrite
SMKM_STORE_MGR::SmPerformStoreMaintenance
SMKM_STORE_MGR::SmStoreContentsRundown
SMKM_STORE_MGR::SmStoreMgrCallback
SMKM_STORE_MGR::SmStoreTerminate
SMKM_STORE_MGR::SmWorkItemFree
SMKM_STORE_MGR::SmWorkItemFreeResource
SPCallServerHandleFileIntegrityQuery
SPCallServerHandleFileIntegrityUpdate
SPCallServerHandleFileUsnQuery
SPCallServerHandleGetAppPolicyValue
SPCallServerHandleIsAppLicensed
SPCallServerHandleQueryPolicy
SPCallServerHandleUpdatePolicies
ST_STORE::StCleanup
ST_STORE::StDeviceIoBuild
ST_STORE::StDeviceWorkItemCleanup
ST_STORE::StDmCleanup
ST_STORE::StDmDeviceIoCompletion
ST_STORE::StDmLazyRegionsWorker
ST_STORE::StDmRegionRemove
ST_STORE::StDrainReadContextList
ST_STORE::StReleaseReadContext
ST_STORE::StReleaseRegion
ST_STORE::StStoreWorkItemCleanup
SaveNodeDistanceInformation
SdbCloseDatabaseRead
SdbInitDatabaseInMemory
SdbOpenDatabaseEx
SdbQueryDataExTagID
SdbReleaseDatabase
SdbResolveDatabaseEx
SdbpCheckAllAttributes
SdbpCheckMatchingDir
SdbpCheckMatchingRegistryValue
SdbpCheckMatchingText
SdbpCheckMatchingTextEntry
SdbpCreateSearchDBContext
SdbpFreePackageAttributes
SdbpGetMatchingTextAttributes
SdbpOpenCompressedDatabase
SdbpOpenDatabaseInMemory
SdbpReleaseSearchDBContext
SdbpResolveMatchingFile
SddlpFree
SddlpReAlloc
SeAccessCheckByTypeWithAdminlessChecks
SeAccessCheckWithHintWithAdminlessChecks
SeAdtRegistryValueChangedAuditAlarm
SeAppendPrivileges
SeAuditFipsCryptoSelftests
SeAuditProcessCreation
SeAuditProcessExit
SeAuditSystemTimeChange
SeAuditTransactionStateChange
SeCaptureAcl
SeCaptureObjectTypeList
SeCaptureSecurityDescriptor
SeCaptureSid
SeCaptureSidAndAttributesArray
SeCodeIntegritySetInformationProcess
SeDeassignSecurity
SeDefaultObjectMethod
SeExamineSacl
SeFreeCapturedObjectTypeList
SeLogAccessFailure
SeMakeAnonymousLogonToken
SeMakeAnonymousLogonTokenNoEveryone
SeMakeSystemToken
SeOpenObjectAuditAlarmWithTransaction
SeOpenObjectForDeleteAuditAlarmWithTransaction
SeOperationAuditAlarm
SeQueryInformationToken
SeReleaseAcl
SeReleaseImageValidationContext
SeReleaseLuidAndAttributesArray
SeReleaseSecurityDescriptor
SeReleaseSid
SeSecureBootRegisterPolicy
SeSecurityAttributePresent
SeSecurityDescriptorChangedAuditAlarm
SeSetLearningModeObjectInformation
SeShutdownServerSilo
SeTokenDefaultDaclChangedAuditAlarm
SeTokenIsElevated
SeUnregisterLogonSessionTerminatedRoutine
SeUnregisterLogonSessionTerminatedRoutineEx
SeValidateImageHeader
SecureDump_EncryptSymmetricKeyWithPublicKey
SecureDump_Init
SecureDump_PrepareForInit
SecureDump_ReadRegistry
SecureDump_SymmetricEncryptionSetup
SepAccessCheckAndAuditAlarmWithAdminlessChecks
SepAddLuidToIndexEntry
SepAddTokenOriginClaim
SepAdtCloseObjectAuditAlarm
SepAdtDeleteObjectAuditAlarm
SepAdtGenerateDiscardAudit
SepAdtLogAuditRecord
SepAdtObjectReferenceAuditAlarm
SepAdtOpenObjectAuditAlarm
SepAdtPrivilegeObjectAuditAlarm
SepAdtPrivilegedServiceAuditAlarm
SepAdtSecurityDescriptorChangedAuditAlarm
SepAdtStagingEvent
SepAdtTokenRightAdjusted
SepAppendAceToTokenDefaultDacl
SepAppendAceToTokenObjectAcl
SepAuditAssignPrimaryToken
SepBuildDefaultCap
SepCaptureFqbnArray
SepCaptureInt64Array
SepCaptureOctetStringArray
SepCaptureTokenSecurityAttributesAndOperationsInformation
SepCaptureTokenSecurityAttributesInformation
SepCaptureUnicodeStringArray
SepCheckAndCopySelfRelativeSD
SepCheckCapabilities
SepCleanupLUIDDeviceMapDirectory
SepCleanupMarkedForDeletionEntries
SepCommonAccessCheckExWithAdminlessChecks
SepCreateClaimAttributes
SepCreateLogonSessionTrack
SepCreateTokenEx
SepDeReferenceLogonSession
SepDeReferenceSharedSidEntries
SepDeleteAccessState
SepDeleteClaimAttributes
SepDeleteLogonSessionTrack
SepDeleteSessionLowboxEntries
SepDeleteTokenUserAndGroups
SepDereferenceCachedHandlesEntry
SepDereferenceLowBoxNumberEntry
SepDereferenceSidValuesBlock
SepDuplicateClaimAttributes
SepDuplicateToken
SepExamineSaclEx
SepExpandDynamic
SepExpandSingletonArrays
SepFilterToken
SepFreeCapturedTokenSecurityAttributesInformation
SepFreeResourceInfo
SepFreeTokenCapabilities
SepGetCachedHandlesEntry
SepGetLearningModeObjectInformation
SepGetLogonSessionAccountInfo
SepGetLowBoxNumberEntry
SepImageVerificationCallbackWorker
SepInformLsaOfDeletedLogon
SepInitProcessAuditSd
SepInitializationPhase1
SepInitializeSingletonAttributesStructures
SepInsertOrReferenceSharedSidEntries
SepInternalQuerySecurityAttributesTokenEx
SepLengthSidAndAttributesArray
SepLoadNgenLocations
SepLogTokenSidManagement
SepLogUnmatchedSessionFlagImpersonationAttempt
SepMandatoryIntegrityCheck
SepMandatorySubProcessToken
SepNotifyFileSystems
SepQueryNameString
SepQueryTypeString
SepReadAndInsertCaps
SepReadAndPopulateCapes
SepReadSingleCap
SepReleaseAuditPolicy
SepReleaseTokenSecurityAttributesAndOperationsInformation
SepRemoveTokenLogonSession
SepRmCallLsa
SepRmCapPoolExpand
SepRmDestroyCapTable
SepRmDispatchDataToLsa
SepRmFetchGlobalSacl
SepRmGlobalSaclSetWrkr
SepSecureBootCorrectBcd
SepSecureBootUpdateBcdDataForRule
SepSetSystemPaths
SepSetTokenCachedHandles
SepSetTokenCapabilities
SepSetTokenPackage
SepSetTokenTrust
SepTokenDeleteMethod
SepUpdateLogonSessionTrack
SepValidateAndCopyGlobalEntry
SepValidateReferencedCachedHandles
SepVerifyDesktopAppxImage
SepVerifyDesktopAppxPackageName
SiBootEntryGetNtFilePath
SiFindSystemPartition
SiGetBiosSystemDisk
SiGetBiosSystemPartition
SiGetBootDeviceName
SiGetDriveLayoutInformation
SiGetEfiSystemDevice
SiGetEspFromFirmware
SiGetFirmwareSystemPartition
SiGetRegistryValue
SiGetSystemDeviceName
SiGetSystemDisk
SiIsWinPEBoot
SiIsWinPeHardDiskZeroUfdBoot
SiQueryProperty
SiQuerySystemInformationString
SiTranslateSymbolicLink
SleepstudyHelperSetBlockerFriendlyName
SmArrayGrow
SmFpCleanup
SmFpFree
SmFpPreAllocate
SmHpBufferAlloc
SmHpBufferCleanup
SmHpChunkHeapCleanup
SmKmAllocateMdlForLock
SmKmFreeMdlForLock
SmKmStoreFileCreateForIoType
SmKmStoreFileGetExtents
SmKmStoreFileMakeSecurityDescriptor
SmKmStoreFileWriteHeader
SmKmStoreTerminateWorker
SmPrepareForFatalHeapCorruption
SmPrepareForFatalPageError
SmStoreSetProcessVaRanges
SshpCopyDataEntry
SshpFreeBlockerEntry
StEtaCleanup
StartFirstUserProcess
SysCtxCloseMachine
SysCtxOpenMachine
SysCtxRegOpenCurrentUserKey
SyspartGetPhysicalPartitions
SyspartIsSpace
TtmDispatchApi
TtmNotifyDeviceArrival
TtmNotifySessionPowerRequestDeleted
TtmiCloseEventQueue
TtmiPurgeSessionPowerRequestEntries
TtmiRetrieveEventFromQueue
TtmiSessionDeviceListWorker
TtmiSetDisplayPowerRequest
TtmpCleanupPowerRequestsTrackingFromCurrentSession
TtmpCommitTerminalDisplayStateUpdateWorker
TtmpDeleteQueue
TtmpDereferenceSessionMaybeLast
TtmpInsertPowerRequestToSession
TtmpPowerRequestHashDeallocator
TtmpSetDisplayRequestEnded
VerifierExFreePool
VerifierExFreePoolWithTag
VerifierIoDisconnectInterrupt
VerifierIoDisconnectInterruptEx
VerifierIoWMIWriteEvent
VfAddVerifierEntry
VfAllocateDomainCommonBuffer
VfCtxHookAndConnectInterrupt
VfDeadlockInitialize
VfDriverEnableVerifierForAll
VfDriverUnloadImage
VfFreeCapturedUnicodeString
VfGetVerifierInformation
VfInitializeBranchTracing
VfIoFreeIrp
VfIrpLogDeleteDeviceLogs
VfIrpLogRetrieveWmiData
VfIrpLogUnlockDatabase
VfKeCheckForChanges
VfPnpTestStartedPdoStack
VfPoolCheckForLeaks
VfPoolDelayFreeIfPossible
VfSetVerifierInformationEx
VfSuspectDriversRemove
VfTargetDriversAdd
VfTargetDriversEnableVerifier
VfTargetDriversRemove
VfTargetEtwRegister
VfTargetEtwUnregister
VfThunkApplyDriverAddedThunks
VhdiVerifyBootDisk
ViAllocateMapRegisterFile
ViCreateProcessCallbackInternal
ViFaultsAddAppNoDuplicates
ViFaultsAddTagNoDuplicates
ViFaultsRemoveAllApps
ViFaultsRemoveAllTags
ViFreeMapRegisterFile
ViHalFreeDomainCommonBuffer
ViInitializeLocalSystemDescriptor
ViIrpAllocateLockedPacket
ViIrpLogExposeWmiCallback
ViPacketNotificationCallback
ViPendingCompleteAfterWait
ViPendingDelayCompletion
ViPoolDelayFreeTrimThreadRoutine
ViReleaseDmaAdapter
ViRtlReplaceStringBuffer
ViSpecialAllocateCommonBuffer
ViSpecialFreeCommonBuffer
ViTargetRemovingCheckEtwWmi
ViThunkFreeSharedThunksArray
ViThunkRemoveImportEntry
ViThunkReplaceAllThunkedImports
VmCreateMemoryRange
VmpFreeMemoryRanges
VmpPrefetchForVirtualFault
VmpPrefetchVirtualAddresses
VmpPrefetchWorker
VmpRemoveMemoryRange
VrpAddNamespaceNodeToList
VrpCleanupBufferParameter
VrpCleanupNamespace
VrpCreateNamespaceNode
VrpDecommissionKeyContext
VrpDereferenceDiffHiveEntryWithLock
VrpDestroyNamespaceNode
VrpFindOrCreateDiffHiveEntryForMountPoint
VrpFreeCallbackContext
VrpFreeKeyContext
VrpHandleIoctlCreateMultipleNamespaceNodes
VrpHandleIoctlLoadDifferencingHiveForHost
VrpHandleIoctlUnloadDifferencingHiveForHost
VrpInitializeNamespaceNodeList
VrpPostEnumerateKey
VrpPostOpenOrCreate
VrpPreLoadKey
VrpPreOpenOrCreate
VrpTranslatePath
VslAllocatePool
VslFinishStartSecureProcessor
VslFreePoolTransferObject
VslGetEtwDebugId
VslObtainHotPatchUndoTable
VslStartSecureProcessor
VslpFlushBufferArrayEntryCallback
VslpLockPagesForTransfer
VslpSkStartProfiling
VslpSkStopProfiling
VslpUnlockPagesForTransfer
WbAlloc
WbDispatchOperation
WbFreeMemoryBlock
WbFreeWarbirdEncryptionSegment
WbFreeWarbirdProcess
WbGetInitializedEncryptionSegment
WbHashData
WbReAlloc
WbValidateEncryptionSegmentArguments
WdipAccessCheck
WdipSemCleanupGroupPolicy
WdipSemFreePool
WdtpAllocateTimer
WheaAddErrorSource
WheaAddErrorSourceDeviceDriver
WheaRemoveErrorSource
WheaRemoveErrorSourceDeviceDriver
WheaUnregisterInUsePageOfflineNotification
WheapCheckForAndReportErrorsFromPreviousSession
WheapInitErrorReportDeviceDriver
WheapLogInitEvent
WheapPfaMemoryCheck
WheapPfaReset
WheapPfaRetireExpiredMemoryEntries
WheapReportDeferredLiveDumps
WheapReportLiveDump
WmipAddDataSource
WmipAddProviderIdToPIList
WmipAllocGuidEntry
WmipBuildInstanceSet
WmipCachePtrs
WmipCopyFromEventQueues
WmipCreateGuidObject
WmipDSCleanup
WmipDereferenceEvent
WmipEventNotification
WmipFreeTraceDeviceList
WmipGECleanup
WmipGenerateBinaryMofNotification
WmipGenerateMofResourceNotification
WmipGenerateRegistrationNotification
WmipGetFilePDO
WmipGetGuidSecurityDescriptor
WmipGetRegistryHideMachine
WmipGetSysIds
WmipISCleanup
WmipInitializeSecurity
WmipInsertMofResource
WmipLegacyEtwWorker
WmipMRCleanup
WmipPrepareWnodeSI
WmipProcessEvent
WmipQueryAllData
WmipQueryAllDataMultiple
WmipQuerySetExecuteSI
WmipQuerySingleMultiple
WmipQueueNotification
WmipReceiveNotifications
WmipRegisterOrUpdateDS
WmipSaveGuidSecurityDescriptor
WmipSecurityMethod
WmipSendEnableDisableRequest
WmipSendGuidUpdateNotifications
WmipUpdateDataSource
WmipUpdateModifyGuid
__int64
long,ST_STORE::_ST_REGION_ENTRY,4096,NP_CONTEXT,ST_STORE::ST_REGION_ENTRY_COMPARATOR>::BTreeSearchResultCleanup
pIoQueryBusDescription
pIoQueryDeviceDescription
sub_1403DCCA0
sub_1403E9150
sub_1405B03A8
sub_1405F50F8
sub_14064F544
sub_14064FA38
sub_14065EF2C
sub_14095F3C0
sub_1409601E0
sub_140960810
sub_140960EA4
sub_1409612A0
sub_140961B08
sub_14096222C
sub_140962840
sub_1409632A8
wil_StagingConfig_QueryFeatureState
wil_details_StagingConfig_Load