RtlULongSub

NTSTATUS __stdcall RtlULongSub(UINT64 ulMinuend, UINT64 ulSubtrahend, UINT64 *pulResult){
  int v3; 
  if( (unsigned int)ulMinuend < (unsigned int)ulSubtrahend )
    v3 = -1;
  else
    v3 = ulMinuend - ulSubtrahend;
  *(_DWORD *)pulResult = v3;
  return(unsigned int)ulMinuend < (unsigned int)ulSubtrahend ? 0xC0000095 : 0;
}

Referenced by:

BiGetFilePathFromEfiPath
DbgkpTriageDumpSnapData
IopTrackLink
PiForEachDriverQueryRoutine
PnpCallDriverQueryServiceHelper
RegRtlQueryKeyPathName