KeAbPostRelease

VOID __stdcall KeAbPostRelease(VOID *Lock){
  _ETHREAD *CurrentThread; 
  int v2; 
  unsigned int SessionId; 
  unsigned __int8 v5; 
  int v6; 
  bool v7; 
  __int64 v8; 
  _KLOCK_ENTRY *v9; 
  unsigned int v10; 
  __int64 v11; 
  char v12; 

  CurrentThread = (_ETHREAD *)KeGetCurrentThread();
  v2 = 0;
  v12 = 0;
  if( (unsigned __int64)Lock >= 0xFFFF800000000000ui64
    && *((_BYTE *)&stru_140C4DB30 + (((unsigned __int64)Lock >> 39) & 0x1FF) + 6872) == 1 )
  {
    SessionId = MmGetSessionIdEx(CurrentThread->Tcb.ApcState.Process);
  }
  else
  {
    SessionId = -1;
  }
  --CurrentThread->Tcb.SpecialApcDisable;
  v5 = ++CurrentThread->Tcb.AbAllocationRegionCount;
  v6 = ((char)CurrentThread->Tcb.AbEntrySummary | (char)CurrentThread->Tcb.AbOrphanedEntrySummary) ^ 0x3F;
  v7 = !_BitScanReverse((unsigned int *)&v8, v6);
  if( v7 )
    goto LABEL_22;
  while( 1 )
  {
    v9 = &CurrentThread->Tcb.LockEntries[v8];
    v6 &= ~(1 << v8);
    if( (v9->AcquiredByte & 1) != 0
      && (v9->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 & 1) == 0
      && (v9->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 & 0x7FFFFFFFFFFFFFFCi64) == ((unsigned __int64)Lock & 0x7FFFFFFFFFFFFFFCi64)
      && v9->LockState.SessionId == SessionId )
    {
      v9->AcquiredByte &= ~1u;
      if( v9->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 )
        break;
    }
    v7 = !_BitScanReverse((unsigned int *)&v8, v6);
    if( v7 )
      goto LABEL_22;
  }
  if( !v9 )
  {
LABEL_22:
    if( (*(&CurrentThread->Tcb.MiscFlags + 1) & 0x10000) == 0 )
      KeBugCheckEx(0x162u, CurrentThread, Lock, (PVOID)SessionId, 0i64);
  }
  else
  {
    v9->CrossThreadReleasableAndBusyByte |= 2u;
    if( v9->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 < 0 )
      KiAbEntryRemoveFromTree(v9);
    v2 = v9->BoostBitmap.AllFields & 0x1FFFF;
    v10 = v9->BoostBitmap.AllFields & 0xFFFE0000;
    v9->ThreadLocalFlags &= ~1u;
    v12 = BYTE2(v2);
    v9->BoostBitmap.AllFields = v10;
    v9->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 = 0i64;
    v11 = v9 - CurrentThread->Tcb.LockEntries;
    if( v5 == 1 )
      CurrentThread->Tcb.AbEntrySummary |= 1 << v11;
    else
      _InterlockedOr8((volatile signed __int8 *)&CurrentThread->Tcb.AbOrphanedEntrySummary, 1 << v11);
  }
  --CurrentThread->Tcb.AbAllocationRegionCount;
  if( (v2 & 0x1FFFF) != 0 )
  {
    if( (v2 & 0x8000u) != 0 )
      KiAbThreadUnboostIoPriority(&CurrentThread->Tcb, 0i64);
    if( (v12 & 1) != 0 )
    {
      _InterlockedDecrement(&CurrentThread->Tcb.AbCompletedIoQoSBoostCount);
      PsBoostThreadIoQoS(CurrentThread, 1ui64);
    }
    if( (v2 & 0x7FFF) != 0 )
      KiAbThreadUnboostCpuPriority(&CurrentThread->Tcb, (_KLOCK_ENTRY *)(v2 & 0x7FFF));
  }
  v7 = CurrentThread->Tcb.SpecialApcDisable++ == -1;
  if( v7
    && ($F25F8C4BA33AF922A5F1AF68CD89DDDF *)CurrentThread->Tcb.ApcState.ApcListHead[0].Flink != &CurrentThread->Tcb.152 )
  {
    KiCheckForKernelApcDelivery();
  }
}

Referenced by:

AlpcDeleteBlobByHandle
AlpcReferenceBlobByHandle
AlpcRegisterLogRoutine
AlpcUnregisterLogRoutine
AlpcViewDestroyProcedure
AlpcpAcceptConnectPort
AlpcpAssociateIoCompletionPort
AlpcpCancelMessage
AlpcpCancelMessagesByRequestor
AlpcpCleanupProcessViews
AlpcpCompleteDispatchMessage
AlpcpCreateClientPort
AlpcpCreateReserve
AlpcpCreateSection
AlpcpCreateSectionView
AlpcpCreateSecurityContext
AlpcpCreateView
AlpcpDeleteBlob
AlpcpDeletePort
AlpcpDestroyBlob
AlpcpDestroyPort
AlpcpDisconnectPort
AlpcpDispatchCloseMessage
AlpcpDispatchConnectionRequest
AlpcpDispatchNewMessage
AlpcpDispatchReplyToPort
AlpcpDispatchReplyToWaitingThread
AlpcpDoPortCleanup
AlpcpEndInitialization
AlpcpEnterAllocationEventMessageLog
AlpcpEnterFreeEventMessageLog
AlpcpEnterStateChangeEventMessageLog
AlpcpEnumerateResourcesPort
AlpcpFlushCancelQueue
AlpcpFlushMessagesByRequestor
AlpcpFlushMessagesPort
AlpcpFlushQueue
AlpcpImpersonateMessage
AlpcpInitializeCompletionList
AlpcpInsertCompletionListEntry
AlpcpInsertMessageCanceledQueue
AlpcpInsertMessageDirectQueue
AlpcpInsertMessageLargeMessageQueue
AlpcpInsertMessageMainQueue
AlpcpInsertMessagePendingQueue
AlpcpInvokeLogCallbacks
AlpcpLocateSectionView
AlpcpMapLegacyPortRemoteView
AlpcpPortQueryConnectedSidInfo
AlpcpPortQueryServerSessionInfo
AlpcpProcessSynchronousRequest
AlpcpQueryRemoteView
AlpcpQueueIoCompletionPort
AlpcpReceiveDirectMessagePort
AlpcpReceiveLegacyMessage
AlpcpReceiveMessage
AlpcpReceiveMessagePort
AlpcpReceiveSynchronousReply
AlpcpReferenceAndLockTargetPortsAndCommunicationInfo
AlpcpReferenceConnectedPort
AlpcpReferenceMessageByWaitingThread
AlpcpReferenceMessageByWaitingThreadPort
AlpcpRegisterCompletionListDatabase
AlpcpReleasePushLockExclusive
AlpcpRemoveMessageFromPendingQueue
AlpcpRemoveResourcePort
AlpcpReplyLegacySynchronousRequest
AlpcpReturnMessageOnInsufficientBuffer
AlpcpSendLegacySynchronousRequest
AlpcpSendMessage
AlpcpSignalAndWait
AlpcpSignalPortAndUnlock
AlpcpTrackPortReferences
AlpcpUnlockAndDereferenceTargetPortsAndCommunicationInfo
AlpcpUnlockBlob
AlpcpUnlockCommunicationInfoShared
AlpcpUnlockIncomingQueue
AlpcpUnlockPortExclusive
AlpcpUnlockPortShared
AlpcpUnregisterCompletionListDatabase
AlpcpWaitForPortReferences
AlpcpWalkConnectionList
BgkpLockBgfxCodeSection
BgkpUnlockBgfxCodeSection
CcPinFileData
CcSetDirtyInMask
CcSetDirtyPinnedData
CcSlowReferenceSharedCacheMapFileObject
CcUnpinFileDataEx
CmDumpKey
CmFcManagerDrainAllFeatureUsageNotifications
CmFcManagerQueryFeatureConfigurationSectionInformation
CmFcManagerRegisterFeatureConfigurationChangeNotification
CmFcManagerUnregisterFeatureConfigurationChangeNotification
CmFcManagerUpdateFeatureUsageSubscriptions
CmFcpManagerDrainUsageNotificationsWorker
CmFcpManagerPublishChangeNotifications
CmFcpManagerRetryUsageNotificationsWorker
CmFcpManagerSoftwareHiveReady
CmFreezeRegistry
CmQueryMultipleValueKey
CmSiRWLockReleaseExclusive
CmThawRegistry
CmUnlockHive
CmpBecomeActiveFlusherAndReconciler
CmpBlockTwoHiveWrites
CmpCloseKeyObject
CmpCreateKeyControlBlock
CmpDereferenceKeyControlBlock
CmpDoQueueLateUnloadWorker
CmpFinishBeingActiveFlusherAndReconciler
CmpFlushBackupHive
CmpGetKeyNodeForKcb
CmpMarkEntireIndexDirty
CmpPerformSingleKcbCacheLookup
CmpPromoteKey
CmpReportNotifyHelper
CmpTransMgrSyncHive
CmpTrimHive
CmpUnblockHiveWrites
CmpUnblockTwoHiveWrites
CmpUpdateHiveRootCellFlags
CmpVEExecuteOpenLogic
CmpVolumeContextDecrementRefCount
CmpVolumeContextMustHiveFilePagesBeKeptLocal
CmpVolumeContextUnlockExclusive
CmpVolumeContextUnlockShared
CmpVolumeManagerGetContextForFile
CmpVolumeManagerUnlockContextListExclusive
CmpWaitOnHiveWriteQueue
CmpWakeWriteQueueWaiters
CmpWalkOneLevel
DbgkFlushErrorPort
DbgkRegisterErrorPort
DbgkpRemoveErrorPort
DbgkpSendErrorMessage
EmClientQueryRuleState
EmClientRuleDeregisterNotification
EmClientRuleEvaluate
EmPowerPagingEnabled
EmProviderDeregister
EmProviderDeregisterEntry
EmProviderRegisterEntry
EmpAcquirePagingReference
EmpClientRuleRegisterNotification
EmpProviderRegister
EmpReleasePagingReference
EtwDeleteSiloState
EtwQueryProcessTelemetryCoverage
EtwpAcquireTokenAccessInformation
EtwpAddBinaryInfoEvents
EtwpAddDebugInfoEvents
EtwpAddGuidEntry
EtwpAddRegEntryToGroup
EtwpCovSampContextAddSamples
EtwpCovSampContextCleanup
EtwpCovSampContextGetModule
EtwpCovSampContextPruneModules
EtwpCovSampHashMakeRoomAndAcquireLock
EtwpCovSampProcessAddModule
EtwpCovSampProcessMapAddresses
EtwpCoverageCheckCP
EtwpCoverageEnsureContext
EtwpCoverageEnsureUserModeView
EtwpCoverageProvEnableCallback
EtwpCoverageRecord
EtwpCoverageReset
EtwpCoverageResetCP
EtwpCoverageSamplerClose
EtwpCoverageSamplerQuery
EtwpCoverageSamplerSetBloomFilter
EtwpCoverageSamplerStart
EtwpCoverageSamplerStop
EtwpCoverageSamplerUnloadImage
EtwpCreateLogFile
EtwpCreateUmReplyObject
EtwpDeleteRegistrationObject
EtwpDisableKernelTrace
EtwpFindGuidEntryByGuid
EtwpFlushCoverage
EtwpGetCompressionSettings
EtwpGetDisallowList
EtwpGetLoggerInfoFromContext
EtwpGetNextGuidEntry
EtwpIsGuidAllowed
EtwpRealtimeNotifyConsumers
EtwpReferenceLoggerSecurityDescriptor
EtwpSendDbgId
EtwpTrackBinaryForSession
EtwpTrackDecodeGuidForSession
EtwpUnreferenceGuidEntry
EtwpUpdateDisallowedGuids
EtwpUpdateGroupMasks
EtwpUpdatePeriodicCaptureState
ExDupHandleTable
ExEnableHandleExceptions
ExEnableHandleTracing
ExEnableRaiseUMExceptionOnInvalidHandleClose
ExFetchLicenseData
ExGetLicenseTamperState
ExInitLicenseData
ExNotifyPlatformBinaryExecuted
ExReferenceHandleDebugInfo
ExRegisterExtension
ExRegisterHost
ExReleaseAutoExpandPushLockExclusive
ExReleaseAutoExpandPushLockShared
ExReleaseCacheAwarePushLockExclusive
ExReleaseCacheAwarePushLockExclusiveEx
ExReleaseFastMutexUnsafe
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion
ExReleasePushLockSharedEx
ExSetLicenseTamperState
ExSweepHandleTable
ExUnregisterExtension
ExUuidCreate
ExfAcquireReleasePushLockExclusive
ExpAllocateHandleTableEntry
ExpFreeHandleTableEntry
ExpGetGlobalLocaleSection
ExpGetKernelDataProtection
ExpGetProcessInformation
ExpGetSystemPlatformBinary
ExpInsertLowLevelTableIntoFreeList
ExpKdPullRemoteFileForUser
ExpLoadAndSortLicensingCacheDescriptors
ExpNtUpdateWnfStateData
ExpReadLeapSecondData
ExpRemoveHandleTable
ExpSaAllocatorAllocate
ExpSaAllocatorFree
ExpSetKernelDataProtection
ExpSnapShotHandleTables
ExpWnfAcquireSubscriptionByName
ExpWnfAcquireSubscriptionNameInstance
ExpWnfAllocateNextPersistentNameSequence
ExpWnfCompleteThreadSubscriptions
ExpWnfCreateNameInstance
ExpWnfCreateProcessContext
ExpWnfDeleteNameInstance
ExpWnfDeleteProcessContext
ExpWnfDeleteScopeById
ExpWnfDeleteScopeInstances
ExpWnfDeleteStateData
ExpWnfDeleteSubscription
ExpWnfDeliverThreadNotifications
ExpWnfDispatchKernelSubscription
ExpWnfEnumerateScopeInstances
ExpWnfLookupNameInstance
ExpWnfNotifyNameSubscribers
ExpWnfNotifySubscription
ExpWnfReadStateData
ExpWnfResolveScopeInstance
ExpWnfSubscribeNameInstance
ExpWnfUpdateSubscription
ExpWnfWriteStateData
FsRtlAcquireEofLock
FsRtlCheckOplockEx2
FsRtlReleaseEofLock
FsRtlReleaseHeaderMutex
HalpDmaAllocateChildAdapterV3
HalpIommuCreateDevice
HalpIommuDeleteDevice
HvFoldBackDirtyData
HvFreeCell
HvHiveConvertLockedPagesToCowByPolicy
HvIsRangeDirty
HvUnlockHiveFlusherExclusive
HvUnlockHiveFlusherShared
HvUnlockHiveWriter
HvpDoAllocateCell
HvpFinishPrimaryWrite
HvpMarkCellDirty
InsertEventEntryInLookUpTable
IoRegisterIoTracking
IoUnregisterIoTracking
IommuProcessPageRequestQueue
IopProcessIoTracking
KeCleanupImageTracepoints
KeDeleteMutant
KeReleaseGuardedMutex
KeReleaseMutant
KeSetSystemServiceCallback
KeSetTracepoint
KiRundownMutants
KiStartSavingSupervisorState
KseAddHardwareId
KseDriverUnloadImage
KseLookupHardwareId
KseRegisterShimEx
KseResetDeviceCache
KseShimDatabaseBootRelease
KseShimDatabaseClose
KseShimDatabaseOpen
KseUnregisterShim
KsepCacheUnlock
KsepDbCacheInsertDevice
KsepDbCacheQueryDevice
KsepGetShimsForDriver
KsepIsModuleShimmed
KsepResolveApplicableShimsForDriver
MiAllocatePartitionId
MiCaptureRetpolineImportInfo
MiChargeSegmentCommit
MiCommitExistingVad
MiComputeNodeMemory
MiCreateHardwareEnclave
MiCreatePagingFile
MiCreatePagingFileMap
MiCreatePerSessionProtos
MiDeleteAllHardwareEnclaves
MiDeleteEnclavePages
MiDeleteExtentPfns
MiDeleteHotPatchRecord
MiDeleteImageHotPatchState
MiDeleteVad
MiDereferencePerSessionProtos
MiDereferenceSessionFinal
MiFindHotPatchRecord
MiFindProcessImageHotPatchRecord
MiFinishCreateSection
MiFreeInPageSupportBlock
MiFreePartitionId
MiFreeRetpolineImportInfo
MiGetChannelInformation
MiGetHotPatchEntry
MiHotPatchImage
MiInitializePartition
MiInitializeSessionGlobals
MiInsertChildVads
MiInsertHotPatchRecord
MiInsertPageFileInList
MiInsertPartitionPages
MiInsertSharedCommitNode
MiIsExtentDangling
MiIsRangeFullyCommitted
MiLoadHotPatchForUserSid
MiLockVadRange
MiLogHotPatchRundown
MiMapViewOfDataSection
MiMarkHugePfnBad
MiMarkHugePfnGood
MiMarkSharedImageCfgBits
MiObtainRelocationBits
MiPerformImageHotPatch
MiPopulateCfgBitMap
MiProcessTransitionHeatBatch
MiQueryLoadedPatches
MiQueryProcessActivePatches
MiRebuildLargePages
MiReleaseImageSection
MiReleaseKernelCfgLock
MiReleaseProcessReferenceToSessionDataPage
MiReleasePushLockUnordered
MiRelocateImage
MiRelocateImagePfn
MiRemoveBadPages
MiReserveUserMemory
MiReturnImageBase
MiSectionCreated
MiSectionDelete
MiSelectOverflowDllBase
MiSelectRelocationStartHint
MiSessionCreateInternal
MiSetPagesModified
MiSetProtectionOnSection
MiShutdownSystem
MiSplitPrivatePage
MiSplitReducedCommitClonePage
MiSubsectionProtosCreated
MiTrimSharedPageFromViews
MiUnloadHotPatchForUserSid
MiUnlockAndDereferenceVadShared
MiUnlockControlAreaFileObjectShared
MiUnlockControlAreaSectionExtend
MiUnlockDynamicMemoryShared
MiUnlockImageExtentsExclusive
MiUnlockLoaderEntry
MiUnlockNestedVad
MiUnlockVadRange
MiUnlockVadShared
MiUpdateImagePfnImportRelocations
MiWalkEntireImage
MiZeroAllPageFiles
MiZeroPage
MiZeroSectionObjectPointer
MmAcquireSessionPoolRundown
MmCheckProcessShadow
MmCommitSessionMappedView
MmCreateShadowMapping
MmDeleteShadowMapping
MmDuplicateMemory
MmExtendSection
MmGetPageFileForCrashDump
MmLinkJobProcess
MmManagePartitionNodeInformation
MmPostHotPatchDbgModuleMessages
MmReleaseLoadLock
MmResourcesAvailable
MmSetPfnListInfo
NtAllocateUuids
NtAlpcDeleteSectionView
NtAlpcOpenSenderProcess
NtAlpcRevokeSecurityContext
NtAlpcSetInformation
NtAreMappedFilesTheSame
NtCreateUserProcess
NtDeleteKey
NtOpenProcessTokenEx
NtOpenThreadTokenEx
NtQueryObject
NtReleaseKeyedEvent
NtSetSystemInformation
NtSetUuidSeed
NtWaitForKeyedEvent
NtWaitForWorkViaWorkerFactory
ObCheckRefTraceProcess
ObCloseHandleTableEntry
ObDereferenceSecurityDescriptor
ObEnableEtwReferenceTrace
ObLogSecurityDescriptor
ObOpenObjectByNameEx
ObOpenObjectByPointer
ObQueryNameStringMode
ObQueryRefTraceInformation
ObpCreateHandle
ObpDeregisterObject
ObpFreeWorkItemBlock
ObpPushRefDerefInfo
ObpReferenceSecurityDescriptor
ObpRegisterObject
ObpStartRuntimeStackTrace
ObpStopRuntimeStackTrace
PdcTaskClientRequest
PerfDiagpProxyWorker
PfCheckDeprioritizeFile
PfCheckDeprioritizeImage
PfGenerateTrace
PfQuerySuperfetchInformation
PfSnGetPrefetchInstructions
PfSnIsHostingApplication
PfSnQueryPrefetcherInformation
PfTAccessTracingCleanup
PfTAccessTracingStart
PfTSetTracingPriority
PfpParametersPropagate
PfpParametersWatcher
PfpRpCHashAddEntries
PfpRpCHashDeleteEntries
PfpRpCHashEmpty
PfpRpCHashGrow
PfpRpFileKeyUpdate
PfpRpShutdown
PfpScenCtxPrefetchAbortSet
PfpScenCtxPrefetchStateSet
PfpScenCtxPrefetchWait
PfpScenCtxQueryScenarioInformation
PfpScenCtxScenarioSet
PfpScenCtxServiceThreadSet
PoFxAbandonDevice
PoFxPrepareDevice
PoFxStartDevicePowerManagement
PoFxSystemLatencyNotify
PopBlackBoxUpdate
PopBootStatCheckIntegrity
PopBootStatGet
PopBootStatSet
PopBootStatUnlock
PopDiagTraceFxRundown
PopDirectedDripsDiagBroadcastTreeBegin
PopDirectedDripsDiagBroadcastTreeEnd
PopDirectedDripsDiagNotifySessionStart
PopDirectedDripsDiagNotifySessionStop
PopDirectedDripsDiagTraceBroadcastFailureDevice
PopDirectedDripsDiagTraceBroadcastVisit
PopDirectedDripsDiagTraceMarkDevice
PopDirectedDripsDiagTraceProblemDevice
PopDirectedDripsHandleResiliencyNotification
PopDirectedDripsIdleResiliencyCallback
PopDirectedDripsNotify
PopFxAcpiPrepareDevice
PopFxActivateDevicesForSx
PopFxFindAcpiDeviceByUniqueId
PopFxFindAndReferenceAcpiDevice
PopFxIdleDevicesFromSx
PopFxLowPowerEpochCallback
PopFxNotifySxTransitionState
PopFxPauseDeviceAccounting
PopFxRegisterDeviceWithPep
PopFxResidentTimeoutRoutine
PopFxResumeDeviceAccounting
PopFxSetDeviceAccountingCsPlatformState
PopFxStartDeviceAccounting
PopFxStopDeviceAccounting
PopFxUpdateVetoMaskWork
PopPdcCsDeviceNotification
PopPepDeviceStarted
PopPepIdleTimeoutRoutine
PopPepIterateDeviceList
PopPepPlatformStateRegistered
PopPepRemoveDevice
PopPepResetDeviceAccountingLevel
PopPepWork
PopPowerButtonBugcheckConfigure
PopQueryPowerButtonBugcheckEnabled
PsCallEnclave
PsCaptureExceptionPort
PsCreateVsmEnclave
PsDeleteVsmEnclave
PsDisableImpersonation
PsFreezeProcess
PsGetNextProcessThread
PsGetProcessDeepFreezeStats
PsImpersonateClient
PsInitializeVsmEnclave
PsIsVsmEnclaveTerminated
PsMakeSiloContextPermanent
PsQueryProcessEnergyValues
PsQueryRuntimeProcess
PsQueryStatisticsProcess
PsQueryTotalCycleTimeProcess
PsReferenceEffectiveToken
PsReferenceImpersonationTokenEx
PsReferencePartitionSystemProcess
PsReferencePrimaryToken
PsRestoreImpersonation
PsSetProcessFaultInformation
PsSetProcessTelemetryAppState
PsSetProcessWin32Process
PsStartSiloMonitor
PsSwapImpersonationToken
PsSwapProcessWorkingSet
PsTerminateMinimalProcess
PsTerminateVsmEnclave
PsThawProcess
PsUnregisterSiloMonitor
PspAllocateAndQueryProcessNotificationChannel
PspAllocateThread
PspApplyWorkingSetLimitsToProcess
PspAssignProcessToJob
PspChangeJobMemoryUsageByProcess
PspChargeProcessWakeCounter
PspEnableAltSystemCallHandling
PspExitThread
PspGetNextJob
PspGetPreviousProcessThread
PspInsertThread
PspMarkServerSiloAsTerminating
PspNotifyProcessBackgroundTransition
PspNotifyServerSiloCreation
PspNotifyServerSiloTermination
PspProcessClose
PspProcessDynamicEHContinuationTargets
PspProcessDynamicEnforcedAddressRanges
PspReferenceSystemDll
PspRemoveEnclaveThreadWait
PspRundownSingleProcess
PspSelectVsmEnclaveByNumber
PspSetJobIoRateControl
PspSetProcessAffinityUpdateMode
PspSetProcessDefaultHardErrorMode
PspSetProcessForegroundBackgroundRequest
PspSetProcessTimerDelayForWin32
PspStorageEmptyArray
PspStorageFreeSlot
PspStorageGetObject
PspStorageInsertObject
PspStorageRemoveObject
PspStorageReplaceObject
PspTeardownPartition
PspTerminateProcess
PspThreadDelete
PspUnlockJobAssignment
PspUnlockJobListExclusive
PspUnlockJobListShared
PspUnlockJobMemoryLimitsExclusive
PspUnlockJobMemoryLimitsShared
PspUnlockJobsAndProcessExclusive
PspUnlockProcessListShared
PspUnlockProcessSecurityShared
PspUnlockProcessShared
PspUnlockProcessSharedUnsafe
PspUnlockQuotaListShared
PspUnlockThreadSecurityShared
PspUpdateSingleProcessAffinity
PspWow64ReadOrWriteThreadCpuArea
RtlDeleteAtomFromAtomTable
RtlDestroyAtomTable
RtlEmptyAtomTable
RtlFindDynamicEnforcedAddressInRanges
RtlLookupAtomInAtomTable
RtlPinAtomInAtomTable
RtlQueryAtomInAtomTable
RtlQueryAtomsInAtomTable
RtlpCSparseBitmapUnlock
RtlpFindDynamicEHContinuationTarget
RtlpHpLargeAllocSetExtraPresent
RtlpHpLargeAllocSize
RtlpHpLfhContextCompact
RtlpHpLfhOwnerCompact
RtlpHpLfhSlotAllocate
RtlpHpLfhSubsegmentCreate
RtlpHpLfhSubsegmentDecommitPages
RtlpLookupUserFunctionTable
RtlpReleaseBootStatusLock
RtlpUnlockAtomTable
SLGetSubscriptionPfn
SLQueryLicenseValueInternal
SLUpdateLicenseDataInternal
SMKM_STORE::SmStDirectReadIssue
SMKM_STORE::SmStInSwapStore
SMKM_STORE::SmStMapVirtualRegion
SMKM_STORE::SmStOutSwapStore
SMKM_STORE::SmStPrioritizeRegionsStore
SMKM_STORE::SmStTrimWsStore
SMKM_STORE::SmStTrimWsStoreBatch
SMKM_STORE::SmStUnmapVirtualRegion
SMKM_STORE_MGR::SmFeAddInitiate
SMKM_STORE_MGR::SmFeReadInitiate
ST_STORE::StDmHandleDecompressionFailure
ST_STORE::StDmSinglePageCopy
SeCaptureSubjectContext
SeCaptureSubjectContextEx
SeComputeAutoInheritByObjectTypeEx
SeCreateClientSecurity
SeCreateClientSecurityEx
SeDefaultObjectMethod
SendCaptureStateNotificationsWorker
SepAddLuidToIndexEntry
SepDeReferenceSharedSidEntries
SepDereferenceCachedHandlesEntry
SepDereferenceLowBoxNumberEntry
SepInsertOrReferenceSharedSidEntries
SepIsParentOfChildAppContainer
SepIsValidProcUniqueLuid
SepRmCapUpdateWrkr
SepRmReferenceFindCap
SepSetTokenCachedHandles
SepSetTokenClaims
SepSetTokenLowboxNumber
SepSetTokenUserAndGroups
SmGetRegistrationInfo
SmKmCleanup
SmKmKeyGenGenerate
SmKmKeyGenKeyDelete
SmKmKeyGenNewKey
SmKmStoreAdd
SmKmStoreDelete
SmKmVirtualLockCtxLockMemory
SmProcessCompressionInfoRequest
SmcCacheAdd
SmcCacheCreatePrepare
SmcCacheRemove
SmcGetCacheStats
SmcStoreDelete
SmcStoreResize
SmcStoreSlotAbort
SmcStoreSlotCommit
SmcStoreSlotReserve
SmpKeyedStoreEntryGet
SmpKeyedStoreReference
SmpSystemStoreCreate
TlgAggregateInternalProviderCallback
TlgRegisterAggregateProviderEx
UNLOCK_ADDRESS_SPACE_SHARED
UNLOCK_ADDRESS_SPACE_SHARED_UNORDERED
VmpPauseResumeNotify
VrpDecrementSiloCount
VrpHandleIoctlLoadDifferencingHiveForHost
VrpHandleIoctlUnloadDifferencingHiveForHost
VrpIncrementSiloCount
VrpPostEnumerateKey
VrpPostUnloadKey
VrpPreLoadKey
VrpPreUnloadKey
VrpRelinquishDiffHiveEntryTransitionOwner
VrpTranslatePath
VrpUnloadDifferencingHive
VrpUnlockDiffHiveEntry
VrpUnlockJobContextExclusive
VrpWaitForDiffHiveEntryTransitionOwnerToLeave
WbAddHeapExecutedBlockToCache
WbAddHeapExecutedBlockToLRU
WbAddWarbirdEncryptionSegment
WbAllocateSlots
WbAllocateUserMemory
WbDecryptEncryptionSegment
WbFreeMemoryBlockRegion
WbGetHeapExecutedBlock
WbGetInitializedEncryptionSegment
WbGetWarbirdEncryptionSegment
WbGetWarbirdProcess
WbGetWarbirdThread
WbHeapExecutionUnloadModule
WbInPlaceEncryptionUnloadModule
WbMoveHeapExecutedBlockToBackOfLRU
WbReEncryptEncryptionSegment
WbReleaseLeastRecentlyUsedHeapExecutedBlocks
WbRemoveWarbirdProcess
WheaConfigureErrorSource
WheaRegisterInUsePageOfflineNotification
WheaUnconfigureErrorSource
WheaUnregisterInUsePageOfflineNotification
WheapCallInUsePageNotificationCallbacks
WheapPfaReset
WheapPredictiveFailureAnalysis
sub_1403B8E0C
sub_14065DA88
sub_14094D610
sub_14094DC8C