VC驿站

 找回密码
 加入驿站

QQ登录

只需一步,快速开始

搜索
查看: 1047|回复: 8

[交流] 内核函数

[复制链接]
75_avatar_middle
最佳答案
23 
online_supermod 发表于 2022-3-27 20:50:14 | 显示全部楼层 |阅读模式
fffff803`263f5370 nt!ZwCreateTimer2 (ZwCreateTimer2)
fffff803`263f6970 nt!ZwRenameTransactionManager (ZwRenameTransactionManager)
fffff803`263f5190 nt!ZwCreateNamedPipeFile (ZwCreateNamedPipeFile)
fffff803`263f4fd0 nt!ZwCreateDirectoryObject (ZwCreateDirectoryObject)
fffff803`263f5e10 nt!ZwNotifyChangeDirectoryFileEx (ZwNotifyChangeDirectoryFileEx)
fffff803`263f5510 nt!ZwDeleteBootEntry (ZwDeleteBootEntry)
fffff803`263f4c70 nt!ZwAlpcRevokeSecurityContext (ZwAlpcRevokeSecurityContext)
fffff803`263f4250 nt!ZwWriteVirtualMemory (ZwWriteVirtualMemory)
fffff803`263f48f0 nt!ZwAlertThread (ZwAlertThread)
fffff803`263f6730 nt!ZwQuerySystemInformationEx (ZwQuerySystemInformationEx)
fffff803`263f44f0 nt!ZwIsProcessInJob (ZwIsProcessInJob)
fffff803`263f4b30 nt!ZwAlpcDeleteResourceReserve (ZwAlpcDeleteResourceReserve)
fffff803`263f5b90 nt!ZwListenPort (ZwListenPort)
fffff803`263f3b50 nt!ZwAcceptConnectPort (ZwAcceptConnectPort)
fffff803`263f67b0 nt!ZwQueueApcThreadEx (ZwQueueApcThreadEx)
fffff803`263f4170 nt!ZwOpenFile (ZwOpenFile)
fffff803`263f54b0 nt!ZwDebugActiveProcess (ZwDebugActiveProcess)
fffff803`263f5a50 nt!ZwGetNotificationResourceManager (ZwGetNotificationResourceManager)
fffff803`263f5650 nt!ZwDisableLastKnownGood (ZwDisableLastKnownGood)
fffff803`263f72f0 nt!ZwTerminateJobObject (ZwTerminateJobObject)
fffff803`263f66f0 nt!ZwQuerySystemEnvironmentValue (ZwQuerySystemEnvironmentValue)
fffff803`263f5990 nt!ZwGetCurrentProcessorNumberEx (ZwGetCurrentProcessorNumberEx)
fffff803`263f5ff0 nt!ZwOpenPrivateNamespace (ZwOpenPrivateNamespace)
fffff803`263f5810 nt!ZwFlushInstructionCache (ZwFlushInstructionCache)
fffff803`263f3bf0 nt!ZwDeviceIoControlFile (ZwDeviceIoControlFile)
fffff803`263f5d50 nt!ZwMapCMFModule (ZwMapCMFModule)
fffff803`263f5930 nt!ZwGetCompleteWnfStateSubscription (ZwGetCompleteWnfStateSubscription)
fffff803`263f57f0 nt!ZwFlushInstallUILanguage (ZwFlushInstallUILanguage)
fffff803`263f7250 nt!ZwSubscribeWnfStateChange (ZwSubscribeWnfStateChange)
fffff803`263f5cd0 nt!ZwMakePermanentObject (ZwMakePermanentObject)
fffff803`263f70b0 nt!ZwSetThreadExecutionState (ZwSetThreadExecutionState)
fffff803`263f5910 nt!ZwGetCachedSigningLevel (ZwGetCachedSigningLevel)
fffff803`263f4c10 nt!ZwAlpcOpenSenderThread (ZwAlpcOpenSenderThread)
fffff803`263f5470 nt!ZwCreateWnfStateName (ZwCreateWnfStateName)
fffff803`263f5570 nt!ZwDeleteKey (ZwDeleteKey)
fffff803`263f6250 nt!ZwPropagationComplete (ZwPropagationComplete)
fffff803`263f6ad0 nt!ZwRollbackEnlistment (ZwRollbackEnlistment)
fffff803`263f58d0 nt!ZwFreezeRegistry (ZwFreezeRegistry)
fffff803`263f55b0 nt!ZwDeletePrivateNamespace (ZwDeletePrivateNamespace)
fffff803`263f6b50 nt!ZwSaveKey (ZwSaveKey)
fffff803`263f46f0 nt!ZwPowerInformation (ZwPowerInformation)
fffff803`263f41b0 nt!ZwQueryDirectoryFile (ZwQueryDirectoryFile)
fffff803`263f6410 nt!ZwQueryInformationByName (ZwQueryInformationByName)
fffff803`263f53b0 nt!ZwCreateTokenEx (ZwCreateTokenEx)
fffff803`263f5550 nt!ZwDeleteFile (ZwDeleteFile)
fffff803`263f6c70 nt!ZwSetContextThread (ZwSetContextThread)
fffff803`263f4a10 nt!ZwAlpcCancelMessage (ZwAlpcCancelMessage)
fffff803`263f4450 nt!ZwCreateSection (ZwCreateSection)
fffff803`263f4a70 nt!ZwAlpcCreatePort (ZwAlpcCreatePort)
fffff803`263f73f0 nt!ZwUnloadKey (ZwUnloadKey)
fffff803`263f53d0 nt!ZwCreateTransaction (ZwCreateTransaction)
fffff803`263f4e10 nt!ZwCommitRegistryTransaction (ZwCommitRegistryTransaction)
fffff803`263f6e50 nt!ZwSetInformationSymbolicLink (ZwSetInformationSymbolicLink)
fffff803`263f6f10 nt!ZwSetIntervalProfile (ZwSetIntervalProfile)
fffff803`263f6530 nt!ZwQueryIntervalProfile (ZwQueryIntervalProfile)
fffff803`263f72d0 nt!ZwTerminateEnclave (ZwTerminateEnclave)
fffff803`263f6990 nt!ZwReplaceKey (ZwReplaceKey)
fffff803`263f4590 nt!ZwReadRequestData (ZwReadRequestData)
fffff803`263f4fb0 nt!ZwCreateDebugObject (ZwCreateDebugObject)
fffff803`263f42d0 nt!ZwClearEvent (ZwClearEvent)
fffff803`263f5350 nt!ZwCreateTimer (ZwCreateTimer)
fffff803`263f4370 nt!ZwContinue (ZwContinue)
fffff803`263f5290 nt!ZwCreateRegistryTransaction (ZwCreateRegistryTransaction)
fffff803`263f4e30 nt!ZwCommitTransaction (ZwCommitTransaction)
fffff803`263f7530 nt!ZwWaitForDebugEvent (ZwWaitForDebugEvent)
fffff803`263f5110 nt!ZwCreateKeyedEvent (ZwCreateKeyedEvent)
fffff803`263f4510 nt!ZwProtectVirtualMemory (ZwProtectVirtualMemory)
fffff803`263f6330 nt!ZwQueryDebugFilterState (ZwQueryDebugFilterState)
fffff803`263f45b0 nt!ZwCreateFile (ZwCreateFile)
fffff803`263f60f0 nt!ZwOpenTimer (ZwOpenTimer)
fffff803`263f5850 nt!ZwFlushProcessWriteBuffers (ZwFlushProcessWriteBuffers)
fffff803`263f3f70 nt!ZwQueryVirtualMemory (ZwQueryVirtualMemory)
fffff803`263f4810 nt!ZwAcquireProcessActivityReference (ZwAcquireProcessActivityReference)
fffff803`263f3e10 nt!ZwAllocateVirtualMemory (ZwAllocateVirtualMemory)
fffff803`263f5210 nt!ZwCreatePrivateNamespace (ZwCreatePrivateNamespace)
fffff803`263f4d30 nt!ZwCallEnclave (ZwCallEnclave)
fffff803`263f5a90 nt!ZwImpersonateAnonymousToken (ZwImpersonateAnonymousToken)
fffff803`263f5310 nt!ZwCreateSymbolicLinkObject (ZwCreateSymbolicLinkObject)
fffff803`263f6c90 nt!ZwSetDebugFilterState (ZwSetDebugFilterState)
fffff803`263f61f0 nt!ZwPrivilegeCheck (ZwPrivilegeCheck)
fffff803`263f64b0 nt!ZwQueryInformationTransaction (ZwQueryInformationTransaction)
fffff803`263f3cd0 nt!ZwSetEvent (ZwSetEvent)
fffff803`263f4f30 nt!ZwContinueEx (ZwContinueEx)
fffff803`263f3eb0 nt!ZwCreateKey (ZwCreateKey)
fffff803`263f5610 nt!ZwDeleteWnfStateName (ZwDeleteWnfStateName)
fffff803`263f7090 nt!ZwSetSystemTime (ZwSetSystemTime)
fffff803`263f5950 nt!ZwGetContextThread (ZwGetContextThread)
fffff803`263f5ad0 nt!ZwInitializeEnclave (ZwInitializeEnclave)
fffff803`263f44b0 nt!ZwCreateProcessEx (ZwCreateProcessEx)
fffff803`263f55d0 nt!ZwDeleteValueKey (ZwDeleteValueKey)
fffff803`263f5770 nt!ZwFilterBootOption (ZwFilterBootOption)
fffff803`263f5070 nt!ZwCreateIRTimer (ZwCreateIRTimer)
fffff803`263f4db0 nt!ZwCancelWaitCompletionPacket (ZwCancelWaitCompletionPacket)
fffff803`263f66b0 nt!ZwQuerySemaphore (ZwQuerySemaphore)
fffff803`263f57d0 nt!ZwFlushBuffersFileEx (ZwFlushBuffersFileEx)
fffff803`263f63b0 nt!ZwQueryEaFile (ZwQueryEaFile)
fffff803`263f4470 nt!ZwFlushBuffersFile (ZwFlushBuffersFile)
fffff803`263f6c30 nt!ZwSetCachedSigningLevel (ZwSetCachedSigningLevel)
fffff803`263f6590 nt!ZwQueryMultipleValueKey (ZwQueryMultipleValueKey)
fffff803`263f5c90 nt!ZwLockRegistryKey (ZwLockRegistryKey)
fffff803`263f67d0 nt!ZwRaiseException (ZwRaiseException)
fffff803`263f73b0 nt!ZwUmsThreadYield (ZwUmsThreadYield)
fffff803`263f4ab0 nt!ZwAlpcCreateResourceReserve (ZwAlpcCreateResourceReserve)
fffff803`263f4790 nt!ZwAccessCheckByTypeResultList (ZwAccessCheckByTypeResultList)
fffff803`263f6f50 nt!ZwSetIoCompletionEx (ZwSetIoCompletionEx)
fffff803`263f7050 nt!ZwSetSystemInformation (ZwSetSystemInformation)
fffff803`263f7570 nt!ZwWaitForWorkViaWorkerFactory (ZwWaitForWorkViaWorkerFactory)
fffff803`263f7270 nt!ZwSuspendProcess (ZwSuspendProcess)
fffff803`263f4ef0 nt!ZwCompressKey (ZwCompressKey)
fffff803`263f5330 nt!ZwCreateThreadEx (ZwCreateThreadEx)
fffff803`263f4b10 nt!ZwAlpcDeletePortSection (ZwAlpcDeletePortSection)
fffff803`263f3fd0 nt!ZwOpenProcess (ZwOpenProcess)
fffff803`263f5450 nt!ZwCreateWaitablePort (ZwCreateWaitablePort)
fffff803`263f6b70 nt!ZwSaveKeyEx (ZwSaveKeyEx)
fffff803`263f52b0 nt!ZwCreateResourceManager (ZwCreateResourceManager)
fffff803`263f6270 nt!ZwPropagationFailed (ZwPropagationFailed)
fffff803`263f64d0 nt!ZwQueryInformationTransactionManager (ZwQueryInformationTransactionManager)
fffff803`263f7170 nt!ZwSetWnfProcessNotificationEvent (ZwSetWnfProcessNotificationEvent)
fffff803`263f7130 nt!ZwSetUuidSeed (ZwSetUuidSeed)
fffff803`263f5b30 nt!ZwInitiatePowerAction (ZwInitiatePowerAction)
fffff803`263f6550 nt!ZwQueryIoCompletion (ZwQueryIoCompletion)
fffff803`263f4310 nt!ZwOpenEvent (ZwOpenEvent)
fffff803`263f7490 nt!ZwUnmapViewOfSectionEx (ZwUnmapViewOfSectionEx)
fffff803`263f6430 nt!ZwQueryInformationEnlistment (ZwQueryInformationEnlistment)
fffff803`263f3cf0 nt!ZwClose (ZwClose)
fffff803`263f6490 nt!ZwQueryInformationResourceManager (ZwQueryInformationResourceManager)
fffff803`263f5f90 nt!ZwOpenMutant (ZwOpenMutant)
fffff803`263f4ed0 nt!ZwCompleteConnectPort (ZwCompleteConnectPort)
fffff803`263f51b0 nt!ZwCreatePagingFile (ZwCreatePagingFile)
fffff803`263f6210 nt!ZwPrivilegeObjectAuditAlarm (ZwPrivilegeObjectAuditAlarm)
fffff803`263f6630 nt!ZwQueryQuotaInformationFile (ZwQueryQuotaInformationFile)
fffff803`263f6890 nt!ZwRegisterProtocolAddressInformation (ZwRegisterProtocolAddressInformation)
fffff803`263f5390 nt!ZwCreateToken (ZwCreateToken)
fffff803`263f7290 nt!ZwSuspendThread (ZwSuspendThread)
fffff803`263f6ef0 nt!ZwSetInformationWorkerFactory (ZwSetInformationWorkerFactory)
fffff803`263f44d0 nt!ZwCreateThread (ZwCreateThread)
fffff803`263f4690 nt!ZwSetInformationObject (ZwSetInformationObject)
fffff803`263f54f0 nt!ZwDeleteAtom (ZwDeleteAtom)
fffff803`263f6690 nt!ZwQuerySecurityPolicy (ZwQuerySecurityPolicy)
fffff803`263f6950 nt!ZwRenameKey (ZwRenameKey)
fffff803`263f3e90 nt!ZwSetInformationProcess (ZwSetInformationProcess)
fffff803`263f56b0 nt!ZwEnableLastKnownGood (ZwEnableLastKnownGood)
fffff803`263f6610 nt!ZwQueryPortInformationProcess (ZwQueryPortInformationProcess)
fffff803`263f69b0 nt!ZwReplacePartitionUnit (ZwReplacePartitionUnit)
fffff803`263f7550 nt!ZwWaitForKeyedEvent (ZwWaitForKeyedEvent)
fffff803`263f3db0 nt!ZwQueryDefaultLocale (ZwQueryDefaultLocale)
fffff803`263f3b90 nt!ZwWaitForSingleObject (ZwWaitForSingleObject)
fffff803`263f6790 nt!ZwQueryWnfStateNameInformation (ZwQueryWnfStateNameInformation)
fffff803`263f5690 nt!ZwDrawText (ZwDrawText)
fffff803`263f6450 nt!ZwQueryInformationJobObject (ZwQueryInformationJobObject)
fffff803`263f4870 nt!ZwAddDriverEntry (ZwAddDriverEntry)
fffff803`263f6bb0 nt!ZwSecureConnectPort (ZwSecureConnectPort)
fffff803`263f5030 nt!ZwCreateEnlistment (ZwCreateEnlistment)
fffff803`263f5b70 nt!ZwIsUILanguageComitted (ZwIsUILanguageComitted)
fffff803`263f6ff0 nt!ZwSetSecurityObject (ZwSetSecurityObject)
fffff803`263f6290 nt!ZwPssCaptureVaSpaceBulk (ZwPssCaptureVaSpaceBulk)
fffff803`263f4e50 nt!ZwCompactKeys (ZwCompactKeys)
fffff803`263f3df0 nt!ZwQueryValueKey (ZwQueryValueKey)
fffff803`263f5410 nt!ZwCreateUserProcess (ZwCreateUserProcess)
fffff803`263f55f0 nt!ZwDeleteWnfStateData (ZwDeleteWnfStateData)
fffff803`263f5890 nt!ZwFlushWriteBuffer (ZwFlushWriteBuffer)
fffff803`263f6b30 nt!ZwRollforwardTransactionManager (ZwRollforwardTransactionManager)
fffff803`263f6710 nt!ZwQuerySystemEnvironmentValueEx (ZwQuerySystemEnvironmentValueEx)
fffff803`263f4570 nt!ZwTerminateThread (ZwTerminateThread)
fffff803`263f53f0 nt!ZwCreateTransactionManager (ZwCreateTransactionManager)
fffff803`263f56f0 nt!ZwEnumerateDriverEntries (ZwEnumerateDriverEntries)
fffff803`263f5250 nt!ZwCreateProfile (ZwCreateProfile)
fffff803`263f7230 nt!ZwStopProfile (ZwStopProfile)
fffff803`263f43d0 nt!ZwYieldExecution (ZwYieldExecution)
fffff803`263f6170 nt!ZwPrePrepareComplete (ZwPrePrepareComplete)
fffff803`263f4df0 nt!ZwCommitEnlistment (ZwCommitEnlistment)
fffff803`263f5050 nt!ZwCreateEventPair (ZwCreateEventPair)
fffff803`263f5fb0 nt!ZwOpenObjectAuditAlarm (ZwOpenObjectAuditAlarm)
fffff803`263f61b0 nt!ZwPrepareComplete (ZwPrepareComplete)
fffff803`263f6cf0 nt!ZwSetDefaultUILanguage (ZwSetDefaultUILanguage)
fffff803`263f3f50 nt!ZwRequestWaitReplyPort (ZwRequestWaitReplyPort)
fffff803`263f7030 nt!ZwSetSystemEnvironmentValueEx (ZwSetSystemEnvironmentValueEx)
fffff803`263f64f0 nt!ZwQueryInformationWorkerFactory (ZwQueryInformationWorkerFactory)
fffff803`263f46b0 nt!ZwCancelIoFile (ZwCancelIoFile)
fffff803`263f3c30 nt!ZwRemoveIoCompletion (ZwRemoveIoCompletion)
fffff803`263f4230 nt!ZwFsControlFile (ZwFsControlFile)
fffff803`263f4eb0 nt!ZwCompareTokens (ZwCompareTokens)
fffff803`263f5d10 nt!ZwManageHotPatch (ZwManageHotPatch)
fffff803`263f51f0 nt!ZwCreatePort (ZwCreatePort)
fffff803`263f6930 nt!ZwRemoveProcessDebug (ZwRemoveProcessDebug)
fffff803`263f6af0 nt!ZwRollbackRegistryTransaction (ZwRollbackRegistryTransaction)
fffff803`263f4d50 nt!ZwCancelIoFileEx (ZwCancelIoFileEx)
fffff803`263f4210 nt!ZwQueryTimer (ZwQueryTimer)
fffff803`263f6ab0 nt!ZwRollbackComplete (ZwRollbackComplete)
fffff803`263f6770 nt!ZwQueryWnfStateData (ZwQueryWnfStateData)
fffff803`263f6830 nt!ZwRecoverEnlistment (ZwRecoverEnlistment)
fffff803`263f3fb0 nt!ZwQueryInformationThread (ZwQueryInformationThread)
fffff803`263f7150 nt!ZwSetVolumeInformationFile (ZwSetVolumeInformationFile)
fffff803`263f4970 nt!ZwAllocateUserPhysicalPages (ZwAllocateUserPhysicalPages)
fffff803`263f6f30 nt!ZwSetIoCompletion (ZwSetIoCompletion)
fffff803`263f6650 nt!ZwQuerySecurityAttributesToken (ZwQuerySecurityAttributesToken)
fffff803`263f4550 nt!ZwResumeThread (ZwResumeThread)
fffff803`263f5dd0 nt!ZwModifyDriverEntry (ZwModifyDriverEntry)
fffff803`263f74d0 nt!ZwUpdateWnfStateData (ZwUpdateWnfStateData)
fffff803`263f48d0 nt!ZwAlertResumeThread (ZwAlertResumeThread)
fffff803`263f4410 nt!ZwCreateEvent (ZwCreateEvent)
fffff803`263f4190 nt!ZwDelayExecution (ZwDelayExecution)
fffff803`263f5630 nt!ZwDirectGraphicsCall (ZwDirectGraphicsCall)
fffff803`263f5f50 nt!ZwOpenKeyTransactedEx (ZwOpenKeyTransactedEx)
fffff803`263f45f0 nt!ZwWriteRequestData (ZwWriteRequestData)
fffff803`263f5a70 nt!ZwGetWriteWatch (ZwGetWriteWatch)
fffff803`263f6df0 nt!ZwSetInformationJobObject (ZwSetInformationJobObject)
fffff803`263f6b90 nt!ZwSaveMergedKeys (ZwSaveMergedKeys)
fffff803`263f49f0 nt!ZwAlpcAcceptConnectPort (ZwAlpcAcceptConnectPort)
fffff803`263f5ab0 nt!ZwImpersonateThread (ZwImpersonateThread)
fffff803`263f3dd0 nt!ZwQueryKey (ZwQueryKey)
fffff803`263f4930 nt!ZwAllocateLocallyUniqueId (ZwAllocateLocallyUniqueId)
fffff803`263f4710 nt!ZwSetValueKey (ZwSetValueKey)
fffff803`263f6570 nt!ZwQueryLicenseValue (ZwQueryLicenseValue)
fffff803`263f6b10 nt!ZwRollbackTransaction (ZwRollbackTransaction)
fffff803`263f5a30 nt!ZwGetNlsSectionPtr (ZwGetNlsSectionPtr)
fffff803`263f3c50 nt!ZwReleaseSemaphore (ZwReleaseSemaphore)
fffff803`263f3b10 nt!ZwAccessCheck (ZwAccessCheck)
fffff803`263f6bf0 nt!ZwSetBootEntryOrder (ZwSetBootEntryOrder)
fffff803`263f5590 nt!ZwDeleteObjectAuditAlarm (ZwDeleteObjectAuditAlarm)
fffff803`263f3d90 nt!ZwFindAtom (ZwFindAtom)
fffff803`263f5150 nt!ZwCreateMailslotFile (ZwCreateMailslotFile)
fffff803`263f5bb0 nt!ZwLoadDriver (ZwLoadDriver)
fffff803`263f7590 nt!ZwWaitHighEventPair (ZwWaitHighEventPair)
fffff803`263f71b0 nt!ZwShutdownWorkerFactory (ZwShutdownWorkerFactory)
fffff803`263f5eb0 nt!ZwOpenEventPair (ZwOpenEventPair)
fffff803`263f4a90 nt!ZwAlpcCreatePortSection (ZwAlpcCreatePortSection)
fffff803`263f6fd0 nt!ZwSetQuotaInformationFile (ZwSetQuotaInformationFile)
fffff803`263f50d0 nt!ZwCreateJobSet (ZwCreateJobSet)
fffff803`263f7330 nt!ZwThawRegistry (ZwThawRegistry)
fffff803`263f5b50 nt!ZwIsSystemResumeAutomatic (ZwIsSystemResumeAutomatic)
fffff803`263f47d0 nt!ZwAccessCheckByTypeResultListAndAuditAlarmByHandle (ZwAccessCheckByTypeResultListAndAuditAlarmByHandle)
fffff803`263f41d0 nt!ZwQuerySystemInformation (ZwQuerySystemInformation)
fffff803`263f6c50 nt!ZwSetCachedSigningLevel2 (ZwSetCachedSigningLevel2)
fffff803`263f6510 nt!ZwQueryInstallUILanguage (ZwQueryInstallUILanguage)
fffff803`263f65f0 nt!ZwQueryOpenSubKeysEx (ZwQueryOpenSubKeysEx)
fffff803`263f4a50 nt!ZwAlpcConnectPortEx (ZwAlpcConnectPortEx)
fffff803`263f56d0 nt!ZwEnumerateBootEntries (ZwEnumerateBootEntries)
fffff803`263f4730 nt!ZwCancelTimer (ZwCancelTimer)
fffff803`263f43b0 nt!ZwQueueApcThread (ZwQueueApcThread)
fffff803`263f5cb0 nt!ZwLockVirtualMemory (ZwLockVirtualMemory)
fffff803`263f4670 nt!ZwWaitForMultipleObjects (ZwWaitForMultipleObjects)
fffff803`263f4130 nt!ZwQueryPerformanceCounter (ZwQueryPerformanceCounter)
fffff803`263f4dd0 nt!ZwCommitComplete (ZwCommitComplete)
fffff803`263f6190 nt!ZwPrePrepareEnlistment (ZwPrePrepareEnlistment)
fffff803`263f5130 nt!ZwCreateLowBoxToken (ZwCreateLowBoxToken)
fffff803`263f5af0 nt!ZwInitializeNlsFiles (ZwInitializeNlsFiles)
fffff803`263f3b30 nt!ZwWorkerFactoryWorkerReady (ZwWorkerFactoryWorkerReady)
fffff803`263f6e90 nt!ZwSetInformationTransaction (ZwSetInformationTransaction)
fffff803`263f66d0 nt!ZwQuerySymbolicLinkObject (ZwQuerySymbolicLinkObject)
fffff803`263f7410 nt!ZwUnloadKey2 (ZwUnloadKey2)
fffff803`263f5c70 nt!ZwLockProductActivationKeys (ZwLockProductActivationKeys)
fffff803`263f4530 nt!ZwQuerySection (ZwQuerySection)
fffff803`263f3d50 nt!ZwOpenKey (ZwOpenKey)
fffff803`263f45d0 nt!ZwQueryEvent (ZwQueryEvent)
fffff803`263f5f70 nt!ZwOpenKeyedEvent (ZwOpenKeyedEvent)
fffff803`263f54d0 nt!ZwDebugContinue (ZwDebugContinue)
fffff803`263f65d0 nt!ZwQueryOpenSubKeys (ZwQueryOpenSubKeys)
fffff803`263f6390 nt!ZwQueryDriverEntryOrder (ZwQueryDriverEntryOrder)
fffff803`263f6db0 nt!ZwSetInformationDebugObject (ZwSetInformationDebugObject)
fffff803`263f5c30 nt!ZwLoadKeyEx (ZwLoadKeyEx)
fffff803`263f5710 nt!ZwEnumerateSystemEnvironmentValuesEx (ZwEnumerateSystemEnvironmentValuesEx)
fffff803`263f4af0 nt!ZwAlpcCreateSecurityContext (ZwAlpcCreateSecurityContext)
fffff803`263f6a50 nt!ZwRestoreKey (ZwRestoreKey)
fffff803`263f4890 nt!ZwAdjustGroupsToken (ZwAdjustGroupsToken)
fffff803`263f63d0 nt!ZwQueryFullAttributesFile (ZwQueryFullAttributesFile)
fffff803`263f40f0 nt!ZwOpenThreadTokenEx (ZwOpenThreadTokenEx)
fffff803`263f6350 nt!ZwQueryDirectoryFileEx (ZwQueryDirectoryFileEx)
fffff803`263f4330 nt!ZwAdjustPrivilegesToken (ZwAdjustPrivilegesToken)
fffff803`263f68b0 nt!ZwRegisterThreadTerminatePort (ZwRegisterThreadTerminatePort)
fffff803`263f69f0 nt!ZwRequestPort (ZwRequestPort)
fffff803`263f5db0 nt!ZwModifyBootEntry (ZwModifyBootEntry)
fffff803`263f5430 nt!ZwCreateWaitCompletionPacket (ZwCreateWaitCompletionPacket)
fffff803`263f3c90 nt!ZwReplyPort (ZwReplyPort)
fffff803`263f59f0 nt!ZwGetNextProcess (ZwGetNextProcess)
fffff803`263f4b90 nt!ZwAlpcDisconnectPort (ZwAlpcDisconnectPort)
fffff803`263f4e70 nt!ZwCompareObjects (ZwCompareObjects)
fffff803`263f4cf0 nt!ZwAssignProcessToJobObject (ZwAssignProcessToJobObject)
fffff803`263f5fd0 nt!ZwOpenPartition (ZwOpenPartition)
fffff803`263f6870 nt!ZwRecoverTransactionManager (ZwRecoverTransactionManager)
fffff803`263f4cb0 nt!ZwAlpcSetInformation (ZwAlpcSetInformation)
fffff803`263f3d30 nt!ZwQueryInformationFile (ZwQueryInformationFile)
fffff803`263f41f0 nt!ZwOpenSection (ZwOpenSection)
fffff803`263f4990 nt!ZwAllocateUserPhysicalPagesEx (ZwAllocateUserPhysicalPagesEx)
fffff803`263f6d10 nt!ZwSetDriverEntryOrder (ZwSetDriverEntryOrder)
fffff803`263f52f0 nt!ZwCreateSemaphore (ZwCreateSemaphore)
fffff803`263f7370 nt!ZwTraceControl (ZwTraceControl)
fffff803`263f7390 nt!ZwTranslateFilePath (ZwTranslateFilePath)
fffff803`263f4bf0 nt!ZwAlpcOpenSenderProcess (ZwAlpcOpenSenderProcess)
fffff803`263f7350 nt!ZwThawTransactions (ZwThawTransactions)
fffff803`263f5e30 nt!ZwNotifyChangeKey (ZwNotifyChangeKey)
fffff803`263f5c50 nt!ZwLockFile (ZwLockFile)
fffff803`263f57b0 nt!ZwFilterTokenEx (ZwFilterTokenEx)
fffff803`263f4c30 nt!ZwAlpcQueryInformation (ZwAlpcQueryInformation)
fffff803`263f3ed0 nt!ZwFreeVirtualMemory (ZwFreeVirtualMemory)
fffff803`263f3bb0 nt!ZwCallbackReturn (ZwCallbackReturn)
fffff803`263f59d0 nt!ZwGetMUIRegistryInfo (ZwGetMUIRegistryInfo)
fffff803`263f4d90 nt!ZwCancelTimer2 (ZwCancelTimer2)
fffff803`263f59b0 nt!ZwGetDevicePowerState (ZwGetDevicePowerState)
fffff803`263f3e50 nt!ZwWaitForMultipleObjects32 (ZwWaitForMultipleObjects32)
fffff803`263f6030 nt!ZwOpenRegistryTransaction (ZwOpenRegistryTransaction)
fffff803`263f4850 nt!ZwAddBootEntry (ZwAddBootEntry)
fffff803`263f60b0 nt!ZwOpenSymbolicLinkObject (ZwOpenSymbolicLinkObject)
fffff803`263f5d30 nt!ZwManagePartition (ZwManagePartition)
fffff803`263f4d10 nt!ZwAssociateWaitCompletionPacket (ZwAssociateWaitCompletionPacket)
fffff803`263f65b0 nt!ZwQueryMutant (ZwQueryMutant)
fffff803`263f62b0 nt!ZwPulseEvent (ZwPulseEvent)
fffff803`263f4f10 nt!ZwConnectPort (ZwConnectPort)
fffff803`263f6a30 nt!ZwResetWriteWatch (ZwResetWriteWatch)
fffff803`263f6ed0 nt!ZwSetInformationVirtualMemory (ZwSetInformationVirtualMemory)
fffff803`263f6fb0 nt!ZwSetLowWaitHighEventPair (ZwSetLowWaitHighEventPair)
fffff803`263f72b0 nt!ZwSystemDebugControl (ZwSystemDebugControl)
fffff803`263f4c50 nt!ZwAlpcQueryInformationMessage (ZwAlpcQueryInformationMessage)
fffff803`263f48b0 nt!ZwAdjustTokenClaimsAndDeviceGroups (ZwAdjustTokenClaimsAndDeviceGroups)
fffff803`263f40b0 nt!ZwSetEventBoostPriority (ZwSetEventBoostPriority)
fffff803`263f6070 nt!ZwOpenSemaphore (ZwOpenSemaphore)
fffff803`263f5870 nt!ZwFlushVirtualMemory (ZwFlushVirtualMemory)
fffff803`263f3e70 nt!ZwWriteFileGather (ZwWriteFileGather)
fffff803`263f42b0 nt!ZwQueryAttributesFile (ZwQueryAttributesFile)
fffff803`263f51d0 nt!ZwCreatePartition (ZwCreatePartition)
fffff803`263f4770 nt!ZwAccessCheckByType (ZwAccessCheckByType)
fffff803`263f50f0 nt!ZwCreateKeyTransacted (ZwCreateKeyTransacted)
fffff803`263f5f30 nt!ZwOpenKeyTransacted (ZwOpenKeyTransacted)
fffff803`263f4290 nt!ZwDuplicateObject (ZwDuplicateObject)
fffff803`263f3ef0 nt!ZwImpersonateClientOfPort (ZwImpersonateClientOfPort)
fffff803`263f4650 nt!ZwQuerySystemTime (ZwQuerySystemTime)
fffff803`263f3c70 nt!ZwReplyWaitReceivePort (ZwReplyWaitReceivePort)
fffff803`263f4b70 nt!ZwAlpcDeleteSecurityContext (ZwAlpcDeleteSecurityContext)
fffff803`263f6a90 nt!ZwRevertContainerImpersonation (ZwRevertContainerImpersonation)
fffff803`263f4090 nt!ZwTerminateProcess (ZwTerminateProcess)
fffff803`263f6d30 nt!ZwSetEaFile (ZwSetEaFile)
fffff803`263f71f0 nt!ZwSinglePhaseReject (ZwSinglePhaseReject)
fffff803`263f3ff0 nt!ZwSetInformationFile (ZwSetInformationFile)
fffff803`263f61d0 nt!ZwPrepareEnlistment (ZwPrepareEnlistment)
fffff803`263f5d90 nt!ZwMapViewOfSectionEx (ZwMapViewOfSectionEx)
fffff803`263f4030 nt!ZwAccessCheckAndAuditAlarm (ZwAccessCheckAndAuditAlarm)
fffff803`263f6110 nt!ZwOpenTransaction (ZwOpenTransaction)
fffff803`263f4f50 nt!ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter (ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter)
fffff803`263f6150 nt!ZwPlugPlayControl (ZwPlugPlayControl)
fffff803`263f5010 nt!ZwCreateEnclave (ZwCreateEnclave)
fffff803`263f4010 nt!ZwMapViewOfSection (ZwMapViewOfSection)
fffff803`263f7010 nt!ZwSetSystemEnvironmentValue (ZwSetSystemEnvironmentValue)
fffff803`263f4610 nt!ZwOpenDirectoryObject (ZwOpenDirectoryObject)
fffff803`263f5270 nt!ZwCreateProfileEx (ZwCreateProfileEx)
fffff803`263f73d0 nt!ZwUnloadDriver (ZwUnloadDriver)
fffff803`263f43f0 nt!ZwAddAtom (ZwAddAtom)
fffff803`263f3d10 nt!ZwQueryObject (ZwQueryObject)
fffff803`263f4070 nt!ZwReplyWaitReceivePortEx (ZwReplyWaitReceivePortEx)
fffff803`263f6e10 nt!ZwSetInformationKey (ZwSetInformationKey)
fffff803`263f63f0 nt!ZwQueryInformationAtom (ZwQueryInformationAtom)
fffff803`263f4bb0 nt!ZwAlpcImpersonateClientContainerOfPort (ZwAlpcImpersonateClientContainerOfPort)
fffff803`263f5230 nt!ZwCreateProcess (ZwCreateProcess)
fffff803`263f4950 nt!ZwAllocateReserveObject (ZwAllocateReserveObject)
fffff803`263f68f0 nt!ZwReleaseWorkerFactoryWorker (ZwReleaseWorkerFactoryWorker)
fffff803`263f4110 nt!ZwOpenProcessTokenEx (ZwOpenProcessTokenEx)
fffff803`263f4050 nt!ZwUnmapViewOfSection (ZwUnmapViewOfSection)
fffff803`263f74b0 nt!ZwUnsubscribeWnfStateChange (ZwUnsubscribeWnfStateChange)
fffff803`263f5e70 nt!ZwNotifyChangeSession (ZwNotifyChangeSession)
fffff803`263f6470 nt!ZwQueryInformationPort (ZwQueryInformationPort)
fffff803`263f69d0 nt!ZwReplyWaitReplyPort (ZwReplyWaitReplyPort)
fffff803`263f6c10 nt!ZwSetBootOptions (ZwSetBootOptions)
fffff803`263f6670 nt!ZwQuerySecurityObject (ZwQuerySecurityObject)
fffff803`263f3f90 nt!ZwOpenThreadToken (ZwOpenThreadToken)
fffff803`263f7110 nt!ZwSetTimerResolution (ZwSetTimerResolution)
fffff803`263f4ad0 nt!ZwAlpcCreateSectionView (ZwAlpcCreateSectionView)
fffff803`263f68d0 nt!ZwReleaseKeyedEvent (ZwReleaseKeyedEvent)
fffff803`263f6d90 nt!ZwSetIRTimer (ZwSetIRTimer)
fffff803`263f6dd0 nt!ZwSetInformationEnlistment (ZwSetInformationEnlistment)
fffff803`263f5ed0 nt!ZwOpenIoCompletion (ZwOpenIoCompletion)
fffff803`263f4490 nt!ZwApphelpCacheControl (ZwApphelpCacheControl)
fffff803`263f62d0 nt!ZwQueryAuxiliaryCounterFrequency (ZwQueryAuxiliaryCounterFrequency)
fffff803`263f3bd0 nt!ZwReadFile (ZwReadFile)
fffff803`263f5ef0 nt!ZwOpenJobObject (ZwOpenJobObject)
fffff803`263f4150 nt!ZwEnumerateKey (ZwEnumerateKey)
fffff803`263f6310 nt!ZwQueryBootOptions (ZwQueryBootOptions)
fffff803`263f5b10 nt!ZwInitializeRegistry (ZwInitializeRegistry)
fffff803`263f49d0 nt!ZwAllocateVirtualMemoryEx (ZwAllocateVirtualMemoryEx)
fffff803`263f6010 nt!ZwOpenProcessToken (ZwOpenProcessToken)
fffff803`263f5cf0 nt!ZwMakeTemporaryObject (ZwMakeTemporaryObject)
fffff803`263f52d0 nt!ZwCreateSectionEx (ZwCreateSectionEx)
fffff803`263f6050 nt!ZwOpenResourceManager (ZwOpenResourceManager)
fffff803`263f5750 nt!ZwExtendSection (ZwExtendSection)
fffff803`263f6e30 nt!ZwSetInformationResourceManager (ZwSetInformationResourceManager)
fffff803`263f4e90 nt!ZwCompareSigningLevels (ZwCompareSigningLevels)
fffff803`263f5170 nt!ZwCreateMutant (ZwCreateMutant)
fffff803`263f3c10 nt!ZwWriteFile (ZwWriteFile)
fffff803`263f4a30 nt!ZwAlpcConnectPort (ZwAlpcConnectPort)
fffff803`263f4f70 nt!ZwCreateCrossVmEvent (ZwCreateCrossVmEvent)
fffff803`263f5730 nt!ZwEnumerateTransactionObject (ZwEnumerateTransactionObject)
fffff803`263f5bd0 nt!ZwLoadEnclaveData (ZwLoadEnclaveData)
fffff803`263f6cd0 nt!ZwSetDefaultLocale (ZwSetDefaultLocale)
fffff803`263f7510 nt!ZwWaitForAlertByThreadId (ZwWaitForAlertByThreadId)
fffff803`263f3e30 nt!ZwQueryInformationProcess (ZwQueryInformationProcess)
fffff803`263f5f10 nt!ZwOpenKeyEx (ZwOpenKeyEx)
fffff803`263f5e50 nt!ZwNotifyChangeMultipleKeys (ZwNotifyChangeMultipleKeys)
fffff803`263f67f0 nt!ZwRaiseHardError (ZwRaiseHardError)
fffff803`263f5bf0 nt!ZwLoadKey (ZwLoadKey)
fffff803`263f4350 nt!ZwDuplicateToken (ZwDuplicateToken)
fffff803`263f6130 nt!ZwOpenTransactionManager (ZwOpenTransactionManager)
fffff803`263f4bd0 nt!ZwAlpcImpersonateClientOfPort (ZwAlpcImpersonateClientOfPort)
fffff803`263f6d50 nt!ZwSetHighEventPair (ZwSetHighEventPair)
fffff803`263f5490 nt!ZwCreateWorkerFactory (ZwCreateWorkerFactory)
fffff803`263f6e70 nt!ZwSetInformationToken (ZwSetInformationToken)
fffff803`263f5d70 nt!ZwMapUserPhysicalPages (ZwMapUserPhysicalPages)
fffff803`263f3cb0 nt!ZwSetInformationThread (ZwSetInformationThread)
fffff803`263f5df0 nt!ZwNotifyChangeDirectoryFile (ZwNotifyChangeDirectoryFile)
fffff803`263f5e90 nt!ZwOpenEnlistment (ZwOpenEnlistment)
fffff803`263f46d0 nt!ZwTraceEvent (ZwTraceEvent)
fffff803`263f6cb0 nt!ZwSetDefaultHardErrorPort (ZwSetDefaultHardErrorPort)
fffff803`263f75b0 nt!ZwWaitLowEventPair (ZwWaitLowEventPair)
fffff803`263f3f30 nt!ZwQueryInformationToken (ZwQueryInformationToken)
fffff803`263f5090 nt!ZwCreateIoCompletion (ZwCreateIoCompletion)
fffff803`263f58f0 nt!ZwFreezeTransactions (ZwFreezeTransactions)
fffff803`263f3d70 nt!ZwEnumerateValueKey (ZwEnumerateValueKey)
fffff803`263f6750 nt!ZwQueryTimerResolution (ZwQueryTimerResolution)
fffff803`263f70d0 nt!ZwSetTimer2 (ZwSetTimer2)
fffff803`263f6a10 nt!ZwResetEvent (ZwResetEvent)
fffff803`263f6a70 nt!ZwResumeProcess (ZwResumeProcess)
fffff803`263f4750 nt!ZwSetTimer (ZwSetTimer)
fffff803`263f7070 nt!ZwSetSystemPowerState (ZwSetSystemPowerState)
fffff803`263f7190 nt!ZwShutdownSystem (ZwShutdownSystem)
fffff803`263f40d0 nt!ZwReadFileScatter (ZwReadFileScatter)
fffff803`263f58b0 nt!ZwFreeUserPhysicalPages (ZwFreeUserPhysicalPages)
fffff803`263f7450 nt!ZwUnlockFile (ZwUnlockFile)
fffff803`263f47f0 nt!ZwAcquireCrossVmMutant (ZwAcquireCrossVmMutant)
fffff803`263f50b0 nt!ZwCreateJobObject (ZwCreateJobObject)
fffff803`263f5a10 nt!ZwGetNextThread (ZwGetNextThread)
fffff803`263f7210 nt!ZwStartProfile (ZwStartProfile)
fffff803`263f4c90 nt!ZwAlpcSendWaitReceivePort (ZwAlpcSendWaitReceivePort)
fffff803`263f4630 nt!ZwAccessCheckByTypeAndAuditAlarm (ZwAccessCheckByTypeAndAuditAlarm)
fffff803`263f42f0 nt!ZwReadVirtualMemory (ZwReadVirtualMemory)
fffff803`263f4cd0 nt!ZwAreMappedFilesTheSame (ZwAreMappedFilesTheSame)
fffff803`263f75d0 nt!ZwLoadKey3 (ZwLoadKey3)
fffff803`263f7310 nt!ZwTestAlert (ZwTestAlert)
fffff803`263f71d0 nt!ZwSignalAndWaitForSingleObject (ZwSignalAndWaitForSingleObject)
fffff803`263f4830 nt!ZwAddAtomEx (ZwAddAtomEx)
fffff803`263f4390 nt!ZwQueryDefaultUILanguage (ZwQueryDefaultUILanguage)
fffff803`263f6910 nt!ZwRemoveIoCompletionEx (ZwRemoveIoCompletionEx)
fffff803`263f74f0 nt!ZwVdmControl (ZwVdmControl)
fffff803`263f6bd0 nt!ZwSerializeBoot (ZwSerializeBoot)
fffff803`263f6370 nt!ZwQueryDirectoryObject (ZwQueryDirectoryObject)
fffff803`263f70f0 nt!ZwSetTimerEx (ZwSetTimerEx)
fffff803`263f6090 nt!ZwOpenSession (ZwOpenSession)
fffff803`263f4d70 nt!ZwCancelSynchronousIoFile (ZwCancelSynchronousIoFile)
fffff803`263f6eb0 nt!ZwSetInformationTransactionManager (ZwSetInformationTransactionManager)
fffff803`263f62f0 nt!ZwQueryBootEntryOrder (ZwQueryBootEntryOrder)
fffff803`263f3b70 nt!ZwMapUserPhysicalPagesScatter (ZwMapUserPhysicalPagesScatter)
fffff803`263f6230 nt!ZwPrivilegedServiceAuditAlarm (ZwPrivilegedServiceAuditAlarm)
fffff803`263f6d70 nt!ZwSetHighWaitLowEventPair (ZwSetHighWaitLowEventPair)
fffff803`263f5790 nt!ZwFilterToken (ZwFilterToken)
fffff803`263f6f90 nt!ZwSetLowEventPair (ZwSetLowEventPair)
fffff803`263f60d0 nt!ZwOpenThread (ZwOpenThread)
fffff803`263f47b0 nt!ZwAccessCheckByTypeResultListAndAuditAlarm (ZwAccessCheckByTypeResultListAndAuditAlarm)
fffff803`263f6f70 nt!ZwSetLdtEntries (ZwSetLdtEntries)
fffff803`263f5670 nt!ZwDisplayString (ZwDisplayString)
fffff803`263f5530 nt!ZwDeleteDriverEntry (ZwDeleteDriverEntry)
fffff803`263f5830 nt!ZwFlushKey (ZwFlushKey)
fffff803`263f4b50 nt!ZwAlpcDeleteSectionView (ZwAlpcDeleteSectionView)
fffff803`263f4910 nt!ZwAlertThreadByThreadId (ZwAlertThreadByThreadId)
fffff803`263f5c10 nt!ZwLoadKey2 (ZwLoadKey2)
fffff803`263f7470 nt!ZwUnlockVirtualMemory (ZwUnlockVirtualMemory)
fffff803`263f6810 nt!ZwReadOnlyEnlistment (ZwReadOnlyEnlistment)
fffff803`263f5970 nt!ZwGetCurrentProcessorNumber (ZwGetCurrentProcessorNumber)
fffff803`263f4430 nt!ZwQueryVolumeInformationFile (ZwQueryVolumeInformationFile)
fffff803`263f4ff0 nt!ZwCreateDirectoryObjectEx (ZwCreateDirectoryObjectEx)
fffff803`263f3f10 nt!ZwReleaseMutant (ZwReleaseMutant)
fffff803`263f4f90 nt!ZwCreateCrossVmMutant (ZwCreateCrossVmMutant)
fffff803`263f49b0 nt!ZwAllocateUuids (ZwAllocateUuids)
fffff803`263f7430 nt!ZwUnloadKeyEx (ZwUnloadKeyEx)
fffff803`263f6850 nt!ZwRecoverResourceManager (ZwRecoverResourceManager)
fffff803`263f4270 nt!ZwCloseObjectAuditAlarm (ZwCloseObjectAuditAlarm)

NT-------------------------------------------------------------------------------------------------------------------------------------------
fffff803`267d904f nt!NtAcquireProcessActivityReference$filt$0 (void)
fffff803`265de2d0 nt!NtDeleteValueKey (void)
fffff803`26951f15 nt!NtQueryDriverEntryOrder$filt$1 (void)
fffff803`266ec270 nt!NtQueryEaFile (void)
fffff803`262d5870 nt!NtCancelWaitCompletionPacket (void)
fffff803`266e9b40 nt!NtFlushBuffersFileEx (void)
fffff803`267d8240 nt!NtReleaseSemaphore$filt$0 (void)
fffff803`267d8c6f nt!NtGetNlsSectionPtr$filt$0 (void)
fffff803`266563b0 nt!NtQueryMultipleValueKey (void)
fffff803`26952c71 nt!NtSetSystemEnvironmentValue$filt$0 (void)
fffff803`266e4850 nt!NtAlpcCreateResourceReserve (void)
fffff803`266746b0 nt!NtSetIoCompletionEx (void)
fffff803`268d15d2 nt!NtCreateEnclave$filt$0 (void)
fffff803`2620fda0 nt!NtWaitForWorkViaWorkerFactory (void)
fffff803`267d7e06 nt!NtSetSystemInformation$filt$14 (void)
fffff803`267d7e32 nt!NtSetSystemInformation$filt$24 (void)
fffff803`2670d8a0 nt!NtCreateRegistryTransaction (void)
fffff803`267d7f30 nt!NtQueryDefaultLocale$filt$0 (void)
fffff803`266add80 nt!NtCreateTimer (void)
fffff803`26951f49 nt!NtQueryDriverEntryOrder$filt$0 (void)
fffff803`266984e0 nt!NtProtectVirtualMemory (void)
fffff803`267b4850 nt!NtCreateKeyedEvent (void)
fffff803`267209d0 nt!NtAcquireProcessActivityReference (void)
fffff803`266b8320 nt!NtAllocateVirtualMemory (void)
fffff803`26410080 nt!NtWaitForWorkViaWorkerFactory$filt$0 (void)
fffff803`266fd1e0 nt!NtCreateSymbolicLinkObject (void)
fffff803`266f5cf0 nt!NtCreatePrivateNamespace (void)
fffff803`268d15bc nt!NtCreateEnclave$filt$1 (void)
fffff803`26790210 nt!NtSetDebugFilterState (void)
fffff803`267d7df0 nt!NtSetSystemInformation$filt$15 (void)
fffff803`267d7c4e nt!NtSetSystemInformation$filt$25 (void)
fffff803`26621f90 nt!NtDeleteWnfStateName (void)
fffff803`267d7ef6 nt!NtResumeThread$filt$0 (void)
fffff803`26883d88 nt!NtSetInformationDebugObject$filt$0 (void)
fffff803`26619260 nt!NtPrivilegeCheck (void)
fffff803`26674900 nt!NtSetEvent (void)
fffff803`26630880 nt!NtAlpcOpenSenderThread (void)
fffff803`266f16c0 nt!NtGetCachedSigningLevel (void)
fffff803`266452a0 nt!NtDeleteKey (void)
fffff803`26627100 nt!NtCreateWnfStateName (void)
fffff803`266504e0 nt!NtSetThreadExecutionState (void)
fffff803`26951427 nt!NtEnumerateDriverEntries$filt$0 (void)
fffff803`269513ed nt!NtEnumerateDriverEntries$filt$1 (void)
fffff803`267d8b7f nt!NtQueryWnfStateNameInformation$filt$2 (void)
fffff803`267d8b11 nt!NtQueryWnfStateNameInformation$filt$0 (void)
fffff803`267d8b4b nt!NtQueryWnfStateNameInformation$filt$1 (void)
fffff803`2664b210 nt!NtPowerInformation (void)
fffff803`26953273 nt!NtTranslateFilePath$filt$1 (void)
fffff803`265fb860 nt!NtCreateSection (void)
fffff803`26710710 nt!NtAlpcCancelMessage (void)
fffff803`267d9887 nt!NtOpenPartition$filt$1 (void)
fffff803`267d6080 nt!NtGetCompleteWnfStateSubscription$filt$0 (void)
fffff803`26632430 nt!NtCreateTokenEx (void)
fffff803`267d5ab0 nt!NtFreeVirtualMemory$filt$0 (void)
fffff803`267d620c nt!NtSubscribeWnfStateChange$filt$0 (void)
fffff803`26654880 nt!NtCommitRegistryTransaction (void)
fffff803`268d15e8 nt!NtCreateEnclave$filt$2 (void)
fffff803`267d6af0 nt!NtQueryInformationFile$fin$0 (void)
fffff803`267d8280 nt!NtRemoveIoCompletion$filt$0 (void)
fffff803`267d7e1c nt!NtSetSystemInformation$filt$16 (void)
fffff803`267d7c38 nt!NtSetSystemInformation$filt$26 (void)
fffff803`266dd240 nt!NtClearEvent (void)
fffff803`267d6b9c nt!NtQueryInformationThread$filt$2 (void)
fffff803`267d6b60 nt!NtQueryInformationThread$filt$1 (void)
fffff803`267d6c15 nt!NtQueryInformationThread$filt$0 (void)
fffff803`26952322 nt!NtQuerySystemEnvironmentValue$filt$0 (void)
fffff803`26904f28 nt!NtGetCurrentProcessorNumberEx$filt$0 (void)
fffff803`266fe910 nt!NtNotifyChangeDirectoryFileEx (void)
fffff803`2660f7b0 nt!NtCreateTimer2 (void)
fffff803`26700010 nt!NtCreateNamedPipeFile (void)
fffff803`26659280 nt!NtIsProcessInJob (void)
fffff803`266ebe60 nt!NtQuerySystemInformationEx (void)
fffff803`266b5910 nt!NtQueueApcThreadEx (void)
fffff803`26410fa0 nt!NtAssociateWaitCompletionPacket$filt$0 (void)
fffff803`269532a7 nt!NtTranslateFilePath$filt$0 (void)
fffff803`266579e0 nt!NtTerminateJobObject (void)
fffff803`267d9853 nt!NtOpenPartition$filt$0 (void)
fffff803`2676c5c0 nt!NtDisableLastKnownGood (void)
fffff803`267d60b4 nt!NtGetCompleteWnfStateSubscription$filt$1 (void)
fffff803`266f5b20 nt!NtOpenPrivateNamespace (void)
fffff803`267d6240 nt!NtSubscribeWnfStateChange$filt$1 (void)
fffff803`268d15fe nt!NtCreateEnclave$filt$3 (void)
fffff803`267be800 nt!NtFlushInstallUILanguage (void)
fffff803`26883a88 nt!NtDebugContinue$filt$0 (void)
fffff803`266227a0 nt!NtGetCompleteWnfStateSubscription (void)
fffff803`267d7dda nt!NtSetSystemInformation$filt$17 (void)
fffff803`267d7c64 nt!NtSetSystemInformation$filt$27 (void)
fffff803`267211d0 nt!NtMakePermanentObject (void)
fffff803`26904a46 nt!NtCreateThread$filt$0 (void)
fffff803`267d8710 nt!NtSetInformationObject$filt$0 (void)
fffff803`269522ee nt!NtQuerySystemEnvironmentValue$filt$1 (void)
fffff803`26952f20 nt!NtSetSystemEnvironmentValueEx$filt$0 (void)
fffff803`26654b60 nt!NtOpenKeyTransactedEx (void)
fffff803`26698b20 nt!NtDelayExecution (void)
fffff803`267d8d51 nt!NtGetNextThread$filt$1 (void)
fffff803`2661bca0 nt!NtSetInformationJobObject (void)
fffff803`26696c00 nt!NtQueryKey (void)
fffff803`26236cc0 nt!NtGetWriteWatch (void)
fffff803`266599e0 nt!NtQueryLicenseValue (void)
fffff803`265e42e0 nt!NtSetValueKey (void)
fffff803`266d7530 nt!NtReleaseSemaphore (void)
fffff803`26700a70 nt!NtGetNlsSectionPtr (void)
fffff803`266032f0 nt!NtFindAtom (void)
fffff803`265d0240 nt!NtCreateMailslotFile (void)
fffff803`267243a0 nt!NtDeleteObjectAuditAlarm (void)
fffff803`263584a0 nt!NtShutdownWorkerFactory (void)
fffff803`267d7d56 nt!NtSetSystemInformation$filt$9 (void)
fffff803`267d7d2a nt!NtSetSystemInformation$filt$8 (void)
fffff803`267d7ce8 nt!NtSetSystemInformation$filt$7 (void)
fffff803`267d7cfe nt!NtSetSystemInformation$filt$6 (void)
fffff803`267d7cbc nt!NtSetSystemInformation$filt$5 (void)
fffff803`267d7ca6 nt!NtSetSystemInformation$filt$4 (void)
fffff803`267d7c90 nt!NtSetSystemInformation$filt$3 (void)
fffff803`267d7d40 nt!NtSetSystemInformation$filt$10 (void)
fffff803`267d7c22 nt!NtSetSystemInformation$filt$2 (void)
fffff803`267d7d14 nt!NtSetSystemInformation$filt$1 (void)
fffff803`267d7c7a nt!NtSetSystemInformation$filt$0 (void)
fffff803`267d7e74 nt!NtSetSystemInformation$filt$20 (void)
fffff803`267d7ab6 nt!NtSetInformationProcess$filt$8 (void)
fffff803`2660e3b0 nt!NtAlpcCreatePortSection (void)
fffff803`266fb250 nt!NtOpenObjectAuditAlarm (void)
fffff803`267d63df nt!NtCreateWnfStateName$filt$1 (void)
fffff803`267d6413 nt!NtCreateWnfStateName$filt$0 (void)
fffff803`267d8420 nt!NtAllocateLocallyUniqueId$filt$0 (void)
fffff803`267d8d17 nt!NtGetNextThread$filt$0 (void)
fffff803`266f03f0 nt!NtCancelIoFile (void)
fffff803`267d9555 nt!NtCreateKeyedEvent$filt$0 (void)
fffff803`267d9589 nt!NtCreateKeyedEvent$filt$1 (void)
fffff803`26958b5d nt!NtReleaseKeyedEvent$filt$0 (void)
fffff803`266d8c80 nt!NtRemoveIoCompletion (void)
fffff803`26722eb0 nt!NtRollbackRegistryTransaction (void)
fffff803`266ea320 nt!NtCompareTokens (void)
fffff803`2675c420 nt!NtSetVolumeInformationFile (void)
fffff803`2668a1a0 nt!NtQueryInformationThread (void)
fffff803`267d7d98 nt!NtSetSystemInformation$filt$11 (void)
fffff803`267d7cd2 nt!NtSetSystemInformation$filt$21 (void)
fffff803`266833e0 nt!NtQuerySecurityAttributesToken (void)
fffff803`267d7aa0 nt!NtSetInformationProcess$filt$9 (void)
fffff803`267d544c nt!NtOpenJobObject$filt$0 (void)
fffff803`2676b7e0 nt!NtEnableLastKnownGood (void)
fffff803`267d8d8b nt!NtAllocateUuids$filt$0 (void)
fffff803`266f88a0 nt!NtQueryWnfStateNameInformation (void)
fffff803`2662f120 nt!NtSecureConnectPort (void)
fffff803`2669a740 nt!NtQueryInformationJobObject (void)
fffff803`267d6d20 nt!NtWriteFile$filt$0 (void)
fffff803`26410700 nt!NtSetInformationWorkerFactory$filt$0 (void)
fffff803`266972a0 nt!NtQueryValueKey (void)
fffff803`26919487 nt!NtQuerySecurityPolicy$filt$0 (void)
fffff803`26627ae0 nt!NtSetSecurityObject (void)
fffff803`267d6046 nt!NtDeleteWnfStateName$filt$0 (void)
fffff803`267d6980 nt!NtReleaseMutant$filt$0 (void)
fffff803`267d680c nt!NtQueryInformationProcess$filt$9 (void)
fffff803`267d7d82 nt!NtSetSystemInformation$filt$12 (void)
fffff803`267d7e5e nt!NtSetSystemInformation$filt$22 (void)
fffff803`2670fb30 nt!NtQuerySystemEnvironmentValueEx (void)
fffff803`266b54b0 nt!NtTerminateThread (void)
fffff803`267188c0 nt!NtSaveKeyEx (void)
fffff803`267d600c nt!NtUnsubscribeWnfStateChange$filt$0 (void)
fffff803`266b31f0 nt!NtCreateThreadEx (void)
fffff803`267d8dbf nt!NtAllocateUuids$filt$1 (void)
fffff803`2664a750 nt!NtAlpcDeletePortSection (void)
fffff803`267643b0 nt!NtInitiatePowerAction (void)
fffff803`267b60d0 nt!NtSetUuidSeed (void)
fffff803`266fa230 nt!NtSetWnfProcessNotificationEvent (void)
fffff803`26601990 nt!NtUnmapViewOfSectionEx (void)
fffff803`266e9f50 nt!NtOpenEvent (void)
fffff803`265f8550 nt!NtClose (void)
fffff803`26410716 nt!NtSetInformationWorkerFactory$filt$1 (void)
fffff803`268bb3b6 nt!NtUmsThreadYield$filt$0 (void)
fffff803`268bb3d7 nt!NtUmsThreadYield$filt$1 (void)
fffff803`266f3330 nt!NtOpenMutant (void)
fffff803`269194bb nt!NtQuerySecurityPolicy$filt$1 (void)
fffff803`2677aff0 nt!NtPrivilegeObjectAuditAlarm (void)
fffff803`267d6bd8 nt!NtQueryInformationThread$fin$3 (void)
fffff803`267d6a48 nt!NtSetInformationThread$fin$1 (void)
fffff803`268d4150 nt!NtFreeUserPhysicalPages$filt$0 (void)
fffff803`262661e0 nt!NtSetInformationWorkerFactory (void)
fffff803`267d67f6 nt!NtQueryInformationProcess$filt$8 (void)
fffff803`267d7d6c nt!NtSetSystemInformation$filt$13 (void)
fffff803`267d7e48 nt!NtSetSystemInformation$filt$23 (void)
fffff803`266e33c0 nt!NtSetInformationObject (void)
fffff803`268d1886 nt!NtInitializeEnclave$filt$0 (void)
fffff803`267d5fda nt!NtManagePartition$filt$0 (void)
fffff803`266b5b40 nt!NtTerminateProcess (void)
fffff803`267204b0 nt!NtSetEaFile (void)
fffff803`267d7be8 nt!NtSetTimerResolution$filt$0 (void)
fffff803`265d9b80 nt!NtPlugPlayControl (void)
fffff803`26952746 nt!NtSetBootOptions$filt$0 (void)
fffff803`2628fd70 nt!NtSetInformationFile (void)
fffff803`265ff900 nt!NtMapViewOfSection (void)
fffff803`2690a590 nt!NtCreatePartition$filt$0 (void)
fffff803`267d55e0 nt!NtDuplicateObject$filt$0 (void)
fffff803`267d6638 nt!NtQueryObject$filt$1 (void)
fffff803`267d67e0 nt!NtQueryInformationProcess$filt$7 (void)
fffff803`267d5cca nt!NtSetInformationVirtualMemory$filt$0 (void)
fffff803`26673d50 nt!NtSetInformationKey (void)
fffff803`268836bd nt!NtCreateDebugObject$filt$0 (void)
fffff803`267d8a10 nt!NtWriteFileGather$filt$0 (void)
fffff803`267d7a48 nt!NtSetInformationProcess$filt$4 (void)
fffff803`26660f50 nt!NtQueryObject (void)
fffff803`2668b150 nt!NtReplyWaitReceivePortEx (void)
fffff803`266d6f40 nt!NtAlpcQueryInformation (void)
fffff803`268d18ba nt!NtInitializeEnclave$filt$1 (void)
fffff803`267d8f01 nt!NtQueryTimerResolution$filt$0 (void)
fffff803`266ef4b0 nt!NtGetMUIRegistryInfo (void)
fffff803`266e5430 nt!NtWaitForMultipleObjects32 (void)
fffff803`2630f030 nt!NtAssociateWaitCompletionPacket (void)
fffff803`266b0b20 nt!NtPulseEvent (void)
fffff803`266075a0 nt!NtSetInformationVirtualMemory (void)
fffff803`265f9860 nt!NtResetWriteWatch (void)
fffff803`267be970 nt!NtSystemDebugControl (void)
fffff803`26626b20 nt!NtAlpcQueryInformationMessage (void)
fffff803`2690a5c4 nt!NtCreatePartition$filt$1 (void)
fffff803`266ee160 nt!NtWriteFileGather (void)
fffff803`266177b0 nt!NtQueryAttributesFile (void)
fffff803`2655fad0 nt!NtSignalAndWaitForSingleObject$filt$2 (void)
fffff803`2655faf0 nt!NtSignalAndWaitForSingleObject$filt$1 (void)
fffff803`2655faa2 nt!NtSignalAndWaitForSingleObject$filt$0 (void)
fffff803`267011a0 nt!NtFlushVirtualMemory (void)
fffff803`267d6674 nt!NtQueryObject$filt$0 (void)
fffff803`267590f0 nt!NtCreateKeyTransacted (void)
fffff803`267d7b7a nt!NtCreateIoCompletion$filt$0 (void)
fffff803`267d7bae nt!NtCreateIoCompletion$filt$1 (void)
fffff803`267d5a70 nt!NtRemoveIoCompletionEx$filt$0 (void)
fffff803`267d67ca nt!NtQueryInformationProcess$filt$6 (void)
fffff803`267d5d04 nt!NtSetInformationVirtualMemory$filt$1 (void)
fffff803`265e8e90 nt!NtDuplicateObject (void)
fffff803`26883689 nt!NtCreateDebugObject$filt$1 (void)
fffff803`267d7a5e nt!NtSetInformationProcess$filt$5 (void)
fffff803`26667f50 nt!NtOpenThreadTokenEx (void)
fffff803`2688411f nt!NtWaitForDebugEvent$filt$1 (void)
fffff803`26631ef0 nt!NtAdjustGroupsToken (void)
fffff803`26617520 nt!NtQueryFullAttributesFile (void)
fffff803`267d7fb0 nt!NtAllocateVirtualMemory$filt$0 (void)
fffff803`2670dbb0 nt!NtRegisterThreadTerminatePort (void)
fffff803`26619450 nt!NtAdjustPrivilegesToken (void)
fffff803`2662ef10 nt!NtReplyPort (void)
fffff803`26779e80 nt!NtGetNextProcess (void)
fffff803`26957aca nt!NtMapCMFModule$fin$1 (void)
fffff803`267d65fc nt!NtQueryObject$filt$3 (void)
fffff803`26659580 nt!NtAssignProcessToJobObject (void)
fffff803`267c0740 nt!NtOpenPartition (void)
fffff803`266f62c0 nt!NtAlpcSetInformation (void)
fffff803`267d67b4 nt!NtQueryInformationProcess$filt$5 (void)
fffff803`2662d130 nt!NtAlpcOpenSenderProcess (void)
fffff803`267d7a74 nt!NtSetInformationProcess$filt$6 (void)
fffff803`266798e0 nt!NtQueryInformationFile (void)
fffff803`267d6a0c nt!NtSetInformationThread$filt$0 (void)
fffff803`266b1f80 nt!NtCreateSemaphore (void)
fffff803`267d69d0 nt!NtSetInformationThread$filt$2 (void)
fffff803`2671a4e0 nt!NtSetCachedSigningLevel2 (void)
fffff803`266908a0 nt!NtQuerySystemInformation (void)
fffff803`26884153 nt!NtWaitForDebugEvent$filt$0 (void)
fffff803`262ffe30 nt!NtCancelTimer (void)
fffff803`267d7fec nt!NtAllocateVirtualMemory$filt$1 (void)
fffff803`26670e60 nt!NtWaitForMultipleObjects (void)
fffff803`266b0bf0 nt!NtQueryPerformanceCounter (void)
fffff803`2665e550 nt!NtInitializeNlsFiles (void)
fffff803`26345610 nt!NtWorkerFactoryWorkerReady (void)
fffff803`266bcaa0 nt!NtCreateLowBoxToken (void)
fffff803`26957a9f nt!NtMapCMFModule$fin$0 (void)
fffff803`266da530 nt!NtQuerySymbolicLinkObject (void)
fffff803`267a1660 nt!NtLockProductActivationKeys (void)
fffff803`2695294b nt!NtSetDriverEntryOrder$filt$0 (void)
fffff803`26891ef2 nt!NtOpenIoCompletion$filt$1 (void)
fffff803`26891ebe nt!NtOpenIoCompletion$filt$0 (void)
fffff803`267d65c0 nt!NtQueryObject$filt$2 (void)
fffff803`267d679e nt!NtQueryInformationProcess$filt$4 (void)
fffff803`267d6d50 nt!NtReadFile$filt$0 (void)
fffff803`266fb7c0 nt!NtQuerySection (void)
fffff803`266ffba0 nt!NtQueryEvent (void)
fffff803`26951cd5 nt!NtQueryBootOptions$filt$0 (void)
fffff803`26951ca1 nt!NtQueryBootOptions$filt$1 (void)
fffff803`266e1550 nt!NtAlpcCreateSecurityContext (void)
fffff803`267d7acc nt!NtSetInformationProcess$filt$7 (void)
fffff803`26909d3e nt!NtAlertResumeThread$filt$0 (void)
fffff803`267d6515 nt!NtCreateJobObject$filt$0 (void)
fffff803`26707960 nt!NtPrivilegedServiceAuditAlarm (void)
fffff803`26958f30 nt!NtWaitForKeyedEvent$filt$0 (void)
fffff803`267d9015 nt!NtSetCachedSigningLevel2$filt$0 (void)
fffff803`267d8ce3 nt!NtQueryInstallUILanguage$filt$0 (void)
fffff803`267d5ec9 nt!NtCreateUserProcess$filt$0 (void)
fffff803`267d81b0 nt!NtImpersonateThread$filt$0 (void)
fffff803`266338e0 nt!NtFilterToken (void)
fffff803`26951994 nt!NtQueryBootEntryOrder$filt$1 (void)
fffff803`267d8fa1 nt!NtQuerySystemEnvironmentValueEx$filt$1 (void)
fffff803`267d89f0 nt!NtReadFileScatter$filt$0 (void)
fffff803`267d62f4 nt!NtQueryWnfStateData$filt$1 (void)
fffff803`2664a620 nt!NtAlpcDeleteSectionView (void)
fffff803`26704200 nt!NtFlushKey (void)
fffff803`26690280 nt!NtQueryVolumeInformationFile (void)
fffff803`267d6583 nt!NtInitializeNlsFiles$filt$0 (void)
fffff803`267d8f33 nt!NtOpenSession$filt$0 (void)
fffff803`26951627 nt!NtEnumerateSystemEnvironmentValuesEx$filt$0 (void)
fffff803`269515f3 nt!NtEnumerateSystemEnvironmentValuesEx$filt$1 (void)
fffff803`267d6788 nt!NtQueryInformationProcess$filt$3 (void)
fffff803`26410486 nt!NtGetWriteWatch$filt$1 (void)
fffff803`267d7dc4 nt!NtSetSystemInformation$filt$18 (void)
fffff803`266747f0 nt!NtReleaseMutant (void)
fffff803`267d7e8a nt!NtSetSystemInformation$filt$28 (void)
fffff803`2695876d nt!NtOpenKeyedEvent$filt$1 (void)
fffff803`269587a1 nt!NtOpenKeyedEvent$filt$0 (void)
fffff803`266f3110 nt!NtCloseObjectAuditAlarm (void)
fffff803`267d79f0 nt!NtSetInformationProcess$filt$0 (void)
fffff803`267098d0 nt!NtAllocateUuids (void)
fffff803`266bef70 nt!NtResetEvent (void)
fffff803`267d6549 nt!NtCreateJobObject$filt$1 (void)
fffff803`26376d50 nt!NtSetTimer (void)
fffff803`265e9a90 nt!NtEnumerateValueKey (void)
fffff803`2670e0a0 nt!NtQueryTimerResolution (void)
fffff803`266edb50 nt!NtReadFileScatter (void)
fffff803`268d1f3d nt!NtLoadEnclaveData$filt$2 (void)
fffff803`26658740 nt!NtCreateJobObject (void)
fffff803`267d92e8 nt!NtGetNextProcess$filt$1 (void)
fffff803`267d92ae nt!NtGetNextProcess$filt$0 (void)
fffff803`26704b80 nt!NtGetNextThread (void)
fffff803`269519c8 nt!NtQueryBootEntryOrder$filt$0 (void)
fffff803`266e0f20 nt!NtUnlockFile (void)
fffff803`267d877e nt!NtCreateWaitCompletionPacket$filt$1 (void)
fffff803`267d874a nt!NtCreateWaitCompletionPacket$filt$0 (void)
fffff803`267d8f6d nt!NtQuerySystemEnvironmentValueEx$filt$0 (void)
fffff803`26684100 nt!NtAlpcSendWaitReceivePort (void)
fffff803`267d62ba nt!NtQueryWnfStateData$filt$0 (void)
fffff803`2670ce00 nt!NtAreMappedFilesTheSame (void)
fffff803`266f22c0 nt!NtAddAtomEx (void)
fffff803`267d692a nt!NtQueryInformationProcess$filt$23 (void)
fffff803`267d6914 nt!NtQueryInformationProcess$filt$22 (void)
fffff803`267d68fe nt!NtQueryInformationProcess$filt$21 (void)
fffff803`267d68e8 nt!NtQueryInformationProcess$filt$20 (void)
fffff803`267d6772 nt!NtQueryInformationProcess$filt$2 (void)
fffff803`26410470 nt!NtGetWriteWatch$filt$0 (void)
fffff803`265f8960 nt!NtRemoveIoCompletionEx (void)
fffff803`267d7dae nt!NtSetSystemInformation$filt$19 (void)
fffff803`262111a0 nt!NtSetTimerEx (void)
fffff803`267d7b24 nt!NtSetInformationProcess$filt$11 (void)
fffff803`267d7a8a nt!NtSetInformationProcess$filt$10 (void)
fffff803`267d7af8 nt!NtSetInformationProcess$filt$13 (void)
fffff803`267d7b0e nt!NtSetInformationProcess$filt$12 (void)
fffff803`267d7ae2 nt!NtSetInformationProcess$filt$14 (void)
fffff803`2668c910 nt!NtQueryDirectoryObject (void)
fffff803`267d7a06 nt!NtSetInformationProcess$filt$1 (void)
fffff803`26709ba0 nt!NtExtendSection (void)
fffff803`2670c980 nt!NtMakeTemporaryObject (void)
fffff803`26892051 nt!NtQueryIoCompletion$filt$0 (void)
fffff803`268d1f03 nt!NtLoadEnclaveData$filt$1 (void)
fffff803`2668cdb0 nt!NtWriteFile (void)
fffff803`2677b420 nt!NtSetDefaultLocale (void)
fffff803`2695252b nt!NtSetBootEntryOrder$filt$0 (void)
fffff803`265e2e90 nt!NtNotifyChangeMultipleKeys (void)
fffff803`2662c3f0 nt!NtDuplicateToken (void)
fffff803`267d6864 nt!NtQueryInformationProcess$filt$13 (void)
fffff803`267d684e nt!NtQueryInformationProcess$filt$12 (void)
fffff803`267d6838 nt!NtQueryInformationProcess$filt$11 (void)
fffff803`267d6822 nt!NtQueryInformationProcess$filt$10 (void)
fffff803`267d68a6 nt!NtQueryInformationProcess$filt$17 (void)
fffff803`267d6890 nt!NtQueryInformationProcess$filt$16 (void)
fffff803`267d6730 nt!NtQueryInformationProcess$filt$15 (void)
fffff803`267d687a nt!NtQueryInformationProcess$filt$14 (void)
fffff803`267d68d2 nt!NtQueryInformationProcess$filt$19 (void)
fffff803`267d68bc nt!NtQueryInformationProcess$filt$18 (void)
fffff803`2660dfe0 nt!NtCreateWorkerFactory (void)
fffff803`266bb6a0 nt!NtSetInformationToken (void)
fffff803`267d675c nt!NtQueryInformationProcess$filt$1 (void)
fffff803`266897a0 nt!NtAlpcImpersonateClientOfPort (void)
fffff803`265b48e2 nt!NtQueryInformationWorkerFactory$filt$0 (void)
fffff803`2626c620 nt!NtTraceEvent (void)
fffff803`267c1060 nt!NtSetDefaultHardErrorPort (void)
fffff803`266804a0 nt!NtQueryInformationToken (void)
fffff803`26675210 nt!NtSetInformationThread (void)
fffff803`267d7a1c nt!NtSetInformationProcess$filt$2 (void)
fffff803`26282330 nt!NtReleaseWorkerFactoryWorker (void)
fffff803`266f2050 nt!NtQueryInformationAtom (void)
fffff803`26892085 nt!NtQueryIoCompletion$filt$1 (void)
fffff803`267038c0 nt!NtAllocateReserveObject (void)
fffff803`268d1ec7 nt!NtLoadEnclaveData$filt$0 (void)
fffff803`266e6440 nt!NtNotifyChangeSession (void)
fffff803`26950f31 nt!NtEnumerateBootEntries$filt$1 (void)
fffff803`26950f6b nt!NtEnumerateBootEntries$filt$0 (void)
fffff803`264125cc nt!NtShutdownWorkerFactory$filt$0 (void)
fffff803`266ab1d0 nt!NtSetTimerResolution (void)
fffff803`267d5e89 nt!NtCreateWorkerFactory$filt$0 (void)
fffff803`267d8df9 nt!NtSuspendThread$filt$0 (void)
fffff803`26662ba0 nt!NtApphelpCacheControl (void)
fffff803`267d6746 nt!NtQueryInformationProcess$filt$0 (void)
fffff803`2668d9e0 nt!NtReadFile (void)
fffff803`2677cad0 nt!NtInitializeRegistry (void)
fffff803`267d7a32 nt!NtSetInformationProcess$filt$3 (void)
fffff803`266741b0 nt!NtEnumerateKey (void)
fffff803`265d0750 nt!NtOpenJobObject (void)
fffff803`2670d720 nt!NtGetContextThread (NtGetContextThread)
fffff803`26a967a0 nt!NtdllWowArm32Exports = <no type information>
fffff803`26904650 nt!NtCreateProcessEx (NtCreateProcessEx)
fffff803`268d1620 nt!NtInitializeEnclave (NtInitializeEnclave)
fffff803`26921400 nt!NtFilterBootOption (NtFilterBootOption)
fffff803`2677e2b0 nt!NtCreateIRTimer (NtCreateIRTimer)
fffff803`269540b0 nt!NtQuerySemaphore (NtQuerySemaphore)
fffff803`267b24c0 nt!NtLockRegistryKey (NtLockRegistryKey)
fffff803`2671a4b0 nt!NtSetCachedSigningLevel (NtSetCachedSigningLevel)
fffff803`266e9b10 nt!NtFlushBuffersFile (NtFlushBuffersFile)
fffff803`268bb2f0 nt!NtUmsThreadYield (NtUmsThreadYield)
fffff803`26590be0 nt!NtAccessCheckByTypeResultList (NtAccessCheckByTypeResultList)
fffff803`263f8020 nt!NtRaiseException (NtRaiseException)
fffff803`266abe70 nt!NtSetSystemInformation (NtSetSystemInformation)
fffff803`26909e80 nt!NtSuspendProcess (NtSuspendProcess)
fffff803`263cd310 nt!NtCommitTransaction (NtCommitTransaction)
fffff803`26a96820 nt!NtdllExports = <no type information>
fffff803`263f7d50 nt!NtContinue (NtContinue)
fffff803`26883dd0 nt!NtWaitForDebugEvent (NtWaitForDebugEvent)
fffff803`26361600 nt!NtQueryDebugFilterState (NtQueryDebugFilterState)
fffff803`2694c7b0 nt!NtOpenTimer (NtOpenTimer)
fffff803`262fd0a0 nt!NtFlushProcessWriteBuffers (NtFlushProcessWriteBuffers)
fffff803`26600620 nt!NtQueryVirtualMemory (NtQueryVirtualMemory)
fffff803`26616990 nt!NtCreateFile (NtCreateFile)
fffff803`26400290 nt!NtCallEnclave (NtCallEnclave)
fffff803`26630c10 nt!NtImpersonateAnonymousToken (NtImpersonateAnonymousToken)
fffff803`26c4c100 nt!NtGlobalFlag = <no type information>
fffff803`266535c0 nt!NtCreateKey (NtCreateKey)
fffff803`26949360 nt!NtSetSystemTime (NtSetSystemTime)
fffff803`26c4c228 nt!NtGlobalFlag2 = <no type information>
fffff803`263cd590 nt!NtQueryInformationTransaction (NtQueryInformationTransaction)
fffff803`263f7d60 nt!NtContinueEx (NtContinueEx)
fffff803`263cd510 nt!NtPropagationComplete (NtPropagationComplete)
fffff803`263cd670 nt!NtRollbackEnlistment (NtRollbackEnlistment)
fffff803`268658f0 nt!NtFreezeRegistry (NtFreezeRegistry)
fffff803`267156a0 nt!NT_DISK::GetPnpProperty (public: virtual long __cdecl NT_DISK::GetPnpProperty(void *,void * *))
fffff803`268dcaa0 nt!NtDeletePrivateNamespace (NtDeletePrivateNamespace)
fffff803`26866ba0 nt!NtSaveKey (NtSaveKey)
fffff803`266f4970 nt!NtQueryDirectoryFile (NtQueryDirectoryFile)
fffff803`26908a50 nt!NtSetContextThread (NtSetContextThread)
fffff803`26630830 nt!NtAlpcCreatePort (NtAlpcCreatePort)
fffff803`266510a0 nt!NtUnloadKey (NtUnloadKey)
fffff803`268921b0 nt!NtQueryInformationByName (NtQueryInformationByName)
fffff803`2676c040 nt!NtDeleteFile (NtDeleteFile)
fffff803`26723c50 nt!NtSetIntervalProfile (NtSetIntervalProfile)
fffff803`26723990 nt!NtQueryIntervalProfile (NtQueryIntervalProfile)
fffff803`268da0e0 nt!NtSetInformationSymbolicLink (NtSetInformationSymbolicLink)
fffff803`263cd370 nt!NtCreateTransaction (NtCreateTransaction)
fffff803`26866560 nt!NtReplaceKey (NtReplaceKey)
fffff803`268bf620 nt!NtReadRequestData (NtReadRequestData)
fffff803`268d1f80 nt!NtTerminateEnclave (NtTerminateEnclave)
fffff803`26883500 nt!NtCreateDebugObject (NtCreateDebugObject)
fffff803`266f46d0 nt!NtCreateDirectoryObject (NtCreateDirectoryObject)
fffff803`263cdb70 nt!NtRenameTransactionManager (NtRenameTransactionManager)
fffff803`268bfcb0 nt!NtAlpcRevokeSecurityContext (NtAlpcRevokeSecurityContext)
fffff803`26950640 nt!NtDeleteBootEntry (NtDeleteBootEntry)
fffff803`26703230 nt!NtWriteVirtualMemory (NtWriteVirtualMemory)
fffff803`268c0920 nt!NtAlpcDeleteResourceReserve (NtAlpcDeleteResourceReserve)
fffff803`26909d80 nt!NtAlertThread (NtAlertThread)
fffff803`26883700 nt!NtDebugActiveProcess (NtDebugActiveProcess)
fffff803`26616920 nt!NtOpenFile (NtOpenFile)
fffff803`263cd3f0 nt!NtGetNotificationResourceManager (NtGetNotificationResourceManager)
fffff803`26708800 nt!NtAcceptConnectPort (NtAcceptConnectPort)
fffff803`267c2f50 nt!NtListenPort (NtListenPort)
fffff803`26676330 nt!NtDeviceIoControlFile (NtDeviceIoControlFile)
fffff803`2670c4b0 nt!NtFlushInstructionCache (NtFlushInstructionCache)
fffff803`26904ed0 nt!NtGetCurrentProcessorNumberEx (NtGetCurrentProcessorNumberEx)
fffff803`26952040 nt!NtQuerySystemEnvironmentValue (NtQuerySystemEnvironmentValue)
fffff803`269570c0 nt!NtMapCMFModule (NtMapCMFModule)
fffff803`266239b0 nt!NtSubscribeWnfStateChange (NtSubscribeWnfStateChange)
fffff803`26909c60 nt!NtAlertResumeThread (NtAlertResumeThread)
fffff803`2667acb0 nt!NtCreateEvent (NtCreateEvent)
fffff803`268bf7a0 nt!NtWriteRequestData (NtWriteRequestData)
fffff803`267156a0 nt!NtDirectGraphicsCall (NtDirectGraphicsCall)
fffff803`26866bc0 nt!NtSaveMergedKeys (NtSaveMergedKeys)
fffff803`2662ae00 nt!NtAlpcAcceptConnectPort (NtAlpcAcceptConnectPort)
fffff803`266cc780 nt!NtImpersonateThread (NtImpersonateThread)
fffff803`2657dc20 nt!NtosSecureKernelImportBugcheck (NtosSecureKernelImportBugcheck)
fffff803`2688b180 nt!NT_DISK::Control (public: virtual long __cdecl NT_DISK::Control(unsigned long,void *,unsigned long,void *,unsigned long))
fffff803`266dc7a0 nt!NtAllocateLocallyUniqueId (NtAllocateLocallyUniqueId)
fffff803`269863e8 nt!NtImageInfo = <no type information>
fffff803`263cd690 nt!NtRollbackTransaction (NtRollbackTransaction)
fffff803`2676f9a0 nt!NtLoadDriver (NtLoadDriver)
fffff803`2633a120 nt!NtAccessCheck (NtAccessCheck)
fffff803`26952360 nt!NtSetBootEntryOrder (NtSetBootEntryOrder)
fffff803`267156a0 nt!NtOpenEventPair (NtOpenEventPair)
fffff803`267156a0 nt!NtWaitHighEventPair (NtWaitHighEventPair)
fffff803`26768ec0 nt!NtIsSystemResumeAutomatic (NtIsSystemResumeAutomatic)
fffff803`26866e00 nt!NtThawRegistry (NtThawRegistry)
fffff803`2691e890 nt!NtAccessCheckByTypeResultListAndAuditAlarmByHandle (NtAccessCheckByTypeResultListAndAuditAlarmByHandle)
fffff803`267155a0 nt!NtCreateJobSet (NtCreateJobSet)
fffff803`26893c00 nt!NtSetQuotaInformationFile (NtSetQuotaInformationFile)
fffff803`269585e0 nt!NtStopProfile (NtStopProfile)
fffff803`269581b0 nt!NtCreateProfile (NtCreateProfile)
fffff803`263cd390 nt!NtCreateTransactionManager (NtCreateTransactionManager)
fffff803`26950fb0 nt!NtEnumerateDriverEntries (NtEnumerateDriverEntries)
fffff803`263cd4d0 nt!NtPrepareComplete (NtPrepareComplete)
fffff803`266ef3a0 nt!NtRequestWaitReplyPort (NtRequestWaitReplyPort)
fffff803`2677b400 nt!NtSetDefaultUILanguage (NtSetDefaultUILanguage)
fffff803`262f1640 nt!NtYieldExecution (NtYieldExecution)
fffff803`263cd2f0 nt!NtCommitEnlistment (NtCommitEnlistment)
fffff803`267156a0 nt!NtCreateEventPair (NtCreateEventPair)
fffff803`263cd490 nt!NtPrePrepareComplete (NtPrePrepareComplete)
fffff803`26952cb0 nt!NtSetSystemEnvironmentValueEx (NtSetSystemEnvironmentValueEx)
fffff803`26cf4dd8 nt!NtVhdBootFile = <no type information>
fffff803`265b45f0 nt!NtQueryInformationWorkerFactory (NtQueryInformationWorkerFactory)
fffff803`266e47e0 nt!NtFsControlFile (NtFsControlFile)
fffff803`266f05a0 nt!NtCancelIoFileEx (NtCancelIoFileEx)
fffff803`2694c860 nt!NtQueryTimer (NtQueryTimer)
fffff803`263cd650 nt!NtRollbackComplete (NtRollbackComplete)
fffff803`268cc1f0 nt!NtManageHotPatch (NtManageHotPatch)
fffff803`267622a0 nt!NtCreatePort (NtCreatePort)
fffff803`26883ad0 nt!NtRemoveProcessDebug (NtRemoveProcessDebug)
fffff803`266c4c2c nt!NtPlugPlayGetDeviceRelatedDevice (_NtPlugPlayGetDeviceRelatedDevice)
fffff803`268d3c70 nt!NtAllocateUserPhysicalPages (NtAllocateUserPhysicalPages)
fffff803`26623e10 nt!NtQueryWnfStateData (NtQueryWnfStateData)
fffff803`263cd5f0 nt!NtRecoverEnlistment (NtRecoverEnlistment)
fffff803`26951760 nt!NtModifyDriverEntry (NtModifyDriverEntry)
fffff803`26623530 nt!NtUpdateWnfStateData (NtUpdateWnfStateData)
fffff803`266b4b80 nt!NtResumeThread (NtResumeThread)
fffff803`266e6890 nt!NtSetIoCompletion (NtSetIoCompletion)
fffff803`267155b0 nt!NtQueryPortInformationProcess (NtQueryPortInformationProcess)
fffff803`266a1d30 nt!NtSetInformationProcess (NtSetInformationProcess)
fffff803`266b6b80 nt!NtQueryDefaultLocale (NtQueryDefaultLocale)
fffff803`265c4ec0 nt!NtReplacePartitionUnit (NtReplacePartitionUnit)
fffff803`26958ba0 nt!NtWaitForKeyedEvent (NtWaitForKeyedEvent)
fffff803`265ad570 nt!NtDrawText (NtDrawText)
fffff803`265f8820 nt!NtWaitForSingleObject (NtWaitForSingleObject)
fffff803`26950610 nt!NtAddDriverEntry (NtAddDriverEntry)
fffff803`263cd330 nt!NtCreateEnlistment (NtCreateEnlistment)
fffff803`26865430 nt!NtCompactKeys (NtCompactKeys)
fffff803`26615730 nt!NtCreateUserProcess (NtCreateUserProcess)
fffff803`267614b0 nt!NtIsUILanguageComitted (NtIsUILanguageComitted)
fffff803`269594e0 nt!NtPssCaptureVaSpaceBulk (NtPssCaptureVaSpaceBulk)
fffff803`266c3518 nt!NtPlugPlayGetDeviceStatus (_NtPlugPlayGetDeviceStatus)
fffff803`267bc560 nt!NtDeleteWnfStateData (NtDeleteWnfStateData)
fffff803`2670c4b0 nt!NtFlushWriteBuffer (NtFlushWriteBuffer)
fffff803`263cdbd0 nt!NtRollforwardTransactionManager (NtRollforwardTransactionManager)
fffff803`266d4490 nt!NtOpenProcess (NtOpenProcess)
fffff803`2677daf0 nt!NtCreateWaitablePort (NtCreateWaitablePort)
fffff803`26865710 nt!NtCompressKey (NtCompressKey)
fffff803`263cd5b0 nt!NtQueryInformationTransactionManager (NtQueryInformationTransactionManager)
fffff803`263cd350 nt!NtCreateResourceManager (NtCreateResourceManager)
fffff803`263cd530 nt!NtPropagationFailed (NtPropagationFailed)
fffff803`2697a2dc nt!NtOpenKeyTransactedEx_Stub (NtOpenKeyTransactedEx_Stub)
fffff803`26891f30 nt!NtQueryIoCompletion (NtQueryIoCompletion)
fffff803`26c4c020 nt!NtBuildLabEx = <no type information>
fffff803`263cd550 nt!NtQueryInformationEnlistment (NtQueryInformationEnlistment)
fffff803`2688b288 nt!NT_DISK::Initialize (public: long __cdecl NT_DISK::Initialize(struct _DEVICE_OBJECT *))
fffff803`267a3ef0 nt!NtCreatePagingFile (NtCreatePagingFile)
fffff803`26c4c120 nt!NtBuildLab = <no type information>
fffff803`263cd570 nt!NtQueryInformationResourceManager (NtQueryInformationResourceManager)
fffff803`2670c4b0 nt!NtCompleteConnectPort (NtCompleteConnectPort)
fffff803`268934f0 nt!NtQueryQuotaInformationFile (NtQueryQuotaInformationFile)
fffff803`26c11f68 nt!NtBuildNumber = <no type information>
fffff803`2691fd70 nt!NtCreateToken (NtCreateToken)
fffff803`2670b540 nt!NtSuspendThread (NtSuspendThread)
fffff803`2670c540 nt!NtPlugPlayGetDeviceProperty (_NtPlugPlayGetDeviceProperty)
fffff803`263cdb50 nt!NtRegisterProtocolAddressInformation (NtRegisterProtocolAddressInformation)
fffff803`2602dd50 nt!NtBuildGUID = <no type information>
fffff803`26866060 nt!NtRenameKey (NtRenameKey)
fffff803`269046f0 nt!NtCreateThread (NtCreateThread)
fffff803`266f39f0 nt!NtDeleteAtom (NtDeleteAtom)
fffff803`269191e0 nt!NtQuerySecurityPolicy (NtQuerySecurityPolicy)
fffff803`2668b890 nt!NtAlpcDeleteSecurityContext (NtAlpcDeleteSecurityContext)
fffff803`2657cd70 nt!NtRevertContainerImpersonation (NtRevertContainerImpersonation)
fffff803`2668b130 nt!NtReplyWaitReceivePort (NtReplyWaitReceivePort)
fffff803`2688b110 nt!NT_DISK::`scalar deleting destructor' (public: virtual void * __cdecl NT_DISK::`scalar deleting destructor'(unsigned int))
fffff803`26a95e68 nt!NtInitialUserProcess = <no type information>
fffff803`263cd450 nt!NtOpenTransaction (NtOpenTransaction)
fffff803`26958080 nt!NtConvertBetweenAuxiliaryCounterAndPerformanceCounter (NtConvertBetweenAuxiliaryCounterAndPerformanceCounter)
fffff803`2670c8d0 nt!NtMapViewOfSectionEx (NtMapViewOfSectionEx)
fffff803`263cdbb0 nt!NtSinglePhaseReject (NtSinglePhaseReject)
fffff803`263cd4f0 nt!NtPrepareEnlistment (NtPrepareEnlistment)
fffff803`26627f50 nt!NtAccessCheckAndAuditAlarm (NtAccessCheckAndAuditAlarm)
fffff803`260060c8 nt!NT_DISK::`vftable' = <no type information>
fffff803`268d11d0 nt!NtCreateEnclave (NtCreateEnclave)
fffff803`2697984c nt!NtPlugPlayGetDeviceRelationsList (_NtPlugPlayGetDeviceRelationsList)
fffff803`26952990 nt!NtSetSystemEnvironmentValue (NtSetSystemEnvironmentValue)
fffff803`266e4350 nt!NtOpenDirectoryObject (NtOpenDirectoryObject)
fffff803`26954240 nt!NtAddAtom (NtAddAtom)
fffff803`26958290 nt!NtCreateProfileEx (NtCreateProfileEx)
fffff803`26898c00 nt!NtUnloadDriver (NtUnloadDriver)
fffff803`266a0b80 nt!NtLockFile (NtLockFile)
fffff803`267156a0 nt!NtFilterTokenEx (NtFilterTokenEx)
fffff803`265e2de0 nt!NtNotifyChangeKey (NtNotifyChangeKey)
fffff803`265f9d40 nt!NtFreeVirtualMemory (NtFreeVirtualMemory)
fffff803`263cd710 nt!NtThawTransactions (NtThawTransactions)
fffff803`268eda10 nt!NtGetDevicePowerState (NtGetDevicePowerState)
fffff803`2635f7f0 nt!NtCancelTimer2 (NtCancelTimer2)
fffff803`263faf60 nt!NtCallbackReturn (NtCallbackReturn)
fffff803`269505e0 nt!NtAddBootEntry (NtAddBootEntry)
fffff803`26d228c0 nt!NtfsStructLock = <no type information>
fffff803`268659b0 nt!NtOpenRegistryTransaction (NtOpenRegistryTransaction)
fffff803`269544f0 nt!NtQueryMutant (NtQueryMutant)
fffff803`2661d7c0 nt!NtManagePartition (NtManagePartition)
fffff803`2662f820 nt!NtConnectPort (NtConnectPort)
fffff803`266da3e0 nt!NtOpenSymbolicLinkObject (NtOpenSymbolicLinkObject)
fffff803`266f44f0 nt!NtOpenSemaphore (NtOpenSemaphore)
fffff803`2694ca70 nt!NtSetEventBoostPriority (NtSetEventBoostPriority)
fffff803`267156a0 nt!NtSetLowWaitHighEventPair (NtSetLowWaitHighEventPair)
fffff803`267156a0 nt!NtAdjustTokenClaimsAndDeviceGroups (NtAdjustTokenClaimsAndDeviceGroups)
fffff803`2688b2c0 nt!NT_DISK::Read (public: virtual long __cdecl NT_DISK::Read(unsigned __int64,unsigned long,unsigned char *))
fffff803`2690a450 nt!NtCreatePartition (NtCreatePartition)
fffff803`26345040 nt!NtAccessCheckByType (NtAccessCheckByType)
fffff803`268bf520 nt!NtImpersonateClientOfPort (NtImpersonateClientOfPort)
fffff803`269492e0 nt!NtQuerySystemTime (NtQuerySystemTime)
fffff803`26865990 nt!NtOpenKeyTransacted (NtOpenKeyTransacted)
fffff803`268668f0 nt!NtRestoreKey (NtRestoreKey)
fffff803`2688b110 nt!NT_DISK::`vector deleting destructor' (public: virtual void * __cdecl NT_DISK::`vector deleting destructor'(unsigned int))
fffff803`2668e610 nt!NtQueryDirectoryFileEx (NtQueryDirectoryFileEx)
fffff803`26a964c0 nt!NtdllExportInformation = <no type information>
fffff803`26702370 nt!NtRequestPort (NtRequestPort)
fffff803`26951730 nt!NtModifyBootEntry (NtModifyBootEntry)
fffff803`26a96720 nt!NtdllWowX86Exports = <no type information>
fffff803`266e55a0 nt!NtCreateWaitCompletionPacket (NtCreateWaitCompletionPacket)
fffff803`266fd6a0 nt!NtAlpcDisconnectPort (NtAlpcDisconnectPort)
fffff803`266efe70 nt!NtCompareObjects (NtCompareObjects)
fffff803`2697a260 nt!NtCreateKeyTransacted_Stub (NtCreateKeyTransacted_Stub)
fffff803`263cd630 nt!NtRecoverTransactionManager (NtRecoverTransactionManager)
fffff803`2668f0c0 nt!NtTraceControl (NtTraceControl)
fffff803`26952f60 nt!NtTranslateFilePath (NtTranslateFilePath)
fffff803`266e4420 nt!NtOpenSection (NtOpenSection)
fffff803`268d3c90 nt!NtAllocateUserPhysicalPagesEx (NtAllocateUserPhysicalPagesEx)
fffff803`26952780 nt!NtSetDriverEntryOrder (NtSetDriverEntryOrder)
fffff803`26629940 nt!NtAlpcConnectPortEx (NtAlpcConnectPortEx)
fffff803`26703be0 nt!NtQueryInstallUILanguage (NtQueryInstallUILanguage)
fffff803`26865d20 nt!NtQueryOpenSubKeysEx (NtQueryOpenSubKeysEx)
fffff803`266b5d00 nt!NtQueueApcThread (NtQueueApcThread)
fffff803`26950960 nt!NtEnumerateBootEntries (NtEnumerateBootEntries)
fffff803`2624cd50 nt!NtLockVirtualMemory (NtLockVirtualMemory)
fffff803`263cd4b0 nt!NtPrePrepareEnlistment (NtPrePrepareEnlistment)
fffff803`263cd2d0 nt!NtCommitComplete (NtCommitComplete)
fffff803`26762d20 nt!NtUnloadKey2 (NtUnloadKey2)
fffff803`263cd6f0 nt!NtSetInformationTransaction (NtSetInformationTransaction)
fffff803`269586e0 nt!NtOpenKeyedEvent (NtOpenKeyedEvent)
fffff803`266e4d50 nt!NtOpenKey (NtOpenKey)
fffff803`26652490 nt!NtLoadKeyEx (NtLoadKeyEx)
fffff803`26883c40 nt!NtSetInformationDebugObject (NtSetInformationDebugObject)
fffff803`26951470 nt!NtEnumerateSystemEnvironmentValuesEx (NtEnumerateSystemEnvironmentValuesEx)
fffff803`26865b00 nt!NtQueryOpenSubKeys (NtQueryOpenSubKeys)
fffff803`268838d0 nt!NtDebugContinue (NtDebugContinue)
fffff803`26951d10 nt!NtQueryDriverEntryOrder (NtQueryDriverEntryOrder)
fffff803`263cdb90 nt!NtSetInformationTransactionManager (NtSetInformationTransactionManager)
fffff803`26951790 nt!NtQueryBootEntryOrder (NtQueryBootEntryOrder)
fffff803`268d4450 nt!NtMapUserPhysicalPagesScatter (NtMapUserPhysicalPagesScatter)
fffff803`267156a0 nt!NtSetLowEventPair (NtSetLowEventPair)
fffff803`26667e40 nt!NtOpenThread (NtOpenThread)
fffff803`267156a0 nt!NtSetHighWaitLowEventPair (NtSetHighWaitLowEventPair)
fffff803`265e1078 nt!NtPlugPlayGetDeviceInterfaceEnabled (_NtPlugPlayGetDeviceInterfaceEnabled)
fffff803`2691e7e0 nt!NtAccessCheckByTypeResultListAndAuditAlarm (NtAccessCheckByTypeResultListAndAuditAlarm)
fffff803`263cd010 nt!NtSetLdtEntries (NtSetLdtEntries)
fffff803`26667dd0 nt!NtAlertThreadByThreadId (NtAlertThreadByThreadId)
fffff803`269507d0 nt!NtDeleteDriverEntry (NtDeleteDriverEntry)
fffff803`26949ad0 nt!NtDisplayString (NtDisplayString)
fffff803`26904e70 nt!NtGetCurrentProcessorNumber (NtGetCurrentProcessorNumber)
fffff803`263cd5d0 nt!NtReadOnlyEnlistment (NtReadOnlyEnlistment)
fffff803`267710f0 nt!NtLoadKey2 (NtLoadKey2)
fffff803`262564f0 nt!NtUnlockVirtualMemory (NtUnlockVirtualMemory)
fffff803`26954440 nt!NtCreateCrossVmMutant (NtCreateCrossVmMutant)
fffff803`266f46b0 nt!NtCreateDirectoryObjectEx (NtCreateDirectoryObjectEx)
fffff803`263cd610 nt!NtRecoverResourceManager (NtRecoverResourceManager)
fffff803`26651400 nt!NtUnloadKeyEx (NtUnloadKeyEx)
fffff803`26909e00 nt!NtResumeProcess (NtResumeProcess)
fffff803`263cd3d0 nt!NtFreezeTransactions (NtFreezeTransactions)
fffff803`2627ebe0 nt!NtSetTimer2 (NtSetTimer2)
fffff803`26996db0 nt!NtSetSystemPowerState (NtSetSystemPowerState)
fffff803`265ad6f0 nt!NtShutdownSystem (NtShutdownSystem)
fffff803`268d3cb0 nt!NtFreeUserPhysicalPages (NtFreeUserPhysicalPages)
fffff803`26954370 nt!NtAcquireCrossVmMutant (NtAcquireCrossVmMutant)
fffff803`26958370 nt!NtStartProfile (NtStartProfile)
fffff803`26c11fe0 nt!NtBuildQfe = <no type information>
fffff803`26627ea0 nt!NtAccessCheckByTypeAndAuditAlarm (NtAccessCheckByTypeAndAuditAlarm)
fffff803`265eb2e0 nt!NtReadVirtualMemory (NtReadVirtualMemory)
fffff803`2677e2e0 nt!NtQueryDefaultUILanguage (NtQueryDefaultUILanguage)
fffff803`265c73b0 nt!NtLoadKey3 (NtLoadKey3)
fffff803`266fc0b0 nt!NtTestAlert (NtTestAlert)
fffff803`2688b360 nt!NT_DISK::Write (public: virtual long __cdecl NT_DISK::Write(unsigned __int64,unsigned long,unsigned char *))
fffff803`2655f860 nt!NtSignalAndWaitForSingleObject (NtSignalAndWaitForSingleObject)
fffff803`267156a0 nt!NtVdmControl (NtVdmControl)
fffff803`2670f990 nt!NtOpenSession (NtOpenSession)
fffff803`268920c0 nt!NtCancelSynchronousIoFile (NtCancelSynchronousIoFile)
fffff803`26951f90 nt!NtQueryEnvironmentVariableInfoEx (NtQueryEnvironmentVariableInfoEx)
fffff803`267c15d0 nt!NtSerializeBoot (NtSerializeBoot)
fffff803`263cd430 nt!NtOpenResourceManager (NtOpenResourceManager)
fffff803`268c4ea0 nt!NtCreateSectionEx (NtCreateSectionEx)
fffff803`266cd0a0 nt!NtCreateMutant (NtCreateMutant)
fffff803`2670cab0 nt!NtCompareSigningLevels (NtCompareSigningLevels)
fffff803`263cd6d0 nt!NtSetInformationResourceManager (NtSetInformationResourceManager)
fffff803`266298c0 nt!NtAlpcConnectPort (NtAlpcConnectPort)
fffff803`268d1900 nt!NtLoadEnclaveData (NtLoadEnclaveData)
fffff803`2694c9c0 nt!NtCreateCrossVmEvent (NtCreateCrossVmEvent)
fffff803`263cd3b0 nt!NtEnumerateTransactionObject (NtEnumerateTransactionObject)
fffff803`26695600 nt!NtOpenKeyEx (NtOpenKeyEx)
fffff803`26953d60 nt!NtRaiseHardError (NtRaiseHardError)
fffff803`26951670 nt!NtGetEnvironmentVariableEx (NtGetEnvironmentVariableEx)
fffff803`266e14e0 nt!NtWaitForAlertByThreadId (NtWaitForAlertByThreadId)
fffff803`26663490 nt!NtQueryInformationProcess (NtQueryInformationProcess)
fffff803`263cd470 nt!NtOpenTransactionManager (NtOpenTransactionManager)
fffff803`26771150 nt!NtLoadKey (NtLoadKey)
fffff803`267156a0 nt!NtSetHighEventPair (NtSetHighEventPair)
fffff803`268d4190 nt!NtMapUserPhysicalPages (NtMapUserPhysicalPages)
fffff803`267156a0 nt!NtWaitLowEventPair (NtWaitLowEventPair)
fffff803`266a8b70 nt!NtCreateIoCompletion (NtCreateIoCompletion)
fffff803`266fe8b0 nt!NtNotifyChangeDirectoryFile (NtNotifyChangeDirectoryFile)
fffff803`263cd410 nt!NtOpenEnlistment (NtOpenEnlistment)
fffff803`26668710 nt!NtOpenProcessTokenEx (NtOpenProcessTokenEx)
fffff803`266fe5e0 nt!NtUnmapViewOfSection (NtUnmapViewOfSection)
fffff803`268bfa70 nt!NtAlpcImpersonateClientContainerOfPort (NtAlpcImpersonateClientContainerOfPort)
fffff803`269045c0 nt!NtCreateProcess (NtCreateProcess)
fffff803`268bf680 nt!NtReplyWaitReplyPort (NtReplyWaitReplyPort)
fffff803`266215f0 nt!NtUnsubscribeWnfStateChange (NtUnsubscribeWnfStateChange)
fffff803`268bf550 nt!NtQueryInformationPort (NtQueryInformationPort)
fffff803`26952570 nt!NtSetBootOptions (NtSetBootOptions)
fffff803`269587e0 nt!NtReleaseKeyedEvent (NtReleaseKeyedEvent)
fffff803`26611020 nt!NtAlpcCreateSectionView (NtAlpcCreateSectionView)
fffff803`266dd7a0 nt!NtQuerySecurityObject (NtQuerySecurityObject)
fffff803`26667f30 nt!NtOpenThreadToken (NtOpenThreadToken)
fffff803`263cd6b0 nt!NtSetInformationEnlistment (NtSetInformationEnlistment)
fffff803`2635fe10 nt!NtSetIRTimer (NtSetIRTimer)
fffff803`26891e10 nt!NtOpenIoCompletion (NtOpenIoCompletion)
fffff803`26958300 nt!NtQueryAuxiliaryCounterFrequency (NtQueryAuxiliaryCounterFrequency)
fffff803`266b8580 nt!NtAllocateVirtualMemoryEx (NtAllocateVirtualMemoryEx)
fffff803`26951a10 nt!NtQueryBootOptions (NtQueryBootOptions)
fffff803`266686f0 nt!NtOpenProcessToken (NtOpenProcessToken)


-------------------------------------------------------------------------------------------------------PS-----------------------------------------------------------------------------------------------
fffff803`266ee98c nt!PspAllocateAndQueryNotificationChannel (void)
fffff803`2670e378 nt!PspDeleteUserStack (void)
fffff803`2677f738 nt!PspStorageAllocSlot (void)
fffff803`266586a0 nt!PspJobDeleteStorageArrays (void)
fffff803`266b7a54 nt!PsMapSystemDlls (void)
fffff803`2665bc74 nt!PspRemoveProcessFromJobChain (void)
fffff803`26a5f8f4 nt!PspInitializeNetRateControl (void)
fffff803`26327de0 nt!PsRemoveVirtualizedTimer (void)
fffff803`2668b990 nt!PspChargeJobWakeCounter (void)
fffff803`266f1bd0 nt!PsLookupProcessThreadByCid (void)
fffff803`267b3c04 nt!PspInitializeProtectedProcessParameters (void)
fffff803`2626a584 nt!PspUnlockProcessListExclusive (void)
fffff803`26682980 nt!PsImpersonateClient (void)
fffff803`2670027c nt!PspSendReliableJobNotification (void)
fffff803`2670b610 nt!PsSuspendThread (void)
fffff803`2627aaa8 nt!PspJobIoRateVolumeEntryRemoveAll (void)
fffff803`26296b60 nt!PsGetWorkOnBehalfThread (void)
fffff803`26704ef0 nt!PspNotificationPacketCallback (void)
fffff803`26658dac nt!PspEnforceLimits (void)
fffff803`26343170 nt!PsGetEffectiveContainerId (void)
fffff803`266034cc nt!PspCallProcessNotifyRoutines (void)
fffff803`26711884 nt!PsInsertPermanentSiloContextEx (void)
fffff803`26659f74 nt!PspAssignProcessToJob (void)
fffff803`266b0640 nt!PspCreateObjectHandle (void)
fffff803`266afb48 nt!PspInitializeThunkContext (void)
fffff803`266f305c nt!PspAllocateRateControl (void)
fffff803`262e5530 nt!PspReaper (void)
fffff803`265d0cc0 nt!PspDeleteSiloContext (void)
fffff803`2665f850 nt!PspInitializeFullProcessImageName (void)
fffff803`262123a0 nt!PsImpersonateContainerOfThread (void)
fffff803`26784118 nt!PspSetCreateProcessNotifyRoutine (void)
fffff803`2627b620 nt!PsUpdateComponentPower (void)
fffff803`2677bd88 nt!PsChangeQuantumTable (void)
fffff803`266586d0 nt!PspJobIoRateControlDisable (void)
fffff803`266597e8 nt!PspGetJobAssignmentDisposition (void)
fffff803`26660cfc nt!PspWritePebAffinityInfo (void)
fffff803`26712070 nt!PsDereferenceKernelStack (void)
fffff803`267880f4 nt!PspLocateSystemDll (void)
fffff803`2679380c nt!PsBootPhaseComplete (void)
fffff803`2627abc0 nt!PspJobDelete (void)
fffff803`26658074 nt!PspSetJobIoAttribution (void)
fffff803`26a5f844 nt!PspInitializeOctagonExtensionHost (void)
fffff803`266f29a0 nt!PsThawProcess (void)
fffff803`2638b344 nt!PsTransferProcessQuotaToSharedQuota (void)
fffff803`266578f0 nt!PspJobClose (void)
fffff803`263526bc nt!PspNotifyProcessBackgroundTransition (void)
fffff803`26749830 nt!PsQueryCurrentApiSetSchema (void)
fffff803`26682d60 nt!PspWriteTebImpersonationInfo (void)
fffff803`26343f78 nt!PsGetNextPartitionUnsafe (void)
fffff803`266f2fac nt!PspRemoveCpuRateControl (void)
fffff803`2678806c nt!PsLocateSystemDlls (void)
fffff803`26783d50 nt!PsEstablishWin32Callouts (void)
fffff803`266eed54 nt!PspFreezeJobTree (void)
fffff803`266b4c40 nt!PsResumeThread (void)
fffff803`266b77d0 nt!PspThreadOpen (void)
fffff803`267a75c4 nt!PspAssignPrimaryToken (void)
fffff803`267bd544 nt!PspInitializeQuotaBlock (void)
fffff803`2626ad90 nt!PsDereferencePartition (void)
fffff803`2669c6c4 nt!PspDeleteThreadSecurity (void)
fffff803`2678341c nt!PsCreateMinimalProcess (void)
fffff803`262e20b4 nt!PsInsertVirtualizedTimer (void)
fffff803`263c5fb4 nt!PspRegisterResource (void)
fffff803`26327038 nt!PspRemoveProperty (void)
fffff803`2634cad8 nt!PspReturnResourceQuota (void)
fffff803`2634a2d4 nt!PspUnlockThreadSecurityExclusive (void)
fffff803`26646370 nt!PspReadUserQuotaLimits (void)
fffff803`2665bf68 nt!PspLockRootJobFromProcess (void)
fffff803`2620a940 nt!PsBoostThreadIoEx (void)
fffff803`266f816c nt!PspSinglePrivCheck (void)
fffff803`263271d0 nt!PspInsertProperty (void)
fffff803`26658270 nt!PspSetJobLimitsJobPreCallback (void)
fffff803`266f83e4 nt!PspAllocateAndQueryProcessNotificationChannel (void)
fffff803`26761f50 nt!PsSetProcessFaultInformation (void)
fffff803`266b20c0 nt!PspExitThread (void)
fffff803`2670ff00 nt!PspSetJobLimitsJobPostCallback (void)
fffff803`263c8844 nt!PspInsertExpansionEntry (void)
fffff803`26783e30 nt!PsSetLoadImageNotifyRoutineEx (void)
fffff803`266f1a40 nt!PsConvertToGuiThread (void)
fffff803`26618e3c nt!PspInsertProcess (void)
fffff803`2626bb78 nt!PspProcessUnbindVirtualizedTimers (void)
fffff803`2665bffc nt!PspChangeProcessExecutionState (void)
fffff803`266b7618 nt!PspOneDirectionSecurityDomainCombine (void)
fffff803`26618468 nt!PspEstimateNewProcessServerSilo (void)
fffff803`26a6faf4 nt!PspInitializeJobStructures (void)
fffff803`26683200 nt!PsReferenceEffectiveToken (void)
fffff803`26a50658 nt!PsNotifyCoreDriversInitialized (void)
fffff803`26353204 nt!PspIsProcessReadyForRemoteThread (void)
fffff803`2665a5d0 nt!PspValidateJobAssignmentMemoryPartition (void)
fffff803`262c7ca4 nt!PsSetPagePriorityThread (void)
fffff803`266a668c nt!PspAttachSession (void)
fffff803`266f7d54 nt!PspSetQuotaLimits (void)
fffff803`2668bb68 nt!PspEnumJobsAndProcessesInJobHierarchy (void)
fffff803`26a3a044 nt!PspInitializeSiloStructures (void)
fffff803`2665eba0 nt!PspPrepareSystemDllInitBlock (void)
fffff803`267b5828 nt!PspSanitizeResourceLimits (void)
fffff803`2661d744 nt!PspUnlockJobMemoryLimitsExclusive (void)
fffff803`2632758c nt!PspGetProperty (void)
fffff803`26327524 nt!PspGetJobProperty (void)
fffff803`2669c2c0 nt!PspThreadDelete (void)
fffff803`266d6760 nt!PspCaptureUserProcessParameters (void)
fffff803`266f30f0 nt!PspGetRateControlSize (void)
fffff803`2661ebd0 nt!PsSetProcessTelemetryAppState (void)
fffff803`2627a4e8 nt!PsIoRateControlReference (void)
fffff803`262149a0 nt!PspRevertContainerImpersonation (void)
fffff803`265caa00 nt!PsMakeSiloContextPermanent (void)
fffff803`26288f50 nt!PspReturnQuota (void)
fffff803`26603760 nt!PsInvokeWin32Callout (void)
fffff803`262056b0 nt!PsGetPermanentSiloContext (void)
fffff803`26618a74 nt!PspUnlockJobChain (void)
fffff803`267052e0 nt!PspGetProcessProtectionRequirementsFromImage (void)
fffff803`26604b38 nt!PspSetupUserStack (void)
fffff803`266f41b4 nt!PspCombineSecurityDomains (void)
fffff803`26711b30 nt!PsCreateSiloContext (void)
fffff803`266590c0 nt!PspTerminateProcessesJobCallback (void)
fffff803`26793be0 nt!PspIsDfssEnabled (void)
fffff803`2627d7b8 nt!PsIsThreadInSilo (void)
fffff803`2669cce0 nt!PspEnforceLimitsProcessCallback (void)
fffff803`26a45b18 nt!PsInitSystem (void)
fffff803`2665ac28 nt!PspBindProcessSessionToJob (void)
fffff803`26657a58 nt!PspTerminateAllProcessesInJobHierarchy (void)
fffff803`26705728 nt!PspSetupReservedUserMappings (void)
fffff803`2665e68c nt!PspCopyAndFixupParameters (void)
fffff803`266b707c nt!PspWriteTebIdealProcessor (void)
fffff803`2670c7a0 nt!PsGetThreadExitStatus (void)
fffff803`265cfa10 nt!PspIoRateEntryActivate (void)
fffff803`266b08cc nt!PspQueryRateControlHistory (void)
fffff803`2634c780 nt!PsQueryProcessCommandLine (void)
fffff803`266ffa60 nt!PspValidateMitigationOptions (void)
fffff803`2634aecc nt!PsGetServerSiloState (void)
fffff803`26617ea4 nt!PspCreateUserProcessEcp (void)
fffff803`2671209c nt!PspDoesJobHierarchyPermitUILimits (void)
fffff803`26603850 nt!PsCallImageNotifyRoutines (void)
fffff803`266d51c0 nt!PspChangeJobMemoryUsageByProcess (void)
fffff803`266feda8 nt!PspReadIFEOPerfOptions (void)
fffff803`263599d8 nt!PspUnlockProcessExclusive (void)
fffff803`266eecec nt!PspLockRootJobExclusive (void)
fffff803`267d8bf9 nt!PspQueryJobHierarchyProcessIdList$filt$0 (void)
fffff803`263559c0 nt!PspSystemThreadStartup (void)
fffff803`2668c3e4 nt!PspLockRootJobShared (void)
fffff803`264138ba nt!PsQueryCpuQuotaInformation$filt$0 (void)
fffff803`264138d3 nt!PsQueryCpuQuotaInformation$filt$1 (void)
fffff803`267c0cf0 nt!PspOpenPartitionHandle (void)
fffff803`2665c508 nt!PspLocateInPEManifest (void)
fffff803`26658c04 nt!PspUnlockJobListExclusive (void)
fffff803`265cfb18 nt!PspIoRateEntryDeactivate (void)
fffff803`263272c0 nt!PsGetThreadProperty (void)
fffff803`2670ee60 nt!PspEnableWakeCounters (void)
fffff803`2665e954 nt!PspSetupUserProcessAddressSpace (void)
fffff803`2637d610 nt!PsGetVersion (void)
fffff803`26688c30 nt!PspChargeProcessWakeCounter (void)
fffff803`26668460 nt!PsDisableImpersonation (void)
fffff803`26783c00 nt!PsSetCreateThreadNotifyRoutineEx (void)
fffff803`267d8e33 nt!PsSuspendThread$filt$0 (void)
fffff803`2676c440 nt!PspSetProcessAffinityUpdateMode (void)
fffff803`266997f4 nt!PsEnumProcesses (void)
fffff803`26a5f89c nt!PspInitializeSecExtensionHost (void)
fffff803`266b3650 nt!PspDestroyProcessParameterOverrides (void)
fffff803`2665bb6c nt!PspUnlinkJobProcess (void)
fffff803`266e7678 nt!PspWow64GetContextThread (void)
fffff803`2657c169 nt!PsSetCpuQuotaInformation$filt$0 (void)
fffff803`266ef004 nt!PspSendWakeNotification (void)
fffff803`26711958 nt!PspStorageInsertObject (void)
fffff803`267bb018 nt!PspAllocatePartition (void)
fffff803`266e72cc nt!PspWow64SetContextThread (void)
fffff803`266b2da0 nt!PspCreateThread (void)
fffff803`26205660 nt!PsIsProcessLoggingEnabled (void)
fffff803`267d9695 nt!PspCreateProcess$filt$0 (void)
fffff803`2666bef8 nt!PspDereferenceQuotaBlock (void)
fffff803`267818b8 nt!PsEnumProcessThreads (void)
fffff803`26712c80 nt!PspDoesJobHierarchyPermitUILimitsCallback (void)
fffff803`266ae03c nt!PspSetContext (void)
fffff803`26200c80 nt!PspStorageEmptyArrayNonReadonly (void)
fffff803`2668be90 nt!PspEnforceLimitsJobPostCallback (void)
fffff803`26659700 nt!PspGetJobLockHierarchyForAssignment (void)
fffff803`26659180 nt!PspGetNextJobProcess (void)
fffff803`267d7f6a nt!PsWow64GetSupportedArchitectures$filt$0 (void)
fffff803`26a5f340 nt!PspInitPhase1 (void)
fffff803`26a3b034 nt!PspInitPhase0 (void)
fffff803`26a71ea4 nt!PspInitPhase3 (void)
fffff803`266af990 nt!PspSetContextThreadInternal (void)
fffff803`26a67d5c nt!PspInitPhase2 (void)
fffff803`2670e474 nt!PspApplyIFEOPerfOptions (void)
fffff803`2670637c nt!PspValidateJobAffinityState (void)
fffff803`266b5520 nt!PspTerminateThreadByPointer (void)
fffff803`2626adb8 nt!PsReferencePartitionSafe (void)
fffff803`26618afc nt!PspLockJobChain (void)
fffff803`2670e960 nt!PsResumeProcess (void)
fffff803`26a6b704 nt!PspInitializeSystemPartitionPhase0 (void)
fffff803`2627afb0 nt!PspSetProcessFreezeStateCallback (void)
fffff803`2635bdc8 nt!PspWow64PickBestNtdll (void)
fffff803`2661478c nt!PspInitializeProcessSecurity (void)
fffff803`266d1950 nt!PsCreateSystemThreadEx (void)
fffff803`2668c848 nt!PspGetNextChildJob (void)
fffff803`26614698 nt!PspReadIFEOMitigationAuditOptions (void)
fffff803`2661e394 nt!PspExitProcess (void)
fffff803`267d7ecd nt!PspInsertThread$filt$1 (void)
fffff803`262c79ac nt!PsSetIoPriorityThread (void)
fffff803`2627c798 nt!PspGetStorageArrayIfPossible (void)
fffff803`2627c064 nt!PspWow64SetupUserProcessAddressSpace (void)
fffff803`26667ad0 nt!PspThreadFromTicket (void)
fffff803`262d2610 nt!PsAddProcessEnergyValues (void)
fffff803`265cfd10 nt!PspCompleteHardDereferenceSiloDeferred (void)
fffff803`266e69e0 nt!PspProcessClose (void)
fffff803`26618998 nt!PspGetMemoryPartitionImplicit (void)
fffff803`2665b9e4 nt!PspApplyJobLimitsToProcess (void)
fffff803`2677f630 nt!PsRegisterSiloMonitor (void)
fffff803`262009f0 nt!PsAcquireSiloHardReference (void)
fffff803`26668e64 nt!PsOpenThread (void)
fffff803`26702c20 nt!PspSetProcessPpmPolicy (void)
fffff803`267b31e0 nt!PsStartSiloMonitor (void)
fffff803`266582a4 nt!PspSetEffectiveJobLimits (void)
fffff803`266039e0 nt!PspCallThreadNotifyRoutines (void)
fffff803`2661b3b0 nt!PspProcessDelete (void)
fffff803`266b34b4 nt!PspDeleteCreateProcessContext (void)
fffff803`26711f08 nt!PspGetNoChildProcessRestrictedPolicy (void)
fffff803`267d7ea6 nt!PspInsertThread$filt$0 (void)
fffff803`2669b62c nt!PspQueryJobHierarchyAccountingInformation (void)
fffff803`266e6f4c nt!PspWow64InitThread (void)
fffff803`2665ee0c nt!PspWow64GetSharedInformation (void)
fffff803`2634cb58 nt!PspExpandQuota (void)
fffff803`265cf7c8 nt!PspSetJobIoRateControl (void)
fffff803`266598dc nt!PspValidateJobAssignmentSiloPolicy (void)
fffff803`26689060 nt!PsQueryProcessEnergyValues (void)
fffff803`266fbbc0 nt!PsSetProcessWin32Process (void)
fffff803`262012c8 nt!PsIoRateControlOverQuotaNotify (void)
fffff803`267d8caf nt!PspQueryProcessIdListCallback$filt$0 (void)
fffff803`26784074 nt!PspSetCreateThreadNotifyRoutine (void)
fffff803`2641257a nt!PspSystemThreadStartup$filt$0 (void)
fffff803`26712440 nt!PspSetJobLimitsProcessCallback (void)
fffff803`263ccb84 nt!PsQueryCpuQuotaInformation (void)
fffff803`2670bd10 nt!PspSetBackgroundJobTree (void)
fffff803`26614528 nt!PspInheritMitigationAuditOptions (void)
fffff803`266f2e38 nt!PspAddSchedulingGroupToJobChain (void)
fffff803`266677f0 nt!PsLookupThreadByThreadId (void)
fffff803`266b517c nt!PspTerminateAllThreads (void)
fffff803`262f2484 nt!PspJobIoRateQueryHistory (void)
fffff803`266466f0 nt!PspLookupProcessQuotaBlock (void)
fffff803`262017b0 nt!PsGetJobServerSilo (void)
fffff803`2666be20 nt!PsChargeSharedPoolQuota (void)
fffff803`2665ee40 nt!PspMapSiloSharedDataView (void)
fffff803`26704a68 nt!PspGetProcessParameterOverrides (void)
fffff803`26346050 nt!PspJobCycleTimeNotificationDpcRoutine (void)
fffff803`269067cd nt!PspQueryJobHierarchyInterferenceCount$filt$0 (void)
fffff803`26668590 nt!PsRestoreImpersonation (void)
fffff803`263cc8cc nt!PspUnlockQuotaListExclusive (void)
fffff803`2665ad3c nt!PspApplyWorkingSetLimitsToProcess (void)
fffff803`262005b0 nt!PspStorageGetObject (void)
fffff803`266e7e14 nt!PspWow64ReadOrWriteThreadCpuArea (void)
fffff803`2665b998 nt!PspRequestProcessExecutionState (void)
fffff803`26667bc0 nt!PspReferenceCidTableEntry (void)
fffff803`262e9d40 nt!PspGetBaseTrapFrame (void)
fffff803`2666beac nt!PsReturnSharedPoolQuota (void)
fffff803`2665c25c nt!PspFoldProcessAccountingIntoJob (void)
fffff803`26711a08 nt!PspGetStorageArray (void)
fffff803`266f2b18 nt!PsFreezeProcess (void)
fffff803`266180a0 nt!PspGetMemoryPartitionContext (void)
fffff803`26a69b8c nt!PsInitializeQuotaSystem (void)
fffff803`266aecbc nt!PspGetContext (void)
fffff803`26355c0c nt!PspWow64ThunkProcessParameters (void)
fffff803`26659680 nt!PsAssignProcessToJobObject (void)
fffff803`266b9be8 nt!PsGetAllocatedFullProcessImageNameEx (void)
fffff803`266af088 nt!PspGetContextThreadInternal (void)
fffff803`2670ea1c nt!PspIsSiloInSilo (void)
fffff803`26659ef8 nt!PspUnlockJobsAndProcessExclusive (void)
fffff803`267bd1d0 nt!PspCreateProcess (void)
fffff803`267044b4 nt!PspSetProcessPriorityClass (void)
fffff803`26a67eac nt!PspInitializeSystemDlls (void)
fffff803`26763020 nt!PspSetThreadPpmPolicy (void)
fffff803`266b9200 nt!PspReferenceSystemDll (void)
fffff803`2620096c nt!PspHardDereferenceSiloWorker (void)
fffff803`2638b5dc nt!PsIumResumeAfterHibernate (void)
fffff803`266b7b40 nt!PspMapSystemDll (void)
fffff803`266b57d4 nt!PspTerminateProcess (void)
fffff803`26667a20 nt!PsLookupProcessByProcessId (void)
fffff803`266b6bf0 nt!PspUserThreadStartup (void)
fffff803`265d0d10 nt!PspEnableProcessWakeCounters (void)
fffff803`263c751c nt!PspAddPartitionToGlobalList (void)
fffff803`2627d7f0 nt!PsGetCurrentServerSilo (void)
fffff803`26646508 nt!PspAssignProcessQuotaBlock (void)
fffff803`26657160 nt!PspSetProcessSchedulingGroup (void)
fffff803`2634cc24 nt!PspUnlockQuotaExpansion (void)
fffff803`2665a774 nt!PspEstablishJobHierarchy (void)
fffff803`266d6e90 nt!PspValidateEnvironmentBlock (void)
fffff803`26668c20 nt!PsSwapImpersonationToken (void)
fffff803`2661db44 nt!PsReferencePartitionByHandle (void)
fffff803`2665a6c8 nt!PspValidateJobAssignmentProcessLimits (void)
fffff803`267b384c nt!PspValidateMitigationAuditOptions (void)
fffff803`266cd1d0 nt!PsTerminateSystemThread (void)
fffff803`266828b0 nt!PsAssignImpersonationToken (void)
fffff803`266fed50 nt!PspReadIFEONodeOptions (void)
fffff803`26617c44 nt!PspUpdateCreateInfo (void)
fffff803`266b2d00 nt!PspClearProcessThreadCidRefs (void)
fffff803`266ea8e0 nt!PsReferenceImpersonationToken (PsReferenceImpersonationToken)
fffff803`26cfa10c nt!PspJobNoWakeChargeLimit = <no type information>
fffff803`265faf6c nt!PsReturnProcessPageFileQuota (PsReturnProcessPageFileQuota)
fffff803`26c1df48 nt!PspThreadWorkOnBehalfLock = <no type information>
fffff803`2690bbc4 nt!PspRemoveEnclaveThreadWait (PspRemoveEnclaveThreadWait)
fffff803`2667c040 nt!PsOpenProcess (PsOpenProcess)
fffff803`26347880 nt!PsGetThreadProcessId (PsGetThreadProcessId)
fffff803`26908810 nt!PspProcessRundownWorker (PspProcessRundownWorker)
fffff803`2626c600 nt!PsGetProcessSessionId (PsGetProcessSessionId)
fffff803`26296b50 nt!PsGetProcessInheritedFromUniqueProcessId (PsGetProcessInheritedFromUniqueProcessId)
fffff803`266a1c70 nt!PspSetProcessDefaultHardErrorMode (PspSetProcessDefaultHardErrorMode)
fffff803`26358210 nt!PsGetProcessDebugPort (PsGetProcessDebugPort)
fffff803`26005a00 nt!PspHwTraceHostInterface = <no type information>
fffff803`26a95fe0 nt!PspThreadMapping = <no type information>
fffff803`269092c0 nt!PsRegisterPicoProvider (PsRegisterPicoProvider)
fffff803`263288b0 nt!PsEnterPriorityRegion (PsEnterPriorityRegion)
fffff803`26906aa0 nt!PspSetAffinityLimitCallback (PspSetAffinityLimitCallback)
fffff803`2636a6b0 nt!PsGetProcessCommonJob (PsGetProcessCommonJob)
fffff803`26c53880 nt!PspSystemQuotaBlock = <no type information>
fffff803`266a66e8 nt!PspDetachSession (PspDetachSession)
fffff803`26703720 nt!PsGetProcessSecurityPort (PsGetProcessSecurityPort)
fffff803`2657ce38 nt!PspApplyTimerDelayProcess (PspApplyTimerDelayProcess)
fffff803`2668c2e4 nt!PspLockJobExclusive (PspLockJobExclusive)
fffff803`2690b564 nt!PsDereferenceVsmEnclave (PsDereferenceVsmEnclave)
fffff803`26a95fd0 nt!PspSiloStoragePagedTypeName = <no type information>
fffff803`266183e4 nt!PspReferenceTokenForNewProcess (PspReferenceTokenForNewProcess)
fffff803`26d2d7b8 nt!PsUILanguageComitted = <no type information>
fffff803`2690c518 nt!PspLazyInitializeStorageExpansion (PspLazyInitializeStorageExpansion)
fffff803`2657cb24 nt!PspUnlockWorkingSetChangeExclusiveUnsafe (PspUnlockWorkingSetChangeExclusiveUnsafe)
fffff803`2670e7a0 nt!PsSetProcessDxgProcess (PsSetProcessDxgProcess)
fffff803`265c85e4 nt!PspApplyComponentFilterOptions (PspApplyComponentFilterOptions)
fffff803`26909a40 nt!PspTerminatePicoProcess (PspTerminatePicoProcess)
fffff803`2627b220 nt!PspExecuteJobFreezeThawCallback (PspExecuteJobFreezeThawCallback)
fffff803`26908708 nt!PspFreeCurrentThreadUserShadowStack (PspFreeCurrentThreadUserShadowStack)
fffff803`2600d9b8 nt!PsProvGuid = <no type information>
fffff803`26cfb5d0 nt!PspBamExtensionHost = <no type information>
fffff803`26906810 nt!PspQueryProcessInterferenceCountCallback (PspQueryProcessInterferenceCountCallback)
fffff803`26906f14 nt!PspSetJobSiloThreadImpersonationPolicy (PspSetJobSiloThreadImpersonationPolicy)
fffff803`2690a638 nt!PspCreatePartitionSystemProcess (PspCreatePartitionSystemProcess)
fffff803`26a96020 nt!PspActivityReferenceMapping = <no type information>
fffff803`266585a4 nt!PspIsSetJobIoAttribution (PspIsSetJobIoAttribution)
fffff803`2665c420 nt!PspEvaluateAndNotifyEmptyJob (PspEvaluateAndNotifyEmptyJob)
fffff803`26658eb0 nt!PspGetNextJob (PspGetNextJob)
fffff803`26c1dd84 nt!PspActivePartitionListLock = <no type information>
fffff803`2690695c nt!PspRemoveRateControl (PspRemoveRateControl)
fffff803`26909a10 nt!PspPicoSetContextThreadEx (PspPicoSetContextThreadEx)
fffff803`265d1bc0 nt!PsChargeProcessPagedPoolQuota (PsChargeProcessPagedPoolQuota)
fffff803`26327648 nt!PspFindPropertySetEntry (PspFindPropertySetEntry)
fffff803`2600a7f0 nt!PsDiskIoAttributionStart = <no type information>
fffff803`269040bc nt!PspSiloInitializeSuiteMask (PspSiloInitializeSuiteMask)
fffff803`26222220 nt!PsGetBaseIoPriorityThread (PsGetBaseIoPriorityThread)
fffff803`26980f60 nt!PspJobSchedulingClasses = <no type information>
fffff803`2690b7c0 nt!PsIsVsmEnclaveTerminated (PsIsVsmEnclaveTerminated)
fffff803`26621790 nt!PsAcquireProcessExitSynchronization (PsAcquireProcessExitSynchronization)
fffff803`26905bb8 nt!PspRecordCrashedProcessIntoBlackbox (PspRecordCrashedProcessIntoBlackbox)
fffff803`26903230 nt!PsIsProcessInAppSilo (PsIsProcessInAppSilo)
fffff803`2657dae0 nt!PsPicoAltSystemCallDispatch (PsPicoAltSystemCallDispatch)
fffff803`26903210 nt!PsGetSiloContainerId (PsGetSiloContainerId)
fffff803`2690a600 nt!PspClosePartitionHandle (PspClosePartitionHandle)
fffff803`26cfb9d0 nt!PspSystemMitigationOptions = <no type information>
fffff803`2657f26c nt!PspRemovePartitionFromGlobalList (PspRemovePartitionFromGlobalList)
fffff803`26657bbc nt!PspQueryJobIoAttribution (PspQueryJobIoAttribution)
fffff803`26205dd0 nt!PsGetCurrentProcessId (PsGetCurrentProcessId)
fffff803`2600a800 nt!PsDiskIoAttributionStop = <no type information>
fffff803`265d091c nt!PspCreateSilo (PspCreateSilo)
fffff803`2657d730 nt!PspTimerDelayWorkerRoutine (PspTimerDelayWorkerRoutine)
fffff803`2668c334 nt!PspGetEffectiveNoWakeCharge (PspGetEffectiveNoWakeCharge)
fffff803`26d2c2c0 nt!PspMinimumWorkingSet = <no type information>
fffff803`26904fa0 nt!PsQueryTotalCycleTimeProcess (PsQueryTotalCycleTimeProcess)
fffff803`263274c0 nt!PsGetJobProperty (PsGetJobProperty)
fffff803`269089cc nt!PspWaitForUsermodeExit (PspWaitForUsermodeExit)
fffff803`26220940 nt!PsReturnProcessPagedPoolQuota (PsReturnProcessPagedPoolQuota)
fffff803`2690b418 nt!PsDeleteVsmEnclave (PsDeleteVsmEnclave)
fffff803`26906d90 nt!PspSetJobRateControl (PspSetJobRateControl)
fffff803`26d2d7b4 nt!PspGlobalFlags = <no type information>
fffff803`26cfb5c4 nt!PsPrioritySeparation = <no type information>
fffff803`266143b0 nt!PspInheritMitigationOptions (PspInheritMitigationOptions)
fffff803`26668d50 nt!PsReferencePrimaryToken (PsReferencePrimaryToken)
fffff803`269073f0 nt!PspWaitOnAllProcessesJobCallback (PspWaitOnAllProcessesJobCallback)
fffff803`2690a198 nt!PsRequestDebugSecureProcess (PsRequestDebugSecureProcess)
fffff803`2657e8cc nt!PspIumAllocateSecurePool (PspIumAllocateSecurePool)
fffff803`266f9580 nt!PsSetProcessPriorityByClass (PsSetProcessPriorityByClass)
fffff803`266e7138 nt!PspWow64InitThreadGuestx86 (PspWow64InitThreadGuestx86)
fffff803`2669cd60 nt!PspAddAccountingValues (PspAddAccountingValues)
fffff803`265d0220 nt!PspUserApcReserveRundownRoutine (PspUserApcReserveRundownRoutine)
fffff803`2657d3b8 nt!PspSetProcessTimerDelayForKTimers (PspSetProcessTimerDelayForKTimers)
fffff803`263512e4 nt!PspLockUnlockProcessExclusive (PspLockUnlockProcessExclusive)
fffff803`26397090 nt!PspUnlockProcessShared (PspUnlockProcessShared)
fffff803`26c1e008 nt!PspProcessSequenceNumber = <no type information>
fffff803`2690b8e8 nt!PsTerminateVsmEnclave (PsTerminateVsmEnclave)
fffff803`266f300c nt!PspFreeRateControl (PspFreeRateControl)
fffff803`2657da30 nt!PsWrapApcWow64Thread (PsWrapApcWow64Thread)
fffff803`26d2c350 nt!PspJobList = <no type information>
fffff803`26d2c2b8 nt!PspLegoNotifyRoutine = <no type information>
fffff803`26904ba0 nt!PsQueryProcessExceptionFlags (PsQueryProcessExceptionFlags)
fffff803`2633c870 nt!PsGetCurrentThreadPreviousMode (PsGetCurrentThreadPreviousMode)
fffff803`26903f38 nt!PspSiloGetMultiUserTsFromRegistry (PspSiloGetMultiUserTsFromRegistry)
fffff803`266e3dd0 nt!PsGetProcessDxgProcess (PsGetProcessDxgProcess)
fffff803`267120f0 nt!PspAllocStorage (PspAllocStorage)
fffff803`269044c4 nt!PspTerminateSiloSubsystemProcesses (PspTerminateSiloSubsystemProcesses)
fffff803`26659020 nt!PspBoostJobIoPriorityCallback (PspBoostJobIoPriorityCallback)
fffff803`266d66b0 nt!PsCaptureUserProcessParameters (PsCaptureUserProcessParameters)
fffff803`266d1900 nt!PsCreateSystemThread (PsCreateSystemThread)
fffff803`26200580 nt!PsGetSiloContext (PsGetSiloContext)
fffff803`26d2d9dc nt!PsNoRemoteThreadBeforeProcessInit = <no type information>
fffff803`2627a9ec nt!PspSendJobNotification (PspSendJobNotification)
fffff803`2657bce0 nt!PspLockProcessListShared (PspLockProcessListShared)
fffff803`26908fc4 nt!PspNotifyServerSiloTermination (PspNotifyServerSiloTermination)
fffff803`26906ad8 nt!PspSetEffectiveRateControlJob (PspSetEffectiveRateControlJob)
fffff803`2657c18c nt!PspExpandLimit (PspExpandLimit)
fffff803`26715920 nt!PspSetJobEnergyTrackingStateCallback (PspSetJobEnergyTrackingStateCallback)
fffff803`2665a65c nt!PspValidateJobChainLimits (PspValidateJobChainLimits)
fffff803`26d2d748 nt!PspActiveProcessLock = <no type information>
fffff803`26907e10 nt!PspSortHandleList (PspSortHandleList)
fffff803`2623a4b0 nt!PsGetCurrentProcess (PsGetCurrentProcess)
fffff803`26c1e060 nt!PsActiveProcessHead = <no type information>
fffff803`26305b54 nt!PsSetSystemPagePriorityThread (PsSetSystemPagePriorityThread)
fffff803`2669a640 nt!PspQueryProcessAccountingInformationCallback (PspQueryProcessAccountingInformationCallback)
fffff803`26c1de08 nt!PsWin32CallBack = <no type information>
fffff803`26005a38 nt!PspSecHostInterface = <no type information>
fffff803`26d2d9e0 nt!PsEmbeddedNTMask = <no type information>
fffff803`2690afac nt!PsCreateVsmEnclave (PsCreateVsmEnclave)
fffff803`26659768 nt!PspLockJobsAndProcessExclusive (PspLockJobsAndProcessExclusive)
fffff803`26981898 nt!PspSysAppIdClaim = <no type information>
fffff803`269041a0 nt!PspSiloInitializeSystemRootSymlink (PspSiloInitializeSystemRootSymlink)
fffff803`26d2ca00 nt!PspWowArm32SystemDllData = <no type information>
fffff803`26903120 nt!PsFreeSiloContextSlot (PsFreeSiloContextSlot)
fffff803`26906c1c nt!PspSetJobMemoryPartition (PspSetJobMemoryPartition)
fffff803`2690bc74 nt!PspSelectVsmEnclaveByNumber (PspSelectVsmEnclaveByNumber)
fffff803`26cfb798 nt!PsAltSystemCallHandlers = <no type information>
fffff803`26906b04 nt!PspSetJobIoRateControlForVolume (PspSetJobIoRateControlForVolume)
fffff803`2690c614 nt!PspStorageFreeSlot (PspStorageFreeSlot)
fffff803`26614610 nt!PspReadIFEOMitigationOptions (PspReadIFEOMitigationOptions)
fffff803`269056a8 nt!PspQueryLastCallThread (PspQueryLastCallThread)
fffff803`2657f1f0 nt!PspVsmLogBugCheckCallback (PspVsmLogBugCheckCallback)
fffff803`26c1dfd0 nt!PsSiloContextNonPagedType = <no type information>
fffff803`26907be0 nt!PspSetupUserFiberShadowStack (PspSetupUserFiberShadowStack)
fffff803`26904dc0 nt!PsSetProcessSecurityPort (PsSetProcessSecurityPort)
fffff803`26711d58 nt!PsIsServiceSession (PsIsServiceSession)
fffff803`26357ae0 nt!PsGetProcessProtection (PsGetProcessProtection)
fffff803`2626832c nt!PspWriteProcessSecurityDomain (PspWriteProcessSecurityDomain)
fffff803`266d6da8 nt!PspCopyUnicodeString (PspCopyUnicodeString)
fffff803`2657c2b0 nt!PsGetCurrentThreadStackLimit (PsGetCurrentThreadStackLimit)
fffff803`26c4c3a8 nt!PsWatchEnabled = <no type information>
fffff803`26907ba0 nt!PspSetVmProcessorHostProcessWorkerRoutine (PspSetVmProcessorHostProcessWorkerRoutine)
fffff803`2657cad8 nt!PspUnlockThreadSecurityShared (PspUnlockThreadSecurityShared)
fffff803`26cfa108 nt!PspSystemNoWakeChargeLimit = <no type information>
fffff803`26c2a260 nt!PsLoadedModuleResource = <no type information>
fffff803`26272780 nt!PspUnlockQuotaListShared (PspUnlockQuotaListShared)
fffff803`269034f0 nt!PspAssignSiloSystemRootPath (PspAssignSiloSystemRootPath)
fffff803`2690bee0 nt!PspEnumProcessesInJobHierarchy (PspEnumProcessesInJobHierarchy)
fffff803`26903650 nt!PspCompleteServerSiloShutdownDeferred (PspCompleteServerSiloShutdownDeferred)
fffff803`26909630 nt!PspCreatePicoThread (PspCreatePicoThread)
fffff803`26cfb648 nt!PsNtosImageEnd = <no type information>
fffff803`26c1deb0 nt!PspSiloMonitorList = <no type information>
fffff803`265c82f4 nt!PspSetRedirectionTrustPolicy (PspSetRedirectionTrustPolicy)
fffff803`266b2c28 nt!PsCaptureExceptionPort (PsCaptureExceptionPort)
fffff803`2652bb90 nt!PspIoRateEntryVolumeCompare (PspIoRateEntryVolumeCompare)
fffff803`267242e0 nt!PspCloseActivityReference (PspCloseActivityReference)
fffff803`26a5f784 nt!PspInitializeHwTraceCallouts (PspInitializeHwTraceCallouts)
fffff803`26980d64 nt!PspFixedQuantums = <no type information>
fffff803`26906164 nt!PspApplyWorkingSetLimits (PspApplyWorkingSetLimits)
fffff803`26350870 nt!PsIsWin32KFilterAuditEnabled (PsIsWin32KFilterAuditEnabled)
fffff803`26d2e108 nt!PspStorageExpansionBitmapBits = <no type information>
fffff803`269031b0 nt!PsGetCurrentServerSiloName (PsGetCurrentServerSiloName)
fffff803`26205df0 nt!PsIsCurrentThreadInServerSilo (PsIsCurrentThreadInServerSilo)
fffff803`26cfa270 nt!PsDfssShortTermSharingMS = <no type information>
fffff803`265d0a40 nt!PspAssociateCompletionPortCallback (PspAssociateCompletionPortCallback)
fffff803`2657cd18 nt!PspUnlockProcessSecurityShared (PspUnlockProcessSecurityShared)
fffff803`26981340 nt!PspSystemRootTargetPrefix = <no type information>
fffff803`26667ed0 nt!PsQueryProcessAttributesByToken (PsQueryProcessAttributesByToken)
fffff803`2657dc44 nt!PsDispatchIumService (PsDispatchIumService)
fffff803`26cfb470 nt!PsNtosImageBase = <no type information>
fffff803`26705570 nt!PsGetProcessExitTime (PsGetProcessExitTime)
fffff803`26d2c260 nt!PspSystemDlls = <no type information>
fffff803`26c1df00 nt!PspJobNotificationList = <no type information>
fffff803`26715950 nt!PspGetPicoThreadContext (PspGetPicoThreadContext)
fffff803`26205dd0 nt!PsGetCurrentThreadProcessId (PsGetCurrentThreadProcessId)
fffff803`26cfba98 nt!PspEnclaveDispatch = <no type information>
fffff803`2690a358 nt!PspIumGetSystemData (PspIumGetSystemData)
fffff803`2690a0f8 nt!PsIumGetOnDemandDebugChallenge (PsIumGetOnDemandDebugChallenge)
fffff803`2657bee8 nt!PspGetHostSiloStorage (PspGetHostSiloStorage)
fffff803`26907e2c nt!PspUmsInitThread (PspUmsInitThread)
fffff803`26657b30 nt!PspRemoveIoAttribution (PspRemoveIoAttribution)
fffff803`263c77a0 nt!PsIsDiskCountersEnabled (PsIsDiskCountersEnabled)
fffff803`26906408 nt!PspEstablishDfssHierarchy (PspEstablishDfssHierarchy)
fffff803`26905ff4 nt!PsReportProcessMemoryLimitViolation (PsReportProcessMemoryLimitViolation)
fffff803`26a96030 nt!PspProcessMapping = <no type information>
fffff803`266b366c nt!PspCreateUserContext (PspCreateUserContext)
fffff803`26d2c1e8 nt!PspProcessNodeAssignment = <no type information>
fffff803`266afdc4 nt!PspInsertThread (PspInsertThread)
fffff803`26904e28 nt!PsSynchronizeWithThreadInsertion (PsSynchronizeWithThreadInsertion)
fffff803`269088c0 nt!PspProcessRundownWorkerSingle (PspProcessRundownWorkerSingle)
fffff803`26cfa274 nt!PsDfssLongTermSharingMS = <no type information>
fffff803`26700170 nt!PspJobNotificationWorker (PspJobNotificationWorker)
fffff803`26d2c310 nt!PspSystemThreadAssignment = <no type information>
fffff803`26a91a38 nt!PspGetSystemDllSecureHandle (PspGetSystemDllSecureHandle)
fffff803`269818c8 nt!PspWorkingSetPrivileges = <no type information>
fffff803`26909fcc nt!PspWow64InitThreadGuestArm (PspWow64InitThreadGuestArm)
fffff803`266467ec nt!PspHashKeyValue (PspHashKeyValue)
fffff803`2627d838 nt!PsIsProcessInSilo (PsIsProcessInSilo)
fffff803`26291fe0 nt!PsIsHostSilo (PsIsHostSilo)
fffff803`2665bae4 nt!PspUnlockJobMemoryLimitsShared (PspUnlockJobMemoryLimitsShared)
fffff803`26c1e020 nt!PspProcessRundownWorkItem = <no type information>
fffff803`26cfa27c nt!PspCurDirDevicesSkippedForDlls = <no type information>
fffff803`26981380 nt!PspSystemRootString = <no type information>
fffff803`2657c400 nt!PsSetJobProperty (PsSetJobProperty)
fffff803`2657bec0 nt!PsGetServerSiloActiveConsoleId (PsGetServerSiloActiveConsoleId)
fffff803`269060a0 nt!PspAddProcessToWorkingSetChangeList (PspAddProcessToWorkingSetChangeList)
fffff803`26d2d874 nt!PspForegroundQuantum = <no type information>
fffff803`26d24600 nt!PspTimeZoneStateBuffer = <no type information>
fffff803`2690c874 nt!PspSetContextState (PspSetContextState)
fffff803`2657d290 nt!PspJobIoRateVolumeEntryRemove (PspJobIoRateVolumeEntryRemove)
fffff803`267100d4 nt!PspGetStandardHandleList (PspGetStandardHandleList)
fffff803`26712d10 nt!PsQuitNextProcess (PsQuitNextProcess)
fffff803`263634c0 nt!PsGetCurrentProcessByThread (PsGetCurrentProcessByThread)
fffff803`26d2ca50 nt!PspVsmEnclaveRuntimeDllData = <no type information>
fffff803`26d2d978 nt!PspUserThreadStart = <no type information>
fffff803`266ae470 nt!PspGetSetContextInternal (PspGetSetContextInternal)
fffff803`2657bef8 nt!PspGetServerSiloStatePointer (PspGetServerSiloStatePointer)
fffff803`269093e0 nt!PspCreatePicoProcess (PspCreatePicoProcess)
fffff803`26cfa1e0 nt!PspIumLogBuffer = <no type information>
fffff803`2670e5a0 nt!PsChargeProcessWakeCounter (PsChargeProcessWakeCounter)
fffff803`26c1df40 nt!PspNetRateControlExtensionHost = <no type information>
fffff803`2657d03c nt!PspJobIoRateVolumeEntryInsert (PspJobIoRateVolumeEntryInsert)
fffff803`26d2db80 nt!psMUITest = <no type information>
fffff803`2627a584 nt!PspIoRateEntryIoControlReference (PspIoRateEntryIoControlReference)
fffff803`26d2d9cc nt!PspCreateThreadNotifyRoutineCount = <no type information>
fffff803`26d2d686 nt!PspUseJobSchedulingClasses = <no type information>
fffff803`2690a064 nt!PsIumEnableOnDemandDebugWithResponse (PsIumEnableOnDemandDebugWithResponse)
fffff803`26983710 nt!PspJobInfoLengths = <no type information>
fffff803`2657c79c nt!PspDetachThreadFromUmsCompletionList (PspDetachThreadFromUmsCompletionList)
fffff803`269035d8 nt!PspBeginSiloTeardown (PspBeginSiloTeardown)
fffff803`262f1978 nt!PspSetProcessPriorityByClass (PspSetProcessPriorityByClass)
fffff803`26d2e410 nt!PsWowX86SharedInformation = <no type information>
fffff803`26200050 nt!PsGetJobSilo (PsGetJobSilo)
fffff803`2657c270 nt!PsGetBaseTrapFrame (PsGetBaseTrapFrame)
fffff803`265c8344 nt!PspProcessDynamicEnforcedAddressRanges (PspProcessDynamicEnforcedAddressRanges)
fffff803`2657f12c nt!PspMapView (PspMapView)
fffff803`26cf4350 nt!PspOctExtensionHost = <no type information>
fffff803`26359520 nt!PsGetProcessExitProcessCalled (PsGetProcessExitProcessCalled)
fffff803`2627d880 nt!PsGetProcessServerSilo (PsGetProcessServerSilo)
fffff803`26703860 nt!PspValidateCreateProcessProtection (PspValidateCreateProcessProtection)
fffff803`26d2deb8 nt!PspShutdownThread = <no type information>
fffff803`26d55260 nt!PsIntegrityCheckEnabled = <no type information>
fffff803`26658680 nt!PspSetProcessEnergyTrackingStateCallback (PspSetProcessEnergyTrackingStateCallback)
fffff803`26272090 nt!PsDetachSiloFromCurrentThread (PsDetachSiloFromCurrentThread)
fffff803`2690c4a8 nt!PspFreeStorage (PspFreeStorage)
fffff803`2657f324 nt!PsAdjustBasicEnclaveThreadList (PsAdjustBasicEnclaveThreadList)
fffff803`26703630 nt!PsSetThreadWin32Thread (PsSetThreadWin32Thread)
fffff803`26279d84 nt!PsBoostThreadIoQoS (PsBoostThreadIoQoS)
fffff803`262be9e0 nt!PsGetThreadServerSilo (PsGetThreadServerSilo)
fffff803`269080c0 nt!PsSetLegoNotifyRoutine (PsSetLegoNotifyRoutine)
fffff803`26658c44 nt!PspLockJobListExclusive (PspLockJobListExclusive)
fffff803`269035f0 nt!PspCompleteServerSiloShutdown (PspCompleteServerSiloShutdown)
fffff803`269099e0 nt!PspPicoGetContextThreadEx (PspPicoGetContextThreadEx)
fffff803`269050c0 nt!PsSwapProcessWorkingSet (PsSwapProcessWorkingSet)
fffff803`26cfa114 nt!PsSystemRootSiloContextSlot = <no type information>
fffff803`266b2cc8 nt!PspEmptyPropertySet (PspEmptyPropertySet)
fffff803`2657bcd0 nt!PspInitializeProcessLock (PspInitializeProcessLock)
fffff803`2657c634 nt!PspAttachThreadToUmsCompletionList (PspAttachThreadToUmsCompletionList)
fffff803`267158e0 nt!PspEnableProcessTimerVirtualization (PspEnableProcessTimerVirtualization)
fffff803`26903928 nt!PspDeleteExternalServerSiloState (PspDeleteExternalServerSiloState)
fffff803`26d2d840 nt!PspQuotaBlockTable = <no type information>
fffff803`269052f8 nt!PspEnableAltSystemCallHandling (PspEnableAltSystemCallHandling)
fffff803`2670d4e8 nt!PspDecodeMitigationExecuteOptions (PspDecodeMitigationExecuteOptions)
fffff803`266b79dc nt!PspCheckForInvalidAccessByProtection (PspCheckForInvalidAccessByProtection)
fffff803`263cd010 nt!PspSetLdtInformation (PspSetLdtInformation)
fffff803`265d0a14 nt!PspJobHasChildren (PspJobHasChildren)
fffff803`26cfa044 nt!PsObjectDirectorySiloContextSlot = <no type information>
fffff803`26707e60 nt!PspVsmEnclaveHashDeallocator (PspVsmEnclaveHashDeallocator)
fffff803`26277fe0 nt!PsGetCurrentThreadTeb (PsGetCurrentThreadTeb)
fffff803`26a963b0 nt!PspMemoryReserveObjectNames = <no type information>
fffff803`269818e8 nt!PspSystemRootSymlinkName = <no type information>
fffff803`266cc750 nt!PsRevertToSelf (PsRevertToSelf)
fffff803`26d2d680 nt!PsInstallUILanguageId = <no type information>
fffff803`26342240 nt!PsGetThreadId (PsGetThreadId)
fffff803`26659370 nt!PspIsProcessInJob (PspIsProcessInJob)
fffff803`2690bb68 nt!PspReleaseEnclaveThread (PspReleaseEnclaveThread)
fffff803`26c1dda0 nt!PspVsmLogCallbackRecord = <no type information>
fffff803`2657eec8 nt!PspIumReplenishPartitionPages (PspIumReplenishPartitionPages)
fffff803`26d2d9d4 nt!PspLoadImageNotifyRoutineCount = <no type information>
fffff803`26705510 nt!PsGetNextProcessEx (PsGetNextProcessEx)
fffff803`26d2c180 nt!PspRundownProcessCache = <no type information>
fffff803`26696a70 nt!PsReferenceImpersonationTokenEx (PsReferenceImpersonationTokenEx)
fffff803`26903744 nt!PspConvertSiloToServerSilo (PspConvertSiloToServerSilo)
fffff803`26980e18 nt!PspVariableQuantums = <no type information>
fffff803`26c1dfd8 nt!PsSiloContextPagedType = <no type information>
fffff803`26208270 nt!PsDereferenceSiloContext (PsDereferenceSiloContext)
fffff803`26c02b10 nt!PspActivePartitionListHead = <no type information>
fffff803`2668bd6c nt!PspCallJobHierarchyCallbacks (PspCallJobHierarchyCallbacks)
fffff803`26347db0 nt!PsGetProcessSessionIdEx (PsGetProcessSessionIdEx)
fffff803`2632efd0 nt!PsGetCurrentProcessWow64Process (PsGetCurrentProcessWow64Process)
fffff803`26cfa280 nt!PspSehValidationPolicy = <no type information>
fffff803`26d2c220 nt!PspJobAssignmentLock = <no type information>
fffff803`266ef380 nt!PsReleaseProcessExitSynchronization (PsReleaseProcessExitSynchronization)
fffff803`26712e50 nt!PsGetSiloMonitorContextSlot (PsGetSiloMonitorContextSlot)
fffff803`26605b60 nt!PsSetCurrentThreadPrefetching (PsSetCurrentThreadPrefetching)
fffff803`26908ba0 nt!PsSetContextThread (PsSetContextThread)
fffff803`266e5580 nt!PspIoMiniPacketCallbackRoutine (PspIoMiniPacketCallbackRoutine)
fffff803`26783da0 nt!PsSetCreateProcessNotifyRoutineEx (PsSetCreateProcessNotifyRoutineEx)
fffff803`265d8b04 nt!PsGetSiloBySessionId (PsGetSiloBySessionId)
fffff803`26d2d684 nt!PsMachineUILanguageId = <no type information>
fffff803`26c1de20 nt!PspPicoProviderRanges = <no type information>
fffff803`266b07c0 nt!PspEnforceLimitsJobPreCallback (PspEnforceLimitsJobPreCallback)
fffff803`266b06b4 nt!PspComputeQuantumAndPriority (PspComputeQuantumAndPriority)
fffff803`269083ec nt!PsTerminateMinimalProcess (PsTerminateMinimalProcess)
fffff803`26981350 nt!PspSystem32String = <no type information>
fffff803`26d2c148 nt!PspEnforcementSequenceNumber = <no type information>
fffff803`26711300 nt!PspIsSetJobIoAttributionJobPreCallback (PspIsSetJobIoAttributionJobPreCallback)
fffff803`26350be0 nt!PspDeleteKernelStack (PspDeleteKernelStack)
fffff803`26c1de40 nt!PspPicoProviderRoutines = <no type information>
fffff803`2665bb40 nt!PspLockJobMemoryLimitsShared (PspLockJobMemoryLimitsShared)
fffff803`26983030 nt!PspDefaultResourceNames = <no type information>
fffff803`26903c64 nt!PspQueueDeferredWorkAndWait (PspQueueDeferredWorkAndWait)
fffff803`2677f610 nt!PsAllocSiloContextSlot (PsAllocSiloContextSlot)
fffff803`26299450 nt!PsGetCurrentSilo (PsGetCurrentSilo)
fffff803`26c5428c nt!PsWin32CalloutsEstablished = <no type information>
fffff803`26905e00 nt!PspTrySetProcessPebThrottlingFlags (PspTrySetProcessPebThrottlingFlags)
fffff803`26657fb0 nt!PspSetCpuRateControlJobPostCallback (PspSetCpuRateControlJobPostCallback)
fffff803`2657c310 nt!PsGetThreadCreateTime (PsGetThreadCreateTime)
fffff803`2665f7d4 nt!PspSetProcessShortName (PspSetProcessShortName)
fffff803`26d2d9c4 nt!PspCreateProcessNotifyRoutineCount = <no type information>
fffff803`26296c08 nt!PsEncodeThreadWorkOnBehalfTicket (PsEncodeThreadWorkOnBehalfTicket)
fffff803`266ffb80 nt!PsDereferenceImpersonationToken (PsDereferenceImpersonationToken)
fffff803`26906520 nt!PspGetMemoryPartitionFromJobList (PspGetMemoryPartitionFromJobList)
fffff803`26328a20 nt!PsGetThreadWin32Thread (PsGetThreadWin32Thread)
fffff803`266af930 nt!PsWow64GetProcessMachine (PsWow64GetProcessMachine)
fffff803`2633c3c0 nt!PsTimerResolutionActive (PsTimerResolutionActive)
fffff803`26357d10 nt!PsGetProcessSequenceNumber (PsGetProcessSequenceNumber)
fffff803`2690b858 nt!PsReferenceVsmEnclave (PsReferenceVsmEnclave)
fffff803`2635aba0 nt!PsGetThreadFreezeCount (PsGetThreadFreezeCount)
fffff803`2657c894 nt!PspReadProcessSecurityDomain (PspReadProcessSecurityDomain)
fffff803`267c3e40 nt!PsGetSiloIdentifier (PsGetSiloIdentifier)
fffff803`262e2258 nt!PsGetDefaultWsMaximum (PsGetDefaultWsMaximum)
fffff803`26d2dbc0 nt!PspSystemDllInitBlock = <no type information>
fffff803`26909b80 nt!PsRemoveLoadImageNotifyRoutine (PsRemoveLoadImageNotifyRoutine)
fffff803`26cfb700 nt!PspDisableControlFlowGuardExportSuppression = <no type information>
fffff803`26cfb960 nt!PspDamExtensionHost = <no type information>
fffff803`266e7234 nt!PspWow64SetupCpuArea (PspWow64SetupCpuArea)
fffff803`26905058 nt!PsSetProcessHandleTracingInformation (PsSetProcessHandleTracingInformation)
fffff803`26908bc0 nt!PsUnregisterSiloMonitor (PsUnregisterSiloMonitor)
fffff803`2690a8b0 nt!PsCallEnclave (PsCallEnclave)
fffff803`266fd0d4 nt!PspQueryJobHierarchyProcessIdList (PspQueryJobHierarchyProcessIdList)
fffff803`269033f0 nt!PsTerminateServerSilo (PsTerminateServerSilo)
fffff803`262ccaa0 nt!PspUnlockProcessListShared (PspUnlockProcessListShared)
fffff803`26c1dec0 nt!PsVmProcessorHostTransitionEvent = <no type information>
fffff803`263977a0 nt!PspLockProcessShared (PspLockProcessShared)
fffff803`2657f248 nt!PsReferencePartition (PsReferencePartition)
fffff803`26346f10 nt!PsGetProcessPeb (PsGetProcessPeb)
fffff803`266b75ec nt!PsQuerySystemDllInfo (PsQuerySystemDllInfo)
fffff803`263977a0 nt!PspLockProcessSecurityShared (PspLockProcessSecurityShared)
fffff803`2665bf38 nt!PspLockJobConditionally (PspLockJobConditionally)
fffff803`2657c82c nt!PspLockProcessSharedUnsafe (PspLockProcessSharedUnsafe)
fffff803`2670a2c4 nt!PspApplyWin32kFilterOptions (PspApplyWin32kFilterOptions)
fffff803`26d221c0 nt!PsLoadedModuleSpinLock = <no type information>
fffff803`2657f600 nt!PsFreeEnclaveModuleInfo (PsFreeEnclaveModuleInfo)
fffff803`26d2c140 nt!PspRundownNeededCount = <no type information>
fffff803`26908b80 nt!PsGetContextThread (PsGetContextThread)
fffff803`2657c38c nt!PsSetExeModerationState (PsSetExeModerationState)
fffff803`265c8288 nt!PspGetRedirectionTrustPolicy (PspGetRedirectionTrustPolicy)
fffff803`2657e644 nt!PspIumAllocatePartitionState (PspIumAllocatePartitionState)
fffff803`26906f60 nt!PspSetJobTimeLimitCallback (PspSetJobTimeLimitCallback)
fffff803`269032e4 nt!PsRootSiloInformation (PsRootSiloInformation)
fffff803`269075cc nt!PspAssignProcessToJobList (PspAssignProcessToJobList)
fffff803`26c1de00 nt!PspFreezeTimeBiasAddress = <no type information>
fffff803`2690a730 nt!PspDeletePartition (PspDeletePartition)
fffff803`2626d6b0 nt!PsGetProcessStartKey (PsGetProcessStartKey)
fffff803`26c12b38 nt!PsTrustletGenericMapping = <no type information>
fffff803`26d2d980 nt!PspWorkOnBehalfEncodingKey = <no type information>
fffff803`26907cbc nt!PspSetupUserShadowStack (PspSetupUserShadowStack)
fffff803`26d2c2c8 nt!PspMaximumWorkingSet = <no type information>
fffff803`263508a0 nt!PsIsWin32KFilterAuditEnabledForProcess (PsIsWin32KFilterAuditEnabledForProcess)
fffff803`26c1dd50 nt!PspStorageBitmapLock = <no type information>
fffff803`26360cc0 nt!PsGetJobLock (PsGetJobLock)
fffff803`2657e7a4 nt!PspIumAllocatePhysicalPages (PspIumAllocatePhysicalPages)
fffff803`266114c0 nt!PspAllocateProcess (PspAllocateProcess)
fffff803`2627c730 nt!PsIsProtectedProcess (PsIsProtectedProcess)
fffff803`26d2c190 nt!PspNoWakeChargeReferencedProcess = <no type information>
fffff803`26a96000 nt!PspPartitionMapping = <no type information>
fffff803`2626ab30 nt!PsGetProcessId (PsGetProcessId)
fffff803`26d2dbb8 nt!PspUserFiberStart = <no type information>
fffff803`266f95b0 nt!PspSetProcessForegroundBackgroundRequest (PspSetProcessForegroundBackgroundRequest)
fffff803`2669d060 nt!PsQueryStatisticsProcess (PsQueryStatisticsProcess)
fffff803`26c1dde0 nt!PspIumWorkItem = <no type information>
fffff803`269818a8 nt!PspPackagedAppClaim = <no type information>
fffff803`267b3390 nt!PspInvokeCreateCallback (PspInvokeCreateCallback)
fffff803`263453a0 nt!PsIsWin32KFilterEnabledForProcess (PsIsWin32KFilterEnabledForProcess)
fffff803`26cfb4f0 nt!PsHalImageBase = <no type information>
fffff803`262b8f20 nt!PsGetPagePriorityThread (PsGetPagePriorityThread)
fffff803`26658a58 nt!PspIoRateEntryInitialize (PspIoRateEntryInitialize)
fffff803`26009c30 nt!PsIoRateControlStart = <no type information>
fffff803`26783e00 nt!PsSetCreateProcessNotifyRoutineEx2 (PsSetCreateProcessNotifyRoutineEx2)
fffff803`26903290 nt!PsReplaceSiloContext (PsReplaceSiloContext)
fffff803`26cfbb50 nt!PspResourceFlags = <no type information>
fffff803`2624c150 nt!PsIsSystemProcess (PsIsSystemProcess)
fffff803`262ad360 nt!PspChargeQuota (PspChargeQuota)
fffff803`2657fa8c nt!PsLoadVsmEnclaveData (PsLoadVsmEnclaveData)
fffff803`2657c320 nt!PsQueryActivityModerationUserSettings (PsQueryActivityModerationUserSettings)
fffff803`26324b90 nt!PsGetCurrentThreadWin32Thread (PsGetCurrentThreadWin32Thread)
fffff803`26cfbc68 nt!PspHardenedMitigationOptionsMap = <no type information>
fffff803`26907488 nt!PsSetVmProcessorHostProcess (PsSetVmProcessorHostProcess)
fffff803`267063e8 nt!PspSetEnergyTrackingStateJobTree (PspSetEnergyTrackingStateJobTree)
fffff803`266146f4 nt!PspReadOptionsMapFromIFEO (PspReadOptionsMapFromIFEO)
fffff803`269818d8 nt!PspDefaultSiloName = <no type information>
fffff803`266b075c nt!PspComputeQuantum (PspComputeQuantum)
fffff803`2602da90 nt!PsIoRateControlStop = <no type information>
fffff803`26277f88 nt!PsQueryThreadStartAddress (PsQueryThreadStartAddress)
fffff803`26339090 nt!PsGetCurrentThreadId (PsGetCurrentThreadId)
fffff803`2657c480 nt!PspGetFreezeState (PspGetFreezeState)
fffff803`26cfb7e0 nt!PsPartitionType = <no type information>
fffff803`26005a10 nt!PspMmcssHostInterface = <no type information>
fffff803`26903100 nt!PspDfssConfigurationChangeHandler (PspDfssConfigurationChangeHandler)
fffff803`26c1df20 nt!PspJobNotificationItem = <no type information>
fffff803`26909f00 nt!PsSuspendProcess (PsSuspendProcess)
fffff803`263cd010 nt!PspSetLdtSize (PspSetLdtSize)
fffff803`269072c8 nt!PspSubtractAccountingValues (PspSubtractAccountingValues)
fffff803`2690a770 nt!PspTeardownPartition (PspTeardownPartition)
fffff803`2690c584 nt!PspStorageEmptyArray (PspStorageEmptyArray)
fffff803`266b7988 nt!PsTestProtectedProcessIncompatibility (PsTestProtectedProcessIncompatibility)
fffff803`26c1de18 nt!PspPicoRegistrationDisabled = <no type information>
fffff803`26981868 nt!PspLargePageDLLKeyName = <no type information>
fffff803`267101b8 nt!PspLogAuditTerminateRemoteProcessEvent (PspLogAuditTerminateRemoteProcessEvent)
fffff803`266593a0 nt!PsIsJobParentImmutable (PsIsJobParentImmutable)
fffff803`262b8f60 nt!PsGetIoPriorityThread (PsGetIoPriorityThread)
fffff803`26783dc0 nt!PsSetCreateThreadNotifyRoutine (PsSetCreateThreadNotifyRoutine)
fffff803`269069f4 nt!PspSendNoWakeChargeLimitNotification (PspSendNoWakeChargeLimitNotification)
fffff803`26d2d9c8 nt!PspCreateProcessNotifyRoutineExCount = <no type information>
fffff803`2657cd90 nt!PsGetJobLastThrottledIoTime (PsGetJobLastThrottledIoTime)
fffff803`263240d0 nt!PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion (PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion)
fffff803`2626d6d0 nt!PsGetCurrentProcessSessionId (PsGetCurrentProcessSessionId)
fffff803`269818f8 nt!PspProtectedRuntimeData = <no type information>
fffff803`2690be04 nt!PspVsmEnclaveHashAllocator (PspVsmEnclaveHashAllocator)
fffff803`26783f50 nt!PsSetCreateProcessNotifyRoutine (PsSetCreateProcessNotifyRoutine)
fffff803`26c0f178 nt!PspJobTimeLimitsCount = <no type information>
fffff803`26cfa090 nt!PspSystemMitigationOptionsLength = <no type information>
fffff803`26c01610 nt!PsKernelRangeList = <no type information>
fffff803`2670e7b0 nt!PsQueryProcessSignatureMitigationPolicy (PsQueryProcessSignatureMitigationPolicy)
fffff803`26980d6c nt!PspPriorityClassRank = <no type information>
fffff803`2690892c nt!PspRundownProcess (PspRundownProcess)
fffff803`26d23540 nt!PspHostSiloGlobals = <no type information>
fffff803`26981888 nt!PspNullGuid = <no type information>
fffff803`26d2d6b0 nt!PsDefaultSystemLocaleId = <no type information>
fffff803`2634ce30 nt!PspLockQuotaExpansion (PspLockQuotaExpansion)
fffff803`263cd010 nt!PspQueryDescriptorThread (PspQueryDescriptorThread)
fffff803`2657c470 nt!PsSetProcessPriorityClass (PsSetProcessPriorityClass)
fffff803`269030c0 nt!PspDeleteProtectedProcessParameters (PspDeleteProtectedProcessParameters)
fffff803`266ffce8 nt!PspWow64SetupUserStack (PspWow64SetupUserStack)
fffff803`262fdec0 nt!PsIsThreadTerminating (PsIsThreadTerminating)
fffff803`2661d6f4 nt!PspNotificationLimitRateControlToleranceIntervalField (PspNotificationLimitRateControlToleranceIntervalField)
fffff803`26cfb590 nt!PsSecureSystemProcess = <no type information>
fffff803`269091d0 nt!PsRegisterAltSystemCallHandler (PsRegisterAltSystemCallHandler)
fffff803`26cfb410 nt!PsProcessType = <no type information>
fffff803`266b9250 nt!PsReferenceProcessFilePointer (PsReferenceProcessFilePointer)
fffff803`2657db00 nt!PspSetPicoThreadDescriptorBase (PspSetPicoThreadDescriptorBase)
fffff803`2626d714 nt!PsGetServerSiloGlobals (PsGetServerSiloGlobals)
fffff803`2665ac78 nt!PspIncrementJobChainProcessCounts (PspIncrementJobChainProcessCounts)
fffff803`26201750 nt!PsGetJobSessionId (PsGetJobSessionId)
fffff803`2627b2f0 nt!PsGetEffectiveServerSilo (PsGetEffectiveServerSilo)
fffff803`26cfa2d8 nt!PspIumFreeMapping = <no type information>
fffff803`269066ac nt!PspModifyAncestorBits (PspModifyAncestorBits)
fffff803`26cfb768 nt!PspDfssConfigurationKey = <no type information>
fffff803`269077bc nt!PspDeleteObjectAccessState (PspDeleteObjectAccessState)
fffff803`26268180 nt!PspLockProcessExclusive (PspLockProcessExclusive)
fffff803`26d2c9b0 nt!PspWowX86SystemDllData = <no type information>
fffff803`26983130 nt!PspPartitionInfoDetails = <no type information>
fffff803`266b72bc nt!PspDisablePrimaryTokenExchange (PspDisablePrimaryTokenExchange)
fffff803`267085bc nt!PspHardenMitigationOptions (PspHardenMitigationOptions)
fffff803`26a5f72c nt!PspInitializeDesktopActivityModeratorCallouts (PspInitializeDesktopActivityModeratorCallouts)
fffff803`2657bd08 nt!PspReadDfssConfigurationValues (PspReadDfssConfigurationValues)
fffff803`267156a0 nt!PsNotifyWriteToExecutableMemory (PsNotifyWriteToExecutableMemory)
fffff803`267c3250 nt!PsInsertPermanentSiloContext (PsInsertPermanentSiloContext)
fffff803`26cfbaa0 nt!PspActivityReferenceObjectType = <no type information>
fffff803`26330190 nt!PsGetProcessWow64Process (PsGetProcessWow64Process)
fffff803`26342fa0 nt!PsGetProcessWin32Process (PsGetProcessWin32Process)
fffff803`26327150 nt!PspValidateThread (PspValidateThread)
fffff803`26981370 nt!PspSystemDriveString = <no type information>
fffff803`2635616c nt!PspWow64CopyUnicodeString (PspWow64CopyUnicodeString)
fffff803`26005a18 nt!PspOctHostInterface = <no type information>
fffff803`2657d174 nt!PspJobIoRateVolumeEntryReference (PspJobIoRateVolumeEntryReference)
fffff803`26d2dbb0 nt!PspQuotaDatabaseKey = <no type information>
fffff803`2690be28 nt!PsGetPreviousProcess (PsGetPreviousProcess)
fffff803`2690c790 nt!PspStorageReplaceObject (PspStorageReplaceObject)
fffff803`269053e4 nt!PspProcessDynamicEHContinuationTargets (PspProcessDynamicEHContinuationTargets)
fffff803`26783de0 nt!PsSetLoadImageNotifyRoutine (PsSetLoadImageNotifyRoutine)
fffff803`269085c4 nt!PspCatchCriticalBreak (PspCatchCriticalBreak)
fffff803`26d2c198 nt!PspAffinityUpdateLock = <no type information>
fffff803`2635a480 nt!PsReferenceSiloContext (PsReferenceSiloContext)
fffff803`269066e4 nt!PspNetRateControlDispatch (PspNetRateControlDispatch)
fffff803`26709060 nt!PspInheritQuota (PspInheritQuota)
fffff803`269087a0 nt!PspFreezeProcessWorker (PspFreezeProcessWorker)
fffff803`26618b90 nt!PspUnlockJobAssignment (PspUnlockJobAssignment)
fffff803`2657caa0 nt!PspUnlockProcessSharedUnsafe (PspUnlockProcessSharedUnsafe)
fffff803`26d2d870 nt!PsDefaultThreadLocaleId = <no type information>
fffff803`2634acb0 nt!PsGetProcessImageFileName (PsGetProcessImageFileName)
fffff803`266b11bc nt!PspAllocateThread (PspAllocateThread)
fffff803`266184d4 nt!PspCaptureCreateInfo (PspCaptureCreateInfo)
fffff803`26906394 nt!PspConvertJobToMixed (PspConvertJobToMixed)
fffff803`26cfb6c8 nt!PspDfssConfigurationNotify = <no type information>
fffff803`2676a910 nt!PspEnumerateCallback (PspEnumerateCallback)
fffff803`2690c29c nt!PspRundownUmsThreadForApcDelivery (PspRundownUmsThreadForApcDelivery)
fffff803`2657f220 nt!PsQuitNextPartition (PsQuitNextPartition)
fffff803`26c1de10 nt!PsWin32NullCallBack = <no type information>
fffff803`26a96010 nt!PspMemReserveMapping = <no type information>
fffff803`2657c8a4 nt!PspUnlockAffinityUpdateExclusive (PspUnlockAffinityUpdateExclusive)
fffff803`26c04718 nt!PspKernelRanges = <no type information>
fffff803`26904f64 nt!PsGetKeepAliveCountProcess (PsGetKeepAliveCountProcess)
fffff803`2690bad4 nt!PspPrepareEnclaveThreadWait (PspPrepareEnclaveThreadWait)
fffff803`26c1dea0 nt!PspSiloMonitorLock = <no type information>
fffff803`2657c2e0 nt!PsGetProcessPriorityClass (PsGetProcessPriorityClass)
fffff803`2657d6c0 nt!PspTimerDelayProcess (PspTimerDelayProcess)
fffff803`26339a70 nt!PsChargeProcessPoolQuota (PsChargeProcessPoolQuota)
fffff803`269080d4 nt!PsShutdownSystem (PsShutdownSystem)
fffff803`2633f600 nt!PsGetThreadTeb (PsGetThreadTeb)
fffff803`2634b890 nt!PsGetCurrentThreadProcess (PsGetCurrentThreadProcess)
fffff803`2690a394 nt!PspIumVerifyParentSd (PspIumVerifyParentSd)
fffff803`2690b614 nt!PsInitializeVsmEnclave (PsInitializeVsmEnclave)
fffff803`26d2c144 nt!PspRundownNeededCountCache = <no type information>
fffff803`2665b1c4 nt!PspApplyJobChainLimitsToProcess (PspApplyJobChainLimitsToProcess)
fffff803`2657bf2c nt!PspJobIsAppSilo (PspJobIsAppSilo)
fffff803`26756bb0 nt!PsIsThreadImpersonating (PsIsThreadImpersonating)
fffff803`26982428 nt!PspPriorityTable = <no type information>
fffff803`26904058 nt!PspSiloInitializeIsMultiSessionSku (PspSiloInitializeIsMultiSessionSku)
fffff803`2627b390 nt!PsIsServerSilo (PsIsServerSilo)
fffff803`26904b80 nt!PsIsProcessPrimaryTokenFrozen (PsIsProcessPrimaryTokenFrozen)
fffff803`269043f4 nt!PspSiloLoadApiSets (PspSiloLoadApiSets)
fffff803`26712d10 nt!PsQuitNextProcessThread (PsQuitNextProcessThread)
fffff803`26646820 nt!PspSafeReferenceQuotaBlock (PspSafeReferenceQuotaBlock)
fffff803`2657bf10 nt!PspIsSiloInServerSilo (PspIsSiloInServerSilo)
fffff803`2690909c nt!PsPicoSystemCallDispatch (PsPicoSystemCallDispatch)
fffff803`2634f710 nt!PsGetProcessWin32WindowStation (PsGetProcessWin32WindowStation)
fffff803`26200648 nt!PspIoRateControlInfoIsAnySet (PspIoRateControlInfoIsAnySet)
fffff803`26701e40 nt!PspSetProcessBackgroundCountCallback (PspSetProcessBackgroundCountCallback)
fffff803`26c2a2d0 nt!PsLoadedModuleList = <no type information>
fffff803`26d2d9d8 nt!PsDefaultLoaderThreads = <no type information>
fffff803`26cfb838 nt!PspAlwaysTrackIoBoosting = <no type information>
fffff803`269038f0 nt!PspDeferredWorkerRoutine (PspDeferredWorkerRoutine)
fffff803`26c1e040 nt!PspProcessRundownCacheWorkItem = <no type information>
fffff803`26711e50 nt!PspSetCpuRateControlJobPreCallback (PspSetCpuRateControlJobPreCallback)
fffff803`26cfb970 nt!PspMmcssExtensionHost = <no type information>
fffff803`2623a4d0 nt!PsGetCurrentThread (PsGetCurrentThread)
fffff803`2627b1a0 nt!PspSetJobFreezeCountCallback (PspSetJobFreezeCountCallback)
fffff803`2634608c nt!PspRequestDeferredJobNotification (PspRequestDeferredJobNotification)
fffff803`26904b60 nt!PsIsProcessBeingDebugged (PsIsProcessBeingDebugged)
fffff803`269051c4 nt!PsUpdateActiveProcessAffinity (PsUpdateActiveProcessAffinity)
fffff803`266eef90 nt!PspDispatchWakeNotification (PspDispatchWakeNotification)
fffff803`26903d30 nt!PspShutdownCsrProcess (PspShutdownCsrProcess)
fffff803`26904de0 nt!PspControlHwTracingThread (PspControlHwTracingThread)
fffff803`267031e0 nt!PspQueryProcessIdListCallback (PspQueryProcessIdListCallback)
fffff803`26d55160 nt!PsRawPrioritySeparation = <no type information>
fffff803`26cfb440 nt!PsThreadType = <no type information>
fffff803`26343de4 nt!PsGetNextPartition (PsGetNextPartition)
fffff803`26c1ded0 nt!PspJobTimeLimitsRequest = <no type information>
fffff803`2666229c nt!PsQueryProcessQuotaCounters (PsQueryProcessQuotaCounters)
fffff803`26cfb420 nt!PsInitialSystemProcess = <no type information>
fffff803`2690c6ac nt!PspStorageRemoveObject (PspStorageRemoveObject)
fffff803`2690767c nt!PspCreateSecureThread (PspCreateSecureThread)
fffff803`26667e70 nt!PsQueryProcessAttributes (PsQueryProcessAttributes)
fffff803`26327c40 nt!PsGetCurrentProcessWin32Process (PsGetCurrentProcessWin32Process)
fffff803`26339a40 nt!PsChargePoolQuota (PsChargePoolQuota)
fffff803`269077e0 nt!PspFindThreadForTeb (PspFindThreadForTeb)
fffff803`263cd010 nt!PspSetProcessIoHandlers (PspSetProcessIoHandlers)
fffff803`26a95ff0 nt!PspJobMapping = <no type information>
fffff803`2670f710 nt!PsIsProcessCommitRelinquished (PsIsProcessCommitRelinquished)
fffff803`26010528 nt!PspShortTime = <no type information>
fffff803`26658d60 nt!PspGetNextSilo (PspGetNextSilo)
fffff803`26906630 nt!PspGetProcessInJobHierarchyCallback (PspGetProcessInJobHierarchyCallback)
fffff803`26cfbb70 nt!PspSystemMitigationAuditOptions = <no type information>
fffff803`266fe554 nt!PsIsProcessAppContainer (PsIsProcessAppContainer)
fffff803`26c1de98 nt!PsAltSystemCallRegistrationLock = <no type information>
fffff803`26327110 nt!PsSetThreadProperty (PsSetThreadProperty)
fffff803`265d0ad4 nt!PspIdentityBasedJobBreakaway (PspIdentityBasedJobBreakaway)
fffff803`2661d71c nt!PspNotificationLimitRateControlToleranceField (PspNotificationLimitRateControlToleranceField)
fffff803`26cf4b88 nt!PspOutSwapSharedPages = <no type information>
fffff803`2665b020 nt!PspImplicitAssignProcessToJob (PspImplicitAssignProcessToJob)
fffff803`2669b928 nt!PspUnlockJobConditionally (PspUnlockJobConditionally)
fffff803`26905ca4 nt!PspSetProcessAffinitySafe (PspSetProcessAffinitySafe)
fffff803`26c1dd60 nt!PspStorageBitmap = <no type information>
fffff803`2633bcc0 nt!PsReturnPoolQuota (PsReturnPoolQuota)
fffff803`2657d010 nt!PspIoRateEntryVolumeDelete (PspIoRateEntryVolumeDelete)
fffff803`26d2d970 nt!PspDefaultQuotaBlock = <no type information>
fffff803`269062cc nt!PspCheckJobAccessState (PspCheckJobAccessState)
fffff803`269031e0 nt!PsGetParentSilo (PsGetParentSilo)
fffff803`266b36d4 nt!PspBuildCreateProcessContext (PspBuildCreateProcessContext)
fffff803`26707e38 nt!PspLimitViolationRateControlToleranceLimitField (PspLimitViolationRateControlToleranceLimitField)
fffff803`26660e5c nt!PsQueryFullProcessImageName (PsQueryFullProcessImageName)
fffff803`266633c0 nt!PsQueryRuntimeProcess (PsQueryRuntimeProcess)
fffff803`266b53b0 nt!PspGetPreviousProcessThread (PspGetPreviousProcessThread)
fffff803`26908e10 nt!PspMarkServerSiloAsTerminating (PspMarkServerSiloAsTerminating)
fffff803`262fdf44 nt!PspIsParentProcess (PspIsParentProcess)
fffff803`26d55708 nt!PspBootAccessToken = <no type information>
fffff803`2665d9ec nt!PspRundownSingleProcess (PspRundownSingleProcess)
fffff803`26cfa3d0 nt!PspDfssConfigValues = <no type information>
fffff803`26327c60 nt!PsLeavePriorityRegion (PsLeavePriorityRegion)
fffff803`2657d5fc nt!PspSetProcessTimerDelayForWin32 (PspSetProcessTimerDelayForWin32)
fffff803`26d2da7c nt!PspStorageBitmapBits = <no type information>
fffff803`269042cc nt!PspSiloInitializeUserSharedData (PspSiloInitializeUserSharedData)
fffff803`2690399c nt!PspDeleteServerSiloGlobals (PspDeleteServerSiloGlobals)
fffff803`26e00010 nt!PsInvertedFunctionTable = <no type information>
fffff803`2657c4a0 nt!PsWatchWorkingSet (PsWatchWorkingSet)
fffff803`26cfa278 nt!PsDfssLongTermFraction1024 = <no type information>
fffff803`26658604 nt!PspCheckConditionalWakeCharge (PspCheckConditionalWakeCharge)
fffff803`266b7890 nt!PspProcessOpen (PspProcessOpen)
fffff803`26d2d998 nt!PspDefaultResourceLimits = <no type information>
fffff803`266fec7c nt!PspDetectComplusILImage (PspDetectComplusILImage)
fffff803`26905788 nt!PspQueryPooledQuotaLimits (PspQueryPooledQuotaLimits)
fffff803`2627c650 nt!PsGetWin32KFilterSet (PsGetWin32KFilterSet)
fffff803`2657c2c8 nt!PsGetJobEffectiveFreezeCount (PsGetJobEffectiveFreezeCount)
fffff803`26713168 nt!PspSiloInitializeSharedUserSessionId (PspSiloInitializeSharedUserSessionId)
fffff803`26906fa4 nt!PspSetNetRateControl (PspSetNetRateControl)
fffff803`26345370 nt!PsIsWin32KFilterEnabled (PsIsWin32KFilterEnabled)
fffff803`269068dc nt!PspQuitNextJobProcess (PspQuitNextJobProcess)
fffff803`2690a21c nt!PspIumGetPhysicalPage (PspIumGetPhysicalPage)
fffff803`26c1dd70 nt!PspStorageExpansionBitmap = <no type information>
fffff803`26903b50 nt!PspInitializeServerSiloDeferred (PspInitializeServerSiloDeferred)
fffff803`26907854 nt!PspFreeUserFiberShadowStack (PspFreeUserFiberShadowStack)
fffff803`26398730 nt!PsSetThreadHardErrorsAreDisabled (PsSetThreadHardErrorsAreDisabled)
fffff803`268c7ae8 nt!PspFindVsmEnclaveThread (PspFindVsmEnclaveThread)
fffff803`26720ad8 nt!PspCreateActivityReference (PspCreateActivityReference)
fffff803`2627b2a0 nt!PsGetCurrentServerSiloGlobals (PsGetCurrentServerSiloGlobals)
fffff803`26707e60 nt!PspUserApcKernelRoutine (PspUserApcKernelRoutine)
fffff803`26662280 nt!PsGetThreadSessionId (PsGetThreadSessionId)
fffff803`26d2c160 nt!PspUniqueJobIdTable = <no type information>
fffff803`26702c68 nt!PspSelectNodeForProcess (PspSelectNodeForProcess)
fffff803`2635e040 nt!PsGetJobUIRestrictionsClass (PsGetJobUIRestrictionsClass)
fffff803`26d2c188 nt!PspJobListLock = <no type information>
fffff803`26769928 nt!PsReferencePartitionSystemProcess (PsReferencePartitionSystemProcess)
fffff803`2657c2f0 nt!PsGetProcessSilo (PsGetProcessSilo)
fffff803`26715940 nt!PspGetPicoProcessContext (PspGetPicoProcessContext)
fffff803`26cfb760 nt!PspSystemPartition = <no type information>
fffff803`26c1dee0 nt!PspJobTimeLimitsWorkItem = <no type information>
fffff803`26c1df60 nt!PspQuotaExpansionDescriptors = <no type information>
fffff803`269824e0 nt!PspQuotaLimitOffsets = <no type information>
fffff803`2624a060 nt!PsChargeProcessNonPagedPoolQuota (PsChargeProcessNonPagedPoolQuota)
fffff803`2670fa50 nt!PspSetJobBackgroundCountCallback (PspSetJobBackgroundCountCallback)
fffff803`2662eaf0 nt!PsReleaseProcessWakeCounter (PsReleaseProcessWakeCounter)
fffff803`26710380 nt!PspSetJobIoAttributionProcessCallback (PspSetJobIoAttributionProcessCallback)
fffff803`2690bf08 nt!PspDisassociateUmsThreadFromPrimary (PspDisassociateUmsThreadFromPrimary)
fffff803`2665bbb0 nt!PspSendProcessNotificationToJobChain (PspSendProcessNotificationToJobChain)
fffff803`262e2268 nt!PsChargeProcessQuota (PsChargeProcessQuota)
fffff803`266ef0ac nt!PspComputeReportWakeFilter (PspComputeReportWakeFilter)
fffff803`26cfbb88 nt!PspSystemPartitionHandle = <no type information>
fffff803`263434e0 nt!PsUpdateDiskCounters (PsUpdateDiskCounters)
fffff803`26c1e000 nt!PsReaperListHead = <no type information>
fffff803`26908d88 nt!PspGetNextMonitor (PspGetNextMonitor)
fffff803`26707e78 nt!PspGetJobLimitInformationValidFlags (PspGetJobLimitInformationValidFlags)
fffff803`2634a4c0 nt!PsGetProcessJob (PsGetProcessJob)
fffff803`2635e320 nt!PspSetProcessCacheIsolationCallback (PspSetProcessCacheIsolationCallback)
fffff803`26711a78 nt!PspIsSiloContext (PspIsSiloContext)
fffff803`2627c640 nt!PsGetProcessSectionBaseAddress (PsGetProcessSectionBaseAddress)
fffff803`263cd010 nt!PspQueryLdtInformation (PspQueryLdtInformation)
fffff803`26793b58 nt!PspQueryForwardersEnabled (PspQueryForwardersEnabled)
fffff803`26cfb704 nt!PsDisableDiskCounters = <no type information>
fffff803`26340670 nt!PsIsSystemThread (PsIsSystemThread)
fffff803`26908ebc nt!PspNotifyServerSiloCreation (PspNotifyServerSiloCreation)
fffff803`266b9c1c nt!PsGetAllocatedFullProcessImageName (PsGetAllocatedFullProcessImageName)
fffff803`26905930 nt!PspQueryWorkingSetWatch (PspQueryWorkingSetWatch)
fffff803`262720b0 nt!PsAttachSiloToCurrentThread (PsAttachSiloToCurrentThread)
fffff803`26c1dfe0 nt!PsReaperWorkItem = <no type information>
fffff803`2626b5f8 nt!PsReturnProcessQuota (PsReturnProcessQuota)
fffff803`26220980 nt!PsReturnProcessNonPagedPoolQuota (PsReturnProcessNonPagedPoolQuota)
fffff803`26a5f6cc nt!PspInitializeBackgroundActivityModeratorCallouts (PspInitializeBackgroundActivityModeratorCallouts)
fffff803`26710320 nt!PspSetJobNotificationCountCallback (PspSetJobNotificationCountCallback)
fffff803`2657da80 nt!PsAltSystemCallDispatch (PsAltSystemCallDispatch)
fffff803`26906664 nt!PspIsJobMovable (PspIsJobMovable)
fffff803`26cfb9f0 nt!PspEnclaveDispatchReturn = <no type information>
fffff803`269090cc nt!PsPicoWalkUserStack (PsPicoWalkUserStack)
fffff803`26296c90 nt!PsGetThreadProcess (PsGetThreadProcess)
fffff803`2657f0d0 nt!PspIumWorker (PspIumWorker)
fffff803`2657c84c nt!PspLockThreadSecurityShared (PspLockThreadSecurityShared)
fffff803`26cfb650 nt!PsHalImageEnd = <no type information>
fffff803`26d2d9d0 nt!PspCreateThreadNotifyRoutineNonSystemCount = <no type information>
fffff803`26699f20 nt!PsGetNextProcess (PsGetNextProcess)
fffff803`2634e564 nt!PspLockThreadSecurityExclusive (PspLockThreadSecurityExclusive)
fffff803`260059e0 nt!PspBamHostInterface = <no type information>
fffff803`26769030 nt!PsGetProcessExitStatus (PsGetProcessExitStatus)
fffff803`26907f14 nt!PspUmsInitializeContext (PspUmsInitializeContext)
fffff803`2670fea0 nt!PspSetJobIoAttributionJobPreCallback (PspSetJobIoAttributionJobPreCallback)
fffff803`266b3120 nt!PspMapThreadCreationFlags (PspMapThreadCreationFlags)
fffff803`2665c3d4 nt!PspNotifyEmptyJobsInJobChain (PspNotifyEmptyJobsInJobChain)
fffff803`2626a76c nt!PspLockProcessListExclusive (PspLockProcessListExclusive)
fffff803`269063e8 nt!PspDeleteMemoryPartitionContext (PspDeleteMemoryPartitionContext)
fffff803`26cfb5c8 nt!PspCidTable = <no type information>
fffff803`269818b8 nt!PspWorkingSetAdjustService = <no type information>
fffff803`26cec3e0 nt!PspCreateProcessNotifyRoutine = <no type information>
fffff803`26c130a0 nt!PspWorkingSetChangeHead = <no type information>
fffff803`26981360 nt!PspPathVarString = <no type information>
fffff803`266d66f0 nt!PspCaptureProcessParameters (PspCaptureProcessParameters)
fffff803`26711f7c nt!PsIsSystemWideMitigationOptionSet (PsIsSystemWideMitigationOptionSet)
fffff803`269072a0 nt!PspSetRateControlProcessCallback (PspSetRateControlProcessCallback)
fffff803`26905f98 nt!PsQueryJobMemoryUsageByProcess (PsQueryJobMemoryUsageByProcess)
fffff803`26658cf0 nt!PspJobTimeLimitsWork (PspJobTimeLimitsWork)
fffff803`26903260 nt!PsRemoveSiloContext (PsRemoveSiloContext)
fffff803`26d2e390 nt!PsWowArm32SharedInformation = <no type information>
fffff803`266138a4 nt!PspApplyMitigationOptions (PspApplyMitigationOptions)
fffff803`2690c468 nt!PspSetUmsThreadContext (PspSetUmsThreadContext)
fffff803`26906730 nt!PspQueryJobHierarchyInterferenceCount (PspQueryJobHierarchyInterferenceCount)
fffff803`269079f8 nt!PspReserveAndCommitUserShadowStack (PspReserveAndCommitUserShadowStack)
fffff803`26cfb968 nt!PspHwTraceExtensionHost = <no type information>
fffff803`26908db0 nt!PspInvokeTerminateCallback (PspInvokeTerminateCallback)
fffff803`269073a8 nt!PspUnlockJobListShared (PspUnlockJobListShared)
fffff803`266b75a0 nt!PsWow64IsMachineSupported (PsWow64IsMachineSupported)
fffff803`269837d0 nt!PspJobInfoAlign = <no type information>
fffff803`2657bf58 nt!PsSetCpuQuotaInformation (PsSetCpuQuotaInformation)
fffff803`26cfba90 nt!PspCallEnclaveReturn = <no type information>
fffff803`26617e4c nt!PspPropagateHandle (PspPropagateHandle)
fffff803`26706488 nt!PspIsContextAdmin (PspIsContextAdmin)
fffff803`26981530 nt!PspQuotaKeyNames = <no type information>
fffff803`26cfb43f nt!PsCpuFairShareEnabled = <no type information>
fffff803`2661d79c nt!PspRateControlLimitFlag (PspRateControlLimitFlag)
fffff803`26cfb568 nt!PsJobType = <no type information>
fffff803`26200084 nt!PspGetJobSilo (PspGetJobSilo)
fffff803`265ce1f0 nt!PsInsertSiloContext (PsInsertSiloContext)
fffff803`26cfa0ac nt!PspSystemMitigationAuditOptionsLength = <no type information>
fffff803`26909a90 nt!PsRemoveCreateThreadNotifyRoutine (PsRemoveCreateThreadNotifyRoutine)
fffff803`2657f65c nt!PsGetProcessEnclaveModuleInfo (PsGetProcessEnclaveModuleInfo)
fffff803`263f27d0 nt!PsIsComponentEnabled (PsIsComponentEnabled)
fffff803`26c113b8 nt!PsNextSecurityDomain = <no type information>
fffff803`2657d790 nt!PspUnlockProcessExclusiveUnsafe (PspUnlockProcessExclusiveUnsafe)
fffff803`26cfbb28 nt!PspMemoryReserveObjectTypes = <no type information>
fffff803`265c7384 nt!PsQueryThreadTerminationPort (PsQueryThreadTerminationPort)
fffff803`26392dd0 nt!PsGetProcessSignatureLevel (PsGetProcessSignatureLevel)
fffff803`26398340 nt!PspProcessorCallbackNop (PspProcessorCallbackNop)
fffff803`2626ba30 nt!PsGetHostSilo (PsGetHostSilo)
fffff803`2600d9a8 nt!PsProvTraceLoggingGuid = <no type information>
fffff803`26202160 nt!PsGetServerSiloServiceSessionId (PsGetServerSiloServiceSessionId)
fffff803`266a1b70 nt!PsGetNextProcessThread (PsGetNextProcessThread)
fffff803`266622c8 nt!PspQueryQuotaLimits (PspQueryQuotaLimits)
fffff803`263988e0 nt!PsGetThreadHardErrorsAreDisabled (PsGetThreadHardErrorsAreDisabled)
fffff803`2657c208 nt!PspReleaseReturnedQuota (PspReleaseReturnedQuota)
fffff803`2670fe90 nt!PsSetProcessWindowStation (PsSetProcessWindowStation)
fffff803`2657eb30 nt!PspIumFreePartitionPages (PspIumFreePartitionPages)
fffff803`26907260 nt!PspSetRateControlJobPreCallback (PspSetRateControlJobPreCallback)
fffff803`26d2c378 nt!PspMemoryReserveObjectSizes = <no type information>
fffff803`2669a04c nt!PsGetProcessDeepFreezeStats (PsGetProcessDeepFreezeStats)
fffff803`2657c874 nt!PspLockWorkingSetChangeExclusiveUnsafe (PspLockWorkingSetChangeExclusiveUnsafe)
fffff803`2690c240 nt!PspRelinquishUmsThreadSpecialApc (PspRelinquishUmsThreadSpecialApc)
fffff803`26715900 nt!PspEnableTimerVirtualization (PspEnableTimerVirtualization)
fffff803`26cfa110 nt!PsObjectDirectoryTeardownSlot = <no type information>
fffff803`26cfa118 nt!PsDfssGenerationLengthMS = <no type information>
fffff803`2690412c nt!PspSiloInitializeSystemRootBuffer (PspSiloInitializeSystemRootBuffer)
fffff803`2626ab10 nt!PsIsProtectedProcessLight (PsIsProtectedProcessLight)
fffff803`26d2c04e nt!PsContinueWaiting = <no type information>
fffff803`26cebfe0 nt!PspLoadImageNotifyRoutine = <no type information>
fffff803`26658c6c nt!PspGetJobLockHierarchyForDeletion (PspGetJobLockHierarchyForDeletion)
fffff803`26981878 nt!PspPerfOptionsKeyName = <no type information>
fffff803`266b7410 nt!PsWow64GetSupportedArchitectures (PsWow64GetSupportedArchitectures)
fffff803`263ff3a0 nt!PspGetSetContextSpecialApc (PspGetSetContextSpecialApc)
fffff803`2657c7d0 nt!PspHandleTableWalker (PspHandleTableWalker)
fffff803`26904f84 nt!PsIsGuiThread (PsIsGuiThread)
fffff803`26904a88 nt!PspRemoveQuotaBlock (PspRemoveQuotaBlock)
fffff803`2668c2a0 nt!PspUnlockJob (PspUnlockJob)
fffff803`266d5530 nt!PspScheduleEnforcementWorker (PspScheduleEnforcementWorker)
fffff803`265c81ec nt!PsBlockNonCetBinaries (PsBlockNonCetBinaries)
fffff803`26c1dec8 nt!PspJobTimeLimitsWorkItemFlags = <no type information>
fffff803`26200940 nt!PsReleaseSiloHardReference (PsReleaseSiloHardReference)
fffff803`26658fcc nt!PsTerminateProcess (PsTerminateProcess)
fffff803`26c113e0 nt!PspLastUpdateAffinityMask = <no type information>
fffff803`269052b0 nt!PspAdjustKeepAliveCountProcess (PspAdjustKeepAliveCountProcess)
fffff803`2665857c nt!PspSetEffectiveLimit (PspSetEffectiveLimit)
fffff803`26905f70 nt!PsRevertThreadToSelf (PsRevertThreadToSelf)
fffff803`26305bac nt!PsRevertToUserPagePriorityThread (PsRevertToUserPagePriorityThread)
fffff803`26a95fc0 nt!PspSiloStorageNonPagedTypeName = <no type information>
fffff803`26903fd4 nt!PspSiloGetSuiteMaskStringFromRegistry (PspSiloGetSuiteMaskStringFromRegistry)
fffff803`26333cb0 nt!PsIsCurrentThreadPrefetching (PsIsCurrentThreadPrefetching)
fffff803`26d2d6a0 nt!PspNotifyEnableMask = <no type information>
fffff803`266f1b70 nt!PsQuerySectionSignatureInformation (PsQuerySectionSignatureInformation)
fffff803`2620a920 nt!PsBoostThreadIo (PsBoostThreadIo)
fffff803`26905eb0 nt!PspUpdateSingleProcessAffinity (PspUpdateSingleProcessAffinity)
fffff803`269084d8 nt!PsWaitForAllProcesses (PsWaitForAllProcesses)
fffff803`26d2db08 nt!PspLoaderInitRoutine = <no type information>
fffff803`26d2c960 nt!PspNativeSystemDllData = <no type information>
fffff803`26618be0 nt!PspLockJobAssignment (PspLockJobAssignment)
fffff803`2678377c nt!PspSetMinimalProcessName (PspSetMinimalProcessName)
fffff803`26342d60 nt!PsGetProcessCreateTimeQuadPart (PsGetProcessCreateTimeQuadPart)
fffff803`26907f7c nt!PspUmsUnInitThread (PspUmsUnInitThread)
fffff803`26704ad0 nt!PsDereferencePrimaryToken (PsDereferencePrimaryToken)
fffff803`26712ca0 nt!PsReferenceKernelStack (PsReferenceKernelStack)
fffff803`26cf4348 nt!PspSecExtensionHost = <no type information>
fffff803`2670f678 nt!PspSetNoChildProcessRestrictedPolicy (PspSetNoChildProcessRestrictedPolicy)
fffff803`26903418 nt!PspApiSetCopyToSystemSpace (PspApiSetCopyToSystemSpace)
fffff803`2690b87c nt!PsRundownVsmEnclave (PsRundownVsmEnclave)
fffff803`26cec1e0 nt!PspCreateThreadNotifyRoutine = <no type information>
fffff803`266ec858 nt!PspGetJobMemoryUsageNotificationViolations (PspGetJobMemoryUsageNotificationViolations)
fffff803`2657ec40 nt!PspIumFreePartitionState (PspIumFreePartitionState)
fffff803`2668c30c nt!PspLockJobShared (PspLockJobShared)
fffff803`265d0220 nt!PspUserApcReserveKernelRoutine (PspUserApcReserveKernelRoutine)
fffff803`26903af0 nt!PspDeleteSilo (PspDeleteSilo)
fffff803`2665ee24 nt!PsWow64GetProcessNtdllType (PsWow64GetProcessNtdllType)
fffff803`26a5f7e4 nt!PspInitializeMMCSSCallouts (PspInitializeMMCSSCallouts)
fffff803`2657c290 nt!PsGetCurrentThreadStackBase (PsGetCurrentThreadStackBase)
fffff803`26cfb4b8 nt!PsIdleProcess = <no type information>
fffff803`26c1dd88 nt!PspIumFreeMappingLock = <no type information>
fffff803`266d6e1c nt!PspCaptureAndValidateUnicodeString (PspCaptureAndValidateUnicodeString)
fffff803`26904e10 nt!PspQueryHwTracingThread (PspQueryHwTracingThread)
fffff803`2657ed1c nt!PspIumFreePhysicalPages (PspIumFreePhysicalPages)




上一篇:关于vs2019对XP驱动 编程的支持
下一篇:关于w10中涉及超级终端问题解析以及解决方案!

本帖被以下淘专辑推荐:

04_avatar_middle
最佳答案
0 
在线会员 发表于 2022-6-23 06:55:06 | 显示全部楼层
内核函数内核函数
07_avatar_middle
最佳答案
0 
在线会员 发表于 2022-7-9 11:47:56 | 显示全部楼层

谢谢分享
谢谢分享
07_avatar_middle
最佳答案
0 
在线会员 发表于 2022-7-10 00:06:14 | 显示全部楼层
祝VC驿站越办越好!
07_avatar_middle
最佳答案
0 
在线会员 发表于 2022-7-13 04:56:15 | 显示全部楼层
  谢谢分享 谢谢分享
07_avatar_middle
最佳答案
0 
在线会员 发表于 2022-7-17 10:14:54 | 显示全部楼层
谢谢提供 继续学习
07_avatar_middle
最佳答案
0 
在线会员 发表于 2022-7-20 05:29:41 | 显示全部楼层
内核函数内核函数
07_avatar_middle
最佳答案
0 
在线会员 发表于 2022-7-21 06:05:12 | 显示全部楼层
谢谢分享 谢谢分享
95_avatar_middle
最佳答案
0 
在线会员 发表于 2022-10-24 10:31:43 | 显示全部楼层
  谢谢分享 谢谢分享
您需要登录后才可以回帖 登录 | 加入驿站 qq_login

本版积分规则

×【发帖 友情提示】
1、请回复有意义的内容,请勿恶意灌水;
2、纯数字、字母、表情等无意义的内容系统将自动删除;
3、若正常回复后帖子被自动删除,为系统误删的情况,请重新回复其他正常内容或等待管理员审核通过后会自动发布;
4、感谢您对VC驿站一如既往的支持,谢谢合作!

关闭

站长提醒上一条 /2 下一条

QQ|小黑屋|手机版|VC驿站 ( 辽ICP备09019393号-4 )|网站地图wx_jqr

GMT+8, 2023-3-27 21:09

Powered by CcTry.CoM

© 2009-2021 cctry.com

快速回复 返回顶部 返回列表