All Articles

WinDbg で Windows のプロセス情報を読むためのメモ書き

先日作成した WinDbg でダンプ解析、ライブデバッグを行う時のチートシート からの派生で、WinDbg で OS のプロセス情報を参照する内容についてまとめておきます。

こちらも個人的なメモ書きなので、内容については今後追加していく予定です。

もくじ

まえがき

本記事の内容はすべて一般に公開されている情報や、出版された書籍、または個人の検証環境で動作確認を実施した結果のみを元に作成しています。

関連記事はこちら。

Windows のプロセス

Windows におけるプロセスは、基本的に 1 つ以上のスレッドを持つコンテナとして作成されます。

OS の中では、プロセスは エクゼクティブプロセス(EPROCESS) 構造体によって表現されています。

この中には、プロセスに関する属性や、関連するデータ構造体へのポインタが含まれており、EPROCESS 構造体がプロセスオブジェクトとして機能します。(エクゼクティブのオブジェクトマネージャが EPROCESS 構造体を 1 つのプロセスオブジェクトとしてカプセル化しています)

EPROCESS 構造体の情報自体はカーネルデバッガでdt nt!_EPROCESSコマンドを実行すると参照できます。

出力結果については一応こちらに添付してますが、概要レベルで把握するだけならインサイド Windows の図 3-2 を参照するのがよいかと思います。

EPROCESS の構造

EPROCESS 構造体は、最初のフィールドとしてプロセス制御ブロック(PCB)を持ちます。

PCB とは、カーネルプロセスのために使用される KPROCESS 型の構造体です。

KPROCESS には、システムカーネルに存在するディスパッチャー、スケジューラ、割込みなどの情報が格納されます。

EPROCESS 構造体の保持するデータの大部分はシステムのアドレス範囲に存在しています。

そのため、ユーザモードのプロセスダンプなどでは.processなど EPROCESS 構造体の情報を参照するコマンドを使用できません。

ただし、ユーザモードからアクセスされる各プロセスの PEB のみはユーザモードのアドレス範囲に格納されます。

EPROCESS 構造体からシステム内でのプロセス情報を列挙する

前述の通り、EPROCESS 構造体のActiveProcessLinksは、OS 内で稼働するすべてのプロセスを連結する双方向リストです。

そのため、ActiveProcessLinksの情報を列挙することで、システム内のすべてのプロセス情報を参照することもできます。(一部のマルウェアなどはActiveProcessLinksのリストを改ざんすることで、不正なプロセスを隠そうとする場合があります)

ActiveProcessLinksのリストをダンプするため、まずはnt!PsActiveProcessHeadの情報を取得します。

nt!PsActiveProcessHeadには、システムで一番初めに作成されるシステムプロセスの ActiveProcessLinksへのポインタが格納されます。

つまり、nt!PsActiveProcessHead内のポインタが示すアドレスから、ActiveProcessLinksのオフセットを引くことで、システムプロセスと対応する EPROCESS 構造体のアドレスを取得できます。

dt コマンドの -l オプションにリストのアドレスを与えることでそのリストをたどって情報をダンプすることができるので、以下のコマンドを順に実行することでシステム内の EPROCESS 構造体を列挙して.process 0 0と同等の出力を得ることができるようになります。

# System プロセスの ActiveProcessLinks へのポインタアドレスを取得
r $t0 = nt!PsActiveProcessHead;r $t1 = poi(@$t0);r $t1

# ActiveProcessLinks.Flink のオフセットを参照
dt nt!_EPROCESS ActiveProcessLinks
> +0x448 ActiveProcessLinks 

# _EPROCESS をダンプ(.process 0 0 と同等の出力)
dt nt!_EPROCESS -l ActiveProcessLinks.Flink -y Ima -yoi Uni $t1-0x448

参考:dt (Display Type) - Windows drivers | Microsoft Learn

また、プロセス情報を列挙する のコマンドを使用することで、システム内のコマンドを探索することもできます。

以下は参考例です。

# システム内のすべてのプロセスを列挙
!process 0 0

# 特定のプロセスの完全な詳細情報を取得
!process 0 7 notepad.exe

# デバッガのコンテキストを指定のプロセスに変更する(!peb などが使えるようになる)
.process /r /P <!process で特定した EPROCESS ブロックのアドレス>

# すべてのプロセスを探索する(すべてのプロセスに対してコマンドを発行することも可能)
!for_each_process

保護されたプロセスを特定する

Windows では、特定のプロセスを保護されたプロセスとして扱います。

プロセスが保護されている場合、Debug privilegeを持つ場合でも、保護されたプロセスのメモリの読み書きやスレッドの停止などのデバッグ操作が大きく制限されます。

保護されたプロセスの仕組みは、システムプロセスやセキュリティソフトウェア、また DRM などで保護されるメディアなどで使用されます。

参考:Debug Privilege - Windows drivers | Microsoft Learn

プロセスがどのような保護レベルにあるかは、Process Explorer から以下のように特定できます。

image-20230421212751376

CreateProcess API を呼び出す

インサイド Windows によると、ドキュメント化されているすべてのプロセス作成関数は、Kernel32.dll で定義されているCreateProcessInternalWというネイティブ API を呼び出すそうです。

プロセス作成関数には、プロセス自身と同じアクセストークンを使用してプロセスを起動すCreateProcess関数や、指定したアクセストークンを使用してプロセスを起動するCreateProcessAsUser関数などがあります。(他にも、CreateProcessWithTokenWCreateProcessWithLogonWなどもあります)

Docs の記載を参考に、CreateProcess関数を呼び出すだけのコードを作成しました。

#include <stdio.h>
#include <windows.h>

void main()
{
    STARTUPINFO si;
    PROCESS_INFORMATION pi;

    WCHAR t1[] = L"c:\\Windows\\System32\\notepad.exe";
    LPWSTR lpCommandLine = t1;

    ZeroMemory(&si, sizeof(si));
    si.cb = sizeof(si);
    ZeroMemory(&pi, sizeof(pi));

    /*
    BOOL CreateProcessW(
      [in, optional]      LPCWSTR               lpApplicationName,
      [in, out, optional] LPWSTR                lpCommandLine,
      [in, optional]      LPSECURITY_ATTRIBUTES lpProcessAttributes,
      [in, optional]      LPSECURITY_ATTRIBUTES lpThreadAttributes,
      [in]                BOOL                  bInheritHandles,
      [in]                DWORD                 dwCreationFlags,
      [in, optional]      LPVOID                lpEnvironment,
      [in, optional]      LPCWSTR               lpCurrentDirectory,
      [in]                LPSTARTUPINFOW        lpStartupInfo,
      [out]               LPPROCESS_INFORMATION lpProcessInformation
    );
    */
    
    if (!CreateProcess(
        NULL,           // No module name (use command line)
        lpCommandLine,  // Command line
        NULL,           // Process handle not inheritable
        NULL,           // Thread handle not inheritable
        FALSE,          // Set handle inheritance to FALSE
        0,              // No creation flags
        NULL,           // Use parent's environment block
        NULL,           // Use parent's starting directory 
        &si,            // Pointer to STARTUPINFO structure
        &pi)            // Pointer to PROCESS_INFORMATION structure
        )
    {
        printf("CreateProcess failed (%d).\n", GetLastError());
        return;
    }

    // Wait until child process exits.
    WaitForSingleObject(pi.hProcess, INFINITE);

    // Close process and thread handles. 
    CloseHandle(pi.hProcess);
    CloseHandle(pi.hThread);
}

参考:CreateProcessW function (processthreadsapi.h) - Win32 apps | Microsoft Learn

参考:STARTUPINFOA (processthreadsapi.h) - Win32 apps | Microsoft Learn

実際にこのプログラムをビルドしてデバッグしてみると、API の呼び出し後にCreateProcessInternalWを呼び出すことを簡単に確認することができました。

image-20230423234116214

OpenProcess API で既存のローカル Process オブジェクトを開く

OpenProcess API を使用することで既存のローカルプロセスオブジェクトのハンドルを取得できます。

HANDLE OpenProcess(
  [in] DWORD dwDesiredAccess,
  [in] BOOL  bInheritHandle,
  [in] DWORD dwProcessId
);

例えば、以下の例では PID を指定してプロセスオブジェクトのハンドルを取得します。

以下の例では要求するアクセス権限としてはPROCESS_ALL_ACCESSを指定しています。

このアクセス権は通常、プロセスのセキュリティ記述子と検証されますが、呼び出しユーザにSeDebugPrivilegeの特権が存在する場合は必ず要求されたアクセスが許可されます。

#include "windows.h"
#include "tchar.h"
#pragma comment(lib, "advapi32.lib")

int main()
{

	//HANDLE OpenProcess(
	//	[in] DWORD dwDesiredAccess,
	//	[in] BOOL  bInheritHandle,
	//	[in] DWORD dwProcessId
	//);

	// 疑似プロセスオブジェクトの取得
	HANDLE hProcess = NULL;
	hProcess = GetCurrentProcess();

	// Try to open the remote process.
	DWORD PID = <PID>;
	hProcess = OpenProcess(
		PROCESS_ALL_ACCESS,
		TRUE,
		PID);

	if (!hProcess)
	{
		wprintf(L"ERROR: Could not get a handle\n");
		return 1;
	}
	wprintf(L"[+] Got process handle.\n");


	// Create a pointer to a Token
	PHANDLE pToken = new HANDLE;

	BOOL bResult = OpenProcessToken(
		hProcess, 
		TOKEN_QUERY | TOKEN_IMPERSONATE, 
		pToken);

	if (!bResult)
	{
		wprintf(L"ERROR: Could not open process token.\n");
		return 1;
	}
	wprintf(L"[+] Process token is now open.\n");

    
	// GetProcessId
	DWORD cPID = GetProcessId(hProcess);
	wprintf(L"[+] GetProcessId result: %d.\n", cPID);

	return 0;
}

参考:OpenProcess function (processthreadsapi.h) - Win32 apps | Microsoft Learn

参考:OpenProcessToken function (processthreadsapi.h) - Win32 apps | Microsoft Learn

参考:Process Security and Access Rights - Win32 apps | Microsoft Learn

WinAPI でシステム内のプロセスを列挙する

長くなったので以下記事に分割しました。

参考:Win32 API でシステム内のプロセス情報を列挙してみるやつ

Note:EPROCESS 構造体

+0x000 Pcb              : _KPROCESS
+0x438 ProcessLock      : _EX_PUSH_LOCK
+0x440 UniqueProcessId  : Ptr64 Void
+0x448 ActiveProcessLinks : _LIST_ENTRY
+0x458 RundownProtect   : _EX_RUNDOWN_REF
+0x460 Flags2           : Uint4B
+0x460 JobNotReallyActive : Pos 0, 1 Bit
+0x460 AccountingFolded : Pos 1, 1 Bit
+0x460 NewProcessReported : Pos 2, 1 Bit
+0x460 ExitProcessReported : Pos 3, 1 Bit
+0x460 ReportCommitChanges : Pos 4, 1 Bit
+0x460 LastReportMemory : Pos 5, 1 Bit
+0x460 ForceWakeCharge  : Pos 6, 1 Bit
+0x460 CrossSessionCreate : Pos 7, 1 Bit
+0x460 NeedsHandleRundown : Pos 8, 1 Bit
+0x460 RefTraceEnabled  : Pos 9, 1 Bit
+0x460 PicoCreated      : Pos 10, 1 Bit
+0x460 EmptyJobEvaluated : Pos 11, 1 Bit
+0x460 DefaultPagePriority : Pos 12, 3 Bits
+0x460 PrimaryTokenFrozen : Pos 15, 1 Bit
+0x460 ProcessVerifierTarget : Pos 16, 1 Bit
+0x460 RestrictSetThreadContext : Pos 17, 1 Bit
+0x460 AffinityPermanent : Pos 18, 1 Bit
+0x460 AffinityUpdateEnable : Pos 19, 1 Bit
+0x460 PropagateNode    : Pos 20, 1 Bit
+0x460 ExplicitAffinity : Pos 21, 1 Bit
+0x460 ProcessExecutionState : Pos 22, 2 Bits
+0x460 EnableReadVmLogging : Pos 24, 1 Bit
+0x460 EnableWriteVmLogging : Pos 25, 1 Bit
+0x460 FatalAccessTerminationRequested : Pos 26, 1 Bit
+0x460 DisableSystemAllowedCpuSet : Pos 27, 1 Bit
+0x460 ProcessStateChangeRequest : Pos 28, 2 Bits
+0x460 ProcessStateChangeInProgress : Pos 30, 1 Bit
+0x460 InPrivate        : Pos 31, 1 Bit
+0x464 Flags            : Uint4B
+0x464 CreateReported   : Pos 0, 1 Bit
+0x464 NoDebugInherit   : Pos 1, 1 Bit
+0x464 ProcessExiting   : Pos 2, 1 Bit
+0x464 ProcessDelete    : Pos 3, 1 Bit
+0x464 ManageExecutableMemoryWrites : Pos 4, 1 Bit
+0x464 VmDeleted        : Pos 5, 1 Bit
+0x464 OutswapEnabled   : Pos 6, 1 Bit
+0x464 Outswapped       : Pos 7, 1 Bit
+0x464 FailFastOnCommitFail : Pos 8, 1 Bit
+0x464 Wow64VaSpace4Gb  : Pos 9, 1 Bit
+0x464 AddressSpaceInitialized : Pos 10, 2 Bits
+0x464 SetTimerResolution : Pos 12, 1 Bit
+0x464 BreakOnTermination : Pos 13, 1 Bit
+0x464 DeprioritizeViews : Pos 14, 1 Bit
+0x464 WriteWatch       : Pos 15, 1 Bit
+0x464 ProcessInSession : Pos 16, 1 Bit
+0x464 OverrideAddressSpace : Pos 17, 1 Bit
+0x464 HasAddressSpace  : Pos 18, 1 Bit
+0x464 LaunchPrefetched : Pos 19, 1 Bit
+0x464 Background       : Pos 20, 1 Bit
+0x464 VmTopDown        : Pos 21, 1 Bit
+0x464 ImageNotifyDone  : Pos 22, 1 Bit
+0x464 PdeUpdateNeeded  : Pos 23, 1 Bit
+0x464 VdmAllowed       : Pos 24, 1 Bit
+0x464 ProcessRundown   : Pos 25, 1 Bit
+0x464 ProcessInserted  : Pos 26, 1 Bit
+0x464 DefaultIoPriority : Pos 27, 3 Bits
+0x464 ProcessSelfDelete : Pos 30, 1 Bit
+0x464 SetTimerResolutionLink : Pos 31, 1 Bit
+0x468 CreateTime       : _LARGE_INTEGER
+0x470 ProcessQuotaUsage : [2] Uint8B
+0x480 ProcessQuotaPeak : [2] Uint8B
+0x490 PeakVirtualSize  : Uint8B
+0x498 VirtualSize      : Uint8B
+0x4a0 SessionProcessLinks : _LIST_ENTRY
+0x4b0 ExceptionPortData : Ptr64 Void
+0x4b0 ExceptionPortValue : Uint8B
+0x4b0 ExceptionPortState : Pos 0, 3 Bits
+0x4b8 Token            : _EX_FAST_REF
+0x4c0 MmReserved       : Uint8B
+0x4c8 AddressCreationLock : _EX_PUSH_LOCK
+0x4d0 PageTableCommitmentLock : _EX_PUSH_LOCK
+0x4d8 RotateInProgress : Ptr64 _ETHREAD
+0x4e0 ForkInProgress   : Ptr64 _ETHREAD
+0x4e8 CommitChargeJob  : Ptr64 _EJOB
+0x4f0 CloneRoot        : _RTL_AVL_TREE
+0x4f8 NumberOfPrivatePages : Uint8B
+0x500 NumberOfLockedPages : Uint8B
+0x508 Win32Process     : Ptr64 Void
+0x510 Job              : Ptr64 _EJOB
+0x518 SectionObject    : Ptr64 Void
+0x520 SectionBaseAddress : Ptr64 Void
+0x528 Cookie           : Uint4B
+0x530 WorkingSetWatch  : Ptr64 _PAGEFAULT_HISTORY
+0x538 Win32WindowStation : Ptr64 Void
+0x540 InheritedFromUniqueProcessId : Ptr64 Void
+0x548 OwnerProcessId   : Uint8B
+0x550 Peb              : Ptr64 _PEB
+0x558 Session          : Ptr64 _MM_SESSION_SPACE
+0x560 Spare1           : Ptr64 Void
+0x568 QuotaBlock       : Ptr64 _EPROCESS_QUOTA_BLOCK
+0x570 ObjectTable      : Ptr64 _HANDLE_TABLE
+0x578 DebugPort        : Ptr64 Void
+0x580 WoW64Process     : Ptr64 _EWOW64PROCESS
+0x588 DeviceMap        : Ptr64 Void
+0x590 EtwDataSource    : Ptr64 Void
+0x598 PageDirectoryPte : Uint8B
+0x5a0 ImageFilePointer : Ptr64 _FILE_OBJECT
+0x5a8 ImageFileName    : [15] UChar
+0x5b7 PriorityClass    : UChar
+0x5b8 SecurityPort     : Ptr64 Void
+0x5c0 SeAuditProcessCreationInfo : _SE_AUDIT_PROCESS_CREATION_INFO
+0x5c8 JobLinks         : _LIST_ENTRY
+0x5d8 HighestUserAddress : Ptr64 Void
+0x5e0 ThreadListHead   : _LIST_ENTRY
+0x5f0 ActiveThreads    : Uint4B
+0x5f4 ImagePathHash    : Uint4B
+0x5f8 DefaultHardErrorProcessing : Uint4B
+0x5fc LastThreadExitStatus : Int4B
+0x600 PrefetchTrace    : _EX_FAST_REF
+0x608 LockedPagesList  : Ptr64 Void
+0x610 ReadOperationCount : _LARGE_INTEGER
+0x618 WriteOperationCount : _LARGE_INTEGER
+0x620 OtherOperationCount : _LARGE_INTEGER
+0x628 ReadTransferCount : _LARGE_INTEGER
+0x630 WriteTransferCount : _LARGE_INTEGER
+0x638 OtherTransferCount : _LARGE_INTEGER
+0x640 CommitChargeLimit : Uint8B
+0x648 CommitCharge     : Uint8B
+0x650 CommitChargePeak : Uint8B
+0x680 Vm               : _MMSUPPORT_FULL
+0x7c0 MmProcessLinks   : _LIST_ENTRY
+0x7d0 ModifiedPageCount : Uint4B
+0x7d4 ExitStatus       : Int4B
+0x7d8 VadRoot          : _RTL_AVL_TREE
+0x7e0 VadHint          : Ptr64 Void
+0x7e8 VadCount         : Uint8B
+0x7f0 VadPhysicalPages : Uint8B
+0x7f8 VadPhysicalPagesLimit : Uint8B
+0x800 AlpcContext      : _ALPC_PROCESS_CONTEXT
+0x820 TimerResolutionLink : _LIST_ENTRY
+0x830 TimerResolutionStackRecord : Ptr64 _PO_DIAG_STACK_RECORD
+0x838 RequestedTimerResolution : Uint4B
+0x83c SmallestTimerResolution : Uint4B
+0x840 ExitTime         : _LARGE_INTEGER
+0x848 InvertedFunctionTable : Ptr64 _INVERTED_FUNCTION_TABLE
+0x850 InvertedFunctionTableLock : _EX_PUSH_LOCK
+0x858 ActiveThreadsHighWatermark : Uint4B
+0x85c LargePrivateVadCount : Uint4B
+0x860 ThreadListLock   : _EX_PUSH_LOCK
+0x868 WnfContext       : Ptr64 Void
+0x870 ServerSilo       : Ptr64 _EJOB
+0x878 SignatureLevel   : UChar
+0x879 SectionSignatureLevel : UChar
+0x87a Protection       : _PS_PROTECTION
+0x87b HangCount        : Pos 0, 3 Bits
+0x87b GhostCount       : Pos 3, 3 Bits
+0x87b PrefilterException : Pos 6, 1 Bit
+0x87c Flags3           : Uint4B
+0x87c Minimal          : Pos 0, 1 Bit
+0x87c ReplacingPageRoot : Pos 1, 1 Bit
+0x87c Crashed          : Pos 2, 1 Bit
+0x87c JobVadsAreTracked : Pos 3, 1 Bit
+0x87c VadTrackingDisabled : Pos 4, 1 Bit
+0x87c AuxiliaryProcess : Pos 5, 1 Bit
+0x87c SubsystemProcess : Pos 6, 1 Bit
+0x87c IndirectCpuSets  : Pos 7, 1 Bit
+0x87c RelinquishedCommit : Pos 8, 1 Bit
+0x87c HighGraphicsPriority : Pos 9, 1 Bit
+0x87c CommitFailLogged : Pos 10, 1 Bit
+0x87c ReserveFailLogged : Pos 11, 1 Bit
+0x87c SystemProcess    : Pos 12, 1 Bit
+0x87c HideImageBaseAddresses : Pos 13, 1 Bit
+0x87c AddressPolicyFrozen : Pos 14, 1 Bit
+0x87c ProcessFirstResume : Pos 15, 1 Bit
+0x87c ForegroundExternal : Pos 16, 1 Bit
+0x87c ForegroundSystem : Pos 17, 1 Bit
+0x87c HighMemoryPriority : Pos 18, 1 Bit
+0x87c EnableProcessSuspendResumeLogging : Pos 19, 1 Bit
+0x87c EnableThreadSuspendResumeLogging : Pos 20, 1 Bit
+0x87c SecurityDomainChanged : Pos 21, 1 Bit
+0x87c SecurityFreezeComplete : Pos 22, 1 Bit
+0x87c VmProcessorHost  : Pos 23, 1 Bit
+0x87c VmProcessorHostTransition : Pos 24, 1 Bit
+0x87c AltSyscall       : Pos 25, 1 Bit
+0x87c TimerResolutionIgnore : Pos 26, 1 Bit
+0x87c DisallowUserTerminate : Pos 27, 1 Bit
+0x880 DeviceAsid       : Int4B
+0x888 SvmData          : Ptr64 Void
+0x890 SvmProcessLock   : _EX_PUSH_LOCK
+0x898 SvmLock          : Uint8B
+0x8a0 SvmProcessDeviceListHead : _LIST_ENTRY
+0x8b0 LastFreezeInterruptTime : Uint8B
+0x8b8 DiskCounters     : Ptr64 _PROCESS_DISK_COUNTERS
+0x8c0 PicoContext      : Ptr64 Void
+0x8c8 EnclaveTable     : Ptr64 Void
+0x8d0 EnclaveNumber    : Uint8B
+0x8d8 EnclaveLock      : _EX_PUSH_LOCK
+0x8e0 HighPriorityFaultsAllowed : Uint4B
+0x8e8 EnergyContext    : Ptr64 _PO_PROCESS_ENERGY_CONTEXT
+0x8f0 VmContext        : Ptr64 Void
+0x8f8 SequenceNumber   : Uint8B
+0x900 CreateInterruptTime : Uint8B
+0x908 CreateUnbiasedInterruptTime : Uint8B
+0x910 TotalUnbiasedFrozenTime : Uint8B
+0x918 LastAppStateUpdateTime : Uint8B
+0x920 LastAppStateUptime : Pos 0, 61 Bits
+0x920 LastAppState     : Pos 61, 3 Bits
+0x928 SharedCommitCharge : Uint8B
+0x930 SharedCommitLock : _EX_PUSH_LOCK
+0x938 SharedCommitLinks : _LIST_ENTRY
+0x948 AllowedCpuSets   : Uint8B
+0x950 DefaultCpuSets   : Uint8B
+0x948 AllowedCpuSetsIndirect : Ptr64 Uint8B
+0x950 DefaultCpuSetsIndirect : Ptr64 Uint8B
+0x958 DiskIoAttribution : Ptr64 Void
+0x960 DxgProcess       : Ptr64 Void
+0x968 Win32KFilterSet  : Uint4B
+0x970 ProcessTimerDelay : _PS_INTERLOCKED_TIMER_DELAY_VALUES
+0x978 KTimerSets       : Uint4B
+0x97c KTimer2Sets      : Uint4B
+0x980 ThreadTimerSets  : Uint4B
+0x988 VirtualTimerListLock : Uint8B
+0x990 VirtualTimerListHead : _LIST_ENTRY
+0x9a0 WakeChannel      : _WNF_STATE_NAME
+0x9a0 WakeInfo         : _PS_PROCESS_WAKE_INFORMATION
+0x9d0 MitigationFlags  : Uint4B
+0x9d0 MitigationFlagsValues : <anonymous-tag>
+0x9d4 MitigationFlags2 : Uint4B
+0x9d4 MitigationFlags2Values : <anonymous-tag>
+0x9d8 PartitionObject  : Ptr64 Void
+0x9e0 SecurityDomain   : Uint8B
+0x9e8 ParentSecurityDomain : Uint8B
+0x9f0 CoverageSamplerContext : Ptr64 Void
+0x9f8 MmHotPatchContext : Ptr64 Void
+0xa00 DynamicEHContinuationTargetsTree : _RTL_AVL_TREE
+0xa08 DynamicEHContinuationTargetsLock : _EX_PUSH_LOCK
+0xa10 DynamicEnforcedCetCompatibleRanges : _PS_DYNAMIC_ENFORCED_ADDRESS_RANGES
+0xa20 DisabledComponentFlags : Uint4B
+0xa28 PathRedirectionHashes : Ptr64 Uint4B

Note:Process 関連のシンボル

# x nt!*process*
fffff801`0b4ca2fc nt!PopEtProcessSnapshotCreate (void)
fffff801`0b5e35a0 nt!ExpGetProcessInformation$filt$4 (void)
fffff801`0b5e35e2 nt!ExpGetProcessInformation$filt$5 (void)
fffff801`0b5e3666 nt!ExpGetProcessInformation$filt$6 (void)
fffff801`0b5e37f2 nt!ExpGetProcessInformation$filt$7 (void)
fffff801`0b5e3624 nt!ExpGetProcessInformation$filt$0 (void)
fffff801`0b5e372c nt!ExpGetProcessInformation$filt$1 (void)
fffff801`0b4e2a94 nt!WbCreateWarbirdProcess (void)
fffff801`0b5e376e nt!ExpGetProcessInformation$filt$2 (void)
fffff801`0b5e37b0 nt!ExpGetProcessInformation$filt$3 (void)
fffff801`0b5e36a8 nt!ExpGetProcessInformation$filt$8 (void)
fffff801`0b5e36ea nt!ExpGetProcessInformation$filt$9 (void)
fffff801`0b1a03a0 nt!HalpCmciSetProcessorConfigIntel (void)
fffff801`0b5e5e23 nt!NtAcquireProcessActivityReference$filt$0 (void)
fffff801`0b1b4458 nt!KiAddProcessorToGroupDatabase (void)
fffff801`0b463918 nt!PspRemoveProcessFromJobChain (void)
fffff801`0b0ea60c nt!KeFlushProcessWriteBuffers (void)
fffff801`0b5e5cf6 nt!ExpQueryNumaProcessorMap$filt$0 (void)
fffff801`0b53eff8 nt!PpDevCfgProcessDeviceOperations (void)
fffff801`0b03d244 nt!KeSetDisableQuantumProcess (void)
fffff801`0b0e8fe4 nt!KeSetPriorityAndQuantumProcess (void)
fffff801`0b5458a4 nt!PiDmObjectProcessPropertyChange (void)
fffff801`0b43ba80 nt!PsLookupProcessThreadByCid (void)
fffff801`0b046294 nt!PopFxProcessWork (void)
fffff801`0b5cad34 nt!MmInitializeHandBuiltProcess (void)
fffff801`0b523080 nt!MiProcessCrcList (void)
fffff801`0b4e2f88 nt!WbProcessStartup (void)
fffff801`0b068550 nt!KiSwapProcess (void)
fffff801`0b4c96f4 nt!RtlpProcessIFEOKeyFilter (void)
fffff801`0b5ccc04 nt!MmInitializeHandBuiltProcess2 (void)
fffff801`0b135278 nt!MiCreateNewProcessTopLevelMappings (void)
fffff801`0b5c0284 nt!PspInitializeProtectedProcessParameters (void)
fffff801`0b5c1d5c nt!CmpInitializeRegistryProcess (void)
fffff801`0b03d370 nt!PspUnlockProcessListExclusive (void)
fffff801`0b1055c0 nt!KiProcessThreadWaitList (void)
fffff801`0b71e787 nt!SeCodeIntegritySetInformationProcess$filt$0 (void)
fffff801`0b1a70d8 nt!HvlEnlightenProcessor (void)
fffff801`0b4db3e8 nt!ExCheckFullProcessInformationAccess (void)
fffff801`0b430098 nt!PopEtGetProcessSidAndPackageIdentity (void)
fffff801`0b42809c nt!PspCallProcessNotifyRoutines (void)
fffff801`0b42ce24 nt!PspAssignProcessToJob (void)
fffff801`0b52c1a4 nt!PpDevCfgProcessDeviceReset (void)
fffff801`0b4f8ce0 nt!ExProcessorCounterSetCallback (void)
fffff801`0b15fa70 nt!KeQueryLogicalProcessorRelationship (void)
fffff801`0b0d9bd8 nt!KiSetProcessorIdle (void)
fffff801`0b0a1a10 nt!PfSnReferenceProcessTrace (void)
fffff801`0b52e858 nt!PiSwProcessRemove (void)
fffff801`0b4613ec nt!AlpcpCleanupProcessViews (void)
fffff801`0b1b34ec nt!BapdpProcessEtwEvents (void)
fffff801`0b431c6c nt!PspInitializeFullProcessImageName (void)
fffff801`0b0e37ec nt!SepMandatorySubProcessToken (void)
fffff801`0b52d050 nt!NtAcquireProcessActivityReference (void)
fffff801`0b562300 nt!PiDmaGuardProcessNewDeviceNode (void)
fffff801`0b16c710 nt!IoIsInitiator32bitProcess (void)
fffff801`0b590878 nt!PspSetCreateProcessNotifyRoutine (void)
fffff801`0b4ee310 nt!SmProcessCreateRequest (void)
fffff801`0b1a3de8 nt!MiReplicatePteChangeToProcess (void)
fffff801`0b871fe4 nt!PpLastGoodDoBootProcessing (void)
fffff801`0b10a250 nt!KiInSwapProcesses (void)
fffff801`0b188fb8 nt!MiSessionUnlinkProcess (void)
fffff801`0b52b80c nt!EtwTimLogProhibitChildProcessCreation (void)
fffff801`0b1af1c4 nt!HalpInterruptSortProcessorTable (void)
fffff801`0b42f82c nt!PopEtGetProcessAppId (void)
fffff801`0b5e437d nt!WbProcessModuleUnload$filt$0 (void)
fffff801`0b03ee20 nt!KeStackAttachProcess (void)
fffff801`0b53019c nt!KeSetDisableBoostProcess (void)
fffff801`0b05bd50 nt!ST_STORE<SM_TRAITS>::StDmCombineBufferProcess (void)
fffff801`0b539cf0 nt!PnpProcessTargetDeviceEvent (void)
fffff801`0b45cf10 nt!WbFreeWarbirdProcess (void)
fffff801`0b1a0338 nt!HalpCmciSetProcessorConfig (void)
fffff801`0b51c6a0 nt!PsThawProcess (void)
fffff801`0b18d404 nt!PsTransferProcessQuotaToSharedQuota (void)
fffff801`0b0421e0 nt!PspNotifyProcessBackgroundTransition (void)
fffff801`0b4b0c90 nt!ObpProcessRemoveObjectQueue (void)
fffff801`0b430564 nt!DbgkCopyProcessDebugPort (void)
fffff801`0b0ef8e0 nt!PpmPerfSelectProcessorState (void)
fffff801`0b1a2d54 nt!MiCheckAndProcessCcAccessLog (void)
fffff801`0b541dd8 nt!PiSwProcessParentStartIrp (void)
fffff801`0b0eb0e0 nt!KeForceResumeProcess (void)
fffff801`0b54039c nt!PnpProcessRelation (void)
fffff801`0b18f584 nt!KiAbForceProcessLockEntry (void)
fffff801`0b70a0c8 nt!NtGetCurrentProcessorNumberEx$filt$0 (void)
fffff801`0b1b461c nt!KiQueryProcessorNode (void)
fffff801`0b595850 nt!KxInitializeProcessorState (void)
fffff801`0b432d38 nt!EtwpBuildProcessEvent (void)
fffff801`0b1c5980 nt!KiGetProcessCpuSetMaskPointer (void)
fffff801`0b158420 nt!SmKmStoreHelperCommandProcess (void)
fffff801`0b5e4550 nt!ExpCopyProcessInfo$filt$0 (void)
fffff801`0b5a92e0 nt!RtlAddProcessTrustLabelAce (void)
fffff801`0b45bf28 nt!WbProcessModuleUnload (void)
fffff801`0b538770 nt!PnpProcessAssignResourcesWorker (void)
fffff801`0b42c2e0 nt!NtIsProcessInJob (void)
fffff801`0b432b5c nt!EtwpQueryProcessCommandLine (void)
fffff801`0b100060 nt!HalpProcessorPrepareForIdle (void)
fffff801`0b849050 nt!BapdpProcessWmdResults (void)
fffff801`0b44d410 nt!PfCalculateProcessHash (void)
fffff801`0b5c0de0 nt!WmipProcessLegacyEtwRegister (void)
fffff801`0b3373c0 nt!MiLockAndSelectSessionAttachProcess (void)
fffff801`0b6911fc nt!HvlpCreateRootVirtualProcessor (void)
fffff801`0b1b3840 nt!HalEnumerateProcessors (void)
fffff801`0b5c2268 nt!DbgkCreateMinimalProcess (void)
fffff801`0b0dd750 nt!KiOutSwapProcesses (void)
fffff801`0b5c1f74 nt!PsCreateMinimalProcess (void)
fffff801`0b055d74 nt!SMKM_STORE_MGR<SM_TRAITS>::SmCompressCtxProcessReadyQueue (void)
fffff801`0b54d5f4 nt!AslEnvGetProcessWowInfo (void)
fffff801`0b0f7040 nt!KeCpuSetReportParkedProcessors (void)
fffff801`0b463854 nt!PspLockRootJobFromProcess (void)
fffff801`0b1a5fc0 nt!HalpApicStartProcessor (void)
fffff801`0b10ad54 nt!PpmPerfCheckForIllegalProcessorThrottle (void)
fffff801`0b4c6ee4 nt!IopSymlinkProcessReparse (void)
fffff801`0b1a0be0 nt!HalStartNextProcessor (void)
fffff801`0b4ef6bc nt!MiCfgInitializeProcess (void)
fffff801`0b52be34 nt!PpDevCfgProcessDeviceClass (void)
fffff801`0b0dd934 nt!MmOutSwapProcess (void)
fffff801`0b171b54 nt!MiProcessLoaderEntry (void)
fffff801`0b4ef590 nt!MiMapProcessExecutable (void)
fffff801`0b42f538 nt!PspAllocateAndQueryProcessNotificationChannel (void)
fffff801`0b1ce690 nt!PopProcessorSetPep (void)
fffff801`0b5ca6dc nt!SmProcessConfigRequest (void)
fffff801`0b56eba0 nt!PsSetProcessFaultInformation (void)
fffff801`0b04b3fc nt!KeAbProcessBaseIoPriorityChangeInternal (void)
fffff801`0b1612d0 nt!KeThawProcess (void)
fffff801`0b13b300 nt!MiBeginProcessClean (void)
fffff801`0b58bcac nt!ObInitializeProcessor (void)
fffff801`0b4302b8 nt!PspInsertProcess (void)
fffff801`0b1a01ec nt!HalpCmciPollProcessor (void)
fffff801`0b04423c nt!PspProcessUnbindVirtualizedTimers (void)
fffff801`0b4cb2b4 nt!ExpWnfCreateProcessContext (void)
fffff801`0b42e290 nt!PspChangeProcessExecutionState (void)
fffff801`0b849144 nt!BapdpProcessBootMetadata (void)
fffff801`0b1a1ab4 nt!HalpQueryMaximumRegisteredProcessorCount (void)
fffff801`0b1c41c8 nt!PpmUpdateProcessorIdleAccounting (void)
fffff801`0b4c54d4 nt!MmProcessWorkingSetControl (void)
fffff801`0b490394 nt!PspEstimateNewProcessServerSilo (void)
fffff801`0b4eeab4 nt!MmInitializeProcessAddressSpace (void)
fffff801`0b5e4b76 nt!NtSetInformationProcess$filt$8 (void)
fffff801`0b123c34 nt!PspIsProcessReadyForRemoteThread (void)
fffff801`0b068320 nt!KiUnstackDetachProcess (void)
fffff801`0b541b38 nt!PiSwProcessParentRemoveIrp (void)
fffff801`0b52e34c nt!PipProcessQueryRemovalInKernelMode (void)
fffff801`0b15d3ec nt!KeAbProcessEffectiveIoPriorityChange (void)
fffff801`0b5c2394 nt!CmpCreateRegistryProcessToken (void)
fffff801`0b17b0b0 nt!HalQueryMaximumProcessorCount (void)
fffff801`0b1c55c4 nt!KeSetCpuSetsProcess (void)
fffff801`0b4a5d30 nt!ObpReferenceProcessObjectByHandle (void)
fffff801`0b4ef2a0 nt!MiComputeProcessUserVa (void)
fffff801`0b0eb00c nt!KeSetProcessSchedulingGroup (void)
fffff801`0b52d428 nt!PiProcessClearDeviceProblem (void)
fffff801`0b5c3ff8 nt!SmcProcessListRequest (void)
fffff801`0b58d380 nt!EtwpProcessEnumCallback (void)
fffff801`0b4a4414 nt!CmpProcessLightWeightUOW (void)
fffff801`0b7982b0 nt!HalpMcaResumeProcessorConfig (void)
fffff801`0b465570 nt!PspEnumJobsAndProcessesInJobHierarchy (void)
fffff801`0b58d268 nt!EtwpProcessThreadImageRundown (void)
fffff801`0b53ead0 nt!PiDevCfgProcessDevice (void)
fffff801`0b18d9a0 nt!HvlGetPpmStatsForProcessor (void)
fffff801`0b1986cc nt!PpmPerfApplyProcessorState (void)
fffff801`0b4301ec nt!ObInitProcess (void)
fffff801`0b057d60 nt!ST_STORE<SM_TRAITS>::StWorkItemProcess (void)
fffff801`0b1984e0 nt!PpmPerfApplyProcessorStates (void)
fffff801`0b43252c nt!EtwpPsProvTraceProcess (void)
fffff801`0b5e4b60 nt!NtSetInformationProcess$filt$9 (void)
fffff801`0b5a9788 nt!EtwpCCSwapInitializeProcessor (void)
fffff801`0b4a63d0 nt!PspCaptureUserProcessParameters (void)
fffff801`0b5560b0 nt!MiProcessKernelCfgImageLoadConfig (void)
fffff801`0b52d384 nt!PiProcessQueryRemoveNoFdo (void)
fffff801`0b063464 nt!KeFlushProcessTb (void)
fffff801`0b5b4ea8 nt!PpmCheckInitProcessors (void)
fffff801`0b1c9410 nt!HalpNumaQueryProcessorNode (void)
fffff801`0b44ea70 nt!PsSetProcessTelemetryAppState (void)
fffff801`0b07c540 nt!MiChargeProcessCommitment (void)
fffff801`0b537884 nt!PnpDeviceCompletionProcessCompletedRequest (void)
fffff801`0b01d160 nt!KiSearchForNewThreadOnProcessor (void)
fffff801`0b10fbc8 nt!ExNotifyWithProcessing (void)
fffff801`0b459a54 nt!ExGetNextProcess (void)
fffff801`0b4d69c0 nt!PspGetProcessProtectionRequirementsFromImage (void)
fffff801`0b79c7b0 nt!HalpErrataApplyPerProcessor (void)
fffff801`0b4d9860 nt!PoSetProcessEnergyTrackingState (void)
fffff801`0b4cd440 nt!ObSetCurrentProcessDeviceMap (void)
fffff801`0b79ca54 nt!HalpInterruptStartProcessor (void)
fffff801`0b11b1d4 nt!MiFillLogProcessInfo (void)
fffff801`0b42c030 nt!PspTerminateProcessesJobCallback (void)
fffff801`0b4a71a0 nt!KeInitializeProcess (void)
fffff801`0b4cc0dc nt!KeSynchronizeWithDynamicProcessors (void)
fffff801`0b1b4e50 nt!KeAllocateProcessorProfileStructures (void)
fffff801`0b47bd20 nt!MiChargeFullProcessCommitment (void)
fffff801`0b5e3c8c nt!NtQueryInformationProcess$filt$9 (void)
fffff801`0b588ae0 nt!PpmUpdateProcessorPolicy (void)
fffff801`0b1a0c4c nt!HalpInterruptWaitForProcessorStartUp (void)
fffff801`0b1a0250 nt!HalpCmcPollProcessor (void)
fffff801`0b0ff1b0 nt!KiRequestProcessInSwap (void)
fffff801`0b4fa488 nt!PopUmpoProcessPowerMessage (void)
fffff801`0b464ff0 nt!PspEnforceLimitsProcessCallback (void)
fffff801`0b8522cc nt!PiDmaGuardProcessRegistry (void)
fffff801`0b13cc78 nt!KeGenericProcessorCallback (void)
fffff801`0b42db78 nt!PspBindProcessSessionToJob (void)
fffff801`0b52d244 nt!PiProcessSetDeviceProblem (void)
fffff801`0b4d7168 nt!PspTerminateAllProcessesInJobHierarchy (void)
fffff801`0b0ff0e0 nt!KiInSwapSingleProcess (void)
fffff801`0b411f60 nt!ExpGetProcessInformation (void)
fffff801`0b49319c nt!PspWriteTebIdealProcessor (void)
fffff801`0b538ac0 nt!PiProcessDriverInstance (void)
fffff801`0b7a388c nt!HalpMceInitProcessor (void)
fffff801`0b4cb1e0 nt!NtSetWnfProcessNotificationEvent (void)
fffff801`0b5cc3a8 nt!PopMonitorProcessLoop (void)
fffff801`0b4c2a34 nt!IopCleanupProcessResources (void)
fffff801`0b450eb0 nt!ExpWnfDeleteProcessContext (void)
fffff801`0b44cf8c nt!PfProcessCreateNotification (void)
fffff801`0b03d910 nt!KeSetProcess (void)
fffff801`0b5e3834 nt!ExpGetProcessInformation$fin$10 (void)
fffff801`0b11d3d0 nt!PsQueryProcessCommandLine (void)
fffff801`0b4907c8 nt!PspCreateUserProcessEcp (void)
fffff801`0b1ceb50 nt!HalpBlkPoGetProcessorCount (void)
fffff801`0b848f30 nt!BapdpProcessEDrvHintInfo (void)
fffff801`0b53f3ec nt!PiProcessReenumeration (void)
fffff801`0b17134c nt!MiProcessKernelCfgImage (void)
fffff801`0b183658 nt!KeSaveIptStateBeforeProcessorGoesOffline (void)
fffff801`0b5e5982 nt!WbProcessStartup$filt$0 (void)
fffff801`0b088cf0 nt!KeStallExecutionProcessor (void)
fffff801`0b198834 nt!PpmPerfArbitratorApplyProcessorState (void)
fffff801`0b49f850 nt!PspChangeJobMemoryUsageByProcess (void)
fffff801`0b1928ec nt!PopDiagTraceProcessorThrottleDurationPerfTrack (void)
fffff801`0b5e499a nt!MmProbeAndLockProcessPages$fin$0 (void)
fffff801`0b121690 nt!KeAttachProcess (void)
fffff801`0b42f1ac nt!EtwpWriteProcessStarted (void)
fffff801`0b4f146c nt!PfSnOperationProcess (void)
fffff801`0b851e1c nt!PipProcessPendingServices (void)
fffff801`0b5e3c76 nt!NtQueryInformationProcess$filt$8 (void)
fffff801`0b12a1f8 nt!PspUnlockProcessExclusive (void)
fffff801`0b19d774 nt!HalpTscTraceProcessorSynchronization (void)
fffff801`0b448e60 nt!PiUEventProcessBroadcastNotifications (void)
fffff801`0b4790e0 nt!CmpAttachToRegistryProcess (void)
fffff801`0b5e4511 nt!PspQueryJobHierarchyProcessIdList$filt$0 (void)
fffff801`0b5c3a80 nt!HalpGetProcessorBrandString (void)
fffff801`0b4991d0 nt!NtTerminateProcess (void)
fffff801`0b5b6b98 nt!PopDetectSimulatedHeteroProcessors (void)
fffff801`0b161de0 nt!PopProcessPowerRequestOverrideQueryResponse (void)
fffff801`0b02a630 nt!SepSidFromProcessProtection (void)
fffff801`0b84a4c8 nt!StartFirstUserProcess (void)
fffff801`0b0556f0 nt!SMKM_STORE_MGR<SM_TRAITS>::SmProcessAddCompletion (void)
fffff801`0b856254 nt!MiInitializeBootProcess (void)
fffff801`0b540600 nt!PnpProcessDependencyRelations (void)
fffff801`0b11bba0 nt!KiIsProcessTerminationRequested (void)
fffff801`0b063c54 nt!IoSetDiskIoAttributionOnProcess (void)
fffff801`0b5b7928 nt!SeAuditProcessCreation (void)
fffff801`0b79e5e8 nt!KiGetProcessorSignature (void)
fffff801`0b84a6a8 nt!RtlCreateUserProcessEx (void)
fffff801`0b4ace1c nt!PspSetupUserProcessAddressSpace (void)
fffff801`0b3ee0b0 nt!PspChargeProcessWakeCounter (void)
fffff801`0b5e3c60 nt!NtQueryInformationProcess$filt$7 (void)
fffff801`0b579090 nt!PspSetProcessAffinityUpdateMode (void)
fffff801`0b1a8f54 nt!MiComputeOptimalWriteProcessors (void)
fffff801`0b130fd0 nt!IoGetInitiatorProcess (void)
fffff801`0b1cdbd0 nt!PoFxProcessorNotification (void)
fffff801`0b5e4b08 nt!NtSetInformationProcess$filt$4 (void)
fffff801`0b7a066c nt!KiCreateCpuSetForProcessor (void)
fffff801`0b1770c0 nt!HalGetProcessorIdByNtNumber (void)
fffff801`0b74ce1c nt!ExpGetSystemProcessorFeaturesInformation$filt$0 (void)
fffff801`0b459378 nt!PsEnumProcesses (void)
fffff801`0b492cf0 nt!PspDestroyProcessParameterOverrides (void)
fffff801`0b84583c nt!PopProcessBootstat (void)
fffff801`0b1366e8 nt!MiInitializePfnForOtherProcess (void)
fffff801`0b56d9d4 nt!EtwSetProcessTelemetryCoverage (void)
fffff801`0b4d5c28 nt!PspUnlinkJobProcess (void)
fffff801`0b851d90 nt!PipProcessPendingOsExtensionResources (void)
fffff801`0b1927bc nt!PopDiagTraceProcessorThrottlePerfTrack (void)
fffff801`0b03ef70 nt!KeQueryAffinityProcess (void)
fffff801`0b52e26c nt!PiProcessQueryAndCancelRemoval (void)
fffff801`0b01da40 nt!KiAbProcessContextSwitch (void)
fffff801`0b068610 nt!PsIsProcessLoggingEnabled (void)
fffff801`0b5e65e5 nt!PspCreateProcess$filt$0 (void)
fffff801`0b59c7d8 nt!CmpAddProcessorConfigurationEntry (void)
fffff801`0b432174 nt!EtwTraceProcess (void)
fffff801`0b1a05f8 nt!HalpMcaProcessorBankConfig (void)
fffff801`0b58d808 nt!PsEnumProcessThreads (void)
fffff801`0b3ee4e0 nt!AlpcpProcessSynchronousRequest (void)
fffff801`0b58bdc8 nt!IoInitializeProcessor (void)
fffff801`0b1a5cf4 nt!HalpMcRecordProcessorInfo (void)
fffff801`0b1c1814 nt!PpmCheckResetProcessors (void)
fffff801`0b1b38f0 nt!HvlStartBootLogicalProcessors (void)
fffff801`0b133b58 nt!KeSetIdealProcessorThreadEx (void)
fffff801`0b7a2510 nt!KeWriteProtectProcessorState (void)
fffff801`0b42de50 nt!MmAssignProcessToJob (void)
fffff801`0b42c0f0 nt!PspGetNextJobProcess (void)
fffff801`0b139cec nt!MiProcessWsInSwapSupport (void)
fffff801`0b1f03b2 nt!IopProcessBufferedIoCompletion$filt$0 (void)
fffff801`0b5e3c4a nt!NtQueryInformationProcess$filt$6 (void)
fffff801`0b79c928 nt!HalpMcaSetProcessorConfig (void)
fffff801`0b459cb0 nt!SmProcessCompressionInfoRequest (void)
fffff801`0b5e4b1e nt!NtSetInformationProcess$filt$5 (void)
fffff801`0b5890f8 nt!PiProcessRequeryDeviceState (void)
fffff801`0b068ec0 nt!MiProcessWorkingSets (void)
fffff801`0b1a37ec nt!HalpInterruptMarkProcessorStarted (void)
fffff801`0b7a0dd4 nt!KiSetProcessorSignature (void)
fffff801`0b068920 nt!KiDetachProcess (void)
fffff801`0b4bc270 nt!PsResumeProcess (void)
fffff801`0b43051c nt!ObCheckRefTraceProcess (void)
fffff801`0b5891a8 nt!PfpProcessScenarioPhase (void)
fffff801`0b448c00 nt!PiUEventProcessEventWorker (void)
fffff801`0b466800 nt!PopEtProcessSnapshotFind (void)
fffff801`0b03ca20 nt!PspSetProcessFreezeStateCallback (void)
fffff801`0b13ce90 nt!KiEnumerateNextProcessorNumber (void)
fffff801`0b4d5380 nt!RtlSetConsoleSessionForegroundProcessId (void)
fffff801`0b198a18 nt!PpmEventProcessorPerfStateChange (void)
fffff801`0b48edf8 nt!PspInitializeProcessSecurity (void)
fffff801`0b0d6f38 nt!KeForceAttachProcess (void)
fffff801`0b586ac0 nt!NtGetNextProcess (void)
fffff801`0b45f2f4 nt!WbGetWarbirdProcess (void)
fffff801`0b05c49c nt!PfSnRemoveProcessTrace (void)
fffff801`0b13d5ec nt!PopFxProcessWorkPool (void)
fffff801`0b44e234 nt!PspExitProcess (void)
fffff801`0b087e80 nt!KeEnumerateNextProcessor (void)
fffff801`0b4f9500 nt!ExpQueryProcessorInformationCounters (void)
fffff801`0b53f758 nt!PnpProcessQueryRemoveAndEject (void)
fffff801`0b42c430 nt!NtAssignProcessToJobObject (void)
fffff801`0b0fdb60 nt!PspWow64SetupUserProcessAddressSpace (void)
fffff801`0b137b1c nt!MiGetClosestNodeWithProcessors (void)
fffff801`0b064f20 nt!PsAddProcessEnergyValues (void)
fffff801`0b182f6c nt!KeRestoreIptStateAfterProcessorComesOnline (void)
fffff801`0b5e3c34 nt!NtQueryInformationProcess$filt$5 (void)
fffff801`0b01aac0 nt!KiChooseTargetProcessor (void)
fffff801`0b3e6f70 nt!NtAlpcOpenSenderProcess (void)
fffff801`0b5e4b34 nt!NtSetInformationProcess$filt$6 (void)
fffff801`0b53858c nt!PnpProcessAssignResources (void)
fffff801`0b4bbd00 nt!PspProcessClose (void)
fffff801`0b03f3d0 nt!IoIs32bitProcess (void)
fffff801`0b0e9458 nt!MmSetMemoryPriorityProcess (void)
fffff801`0b42eeb4 nt!PspApplyJobLimitsToProcess (void)
fffff801`0b13eb78 nt!KiIntRedirectQueueRequestOnProcessor (void)
fffff801`0b044ba8 nt!MiLogProcessWorkingSetsStart (void)
fffff801`0b498c64 nt!MmNewProcessInitialized (void)
fffff801`0b5344ac nt!PipProcessEnumeratedChildDevice (void)
fffff801`0b4d4950 nt!PspSetProcessPpmPolicy (void)
fffff801`0b11f970 nt!KeSaveExtendedProcessorState (void)
fffff801`0b0eaeac nt!KeFreezeProcess (void)
fffff801`0b198b5c nt!PpmEventGetEventDescriptorAndProcessorId (void)
fffff801`0b044c14 nt!MiLogProcessWorkingSetsStop (void)
fffff801`0b460c40 nt!PspProcessDelete (void)
fffff801`0b45ed00 nt!WbRemoveWarbirdProcess (void)
fffff801`0b1b25f8 nt!HalpIommuProcessReservations (void)
fffff801`0b7a1e9c nt!MmInitializeProcessor (void)
fffff801`0b539208 nt!PiProcessQueryDeviceState (void)
fffff801`0b05371c nt!MmQueryProcessWorkingSetSwapPages (void)
fffff801`0b5b9b70 nt!PiDevCfgProcessDeviceCallback (void)
fffff801`0b0e9570 nt!KiProcessPendingForegroundBoosts (void)
fffff801`0b87135c nt!MiComputeMemoryNodeProcessorAssignments (void)
fffff801`0b492b54 nt!PspDeleteCreateProcessContext (void)
fffff801`0b48d3b0 nt!PspGetNoChildProcessRestrictedPolicy (void)
fffff801`0b1ca8fc nt!KeSetAffinityProcess (void)
fffff801`0b1056f8 nt!IopSetLockOperationProcess (void)
fffff801`0b8482ec nt!CmpProcessForSimpleStringSub (void)
fffff801`0b187414 nt!MiProcessDereferenceList (void)
fffff801`0b068660 nt!KiAttachProcess (void)
fffff801`0b100210 nt!HalpProcessorResumeFromIdle (void)
fffff801`0b5415c0 nt!PiDmaGuardProcessPostRemove (void)
fffff801`0b849280 nt!BootApplicationPersistentDataProcess (void)
fffff801`0b15f550 nt!KiAbProcessThreadPriorityModification (void)
fffff801`0b5e3c1e nt!NtQueryInformationProcess$filt$4 (void)
fffff801`0b0e7d20 nt!KiPreprocessFault (void)
fffff801`0b3f0910 nt!PsQueryProcessEnergyValues (void)
fffff801`0b5e4b8c nt!NtSetInformationProcess$filt$7 (void)
fffff801`0b4cc460 nt!PsSetProcessWin32Process (void)
fffff801`0b5e5688 nt!PspQueryProcessIdListCallback$filt$0 (void)
fffff801`0b4242e8 nt!MmCleanProcessAddressSpace (void)
fffff801`0b84bfd8 nt!KeStartAllProcessors (void)
fffff801`0b4e2e10 nt!PspSetJobLimitsProcessCallback (void)
fffff801`0b432354 nt!EtwpWriteProcessEvent (void)
fffff801`0b0be630 nt!KiProcessDeferredReadyList (void)
fffff801`0b1c870c nt!CmSiProcessTupleStartFromHandle (void)
fffff801`0b5e4a47 nt!NtCreateUserProcess$filt$0 (void)
fffff801`0b5333e0 nt!PiProcessNewDeviceNode (void)
fffff801`0b4ed8e8 nt!MmCreateProcessAddressSpace (void)
fffff801`0b595800 nt!HvlInitializeProcessor (void)
fffff801`0b5c4530 nt!KeRegisterProcessorChangeCallback (void)
fffff801`0b4fa358 nt!PopUmpoProcessMessage (void)
fffff801`0b198bc4 nt!PpmEventLegacyProcessorPerfStateChange (void)
fffff801`0b478474 nt!ObReferenceProcessHandleTable (void)
fffff801`0b4d371c nt!MiProcessVaRangesInfoClass (void)
fffff801`0b550fa0 nt!WmipProcessEvent (void)
fffff801`0b4cf57c nt!PspLookupProcessQuotaBlock (void)
fffff801`0b84a728 nt!RtlpCreateUserProcess (void)
fffff801`0b57d08c nt!PopProcessorInformation (void)
fffff801`0b0e94c4 nt!KeSetQuantumProcess (void)
fffff801`0b4d60ac nt!PspGetProcessParameterOverrides (void)
fffff801`0b042694 nt!KiAbProcessThreadLocks (void)
fffff801`0b19e21c nt!MiMarkSessionMasterProcess (void)
fffff801`0b1a2e78 nt!HalpInterruptReinitializeThisProcessor (void)
fffff801`0b8491f0 nt!BapdpProcessHSTIResults (void)
fffff801`0b849510 nt!BapdpProcessVsmKeyBlobs (void)
fffff801`0b5e3c08 nt!NtQueryInformationProcess$filt$3 (void)
fffff801`0b42dc8c nt!PspApplyWorkingSetLimitsToProcess (void)
fffff801`0b691328 nt!HvlpEnableRootVirtualProcessor (void)
fffff801`0b1b0328 nt!HalpTimerStallExecutionProcessor (void)
fffff801`0b5e4ab0 nt!NtSetInformationProcess$filt$0 (void)
fffff801`0b21a26e nt!ExpGetSystemProcessorInformation$filt$0 (void)
fffff801`0b42ee68 nt!PspRequestProcessExecutionState (void)
fffff801`0b068da0 nt!KiDecrementProcessStackCount (void)
fffff801`0b1bbe04 nt!SepInitProcessAuditSd (void)
fffff801`0b79c800 nt!HalpCmciInitProcessor (void)
fffff801`0b0f80c0 nt!KeShouldYieldProcessor (void)
fffff801`0b0856a0 nt!MiCheckProcessorPteCache (void)
fffff801`0b4cee0c nt!PspFoldProcessAccountingIntoJob (void)
fffff801`0b5e6198 nt!NtGetNextProcess$filt$1 (void)
fffff801`0b5e615e nt!NtGetNextProcess$filt$0 (void)
fffff801`0b1a19f4 nt!HalpInterruptGetNextProcessorLocalId (void)
fffff801`0b4de584 nt!SmProcessStoreMemoryPriorityRequest (void)
fffff801`0b190388 nt!KiSelectIdleProcessor (void)
fffff801`0b1603c0 nt!KeQueryMaximumProcessorCountEx (void)
fffff801`0b3e52e0 nt!SepNewTokenAsRestrictedAsProcessToken (void)
fffff801`0b461488 nt!EtwExitProcess (void)
fffff801`0b1a464c nt!PpmUpdateTargetProcessorPolicy (void)
fffff801`0b5caed0 nt!SmProcessRegistrationRequest (void)
fffff801`0b51c818 nt!PsFreezeProcess (void)
fffff801`0b0670a4 nt!EtwpQueryUsedProcessorCount (void)
fffff801`0b0ff324 nt!MmNotifyProcessInSwapTrigger (void)
fffff801`0b0bff00 nt!KiPreprocessFlushTb (void)
fffff801`0b0fe928 nt!PspWow64ThunkProcessParameters (void)
fffff801`0b861878 nt!WheapCreatePerProcessorInfo (void)
fffff801`0b42c530 nt!PsAssignProcessToJobObject (void)
fffff801`0b0f60f0 nt!KiIpiProcessRequests (void)
fffff801`0b5e3daa nt!NtQueryInformationProcess$filt$23 (void)
fffff801`0b5e3d94 nt!NtQueryInformationProcess$filt$22 (void)
fffff801`0b5e3d7e nt!NtQueryInformationProcess$filt$21 (void)
fffff801`0b73778e nt!EtwQueryProcessTelemetryCoverage$filt$0 (void)
fffff801`0b5e3d68 nt!NtQueryInformationProcess$filt$20 (void)
fffff801`0b0d84e0 nt!KiSelectIdealProcessor (void)
fffff801`0b5e3bf2 nt!NtQueryInformationProcess$filt$2 (void)
fffff801`0b0484bc nt!IopSetDiskIoAttributionFromProcess (void)
fffff801`0b4e3690 nt!RtlValidProcessProtection (void)
fffff801`0b5e4be4 nt!NtSetInformationProcess$filt$11 (void)
fffff801`0b5e4b4a nt!NtSetInformationProcess$filt$10 (void)
fffff801`0b5e4bb8 nt!NtSetInformationProcess$filt$13 (void)
fffff801`0b5e4bce nt!NtSetInformationProcess$filt$12 (void)
fffff801`0b42d970 nt!MmLinkJobProcess (void)
fffff801`0b5e4ba2 nt!NtSetInformationProcess$filt$14 (void)
fffff801`0b1836dc nt!KeRestoreProcessorSpecificFeatures (void)
fffff801`0b44d5d8 nt!PsGetAllocatedFullProcessImageNameEx (void)
fffff801`0b5e4ac6 nt!NtSetInformationProcess$filt$1 (void)
fffff801`0b116258 nt!MiDetachProcessFromSession (void)
fffff801`0b42cda8 nt!PspUnlockJobsAndProcessExclusive (void)
fffff801`0b0d6fa0 nt!KiStackAttachProcess (void)
fffff801`0b5ca190 nt!PspCreateProcess (void)
fffff801`0b4d5ab4 nt!PspSetProcessPriorityClass (void)
fffff801`0b036418 nt!MiDeleteProcessShadow (void)
fffff801`0b063484 nt!MiUnlinkProcessFromSession (void)
fffff801`0b1a7fcc nt!ExInitializeProcessor (void)
fffff801`0b04923c nt!IopReferenceIoAttributionFromProcess (void)
fffff801`0b2f24bc nt!HvlpStartLogicalProcessor (void)
fffff801`0b5e3ce4 nt!NtQueryInformationProcess$filt$13 (void)
fffff801`0b5e3cce nt!NtQueryInformationProcess$filt$12 (void)
fffff801`0b5e3cb8 nt!NtQueryInformationProcess$filt$11 (void)
fffff801`0b08ba60 nt!KiProcessExpiredTimerList (void)
fffff801`0b5e3ca2 nt!NtQueryInformationProcess$filt$10 (void)
fffff801`0b5e3d26 nt!NtQueryInformationProcess$filt$17 (void)
fffff801`0b5e3d10 nt!NtQueryInformationProcess$filt$16 (void)
fffff801`0b5e3bb0 nt!NtQueryInformationProcess$filt$15 (void)
fffff801`0b5e3cfa nt!NtQueryInformationProcess$filt$14 (void)
fffff801`0b5e3d52 nt!NtQueryInformationProcess$filt$19 (void)
fffff801`0b5e3d3c nt!NtQueryInformationProcess$filt$18 (void)
fffff801`0b4995b8 nt!PspTerminateProcess (void)
fffff801`0b5e3bdc nt!NtQueryInformationProcess$filt$1 (void)
fffff801`0b43b130 nt!PsLookupProcessByProcessId (void)
fffff801`0b3d6530 nt!PspEnableProcessWakeCounters (void)
fffff801`0b53b378 nt!PipProcessStartPhase1 (void)
fffff801`0b539740 nt!PipProcessStartPhase3 (void)
fffff801`0b5436d8 nt!PipProcessStartPhase2 (void)
fffff801`0b4edb40 nt!MiAllocateProcessShadow (void)
fffff801`0b5e4adc nt!NtSetInformationProcess$filt$2 (void)
fffff801`0b043e50 nt!IopProcessWorkItem (void)
fffff801`0b070ba0 nt!MiCheckProcessShadow (void)
fffff801`0b10e7b8 nt!ExpGetBilledProcess (void)
fffff801`0b4cf394 nt!PspAssignProcessQuotaBlock (void)
fffff801`0b4dd668 nt!PspSetProcessSchedulingGroup (void)
fffff801`0b4fa228 nt!PopUmpoProcessMessages (void)
fffff801`0b56ee60 nt!DbgkClearProcessDebugObject (void)
fffff801`0b5439ac nt!IopProcessSetInterfaceState (void)
fffff801`0b42d618 nt!PspValidateJobAssignmentProcessLimits (void)
fffff801`0b848fc0 nt!BapdpProcessFwUpdateResults (void)
fffff801`0b7a1960 nt!KiInitializeProcessor (void)
fffff801`0b7a2180 nt!KiShadowProcessorAllocation (void)
fffff801`0b460164 nt!MmDeleteProcessAddressSpace (void)
fffff801`0b001770 nt!MiProcessCommitIntact (void)
fffff801`0b598d8c nt!PpDevCfgProcessDevices (void)
fffff801`0b1354c8 nt!MiInsertNewProcess (void)
fffff801`0b3e5c98 nt!AlpcpProcessConnectionRequest (void)
fffff801`0b5e3bc6 nt!NtQueryInformationProcess$filt$0 (void)
fffff801`0b177b84 nt!KiIntSteerChooseInitialTargetProcessors (void)
fffff801`0b12aeb0 nt!ViCreateProcessCallback (void)
fffff801`0b4ca5a8 nt!PopEtAggregateKeyCopyFromProcess (void)
fffff801`0b5e4af2 nt!NtSetInformationProcess$filt$3 (void)
fffff801`0b429798 nt!PspClearProcessThreadCidRefs (void)
fffff801`0b1ce1fc nt!PpmHeteroHgsProcessorInit (void)
fffff801`0b10d6b0 nt!KiGetDeepIdleProcessors (void)
fffff801`0b2f1154 nt!HvlpEnableNextLogicalProcessor (void)
fffff801`0b139dc0 nt!MiProcessWsInSwapRanges (MiProcessWsInSwapRanges)
fffff801`0b425d4c nt!PsReturnProcessPageFileQuota (PsReturnProcessPageFileQuota)
fffff801`0b692d58 nt!VslStartSecureProcessor (VslStartSecureProcessor)
fffff801`0b4023b0 nt!PsOpenProcess (PsOpenProcess)
fffff801`0b36c6d0 nt!PopProcessorNotifyLpiCoordinatedStatesNotification (PopProcessorNotifyLpiCoordinatedStatesNotification)
fffff801`0b002e50 nt!PfSnAddProcessTrace (PfSnAddProcessTrace)
fffff801`0b691ea0 nt!VslDebugReadWriteSecureProcess (VslDebugReadWriteSecureProcess)
fffff801`0b36574c nt!PpmInternalProcessorIdleVeto (PpmInternalProcessorIdleVeto)
fffff801`0b118e70 nt!PsGetThreadProcessId (PsGetThreadProcessId)
fffff801`0b70d9b0 nt!PspProcessRundownWorker (PspProcessRundownWorker)
fffff801`0b044cc0 nt!PsGetProcessSessionId (PsGetProcessSessionId)
fffff801`0b7dfab4 nt!ViCreateProcessCallbackInternal (ViCreateProcessCallbackInternal)
fffff801`0b7097f0 nt!NtCreateProcessEx (NtCreateProcessEx)
fffff801`0b2c80c0 nt!HalpIommuProcessReservationsInternal (HalpIommuProcessReservationsInternal)
fffff801`0b0084b0 nt!PsGetProcessInheritedFromUniqueProcessId (PsGetProcessInheritedFromUniqueProcessId)
fffff801`0b5cf9fc nt!PiProcessStartSystemDevices (PiProcessStartSystemDevices)
fffff801`0b49aa00 nt!PspSetProcessDefaultHardErrorMode (PspSetProcessDefaultHardErrorMode)
fffff801`0b57db50 nt!MmIsSessionLeaderProcess (MmIsSessionLeaderProcess)
fffff801`0b1a4620 nt!PpmUpdateProcessorPolicyCallback (PpmUpdateProcessorPolicyCallback)
fffff801`0ae1cc98 nt!GUID_PROCESSOR_IDLE_DISABLE = <no type information>
fffff801`0ae2e2c0 nt!THREATINT_THAW_PROCESS = <no type information>
fffff801`0b128830 nt!PsGetProcessDebugPort (PsGetProcessDebugPort)
fffff801`0b13e6d0 nt!PopExecuteOnTargetProcessors (PopExecuteOnTargetProcessors)
fffff801`0ae1cc38 nt!GUID_PROCESSOR_PERF_BOOST_MODE = <no type information>
fffff801`0bafc5c0 nt!HvlpActiveProcessorCount = <no type information>
fffff801`0b7480a0 nt!EtwpCovSampProcessMapAddresses (EtwpCovSampProcessMapAddresses)
fffff801`0b4ef008 nt!MiInitializeProcessTopDownEntropy (MiInitializeProcessTopDownEntropy)
fffff801`0ae2ebf8 nt!ProcessRundown = <no type information>
fffff801`0b317dd0 nt!KeWakeProcessor (KeWakeProcessor)
fffff801`0b7d6cf0 nt!VerifierPsSetCreateProcessNotifyRoutineEx (VerifierPsSetCreateProcessNotifyRoutineEx)
fffff801`0ae2e200 nt!PPM_ETW_PROCESSOR_PROFILE_SETTING_RUNDOWN = <no type information>
fffff801`0ae0c8e0 nt!PPM_ETW_PROCESSOR_PERF_STATE_CHANGE_HV = <no type information>
fffff801`0b37a974 nt!PpmHvSetVirtualProcessorQos (PpmHvSetVirtualProcessorQos)
fffff801`0b849370 nt!BapdpProcessResumeInformation (BapdpProcessResumeInformation)
fffff801`0b6f6634 nt!PpmEventTraceProcessorPerformanceRundownHv (PpmEventTraceProcessorPerformanceRundownHv)
fffff801`0b13e1a0 nt!KeGetProcessorIndexFromNumber (KeGetProcessorIndexFromNumber)
fffff801`0b1f8ac0 nt!ZwIsProcessInJob (ZwIsProcessInJob)
fffff801`0ae2ef48 nt!PPM_ETW_PROCESSOR_PROFILE_REGISTERED = <no type information>
fffff801`0b16c5b0 nt!PsGetProcessCommonJob (PsGetProcessCommonJob)
fffff801`0b83c140 nt!PnpEarlyLaunchStatusNotificationPreProcess (PnpEarlyLaunchStatusNotificationPreProcess)
fffff801`0b2f652c nt!HvlRegisterLogicalProcessorFrequency (HvlRegisterLogicalProcessorFrequency)
fffff801`0b4d53e0 nt!PsGetProcessSecurityPort (PsGetProcessSecurityPort)
fffff801`0b1f9aa0 nt!ZwDebugActiveProcess (ZwDebugActiveProcess)
fffff801`0b3803c8 nt!PspApplyTimerDelayProcess (PspApplyTimerDelayProcess)
fffff801`0b305540 nt!IoRevokeHandlesForProcess (IoRevokeHandlesForProcess)
fffff801`0b111af4 nt!PoAllProcessorsDeepIdle (PoAllProcessorsDeepIdle)
fffff801`0b72c5b4 nt!SmProcessListRequestExtended (SmProcessListRequestExtended)
fffff801`0ae1cd28 nt!GUID_PROCESSOR_THROTTLE_MINIMUM = <no type information>
fffff801`0bafc924 nt!KiBootProcessorCount = <no type information>
fffff801`0b6c6d74 nt!MiReturnProcessVads (MiReturnProcessVads)
fffff801`0b490400 nt!PspReferenceTokenForNewProcess (PspReferenceTokenForNewProcess)
fffff801`0b4ef3c0 nt!MiAllocateProcessVads (MiAllocateProcessVads)
fffff801`0ba50c54 nt!KiBootProcessorIdtSize = <no type information>
fffff801`0ba2b240 nt!KeSleepingProcessors = <no type information>
fffff801`0b4df260 nt!PsSetProcessDxgProcess (PsSetProcessDxgProcess)
fffff801`0b70ebe0 nt!PspTerminatePicoProcess (PspTerminatePicoProcess)
fffff801`0b3107fc nt!KiDynamicProcessorInitialization (KiDynamicProcessorInitialization)
fffff801`0b1f9f80 nt!ZwGetCurrentProcessorNumberEx (ZwGetCurrentProcessorNumberEx)
fffff801`0b2f7be0 nt!HvlpProcessIommuPrq (HvlpProcessIommuPrq)
fffff801`0ae2e4f8 nt!THREATINT_RESUME_PROCESS = <no type information>
fffff801`0ba31ee0 nt!KiProcessNodeSeed = <no type information>
fffff801`0b045dd0 nt!EtwpGetProcessStartKey (EtwpGetProcessStartKey)
fffff801`0b72d724 nt!SmcProcessStoreDeleteRequest (SmcProcessStoreDeleteRequest)
fffff801`0b70b9b0 nt!PspQueryProcessInterferenceCountCallback (PspQueryProcessInterferenceCountCallback)
fffff801`0b72c2f4 nt!SmProcessDeleteNotification (SmProcessDeleteNotification)
fffff801`0b019190 nt!KeQueryActiveProcessorCountEx (KeQueryActiveProcessorCountEx)
fffff801`0b70f7d8 nt!PspCreatePartitionSystemProcess (PspCreatePartitionSystemProcess)
fffff801`0ae0a590 nt!PPM_ETW_PERF_SELECT_PROCESSOR_STATE = <no type information>
fffff801`0b323ea4 nt!KiCanSelectSoftParkedProcessor (KiCanSelectSoftParkedProcessor)
fffff801`0b2f143c nt!HvlpInitializeBootProcessor (HvlpInitializeBootProcessor)
fffff801`0b7ed300 nt!VfZwOpenProcessToken (VfZwOpenProcessToken)
fffff801`0b5a8cec nt!EtwpInitializeProcessorTrace (EtwpInitializeProcessorTrace)
fffff801`0b44d5c0 nt!SeLocateProcessImageName (SeLocateProcessImageName)
fffff801`0b32c3c0 nt!MmDeleteProcessor (MmDeleteProcessor)
fffff801`0b32280c nt!KiExtendProcessAffinity (KiExtendProcessAffinity)
fffff801`0b7413c0 nt!EtwpPsProvProcessEnumCallback (EtwpPsProvProcessEnumCallback)
fffff801`0b738688 nt!EtwTraceJobAssignProcess (EtwTraceJobAssignProcess)
fffff801`0b19a580 nt!RtlpNopProcessorCallback (RtlpNopProcessorCallback)
fffff801`0b7cae60 nt!ViCiPreprocessOptions (ViCiPreprocessOptions)
fffff801`0b7abbe4 nt!HalpDpStartProcessor (HalpDpStartProcessor)
fffff801`0ba4bd98 nt!HalpInterruptDynamicProcessorState = <no type information>
fffff801`0ba120dc nt!ObpTraceProcessNameLength = <no type information>
fffff801`0b2fb754 nt!VslRegisterSecureSystemProcess (VslRegisterSecureSystemProcess)
fffff801`0b70f020 nt!NtSuspendProcess (NtSuspendProcess)
fffff801`0b4f5a00 nt!PsChargeProcessPagedPoolQuota (PsChargeProcessPagedPoolQuota)
fffff801`0b6cc560 nt!MiFindProcessImageHotPatchRecord (MiFindProcessImageHotPatchRecord)
fffff801`0b133a84 nt!MiSetIdealProcessorThread (MiSetIdealProcessorThread)
fffff801`0b319820 nt!KePrepareToDispatchVirtualProcessor (KePrepareToDispatchVirtualProcessor)
fffff801`0b2f83bc nt!HvlpLogProcessorStartupFailure (HvlpLogProcessorStartupFailure)
fffff801`0b44acbc nt!PnpProcessDeferredRegistrations (PnpProcessDeferredRegistrations)
fffff801`0ae2f960 nt!POP_ETW_EVENT_ILLEGAL_PROCESSOR_THROTTLE_OPERATIONAL = <no type information>
fffff801`0b3a5d80 nt!EtwTraceInswapProcess (EtwTraceInswapProcess)
fffff801`0bb2ea00 nt!SepRmLsaCallProcess = <no type information>
fffff801`0b2fad64 nt!VslInitializeSecureProcess (VslInitializeSecureProcess)
fffff801`0b1f7de0 nt!HalpSaveProcessorState (HalpSaveProcessorState)
fffff801`0ae3ada0 nt!EVENT_WHEA_PROCESS_TERMINATE = <no type information>
fffff801`0b5c28e0 nt!PiProcessAddBootDevices (PiProcessAddBootDevices)
fffff801`0b451630 nt!PsAcquireProcessExitSynchronization (PsAcquireProcessExitSynchronization)
fffff801`0b70ad58 nt!PspRecordCrashedProcessIntoBlackbox (PspRecordCrashedProcessIntoBlackbox)
fffff801`0b334dc8 nt!MiShouldYieldProcessor (MiShouldYieldProcessor)
fffff801`0b321c78 nt!KiInitializeProcessorGroupSchedulingData (KiInitializeProcessorGroupSchedulingData)
fffff801`0ae0f5a8 nt!PPM_ETW_PERF_SELECT_PROCESSOR_STATE_HV = <no type information>
fffff801`0b4e424c nt!MiSessionAddProcess (MiSessionAddProcess)
fffff801`0b7083c0 nt!PsIsProcessInAppSilo (PsIsProcessInAppSilo)
fffff801`0b72d310 nt!SmcProcessResizeRequest (SmcProcessResizeRequest)
fffff801`0b377d8c nt!PpmEventHiddenProcessorThermalCapChange (PpmEventHiddenProcessorThermalCapChange)
fffff801`0bafc840 nt!KeActiveProcessors = <no type information>
fffff801`0b011210 nt!PsGetCurrentProcessId (PsGetCurrentProcessId)
fffff801`0b72c6f0 nt!SmProcessQueryStoreStats (SmProcessQueryStoreStats)
fffff801`0b7a1930 nt!KiComputeProcessorDataSize (KiComputeProcessorDataSize)
fffff801`0b2f37c0 nt!HvlHalStartVirtualProcessor (HvlHalStartVirtualProcessor)
fffff801`0b70a140 nt!PsQueryTotalCycleTimeProcess (PsQueryTotalCycleTimeProcess)
fffff801`0b4ef0e0 nt!MiInitializeProcessBottomUpEntropy (MiInitializeProcessBottomUpEntropy)
fffff801`0b6d8eb0 nt!MiScrubProcessPhysicalPages (MiScrubProcessPhysicalPages)
fffff801`0b2e5710 nt!HalpIvtProcessDmarTable (HalpIvtProcessDmarTable)
fffff801`0b0ea5f0 nt!NtFlushProcessWriteBuffers (NtFlushProcessWriteBuffers)
fffff801`0b030470 nt!PsReturnProcessPagedPoolQuota (PsReturnProcessPagedPoolQuota)
fffff801`0b6ccae8 nt!MiHotPatchAllProcesses (MiHotPatchAllProcesses)
fffff801`0ae2e320 nt!PPM_ETW_PROCESSOR_IDLE_VETO_DECREMENT = <no type information>
fffff801`0ae1cbe8 nt!GUID_PROCESSOR_PERF_AUTONOMOUS_ACTIVITY_WINDOW = <no type information>
fffff801`0b7176e0 nt!RtlpTerminateCurrentProcess (RtlpTerminateCurrentProcess)
fffff801`0b70c590 nt!PspWaitOnAllProcessesJobCallback (PspWaitOnAllProcessesJobCallback)
fffff801`0bb010d0 nt!KiProcessorNumberToIndexMappingTable = <no type information>
fffff801`0b70f338 nt!PsRequestDebugSecureProcess (PsRequestDebugSecureProcess)
fffff801`0b76c91c nt!AslpProcessMatchRegNode (AslpProcessMatchRegNode)
fffff801`0b498f70 nt!PsSetProcessPriorityByClass (PsSetProcessPriorityByClass)
fffff801`0b466540 nt!PopEtProcessEnumSnapshotCallback (PopEtProcessEnumSnapshotCallback)
fffff801`0b380948 nt!PspSetProcessTimerDelayForKTimers (PspSetProcessTimerDelayForKTimers)
fffff801`0b7f1d54 nt!HdlspBugCheckProcessing (HdlspBugCheckProcessing)
fffff801`0ae33720 nt!HV_EVENTLOG_PROCESSOR_CPUID_VALIDATION_ERROR = <no type information>
fffff801`0b15b22c nt!IopProcessIrpStackProfiler (IopProcessIrpStackProfiler)
fffff801`0ae0f608 nt!KERNEL_AUDIT_API_OPENPROCESS = <no type information>
fffff801`0b121794 nt!PspLockUnlockProcessExclusive (PspLockUnlockProcessExclusive)
fffff801`0b1992d0 nt!PspUnlockProcessShared (PspUnlockProcessShared)
fffff801`0b3c2240 nt!BiLogFileOwnerProcess (BiLogFileOwnerProcess)
fffff801`0ae0c8d0 nt!PPM_ETW_PROCESSOR_PERF_STATE_CHANGE = <no type information>
fffff801`0ba1e040 nt!PspProcessSequenceNumber = <no type information>
fffff801`0b728da4 nt!SddlAddProcessTrustLabelAce (SddlAddProcessTrustLabelAce)
fffff801`0b0d8400 nt!KeSelectIdealProcessor (KeSelectIdealProcessor)
fffff801`0b7aee00 nt!IopLiveDumpCorralProcessors (IopLiveDumpCorralProcessors)
fffff801`0b709d40 nt!PsQueryProcessExceptionFlags (PsQueryProcessExceptionFlags)
fffff801`0ae1ca38 nt!GUID_PROCESSOR_IDLE_PROMOTE_THRESHOLD = <no type information>
fffff801`0b4d8920 nt!MmGetSessionSchedulingGroupByProcess (MmGetSessionSchedulingGroupByProcess)
fffff801`0b311c78 nt!KeRetryOutswapProcess (KeRetryOutswapProcess)
fffff801`0ae1ca28 nt!GUID_PROCESSOR_PERF_AUTONOMOUS_MODE = <no type information>
fffff801`0b141d60 nt!MiIsStoreProcess (MiIsStoreProcess)
fffff801`0b4b98b0 nt!PsGetProcessDxgProcess (PsGetProcessDxgProcess)
fffff801`0b1aeb94 nt!HalpMmAllocatePerProcessorMemory (HalpMmAllocatePerProcessorMemory)
fffff801`0b7482ac nt!EtwpCovSampProcessRemoveModule (EtwpCovSampProcessRemoveModule)
fffff801`0b709664 nt!PspTerminateSiloSubsystemProcesses (PspTerminateSiloSubsystemProcesses)
fffff801`0b4a6320 nt!PsCaptureUserProcessParameters (PsCaptureUserProcessParameters)
fffff801`0b769b00 nt!SdbpGetProcessHostGuestArchitectures (SdbpGetProcessHostGuestArchitectures)
fffff801`0ae0a8c8 nt!KERNEL_AUDIT_API_TERMINATEPROCESS = <no type information>
fffff801`0b0f6db0 nt!KiSetIdealNodeProcessByGroup (KiSetIdealNodeProcessByGroup)
fffff801`0b430190 nt!PopEtGetProcessImageInfo (PopEtGetProcessImageInfo)
fffff801`0b2cb208 nt!HalpDmaProcessMapRegisterQueueV2 (HalpDmaProcessMapRegisterQueueV2)
fffff801`0bb2e9e0 nt!PsNoRemoteThreadBeforeProcessInit = <no type information>
fffff801`0b466648 nt!PopEtProcessSnapshotUpdate (PopEtProcessSnapshotUpdate)
fffff801`0b6f53e8 nt!PopEtEnergyTrackerSnapshotProcesses (PopEtEnergyTrackerSnapshotProcesses)
fffff801`0b1b4374 nt!KiSetSystemAffinityThreadToProcessor (KiSetSystemAffinityThreadToProcessor)
fffff801`0b1650c0 nt!HalpInterruptQueryProcessorRestartEntryPoint (HalpInterruptQueryProcessorRestartEntryPoint)
fffff801`0b33c5f8 nt!MmGetSessionObjectByProcess (MmGetSessionObjectByProcess)
fffff801`0b427c9c nt!MiMarkProcessCfgBits (MiMarkProcessCfgBits)
fffff801`0b37f270 nt!PspLockProcessListShared (PspLockProcessListShared)
fffff801`0baf9f50 nt!SepTokenLeakProcessCid = <no type information>
fffff801`0bb2e9f8 nt!ExpWnfProcessesListLock = <no type information>
fffff801`0b31be90 nt!KeFrozenProcessorCount (KeFrozenProcessorCount)
fffff801`0bb2e748 nt!PspActiveProcessLock = <no type information>
fffff801`0ae1cb68 nt!GUID_PROCESSOR_PARKING_DISTRIBUTION_THRESHOLD = <no type information>
fffff801`0b12e84c nt!SmRereferenceProcessObject (SmRereferenceProcessObject)
fffff801`0b0bfb80 nt!PsGetCurrentProcess (PsGetCurrentProcess)
fffff801`0ba1e0a0 nt!PsActiveProcessHead = <no type information>
fffff801`0b1f9e40 nt!ZwFlushProcessWriteBuffers (ZwFlushProcessWriteBuffers)
fffff801`0b7ab40c nt!HalpDpOfflineProcessorForReplace (HalpDpOfflineProcessorForReplace)
fffff801`0b2d7780 nt!IommuProcessPageRequestQueue (IommuProcessPageRequestQueue)
fffff801`0b72cb28 nt!SmProcessSystemStoreTrimRequest (SmProcessSystemStoreTrimRequest)
fffff801`0b463d00 nt!PspQueryProcessAccountingInformationCallback (PspQueryProcessAccountingInformationCallback)
fffff801`0b1f8de0 nt!ZwAcquireProcessActivityReference (ZwAcquireProcessActivityReference)
fffff801`0b4d614c nt!ObGetProcessHandleCount (ObGetProcessHandleCount)
fffff801`0ae1cd18 nt!GUID_PROCESSOR_CORE_PARKING_DECREASE_TIME = <no type information>
fffff801`0b42c618 nt!PspLockJobsAndProcessExclusive (PspLockJobsAndProcessExclusive)
fffff801`0b307690 nt!IopLiveDumpTraceCaptureProcessorContextDuration (IopLiveDumpTraceCaptureProcessorContextDuration)
fffff801`0bb4a8e0 nt!pXdvZwOpenProcess = <no type information>
fffff801`0ae3a550 nt!GUID_PROCESSOR_IDLE_UPDATE = <no type information>
fffff801`0b363900 nt!PoGetProcessorIdleAccounting (PoGetProcessorIdleAccounting)
fffff801`0ae1cc28 nt!GUID_PROCESSOR_PARKING_HEADROOM_THRESHOLD = <no type information>
fffff801`0ae1ca18 nt!GUID_PROCESSOR_HETERO_DECREASE_THRESHOLD = <no type information>
fffff801`0b2f7b28 nt!HvlpProcessIommu (HvlpProcessIommu)
fffff801`0b7d88b0 nt!VfPendingMoreProcessingRequired (VfPendingMoreProcessingRequired)
fffff801`0b7b1f7c nt!PnprWakeProcessors (PnprWakeProcessors)
fffff801`0b748354 nt!EtwpCovSampProcessUpperBoundModule (EtwpCovSampProcessUpperBoundModule)
fffff801`0b0467c0 nt!KeGetCurrentProcessorNumberEx (KeGetCurrentProcessorNumberEx)
fffff801`0ae1ca78 nt!GUID_PROCESSOR_LATENCY_HINT_MIN_UNPARK = <no type information>
fffff801`0b055010 nt!SMKM_STORE_MGR<SM_TRAITS>::SmCompressCtxProcessEntry (public: static void __cdecl SMKM_STORE_MGR<struct SM_TRAITS>::SmCompressCtxProcessEntry(struct SMKM_STORE_MGR<struct SM_TRAITS>::_SM_COMPRESS_CONTEXT *,struct SMKM_STORE_MGR<struct SM_TRAITS> *,void *,void *,struct SMKM_STORE_MGR<struct SM_TRAITS>::_SM_COMPRESS_ENTRY *))
fffff801`0b731ab0 nt!VmTerminateMemoryProcess (VmTerminateMemoryProcess)
fffff801`0b1a85f0 nt!KeInterlockedSetProcessorAffinityEx (KeInterlockedSetProcessorAffinityEx)
fffff801`0badb3d0 nt!Feature_Servicing_AddInitProcessProperty__private_featureState = <no type information>
fffff801`0b709f60 nt!PsSetProcessSecurityPort (PsSetProcessSecurityPort)
fffff801`0b033e58 nt!MiIsProcessCfgExportSuppressionEnabled (MiIsProcessCfgExportSuppressionEnabled)
fffff801`0b1281a0 nt!PsGetProcessProtection (PsGetProcessProtection)
fffff801`0b432cf8 nt!EtwpQueryProcessOtherInfo (EtwpQueryProcessOtherInfo)
fffff801`0b0e222c nt!PspWriteProcessSecurityDomain (PspWriteProcessSecurityDomain)
fffff801`0b7472e0 nt!EtwpCovSampEnumerateProcess (EtwpCovSampEnumerateProcess)
fffff801`0b4eecf8 nt!MiInsertProcessVads (MiInsertProcessVads)
fffff801`0b6cca68 nt!MiGetProcessHotPatchContext (MiGetProcessHotPatchContext)
fffff801`0b16d160 nt!xHalPrepareProcessorForIdle (xHalPrepareProcessorForIdle)
fffff801`0b6b7f74 nt!PiProcessDriversLoadedOnSecureDevice (PiProcessDriversLoadedOnSecureDevice)
fffff801`0b70cd40 nt!PspSetVmProcessorHostProcessWorkerRoutine (PspSetVmProcessorHostProcessWorkerRoutine)
fffff801`0b7ed270 nt!VfZwOpenProcess (VfZwOpenProcess)
fffff801`0b1c57ac nt!KiUpdateThreadCpuSetAffinitiesProcess (KiUpdateThreadCpuSetAffinitiesProcess)
fffff801`0af312a8 nt!_imp_PsDestroyProcessParameterOverrides = <no type information>
fffff801`0b719e50 nt!RtlSetProcessPlaceholderCompatibilityMode (RtlSetProcessPlaceholderCompatibilityMode)
fffff801`0b3668c0 nt!PpmUpdateProcessorIdleVeto (PpmUpdateProcessorIdleVeto)
fffff801`0b71109c nt!PspEnumProcessesInJobHierarchy (PspEnumProcessesInJobHierarchy)
fffff801`0b310e20 nt!KiProcessNMI (KiProcessNMI)
fffff801`0b535a40 nt!PipProcessDevNodeTree (PipProcessDevNodeTree)
fffff801`0b395718 nt!SeTokenIsNoChildProcessRestrictionEnforced (SeTokenIsNoChildProcessRestrictionEnforced)
fffff801`0ae2e3d8 nt!PPM_ETW_PROCESSOR_PROFILE_RUNDOWN = <no type information>
fffff801`0bafa038 nt!WheaPassiveDrsItemsToProcess = <no type information>
fffff801`0b12a040 nt!IoIsProcessAntiMalware (IoIsProcessAntiMalware)
fffff801`0b2c4878 nt!HalpDmaProcessMapRegisterQueueV3 (HalpDmaProcessMapRegisterQueueV3)
fffff801`0b1cdd48 nt!BgpGxProcessQrCodeBitmap (BgpGxProcessQrCodeBitmap)
fffff801`0b1f8a80 nt!ZwCreateProcessEx (ZwCreateProcessEx)
fffff801`0bb4b348 nt!pXdvPsSetCreateProcessNotifyRoutineEx = <no type information>
fffff801`0b3802a8 nt!PspUnlockProcessSecurityShared (PspUnlockProcessSecurityShared)
fffff801`0bafb017 nt!HvlpVirtualProcessorsIdentityMapped = <no type information>
fffff801`0b434b40 nt!PsQueryProcessAttributesByToken (PsQueryProcessAttributesByToken)
fffff801`0ae1cb38 nt!GUID_PROCESSOR_PERF_INCREASE_TIME = <no type information>
fffff801`0b4d6c50 nt!PsGetProcessExitTime (PsGetProcessExitTime)
fffff801`0b6d03e4 nt!MiProcessHotPatchUndoTable (MiProcessHotPatchUndoTable)
fffff801`0ae1cbd8 nt!GUID_PROCESSOR_RESPONSIVENESS_DISABLE_TIME = <no type information>
fffff801`0b688810 nt!NtDebugActiveProcess (NtDebugActiveProcess)
fffff801`0b011210 nt!PsGetCurrentThreadProcessId (PsGetCurrentThreadProcessId)
fffff801`0b0f6e40 nt!KiSelectIdealProcessorForProcess (KiSelectIdealProcessorForProcess)
fffff801`0b3238bc nt!KeTransitionProcessorParkState (KeTransitionProcessorParkState)
fffff801`0b7b2714 nt!KiUpdateNumberProcessors (KiUpdateNumberProcessors)
fffff801`0b3ae9a8 nt!EtwpTraceProcessorTrace (EtwpTraceProcessorTrace)
fffff801`0b7b2790 nt!KiUpdateNumberProcessorsIpi (KiUpdateNumberProcessorsIpi)
fffff801`0b0ebdd0 nt!EtwpTiFillProcessIdentity (EtwpTiFillProcessIdentity)
fffff801`0b72c898 nt!SmProcessStatsRequest (SmProcessStatsRequest)
fffff801`0b38c854 nt!LdrpThumbProcessRelocation (LdrpThumbProcessRelocation)
fffff801`0bafc928 nt!KiBootProcessorsStarted = <no type information>
fffff801`0bb4aac0 nt!pXdvZwSetInformationProcess = <no type information>
fffff801`0b6ee474 nt!PopDiagTraceUmpoAlpcProcessingError (PopDiagTraceUmpoAlpcProcessingError)
fffff801`0b2e23e8 nt!HsaProcessDeviceExceptions (HsaProcessDeviceExceptions)
fffff801`0b747f60 nt!EtwpCovSampProcessCleanup (EtwpCovSampProcessCleanup)
fffff801`0b70b194 nt!PsReportProcessMemoryLimitViolation (PsReportProcessMemoryLimitViolation)
fffff801`0b89aec0 nt!PspProcessMapping = <no type information>
fffff801`0b70a070 nt!NtGetCurrentProcessorNumberEx (NtGetCurrentProcessorNumberEx)
fffff801`0bb2d1e8 nt!PspProcessNodeAssignment = <no type information>
fffff801`0b3710b4 nt!PopDiagTraceIllegalProcessorThrottle (PopDiagTraceIllegalProcessorThrottle)
fffff801`0b70da60 nt!PspProcessRundownWorkerSingle (PspProcessRundownWorkerSingle)
fffff801`0af312b0 nt!_imp_PsGetProcessParameterOverrides = <no type information>
fffff801`0b199370 nt!KeCheckProcessorGroupAffinity (KeCheckProcessorGroupAffinity)
fffff801`0b362914 nt!MiScrubProcessLargePages (MiScrubProcessLargePages)
fffff801`0ae1cb98 nt!GUID_PROCESSOR_FREQUENCY_LIMIT = <no type information>
fffff801`0b2d12a0 nt!HalpPreprocessNmi (HalpPreprocessNmi)
fffff801`0b03f168 nt!PsIsProcessInSilo (PsIsProcessInSilo)
fffff801`0b0e2248 nt!SeTokenGetNoChildProcessRestricted (SeTokenGetNoChildProcessRestricted)
fffff801`0b2dff68 nt!HalpIommuProcessIvhdEntry (HalpIommuProcessIvhdEntry)
fffff801`0ba1e060 nt!PspProcessRundownWorkItem = <no type information>
fffff801`0b7483a4 nt!EtwpCovSampSampleBufferProcess (EtwpCovSampSampleBufferProcess)
fffff801`0b6de880 nt!MiScrubProcesses (MiScrubProcesses)
fffff801`0ae0b5f8 nt!MITIGATION_AUDIT_PROHIBIT_CHILD_PROCESS_CREATION = <no type information>
fffff801`0b321508 nt!KiForceIdleParkUnparkProcessor (KiForceIdleParkUnparkProcessor)
fffff801`0b1fb860 nt!ZwSuspendProcess (ZwSuspendProcess)
fffff801`0bb2ef30 nt!CmRegistryProcessName = <no type information>
fffff801`0b70b240 nt!PspAddProcessToWorkingSetChangeList (PspAddProcessToWorkingSetChangeList)
fffff801`0baf4da0 nt!HalpTscRequestedLeadProcessor = <no type information>
fffff801`0b45eabc nt!MiReleaseProcessReferenceToSessionDataPage (MiReleaseProcessReferenceToSessionDataPage)
fffff801`0b7ac534 nt!HalpBlkInitializeProcessorState (HalpBlkInitializeProcessorState)
fffff801`0b2f400c nt!HvlNotifyAllProcessorsStarted (HvlNotifyAllProcessorsStarted)
fffff801`0b2f8e10 nt!HvlGetProcessorIndexFromVpIndex (HvlGetProcessorIndexFromVpIndex)
fffff801`0b4e3cc0 nt!PsQuitNextProcess (PsQuitNextProcess)
fffff801`0b7ad318 nt!IvtProcessDeviceExceptions (IvtProcessDeviceExceptions)
fffff801`0b1f85a0 nt!ZwOpenProcess (ZwOpenProcess)
fffff801`0b1653c0 nt!PsGetCurrentProcessByThread (PsGetCurrentProcessByThread)
fffff801`0b12fef0 nt!OBJECT_HEADER_TO_PROCESS_INFO (OBJECT_HEADER_TO_PROCESS_INFO)
fffff801`0ae1cc18 nt!GUID_PROCESSOR_CORE_PARKING_DECREASE_POLICY = <no type information>
fffff801`0b329c70 nt!MiLogOutswappedProcessCommitRelease (MiLogOutswappedProcessCommitRelease)
fffff801`0ae1cbc8 nt!GUID_PROCESSOR_IDLE_STATE_MAXIMUM = <no type information>
fffff801`0b10c7d0 nt!PpmCheckAcquireProcessorPerformance (PpmCheckAcquireProcessorPerformance)
fffff801`0b2f62a0 nt!HvlParkedVirtualProcessors (HvlParkedVirtualProcessors)
fffff801`0b466d4c nt!PopEtProcessSnapshotUpdateFromSnapshotContext (PopEtProcessSnapshotUpdateFromSnapshotContext)
fffff801`0b1fb760 nt!ZwSetWnfProcessNotificationEvent (ZwSetWnfProcessNotificationEvent)
fffff801`0b0e3978 nt!SepDesktopAppxSubProcessToken (SepDesktopAppxSubProcessToken)
fffff801`0b70e580 nt!PspCreatePicoProcess (PspCreatePicoProcess)
fffff801`0b6a3e70 nt!PnpHandleProcessWalkWorker (PnpHandleProcessWalkWorker)
fffff801`0b51bc00 nt!PsChargeProcessWakeCounter (PsChargeProcessWakeCounter)
fffff801`0ba47c20 nt!CmpRegistryProcess = <no type information>
fffff801`0b7b6ca8 nt!CmpProcessorNameString = <no type information>
fffff801`0b31711c nt!KiFindBiasedProcessorIndex (KiFindBiasedProcessorIndex)
fffff801`0b38c7ac nt!LdrpGenericProcessRelocation (LdrpGenericProcessRelocation)
fffff801`0b31d910 nt!KiHeteroChooseTargetProcessor (KiHeteroChooseTargetProcessor)
fffff801`0b7860d0 nt!CmpProcessorControl = <no type information>
fffff801`0b3a5d04 nt!EtwTraceIdealProcessor (EtwTraceIdealProcessor)
fffff801`0b7ac734 nt!HalpBlkStartBlockedProcessor (HalpBlkStartBlockedProcessor)
fffff801`0b691150 nt!HvlDeleteProcessor (HvlDeleteProcessor)
fffff801`0b2c11a0 nt!HalpHvStartVirtualProcessor (HalpHvStartVirtualProcessor)
fffff801`0bb2d640 nt!ExpWnfProcessesListHead = <no type information>
fffff801`0b2f0830 nt!HvlQueryProcessorTopologyHighestId (HvlQueryProcessorTopologyHighestId)
fffff801`0b478e90 nt!CmpDetachFromRegistryProcess (CmpDetachFromRegistryProcess)
fffff801`0bafb0a0 nt!PpmPerfQosManageIdleProcessors = <no type information>
fffff801`0ae33a90 nt!KMPnPEvt_ProcessNewDevice_InstancePath = <no type information>
fffff801`0b6be310 nt!KeStartDynamicProcessor (KeStartDynamicProcessor)
fffff801`0b48f0a8 nt!SeSubProcessToken (SeSubProcessToken)
fffff801`0bafa040 nt!WheaDrsItemsToProcess = <no type information>
fffff801`0b0e8f8c nt!PspSetProcessPriorityByClass (PspSetProcessPriorityByClass)
fffff801`0ae1cb08 nt!GUID_PROCESSOR_HETERO_DECREASE_TIME = <no type information>
fffff801`0b2c7fd4 nt!HalpIommuProcessMemoryErrata (HalpIommuProcessMemoryErrata)
fffff801`0b323fb4 nt!KiSelectCandidateProcessor (KiSelectCandidateProcessor)
fffff801`0ba47880 nt!DbgkpProcessDebugPortMutex = <no type information>
fffff801`0b3787ac nt!PpmEventProcessorVetoRequest (PpmEventProcessorVetoRequest)
fffff801`0b131d84 nt!CmSiProcessTupleInitialize (CmSiProcessTupleInitialize)
fffff801`0b3cd684 nt!PspProcessDynamicEnforcedAddressRanges (PspProcessDynamicEnforcedAddressRanges)
fffff801`0b36a220 nt!PopFxProcessorIdleVeto (PopFxProcessorIdleVeto)
fffff801`0b087e50 nt!KeCheckProcessorAffinityEx (KeCheckProcessorAffinityEx)
fffff801`0b81b500 nt!HalpBlkCoprocessorSegmentOverrunFault (HalpBlkCoprocessorSegmentOverrunFault)
fffff801`0ba49560 nt!HalpInterruptLocalUnitErrorLogProcessor = <no type information>
fffff801`0ba50608 nt!PopNumberOfPagesForHibernateProcess = <no type information>
fffff801`0ba4bdb0 nt!HalpInterruptProcessorStateInitialized = <no type information>
fffff801`0b129bf0 nt!PsGetProcessExitProcessCalled (PsGetProcessExitProcessCalled)
fffff801`0b03f1b0 nt!PsGetProcessServerSilo (PsGetProcessServerSilo)
fffff801`0b4b303c nt!PspValidateCreateProcessProtection (PspValidateCreateProcessProtection)
fffff801`0b4e1d70 nt!PspSetProcessEnergyTrackingStateCallback (PspSetProcessEnergyTrackingStateCallback)
fffff801`0b310480 nt!KiConfigureHeteroProcessorsTarget (KiConfigureHeteroProcessorsTarget)
fffff801`0b30e85c nt!PnpProcessRebalance (PnpProcessRebalance)
fffff801`0b7b04dc nt!IopLiveDumpProcessCorralStateChange (IopLiveDumpProcessCorralStateChange)
fffff801`0b19a580 nt!KeNotifyProcessorFreezeSupported (KeNotifyProcessorFreezeSupported)
fffff801`0b7a1db0 nt!KiConfigureProcessorBlock (KiConfigureProcessorBlock)
fffff801`0b0ffe60 nt!IoGetRequestorProcess (IoGetRequestorProcess)
fffff801`0b305d14 nt!IopRevokeFileObjectForProcess (IopRevokeFileObjectForProcess)
fffff801`0b70a260 nt!PsSwapProcessWorkingSet (PsSwapProcessWorkingSet)
fffff801`0b07c520 nt!MiGetProcessPartition (MiGetProcessPartition)
fffff801`0ba4bda8 nt!HalpInterruptProcessorState = <no type information>
fffff801`0b37f260 nt!PspInitializeProcessLock (PspInitializeProcessLock)
fffff801`0b521d30 nt!PspEnableProcessTimerVirtualization (PspEnableProcessTimerVirtualization)
fffff801`0b313910 nt!KeQueryMaximumProcessorCount (KeQueryMaximumProcessorCount)
fffff801`0ba1230c nt!HalpProcessorInNmiHandler = <no type information>
fffff801`0b1f8460 nt!ZwSetInformationProcess (ZwSetInformationProcess)
fffff801`0b68e6f0 nt!FsRtlGetCurrentProcessLoaderList (FsRtlGetCurrentProcessLoaderList)
fffff801`0b2dfc5c nt!HalpIommuProcessDeviceEntries (HalpIommuProcessDeviceEntries)
fffff801`0b36cb8c nt!PpmPerfApplyHiddenProcessorState (PpmPerfApplyHiddenProcessorState)
fffff801`0b02a5b0 nt!SepReconcileTrustSidWithProcessProtection (SepReconcileTrustSidWithProcessProtection)
fffff801`0b1fac00 nt!ZwQueryPortInformationProcess (ZwQueryPortInformationProcess)
fffff801`0b2e24e0 nt!HsaProcessIvmd (HsaProcessIvmd)
fffff801`0b7abde4 nt!HalpInterruptSwapProcessorIdentifiers (HalpInterruptSwapProcessorIdentifiers)
fffff801`0bb42020 nt!VfBTSProcessorFamily = <no type information>
fffff801`0b42c3d0 nt!PspIsProcessInJob (PspIsProcessInJob)
fffff801`0b58d65c nt!EtwpTraceProcessRundown (EtwpTraceProcessRundown)
fffff801`0b4d6bf0 nt!PsGetNextProcessEx (PsGetNextProcessEx)
fffff801`0b16d160 nt!xHalGetProcessorStats (xHalGetProcessorStats)
fffff801`0ae1d940 nt!PopBlackBoxCrashedProcessGuid = <no type information>
fffff801`0bb2d180 nt!PspRundownProcessCache = <no type information>
fffff801`0ba50804 nt!HalpInterruptMaxProcessors = <no type information>
fffff801`0b318120 nt!KeSetTargetProcessorDpc (KeSetTargetProcessorDpc)
fffff801`0ae2f180 nt!PPM_ETW_PROCESSOR_PROFILE_CHANGE = <no type information>
fffff801`0b366118 nt!PpmUnlockProcessors (PpmUnlockProcessors)
fffff801`0b1f76b8 nt!Feature_Servicing_AddInitProcessProperty__private_IsEnabled (Feature_Servicing_AddInitProcessProperty__private_IsEnabled)
fffff801`0b0de380 nt!KeYieldProcessorEx (KeYieldProcessorEx)
fffff801`0b1614b0 nt!PsGetProcessSessionIdEx (PsGetProcessSessionIdEx)
fffff801`0b101e00 nt!PsGetCurrentProcessWow64Process (PsGetCurrentProcessWow64Process)
fffff801`0b4c1760 nt!PsReleaseProcessExitSynchronization (PsReleaseProcessExitSynchronization)
fffff801`0ba19340 nt!ExCbProcessorAdd = <no type information>
fffff801`0b1fbf60 nt!KiSaveProcessorControlState (KiSaveProcessorControlState)
fffff801`0b3aea60 nt!EtwpWriteProcessorTrace (EtwpWriteProcessorTrace)
fffff801`0ae1cae8 nt!GUID_PROCESSOR_CLASS1_INITIAL_PERF = <no type information>
fffff801`0b58bbf0 nt!CcInitializeProcessor (CcInitializeProcessor)
fffff801`0b2b7a08 nt!HalpAddMcaToProcessorSpecificSection (HalpAddMcaToProcessorSpecificSection)
fffff801`0b2d3524 nt!HalpWdatProcessWdrtInternalData (HalpWdatProcessWdrtInternalData)
fffff801`0b3a8a58 nt!EtwGetProcessorBuffer (EtwGetProcessorBuffer)
fffff801`0b7a9f88 nt!HalpHandlePreviousMcaErrorsOnProcessor (HalpHandlePreviousMcaErrorsOnProcessor)
fffff801`0b6ad34c nt!PpDevCfgProcessDeviceExtensions (PpDevCfgProcessDeviceExtensions)
fffff801`0b7e2828 nt!ViDeadlockPreprocessOptions (ViDeadlockPreprocessOptions)
fffff801`0b590500 nt!PsSetCreateProcessNotifyRoutineEx (PsSetCreateProcessNotifyRoutineEx)
fffff801`0b6f5408 nt!PpmEventHiddenProcessorPerformance (PpmEventHiddenProcessorPerformance)
fffff801`0b1eeeec nt!SymCryptParallelHashProcess_serial (SymCryptParallelHashProcess_serial)
fffff801`0b7d1c70 nt!ViHalPreprocessOptions (ViHalPreprocessOptions)
fffff801`0b317a60 nt!KiProcessSecondarySignalList (KiProcessSecondarySignalList)
fffff801`0ae2e0e8 nt!POP_ETW_EVENT_WAITFORPROCESSES_STOP = <no type information>
fffff801`0b1f9a00 nt!ZwCreateUserProcess (ZwCreateUserProcess)
fffff801`0ae01030 nt!ExpCompressionProcessName = <no type information>
fffff801`0b688be0 nt!NtRemoveProcessDebug (NtRemoveProcessDebug)
fffff801`0b2f0870 nt!HvlQueryStartedProcessors (HvlQueryStartedProcessors)
fffff801`0b86ddd0 nt!PnpEarlyLaunchImageNotificationPostProcess (PnpEarlyLaunchImageNotificationPostProcess)
fffff801`0b3077d0 nt!IopLiveDumpTraceCorralProcessorsDuration (IopLiveDumpTraceCorralProcessorsDuration)
fffff801`0ae339e0 nt!KMPnPEvt_DevQuery_ProcessingStart = <no type information>
fffff801`0b313140 nt!KiResetProcessorTraceBuffer (KiResetProcessorTraceBuffer)
fffff801`0ae010c8 nt!ExpSecureSystemProcessName = <no type information>
fffff801`0bafc60c nt!KeProcessorRevision = <no type information>
fffff801`0b70d58c nt!PsTerminateMinimalProcess (PsTerminateMinimalProcess)
fffff801`0ae1cc48 nt!GUID_PROCESSOR_PERF_INCREASE_POLICY = <no type information>
fffff801`0b692c5c nt!VslRundownSecureProcess (VslRundownSecureProcess)
fffff801`0bafb34c nt!KiPowerOffFrozenProcessors = <no type information>
fffff801`0ae2edc8 nt!POP_ETW_EVENT_WAITFORPROCESSES_START = <no type information>
fffff801`0b4f0730 nt!SmStoreSetProcessVaRanges (SmStoreSetProcessVaRanges)
fffff801`0b16d160 nt!xHalProcessorFreeze (xHalProcessorFreeze)
fffff801`0ae0b510 nt!GUID_PROCESSOR_SETTINGS_SUBGROUP = <no type information>
fffff801`0b521a00 nt!NtQueryPortInformationProcess (NtQueryPortInformationProcess)
fffff801`0b71ed20 nt!LsaDeregisterLogonProcess (LsaDeregisterLogonProcess)
fffff801`0ae2ffe8 nt!DEVPKEY_Spare_Processor_Apic_Id = <no type information>
fffff801`0b49a8d8 nt!KeSetAutoAlignmentProcess (KeSetAutoAlignmentProcess)
fffff801`0b12b600 nt!KeDetachProcess (KeDetachProcess)
fffff801`0b70afa0 nt!PspTrySetProcessPebThrottlingFlags (PspTrySetProcessPebThrottlingFlags)
fffff801`0b313900 nt!KeQueryActiveProcessors (KeQueryActiveProcessors)
fffff801`0b536058 nt!PnpDeviceCompletionProcessCompletedRequests (PnpDeviceCompletionProcessCompletedRequests)
fffff801`0b49aac0 nt!NtSetInformationProcess (NtSetInformationProcess)
fffff801`0b5ce340 nt!ExpInitFullProcessSecurityInfo (ExpInitFullProcessSecurityInfo)
fffff801`0b2ba9b0 nt!HalpInterruptResetThisProcessor (HalpInterruptResetThisProcessor)
fffff801`0ae0df88 nt!PPM_ETW_PROCESSOR_PROFILE_SETTING_CHANGE = <no type information>
fffff801`0b11e040 nt!KiFlushProcessTbWorker (KiFlushProcessTbWorker)
fffff801`0bb2d850 nt!UNIDENTIFIED_PROCESS = <no type information>
fffff801`0b5cf6ac nt!IopQueryProcessorInitValues (IopQueryProcessorInitValues)
fffff801`0ae1cac8 nt!GUID_PROCESSOR_RESPONSIVENESS_ENABLE_TIME = <no type information>
fffff801`0b431bf0 nt!PspSetProcessShortName (PspSetProcessShortName)
fffff801`0ae306b0 nt!GUID_PROCESSOR_PERF_DECREASE_HISTORY = <no type information>
fffff801`0baf4f58 nt!HalpMceProcessorCount = <no type information>
fffff801`0bb2e9d8 nt!PspCreateProcessNotifyRoutineCount = <no type information>
fffff801`0b6bba28 nt!PiProcessCanceledRemoveForReset (PiProcessCanceledRemoveForReset)
fffff801`0b0440e8 nt!PfpIsProcessInfoPresent (PfpIsProcessInfoPresent)
fffff801`0ae33b40 nt!KMPnPEvt_DevQuery_ProcessingStop = <no type information>
fffff801`0ae2ea68 nt!LIVEDUMP_EVENT_CAPTURE_PAGES_WORKFLOW_SYSTEM_QUISCED_UNCORRAL_PROCESSORS = <no type information>
fffff801`0b6927ac nt!VslLiveDumpCaptureProcess (VslLiveDumpCaptureProcess)
fffff801`0b4941d0 nt!PsWow64GetProcessMachine (PsWow64GetProcessMachine)
fffff801`0b128400 nt!PsGetProcessSequenceNumber (PsGetProcessSequenceNumber)
fffff801`0b6db8d0 nt!MiCloneProcessAddressSpace (MiCloneProcessAddressSpace)
fffff801`0ae1cab8 nt!GUID_PROCESSOR_PERF_DECREASE_THRESHOLD = <no type information>
fffff801`0b550158 nt!WmipProcessWmiRegInfo (WmipProcessWmiRegInfo)
fffff801`0b3a2f0c nt!VmpProcessUpdateSlat (VmpProcessUpdateSlat)
fffff801`0b37fe24 nt!PspReadProcessSecurityDomain (PspReadProcessSecurityDomain)
fffff801`0b4d0b80 nt!SeIsTokenAssignableToProcess (SeIsTokenAssignableToProcess)
fffff801`0b3125d8 nt!KeGetProcessQosFromPolicy (KeGetProcessQosFromPolicy)
fffff801`0ae2dd38 nt!PPM_ETW_PROCESSOR_PROFILE_DISABLED = <no type information>
fffff801`0b2d34c8 nt!HalpWdatProcessWdatInternalData (HalpWdatProcessWdatInternalData)
fffff801`0ba4bdbc nt!HalpInterruptDynamicProcessorCount = <no type information>
fffff801`0b0e55b0 nt!KeGetProcessorNumberFromIndex (KeGetProcessorNumberFromIndex)
fffff801`0b10fcf8 nt!ExpCallProcessing (ExpCallProcessing)
fffff801`0b6d0ed4 nt!MiSetProcessPebHotPatchState (MiSetProcessPebHotPatchState)
fffff801`0bafdcc0 nt!KiProcessorBlock = <no type information>
fffff801`0b1faf20 nt!ZwRemoveProcessDebug (ZwRemoveProcessDebug)
fffff801`0b09748c nt!MiSelectSessionAttachProcess (MiSelectSessionAttachProcess)
fffff801`0b490c20 nt!NtCreateUserProcess (NtCreateUserProcess)
fffff801`0b70a1f8 nt!PsSetProcessHandleTracingInformation (PsSetProcessHandleTracingInformation)
fffff801`0b461680 nt!PspQueryJobHierarchyProcessIdList (PspQueryJobHierarchyProcessIdList)
fffff801`0b6f8678 nt!PpmPostProcessMediaBuffering (PpmPostProcessMediaBuffering)
fffff801`0ba25a50 nt!ObpRegTraceProcessName = <no type information>
fffff801`0b7afe38 nt!IopLiveDumpMarkProcessorData (IopLiveDumpMarkProcessorData)
fffff801`0b12a0a8 nt!KiTryToEndDpcProcessing (KiTryToEndDpcProcessing)
fffff801`0b053a68 nt!PspUnlockProcessListShared (PspUnlockProcessListShared)
fffff801`0ba1df20 nt!PsVmProcessorHostTransitionEvent = <no type information>
fffff801`0b1bb27c nt!KiGetProcessorInformation (KiGetProcessorInformation)
fffff801`0b1999e0 nt!PspLockProcessShared (PspLockProcessShared)
fffff801`0b851d70 nt!PipProcessPendingOperations (PipProcessPendingOperations)
fffff801`0b138b10 nt!MiInitializeProcessPageTableCommitmentBitMaps (MiInitializeProcessPageTableCommitmentBitMaps)
fffff801`0b1182f0 nt!PsGetProcessPeb (PsGetProcessPeb)
fffff801`0b450e54 nt!ExWnfExitProcess (ExWnfExitProcess)
fffff801`0b1ee6c4 nt!SymCryptParallelSha256Process (SymCryptParallelSha256Process)
fffff801`0b2d05ac nt!HalpHvStartProcessor (HalpHvStartProcessor)
fffff801`0b3461f0 nt!MmReadProcessPageTables (MmReadProcessPageTables)
fffff801`0b2f0760 nt!HvlQueryProcessorTopologyCount (HvlQueryProcessorTopologyCount)
fffff801`0b1999e0 nt!PspLockProcessSecurityShared (PspLockProcessSecurityShared)
fffff801`0ba25ac8 nt!ObpTraceProcessName = <no type information>
fffff801`0b74ab9c nt!EtwpUpdateProcessorTraceConfiguration (EtwpUpdateProcessorTraceConfiguration)
fffff801`0bb2ea50 nt!KiBootProcessorIdt = <no type information>
fffff801`0ae1ca58 nt!GUID_PROCESSOR_CORE_PARKING_MAX_CORES = <no type information>
fffff801`0b37fdbc nt!PspLockProcessSharedUnsafe (PspLockProcessSharedUnsafe)
fffff801`0b2b83fc nt!HalpCreateMcaProcessorErrorRecord (HalpCreateMcaProcessorErrorRecord)
fffff801`0b31267c nt!KeProcessorProfileControlArea (KeProcessorProfileControlArea)
fffff801`0b4b9850 nt!NtOpenProcess (NtOpenProcess)
fffff801`0baf4bb0 nt!Kd_PROCESSOR_Mask = <no type information>
fffff801`0b2d110c nt!HalpInterruptResetAllProcessors (HalpInterruptResetAllProcessors)
fffff801`0b1650c0 nt!xHalQueryProcessorRestartEntryPoint (xHalQueryProcessorRestartEntryPoint)
fffff801`0b19a580 nt!xHalResumeProcessorFromIdle (xHalResumeProcessorFromIdle)
fffff801`0b2bb670 nt!HalpDisableCmciOnProcessor (HalpDisableCmciOnProcessor)
fffff801`0b365e4c nt!PpmTestAndLockProcessor (PpmTestAndLockProcessor)
fffff801`0b0e3768 nt!SepSetTrustLevelForProcessToken (SepSetTrustLevelForProcessToken)
fffff801`0b465fa0 nt!ExpCopyProcessInfo (ExpCopyProcessInfo)
fffff801`0bafc46c nt!KeMaximumProcessors = <no type information>
fffff801`0b2bb58c nt!HalpCmciSetProcessorMiscConfigAMD (HalpCmciSetProcessorMiscConfigAMD)
fffff801`0ae1cba8 nt!GUID_PROCESSOR_SHORT_THREAD_SCHEDULING_POLICY = <no type information>
fffff801`0b70c76c nt!PspAssignProcessToJobList (PspAssignProcessToJobList)
fffff801`0badb380 nt!PcwpProcessorCounterSet = <no type information>
fffff801`0b045dd0 nt!PsGetProcessStartKey (PsGetProcessStartKey)
fffff801`0b4f9d80 nt!ExpQueryNumaProcessorMap (ExpQueryNumaProcessorMap)
fffff801`0b2bb330 nt!HalpCmciSetProcessorConfigAMD (HalpCmciSetProcessorConfigAMD)
fffff801`0b120ff0 nt!PsIsWin32KFilterAuditEnabledForProcess (PsIsWin32KFilterAuditEnabledForProcess)
fffff801`0b1c2bc8 nt!PnpCompleteSystemStartProcess (PnpCompleteSystemStartProcess)
fffff801`0b38c6d8 nt!LdrpArmProcessRelocation (LdrpArmProcessRelocation)
fffff801`0ae2dc78 nt!MITIGATION_ENFORCE_PROHIBIT_CHILD_PROCESS_CREATION = <no type information>
fffff801`0b42645c nt!MiReturnFullProcessCommitment (MiReturnFullProcessCommitment)
fffff801`0ba196c0 nt!CriticalProcessExceptionData = <no type information>
fffff801`0b16d160 nt!xHalProcessorOff (xHalProcessorOff)
fffff801`0b736ca4 nt!EtwpUpdatePerProcessTracing (EtwpUpdatePerProcessTracing)
fffff801`0ae2f1e8 nt!PPM_ETW_HIDDEN_PROCESSOR_BIOS_CAP_CHANGE = <no type information>
fffff801`0b2f2614 nt!HvlpStartVirtualProcessor (HvlpStartVirtualProcessor)
fffff801`0b19a580 nt!xHalPreprocessNmi (xHalPreprocessNmi)
fffff801`0b495ca4 nt!PspAllocateProcess (PspAllocateProcess)
fffff801`0b03dee0 nt!PsIsProtectedProcess (PsIsProtectedProcess)
fffff801`0bb2d188 nt!PspNoWakeChargeReferencedProcess = <no type information>
fffff801`0b062cb0 nt!PsGetProcessId (PsGetProcessId)
fffff801`0b311dcc nt!KeRundownSecureProcess (KeRundownSecureProcess)
fffff801`0b2b4ef0 nt!HalpTimerNotifyProcessorFreeze (HalpTimerNotifyProcessorFreeze)
fffff801`0b498fa0 nt!PspSetProcessForegroundBackgroundRequest (PspSetProcessForegroundBackgroundRequest)
fffff801`0b3171c8 nt!KiDynamicProcessorAddNotification (KiDynamicProcessorAddNotification)
fffff801`0b691b40 nt!VslCreateSecureProcess (VslCreateSecureProcess)
fffff801`0bb2e948 nt!SepProcessAuditSd = <no type information>
fffff801`0b466240 nt!PsQueryStatisticsProcess (PsQueryStatisticsProcess)
fffff801`0baeec00 nt!ExpFullProcessInformationSid = <no type information>
fffff801`0b116100 nt!PsIsWin32KFilterEnabledForProcess (PsIsWin32KFilterEnabledForProcess)
fffff801`0b6b4474 nt!PnpTraceDeviceRemoveProcessVeto (PnpTraceDeviceRemoveProcessVeto)
fffff801`0b1cdc00 nt!KeQueryNodeMaximumProcessorCount (KeQueryNodeMaximumProcessorCount)
fffff801`0ae2f7f0 nt!ProcessThawEvent = <no type information>
fffff801`0b590560 nt!PsSetCreateProcessNotifyRoutineEx2 (PsSetCreateProcessNotifyRoutineEx2)
fffff801`0baf4d8c nt!HalpInterruptProcessorCap = <no type information>
fffff801`0b033630 nt!PsIsSystemProcess (PsIsSystemProcess)
fffff801`0b01f0d0 nt!KiAffinityContainsProcessorsOtherThanSelf (KiAffinityContainsProcessorsOtherThanSelf)
fffff801`0b7314d0 nt!VmCreateMemoryProcess (VmCreateMemoryProcess)
fffff801`0b3506e0 nt!MiProcessVaContiguityInformation (MiProcessVaContiguityInformation)
fffff801`0ba25c20 nt!ObpTraceProcessNameBuffer = <no type information>
fffff801`0ba49df8 nt!HalpInterruptProcessorPcr = <no type information>
fffff801`0b3118d0 nt!KeAddProcessorGroupAffinity (KeAddProcessorGroupAffinity)
fffff801`0b70c628 nt!PsSetVmProcessorHostProcess (PsSetVmProcessorHostProcess)
fffff801`0b30a718 nt!PnpInitializeProcessor (PnpInitializeProcessor)
fffff801`0b34eb64 nt!MiReturnProcessCommitment (MiReturnProcessCommitment)
fffff801`0b12f8d0 nt!SeTokenSetNoChildProcessRestricted (SeTokenSetNoChildProcessRestricted)
fffff801`0ba4bda4 nt!HalpInterruptLastProcessorStartupInMs = <no type information>
fffff801`0ae2e4c8 nt!THREATINT_FREEZE_PROCESS = <no type information>
fffff801`0b53ad84 nt!PipProcessRebuildPowerRelationsQueue (PipProcessRebuildPowerRelationsQueue)
fffff801`0b71e6d0 nt!SeCodeIntegritySetInformationProcess (SeCodeIntegritySetInformationProcess)
fffff801`0ba50800 nt!HalpInterruptProcessorCount = <no type information>
fffff801`0bb2e710 nt!SeProfileSingleProcessPrivilege = <no type information>
fffff801`0ae1e228 nt!DEVPKEY_DriverDatabase_ProcessorArchitecture = <no type information>
fffff801`0b70f0a0 nt!PsSuspendProcess (PsSuspendProcess)
fffff801`0b2bb7f8 nt!HalpMcaProcessorBankClearAMD (HalpMcaProcessorBankClearAMD)
fffff801`0b1f7a00 nt!HalpProcessorFence (HalpProcessorFence)
fffff801`0bb2eb98 nt!SepImportantProcessSd = <no type information>
fffff801`0b2f8e80 nt!HvlpAffinityToHvProcessorSet (HvlpAffinityToHvProcessorSet)
fffff801`0b10c6a0 nt!ExGetCurrentProcessorCounts (ExGetCurrentProcessorCounts)
fffff801`0b74ac44 nt!EtwpUpdateProcessorTraceEvents (EtwpUpdateProcessorTraceEvents)
fffff801`0b48f688 nt!SepSetProcessUniqueAttribute (SepSetProcessUniqueAttribute)
fffff801`0ae1ca88 nt!GUID_PROCESSOR_HETERO_INCREASE_THRESHOLD = <no type information>
fffff801`0b4b3408 nt!PsTestProtectedProcessIncompatibility (PsTestProtectedProcessIncompatibility)
fffff801`0ae1ccb8 nt!GUID_PROCESSOR_RESPONSIVENESS_ENABLE_THRESHOLD = <no type information>
fffff801`0ae2e300 nt!LIVEDUMP_EVENT_SIZING_WORKFLOW_SYSTEM_QUISCED_CORRAL_PROCESSORS = <no type information>
fffff801`0b4e0df8 nt!PspLogAuditTerminateRemoteProcessEvent (PspLogAuditTerminateRemoteProcessEvent)
fffff801`0b5b5f9c nt!PopInitializeHeteroProcessors (PopInitializeHeteroProcessors)
fffff801`0b691dc8 nt!VslDebugProtectSecureProcessMemory (VslDebugProtectSecureProcessMemory)
fffff801`0ae33b90 nt!KMPnPEvt_ProcessDeviceStart_Stop = <no type information>
fffff801`0b6a50bc nt!PiProcessHaltDevice (PiProcessHaltDevice)
fffff801`0b686e78 nt!DbgkOpenProcessDebugPort (DbgkOpenProcessDebugPort)
fffff801`0b311990 nt!KeInterlockedClearProcessorAffinityEx (KeInterlockedClearProcessorAffinityEx)
fffff801`0b311eb8 nt!KeUnsecureProcess (KeUnsecureProcess)
fffff801`0ae1cc88 nt!GUID_PROCESSOR_PERF_ENERGY_PERFORMANCE_PREFERENCE = <no type information>
fffff801`0bb2e9dc nt!PspCreateProcessNotifyRoutineExCount = <no type information>
fffff801`0b0bf970 nt!KiIsSecureProcessFlush (KiIsSecureProcessFlush)
fffff801`0ba4bda1 nt!HalpInterruptProcessorRestarting = <no type information>
fffff801`0ae1cbb8 nt!GUID_PROCESSOR_PERF_DECREASE_TIME = <no type information>
fffff801`0b5d0480 nt!LsaRegisterLogonProcess (LsaRegisterLogonProcess)
fffff801`0b1659c0 nt!PpmStartIllegalProcessorThrottleLogging (PpmStartIllegalProcessorThrottleLogging)
fffff801`0b89ad38 nt!NtInitialUserProcess = <no type information>
fffff801`0b31bf10 nt!KeSwitchFrozenProcessor (KeSwitchFrozenProcessor)
fffff801`0b1ae950 nt!HalpTimerSaveProcessorFrequency (HalpTimerSaveProcessorFrequency)
fffff801`0ae1cb88 nt!GUID_PROCESSOR_SOFT_PARKING_LATENCY = <no type information>
fffff801`0b045df0 nt!PsGetCurrentProcessSessionId (PsGetCurrentProcessSessionId)
fffff801`0b19a580 nt!KiProcessorCallbackNop (KiProcessorCallbackNop)
fffff801`0b087e00 nt!KeAddProcessorAffinityEx (KeAddProcessorAffinityEx)
fffff801`0b81b010 nt!HalpBlkProcessorStartup (HalpBlkProcessorStartup)
fffff801`0b5906b0 nt!PsSetCreateProcessNotifyRoutine (PsSetCreateProcessNotifyRoutine)
fffff801`0b2f07a0 nt!HvlQueryProcessorTopologyEx (HvlQueryProcessorTopologyEx)
fffff801`0baf50b8 nt!HalpProcessorTraceInterruptHandler = <no type information>
fffff801`0b4df270 nt!PsQueryProcessSignatureMitigationPolicy (PsQueryProcessSignatureMitigationPolicy)
fffff801`0b12f690 nt!KeSetTargetProcessorDpcEx (KeSetTargetProcessorDpcEx)
fffff801`0b70dacc nt!PspRundownProcess (PspRundownProcess)
fffff801`0b6bd1c8 nt!KiStartDynamicProcessor (KiStartDynamicProcessor)
fffff801`0ae2f018 nt!POP_ETW_EVENT_ILLEGAL_PROCESSOR_THROTTLE_DIAGNOSTIC = <no type information>
fffff801`0b15fa18 nt!ExpGetSystemEmulationProcessorInformation (ExpGetSystemEmulationProcessorInformation)
fffff801`0b365134 nt!PpmIdleSelectCoordinatedProcessorDependency (PpmIdleSelectCoordinatedProcessorDependency)
fffff801`0ae2fb40 nt!PPM_ETW_PROCESSOR_PROFILE_STATUS_RUNDOWN = <no type information>
fffff801`0b7ed360 nt!VfZwOpenProcessTokenEx (VfZwOpenProcessTokenEx)
fffff801`0b86d960 nt!PnpEarlyLaunchImageNotificationPreProcess (PnpEarlyLaunchImageNotificationPreProcess)
fffff801`0b698468 nt!IopQueryProcessIdsUsingFile (IopQueryProcessIdsUsingFile)
fffff801`0ae2f9b8 nt!LIVEDUMP_EVENT_SIZING_WORKFLOW_SYSTEM_QUISCED_CAPTURE_PROCESSOR_CONTEXT = <no type information>
fffff801`0b51cfe4 nt!PopProcessDisplayRequiredChange (PopProcessDisplayRequiredChange)
fffff801`0b7ee110 nt!VfZwQueryInformationProcess (VfZwQueryInformationProcess)
fffff801`0b37fa00 nt!PsSetProcessPriorityClass (PsSetProcessPriorityClass)
fffff801`0b33471c nt!MiStackTheftFreezeProcessors (MiStackTheftFreezeProcessors)
fffff801`0b30691c nt!IopProcessIoTracking (IopProcessIoTracking)
fffff801`0b736de0 nt!EtwpUpdateProcessTracingCallback (EtwpUpdateProcessTracingCallback)
fffff801`0b1c1be0 nt!KeQueryActiveProcessorAffinity (KeQueryActiveProcessorAffinity)
fffff801`0b7449f0 nt!EtwpCovSampCaptureBufferProcess (EtwpCovSampCaptureBufferProcess)
fffff801`0b708250 nt!PspDeleteProtectedProcessParameters (PspDeleteProtectedProcessParameters)
fffff801`0b1fbe40 nt!KiSaveInitialProcessorControlState (KiSaveInitialProcessorControlState)
fffff801`0bafc404 nt!KeNumberProcessors = <no type information>
fffff801`0bafc590 nt!PsSecureSystemProcess = <no type information>
fffff801`0ae336f0 nt!HV_EVENTLOG_PROCESSOR_STARTUP_FAILED = <no type information>
fffff801`0bafc410 nt!PsProcessType = <no type information>
fffff801`0ae1cc08 nt!GUID_PROCESSOR_PERF_TIME_CHECK = <no type information>
fffff801`0b48ece0 nt!PsReferenceProcessFilePointer (PsReferenceProcessFilePointer)
fffff801`0b2f1258 nt!HvlpGetLogicalProcessorProperty (HvlpGetLogicalProcessorProperty)
fffff801`0b68a608 nt!DbgkpResumeProcess (DbgkpResumeProcess)
fffff801`0b2f04e0 nt!HvlGetLpIndexFromProcessorIndex (HvlGetLpIndexFromProcessorIndex)
fffff801`0b6f8728 nt!PpmProcessSettingsFromQueryTable (PpmProcessSettingsFromQueryTable)
fffff801`0b2f2268 nt!HvlpSetLogicalProcessorProperty (HvlpSetLogicalProcessorProperty)
fffff801`0bafb3a0 nt!KiProcessPolicyToQosMappingTable = <no type information>
fffff801`0b31ad48 nt!KeRecomputeCpuSetAffinityProcess (KeRecomputeCpuSetAffinityProcess)
fffff801`0b42dbc8 nt!PspIncrementJobChainProcessCounts (PspIncrementJobChainProcessCounts)
fffff801`0b1b2c70 nt!KeSwapProcessOrStack (KeSwapProcessOrStack)
fffff801`0b2b7858 nt!HalpAddMcaToProcessorGenericSection (HalpAddMcaToProcessorGenericSection)
fffff801`0b72d3d8 nt!SmcProcessStatsRequest (SmcProcessStatsRequest)
fffff801`0b34b738 nt!MiProcessHasAwePrivatePages (MiProcessHasAwePrivatePages)
fffff801`0b0688e0 nt!KeUnstackDetachProcess (KeUnstackDetachProcess)
fffff801`0b312888 nt!KeQueryReadyQueueStatsProcessor (KeQueryReadyQueueStatsProcessor)
fffff801`0ae33cf0 nt!KMPnPEvt_ProcessNewDevice_Stop = <no type information>
fffff801`0b768a78 nt!SdbpGetProcessHistory (SdbpGetProcessHistory)
fffff801`0b3788bc nt!PpmEventProcessorVetoRundown (PpmEventProcessorVetoRundown)
fffff801`0b0e8f50 nt!PspLockProcessExclusive (PspLockProcessExclusive)
fffff801`0b36c8b0 nt!PopProcessorQueryCoordinatedDependencyNotification (PopProcessorQueryCoordinatedDependencyNotification)
fffff801`0b7410ec nt!EtwpProcessorRundown (EtwpProcessorRundown)
fffff801`0b0ef850 nt!PpmPerfSelectProcessorStates (PpmPerfSelectProcessorStates)
fffff801`0b339d20 nt!MiProcessVmAccessedInfo (MiProcessVmAccessedInfo)
fffff801`0b2cffdc nt!HalpInterruptStartBlockedProcessors (HalpInterruptStartBlockedProcessors)
fffff801`0b32aaf8 nt!MiReleaseOutSwappedProcessCommit (MiReleaseOutSwappedProcessCommit)
fffff801`0b321bdc nt!KiAddProcessorToGroupSchedulingList (KiAddProcessorToGroupSchedulingList)
fffff801`0b3a2e94 nt!VmpProcessContextLockShared (VmpProcessContextLockShared)
fffff801`0ba47bf4 nt!CmProcessorMismatch = <no type information>
fffff801`0ba25a40 nt!ObpRuntimeTraceProcessName = <no type information>
fffff801`0ae2e158 nt!THREATINT_SUSPEND_PROCESS = <no type information>
fffff801`0b7ef080 nt!VfZwSetInformationProcess (VfZwSetInformationProcess)
fffff801`0bb024d0 nt!KiProcessorIndexToNumberMappingTable = <no type information>
fffff801`0ae30740 nt!PROCESSOR_GENERIC_ERROR_SECTION_GUID = <no type information>
fffff801`0b1034a0 nt!PsGetProcessWow64Process (PsGetProcessWow64Process)
fffff801`0b1141f0 nt!PsGetProcessWin32Process (PsGetProcessWin32Process)
fffff801`0b18ffbc nt!HvlpUseExtendedProcessorSetHypercalls (HvlpUseExtendedProcessorSetHypercalls)
fffff801`0b5219f0 nt!xHalGetProcessorId (xHalGetProcessorId)
fffff801`0bb4a568 nt!pXdvMmProbeAndLockProcessPages = <no type information>
fffff801`0b6bcea8 nt!KeConfigureHeteroProcessors (KeConfigureHeteroProcessors)
fffff801`0b3a2e1c nt!VmpProcessContextLockExclusive (VmpProcessContextLockExclusive)
fffff801`0b19a580 nt!ext_ms_win_ntos_processparameters_l1_1_0_PsGetProcessParameterOverrides (ext_ms_win_ntos_processparameters_l1_1_0_PsGetProcessParameterOverrides)
fffff801`0b88f894 nt!RegistryOverwriteCentralProcessor (RegistryOverwriteCentralProcessor)
fffff801`0b121410 nt!KeRestoreExtendedProcessorState (KeRestoreExtendedProcessorState)
fffff801`0ae1af80 nt!DEVPKEY_DriverPackage_ProcessorArchitecture = <no type information>
fffff801`0b1f9fe0 nt!ZwGetNextProcess (ZwGetNextProcess)
fffff801`0b710fe4 nt!PsGetPreviousProcess (PsGetPreviousProcess)
fffff801`0b70a584 nt!PspProcessDynamicEHContinuationTargets (PspProcessDynamicEHContinuationTargets)
fffff801`0ae09c40 nt!ProcessStop = <no type information>
fffff801`0ae1ca48 nt!GUID_PROCESSOR_CORE_PARKING_INCREASE_TIME = <no type information>
fffff801`0b313dcc nt!KiRemoveProcessorFromGroupDatabase (KiRemoveProcessorFromGroupDatabase)
fffff801`0b70d940 nt!PspFreezeProcessWorker (PspFreezeProcessWorker)
fffff801`0b380030 nt!PspUnlockProcessSharedUnsafe (PspUnlockProcessSharedUnsafe)
fffff801`0b2ee2e0 nt!FsRtlProcessFileLock (FsRtlProcessFileLock)
fffff801`0b2c1a64 nt!HalpTimerMeasureAllProcessorFrequencies (HalpTimerMeasureAllProcessorFrequencies)
fffff801`0b16d160 nt!xHalProcessorOn (xHalProcessorOn)
fffff801`0b11bb90 nt!PsGetProcessImageFileName (PsGetProcessImageFileName)
fffff801`0b1f92c0 nt!ZwAssignProcessToJobObject (ZwAssignProcessToJobObject)
fffff801`0b19a580 nt!xHalNotifyProcessorFreeze (xHalNotifyProcessorFreeze)
fffff801`0b36c770 nt!PopProcessorParkMaskNotification (PopProcessorParkMaskNotification)
fffff801`0b03eaa4 nt!MmGetProcessPartitionId (MmGetProcessPartitionId)
fffff801`0b053b60 nt!SmStoreExistsForProcess (SmStoreExistsForProcess)
fffff801`0ae1cb48 nt!GUID_PROCESSOR_IDLE_ALLOW_SCALING = <no type information>
fffff801`0b36c7f0 nt!PopProcessorParkNotification (PopProcessorParkNotification)
fffff801`0b362d70 nt!ObpProcessRemoveObjectDpcWorker (ObpProcessRemoveObjectDpcWorker)
fffff801`0ae2e9f0 nt!PPM_ETW_PROCESSOR_PRE_VETO_ACCOUNTING_RUNDOWN = <no type information>
fffff801`0ae0a2a8 nt!ProcessStart = <no type information>
fffff801`0b2ee7a0 nt!FsRtlOplockGetAnyBreakOwnerProcess (FsRtlOplockGetAnyBreakOwnerProcess)
fffff801`0b346574 nt!MiCompleteSecureProcessFault (MiCompleteSecureProcessFault)
fffff801`0b719de0 nt!RtlQueryProcessPlaceholderCompatibilityMode (RtlQueryProcessPlaceholderCompatibilityMode)
fffff801`0b377c84 nt!PpmEventHiddenProcessorBiosCapChange (PpmEventHiddenProcessorBiosCapChange)
fffff801`0b16d160 nt!xHalTopologyQueryProcessorRelationships (xHalTopologyQueryProcessorRelationships)
fffff801`0b0bf930 nt!KeRemoveProcessorAffinityEx (KeRemoveProcessorAffinityEx)
fffff801`0b7864c8 nt!CmpRegistryProcessName = <no type information>
fffff801`0b4d6ed4 nt!LpcInitializeProcess (LpcInitializeProcess)
fffff801`0b1f91c0 nt!ZwAlpcOpenSenderProcess (ZwAlpcOpenSenderProcess)
fffff801`0ba31cb0 nt!KiProcessInSwapListHead = <no type information>
fffff801`0b31a3d0 nt!KiProcessProfileList (KiProcessProfileList)
fffff801`0b70a104 nt!PsGetKeepAliveCountProcess (PsGetKeepAliveCountProcess)
fffff801`0ba12308 nt!HalpProcessorInMceHandler = <no type information>
fffff801`0b7b14f0 nt!PnprQuiesceProcessorDpc (PnprQuiesceProcessorDpc)
fffff801`0b37f870 nt!PsGetProcessPriorityClass (PsGetProcessPriorityClass)
fffff801`0b00fc50 nt!RtlIsValidProcessTrustLabelSid (RtlIsValidProcessTrustLabelSid)
fffff801`0b1659e0 nt!PpmStopIllegalProcessorThrottleLogging (PpmStopIllegalProcessorThrottleLogging)
fffff801`0b6f5de0 nt!PpmEventTraceProcessorIdle (PpmEventTraceProcessorIdle)
fffff801`0b7e9ec0 nt!VerifierMmProbeAndLockProcessPages (VerifierMmProbeAndLockProcessPages)
fffff801`0ba2a1a8 nt!MmPerProcessorZeroCalibrationBytes = <no type information>
fffff801`0b6d0758 nt!MiQueryProcessActivePatches (MiQueryProcessActivePatches)
fffff801`0b4f1174 nt!PfSnEndProcessTrace (PfSnEndProcessTrace)
fffff801`0baf9ed0 nt!PopFxProcessorPlugin = <no type information>
fffff801`0b7ad450 nt!IvtProcessReservedDomains (IvtProcessReservedDomains)
fffff801`0b380c50 nt!PspTimerDelayProcess (PspTimerDelayProcess)
fffff801`0b10c1b0 nt!PsChargeProcessPoolQuota (PsChargeProcessPoolQuota)
fffff801`0b720ab4 nt!SeAuditProcessExit (SeAuditProcessExit)
fffff801`0b11c770 nt!PsGetCurrentThreadProcess (PsGetCurrentThreadProcess)
fffff801`0ae2e6c0 nt!PPM_ETW_PROCESSOR_IDLE_VETO_RUNDOWN = <no type information>
fffff801`0b320154 nt!KiProcessPendingDisconnect (KiProcessPendingDisconnect)
fffff801`0b78ac80 nt!PpmProcessorDriverDispatchTable = <no type information>
fffff801`0b42e694 nt!PspApplyJobChainLimitsToProcess (PspApplyJobChainLimitsToProcess)
fffff801`0ae1cb28 nt!GUID_PROCESSOR_CORE_PARKING_OVER_UTILIZATION_THRESHOLD = <no type information>
fffff801`0ae30650 nt!XPF_PROCESSOR_ERROR_SECTION_GUID = <no type information>
fffff801`0b36ca3c nt!PoSetProcessorQoS (PoSetProcessorQoS)
fffff801`0b6bd8cc nt!KeSetCheckStackExtentsProcess (KeSetCheckStackExtentsProcess)
fffff801`0b739678 nt!EtwpLogProcessPerfCtrs (EtwpLogProcessPerfCtrs)
fffff801`0b7b6c58 nt!CmpProcessorStringVia = <no type information>
fffff801`0b709d20 nt!PsIsProcessPrimaryTokenFrozen (PsIsProcessPrimaryTokenFrozen)
fffff801`0b68c15c nt!DbgkpWerProcessPolicyResult (DbgkpWerProcessPolicyResult)
fffff801`0b7b18d4 nt!PnprQuiesceProcessors (PnprQuiesceProcessors)
fffff801`0bafc520 nt!KeProcessorLevel = <no type information>
fffff801`0b6b7e80 nt!PipProcessRestartPhase2 (PipProcessRestartPhase2)
fffff801`0b6b7dbc nt!PipProcessRestartPhase1 (PipProcessRestartPhase1)
fffff801`0b4e3cc0 nt!PsQuitNextProcessThread (PsQuitNextProcessThread)
fffff801`0b72c79c nt!SmProcessResizeRequest (SmProcessResizeRequest)
fffff801`0bafc574 nt!KeRegisteredProcessors = <no type information>
fffff801`0b71bb18 nt!LdrProcessRelocationBlockLongLong (LdrProcessRelocationBlockLongLong)
fffff801`0b120250 nt!PsGetProcessWin32WindowStation (PsGetProcessWin32WindowStation)
fffff801`0b6882a0 nt!DbgkpSetProcessDebugObject (DbgkpSetProcessDebugObject)
fffff801`0b73e30c nt!EtwTiLogSuspendResumeProcess (EtwTiLogSuspendResumeProcess)
fffff801`0b4e0010 nt!PspSetProcessBackgroundCountCallback (PspSetProcessBackgroundCountCallback)
fffff801`0b4dce70 nt!ArbPreprocessEntry (ArbPreprocessEntry)
fffff801`0bb4a948 nt!pXdvZwOpenProcessToken = <no type information>
fffff801`0b04b3c0 nt!KeAbProcessBaseIoPriorityChange (KeAbProcessBaseIoPriorityChange)
fffff801`0b6e3710 nt!PopNewProcessorCallback (PopNewProcessorCallback)
fffff801`0ba1e080 nt!PspProcessRundownCacheWorkItem = <no type information>
fffff801`0ae2df98 nt!PPM_ETW_PROCESSOR_IDLE_VETO_INCREMENT = <no type information>
fffff801`0ba31ed0 nt!KiProcessListHead = <no type information>
fffff801`0b432108 nt!ObKillProcess (ObKillProcess)
fffff801`0bb4a950 nt!pXdvZwOpenProcessTokenEx = <no type information>
fffff801`0b73231c nt!VmpProcessContextCleanup (VmpProcessContextCleanup)
fffff801`0ae2f398 nt!PPM_ETW_HIDDEN_PROCESSOR_CURRENT_PERF_RUNDOWN = <no type information>
fffff801`0b6bd880 nt!KeRequestTerminationProcess (KeRequestTerminationProcess)
fffff801`0b747d18 nt!EtwpCovSampProcessAddModule (EtwpCovSampProcessAddModule)
fffff801`0b042530 nt!KiAbDeferredProcessingWorker (KiAbDeferredProcessingWorker)
fffff801`0b709d00 nt!PsIsProcessBeingDebugged (PsIsProcessBeingDebugged)
fffff801`0b6bd1a4 nt!KiResetBootProcessorApicMask (KiResetBootProcessorApicMask)
fffff801`0b44c644 nt!MmGetDirectoryFrameFromProcess (MmGetDirectoryFrameFromProcess)
fffff801`0b70a364 nt!PsUpdateActiveProcessAffinity (PsUpdateActiveProcessAffinity)
fffff801`0b708ed0 nt!PspShutdownCsrProcess (PspShutdownCsrProcess)
fffff801`0ae2f4a8 nt!ProcessFreezeEvent = <no type information>
fffff801`0ae1cd48 nt!GUID_PROCESSOR_THROTTLE_MAXIMUM = <no type information>
fffff801`0b4d4ed0 nt!PspQueryProcessIdListCallback (PspQueryProcessIdListCallback)
fffff801`0b311b7c nt!KeAdjustTimerDelayProcess (KeAdjustTimerDelayProcess)
fffff801`0b7f2c18 nt!HdlspProcessDumpCommand (HdlspProcessDumpCommand)
fffff801`0b435f10 nt!PsQueryProcessQuotaCounters (PsQueryProcessQuotaCounters)
fffff801`0bafc420 nt!PsInitialSystemProcess = <no type information>
fffff801`0b7960b0 nt!PopInvokeStateHandlerTargetProcessor (PopInvokeStateHandlerTargetProcessor)
fffff801`0b03300c nt!MiIsProcessCfgEnabled (MiIsProcessCfgEnabled)
fffff801`0b1eec3c nt!SymCryptParallelHashProcess (SymCryptParallelHashProcess)
fffff801`0b434adc nt!PsQueryProcessAttributes (PsQueryProcessAttributes)
fffff801`0b731a30 nt!VmSetVpHostProcess (VmSetVpHostProcess)
fffff801`0b36bcb0 nt!PopFxUpdateProcessorIdleState (PopFxUpdateProcessorIdleState)
fffff801`0b0f6d90 nt!PsGetCurrentProcessWin32Process (PsGetCurrentProcessWin32Process)
fffff801`0b1653e0 nt!xHalProcessorHalt (xHalProcessorHalt)
fffff801`0b1cfa30 nt!PspSetProcessIoHandlers (PspSetProcessIoHandlers)
fffff801`0b4e0170 nt!PsIsProcessCommitRelinquished (PsIsProcessCommitRelinquished)
fffff801`0b6e9394 nt!PopProcessWakeSourceWork (PopProcessWakeSourceWork)
fffff801`0b2f22f8 nt!HvlpSetupBootProcessorEarlyHypercallPages (HvlpSetupBootProcessorEarlyHypercallPages)
fffff801`0b2ba810 nt!HalStartDynamicProcessor (HalStartDynamicProcessor)
fffff801`0b7375ac nt!EtwQueryProcessTelemetryCoverage (EtwQueryProcessTelemetryCoverage)
fffff801`0ba479b0 nt!CmpPrevIdleProcessingState = <no type information>
fffff801`0b70b7d0 nt!PspGetProcessInJobHierarchyCallback (PspGetProcessInJobHierarchyCallback)
fffff801`0b4cf334 nt!PsIsProcessAppContainer (PsIsProcessAppContainer)
fffff801`0ae306d0 nt!GUID_PROCESSOR_PERF_CORE_PARKING_HISTORY = <no type information>
fffff801`0b12fcf0 nt!ExIsProcessorFeaturePresent (ExIsProcessorFeaturePresent)
fffff801`0b6d8330 nt!MiCreateProcessDefaultAweInfo (MiCreateProcessDefaultAweInfo)
fffff801`0b128fd0 nt!MmCheckProcessShadow (MmCheckProcessShadow)
fffff801`0b7b2dac nt!KiUnshadowProcessorAllocation (KiUnshadowProcessorAllocation)
fffff801`0b4b2d50 nt!MiUpdateProcessSharedCommit (MiUpdateProcessSharedCommit)
fffff801`0b064ddc nt!KeFoldProcessStatisticsThread (KeFoldProcessStatisticsThread)
fffff801`0b12b130 nt!KeProcessorGroupAffinity (KeProcessorGroupAffinity)
fffff801`0b6f6010 nt!PpmEventTraceProcessorPerformance (PpmEventTraceProcessorPerformance)
fffff801`0b83cf64 nt!InitBootProcessor (InitBootProcessor)
fffff801`0b323820 nt!KiSaveProcessorState (KiSaveProcessorState)
fffff801`0b13e7b0 nt!PopExecuteProcessorCallback (PopExecuteProcessorCallback)
fffff801`0bb4aa00 nt!pXdvZwQueryInformationProcess = <no type information>
fffff801`0b42e4f0 nt!PspImplicitAssignProcessToJob (PspImplicitAssignProcessToJob)
fffff801`0b568b4c nt!PiDmaGuardProcessPreAddDevice (PiDmaGuardProcessPreAddDevice)
fffff801`0b68a49c nt!DbgkExitProcess (DbgkExitProcess)
fffff801`0b70ae44 nt!PspSetProcessAffinitySafe (PspSetProcessAffinitySafe)
fffff801`0b1139b8 nt!EtwTraceProcessTerminate (EtwTraceProcessTerminate)
fffff801`0b1f8660 nt!ZwTerminateProcess (ZwTerminateProcess)
fffff801`0b521dc0 nt!SepImageVerificationCallbackPreProcess (SepImageVerificationCallbackPreProcess)
fffff801`0b6afac4 nt!PnprAddProcessorResources (PnprAddProcessorResources)
fffff801`0ba497d0 nt!HalpInterruptBlockedProcessors = <no type information>
fffff801`0b1a7fa0 nt!HalInitializeProcessor (HalInitializeProcessor)
fffff801`0b2e57bc nt!HalpIvtProcessDrhdEntry (HalpIvtProcessDrhdEntry)
fffff801`0b0dbc60 nt!KiCheckPreferredHeteroProcessor (KiCheckPreferredHeteroProcessor)
fffff801`0b3084d8 nt!IopLiveDumpTraceUncorralProcessorsDuration (IopLiveDumpTraceUncorralProcessorsDuration)
fffff801`0ae33a20 nt!KMPnPEvt_ProcessNewDevice_Start = <no type information>
fffff801`0b494298 nt!PspBuildCreateProcessContext (PspBuildCreateProcessContext)
fffff801`0b3a2d00 nt!VmpProcessAccessedBatch (VmpProcessAccessedBatch)
fffff801`0b4ccf8c nt!PsQueryFullProcessImageName (PsQueryFullProcessImageName)
fffff801`0b6e1efc nt!ObSetProcessDeviceMap (ObSetProcessDeviceMap)
fffff801`0b7b24f0 nt!KiInitializeDynamicProcessorDpc (KiInitializeDynamicProcessorDpc)
fffff801`0ae1cc58 nt!GUID_PROCESSOR_PARKING_CONCURRENCY_THRESHOLD = <no type information>
fffff801`0b436ab0 nt!PsQueryRuntimeProcess (PsQueryRuntimeProcess)
fffff801`0b6a4f10 nt!PnpProcessCompletedEject (PnpProcessCompletedEject)
fffff801`0b6be2f0 nt!KeDeregisterProcessorChangeCallback (KeDeregisterProcessorChangeCallback)
fffff801`0b44ca84 nt!PfSnGetUnsafeProcessParameters (PfSnGetUnsafeProcessParameters)
fffff801`0b32a758 nt!MiReAcquireOutSwappedProcessCommit (MiReAcquireOutSwappedProcessCommit)
fffff801`0b7b2a40 nt!KiConfigureDynamicProcessor (KiConfigureDynamicProcessor)
fffff801`0b7b2480 nt!KiInitializeDynamicProcessor (KiInitializeDynamicProcessor)
fffff801`0b6c4c20 nt!AlpcpDereferenceProcess (AlpcpDereferenceProcess)
fffff801`0b675bbc nt!CmInitializeProcessor (CmInitializeProcessor)
fffff801`0b17a674 nt!KeSetIdealProcessorThreadByNumber (KeSetIdealProcessorThreadByNumber)
fffff801`0b49a4d0 nt!PspGetPreviousProcessThread (PspGetPreviousProcessThread)
fffff801`0b105274 nt!PspIsParentProcess (PspIsParentProcess)
fffff801`0b045e60 nt!HalpInterruptSetProcessorStartContext (HalpInterruptSetProcessorStartContext)
fffff801`0ae2e330 nt!LIVEDUMP_EVENT_CAPTURE_PAGES_WORKFLOW_SYSTEM_QUISCED_CORRAL_PROCESSORS = <no type information>
fffff801`0b431344 nt!PspRundownSingleProcess (PspRundownSingleProcess)
fffff801`0b380b8c nt!PspSetProcessTimerDelayForWin32 (PspSetProcessTimerDelayForWin32)
fffff801`0b73eea4 nt!EtwpTimLogMitigationForProcess (EtwpTimLogMitigationForProcess)
fffff801`0ae0d438 nt!EnableProcessTracingCallbacks = <no type information>
fffff801`0ae1cbf8 nt!GUID_PROCESSOR_DUTY_CYCLING = <no type information>
fffff801`0ae33b10 nt!KMPnPEvt_ProcessDeviceStart_Start = <no type information>
fffff801`0ae0e758 nt!GUID_PROCESSOR_HETEROGENEOUS_POLICY = <no type information>
fffff801`0b530be0 nt!PfSnFailProcessTrace (PfSnFailProcessTrace)
fffff801`0b32864c nt!MiProcessingPageExtendComplete (MiProcessingPageExtendComplete)
fffff801`0b4b3310 nt!PspProcessOpen (PspProcessOpen)
fffff801`0b76ce48 nt!AslEnvVerifyGuestProcessorSupport (AslEnvVerifyGuestProcessorSupport)
fffff801`0ae10148 nt!HV_EVENTLOG_CORE_SCHEDULER_PROCESSOR_CONFIGURATION_WARNING = <no type information>
fffff801`0ba31ac0 nt!KiDynamicProcessorLock = <no type information>
fffff801`0b16d160 nt!xHalWheaInitProcessorGenericSection (xHalWheaInitProcessorGenericSection)
fffff801`0b52001c nt!PopUpdatePowerRequestProcessWakeCounter (PopUpdatePowerRequestProcessWakeCounter)
fffff801`0b4613a8 nt!LpcExitProcess (LpcExitProcess)
fffff801`0bb006c0 nt!HvlpVirtualProcessorMapping = <no type information>
fffff801`0b2fa6c4 nt!VslFinishStartSecureProcessor (VslFinishStartSecureProcessor)
fffff801`0b16035c nt!ExpGetSystemProcessorInformation (ExpGetSystemProcessorInformation)
fffff801`0b1f1c90 nt!KiAccumulateProcessorCycleStats (KiAccumulateProcessorCycleStats)
fffff801`0bb4a0d8 nt!ViFaultsProcessNotifyRoutineSet = <no type information>
fffff801`0b7b6c80 nt!CmpProcessorStringIntel = <no type information>
fffff801`0b08eeb0 nt!KeIsAttachedProcess (KeIsAttachedProcess)
fffff801`0b70ba7c nt!PspQuitNextJobProcess (PspQuitNextJobProcess)
fffff801`0b4c1760 nt!ObDereferenceProcessHandleTable (ObDereferenceProcessHandleTable)
fffff801`0b540688 nt!PnpProcessBusRelations (PnpProcessBusRelations)
fffff801`0b7585b0 nt!ExpNodeHotAddProcessorWorker (ExpNodeHotAddProcessorWorker)
fffff801`0b743d38 nt!EtwpCheckCurrentUserProcessAccess (EtwpCheckCurrentUserProcessAccess)
fffff801`0ae0e1d0 nt!`PcwpRegisterProcessorCounterSet'::`2'::Descriptors = <no type information>
fffff801`0b738738 nt!EtwTraceJobRemoveProcess (EtwTraceJobRemoveProcess)
fffff801`0ae0dae0 nt!PPM_ETW_PROCESSOR_CLASS_UPDATE = <no type information>
fffff801`0b1f9820 nt!ZwCreateProcess (ZwCreateProcess)
fffff801`0b3d2d0c nt!VrpProcessBufferParameter (VrpProcessBufferParameter)
fffff801`0b74f104 nt!ExQueryProcessHandleInformation (ExQueryProcessHandleInformation)
fffff801`0b1f86e0 nt!ZwOpenProcessTokenEx (ZwOpenProcessTokenEx)
fffff801`0b7a1d10 nt!KiUpdateProcessorCount (KiUpdateProcessorCount)
fffff801`0b30b414 nt!IoProcessPassiveInterrupts (IoProcessPassiveInterrupts)
fffff801`0ba49eea nt!HalpProcessedACPIPhase0 = <no type information>
fffff801`0ae1cb18 nt!GUID_PROCESSOR_CORE_PARKING_MIN_CORES = <no type information>
fffff801`0ae1cad8 nt!GUID_PROCESSOR_IDLE_DEMOTE_THRESHOLD = <no type information>
fffff801`0ba4bda0 nt!HalpInterruptProcessorHidden = <no type information>
fffff801`0b317240 nt!KiInitDynamicProcessorIpi (KiInitDynamicProcessorIpi)
fffff801`0ae1cb58 nt!GUID_PROCESSOR_PERF_HISTORY = <no type information>
fffff801`0ae1cca8 nt!GUID_PROCESSOR_RESPONSIVENESS_DISABLE_THRESHOLD = <no type information>
fffff801`0b2bb84c nt!HalpMcaProcessorBankConfigAmd (HalpMcaProcessorBankConfigAmd)
fffff801`0b2ba8e8 nt!HalpInterruptRegisterDynamicProcessor (HalpInterruptRegisterDynamicProcessor)
fffff801`0ae2e098 nt!POP_ETW_EVENT_COMPONENT_PERFORMANCE_STATE_PROCESSING = <no type information>
fffff801`0b498cb0 nt!SmProcessCreateNotification (SmProcessCreateNotification)
fffff801`0b4d4998 nt!PspSelectNodeForProcess (PspSelectNodeForProcess)
fffff801`0ae0f708 nt!Feature_Servicing_AddInitProcessProperty_logged_traits = <no type information>
fffff801`0b36c630 nt!PopProcessorIdleSelectNotification (PopProcessorIdleSelectNotification)
fffff801`0aec8400 nt!Feature_Servicing_AddInitProcessProperty__private_descriptor = <no type information>
fffff801`0b8771a0 nt!HalAllProcessorsStarted (HalAllProcessorsStarted)
fffff801`0b573638 nt!PsReferencePartitionSystemProcess (PsReferencePartitionSystemProcess)
fffff801`0b37f880 nt!PsGetProcessSilo (PsGetProcessSilo)
fffff801`0b521d90 nt!PspGetPicoProcessContext (PspGetPicoProcessContext)
fffff801`0b748000 nt!EtwpCovSampProcessEnsureContext (EtwpCovSampProcessEnsureContext)
fffff801`0ba4a5d0 nt!HalpTscProcessorFeatureFallback = <no type information>
fffff801`0b3b0130 nt!ExGetCurrentProcessorCpuUsage (ExGetCurrentProcessorCpuUsage)
fffff801`0bb4ad28 nt!pXdvExIsProcessorFeaturePresent = <no type information>
fffff801`0ae33d40 nt!KMPnPEvt_ProcessDeviceRestart_Stop = <no type information>
fffff801`0b68a770 nt!DbgkpSuspendProcess (DbgkpSuspendProcess)
fffff801`0b7d55b0 nt!VerifierFsRtlProcessFileLock (VerifierFsRtlProcessFileLock)
fffff801`0ba4bf80 nt!HalpTimerSavedProcessorCounter = <no type information>
fffff801`0b36cd30 nt!PpmPerfQueryPackageProcessorCount (PpmPerfQueryPackageProcessorCount)
fffff801`0b02e5e0 nt!PsChargeProcessNonPagedPoolQuota (PsChargeProcessNonPagedPoolQuota)
fffff801`0bafc788 nt!HvlpQueryProcessorNode = <no type information>
fffff801`0ae1ccd8 nt!GUID_PROCESSOR_ALLOW_THROTTLING = <no type information>
fffff801`0b7de5e0 nt!VerifierKeRestoreExtendedProcessorState (VerifierKeRestoreExtendedProcessorState)
fffff801`0bafc4cc nt!HvlpLogicalProcessorCount = <no type information>
fffff801`0b31e188 nt!KiSelectProcessorToPreempt (KiSelectProcessorToPreempt)
fffff801`0b3e59a0 nt!PsReleaseProcessWakeCounter (PsReleaseProcessWakeCounter)
fffff801`0b4e0f30 nt!PspSetJobIoAttributionProcessCallback (PspSetJobIoAttributionProcessCallback)
fffff801`0b1f6ee8 nt!SepSetProcessTrustLabelAceForToken (SepSetProcessTrustLabelAceForToken)
fffff801`0b6b0738 nt!PnprIsProcessorDevice (PnprIsProcessorDevice)
fffff801`0b044800 nt!PfLogForegroundProcess (PfLogForegroundProcess)
fffff801`0b42efb4 nt!PspSendProcessNotificationToJobChain (PspSendProcessNotificationToJobChain)
fffff801`0b2db820 nt!HalpLbrConfigureProcessor (HalpLbrConfigureProcessor)
fffff801`0ae1cc78 nt!GUID_PROCESSOR_THREAD_SCHEDULING_POLICY = <no type information>
fffff801`0ba48bfc nt!HalpBlkNumberProcessors = <no type information>
fffff801`0b136c04 nt!PsChargeProcessQuota (PsChargeProcessQuota)
fffff801`0b70a010 nt!NtGetCurrentProcessorNumber (NtGetCurrentProcessorNumber)
fffff801`0b53f3c4 nt!PpDevCfgProcessDevice (PpDevCfgProcessDevice)
fffff801`0ae2ef80 nt!LIVEDUMP_EVENT_SIZING_WORKFLOW_SYSTEM_QUISCED_UNCORRAL_PROCESSORS = <no type information>
fffff801`0b6f3d00 nt!PopUpdateSingleProcessHeteroPolicies (PopUpdateSingleProcessHeteroPolicies)
fffff801`0b74db74 nt!ExpSetProcessorMicrocodeUpdateInformation (ExpSetProcessorMicrocodeUpdateInformation)
fffff801`0b3ba070 nt!WheapProcessWorkQueueItem (WheapProcessWorkQueueItem)
fffff801`0b7b6c30 nt!CmpProcessorStringAmd = <no type information>
fffff801`0b5761cc nt!PopBootLoaderTraceProcess (PopBootLoaderTraceProcess)
fffff801`0b6c7014 nt!MiMapImageInSystemProcess (MiMapImageInSystemProcess)
fffff801`0b6d9f30 nt!MiReturnProcessPhysicalPages (MiReturnProcessPhysicalPages)
fffff801`0b11b630 nt!PsGetProcessJob (PsGetProcessJob)
fffff801`0b471f10 nt!RtlpIsUtf8Process (RtlpIsUtf8Process)
fffff801`0b12eba0 nt!PspSetProcessCacheIsolationCallback (PspSetProcessCacheIsolationCallback)
fffff801`0b03db80 nt!PsGetProcessSectionBaseAddress (PsGetProcessSectionBaseAddress)
fffff801`0ae2fd70 nt!GUID_DEVICE_PROCESSOR = <no type information>
fffff801`0b18d220 nt!PopTimestampTargetProcessor (PopTimestampTargetProcessor)
fffff801`0b111b90 nt!KeRemoveProcessorGroupAffinity (KeRemoveProcessorGroupAffinity)
fffff801`0b6c4d44 nt!AlpcpReferenceProcess (AlpcpReferenceProcess)
fffff801`0b323708 nt!KiRestoreProcessorState (KiRestoreProcessorState)
fffff801`0b19a580 nt!ext_ms_win_ntos_processparameters_l1_1_0_PsDestroyProcessParameterOverrides (ext_ms_win_ntos_processparameters_l1_1_0_PsDestroyProcessParameterOverrides)
fffff801`0b364ebc nt!PpmIdleLockProcessor (PpmIdleLockProcessor)
fffff801`0ba1d3a8 nt!SepRmAuditProcessCommandLine = <no type information>
fffff801`0b1fa600 nt!ZwOpenProcessToken (ZwOpenProcessToken)
fffff801`0b75fcc4 nt!WheaTerminateProcess (WheaTerminateProcess)
fffff801`0b363930 nt!PoInitiateProcessorWake (PoInitiateProcessorWake)
fffff801`0b17a620 nt!KeSetIdealProcessorThread (KeSetIdealProcessorThread)
fffff801`0ba114a0 nt!HalpInterruptProcessorsStarted = <no type information>
fffff801`0b6f2a58 nt!PopProcessSessionDisplayStateChange (PopProcessSessionDisplayStateChange)
fffff801`0b70efa0 nt!NtResumeProcess (NtResumeProcess)
fffff801`0b44d60c nt!PsGetAllocatedFullProcessImageName (PsGetAllocatedFullProcessImageName)
fffff801`0bafc5b1 nt!KeNumberProcessorsGroup0 = <no type information>
fffff801`0b6da130 nt!MiProcessKernelCfgAddressTakenImports (MiProcessKernelCfgAddressTakenImports)
fffff801`0b2f0740 nt!HvlQueryProcessorTopology (HvlQueryProcessorTopology)
fffff801`0b063118 nt!PsReturnProcessQuota (PsReturnProcessQuota)
fffff801`0b4ce678 nt!KeBuildLogicalProcessorSystemInformation (KeBuildLogicalProcessorSystemInformation)
fffff801`0b379280 nt!PpmEventTraceProcessorIdleAccounting (PpmEventTraceProcessorIdleAccounting)
fffff801`0b030440 nt!PsReturnProcessNonPagedPoolQuota (PsReturnProcessNonPagedPoolQuota)
fffff801`0ae01020 nt!ExpSystemProcessName = <no type information>
fffff801`0b3e795c nt!AlpcpSetOwnerProcessPort (AlpcpSetOwnerProcessPort)
fffff801`0b5a9718 nt!EtwInitializeProcessor (EtwInitializeProcessor)
fffff801`0b842eb0 nt!KiPublishProcessorFeatures (KiPublishProcessorFeatures)
fffff801`0bb238c0 nt!KiProcessListLock = <no type information>
fffff801`0b008a40 nt!PsGetThreadProcess (PsGetThreadProcess)
fffff801`0b3aa998 nt!EtwpCCSwapDeleteProcessor (EtwpCCSwapDeleteProcessor)
fffff801`0b7384cc nt!EtwTraceFreezeThawProcess (EtwTraceFreezeThawProcess)
fffff801`0ae30700 nt!GUID_PROCESSOR_PERF_INCREASE_HISTORY = <no type information>
fffff801`0b317fbc nt!KeEnumerateProcessorDpcs (KeEnumerateProcessorDpcs)
fffff801`0b6d9ba4 nt!MiChargeProcessPhysicalPages (MiChargeProcessPhysicalPages)
fffff801`0b72c378 nt!SmProcessDeleteRequest (SmProcessDeleteRequest)
fffff801`0ae1cd58 nt!GUID_PROCESSOR_PERF_INCREASE_THRESHOLD = <no type information>
fffff801`0b11b640 nt!KeQueryCycleTimeStatsProcessor (KeQueryCycleTimeStatsProcessor)
fffff801`0b2f4370 nt!HvlQueryAssociatedProcessors (HvlQueryAssociatedProcessors)
fffff801`0b459ab0 nt!PsGetNextProcess (PsGetNextProcess)
fffff801`0ba31cb8 nt!KiProcessOutSwapListHead = <no type information>
fffff801`0b1fbe90 nt!KiRestoreProcessorControlState (KiRestoreProcessorControlState)
fffff801`0b5766a0 nt!PsGetProcessExitStatus (PsGetProcessExitStatus)
fffff801`0b8943b0 nt!PipProcessPendingObjects (PipProcessPendingObjects)
fffff801`0bafb058 nt!KeProcessorArchitecture = <no type information>
fffff801`0b1f8400 nt!ZwQueryInformationProcess (ZwQueryInformationProcess)
fffff801`0b117300 nt!KeGetCurrentProcessorIndex (KeGetCurrentProcessorIndex)
fffff801`0b03d558 nt!PspLockProcessListExclusive (PspLockProcessListExclusive)
fffff801`0bb042e0 nt!HvlpLogicalProcessorRegions = <no type information>
fffff801`0b1cf060 nt!IoGetRequestorProcessId (IoGetRequestorProcessId)
fffff801`0b31aa64 nt!KeQueryCpuSetsProcess (KeQueryCpuSetsProcess)
fffff801`0baec120 nt!PspCreateProcessNotifyRoutine = <no type information>
fffff801`0b1001f0 nt!MmGetCurrentProcessorColor (MmGetCurrentProcessorColor)
fffff801`0bb4b488 nt!pXdvZwTerminateProcess = <no type information>
fffff801`0b2e2640 nt!HsaProcessReservedDomains (HsaProcessReservedDomains)
fffff801`0b4a6360 nt!PspCaptureProcessParameters (PspCaptureProcessParameters)
fffff801`0ba50648 nt!CmpDoIdleProcessing = <no type information>
fffff801`0b68e720 nt!FsRtlIs32BitProcess (FsRtlIs32BitProcess)
fffff801`0b2f05f0 nt!HvlQueryHypervisorProcessorNodeNumber (HvlQueryHypervisorProcessorNodeNumber)
fffff801`0b7d6cd0 nt!VerifierPsSetCreateProcessNotifyRoutine (VerifierPsSetCreateProcessNotifyRoutine)
fffff801`0b7b6804 nt!WheaInitializeProcessor (WheaInitializeProcessor)
fffff801`0b70c440 nt!PspSetRateControlProcessCallback (PspSetRateControlProcessCallback)
fffff801`0af312b8 nt!ext-ms-win-ntos-processparameters-l1-1-0_NULL_THUNK_DATA = <no type information>
fffff801`0b70b138 nt!PsQueryJobMemoryUsageByProcess (PsQueryJobMemoryUsageByProcess)
fffff801`0b3200fc nt!KiProcessDisconnectList (KiProcessDisconnectList)
fffff801`0b1f0320 nt!IopProcessBufferedIoCompletion (IopProcessBufferedIoCompletion)
fffff801`0b3ae768 nt!ProcessForExeModule (ProcessForExeModule)
fffff801`0ae2fd80 nt!PROCESSOR_NUMBER_PKEY = <no type information>
fffff801`0b39fc58 nt!MdlInvariantPreProcessing1 (MdlInvariantPreProcessing1)
fffff801`0b6a5148 nt!PiProcessResourceRequirementsChanged (PiProcessResourceRequirementsChanged)
fffff801`0b72d040 nt!SmcProcessCreateRequest (SmcProcessCreateRequest)
fffff801`0b2f0530 nt!HvlQueryActiveHypervisorProcessorCount (HvlQueryActiveHypervisorProcessorCount)
fffff801`0b165a50 nt!SepRmProcessCreationCommandLineAuditSettingsWrkr (SepRmProcessCreationCommandLineAuditSettingsWrkr)
fffff801`0b312fb0 nt!KiOpPreprocessSecureFault (KiOpPreprocessSecureFault)
fffff801`0bb4a658 nt!pXdvKeSaveExtendedProcessorState = <no type information>
fffff801`0b3bbba8 nt!WheapLogProcessTerminateEvent (WheapLogProcessTerminateEvent)
fffff801`0b0303d0 nt!MiReturnFullProcessCharges (MiReturnFullProcessCharges)
fffff801`0b2c1ae0 nt!HalpTimerMeasureProcessorsWorker (HalpTimerMeasureProcessorsWorker)
fffff801`0b1fb060 nt!ZwResumeProcess (ZwResumeProcess)
fffff801`0b36c920 nt!PopProcessorQueryPlatformStateNotification (PopProcessorQueryPlatformStateNotification)
fffff801`0b10d9e8 nt!SmIsCompressionProcess (SmIsCompressionProcess)
fffff801`0ba4c488 nt!KiLastProcessor = <no type information>
fffff801`0ae1caf8 nt!GUID_PROCESSOR_HETERO_INCREASE_TIME = <no type information>
fffff801`0b74cdf4 nt!ExpGetSystemProcessorFeaturesInformation (ExpGetSystemProcessorFeaturesInformation)
fffff801`0ae33d00 nt!KMPnPEvt_ProcessDeviceRestart_Start = <no type information>
fffff801`0b72d2a0 nt!SmcProcessDeleteRequest (SmcProcessDeleteRequest)
fffff801`0ae115e0 nt!GUID_ECP_CREATE_USER_PROCESS = <no type information>
fffff801`0b03ef60 nt!KeQueryGroupMaskProcess (KeQueryGroupMaskProcess)
fffff801`0b382bec nt!PsGetProcessEnclaveModuleInfo (PsGetProcessEnclaveModuleInfo)
fffff801`0b72d5dc nt!SmcProcessStoreCreateRequest (SmcProcessStoreCreateRequest)
fffff801`0b3a65dc nt!EtwTraceShouldYieldProcessor (EtwTraceShouldYieldProcessor)
fffff801`0b005df0 nt!xHalIommuProcessPageRequestQueue (xHalIommuProcessPageRequestQueue)
fffff801`0b7128b0 nt!RtlGetConsoleSessionForegroundProcessId (RtlGetConsoleSessionForegroundProcessId)
fffff801`0ae2f5e0 nt!LIVEDUMP_EVENT_CAPTURE_PAGES_WORKFLOW_SYSTEM_QUISCED_CAPTURE_PROCESSOR_CONTEXT = <no type information>
fffff801`0b750220 nt!ExpGenuinePolicyPostProcess (ExpGenuinePolicyPostProcess)
fffff801`0b380d20 nt!PspUnlockProcessExclusiveUnsafe (PspUnlockProcessExclusiveUnsafe)
fffff801`0b555e78 nt!MiProcessLoadConfigForDriver (MiProcessLoadConfigForDriver)
fffff801`0af31630 nt!_IMPORT_DESCRIPTOR_ext-ms-win-ntos-processparameters-l1-1-0 = <no type information>
fffff801`0b49a808 nt!IopCancelIrpsInThreadListForCurrentProcess (IopCancelIrpsInThreadListForCurrentProcess)
fffff801`0b195050 nt!PsGetProcessSignatureLevel (PsGetProcessSignatureLevel)
fffff801`0b68785c nt!DbgkpPostFakeProcessCreateMessages (DbgkpPostFakeProcessCreateMessages)
fffff801`0b137ae0 nt!MiGetOptimalProcessorWriteCount (MiGetOptimalProcessorWriteCount)
fffff801`0b19a580 nt!PspProcessorCallbackNop (PspProcessorCallbackNop)
fffff801`0badb3c8 nt!Feature_Servicing_AddInitProcessProperty__private_reporting = <no type information>
fffff801`0b3283a8 nt!MiProcessDeleteOnClose (MiProcessDeleteOnClose)
fffff801`0b45e068 nt!PopEtEnergyContextProcessStateUpdate (PopEtEnergyContextProcessStateUpdate)
fffff801`0b49a900 nt!PsGetNextProcessThread (PsGetNextProcessThread)
fffff801`0ae1caa8 nt!GUID_PROCESSOR_RESPONSIVENESS_PERF_FLOOR = <no type information>
fffff801`0ae0dfd8 nt!PPM_ETW_PROCESSOR_PROFILE_ENABLED = <no type information>
fffff801`0b7de600 nt!VerifierKeSaveExtendedProcessorState (VerifierKeSaveExtendedProcessorState)
fffff801`0b1f79e0 nt!HalProcessorIdle (HalProcessorIdle)
fffff801`0b4e0890 nt!PsSetProcessWindowStation (PsSetProcessWindowStation)
fffff801`0b436b80 nt!NtQueryInformationProcess (NtQueryInformationProcess)
fffff801`0b30a3ac nt!IopMarkPagesForProcessorData (IopMarkPagesForProcessorData)
fffff801`0ba49794 nt!HalpInterruptFirstBlockedProcessorIndex = <no type information>
fffff801`0ae1cd38 nt!GUID_PROCESSOR_PERF_BOOST_POLICY = <no type information>
fffff801`0b58d7d4 nt!EtwpIsProcessZombie (EtwpIsProcessZombie)
fffff801`0b459bdc nt!PsGetProcessDeepFreezeStats (PsGetProcessDeepFreezeStats)
fffff801`0ae1ca68 nt!GUID_PROCESSOR_PERF_LATENCY_HINT_PERF = <no type information>
fffff801`0ba4c058 nt!HalpTimerProcessorFrequencyKnown = <no type information>
fffff801`0b6f63b8 nt!PpmEventTraceProcessorPerformanceDomainRundown (PpmEventTraceProcessorPerformanceDomainRundown)
fffff801`0ae3a570 nt!GUID_PROCESSOR_IDLE_VETO = <no type information>
fffff801`0ba313e8 nt!KiNumaQueryProcessorNode = <no type information>
fffff801`0ba168b0 nt!ExpDebuggerProcessAttach = <no type information>
fffff801`0bb4b340 nt!pXdvPsSetCreateProcessNotifyRoutine = <no type information>
fffff801`0b0e2210 nt!PsIsProtectedProcessLight (PsIsProtectedProcessLight)
fffff801`0b39fa64 nt!MdlInvariantPostProcessing1 (MdlInvariantPostProcessing1)
fffff801`0ae1cd08 nt!GUID_PROCESSOR_PERF_DECREASE_POLICY = <no type information>
fffff801`0b7d7540 nt!VerifierZwTerminateProcess (VerifierZwTerminateProcess)
fffff801`0b6875bc nt!DbgkpMarkProcessPeb (DbgkpMarkProcessPeb)
fffff801`0b32b080 nt!MmEnableProcessSvm (MmEnableProcessSvm)
fffff801`0b329af4 nt!MiLogOutswappedProcessCommitReacquire (MiLogOutswappedProcessCommitReacquire)
fffff801`0ba11f5c nt!PopProcessorThrottleLogInterval = <no type information>
fffff801`0b47e870 nt!NtOpenProcessTokenEx (NtOpenProcessTokenEx)
fffff801`0b451684 nt!EtwQueryProcessTelemetryInfo (EtwQueryProcessTelemetryInfo)
fffff801`0bb4ae80 nt!pXdvFsRtlProcessFileLock = <no type information>
fffff801`0ae1ccc8 nt!GUID_PROCESSOR_DISTRIBUTE_UTILITY = <no type information>
fffff801`0b740fb4 nt!EtwpProcessPerfCtrsRundown (EtwpProcessPerfCtrsRundown)
fffff801`0b7b0748 nt!IopLiveDumpUncorralProcessors (IopLiveDumpUncorralProcessors)
fffff801`0b1858bc nt!HalpTimerRestoreProcessorCounter (HalpTimerRestoreProcessorCounter)
fffff801`0ae1ca98 nt!GUID_PROCESSOR_CORE_PARKING_INCREASE_POLICY = <no type information>
fffff801`0ae1ccf8 nt!GUID_PROCESSOR_CLASS0_FLOOR_PERF = <no type information>
fffff801`0b709760 nt!NtCreateProcess (NtCreateProcess)
fffff801`0b7d4ca0 nt!VerifierExIsProcessorFeaturePresent (VerifierExIsProcessorFeaturePresent)
fffff801`0b136c78 nt!MiSetProcessPartitionId (MiSetProcessPartitionId)
fffff801`0bafc908 nt!PopEventProcessorEnabled = <no type information>
fffff801`0bb24a00 nt!KiInitialProcess = <no type information>
fffff801`0b4dc8dc nt!PsTerminateProcess (PsTerminateProcess)
fffff801`0b0d4c54 nt!PopPepProcessEvent (PopPepProcessEvent)
fffff801`0b70a450 nt!PspAdjustKeepAliveCountProcess (PspAdjustKeepAliveCountProcess)
fffff801`0b72c3e4 nt!SmProcessListRequest (SmProcessListRequest)
fffff801`0b39b518 nt!SmpProcessQueryStoreStats (SmpProcessQueryStoreStats)
fffff801`0b008a40 nt!IoThreadToProcess (IoThreadToProcess)
fffff801`0b849440 nt!BapdpProcessBitlockerStatus (BapdpProcessBitlockerStatus)
fffff801`0b70b050 nt!PspUpdateSingleProcessAffinity (PspUpdateSingleProcessAffinity)
fffff801`0b376040 nt!PpmHeteroHgsBackupProcessorInit (PpmHeteroHgsBackupProcessorInit)
fffff801`0b70d678 nt!PsWaitForAllProcesses (PsWaitForAllProcesses)
fffff801`0b2bc230 nt!HalRegisterDynamicProcessor (HalRegisterDynamicProcessor)
fffff801`0b313870 nt!KeQueryActiveProcessorCount (KeQueryActiveProcessorCount)
fffff801`0bb2d13c nt!SepProcessAccessesToAudit = <no type information>
fffff801`0b117684 nt!KeForceDetachProcess (KeForceDetachProcess)
fffff801`0ba4bfa0 nt!HalpTimerProcessorsFrozen = <no type information>
fffff801`0b2d5700 nt!HalpInterruptOfflineProcessor (HalpInterruptOfflineProcessor)
fffff801`0b2d5f50 nt!HalpWheaInitProcessorGenericSection (HalpWheaInitProcessorGenericSection)
fffff801`0b0f6f10 nt!KeSetGroupMaskProcess (KeSetGroupMaskProcess)
fffff801`0b7b2df4 nt!KiAddProcessorToGroupSchedulingDatabase (KiAddProcessorToGroupSchedulingDatabase)
fffff801`0b5c22d4 nt!PspSetMinimalProcessName (PspSetMinimalProcessName)
fffff801`0b113b50 nt!PsGetProcessCreateTimeQuadPart (PsGetProcessCreateTimeQuadPart)
fffff801`0b364a30 nt!PpmIdleCheckProcessorStateEligibility (PpmIdleCheckProcessorStateEligibility)
fffff801`0b448ba0 nt!PnpProcessCustomDeviceEvent (PnpProcessCustomDeviceEvent)
fffff801`0b2cf7a0 nt!HalpProcessSecondarySignalList (HalpProcessSecondarySignalList)
fffff801`0b310b10 nt!KiProcessControlProtection (KiProcessControlProtection)
fffff801`0b1c4074 nt!PpmResetProcessorIdleAccounting (PpmResetProcessorIdleAccounting)
fffff801`0ae1cc68 nt!GUID_PROCESSOR_IDLE_TIME_CHECK = <no type information>
fffff801`0bb2d628 nt!ExpFullProcessInfoInit = <no type information>
fffff801`0b4e0058 nt!PspSetNoChildProcessRestrictedPolicy (PspSetNoChildProcessRestrictedPolicy)
fffff801`0b7e6050 nt!ViPnpVerifyMinorWasProcessedProperly (ViPnpVerifyMinorWasProcessedProperly)
fffff801`0b1f9f60 nt!ZwGetCurrentProcessorNumber (ZwGetCurrentProcessorNumber)
fffff801`0ae2f140 nt!PPM_ETW_HIDDEN_PROCESSOR_THERMAL_CAP_CHANGE = <no type information>
fffff801`0b2f0560 nt!HvlQueryActiveProcessors (HvlQueryActiveProcessors)
fffff801`0b6f5138 nt!PoQueryProcessEnergyTrackingState (PoQueryProcessEnergyTrackingState)
fffff801`0ae0de70 nt!PopProcessorThrottleLogIntervalRegKey = <no type information>
fffff801`0ba168a8 nt!ExpDebuggerProcessKill = <no type information>
fffff801`0b311df0 nt!KeSecureProcess (KeSecureProcess)
fffff801`0b2e306c nt!IvmdProcessRange (IvmdProcessRange)
fffff801`0ae1cb78 nt!GUID_PROCESSOR_PARKING_PERF_STATE = <no type information>
fffff801`0ae1cce8 nt!GUID_PROCESSOR_RESPONSIVENESS_EPP_CEILING = <no type information>
fffff801`0b4ad2ec nt!PsWow64GetProcessNtdllType (PsWow64GetProcessNtdllType)
fffff801`0b1ce1d0 nt!PpmCheckProcessorInit (PpmCheckProcessorInit)
fffff801`0b6ccec8 nt!MiHotPatchProcess (MiHotPatchProcess)
fffff801`0bafc4c0 nt!PsIdleProcess = <no type information>
fffff801`0b35e21c nt!MiProcessTransitionHeatBatch (MiProcessTransitionHeatBatch)
fffff801`0b181710 nt!PpProcessClearProblem (PpProcessClearProblem)
fffff801`0b6ea3c8 nt!PopThermalProcessUsermodeEvent (PopThermalProcessUsermodeEvent)
fffff801`0b47e850 nt!NtOpenProcessToken (NtOpenProcessToken)
fffff801`0b1f66e0 nt!PpmResetPerfEngineForProcessorEx (PpmResetPerfEngineForProcessorEx)
fffff801`0b485d90 nt!MmProbeAndLockProcessPages (MmProbeAndLockProcessPages)
fffff801`0b735f90 nt!WmipProcessLegacyEtwCallback (WmipProcessLegacyEtwCallback)
fffff801`0bb4a640 nt!pXdvKeRestoreExtendedProcessorState = <no type information>