IofCallDriver
memset
KeDelayExecutionThread
KeWaitForSingleObject
KeInitializeEvent
ZwClose
ZwUnmapViewOfSection
ZwMapViewOfSection
ZwCreateSection
ZwQueryInformationFile
ZwWriteFile
RtlRandom
KeQuerySystemTime
ZwSetInformationFile
ExAllocatePoolWithTag
ZwCreateFile
memcpy
KeReleaseMutex
RtlCopyUnicodeString
ZwDeleteFile
RtlCompareUnicodeString
ZwQueryDirectoryFile
RtlInitUnicodeString
ZwOpenFile
KeInitializeMutex
ZwFlushKey
PsSetCreateProcessNotifyRoutine
IoCreateSymbolicLink
IoCreateDevice
ObfDereferenceObject
IoDeleteDevice
IoDeleteSymbolicLink
ObReferenceObjectByHandle
ExEventObjectType
PsGetCurrentProcessId
KeGetCurrentThread
_purecall
PsTerminateSystemThread
memmove
PsThreadType
PsCreateSystemThread
ZwOpenKey
PsGetCurrentThreadId
KeSetTimerEx
IoQueueWorkItem
IoFreeWorkItem
KeInitializeDpc
KeInitializeTimerEx
IoAllocateWorkItem
KeTickCount
KeBugCheckEx
RtlUnwind
strchr
KeResetEvent
PsGetThreadId
PsLookupThreadByThreadId
_alldiv
DbgPrint
IofCompleteRequest
MmProbeAndLockPages
MmUnmapLockedPages
IoAllocateMdl
IoBuildDeviceIoControlRequest
IoFreeMdl
IoGetDeviceObjectPointer
IoGetRelatedDeviceObject
ObReferenceObjectByPointer
_except_handler3
ObOpenObjectByPointer
ZwFreeVirtualMemory
ZwAllocateVirtualMemory
IoFileObjectType
MmUserProbeAddress
ExGetPreviousMode
RtlGetVersion
MmGetSystemRoutineAddress
_stricmp
ZwQuerySystemInformation
KeUnstackDetachProcess
RtlAppendUnicodeStringToString
PsGetProcessPeb
KeStackAttachProcess
PsLookupProcessByProcessId
RtlUnicodeToMultiByteN
ZwQueryValueKey
ZwDeleteValueKey
ZwSetValueKey
ZwCreateKey
ObQueryNameString
ZwReadFile
ObfReferenceObject
IoGetBaseFileSystemDeviceObject
ZwQuerySymbolicLinkObject
ZwOpenSymbolicLinkObject
KeServiceDescriptorTable
ExUuidCreate
strrchr
_strnicmp
CmUnRegisterCallback
CmRegisterCallback
IoReleaseVpbSpinLock
IoAttachDeviceToDeviceStackSafe
IoAcquireVpbSpinLock
IoEnumerateDeviceObjectList
IoUnregisterFsRegistrationChange
IoDetachDevice
IoCancelFileOpen
ProbeForWrite
_vsnwprintf
ZwDeleteKey
ZwLoadDriver
RtlAppendUnicodeToString
KeSetEvent
MmIsAddressValid
ExFreePoolWithTag
PsGetThreadTeb
MmUnlockPages
KeInsertQueueApc
KeInitializeApc
