RtlPrefixUnicodeString
memcpy
ExFreePoolWithTag
IoCreateSymbolicLink
IoDeleteSymbolicLink
IofCallDriver
IoBuildDeviceIoControlRequest
KeInitializeEvent
IoGetAttachedDeviceReference
ObfDereferenceObject
KeWaitForSingleObject
IoGetDeviceObjectPointer
KeReleaseMutex
RtlEqualUnicodeString
RtlInitUnicodeString
RtlCompareMemory
RtlAppendUnicodeStringToString
RtlCopyUnicodeString
RtlStringFromGUID
ExUuidCreate
RtlWriteRegistryValue
KeSetEvent
IoFreeWorkItem
ZwClose
ZwSetInformationFile
ZwWriteFile
ZwReadFile
IoSetThreadHardErrorMode
ZwCreateFile
RtlCreateSystemVolumeInformationFolder
IoQueueWorkItem
IoAllocateWorkItem
ZwQueryInformationFile
KeReleaseSemaphore
ObIsDosDeviceLocallyMapped
RtlQueryRegistryValues
memset
IoFreeIrp
ExAllocatePoolWithTag
ZwOpenFile
RtlDeleteRegistryValue
IoReportTargetDeviceChangeAsynchronous
RtlCompareUnicodeString
IoUnregisterPlugPlayNotification
IofCompleteRequest
ZwQuerySymbolicLinkObject
ZwOpenSymbolicLinkObject
ExQueueWorkItem
ZwWaitForSingleObject
ZwOpenEvent
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
IoDeleteDevice
IoCancelIrp
KeResetEvent
IoUnregisterShutdownNotification
RtlUpcaseUnicodeChar
ZwQueryDirectoryFile
IoRegisterPlugPlayNotification
memmove
ObQueryNameString
IoFileObjectType
ZwQueryVolumeInformationFile
IoSetCompletionRoutineEx
IoInitializeIrp
IoAllocateIrp
IoSetSystemPartition
PsSetThreadHardErrorsAreDisabled
PsGetThreadHardErrorsAreDisabled
IoRegisterShutdownNotification
KeInitializeSemaphore
KeInitializeMutex
IoCreateDevice
RtlCreateRegistryKey
KeTickCount
KeBugCheckEx
ObReferenceObjectByHandle
ZwFsControlFile
KeGetCurrentThread
