ZwWriteFile
IoSetThreadHardErrorMode
ExSetTimerResolution
IoVerifyVolume
RtlAnsiCharToUnicodeChar
ZwPowerInformation
RtlVolumeDeviceToDosName
IoCsqRemoveIrp
KeInsertDeviceQueue
RtlMapGenericMask
RtlPrefixUnicodeString
CcFastCopyWrite
IoCreateStreamFileObject
IoReadPartitionTableEx
RtlCreateUnicodeString
IoInitializeTimer
KeAttachProcess
IoCreateDisk
KeQueryActiveProcessors
IoQueryDeviceDescription
CcMapData
FsRtlIsTotalDeviceFailure
ExUuidCreate
RtlCompareString
KeUnstackDetachProcess
FsRtlFreeFileLock
IoGetAttachedDeviceReference
RtlValidSecurityDescriptor
ExAllocatePoolWithQuotaTag
KeReadStateTimer
CcZeroData
IoBuildPartialMdl
MmIsThisAnNtAsSystem
RtlInitializeGenericTable
PsReferencePrimaryToken
KeDetachProcess
ExFreePool
MmFreePagesFromMdl
FsRtlNotifyInitializeSync
KeRemoveByKeyDeviceQueue
RtlTimeToSecondsSince1970
CcMdlReadComplete
ExReleaseResourceLite
IoSetSystemPartition
IoWMIWriteEvent
RtlUnicodeStringToAnsiString
IoQueueWorkItem
CcCanIWrite
KdDisableDebugger
VerSetConditionMask
IoReportDetectedDevice
IoWMIRegistrationControl
ObfDereferenceObject
MmUnsecureVirtualMemory
IoRequestDeviceEject
MmBuildMdlForNonPagedPool
KeReadStateEvent
IoVolumeDeviceToDosName
KeInitializeSemaphore
CcMdlRead
IoCreateSynchronizationEvent
IoInvalidateDeviceRelations
KeInsertHeadQueue
RtlValidSid
RtlxAnsiStringToUnicodeSize
MmMapLockedPages
IoSetHardErrorOrVerifyDevice
IoCheckShareAccess
KeGetCurrentThread
MmFreeContiguousMemory
PsRevertToSelf
KeCancelTimer
RtlAreBitsClear
ZwReadFile
CcUnpinData
KeRegisterBugCheckCallback
RtlIsNameLegalDOS8Dot3
FsRtlIsDbcsInExpression
ExRegisterCallback
MmAllocateNonCachedMemory
KeReadStateSemaphore
RtlFindLeastSignificantBit
ZwQueryObject
RtlCreateRegistryKey
RtlGUIDFromString
ZwQuerySymbolicLinkObject
ZwDeleteKey
WmiQueryTraceInformation
CcDeferWrite
FsRtlIsHpfsDbcsLegal
IoSetPartitionInformation
KeRevertToUserAffinityThread
ExDeleteNPagedLookasideList
MmQuerySystemSize
FsRtlNotifyUninitializeSync
PoUnregisterSystemState
ZwAllocateVirtualMemory
IoGetDmaAdapter
SeCaptureSubjectContext
KeSetSystemAffinityThread
RtlGenerate8dot3Name
ZwOpenProcess
IoFreeIrp
KeBugCheck
IoGetRequestorProcess
IoCreateFile
FsRtlSplitLargeMcb
MmUnlockPagableImageSection
KeClearEvent
RtlSecondsSince1970ToTime
RtlEqualString
RtlInsertUnicodePrefix
RtlAnsiStringToUnicodeString
MmMapLockedPagesSpecifyCache
IoDisconnectInterrupt
CcMdlWriteComplete
IoFreeMdl
RtlAppendStringToString
IoFreeController
MmAllocateMappingAddress
RtlEqualUnicodeString
ObReferenceObjectByPointer
ExDeletePagedLookasideList
MmMapIoSpace
RtlGetNextRange
RtlCopySid
SeSinglePrivilegeCheck
KeInitializeTimer
RtlUpcaseUnicodeToOemN
FsRtlIsNameInExpression
KeInsertQueue
DbgBreakPoint
RtlUnicodeToMultiByteN
ZwClose
IoAcquireRemoveLockEx
MmSizeOfMdl
IoCheckEaBufferValidity
ZwMakeTemporaryObject
ExAllocatePoolWithTag
ExQueueWorkItem
KeLeaveCriticalRegion
IoReleaseRemoveLockEx
CcSetDirtyPinnedData
KeRemoveEntryDeviceQueue
MmAllocatePagesForMdl
MmFreeMappingAddress
ZwQueryValueKey
PsImpersonateClient
RtlSetBits
ZwEnumerateValueKey
ExSystemTimeToLocalTime
KeReleaseMutex
IoDeleteSymbolicLink
PsGetCurrentThread
ExRaiseStatus
ObOpenObjectByPointer
RtlCompareMemory
KeRemoveQueue
ObInsertObject
PsGetThreadProcessId
MmGetSystemRoutineAddress
ExGetSharedWaiterCount
KeInitializeMutex
KeSetPriorityThread
MmProbeAndLockProcessPages
IoInitializeIrp
CcSetBcbOwnerPointer
KeSetEvent
IoStartPacket
FsRtlGetNextFileLock
IoSetPartitionInformationEx
CcFastCopyRead
KeRestoreFloatingPointState
FsRtlMdlWriteCompleteDev
KeInitializeEvent
MmAllocateContiguousMemory
ExGetPreviousMode
IoConnectInterrupt
RtlWriteRegistryValue
MmLockPagableDataSection
RtlUpcaseUnicodeString
ZwCreateSection
IoRegisterDeviceInterface
IoGetDeviceProperty
ZwUnloadDriver
RtlTimeToTimeFields
ZwQueryVolumeInformationFile
RtlDelete
PsGetVersion
IoCreateDevice
IoCreateStreamFileObjectLite
KeSaveFloatingPointState
RtlDeleteRegistryValue
IoCreateNotificationEvent
ExAcquireFastMutexUnsafe
SeValidSecurityDescriptor
RtlAreBitsSet
CcUnpinRepinnedBcb
SeQueryAuthenticationIdToken
IoReadPartitionTable
IoReportResourceForDetection
PsLookupThreadByThreadId
CcPinMappedData
SeImpersonateClientEx
CcPreparePinWrite
RtlMultiByteToUnicodeN
RtlLengthRequiredSid
ZwLoadDriver
RtlFindMostSignificantBit
IoInitializeRemoveLockEx
SeReleaseSubjectContext
RtlFreeAnsiString
PsDereferencePrimaryToken
IoAllocateController
FsRtlCheckLockForReadAccess
RtlCreateSecurityDescriptor
CcSetReadAheadGranularity
RtlSplay
ObQueryNameString
RtlAddAccessAllowedAce
RtlInitAnsiString
RtlUpcaseUnicodeChar
RtlxOemStringToUnicodeSize
RtlCopyLuid
IoThreadToProcess
ZwCreateKey
KeSetImportanceDpc
HalExamineMBR
IoWritePartitionTableEx
MmIsVerifierEnabled
IoStartNextPacket
ZwCreateEvent
ZwCreateFile
SeFilterToken
CcPurgeCacheSection
ExFreePoolWithTag
RtlExtendedIntegerMultiply
CcFlushCache
IoUnregisterFileSystem
CcRemapBcb
KeSetTimerEx
ObReleaseObjectSecurity
CcSetFileSizes
RtlIntegerToUnicodeString
RtlOemStringToUnicodeString
IoIsSystemThread
RtlUnicodeStringToOemString
IoOpenDeviceRegistryKey
DbgBreakPointWithStatus
IoQueryFileDosDeviceName
KeResetEvent
KeInitializeDpc
RtlUpperString
IoGetDeviceToVerify
MmSetAddressRangeModified
RtlLengthSecurityDescriptor
RtlRemoveUnicodePrefix
RtlEnumerateGenericTable
