ZwAllocateVirtualMemory
KeDelayExecutionThread
ZwQuerySystemInformation
RtlEqualUnicodeString
PsLookupProcessThreadByCid
KeInitializeApc
ObfReferenceObject
KeInsertQueueApc
ZwConnectPort
ObReferenceObjectByHandle
PsCreateSystemThread
LpcRequestPort
LpcRequestWaitReplyPort
KeGetCurrentThread
ZwFreeVirtualMemory
ZwQueryInformationProcess
ZwOpenFile
ZwSetSecurityObject
PsGetProcessPeb
IoGetCurrentProcess
ProbeForRead
PsGetVersion
qsort
ZwCreateSection
ZwMapViewOfSection
ZwUnmapViewOfSection
RtlIpv4AddressToStringA
swprintf
RtlInitUnicodeString
ZwCreateFile
ZwSetInformationFile
ZwQueryDirectoryFile
RtlTimeToTimeFields
RtlUnicodeStringToInteger
RtlTimeToSecondsSince1970
KeQueryInterruptTime
ZwDeviceIoControlFile
ZwCreateSymbolicLinkObject
ExUuidCreate
ZwWriteFile
RtlSecondsSince1970ToTime
ZwQueryInformationFile
ZwReadFile
RtlRandom
KeEnterCriticalRegion
ExAcquireFastMutexUnsafe
ExReleaseFastMutexUnsafe
KeLeaveCriticalRegion
KeQuerySystemTime
KeInsertQueue
KeRemoveQueue
KeRundownQueue
IoFreeIrp
KeInitializeQueue
IoBuildDeviceIoControlRequest
ZwClose
KeInitializeTimer
KeInitializeDpc
KeSetTimer
KeCancelTimer
ExQueueWorkItem
ZwQueryValueKey
RtlIpv4StringToAddressW
ZwOpenKey
ZwEnumerateKey
ZwQueryVolumeInformationFile
IoGetRelatedDeviceObject
ExAcquireResourceExclusiveLite
ExReleaseResourceLite
ExAcquireResourceSharedLite
IoQueryFileInformation
ExInitializeResourceLite
CcInitializeCacheMap
MmMapLockedPagesSpecifyCache
CcSetFileSizes
CcFlushCache
KeInitializeEvent
CcUninitializeCacheMap
KeWaitForSingleObject
ExDeleteResourceLite
IofCompleteRequest
IoSetInformation
CcCopyWrite
FsRtlCopyRead
IoCreateDevice
ZwOpenSection
MmAllocatePagesForMdl
MmUnmapLockedPages
MmFreePagesFromMdl
RtlHashUnicodeString
KeSetEvent
RtlPrefixUnicodeString
IoAllocateIrp
ExAllocatePoolWithTag
ZwDeleteKey
PoStartNextPowerIrp
PoCallDriver
ZwFlushVirtualMemory
ZwQueryKey
IoQueueWorkItem
ZwSetSystemInformation
IoCreateDriver
ObMakeTemporaryObject
ZwDeleteFile
ObReferenceObjectByName
IoDriverObjectType
IoEnumerateDeviceObjectList
wcsrchr
IoAllocateWorkItem
KeSetTimerEx
ExFreePoolWithTag
ExAllocatePool
IofCallDriver
ObfDereferenceObject
_allmul
memset
_aulldiv
_except_handler3
memcpy
