ExReleaseResourceLite
ExAllocatePoolWithTag
memcpy
ZwClose
ZwDuplicateObject
ExFreePoolWithTag
RtlEqualUnicodeString
IoFileObjectType
SeQueryInformationToken
SeReleaseSubjectContext
SeCaptureSubjectContext
KeReleaseGuardedMutex
KeAcquireGuardedMutex
IoWMIWriteEvent
MmGetSystemRoutineAddress
RtlInitUnicodeString
RtlCompareMemory
IoWMIRegistrationControl
IofCompleteRequest
IofCallDriver
KeLeaveCriticalRegion
KeEnterCriticalRegion
RtlSetDaclSecurityDescriptor
RtlAddAccessAllowedAce
RtlCreateAcl
RtlSetGroupSecurityDescriptor
RtlSetOwnerSecurityDescriptor
RtlCreateSecurityDescriptor
RtlLengthSid
SeAccessCheck
DbgPrint
ExDeleteResourceLite
KeBugCheckEx
ExDeleteNPagedLookasideList
ExDeletePagedLookasideList
IoRegisterShutdownNotification
KeInitializeGuardedMutex
ExInitializeNPagedLookasideList
ExInitializePagedLookasideList
ExFreePool
SeExports
ExInitializeResourceLite
InterlockedPopEntrySList
InterlockedPushEntrySList
KeWaitForSingleObject
KeQuerySystemTime
SeTokenIsAdmin
RtlAppendUnicodeStringToString
ExIsResourceAcquiredExclusiveLite
ExAcquireResourceExclusiveLite
RtlCompareUnicodeString
IoGetTopLevelIrp
KeSetEvent
RtlCopyUnicodeString
KeReadStateEvent
IoCancelIrp
IoFreeMdl
KeAreAllApcsDisabled
MmBuildMdlForNonPagedPool
IoAllocateMdl
MmMapLockedPagesSpecifyCache
ExIsResourceAcquiredSharedLite
FsRtlDoesNameContainWildCards
RtlUpcaseUnicodeChar
IoFreeIrp
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
IoAllocateIrp
FsRtlNotifyInitializeSync
FsRtlNotifyUninitializeSync
FsRtlNotifyFilterChangeDirectory
FsRtlNotifyFullReportChange
FsRtlNotifyCleanup
FsRtlNotifyCleanupAll
RtlDeleteElementGenericTableAvl
RtlEnumerateGenericTableAvl
RtlIsGenericTableEmptyAvl
RtlInitializeGenericTableAvl
RtlInsertElementGenericTableAvl
RtlLookupElementGenericTableAvl
memmove
ZwQueryValueKey
RtlUnicodeStringToInteger
ZwSetValueKey
ZwDeleteValueKey
ZwCreateKey
RtlIntegerToUnicodeString
ZwQueryLicenseValue
RtlPrefixUnicodeString
ZwDeleteKey
ExInitializeRundownProtection
ExAcquireRundownProtection
ExReInitializeRundownProtection
ExWaitForRundownProtectionRelease
KeResetEvent
ExReleaseRundownProtection
FsRtlFreeExtraCreateParameter
FsRtlRemoveExtraCreateParameter
FsRtlInsertExtraCreateParameter
FsRtlAllocateExtraCreateParameter
FsRtlFreeExtraCreateParameterList
IoSetIrpExtraCreateParameter
FsRtlAllocateExtraCreateParameterList
IoGetIrpExtraCreateParameter
FsRtlFindExtraCreateParameter
RtlFreeUnicodeString
RtlEqualSid
RtlDuplicateUnicodeString
_aulldiv
KeTickCount
RtlUnwind
KeInitializeEvent
FsRtlCancellableWaitForSingleObject
DbgPrintEx
ExEventObjectType
ObReferenceObjectByHandle
KeInitializeQueue
KeRundownQueue
KeRemoveQueue
MmSystemRangeStart
KeInsertQueue
ZwAllocateVirtualMemory
KeGetCurrentThread
MmUnmapLockedPages
ZwFreeVirtualMemory
RtlAnsiCharToUnicodeChar
RtlValidRelativeSecurityDescriptor
RtlValidSid
ExGetPreviousMode
IoGetRequestorProcess
IoGetRequestorProcessId
MmUserProbeAddress
ProbeForRead
ProbeForWrite
CcPinRead
CcSetDirtyPinnedData
CcUnpinData
RtlTestBit
RtlInitializeBitMap
RtlSetBit
RtlStringFromGUID
ExUuidCreate
KeDelayExecutionThread
ZwQueryVolumeInformationFile
KeBugCheck
ZwFlushBuffersFile
IoCreateFile
ZwSetInformationFile
ZwQueryInformationFile
ZwQueryDirectoryFile
ZwSetEaFile
ZwQueryEaFile
IoRetrievePriorityInfo
IoSetIoPriorityHint
IoSetCompletionRoutineEx
MmProbeAndLockPages
MmUnlockPages
SeCreateClientSecurity
PsDereferencePrimaryToken
PsDereferenceImpersonationToken
SeImpersonateClientEx
PsRevertToSelf
ZwCreateFile
KeSetKernelStackSwapEnable
KeExpandKernelStackAndCalloutEx
IoGetCurrentProcess
IoSetTopLevelIrp
IoGetStackLimits
IoGetRelatedDeviceObject
RtlAbsoluteToSelfRelativeSD
RtlLengthRequiredSid
RtlInitializeSid
RtlSubAuthoritySid
SeTokenType
SePrivilegeCheck
ZwWaitForSingleObject
PsCreateSystemThread
KeWaitForMultipleObjects
RtlEqualString
RtlAssert
RtlValidateUnicodeString
ObfDereferenceObject
memset
ExAcquireResourceSharedLite
ExReleaseFastMutexUnsafe
KeAreApcsDisabled
ExAcquireFastMutexUnsafe
ZwOpenKey
