MmSetAddressRangeModified
KeRundownQueue
RtlSubAuthoritySid
ZwSetSecurityObject
PoSetSystemState
IoWMIWriteEvent
RtlxUnicodeStringToAnsiSize
SeImpersonateClientEx
PsGetVersion
KeRemoveQueue
IoAllocateIrp
PsImpersonateClient
RtlCompareUnicodeString
RtlVolumeDeviceToDosName
RtlCopyLuid
RtlAppendUnicodeToString
IoCreateFile
VerSetConditionMask
MmFlushImageSection
RtlAddAccessAllowedAce
RtlEqualString
RtlVerifyVersionInfo
IoGetDiskDeviceObject
ExFreePoolWithTag
KeSetTimerEx
IoStartTimer
IoGetAttachedDeviceReference
MmProbeAndLockPages
CcRemapBcb
MmUnmapReservedMapping
PsIsThreadTerminating
MmMapLockedPagesSpecifyCache
RtlValidSecurityDescriptor
ExAcquireFastMutexUnsafe
ZwCreateDirectoryObject
RtlUnicodeToMultiByteN
CcPurgeCacheSection
IoConnectInterrupt
RtlFindSetBits
KeSetTimer
RtlFindClearRuns
MmAllocateMappingAddress
ExGetPreviousMode
KeReadStateSemaphore
KeInitializeTimer
IoGetDeviceInterfaces
FsRtlNotifyInitializeSync
KeRemoveByKeyDeviceQueue
FsRtlIsTotalDeviceFailure
ExRaiseDatatypeMisalignment
IoReportDetectedDevice
FsRtlFastCheckLockForRead
IoQueryDeviceDescription
KeSetEvent
ZwCreateSection
RtlCreateAcl
IoSetShareAccess
FsRtlIsDbcsInExpression
IoFreeController
KeQuerySystemTime
KeBugCheckEx
KeReadStateTimer
RtlCopyUnicodeString
ZwFlushKey
IoBuildSynchronousFsdRequest
RtlSecondsSince1970ToTime
RtlEqualSid
CcRepinBcb
MmUnmapLockedPages
SeFilterToken
ZwDeleteValueKey
IoFreeIrp
RtlUpcaseUnicodeString
SeQueryInformationToken
KeBugCheck
MmIsThisAnNtAsSystem
KeInitializeTimerEx
MmForceSectionClosed
RtlAreBitsSet
IoReuseIrp
IoGetDeviceAttachmentBaseRef
MmGetSystemRoutineAddress
IoCreateDisk
KeSetImportanceDpc
IoEnumerateDeviceObjectList
RtlSplay
CcSetReadAheadGranularity
KefAcquireSpinLockAtDpcLevel
RtlCreateUnicodeString
IoVerifyPartitionTable
IoGetCurrentProcess
CcCopyWrite
IoWritePartitionTableEx
KeSetKernelStackSwapEnable
PsCreateSystemThread
ZwMakeTemporaryObject
ExFreePool
RtlInitAnsiString
KeInsertQueueDpc
RtlFreeAnsiString
IoGetRequestorProcessId
CcPinRead
RtlCharToInteger
ZwQueryKey
CcFastCopyRead
RtlSetDaclSecurityDescriptor
IoGetDeviceProperty
KeRevertToUserAffinityThread
RtlFillMemoryUlong
RtlFindMostSignificantBit
RtlLengthRequiredSid
IofCallDriver
KeRegisterBugCheckCallback
IoCheckEaBufferValidity
PsGetProcessExitTime
RtlUnicodeStringToOemString
KeStackAttachProcess
SeUnlockSubjectContext
ExRaiseAccessViolation
ZwOpenKey
MmUnlockPages
RtlSetAllBits
RtlCopyString
RtlCompareMemory
MmGetPhysicalAddress
IoSetDeviceToVerify
ExInitializeResourceLite
ExReinitializeResourceLite
PsGetProcessId
RtlGetNextRange
MmIsAddressValid
MmAllocateNonCachedMemory
CcPreparePinWrite
RtlNtStatusToDosError
KeGetCurrentThread
IoUnregisterFileSystem
IoReleaseVpbSpinLock
IoGetStackLimits
ObfDereferenceObject
IoGetDriverObjectExtension
RtlTimeToSecondsSince1980
PoStartNextPowerIrp
KeLeaveCriticalRegion
CcCopyRead
HalExamineMBR
RtlStringFromGUID
PoRegisterSystemState
FsRtlIsHpfsDbcsLegal
ZwDeviceIoControlFile
RtlGetCallersAddress
SeAppendPrivileges
KeSetSystemAffinityThread
WmiQueryTraceInformation
CcSetBcbOwnerPointer
KeInitializeDpc
IoFreeErrorLogEntry
IoCreateSynchronizationEvent
PsChargeProcessPoolQuota
MmAllocatePagesForMdl
CcDeferWrite
FsRtlMdlWriteCompleteDev
MmSizeOfMdl
RtlSecondsSince1980ToTime
CcFastCopyWrite
MmUnsecureVirtualMemory
MmUnmapIoSpace
RtlIsNameLegalDOS8Dot3
IoStartNextPacket
KeCancelTimer
DbgBreakPoint
SeLockSubjectContext
ZwOpenSymbolicLinkObject
KeInitializeEvent
KeWaitForSingleObject
CcUnpinDataForThread
ExUuidCreate
CcUnpinRepinnedBcb
ZwMapViewOfSection
SeReleaseSubjectContext
IoFreeMdl
SeSetSecurityDescriptorInfo
KeInsertDeviceQueue
MmMapLockedPages
RtlInitializeSid
ObfReferenceObject
RtlUnicodeToOemN
IoRequestDeviceEject
RtlOemStringToUnicodeString
FsRtlNotifyUninitializeSync
MmFreePagesFromMdl
KeWaitForMultipleObjects
ExDeletePagedLookasideList
SeDeleteObjectAuditAlarm
FsRtlGetNextFileLock
IoThreadToProcess
KeInitializeMutex
RtlCopySid
IoReleaseRemoveLockAndWaitEx
KeDetachProcess
IoGetDeviceInterfaceAlias
IoGetRelatedDeviceObject
RtlxAnsiStringToUnicodeSize
IoAcquireVpbSpinLock
ObInsertObject
RtlFindLeastSignificantBit
ZwUnloadDriver
RtlFindClearBits
RtlFindLongestRunClear
IoReadPartitionTable
PoRequestPowerIrp
PsGetCurrentProcess
IoAllocateAdapterChannel
KeQueryActiveProcessors
KeSetBasePriorityThread
IoQueueWorkItem
IoGetBootDiskInformation
RtlFindClearBitsAndSet
RtlFindNextForwardRunClear
IoMakeAssociatedIrp
ExCreateCallback
MmMapIoSpace
ZwQuerySymbolicLinkObject
ExDeleteNPagedLookasideList
IoGetTopLevelIrp
MmFreeContiguousMemory
ObGetObjectSecurity
RtlInt64ToUnicodeString
IoInvalidateDeviceRelations
ZwFreeVirtualMemory
IoGetDmaAdapter
ZwQueryInformationFile
RtlCreateRegistryKey
IoAllocateMdl
RtlUnicodeStringToInteger
PsDereferencePrimaryToken
FsRtlLookupLastLargeMcbEntry
MmQuerySystemSize
RtlEnumerateGenericTable
MmSecureVirtualMemory
IoQueryFileDosDeviceName
RtlFreeUnicodeString
MmUnlockPagableImageSection
PsGetCurrentProcessId
PsLookupProcessByProcessId
ZwAllocateVirtualMemory
CcInitializeCacheMap
DbgPrompt
ExRegisterCallback
RtlUnicodeStringToAnsiString
RtlExtendedIntegerMultiply
FsRtlCheckLockForReadAccess
IoCreateSymbolicLink
RtlAnsiStringToUnicodeString
KeQueryInterruptTime
RtlFreeOemString
KeInitializeSemaphore
SeValidSecurityDescriptor
RtlOemToUnicodeN
MmLockPagableSectionByHandle
IoWriteErrorLogEntry
ProbeForWrite
