IofCallDriver
MmBuildMdlForNonPagedPool
IoAllocateMdl
ExAllocatePoolWithTag
IoBuildDeviceIoControlRequest
memset
ExQueueWorkItem
memcpy
ObfDereferenceObject
ObReferenceObjectByHandle
MmIsAddressValid
NtBuildNumber
RtlFreeUnicodeString
ExAllocatePool
MmGetSystemRoutineAddress
RtlInitUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
ZwSetSecurityObject
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAce
RtlCreateAcl
RtlLengthSid
SeExports
ZwClose
wcsrchr
ZwSetValueKey
ZwDeleteValueKey
ZwCreateKey
ZwQueryValueKey
ZwOpenKey
wcsncpy
_wcsnicmp
ZwReadFile
ZwQueryInformationFile
ZwCreateFile
ZwWriteFile
PsGetCurrentProcessId
ZwDuplicateObject
ZwOpenProcess
_strnicmp
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
IoGetRelatedDeviceObject
RtlAppendUnicodeToString
ZwDeleteKey
ZwEnumerateKey
ZwQueryKey
RtlAppendUnicodeStringToString
strrchr
PsGetCurrentThreadPreviousMode
ProbeForWrite
KeUnstackDetachProcess
ProbeForRead
KeStackAttachProcess
PsProcessType
_except_handler3
RtlCopyUnicodeString
IoFreeIrp
KeSetEvent
KeWaitForSingleObject
KeGetCurrentThread
SeCreateAccessState
IoGetFileObjectGenericMapping
KeInitializeEvent
IoAllocateIrp
ObCreateObject
IoFileObjectType
IoCreateFile
IoFreeWorkItem
PsSetLoadImageNotifyRoutine
IoDeleteSymbolicLink
IoUnregisterShutdownNotification
IofCompleteRequest
IoCreateSymbolicLink
IoDeleteDevice
IoStopTimer
CmUnRegisterCallback
ZwAllocateVirtualMemory
ZwUnmapViewOfSection
IoQueueWorkItem
IoAllocateWorkItem
IoCreateDevice
IoRegisterBootDriverReinitialization
IoCreateDriver
InterlockedPushEntrySList
ZwLoadDriver
strstr
RtlUnicodeStringToInteger
_snprintf
PsTerminateSystemThread
KeCancelTimer
ExfInterlockedRemoveHeadList
KeWaitForMultipleObjects
KeSetTimerEx
KeInitializeTimerEx
KeSetPriorityThread
KeServiceDescriptorTable
rand
PsCreateSystemThread
MmUnmapLockedPages
KeSetAffinityThread
KeNumberProcessors
MmMapLockedPages
ZwMapViewOfSection
ZwCreateSection
ZwOpenFile
ZwQuerySystemInformation
strncpy
ZwQueryInformationProcess
ObOpenObjectByPointer
ObReferenceObjectByPointer
ZwQueryDirectoryFile
InterlockedPopEntrySList
ExfInterlockedInsertHeadList
ExfInterlockedInsertTailList
ExInitializeNPagedLookasideList
ExDeleteNPagedLookasideList
PsGetCurrentThreadId
IoStartTimer
IoInitializeTimer
ObQueryNameString
CmRegisterCallback
PsLookupProcessByProcessId
PsSetCreateProcessNotifyRoutine
MmUnlockPages
MmProbeAndLockPages
IoCancelIrp
IoAttachDevice
IoDetachDevice
IoSetCompletionRoutineEx
KeTickCount
KeQueryTimeIncrement
_alldiv
_allmul
ZwQuerySymbolicLinkObject
ZwOpenSymbolicLinkObject
RtlEqualUnicodeString
strchr
strncmp
MmSectionObjectType
srand
IoFreeMdl
ExFreePoolWithTag
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
MmMapLockedPagesSpecifyCache
_strlwr
IoGetCurrentProcess
IoRegisterShutdownNotification
PsGetProcessImageFileName
