ExFreePoolWithTag
SeDeassignSecurity
SeTokenIsAdmin
FsRtlCheckOplock
RtlAddAccessAllowedAceEx
KeWaitForMultipleObjects
ExAllocatePoolWithTag
MmUnlockPages
RtlCompareUnicodeString
KeClearEvent
RtlFindUnicodePrefix
RtlGetCallersAddress
RtlFindClearRuns
IoSetStartIoAttributes
FsRtlFreeFileLock
MmLockPagableSectionByHandle
IoSetPartitionInformation
PsReferencePrimaryToken
RtlRandom
CcGetFileObjectFromBcb
CcPurgeCacheSection
ZwCreateEvent
CcFlushCache
IoGetDeviceInterfaceAlias
IoGetDriverObjectExtension
ZwFsControlFile
ExReleaseFastMutexUnsafe
RtlWriteRegistryValue
KeRevertToUserAffinityThread
KeInitializeApc
RtlUnicodeStringToInteger
KeInitializeEvent
RtlIsNameLegalDOS8Dot3
IoReleaseRemoveLockEx
IoCreateDevice
ZwMakeTemporaryObject
SeImpersonateClientEx
FsRtlAllocateFileLock
RtlSetAllBits
IoRequestDeviceEject
MmSecureVirtualMemory
ZwFlushKey
FsRtlFastCheckLockForRead
SeQueryInformationToken
ZwCreateDirectoryObject
IoQueryFileDosDeviceName
ZwQueryObject
MmBuildMdlForNonPagedPool
CcPinRead
MmMapUserAddressesToPage
IoAcquireRemoveLockEx
MmUnsecureVirtualMemory
MmAllocateContiguousMemory
PsGetCurrentThread
RtlAppendStringToString
ExRaiseAccessViolation
RtlInitializeBitMap
IoCreateStreamFileObjectLite
SeTokenIsRestricted
MmGetPhysicalAddress
ZwLoadDriver
RtlCreateSecurityDescriptor
PoRequestPowerIrp
RtlCopySid
RtlInsertUnicodePrefix
RtlTimeFieldsToTime
RtlInitializeSid
CcSetBcbOwnerPointer
SeValidSecurityDescriptor
IoAllocateIrp
IoDetachDevice
RtlAreBitsSet
IoCreateFile
RtlQueryRegistryValues
IoAllocateController
IoReadPartitionTableEx
ZwMapViewOfSection
IoSetThreadHardErrorMode
IoGetDiskDeviceObject
RtlStringFromGUID
KeRemoveQueue
RtlSetDaclSecurityDescriptor
CcRemapBcb
MmAllocateNonCachedMemory
ExAcquireResourceSharedLite
IoAllocateAdapterChannel
ExReinitializeResourceLite
IoAllocateErrorLogEntry
IoWMIRegistrationControl
PsGetProcessId
CcMdlRead
ExGetPreviousMode
ExDeleteResourceLite
PsImpersonateClient
KeGetCurrentThread
SeReleaseSubjectContext
ExLocalTimeToSystemTime
IoReleaseVpbSpinLock
MmAllocateMappingAddress
KeWaitForSingleObject
RtlAnsiCharToUnicodeChar
KePulseEvent
IoGetDeviceToVerify
KeSetBasePriorityThread
IoVerifyPartitionTable
FsRtlCheckLockForReadAccess
MmIsVerifierEnabled
RtlPrefixUnicodeString
IoRegisterDeviceInterface
KeInsertByKeyDeviceQueue
SeSinglePrivilegeCheck
RtlCopyUnicodeString
KeRemoveByKeyDeviceQueue
RtlxAnsiStringToUnicodeSize
FsRtlIsHpfsDbcsLegal
IoSetShareAccess
RtlMultiByteToUnicodeN
SeLockSubjectContext
FsRtlFastUnlockSingle
RtlSplay
ZwEnumerateKey
DbgPrompt
ExFreePool
CcSetFileSizes
RtlUpperChar
CcFastCopyRead
MmMapLockedPagesSpecifyCache
CcUnpinDataForThread
FsRtlGetNextFileLock
IoStartTimer
ExInitializeResourceLite
PsRevertToSelf
RtlUpcaseUnicodeChar
CcUninitializeCacheMap
IoVolumeDeviceToDosName
KeReadStateTimer
RtlInitializeUnicodePrefix
RtlInitAnsiString
KeRundownQueue
IoIsWdmVersionAvailable
RtlGetNextRange
SeDeleteObjectAuditAlarm
ExUuidCreate
ObReleaseObjectSecurity
PsCreateSystemThread
ObCreateObject
ExDeleteNPagedLookasideList
MmHighestUserAddress
ZwEnumerateValueKey
IoCreateSynchronizationEvent
IoSetSystemPartition
PsGetCurrentProcessId
PsDereferencePrimaryToken
ZwNotifyChangeKey
FsRtlSplitLargeMcb
VerSetConditionMask
PsGetProcessExitTime
RtlFillMemoryUlong
MmAddVerifierThunks
CcMdlReadComplete
PsSetLoadImageNotifyRoutine
RtlAnsiStringToUnicodeString
CcPinMappedData
KeInsertHeadQueue
ObQueryNameString
MmProbeAndLockPages
ZwQueryInformationFile
IoFreeMdl
KeQuerySystemTime
IoCheckShareAccess
IoWritePartitionTableEx
ZwOpenFile
IoGetLowerDeviceObject
IoCreateDisk
ZwDeleteValueKey
CcCopyRead
MmFreeContiguousMemory
KeFlushQueuedDpcs
FsRtlIsDbcsInExpression
KeInitializeDeviceQueue
IoWMIWriteEvent
MmSizeOfMdl
RtlDeleteElementGenericTable
KeInitializeDpc
MmUnmapReservedMapping
IoAllocateMdl
IoRegisterFileSystem
RtlDowncaseUnicodeString
MmFreePagesFromMdl
ZwDeleteKey
ZwQueryValueKey
RtlFindClearBits
RtlInt64ToUnicodeString
ObMakeTemporaryObject
KeUnstackDetachProcess
KeRemoveDeviceQueue
KeRegisterBugCheckCallback
IoCheckEaBufferValidity
PsLookupProcessByProcessId
MmUnmapLockedPages
PsIsThreadTerminating
RtlAppendUnicodeToString
RtlInitializeGenericTable
RtlFreeAnsiString
MmAllocatePagesForMdl
PoRegisterSystemState
MmCanFileBeTruncated
CcCanIWrite
KeRemoveEntryDeviceQueue
ZwSetSecurityObject
RtlDeleteRegistryValue
IoGetCurrentProcess
RtlSecondsSince1980ToTime
ExIsProcessorFeaturePresent
IoStartPacket
RtlVerifyVersionInfo
IoGetTopLevelIrp
PsGetCurrentThreadId
ExAllocatePoolWithQuota
MmIsThisAnNtAsSystem
ExSystemTimeToLocalTime
RtlLengthSecurityDescriptor
ExVerifySuite
ExUnregisterCallback
KeInitializeMutex
MmForceSectionClosed
ExAllocatePool
KeDelayExecutionThread
KeEnterCriticalRegion
ZwQuerySymbolicLinkObject
IoReadDiskSignature
RtlCreateRegistryKey
CcDeferWrite
IoCheckQuotaBufferValidity
KeBugCheck
RtlUnicodeStringToAnsiString
MmMapIoSpace
PsGetThreadProcessId
ObOpenObjectByPointer
ZwQueryVolumeInformationFile
KeQueryInterruptTime
MmUnlockPagableImageSection
RtlFreeOemString
IoGetStackLimits
RtlUpcaseUnicodeString
RtlVolumeDeviceToDosName
CcFastMdlReadWait
FsRtlCheckLockForWriteAccess
MmLockPagableDataSection
KeInsertDeviceQueue
IoSetHardErrorOrVerifyDevice
IoAcquireVpbSpinLock
IoRaiseHardError
KeSetEvent
PsGetCurrentProcess
KeBugCheckEx
KeDetachProcess
ExSetResourceOwnerPointer
CcRepinBcb
IoDeleteController