IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

MmUserProbeAddress

MmLockPagableDataSection

RtlUnwind

RtlAnsiCharToUnicodeChar

PsGetCurrentProcessId

MmProbeAndLockPages

ExAcquireRundownProtectionCacheAwareEx

ExReleaseRundownProtectionCacheAwareEx

ExReInitializeRundownProtectionCacheAware

ExWaitForRundownProtectionReleaseCacheAware

RtlInitializeBitMap

RtlSetBits

ExFreeCacheAwareRundownProtection

ExAllocateCacheAwareRundownProtection

RtlSetBit

ExInitializeLookasideListEx

ExDeleteLookasideListEx

InterlockedExchange

SeReportSecurityEventWithSubCategory

ZwOpenKey

ZwQueryValueKey

MmSizeOfMdl

MmUnmapLockedPages

ObLogSecurityDescriptor

SeCaptureSubjectContextEx

SeLockSubjectContext

KeBugCheckEx

KeTickCount

EtwWriteTransfer

IoGetFileObjectGenericMapping

SeAccessCheck

SeUnlockSubjectContext

SeReleaseSubjectContext

RtlCreateSecurityDescriptor

SeExports

RtlLengthSid

RtlCreateAcl

RtlAddAccessAllowedAceEx

RtlSetDaclSecurityDescriptor

ExInterlockedFlushSList

KeInitializeSemaphore

ExAllocatePoolWithTagPriority

KeExpandKernelStackAndCalloutEx

VerSetConditionMask

RtlVerifyVersionInfo

KeInitializeTimerEx

ExGetCurrentProcessorCounts

KeSetTimerEx

KeQueryInterruptTime

KeCancelTimer

KeFlushQueuedDpcs

RtlExpandHashTable

RtlContractHashTable

RtlCreateHashTable

RtlDeleteHashTable

KeWaitForMultipleObjects

KeQueryGroupAffinity

KeInsertQueueDpc

KeGetProcessorNumberFromIndex

KeInitializeDpc

KeSetTargetProcessorDpcEx

KeSetImportanceDpc

MmUnlockPages

IoFreeWorkItem

IoQueueWorkItem

MmBuildMdlForNonPagedPool

RtlInitializeGenericTableAvl

KeQuerySystemTime

RtlEnumerateEntryHashTable

RtlInitEnumerationHashTable

RtlEndEnumerationHashTable

RtlLookupElementGenericTableFullAvl

ObDereferenceSecurityDescriptor

RtlRemoveEntryHashTable

RtlInsertEntryHashTable

RtlGetNextEntryHashTable

RtlLookupEntryHashTable

IoAllocateErrorLogEntry

IoWriteErrorLogEntry

ExNotifyCallback

KeIsExecutingDpc

PsGetProcessSessionId

InterlockedPushEntrySList

InterlockedPopEntrySList

IoAllocateMdl

IoBuildPartialMdl

IoFreeMdl

MmMapLockedPagesSpecifyCache

ZwQuerySystemInformation

ObReferenceSecurityDescriptor

KeReleaseSemaphore

RtlInitWeakEnumerationHashTable

RtlWeaklyEnumerateEntryHashTable

RtlEndWeakEnumerationHashTable

KeQueryMaximumProcessorCountEx

KefReleaseSpinLockFromDpcLevel

KefAcquireSpinLockAtDpcLevel

KeGetCurrentProcessorNumberEx

RtlGetVersion

KeTestSpinLock

KeAcquireInStackQueuedSpinLockAtDpcLevel

KeReleaseInStackQueuedSpinLockFromDpcLevel

PsGetProcessId

ExCreateCallback

EtwWrite

IoBuildDeviceIoControlRequest

IoGetDeviceObjectPointer

ObfReferenceObject

PsGetCurrentProcess

PsIsSystemThread

PsGetThreadProcess

KeGetCurrentThread

KeInitializeEvent

KeSetEvent

RtlIpv4AddressToStringExW

RtlIpv6AddressToStringExW

RtlTimeToTimeFields

RtlEnumerateGenericTableLikeADirectory

KeInitializeTimer

KeSetCoalescableTimer

KeLeaveCriticalRegion

KeEnterCriticalRegion

ExfTryToWakePushLock

ExfAcquirePushLockExclusive

RtlValidSid

ZwEnumerateKey

RtlQueryRegistryValues

RtlIpv6AddressToStringW

RtlIpv4AddressToStringW

SeSetAuditParameter

RtlConvertSidToUnicodeString

RtlFreeUnicodeString

EtwUnregister

EtwRegister

IoGetCurrentProcess

KeInitializeMutex

IoCreateDevice

IoDeleteDevice

KeReadStateEvent

KeWaitForSingleObject

KeQueryActiveProcessorCountEx

KeReleaseMutex

ObfDereferenceObject

ZwOpenEvent

ObReferenceObjectByHandle

ZwClose

IofCallDriver

IofCompleteRequest

IoWMIRegistrationControl

RtlCompareMemory

RtlInitUnicodeString

MmGetSystemRoutineAddress

memset

memcpy

ExAllocatePoolWithTag

ExDeleteNPagedLookasideList

ExInitializeNPagedLookasideList

RtlPrefixUnicodeString

RtlCopySid

RtlEqualUnicodeString

RtlUnicodeStringToInteger

RtlCompareUnicodeString

RtlLengthRequiredSid

RtlInitializeSid

RtlAddAccessAllowedAce

ObSetSecurityObjectByPointer

PsSetCreateProcessNotifyRoutineEx

SeLocateProcessImageName

ZwCreateFile

RtlDowncaseUnicodeString

ZwOpenProcess

KeStackAttachProcess

ZwDuplicateToken

KeUnstackDetachProcess

IoDeleteSymbolicLink

IoCreateSymbolicLink

KeQueryTimeIncrement

PsReferenceImpersonationToken

PsDereferencePrimaryToken

KeDelayExecutionThread

PsDereferenceImpersonationToken

ObCloseHandle

RtlSubAuthorityCountSid

RtlSubAuthoritySid

SeQueryInformationToken

ObOpenObjectByPointer

ZwQueryInformationToken

ExGetPreviousMode

ExUuidCreate

RtlEqualSid

ExAllocatePoolWithQuotaTag

RtlIpv4StringToAddressW

RtlIpv6StringToAddressW

IoAllocateWorkItem

RtlFindSetBits

RtlAreBitsClear

RtlFindClearBits

RtlClearBits

ExDeleteResourceLite

ExReleaseResourceLite

ExAcquireResourceExclusiveLite

ExAcquireResourceSharedLite

RtlClearBit

RtlClearAllBits

SeOpenObjectAuditAlarmForNonObObject

ExInitializeResourceLite

RtlTestBit

KeBugCheck

RtlIntegerToUnicodeString

IoWMIWriteEvent

PsReferencePrimaryToken

ExFreePoolWithTag

NetioFreeNetBufferListNetBufferMdlAndDataPool

NetioFreeMdl

RtlIndicateTimerWheelEntryTimerStart

RtlResumeTimerWheel

RtlIsTimerWheelSuspended

NetioAllocateNetBufferListNetBufferMdlAndDataPool

NetioAllocateNetBufferMdlAndDataPool

FsbFree

NetioFreeNetBufferList

NetioExtendNetBuffer

NetioFreeNetBuffer

NetioDereferenceNetBufferList

NetioAllocateAndReferenceNetBufferListNetBufferMdlAndData

NetioAllocateNetBufferMdlAndData

NetioDereferenceNetBufferListChain

FsbAllocateAtDpcLevel

NetioShutdownWorkQueue

RtlInitializeTimerWheelEntry

RtlComputeToeplitzHash

RtlSuspendTimerWheel

RtlGetNextExpirationTimerWheelTick

RtlCleanupTimerWheelEntry

RtlReturnTimerWheelEntry

RtlGetNextExpiredTimerWheelEntry

RtlUpdateCurrentTimerWheelTick

RtlDeleteElementGenericTableBasicAvl

NetioInitializeWorkQueue

RtlInsertElementGenericTableBasicAvl

FsbAllocate

NetioAdvanceToLocationInNetBuffer

RtlCopyMdlToMdlIndirect

NetioRegSyncDefaultChangeHandler

NetioRegSyncInterface

RtlCleanupTimerWheel

RtlInitializeTimerWheel

RtlEndTimerWheelEnumeration

RtlEnumerateNextTimerWheelEntry

RtlInitializeTimerWheelEnumeration

NetioFreeOpaquePerProcessorContext

NetioAllocateOpaquePerProcessorContext

NetioSqmWriteEvent

NsiSetAllParameters

TlDefaultRequestQueryDispatchEndpoint

TlDefaultRequestMessage

TlDefaultRequestQueryDispatch

RtlCopyMdlToBuffer

NetioFreeNetBufferAndNetBufferList

NetioAllocateAndReferenceNetBufferAndNetBufferList

RtlCopyBufferToMdl

NmrWaitForClientDeregisterComplete

NmrDeregisterClient

NmrClientDetachProviderComplete

NmrClientAttachProvider

NmrRegisterClient

NmrProviderDetachClientComplete

NmrWaitForProviderDeregisterComplete

NmrDeregisterProvider

NmrRegisterProvider

NetioRetreatNetBufferList

NetioAllocateAndReferenceCopyNetBufferListEx

NetioCompleteCopyNetBufferListChain

NetioFreeCopyNetBufferList

NetioInitializeNetBufferListContext

TlDefaultRequestCancel

TlDefaultRequestConnect

TlDefaultRequestListen

NetioReferenceNetBufferList

TlDefaultRequestIoControl

NetioFreeNetBufferMdlAndDataPool

RtlCleanupToeplitzHash

RtlInitializeToeplitzHash

NsiAllocateAndGetTable

NsiFreeTable

WfpStartStreamShim

WfpStartMacShim

NetioAllocateMdl

NetioInsertWorkQueue

WfpStreamInspectRemoteDisconnect

WfpStreamInspectReceive

WfpStreamInspectDisconnect

WfpStreamInspectSend

WfpStreamEndpointCleanupBegin

WfpStopStreamShim

FsbCreatePool

FsbDestroyPool

NetioStackBlockProcessorAddHandler

NetioFreeStackBlock

NetioInitializeNetBufferListAndFirstNetBufferContext

NsiReferenceDefaultObjectSecurity

NsiDeregisterChangeNotification

NsiRegisterChangeNotification

NetioCompleteNetBufferListChain

NetioAllocateAndReferenceFragmentNetBufferList

SetWfpDeviceObject

IoctlKfdBatchUpdate

IoctlKfdDeleteIndex

IoctlKfdAddIndex

IoctlKfdAddCache

IoctlKfdResetState

IoctlKfdQueryLayerStatistics

IoctlKfdAbortTransaction

IoctlKfdCommitTransaction

IoctlKfdDeleteCache

NetioGetStatsForQoSFlow

NetioDeleteQoSFlow

NetioCreateQoSFlow

NetioAssociateQoSFlowWithNbl

KfdIsActiveCallout

KfdAleUpdateEndpointContextStatus

WfpNblInfoAlloc

WfpPacketTagCountIncrement

WfpNblInfoDestroyIfUnused

HfCreateFactory

HfDestroyFactory

NetioAllocateNetBuffer

NetioAllocateAndReferenceNetBufferList

PtGetNumNodes

PtCreateTable

PtDestroyTable

NsiSetParameter

PtDeleteEntry

PtInsertEntry

PtGetExactMatch

PtEnumOverTable

PtGetLongestMatch

PtGetNextShorterMatch

RtlCompute37Hash

PtGetKey

PtSetData

PtGetData

NetioCompleteNetBufferAndNetBufferListChain

NetioQueryNetBufferListTrafficClass

RtlCopyMdlToMdl

NetioAllocateAndReferenceVacantNetBufferList

NetioAllocateAndReferenceCloneNetBufferListEx

NetioExpandNetBuffer

NetioUpdateNetBufferListContext

NetioAllocateAndReferenceCloneNetBufferList

NetioFreeCloneNetBufferList

NsiResetPersistentSetting

NsiSetObjectSecurity

NsiGetParameter

KfdCheckAcceptBypass

KfdCheckAndCacheAcceptBypass

KfdCheckConnectBypass

KfdCheckAndCacheConnectBypass

KfdGetLayerActionFromEnumTemplate

WfpScavangeLeastRecentlyUsedList

KfdAleRemoveFlowContextTable

WfpSetBucketsToEmptyLru

WfpExpireEntryLru

WfpInsertEntryLru

WfpDeleteEntryLru

KfdAleInitializeFlowTable

FeReleaseCalloutContextList

MatchCondition

KfdEnumLayer

KfdDerefFilterContext

KfdGetNextFilter

KfdFreeEnumHandle

KfdToggleFilterActivation

WfpStreamIsFilterPresent

NsiGetAllParameters

WfpInitializeLeastRecentlyUsedList

KfdAleNotifyFlowDeletion

FwppStreamDeleteDpcQueue

WfpUninitializeLeastRecentlyUsedList

KfdAleUninitializeFlowHandles

KfdAleInitializeFlowHandles

KfdGetOffloadEpoch

KfdIsLsoOffloadPossibleV6

KfdIsLsoOffloadPossibleV4

KfdIsV6InTransportFastEmpty

KfdIsV4InTransportFastEmpty

KfdIsV6OutTransportFastEmpty

KfdIsV4OutTransportFastEmpty

WfpRefreshEntryLru

NetioAdvanceNetBufferList

KfdCheckClassifyNeededAndUpdateEpoch

KfdAleAcquireFlowHandleForFlow

KfdClassify

KfdAleReleaseFlowHandleForFlow

KfdGetLayerCacheEpoch

KfdIsLayerEmpty

KfdDeregisterLayerChangeCallback

FwppStreamInject

FwppStreamContinue

FwppCopyStreamDataToBuffer

FwppAdvanceStreamDataPastOffset

FwppTruncateStreamDataAfterOffset

WfpNblInfoDispatchTableSet

KfdRegisterLayerChangeCallback

WfpNblInfoDispatchTableClear

FeGetWfpGlobalPtr

WfpNblInfoGet

NetioUnRegisterProcessorAddCallback

NetioUnInitializeNetBufferListLibrary

NetioInitializeNetBufferListLibrary

NetioRegisterProcessorAddCallback

NetioSqmInitialize

RtlInvokeStartRoutines

RtlInvokeStopRoutines

NetioSqmTerminate

NsiGetParameterEx

NetioAllocateAndInitializeStackBlock

NdisInvalidateOffload

NdisUpdateOffload

NdisTerminateOffload

NdisInitiateOffload

NdisQueryOffloadState

NdisDirectOidRequest

NdisInitializeReadWriteLock

NdisGetSessionToCompartmentMappingEpochAndZero

NdisReleaseReadWriteLock

NdisAcquireReadWriteLock

NdisOffloadTcpSend

NdisOffloadTcpForward

NdisOffloadTcpDisconnect

NdisOffloadTcpReceive

NdisOffloadTcpReceiveReturn

NdisGetRssProcessorInformation

NdisCompleteNetPnPEvent

NdisCloseAdapterEx

NdisOpenAdapterEx

NdisOidRequest

NdisDeregisterProtocolDriver

NdisCancelDirectOidRequest

NdisCancelSendNetBufferLists

NdisSendNetBufferLists

NdisRegisterProtocolDriver

NdisReturnNetBufferLists

NdisSetOptionalHandlers

NdisGetDataBuffer

NetDmaRegisterClient

NetDmaDeregisterClient

NetDmaAllocateChannel

NetDmaFreeChannel

NdisGetProcessorInformation

NdisFreeNetBufferList

NetDmaNullTransfer

NetDmaIsDmaCopyComplete

NdisGetSessionCompartmentId

NdisAdjustNetBufferCurrentMdl

NdisGetThreadObjectCompartmentId

NdisAdvanceNetBufferDataStart

NdisRetreatNetBufferDataStart

FltGetFileNameInformationUnsafe

FltReleaseFileNameInformation

FwpsCalloutUnregisterByKey0

FwpmBfeStateSubscribeChangesWithoutDevice0

FwpmBfeStateUnsubscribeChanges0

FwpsClassifyOptionSet0

FwpmEngineClose0

FwpmEngineOpen0

FwpmSecureSocketDeleteByKeyAsync0

FwpmSecureSocketAddAsync0

FwpmEventProviderIsNetEventTypeEnabled0

FwpsRequestEndpointDeleteNotification0

FwpsForceReclassifyLayer0

FwpsCancelEndpointDeleteNotification0

FwppDispatchDevCtl0

IPsecDriverExpire

IPsecDriverInitiateAcquire

IPsecDriverProcessClearTextResponse

FwpsReassembleForwardFragmentGroup0

FwpsFreeNetBufferList0

FwpmEventProviderFireNetEvent0

FwpsQueryPacketInjectionState0

FwpsInjectionHandleDestroy0

FwpsInjectionHandleCreate0

FwpsAllocateCloneNetBufferList0

FwpsConstructIpHeaderForTransportPacket0

FwpsInjectTransportSendAsync1

FwpsFreeCloneNetBufferList0

FwpmEventProviderCreate0

FwpsTcpIpDispatchTableSet0

FwpsTcpIpDispatchTableClear0

FwpmEventProviderDestroy0

FwppNetBufferListEventNotify

FwpsCalloutRegisterWithoutDevice0

KeGetCurrentIrql

KfLowerIrql

KeAcquireInStackQueuedSpinLock

KeReleaseInStackQueuedSpinLock

KeQueryPerformanceCounter

KfReleaseSpinLock

KfAcquireSpinLock

KfRaiseIrql

ExReleaseFastMutex

ExAcquireFastMutex

KeRaiseIrqlToDpcLevel

FreeContextBuffer

InitializeSecurityContextW

AcceptSecurityContext

QuerySecurityContextToken

DeleteSecurityContext

FreeCredentialsHandle

AcquireCredentialsHandleW

BCryptHashData

BCryptGetProperty

BCryptSetProperty

BCryptOpenAlgorithmProvider

BCryptCloseAlgorithmProvider

BCryptCreateHash

BCryptDestroyHash

BCryptDecrypt

BCryptEncrypt

BCryptGenerateSymmetricKey

BCryptDestroyKey

BCryptFinishHash

BCryptGenRandom

NdrMesTypeDecode2

MesHandleFree

I_RpcExceptionFilter

MesDecodeBufferHandleCreate

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ