CcPreparePinWrite
KeRundownQueue
IoReadPartitionTableEx
CcMdlWriteComplete
CcUnpinRepinnedBcb
IoVerifyPartitionTable
CcZeroData
KeFlushQueuedDpcs
CcSetBcbOwnerPointer
KeCancelTimer
IoWMIWriteEvent
KeRegisterBugCheckCallback
FsRtlNotifyUninitializeSync
MmResetDriverPaging
ZwMakeTemporaryObject
SeValidSecurityDescriptor
RtlCopyUnicodeString
MmAddVerifierThunks
IoDeleteDevice
IoCreateDevice
KeUnstackDetachProcess
IoCreateStreamFileObject
KeSaveFloatingPointState
KeQueryActiveProcessors
KeInitializeEvent
IoInitializeTimer
ExDeleteNPagedLookasideList
RtlIntegerToUnicodeString
ZwDeleteValueKey
ZwReadFile
FsRtlLookupLastLargeMcbEntry
IoDeleteSymbolicLink
RtlUnicodeToOemN
IoRemoveShareAccess
IoAllocateController
ProbeForWrite
PoRegisterSystemState
IoCheckShareAccess
KdEnableDebugger
ExRegisterCallback
RtlValidSecurityDescriptor
KeQueryTimeIncrement
HalExamineMBR
RtlGetVersion
RtlUnicodeStringToAnsiString
RtlGUIDFromString
IoCreateDisk
IoInvalidateDeviceState
RtlDeleteNoSplay
FsRtlCheckOplock
ExUuidCreate
RtlVerifyVersionInfo
RtlClearAllBits
KeQuerySystemTime
KeSynchronizeExecution
KeDelayExecutionThread
FsRtlFastUnlockSingle
IoIsOperationSynchronous
IoCsqRemoveIrp
CcMdlReadComplete
IoGetDriverObjectExtension
IoGetAttachedDeviceReference
PsLookupThreadByThreadId
FsRtlCheckLockForWriteAccess
KeAttachProcess
FsRtlFastCheckLockForRead
RtlFindMostSignificantBit
FsRtlMdlWriteCompleteDev
ExRaiseAccessViolation
PoStartNextPowerIrp
KeInitializeQueue
KeSetKernelStackSwapEnable
ExAllocatePool
RtlCreateAcl
SeQueryInformationToken
FsRtlDeregisterUncProvider
ZwOpenFile
CcFastMdlReadWait
DbgBreakPoint
RtlxAnsiStringToUnicodeSize
MmMapUserAddressesToPage
ExSetResourceOwnerPointer
RtlTimeToSecondsSince1970
ZwMapViewOfSection
ExNotifyCallback
CcGetFileObjectFromBcb
ExReleaseFastMutexUnsafe
IoAllocateWorkItem
ObMakeTemporaryObject
IoGetAttachedDevice
CcInitializeCacheMap
ZwFreeVirtualMemory
KeClearEvent
MmFreeMappingAddress
KeInitializeApc
MmGetSystemRoutineAddress
SeTokenIsAdmin
KeRemoveQueueDpc
IoVolumeDeviceToDosName
ZwClose
RtlUpcaseUnicodeChar
IoInitializeRemoveLockEx
CcPinRead
KeResetEvent
RtlValidSid
SeSetSecurityDescriptorInfo
KeLeaveCriticalRegion
ExFreePoolWithTag
IoGetDiskDeviceObject
FsRtlSplitLargeMcb
IoReportResourceForDetection
IoReuseIrp
CcMapData
ZwNotifyChangeKey
RtlTimeFieldsToTime
IoThreadToProcess
RtlCheckRegistryKey
IoAcquireCancelSpinLock
IoVerifyVolume
ZwQueryVolumeInformationFile
ObGetObjectSecurity
KeInsertHeadQueue
MmAllocateContiguousMemory
KeSetTimerEx
IoWMIRegistrationControl
ExAllocatePoolWithQuotaTag
ZwFsControlFile
RtlFillMemoryUlong
IoAllocateMdl
ProbeForRead
FsRtlIsHpfsDbcsLegal
IoStartNextPacket
ZwPowerInformation
MmUnmapIoSpace
SeDeleteObjectAuditAlarm
MmFreeContiguousMemory
PsGetCurrentProcess
CcPurgeCacheSection
IoDetachDevice
IoAllocateErrorLogEntry
PoSetPowerState
MmUnlockPages
KeSetBasePriorityThread
IoReleaseCancelSpinLock
KeInitializeDeviceQueue
IoSetPartitionInformation
ZwOpenSymbolicLinkObject
FsRtlGetNextFileLock
RtlDeleteElementGenericTable
MmMapLockedPagesSpecifyCache
MmAllocateMappingAddress
IoGetTopLevelIrp
MmQuerySystemSize
DbgBreakPointWithStatus
IoEnumerateDeviceObjectList
IoFreeIrp
IoAllocateAdapterChannel
MmUnlockPagableImageSection
RtlTimeToSecondsSince1980
CcSetReadAheadGranularity
ExRaiseDatatypeMisalignment
IoWritePartitionTableEx
ZwWriteFile
KeInitializeSemaphore
RtlUnicodeStringToOemString
KeRemoveDeviceQueue
IoReleaseRemoveLockEx
RtlFindClearBitsAndSet
KdDisableDebugger
IoCreateSymbolicLink
MmCanFileBeTruncated
ObOpenObjectByPointer
ExQueueWorkItem
KeRemoveByKeyDeviceQueue
FsRtlNotifyInitializeSync
ObCreateObject
RtlCopyLuid
SeFreePrivileges
KeGetCurrentThread
RtlInitString
RtlFindClearBits
IoSetHardErrorOrVerifyDevice
PsReferencePrimaryToken
RtlFindSetBits
RtlCreateSecurityDescriptor
MmIsThisAnNtAsSystem
RtlInitAnsiString
KeWaitForMultipleObjects
PsGetProcessExitTime
RtlFindLeastSignificantBit
KeInsertQueue
PsLookupProcessByProcessId
KePulseEvent
MmMapIoSpace
KeInitializeTimer
RtlInitUnicodeString
KeQueryInterruptTime
PoRequestPowerIrp
IoCreateFile
ExAllocatePoolWithQuota
SeOpenObjectAuditAlarm
PsGetVersion
IoSetDeviceToVerify
RtlInitializeGenericTable
ExVerifySuite
RtlFreeUnicodeString
CcUnpinDataForThread
KeSetTimer
IoRegisterDeviceInterface
ObQueryNameString
CcMdlWriteAbort
KeInsertDeviceQueue
SeReleaseSubjectContext
KeRevertToUserAffinityThread
RtlIsNameLegalDOS8Dot3
ZwCreateDirectoryObject
SeQueryAuthenticationIdToken
MmIsDriverVerifying
KeDeregisterBugCheckCallback
KeSetEvent
RtlEqualSid
RtlLengthSecurityDescriptor
IoGetDeviceToVerify
KeBugCheck
MmMapLockedPages
RtlFindClearRuns
IoCheckEaBufferValidity
RtlEnumerateGenericTable
KeRemoveQueue
RtlAreBitsClear
RtlLengthSid
CcPinMappedData
KeInitializeDpc
ObReleaseObjectSecurity
KeReadStateTimer
RtlOemToUnicodeN
IoCancelIrp
KeSetSystemAffinityThread
IoGetRequestorProcessId
ZwOpenSection
RtlVolumeDeviceToDosName
IoConnectInterrupt
PsImpersonateClient
IoGetDeviceAttachmentBaseRef
MmFreeNonCachedMemory
SeAssignSecurity
FsRtlIsFatDbcsLegal
PsIsThreadTerminating
IoMakeAssociatedIrp
RtlFindUnicodePrefix
IoReportDetectedDevice
MmHighestUserAddress
IoRegisterFileSystem
IoCheckQuotaBufferValidity
ZwQueryValueKey
RtlUnicodeStringToInteger
