MmAllocatePagesForMdl
ExDeletePagedLookasideList
ZwReadFile
KeSetBasePriorityThread
CcFastCopyWrite
ZwQueryValueKey
ObQueryNameString
MmFreeContiguousMemory
RtlFindClearRuns
SeFilterToken
IoSetTopLevelIrp
ExDeleteResourceLite
KeSetImportanceDpc
IoCreateStreamFileObject
PsGetCurrentThread
CcSetBcbOwnerPointer
IofCallDriver
ZwDeleteValueKey
RtlIntegerToUnicodeString
MmGetPhysicalAddress
FsRtlIsDbcsInExpression
IoReportResourceForDetection
SeCreateClientSecurity
RtlCopySid
FsRtlIsNameInExpression
KeGetCurrentThread
IoGetTopLevelIrp
IoCancelIrp
IoQueryDeviceDescription
ObReleaseObjectSecurity
IoInitializeTimer
KeEnterCriticalRegion
IoSetDeviceInterfaceState
IoGetDeviceAttachmentBaseRef
ObCreateObject
RtlEqualSid
PoCallDriver
KeBugCheck
MmMapLockedPages
MmAllocateContiguousMemory
RtlTimeToTimeFields
IoIsOperationSynchronous
IoSetHardErrorOrVerifyDevice
ZwCreateFile
SeAccessCheck
FsRtlLookupLastLargeMcbEntry
CcGetFileObjectFromBcb
RtlUnicodeToOemN
IoUpdateShareAccess
ZwDeviceIoControlFile
RtlDeleteElementGenericTable
MmSetAddressRangeModified
MmSizeOfMdl
RtlUpperChar
ZwQuerySymbolicLinkObject
RtlFindLastBackwardRunClear
PsDereferencePrimaryToken
IoGetDeviceObjectPointer
MmPageEntireDriver
KeRemoveDeviceQueue
IoCsqRemoveIrp
IoDisconnectInterrupt
ZwFlushKey
KeInitializeMutex
RtlCopyUnicodeString
RtlUpperString
ExRegisterCallback
RtlInitUnicodeString
ExReleaseFastMutexUnsafe
RtlMapGenericMask
IoGetDeviceInterfaces
IoSetPartitionInformationEx
ZwFsControlFile
RtlxOemStringToUnicodeSize
MmAddVerifierThunks
SeCaptureSubjectContext
KeSetSystemAffinityThread
IoGetStackLimits
SeSinglePrivilegeCheck
KeResetEvent
SeQueryInformationToken
PoUnregisterSystemState
KeQueryActiveProcessors
CcUnpinRepinnedBcb
IoDeleteSymbolicLink
IoStartNextPacket
ZwOpenKey
ExRaiseStatus
IoWMIWriteEvent
IoFreeWorkItem
IoGetAttachedDeviceReference
RtlVerifyVersionInfo
PsGetCurrentProcessId
ZwClose
RtlFindLongestRunClear
CcFastCopyRead
RtlFreeUnicodeString
IoStartTimer
IoGetRelatedDeviceObject
PoSetSystemState
RtlDowncaseUnicodeString
RtlInt64ToUnicodeString
KeClearEvent
RtlFindMostSignificantBit
RtlSetAllBits
RtlFreeAnsiString
PsGetCurrentThreadId
CcMdlReadComplete
IoGetBootDiskInformation
KeSetEvent
KeInitializeDpc
RtlMultiByteToUnicodeN
ZwCreateDirectoryObject
IoReadDiskSignature
IoInitializeRemoveLockEx
IoWMIRegistrationControl
ExAllocatePoolWithQuotaTag
CcUnpinDataForThread
MmAllocateNonCachedMemory
RtlCompareString
IoRemoveShareAccess
KeCancelTimer
IoCheckShareAccess
IoAllocateErrorLogEntry
KeSaveFloatingPointState
MmIsThisAnNtAsSystem
KeSetTimer
ExGetPreviousMode
RtlGetNextRange
RtlValidSid
IoCreateStreamFileObjectLite
CcPreparePinWrite
CcCopyWrite
MmUnsecureVirtualMemory
CcSetDirtyPinnedData
RtlSecondsSince1970ToTime
ZwFreeVirtualMemory
CcZeroData
PoStartNextPowerIrp
RtlAddAccessAllowedAceEx
KeInsertByKeyDeviceQueue
KeDetachProcess
CcRemapBcb
KeQueryInterruptTime
ExAllocatePoolWithQuota
IoGetAttachedDevice
RtlSubAuthoritySid
SeLockSubjectContext
ExVerifySuite
MmAdvanceMdl
KefAcquireSpinLockAtDpcLevel
KeRemoveQueue
IoAllocateAdapterChannel
RtlUnicodeStringToInteger
MmFreeNonCachedMemory
RtlGUIDFromString
KeReadStateMutex
IoAllocateMdl
PsGetProcessExitTime
RtlNtStatusToDosError
MmForceSectionClosed
RtlCharToInteger
KeWaitForSingleObject
SeUnlockSubjectContext
IoReadPartitionTable
ZwWriteFile
IoSetSystemPartition
IoSetStartIoAttributes
ExSetResourceOwnerPointer
KeAttachProcess
RtlExtendedIntegerMultiply
IoRegisterDeviceInterface
MmAllocateMappingAddress
IoSetDeviceToVerify
KeInitializeSemaphore
RtlFindSetBits
MmHighestUserAddress
RtlPrefixUnicodeString
CcSetFileSizes
PsLookupProcessByProcessId
RtlFindLeastSignificantBit
FsRtlCheckLockForReadAccess
SeDeleteObjectAuditAlarm
CcMdlWriteComplete
RtlEnumerateGenericTable
RtlEqualString
ExReinitializeResourceLite
ExSystemTimeToLocalTime
MmFreeMappingAddress
PsChargeProcessPoolQuota
RtlCompareUnicodeString
HalExamineMBR
RtlValidSecurityDescriptor
KeReleaseSemaphore
SeTokenIsAdmin
ZwCreateSection
DbgPrompt
ObInsertObject
IoGetDeviceInterfaceAlias
KeQuerySystemTime
IoGetRequestorProcessId
IoReleaseVpbSpinLock
RtlInsertUnicodePrefix
IoAllocateController
RtlInitializeSid
RtlLengthSid
IoEnumerateDeviceObjectList
SeOpenObjectAuditAlarm
RtlDeleteNoSplay
ObOpenObjectByPointer
MmGetSystemRoutineAddress
DbgBreakPoint
PoRequestPowerIrp
SePrivilegeCheck
IoIsSystemThread
RtlInitAnsiString
FsRtlNotifyInitializeSync
ExAllocatePoolWithTag
KeInitializeQueue
IoWriteErrorLogEntry
MmBuildMdlForNonPagedPool
ZwOpenSymbolicLinkObject
SeImpersonateClientEx
MmProbeAndLockProcessPages
KeSetTargetProcessorDpc
ExLocalTimeToSystemTime
ZwSetSecurityObject
SeDeassignSecurity
RtlHashUnicodeString
RtlFindUnicodePrefix
KeSetPriorityThread
VerSetConditionMask
ZwOpenSection
IoSetThreadHardErrorMode
IoRaiseHardError
CcRepinBcb
RtlInitializeGenericTable
IoGetDeviceProperty
ProbeForWrite
KeInitializeTimerEx
IoConnectInterrupt
FsRtlFastCheckLockForRead
RtlFreeOemString
MmIsVerifierEnabled
ZwNotifyChangeKey
IofCompleteRequest
ObfDereferenceObject
IoCreateFile
CcUnpinData
MmIsDriverVerifying
CcIsThereDirtyData
KeSetKernelStackSwapEnable
SeTokenIsRestricted
KeRestoreFloatingPointState
PsRevertToSelf
SeReleaseSubjectContext
RtlRemoveUnicodePrefix
IoInvalidateDeviceState
IoFreeErrorLogEntry
FsRtlCheckLockForWriteAccess
RtlAnsiStringToUnicodeString
SeFreePrivileges
PsSetLoadImageNotifyRoutine
RtlAddAccessAllowedAce