KeReleaseSemaphore
CcZeroData
KeSetTimerEx
PoStartNextPowerIrp
MmFreePagesFromMdl
RtlFreeUnicodeString
ObCreateObject
FsRtlCheckLockForWriteAccess
IoReadPartitionTableEx
ObGetObjectSecurity
PsRevertToSelf
RtlFreeAnsiString
ExReleaseFastMutexUnsafe
RtlSplay
RtlUnicodeStringToOemString
RtlxUnicodeStringToAnsiSize
RtlAppendUnicodeToString
RtlDelete
KeInitializeSpinLock
SeAccessCheck
IoVolumeDeviceToDosName
ZwMapViewOfSection
KeSynchronizeExecution
PsIsThreadTerminating
RtlStringFromGUID
IoCheckQuotaBufferValidity
RtlInitializeBitMap
PsGetCurrentThreadId
ExSetResourceOwnerPointer
ExDeleteResourceLite
IoAllocateIrp
FsRtlFreeFileLock
IoIsSystemThread
IoRequestDeviceEject
PsSetLoadImageNotifyRoutine
KeInsertHeadQueue
ObInsertObject
ZwCreateEvent
PoRequestPowerIrp
PsLookupThreadByThreadId
IoAllocateWorkItem
ZwFreeVirtualMemory
IoInitializeRemoveLockEx
IoSetThreadHardErrorMode
RtlRandom
SeCaptureSubjectContext
IoGetLowerDeviceObject
ZwOpenFile
IoIsOperationSynchronous
MmPageEntireDriver
KeQuerySystemTime
KeSetKernelStackSwapEnable
ExAcquireResourceSharedLite
IoFreeController
IoWMIWriteEvent
KefAcquireSpinLockAtDpcLevel
KeQueryTimeIncrement
SeQueryInformationToken
RtlCompareUnicodeString
IoStopTimer
IoAllocateAdapterChannel
KeInitializeMutex
MmFlushImageSection
MmQuerySystemSize
IoRemoveShareAccess
RtlUnicodeToMultiByteN
PsReturnPoolQuota
IoCreateNotificationEvent
SeSinglePrivilegeCheck
IoCheckEaBufferValidity
RtlSubAuthoritySid
MmSizeOfMdl
ZwCreateFile
ZwNotifyChangeKey
ZwAllocateVirtualMemory
RtlFindMostSignificantBit
IoThreadToProcess
IoQueryFileInformation
MmHighestUserAddress
RtlDeleteElementGenericTable
FsRtlIsDbcsInExpression
IoGetStackLimits
RtlIntegerToUnicodeString
IoGetDeviceAttachmentBaseRef
SeFilterToken
IoVerifyPartitionTable
KeRundownQueue
ExInitializeResourceLite
RtlDowncaseUnicodeString
IoAllocateMdl
ExCreateCallback
ExFreePool
ExSetTimerResolution
RtlWriteRegistryValue
ObReferenceObjectByHandle
CcUnpinData
KeRemoveEntryDeviceQueue
PsGetProcessId
IoReadPartitionTable
IoInvalidateDeviceState
IoIsWdmVersionAvailable
IoGetAttachedDevice
IoSetPartitionInformationEx
ZwSetSecurityObject
IoGetRequestorProcessId
CcFastCopyRead
MmAllocateContiguousMemory
KeInsertQueueDpc
ZwOpenProcess
RtlCreateSecurityDescriptor
ZwQuerySymbolicLinkObject
KeInitializeTimer
MmAllocateNonCachedMemory
RtlNtStatusToDosError
KeEnterCriticalRegion
SeCreateClientSecurity
IoBuildSynchronousFsdRequest
KeInitializeApc
KeReleaseMutex
IoCreateDisk
SeUnlockSubjectContext
CcRemapBcb
IofCallDriver
KeSetTimer
MmBuildMdlForNonPagedPool
IoReportResourceForDetection
CcIsThereDirtyData
IoQueueWorkItem
ObReferenceObjectByPointer
KeFlushQueuedDpcs
PsGetVersion
CcRepinBcb
IoCsqRemoveIrp
RtlOemStringToUnicodeString
CcPinMappedData
RtlAddAccessAllowedAceEx
IoDisconnectInterrupt
ZwDeleteValueKey
MmProbeAndLockProcessPages
IoGetDiskDeviceObject
PsGetCurrentProcess
RtlFindNextForwardRunClear
CcPurgeCacheSection
RtlCheckRegistryKey
RtlHashUnicodeString
ExSystemTimeToLocalTime
PsGetProcessExitTime
KeRestoreFloatingPointState
CcUninitializeCacheMap
RtlAnsiStringToUnicodeString
RtlFreeOemString
IoDeleteDevice
SeLockSubjectContext
IoRegisterDeviceInterface
MmMapLockedPages
RtlUnicodeToOemN
KeSaveFloatingPointState
IoGetDeviceToVerify
RtlInitializeGenericTable
RtlFindLeastSignificantBit
RtlClearAllBits
ObfReferenceObject
SePrivilegeCheck
RtlCreateUnicodeString
KeRemoveQueue
ZwSetValueKey
ExDeleteNPagedLookasideList
PoUnregisterSystemState
IoVerifyVolume
ZwUnloadDriver
RtlAnsiCharToUnicodeChar
IoInvalidateDeviceRelations
ZwPowerInformation
RtlCopyUnicodeString
MmAllocatePagesForMdl
KeUnstackDetachProcess
IoCreateSymbolicLink
KeInitializeQueue
RtlExtendedIntegerMultiply
RtlSecondsSince1970ToTime
PsDereferencePrimaryToken
MmFreeNonCachedMemory
SeAssignSecurity
FsRtlDeregisterUncProvider
RtlDeleteNoSplay
ExRegisterCallback
ZwReadFile
ObfDereferenceObject
IoWMIRegistrationControl
IoGetRelatedDeviceObject
RtlMapGenericMask
RtlTimeToTimeFields
FsRtlFastUnlockSingle
ExAllocatePoolWithQuotaTag
IoGetDmaAdapter
ZwSetVolumeInformationFile
ZwFlushKey
RtlDeleteRegistryValue
RtlCopySid
ExRaiseStatus
RtlInitializeUnicodePrefix
CcMdlWriteComplete
KeInitializeTimerEx
FsRtlNotifyUninitializeSync
FsRtlIsFatDbcsLegal
KeRemoveQueueDpc
RtlUpcaseUnicodeToOemN
SeImpersonateClientEx
IoSetDeviceInterfaceState
RtlCreateAcl
KeSetBasePriorityThread
ObOpenObjectByPointer
RtlInitUnicodeString
SeTokenIsAdmin
RtlSecondsSince1980ToTime
MmIsAddressValid
CcCopyWrite
CcSetDirtyPinnedData
MmUnmapLockedPages
KeAttachProcess
ZwQueryKey
MmGetSystemRoutineAddress
IoAcquireCancelSpinLock
MmUnlockPagableImageSection
CcCanIWrite
IoDetachDevice
MmLockPagableSectionByHandle
RtlMultiByteToUnicodeN
MmProbeAndLockPages
SeReleaseSubjectContext
RtlFindSetBits
IoCancelIrp
RtlInitAnsiString
DbgPrompt
RtlValidSecurityDescriptor
IoFreeMdl
ZwQueryObject
FsRtlAllocateFileLock
RtlOemToUnicodeN
IoGetDeviceObjectPointer
ExGetPreviousMode
IoCheckShareAccess
ZwMakeTemporaryObject
ExReleaseResourceLite
MmResetDriverPaging
ZwLoadDriver
IoStartPacket
MmAllocateMappingAddress
RtlQueryRegistryValues
IoBuildPartialMdl
PsCreateSystemThread
KeRemoveDeviceQueue
IoReleaseRemoveLockAndWaitEx
ExNotifyCallback
RtlLengthRequiredSid
CcSetReadAheadGranularity
FsRtlIsHpfsDbcsLegal
RtlEqualUnicodeString
ExFreePoolWithTag
KeCancelTimer
KeReadStateTimer