ZwFsControlFile
IoFreeMdl
RtlFindLeastSignificantBit
IoRaiseHardError
ExDeletePagedLookasideList
RtlLengthRequiredSid
IoEnumerateDeviceObjectList
IoReleaseRemoveLockEx
CcMdlWriteComplete
SeSetSecurityDescriptorInfo
RtlFindMostSignificantBit
KeRemoveQueue
IoSetThreadHardErrorMode
PsCreateSystemThread
IoCancelIrp
RtlAreBitsSet
PsReferencePrimaryToken
KeResetEvent
ExAcquireFastMutexUnsafe
CcFastCopyWrite
PsGetCurrentProcessId
RtlFindSetBits
SeReleaseSubjectContext
IoReadPartitionTableEx
MmGetSystemRoutineAddress
SeTokenIsAdmin
IoConnectInterrupt
ZwLoadDriver
IoUpdateShareAccess
PoStartNextPowerIrp
RtlUnicodeToOemN
KeQueryActiveProcessors
RtlCreateSecurityDescriptor
IoDeleteController
IoCreateSymbolicLink
IoReportResourceForDetection
IoGetLowerDeviceObject
PsGetCurrentProcess
RtlEqualString
KeRemoveByKeyDeviceQueue
ObQueryNameString
FsRtlFastUnlockSingle
IoThreadToProcess
RtlSubAuthoritySid
PoUnregisterSystemState
IoGetAttachedDeviceReference
SeOpenObjectAuditAlarm
CcInitializeCacheMap
IoRemoveShareAccess
RtlInt64ToUnicodeString
ExSetTimerResolution
KeQuerySystemTime
ZwSetVolumeInformationFile
KeSynchronizeExecution
KeClearEvent
IofCompleteRequest
KePulseEvent
IoGetDiskDeviceObject
SeAccessCheck
FsRtlLookupLastLargeMcbEntry
RtlFindLongestRunClear
RtlIntegerToUnicodeString
IoWritePartitionTableEx
FsRtlFastCheckLockForRead
IoGetDeviceProperty
KeDetachProcess
KeCancelTimer
MmUnmapLockedPages
SeCaptureSubjectContext
ExDeleteResourceLite
MmAddVerifierThunks
RtlMapGenericMask
ExRaiseStatus
IoCreateSynchronizationEvent
CcPinMappedData
ZwCreateFile
MmAdvanceMdl
RtlRandom
KeReadStateEvent
RtlCopyUnicodeString
ZwFlushKey
IoFreeController
KeSetBasePriorityThread
ExLocalTimeToSystemTime
ExCreateCallback
FsRtlDeregisterUncProvider
SeAssignSecurity
KeInitializeSemaphore
IoSetHardErrorOrVerifyDevice
ExNotifyCallback
PsDereferencePrimaryToken
MmForceSectionClosed
FsRtlNotifyUninitializeSync
RtlEnumerateGenericTable
ExIsProcessorFeaturePresent
ExGetSharedWaiterCount
PoSetSystemState
RtlCopySid
IoGetAttachedDevice
PsRevertToSelf
KeEnterCriticalRegion
IoAllocateController
ObInsertObject
FsRtlFreeFileLock
IoRegisterFileSystem
ProbeForWrite
PoSetPowerState
KeRundownQueue
CcMapData
ZwQueryValueKey
IoFreeIrp
IofCallDriver
IoVerifyVolume
KeInitializeDeviceQueue
IoGetDeviceToVerify
IoAllocateErrorLogEntry
ObReferenceObjectByPointer
RtlUpperChar
RtlAppendUnicodeToString
SeTokenIsRestricted
SeQueryInformationToken
FsRtlIsHpfsDbcsLegal
IoStartPacket
ZwDeleteKey
RtlLengthSid
ExUuidCreate
IoGetDeviceAttachmentBaseRef
RtlFreeUnicodeString
DbgBreakPointWithStatus
KeBugCheck
RtlGenerate8dot3Name
RtlFreeAnsiString
KeSaveFloatingPointState
FsRtlNotifyInitializeSync
ZwCreateEvent
ObfReferenceObject
KeInsertByKeyDeviceQueue
ObReleaseObjectSecurity
ZwMapViewOfSection
IoAcquireCancelSpinLock
RtlCharToInteger
RtlAnsiStringToUnicodeString
ExSetResourceOwnerPointer
KeRegisterBugCheckCallback
IoUnregisterFileSystem
IoStartNextPacket
IoReleaseRemoveLockAndWaitEx
MmResetDriverPaging
IoReadPartitionTable
RtlFindClearBitsAndSet
IoReleaseVpbSpinLock
KeReadStateSemaphore
CcDeferWrite
CcIsThereDirtyData
ZwFreeVirtualMemory
FsRtlIsDbcsInExpression
MmIsDriverVerifying
ZwOpenSymbolicLinkObject
SeQueryAuthenticationIdToken
IoReuseIrp
ZwEnumerateKey
ZwQueryVolumeInformationFile
ObReferenceObjectByHandle
CcRepinBcb
IoVolumeDeviceToDosName
IoAcquireVpbSpinLock
ExVerifySuite
CcMdlReadComplete
KeRemoveDeviceQueue
KdDisableDebugger
KeUnstackDetachProcess
RtlCompareUnicodeString
CcZeroData
IoSetShareAccess
PsGetThreadProcessId
RtlValidSecurityDescriptor
RtlCompareMemory
FsRtlCheckLockForWriteAccess
RtlNumberOfClearBits
ZwOpenProcess
RtlWriteRegistryValue
IoInitializeRemoveLockEx
RtlInitAnsiString
RtlFillMemoryUlong
MmAllocatePagesForMdl
KeSetTargetProcessorDpc
CcRemapBcb
KeAttachProcess
MmSetAddressRangeModified
IoRegisterDeviceInterface
SeValidSecurityDescriptor
RtlDeleteRegistryValue
CcPinRead
FsRtlCheckLockForReadAccess
KeSetTimer
KeGetCurrentThread
SeAppendPrivileges
MmMapLockedPages
ExReleaseResourceLite
RtlInitializeGenericTable
ZwNotifyChangeKey
SeDeassignSecurity
RtlUnicodeStringToOemString
MmMapUserAddressesToPage
IoCreateFile
RtlFindUnicodePrefix
PsReturnPoolQuota
RtlValidSid
SeFilterToken
IoReportDetectedDevice
IoGetDeviceObjectPointer
KeStackAttachProcess
ZwSetValueKey
PsImpersonateClient
MmFreeMappingAddress
SeDeleteObjectAuditAlarm
ExFreePoolWithTag
RtlTimeFieldsToTime
IoSetDeviceToVerify
MmUnlockPagableImageSection
IoDisconnectInterrupt
MmUnmapIoSpace
KeInitializeQueue
RtlUnicodeStringToInteger
ExAllocatePoolWithQuota
CcMdlWriteAbort
PoRegisterSystemState
KeInitializeTimer
RtlQueryRegistryValues
RtlInitString
IoQueryFileInformation
SeUnlockSubjectContext
IoRequestDeviceEject
FsRtlIsFatDbcsLegal
RtlUpperString
PsIsThreadTerminating
ZwUnloadDriver
ExSystemTimeToLocalTime
RtlCreateRegistryKey
FsRtlIsTotalDeviceFailure
RtlTimeToSecondsSince1980
IoStartTimer
RtlUpcaseUnicodeString
CcFlushCache
KeWaitForMultipleObjects
MmAllocateContiguousMemory
IoInvalidateDeviceState
RtlStringFromGUID
ZwCreateSection
KeInsertDeviceQueue
RtlVolumeDeviceToDosName
IoGetRequestorProcessId
MmAllocateMappingAddress
IoIsOperationSynchronous
RtlGetCallersAddress
IoBuildPartialMdl