RtlInitializeUnicodePrefix
ZwLoadDriver
KdDisableDebugger
MmUnlockPages
KeRemoveDeviceQueue
ExGetExclusiveWaiterCount
IoReportResourceForDetection
CcMdlReadComplete
IoDisconnectInterrupt
PoCallDriver
RtlVolumeDeviceToDosName
ZwSetSecurityObject
CcInitializeCacheMap
IoDetachDevice
ExQueueWorkItem
KeInsertQueue
ExGetSharedWaiterCount
RtlTimeToTimeFields
KeSetTimerEx
PsGetThreadProcessId
MmAllocateMappingAddress
IoGetRequestorProcess
ZwFlushKey
SePrivilegeCheck
IoAllocateWorkItem
RtlRandom
CcMdlWriteAbort
ProbeForRead
RtlLengthRequiredSid
RtlMultiByteToUnicodeN
IoCreateNotificationEvent
IoAllocateController
KeSetBasePriorityThread
IoSetSystemPartition
PoRequestPowerIrp
KeReleaseSemaphore
RtlFindClearBits
SeUnlockSubjectContext
CcIsThereDirtyData
ObReferenceObjectByHandle
RtlFindClearBitsAndSet
IoRaiseHardError
ObCreateObject
MmLockPagableDataSection
CcSetBcbOwnerPointer
ExLocalTimeToSystemTime
RtlAreBitsSet
SeAssignSecurity
ZwOpenKey
IoAcquireVpbSpinLock
FsRtlDeregisterUncProvider
IofCallDriver
RtlxAnsiStringToUnicodeSize
RtlSplay
IoCheckQuotaBufferValidity
KeSaveFloatingPointState
RtlOemStringToUnicodeString
IoThreadToProcess
RtlWriteRegistryValue
RtlInitAnsiString
ZwQueryVolumeInformationFile
ZwClose
RtlUnicodeToOemN
DbgPrompt
IoSetHardErrorOrVerifyDevice
KeBugCheckEx
RtlFindNextForwardRunClear
IoIsWdmVersionAvailable
RtlEqualString
IoWriteErrorLogEntry
IoInvalidateDeviceRelations
IoCreateSymbolicLink
HalExamineMBR
KeReadStateMutex
CcMapData
CcGetFileObjectFromBcb
RtlCreateAcl
MmCanFileBeTruncated
CcZeroData
KeRemoveByKeyDeviceQueue
RtlNtStatusToDosError
ObMakeTemporaryObject
MmUnmapLockedPages
CcUninitializeCacheMap
SeCaptureSubjectContext
KePulseEvent
IoGetBootDiskInformation
ZwEnumerateKey
ExRegisterCallback
IoCancelIrp
CcSetFileSizes
MmFreeNonCachedMemory
RtlDowncaseUnicodeString
KeRevertToUserAffinityThread
IoSetPartitionInformation
IoSetDeviceToVerify
ExInitializeResourceLite
ZwAllocateVirtualMemory
CcMdlWriteComplete
ObfReferenceObject
ExGetPreviousMode
KeRundownQueue
SeDeleteObjectAuditAlarm
PsGetCurrentThread
WmiQueryTraceInformation
RtlLengthSecurityDescriptor
RtlAddAccessAllowedAce
RtlCopyUnicodeString
VerSetConditionMask
FsRtlIsFatDbcsLegal
ExDeleteNPagedLookasideList
RtlUnicodeStringToInteger
RtlValidSid
RtlCharToInteger
FsRtlIsTotalDeviceFailure
FsRtlSplitLargeMcb
MmFreePagesFromMdl
IoGetStackLimits
MmFlushImageSection
KeClearEvent
RtlFindLastBackwardRunClear
ZwCreateSection
PsTerminateSystemThread
ZwCreateDirectoryObject
KeInitializeMutex
IoUnregisterFileSystem
PsGetProcessExitTime
CcMdlRead
RtlFreeUnicodeString
FsRtlGetNextFileLock
KeInitializeDeviceQueue
ExAllocatePoolWithQuotaTag
ExFreePoolWithTag
ZwSetValueKey
RtlInitializeGenericTable
ExNotifyCallback
KeSetEvent
ExRaiseAccessViolation
IoInitializeRemoveLockEx
IoCreateFile
RtlLengthSid
MmIsDriverVerifying
FsRtlFreeFileLock
MmPageEntireDriver
IoGetDeviceObjectPointer
RtlCompareUnicodeString
KeSetPriorityThread
PsDereferencePrimaryToken
RtlUpcaseUnicodeToOemN
IoGetAttachedDevice
MmMapLockedPages
IoCheckShareAccess
IoSetStartIoAttributes
DbgBreakPoint
RtlUpcaseUnicodeChar
KeInitializeEvent
KeQueryActiveProcessors
SeReleaseSubjectContext
IoGetDriverObjectExtension
IoAcquireRemoveLockEx
MmIsVerifierEnabled
CcUnpinData
CcFastCopyWrite
KeLeaveCriticalRegion
ZwOpenProcess
PsGetCurrentProcessId
IoFreeMdl
KeInitializeDpc
IoReadDiskSignature
CcPinMappedData
RtlFreeAnsiString
SeLockSubjectContext
RtlHashUnicodeString
MmUnsecureVirtualMemory
ZwDeleteKey
KeSetTimer
DbgBreakPointWithStatus
MmAdvanceMdl
RtlFindSetBits
RtlUpcaseUnicodeString
KeRestoreFloatingPointState
RtlGetNextRange
ZwQuerySymbolicLinkObject
KeCancelTimer
RtlAnsiStringToUnicodeString
MmForceSectionClosed
RtlClearBits
RtlFindMostSignificantBit
IoQueueWorkItem
KeEnterCriticalRegion
MmGetPhysicalAddress
RtlFindLongestRunClear
IoVerifyVolume
CcPreparePinWrite
IoCsqRemoveIrp
ZwMakeTemporaryObject
ExSetResourceOwnerPointer
ObInsertObject
IoReadPartitionTableEx
ZwOpenSection
IoAllocateIrp
FsRtlCheckLockForReadAccess
ZwDeviceIoControlFile
MmProbeAndLockPages
RtlPrefixUnicodeString
KeStackAttachProcess
SeCreateClientSecurity
PoSetSystemState
ZwFsControlFile
CcCopyWrite
FsRtlCheckLockForWriteAccess
ExCreateCallback
KeReadStateEvent
FsRtlNotifyUninitializeSync
RtlValidSecurityDescriptor
KefAcquireSpinLockAtDpcLevel
FsRtlAllocateFileLock
MmFreeMappingAddress
RtlAppendStringToString
ZwDeleteValueKey
ZwPowerInformation
RtlVerifyVersionInfo
RtlDeleteRegistryValue
PsRevertToSelf
RtlOemToUnicodeN
IoRegisterFileSystem
KeInsertByKeyDeviceQueue
RtlUpperString
MmIsAddressValid
ExVerifySuite
MmQuerySystemSize
RtlSecondsSince1980ToTime
MmGetSystemRoutineAddress
RtlCopyLuid
ExAcquireResourceSharedLite
RtlFindClearRuns
KeInitializeTimer
SeSetSecurityDescriptorInfo
IoCreateStreamFileObject
IoStartPacket
ExRaiseStatus
IoFreeWorkItem
RtlIsNameLegalDOS8Dot3
IoRegisterDeviceInterface
SeValidSecurityDescriptor
IoVerifyPartitionTable
IoQueryFileInformation
ObQueryNameString
RtlAnsiCharToUnicodeChar
ObfDereferenceObject
ZwQueryKey
MmSetAddressRangeModified
FsRtlIsNameInExpression
RtlAddAccessAllowedAceEx
RtlCompareString
CcCanIWrite
IoMakeAssociatedIrp
IoOpenDeviceRegistryKey
ObOpenObjectByPointer
