ExFreePoolWithTag
ExQueryDepthSList
ExpInterlockedPopEntrySList
ExpInterlockedPushEntrySList
ExInitializeLookasideListEx
ExDeleteLookasideListEx
PsSetLoadImageNotifyRoutine
PsRemoveLoadImageNotifyRoutine
KeInitializeApc
KeInsertQueueApc
PsGetCurrentProcessSessionId
MmHighestUserAddress
MmGetSystemRoutineAddress
IoGetCurrentProcess
RtlInitUnicodeString
RtlGetVersion
IoWMIRegistrationControl
_vsnwprintf
LdrFindResource_U
LdrAccessResource
__C_specific_handler
MmUserProbeAddress
RtlCompareMemory
ZwCreateFile
ZwSetInformationFile
ZwClose
ZwCreateKey
ZwDeleteValueKey
ZwFlushBuffersFile
NtBuildNumber
KeInitializeEvent
KeReadStateEvent
KeResetEvent
KeSetEvent
KeDelayExecutionThread
KeWaitForMultipleObjects
KeWaitForSingleObject
PsCreateSystemThread
PsTerminateSystemThread
ObReferenceObjectByHandle
ObfDereferenceObject
PsThreadType
ExAllocatePoolWithTag
MmProbeAndLockPages
MmUnlockPages
MmMapLockedPagesSpecifyCache
IoAllocateMdl
IoFreeMdl
RtlImageNtHeader
ZwQuerySystemInformation
RtlUnicodeStringToInteger
RtlAnsiStringToUnicodeString
RtlCompareUnicodeString
RtlCopyUnicodeString
RtlAppendUnicodeStringToString
RtlFreeUnicodeString
ExAllocatePool
ZwOpenKey
ZwDeleteKey
ZwEnumerateKey
ZwEnumerateValueKey
ZwQueryValueKey
ZwSetValueKey
_strnicmp
ExQueueWorkItem
MmProtectMdlSystemAddress
MmUnmapLockedPages
IoAllocateIrp
IoCreateFile
IoGetRelatedDeviceObject
ZwCreateSection
ZwMapViewOfSection
ZwUnmapViewOfSection
IoCreateFileSpecifyDeviceObjectHint
KeStackAttachProcess
KeUnstackDetachProcess
IoIsSystemThread
IoThreadToProcess
IoGetDeviceAttachmentBaseRef
MmCreateSection
MmMapViewOfSection
MmUnmapViewOfSection
PsGetThreadWin32Thread
KeAddSystemServiceTable
PsGetProcessWin32Process
IoFileObjectType
PsInitialSystemProcess
RtlCreateSecurityDescriptor
RtlValidSecurityDescriptor
RtlSetDaclSecurityDescriptor
ZwOpenSymbolicLinkObject
ZwQuerySymbolicLinkObject
RtlCreateAcl
RtlSetOwnerSecurityDescriptor
ObOpenObjectByPointer
ZwCreateEvent
ObFindHandleForObject
ExEventObjectType
SeExports
ExCreateCallback
ExRegisterCallback
ExUnregisterCallback
ExNotifyCallback
KeBugCheckEx
_snwprintf
KeInitializeDpc
KeInitializeTimer
KeCancelTimer
KeSetTimer
KeEnterCriticalRegion
KeLeaveCriticalRegion
ExfAcquirePushLockExclusive
ExfAcquirePushLockShared
ExfReleasePushLock
PsGetVersion
KeInsertQueueDpc
KeFlushQueuedDpcs
KeSetTargetProcessorDpcEx
KeRegisterProcessorChangeCallback
KeDeregisterProcessorChangeCallback
ExAcquireFastMutex
ExReleaseFastMutex
MmAllocateMappingAddress
MmFreeMappingAddress
MmGetVirtualForPhysical
MmAllocateContiguousMemorySpecifyCache
MmFreeContiguousMemory
RtlInitializeBitMap
RtlSetBit
MmMapIoSpace
MmUnmapIoSpace
MmFreeContiguousMemorySpecifyCache
MmGetPhysicalAddress
MmIsAddressValid
strncmp
_stricmp
ZwLoadDriver
ZwUnloadDriver
ZwDeviceIoControlFile
IofCompleteRequest
_purecall
RtlEqualUnicodeString
FsRtlIsNameInExpression
IoAllocateErrorLogEntry
IoGetBootDiskInformation
IoWriteErrorLogEntry
IoCreateSymbolicLink
IoDeleteSymbolicLink
IoDeleteDevice
IoRegisterShutdownNotification
ObQueryNameString
ZwSetSecurityObject
_wcsnicmp
wcschr
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlLengthSid
IoIsWdmVersionAvailable
IoDeviceObjectType
IoCreateDevice
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
RtlGetSaclSecurityDescriptor
SeCaptureSecurityDescriptor
RtlLengthSecurityDescriptor
