NtBuildNumber
ExAllocatePoolWithTag
ExFreePoolWithTag
strcmp
KeInitializeEvent
KeResetEvent
KeSetEvent
KeWaitForSingleObject
MmBuildMdlForNonPagedPool
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
IoAllocateMdl
ObReferenceObjectByHandle
ObfDereferenceObject
_except_handler3
ExEventObjectType
memmove
wcschr
wcscpy
wcslen
wcsncmp
RtlInitUnicodeString
KeQueryTimeIncrement
ProbeForWrite
ExGetPreviousMode
MmGetSystemRoutineAddress
IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
IoGetCurrentProcess
ZwClose
ZwOpenSymbolicLinkObject
ZwQuerySymbolicLinkObject
ExRaiseDatatypeMisalignment
ExRaiseAccessViolation
MmIsAddressValid
PsGetProcessId
PsGetThreadId
PsGetThreadProcessId
ZwOpenProcess
KeStackAttachProcess
KeUnstackDetachProcess
PsLookupProcessByProcessId
ObOpenObjectByPointer
ObQueryNameString
ZwQueryInformationProcess
_alldiv
_allmul
KeTickCount
IoFileObjectType
PsProcessType
PsThreadType
MmUserProbeAddress
ExAllocatePool
PsSetCreateProcessNotifyRoutine
PsSetCreateThreadNotifyRoutine
PsSetLoadImageNotifyRoutine
KeDelayExecutionThread
ObReferenceObjectByName
IoDriverObjectType
CmRegisterCallback
CmUnRegisterCallback
FsRtlIsNameInExpression
KeGetCurrentThread
KeClearEvent
IoAllocateIrp
ObfReferenceObject
IoQueueThreadIrp
IoRegisterDriverReinitialization
KeLeaveCriticalRegion
ExAcquireResourceSharedLite
ExAcquireResourceExclusiveLite
ExReleaseResourceLite
MmProbeAndLockPages
IoFreeIrp
IoFreeMdl
wcscat
PsGetCurrentProcessId
MmUnlockPages
MmProtectMdlSystemAddress
MmAllocatePagesForMdl
MmFreePagesFromMdl
MmSystemRangeStart
IoCreateFile
RtlPrefixUnicodeString
IoGetFileObjectGenericMapping
SeCreateAccessState
ObCreateObject
strcpy
strcat
_stricmp
strrchr
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
DbgPrint
ZwCreateSection
ZwMapViewOfSection
ZwUnmapViewOfSection
ZwCreateKey
ZwOpenKey
ZwDeleteKey
ZwDeleteValueKey
ZwEnumerateKey
ZwEnumerateValueKey
ZwQueryValueKey
ZwSetValueKey
ZwDuplicateObject
PsGetVersion
ZwQuerySystemInformation
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
ZwOpenFile
PsLookupThreadByThreadId
ZwQueryInformationThread
IoDeviceObjectType
strncpy
RtlCompareMemory
KeServiceDescriptorTable
ZwCreateFile
ZwQueryInformationFile
ZwReadFile
ZwWaitForSingleObject
IoRegisterBootDriverReinitialization
RtlGetVersion
ExDeleteResourceLite
ExInitializeResourceLite
RtlAssert
_aullshr
_allshl
strlen
memcpy
ZwSetSecurityObject
RtlGetDaclSecurityDescriptor
RtlGetSaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
_snwprintf
RtlLengthSecurityDescriptor
SeCaptureSecurityDescriptor
SeExports
IoIsWdmVersionAvailable
_wcsnicmp
RtlAddAccessAllowedAce
RtlLengthSid
RtlAbsoluteToSelfRelativeSD
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
memset
towlower
KeEnterCriticalRegion
tolower
KeBugCheckEx
