MmGetSystemRoutineAddress
MmHighestUserAddress
ZwDeleteValueKey
ZwSetValueKey
ZwQuerySystemInformation
RtlEqualUnicodeString
IoFreeMdl
KeUnstackDetachProcess
KeDelayExecutionThread
ObQueryNameString
IoFileObjectType
ZwCreateFile
MmMapLockedPagesSpecifyCache
ZwQueryValueKey
PsTerminateSystemThread
_vsnwprintf
KeQueryTimeIncrement
ObReferenceObjectByHandle
MmProbeAndLockPages
ZwOpenProcess
MmUnlockPages
ZwQueryInformationProcess
PsGetCurrentProcessId
ObfDereferenceObject
ZwOpenFile
ZwTerminateProcess
ZwQueryInformationFile
KeStackAttachProcess
IoAllocateMdl
ZwOpenKey
KeSetEvent
ExReleaseFastMutex
ExAcquireFastMutex
ExGetPreviousMode
IoGetCurrentProcess
RtlPrefixUnicodeString
KeWaitForSingleObject
PsInitialSystemProcess
RtlCompareUnicodeString
CmRegisterCallback
RtlCompareMemory
RtlUnicodeStringToInteger
ExAcquireResourceExclusiveLite
KeLeaveCriticalRegion
PsSetLoadImageNotifyRoutine
IoRegisterDriverReinitialization
ZwQuerySecurityObject
KeEnterCriticalRegion
MmUserProbeAddress
ExReleaseResourceLite
PsRemoveLoadImageNotifyRoutine
PsGetCurrentThreadId
ExInitializeResourceLite
RtlGetOwnerSecurityDescriptor
RtlUpcaseUnicodeString
ExpInterlockedPushEntrySList
ExpInterlockedPopEntrySList
PsSetCreateProcessNotifyRoutine
ZwSetInformationFile
ExQueryDepthSList
ExInitializePagedLookasideList
ExAcquireResourceSharedLite
RtlHashUnicodeString
FsRtlDissectName
ExDeleteResourceLite
RtlCopyUnicodeString
RtlDeleteElementGenericTableAvl
RtlInsertElementGenericTableAvl
RtlGetElementGenericTableAvl
RtlAppendUnicodeStringToString
RtlInitializeGenericTableAvl
RtlLookupElementGenericTableAvl
ZwMapViewOfSection
ZwUnmapViewOfSection
ZwCreateSection
RtlImageNtHeader
ZwWriteFile
ZwReadFile
ExInterlockedInsertTailList
KeReleaseSemaphore
ExInterlockedRemoveHeadList
RtlAppendUnicodeToString
FsRtlIsNameInExpression
RtlFreeUnicodeString
CmUnRegisterCallback
_wcsnicmp
ZwQuerySymbolicLinkObject
ZwOpenSymbolicLinkObject
KeBugCheckEx
PsLookupProcessByProcessId
ExFreePoolWithTag
ZwCreateKey
ProbeForRead
ExAllocatePoolWithTag
PsGetProcessPeb
_wcsicmp
MmUnmapLockedPages
IoCreateDevice
IoCreateSymbolicLink
IofCompleteRequest
ZwClose
InitSafeBootMode
PsCreateSystemThread
KeInitializeEvent
IoDeleteDevice
RtlInitUnicodeString
IoGetDeviceObjectPointer
ZwDeleteKey
vDbgPrintEx
ExSystemTimeToLocalTime
_vsnprintf
RtlTimeToTimeFields
PsProcessType
PsThreadType
IoGetTopLevelIrp
ObOpenObjectByPointer
ExRaiseStatus
KeAreApcsDisabled
RtlQueryRegistryValues
RtlGetVersion
wcslen
IoVolumeDeviceToDosName
IoAllocateIrp
MmIsAddressValid
PsGetCurrentThreadTeb
KeInitializeApc
KeInsertQueueApc
PsIsThreadTerminating
ZwQueryObject
ZwSetInformationObject
IoGetRelatedDeviceObject
ZwQueryDirectoryFile
IoGetDeviceAttachmentBaseRef
IoCreateFileSpecifyDeviceObjectHint
IoGetBaseFileSystemDeviceObject
IoCreateFile
ZwDuplicateObject
IoFreeIrp
ZwEnumerateValueKey
ZwEnumerateKey
strcmp
RtlDeleteElementGenericTable
RtlLookupElementGenericTable
RtlEnumerateGenericTable
RtlIsGenericTableEmpty
RtlInitializeGenericTable
RtlInsertElementGenericTable
RtlCompressBuffer
RtlDecompressBuffer
RtlGetCompressionWorkSpaceSize
ExSemaphoreObjectType
IoRegisterShutdownNotification
__C_specific_handler
__chkstk
