ExAcquireRundownProtection
ExFreePoolWithTag
KeLeaveCriticalRegion
ExInitializeNPagedLookasideList
PsSetLoadImageNotifyRoutine
ExReleaseRundownProtectionEx
PsLookupProcessByProcessId
KeSetEvent
ExpInterlockedPushEntrySList
MmGetSystemRoutineAddress
KeInitializeEvent
PsSetCreateThreadNotifyRoutine
ExReleaseRundownProtection
ExpInterlockedPopEntrySList
PsSetCreateProcessNotifyRoutine
KeEnterCriticalRegion
KeDelayExecutionThread
PsCreateSystemThread
ZwClose
ExQueryDepthSList
ExAcquireRundownProtectionEx
ObfDereferenceObject
CmUnRegisterCallback
ExAllocatePoolWithTag
RtlEqualUnicodeString
PsTerminateSystemThread
_vsnwprintf
KeWaitForSingleObject
CmRegisterCallback
ExReInitializeRundownProtection
RtlMultiByteToUnicodeN
ObQueryNameString
IoGetTopLevelIrp
PsGetCurrentThreadId
PsGetCurrentProcessId
RtlCopyUnicodeString
MmIsAddressValid
ExInitializeRundownProtection
RtlCaptureContext
ExReleaseFastMutex
ExAcquireFastMutex
RtlVirtualUnwind
RtlLookupFunctionEntry
ZwQuerySymbolicLinkObject
_wcsnicmp
ZwOpenSymbolicLinkObject
ZwOpenProcess
ZwTerminateProcess
RtlDeleteElementGenericTableAvl
ExAcquireResourceExclusiveLite
RtlInsertElementGenericTableAvl
KeReleaseSpinLock
RtlInitializeBitMap
ExAcquireResourceSharedLite
ExReleaseResourceLite
RtlInitializeGenericTableAvl
ObfReferenceObject
ExInitializePagedLookasideList
ExInitializeResourceLite
RtlLookupElementGenericTableAvl
KeAcquireSpinLockRaiseToDpc
MmSystemRangeStart
ExUuidCreate
RtlCompareUnicodeString
RtlImageNtHeader
KeRegisterBugCheckReasonCallback
ExGetPreviousMode
MmUserProbeAddress
RtlAnsiStringToUnicodeString
RtlInitAnsiString
ZwQuerySystemInformation
RtlFreeUnicodeString
ExSystemTimeToLocalTime
RtlTimeToTimeFields
ZwOpenFile
ZwQueryInformationFile
RtlAppendUnicodeToString
IoFileObjectType
ZwCreateFile
IofCompleteRequest
ObReferenceObjectByHandle
RtlPrefixUnicodeString
RtlAppendUnicodeStringToString
ZwDeleteFile
ZwWriteFile
ZwSetValueKey
ZwQueryDirectoryFile
IoCreateSymbolicLink
ZwOpenKey
MmHighestUserAddress
ExWaitForRundownProtectionRelease
InitSafeBootMode
IoUnregisterShutdownNotification
IoRegisterBootDriverReinitialization
IoDeleteDevice
RtlInitUnicodeString
IoRegisterDriverReinitialization
ZwDeleteValueKey
wcslen
ZwQueryValueKey
ZwEnumerateValueKey
ZwDeleteKey
ZwEnumerateKey
RtlGetVersion
IoGetDeviceObjectPointer
RtlUnicodeStringToAnsiString
FsRtlIsNameInExpression
KeClearEvent
ZwCreateKey
KeWaitForMultipleObjects
PsGetProcessPeb
ProbeForRead
PsProcessType
PsGetProcessCreateTimeQuadPart
KeUnstackDetachProcess
PsThreadType
ZwQueryInformationProcess
ZwQueryInformationThread
ObOpenObjectByPointer
KeStackAttachProcess
PsLookupThreadByThreadId
MmUnmapLockedPages
KeInitializeApc
KeInsertQueueApc
IoFreeMdl
MmMapLockedPagesSpecifyCache
MmProbeAndLockPages
PsIsThreadTerminating
MmUnlockPages
IoAllocateMdl
_stricmp
ZwMapViewOfSection
ZwUnmapViewOfSection
strcmp
ZwCreateSection
RtlCompareMemory
ZwQueryObject
ZwSetInformationObject
ZwReadFile
IoGetRelatedDeviceObject
ZwSetInformationFile
IoGetDeviceAttachmentBaseRef
IoCreateFileSpecifyDeviceObjectHint
IoGetBaseFileSystemDeviceObject
IoCreateFile
ZwDuplicateObject
IoFreeIrp
IoAllocateIrp
ExRaiseStatus
KeAreApcsDisabled
RtlQueryRegistryValues
IoVolumeDeviceToDosName
RtlCompressBuffer
RtlDecompressBuffer
RtlGetCompressionWorkSpaceSize
FsRtlDissectName
_strnicmp
PsGetProcessImageFileName
KeQueryMaximumProcessorCount
ObReferenceObjectByName
RtlDeleteElementGenericTable
RtlHashUnicodeString
RtlLookupElementGenericTable
RtlEnumerateGenericTable
RtlIsGenericTableEmpty
RtlInitializeGenericTable
RtlInsertElementGenericTable
KeBugCheckEx
IoCreateDevice
ZwFlushKey
IoRegisterShutdownNotification
__C_specific_handler
