RtlUnwind
KeTickCount
memcpy
ProbeForRead
ProbeForWrite
PsGetCurrentProcessId
InitSafeBootMode
PsGetVersion
IoCreateDevice
IoCreateSymbolicLink
KeInitializeEvent
ExAllocatePool
MmIsAddressValid
RtlEqualUnicodeString
MmUnlockPages
IoFreeMdl
MmMapLockedPagesSpecifyCache
MmProbeAndLockPages
IoAllocateMdl
DbgPrint
MmGetSystemRoutineAddress
KeQueryTimeIncrement
_alldiv
_allmul
KeDelayExecutionThread
RtlAppendUnicodeStringToString
ExRaiseStatus
IoVolumeDeviceToDosName
ZwClose
ZwReadFile
ZwQueryInformationFile
ZwOpenFile
RtlQueryRegistryValues
ObfDereferenceObject
IoGetDeviceObjectPointer
_wcsnicmp
memmove
ObOpenObjectByPointer
PsProcessType
KeInitializeMutex
KeReleaseMutex
KeWaitForSingleObject
IoFreeWorkItem
IoQueueWorkItem
ObfReferenceObject
IoAllocateWorkItem
RtlInitUnicodeString
PsLookupProcessByProcessId
KeSetEvent
PsSetCreateProcessNotifyRoutine
ObReferenceObjectByHandle
PsCreateSystemThread
RtlGetVersion
MmMapLockedPages
IoReleaseRemoveLockEx
IoAcquireRemoveLockEx
IoInitializeRemoveLockEx
RtlHashUnicodeString
ZwQueryValueKey
ZwOpenKey
ZwQuerySystemInformation
RtlFreeUnicodeString
RtlCompareMemory
KeClearEvent
KeReadStateEvent
KeWaitForMultipleObjects
_vsnprintf
_vsnwprintf
ZwQuerySymbolicLinkObject
ZwOpenSymbolicLinkObject
ExInitializeResourceLite
ExDeleteResourceLite
ZwCreateFile
ZwWriteFile
ZwSetInformationFile
RtlRandom
ObQueryNameString
ZwQueryInformationProcess
RtlVolumeDeviceToDosName
RtlPrefixUnicodeString
KeLeaveCriticalRegion
ExAcquireResourceExclusiveLite
KeEnterCriticalRegion
ExAcquireResourceSharedLite
ExReleaseResourceLite
RtlAnsiStringToUnicodeString
ZwEnumerateKey
_allshr
KeQueryInterruptTime
InterlockedPopEntrySList
InterlockedPushEntrySList
ExInitializeNPagedLookasideList
KeInitializeSemaphore
IoFreeIrp
IoCancelIrp
KeReadStateSemaphore
KeReleaseSemaphore
IoAllocateIrp
ExDeleteNPagedLookasideList
KeBugCheckEx
RtlCompareUnicodeString
IoDeleteSymbolicLink
IoDeleteDevice
IofCompleteRequest
ExFreePoolWithTag
memset
PsTerminateSystemThread
ExAllocatePoolWithTag
