wcscat_s
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlUnicodeStringToAnsiString
RtlCompareUnicodeStrings
RtlCompareUnicodeString
RtlCopyUnicodeString
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlFreeUnicodeString
RtlFreeAnsiString
RtlTimeToTimeFields
KeInitializeEvent
KeSetEvent
KeDelayExecutionThread
KeWaitForSingleObject
ExAllocatePool
ExAllocatePoolWithTag
ExFreePoolWithTag
ExQueryDepthSList
ExpInterlockedPopEntrySList
ExpInterlockedPushEntrySList
ExInitializeNPagedLookasideList
ExSystemTimeToLocalTime
MmLockPagableDataSection
MmUnlockPagableImageSection
IoAllocateIrp
IofCallDriver
IoCreateFile
IoFreeIrp
IoGetCurrentProcess
IoGetRelatedDeviceObject
ObReferenceObjectByHandle
ObfDereferenceObject
ZwCreateFile
ZwQueryInformationFile
ZwSetInformationFile
ZwReadFile
ZwWriteFile
ZwClose
ZwOpenKey
ZwFlushKey
ZwQueryValueKey
ZwSetValueKey
ZwOpenSymbolicLinkObject
ZwQuerySymbolicLinkObject
MmLockPagableSectionByHandle
PsGetProcessCreateTimeQuadPart
IoVolumeDeviceToDosName
ZwOpenProcess
RtlCreateUnicodeString
RtlDowncaseUnicodeString
KeAttachProcess
KeDetachProcess
KeStackAttachProcess
KeUnstackDetachProcess
SeLocateProcessImageName
PsLookupProcessByProcessId
PsLookupThreadByThreadId
IoThreadToProcess
ObOpenObjectByPointer
ZwQueryObject
ZwDeleteFile
ZwDuplicateObject
ZwOpenDirectoryObject
ZwAllocateVirtualMemory
sprintf_s
swprintf_s
ZwQueryInformationProcess
PsGetProcessImageFileName
RtlImageNtHeader
ZwQuerySystemInformation
PsReferenceProcessFilePointer
PsGetProcessPeb
PsGetProcessWow64Process
ObSetHandleAttributes
ZwQueryDirectoryObject
ObReferenceObjectByName
PsGetProcessInheritedFromUniqueProcessId
IoFileObjectType
PsThreadType
PsInitialSystemProcess
IoDriverObjectType
IoDeviceObjectType
RtlUnicodeStringToInteger
KeInitializeDpc
strcpy_s
KeSetTimerEx
KeQueryTimeIncrement
PsTerminateSystemThread
IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
PsGetProcessExitStatus
PsGetProcessId
RtlGetVersion
MmProbeAndLockPages
MmUnlockPages
MmBuildMdlForNonPagedPool
MmMapLockedPagesSpecifyCache
IoAllocateMdl
IoFreeMdl
PsGetCurrentProcessId
PsGetCurrentThreadId
NtAllocateVirtualMemory
ZwQueryVirtualMemory
strcat_s
strncpy_s
RtlEqualUnicodeString
ProbeForRead
MmMapLockedPages
MmUnmapLockedPages
MmCreateMdl
PsSetLoadImageNotifyRoutine
PsGetThreadProcessId
LpcPortObjectType
ExGetPreviousMode
NtTraceControl
MmUserProbeAddress
ZwCreateSection
ZwMapViewOfSection
ZwUnmapViewOfSection
MmSystemRangeStart
ExRaiseAccessViolation
ZwWaitForSingleObject
ZwQueryInformationThread
_vsnprintf_s
KeInitializeMutex
KeReleaseMutex
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
wcscpy_s
RtlIntegerToUnicodeString
KeBugCheckEx
ExQueueWorkItem
ObfReferenceObject
ZwCreateKey
PsGetThreadId
FsRtlGetFileSize
_snprintf_s
ObRegisterCallbacks
ObGetFilterVersion
PsProcessType
CmRegisterCallbackEx
CmCallbackGetKeyObjectID
ExAcquireSpinLockShared
ExReleaseSpinLockShared
ExAcquireSpinLockExclusive
ExReleaseSpinLockExclusive
RtlRandomEx
PsSetCreateThreadNotifyRoutine
PsGetThreadProcess
PsIsSystemThread
KeInitializeApc
KeInsertQueueApc
PsGetVersion
PsGetThreadExitStatus
RtlIpv6AddressToStringA
RtlIpv4StringToAddressA
RtlAnsiCharToUnicodeChar
RtlUnicodeToMultiByteN
RtlInitUnicodeString
__C_specific_handler
PsSetCreateProcessNotifyRoutineEx
MmIsAddressValid
PsCreateSystemThread
MmGetSystemRoutineAddress
DbgPrint
KeInitializeTimerEx
