wcsstr
RtlInitUnicodeString
RtlEqualUnicodeString
KeDelayExecutionThread
ExAllocatePool
ExFreePoolWithTag
MmUnmapIoSpace
MmMapIoSpaceEx
ObfDereferenceObject
MmGetPhysicalAddress
MmCopyMemory
PsLookupProcessByProcessId
PsGetProcessPeb
ZwQuerySystemInformation
MmMarkPhysicalMemoryAsBad
__C_specific_handler
strstr
RtlInitAnsiString
RtlGetVersion
RtlCompareString
RtlImageNtHeader
MmGetSystemRoutineAddress
RtlDeleteRegistryValue
RtlAppendUnicodeToString
ExQueueWorkItem
ExAcquireResourceExclusiveLite
ExReleaseResourceLite
ObReferenceObjectByHandleWithTag
ObCloseHandle
ZwClose
ZwOpenKey
ZwDeleteKey
RtlDeleteElementGenericTableAvl
RtlLookupElementGenericTableAvl
IoRegisterDriverReinitialization
IoCreateFileEx
RtlCaptureContext
MmFlushImageSection
ZwDeleteFile
KeCapturePersistentThreadState
ObReferenceObjectByName
strcmp
IoFileObjectType
IoDriverObjectType
RtlInitString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
KeStackAttachProcess
KeUnstackDetachProcess
ZwAllocateVirtualMemory
MmUserProbeAddress
KeInitializeEvent
KeSetEvent
KeWaitForSingleObject
MmProbeAndLockPages
MmUnlockPages
IoAllocateIrp
IoAllocateMdl
IoFreeIrp
IoFreeMdl
_stricmp
NtQuerySystemInformation
ZwClose
ZwQueryValueKey
ZwOpenKey
RtlInitUnicodeString
ZwWaitForSingleObject
ZwDeviceIoControlFile
ZwOpenFile
_wcsnicmp
ZwEnumerateKey
ZwCreateEvent
MmGetSystemRoutineAddress
ZwCreateFile
__C_specific_handler
KeSetSystemAffinityThread
KeQueryActiveProcessors
KeQueryTimeIncrement
DbgBreakPointWithStatus
RtlTimeToTimeFields
ExSystemTimeToLocalTime
IoAllocateMdl
IoFreeMdl
MmUnlockPages
MmMapLockedPagesSpecifyCache
MmProbeAndLockPages
KeWaitForSingleObject
KeReleaseMutex
KeInitializeMutex
ExFreePoolWithTag
ExAllocatePool
KeRevertToUserAffinityThread
DbgPrint
ExAllocatePool
NtQuerySystemInformation
ExFreePoolWithTag
IoAllocateMdl
MmProbeAndLockPages
MmMapLockedPagesSpecifyCache
MmUnlockPages
IoFreeMdl
KeQueryActiveProcessors
KeSetSystemAffinityThread
KeRevertToUserAffinityThread
DbgPrint
