IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

WskCaptureProviderNPI

WskReleaseProviderNPI

WskDeregister

WskRegister

wcsstr

RtlInitUnicodeString

RtlEqualUnicodeString

KeDelayExecutionThread

ExAllocatePool

ExFreePoolWithTag

MmUnmapIoSpace

MmMapIoSpaceEx

ObfDereferenceObject

MmGetPhysicalAddress

MmCopyMemory

PsLookupProcessByProcessId

PsGetProcessPeb

ZwQuerySystemInformation

MmMarkPhysicalMemoryAsBad

__C_specific_handler

strstr

RtlInitAnsiString

RtlGetVersion

RtlCompareString

RtlImageNtHeader

MmGetSystemRoutineAddress

RtlDeleteRegistryValue

RtlAppendUnicodeToString

ExQueueWorkItem

ExAcquireResourceExclusiveLite

ExReleaseResourceLite

ObReferenceObjectByHandleWithTag

ObCloseHandle

ZwClose

ZwOpenKey

ZwDeleteKey

RtlDeleteElementGenericTableAvl

RtlLookupElementGenericTableAvl

IoRegisterDriverReinitialization

IoCreateFileEx

RtlCaptureContext

MmFlushImageSection

ZwDeleteFile

KeCapturePersistentThreadState

ObReferenceObjectByName

strcmp

IoFileObjectType

IoDriverObjectType

RtlInitString

RtlAnsiStringToUnicodeString

RtlFreeUnicodeString

KeStackAttachProcess

KeUnstackDetachProcess

ZwAllocateVirtualMemory

MmUserProbeAddress

KeInitializeEvent

KeSetEvent

KeWaitForSingleObject

MmProbeAndLockPages

MmUnlockPages

IoAllocateIrp

IoAllocateMdl

IoFreeIrp

IoFreeMdl

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ