IoConnectInterrupt
CcDeferWrite
IoSetPartitionInformationEx
ObCreateObject
MmUnmapLockedPages
KeStackAttachProcess
RtlCreateSecurityDescriptor
IoCreateFile
RtlValidSid
RtlxAnsiStringToUnicodeSize
IoBuildPartialMdl
DbgBreakPoint
RtlFindLastBackwardRunClear
IoDeleteSymbolicLink
SeTokenIsRestricted
KdDisableDebugger
MmHighestUserAddress
IoOpenDeviceRegistryKey
IoUpdateShareAccess
ZwQueryObject
ZwClose
MmUnmapReservedMapping
ZwEnumerateKey
KeDetachProcess
IoGetDmaAdapter
KeRemoveEntryDeviceQueue
RtlAnsiStringToUnicodeString
PoUnregisterSystemState
IoDeleteController
RtlxOemStringToUnicodeSize
ObfDereferenceObject
KeBugCheck
ExCreateCallback
KeUnstackDetachProcess
IoGetTopLevelIrp
KeReadStateMutex
ObInsertObject
KeReadStateSemaphore
CcMdlRead
RtlGenerate8dot3Name
FsRtlNotifyInitializeSync
MmAllocateMappingAddress
RtlLengthSid
RtlWriteRegistryValue
IoCreateDisk
PoSetSystemState
ExSetResourceOwnerPointer
RtlQueryRegistryValues
IoEnumerateDeviceObjectList
IoRaiseHardError
RtlNumberOfClearBits
ExAllocatePoolWithQuotaTag
ZwQueryValueKey
ExSystemTimeToLocalTime
MmAllocatePagesForMdl
RtlCreateUnicodeString
HalExamineMBR
IoWMIWriteEvent
RtlCompareString
KeInitializeDeviceQueue
ZwPowerInformation
ZwQueryInformationFile
KeWaitForSingleObject
MmFlushImageSection
FsRtlCheckOplock
KeReadStateTimer
DbgBreakPointWithStatus
SeTokenIsAdmin
IoGetDeviceInterfaceAlias
PsGetCurrentProcess
ZwEnumerateValueKey
CcCopyWrite
KeEnterCriticalRegion
CcSetDirtyPinnedData
ObfReferenceObject
IoIsWdmVersionAvailable
KeSaveFloatingPointState
ObMakeTemporaryObject
RtlOemStringToUnicodeString
RtlInt64ToUnicodeString
RtlRandom
RtlOemToUnicodeN
KeSetTimerEx
MmFreePagesFromMdl
MmProbeAndLockPages
KeSetSystemAffinityThread
ZwQuerySymbolicLinkObject
IoCancelIrp
CcPinMappedData
MmPageEntireDriver
PsLookupProcessByProcessId
RtlInitAnsiString
IoGetDeviceToVerify
CcMdlWriteComplete
ZwQueryVolumeInformationFile
RtlCreateRegistryKey
KeRemoveQueue
PsChargeProcessPoolQuota
SeValidSecurityDescriptor
IoCreateSynchronizationEvent
IoFreeWorkItem
ObReferenceObjectByPointer
PsGetProcessExitTime
IoIsOperationSynchronous
IoRegisterFileSystem
SeSetSecurityDescriptorInfo
ProbeForRead
RtlTimeToSecondsSince1970
FsRtlDeregisterUncProvider
IoAllocateAdapterChannel
ZwSetValueKey
ZwDeleteValueKey
IoThreadToProcess
ExUnregisterCallback
DbgPrompt
RtlCheckRegistryKey
MmGetSystemRoutineAddress
RtlFindNextForwardRunClear
SeAssignSecurity
MmAllocateNonCachedMemory
ExGetSharedWaiterCount
IoAcquireVpbSpinLock
PoSetPowerState
CcZeroData
RtlAppendUnicodeToString
ZwFreeVirtualMemory
RtlUnicodeStringToInteger
KeRemoveDeviceQueue
IoReleaseCancelSpinLock
SeOpenObjectAuditAlarm
RtlPrefixUnicodeString
IoVerifyVolume
MmUnlockPages
ZwReadFile
IoWritePartitionTableEx
SePrivilegeCheck
CcUninitializeCacheMap
IoCheckShareAccess
MmLockPagableSectionByHandle
IoCreateNotificationEvent
IoQueryFileDosDeviceName
KeSetBasePriorityThread
ZwOpenSection
RtlSecondsSince1970ToTime
KeSetImportanceDpc
ExLocalTimeToSystemTime
IofCallDriver
IoSetTopLevelIrp
FsRtlSplitLargeMcb
SeCaptureSubjectContext
KeQuerySystemTime
ExIsProcessorFeaturePresent
CcPinRead
IoInvalidateDeviceState
RtlCopyString
CcFlushCache
KeInsertDeviceQueue
IoBuildSynchronousFsdRequest
IoCsqRemoveIrp
ObOpenObjectByPointer
CcIsThereDirtyData
RtlAnsiCharToUnicodeChar
RtlMapGenericMask
RtlxUnicodeStringToAnsiSize
MmProbeAndLockProcessPages
ExAcquireFastMutexUnsafe
MmUnsecureVirtualMemory
RtlAddAccessAllowedAce
ZwOpenFile
ExAllocatePoolWithTag
IoInitializeTimer
RtlInitializeSid
ZwMakeTemporaryObject
ZwFlushKey
PsGetVersion
PoStartNextPowerIrp
ExSetTimerResolution
KeInitializeTimerEx
MmIsVerifierEnabled
SeAppendPrivileges
IoGetStackLimits
KeRestoreFloatingPointState
RtlGetVersion
PoCallDriver
IoSetDeviceInterfaceState
MmSecureVirtualMemory
IoInitializeIrp
IoReadPartitionTable
PsReferencePrimaryToken
ZwCreateFile
CcMdlReadComplete
KeInitializeMutex
IoStartNextPacket
IoGetDeviceInterfaces
RtlInsertUnicodePrefix
PsGetCurrentProcessId
IoInitializeRemoveLockEx
IoGetDiskDeviceObject
IoAllocateMdl
KeSetTimer
IoReadPartitionTableEx
CcUnpinRepinnedBcb
RtlFindClearRuns
RtlSubAuthoritySid
IoGetDeviceObjectPointer
IoAcquireCancelSpinLock
RtlNtStatusToDosError
KeQueryActiveProcessors
KePulseEvent
PsGetCurrentThreadId
IoUnregisterFileSystem
RtlEnumerateGenericTable
ZwQueryKey
KeInsertQueue
MmAddVerifierThunks
IoGetBootDiskInformation
RtlInitializeGenericTable
KeInsertQueueDpc
IoCreateStreamFileObject
ExQueueWorkItem
RtlDeleteElementGenericTable
RtlUpperChar
IoGetRelatedDeviceObject
RtlTimeToTimeFields
RtlCreateAcl
IoWriteErrorLogEntry
MmBuildMdlForNonPagedPool
WmiQueryTraceInformation
RtlCompareMemory
FsRtlNotifyUninitializeSync
RtlCopyLuid
IoDeviceObjectType
KeReadStateEvent
IoDetachDevice
KeInsertHeadQueue
RtlInitString
CcMdlWriteAbort
ZwWriteFile
IoGetRequestorProcessId
IoQueryFileInformation
ExReleaseFastMutexUnsafe
ZwSetVolumeInformationFile
ExVerifySuite
KeSetEvent
RtlFreeAnsiString
IoReuseIrp
ExUuidCreate
PoRequestPowerIrp
ZwOpenProcess
SeQueryInformationToken
ExRaiseStatus
ExGetExclusiveWaiterCount
RtlStringFromGUID
ZwLoadDriver
ZwMapViewOfSection
MmMapLockedPagesSpecifyCache
SeDeassignSecurity
RtlUnicodeToMultiByteN
KdEnableDebugger
RtlLengthRequiredSid
RtlAreBitsSet
