ExDeleteResourceLite
KeInitializeEvent
KeEnterCriticalRegion
ExAcquireFastMutexUnsafe
ExReleaseFastMutexUnsafe
KeLeaveCriticalRegion
ExAllocatePool
ExFreePoolWithTag
RtlInsertElementGenericTableAvl
RtlDeleteElementGenericTableAvl
RtlInitializeGenericTableAvl
NtOpenFile
NtQueryVolumeInformationFile
NtClose
swprintf
RtlInitUnicodeString
ObReferenceObjectByHandle
IoGetRelatedDeviceObject
ExAcquireResourceExclusiveLite
ExReleaseResourceLite
ExAcquireResourceSharedLite
ZwCreateFile
IoGetStackLimits
MmFlushImageSection
CcInitializeCacheMap
CcPurgeCacheSection
CcSetFileSizes
ZwClose
MmMapLockedPagesSpecifyCache
CcFlushCache
CcUninitializeCacheMap
IofCallDriver
IofCompleteRequest
IoSetInformation
CcCopyWrite
FsRtlCopyRead
IoCreateDevice
ZwAllocateVirtualMemory
memcpy
ZwQuerySystemInformation
_stricmp
ZwOpenThread
ZwQueryInformationThread
RtlEqualUnicodeString
PsLookupProcessThreadByCid
KeInitializeApc
ExInitializeResourceLite
KeInsertQueueApc
KeDelayExecutionThread
PsCreateSystemThread
ZwOpenKey
ZwQueryValueKey
ZwSetValueKey
strcpy
ZwOpenFile
ZwQueryObject
ZwQueryInformationFile
ZwDeviceIoControlFile
wcslen
ZwCreateSymbolicLinkObject
ZwCreateDirectoryObject
ZwWriteFile
ZwCreateSection
IoGetCurrentProcess
PsLookupProcessByProcessId
ZwOpenSection
ZwMapViewOfSection
MmAllocatePagesForMdl
MmUnmapLockedPages
MmFreePagesFromMdl
ZwUnmapViewOfSection
RtlHashUnicodeString
ZwReadFile
IoFreeIrp
KeSetEvent
RtlPrefixUnicodeString
IoAllocateIrp
KeWaitForSingleObject
ExAllocatePoolWithTag
PoStartNextPowerIrp
PoCallDriver
ZwFlushVirtualMemory
ZwEnumerateKey
ZwDeleteKey
ZwQueryKey
ZwSetSystemInformation
IoCreateDriver
ObMakeTemporaryObject
ZwDeleteFile
ObReferenceObjectByName
IoDriverObjectType
IoEnumerateDeviceObjectList
wcsrchr
IoQueryFileInformation
memset
ObfReferenceObject
ObfDereferenceObject
