PoRegisterSystemState
CcInitializeCacheMap
KeReadStateTimer
RtlDelete
IoAcquireCancelSpinLock
KeQueryInterruptTime
SeQueryInformationToken
KeSetKernelStackSwapEnable
IoThreadToProcess
RtlVolumeDeviceToDosName
RtlQueryRegistryValues
PsTerminateSystemThread
PsIsThreadTerminating
FsRtlIsHpfsDbcsLegal
RtlExtendedIntegerMultiply
IoCheckShareAccess
RtlVerifyVersionInfo
KeQueryActiveProcessors
RtlPrefixUnicodeString
IoGetCurrentProcess
MmAllocateContiguousMemory
IoGetDeviceObjectPointer
IoGetRelatedDeviceObject
IoIsSystemThread
KeReleaseMutex
MmIsAddressValid
SeTokenIsRestricted
MmQuerySystemSize
ExRegisterCallback
KeBugCheckEx
RtlUpcaseUnicodeString
RtlUnicodeToOemN
RtlCheckRegistryKey
RtlCreateRegistryKey
PsGetProcessId
KeReleaseSemaphore
MmFreeContiguousMemory
ExVerifySuite
ZwClose
CcPinMappedData
RtlFindLastBackwardRunClear
IoAllocateMdl
ExFreePool
PsImpersonateClient
IoAcquireVpbSpinLock
IoFreeMdl
IoSetDeviceToVerify
RtlDeleteElementGenericTable
RtlEqualUnicodeString
RtlInitializeUnicodePrefix
CcMdlReadComplete
KeRundownQueue
CcGetFileObjectFromBcb
FsRtlCheckOplock
ZwLoadDriver
ExUuidCreate
RtlFindSetBits
IoWritePartitionTableEx
RtlUpcaseUnicodeToOemN
RtlValidSecurityDescriptor
CcCopyWrite
ZwQueryVolumeInformationFile
MmProbeAndLockPages
KeEnterCriticalRegion
SeDeassignSecurity
PoRequestPowerIrp
IoAcquireRemoveLockEx
IoInitializeRemoveLockEx
KeSetSystemAffinityThread
RtlCopySid
RtlSecondsSince1980ToTime
CcMapData
RtlUpperString
RtlFreeAnsiString
IoSetPartitionInformationEx
KeCancelTimer
IoStartPacket
KeWaitForSingleObject
MmAddVerifierThunks
RtlClearBits
RtlTimeFieldsToTime
KeBugCheck
RtlAnsiStringToUnicodeString
SeAssignSecurity
MmUnlockPagableImageSection
RtlInitAnsiString
MmUnmapIoSpace
CcPinRead
RtlNumberOfClearBits
PoCallDriver
IoCheckQuotaBufferValidity
SeDeleteObjectAuditAlarm
KeSaveFloatingPointState
IoGetAttachedDevice
IoDetachDevice
MmCanFileBeTruncated
PsGetVersion
KeStackAttachProcess
KeInitializeMutex
IoReportResourceForDetection
IoRegisterFileSystem
RtlCreateUnicodeString
IoCreateNotificationEvent
KeClearEvent
RtlFindLeastSignificantBit
FsRtlLookupLastLargeMcbEntry
RtlInitUnicodeString
RtlCopyUnicodeString
RtlLengthSid
DbgBreakPoint
ObMakeTemporaryObject
CcUnpinData
ExGetPreviousMode
RtlAnsiCharToUnicodeChar
CcSetFileSizes
KeSynchronizeExecution
RtlRemoveUnicodePrefix
IoGetRequestorProcessId
RtlLengthRequiredSid
RtlDowncaseUnicodeString
ZwSetValueKey
IoDeleteDevice
SeReleaseSubjectContext
IoSetShareAccess
RtlFreeOemString
MmUnlockPages
MmUnmapReservedMapping
KeReadStateSemaphore
RtlTimeToSecondsSince1970
CcSetDirtyPinnedData
ObGetObjectSecurity
MmIsDriverVerifying
IoUpdateShareAccess
KeDelayExecutionThread
ZwCreateSection
KePulseEvent
RtlAddAccessAllowedAce
ZwReadFile
IoRaiseHardError
RtlIsNameLegalDOS8Dot3
RtlEqualSid
RtlSplay
ExUnregisterCallback
IoVerifyVolume
KeRestoreFloatingPointState
MmPageEntireDriver
RtlxUnicodeStringToAnsiSize
RtlUnicodeToMultiByteN
KeResetEvent
MmGetPhysicalAddress
IoQueryFileInformation
SeCreateClientSecurity
DbgBreakPointWithStatus
ZwEnumerateKey
KeInitializeTimer
ZwCreateEvent
PsDereferencePrimaryToken
ObCreateObject
FsRtlCheckLockForReadAccess
KeSetTargetProcessorDpc
IoSetDeviceInterfaceState
IoGetDmaAdapter
IoStartTimer
ZwQueryKey
SeValidSecurityDescriptor
RtlTimeToTimeFields
KeRemoveEntryDeviceQueue
ZwDeviceIoControlFile
RtlLengthSecurityDescriptor
IoQueueWorkItem
KeDeregisterBugCheckCallback
ExInitializeResourceLite
ExNotifyCallback
IoBuildSynchronousFsdRequest
RtlCopyLuid
MmIsThisAnNtAsSystem
RtlFindNextForwardRunClear
ExSystemTimeToLocalTime
RtlAppendUnicodeToString
CcUninitializeCacheMap
PsLookupProcessByProcessId
ZwOpenFile
KeReadStateMutex
ZwFsControlFile
PsGetCurrentThread
ZwQueryInformationFile
IoWriteErrorLogEntry
IoAllocateAdapterChannel
IoAllocateIrp
KeRegisterBugCheckCallback
RtlInitializeBitMap
RtlUnicodeStringToOemString
IoCreateStreamFileObjectLite
ZwNotifyChangeKey
RtlTimeToSecondsSince1980
ZwCreateKey
RtlRandom
CcCopyRead
RtlUnicodeStringToInteger
IoRequestDeviceEject
IoUnregisterFileSystem
KeInsertQueueDpc
FsRtlIsNameInExpression
ZwOpenSymbolicLinkObject
IoInvalidateDeviceRelations
ObReferenceObjectByPointer
MmUnsecureVirtualMemory
MmFreeMappingAddress
RtlSubAuthoritySid
MmGetSystemRoutineAddress
RtlCompareUnicodeString
PsReturnPoolQuota
PoSetSystemState
KeInitializeSpinLock
CcPreparePinWrite
ZwEnumerateValueKey
RtlFindClearRuns
DbgPrompt
ExDeletePagedLookasideList
RtlAppendStringToString
RtlIntegerToUnicodeString
KeRemoveDeviceQueue
MmAllocateMappingAddress
MmIsVerifierEnabled
ExIsProcessorFeaturePresent
KeInitializeDpc
RtlDeleteRegistryValue
ZwAllocateVirtualMemory
ExAcquireResourceSharedLite
IoSetPartitionInformation
RtlAreBitsSet
IoWMIRegistrationControl
RtlDeleteNoSplay
IoDeleteController
PoSetPowerState
ZwOpenSection
RtlGetNextRange
KeInitializeSemaphore
SeAccessCheck
SeTokenIsAdmin
ObReleaseObjectSecurity
KeInitializeApc
ExRaiseDatatypeMisalignment
FsRtlNotifyInitializeSync
FsRtlIsDbcsInExpression
ZwQuerySymbolicLinkObject
SeImpersonateClientEx
MmSecureVirtualMemory
IoReleaseRemoveLockAndWaitEx
ZwCreateFile
KeFlushQueuedDpcs
ExReleaseResourceLite
IoSetHardErrorOrVerifyDevice
ZwWriteFile
ExFreePoolWithTag
KeSetEvent
KeRevertToUserAffinityThread
RtlSetAllBits
MmSizeOfMdl
CcSetBcbOwnerPointer
