CcFastCopyRead
ZwSetSecurityObject
ExCreateCallback
CcSetFileSizes
RtlDeleteRegistryValue
KeInsertByKeyDeviceQueue
MmSizeOfMdl
IoVerifyVolume
IoGetDeviceAttachmentBaseRef
IoOpenDeviceRegistryKey
MmBuildMdlForNonPagedPool
IoMakeAssociatedIrp
RtlFreeAnsiString
ZwReadFile
IoGetBootDiskInformation
PoUnregisterSystemState
KeReadStateMutex
KeRemoveQueue
IoReportDetectedDevice
RtlFindLongestRunClear
MmUnmapLockedPages
RtlGenerate8dot3Name
IoGetDeviceInterfaces
RtlCheckRegistryKey
IoInitializeIrp
MmUnmapIoSpace
RtlUnicodeStringToAnsiString
IoInitializeRemoveLockEx
SeOpenObjectAuditAlarm
RtlLengthRequiredSid
IoInvalidateDeviceState
IoGetStackLimits
ObReleaseObjectSecurity
ObMakeTemporaryObject
ExLocalTimeToSystemTime
MmProbeAndLockProcessPages
IoStartNextPacket
RtlAppendUnicodeToString
FsRtlAllocateFileLock
IoSetThreadHardErrorMode
KeInsertQueue
IoCreateDisk
RtlAnsiStringToUnicodeString
RtlGUIDFromString
IoAcquireVpbSpinLock
ZwDeleteKey
KeDeregisterBugCheckCallback
PsGetThreadProcessId
CcCopyWrite
ProbeForRead
ExUuidCreate
RtlInitializeGenericTable
MmFreeNonCachedMemory
PoSetPowerState
FsRtlIsDbcsInExpression
IoAllocateWorkItem
RtlUpperChar
MmProbeAndLockPages
IoCreateStreamFileObjectLite
CcUnpinRepinnedBcb
IoEnumerateDeviceObjectList
KeInsertQueueDpc
KeBugCheckEx
KeInitializeDeviceQueue
RtlInitString
IoAcquireRemoveLockEx
ZwNotifyChangeKey
RtlStringFromGUID
SeFreePrivileges
SeDeassignSecurity
IoGetDmaAdapter
IoRequestDeviceEject
CcCanIWrite
IoReleaseCancelSpinLock
KeBugCheck
IoVolumeDeviceToDosName
ZwOpenProcess
ZwQueryObject
RtlDeleteElementGenericTable
IoCheckEaBufferValidity
IoCheckShareAccess
RtlCompareUnicodeString
IoWMIWriteEvent
KeInitializeQueue
RtlFindLeastSignificantBit
MmMapLockedPages
RtlFreeOemString
MmSetAddressRangeModified
ZwCreateFile
RtlFindUnicodePrefix
CcRepinBcb
MmLockPagableSectionByHandle
CcIsThereDirtyData
KeReleaseMutex
KeSetPriorityThread
RtlxUnicodeStringToAnsiSize
PoRegisterSystemState
IoWritePartitionTableEx
MmFlushImageSection
IoGetRequestorProcessId
KeRestoreFloatingPointState
IoRaiseHardError
ExReleaseResourceLite
RtlNtStatusToDosError
KeRevertToUserAffinityThread
KeInsertHeadQueue
IoIsOperationSynchronous
RtlEqualString
IoGetDeviceObjectPointer
IoAllocateIrp
RtlInitUnicodeString
ObReferenceObjectByHandle
RtlCreateRegistryKey
RtlUpcaseUnicodeToOemN
ObfDereferenceObject
RtlCopyString
CcPurgeCacheSection
RtlUnicodeStringToInteger
SeReleaseSubjectContext
RtlClearBits
RtlWriteRegistryValue
IoDeleteController
RtlLengthSecurityDescriptor
RtlTimeToSecondsSince1980
ObInsertObject
PsGetCurrentProcessId
PoSetSystemState
PsIsThreadTerminating
ExAllocatePoolWithQuotaTag
ZwQueryKey
RtlCharToInteger
DbgBreakPointWithStatus
IoGetTopLevelIrp
PsDereferencePrimaryToken
MmAllocateMappingAddress
RtlDelete
PoRequestPowerIrp
IoStopTimer
MmForceSectionClosed
RtlFindLastBackwardRunClear
ExAcquireResourceSharedLite
PsGetProcessId
RtlInitializeUnicodePrefix
RtlVerifyVersionInfo
IoFreeIrp
KeSetTargetProcessorDpc
ObCreateObject
IoCreateFile
CcMdlWriteComplete
ExSystemTimeToLocalTime
KeLeaveCriticalRegion
RtlFindNextForwardRunClear
KeDetachProcess
MmUnlockPagableImageSection
SeSetSecurityDescriptorInfo
MmIsVerifierEnabled
RtlTimeToSecondsSince1970
SePrivilegeCheck
CcCopyRead
MmHighestUserAddress
KeRemoveEntryDeviceQueue
KdEnableDebugger
MmUnlockPages
CcUninitializeCacheMap
FsRtlIsTotalDeviceFailure
ZwOpenKey
RtlValidSecurityDescriptor
FsRtlCheckOplock
MmCanFileBeTruncated
MmUnmapReservedMapping
IoWriteErrorLogEntry
RtlNumberOfClearBits
RtlVolumeDeviceToDosName
IoGetLowerDeviceObject
CcFastMdlReadWait
RtlUpcaseUnicodeString
RtlAddAccessAllowedAce
ZwPowerInformation
PoCallDriver
SeQueryAuthenticationIdToken
IoReleaseVpbSpinLock
RtlQueryRegistryValues
SeSinglePrivilegeCheck
ExGetSharedWaiterCount
ZwOpenSection
IoQueryDeviceDescription
KeGetCurrentThread
IoDeleteDevice
CcUnpinData
ExNotifyCallback
ExVerifySuite
SeTokenIsAdmin
ExAcquireFastMutexUnsafe
SeLockSubjectContext
CcMdlRead
ExSetResourceOwnerPointer
CcSetBcbOwnerPointer
IoQueryFileDosDeviceName
KeUnstackDetachProcess
KeRemoveDeviceQueue
KeAttachProcess
MmAllocateNonCachedMemory
IoCreateSymbolicLink
IoSetDeviceToVerify
KeRemoveQueueDpc
IoCreateStreamFileObject
CcZeroData
IoUnregisterFileSystem
RtlxOemStringToUnicodeSize
KeInitializeMutex
RtlFindClearBitsAndSet
ExReinitializeResourceLite
MmIsThisAnNtAsSystem
ZwUnloadDriver
FsRtlFastCheckLockForRead
RtlEqualUnicodeString
IoGetDiskDeviceObject
MmAdvanceMdl
IoGetCurrentProcess
RtlCreateAcl
ExInitializeResourceLite
RtlFindClearBits
RtlDeleteNoSplay
IoReadPartitionTable
MmResetDriverPaging
PsImpersonateClient
KeSetImportanceDpc
ExReleaseFastMutexUnsafe
RtlAddAccessAllowedAceEx
ZwFreeVirtualMemory
PsGetVersion
KeCancelTimer
FsRtlMdlWriteCompleteDev
RtlMultiByteToUnicodeN
ExDeleteResourceLite
RtlFreeUnicodeString
CcUnpinDataForThread
IoAllocateErrorLogEntry
PsGetProcessExitTime
KeSetTimerEx
MmFreeContiguousMemory
IoQueryFileInformation
RtlInitAnsiString
IoRegisterDeviceInterface
CcSetReadAheadGranularity
RtlFillMemoryUlong
MmUnsecureVirtualMemory
ZwQueryValueKey
KeSaveFloatingPointState
DbgBreakPoint
PsLookupProcessByProcessId
IoGetDeviceToVerify
IoFreeMdl
ObGetObjectSecurity
PsTerminateSystemThread
RtlRemoveUnicodePrefix
ZwWriteFile
RtlGetNextRange
RtlFindMostSignificantBit
WmiQueryTraceInformation
RtlCreateSecurityDescriptor
