IoCreateFile
PsDereferencePrimaryToken
ZwCreateKey
IoGetStackLimits
ZwDeviceIoControlFile
CcSetDirtyPinnedData
IoCreateStreamFileObjectLite
IoGetCurrentProcess
RtlMapGenericMask
CcZeroData
SeAccessCheck
ExAllocatePool
IoAllocateMdl
IoReportDetectedDevice
KeSetTargetProcessorDpc
SePrivilegeCheck
MmAdvanceMdl
MmLockPagableDataSection
HalExamineMBR
CcUnpinData
RtlFreeUnicodeString
ZwQueryValueKey
KeInsertDeviceQueue
MmFreeNonCachedMemory
RtlGetNextRange
ExGetPreviousMode
IoSetHardErrorOrVerifyDevice
MmUnmapReservedMapping
PsSetLoadImageNotifyRoutine
ZwFsControlFile
RtlSecondsSince1970ToTime
FsRtlSplitLargeMcb
IoBuildSynchronousFsdRequest
IoRemoveShareAccess
IoGetTopLevelIrp
RtlTimeToTimeFields
IoGetDeviceToVerify
CcMdlReadComplete
RtlAnsiCharToUnicodeChar
ZwQueryKey
ZwQueryObject
RtlIntegerToUnicodeString
IoGetAttachedDeviceReference
ZwFreeVirtualMemory
RtlTimeToSecondsSince1980
KeEnterCriticalRegion
MmFlushImageSection
RtlCompareMemory
RtlClearAllBits
ExReinitializeResourceLite
ExFreePool
ZwWriteFile
RtlQueryRegistryValues
RtlOemStringToUnicodeString
PsChargeProcessPoolQuota
RtlCopyUnicodeString
FsRtlMdlWriteCompleteDev
FsRtlLookupLastLargeMcbEntry
RtlEqualString
MmForceSectionClosed
IoIsWdmVersionAvailable
KeRemoveQueueDpc
ExRaiseAccessViolation
FsRtlNotifyUninitializeSync
CcUnpinDataForThread
KeSetEvent
IoGetDeviceInterfaceAlias
MmResetDriverPaging
PsRevertToSelf
KeUnstackDetachProcess
CcFastMdlReadWait
RtlUnicodeToMultiByteN
RtlUpperString
SeQueryInformationToken
ExGetSharedWaiterCount
MmIsThisAnNtAsSystem
RtlWriteRegistryValue
IoCreateSymbolicLink
IoGetBootDiskInformation
IoDeviceObjectType
IoCancelIrp
RtlInitString
PoSetSystemState
RtlEqualUnicodeString
CcPinMappedData
MmSecureVirtualMemory
RtlRemoveUnicodePrefix
IoUnregisterFileSystem
ExAcquireFastMutexUnsafe
KeInitializeDeviceQueue
IoGetDriverObjectExtension
IoReleaseVpbSpinLock
IoSetDeviceToVerify
ExRaiseStatus
IoIsSystemThread
PoRegisterSystemState
KeQueryInterruptTime
RtlFindLastBackwardRunClear
ZwOpenSymbolicLinkObject
IoRegisterFileSystem
RtlUnicodeStringToAnsiString
KeSetImportanceDpc
IoGetLowerDeviceObject
SeValidSecurityDescriptor
MmIsAddressValid
IoSetTopLevelIrp
RtlxUnicodeStringToAnsiSize
CcPinRead
RtlTimeToSecondsSince1970
IoCreateDisk
ExQueueWorkItem
IoAllocateWorkItem
KeRemoveEntryDeviceQueue
MmAllocateMappingAddress
RtlFillMemoryUlong
MmBuildMdlForNonPagedPool
KeSynchronizeExecution
KeReadStateEvent
RtlLengthRequiredSid
KeQueryTimeIncrement
MmGetPhysicalAddress
ExAllocatePoolWithQuotaTag
IofCompleteRequest
KeWaitForMultipleObjects
IoGetRequestorProcess
ExDeleteNPagedLookasideList
WmiQueryTraceInformation
IoInitializeRemoveLockEx
IoGetDeviceInterfaces
KdEnableDebugger
IoRaiseHardError
RtlAreBitsSet
RtlLengthSid
FsRtlIsNameInExpression
SeLockSubjectContext
ZwEnumerateKey
PsGetVersion
ExAcquireResourceSharedLite
RtlCopySid
RtlUnicodeStringToInteger
MmIsDriverVerifying
CcMapData
RtlFindClearBitsAndSet
ObQueryNameString
RtlFindLongestRunClear
ExDeletePagedLookasideList
IoConnectInterrupt
KeClearEvent
KefAcquireSpinLockAtDpcLevel
ZwNotifyChangeKey
RtlSetAllBits
SeFreePrivileges
ExIsProcessorFeaturePresent
RtlSetDaclSecurityDescriptor
FsRtlIsHpfsDbcsLegal
KeSetKernelStackSwapEnable
MmUnmapIoSpace
IoCheckQuotaBufferValidity
PsTerminateSystemThread
RtlDowncaseUnicodeString
RtlValidSecurityDescriptor
ZwSetVolumeInformationFile
RtlEqualSid
CcFlushCache
IoGetAttachedDevice
IoAcquireCancelSpinLock
PsLookupThreadByThreadId
DbgBreakPoint
MmMapUserAddressesToPage
IoAllocateController
IoSetSystemPartition
RtlClearBits
IoWMIWriteEvent
IoSetStartIoAttributes
ObCreateObject
IoDeleteSymbolicLink
RtlAddAccessAllowedAceEx
SeSetSecurityDescriptorInfo
IoCsqRemoveIrp
IoReadPartitionTableEx
MmFreeMappingAddress
IoFreeMdl
IoSetDeviceInterfaceState
ZwQueryVolumeInformationFile
RtlInitializeGenericTable
CcMdlRead
ObMakeTemporaryObject
IoDeleteDevice
IoCreateStreamFileObject
PoRequestPowerIrp
IoStartPacket
RtlCreateUnicodeString
RtlMultiByteToUnicodeN
MmMapLockedPages
ExUuidCreate
ExReleaseResourceLite
ProbeForWrite
IoCreateSynchronizationEvent
IoWMIRegistrationControl
DbgBreakPointWithStatus
PsCreateSystemThread
PoUnregisterSystemState
ExInitializeResourceLite
PsReturnPoolQuota
PsGetProcessId
MmAllocatePagesForMdl
ObOpenObjectByPointer
PsIsThreadTerminating
RtlVerifyVersionInfo
IoOpenDeviceRegistryKey
VerSetConditionMask
PoSetPowerState
RtlSplay
ZwUnloadDriver
PsGetThreadProcessId
IoFreeErrorLogEntry
PoStartNextPowerIrp
KeRestoreFloatingPointState
KeCancelTimer
IoRegisterDeviceInterface
KeGetCurrentThread
PsImpersonateClient
SeUnlockSubjectContext
SeTokenIsRestricted
RtlCopyString
IoGetDeviceAttachmentBaseRef
IoQueryFileInformation
SeCreateClientSecurity
RtlCheckRegistryKey
ZwQuerySymbolicLinkObject
RtlUpcaseUnicodeToOemN
IoVerifyVolume
KeRemoveByKeyDeviceQueue
RtlFreeAnsiString
IoGetRelatedDeviceObject
MmSetAddressRangeModified
CcRepinBcb
ExLocalTimeToSystemTime
RtlCompareString
RtlCreateSecurityDescriptor
RtlInitAnsiString
CcFastCopyWrite
FsRtlFastCheckLockForRead
DbgPrompt
RtlAddAccessAllowedAce
IoDeleteController
SeAppendPrivileges
PsGetCurrentThreadId
KeInitializeSpinLock
IoCheckShareAccess
CcCopyRead
ZwCreateFile
CcPurgeCacheSection
KeQueryActiveProcessors
RtlPrefixUnicodeString
IoFreeWorkItem
CcGetFileObjectFromBcb
KeLeaveCriticalRegion
CcCanIWrite
MmUnlockPages
FsRtlIsDbcsInExpression
ObfReferenceObject
IoBuildPartialMdl
