IoStartTimer
RtlGUIDFromString
IoGetTopLevelIrp
IoCreateDisk
RtlUnicodeToOemN
RtlTimeFieldsToTime
RtlWriteRegistryValue
IoFreeErrorLogEntry
SeValidSecurityDescriptor
ZwQueryInformationFile
IoEnumerateDeviceObjectList
CcRemapBcb
KeInitializeDeviceQueue
IoRequestDeviceEject
RtlSetDaclSecurityDescriptor
IoDeleteController
KeInitializeSemaphore
CcCopyRead
FsRtlNotifyInitializeSync
IoSetHardErrorOrVerifyDevice
RtlCopyString
ZwDeviceIoControlFile
IoCheckQuotaBufferValidity
KeSetTimerEx
SeAccessCheck
RtlFillMemoryUlong
RtlUnicodeStringToAnsiString
ExGetExclusiveWaiterCount
FsRtlFastCheckLockForRead
IoRegisterFileSystem
KeCancelTimer
ExAllocatePool
MmSecureVirtualMemory
IoInitializeIrp
RtlTimeToTimeFields
ZwQueryVolumeInformationFile
RtlDowncaseUnicodeString
ZwClose
MmFreeMappingAddress
RtlTimeToSecondsSince1970
PsLookupThreadByThreadId
FsRtlMdlWriteCompleteDev
KeGetCurrentThread
KeSetBasePriorityThread
MmBuildMdlForNonPagedPool
IoVerifyVolume
IoSetShareAccess
KeSetTimer
IoStartNextPacket
IoWMIRegistrationControl
SeCaptureSubjectContext
ExRaiseAccessViolation
ExReinitializeResourceLite
ZwFsControlFile
PoSetSystemState
IoVerifyPartitionTable
CcIsThereDirtyData
KefAcquireSpinLockAtDpcLevel
MmUnmapIoSpace
IoThreadToProcess
IoCreateDevice
ProbeForRead
IoDeviceObjectType
KeSetEvent
MmAllocateMappingAddress
KeInitializeMutex
IoQueryFileDosDeviceName
RtlCreateSecurityDescriptor
RtlLengthRequiredSid
MmAllocatePagesForMdl
MmQuerySystemSize
ZwMapViewOfSection
MmIsAddressValid
ZwCreateEvent
IoGetDeviceObjectPointer
ZwCreateKey
IoCsqRemoveIrp
RtlEnumerateGenericTable
WmiQueryTraceInformation
ZwCreateFile
CcUnpinData
ObReferenceObjectByPointer
RtlTimeToSecondsSince1980
PoRequestPowerIrp
KeSaveFloatingPointState
IoInvalidateDeviceState
RtlDeleteRegistryValue
KeInitializeTimerEx
KeDelayExecutionThread
IoCreateSynchronizationEvent
ExSystemTimeToLocalTime
KeEnterCriticalRegion
SeImpersonateClientEx
ZwQueryKey
RtlCompareUnicodeString
RtlxUnicodeStringToAnsiSize
CcUnpinDataForThread
SeSinglePrivilegeCheck
ZwDeleteValueKey
CcFastCopyWrite
IoAllocateMdl
KeRegisterBugCheckCallback
CcFastMdlReadWait
RtlHashUnicodeString
ZwNotifyChangeKey
ExDeleteResourceLite
RtlUnicodeStringToOemString
RtlLengthSid
KeRemoveByKeyDeviceQueue
RtlDeleteElementGenericTable
ExGetSharedWaiterCount
KeInsertQueueDpc
ZwOpenSection
SeDeassignSecurity
RtlCreateRegistryKey
DbgBreakPoint
IoWritePartitionTableEx
IoAcquireCancelSpinLock
MmMapIoSpace
IoIsOperationSynchronous
KeBugCheck
ZwOpenKey
RtlMapGenericMask
VerSetConditionMask
RtlFindLongestRunClear
PsGetCurrentThread
ExLocalTimeToSystemTime
ObGetObjectSecurity
ObReleaseObjectSecurity
KeReadStateEvent
IoWriteErrorLogEntry
ExSetTimerResolution
FsRtlFastUnlockSingle
RtlIsNameLegalDOS8Dot3
KeInsertByKeyDeviceQueue
RtlInitializeUnicodePrefix
SeSetSecurityDescriptorInfo
CcPurgeCacheSection
IoCheckShareAccess
KeReadStateMutex
MmGetSystemRoutineAddress
KeInsertQueue
RtlAddAccessAllowedAceEx
ZwFreeVirtualMemory
SePrivilegeCheck
PoSetPowerState
RtlAnsiCharToUnicodeChar
PsGetCurrentThreadId
MmUnsecureVirtualMemory
HalExamineMBR
KdEnableDebugger
ZwQuerySymbolicLinkObject
ZwEnumerateKey
ZwSetSecurityObject
IoAllocateErrorLogEntry
IoSetPartitionInformation
RtlGetCallersAddress
RtlUpcaseUnicodeToOemN
ZwSetValueKey
CcMdlRead
ObOpenObjectByPointer
IoSetDeviceInterfaceState
SeQueryAuthenticationIdToken
IoStopTimer
IoGetRequestorProcessId
ObReferenceObjectByHandle
ObInsertObject
KeInitializeApc
IoFreeMdl
KeRemoveEntryDeviceQueue
MmAllocateContiguousMemory
IoSetPartitionInformationEx
IoReportResourceForDetection
RtlFindClearBitsAndSet
RtlCompareString
PsReturnPoolQuota
IoGetDeviceInterfaceAlias
MmFreePagesFromMdl
MmAllocateNonCachedMemory
IoWMIWriteEvent
KeRevertToUserAffinityThread
ObfDereferenceObject
RtlSplay
MmMapLockedPagesSpecifyCache
IoRemoveShareAccess
SeFilterToken
ExVerifySuite
ExUuidCreate
KeSetImportanceDpc
IoGetRelatedDeviceObject
IoUnregisterFileSystem
IoDisconnectInterrupt
PsChargeProcessPoolQuota
ZwAllocateVirtualMemory
IoReadPartitionTable
RtlUpcaseUnicodeString
IoCreateStreamFileObjectLite
IoQueryFileInformation
ExRaiseStatus
KeInitializeTimer
KeReadStateTimer
MmUnlockPagableImageSection
IoConnectInterrupt
FsRtlCheckLockForWriteAccess
IofCompleteRequest
IofCallDriver
IoCancelIrp
ExRaiseDatatypeMisalignment
ZwWriteFile
RtlxAnsiStringToUnicodeSize
SeTokenIsAdmin
RtlAreBitsSet
FsRtlIsDbcsInExpression
IoIsWdmVersionAvailable
RtlFindNextForwardRunClear
RtlStringFromGUID
CcMdlReadComplete
IoReuseIrp
ExAllocatePoolWithQuotaTag
RtlQueryRegistryValues
SeDeleteObjectAuditAlarm
RtlFindClearRuns
RtlValidSecurityDescriptor
KeSetKernelStackSwapEnable
PsCreateSystemThread
CcFastCopyRead
KeInitializeSpinLock
CcPreparePinWrite
MmMapUserAddressesToPage
ExGetPreviousMode
RtlFreeOemString
IoGetAttachedDeviceReference
IoAllocateIrp
KeFlushQueuedDpcs
ZwReadFile
CcGetFileObjectFromBcb
IoGetAttachedDevice
MmIsVerifierEnabled
RtlDeleteNoSplay
MmProbeAndLockProcessPages
RtlAppendStringToString
IoCreateFile
KeRundownQueue
KeSetTargetProcessorDpc
MmFlushImageSection
RtlInitAnsiString
KeReleaseSemaphore
ExSetResourceOwnerPointer
RtlFindUnicodePrefix
PsGetThreadProcessId
IoAllocateAdapterChannel
CcSetFileSizes
MmForceSectionClosed
RtlSetAllBits
CcZeroData
ExNotifyCallback
IoReleaseVpbSpinLock
FsRtlCheckLockForReadAccess
MmProbeAndLockPages
RtlUpcaseUnicodeChar
PsLookupProcessByProcessId
PsIsThreadTerminating
