RtlSetAllBits
ZwCreateKey
IoCreateSymbolicLink
IoCreateSynchronizationEvent
IoReportResourceForDetection
IoDeviceObjectType
MmIsThisAnNtAsSystem
PoSetSystemState
KeInitializeEvent
KeReleaseMutex
RtlSetBits
IoGetDeviceInterfaces
RtlVerifyVersionInfo
MmFreeNonCachedMemory
IoInitializeTimer
ExGetPreviousMode
PsReturnPoolQuota
IoAllocateMdl
MmGetSystemRoutineAddress
ExAllocatePoolWithQuotaTag
KeResetEvent
KeReadStateSemaphore
IoGetBootDiskInformation
IoCancelIrp
KeInitializeTimer
SeQueryInformationToken
FsRtlIsNameInExpression
FsRtlMdlWriteCompleteDev
IoRaiseHardError
ExInitializeResourceLite
RtlFindUnicodePrefix
IoGetRequestorProcessId
RtlDeleteElementGenericTable
RtlExtendedIntegerMultiply
ExSetResourceOwnerPointer
ZwOpenProcess
MmMapLockedPagesSpecifyCache
FsRtlIsFatDbcsLegal
RtlFindLongestRunClear
IoAcquireRemoveLockEx
KeRundownQueue
RtlCreateRegistryKey
IoMakeAssociatedIrp
SeOpenObjectAuditAlarm
RtlCompareMemory
RtlQueryRegistryValues
MmAdvanceMdl
KeWaitForSingleObject
FsRtlIsTotalDeviceFailure
IoSetShareAccess
IoVolumeDeviceToDosName
ZwFreeVirtualMemory
PsGetCurrentProcessId
KeRestoreFloatingPointState
ZwDeleteKey
SeTokenIsRestricted
IoVerifyPartitionTable
ZwCreateFile
KeDeregisterBugCheckCallback
MmGetPhysicalAddress
ZwPowerInformation
RtlValidSecurityDescriptor
MmSizeOfMdl
MmAllocateNonCachedMemory
ProbeForRead
ExQueueWorkItem
RtlxAnsiStringToUnicodeSize
IoFreeErrorLogEntry
RtlClearAllBits
CcIsThereDirtyData
IoDeleteDevice
RtlFillMemoryUlong
ProbeForWrite
IoGetAttachedDeviceReference
CcZeroData
RtlRemoveUnicodePrefix
RtlDelete
RtlUpcaseUnicodeString
VerSetConditionMask
IoFreeController
ExDeleteResourceLite
RtlSecondsSince1970ToTime
ZwEnumerateKey
MmFlushImageSection
RtlOemToUnicodeN
RtlUpperString
ExLocalTimeToSystemTime
KeSynchronizeExecution
RtlAppendStringToString
KeSaveFloatingPointState
KeLeaveCriticalRegion
MmSecureVirtualMemory
IofCallDriver
RtlCopyString
FsRtlCheckLockForWriteAccess
RtlCopySid
ZwSetValueKey
ZwQueryVolumeInformationFile
KeInitializeQueue
IoDisconnectInterrupt
IoAcquireVpbSpinLock
KeInitializeDpc
FsRtlSplitLargeMcb
IoSetSystemPartition
RtlSubAuthoritySid
CcMdlReadComplete
ExUnregisterCallback
KeClearEvent
KeReadStateTimer
ZwCreateEvent
ZwSetSecurityObject
KefAcquireSpinLockAtDpcLevel
CcSetFileSizes
PoCallDriver
IoCreateStreamFileObjectLite
IoReuseIrp
SeCaptureSubjectContext
KeInsertQueueDpc
CcRepinBcb
MmLockPagableDataSection
KeInsertQueue
KeUnstackDetachProcess
PsGetProcessId
RtlFreeAnsiString
IoSetTopLevelIrp
RtlEqualUnicodeString
RtlxOemStringToUnicodeSize
RtlAnsiStringToUnicodeString
RtlUnicodeStringToInteger
FsRtlFastUnlockSingle
IoDetachDevice
KdDisableDebugger
RtlCopyUnicodeString
ExSystemTimeToLocalTime
PoUnregisterSystemState
KeRemoveQueue
MmMapUserAddressesToPage
KeGetCurrentThread
IoCreateDevice
IoEnumerateDeviceObjectList
RtlUnicodeToMultiByteN
RtlFindClearRuns
FsRtlNotifyInitializeSync
IoSetPartitionInformationEx
CcSetReadAheadGranularity
SeLockSubjectContext
ObReleaseObjectSecurity
MmAllocateMappingAddress
CcMdlWriteAbort
KeInitializeDeviceQueue
ExAcquireResourceSharedLite
RtlAnsiCharToUnicodeChar
PsTerminateSystemThread
KeInitializeSemaphore
CcRemapBcb
IoAllocateAdapterChannel
IoUpdateShareAccess
ZwQueryInformationFile
ObReferenceObjectByPointer
IoReleaseVpbSpinLock
WmiQueryTraceInformation
ZwSetVolumeInformationFile
IoReleaseCancelSpinLock
KeInsertHeadQueue
MmUnmapIoSpace
IoQueueWorkItem
ObCreateObject
IoCheckQuotaBufferValidity
ExDeletePagedLookasideList
RtlTimeToSecondsSince1980
CcUnpinData
ExAllocatePoolWithTag
SeSinglePrivilegeCheck
HalExamineMBR
KeSetImportanceDpc
IoGetDeviceProperty
ZwUnloadDriver
ObMakeTemporaryObject
ExRaiseAccessViolation
IoAllocateIrp
CcCopyWrite
RtlDeleteNoSplay
MmCanFileBeTruncated
RtlInitializeBitMap
PsReferencePrimaryToken
MmUnmapLockedPages
IoInitializeRemoveLockEx
IoGetDriverObjectExtension
KePulseEvent
MmFreeMappingAddress
KeSetBasePriorityThread
IoStartPacket
KeRegisterBugCheckCallback
IoReadPartitionTableEx
RtlCheckRegistryKey
RtlRandom
FsRtlLookupLastLargeMcbEntry
ZwOpenKey
RtlInitString
SeValidSecurityDescriptor
CcUnpinDataForThread
SeAccessCheck
CcCopyRead
RtlAreBitsClear
ZwQueryKey
CcDeferWrite
RtlInt64ToUnicodeString
RtlValidSid
SeAssignSecurity
RtlFindSetBits
RtlCharToInteger
RtlUpperChar
IoCheckShareAccess
ObfDereferenceObject
ExReleaseResourceLite
SeTokenIsAdmin
KeSetPriorityThread
RtlFindLastBackwardRunClear
IoReleaseRemoveLockAndWaitEx
IoRemoveShareAccess
IoReportDetectedDevice
RtlFindClearBits
ExFreePool
IoVerifyVolume
RtlNumberOfClearBits
KeDetachProcess
ExAllocatePool
RtlNtStatusToDosError
RtlInitializeSid
ObOpenObjectByPointer
RtlTimeToSecondsSince1970
IoDeleteSymbolicLink
RtlUnicodeToOemN
IoReadDiskSignature
IoUnregisterFileSystem
RtlInitAnsiString
FsRtlFastCheckLockForRead
FsRtlGetNextFileLock
RtlHashUnicodeString
RtlGUIDFromString
RtlCreateSecurityDescriptor
KeSetTimer
SePrivilegeCheck
RtlDowncaseUnicodeString
RtlFindNextForwardRunClear
MmIsVerifierEnabled
ZwMapViewOfSection
MmMapLockedPages
RtlInsertUnicodePrefix
KeRemoveEntryDeviceQueue
MmQuerySystemSize
PsGetCurrentThread
IoIsOperationSynchronous
RtlOemStringToUnicodeString
RtlAreBitsSet
IoRequestDeviceEject
PsChargeProcessPoolQuota
RtlAddAccessAllowedAceEx
ExRegisterCallback
PsGetCurrentProcess
MmFreePagesFromMdl
RtlFindMostSignificantBit
MmSetAddressRangeModified
