CcCopyRead
MmAdvanceMdl
IoReportResourceForDetection
IoFreeWorkItem
SeTokenIsRestricted
MmUnmapReservedMapping
MmSecureVirtualMemory
KeRevertToUserAffinityThread
ZwReadFile
CcUninitializeCacheMap
ObfDereferenceObject
MmIsThisAnNtAsSystem
FsRtlFastUnlockSingle
RtlCopyLuid
KeSynchronizeExecution
IoCreateNotificationEvent
ZwOpenSymbolicLinkObject
IoAllocateMdl
IoWriteErrorLogEntry
MmMapLockedPagesSpecifyCache
RtlUpperString
ZwPowerInformation
CcCanIWrite
PsReferencePrimaryToken
ZwUnloadDriver
IoInitializeRemoveLockEx
IoFreeController
IoVerifyPartitionTable
ExQueueWorkItem
ZwSetVolumeInformationFile
ZwCreateKey
ZwDeleteKey
RtlStringFromGUID
RtlTimeToSecondsSince1970
ZwDeviceIoControlFile
CcInitializeCacheMap
IoGetDiskDeviceObject
RtlGetCallersAddress
IoSetTopLevelIrp
KeQueryActiveProcessors
RtlEqualString
FsRtlNotifyUninitializeSync
IoReadPartitionTable
CcPinMappedData
KeBugCheckEx
RtlUnicodeStringToOemString
ZwOpenKey
IoCheckEaBufferValidity
RtlInt64ToUnicodeString
KeSetKernelStackSwapEnable
IoAcquireCancelSpinLock
RtlLengthSecurityDescriptor
RtlEqualSid
DbgBreakPointWithStatus
ZwQueryValueKey
IoSetPartitionInformation
ExLocalTimeToSystemTime
RtlNumberOfClearBits
IoInvalidateDeviceRelations
RtlGetVersion
KeRemoveQueueDpc
RtlMapGenericMask
RtlCreateUnicodeString
FsRtlIsDbcsInExpression
CcSetBcbOwnerPointer
RtlFindMostSignificantBit
IoGetDeviceInterfaceAlias
PsGetCurrentProcessId
ZwEnumerateValueKey
MmAllocatePagesForMdl
IoAllocateAdapterChannel
IoUpdateShareAccess
IoCreateStreamFileObject
SeQueryAuthenticationIdToken
RtlCreateRegistryKey
IoSetStartIoAttributes
KdDisableDebugger
KeReadStateEvent
IofCompleteRequest
ZwMapViewOfSection
ExRaiseAccessViolation
ExIsProcessorFeaturePresent
KeGetCurrentThread
IoReleaseRemoveLockEx
FsRtlNotifyInitializeSync
ExCreateCallback
IoVolumeDeviceToDosName
IoReleaseCancelSpinLock
ObQueryNameString
KeQueryInterruptTime
RtlFindLastBackwardRunClear
IoRemoveShareAccess
KeReleaseSemaphore
ExInitializeResourceLite
IoReadPartitionTableEx
ObOpenObjectByPointer
SeSinglePrivilegeCheck
RtlTimeFieldsToTime
RtlGetNextRange
RtlDeleteNoSplay
RtlFreeUnicodeString
RtlInitAnsiString
RtlGenerate8dot3Name
KeWaitForMultipleObjects
IoAcquireRemoveLockEx
ZwOpenSection
RtlNtStatusToDosError
RtlCopyString
ExVerifySuite
RtlDowncaseUnicodeString
IoGetDmaAdapter
RtlVolumeDeviceToDosName
RtlAreBitsSet
RtlQueryRegistryValues
RtlRandom
KePulseEvent
RtlInitUnicodeString
IoGetAttachedDeviceReference
MmGetPhysicalAddress
RtlFindLeastSignificantBit
CcSetFileSizes
FsRtlIsTotalDeviceFailure
ObReferenceObjectByHandle
MmBuildMdlForNonPagedPool
ExFreePool
ExAllocatePoolWithQuota
KeRundownQueue
RtlValidSecurityDescriptor
RtlFreeAnsiString
IoUnregisterFileSystem
IoReadDiskSignature
RtlFindClearRuns
MmUnlockPages
PoSetPowerState
KeClearEvent
MmIsVerifierEnabled
RtlUnicodeToOemN
IoBuildSynchronousFsdRequest
RtlCompareString
FsRtlMdlWriteCompleteDev
IoSetPartitionInformationEx
PsGetProcessId
MmUnmapLockedPages
CcCopyWrite
IoGetRequestorProcessId
IoSetShareAccess
ZwSetValueKey
CcSetDirtyPinnedData
IoReuseIrp
RtlPrefixUnicodeString
CcFlushCache
CcGetFileObjectFromBcb
KeInsertQueueDpc
ExGetSharedWaiterCount
IoGetDeviceInterfaces
SeCaptureSubjectContext
RtlLengthRequiredSid
ObReleaseObjectSecurity
ExDeletePagedLookasideList
IoWMIWriteEvent
SeReleaseSubjectContext
MmMapLockedPages
KeInitializeSemaphore
RtlGUIDFromString
MmFreeContiguousMemory
MmProbeAndLockPages
RtlAddAccessAllowedAce
IoGetTopLevelIrp
RtlUnicodeStringToAnsiString
CcMdlRead
CcMdlWriteAbort
ExGetPreviousMode
KeInitializeMutex
MmResetDriverPaging
RtlCompareUnicodeString
MmIsDriverVerifying
IoGetRequestorProcess
PoCallDriver
RtlFindNextForwardRunClear
RtlxOemStringToUnicodeSize
IoCheckShareAccess
KeSetImportanceDpc
RtlFreeOemString
MmGetSystemRoutineAddress
RtlHashUnicodeString
IoCreateFile
DbgPrompt
IoConnectInterrupt
SeValidSecurityDescriptor
KeRemoveEntryDeviceQueue
IoSetSystemPartition
ZwCreateSection
RtlSubAuthoritySid
CcUnpinData
ZwNotifyChangeKey
IoGetLowerDeviceObject
ExSetResourceOwnerPointer
MmAllocateNonCachedMemory
MmMapIoSpace
ExAllocatePool
IoCsqRemoveIrp
ExSetTimerResolution
KeUnstackDetachProcess
ZwQueryInformationFile
PsReturnPoolQuota
ExGetExclusiveWaiterCount
MmForceSectionClosed
KeSetTimerEx
IoGetDeviceAttachmentBaseRef
RtlTimeToTimeFields
KeStackAttachProcess
RtlFindSetBits
ExDeleteNPagedLookasideList
RtlFillMemoryUlong
RtlSetBits
ZwMakeTemporaryObject
IoQueryFileDosDeviceName
MmLockPagableSectionByHandle
VerSetConditionMask
RtlxAnsiStringToUnicodeSize
IoSetThreadHardErrorMode
RtlInsertUnicodePrefix
ExDeleteResourceLite
IoAllocateWorkItem
MmPageEntireDriver
IoCreateDevice
FsRtlIsHpfsDbcsLegal
ZwFreeVirtualMemory
DbgBreakPoint
IoStartTimer
MmMapUserAddressesToPage
IoDeleteDevice
RtlLengthSid
RtlAnsiStringToUnicodeString
SeOpenObjectAuditAlarm
RtlFindUnicodePrefix
RtlIntegerToUnicodeString
IoSetHardErrorOrVerifyDevice
MmQuerySystemSize
PsDereferencePrimaryToken
PoStartNextPowerIrp
RtlCopySid
PsChargeProcessPoolQuota
ZwSetSecurityObject
ExReinitializeResourceLite
KeLeaveCriticalRegion
RtlInitializeSid
WmiQueryTraceInformation
FsRtlDeregisterUncProvider
ZwWriteFile
PsGetThreadProcessId
KeInsertByKeyDeviceQueue
ZwEnumerateKey
IoCheckQuotaBufferValidity
FsRtlIsFatDbcsLegal
SeAssignSecurity
RtlCopyUnicodeString
MmFreeMappingAddress
MmUnsecureVirtualMemory
ExSystemTimeToLocalTime
IoIsOperationSynchronous
