ZwQueryVolumeInformationFile
RtlClearAllBits
SeLockSubjectContext
KeInitializeTimer
RtlFindClearRuns
ZwSetValueKey
ExRaiseAccessViolation
KeDeregisterBugCheckCallback
FsRtlFastUnlockSingle
PsGetVersion
IoThreadToProcess
ExLocalTimeToSystemTime
RtlUnicodeToOemN
RtlCreateRegistryKey
CcGetFileObjectFromBcb
KeInitializeDpc
MmProbeAndLockPages
IoWMIWriteEvent
MmFreeMappingAddress
IoVerifyVolume
ExIsProcessorFeaturePresent
KeRevertToUserAffinityThread
RtlAppendUnicodeToString
ZwQueryValueKey
MmFlushImageSection
IoGetDeviceInterfaces
IoRaiseHardError
CcMdlRead
CcMapData
IoCheckEaBufferValidity
KeClearEvent
IoQueryFileInformation
RtlSetDaclSecurityDescriptor
ExSetResourceOwnerPointer
IoReleaseRemoveLockAndWaitEx
RtlDeleteElementGenericTable
CcPreparePinWrite
IoDeviceObjectType
MmAllocateNonCachedMemory
MmAddVerifierThunks
ExDeletePagedLookasideList
SePrivilegeCheck
IoIsWdmVersionAvailable
KeSetTargetProcessorDpc
IoFreeController
ObOpenObjectByPointer
MmMapLockedPagesSpecifyCache
RtlCharToInteger
KeGetCurrentThread
ZwClose
MmAllocateMappingAddress
PsReferencePrimaryToken
KeRemoveQueue
IoGetDeviceProperty
RtlIsNameLegalDOS8Dot3
RtlAppendStringToString
DbgBreakPoint
MmIsThisAnNtAsSystem
RtlUpperString
MmUnmapIoSpace
SeFreePrivileges
ZwAllocateVirtualMemory
VerSetConditionMask
SeTokenIsRestricted
RtlFindLastBackwardRunClear
KdDisableDebugger
RtlCreateSecurityDescriptor
MmQuerySystemSize
CcIsThereDirtyData
RtlAreBitsSet
DbgBreakPointWithStatus
RtlHashUnicodeString
RtlInitAnsiString
ExNotifyCallback
RtlDowncaseUnicodeString
MmFreeContiguousMemory
MmUnlockPagableImageSection
IoReuseIrp
PsChargeProcessPoolQuota
RtlValidSecurityDescriptor
RtlCopyLuid
IoQueueWorkItem
IoReleaseRemoveLockEx
IoCreateStreamFileObjectLite
MmUnmapReservedMapping
ZwUnloadDriver
ExCreateCallback
RtlUpperChar
IoGetDeviceInterfaceAlias
FsRtlNotifyUninitializeSync
RtlDelete
MmSecureVirtualMemory
IoFreeIrp
ZwOpenProcess
ObQueryNameString
RtlCopyString
IoCreateDevice
IoCreateFile
IoGetRequestorProcessId
IoIsOperationSynchronous
IoCreateStreamFileObject
SeOpenObjectAuditAlarm
IoOpenDeviceRegistryKey
ObMakeTemporaryObject
KeDetachProcess
IoGetDiskDeviceObject
KeLeaveCriticalRegion
RtlGUIDFromString
SeQueryInformationToken
ExReinitializeResourceLite
MmIsDriverVerifying
CcSetReadAheadGranularity
RtlWriteRegistryValue
RtlFreeOemString
IoGetAttachedDevice
PoUnregisterSystemState
RtlGetVersion
ExAllocatePoolWithQuotaTag
PoRequestPowerIrp
IoGetRelatedDeviceObject
CcZeroData
IoCreateDisk
RtlDeleteNoSplay
ZwOpenSection
RtlAnsiCharToUnicodeChar
RtlRandom
IoFreeWorkItem
PoRegisterSystemState
RtlEqualString
RtlFindNextForwardRunClear
MmIsVerifierEnabled
ExSetTimerResolution
RtlSetAllBits
SeCaptureSubjectContext
PsGetCurrentThread
RtlxAnsiStringToUnicodeSize
KeRemoveEntryDeviceQueue
RtlCompareMemory
IoFreeErrorLogEntry
MmLockPagableDataSection
ZwQueryKey
ZwSetSecurityObject
KeSaveFloatingPointState
PsLookupProcessByProcessId
ZwOpenKey
RtlxUnicodeStringToAnsiSize
IoUnregisterFileSystem
IoWriteErrorLogEntry
IoGetDeviceToVerify
FsRtlNotifyInitializeSync
IoGetStackLimits
FsRtlAllocateFileLock
KeFlushQueuedDpcs
MmProbeAndLockProcessPages
KefAcquireSpinLockAtDpcLevel
KeBugCheckEx
RtlMapGenericMask
ExSystemTimeToLocalTime
RtlFillMemoryUlong
IoInvalidateDeviceRelations
ZwCreateFile
KeInitializeEvent
SeAccessCheck
SeValidSecurityDescriptor
IoAllocateErrorLogEntry
RtlAddAccessAllowedAce
CcMdlWriteAbort
MmLockPagableSectionByHandle
ExRaiseDatatypeMisalignment
RtlSubAuthoritySid
RtlUpcaseUnicodeChar
CcFastCopyRead
RtlInitString
CcUnpinRepinnedBcb
RtlVerifyVersionInfo
RtlExtendedIntegerMultiply
MmMapUserAddressesToPage
RtlInitializeBitMap
IoGetTopLevelIrp
IoGetDmaAdapter
MmGetSystemRoutineAddress
PsReturnPoolQuota
RtlCompareUnicodeString
RtlTimeToSecondsSince1970
ZwDeviceIoControlFile
SeSetSecurityDescriptorInfo
MmAllocatePagesForMdl
IoEnumerateDeviceObjectList
RtlCompareString
CcPurgeCacheSection
IoSetSystemPartition
RtlInitializeUnicodePrefix
RtlUnicodeStringToAnsiString
ExAllocatePoolWithQuota
RtlEqualUnicodeString
PsSetLoadImageNotifyRoutine
RtlValidSid
SeAppendPrivileges
ExUnregisterCallback
IoReadPartitionTable
IoGetRequestorProcess
CcCopyWrite
ExReleaseResourceLite
IoSetPartitionInformationEx
MmUnlockPages
KeSetBasePriorityThread
SeTokenIsAdmin
ExAllocatePool
KeQueryActiveProcessors
MmPageEntireDriver
RtlStringFromGUID
RtlFreeAnsiString
KeSetKernelStackSwapEnable
PsImpersonateClient
ZwFlushKey
CcDeferWrite
IoSetHardErrorOrVerifyDevice
KeReadStateSemaphore
IoConnectInterrupt
IoAllocateIrp
IoDeleteSymbolicLink
ZwFsControlFile
CcRepinBcb
CcUnpinData
RtlUnicodeStringToInteger
IoSetThreadHardErrorMode
KeInitializeSpinLock
KeInsertDeviceQueue
IoReadPartitionTableEx
RtlSetBits
FsRtlFreeFileLock
SeUnlockSubjectContext
ZwOpenFile
IoRegisterFileSystem
IoAcquireVpbSpinLock
ExVerifySuite
IoSetTopLevelIrp
RtlLengthRequiredSid
IoBuildPartialMdl
IoRegisterDeviceInterface
ExFreePool
RtlFindClearBits
IoGetLowerDeviceObject
RtlEqualSid
RtlPrefixUnicodeString
KeWaitForSingleObject
CcMdlReadComplete
MmBuildMdlForNonPagedPool
KeInitializeQueue
IoSetDeviceInterfaceState
ZwLoadDriver
KeInitializeApc
DbgPrompt
IoAllocateAdapterChannel
KePulseEvent
RtlSecondsSince1970ToTime
IoDeleteDevice
IoCheckShareAccess
ObReferenceObjectByPointer
RtlClearBits
ZwMapViewOfSection
FsRtlCheckLockForReadAccess
RtlDeleteRegistryValue
ObInsertObject
