FsRtlCheckLockForReadAccess
KeAttachProcess
IoUnregisterFileSystem
IoCheckQuotaBufferValidity
ZwFsControlFile
KePulseEvent
ZwQueryVolumeInformationFile
IoQueryFileDosDeviceName
IoGetDeviceAttachmentBaseRef
CcInitializeCacheMap
RtlInt64ToUnicodeString
ZwFreeVirtualMemory
CcSetFileSizes
RtlCreateRegistryKey
IoReleaseCancelSpinLock
KeWaitForSingleObject
RtlAppendUnicodeToString
MmHighestUserAddress
IoThreadToProcess
RtlSecondsSince1970ToTime
ZwSetSecurityObject
MmAllocateMappingAddress
RtlPrefixUnicodeString
FsRtlSplitLargeMcb
FsRtlNotifyInitializeSync
IoCreateNotificationEvent
ObfDereferenceObject
IoCreateSymbolicLink
IoGetDeviceProperty
MmBuildMdlForNonPagedPool
RtlCopyUnicodeString
IoGetDriverObjectExtension
IoReleaseRemoveLockAndWaitEx
ZwNotifyChangeKey
ExRegisterCallback
PsImpersonateClient
FsRtlDeregisterUncProvider
IoReportDetectedDevice
KeBugCheck
FsRtlIsTotalDeviceFailure
MmUnsecureVirtualMemory
ObfReferenceObject
ExSystemTimeToLocalTime
IoCreateDevice
IoGetTopLevelIrp
KeQueryTimeIncrement
KeQueryInterruptTime
IoSetTopLevelIrp
DbgBreakPoint
KeRemoveQueue
ZwPowerInformation
PsGetCurrentProcess
IoStopTimer
RtlEqualString
IoDisconnectInterrupt
IoAcquireRemoveLockEx
IoAcquireCancelSpinLock
RtlMapGenericMask
IoReuseIrp
RtlCharToInteger
RtlAddAccessAllowedAce
RtlLengthSecurityDescriptor
ZwDeleteValueKey
ZwMakeTemporaryObject
IoSetDeviceToVerify
IoCreateSynchronizationEvent
CcZeroData
FsRtlNotifyUninitializeSync
PoCallDriver
ZwLoadDriver
ZwQueryObject
IoAllocateAdapterChannel
RtlFindClearRuns
ZwOpenSection
SeAccessCheck
CcPinMappedData
CcUninitializeCacheMap
PsTerminateSystemThread
IoGetDeviceToVerify
SeTokenIsAdmin
IoGetDiskDeviceObject
FsRtlMdlWriteCompleteDev
CcPinRead
KeRemoveEntryDeviceQueue
KeRemoveDeviceQueue
RtlSetAllBits
ExLocalTimeToSystemTime
ExUuidCreate
PsChargeProcessPoolQuota
MmMapIoSpace
SeCreateClientSecurity
IoFreeController
IoFreeWorkItem
SeFreePrivileges
ExReleaseFastMutexUnsafe
RtlFreeUnicodeString
ExQueueWorkItem
IoRegisterFileSystem
RtlFreeOemString
ZwMapViewOfSection
VerSetConditionMask
KeStackAttachProcess
ZwQuerySymbolicLinkObject
PsReturnPoolQuota
MmAddVerifierThunks
IoRaiseHardError
MmAllocatePagesForMdl
KeInitializeEvent
CcFlushCache
SeQueryInformationToken
KefAcquireSpinLockAtDpcLevel
MmMapUserAddressesToPage
RtlAddAccessAllowedAceEx
KeSaveFloatingPointState
RtlFindLeastSignificantBit
ExAllocatePoolWithQuotaTag
RtlCreateAcl
RtlSubAuthoritySid
ZwDeleteKey
KeInitializeDpc
IoQueryFileInformation
IoIsWdmVersionAvailable
ZwOpenSymbolicLinkObject
KdDisableDebugger
RtlUpperChar
ExAllocatePoolWithQuota
KeSetKernelStackSwapEnable
SeDeassignSecurity
CcCopyRead
PoSetSystemState
IoAllocateMdl
MmIsVerifierEnabled
RtlUpperString
ProbeForRead
CcSetReadAheadGranularity
CcUnpinDataForThread
RtlInitAnsiString
ZwFlushKey
RtlAreBitsClear
IoCreateStreamFileObjectLite
ExVerifySuite
ZwUnloadDriver
KeSetBasePriorityThread
KeInitializeTimerEx
RtlDeleteRegistryValue
KeSetImportanceDpc
CcFastCopyRead
IoGetDeviceInterfaceAlias
PsGetProcessExitTime
IoGetRequestorProcessId
IoOpenDeviceRegistryKey
ZwCreateDirectoryObject
RtlDowncaseUnicodeString
RtlFindLastBackwardRunClear
ZwOpenKey
SeTokenIsRestricted
RtlCopySid
MmUnmapReservedMapping
PoUnregisterSystemState
RtlMultiByteToUnicodeN
CcCopyWrite
PsGetThreadProcessId
IoDeleteController
ExCreateCallback
ZwWriteFile
RtlTimeFieldsToTime
KeGetCurrentThread
IoGetDeviceInterfaces
IoReleaseVpbSpinLock
IoRequestDeviceEject
ExDeleteNPagedLookasideList
FsRtlGetNextFileLock
KeSetSystemAffinityThread
MmAdvanceMdl
IoReleaseRemoveLockEx
IoRegisterDeviceInterface
IoGetBootDiskInformation
RtlSetDaclSecurityDescriptor
CcIsThereDirtyData
KeInsertQueue
ZwQueryValueKey
CcFastCopyWrite
ZwReadFile
MmUnmapLockedPages
KeCancelTimer
MmProbeAndLockProcessPages
ObQueryNameString
ObReferenceObjectByPointer
KeFlushQueuedDpcs
KeInitializeSemaphore
IoGetStackLimits
RtlUpcaseUnicodeToOemN
RtlStringFromGUID
KeReadStateSemaphore
FsRtlIsHpfsDbcsLegal
IoAcquireVpbSpinLock
RtlCheckRegistryKey
MmMapLockedPagesSpecifyCache
IoGetAttachedDeviceReference
SeQueryAuthenticationIdToken
MmCanFileBeTruncated
CcUnpinData
IoSetThreadHardErrorMode
ExGetPreviousMode
RtlRemoveUnicodePrefix
IoInitializeIrp
DbgBreakPointWithStatus
PsGetCurrentProcessId
RtlExtendedIntegerMultiply
SeSinglePrivilegeCheck
ZwSetVolumeInformationFile
KeClearEvent
KeInitializeTimer
IoSetHardErrorOrVerifyDevice
RtlInitializeUnicodePrefix
KeReadStateMutex
CcPreparePinWrite
ZwQueryInformationFile
HalExamineMBR
KeRestoreFloatingPointState
PoSetPowerState
KeQueryActiveProcessors
KeRegisterBugCheckCallback
SeAssignSecurity
ExGetExclusiveWaiterCount
RtlxOemStringToUnicodeSize
KeSetTimerEx
SeValidSecurityDescriptor
MmIsThisAnNtAsSystem
RtlIntegerToUnicodeString
ProbeForWrite
RtlFindUnicodePrefix
ZwClose
KeUnstackDetachProcess
IoSetPartitionInformation
KeSynchronizeExecution
RtlAnsiCharToUnicodeChar
RtlInitializeBitMap
IoQueueWorkItem
RtlCreateSecurityDescriptor
IoSetDeviceInterfaceState
MmFreeNonCachedMemory
RtlVolumeDeviceToDosName
IoVerifyPartitionTable
ObReleaseObjectSecurity
FsRtlFreeFileLock
RtlNtStatusToDosError
RtlInitializeGenericTable
MmLockPagableDataSection
MmFreeMappingAddress
ObMakeTemporaryObject
SeCaptureSubjectContext
SePrivilegeCheck
ExAcquireResourceSharedLite
CcCanIWrite
