ZwQueryValueKey
FsRtlCheckLockForReadAccess
KeBugCheckEx
RtlDeleteRegistryValue
PoUnregisterSystemState
ExFreePoolWithTag
KeSetKernelStackSwapEnable
IoBuildPartialMdl
FsRtlDeregisterUncProvider
IoGetDiskDeviceObject
RtlClearBits
CcUnpinData
RtlDowncaseUnicodeString
IoSetSystemPartition
RtlValidSecurityDescriptor
RtlGUIDFromString
RtlCreateRegistryKey
ZwCreateSection
MmUnlockPagableImageSection
SeLockSubjectContext
ZwDeleteKey
IoFreeErrorLogEntry
KeInitializeSemaphore
KeReadStateTimer
RtlFindUnicodePrefix
RtlAddAccessAllowedAceEx
MmGetSystemRoutineAddress
KeInsertByKeyDeviceQueue
PsImpersonateClient
IoGetAttachedDevice
RtlFindLeastSignificantBit
SeTokenIsRestricted
MmGetPhysicalAddress
ExReinitializeResourceLite
RtlxUnicodeStringToAnsiSize
RtlNumberOfClearBits
ZwClose
ExVerifySuite
PoRegisterSystemState
ExSetResourceOwnerPointer
MmIsVerifierEnabled
IoFreeMdl
KeQueryTimeIncrement
RtlNtStatusToDosError
KeInsertQueueDpc
ObInsertObject
MmUnmapIoSpace
PoRequestPowerIrp
FsRtlIsTotalDeviceFailure
FsRtlFreeFileLock
MmAllocateMappingAddress
ZwCreateFile
ExAcquireFastMutexUnsafe
IoCancelIrp
ZwAllocateVirtualMemory
IoMakeAssociatedIrp
VerSetConditionMask
SeUnlockSubjectContext
KeInitializeSpinLock
ExSetTimerResolution
MmIsThisAnNtAsSystem
RtlIsNameLegalDOS8Dot3
MmMapLockedPagesSpecifyCache
ZwQueryInformationFile
FsRtlCheckLockForWriteAccess
IoDetachDevice
RtlAddAccessAllowedAce
MmMapLockedPages
MmSecureVirtualMemory
IoReadPartitionTable
RtlDelete
RtlAreBitsSet
RtlFreeUnicodeString
RtlCheckRegistryKey
MmProbeAndLockPages
CcMdlRead
PsChargeProcessPoolQuota
RtlSecondsSince1970ToTime
ProbeForRead
RtlUpperChar
KeLeaveCriticalRegion
RtlGetNextRange
ProbeForWrite
CcFlushCache
FsRtlAllocateFileLock
CcZeroData
ZwCreateDirectoryObject
IoRemoveShareAccess
RtlCreateUnicodeString
MmIsAddressValid
RtlSetDaclSecurityDescriptor
ZwQueryVolumeInformationFile
RtlVolumeDeviceToDosName
ZwQueryKey
IoCreateFile
RtlGetVersion
IoSetDeviceToVerify
RtlInitAnsiString
PsLookupThreadByThreadId
FsRtlIsDbcsInExpression
SeQueryInformationToken
MmMapUserAddressesToPage
ZwEnumerateValueKey
RtlExtendedIntegerMultiply
HalExamineMBR
IoGetBootDiskInformation
PsGetVersion
RtlFindNextForwardRunClear
PsRevertToSelf
RtlAnsiStringToUnicodeString
KeReleaseMutex
RtlInitializeUnicodePrefix
ZwMapViewOfSection
CcCanIWrite
KeRemoveEntryDeviceQueue
CcPreparePinWrite
IoIsOperationSynchronous
KeReadStateEvent
MmAllocatePagesForMdl
RtlPrefixUnicodeString
FsRtlIsFatDbcsLegal
KeReadStateSemaphore
KeInitializeEvent
FsRtlNotifyUninitializeSync
ExDeletePagedLookasideList
IoVolumeDeviceToDosName
KeSetEvent
SeSinglePrivilegeCheck
IoVerifyPartitionTable
RtlCopyLuid
PsDereferencePrimaryToken
MmForceSectionClosed
IoSetDeviceInterfaceState
PsReferencePrimaryToken
KeEnterCriticalRegion
MmFlushImageSection
KeBugCheck
KeRegisterBugCheckCallback
RtlCompareMemory
RtlCompareString
IoDeleteSymbolicLink
MmQuerySystemSize
ObQueryNameString
RtlUnicodeStringToOemString
SeReleaseSubjectContext
IoInitializeRemoveLockEx
IoSetShareAccess
KeInitializeTimerEx
KeDeregisterBugCheckCallback
KeWaitForMultipleObjects
IoReuseIrp
IoRequestDeviceEject
RtlFindMostSignificantBit
ZwSetSecurityObject
PsGetProcessId
KeClearEvent
SeOpenObjectAuditAlarm
RtlHashUnicodeString
IoUnregisterFileSystem
RtlSubAuthoritySid
IofCallDriver
IoCreateSynchronizationEvent
KeInsertQueue
ObReferenceObjectByPointer
IoAcquireVpbSpinLock
RtlAppendUnicodeToString
IoCsqRemoveIrp
RtlGetCallersAddress
IoGetDeviceToVerify
RtlMultiByteToUnicodeN
IoFreeIrp
RtlCreateAcl
RtlFindClearRuns
MmBuildMdlForNonPagedPool
IoFreeController
RtlUnicodeStringToInteger
CcPinRead
KefAcquireSpinLockAtDpcLevel
FsRtlMdlWriteCompleteDev
IoBuildSynchronousFsdRequest
MmCanFileBeTruncated
MmPageEntireDriver
ZwFsControlFile
RtlCharToInteger
KeQueryInterruptTime
IoGetDeviceInterfaces
KeSaveFloatingPointState
ExGetSharedWaiterCount
RtlAnsiCharToUnicodeChar
SeAccessCheck
RtlCopyString
ZwWriteFile
PoStartNextPowerIrp
IoGetDeviceAttachmentBaseRef
ExRegisterCallback
ExIsProcessorFeaturePresent
ExSystemTimeToLocalTime
IofCompleteRequest
PoSetSystemState
SeQueryAuthenticationIdToken
IoCreateNotificationEvent
MmMapIoSpace
FsRtlFastCheckLockForRead
IoReadPartitionTableEx
ZwCreateEvent
RtlxAnsiStringToUnicodeSize
PsIsThreadTerminating
IoGetRequestorProcess
ExGetPreviousMode
RtlVerifyVersionInfo
ExQueueWorkItem
ObMakeTemporaryObject
IoAllocateMdl
IoWMIWriteEvent
RtlInitializeSid
MmProbeAndLockProcessPages
IoInitializeIrp
IoConnectInterrupt
ExUnregisterCallback
RtlFindClearBits
FsRtlLookupLastLargeMcbEntry
MmFreePagesFromMdl
IoStartTimer
IoDeleteDevice
MmFreeMappingAddress
KdDisableDebugger
SeDeleteObjectAuditAlarm
KeInitializeQueue
IoGetLowerDeviceObject
RtlSplay
MmLockPagableDataSection
IoReadDiskSignature
CcSetDirtyPinnedData
CcPinMappedData
IoCreateSymbolicLink
MmIsDriverVerifying
IoEnumerateDeviceObjectList
KeCancelTimer
ZwOpenSymbolicLinkObject
RtlCopySid
KeInitializeDpc
RtlStringFromGUID
RtlFreeAnsiString
RtlEqualUnicodeString
KeInitializeDeviceQueue
ExRaiseStatus
KeInitializeApc
RtlRemoveUnicodePrefix
PoCallDriver
KeResetEvent
PsCreateSystemThread
RtlQueryRegistryValues
MmHighestUserAddress
RtlxOemStringToUnicodeSize
IoAcquireCancelSpinLock
ExRaiseAccessViolation
IoAllocateAdapterChannel
RtlLengthSecurityDescriptor
RtlInsertUnicodePrefix
SeDeassignSecurity
