CmRegisterCallbackEx
ExfAcquirePushLockExclusive
ExfReleasePushLockExclusive
IoCreateDriver
IoQueryFileDosDeviceName
KeInitializeApc
KeInsertQueueApc
KeReleaseQueuedSpinLock
KeStackAttachProcess
KeUnstackDetachProcess
MmFlushImageSection
NdisAllocateGenericObject
NdisGetDataBuffer
ObCreateObject
ObOpenObjectByName
ObOpenObjectByPointer
ObQueryNameString
ObReferenceObjectByName
PsLookupProcessByProcessId
PsLookupProcessThreadByCid
PsLookupThreadByThreadId
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlCaptureStackBackTrace
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
RtlGetSaclSecurityDescriptor
RtlLengthSid
RtlRandomEx
SeCaptureSecurityDescriptor
SeCreateAccessState
SeDeleteAccessState
SeDeleteObjectAuditAlarm
SeTokenIsAdmin
ZwDuplicateObject
ZwFlushBuffersFile
ZwOpenDirectoryObject
ZwOpenProcessTokenEx
ZwOpenThreadTokenEx
ZwQueryDirectoryObject
ZwQueryInformationProcess
ZwQueryInformationToken
ZwQuerySystemInformation
ZwRenameKey
ZwSaveKey
ZwSetInformationObject
ZwSetSecurityObject
ZwWaitForSingleObject