ntoskrnl.exe _global_unwind2
ntoskrnl.exe RtlUnwind
ntoskrnl.exe _local_unwind2 pass
-# we can use iff "_local_unwind2 pass" as there is registered local handler to %fs:[0]:
-ntoskrnl.exe _abnormal_termination pass
+# we can pass iff "_local_unwind2 pass" as there is registered local handler to %fs:[0]:
+ntoskrnl.exe _abnormal_termination wrap
ntoskrnl.exe FsRtlIncrementCcFastReadNoWait
ntoskrnl.exe FsRtlResetLargeMcb pass
ntoskrnl.exe RtlGetCompressionWorkSpaceSize pass