+ntoskrnl.exe _allrem pass
+ntoskrnl.exe strncmp
+ntoskrnl.exe ExInterlockedPushEntrySList
+ntoskrnl.exe ExInterlockedPopEntrySList
+ntoskrnl.exe SeCaptureSubjectContext
+ntoskrnl.exe RtlLengthRequiredSid
+ntoskrnl.exe RtlInitializeSid
+ntoskrnl.exe RtlSubAuthoritySid
+ntoskrnl.exe RtlCreateAcl
+ntoskrnl.exe RtlAddAccessAllowedAce
+ntoskrnl.exe RtlCreateSecurityDescriptor
+ntoskrnl.exe RtlSetDaclSecurityDescriptor
+ntoskrnl.exe SeAssignSecurity
+ntoskrnl.exe RtlLengthSecurityDescriptor pass
+ntoskrnl.exe SeValidSecurityDescriptor
+ntoskrnl.exe VerSetConditionMask pass
+ntoskrnl.exe RtlVerifyVersionInfo pass
+ntoskrnl.exe RtlGetVersion
+ntoskrnl.exe KeInitializeMutant
+ntoskrnl.exe KeReleaseMutant
+ntoskrnl.exe IoRegisterDriverReinitialization
+ntoskrnl.exe PoQueueShutdownWorkItem
+ntoskrnl.exe ZwCreateEvent
+ntoskrnl.exe PsCreateSystemThread
+ntoskrnl.exe IoCreateStreamFileObjectLite
+ntoskrnl.exe CcSetLogHandleForFile
+ntoskrnl.exe _alloca_probe pass # ntoskrnl.exe implementation is fully acceptable
+ntoskrnl.exe IoAllocateErrorLogEntry pass
+ntoskrnl.exe CcGetDirtyPages
+ntoskrnl.exe ExReinitializeResourceLite
+ntoskrnl.exe CcSetBcbOwnerPointer
+ntoskrnl.exe IoSynchronousPageWrite
+ntoskrnl.exe RtlFindClearRuns pass
+ntoskrnl.exe RtlFindLastBackwardRunClear pass
+ntoskrnl.exe ObQueryNameString
+ntoskrnl.exe RtlLengthSid
+ntoskrnl.exe SeAuditingFileEvents
+ntoskrnl.exe CcRemapBcb
+ntoskrnl.exe CcUnpinDataForThread
+ntoskrnl.exe SeDeassignSecurity
+ntoskrnl.exe FsRtlNotifyFilterChangeDirectory
+ntoskrnl.exe RtlFindNextForwardRunClear pass
+ntoskrnl.exe IoAcquireCancelSpinLock
+ntoskrnl.exe IoReleaseCancelSpinLock
+ntoskrnl.exe _global_unwind2
+ntoskrnl.exe RtlUnwind
+ntoskrnl.exe _local_unwind2 pass
+# we can pass iff "_local_unwind2 pass" as there is registered local handler to %fs:[0]:
+ntoskrnl.exe _abnormal_termination wrap
+ntoskrnl.exe FsRtlIncrementCcFastReadNoWait
+ntoskrnl.exe FsRtlResetLargeMcb pass
+ntoskrnl.exe RtlGetCompressionWorkSpaceSize pass
+ntoskrnl.exe RtlDecompressFragment pass
+ntoskrnl.exe KeSetPriorityThread
+ntoskrnl.exe IoPageRead
+ntoskrnl.exe RtlCompressBuffer pass
+ntoskrnl.exe FsRtlSplitLargeMcb pass
+ntoskrnl.exe captive_reactos_wcsncmp
+ntoskrnl.exe MmGetSystemRoutineAddress
+ntoskrnl.exe RtlEqualUnicodeString
+ntoskrnl.exe RtlIsGenericTableEmpty pass
+ntoskrnl.exe RtlRealSuccessor pass
+ntoskrnl.exe PsGetVersion
+ntoskrnl.exe RtlIsGenericTableEmptyAvl pass
+ntoskrnl.exe RtlEnumerateGenericTable pass
+ntoskrnl.exe RtlEnumerateGenericTableAvl pass
+ntoskrnl.exe MmSetAddressRangeModified
+ntoskrnl.exe RtlEqualSid
+ntoskrnl.exe SeAuditingFileEventsWithContext