+ntoskrnl.exe CcSetLogHandleForFile
+ntoskrnl.exe _alloca_probe pass # ntoskrnl.exe implementation is fully acceptable
+ntoskrnl.exe IoAllocateErrorLogEntry pass
+ntoskrnl.exe CcGetDirtyPages
+ntoskrnl.exe ExReinitializeResourceLite
+ntoskrnl.exe CcSetBcbOwnerPointer
+ntoskrnl.exe IoSynchronousPageWrite
+ntoskrnl.exe RtlFindClearRuns pass
+ntoskrnl.exe RtlFindLastBackwardRunClear pass
+ntoskrnl.exe ObQueryNameString
+ntoskrnl.exe RtlLengthSid
+ntoskrnl.exe SeAuditingFileEvents
+ntoskrnl.exe CcRemapBcb
+ntoskrnl.exe CcUnpinDataForThread
+ntoskrnl.exe SeDeassignSecurity
+ntoskrnl.exe FsRtlNotifyFilterChangeDirectory
+ntoskrnl.exe RtlFindNextForwardRunClear pass
+ntoskrnl.exe IoAcquireCancelSpinLock
+ntoskrnl.exe IoReleaseCancelSpinLock
+ntoskrnl.exe _global_unwind2
+ntoskrnl.exe RtlUnwind
+ntoskrnl.exe _local_unwind2 pass
+# we can pass iff "_local_unwind2 pass" as there is registered local handler to %fs:[0]:
+ntoskrnl.exe _abnormal_termination wrap
+ntoskrnl.exe FsRtlIncrementCcFastReadNoWait
+ntoskrnl.exe FsRtlResetLargeMcb pass
+ntoskrnl.exe RtlGetCompressionWorkSpaceSize pass
+ntoskrnl.exe RtlDecompressFragment pass
+ntoskrnl.exe KeSetPriorityThread
+ntoskrnl.exe IoPageRead
+ntoskrnl.exe RtlCompressBuffer pass
+ntoskrnl.exe FsRtlSplitLargeMcb pass
+ntoskrnl.exe captive_reactos_wcsncmp
+ntoskrnl.exe MmGetSystemRoutineAddress
+ntoskrnl.exe RtlEqualUnicodeString
+ntoskrnl.exe RtlIsGenericTableEmpty pass
+ntoskrnl.exe RtlRealSuccessor pass
+ntoskrnl.exe PsGetVersion
+ntoskrnl.exe RtlIsGenericTableEmptyAvl pass
+ntoskrnl.exe RtlEnumerateGenericTable pass
+ntoskrnl.exe RtlEnumerateGenericTableAvl pass
+ntoskrnl.exe MmSetAddressRangeModified
+ntoskrnl.exe RtlEqualSid
+ntoskrnl.exe SeAuditingFileEventsWithContext