调试一MH软件狗,它的狗驱动程序中用到了以下函数
HAL.KfLowerIrql
HAL.KfRaiseIrql
HAL.READ_PORT_UCHAR
HAL.WRITE_PORT_UCHAR
ntoskrnl.ExAllocatePoolWithTag
ntoskrnl.ExFreePool
ntoskrnl.IoBuildDeviceIoControlRequest
ntoskrnl.IoCancelIrp
ntoskrnl.IoCreateDevice
ntoskrnl.IoCreateSymbolicLink
ntoskrnl.IoDeleteDevice
ntoskrnl.IoDeleteSymbolicLink
ntoskrnl.IofCallDriver
ntoskrnl.IofCompleteRequest
ntoskrnl.IoGetDeviceObjectPointer
ntoskrnl.KeInitializeEvent
ntoskrnl.KeInitializeSemaphore
ntoskrnl.KeQuerySystemTime
ntoskrnl.KeReleaseSemaphore
ntoskrnl.KeWaitForSingleObject
ntoskrnl.RtlAnsiStringToUnicodeString
ntoskrnl.RtlAppendUnicodeStringToString
ntoskrnl.RtlCopyUnicodeString
ntoskrnl.RtlInitAnsiString
ntoskrnl.RtlInitUnicodeString
ntoskrnl.RtlIntegerToUnicodeString
ntoskrnl.RtlTimeToTimeFields
ntoskrnl.RtlxAnsiStringToUnicodeSize
ntoskrnl.ZwClose
ntoskrnl.ZwOpenKey
ntoskrnl.ZwQueryValueKey

请教:这里面哪些函数调用要用到狗的密码?

[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)