; File generated automatically from /home/ubuntu/buildbot/runners/wine/wine-src/dlls/ntoskrnl.exe/ntoskrnl.exe.spec; do not edit! LIBRARY ntoskrnl.exe EXPORTS ExAcquireFastMutexUnsafe@4=__fastcall_ExAcquireFastMutexUnsafe @1 ExAcquireRundownProtection@0 @2 PRIVATE ExAcquireRundownProtectionEx@0 @3 PRIVATE ExInitializeRundownProtection@0 @4 PRIVATE ExInterlockedAddLargeStatistic@0 @5 PRIVATE ExInterlockedCompareExchange64@0 @6 PRIVATE ExInterlockedFlushSList@0 @7 PRIVATE ExInterlockedPopEntrySList@8=__fastcall_NTOSKRNL_ExInterlockedPopEntrySList @8 ExInterlockedPushEntrySList@12=__fastcall_NTOSKRNL_ExInterlockedPushEntrySList @9 ExReInitializeRundownProtection@0 @10 PRIVATE ExReleaseFastMutexUnsafe@4=__fastcall_ExReleaseFastMutexUnsafe @11 ExReleaseResourceLite@4=__fastcall_ExReleaseResourceLite @12 ExReleaseRundownProtection@0 @13 PRIVATE ExReleaseRundownProtectionEx@0 @14 PRIVATE ExRundownCompleted@0 @15 PRIVATE ExWaitForRundownProtectionRelease@0 @16 PRIVATE ExfAcquirePushLockExclusive@0 @17 PRIVATE ExfAcquirePushLockShared@0 @18 PRIVATE ExfInterlockedAddUlong@0 @19 PRIVATE ExfInterlockedCompareExchange64@0 @20 PRIVATE ExfInterlockedInsertHeadList@0 @21 PRIVATE ExfInterlockedInsertTailList@0 @22 PRIVATE ExfInterlockedPopEntryList@0 @23 PRIVATE ExfInterlockedPushEntryList@0 @24 PRIVATE ExfInterlockedRemoveHeadList@8=__fastcall_ExfInterlockedRemoveHeadList @25 ExfReleasePushLock@0 @26 PRIVATE Exfi386InterlockedDecrementLong@0 @27 PRIVATE Exfi386InterlockedExchangeUlong@0 @28 PRIVATE Exfi386InterlockedIncrementLong@0 @29 PRIVATE HalExamineMBR@0 @30 PRIVATE InterlockedCompareExchange@12=__fastcall_NTOSKRNL_InterlockedCompareExchange @31 InterlockedDecrement@4=__fastcall_NTOSKRNL_InterlockedDecrement @32 InterlockedExchange@8=__fastcall_NTOSKRNL_InterlockedExchange @33 InterlockedExchangeAdd@8=__fastcall_NTOSKRNL_InterlockedExchangeAdd @34 InterlockedIncrement@4=__fastcall_NTOSKRNL_InterlockedIncrement @35 InterlockedPopEntrySList@4=__fastcall_NTOSKRNL_InterlockedPopEntrySList @36 InterlockedPushEntrySList@8=__fastcall_NTOSKRNL_InterlockedPushEntrySList @37 IoAssignDriveLetters@0 @38 PRIVATE IoReadPartitionTable@0 @39 PRIVATE IoSetPartitionInformation@0 @40 PRIVATE IoWritePartitionTable@0 @41 PRIVATE IofCallDriver@8=__fastcall_IofCallDriver @42 IofCompleteRequest@8=__fastcall_IofCompleteRequest @43 KeAcquireInStackQueuedSpinLockAtDpcLevel@8=__fastcall_KeAcquireInStackQueuedSpinLockAtDpcLevel @44 KeEnterGuardedRegion@0 @45 KeExpandKernelStackAndCallout@12 @46 KeExpandKernelStackAndCalloutEx@20 @47 KeLeaveGuardedRegion@0 @48 KeReleaseInStackQueuedSpinLockFromDpcLevel@4=__fastcall_KeReleaseInStackQueuedSpinLockFromDpcLevel @49 KeSetTimeUpdateNotifyRoutine@0 @50 PRIVATE KefAcquireSpinLockAtDpcLevel@0 @51 PRIVATE KefReleaseSpinLockFromDpcLevel@0 @52 PRIVATE KiAcquireSpinLock@0 @53 PRIVATE KiReleaseSpinLock@0 @54 PRIVATE ObfDereferenceObject@4=__fastcall_ObfDereferenceObject @55 ObfReferenceObject@4=__fastcall_ObfReferenceObject @56 RtlPrefetchMemoryNonTemporal@0 @57 PRIVATE RtlUlongByteSwap @58 RtlUlonglongByteSwap @59 RtlUshortByteSwap @60 WmiGetClock@0 @61 PRIVATE Kei386EoiHelper@0 @62 PRIVATE Kii386SpinOnSpinLock@0 @63 PRIVATE CcCanIWrite@0 @64 PRIVATE CcCopyRead@0 @65 PRIVATE CcCopyWrite@0 @66 PRIVATE CcDeferWrite@0 @67 PRIVATE CcFastCopyRead@0 @68 PRIVATE CcFastCopyWrite@0 @69 PRIVATE CcFastMdlReadWait@0 @70 PRIVATE CcFastReadNotPossible@0 @71 PRIVATE CcFastReadWait@0 @72 PRIVATE CcFlushCache@0 @73 PRIVATE CcGetDirtyPages@0 @74 PRIVATE CcGetFileObjectFromBcb@0 @75 PRIVATE CcGetFileObjectFromSectionPtrs@0 @76 PRIVATE CcGetFlushedValidData@0 @77 PRIVATE CcGetLsnForFileObject@0 @78 PRIVATE CcInitializeCacheMap@0 @79 PRIVATE CcIsThereDirtyData@0 @80 PRIVATE CcMapData@0 @81 PRIVATE CcMdlRead@0 @82 PRIVATE CcMdlReadComplete@0 @83 PRIVATE CcMdlWriteAbort@0 @84 PRIVATE CcMdlWriteComplete@0 @85 PRIVATE CcPinMappedData@0 @86 PRIVATE CcPinRead@0 @87 PRIVATE CcPrepareMdlWrite@0 @88 PRIVATE CcPreparePinWrite@0 @89 PRIVATE CcPurgeCacheSection@0 @90 PRIVATE CcRemapBcb@0 @91 PRIVATE CcRepinBcb@0 @92 PRIVATE CcScheduleReadAhead@0 @93 PRIVATE CcSetAdditionalCacheAttributes@0 @94 PRIVATE CcSetBcbOwnerPointer@0 @95 PRIVATE CcSetDirtyPageThreshold@0 @96 PRIVATE CcSetDirtyPinnedData@0 @97 PRIVATE CcSetFileSizes@0 @98 PRIVATE CcSetLogHandleForFile@0 @99 PRIVATE CcSetReadAheadGranularity@0 @100 PRIVATE CcUninitializeCacheMap@0 @101 PRIVATE CcUnpinData@0 @102 PRIVATE CcUnpinDataForThread@0 @103 PRIVATE CcUnpinRepinnedBcb@0 @104 PRIVATE CcWaitForCurrentLazyWriterActivity@0 @105 PRIVATE CcZeroData@0 @106 PRIVATE CmRegisterCallback@12 @107 CmUnRegisterCallback@8 @108 DbgBreakPoint@0 @109 DbgBreakPointWithStatus@0 @110 PRIVATE DbgLoadImageSymbols@0 @111 PRIVATE DbgPrint @112 DbgPrintEx @113 DbgPrintReturnControlC@0 @114 PRIVATE DbgPrompt@0 @115 PRIVATE DbgQueryDebugFilterState@8 @116 DbgSetDebugFilterState@0 @117 PRIVATE ExAcquireResourceExclusiveLite@8 @118 ExAcquireResourceSharedLite@8 @119 ExAcquireSharedStarveExclusive@8 @120 ExAcquireSharedWaitForExclusive@8 @121 ExAllocateFromPagedLookasideList@0 @122 PRIVATE ExAllocatePool@8 @123 ExAllocatePoolWithQuota@8 @124 ExAllocatePoolWithQuotaTag@12 @125 ExAllocatePoolWithTag@12 @126 ExAllocatePoolWithTagPriority@0 @127 PRIVATE ExConvertExclusiveToSharedLite@0 @128 PRIVATE ExCreateCallback@16 @129 ExDeleteNPagedLookasideList@4 @130 ExDeletePagedLookasideList@4 @131 ExDeleteResourceLite@4 @132 ExDesktopObjectType@0 @133 PRIVATE ExDisableResourceBoostLite@0 @134 PRIVATE ExEnumHandleTable@0 @135 PRIVATE ExEventObjectType @136 DATA ExExtendZone@0 @137 PRIVATE ExfUnblockPushLock@8=__fastcall_ExfUnblockPushLock @138 ExFreePool@4 @139 ExFreePoolWithTag@8 @140 ExFreeToPagedLookasideList@0 @141 PRIVATE ExGetCurrentProcessorCounts@0 @142 PRIVATE ExGetCurrentProcessorCpuUsage@0 @143 PRIVATE ExGetExclusiveWaiterCount@4 @144 ExGetPreviousMode@0 @145 PRIVATE ExGetSharedWaiterCount@4 @146 ExInitializeNPagedLookasideList@28 @147 ExInitializePagedLookasideList@28 @148 ExInitializeResourceLite@4 @149 ExInitializeZone@16 @150 ExInterlockedAddLargeInteger@0 @151 PRIVATE ExInterlockedAddUlong@0 @152 PRIVATE ExInterlockedDecrementLong@0 @153 PRIVATE ExInterlockedExchangeUlong@0 @154 PRIVATE ExInterlockedExtendZone@0 @155 PRIVATE ExInterlockedIncrementLong@0 @156 PRIVATE ExInterlockedInsertHeadList@0 @157 PRIVATE ExInterlockedInsertTailList@0 @158 PRIVATE ExInterlockedPopEntryList@0 @159 PRIVATE ExInterlockedPushEntryList@0 @160 PRIVATE ExInterlockedRemoveHeadList@8 @161 ExIsProcessorFeaturePresent@0 @162 PRIVATE ExIsResourceAcquiredExclusiveLite@4 @163 ExIsResourceAcquiredSharedLite@4 @164 ExLocalTimeToSystemTime@8=RtlLocalTimeToSystemTime @165 ExNotifyCallback@0 @166 PRIVATE ExQueryPoolBlockSize@0 @167 PRIVATE ExQueueWorkItem@0 @168 PRIVATE ExRaiseAccessViolation@0 @169 PRIVATE ExRaiseDatatypeMisalignment@0 @170 PRIVATE ExRaiseException@0 @171 PRIVATE ExRaiseHardError@0 @172 PRIVATE ExRaiseStatus@0 @173 PRIVATE ExRegisterCallback@0 @174 PRIVATE ExReinitializeResourceLite@0 @175 PRIVATE ExReleaseResourceForThreadLite@8 @176 ExSemaphoreObjectType @177 DATA ExSetResourceOwnerPointer@0 @178 PRIVATE ExSetTimerResolution@8 @179 ExSystemExceptionFilter@0 @180 PRIVATE ExSystemTimeToLocalTime@8=RtlSystemTimeToLocalTime @181 ExUnregisterCallback@0 @182 PRIVATE ExUuidCreate@4 @183 ExVerifySuite@0 @184 PRIVATE ExWindowStationObjectType@0 @185 PRIVATE Exi386InterlockedDecrementLong@0 @186 PRIVATE Exi386InterlockedExchangeUlong@0 @187 PRIVATE Exi386InterlockedIncrementLong@0 @188 PRIVATE FsRtlAcquireFileExclusive@0 @189 PRIVATE FsRtlAddLargeMcbEntry@0 @190 PRIVATE FsRtlAddMcbEntry@0 @191 PRIVATE FsRtlAddToTunnelCache@0 @192 PRIVATE FsRtlAllocateFileLock@0 @193 PRIVATE FsRtlAllocatePool@0 @194 PRIVATE FsRtlAllocatePoolWithQuota@0 @195 PRIVATE FsRtlAllocatePoolWithQuotaTag@0 @196 PRIVATE FsRtlAllocatePoolWithTag@0 @197 PRIVATE FsRtlAllocateResource@0 @198 PRIVATE FsRtlAreNamesEqual@0 @199 PRIVATE FsRtlBalanceReads@0 @200 PRIVATE FsRtlCheckLockForReadAccess@0 @201 PRIVATE FsRtlCheckLockForWriteAccess@0 @202 PRIVATE FsRtlCheckOplock@0 @203 PRIVATE FsRtlCopyRead@0 @204 PRIVATE FsRtlCopyWrite@0 @205 PRIVATE FsRtlCurrentBatchOplock@0 @206 PRIVATE FsRtlDeleteKeyFromTunnelCache@0 @207 PRIVATE FsRtlDeleteTunnelCache@0 @208 PRIVATE FsRtlDeregisterUncProvider@0 @209 PRIVATE FsRtlDissectDbcs@0 @210 PRIVATE FsRtlDissectName@0 @211 PRIVATE FsRtlDoesDbcsContainWildCards@0 @212 PRIVATE FsRtlDoesNameContainWildCards@0 @213 PRIVATE FsRtlFastCheckLockForRead@0 @214 PRIVATE FsRtlFastCheckLockForWrite@0 @215 PRIVATE FsRtlFastUnlockAll@0 @216 PRIVATE FsRtlFastUnlockAllByKey@0 @217 PRIVATE FsRtlFastUnlockSingle@0 @218 PRIVATE FsRtlFindInTunnelCache@0 @219 PRIVATE FsRtlFreeFileLock@0 @220 PRIVATE FsRtlGetFileSize@0 @221 PRIVATE FsRtlGetNextFileLock@0 @222 PRIVATE FsRtlGetNextLargeMcbEntry@0 @223 PRIVATE FsRtlGetNextMcbEntry@0 @224 PRIVATE FsRtlIncrementCcFastReadNoWait@0 @225 PRIVATE FsRtlIncrementCcFastReadNotPossible@0 @226 PRIVATE FsRtlIncrementCcFastReadResourceMiss@0 @227 PRIVATE FsRtlIncrementCcFastReadWait@0 @228 PRIVATE FsRtlInitializeFileLock@0 @229 PRIVATE FsRtlInitializeLargeMcb@0 @230 PRIVATE FsRtlInitializeMcb@0 @231 PRIVATE FsRtlInitializeOplock@0 @232 PRIVATE FsRtlInitializeTunnelCache@0 @233 PRIVATE FsRtlInsertPerFileObjectContext@0 @234 PRIVATE FsRtlInsertPerStreamContext@0 @235 PRIVATE FsRtlIsDbcsInExpression@0 @236 PRIVATE FsRtlIsFatDbcsLegal@0 @237 PRIVATE FsRtlIsHpfsDbcsLegal@0 @238 PRIVATE FsRtlIsNameInExpression@16 @239 FsRtlIsNtstatusExpected@0 @240 PRIVATE FsRtlIsPagingFile@0 @241 PRIVATE FsRtlIsTotalDeviceFailure@0 @242 PRIVATE FsRtlLegalAnsiCharacterArray@0 @243 PRIVATE FsRtlLookupLargeMcbEntry@0 @244 PRIVATE FsRtlLookupLastLargeMcbEntry@0 @245 PRIVATE FsRtlLookupLastLargeMcbEntryAndIndex@0 @246 PRIVATE FsRtlLookupLastMcbEntry@0 @247 PRIVATE FsRtlLookupMcbEntry@0 @248 PRIVATE FsRtlLookupPerFileObjectContext@0 @249 PRIVATE FsRtlLookupPerStreamContextInternal@0 @250 PRIVATE FsRtlMdlRead@0 @251 PRIVATE FsRtlMdlReadComplete@0 @252 PRIVATE FsRtlMdlReadCompleteDev@0 @253 PRIVATE FsRtlMdlReadDev@0 @254 PRIVATE FsRtlMdlWriteComplete@0 @255 PRIVATE FsRtlMdlWriteCompleteDev@0 @256 PRIVATE FsRtlNormalizeNtstatus@0 @257 PRIVATE FsRtlNotifyChangeDirectory@0 @258 PRIVATE FsRtlNotifyCleanup@0 @259 PRIVATE FsRtlNotifyFilterChangeDirectory@0 @260 PRIVATE FsRtlNotifyFilterReportChange@0 @261 PRIVATE FsRtlNotifyFullChangeDirectory@0 @262 PRIVATE FsRtlNotifyFullReportChange@0 @263 PRIVATE FsRtlNotifyInitializeSync@0 @264 PRIVATE FsRtlNotifyReportChange@0 @265 PRIVATE FsRtlNotifyUninitializeSync@0 @266 PRIVATE FsRtlNotifyVolumeEvent@0 @267 PRIVATE FsRtlNumberOfRunsInLargeMcb@0 @268 PRIVATE FsRtlNumberOfRunsInMcb@0 @269 PRIVATE FsRtlOplockFsctrl@0 @270 PRIVATE FsRtlOplockIsFastIoPossible@0 @271 PRIVATE FsRtlPostPagingFileStackOverflow@0 @272 PRIVATE FsRtlPostStackOverflow@0 @273 PRIVATE FsRtlPrepareMdlWrite@0 @274 PRIVATE FsRtlPrepareMdlWriteDev@0 @275 PRIVATE FsRtlPrivateLock@0 @276 PRIVATE FsRtlProcessFileLock@0 @277 PRIVATE FsRtlRegisterFileSystemFilterCallbacks@8 @278 FsRtlRegisterUncProvider@12 @279 FsRtlReleaseFile@0 @280 PRIVATE FsRtlRemoveLargeMcbEntry@0 @281 PRIVATE FsRtlRemoveMcbEntry@0 @282 PRIVATE FsRtlRemovePerFileObjectContext@0 @283 PRIVATE FsRtlRemovePerStreamContext@0 @284 PRIVATE FsRtlResetLargeMcb@0 @285 PRIVATE FsRtlSplitLargeMcb@0 @286 PRIVATE FsRtlSyncVolumes@0 @287 PRIVATE FsRtlTeardownPerStreamContexts@0 @288 PRIVATE FsRtlTruncateLargeMcb@0 @289 PRIVATE FsRtlTruncateMcb@0 @290 PRIVATE FsRtlUninitializeFileLock@0 @291 PRIVATE FsRtlUninitializeLargeMcb@0 @292 PRIVATE FsRtlUninitializeMcb@0 @293 PRIVATE FsRtlUninitializeOplock@0 @294 PRIVATE HalDispatchTable@0 @295 PRIVATE HalPrivateDispatchTable@0 @296 PRIVATE HeadlessDispatch@0 @297 PRIVATE InbvAcquireDisplayOwnership@0 @298 PRIVATE InbvCheckDisplayOwnership@0 @299 PRIVATE InbvDisplayString@0 @300 PRIVATE InbvEnableBootDriver@0 @301 PRIVATE InbvEnableDisplayString@0 @302 PRIVATE InbvInstallDisplayStringFilter@0 @303 PRIVATE InbvIsBootDriverInstalled@0 @304 PRIVATE InbvNotifyDisplayOwnershipLost@0 @305 PRIVATE InbvResetDisplay@0 @306 PRIVATE InbvSetScrollRegion@0 @307 PRIVATE InbvSetTextColor@0 @308 PRIVATE InbvSolidColorFill@0 @309 PRIVATE InitSafeBootMode @310 DATA IoAcquireCancelSpinLock@4 @311 IoAcquireRemoveLockEx@20 @312 IoAcquireVpbSpinLock@0 @313 PRIVATE IoAdapterObjectType@0 @314 PRIVATE IoAllocateAdapterChannel@0 @315 PRIVATE IoAllocateController@0 @316 PRIVATE IoAllocateDriverObjectExtension@16 @317 IoAllocateErrorLogEntry@8 @318 IoAllocateIrp@8 @319 IoAllocateMdl@20 @320 IoAllocateWorkItem@4 @321 IoAssignResources@0 @322 PRIVATE IoAttachDevice@12 @323 IoAttachDeviceByPointer@0 @324 PRIVATE IoAttachDeviceToDeviceStack@8 @325 IoAttachDeviceToDeviceStackSafe@0 @326 PRIVATE IoBuildAsynchronousFsdRequest@0 @327 PRIVATE IoBuildDeviceIoControlRequest@36 @328 IoBuildPartialMdl@0 @329 PRIVATE IoBuildSynchronousFsdRequest@28 @330 IoCallDriver@8 @331 IoCancelFileOpen@0 @332 PRIVATE IoCancelIrp@0 @333 PRIVATE IoCheckDesiredAccess@0 @334 PRIVATE IoCheckEaBufferValidity@0 @335 PRIVATE IoCheckFunctionAccess@0 @336 PRIVATE IoCheckQuerySetFileInformation@0 @337 PRIVATE IoCheckQuerySetVolumeInformation@0 @338 PRIVATE IoCheckQuotaBufferValidity@0 @339 PRIVATE IoCheckShareAccess@0 @340 PRIVATE IoCompleteRequest@8 @341 IoConnectInterrupt@0 @342 PRIVATE IoCreateController@0 @343 PRIVATE IoCreateDevice@28 @344 IoCreateDisk@0 @345 PRIVATE IoCreateDriver@8 @346 IoCreateFile@56 @347 IoCreateFileSpecifyDeviceObjectHint@0 @348 PRIVATE IoCreateNotificationEvent@8 @349 IoCreateStreamFileObject@0 @350 PRIVATE IoCreateStreamFileObjectEx@0 @351 PRIVATE IoCreateStreamFileObjectLite@0 @352 PRIVATE IoCreateSymbolicLink@8 @353 IoCreateSynchronizationEvent@8 @354 IoCreateUnprotectedSymbolicLink@0 @355 PRIVATE IoCsqInitialize@28 @356 IoCsqInsertIrp@0 @357 PRIVATE IoCsqRemoveIrp@0 @358 PRIVATE IoCsqRemoveNextIrp@0 @359 PRIVATE IoDeleteController@0 @360 PRIVATE IoDeleteDevice@4 @361 IoDeleteDriver@4 @362 IoDeleteSymbolicLink@4 @363 IoDetachDevice@0 @364 PRIVATE IoDeviceHandlerObjectSize@0 @365 PRIVATE IoDeviceHandlerObjectType@0 @366 PRIVATE IoDeviceObjectType @367 DATA IoDisconnectInterrupt@0 @368 PRIVATE IoDriverObjectType @369 DATA IoEnqueueIrp@0 @370 PRIVATE IoEnumerateDeviceObjectList@0 @371 PRIVATE IoFastQueryNetworkAttributes@0 @372 PRIVATE IoFileObjectType @373 DATA IoForwardAndCatchIrp@0 @374 PRIVATE IoForwardIrpSynchronously@0 @375 PRIVATE IoFreeController@0 @376 PRIVATE IoFreeErrorLogEntry@0 @377 PRIVATE IoFreeIrp@4 @378 IoFreeMdl@4 @379 IoFreeWorkItem@0 @380 PRIVATE IoGetAttachedDevice@4 @381 IoGetAttachedDeviceReference@4 @382 IoGetBaseFileSystemDeviceObject@0 @383 PRIVATE IoGetBootDiskInformation@0 @384 PRIVATE IoGetConfigurationInformation@0 @385 IoGetCurrentProcess@0 @386 IoGetDeviceAttachmentBaseRef@4 @387 IoGetDeviceInterfaceAlias@0 @388 PRIVATE IoGetDeviceInterfaces@16 @389 IoGetDeviceObjectPointer@16 @390 IoGetDeviceProperty@20 @391 IoGetDeviceToVerify@0 @392 PRIVATE IoGetDiskDeviceObject@0 @393 PRIVATE IoGetDmaAdapter@0 @394 PRIVATE IoGetDriverObjectExtension@8 @395 IoGetFileObjectGenericMapping@0 @396 PRIVATE IoGetInitialStack@0 @397 PRIVATE IoGetLowerDeviceObject@0 @398 PRIVATE IoGetRelatedDeviceObject@4 @399 IoGetRequestorProcess@0 @400 PRIVATE IoGetRequestorProcessId@0 @401 PRIVATE IoGetRequestorSessionId@0 @402 PRIVATE IoGetStackLimits@0 @403 PRIVATE IoGetTopLevelIrp@0 @404 PRIVATE IoInitializeIrp@12 @405 IoInitializeRemoveLockEx@20 @406 IoInitializeTimer@12 @407 IoInvalidateDeviceRelations@8 @408 IoInvalidateDeviceState@0 @409 PRIVATE IoIsFileOriginRemote@0 @410 PRIVATE IoIsOperationSynchronous@0 @411 PRIVATE IoIsSystemThread@0 @412 PRIVATE IoIsValidNameGraftingBuffer@0 @413 PRIVATE IoIsWdmVersionAvailable@8 @414 IoMakeAssociatedIrp@0 @415 PRIVATE IoOpenDeviceInterfaceRegistryKey@0 @416 PRIVATE IoOpenDeviceRegistryKey@0 @417 PRIVATE IoPageRead@0 @418 PRIVATE IoPnPDeliverServicePowerNotification@0 @419 PRIVATE IoQueryDeviceDescription@32 @420 IoQueryFileDosDeviceName@0 @421 PRIVATE IoQueryFileInformation@0 @422 PRIVATE IoQueryVolumeInformation@0 @423 PRIVATE IoQueueThreadIrp@0 @424 PRIVATE IoQueueWorkItem@0 @425 PRIVATE IoRaiseHardError@0 @426 PRIVATE IoRaiseInformationalHardError@0 @427 PRIVATE IoReadDiskSignature@0 @428 PRIVATE IoReadOperationCount@0 @429 PRIVATE IoReadPartitionTableEx@0 @430 PRIVATE IoReadTransferCount@0 @431 PRIVATE IoRegisterBootDriverReinitialization@0 @432 PRIVATE IoRegisterDeviceInterface@16 @433 IoRegisterDriverReinitialization@12 @434 IoRegisterFileSystem@4 @435 IoRegisterFsRegistrationChange@0 @436 PRIVATE IoRegisterLastChanceShutdownNotification@0 @437 PRIVATE IoRegisterPlugPlayNotification@28 @438 IoRegisterShutdownNotification@4 @439 IoReleaseCancelSpinLock@4 @440 IoReleaseRemoveLockAndWaitEx@12 @441 IoReleaseRemoveLockEx@0 @442 PRIVATE IoReleaseVpbSpinLock@0 @443 PRIVATE IoRemoveShareAccess@0 @444 PRIVATE IoReportDetectedDevice@0 @445 PRIVATE IoReportHalResourceUsage@0 @446 PRIVATE IoReportResourceForDetection@28 @447 IoReportResourceUsage@36 @448 IoReportTargetDeviceChange@0 @449 PRIVATE IoReportTargetDeviceChangeAsynchronous@0 @450 PRIVATE IoRequestDeviceEject@0 @451 PRIVATE IoReuseIrp@0 @452 PRIVATE IoSetCompletionRoutineEx@0 @453 PRIVATE IoSetDeviceInterfaceState@8 @454 IoSetDeviceToVerify@0 @455 PRIVATE IoSetFileOrigin@0 @456 PRIVATE IoSetHardErrorOrVerifyDevice@0 @457 PRIVATE IoSetInformation@0 @458 PRIVATE IoSetIoCompletion@0 @459 PRIVATE IoSetPartitionInformationEx@0 @460 PRIVATE IoSetShareAccess@0 @461 PRIVATE IoSetStartIoAttributes@0 @462 PRIVATE IoSetSystemPartition@0 @463 PRIVATE IoSetThreadHardErrorMode@4 @464 IoSetTopLevelIrp@0 @465 PRIVATE IoStartNextPacket@8 @466 IoStartNextPacketByKey@0 @467 PRIVATE IoStartPacket@0 @468 PRIVATE IoStartTimer@4 @469 IoStatisticsLock@0 @470 PRIVATE IoStopTimer@4 @471 IoSynchronousInvalidateDeviceRelations@0 @472 PRIVATE IoSynchronousPageWrite@0 @473 PRIVATE IoThreadToProcess@0 @474 PRIVATE IoUnregisterFileSystem@4 @475 IoUnregisterFsRegistrationChange@0 @476 PRIVATE IoUnregisterPlugPlayNotification@4 @477 IoUnregisterShutdownNotification@4 @478 IoUpdateShareAccess@0 @479 PRIVATE IoValidateDeviceIoControlAccess@0 @480 PRIVATE IoVerifyPartitionTable@0 @481 PRIVATE IoVerifyVolume@0 @482 PRIVATE IoVolumeDeviceToDosName@0 @483 PRIVATE IoWMIAllocateInstanceIds@0 @484 PRIVATE IoWMIDeviceObjectToInstanceName@0 @485 PRIVATE IoWMIExecuteMethod@0 @486 PRIVATE IoWMIHandleToInstanceName@0 @487 PRIVATE IoWMIOpenBlock@12 @488 IoWMIQueryAllData@0 @489 PRIVATE IoWMIQueryAllDataMultiple@0 @490 PRIVATE IoWMIQuerySingleInstance@0 @491 PRIVATE IoWMIQuerySingleInstanceMultiple@0 @492 PRIVATE IoWMIRegistrationControl@8 @493 IoWMISetNotificationCallback@0 @494 PRIVATE IoWMISetSingleInstance@0 @495 PRIVATE IoWMISetSingleItem@0 @496 PRIVATE IoWMISuggestInstanceName@0 @497 PRIVATE IoWMIWriteEvent@0 @498 PRIVATE IoWriteErrorLogEntry@0 @499 PRIVATE IoWriteOperationCount@0 @500 PRIVATE IoWritePartitionTableEx@0 @501 PRIVATE IoWriteTransferCount@0 @502 PRIVATE KdDebuggerEnabled @503 DATA KdDebuggerNotPresent@0 @504 PRIVATE KdDisableDebugger@0 @505 PRIVATE KdEnableDebugger@0 @506 PRIVATE KdEnteredDebugger@0 @507 PRIVATE KdPollBreakIn@0 @508 PRIVATE KdPowerTransition@0 @509 PRIVATE Ke386CallBios@0 @510 PRIVATE Ke386IoSetAccessProcess@8 @511 Ke386QueryIoAccessMap@0 @512 PRIVATE Ke386SetIoAccessMap@8 @513 KeAcquireInterruptSpinLock@0 @514 PRIVATE KeAcquireSpinLockAtDpcLevel@4 @515 KeAddSystemServiceTable@0 @516 PRIVATE KeAreApcsDisabled@0 @517 PRIVATE KeAttachProcess@0 @518 PRIVATE KeBugCheck@0 @519 PRIVATE KeBugCheckEx@0 @520 PRIVATE KeCancelTimer@4 @521 KeCapturePersistentThreadState@0 @522 PRIVATE KeClearEvent@4 @523 KeConnectInterrupt@0 @524 PRIVATE KeDcacheFlushCount@0 @525 PRIVATE KeDelayExecutionThread@12 @526 KeDeregisterBugCheckCallback@0 @527 PRIVATE KeDeregisterBugCheckReasonCallback@0 @528 PRIVATE KeDetachProcess@0 @529 PRIVATE KeDisconnectInterrupt@0 @530 PRIVATE KeEnterCriticalRegion@0 @531 KeEnterKernelDebugger@0 @532 PRIVATE KeFindConfigurationEntry@0 @533 PRIVATE KeFindConfigurationNextEntry@0 @534 PRIVATE KeFlushEntireTb@0 @535 PRIVATE KeFlushQueuedDpcs@0 @536 KeGetCurrentThread@0 @537 KeGetPreviousMode@0 @538 PRIVATE KeGetRecommendedSharedDataAlignment@0 @539 PRIVATE KeI386AbiosCall@0 @540 PRIVATE KeI386AllocateGdtSelectors@0 @541 PRIVATE KeI386Call16BitCStyleFunction@0 @542 PRIVATE KeI386Call16BitFunction@0 @543 PRIVATE KeI386FlatToGdtSelector@0 @544 PRIVATE KeI386GetLid@0 @545 PRIVATE KeI386MachineType@0 @546 PRIVATE KeI386ReleaseGdtSelectors@0 @547 PRIVATE KeI386ReleaseLid@0 @548 PRIVATE KeI386SetGdtSelector@0 @549 PRIVATE KeIcacheFlushCount@0 @550 PRIVATE KeInitializeApc@0 @551 PRIVATE KeInitializeDeviceQueue@0 @552 PRIVATE KeInitializeDpc@12 @553 KeInitializeEvent@12 @554 KeInitializeInterrupt@0 @555 PRIVATE KeInitializeMutant@0 @556 PRIVATE KeInitializeMutex@8 @557 KeInitializeQueue@0 @558 PRIVATE KeInitializeSemaphore@12 @559 KeInitializeSpinLock@4 @560 KeInitializeTimer@4 @561 KeInitializeTimerEx@8 @562 KeInsertByKeyDeviceQueue@0 @563 PRIVATE KeInsertDeviceQueue@0 @564 PRIVATE KeInsertHeadQueue@0 @565 PRIVATE KeInsertQueue@8 @566 KeInsertQueueApc@0 @567 PRIVATE KeInsertQueueDpc@0 @568 PRIVATE KeIsAttachedProcess@0 @569 PRIVATE KeIsExecutingDpc@0 @570 PRIVATE KeLeaveCriticalRegion@0 @571 KeLoaderBlock@0 @572 PRIVATE KeNumberProcessors@0 @573 PRIVATE KeProfileInterrupt@0 @574 PRIVATE KeProfileInterruptWithSource@0 @575 PRIVATE KePulseEvent@0 @576 PRIVATE KeQueryActiveProcessors@0 @577 KeQueryInterruptTime@0 @578 KeQueryPriorityThread@0 @579 PRIVATE KeQueryRuntimeThread@0 @580 PRIVATE KeQuerySystemTime@4 @581 KeQueryTickCount@4 @582 KeQueryTimeIncrement@0 @583 KeRaiseUserException@0 @584 PRIVATE KeReadStateEvent@0 @585 PRIVATE KeReadStateMutant@0 @586 PRIVATE KeReadStateMutex@0 @587 PRIVATE KeReadStateQueue@0 @588 PRIVATE KeReadStateSemaphore@0 @589 PRIVATE KeReadStateTimer@0 @590 PRIVATE KeRegisterBugCheckCallback@0 @591 PRIVATE KeRegisterBugCheckReasonCallback@0 @592 PRIVATE KeReleaseInterruptSpinLock@0 @593 PRIVATE KeReleaseMutant@0 @594 PRIVATE KeReleaseMutex@8 @595 KeReleaseSemaphore@16 @596 KeReleaseSpinLockFromDpcLevel@4 @597 KeRemoveByKeyDeviceQueue@0 @598 PRIVATE KeRemoveByKeyDeviceQueueIfBusy@0 @599 PRIVATE KeRemoveDeviceQueue@0 @600 PRIVATE KeRemoveEntryDeviceQueue@0 @601 PRIVATE KeRemoveQueue@0 @602 PRIVATE KeRemoveQueueDpc@0 @603 PRIVATE KeRemoveSystemServiceTable@0 @604 PRIVATE KeResetEvent@4 @605 KeRestoreFloatingPointState@0 @606 PRIVATE KeRevertToUserAffinityThread@0 @607 KeRundownQueue@0 @608 PRIVATE KeSaveFloatingPointState@0 @609 PRIVATE KeSaveStateForHibernate@0 @610 PRIVATE KeServiceDescriptorTable @611 DATA KeSetAffinityThread@0 @612 PRIVATE KeSetBasePriorityThread@0 @613 PRIVATE KeSetDmaIoCoherency@0 @614 PRIVATE KeSetEvent@12 @615 KeSetEventBoostPriority@0 @616 PRIVATE KeSetIdealProcessorThread@0 @617 PRIVATE KeSetImportanceDpc@0 @618 PRIVATE KeSetKernelStackSwapEnable@0 @619 PRIVATE KeSetPriorityThread@8 @620 KeSetProfileIrql@0 @621 PRIVATE KeSetSystemAffinityThread@4 @622 KeSetTargetProcessorDpc@8 @623 KeSetTimeIncrement@0 @624 PRIVATE KeSetTimer@0 @625 PRIVATE KeSetTimerEx@20 @626 KeStackAttachProcess@0 @627 PRIVATE KeSynchronizeExecution@0 @628 PRIVATE KeTerminateThread@0 @629 PRIVATE KeTickCount @630 DATA KeUnstackDetachProcess@0 @631 PRIVATE KeUpdateRunTime@0 @632 PRIVATE KeUpdateSystemTime@0 @633 PRIVATE KeUserModeCallback@0 @634 PRIVATE KeWaitForMultipleObjects@32 @635 KeWaitForMutexObject@20 @636 KeWaitForSingleObject@20 @637 KiBugCheckData@0 @638 PRIVATE KiCoprocessorError@0 @639 PRIVATE KiDeliverApc@0 @640 PRIVATE KiDispatchInterrupt@0 @641 PRIVATE KiEnableTimerWatchdog@0 @642 PRIVATE KiIpiServiceRoutine@0 @643 PRIVATE KiUnexpectedInterrupt@0 @644 PRIVATE LdrAccessResource@16 @645 LdrEnumResources@0 @646 PRIVATE LdrFindResourceDirectory_U@16 @647 LdrFindResource_U@16 @648 LpcPortObjectType@0 @649 PRIVATE LpcRequestPort@0 @650 PRIVATE LpcRequestWaitReplyPort@0 @651 PRIVATE LsaCallAuthenticationPackage@0 @652 PRIVATE LsaDeregisterLogonProcess@0 @653 PRIVATE LsaFreeReturnBuffer@0 @654 PRIVATE LsaLogonUser@0 @655 PRIVATE LsaLookupAuthenticationPackage@0 @656 PRIVATE LsaRegisterLogonProcess@0 @657 PRIVATE Mm64BitPhysicalAddress@0 @658 PRIVATE MmAddPhysicalMemory@0 @659 PRIVATE MmAddVerifierThunks@0 @660 PRIVATE MmAdjustWorkingSetSize@0 @661 PRIVATE MmAdvanceMdl@0 @662 PRIVATE MmAllocateContiguousMemory@12 @663 MmAllocateContiguousMemorySpecifyCache@32 @664 MmAllocateMappingAddress@0 @665 PRIVATE MmAllocateNonCachedMemory@4 @666 MmAllocatePagesForMdl@28 @667 MmBuildMdlForNonPagedPool@4 @668 MmCanFileBeTruncated@0 @669 PRIVATE MmCommitSessionMappedView@0 @670 PRIVATE MmCopyVirtualMemory@28 @671 MmCreateMdl@0 @672 PRIVATE MmCreateSection@32 @673 MmDisableModifiedWriteOfSection@0 @674 PRIVATE MmFlushImageSection@0 @675 PRIVATE MmForceSectionClosed@0 @676 PRIVATE MmFreeContiguousMemory@0 @677 PRIVATE MmFreeContiguousMemorySpecifyCache@0 @678 PRIVATE MmFreeMappingAddress@0 @679 PRIVATE MmFreeNonCachedMemory@8 @680 MmFreePagesFromMdl@0 @681 PRIVATE MmGetPhysicalAddress@0 @682 PRIVATE MmGetPhysicalMemoryRanges@0 @683 PRIVATE MmGetSystemRoutineAddress@4 @684 MmGetVirtualForPhysical@0 @685 PRIVATE MmGrowKernelStack@0 @686 PRIVATE MmHighestUserAddress@0 @687 PRIVATE MmIsAddressValid@4 @688 MmIsDriverVerifying@0 @689 PRIVATE MmIsNonPagedSystemAddressValid@0 @690 PRIVATE MmIsRecursiveIoFault@0 @691 PRIVATE MmIsThisAnNtAsSystem@0 @692 PRIVATE MmIsVerifierEnabled@0 @693 PRIVATE MmLockPagableDataSection@0 @694 PRIVATE MmLockPagableImageSection@0 @695 PRIVATE MmLockPagableSectionByHandle@4 @696 MmMapIoSpace@16 @697 MmMapLockedPages@8 @698 MmMapLockedPagesSpecifyCache@24 @699 MmMapLockedPagesWithReservedMapping@0 @700 PRIVATE MmMapMemoryDumpMdl@0 @701 PRIVATE MmMapUserAddressesToPage@0 @702 PRIVATE MmMapVideoDisplay@0 @703 PRIVATE MmMapViewInSessionSpace@0 @704 PRIVATE MmMapViewInSystemSpace@0 @705 PRIVATE MmMapViewOfSection@0 @706 PRIVATE MmMarkPhysicalMemoryAsBad@0 @707 PRIVATE MmMarkPhysicalMemoryAsGood@0 @708 PRIVATE MmPageEntireDriver@4 @709 MmPrefetchPages@0 @710 PRIVATE MmProbeAndLockPages@12 @711 MmProbeAndLockProcessPages@0 @712 PRIVATE MmProbeAndLockSelectedPages@0 @713 PRIVATE MmProtectMdlSystemAddress@0 @714 PRIVATE MmQuerySystemSize@0 @715 MmRemovePhysicalMemory@0 @716 PRIVATE MmResetDriverPaging@4 @717 MmSectionObjectType@0 @718 PRIVATE MmSecureVirtualMemory@0 @719 PRIVATE MmSetAddressRangeModified@0 @720 PRIVATE MmSetBankedSection@0 @721 PRIVATE MmSizeOfMdl@0 @722 PRIVATE MmSystemRangeStart@0 @723 PRIVATE MmTrimAllSystemPagableMemory@0 @724 PRIVATE MmUnlockPagableImageSection@4 @725 MmUnlockPages@4 @726 MmUnmapIoSpace@8 @727 MmUnmapLockedPages@8 @728 MmUnmapReservedMapping@0 @729 PRIVATE MmUnmapVideoDisplay@0 @730 PRIVATE MmUnmapViewInSessionSpace@0 @731 PRIVATE MmUnmapViewInSystemSpace@0 @732 PRIVATE MmUnmapViewOfSection@0 @733 PRIVATE MmUnsecureVirtualMemory@0 @734 PRIVATE MmUserProbeAddress@0 @735 PRIVATE NlsAnsiCodePage=ntdll.NlsAnsiCodePage @736 DATA NlsLeadByteInfo@0 @737 PRIVATE NlsMbCodePageTag=ntdll.NlsMbCodePageTag @738 DATA NlsMbOemCodePageTag=ntdll.NlsMbOemCodePageTag @739 DATA NlsOemCodePage@0 @740 PRIVATE NlsOemLeadByteInfo@0 @741 PRIVATE NtAddAtom@12 @742 NtAdjustPrivilegesToken@24 @743 NtAllocateLocallyUniqueId@4 @744 NtAllocateUuids@16 @745 NtAllocateVirtualMemory@24 @746 NtBuildNumber @747 DATA NtClose@4 @748 NtConnectPort@32 @749 NtCreateEvent@20 @750 NtCreateFile@44 @751 NtCreateSection@28 @752 NtDeleteAtom@4 @753 NtDeleteFile@4 @754 NtDeviceIoControlFile@40 @755 NtDuplicateObject@28 @756 NtDuplicateToken@24 @757 NtFindAtom@12 @758 NtFreeVirtualMemory@16 @759 NtFsControlFile@40 @760 NtGlobalFlag@0 @761 PRIVATE NtLockFile@40 @762 NtMakePermanentObject@0 @763 PRIVATE NtMapViewOfSection@40 @764 NtNotifyChangeDirectoryFile@36 @765 NtOpenFile@24 @766 NtOpenProcess@16 @767 NtOpenProcessToken@12 @768 NtOpenProcessTokenEx@16 @769 NtOpenThread@16 @770 NtOpenThreadToken@16 @771 NtOpenThreadTokenEx@20 @772 NtQueryDirectoryFile@44 @773 NtQueryEaFile@36 @774 NtQueryInformationAtom@20 @775 NtQueryInformationFile@20 @776 NtQueryInformationProcess@20 @777 NtQueryInformationThread@20 @778 NtQueryInformationToken@20 @779 NtQueryQuotaInformationFile@0 @780 PRIVATE NtQuerySecurityObject@20 @781 NtQuerySystemInformation@16 @782 NtQueryVolumeInformationFile@20 @783 NtReadFile@36 @784 NtRequestPort@0 @785 PRIVATE NtRequestWaitReplyPort@12 @786 NtSetEaFile@16 @787 NtSetEvent@8 @788 NtSetInformationFile@20 @789 NtSetInformationProcess@16 @790 NtSetInformationThread@16 @791 NtSetQuotaInformationFile@0 @792 PRIVATE NtSetSecurityObject@12 @793 NtSetVolumeInformationFile@20 @794 NtShutdownSystem@4 @795 NtTraceEvent@0 @796 PRIVATE NtUnlockFile@20 @797 NtVdmControl@0 @798 PRIVATE NtWaitForSingleObject@12 @799 NtWriteFile@36 @800 ObAssignSecurity@0 @801 PRIVATE ObCheckCreateObjectAccess@0 @802 PRIVATE ObCheckObjectAccess@0 @803 PRIVATE ObCloseHandle@0 @804 PRIVATE ObCreateObject@0 @805 PRIVATE ObCreateObjectType@0 @806 PRIVATE ObDereferenceObject@4 @807 ObDereferenceSecurityDescriptor@0 @808 PRIVATE ObFindHandleForObject@0 @809 PRIVATE ObGetFilterVersion@0 @810 ObGetObjectSecurity@0 @811 PRIVATE ObGetObjectType@4 @812 ObInsertObject@0 @813 PRIVATE ObLogSecurityDescriptor@0 @814 PRIVATE ObMakeTemporaryObject@0 @815 PRIVATE ObOpenObjectByName@0 @816 PRIVATE ObOpenObjectByPointer@0 @817 PRIVATE ObQueryNameString@16 @818 ObQueryObjectAuditingByHandle@0 @819 PRIVATE ObReferenceObjectByHandle@24 @820 ObReferenceObjectByName@32 @821 ObReferenceObjectByPointer@16 @822 ObReferenceSecurityDescriptor@0 @823 PRIVATE ObRegisterCallbacks@8 @824 ObReleaseObjectSecurity@0 @825 PRIVATE ObSetHandleAttributes@0 @826 PRIVATE ObSetSecurityDescriptorInfo@0 @827 PRIVATE ObSetSecurityObjectByPointer@0 @828 PRIVATE ObUnRegisterCallbacks@4 @829 PfxFindPrefix@0 @830 PRIVATE PfxInitialize@0 @831 PRIVATE PfxInsertPrefix@0 @832 PRIVATE PfxRemovePrefix@0 @833 PRIVATE PoCallDriver@0 @834 PRIVATE PoCancelDeviceNotify@0 @835 PRIVATE PoQueueShutdownWorkItem@0 @836 PRIVATE PoRegisterDeviceForIdleDetection@0 @837 PRIVATE PoRegisterDeviceNotify@0 @838 PRIVATE PoRegisterSystemState@0 @839 PRIVATE PoRequestPowerIrp@0 @840 PRIVATE PoRequestShutdownEvent@0 @841 PRIVATE PoSetHiberRange@0 @842 PRIVATE PoSetPowerState@12 @843 PoSetSystemState@0 @844 PRIVATE PoShutdownBugCheck@0 @845 PRIVATE PoStartNextPowerIrp@0 @846 PRIVATE PoUnregisterSystemState@0 @847 PRIVATE ProbeForRead@12 @848 ProbeForWrite@12 @849 PsAcquireProcessExitSynchronization@4 @850 PsAssignImpersonationToken@0 @851 PRIVATE PsChargePoolQuota@0 @852 PRIVATE PsChargeProcessNonPagedPoolQuota@0 @853 PRIVATE PsChargeProcessPagedPoolQuota@0 @854 PRIVATE PsChargeProcessPoolQuota@0 @855 PRIVATE PsCreateSystemProcess@0 @856 PRIVATE PsCreateSystemThread@28 @857 PsDereferenceImpersonationToken@0 @858 PRIVATE PsDereferencePrimaryToken@0 @859 PRIVATE PsDisableImpersonation@0 @860 PRIVATE PsEstablishWin32Callouts@0 @861 PRIVATE PsGetContextThread@0 @862 PRIVATE PsGetCurrentProcess@0=IoGetCurrentProcess @863 PsGetCurrentProcessId@0 @864 PsGetCurrentProcessSessionId@0 @865 PRIVATE PsGetCurrentThread@0=KeGetCurrentThread @866 PsGetCurrentThreadId@0 @867 PsGetCurrentThreadPreviousMode@0 @868 PRIVATE PsGetCurrentThreadStackBase@0 @869 PRIVATE PsGetCurrentThreadStackLimit@0 @870 PRIVATE PsGetJobLock@0 @871 PRIVATE PsGetJobSessionId@0 @872 PRIVATE PsGetJobUIRestrictionsClass@0 @873 PRIVATE PsGetProcessCreateTimeQuadPart@0 @874 PRIVATE PsGetProcessDebugPort@0 @875 PRIVATE PsGetProcessExitProcessCalled@0 @876 PRIVATE PsGetProcessExitStatus@0 @877 PRIVATE PsGetProcessExitTime@0 @878 PRIVATE PsGetProcessId@4 @879 PsGetProcessImageFileName@0 @880 PRIVATE PsGetProcessInheritedFromUniqueProcessId@0 @881 PRIVATE PsGetProcessJob@0 @882 PRIVATE PsGetProcessPeb@0 @883 PRIVATE PsGetProcessPriorityClass@0 @884 PRIVATE PsGetProcessSectionBaseAddress@0 @885 PRIVATE PsGetProcessSecurityPort@0 @886 PRIVATE PsGetProcessSessionId@0 @887 PRIVATE PsGetProcessWin32Process@0 @888 PRIVATE PsGetProcessWin32WindowStation@0 @889 PRIVATE PsGetThreadFreezeCount@0 @890 PRIVATE PsGetThreadHardErrorsAreDisabled@0 @891 PRIVATE PsGetThreadId@0 @892 PRIVATE PsGetThreadProcess@0 @893 PRIVATE PsGetThreadProcessId@0 @894 PRIVATE PsGetThreadSessionId@0 @895 PRIVATE PsGetThreadTeb@0 @896 PRIVATE PsGetThreadWin32Thread@0 @897 PRIVATE PsGetVersion@16 @898 PsImpersonateClient@20 @899 PsInitialSystemProcess@0 @900 PRIVATE PsIsProcessBeingDebugged@0 @901 PRIVATE PsIsSystemThread@0 @902 PRIVATE PsIsThreadImpersonating@0 @903 PRIVATE PsIsThreadTerminating@0 @904 PRIVATE PsJobType@0 @905 PRIVATE PsLookupProcessByProcessId@8 @906 PsLookupProcessThreadByCid@0 @907 PRIVATE PsLookupThreadByThreadId@0 @908 PRIVATE PsProcessType @909 DATA PsReferenceImpersonationToken@0 @910 PRIVATE PsReferencePrimaryToken@0 @911 PRIVATE PsReferenceProcessFilePointer@8 @912 PsReleaseProcessExitSynchronization@4 @913 PsRemoveCreateThreadNotifyRoutine@4 @914 PsRemoveLoadImageNotifyRoutine@4 @915 PsRestoreImpersonation@0 @916 PRIVATE PsResumeProcess@4 @917 PsReturnPoolQuota@0 @918 PRIVATE PsReturnProcessNonPagedPoolQuota@0 @919 PRIVATE PsReturnProcessPagedPoolQuota@0 @920 PRIVATE PsRevertThreadToSelf@0 @921 PRIVATE PsRevertToSelf@0 @922 PsSetContextThread@0 @923 PRIVATE PsSetCreateProcessNotifyRoutine@8 @924 PsSetCreateProcessNotifyRoutineEx@8 @925 PsSetCreateThreadNotifyRoutine@4 @926 PsSetJobUIRestrictionsClass@0 @927 PRIVATE PsSetLegoNotifyRoutine@0 @928 PRIVATE PsSetLoadImageNotifyRoutine@4 @929 PsSetProcessPriorityByClass@0 @930 PRIVATE PsSetProcessPriorityClass@0 @931 PRIVATE PsSetProcessSecurityPort@0 @932 PRIVATE PsSetProcessWin32Process@0 @933 PRIVATE PsSetProcessWindowStation@0 @934 PRIVATE PsSetThreadHardErrorsAreDisabled@0 @935 PRIVATE PsSetThreadWin32Thread@0 @936 PRIVATE PsSuspendProcess@4 @937 PsTerminateSystemThread@4 @938 PsThreadType @939 DATA READ_REGISTER_BUFFER_UCHAR@12 @940 READ_REGISTER_BUFFER_ULONG@0 @941 PRIVATE READ_REGISTER_BUFFER_USHORT@0 @942 PRIVATE READ_REGISTER_UCHAR@0 @943 PRIVATE READ_REGISTER_ULONG@0 @944 PRIVATE READ_REGISTER_USHORT@0 @945 PRIVATE RtlAbsoluteToSelfRelativeSD@12 @946 RtlAddAccessAllowedAce@16 @947 RtlAddAccessAllowedAceEx@20 @948 RtlAddAce@20 @949 RtlAddAtomToAtomTable@12 @950 RtlAddRange@0 @951 PRIVATE RtlAllocateHeap@12 @952 RtlAnsiCharToUnicodeChar@4 @953 RtlAnsiStringToUnicodeSize@4 @954 RtlAnsiStringToUnicodeString@12 @955 RtlAppendAsciizToString@8 @956 RtlAppendStringToString@8 @957 RtlAppendUnicodeStringToString@8 @958 RtlAppendUnicodeToString@8 @959 RtlAreAllAccessesGranted@8 @960 RtlAreAnyAccessesGranted@8 @961 RtlAreBitsClear@12 @962 RtlAreBitsSet@12 @963 RtlAssert@16 @964 RtlCaptureContext@4 @965 RtlCaptureStackBackTrace@16 @966 RtlCharToInteger@12 @967 RtlCheckRegistryKey@8 @968 RtlClearAllBits@4 @969 RtlClearBit@0 @970 PRIVATE RtlClearBits@12 @971 RtlCompareMemory@12 @972 RtlCompareMemoryUlong@12 @973 RtlCompareString@12 @974 RtlCompareUnicodeString@12 @975 RtlCompressBuffer@32 @976 RtlCompressChunks@0 @977 PRIVATE RtlConvertLongToLargeInteger@4 @978 RtlConvertSidToUnicodeString@12 @979 RtlConvertUlongToLargeInteger@4 @980 RtlCopyLuid@8 @981 RtlCopyRangeList@0 @982 PRIVATE RtlCopySid@12 @983 RtlCopyString@8 @984 RtlCopyUnicodeString@8 @985 RtlCreateAcl@12 @986 RtlCreateAtomTable@8 @987 RtlCreateHeap@24 @988 RtlCreateRegistryKey@8 @989 RtlCreateSecurityDescriptor@8 @990 RtlCreateSystemVolumeInformationFolder@0 @991 PRIVATE RtlCreateUnicodeString@8 @992 RtlCustomCPToUnicodeN@0 @993 PRIVATE RtlDecompressBuffer@24 @994 RtlDecompressChunks@0 @995 PRIVATE RtlDecompressFragment@32 @996 RtlDelete@0 @997 PRIVATE RtlDeleteAce@8 @998 RtlDeleteAtomFromAtomTable@8 @999 RtlDeleteElementGenericTable@0 @1000 PRIVATE RtlDeleteElementGenericTableAvl@0 @1001 PRIVATE RtlDeleteNoSplay@0 @1002 PRIVATE RtlDeleteOwnersRanges@0 @1003 PRIVATE RtlDeleteRange@0 @1004 PRIVATE RtlDeleteRegistryValue@12 @1005 RtlDescribeChunk@0 @1006 PRIVATE RtlDestroyAtomTable@4 @1007 RtlDestroyHeap@4 @1008 RtlDowncaseUnicodeString@12 @1009 RtlEmptyAtomTable@8 @1010 RtlEnlargedIntegerMultiply@8 @1011 RtlEnlargedUnsignedDivide@16 @1012 RtlEnlargedUnsignedMultiply@8 @1013 RtlEnumerateGenericTable@0 @1014 PRIVATE RtlEnumerateGenericTableAvl@0 @1015 PRIVATE RtlEnumerateGenericTableLikeADirectory@0 @1016 PRIVATE RtlEnumerateGenericTableWithoutSplaying@8 @1017 RtlEnumerateGenericTableWithoutSplayingAvl@0 @1018 PRIVATE RtlEqualLuid@8 @1019 RtlEqualSid@8 @1020 RtlEqualString@12 @1021 RtlEqualUnicodeString@12 @1022 RtlExtendedIntegerMultiply@12 @1023 RtlExtendedLargeIntegerDivide@16 @1024 RtlExtendedMagicDivide@20 @1025 RtlFillMemory@12 @1026 RtlFillMemoryUlong@12 @1027 RtlFindClearBits@12 @1028 RtlFindClearBitsAndSet@12 @1029 RtlFindClearRuns@16 @1030 RtlFindFirstRunClear@0 @1031 PRIVATE RtlFindLastBackwardRunClear@12 @1032 RtlFindLeastSignificantBit@8 @1033 RtlFindLongestRunClear@8 @1034 RtlFindMessage@20 @1035 RtlFindMostSignificantBit@8 @1036 RtlFindNextForwardRunClear@12 @1037 RtlFindRange@0 @1038 PRIVATE RtlFindSetBits@12 @1039 RtlFindSetBitsAndClear@12 @1040 RtlFindUnicodePrefix@0 @1041 PRIVATE RtlFormatCurrentUserKeyPath@4 @1042 RtlFreeAnsiString@4 @1043 RtlFreeHeap@12 @1044 RtlFreeOemString@4 @1045 RtlFreeRangeList@0 @1046 PRIVATE RtlFreeUnicodeString@4 @1047 RtlGUIDFromString@8 @1048 RtlGenerate8dot3Name@0 @1049 PRIVATE RtlGetAce@12 @1050 RtlGetCallersAddress@0 @1051 PRIVATE RtlGetCompressionWorkSpaceSize@12 @1052 RtlGetDaclSecurityDescriptor@16 @1053 RtlGetDefaultCodePage@0 @1054 PRIVATE RtlGetElementGenericTable@0 @1055 PRIVATE RtlGetElementGenericTableAvl@0 @1056 PRIVATE RtlGetFirstRange@0 @1057 PRIVATE RtlGetGroupSecurityDescriptor@12 @1058 RtlGetNextRange@0 @1059 PRIVATE RtlGetNtGlobalFlags@0 @1060 RtlGetOwnerSecurityDescriptor@12 @1061 RtlGetSaclSecurityDescriptor@16 @1062 RtlGetSetBootStatusData@0 @1063 PRIVATE RtlGetVersion@4 @1064 RtlHashUnicodeString@16 @1065 RtlImageDirectoryEntryToData@16 @1066 RtlImageNtHeader@4 @1067 RtlInitAnsiString@8 @1068 RtlInitCodePageTable@0 @1069 PRIVATE RtlInitString@8 @1070 RtlInitUnicodeString@8 @1071 RtlInitializeBitMap@12 @1072 RtlInitializeGenericTable@20 @1073 RtlInitializeGenericTableAvl@20 @1074 RtlInitializeRangeList@0 @1075 PRIVATE RtlInitializeSid@12 @1076 RtlInitializeUnicodePrefix@0 @1077 PRIVATE RtlInsertElementGenericTable@0 @1078 PRIVATE RtlInsertElementGenericTableAvl@16 @1079 RtlInsertElementGenericTableFull@0 @1080 PRIVATE RtlInsertElementGenericTableFullAvl@0 @1081 PRIVATE RtlInsertUnicodePrefix@0 @1082 PRIVATE RtlInt64ToUnicodeString@16 @1083 RtlIntegerToChar@16 @1084 RtlIntegerToUnicode@0 @1085 PRIVATE RtlIntegerToUnicodeString@12 @1086 RtlInvertRangeList@0 @1087 PRIVATE RtlIpv4AddressToStringA@8 @1088 RtlIpv4AddressToStringExA@16 @1089 RtlIpv4AddressToStringExW@16 @1090 RtlIpv4AddressToStringW@8 @1091 RtlIpv4StringToAddressA@0 @1092 PRIVATE RtlIpv4StringToAddressExA@0 @1093 PRIVATE RtlIpv4StringToAddressExW@16 @1094 RtlIpv4StringToAddressW@16 @1095 RtlIpv6AddressToStringA@0 @1096 PRIVATE RtlIpv6AddressToStringExA@0 @1097 PRIVATE RtlIpv6AddressToStringExW@0 @1098 PRIVATE RtlIpv6AddressToStringW@0 @1099 PRIVATE RtlIpv6StringToAddressA@0 @1100 PRIVATE RtlIpv6StringToAddressExA@0 @1101 PRIVATE RtlIpv6StringToAddressExW@16 @1102 RtlIpv6StringToAddressW@0 @1103 PRIVATE RtlIsGenericTableEmpty@0 @1104 PRIVATE RtlIsGenericTableEmptyAvl@0 @1105 PRIVATE RtlIsNameLegalDOS8Dot3@12 @1106 RtlIsRangeAvailable@0 @1107 PRIVATE RtlIsValidOemCharacter@0 @1108 PRIVATE RtlLargeIntegerAdd@16 @1109 RtlLargeIntegerArithmeticShift@12 @1110 RtlLargeIntegerDivide@20 @1111 RtlLargeIntegerNegate@8 @1112 RtlLargeIntegerShiftLeft@12 @1113 RtlLargeIntegerShiftRight@12 @1114 RtlLargeIntegerSubtract@16 @1115 RtlLengthRequiredSid@4 @1116 RtlLengthSecurityDescriptor@4 @1117 RtlLengthSid@4 @1118 RtlLockBootStatusData@0 @1119 PRIVATE RtlLookupAtomInAtomTable@12 @1120 RtlLookupElementGenericTable@0 @1121 PRIVATE RtlLookupElementGenericTableAvl@0 @1122 PRIVATE RtlLookupElementGenericTableFull@0 @1123 PRIVATE RtlLookupElementGenericTableFullAvl@0 @1124 PRIVATE RtlMapGenericMask@8 @1125 RtlMapSecurityErrorToNtStatus@0 @1126 PRIVATE RtlMergeRangeLists@0 @1127 PRIVATE RtlMoveMemory@12 @1128 RtlMultiByteToUnicodeN@20 @1129 RtlMultiByteToUnicodeSize@12 @1130 RtlNextUnicodePrefix@0 @1131 PRIVATE RtlNtStatusToDosError@4 @1132 RtlNtStatusToDosErrorNoTeb@4 @1133 RtlNumberGenericTableElements@4 @1134 RtlNumberGenericTableElementsAvl@0 @1135 PRIVATE RtlNumberOfClearBits@4 @1136 RtlNumberOfSetBits@4 @1137 RtlOemStringToCountedUnicodeString@0 @1138 PRIVATE RtlOemStringToUnicodeSize@4 @1139 RtlOemStringToUnicodeString@12 @1140 RtlOemToUnicodeN@20 @1141 RtlPinAtomInAtomTable@8 @1142 RtlPrefixString@12 @1143 RtlPrefixUnicodeString@12 @1144 RtlQueryAtomInAtomTable@24 @1145 RtlQueryRegistryValues@20 @1146 RtlQueryTimeZoneInformation@4 @1147 RtlRaiseException@4 @1148 RtlRandom@4 @1149 RtlRandomEx@4 @1150 RtlRealPredecessor@0 @1151 PRIVATE RtlRealSuccessor@0 @1152 PRIVATE RtlRemoveUnicodePrefix@0 @1153 PRIVATE RtlReserveChunk@0 @1154 PRIVATE RtlSecondsSince1970ToTime@8 @1155 RtlSecondsSince1980ToTime@8 @1156 RtlSelfRelativeToAbsoluteSD2@0 @1157 PRIVATE RtlSelfRelativeToAbsoluteSD@44 @1158 RtlSetAllBits@4 @1159 RtlSetBit@0 @1160 PRIVATE RtlSetBits@12 @1161 RtlSetDaclSecurityDescriptor@16 @1162 RtlSetGroupSecurityDescriptor@12 @1163 RtlSetOwnerSecurityDescriptor@12 @1164 RtlSetSaclSecurityDescriptor@16 @1165 RtlSetTimeZoneInformation@4 @1166 RtlSizeHeap@12 @1167 RtlSplay@0 @1168 PRIVATE RtlStringFromGUID@8 @1169 RtlSubAuthorityCountSid@4 @1170 RtlSubAuthoritySid@8 @1171 RtlSubtreePredecessor@0 @1172 PRIVATE RtlSubtreeSuccessor@0 @1173 PRIVATE RtlTestBit@0 @1174 PRIVATE RtlTimeFieldsToTime@8 @1175 RtlTimeToElapsedTimeFields@8 @1176 RtlTimeToSecondsSince1970@8 @1177 RtlTimeToSecondsSince1980@8 @1178 RtlTimeToTimeFields@8 @1179 RtlTraceDatabaseAdd@0 @1180 PRIVATE RtlTraceDatabaseCreate@0 @1181 PRIVATE RtlTraceDatabaseDestroy@0 @1182 PRIVATE RtlTraceDatabaseEnumerate@0 @1183 PRIVATE RtlTraceDatabaseFind@0 @1184 PRIVATE RtlTraceDatabaseLock@0 @1185 PRIVATE RtlTraceDatabaseUnlock@0 @1186 PRIVATE RtlTraceDatabaseValidate@0 @1187 PRIVATE RtlUnicodeStringToAnsiSize@4 @1188 RtlUnicodeStringToAnsiString@12 @1189 RtlUnicodeStringToCountedOemString@0 @1190 PRIVATE RtlUnicodeStringToInteger@12 @1191 RtlUnicodeStringToOemSize@4 @1192 RtlUnicodeStringToOemString@12 @1193 RtlUnicodeToCustomCPN@0 @1194 PRIVATE RtlUnicodeToMultiByteN@20 @1195 RtlUnicodeToMultiByteSize@12 @1196 RtlUnicodeToOemN@20 @1197 RtlUnlockBootStatusData@0 @1198 PRIVATE RtlUnwind@16 @1199 RtlUpcaseUnicodeChar@4 @1200 RtlUpcaseUnicodeString@12 @1201 RtlUpcaseUnicodeStringToAnsiString@12 @1202 RtlUpcaseUnicodeStringToCountedOemString@12 @1203 RtlUpcaseUnicodeStringToOemString@12 @1204 RtlUpcaseUnicodeToCustomCPN@0 @1205 PRIVATE RtlUpcaseUnicodeToMultiByteN@20 @1206 RtlUpcaseUnicodeToOemN@20 @1207 RtlUpperChar@4 @1208 RtlUpperString@8 @1209 RtlValidRelativeSecurityDescriptor@12 @1210 RtlValidSecurityDescriptor@4 @1211 RtlValidSid@4 @1212 RtlVerifyVersionInfo@16 @1213 RtlVolumeDeviceToDosName@0 @1214 PRIVATE RtlWalkFrameChain@0 @1215 PRIVATE RtlWriteRegistryValue@24 @1216 RtlZeroHeap@0 @1217 PRIVATE RtlZeroMemory@8 @1218 RtlxAnsiStringToUnicodeSize@4 @1219 RtlxOemStringToUnicodeSize@4 @1220 RtlxUnicodeStringToAnsiSize@4 @1221 RtlxUnicodeStringToOemSize@4 @1222 SeAccessCheck@0 @1223 PRIVATE SeAppendPrivileges@0 @1224 PRIVATE SeAssignSecurity@0 @1225 PRIVATE SeAssignSecurityEx@0 @1226 PRIVATE SeAuditHardLinkCreation@0 @1227 PRIVATE SeAuditingFileEvents@0 @1228 PRIVATE SeAuditingFileEventsWithContext@0 @1229 PRIVATE SeAuditingFileOrGlobalEvents@0 @1230 PRIVATE SeAuditingHardLinkEvents@0 @1231 PRIVATE SeAuditingHardLinkEventsWithContext@0 @1232 PRIVATE SeCaptureSecurityDescriptor@0 @1233 PRIVATE SeCaptureSubjectContext@0 @1234 PRIVATE SeCloseObjectAuditAlarm@0 @1235 PRIVATE SeCreateAccessState@0 @1236 PRIVATE SeCreateClientSecurity@0 @1237 PRIVATE SeCreateClientSecurityFromSubjectContext@0 @1238 PRIVATE SeDeassignSecurity@0 @1239 PRIVATE SeDeleteAccessState@0 @1240 PRIVATE SeDeleteObjectAuditAlarm@0 @1241 PRIVATE SeExports@0 @1242 PRIVATE SeFilterToken@0 @1243 PRIVATE SeFreePrivileges@0 @1244 PRIVATE SeImpersonateClient@0 @1245 PRIVATE SeImpersonateClientEx@0 @1246 PRIVATE SeLockSubjectContext@0 @1247 PRIVATE SeMarkLogonSessionForTerminationNotification@0 @1248 PRIVATE SeOpenObjectAuditAlarm@0 @1249 PRIVATE SeOpenObjectForDeleteAuditAlarm@0 @1250 PRIVATE SePrivilegeCheck@0 @1251 PRIVATE SePrivilegeObjectAuditAlarm@0 @1252 PRIVATE SePublicDefaultDacl@0 @1253 PRIVATE SeQueryAuthenticationIdToken@0 @1254 PRIVATE SeQueryInformationToken@0 @1255 PRIVATE SeQuerySecurityDescriptorInfo@0 @1256 PRIVATE SeQuerySessionIdToken@0 @1257 PRIVATE SeRegisterLogonSessionTerminatedRoutine@0 @1258 PRIVATE SeReleaseSecurityDescriptor@0 @1259 PRIVATE SeReleaseSubjectContext@0 @1260 PRIVATE SeSetAccessStateGenericMapping@0 @1261 PRIVATE SeSetSecurityDescriptorInfo@0 @1262 PRIVATE SeSetSecurityDescriptorInfoEx@0 @1263 PRIVATE SeSinglePrivilegeCheck@12 @1264 SeSystemDefaultDacl@0 @1265 PRIVATE SeTokenImpersonationLevel@0 @1266 PRIVATE SeTokenIsAdmin@0 @1267 PRIVATE SeTokenIsRestricted@0 @1268 PRIVATE SeTokenIsWriteRestricted@0 @1269 PRIVATE SeTokenObjectType @1270 DATA SeTokenType@0 @1271 PRIVATE SeUnlockSubjectContext@0 @1272 PRIVATE SeUnregisterLogonSessionTerminatedRoutine@0 @1273 PRIVATE SeValidSecurityDescriptor@0 @1274 PRIVATE VerSetConditionMask@16 @1275 VfFailDeviceNode@0 @1276 PRIVATE VfFailDriver@0 @1277 PRIVATE VfFailSystemBIOS@0 @1278 PRIVATE VfIsVerificationEnabled@0 @1279 PRIVATE WRITE_REGISTER_BUFFER_UCHAR@0 @1280 PRIVATE WRITE_REGISTER_BUFFER_ULONG@0 @1281 PRIVATE WRITE_REGISTER_BUFFER_USHORT@0 @1282 PRIVATE WRITE_REGISTER_UCHAR@0 @1283 PRIVATE WRITE_REGISTER_ULONG@0 @1284 PRIVATE WRITE_REGISTER_USHORT@0 @1285 PRIVATE WmiFlushTrace@0 @1286 PRIVATE WmiQueryTrace@0 @1287 PRIVATE WmiQueryTraceInformation@0 @1288 PRIVATE WmiStartTrace@0 @1289 PRIVATE WmiStopTrace@0 @1290 PRIVATE WmiTraceMessage@0 @1291 PRIVATE WmiTraceMessageVa@0 @1292 PRIVATE WmiUpdateTrace@0 @1293 PRIVATE XIPDispatch@0 @1294 PRIVATE ZwAccessCheckAndAuditAlarm@44=NtAccessCheckAndAuditAlarm @1295 PRIVATE ZwAddBootEntry@0 @1296 PRIVATE ZwAdjustPrivilegesToken@24=NtAdjustPrivilegesToken @1297 PRIVATE ZwAlertThread@4=NtAlertThread @1298 PRIVATE ZwAllocateVirtualMemory@24=NtAllocateVirtualMemory @1299 PRIVATE ZwAssignProcessToJobObject@8=NtAssignProcessToJobObject @1300 PRIVATE ZwCancelIoFile@8=NtCancelIoFile @1301 PRIVATE ZwCancelTimer@8=NtCancelTimer @1302 PRIVATE ZwClearEvent@4=NtClearEvent @1303 PRIVATE ZwClose@4=NtClose @1304 ZwCloseObjectAuditAlarm@0 @1305 PRIVATE ZwConnectPort@32=NtConnectPort @1306 PRIVATE ZwCreateDirectoryObject@12=NtCreateDirectoryObject @1307 PRIVATE ZwCreateEvent@20=NtCreateEvent @1308 ZwCreateFile@44=NtCreateFile @1309 ZwCreateJobObject@12=NtCreateJobObject @1310 PRIVATE ZwCreateKey@28=NtCreateKey @1311 PRIVATE ZwCreateSection@28=NtCreateSection @1312 PRIVATE ZwCreateSymbolicLinkObject@16=NtCreateSymbolicLinkObject @1313 PRIVATE ZwCreateTimer@16=NtCreateTimer @1314 PRIVATE ZwDeleteBootEntry@0 @1315 PRIVATE ZwDeleteFile@4=NtDeleteFile @1316 PRIVATE ZwDeleteKey@4=NtDeleteKey @1317 PRIVATE ZwDeleteValueKey@8=NtDeleteValueKey @1318 PRIVATE ZwDeviceIoControlFile@40=NtDeviceIoControlFile @1319 PRIVATE ZwDisplayString@4=NtDisplayString @1320 PRIVATE ZwDuplicateObject@28=NtDuplicateObject @1321 ZwDuplicateToken@24=NtDuplicateToken @1322 PRIVATE ZwEnumerateBootEntries@0 @1323 PRIVATE ZwEnumerateKey@24=NtEnumerateKey @1324 PRIVATE ZwEnumerateValueKey@24=NtEnumerateValueKey @1325 PRIVATE ZwFlushInstructionCache@12=NtFlushInstructionCache @1326 PRIVATE ZwFlushKey@4=NtFlushKey @1327 PRIVATE ZwFlushVirtualMemory@16=NtFlushVirtualMemory @1328 PRIVATE ZwFreeVirtualMemory@16=NtFreeVirtualMemory @1329 PRIVATE ZwFsControlFile@40=NtFsControlFile @1330 PRIVATE ZwInitiatePowerAction@16=NtInitiatePowerAction @1331 PRIVATE ZwIsProcessInJob@8=NtIsProcessInJob @1332 PRIVATE ZwLoadDriver@4 @1333 ZwLoadKey@8=NtLoadKey @1334 PRIVATE ZwMakeTemporaryObject@4=NtMakeTemporaryObject @1335 PRIVATE ZwMapViewOfSection@40=NtMapViewOfSection @1336 PRIVATE ZwNotifyChangeKey@40=NtNotifyChangeKey @1337 PRIVATE ZwOpenDirectoryObject@12=NtOpenDirectoryObject @1338 PRIVATE ZwOpenEvent@12=NtOpenEvent @1339 PRIVATE ZwOpenFile@24=NtOpenFile @1340 ZwOpenJobObject@12=NtOpenJobObject @1341 PRIVATE ZwOpenKey@12=NtOpenKey @1342 PRIVATE ZwOpenProcess@16=NtOpenProcess @1343 PRIVATE ZwOpenProcessToken@12=NtOpenProcessToken @1344 PRIVATE ZwOpenProcessTokenEx@16=NtOpenProcessTokenEx @1345 PRIVATE ZwOpenSection@12=NtOpenSection @1346 PRIVATE ZwOpenSymbolicLinkObject@12=NtOpenSymbolicLinkObject @1347 PRIVATE ZwOpenThread@16=NtOpenThread @1348 PRIVATE ZwOpenThreadToken@16=NtOpenThreadToken @1349 PRIVATE ZwOpenThreadTokenEx@20=NtOpenThreadTokenEx @1350 PRIVATE ZwOpenTimer@12=NtOpenTimer @1351 PRIVATE ZwPowerInformation@20=NtPowerInformation @1352 PRIVATE ZwPulseEvent@8=NtPulseEvent @1353 PRIVATE ZwQueryBootEntryOrder@0 @1354 PRIVATE ZwQueryBootOptions@0 @1355 PRIVATE ZwQueryDefaultLocale@8=NtQueryDefaultLocale @1356 PRIVATE ZwQueryDefaultUILanguage@4=NtQueryDefaultUILanguage @1357 PRIVATE ZwQueryDirectoryFile@44=NtQueryDirectoryFile @1358 PRIVATE ZwQueryDirectoryObject@28=NtQueryDirectoryObject @1359 PRIVATE ZwQueryEaFile@36=NtQueryEaFile @1360 PRIVATE ZwQueryFullAttributesFile@8=NtQueryFullAttributesFile @1361 PRIVATE ZwQueryInformationFile@20=NtQueryInformationFile @1362 PRIVATE ZwQueryInformationJobObject@20=NtQueryInformationJobObject @1363 PRIVATE ZwQueryInformationProcess@20=NtQueryInformationProcess @1364 PRIVATE ZwQueryInformationThread@20=NtQueryInformationThread @1365 PRIVATE ZwQueryInformationToken@20=NtQueryInformationToken @1366 PRIVATE ZwQueryInstallUILanguage@4=NtQueryInstallUILanguage @1367 PRIVATE ZwQueryKey@20=NtQueryKey @1368 PRIVATE ZwQueryObject@20=NtQueryObject @1369 PRIVATE ZwQuerySection@20=NtQuerySection @1370 PRIVATE ZwQuerySecurityObject@20=NtQuerySecurityObject @1371 PRIVATE ZwQuerySymbolicLinkObject@12=NtQuerySymbolicLinkObject @1372 PRIVATE ZwQuerySystemInformation@16=NtQuerySystemInformation @1373 PRIVATE ZwQueryValueKey@24=NtQueryValueKey @1374 PRIVATE ZwQueryVolumeInformationFile@20=NtQueryVolumeInformationFile @1375 PRIVATE ZwReadFile@36=NtReadFile @1376 PRIVATE ZwReplaceKey@12=NtReplaceKey @1377 PRIVATE ZwRequestWaitReplyPort@12=NtRequestWaitReplyPort @1378 PRIVATE ZwResetEvent@8=NtResetEvent @1379 PRIVATE ZwRestoreKey@12=NtRestoreKey @1380 PRIVATE ZwSaveKey@8=NtSaveKey @1381 PRIVATE ZwSaveKeyEx@0 @1382 PRIVATE ZwSetBootEntryOrder@0 @1383 PRIVATE ZwSetBootOptions@0 @1384 PRIVATE ZwSetDefaultLocale@8=NtSetDefaultLocale @1385 PRIVATE ZwSetDefaultUILanguage@4=NtSetDefaultUILanguage @1386 PRIVATE ZwSetEaFile@16=NtSetEaFile @1387 PRIVATE ZwSetEvent@8=NtSetEvent @1388 ZwSetInformationFile@20=NtSetInformationFile @1389 PRIVATE ZwSetInformationJobObject@16=NtSetInformationJobObject @1390 PRIVATE ZwSetInformationObject@16=NtSetInformationObject @1391 PRIVATE ZwSetInformationProcess@16=NtSetInformationProcess @1392 PRIVATE ZwSetInformationThread@16=NtSetInformationThread @1393 PRIVATE ZwSetSecurityObject@12=NtSetSecurityObject @1394 PRIVATE ZwSetSystemInformation@12=NtSetSystemInformation @1395 PRIVATE ZwSetSystemTime@8=NtSetSystemTime @1396 PRIVATE ZwSetTimer@28=NtSetTimer @1397 PRIVATE ZwSetValueKey@24=NtSetValueKey @1398 PRIVATE ZwSetVolumeInformationFile@20=NtSetVolumeInformationFile @1399 PRIVATE ZwTerminateJobObject@8=NtTerminateJobObject @1400 PRIVATE ZwTerminateProcess@8=NtTerminateProcess @1401 PRIVATE ZwTranslateFilePath@0 @1402 PRIVATE ZwUnloadDriver@4 @1403 ZwUnloadKey@4=NtUnloadKey @1404 PRIVATE ZwUnmapViewOfSection@8=NtUnmapViewOfSection @1405 PRIVATE ZwWaitForMultipleObjects@20=NtWaitForMultipleObjects @1406 PRIVATE ZwWaitForSingleObject@12=NtWaitForSingleObject @1407 ZwWriteFile@36=NtWriteFile @1408 ZwYieldExecution@0=NtYieldExecution @1409 PRIVATE _CIcos=msvcrt._CIcos @1410 PRIVATE _CIsin=msvcrt._CIsin @1411 PRIVATE _CIsqrt=msvcrt._CIsqrt @1412 PRIVATE _abnormal_termination=msvcrt._abnormal_termination @1413 PRIVATE _alldiv@16 @1414 PRIVATE _alldvrm@16 @1415 PRIVATE _allmul@16 @1416 PRIVATE _alloca_probe@0 @1417 PRIVATE _allrem@16 @1418 PRIVATE _allshl@12 @1419 PRIVATE _allshr@12 @1420 PRIVATE _aulldiv@16 @1421 PRIVATE _aulldvrm@16 @1422 PRIVATE _aullrem@16 @1423 PRIVATE _aullshr@12 @1424 PRIVATE _chkstk@0 @1425 PRIVATE _except_handler2=msvcrt._except_handler2 @1426 PRIVATE _except_handler3=msvcrt._except_handler3 @1427 PRIVATE _global_unwind2=msvcrt._global_unwind2 @1428 PRIVATE _itoa=msvcrt._itoa @1429 PRIVATE _itow=msvcrt._itow @1430 PRIVATE _local_unwind2=msvcrt._local_unwind2 @1431 PRIVATE _purecall=msvcrt._purecall @1432 PRIVATE _snprintf=msvcrt._snprintf @1433 PRIVATE _snwprintf=msvcrt._snwprintf @1434 PRIVATE _stricmp=NTOSKRNL__stricmp @1435 PRIVATE _strlwr=msvcrt._strlwr @1436 PRIVATE _strnicmp=NTOSKRNL__strnicmp @1437 PRIVATE _strnset=msvcrt._strnset @1438 PRIVATE _strrev=msvcrt._strrev @1439 PRIVATE _strset=msvcrt._strset @1440 PRIVATE _strupr=msvcrt._strupr @1441 PRIVATE _vsnprintf=msvcrt._vsnprintf @1442 _vsnwprintf=msvcrt._vsnwprintf @1443 PRIVATE _wcsicmp=msvcrt._wcsicmp @1444 PRIVATE _wcslwr=msvcrt._wcslwr @1445 PRIVATE _wcsnicmp=NTOSKRNL__wcsnicmp @1446 PRIVATE _wcsnset=msvcrt._wcsnset @1447 PRIVATE _wcsrev=msvcrt._wcsrev @1448 PRIVATE _wcsupr=msvcrt._wcsupr @1449 PRIVATE atoi=msvcrt.atoi @1450 PRIVATE atol=msvcrt.atol @1451 PRIVATE isdigit=msvcrt.isdigit @1452 PRIVATE islower=msvcrt.islower @1453 PRIVATE isprint=msvcrt.isprint @1454 PRIVATE isspace=msvcrt.isspace @1455 PRIVATE isupper=msvcrt.isupper @1456 PRIVATE isxdigit=msvcrt.isxdigit @1457 PRIVATE mbstowcs=msvcrt.mbstowcs @1458 PRIVATE mbtowc=msvcrt.mbtowc @1459 PRIVATE memchr=msvcrt.memchr @1460 PRIVATE memcpy=NTOSKRNL_memcpy @1461 PRIVATE memmove=msvcrt.memmove @1462 PRIVATE memset=NTOSKRNL_memset @1463 PRIVATE qsort=msvcrt.qsort @1464 PRIVATE rand=msvcrt.rand @1465 PRIVATE sprintf=msvcrt.sprintf @1466 PRIVATE srand=msvcrt.srand @1467 PRIVATE strcat=msvcrt.strcat @1468 PRIVATE strchr=msvcrt.strchr @1469 PRIVATE strcmp=msvcrt.strcmp @1470 PRIVATE strcpy=msvcrt.strcpy @1471 PRIVATE strlen=msvcrt.strlen @1472 PRIVATE strncat=msvcrt.strncat @1473 PRIVATE strncmp=msvcrt.strncmp @1474 PRIVATE strncpy=msvcrt.strncpy @1475 PRIVATE strrchr=msvcrt.strrchr @1476 PRIVATE strspn=msvcrt.strspn @1477 PRIVATE strstr=msvcrt.strstr @1478 PRIVATE swprintf=msvcrt.swprintf @1479 PRIVATE tolower=msvcrt.tolower @1480 PRIVATE toupper=msvcrt.toupper @1481 PRIVATE towlower=msvcrt.towlower @1482 PRIVATE towupper=msvcrt.towupper @1483 PRIVATE vDbgPrintEx@16 @1484 vDbgPrintExWithPrefix@20 @1485 vsprintf=msvcrt.vsprintf @1486 PRIVATE wcscat=msvcrt.wcscat @1487 PRIVATE wcschr=msvcrt.wcschr @1488 PRIVATE wcscmp=msvcrt.wcscmp @1489 PRIVATE wcscpy=msvcrt.wcscpy @1490 PRIVATE wcscspn=msvcrt.wcscspn @1491 PRIVATE wcslen=msvcrt.wcslen @1492 PRIVATE wcsncat=msvcrt.wcsncat @1493 PRIVATE wcsncmp=NTOSKRNL_wcsncmp @1494 PRIVATE wcsncpy=msvcrt.wcsncpy @1495 PRIVATE wcsrchr=msvcrt.wcsrchr @1496 PRIVATE wcsspn=msvcrt.wcsspn @1497 PRIVATE wcsstr=msvcrt.wcsstr @1498 PRIVATE wcstombs=msvcrt.wcstombs @1499 PRIVATE wctomb=msvcrt.wctomb @1500 PRIVATE wine_ntoskrnl_main_loop @1501