wine-tkg-osu-4.6/lib/wine/libntoskrnl.def
2021-07-21 16:06:01 +02:00

1507 lines
57 KiB
Modula-2

; File generated automatically from /home/ubuntu/buildbot/runners/wine/wine-src/dlls/ntoskrnl.exe/ntoskrnl.exe.spec; do not edit!
LIBRARY ntoskrnl.exe
EXPORTS
ExAcquireFastMutexUnsafe@4=__fastcall_ExAcquireFastMutexUnsafe @1
ExAcquireRundownProtection@0 @2 PRIVATE
ExAcquireRundownProtectionEx@0 @3 PRIVATE
ExInitializeRundownProtection@0 @4 PRIVATE
ExInterlockedAddLargeStatistic@0 @5 PRIVATE
ExInterlockedCompareExchange64@0 @6 PRIVATE
ExInterlockedFlushSList@0 @7 PRIVATE
ExInterlockedPopEntrySList@8=__fastcall_NTOSKRNL_ExInterlockedPopEntrySList @8
ExInterlockedPushEntrySList@12=__fastcall_NTOSKRNL_ExInterlockedPushEntrySList @9
ExReInitializeRundownProtection@0 @10 PRIVATE
ExReleaseFastMutexUnsafe@4=__fastcall_ExReleaseFastMutexUnsafe @11
ExReleaseResourceLite@4=__fastcall_ExReleaseResourceLite @12
ExReleaseRundownProtection@0 @13 PRIVATE
ExReleaseRundownProtectionEx@0 @14 PRIVATE
ExRundownCompleted@0 @15 PRIVATE
ExWaitForRundownProtectionRelease@0 @16 PRIVATE
ExfAcquirePushLockExclusive@0 @17 PRIVATE
ExfAcquirePushLockShared@0 @18 PRIVATE
ExfInterlockedAddUlong@0 @19 PRIVATE
ExfInterlockedCompareExchange64@0 @20 PRIVATE
ExfInterlockedInsertHeadList@0 @21 PRIVATE
ExfInterlockedInsertTailList@0 @22 PRIVATE
ExfInterlockedPopEntryList@0 @23 PRIVATE
ExfInterlockedPushEntryList@0 @24 PRIVATE
ExfInterlockedRemoveHeadList@8=__fastcall_ExfInterlockedRemoveHeadList @25
ExfReleasePushLock@0 @26 PRIVATE
Exfi386InterlockedDecrementLong@0 @27 PRIVATE
Exfi386InterlockedExchangeUlong@0 @28 PRIVATE
Exfi386InterlockedIncrementLong@0 @29 PRIVATE
HalExamineMBR@0 @30 PRIVATE
InterlockedCompareExchange@12=__fastcall_NTOSKRNL_InterlockedCompareExchange @31
InterlockedDecrement@4=__fastcall_NTOSKRNL_InterlockedDecrement @32
InterlockedExchange@8=__fastcall_NTOSKRNL_InterlockedExchange @33
InterlockedExchangeAdd@8=__fastcall_NTOSKRNL_InterlockedExchangeAdd @34
InterlockedIncrement@4=__fastcall_NTOSKRNL_InterlockedIncrement @35
InterlockedPopEntrySList@4=__fastcall_NTOSKRNL_InterlockedPopEntrySList @36
InterlockedPushEntrySList@8=__fastcall_NTOSKRNL_InterlockedPushEntrySList @37
IoAssignDriveLetters@0 @38 PRIVATE
IoReadPartitionTable@0 @39 PRIVATE
IoSetPartitionInformation@0 @40 PRIVATE
IoWritePartitionTable@0 @41 PRIVATE
IofCallDriver@8=__fastcall_IofCallDriver @42
IofCompleteRequest@8=__fastcall_IofCompleteRequest @43
KeAcquireInStackQueuedSpinLockAtDpcLevel@8=__fastcall_KeAcquireInStackQueuedSpinLockAtDpcLevel @44
KeEnterGuardedRegion@0 @45
KeExpandKernelStackAndCallout@12 @46
KeExpandKernelStackAndCalloutEx@20 @47
KeLeaveGuardedRegion@0 @48
KeReleaseInStackQueuedSpinLockFromDpcLevel@4=__fastcall_KeReleaseInStackQueuedSpinLockFromDpcLevel @49
KeSetTimeUpdateNotifyRoutine@0 @50 PRIVATE
KefAcquireSpinLockAtDpcLevel@0 @51 PRIVATE
KefReleaseSpinLockFromDpcLevel@0 @52 PRIVATE
KiAcquireSpinLock@0 @53 PRIVATE
KiReleaseSpinLock@0 @54 PRIVATE
ObfDereferenceObject@4=__fastcall_ObfDereferenceObject @55
ObfReferenceObject@4=__fastcall_ObfReferenceObject @56
RtlPrefetchMemoryNonTemporal@0 @57 PRIVATE
RtlUlongByteSwap @58
RtlUlonglongByteSwap @59
RtlUshortByteSwap @60
WmiGetClock@0 @61 PRIVATE
Kei386EoiHelper@0 @62 PRIVATE
Kii386SpinOnSpinLock@0 @63 PRIVATE
CcCanIWrite@0 @64 PRIVATE
CcCopyRead@0 @65 PRIVATE
CcCopyWrite@0 @66 PRIVATE
CcDeferWrite@0 @67 PRIVATE
CcFastCopyRead@0 @68 PRIVATE
CcFastCopyWrite@0 @69 PRIVATE
CcFastMdlReadWait@0 @70 PRIVATE
CcFastReadNotPossible@0 @71 PRIVATE
CcFastReadWait@0 @72 PRIVATE
CcFlushCache@0 @73 PRIVATE
CcGetDirtyPages@0 @74 PRIVATE
CcGetFileObjectFromBcb@0 @75 PRIVATE
CcGetFileObjectFromSectionPtrs@0 @76 PRIVATE
CcGetFlushedValidData@0 @77 PRIVATE
CcGetLsnForFileObject@0 @78 PRIVATE
CcInitializeCacheMap@0 @79 PRIVATE
CcIsThereDirtyData@0 @80 PRIVATE
CcMapData@0 @81 PRIVATE
CcMdlRead@0 @82 PRIVATE
CcMdlReadComplete@0 @83 PRIVATE
CcMdlWriteAbort@0 @84 PRIVATE
CcMdlWriteComplete@0 @85 PRIVATE
CcPinMappedData@0 @86 PRIVATE
CcPinRead@0 @87 PRIVATE
CcPrepareMdlWrite@0 @88 PRIVATE
CcPreparePinWrite@0 @89 PRIVATE
CcPurgeCacheSection@0 @90 PRIVATE
CcRemapBcb@0 @91 PRIVATE
CcRepinBcb@0 @92 PRIVATE
CcScheduleReadAhead@0 @93 PRIVATE
CcSetAdditionalCacheAttributes@0 @94 PRIVATE
CcSetBcbOwnerPointer@0 @95 PRIVATE
CcSetDirtyPageThreshold@0 @96 PRIVATE
CcSetDirtyPinnedData@0 @97 PRIVATE
CcSetFileSizes@0 @98 PRIVATE
CcSetLogHandleForFile@0 @99 PRIVATE
CcSetReadAheadGranularity@0 @100 PRIVATE
CcUninitializeCacheMap@0 @101 PRIVATE
CcUnpinData@0 @102 PRIVATE
CcUnpinDataForThread@0 @103 PRIVATE
CcUnpinRepinnedBcb@0 @104 PRIVATE
CcWaitForCurrentLazyWriterActivity@0 @105 PRIVATE
CcZeroData@0 @106 PRIVATE
CmRegisterCallback@12 @107
CmUnRegisterCallback@8 @108
DbgBreakPoint@0 @109
DbgBreakPointWithStatus@0 @110 PRIVATE
DbgLoadImageSymbols@0 @111 PRIVATE
DbgPrint @112
DbgPrintEx @113
DbgPrintReturnControlC@0 @114 PRIVATE
DbgPrompt@0 @115 PRIVATE
DbgQueryDebugFilterState@8 @116
DbgSetDebugFilterState@0 @117 PRIVATE
ExAcquireResourceExclusiveLite@8 @118
ExAcquireResourceSharedLite@8 @119
ExAcquireSharedStarveExclusive@8 @120
ExAcquireSharedWaitForExclusive@8 @121
ExAllocateFromPagedLookasideList@0 @122 PRIVATE
ExAllocatePool@8 @123
ExAllocatePoolWithQuota@8 @124
ExAllocatePoolWithQuotaTag@12 @125
ExAllocatePoolWithTag@12 @126
ExAllocatePoolWithTagPriority@0 @127 PRIVATE
ExConvertExclusiveToSharedLite@0 @128 PRIVATE
ExCreateCallback@16 @129
ExDeleteNPagedLookasideList@4 @130
ExDeletePagedLookasideList@4 @131
ExDeleteResourceLite@4 @132
ExDesktopObjectType@0 @133 PRIVATE
ExDisableResourceBoostLite@0 @134 PRIVATE
ExEnumHandleTable@0 @135 PRIVATE
ExEventObjectType @136 DATA
ExExtendZone@0 @137 PRIVATE
ExfUnblockPushLock@8=__fastcall_ExfUnblockPushLock @138
ExFreePool@4 @139
ExFreePoolWithTag@8 @140
ExFreeToPagedLookasideList@0 @141 PRIVATE
ExGetCurrentProcessorCounts@0 @142 PRIVATE
ExGetCurrentProcessorCpuUsage@0 @143 PRIVATE
ExGetExclusiveWaiterCount@4 @144
ExGetPreviousMode@0 @145 PRIVATE
ExGetSharedWaiterCount@4 @146
ExInitializeNPagedLookasideList@28 @147
ExInitializePagedLookasideList@28 @148
ExInitializeResourceLite@4 @149
ExInitializeZone@16 @150
ExInterlockedAddLargeInteger@0 @151 PRIVATE
ExInterlockedAddUlong@0 @152 PRIVATE
ExInterlockedDecrementLong@0 @153 PRIVATE
ExInterlockedExchangeUlong@0 @154 PRIVATE
ExInterlockedExtendZone@0 @155 PRIVATE
ExInterlockedIncrementLong@0 @156 PRIVATE
ExInterlockedInsertHeadList@0 @157 PRIVATE
ExInterlockedInsertTailList@0 @158 PRIVATE
ExInterlockedPopEntryList@0 @159 PRIVATE
ExInterlockedPushEntryList@0 @160 PRIVATE
ExInterlockedRemoveHeadList@8 @161
ExIsProcessorFeaturePresent@0 @162 PRIVATE
ExIsResourceAcquiredExclusiveLite@4 @163
ExIsResourceAcquiredSharedLite@4 @164
ExLocalTimeToSystemTime@8=RtlLocalTimeToSystemTime @165
ExNotifyCallback@0 @166 PRIVATE
ExQueryPoolBlockSize@0 @167 PRIVATE
ExQueueWorkItem@0 @168 PRIVATE
ExRaiseAccessViolation@0 @169 PRIVATE
ExRaiseDatatypeMisalignment@0 @170 PRIVATE
ExRaiseException@0 @171 PRIVATE
ExRaiseHardError@0 @172 PRIVATE
ExRaiseStatus@0 @173 PRIVATE
ExRegisterCallback@0 @174 PRIVATE
ExReinitializeResourceLite@0 @175 PRIVATE
ExReleaseResourceForThreadLite@8 @176
ExSemaphoreObjectType @177 DATA
ExSetResourceOwnerPointer@0 @178 PRIVATE
ExSetTimerResolution@8 @179
ExSystemExceptionFilter@0 @180 PRIVATE
ExSystemTimeToLocalTime@8=RtlSystemTimeToLocalTime @181
ExUnregisterCallback@0 @182 PRIVATE
ExUuidCreate@4 @183
ExVerifySuite@0 @184 PRIVATE
ExWindowStationObjectType@0 @185 PRIVATE
Exi386InterlockedDecrementLong@0 @186 PRIVATE
Exi386InterlockedExchangeUlong@0 @187 PRIVATE
Exi386InterlockedIncrementLong@0 @188 PRIVATE
FsRtlAcquireFileExclusive@0 @189 PRIVATE
FsRtlAddLargeMcbEntry@0 @190 PRIVATE
FsRtlAddMcbEntry@0 @191 PRIVATE
FsRtlAddToTunnelCache@0 @192 PRIVATE
FsRtlAllocateFileLock@0 @193 PRIVATE
FsRtlAllocatePool@0 @194 PRIVATE
FsRtlAllocatePoolWithQuota@0 @195 PRIVATE
FsRtlAllocatePoolWithQuotaTag@0 @196 PRIVATE
FsRtlAllocatePoolWithTag@0 @197 PRIVATE
FsRtlAllocateResource@0 @198 PRIVATE
FsRtlAreNamesEqual@0 @199 PRIVATE
FsRtlBalanceReads@0 @200 PRIVATE
FsRtlCheckLockForReadAccess@0 @201 PRIVATE
FsRtlCheckLockForWriteAccess@0 @202 PRIVATE
FsRtlCheckOplock@0 @203 PRIVATE
FsRtlCopyRead@0 @204 PRIVATE
FsRtlCopyWrite@0 @205 PRIVATE
FsRtlCurrentBatchOplock@0 @206 PRIVATE
FsRtlDeleteKeyFromTunnelCache@0 @207 PRIVATE
FsRtlDeleteTunnelCache@0 @208 PRIVATE
FsRtlDeregisterUncProvider@0 @209 PRIVATE
FsRtlDissectDbcs@0 @210 PRIVATE
FsRtlDissectName@0 @211 PRIVATE
FsRtlDoesDbcsContainWildCards@0 @212 PRIVATE
FsRtlDoesNameContainWildCards@0 @213 PRIVATE
FsRtlFastCheckLockForRead@0 @214 PRIVATE
FsRtlFastCheckLockForWrite@0 @215 PRIVATE
FsRtlFastUnlockAll@0 @216 PRIVATE
FsRtlFastUnlockAllByKey@0 @217 PRIVATE
FsRtlFastUnlockSingle@0 @218 PRIVATE
FsRtlFindInTunnelCache@0 @219 PRIVATE
FsRtlFreeFileLock@0 @220 PRIVATE
FsRtlGetFileSize@0 @221 PRIVATE
FsRtlGetNextFileLock@0 @222 PRIVATE
FsRtlGetNextLargeMcbEntry@0 @223 PRIVATE
FsRtlGetNextMcbEntry@0 @224 PRIVATE
FsRtlIncrementCcFastReadNoWait@0 @225 PRIVATE
FsRtlIncrementCcFastReadNotPossible@0 @226 PRIVATE
FsRtlIncrementCcFastReadResourceMiss@0 @227 PRIVATE
FsRtlIncrementCcFastReadWait@0 @228 PRIVATE
FsRtlInitializeFileLock@0 @229 PRIVATE
FsRtlInitializeLargeMcb@0 @230 PRIVATE
FsRtlInitializeMcb@0 @231 PRIVATE
FsRtlInitializeOplock@0 @232 PRIVATE
FsRtlInitializeTunnelCache@0 @233 PRIVATE
FsRtlInsertPerFileObjectContext@0 @234 PRIVATE
FsRtlInsertPerStreamContext@0 @235 PRIVATE
FsRtlIsDbcsInExpression@0 @236 PRIVATE
FsRtlIsFatDbcsLegal@0 @237 PRIVATE
FsRtlIsHpfsDbcsLegal@0 @238 PRIVATE
FsRtlIsNameInExpression@16 @239
FsRtlIsNtstatusExpected@0 @240 PRIVATE
FsRtlIsPagingFile@0 @241 PRIVATE
FsRtlIsTotalDeviceFailure@0 @242 PRIVATE
FsRtlLegalAnsiCharacterArray@0 @243 PRIVATE
FsRtlLookupLargeMcbEntry@0 @244 PRIVATE
FsRtlLookupLastLargeMcbEntry@0 @245 PRIVATE
FsRtlLookupLastLargeMcbEntryAndIndex@0 @246 PRIVATE
FsRtlLookupLastMcbEntry@0 @247 PRIVATE
FsRtlLookupMcbEntry@0 @248 PRIVATE
FsRtlLookupPerFileObjectContext@0 @249 PRIVATE
FsRtlLookupPerStreamContextInternal@0 @250 PRIVATE
FsRtlMdlRead@0 @251 PRIVATE
FsRtlMdlReadComplete@0 @252 PRIVATE
FsRtlMdlReadCompleteDev@0 @253 PRIVATE
FsRtlMdlReadDev@0 @254 PRIVATE
FsRtlMdlWriteComplete@0 @255 PRIVATE
FsRtlMdlWriteCompleteDev@0 @256 PRIVATE
FsRtlNormalizeNtstatus@0 @257 PRIVATE
FsRtlNotifyChangeDirectory@0 @258 PRIVATE
FsRtlNotifyCleanup@0 @259 PRIVATE
FsRtlNotifyFilterChangeDirectory@0 @260 PRIVATE
FsRtlNotifyFilterReportChange@0 @261 PRIVATE
FsRtlNotifyFullChangeDirectory@0 @262 PRIVATE
FsRtlNotifyFullReportChange@0 @263 PRIVATE
FsRtlNotifyInitializeSync@0 @264 PRIVATE
FsRtlNotifyReportChange@0 @265 PRIVATE
FsRtlNotifyUninitializeSync@0 @266 PRIVATE
FsRtlNotifyVolumeEvent@0 @267 PRIVATE
FsRtlNumberOfRunsInLargeMcb@0 @268 PRIVATE
FsRtlNumberOfRunsInMcb@0 @269 PRIVATE
FsRtlOplockFsctrl@0 @270 PRIVATE
FsRtlOplockIsFastIoPossible@0 @271 PRIVATE
FsRtlPostPagingFileStackOverflow@0 @272 PRIVATE
FsRtlPostStackOverflow@0 @273 PRIVATE
FsRtlPrepareMdlWrite@0 @274 PRIVATE
FsRtlPrepareMdlWriteDev@0 @275 PRIVATE
FsRtlPrivateLock@0 @276 PRIVATE
FsRtlProcessFileLock@0 @277 PRIVATE
FsRtlRegisterFileSystemFilterCallbacks@8 @278
FsRtlRegisterUncProvider@12 @279
FsRtlReleaseFile@0 @280 PRIVATE
FsRtlRemoveLargeMcbEntry@0 @281 PRIVATE
FsRtlRemoveMcbEntry@0 @282 PRIVATE
FsRtlRemovePerFileObjectContext@0 @283 PRIVATE
FsRtlRemovePerStreamContext@0 @284 PRIVATE
FsRtlResetLargeMcb@0 @285 PRIVATE
FsRtlSplitLargeMcb@0 @286 PRIVATE
FsRtlSyncVolumes@0 @287 PRIVATE
FsRtlTeardownPerStreamContexts@0 @288 PRIVATE
FsRtlTruncateLargeMcb@0 @289 PRIVATE
FsRtlTruncateMcb@0 @290 PRIVATE
FsRtlUninitializeFileLock@0 @291 PRIVATE
FsRtlUninitializeLargeMcb@0 @292 PRIVATE
FsRtlUninitializeMcb@0 @293 PRIVATE
FsRtlUninitializeOplock@0 @294 PRIVATE
HalDispatchTable@0 @295 PRIVATE
HalPrivateDispatchTable@0 @296 PRIVATE
HeadlessDispatch@0 @297 PRIVATE
InbvAcquireDisplayOwnership@0 @298 PRIVATE
InbvCheckDisplayOwnership@0 @299 PRIVATE
InbvDisplayString@0 @300 PRIVATE
InbvEnableBootDriver@0 @301 PRIVATE
InbvEnableDisplayString@0 @302 PRIVATE
InbvInstallDisplayStringFilter@0 @303 PRIVATE
InbvIsBootDriverInstalled@0 @304 PRIVATE
InbvNotifyDisplayOwnershipLost@0 @305 PRIVATE
InbvResetDisplay@0 @306 PRIVATE
InbvSetScrollRegion@0 @307 PRIVATE
InbvSetTextColor@0 @308 PRIVATE
InbvSolidColorFill@0 @309 PRIVATE
InitSafeBootMode @310 DATA
IoAcquireCancelSpinLock@4 @311
IoAcquireRemoveLockEx@20 @312
IoAcquireVpbSpinLock@0 @313 PRIVATE
IoAdapterObjectType@0 @314 PRIVATE
IoAllocateAdapterChannel@0 @315 PRIVATE
IoAllocateController@0 @316 PRIVATE
IoAllocateDriverObjectExtension@16 @317
IoAllocateErrorLogEntry@8 @318
IoAllocateIrp@8 @319
IoAllocateMdl@20 @320
IoAllocateWorkItem@4 @321
IoAssignResources@0 @322 PRIVATE
IoAttachDevice@12 @323
IoAttachDeviceByPointer@0 @324 PRIVATE
IoAttachDeviceToDeviceStack@8 @325
IoAttachDeviceToDeviceStackSafe@0 @326 PRIVATE
IoBuildAsynchronousFsdRequest@0 @327 PRIVATE
IoBuildDeviceIoControlRequest@36 @328
IoBuildPartialMdl@0 @329 PRIVATE
IoBuildSynchronousFsdRequest@28 @330
IoCallDriver@8 @331
IoCancelFileOpen@0 @332 PRIVATE
IoCancelIrp@0 @333 PRIVATE
IoCheckDesiredAccess@0 @334 PRIVATE
IoCheckEaBufferValidity@0 @335 PRIVATE
IoCheckFunctionAccess@0 @336 PRIVATE
IoCheckQuerySetFileInformation@0 @337 PRIVATE
IoCheckQuerySetVolumeInformation@0 @338 PRIVATE
IoCheckQuotaBufferValidity@0 @339 PRIVATE
IoCheckShareAccess@0 @340 PRIVATE
IoCompleteRequest@8 @341
IoConnectInterrupt@0 @342 PRIVATE
IoCreateController@0 @343 PRIVATE
IoCreateDevice@28 @344
IoCreateDisk@0 @345 PRIVATE
IoCreateDriver@8 @346
IoCreateFile@56 @347
IoCreateFileSpecifyDeviceObjectHint@0 @348 PRIVATE
IoCreateNotificationEvent@8 @349
IoCreateStreamFileObject@0 @350 PRIVATE
IoCreateStreamFileObjectEx@0 @351 PRIVATE
IoCreateStreamFileObjectLite@0 @352 PRIVATE
IoCreateSymbolicLink@8 @353
IoCreateSynchronizationEvent@8 @354
IoCreateUnprotectedSymbolicLink@0 @355 PRIVATE
IoCsqInitialize@28 @356
IoCsqInsertIrp@0 @357 PRIVATE
IoCsqRemoveIrp@0 @358 PRIVATE
IoCsqRemoveNextIrp@0 @359 PRIVATE
IoDeleteController@0 @360 PRIVATE
IoDeleteDevice@4 @361
IoDeleteDriver@4 @362
IoDeleteSymbolicLink@4 @363
IoDetachDevice@0 @364 PRIVATE
IoDeviceHandlerObjectSize@0 @365 PRIVATE
IoDeviceHandlerObjectType@0 @366 PRIVATE
IoDeviceObjectType @367 DATA
IoDisconnectInterrupt@0 @368 PRIVATE
IoDriverObjectType @369 DATA
IoEnqueueIrp@0 @370 PRIVATE
IoEnumerateDeviceObjectList@0 @371 PRIVATE
IoFastQueryNetworkAttributes@0 @372 PRIVATE
IoFileObjectType @373 DATA
IoForwardAndCatchIrp@0 @374 PRIVATE
IoForwardIrpSynchronously@0 @375 PRIVATE
IoFreeController@0 @376 PRIVATE
IoFreeErrorLogEntry@0 @377 PRIVATE
IoFreeIrp@4 @378
IoFreeMdl@4 @379
IoFreeWorkItem@0 @380 PRIVATE
IoGetAttachedDevice@4 @381
IoGetAttachedDeviceReference@4 @382
IoGetBaseFileSystemDeviceObject@0 @383 PRIVATE
IoGetBootDiskInformation@0 @384 PRIVATE
IoGetConfigurationInformation@0 @385
IoGetCurrentProcess@0 @386
IoGetDeviceAttachmentBaseRef@4 @387
IoGetDeviceInterfaceAlias@0 @388 PRIVATE
IoGetDeviceInterfaces@16 @389
IoGetDeviceObjectPointer@16 @390
IoGetDeviceProperty@20 @391
IoGetDeviceToVerify@0 @392 PRIVATE
IoGetDiskDeviceObject@0 @393 PRIVATE
IoGetDmaAdapter@0 @394 PRIVATE
IoGetDriverObjectExtension@8 @395
IoGetFileObjectGenericMapping@0 @396 PRIVATE
IoGetInitialStack@0 @397 PRIVATE
IoGetLowerDeviceObject@0 @398 PRIVATE
IoGetRelatedDeviceObject@4 @399
IoGetRequestorProcess@0 @400 PRIVATE
IoGetRequestorProcessId@0 @401 PRIVATE
IoGetRequestorSessionId@0 @402 PRIVATE
IoGetStackLimits@0 @403 PRIVATE
IoGetTopLevelIrp@0 @404 PRIVATE
IoInitializeIrp@12 @405
IoInitializeRemoveLockEx@20 @406
IoInitializeTimer@12 @407
IoInvalidateDeviceRelations@8 @408
IoInvalidateDeviceState@0 @409 PRIVATE
IoIsFileOriginRemote@0 @410 PRIVATE
IoIsOperationSynchronous@0 @411 PRIVATE
IoIsSystemThread@0 @412 PRIVATE
IoIsValidNameGraftingBuffer@0 @413 PRIVATE
IoIsWdmVersionAvailable@8 @414
IoMakeAssociatedIrp@0 @415 PRIVATE
IoOpenDeviceInterfaceRegistryKey@0 @416 PRIVATE
IoOpenDeviceRegistryKey@0 @417 PRIVATE
IoPageRead@0 @418 PRIVATE
IoPnPDeliverServicePowerNotification@0 @419 PRIVATE
IoQueryDeviceDescription@32 @420
IoQueryFileDosDeviceName@0 @421 PRIVATE
IoQueryFileInformation@0 @422 PRIVATE
IoQueryVolumeInformation@0 @423 PRIVATE
IoQueueThreadIrp@0 @424 PRIVATE
IoQueueWorkItem@0 @425 PRIVATE
IoRaiseHardError@0 @426 PRIVATE
IoRaiseInformationalHardError@0 @427 PRIVATE
IoReadDiskSignature@0 @428 PRIVATE
IoReadOperationCount@0 @429 PRIVATE
IoReadPartitionTableEx@0 @430 PRIVATE
IoReadTransferCount@0 @431 PRIVATE
IoRegisterBootDriverReinitialization@0 @432 PRIVATE
IoRegisterDeviceInterface@16 @433
IoRegisterDriverReinitialization@12 @434
IoRegisterFileSystem@4 @435
IoRegisterFsRegistrationChange@0 @436 PRIVATE
IoRegisterLastChanceShutdownNotification@0 @437 PRIVATE
IoRegisterPlugPlayNotification@28 @438
IoRegisterShutdownNotification@4 @439
IoReleaseCancelSpinLock@4 @440
IoReleaseRemoveLockAndWaitEx@12 @441
IoReleaseRemoveLockEx@0 @442 PRIVATE
IoReleaseVpbSpinLock@0 @443 PRIVATE
IoRemoveShareAccess@0 @444 PRIVATE
IoReportDetectedDevice@0 @445 PRIVATE
IoReportHalResourceUsage@0 @446 PRIVATE
IoReportResourceForDetection@28 @447
IoReportResourceUsage@36 @448
IoReportTargetDeviceChange@0 @449 PRIVATE
IoReportTargetDeviceChangeAsynchronous@0 @450 PRIVATE
IoRequestDeviceEject@0 @451 PRIVATE
IoReuseIrp@0 @452 PRIVATE
IoSetCompletionRoutineEx@0 @453 PRIVATE
IoSetDeviceInterfaceState@8 @454
IoSetDeviceToVerify@0 @455 PRIVATE
IoSetFileOrigin@0 @456 PRIVATE
IoSetHardErrorOrVerifyDevice@0 @457 PRIVATE
IoSetInformation@0 @458 PRIVATE
IoSetIoCompletion@0 @459 PRIVATE
IoSetPartitionInformationEx@0 @460 PRIVATE
IoSetShareAccess@0 @461 PRIVATE
IoSetStartIoAttributes@0 @462 PRIVATE
IoSetSystemPartition@0 @463 PRIVATE
IoSetThreadHardErrorMode@4 @464
IoSetTopLevelIrp@0 @465 PRIVATE
IoStartNextPacket@8 @466
IoStartNextPacketByKey@0 @467 PRIVATE
IoStartPacket@0 @468 PRIVATE
IoStartTimer@4 @469
IoStatisticsLock@0 @470 PRIVATE
IoStopTimer@4 @471
IoSynchronousInvalidateDeviceRelations@0 @472 PRIVATE
IoSynchronousPageWrite@0 @473 PRIVATE
IoThreadToProcess@0 @474 PRIVATE
IoUnregisterFileSystem@4 @475
IoUnregisterFsRegistrationChange@0 @476 PRIVATE
IoUnregisterPlugPlayNotification@4 @477
IoUnregisterShutdownNotification@4 @478
IoUpdateShareAccess@0 @479 PRIVATE
IoValidateDeviceIoControlAccess@0 @480 PRIVATE
IoVerifyPartitionTable@0 @481 PRIVATE
IoVerifyVolume@0 @482 PRIVATE
IoVolumeDeviceToDosName@0 @483 PRIVATE
IoWMIAllocateInstanceIds@0 @484 PRIVATE
IoWMIDeviceObjectToInstanceName@0 @485 PRIVATE
IoWMIExecuteMethod@0 @486 PRIVATE
IoWMIHandleToInstanceName@0 @487 PRIVATE
IoWMIOpenBlock@12 @488
IoWMIQueryAllData@0 @489 PRIVATE
IoWMIQueryAllDataMultiple@0 @490 PRIVATE
IoWMIQuerySingleInstance@0 @491 PRIVATE
IoWMIQuerySingleInstanceMultiple@0 @492 PRIVATE
IoWMIRegistrationControl@8 @493
IoWMISetNotificationCallback@0 @494 PRIVATE
IoWMISetSingleInstance@0 @495 PRIVATE
IoWMISetSingleItem@0 @496 PRIVATE
IoWMISuggestInstanceName@0 @497 PRIVATE
IoWMIWriteEvent@0 @498 PRIVATE
IoWriteErrorLogEntry@0 @499 PRIVATE
IoWriteOperationCount@0 @500 PRIVATE
IoWritePartitionTableEx@0 @501 PRIVATE
IoWriteTransferCount@0 @502 PRIVATE
KdDebuggerEnabled @503 DATA
KdDebuggerNotPresent@0 @504 PRIVATE
KdDisableDebugger@0 @505 PRIVATE
KdEnableDebugger@0 @506 PRIVATE
KdEnteredDebugger@0 @507 PRIVATE
KdPollBreakIn@0 @508 PRIVATE
KdPowerTransition@0 @509 PRIVATE
Ke386CallBios@0 @510 PRIVATE
Ke386IoSetAccessProcess@8 @511
Ke386QueryIoAccessMap@0 @512 PRIVATE
Ke386SetIoAccessMap@8 @513
KeAcquireInterruptSpinLock@0 @514 PRIVATE
KeAcquireSpinLockAtDpcLevel@4 @515
KeAddSystemServiceTable@0 @516 PRIVATE
KeAreApcsDisabled@0 @517 PRIVATE
KeAttachProcess@0 @518 PRIVATE
KeBugCheck@0 @519 PRIVATE
KeBugCheckEx@0 @520 PRIVATE
KeCancelTimer@4 @521
KeCapturePersistentThreadState@0 @522 PRIVATE
KeClearEvent@4 @523
KeConnectInterrupt@0 @524 PRIVATE
KeDcacheFlushCount@0 @525 PRIVATE
KeDelayExecutionThread@12 @526
KeDeregisterBugCheckCallback@0 @527 PRIVATE
KeDeregisterBugCheckReasonCallback@0 @528 PRIVATE
KeDetachProcess@0 @529 PRIVATE
KeDisconnectInterrupt@0 @530 PRIVATE
KeEnterCriticalRegion@0 @531
KeEnterKernelDebugger@0 @532 PRIVATE
KeFindConfigurationEntry@0 @533 PRIVATE
KeFindConfigurationNextEntry@0 @534 PRIVATE
KeFlushEntireTb@0 @535 PRIVATE
KeFlushQueuedDpcs@0 @536
KeGetCurrentThread@0 @537
KeGetPreviousMode@0 @538 PRIVATE
KeGetRecommendedSharedDataAlignment@0 @539 PRIVATE
KeI386AbiosCall@0 @540 PRIVATE
KeI386AllocateGdtSelectors@0 @541 PRIVATE
KeI386Call16BitCStyleFunction@0 @542 PRIVATE
KeI386Call16BitFunction@0 @543 PRIVATE
KeI386FlatToGdtSelector@0 @544 PRIVATE
KeI386GetLid@0 @545 PRIVATE
KeI386MachineType@0 @546 PRIVATE
KeI386ReleaseGdtSelectors@0 @547 PRIVATE
KeI386ReleaseLid@0 @548 PRIVATE
KeI386SetGdtSelector@0 @549 PRIVATE
KeIcacheFlushCount@0 @550 PRIVATE
KeInitializeApc@0 @551 PRIVATE
KeInitializeDeviceQueue@0 @552 PRIVATE
KeInitializeDpc@12 @553
KeInitializeEvent@12 @554
KeInitializeInterrupt@0 @555 PRIVATE
KeInitializeMutant@0 @556 PRIVATE
KeInitializeMutex@8 @557
KeInitializeQueue@0 @558 PRIVATE
KeInitializeSemaphore@12 @559
KeInitializeSpinLock@4 @560
KeInitializeTimer@4 @561
KeInitializeTimerEx@8 @562
KeInsertByKeyDeviceQueue@0 @563 PRIVATE
KeInsertDeviceQueue@0 @564 PRIVATE
KeInsertHeadQueue@0 @565 PRIVATE
KeInsertQueue@8 @566
KeInsertQueueApc@0 @567 PRIVATE
KeInsertQueueDpc@0 @568 PRIVATE
KeIsAttachedProcess@0 @569 PRIVATE
KeIsExecutingDpc@0 @570 PRIVATE
KeLeaveCriticalRegion@0 @571
KeLoaderBlock@0 @572 PRIVATE
KeNumberProcessors@0 @573 PRIVATE
KeProfileInterrupt@0 @574 PRIVATE
KeProfileInterruptWithSource@0 @575 PRIVATE
KePulseEvent@0 @576 PRIVATE
KeQueryActiveProcessors@0 @577
KeQueryInterruptTime@0 @578
KeQueryPriorityThread@0 @579 PRIVATE
KeQueryRuntimeThread@0 @580 PRIVATE
KeQuerySystemTime@4 @581
KeQueryTickCount@4 @582
KeQueryTimeIncrement@0 @583
KeRaiseUserException@0 @584 PRIVATE
KeReadStateEvent@0 @585 PRIVATE
KeReadStateMutant@0 @586 PRIVATE
KeReadStateMutex@0 @587 PRIVATE
KeReadStateQueue@0 @588 PRIVATE
KeReadStateSemaphore@0 @589 PRIVATE
KeReadStateTimer@0 @590 PRIVATE
KeRegisterBugCheckCallback@0 @591 PRIVATE
KeRegisterBugCheckReasonCallback@0 @592 PRIVATE
KeReleaseInterruptSpinLock@0 @593 PRIVATE
KeReleaseMutant@0 @594 PRIVATE
KeReleaseMutex@8 @595
KeReleaseSemaphore@16 @596
KeReleaseSpinLockFromDpcLevel@4 @597
KeRemoveByKeyDeviceQueue@0 @598 PRIVATE
KeRemoveByKeyDeviceQueueIfBusy@0 @599 PRIVATE
KeRemoveDeviceQueue@0 @600 PRIVATE
KeRemoveEntryDeviceQueue@0 @601 PRIVATE
KeRemoveQueue@0 @602 PRIVATE
KeRemoveQueueDpc@0 @603 PRIVATE
KeRemoveSystemServiceTable@0 @604 PRIVATE
KeResetEvent@4 @605
KeRestoreFloatingPointState@0 @606 PRIVATE
KeRevertToUserAffinityThread@0 @607
KeRundownQueue@0 @608 PRIVATE
KeSaveFloatingPointState@0 @609 PRIVATE
KeSaveStateForHibernate@0 @610 PRIVATE
KeServiceDescriptorTable @611 DATA
KeSetAffinityThread@0 @612 PRIVATE
KeSetBasePriorityThread@0 @613 PRIVATE
KeSetDmaIoCoherency@0 @614 PRIVATE
KeSetEvent@12 @615
KeSetEventBoostPriority@0 @616 PRIVATE
KeSetIdealProcessorThread@0 @617 PRIVATE
KeSetImportanceDpc@0 @618 PRIVATE
KeSetKernelStackSwapEnable@0 @619 PRIVATE
KeSetPriorityThread@8 @620
KeSetProfileIrql@0 @621 PRIVATE
KeSetSystemAffinityThread@4 @622
KeSetTargetProcessorDpc@8 @623
KeSetTimeIncrement@0 @624 PRIVATE
KeSetTimer@0 @625 PRIVATE
KeSetTimerEx@20 @626
KeStackAttachProcess@0 @627 PRIVATE
KeSynchronizeExecution@0 @628 PRIVATE
KeTerminateThread@0 @629 PRIVATE
KeTickCount @630 DATA
KeUnstackDetachProcess@0 @631 PRIVATE
KeUpdateRunTime@0 @632 PRIVATE
KeUpdateSystemTime@0 @633 PRIVATE
KeUserModeCallback@0 @634 PRIVATE
KeWaitForMultipleObjects@32 @635
KeWaitForMutexObject@20 @636
KeWaitForSingleObject@20 @637
KiBugCheckData@0 @638 PRIVATE
KiCoprocessorError@0 @639 PRIVATE
KiDeliverApc@0 @640 PRIVATE
KiDispatchInterrupt@0 @641 PRIVATE
KiEnableTimerWatchdog@0 @642 PRIVATE
KiIpiServiceRoutine@0 @643 PRIVATE
KiUnexpectedInterrupt@0 @644 PRIVATE
LdrAccessResource@16 @645
LdrEnumResources@0 @646 PRIVATE
LdrFindResourceDirectory_U@16 @647
LdrFindResource_U@16 @648
LpcPortObjectType@0 @649 PRIVATE
LpcRequestPort@0 @650 PRIVATE
LpcRequestWaitReplyPort@0 @651 PRIVATE
LsaCallAuthenticationPackage@0 @652 PRIVATE
LsaDeregisterLogonProcess@0 @653 PRIVATE
LsaFreeReturnBuffer@0 @654 PRIVATE
LsaLogonUser@0 @655 PRIVATE
LsaLookupAuthenticationPackage@0 @656 PRIVATE
LsaRegisterLogonProcess@0 @657 PRIVATE
Mm64BitPhysicalAddress@0 @658 PRIVATE
MmAddPhysicalMemory@0 @659 PRIVATE
MmAddVerifierThunks@0 @660 PRIVATE
MmAdjustWorkingSetSize@0 @661 PRIVATE
MmAdvanceMdl@0 @662 PRIVATE
MmAllocateContiguousMemory@12 @663
MmAllocateContiguousMemorySpecifyCache@32 @664
MmAllocateMappingAddress@0 @665 PRIVATE
MmAllocateNonCachedMemory@4 @666
MmAllocatePagesForMdl@28 @667
MmBuildMdlForNonPagedPool@4 @668
MmCanFileBeTruncated@0 @669 PRIVATE
MmCommitSessionMappedView@0 @670 PRIVATE
MmCopyVirtualMemory@28 @671
MmCreateMdl@0 @672 PRIVATE
MmCreateSection@32 @673
MmDisableModifiedWriteOfSection@0 @674 PRIVATE
MmFlushImageSection@0 @675 PRIVATE
MmForceSectionClosed@0 @676 PRIVATE
MmFreeContiguousMemory@0 @677 PRIVATE
MmFreeContiguousMemorySpecifyCache@0 @678 PRIVATE
MmFreeMappingAddress@0 @679 PRIVATE
MmFreeNonCachedMemory@8 @680
MmFreePagesFromMdl@0 @681 PRIVATE
MmGetPhysicalAddress@0 @682 PRIVATE
MmGetPhysicalMemoryRanges@0 @683 PRIVATE
MmGetSystemRoutineAddress@4 @684
MmGetVirtualForPhysical@0 @685 PRIVATE
MmGrowKernelStack@0 @686 PRIVATE
MmHighestUserAddress@0 @687 PRIVATE
MmIsAddressValid@4 @688
MmIsDriverVerifying@0 @689 PRIVATE
MmIsNonPagedSystemAddressValid@0 @690 PRIVATE
MmIsRecursiveIoFault@0 @691 PRIVATE
MmIsThisAnNtAsSystem@0 @692 PRIVATE
MmIsVerifierEnabled@0 @693 PRIVATE
MmLockPagableDataSection@0 @694 PRIVATE
MmLockPagableImageSection@0 @695 PRIVATE
MmLockPagableSectionByHandle@4 @696
MmMapIoSpace@16 @697
MmMapLockedPages@8 @698
MmMapLockedPagesSpecifyCache@24 @699
MmMapLockedPagesWithReservedMapping@0 @700 PRIVATE
MmMapMemoryDumpMdl@0 @701 PRIVATE
MmMapUserAddressesToPage@0 @702 PRIVATE
MmMapVideoDisplay@0 @703 PRIVATE
MmMapViewInSessionSpace@0 @704 PRIVATE
MmMapViewInSystemSpace@0 @705 PRIVATE
MmMapViewOfSection@0 @706 PRIVATE
MmMarkPhysicalMemoryAsBad@0 @707 PRIVATE
MmMarkPhysicalMemoryAsGood@0 @708 PRIVATE
MmPageEntireDriver@4 @709
MmPrefetchPages@0 @710 PRIVATE
MmProbeAndLockPages@12 @711
MmProbeAndLockProcessPages@0 @712 PRIVATE
MmProbeAndLockSelectedPages@0 @713 PRIVATE
MmProtectMdlSystemAddress@0 @714 PRIVATE
MmQuerySystemSize@0 @715
MmRemovePhysicalMemory@0 @716 PRIVATE
MmResetDriverPaging@4 @717
MmSectionObjectType@0 @718 PRIVATE
MmSecureVirtualMemory@0 @719 PRIVATE
MmSetAddressRangeModified@0 @720 PRIVATE
MmSetBankedSection@0 @721 PRIVATE
MmSizeOfMdl@0 @722 PRIVATE
MmSystemRangeStart@0 @723 PRIVATE
MmTrimAllSystemPagableMemory@0 @724 PRIVATE
MmUnlockPagableImageSection@4 @725
MmUnlockPages@4 @726
MmUnmapIoSpace@8 @727
MmUnmapLockedPages@8 @728
MmUnmapReservedMapping@0 @729 PRIVATE
MmUnmapVideoDisplay@0 @730 PRIVATE
MmUnmapViewInSessionSpace@0 @731 PRIVATE
MmUnmapViewInSystemSpace@0 @732 PRIVATE
MmUnmapViewOfSection@0 @733 PRIVATE
MmUnsecureVirtualMemory@0 @734 PRIVATE
MmUserProbeAddress@0 @735 PRIVATE
NlsAnsiCodePage=ntdll.NlsAnsiCodePage @736 DATA
NlsLeadByteInfo@0 @737 PRIVATE
NlsMbCodePageTag=ntdll.NlsMbCodePageTag @738 DATA
NlsMbOemCodePageTag=ntdll.NlsMbOemCodePageTag @739 DATA
NlsOemCodePage@0 @740 PRIVATE
NlsOemLeadByteInfo@0 @741 PRIVATE
NtAddAtom@12 @742
NtAdjustPrivilegesToken@24 @743
NtAllocateLocallyUniqueId@4 @744
NtAllocateUuids@16 @745
NtAllocateVirtualMemory@24 @746
NtBuildNumber @747 DATA
NtClose@4 @748
NtConnectPort@32 @749
NtCreateEvent@20 @750
NtCreateFile@44 @751
NtCreateSection@28 @752
NtDeleteAtom@4 @753
NtDeleteFile@4 @754
NtDeviceIoControlFile@40 @755
NtDuplicateObject@28 @756
NtDuplicateToken@24 @757
NtFindAtom@12 @758
NtFreeVirtualMemory@16 @759
NtFsControlFile@40 @760
NtGlobalFlag@0 @761 PRIVATE
NtLockFile@40 @762
NtMakePermanentObject@0 @763 PRIVATE
NtMapViewOfSection@40 @764
NtNotifyChangeDirectoryFile@36 @765
NtOpenFile@24 @766
NtOpenProcess@16 @767
NtOpenProcessToken@12 @768
NtOpenProcessTokenEx@16 @769
NtOpenThread@16 @770
NtOpenThreadToken@16 @771
NtOpenThreadTokenEx@20 @772
NtQueryDirectoryFile@44 @773
NtQueryEaFile@36 @774
NtQueryInformationAtom@20 @775
NtQueryInformationFile@20 @776
NtQueryInformationProcess@20 @777
NtQueryInformationThread@20 @778
NtQueryInformationToken@20 @779
NtQueryQuotaInformationFile@0 @780 PRIVATE
NtQuerySecurityObject@20 @781
NtQuerySystemInformation@16 @782
NtQueryVolumeInformationFile@20 @783
NtReadFile@36 @784
NtRequestPort@0 @785 PRIVATE
NtRequestWaitReplyPort@12 @786
NtSetEaFile@16 @787
NtSetEvent@8 @788
NtSetInformationFile@20 @789
NtSetInformationProcess@16 @790
NtSetInformationThread@16 @791
NtSetQuotaInformationFile@0 @792 PRIVATE
NtSetSecurityObject@12 @793
NtSetVolumeInformationFile@20 @794
NtShutdownSystem@4 @795
NtTraceEvent@0 @796 PRIVATE
NtUnlockFile@20 @797
NtVdmControl@0 @798 PRIVATE
NtWaitForSingleObject@12 @799
NtWriteFile@36 @800
ObAssignSecurity@0 @801 PRIVATE
ObCheckCreateObjectAccess@0 @802 PRIVATE
ObCheckObjectAccess@0 @803 PRIVATE
ObCloseHandle@0 @804 PRIVATE
ObCreateObject@0 @805 PRIVATE
ObCreateObjectType@0 @806 PRIVATE
ObDereferenceObject@4 @807
ObDereferenceSecurityDescriptor@0 @808 PRIVATE
ObFindHandleForObject@0 @809 PRIVATE
ObGetFilterVersion@0 @810
ObGetObjectSecurity@0 @811 PRIVATE
ObGetObjectType@4 @812
ObInsertObject@0 @813 PRIVATE
ObLogSecurityDescriptor@0 @814 PRIVATE
ObMakeTemporaryObject@0 @815 PRIVATE
ObOpenObjectByName@0 @816 PRIVATE
ObOpenObjectByPointer@0 @817 PRIVATE
ObQueryNameString@16 @818
ObQueryObjectAuditingByHandle@0 @819 PRIVATE
ObReferenceObjectByHandle@24 @820
ObReferenceObjectByName@32 @821
ObReferenceObjectByPointer@16 @822
ObReferenceSecurityDescriptor@0 @823 PRIVATE
ObRegisterCallbacks@8 @824
ObReleaseObjectSecurity@0 @825 PRIVATE
ObSetHandleAttributes@0 @826 PRIVATE
ObSetSecurityDescriptorInfo@0 @827 PRIVATE
ObSetSecurityObjectByPointer@0 @828 PRIVATE
ObUnRegisterCallbacks@4 @829
PfxFindPrefix@0 @830 PRIVATE
PfxInitialize@0 @831 PRIVATE
PfxInsertPrefix@0 @832 PRIVATE
PfxRemovePrefix@0 @833 PRIVATE
PoCallDriver@0 @834 PRIVATE
PoCancelDeviceNotify@0 @835 PRIVATE
PoQueueShutdownWorkItem@0 @836 PRIVATE
PoRegisterDeviceForIdleDetection@0 @837 PRIVATE
PoRegisterDeviceNotify@0 @838 PRIVATE
PoRegisterSystemState@0 @839 PRIVATE
PoRequestPowerIrp@0 @840 PRIVATE
PoRequestShutdownEvent@0 @841 PRIVATE
PoSetHiberRange@0 @842 PRIVATE
PoSetPowerState@12 @843
PoSetSystemState@0 @844 PRIVATE
PoShutdownBugCheck@0 @845 PRIVATE
PoStartNextPowerIrp@0 @846 PRIVATE
PoUnregisterSystemState@0 @847 PRIVATE
ProbeForRead@12 @848
ProbeForWrite@12 @849
PsAcquireProcessExitSynchronization@4 @850
PsAssignImpersonationToken@0 @851 PRIVATE
PsChargePoolQuota@0 @852 PRIVATE
PsChargeProcessNonPagedPoolQuota@0 @853 PRIVATE
PsChargeProcessPagedPoolQuota@0 @854 PRIVATE
PsChargeProcessPoolQuota@0 @855 PRIVATE
PsCreateSystemProcess@0 @856 PRIVATE
PsCreateSystemThread@28 @857
PsDereferenceImpersonationToken@0 @858 PRIVATE
PsDereferencePrimaryToken@0 @859 PRIVATE
PsDisableImpersonation@0 @860 PRIVATE
PsEstablishWin32Callouts@0 @861 PRIVATE
PsGetContextThread@0 @862 PRIVATE
PsGetCurrentProcess@0=IoGetCurrentProcess @863
PsGetCurrentProcessId@0 @864
PsGetCurrentProcessSessionId@0 @865 PRIVATE
PsGetCurrentThread@0=KeGetCurrentThread @866
PsGetCurrentThreadId@0 @867
PsGetCurrentThreadPreviousMode@0 @868 PRIVATE
PsGetCurrentThreadStackBase@0 @869 PRIVATE
PsGetCurrentThreadStackLimit@0 @870 PRIVATE
PsGetJobLock@0 @871 PRIVATE
PsGetJobSessionId@0 @872 PRIVATE
PsGetJobUIRestrictionsClass@0 @873 PRIVATE
PsGetProcessCreateTimeQuadPart@0 @874 PRIVATE
PsGetProcessDebugPort@0 @875 PRIVATE
PsGetProcessExitProcessCalled@0 @876 PRIVATE
PsGetProcessExitStatus@0 @877 PRIVATE
PsGetProcessExitTime@0 @878 PRIVATE
PsGetProcessId@4 @879
PsGetProcessImageFileName@0 @880 PRIVATE
PsGetProcessInheritedFromUniqueProcessId@0 @881 PRIVATE
PsGetProcessJob@0 @882 PRIVATE
PsGetProcessPeb@0 @883 PRIVATE
PsGetProcessPriorityClass@0 @884 PRIVATE
PsGetProcessSectionBaseAddress@0 @885 PRIVATE
PsGetProcessSecurityPort@0 @886 PRIVATE
PsGetProcessSessionId@0 @887 PRIVATE
PsGetProcessWin32Process@0 @888 PRIVATE
PsGetProcessWin32WindowStation@0 @889 PRIVATE
PsGetThreadFreezeCount@0 @890 PRIVATE
PsGetThreadHardErrorsAreDisabled@0 @891 PRIVATE
PsGetThreadId@0 @892 PRIVATE
PsGetThreadProcess@0 @893 PRIVATE
PsGetThreadProcessId@0 @894 PRIVATE
PsGetThreadSessionId@0 @895 PRIVATE
PsGetThreadTeb@0 @896 PRIVATE
PsGetThreadWin32Thread@0 @897 PRIVATE
PsGetVersion@16 @898
PsImpersonateClient@20 @899
PsInitialSystemProcess@0 @900 PRIVATE
PsIsProcessBeingDebugged@0 @901 PRIVATE
PsIsSystemThread@0 @902 PRIVATE
PsIsThreadImpersonating@0 @903 PRIVATE
PsIsThreadTerminating@0 @904 PRIVATE
PsJobType@0 @905 PRIVATE
PsLookupProcessByProcessId@8 @906
PsLookupProcessThreadByCid@0 @907 PRIVATE
PsLookupThreadByThreadId@0 @908 PRIVATE
PsProcessType @909 DATA
PsReferenceImpersonationToken@0 @910 PRIVATE
PsReferencePrimaryToken@0 @911 PRIVATE
PsReferenceProcessFilePointer@8 @912
PsReleaseProcessExitSynchronization@4 @913
PsRemoveCreateThreadNotifyRoutine@4 @914
PsRemoveLoadImageNotifyRoutine@4 @915
PsRestoreImpersonation@0 @916 PRIVATE
PsResumeProcess@4 @917
PsReturnPoolQuota@0 @918 PRIVATE
PsReturnProcessNonPagedPoolQuota@0 @919 PRIVATE
PsReturnProcessPagedPoolQuota@0 @920 PRIVATE
PsRevertThreadToSelf@0 @921 PRIVATE
PsRevertToSelf@0 @922
PsSetContextThread@0 @923 PRIVATE
PsSetCreateProcessNotifyRoutine@8 @924
PsSetCreateProcessNotifyRoutineEx@8 @925
PsSetCreateThreadNotifyRoutine@4 @926
PsSetJobUIRestrictionsClass@0 @927 PRIVATE
PsSetLegoNotifyRoutine@0 @928 PRIVATE
PsSetLoadImageNotifyRoutine@4 @929
PsSetProcessPriorityByClass@0 @930 PRIVATE
PsSetProcessPriorityClass@0 @931 PRIVATE
PsSetProcessSecurityPort@0 @932 PRIVATE
PsSetProcessWin32Process@0 @933 PRIVATE
PsSetProcessWindowStation@0 @934 PRIVATE
PsSetThreadHardErrorsAreDisabled@0 @935 PRIVATE
PsSetThreadWin32Thread@0 @936 PRIVATE
PsSuspendProcess@4 @937
PsTerminateSystemThread@4 @938
PsThreadType @939 DATA
READ_REGISTER_BUFFER_UCHAR@12 @940
READ_REGISTER_BUFFER_ULONG@0 @941 PRIVATE
READ_REGISTER_BUFFER_USHORT@0 @942 PRIVATE
READ_REGISTER_UCHAR@0 @943 PRIVATE
READ_REGISTER_ULONG@0 @944 PRIVATE
READ_REGISTER_USHORT@0 @945 PRIVATE
RtlAbsoluteToSelfRelativeSD@12 @946
RtlAddAccessAllowedAce@16 @947
RtlAddAccessAllowedAceEx@20 @948
RtlAddAce@20 @949
RtlAddAtomToAtomTable@12 @950
RtlAddRange@0 @951 PRIVATE
RtlAllocateHeap@12 @952
RtlAnsiCharToUnicodeChar@4 @953
RtlAnsiStringToUnicodeSize@4 @954
RtlAnsiStringToUnicodeString@12 @955
RtlAppendAsciizToString@8 @956
RtlAppendStringToString@8 @957
RtlAppendUnicodeStringToString@8 @958
RtlAppendUnicodeToString@8 @959
RtlAreAllAccessesGranted@8 @960
RtlAreAnyAccessesGranted@8 @961
RtlAreBitsClear@12 @962
RtlAreBitsSet@12 @963
RtlAssert@16 @964
RtlCaptureContext@4 @965
RtlCaptureStackBackTrace@16 @966
RtlCharToInteger@12 @967
RtlCheckRegistryKey@8 @968
RtlClearAllBits@4 @969
RtlClearBit@0 @970 PRIVATE
RtlClearBits@12 @971
RtlCompareMemory@12 @972
RtlCompareMemoryUlong@12 @973
RtlCompareString@12 @974
RtlCompareUnicodeString@12 @975
RtlCompressBuffer@32 @976
RtlCompressChunks@0 @977 PRIVATE
RtlConvertLongToLargeInteger@4 @978
RtlConvertSidToUnicodeString@12 @979
RtlConvertUlongToLargeInteger@4 @980
RtlCopyLuid@8 @981
RtlCopyRangeList@0 @982 PRIVATE
RtlCopySid@12 @983
RtlCopyString@8 @984
RtlCopyUnicodeString@8 @985
RtlCreateAcl@12 @986
RtlCreateAtomTable@8 @987
RtlCreateHeap@24 @988
RtlCreateRegistryKey@8 @989
RtlCreateSecurityDescriptor@8 @990
RtlCreateSystemVolumeInformationFolder@0 @991 PRIVATE
RtlCreateUnicodeString@8 @992
RtlCustomCPToUnicodeN@0 @993 PRIVATE
RtlDecompressBuffer@24 @994
RtlDecompressChunks@0 @995 PRIVATE
RtlDecompressFragment@32 @996
RtlDelete@0 @997 PRIVATE
RtlDeleteAce@8 @998
RtlDeleteAtomFromAtomTable@8 @999
RtlDeleteElementGenericTable@0 @1000 PRIVATE
RtlDeleteElementGenericTableAvl@0 @1001 PRIVATE
RtlDeleteNoSplay@0 @1002 PRIVATE
RtlDeleteOwnersRanges@0 @1003 PRIVATE
RtlDeleteRange@0 @1004 PRIVATE
RtlDeleteRegistryValue@12 @1005
RtlDescribeChunk@0 @1006 PRIVATE
RtlDestroyAtomTable@4 @1007
RtlDestroyHeap@4 @1008
RtlDowncaseUnicodeString@12 @1009
RtlEmptyAtomTable@8 @1010
RtlEnlargedIntegerMultiply@8 @1011
RtlEnlargedUnsignedDivide@16 @1012
RtlEnlargedUnsignedMultiply@8 @1013
RtlEnumerateGenericTable@0 @1014 PRIVATE
RtlEnumerateGenericTableAvl@0 @1015 PRIVATE
RtlEnumerateGenericTableLikeADirectory@0 @1016 PRIVATE
RtlEnumerateGenericTableWithoutSplaying@8 @1017
RtlEnumerateGenericTableWithoutSplayingAvl@0 @1018 PRIVATE
RtlEqualLuid@8 @1019
RtlEqualSid@8 @1020
RtlEqualString@12 @1021
RtlEqualUnicodeString@12 @1022
RtlExtendedIntegerMultiply@12 @1023
RtlExtendedLargeIntegerDivide@16 @1024
RtlExtendedMagicDivide@20 @1025
RtlFillMemory@12 @1026
RtlFillMemoryUlong@12 @1027
RtlFindClearBits@12 @1028
RtlFindClearBitsAndSet@12 @1029
RtlFindClearRuns@16 @1030
RtlFindFirstRunClear@0 @1031 PRIVATE
RtlFindLastBackwardRunClear@12 @1032
RtlFindLeastSignificantBit@8 @1033
RtlFindLongestRunClear@8 @1034
RtlFindMessage@20 @1035
RtlFindMostSignificantBit@8 @1036
RtlFindNextForwardRunClear@12 @1037
RtlFindRange@0 @1038 PRIVATE
RtlFindSetBits@12 @1039
RtlFindSetBitsAndClear@12 @1040
RtlFindUnicodePrefix@0 @1041 PRIVATE
RtlFormatCurrentUserKeyPath@4 @1042
RtlFreeAnsiString@4 @1043
RtlFreeHeap@12 @1044
RtlFreeOemString@4 @1045
RtlFreeRangeList@0 @1046 PRIVATE
RtlFreeUnicodeString@4 @1047
RtlGUIDFromString@8 @1048
RtlGenerate8dot3Name@0 @1049 PRIVATE
RtlGetAce@12 @1050
RtlGetCallersAddress@0 @1051 PRIVATE
RtlGetCompressionWorkSpaceSize@12 @1052
RtlGetDaclSecurityDescriptor@16 @1053
RtlGetDefaultCodePage@0 @1054 PRIVATE
RtlGetElementGenericTable@0 @1055 PRIVATE
RtlGetElementGenericTableAvl@0 @1056 PRIVATE
RtlGetFirstRange@0 @1057 PRIVATE
RtlGetGroupSecurityDescriptor@12 @1058
RtlGetNextRange@0 @1059 PRIVATE
RtlGetNtGlobalFlags@0 @1060
RtlGetOwnerSecurityDescriptor@12 @1061
RtlGetSaclSecurityDescriptor@16 @1062
RtlGetSetBootStatusData@0 @1063 PRIVATE
RtlGetVersion@4 @1064
RtlHashUnicodeString@16 @1065
RtlImageDirectoryEntryToData@16 @1066
RtlImageNtHeader@4 @1067
RtlInitAnsiString@8 @1068
RtlInitCodePageTable@0 @1069 PRIVATE
RtlInitString@8 @1070
RtlInitUnicodeString@8 @1071
RtlInitializeBitMap@12 @1072
RtlInitializeGenericTable@20 @1073
RtlInitializeGenericTableAvl@20 @1074
RtlInitializeRangeList@0 @1075 PRIVATE
RtlInitializeSid@12 @1076
RtlInitializeUnicodePrefix@0 @1077 PRIVATE
RtlInsertElementGenericTable@0 @1078 PRIVATE
RtlInsertElementGenericTableAvl@16 @1079
RtlInsertElementGenericTableFull@0 @1080 PRIVATE
RtlInsertElementGenericTableFullAvl@0 @1081 PRIVATE
RtlInsertUnicodePrefix@0 @1082 PRIVATE
RtlInt64ToUnicodeString@16 @1083
RtlIntegerToChar@16 @1084
RtlIntegerToUnicode@0 @1085 PRIVATE
RtlIntegerToUnicodeString@12 @1086
RtlInvertRangeList@0 @1087 PRIVATE
RtlIpv4AddressToStringA@8 @1088
RtlIpv4AddressToStringExA@16 @1089
RtlIpv4AddressToStringExW@16 @1090
RtlIpv4AddressToStringW@8 @1091
RtlIpv4StringToAddressA@0 @1092 PRIVATE
RtlIpv4StringToAddressExA@0 @1093 PRIVATE
RtlIpv4StringToAddressExW@16 @1094
RtlIpv4StringToAddressW@16 @1095
RtlIpv6AddressToStringA@0 @1096 PRIVATE
RtlIpv6AddressToStringExA@0 @1097 PRIVATE
RtlIpv6AddressToStringExW@0 @1098 PRIVATE
RtlIpv6AddressToStringW@0 @1099 PRIVATE
RtlIpv6StringToAddressA@0 @1100 PRIVATE
RtlIpv6StringToAddressExA@0 @1101 PRIVATE
RtlIpv6StringToAddressExW@16 @1102
RtlIpv6StringToAddressW@0 @1103 PRIVATE
RtlIsGenericTableEmpty@0 @1104 PRIVATE
RtlIsGenericTableEmptyAvl@0 @1105 PRIVATE
RtlIsNameLegalDOS8Dot3@12 @1106
RtlIsRangeAvailable@0 @1107 PRIVATE
RtlIsValidOemCharacter@0 @1108 PRIVATE
RtlLargeIntegerAdd@16 @1109
RtlLargeIntegerArithmeticShift@12 @1110
RtlLargeIntegerDivide@20 @1111
RtlLargeIntegerNegate@8 @1112
RtlLargeIntegerShiftLeft@12 @1113
RtlLargeIntegerShiftRight@12 @1114
RtlLargeIntegerSubtract@16 @1115
RtlLengthRequiredSid@4 @1116
RtlLengthSecurityDescriptor@4 @1117
RtlLengthSid@4 @1118
RtlLockBootStatusData@0 @1119 PRIVATE
RtlLookupAtomInAtomTable@12 @1120
RtlLookupElementGenericTable@0 @1121 PRIVATE
RtlLookupElementGenericTableAvl@0 @1122 PRIVATE
RtlLookupElementGenericTableFull@0 @1123 PRIVATE
RtlLookupElementGenericTableFullAvl@0 @1124 PRIVATE
RtlMapGenericMask@8 @1125
RtlMapSecurityErrorToNtStatus@0 @1126 PRIVATE
RtlMergeRangeLists@0 @1127 PRIVATE
RtlMoveMemory@12 @1128
RtlMultiByteToUnicodeN@20 @1129
RtlMultiByteToUnicodeSize@12 @1130
RtlNextUnicodePrefix@0 @1131 PRIVATE
RtlNtStatusToDosError@4 @1132
RtlNtStatusToDosErrorNoTeb@4 @1133
RtlNumberGenericTableElements@4 @1134
RtlNumberGenericTableElementsAvl@0 @1135 PRIVATE
RtlNumberOfClearBits@4 @1136
RtlNumberOfSetBits@4 @1137
RtlOemStringToCountedUnicodeString@0 @1138 PRIVATE
RtlOemStringToUnicodeSize@4 @1139
RtlOemStringToUnicodeString@12 @1140
RtlOemToUnicodeN@20 @1141
RtlPinAtomInAtomTable@8 @1142
RtlPrefixString@12 @1143
RtlPrefixUnicodeString@12 @1144
RtlQueryAtomInAtomTable@24 @1145
RtlQueryRegistryValues@20 @1146
RtlQueryTimeZoneInformation@4 @1147
RtlRaiseException@4 @1148
RtlRandom@4 @1149
RtlRandomEx@4 @1150
RtlRealPredecessor@0 @1151 PRIVATE
RtlRealSuccessor@0 @1152 PRIVATE
RtlRemoveUnicodePrefix@0 @1153 PRIVATE
RtlReserveChunk@0 @1154 PRIVATE
RtlSecondsSince1970ToTime@8 @1155
RtlSecondsSince1980ToTime@8 @1156
RtlSelfRelativeToAbsoluteSD2@0 @1157 PRIVATE
RtlSelfRelativeToAbsoluteSD@44 @1158
RtlSetAllBits@4 @1159
RtlSetBit@0 @1160 PRIVATE
RtlSetBits@12 @1161
RtlSetDaclSecurityDescriptor@16 @1162
RtlSetGroupSecurityDescriptor@12 @1163
RtlSetOwnerSecurityDescriptor@12 @1164
RtlSetSaclSecurityDescriptor@16 @1165
RtlSetTimeZoneInformation@4 @1166
RtlSizeHeap@12 @1167
RtlSplay@0 @1168 PRIVATE
RtlStringFromGUID@8 @1169
RtlSubAuthorityCountSid@4 @1170
RtlSubAuthoritySid@8 @1171
RtlSubtreePredecessor@0 @1172 PRIVATE
RtlSubtreeSuccessor@0 @1173 PRIVATE
RtlTestBit@0 @1174 PRIVATE
RtlTimeFieldsToTime@8 @1175
RtlTimeToElapsedTimeFields@8 @1176
RtlTimeToSecondsSince1970@8 @1177
RtlTimeToSecondsSince1980@8 @1178
RtlTimeToTimeFields@8 @1179
RtlTraceDatabaseAdd@0 @1180 PRIVATE
RtlTraceDatabaseCreate@0 @1181 PRIVATE
RtlTraceDatabaseDestroy@0 @1182 PRIVATE
RtlTraceDatabaseEnumerate@0 @1183 PRIVATE
RtlTraceDatabaseFind@0 @1184 PRIVATE
RtlTraceDatabaseLock@0 @1185 PRIVATE
RtlTraceDatabaseUnlock@0 @1186 PRIVATE
RtlTraceDatabaseValidate@0 @1187 PRIVATE
RtlUnicodeStringToAnsiSize@4 @1188
RtlUnicodeStringToAnsiString@12 @1189
RtlUnicodeStringToCountedOemString@0 @1190 PRIVATE
RtlUnicodeStringToInteger@12 @1191
RtlUnicodeStringToOemSize@4 @1192
RtlUnicodeStringToOemString@12 @1193
RtlUnicodeToCustomCPN@0 @1194 PRIVATE
RtlUnicodeToMultiByteN@20 @1195
RtlUnicodeToMultiByteSize@12 @1196
RtlUnicodeToOemN@20 @1197
RtlUnlockBootStatusData@0 @1198 PRIVATE
RtlUnwind@16 @1199
RtlUpcaseUnicodeChar@4 @1200
RtlUpcaseUnicodeString@12 @1201
RtlUpcaseUnicodeStringToAnsiString@12 @1202
RtlUpcaseUnicodeStringToCountedOemString@12 @1203
RtlUpcaseUnicodeStringToOemString@12 @1204
RtlUpcaseUnicodeToCustomCPN@0 @1205 PRIVATE
RtlUpcaseUnicodeToMultiByteN@20 @1206
RtlUpcaseUnicodeToOemN@20 @1207
RtlUpperChar@4 @1208
RtlUpperString@8 @1209
RtlValidRelativeSecurityDescriptor@12 @1210
RtlValidSecurityDescriptor@4 @1211
RtlValidSid@4 @1212
RtlVerifyVersionInfo@16 @1213
RtlVolumeDeviceToDosName@0 @1214 PRIVATE
RtlWalkFrameChain@0 @1215 PRIVATE
RtlWriteRegistryValue@24 @1216
RtlZeroHeap@0 @1217 PRIVATE
RtlZeroMemory@8 @1218
RtlxAnsiStringToUnicodeSize@4 @1219
RtlxOemStringToUnicodeSize@4 @1220
RtlxUnicodeStringToAnsiSize@4 @1221
RtlxUnicodeStringToOemSize@4 @1222
SeAccessCheck@0 @1223 PRIVATE
SeAppendPrivileges@0 @1224 PRIVATE
SeAssignSecurity@0 @1225 PRIVATE
SeAssignSecurityEx@0 @1226 PRIVATE
SeAuditHardLinkCreation@0 @1227 PRIVATE
SeAuditingFileEvents@0 @1228 PRIVATE
SeAuditingFileEventsWithContext@0 @1229 PRIVATE
SeAuditingFileOrGlobalEvents@0 @1230 PRIVATE
SeAuditingHardLinkEvents@0 @1231 PRIVATE
SeAuditingHardLinkEventsWithContext@0 @1232 PRIVATE
SeCaptureSecurityDescriptor@0 @1233 PRIVATE
SeCaptureSubjectContext@0 @1234 PRIVATE
SeCloseObjectAuditAlarm@0 @1235 PRIVATE
SeCreateAccessState@0 @1236 PRIVATE
SeCreateClientSecurity@0 @1237 PRIVATE
SeCreateClientSecurityFromSubjectContext@0 @1238 PRIVATE
SeDeassignSecurity@0 @1239 PRIVATE
SeDeleteAccessState@0 @1240 PRIVATE
SeDeleteObjectAuditAlarm@0 @1241 PRIVATE
SeExports@0 @1242 PRIVATE
SeFilterToken@0 @1243 PRIVATE
SeFreePrivileges@0 @1244 PRIVATE
SeImpersonateClient@0 @1245 PRIVATE
SeImpersonateClientEx@0 @1246 PRIVATE
SeLockSubjectContext@0 @1247 PRIVATE
SeMarkLogonSessionForTerminationNotification@0 @1248 PRIVATE
SeOpenObjectAuditAlarm@0 @1249 PRIVATE
SeOpenObjectForDeleteAuditAlarm@0 @1250 PRIVATE
SePrivilegeCheck@0 @1251 PRIVATE
SePrivilegeObjectAuditAlarm@0 @1252 PRIVATE
SePublicDefaultDacl@0 @1253 PRIVATE
SeQueryAuthenticationIdToken@0 @1254 PRIVATE
SeQueryInformationToken@0 @1255 PRIVATE
SeQuerySecurityDescriptorInfo@0 @1256 PRIVATE
SeQuerySessionIdToken@0 @1257 PRIVATE
SeRegisterLogonSessionTerminatedRoutine@0 @1258 PRIVATE
SeReleaseSecurityDescriptor@0 @1259 PRIVATE
SeReleaseSubjectContext@0 @1260 PRIVATE
SeSetAccessStateGenericMapping@0 @1261 PRIVATE
SeSetSecurityDescriptorInfo@0 @1262 PRIVATE
SeSetSecurityDescriptorInfoEx@0 @1263 PRIVATE
SeSinglePrivilegeCheck@12 @1264
SeSystemDefaultDacl@0 @1265 PRIVATE
SeTokenImpersonationLevel@0 @1266 PRIVATE
SeTokenIsAdmin@0 @1267 PRIVATE
SeTokenIsRestricted@0 @1268 PRIVATE
SeTokenIsWriteRestricted@0 @1269 PRIVATE
SeTokenObjectType @1270 DATA
SeTokenType@0 @1271 PRIVATE
SeUnlockSubjectContext@0 @1272 PRIVATE
SeUnregisterLogonSessionTerminatedRoutine@0 @1273 PRIVATE
SeValidSecurityDescriptor@0 @1274 PRIVATE
VerSetConditionMask@16 @1275
VfFailDeviceNode@0 @1276 PRIVATE
VfFailDriver@0 @1277 PRIVATE
VfFailSystemBIOS@0 @1278 PRIVATE
VfIsVerificationEnabled@0 @1279 PRIVATE
WRITE_REGISTER_BUFFER_UCHAR@0 @1280 PRIVATE
WRITE_REGISTER_BUFFER_ULONG@0 @1281 PRIVATE
WRITE_REGISTER_BUFFER_USHORT@0 @1282 PRIVATE
WRITE_REGISTER_UCHAR@0 @1283 PRIVATE
WRITE_REGISTER_ULONG@0 @1284 PRIVATE
WRITE_REGISTER_USHORT@0 @1285 PRIVATE
WmiFlushTrace@0 @1286 PRIVATE
WmiQueryTrace@0 @1287 PRIVATE
WmiQueryTraceInformation@0 @1288 PRIVATE
WmiStartTrace@0 @1289 PRIVATE
WmiStopTrace@0 @1290 PRIVATE
WmiTraceMessage@0 @1291 PRIVATE
WmiTraceMessageVa@0 @1292 PRIVATE
WmiUpdateTrace@0 @1293 PRIVATE
XIPDispatch@0 @1294 PRIVATE
ZwAccessCheckAndAuditAlarm@44=NtAccessCheckAndAuditAlarm @1295 PRIVATE
ZwAddBootEntry@0 @1296 PRIVATE
ZwAdjustPrivilegesToken@24=NtAdjustPrivilegesToken @1297 PRIVATE
ZwAlertThread@4=NtAlertThread @1298 PRIVATE
ZwAllocateVirtualMemory@24=NtAllocateVirtualMemory @1299 PRIVATE
ZwAssignProcessToJobObject@8=NtAssignProcessToJobObject @1300 PRIVATE
ZwCancelIoFile@8=NtCancelIoFile @1301 PRIVATE
ZwCancelTimer@8=NtCancelTimer @1302 PRIVATE
ZwClearEvent@4=NtClearEvent @1303 PRIVATE
ZwClose@4=NtClose @1304
ZwCloseObjectAuditAlarm@0 @1305 PRIVATE
ZwConnectPort@32=NtConnectPort @1306 PRIVATE
ZwCreateDirectoryObject@12=NtCreateDirectoryObject @1307 PRIVATE
ZwCreateEvent@20=NtCreateEvent @1308
ZwCreateFile@44=NtCreateFile @1309
ZwCreateJobObject@12=NtCreateJobObject @1310 PRIVATE
ZwCreateKey@28=NtCreateKey @1311 PRIVATE
ZwCreateSection@28=NtCreateSection @1312 PRIVATE
ZwCreateSymbolicLinkObject@16=NtCreateSymbolicLinkObject @1313 PRIVATE
ZwCreateTimer@16=NtCreateTimer @1314 PRIVATE
ZwDeleteBootEntry@0 @1315 PRIVATE
ZwDeleteFile@4=NtDeleteFile @1316 PRIVATE
ZwDeleteKey@4=NtDeleteKey @1317 PRIVATE
ZwDeleteValueKey@8=NtDeleteValueKey @1318 PRIVATE
ZwDeviceIoControlFile@40=NtDeviceIoControlFile @1319 PRIVATE
ZwDisplayString@4=NtDisplayString @1320 PRIVATE
ZwDuplicateObject@28=NtDuplicateObject @1321
ZwDuplicateToken@24=NtDuplicateToken @1322 PRIVATE
ZwEnumerateBootEntries@0 @1323 PRIVATE
ZwEnumerateKey@24=NtEnumerateKey @1324 PRIVATE
ZwEnumerateValueKey@24=NtEnumerateValueKey @1325 PRIVATE
ZwFlushInstructionCache@12=NtFlushInstructionCache @1326 PRIVATE
ZwFlushKey@4=NtFlushKey @1327 PRIVATE
ZwFlushVirtualMemory@16=NtFlushVirtualMemory @1328 PRIVATE
ZwFreeVirtualMemory@16=NtFreeVirtualMemory @1329 PRIVATE
ZwFsControlFile@40=NtFsControlFile @1330 PRIVATE
ZwInitiatePowerAction@16=NtInitiatePowerAction @1331 PRIVATE
ZwIsProcessInJob@8=NtIsProcessInJob @1332 PRIVATE
ZwLoadDriver@4 @1333
ZwLoadKey@8=NtLoadKey @1334 PRIVATE
ZwMakeTemporaryObject@4=NtMakeTemporaryObject @1335 PRIVATE
ZwMapViewOfSection@40=NtMapViewOfSection @1336 PRIVATE
ZwNotifyChangeKey@40=NtNotifyChangeKey @1337 PRIVATE
ZwOpenDirectoryObject@12=NtOpenDirectoryObject @1338 PRIVATE
ZwOpenEvent@12=NtOpenEvent @1339 PRIVATE
ZwOpenFile@24=NtOpenFile @1340
ZwOpenJobObject@12=NtOpenJobObject @1341 PRIVATE
ZwOpenKey@12=NtOpenKey @1342 PRIVATE
ZwOpenProcess@16=NtOpenProcess @1343 PRIVATE
ZwOpenProcessToken@12=NtOpenProcessToken @1344 PRIVATE
ZwOpenProcessTokenEx@16=NtOpenProcessTokenEx @1345 PRIVATE
ZwOpenSection@12=NtOpenSection @1346 PRIVATE
ZwOpenSymbolicLinkObject@12=NtOpenSymbolicLinkObject @1347 PRIVATE
ZwOpenThread@16=NtOpenThread @1348 PRIVATE
ZwOpenThreadToken@16=NtOpenThreadToken @1349 PRIVATE
ZwOpenThreadTokenEx@20=NtOpenThreadTokenEx @1350 PRIVATE
ZwOpenTimer@12=NtOpenTimer @1351 PRIVATE
ZwPowerInformation@20=NtPowerInformation @1352 PRIVATE
ZwPulseEvent@8=NtPulseEvent @1353 PRIVATE
ZwQueryBootEntryOrder@0 @1354 PRIVATE
ZwQueryBootOptions@0 @1355 PRIVATE
ZwQueryDefaultLocale@8=NtQueryDefaultLocale @1356 PRIVATE
ZwQueryDefaultUILanguage@4=NtQueryDefaultUILanguage @1357 PRIVATE
ZwQueryDirectoryFile@44=NtQueryDirectoryFile @1358 PRIVATE
ZwQueryDirectoryObject@28=NtQueryDirectoryObject @1359 PRIVATE
ZwQueryEaFile@36=NtQueryEaFile @1360 PRIVATE
ZwQueryFullAttributesFile@8=NtQueryFullAttributesFile @1361 PRIVATE
ZwQueryInformationFile@20=NtQueryInformationFile @1362 PRIVATE
ZwQueryInformationJobObject@20=NtQueryInformationJobObject @1363 PRIVATE
ZwQueryInformationProcess@20=NtQueryInformationProcess @1364 PRIVATE
ZwQueryInformationThread@20=NtQueryInformationThread @1365 PRIVATE
ZwQueryInformationToken@20=NtQueryInformationToken @1366 PRIVATE
ZwQueryInstallUILanguage@4=NtQueryInstallUILanguage @1367 PRIVATE
ZwQueryKey@20=NtQueryKey @1368 PRIVATE
ZwQueryObject@20=NtQueryObject @1369 PRIVATE
ZwQuerySection@20=NtQuerySection @1370 PRIVATE
ZwQuerySecurityObject@20=NtQuerySecurityObject @1371 PRIVATE
ZwQuerySymbolicLinkObject@12=NtQuerySymbolicLinkObject @1372 PRIVATE
ZwQuerySystemInformation@16=NtQuerySystemInformation @1373 PRIVATE
ZwQueryValueKey@24=NtQueryValueKey @1374 PRIVATE
ZwQueryVolumeInformationFile@20=NtQueryVolumeInformationFile @1375 PRIVATE
ZwReadFile@36=NtReadFile @1376 PRIVATE
ZwReplaceKey@12=NtReplaceKey @1377 PRIVATE
ZwRequestWaitReplyPort@12=NtRequestWaitReplyPort @1378 PRIVATE
ZwResetEvent@8=NtResetEvent @1379 PRIVATE
ZwRestoreKey@12=NtRestoreKey @1380 PRIVATE
ZwSaveKey@8=NtSaveKey @1381 PRIVATE
ZwSaveKeyEx@0 @1382 PRIVATE
ZwSetBootEntryOrder@0 @1383 PRIVATE
ZwSetBootOptions@0 @1384 PRIVATE
ZwSetDefaultLocale@8=NtSetDefaultLocale @1385 PRIVATE
ZwSetDefaultUILanguage@4=NtSetDefaultUILanguage @1386 PRIVATE
ZwSetEaFile@16=NtSetEaFile @1387 PRIVATE
ZwSetEvent@8=NtSetEvent @1388
ZwSetInformationFile@20=NtSetInformationFile @1389 PRIVATE
ZwSetInformationJobObject@16=NtSetInformationJobObject @1390 PRIVATE
ZwSetInformationObject@16=NtSetInformationObject @1391 PRIVATE
ZwSetInformationProcess@16=NtSetInformationProcess @1392 PRIVATE
ZwSetInformationThread@16=NtSetInformationThread @1393 PRIVATE
ZwSetSecurityObject@12=NtSetSecurityObject @1394 PRIVATE
ZwSetSystemInformation@12=NtSetSystemInformation @1395 PRIVATE
ZwSetSystemTime@8=NtSetSystemTime @1396 PRIVATE
ZwSetTimer@28=NtSetTimer @1397 PRIVATE
ZwSetValueKey@24=NtSetValueKey @1398 PRIVATE
ZwSetVolumeInformationFile@20=NtSetVolumeInformationFile @1399 PRIVATE
ZwTerminateJobObject@8=NtTerminateJobObject @1400 PRIVATE
ZwTerminateProcess@8=NtTerminateProcess @1401 PRIVATE
ZwTranslateFilePath@0 @1402 PRIVATE
ZwUnloadDriver@4 @1403
ZwUnloadKey@4=NtUnloadKey @1404 PRIVATE
ZwUnmapViewOfSection@8=NtUnmapViewOfSection @1405 PRIVATE
ZwWaitForMultipleObjects@20=NtWaitForMultipleObjects @1406 PRIVATE
ZwWaitForSingleObject@12=NtWaitForSingleObject @1407
ZwWriteFile@36=NtWriteFile @1408
ZwYieldExecution@0=NtYieldExecution @1409 PRIVATE
_CIcos=msvcrt._CIcos @1410 PRIVATE
_CIsin=msvcrt._CIsin @1411 PRIVATE
_CIsqrt=msvcrt._CIsqrt @1412 PRIVATE
_abnormal_termination=msvcrt._abnormal_termination @1413 PRIVATE
_alldiv@16 @1414 PRIVATE
_alldvrm@16 @1415 PRIVATE
_allmul@16 @1416 PRIVATE
_alloca_probe@0 @1417 PRIVATE
_allrem@16 @1418 PRIVATE
_allshl@12 @1419 PRIVATE
_allshr@12 @1420 PRIVATE
_aulldiv@16 @1421 PRIVATE
_aulldvrm@16 @1422 PRIVATE
_aullrem@16 @1423 PRIVATE
_aullshr@12 @1424 PRIVATE
_chkstk@0 @1425 PRIVATE
_except_handler2=msvcrt._except_handler2 @1426 PRIVATE
_except_handler3=msvcrt._except_handler3 @1427 PRIVATE
_global_unwind2=msvcrt._global_unwind2 @1428 PRIVATE
_itoa=msvcrt._itoa @1429 PRIVATE
_itow=msvcrt._itow @1430 PRIVATE
_local_unwind2=msvcrt._local_unwind2 @1431 PRIVATE
_purecall=msvcrt._purecall @1432 PRIVATE
_snprintf=msvcrt._snprintf @1433 PRIVATE
_snwprintf=msvcrt._snwprintf @1434 PRIVATE
_stricmp=NTOSKRNL__stricmp @1435 PRIVATE
_strlwr=msvcrt._strlwr @1436 PRIVATE
_strnicmp=NTOSKRNL__strnicmp @1437 PRIVATE
_strnset=msvcrt._strnset @1438 PRIVATE
_strrev=msvcrt._strrev @1439 PRIVATE
_strset=msvcrt._strset @1440 PRIVATE
_strupr=msvcrt._strupr @1441 PRIVATE
_vsnprintf=msvcrt._vsnprintf @1442
_vsnwprintf=msvcrt._vsnwprintf @1443 PRIVATE
_wcsicmp=msvcrt._wcsicmp @1444 PRIVATE
_wcslwr=msvcrt._wcslwr @1445 PRIVATE
_wcsnicmp=NTOSKRNL__wcsnicmp @1446 PRIVATE
_wcsnset=msvcrt._wcsnset @1447 PRIVATE
_wcsrev=msvcrt._wcsrev @1448 PRIVATE
_wcsupr=msvcrt._wcsupr @1449 PRIVATE
atoi=msvcrt.atoi @1450 PRIVATE
atol=msvcrt.atol @1451 PRIVATE
isdigit=msvcrt.isdigit @1452 PRIVATE
islower=msvcrt.islower @1453 PRIVATE
isprint=msvcrt.isprint @1454 PRIVATE
isspace=msvcrt.isspace @1455 PRIVATE
isupper=msvcrt.isupper @1456 PRIVATE
isxdigit=msvcrt.isxdigit @1457 PRIVATE
mbstowcs=msvcrt.mbstowcs @1458 PRIVATE
mbtowc=msvcrt.mbtowc @1459 PRIVATE
memchr=msvcrt.memchr @1460 PRIVATE
memcpy=NTOSKRNL_memcpy @1461 PRIVATE
memmove=msvcrt.memmove @1462 PRIVATE
memset=NTOSKRNL_memset @1463 PRIVATE
qsort=msvcrt.qsort @1464 PRIVATE
rand=msvcrt.rand @1465 PRIVATE
sprintf=msvcrt.sprintf @1466 PRIVATE
srand=msvcrt.srand @1467 PRIVATE
strcat=msvcrt.strcat @1468 PRIVATE
strchr=msvcrt.strchr @1469 PRIVATE
strcmp=msvcrt.strcmp @1470 PRIVATE
strcpy=msvcrt.strcpy @1471 PRIVATE
strlen=msvcrt.strlen @1472 PRIVATE
strncat=msvcrt.strncat @1473 PRIVATE
strncmp=msvcrt.strncmp @1474 PRIVATE
strncpy=msvcrt.strncpy @1475 PRIVATE
strrchr=msvcrt.strrchr @1476 PRIVATE
strspn=msvcrt.strspn @1477 PRIVATE
strstr=msvcrt.strstr @1478 PRIVATE
swprintf=msvcrt.swprintf @1479 PRIVATE
tolower=msvcrt.tolower @1480 PRIVATE
toupper=msvcrt.toupper @1481 PRIVATE
towlower=msvcrt.towlower @1482 PRIVATE
towupper=msvcrt.towupper @1483 PRIVATE
vDbgPrintEx@16 @1484
vDbgPrintExWithPrefix@20 @1485
vsprintf=msvcrt.vsprintf @1486 PRIVATE
wcscat=msvcrt.wcscat @1487 PRIVATE
wcschr=msvcrt.wcschr @1488 PRIVATE
wcscmp=msvcrt.wcscmp @1489 PRIVATE
wcscpy=msvcrt.wcscpy @1490 PRIVATE
wcscspn=msvcrt.wcscspn @1491 PRIVATE
wcslen=msvcrt.wcslen @1492 PRIVATE
wcsncat=msvcrt.wcsncat @1493 PRIVATE
wcsncmp=NTOSKRNL_wcsncmp @1494 PRIVATE
wcsncpy=msvcrt.wcsncpy @1495 PRIVATE
wcsrchr=msvcrt.wcsrchr @1496 PRIVATE
wcsspn=msvcrt.wcsspn @1497 PRIVATE
wcsstr=msvcrt.wcsstr @1498 PRIVATE
wcstombs=msvcrt.wcstombs @1499 PRIVATE
wctomb=msvcrt.wctomb @1500 PRIVATE
wine_ntoskrnl_main_loop @1501