; File generated automatically from dlls/ntoskrnl.exe/ntoskrnl.exe.spec; do not edit!

LIBRARY ntoskrnl.exe

EXPORTS
  ExAcquireFastMutexUnsafe@4 @1
  ExAcquireRundownProtection@0 @2 PRIVATE
  ExAcquireRundownProtectionEx@0 @3 PRIVATE
  ExInitializeRundownProtection@0 @4 PRIVATE
  ExInterlockedAddLargeStatistic@0 @5 PRIVATE
  ExInterlockedCompareExchange64@0 @6 PRIVATE
  ExInterlockedFlushSList@4=__fastcall_NTOSKRNL_ExInterlockedFlushSList @7
  ExInterlockedPopEntrySList@8=__fastcall_NTOSKRNL_ExInterlockedPopEntrySList @8
  ExInterlockedPushEntrySList@12=__fastcall_NTOSKRNL_ExInterlockedPushEntrySList @9
  ExReInitializeRundownProtection@0 @10 PRIVATE
  ExReleaseFastMutexUnsafe@4 @11
  ExReleaseResourceLite@4 @12
  ExReleaseRundownProtection@0 @13 PRIVATE
  ExReleaseRundownProtectionEx@0 @14 PRIVATE
  ExRundownCompleted@0 @15 PRIVATE
  ExWaitForRundownProtectionRelease@0 @16 PRIVATE
  ExfAcquirePushLockExclusive@0 @17 PRIVATE
  ExfAcquirePushLockShared@0 @18 PRIVATE
  ExfInterlockedAddUlong@0 @19 PRIVATE
  ExfInterlockedCompareExchange64@0 @20 PRIVATE
  ExfInterlockedInsertHeadList@0 @21 PRIVATE
  ExfInterlockedInsertTailList@0 @22 PRIVATE
  ExfInterlockedPopEntryList@0 @23 PRIVATE
  ExfInterlockedPushEntryList@0 @24 PRIVATE
  ExfInterlockedRemoveHeadList@8 @25
  ExfReleasePushLock@0 @26 PRIVATE
  Exfi386InterlockedDecrementLong@0 @27 PRIVATE
  Exfi386InterlockedExchangeUlong@0 @28 PRIVATE
  Exfi386InterlockedIncrementLong@0 @29 PRIVATE
  HalExamineMBR@0 @30 PRIVATE
  InterlockedCompareExchange@12=__fastcall_NTOSKRNL_InterlockedCompareExchange @31
  InterlockedDecrement@4=__fastcall_NTOSKRNL_InterlockedDecrement @32
  InterlockedExchange@8=__fastcall_NTOSKRNL_InterlockedExchange @33
  InterlockedExchangeAdd@8=__fastcall_NTOSKRNL_InterlockedExchangeAdd @34
  InterlockedIncrement@4=__fastcall_NTOSKRNL_InterlockedIncrement @35
  InterlockedPopEntrySList@4=__fastcall_NTOSKRNL_InterlockedPopEntrySList @36
  InterlockedPushEntrySList@8=__fastcall_NTOSKRNL_InterlockedPushEntrySList @37
  IoAssignDriveLetters@0 @38 PRIVATE
  IoReadPartitionTable@0 @39 PRIVATE
  IoSetPartitionInformation@0 @40 PRIVATE
  IoWritePartitionTable@0 @41 PRIVATE
  IofCallDriver@8 @42
  IofCompleteRequest@8 @43
  KeAcquireInStackQueuedSpinLockAtDpcLevel@8 @44
  KeEnterGuardedRegion@0 @45
  KeExpandKernelStackAndCallout@12 @46
  KeExpandKernelStackAndCalloutEx@20 @47
  KeLeaveGuardedRegion@0 @48
  KeReleaseInStackQueuedSpinLockFromDpcLevel@4 @49
  KeSetTimeUpdateNotifyRoutine@0 @50 PRIVATE
  KefAcquireSpinLockAtDpcLevel@0 @51 PRIVATE
  KefReleaseSpinLockFromDpcLevel@0 @52 PRIVATE
  KiAcquireSpinLock@0 @53 PRIVATE
  KiReleaseSpinLock@0 @54 PRIVATE
  ObfDereferenceObject@4 @55
  ObfReferenceObject@4 @56
  RtlPrefetchMemoryNonTemporal@0 @57 PRIVATE
  RtlUlongByteSwap @58
  RtlUlonglongByteSwap @59
  RtlUshortByteSwap @60
  WmiGetClock@0 @61 PRIVATE
  Kei386EoiHelper@0 @62 PRIVATE
  Kii386SpinOnSpinLock@0 @63 PRIVATE
  CcCanIWrite@0 @64 PRIVATE
  CcCopyRead@0 @65 PRIVATE
  CcCopyWrite@0 @66 PRIVATE
  CcDeferWrite@0 @67 PRIVATE
  CcFastCopyRead@0 @68 PRIVATE
  CcFastCopyWrite@0 @69 PRIVATE
  CcFastMdlReadWait@0 @70 PRIVATE
  CcFastReadNotPossible@0 @71 PRIVATE
  CcFastReadWait@0 @72 PRIVATE
  CcFlushCache@0 @73 PRIVATE
  CcGetDirtyPages@0 @74 PRIVATE
  CcGetFileObjectFromBcb@0 @75 PRIVATE
  CcGetFileObjectFromSectionPtrs@0 @76 PRIVATE
  CcGetFlushedValidData@0 @77 PRIVATE
  CcGetLsnForFileObject@0 @78 PRIVATE
  CcInitializeCacheMap@0 @79 PRIVATE
  CcIsThereDirtyData@0 @80 PRIVATE
  CcMapData@0 @81 PRIVATE
  CcMdlRead@0 @82 PRIVATE
  CcMdlReadComplete@0 @83 PRIVATE
  CcMdlWriteAbort@0 @84 PRIVATE
  CcMdlWriteComplete@0 @85 PRIVATE
  CcPinMappedData@0 @86 PRIVATE
  CcPinRead@0 @87 PRIVATE
  CcPrepareMdlWrite@0 @88 PRIVATE
  CcPreparePinWrite@0 @89 PRIVATE
  CcPurgeCacheSection@0 @90 PRIVATE
  CcRemapBcb@0 @91 PRIVATE
  CcRepinBcb@0 @92 PRIVATE
  CcScheduleReadAhead@0 @93 PRIVATE
  CcSetAdditionalCacheAttributes@0 @94 PRIVATE
  CcSetBcbOwnerPointer@0 @95 PRIVATE
  CcSetDirtyPageThreshold@0 @96 PRIVATE
  CcSetDirtyPinnedData@0 @97 PRIVATE
  CcSetFileSizes@0 @98 PRIVATE
  CcSetLogHandleForFile@0 @99 PRIVATE
  CcSetReadAheadGranularity@0 @100 PRIVATE
  CcUninitializeCacheMap@0 @101 PRIVATE
  CcUnpinData@0 @102 PRIVATE
  CcUnpinDataForThread@0 @103 PRIVATE
  CcUnpinRepinnedBcb@0 @104 PRIVATE
  CcWaitForCurrentLazyWriterActivity@0 @105 PRIVATE
  CcZeroData@0 @106 PRIVATE
  CmRegisterCallback@12 @107
  CmUnRegisterCallback@8 @108
  DbgBreakPoint@0 @109
  DbgBreakPointWithStatus@0 @110 PRIVATE
  DbgLoadImageSymbols@0 @111 PRIVATE
  DbgPrint @112
  DbgPrintEx @113
  DbgPrintReturnControlC@0 @114 PRIVATE
  DbgPrompt@0 @115 PRIVATE
  DbgQueryDebugFilterState@8 @116
  DbgSetDebugFilterState@0 @117 PRIVATE
  ExAcquireResourceExclusiveLite@8 @118
  ExAcquireResourceSharedLite@8 @119
  ExAcquireSharedStarveExclusive@8 @120
  ExAcquireSharedWaitForExclusive@8 @121
  ExAllocateFromPagedLookasideList@0 @122 PRIVATE
  ExAllocatePool@8 @123
  ExAllocatePoolWithQuota@8 @124
  ExAllocatePoolWithQuotaTag@12 @125
  ExAllocatePoolWithTag@12 @126
  ExAllocatePoolWithTagPriority@0 @127 PRIVATE
  ExConvertExclusiveToSharedLite@0 @128 PRIVATE
  ExCreateCallback@16 @129
  ExDeleteNPagedLookasideList@4 @130
  ExDeletePagedLookasideList@4 @131
  ExDeleteResourceLite@4 @132
  ExDesktopObjectType@0 @133 PRIVATE
  ExDisableResourceBoostLite@0 @134 PRIVATE
  ExEnumHandleTable@0 @135 PRIVATE
  ExEventObjectType @136 DATA
  ExExtendZone@0 @137 PRIVATE
  ExfUnblockPushLock@8 @138
  ExFreePool@4 @139
  ExFreePoolWithTag@8 @140
  ExFreeToPagedLookasideList@0 @141 PRIVATE
  ExGetCurrentProcessorCounts@0 @142 PRIVATE
  ExGetCurrentProcessorCpuUsage@0 @143 PRIVATE
  ExGetExclusiveWaiterCount@4 @144
  ExGetPreviousMode@0 @145 PRIVATE
  ExGetSharedWaiterCount@4 @146
  ExInitializeNPagedLookasideList@28 @147
  ExInitializePagedLookasideList@28 @148
  ExInitializeResourceLite@4 @149
  ExInitializeZone@16 @150
  ExInterlockedAddLargeInteger@0 @151 PRIVATE
  ExInterlockedAddUlong@0 @152 PRIVATE
  ExInterlockedDecrementLong@0 @153 PRIVATE
  ExInterlockedExchangeUlong@0 @154 PRIVATE
  ExInterlockedExtendZone@0 @155 PRIVATE
  ExInterlockedIncrementLong@0 @156 PRIVATE
  ExInterlockedInsertHeadList@0 @157 PRIVATE
  ExInterlockedInsertTailList@0 @158 PRIVATE
  ExInterlockedPopEntryList@0 @159 PRIVATE
  ExInterlockedPushEntryList@0 @160 PRIVATE
  ExInterlockedRemoveHeadList@8 @161
  ExIsProcessorFeaturePresent@0 @162 PRIVATE
  ExIsResourceAcquiredExclusiveLite@4 @163
  ExIsResourceAcquiredSharedLite@4 @164
  ExLocalTimeToSystemTime@8=RtlLocalTimeToSystemTime @165
  ExNotifyCallback@0 @166 PRIVATE
  ExQueryPoolBlockSize@0 @167 PRIVATE
  ExQueueWorkItem@0 @168 PRIVATE
  ExRaiseAccessViolation@0 @169 PRIVATE
  ExRaiseDatatypeMisalignment@0 @170 PRIVATE
  ExRaiseException@0 @171 PRIVATE
  ExRaiseHardError@0 @172 PRIVATE
  ExRaiseStatus@0 @173 PRIVATE
  ExRegisterCallback@0 @174 PRIVATE
  ExReinitializeResourceLite@0 @175 PRIVATE
  ExReleaseResourceForThreadLite@8 @176
  ExSemaphoreObjectType @177 DATA
  ExSetResourceOwnerPointer@0 @178 PRIVATE
  ExSetTimerResolution@8 @179
  ExSystemExceptionFilter@0 @180 PRIVATE
  ExSystemTimeToLocalTime@8=RtlSystemTimeToLocalTime @181
  ExUnregisterCallback@0 @182 PRIVATE
  ExUuidCreate@4 @183
  ExVerifySuite@0 @184 PRIVATE
  ExWindowStationObjectType@0 @185 PRIVATE
  Exi386InterlockedDecrementLong@0 @186 PRIVATE
  Exi386InterlockedExchangeUlong@0 @187 PRIVATE
  Exi386InterlockedIncrementLong@0 @188 PRIVATE
  FsRtlAcquireFileExclusive@0 @189 PRIVATE
  FsRtlAddLargeMcbEntry@0 @190 PRIVATE
  FsRtlAddMcbEntry@0 @191 PRIVATE
  FsRtlAddToTunnelCache@0 @192 PRIVATE
  FsRtlAllocateFileLock@0 @193 PRIVATE
  FsRtlAllocatePool@0 @194 PRIVATE
  FsRtlAllocatePoolWithQuota@0 @195 PRIVATE
  FsRtlAllocatePoolWithQuotaTag@0 @196 PRIVATE
  FsRtlAllocatePoolWithTag@0 @197 PRIVATE
  FsRtlAllocateResource@0 @198 PRIVATE
  FsRtlAreNamesEqual@0 @199 PRIVATE
  FsRtlBalanceReads@0 @200 PRIVATE
  FsRtlCheckLockForReadAccess@0 @201 PRIVATE
  FsRtlCheckLockForWriteAccess@0 @202 PRIVATE
  FsRtlCheckOplock@0 @203 PRIVATE
  FsRtlCopyRead@0 @204 PRIVATE
  FsRtlCopyWrite@0 @205 PRIVATE
  FsRtlCurrentBatchOplock@0 @206 PRIVATE
  FsRtlDeleteKeyFromTunnelCache@0 @207 PRIVATE
  FsRtlDeleteTunnelCache@0 @208 PRIVATE
  FsRtlDeregisterUncProvider@0 @209 PRIVATE
  FsRtlDissectDbcs@0 @210 PRIVATE
  FsRtlDissectName@0 @211 PRIVATE
  FsRtlDoesDbcsContainWildCards@0 @212 PRIVATE
  FsRtlDoesNameContainWildCards@0 @213 PRIVATE
  FsRtlFastCheckLockForRead@0 @214 PRIVATE
  FsRtlFastCheckLockForWrite@0 @215 PRIVATE
  FsRtlFastUnlockAll@0 @216 PRIVATE
  FsRtlFastUnlockAllByKey@0 @217 PRIVATE
  FsRtlFastUnlockSingle@0 @218 PRIVATE
  FsRtlFindInTunnelCache@0 @219 PRIVATE
  FsRtlFreeFileLock@0 @220 PRIVATE
  FsRtlGetFileSize@0 @221 PRIVATE
  FsRtlGetNextFileLock@0 @222 PRIVATE
  FsRtlGetNextLargeMcbEntry@0 @223 PRIVATE
  FsRtlGetNextMcbEntry@0 @224 PRIVATE
  FsRtlIncrementCcFastReadNoWait@0 @225 PRIVATE
  FsRtlIncrementCcFastReadNotPossible@0 @226 PRIVATE
  FsRtlIncrementCcFastReadResourceMiss@0 @227 PRIVATE
  FsRtlIncrementCcFastReadWait@0 @228 PRIVATE
  FsRtlInitializeFileLock@0 @229 PRIVATE
  FsRtlInitializeLargeMcb@0 @230 PRIVATE
  FsRtlInitializeMcb@0 @231 PRIVATE
  FsRtlInitializeOplock@0 @232 PRIVATE
  FsRtlInitializeTunnelCache@0 @233 PRIVATE
  FsRtlInsertPerFileObjectContext@0 @234 PRIVATE
  FsRtlInsertPerStreamContext@0 @235 PRIVATE
  FsRtlIsDbcsInExpression@0 @236 PRIVATE
  FsRtlIsFatDbcsLegal@0 @237 PRIVATE
  FsRtlIsHpfsDbcsLegal@0 @238 PRIVATE
  FsRtlIsNameInExpression@16 @239
  FsRtlIsNtstatusExpected@0 @240 PRIVATE
  FsRtlIsPagingFile@0 @241 PRIVATE
  FsRtlIsTotalDeviceFailure@0 @242 PRIVATE
  FsRtlLegalAnsiCharacterArray@0 @243 PRIVATE
  FsRtlLookupLargeMcbEntry@0 @244 PRIVATE
  FsRtlLookupLastLargeMcbEntry@0 @245 PRIVATE
  FsRtlLookupLastLargeMcbEntryAndIndex@0 @246 PRIVATE
  FsRtlLookupLastMcbEntry@0 @247 PRIVATE
  FsRtlLookupMcbEntry@0 @248 PRIVATE
  FsRtlLookupPerFileObjectContext@0 @249 PRIVATE
  FsRtlLookupPerStreamContextInternal@0 @250 PRIVATE
  FsRtlMdlRead@0 @251 PRIVATE
  FsRtlMdlReadComplete@0 @252 PRIVATE
  FsRtlMdlReadCompleteDev@0 @253 PRIVATE
  FsRtlMdlReadDev@0 @254 PRIVATE
  FsRtlMdlWriteComplete@0 @255 PRIVATE
  FsRtlMdlWriteCompleteDev@0 @256 PRIVATE
  FsRtlNormalizeNtstatus@0 @257 PRIVATE
  FsRtlNotifyChangeDirectory@0 @258 PRIVATE
  FsRtlNotifyCleanup@0 @259 PRIVATE
  FsRtlNotifyFilterChangeDirectory@0 @260 PRIVATE
  FsRtlNotifyFilterReportChange@0 @261 PRIVATE
  FsRtlNotifyFullChangeDirectory@0 @262 PRIVATE
  FsRtlNotifyFullReportChange@0 @263 PRIVATE
  FsRtlNotifyInitializeSync@0 @264 PRIVATE
  FsRtlNotifyReportChange@0 @265 PRIVATE
  FsRtlNotifyUninitializeSync@0 @266 PRIVATE
  FsRtlNotifyVolumeEvent@0 @267 PRIVATE
  FsRtlNumberOfRunsInLargeMcb@0 @268 PRIVATE
  FsRtlNumberOfRunsInMcb@0 @269 PRIVATE
  FsRtlOplockFsctrl@0 @270 PRIVATE
  FsRtlOplockIsFastIoPossible@0 @271 PRIVATE
  FsRtlPostPagingFileStackOverflow@0 @272 PRIVATE
  FsRtlPostStackOverflow@0 @273 PRIVATE
  FsRtlPrepareMdlWrite@0 @274 PRIVATE
  FsRtlPrepareMdlWriteDev@0 @275 PRIVATE
  FsRtlPrivateLock@0 @276 PRIVATE
  FsRtlProcessFileLock@0 @277 PRIVATE
  FsRtlRegisterFileSystemFilterCallbacks@8 @278
  FsRtlRegisterUncProvider@12 @279
  FsRtlReleaseFile@0 @280 PRIVATE
  FsRtlRemoveLargeMcbEntry@0 @281 PRIVATE
  FsRtlRemoveMcbEntry@0 @282 PRIVATE
  FsRtlRemovePerFileObjectContext@0 @283 PRIVATE
  FsRtlRemovePerStreamContext@0 @284 PRIVATE
  FsRtlResetLargeMcb@0 @285 PRIVATE
  FsRtlSplitLargeMcb@0 @286 PRIVATE
  FsRtlSyncVolumes@0 @287 PRIVATE
  FsRtlTeardownPerStreamContexts@0 @288 PRIVATE
  FsRtlTruncateLargeMcb@0 @289 PRIVATE
  FsRtlTruncateMcb@0 @290 PRIVATE
  FsRtlUninitializeFileLock@0 @291 PRIVATE
  FsRtlUninitializeLargeMcb@0 @292 PRIVATE
  FsRtlUninitializeMcb@0 @293 PRIVATE
  FsRtlUninitializeOplock@0 @294 PRIVATE
  HalDispatchTable@0 @295 PRIVATE
  HalPrivateDispatchTable@0 @296 PRIVATE
  HeadlessDispatch@0 @297 PRIVATE
  InbvAcquireDisplayOwnership@0 @298 PRIVATE
  InbvCheckDisplayOwnership@0 @299 PRIVATE
  InbvDisplayString@0 @300 PRIVATE
  InbvEnableBootDriver@0 @301 PRIVATE
  InbvEnableDisplayString@0 @302 PRIVATE
  InbvInstallDisplayStringFilter@0 @303 PRIVATE
  InbvIsBootDriverInstalled@0 @304 PRIVATE
  InbvNotifyDisplayOwnershipLost@0 @305 PRIVATE
  InbvResetDisplay@0 @306 PRIVATE
  InbvSetScrollRegion@0 @307 PRIVATE
  InbvSetTextColor@0 @308 PRIVATE
  InbvSolidColorFill@0 @309 PRIVATE
  InitSafeBootMode @310 DATA
  IoAcquireCancelSpinLock@4 @311
  IoAcquireRemoveLockEx@20 @312
  IoAcquireVpbSpinLock@0 @313 PRIVATE
  IoAdapterObjectType@0 @314 PRIVATE
  IoAllocateAdapterChannel@0 @315 PRIVATE
  IoAllocateController@0 @316 PRIVATE
  IoAllocateDriverObjectExtension@16 @317
  IoAllocateErrorLogEntry@8 @318
  IoAllocateIrp@8 @319
  IoAllocateMdl@20 @320
  IoAllocateWorkItem@4 @321
  IoAssignResources@0 @322 PRIVATE
  IoAttachDevice@12 @323
  IoAttachDeviceByPointer@0 @324 PRIVATE
  IoAttachDeviceToDeviceStack@8 @325
  IoAttachDeviceToDeviceStackSafe@0 @326 PRIVATE
  IoBuildAsynchronousFsdRequest@24 @327
  IoBuildDeviceIoControlRequest@36 @328
  IoBuildPartialMdl@0 @329 PRIVATE
  IoBuildSynchronousFsdRequest@28 @330
  IoCallDriver@8 @331
  IoCancelFileOpen@0 @332 PRIVATE
  IoCancelIrp@4 @333
  IoCheckDesiredAccess@0 @334 PRIVATE
  IoCheckEaBufferValidity@0 @335 PRIVATE
  IoCheckFunctionAccess@0 @336 PRIVATE
  IoCheckQuerySetFileInformation@0 @337 PRIVATE
  IoCheckQuerySetVolumeInformation@0 @338 PRIVATE
  IoCheckQuotaBufferValidity@0 @339 PRIVATE
  IoCheckShareAccess@0 @340 PRIVATE
  IoCompleteRequest@8 @341
  IoConnectInterrupt@0 @342 PRIVATE
  IoCreateController@0 @343 PRIVATE
  IoCreateDevice@28 @344
  IoCreateDisk@0 @345 PRIVATE
  IoCreateDriver@8 @346
  IoCreateFile@56 @347
  IoCreateFileSpecifyDeviceObjectHint@0 @348 PRIVATE
  IoCreateNotificationEvent@8 @349
  IoCreateStreamFileObject@0 @350 PRIVATE
  IoCreateStreamFileObjectEx@0 @351 PRIVATE
  IoCreateStreamFileObjectLite@0 @352 PRIVATE
  IoCreateSymbolicLink@8 @353
  IoCreateSynchronizationEvent@8 @354
  IoCreateUnprotectedSymbolicLink@8 @355
  IoCsqInitialize@28 @356
  IoCsqInsertIrp@0 @357 PRIVATE
  IoCsqRemoveIrp@0 @358 PRIVATE
  IoCsqRemoveNextIrp@0 @359 PRIVATE
  IoDeleteController@0 @360 PRIVATE
  IoDeleteDevice@4 @361
  IoDeleteDriver@4 @362
  IoDeleteSymbolicLink@4 @363
  IoDetachDevice@4 @364
  IoDeviceHandlerObjectSize@0 @365 PRIVATE
  IoDeviceHandlerObjectType@0 @366 PRIVATE
  IoDeviceObjectType @367 DATA
  IoDisconnectInterrupt@0 @368 PRIVATE
  IoDriverObjectType @369 DATA
  IoEnqueueIrp@0 @370 PRIVATE
  IoEnumerateDeviceObjectList@0 @371 PRIVATE
  IoFastQueryNetworkAttributes@0 @372 PRIVATE
  IoFileObjectType @373 DATA
  IoForwardAndCatchIrp@0 @374 PRIVATE
  IoForwardIrpSynchronously@0 @375 PRIVATE
  IoFreeController@0 @376 PRIVATE
  IoFreeErrorLogEntry@0 @377 PRIVATE
  IoFreeIrp@4 @378
  IoFreeMdl@4 @379
  IoFreeWorkItem@4 @380
  IoGetAttachedDevice@4 @381
  IoGetAttachedDeviceReference@4 @382
  IoGetBaseFileSystemDeviceObject@0 @383 PRIVATE
  IoGetBootDiskInformation@0 @384 PRIVATE
  IoGetConfigurationInformation@0 @385
  IoGetCurrentProcess@0 @386
  IoGetDeviceAttachmentBaseRef@0 @387 PRIVATE
  IoGetDeviceInterfaceAlias@0 @388 PRIVATE
  IoGetDeviceInterfaces@16 @389
  IoGetDeviceObjectPointer@16 @390
  IoGetDeviceProperty@20 @391
  IoGetDeviceToVerify@0 @392 PRIVATE
  IoGetDiskDeviceObject@0 @393 PRIVATE
  IoGetDmaAdapter@0 @394 PRIVATE
  IoGetDriverObjectExtension@8 @395
  IoGetFileObjectGenericMapping@0 @396 PRIVATE
  IoGetInitialStack@0 @397 PRIVATE
  IoGetLowerDeviceObject@0 @398 PRIVATE
  IoGetRelatedDeviceObject@4 @399
  IoGetRequestorProcess@4 @400
  IoGetRequestorProcessId@0 @401 PRIVATE
  IoGetRequestorSessionId@0 @402 PRIVATE
  IoGetStackLimits@8 @403
  IoGetTopLevelIrp@0 @404 PRIVATE
  IoInitializeIrp@12 @405
  IoInitializeRemoveLockEx@20 @406
  IoInitializeTimer@12 @407
  IoInvalidateDeviceRelations@8 @408
  IoInvalidateDeviceState@0 @409 PRIVATE
  IoIsFileOriginRemote@0 @410 PRIVATE
  IoIsOperationSynchronous@0 @411 PRIVATE
  IoIsSystemThread@0 @412 PRIVATE
  IoIsValidNameGraftingBuffer@0 @413 PRIVATE
  IoIsWdmVersionAvailable@8 @414
  IoMakeAssociatedIrp@0 @415 PRIVATE
  IoOpenDeviceInterfaceRegistryKey@0 @416 PRIVATE
  IoOpenDeviceRegistryKey@0 @417 PRIVATE
  IoPageRead@0 @418 PRIVATE
  IoPnPDeliverServicePowerNotification@0 @419 PRIVATE
  IoQueryDeviceDescription@32 @420
  IoQueryFileDosDeviceName@0 @421 PRIVATE
  IoQueryFileInformation@0 @422 PRIVATE
  IoQueryVolumeInformation@0 @423 PRIVATE
  IoQueueThreadIrp@0 @424 PRIVATE
  IoQueueWorkItem@16 @425
  IoRaiseHardError@0 @426 PRIVATE
  IoRaiseInformationalHardError@0 @427 PRIVATE
  IoReadDiskSignature@0 @428 PRIVATE
  IoReadOperationCount@0 @429 PRIVATE
  IoReadPartitionTableEx@0 @430 PRIVATE
  IoReadTransferCount@0 @431 PRIVATE
  IoRegisterBootDriverReinitialization@12 @432
  IoRegisterDeviceInterface@16 @433
  IoRegisterDriverReinitialization@12 @434
  IoRegisterFileSystem@4 @435
  IoRegisterFsRegistrationChange@0 @436 PRIVATE
  IoRegisterLastChanceShutdownNotification@0 @437 PRIVATE
  IoRegisterPlugPlayNotification@28 @438
  IoRegisterShutdownNotification@4 @439
  IoReleaseCancelSpinLock@4 @440
  IoReleaseRemoveLockAndWaitEx@12 @441
  IoReleaseRemoveLockEx@12 @442
  IoReleaseVpbSpinLock@0 @443 PRIVATE
  IoRemoveShareAccess@0 @444 PRIVATE
  IoReportDetectedDevice@0 @445 PRIVATE
  IoReportHalResourceUsage@0 @446 PRIVATE
  IoReportResourceForDetection@28 @447
  IoReportResourceUsage@36 @448
  IoReportTargetDeviceChange@0 @449 PRIVATE
  IoReportTargetDeviceChangeAsynchronous@0 @450 PRIVATE
  IoRequestDeviceEject@0 @451 PRIVATE
  IoReuseIrp@0 @452 PRIVATE
  IoSetCompletionRoutineEx@0 @453 PRIVATE
  IoSetDeviceInterfaceState@8 @454
  IoSetDeviceToVerify@0 @455 PRIVATE
  IoSetFileOrigin@0 @456 PRIVATE
  IoSetHardErrorOrVerifyDevice@0 @457 PRIVATE
  IoSetInformation@0 @458 PRIVATE
  IoSetIoCompletion@0 @459 PRIVATE
  IoSetPartitionInformationEx@0 @460 PRIVATE
  IoSetShareAccess@0 @461 PRIVATE
  IoSetStartIoAttributes@0 @462 PRIVATE
  IoSetSystemPartition@0 @463 PRIVATE
  IoSetThreadHardErrorMode@4 @464
  IoSetTopLevelIrp@0 @465 PRIVATE
  IoStartNextPacket@8 @466
  IoStartNextPacketByKey@0 @467 PRIVATE
  IoStartPacket@0 @468 PRIVATE
  IoStartTimer@4 @469
  IoStatisticsLock@0 @470 PRIVATE
  IoStopTimer@4 @471
  IoSynchronousInvalidateDeviceRelations@0 @472 PRIVATE
  IoSynchronousPageWrite@0 @473 PRIVATE
  IoThreadToProcess@0 @474 PRIVATE
  IoUnregisterFileSystem@4 @475
  IoUnregisterFsRegistrationChange@0 @476 PRIVATE
  IoUnregisterPlugPlayNotification@4 @477
  IoUnregisterShutdownNotification@4 @478
  IoUpdateShareAccess@0 @479 PRIVATE
  IoValidateDeviceIoControlAccess@0 @480 PRIVATE
  IoVerifyPartitionTable@0 @481 PRIVATE
  IoVerifyVolume@0 @482 PRIVATE
  IoVolumeDeviceToDosName@0 @483 PRIVATE
  IoWMIAllocateInstanceIds@0 @484 PRIVATE
  IoWMIDeviceObjectToInstanceName@0 @485 PRIVATE
  IoWMIExecuteMethod@0 @486 PRIVATE
  IoWMIHandleToInstanceName@0 @487 PRIVATE
  IoWMIOpenBlock@12 @488
  IoWMIQueryAllData@0 @489 PRIVATE
  IoWMIQueryAllDataMultiple@0 @490 PRIVATE
  IoWMIQuerySingleInstance@0 @491 PRIVATE
  IoWMIQuerySingleInstanceMultiple@0 @492 PRIVATE
  IoWMIRegistrationControl@8 @493
  IoWMISetNotificationCallback@0 @494 PRIVATE
  IoWMISetSingleInstance@0 @495 PRIVATE
  IoWMISetSingleItem@0 @496 PRIVATE
  IoWMISuggestInstanceName@0 @497 PRIVATE
  IoWMIWriteEvent@0 @498 PRIVATE
  IoWriteErrorLogEntry@0 @499 PRIVATE
  IoWriteOperationCount@0 @500 PRIVATE
  IoWritePartitionTableEx@0 @501 PRIVATE
  IoWriteTransferCount@0 @502 PRIVATE
  KdDebuggerEnabled @503 DATA
  KdDebuggerNotPresent@0 @504 PRIVATE
  KdDisableDebugger@0 @505 PRIVATE
  KdEnableDebugger@0 @506 PRIVATE
  KdEnteredDebugger@0 @507 PRIVATE
  KdPollBreakIn@0 @508 PRIVATE
  KdPowerTransition@0 @509 PRIVATE
  Ke386CallBios@0 @510 PRIVATE
  Ke386IoSetAccessProcess@8 @511
  Ke386QueryIoAccessMap@0 @512 PRIVATE
  Ke386SetIoAccessMap@8 @513
  KeAcquireInterruptSpinLock@0 @514 PRIVATE
  KeAcquireSpinLockAtDpcLevel@4 @515
  KeAddSystemServiceTable@0 @516 PRIVATE
  KeAreApcsDisabled@0 @517
  KeAttachProcess@0 @518 PRIVATE
  KeBugCheck@4 @519
  KeBugCheckEx@20 @520
  KeCancelTimer@4 @521
  KeCapturePersistentThreadState@0 @522 PRIVATE
  KeClearEvent@4 @523
  KeConnectInterrupt@0 @524 PRIVATE
  KeDcacheFlushCount@0 @525 PRIVATE
  KeDelayExecutionThread@12 @526
  KeDeregisterBugCheckCallback@0 @527 PRIVATE
  KeDeregisterBugCheckReasonCallback@0 @528 PRIVATE
  KeDetachProcess@0 @529 PRIVATE
  KeDisconnectInterrupt@0 @530 PRIVATE
  KeEnterCriticalRegion@0 @531
  KeEnterKernelDebugger@0 @532 PRIVATE
  KeFindConfigurationEntry@0 @533 PRIVATE
  KeFindConfigurationNextEntry@0 @534 PRIVATE
  KeFlushEntireTb@0 @535 PRIVATE
  KeFlushQueuedDpcs@0 @536
  KeGetCurrentThread@0 @537
  KeGetPreviousMode@0 @538 PRIVATE
  KeGetRecommendedSharedDataAlignment@0 @539 PRIVATE
  KeI386AbiosCall@0 @540 PRIVATE
  KeI386AllocateGdtSelectors@0 @541 PRIVATE
  KeI386Call16BitCStyleFunction@0 @542 PRIVATE
  KeI386Call16BitFunction@0 @543 PRIVATE
  KeI386FlatToGdtSelector@0 @544 PRIVATE
  KeI386GetLid@0 @545 PRIVATE
  KeI386MachineType@0 @546 PRIVATE
  KeI386ReleaseGdtSelectors@0 @547 PRIVATE
  KeI386ReleaseLid@0 @548 PRIVATE
  KeI386SetGdtSelector@0 @549 PRIVATE
  KeIcacheFlushCount@0 @550 PRIVATE
  KeInitializeApc@0 @551 PRIVATE
  KeInitializeDeviceQueue@0 @552 PRIVATE
  KeInitializeDpc@12 @553
  KeInitializeEvent@12 @554
  KeInitializeInterrupt@0 @555 PRIVATE
  KeInitializeMutant@0 @556 PRIVATE
  KeInitializeMutex@8 @557
  KeInitializeQueue@0 @558 PRIVATE
  KeInitializeSemaphore@12 @559
  KeInitializeSpinLock@4 @560
  KeInitializeTimer@4 @561
  KeInitializeTimerEx@8 @562
  KeInsertByKeyDeviceQueue@0 @563 PRIVATE
  KeInsertDeviceQueue@0 @564 PRIVATE
  KeInsertHeadQueue@0 @565 PRIVATE
  KeInsertQueue@8 @566
  KeInsertQueueApc@0 @567 PRIVATE
  KeInsertQueueDpc@0 @568 PRIVATE
  KeIsAttachedProcess@0 @569 PRIVATE
  KeIsExecutingDpc@0 @570 PRIVATE
  KeLeaveCriticalRegion@0 @571
  KeLoaderBlock@0 @572 PRIVATE
  KeNumberProcessors@0 @573 PRIVATE
  KeProfileInterrupt@0 @574 PRIVATE
  KeProfileInterruptWithSource@0 @575 PRIVATE
  KePulseEvent@0 @576 PRIVATE
  KeQueryActiveProcessors@0 @577
  KeQueryInterruptTime@0 @578
  KeQueryPriorityThread@0 @579 PRIVATE
  KeQueryRuntimeThread@0 @580 PRIVATE
  KeQuerySystemTime@4 @581
  KeQueryTickCount@4 @582
  KeQueryTimeIncrement@0 @583
  KeRaiseUserException@0 @584 PRIVATE
  KeReadStateEvent@0 @585 PRIVATE
  KeReadStateMutant@0 @586 PRIVATE
  KeReadStateMutex@0 @587 PRIVATE
  KeReadStateQueue@0 @588 PRIVATE
  KeReadStateSemaphore@0 @589 PRIVATE
  KeReadStateTimer@0 @590 PRIVATE
  KeRegisterBugCheckCallback@0 @591 PRIVATE
  KeRegisterBugCheckReasonCallback@0 @592 PRIVATE
  KeReleaseInterruptSpinLock@0 @593 PRIVATE
  KeReleaseMutant@0 @594 PRIVATE
  KeReleaseMutex@8 @595
  KeReleaseSemaphore@16 @596
  KeReleaseSpinLockFromDpcLevel@4 @597
  KeRemoveByKeyDeviceQueue@0 @598 PRIVATE
  KeRemoveByKeyDeviceQueueIfBusy@0 @599 PRIVATE
  KeRemoveDeviceQueue@0 @600 PRIVATE
  KeRemoveEntryDeviceQueue@0 @601 PRIVATE
  KeRemoveQueue@0 @602 PRIVATE
  KeRemoveQueueDpc@0 @603 PRIVATE
  KeRemoveSystemServiceTable@0 @604 PRIVATE
  KeResetEvent@4 @605
  KeRestoreFloatingPointState@0 @606 PRIVATE
  KeRevertToUserAffinityThread@0 @607
  KeRundownQueue@0 @608 PRIVATE
  KeSaveFloatingPointState@0 @609 PRIVATE
  KeSaveStateForHibernate@0 @610 PRIVATE
  KeServiceDescriptorTable @611 DATA
  KeSetAffinityThread@0 @612 PRIVATE
  KeSetBasePriorityThread@0 @613 PRIVATE
  KeSetDmaIoCoherency@0 @614 PRIVATE
  KeSetEvent@12 @615
  KeSetEventBoostPriority@0 @616 PRIVATE
  KeSetIdealProcessorThread@0 @617 PRIVATE
  KeSetImportanceDpc@8 @618
  KeSetKernelStackSwapEnable@0 @619 PRIVATE
  KeSetPriorityThread@8 @620
  KeSetProfileIrql@0 @621 PRIVATE
  KeSetSystemAffinityThread@4 @622
  KeSetTargetProcessorDpc@8 @623
  KeSetTimeIncrement@0 @624 PRIVATE
  KeSetTimer@0 @625 PRIVATE
  KeSetTimerEx@20 @626
  KeStackAttachProcess@0 @627 PRIVATE
  KeSynchronizeExecution@0 @628 PRIVATE
  KeTerminateThread@0 @629 PRIVATE
  KeTickCount @630 DATA
  KeUnstackDetachProcess@0 @631 PRIVATE
  KeUpdateRunTime@0 @632 PRIVATE
  KeUpdateSystemTime@0 @633 PRIVATE
  KeUserModeCallback@0 @634 PRIVATE
  KeWaitForMultipleObjects@32 @635
  KeWaitForMutexObject@20 @636
  KeWaitForSingleObject@20 @637
  KiBugCheckData@0 @638 PRIVATE
  KiCoprocessorError@0 @639 PRIVATE
  KiDeliverApc@0 @640 PRIVATE
  KiDispatchInterrupt@0 @641 PRIVATE
  KiEnableTimerWatchdog@0 @642 PRIVATE
  KiIpiServiceRoutine@0 @643 PRIVATE
  KiUnexpectedInterrupt@0 @644 PRIVATE
  LdrAccessResource@16 @645
  LdrEnumResources@0 @646 PRIVATE
  LdrFindResourceDirectory_U@16 @647
  LdrFindResource_U@16 @648
  LpcPortObjectType@0 @649 PRIVATE
  LpcRequestPort@0 @650 PRIVATE
  LpcRequestWaitReplyPort@0 @651 PRIVATE
  LsaCallAuthenticationPackage@0 @652 PRIVATE
  LsaDeregisterLogonProcess@0 @653 PRIVATE
  LsaFreeReturnBuffer@0 @654 PRIVATE
  LsaLogonUser@0 @655 PRIVATE
  LsaLookupAuthenticationPackage@0 @656 PRIVATE
  LsaRegisterLogonProcess@0 @657 PRIVATE
  Mm64BitPhysicalAddress@0 @658 PRIVATE
  MmAddPhysicalMemory@0 @659 PRIVATE
  MmAddVerifierThunks@0 @660 PRIVATE
  MmAdjustWorkingSetSize@0 @661 PRIVATE
  MmAdvanceMdl@0 @662 PRIVATE
  MmAllocateContiguousMemory@12 @663
  MmAllocateContiguousMemorySpecifyCache@32 @664
  MmAllocateMappingAddress@0 @665 PRIVATE
  MmAllocateNonCachedMemory@4 @666
  MmAllocatePagesForMdl@28 @667
  MmBuildMdlForNonPagedPool@4 @668
  MmCanFileBeTruncated@0 @669 PRIVATE
  MmCommitSessionMappedView@0 @670 PRIVATE
  MmCopyVirtualMemory@28 @671
  MmCreateMdl@0 @672 PRIVATE
  MmCreateSection@32 @673
  MmDisableModifiedWriteOfSection@0 @674 PRIVATE
  MmFlushImageSection@0 @675 PRIVATE
  MmForceSectionClosed@0 @676 PRIVATE
  MmFreeContiguousMemory@0 @677 PRIVATE
  MmFreeContiguousMemorySpecifyCache@0 @678 PRIVATE
  MmFreeMappingAddress@0 @679 PRIVATE
  MmFreeNonCachedMemory@8 @680
  MmFreePagesFromMdl@0 @681 PRIVATE
  MmGetPhysicalAddress@0 @682 PRIVATE
  MmGetPhysicalMemoryRanges@0 @683 PRIVATE
  MmGetSystemRoutineAddress@4 @684
  MmGetVirtualForPhysical@0 @685 PRIVATE
  MmGrowKernelStack@0 @686 PRIVATE
  MmHighestUserAddress@0 @687 PRIVATE
  MmIsAddressValid@4 @688
  MmIsDriverVerifying@0 @689 PRIVATE
  MmIsNonPagedSystemAddressValid@0 @690 PRIVATE
  MmIsRecursiveIoFault@0 @691 PRIVATE
  MmIsThisAnNtAsSystem@0 @692
  MmIsVerifierEnabled@0 @693 PRIVATE
  MmLockPagableDataSection@0 @694 PRIVATE
  MmLockPagableImageSection@0 @695 PRIVATE
  MmLockPagableSectionByHandle@4 @696
  MmMapIoSpace@16 @697
  MmMapLockedPages@0 @698 PRIVATE
  MmMapLockedPagesSpecifyCache@24 @699
  MmMapLockedPagesWithReservedMapping@0 @700 PRIVATE
  MmMapMemoryDumpMdl@0 @701 PRIVATE
  MmMapUserAddressesToPage@0 @702 PRIVATE
  MmMapVideoDisplay@0 @703 PRIVATE
  MmMapViewInSessionSpace@0 @704 PRIVATE
  MmMapViewInSystemSpace@0 @705 PRIVATE
  MmMapViewOfSection@0 @706 PRIVATE
  MmMarkPhysicalMemoryAsBad@0 @707 PRIVATE
  MmMarkPhysicalMemoryAsGood@0 @708 PRIVATE
  MmPageEntireDriver@4 @709
  MmPrefetchPages@0 @710 PRIVATE
  MmProbeAndLockPages@12 @711
  MmProbeAndLockProcessPages@0 @712 PRIVATE
  MmProbeAndLockSelectedPages@0 @713 PRIVATE
  MmProtectMdlSystemAddress@0 @714 PRIVATE
  MmQuerySystemSize@0 @715
  MmRemovePhysicalMemory@0 @716 PRIVATE
  MmResetDriverPaging@4 @717
  MmSectionObjectType@0 @718 PRIVATE
  MmSecureVirtualMemory@0 @719 PRIVATE
  MmSetAddressRangeModified@0 @720 PRIVATE
  MmSetBankedSection@0 @721 PRIVATE
  MmSizeOfMdl@0 @722 PRIVATE
  MmSystemRangeStart@0 @723 PRIVATE
  MmTrimAllSystemPagableMemory@0 @724 PRIVATE
  MmUnlockPagableImageSection@4 @725
  MmUnlockPages@4 @726
  MmUnmapIoSpace@8 @727
  MmUnmapLockedPages@8 @728
  MmUnmapReservedMapping@0 @729 PRIVATE
  MmUnmapVideoDisplay@0 @730 PRIVATE
  MmUnmapViewInSessionSpace@0 @731 PRIVATE
  MmUnmapViewInSystemSpace@0 @732 PRIVATE
  MmUnmapViewOfSection@0 @733 PRIVATE
  MmUnsecureVirtualMemory@0 @734 PRIVATE
  MmUserProbeAddress@0 @735 PRIVATE
  NlsAnsiCodePage=ntdll.NlsAnsiCodePage @736 DATA
  NlsLeadByteInfo@0 @737 PRIVATE
  NlsMbCodePageTag=ntdll.NlsMbCodePageTag @738 DATA
  NlsMbOemCodePageTag=ntdll.NlsMbOemCodePageTag @739 DATA
  NlsOemCodePage@0 @740 PRIVATE
  NlsOemLeadByteInfo@0 @741 PRIVATE
  NtAddAtom@12 @742
  NtAdjustPrivilegesToken@24 @743
  NtAllocateLocallyUniqueId@4 @744
  NtAllocateUuids@16 @745
  NtAllocateVirtualMemory@24 @746
  NtBuildNumber @747 DATA
  NtClose@4 @748
  NtConnectPort@32 @749
  NtCreateEvent@20 @750
  NtCreateFile@44 @751
  NtCreateSection@28 @752
  NtDeleteAtom@4 @753
  NtDeleteFile@4 @754
  NtDeviceIoControlFile@40 @755
  NtDuplicateObject@28 @756
  NtDuplicateToken@24 @757
  NtFindAtom@12 @758
  NtFreeVirtualMemory@16 @759
  NtFsControlFile@40 @760
  NtGlobalFlag@0 @761 PRIVATE
  NtLockFile@40 @762
  NtMakePermanentObject@0 @763 PRIVATE
  NtMapViewOfSection@40 @764
  NtNotifyChangeDirectoryFile@36 @765
  NtOpenFile@24 @766
  NtOpenProcess@16 @767
  NtOpenProcessToken@12 @768
  NtOpenProcessTokenEx@16 @769
  NtOpenThread@16 @770
  NtOpenThreadToken@16 @771
  NtOpenThreadTokenEx@20 @772
  NtQueryDirectoryFile@44 @773
  NtQueryEaFile@36 @774
  NtQueryInformationAtom@20 @775
  NtQueryInformationFile@20 @776
  NtQueryInformationProcess@20 @777
  NtQueryInformationThread@20 @778
  NtQueryInformationToken@20 @779
  NtQueryQuotaInformationFile@0 @780 PRIVATE
  NtQuerySecurityObject@20 @781
  NtQuerySystemInformation@16 @782
  NtQueryVolumeInformationFile@20 @783
  NtReadFile@36 @784
  NtRequestPort@0 @785 PRIVATE
  NtRequestWaitReplyPort@12 @786
  NtSetEaFile@16 @787
  NtSetEvent@8 @788
  NtSetInformationFile@20 @789
  NtSetInformationProcess@16 @790
  NtSetInformationThread@16 @791
  NtSetQuotaInformationFile@0 @792 PRIVATE
  NtSetSecurityObject@12 @793
  NtSetVolumeInformationFile@20 @794
  NtShutdownSystem@4 @795
  NtTraceEvent@0 @796 PRIVATE
  NtUnlockFile@20 @797
  NtVdmControl@0 @798 PRIVATE
  NtWaitForSingleObject@12 @799
  NtWriteFile@36 @800
  ObAssignSecurity@0 @801 PRIVATE
  ObCheckCreateObjectAccess@0 @802 PRIVATE
  ObCheckObjectAccess@0 @803 PRIVATE
  ObCloseHandle@0 @804 PRIVATE
  ObCreateObject@0 @805 PRIVATE
  ObCreateObjectType@0 @806 PRIVATE
  ObDereferenceObject@4 @807
  ObDereferenceSecurityDescriptor@0 @808 PRIVATE
  ObFindHandleForObject@0 @809 PRIVATE
  ObGetFilterVersion@0 @810
  ObGetObjectSecurity@0 @811 PRIVATE
  ObGetObjectType@4 @812
  ObInsertObject@0 @813 PRIVATE
  ObLogSecurityDescriptor@0 @814 PRIVATE
  ObMakeTemporaryObject@0 @815 PRIVATE
  ObOpenObjectByName@0 @816 PRIVATE
  ObOpenObjectByPointer@28 @817
  ObQueryNameString@16 @818
  ObQueryObjectAuditingByHandle@0 @819 PRIVATE
  ObReferenceObjectByHandle@24 @820
  ObReferenceObjectByName@32 @821
  ObReferenceObjectByPointer@16 @822
  ObReferenceSecurityDescriptor@0 @823 PRIVATE
  ObRegisterCallbacks@8 @824
  ObReleaseObjectSecurity@0 @825 PRIVATE
  ObSetHandleAttributes@0 @826 PRIVATE
  ObSetSecurityDescriptorInfo@0 @827 PRIVATE
  ObSetSecurityObjectByPointer@0 @828 PRIVATE
  ObUnRegisterCallbacks@4 @829
  PfxFindPrefix@0 @830 PRIVATE
  PfxInitialize@0 @831 PRIVATE
  PfxInsertPrefix@0 @832 PRIVATE
  PfxRemovePrefix@0 @833 PRIVATE
  PoCallDriver@8 @834
  PoCancelDeviceNotify@0 @835 PRIVATE
  PoQueueShutdownWorkItem@0 @836 PRIVATE
  PoRegisterDeviceForIdleDetection@0 @837 PRIVATE
  PoRegisterDeviceNotify@0 @838 PRIVATE
  PoRegisterSystemState@0 @839 PRIVATE
  PoRequestPowerIrp@0 @840 PRIVATE
  PoRequestShutdownEvent@0 @841 PRIVATE
  PoSetHiberRange@0 @842 PRIVATE
  PoSetPowerState@12 @843
  PoSetSystemState@0 @844 PRIVATE
  PoShutdownBugCheck@0 @845 PRIVATE
  PoStartNextPowerIrp@4 @846
  PoUnregisterSystemState@0 @847 PRIVATE
  ProbeForRead@12 @848
  ProbeForWrite@12 @849
  PsAcquireProcessExitSynchronization@4 @850
  PsAssignImpersonationToken@0 @851 PRIVATE
  PsChargePoolQuota@0 @852 PRIVATE
  PsChargeProcessNonPagedPoolQuota@0 @853 PRIVATE
  PsChargeProcessPagedPoolQuota@0 @854 PRIVATE
  PsChargeProcessPoolQuota@0 @855 PRIVATE
  PsCreateSystemProcess@0 @856 PRIVATE
  PsCreateSystemThread@28 @857
  PsDereferenceImpersonationToken@0 @858 PRIVATE
  PsDereferencePrimaryToken@0 @859 PRIVATE
  PsDisableImpersonation@0 @860 PRIVATE
  PsEstablishWin32Callouts@0 @861 PRIVATE
  PsGetContextThread@0 @862 PRIVATE
  PsGetCurrentProcess@0=IoGetCurrentProcess @863
  PsGetCurrentProcessId@0 @864
  PsGetCurrentProcessSessionId@0 @865 PRIVATE
  PsGetCurrentThread@0=KeGetCurrentThread @866
  PsGetCurrentThreadId@0 @867
  PsGetCurrentThreadPreviousMode@0 @868 PRIVATE
  PsGetCurrentThreadStackBase@0 @869 PRIVATE
  PsGetCurrentThreadStackLimit@0 @870 PRIVATE
  PsGetJobLock@0 @871 PRIVATE
  PsGetJobSessionId@0 @872 PRIVATE
  PsGetJobUIRestrictionsClass@0 @873 PRIVATE
  PsGetProcessCreateTimeQuadPart@0 @874 PRIVATE
  PsGetProcessDebugPort@0 @875 PRIVATE
  PsGetProcessExitProcessCalled@0 @876 PRIVATE
  PsGetProcessExitStatus@0 @877 PRIVATE
  PsGetProcessExitTime@0 @878 PRIVATE
  PsGetProcessId@4 @879
  PsGetProcessImageFileName@0 @880 PRIVATE
  PsGetProcessInheritedFromUniqueProcessId@4 @881
  PsGetProcessJob@0 @882 PRIVATE
  PsGetProcessPeb@0 @883 PRIVATE
  PsGetProcessPriorityClass@0 @884 PRIVATE
  PsGetProcessSectionBaseAddress@0 @885 PRIVATE
  PsGetProcessSecurityPort@0 @886 PRIVATE
  PsGetProcessSessionId@0 @887 PRIVATE
  PsGetProcessWin32Process@0 @888 PRIVATE
  PsGetProcessWin32WindowStation@0 @889 PRIVATE
  PsGetThreadFreezeCount@0 @890 PRIVATE
  PsGetThreadHardErrorsAreDisabled@0 @891 PRIVATE
  PsGetThreadId@4 @892
  PsGetThreadProcess@0 @893 PRIVATE
  PsGetThreadProcessId@4 @894
  PsGetThreadSessionId@0 @895 PRIVATE
  PsGetThreadTeb@0 @896 PRIVATE
  PsGetThreadWin32Thread@0 @897 PRIVATE
  PsGetVersion@16 @898
  PsImpersonateClient@20 @899
  PsInitialSystemProcess @900 DATA
  PsIsProcessBeingDebugged@0 @901 PRIVATE
  PsIsSystemThread@4 @902
  PsIsThreadImpersonating@0 @903 PRIVATE
  PsIsThreadTerminating@0 @904 PRIVATE
  PsJobType@0 @905 PRIVATE
  PsLookupProcessByProcessId@8 @906
  PsLookupProcessThreadByCid@0 @907 PRIVATE
  PsLookupThreadByThreadId@8 @908
  PsProcessType @909 DATA
  PsReferenceImpersonationToken@0 @910 PRIVATE
  PsReferencePrimaryToken@0 @911 PRIVATE
  PsReferenceProcessFilePointer@8 @912
  PsReleaseProcessExitSynchronization@4 @913
  PsRemoveCreateThreadNotifyRoutine@4 @914
  PsRemoveLoadImageNotifyRoutine@4 @915
  PsRestoreImpersonation@0 @916 PRIVATE
  PsResumeProcess@4 @917
  PsReturnPoolQuota@0 @918 PRIVATE
  PsReturnProcessNonPagedPoolQuota@0 @919 PRIVATE
  PsReturnProcessPagedPoolQuota@0 @920 PRIVATE
  PsRevertThreadToSelf@0 @921 PRIVATE
  PsRevertToSelf@0 @922
  PsSetContextThread@0 @923 PRIVATE
  PsSetCreateProcessNotifyRoutine@8 @924
  PsSetCreateProcessNotifyRoutineEx@8 @925
  PsSetCreateThreadNotifyRoutine@4 @926
  PsSetJobUIRestrictionsClass@0 @927 PRIVATE
  PsSetLegoNotifyRoutine@0 @928 PRIVATE
  PsSetLoadImageNotifyRoutine@4 @929
  PsSetProcessPriorityByClass@0 @930 PRIVATE
  PsSetProcessPriorityClass@0 @931 PRIVATE
  PsSetProcessSecurityPort@0 @932 PRIVATE
  PsSetProcessWin32Process@0 @933 PRIVATE
  PsSetProcessWindowStation@0 @934 PRIVATE
  PsSetThreadHardErrorsAreDisabled@0 @935 PRIVATE
  PsSetThreadWin32Thread@0 @936 PRIVATE
  PsSuspendProcess@4 @937
  PsTerminateSystemThread@4 @938
  PsThreadType @939 DATA
  READ_REGISTER_BUFFER_UCHAR@12 @940
  READ_REGISTER_BUFFER_ULONG@0 @941 PRIVATE
  READ_REGISTER_BUFFER_USHORT@0 @942 PRIVATE
  READ_REGISTER_UCHAR@0 @943 PRIVATE
  READ_REGISTER_ULONG@0 @944 PRIVATE
  READ_REGISTER_USHORT@0 @945 PRIVATE
  RtlAbsoluteToSelfRelativeSD@12 @946
  RtlAddAccessAllowedAce@16 @947
  RtlAddAccessAllowedAceEx@20 @948
  RtlAddAce@20 @949
  RtlAddAtomToAtomTable@12 @950
  RtlAddRange@0 @951 PRIVATE
  RtlAllocateHeap@12 @952
  RtlAnsiCharToUnicodeChar@4 @953
  RtlAnsiStringToUnicodeSize@4 @954
  RtlAnsiStringToUnicodeString@12 @955
  RtlAppendAsciizToString@8 @956
  RtlAppendStringToString@8 @957
  RtlAppendUnicodeStringToString@8 @958
  RtlAppendUnicodeToString@8 @959
  RtlAreAllAccessesGranted@8 @960
  RtlAreAnyAccessesGranted@8 @961
  RtlAreBitsClear@12 @962
  RtlAreBitsSet@12 @963
  RtlAssert@16 @964
  RtlCaptureContext@4 @965
  RtlCaptureStackBackTrace@16 @966
  RtlCharToInteger@12 @967
  RtlCheckRegistryKey@8 @968
  RtlClearAllBits@4 @969
  RtlClearBit@0 @970 PRIVATE
  RtlClearBits@12 @971
  RtlCompareMemory@12 @972
  RtlCompareMemoryUlong@12 @973
  RtlCompareString@12 @974
  RtlCompareUnicodeString@12 @975
  RtlCompressBuffer@32 @976
  RtlCompressChunks@0 @977 PRIVATE
  RtlConvertLongToLargeInteger@4 @978
  RtlConvertSidToUnicodeString@12 @979
  RtlConvertUlongToLargeInteger@4 @980
  RtlCopyLuid@8 @981
  RtlCopyRangeList@0 @982 PRIVATE
  RtlCopySid@12 @983
  RtlCopyString@8 @984
  RtlCopyUnicodeString@8 @985
  RtlCreateAcl@12 @986
  RtlCreateAtomTable@8 @987
  RtlCreateHeap@24 @988
  RtlCreateRegistryKey@8 @989
  RtlCreateSecurityDescriptor@8 @990
  RtlCreateSystemVolumeInformationFolder@0 @991 PRIVATE
  RtlCreateUnicodeString@8 @992
  RtlCustomCPToUnicodeN@24=ntdll.RtlCustomCPToUnicodeN @993
  RtlDecompressBuffer@24 @994
  RtlDecompressChunks@0 @995 PRIVATE
  RtlDecompressFragment@32 @996
  RtlDelete@0 @997 PRIVATE
  RtlDeleteAce@8 @998
  RtlDeleteAtomFromAtomTable@8 @999
  RtlDeleteElementGenericTable@0 @1000 PRIVATE
  RtlDeleteElementGenericTableAvl@0 @1001 PRIVATE
  RtlDeleteNoSplay@0 @1002 PRIVATE
  RtlDeleteOwnersRanges@0 @1003 PRIVATE
  RtlDeleteRange@0 @1004 PRIVATE
  RtlDeleteRegistryValue@12 @1005
  RtlDescribeChunk@0 @1006 PRIVATE
  RtlDestroyAtomTable@4 @1007
  RtlDestroyHeap@4 @1008
  RtlDowncaseUnicodeString@12 @1009
  RtlEmptyAtomTable@8 @1010
  RtlEnlargedIntegerMultiply@8 @1011
  RtlEnlargedUnsignedDivide@16 @1012
  RtlEnlargedUnsignedMultiply@8 @1013
  RtlEnumerateGenericTable@0 @1014 PRIVATE
  RtlEnumerateGenericTableAvl@0 @1015 PRIVATE
  RtlEnumerateGenericTableLikeADirectory@0 @1016 PRIVATE
  RtlEnumerateGenericTableWithoutSplaying@8 @1017
  RtlEnumerateGenericTableWithoutSplayingAvl@0 @1018 PRIVATE
  RtlEqualLuid@8 @1019
  RtlEqualSid@8 @1020
  RtlEqualString@12 @1021
  RtlEqualUnicodeString@12 @1022
  RtlExtendedIntegerMultiply@12 @1023
  RtlExtendedLargeIntegerDivide@16 @1024
  RtlExtendedMagicDivide@20 @1025
  RtlFillMemory@12 @1026
  RtlFillMemoryUlong@12 @1027
  RtlFindClearBits@12 @1028
  RtlFindClearBitsAndSet@12 @1029
  RtlFindClearRuns@16 @1030
  RtlFindFirstRunClear@0 @1031 PRIVATE
  RtlFindLastBackwardRunClear@12 @1032
  RtlFindLeastSignificantBit@8 @1033
  RtlFindLongestRunClear@8 @1034
  RtlFindMessage@20 @1035
  RtlFindMostSignificantBit@8 @1036
  RtlFindNextForwardRunClear@12 @1037
  RtlFindRange@0 @1038 PRIVATE
  RtlFindSetBits@12 @1039
  RtlFindSetBitsAndClear@12 @1040
  RtlFindUnicodePrefix@0 @1041 PRIVATE
  RtlFormatCurrentUserKeyPath@4 @1042
  RtlFreeAnsiString@4 @1043
  RtlFreeHeap@12 @1044
  RtlFreeOemString@4 @1045
  RtlFreeRangeList@0 @1046 PRIVATE
  RtlFreeUnicodeString@4 @1047
  RtlGUIDFromString@8 @1048
  RtlGenerate8dot3Name@0 @1049 PRIVATE
  RtlGetAce@12 @1050
  RtlGetCallersAddress@0 @1051 PRIVATE
  RtlGetCompressionWorkSpaceSize@12 @1052
  RtlGetDaclSecurityDescriptor@16 @1053
  RtlGetDefaultCodePage@0 @1054 PRIVATE
  RtlGetElementGenericTable@0 @1055 PRIVATE
  RtlGetElementGenericTableAvl@0 @1056 PRIVATE
  RtlGetFirstRange@0 @1057 PRIVATE
  RtlGetGroupSecurityDescriptor@12 @1058
  RtlGetNextRange@0 @1059 PRIVATE
  RtlGetNtGlobalFlags@0 @1060
  RtlGetOwnerSecurityDescriptor@12 @1061
  RtlGetSaclSecurityDescriptor@16 @1062
  RtlGetSetBootStatusData@0 @1063 PRIVATE
  RtlGetVersion@4 @1064
  RtlHashUnicodeString@16 @1065
  RtlImageDirectoryEntryToData@16 @1066
  RtlImageNtHeader@4 @1067
  RtlInitAnsiString@8 @1068
  RtlInitCodePageTable@8=ntdll.RtlInitCodePageTable @1069
  RtlInitString@8 @1070
  RtlInitUnicodeString@8 @1071
  RtlInitializeBitMap@12 @1072
  RtlInitializeGenericTable@20 @1073
  RtlInitializeGenericTableAvl@20 @1074
  RtlInitializeRangeList@0 @1075 PRIVATE
  RtlInitializeSid@12 @1076
  RtlInitializeUnicodePrefix@0 @1077 PRIVATE
  RtlInsertElementGenericTable@0 @1078 PRIVATE
  RtlInsertElementGenericTableAvl@16 @1079
  RtlInsertElementGenericTableFull@0 @1080 PRIVATE
  RtlInsertElementGenericTableFullAvl@0 @1081 PRIVATE
  RtlInsertUnicodePrefix@0 @1082 PRIVATE
  RtlInt64ToUnicodeString@16 @1083
  RtlIntegerToChar@16 @1084
  RtlIntegerToUnicode@0 @1085 PRIVATE
  RtlIntegerToUnicodeString@12 @1086
  RtlInvertRangeList@0 @1087 PRIVATE
  RtlIpv4AddressToStringA@8 @1088
  RtlIpv4AddressToStringExA@16 @1089
  RtlIpv4AddressToStringExW@16 @1090
  RtlIpv4AddressToStringW@8 @1091
  RtlIpv4StringToAddressA@16=ntdll.RtlIpv4StringToAddressA @1092
  RtlIpv4StringToAddressExA@16=ntdll.RtlIpv4StringToAddressExA @1093
  RtlIpv4StringToAddressExW@16 @1094
  RtlIpv4StringToAddressW@16 @1095
  RtlIpv6AddressToStringA@0 @1096 PRIVATE
  RtlIpv6AddressToStringExA@0 @1097 PRIVATE
  RtlIpv6AddressToStringExW@0 @1098 PRIVATE
  RtlIpv6AddressToStringW@0 @1099 PRIVATE
  RtlIpv6StringToAddressA@0 @1100 PRIVATE
  RtlIpv6StringToAddressExA@0 @1101 PRIVATE
  RtlIpv6StringToAddressExW@16 @1102
  RtlIpv6StringToAddressW@0 @1103 PRIVATE
  RtlIsGenericTableEmpty@0 @1104 PRIVATE
  RtlIsGenericTableEmptyAvl@0 @1105 PRIVATE
  RtlIsNameLegalDOS8Dot3@12 @1106
  RtlIsRangeAvailable@0 @1107 PRIVATE
  RtlIsValidOemCharacter@0 @1108 PRIVATE
  RtlLargeIntegerAdd@16 @1109
  RtlLargeIntegerArithmeticShift@12 @1110
  RtlLargeIntegerDivide@20 @1111
  RtlLargeIntegerNegate@8 @1112
  RtlLargeIntegerShiftLeft@12 @1113
  RtlLargeIntegerShiftRight@12 @1114
  RtlLargeIntegerSubtract@16 @1115
  RtlLengthRequiredSid@4 @1116
  RtlLengthSecurityDescriptor@4 @1117
  RtlLengthSid@4 @1118
  RtlLockBootStatusData@0 @1119 PRIVATE
  RtlLookupAtomInAtomTable@12 @1120
  RtlLookupElementGenericTable@0 @1121 PRIVATE
  RtlLookupElementGenericTableAvl@0 @1122 PRIVATE
  RtlLookupElementGenericTableFull@0 @1123 PRIVATE
  RtlLookupElementGenericTableFullAvl@0 @1124 PRIVATE
  RtlMapGenericMask@8 @1125
  RtlMapSecurityErrorToNtStatus@0 @1126 PRIVATE
  RtlMergeRangeLists@0 @1127 PRIVATE
  RtlMoveMemory@12 @1128
  RtlMultiByteToUnicodeN@20 @1129
  RtlMultiByteToUnicodeSize@12 @1130
  RtlNextUnicodePrefix@0 @1131 PRIVATE
  RtlNtStatusToDosError@4 @1132
  RtlNtStatusToDosErrorNoTeb@4 @1133
  RtlNumberGenericTableElements@4 @1134
  RtlNumberGenericTableElementsAvl@0 @1135 PRIVATE
  RtlNumberOfClearBits@4 @1136
  RtlNumberOfSetBits@4 @1137
  RtlOemStringToCountedUnicodeString@0 @1138 PRIVATE
  RtlOemStringToUnicodeSize@4 @1139
  RtlOemStringToUnicodeString@12 @1140
  RtlOemToUnicodeN@20 @1141
  RtlPinAtomInAtomTable@8 @1142
  RtlPrefixString@12 @1143
  RtlPrefixUnicodeString@12 @1144
  RtlQueryAtomInAtomTable@24 @1145
  RtlQueryRegistryValues@20 @1146
  RtlQueryTimeZoneInformation@4 @1147
  RtlRaiseException@4 @1148
  RtlRandom@4 @1149
  RtlRandomEx@4 @1150
  RtlRealPredecessor@0 @1151 PRIVATE
  RtlRealSuccessor@0 @1152 PRIVATE
  RtlRemoveUnicodePrefix@0 @1153 PRIVATE
  RtlReserveChunk@0 @1154 PRIVATE
  RtlSecondsSince1970ToTime@8 @1155
  RtlSecondsSince1980ToTime@8 @1156
  RtlSelfRelativeToAbsoluteSD2@0 @1157 PRIVATE
  RtlSelfRelativeToAbsoluteSD@44 @1158
  RtlSetAllBits@4 @1159
  RtlSetBit@0 @1160 PRIVATE
  RtlSetBits@12 @1161
  RtlSetDaclSecurityDescriptor@16 @1162
  RtlSetGroupSecurityDescriptor@12 @1163
  RtlSetOwnerSecurityDescriptor@12 @1164
  RtlSetSaclSecurityDescriptor@16 @1165
  RtlSetTimeZoneInformation@4 @1166
  RtlSizeHeap@12 @1167
  RtlSplay@0 @1168 PRIVATE
  RtlStringFromGUID@8 @1169
  RtlSubAuthorityCountSid@4 @1170
  RtlSubAuthoritySid@8 @1171
  RtlSubtreePredecessor@0 @1172 PRIVATE
  RtlSubtreeSuccessor@0 @1173 PRIVATE
  RtlTestBit@0 @1174 PRIVATE
  RtlTimeFieldsToTime@8 @1175
  RtlTimeToElapsedTimeFields@8 @1176
  RtlTimeToSecondsSince1970@8 @1177
  RtlTimeToSecondsSince1980@8 @1178
  RtlTimeToTimeFields@8 @1179
  RtlTraceDatabaseAdd@0 @1180 PRIVATE
  RtlTraceDatabaseCreate@0 @1181 PRIVATE
  RtlTraceDatabaseDestroy@0 @1182 PRIVATE
  RtlTraceDatabaseEnumerate@0 @1183 PRIVATE
  RtlTraceDatabaseFind@0 @1184 PRIVATE
  RtlTraceDatabaseLock@0 @1185 PRIVATE
  RtlTraceDatabaseUnlock@0 @1186 PRIVATE
  RtlTraceDatabaseValidate@0 @1187 PRIVATE
  RtlUnicodeStringToAnsiSize@4 @1188
  RtlUnicodeStringToAnsiString@12 @1189
  RtlUnicodeStringToCountedOemString@0 @1190 PRIVATE
  RtlUnicodeStringToInteger@12 @1191
  RtlUnicodeStringToOemSize@4 @1192
  RtlUnicodeStringToOemString@12 @1193
  RtlUnicodeToCustomCPN@24=ntdll.RtlUnicodeToCustomCPN @1194
  RtlUnicodeToMultiByteN@20 @1195
  RtlUnicodeToMultiByteSize@12 @1196
  RtlUnicodeToOemN@20 @1197
  RtlUnlockBootStatusData@0 @1198 PRIVATE
  RtlUnwind@16 @1199
  RtlUpcaseUnicodeChar@4 @1200
  RtlUpcaseUnicodeString@12 @1201
  RtlUpcaseUnicodeStringToAnsiString@12 @1202
  RtlUpcaseUnicodeStringToCountedOemString@12 @1203
  RtlUpcaseUnicodeStringToOemString@12 @1204
  RtlUpcaseUnicodeToCustomCPN@24=ntdll.RtlUpcaseUnicodeToCustomCPN @1205
  RtlUpcaseUnicodeToMultiByteN@20 @1206
  RtlUpcaseUnicodeToOemN@20 @1207
  RtlUpperChar@4 @1208
  RtlUpperString@8 @1209
  RtlValidRelativeSecurityDescriptor@12 @1210
  RtlValidSecurityDescriptor@4 @1211
  RtlValidSid@4 @1212
  RtlVerifyVersionInfo@16 @1213
  RtlVolumeDeviceToDosName@0 @1214 PRIVATE
  RtlWalkFrameChain@0 @1215 PRIVATE
  RtlWriteRegistryValue@24 @1216
  RtlZeroHeap@0 @1217 PRIVATE
  RtlZeroMemory@8 @1218
  RtlxAnsiStringToUnicodeSize@4 @1219
  RtlxOemStringToUnicodeSize@4 @1220
  RtlxUnicodeStringToAnsiSize@4 @1221
  RtlxUnicodeStringToOemSize@4 @1222
  SeAccessCheck@0 @1223 PRIVATE
  SeAppendPrivileges@0 @1224 PRIVATE
  SeAssignSecurity@0 @1225 PRIVATE
  SeAssignSecurityEx@0 @1226 PRIVATE
  SeAuditHardLinkCreation@0 @1227 PRIVATE
  SeAuditingFileEvents@0 @1228 PRIVATE
  SeAuditingFileEventsWithContext@0 @1229 PRIVATE
  SeAuditingFileOrGlobalEvents@0 @1230 PRIVATE
  SeAuditingHardLinkEvents@0 @1231 PRIVATE
  SeAuditingHardLinkEventsWithContext@0 @1232 PRIVATE
  SeCaptureSecurityDescriptor@0 @1233 PRIVATE
  SeCaptureSubjectContext@0 @1234 PRIVATE
  SeCloseObjectAuditAlarm@0 @1235 PRIVATE
  SeCreateAccessState@0 @1236 PRIVATE
  SeCreateClientSecurity@0 @1237 PRIVATE
  SeCreateClientSecurityFromSubjectContext@0 @1238 PRIVATE
  SeDeassignSecurity@0 @1239 PRIVATE
  SeDeleteAccessState@0 @1240 PRIVATE
  SeDeleteObjectAuditAlarm@0 @1241 PRIVATE
  SeExports@0 @1242 PRIVATE
  SeFilterToken@0 @1243 PRIVATE
  SeFreePrivileges@0 @1244 PRIVATE
  SeImpersonateClient@0 @1245 PRIVATE
  SeImpersonateClientEx@0 @1246 PRIVATE
  SeLocateProcessImageName@8 @1247
  SeLockSubjectContext@0 @1248 PRIVATE
  SeMarkLogonSessionForTerminationNotification@0 @1249 PRIVATE
  SeOpenObjectAuditAlarm@0 @1250 PRIVATE
  SeOpenObjectForDeleteAuditAlarm@0 @1251 PRIVATE
  SePrivilegeCheck@12 @1252
  SePrivilegeObjectAuditAlarm@0 @1253 PRIVATE
  SePublicDefaultDacl@0 @1254 PRIVATE
  SeQueryAuthenticationIdToken@0 @1255 PRIVATE
  SeQueryInformationToken@0 @1256 PRIVATE
  SeQuerySecurityDescriptorInfo@0 @1257 PRIVATE
  SeQuerySessionIdToken@0 @1258 PRIVATE
  SeRegisterLogonSessionTerminatedRoutine@0 @1259 PRIVATE
  SeReleaseSecurityDescriptor@0 @1260 PRIVATE
  SeReleaseSubjectContext@0 @1261 PRIVATE
  SeSetAccessStateGenericMapping@0 @1262 PRIVATE
  SeSetSecurityDescriptorInfo@0 @1263 PRIVATE
  SeSetSecurityDescriptorInfoEx@0 @1264 PRIVATE
  SeSinglePrivilegeCheck@12 @1265
  SeSystemDefaultDacl@0 @1266 PRIVATE
  SeTokenImpersonationLevel@0 @1267 PRIVATE
  SeTokenIsAdmin@0 @1268 PRIVATE
  SeTokenIsRestricted@0 @1269 PRIVATE
  SeTokenIsWriteRestricted@0 @1270 PRIVATE
  SeTokenObjectType @1271 DATA
  SeTokenType@0 @1272 PRIVATE
  SeUnlockSubjectContext@0 @1273 PRIVATE
  SeUnregisterLogonSessionTerminatedRoutine@0 @1274 PRIVATE
  SeValidSecurityDescriptor@0 @1275 PRIVATE
  VerSetConditionMask@16 @1276
  VfFailDeviceNode@0 @1277 PRIVATE
  VfFailDriver@0 @1278 PRIVATE
  VfFailSystemBIOS@0 @1279 PRIVATE
  VfIsVerificationEnabled@0 @1280 PRIVATE
  WRITE_REGISTER_BUFFER_UCHAR@0 @1281 PRIVATE
  WRITE_REGISTER_BUFFER_ULONG@0 @1282 PRIVATE
  WRITE_REGISTER_BUFFER_USHORT@0 @1283 PRIVATE
  WRITE_REGISTER_UCHAR@0 @1284 PRIVATE
  WRITE_REGISTER_ULONG@0 @1285 PRIVATE
  WRITE_REGISTER_USHORT@0 @1286 PRIVATE
  WmiFlushTrace@0 @1287 PRIVATE
  WmiQueryTrace@0 @1288 PRIVATE
  WmiQueryTraceInformation@0 @1289 PRIVATE
  WmiStartTrace@0 @1290 PRIVATE
  WmiStopTrace@0 @1291 PRIVATE
  WmiTraceMessage@0 @1292 PRIVATE
  WmiTraceMessageVa@0 @1293 PRIVATE
  WmiUpdateTrace@0 @1294 PRIVATE
  XIPDispatch@0 @1295 PRIVATE
  ZwAccessCheckAndAuditAlarm@44=NtAccessCheckAndAuditAlarm @1296 PRIVATE
  ZwAddBootEntry@0 @1297 PRIVATE
  ZwAdjustPrivilegesToken@24=NtAdjustPrivilegesToken @1298 PRIVATE
  ZwAlertThread@4=NtAlertThread @1299 PRIVATE
  ZwAllocateVirtualMemory@24=NtAllocateVirtualMemory @1300 PRIVATE
  ZwAssignProcessToJobObject@8=NtAssignProcessToJobObject @1301 PRIVATE
  ZwCancelIoFile@8=NtCancelIoFile @1302 PRIVATE
  ZwCancelTimer@8=NtCancelTimer @1303 PRIVATE
  ZwClearEvent@4=NtClearEvent @1304 PRIVATE
  ZwClose@4=NtClose @1305
  ZwCloseObjectAuditAlarm@0 @1306 PRIVATE
  ZwConnectPort@32=NtConnectPort @1307 PRIVATE
  ZwCreateDirectoryObject@12=NtCreateDirectoryObject @1308 PRIVATE
  ZwCreateEvent@20=NtCreateEvent @1309
  ZwCreateFile@44=NtCreateFile @1310
  ZwCreateJobObject@12=NtCreateJobObject @1311 PRIVATE
  ZwCreateKey@28=NtCreateKey @1312 PRIVATE
  ZwCreateSection@28=NtCreateSection @1313 PRIVATE
  ZwCreateSymbolicLinkObject@16=NtCreateSymbolicLinkObject @1314 PRIVATE
  ZwCreateTimer@16=NtCreateTimer @1315 PRIVATE
  ZwDeleteBootEntry@0 @1316 PRIVATE
  ZwDeleteFile@4=NtDeleteFile @1317 PRIVATE
  ZwDeleteKey@4=NtDeleteKey @1318 PRIVATE
  ZwDeleteValueKey@8=NtDeleteValueKey @1319 PRIVATE
  ZwDeviceIoControlFile@40=NtDeviceIoControlFile @1320 PRIVATE
  ZwDisplayString@4=NtDisplayString @1321 PRIVATE
  ZwDuplicateObject@28=NtDuplicateObject @1322
  ZwDuplicateToken@24=NtDuplicateToken @1323 PRIVATE
  ZwEnumerateBootEntries@0 @1324 PRIVATE
  ZwEnumerateKey@24=NtEnumerateKey @1325 PRIVATE
  ZwEnumerateValueKey@24=NtEnumerateValueKey @1326 PRIVATE
  ZwFlushInstructionCache@12=NtFlushInstructionCache @1327 PRIVATE
  ZwFlushKey@4=NtFlushKey @1328 PRIVATE
  ZwFlushVirtualMemory@16=NtFlushVirtualMemory @1329 PRIVATE
  ZwFreeVirtualMemory@16=NtFreeVirtualMemory @1330 PRIVATE
  ZwFsControlFile@40=NtFsControlFile @1331 PRIVATE
  ZwInitiatePowerAction@16=NtInitiatePowerAction @1332 PRIVATE
  ZwIsProcessInJob@8=NtIsProcessInJob @1333 PRIVATE
  ZwLoadDriver@4 @1334
  ZwLoadKey@8=NtLoadKey @1335 PRIVATE
  ZwMakeTemporaryObject@4=NtMakeTemporaryObject @1336 PRIVATE
  ZwMapViewOfSection@40=NtMapViewOfSection @1337 PRIVATE
  ZwNotifyChangeKey@40=NtNotifyChangeKey @1338 PRIVATE
  ZwOpenDirectoryObject@12=NtOpenDirectoryObject @1339 PRIVATE
  ZwOpenEvent@12=NtOpenEvent @1340 PRIVATE
  ZwOpenFile@24=NtOpenFile @1341
  ZwOpenJobObject@12=NtOpenJobObject @1342 PRIVATE
  ZwOpenKey@12=NtOpenKey @1343 PRIVATE
  ZwOpenProcess@16=NtOpenProcess @1344 PRIVATE
  ZwOpenProcessToken@12=NtOpenProcessToken @1345 PRIVATE
  ZwOpenProcessTokenEx@16=NtOpenProcessTokenEx @1346 PRIVATE
  ZwOpenSection@12=NtOpenSection @1347 PRIVATE
  ZwOpenSymbolicLinkObject@12=NtOpenSymbolicLinkObject @1348 PRIVATE
  ZwOpenThread@16=NtOpenThread @1349 PRIVATE
  ZwOpenThreadToken@16=NtOpenThreadToken @1350 PRIVATE
  ZwOpenThreadTokenEx@20=NtOpenThreadTokenEx @1351 PRIVATE
  ZwOpenTimer@12=NtOpenTimer @1352 PRIVATE
  ZwPowerInformation@20=NtPowerInformation @1353 PRIVATE
  ZwPulseEvent@8=NtPulseEvent @1354 PRIVATE
  ZwQueryBootEntryOrder@0 @1355 PRIVATE
  ZwQueryBootOptions@0 @1356 PRIVATE
  ZwQueryDefaultLocale@8=NtQueryDefaultLocale @1357 PRIVATE
  ZwQueryDefaultUILanguage@4=NtQueryDefaultUILanguage @1358 PRIVATE
  ZwQueryDirectoryFile@44=NtQueryDirectoryFile @1359 PRIVATE
  ZwQueryDirectoryObject@28=NtQueryDirectoryObject @1360 PRIVATE
  ZwQueryEaFile@36=NtQueryEaFile @1361 PRIVATE
  ZwQueryFullAttributesFile@8=NtQueryFullAttributesFile @1362 PRIVATE
  ZwQueryInformationFile@20=NtQueryInformationFile @1363 PRIVATE
  ZwQueryInformationJobObject@20=NtQueryInformationJobObject @1364 PRIVATE
  ZwQueryInformationProcess@20=NtQueryInformationProcess @1365
  ZwQueryInformationThread@20=NtQueryInformationThread @1366 PRIVATE
  ZwQueryInformationToken@20=NtQueryInformationToken @1367 PRIVATE
  ZwQueryInstallUILanguage@4=NtQueryInstallUILanguage @1368 PRIVATE
  ZwQueryKey@20=NtQueryKey @1369 PRIVATE
  ZwQueryObject@20=NtQueryObject @1370 PRIVATE
  ZwQuerySection@20=NtQuerySection @1371 PRIVATE
  ZwQuerySecurityObject@20=NtQuerySecurityObject @1372 PRIVATE
  ZwQuerySymbolicLinkObject@12=NtQuerySymbolicLinkObject @1373 PRIVATE
  ZwQuerySystemInformation@16=NtQuerySystemInformation @1374 PRIVATE
  ZwQueryValueKey@24=NtQueryValueKey @1375 PRIVATE
  ZwQueryVolumeInformationFile@20=NtQueryVolumeInformationFile @1376 PRIVATE
  ZwReadFile@36=NtReadFile @1377 PRIVATE
  ZwReplaceKey@12=NtReplaceKey @1378 PRIVATE
  ZwRequestWaitReplyPort@12=NtRequestWaitReplyPort @1379 PRIVATE
  ZwResetEvent@8=NtResetEvent @1380 PRIVATE
  ZwRestoreKey@12=NtRestoreKey @1381 PRIVATE
  ZwSaveKey@8=NtSaveKey @1382 PRIVATE
  ZwSaveKeyEx@0 @1383 PRIVATE
  ZwSetBootEntryOrder@0 @1384 PRIVATE
  ZwSetBootOptions@0 @1385 PRIVATE
  ZwSetDefaultLocale@8=NtSetDefaultLocale @1386 PRIVATE
  ZwSetDefaultUILanguage@4=NtSetDefaultUILanguage @1387 PRIVATE
  ZwSetEaFile@16=NtSetEaFile @1388 PRIVATE
  ZwSetEvent@8=NtSetEvent @1389
  ZwSetInformationFile@20=NtSetInformationFile @1390 PRIVATE
  ZwSetInformationJobObject@16=NtSetInformationJobObject @1391 PRIVATE
  ZwSetInformationObject@16=NtSetInformationObject @1392 PRIVATE
  ZwSetInformationProcess@16=NtSetInformationProcess @1393 PRIVATE
  ZwSetInformationThread@16=NtSetInformationThread @1394 PRIVATE
  ZwSetSecurityObject@12=NtSetSecurityObject @1395 PRIVATE
  ZwSetSystemInformation@12=NtSetSystemInformation @1396 PRIVATE
  ZwSetSystemTime@8=NtSetSystemTime @1397 PRIVATE
  ZwSetTimer@28=NtSetTimer @1398 PRIVATE
  ZwSetValueKey@24=NtSetValueKey @1399 PRIVATE
  ZwSetVolumeInformationFile@20=NtSetVolumeInformationFile @1400 PRIVATE
  ZwTerminateJobObject@8=NtTerminateJobObject @1401 PRIVATE
  ZwTerminateProcess@8=NtTerminateProcess @1402 PRIVATE
  ZwTranslateFilePath@0 @1403 PRIVATE
  ZwUnloadDriver@4 @1404
  ZwUnloadKey@4=NtUnloadKey @1405 PRIVATE
  ZwUnmapViewOfSection@8=NtUnmapViewOfSection @1406 PRIVATE
  ZwWaitForMultipleObjects@20=NtWaitForMultipleObjects @1407 PRIVATE
  ZwWaitForSingleObject@12=NtWaitForSingleObject @1408
  ZwWriteFile@36=NtWriteFile @1409
  ZwYieldExecution@0=NtYieldExecution @1410 PRIVATE
  _CIcos @1411 PRIVATE
  _CIsin @1412 PRIVATE
  _CIsqrt @1413 PRIVATE
  _abnormal_termination @1414 PRIVATE
  _alldiv@16 @1415
  _alldvrm@16 @1416
  _allmul@16 @1417
  _alloca_probe@0 @1418
  _allrem@16 @1419
  _allshl@12 @1420
  _allshr@12 @1421
  _aulldiv@16 @1422
  _aulldvrm@16 @1423
  _aullrem@16 @1424
  _aullshr@12 @1425
  _chkstk@0 @1426
  _except_handler2 @1427
  _except_handler3 @1428
  _global_unwind2 @1429
  _itoa @1430
  _itow @1431
  _local_unwind2 @1432
  _purecall @1433
  _snprintf @1434
  _snwprintf @1435
  _stricmp @1436
  _strlwr @1437
  _strnicmp @1438
  _strnset @1439
  _strrev @1440
  _strset @1441
  _strupr @1442
  _vsnprintf @1443
  _vsnwprintf @1444
  _wcsicmp @1445
  _wcslwr @1446
  _wcsnicmp @1447
  _wcsnset @1448
  _wcsrev @1449
  _wcsupr @1450
  atoi @1451
  atol @1452
  isdigit @1453
  islower @1454
  isprint @1455
  isspace @1456
  isupper @1457
  isxdigit @1458
  mbstowcs @1459
  mbtowc @1460
  memchr @1461
  memcpy @1462
  memmove @1463
  memset @1464
  qsort @1465
  rand @1466
  sprintf @1467
  srand @1468
  strcat @1469
  strchr @1470
  strcmp @1471
  strcpy @1472
  strlen @1473
  strncat @1474
  strncmp @1475
  strncpy @1476
  strrchr @1477
  strspn @1478
  strstr @1479
  swprintf @1480
  tolower @1481
  toupper @1482
  towlower @1483
  towupper @1484
  vDbgPrintEx@16 @1485
  vDbgPrintExWithPrefix@20 @1486
  vsprintf @1487
  wcscat @1488
  wcschr @1489
  wcscmp @1490
  wcscpy @1491
  wcscspn @1492
  wcslen @1493
  wcsncat @1494
  wcsncmp @1495
  wcsncpy @1496
  wcsrchr @1497
  wcsspn @1498
  wcsstr @1499
  wcstombs @1500
  wctomb @1501
  wine_ntoskrnl_main_loop @1502
