; File generated automatically from ../wine/dlls/ntoskrnl.exe/ntoskrnl.exe.spec; do not edit!

LIBRARY ntoskrnl.exe

EXPORTS
  ExAcquireFastMutexUnsafe@4 @1
  ExAcquireRundownProtection@0 @2 PRIVATE
  ExAcquireRundownProtectionEx@0 @3 PRIVATE
  ExInitializeRundownProtection@0 @4 PRIVATE
  ExInterlockedAddLargeStatistic@0 @5 PRIVATE
  ExInterlockedCompareExchange64@0 @6 PRIVATE
  ExInterlockedFlushSList@4=__fastcall_NTOSKRNL_ExInterlockedFlushSList @7
  ExInterlockedPopEntrySList@8=__fastcall_NTOSKRNL_ExInterlockedPopEntrySList @8
  ExInterlockedPushEntrySList@12=__fastcall_NTOSKRNL_ExInterlockedPushEntrySList @9
  ExReInitializeRundownProtection@0 @10 PRIVATE
  ExReleaseFastMutexUnsafe@4 @11
  ExReleaseResourceLite@4 @12
  ExReleaseRundownProtection@0 @13 PRIVATE
  ExReleaseRundownProtectionEx@0 @14 PRIVATE
  ExRundownCompleted@0 @15 PRIVATE
  ExWaitForRundownProtectionRelease@0 @16 PRIVATE
  ExfAcquirePushLockExclusive@0 @17 PRIVATE
  ExfAcquirePushLockShared@0 @18 PRIVATE
  ExfInterlockedAddUlong@0 @19 PRIVATE
  ExfInterlockedCompareExchange64@0 @20 PRIVATE
  ExfInterlockedInsertHeadList@0 @21 PRIVATE
  ExfInterlockedInsertTailList@0 @22 PRIVATE
  ExfInterlockedPopEntryList@0 @23 PRIVATE
  ExfInterlockedPushEntryList@0 @24 PRIVATE
  ExfInterlockedRemoveHeadList@8 @25
  ExfReleasePushLock@0 @26 PRIVATE
  Exfi386InterlockedDecrementLong@0 @27 PRIVATE
  Exfi386InterlockedExchangeUlong@0 @28 PRIVATE
  Exfi386InterlockedIncrementLong@0 @29 PRIVATE
  HalExamineMBR@0 @30 PRIVATE
  InterlockedCompareExchange@12=__fastcall_NTOSKRNL_InterlockedCompareExchange @31
  InterlockedDecrement@4=__fastcall_NTOSKRNL_InterlockedDecrement @32
  InterlockedExchange@8=__fastcall_NTOSKRNL_InterlockedExchange @33
  InterlockedExchangeAdd@8=__fastcall_NTOSKRNL_InterlockedExchangeAdd @34
  InterlockedIncrement@4=__fastcall_NTOSKRNL_InterlockedIncrement @35
  InterlockedPopEntrySList@4=__fastcall_NTOSKRNL_InterlockedPopEntrySList @36
  InterlockedPushEntrySList@8=__fastcall_NTOSKRNL_InterlockedPushEntrySList @37
  IoAssignDriveLetters@0 @38 PRIVATE
  IoReadPartitionTable@0 @39 PRIVATE
  IoSetPartitionInformation@0 @40 PRIVATE
  IoWritePartitionTable@0 @41 PRIVATE
  IofCallDriver@8 @42
  IofCompleteRequest@8 @43
  KeAcquireInStackQueuedSpinLockAtDpcLevel@8 @44
  KeEnterGuardedRegion@0 @45
  KeExpandKernelStackAndCallout@12 @46
  KeExpandKernelStackAndCalloutEx@20 @47
  KeLeaveGuardedRegion@0 @48
  KeReleaseInStackQueuedSpinLockFromDpcLevel@4 @49
  KeSetTimeUpdateNotifyRoutine@0 @50 PRIVATE
  KefAcquireSpinLockAtDpcLevel@0 @51 PRIVATE
  KefReleaseSpinLockFromDpcLevel@0 @52 PRIVATE
  KeGenericCallDpc@8 @53
  KeSignalCallDpcDone@4 @54
  KeSignalCallDpcSynchronize@4 @55
  KiAcquireSpinLock@0 @56 PRIVATE
  KiReleaseSpinLock@0 @57 PRIVATE
  ObfDereferenceObject@4 @58
  ObfReferenceObject@4 @59
  RtlPrefetchMemoryNonTemporal@0 @60 PRIVATE
  RtlUlongByteSwap @61
  RtlUlonglongByteSwap @62
  RtlUshortByteSwap @63
  WmiGetClock@0 @64 PRIVATE
  Kei386EoiHelper@0 @65 PRIVATE
  Kii386SpinOnSpinLock@0 @66 PRIVATE
  CcCanIWrite@0 @67 PRIVATE
  CcCopyRead@0 @68 PRIVATE
  CcCopyWrite@0 @69 PRIVATE
  CcDeferWrite@0 @70 PRIVATE
  CcFastCopyRead@0 @71 PRIVATE
  CcFastCopyWrite@0 @72 PRIVATE
  CcFastMdlReadWait@0 @73 PRIVATE
  CcFastReadNotPossible@0 @74 PRIVATE
  CcFastReadWait@0 @75 PRIVATE
  CcFlushCache@0 @76 PRIVATE
  CcGetDirtyPages@0 @77 PRIVATE
  CcGetFileObjectFromBcb@0 @78 PRIVATE
  CcGetFileObjectFromSectionPtrs@0 @79 PRIVATE
  CcGetFlushedValidData@0 @80 PRIVATE
  CcGetLsnForFileObject@0 @81 PRIVATE
  CcInitializeCacheMap@0 @82 PRIVATE
  CcIsThereDirtyData@0 @83 PRIVATE
  CcMapData@0 @84 PRIVATE
  CcMdlRead@0 @85 PRIVATE
  CcMdlReadComplete@0 @86 PRIVATE
  CcMdlWriteAbort@0 @87 PRIVATE
  CcMdlWriteComplete@0 @88 PRIVATE
  CcPinMappedData@0 @89 PRIVATE
  CcPinRead@0 @90 PRIVATE
  CcPrepareMdlWrite@0 @91 PRIVATE
  CcPreparePinWrite@0 @92 PRIVATE
  CcPurgeCacheSection@0 @93 PRIVATE
  CcRemapBcb@0 @94 PRIVATE
  CcRepinBcb@0 @95 PRIVATE
  CcScheduleReadAhead@0 @96 PRIVATE
  CcSetAdditionalCacheAttributes@0 @97 PRIVATE
  CcSetBcbOwnerPointer@0 @98 PRIVATE
  CcSetDirtyPageThreshold@0 @99 PRIVATE
  CcSetDirtyPinnedData@0 @100 PRIVATE
  CcSetFileSizes@0 @101 PRIVATE
  CcSetLogHandleForFile@0 @102 PRIVATE
  CcSetReadAheadGranularity@0 @103 PRIVATE
  CcUninitializeCacheMap@0 @104 PRIVATE
  CcUnpinData@0 @105 PRIVATE
  CcUnpinDataForThread@0 @106 PRIVATE
  CcUnpinRepinnedBcb@0 @107 PRIVATE
  CcWaitForCurrentLazyWriterActivity@0 @108 PRIVATE
  CcZeroData@0 @109 PRIVATE
  CmRegisterCallback@12 @110
  CmUnRegisterCallback@8 @111
  DbgBreakPoint@0 @112
  DbgBreakPointWithStatus@0 @113 PRIVATE
  DbgLoadImageSymbols@0 @114 PRIVATE
  DbgPrint @115
  DbgPrintEx @116
  DbgPrintReturnControlC@0 @117 PRIVATE
  DbgPrompt@0 @118 PRIVATE
  DbgQueryDebugFilterState@8 @119
  DbgSetDebugFilterState@0 @120 PRIVATE
  ExAcquireResourceExclusiveLite@8 @121
  ExAcquireResourceSharedLite@8 @122
  ExAcquireSharedStarveExclusive@8 @123
  ExAcquireSharedWaitForExclusive@8 @124
  ExAllocateFromPagedLookasideList@0 @125 PRIVATE
  ExAllocatePool@8 @126
  ExAllocatePoolWithQuota@8 @127
  ExAllocatePoolWithQuotaTag@12 @128
  ExAllocatePoolWithTag@12 @129
  ExAllocatePoolWithTagPriority@0 @130 PRIVATE
  ExConvertExclusiveToSharedLite@0 @131 PRIVATE
  ExCreateCallback@16 @132
  ExDeleteNPagedLookasideList@4 @133
  ExDeletePagedLookasideList@4 @134
  ExDeleteResourceLite@4 @135
  ExDesktopObjectType@0 @136 PRIVATE
  ExDisableResourceBoostLite@0 @137 PRIVATE
  ExEnumHandleTable@0 @138 PRIVATE
  ExEventObjectType @139 DATA
  ExExtendZone@0 @140 PRIVATE
  ExfUnblockPushLock@8 @141
  ExFreePool@4 @142
  ExFreePoolWithTag@8 @143
  ExFreeToPagedLookasideList@0 @144 PRIVATE
  ExGetCurrentProcessorCounts@0 @145 PRIVATE
  ExGetCurrentProcessorCpuUsage@0 @146 PRIVATE
  ExGetExclusiveWaiterCount@4 @147
  ExGetPreviousMode@0 @148 PRIVATE
  ExGetSharedWaiterCount@4 @149
  ExInitializeNPagedLookasideList@28 @150
  ExInitializePagedLookasideList@28 @151
  ExInitializeResourceLite@4 @152
  ExInitializeZone@16 @153
  ExInterlockedAddLargeInteger@0 @154 PRIVATE
  ExInterlockedAddUlong@0 @155 PRIVATE
  ExInterlockedDecrementLong@0 @156 PRIVATE
  ExInterlockedExchangeUlong@0 @157 PRIVATE
  ExInterlockedExtendZone@0 @158 PRIVATE
  ExInterlockedIncrementLong@0 @159 PRIVATE
  ExInterlockedInsertHeadList@0 @160 PRIVATE
  ExInterlockedInsertTailList@0 @161 PRIVATE
  ExInterlockedPopEntryList@0 @162 PRIVATE
  ExInterlockedPushEntryList@0 @163 PRIVATE
  ExInterlockedRemoveHeadList@8 @164
  ExIsProcessorFeaturePresent@0 @165 PRIVATE
  ExIsResourceAcquiredExclusiveLite@4 @166
  ExIsResourceAcquiredSharedLite@4 @167
  ExLocalTimeToSystemTime@8=RtlLocalTimeToSystemTime @168
  ExNotifyCallback@0 @169 PRIVATE
  ExQueryPoolBlockSize@0 @170 PRIVATE
  ExQueueWorkItem@0 @171 PRIVATE
  ExRaiseAccessViolation@0 @172 PRIVATE
  ExRaiseDatatypeMisalignment@0 @173 PRIVATE
  ExRaiseException@0 @174 PRIVATE
  ExRaiseHardError@0 @175 PRIVATE
  ExRaiseStatus@0 @176 PRIVATE
  ExRegisterCallback@12 @177
  ExReinitializeResourceLite@0 @178 PRIVATE
  ExReleaseResourceForThreadLite@8 @179
  ExSemaphoreObjectType @180 DATA
  ExSetResourceOwnerPointer@0 @181 PRIVATE
  ExSetTimerResolution@8 @182
  ExSystemExceptionFilter@0 @183 PRIVATE
  ExSystemTimeToLocalTime@8=RtlSystemTimeToLocalTime @184
  ExUnregisterCallback@4 @185
  ExUuidCreate@4 @186
  ExVerifySuite@0 @187 PRIVATE
  ExWindowStationObjectType@0 @188 PRIVATE
  Exi386InterlockedDecrementLong@0 @189 PRIVATE
  Exi386InterlockedExchangeUlong@0 @190 PRIVATE
  Exi386InterlockedIncrementLong@0 @191 PRIVATE
  FsRtlAcquireFileExclusive@0 @192 PRIVATE
  FsRtlAddLargeMcbEntry@0 @193 PRIVATE
  FsRtlAddMcbEntry@0 @194 PRIVATE
  FsRtlAddToTunnelCache@0 @195 PRIVATE
  FsRtlAllocateFileLock@0 @196 PRIVATE
  FsRtlAllocatePool@0 @197 PRIVATE
  FsRtlAllocatePoolWithQuota@0 @198 PRIVATE
  FsRtlAllocatePoolWithQuotaTag@0 @199 PRIVATE
  FsRtlAllocatePoolWithTag@0 @200 PRIVATE
  FsRtlAllocateResource@0 @201 PRIVATE
  FsRtlAreNamesEqual@0 @202 PRIVATE
  FsRtlBalanceReads@0 @203 PRIVATE
  FsRtlCheckLockForReadAccess@0 @204 PRIVATE
  FsRtlCheckLockForWriteAccess@0 @205 PRIVATE
  FsRtlCheckOplock@0 @206 PRIVATE
  FsRtlCopyRead@0 @207 PRIVATE
  FsRtlCopyWrite@0 @208 PRIVATE
  FsRtlCurrentBatchOplock@0 @209 PRIVATE
  FsRtlDeleteKeyFromTunnelCache@0 @210 PRIVATE
  FsRtlDeleteTunnelCache@0 @211 PRIVATE
  FsRtlDeregisterUncProvider@0 @212 PRIVATE
  FsRtlDissectDbcs@0 @213 PRIVATE
  FsRtlDissectName@0 @214 PRIVATE
  FsRtlDoesDbcsContainWildCards@0 @215 PRIVATE
  FsRtlDoesNameContainWildCards@0 @216 PRIVATE
  FsRtlFastCheckLockForRead@0 @217 PRIVATE
  FsRtlFastCheckLockForWrite@0 @218 PRIVATE
  FsRtlFastUnlockAll@0 @219 PRIVATE
  FsRtlFastUnlockAllByKey@0 @220 PRIVATE
  FsRtlFastUnlockSingle@0 @221 PRIVATE
  FsRtlFindInTunnelCache@0 @222 PRIVATE
  FsRtlFreeFileLock@0 @223 PRIVATE
  FsRtlGetFileSize@0 @224 PRIVATE
  FsRtlGetNextFileLock@0 @225 PRIVATE
  FsRtlGetNextLargeMcbEntry@0 @226 PRIVATE
  FsRtlGetNextMcbEntry@0 @227 PRIVATE
  FsRtlIncrementCcFastReadNoWait@0 @228 PRIVATE
  FsRtlIncrementCcFastReadNotPossible@0 @229 PRIVATE
  FsRtlIncrementCcFastReadResourceMiss@0 @230 PRIVATE
  FsRtlIncrementCcFastReadWait@0 @231 PRIVATE
  FsRtlInitializeFileLock@0 @232 PRIVATE
  FsRtlInitializeLargeMcb@0 @233 PRIVATE
  FsRtlInitializeMcb@0 @234 PRIVATE
  FsRtlInitializeOplock@0 @235 PRIVATE
  FsRtlInitializeTunnelCache@0 @236 PRIVATE
  FsRtlInsertPerFileObjectContext@0 @237 PRIVATE
  FsRtlInsertPerStreamContext@0 @238 PRIVATE
  FsRtlIsDbcsInExpression@0 @239 PRIVATE
  FsRtlIsFatDbcsLegal@0 @240 PRIVATE
  FsRtlIsHpfsDbcsLegal@0 @241 PRIVATE
  FsRtlIsNameInExpression@16 @242
  FsRtlIsNtstatusExpected@0 @243 PRIVATE
  FsRtlIsPagingFile@0 @244 PRIVATE
  FsRtlIsTotalDeviceFailure@0 @245 PRIVATE
  FsRtlLegalAnsiCharacterArray@0 @246 PRIVATE
  FsRtlLookupLargeMcbEntry@0 @247 PRIVATE
  FsRtlLookupLastLargeMcbEntry@0 @248 PRIVATE
  FsRtlLookupLastLargeMcbEntryAndIndex@0 @249 PRIVATE
  FsRtlLookupLastMcbEntry@0 @250 PRIVATE
  FsRtlLookupMcbEntry@0 @251 PRIVATE
  FsRtlLookupPerFileObjectContext@0 @252 PRIVATE
  FsRtlLookupPerStreamContextInternal@0 @253 PRIVATE
  FsRtlMdlRead@0 @254 PRIVATE
  FsRtlMdlReadComplete@0 @255 PRIVATE
  FsRtlMdlReadCompleteDev@0 @256 PRIVATE
  FsRtlMdlReadDev@0 @257 PRIVATE
  FsRtlMdlWriteComplete@0 @258 PRIVATE
  FsRtlMdlWriteCompleteDev@0 @259 PRIVATE
  FsRtlNormalizeNtstatus@0 @260 PRIVATE
  FsRtlNotifyChangeDirectory@0 @261 PRIVATE
  FsRtlNotifyCleanup@0 @262 PRIVATE
  FsRtlNotifyFilterChangeDirectory@0 @263 PRIVATE
  FsRtlNotifyFilterReportChange@0 @264 PRIVATE
  FsRtlNotifyFullChangeDirectory@0 @265 PRIVATE
  FsRtlNotifyFullReportChange@0 @266 PRIVATE
  FsRtlNotifyInitializeSync@0 @267 PRIVATE
  FsRtlNotifyReportChange@0 @268 PRIVATE
  FsRtlNotifyUninitializeSync@0 @269 PRIVATE
  FsRtlNotifyVolumeEvent@0 @270 PRIVATE
  FsRtlNumberOfRunsInLargeMcb@0 @271 PRIVATE
  FsRtlNumberOfRunsInMcb@0 @272 PRIVATE
  FsRtlOplockFsctrl@0 @273 PRIVATE
  FsRtlOplockIsFastIoPossible@0 @274 PRIVATE
  FsRtlPostPagingFileStackOverflow@0 @275 PRIVATE
  FsRtlPostStackOverflow@0 @276 PRIVATE
  FsRtlPrepareMdlWrite@0 @277 PRIVATE
  FsRtlPrepareMdlWriteDev@0 @278 PRIVATE
  FsRtlPrivateLock@0 @279 PRIVATE
  FsRtlProcessFileLock@0 @280 PRIVATE
  FsRtlRegisterFileSystemFilterCallbacks@8 @281
  FsRtlRegisterUncProvider@12 @282
  FsRtlReleaseFile@0 @283 PRIVATE
  FsRtlRemoveLargeMcbEntry@0 @284 PRIVATE
  FsRtlRemoveMcbEntry@0 @285 PRIVATE
  FsRtlRemovePerFileObjectContext@0 @286 PRIVATE
  FsRtlRemovePerStreamContext@0 @287 PRIVATE
  FsRtlResetLargeMcb@0 @288 PRIVATE
  FsRtlSplitLargeMcb@0 @289 PRIVATE
  FsRtlSyncVolumes@0 @290 PRIVATE
  FsRtlTeardownPerStreamContexts@0 @291 PRIVATE
  FsRtlTruncateLargeMcb@0 @292 PRIVATE
  FsRtlTruncateMcb@0 @293 PRIVATE
  FsRtlUninitializeFileLock@0 @294 PRIVATE
  FsRtlUninitializeLargeMcb@0 @295 PRIVATE
  FsRtlUninitializeMcb@0 @296 PRIVATE
  FsRtlUninitializeOplock@0 @297 PRIVATE
  HalDispatchTable@0 @298 PRIVATE
  HalPrivateDispatchTable@0 @299 PRIVATE
  HeadlessDispatch@0 @300 PRIVATE
  InbvAcquireDisplayOwnership@0 @301 PRIVATE
  InbvCheckDisplayOwnership@0 @302 PRIVATE
  InbvDisplayString@0 @303 PRIVATE
  InbvEnableBootDriver@0 @304 PRIVATE
  InbvEnableDisplayString@0 @305 PRIVATE
  InbvInstallDisplayStringFilter@0 @306 PRIVATE
  InbvIsBootDriverInstalled@0 @307 PRIVATE
  InbvNotifyDisplayOwnershipLost@0 @308 PRIVATE
  InbvResetDisplay@0 @309 PRIVATE
  InbvSetScrollRegion@0 @310 PRIVATE
  InbvSetTextColor@0 @311 PRIVATE
  InbvSolidColorFill@0 @312 PRIVATE
  InitSafeBootMode @313 DATA
  IoAcquireCancelSpinLock@4 @314
  IoAcquireRemoveLockEx@20 @315
  IoAcquireVpbSpinLock@0 @316 PRIVATE
  IoAdapterObjectType@0 @317 PRIVATE
  IoAllocateAdapterChannel@0 @318 PRIVATE
  IoAllocateController@0 @319 PRIVATE
  IoAllocateDriverObjectExtension@16 @320
  IoAllocateErrorLogEntry@8 @321
  IoAllocateIrp@8 @322
  IoAllocateMdl@20 @323
  IoAllocateWorkItem@4 @324
  IoAssignResources@0 @325 PRIVATE
  IoAttachDevice@12 @326
  IoAttachDeviceByPointer@0 @327 PRIVATE
  IoAttachDeviceToDeviceStack@8 @328
  IoAttachDeviceToDeviceStackSafe@0 @329 PRIVATE
  IoBuildAsynchronousFsdRequest@24 @330
  IoBuildDeviceIoControlRequest@36 @331
  IoBuildPartialMdl@0 @332 PRIVATE
  IoBuildSynchronousFsdRequest@28 @333
  IoCallDriver@8 @334
  IoCancelFileOpen@0 @335 PRIVATE
  IoCancelIrp@4 @336
  IoCheckDesiredAccess@0 @337 PRIVATE
  IoCheckEaBufferValidity@0 @338 PRIVATE
  IoCheckFunctionAccess@0 @339 PRIVATE
  IoCheckQuerySetFileInformation@0 @340 PRIVATE
  IoCheckQuerySetVolumeInformation@0 @341 PRIVATE
  IoCheckQuotaBufferValidity@0 @342 PRIVATE
  IoCheckShareAccess@0 @343 PRIVATE
  IoCompleteRequest@8 @344
  IoConnectInterrupt@0 @345 PRIVATE
  IoCreateController@0 @346 PRIVATE
  IoCreateDevice@28 @347
  IoCreateDisk@0 @348 PRIVATE
  IoCreateDriver@8 @349
  IoCreateFile@56 @350
  IoCreateFileSpecifyDeviceObjectHint@0 @351 PRIVATE
  IoCreateNotificationEvent@8 @352
  IoCreateStreamFileObject@0 @353 PRIVATE
  IoCreateStreamFileObjectEx@0 @354 PRIVATE
  IoCreateStreamFileObjectLite@0 @355 PRIVATE
  IoCreateSymbolicLink@8 @356
  IoCreateSynchronizationEvent@8 @357
  IoCreateUnprotectedSymbolicLink@8 @358
  IoCsqInitialize@28 @359
  IoCsqInsertIrp@0 @360 PRIVATE
  IoCsqRemoveIrp@0 @361 PRIVATE
  IoCsqRemoveNextIrp@0 @362 PRIVATE
  IoDeleteController@0 @363 PRIVATE
  IoDeleteDevice@4 @364
  IoDeleteDriver@4 @365
  IoDeleteSymbolicLink@4 @366
  IoDetachDevice@4 @367
  IoDeviceHandlerObjectSize@0 @368 PRIVATE
  IoDeviceHandlerObjectType@0 @369 PRIVATE
  IoDeviceObjectType @370 DATA
  IoDisconnectInterrupt@0 @371 PRIVATE
  IoDriverObjectType @372 DATA
  IoEnqueueIrp@0 @373 PRIVATE
  IoEnumerateDeviceObjectList@0 @374 PRIVATE
  IoFastQueryNetworkAttributes@0 @375 PRIVATE
  IoFileObjectType @376 DATA
  IoForwardAndCatchIrp@0 @377 PRIVATE
  IoForwardIrpSynchronously@0 @378 PRIVATE
  IoFreeController@0 @379 PRIVATE
  IoFreeErrorLogEntry@0 @380 PRIVATE
  IoFreeIrp@4 @381
  IoFreeMdl@4 @382
  IoFreeWorkItem@4 @383
  IoGetAttachedDevice@4 @384
  IoGetAttachedDeviceReference@4 @385
  IoGetBaseFileSystemDeviceObject@0 @386 PRIVATE
  IoGetBootDiskInformation@0 @387 PRIVATE
  IoGetConfigurationInformation@0 @388
  IoGetCurrentProcess@0 @389
  IoGetDeviceAttachmentBaseRef@0 @390 PRIVATE
  IoGetDeviceInterfaceAlias@0 @391 PRIVATE
  IoGetDeviceInterfaces@16 @392
  IoGetDeviceObjectPointer@16 @393
  IoGetDeviceProperty@20 @394
  IoGetDeviceToVerify@0 @395 PRIVATE
  IoGetDiskDeviceObject@0 @396 PRIVATE
  IoGetDmaAdapter@0 @397 PRIVATE
  IoGetDriverObjectExtension@8 @398
  IoGetFileObjectGenericMapping@0 @399 PRIVATE
  IoGetInitialStack@0 @400 PRIVATE
  IoGetLowerDeviceObject@0 @401 PRIVATE
  IoGetRelatedDeviceObject@4 @402
  IoGetRequestorProcess@4 @403
  IoGetRequestorProcessId@0 @404 PRIVATE
  IoGetRequestorSessionId@0 @405 PRIVATE
  IoGetStackLimits@8 @406
  IoGetTopLevelIrp@0 @407 PRIVATE
  IoInitializeIrp@12 @408
  IoInitializeRemoveLockEx@20 @409
  IoInitializeTimer@12 @410
  IoInvalidateDeviceRelations@8 @411
  IoInvalidateDeviceState@0 @412 PRIVATE
  IoIsFileOriginRemote@0 @413 PRIVATE
  IoIsOperationSynchronous@0 @414 PRIVATE
  IoIsSystemThread@0 @415 PRIVATE
  IoIsValidNameGraftingBuffer@0 @416 PRIVATE
  IoIsWdmVersionAvailable@8 @417
  IoMakeAssociatedIrp@0 @418 PRIVATE
  IoOpenDeviceInterfaceRegistryKey@0 @419 PRIVATE
  IoOpenDeviceRegistryKey@16 @420
  IoPageRead@0 @421 PRIVATE
  IoPnPDeliverServicePowerNotification@0 @422 PRIVATE
  IoQueryDeviceDescription@32 @423
  IoQueryFileDosDeviceName@0 @424 PRIVATE
  IoQueryFileInformation@0 @425 PRIVATE
  IoQueryVolumeInformation@0 @426 PRIVATE
  IoQueueThreadIrp@0 @427 PRIVATE
  IoQueueWorkItem@16 @428
  IoRaiseHardError@0 @429 PRIVATE
  IoRaiseInformationalHardError@0 @430 PRIVATE
  IoReadDiskSignature@0 @431 PRIVATE
  IoReadOperationCount@0 @432 PRIVATE
  IoReadPartitionTableEx@0 @433 PRIVATE
  IoReadTransferCount@0 @434 PRIVATE
  IoRegisterBootDriverReinitialization@12 @435
  IoRegisterDeviceInterface@16 @436
  IoRegisterDriverReinitialization@12 @437
  IoRegisterFileSystem@4 @438
  IoRegisterFsRegistrationChange@0 @439 PRIVATE
  IoRegisterLastChanceShutdownNotification@0 @440 PRIVATE
  IoRegisterPlugPlayNotification@28 @441
  IoRegisterShutdownNotification@4 @442
  IoReleaseCancelSpinLock@4 @443
  IoReleaseRemoveLockAndWaitEx@12 @444
  IoReleaseRemoveLockEx@12 @445
  IoReleaseVpbSpinLock@0 @446 PRIVATE
  IoRemoveShareAccess@0 @447 PRIVATE
  IoReportDetectedDevice@0 @448 PRIVATE
  IoReportHalResourceUsage@0 @449 PRIVATE
  IoReportResourceForDetection@28 @450
  IoReportResourceUsage@36 @451
  IoReportTargetDeviceChange@0 @452 PRIVATE
  IoReportTargetDeviceChangeAsynchronous@0 @453 PRIVATE
  IoRequestDeviceEject@0 @454 PRIVATE
  IoReuseIrp@8 @455
  IoSetCompletionRoutineEx@0 @456 PRIVATE
  IoSetDeviceInterfaceState@8 @457
  IoSetDeviceToVerify@0 @458 PRIVATE
  IoSetFileOrigin@0 @459 PRIVATE
  IoSetHardErrorOrVerifyDevice@0 @460 PRIVATE
  IoSetInformation@0 @461 PRIVATE
  IoSetIoCompletion@0 @462 PRIVATE
  IoSetPartitionInformationEx@0 @463 PRIVATE
  IoSetShareAccess@0 @464 PRIVATE
  IoSetStartIoAttributes@0 @465 PRIVATE
  IoSetSystemPartition@0 @466 PRIVATE
  IoSetThreadHardErrorMode@4 @467
  IoSetTopLevelIrp@0 @468 PRIVATE
  IoStartNextPacket@8 @469
  IoStartNextPacketByKey@0 @470 PRIVATE
  IoStartPacket@0 @471 PRIVATE
  IoStartTimer@4 @472
  IoStatisticsLock@0 @473 PRIVATE
  IoStopTimer@4 @474
  IoSynchronousInvalidateDeviceRelations@0 @475 PRIVATE
  IoSynchronousPageWrite@0 @476 PRIVATE
  IoThreadToProcess@0 @477 PRIVATE
  IoUnregisterFileSystem@4 @478
  IoUnregisterFsRegistrationChange@0 @479 PRIVATE
  IoUnregisterPlugPlayNotification@4 @480
  IoUnregisterShutdownNotification@4 @481
  IoUpdateShareAccess@0 @482 PRIVATE
  IoValidateDeviceIoControlAccess@0 @483 PRIVATE
  IoVerifyPartitionTable@0 @484 PRIVATE
  IoVerifyVolume@0 @485 PRIVATE
  IoVolumeDeviceToDosName@0 @486 PRIVATE
  IoWMIAllocateInstanceIds@0 @487 PRIVATE
  IoWMIDeviceObjectToInstanceName@0 @488 PRIVATE
  IoWMIExecuteMethod@0 @489 PRIVATE
  IoWMIHandleToInstanceName@0 @490 PRIVATE
  IoWMIOpenBlock@12 @491
  IoWMIQueryAllData@0 @492 PRIVATE
  IoWMIQueryAllDataMultiple@0 @493 PRIVATE
  IoWMIQuerySingleInstance@0 @494 PRIVATE
  IoWMIQuerySingleInstanceMultiple@0 @495 PRIVATE
  IoWMIRegistrationControl@8 @496
  IoWMISetNotificationCallback@0 @497 PRIVATE
  IoWMISetSingleInstance@0 @498 PRIVATE
  IoWMISetSingleItem@0 @499 PRIVATE
  IoWMISuggestInstanceName@0 @500 PRIVATE
  IoWMIWriteEvent@0 @501 PRIVATE
  IoWriteErrorLogEntry@0 @502 PRIVATE
  IoWriteOperationCount@0 @503 PRIVATE
  IoWritePartitionTableEx@0 @504 PRIVATE
  IoWriteTransferCount@0 @505 PRIVATE
  KdDebuggerEnabled @506 DATA
  KdDebuggerNotPresent@0 @507 PRIVATE
  KdDisableDebugger@0 @508 PRIVATE
  KdEnableDebugger@0 @509 PRIVATE
  KdEnteredDebugger@0 @510 PRIVATE
  KdPollBreakIn@0 @511 PRIVATE
  KdPowerTransition@0 @512 PRIVATE
  KdRefreshDebuggerNotPresent@0 @513
  Ke386CallBios@0 @514 PRIVATE
  Ke386IoSetAccessProcess@8 @515
  Ke386QueryIoAccessMap@0 @516 PRIVATE
  Ke386SetIoAccessMap@8 @517
  KeAcquireInterruptSpinLock@0 @518 PRIVATE
  KeAcquireSpinLockAtDpcLevel@4 @519
  KeAddSystemServiceTable@0 @520 PRIVATE
  KeAlertThread@8 @521
  KeAreApcsDisabled@0 @522
  KeAttachProcess@0 @523 PRIVATE
  KeBugCheck@4 @524
  KeBugCheckEx@20 @525
  KeCancelTimer@4 @526
  KeCapturePersistentThreadState@0 @527 PRIVATE
  KeClearEvent@4 @528
  KeConnectInterrupt@0 @529 PRIVATE
  KeDcacheFlushCount@0 @530 PRIVATE
  KeDelayExecutionThread@12 @531
  KeDeregisterBugCheckCallback@0 @532 PRIVATE
  KeDeregisterBugCheckReasonCallback@0 @533 PRIVATE
  KeDetachProcess@0 @534 PRIVATE
  KeDisconnectInterrupt@0 @535 PRIVATE
  KeEnterCriticalRegion@0 @536
  KeEnterKernelDebugger@0 @537 PRIVATE
  KeFindConfigurationEntry@0 @538 PRIVATE
  KeFindConfigurationNextEntry@0 @539 PRIVATE
  KeFlushEntireTb@0 @540 PRIVATE
  KeFlushQueuedDpcs@0 @541
  KeGetCurrentProcessorNumber@0=NtGetCurrentProcessorNumber @542
  KeGetCurrentThread@0 @543
  KeGetPreviousMode@0 @544 PRIVATE
  KeGetRecommendedSharedDataAlignment@0 @545 PRIVATE
  KeI386AbiosCall@0 @546 PRIVATE
  KeI386AllocateGdtSelectors@0 @547 PRIVATE
  KeI386Call16BitCStyleFunction@0 @548 PRIVATE
  KeI386Call16BitFunction@0 @549 PRIVATE
  KeI386FlatToGdtSelector@0 @550 PRIVATE
  KeI386GetLid@0 @551 PRIVATE
  KeI386MachineType@0 @552 PRIVATE
  KeI386ReleaseGdtSelectors@0 @553 PRIVATE
  KeI386ReleaseLid@0 @554 PRIVATE
  KeI386SetGdtSelector@0 @555 PRIVATE
  KeIcacheFlushCount@0 @556 PRIVATE
  KeInitializeApc@32 @557
  KeInitializeDeviceQueue@0 @558 PRIVATE
  KeInitializeDpc@12 @559
  KeInitializeEvent@12 @560
  KeInitializeInterrupt@0 @561 PRIVATE
  KeInitializeMutant@0 @562 PRIVATE
  KeInitializeMutex@8 @563
  KeInitializeQueue@0 @564 PRIVATE
  KeInitializeSemaphore@12 @565
  KeInitializeSpinLock@4 @566
  KeInitializeTimer@4 @567
  KeInitializeTimerEx@8 @568
  KeInsertByKeyDeviceQueue@0 @569 PRIVATE
  KeInsertDeviceQueue@0 @570 PRIVATE
  KeInsertHeadQueue@0 @571 PRIVATE
  KeInsertQueue@8 @572
  KeInsertQueueApc@0 @573 PRIVATE
  KeInsertQueueDpc@0 @574 PRIVATE
  KeIsAttachedProcess@0 @575 PRIVATE
  KeIsExecutingDpc@0 @576 PRIVATE
  KeLeaveCriticalRegion@0 @577
  KeLoaderBlock@0 @578 PRIVATE
  KeNumberProcessors@0 @579 PRIVATE
  KeProfileInterrupt@0 @580 PRIVATE
  KeProfileInterruptWithSource@0 @581 PRIVATE
  KePulseEvent@0 @582 PRIVATE
  KeQueryActiveProcessors@0 @583
  KeQueryActiveProcessorCountEx@4 @584
  KeQueryInterruptTime@0 @585
  KeQueryPriorityThread@0 @586 PRIVATE
  KeQueryRuntimeThread@0 @587 PRIVATE
  KeQuerySystemTime@4 @588
  KeQueryTickCount@4 @589
  KeQueryTimeIncrement@0 @590
  KeRaiseUserException@0 @591 PRIVATE
  KeReadStateEvent@4 @592
  KeReadStateMutant@0 @593 PRIVATE
  KeReadStateMutex@0 @594 PRIVATE
  KeReadStateQueue@0 @595 PRIVATE
  KeReadStateSemaphore@0 @596 PRIVATE
  KeReadStateTimer@0 @597 PRIVATE
  KeRegisterBugCheckCallback@0 @598 PRIVATE
  KeRegisterBugCheckReasonCallback@0 @599 PRIVATE
  KeReleaseInterruptSpinLock@0 @600 PRIVATE
  KeReleaseMutant@0 @601 PRIVATE
  KeReleaseMutex@8 @602
  KeReleaseSemaphore@16 @603
  KeReleaseSpinLockFromDpcLevel@4 @604
  KeRemoveByKeyDeviceQueue@0 @605 PRIVATE
  KeRemoveByKeyDeviceQueueIfBusy@0 @606 PRIVATE
  KeRemoveDeviceQueue@0 @607 PRIVATE
  KeRemoveEntryDeviceQueue@0 @608 PRIVATE
  KeRemoveQueue@0 @609 PRIVATE
  KeRemoveQueueDpc@0 @610 PRIVATE
  KeRemoveSystemServiceTable@0 @611 PRIVATE
  KeResetEvent@4 @612
  KeRestoreFloatingPointState@0 @613 PRIVATE
  KeRevertToUserAffinityThread@0 @614
  KeRevertToUserAffinityThreadEx@4 @615
  KeRundownQueue@0 @616 PRIVATE
  KeSaveFloatingPointState@0 @617 PRIVATE
  KeSaveStateForHibernate@0 @618 PRIVATE
  KeServiceDescriptorTable @619 DATA
  KeSetAffinityThread@0 @620 PRIVATE
  KeSetBasePriorityThread@0 @621 PRIVATE
  KeSetDmaIoCoherency@0 @622 PRIVATE
  KeSetEvent@12 @623
  KeSetEventBoostPriority@0 @624 PRIVATE
  KeSetIdealProcessorThread@0 @625 PRIVATE
  KeSetImportanceDpc@8 @626
  KeSetKernelStackSwapEnable@0 @627 PRIVATE
  KeSetPriorityThread@8 @628
  KeSetProfileIrql@0 @629 PRIVATE
  KeSetSystemAffinityThread@4 @630
  KeSetSystemAffinityThreadEx@4 @631
  KeSetTargetProcessorDpc@8 @632
  KeSetTimeIncrement@0 @633 PRIVATE
  KeSetTimer@16 @634
  KeSetTimerEx@20 @635
  KeStackAttachProcess@8 @636
  KeSynchronizeExecution@0 @637 PRIVATE
  KeTerminateThread@0 @638 PRIVATE
  KeTestAlertThread@4 @639
  KeTickCount @640 DATA
  KeUnstackDetachProcess@4 @641
  KeUpdateRunTime@0 @642 PRIVATE
  KeUpdateSystemTime@0 @643 PRIVATE
  KeUserModeCallback@0 @644 PRIVATE
  KeWaitForMultipleObjects@32 @645
  KeWaitForMutexObject@20 @646
  KeWaitForSingleObject@20 @647
  KiBugCheckData@0 @648 PRIVATE
  KiCoprocessorError@0 @649 PRIVATE
  KiDeliverApc@0 @650 PRIVATE
  KiDispatchInterrupt@0 @651 PRIVATE
  KiEnableTimerWatchdog@0 @652 PRIVATE
  KiIpiServiceRoutine@0 @653 PRIVATE
  KiUnexpectedInterrupt@0 @654 PRIVATE
  LdrAccessResource@16 @655
  LdrEnumResources@0 @656 PRIVATE
  LdrFindResourceDirectory_U@16 @657
  LdrFindResource_U@16 @658
  LpcPortObjectType@0 @659 PRIVATE
  LpcRequestPort@0 @660 PRIVATE
  LpcRequestWaitReplyPort@0 @661 PRIVATE
  LsaCallAuthenticationPackage@0 @662 PRIVATE
  LsaDeregisterLogonProcess@0 @663 PRIVATE
  LsaFreeReturnBuffer@0 @664 PRIVATE
  LsaLogonUser@0 @665 PRIVATE
  LsaLookupAuthenticationPackage@0 @666 PRIVATE
  LsaRegisterLogonProcess@0 @667 PRIVATE
  Mm64BitPhysicalAddress@0 @668 PRIVATE
  MmAddPhysicalMemory@0 @669 PRIVATE
  MmAddVerifierThunks@0 @670 PRIVATE
  MmAdjustWorkingSetSize@0 @671 PRIVATE
  MmAdvanceMdl@0 @672 PRIVATE
  MmAllocateContiguousMemory@12 @673
  MmAllocateContiguousMemorySpecifyCache@32 @674
  MmAllocateMappingAddress@0 @675 PRIVATE
  MmAllocateNonCachedMemory@4 @676
  MmAllocatePagesForMdl@28 @677
  MmBuildMdlForNonPagedPool@4 @678
  MmCanFileBeTruncated@0 @679 PRIVATE
  MmCommitSessionMappedView@0 @680 PRIVATE
  MmCopyVirtualMemory@28 @681
  MmCreateMdl@0 @682 PRIVATE
  MmCreateSection@32 @683
  MmDisableModifiedWriteOfSection@0 @684 PRIVATE
  MmFlushImageSection@0 @685 PRIVATE
  MmForceSectionClosed@0 @686 PRIVATE
  MmFreeContiguousMemory@0 @687 PRIVATE
  MmFreeContiguousMemorySpecifyCache@0 @688 PRIVATE
  MmFreeMappingAddress@0 @689 PRIVATE
  MmFreeNonCachedMemory@8 @690
  MmFreePagesFromMdl@0 @691 PRIVATE
  MmGetPhysicalAddress@0 @692 PRIVATE
  MmGetPhysicalMemoryRanges@0 @693 PRIVATE
  MmGetSystemRoutineAddress@4 @694
  MmGetVirtualForPhysical@0 @695 PRIVATE
  MmGrowKernelStack@0 @696 PRIVATE
  MmHighestUserAddress@0 @697 PRIVATE
  MmIsAddressValid@4 @698
  MmIsDriverVerifying@0 @699 PRIVATE
  MmIsNonPagedSystemAddressValid@0 @700 PRIVATE
  MmIsRecursiveIoFault@0 @701 PRIVATE
  MmIsThisAnNtAsSystem@0 @702
  MmIsVerifierEnabled@0 @703 PRIVATE
  MmLockPagableDataSection@0 @704 PRIVATE
  MmLockPagableImageSection@0 @705 PRIVATE
  MmLockPagableSectionByHandle@4 @706
  MmMapIoSpace@16 @707
  MmMapLockedPages@0 @708 PRIVATE
  MmMapLockedPagesSpecifyCache@24 @709
  MmMapLockedPagesWithReservedMapping@0 @710 PRIVATE
  MmMapMemoryDumpMdl@0 @711 PRIVATE
  MmMapUserAddressesToPage@0 @712 PRIVATE
  MmMapVideoDisplay@0 @713 PRIVATE
  MmMapViewInSessionSpace@0 @714 PRIVATE
  MmMapViewInSystemSpace@0 @715 PRIVATE
  MmMapViewOfSection@0 @716 PRIVATE
  MmMarkPhysicalMemoryAsBad@0 @717 PRIVATE
  MmMarkPhysicalMemoryAsGood@0 @718 PRIVATE
  MmPageEntireDriver@4 @719
  MmPrefetchPages@0 @720 PRIVATE
  MmProbeAndLockPages@12 @721
  MmProbeAndLockProcessPages@0 @722 PRIVATE
  MmProbeAndLockSelectedPages@0 @723 PRIVATE
  MmProtectMdlSystemAddress@0 @724 PRIVATE
  MmQuerySystemSize@0 @725
  MmRemovePhysicalMemory@0 @726 PRIVATE
  MmResetDriverPaging@4 @727
  MmSectionObjectType@0 @728 PRIVATE
  MmSecureVirtualMemory@0 @729 PRIVATE
  MmSetAddressRangeModified@0 @730 PRIVATE
  MmSetBankedSection@0 @731 PRIVATE
  MmSizeOfMdl@0 @732 PRIVATE
  MmSystemRangeStart@0 @733 PRIVATE
  MmTrimAllSystemPagableMemory@0 @734 PRIVATE
  MmUnlockPagableImageSection@4 @735
  MmUnlockPages@4 @736
  MmUnmapIoSpace@8 @737
  MmUnmapLockedPages@8 @738
  MmUnmapReservedMapping@0 @739 PRIVATE
  MmUnmapVideoDisplay@0 @740 PRIVATE
  MmUnmapViewInSessionSpace@0 @741 PRIVATE
  MmUnmapViewInSystemSpace@0 @742 PRIVATE
  MmUnmapViewOfSection@0 @743 PRIVATE
  MmUnsecureVirtualMemory@0 @744 PRIVATE
  MmUserProbeAddress@0 @745 PRIVATE
  NlsAnsiCodePage=ntdll.NlsAnsiCodePage @746 DATA
  NlsLeadByteInfo@0 @747 PRIVATE
  NlsMbCodePageTag=ntdll.NlsMbCodePageTag @748 DATA
  NlsMbOemCodePageTag=ntdll.NlsMbOemCodePageTag @749 DATA
  NlsOemCodePage@0 @750 PRIVATE
  NlsOemLeadByteInfo@0 @751 PRIVATE
  NtAddAtom@12 @752
  NtAdjustPrivilegesToken@24 @753
  NtAllocateLocallyUniqueId@4 @754
  NtAllocateUuids@16 @755
  NtAllocateVirtualMemory@24 @756
  NtBuildNumber @757 DATA
  NtClose@4 @758
  NtConnectPort@32 @759
  NtCreateEvent@20 @760
  NtCreateFile@44 @761
  NtCreateSection@28 @762
  NtDeleteAtom@4 @763
  NtDeleteFile@4 @764
  NtDeviceIoControlFile@40 @765
  NtDuplicateObject@28 @766
  NtDuplicateToken@24 @767
  NtFindAtom@12 @768
  NtFreeVirtualMemory@16 @769
  NtFsControlFile@40 @770
  NtGlobalFlag@0 @771 PRIVATE
  NtLockFile@40 @772
  NtMakePermanentObject@0 @773 PRIVATE
  NtMapViewOfSection@40 @774
  NtNotifyChangeDirectoryFile@36 @775
  NtOpenFile@24 @776
  NtOpenProcess@16 @777
  NtOpenProcessToken@12 @778
  NtOpenProcessTokenEx@16 @779
  NtOpenThread@16 @780
  NtOpenThreadToken@16 @781
  NtOpenThreadTokenEx@20 @782
  NtQueryDirectoryFile@44 @783
  NtQueryEaFile@36 @784
  NtQueryInformationAtom@20 @785
  NtQueryInformationFile@20 @786
  NtQueryInformationProcess@20 @787
  NtQueryInformationThread@20 @788
  NtQueryInformationToken@20 @789
  NtQueryQuotaInformationFile@0 @790 PRIVATE
  NtQuerySecurityObject@20 @791
  NtQuerySystemInformation@16 @792
  NtQuerySystemInformationEx@24 @793
  NtQueryVolumeInformationFile@20 @794
  NtReadFile@36 @795
  NtRequestPort@0 @796 PRIVATE
  NtRequestWaitReplyPort@12 @797
  NtSetEaFile@16 @798
  NtSetEvent@8 @799
  NtSetInformationFile@20 @800
  NtSetInformationProcess@16 @801
  NtSetInformationThread@16 @802
  NtSetInformationToken@16 @803
  NtSetQuotaInformationFile@0 @804 PRIVATE
  NtSetSecurityObject@12 @805
  NtSetVolumeInformationFile@20 @806
  NtShutdownSystem@4 @807
  NtTraceEvent@0 @808 PRIVATE
  NtUnlockFile@20 @809
  NtVdmControl@0 @810 PRIVATE
  NtWaitForSingleObject@12 @811
  NtWriteFile@36 @812
  ObAssignSecurity@0 @813 PRIVATE
  ObCheckCreateObjectAccess@0 @814 PRIVATE
  ObCheckObjectAccess@0 @815 PRIVATE
  ObCloseHandle@0 @816 PRIVATE
  ObCreateObject@0 @817 PRIVATE
  ObCreateObjectType@0 @818 PRIVATE
  ObDereferenceObject@4 @819
  ObDereferenceSecurityDescriptor@0 @820 PRIVATE
  ObFindHandleForObject@0 @821 PRIVATE
  ObGetFilterVersion@0 @822
  ObGetObjectSecurity@0 @823 PRIVATE
  ObGetObjectType@4 @824
  ObInsertObject@0 @825 PRIVATE
  ObLogSecurityDescriptor@0 @826 PRIVATE
  ObMakeTemporaryObject@0 @827 PRIVATE
  ObOpenObjectByName@28 @828
  ObOpenObjectByPointer@28 @829
  ObQueryNameString@16 @830
  ObQueryObjectAuditingByHandle@0 @831 PRIVATE
  ObReferenceObjectByHandle@24 @832
  ObReferenceObjectByName@32 @833
  ObReferenceObjectByPointer@16 @834
  ObReferenceSecurityDescriptor@0 @835 PRIVATE
  ObRegisterCallbacks@8 @836
  ObReleaseObjectSecurity@0 @837 PRIVATE
  ObSetHandleAttributes@0 @838 PRIVATE
  ObSetSecurityDescriptorInfo@0 @839 PRIVATE
  ObSetSecurityObjectByPointer@0 @840 PRIVATE
  ObUnRegisterCallbacks@4 @841
  PfxFindPrefix@0 @842 PRIVATE
  PfxInitialize@0 @843 PRIVATE
  PfxInsertPrefix@0 @844 PRIVATE
  PfxRemovePrefix@0 @845 PRIVATE
  PoCallDriver@8 @846
  PoCancelDeviceNotify@0 @847 PRIVATE
  PoQueueShutdownWorkItem@0 @848 PRIVATE
  PoRegisterDeviceForIdleDetection@0 @849 PRIVATE
  PoRegisterDeviceNotify@0 @850 PRIVATE
  PoRegisterSystemState@0 @851 PRIVATE
  PoRequestPowerIrp@0 @852 PRIVATE
  PoRequestShutdownEvent@0 @853 PRIVATE
  PoSetHiberRange@0 @854 PRIVATE
  PoSetPowerState@12 @855
  PoSetSystemState@0 @856 PRIVATE
  PoShutdownBugCheck@0 @857 PRIVATE
  PoStartNextPowerIrp@4 @858
  PoUnregisterSystemState@0 @859 PRIVATE
  ProbeForRead@12 @860
  ProbeForWrite@12 @861
  PsAcquireProcessExitSynchronization@4 @862
  PsAssignImpersonationToken@0 @863 PRIVATE
  PsChargePoolQuota@0 @864 PRIVATE
  PsChargeProcessNonPagedPoolQuota@0 @865 PRIVATE
  PsChargeProcessPagedPoolQuota@0 @866 PRIVATE
  PsChargeProcessPoolQuota@0 @867 PRIVATE
  PsCreateSystemProcess@0 @868 PRIVATE
  PsCreateSystemThread@28 @869
  PsDereferenceImpersonationToken@0 @870 PRIVATE
  PsDereferencePrimaryToken@0 @871 PRIVATE
  PsDisableImpersonation@0 @872 PRIVATE
  PsEstablishWin32Callouts@0 @873 PRIVATE
  PsGetContextThread@0 @874 PRIVATE
  PsGetCurrentProcess@0=IoGetCurrentProcess @875
  PsGetCurrentProcessId@0 @876
  PsGetCurrentProcessSessionId@0 @877 PRIVATE
  PsGetCurrentThread@0=KeGetCurrentThread @878
  PsGetCurrentThreadId@0 @879
  PsGetCurrentThreadPreviousMode@0 @880 PRIVATE
  PsGetCurrentThreadStackBase@0 @881 PRIVATE
  PsGetCurrentThreadStackLimit@0 @882 PRIVATE
  PsGetJobLock@0 @883 PRIVATE
  PsGetJobSessionId@0 @884 PRIVATE
  PsGetJobUIRestrictionsClass@0 @885 PRIVATE
  PsGetProcessCreateTimeQuadPart@0 @886 PRIVATE
  PsGetProcessDebugPort@0 @887 PRIVATE
  PsGetProcessExitProcessCalled@0 @888 PRIVATE
  PsGetProcessExitStatus@0 @889 PRIVATE
  PsGetProcessExitTime@0 @890 PRIVATE
  PsGetProcessId@4 @891
  PsGetProcessImageFileName@0 @892 PRIVATE
  PsGetProcessInheritedFromUniqueProcessId@4 @893
  PsGetProcessJob@0 @894 PRIVATE
  PsGetProcessPeb@0 @895 PRIVATE
  PsGetProcessPriorityClass@0 @896 PRIVATE
  PsGetProcessSectionBaseAddress@4 @897
  PsGetProcessSecurityPort@0 @898 PRIVATE
  PsGetProcessSessionId@0 @899 PRIVATE
  PsGetProcessWin32Process@0 @900 PRIVATE
  PsGetProcessWin32WindowStation@0 @901 PRIVATE
  PsGetThreadFreezeCount@0 @902 PRIVATE
  PsGetThreadHardErrorsAreDisabled@0 @903 PRIVATE
  PsGetThreadId@4 @904
  PsGetThreadProcess@0 @905 PRIVATE
  PsGetThreadProcessId@4 @906
  PsGetThreadSessionId@0 @907 PRIVATE
  PsGetThreadTeb@0 @908 PRIVATE
  PsGetThreadWin32Thread@0 @909 PRIVATE
  PsGetVersion@16 @910
  PsImpersonateClient@20 @911
  PsInitialSystemProcess @912 DATA
  PsIsProcessBeingDebugged@0 @913 PRIVATE
  PsIsSystemThread@4 @914
  PsIsThreadImpersonating@0 @915 PRIVATE
  PsIsThreadTerminating@0 @916 PRIVATE
  PsJobType@0 @917 PRIVATE
  PsLookupProcessByProcessId@8 @918
  PsLookupProcessThreadByCid@0 @919 PRIVATE
  PsLookupThreadByThreadId@8 @920
  PsProcessType @921 DATA
  PsReferenceImpersonationToken@0 @922 PRIVATE
  PsReferencePrimaryToken@0 @923 PRIVATE
  PsReferenceProcessFilePointer@8 @924
  PsReleaseProcessExitSynchronization@4 @925
  PsRemoveCreateThreadNotifyRoutine@4 @926
  PsRemoveLoadImageNotifyRoutine@4 @927
  PsRestoreImpersonation@0 @928 PRIVATE
  PsResumeProcess@4 @929
  PsReturnPoolQuota@0 @930 PRIVATE
  PsReturnProcessNonPagedPoolQuota@0 @931 PRIVATE
  PsReturnProcessPagedPoolQuota@0 @932 PRIVATE
  PsRevertThreadToSelf@0 @933 PRIVATE
  PsRevertToSelf@0 @934
  PsSetContextThread@0 @935 PRIVATE
  PsSetCreateProcessNotifyRoutine@8 @936
  PsSetCreateProcessNotifyRoutineEx@8 @937
  PsSetCreateThreadNotifyRoutine@4 @938
  PsSetJobUIRestrictionsClass@0 @939 PRIVATE
  PsSetLegoNotifyRoutine@0 @940 PRIVATE
  PsSetLoadImageNotifyRoutine@4 @941
  PsSetProcessPriorityByClass@0 @942 PRIVATE
  PsSetProcessPriorityClass@0 @943 PRIVATE
  PsSetProcessSecurityPort@0 @944 PRIVATE
  PsSetProcessWin32Process@0 @945 PRIVATE
  PsSetProcessWindowStation@0 @946 PRIVATE
  PsSetThreadHardErrorsAreDisabled@0 @947 PRIVATE
  PsSetThreadWin32Thread@0 @948 PRIVATE
  PsSuspendProcess@4 @949
  PsTerminateSystemThread@4 @950
  PsThreadType @951 DATA
  READ_REGISTER_BUFFER_UCHAR@12 @952
  READ_REGISTER_BUFFER_ULONG@0 @953 PRIVATE
  READ_REGISTER_BUFFER_USHORT@0 @954 PRIVATE
  READ_REGISTER_UCHAR@0 @955 PRIVATE
  READ_REGISTER_ULONG@0 @956 PRIVATE
  READ_REGISTER_USHORT@0 @957 PRIVATE
  RtlAbsoluteToSelfRelativeSD@12 @958
  RtlAddAccessAllowedAce@16 @959
  RtlAddAccessAllowedAceEx@20 @960
  RtlAddAccessAllowedObjectAce@28 @961
  RtlAddAccessDeniedAceEx@20 @962
  RtlAddAccessDeniedObjectAce@28 @963
  RtlAddAce@20 @964
  RtlAddAtomToAtomTable@12 @965
  RtlAddAuditAccessAceEx@28 @966
  RtlAddAuditAccessObjectAce@36 @967
  RtlAddRange@0 @968 PRIVATE
  RtlAllocateHeap@12 @969
  RtlAnsiCharToUnicodeChar@4 @970
  RtlAnsiStringToUnicodeSize@4 @971
  RtlAnsiStringToUnicodeString@12 @972
  RtlAppendAsciizToString@8 @973
  RtlAppendStringToString@8 @974
  RtlAppendUnicodeStringToString@8 @975
  RtlAppendUnicodeToString@8 @976
  RtlAreAllAccessesGranted@8 @977
  RtlAreAnyAccessesGranted@8 @978
  RtlAreBitsClear@12 @979
  RtlAreBitsSet@12 @980
  RtlAssert@16 @981
  RtlCaptureContext@4 @982
  RtlCaptureStackBackTrace@16 @983
  RtlCharToInteger@12 @984
  RtlCheckRegistryKey@8 @985
  RtlClearAllBits@4 @986
  RtlClearBit@0 @987 PRIVATE
  RtlClearBits@12 @988
  RtlCompareMemory@12 @989
  RtlCompareMemoryUlong@12 @990
  RtlCompareString@12 @991
  RtlCompareUnicodeString@12 @992
  RtlCompareUnicodeStrings@20 @993
  RtlCompressBuffer@32 @994
  RtlCompressChunks@0 @995 PRIVATE
  RtlComputeCrc32@12 @996
  RtlConvertLongToLargeInteger@4 @997
  RtlConvertSidToUnicodeString@12 @998
  RtlConvertUlongToLargeInteger@4 @999
  RtlCopyLuid@8 @1000
  RtlCopyLuidAndAttributesArray@12 @1001
  RtlCopyRangeList@0 @1002 PRIVATE
  RtlCopySid@12 @1003
  RtlCopyString@8 @1004
  RtlCopyUnicodeString@8 @1005
  RtlCreateAcl@12 @1006
  RtlCreateAtomTable@8 @1007
  RtlCreateHeap@24 @1008
  RtlCreateRegistryKey@8 @1009
  RtlCreateSecurityDescriptor@8 @1010
  RtlCreateSystemVolumeInformationFolder@0 @1011 PRIVATE
  RtlCreateUnicodeString@8 @1012
  RtlCreateUserThread@40 @1013
  RtlCustomCPToUnicodeN@24 @1014
  RtlDecompressBuffer@24 @1015
  RtlDecompressChunks@0 @1016 PRIVATE
  RtlDecompressFragment@32 @1017
  RtlDelete@0 @1018 PRIVATE
  RtlDeleteAce@8 @1019
  RtlDeleteAtomFromAtomTable@8 @1020
  RtlDeleteElementGenericTable@0 @1021 PRIVATE
  RtlDeleteElementGenericTableAvl@0 @1022 PRIVATE
  RtlDeleteNoSplay@0 @1023 PRIVATE
  RtlDeleteOwnersRanges@0 @1024 PRIVATE
  RtlDeleteRange@0 @1025 PRIVATE
  RtlDeleteRegistryValue@12 @1026
  RtlDescribeChunk@0 @1027 PRIVATE
  RtlDestroyAtomTable@4 @1028
  RtlDestroyHeap@4 @1029
  RtlDowncaseUnicodeChar@4 @1030
  RtlDowncaseUnicodeString@12 @1031
  RtlDuplicateUnicodeString@12 @1032
  RtlEmptyAtomTable@8 @1033
  RtlEnlargedIntegerMultiply@8 @1034
  RtlEnlargedUnsignedDivide@16 @1035
  RtlEnlargedUnsignedMultiply@8 @1036
  RtlEnumerateGenericTable@0 @1037 PRIVATE
  RtlEnumerateGenericTableAvl@0 @1038 PRIVATE
  RtlEnumerateGenericTableLikeADirectory@0 @1039 PRIVATE
  RtlEnumerateGenericTableWithoutSplaying@8 @1040
  RtlEnumerateGenericTableWithoutSplayingAvl@0 @1041 PRIVATE
  RtlEqualLuid@8 @1042
  RtlEqualSid@8 @1043
  RtlEqualString@12 @1044
  RtlEqualUnicodeString@12 @1045
  RtlExtendedIntegerMultiply@12 @1046
  RtlExtendedLargeIntegerDivide@16 @1047
  RtlExtendedMagicDivide@20 @1048
  RtlFillMemory@12 @1049
  RtlFillMemoryUlong@12 @1050
  RtlFindClearBits@12 @1051
  RtlFindClearBitsAndSet@12 @1052
  RtlFindClearRuns@16 @1053
  RtlFindFirstRunClear@0 @1054 PRIVATE
  RtlFindLastBackwardRunClear@12 @1055
  RtlFindLeastSignificantBit@8 @1056
  RtlFindLongestRunClear@8 @1057
  RtlFindMessage@20 @1058
  RtlFindMostSignificantBit@8 @1059
  RtlFindNextForwardRunClear@12 @1060
  RtlFindRange@0 @1061 PRIVATE
  RtlFindSetBits@12 @1062
  RtlFindSetBitsAndClear@12 @1063
  RtlFindUnicodePrefix@0 @1064 PRIVATE
  RtlFirstFreeAce@8 @1065
  RtlFormatCurrentUserKeyPath@4 @1066
  RtlFormatMessage@36 @1067
  RtlFormatMessageEx@40 @1068
  RtlFreeAnsiString@4 @1069
  RtlFreeHeap@12 @1070
  RtlFreeOemString@4 @1071
  RtlFreeRangeList@0 @1072 PRIVATE
  RtlFreeUnicodeString@4 @1073
  RtlGUIDFromString@8 @1074
  RtlGenerate8dot3Name@0 @1075 PRIVATE
  RtlGetAce@12 @1076
  RtlGetCallersAddress@0 @1077 PRIVATE
  RtlGetCompressionWorkSpaceSize@12 @1078
  RtlGetControlSecurityDescriptor@12 @1079
  RtlGetDaclSecurityDescriptor@16 @1080
  RtlGetDefaultCodePage@0 @1081 PRIVATE
  RtlGetElementGenericTable@0 @1082 PRIVATE
  RtlGetElementGenericTableAvl@0 @1083 PRIVATE
  RtlGetFirstRange@0 @1084 PRIVATE
  RtlGetGroupSecurityDescriptor@12 @1085
  RtlGetNextRange@0 @1086 PRIVATE
  RtlGetNtGlobalFlags@0 @1087
  RtlGetNtProductType@4 @1088
  RtlGetOwnerSecurityDescriptor@12 @1089
  RtlGetProductInfo@20 @1090
  RtlGetSaclSecurityDescriptor@16 @1091
  RtlGetSetBootStatusData@0 @1092 PRIVATE
  RtlGetVersion@4 @1093
  RtlHashUnicodeString@16 @1094
  RtlIdnToAscii@20 @1095
  RtlIdnToNameprepUnicode@20 @1096
  RtlIdnToUnicode@20 @1097
  RtlImageDirectoryEntryToData@16 @1098
  RtlImageNtHeader@4 @1099
  RtlInitAnsiString@8 @1100
  RtlInitAnsiStringEx@8 @1101
  RtlInitCodePageTable@8 @1102
  RtlInitString@8 @1103
  RtlInitUnicodeString@8 @1104
  RtlInitUnicodeStringEx@8 @1105
  RtlInitializeBitMap@12 @1106
  RtlInitializeGenericTable@20 @1107
  RtlInitializeGenericTableAvl@20 @1108
  RtlInitializeRangeList@0 @1109 PRIVATE
  RtlInitializeSid@12 @1110
  RtlInitializeUnicodePrefix@0 @1111 PRIVATE
  RtlInsertElementGenericTable@0 @1112 PRIVATE
  RtlInsertElementGenericTableAvl@16 @1113
  RtlInsertElementGenericTableFull@0 @1114 PRIVATE
  RtlInsertElementGenericTableFullAvl@0 @1115 PRIVATE
  RtlInsertUnicodePrefix@0 @1116 PRIVATE
  RtlInt64ToUnicodeString@16 @1117
  RtlIntegerToChar@16 @1118
  RtlIntegerToUnicode@0 @1119 PRIVATE
  RtlIntegerToUnicodeString@12 @1120
  RtlInvertRangeList@0 @1121 PRIVATE
  RtlIpv4AddressToStringA@8 @1122
  RtlIpv4AddressToStringExA@16 @1123
  RtlIpv4AddressToStringExW@16 @1124
  RtlIpv4AddressToStringW@8 @1125
  RtlIpv4StringToAddressA@16 @1126
  RtlIpv4StringToAddressExA@16 @1127
  RtlIpv4StringToAddressExW@16 @1128
  RtlIpv4StringToAddressW@16 @1129
  RtlIpv6AddressToStringA@8 @1130
  RtlIpv6AddressToStringExA@20 @1131
  RtlIpv6AddressToStringExW@20 @1132
  RtlIpv6AddressToStringW@8 @1133
  RtlIpv6StringToAddressA@12 @1134
  RtlIpv6StringToAddressExA@16 @1135
  RtlIpv6StringToAddressExW@16 @1136
  RtlIpv6StringToAddressW@12 @1137
  RtlIsGenericTableEmpty@0 @1138 PRIVATE
  RtlIsGenericTableEmptyAvl@0 @1139 PRIVATE
  RtlIsNameLegalDOS8Dot3@12 @1140
  RtlIsNormalizedString@16 @1141
  RtlIsNtDdiVersionAvailable@4 @1142
  RtlIsRangeAvailable@0 @1143 PRIVATE
  RtlIsValidOemCharacter@0 @1144 PRIVATE
  RtlLargeIntegerAdd@16 @1145
  RtlLargeIntegerArithmeticShift@12 @1146
  RtlLargeIntegerDivide@20 @1147
  RtlLargeIntegerNegate@8 @1148
  RtlLargeIntegerShiftLeft@12 @1149
  RtlLargeIntegerShiftRight@12 @1150
  RtlLargeIntegerSubtract@16 @1151
  RtlLargeIntegerToChar@16 @1152
  RtlLengthRequiredSid@4 @1153
  RtlLengthSecurityDescriptor@4 @1154
  RtlLengthSid@4 @1155
  RtlLocalTimeToSystemTime@8 @1156
  RtlLockBootStatusData@0 @1157 PRIVATE
  RtlLookupAtomInAtomTable@12 @1158
  RtlLookupElementGenericTable@0 @1159 PRIVATE
  RtlLookupElementGenericTableAvl@0 @1160 PRIVATE
  RtlLookupElementGenericTableFull@0 @1161 PRIVATE
  RtlLookupElementGenericTableFullAvl@0 @1162 PRIVATE
  RtlMapGenericMask@8 @1163
  RtlMapSecurityErrorToNtStatus@0 @1164 PRIVATE
  RtlMergeRangeLists@0 @1165 PRIVATE
  RtlMoveMemory@12 @1166
  RtlMultiByteToUnicodeN@20 @1167
  RtlMultiByteToUnicodeSize@12 @1168
  RtlNextUnicodePrefix@0 @1169 PRIVATE
  RtlNormalizeString@20 @1170
  RtlNtStatusToDosError@4 @1171
  RtlNtStatusToDosErrorNoTeb@4 @1172
  RtlNumberGenericTableElements@4 @1173
  RtlNumberGenericTableElementsAvl@0 @1174 PRIVATE
  RtlNumberOfClearBits@4 @1175
  RtlNumberOfSetBits@4 @1176
  RtlOemStringToCountedUnicodeString@0 @1177 PRIVATE
  RtlOemStringToUnicodeSize@4 @1178
  RtlOemStringToUnicodeString@12 @1179
  RtlOemToUnicodeN@20 @1180
  RtlOpenCurrentUser@8 @1181
  RtlPcToFileHeader@8 @1182
  RtlPinAtomInAtomTable@8 @1183
  RtlPrefixString@12 @1184
  RtlPrefixUnicodeString@12 @1185
  RtlQueryAtomInAtomTable@24 @1186
  RtlQueryDynamicTimeZoneInformation@4 @1187
  RtlQueryInformationAcl@16 @1188
  RtlQueryPackageIdentity@24 @1189
  RtlQueryRegistryValues@20 @1190
  RtlQueryTimeZoneInformation@4 @1191
  RtlRaiseException@4 @1192
  RtlRaiseStatus@4 @1193
  RtlRandom@4 @1194
  RtlRandomEx@4 @1195
  RtlRealPredecessor@0 @1196 PRIVATE
  RtlRealSuccessor@0 @1197 PRIVATE
  RtlRemoveUnicodePrefix@0 @1198 PRIVATE
  RtlReserveChunk@0 @1199 PRIVATE
  RtlRunOnceBeginInitialize@12 @1200
  RtlRunOnceComplete@12 @1201
  RtlRunOnceExecuteOnce@16 @1202
  RtlRunOnceInitialize@4 @1203
  RtlSecondsSince1970ToTime@8 @1204
  RtlSecondsSince1980ToTime@8 @1205
  RtlSelfRelativeToAbsoluteSD2@0 @1206 PRIVATE
  RtlSelfRelativeToAbsoluteSD@44 @1207
  RtlSetAllBits@4 @1208
  RtlSetBit@0 @1209 PRIVATE
  RtlSetBits@12 @1210
  RtlSetControlSecurityDescriptor@12 @1211
  RtlSetDaclSecurityDescriptor@16 @1212
  RtlSetGroupSecurityDescriptor@12 @1213
  RtlSetOwnerSecurityDescriptor@12 @1214
  RtlSetSaclSecurityDescriptor@16 @1215
  RtlSetTimeZoneInformation@4 @1216
  RtlSizeHeap@12 @1217
  RtlSplay@0 @1218 PRIVATE
  RtlStringFromGUID@8 @1219
  RtlSubAuthorityCountSid@4 @1220
  RtlSubAuthoritySid@8 @1221
  RtlSubtreePredecessor@0 @1222 PRIVATE
  RtlSubtreeSuccessor@0 @1223 PRIVATE
  RtlSystemTimeToLocalTime@8 @1224
  RtlTestBit@0 @1225 PRIVATE
  RtlTimeFieldsToTime@8 @1226
  RtlTimeToElapsedTimeFields@8 @1227
  RtlTimeToSecondsSince1970@8 @1228
  RtlTimeToSecondsSince1980@8 @1229
  RtlTimeToTimeFields@8 @1230
  RtlTraceDatabaseAdd@0 @1231 PRIVATE
  RtlTraceDatabaseCreate@0 @1232 PRIVATE
  RtlTraceDatabaseDestroy@0 @1233 PRIVATE
  RtlTraceDatabaseEnumerate@0 @1234 PRIVATE
  RtlTraceDatabaseFind@0 @1235 PRIVATE
  RtlTraceDatabaseLock@0 @1236 PRIVATE
  RtlTraceDatabaseUnlock@0 @1237 PRIVATE
  RtlTraceDatabaseValidate@0 @1238 PRIVATE
  RtlUTF8ToUnicodeN@20 @1239
  RtlUnicodeStringToAnsiSize@4 @1240
  RtlUnicodeStringToAnsiString@12 @1241
  RtlUnicodeStringToCountedOemString@0 @1242 PRIVATE
  RtlUnicodeStringToInteger@12 @1243
  RtlUnicodeStringToOemSize@4 @1244
  RtlUnicodeStringToOemString@12 @1245
  RtlUnicodeToCustomCPN@24 @1246
  RtlUnicodeToMultiByteN@20 @1247
  RtlUnicodeToMultiByteSize@12 @1248
  RtlUnicodeToOemN@20 @1249
  RtlUnicodeToUTF8N@20 @1250
  RtlUnlockBootStatusData@0 @1251 PRIVATE
  RtlUnwind@16 @1252
  RtlUpcaseUnicodeChar@4 @1253
  RtlUpcaseUnicodeString@12 @1254
  RtlUpcaseUnicodeStringToAnsiString@12 @1255
  RtlUpcaseUnicodeStringToCountedOemString@12 @1256
  RtlUpcaseUnicodeStringToOemString@12 @1257
  RtlUpcaseUnicodeToCustomCPN@24 @1258
  RtlUpcaseUnicodeToMultiByteN@20 @1259
  RtlUpcaseUnicodeToOemN@20 @1260
  RtlUpperChar@4 @1261
  RtlUpperString@8 @1262
  RtlValidAcl@4 @1263
  RtlValidRelativeSecurityDescriptor@12 @1264
  RtlValidSecurityDescriptor@4 @1265
  RtlValidSid@4 @1266
  RtlVerifyVersionInfo@16 @1267
  RtlVolumeDeviceToDosName@0 @1268 PRIVATE
  RtlWalkFrameChain@0 @1269 PRIVATE
  RtlWriteRegistryValue@24 @1270
  RtlZeroHeap@0 @1271 PRIVATE
  RtlZeroMemory@8 @1272
  RtlxAnsiStringToUnicodeSize@4 @1273
  RtlxOemStringToUnicodeSize@4 @1274
  RtlxUnicodeStringToAnsiSize@4 @1275
  RtlxUnicodeStringToOemSize@4 @1276
  SeAccessCheck@0 @1277 PRIVATE
  SeAppendPrivileges@0 @1278 PRIVATE
  SeAssignSecurity@0 @1279 PRIVATE
  SeAssignSecurityEx@0 @1280 PRIVATE
  SeAuditHardLinkCreation@0 @1281 PRIVATE
  SeAuditingFileEvents@0 @1282 PRIVATE
  SeAuditingFileEventsWithContext@0 @1283 PRIVATE
  SeAuditingFileOrGlobalEvents@0 @1284 PRIVATE
  SeAuditingHardLinkEvents@0 @1285 PRIVATE
  SeAuditingHardLinkEventsWithContext@0 @1286 PRIVATE
  SeCaptureSecurityDescriptor@0 @1287 PRIVATE
  SeCaptureSubjectContext@0 @1288 PRIVATE
  SeCloseObjectAuditAlarm@0 @1289 PRIVATE
  SeCreateAccessState@0 @1290 PRIVATE
  SeCreateClientSecurity@0 @1291 PRIVATE
  SeCreateClientSecurityFromSubjectContext@0 @1292 PRIVATE
  SeDeassignSecurity@0 @1293 PRIVATE
  SeDeleteAccessState@0 @1294 PRIVATE
  SeDeleteObjectAuditAlarm@0 @1295 PRIVATE
  SeExports@0 @1296 PRIVATE
  SeFilterToken@0 @1297 PRIVATE
  SeFreePrivileges@0 @1298 PRIVATE
  SeImpersonateClient@0 @1299 PRIVATE
  SeImpersonateClientEx@0 @1300 PRIVATE
  SeLocateProcessImageName@8 @1301
  SeLockSubjectContext@0 @1302 PRIVATE
  SeMarkLogonSessionForTerminationNotification@0 @1303 PRIVATE
  SeOpenObjectAuditAlarm@0 @1304 PRIVATE
  SeOpenObjectForDeleteAuditAlarm@0 @1305 PRIVATE
  SePrivilegeCheck@12 @1306
  SePrivilegeObjectAuditAlarm@0 @1307 PRIVATE
  SePublicDefaultDacl@0 @1308 PRIVATE
  SeQueryAuthenticationIdToken@0 @1309 PRIVATE
  SeQueryInformationToken@0 @1310 PRIVATE
  SeQuerySecurityDescriptorInfo@0 @1311 PRIVATE
  SeQuerySessionIdToken@0 @1312 PRIVATE
  SeRegisterLogonSessionTerminatedRoutine@0 @1313 PRIVATE
  SeReleaseSecurityDescriptor@0 @1314 PRIVATE
  SeReleaseSubjectContext@0 @1315 PRIVATE
  SeSetAccessStateGenericMapping@0 @1316 PRIVATE
  SeSetSecurityDescriptorInfo@0 @1317 PRIVATE
  SeSetSecurityDescriptorInfoEx@0 @1318 PRIVATE
  SeSinglePrivilegeCheck@12 @1319
  SeSystemDefaultDacl@0 @1320 PRIVATE
  SeTokenImpersonationLevel@0 @1321 PRIVATE
  SeTokenIsAdmin@0 @1322 PRIVATE
  SeTokenIsRestricted@0 @1323 PRIVATE
  SeTokenIsWriteRestricted@0 @1324 PRIVATE
  SeTokenObjectType @1325 DATA
  SeTokenType@0 @1326 PRIVATE
  SeUnlockSubjectContext@0 @1327 PRIVATE
  SeUnregisterLogonSessionTerminatedRoutine@0 @1328 PRIVATE
  SeValidSecurityDescriptor@0 @1329 PRIVATE
  VerSetConditionMask@16 @1330
  VfFailDeviceNode@0 @1331 PRIVATE
  VfFailDriver@0 @1332 PRIVATE
  VfFailSystemBIOS@0 @1333 PRIVATE
  VfIsVerificationEnabled@0 @1334 PRIVATE
  WRITE_REGISTER_BUFFER_UCHAR@0 @1335 PRIVATE
  WRITE_REGISTER_BUFFER_ULONG@0 @1336 PRIVATE
  WRITE_REGISTER_BUFFER_USHORT@0 @1337 PRIVATE
  WRITE_REGISTER_UCHAR@0 @1338 PRIVATE
  WRITE_REGISTER_ULONG@0 @1339 PRIVATE
  WRITE_REGISTER_USHORT@0 @1340 PRIVATE
  WmiFlushTrace@0 @1341 PRIVATE
  WmiQueryTrace@0 @1342 PRIVATE
  WmiQueryTraceInformation@0 @1343 PRIVATE
  WmiStartTrace@0 @1344 PRIVATE
  WmiStopTrace@0 @1345 PRIVATE
  WmiTraceMessage@0 @1346 PRIVATE
  WmiTraceMessageVa@0 @1347 PRIVATE
  WmiUpdateTrace@0 @1348 PRIVATE
  XIPDispatch@0 @1349 PRIVATE
  ZwAccessCheckAndAuditAlarm@44=NtAccessCheckAndAuditAlarm @1350 PRIVATE
  ZwAddBootEntry@0 @1351 PRIVATE
  ZwAdjustPrivilegesToken@24=NtAdjustPrivilegesToken @1352 PRIVATE
  ZwAlertThread@4=NtAlertThread @1353 PRIVATE
  ZwAllocateLocallyUniqueId@4=NtAllocateLocallyUniqueId @1354 PRIVATE
  ZwAllocateVirtualMemory@24=NtAllocateVirtualMemory @1355 PRIVATE
  ZwAssignProcessToJobObject@8=NtAssignProcessToJobObject @1356 PRIVATE
  ZwCancelIoFile@8=NtCancelIoFile @1357 PRIVATE
  ZwCancelIoFileEx@12=NtCancelIoFileEx @1358 PRIVATE
  ZwCancelTimer@8=NtCancelTimer @1359 PRIVATE
  ZwClearEvent@4=NtClearEvent @1360 PRIVATE
  ZwClose@4=NtClose @1361
  ZwCloseObjectAuditAlarm@0 @1362 PRIVATE
  ZwConnectPort@32=NtConnectPort @1363 PRIVATE
  ZwCreateDirectoryObject@12=NtCreateDirectoryObject @1364
  ZwCreateEvent@20=NtCreateEvent @1365
  ZwCreateFile@44=NtCreateFile @1366
  ZwCreateIoCompletion@16=NtCreateIoCompletion @1367 PRIVATE
  ZwCreateJobObject@12=NtCreateJobObject @1368 PRIVATE
  ZwCreateKey@28=NtCreateKey @1369 PRIVATE
  ZwCreateKeyTransacted@32=NtCreateKeyTransacted @1370 PRIVATE
  ZwCreateSection@28=NtCreateSection @1371 PRIVATE
  ZwCreateSymbolicLinkObject@16=NtCreateSymbolicLinkObject @1372 PRIVATE
  ZwCreateTimer@16=NtCreateTimer @1373 PRIVATE
  ZwDeleteBootEntry@0 @1374 PRIVATE
  ZwDeleteFile@4=NtDeleteFile @1375 PRIVATE
  ZwDeleteKey@4=NtDeleteKey @1376 PRIVATE
  ZwDeleteValueKey@8=NtDeleteValueKey @1377 PRIVATE
  ZwDeviceIoControlFile@40=NtDeviceIoControlFile @1378 PRIVATE
  ZwDisplayString@4=NtDisplayString @1379 PRIVATE
  ZwDuplicateObject@28=NtDuplicateObject @1380
  ZwDuplicateToken@24=NtDuplicateToken @1381 PRIVATE
  ZwEnumerateBootEntries@0 @1382 PRIVATE
  ZwEnumerateKey@24=NtEnumerateKey @1383 PRIVATE
  ZwEnumerateValueKey@24=NtEnumerateValueKey @1384 PRIVATE
  ZwFlushBuffersFile@8=NtFlushBuffersFile @1385 PRIVATE
  ZwFlushInstructionCache@12=NtFlushInstructionCache @1386 PRIVATE
  ZwFlushKey@4=NtFlushKey @1387 PRIVATE
  ZwFlushVirtualMemory@16=NtFlushVirtualMemory @1388 PRIVATE
  ZwFreeVirtualMemory@16=NtFreeVirtualMemory @1389 PRIVATE
  ZwFsControlFile@40=NtFsControlFile @1390 PRIVATE
  ZwImpersonateAnonymousToken@4=NtImpersonateAnonymousToken @1391 PRIVATE
  ZwInitiatePowerAction@16=NtInitiatePowerAction @1392 PRIVATE
  ZwIsProcessInJob@8=NtIsProcessInJob @1393 PRIVATE
  ZwLoadDriver@4 @1394
  ZwLoadKey@8=NtLoadKey @1395 PRIVATE
  ZwLockFile@40=NtLockFile @1396 PRIVATE
  ZwLockVirtualMemory@16=NtLockVirtualMemory @1397 PRIVATE
  ZwMakeTemporaryObject@4=NtMakeTemporaryObject @1398
  ZwMapViewOfSection@40=NtMapViewOfSection @1399 PRIVATE
  ZwNotifyChangeDirectoryFile@36=NtNotifyChangeDirectoryFile @1400 PRIVATE
  ZwNotifyChangeKey@40=NtNotifyChangeKey @1401 PRIVATE
  ZwOpenDirectoryObject@12=NtOpenDirectoryObject @1402
  ZwOpenEvent@12=NtOpenEvent @1403 PRIVATE
  ZwOpenFile@24=NtOpenFile @1404
  ZwOpenJobObject@12=NtOpenJobObject @1405 PRIVATE
  ZwOpenKey@12=NtOpenKey @1406 PRIVATE
  ZwOpenKeyEx@16=NtOpenKeyEx @1407 PRIVATE
  ZwOpenKeyTransacted@16=NtOpenKeyTransacted @1408 PRIVATE
  ZwOpenKeyTransactedEx@20=NtOpenKeyTransactedEx @1409 PRIVATE
  ZwOpenProcess@16=NtOpenProcess @1410 PRIVATE
  ZwOpenProcessToken@12=NtOpenProcessToken @1411 PRIVATE
  ZwOpenProcessTokenEx@16=NtOpenProcessTokenEx @1412 PRIVATE
  ZwOpenSection@12=NtOpenSection @1413 PRIVATE
  ZwOpenSymbolicLinkObject@12=NtOpenSymbolicLinkObject @1414 PRIVATE
  ZwOpenThread@16=NtOpenThread @1415 PRIVATE
  ZwOpenThreadToken@16=NtOpenThreadToken @1416 PRIVATE
  ZwOpenThreadTokenEx@20=NtOpenThreadTokenEx @1417 PRIVATE
  ZwOpenTimer@12=NtOpenTimer @1418 PRIVATE
  ZwPowerInformation@20=NtPowerInformation @1419 PRIVATE
  ZwProtectVirtualMemory@20=NtProtectVirtualMemory @1420 PRIVATE
  ZwPulseEvent@8=NtPulseEvent @1421 PRIVATE
  ZwQueryBootEntryOrder@0 @1422 PRIVATE
  ZwQueryBootOptions@0 @1423 PRIVATE
  ZwQueryDefaultLocale@8=NtQueryDefaultLocale @1424 PRIVATE
  ZwQueryDefaultUILanguage@4=NtQueryDefaultUILanguage @1425 PRIVATE
  ZwQueryDirectoryFile@44=NtQueryDirectoryFile @1426 PRIVATE
  ZwQueryDirectoryObject@28=NtQueryDirectoryObject @1427 PRIVATE
  ZwQueryEaFile@36=NtQueryEaFile @1428 PRIVATE
  ZwQueryFullAttributesFile@8=NtQueryFullAttributesFile @1429 PRIVATE
  ZwQueryInformationFile@20=NtQueryInformationFile @1430 PRIVATE
  ZwQueryInformationJobObject@20=NtQueryInformationJobObject @1431 PRIVATE
  ZwQueryInformationProcess@20=NtQueryInformationProcess @1432
  ZwQueryInformationThread@20=NtQueryInformationThread @1433 PRIVATE
  ZwQueryInformationToken@20=NtQueryInformationToken @1434 PRIVATE
  ZwQueryInstallUILanguage@4=NtQueryInstallUILanguage @1435 PRIVATE
  ZwQueryKey@20=NtQueryKey @1436 PRIVATE
  ZwQueryLicenseValue@20=NtQueryLicenseValue @1437 PRIVATE
  ZwQueryObject@20=NtQueryObject @1438 PRIVATE
  ZwQuerySection@20=NtQuerySection @1439 PRIVATE
  ZwQuerySecurityObject@20=NtQuerySecurityObject @1440 PRIVATE
  ZwQuerySymbolicLinkObject@12=NtQuerySymbolicLinkObject @1441 PRIVATE
  ZwQuerySystemEnvironmentValueEx@20=NtQuerySystemEnvironmentValueEx @1442 PRIVATE
  ZwQuerySystemInformation@16=NtQuerySystemInformation @1443 PRIVATE
  ZwQuerySystemInformationEx@24=NtQuerySystemInformationEx @1444 PRIVATE
  ZwQueryTimerResolution@12=NtQueryTimerResolution @1445 PRIVATE
  ZwQueryValueKey@24=NtQueryValueKey @1446 PRIVATE
  ZwQueryVirtualMemory@24=NtQueryVirtualMemory @1447 PRIVATE
  ZwQueryVolumeInformationFile@20=NtQueryVolumeInformationFile @1448 PRIVATE
  ZwReadFile@36=NtReadFile @1449 PRIVATE
  ZwRemoveIoCompletion@20=NtRemoveIoCompletion @1450 PRIVATE
  ZwRemoveIoCompletionEx@24=NtRemoveIoCompletionEx @1451 PRIVATE
  ZwRenameKey@8=NtRenameKey @1452 PRIVATE
  ZwReplaceKey@12=NtReplaceKey @1453 PRIVATE
  ZwRequestWaitReplyPort@12=NtRequestWaitReplyPort @1454 PRIVATE
  ZwResetEvent@8=NtResetEvent @1455 PRIVATE
  ZwRestoreKey@12=NtRestoreKey @1456 PRIVATE
  ZwSaveKey@8=NtSaveKey @1457 PRIVATE
  ZwSaveKeyEx@0 @1458 PRIVATE
  ZwSecureConnectPort@36=NtSecureConnectPort @1459 PRIVATE
  ZwSetBootEntryOrder@0 @1460 PRIVATE
  ZwSetBootOptions@0 @1461 PRIVATE
  ZwSetDefaultLocale@8=NtSetDefaultLocale @1462 PRIVATE
  ZwSetDefaultUILanguage@4=NtSetDefaultUILanguage @1463 PRIVATE
  ZwSetEaFile@16=NtSetEaFile @1464 PRIVATE
  ZwSetEvent@8=NtSetEvent @1465
  ZwSetInformationFile@20=NtSetInformationFile @1466 PRIVATE
  ZwSetInformationJobObject@16=NtSetInformationJobObject @1467 PRIVATE
  ZwSetInformationKey@16=NtSetInformationKey @1468 PRIVATE
  ZwSetInformationObject@16=NtSetInformationObject @1469 PRIVATE
  ZwSetInformationProcess@16=NtSetInformationProcess @1470 PRIVATE
  ZwSetInformationThread@16=NtSetInformationThread @1471 PRIVATE
  ZwSetInformationToken@16=NtSetInformationToken @1472 PRIVATE
  ZwSetIntervalProfile@8=NtSetIntervalProfile @1473 PRIVATE
  ZwSetIoCompletion@20=NtSetIoCompletion @1474 PRIVATE
  ZwSetSecurityObject@12=NtSetSecurityObject @1475 PRIVATE
  ZwSetSystemInformation@12=NtSetSystemInformation @1476 PRIVATE
  ZwSetSystemTime@8=NtSetSystemTime @1477 PRIVATE
  ZwSetTimer@28=NtSetTimer @1478 PRIVATE
  ZwSetTimerResolution@12=NtSetTimerResolution @1479 PRIVATE
  ZwSetValueKey@24=NtSetValueKey @1480 PRIVATE
  ZwSetVolumeInformationFile@20=NtSetVolumeInformationFile @1481 PRIVATE
  ZwTerminateJobObject@8=NtTerminateJobObject @1482 PRIVATE
  ZwTerminateProcess@8=NtTerminateProcess @1483 PRIVATE
  ZwTranslateFilePath@0 @1484 PRIVATE
  ZwUnloadDriver@4 @1485
  ZwUnloadKey@4=NtUnloadKey @1486 PRIVATE
  ZwUnlockFile@20=NtUnlockFile @1487 PRIVATE
  ZwUnlockVirtualMemory@16=NtUnlockVirtualMemory @1488 PRIVATE
  ZwUnmapViewOfSection@8=NtUnmapViewOfSection @1489 PRIVATE
  ZwWaitForMultipleObjects@20=NtWaitForMultipleObjects @1490 PRIVATE
  ZwWaitForSingleObject@12=NtWaitForSingleObject @1491
  ZwWriteFile@36=NtWriteFile @1492
  ZwYieldExecution@0=NtYieldExecution @1493 PRIVATE
  _CIcos @1494 PRIVATE
  _CIsin @1495 PRIVATE
  _CIsqrt @1496 PRIVATE
  _abnormal_termination @1497 PRIVATE
  _alldiv @1498
  _alldvrm @1499
  _allmul @1500
  _alloca_probe @1501
  _allrem @1502
  _allshl@12 @1503
  _allshr@12 @1504
  _aulldiv @1505
  _aulldvrm @1506
  _aullrem @1507
  _aullshr@12 @1508
  _chkstk @1509
  _except_handler2 @1510
  _except_handler3 @1511
  _finite @1512
  _global_unwind2 @1513
  _i64toa_s @1514
  _i64tow_s @1515
  _itoa @1516
  _itoa_s @1517
  _itow @1518
  _itow_s @1519
  _local_unwind2 @1520
  _ltoa_s @1521
  _ltow_s @1522
  _makepath_s @1523
  _purecall @1524
  _setjmp @1525
  _snprintf @1526
  _snprintf_s @1527
  _snscanf_s @1528
  _snwprintf @1529
  _snwprintf_s @1530
  _snwscanf_s @1531
  _splitpath_s @1532
  _stricmp @1533
  _strlwr @1534
  _strnicmp @1535
  _strnset @1536
  _strnset_s @1537
  _strrev @1538
  _strset @1539
  _strtoui64 @1540
  _strupr @1541
  _swprintf @1542
  _ui64toa_s @1543
  _ui64tow_s @1544
  _ultoa_s @1545
  _ultow_s @1546
  _vsnprintf @1547
  _vsnprintf_s @1548
  _vsnwprintf @1549
  _vsnwprintf_s @1550
  _vswprintf @1551
  _wcsicmp @1552
  _wcslwr @1553
  _wcslwr_s @1554
  _wcsnicmp @1555
  _wcsnset @1556
  _wcsnset_s @1557
  _wcsrev @1558
  _wcsset_s @1559
  _wcsupr @1560
  _wmakepath_s @1561
  _wsplitpath_s @1562
  _wtoi @1563
  _wtol @1564
  atoi @1565
  atol @1566
  bsearch @1567
  bsearch_s @1568
  isdigit @1569
  islower @1570
  isprint @1571
  isspace @1572
  isupper @1573
  iswalnum @1574
  iswdigit @1575
  iswspace @1576
  isxdigit @1577
  longjmp @1578
  mbstowcs @1579
  mbtowc @1580
  memchr @1581
  memcmp @1582
  memcpy @1583
  memcpy_s @1584
  memmove @1585
  memmove_s @1586
  memset @1587
  qsort @1588
  qsort_s @1589
  rand @1590
  sprintf @1591
  sprintf_s @1592
  sqrt @1593
  srand @1594
  sscanf_s @1595
  strcat @1596
  strcat_s @1597
  strchr @1598
  strcmp @1599
  strcpy @1600
  strcpy_s @1601
  strlen @1602
  strncat @1603
  strncat_s @1604
  strncmp @1605
  strncpy @1606
  strncpy_s @1607
  strnlen @1608
  strrchr @1609
  strspn @1610
  strstr @1611
  strtok_s @1612
  swprintf @1613
  swprintf_s @1614
  swscanf_s @1615
  tolower @1616
  toupper @1617
  towlower @1618
  towupper @1619
  vDbgPrintEx@16 @1620
  vDbgPrintExWithPrefix@20 @1621
  vsprintf @1622
  vsprintf_s @1623
  vswprintf_s @1624
  wcscat @1625
  wcscat_s @1626
  wcschr @1627
  wcscmp @1628
  wcscpy @1629
  wcscpy_s @1630
  wcscspn @1631
  wcslen @1632
  wcsncat @1633
  wcsncat_s @1634
  wcsncmp @1635
  wcsncpy @1636
  wcsncpy_s @1637
  wcsnlen @1638
  wcsrchr @1639
  wcsspn @1640
  wcsstr @1641
  wcstombs @1642
  wcstoul @1643
  wctomb @1644
  wine_ntoskrnl_main_loop @1645
