Use a .spec file for ntoskrnl.

Keep specific .def for ARM, as long as it has not been tested

svn path=/trunk/; revision=35261

diff --git a/reactos/ntoskrnl/ntoskrnl-generic.rbuild b/reactos/ntoskrnl/ntoskrnl-generic.rbuild
index 5e0a14b..3f72f59 100644 (file)
--- a/reactos/ntoskrnl/ntoskrnl-generic.rbuild
+++ b/reactos/ntoskrnl/ntoskrnl-generic.rbuild
@@ -2,7 +2,12 @@
 <!DOCTYPE module SYSTEM "../tools/rbuild/project.dtd">
 <group xmlns:xi="http://www.w3.org/2001/XInclude">
        <bootstrap installbase="$(CDOUTPUT)" />
-       <importlibrary definition="ntoskrnl_$(ARCH).def" />
+       <ifnot property="ARCH" value="arm">
+               <importlibrary definition="ntoskrnl.spec.def" />
+       </ifnot>
+       <if property="ARCH" value="arm">
+               <importlibrary definition="ntoskrnl_arm.def" />
+       </if>
        <define name="_DISABLE_TIDENTS" />
        <define name="__NTOSKRNL__" />
        <define name="_NTOSKRNL_" />
@@ -465,5 +470,6 @@
                <file>wmi.c</file>
        </directory>
        <file>ntoskrnl.rc</file>
+       <file>ntoskrnl.spec</file>
        <linkerscript>ntoskrnl_$(ARCH).lnk</linkerscript>
 </group>

diff --git a/reactos/ntoskrnl/ntoskrnl.spec b/reactos/ntoskrnl/ntoskrnl.spec
new file mode 100644 (file)
index 0000000..f37251e
--- /dev/null
+++ b/reactos/ntoskrnl/ntoskrnl.spec
@@ -0,0 +1,1591 @@
+#include "include/reactos/msvctarget.h"
+
+@ stdcall CcCanIWrite(ptr long long long)
+@ stdcall CcCopyRead(ptr ptr long long ptr ptr)
+@ stdcall CcCopyWrite(ptr ptr long long ptr)
+@ stdcall CcDeferWrite(ptr ptr ptr ptr long long)
+@ stdcall CcFastCopyRead(ptr long long long ptr ptr)
+@ stdcall CcFastCopyWrite(ptr long long ptr)
+@ extern CcFastMdlReadWait
+@ extern CcFastReadNotPossible
+@ extern CcFastReadWait
+@ stdcall CcFlushCache(ptr ptr long ptr)
+@ stdcall CcGetDirtyPages(ptr ptr ptr ptr)
+@ stdcall CcGetFileObjectFromBcb(ptr)
+@ stdcall CcGetFileObjectFromSectionPtrs(ptr)
+@ stdcall CcGetFlushedValidData(ptr long)
+@ stdcall CcGetLsnForFileObject(ptr ptr)
+@ stdcall CcInitializeCacheMap(ptr ptr long ptr ptr)
+@ stdcall CcIsThereDirtyData(ptr)
+@ stdcall CcMapData(ptr ptr long long ptr ptr)
+@ stdcall CcMdlRead(ptr ptr long ptr ptr)
+@ stdcall CcMdlReadComplete(ptr ptr)
+@ stdcall CcMdlWriteAbort(ptr ptr)
+@ stdcall CcMdlWriteComplete(ptr ptr ptr)
+@ stdcall CcPinMappedData(ptr ptr long long ptr)
+@ stdcall CcPinRead(ptr ptr long long ptr ptr)
+@ stdcall CcPrepareMdlWrite(ptr ptr long ptr ptr)
+@ stdcall CcPreparePinWrite(ptr ptr long long long ptr ptr)
+@ stdcall CcPurgeCacheSection(ptr ptr long long)
+@ stdcall CcRemapBcb(ptr)
+@ stdcall CcRepinBcb(ptr)
+@ stdcall CcScheduleReadAhead(ptr ptr long)
+@ stdcall CcSetAdditionalCacheAttributes(ptr long long)
+@ stdcall CcSetBcbOwnerPointer(ptr ptr)
+@ stdcall CcSetDirtyPageThreshold(ptr long)
+@ stdcall CcSetDirtyPinnedData(ptr ptr)
+@ stdcall CcSetFileSizes(ptr ptr)
+@ stdcall CcSetLogHandleForFile(ptr ptr ptr)
+@ stdcall CcSetReadAheadGranularity(ptr long)
+@ stdcall CcUninitializeCacheMap(ptr ptr ptr)
+@ stdcall CcUnpinData(ptr)
+@ stdcall CcUnpinDataForThread(ptr ptr)
+@ stdcall CcUnpinRepinnedBcb(ptr long ptr)
+@ stdcall CcWaitForCurrentLazyWriterActivity()
+@ stdcall CcZeroData(ptr ptr ptr long)
+@ stdcall CmRegisterCallback(ptr ptr ptr)
+@ stdcall CmUnRegisterCallback(long long)
+@ stdcall DbgBreakPoint()
+@ stdcall DbgBreakPointWithStatus(long)
+;DbgCommandString
+@ stdcall DbgLoadImageSymbols(ptr ptr long)
+@ cdecl DbgPrint(str)
+@ cdecl DbgPrintEx(long long str)
+@ cdecl DbgPrintReturnControlC(str)
+@ stdcall DbgPrompt(str ptr long)
+@ stdcall DbgQueryDebugFilterState(long long)
+@ stdcall DbgSetDebugFilterState(long long long)
+@ fastcall ExAcquireFastMutexUnsafe(ptr)
+@ stdcall ExAcquireResourceExclusiveLite(ptr long)
+@ stdcall ExAcquireResourceSharedLite(ptr long)
+@ fastcall ExAcquireRundownProtection(ptr) ExfAcquireRundownProtection
+@ fastcall ExAcquireRundownProtectionCacheAware(ptr) ExfAcquireRundownProtectionCacheAware
+@ fastcall ExAcquireRundownProtectionCacheAwareEx(ptr long) ExfAcquireRundownProtectionCacheAwareEx
+@ fastcall ExAcquireRundownProtectionEx(ptr long) ExfAcquireRundownProtectionEx
+@ stdcall ExAcquireSharedStarveExclusive(ptr long)
+@ stdcall ExAcquireSharedWaitForExclusive(ptr long)
+@ stdcall ExAllocateCacheAwareRundownProtection(long long)
+@ stdcall ExAllocateFromPagedLookasideList(ptr) ExiAllocateFromPagedLookasideList
+@ stdcall ExAllocatePool(long long)
+@ stdcall ExAllocatePoolWithQuota(long long)
+@ stdcall ExAllocatePoolWithQuotaTag(long long long)
+@ stdcall ExAllocatePoolWithTag(long long long)
+@ stdcall ExAllocatePoolWithTagPriority(long long long long)
+@ stdcall ExConvertExclusiveToSharedLite(ptr)
+@ stdcall ExCreateCallback(ptr ptr long long)
+@ stdcall ExDeleteNPagedLookasideList(ptr)
+@ stdcall ExDeletePagedLookasideList(ptr)
+@ stdcall ExDeleteResourceLite(ptr)
+@ extern ExDesktopObjectType
+@ stdcall ExDisableResourceBoostLite(ptr)
+@ fastcall ExEnterCriticalRegionAndAcquireFastMutexUnsafe(ptr)
+@ stdcall ExEnterCriticalRegionAndAcquireResourceExclusive(ptr)
+;ExEnterCriticalRegionAndAcquireResourceShared
+;ExEnterCriticalRegionAndAcquireSharedWaitForExclusive
+@ stdcall ExEnumHandleTable(ptr ptr ptr ptr)
+@ extern ExEventObjectType _ExEventObjectType
+@ stdcall ExExtendZone(ptr ptr long)
+@ stdcall ExFreeCacheAwareRundownProtection(ptr)
+@ stdcall ExFreePool(ptr)
+@ stdcall ExFreePoolWithTag(ptr long)
+@ stdcall ExFreeToPagedLookasideList(ptr ptr) ExiFreeToPagedLookasideList
+@ stdcall ExGetCurrentProcessorCounts(ptr ptr ptr)
+@ stdcall ExGetCurrentProcessorCpuUsage(ptr)
+@ stdcall ExGetExclusiveWaiterCount(ptr)
+@ stdcall ExGetPreviousMode()
+@ stdcall ExGetSharedWaiterCount(ptr)
+@ stdcall ExInitializeNPagedLookasideList(ptr ptr ptr long long long long)
+@ stdcall ExInitializePagedLookasideList(ptr ptr ptr long long long long)
+@ stdcall ExInitializeResourceLite(ptr)
+@ fastcall ExInitializeRundownProtection(ptr) ExfInitializeRundownProtection
+@ stdcall ExInitializeRundownProtectionCacheAware(ptr long)
+@ stdcall ExInitializeZone(ptr long ptr long)
+@ stdcall ExInterlockedAddLargeInteger(ptr long long ptr)
+@ fastcall ExInterlockedAddLargeStatistic(ptr long)
+@ stdcall ExInterlockedAddUlong(ptr long ptr)
+@ fastcall ExInterlockedCompareExchange64(ptr ptr ptr ptr)
+@ stdcall ExInterlockedDecrementLong(ptr ptr)
+@ stdcall ExInterlockedExchangeUlong(ptr long ptr)
+@ stdcall ExInterlockedExtendZone(ptr ptr long ptr)
+@ fastcall ExInterlockedFlushSList(ptr)
+@ stdcall ExInterlockedIncrementLong(ptr ptr)
+@ stdcall ExInterlockedInsertHeadList(ptr ptr ptr)
+@ stdcall ExInterlockedInsertTailList(ptr ptr ptr)
+@ stdcall ExInterlockedPopEntryList(ptr ptr)
+@ fastcall ExInterlockedPopEntrySList(ptr ptr)
+@ stdcall ExInterlockedPushEntryList(ptr ptr ptr)
+@ fastcall ExInterlockedPushEntrySList(ptr ptr ptr)
+@ stdcall ExInterlockedRemoveHeadList(ptr ptr)
+@ stdcall ExIsProcessorFeaturePresent(long)
+@ stdcall ExIsResourceAcquiredExclusiveLite(ptr)
+@ stdcall ExIsResourceAcquiredSharedLite(ptr)
+@ stdcall ExLocalTimeToSystemTime(ptr ptr)
+@ stdcall ExNotifyCallback(ptr ptr ptr)
+@ stdcall ExQueryPoolBlockSize(ptr ptr)
+@ stdcall ExQueueWorkItem(ptr long)
+@ stdcall ExRaiseAccessViolation()
+@ stdcall ExRaiseDatatypeMisalignment()
+@ stdcall ExRaiseException(ptr) RtlRaiseException
+@ stdcall ExRaiseHardError(long long long ptr long ptr)
+@ stdcall ExRaiseStatus(long) RtlRaiseStatus
+@ fastcall ExReInitializeRundownProtection(ptr) ExfReInitializeRundownProtection
+@ fastcall ExReInitializeRundownProtectionCacheAware(ptr) ExfReInitializeRundownProtectionCacheAware
+@ stdcall ExRegisterCallback(ptr ptr ptr)
+@ stdcall ExReinitializeResourceLite(ptr)
+@ fastcall ExReleaseFastMutexUnsafe(ptr)
+@ fastcall ExReleaseFastMutexUnsafeAndLeaveCriticalRegion(ptr)
+@ fastcall ExReleaseResourceAndLeaveCriticalRegion(ptr)
+@ stdcall ExReleaseResourceForThreadLite(ptr long)
+@ fastcall ExReleaseResourceLite(ptr)
+@ fastcall ExReleaseRundownProtection(ptr) ExfReleaseRundownProtection
+@ fastcall ExReleaseRundownProtectionCacheAware(ptr) ExfReleaseRundownProtectionCacheAware
+@ fastcall ExReleaseRundownProtectionCacheAwareEx(ptr long) ExfReleaseRundownProtectionCacheAwareEx
+@ fastcall ExReleaseRundownProtectionEx(ptr long) ExfReleaseRundownProtectionEx
+@ fastcall ExRundownCompleted(ptr) ExfRundownCompleted
+@ fastcall ExRundownCompletedCacheAware(ptr) ExfRundownCompletedCacheAware
+@ extern ExSemaphoreObjectType _ExSemaphoreObjectType
+@ stdcall ExSetResourceOwnerPointer(ptr ptr)
+@ stdcall ExSetTimerResolution(long long)
+@ stdcall ExSizeOfRundownProtectionCacheAware()
+@ stdcall ExSystemExceptionFilter()
+@ stdcall ExSystemTimeToLocalTime(ptr ptr)
+@ stdcall ExUnregisterCallback(ptr)
+@ stdcall ExUuidCreate(ptr)
+@ stdcall ExVerifySuite(long)
+@ fastcall ExWaitForRundownProtectionRelease(ptr) ExfWaitForRundownProtectionRelease
+@ fastcall ExWaitForRundownProtectionReleaseCacheAware(ptr) ExfWaitForRundownProtectionReleaseCacheAware
+@ extern ExWindowStationObjectType
+@ fastcall ExfAcquirePushLockExclusive(ptr)
+@ fastcall ExfAcquirePushLockShared(ptr)
+@ fastcall ExfInterlockedAddUlong(ptr long ptr)
+@ fastcall ExfInterlockedCompareExchange64(ptr ptr ptr)
+@ fastcall ExfInterlockedInsertHeadList(ptr ptr ptr)
+@ fastcall ExfInterlockedInsertTailList(ptr ptr ptr)
+@ fastcall ExfInterlockedPopEntryList(ptr ptr)
+@ fastcall ExfInterlockedPushEntryList(ptr ptr ptr)
+@ fastcall ExfInterlockedRemoveHeadList(ptr ptr)
+@ fastcall ExfReleasePushLock(ptr)
+@ fastcall ExfReleasePushLockExclusive(ptr)
+@ fastcall ExfReleasePushLockShared(ptr)
+@ fastcall ExfTryToWakePushLock(ptr)
+@ fastcall ExfUnblockPushLock(ptr ptr)
+@ fastcall Exfi386InterlockedDecrementLong(ptr)
+@ fastcall Exfi386InterlockedExchangeUlong(ptr long)
+@ fastcall Exfi386InterlockedIncrementLong(ptr)
+@ stdcall Exi386InterlockedDecrementLong(ptr)
+@ stdcall Exi386InterlockedExchangeUlong(ptr long long)
+@ stdcall Exi386InterlockedIncrementLong(ptr)
+@ fastcall ExiAcquireFastMutex(ptr) ExAcquireFastMutex
+@ fastcall ExiReleaseFastMutex(ptr) ExReleaseFastMutex
+@ fastcall ExiTryToAcquireFastMutex(ptr) ExTryToAcquireFastMutex
+@ stdcall FsRtlAcquireFileExclusive(ptr)
+;FsRtlAddBaseMcbEntry
+@ stdcall FsRtlAddLargeMcbEntry(ptr long long long long long long)
+@ stdcall FsRtlAddMcbEntry(ptr long long long)
+@ stdcall FsRtlAddToTunnelCache(ptr long long ptr ptr long long ptr)
+@ stdcall FsRtlAllocateFileLock(ptr ptr)
+@ stdcall FsRtlAllocatePool(long long)
+@ stdcall FsRtlAllocatePoolWithQuota(long long)
+@ stdcall FsRtlAllocatePoolWithQuotaTag(long long long)
+@ stdcall FsRtlAllocatePoolWithTag(long long long)
+@ stdcall FsRtlAllocateResource()
+@ stdcall FsRtlAreNamesEqual(ptr ptr long wstr)
+@ stdcall FsRtlBalanceReads(ptr)
+@ stdcall FsRtlCheckLockForReadAccess(ptr ptr)
+@ stdcall FsRtlCheckLockForWriteAccess(ptr ptr)
+@ stdcall FsRtlCheckOplock(ptr ptr ptr ptr ptr)
+@ stdcall FsRtlCopyRead(ptr ptr long long long ptr ptr ptr)
+@ stdcall FsRtlCopyWrite(ptr ptr long long long ptr ptr ptr)
+@ stdcall FsRtlCreateSectionForDataScan(ptr ptr ptr ptr long ptr ptr long long long)
+@ stdcall FsRtlCurrentBatchOplock(ptr)
+@ stdcall FsRtlDeleteKeyFromTunnelCache(ptr long long)
+@ stdcall FsRtlDeleteTunnelCache(ptr)
+@ stdcall FsRtlDeregisterUncProvider(ptr)
+@ stdcall FsRtlDissectDbcs(long ptr ptr ptr)
+@ stdcall FsRtlDissectName(long ptr ptr ptr)
+@ stdcall FsRtlDoesDbcsContainWildCards(ptr)
+@ stdcall FsRtlDoesNameContainWildCards(ptr)
+@ stdcall FsRtlFastCheckLockForRead(ptr ptr ptr long ptr ptr)
+@ stdcall FsRtlFastCheckLockForWrite(ptr ptr ptr long ptr ptr)
+@ stdcall FsRtlFastUnlockAll(ptr ptr ptr ptr)
+@ stdcall FsRtlFastUnlockAllByKey(ptr ptr ptr long ptr)
+@ stdcall FsRtlFastUnlockSingle(ptr ptr ptr ptr ptr long ptr long)
+@ stdcall FsRtlFindInTunnelCache(ptr long long ptr ptr ptr ptr ptr)
+@ stdcall FsRtlFreeFileLock(ptr)
+@ stdcall FsRtlGetFileSize(ptr ptr)
+;FsRtlGetNextBaseMcbEntry
+@ stdcall FsRtlGetNextFileLock(ptr long)
+@ stdcall FsRtlGetNextLargeMcbEntry(ptr long ptr ptr ptr)
+@ stdcall FsRtlGetNextMcbEntry(ptr long ptr ptr ptr)
+@ stdcall FsRtlIncrementCcFastReadNoWait()
+@ stdcall FsRtlIncrementCcFastReadNotPossible()
+@ stdcall FsRtlIncrementCcFastReadResourceMiss()
+@ stdcall FsRtlIncrementCcFastReadWait()
+;FsRtlInitializeBaseMcb
+@ stdcall FsRtlInitializeFileLock(ptr ptr ptr)
+@ stdcall FsRtlInitializeLargeMcb(ptr long)
+@ stdcall FsRtlInitializeMcb(ptr long)
+@ stdcall FsRtlInitializeOplock(ptr)
+@ stdcall FsRtlInitializeTunnelCache(ptr)
+@ stdcall FsRtlInsertPerFileObjectContext(ptr ptr)
+@ stdcall FsRtlInsertPerStreamContext(ptr ptr)
+@ stdcall FsRtlIsDbcsInExpression(ptr ptr)
+@ stdcall FsRtlIsFatDbcsLegal(long ptr long long long)
+@ stdcall FsRtlIsHpfsDbcsLegal(long ptr long long long)
+@ stdcall FsRtlIsNameInExpression(ptr ptr long wstr)
+@ stdcall FsRtlIsNtstatusExpected(long)
+@ stdcall FsRtlIsPagingFile(ptr)
+@ stdcall FsRtlIsTotalDeviceFailure(ptr)
+@ extern FsRtlLegalAnsiCharacterArray _FsRtlLegalAnsiCharacterArray
+;FsRtlLookupBaseMcbEntry
+@ stdcall FsRtlLookupLargeMcbEntry(ptr long long ptr ptr ptr ptr ptr)
+;FsRtlLookupLastBaseMcbEntry
+;FsRtlLookupLastBaseMcbEntryAndIndex
+@ stdcall FsRtlLookupLastLargeMcbEntry(ptr ptr ptr)
+@ stdcall FsRtlLookupLastLargeMcbEntryAndIndex(ptr ptr ptr ptr)
+@ stdcall FsRtlLookupLastMcbEntry(ptr ptr ptr)
+@ stdcall FsRtlLookupMcbEntry(ptr long ptr ptr ptr)
+@ stdcall FsRtlLookupPerFileObjectContext(ptr ptr ptr)
+@ stdcall FsRtlLookupPerStreamContextInternal(ptr ptr ptr)
+@ stdcall FsRtlMdlRead(ptr ptr long long ptr ptr)
+@ stdcall FsRtlMdlReadComplete(ptr ptr)
+@ stdcall FsRtlMdlReadCompleteDev(ptr ptr ptr)
+@ stdcall FsRtlMdlReadDev(ptr ptr long long ptr ptr ptr)
+@ stdcall FsRtlMdlWriteComplete(ptr ptr ptr)
+@ stdcall FsRtlMdlWriteCompleteDev(ptr ptr ptr ptr)
+@ stdcall FsRtlNormalizeNtstatus(long long)
+@ stdcall FsRtlNotifyChangeDirectory(ptr ptr ptr ptr long long ptr)
+@ stdcall FsRtlNotifyCleanup(ptr ptr ptr)
+@ stdcall FsRtlNotifyFilterChangeDirectory(ptr ptr ptr ptr long long long ptr ptr ptr ptr)
+@ stdcall FsRtlNotifyFilterReportChange(ptr ptr ptr long ptr ptr long long ptr ptr)
+@ stdcall FsRtlNotifyFullChangeDirectory(ptr ptr ptr ptr long long long ptr ptr ptr)
+@ stdcall FsRtlNotifyFullReportChange(ptr ptr ptr long ptr ptr long long ptr)
+@ stdcall FsRtlNotifyInitializeSync(ptr)
+@ stdcall FsRtlNotifyReportChange(ptr ptr ptr ptr long)
+@ stdcall FsRtlNotifyUninitializeSync(ptr)
+@ stdcall FsRtlNotifyVolumeEvent(ptr long)
+;FsRtlNumberOfRunsInBaseMcb
+@ stdcall FsRtlNumberOfRunsInLargeMcb(ptr)
+@ stdcall FsRtlNumberOfRunsInMcb(ptr)
+@ stdcall FsRtlOplockFsctrl(ptr ptr long)
+@ stdcall FsRtlOplockIsFastIoPossible(ptr)
+@ stdcall FsRtlPostPagingFileStackOverflow(ptr ptr ptr)
+@ stdcall FsRtlPostStackOverflow(ptr ptr ptr)
+@ stdcall FsRtlPrepareMdlWrite(ptr ptr long long ptr ptr)
+@ stdcall FsRtlPrepareMdlWriteDev(ptr ptr long long ptr ptr ptr)
+@ stdcall FsRtlPrivateLock(ptr ptr ptr ptr ptr long long long ptr ptr ptr long)
+@ stdcall FsRtlProcessFileLock(ptr ptr ptr)
+@ stdcall FsRtlRegisterFileSystemFilterCallbacks(ptr ptr)
+@ stdcall FsRtlRegisterUncProvider(ptr ptr long)
+@ stdcall FsRtlReleaseFile(ptr)
+;FsRtlRemoveBaseMcbEntry
+@ stdcall FsRtlRemoveLargeMcbEntry(ptr long long long long)
+@ stdcall FsRtlRemoveMcbEntry(ptr long long)
+@ stdcall FsRtlRemovePerFileObjectContext(ptr ptr ptr)
+@ stdcall FsRtlRemovePerStreamContext(ptr ptr ptr)
+;FsRtlResetBaseMcb
+@ stdcall FsRtlResetLargeMcb(ptr long)
+;FsRtlSplitBaseMcb
+@ stdcall FsRtlSplitLargeMcb(ptr long long long long)
+@ stdcall FsRtlSyncVolumes(long long long)
+@ stdcall FsRtlTeardownPerStreamContexts(ptr)
+;FsRtlTruncateBaseMcb
+@ stdcall FsRtlTruncateLargeMcb(ptr long long)
+@ stdcall FsRtlTruncateMcb(ptr long)
+;FsRtlUninitializeBaseMcb
+@ stdcall FsRtlUninitializeFileLock(ptr)
+@ stdcall FsRtlUninitializeLargeMcb(ptr)
+@ stdcall FsRtlUninitializeMcb(ptr)
+@ stdcall FsRtlUninitializeOplock(ptr)
+@ extern HalDispatchTable _HalDispatchTable
+@ fastcall HalExamineMBR(ptr long long ptr)
+@ extern HalPrivateDispatchTable
+;HeadlessDispatch
+@ stdcall InbvAcquireDisplayOwnership()
+@ stdcall InbvCheckDisplayOwnership()
+@ stdcall InbvDisplayString(str)
+@ stdcall InbvEnableBootDriver(long)
+@ stdcall InbvEnableDisplayString(long)
+@ stdcall InbvInstallDisplayStringFilter(ptr)
+@ stdcall InbvIsBootDriverInstalled()
+@ stdcall InbvNotifyDisplayOwnershipLost(ptr)
+@ stdcall InbvResetDisplay()
+@ stdcall InbvSetScrollRegion(long long long long)
+@ stdcall InbvSetTextColor(long)
+@ stdcall InbvSolidColorFill(long long long long long)
+@ extern InitSafeBootMode
+@ fastcall InterlockedCompareExchange(ptr long long)
+@ fastcall InterlockedDecrement(ptr)
+@ fastcall InterlockedExchange(ptr long)
+@ fastcall InterlockedExchangeAdd(ptr long)
+@ fastcall InterlockedIncrement(ptr)
+@ fastcall InterlockedPopEntrySList(ptr)
+@ fastcall InterlockedPushEntrySList(ptr ptr)
+@ stdcall IoAcquireCancelSpinLock(ptr)
+@ stdcall IoAcquireRemoveLockEx(ptr ptr str long long)
+@ stdcall IoAcquireVpbSpinLock(ptr)
+@ extern IoAdapterObjectType
+@ stdcall IoAllocateAdapterChannel(ptr ptr long ptr ptr)
+@ stdcall IoAllocateController(ptr ptr ptr ptr)
+@ stdcall IoAllocateDriverObjectExtension(ptr ptr long ptr)
+@ stdcall IoAllocateErrorLogEntry(ptr long)
+@ stdcall IoAllocateIrp(long long)
+@ stdcall IoAllocateMdl(ptr long long long ptr)
+@ stdcall IoAllocateWorkItem(ptr)
+@ fastcall IoAssignDriveLetters(ptr ptr ptr ptr)
+@ stdcall IoAssignResources(ptr ptr ptr ptr ptr ptr)
+@ stdcall IoAttachDevice(ptr ptr ptr)
+@ stdcall IoAttachDeviceByPointer(ptr ptr)
+@ stdcall IoAttachDeviceToDeviceStack(ptr ptr)
+@ stdcall IoAttachDeviceToDeviceStackSafe(ptr ptr ptr)
+@ stdcall IoBuildAsynchronousFsdRequest(long ptr ptr long ptr ptr)
+@ stdcall IoBuildDeviceIoControlRequest(long ptr ptr long ptr long long ptr ptr)
+@ stdcall IoBuildPartialMdl(ptr ptr ptr long)
+@ stdcall IoBuildSynchronousFsdRequest(long ptr ptr long ptr ptr ptr)
+@ stdcall IoCallDriver(ptr ptr)
+@ stdcall IoCancelFileOpen(ptr ptr)
+@ stdcall IoCancelIrp(ptr)
+@ stdcall IoCheckDesiredAccess(ptr long)
+@ stdcall IoCheckEaBufferValidity(ptr long ptr)
+@ stdcall IoCheckFunctionAccess(long long long long ptr ptr)
+@ stdcall IoCheckQuerySetFileInformation(long long long)
+@ stdcall IoCheckQuerySetVolumeInformation(long long long)
+@ stdcall IoCheckQuotaBufferValidity(ptr long ptr)
+@ stdcall IoCheckShareAccess(long long ptr ptr long)
+@ stdcall IoCompleteRequest(ptr long)
+@ stdcall IoConnectInterrupt(ptr ptr ptr ptr long long long long long long long)
+@ stdcall IoCreateController(long)
+@ stdcall IoCreateDevice(ptr long ptr long long long ptr)
+@ stdcall IoCreateDisk(ptr ptr)
+@ stdcall IoCreateDriver(ptr ptr)
+@ stdcall IoCreateFile(ptr long ptr ptr ptr long long long long ptr long long ptr long)
+@ stdcall IoCreateFileSpecifyDeviceObjectHint(ptr long ptr ptr ptr long long long long ptr long long ptr long ptr)
+@ stdcall IoCreateNotificationEvent(ptr ptr)
+@ stdcall IoCreateStreamFileObject(ptr ptr)
+@ stdcall IoCreateStreamFileObjectEx(ptr ptr ptr)
+@ stdcall IoCreateStreamFileObjectLite(ptr ptr)
+@ stdcall IoCreateSymbolicLink(ptr ptr)
+@ stdcall IoCreateSynchronizationEvent(ptr ptr)
+@ stdcall IoCreateUnprotectedSymbolicLink(ptr ptr)
+@ stdcall IoCsqInitialize(ptr ptr ptr ptr ptr ptr ptr)
+@ stdcall IoCsqInitializeEx(ptr ptr ptr ptr ptr ptr ptr)
+@ stdcall IoCsqInsertIrp(ptr ptr ptr)
+@ stdcall IoCsqInsertIrpEx(ptr ptr ptr ptr)
+@ stdcall IoCsqRemoveIrp(ptr ptr)
+@ stdcall IoCsqRemoveNextIrp(ptr ptr)
+@ stdcall IoDeleteController(ptr)
+@ stdcall IoDeleteDevice(ptr)
+@ stdcall IoDeleteDriver(ptr)
+@ stdcall IoDeleteSymbolicLink(ptr)
+@ stdcall IoDetachDevice(ptr)
+@ extern IoDeviceHandlerObjectSize
+@ extern IoDeviceHandlerObjectType
+@ extern IoDeviceObjectType
+@ stdcall IoDisconnectInterrupt(ptr)
+@ extern IoDriverObjectType
+@ stdcall IoEnqueueIrp(ptr)
+@ stdcall IoEnumerateDeviceObjectList(ptr ptr long ptr)
+@ stdcall IoEnumerateRegisteredFiltersList(ptr long ptr)
+@ stdcall IoFastQueryNetworkAttributes(ptr long long ptr ptr)
+@ extern IoFileObjectType _IoFileObjectType
+@ stdcall IoForwardAndCatchIrp(ptr ptr) IoForwardIrpSynchronously
+@ stdcall IoForwardIrpSynchronously(ptr ptr)
+@ stdcall IoFreeController(ptr)
+@ stdcall IoFreeErrorLogEntry(ptr)
+@ stdcall IoFreeIrp(ptr)
+@ stdcall IoFreeMdl(ptr)
+@ stdcall IoFreeWorkItem(ptr)
+@ stdcall IoGetAttachedDevice(ptr)
+@ stdcall IoGetAttachedDeviceReference(ptr)
+@ stdcall IoGetBaseFileSystemDeviceObject(ptr)
+@ stdcall IoGetBootDiskInformation(ptr long)
+@ stdcall IoGetConfigurationInformation()
+@ stdcall IoGetCurrentProcess()
+@ stdcall IoGetDeviceAttachmentBaseRef(ptr)
+@ stdcall IoGetDeviceInterfaceAlias(ptr ptr ptr)
+@ stdcall IoGetDeviceInterfaces(ptr ptr long ptr)
+@ stdcall IoGetDeviceObjectPointer(ptr long ptr ptr)
+@ stdcall IoGetDeviceProperty(ptr long long ptr ptr)
+@ stdcall IoGetDeviceToVerify(ptr)
+@ stdcall IoGetDiskDeviceObject(ptr ptr)
+@ stdcall IoGetDmaAdapter(ptr ptr ptr)
+@ stdcall IoGetDriverObjectExtension(ptr ptr)
+@ stdcall IoGetFileObjectGenericMapping()
+@ stdcall IoGetInitialStack()
+@ stdcall IoGetLowerDeviceObject(ptr)
+@ stdcall IoGetPagingIoPriority(ptr)
+@ stdcall IoGetRelatedDeviceObject(ptr)
+@ stdcall IoGetRequestorProcess(ptr)
+@ stdcall IoGetRequestorProcessId(ptr)
+@ stdcall IoGetRequestorSessionId(ptr ptr)
+@ stdcall IoGetStackLimits(ptr ptr)
+@ stdcall IoGetTopLevelIrp()
+@ stdcall IoInitializeIrp(ptr long long)
+@ stdcall IoInitializeRemoveLockEx(ptr long long long long)
+@ stdcall IoInitializeTimer(ptr ptr ptr)
+@ stdcall IoInvalidateDeviceRelations(ptr long)
+@ stdcall IoInvalidateDeviceState(ptr)
+@ stdcall IoIsFileOriginRemote(ptr)
+@ stdcall IoIsOperationSynchronous(ptr)
+@ stdcall IoIsSystemThread(ptr)
+@ stdcall IoIsValidNameGraftingBuffer(ptr ptr)
+@ stdcall IoIsWdmVersionAvailable(long long)
+@ stdcall IoMakeAssociatedIrp(ptr long)
+@ stdcall IoOpenDeviceInterfaceRegistryKey(ptr long ptr)
+@ stdcall IoOpenDeviceRegistryKey(ptr long long ptr)
+@ stdcall IoPageRead(ptr ptr ptr ptr ptr)
+@ stdcall IoPnPDeliverServicePowerNotification(long long long long)
+@ stdcall IoQueryDeviceDescription(ptr ptr ptr ptr ptr ptr ptr ptr)
+@ stdcall IoQueryFileDosDeviceName(ptr ptr)
+@ stdcall IoQueryFileInformation(ptr long long ptr ptr)
+@ stdcall IoQueryVolumeInformation(ptr long long ptr ptr)
+@ stdcall IoQueueThreadIrp(ptr)
+@ stdcall IoQueueWorkItem(ptr ptr long ptr)
+@ stdcall IoRaiseHardError(ptr ptr ptr)
+@ stdcall IoRaiseInformationalHardError(long ptr ptr)
+@ stdcall IoReadDiskSignature(ptr long ptr)
+@ extern IoReadOperationCount
+@ fastcall IoReadPartitionTable(ptr long long ptr)
+@ stdcall IoReadPartitionTableEx(ptr ptr)
+@ extern IoReadTransferCount
+@ stdcall IoRegisterBootDriverReinitialization(ptr ptr ptr)
+@ stdcall IoRegisterDeviceInterface(ptr ptr ptr ptr)
+@ stdcall IoRegisterDriverReinitialization(ptr ptr ptr)
+@ stdcall IoRegisterFileSystem(ptr)
+@ stdcall IoRegisterFsRegistrationChange(ptr ptr)
+@ stdcall IoRegisterLastChanceShutdownNotification(ptr)
+@ stdcall IoRegisterPlugPlayNotification(long long ptr ptr ptr ptr ptr)
+@ stdcall IoRegisterShutdownNotification(ptr)
+@ stdcall IoReleaseCancelSpinLock(long)
+@ stdcall IoReleaseRemoveLockAndWaitEx(ptr ptr long)
+@ stdcall IoReleaseRemoveLockEx(ptr ptr long)
+@ stdcall IoReleaseVpbSpinLock(long)
+@ stdcall IoRemoveShareAccess(ptr ptr)
+@ stdcall IoReportDetectedDevice(ptr long long long ptr ptr long ptr)
+@ stdcall IoReportHalResourceUsage(ptr ptr ptr long)
+@ stdcall IoReportResourceForDetection(ptr ptr long ptr ptr long ptr)
+@ stdcall IoReportResourceUsage(ptr ptr ptr long ptr ptr long long ptr)
+@ stdcall IoReportTargetDeviceChange(ptr ptr)
+@ stdcall IoReportTargetDeviceChangeAsynchronous(ptr ptr ptr ptr)
+@ stdcall IoRequestDeviceEject(ptr)
+@ stdcall IoReuseIrp(ptr long)
+@ stdcall IoSetCompletionRoutineEx(ptr ptr ptr ptr long long long)
+@ stdcall IoSetDeviceInterfaceState(ptr long)
+@ stdcall IoSetDeviceToVerify(ptr ptr)
+@ stdcall IoSetFileOrigin(ptr long)
+@ stdcall IoSetHardErrorOrVerifyDevice(ptr ptr)
+@ stdcall IoSetInformation(ptr ptr long ptr)
+@ stdcall IoSetIoCompletion(ptr ptr ptr long ptr long)
+@ fastcall IoSetPartitionInformation(ptr long long long)
+@ stdcall IoSetPartitionInformationEx(ptr long ptr)
+@ stdcall IoSetShareAccess(long long ptr ptr)
+@ stdcall IoSetStartIoAttributes(ptr long long)
+@ stdcall IoSetSystemPartition(ptr)
+@ stdcall IoSetThreadHardErrorMode(long)
+@ stdcall IoSetTopLevelIrp(ptr)
+@ stdcall IoStartNextPacket(ptr long)
+@ stdcall IoStartNextPacketByKey(ptr long long)
+@ stdcall IoStartPacket(ptr ptr ptr ptr)
+@ stdcall IoStartTimer(ptr)
+@ extern IoStatisticsLock
+@ stdcall IoStopTimer(ptr)
+@ stdcall IoSynchronousInvalidateDeviceRelations(ptr long)
+@ stdcall IoSynchronousPageWrite(ptr ptr ptr ptr ptr)
+@ stdcall IoThreadToProcess(ptr)
+;IoTranslateBusAddress
+@ stdcall IoUnregisterFileSystem(ptr)
+@ stdcall IoUnregisterFsRegistrationChange(ptr ptr)
+@ stdcall IoUnregisterPlugPlayNotification(ptr)
+@ stdcall IoUnregisterShutdownNotification(ptr)
+@ stdcall IoUpdateShareAccess(ptr ptr)
+@ stdcall IoValidateDeviceIoControlAccess(ptr long)
+@ stdcall IoVerifyPartitionTable(ptr long)
+@ stdcall IoVerifyVolume(ptr long)
+@ stdcall IoVolumeDeviceToDosName(ptr ptr)
+@ stdcall IoWMIAllocateInstanceIds(ptr long ptr)
+@ stdcall IoWMIDeviceObjectToInstanceName(ptr ptr ptr)
+@ stdcall IoWMIExecuteMethod(ptr ptr long long ptr ptr)
+@ stdcall IoWMIHandleToInstanceName(ptr ptr ptr)
+@ stdcall IoWMIOpenBlock(ptr long ptr)
+@ stdcall IoWMIQueryAllData(ptr ptr ptr)
+@ stdcall IoWMIQueryAllDataMultiple(ptr long ptr ptr)
+@ stdcall IoWMIQuerySingleInstance(ptr ptr ptr ptr)
+@ stdcall IoWMIQuerySingleInstanceMultiple(ptr ptr long ptr ptr)
+@ stdcall IoWMIRegistrationControl(ptr long)
+@ stdcall IoWMISetNotificationCallback(ptr ptr ptr)
+@ stdcall IoWMISetSingleInstance(ptr ptr long long ptr)
+@ stdcall IoWMISetSingleItem(ptr ptr long long long ptr)
+@ stdcall IoWMISuggestInstanceName(ptr ptr long ptr)
+@ stdcall IoWMIWriteEvent(ptr)
+@ stdcall IoWriteErrorLogEntry(ptr)
+@ extern IoWriteOperationCount
+@ fastcall IoWritePartitionTable(ptr long long long ptr)
+@ stdcall IoWritePartitionTableEx(ptr ptr)
+@ extern IoWriteTransferCount
+@ fastcall IofCallDriver(ptr ptr)
+@ fastcall IofCompleteRequest(ptr long)
+@ stdcall KdChangeOption(long long ptr long ptr ptr)
+@ extern KdDebuggerEnabled _KdDebuggerEnabled
+@ extern KdDebuggerNotPresent _KdDebuggerNotPresent
+@ stdcall KdDisableDebugger()
+@ stdcall KdEnableDebugger()
+@ extern KdEnteredDebugger
+@ stdcall KdPollBreakIn()
+@ stdcall KdPowerTransition(long)
+@ stdcall KdRefreshDebuggerNotPresent()
+@ stdcall KdSystemDebugControl(long ptr long ptr long ptr long)
+@ stdcall Ke386CallBios(long ptr)
+;Ke386IoSetAccessProcess
+;Ke386QueryIoAccessMap
+;Ke386SetIoAccessMap
+@ fastcall KeAcquireGuardedMutex(ptr)
+@ fastcall KeAcquireGuardedMutexUnsafe(ptr)
+@ fastcall KeAcquireInStackQueuedSpinLockAtDpcLevel(ptr ptr)
+@ fastcall KeAcquireInStackQueuedSpinLockForDpc(ptr ptr)
+@ stdcall KeAcquireInterruptSpinLock(ptr)
+@ stdcall KeAcquireSpinLockAtDpcLevel(ptr)
+@ fastcall KeAcquireSpinLockForDpc(ptr)
+@ stdcall KeAddSystemServiceTable(ptr ptr long ptr long)
+@ stdcall KeAreAllApcsDisabled()
+@ stdcall KeAreApcsDisabled()
+@ stdcall KeAttachProcess(ptr)
+@ stdcall KeBugCheck(long)
+@ stdcall KeBugCheckEx(long ptr ptr ptr ptr)
+@ stdcall KeCancelTimer(ptr)
+@ stdcall KeCapturePersistentThreadState(ptr long long long long long ptr)
+@ stdcall KeClearEvent(ptr)
+@ stdcall KeConnectInterrupt(ptr)
+@ stdcall KeDelayExecutionThread(long long ptr)
+@ stdcall KeDeregisterBugCheckCallback(ptr)
+@ stdcall KeDeregisterBugCheckReasonCallback(ptr)
+@ stdcall KeDeregisterNmiCallback(ptr)
+@ stdcall KeDetachProcess()
+@ stdcall KeDisconnectInterrupt(ptr)
+@ stdcall KeEnterCriticalRegion() _KeEnterCriticalRegion
+@ stdcall KeEnterGuardedRegion() _KeEnterGuardedRegion
+@ stdcall KeEnterKernelDebugger()
+@ stdcall KeFindConfigurationEntry(ptr long long ptr)
+@ stdcall KeFindConfigurationNextEntry(ptr long long ptr ptr)
+@ stdcall KeFlushEntireTb(long long)
+@ stdcall KeFlushQueuedDpcs()
+;KeGenericCallDpc
+@ stdcall KeGetCurrentThread()
+@ stdcall KeGetPreviousMode()
+@ stdcall KeGetRecommendedSharedDataAlignment()
+;KeI386AbiosCall
+@ stdcall KeI386AllocateGdtSelectors(ptr long)
+;KeI386Call16BitCStyleFunction
+;KeI386Call16BitFunction
+@ stdcall KeI386FlatToGdtSelector(long long long)
+;KeI386GetLid
+@ extern KeI386MachineType
+@ stdcall KeI386ReleaseGdtSelectors(ptr long)
+;KeI386ReleaseLid
+;KeI386SetGdtSelector
+@ stdcall KeInitializeApc(ptr ptr long ptr ptr ptr long ptr)
+@ stdcall KeInitializeCrashDumpHeader(long long ptr long ptr)
+@ stdcall KeInitializeDeviceQueue(ptr)
+@ stdcall KeInitializeDpc(ptr ptr ptr)
+@ stdcall KeInitializeEvent(ptr long long)
+@ fastcall KeInitializeGuardedMutex(ptr)
+@ stdcall KeInitializeInterrupt(ptr ptr ptr ptr long long long long long long long)
+@ stdcall KeInitializeMutant(ptr long)
+@ stdcall KeInitializeMutex(ptr long)
+@ stdcall KeInitializeQueue(ptr long)
+@ stdcall KeInitializeSemaphore(ptr long long)
+@ stdcall KeInitializeSpinLock(ptr)
+@ stdcall KeInitializeThreadedDpc(ptr ptr ptr)
+@ stdcall KeInitializeTimer(ptr)
+@ stdcall KeInitializeTimerEx(ptr long)
+@ stdcall KeInsertByKeyDeviceQueue(ptr ptr long)
+@ stdcall KeInsertDeviceQueue(ptr ptr)
+@ stdcall KeInsertHeadQueue(ptr ptr)
+@ stdcall KeInsertQueue(ptr ptr)
+@ stdcall KeInsertQueueApc(ptr ptr ptr long)
+@ stdcall KeInsertQueueDpc(ptr ptr ptr)
+@ stdcall KeInvalidateAllCaches()
+@ stdcall KeIpiGenericCall(ptr ptr)
+@ stdcall KeIsAttachedProcess()
+@ stdcall KeIsExecutingDpc()
+;KeIsWaitListEmpty
+@ stdcall KeLeaveCriticalRegion() _KeLeaveCriticalRegion
+@ stdcall KeLeaveGuardedRegion() _KeLeaveGuardedRegion
+@ extern KeLoaderBlock
+@ extern KeNumberProcessors
+@ stdcall KeProfileInterrupt(ptr)
+@ stdcall KeProfileInterruptWithSource(ptr long)
+@ stdcall KePulseEvent(ptr long long)
+@ stdcall KeQueryActiveProcessors()
+@ stdcall KeQueryInterruptTime()
+@ stdcall KeQueryPriorityThread(ptr)
+@ stdcall KeQueryRuntimeThread(ptr ptr)
+@ stdcall KeQuerySystemTime(ptr)
+@ stdcall KeQueryTickCount(ptr)
+@ stdcall KeQueryTimeIncrement()
+@ stdcall KeRaiseUserException(long)
+@ stdcall KeReadStateEvent(ptr)
+@ stdcall KeReadStateMutant(ptr)
+@ stdcall KeReadStateMutex(ptr) KeReadStateMutant
+@ stdcall KeReadStateQueue(ptr)
+@ stdcall KeReadStateSemaphore(ptr)
+@ stdcall KeReadStateTimer(ptr)
+@ stdcall KeRegisterBugCheckCallback(ptr ptr ptr long ptr)
+@ stdcall KeRegisterBugCheckReasonCallback(ptr ptr ptr ptr)
+@ stdcall KeRegisterNmiCallback(ptr ptr)
+@ fastcall KeReleaseGuardedMutex(ptr)
+@ fastcall KeReleaseGuardedMutexUnsafe(ptr)
+@ fastcall KeReleaseInStackQueuedSpinLockForDpc(ptr)
+@ fastcall KeReleaseInStackQueuedSpinLockFromDpcLevel(ptr)
+@ stdcall KeReleaseInterruptSpinLock(ptr long)
+@ stdcall KeReleaseMutant(ptr long long long)
+@ stdcall KeReleaseMutex(ptr long)
+@ stdcall KeReleaseSemaphore(ptr long long long)
+@ fastcall KeReleaseSpinLockForDpc(ptr long)
+@ stdcall KeReleaseSpinLockFromDpcLevel(ptr)
+@ stdcall KeRemoveByKeyDeviceQueue(ptr long)
+@ stdcall KeRemoveByKeyDeviceQueueIfBusy(ptr long)
+@ stdcall KeRemoveDeviceQueue(ptr)
+@ stdcall KeRemoveEntryDeviceQueue(ptr ptr)
+@ stdcall KeRemoveQueue(ptr long ptr)
+@ stdcall KeRemoveQueueDpc(ptr)
+@ stdcall KeRemoveSystemServiceTable(long)
+@ stdcall KeResetEvent(ptr)
+@ stdcall KeRestoreFloatingPointState(ptr)
+@ stdcall KeRevertToUserAffinityThread()
+@ stdcall KeRundownQueue(ptr)
+@ stdcall KeSaveFloatingPointState(ptr)
+@ cdecl KeSaveStateForHibernate(ptr)
+@ extern KeServiceDescriptorTable
+@ stdcall KeSetAffinityThread(ptr long)
+@ stdcall KeSetBasePriorityThread(ptr long)
+@ stdcall KeSetDmaIoCoherency(long)
+@ stdcall KeSetEvent(ptr long long)
+@ stdcall KeSetEventBoostPriority(ptr ptr)
+@ stdcall KeSetIdealProcessorThread(ptr long)
+@ stdcall KeSetImportanceDpc(ptr long)
+@ stdcall KeSetKernelStackSwapEnable(long)
+@ stdcall KeSetPriorityThread(ptr long)
+@ stdcall KeSetProfileIrql(long)
+@ stdcall KeSetSystemAffinityThread(long)
+@ stdcall KeSetTargetProcessorDpc(ptr long)
+@ stdcall KeSetTimeIncrement(long long)
+@ stdcall KeSetTimer(ptr long long ptr)
+@ stdcall KeSetTimerEx(ptr long long long ptr)
+;KeSignalCallDpcDone
+;KeSignalCallDpcSynchronize
+@ stdcall KeStackAttachProcess(ptr ptr)
+@ stdcall KeSynchronizeExecution(ptr ptr ptr)
+@ stdcall KeTerminateThread(long)
+@ fastcall KeTestSpinLock(ptr)
+@ extern KeTickCount
+@ fastcall KeTryToAcquireGuardedMutex(ptr)
+@ fastcall KeTryToAcquireSpinLockAtDpcLevel(ptr)
+@ stdcall KeUnstackDetachProcess(ptr)
+@ stdcall KeUpdateRunTime(ptr long)
+#ifdef _M_IX86
+@ stdcall KeUpdateSystemTime()
+#else
+@ stdcall KeUpdateSystemTime(ptr long long)
+#endif
+@ stdcall KeUserModeCallback(long ptr long ptr ptr)
+@ stdcall KeWaitForMultipleObjects(long ptr long long long long ptr ptr)
+@ stdcall KeWaitForMutexObject(ptr long long long ptr) KeWaitForSingleObject
+@ stdcall KeWaitForSingleObject(ptr long long long ptr)
+@ fastcall KefAcquireSpinLockAtDpcLevel(ptr)
+@ fastcall KefReleaseSpinLockFromDpcLevel(ptr)
+@ stdcall Kei386EoiHelper()
+@ fastcall KiAcquireSpinLock(ptr)
+@ extern KiBugCheckData
+@ stdcall KiCheckForKernelApcDelivery()
+@ stdcall KiCoprocessorError()
+@ stdcall KiDeliverApc(long ptr ptr)
+@ stdcall KiDispatchInterrupt()
+@ extern KiEnableTimerWatchdog
+@ stdcall KiIpiServiceRoutine(ptr ptr)
+@ fastcall KiReleaseSpinLock(ptr)
+@ cdecl KiUnexpectedInterrupt()
+;Kii386SpinOnSpinLock
+@ stdcall LdrAccessResource(ptr ptr ptr ptr)
+@ stdcall LdrEnumResources(ptr ptr long ptr ptr)
+@ stdcall LdrFindResourceDirectory_U(ptr ptr long ptr)
+@ stdcall LdrFindResource_U(ptr ptr long ptr)
+@ extern LpcPortObjectType
+@ stdcall LpcRequestPort(ptr ptr)
+@ stdcall LpcRequestWaitReplyPort(ptr ptr ptr)
+@ stdcall LsaCallAuthenticationPackage(long long long long long long long)
+@ stdcall LsaDeregisterLogonProcess(long long)
+@ stdcall LsaFreeReturnBuffer(ptr)
+@ stdcall LsaLogonUser(ptr ptr long long ptr long ptr ptr ptr ptr ptr ptr ptr ptr)
+@ stdcall LsaLookupAuthenticationPackage(long long long)
+@ stdcall LsaRegisterLogonProcess(ptr ptr ptr)
+@ extern Mm64BitPhysicalAddress
+@ stdcall MmAddPhysicalMemory(ptr ptr)
+@ stdcall MmAddVerifierThunks(ptr long)
+@ stdcall MmAdjustWorkingSetSize(long long long long)
+@ stdcall MmAdvanceMdl(ptr long)
+@ stdcall MmAllocateContiguousMemory(long long long)
+@ stdcall MmAllocateContiguousMemorySpecifyCache(long long long long long long long long)
+@ stdcall MmAllocateMappingAddress(long long)
+@ stdcall MmAllocateNonCachedMemory(long)
+@ stdcall MmAllocatePagesForMdl(ptr ptr ptr ptr ptr ptr ptr)
+@ stdcall MmAllocatePagesForMdlEx(long long long long long long long long long)
+@ stdcall MmBuildMdlForNonPagedPool(ptr)
+@ stdcall MmCanFileBeTruncated(ptr ptr)
+;MmCommitSessionMappedView
+@ stdcall MmCreateMdl(ptr ptr long)
+;MmCreateMirror
+@ stdcall MmCreateSection(ptr long ptr ptr long long ptr ptr)
+@ stdcall MmDisableModifiedWriteOfSection(long)
+@ stdcall MmFlushImageSection(ptr long)
+@ stdcall MmForceSectionClosed(ptr long)
+@ stdcall MmFreeContiguousMemory(ptr)
+@ stdcall MmFreeContiguousMemorySpecifyCache(ptr long long)
+@ stdcall MmFreeMappingAddress(ptr long)
+@ stdcall MmFreeNonCachedMemory(ptr long)
+@ stdcall MmFreePagesFromMdl(ptr)
+@ stdcall MmGetPhysicalAddress(ptr)
+@ stdcall MmGetPhysicalMemoryRanges()
+@ stdcall MmGetSystemRoutineAddress(ptr)
+@ stdcall MmGetVirtualForPhysical(long long)
+@ stdcall MmGrowKernelStack(ptr)
+@ extern MmHighestUserAddress
+@ stdcall MmIsAddressValid(ptr)
+@ stdcall MmIsDriverVerifying(ptr)
+;MmIsIoSpaceActive
+@ stdcall MmIsNonPagedSystemAddressValid(ptr)
+@ stdcall MmIsRecursiveIoFault()
+@ stdcall MmIsThisAnNtAsSystem()
+@ stdcall MmIsVerifierEnabled(ptr)
+@ stdcall MmLockPagableDataSection(ptr)
+@ stdcall MmLockPagableImageSection(ptr) MmLockPagableDataSection
+@ stdcall MmLockPagableSectionByHandle(ptr)
+@ stdcall MmMapIoSpace(long long long long)
+@ stdcall MmMapLockedPages(ptr long)
+@ stdcall MmMapLockedPagesSpecifyCache(ptr long long ptr long long)
+@ stdcall MmMapLockedPagesWithReservedMapping(ptr long ptr long)
+@ stdcall MmMapMemoryDumpMdl(ptr)
+@ stdcall MmMapUserAddressesToPage(ptr long ptr)
+@ stdcall MmMapVideoDisplay(long long long long)
+@ stdcall MmMapViewInSessionSpace(ptr ptr ptr)
+@ stdcall MmMapViewInSystemSpace(ptr ptr ptr)
+@ stdcall MmMapViewOfSection(ptr ptr ptr long long ptr ptr long long long)
+@ stdcall MmMarkPhysicalMemoryAsBad(ptr ptr)
+@ stdcall MmMarkPhysicalMemoryAsGood(ptr ptr)
+@ stdcall MmPageEntireDriver(ptr)
+@ stdcall MmPrefetchPages(long ptr)
+@ stdcall MmProbeAndLockPages(ptr long long)
+@ stdcall MmProbeAndLockProcessPages(ptr ptr long long)
+@ stdcall MmProbeAndLockSelectedPages(ptr ptr long long)
+@ stdcall MmProtectMdlSystemAddress(ptr long)
+@ stdcall MmQuerySystemSize()
+@ stdcall MmRemovePhysicalMemory(ptr ptr)
+@ stdcall MmResetDriverPaging(ptr)
+@ extern MmSectionObjectType
+@ stdcall MmSecureVirtualMemory(ptr long long)
+@ stdcall MmSetAddressRangeModified(ptr long)
+@ stdcall MmSetBankedSection(long long long long long long)
+@ stdcall MmSizeOfMdl(ptr long)
+@ extern MmSystemRangeStart
+@ stdcall MmTrimAllSystemPagableMemory(long)
+@ stdcall MmUnlockPagableImageSection(ptr)
+@ stdcall MmUnlockPages(ptr)
+@ stdcall MmUnmapIoSpace(ptr long)
+@ stdcall MmUnmapLockedPages(ptr ptr)
+@ stdcall MmUnmapReservedMapping(ptr long ptr)
+@ stdcall MmUnmapVideoDisplay(ptr long)
+@ stdcall MmUnmapViewInSessionSpace(ptr)
+@ stdcall MmUnmapViewInSystemSpace(ptr)
+@ stdcall MmUnmapViewOfSection(ptr ptr)
+@ stdcall MmUnsecureVirtualMemory(ptr)
+@ extern MmUserProbeAddress
+@ extern NlsAnsiCodePage
+@ extern NlsLeadByteInfo
+@ extern NlsMbCodePageTag
+@ extern NlsMbOemCodePageTag
+@ extern NlsOemCodePage
+@ extern NlsOemLeadByteInfo _NlsOemLeadByteInfo
+@ stdcall NtAddAtom(wstr long ptr)
+@ stdcall NtAdjustPrivilegesToken(ptr long ptr long ptr ptr)
+@ stdcall NtAlertThread(ptr)
+@ stdcall NtAllocateLocallyUniqueId(ptr)
+@ stdcall NtAllocateUuids(ptr ptr ptr ptr)
+@ stdcall NtAllocateVirtualMemory(ptr ptr long ptr long long)
+@ extern NtBuildNumber
+@ stdcall NtClose(ptr)
+@ stdcall NtConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr)
+@ stdcall NtCreateEvent(ptr long ptr long long)
+@ stdcall NtCreateFile(ptr long ptr ptr ptr long long long long ptr long)
+@ stdcall NtCreateSection(ptr long ptr ptr long long ptr)
+@ stdcall NtCreateTimer(ptr long ptr long)
+@ stdcall NtDeleteAtom(ptr)
+@ stdcall NtDeleteFile(ptr)
+@ stdcall NtDeviceIoControlFile(ptr ptr ptr ptr ptr long ptr long ptr long)
+@ stdcall NtDuplicateObject(ptr ptr ptr ptr long long long)
+@ stdcall NtDuplicateToken(ptr long ptr long long ptr)
+@ stdcall NtFindAtom(wstr long ptr)
+@ stdcall NtFreeVirtualMemory(ptr ptr ptr long)
+@ stdcall NtFsControlFile(ptr ptr ptr ptr ptr long ptr long ptr long)
+@ extern NtGlobalFlag
+@ stdcall NtLockFile(ptr ptr ptr ptr ptr ptr ptr long long long)
+@ stdcall NtMakePermanentObject(ptr)
+@ stdcall NtMapViewOfSection(ptr ptr ptr long long ptr ptr long long long)
+@ stdcall NtNotifyChangeDirectoryFile(ptr ptr ptr ptr ptr ptr long long long)
+@ stdcall NtOpenEvent(ptr long ptr)
+@ stdcall NtOpenFile(ptr long ptr ptr long long)
+@ stdcall NtOpenProcess(ptr long ptr ptr)
+@ stdcall NtOpenProcessToken(ptr long ptr)
+@ stdcall NtOpenProcessTokenEx(ptr long long ptr)
+@ stdcall NtOpenThread(ptr long ptr ptr)
+@ stdcall NtOpenThreadToken(ptr long long ptr)
+@ stdcall NtOpenThreadTokenEx(ptr long long long ptr)
+@ stdcall NtQueryDirectoryFile(ptr ptr ptr ptr ptr ptr long long long ptr long)
+@ stdcall NtQueryEaFile(ptr ptr ptr long long ptr long ptr long)
+@ stdcall NtQueryInformationAtom(ptr long ptr long ptr)
+@ stdcall NtQueryInformationFile(ptr ptr ptr long long)
+@ stdcall NtQueryInformationProcess(ptr ptr ptr long ptr)
+@ stdcall NtQueryInformationThread(ptr long ptr long ptr)
+@ stdcall NtQueryInformationToken(ptr long ptr long ptr)
+@ stdcall NtQueryQuotaInformationFile(ptr ptr ptr long long ptr long ptr long)
+@ stdcall NtQuerySecurityObject(ptr long ptr long ptr)
+@ stdcall NtQuerySystemInformation(long ptr long ptr)
+@ stdcall NtQueryVolumeInformationFile(ptr ptr ptr long long)
+@ stdcall NtReadFile(ptr ptr ptr ptr ptr ptr long ptr ptr)
+@ stdcall NtRequestPort(ptr ptr)
+@ stdcall NtRequestWaitReplyPort(ptr ptr ptr)
+@ stdcall NtSetEaFile(ptr ptr ptr long)
+@ stdcall NtSetEvent(ptr ptr)
+@ stdcall NtSetInformationFile(ptr ptr ptr long long)
+@ stdcall NtSetInformationProcess(ptr ptr ptr long)
+@ stdcall NtSetInformationThread(ptr long ptr long)
+@ stdcall NtSetQuotaInformationFile(ptr ptr ptr long)
+@ stdcall NtSetSecurityObject(ptr long ptr)
+@ stdcall NtSetVolumeInformationFile(ptr ptr ptr long long)
+@ stdcall NtShutdownSystem(long)
+@ stdcall NtTraceEvent(long long long ptr)
+@ stdcall NtUnlockFile(ptr ptr ptr ptr long)
+@ stdcall NtVdmControl(long ptr)
+@ stdcall NtWaitForSingleObject(ptr long ptr)
+@ stdcall NtWriteFile(ptr ptr ptr ptr ptr ptr long ptr ptr)
+@ stdcall ObAssignSecurity(ptr ptr ptr ptr)
+@ stdcall ObCheckCreateObjectAccess(ptr long ptr ptr long long ptr)
+@ stdcall ObCheckObjectAccess(ptr ptr long long ptr)
+@ stdcall ObCloseHandle(ptr long)
+@ stdcall ObCreateObject(long ptr ptr long ptr long long long ptr)
+@ stdcall ObCreateObjectType(ptr ptr ptr ptr)
+;ObDeleteCapturedInsertInfo
+@ stdcall ObDereferenceObject(ptr)
+@ stdcall ObDereferenceObjectDeferDelete(ptr)
+@ stdcall ObDereferenceSecurityDescriptor(ptr long)
+@ stdcall ObFindHandleForObject(ptr ptr ptr ptr ptr)
+@ stdcall ObGetObjectSecurity(ptr ptr ptr)
+@ stdcall ObInsertObject(ptr ptr long long ptr ptr)
+@ stdcall ObIsKernelHandle(ptr)
+@ stdcall ObLogSecurityDescriptor(ptr ptr long)
+@ stdcall ObMakeTemporaryObject(ptr)
+@ stdcall ObOpenObjectByName(ptr ptr long ptr long ptr ptr)
+@ stdcall ObOpenObjectByPointer(ptr long ptr long ptr long ptr)
+@ stdcall ObQueryNameString(ptr ptr long ptr)
+@ stdcall ObQueryObjectAuditingByHandle(ptr ptr)
+@ stdcall ObReferenceObjectByHandle(ptr long ptr long ptr ptr)
+@ stdcall ObReferenceObjectByName(ptr long ptr long ptr long ptr ptr)
+@ stdcall ObReferenceObjectByPointer(ptr long ptr long)
+@ stdcall ObReferenceSecurityDescriptor(ptr long)
+@ stdcall ObReleaseObjectSecurity(ptr long)
+;ObSetHandleAttributes@12
+@ stdcall ObSetSecurityDescriptorInfo(ptr ptr ptr ptr long ptr)
+@ stdcall ObSetSecurityObjectByPointer(ptr long ptr)
+@ fastcall ObfDereferenceObject(ptr)
+@ fastcall ObfReferenceObject(ptr)
+;PfxFindPrefix
+;PfxInitialize
+;PfxInsertPrefix
+;PfxRemovePrefix
+@ stdcall PoCallDriver(ptr ptr)
+;PoCancelDeviceNotify
+@ stdcall PoQueueShutdownWorkItem(ptr)
+@ stdcall PoRegisterDeviceForIdleDetection(ptr long long long)
+;PoRegisterDeviceNotify
+@ stdcall PoRegisterSystemState(ptr long)
+@ stdcall PoRequestPowerIrp(ptr long long ptr ptr ptr)
+;PoRequestShutdownEvent
+;PoSetHiberRange
+@ stdcall PoSetDeviceBusy(ptr)
+@ stdcall PoSetPowerState(ptr long long)
+@ stdcall PoSetSystemState(long)
+;PoShutdownBugCheck
+@ stdcall PoStartNextPowerIrp(ptr)
+@ stdcall PoUnregisterSystemState(ptr)
+@ stdcall ProbeForRead(ptr long long)
+@ stdcall ProbeForWrite(ptr long long)
+@ stdcall PsAssignImpersonationToken(ptr ptr)
+@ stdcall PsChargePoolQuota(ptr long long)
+@ stdcall PsChargeProcessNonPagedPoolQuota(ptr long)
+@ stdcall PsChargeProcessPagedPoolQuota(ptr long)
+@ stdcall PsChargeProcessPoolQuota(ptr long long)
+@ stdcall PsCreateSystemProcess(ptr long ptr)
+@ stdcall PsCreateSystemThread(ptr long ptr ptr ptr ptr ptr)
+@ stdcall PsDereferenceImpersonationToken(ptr) PsDereferencePrimaryToken
+@ stdcall PsDereferencePrimaryToken(ptr)
+@ stdcall PsDisableImpersonation(ptr ptr)
+@ stdcall PsEstablishWin32Callouts(ptr)
+@ stdcall PsGetContextThread(ptr ptr long)
+@ stdcall PsGetCurrentProcess() IoGetCurrentProcess
+@ stdcall PsGetCurrentProcessId()
+@ stdcall PsGetCurrentProcessSessionId()
+@ stdcall PsGetCurrentProcessWin32Process()
+@ stdcall PsGetCurrentThread() KeGetCurrentThread
+@ stdcall PsGetCurrentThreadId()
+@ stdcall PsGetCurrentThreadPreviousMode()
+;PsGetCurrentThreadProcess
+;PsGetCurrentThreadProcessId
+@ stdcall PsGetCurrentThreadStackBase()
+@ stdcall PsGetCurrentThreadStackLimit()
+;PsGetCurrentThreadTeb
+@ stdcall PsGetCurrentThreadWin32Thread()
+;PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion
+@ stdcall PsGetJobLock(ptr)
+@ stdcall PsGetJobSessionId(ptr)
+@ stdcall PsGetJobUIRestrictionsClass(ptr)
+@ stdcall PsGetProcessCreateTimeQuadPart(ptr)
+@ stdcall PsGetProcessDebugPort(ptr)
+@ stdcall PsGetProcessExitProcessCalled(ptr)
+@ stdcall PsGetProcessExitStatus(ptr)
+@ stdcall PsGetProcessExitTime()
+@ stdcall PsGetProcessId(ptr)
+@ stdcall PsGetProcessImageFileName(ptr)
+@ stdcall PsGetProcessInheritedFromUniqueProcessId(ptr)
+@ stdcall PsGetProcessJob(ptr)
+@ stdcall PsGetProcessPeb(ptr)
+@ stdcall PsGetProcessPriorityClass(ptr)
+@ stdcall PsGetProcessSectionBaseAddress(ptr)
+@ stdcall PsGetProcessSecurityPort(ptr)
+@ stdcall PsGetProcessSessionId(ptr)
+;PsGetProcessSessionIdEx
+@ stdcall PsGetProcessWin32Process(ptr)
+@ stdcall PsGetProcessWin32WindowStation(ptr)
+@ stdcall PsGetThreadFreezeCount(ptr)
+@ stdcall PsGetThreadHardErrorsAreDisabled(ptr)
+@ stdcall PsGetThreadId(ptr)
+@ stdcall PsGetThreadProcess(ptr)
+@ stdcall PsGetThreadProcessId(ptr)
+@ stdcall PsGetThreadSessionId(ptr)
+@ stdcall PsGetThreadTeb(ptr)
+@ stdcall PsGetThreadWin32Thread(ptr)
+@ stdcall PsGetVersion(ptr ptr ptr ptr)
+@ stdcall PsImpersonateClient(ptr ptr long long long)
+@ extern PsInitialSystemProcess
+@ stdcall PsIsProcessBeingDebugged(ptr)
+;PsIsSystemProcess
+@ stdcall PsIsSystemThread(ptr)
+@ stdcall PsIsThreadImpersonating(ptr)
+@ stdcall PsIsThreadTerminating(ptr)
+@ extern PsJobType
+@ stdcall PsLookupProcessByProcessId(ptr ptr)
+@ stdcall PsLookupProcessThreadByCid(ptr ptr ptr)
+@ stdcall PsLookupThreadByThreadId(ptr ptr)
+@ extern PsProcessType _PsProcessType
+@ stdcall PsReferenceImpersonationToken(ptr ptr ptr ptr)
+@ stdcall PsReferencePrimaryToken(ptr)
+@ stdcall PsRemoveCreateThreadNotifyRoutine(ptr)
+@ stdcall PsRemoveLoadImageNotifyRoutine(ptr)
+@ stdcall PsRestoreImpersonation(ptr ptr)
+@ stdcall PsReturnPoolQuota(ptr long long)
+@ stdcall PsReturnProcessNonPagedPoolQuota(ptr long)
+@ stdcall PsReturnProcessPagedPoolQuota(ptr long)
+@ stdcall PsRevertThreadToSelf(ptr)
+@ stdcall PsRevertToSelf()
+@ stdcall PsSetContextThread(ptr ptr long)
+@ stdcall PsSetCreateProcessNotifyRoutine(ptr long)
+@ stdcall PsSetCreateThreadNotifyRoutine(ptr)
+@ stdcall PsSetJobUIRestrictionsClass(ptr long)
+@ stdcall PsSetLegoNotifyRoutine(ptr)
+@ stdcall PsSetLoadImageNotifyRoutine(ptr)
+@ stdcall PsSetProcessPriorityByClass(ptr ptr)
+@ stdcall PsSetProcessPriorityClass(ptr long)
+@ stdcall PsSetProcessSecurityPort(ptr ptr)
+@ stdcall PsSetProcessWin32Process(ptr ptr)
+@ stdcall PsSetProcessWindowStation(ptr ptr)
+@ stdcall PsSetThreadHardErrorsAreDisabled(ptr long)
+@ stdcall PsSetThreadWin32Thread(ptr ptr)
+@ stdcall PsTerminateSystemThread(long)
+@ extern PsThreadType _PsThreadType
+;PsWrapApcWow64Thread
+@ stdcall READ_REGISTER_BUFFER_UCHAR(ptr ptr long)
+@ stdcall READ_REGISTER_BUFFER_ULONG(ptr ptr long)
+@ stdcall READ_REGISTER_BUFFER_USHORT(ptr ptr long)
+@ stdcall READ_REGISTER_UCHAR(ptr)
+@ stdcall READ_REGISTER_ULONG(ptr)
+@ stdcall READ_REGISTER_USHORT(ptr)
+@ stdcall KeRosDumpStackFrames(ptr long)
+@ stdcall RtlAbsoluteToSelfRelativeSD(ptr ptr ptr)
+@ stdcall RtlAddAccessAllowedAce(ptr long long ptr)
+@ stdcall RtlAddAccessAllowedAceEx(ptr long long long ptr)
+@ stdcall RtlAddAce(ptr long long ptr long)
+@ stdcall RtlAddAtomToAtomTable(ptr wstr ptr)
+@ stdcall RtlAddRange(ptr long long long long long long ptr ptr)
+@ stdcall RtlAllocateAndInitializeSid(ptr long long long long long long long long long ptr)
+@ stdcall RtlAllocateHeap(ptr long long)
+@ stdcall RtlAnsiCharToUnicodeChar(ptr)
+@ stdcall RtlAnsiStringToUnicodeSize(ptr) RtlxAnsiStringToUnicodeSize
+@ stdcall RtlAnsiStringToUnicodeString(ptr ptr long)
+@ stdcall RtlAppendAsciizToString(ptr str)
+@ stdcall RtlAppendStringToString(ptr ptr)
+@ stdcall RtlAppendUnicodeStringToString(ptr ptr)
+@ stdcall RtlAppendUnicodeToString(ptr wstr)
+@ stdcall RtlAreAllAccessesGranted(long long)
+@ stdcall RtlAreAnyAccessesGranted(long long)
+@ stdcall RtlAreBitsClear(ptr long long)
+@ stdcall RtlAreBitsSet(ptr long long)
+@ stdcall RtlAssert(str str long str)
+@ stdcall RtlCaptureContext(ptr)
+@ stdcall RtlCaptureStackBackTrace(long long ptr ptr)
+@ stdcall RtlCharToInteger(str long ptr)
+@ stdcall RtlCheckRegistryKey(long wstr)
+@ stdcall RtlClearAllBits(ptr)
+@ stdcall RtlClearBit(ptr long)
+@ stdcall RtlClearBits(ptr long long)
+@ stdcall RtlCompareMemory(ptr ptr long)
+@ stdcall RtlCompareMemoryUlong(ptr long long)
+@ stdcall RtlCompareString(ptr ptr long)
+@ stdcall RtlCompareUnicodeString(ptr ptr long)
+@ stdcall RtlCompressBuffer(long ptr long ptr long long ptr ptr)
+@ stdcall RtlCompressChunks(ptr long ptr long ptr long ptr)
+@ stdcall RtlConvertLongToLargeInteger(long)
+@ stdcall RtlConvertSidToUnicodeString(ptr ptr long)
+@ stdcall RtlConvertUlongToLargeInteger(long)
+@ stdcall RtlCopyLuid(ptr ptr)
+@ stdcall RtlCopyRangeList(ptr ptr)
+@ stdcall RtlCopySid(long ptr ptr)
+@ stdcall RtlCopyString(ptr ptr)
+@ stdcall RtlCopyUnicodeString(ptr ptr)
+@ stdcall RtlCreateAcl(ptr long long)
+@ stdcall RtlCreateAtomTable(long ptr)
+@ stdcall RtlCreateHeap(long ptr long long ptr ptr)
+@ stdcall RtlCreateRegistryKey(long wstr)
+@ stdcall RtlCreateSecurityDescriptor(ptr long)
+@ stdcall RtlCreateSystemVolumeInformationFolder(ptr)
+@ stdcall RtlCreateUnicodeString(ptr wstr)
+@ stdcall RtlCustomCPToUnicodeN(ptr wstr long ptr ptr long)
+@ stdcall RtlDecompressBuffer(long ptr long ptr long ptr)
+@ stdcall RtlDecompressChunks(ptr long ptr long ptr long ptr)
+@ stdcall RtlDecompressFragment(long ptr long ptr long long ptr ptr)
+@ stdcall RtlDelete(ptr)
+@ stdcall RtlDeleteAce(ptr long)
+@ stdcall RtlDeleteAtomFromAtomTable(ptr ptr)
+@ stdcall RtlDeleteElementGenericTable(ptr ptr)
+@ stdcall RtlDeleteElementGenericTableAvl(ptr ptr)
+@ stdcall RtlDeleteNoSplay(ptr ptr)
+@ stdcall RtlDeleteOwnersRanges(ptr ptr)
+@ stdcall RtlDeleteRange(ptr long long long long ptr)
+@ stdcall RtlDeleteRegistryValue(long wstr wstr)
+@ stdcall RtlDescribeChunk(long ptr ptr ptr ptr)
+@ stdcall RtlDestroyAtomTable(ptr)
+@ stdcall RtlDestroyHeap(ptr)
+@ stdcall RtlDowncaseUnicodeString(ptr ptr long)
+@ stdcall RtlEmptyAtomTable(ptr long)
+@ stdcall RtlEnlargedIntegerMultiply(long long)
+@ stdcall RtlEnlargedUnsignedDivide(long long long ptr)
+@ stdcall RtlEnlargedUnsignedMultiply(long long)
+@ stdcall RtlEnumerateGenericTable(ptr long)
+@ stdcall RtlEnumerateGenericTableAvl(ptr long)
+@ stdcall RtlEnumerateGenericTableLikeADirectory(ptr ptr ptr long ptr ptr ptr)
+@ stdcall RtlEnumerateGenericTableWithoutSplaying(ptr ptr)
+@ stdcall RtlEnumerateGenericTableWithoutSplayingAvl(ptr ptr)
+@ stdcall RtlEqualLuid(ptr ptr)
+@ stdcall RtlEqualSid(ptr ptr)
+@ stdcall RtlEqualString(ptr ptr long)
+@ stdcall RtlEqualUnicodeString(ptr ptr long)
+@ stdcall RtlExtendedIntegerMultiply(long long long)
+@ stdcall RtlExtendedLargeIntegerDivide(long long long ptr)
+@ stdcall RtlExtendedMagicDivide(long long long long long)
+@ stdcall RtlFillMemory(ptr long long)
+@ stdcall RtlFillMemoryUlong(ptr long long)
+@ stdcall RtlFindClearBits(ptr long long)
+@ stdcall RtlFindClearBitsAndSet(ptr long long)
+@ stdcall RtlFindClearRuns(ptr ptr long long)
+@ stdcall RtlFindFirstRunClear(ptr ptr)
+@ stdcall RtlFindLastBackwardRunClear(ptr long ptr)
+@ stdcall RtlFindLeastSignificantBit(long long)
+@ stdcall RtlFindLongestRunClear(ptr ptr)
+@ stdcall RtlFindMessage(ptr long long long ptr)
+@ stdcall RtlFindMostSignificantBit(long long)
+@ stdcall RtlFindNextForwardRunClear(ptr long ptr)
+@ stdcall RtlFindRange(ptr long long long long long long long long ptr ptr ptr)
+@ stdcall RtlFindSetBits(ptr long long)
+@ stdcall RtlFindSetBitsAndClear(ptr long long)
+@ stdcall RtlFindUnicodePrefix(ptr ptr long)
+@ stdcall RtlFormatCurrentUserKeyPath(ptr)
+@ stdcall RtlFreeAnsiString(ptr)
+@ stdcall RtlFreeHeap(ptr long ptr)
+@ stdcall RtlFreeOemString(ptr)
+@ stdcall RtlFreeRangeList(ptr)
+@ stdcall RtlFreeUnicodeString(ptr)
+@ stdcall RtlGUIDFromString(ptr ptr)
+@ stdcall RtlGenerate8dot3Name(ptr ptr long ptr)
+@ stdcall RtlGetAce(ptr long ptr)
+@ stdcall RtlGetCallersAddress(ptr ptr)
+@ stdcall RtlGetCompressionWorkSpaceSize(long ptr ptr)
+@ stdcall RtlGetDaclSecurityDescriptor(ptr ptr ptr ptr)
+@ stdcall RtlGetDefaultCodePage(ptr ptr)
+@ stdcall RtlGetElementGenericTable(ptr long)
+@ stdcall RtlGetElementGenericTableAvl(ptr long)
+@ stdcall RtlGetFirstRange(ptr ptr ptr)
+@ stdcall RtlGetGroupSecurityDescriptor(ptr ptr ptr)
+@ stdcall RtlGetNextRange(ptr ptr long)
+@ stdcall RtlGetNtGlobalFlags()
+@ stdcall RtlGetOwnerSecurityDescriptor(ptr ptr ptr)
+@ stdcall RtlGetSaclSecurityDescriptor(ptr ptr ptr ptr)
+@ stdcall RtlGetSetBootStatusData(ptr long long ptr long long)
+@ stdcall RtlGetVersion(ptr)
+@ stdcall RtlHashUnicodeString(ptr long long ptr)
+@ stdcall RtlImageDirectoryEntryToData(ptr long long ptr)
+@ stdcall RtlImageNtHeader(ptr)
+@ stdcall RtlInitAnsiString(ptr str)
+@ stdcall RtlInitAnsiStringEx(ptr str)
+@ stdcall RtlInitCodePageTable(ptr ptr)
+@ stdcall RtlInitString(ptr str)
+@ stdcall RtlInitUnicodeString(ptr wstr)
+@ stdcall RtlInitUnicodeStringEx(ptr wstr)
+@ stdcall RtlInitializeBitMap(ptr ptr long)
+@ stdcall RtlInitializeGenericTable(ptr ptr ptr ptr ptr)
+@ stdcall RtlInitializeGenericTableAvl(ptr ptr ptr ptr ptr)
+@ stdcall RtlInitializeRangeList(ptr)
+@ stdcall RtlInitializeSid(ptr ptr long)
+@ stdcall RtlInitializeUnicodePrefix(ptr)
+@ stdcall RtlInsertElementGenericTable(ptr ptr long ptr)
+@ stdcall RtlInsertElementGenericTableAvl(ptr ptr long ptr)
+@ stdcall RtlInsertElementGenericTableFull(ptr ptr long ptr ptr long)
+@ stdcall RtlInsertElementGenericTableFullAvl(ptr ptr long ptr ptr ptr)
+@ stdcall RtlInsertUnicodePrefix(ptr ptr ptr)
+@ stdcall RtlInt64ToUnicodeString(long long long ptr)
+@ stdcall RtlIntegerToChar(long long long ptr)
+@ stdcall RtlIntegerToUnicode(long long long ptr)
+@ stdcall RtlIntegerToUnicodeString(long long ptr)
+@ stdcall RtlInvertRangeList(ptr ptr)
+@ stdcall RtlIpv4AddressToStringA(ptr ptr)
+@ stdcall RtlIpv4AddressToStringExA(ptr long ptr ptr)
+@ stdcall RtlIpv4AddressToStringExW(ptr long ptr ptr)
+@ stdcall RtlIpv4AddressToStringW(ptr ptr)
+@ stdcall RtlIpv4StringToAddressA(str long ptr ptr)
+@ stdcall RtlIpv4StringToAddressExA(str long ptr ptr)
+@ stdcall RtlIpv4StringToAddressExW(wstr long ptr ptr)
+@ stdcall RtlIpv4StringToAddressW(wstr long ptr ptr)
+@ stdcall RtlIpv6AddressToStringA(ptr ptr)
+@ stdcall RtlIpv6AddressToStringExA(ptr long long ptr ptr)
+@ stdcall RtlIpv6AddressToStringExW(ptr long long ptr ptr)
+@ stdcall RtlIpv6AddressToStringW(ptr ptr)
+@ stdcall RtlIpv6StringToAddressA(str ptr ptr)
+@ stdcall RtlIpv6StringToAddressExA(str ptr ptr ptr)
+@ stdcall RtlIpv6StringToAddressExW(wstr ptr ptr ptr)
+@ stdcall RtlIpv6StringToAddressW(wstr ptr ptr)
+@ stdcall RtlIsGenericTableEmpty(ptr)
+@ stdcall RtlIsGenericTableEmptyAvl(ptr)
+@ stdcall RtlIsNameLegalDOS8Dot3(ptr ptr ptr)
+@ stdcall RtlIsRangeAvailable(ptr long long long long long long ptr ptr ptr)
+@ stdcall RtlIsValidOemCharacter(ptr)
+@ stdcall RtlLargeIntegerAdd(long long long long)
+@ stdcall RtlLargeIntegerArithmeticShift(long long long)
+@ stdcall RtlLargeIntegerDivide(long long long long ptr)
+@ stdcall RtlLargeIntegerNegate(long long)
+@ stdcall RtlLargeIntegerShiftLeft(long long long)
+@ stdcall RtlLargeIntegerShiftRight(long long long)
+@ stdcall RtlLargeIntegerSubtract(long long long long)
+@ stdcall RtlLengthRequiredSid(long)
+@ stdcall RtlLengthSecurityDescriptor(ptr)
+@ stdcall RtlLengthSid(ptr)
+@ stdcall RtlLockBootStatusData(ptr)
+@ stdcall RtlLookupAtomInAtomTable(ptr wstr ptr)
+@ stdcall RtlLookupElementGenericTable(ptr ptr)
+@ stdcall RtlLookupElementGenericTableAvl(ptr ptr)
+@ stdcall RtlLookupElementGenericTableFull(ptr ptr ptr ptr)
+@ stdcall RtlLookupElementGenericTableFullAvl(ptr ptr ptr ptr)
+@ stdcall RtlMapGenericMask(ptr ptr)
+@ stdcall RtlMapSecurityErrorToNtStatus(long)
+@ stdcall RtlMergeRangeLists(ptr ptr ptr long)
+@ stdcall RtlMoveMemory(ptr ptr long)
+@ stdcall RtlMultiByteToUnicodeN(ptr long ptr str long)
+@ stdcall RtlMultiByteToUnicodeSize(ptr str long)
+@ stdcall RtlNextUnicodePrefix(ptr long)
+@ stdcall RtlNtStatusToDosError(long)
+@ stdcall RtlNtStatusToDosErrorNoTeb(long)
+@ stdcall RtlNumberGenericTableElements(ptr)
+@ stdcall RtlNumberGenericTableElementsAvl(ptr)
+@ stdcall RtlNumberOfClearBits(ptr)
+@ stdcall RtlNumberOfSetBits(ptr)
+@ stdcall RtlOemStringToCountedUnicodeString(ptr ptr long)
+@ stdcall RtlOemStringToUnicodeSize(ptr) RtlxOemStringToUnicodeSize
+@ stdcall RtlOemStringToUnicodeString(ptr ptr long)
+@ stdcall RtlOemToUnicodeN(wstr long ptr ptr long)
+@ stdcall RtlPinAtomInAtomTable(ptr ptr)
+@ fastcall RtlPrefetchMemoryNonTemporal(ptr long)
+@ stdcall RtlPrefixString(ptr ptr long)
+@ stdcall RtlPrefixUnicodeString(ptr ptr long)
+@ stdcall RtlQueryAtomInAtomTable(ptr ptr ptr ptr ptr ptr)
+@ stdcall RtlQueryRegistryValues(long wstr ptr ptr ptr)
+@ stdcall RtlQueryTimeZoneInformation(ptr)
+@ stdcall RtlRaiseException(ptr)
+@ stdcall RtlRandom(ptr)
+@ stdcall RtlRandomEx(ptr)
+@ stdcall RtlRealPredecessor(ptr)
+@ stdcall RtlRealSuccessor(ptr)
+@ stdcall RtlRemoveUnicodePrefix(ptr ptr)
+@ stdcall RtlReserveChunk(long ptr ptr ptr long)
+@ stdcall RtlSecondsSince1970ToTime(long ptr)
+@ stdcall RtlSecondsSince1980ToTime(long ptr)
+@ stdcall RtlSelfRelativeToAbsoluteSD(ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr)
+@ stdcall RtlSelfRelativeToAbsoluteSD2(ptr long)
+@ stdcall RtlSetAllBits(ptr)
+@ stdcall RtlSetBit(ptr long)
+@ stdcall RtlSetBits(ptr long long)
+@ stdcall RtlSetDaclSecurityDescriptor(ptr long ptr long)
+@ stdcall RtlSetGroupSecurityDescriptor(ptr ptr long)
+@ stdcall RtlSetOwnerSecurityDescriptor(ptr ptr long)
+@ stdcall RtlSetSaclSecurityDescriptor(ptr long ptr long)
+@ stdcall RtlSetTimeZoneInformation(ptr)
+@ stdcall RtlSizeHeap(ptr long ptr)
+@ stdcall RtlSplay(ptr)
+@ stdcall RtlStringFromGUID(ptr ptr)
+@ stdcall RtlSubAuthorityCountSid(ptr)
+@ stdcall RtlSubAuthoritySid(ptr long)
+@ stdcall RtlSubtreePredecessor(ptr)
+@ stdcall RtlSubtreeSuccessor(ptr)
+@ stdcall RtlTestBit(ptr long)
+@ stdcall RtlTimeFieldsToTime(ptr ptr)
+@ stdcall RtlTimeToElapsedTimeFields(ptr ptr)
+@ stdcall RtlTimeToSecondsSince1970(ptr ptr)
+@ stdcall RtlTimeToSecondsSince1980(ptr ptr)
+@ stdcall RtlTimeToTimeFields(ptr ptr)
+;RtlTraceDatabaseAdd
+;RtlTraceDatabaseCreate
+;RtlTraceDatabaseDestroy
+;RtlTraceDatabaseEnumerate
+;RtlTraceDatabaseFind
+;RtlTraceDatabaseLock
+;RtlTraceDatabaseUnlock
+;RtlTraceDatabaseValidate
+@ fastcall RtlUlongByteSwap(long)
+@ fastcall RtlUlonglongByteSwap(long long)
+@ stdcall RtlUnicodeStringToAnsiSize(ptr) RtlxUnicodeStringToAnsiSize
+@ stdcall RtlUnicodeStringToAnsiString(ptr ptr long)
+@ stdcall RtlUnicodeStringToCountedOemString(ptr ptr long)
+@ stdcall RtlUnicodeStringToInteger(ptr long ptr)
+@ stdcall RtlUnicodeStringToOemSize(ptr) RtlxUnicodeStringToOemSize
+@ stdcall RtlUnicodeStringToOemString(ptr ptr long)
+@ stdcall RtlUnicodeToCustomCPN(ptr ptr long ptr wstr long)
+@ stdcall RtlUnicodeToMultiByteN(ptr long ptr wstr long)
+@ stdcall RtlUnicodeToMultiByteSize(ptr wstr long)
+@ stdcall RtlUnicodeToOemN(ptr long ptr wstr long)
+@ stdcall RtlUnlockBootStatusData(ptr)
+@ stdcall RtlUnwind(ptr ptr ptr ptr)
+@ stdcall RtlUpcaseUnicodeChar(long)
+@ stdcall RtlUpcaseUnicodeString(ptr ptr long)
+@ stdcall RtlUpcaseUnicodeStringToAnsiString(ptr ptr long)
+@ stdcall RtlUpcaseUnicodeStringToCountedOemString(ptr ptr long)
+@ stdcall RtlUpcaseUnicodeStringToOemString(ptr ptr long)
+@ stdcall RtlUpcaseUnicodeToCustomCPN(ptr ptr long ptr wstr long)
+@ stdcall RtlUpcaseUnicodeToMultiByteN(ptr long ptr wstr long)
+@ stdcall RtlUpcaseUnicodeToOemN(ptr long ptr wstr long)
+@ stdcall RtlUpperChar(long)
+@ stdcall RtlUpperString(ptr ptr)
+@ fastcall RtlUshortByteSwap(long)
+@ stdcall RtlValidRelativeSecurityDescriptor(ptr long long)
+@ stdcall RtlValidSecurityDescriptor(ptr)
+@ stdcall RtlValidSid(ptr)
+@ stdcall RtlVerifyVersionInfo(ptr long long long)
+@ stdcall RtlVolumeDeviceToDosName(ptr ptr)
+@ stdcall RtlWalkFrameChain(ptr long long)
+@ stdcall RtlWriteRegistryValue(long wstr wstr long ptr long)
+@ stdcall RtlZeroHeap(ptr long)
+@ stdcall RtlZeroMemory(ptr long)
+@ stdcall RtlxAnsiStringToUnicodeSize(ptr)
+@ stdcall RtlxOemStringToUnicodeSize(ptr)
+@ stdcall RtlxUnicodeStringToAnsiSize(ptr)
+@ stdcall RtlxUnicodeStringToOemSize(ptr)
+@ stdcall SeAccessCheck(ptr ptr ptr long long ptr ptr long ptr ptr)
+@ stdcall SeAppendPrivileges(ptr ptr)
+@ stdcall SeAssignSecurity(ptr ptr ptr long ptr ptr ptr)
+@ stdcall SeAssignSecurityEx(ptr ptr ptr ptr long long ptr ptr ptr)
+@ stdcall SeAuditHardLinkCreation(ptr ptr long)
+@ stdcall SeAuditingFileEvents(long ptr)
+@ stdcall SeAuditingFileEventsWithContext(long ptr ptr)
+@ stdcall SeAuditingFileOrGlobalEvents(long ptr ptr)
+@ stdcall SeAuditingHardLinkEvents(long ptr)
+@ stdcall SeAuditingHardLinkEventsWithContext(long ptr ptr)
+@ stdcall SeCaptureSecurityDescriptor(ptr long long long ptr)
+@ stdcall SeCaptureSubjectContext(ptr)
+@ stdcall SeCloseObjectAuditAlarm(ptr ptr long)
+@ stdcall SeCreateAccessState(ptr ptr long ptr)
+@ stdcall SeCreateClientSecurity(ptr ptr long ptr)
+@ stdcall SeCreateClientSecurityFromSubjectContext(ptr ptr long ptr)
+@ stdcall SeDeassignSecurity(ptr)
+@ stdcall SeDeleteAccessState(ptr)
+@ stdcall SeDeleteObjectAuditAlarm(ptr ptr)
+@ extern SeExports
+@ stdcall SeFilterToken(ptr long ptr ptr ptr ptr)
+@ stdcall SeFreePrivileges(ptr)
+@ stdcall SeImpersonateClient(ptr ptr)
+@ stdcall SeImpersonateClientEx(ptr ptr)
+@ stdcall SeLockSubjectContext(ptr)
+@ stdcall SeMarkLogonSessionForTerminationNotification(ptr)
+@ stdcall SeOpenObjectAuditAlarm(ptr ptr ptr ptr ptr long long long ptr)
+@ stdcall SeOpenObjectForDeleteAuditAlarm(ptr ptr ptr ptr ptr long long long ptr)
+@ stdcall SePrivilegeCheck(ptr ptr long)
+@ stdcall SePrivilegeObjectAuditAlarm(ptr ptr long ptr long long)
+@ extern SePublicDefaultDacl
+@ stdcall SeQueryAuthenticationIdToken(ptr ptr)
+@ stdcall SeQueryInformationToken(ptr long ptr)
+@ stdcall SeQuerySecurityDescriptorInfo(ptr ptr ptr ptr)
+@ stdcall SeQuerySessionIdToken(ptr ptr)
+@ stdcall SeRegisterLogonSessionTerminatedRoutine(ptr)
+@ stdcall SeReleaseSecurityDescriptor(ptr long long)
+@ stdcall SeReleaseSubjectContext(ptr)
+@ stdcall SeSetAccessStateGenericMapping(ptr ptr)
+;SeSetAuditParameter
+@ stdcall SeSetSecurityDescriptorInfo(ptr ptr ptr ptr long ptr)
+@ stdcall SeSetSecurityDescriptorInfoEx(ptr ptr ptr ptr long long ptr)
+@ stdcall SeSinglePrivilegeCheck(long long long)
+@ extern SeSystemDefaultDacl
+@ stdcall SeTokenImpersonationLevel(ptr)
+@ stdcall SeTokenIsAdmin(ptr)
+@ stdcall SeTokenIsRestricted(ptr)
+@ stdcall SeTokenIsWriteRestricted(ptr)
+@ stdcall SeTokenType(ptr)
+@ stdcall SeUnlockSubjectContext(ptr)
+@ stdcall SeUnregisterLogonSessionTerminatedRoutine(ptr)
+@ stdcall SeValidSecurityDescriptor(long ptr)
+@ stdcall VerSetConditionMask(long long long long)
+;VfFailDeviceNode
+;VfFailDriver
+;VfFailSystemBIOS
+;VfIsVerificationEnabled
+@ stdcall WRITE_REGISTER_BUFFER_UCHAR(ptr ptr long)
+@ stdcall WRITE_REGISTER_BUFFER_ULONG(ptr ptr long)
+@ stdcall WRITE_REGISTER_BUFFER_USHORT(ptr ptr long)
+@ stdcall WRITE_REGISTER_UCHAR(ptr long)
+@ stdcall WRITE_REGISTER_ULONG(ptr long)
+@ stdcall WRITE_REGISTER_USHORT(ptr long)
+;WmiFlushTrace
+;WmiGetClock
+;WmiQueryTrace
+;WmiQueryTraceInformation
+;WmiStartTrace
+;WmiStopTrace
+;WmiTraceFastEvent
+;WmiTraceMessage
+;WmiTraceMessageVa
+;WmiUpdateTrace
+;XIPDispatch
+@ stdcall ZwAccessCheckAndAuditAlarm(ptr ptr ptr ptr ptr long ptr long ptr ptr ptr)
+@ stdcall ZwAddBootEntry(ptr long)
+@ stdcall ZwAddDriverEntry(ptr long)
+@ stdcall ZwAdjustPrivilegesToken(ptr long ptr long ptr ptr)
+@ stdcall ZwAlertThread(ptr)
+@ stdcall ZwAllocateVirtualMemory(ptr ptr long ptr long long)
+@ stdcall ZwAssignProcessToJobObject(ptr ptr)
+@ stdcall ZwCancelIoFile(ptr ptr)
+@ stdcall ZwCancelTimer(ptr ptr)
+@ stdcall ZwClearEvent(ptr)
+@ stdcall ZwClose(ptr)
+@ stdcall ZwCloseObjectAuditAlarm(ptr ptr long)
+@ stdcall ZwConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr)
+@ stdcall ZwCreateDirectoryObject(ptr long ptr)
+@ stdcall ZwCreateEvent(ptr long ptr long long)
+@ stdcall ZwCreateFile(ptr long ptr ptr ptr long long long long ptr long)
+@ stdcall ZwCreateJobObject(ptr long ptr)
+@ stdcall ZwCreateKey(ptr long ptr long ptr long ptr)
+@ stdcall ZwCreateSection(ptr long ptr ptr long long ptr)
+@ stdcall ZwCreateSymbolicLinkObject(ptr long ptr ptr)
+@ stdcall ZwCreateTimer(ptr long ptr long)
+@ stdcall ZwDeleteBootEntry(long)
+@ stdcall ZwDeleteDriverEntry(long)
+@ stdcall ZwDeleteFile(ptr)
+@ stdcall ZwDeleteKey(ptr)
+@ stdcall ZwDeleteValueKey(ptr ptr)
+@ stdcall ZwDeviceIoControlFile(ptr ptr ptr ptr ptr long ptr long ptr long)
+@ stdcall ZwDisplayString(ptr)
+@ stdcall ZwDuplicateObject(ptr ptr ptr ptr long long long)
+@ stdcall ZwDuplicateToken(ptr long ptr long long ptr)
+@ stdcall ZwEnumerateBootEntries(ptr ptr)
+@ stdcall ZwEnumerateDriverEntries(ptr ptr)
+@ stdcall ZwEnumerateKey(ptr long long ptr long ptr)
+@ stdcall ZwEnumerateValueKey(ptr long long ptr long ptr)
+@ stdcall ZwFlushInstructionCache(ptr ptr long)
+@ stdcall ZwFlushKey(ptr)
+@ stdcall ZwFlushVirtualMemory(ptr ptr ptr ptr)
+@ stdcall ZwFreeVirtualMemory(ptr ptr ptr long)
+@ stdcall ZwFsControlFile(ptr ptr ptr ptr ptr long ptr long ptr long)
+@ stdcall ZwInitiatePowerAction(long long long long)
+@ stdcall ZwIsProcessInJob(ptr ptr)
+@ stdcall ZwLoadDriver(ptr)
+@ stdcall ZwLoadKey(ptr ptr)
+@ stdcall ZwMakeTemporaryObject(ptr)
+@ stdcall ZwMapViewOfSection(ptr ptr ptr long long ptr ptr long long long)
+@ stdcall ZwModifyBootEntry(ptr)
+@ stdcall ZwModifyDriverEntry(ptr)
+@ stdcall ZwNotifyChangeKey(ptr ptr ptr ptr ptr long long ptr long long)
+@ stdcall ZwOpenDirectoryObject(ptr long ptr)
+@ stdcall ZwOpenEvent(ptr long ptr)
+@ stdcall ZwOpenFile(ptr long ptr ptr long long)
+@ stdcall ZwOpenJobObject(ptr long ptr)
+@ stdcall ZwOpenKey(ptr long ptr)
+@ stdcall ZwOpenProcess(ptr long ptr ptr)
+@ stdcall ZwOpenProcessToken(ptr long ptr)
+@ stdcall ZwOpenProcessTokenEx(ptr long long ptr)
+@ stdcall ZwOpenSection(ptr long ptr)
+@ stdcall ZwOpenSymbolicLinkObject(ptr long ptr)
+@ stdcall ZwOpenThread(ptr long ptr ptr)
+@ stdcall ZwOpenThreadToken(ptr long long ptr)
+@ stdcall ZwOpenThreadTokenEx(ptr long long long ptr)
+@ stdcall ZwOpenTimer(ptr long ptr)
+@ stdcall ZwPowerInformation(long ptr long ptr long)
+@ stdcall ZwPulseEvent(ptr ptr)
+@ stdcall ZwQueryBootEntryOrder(ptr ptr)
+@ stdcall ZwQueryBootOptions(ptr ptr)
+@ stdcall ZwQueryDefaultLocale(long ptr)
+@ stdcall ZwQueryDefaultUILanguage(ptr)
+@ stdcall ZwQueryDirectoryFile(ptr ptr ptr ptr ptr ptr long long long ptr long)
+@ stdcall ZwQueryDirectoryObject(ptr ptr long long long ptr ptr)
+@ stdcall ZwQueryDriverEntryOrder(ptr ptr)
+@ stdcall ZwQueryEaFile(ptr ptr ptr long long ptr long ptr long)
+@ stdcall ZwQueryFullAttributesFile(ptr ptr)
+@ stdcall ZwQueryInformationAtom(ptr long ptr long ptr)
+@ stdcall ZwQueryInformationFile(ptr ptr ptr long long)
+@ stdcall ZwQueryInformationJobObject(ptr long ptr long ptr)
+@ stdcall ZwQueryInformationProcess(ptr long ptr long ptr)
+@ stdcall ZwQueryInformationThread(ptr long ptr long ptr)
+@ stdcall ZwQueryInformationToken(ptr long long long ptr)
+@ stdcall ZwQueryInstallUILanguage(ptr)
+@ stdcall ZwQueryKey(ptr long ptr long ptr)
+@ stdcall ZwQueryObject(ptr long ptr long ptr)
+@ stdcall ZwQuerySection(ptr long ptr long ptr)
+@ stdcall ZwQuerySecurityObject(ptr long ptr long ptr)
+@ stdcall ZwQuerySymbolicLinkObject(ptr ptr ptr)
+@ stdcall ZwQuerySystemInformation(long ptr long ptr)
+@ stdcall ZwQueryValueKey(ptr ptr long ptr long ptr)
+@ stdcall ZwQueryVolumeInformationFile(ptr ptr ptr long long)
+@ stdcall ZwReadFile(ptr ptr ptr ptr ptr ptr long ptr ptr)
+@ stdcall ZwReplaceKey(ptr ptr ptr)
+@ stdcall ZwRequestWaitReplyPort(ptr ptr ptr)
+@ stdcall ZwResetEvent(ptr ptr)
+@ stdcall ZwRestoreKey(ptr ptr long)
+@ stdcall ZwSaveKey(ptr ptr)
+@ stdcall ZwSaveKeyEx(ptr ptr long)
+@ stdcall ZwSecureConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr ptr)
+@ stdcall ZwSetBootEntryOrder(ptr ptr)
+@ stdcall ZwSetBootOptions(ptr long)
+@ stdcall ZwSetDefaultLocale(long long)
+@ stdcall ZwSetDefaultUILanguage(long)
+@ stdcall ZwSetDriverEntryOrder(ptr ptr)
+@ stdcall ZwSetEaFile(ptr ptr ptr long)
+@ stdcall ZwSetEvent(ptr ptr)
+@ stdcall ZwSetInformationFile(ptr ptr ptr long long)
+@ stdcall ZwSetInformationJobObject(ptr long ptr long)
+@ stdcall ZwSetInformationObject(ptr long ptr long)
+@ stdcall ZwSetInformationProcess(ptr long ptr long)
+@ stdcall ZwSetInformationThread(ptr long ptr long)
+@ stdcall ZwSetSecurityObject(ptr long ptr)
+@ stdcall ZwSetSystemInformation(long ptr long)
+@ stdcall ZwSetSystemTime(ptr ptr)
+@ stdcall ZwSetTimer(ptr ptr ptr ptr long long ptr)
+@ stdcall ZwSetValueKey(ptr ptr long long ptr long)
+@ stdcall ZwSetVolumeInformationFile(ptr ptr ptr long long)
+@ stdcall ZwTerminateJobObject(ptr long)
+@ stdcall ZwTerminateProcess(ptr long)
+@ stdcall ZwTranslateFilePath(ptr long ptr long)
+@ stdcall ZwUnloadDriver(ptr)
+@ stdcall ZwUnloadKey(ptr)
+@ stdcall ZwUnmapViewOfSection(ptr ptr)
+@ stdcall ZwWaitForMultipleObjects(long ptr long long ptr)
+@ stdcall ZwWaitForSingleObject(ptr long ptr)
+@ stdcall ZwWriteFile(ptr ptr ptr ptr ptr ptr long ptr ptr);
+@ stdcall ZwYieldExecution()
+;_CIcos
+;_CIsin
+;_CIsqrt
+@ cdecl _abnormal_termination()
+@ cdecl _alldiv()
+@ cdecl _alldvrm()
+@ cdecl _allmul()
+@ cdecl _alloca_probe()
+@ cdecl _allrem()
+@ cdecl _allshl()
+@ cdecl _allshr()
+@ cdecl _aulldiv()
+@ cdecl _aulldvrm()
+@ cdecl _aullrem()
+@ cdecl _aullshr()
+@ cdecl _except_handler2()
+@ cdecl _except_handler3()
+@ cdecl _global_unwind2()
+@ cdecl _itoa()
+@ cdecl _itow()
+@ cdecl _local_unwind2()
+@ cdecl _purecall()
+@ cdecl _snprintf()
+@ cdecl _snwprintf()
+@ cdecl _stricmp()
+@ cdecl _strlwr()
+@ cdecl _strnicmp()
+@ cdecl _strnset()
+@ cdecl _strrev()
+@ cdecl _strset()
+@ cdecl _strupr()
+@ cdecl _vsnprintf()
+@ cdecl _vsnwprintf()
+@ cdecl _wcsicmp()
+@ cdecl _wcslwr()
+@ cdecl _wcsnicmp()
+@ cdecl _wcsnset()
+@ cdecl _wcsrev()
+@ cdecl _wcsupr()
+@ cdecl atoi()
+@ cdecl atol()
+@ cdecl isdigit()
+@ cdecl islower()
+@ cdecl isprint()
+@ cdecl isspace()
+@ cdecl isupper()
+@ cdecl isxdigit()
+@ cdecl mbstowcs()
+@ cdecl mbtowc()
+@ cdecl memchr()
+@ cdecl memcpy()
+@ cdecl memmove()
+@ cdecl memset()
+@ cdecl qsort()
+@ cdecl rand()
+@ cdecl sprintf()
+@ cdecl srand()
+@ cdecl strcat()
+@ cdecl strchr()
+@ cdecl strcmp()
+@ cdecl strcpy()
+@ cdecl strlen()
+@ cdecl strncat()
+@ cdecl strncmp()
+@ cdecl strncpy()
+@ cdecl strrchr()
+@ cdecl strspn()
+@ cdecl strstr()
+@ cdecl swprintf()
+@ cdecl tolower()
+@ cdecl toupper()
+@ cdecl towlower()
+@ cdecl towupper()
+@ stdcall vDbgPrintEx(long long str ptr)
+@ stdcall vDbgPrintExWithPrefix(str long long str ptr)
+@ cdecl vsprintf()
+@ cdecl wcscat()
+@ cdecl wcschr()
+@ cdecl wcscmp()
+@ cdecl wcscpy()
+@ cdecl wcscspn()
+@ cdecl wcslen()
+@ cdecl wcsncat()
+@ cdecl wcsncmp()
+@ cdecl wcsncpy()
+@ cdecl wcsrchr()
+@ cdecl wcsspn()
+@ cdecl wcsstr()
+@ cdecl wcstombs()
+@ cdecl wctomb()

diff --git a/reactos/ntoskrnl/ntoskrnl_i386.def b/reactos/ntoskrnl/ntoskrnl_i386.def
deleted file mode 100644 (file)
index 481523b..0000000
--- a/reactos/ntoskrnl/ntoskrnl_i386.def
+++ /dev/null
@@ -1,1590 +0,0 @@
-; reactos/ntoskrnl/ntoskrnl.def
-;
-; ReactOS Operating System
-;
-EXPORTS
-CcCanIWrite@16
-CcCopyRead@24
-CcCopyWrite@20
-CcDeferWrite@24
-CcFastCopyRead@24
-CcFastCopyWrite@16
-CcFastMdlReadWait DATA
-CcFastReadNotPossible DATA
-CcFastReadWait DATA
-CcFlushCache@16
-CcGetDirtyPages@16
-CcGetFileObjectFromBcb@4
-CcGetFileObjectFromSectionPtrs@4
-CcGetFlushedValidData@8
-CcGetLsnForFileObject@8
-CcInitializeCacheMap@20
-CcIsThereDirtyData@4
-CcMapData@24
-CcMdlRead@20
-CcMdlReadComplete@8
-CcMdlWriteAbort@8
-CcMdlWriteComplete@12
-CcPinMappedData@20
-CcPinRead@24
-CcPrepareMdlWrite@20
-CcPreparePinWrite@28
-CcPurgeCacheSection@16
-CcRemapBcb@4
-CcRepinBcb@4
-CcScheduleReadAhead@12
-CcSetAdditionalCacheAttributes@12
-CcSetBcbOwnerPointer@8
-CcSetDirtyPageThreshold@8
-CcSetDirtyPinnedData@8
-CcSetFileSizes@8
-CcSetLogHandleForFile@12
-CcSetReadAheadGranularity@8
-CcUninitializeCacheMap@12
-CcUnpinData@4
-CcUnpinDataForThread@8
-CcUnpinRepinnedBcb@12
-CcWaitForCurrentLazyWriterActivity@0
-CcZeroData@16
-CmRegisterCallback@12
-CmUnRegisterCallback@8
-DbgBreakPoint@0
-DbgBreakPointWithStatus@4
-;DbgCommandString
-DbgLoadImageSymbols@12
-DbgPrint
-DbgPrintEx
-DbgPrintReturnControlC
-DbgPrompt@12
-DbgQueryDebugFilterState@8
-DbgSetDebugFilterState@12
-@ExAcquireFastMutexUnsafe@4
-ExAcquireResourceExclusiveLite@8
-ExAcquireResourceSharedLite@8
-ExAcquireRundownProtection=@ExfAcquireRundownProtection@4
-ExAcquireRundownProtectionCacheAware=@ExfAcquireRundownProtectionCacheAware@4
-ExAcquireRundownProtectionCacheAwareEx=@ExfAcquireRundownProtectionCacheAwareEx@8
-ExAcquireRundownProtectionEx=@ExfAcquireRundownProtectionEx@8
-ExAcquireSharedStarveExclusive@8
-ExAcquireSharedWaitForExclusive@8
-ExAllocateCacheAwareRundownProtection@8
-ExAllocateFromPagedLookasideList@4=ExiAllocateFromPagedLookasideList@4
-ExAllocatePool@8
-ExAllocatePoolWithQuota@8
-ExAllocatePoolWithQuotaTag@12
-ExAllocatePoolWithTag@12
-ExAllocatePoolWithTagPriority@16
-ExConvertExclusiveToSharedLite@4
-ExCreateCallback@16
-ExDeleteNPagedLookasideList@4
-ExDeletePagedLookasideList@4
-ExDeleteResourceLite@4
-ExDesktopObjectType
-ExDisableResourceBoostLite@4
-@ExEnterCriticalRegionAndAcquireFastMutexUnsafe@4
-ExEnterCriticalRegionAndAcquireResourceExclusive@4
-;ExEnterCriticalRegionAndAcquireResourceShared
-;ExEnterCriticalRegionAndAcquireSharedWaitForExclusive
-ExEnumHandleTable@16
-ExEventObjectType=_ExEventObjectType
-ExExtendZone@12
-ExFreeCacheAwareRundownProtection@4
-ExFreePool@4
-ExFreePoolWithTag@8
-ExFreeToPagedLookasideList@8=ExiFreeToPagedLookasideList@8
-ExGetCurrentProcessorCounts@12
-ExGetCurrentProcessorCpuUsage@4
-ExGetExclusiveWaiterCount@4
-ExGetPreviousMode@0
-ExGetSharedWaiterCount@4
-ExInitializeNPagedLookasideList@28
-ExInitializePagedLookasideList@28
-ExInitializeResourceLite@4
-ExInitializeRundownProtection=@ExfInitializeRundownProtection@4
-ExInitializeRundownProtectionCacheAware@8
-ExInitializeZone@16
-ExInterlockedAddLargeInteger@16
-@ExInterlockedAddLargeStatistic@8
-ExInterlockedAddUlong@12
-@ExInterlockedCompareExchange64@16
-ExInterlockedDecrementLong@8
-ExInterlockedExchangeUlong@12
-ExInterlockedExtendZone@16
-@ExInterlockedFlushSList@4
-ExInterlockedIncrementLong@8
-ExInterlockedInsertHeadList@12
-ExInterlockedInsertTailList@12
-ExInterlockedPopEntryList@8
-@ExInterlockedPopEntrySList@8
-ExInterlockedPushEntryList@12
-@ExInterlockedPushEntrySList@12
-ExInterlockedRemoveHeadList@8
-ExIsProcessorFeaturePresent@4
-ExIsResourceAcquiredExclusiveLite@4
-ExIsResourceAcquiredSharedLite@4
-ExLocalTimeToSystemTime@8
-ExNotifyCallback@12
-ExQueryPoolBlockSize@8
-ExQueueWorkItem@8
-ExRaiseAccessViolation@0
-ExRaiseDatatypeMisalignment@0
-ExRaiseException@4=RtlRaiseException@4
-ExRaiseHardError@24
-ExRaiseStatus@4=RtlRaiseStatus@4
-ExReInitializeRundownProtection=@ExfReInitializeRundownProtection@4
-ExReInitializeRundownProtectionCacheAware=@ExfReInitializeRundownProtectionCacheAware@4
-ExRegisterCallback@12
-ExReinitializeResourceLite@4
-@ExReleaseFastMutexUnsafe@4
-@ExReleaseFastMutexUnsafeAndLeaveCriticalRegion@4
-@ExReleaseResourceAndLeaveCriticalRegion@4
-ExReleaseResourceForThreadLite@8
-@ExReleaseResourceLite@4
-ExReleaseRundownProtection=@ExfReleaseRundownProtection@4
-ExReleaseRundownProtectionCacheAware=@ExfReleaseRundownProtectionCacheAware@4
-ExReleaseRundownProtectionCacheAwareEx=@ExfReleaseRundownProtectionCacheAwareEx@8
-ExReleaseRundownProtectionEx=@ExfReleaseRundownProtectionEx@8
-ExRundownCompleted=@ExfRundownCompleted@4
-ExRundownCompletedCacheAware=@ExfRundownCompletedCacheAware@4
-ExSemaphoreObjectType=_ExSemaphoreObjectType
-ExSetResourceOwnerPointer@8
-ExSetTimerResolution@8
-ExSizeOfRundownProtectionCacheAware@0
-ExSystemExceptionFilter@0
-ExSystemTimeToLocalTime@8
-ExUnregisterCallback@4
-ExUuidCreate@4
-ExVerifySuite@4
-ExWaitForRundownProtectionRelease=@ExfWaitForRundownProtectionRelease@4
-ExWaitForRundownProtectionReleaseCacheAware=@ExfWaitForRundownProtectionReleaseCacheAware@4
-ExWindowStationObjectType DATA
-@ExfAcquirePushLockExclusive@4
-@ExfAcquirePushLockShared@4
-@ExfInterlockedAddUlong@12
-@ExfInterlockedCompareExchange64@12
-@ExfInterlockedInsertHeadList@12
-@ExfInterlockedInsertTailList@12
-@ExfInterlockedPopEntryList@8
-@ExfInterlockedPushEntryList@12
-@ExfInterlockedRemoveHeadList@8
-@ExfReleasePushLock@4
-@ExfReleasePushLockExclusive@4
-@ExfReleasePushLockShared@4
-@ExfTryToWakePushLock@4
-@ExfUnblockPushLock@8
-@Exfi386InterlockedDecrementLong@4
-@Exfi386InterlockedExchangeUlong@8
-@Exfi386InterlockedIncrementLong@4
-Exi386InterlockedDecrementLong@4
-Exi386InterlockedExchangeUlong@12
-Exi386InterlockedIncrementLong@4
-@ExiAcquireFastMutex@4=@ExAcquireFastMutex@4
-@ExiReleaseFastMutex@4=@ExReleaseFastMutex@4
-@ExiTryToAcquireFastMutex@4=@ExTryToAcquireFastMutex@4
-FsRtlAcquireFileExclusive
-;FsRtlAddBaseMcbEntry
-FsRtlAddLargeMcbEntry
-FsRtlAddMcbEntry
-FsRtlAddToTunnelCache
-FsRtlAllocateFileLock@8
-FsRtlAllocatePool
-FsRtlAllocatePoolWithQuota
-FsRtlAllocatePoolWithQuotaTag
-FsRtlAllocatePoolWithTag@12
-FsRtlAllocateResource
-FsRtlAreNamesEqual@16
-FsRtlBalanceReads
-FsRtlCheckLockForReadAccess@8
-FsRtlCheckLockForWriteAccess@8
-FsRtlCheckOplock@20
-FsRtlCopyRead@32
-FsRtlCopyWrite
-FsRtlCreateSectionForDataScan@40
-FsRtlCurrentBatchOplock@4
-FsRtlDeleteKeyFromTunnelCache
-FsRtlDeleteTunnelCache
-FsRtlDeregisterUncProvider
-FsRtlDissectDbcs
-FsRtlDissectName@16
-FsRtlDoesDbcsContainWildCards
-FsRtlDoesNameContainWildCards@4
-FsRtlFastCheckLockForRead@24
-FsRtlFastCheckLockForWrite
-FsRtlFastUnlockAll@16
-FsRtlFastUnlockAllByKey@20
-FsRtlFastUnlockSingle@32
-FsRtlFindInTunnelCache
-FsRtlFreeFileLock@4
-FsRtlGetFileSize
-;FsRtlGetNextBaseMcbEntry
-FsRtlGetNextFileLock
-FsRtlGetNextLargeMcbEntry
-FsRtlGetNextMcbEntry
-FsRtlIncrementCcFastReadNoWait
-FsRtlIncrementCcFastReadNotPossible
-FsRtlIncrementCcFastReadResourceMiss
-FsRtlIncrementCcFastReadWait
-;FsRtlInitializeBaseMcb
-FsRtlInitializeFileLock@12
-FsRtlInitializeLargeMcb
-FsRtlInitializeMcb
-FsRtlInitializeOplock
-FsRtlInitializeTunnelCache
-FsRtlInsertPerFileObjectContext
-FsRtlInsertPerStreamContext
-FsRtlIsDbcsInExpression
-FsRtlIsFatDbcsLegal@20
-FsRtlIsHpfsDbcsLegal
-FsRtlIsNameInExpression@16
-FsRtlIsNtstatusExpected@4
-FsRtlIsPagingFile
-FsRtlIsTotalDeviceFailure
-FsRtlLegalAnsiCharacterArray=_FsRtlLegalAnsiCharacterArray
-;FsRtlLookupBaseMcbEntry
-FsRtlLookupLargeMcbEntry
-;FsRtlLookupLastBaseMcbEntry
-;FsRtlLookupLastBaseMcbEntryAndIndex
-FsRtlLookupLastLargeMcbEntry
-FsRtlLookupLastLargeMcbEntryAndIndex
-FsRtlLookupLastMcbEntry
-FsRtlLookupMcbEntry
-FsRtlLookupPerFileObjectContext
-FsRtlLookupPerStreamContextInternal
-FsRtlMdlRead
-FsRtlMdlReadComplete
-FsRtlMdlReadCompleteDev@12
-FsRtlMdlReadDev@28
-FsRtlMdlWriteComplete
-FsRtlMdlWriteCompleteDev@16
-FsRtlNormalizeNtstatus@8
-FsRtlNotifyChangeDirectory
-FsRtlNotifyCleanup@12
-FsRtlNotifyFilterChangeDirectory
-FsRtlNotifyFilterReportChange
-FsRtlNotifyFullChangeDirectory@40
-FsRtlNotifyFullReportChange
-FsRtlNotifyInitializeSync@4
-FsRtlNotifyReportChange
-FsRtlNotifyUninitializeSync@4
-FsRtlNotifyVolumeEvent@8
-;FsRtlNumberOfRunsInBaseMcb
-FsRtlNumberOfRunsInLargeMcb
-FsRtlNumberOfRunsInMcb
-FsRtlOplockFsctrl@12
-FsRtlOplockIsFastIoPossible@4
-FsRtlPostPagingFileStackOverflow
-FsRtlPostStackOverflow
-FsRtlPrepareMdlWrite
-FsRtlPrepareMdlWriteDev@28
-FsRtlPrivateLock@48
-FsRtlProcessFileLock@12
-FsRtlRegisterFileSystemFilterCallbacks
-FsRtlRegisterUncProvider
-FsRtlReleaseFile
-;FsRtlRemoveBaseMcbEntry
-FsRtlRemoveLargeMcbEntry
-FsRtlRemoveMcbEntry
-FsRtlRemovePerFileObjectContext
-FsRtlRemovePerStreamContext
-;FsRtlResetBaseMcb
-FsRtlResetLargeMcb
-;FsRtlSplitBaseMcb
-FsRtlSplitLargeMcb
-FsRtlSyncVolumes
-FsRtlTeardownPerStreamContexts@4
-;FsRtlTruncateBaseMcb
-FsRtlTruncateLargeMcb
-FsRtlTruncateMcb
-;FsRtlUninitializeBaseMcb
-FsRtlUninitializeFileLock@4
-FsRtlUninitializeLargeMcb
-FsRtlUninitializeMcb
-FsRtlUninitializeOplock@4
-HalDispatchTable=_HalDispatchTable
-@HalExamineMBR@16
-HalPrivateDispatchTable DATA
-;HeadlessDispatch
-InbvAcquireDisplayOwnership@0
-InbvCheckDisplayOwnership@0
-InbvDisplayString@4
-InbvEnableBootDriver@4
-InbvEnableDisplayString@4
-InbvInstallDisplayStringFilter@4
-InbvIsBootDriverInstalled@0
-InbvNotifyDisplayOwnershipLost@4
-InbvResetDisplay@0
-InbvSetScrollRegion@16
-InbvSetTextColor@4
-InbvSolidColorFill@20
-InitSafeBootMode DATA
-@InterlockedCompareExchange@12
-@InterlockedDecrement@4
-@InterlockedExchange@8
-@InterlockedExchangeAdd@8
-@InterlockedIncrement@4
-@InterlockedPopEntrySList@4
-@InterlockedPushEntrySList@8
-IoAcquireCancelSpinLock@4
-IoAcquireRemoveLockEx@20
-IoAcquireVpbSpinLock@4
-IoAdapterObjectType DATA
-IoAllocateAdapterChannel@20
-IoAllocateController@16
-IoAllocateDriverObjectExtension@16
-IoAllocateErrorLogEntry@8
-IoAllocateIrp@8
-IoAllocateMdl@20
-IoAllocateWorkItem@4
-@IoAssignDriveLetters@16
-IoAssignResources@24
-IoAttachDevice@12
-IoAttachDeviceByPointer@8
-IoAttachDeviceToDeviceStack@8
-IoAttachDeviceToDeviceStackSafe@12
-IoBuildAsynchronousFsdRequest@24
-IoBuildDeviceIoControlRequest@36
-IoBuildPartialMdl@16
-IoBuildSynchronousFsdRequest@28
-IoCallDriver@8
-IoCancelFileOpen@8
-IoCancelIrp@4
-IoCheckDesiredAccess@8
-IoCheckEaBufferValidity@12
-IoCheckFunctionAccess@24
-IoCheckQuerySetFileInformation@12
-IoCheckQuerySetVolumeInformation@12
-IoCheckQuotaBufferValidity@12
-IoCheckShareAccess@20
-IoCompleteRequest@8
-IoConnectInterrupt@44
-IoCreateController@4
-IoCreateDevice@28
-IoCreateDisk@8
-IoCreateDriver@8
-IoCreateFile@56
-IoCreateFileSpecifyDeviceObjectHint@60
-IoCreateNotificationEvent@8
-IoCreateStreamFileObject@8
-IoCreateStreamFileObjectEx@12
-IoCreateStreamFileObjectLite@8
-IoCreateSymbolicLink@8
-IoCreateSynchronizationEvent@8
-IoCreateUnprotectedSymbolicLink@8
-IoCsqInitialize@28
-IoCsqInitializeEx@28
-IoCsqInsertIrp@12
-IoCsqInsertIrpEx@16
-IoCsqRemoveIrp@8
-IoCsqRemoveNextIrp@8
-IoDeleteController@4
-IoDeleteDevice@4
-IoDeleteDriver@4
-IoDeleteSymbolicLink@4
-IoDetachDevice@4
-IoDeviceHandlerObjectSize DATA
-IoDeviceHandlerObjectType DATA
-IoDeviceObjectType DATA
-IoDisconnectInterrupt@4
-IoDriverObjectType DATA
-IoEnqueueIrp@4
-IoEnumerateDeviceObjectList@16
-IoEnumerateRegisteredFiltersList@12
-IoFastQueryNetworkAttributes@20
-IoFileObjectType=_IoFileObjectType
-IoForwardAndCatchIrp@8=IoForwardIrpSynchronously@8
-IoForwardIrpSynchronously@8
-IoFreeController@4
-IoFreeErrorLogEntry@4
-IoFreeIrp@4
-IoFreeMdl@4
-IoFreeWorkItem@4
-IoGetAttachedDevice@4
-IoGetAttachedDeviceReference@4
-IoGetBaseFileSystemDeviceObject@4
-IoGetBootDiskInformation@8
-IoGetConfigurationInformation@0
-IoGetCurrentProcess@0
-IoGetDeviceAttachmentBaseRef@4
-IoGetDeviceInterfaceAlias@12
-IoGetDeviceInterfaces@16
-IoGetDeviceObjectPointer@16
-IoGetDeviceProperty@20
-IoGetDeviceToVerify@4
-IoGetDiskDeviceObject@8
-IoGetDmaAdapter@12
-IoGetDriverObjectExtension@8
-IoGetFileObjectGenericMapping@0
-IoGetInitialStack@0
-IoGetLowerDeviceObject@4
-IoGetPagingIoPriority@4
-IoGetRelatedDeviceObject@4
-IoGetRequestorProcess@4
-IoGetRequestorProcessId@4
-IoGetRequestorSessionId@8
-IoGetStackLimits@8
-IoGetTopLevelIrp@0
-IoInitializeIrp@12
-IoInitializeRemoveLockEx@20
-IoInitializeTimer@12
-IoInvalidateDeviceRelations@8
-IoInvalidateDeviceState@4
-IoIsFileOriginRemote@4
-IoIsOperationSynchronous@4
-IoIsSystemThread@4
-IoIsValidNameGraftingBuffer@8
-IoIsWdmVersionAvailable@8
-IoMakeAssociatedIrp@8
-IoOpenDeviceInterfaceRegistryKey@12
-IoOpenDeviceRegistryKey@16
-IoPageRead@20
-IoPnPDeliverServicePowerNotification@16
-IoQueryDeviceDescription@32
-IoQueryFileDosDeviceName@8
-IoQueryFileInformation@20
-IoQueryVolumeInformation@20
-IoQueueThreadIrp@4
-IoQueueWorkItem@16
-IoRaiseHardError@12
-IoRaiseInformationalHardError@12
-IoReadDiskSignature@12
-IoReadOperationCount DATA
-@IoReadPartitionTable@16
-IoReadPartitionTableEx@8
-IoReadTransferCount DATA
-IoRegisterBootDriverReinitialization@12
-IoRegisterDeviceInterface@16
-IoRegisterDriverReinitialization@12
-IoRegisterFileSystem@4
-IoRegisterFsRegistrationChange@8
-IoRegisterLastChanceShutdownNotification@4
-IoRegisterPlugPlayNotification@28
-IoRegisterShutdownNotification@4
-IoReleaseCancelSpinLock@4
-IoReleaseRemoveLockAndWaitEx@12
-IoReleaseRemoveLockEx@12
-IoReleaseVpbSpinLock@4
-IoRemoveShareAccess@8
-IoReportDetectedDevice@32
-IoReportHalResourceUsage@16
-IoReportResourceForDetection@28
-IoReportResourceUsage@36
-IoReportTargetDeviceChange@8
-IoReportTargetDeviceChangeAsynchronous@16
-IoRequestDeviceEject@4
-IoReuseIrp@8
-IoSetCompletionRoutineEx@28
-IoSetDeviceInterfaceState@8
-IoSetDeviceToVerify@8
-IoSetFileOrigin@8
-IoSetHardErrorOrVerifyDevice@8
-IoSetInformation@16
-IoSetIoCompletion@24
-@IoSetPartitionInformation@16
-IoSetPartitionInformationEx@12
-IoSetShareAccess@16
-IoSetStartIoAttributes@12
-IoSetSystemPartition@4
-IoSetThreadHardErrorMode@4
-IoSetTopLevelIrp@4
-IoStartNextPacket@8
-IoStartNextPacketByKey@12
-IoStartPacket@16
-IoStartTimer@4
-IoStatisticsLock DATA
-IoStopTimer@4
-IoSynchronousInvalidateDeviceRelations@8
-IoSynchronousPageWrite@20
-IoThreadToProcess@4
-;IoTranslateBusAddress
-IoUnregisterFileSystem@4
-IoUnregisterFsRegistrationChange@8
-IoUnregisterPlugPlayNotification@4
-IoUnregisterShutdownNotification@4
-IoUpdateShareAccess@8
-IoValidateDeviceIoControlAccess@8
-IoVerifyPartitionTable@8
-IoVerifyVolume@8
-IoVolumeDeviceToDosName@8
-IoWMIAllocateInstanceIds@12
-IoWMIDeviceObjectToInstanceName@12
-IoWMIExecuteMethod@24
-IoWMIHandleToInstanceName@12
-IoWMIOpenBlock@12
-IoWMIQueryAllData@12
-IoWMIQueryAllDataMultiple@16
-IoWMIQuerySingleInstance@16
-IoWMIQuerySingleInstanceMultiple@20
-IoWMIRegistrationControl@8
-IoWMISetNotificationCallback@12
-IoWMISetSingleInstance@20
-IoWMISetSingleItem@24
-IoWMISuggestInstanceName@16
-IoWMIWriteEvent@4
-IoWriteErrorLogEntry@4
-IoWriteOperationCount DATA
-@IoWritePartitionTable@20
-IoWritePartitionTableEx@8
-IoWriteTransferCount DATA
-@IofCallDriver@8
-@IofCompleteRequest@8
-KdChangeOption@24
-KdDebuggerEnabled=_KdDebuggerEnabled
-KdDebuggerNotPresent=_KdDebuggerNotPresent
-KdDisableDebugger@0
-KdEnableDebugger@0
-KdEnteredDebugger
-KdPollBreakIn@0
-KdPowerTransition@4
-KdRefreshDebuggerNotPresent@0
-KdSystemDebugControl@28
-Ke386CallBios@8
-;Ke386IoSetAccessProcess
-;Ke386QueryIoAccessMap
-;Ke386SetIoAccessMap
-@KeAcquireGuardedMutex@4
-@KeAcquireGuardedMutexUnsafe@4
-@KeAcquireInStackQueuedSpinLockAtDpcLevel@8
-@KeAcquireInStackQueuedSpinLockForDpc@8
-KeAcquireInterruptSpinLock@4
-KeAcquireSpinLockAtDpcLevel@4
-@KeAcquireSpinLockForDpc@4
-KeAddSystemServiceTable@20
-KeAreAllApcsDisabled@0
-KeAreApcsDisabled@0
-KeAttachProcess@4
-KeBugCheck@4
-KeBugCheckEx@20
-KeCancelTimer@4
-KeCapturePersistentThreadState@28
-KeClearEvent@4
-KeConnectInterrupt@4
-KeDelayExecutionThread@12
-KeDeregisterBugCheckCallback@4
-KeDeregisterBugCheckReasonCallback@4
-KeDeregisterNmiCallback@4
-KeDetachProcess@0
-KeDisconnectInterrupt@4
-KeEnterCriticalRegion@0=_KeEnterCriticalRegion@0
-KeEnterGuardedRegion@0=_KeEnterGuardedRegion@0
-KeEnterKernelDebugger@0
-KeFindConfigurationEntry@16
-KeFindConfigurationNextEntry@20
-KeFlushEntireTb@8
-KeFlushQueuedDpcs@0
-;KeGenericCallDpc
-KeGetCurrentThread@0
-KeGetPreviousMode@0
-KeGetRecommendedSharedDataAlignment@0
-;KeI386AbiosCall
-KeI386AllocateGdtSelectors@8
-;KeI386Call16BitCStyleFunction
-;KeI386Call16BitFunction
-KeI386FlatToGdtSelector@12
-;KeI386GetLid
-KeI386MachineType DATA
-KeI386ReleaseGdtSelectors@8
-;KeI386ReleaseLid
-;KeI386SetGdtSelector
-KeInitializeApc@32
-KeInitializeCrashDumpHeader@20
-KeInitializeDeviceQueue@4
-KeInitializeDpc@12
-KeInitializeEvent@12
-@KeInitializeGuardedMutex@4
-KeInitializeInterrupt@44
-KeInitializeMutant@8
-KeInitializeMutex@8
-KeInitializeQueue@8
-KeInitializeSemaphore@12
-KeInitializeSpinLock@4
-KeInitializeThreadedDpc@12
-KeInitializeTimer@4
-KeInitializeTimerEx@8
-KeInsertByKeyDeviceQueue@12
-KeInsertDeviceQueue@8
-KeInsertHeadQueue@8
-KeInsertQueue@8
-KeInsertQueueApc@16
-KeInsertQueueDpc@12
-KeInvalidateAllCaches@0
-KeIpiGenericCall@8
-KeIsAttachedProcess@0
-KeIsExecutingDpc@0
-;KeIsWaitListEmpty
-KeLeaveCriticalRegion@0=_KeLeaveCriticalRegion@0
-KeLeaveGuardedRegion@0=_KeLeaveGuardedRegion@0
-KeLoaderBlock DATA
-KeNumberProcessors DATA
-KeProfileInterrupt@4
-KeProfileInterruptWithSource@8
-KePulseEvent@12
-KeQueryActiveProcessors@0
-KeQueryInterruptTime@0
-KeQueryPriorityThread@4
-KeQueryRuntimeThread@8
-KeQuerySystemTime@4
-KeQueryTickCount@4
-KeQueryTimeIncrement@0
-KeRaiseUserException@4
-KeReadStateEvent@4
-KeReadStateMutant@4
-KeReadStateMutex@4=KeReadStateMutant@4
-KeReadStateQueue@4
-KeReadStateSemaphore@4
-KeReadStateTimer@4
-KeRegisterBugCheckCallback@20
-KeRegisterBugCheckReasonCallback@16
-KeRegisterNmiCallback@8
-@KeReleaseGuardedMutex@4
-@KeReleaseGuardedMutexUnsafe@4
-@KeReleaseInStackQueuedSpinLockForDpc@4
-@KeReleaseInStackQueuedSpinLockFromDpcLevel@4
-KeReleaseInterruptSpinLock@8
-KeReleaseMutant@16
-KeReleaseMutex@8
-KeReleaseSemaphore@16
-@KeReleaseSpinLockForDpc@8
-KeReleaseSpinLockFromDpcLevel@4
-KeRemoveByKeyDeviceQueue@8
-KeRemoveByKeyDeviceQueueIfBusy@8
-KeRemoveDeviceQueue@4
-KeRemoveEntryDeviceQueue@8
-KeRemoveQueue@12
-KeRemoveQueueDpc@4
-KeRemoveSystemServiceTable@4
-KeResetEvent@4
-KeRestoreFloatingPointState@4
-KeRevertToUserAffinityThread@0
-KeRundownQueue@4
-KeSaveFloatingPointState@4
-KeSaveStateForHibernate
-KeServiceDescriptorTable DATA
-KeSetAffinityThread@8
-KeSetBasePriorityThread@8
-KeSetDmaIoCoherency@4
-KeSetEvent@12
-KeSetEventBoostPriority@8
-KeSetIdealProcessorThread@8
-KeSetImportanceDpc@8
-KeSetKernelStackSwapEnable@4
-KeSetPriorityThread@8
-KeSetProfileIrql@4
-KeSetSystemAffinityThread@4
-KeSetTargetProcessorDpc@8
-KeSetTimeIncrement@8
-KeSetTimer@16
-KeSetTimerEx@20
-;KeSignalCallDpcDone
-;KeSignalCallDpcSynchronize
-KeStackAttachProcess@8
-KeSynchronizeExecution@12
-KeTerminateThread@4
-@KeTestSpinLock@4
-KeTickCount DATA
-@KeTryToAcquireGuardedMutex@4
-@KeTryToAcquireSpinLockAtDpcLevel@4
-KeUnstackDetachProcess@4
-KeUpdateRunTime
-KeUpdateSystemTime@0
-KeUserModeCallback@20
-KeWaitForMultipleObjects@32
-KeWaitForMutexObject@20=KeWaitForSingleObject@20
-KeWaitForSingleObject@20
-@KefAcquireSpinLockAtDpcLevel@4
-@KefReleaseSpinLockFromDpcLevel@4
-Kei386EoiHelper@0
-@KiAcquireSpinLock@4
-KiBugCheckData DATA
-KiCheckForKernelApcDelivery@0
-KiCoprocessorError@0
-KiDeliverApc@12
-KiDispatchInterrupt@0
-KiEnableTimerWatchdog
-KiIpiServiceRoutine@8
-@KiReleaseSpinLock@4
-KiUnexpectedInterrupt
-;Kii386SpinOnSpinLock
-LdrAccessResource@16
-LdrEnumResources@20
-LdrFindResourceDirectory_U@16
-LdrFindResource_U@16
-LpcPortObjectType DATA
-LpcRequestPort@8
-LpcRequestWaitReplyPort@12
-LsaCallAuthenticationPackage@28
-LsaDeregisterLogonProcess@8
-LsaFreeReturnBuffer@4
-LsaLogonUser@56
-LsaLookupAuthenticationPackage@12
-LsaRegisterLogonProcess@12
-Mm64BitPhysicalAddress DATA
-MmAddPhysicalMemory@8
-MmAddVerifierThunks@8
-MmAdjustWorkingSetSize@16
-MmAdvanceMdl@8
-MmAllocateContiguousMemory@12
-MmAllocateContiguousMemorySpecifyCache@32
-MmAllocateMappingAddress@8
-MmAllocateNonCachedMemory@4
-MmAllocatePagesForMdl@28
-MmAllocatePagesForMdlEx@36
-MmBuildMdlForNonPagedPool@4
-MmCanFileBeTruncated@8
-;MmCommitSessionMappedView
-MmCreateMdl@12
-;MmCreateMirror
-MmCreateSection@32
-MmDisableModifiedWriteOfSection@4
-MmFlushImageSection@8
-MmForceSectionClosed@8
-MmFreeContiguousMemory@4
-MmFreeContiguousMemorySpecifyCache@12
-MmFreeMappingAddress@8
-MmFreeNonCachedMemory@8
-MmFreePagesFromMdl@4
-MmGetPhysicalAddress@4
-MmGetPhysicalMemoryRanges@0
-MmGetSystemRoutineAddress@4
-MmGetVirtualForPhysical@8
-MmGrowKernelStack@4
-MmHighestUserAddress DATA
-MmIsAddressValid@4
-MmIsDriverVerifying@4
-;MmIsIoSpaceActive
-MmIsNonPagedSystemAddressValid@4
-MmIsRecursiveIoFault@0
-MmIsThisAnNtAsSystem@0
-MmIsVerifierEnabled@4
-MmLockPagableDataSection@4
-MmLockPagableImageSection@4=MmLockPagableDataSection@4
-MmLockPagableSectionByHandle@4
-MmMapIoSpace@16
-MmMapLockedPages@8
-MmMapLockedPagesSpecifyCache@24
-MmMapLockedPagesWithReservedMapping@16
-MmMapMemoryDumpMdl@4
-MmMapUserAddressesToPage@12
-MmMapVideoDisplay@16
-MmMapViewInSessionSpace@12
-MmMapViewInSystemSpace@12
-MmMapViewOfSection@40
-MmMarkPhysicalMemoryAsBad@8
-MmMarkPhysicalMemoryAsGood@8
-MmPageEntireDriver@4
-MmPrefetchPages@8
-MmProbeAndLockPages@12
-MmProbeAndLockProcessPages@16
-MmProbeAndLockSelectedPages@16
-MmProtectMdlSystemAddress@8
-MmQuerySystemSize@0
-MmRemovePhysicalMemory@8
-MmResetDriverPaging@4
-MmSectionObjectType DATA
-MmSecureVirtualMemory@12
-MmSetAddressRangeModified@8
-MmSetBankedSection@24
-MmSizeOfMdl@8
-MmSystemRangeStart DATA
-MmTrimAllSystemPagableMemory@4
-MmUnlockPagableImageSection@4
-MmUnlockPages@4
-MmUnmapIoSpace@8
-MmUnmapLockedPages@8
-MmUnmapReservedMapping@12
-MmUnmapVideoDisplay@8
-MmUnmapViewInSessionSpace@4
-MmUnmapViewInSystemSpace@4
-MmUnmapViewOfSection@8
-MmUnsecureVirtualMemory@4
-MmUserProbeAddress DATA
-NlsAnsiCodePage DATA
-NlsLeadByteInfo DATA
-NlsMbCodePageTag DATA
-NlsMbOemCodePageTag DATA
-NlsOemCodePage DATA
-NlsOemLeadByteInfo=_NlsOemLeadByteInfo
-NtAddAtom@12
-NtAdjustPrivilegesToken@24
-NtAlertThread@4
-NtAllocateLocallyUniqueId@4
-NtAllocateUuids@16
-NtAllocateVirtualMemory@24
-NtBuildNumber DATA
-NtClose@4
-NtConnectPort@32
-NtCreateEvent@20
-NtCreateFile@44
-NtCreateSection@28
-NtCreateTimer@16
-NtDeleteAtom@4
-NtDeleteFile@4
-NtDeviceIoControlFile@40
-NtDuplicateObject@28
-NtDuplicateToken@24
-NtFindAtom@12
-NtFreeVirtualMemory@16
-NtFsControlFile@40
-NtGlobalFlag DATA
-NtLockFile@40
-NtMakePermanentObject@4
-NtMapViewOfSection@40
-NtNotifyChangeDirectoryFile@36
-NtOpenEvent@12
-NtOpenFile@24
-NtOpenProcess@16
-NtOpenProcessToken@12
-NtOpenProcessTokenEx@16
-NtOpenThread@16
-NtOpenThreadToken@16
-NtOpenThreadTokenEx@20
-NtQueryDirectoryFile@44
-NtQueryEaFile@36
-NtQueryInformationAtom@20
-NtQueryInformationFile@20
-NtQueryInformationProcess@20
-NtQueryInformationThread@20
-NtQueryInformationToken@20
-NtQueryQuotaInformationFile@36
-NtQuerySecurityObject@20
-NtQuerySystemInformation@16
-NtQueryVolumeInformationFile@20
-NtReadFile@36
-NtRequestPort@8
-NtRequestWaitReplyPort@12
-NtSetEaFile@16
-NtSetEvent@8
-NtSetInformationFile@20
-NtSetInformationProcess@16
-NtSetInformationThread@16
-NtSetQuotaInformationFile@16
-NtSetSecurityObject@12
-NtSetVolumeInformationFile@20
-NtShutdownSystem@4
-NtTraceEvent@16
-NtUnlockFile@20
-NtVdmControl@8
-NtWaitForSingleObject@12
-NtWriteFile@36
-ObAssignSecurity@16
-ObCheckCreateObjectAccess@28
-ObCheckObjectAccess@20
-ObCloseHandle@8
-ObCreateObject@36
-ObCreateObjectType@16
-;ObDeleteCapturedInsertInfo
-ObDereferenceObject@4
-ObDereferenceObjectDeferDelete@4
-ObDereferenceSecurityDescriptor@8
-ObFindHandleForObject@20
-ObGetObjectSecurity@12
-ObInsertObject@24
-ObIsKernelHandle@4
-ObLogSecurityDescriptor@12
-ObMakeTemporaryObject@4
-ObOpenObjectByName@28
-ObOpenObjectByPointer@28
-ObQueryNameString@16
-ObQueryObjectAuditingByHandle@8
-ObReferenceObjectByHandle@24
-ObReferenceObjectByName@32
-ObReferenceObjectByPointer@16
-ObReferenceSecurityDescriptor@8
-ObReleaseObjectSecurity@8
-;ObSetHandleAttributes@12
-ObSetSecurityDescriptorInfo@24
-ObSetSecurityObjectByPointer@12
-@ObfDereferenceObject@4
-@ObfReferenceObject@4
-;PfxFindPrefix
-;PfxInitialize
-;PfxInsertPrefix
-;PfxRemovePrefix
-PoCallDriver@8
-;PoCancelDeviceNotify
-PoQueueShutdownWorkItem@4
-PoRegisterDeviceForIdleDetection@16
-;PoRegisterDeviceNotify
-PoRegisterSystemState@8
-PoRequestPowerIrp@24
-;PoRequestShutdownEvent
-;PoSetHiberRange
-PoSetDeviceBusy@4
-PoSetPowerState@12
-PoSetSystemState@4
-;PoShutdownBugCheck
-PoStartNextPowerIrp@4
-PoUnregisterSystemState@4
-ProbeForRead@12
-ProbeForWrite@12
-PsAssignImpersonationToken@8
-PsChargePoolQuota@12
-PsChargeProcessNonPagedPoolQuota@4=PsDereferenceImpersonationToken@4
-PsChargeProcessPagedPoolQuota@8
-PsChargeProcessPoolQuota@12
-PsCreateSystemProcess@12
-PsCreateSystemThread@28
-PsDereferenceImpersonationToken@4=PsDereferencePrimaryToken@4
-PsDereferencePrimaryToken@4
-PsDisableImpersonation@8
-PsEstablishWin32Callouts@4
-PsGetContextThread@12
-PsGetCurrentProcess@0=IoGetCurrentProcess@0
-PsGetCurrentProcessId@0
-PsGetCurrentProcessSessionId@0
-PsGetCurrentProcessWin32Process@0
-PsGetCurrentThread@0=KeGetCurrentThread@0
-PsGetCurrentThreadId@0
-PsGetCurrentThreadPreviousMode@0
-;PsGetCurrentThreadProcess
-;PsGetCurrentThreadProcessId
-PsGetCurrentThreadStackBase@0
-PsGetCurrentThreadStackLimit@0
-;PsGetCurrentThreadTeb
-PsGetCurrentThreadWin32Thread@0
-;PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion
-PsGetJobLock@4
-PsGetJobSessionId@4
-PsGetJobUIRestrictionsClass@4
-PsGetProcessCreateTimeQuadPart@4
-PsGetProcessDebugPort@4
-PsGetProcessExitProcessCalled@4
-PsGetProcessExitStatus@4
-PsGetProcessExitTime@0
-PsGetProcessId@4
-PsGetProcessImageFileName@4
-PsGetProcessInheritedFromUniqueProcessId@4
-PsGetProcessJob@4
-PsGetProcessPeb@4
-PsGetProcessPriorityClass@4
-PsGetProcessSectionBaseAddress@4
-PsGetProcessSecurityPort@4
-PsGetProcessSessionId@4
-;PsGetProcessSessionIdEx
-PsGetProcessWin32Process@4
-PsGetProcessWin32WindowStation@4
-PsGetThreadFreezeCount@4
-PsGetThreadHardErrorsAreDisabled@4
-PsGetThreadId@4
-PsGetThreadProcess@4
-PsGetThreadProcessId@4
-PsGetThreadSessionId@4
-PsGetThreadTeb@4
-PsGetThreadWin32Thread@4
-PsGetVersion@16
-PsImpersonateClient@20
-PsInitialSystemProcess DATA
-PsIsProcessBeingDebugged@4
-;PsIsSystemProcess
-PsIsSystemThread@4
-PsIsThreadImpersonating@4
-PsIsThreadTerminating@4
-PsJobType DATA
-PsLookupProcessByProcessId@8
-PsLookupProcessThreadByCid@12
-PsLookupThreadByThreadId@8
-PsProcessType=_PsProcessType
-PsReferenceImpersonationToken@16
-PsReferencePrimaryToken@4
-PsRemoveCreateThreadNotifyRoutine@4
-PsRemoveLoadImageNotifyRoutine@4
-PsRestoreImpersonation@8
-PsReturnPoolQuota@12
-PsReturnProcessNonPagedPoolQuota@8
-PsReturnProcessPagedPoolQuota@8
-PsRevertThreadToSelf@4
-PsRevertToSelf@0
-PsSetContextThread@12
-PsSetCreateProcessNotifyRoutine@8
-PsSetCreateThreadNotifyRoutine@4
-PsSetJobUIRestrictionsClass@8
-PsSetLegoNotifyRoutine@4
-PsSetLoadImageNotifyRoutine@4
-PsSetProcessPriorityByClass@8
-PsSetProcessPriorityClass@8
-PsSetProcessSecurityPort@8
-PsSetProcessWin32Process@8
-PsSetProcessWindowStation@8
-PsSetThreadHardErrorsAreDisabled@8
-PsSetThreadWin32Thread@8
-PsTerminateSystemThread@4
-PsThreadType=_PsThreadType
-;PsWrapApcWow64Thread
-READ_REGISTER_BUFFER_UCHAR@12
-READ_REGISTER_BUFFER_ULONG@12
-READ_REGISTER_BUFFER_USHORT@12
-READ_REGISTER_UCHAR@4
-READ_REGISTER_ULONG@4
-READ_REGISTER_USHORT@4
-KeRosDumpStackFrames@8
-RtlAbsoluteToSelfRelativeSD@12
-RtlAddAccessAllowedAce@16
-RtlAddAccessAllowedAceEx@20
-RtlAddAce@20
-RtlAddAtomToAtomTable@12
-RtlAddRange@36
-RtlAllocateAndInitializeSid@44
-RtlAllocateHeap@12
-RtlAnsiCharToUnicodeChar@4
-RtlAnsiStringToUnicodeSize@4=RtlxAnsiStringToUnicodeSize@4
-RtlAnsiStringToUnicodeString@12
-RtlAppendAsciizToString@8
-RtlAppendStringToString@8
-RtlAppendUnicodeStringToString@8
-RtlAppendUnicodeToString@8
-RtlAreAllAccessesGranted@8
-RtlAreAnyAccessesGranted@8
-RtlAreBitsClear@12
-RtlAreBitsSet@12
-RtlAssert@16
-RtlCaptureContext@4
-RtlCaptureStackBackTrace@16
-RtlCharToInteger@12
-RtlCheckRegistryKey@8
-RtlClearAllBits@4
-RtlClearBit@8
-RtlClearBits@12
-RtlCompareMemory@12
-RtlCompareMemoryUlong@12
-RtlCompareString@12
-RtlCompareUnicodeString@12
-RtlCompressBuffer@32
-RtlCompressChunks@28
-RtlConvertLongToLargeInteger@4
-RtlConvertSidToUnicodeString@12
-RtlConvertUlongToLargeInteger@4
-RtlCopyLuid@8
-RtlCopyRangeList@8
-RtlCopySid@12
-RtlCopyString@8
-RtlCopyUnicodeString@8
-RtlCreateAcl@12
-RtlCreateAtomTable@8
-RtlCreateHeap@24
-RtlCreateRegistryKey@8
-RtlCreateSecurityDescriptor@8
-RtlCreateSystemVolumeInformationFolder@4
-RtlCreateUnicodeString@8
-RtlCustomCPToUnicodeN@24
-RtlDecompressBuffer@24
-RtlDecompressChunks@28
-RtlDecompressFragment@32
-RtlDelete@4
-RtlDeleteAce@8
-RtlDeleteAtomFromAtomTable@8
-RtlDeleteElementGenericTable@8
-RtlDeleteElementGenericTableAvl@8
-RtlDeleteNoSplay@8
-RtlDeleteOwnersRanges@8
-RtlDeleteRange@24
-RtlDeleteRegistryValue@12
-RtlDescribeChunk@20
-RtlDestroyAtomTable@4
-RtlDestroyHeap@4
-RtlDowncaseUnicodeString@12
-RtlEmptyAtomTable@8
-RtlEnlargedIntegerMultiply@8
-RtlEnlargedUnsignedDivide@16
-RtlEnlargedUnsignedMultiply@8
-RtlEnumerateGenericTable@8
-RtlEnumerateGenericTableAvl@8
-RtlEnumerateGenericTableLikeADirectory@28
-RtlEnumerateGenericTableWithoutSplaying@8
-RtlEnumerateGenericTableWithoutSplayingAvl@8
-RtlEqualLuid@8
-RtlEqualSid@8
-RtlEqualString@12
-RtlEqualUnicodeString@12
-RtlExtendedIntegerMultiply@12
-RtlExtendedLargeIntegerDivide@16
-RtlExtendedMagicDivide@20
-RtlFillMemory@12
-RtlFillMemoryUlong@12
-RtlFindClearBits@12
-RtlFindClearBitsAndSet@12
-RtlFindClearRuns@16
-RtlFindFirstRunClear@8
-RtlFindLastBackwardRunClear@12
-RtlFindLeastSignificantBit@8
-RtlFindLongestRunClear@8
-RtlFindMessage@20
-RtlFindMostSignificantBit@8
-RtlFindNextForwardRunClear@12
-RtlFindRange@48
-RtlFindSetBits@12
-RtlFindSetBitsAndClear@12
-RtlFindUnicodePrefix@12
-RtlFormatCurrentUserKeyPath@4
-RtlFreeAnsiString@4
-RtlFreeHeap@12
-RtlFreeOemString@4
-RtlFreeRangeList@4
-RtlFreeUnicodeString@4
-RtlGUIDFromString@8
-RtlGenerate8dot3Name@16
-RtlGetAce@12
-RtlGetCallersAddress@8
-RtlGetCompressionWorkSpaceSize@12
-RtlGetDaclSecurityDescriptor@16
-RtlGetDefaultCodePage@8
-RtlGetElementGenericTable@8
-RtlGetElementGenericTableAvl@8
-RtlGetFirstRange@12
-RtlGetGroupSecurityDescriptor@12
-RtlGetNextRange@12
-RtlGetNtGlobalFlags@0
-RtlGetOwnerSecurityDescriptor@12
-RtlGetSaclSecurityDescriptor@16
-RtlGetSetBootStatusData@24
-RtlGetVersion@4
-RtlHashUnicodeString@16
-RtlImageDirectoryEntryToData@16
-RtlImageNtHeader@4
-RtlInitAnsiString@8
-RtlInitAnsiStringEx@8
-RtlInitCodePageTable@8
-RtlInitString@8
-RtlInitUnicodeString@8
-RtlInitUnicodeStringEx@8
-RtlInitializeBitMap@12
-RtlInitializeGenericTable@20
-RtlInitializeGenericTableAvl@20
-RtlInitializeRangeList@4
-RtlInitializeSid@12
-RtlInitializeUnicodePrefix@4
-RtlInsertElementGenericTable@16
-RtlInsertElementGenericTableAvl@16
-RtlInsertElementGenericTableFull@24
-RtlInsertElementGenericTableFullAvl@24
-RtlInsertUnicodePrefix@12
-RtlInt64ToUnicodeString@16
-RtlIntegerToChar@16
-RtlIntegerToUnicode@16
-RtlIntegerToUnicodeString@12
-RtlInvertRangeList@8
-RtlIpv4AddressToStringA@8
-RtlIpv4AddressToStringExA@16
-RtlIpv4AddressToStringExW@16
-RtlIpv4AddressToStringW@8
-RtlIpv4StringToAddressA@16
-RtlIpv4StringToAddressExA@16
-RtlIpv4StringToAddressExW@16
-RtlIpv4StringToAddressW@16
-RtlIpv6AddressToStringA@8
-RtlIpv6AddressToStringExA@20
-RtlIpv6AddressToStringExW@20
-RtlIpv6AddressToStringW@8
-RtlIpv6StringToAddressA@12
-RtlIpv6StringToAddressExA@16
-RtlIpv6StringToAddressExW@16
-RtlIpv6StringToAddressW@12
-RtlIsGenericTableEmpty@4
-RtlIsGenericTableEmptyAvl@4
-RtlIsNameLegalDOS8Dot3@12
-RtlIsRangeAvailable@40
-RtlIsValidOemCharacter@4
-RtlLargeIntegerAdd@16
-RtlLargeIntegerArithmeticShift@12
-RtlLargeIntegerDivide@20
-RtlLargeIntegerNegate@8
-RtlLargeIntegerShiftLeft@12
-RtlLargeIntegerShiftRight@12
-RtlLargeIntegerSubtract@16
-RtlLengthRequiredSid@4
-RtlLengthSecurityDescriptor@4
-RtlLengthSid@4
-RtlLockBootStatusData@4
-RtlLookupAtomInAtomTable@12
-RtlLookupElementGenericTable@8
-RtlLookupElementGenericTableAvl@8
-RtlLookupElementGenericTableFull@16
-RtlLookupElementGenericTableFullAvl@16
-RtlMapGenericMask@8
-RtlMapSecurityErrorToNtStatus@4
-RtlMergeRangeLists@16
-RtlMoveMemory@12
-RtlMultiByteToUnicodeN@20
-RtlMultiByteToUnicodeSize@12
-RtlNextUnicodePrefix@8
-RtlNtStatusToDosError@4
-RtlNtStatusToDosErrorNoTeb@4
-RtlNumberGenericTableElements@4
-RtlNumberGenericTableElementsAvl@4
-RtlNumberOfClearBits@4
-RtlNumberOfSetBits@4
-RtlOemStringToCountedUnicodeString@12
-RtlOemStringToUnicodeSize@4=RtlxOemStringToUnicodeSize@4
-RtlOemStringToUnicodeString@12
-RtlOemToUnicodeN@20
-RtlPinAtomInAtomTable@8
-@RtlPrefetchMemoryNonTemporal@8
-RtlPrefixString@12
-RtlPrefixUnicodeString@12
-RtlQueryAtomInAtomTable@24
-RtlQueryRegistryValues@20
-RtlQueryTimeZoneInformation@4
-RtlRaiseException@4
-RtlRandom@4
-RtlRandomEx@4
-RtlRealPredecessor@4
-RtlRealSuccessor@4
-RtlRemoveUnicodePrefix@8
-RtlReserveChunk@20
-RtlSecondsSince1970ToTime@8
-RtlSecondsSince1980ToTime@8
-RtlSelfRelativeToAbsoluteSD@44
-RtlSelfRelativeToAbsoluteSD2@8
-RtlSetAllBits@4
-RtlSetBit@8
-RtlSetBits@12
-RtlSetDaclSecurityDescriptor@16
-RtlSetGroupSecurityDescriptor@12
-RtlSetOwnerSecurityDescriptor@12
-RtlSetSaclSecurityDescriptor@16
-RtlSetTimeZoneInformation@4
-RtlSizeHeap@12
-RtlSplay@4
-RtlStringFromGUID@8
-RtlSubAuthorityCountSid@4
-RtlSubAuthoritySid@8
-RtlSubtreePredecessor@4
-RtlSubtreeSuccessor@4
-RtlTestBit@8
-RtlTimeFieldsToTime@8
-RtlTimeToElapsedTimeFields@8
-RtlTimeToSecondsSince1970@8
-RtlTimeToSecondsSince1980@8
-RtlTimeToTimeFields@8
-;RtlTraceDatabaseAdd
-;RtlTraceDatabaseCreate
-;RtlTraceDatabaseDestroy
-;RtlTraceDatabaseEnumerate
-;RtlTraceDatabaseFind
-;RtlTraceDatabaseLock
-;RtlTraceDatabaseUnlock
-;RtlTraceDatabaseValidate
-@RtlUlongByteSwap@4
-@RtlUlonglongByteSwap@8
-RtlUnicodeStringToAnsiSize@4=RtlxUnicodeStringToAnsiSize@4
-RtlUnicodeStringToAnsiString@12
-RtlUnicodeStringToCountedOemString@12
-RtlUnicodeStringToInteger@12
-RtlUnicodeStringToOemSize@4=RtlxUnicodeStringToOemSize@4
-RtlUnicodeStringToOemString@12
-RtlUnicodeToCustomCPN@24
-RtlUnicodeToMultiByteN@20
-RtlUnicodeToMultiByteSize@12
-RtlUnicodeToOemN@20
-RtlUnlockBootStatusData@4
-RtlUnwind@16
-RtlUpcaseUnicodeChar@4
-RtlUpcaseUnicodeString@12
-RtlUpcaseUnicodeStringToAnsiString@12
-RtlUpcaseUnicodeStringToCountedOemString@12
-RtlUpcaseUnicodeStringToOemString@12
-RtlUpcaseUnicodeToCustomCPN@24
-RtlUpcaseUnicodeToMultiByteN@20
-RtlUpcaseUnicodeToOemN@20
-RtlUpperChar@4
-RtlUpperString@8
-@RtlUshortByteSwap@4
-RtlValidRelativeSecurityDescriptor@12
-RtlValidSecurityDescriptor@4
-RtlValidSid@4
-RtlVerifyVersionInfo@16
-RtlVolumeDeviceToDosName@8
-RtlWalkFrameChain@12
-RtlWriteRegistryValue@24
-RtlZeroHeap@8
-RtlZeroMemory@8
-RtlxAnsiStringToUnicodeSize@4
-RtlxOemStringToUnicodeSize@4
-RtlxUnicodeStringToAnsiSize@4
-RtlxUnicodeStringToOemSize@4
-SeAccessCheck@40
-SeAppendPrivileges@8
-SeAssignSecurity@28
-SeAssignSecurityEx@36
-SeAuditHardLinkCreation@12
-SeAuditingFileEvents@8
-SeAuditingFileEventsWithContext@12
-SeAuditingFileOrGlobalEvents@12
-SeAuditingHardLinkEvents@8
-SeAuditingHardLinkEventsWithContext@12
-SeCaptureSecurityDescriptor@20
-SeCaptureSubjectContext@4
-SeCloseObjectAuditAlarm@12
-SeCreateAccessState@16
-SeCreateClientSecurity@16
-SeCreateClientSecurityFromSubjectContext@16
-SeDeassignSecurity@4
-SeDeleteAccessState@4
-SeDeleteObjectAuditAlarm@8
-SeExports DATA
-SeFilterToken@24
-SeFreePrivileges@4
-SeImpersonateClient@8
-SeImpersonateClientEx@8
-SeLockSubjectContext@4
-SeMarkLogonSessionForTerminationNotification@4
-SeOpenObjectAuditAlarm@36
-SeOpenObjectForDeleteAuditAlarm@36
-SePrivilegeCheck@12
-SePrivilegeObjectAuditAlarm@24
-SePublicDefaultDacl DATA
-SeQueryAuthenticationIdToken@8
-SeQueryInformationToken@12
-SeQuerySecurityDescriptorInfo@16
-SeQuerySessionIdToken@8
-SeRegisterLogonSessionTerminatedRoutine@4
-SeReleaseSecurityDescriptor@12
-SeReleaseSubjectContext@4
-SeSetAccessStateGenericMapping@8
-;SeSetAuditParameter
-SeSetSecurityDescriptorInfo@24
-SeSetSecurityDescriptorInfoEx@28
-SeSinglePrivilegeCheck@12
-SeSystemDefaultDacl DATA
-SeTokenImpersonationLevel@4
-SeTokenIsAdmin@4
-SeTokenIsRestricted@4
-SeTokenIsWriteRestricted@4
-SeTokenType@4
-SeUnlockSubjectContext@4
-SeUnregisterLogonSessionTerminatedRoutine@4
-SeValidSecurityDescriptor@8
-VerSetConditionMask@16
-;VfFailDeviceNode
-;VfFailDriver
-;VfFailSystemBIOS
-;VfIsVerificationEnabled
-WRITE_REGISTER_BUFFER_UCHAR@12
-WRITE_REGISTER_BUFFER_ULONG@12
-WRITE_REGISTER_BUFFER_USHORT@12
-WRITE_REGISTER_UCHAR@8
-WRITE_REGISTER_ULONG@8
-WRITE_REGISTER_USHORT@8
-;WmiFlushTrace
-;WmiGetClock
-;WmiQueryTrace
-;WmiQueryTraceInformation
-;WmiStartTrace
-;WmiStopTrace
-;WmiTraceFastEvent
-;WmiTraceMessage
-;WmiTraceMessageVa
-;WmiUpdateTrace
-;XIPDispatch
-ZwAccessCheckAndAuditAlarm@44
-ZwAddBootEntry@8
-ZwAddDriverEntry@8
-ZwAdjustPrivilegesToken@24
-ZwAlertThread@4
-ZwAllocateVirtualMemory@24
-ZwAssignProcessToJobObject@8
-ZwCancelIoFile@8
-ZwCancelTimer@8
-ZwClearEvent@4
-ZwClose@4
-ZwCloseObjectAuditAlarm@12
-ZwConnectPort@32
-ZwCreateDirectoryObject@12
-ZwCreateEvent@20
-ZwCreateFile@44
-ZwCreateJobObject@12
-ZwCreateKey@28
-ZwCreateSection@28
-ZwCreateSymbolicLinkObject@16
-ZwCreateTimer@16
-ZwDeleteBootEntry@4
-ZwDeleteDriverEntry@4
-ZwDeleteFile@4
-ZwDeleteKey@4
-ZwDeleteValueKey@8
-ZwDeviceIoControlFile@40
-ZwDisplayString@4
-ZwDuplicateObject@28
-ZwDuplicateToken@24
-ZwEnumerateBootEntries@8
-ZwEnumerateDriverEntries@8
-ZwEnumerateKey@24
-ZwEnumerateValueKey@24
-ZwFlushInstructionCache@12
-ZwFlushKey@4
-ZwFlushVirtualMemory@16
-ZwFreeVirtualMemory@16
-ZwFsControlFile@40
-ZwInitiatePowerAction@16
-ZwIsProcessInJob@8
-ZwLoadDriver@4
-ZwLoadKey@8
-ZwMakeTemporaryObject@4
-ZwMapViewOfSection@40
-ZwModifyBootEntry@4
-ZwModifyDriverEntry@4
-ZwNotifyChangeKey@40
-ZwOpenDirectoryObject@12
-ZwOpenEvent@12
-ZwOpenFile@24
-ZwOpenJobObject@12
-ZwOpenKey@12
-ZwOpenProcess@16
-ZwOpenProcessToken@12
-ZwOpenProcessTokenEx@16
-ZwOpenSection@12
-ZwOpenSymbolicLinkObject@12
-ZwOpenThread@16
-ZwOpenThreadToken@16
-ZwOpenThreadTokenEx@20
-ZwOpenTimer@12
-ZwPowerInformation@20
-ZwPulseEvent@8
-ZwQueryBootEntryOrder@8
-ZwQueryBootOptions@8
-ZwQueryDefaultLocale@8
-ZwQueryDefaultUILanguage@4
-ZwQueryDirectoryFile@44
-ZwQueryDirectoryObject@28
-ZwQueryDriverEntryOrder@8
-ZwQueryEaFile@36
-ZwQueryFullAttributesFile@8
-ZwQueryInformationAtom@20
-ZwQueryInformationFile@20
-ZwQueryInformationJobObject@20
-ZwQueryInformationProcess@20
-ZwQueryInformationThread@20
-ZwQueryInformationToken@20
-ZwQueryInstallUILanguage@4
-ZwQueryKey@20
-ZwQueryObject@20
-ZwQuerySection@20
-ZwQuerySecurityObject@20
-ZwQuerySymbolicLinkObject@12
-ZwQuerySystemInformation@16
-ZwQueryValueKey@24
-ZwQueryVolumeInformationFile@20
-ZwReadFile@36
-ZwReplaceKey@12
-ZwRequestWaitReplyPort@12
-ZwResetEvent@8
-ZwRestoreKey@12
-ZwSaveKey@8
-ZwSaveKeyEx@12
-ZwSecureConnectPort@36
-ZwSetBootEntryOrder@8
-ZwSetBootOptions@8
-ZwSetDefaultLocale@8
-ZwSetDefaultUILanguage@4
-ZwSetDriverEntryOrder@8
-ZwSetEaFile@16
-ZwSetEvent@8
-ZwSetInformationFile@20
-ZwSetInformationJobObject@16
-ZwSetInformationObject@16
-ZwSetInformationProcess@16
-ZwSetInformationThread@16
-ZwSetSecurityObject@12
-ZwSetSystemInformation@12
-ZwSetSystemTime@8
-ZwSetTimer@28
-ZwSetValueKey@24
-ZwSetVolumeInformationFile@20
-ZwTerminateJobObject@8
-ZwTerminateProcess@8
-ZwTranslateFilePath@16
-ZwUnloadDriver@4
-ZwUnloadKey@4
-ZwUnmapViewOfSection@8
-ZwWaitForMultipleObjects@20
-ZwWaitForSingleObject@12
-ZwWriteFile@36
-ZwYieldExecution@0
-;_CIcos
-;_CIsin
-;_CIsqrt
-_abnormal_termination
-_alldiv
-_alldvrm
-_allmul
-_alloca_probe
-_allrem
-_allshl
-_allshr
-_aulldiv
-_aulldvrm
-_aullrem
-_aullshr
-_except_handler2
-_except_handler3
-_global_unwind2
-_itoa
-_itow
-_local_unwind2
-_purecall
-_snprintf
-_snwprintf
-_stricmp
-_strlwr
-_strnicmp
-_strnset
-_strrev
-_strset
-_strupr
-_vsnprintf
-_vsnwprintf
-_wcsicmp
-_wcslwr
-_wcsnicmp
-_wcsnset
-_wcsrev
-_wcsupr
-atoi
-atol
-isdigit
-islower
-isprint
-isspace
-isupper
-isxdigit
-mbstowcs
-mbtowc
-memchr
-memcpy
-memmove
-memset
-qsort
-rand
-sprintf
-srand
-strcat
-strchr
-strcmp
-strcpy
-strlen
-strncat
-strncmp
-strncpy
-strrchr
-strspn
-strstr
-swprintf
-tolower
-toupper
-towlower
-towupper
-vDbgPrintEx
-vDbgPrintExWithPrefix
-vsprintf
-wcscat
-wcschr
-wcscmp
-wcscpy
-wcscspn
-wcslen
-wcsncat
-wcsncmp
-wcsncpy
-wcsrchr
-wcsspn
-wcsstr
-wcstombs
-wctomb