1 files changed, 1002 insertions, 0 deletions

diff --git a/private/ntos/init/ntoskrnl.src b/private/ntos/init/ntoskrnl.src
new file mode 100644
index 000000000..a71148abb
--- /dev/null
+++ b/private/ntos/init/ntoskrnl.src
@@ -0,0 +1,1002 @@
+#undef RtlMoveMemory
+#undef RtlCopyMemory
+#undef RtlFillMemory
+#undef RtlZeroMemory
+NAME ntoskrnl.exe
+
+DESCRIPTION 'Windows NT Kernel'
+
+EXPORTS
+    CcCanIWrite
+    CcCopyRead
+    CcFastCopyRead
+    CcCopyWrite
+    CcFastCopyWrite
+    CcDeferWrite
+    CcFlushCache
+    CcGetDirtyPages
+    CcGetFileObjectFromBcb
+    CcGetFileObjectFromSectionPtrs
+    CcGetLsnForFileObject
+    CcInitializeCacheMap
+    CcIsThereDirtyData
+    CcMapData
+    CcMdlRead
+    CcMdlReadComplete
+    CcMdlWriteComplete
+    CcPinMappedData
+    CcPinRead
+    CcPrepareMdlWrite
+    CcPreparePinWrite
+    CcPurgeCacheSection
+    CcRepinBcb
+    CcScheduleReadAhead
+    CcSetAdditionalCacheAttributes
+    CcSetBcbOwnerPointer
+    CcSetDirtyPageThreshold
+    CcSetDirtyPinnedData
+    CcSetFileSizes
+    CcSetLogHandleForFile
+    CcSetReadAheadGranularity
+    CcUninitializeCacheMap
+    CcUnpinData
+    CcUnpinDataForThread
+    CcUnpinRepinnedBcb
+    CcZeroData
+    CcFastReadNotPossible CONSTANT      // Data - use pointer for access
+    CcFastReadWait CONSTANT             // Data - use pointer for access
+    CcFastMdlReadWait CONSTANT          // Data - use pointer for access
+    DbgBreakPoint
+    DbgBreakPointWithStatus
+    DbgLoadImageSymbols
+    DbgPrint
+    DbgPrompt
+    ExAcquireFastMutexUnsafe
+    ExAcquireResourceExclusive
+    ExAcquireResourceExclusiveLite
+    ExAcquireResourceSharedLite
+    ExAcquireSharedStarveExclusive
+    ExAcquireSharedWaitForExclusive
+    ExAllocatePool
+    ExAllocatePoolWithQuota
+    ExAllocatePoolWithQuotaTag
+    ExAllocatePoolWithTag
+    ExConvertExclusiveToSharedLite
+    ExCreateCallback
+    ExDeleteResource
+    ExDeleteResourceLite
+    ExDesktopObjectType CONSTANT        // Data - use pointer for access
+    ExDisableResourceBoostLite
+    ExEnumHandleTable
+    ExEventObjectType CONSTANT          // Data - use pointer for access
+    ExExtendZone
+    ExFreePool
+    ExGetExclusiveWaiterCount
+    ExGetPreviousMode
+    ExGetSharedWaiterCount
+    ExInitializeNPagedLookasideList
+    ExIsProcessorFeaturePresent
+    ExDeleteNPagedLookasideList
+    ExInitializePagedLookasideList
+    ExDeletePagedLookasideList
+    ExInitializeResource
+    ExInitializeResourceLite
+    ExReinitializeResourceLite
+    ExInitializeZone
+    ExInterlockedAddLargeInteger
+    ExInterlockedAddLargeStatistic
+    ExInterlockedAddUlong
+    ExInterlockedDecrementLong
+    ExInterlockedExchangeUlong
+    ExInterlockedExtendZone
+    ExInterlockedIncrementLong
+    ExInterlockedInsertHeadList
+    ExInterlockedInsertTailList
+    ExInterlockedPopEntryList
+    ExInterlockedPushEntryList
+    ExInterlockedRemoveHeadList
+    ExIsResourceAcquiredExclusiveLite
+    ExIsResourceAcquiredSharedLite
+    ExLocalTimeToSystemTime
+    ExNotifyCallback
+    ExPostSystemEvent
+    ExQueryPoolBlockSize
+    ExQueueWorkItem
+    ExRaiseAccessViolation
+    ExRaiseDatatypeMisalignment
+    ExRaiseException
+    ExRaiseStatus
+    ExRaiseHardError
+    ExRegisterCallback
+    ExReleaseFastMutexUnsafe
+    ExReleaseResourceLite
+    ExReleaseResourceForThread
+    ExReleaseResourceForThreadLite
+    ExSetResourceOwnerPointer
+    ExSystemExceptionFilter
+    ExSystemTimeToLocalTime
+//    ExTryToAcquireFastMutexUnsafe
+    ExUnregisterCallback
+    ExWindowStationObjectType CONSTANT  // Data - use pointer for access
+    FsRtlAddLargeMcbEntry
+    FsRtlAddMcbEntry
+    FsRtlAllocatePool
+    FsRtlAllocatePoolWithTag
+    FsRtlAllocatePoolWithQuota
+    FsRtlAllocatePoolWithQuotaTag
+    FsRtlAllocateResource
+    FsRtlAreNamesEqual
+    FsRtlBalanceReads
+    FsRtlCheckLockForReadAccess
+    FsRtlCheckLockForWriteAccess
+    FsRtlCheckOplock
+    FsRtlCopyRead
+    FsRtlCopyWrite
+    FsRtlGetFileSize
+    FsRtlMdlReadDev
+    FsRtlMdlReadComplete
+    FsRtlMdlReadCompleteDev
+    FsRtlPrepareMdlWriteDev
+    FsRtlMdlWriteComplete
+    FsRtlMdlWriteCompleteDev
+    FsRtlCurrentBatchOplock
+    FsRtlDeregisterUncProvider
+    FsRtlDissectDbcs
+    FsRtlDissectName
+    FsRtlDoesDbcsContainWildCards
+    FsRtlDoesNameContainWildCards
+    FsRtlFastCheckLockForRead
+    FsRtlFastCheckLockForWrite
+    FsRtlFastUnlockSingle
+    FsRtlFastUnlockAll
+    FsRtlFastUnlockAllByKey
+    FsRtlGetNextFileLock
+    FsRtlGetNextLargeMcbEntry
+    FsRtlGetNextMcbEntry
+    FsRtlInitializeFileLock
+    FsRtlInitializeLargeMcb
+    FsRtlInitializeMcb
+    FsRtlInitializeOplock
+    FsRtlIsDbcsInExpression
+    FsRtlIsFatDbcsLegal
+    FsRtlIsHpfsDbcsLegal
+    FsRtlIsNameInExpression
+    FsRtlIsNtstatusExpected
+    FsRtlIsTotalDeviceFailure
+    FsRtlLegalAnsiCharacterArray CONSTANT // Data - use pointer for access
+    FsRtlLookupLargeMcbEntry
+    FsRtlLookupLastLargeMcbEntry
+    FsRtlLookupLastMcbEntry
+    FsRtlLookupMcbEntry
+    FsRtlMdlRead
+    FsRtlNormalizeNtstatus
+    FsRtlNotifyInitializeSync
+    FsRtlNotifyUninitializeSync
+    FsRtlNotifyChangeDirectory
+    FsRtlNotifyReportChange
+    FsRtlNotifyCleanup
+    FsRtlNotifyFullChangeDirectory
+    FsRtlNotifyFullReportChange
+    FsRtlNumberOfRunsInLargeMcb
+    FsRtlNumberOfRunsInMcb
+    FsRtlOplockFsctrl
+    FsRtlOplockIsFastIoPossible
+    FsRtlPostStackOverflow
+    FsRtlPostPagingFileStackOverflow
+    FsRtlPrepareMdlWrite
+    FsRtlPrivateLock
+    FsRtlProcessFileLock
+    FsRtlRegisterUncProvider
+    FsRtlRemoveLargeMcbEntry
+    FsRtlRemoveMcbEntry
+    FsRtlSplitLargeMcb
+    FsRtlSyncVolumes
+    FsRtlTruncateMcb
+    FsRtlTruncateLargeMcb
+    FsRtlUninitializeFileLock
+    FsRtlUninitializeLargeMcb
+    FsRtlUninitializeMcb
+    FsRtlUninitializeOplock
+    FsRtlInitializeTunnelCache
+    FsRtlAddToTunnelCache
+    FsRtlFindInTunnelCache
+    FsRtlDeleteKeyFromTunnelCache
+    FsRtlDeleteTunnelCache
+    HalDispatchTable CONSTANT           // Data - use pointer for access
+    HalPrivateDispatchTable CONSTANT    // Data - use pointer for access
+    IoAcquireCancelSpinLock
+    IoAcquireVpbSpinLock
+    IoAdapterObjectType CONSTANT        // Data - use pointer for access
+    IoDeviceHandlerObjectType CONSTANT  // Data - use pointer for access
+    IoDeviceHandlerObjectSize CONSTANT  // Data - use pointer for access
+    IoAllocateAdapterChannel
+    IoAllocateController
+    IoAllocateErrorLogEntry
+    IoAllocateIrp
+    IoAllocateMdl
+    IoAssignResources
+    IoAttachDevice
+    IoAttachDeviceByPointer
+    IoAttachDeviceToDeviceStack
+    IoBuildAsynchronousFsdRequest
+    IoBuildDeviceIoControlRequest
+    IoBuildPartialMdl
+    IoBuildSynchronousFsdRequest
+    IoCallDriver
+    IofCallDriver
+    IoCancelIrp
+    IoCheckDesiredAccess
+    IoCheckEaBufferValidity
+    IoCheckFunctionAccess
+    IoCheckShareAccess
+    IoCompleteRequest
+    IofCompleteRequest
+    IoConnectInterrupt
+    IoCreateController
+    IoCreateDevice
+    IoCreateFile
+    IoCreateNotificationEvent
+    IoCreateStreamFileObject
+    IoCreateSymbolicLink
+    IoCreateSynchronizationEvent
+    IoCreateUnprotectedSymbolicLink
+    IoDeleteController
+    IoDeleteDevice
+    IoDeleteSymbolicLink
+    IoDetachDevice
+    IoDeviceObjectType CONSTANT         // Data - use pointer for access
+    IoDisconnectInterrupt
+    IoDriverObjectType CONSTANT         // Data - use pointer for access
+    IoEnqueueIrp
+    IoFastQueryNetworkAttributes
+    IoFileObjectType CONSTANT           // Data - use pointer for access
+    IoFreeController
+    IoFreeIrp
+    IoFreeMdl
+    IoGetAttachedDevice
+    IoGetBaseFileSystemDeviceObject
+    IoGetConfigurationInformation
+    IoGetCurrentProcess
+    IoGetDeviceObjectPointer
+#if _PNP_POWER_STUB_ENABLED_
+    IoGetDeviceProperty
+#endif
+    IoGetDeviceToVerify
+    IoGetFileObjectGenericMapping
+    IoGetInitialStack
+    IoGetRelatedDeviceObject
+    IoGetRequestorProcess
+    IoGetStackLimits=RtlpGetStackLimits
+    IoGetTopLevelIrp
+    IoInitializeIrp
+    IoInitializeTimer
+    IoIsOperationSynchronous
+    IoIsSystemThread
+    IoMakeAssociatedIrp
+    IoOpenDeviceInstanceKey
+    IoPageRead
+    IoQueryDeviceDescription
+    IoQueryDeviceEnumInfo
+    IoQueryFileInformation
+#if _PNP_POWER_STUB_ENABLED_
+    IoQuerySystemInformation
+#endif
+    IoQueryVolumeInformation
+    IoQueueThreadIrp
+    IoRaiseHardError
+    IoRaiseInformationalHardError
+    IoReadOperationCount CONSTANT       // Data - use pointer for access
+    IoReadTransferCount CONSTANT        // Data - use pointer for access
+    IoRegisterDriverReinitialization
+    IoRegisterFileSystem
+    IoRegisterFsRegistrationChange
+#if _PNP_POWER_STUB_ENABLED_
+    IoRegisterPlugPlayNotification
+#endif
+    IoRegisterShutdownNotification
+    IoReleaseCancelSpinLock
+    IoReleaseVpbSpinLock
+    IoRemoveShareAccess
+#if _PNP_POWER_STUB_ENABLED_
+    IoReportDeviceStatus
+#endif
+    IoReportHalResourceUsage
+    IoReportResourceUsage
+#if _PNP_POWER_STUB_ENABLED_
+    IoSetDeviceProperty
+#endif
+    IoSetDeviceToVerify
+    IoSetHardErrorOrVerifyDevice
+    IoSetInformation
+    IoSetShareAccess
+    IoSetThreadHardErrorMode
+    IoSetTopLevelIrp
+    IoStartNextPacket
+    IoStartNextPacketByKey
+    IoStartPacket
+    IoStartTimer
+    IoStatisticsLock CONSTANT           // Data - use pointer for access
+    IoStopTimer
+    IoSynchronousPageWrite
+    IoThreadToProcess
+    IoUnregisterFileSystem
+    IoUnregisterFsRegistrationChange
+#if _PNP_POWER_STUB_ENABLED_
+    IoUnregisterPlugPlayNotification
+#endif
+    IoUnregisterShutdownNotification
+    IoUpdateShareAccess
+    IoVerifyVolume
+    IoWriteErrorLogEntry
+    IoWriteOperationCount CONSTANT      // Data - use pointer for access
+    IoWriteTransferCount CONSTANT       // Data - use pointer for access
+    KdDebuggerEnabled    CONSTANT       // Data - use pointer for access
+    KdDebuggerNotPresent CONSTANT       // Data - use pointer for access
+    KdPollBreakIn
+    KeAddSystemServiceTable
+    KeAttachProcess
+    KeBoostCurrentThread
+    KeBugCheck
+    KeBugCheckEx
+    KeCancelTimer
+    KeClearEvent
+    KeConnectInterrupt
+    KeDcacheFlushCount CONSTANT         // Data - use pointer for access
+    KeDelayExecutionThread
+    KeDetachProcess
+    KeDeregisterBugCheckCallback
+    KeDisconnectInterrupt
+    KeEnterCriticalRegion
+    KeEnterKernelDebugger
+    KeFindConfigurationEntry
+    KeFindConfigurationNextEntry
+    KeFlushEntireTb
+    KeIcacheFlushCount CONSTANT         // Data - use pointer for access
+    KeInitializeDeviceQueue
+    KeInitializeApc
+    KeInitializeDpc
+    KeInitializeEvent
+    KeInitializeInterrupt
+    KeInitializeMutant
+    KeInitializeMutex
+    KeInitializeQueue
+    KeInitializeSemaphore
+    KeInitializeTimer
+    KeInitializeTimerEx
+    KeInsertByKeyDeviceQueue
+    KeInsertDeviceQueue
+    KeInsertQueue
+    KeInsertHeadQueue
+    KeInsertQueueApc
+    KeInsertQueueDpc
+    KeLeaveCriticalRegion
+    KeLoaderBlock CONSTANT              // Data - use pointer for access
+    KeNumberProcessors CONSTANT         // Data - use pointer for access
+    KeProfileInterrupt
+    KeProfileInterruptWithSource
+    KePulseEvent
+    KeQuerySystemTime
+    KeQueryTickCount
+    KeQueryTimeIncrement
+    KeRaiseUserException
+    KeReadStateTimer
+    KeReadStateEvent
+    KeReadStateMutant
+    KeReadStateMutex=KeReadStateMutant
+    KeReadStateQueue
+    KeReadStateSemaphore
+    KeRegisterBugCheckCallback
+    KeReleaseMutant
+    KeReleaseMutex
+    KeReleaseSemaphore
+    KeRemoveByKeyDeviceQueue
+    KeRemoveDeviceQueue
+    KeRemoveEntryDeviceQueue
+    KeRemoveQueue
+    KeRemoveQueueDpc
+    KeResetEvent
+    KeRundownQueue
+    KeServiceDescriptorTable CONSTANT   // Data - use pointer for access
+    KeSetAffinityThread
+    KeSetDmaIoCoherency
+    KeSetEvent
+    KeSetEventBoostPriority
+    KeSetBasePriorityThread
+    KeSetIdealProcessorThread
+    KeSetImportanceDpc
+    KeSetPriorityThread
+    KeSetSwapContextNotifyRoutine;
+    KeSetTargetProcessorDpc
+    KeSetTimeIncrement
+    KeSetTimer
+    KeSetTimerEx
+    KeSetTimeUpdateNotifyRoutine;
+    KeSetThreadSelectNotifyRoutine;
+    KeSynchronizeExecution
+    KeTerminateThread
+    KeTickCount CONSTANT                // Data - use pointer for access
+    KeUserModeCallback
+    KeUpdateRunTime
+    KeUpdateSystemTime
+    KeWaitForMultipleObjects
+    KeWaitForSingleObject
+    KeWaitForMutexObject=KeWaitForSingleObject
+    KiAcquireSpinLock
+    KiBugCheckData                  // Data - use pointer for access
+    KiReleaseSpinLock
+    KeInitializeSpinLock
+    KeAcquireSpinLockAtDpcLevel
+    KeReleaseSpinLockFromDpcLevel
+    KeSetKernelStackSwapEnable
+    LdrEnumResources
+    LdrAccessResource
+    LdrFindResource_U
+    LdrFindResourceDirectory_U
+    LpcRequestPort
+    LsaCallAuthenticationPackage
+    LsaDeregisterLogonProcess
+    LsaFreeReturnBuffer
+    LsaLogonUser
+    LsaLookupAuthenticationPackage
+    LsaRegisterLogonProcess
+    MmAdjustWorkingSetSize
+    MmAllocateContiguousMemory
+#ifdef MEMPRINT
+    MemPrint
+    MemPrintInitialize
+#endif
+    MmAllocateNonCachedMemory
+    MmBuildMdlForNonPagedPool
+    MmCanFileBeTruncated
+    MmCreateMdl
+    MmCreateSection
+    MmDbgTranslatePhysicalAddress
+    MmDisableModifiedWriteOfSection
+    MmFlushImageSection
+    MmForceSectionClosed
+    MmFreeContiguousMemory
+    MmFreeNonCachedMemory
+    MmGetPhysicalAddress
+    MmGrowKernelStack
+    MmIsAddressValid
+    MmIsNonPagedSystemAddressValid
+    MmIsRecursiveIoFault
+    MmIsThisAnNtAsSystem
+    MmLockPagableDataSection
+    MmLockPagableSectionByHandle
+    MmMapIoSpace
+    MmMapLockedPages
+    MmMapMemoryDumpMdl
+    MmMapVideoDisplay
+    MmMapViewOfSection
+    MmMapViewInSystemSpace
+    MmPageEntireDriver
+    MmProbeAndLockPages
+    MmQuerySystemSize
+    MmResetDriverPaging
+    MmSectionObjectType CONSTANT
+    MmSecureVirtualMemory
+    MmSetAddressRangeModified
+    MmSetBankedSection
+    MmSizeOfMdl
+    MmUnlockPagableImageSection
+    MmUnlockPages
+    MmUnmapIoSpace
+    MmUnmapLockedPages
+    MmUnmapVideoDisplay
+    MmUnmapViewOfSection
+    MmUnmapViewInSystemSpace
+    MmUnsecureVirtualMemory
+    NlsAnsiCodePage CONSTANT            // Data - use pointer for access
+    NlsLeadByteInfo CONSTANT            // Data - use pointer for access
+    NlsOemLeadByteInfo CONSTANT         // Data - use pointer for access
+    NlsMbCodePageTag CONSTANT           // Data - use pointer for access
+    NlsMbOemCodePageTag CONSTANT        // Data - use pointer for access
+    NtAddAtom
+    NtAdjustPrivilegesToken
+    NtAllocateLocallyUniqueId
+    NtAllocateUuids
+    NtAllocateVirtualMemory
+    NtClose
+    NtConnectPort
+    NtCreateEvent
+    NtCreateFile
+    NtCreateSection
+    NtDeleteAtom
+    NtDeleteFile
+    NtDeviceIoControlFile
+    NtDuplicateObject
+    NtDuplicateToken
+    NtFindAtom
+    NtFreeVirtualMemory
+    NtFsControlFile
+    NtGlobalFlag CONSTANT               // Data - use pointer for access
+    NtLockFile
+    NtMapViewOfSection
+    NtNotifyChangeDirectoryFile
+    NtOpenFile
+    NtOpenProcess
+    NtOpenProcessToken
+    NtQueryDirectoryFile
+    NtQueryEaFile
+    NtQueryInformationAtom
+    NtQueryInformationFile
+    NtQueryInformationProcess
+    NtQueryInformationToken
+    NtQueryOleDirectoryFile
+    //NtQueryQuotaInformationFile
+    NtQuerySecurityObject
+    NtQueryVolumeInformationFile
+    NtReadFile
+    NtRequestPort
+    NtRequestWaitReplyPort
+    NtSetEvent
+    NtSetInformationFile
+    NtSetInformationProcess
+    NtSetInformationThread
+    //NtSetQuotaInformationFile
+    NtSetSecurityObject
+    NtUnlockFile
+    NtVdmControl
+    NtWaitForSingleObject
+    NtWriteFile
+    ObAssignSecurity
+    ObCheckCreateObjectAccess
+    ObCheckObjectAccess
+    ObCreateObject
+    ObDereferenceObject
+    ObfDereferenceObject
+    ObFindHandleForObject
+    ObGetObjectPointerCount
+    ObGetObjectSecurity
+    ObInsertObject
+    ObMakeTemporaryObject
+    ObOpenObjectByName
+    ObOpenObjectByPointer
+    ObQueryObjectAuditingByHandle
+    ObQueryNameString
+    ObReferenceObjectByHandle
+    ObReferenceObjectByName
+    ObReferenceObjectByPointer
+    ObReleaseObjectSecurity
+    ObSetSecurityDescriptorInfo
+    ObfReferenceObject
+    PfxFindPrefix
+    PfxInitialize
+    PfxInsertPrefix
+    PfxRemovePrefix
+    PoQueryPowerSequence
+    PoSetDeviceIdleDetection
+    PoRequestPowerChange
+    ProbeForWrite
+    PsAssignImpersonationToken
+    PsChargePoolQuota
+    PsCreateSystemProcess
+    PsCreateSystemThread
+    PsCreateWin32Process
+    PsGetCurrentProcessId
+    PsGetCurrentThreadId
+    PsGetProcessExitTime
+    PsGetVersion
+    PsImpersonateClient
+    PsInitialSystemProcess
+    PsIsThreadTerminating
+    PsEstablishWin32Callouts
+    PsLookupProcessThreadByCid
+    PsLookupProcessByProcessId
+    PsLookupThreadByThreadId
+    PsProcessType CONSTANT
+    PsReferenceImpersonationToken
+    PsReferencePrimaryToken
+    PsReturnPoolQuota
+    PsRevertToSelf
+    PsSetCreateProcessNotifyRoutine
+    PsSetCreateThreadNotifyRoutine
+    PsSetLegoNotifyRoutine
+    PsSetProcessPriorityByClass
+    PsTerminateSystemThread
+    PsThreadType CONSTANT
+    RtlAddAce
+    RtlAllocateAndInitializeSid
+    RtlAllocateHeap
+    RtlAddAccessAllowedAce
+    RtlAddAtomToAtomTable
+    RtlAnsiCharToUnicodeChar
+    RtlAnsiStringToUnicodeSize=RtlxAnsiStringToUnicodeSize
+    RtlAnsiStringToUnicodeString
+    RtlAppendAsciizToString
+    RtlAppendStringToString
+    RtlAppendUnicodeStringToString
+    RtlAppendUnicodeToString
+    RtlAreAllAccessesGranted
+    RtlAreAnyAccessesGranted
+    RtlAreBitsClear
+    RtlAreBitsSet
+    RtlAssert
+    RtlCaptureStackBackTrace
+    RtlCharToInteger
+    RtlCheckRegistryKey
+    RtlClearAllBits
+    RtlClearBits
+    RtlCompareMemory
+    RtlCompareMemoryUlong
+    RtlCompareString
+    RtlCompareUnicodeString
+    RtlCompressBuffer
+    RtlCompressChunks
+    RtlConvertLongToLargeInteger
+    RtlConvertUlongToLargeInteger
+    RtlCopyLuid
+    RtlCopyString
+    RtlCopyUnicodeString
+    RtlCreateAtomTable
+    RtlCreateAcl
+    RtlCreateHeap
+    RtlCreateRegistryKey
+    RtlCreateSecurityDescriptor
+    RtlCreateUnicodeString
+    RtlDecompressBuffer
+    RtlDecompressChunks
+    RtlDecompressFragment
+    RtlDelete
+    RtlDeleteAtomFromAtomTable
+    RtlDeleteNoSplay
+    RtlDeleteElementGenericTable
+    RtlDeleteRegistryValue
+    RtlDescribeChunk
+    RtlDestroyAtomTable
+    RtlDestroyHeap
+    RtlDowncaseUnicodeString
+    RtlEmptyAtomTable
+    RtlEnlargedIntegerMultiply
+    RtlEnlargedUnsignedDivide
+    RtlEnlargedUnsignedMultiply
+    RtlEnumerateGenericTable
+    RtlEnumerateGenericTableWithoutSplaying
+    RtlEqualLuid
+    RtlEqualString
+    RtlEqualUnicodeString
+    RtlExtendedIntegerMultiply
+    RtlExtendedLargeIntegerDivide
+    RtlExtendedMagicDivide
+    RtlFillMemory
+    RtlFillMemoryUlong
+    RtlFindClearBits
+    RtlFindClearBitsAndSet
+    RtlFindFirstRunClear
+    RtlFindFirstRunSet
+    RtlFindLongestRunClear
+    RtlFindLongestRunSet
+    RtlFindMessage
+    RtlFindSetBits
+    RtlFindSetBitsAndClear
+    RtlFindUnicodePrefix
+    RtlFormatCurrentUserKeyPath
+    RtlFreeAnsiString
+    RtlFreeHeap
+    RtlFreeOemString
+    RtlFreeUnicodeString
+    RtlGenerate8dot3Name
+    RtlGetCallersAddress
+    RtlGetCompressionWorkSpaceSize
+    RtlGetDefaultCodePage
+    RtlGetElementGenericTable
+    RtlImageNtHeader
+    RtlInitAnsiString
+    RtlInitString
+    RtlInitUnicodeString
+    RtlInitializeBitMap
+    RtlInitializeGenericTable
+    RtlInitializeUnicodePrefix
+    RtlInsertElementGenericTable
+    RtlInsertUnicodePrefix
+    RtlIntegerToChar
+    RtlIntegerToUnicodeString
+    RtlIsNameLegalDOS8Dot3
+    RtlLargeIntegerAdd
+    RtlLargeIntegerArithmeticShift
+    RtlLargeIntegerDivide
+    RtlLargeIntegerNegate
+    RtlLargeIntegerShiftLeft
+    RtlLargeIntegerShiftRight
+    RtlLargeIntegerSubtract
+    RtlLengthSecurityDescriptor
+    RtlLookupAtomInAtomTable
+    RtlLookupElementGenericTable
+    RtlMapGenericMask
+    RtlMoveMemory
+    RtlMultiByteToUnicodeN
+    RtlMultiByteToUnicodeSize
+    RtlNextUnicodePrefix
+    RtlNtStatusToDosError
+    RtlNtStatusToDosErrorNoTeb
+    RtlNumberGenericTableElements
+    RtlNumberOfClearBits
+    RtlNumberOfSetBits
+    RtlOemStringToCountedUnicodeString
+    RtlOemStringToUnicodeSize=RtlxOemStringToUnicodeSize
+    RtlOemStringToUnicodeString
+    RtlOemToUnicodeN
+    RtlPinAtomInAtomTable
+    RtlPrefixString
+    RtlPrefixUnicodeString
+    RtlQueryAtomInAtomTable
+    RtlQueryRegistryValues
+    RtlQueryTimeZoneInformation
+    RtlRaiseException
+    RtlRemoveUnicodePrefix
+    RtlReserveChunk
+    RtlRandom
+    RtlSecondsSince1970ToTime
+    RtlSecondsSince1980ToTime
+    RtlSetAllBits
+    RtlSetBits
+    RtlSetDaclSecurityDescriptor
+    RtlSetSaclSecurityDescriptor
+    RtlSetTimeZoneInformation
+    RtlSplay
+    RtlTimeFieldsToTime
+    RtlTimeToSecondsSince1970
+    RtlTimeToSecondsSince1980
+    RtlTimeToTimeFields
+    RtlUnicodeStringToAnsiSize=RtlxUnicodeStringToAnsiSize
+    RtlUnicodeStringToAnsiString
+    RtlUnicodeToMultiByteN
+    RtlUnicodeToMultiByteSize
+    RtlUnicodeToOemN
+    RtlUnicodeStringToOemSize=RtlxUnicodeStringToOemSize
+    RtlUnicodeStringToOemString
+    RtlUnicodeStringToCountedOemString
+    RtlCustomCPToUnicodeN
+    RtlUnicodeToCustomCPN
+    RtlInitCodePageTable
+    RtlUnicodeStringToInteger
+    RtlUnwind
+    RtlUpcaseUnicodeChar
+    RtlUpcaseUnicodeString
+    RtlUpcaseUnicodeStringToAnsiString
+    RtlUpcaseUnicodeToMultiByteN
+    RtlUpcaseUnicodeToOemN
+    RtlUpcaseUnicodeStringToOemString
+    RtlUpcaseUnicodeStringToCountedOemString
+    RtlUpcaseUnicodeToCustomCPN
+    RtlUpperChar
+    RtlUpperString
+    RtlValidSecurityDescriptor
+    RtlWriteRegistryValue
+    RtlxAnsiStringToUnicodeSize
+    RtlxOemStringToUnicodeSize
+    RtlxUnicodeStringToAnsiSize
+    RtlxUnicodeStringToOemSize
+    RtlZeroHeap
+    RtlZeroMemory
+    SeAccessCheck
+    SeAssignSecurity
+    SeCaptureSecurityDescriptor
+    SeCaptureSubjectContext
+    SeCloseObjectAuditAlarm
+    SeCreateAccessState
+    SeCreateClientSecurity
+    SeDeassignSecurity
+    SeDeleteAccessState
+    SeDeleteObjectAuditAlarm
+    SeImpersonateClient
+    SeLockSubjectContext
+    SeOpenObjectAuditAlarm
+    SeOpenObjectForDeleteAuditAlarm
+    SePrivilegeCheck
+    SePrivilegeObjectAuditAlarm
+    SeQuerySecurityDescriptorInfo
+    SeReleaseSecurityDescriptor
+    SeReleaseSubjectContext
+    SeSetSecurityDescriptorInfo
+    SeSinglePrivilegeCheck
+    SeTokenType
+    SeTokenImpersonationLevel
+    SeUnlockSubjectContext
+    SeAppendPrivileges
+    SeFreePrivileges
+    SeAuditingFileEvents
+    SeAuditingFileOrGlobalEvents
+    SeSetAccessStateGenericMapping
+    SeQueryAuthenticationIdToken
+    SeValidSecurityDescriptor
+    SeRegisterLogonSessionTerminatedRoutine
+    SeUnregisterLogonSessionTerminatedRoutine
+    SeMarkLogonSessionForTerminationNotification
+
+    //
+    // System default DACLs
+    //
+    //          SePublicDefaultDacl - is for protecting things so that
+    //              normal users can use it.
+    //
+    //          SeSystemDefaultDacl - is for protecting things so that
+    //              only the system (and administrators) can get to it.
+    //
+
+    SePublicDefaultDacl CONSTANT
+    SeSystemDefaultDacl CONSTANT
+
+    //
+    // Pointer to structure containing security
+    // exports
+    //
+
+    //
+    // Use SeEnableAccessToExports() before
+    // using (see se.h)
+    //
+
+    SeExports CONSTANT
+
+
+    ZwAccessCheckAndAuditAlarm
+    ZwAlertThread
+    ZwAllocateVirtualMemory
+    ZwConnectPort
+    ZwClearEvent
+    ZwClose
+    ZwCloseObjectAuditAlarm
+    ZwCreateDirectoryObject
+    ZwCreateEvent
+    ZwCreateFile
+    ZwCreateKey
+    ZwCreateSection
+    ZwCreateSymbolicLinkObject
+    ZwDeleteFile
+    ZwDeleteKey
+    ZwDeleteValueKey
+    ZwDeviceIoControlFile
+    ZwDisplayString
+    ZwDuplicateObject
+    ZwDuplicateToken
+    ZwEnumerateKey
+    ZwEnumerateValueKey
+    ZwFlushInstructionCache
+    ZwFlushKey
+    ZwFreeVirtualMemory
+    ZwFsControlFile
+    ZwLoadDriver
+    ZwLoadKey
+    ZwMakeTemporaryObject
+    ZwMapViewOfSection
+    ZwNotifyChangeKey
+    ZwOpenDirectoryObject
+    ZwOpenEvent
+    ZwOpenFile
+    ZwOpenKey
+    ZwOpenProcess
+    ZwOpenProcessToken
+    ZwOpenThread
+    ZwOpenThreadToken
+    ZwOpenSection
+    ZwOpenSymbolicLinkObject
+    ZwPulseEvent
+    ZwQueryDefaultLocale
+    ZwQueryDirectoryFile
+    ZwQueryInformationFile
+    ZwQueryInformationProcess
+    ZwQueryInformationToken
+    ZwQueryKey
+    ZwQueryObject
+    ZwQuerySection
+    ZwQuerySecurityObject
+    ZwQuerySymbolicLinkObject
+    ZwQuerySystemInformation
+    ZwQueryInformationToken
+    ZwQueryVolumeInformationFile
+    ZwQueryValueKey
+    ZwReadFile
+    ZwReplaceKey
+    ZwRequestWaitReplyPort
+    ZwResetEvent
+    ZwSaveKey
+    ZwSetDefaultLocale
+    ZwSetEvent
+    ZwSetInformationFile
+    ZwSetInformationObject
+    ZwSetInformationProcess
+    ZwSetInformationThread
+    ZwSetSystemInformation
+    ZwSetSystemTime
+    ZwSetValueKey
+    ZwTerminateProcess
+    ZwUnmapViewOfSection
+    ZwUnloadDriver
+    ZwUnloadKey
+    ZwWaitForMultipleObjects
+    ZwWaitForSingleObject
+    ZwWriteFile
+    ZwYieldExecution
+
+    RtlAbsoluteToSelfRelativeSD
+    RtlConvertSidToUnicodeString
+    RtlCopySid
+    RtlEqualSid
+    RtlGetDaclSecurityDescriptor
+    RtlGetGroupSecurityDescriptor
+    RtlGetOwnerSecurityDescriptor
+    RtlInitializeSid
+    RtlLengthRequiredSid
+    RtlLengthSid
+    RtlSetGroupSecurityDescriptor
+    RtlSetOwnerSecurityDescriptor
+    RtlSubAuthorityCountSid
+    RtlSubAuthoritySid
+    RtlValidSid
+
+    NtBuildNumber CONSTANT
+
+//
+// ntcrt.lib
+//
+    _itoa
+    _purecall
+    _snprintf
+    _snwprintf
+    _stricmp
+    _strlwr
+    _strnicmp
+    _strnset
+    _strrev
+    _strset
+    _strupr
+    _vsnprintf
+    _wcsicmp
+    _wcslwr
+    _wcsnicmp
+    _wcsnset
+    _wcsrev
+    _wcsupr
+    isdigit
+    islower
+    isprint
+    isspace
+    isupper
+    isxdigit
+    mbstowcs
+    mbtowc
+    memchr
+    qsort
+    rand
+    sprintf
+    srand
+    strcat
+    strchr
+    strcmp
+    strcpy
+    strlen
+    strncat
+    strncmp
+    strncpy
+    strrchr
+    strspn
+    strstr
+    swprintf
+    tolower
+    towlower
+    toupper
+    towupper
+    vsprintf
+    wcscat
+    wcschr
+    wcscmp
+    wcscpy
+    wcscspn
+    wcslen
+    wcsncat
+    wcsncmp
+    wcsncpy
+    wcsrchr
+    wcsspn
+    wcsstr
+    wcstombs
+    wctomb
+
+//
+// Hack-o-rama to support the stupid ATI miniport driver.
+// Get rid of these if we can someday.
+//
+    atol
+    atoi