From e611b132f9b8abe35b362e5870b74bce94a1e58e Mon Sep 17 00:00:00 2001
From: Adam <you@example.com>
Date: Sat, 16 May 2020 20:51:50 -0700
Subject: initial commit

---
 private/ntos/init/up/alpha.prf    |  423 ++++++
 private/ntos/init/up/i386.prf     |  542 ++++++++
 private/ntos/init/up/makefile     |    6 +
 private/ntos/init/up/makefile.inc |   78 ++
 private/ntos/init/up/mips.prf     | 2638 +++++++++++++++++++++++++++++++++++++
 private/ntos/init/up/ntoskrnl.alp |  423 ++++++
 private/ntos/init/up/ntoskrnl.mip |  511 +++++++
 private/ntos/init/up/ntoskrnl.ppc |  542 ++++++++
 private/ntos/init/up/ntoskrnl.x86 |  542 ++++++++
 private/ntos/init/up/ppc.prf      |  542 ++++++++
 private/ntos/init/up/sources      |   62 +
 11 files changed, 6309 insertions(+)
 create mode 100644 private/ntos/init/up/alpha.prf
 create mode 100644 private/ntos/init/up/i386.prf
 create mode 100644 private/ntos/init/up/makefile
 create mode 100644 private/ntos/init/up/makefile.inc
 create mode 100644 private/ntos/init/up/mips.prf
 create mode 100644 private/ntos/init/up/ntoskrnl.alp
 create mode 100644 private/ntos/init/up/ntoskrnl.mip
 create mode 100644 private/ntos/init/up/ntoskrnl.ppc
 create mode 100644 private/ntos/init/up/ntoskrnl.x86
 create mode 100644 private/ntos/init/up/ppc.prf
 create mode 100644 private/ntos/init/up/sources

(limited to 'private/ntos/init/up')

diff --git a/private/ntos/init/up/alpha.prf b/private/ntos/init/up/alpha.prf
new file mode 100644
index 000000000..bf69531f7
--- /dev/null
+++ b/private/ntos/init/up/alpha.prf
@@ -0,0 +1,423 @@
+KiIdleLoop
+KiInterruptException
+OtsMove
+RtlCopyBytes
+KiUnlockDispatcherDatabase
+ExReleaseResourceLite
+KeSynchronizeExecution
+ExAcquireResourceExclusiveLite
+ExAllocatePoolWithTag
+IopParseDevice
+RtlFindClearBits
+ExAcquireFastMutex
+KiSwapThreadExit
+ExpInterlockedPopEntrySListFault
+OtsZero
+IofCompleteRequest
+RtlCompareMemory
+ExReleaseFastMutex
+ExpInterlockedPushEntrySList
+KiRetireDpcList
+KiDispatchInterrupt
+RtlUpcaseUnicodeToOemN
+CcMapData
+ExFreePoolWithTag
+FsRtlDissectName
+FsRtlIsNameInExpressionPrivate
+CcGetVirtualAddress
+ExAcquireResourceSharedLite
+KeFlushIoBuffers
+KeReleaseSpinLock
+KeAcquireSpinLockRaiseToDpc
+CcPinFileData
+ObReferenceObjectByHandle
+OtsFieldInsert
+PsImpersonateClient
+ObfDereferenceObject
+IoGetRelatedDeviceObject
+CcFindBcb
+RtlSplay
+IoAllocateIrp
+ObOpenObjectByName
+KeRemoveQueue
+ExInterlockedAddUlong
+ExpFindCurrentThread
+IofCallDriver
+RtlpGetStackLimits
+ObpLookupObjectName
+ExpInterlockedPopEntrySList
+MmProbeAndLockPages
+CcFreeVirtualAddress
+RtlCompareUnicodeString
+KeInsertQueue
+IoSetTopLevelIrp
+IoFreeIrp
+IopCheckBackupRestorePrivilege
+ObpCaptureObjectCreateInformation
+PsReferencePrimaryToken
+CcFlushCache
+CcUnpinFileData
+KeAcquireSpinLockAtDpcLevel
+KeLeaveCriticalRegion
+CcSetDirtyPinnedData
+FsRtlLookupLargeMcbEntry
+CcCanIWrite
+MmCheckCachedPageState
+CcSetDirtyInMask
+ExReleaseFastMutexUnsafe
+IopAllocateIrp
+CcFastCopyRead
+ObpAllocateObject
+IoAllocateMdl
+ExAcquireFastMutexUnsafe
+ExIsResourceAcquiredExclusiveLite
+FsRtlFindLargeIndex
+IoGetTopLevelIrp
+CcAcquireByteRangeForWrite
+ExpInterlockedCompareExchange64
+KeQuerySystemTime
+KiReleaseSpinLock
+MmUnlockPages
+RtlTimeToTimeFields
+MiFlushSectionInternal
+FsRtlIsFatDbcsLegal
+memcmp
+PsReferenceImpersonationToken
+CcFastCopyWrite
+KiRestoreVolatileIntegerState
+RtlEqualUnicodeString
+CcInitializeCacheMap
+CcUninitializeCacheMap
+CcWriteBehind
+IopCloseFile
+ObpFreeObjectNameBuffer
+SeCreateAccessState
+IoCreateFile
+ObpIncrementHandleCount
+OtsStringCompareEql
+CcMapAndRead
+FsRtlCheckOplock
+IopDeleteFile
+IopParseFile
+RtlIsNameLegalDOS8Dot3
+CcMapAndCopy
+IoBuildPartialMdl
+IoFreeMdl
+MmUnmapViewInSystemCache
+CcPrepareMdlWrite
+RtlMapGenericMask
+RtlNtStatusToDosErrorNoTeb
+FsRtlOplockFsctrl
+IopCompleteRequest
+ObpCaptureObjectName
+RtlCopyUnicodeString
+CcUnpinData
+ExpAcquireResourceSharedLite
+MmCreateSection
+ExAcquireSharedStarveExclusive
+MmMapLockedPages
+ObpAllocateObjectNameBuffer
+ObpCreateHandle
+RtlUpcaseUnicodeChar
+ExAcquireHandleTableShared
+MiDecrementReferenceCount
+MmIsAddressValid
+MmFlushSection
+CcPinMappedData
+FsRtlRequestExclusiveOplock
+ObCreateObject
+RtlUnicodeToOemN
+CcMdlWriteComplete2
+ElapsedDaysToYears
+ExTryToAcquireFastMutex
+IopCheckDeviceAndDriver
+KeWaitForSingleObject
+MiReserveSystemPtes
+RtlUpcaseUnicodeStringToOemString
+KeEnterCriticalRegion
+PsAssignImpersonationToken
+SeReleaseSubjectContext
+CcLazyWriteScan
+ExFreePool
+FsRtlDoesNameContainWildCards
+IoCheckFunctionAccess
+IoIsOperationSynchronous
+KiMb
+NtClose
+PsChargeSharedPoolQuota
+SeAuditingFileEvents
+KiDeliverApc
+MiLocateAndReserveWsle
+SeAssignSecurity
+SeCaptureSubjectContext
+SeDeleteAccessState
+CcMdlRead
+ExCreateHandle
+ExDestroyHandle
+IoFastQueryNetworkAttributes
+MiDecrementShareCount2
+MmSetAddressRangeModified
+ObpDecrementHandleCount
+RtlOemToUnicodeN
+ExReleaseHandleTableShared
+FsRtlAddToTunnelCache
+KiInterruptDistribution
+CcSetFileSizes
+FsRtlGetNextLargeMcbEntry
+KeSetEvent
+MiInsertPageInList
+MiRestoreTransitionPte
+SeSetAccessStateGenericMapping
+CcGetVacbMiss
+ExAcquireHandleTableExclusive
+FsRtlFastCheckLockForRead
+FsRtlFindInTunnelCache
+IoRemoveShareAccess
+MiCheckControlArea
+RtlUpcaseUnicodeString
+IoSetShareAccess
+MiUpdateWsle
+NtSetInformationFile
+ObpChargeQuotaForObject
+OtsStringCompareEqlSameLen
+CcPinRead
+CcWorkerThread
+ExpAcquireSharedStarveExclusive
+ExReleaseHandleTableExclusive
+FsRtlOplockCleanup
+FsRtlOplockIsFastIoPossible
+MmAccessFault
+ObpIncrementHandleDataBase
+OtsFill
+RtlOemStringToUnicodeString
+FsRtlAddLargeMcbEntry
+FsRtlCurrentBatchOplock
+MiCreateDataFileMap
+ObpFreeObject
+ObpRemoveObjectRoutine
+ObpValidateAccessMask
+RtlSetBits
+RtlUpcaseUnicodeStringToCountedOemString
+SeTokenImpersonationLevel
+ExpWorkerThread
+MiLocateWsle
+MiRemoveZeroPage
+MmCopyToCachedPage
+RtlUnicodeStringToOemString
+CcAllocateInitializeBcb
+ExInitializeResourceLite
+ExInterlockedAddLargeStatistic
+ExpInterlockedExchangeAddLargeInteger
+FsRtlIsNameInExpression
+FsRtlPruneTunnelCache
+IoAcquireCancelSpinLock
+MmMapViewInSystemCache
+RtlpDidUnicodeToOemWork
+CcDeleteSharedCacheMap
+ExMapHandleToPointer
+FsRtlPrivateFastUnlockAll
+IoCheckDesiredAccess
+IoSynchronousPageWrite
+KeInsertByKeyDeviceQueue
+KiSaveVolatileIntegerState
+MmUnmapLockedPages
+ObpDeleteNameCheck
+RtlpGenerateInheritedAce
+SepInheritAcl
+ExSystemTimeToLocalTime
+FsRtlMdlWriteCompleteDev
+IoCheckShareAccess
+KeInsertDeviceQueue
+MiDispatchFault
+MiReleaseSystemPtes
+MiRemovePageFromList
+MmPurgeSection
+RtlClearBits
+CcUnmapVacbArray
+ExDeleteResourceLite
+FsRtlFastCheckLockForWrite
+IoAllocateAdapterChannel
+IoStartPacket
+KiMemoryManagementDispatch
+MiCheckProtoPtePageState
+MiMakeSystemAddressValidPfn
+ObpIncrementUnnamedHandleCount
+RtlVirtualUnwind
+CcCopyWrite
+CcDeallocateBcb
+CcFreeActiveVacb
+ExAcquireSharedWaitForExclusive
+ExpWaitForResource
+FsRtlAreNamesEqual
+FsRtlFastUnlockSingleExclusive
+FsRtlOplockBreakToII
+FsRtlPrivateLock
+FsRtlRemoveAndCompleteWaitIrp
+FsRtlRemoveMcbEntryPrivate
+FsRtlWaitOnIrp
+KeRemoveByKeyDeviceQueue
+KiMemoryManagementException
+MiFreePoolPages
+MiInitializePfn
+MiRemoveWsle
+ObpCreateUnnamedHandle
+RtlDelete
+RtlExtendedMagicDivide
+RtlFillMemoryUlong
+RtlpLengthInheritedAce
+RtlSecondsSince1980ToTime
+CcMdlReadComplete2
+ExAllocatePoolWithQuotaTag
+ExInterlockedInsertTailList
+ExReinitializeResourceLite
+FsRtlAllocateOplock
+IoCreateStreamFileObject
+IoGetCurrentProcess
+IoStartNextPacket
+KeInitializeApc
+KeInsertHeadQueue
+MiAllocatePoolPages
+MiCheckForControlAreaDeletion
+MiGetInPageSupportBlock
+MiRemovePageByColor
+MiResolveProtoPteFault
+MiUnlinkPageFromList
+MmCanFileBeTruncatedInternal
+RtlLengthSecurityDescriptor
+RtlNumberGenericTableElements
+RtlpGenerateInheritAcl
+SepCheckAcl
+CcCreateVacbArray
+CcGetDirtyPages
+CcGetVirtualAddressIfMapped
+CcPerformReadAhead
+CcReleaseByteRangeFromWrite
+CcUnmapAndPurge
+FsRtlCheckLockForReadAccess
+FsRtlFastUnlockSingle
+FsRtlInitializeLargeMcb
+FsRtlLookupLastLargeMcbEntry
+IopDereferenceVpbAndFree
+KeInitializeSpinLock
+KeInsertQueueApc
+KiActivateWaiterQueue
+KiApcInterrupt
+MiGetEventCounter
+MiRemoveAnyPage
+MiResolveMappedFileFault
+OtsDivide
+PsReturnSharedPoolQuota
+RtlAreBitsClear
+RtlFillBytes
+RtlInsertElementGenericTable
+RtlLookupFunctionEntry
+CcCopyRead
+CcIsThereDirtyData
+CcPreparePinWrite
+CcSetReadAheadGranularity
+CcSetValidData
+ExIsResourceAcquiredSharedLite
+ExpAcquireResourceExclusiveLite
+ExReleaseResourceForThreadLite
+FsRtlFindFirstOverlappingExclusiveNode
+FsRtlTruncateLargeMcb
+FsRtlUninitializeOplock
+KeInitializeEvent
+KeRemoveDeviceQueue
+KeSetEventBoostPriority
+KiAlternateExit
+KiGenerateTrapFrame
+KiSaveVolatileFloatState
+MiFindActualFaultingPte
+MiFreeInPageSupportBlock
+MiModifiedPageWriterWorker
+MiResolveTransitionFault
+MiSectionDelete
+MiSetDirtyBit
+MmDeterminePoolType
+ObDeleteCapturedInsertInfo
+RtlAreBitsSet
+RtlConvertUlongToLargeInteger
+RtlCreateAcl
+RtlEqualPrefixSid
+RtlFindClearBitsAndSet
+RtlTimeToSecondsSince1970
+SepGetDefaultsSubjectContext
+SeUnlockSubjectContext
+SeValidSecurityDescriptor
+ExDisableResourceBoostLite
+FsRtlAcquireFileForCcFlush
+FsRtlAddLargeEntry
+FsRtlPrivateCheckForExclusiveLockAccess
+FsRtlPrivateInitializeFileLock
+FsRtlPrivateLimitFreeLockList
+FsRtlPrivateResetLowestLockOffset
+FsRtlUninitializeLargeMcb
+IoPageRead
+IoQueueThreadIrp
+KiExceptionExit
+MiCompleteProtoPteFault
+MmCanFileBeTruncated
+NtDeleteFile
+ObInsertObject
+RtlInitializeBitMap
+RtlpLengthInheritAcl
+RtlpRestoreContext
+RtlSecondsSince1970ToTime
+RtlUnicodeStringToCountedOemString
+SepAccessCheck
+SepSidInToken
+CcPostWorkQueue
+CcScheduleReadAhead
+CcUnpinDataForThread
+ExQueueWorkItem
+FsRtlAcknowledgeOplockBreak
+FsRtlCheckLockForWriteAccess
+FsRtlInitializeOplock
+FsRtlMdlReadCompleteDev
+FsRtlNotifyCompletion
+FsRtlNumberOfRunsInLargeMcb
+FsRtlOplockBreakNotify
+FsRtlPrivateInsertLock
+FsRtlUninitializeFileLock
+IoGetFileObjectGenericMapping
+IoGetInitialStack
+IoGetRequestorProcess
+IopErrorLogRequeueEntry
+IopSynchronousServiceTail
+IopTimerDispatch
+IoUpdateShareAccess
+KeClearEvent
+KeGetCurrentIrql
+KiFlushMultipleTb
+KiRestoreVolatileFloatState
+KiSystemServiceExit
+KiTimerExpiration
+MiAccessCheck
+MiAddValidPageToWorkingSet
+MiCheckControlAreaStatus
+MiDeleteSystemPagableVm
+MiFlushInPageSupportBlock
+MiFreeEventCounter
+MiInitializeReadInProgressPfn
+MiMakeProtectionMask
+MiMapPageInHyperSpace
+MiReleasePageFileSpace
+MiReleaseWsle
+MiWaitForInPageComplete
+MmBuildMdlForNonPagedPool
+MmFlushImageSection
+NtQueryVolumeInformationFile
+OtsDivide32Unsigned
+RtlCreateSecurityDescriptor
+RtlFirstFreeAce
+RtlImageDirectoryEntryToData
+RtlInitializeSid
+RtlLookupElementGenericTable
+RtlNumberOfClearBits
+RtlPcToFileHeader
+RtlRealSuccessor
+RtlSubtreePredecessor
+SeLockSubjectContext
+wcsicmp
+
\ No newline at end of file
diff --git a/private/ntos/init/up/i386.prf b/private/ntos/init/up/i386.prf
new file mode 100644
index 000000000..dc01569d7
--- /dev/null
+++ b/private/ntos/init/up/i386.prf
@@ -0,0 +1,542 @@
+MiZeroPhysicalPage
+ExReleaseResourceLite
+MmZeroPageThread
+IopParseDevice
+ExAllocatePoolWithTag
+ExInterlockedPopEntrySList
+ExFreePoolWithTag
+CcMapData
+RtlFindClearBits
+memmove
+CcFindBcb
+IoAllocateIrp
+FsRtlDissectName
+KiInterruptDispatch
+CcFastCopyRead
+FsRtlIsNameInExpressionPrivate
+RtlCompareMemory
+MmCopyToCachedPage
+RtlUpcaseUnicodeToOemN
+CcPinFileData
+ObpCaptureObjectCreateInformation
+CcGetVirtualAddress
+KiDispatchInterrupt
+RtlCompareUnicodeString
+Exfi386InterlockedDecrementLong
+ExpAcquireResourceExclusiveLite
+IofCompleteRequest
+CcFastCopyWrite
+MiFlushSectionInternal
+RtlTimeToTimeFields
+PsImpersonateClient
+RtlSplay
+IopAllocateIrp
+ObOpenObjectByName
+Exfi386InterlockedExchangeUlong
+ExAcquireSharedWaitForExclusive
+ObReferenceObjectByHandle
+ExAcquireResourceSharedLite
+ExInterlockedPushEntrySList
+CcMapAndRead
+FsRtlLookupLargeMcbEntry
+InterlockedDecrement
+SeCreateAccessState
+ObpLookupObjectName
+FsRtlIsFatDbcsLegal
+ExfInterlockedAddUlong
+MmProbeAndLockPages
+CcUnpinFileData
+ObpCaptureObjectName
+ExAcquireHandleTableShared
+IoCreateFile
+ObfDereferenceObject
+InterlockedIncrement
+CcSetDirtyPinnedData
+KeLeaveCriticalRegion
+ExFreePool
+CcUnpinData
+IoFreeIrp
+MmCheckCachedPageState
+RtlEqualUnicodeString
+RtlIsNameLegalDOS8Dot3
+MiCleanSection
+CcInitializeCacheMap
+FsRtlFindLargeIndex
+CcMapAndCopy
+CcPinMappedData
+MiRemovePageByColor
+MmUnmapViewInSystemCache
+RtlpCaptureContext
+RtlFillMemoryUlong
+ObpAllocateObject
+RtlCopyUnicodeString
+CcFreeVirtualAddress
+ExAcquireFastMutexUnsafe
+IopDeleteFile
+FsRtlAllocateResource
+KiSetCR0Bits
+ExInterlockedCompareExchange64
+ExAllocatePool
+IoGetRelatedDeviceObject
+KeRemoveQueue
+ExReleaseHandleTableShared
+CcAcquireByteRangeForWrite
+IofCallDriver
+FsRtlCheckOplock
+ElapsedDaysToYears
+IopCloseFile
+KefAcquireSpinLockAtDpcLevel
+ObpIncrementHandleCount
+ExTryToAcquireResourceExclusiveLite
+FsRtlAddToTunnelCache
+IopCompleteRequest
+CcFlushCache
+CcGetVirtualAddressIfMapped
+IoSetThreadHardErrorMode
+ObCreateObject
+IoFastQueryNetworkAttributes
+CcPrepareMdlWrite
+CcCanIWrite
+CcWriteBehind
+RtlExtendedMagicDivide
+MiLocateAndReserveWsle
+NtSetInformationFile
+ObpAllocateObjectNameBuffer
+CcLazyWriteScan
+RtlNtStatusToDosErrorNoTeb
+KeReadStateQueue
+MiCheckProtoPtePageState
+ObReferenceObjectByPointer
+CcAllocateInitializeBcb
+PsReferencePrimaryToken
+CcSetDirtyInMask
+FsRtlFindInTunnelCache
+IopParseFile
+KeSynchronizeExecution
+_NLG_Return2
+KeQuerySystemTime
+CcGetVacbMiss
+NtClose
+ObpDecrementHandleCount
+IoGetInitialStack
+ObpCreateHandle
+MiInsertPageInList
+MiWaitForInPageComplete
+FsRtlGetNextLargeMcbEntry
+IopCheckDeviceAndDriver
+KeInsertHeadQueue
+MiDecrementShareCount2
+RtlUpcaseUnicodeStringToOemString
+ExAcquireSharedStarveExclusive
+ExpFindCurrentThread
+_abnormal_termination
+CcMdlRead
+CcUninitializeCacheMap
+RtlUnicodeToOemN
+FsRtlOplockFsctrl
+IoAllocateMdl
+ExReleaseHandleTableExclusive
+MmSetAddressRangeModified
+CcSetFileSizes
+ExCreateHandle
+KeEnterCriticalRegion
+MiDecrementReferenceCount
+MmUnlockPages
+ObpFreeObject
+PsAssignImpersonationToken
+RtlMapGenericMask
+CcCopyRead
+PsReferenceImpersonationToken
+IoGetRequestorProcess
+SeTokenType
+ObpFreeObjectNameBuffer
+RtlUpcaseUnicodeString
+IopCheckBackupRestorePrivilege
+MmMapViewInSystemCache
+RtlCompressChunks
+RtlInsertElementGenericTable
+CcPinRead
+IoBuildSynchronousFsdRequest
+MmFlushSection
+IoAllocateErrorLogEntry
+MiAllocatePoolPages
+RtlUpcaseUnicodeChar
+MmPurgeSection
+FsRtlFastCheckLockForRead
+MiReserveSystemPtes
+PsOpenTokenOfProcess
+FsRtlOplockCleanup
+IoIsOperationSynchronous
+MiFreePoolPages
+SeAssignSecurity
+SeDeleteAccessState
+FsRtlRequestExclusiveOplock
+IoBuildPartialMdl
+IoCheckFunctionAccess
+PsChargeSharedPoolQuota
+RtlAreAnyAccessesGranted
+FsRtlUninitializeOplock
+IoEnqueueIrp
+MmCreateSection
+ObpDeleteNameCheck
+IoCancelIrp
+RtlpDidUnicodeToOemWork
+CcFreeActiveVacb
+ExAllocateFromPagedLookasideList
+ExIsResourceAcquiredExclusiveLite
+SeCaptureSubjectContext
+DebugService
+KeGetCurrentThread
+MiCreateDataFileMap
+RtlpGetStackLimits
+CcMdlWriteComplete2
+IoSetShareAccess
+KeResetEvent
+MiLocateWsle
+MiUnlinkPageFromList
+ObpRemoveObjectRoutine
+ObWaitForSingleObject
+CcPreparePinWrite
+PspDeleteThreadSecurity
+SeComputeQuotaInformationSize
+ExDestroyHandle
+FsRtlDoesNameContainWildCards
+MiRemoveMappedPtes
+MiUpdateWsle
+RawCheckForDismount
+RtlOemToUnicodeN
+SeUnlockSubjectContext
+CcWorkerThread
+ExInitializeResourceLite
+ExpAcquireResourceSharedLite
+ExpWaitForResource
+FsRtlIsNameInExpression
+FsRtlOplockBreakToII
+FsRtlPruneTunnelCache
+MiDispatchFault
+IoFreeMdl
+IoInitializeIrp
+KefReleaseSpinLockFromDpcLevel
+KeInsertQueue
+KeWaitForSingleObject
+MiCheckControlArea
+ObpIncrementUnnamedHandleCount
+RtlDowncaseUnicodeString
+RtlUnicodeStringToOemString
+SepFilterPrivilegeAudits
+ExAcquireHandleTableExclusive
+FsRtlAreNamesEqual
+IopDereferenceVpbAndFree
+KeInitializeDpc
+ObpLookupDirectoryEntry
+CcDeallocateBcb
+ExMapHandleToPointer
+FsRtlRemoveMcbEntryPrivate
+IopQueryName
+IoSetTopLevelIrp
+CcCopyReadExceptionFilter
+ExGetSharedWaiterCount
+ExInterlockedAddLargeInteger
+ExpWorkerThread
+ExReinitializeResourceLite
+FsRtlFastCheckLockForWrite
+FsRtlFastUnlockSingleExclusive
+MmAccessFault
+MmMapLockedPages
+RtlOemStringToUnicodeString
+RtlTimeToSecondsSince1970
+RtlUpcaseUnicodeStringToCountedOemString
+FsRtlRemoveLargeMcbEntry
+IoGetTopLevelIrp
+KeInsertDeviceQueue
+MiRemoveZeroPage
+RtlDelete
+SeTokenImpersonationLevel
+CcGetDirtyPages
+ExDeletePagedLookasideList
+FsRtlAddLargeMcbEntry
+FsRtlFindFirstOverlappingExclusiveNode
+IopErrorLogRequeueEntry
+MiReleaseSystemPtes
+ObpChargeQuotaForObject
+RtlpLengthInheritedAce
+SeSetAccessStateGenericMapping
+CcPerformReadAhead
+FsRtlRemoveAndCompleteWaitIrp
+IoAcquireCancelSpinLock
+IoBuildDeviceIoControlRequest
+IoCheckShareAccess
+IoSynchronousPageWrite
+MiInitializeReadInProgressPfn
+RtlUnicodeStringToCountedOemString
+CcDeleteSharedCacheMap
+ExSystemTimeToLocalTime
+FsRtlAllocateOplock
+FsRtlDeregisterUncProvider
+FsRtlTruncateLargeMcb
+FsRtlWaitOnIrp
+IopCheckVpbMounted
+KeInsertQueueDpc
+KiSwapThread
+MiInitializePfn
+MmIsAddressValid
+ObGetObjectPointerCount
+RtlPrefixUnicodeString
+VdmpDelayIntApcRoutine
+ExFreeToPagedLookasideList
+ExpAcquireSharedStarveExclusive
+FsRtlOplockIsFastIoPossible
+MiReleaseWsle
+MiRemoveUnusedSegments
+MiReserveSystemPtes2
+ObSetSecurityDescriptorInfo
+_allmul
+ExAllocatePoolWithQuotaTag
+FsRtlAcquireFileForCcFlush
+IoStartPacket
+KeInitializeEvent
+KeWaitForMultipleObjects
+MiInitializeCopyOnWritePfn
+MiRemovePageFromList
+MiSegmentDelete
+MmBuildMdlForNonPagedPool
+MmUnmapLockedPages
+SeAuditingFileEvents
+SwapSplayLinks
+FsRtlLookupLastLargeMcbEntry
+IopIsDeviceInstanceEnabled
+KeInitializeSpinLock
+KiAcquireSpinLock
+MiRemoveAnyPage
+MiRemoveWsleFromFreeList
+MiResolveProtoPteFault
+NtWaitForSingleObject
+ObpInsertHandleCount
+RtlpGetExtraStuffPointer
+RtlSetBits
+SeReleaseSubjectContext
+SeValidSecurityDescriptor
+DaysAndFractionToTime
+ExInterlockedExchangeAddLargeInteger
+FsRtlCurrentBatchOplock
+FsRtlPrivateLock
+IoCreateStreamFileObject
+IopReportResourceUsage
+KiDeliverApc
+LpcpClosePort
+MiAccessCheck
+MiMakeProtectionMask
+MiResolveMappedFileFault
+ObInsertObject
+ObpIncrementHandleDataBase
+ObpValidateAccessMask
+PsReturnSharedPoolQuota
+PsWatchWorkingSet
+RtlDeleteElementGenericTable
+CcReleaseByteRangeFromWrite
+ExCreateHandleTable
+FsRtlPrivateFastUnlockAll
+IoCheckDesiredAccess
+IoCreateDevice
+MiCompleteProtoPteFault
+MiMakeSystemAddressValidPfnWs
+MiMapPageInHyperSpace
+ObpCreateUnnamedHandle
+RtlExtendedLargeIntegerDivide
+RtlSubtreePredecessor
+SepAccessCheck
+CcCopyWrite
+CcUnmapVacbArray
+CcUnpinDataForThread
+ExNotifyCallback
+ExReleaseResourceForThreadLite
+FsRtlAcknowledgeOplockBreak
+FsRtlAddLargeEntry
+FsRtlInitializeLargeMcb
+FsRtlMdlWriteCompleteDev
+FsRtlPrivateCheckForExclusiveLockAccess
+IoAllocateAdapterChannel
+IoGetAttachedDevice
+IoRaiseInformationalHardError
+IoRemoveShareAccess
+MiCheckControlAreaStatus
+MiMakeSystemAddressValidPfn
+MiRemoveWsle
+ObDeleteCapturedInsertInfo
+ObReferenceObjectByName
+RtlClearBits
+RtlpGenerateInheritedAce
+RtlxOemStringToUnicodeSize
+SepCheckAcl
+CcPostWorkQueue
+CcScheduleReadAhead
+CcSetValidData
+ExEnumHandleTable
+ExQueueWorkItem
+FsRtlReleaseFileForCcFlush
+KeSetEvent
+MiChargeCommitmentCantExpand
+MiFindActualFaultingPte
+MiGetEventCounter
+NtDeleteFile
+RtlAreBitsClear
+RtlDeleteNoSplay
+RtlInitializeSid
+RtlLookupElementGenericTable
+RtlpGenerateInheritAcl
+CcMdlWriteComplete
+ExAcquireResourceExclusiveLite
+ExDeleteResourceLite
+ExfInterlockedInsertTailList
+ExIsResourceAcquiredSharedLite
+FsRtlOplockBreakNotify
+IoCheckEaBufferValidity
+IopOpenLinkOrRenameTarget
+IoQueueThreadIrp
+IoRegisterShutdownNotification
+Ke386GetGdtEntryThread
+KeReadStateTimer
+KeRemoveDeviceQueue
+KiRetireDpcList
+MiDeletePte
+MiEnsureAvailablePageOrWait
+MiGetInPageSupportBlock
+MiSectionDelete
+RtlLengthSecurityDescriptor
+RtlRealSuccessor
+RtlUpcaseUnicodeStringToAnsiString
+SepAdtGenerateDiscardAudit
+SepInheritAcl
+SepSidInToken
+CcCreateVacbArray
+CcMdlReadComplete2
+ExInterlockedAddLargeStatistic
+FsRtlCheckForMatchingFileObject
+FsRtlCheckLockForWriteAccess
+FsRtlPrivateInsertLock
+FsRtlPrivateLimitFreeLockList
+FsRtlPrivateResetLowestLockOffset
+IoCancelThreadIo
+IoPageRead
+IoReleaseCancelSpinLock
+IoSetInformation
+IoStartNextPacket
+IoStopTimer
+KeClearEvent
+KeInitializeApc
+KeInsertByKeyDeviceQueue
+KeRemoveByKeyDeviceQueue
+KiQuantumEnd
+MiAddValidPageToWorkingSet
+MiDeleteSystemPagableVm
+MiInsertFrontModifiedNoWrite
+MiLocateSubsection
+MiRemoveWorkingSetPages
+MiRestoreTransitionPte
+MiTrimWorkingSet
+RtlAreBitsSet
+RtlConvertUlongToLargeInteger
+RtlCopyLuidAndAttributesArray
+RtlCreateAcl
+RtlLargeIntegerDivide
+RtlpLengthInheritAcl
+SeAccessCheck
+_wcsicmp
+CcExtendVacbArray
+CcSetReadAheadGranularity
+CcUnmapVacb
+ExfInterlockedInsertHeadList
+FsRtlCheckLockForReadAccess
+FsRtlFreeFirstMapping
+FsRtlMdlReadComplete
+FsRtlNumberOfRunsInLargeMcb
+FsRtlOpBatchBreakClosePending
+FsRtlPrivateCheckWaitingLocks
+FsRtlPrivateInitializeFileLock
+FsRtlPrivateInsertExclusiveLock
+FsRtlReleaseFileForModWrite
+FsRtlRemoveAndCompleteIrp
+FsRtlUninitializeFileLock
+IoCreateNotificationEvent
+IoGetDeviceToVerify
+IopMountVolume
+IoUpdateShareAccess
+KeReleaseWaitForSemaphore
+KiTrap0E
+MiCheckForControlAreaDeletion
+MiDetermineUserGlobalPteMask
+MiFlushInPageSupportBlock
+MiFreeEventCounter
+MiInitializeTransitionPfn
+MiInsertWsle
+MiMapPageToZeroInHyperSpace
+MiModifiedPageWriterWorker
+MiResolveDemandZeroFault
+MiResolveTransitionFault
+MmCanFileBeTruncated
+MmCanFileBeTruncatedInternal
+MmDeterminePoolType
+MmFlushImageSection
+RtlAllocateAndInitializeSid
+RtlEnumerateGenericTable
+RtlEqualPrefixSid
+RtlEqualSid
+RtlExtendedIntegerMultiply
+RtlFirstFreeAce
+RtlIsGenericTableEmpty
+RtlOemStringToCountedUnicodeString
+RtlUpperString
+SeFreeCapturedSecurityQos
+SeLockSubjectContext
+_vsnprintf
+CcGetLsnForFileObject
+CcPurgeAndClearCacheSection
+CcZeroData
+ExecuteHandler
+ExLocalTimeToSystemTime
+ExRaiseException
+ExReleaseFastMutexUnsafe
+FsRtlCancelExclusiveIrp
+FsRtlFastUnlockAll
+FsRtlFastUnlockAllByKey
+FsRtlFastUnlockSingleShared
+FsRtlFindFirstOverlappingSharedNode
+FsRtlGetNextMcbEntry
+FsRtlPrivateInsertSharedLock
+FsRtlPrivateRemoveLock
+FsRtlRequestOplockII
+FsRtlSyncVolumes
+FsRtlUninitializeLargeMcb
+IopTimerDispatch
+IoUnregisterFsRegistrationChange
+KeContextToKframes
+KeFlushQueueApc
+KeSetEventBoostPriority
+KiReleaseSpinLock
+KiSystemService
+KiTimerExpiration
+KiTimerListExpire
+MiAddMappedPtes
+MiCheckPdeForPagedPool
+MiFlushPteList
+MiFreeInPageSupportBlock
+MiInitializePfnForOtherProcess
+MiInsertVad
+MiMakeOutswappedPageResident
+MiReleasePageFileSpace
+MiResolvePageFileFault
+MmWorkingSetManager
+PsReturnPoolQuota
+RtlAddAuditAccessAce
+RtlDispatchException
+RtlInitializeGenericTable
+RtlNumberOfClearBits
+RtlpGetReturnAddress
+RtlSecondsSince1970ToTime
+RtlSetAllBits
+RtlValidSecurityDescriptor
+SepApplyAclToObject
+SepConcatenatePrivileges
+SepGetDefaultsSubjectContext
+
+
\ No newline at end of file
diff --git a/private/ntos/init/up/makefile b/private/ntos/init/up/makefile
new file mode 100644
index 000000000..6ee4f43fa
--- /dev/null
+++ b/private/ntos/init/up/makefile
@@ -0,0 +1,6 @@
+#
+# DO NOT EDIT THIS FILE!!!  Edit .\sources. if you want to add a new source
+# file to this component.  This file merely indirects to the real make file
+# that is shared by all the components of NT OS/2
+#
+!INCLUDE $(NTMAKEENV)\makefile.def
diff --git a/private/ntos/init/up/makefile.inc b/private/ntos/init/up/makefile.inc
new file mode 100644
index 000000000..d043c64d4
--- /dev/null
+++ b/private/ntos/init/up/makefile.inc
@@ -0,0 +1,78 @@
+!if exist($(TARGET_DIRECTORY).inc)
+!include $(TARGET_DIRECTORY).inc
+!endif
+
+obj\$(TARGET_DIRECTORY)\$(NTTEST).def: ..\ntoskrnl.src ..\$(TARGET_DIRECTORY)def.src
+    copy ..\ntoskrnl.src+..\$(TARGET_DIRECTORY)def.src obj\$(TARGET_DIRECTORY)\$(NTTEST).pp
+    $(TARGET_CPP) -nologo -EP $(TARGET_DEFINES) $(TARGET_DBG_DEFINES) $(C_DEFINES) obj\$(TARGET_DIRECTORY)\$(NTTEST).pp > obj\$(TARGET_DIRECTORY)\$(NTTEST).def
+    -del obj\$(TARGET_DIRECTORY)\$(NTTEST).pp
+
+$(NTTEST).prf: $(TARGET_DIRECTORY).prf
+    copy $** $@
+
+$(BASEDIR)\public\sdk\lib\$(TARGET_DIRECTORY)\$(NTTEST).lib $(BASEDIR)\public\sdk\lib\$(TARGET_DIRECTORY)\$(NTTEST).exp: obj\$(TARGET_DIRECTORY)\$(NTTEST).def \
+        $(NTTEST).prf \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\cache.lib  \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\config.lib \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\dbgk.lib   \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\ex.lib     \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\FsRtl.lib  \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\FStub.lib  \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\init.lib   \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\io.lib     \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\kd.lib     \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\ke.lib     \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\lpc.lib    \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\mm.lib     \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\ob.lib     \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\po.lib     \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\ps.lib     \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\raw.lib    \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\ntosrtl.lib\
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\se.lib     \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\vdm.lib    \
+        $(TARGETPATH)\$(TARGET_DIRECTORY)\pnp.lib
+    -lib @<<
+$(LINK_LIB_IGNORE_FLAG)
+-def:obj\$(TARGET_DIRECTORY)\$(NTTEST).def
+-debugtype:cv
+-out:$(@D)\$(NTTEST).tmp
+-machine:$(TARGET_DIRECTORY)
+!IF $(386)
+$(TARGETPATH)\$(TARGET_DIRECTORY)\cache.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\config.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\dbgk.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\ex.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\FsRtl.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\FStub.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\init.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\io.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\kd.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\ke.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\lpc.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\mm.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\ob.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\po.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\ps.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\raw.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\ntosrtl.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\se.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\vdm.lib
+$(TARGETPATH)\$(TARGET_DIRECTORY)\pnp.lib
+$(BASEDIR)\public\sdk\lib\$(TARGET_DIRECTORY)\lsakrnlp.lib
+$(BASEDIR)\public\sdk\lib\$(TARGET_DIRECTORY)\libcntpr.lib
+!ENDIF
+<<NOKEEP
+    -lib -out:$(@R).lib @<<
+-machine:$(TARGET_DIRECTORY)
+$(LINK_LIB_IGNORE_FLAG)
+!if exist($(BASEDIR)\public\sdk\lib\$(TARGET_DIRECTORY)\exsup.lib)
+$(BASEDIR)\public\sdk\lib\$(TARGET_DIRECTORY)\exsup.lib
+!endif
+$(@D)\$(NTTEST).tmp
+<<NOKEEP
+    -erase $(@D)\$(NTTEST).tmp
+
+..\init.c: $(BASEDIR)\public\sdk\inc\ntverp.h
+
+..\ntoskrnl.rc: ..\msg00001.bin
diff --git a/private/ntos/init/up/mips.prf b/private/ntos/init/up/mips.prf
new file mode 100644
index 000000000..bf3422ed0
--- /dev/null
+++ b/private/ntos/init/up/mips.prf
@@ -0,0 +1,2638 @@
+KiRaiseIrqlToXxxLevel
+CcPinFileData
+CcPinRead
+CcFreeVirtualAddress
+CcFastCopyRead
+CcPinMappedData
+CcMdlRead
+CcPrepareMdlWrite
+CcMapAndCopy
+CcFreeActiveVacb
+ObfDereferenceObject
+PsAssignImpersonationToken
+NtClose
+MmCheckCachedPageState
+MmProbeAndLockPages
+MiFlushSectionInternal
+CcSetDirtyPinnedData
+CcPreparePinWrite
+CcReleaseByteRangeFromWrite
+CmpInitializeMachineDependentConfiguration
+_amsg_exit
+_isctype
+__C_ExecuteTerminationHandler
+__C_ExecuteExceptionFilter
+PspDeleteLdt
+PsIsThreadTerminating
+PoSetDeviceIdleDetection
+PoQueryPowerSequence
+RtlNumberGenericTableElements
+RtlCaptureStackBackTrace
+RtlAssert
+RtlpDestroyLockAtomTable
+MmIsThisAnNtAsSystem
+MmQuerySystemSize
+KiSuspendNop
+KeSwitchFrozenProcessor
+KiFreezeTargetExecution
+ZwYieldExecution
+ZwWriteVirtualMemory
+ZwWriteFile
+ZwWaitForSingleObject
+ZwWaitForMultipleObjects
+ZwUnmapViewOfSection
+ZwUnloadKey
+ZwUnloadDriver
+ZwTerminateProcess
+ZwShutdownSystem
+ZwSetValueKey
+ZwSetTimerResolution
+ZwSetSystemTime
+ZwSetSystemInformation
+ZwSetSecurityObject
+ZwSetInformationThread
+ZwSetInformationProcess
+ZwSetInformationObject
+ZwSetInformationFile
+ZwSetEvent
+ZwSetDefaultLocale
+ZwSaveKey
+ZwResumeThread
+ZwRestoreKey
+ZwResetEvent
+ZwRequestWaitReplyPort
+ZwReplyWaitReceivePort
+ZwReplaceKey
+ZwReleaseSemaphore
+ZwReadFile
+ZwRaiseHardError
+CcUnpinFileData
+CcGetDirtyPages
+KeWaitForSingleObject
+CcCanIWrite
+ExAcquireFastMutexUnsafe
+ExAcquireHandleTableShared
+ExAcquireHandleTableExclusive
+KdPollBreakIn
+KeInsertQueue
+IopCompleteRequest
+ExQueueWorkItem
+KiSwapThread
+CcFlushCache
+IopDeleteFile
+CcInitializeCacheMap
+CcSetDirtyInMask
+MiFreePoolPages
+MiReleaseSystemPtes
+MmUnmapLockedPages
+MmUnmapViewInSystemCache
+ZwRaiseException
+ZwQueryVolumeInformationFile
+ZwQueryVirtualMemory
+ZwQueryValueKey
+ZwQuerySystemInformation
+ZwQuerySymbolicLinkObject
+ZwQuerySecurityObject
+ZwQuerySection
+ZwQueryObject
+ZwQueryKey
+ZwQueryInformationToken
+ZwQueryInformationProcess
+ZwQueryInformationFile
+ZwQueryDirectoryFile
+ZwQueryDefaultLocale
+ZwQueryAttributesFile
+ZwPulseEvent
+ZwProtectVirtualMemory
+ZwOpenThreadToken
+ZwOpenThread
+ZwOpenSymbolicLinkObject
+ZwOpenSection
+ZwOpenProcessToken
+ZwOpenProcess
+ZwOpenKey
+ZwOpenFile
+ZwOpenEvent
+ZwOpenDirectoryObject
+ZwNotifyChangeKey
+ZwMapViewOfSection
+ZwMakeTemporaryObject
+ZwLoadKey
+ZwLoadDriver
+ZwListenPort
+ZwInitializeRegistry
+ZwFsControlFile
+ZwFreeVirtualMemory
+ZwFlushKey
+ZwFlushInstructionCache
+ZwFlushBuffersFile
+ZwEnumerateValueKey
+ZwEnumerateKey
+ZwDuplicateToken
+ZwDuplicateObject
+ZwDisplayString
+ZwDeviceIoControlFile
+ZwDeleteValueKey
+ZwDeleteKey
+ZwDeleteFile
+ZwCreateThread
+ZwCreateSymbolicLinkObject
+ZwCreateSection
+ZwCreateProcess
+ZwCreatePort
+ZwCreateKey
+ZwCreateFile
+ZwCreateEvent
+ZwCreateDirectoryObject
+ZwContinue
+ZwConnectPort
+ZwCompleteConnectPort
+ZwCloseObjectAuditAlarm
+ZwClose
+ZwClearEvent
+ZwAllocateVirtualMemory
+ZwAlertThread
+ZwAccessCheckAndAuditAlarm
+ZwAcceptConnectPort
+KiUnexpectedInterrupt
+KeReadStateThread
+KeReadStateSemaphore
+KeReadStateMutant
+KeSetImportanceDpc
+KeReadStateEvent
+KeReadStateProcess
+KeSetDmaIoCoherency
+KeQueryTimeIncrement
+KiReleaseSpinLock
+KeInitializeSpinLock
+KeFlushCurrentTb
+KiSystemStartup
+KdpGetStateChange
+KdpSetLoadState
+KdpPortUnlock
+IoGetFileObjectGenericMapping
+IoSetDeviceToVerify
+IoThreadToProcess
+xHalReferenceHandler
+xHalHandlerForBus
+ExPostSystemEvent
+ExpDummyAllocate
+ExNotifyCallback
+ExUnregisterCallback
+ExRegisterCallback
+ExGetSharedWaiterCount
+ExGetExclusiveWaiterCount
+FsRtlSyncVolumes
+IoGetConfigurationInformation
+KeSetSwapContextNotifyRoutine
+KeSetThreadSelectNotifyRoutine
+KeSetTimeUpdateNotifyRoutine
+RtlSubAuthorityCountSid
+RtlGetNtGlobalFlags
+ObGetObjectPointerCount
+SeTokenType
+SeTokenImpersonationLevel
+srand
+__jump_unwind
+PspDeleteVdmObjects
+NtSetLdtEntries
+PspQueryDescriptorThread
+PspSetLdtInformation
+PspQueryLdtInformation
+PspMarkCidInvalid
+PsGetCurrentThreadId
+PsGetCurrentProcessId
+PspInitializeThreadSecurity
+PoRequestPowerChange
+RtlInitializeAtomPackage
+DebugUnLoadImageSymbols
+DebugLoadImageSymbols
+DbgBreakPointWithStatus
+DbgBreakPoint
+NtSendWaitReplyChannel
+NtReplyWaitSendChannel
+KeSetSynchIrql
+KiTryToAcquireSpinLock
+KiFlushFixedTb
+IoGetInitialStack
+IoSetTopLevelIrp
+CcGetFileObjectFromBcb
+ExpGetPoolInformation
+ExCreateCallback
+FsRtlInitializeOplock
+xHalQuerySystemInformation
+xHalSetSystemInformation
+xHalQueryBusSlots
+xHalRegisterBusHandler
+NtCreateChannel
+NtListenChannel
+NtOpenChannel
+NtSetContextChannel
+RtlAreAnyAccessesGranted
+RtlLengthRequiredSid
+CcAcquireByteRangeForWrite
+KeSetEvent
+MmUnlockPages
+CcMdlWriteComplete2
+CcSetFileSizes
+MmMapLockedPages
+MmSetAddressRangeModified
+IoAcquireCancelSpinLock
+FsRtlOplockBreakToII
+FsRtlRequestExclusiveOplock
+FsRtlOplockCleanup
+SwapContext
+KxUnlockDispatcherDatabase
+FsRtlNotifySetCancelRoutine
+IoStartNextPacket
+FsRtlWaitOnIrp
+FsRtlRemoveAndCompleteIrp
+MiCleanSection
+CcUninitializeCacheMap
+CcLazyWriteScan
+CcWriteBehind
+MiDecrementShareCount2
+MiRestoreTransitionPte
+MmFlushSection
+MmMapViewInSystemCache
+ExpAcquireResourceSharedLite
+RtlInitializeBitMap
+RtlCompressBufferNS
+RtlDecompressBufferNS
+RtlDecompressFragmentNS
+RtlDescribeChunkNS
+RtlReserveChunkNS
+NtGetPlugPlayEvent
+PsSetLegoNotifyRoutine
+CmpSetGlobalQuotaAllowed
+NtSetSystemPowerState
+HalProcessorIdle
+HalSweepDcache
+HalSweepIcache
+KiInterruptTemplate
+RtlLengthSid
+RtlAreAllAccessesGranted
+CmSetRegistryQuotaInformation
+CmpCompressedNameSize
+_flswbuf
+_flsbuf
+RtlConvertLongToLargeInteger
+DebugPrint
+MmGetCrashDumpStateInformation
+KeSetCacheErrorRoutine
+KeSetKernelStackSwapEnable
+MmPurgeSection
+MiWaitForInPageComplete
+CcGetVacbMiss
+FsRtlFastCheckLockForRead
+FsRtlCheckLockForReadAccess
+KiDeliverApc
+KiApcInterrupt
+ExLockPool
+MiCheckControlArea
+MiResolveProtoPteFault
+PsWatchWorkingSet
+KiInterruptStackSwitch
+KiExceptionDispatch
+IoStartPacket
+MiMakeSystemAddressValidPfn
+PsChargeSharedPoolQuota
+ExpAcquireSharedStarveExclusive
+MiSectionDelete
+FsRtlFastCheckLockForWrite
+CcUnmapVacbArray
+CcUnmapAndPurge
+IoQueueThreadIrp
+KeResetEvent
+KeSetEventBoostPriority
+KeAlertResumeThread
+MiGetEventCounter
+PsReturnSharedPoolQuota
+KeInsertQueueApc
+KiTimerExpiration
+MiGetInPageSupportBlock
+ExDeleteResourceLite
+ExpAcquireResourceExclusiveLite
+IoReleaseCancelSpinLock
+KeInsertHeadQueue
+KeSetAutoAlignmentThread
+KeAttachProcess
+PspSetLdtSize
+ExpInterlockedPopEntrySList
+IopAllocateIrp
+IoAllocateIrp
+IoAllocateMdl
+ObpAllocateObjectNameBuffer
+KeSetTargetProcessorDpc
+FsRtlInitializeFileLock
+ExLocalTimeToSystemTime
+ExSystemTimeToLocalTime
+CcSetLogHandleForFile
+RtlGetDefaultCodePage
+PfxInitialize
+RtlCopyLuid
+PspSetProcessIoHandlers
+KeRaiseUserException
+PsGetProcessExitTime
+_fptrap
+strlen
+atoi
+_stricmp
+ObDereferenceObject
+RtlRaiseStatus
+RtlRaiseException
+RtlEnlargedUnsignedMultiply
+RtlEnlargedIntegerMultiply
+RtlpFreeAtom
+DebugPrompt
+MiRemoveBasedSection
+MiInsertBasedSection
+MmFreeContiguousMemory
+MiTakePageFromWorkingSet
+KeInitializeTimer
+IoSetThreadHardErrorMode
+IoCallDriver
+FsRtlPostPagingFileStackOverflow
+FsRtlPostStackOverflow
+FsRtlNumberOfRunsInMcb
+ExRaiseStatus
+ExRaiseException
+ExIsProcessorFeaturePresent
+ExInterlockedExchangeUlong
+FsRtlUninitializeMcb
+FsRtlInitializeMcb
+IoDeleteController
+LdrAccessResource
+RtlZeroMemory
+RtlMoveMemory
+RtlAddAccessAllowedAce
+PspQueueApcSpecialApc
+SeFreePrivileges
+SepFreeCapturedString
+SepDefaultDeleteMethod
+CmQueryRegistryQuotaInformation
+NtLoadKey
+CmpLazyFlushDpcRoutine
+towupper
+ObInitProcess2
+RtlUnwind
+RtlLargeIntegerNegate
+RtlpUnlockAtomTable
+MiFindEmptySectionBaseDown
+MmIsRecursiveIoFault
+KiCopyInformation
+KiRestoreInterrupts
+KiDisableInterrupts
+IoReleaseVpbSpinLock
+FsRtlMdlReadCompleteDev
+_purecall
+ExAllocatePool
+ExRaiseAccessViolation
+ExRaiseDatatypeMisalignment
+NtSetIntervalProfile
+FsRtlCompletionRoutinePriv
+IopUserRundown
+RtlpDestroyUnCommittedRange
+ObDestroyHandleProcedure
+ObpValidateDesiredAccess
+RtlpDestroyHandleTableForAtomTable
+RtlpAllocateAtom
+KeReturnToFirmware
+KeReleaseMutex
+KeInitializeDpc
+KeSweepDcache
+IoIsSystemThread
+IoCompleteRequest
+IoGetAttachedDevice
+ExpDeleteMutant
+ExSystemExceptionFilter
+SeDeassignPrimaryToken
+KdpComputeChecksum
+strrchr
+strchr
+SepInitializePrivilegeFilter
+RtlLargeIntegerSubtract
+RtlLargeIntegerAdd
+RtlpExecuteHandlerForUnwind
+RtlpExecuteHandlerForException
+MmSizeOfMdl
+KiSquareRootSingle
+KiSquareRootDouble
+KeFreezeExecution
+KeInitializeSemaphore
+KeBugCheck
+KeSetTimeIncrement
+KdpReboot
+KdpQueryPerformanceCounter
+IoAcquireVpbSpinLock
+FsRtlOplockDpc
+FsRtlFastUnlockAllByKey
+FsRtlTruncateMcb
+ExInterlockedIncrementLong
+ExInterlockedDecrementLong
+ExpAllocateStringRoutine
+CcExceptionFilter
+FsRtlAllocateResource
+IopDeallocateApc
+NtFlushWriteBuffer
+LdrFindResource_U
+LdrFindResourceDirectory_U
+RtlpInitUpcaseTable
+ObMakeTemporaryObject
+SepRmComponentTestCommandWrkr
+SepAdtInitializePhase1
+CmpFree
+KdpQuickMoveMemory
+NtSetLowWaitHighThread
+_strset
+ObfReferenceObject
+RtlpExceptionHandler
+MmReturnPoolQuota
+KiRestoreProcessorState
+KeFlushEntireTb
+IoQueryVolumeInformation
+RtlpGetTimeZoneInfoHandle
+RtlNtStatusToDosError
+RtlAcquirePebLock
+RtlReleasePebLock
+PsCreateSystemProcess
+NtTestAlert
+NtSetHighWaitLowThread
+NtGetTickCount
+wcslen
+LsaFreeReturnBuffer
+PspDeleteProcessSecurity
+ObDeassignSecurity
+RtlpFreeHandleForAtom
+DbgUnLoadImageSymbols
+MmIsNonPagedSystemAddressValid
+KiInterruptHandler
+ExpTimeRefreshDpcRoutine
+IoQueryFileInformation
+IopReadyDeviceObjects
+IopUserCompletion
+RtlEqualLuid
+RtlFreeUnicodeString
+RtlFreeAnsiString
+RtlFreeOemString
+RtlxUnicodeStringToAnsiSize
+RtlxUnicodeStringToOemSize
+RtlxAnsiStringToUnicodeSize
+RtlxOemStringToUnicodeSize
+SepIdAssignableAsOwner
+CmpRemoveKeyControlBlock
+HvpGetCellFlat
+RtlpLogLastExceptionDisposition
+RtlSetAllBits
+RtlClearAllBits
+RtlpInitializeLockAtomTable
+MiDownPfnReferenceCount
+MiZeroPhysicalPage
+MiRemoveImageHeaderPage
+MiFlushTb
+KiSuspendThread
+KeReadyThread
+KeProfileInterrupt
+KiComputeWaitInterval
+KeSweepIcache
+KeSetTimer
+KeInitializeTimerEx
+IopApcHardError
+FsRtlNormalizeNtstatus
+ExpGetGlobalAtomTable
+FsRtlNotifyUninitializeSync
+HvGetCellSize
+KdpCauseBugCheck
+CmpLockRegistry
+wcscpy
+rand
+__ll_mul
+PspSetSavedValue
+PspGetSavedValue
+ObpAcquireDescriptorCacheReadLock
+ObpAcquireDescriptorCacheWriteLock
+RtlInitializeGenericTable
+MiUpForkPageShareCount
+KiSaveProcessorState
+ExpTimeZoneWork
+MiChangeNoAccessForkPte
+RtlAbsoluteToSelfRelativeSD
+ObpHashBuffer
+PspNullSpecialApc
+SeDeassignSecurity
+NtVdmControl
+towlower
+__ll_rshift
+__ull_rshift
+__ll_lshift
+MiGetFirstNode
+KiDisplayString
+KeDisableApcQueuingThread
+KeInitializeMutex
+IopInvalidDeviceRequest
+IopExceptionFilter
+FsRtlIsTotalDeviceFailure
+FsRtlAllocatePoolWithQuotaTag
+FsRtlAllocatePoolWithTag
+ExpAllocatePoolWithQuotaHandler
+CcUnmapVacb
+CcCopyReadExceptionFilter
+NtDeleteAtom
+RtlCheckRegistryKey
+RtlCreateRegistryKey
+SepRmCreateLogonSessionWrkr
+SepRmDeleteLogonSessionWrkr
+CmpLazyFlushWorker
+PspUnhandledExceptionInSystemThread
+PsRestoreImpersonation
+ObReleaseObjectSecurity
+RtlCreateUnicodeStringFromAsciiz
+DbgPrompt
+MiCheckForConflictingNode
+KeEnableApcQueuingThread
+FsRtlAllocatePoolWithQuota
+FsRtlAllocatePool
+FsRtlAddMcbEntry
+ExInterlockedPopEntryList
+ExUnlockPool
+ExpExpirationThread
+FsRtlCheckForMatchingFileObject
+FsRtlIsNotifyOnList
+IopAbortRequest
+ChkSum
+PsExitSpecialApc
+SepFreeProxyData
+CmpDestroyTemporaryHive
+CmpLockRegistryExclusive
+strcmp
+_wcslwr
+_strupr
+_strnset
+_strlwr
+PsSetCreateThreadNotifyRoutine
+RtlpUnwindHandler
+MiUpControlAreaRefs
+MiDeleteFreeVm
+KeSetAutoAlignmentProcess
+KeSetDisableBoostThread
+IopChecksum
+IopErrorLogDpc
+NtAddAtom
+NtFindAtom
+FsRtlpSetSymbolicLink
+MiGetImageProtection
+SeReleaseSid
+SeReleaseAcl
+SeReleaseLuidAndAttributesArray
+SeReleaseSidAndAttributesArray
+CmShutdownSystem
+CmpQuotaWarningWorker
+CmpFileSetSize
+CmpCopyCompressedName
+CmpRefreshWorkerRoutine
+KdpSendControlPacket
+memchr
+_wcsupr
+_wcsnset
+SeFreeCapturedSecurityQos
+PsTerminateSystemThread
+RtlInitAnsiString
+RtlInitString
+RtlpInitializeHandleTableForAtomTable
+RtlpLockAtomTable
+MiReturnCommitment
+MiIsProtectionCompatible
+KeInitializeDeviceQueue
+IopErrorLogRequeueEntry
+FsRtlIsNtstatusExpected
+CcRepinBcb
+FsRtlNotifyReportChange
+IopDeleteDriver
+MiUnloadSystemImageByForce
+RtlInitNlsTables
+ObpReferenceSecurityDescriptor
+ObpDereferenceSecurityDescriptor
+SepAdtValidateAuditBounds
+CmpGetKeySecurity
+fputwc
+iswctype
+wcschr
+ObpCompareSecurityDescriptors
+ObAuditInheritedHandleProcedure
+RtlLargeIntegerShiftRight
+RtlLargeIntegerShiftLeft
+RtlFindSetBitsAndClear
+RtlInitUnicodeString
+MiMapCacheExceptionFilter
+KiInterruptDispatchRaise
+KeBusError
+KeRemoveDeviceQueue
+KdpWriteControlSpace
+FsRtlStackOverflowRead
+ExInterlockedRemoveHeadList
+ExInterlockedInsertHeadList
+ExInterlockedExtendZone
+ExAcquireResourceExclusiveLite
+KeReadStateTimer
+KiAcquireSpinLock
+ExpInterlockedPushEntrySList
+IoFreeIrp
+ObpFreeObjectNameBuffer
+IoFreeMdl
+CcMdlReadComplete2
+CcWorkerThread
+FsRtlUninitializeLargeMcb
+FsRtlFreeTunnelNode
+KeReleaseSpinLock
+IoSetHardErrorOrVerifyDevice
+KeEnterCriticalRegion
+FsRtlInitializeTunnelCache
+NtOpenFile
+MmUnmapIoSpace
+MiGetExceptionInfo
+ComputeUnicodeNameLength
+RtlCopyLuidAndAttributesArray
+ObpDestroySecurityDescriptorHeader
+SeReleaseSecurityDescriptor
+CmpCreateTemporaryHive
+isprint
+isspace
+isxdigit
+isdigit
+isupper
+PspInheritQuota
+ObpReleaseDescriptorCacheLock
+RtlAddressInSectionTable
+RtlLargeIntegerArithmeticShift
+MiDownShareCountFlushEntireTb
+MiUpCloneProtoRefCount
+MiUpPfnReferenceCount
+MmCanFileBeTruncated
+KeInitializeEventPair
+KeTryToAttachProcess
+KdpStub
+IoGetBaseFileSystemDeviceObject
+ExDeleteResource
+IoEnqueueIrp
+NtDeviceIoControlFile
+KeAddSystemServiceTable
+NtReadRequestData
+NtWriteRequestData
+SeImpersonateClient
+CmpReleaseGlobalQuota
+CmpUnlockRegistry
+CmpFindKeyControlBlock
+CmpDeleteKeyObject
+mblen
+PspDereferenceEventPair
+PsGetVersion
+PspDeleteThreadSecurity
+PspInitializeProcessSecurity
+RtlLookupElementGenericTable
+DbgLoadImageSymbols
+KeRemoveEntryDeviceQueue
+KeCancelTimer
+IopFreeIrpAndMdls
+IopDescriptorSortingWeight
+FsRtlCheckNoSharedConflict
+ExpTimerDpcRoutine
+CacheImageSymbols
+RtlCopySid
+RtlCompressWorkSpaceSizeLZNT1
+PsEstablishWin32Callouts
+SeQuerySecurityAccessMask
+CmpConfigureProcessors
+CmpSearchOpenWorker
+CmpQuerySecurityDescriptorInfo
+CmpFileFlush
+wctomb
+wcscat
+RtlpCreateHandleForAtom
+LpcpClosePort
+KiSelectNextThread
+KeThawExecution
+KiSaveProcessorControlState
+KeBugCheckUnicodeToAnsi
+KdpSwitchProcessor
+IopDecrementDeviceObjectRef
+IoFreeController
+xHalDeviceControl
+FsRtlLookupLastMcbEntry
+ExpTimeZoneDpcRoutine
+ExInterlockedAddLargeInteger
+CcGetFileObjectFromSectionPtrs
+NtClearEvent
+FsRtlNotifyChangeDirectory
+RtlValidSid
+RtlpDestroyHeapSegment
+CmpLazyFlush
+KdpSendString
+_wcsrev
+_strrev
+_strcmpi
+ObpDeleteDirectoryEntry
+ObAssignObjectSecurityDescriptor
+RtlInitializeExceptionLog
+RtlpVirtualUnwind
+MiRemoveWsleFromFreeList
+MiGetSystemCacheSubsection
+KeSetPriorityThread
+IoDetachDevice
+IoStopTimer
+IopGetModeInformation
+RtlIntegerToUnicodeString
+RtlDeleteRegistryValue
+PsCreateSystemThread
+SepSinglePrivilegeCheck
+CmpDoFileSetSize
+DbgkpSuspendProcess
+DbgkpResumeProcess
+tolower
+ObReferenceObjectByPointer
+MiCaptureSystemPte
+MmAllowWorkingSetExpansion
+KiGetPhysicalAddress
+KdpPageInData
+IoRegisterDriverReinitialization
+RtlpAddData
+NtAlertThread
+SeAssignPrimaryToken
+SepFreePrimaryGroup
+SepAppendDefaultDacl
+CmpNameSize
+CmFlushKey
+KdpRestoreBreakpoint
+PsOpenTokenOfProcess
+RtlSecondsSince1970ToTime
+RtlSecondsSince1980ToTime
+RtlSectionTableFromVirtualAddress
+RtlEnlargedUnsignedDivide
+DbgPrint
+MiCheckPageFileMapping
+MiUpdateImageHeaderPage
+KiIpiGenericCall
+KeQueryBasePriorityThread
+KeInitializeQueue
+KeDeregisterBugCheckCallback
+IopErrorLogGetEntry
+CcSetDirtyPageThreshold
+ExpProfileDelete
+IopAllocateIrpCleanup
+NtListenPort
+LpcpAllocateFromPortZone
+LpcpFindDataInfoMessage
+RawQueryFsVolumeInfo
+SepInformFileSystemsOfDeletedLogon
+SeSetSecurityAccessMask
+SepTokenDeleteMethod
+CmpFreePostBlock
+CmpDereferenceKeyControlBlock
+CmpDestroyHive
+CmpCloseKeyObject
+CmpDoFlushAll
+KdpWriteBreakpoint
+wcscspn
+PsRevertToSelf
+ObpSetHandleAttributes
+MiWaitForForkToComplete
+IopGetMountFlag
+IopRemoveTimerFromTimerList
+NtSetLowEventPair
+NtSetHighEventPair
+IoRegisterShutdownNotification
+LpcpPrepareToWakeClient
+LpcpSaveDataInfoMessage
+RtlValidAcl
+KiAcquireSpinLockRaiseIrql
+KeSynchronizeExecution
+KeReadStateQueue
+xHalSuspendHibernateSystem
+KeRaiseIrql
+KiChainedDispatch
+ExAcquireFastMutex
+PsImpersonateClient
+FsRtlLookupLargeMcbEntry
+FsRtlLookupMcbEntry
+PsReferenceImpersonationToken
+PsReferencePrimaryToken
+FsRtlGetNextLargeMcbEntry
+FsRtlLookupLastLargeMcbEntry
+FsRtlTruncateLargeMcb
+FsRtlNumberOfRunsInLargeMcb
+ExInterlockedAddUlong
+RtlGetGroupSecurityDescriptor
+RtlGetOwnerSecurityDescriptor
+SePrivilegeCheck
+SepFreeDefaultDacl
+DbgkUnMapViewOfSection
+wcsspn
+_wcsicmp
+MiLocateAddress
+MiFlushRangeFilter
+MiUnlockPagedAddress
+MiIsPteDecommittedPage
+MmDbgReadCheck
+KeQueryIntervalProfile
+KiInstructionBusError
+KeInitializeMutant
+KeFillFixedEntryTb
+KiTrapDispatch
+KiIntegerOverflowDispatch
+KiInstructionBusErrorDispatch
+KiIllegalInstructionDispatch
+KiDataBusErrorDispatch
+KiCoprocessorUnusableDispatch
+IoStartTimer
+FsRtlRemoveMcbEntry
+FsRtlGetNextMcbEntry
+ExQueryPoolBlockSize
+KeFlushSingleTb
+NtQuerySystemTime
+MmGetCrashDumpInformation
+RtlGetCompressionWorkSpaceSize
+SePrivilegeObjectAuditAlarm
+CmpFindKeyControlBlockWithLock
+RtlCreateAcl
+wcsncmp
+wcsncat
+strncmp
+strncat
+RtlTimeToSecondsSince1980
+RtlImageNtHeader
+MiGetPreviousNode
+MiGetNextNode
+MiInsertFrontModifiedNoWrite
+KeInitializeProfile
+KiFlushRandomTb
+KiBugCheckDispatch
+KiBreakpointDispatch
+IopSetAttachedDevicePointer
+CcMdlReadComplete
+SeCopyClientToken
+CmpAllocate
+CmpAllocateTag
+HvpFillFileName
+CmpDoCompareKeyName
+HvpHeaderCheckSum
+KdpReceiveString
+vsprintf
+toupper
+KeSetIdealProcessorThread
+KeInsertByKeyDeviceQueue
+KiReadEntryTb
+KdpPollBreakInWithPortLock
+IopStartApcHardError
+IO_DESC_MAX
+FsRtlRemoveLargeEntry
+FsRtlFreeFirstMapping
+CcScheduleLazyWriteScan
+FsRtlNotifyInitializeSync
+IoDisconnectInterrupt
+IoDeleteSymbolicLink
+IoCreateSymbolicLink
+MiFlushAllPages
+RtlMultiByteToUnicodeSize
+RtlSetGroupSecurityDescriptor
+RtlSetOwnerSecurityDescriptor
+ObpInitSecurityDescriptorCache
+RawQueryFsAttributeInfo
+SepAppendPrimaryGroup
+NtInitializeRegistry
+KdEnterDebugger
+RtlExtendedLargeIntegerDivide
+RtlNumberOfClearBits
+MiUnmapImageHeaderInHyperSpace
+MiObtainFreePages
+MmForceSectionClosed
+KiFloatingDispatch
+KeIpiInterrupt
+CcMdlWriteComplete
+NtWaitLowEventPair
+NtWaitHighEventPair
+NtSetLowWaitHighEventPair
+NtSetHighWaitLowEventPair
+IopOpenRegistryKey
+LpcpFreePortClientSecurity
+MiCrashDumpWorker
+MmPageEntireDriver
+RtlCreateUnicodeString
+RtlDescribeChunk
+RtlReserveChunk
+RtlRandom
+ObGetHandleInformation
+ObKillProcess
+SeDeleteObjectAuditAlarm
+CmpRemoveSecurityCellList
+KdExitDebugger
+wcsrchr
+_strnicmp
+_itoa
+RtlRealSuccessor
+KeSetIntervalProfile
+NtRaiseException
+KeTestAlertThread
+KeRevertToUserAffinityThread
+KeForceResumeThread
+IoInitializeIrp
+ExInitializeZone
+RtlpRaiseException
+FsRtlRemoveLargeMcbEntry
+ExReleaseResourceLite
+KeClearEvent
+KeInsertQueueDpc
+FsRtlInitProcessorLockQueue
+KiRetireDpcList
+SepRmSendCommandToLsaWrkr
+ExReleaseFastMutex
+ExGetPreviousMode
+KeQuerySystemTime
+KiSaveVolatileFloatState
+KiInterruptDistribution
+KiInterruptDispatchSame
+CcGetVirtualAddress
+CcMapAndRead
+KeFlushIoBuffers
+FsRtlAcquireFileExclusive
+FsRtlReleaseFile
+IopErrorLogQueueRequest
+LpcpInitializePortQueue
+RtlUnicodeToMultiByteSize
+RtlAnsiCharToUnicodeChar
+RawCleanup
+SepQueryTypeString
+HvpGetCellPaged
+HvpGetCellMap
+KdpWriteVirtualMemory
+KdpPageIn
+RawCheckForDismount
+RtlNumberOfSetBits
+RtlAppendAsciizToString
+MiDoesPdeExistAndMakeValid
+KeFlushQueueApc
+KeFlushMultipleTb
+KiFloatDispatch
+IoAllocateController
+IoBuildSynchronousFsdRequest
+FsRtlAllocateFirstMapping
+RtlDecompressBuffer
+RawQueryFsDeviceInfo
+SeCloseObjectAuditAlarm
+CmpCopyTree
+DbgkExitThread
+_mbstrlen
+_vsnprintf
+PspSetEventPair
+ObpEnumFindHandleProcedure
+RtlAppendStringToString
+MiFeedSysPtePool
+MmDisableModifiedWriteOfSection
+KiReinsertTreeTimer
+KeResumeThread
+KiProcessProfileList
+KiTbMiss
+ExpScanPoolLookasideList
+NtQueryDefaultLocale
+FsRtlReleaseFileForModWrite
+MmDeleteTeb
+OpbCreateCacheEntry
+SepDequeueWorkItem
+CmpValidateAlternate
+NtDeleteKey
+CmpFreeValue
+wcsstr
+_wcsnicmp
+_snprintf
+PsSetCreateProcessNotifyRoutine
+ObpProcessRemoveObjectQueue
+DaysAndFractionToTime
+RtlpAtomMapAtomToHandleEntry
+MiMakePdeExistAndMakeValid
+LpcpMoveMessage
+KiPcToFileHeader
+KeSetSystemAffinityThread
+IopAllocateIrpMustSucceed
+IoAttachDeviceToDeviceStack
+ExReturnPoolQuota
+CcSetBcbOwnerPointer
+FsRtlCheckNotifyForDelete
+RtlEqualSid
+RtlCompressBuffer
+PsUnlockProcess
+SepAssemblePrivileges
+SeExchangePrimaryToken
+CmpCheckCreateAccess
+HvpFreeMap
+DbgkExitProcess
+sprintf
+LsaCallAuthenticationPackage
+RtlEnumerateGenericTableWithoutSplaying
+MiInitializePfnForOtherProcess
+KiThreadDispatch
+KeRundownQueue
+ExpGetHandleInformation
+ProbeForWrite
+NtUnmapViewOfSection
+PspMapSystemDll
+SeCheckAuditPrivilege
+HvAllocateCell
+CmSetLastWriteTimeKey
+DbgkpSendApiMessage
+KiUnlockDispatcherDatabase
+islower
+KiDispatchInterrupt
+IoGetRelatedDeviceObject
+CcSetValidData
+IoSynchronousPageWrite
+KeLeaveCriticalRegion
+IofCallDriver
+IoGetCurrentProcess
+KeQueryTickCount
+RawCompletionRoutine
+PspSystemThreadStartup
+RtlpRaiseStatus
+KeBoostPriorityThread
+KiUserAddressErrorDispatch
+IopRaiseInformationalHardError
+IoWriteErrorLogEntry
+ExAdjustLookasideDepth
+ExpScanGeneralLookasideList
+MmUnmapViewInSystemSpace
+ExCreateHandleTable
+ExpGetObjectInformation
+ExFreePool
+FsRtlRemoveAndCompleteWaitIrp
+FsRtlPrivateLimitFreeLockList
+IopDeleteIoCompletion
+CcDeallocateBcb
+ExUnlockUserBuffer
+SeTraverseAuditAlarm
+KiInsertQueue
+ExAcquireResourceSharedLite
+KeLowerIrql
+FsRtlDissectName
+MiReserveSystemPtes
+IoIsOperationSynchronous
+CcMapData
+KeInitializeProcess
+CcFindBcb
+KeRemoveQueue
+FsRtlOplockIsFastIoPossible
+LpcpFreeDataInfoMessage
+LpcExitThread
+RtlFirstFreeAce
+RtlSetSaclSecurityDescriptor
+RtlSetDaclSecurityDescriptor
+RtlDecompressFragment
+PsSetProcessPriorityByClass
+SepInformLsaOfDeletedLogon
+CmpFlushNotify
+CmpFreeKeyBody
+CmpFreeSecurityDescriptor
+CmpRemoveFromHiveFileList
+PspDereferenceQuota
+ObDupHandleProcedure
+KeRemoveQueueApc
+KeFillLargeEntryTb
+IoAttachDeviceByPointer
+ExExtendZone
+RtlExtendedIntegerMultiply
+NtAllocateLocallyUniqueId
+NtQueryIntervalProfile
+RtlGetSaclSecurityDescriptor
+RtlGetDaclSecurityDescriptor
+LdrVerifyMappedImageMatchesChecksum
+RawQueryInformation
+SepQueryNameString
+HvpDiscardBins
+KdpDeleteBreakpoint
+PspAssignPrimaryToken
+PsDisableImpersonation
+KeAlertThread
+RtlWriteRegistryValue
+PsCreateWin32Process
+SeQueryAuthenticationIdToken
+CmpWorkerCommand
+CmCheckRegistry
+CmpCopyCell
+KdpPrintString
+IoUpdateShareAccess
+KiInSwapKernelStacks
+wcsncpy
+strstr
+LsaDeregisterLogonProcess
+RtlPcToFileHeader
+MmIsSystemAddressAccessable
+KeEnterKernelDebugger
+KeSetProcess
+FsRtlpPostStackOverflow
+FsRtlPrivateRemoveLock
+ExpGetLockInformation
+NtSetDefaultHardErrorPort
+FsRtlpOpenDev
+NtMakeTemporaryObject
+RawSetInformation
+SepFilterPrivilegeAudits
+CmpClaimGlobalQuota
+HvpGrowLog1
+MiDoneWithThisPageGetAnother
+KiSwapProcess
+KeSwitchKernelStack
+NtContinue
+IopCompletePageWrite
+CmpPostApc
+RtlCompareMemoryUlong
+RtlCopyString
+MmUnlockCachedPage
+MmDbgWriteCheck
+MmCreateMdl
+KeSuspendThread
+KePulseEvent
+KeRegisterBugCheckCallback
+CcAllocateObcb
+CcSetAdditionalCacheAttributes
+strncpy
+IoInitializeTimer
+IopErrorLogConnectPort
+PspThreadDelete
+KiRestoreVolatileFloatState
+KiPassiveRelease
+KeInitializeEvent
+NtRegisterThreadTerminatePort
+SeSinglePrivilegeCheck
+CmpPostApcRunDown
+CmpCheckNotifyAccess
+HvpGrowLog2
+FsRtlFindLargeIndex
+IoGetTopLevelIrp
+SeReleaseSubjectContext
+ExpInterlockedCompareExchange64
+RtlSubAuthoritySid
+RtlEqualMemory
+RtlCompareMemory
+wcscmp
+RtlpGetExtraStuffPointer
+ExReleaseFastMutexUnsafe
+RtlpGetStackLimits
+SeSetAccessStateGenericMapping
+ExAllocatePoolWithTag
+ExpFindCurrentThread
+CcAllocateInitializeBcb
+CcCreateVacbArray
+ExAllocatePoolWithQuotaTag
+ExAllocatePoolWithQuota
+ElapsedDaysToYears
+SeDeleteAccessState
+IoGetDeviceToVerify
+RtlTimeToTimeFields
+RtlSplay
+KeUpdateRunTime
+RtlDelete
+RtlDeleteElementGenericTable
+SeCaptureSubjectContext
+RtlFindClearBitsAndSet
+ExReleaseHandleTableShared
+IopParseFile
+RtlFindClearBits
+ExpInterlockedExchangeAddLargeInteger
+RtlCompareUnicodeString
+RtlMapGenericMask
+IoCheckDesiredAccess
+CcUnpinData
+strcpy
+mbtowc
+RtlEnumerateGenericTable
+MiGetPageForHeader
+KiFlushMultipleTb
+IoStartNextPacketByKey
+ExpRaiseStatus
+ExInitializeNPagedLookasideList
+ExConvertExclusiveToSharedLite
+KeRemoveByKeyDeviceQueue
+FsRtlDoesDbcsContainWildCards
+IoCreateSynchronizationEvent
+IoCreateNotificationEvent
+RawClose
+NtSaveKey
+CmQueryKey
+KdpSetContext
+LsaLookupAuthenticationPackage
+ObpCaptureHandleInformation
+MiMakeSystemAddressValid
+MmGetPhysicalAddress
+KiMoveApcState
+KiProbeEntryTb
+KiReadyThread
+KiUnwaitThread
+KiWaitTest
+KiActivateWaiterQueue
+KiInsertQueueApc
+RtlQueryAtomsInAtomTable
+IoFastQueryNetworkAttributes
+RtlCopyUnicodeString
+IofCompleteRequest
+ObReferenceObjectByHandle
+ObpCaptureObjectCreateInformation
+ObCreateObject
+IoCreateStreamFileObject
+IopDereferenceVpbAndFree
+RtlUpcaseUnicodeChar
+ExFreePoolWithTag
+ObpCaptureObjectName
+RtlEqualUnicodeString
+RtlFillMemoryUlong
+SeAuditingFileEvents
+SeCreateAccessState
+RtlExtendedMagicDivide
+RtlTimeToSecondsSince1970
+KiAddressErrorDispatch
+FsRtlWorkerThread
+ExReleaseResourceForThread
+ExpCopyThreadInfo
+ExRemoveHandleTable
+ExpUuidSaveSequenceNumber
+IoUnregisterFileSystem
+LpcpFreeConMsg
+ObQueryObjectAuditingByHandle
+KdpReadVirtualMemory
+KdpReportExceptionStateChange
+RtlPinAtomInAtomTable
+MiLocateAddressInTree
+KiInvalidCompareSingle
+KiInvalidCompareDouble
+ExShutdownSystem
+FsRtlInitializeOpFilter
+IopFindCollisionInTList
+IopGetRegistryValues
+RtlComputeLfnChecksum
+LZNT1FindMatchMaximum
+NtFlushKey
+HvpAllocateMap
+DbgkMapViewOfSection
+NtDelayExecution
+KdpDeleteBreakpointRange
+MiHandleBankedSection
+MiCheckPdeForPagedPool
+FsRtlCheckLockForWriteAccess
+ExTryToAcquireResourceExclusiveLite
+CcPostWorkQueue
+FsRtlBalanceReads
+IoUnregisterFsRegistrationChange
+IoRegisterFsRegistrationChange
+IoCreateUnprotectedSymbolicLink
+ComputeNameLength
+SeCheckPrivilegedObject
+SeDefaultObjectMethod
+KdpMoveMemory
+SeAuditingFileOrGlobalEvents
+MiInitializeCopyOnWritePfn
+KiDataBusError
+FsRtlMdlReadComplete
+MiCheckProtoPtePageState
+ObOpenObjectByName
+IoCreateFile
+NtCreateFile
+CmpCreatePredefined
+NtDeleteFile
+MiDecrementReferenceCount
+ExpTimerApcRoutine
+ExpRaiseException
+ExpComputeLookasideDepth
+CcScanDpc
+IopTimerDispatch
+LdrpCompareResourceNames_U
+RtlGetAce
+NtOpenDirectoryObject
+NtOpenSymbolicLinkObject
+SepAdtCopyToLsaSharedMemory
+SepRmSetAuditEventWrkr
+strcat
+RtlAppendUnicodeStringToString
+MiLockPagedAddress
+KiIdleLoop
+KeSweepIcacheRange
+IoUnregisterShutdownNotification
+NtQueryDirectoryFile
+NtQueryOleDirectoryFile
+SePrivilegedServiceAuditAlarm
+ExAcquireSharedStarveExclusive
+KeAcquireSpinLock
+MmDeterminePoolType
+CcSetReadAheadGranularity
+RtlConvertUlongToLargeInteger
+RtlIsNameLegalDOS8Dot3
+FsRtlRemoveNodeFromTunnel
+FsRtlDoesNameContainWildCards
+MmIsAddressValid
+ExInterlockedInsertTailList
+ExInitializeResourceLite
+IoAllocateAdapterChannel
+FsRtlCurrentBatchOplock
+FsRtlNotifyCompletion
+ExCreateHandle
+ObpCreateHandle
+ObpCreateUnnamedHandle
+RtlUpcaseUnicodeStringToOemString
+ExTryToAcquireFastMutex
+ExInterlockedAddLargeStatistic
+RtlNtStatusToDosErrorNoTeb
+MiRemovePageByColor
+MiRemoveAnyPage
+RawInitializeVcb
+FsRtlMdlWriteCompleteDev
+IopParseDevice
+FsRtlIsNameInExpressionPrivate
+FsRtlIsNameInExpression
+ExReleaseHandleTableExclusive
+ObpValidateAccessMask
+RtlInitializeUnicodePrefix
+RtlCompressWorkSpaceSizeNS
+ObpDecrementHandleCount
+MiRemovePageFromList
+RtlpDidUnicodeToOemWork
+RtlUpcaseUnicodeStringToCountedOemString
+RtlUnicodeStringToCountedOemString
+IoBuildPartialMdl
+MiInitializePfn
+CmpCompareCompressedName
+CmpFindSubKeyByNumber
+KdpGetContext
+RtlImageDirectoryEntryToData
+MiInsertNode
+KeInitializeInterrupt
+IopFreeResourceDir
+IopGetRegistryKeyInformation
+IopLoadFileSystemDriver
+IopMarkDuplicateDevice
+MiSetImageProtectWrite
+RtlOpenCurrentUser
+SepNotifyFileSystems
+CmpDeleteTree
+NtQueryTimerResolution
+PsLookupThreadByThreadId
+PsLookupProcessByProcessId
+PsReferenceEffectiveToken
+ObFindHandleForObject
+ObAssignSecurity
+RtlLargeIntegerDivide
+MiCheckForContiguousMemory
+KiWaitSatisfyAll
+KiSystemServiceHandler
+KiXTbMiss
+FsRtlMdlWriteComplete
+IoGetDeviceObjectPointer
+IopGetDeviceInstanceCsConfigFlags
+RtlUpcaseUnicodeToOemN
+ObpAllocateObject
+FsRtlFindInTunnelCache
+ExMapHandleToPointer
+RtlUpcaseUnicodeString
+FsRtlAreNamesEqual
+NtOpenSection
+CmpSearchForOpenSubKeys
+CmpSearchKeyControlBlockTree
+CmpCopyName
+IopCheckDeviceAndDriver
+ObpChargeQuotaForObject
+ObValidateSecurityQuota
+SeLockSubjectContext
+FsRtlAddToTunnelCache
+FsRtlIsFatDbcsLegal
+DbgkpSectionHandleToFileHandle
+wcstombs
+swprintf
+mbstowcs
+_snwprintf
+ObpInsertDirectoryEntry
+MiSetProtectionOnTransitionPte
+NtCallbackReturn
+IoCancelIrp
+CcWaitOnActiveCount
+KeBoostCurrentThread
+CcUnpinDataForThread
+IopExceptionCleanup
+NtCreateProcess
+RawFileSystemControl
+KiInSwapProcesses
+MiFindEmptyAddressRange
+MiFlushEventCounter
+MmMapMemoryDumpMdl
+KiInvalidOperationLongword
+KiDivideByZeroSingle
+FsRtlNotifyCompleteIrpList
+MiFlushInPageSupportBlock
+KeThawAllThreads
+NtQueryInformationPort
+RtlSetActiveTimeBias
+NtRestoreKey
+HvSyncHive
+HvpTruncateBins
+PspReaper
+MiGetProtoPteAddressExtended
+MmFlushImageSection
+IopDropIrp
+MmRaisePoolQuota
+NtQueryPerformanceCounter
+FsRtlDeregisterUncProvider
+IopCancelAlertedRequest
+LpcpFreeToPortZone
+PspExitNormalApc
+MiLocateSubsection
+FsRtlPrivateInsertExclusiveLock
+ExInitializePagedLookasideList
+IopGetRegistryValue
+MiInsertPageInList
+FsRtlCheckOplock
+MiLocateWsle
+KeUpdateSystemTime
+MiSetDirtyBit
+IoSetShareAccess
+ExSetResourceOwnerPointer
+KiInsertTreeTimer
+ExIsResourceAcquiredExclusiveLite
+IO_DESC_MIN
+NtFsControlFile
+RtlSubtreePredecessor
+MiLocateAndReserveWsle
+MiAddValidPageToWorkingSet
+RtlUnicodeToOemN
+RtlUnicodeStringToOemString
+MiUnlinkPageFromList
+IoCheckShareAccess
+KdpReadControlSpace
+ExDestroyHandle
+KdIsThisAKdTrap
+FsRtlDeleteTunnelCache
+KeRemoveQueueDpc
+KeTryToAcquireSpinLock
+KeInsertDeviceQueue
+KiComputeTimerTableIndex
+SeRegisterLogonSessionTerminatedRoutine
+SepSidInToken
+RtlCreateAtomTable
+MiFlushTbAndCapture
+MiFreeInPageSupportBlock
+KeChangeColorPage
+ObpLookupObjectName
+CcFastCopyWrite
+IopCloseFile
+MiRemoveZeroPage
+MiResolveMappedFileFault
+RtlOemToUnicodeN
+RtlOemStringToUnicodeString
+ObpFreeObject
+ObpRemoveObjectRoutine
+MiBuildKernelMap
+MiMakeSystemAddressValidPfnWs
+KiIpiProcessRequests
+FsRtlCancelWaitIrp
+NtCompleteConnectPort
+SeComputeQuotaInformationSize
+SepAdtLogAuditRecord
+ObDeleteCapturedInsertInfo
+KeRundownThread
+KeReleaseSemaphore
+ExpFindAndRemoveTagBigPages
+CcDeferWrite
+IopWriteResourceList
+MiUpdateWsle
+IopCheckBackupRestorePrivilege
+IoCheckFunctionAccess
+FsRtlPruneTunnelCache
+KeFillEntryTb
+PspTerminateThreadByPointer
+SeGetTokenControlInformation
+KdpGetVersion
+IopCheckUnloadDriver
+strspn
+ObpDeleteSymbolicLink
+RtlLookupFunctionEntry
+KiFindReadyThread
+NtStopProfile
+NtSetIoCompletion
+LdrRelocateImage
+NtResumeThread
+NtAlertResumeThread
+RawQueryVolumeInformation
+KiOutSwapProcesses
+KiLookupFunctionEntry
+KdpSetStateChange
+FsRtlPrivateResetLowestLockOffset
+MiReturnPageFileQuota
+NtOpenEvent
+ExpUuidLoadSequenceNumber
+NtOpenEventPair
+NtOpenMutant
+NtOpenSemaphore
+NtOpenTimer
+IoCancelThreadIo
+NtOpenIoCompletion
+PiRegSzToString
+CmQueryValueKey
+SepTokenIsOwner
+NtW32Call
+IoAttachDevice
+MiLookupDataTableEntry
+SeSubProcessToken
+ObSetSecurityDescriptorInfo
+MiInsertStandbyListAtFront
+MiFindActualFaultingPte
+IopCatagorizeDescriptors
+RtlInitCodePageTable
+SeUnregisterLogonSessionTerminatedRoutine
+CmDeleteKey
+KdpRestoreBreakPointEx
+RtlEqualPrefixSid
+MmDbgTranslatePhysicalAddress
+ExpAddTagForBigPages
+MiCheckForControlAreaDeletion
+FsRtlMdlRead
+FsRtlPrepareMdlWrite
+IopConcatenateUnicodeStrings
+PfxRemovePrefix
+SeAuditHandleCreation
+SepCopyProxyData
+FsRtlOplockBreakNotify
+MiLookupWsleHashIndex
+MiRemoveFromSystemSpace
+FsRtlpRegisterProviderWithMUP
+MmUnmapVideoDisplay
+MmCreateTeb
+CmEnumerateKey
+RtlPrefixString
+RtlEqualString
+KiCallUserMode
+FsRtlPrivateCheckForSharedLockAccess
+ExDeleteNPagedLookasideList
+ExDeletePagedLookasideList
+KiSetServerWaitClientEvent
+KiRequestSoftwareInterrupt
+RtlCreateSecurityDescriptor
+ExInterlockedPushEntryList
+IoGetRequestorProcess
+KiCacheError
+RtlIsGenericTableEmpty
+ObpDeleteNameCheck
+FsRtlOplockFsctrl
+MiRemoveWsle
+SwapSplayLinks
+RtlDeleteNoSplay
+KiInsertTimerTable
+RtlClearBits
+MiReleasePageFileSpace
+ExReinitializeResourceLite
+IoRemoveShareAccess
+MmBuildMdlForNonPagedPool
+FsRtlAcquireFileForCcFlush
+KiFlushSingleTb
+SepConcatenatePrivileges
+RtlUpperString
+SepGetDefaultsSubjectContext
+NtQueryAttributesFile
+RawReadWriteDeviceControl
+SepMakeTokenEffectiveOnly
+CmpLinkKeyToHive
+CmpCreatePerfKeys
+NtQueryKey
+NtSetInformationKey
+CmpOpenFileWithExtremePrejudice
+CmUnloadKey
+MiReturnPageTablePageCommitment
+MiPageFileFull
+KiContinue
+KiDivideByZeroDouble
+KiQuantumEnd
+IopCompleteDriverUnload
+FsRtlpIsDfsEnabled
+ExInitializeResource
+RtlAreBitsClear
+CcGetVirtualAddressIfMapped
+FsRtlDissectDbcs
+IoCreateController
+RtlCopySidAndAttributesArray
+CmpGetNextName
+KiInvalidOperationQuadword
+KeFreezeAllThreads
+KeDetachProcess
+FsRtlPrivateCheckForExclusiveLockAccess
+ObQueryTypeName
+NtEnumerateKey
+NtEnumerateValueKey
+CmpDoFindSubKeyByNumber
+PsOpenTokenOfThread
+RtlDestroyAtomTable
+MiCauseOverCommitPopup
+KiUnpackSingle
+FsRtlPrivateInitializeFileLock
+KeSetBasePriorityThread
+RtlCaptureContext
+IoCheckEaBufferValidity
+IopGetResourceReqRegistryValue
+NtOpenProcessToken
+SeMarkLogonSessionForTerminationNotification
+HvMarkCellDirty
+CmpQueryKeyName
+CmEnumerateValueKey
+DbgkForwardException
+RtlGetCallersAddress
+KeInitializeApc
+RtlInitializeSid
+MiReleaseWsle
+ExDisableResourceBoostLite
+FsRtlFastUnlockAll
+NtSetInformationFile
+SeAssignSecurity
+ObpIncrementHandleCount
+MiCreateDataFileMap
+SeValidSecurityDescriptor
+RtlInsertElementGenericTable
+ExDestroyHandleTable
+NtResetEvent
+IopLoadUnloadDriver
+IopLookupBusStringFromID
+RtlNextUnicodePrefix
+MiInitializeReadInProgressPfn
+FsRtlAllocateOplock
+FsRtlFindFirstOverlappingExclusiveNode
+MiMakeProtectionMask
+RtlSetBits
+RtlpGenerateInheritAcl
+ExChangeHandle
+ExIsResourceAcquiredSharedLite
+MiFlushPteList
+FsRtlFastUnlockSingle
+RtlAppendUnicodeToString
+IopSynchronousApiServiceTail
+RawMountVolume
+SepRmCommandServerThread
+RtlCompareString
+FsRtlCancelOplockIIIrp
+FsRtlCheckNoExclusiveConflict
+RtlAreBitsSet
+MmFreeNonCachedMemory
+ExpCopyProcessInfo
+NtWaitForSingleObject
+NtCreateDirectoryObject
+SeUnlockSubjectContext
+FsRtlReleaseFileForCcFlush
+MiFreeEventCounter
+KiEmulateFloating
+MiInitMachineDependent
+NtQueryInformationToken
+MiCloneProcessAddressSpace
+MiCreateImageFileMap
+NtQuerySystemInformation
+RtlAllocateHeapSlowly
+NtAllocateVirtualMemory
+NtSetInformationProcess
+CmpValidateHiveSecurityDescriptors
+MiInitializeTransitionPfn
+MmAllocateContiguousMemory
+NtYieldExecution
+KiInitializeUserApc
+KeUserModeCallback
+FsRtlFindFirstOverlappingSharedNode
+IoPageRead
+NtPulseEvent
+NtSetEvent
+NtSetInformationObject
+MmAccessFault
+IopReportResourceUsage
+RtlUpcaseUnicodeToCustomCPN
+xHalIoAssignDriveLetters
+KeDumpMachineState
+RtlUpcaseUnicodeToMultiByteN
+FsRtlAddLargeMcbEntry
+FsRtlCopyWrite
+MmCreateSection
+MmMemoryUsage
+CcCopyRead
+MiSetProtectionOnSection
+IopAssignResourcesPhase2
+IopGenNextValidDescriptor
+NtConnectPort
+FsRtlNotifyFullReportChange
+MmWorkingSetManager
+PspCreateProcess
+NtWriteFile
+_output
+_woutput
+IopXxxControlFile
+IopPrepareDriverLoading
+NtFreeVirtualMemory
+NtSetInformationThread
+NtQueryInformationFile
+IopCreateMadeupNode
+MiMapViewOfImageSection
+NtSetInformationToken
+SeCaptureSecurityDescriptor
+NtQueryInformationProcess
+MiMapViewOfDataSection
+RtlAllocateHeap
+NtReadFile
+NtCreatePagingFile
+NtAcceptConnectPort
+IoAssignResources
+LZNT1DecompressChunk
+MmLoadSystemImage
+IopLoadDriver
+NtAccessCheckAndAuditAlarm
+NtDuplicateObject
+CcCopyWrite
+MiProtectVirtualMemory
+MiMapViewOfPhysicalSection
+PspCreateThread
+NtCreateToken
+NtRequestWaitReplyPort
+NtQueryEaFile
+FsRtlIsDbcsInExpression
+KiNormalizeDouble
+MiAllocatePoolPages
+NtQueryVirtualMemory
+CcZeroData
+IoWriteCrashDump
+RtlCreateHeap
+IopDriverLoadingFailed
+KiDispatchException
+RtlGenerate8dot3Name
+NtAccessCheck
+HvInitializeHive
+FsRtlRemoveMcbEntryPrivate
+BuildQueryDirectoryIrp
+SeSetSecurityDescriptorInfo
+NtLockVirtualMemory
+SepCreateToken
+MmCopyToCachedPage
+MiGatherMappedPages
+IoOpenDeviceInstanceKey
+xHalIoReadPartitionTable
+FsRtlPrepareMdlWriteDev
+NtOpenObjectAuditAlarm
+MiFindContiguousMemory
+PspExitThread
+ObpHashSecurityDescriptor
+__ull_rem
+__ull_div
+MmExtendSection
+ObInsertObject
+NtQueryInformationThread
+HvpAddBin
+SepAdtOpenObjectForDeleteAuditAlarm
+SepAdtOpenObjectAuditAlarm
+NtQueryObject
+PpDeviceRegistration
+NtLockFile
+RtlVirtualUnwind
+SepAccessCheck
+FsRtlPrivateFastUnlockAll
+NtAdjustGroupsToken
+LZNT1CompressChunk
+MmShutdownSystem
+KiNormalizeSingle
+VdmQueryDirectoryFile
+NtAdjustPrivilegesToken
+LpcRequestWaitReplyPort
+NtReplyWaitReceivePort
+IopMountVolume
+CmpDoCreateChild
+SeCaptureSidAndAttributesArray
+NtSetSystemInformation
+NtQueryVolumeInformationFile
+IoCreateDevice
+RtlpGenerateInheritedAce
+LdrpSearchResourceSection_U
+MiDispatchFault
+pIoQueryDeviceDescription
+KeWaitForMultipleObjects
+KiEmulateReference
+MiMakeOutswappedPageResident
+MiDeletePte
+MiLoadImageSection
+MiReserveSystemPtes2
+MmCreateProcessAddressSpace
+NtWaitForMultipleObjects
+CmRestoreKey
+NtMapViewOfSection
+NtUnlockVirtualMemory
+RtlpVirtualUnwind32
+CmpCheckKey
+xHalIoWritePartitionTable
+FsRtlGetNextFileLock
+CmpOpenHiveFiles
+ObGetObjectInformation
+CcPerformReadAhead
+NtSetEaFile
+IopQueryDeviceConfiguration
+RtlpCoalesceFreeBlocks
+NtSetVolumeInformationFile
+MmAdjustWorkingSetSize
+RtlpLengthInheritedAce
+HvRefreshHive
+RtlpDeCommitFreeBlock
+CmpInitializeHiveList
+RtlQueryRegistryValues
+SeQuerySecurityDescriptorInfo
+MiGatherPagefilePages
+FsRtlCancelNotify
+NtQueryDirectoryObject
+NtUnlockFile
+PspSetQuotaLimits
+SepDuplicateToken
+IoSetInformation
+ExpGetProcessInformation
+IopGetSetSecurityObject
+ExRefreshTimeZoneInformation
+ExpSystemErrorHandler
+SeOpenObjectForDeleteAuditAlarm
+ExpGetPoolTagInfo
+FsRtlSetFileSize
+NtExtendSection
+CmBootLastKnownGood
+CmpCheckRegistry2
+KeSwapProcessOrStack
+CcScheduleReadAhead
+HvpEnlistFreeCell
+NtNotifyChangeDirectoryFile
+MmSecureVirtualMemory
+MmCleanProcessAddressSpace
+SepAdtPrivilegeObjectAuditAlarm
+FsRtlCopyRead
+MiModifiedPageWriterWorker
+CmpHiveRootSecurityDescriptor
+NtPlugPlayControl
+MiDecommitPages
+ObpParseSymbolicLink
+NtNotifyChangeKey
+IopErrorLogThread
+MiRemoveWorkingSetPages
+PspSetContext
+ObpIncrementUnnamedHandleCount
+MiWriteComplete
+NtLoadKey2
+RtlpCallQueryRegistryRoutine
+MiResolveImageReferences
+__ull_divrem_6416
+RtlFindFirstRunClear
+RtlpGetIntegerAtom
+KeSetTimerEx
+NtQueueApcThread
+SepQueueWorkItem
+RtlpLengthInheritAcl
+PsLookupProcessThreadByCid
+RtlDeleteAtomFromAtomTable
+KiInitializeContextThread
+IoAsynchronousPageWrite
+NtCreateEventPair
+SeOpenObjectAuditAlarm
+CmpAddSubKey
+ObQueryNameString
+RtlMultiByteToUnicodeN
+FsRtlNotifyFullChangeDirectory
+CmpQueryKeyValueData
+FsRtlPrivateLock
+IopIsDeviceInstanceEnabled
+NtReplyWaitReplyPort
+CmpParseKey
+MmFlushVirtualMemory
+RtlAllocateAndInitializeSid
+PspProcessDelete
+SepProbeAndCaptureString_U
+MiSegmentDelete
+IopAssignResourcesPhase3
+ObpProcessDosDeviceSymbolicLink
+PspGetContext
+CmpLoadHiveVolatile
+SepAdtPrivilegedServiceAuditAlarm
+MiResetVirtualMemory
+CmpSetSecurityDescriptorInfo
+MiDeleteVirtualAddresses
+ExpWaitForResource
+MmInSwapProcess
+CmpSetVersionData
+SepAdjustGroups
+IoRaiseInformationalHardError
+NtOpenProcess
+pIoQueryBusDescription
+NtRequestPort
+NtSetSystemEnvironmentValue
+HvpDoAllocateCell
+CmpQueryKeyData
+PsConvertToGuiThread
+NtOpenThread
+CcExtendVacbArray
+FsRtlSplitLargeMcb
+MiCheckForCrashDump
+MiInitializeWorkingSetList
+xHalIoSetPartitionInformation
+HvpBuildMapAndCopy
+MiSnapThunk
+LpcpCopyRequestData
+MiLockCode
+CmQueryMultipleValueKey
+RtlUnwind2
+KdpReceivePacket
+NtUnloadDriver
+CmpWorker
+MiGetWorkingSetInfo
+RtlFindSetBits
+KdpSendWaitContinue
+RtlDecompressFragmentLZNT1
+MiGrowWsleHash
+NtRaiseHardError
+memcmp
+CmpSetValueKeyNew
+NtSetTimer
+MiPurgeImageSection
+LdrEnumResources
+FsRtlAcknowledgeOplockBreak
+MiResolveTransitionFault
+MmOutPageKernelStack
+MiDeleteSystemPagableVm
+MiVerifyImageHeader
+CmpInitHiveFromFile
+CmpRefreshHive
+FsRtlPrivateCancelFileLockIrp
+MiFreeInitializationCode
+IoReportResourceUsage
+IopAcquireFileObjectLock
+MmCheckSystemImage
+RtlFindMessage
+PspUserThreadStartup
+CmpLinkHiveToMaster
+CmpFileRead
+RtlEmptyAtomTable
+MmUnlockPagableImageSection
+KeReleaseWaitForSemaphore
+FsRtlCancelExclusiveIrp
+CcPurgeCacheSection
+MiRemoveMappedPtes
+HvpBuildMap
+CmpSetValueKeyExisting
+MmMapViewInSystemSpace
+CmpRemoveSubKey
+MiCreatePagingFileMap
+MmInitializeProcessAddressSpace
+HvpDoWriteHive
+IopBuildResourceDir
+FsRtlMdlReadDev
+CmpNameFromAttributes
+NtQuerySystemEnvironmentValue
+CmpCopyKeyPartial
+MiDoMappedCopy
+MmMapVideoDisplay
+MiMapLockedPagesInUserSpace
+NtCreateSymbolicLinkObject
+MiRemoveNode
+SepAdtMarshallAuditRecord
+MiQueryAddressState
+NtStartProfile
+ExpWorkerThread
+NtCreateMutant
+NtCreateIoCompletion
+RtlDestroyHeap
+NtOpenKey
+NtQueryMultipleValueKey
+SeObjectReferenceAuditAlarm
+KeBugCheckEx
+MiCopyOnWrite
+MiAddWorkingSetPage
+CmpDoCreate
+SepAdjustPrivileges
+NtSetDefaultLocale
+FsRtlFastUnlockSingleShared
+HvpWriteLog
+MiDoPoolCopy
+ExpGetLookasideInformation
+ExpRaiseHardError
+CmDeleteValueKey
+NtFlushBuffersFile
+SepCreateServerAcl
+SeCaptureSecurityQos
+NtPrivilegedServiceAuditAlarm
+NtReplyPort
+IopQueryXxxInformation
+FsRtlOplockBreakToNone
+KdpTrap
+NtSignalAndWaitForSingleObject
+NtImpersonateClientOfPort
+RtlFreeHeap
+NtOpenThreadToken
+NtQuerySection
+RtlCutoverTimeToSystemTime
+CmpInitializeHive
+NtDuplicateToken
+PiFindDevInstMatch
+CmpAddToLeaf
+RtlCustomCPToUnicodeN
+NtCreatePort
+NtCreateProfile
+CcDeleteSharedCacheMap
+CmpCreateLinkNode
+NtProtectVirtualMemory
+KeDelayExecutionThread
+RtlpFindAndCommitPages
+ExpQueryModuleInformation
+MmCreatePeb
+CmpSaveKeyByFileCopy
+MmSetBankedSection
+HalpGetRegistryPartitionInformation
+MiResolveDemandZeroFault
+SeAuditProcessCreation
+IopGetDriverNameFromKeyNode
+MiChargeCommitment
+NtPrivilegeObjectAuditAlarm
+HvpFindNextDirtyBlock
+PsLockProcess
+MmCreateKernelStack
+RtlFreeHeapSlowly
+NtCreateThread
+NtAllocateUuids
+ExAcquireSharedWaitForExclusive
+RtlReserveChunkLZNT1
+IopOpenRegistryKeyPersist
+MiInsertVad
+FsRtlProcessFileLock
+KdInitSystem
+HvpRecoverData
+CmpSelectLeaf
+IopTranslateResourceList
+NtSetSystemTime
+FsRtlUninitializeOplock
+IoBuildDeviceIoControlRequest
+CompareUnicodeStrings
+NtCreateSection
+IopRaiseHardError
+KiSwitchToThread
+CmSetValueKey
+FsRtlIsHpfsDbcsLegal
+RtlDispatchException
+NtCreateKey
+MiAttemptPageFileReduction
+IopQueryName
+MiReorderTree
+LpcRequestPort
+ExpWaitForResourceDdk
+KiNormalizeQuadword
+ExReleaseResourceForThreadLite
+NtQuerySymbolicLinkObject
+NtRemoveIoCompletion
+qsort
+ExRaiseHardError
+MmOutSwapProcess
+HvLoadHive
+SepRmCommandServerThreadInit
+IopCheckAndLogConflict
+SeAuditHandleDuplication
+RtlUnicodeStringToInteger
+MmMapViewOfSection
+KiGetRegisterValue64
+SepAdtObjectReferenceAuditAlarm
+MiCalculatePageCommitment
+HvpGetHiveHeader
+RtlpExtendHeap
+NtDisplayString
+KiSetRegisterValue64
+SepReferenceLogonSession
+CmpReportNotifyHelper
+HvMarkClean
+CmpFindSubKeyInLeaf
+KiOutSwapKernelStacks
+SeAccessCheck
+KiNormalizeLongword
+ExSnapShotHandleTables
+MiRemoveUnusedSegments
+RtlTimeFieldsToTime
+ObCheckObjectAccess
+PiDetectResourceConflict
+MiCheckControlAreaStatus
+CmpMarkIndexDirty
+RawQueryFsSizeInfo
+FsRtlRegisterUncProvider
+FsRtlPrivateCheckWaitingLocks
+RtlDecompressBufferLZNT1
+MiDecrementCloneBlockReference
+CmpDoOpen
+RtlUnicodeToCustomCPN
+FsRtlAcquireFileForModWrite
+MiResolvePageFileFault
+KiGeneralException
+CmpGetSymbolicLink
+MiSetPagingOfDriver
+CmpCheckValueList
+MiCreatePebOrTeb
+LsaLogonUser
+FsRtlFastUnlockSingleExclusive
+FsRtlUninitializeFileLock
+MiRemoveMappedView
+RtlDecompressChunks
+RtlInitializeContext
+SeCaptureAcl
+IoConnectInterrupt
+MiEliminateWorkingSetEntry
+NtSetContextThread
+IoVerifyVolume
+CmpSplitLeaf
+CmpFindSubKeyInRoot
+KeInitializeThread
+MiSwapWslEntries
+NtGetContextThread
+SepAdtCloseObjectAuditAlarm
+SepAdtDeleteObjectAuditAlarm
+SePrivilegePolicyCheck
+IopAppendStringToValueKey
+KeStartProfile
+CmpCreateKeyControlBlock
+SepRmCallLsa
+RtlUnicodeToMultiByteN
+MiInsertInSystemSpace
+FsRtlPrivateInsertSharedLock
+MiAttemptPageFileExtension
+ObpCheckObjectReference
+DbgkCreateThread
+CompareNamesCaseSensitive
+MiGetPageProtection
+FsRtlInitializeLargeMcb
+RtlQueryAtomInAtomTable
+NtLoadDriver
+HvpCoalesceDiscardedBins
+ExQuerySystemLockInformation
+KeConnectInterrupt
+NtQueryValueKey
+IopServiceInstanceToDeviceInstance
+KiSystemServiceDispatch
+MiInsertWsle
+RtlRemoveUnicodePrefix
+NtCancelIoFile
+SeCaptureSid
+IoAllocateErrorLogEntry
+RtlLookupAtomInAtomTable
+RtlpAddKnownAce
+MiSetPageModified
+FsRtlAddLargeEntry
+MmCanFileBeTruncatedInternal
+ObpCheckTraverseAccess
+KdpReadPhysicalMemory
+CmpGetHiveName
+NtPrivilegeCheck
+SeCreateClientSecurity
+RtlZeroHeap
+IopIsDuplicatedDevices
+ExpTimeRefreshWork
+KiEmulateBranch
+MiCheckVirtualAddress
+KiScanReadyQueues
+CmpMarkKeyDirty
+IopApplyFunctionToSubKeys
+FsRtlSplitLocks
+SepCheckAcl
+RawDispatch
+KeContextToKframes
+HvFreeCell
+NtTerminateProcess
+FsRtlNotifyCompleteIrp
+IoShutdownSystem
+MiInsertPageFileInList
+HvCheckBin
+RtlInsertUnicodePrefix
+KeSetSystemTime
+MmDeleteKernelStack
+KdpSendPacket
+SepExamineSacl
+RtlCharToInteger
+MiModifiedPageWriter
+MiEmptyWorkingSet
+CcZeroEndOfLastPage
+MmInPageKernelStack
+RtlAddAtomToAtomTable
+LZNT1FindMatchStandard
+MiCompleteProtoPteFault
+xHalGetPartialGeometry
+KiInvalidOperationDouble
+PspGetSetContextSpecialApc
+SepProbeAndCaptureQosData
+CmReplaceKey
+SepDeReferenceLogonSession
+RawCreate
+RtlExpandEnvironmentStrings_U
+IopSlotResourceOwner
+FsRtlNotifyUpdateBuffer
+MiUnmapLockedPagesInUserSpace
+ExQueryPoolUsage
+MmLockPagableSectionByHandle
+RtlpCreateUnCommittedRange
+ExpAllocateHandleTable
+MiAccessCheck
+SepAuditFailed
+HvWriteHive
+CmpNotifyChangeKey
+SeAuditProcessExit
+RtlpInsertFreeBlock
+NtFlushVirtualMemory
+MiEnsureAvailablePageOrWait
+KiTimerListExpire
+MmFreeDriverInitialization
+FsRtlRequestOplockII
+PsChargePoolQuota
+SepValidOwnerSubjectContext
+MmUnsecureVirtualMemory
+LdrProcessRelocationBlock
+SepCreateImpersonationTokenDacl
+CmpAllocatePostBlock
+CmpFileWrite
+MmSetMemoryPriorityProcess
+MiExtendPagingFiles
+ObpLookupDirectoryEntry
+NtSetTimerResolution
+ExDupHandleTable
+IoMakeAssociatedIrp
+MmMapIoSpace
+MmGrowKernelStack
+IsValidOemCharacter
+RtlConvertSidToUnicodeString
+MiEmptyAllWorkingSets
+ObCheckCreateObjectAccess
+NtImpersonateThread
+IopOpenLinkOrRenameTarget
+CmSaveKey
+MmUnloadSystemImage
+HvMarkDirty
+CmpAddToHiveFileList
+SeCaptureLuidAndAttributesArray
+PiGenerateLegacyDeviceInstance
+LpcpExtendPortZone
+IoBuildAsynchronousFsdRequest
+KiContinueClientWait
+MiCheckForUserStackOverflow
+CmpInterlockedFunction
+KeGetBugMessageText
+KeSetAffinityThread
+MiMappedPageWriter
+HvpDelistFreeCell
+RtlSetTimeZoneInformation
+NtFlushInstructionCache
+MmGetFileNameForSection
+IopRemoveStringFromValueKey
+KiAttachProcess
+MiGetSubsectionAndProtoFromPte
+atol
+HvIsCellAllocated
+KeContextFromKframes
+MiDeleteValidAddress
+HvCheckHive
+ObpLogSecurityDescriptor
+MiFindEmptyAddressRangeDownTree
+RtlGetElementGenericTable
+__C_specific_handler
+__ll_div
+RtlpInitializeHeapSegment
+RtlpQuerySecurityDescriptor
+KeDisconnectInterrupt
+MiTrimWorkingSet
+MiFlushDirtyBitsToPfn
+__ll_rem
+NtSetValueKey
+ObReferenceObjectByName
+RtlUpperChar
+LpcpDestroyPortQueue
+IopPickupCollisionInTList
+NtCancelTimer
+RtlpGetRegistryHandle
+MmUnmapViewOfSection
+IopAssignResourcesPhase4
+PspQueryWorkingSetWatch
+MmAllocateNonCachedMemory
+MiCheckPurgeAndUpMapCount
+NtReplaceKey
+RtlAddAce
+RtlFindUnicodePrefix
+FsRtlGetTunnelParameterValue
+KdpWriteIoSpace
+HvFreeHivePartial
+IopSynchronousServiceTail
+MmZeroPageThread
+RtlFindLongestRunSet
+KdpWritePhysicalMemory
+CmpCompareInIndex
+SepDeleteLogonSessionTrack
+PfxInsertPrefix
+NtReadVirtualMemory
+SepCreateLogonSessionTrack
+IoPageFileCreated
+ExpInsertPoolTracker
+KiInvalidUserAddress
+KiInvalidOperationSingle
+CmpCopyValue
+IopGetFileName
+IopCheckVpbMounted
+KiRaiseException
+CcUnpinRepinnedBcb
+KiScanBugCheckCallbackList
+NtShutdownSystem
+IopSortDescriptors
+IopOpenServiceEnumKeys
+RtlResetRtlTranslations
+PfxFindPrefix
+RtlUpcaseUnicodeStringToAnsiString
+ExAcquireResourceExclusive
+HalpCalculateChsValues
+NtCreateMailslotFile
+SepAdtInitializeBounds
+HvpGetLogHeader
+RtlLengthSecurityDescriptor
+ObInitProcess
+MiProcessValidPteList
+KeTerminateThread
+FsRtlInitializeTunnel
+IoDeleteDevice
+RtlAnsiStringToUnicodeString
+RtlpQueryRegistryDirect
+MiMapPageInHyperSpace
+RtlPrefixUnicodeString
+RtlpRestoreContext
+SepAdtInitializePrivilegeAuditing
+CmpFindMatchingDescriptorCell
+RtlIntegerToChar
+FsRtlGetFileSize
+NtQueryMutant
+xHalExamineMBR
+MiDeleteAddressesInWorkingSet
+MiFindEmptyAddressRangeInTree
+ObpIncrementHandleDataBase
+CmLoadKey
+NtTerminateThread
+GetNextWchar
+HalpGetRegistryCdromInformation
+ExpAllocateHandleTableEntries
+MiDereferenceSegmentThread
+RtlMakeSelfRelativeSD
+MmLockPagableDataSection
+FsRtlOpBatchBreakClosePending
+NtQueryTimer
+RtlValidSecurityDescriptor
+IopDisassociateThreadIrp
+RtlQueryTimeZoneInformation
+LdrpAccessResourceData
+MmGetPageFileInformation
+NtQueryInformationAtom
+MiChargeCommitmentCantExpand
+MmDeleteProcessAddressSpace
+MiHandleForkTransitionPte
+RtlpHashStringToAtom
+NtDeleteObjectAuditAlarm
+NtCloseObjectAuditAlarm
+RtlCompressBufferLZNT1
+NtCreateEvent
+MmResetDriverPaging
+PsReturnPoolQuota
+RtlpLogExceptionHandler
+KeBalanceSetManager
+HvFreeHive
+HvReallocateCell
+SepPrivilegeCheck
+ObQueryTypeInfo
+HvpEnlistFreeCells
+SepInheritAcl
+ExEnumHandleTable
+RtlFindFirstRunSet
+KiVirtualMemoryDispatch
+SeAppendPrivileges
+ObOpenObjectByPointer
+ObpInsertHandleCount
+MiIsEntireRangeCommitted
+NtReleaseSemaphore
+KeStopProfile
+MiUpdateModifiedWriterMdls
+RtlFindLongestRunClear
+NtSetSecurityObject
+CmpAssignSecurityDescriptor
+CmpSecurityMethod
+NtSuspendThread
+NtCreateTimer
+MiCheckSecuredVad
+KdpAddBreakpoint
+KdpReceivePacketLeader
+CmNotifyRunDown
+RtlUnicodeStringToAnsiString
+NtQuerySemaphore
+KiSetPriorityThread
+MiMapImageHeaderInHyperSpace
+ObGetObjectSecurity
+SepAdtInitializeCrashOnFail
+CmpFreeKeyByCell
+CmpRemoveKeyControlBlockWithLock
+IopAssignResourcesPhase1
+HalpCreateDosLink
+FsRtlPrivateInsertLock
+IoRaiseHardError
+ObpHandleDosDeviceName
+NtSystemDebugControl
+CmpPostNotify
+MiUnlinkFreeOrZeroedPage
+KeSetPriorityProcess
+KiUnpackDouble
+IopGenNextValidResourceList
+KeReleaseMutant
+MiAddMappedPtes
+NtQuerySecurityObject
+LsaRegisterLogonProcess
+FsRtlNotifyCleanup
+KdpWriteBreakPointEx
+KdpReportLoadSymbolsStateChange
+MiCheckDosCalls
+LpcpDeletePort
+NtCreateNamedPipeFile
+FsRtlDeleteKeyFromTunnelCache
+NtCreateSemaphore
+NtQueryEvent
+PspQueryQuotaLimits
+CcGetLsnForFileObject
+MiContractPagingFiles
+__ull_divrem_5353
+CmpCopyTree2
+SeFastTraverseCheck
+PspExitProcess
+NtWriteVirtualMemory
+NtQueryIoCompletion
+NtQueryFullAttributesFile
+IoRegisterFileSystem
+NtReleaseMutant
+PspQueryPooledQuotaLimits
+CcPurgeAndClearCacheSection
+IopHardErrorThread
+KdpReadIoSpace
+MiRemovePageFromWorkingSet
+SepAdtGenerateDiscardAudit
+ExLockUserBuffer
+KiGetRegisterValue
+RtlCompressChunks
+KdpPromptString
+CmpFindSubKeyByName
+NtDeleteValueKey
+RawUserFsCtrl
+RtlAddAuditAccessAce
+MiEnablePagingOfDriver
+RtlFormatCurrentUserKeyPath
+CmpInsertSecurityCellList
+NtUnloadKey
+SepApplyAclToObject
+RtlpInsertUnCommittedPages
+IopOpenCurrentHwProfileDeviceInstanceKey
+FsRtlOpFilterWorkerRoutine
+MiFreeWsle
+CcIsThereDirtyData
+ExTimerRundown
+MiRemoveVad
+CmpFindNameInList
+SeAssignWorldSecurityDescriptor
+RtlDescribeChunkLZNT1
+CcPostDeferredWrites
+ExpRemovePoolTracker
+KiSetRegisterValue
+MiChargePageFileQuota
+MmCopyVirtualMemory
+HvpIsFreeNeighbor
+CmpReportNotify
+RtlDowncaseUnicodeString
+RtlOemStringToCountedUnicodeString
+IoQueryDeviceDescription
+IoQueryDeviceEnumInfo
+KdSetOwedBreakpoints
+SepVariableInitialization
+MmInitSystem
+IopInitializeDumpDrivers
+Phase1Initialization
+IopCreateArcNames
+ExpInitializeExecutive
+RtlCreateUserProcess
+ObInitSystem
+ObCreateObjectType
+PspInitPhase0
+KiSystemBegin
+IoInitSystem
+CmpAddDriverToList
+SeMakeSystemToken
+KiInitializeKernel
+CmInitSystem1
+CmpInitializeRegistryNode
+IopInitializeDeviceInstanceKey
+CcInitializeCacheManager
+CmGetSystemControlValues
+CmpCreateControlSet
+MiSectionInitialization
+IopInitializeBuiltinDriver
+RtlQueryEnvironmentVariable_U
+MiBuildPagedPool
+CmGetSystemDriverList
+CmpFindControlSet
+MiInitializeSystemCache
+MiInitializeSystemPtes
+IopCreateObjectTypes
+ObpGetDosDevicesProtection
+IopReassignSystemRoot
+ExpWorkerInitialization
+CmpCloneControlSet
+CreateSystemRootLink
+IopStoreSystemPartitionInformation
+MiFindInitializationCode
+IopInitializePlugPlayServices
+KiInitSystem
+InitializePool
+IopInitializeBootDrivers
+CmpSetupConfigurationTree
+RtlpCreateStack
+PsLocateSystemDll
+IopInitializeResourceMap
+IopApplySystemPartitionProt
+CmpFindDrivers
+ExInitializeTimeRefresh
+SeRmInitPhase1
+MmFreeLoaderBlock
+SepInitSystemDacls
+FsRtlInitSystem
+CmpInitializeSystemHive
+FsRtlGetCompatibilityModeValue
+CmpSortDriverList
+RawInitialize
+CmpInitializeRegistryNames
+PiInitializeSystemEnumSubKeys
+IopMarkBootPartition
+ObpCreateDosDevicesDirectory
+ExBurnMemory
+KeFindConfigurationNextEntry
+CmpCreateRegistryRoot
+ExpInitSystemPhase0
+CmpFindTagIndex
+IopLookupGroupName
+MiInitializeNonPagedPool
+CmpInitializeHardwareConfiguration
+MmInitializeMemoryLimits
+CmpDoSort
+LpcInitSystem
+MiMergeMemoryLimit
+CmpCreateObjectTypes
+LpcpInitializePortZone
+CmpCreateRootNode
+IopInitializeSystemDrivers
+RtlCreateUserThread
+ExpWin32Initialization
+SepInitializationPhase1
+CmpIsLastKnownGoodBoot
+ExpInitSystemPhase1
+SepInitializePrivilegeSets
+FsRtlInitializeWorkerThread
+IoReportHalResourceUsage
+LookupEntryPoint
+CmpIsLoadType
+IopInitServiceEnumList
+RtlDeNormalizeProcessParams
+SepTokenInitialization
+ExpProfileInitialization
+IopCheckDependencies
+IopProtectSystemPartition
+KiComputeReciprocal
+CmpOrderGroup
+CmpWalkPath
+IopCreateRootDirectories
+MiInitializeSystemSpaceMap
+ExpMutantInitialization
+SepRmDbInitialization
+ExpTimerInitialization
+ExpInitializePoolDescriptor
+PiInitPhase1
+ExpEventInitialization
+ExpEventPairInitialization
+ExpSemaphoreInitialization
+CmpComputeGlobalQuotaAllowed
+CmpResolveDriverDependencies
+RtlpOpenImageFile
+PspLookupKernelUserEntryPoints
+SepInitializationPhase0
+IopInitializeDeviceKey
+IopCreateEntry
+MiAdjustWorkingSetManagerParameters
+PspInitializeSystemDll
+IopRevertModuleList
+IopInitializeAttributesAndCreateObject
+PiInitializeSystemEnum
+CcInitializeVacbs
+IopFreeGroupTree
+CmpFreeDriverList
+ExInitializeHandleTablePackage
+PsInitSystem
+ExInitSystem
+ExComputeTickCountMultiplier
+PpInitSystem
+SeInitSystem
+RtlpFreeStack
+ExpResourceInitialization
+ExpUuidInitialization
+ExLuidInitialization
+SepInitializeWorkList
+ObpFreeDosDevicesProtection
+PspInitPhase1
+PspLookupSystemDllEntryPoint
+ExInitSystemPhase2
+KeFindConfigurationEntry
+PiInitPhase0
+SepRmInitPhase0
+KeInitSystem
+MiEnablePagingTheExecutive
diff --git a/private/ntos/init/up/ntoskrnl.alp b/private/ntos/init/up/ntoskrnl.alp
new file mode 100644
index 000000000..5ac6dd00f
--- /dev/null
+++ b/private/ntos/init/up/ntoskrnl.alp
@@ -0,0 +1,423 @@
+4589  KiIdleLoop
+1887  KiInterruptException
+1556  OtsMove
+ 914  RtlCopyBytes
+ 522  KiUnlockDispatcherDatabase
+ 501  ExReleaseResourceLite
+ 435  KeSynchronizeExecution
+ 405  ExAcquireResourceExclusiveLite
+ 325  ExAllocatePoolWithTag
+ 273  IopParseDevice
+ 271  RtlFindClearBits
+ 257  ExAcquireFastMutex
+ 257  KiSwapThreadExit
+ 237  ExpInterlockedPopEntrySListFault
+ 235  OtsZero
+ 210  IofCompleteRequest
+ 197  RtlCompareMemory
+ 195  ExReleaseFastMutex
+ 190  ExpInterlockedPushEntrySList
+ 190  KiRetireDpcList
+ 180  KiDispatchInterrupt
+ 175  RtlUpcaseUnicodeToOemN
+ 173  CcMapData
+ 170  ExFreePoolWithTag
+ 153  FsRtlDissectName
+ 146  FsRtlIsNameInExpressionPrivate
+ 142  CcGetVirtualAddress
+ 128  ExAcquireResourceSharedLite
+ 118  KeFlushIoBuffers
+ 118  KeReleaseSpinLock
+ 117  KeAcquireSpinLockRaiseToDpc
+ 115  CcPinFileData
+ 105  ObReferenceObjectByHandle
+ 105  OtsFieldInsert
+  91  PsImpersonateClient
+  88  ObfDereferenceObject
+  85  IoGetRelatedDeviceObject
+  84  CcFindBcb
+  80  RtlSplay
+  77  IoAllocateIrp
+  77  ObOpenObjectByName
+  76  KeRemoveQueue
+  75  ExInterlockedAddUlong
+  74  ExpFindCurrentThread
+  73  IofCallDriver
+  73  RtlpGetStackLimits
+  71  ObpLookupObjectName
+  69  ExpInterlockedPopEntrySList
+  67  MmProbeAndLockPages
+  66  CcFreeVirtualAddress
+  66  RtlCompareUnicodeString
+  61  KeInsertQueue
+  60  IoSetTopLevelIrp
+  58  IoFreeIrp
+  57  IopCheckBackupRestorePrivilege
+  57  ObpCaptureObjectCreateInformation
+  54  PsReferencePrimaryToken
+  53  CcFlushCache
+  53  CcUnpinFileData
+  53  KeAcquireSpinLockAtDpcLevel
+  52  KeLeaveCriticalRegion
+  51  CcSetDirtyPinnedData
+  51  FsRtlLookupLargeMcbEntry
+  50  CcCanIWrite
+  50  MmCheckCachedPageState
+  48  CcSetDirtyInMask
+  47  ExReleaseFastMutexUnsafe
+  46  IopAllocateIrp
+  45  CcFastCopyRead
+  44  ObpAllocateObject
+  43  IoAllocateMdl
+  42  ExAcquireFastMutexUnsafe
+  42  ExIsResourceAcquiredExclusiveLite
+  42  FsRtlFindLargeIndex
+  42  IoGetTopLevelIrp
+  41  CcAcquireByteRangeForWrite
+  41  ExpInterlockedCompareExchange64
+  41  KeQuerySystemTime
+  41  KiReleaseSpinLock
+  41  MmUnlockPages
+  41  RtlTimeToTimeFields
+  40  MiFlushSectionInternal
+  39  FsRtlIsFatDbcsLegal
+  38  memcmp
+  38  PsReferenceImpersonationToken
+  37  CcFastCopyWrite
+  37  KiRestoreVolatileIntegerState
+  37  RtlEqualUnicodeString
+  36  CcInitializeCacheMap
+  36  CcUninitializeCacheMap
+  36  CcWriteBehind
+  36  IopCloseFile
+  36  ObpFreeObjectNameBuffer
+  36  SeCreateAccessState
+  35  IoCreateFile
+  35  ObpIncrementHandleCount
+  35  OtsStringCompareEql
+  34  CcMapAndRead
+  34  FsRtlCheckOplock
+  34  IopDeleteFile
+  33  IopParseFile
+  33  RtlIsNameLegalDOS8Dot3
+  32  CcMapAndCopy
+  32  IoBuildPartialMdl
+  32  IoFreeMdl
+  32  MmUnmapViewInSystemCache
+  31  CcPrepareMdlWrite
+  31  RtlMapGenericMask
+  31  RtlNtStatusToDosErrorNoTeb
+  30  FsRtlOplockFsctrl
+  30  IopCompleteRequest
+  30  ObpCaptureObjectName
+  30  RtlCopyUnicodeString
+  29  CcUnpinData
+  29  ExpAcquireResourceSharedLite
+  28  MmCreateSection
+  27  ExAcquireSharedStarveExclusive
+  27  MmMapLockedPages
+  27  ObpAllocateObjectNameBuffer
+  27  ObpCreateHandle
+  27  RtlUpcaseUnicodeChar
+  26  ExAcquireHandleTableShared
+  26  MiDecrementReferenceCount
+  26  MmIsAddressValid
+  25  MmFlushSection
+  24  CcPinMappedData
+  24  FsRtlRequestExclusiveOplock
+  24  ObCreateObject
+  24  RtlUnicodeToOemN
+  23  CcMdlWriteComplete2
+  23  ElapsedDaysToYears
+  23  ExTryToAcquireFastMutex
+  23  IopCheckDeviceAndDriver
+  23  KeWaitForSingleObject
+  23  MiReserveSystemPtes
+  23  RtlUpcaseUnicodeStringToOemString
+  22  KeEnterCriticalRegion
+  22  PsAssignImpersonationToken
+  22  SeReleaseSubjectContext
+  21  CcLazyWriteScan
+  21  ExFreePool
+  21  FsRtlDoesNameContainWildCards
+  21  IoCheckFunctionAccess
+  21  IoIsOperationSynchronous
+  21  KiMb
+  21  NtClose
+  21  PsChargeSharedPoolQuota
+  21  SeAuditingFileEvents
+  20  KiDeliverApc
+  20  MiLocateAndReserveWsle
+  20  SeAssignSecurity
+  20  SeCaptureSubjectContext
+  20  SeDeleteAccessState
+  19  CcMdlRead
+  19  ExCreateHandle
+  19  ExDestroyHandle
+  19  IoFastQueryNetworkAttributes
+  19  MiDecrementShareCount2
+  19  MmSetAddressRangeModified
+  19  ObpDecrementHandleCount
+  19  RtlOemToUnicodeN
+  17  ExReleaseHandleTableShared
+  17  FsRtlAddToTunnelCache
+  17  KiInterruptDistribution
+  16  CcSetFileSizes
+  16  FsRtlGetNextLargeMcbEntry
+  16  KeSetEvent
+  16  MiInsertPageInList
+  16  MiRestoreTransitionPte
+  16  SeSetAccessStateGenericMapping
+  15  CcGetVacbMiss
+  15  ExAcquireHandleTableExclusive
+  15  FsRtlFastCheckLockForRead
+  15  FsRtlFindInTunnelCache
+  15  IoRemoveShareAccess
+  15  MiCheckControlArea
+  15  RtlUpcaseUnicodeString
+  14  IoSetShareAccess
+  14  MiUpdateWsle
+  14  NtSetInformationFile
+  14  ObpChargeQuotaForObject
+  14  OtsStringCompareEqlSameLen
+  13  CcPinRead
+  13  CcWorkerThread
+  13  ExpAcquireSharedStarveExclusive
+  13  ExReleaseHandleTableExclusive
+  13  FsRtlOplockCleanup
+  13  FsRtlOplockIsFastIoPossible
+  13  MmAccessFault
+  13  ObpIncrementHandleDataBase
+  13  OtsFill
+  13  RtlOemStringToUnicodeString
+  12  FsRtlAddLargeMcbEntry
+  12  FsRtlCurrentBatchOplock
+  12  MiCreateDataFileMap
+  12  ObpFreeObject
+  12  ObpRemoveObjectRoutine
+  12  ObpValidateAccessMask
+  12  RtlSetBits
+  12  RtlUpcaseUnicodeStringToCountedOemString
+  12  SeTokenImpersonationLevel
+  11  ExpWorkerThread
+  11  MiLocateWsle
+  11  MiRemoveZeroPage
+  11  MmCopyToCachedPage
+  11  RtlUnicodeStringToOemString
+  10  CcAllocateInitializeBcb
+  10  ExInitializeResourceLite
+  10  ExInterlockedAddLargeStatistic
+  10  ExpInterlockedExchangeAddLargeInteger
+  10  FsRtlIsNameInExpression
+  10  FsRtlPruneTunnelCache
+  10  IoAcquireCancelSpinLock
+  10  MmMapViewInSystemCache
+  10  RtlpDidUnicodeToOemWork
+   9  CcDeleteSharedCacheMap
+   9  ExMapHandleToPointer
+   9  FsRtlPrivateFastUnlockAll
+   9  IoCheckDesiredAccess
+   9  IoSynchronousPageWrite
+   9  KeInsertByKeyDeviceQueue
+   9  KiSaveVolatileIntegerState
+   9  MmUnmapLockedPages
+   9  ObpDeleteNameCheck
+   9  RtlpGenerateInheritedAce
+   9  SepInheritAcl
+   8  ExSystemTimeToLocalTime
+   8  FsRtlMdlWriteCompleteDev
+   8  IoCheckShareAccess
+   8  KeInsertDeviceQueue
+   8  MiDispatchFault
+   8  MiReleaseSystemPtes
+   8  MiRemovePageFromList
+   8  MmPurgeSection
+   8  RtlClearBits
+   7  CcUnmapVacbArray
+   7  ExDeleteResourceLite
+   7  FsRtlFastCheckLockForWrite
+   7  IoAllocateAdapterChannel
+   7  IoStartPacket
+   7  KiMemoryManagementDispatch
+   7  MiCheckProtoPtePageState
+   7  MiMakeSystemAddressValidPfn
+   7  ObpIncrementUnnamedHandleCount
+   7  RtlVirtualUnwind
+   6  CcCopyWrite
+   6  CcDeallocateBcb
+   6  CcFreeActiveVacb
+   6  ExAcquireSharedWaitForExclusive
+   6  ExpWaitForResource
+   6  FsRtlAreNamesEqual
+   6  FsRtlFastUnlockSingleExclusive
+   6  FsRtlOplockBreakToII
+   6  FsRtlPrivateLock
+   6  FsRtlRemoveAndCompleteWaitIrp
+   6  FsRtlRemoveMcbEntryPrivate
+   6  FsRtlWaitOnIrp
+   6  KeRemoveByKeyDeviceQueue
+   6  KiMemoryManagementException
+   6  MiFreePoolPages
+   6  MiInitializePfn
+   6  MiRemoveWsle
+   6  ObpCreateUnnamedHandle
+   6  RtlDelete
+   6  RtlExtendedMagicDivide
+   6  RtlFillMemoryUlong
+   6  RtlpLengthInheritedAce
+   6  RtlSecondsSince1980ToTime
+   5  CcMdlReadComplete2
+   5  ExAllocatePoolWithQuotaTag
+   5  ExInterlockedInsertTailList
+   5  ExReinitializeResourceLite
+   5  FsRtlAllocateOplock
+   5  IoCreateStreamFileObject
+   5  IoGetCurrentProcess
+   5  IoStartNextPacket
+   5  KeInitializeApc
+   5  KeInsertHeadQueue
+   5  MiAllocatePoolPages
+   5  MiCheckForControlAreaDeletion
+   5  MiGetInPageSupportBlock
+   5  MiRemovePageByColor
+   5  MiResolveProtoPteFault
+   5  MiUnlinkPageFromList
+   5  MmCanFileBeTruncatedInternal
+   5  RtlLengthSecurityDescriptor
+   5  RtlNumberGenericTableElements
+   5  RtlpGenerateInheritAcl
+   5  SepCheckAcl
+   4  CcCreateVacbArray
+   4  CcGetDirtyPages
+   4  CcGetVirtualAddressIfMapped
+   4  CcPerformReadAhead
+   4  CcReleaseByteRangeFromWrite
+   4  CcUnmapAndPurge
+   4  FsRtlCheckLockForReadAccess
+   4  FsRtlFastUnlockSingle
+   4  FsRtlInitializeLargeMcb
+   4  FsRtlLookupLastLargeMcbEntry
+   4  IopDereferenceVpbAndFree
+   4  KeInitializeSpinLock
+   4  KeInsertQueueApc
+   4  KiActivateWaiterQueue
+   4  KiApcInterrupt
+   4  MiGetEventCounter
+   4  MiRemoveAnyPage
+   4  MiResolveMappedFileFault
+   4  OtsDivide
+   4  PsReturnSharedPoolQuota
+   4  RtlAreBitsClear
+   4  RtlFillBytes
+   4  RtlInsertElementGenericTable
+   4  RtlLookupFunctionEntry
+   3  CcCopyRead
+   3  CcIsThereDirtyData
+   3  CcPreparePinWrite
+   3  CcSetReadAheadGranularity
+   3  CcSetValidData
+   3  ExIsResourceAcquiredSharedLite
+   3  ExpAcquireResourceExclusiveLite
+   3  ExReleaseResourceForThreadLite
+   3  FsRtlFindFirstOverlappingExclusiveNode
+   3  FsRtlTruncateLargeMcb
+   3  FsRtlUninitializeOplock
+   3  KeInitializeEvent
+   3  KeRemoveDeviceQueue
+   3  KeSetEventBoostPriority
+   3  KiAlternateExit
+   3  KiGenerateTrapFrame
+   3  KiSaveVolatileFloatState
+   3  MiFindActualFaultingPte
+   3  MiFreeInPageSupportBlock
+   3  MiModifiedPageWriterWorker
+   3  MiResolveTransitionFault
+   3  MiSectionDelete
+   3  MiSetDirtyBit
+   3  MmDeterminePoolType
+   3  ObDeleteCapturedInsertInfo
+   3  RtlAreBitsSet
+   3  RtlConvertUlongToLargeInteger
+   3  RtlCreateAcl
+   3  RtlEqualPrefixSid
+   3  RtlFindClearBitsAndSet
+   3  RtlTimeToSecondsSince1970
+   3  SepGetDefaultsSubjectContext
+   3  SeUnlockSubjectContext
+   3  SeValidSecurityDescriptor
+   2  ExDisableResourceBoostLite
+   2  FsRtlAcquireFileForCcFlush
+   2  FsRtlAddLargeEntry
+   2  FsRtlPrivateCheckForExclusiveLockAccess
+   2  FsRtlPrivateInitializeFileLock
+   2  FsRtlPrivateLimitFreeLockList
+   2  FsRtlPrivateResetLowestLockOffset
+   2  FsRtlUninitializeLargeMcb
+   2  IoPageRead
+   2  IoQueueThreadIrp
+   2  KiExceptionExit
+   2  MiCompleteProtoPteFault
+   2  MmCanFileBeTruncated
+   2  NtDeleteFile
+   2  ObInsertObject
+   2  RtlInitializeBitMap
+   2  RtlpLengthInheritAcl
+   2  RtlpRestoreContext
+   2  RtlSecondsSince1970ToTime
+   2  RtlUnicodeStringToCountedOemString
+   2  SepAccessCheck
+   2  SepSidInToken
+   1  CcPostWorkQueue
+   1  CcScheduleReadAhead
+   1  CcUnpinDataForThread
+   1  ExQueueWorkItem
+   1  FsRtlAcknowledgeOplockBreak
+   1  FsRtlCheckLockForWriteAccess
+   1  FsRtlInitializeOplock
+   1  FsRtlMdlReadCompleteDev
+   1  FsRtlNotifyCompletion
+   1  FsRtlNumberOfRunsInLargeMcb
+   1  FsRtlOplockBreakNotify
+   1  FsRtlPrivateInsertLock
+   1  FsRtlUninitializeFileLock
+   1  IoGetFileObjectGenericMapping
+   1  IoGetInitialStack
+   1  IoGetRequestorProcess
+   1  IopErrorLogRequeueEntry
+   1  IopSynchronousServiceTail
+   1  IopTimerDispatch
+   1  IoUpdateShareAccess
+   1  KeClearEvent
+   1  KeGetCurrentIrql
+   1  KiFlushMultipleTb
+   1  KiRestoreVolatileFloatState
+   1  KiSystemServiceExit
+   1  KiTimerExpiration
+   1  MiAccessCheck
+   1  MiAddValidPageToWorkingSet
+   1  MiCheckControlAreaStatus
+   1  MiDeleteSystemPagableVm
+   1  MiFlushInPageSupportBlock
+   1  MiFreeEventCounter
+   1  MiInitializeReadInProgressPfn
+   1  MiMakeProtectionMask
+   1  MiMapPageInHyperSpace
+   1  MiReleasePageFileSpace
+   1  MiReleaseWsle
+   1  MiWaitForInPageComplete
+   1  MmBuildMdlForNonPagedPool
+   1  MmFlushImageSection
+   1  NtQueryVolumeInformationFile
+   1  OtsDivide32Unsigned
+   1  RtlCreateSecurityDescriptor
+   1  RtlFirstFreeAce
+   1  RtlImageDirectoryEntryToData
+   1  RtlInitializeSid
+   1  RtlLookupElementGenericTable
+   1  RtlNumberOfClearBits
+   1  RtlPcToFileHeader
+   1  RtlRealSuccessor
+   1  RtlSubtreePredecessor
+   1  SeLockSubjectContext
+   1  wcsicmp
+
\ No newline at end of file
diff --git a/private/ntos/init/up/ntoskrnl.mip b/private/ntos/init/up/ntoskrnl.mip
new file mode 100644
index 000000000..fe0340ece
--- /dev/null
+++ b/private/ntos/init/up/ntoskrnl.mip
@@ -0,0 +1,511 @@
+3259  memmove
+ 795  RtlFillMemory
+ 621  ExReleaseResourceLite
+ 566  ExAcquireResourceExclusiveLite
+ 519  KiSwitchStacks
+ 482  ExAllocatePoolWithTag
+ 421  KeSwapIrql
+ 393  IopParseDevice
+ 345  KeRemoveQueue
+ 324  MiReserveSystemPtes
+ 300  KeInsertQueueDpc
+ 284  ExFreePoolWithTag
+ 240  CcMapData
+ 235  RtlCompareMemory
+ 233  ExAcquireFastMutex
+ 227  KiDispatchInterrupt
+ 196  RtlUpcaseUnicodeToOemN
+ 194  CcGetVirtualAddress
+ 179  IofCompleteRequest
+ 170  RtlFindClearBits
+ 164  KiRetireDpcList
+ 160  KiInsertQueue
+ 149  CcFindBcb
+ 147  KiUnlockDispatcherDatabase
+ 145  KeFlushIoBuffers
+ 143  KeAcquireSpinLockRaiseToSynch
+ 140  ObReferenceObjectByHandle
+ 137  RtlEqualMemory
+ 136  ExpInterlockedPushEntrySList
+ 133  ExpInterlockedPopEntrySListFault
+ 132  FsRtlIsNameInExpressionPrivate
+ 128  KeReleaseSpinLock
+ 127  RtlSplay
+ 123  ExReleaseFastMutex
+ 122  KiRaiseIrqlToXxxLevel
+ 121  ExAcquireResourceSharedLite
+ 119  CcPinFileData
+ 116  SwapFromIdle
+ 114  KeSynchronizeExecution
+ 113  FsRtlDissectName
+ 109  ObOpenObjectByName
+ 103  CcFreeVirtualAddress
+ 102  IoFreeIrp
+ 101  ObpCaptureObjectCreateInformation
+ 101  PsImpersonateClient
+ 100  ObfDereferenceObject
+ 100  ObpLookupObjectName
+  96  IofCallDriver
+  96  RtlTimeToTimeFields
+  93  KeRaiseIrql
+  88  KiReadyThread
+  87  MmCheckCachedPageState
+  84  MmProbeAndLockPages
+  81  FsRtlLookupLargeMcbEntry
+  81  MiFlushSectionInternal
+  80  ExpInterlockedPopEntrySList
+  80  IopAllocateIrp
+  80  RtlCompareUnicodeString
+  76  IoAllocateIrp
+  75  CcSetDirtyPinnedData
+  74  PspSetLdtSize
+  73  IoGetRelatedDeviceObject
+  69  CcUnpinFileData
+  67  KeWaitForSingleObject
+  66  CcMapAndRead
+  66  RtlIsNameLegalDOS8Dot3
+  65  ObpCaptureObjectName
+  63  ExReleaseHandleTableShared
+  63  KdPollBreakIn
+  62  CcFastCopyRead
+  62  FsRtlAddToTunnelCache
+  62  KiInterruptException
+  61  CcPinMappedData
+  61  FsRtlFindLargeIndex
+  60  ExInterlockedAddUlong
+  59  CcCanIWrite
+  59  RtlEqualUnicodeString
+  58  islower
+  58  KeInsertQueue
+  57  KiChainedDispatch
+  57  ObpAllocateObject
+  56  ElapsedDaysToYears
+  56  FsRtlIsFatDbcsLegal
+  53  ExAcquireFastMutexUnsafe
+  51  KiSwapThread
+  51  memset
+  50  CcFlushCache
+  48  ExAcquireHandleTableShared
+  48  IopDeleteFile
+  48  KeLeaveCriticalRegion
+  47  CcMdlRead
+  47  CcPrepareMdlWrite
+  46  CcFastCopyWrite
+  44  CcInitializeCacheMap
+  44  CcSetDirtyInMask
+  44  MiFreePoolPages
+  44  MiReleaseSystemPtes
+  44  RtlQueryAtomsInAtomTable
+  43  IoIsOperationSynchronous
+  43  KeLowerIrql
+  40  IoFastQueryNetworkAttributes
+  40  PsReferenceImpersonationToken
+  39  MiInsertPageInList
+  39  MmUnmapViewInSystemCache
+  39  ObCreateObject
+  39  ObpDecrementHandleCount
+  38  CcAcquireByteRangeForWrite
+  38  IopParseFile
+  38  KeSetEvent
+  38  MiLocateAndReserveWsle
+  38  MmUnlockPages
+  38  SeCreateAccessState
+  37  FsRtlFindInTunnelCache
+  37  IoCreateFile
+  36  CcMdlWriteComplete2
+  36  KeEnterCriticalRegion
+  35  CcMapAndCopy
+  35  ExCreateHandle
+  35  ExpFindCurrentThread
+  35  FsRtlCheckOplock
+  35  IopCloseFile
+  35  IopCompleteRequest
+  33  KiSaveVolatileFloatState
+  33  KiSwapThreadExit
+  33  ObpFreeObjectNameBuffer
+  32  CcSetFileSizes
+  32  RtlExtendedMagicDivide
+  31  CcUnpinData
+  31  MmMapLockedPages
+  31  MmSetAddressRangeModified
+  31  NtSetInformationFile
+  31  RtlUpcaseUnicodeStringToOemString
+  30  IoAcquireCancelSpinLock
+  30  IoAllocateMdl
+  30  IoFreeMdl
+  30  MiCheckProtoPtePageState
+  30  MiCleanSection
+  30  MiRemoveZeroPage
+  30  ObpCreateHandle
+  30  PsAssignImpersonationToken
+  29  ExAcquireHandleTableExclusive
+  29  FsRtlOplockBreakToII
+  29  MiRemovePageByColor
+  29  RtlNtStatusToDosErrorNoTeb
+  29  SeAssignSecurity
+  29  wcscmp
+  28  CcUninitializeCacheMap
+  28  FsRtlRequestExclusiveOplock
+  28  KiModifyException
+  28  RtlCopyUnicodeString
+  28  SeDeleteAccessState
+  27  CcLazyWriteScan
+  27  ExAcquireSharedStarveExclusive
+  27  KiUnwaitThread
+  27  MiDecrementReferenceCount
+  27  MiRemovePageFromList
+  27  ObpIncrementHandleCount
+  26  CcWriteBehind
+  26  MmAccessFault
+  26  ObpAllocateObjectNameBuffer
+  26  RtlFillMemoryUlong
+  26  RtlMapGenericMask
+  25  ExReleaseHandleTableExclusive
+  25  RtlUnicodeToOemN
+  24  FsRtlOplockCleanup
+  24  MiDecrementShareCount2
+  24  MiUpdateWsle
+  24  NtClose
+  23  FsRtlInitProcessorLockQueue
+  23  IoBuildPartialMdl
+  23  MiRestoreTransitionPte
+  23  MmFlushSection
+  23  RtlpDidUnicodeToOemWork
+  22  _ull_rshift
+  22  IopCheckBackupRestorePrivilege
+  22  IopDereferenceVpbAndFree
+  22  MmMapViewInSystemCache
+  22  SeCaptureSubjectContext
+  21  ExpAcquireResourceSharedLite
+  21  MmPurgeSection
+  21  RtlOemToUnicodeN
+  21  RtlUpcaseUnicodeString
+  20  ExMapHandleToPointer
+  20  MiCreateDataFileMap
+  20  MiLocateWsle
+  20  MiRemoveAnyPage
+  20  MiUnlinkPageFromList
+  20  RtlUpcaseUnicodeChar
+  19  IoSetHardErrorOrVerifyDevice
+  19  KeUpdateSystemTime
+  19  MiWaitForInPageComplete
+  19  MmCreateSection
+  19  ObpDeleteNameCheck
+  19  ObpFreeObject
+  19  PsReferencePrimaryToken
+  19  SeReleaseSubjectContext
+  18  CcGetVacbMiss
+  18  ExFreePool
+  18  FsRtlOplockIsFastIoPossible
+  18  RtlFindClearBitsAndSet
+  17  ExReleaseFastMutexUnsafe
+  17  FsRtlGetNextLargeMcbEntry
+  17  FsRtlRemoveNodeFromTunnel
+  17  KeReadStateTimer
+  17  KiAcquireSpinLock
+  17  MiInitializePfn
+  16  CcPinRead
+  16  CcWorkerThread
+  16  FsRtlDoesNameContainWildCards
+  16  FsRtlFastCheckLockForRead
+  16  FsRtlOplockFsctrl
+  16  IoCheckFunctionAccess
+  16  IoCheckShareAccess
+  16  KdpReadControlSpace
+  16  KiDeliverApc
+  16  KiRestoreVolatileFloatState
+  16  MiResolveMappedFileFault
+  16  ObpRemoveObjectRoutine
+  15  CcAllocateInitializeBcb
+  15  ExLockPool
+  15  ExpInterlockedCompareExchange64
+  15  MiCheckControlArea
+  15  MmCopyToCachedPage
+  15  MmIsAddressValid
+  15  RtlUpcaseUnicodeStringToCountedOemString
+  15  xHalSuspendHibernateSystem
+  14  CcPreparePinWrite
+  14  ExTryToAcquireFastMutex
+  14  IopCheckDeviceAndDriver
+  14  KeInitializeEvent
+  14  RtlpGetExtraStuffPointer
+  14  SwapContext
+  13  ExDestroyHandle
+  13  FsRtlRemoveAndCompleteWaitIrp
+  13  IoCheckDesiredAccess
+  13  KiInterruptDispatchSame
+  13  KxUnlockDispatcherDatabase
+  13  MiDispatchFault
+  13  MmUnmapLockedPages
+  13  ObpChargeQuotaForObject
+  13  RtlpGetStackLimits
+  13  SeAuditingFileEvents
+  12  KiInterruptExit
+  12  MiSetDirtyBit
+  11  CcFreeActiveVacb
+  11  ExSetResourceOwnerPointer
+  11  FsRtlLookupLastLargeMcbEntry
+  11  FsRtlPrivateFastUnlockAll
+  11  FsRtlTruncateLargeMcb
+  11  KeReadStateQueue
+  11  KiWaitTest
+  11  MiRemoveWsle
+  11  MiResolveProtoPteFault
+  11  PsWatchWorkingSet
+  11  RtlOemStringToUnicodeString
+  11  SeSetAccessStateGenericMapping
+  10  CmpCreatePredefined
+  10  ExGetPreviousMode
+  10  ExpInterlockedExchangeAddLargeInteger
+  10  FsRtlNotifySetCancelRoutine
+  10  IoSetShareAccess
+  10  IoStartPacket
+  10  KeAcquireSpinLock
+  10  KeQuerySystemTime
+  10  MiMakeSystemAddressValidPfn
+  10  PsChargeSharedPoolQuota
+  10  RawInitializeVcb
+  10  RtlpGenerateInheritedAce
+   9  CcCopyRead
+   9  CcGetDirtyPages
+   9  ExInterlockedInsertTailList
+   9  FsRtlPruneTunnelCache
+   9  IoStartNextPacket
+   9  KiActivateWaiterQueue
+   9  KiInsertTreeTimer
+   9  ObValidateSecurityQuota
+   9  RtlTimeToSecondsSince1970
+   8  CcCreateVacbArray
+   8  CcReleaseByteRangeFromWrite
+   8  ExpAcquireSharedStarveExclusive
+   8  FsRtlPrivateLimitFreeLockList
+   8  FsRtlWaitOnIrp
+   8  IoAllocateAdapterChannel
+   8  IoGetCurrentProcess
+   8  IopDeleteIoCompletion
+   8  KdIsThisAKdTrap
+   8  KeClearEvent
+   8  KeQueryTickCount
+   8  KiInsertQueueApc
+   8  KiInsertTimerTable
+   8  MiAllocatePoolPages
+   8  MiSectionDelete
+   8  RtlpLengthInheritedAce
+   8  SeValidSecurityDescriptor
+   8  SwapSplayLinks
+   7  FsRtlFastCheckLockForWrite
+   7  FsRtlUninitializeLargeMcb
+   7  KeUpdateRunTime
+   7  ObpCreateUnnamedHandle
+   7  RtlInsertElementGenericTable
+   7  SeLockSubjectContext
+   7  SepRmSendCommandToLsaWrkr
+   7  wcsicmp
+   6  CcPurgeCacheSection
+   6  CcUnmapVacbArray
+   6  ExAllocatePoolWithQuotaTag
+   6  ExIsResourceAcquiredExclusiveLite
+   6  FsRtlAddLargeMcbEntry
+   6  FsRtlAreNamesEqual
+   6  FsRtlDeleteTunnelCache
+   6  FsRtlPrivateLock
+   6  FsRtlRemoveMcbEntryPrivate
+   6  IO_DESC_MIN
+   6  IoCreateStreamFileObject
+   6  IoQueueThreadIrp
+   6  KeResetEvent
+   6  KeSetEventBoostPriority
+   6  KiContinueInterrupt
+   6  MiInitializeReadInProgressPfn
+   6  MiResolveDemandZeroFault
+   6  MmDeterminePoolType
+   6  ObpValidateAccessMask
+   6  RtlDelete
+   5  CcSetValidData
+   5  ExAcquireSharedWaitForExclusive
+   5  ExInitializeResourceLite
+   5  ExQueueWorkItem
+   5  ExReinitializeResourceLite
+   5  FsRtlAllocateOplock
+   5  FsRtlCurrentBatchOplock
+   5  FsRtlFastUnlockSingleExclusive
+   5  FsRtlInitializeLargeMcb
+   5  FsRtlLookupMcbEntry
+   5  FsRtlNotifyCompletion
+   5  IoRemoveShareAccess
+   5  IoSynchronousPageWrite
+   5  KeAlertResumeThread
+   5  KeFillEntryTb
+   5  KeRemoveQueueDpc
+   5  MiGetEventCounter
+   5  MmBuildMdlForNonPagedPool
+   5  ObInsertObject
+   5  PsReturnSharedPoolQuota
+   5  RtlClearBits
+   5  RtlSubAuthoritySid
+   5  SeTraverseAuditAlarm
+   4  CcCopyWrite
+   4  CcDeallocateBcb
+   4  CcMdlReadComplete2
+   4  ExpWaitForResource
+   4  FsRtlAcknowledgeOplockBreak
+   4  FsRtlAcquireFileForCcFlush
+   4  FsRtlUninitializeOplock
+   4  IoGetTopLevelIrp
+   4  KeInsertQueueApc
+   4  KeTryToAcquireSpinLock
+   4  KiAlternateExit
+   4  KiApcInterrupt
+   4  KiFlushSingleTb
+   4  KiTimerExpiration
+   4  MiAccessCheck
+   4  MiAddValidPageToWorkingSet
+   4  MiEnsureAvailablePageOrWait
+   4  MiGetInPageSupportBlock
+   4  MiReleasePageFileSpace
+   4  MiResolveTransitionFault
+   4  NtDeleteFile
+   4  NtFsControlFile
+   4  NtQueryVolumeInformationFile
+   4  RtlpGenerateInheritAcl
+   4  RtlSetBits
+   4  RtlUnicodeStringToCountedOemString
+   4  RtlUnicodeStringToOemString
+   4  SepCheckAcl
+   3  CcUnmapAndPurge
+   3  ExChangeHandle
+   3  ExDeleteResourceLite
+   3  ExInterlockedAddLargeStatistic
+   3  ExpAcquireResourceExclusiveLite
+   3  FsRtlCheckLockForReadAccess
+   3  FsRtlFastUnlockSingle
+   3  FsRtlFindFirstOverlappingExclusiveNode
+   3  FsRtlMdlWriteCompleteDev
+   3  FsRtlNotifyCleanup
+   3  FsRtlNumberOfRunsInLargeMcb
+   3  FsRtlPrivateInsertLock
+   3  FsRtlRemoveAndCompleteIrp
+   3  IopOpenLinkOrRenameTarget
+   3  IoReleaseCancelSpinLock
+   3  KeInitializeApc
+   3  KeInsertDeviceQueue
+   3  KeInsertHeadQueue
+   3  KeSetAutoAlignmentThread
+   3  KiComputeTimerTableIndex
+   3  KiPassiveRelease
+   3  KiSystemServiceRepeat
+   3  MiCheckControlAreaStatus
+   3  MiFreeInPageSupportBlock
+   3  MiMakeProtectionMask
+   3  ObpIncrementHandleDataBase
+   3  RtlDeleteElementGenericTable
+   3  RtlDeleteNoSplay
+   3  RtlSubtreePredecessor
+   3  RtlUpperString
+   3  SepAccessCheck
+   3  SepConcatenatePrivileges
+   3  SepGetDefaultsSubjectContext
+   2  CcGetVirtualAddressIfMapped
+   2  CcScheduleReadAhead
+   2  CcSetReadAheadGranularity
+   2  ExDisableResourceBoostLite
+   2  ExEnumHandleTable
+   2  ExInterlockedPushEntryList
+   2  ExIsResourceAcquiredSharedLite
+   2  ExpWorkerThread
+   2  FsRtlFreeTunnelNode
+   2  FsRtlIsNameInExpression
+   2  FsRtlOplockBreakNotify
+   2  FsRtlReleaseFileForCcFlush
+   2  IoGetDeviceToVerify
+   2  IopSynchronousApiServiceTail
+   2  KeChangeColorPage
+   2  KeSetTimerEx
+   2  KeWaitForMultipleObjects
+   2  KiDecrementQuantum
+   2  KiRequestSoftwareInterrupt
+   2  KiSetServerWaitClientEvent
+   2  MiAddWorkingSetPage
+   2  MiChargeCommitmentCantExpand
+   2  MiCheckForControlAreaDeletion
+   2  MiCompleteProtoPteFault
+   2  MiDereferenceSegmentThread
+   2  MiFlushPteList
+   2  MiFreeEventCounter
+   2  MiReleaseWsle
+   2  MmCanFileBeTruncatedInternal
+   2  NtCancelTimer
+   2  ObDeleteCapturedInsertInfo
+   2  ObpIncrementUnnamedHandleCount
+   2  PsReturnPoolQuota
+   2  RtlAppendUnicodeToString
+   2  RtlAreBitsSet
+   2  RtlCaptureContext
+   2  RtlConvertUlongToLargeInteger
+   2  RtlCreateSecurityDescriptor
+   2  RtlEqualPrefixSid
+   2  RtlInitializeSid
+   2  RtlInitializeUnicodePrefix
+   2  RtlVirtualUnwind
+   2  SepInheritAcl
+   2  SeUnlockSubjectContext
+   1  CcDeleteSharedCacheMap
+   1  CcPerformReadAhead
+   1  CcPostWorkQueue
+   1  CcUnpinDataForThread
+   1  CcZeroEndOfLastPage
+   1  ExAllocatePoolWithQuota
+   1  ExReleaseResourceForThreadLite
+   1  ExUnlockUserBuffer
+   1  FsRtlAllocateFirstMapping
+   1  FsRtlFastUnlockAll
+   1  FsRtlFastUnlockSingleShared
+   1  FsRtlPrivateCheckForExclusiveLockAccess
+   1  FsRtlRemoveLargeMcbEntry
+   1  FsRtlUninitializeFileLock
+   1  IoBuildAsynchronousFsdRequest
+   1  IoGetRequestorProcess
+   1  IoPageRead
+   1  IopTimerDispatch
+   1  IoUpdateShareAccess
+   1  KeAttachProcess
+   1  KeBoostCurrentThread
+   1  KeContextFromKframes
+   1  KeFlushSingleTb
+   1  KeRemoveByKeyDeviceQueue
+   1  KeSetBasePriorityThread
+   1  KeThawAllThreads
+   1  KiCacheError
+   1  KiCacheErrorEndAddress
+   1  KiExceptionExit
+   1  KiFindReadyThread
+   1  KiScanBugCheckCallbackList
+   1  KiTimerListExpire
+   1  MiFindActualFaultingPte
+   1  MiFlushInPageSupportBlock
+   1  MiFreeWsle
+   1  MiGatherPagefilePages
+   1  MiInsertPageFileInList
+   1  MiInsertVad
+   1  MiRemoveUnusedSegments
+   1  MiReserveSystemPtes2
+   1  MiResolvePageFileFault
+   1  MiReturnPageFileQuota
+   1  MiSegmentDelete
+   1  MiWriteComplete
+   1  MmRaisePoolQuota
+   1  NtCreateFile
+   1  NtQueryTimerResolution
+   1  RtlAreBitsClear
+   1  RtlCompressWorkSpaceSizeNS
+   1  RtlCreateAcl
+   1  RtlExtendedIntegerMultiply
+   1  RtlIsGenericTableEmpty
+   1  RtlLengthSecurityDescriptor
+   1  RtlpLengthInheritAcl
+   1  RtlpRaiseException
+   1  SeObjectReferenceAuditAlarm
+   1  SepSidInToken
+   1  SepTokenIsOwner
+   1  strncpy
+
\ No newline at end of file
diff --git a/private/ntos/init/up/ntoskrnl.ppc b/private/ntos/init/up/ntoskrnl.ppc
new file mode 100644
index 000000000..e3177d515
--- /dev/null
+++ b/private/ntos/init/up/ntoskrnl.ppc
@@ -0,0 +1,542 @@
+916  MiZeroPhysicalPage
+749  ExReleaseResourceLite
+712  MmZeroPageThread
+671  IopParseDevice
+535  ExAllocatePoolWithTag
+498  ExInterlockedPopEntrySList
+459  ExFreePoolWithTag
+390  CcMapData
+379  RtlFindClearBits
+349  memmove
+327  CcFindBcb
+326  IoAllocateIrp
+293  FsRtlDissectName
+280  KiInterruptDispatch
+277  CcFastCopyRead
+272  FsRtlIsNameInExpressionPrivate
+269  RtlCompareMemory
+254  MmCopyToCachedPage
+251  RtlUpcaseUnicodeToOemN
+242  CcPinFileData
+240  ObpCaptureObjectCreateInformation
+232  CcGetVirtualAddress
+232  KiDispatchInterrupt
+227  RtlCompareUnicodeString
+208  Exfi386InterlockedDecrementLong
+205  ExpAcquireResourceExclusiveLite
+204  IofCompleteRequest
+187  CcFastCopyWrite
+184  MiFlushSectionInternal
+180  RtlTimeToTimeFields
+178  PsImpersonateClient
+170  RtlSplay
+169  IopAllocateIrp
+164  ObOpenObjectByName
+160  Exfi386InterlockedExchangeUlong
+159  ExAcquireSharedWaitForExclusive
+159  ObReferenceObjectByHandle
+153  ExAcquireResourceSharedLite
+148  ExInterlockedPushEntrySList
+145  CcMapAndRead
+139  FsRtlLookupLargeMcbEntry
+137  InterlockedDecrement
+133  SeCreateAccessState
+125  ObpLookupObjectName
+123  FsRtlIsFatDbcsLegal
+120  ExfInterlockedAddUlong
+120  MmProbeAndLockPages
+113  CcUnpinFileData
+112  ObpCaptureObjectName
+106  ExAcquireHandleTableShared
+105  IoCreateFile
+104  ObfDereferenceObject
+103  InterlockedIncrement
+102  CcSetDirtyPinnedData
+ 96  KeLeaveCriticalRegion
+ 95  ExFreePool
+ 92  CcUnpinData
+ 92  IoFreeIrp
+ 91  MmCheckCachedPageState
+ 91  RtlEqualUnicodeString
+ 91  RtlIsNameLegalDOS8Dot3
+ 90  MiCleanSection
+ 89  CcInitializeCacheMap
+ 88  FsRtlFindLargeIndex
+ 87  CcMapAndCopy
+ 85  CcPinMappedData
+ 85  MiRemovePageByColor
+ 85  MmUnmapViewInSystemCache
+ 85  RtlpCaptureContext
+ 84  RtlFillMemoryUlong
+ 82  ObpAllocateObject
+ 81  RtlCopyUnicodeString
+ 80  CcFreeVirtualAddress
+ 79  ExAcquireFastMutexUnsafe
+ 77  IopDeleteFile
+ 75  FsRtlAllocateResource
+ 75  KiSetCR0Bits
+ 74  ExInterlockedCompareExchange64
+ 72  ExAllocatePool
+ 72  IoGetRelatedDeviceObject
+ 71  KeRemoveQueue
+ 70  ExReleaseHandleTableShared
+ 68  CcAcquireByteRangeForWrite
+ 68  IofCallDriver
+ 67  FsRtlCheckOplock
+ 66  ElapsedDaysToYears
+ 65  IopCloseFile
+ 65  KefAcquireSpinLockAtDpcLevel
+ 64  ObpIncrementHandleCount
+ 63  ExTryToAcquireResourceExclusiveLite
+ 63  FsRtlAddToTunnelCache
+ 62  IopCompleteRequest
+ 61  CcFlushCache
+ 61  CcGetVirtualAddressIfMapped
+ 61  IoSetThreadHardErrorMode
+ 61  ObCreateObject
+ 60  IoFastQueryNetworkAttributes
+ 59  CcPrepareMdlWrite
+ 57  CcCanIWrite
+ 57  CcWriteBehind
+ 56  RtlExtendedMagicDivide
+ 55  MiLocateAndReserveWsle
+ 55  NtSetInformationFile
+ 55  ObpAllocateObjectNameBuffer
+ 53  CcLazyWriteScan
+ 53  RtlNtStatusToDosErrorNoTeb
+ 52  KeReadStateQueue
+ 52  MiCheckProtoPtePageState
+ 52  ObReferenceObjectByPointer
+ 51  CcAllocateInitializeBcb
+ 51  PsReferencePrimaryToken
+ 50  CcSetDirtyInMask
+ 50  FsRtlFindInTunnelCache
+ 50  IopParseFile
+ 50  KeSynchronizeExecution
+ 49  _NLG_Return2
+ 49  KeQuerySystemTime
+ 48  CcGetVacbMiss
+ 48  NtClose
+ 48  ObpDecrementHandleCount
+ 47  IoGetInitialStack
+ 47  ObpCreateHandle
+ 46  MiInsertPageInList
+ 46  MiWaitForInPageComplete
+ 44  FsRtlGetNextLargeMcbEntry
+ 44  IopCheckDeviceAndDriver
+ 43  KeInsertHeadQueue
+ 43  MiDecrementShareCount2
+ 43  RtlUpcaseUnicodeStringToOemString
+ 42  ExAcquireSharedStarveExclusive
+ 42  ExpFindCurrentThread
+ 41  _abnormal_termination
+ 41  CcMdlRead
+ 41  CcUninitializeCacheMap
+ 41  RtlUnicodeToOemN
+ 40  FsRtlOplockFsctrl
+ 40  IoAllocateMdl
+ 39  ExReleaseHandleTableExclusive
+ 39  MmSetAddressRangeModified
+ 38  CcSetFileSizes
+ 38  ExCreateHandle
+ 38  KeEnterCriticalRegion
+ 38  MiDecrementReferenceCount
+ 38  MmUnlockPages
+ 38  ObpFreeObject
+ 38  PsAssignImpersonationToken
+ 38  RtlMapGenericMask
+ 37  CcCopyRead
+ 37  PsReferenceImpersonationToken
+ 36  IoGetRequestorProcess
+ 36  SeTokenType
+ 35  ObpFreeObjectNameBuffer
+ 35  RtlUpcaseUnicodeString
+ 34  IopCheckBackupRestorePrivilege
+ 34  MmMapViewInSystemCache
+ 34  RtlCompressChunks
+ 34  RtlInsertElementGenericTable
+ 33  CcPinRead
+ 33  IoBuildSynchronousFsdRequest
+ 33  MmFlushSection
+ 32  IoAllocateErrorLogEntry
+ 32  MiAllocatePoolPages
+ 32  RtlUpcaseUnicodeChar
+ 31  MmPurgeSection
+ 30  FsRtlFastCheckLockForRead
+ 30  MiReserveSystemPtes
+ 30  PsOpenTokenOfProcess
+ 29  FsRtlOplockCleanup
+ 29  IoIsOperationSynchronous
+ 29  MiFreePoolPages
+ 29  SeAssignSecurity
+ 29  SeDeleteAccessState
+ 28  FsRtlRequestExclusiveOplock
+ 28  IoBuildPartialMdl
+ 28  IoCheckFunctionAccess
+ 28  PsChargeSharedPoolQuota
+ 28  RtlAreAnyAccessesGranted
+ 27  FsRtlUninitializeOplock
+ 27  IoEnqueueIrp
+ 27  MmCreateSection
+ 27  ObpDeleteNameCheck
+ 26  IoCancelIrp
+ 26  RtlpDidUnicodeToOemWork
+ 25  CcFreeActiveVacb
+ 25  ExAllocateFromPagedLookasideList
+ 25  ExIsResourceAcquiredExclusiveLite
+ 25  SeCaptureSubjectContext
+ 24  DebugService
+ 24  KeGetCurrentThread
+ 24  MiCreateDataFileMap
+ 24  RtlpGetStackLimits
+ 23  CcMdlWriteComplete2
+ 23  IoSetShareAccess
+ 23  KeResetEvent
+ 23  MiLocateWsle
+ 23  MiUnlinkPageFromList
+ 23  ObpRemoveObjectRoutine
+ 23  ObWaitForSingleObject
+ 22  CcPreparePinWrite
+ 22  PspDeleteThreadSecurity
+ 22  SeComputeQuotaInformationSize
+ 21  ExDestroyHandle
+ 21  FsRtlDoesNameContainWildCards
+ 21  MiRemoveMappedPtes
+ 21  MiUpdateWsle
+ 21  RawCheckForDismount
+ 21  RtlOemToUnicodeN
+ 21  SeUnlockSubjectContext
+ 20  CcWorkerThread
+ 20  ExInitializeResourceLite
+ 20  ExpAcquireResourceSharedLite
+ 20  ExpWaitForResource
+ 20  FsRtlIsNameInExpression
+ 20  FsRtlOplockBreakToII
+ 20  FsRtlPruneTunnelCache
+ 20  MiDispatchFault
+ 19  IoFreeMdl
+ 19  IoInitializeIrp
+ 19  KefReleaseSpinLockFromDpcLevel
+ 19  KeInsertQueue
+ 19  KeWaitForSingleObject
+ 19  MiCheckControlArea
+ 19  ObpIncrementUnnamedHandleCount
+ 19  RtlDowncaseUnicodeString
+ 19  RtlUnicodeStringToOemString
+ 19  SepFilterPrivilegeAudits
+ 18  ExAcquireHandleTableExclusive
+ 18  FsRtlAreNamesEqual
+ 18  IopDereferenceVpbAndFree
+ 18  KeInitializeDpc
+ 18  ObpLookupDirectoryEntry
+ 17  CcDeallocateBcb
+ 17  ExMapHandleToPointer
+ 17  FsRtlRemoveMcbEntryPrivate
+ 17  IopQueryName
+ 17  IoSetTopLevelIrp
+ 16  CcCopyReadExceptionFilter
+ 16  ExGetSharedWaiterCount
+ 16  ExInterlockedAddLargeInteger
+ 16  ExpWorkerThread
+ 16  ExReinitializeResourceLite
+ 16  FsRtlFastCheckLockForWrite
+ 16  FsRtlFastUnlockSingleExclusive
+ 16  MmAccessFault
+ 16  MmMapLockedPages
+ 16  RtlOemStringToUnicodeString
+ 16  RtlTimeToSecondsSince1970
+ 16  RtlUpcaseUnicodeStringToCountedOemString
+ 15  FsRtlRemoveLargeMcbEntry
+ 15  IoGetTopLevelIrp
+ 15  KeInsertDeviceQueue
+ 15  MiRemoveZeroPage
+ 15  RtlDelete
+ 15  SeTokenImpersonationLevel
+ 14  CcGetDirtyPages
+ 14  ExDeletePagedLookasideList
+ 14  FsRtlAddLargeMcbEntry
+ 14  FsRtlFindFirstOverlappingExclusiveNode
+ 14  IopErrorLogRequeueEntry
+ 14  MiReleaseSystemPtes
+ 14  ObpChargeQuotaForObject
+ 14  RtlpLengthInheritedAce
+ 14  SeSetAccessStateGenericMapping
+ 13  CcPerformReadAhead
+ 13  FsRtlRemoveAndCompleteWaitIrp
+ 13  IoAcquireCancelSpinLock
+ 13  IoBuildDeviceIoControlRequest
+ 13  IoCheckShareAccess
+ 13  IoSynchronousPageWrite
+ 13  MiInitializeReadInProgressPfn
+ 13  RtlUnicodeStringToCountedOemString
+ 12  CcDeleteSharedCacheMap
+ 12  ExSystemTimeToLocalTime
+ 12  FsRtlAllocateOplock
+ 12  FsRtlDeregisterUncProvider
+ 12  FsRtlTruncateLargeMcb
+ 12  FsRtlWaitOnIrp
+ 12  IopCheckVpbMounted
+ 12  KeInsertQueueDpc
+ 12  KiSwapThread
+ 12  MiInitializePfn
+ 12  MmIsAddressValid
+ 12  ObGetObjectPointerCount
+ 12  RtlPrefixUnicodeString
+ 12  VdmpDelayIntApcRoutine
+ 11  ExFreeToPagedLookasideList
+ 11  ExpAcquireSharedStarveExclusive
+ 11  FsRtlOplockIsFastIoPossible
+ 11  MiReleaseWsle
+ 11  MiRemoveUnusedSegments
+ 11  MiReserveSystemPtes2
+ 11  ObSetSecurityDescriptorInfo
+ 10  _allmul
+ 10  ExAllocatePoolWithQuotaTag
+ 10  FsRtlAcquireFileForCcFlush
+ 10  IoStartPacket
+ 10  KeInitializeEvent
+ 10  KeWaitForMultipleObjects
+ 10  MiInitializeCopyOnWritePfn
+ 10  MiRemovePageFromList
+ 10  MiSegmentDelete
+ 10  MmBuildMdlForNonPagedPool
+ 10  MmUnmapLockedPages
+ 10  SeAuditingFileEvents
+ 10  SwapSplayLinks
+  9  FsRtlLookupLastLargeMcbEntry
+  9  IopIsDeviceInstanceEnabled
+  9  KeInitializeSpinLock
+  9  KiAcquireSpinLock
+  9  MiRemoveAnyPage
+  9  MiRemoveWsleFromFreeList
+  9  MiResolveProtoPteFault
+  9  NtWaitForSingleObject
+  9  ObpInsertHandleCount
+  9  RtlpGetExtraStuffPointer
+  9  RtlSetBits
+  9  SeReleaseSubjectContext
+  9  SeValidSecurityDescriptor
+  8  DaysAndFractionToTime
+  8  ExInterlockedExchangeAddLargeInteger
+  8  FsRtlCurrentBatchOplock
+  8  FsRtlPrivateLock
+  8  IoCreateStreamFileObject
+  8  IopReportResourceUsage
+  8  KiDeliverApc
+  8  LpcpClosePort
+  8  MiAccessCheck
+  8  MiMakeProtectionMask
+  8  MiResolveMappedFileFault
+  8  ObInsertObject
+  8  ObpIncrementHandleDataBase
+  8  ObpValidateAccessMask
+  8  PsReturnSharedPoolQuota
+  8  PsWatchWorkingSet
+  8  RtlDeleteElementGenericTable
+  7  CcReleaseByteRangeFromWrite
+  7  ExCreateHandleTable
+  7  FsRtlPrivateFastUnlockAll
+  7  IoCheckDesiredAccess
+  7  IoCreateDevice
+  7  MiCompleteProtoPteFault
+  7  MiMakeSystemAddressValidPfnWs
+  7  MiMapPageInHyperSpace
+  7  ObpCreateUnnamedHandle
+  7  RtlExtendedLargeIntegerDivide
+  7  RtlSubtreePredecessor
+  7  SepAccessCheck
+  6  CcCopyWrite
+  6  CcUnmapVacbArray
+  6  CcUnpinDataForThread
+  6  ExNotifyCallback
+  6  ExReleaseResourceForThreadLite
+  6  FsRtlAcknowledgeOplockBreak
+  6  FsRtlAddLargeEntry
+  6  FsRtlInitializeLargeMcb
+  6  FsRtlMdlWriteCompleteDev
+  6  FsRtlPrivateCheckForExclusiveLockAccess
+  6  IoAllocateAdapterChannel
+  6  IoGetAttachedDevice
+  6  IoRaiseInformationalHardError
+  6  IoRemoveShareAccess
+  6  MiCheckControlAreaStatus
+  6  MiMakeSystemAddressValidPfn
+  6  MiRemoveWsle
+  6  ObDeleteCapturedInsertInfo
+  6  ObReferenceObjectByName
+  6  RtlClearBits
+  6  RtlpGenerateInheritedAce
+  6  RtlxOemStringToUnicodeSize
+  6  SepCheckAcl
+  5  CcPostWorkQueue
+  5  CcScheduleReadAhead
+  5  CcSetValidData
+  5  ExEnumHandleTable
+  5  ExQueueWorkItem
+  5  FsRtlReleaseFileForCcFlush
+  5  KeSetEvent
+  5  MiChargeCommitmentCantExpand
+  5  MiFindActualFaultingPte
+  5  MiGetEventCounter
+  5  NtDeleteFile
+  5  RtlAreBitsClear
+  5  RtlDeleteNoSplay
+  5  RtlInitializeSid
+  5  RtlLookupElementGenericTable
+  5  RtlpGenerateInheritAcl
+  4  CcMdlWriteComplete
+  4  ExAcquireResourceExclusiveLite
+  4  ExDeleteResourceLite
+  4  ExfInterlockedInsertTailList
+  4  ExIsResourceAcquiredSharedLite
+  4  FsRtlOplockBreakNotify
+  4  IoCheckEaBufferValidity
+  4  IopOpenLinkOrRenameTarget
+  4  IoQueueThreadIrp
+  4  IoRegisterShutdownNotification
+  4  Ke386GetGdtEntryThread
+  4  KeReadStateTimer
+  4  KeRemoveDeviceQueue
+  4  KiRetireDpcList
+  4  MiDeletePte
+  4  MiEnsureAvailablePageOrWait
+  4  MiGetInPageSupportBlock
+  4  MiSectionDelete
+  4  RtlLengthSecurityDescriptor
+  4  RtlRealSuccessor
+  4  RtlUpcaseUnicodeStringToAnsiString
+  4  SepAdtGenerateDiscardAudit
+  4  SepInheritAcl
+  4  SepSidInToken
+  3  CcCreateVacbArray
+  3  CcMdlReadComplete2
+  3  ExInterlockedAddLargeStatistic
+  3  FsRtlCheckForMatchingFileObject
+  3  FsRtlCheckLockForWriteAccess
+  3  FsRtlPrivateInsertLock
+  3  FsRtlPrivateLimitFreeLockList
+  3  FsRtlPrivateResetLowestLockOffset
+  3  IoCancelThreadIo
+  3  IoPageRead
+  3  IoReleaseCancelSpinLock
+  3  IoSetInformation
+  3  IoStartNextPacket
+  3  IoStopTimer
+  3  KeClearEvent
+  3  KeInitializeApc
+  3  KeInsertByKeyDeviceQueue
+  3  KeRemoveByKeyDeviceQueue
+  3  KiQuantumEnd
+  3  MiAddValidPageToWorkingSet
+  3  MiDeleteSystemPagableVm
+  3  MiInsertFrontModifiedNoWrite
+  3  MiLocateSubsection
+  3  MiRemoveWorkingSetPages
+  3  MiRestoreTransitionPte
+  3  MiTrimWorkingSet
+  3  RtlAreBitsSet
+  3  RtlConvertUlongToLargeInteger
+  3  RtlCopyLuidAndAttributesArray
+  3  RtlCreateAcl
+  3  RtlLargeIntegerDivide
+  3  RtlpLengthInheritAcl
+  3  SeAccessCheck
+  2  _wcsicmp
+  2  CcExtendVacbArray
+  2  CcSetReadAheadGranularity
+  2  CcUnmapVacb
+  2  ExfInterlockedInsertHeadList
+  2  FsRtlCheckLockForReadAccess
+  2  FsRtlFreeFirstMapping
+  2  FsRtlMdlReadComplete
+  2  FsRtlNumberOfRunsInLargeMcb
+  2  FsRtlOpBatchBreakClosePending
+  2  FsRtlPrivateCheckWaitingLocks
+  2  FsRtlPrivateInitializeFileLock
+  2  FsRtlPrivateInsertExclusiveLock
+  2  FsRtlReleaseFileForModWrite
+  2  FsRtlRemoveAndCompleteIrp
+  2  FsRtlUninitializeFileLock
+  2  IoCreateNotificationEvent
+  2  IoGetDeviceToVerify
+  2  IopMountVolume
+  2  IoUpdateShareAccess
+  2  KeReleaseWaitForSemaphore
+  2  KiTrap0E
+  2  MiCheckForControlAreaDeletion
+  2  MiDetermineUserGlobalPteMask
+  2  MiFlushInPageSupportBlock
+  2  MiFreeEventCounter
+  2  MiInitializeTransitionPfn
+  2  MiInsertWsle
+  2  MiMapPageToZeroInHyperSpace
+  2  MiModifiedPageWriterWorker
+  2  MiResolveDemandZeroFault
+  2  MiResolveTransitionFault
+  2  MmCanFileBeTruncated
+  2  MmCanFileBeTruncatedInternal
+  2  MmDeterminePoolType
+  2  MmFlushImageSection
+  2  RtlAllocateAndInitializeSid
+  2  RtlEnumerateGenericTable
+  2  RtlEqualPrefixSid
+  2  RtlEqualSid
+  2  RtlExtendedIntegerMultiply
+  2  RtlFirstFreeAce
+  2  RtlIsGenericTableEmpty
+  2  RtlOemStringToCountedUnicodeString
+  2  RtlUpperString
+  2  SeFreeCapturedSecurityQos
+  2  SeLockSubjectContext
+  1  _vsnprintf
+  1  CcGetLsnForFileObject
+  1  CcPurgeAndClearCacheSection
+  1  CcZeroData
+  1  ExecuteHandler
+  1  ExLocalTimeToSystemTime
+  1  ExRaiseException
+  1  ExReleaseFastMutexUnsafe
+  1  FsRtlCancelExclusiveIrp
+  1  FsRtlFastUnlockAll
+  1  FsRtlFastUnlockAllByKey
+  1  FsRtlFastUnlockSingleShared
+  1  FsRtlFindFirstOverlappingSharedNode
+  1  FsRtlGetNextMcbEntry
+  1  FsRtlPrivateInsertSharedLock
+  1  FsRtlPrivateRemoveLock
+  1  FsRtlRequestOplockII
+  1  FsRtlSyncVolumes
+  1  FsRtlUninitializeLargeMcb
+  1  IopTimerDispatch
+  1  IoUnregisterFsRegistrationChange
+  1  KeContextToKframes
+  1  KeFlushQueueApc
+  1  KeSetEventBoostPriority
+  1  KiReleaseSpinLock
+  1  KiSystemService
+  1  KiTimerExpiration
+  1  KiTimerListExpire
+  1  MiAddMappedPtes
+  1  MiCheckPdeForPagedPool
+  1  MiFlushPteList
+  1  MiFreeInPageSupportBlock
+  1  MiInitializePfnForOtherProcess
+  1  MiInsertVad
+  1  MiMakeOutswappedPageResident
+  1  MiReleasePageFileSpace
+  1  MiResolvePageFileFault
+  1  MmWorkingSetManager
+  1  PsReturnPoolQuota
+  1  RtlAddAuditAccessAce
+  1  RtlDispatchException
+  1  RtlInitializeGenericTable
+  1  RtlNumberOfClearBits
+  1  RtlpGetReturnAddress
+  1  RtlSecondsSince1970ToTime
+  1  RtlSetAllBits
+  1  RtlValidSecurityDescriptor
+  1  SepApplyAclToObject
+  1  SepConcatenatePrivileges
+  1  SepGetDefaultsSubjectContext
+
+
\ No newline at end of file
diff --git a/private/ntos/init/up/ntoskrnl.x86 b/private/ntos/init/up/ntoskrnl.x86
new file mode 100644
index 000000000..e3177d515
--- /dev/null
+++ b/private/ntos/init/up/ntoskrnl.x86
@@ -0,0 +1,542 @@
+916  MiZeroPhysicalPage
+749  ExReleaseResourceLite
+712  MmZeroPageThread
+671  IopParseDevice
+535  ExAllocatePoolWithTag
+498  ExInterlockedPopEntrySList
+459  ExFreePoolWithTag
+390  CcMapData
+379  RtlFindClearBits
+349  memmove
+327  CcFindBcb
+326  IoAllocateIrp
+293  FsRtlDissectName
+280  KiInterruptDispatch
+277  CcFastCopyRead
+272  FsRtlIsNameInExpressionPrivate
+269  RtlCompareMemory
+254  MmCopyToCachedPage
+251  RtlUpcaseUnicodeToOemN
+242  CcPinFileData
+240  ObpCaptureObjectCreateInformation
+232  CcGetVirtualAddress
+232  KiDispatchInterrupt
+227  RtlCompareUnicodeString
+208  Exfi386InterlockedDecrementLong
+205  ExpAcquireResourceExclusiveLite
+204  IofCompleteRequest
+187  CcFastCopyWrite
+184  MiFlushSectionInternal
+180  RtlTimeToTimeFields
+178  PsImpersonateClient
+170  RtlSplay
+169  IopAllocateIrp
+164  ObOpenObjectByName
+160  Exfi386InterlockedExchangeUlong
+159  ExAcquireSharedWaitForExclusive
+159  ObReferenceObjectByHandle
+153  ExAcquireResourceSharedLite
+148  ExInterlockedPushEntrySList
+145  CcMapAndRead
+139  FsRtlLookupLargeMcbEntry
+137  InterlockedDecrement
+133  SeCreateAccessState
+125  ObpLookupObjectName
+123  FsRtlIsFatDbcsLegal
+120  ExfInterlockedAddUlong
+120  MmProbeAndLockPages
+113  CcUnpinFileData
+112  ObpCaptureObjectName
+106  ExAcquireHandleTableShared
+105  IoCreateFile
+104  ObfDereferenceObject
+103  InterlockedIncrement
+102  CcSetDirtyPinnedData
+ 96  KeLeaveCriticalRegion
+ 95  ExFreePool
+ 92  CcUnpinData
+ 92  IoFreeIrp
+ 91  MmCheckCachedPageState
+ 91  RtlEqualUnicodeString
+ 91  RtlIsNameLegalDOS8Dot3
+ 90  MiCleanSection
+ 89  CcInitializeCacheMap
+ 88  FsRtlFindLargeIndex
+ 87  CcMapAndCopy
+ 85  CcPinMappedData
+ 85  MiRemovePageByColor
+ 85  MmUnmapViewInSystemCache
+ 85  RtlpCaptureContext
+ 84  RtlFillMemoryUlong
+ 82  ObpAllocateObject
+ 81  RtlCopyUnicodeString
+ 80  CcFreeVirtualAddress
+ 79  ExAcquireFastMutexUnsafe
+ 77  IopDeleteFile
+ 75  FsRtlAllocateResource
+ 75  KiSetCR0Bits
+ 74  ExInterlockedCompareExchange64
+ 72  ExAllocatePool
+ 72  IoGetRelatedDeviceObject
+ 71  KeRemoveQueue
+ 70  ExReleaseHandleTableShared
+ 68  CcAcquireByteRangeForWrite
+ 68  IofCallDriver
+ 67  FsRtlCheckOplock
+ 66  ElapsedDaysToYears
+ 65  IopCloseFile
+ 65  KefAcquireSpinLockAtDpcLevel
+ 64  ObpIncrementHandleCount
+ 63  ExTryToAcquireResourceExclusiveLite
+ 63  FsRtlAddToTunnelCache
+ 62  IopCompleteRequest
+ 61  CcFlushCache
+ 61  CcGetVirtualAddressIfMapped
+ 61  IoSetThreadHardErrorMode
+ 61  ObCreateObject
+ 60  IoFastQueryNetworkAttributes
+ 59  CcPrepareMdlWrite
+ 57  CcCanIWrite
+ 57  CcWriteBehind
+ 56  RtlExtendedMagicDivide
+ 55  MiLocateAndReserveWsle
+ 55  NtSetInformationFile
+ 55  ObpAllocateObjectNameBuffer
+ 53  CcLazyWriteScan
+ 53  RtlNtStatusToDosErrorNoTeb
+ 52  KeReadStateQueue
+ 52  MiCheckProtoPtePageState
+ 52  ObReferenceObjectByPointer
+ 51  CcAllocateInitializeBcb
+ 51  PsReferencePrimaryToken
+ 50  CcSetDirtyInMask
+ 50  FsRtlFindInTunnelCache
+ 50  IopParseFile
+ 50  KeSynchronizeExecution
+ 49  _NLG_Return2
+ 49  KeQuerySystemTime
+ 48  CcGetVacbMiss
+ 48  NtClose
+ 48  ObpDecrementHandleCount
+ 47  IoGetInitialStack
+ 47  ObpCreateHandle
+ 46  MiInsertPageInList
+ 46  MiWaitForInPageComplete
+ 44  FsRtlGetNextLargeMcbEntry
+ 44  IopCheckDeviceAndDriver
+ 43  KeInsertHeadQueue
+ 43  MiDecrementShareCount2
+ 43  RtlUpcaseUnicodeStringToOemString
+ 42  ExAcquireSharedStarveExclusive
+ 42  ExpFindCurrentThread
+ 41  _abnormal_termination
+ 41  CcMdlRead
+ 41  CcUninitializeCacheMap
+ 41  RtlUnicodeToOemN
+ 40  FsRtlOplockFsctrl
+ 40  IoAllocateMdl
+ 39  ExReleaseHandleTableExclusive
+ 39  MmSetAddressRangeModified
+ 38  CcSetFileSizes
+ 38  ExCreateHandle
+ 38  KeEnterCriticalRegion
+ 38  MiDecrementReferenceCount
+ 38  MmUnlockPages
+ 38  ObpFreeObject
+ 38  PsAssignImpersonationToken
+ 38  RtlMapGenericMask
+ 37  CcCopyRead
+ 37  PsReferenceImpersonationToken
+ 36  IoGetRequestorProcess
+ 36  SeTokenType
+ 35  ObpFreeObjectNameBuffer
+ 35  RtlUpcaseUnicodeString
+ 34  IopCheckBackupRestorePrivilege
+ 34  MmMapViewInSystemCache
+ 34  RtlCompressChunks
+ 34  RtlInsertElementGenericTable
+ 33  CcPinRead
+ 33  IoBuildSynchronousFsdRequest
+ 33  MmFlushSection
+ 32  IoAllocateErrorLogEntry
+ 32  MiAllocatePoolPages
+ 32  RtlUpcaseUnicodeChar
+ 31  MmPurgeSection
+ 30  FsRtlFastCheckLockForRead
+ 30  MiReserveSystemPtes
+ 30  PsOpenTokenOfProcess
+ 29  FsRtlOplockCleanup
+ 29  IoIsOperationSynchronous
+ 29  MiFreePoolPages
+ 29  SeAssignSecurity
+ 29  SeDeleteAccessState
+ 28  FsRtlRequestExclusiveOplock
+ 28  IoBuildPartialMdl
+ 28  IoCheckFunctionAccess
+ 28  PsChargeSharedPoolQuota
+ 28  RtlAreAnyAccessesGranted
+ 27  FsRtlUninitializeOplock
+ 27  IoEnqueueIrp
+ 27  MmCreateSection
+ 27  ObpDeleteNameCheck
+ 26  IoCancelIrp
+ 26  RtlpDidUnicodeToOemWork
+ 25  CcFreeActiveVacb
+ 25  ExAllocateFromPagedLookasideList
+ 25  ExIsResourceAcquiredExclusiveLite
+ 25  SeCaptureSubjectContext
+ 24  DebugService
+ 24  KeGetCurrentThread
+ 24  MiCreateDataFileMap
+ 24  RtlpGetStackLimits
+ 23  CcMdlWriteComplete2
+ 23  IoSetShareAccess
+ 23  KeResetEvent
+ 23  MiLocateWsle
+ 23  MiUnlinkPageFromList
+ 23  ObpRemoveObjectRoutine
+ 23  ObWaitForSingleObject
+ 22  CcPreparePinWrite
+ 22  PspDeleteThreadSecurity
+ 22  SeComputeQuotaInformationSize
+ 21  ExDestroyHandle
+ 21  FsRtlDoesNameContainWildCards
+ 21  MiRemoveMappedPtes
+ 21  MiUpdateWsle
+ 21  RawCheckForDismount
+ 21  RtlOemToUnicodeN
+ 21  SeUnlockSubjectContext
+ 20  CcWorkerThread
+ 20  ExInitializeResourceLite
+ 20  ExpAcquireResourceSharedLite
+ 20  ExpWaitForResource
+ 20  FsRtlIsNameInExpression
+ 20  FsRtlOplockBreakToII
+ 20  FsRtlPruneTunnelCache
+ 20  MiDispatchFault
+ 19  IoFreeMdl
+ 19  IoInitializeIrp
+ 19  KefReleaseSpinLockFromDpcLevel
+ 19  KeInsertQueue
+ 19  KeWaitForSingleObject
+ 19  MiCheckControlArea
+ 19  ObpIncrementUnnamedHandleCount
+ 19  RtlDowncaseUnicodeString
+ 19  RtlUnicodeStringToOemString
+ 19  SepFilterPrivilegeAudits
+ 18  ExAcquireHandleTableExclusive
+ 18  FsRtlAreNamesEqual
+ 18  IopDereferenceVpbAndFree
+ 18  KeInitializeDpc
+ 18  ObpLookupDirectoryEntry
+ 17  CcDeallocateBcb
+ 17  ExMapHandleToPointer
+ 17  FsRtlRemoveMcbEntryPrivate
+ 17  IopQueryName
+ 17  IoSetTopLevelIrp
+ 16  CcCopyReadExceptionFilter
+ 16  ExGetSharedWaiterCount
+ 16  ExInterlockedAddLargeInteger
+ 16  ExpWorkerThread
+ 16  ExReinitializeResourceLite
+ 16  FsRtlFastCheckLockForWrite
+ 16  FsRtlFastUnlockSingleExclusive
+ 16  MmAccessFault
+ 16  MmMapLockedPages
+ 16  RtlOemStringToUnicodeString
+ 16  RtlTimeToSecondsSince1970
+ 16  RtlUpcaseUnicodeStringToCountedOemString
+ 15  FsRtlRemoveLargeMcbEntry
+ 15  IoGetTopLevelIrp
+ 15  KeInsertDeviceQueue
+ 15  MiRemoveZeroPage
+ 15  RtlDelete
+ 15  SeTokenImpersonationLevel
+ 14  CcGetDirtyPages
+ 14  ExDeletePagedLookasideList
+ 14  FsRtlAddLargeMcbEntry
+ 14  FsRtlFindFirstOverlappingExclusiveNode
+ 14  IopErrorLogRequeueEntry
+ 14  MiReleaseSystemPtes
+ 14  ObpChargeQuotaForObject
+ 14  RtlpLengthInheritedAce
+ 14  SeSetAccessStateGenericMapping
+ 13  CcPerformReadAhead
+ 13  FsRtlRemoveAndCompleteWaitIrp
+ 13  IoAcquireCancelSpinLock
+ 13  IoBuildDeviceIoControlRequest
+ 13  IoCheckShareAccess
+ 13  IoSynchronousPageWrite
+ 13  MiInitializeReadInProgressPfn
+ 13  RtlUnicodeStringToCountedOemString
+ 12  CcDeleteSharedCacheMap
+ 12  ExSystemTimeToLocalTime
+ 12  FsRtlAllocateOplock
+ 12  FsRtlDeregisterUncProvider
+ 12  FsRtlTruncateLargeMcb
+ 12  FsRtlWaitOnIrp
+ 12  IopCheckVpbMounted
+ 12  KeInsertQueueDpc
+ 12  KiSwapThread
+ 12  MiInitializePfn
+ 12  MmIsAddressValid
+ 12  ObGetObjectPointerCount
+ 12  RtlPrefixUnicodeString
+ 12  VdmpDelayIntApcRoutine
+ 11  ExFreeToPagedLookasideList
+ 11  ExpAcquireSharedStarveExclusive
+ 11  FsRtlOplockIsFastIoPossible
+ 11  MiReleaseWsle
+ 11  MiRemoveUnusedSegments
+ 11  MiReserveSystemPtes2
+ 11  ObSetSecurityDescriptorInfo
+ 10  _allmul
+ 10  ExAllocatePoolWithQuotaTag
+ 10  FsRtlAcquireFileForCcFlush
+ 10  IoStartPacket
+ 10  KeInitializeEvent
+ 10  KeWaitForMultipleObjects
+ 10  MiInitializeCopyOnWritePfn
+ 10  MiRemovePageFromList
+ 10  MiSegmentDelete
+ 10  MmBuildMdlForNonPagedPool
+ 10  MmUnmapLockedPages
+ 10  SeAuditingFileEvents
+ 10  SwapSplayLinks
+  9  FsRtlLookupLastLargeMcbEntry
+  9  IopIsDeviceInstanceEnabled
+  9  KeInitializeSpinLock
+  9  KiAcquireSpinLock
+  9  MiRemoveAnyPage
+  9  MiRemoveWsleFromFreeList
+  9  MiResolveProtoPteFault
+  9  NtWaitForSingleObject
+  9  ObpInsertHandleCount
+  9  RtlpGetExtraStuffPointer
+  9  RtlSetBits
+  9  SeReleaseSubjectContext
+  9  SeValidSecurityDescriptor
+  8  DaysAndFractionToTime
+  8  ExInterlockedExchangeAddLargeInteger
+  8  FsRtlCurrentBatchOplock
+  8  FsRtlPrivateLock
+  8  IoCreateStreamFileObject
+  8  IopReportResourceUsage
+  8  KiDeliverApc
+  8  LpcpClosePort
+  8  MiAccessCheck
+  8  MiMakeProtectionMask
+  8  MiResolveMappedFileFault
+  8  ObInsertObject
+  8  ObpIncrementHandleDataBase
+  8  ObpValidateAccessMask
+  8  PsReturnSharedPoolQuota
+  8  PsWatchWorkingSet
+  8  RtlDeleteElementGenericTable
+  7  CcReleaseByteRangeFromWrite
+  7  ExCreateHandleTable
+  7  FsRtlPrivateFastUnlockAll
+  7  IoCheckDesiredAccess
+  7  IoCreateDevice
+  7  MiCompleteProtoPteFault
+  7  MiMakeSystemAddressValidPfnWs
+  7  MiMapPageInHyperSpace
+  7  ObpCreateUnnamedHandle
+  7  RtlExtendedLargeIntegerDivide
+  7  RtlSubtreePredecessor
+  7  SepAccessCheck
+  6  CcCopyWrite
+  6  CcUnmapVacbArray
+  6  CcUnpinDataForThread
+  6  ExNotifyCallback
+  6  ExReleaseResourceForThreadLite
+  6  FsRtlAcknowledgeOplockBreak
+  6  FsRtlAddLargeEntry
+  6  FsRtlInitializeLargeMcb
+  6  FsRtlMdlWriteCompleteDev
+  6  FsRtlPrivateCheckForExclusiveLockAccess
+  6  IoAllocateAdapterChannel
+  6  IoGetAttachedDevice
+  6  IoRaiseInformationalHardError
+  6  IoRemoveShareAccess
+  6  MiCheckControlAreaStatus
+  6  MiMakeSystemAddressValidPfn
+  6  MiRemoveWsle
+  6  ObDeleteCapturedInsertInfo
+  6  ObReferenceObjectByName
+  6  RtlClearBits
+  6  RtlpGenerateInheritedAce
+  6  RtlxOemStringToUnicodeSize
+  6  SepCheckAcl
+  5  CcPostWorkQueue
+  5  CcScheduleReadAhead
+  5  CcSetValidData
+  5  ExEnumHandleTable
+  5  ExQueueWorkItem
+  5  FsRtlReleaseFileForCcFlush
+  5  KeSetEvent
+  5  MiChargeCommitmentCantExpand
+  5  MiFindActualFaultingPte
+  5  MiGetEventCounter
+  5  NtDeleteFile
+  5  RtlAreBitsClear
+  5  RtlDeleteNoSplay
+  5  RtlInitializeSid
+  5  RtlLookupElementGenericTable
+  5  RtlpGenerateInheritAcl
+  4  CcMdlWriteComplete
+  4  ExAcquireResourceExclusiveLite
+  4  ExDeleteResourceLite
+  4  ExfInterlockedInsertTailList
+  4  ExIsResourceAcquiredSharedLite
+  4  FsRtlOplockBreakNotify
+  4  IoCheckEaBufferValidity
+  4  IopOpenLinkOrRenameTarget
+  4  IoQueueThreadIrp
+  4  IoRegisterShutdownNotification
+  4  Ke386GetGdtEntryThread
+  4  KeReadStateTimer
+  4  KeRemoveDeviceQueue
+  4  KiRetireDpcList
+  4  MiDeletePte
+  4  MiEnsureAvailablePageOrWait
+  4  MiGetInPageSupportBlock
+  4  MiSectionDelete
+  4  RtlLengthSecurityDescriptor
+  4  RtlRealSuccessor
+  4  RtlUpcaseUnicodeStringToAnsiString
+  4  SepAdtGenerateDiscardAudit
+  4  SepInheritAcl
+  4  SepSidInToken
+  3  CcCreateVacbArray
+  3  CcMdlReadComplete2
+  3  ExInterlockedAddLargeStatistic
+  3  FsRtlCheckForMatchingFileObject
+  3  FsRtlCheckLockForWriteAccess
+  3  FsRtlPrivateInsertLock
+  3  FsRtlPrivateLimitFreeLockList
+  3  FsRtlPrivateResetLowestLockOffset
+  3  IoCancelThreadIo
+  3  IoPageRead
+  3  IoReleaseCancelSpinLock
+  3  IoSetInformation
+  3  IoStartNextPacket
+  3  IoStopTimer
+  3  KeClearEvent
+  3  KeInitializeApc
+  3  KeInsertByKeyDeviceQueue
+  3  KeRemoveByKeyDeviceQueue
+  3  KiQuantumEnd
+  3  MiAddValidPageToWorkingSet
+  3  MiDeleteSystemPagableVm
+  3  MiInsertFrontModifiedNoWrite
+  3  MiLocateSubsection
+  3  MiRemoveWorkingSetPages
+  3  MiRestoreTransitionPte
+  3  MiTrimWorkingSet
+  3  RtlAreBitsSet
+  3  RtlConvertUlongToLargeInteger
+  3  RtlCopyLuidAndAttributesArray
+  3  RtlCreateAcl
+  3  RtlLargeIntegerDivide
+  3  RtlpLengthInheritAcl
+  3  SeAccessCheck
+  2  _wcsicmp
+  2  CcExtendVacbArray
+  2  CcSetReadAheadGranularity
+  2  CcUnmapVacb
+  2  ExfInterlockedInsertHeadList
+  2  FsRtlCheckLockForReadAccess
+  2  FsRtlFreeFirstMapping
+  2  FsRtlMdlReadComplete
+  2  FsRtlNumberOfRunsInLargeMcb
+  2  FsRtlOpBatchBreakClosePending
+  2  FsRtlPrivateCheckWaitingLocks
+  2  FsRtlPrivateInitializeFileLock
+  2  FsRtlPrivateInsertExclusiveLock
+  2  FsRtlReleaseFileForModWrite
+  2  FsRtlRemoveAndCompleteIrp
+  2  FsRtlUninitializeFileLock
+  2  IoCreateNotificationEvent
+  2  IoGetDeviceToVerify
+  2  IopMountVolume
+  2  IoUpdateShareAccess
+  2  KeReleaseWaitForSemaphore
+  2  KiTrap0E
+  2  MiCheckForControlAreaDeletion
+  2  MiDetermineUserGlobalPteMask
+  2  MiFlushInPageSupportBlock
+  2  MiFreeEventCounter
+  2  MiInitializeTransitionPfn
+  2  MiInsertWsle
+  2  MiMapPageToZeroInHyperSpace
+  2  MiModifiedPageWriterWorker
+  2  MiResolveDemandZeroFault
+  2  MiResolveTransitionFault
+  2  MmCanFileBeTruncated
+  2  MmCanFileBeTruncatedInternal
+  2  MmDeterminePoolType
+  2  MmFlushImageSection
+  2  RtlAllocateAndInitializeSid
+  2  RtlEnumerateGenericTable
+  2  RtlEqualPrefixSid
+  2  RtlEqualSid
+  2  RtlExtendedIntegerMultiply
+  2  RtlFirstFreeAce
+  2  RtlIsGenericTableEmpty
+  2  RtlOemStringToCountedUnicodeString
+  2  RtlUpperString
+  2  SeFreeCapturedSecurityQos
+  2  SeLockSubjectContext
+  1  _vsnprintf
+  1  CcGetLsnForFileObject
+  1  CcPurgeAndClearCacheSection
+  1  CcZeroData
+  1  ExecuteHandler
+  1  ExLocalTimeToSystemTime
+  1  ExRaiseException
+  1  ExReleaseFastMutexUnsafe
+  1  FsRtlCancelExclusiveIrp
+  1  FsRtlFastUnlockAll
+  1  FsRtlFastUnlockAllByKey
+  1  FsRtlFastUnlockSingleShared
+  1  FsRtlFindFirstOverlappingSharedNode
+  1  FsRtlGetNextMcbEntry
+  1  FsRtlPrivateInsertSharedLock
+  1  FsRtlPrivateRemoveLock
+  1  FsRtlRequestOplockII
+  1  FsRtlSyncVolumes
+  1  FsRtlUninitializeLargeMcb
+  1  IopTimerDispatch
+  1  IoUnregisterFsRegistrationChange
+  1  KeContextToKframes
+  1  KeFlushQueueApc
+  1  KeSetEventBoostPriority
+  1  KiReleaseSpinLock
+  1  KiSystemService
+  1  KiTimerExpiration
+  1  KiTimerListExpire
+  1  MiAddMappedPtes
+  1  MiCheckPdeForPagedPool
+  1  MiFlushPteList
+  1  MiFreeInPageSupportBlock
+  1  MiInitializePfnForOtherProcess
+  1  MiInsertVad
+  1  MiMakeOutswappedPageResident
+  1  MiReleasePageFileSpace
+  1  MiResolvePageFileFault
+  1  MmWorkingSetManager
+  1  PsReturnPoolQuota
+  1  RtlAddAuditAccessAce
+  1  RtlDispatchException
+  1  RtlInitializeGenericTable
+  1  RtlNumberOfClearBits
+  1  RtlpGetReturnAddress
+  1  RtlSecondsSince1970ToTime
+  1  RtlSetAllBits
+  1  RtlValidSecurityDescriptor
+  1  SepApplyAclToObject
+  1  SepConcatenatePrivileges
+  1  SepGetDefaultsSubjectContext
+
+
\ No newline at end of file
diff --git a/private/ntos/init/up/ppc.prf b/private/ntos/init/up/ppc.prf
new file mode 100644
index 000000000..dc01569d7
--- /dev/null
+++ b/private/ntos/init/up/ppc.prf
@@ -0,0 +1,542 @@
+MiZeroPhysicalPage
+ExReleaseResourceLite
+MmZeroPageThread
+IopParseDevice
+ExAllocatePoolWithTag
+ExInterlockedPopEntrySList
+ExFreePoolWithTag
+CcMapData
+RtlFindClearBits
+memmove
+CcFindBcb
+IoAllocateIrp
+FsRtlDissectName
+KiInterruptDispatch
+CcFastCopyRead
+FsRtlIsNameInExpressionPrivate
+RtlCompareMemory
+MmCopyToCachedPage
+RtlUpcaseUnicodeToOemN
+CcPinFileData
+ObpCaptureObjectCreateInformation
+CcGetVirtualAddress
+KiDispatchInterrupt
+RtlCompareUnicodeString
+Exfi386InterlockedDecrementLong
+ExpAcquireResourceExclusiveLite
+IofCompleteRequest
+CcFastCopyWrite
+MiFlushSectionInternal
+RtlTimeToTimeFields
+PsImpersonateClient
+RtlSplay
+IopAllocateIrp
+ObOpenObjectByName
+Exfi386InterlockedExchangeUlong
+ExAcquireSharedWaitForExclusive
+ObReferenceObjectByHandle
+ExAcquireResourceSharedLite
+ExInterlockedPushEntrySList
+CcMapAndRead
+FsRtlLookupLargeMcbEntry
+InterlockedDecrement
+SeCreateAccessState
+ObpLookupObjectName
+FsRtlIsFatDbcsLegal
+ExfInterlockedAddUlong
+MmProbeAndLockPages
+CcUnpinFileData
+ObpCaptureObjectName
+ExAcquireHandleTableShared
+IoCreateFile
+ObfDereferenceObject
+InterlockedIncrement
+CcSetDirtyPinnedData
+KeLeaveCriticalRegion
+ExFreePool
+CcUnpinData
+IoFreeIrp
+MmCheckCachedPageState
+RtlEqualUnicodeString
+RtlIsNameLegalDOS8Dot3
+MiCleanSection
+CcInitializeCacheMap
+FsRtlFindLargeIndex
+CcMapAndCopy
+CcPinMappedData
+MiRemovePageByColor
+MmUnmapViewInSystemCache
+RtlpCaptureContext
+RtlFillMemoryUlong
+ObpAllocateObject
+RtlCopyUnicodeString
+CcFreeVirtualAddress
+ExAcquireFastMutexUnsafe
+IopDeleteFile
+FsRtlAllocateResource
+KiSetCR0Bits
+ExInterlockedCompareExchange64
+ExAllocatePool
+IoGetRelatedDeviceObject
+KeRemoveQueue
+ExReleaseHandleTableShared
+CcAcquireByteRangeForWrite
+IofCallDriver
+FsRtlCheckOplock
+ElapsedDaysToYears
+IopCloseFile
+KefAcquireSpinLockAtDpcLevel
+ObpIncrementHandleCount
+ExTryToAcquireResourceExclusiveLite
+FsRtlAddToTunnelCache
+IopCompleteRequest
+CcFlushCache
+CcGetVirtualAddressIfMapped
+IoSetThreadHardErrorMode
+ObCreateObject
+IoFastQueryNetworkAttributes
+CcPrepareMdlWrite
+CcCanIWrite
+CcWriteBehind
+RtlExtendedMagicDivide
+MiLocateAndReserveWsle
+NtSetInformationFile
+ObpAllocateObjectNameBuffer
+CcLazyWriteScan
+RtlNtStatusToDosErrorNoTeb
+KeReadStateQueue
+MiCheckProtoPtePageState
+ObReferenceObjectByPointer
+CcAllocateInitializeBcb
+PsReferencePrimaryToken
+CcSetDirtyInMask
+FsRtlFindInTunnelCache
+IopParseFile
+KeSynchronizeExecution
+_NLG_Return2
+KeQuerySystemTime
+CcGetVacbMiss
+NtClose
+ObpDecrementHandleCount
+IoGetInitialStack
+ObpCreateHandle
+MiInsertPageInList
+MiWaitForInPageComplete
+FsRtlGetNextLargeMcbEntry
+IopCheckDeviceAndDriver
+KeInsertHeadQueue
+MiDecrementShareCount2
+RtlUpcaseUnicodeStringToOemString
+ExAcquireSharedStarveExclusive
+ExpFindCurrentThread
+_abnormal_termination
+CcMdlRead
+CcUninitializeCacheMap
+RtlUnicodeToOemN
+FsRtlOplockFsctrl
+IoAllocateMdl
+ExReleaseHandleTableExclusive
+MmSetAddressRangeModified
+CcSetFileSizes
+ExCreateHandle
+KeEnterCriticalRegion
+MiDecrementReferenceCount
+MmUnlockPages
+ObpFreeObject
+PsAssignImpersonationToken
+RtlMapGenericMask
+CcCopyRead
+PsReferenceImpersonationToken
+IoGetRequestorProcess
+SeTokenType
+ObpFreeObjectNameBuffer
+RtlUpcaseUnicodeString
+IopCheckBackupRestorePrivilege
+MmMapViewInSystemCache
+RtlCompressChunks
+RtlInsertElementGenericTable
+CcPinRead
+IoBuildSynchronousFsdRequest
+MmFlushSection
+IoAllocateErrorLogEntry
+MiAllocatePoolPages
+RtlUpcaseUnicodeChar
+MmPurgeSection
+FsRtlFastCheckLockForRead
+MiReserveSystemPtes
+PsOpenTokenOfProcess
+FsRtlOplockCleanup
+IoIsOperationSynchronous
+MiFreePoolPages
+SeAssignSecurity
+SeDeleteAccessState
+FsRtlRequestExclusiveOplock
+IoBuildPartialMdl
+IoCheckFunctionAccess
+PsChargeSharedPoolQuota
+RtlAreAnyAccessesGranted
+FsRtlUninitializeOplock
+IoEnqueueIrp
+MmCreateSection
+ObpDeleteNameCheck
+IoCancelIrp
+RtlpDidUnicodeToOemWork
+CcFreeActiveVacb
+ExAllocateFromPagedLookasideList
+ExIsResourceAcquiredExclusiveLite
+SeCaptureSubjectContext
+DebugService
+KeGetCurrentThread
+MiCreateDataFileMap
+RtlpGetStackLimits
+CcMdlWriteComplete2
+IoSetShareAccess
+KeResetEvent
+MiLocateWsle
+MiUnlinkPageFromList
+ObpRemoveObjectRoutine
+ObWaitForSingleObject
+CcPreparePinWrite
+PspDeleteThreadSecurity
+SeComputeQuotaInformationSize
+ExDestroyHandle
+FsRtlDoesNameContainWildCards
+MiRemoveMappedPtes
+MiUpdateWsle
+RawCheckForDismount
+RtlOemToUnicodeN
+SeUnlockSubjectContext
+CcWorkerThread
+ExInitializeResourceLite
+ExpAcquireResourceSharedLite
+ExpWaitForResource
+FsRtlIsNameInExpression
+FsRtlOplockBreakToII
+FsRtlPruneTunnelCache
+MiDispatchFault
+IoFreeMdl
+IoInitializeIrp
+KefReleaseSpinLockFromDpcLevel
+KeInsertQueue
+KeWaitForSingleObject
+MiCheckControlArea
+ObpIncrementUnnamedHandleCount
+RtlDowncaseUnicodeString
+RtlUnicodeStringToOemString
+SepFilterPrivilegeAudits
+ExAcquireHandleTableExclusive
+FsRtlAreNamesEqual
+IopDereferenceVpbAndFree
+KeInitializeDpc
+ObpLookupDirectoryEntry
+CcDeallocateBcb
+ExMapHandleToPointer
+FsRtlRemoveMcbEntryPrivate
+IopQueryName
+IoSetTopLevelIrp
+CcCopyReadExceptionFilter
+ExGetSharedWaiterCount
+ExInterlockedAddLargeInteger
+ExpWorkerThread
+ExReinitializeResourceLite
+FsRtlFastCheckLockForWrite
+FsRtlFastUnlockSingleExclusive
+MmAccessFault
+MmMapLockedPages
+RtlOemStringToUnicodeString
+RtlTimeToSecondsSince1970
+RtlUpcaseUnicodeStringToCountedOemString
+FsRtlRemoveLargeMcbEntry
+IoGetTopLevelIrp
+KeInsertDeviceQueue
+MiRemoveZeroPage
+RtlDelete
+SeTokenImpersonationLevel
+CcGetDirtyPages
+ExDeletePagedLookasideList
+FsRtlAddLargeMcbEntry
+FsRtlFindFirstOverlappingExclusiveNode
+IopErrorLogRequeueEntry
+MiReleaseSystemPtes
+ObpChargeQuotaForObject
+RtlpLengthInheritedAce
+SeSetAccessStateGenericMapping
+CcPerformReadAhead
+FsRtlRemoveAndCompleteWaitIrp
+IoAcquireCancelSpinLock
+IoBuildDeviceIoControlRequest
+IoCheckShareAccess
+IoSynchronousPageWrite
+MiInitializeReadInProgressPfn
+RtlUnicodeStringToCountedOemString
+CcDeleteSharedCacheMap
+ExSystemTimeToLocalTime
+FsRtlAllocateOplock
+FsRtlDeregisterUncProvider
+FsRtlTruncateLargeMcb
+FsRtlWaitOnIrp
+IopCheckVpbMounted
+KeInsertQueueDpc
+KiSwapThread
+MiInitializePfn
+MmIsAddressValid
+ObGetObjectPointerCount
+RtlPrefixUnicodeString
+VdmpDelayIntApcRoutine
+ExFreeToPagedLookasideList
+ExpAcquireSharedStarveExclusive
+FsRtlOplockIsFastIoPossible
+MiReleaseWsle
+MiRemoveUnusedSegments
+MiReserveSystemPtes2
+ObSetSecurityDescriptorInfo
+_allmul
+ExAllocatePoolWithQuotaTag
+FsRtlAcquireFileForCcFlush
+IoStartPacket
+KeInitializeEvent
+KeWaitForMultipleObjects
+MiInitializeCopyOnWritePfn
+MiRemovePageFromList
+MiSegmentDelete
+MmBuildMdlForNonPagedPool
+MmUnmapLockedPages
+SeAuditingFileEvents
+SwapSplayLinks
+FsRtlLookupLastLargeMcbEntry
+IopIsDeviceInstanceEnabled
+KeInitializeSpinLock
+KiAcquireSpinLock
+MiRemoveAnyPage
+MiRemoveWsleFromFreeList
+MiResolveProtoPteFault
+NtWaitForSingleObject
+ObpInsertHandleCount
+RtlpGetExtraStuffPointer
+RtlSetBits
+SeReleaseSubjectContext
+SeValidSecurityDescriptor
+DaysAndFractionToTime
+ExInterlockedExchangeAddLargeInteger
+FsRtlCurrentBatchOplock
+FsRtlPrivateLock
+IoCreateStreamFileObject
+IopReportResourceUsage
+KiDeliverApc
+LpcpClosePort
+MiAccessCheck
+MiMakeProtectionMask
+MiResolveMappedFileFault
+ObInsertObject
+ObpIncrementHandleDataBase
+ObpValidateAccessMask
+PsReturnSharedPoolQuota
+PsWatchWorkingSet
+RtlDeleteElementGenericTable
+CcReleaseByteRangeFromWrite
+ExCreateHandleTable
+FsRtlPrivateFastUnlockAll
+IoCheckDesiredAccess
+IoCreateDevice
+MiCompleteProtoPteFault
+MiMakeSystemAddressValidPfnWs
+MiMapPageInHyperSpace
+ObpCreateUnnamedHandle
+RtlExtendedLargeIntegerDivide
+RtlSubtreePredecessor
+SepAccessCheck
+CcCopyWrite
+CcUnmapVacbArray
+CcUnpinDataForThread
+ExNotifyCallback
+ExReleaseResourceForThreadLite
+FsRtlAcknowledgeOplockBreak
+FsRtlAddLargeEntry
+FsRtlInitializeLargeMcb
+FsRtlMdlWriteCompleteDev
+FsRtlPrivateCheckForExclusiveLockAccess
+IoAllocateAdapterChannel
+IoGetAttachedDevice
+IoRaiseInformationalHardError
+IoRemoveShareAccess
+MiCheckControlAreaStatus
+MiMakeSystemAddressValidPfn
+MiRemoveWsle
+ObDeleteCapturedInsertInfo
+ObReferenceObjectByName
+RtlClearBits
+RtlpGenerateInheritedAce
+RtlxOemStringToUnicodeSize
+SepCheckAcl
+CcPostWorkQueue
+CcScheduleReadAhead
+CcSetValidData
+ExEnumHandleTable
+ExQueueWorkItem
+FsRtlReleaseFileForCcFlush
+KeSetEvent
+MiChargeCommitmentCantExpand
+MiFindActualFaultingPte
+MiGetEventCounter
+NtDeleteFile
+RtlAreBitsClear
+RtlDeleteNoSplay
+RtlInitializeSid
+RtlLookupElementGenericTable
+RtlpGenerateInheritAcl
+CcMdlWriteComplete
+ExAcquireResourceExclusiveLite
+ExDeleteResourceLite
+ExfInterlockedInsertTailList
+ExIsResourceAcquiredSharedLite
+FsRtlOplockBreakNotify
+IoCheckEaBufferValidity
+IopOpenLinkOrRenameTarget
+IoQueueThreadIrp
+IoRegisterShutdownNotification
+Ke386GetGdtEntryThread
+KeReadStateTimer
+KeRemoveDeviceQueue
+KiRetireDpcList
+MiDeletePte
+MiEnsureAvailablePageOrWait
+MiGetInPageSupportBlock
+MiSectionDelete
+RtlLengthSecurityDescriptor
+RtlRealSuccessor
+RtlUpcaseUnicodeStringToAnsiString
+SepAdtGenerateDiscardAudit
+SepInheritAcl
+SepSidInToken
+CcCreateVacbArray
+CcMdlReadComplete2
+ExInterlockedAddLargeStatistic
+FsRtlCheckForMatchingFileObject
+FsRtlCheckLockForWriteAccess
+FsRtlPrivateInsertLock
+FsRtlPrivateLimitFreeLockList
+FsRtlPrivateResetLowestLockOffset
+IoCancelThreadIo
+IoPageRead
+IoReleaseCancelSpinLock
+IoSetInformation
+IoStartNextPacket
+IoStopTimer
+KeClearEvent
+KeInitializeApc
+KeInsertByKeyDeviceQueue
+KeRemoveByKeyDeviceQueue
+KiQuantumEnd
+MiAddValidPageToWorkingSet
+MiDeleteSystemPagableVm
+MiInsertFrontModifiedNoWrite
+MiLocateSubsection
+MiRemoveWorkingSetPages
+MiRestoreTransitionPte
+MiTrimWorkingSet
+RtlAreBitsSet
+RtlConvertUlongToLargeInteger
+RtlCopyLuidAndAttributesArray
+RtlCreateAcl
+RtlLargeIntegerDivide
+RtlpLengthInheritAcl
+SeAccessCheck
+_wcsicmp
+CcExtendVacbArray
+CcSetReadAheadGranularity
+CcUnmapVacb
+ExfInterlockedInsertHeadList
+FsRtlCheckLockForReadAccess
+FsRtlFreeFirstMapping
+FsRtlMdlReadComplete
+FsRtlNumberOfRunsInLargeMcb
+FsRtlOpBatchBreakClosePending
+FsRtlPrivateCheckWaitingLocks
+FsRtlPrivateInitializeFileLock
+FsRtlPrivateInsertExclusiveLock
+FsRtlReleaseFileForModWrite
+FsRtlRemoveAndCompleteIrp
+FsRtlUninitializeFileLock
+IoCreateNotificationEvent
+IoGetDeviceToVerify
+IopMountVolume
+IoUpdateShareAccess
+KeReleaseWaitForSemaphore
+KiTrap0E
+MiCheckForControlAreaDeletion
+MiDetermineUserGlobalPteMask
+MiFlushInPageSupportBlock
+MiFreeEventCounter
+MiInitializeTransitionPfn
+MiInsertWsle
+MiMapPageToZeroInHyperSpace
+MiModifiedPageWriterWorker
+MiResolveDemandZeroFault
+MiResolveTransitionFault
+MmCanFileBeTruncated
+MmCanFileBeTruncatedInternal
+MmDeterminePoolType
+MmFlushImageSection
+RtlAllocateAndInitializeSid
+RtlEnumerateGenericTable
+RtlEqualPrefixSid
+RtlEqualSid
+RtlExtendedIntegerMultiply
+RtlFirstFreeAce
+RtlIsGenericTableEmpty
+RtlOemStringToCountedUnicodeString
+RtlUpperString
+SeFreeCapturedSecurityQos
+SeLockSubjectContext
+_vsnprintf
+CcGetLsnForFileObject
+CcPurgeAndClearCacheSection
+CcZeroData
+ExecuteHandler
+ExLocalTimeToSystemTime
+ExRaiseException
+ExReleaseFastMutexUnsafe
+FsRtlCancelExclusiveIrp
+FsRtlFastUnlockAll
+FsRtlFastUnlockAllByKey
+FsRtlFastUnlockSingleShared
+FsRtlFindFirstOverlappingSharedNode
+FsRtlGetNextMcbEntry
+FsRtlPrivateInsertSharedLock
+FsRtlPrivateRemoveLock
+FsRtlRequestOplockII
+FsRtlSyncVolumes
+FsRtlUninitializeLargeMcb
+IopTimerDispatch
+IoUnregisterFsRegistrationChange
+KeContextToKframes
+KeFlushQueueApc
+KeSetEventBoostPriority
+KiReleaseSpinLock
+KiSystemService
+KiTimerExpiration
+KiTimerListExpire
+MiAddMappedPtes
+MiCheckPdeForPagedPool
+MiFlushPteList
+MiFreeInPageSupportBlock
+MiInitializePfnForOtherProcess
+MiInsertVad
+MiMakeOutswappedPageResident
+MiReleasePageFileSpace
+MiResolvePageFileFault
+MmWorkingSetManager
+PsReturnPoolQuota
+RtlAddAuditAccessAce
+RtlDispatchException
+RtlInitializeGenericTable
+RtlNumberOfClearBits
+RtlpGetReturnAddress
+RtlSecondsSince1970ToTime
+RtlSetAllBits
+RtlValidSecurityDescriptor
+SepApplyAclToObject
+SepConcatenatePrivileges
+SepGetDefaultsSubjectContext
+
+
\ No newline at end of file
diff --git a/private/ntos/init/up/sources b/private/ntos/init/up/sources
new file mode 100644
index 000000000..80a52d6fa
--- /dev/null
+++ b/private/ntos/init/up/sources
@@ -0,0 +1,62 @@
+!IF 0
+
+Copyright (c) 1989  Microsoft Corporation
+
+Module Name:
+
+    sources.
+
+Abstract:
+
+    This file specifies the target component being built and the list of
+    sources files needed to build that component.  Also specifies optional
+    compiler switches and libraries that are unique for the component being
+    built.
+
+
+Author:
+
+    Steve Wood (stevewo) 12-Apr-1990
+
+NOTE:   Commented description of this file is in \nt\bak\bin\sources.tpl
+
+!ENDIF
+
+MAJORCOMP=ntos
+MINORCOMP=init
+
+TARGETNAME=init
+TARGETPATH=..\..\obj
+TARGETTYPE=LIBRARY
+
+SYNCHRONIZE_DRAIN=1
+SYNCHRONIZE_BLOCK=1
+
+INCLUDES=..;..\..\inc
+GPSIZE=32
+
+NTPROFILEINPUT=yes
+
+MSC_WARNING_LEVEL=/W3 /WX
+
+C_DEFINES=$(C_DEFINES) -D_NTSYSTEM_
+
+SOURCES=\
+        ..\init.c      \
+        ..\ntoskrnl.rc
+
+!IF "$(NTTEST)"==""
+NTTEST=ntoskrnl
+!ENDIF
+
+!ifdef TEST_BUILD_EXPONENT
+!  if "$(TEST_BUILD_EXPONENT)" == "$(TEST_BUILD_EXPONENT:0x=)"
+!    error TEST_BUILD_EXPONENT value must start with 0x
+!  endif
+C_DEFINES=$(C_DEFINES) -DTEST_BUILD_EXPONENT=$(TEST_BUILD_EXPONENT)
+!endif
+
+NTRES=obj\*\ntoskrnl.res
+UMRES=obj\*\ntoskrnl.res
+
+NTTARGETFILE1=$(BASEDIR)\public\sdk\lib\*\$(NTTEST).lib
-- 
cgit v1.2.3