This file is indexed.

/usr/lib/x86_64-linux-gnu/wine/libntoskrnl.exe.def is in wine1.4-amd64 1.4-0ubuntu4.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
; File generated automatically from ./dlls/ntoskrnl.exe/ntoskrnl.exe.spec; do not edit!

LIBRARY ntoskrnl.exe

EXPORTS
  InterlockedCompareExchange=NTOSKRNL_InterlockedCompareExchange @31
  InterlockedDecrement=NTOSKRNL_InterlockedDecrement @32
  InterlockedExchange=NTOSKRNL_InterlockedExchange @33
  InterlockedExchangeAdd=NTOSKRNL_InterlockedExchangeAdd @34
  InterlockedIncrement=NTOSKRNL_InterlockedIncrement @35
  InterlockedPopEntrySList=kernel32.InterlockedPopEntrySList @36
  InterlockedPushEntrySList=kernel32.InterlockedPushEntrySList @37
  IofCallDriver @42
  IofCompleteRequest @43
  ObfDereferenceObject @51
  ObfReferenceObject @52
  RtlUlonglongByteSwap=ntdll.RtlUlonglongByteSwap @54
  DbgBreakPoint=ntdll.DbgBreakPoint @103
  DbgPrint=ntdll.DbgPrint @106
  DbgPrintEx=ntdll.DbgPrintEx @107
  ExAllocatePool @117
  ExAllocatePoolWithQuota @118
  ExAllocatePoolWithQuotaTag @119
  ExAllocatePoolWithTag @120
  ExFreePool @132
  ExFreePoolWithTag @133
  ExInitializeNPagedLookasideList @140
  ExInitializePagedLookasideList @141
  ExInitializeResourceLite @142
  ExInitializeZone @143
  ExLocalTimeToSystemTime=ntdll.RtlLocalTimeToSystemTime @158
  ExSystemTimeToLocalTime=ntdll.RtlSystemTimeToLocalTime @174
  FsRtlRegisterUncProvider @272
  IoAllocateDriverObjectExtension @310
  IoAllocateErrorLogEntry @311
  IoAllocateIrp @312
  IoAllocateMdl @313
  IoAllocateWorkItem @314
  IoAttachDeviceToDeviceStack @318
  IoBuildDeviceIoControlRequest @321
  IoCallDriver @324
  IoCompleteRequest @334
  IoCreateDevice @337
  IoCreateDriver @339
  IoCreateSymbolicLink @346
  IoCreateSynchronizationEvent @347
  IoDeleteDevice @354
  IoDeleteDriver @355
  IoDeleteSymbolicLink @356
  IoFreeIrp @371
  IoGetConfigurationInformation @378
  IoGetCurrentProcess @379
  IoGetDeviceInterfaces @382
  IoGetDeviceObjectPointer @383
  IoGetDeviceProperty @384
  IoGetDriverObjectExtension @388
  IoGetRelatedDeviceObject @392
  IoInitializeIrp @398
  IoInitializeRemoveLockEx @399
  IoInitializeTimer @400
  IoIsWdmVersionAvailable @407
  IoQueryDeviceDescription @413
  IoRegisterDriverReinitialization @427
  IoRegisterFileSystem @428
  IoRegisterShutdownNotification @432
  IoReportResourceUsage @441
  IoSetThreadHardErrorMode @457
  IoStartTimer @462
  IoUnregisterFileSystem @468
  IoUnregisterShutdownNotification @471
  IoWMIRegistrationControl @486
  KdDebuggerEnabled @496 DATA
  Ke386IoSetAccessProcess @504
  Ke386SetIoAccessMap @506
  KeGetCurrentThread @530
  KeInitializeDpc @546
  KeInitializeEvent @547
  KeInitializeMutex @550
  KeInitializeSemaphore @552
  KeInitializeSpinLock @553
  KeInitializeTimer @554
  KeInitializeTimerEx @555
  KeQueryActiveProcessors @570
  KeQueryInterruptTime @571
  KeQuerySystemTime @574
  KeQueryTickCount @575
  KeQueryTimeIncrement @576
  KeReleaseMutex @588
  KeReleaseSemaphore @589
  KeResetEvent @598
  KeServiceDescriptorTable @604 DATA
  KeSetEvent @608
  KeSetPriorityThread @613
  KeTickCount @623 DATA
  KeWaitForMutexObject @629
  KeWaitForSingleObject @630
  LdrAccessResource=ntdll.LdrAccessResource @638
  LdrFindResourceDirectory_U=ntdll.LdrFindResourceDirectory_U @640
  LdrFindResource_U=ntdll.LdrFindResource_U @641
  MmAllocateContiguousMemory @656
  MmAllocateContiguousMemorySpecifyCache @657
  MmAllocateNonCachedMemory @659
  MmAllocatePagesForMdl @660
  MmFreeNonCachedMemory @672
  MmGetSystemRoutineAddress @676
  MmIsAddressValid @680
  MmMapIoSpace @689
  MmPageEntireDriver @701
  MmQuerySystemSize @707
  MmResetDriverPaging @709
  MmUnmapIoSpace @719
  NlsAnsiCodePage=ntdll.NlsAnsiCodePage @728 DATA
  NlsMbCodePageTag=ntdll.NlsMbCodePageTag @730 DATA
  NlsMbOemCodePageTag=ntdll.NlsMbOemCodePageTag @731 DATA
  NtAddAtom=ntdll.NtAddAtom @734
  NtAdjustPrivilegesToken=ntdll.NtAdjustPrivilegesToken @735
  NtAllocateLocallyUniqueId=ntdll.NtAllocateLocallyUniqueId @736
  NtAllocateUuids=ntdll.NtAllocateUuids @737
  NtAllocateVirtualMemory=ntdll.NtAllocateVirtualMemory @738
  NtClose=ntdll.NtClose @740
  NtConnectPort=ntdll.NtConnectPort @741
  NtCreateEvent=ntdll.NtCreateEvent @742
  NtCreateFile=ntdll.NtCreateFile @743
  NtCreateSection=ntdll.NtCreateSection @744
  NtDeleteAtom=ntdll.NtDeleteAtom @745
  NtDeleteFile=ntdll.NtDeleteFile @746
  NtDeviceIoControlFile=ntdll.NtDeviceIoControlFile @747
  NtDuplicateObject=ntdll.NtDuplicateObject @748
  NtDuplicateToken=ntdll.NtDuplicateToken @749
  NtFindAtom=ntdll.NtFindAtom @750
  NtFreeVirtualMemory=ntdll.NtFreeVirtualMemory @751
  NtFsControlFile=ntdll.NtFsControlFile @752
  NtLockFile=ntdll.NtLockFile @754
  NtMapViewOfSection=ntdll.NtMapViewOfSection @756
  NtNotifyChangeDirectoryFile=ntdll.NtNotifyChangeDirectoryFile @757
  NtOpenFile=ntdll.NtOpenFile @758
  NtOpenProcess=ntdll.NtOpenProcess @759
  NtOpenProcessToken=ntdll.NtOpenProcessToken @760
  NtOpenProcessTokenEx=ntdll.NtOpenProcessTokenEx @761
  NtOpenThread=ntdll.NtOpenThread @762
  NtOpenThreadToken=ntdll.NtOpenThreadToken @763
  NtOpenThreadTokenEx=ntdll.NtOpenThreadTokenEx @764
  NtQueryDirectoryFile=ntdll.NtQueryDirectoryFile @765
  NtQueryEaFile=ntdll.NtQueryEaFile @766
  NtQueryInformationAtom=ntdll.NtQueryInformationAtom @767
  NtQueryInformationFile=ntdll.NtQueryInformationFile @768
  NtQueryInformationProcess=ntdll.NtQueryInformationProcess @769
  NtQueryInformationThread=ntdll.NtQueryInformationThread @770
  NtQueryInformationToken=ntdll.NtQueryInformationToken @771
  NtQuerySecurityObject=ntdll.NtQuerySecurityObject @773
  NtQuerySystemInformation=ntdll.NtQuerySystemInformation @774
  NtQueryVolumeInformationFile=ntdll.NtQueryVolumeInformationFile @775
  NtReadFile=ntdll.NtReadFile @776
  NtRequestWaitReplyPort=ntdll.NtRequestWaitReplyPort @778
  NtSetEaFile=ntdll.NtSetEaFile @779
  NtSetEvent=ntdll.NtSetEvent @780
  NtSetInformationFile=ntdll.NtSetInformationFile @781
  NtSetInformationProcess=ntdll.NtSetInformationProcess @782
  NtSetInformationThread=ntdll.NtSetInformationThread @783
  NtSetSecurityObject=ntdll.NtSetSecurityObject @785
  NtSetVolumeInformationFile=ntdll.NtSetVolumeInformationFile @786
  NtShutdownSystem=ntdll.NtShutdownSystem @787
  NtUnlockFile=ntdll.NtUnlockFile @789
  NtWaitForSingleObject=ntdll.NtWaitForSingleObject @791
  NtWriteFile=ntdll.NtWriteFile @792
  ObReferenceObjectByHandle @810
  ObReferenceObjectByName @811
  PoSetPowerState @831
  PsCreateSystemThread @844
  PsGetCurrentProcess=IoGetCurrentProcess @850
  PsGetCurrentProcessId @851
  PsGetCurrentThread=KeGetCurrentThread @853
  PsGetCurrentThreadId @854
  PsGetVersion @885
  PsLookupProcessByProcessId @893
  PsSetCreateProcessNotifyRoutine @908
  PsSetCreateThreadNotifyRoutine @909
  PsSetLoadImageNotifyRoutine @912
  PsTerminateSystemThread @920
  READ_REGISTER_BUFFER_UCHAR @922
  RtlAbsoluteToSelfRelativeSD=ntdll.RtlAbsoluteToSelfRelativeSD @928
  RtlAddAccessAllowedAce=ntdll.RtlAddAccessAllowedAce @929
  RtlAddAccessAllowedAceEx=ntdll.RtlAddAccessAllowedAceEx @930
  RtlAddAce=ntdll.RtlAddAce @931
  RtlAddAtomToAtomTable=ntdll.RtlAddAtomToAtomTable @932
  RtlAllocateHeap=ntdll.RtlAllocateHeap @934
  RtlAnsiCharToUnicodeChar=ntdll.RtlAnsiCharToUnicodeChar @935
  RtlAnsiStringToUnicodeSize=ntdll.RtlAnsiStringToUnicodeSize @936
  RtlAnsiStringToUnicodeString=ntdll.RtlAnsiStringToUnicodeString @937
  RtlAppendAsciizToString=ntdll.RtlAppendAsciizToString @938
  RtlAppendStringToString=ntdll.RtlAppendStringToString @939
  RtlAppendUnicodeStringToString=ntdll.RtlAppendUnicodeStringToString @940
  RtlAppendUnicodeToString=ntdll.RtlAppendUnicodeToString @941
  RtlAreAllAccessesGranted=ntdll.RtlAreAllAccessesGranted @942
  RtlAreAnyAccessesGranted=ntdll.RtlAreAnyAccessesGranted @943
  RtlAreBitsClear=ntdll.RtlAreBitsClear @944
  RtlAreBitsSet=ntdll.RtlAreBitsSet @945
  RtlAssert=ntdll.RtlAssert @946
  RtlCaptureContext=ntdll.RtlCaptureContext @947
  RtlCaptureStackBackTrace=ntdll.RtlCaptureStackBackTrace @948
  RtlCharToInteger=ntdll.RtlCharToInteger @949
  RtlCheckRegistryKey=ntdll.RtlCheckRegistryKey @950
  RtlClearAllBits=ntdll.RtlClearAllBits @951
  RtlClearBits=ntdll.RtlClearBits @953
  RtlCompareMemory=ntdll.RtlCompareMemory @954
  RtlCompareMemoryUlong=ntdll.RtlCompareMemoryUlong @955
  RtlCompareString=ntdll.RtlCompareString @956
  RtlCompareUnicodeString=ntdll.RtlCompareUnicodeString @957
  RtlCompressBuffer=ntdll.RtlCompressBuffer @958
  RtlConvertLongToLargeInteger=ntdll.RtlConvertLongToLargeInteger @960
  RtlConvertSidToUnicodeString=ntdll.RtlConvertSidToUnicodeString @961
  RtlConvertUlongToLargeInteger=ntdll.RtlConvertUlongToLargeInteger @962
  RtlCopyLuid=ntdll.RtlCopyLuid @963
  RtlCopySid=ntdll.RtlCopySid @965
  RtlCopyString=ntdll.RtlCopyString @966
  RtlCopyUnicodeString=ntdll.RtlCopyUnicodeString @967
  RtlCreateAcl=ntdll.RtlCreateAcl @968
  RtlCreateAtomTable=ntdll.RtlCreateAtomTable @969
  RtlCreateHeap=ntdll.RtlCreateHeap @970
  RtlCreateSecurityDescriptor=ntdll.RtlCreateSecurityDescriptor @972
  RtlCreateUnicodeString=ntdll.RtlCreateUnicodeString @974
  RtlDecompressBuffer=ntdll.RtlDecompressBuffer @976
  RtlDeleteAce=ntdll.RtlDeleteAce @980
  RtlDeleteAtomFromAtomTable=ntdll.RtlDeleteAtomFromAtomTable @981
  RtlDeleteRegistryValue=ntdll.RtlDeleteRegistryValue @987
  RtlDestroyAtomTable=ntdll.RtlDestroyAtomTable @989
  RtlDestroyHeap=ntdll.RtlDestroyHeap @990
  RtlDowncaseUnicodeString=ntdll.RtlDowncaseUnicodeString @991
  RtlEmptyAtomTable=ntdll.RtlEmptyAtomTable @992
  RtlEnlargedIntegerMultiply=ntdll.RtlEnlargedIntegerMultiply @993
  RtlEnlargedUnsignedDivide=ntdll.RtlEnlargedUnsignedDivide @994
  RtlEnlargedUnsignedMultiply=ntdll.RtlEnlargedUnsignedMultiply @995
  RtlEnumerateGenericTableWithoutSplaying=ntdll.RtlEnumerateGenericTableWithoutSplaying @999
  RtlEqualLuid=ntdll.RtlEqualLuid @1001
  RtlEqualSid=ntdll.RtlEqualSid @1002
  RtlEqualString=ntdll.RtlEqualString @1003
  RtlEqualUnicodeString=ntdll.RtlEqualUnicodeString @1004
  RtlExtendedIntegerMultiply=ntdll.RtlExtendedIntegerMultiply @1005
  RtlExtendedLargeIntegerDivide=ntdll.RtlExtendedLargeIntegerDivide @1006
  RtlExtendedMagicDivide=ntdll.RtlExtendedMagicDivide @1007
  RtlFillMemory=ntdll.RtlFillMemory @1008
  RtlFillMemoryUlong=ntdll.RtlFillMemoryUlong @1009
  RtlFindClearBits=ntdll.RtlFindClearBits @1010
  RtlFindClearBitsAndSet=ntdll.RtlFindClearBitsAndSet @1011
  RtlFindClearRuns=ntdll.RtlFindClearRuns @1012
  RtlFindLastBackwardRunClear=ntdll.RtlFindLastBackwardRunClear @1014
  RtlFindLeastSignificantBit=ntdll.RtlFindLeastSignificantBit @1015
  RtlFindLongestRunClear=ntdll.RtlFindLongestRunClear @1016
  RtlFindMessage=ntdll.RtlFindMessage @1017
  RtlFindMostSignificantBit=ntdll.RtlFindMostSignificantBit @1018
  RtlFindNextForwardRunClear=ntdll.RtlFindNextForwardRunClear @1019
  RtlFindSetBits=ntdll.RtlFindSetBits @1021
  RtlFindSetBitsAndClear=ntdll.RtlFindSetBitsAndClear @1022
  RtlFormatCurrentUserKeyPath=ntdll.RtlFormatCurrentUserKeyPath @1024
  RtlFreeAnsiString=ntdll.RtlFreeAnsiString @1025
  RtlFreeHeap=ntdll.RtlFreeHeap @1026
  RtlFreeOemString=ntdll.RtlFreeOemString @1027
  RtlFreeUnicodeString=ntdll.RtlFreeUnicodeString @1029
  RtlGUIDFromString=ntdll.RtlGUIDFromString @1030
  RtlGetAce=ntdll.RtlGetAce @1032
  RtlGetCompressionWorkSpaceSize=ntdll.RtlGetCompressionWorkSpaceSize @1034
  RtlGetDaclSecurityDescriptor=ntdll.RtlGetDaclSecurityDescriptor @1035
  RtlGetGroupSecurityDescriptor=ntdll.RtlGetGroupSecurityDescriptor @1040
  RtlGetNtGlobalFlags=ntdll.RtlGetNtGlobalFlags @1042
  RtlGetOwnerSecurityDescriptor=ntdll.RtlGetOwnerSecurityDescriptor @1043
  RtlGetSaclSecurityDescriptor=ntdll.RtlGetSaclSecurityDescriptor @1044
  RtlGetVersion=ntdll.RtlGetVersion @1046
  RtlImageDirectoryEntryToData=ntdll.RtlImageDirectoryEntryToData @1048
  RtlImageNtHeader=ntdll.RtlImageNtHeader @1049
  RtlInitAnsiString=ntdll.RtlInitAnsiString @1050
  RtlInitString=ntdll.RtlInitString @1052
  RtlInitUnicodeString=ntdll.RtlInitUnicodeString @1053
  RtlInitializeBitMap=ntdll.RtlInitializeBitMap @1054
  RtlInitializeGenericTable=ntdll.RtlInitializeGenericTable @1055
  RtlInitializeSid=ntdll.RtlInitializeSid @1058
  RtlInt64ToUnicodeString=ntdll.RtlInt64ToUnicodeString @1065
  RtlIntegerToChar=ntdll.RtlIntegerToChar @1066
  RtlIntegerToUnicodeString=ntdll.RtlIntegerToUnicodeString @1068
  RtlIpv4AddressToStringA=ntdll.RtlIpv4AddressToStringA @1070
  RtlIpv4AddressToStringExA=ntdll.RtlIpv4AddressToStringExA @1071
  RtlIpv4AddressToStringExW=ntdll.RtlIpv4AddressToStringExW @1072
  RtlIpv4AddressToStringW=ntdll.RtlIpv4AddressToStringW @1073
  RtlIpv4StringToAddressExW=ntdll.RtlIpv4StringToAddressExW @1076
  RtlIsNameLegalDOS8Dot3=ntdll.RtlIsNameLegalDOS8Dot3 @1088
  RtlLargeIntegerAdd=ntdll.RtlLargeIntegerAdd @1091
  RtlLargeIntegerArithmeticShift=ntdll.RtlLargeIntegerArithmeticShift @1092
  RtlLargeIntegerDivide=ntdll.RtlLargeIntegerDivide @1093
  RtlLargeIntegerNegate=ntdll.RtlLargeIntegerNegate @1094
  RtlLargeIntegerShiftLeft=ntdll.RtlLargeIntegerShiftLeft @1095
  RtlLargeIntegerShiftRight=ntdll.RtlLargeIntegerShiftRight @1096
  RtlLargeIntegerSubtract=ntdll.RtlLargeIntegerSubtract @1097
  RtlLengthRequiredSid=ntdll.RtlLengthRequiredSid @1098
  RtlLengthSecurityDescriptor=ntdll.RtlLengthSecurityDescriptor @1099
  RtlLengthSid=ntdll.RtlLengthSid @1100
  RtlLookupAtomInAtomTable=ntdll.RtlLookupAtomInAtomTable @1102
  RtlMapGenericMask=ntdll.RtlMapGenericMask @1107
  RtlMoveMemory=ntdll.RtlMoveMemory @1110
  RtlMultiByteToUnicodeN=ntdll.RtlMultiByteToUnicodeN @1111
  RtlMultiByteToUnicodeSize=ntdll.RtlMultiByteToUnicodeSize @1112
  RtlNtStatusToDosError=ntdll.RtlNtStatusToDosError @1114
  RtlNtStatusToDosErrorNoTeb=ntdll.RtlNtStatusToDosErrorNoTeb @1115
  RtlNumberGenericTableElements=ntdll.RtlNumberGenericTableElements @1116
  RtlNumberOfClearBits=ntdll.RtlNumberOfClearBits @1118
  RtlNumberOfSetBits=ntdll.RtlNumberOfSetBits @1119
  RtlOemStringToUnicodeSize=ntdll.RtlOemStringToUnicodeSize @1121
  RtlOemStringToUnicodeString=ntdll.RtlOemStringToUnicodeString @1122
  RtlOemToUnicodeN=ntdll.RtlOemToUnicodeN @1123
  RtlPinAtomInAtomTable=ntdll.RtlPinAtomInAtomTable @1124
  RtlPrefixString=ntdll.RtlPrefixString @1125
  RtlPrefixUnicodeString=ntdll.RtlPrefixUnicodeString @1126
  RtlQueryAtomInAtomTable=ntdll.RtlQueryAtomInAtomTable @1127
  RtlQueryRegistryValues=ntdll.RtlQueryRegistryValues @1128
  RtlQueryTimeZoneInformation=ntdll.RtlQueryTimeZoneInformation @1129
  RtlRaiseException=ntdll.RtlRaiseException @1130
  RtlRandom=ntdll.RtlRandom @1131
  RtlSecondsSince1970ToTime=ntdll.RtlSecondsSince1970ToTime @1137
  RtlSecondsSince1980ToTime=ntdll.RtlSecondsSince1980ToTime @1138
  RtlSelfRelativeToAbsoluteSD=ntdll.RtlSelfRelativeToAbsoluteSD @1140
  RtlSetAllBits=ntdll.RtlSetAllBits @1141
  RtlSetBits=ntdll.RtlSetBits @1143
  RtlSetDaclSecurityDescriptor=ntdll.RtlSetDaclSecurityDescriptor @1144
  RtlSetGroupSecurityDescriptor=ntdll.RtlSetGroupSecurityDescriptor @1145
  RtlSetOwnerSecurityDescriptor=ntdll.RtlSetOwnerSecurityDescriptor @1146
  RtlSetSaclSecurityDescriptor=ntdll.RtlSetSaclSecurityDescriptor @1147
  RtlSetTimeZoneInformation=ntdll.RtlSetTimeZoneInformation @1148
  RtlSizeHeap=ntdll.RtlSizeHeap @1149
  RtlStringFromGUID=ntdll.RtlStringFromGUID @1151
  RtlSubAuthorityCountSid=ntdll.RtlSubAuthorityCountSid @1152
  RtlSubAuthoritySid=ntdll.RtlSubAuthoritySid @1153
  RtlTimeFieldsToTime=ntdll.RtlTimeFieldsToTime @1157
  RtlTimeToElapsedTimeFields=ntdll.RtlTimeToElapsedTimeFields @1158
  RtlTimeToSecondsSince1970=ntdll.RtlTimeToSecondsSince1970 @1159
  RtlTimeToSecondsSince1980=ntdll.RtlTimeToSecondsSince1980 @1160
  RtlTimeToTimeFields=ntdll.RtlTimeToTimeFields @1161
  RtlUnicodeStringToAnsiSize=ntdll.RtlUnicodeStringToAnsiSize @1170
  RtlUnicodeStringToAnsiString=ntdll.RtlUnicodeStringToAnsiString @1171
  RtlUnicodeStringToInteger=ntdll.RtlUnicodeStringToInteger @1173
  RtlUnicodeStringToOemSize=ntdll.RtlUnicodeStringToOemSize @1174
  RtlUnicodeStringToOemString=ntdll.RtlUnicodeStringToOemString @1175
  RtlUnicodeToMultiByteN=ntdll.RtlUnicodeToMultiByteN @1177
  RtlUnicodeToMultiByteSize=ntdll.RtlUnicodeToMultiByteSize @1178
  RtlUnicodeToOemN=ntdll.RtlUnicodeToOemN @1179
  RtlUnwind=ntdll.RtlUnwind @1181
  RtlUpcaseUnicodeChar=ntdll.RtlUpcaseUnicodeChar @1182
  RtlUpcaseUnicodeString=ntdll.RtlUpcaseUnicodeString @1183
  RtlUpcaseUnicodeStringToAnsiString=ntdll.RtlUpcaseUnicodeStringToAnsiString @1184
  RtlUpcaseUnicodeStringToCountedOemString=ntdll.RtlUpcaseUnicodeStringToCountedOemString @1185
  RtlUpcaseUnicodeStringToOemString=ntdll.RtlUpcaseUnicodeStringToOemString @1186
  RtlUpcaseUnicodeToMultiByteN=ntdll.RtlUpcaseUnicodeToMultiByteN @1188
  RtlUpcaseUnicodeToOemN=ntdll.RtlUpcaseUnicodeToOemN @1189
  RtlUpperChar=ntdll.RtlUpperChar @1190
  RtlUpperString=ntdll.RtlUpperString @1191
  RtlValidSecurityDescriptor=ntdll.RtlValidSecurityDescriptor @1193
  RtlValidSid=ntdll.RtlValidSid @1194
  RtlVerifyVersionInfo=ntdll.RtlVerifyVersionInfo @1195
  RtlWriteRegistryValue=ntdll.RtlWriteRegistryValue @1198
  RtlZeroMemory=ntdll.RtlZeroMemory @1200
  RtlxAnsiStringToUnicodeSize=ntdll.RtlxAnsiStringToUnicodeSize @1201
  RtlxOemStringToUnicodeSize=ntdll.RtlxOemStringToUnicodeSize @1202
  RtlxUnicodeStringToAnsiSize=ntdll.RtlxUnicodeStringToAnsiSize @1203
  RtlxUnicodeStringToOemSize=ntdll.RtlxUnicodeStringToOemSize @1204
  VerSetConditionMask=ntdll.VerSetConditionMask @1257
  ZwAccessCheckAndAuditAlarm=ntdll.ZwAccessCheckAndAuditAlarm @1277
  ZwAdjustPrivilegesToken=ntdll.ZwAdjustPrivilegesToken @1279
  ZwAlertThread=ntdll.ZwAlertThread @1280
  ZwAllocateVirtualMemory=ntdll.ZwAllocateVirtualMemory @1281
  ZwAssignProcessToJobObject=ntdll.ZwAssignProcessToJobObject @1282
  ZwCancelIoFile=ntdll.ZwCancelIoFile @1283
  ZwCancelTimer=ntdll.ZwCancelTimer @1284
  ZwClearEvent=ntdll.ZwClearEvent @1285
  ZwClose=ntdll.ZwClose @1286
  ZwConnectPort=ntdll.ZwConnectPort @1288
  ZwCreateDirectoryObject=ntdll.ZwCreateDirectoryObject @1289
  ZwCreateEvent=ntdll.ZwCreateEvent @1290
  ZwCreateFile=ntdll.ZwCreateFile @1291
  ZwCreateJobObject=ntdll.ZwCreateJobObject @1292
  ZwCreateKey=ntdll.ZwCreateKey @1293
  ZwCreateSection=ntdll.ZwCreateSection @1294
  ZwCreateSymbolicLinkObject=ntdll.ZwCreateSymbolicLinkObject @1295
  ZwCreateTimer=ntdll.ZwCreateTimer @1296
  ZwDeleteFile=ntdll.ZwDeleteFile @1298
  ZwDeleteKey=ntdll.ZwDeleteKey @1299
  ZwDeleteValueKey=ntdll.ZwDeleteValueKey @1300
  ZwDeviceIoControlFile=ntdll.ZwDeviceIoControlFile @1301
  ZwDisplayString=ntdll.ZwDisplayString @1302
  ZwDuplicateObject=ntdll.ZwDuplicateObject @1303
  ZwDuplicateToken=ntdll.ZwDuplicateToken @1304
  ZwEnumerateKey=ntdll.ZwEnumerateKey @1306
  ZwEnumerateValueKey=ntdll.ZwEnumerateValueKey @1307
  ZwFlushInstructionCache=ntdll.ZwFlushInstructionCache @1308
  ZwFlushKey=ntdll.ZwFlushKey @1309
  ZwFlushVirtualMemory=ntdll.ZwFlushVirtualMemory @1310
  ZwFreeVirtualMemory=ntdll.ZwFreeVirtualMemory @1311
  ZwFsControlFile=ntdll.ZwFsControlFile @1312
  ZwInitiatePowerAction=ntdll.ZwInitiatePowerAction @1313
  ZwIsProcessInJob=ntdll.ZwIsProcessInJob @1314
  ZwLoadDriver=ntdll.ZwLoadDriver @1315
  ZwLoadKey=ntdll.ZwLoadKey @1316
  ZwMakeTemporaryObject=ntdll.ZwMakeTemporaryObject @1317
  ZwMapViewOfSection=ntdll.ZwMapViewOfSection @1318
  ZwNotifyChangeKey=ntdll.ZwNotifyChangeKey @1319
  ZwOpenDirectoryObject=ntdll.ZwOpenDirectoryObject @1320
  ZwOpenEvent=ntdll.ZwOpenEvent @1321
  ZwOpenFile=ntdll.ZwOpenFile @1322
  ZwOpenJobObject=ntdll.ZwOpenJobObject @1323
  ZwOpenKey=ntdll.ZwOpenKey @1324
  ZwOpenProcess=ntdll.ZwOpenProcess @1325
  ZwOpenProcessToken=ntdll.ZwOpenProcessToken @1326
  ZwOpenProcessTokenEx=ntdll.ZwOpenProcessTokenEx @1327
  ZwOpenSection=ntdll.ZwOpenSection @1328
  ZwOpenSymbolicLinkObject=ntdll.ZwOpenSymbolicLinkObject @1329
  ZwOpenThread=ntdll.ZwOpenThread @1330
  ZwOpenThreadToken=ntdll.ZwOpenThreadToken @1331
  ZwOpenThreadTokenEx=ntdll.ZwOpenThreadTokenEx @1332
  ZwOpenTimer=ntdll.ZwOpenTimer @1333
  ZwPowerInformation=ntdll.ZwPowerInformation @1334
  ZwPulseEvent=ntdll.ZwPulseEvent @1335
  ZwQueryDefaultLocale=ntdll.ZwQueryDefaultLocale @1338
  ZwQueryDefaultUILanguage=ntdll.ZwQueryDefaultUILanguage @1339
  ZwQueryDirectoryFile=ntdll.ZwQueryDirectoryFile @1340
  ZwQueryDirectoryObject=ntdll.ZwQueryDirectoryObject @1341
  ZwQueryEaFile=ntdll.ZwQueryEaFile @1342
  ZwQueryFullAttributesFile=ntdll.ZwQueryFullAttributesFile @1343
  ZwQueryInformationFile=ntdll.ZwQueryInformationFile @1344
  ZwQueryInformationJobObject=ntdll.ZwQueryInformationJobObject @1345
  ZwQueryInformationProcess=ntdll.ZwQueryInformationProcess @1346
  ZwQueryInformationThread=ntdll.ZwQueryInformationThread @1347
  ZwQueryInformationToken=ntdll.ZwQueryInformationToken @1348
  ZwQueryInstallUILanguage=ntdll.ZwQueryInstallUILanguage @1349
  ZwQueryKey=ntdll.ZwQueryKey @1350
  ZwQueryObject=ntdll.ZwQueryObject @1351
  ZwQuerySection=ntdll.ZwQuerySection @1352
  ZwQuerySecurityObject=ntdll.ZwQuerySecurityObject @1353
  ZwQuerySymbolicLinkObject=ntdll.ZwQuerySymbolicLinkObject @1354
  ZwQuerySystemInformation=ntdll.ZwQuerySystemInformation @1355
  ZwQueryValueKey=ntdll.ZwQueryValueKey @1356
  ZwQueryVolumeInformationFile=ntdll.ZwQueryVolumeInformationFile @1357
  ZwReadFile=ntdll.ZwReadFile @1358
  ZwReplaceKey=ntdll.ZwReplaceKey @1359
  ZwRequestWaitReplyPort=ntdll.ZwRequestWaitReplyPort @1360
  ZwResetEvent=ntdll.ZwResetEvent @1361
  ZwRestoreKey=ntdll.ZwRestoreKey @1362
  ZwSaveKey=ntdll.ZwSaveKey @1363
  ZwSetDefaultLocale=ntdll.ZwSetDefaultLocale @1367
  ZwSetDefaultUILanguage=ntdll.ZwSetDefaultUILanguage @1368
  ZwSetEaFile=ntdll.ZwSetEaFile @1369
  ZwSetEvent=ntdll.ZwSetEvent @1370
  ZwSetInformationFile=ntdll.ZwSetInformationFile @1371
  ZwSetInformationJobObject=ntdll.ZwSetInformationJobObject @1372
  ZwSetInformationObject=ntdll.ZwSetInformationObject @1373
  ZwSetInformationProcess=ntdll.ZwSetInformationProcess @1374
  ZwSetInformationThread=ntdll.ZwSetInformationThread @1375
  ZwSetSecurityObject=ntdll.ZwSetSecurityObject @1376
  ZwSetSystemInformation=ntdll.ZwSetSystemInformation @1377
  ZwSetSystemTime=ntdll.ZwSetSystemTime @1378
  ZwSetTimer=ntdll.ZwSetTimer @1379
  ZwSetValueKey=ntdll.ZwSetValueKey @1380
  ZwSetVolumeInformationFile=ntdll.ZwSetVolumeInformationFile @1381
  ZwTerminateJobObject=ntdll.ZwTerminateJobObject @1382
  ZwTerminateProcess=ntdll.ZwTerminateProcess @1383
  ZwUnloadDriver=ntdll.ZwUnloadDriver @1385
  ZwUnloadKey=ntdll.ZwUnloadKey @1386
  ZwUnmapViewOfSection=ntdll.ZwUnmapViewOfSection @1387
  ZwWaitForMultipleObjects=ntdll.ZwWaitForMultipleObjects @1388
  ZwWaitForSingleObject=ntdll.ZwWaitForSingleObject @1389
  ZwWriteFile=ntdll.ZwWriteFile @1390
  ZwYieldExecution=ntdll.ZwYieldExecution @1391
  _CIcos=msvcrt._CIcos @1392 PRIVATE
  _CIsin=msvcrt._CIsin @1393 PRIVATE
  _CIsqrt=msvcrt._CIsqrt @1394 PRIVATE
  _abnormal_termination=msvcrt._abnormal_termination @1395 PRIVATE
  _alldiv=ntdll._alldiv @1396 PRIVATE
  _allmul=ntdll._allmul @1398 PRIVATE
  _allrem=ntdll._allrem @1399 PRIVATE
  _aulldiv=ntdll._aulldiv @1402 PRIVATE
  _aullrem=ntdll._aullrem @1404 PRIVATE
  _itoa=msvcrt._itoa @1406 PRIVATE
  _itow=msvcrt._itow @1407 PRIVATE
  _local_unwind=msvcrt._local_unwind @1408 PRIVATE
  _purecall=msvcrt._purecall @1409 PRIVATE
  _snprintf=msvcrt._snprintf @1410 PRIVATE
  _snwprintf=msvcrt._snwprintf @1411 PRIVATE
  _stricmp=msvcrt._stricmp @1412 PRIVATE
  _strlwr=msvcrt._strlwr @1413 PRIVATE
  _strnicmp=msvcrt._strnicmp @1414 PRIVATE
  _strnset=msvcrt._strnset @1415 PRIVATE
  _strrev=msvcrt._strrev @1416 PRIVATE
  _strset=msvcrt._strset @1417 PRIVATE
  _strupr=msvcrt._strupr @1418 PRIVATE
  _vsnprintf=msvcrt._vsnprintf @1419 PRIVATE
  _vsnwprintf=msvcrt._vsnwprintf @1420 PRIVATE
  _wcsicmp=msvcrt._wcsicmp @1421 PRIVATE
  _wcslwr=msvcrt._wcslwr @1422 PRIVATE
  _wcsnicmp=msvcrt._wcsnicmp @1423 PRIVATE
  _wcsnset=msvcrt._wcsnset @1424 PRIVATE
  _wcsrev=msvcrt._wcsrev @1425 PRIVATE
  _wcsupr=msvcrt._wcsupr @1426 PRIVATE
  atoi=msvcrt.atoi @1427 PRIVATE
  atol=msvcrt.atol @1428 PRIVATE
  isdigit=msvcrt.isdigit @1429 PRIVATE
  islower=msvcrt.islower @1430 PRIVATE
  isprint=msvcrt.isprint @1431 PRIVATE
  isspace=msvcrt.isspace @1432 PRIVATE
  isupper=msvcrt.isupper @1433 PRIVATE
  isxdigit=msvcrt.isxdigit @1434 PRIVATE
  mbstowcs=msvcrt.mbstowcs @1435 PRIVATE
  mbtowc=msvcrt.mbtowc @1436 PRIVATE
  memchr=msvcrt.memchr @1437 PRIVATE
  memcpy=msvcrt.memcpy @1438 PRIVATE
  memmove=msvcrt.memmove @1439 PRIVATE
  memset=msvcrt.memset @1440 PRIVATE
  qsort=msvcrt.qsort @1441 PRIVATE
  rand=msvcrt.rand @1442 PRIVATE
  sprintf=msvcrt.sprintf @1443 PRIVATE
  srand=msvcrt.srand @1444 PRIVATE
  strcat=msvcrt.strcat @1445 PRIVATE
  strchr=msvcrt.strchr @1446 PRIVATE
  strcmp=msvcrt.strcmp @1447 PRIVATE
  strcpy=msvcrt.strcpy @1448 PRIVATE
  strlen=msvcrt.strlen @1449 PRIVATE
  strncat=msvcrt.strncat @1450 PRIVATE
  strncmp=msvcrt.strncmp @1451 PRIVATE
  strncpy=msvcrt.strncpy @1452 PRIVATE
  strrchr=msvcrt.strrchr @1453 PRIVATE
  strspn=msvcrt.strspn @1454 PRIVATE
  strstr=msvcrt.strstr @1455 PRIVATE
  swprintf=msvcrt.swprintf @1456 PRIVATE
  tolower=msvcrt.tolower @1457 PRIVATE
  toupper=msvcrt.toupper @1458 PRIVATE
  towlower=msvcrt.towlower @1459 PRIVATE
  towupper=msvcrt.towupper @1460 PRIVATE
  vDbgPrintEx=ntdll.vDbgPrintEx @1461
  vDbgPrintExWithPrefix=ntdll.vDbgPrintExWithPrefix @1462
  vsprintf=msvcrt.vsprintf @1463 PRIVATE
  wcscat=msvcrt.wcscat @1464 PRIVATE
  wcschr=msvcrt.wcschr @1465 PRIVATE
  wcscmp=msvcrt.wcscmp @1466 PRIVATE
  wcscpy=msvcrt.wcscpy @1467 PRIVATE
  wcscspn=msvcrt.wcscspn @1468 PRIVATE
  wcslen=msvcrt.wcslen @1469 PRIVATE
  wcsncat=msvcrt.wcsncat @1470 PRIVATE
  wcsncmp=msvcrt.wcsncmp @1471 PRIVATE
  wcsncpy=msvcrt.wcsncpy @1472 PRIVATE
  wcsrchr=msvcrt.wcsrchr @1473 PRIVATE
  wcsspn=msvcrt.wcsspn @1474 PRIVATE
  wcsstr=msvcrt.wcsstr @1475 PRIVATE
  wcstombs=msvcrt.wcstombs @1476 PRIVATE
  wctomb=msvcrt.wctomb @1477 PRIVATE
  wine_ntoskrnl_main_loop @1478