ntoskrnl.exe KeInitializeSpinLock
ntoskrnl.exe RtlOemStringToCountedUnicodeString
ntoskrnl.exe FsRtlIsFatDbcsLegal pass
-ntoskrnl.exe RtlUnicodeStringToCountedOemString
+ntoskrnl.exe RtlUnicodeStringToCountedOemString pass
+ntoskrnl.exe RtlUnicodeToOemN
ntoskrnl.exe RtlFreeOemString
ntoskrnl.exe NlsOemLeadByteInfo
ntoskrnl.exe NlsMbOemCodePageTag
ntoskrnl.exe RtlUnicodeStringToOemString
-ntoskrnl.exe RtlGenerate8dot3Name
+ntoskrnl.exe RtlGenerate8dot3Name pass
ntoskrnl.exe RtlCompareMemory
ntoskrnl.exe RtlDelete pass
ntoskrnl.exe RtlSplay pass
ntoskrnl.exe RtlLookupElementGenericTable pass
ntoskrnl.exe RtlLookupElementGenericTableFull pass
ntoskrnl.exe RtlEnumerateGenericTableWithoutSplaying pass
-ntoskrnl.exe RtlInitializeGenericTable pass
+ntoskrnl.exe RtlInitializeGenericTable pass # 'pass'=>Arguments MUST be stdcall even if in .so file!
ntoskrnl.exe FsRtlNotifyInitializeSync
ntoskrnl.exe FsRtlTeardownPerStreamContexts
ntoskrnl.exe RtlDeleteElementGenericTable pass
ntoskrnl.exe FsRtlFreeFileLock undef
ntoskrnl.exe IoVerifyVolume undef
ntoskrnl.exe _allshr
+ntoskrnl.exe _aullshr
ntoskrnl.exe ExQueueWorkItem undef
ntoskrnl.exe _except_handler3 undef
ntoskrnl.exe _allshl
ntoskrnl.exe FsRtlPostStackOverflow undef
ntoskrnl.exe IoBuildAsynchronousFsdRequest
ntoskrnl.exe IoCheckEaBufferValidity undef
-ntoskrnl.exe IoGetFileObjectGenericMapping undef
+ntoskrnl.exe IoGetFileObjectGenericMapping
ntoskrnl.exe IoIsSystemThread undef
ntoskrnl.exe IoRaiseInformationalHardError undef
ntoskrnl.exe KeDelayExecutionThread undef
ntoskrnl.exe ProbeForWrite undef
ntoskrnl.exe SeAccessCheck undef
ntoskrnl.exe SeFilterToken undef
-ntoskrnl.exe SeLockSubjectContext undef
+ntoskrnl.exe SeLockSubjectContext
ntoskrnl.exe SePrivilegeCheck undef
-ntoskrnl.exe SeReleaseSubjectContext undef
-ntoskrnl.exe SeUnlockSubjectContext undef
+ntoskrnl.exe SeReleaseSubjectContext
+ntoskrnl.exe SeUnlockSubjectContext
ntoskrnl.exe ZwQueryValueKey undef
ntoskrnl.exe _allrem
ntoskrnl.exe strncmp
ntoskrnl.exe ExInterlockedPushEntrySList
+ntoskrnl.exe SeCaptureSubjectContext
+ntoskrnl.exe RtlLengthRequiredSid
+ntoskrnl.exe RtlInitializeSid
+ntoskrnl.exe RtlSubAuthoritySid
+ntoskrnl.exe RtlCreateAcl
+ntoskrnl.exe RtlAddAccessAllowedAce
+ntoskrnl.exe RtlCreateSecurityDescriptor
+ntoskrnl.exe RtlSetDaclSecurityDescriptor
+ntoskrnl.exe SeAssignSecurity
+ntoskrnl.exe RtlLengthSecurityDescriptor
+ntoskrnl.exe SeValidSecurityDescriptor
+ntoskrnl.exe VerSetConditionMask pass
+ntoskrnl.exe RtlVerifyVersionInfo pass
+ntoskrnl.exe RtlGetVersion
+ntoskrnl.exe KeInitializeMutant pass
+ntoskrnl.exe IoRegisterDriverReinitialization
+ntoskrnl.exe PoQueueShutdownWorkItem
+
hal.dll KfReleaseSpinLock
hal.dll KeGetCurrentIrql
hal.dll ExAcquireFastMutex