1 ; $Id: ntoskrnl.def,v 1.186 2004/08/04 12:11:44 ekohl Exp $
3 ; reactos/ntoskrnl/ntoskrnl.def
5 ; ReactOS Operating System
8 CcRosInitializeFileCache@8
9 CcRosReleaseFileCache@4
13 CcGetFileObjectFromSectionPtrs@4
16 CcSetDirtyPinnedData@8
21 CmUnRegisterCallback@8
23 DbgBreakPointWithStatus@4
24 ;DbgLoadImageSymbols@12
28 @ExAcquireFastMutexUnsafe@4
29 ExAcquireResourceExclusive@8
30 ExAcquireResourceExclusiveLite@8
31 ExAcquireResourceSharedLite@8
32 ExAcquireSharedStarveExclusive@8
33 ExAcquireSharedWaitForExclusive@8
34 @ExAllocateFromPagedLookasideList@4
36 ExAllocatePoolWithQuota@8
37 ExAllocatePoolWithQuotaTag@12
38 ExAllocatePoolWithTag@12
39 ExConvertExclusiveToSharedLite@4
41 ExDeleteNPagedLookasideList@4
42 ExDeletePagedLookasideList@4
44 ExDeleteResourceLite@4
45 ExDesktopObjectType DATA
46 ExDisableResourceBoostLite@4
47 ExEventObjectType DATA
51 ExFreeToPagedLookasideList@8
52 ExGetExclusiveWaiterCount@4
54 ExGetSharedWaiterCount@4
55 ExInitializeNPagedLookasideList@28
56 ExInitializePagedLookasideList@28
57 ExInitializeResource@4
58 ExInitializeResourceLite@4
60 ExInterlockedAddLargeInteger@16
61 @ExInterlockedAddLargeStatistic@8
62 @ExInterlockedAddUlong@12
63 @ExInterlockedCompareExchange64@16
64 ExInterlockedDecrementLong@8
65 ExInterlockedExchangeUlong@12
66 ExInterlockedExtendZone@16
67 ExInterlockedIncrementLong@8
68 @ExInterlockedInsertHeadList@12
69 @ExInterlockedInsertTailList@12
70 @ExInterlockedPopEntryList@8
71 @ExInterlockedPopEntrySList@8
72 @ExInterlockedPushEntryList@12
73 @ExInterlockedPushEntrySList@12
74 @ExInterlockedRemoveHeadList@8
75 ExIsProcessorFeaturePresent@4
76 ExIsResourceAcquiredExclusiveLite@4
77 ExIsResourceAcquiredSharedLite@4
78 ExLocalTimeToSystemTime@8
83 ExRaiseAccessViolation@0
84 ExRaiseDatatypeMisalignment@0
89 ExReinitializeResourceLite@4
90 @ExReleaseFastMutexUnsafe@4
91 ExReleaseResourceForThread@8
92 ExReleaseResourceForThreadLite@8
93 @ExReleaseResourceLite@4
94 ExSetResourceOwnerPointer@8
95 ;ExSystemExceptionFilter
96 ExSystemTimeToLocalTime@8
97 ExTryToAcquireResourceExclusiveLite@4
98 ExUnregisterCallback@4
99 ExWindowStationObjectType DATA
100 ExInitializeBinaryTree@12
102 ExInsertBinaryTree@12
103 ExSearchBinaryTree@12
104 ExRemoveBinaryTree@12
105 ExTraverseBinaryTree@16
106 ExInitializeSplayTree@16
111 ExWeightOfSplayTree@8
112 ExTraverseSplayTree@16
113 ExInitializeHashTable@16
118 @ExfInterlockedAddUlong@12
119 @ExfInterlockedInsertHeadList@12
120 @ExfInterlockedInsertTailList@12
121 @ExfInterlockedPopEntryList@8
122 @ExfInterlockedPushEntryList@12
123 @ExfInterlockedRemoveHeadList@8
124 @Exfi386InterlockedDecrementLong@4
125 @Exfi386InterlockedExchangeUlong@8
126 @Exfi386InterlockedIncrementLong@4
127 Exi386InterlockedDecrementLong@4
128 Exi386InterlockedExchangeUlong@8
129 Exi386InterlockedIncrementLong@4
130 FsRtlAddLargeMcbEntry@28
132 FsRtlAddToTunnelCache@32
133 FsRtlAllocateFileLock@8
135 FsRtlAllocatePoolWithQuota@8
136 FsRtlAllocatePoolWithQuotaTag@12
137 FsRtlAllocatePoolWithTag@12
138 FsRtlAllocateResource@0
139 FsRtlAreNamesEqual@16
141 FsRtlCheckLockForReadAccess@8
142 FsRtlCheckLockForWriteAccess@8
146 FsRtlCurrentBatchOplock@4
147 FsRtlDeleteKeyFromTunnelCache@12
148 FsRtlDeleteTunnelCache@4
149 FsRtlDeregisterUncProvider@4
152 FsRtlDoesDbcsContainWildCards@4
153 FsRtlDoesNameContainWildCards@4
154 FsRtlFastCheckLockForRead@24
155 FsRtlFastCheckLockForWrite@24
156 FsRtlFastUnlockAll@16
157 FsRtlFastUnlockAllByKey@20
158 FsRtlFastUnlockSingle@32
159 FsRtlFindInTunnelCache@32
161 FsRtlGetNextFileLock@8
162 FsRtlGetNextLargeMcbEntry@20
163 FsRtlGetNextMcbEntry@20
164 FsRtlInitializeFileLock@12
165 FsRtlInitializeLargeMcb@8
167 FsRtlInitializeOplock@4
168 FsRtlInitializeTunnelCache@4
169 FsRtlIsDbcsInExpression@8
170 FsRtlIsFatDbcsLegal@20
171 FsRtlIsHpfsDbcsLegal@20
172 FsRtlIsNameInExpression@16
173 FsRtlIsNtstatusExpected@4
174 FsRtlIsTotalDeviceFailure@4
175 FsRtlLegalAnsiCharacterArray DATA
176 FsRtlLookupLargeMcbEntry@32
177 FsRtlLookupLastLargeMcbEntry@12
178 FsRtlLookupLastMcbEntry@12
179 FsRtlLookupMcbEntry@20
181 FsRtlMdlReadComplete@8
182 FsRtlMdlReadCompleteDev@12
184 FsRtlMdlWriteComplete@12
185 FsRtlMdlWriteCompleteDev@16
186 FsRtlNormalizeNtstatus@8
187 FsRtlNotifyChangeDirectory@28
188 FsRtlNotifyCleanup@12
189 FsRtlNotifyFullChangeDirectory@40
190 FsRtlNotifyFullReportChange@36
191 FsRtlNotifyInitializeSync@4
192 FsRtlNotifyReportChange@20
193 FsRtlNotifyUninitializeSync@4
194 FsRtlNotifyVolumeEvent@8
195 FsRtlNumberOfRunsInLargeMcb@4
196 FsRtlNumberOfRunsInMcb@4
198 FsRtlOplockIsFastIoPossible@4
199 FsRtlPostPagingFileStackOverflow@12
200 FsRtlPostStackOverflow@12
201 FsRtlPrepareMdlWrite@24
202 FsRtlPrepareMdlWriteDev@28
204 FsRtlProcessFileLock@12
205 FsRtlRegisterUncProvider@12
206 FsRtlRemoveLargeMcbEntry@20
207 FsRtlRemoveMcbEntry@12
208 FsRtlSplitLargeMcb@20
210 FsRtlTruncateLargeMcb@12
212 FsRtlUninitializeFileLock@4
213 FsRtlUninitializeLargeMcb@4
214 FsRtlUninitializeMcb@4
215 FsRtlUninitializeOplock@4
216 HalDispatchTable DATA
217 HalPrivateDispatchTable DATA
218 InbvAcquireDisplayOwnership@0
219 InbvCheckDisplayOwnership@0
221 InbvEnableBootDriver@4
222 InbvEnableDisplayString@4
223 InbvInstallDisplayStringFilter@4
224 InbvIsBootDriverInstalled@0
225 InbvNotifyDisplayOwnershipLost@4
227 InbvSetScrollRegion@16
229 InbvSolidColorFill@20
230 @InterlockedCompareExchange@12
231 @InterlockedDecrement@4
232 @InterlockedExchange@8
233 @InterlockedExchangeAdd@8
234 @InterlockedIncrement@4
235 @InterlockedPopEntrySList@4
236 @InterlockedPushEntrySList@8
237 IoAcquireCancelSpinLock@4
238 IoAcquireRemoveLockEx@20
239 IoAcquireVpbSpinLock@4
240 IoAdapterObjectType DATA
241 IoAllocateAdapterChannel@20
242 IoAllocateController@16
243 IoAllocateDriverObjectExtension@16
244 IoAllocateErrorLogEntry@8
250 IoAttachDeviceByPointer@8
251 IoAttachDeviceToDeviceStack@8
252 IoBuildAsynchronousFsdRequest@24
253 IoBuildDeviceIoControlRequest@36
255 IoBuildSynchronousFsdRequest@28
258 IoCheckDesiredAccess@8
259 IoCheckEaBufferValidity@12
260 IoCheckFunctionAccess@24
261 IoCheckShareAccess@20
263 IoConnectInterrupt@44
267 IoCreateNotificationEvent@8
268 IoCreateStreamFileObject@8
269 IoCreateSymbolicLink@8
270 IoCreateSynchronizationEvent@8
271 IoCreateUnprotectedSymbolicLink@8
274 IoDeleteSymbolicLink@4
276 IoDeviceHandlerObjectSize DATA
277 IoDeviceHandlerObjectType DATA
278 IoDisconnectInterrupt@4
279 IoDeviceObjectType DATA
280 IoDriverObjectType DATA
282 IoFastQueryNetworkAttributes@20
283 IoFileObjectType DATA
288 IoGetAttachedDevice@4
289 IoGetAttachedDeviceReference@4
290 IoGetBaseFileSystemDeviceObject@4
291 IoGetConfigurationInformation@0
292 IoGetCurrentProcess@0
293 IoGetDriverObjectExtension@8
294 IoGetDeviceObjectPointer@16
295 IoGetDeviceProperty@20
296 IoGetDeviceToVerify@4
297 IoGetFileObjectGenericMapping@0
299 IoGetRelatedDeviceObject@4
300 IoGetRequestorProcess@4
304 IoInvalidateDeviceRelations@8
305 IoInvalidateDeviceState@4
306 IoInitializeRemoveLockEx@20
308 IoIsOperationSynchronous@4
309 IoMakeAssociatedIrp@8
310 IoOpenDeviceInstanceKey@20
311 IoOpenDeviceRegistryKey@16
313 IoQueryDeviceDescription@32
314 IoQueryDeviceEnumInfo@8
315 IoQueryFileInformation@20
316 IoQueryVolumeInformation@20
320 IoRaiseInformationalHardError@12
321 IoReadOperationCount DATA
322 IoReadPartitionTable@16
323 IoReadTransferCount DATA
324 IoRegisterDeviceInterface@16
325 IoRegisterDriverReinitialization@12
326 IoRegisterFileSystem@4
327 IoRegisterFsRegistrationChange@8
328 IoRegisterShutdownNotification@4
329 IoReleaseCancelSpinLock@4
330 IoReleaseRemoveLockAndWaitEx@12
331 IoReleaseRemoveLockEx@12
332 IoReleaseVpbSpinLock@4
333 IoRemoveShareAccess@8
334 IoReportHalResourceUsage@16
335 IoReportResourceUsage@36
336 IoSetDeviceInterfaceState@8
337 IoSetDeviceToVerify@8
338 IoSetHardErrorOrVerifyDevice@8
340 IoSetPartitionInformation@16
342 IoSetThreadHardErrorMode@4
345 IoStartNextPacketByKey@12
348 IoStatisticsLock DATA
350 IoSynchronousPageWrite@20
352 IoUnregisterFileSystem@4
353 IoUnregisterFsRegistrationChange@8
354 IoUnregisterShutdownNotification@4
355 IoUpdateShareAccess@8
357 IoWriteErrorLogEntry@4
358 IoWriteOperationCount DATA
359 IoWritePartitionTable@20
360 IoWriteTransferCount DATA
362 @IofCompleteRequest@8
363 KdDebuggerEnabled DATA
364 KdDebuggerNotPresent DATA
366 KdSystemDebugControl@4
368 Ke386IoSetAccessProcess@8
369 Ke386QueryIoAccessMap@8
370 Ke386SetIoAccessMap@8
371 KeAcquireSpinLockAtDpcLevel@4
372 KeAddSystemServiceTable@20
374 ;KeBoostCurrentThread
380 KeDcacheFlushCount DATA
381 KeDelayExecutionThread@12
382 KeDeregisterBugCheckCallback@4
384 KeDisconnectInterrupt@4
385 KeEnterCriticalRegion@0
386 KeEnterKernelDebugger@0
387 ;KeFindConfigurationEntry
388 ;KeFindConfigurationNextEntry
393 ;KeI386AllocateGdtSelectors
394 ;KeI386Call16BitCStyleFunction
395 ;KeI386Call16BitFunction
396 ;KeI386FlatToGdtSelector
398 ;KeI386MachineType DATA
399 ;KeI386ReleaseGdtSelectors
401 ;KeI386SetGdtSelector
402 KeIcacheFlushCount DATA
404 KeInitializeDeviceQueue@4
407 KeInitializeInterrupt@44
411 KeInitializeSemaphore@12
412 KeInitializeSpinLock@4
414 KeInitializeTimerEx@8
415 KeInsertByKeyDeviceQueue@12
416 KeInsertDeviceQueue@8
422 KeLeaveCriticalRegion@0
424 KeNumberProcessors DATA
426 ;KeProfileInterruptWithSource
430 KeQueryTimeIncrement@0
431 ;KeRaiseUserException
437 KeReadStateSemaphore@4
439 KeRegisterBugCheckCallback@20
442 KeReleaseSemaphore@16
443 KeReleaseSpinLockFromDpcLevel@4
444 KeRemoveByKeyDeviceQueue@8
445 KeRemoveDeviceQueue@4
446 KeRemoveEntryDeviceQueue@8
450 KeRestoreFloatingPointState@4
452 KeSaveFloatingPointState@4
453 KeServiceDescriptorTable DATA
454 KeSetAffinityThread@8
455 KeSetBasePriorityThread@8
458 ;KeSetEventBoostPriority
459 ;KeSetIdealProcessorThread
461 ;KeSetKernelStackSwapEnable
462 KeSetPriorityThread@8
464 ;@KeSetSwapContextNotifyRoutine
465 KeSetTargetProcessorDpc@8
466 ;@KeSetThreadSelectNotifyRoutine
470 ;@KeSetTimeUpdateNotifyRoutine
471 KeSynchronizeExecution@12
476 KeWaitForMultipleObjects@32
477 KeWaitForMutexObject@20
478 KeWaitForSingleObject@20
479 @KefAcquireSpinLockAtDpcLevel@4=KefAcquireSpinLockAtDpcLevel
480 @KefReleaseSpinLockFromDpcLevel@4=KefReleaseSpinLockFromDpcLevel
484 ;KiCoprocessorError@0
486 KiDispatchInterrupt@0
487 KiInterruptDispatch2@8
488 ;KiIpiServiceRoutine@8
490 ;KiUnexpectedInterrupt
491 ;Kii386SpinOnSpinLock
495 ;LdrFindResourceDirectory_U@16
498 LsaCallAuthenticationPackage@28
499 LsaDeregisterLogonProcess@8
500 LsaFreeReturnBuffer@4
502 LsaLookupAuthenticationPackage@12
503 LsaRegisterLogonProcess@12
504 Mm64BitPhysicalAddress DATA
505 MmAddPhysicalMemory@8
506 MmAddVerifierThunks@8
507 MmAdjustWorkingSetSize@12
509 MmAllocateContiguousAlignedMemory@36
510 MmAllocateContiguousMemory@12
511 MmAllocateContiguousMemorySpecifyCache@32
512 MmAllocateMappingAddress@8
513 MmAllocateNonCachedMemory@4
514 MmAllocatePagesForMdl@28
515 MmBuildMdlForNonPagedPool@4
516 MmCanFileBeTruncated@8
521 MmDbgTranslatePhysicalAddress@8
522 MmDisableModifiedWriteOfSection@4
523 MmFlushImageSection@8
524 MmForceSectionClosed@8
525 MmFreeContiguousMemory@4
526 MmFreeContiguousMemorySpecifyCache@12
527 MmFreeMappingAddress@8
528 MmFreeNonCachedMemory@8
530 MmGetPhysicalAddress@4
531 MmGetPhysicalMemoryRanges@0
532 MmGetSystemRoutineAddress@4
533 MmGetVirtualForPhysical@8
535 MmHighestUserAddress DATA
537 MmIsDriverVerifying@4
538 MmIsNonPagedSystemAddressValid@4
539 MmIsRecursiveIoFault@0
540 MmIsThisAnNtAsSystem@0
541 MmIsVerifierEnabled@4
542 MmLockPagableDataSection@4
543 MmLockPagableImageSection@4=MmLockPagableDataSection@4
544 MmLockPagableSectionByHandle@4
547 MmMapLockedPagesSpecifyCache@24
548 MmMapLockedPagesWithReservedMapping@16
550 MmMapUserAddressesToPage@12
552 MmMapViewInSessionSpace@12
553 MmMapViewInSystemSpace@12
554 MmMapViewOfSection@40
555 MmMarkPhysicalMemoryAsBad@8
556 MmMarkPhysicalMemoryAsGood@8
559 MmProbeAndLockPages@12
560 MmProbeAndLockProcessPages@16
561 MmProbeAndLockSelectedPages@16
562 MmProtectMdlSystemAddress@8
564 MmRemovePhysicalMemory@8
565 MmResetDriverPaging@4
566 MmSectionObjectType DATA
567 MmSecureVirtualMemory@12
568 MmSetAddressRangeModified@8
569 MmSetBankedSection@24
571 MmSystemRangeStart DATA
572 MmUnlockPagableImageSection@4
576 MmUnmapReservedMapping@12
577 MmUnmapVideoDisplay@8
578 MmUnmapViewInSessionSpace@4
579 MmUnmapViewInSystemSpace@4
580 MmUnmapViewOfSection@8
581 MmUnsecureVirtualMemory@4
582 MmUserProbeAddress DATA
585 NlsMbCodePageTag DATA
586 NlsMbOemCodePageTag DATA
587 NlsOemLeadByteInfo DATA
589 NtAdjustPrivilegesToken@24
591 NtAllocateLocallyUniqueId@4
593 NtAllocateVirtualMemory@24
604 NtDeviceIoControlFile@40
608 NtFreeVirtualMemory@16
612 NtMapViewOfSection@40
613 NtMakePermanentObject@4
614 NtNotifyChangeDirectoryFile@36
617 NtOpenProcessToken@12
618 NtOpenProcessTokenEx@16
621 NtOpenThreadTokenEx@20
622 NtQueryDirectoryFile@44
624 NtQueryInformationAtom@20
625 NtQueryInformationFile@20
626 NtQueryInformationProcess@20
627 NtQueryInformationThread@20
628 NtQueryInformationToken@20
629 ;NtQueryOleDirectoryFile@ <--- ?
630 NtQueryQuotaInformationFile@36
631 NtQuerySecurityObject@20
632 NtQuerySystemInformation@16
634 NtQueryVolumeInformationFile@20
637 NtRequestWaitReplyPort@12
640 NtSetInformationFile@20
641 NtSetInformationProcess@16
642 NtSetInformationThread@16
643 NtSetQuotaInformationFile@16
644 NtSetSecurityObject@12
646 NtSetVolumeInformationFile@20
652 NtWaitForSingleObject@12
655 ;ObCheckCreateObjectAccess@28
656 ;ObCheckObjectAccess@20
658 ;ObFindHandleForObject@20
659 ObGetObjectPointerCount@4
660 ObGetObjectSecurity@12
662 ObMakeTemporaryObject@4
663 ObOpenObjectByName@28
664 ObOpenObjectByPointer@28
666 ObQueryObjectAuditingByHandle@8
667 @ObfDereferenceObject@4
668 @ObfReferenceObject@4
669 ObReferenceObjectByHandle@24
670 ObReferenceObjectByName@32
671 ObReferenceObjectByPointer@16
672 ObReleaseObjectSecurity@8
673 ObDereferenceObject@4
674 ;ObSetSecurityDescriptorInfo@24
680 PoRegisterDeviceForIdleDetection@16
681 PoRegisterSystemState@8
686 PoStartNextPowerIrp@4
687 PoUnregisterSystemState@4
690 PsAssignImpersonationToken@8
691 ;PsChargePoolQuota@12
692 PsCreateSystemProcess@12
693 PsCreateSystemThread@28
694 PsCreateWin32Process@4
695 PsDisableImpersonation@8
696 PsEstablishWin32Callouts@24
697 PsGetCurrentProcessId@0
698 PsGetCurrentThreadId@0
699 PsGetProcessExitTime@0
703 PsImpersonateClient@20
704 PsInitialSystemProcess DATA
705 PsIsThreadTerminating@4
707 PsLookupProcessByProcessId@8
708 PsLookupProcessThreadByCid@12
709 PsLookupThreadByThreadId@8
711 PsReferenceImpersonationToken@16
712 PsReferencePrimaryToken@4
713 PsRestoreImpersonation@8
714 ;PsReturnPoolQuota@12
716 PsSetCreateProcessNotifyRoutine@8
717 PsSetCreateThreadNotifyRoutine@4
718 ;PsSetLegoNotifyRoutine@4
719 PsSetLoadImageNotifyRoutine@4
720 ;PsSetProcessPriorityByClass@8
721 PsTerminateSystemThread@4
723 READ_REGISTER_UCHAR@4
724 READ_REGISTER_ULONG@4
725 READ_REGISTER_USHORT@4
726 READ_REGISTER_BUFFER_UCHAR@12
727 READ_REGISTER_BUFFER_ULONG@12
728 READ_REGISTER_BUFFER_USHORT@12
730 KeRosDumpStackFrames@8
731 RtlAbsoluteToSelfRelativeSD@12
732 RtlAddAccessAllowedAce@16
734 RtlAddAtomToAtomTable@12
736 ;RtlAllocateAndInitializeSid
738 RtlAnsiCharToUnicodeChar@4
739 RtlAnsiStringToUnicodeSize@4
740 RtlAnsiStringToUnicodeString@12
741 RtlAppendAsciizToString@8
742 RtlAppendStringToString@8
743 RtlAppendUnicodeStringToString@8
744 RtlAppendUnicodeToString@8
745 RtlAreAllAccessesGranted@8
746 RtlAreAnyAccessesGranted@8
750 ;RtlCaptureStackBackTrace
752 RtlCheckRegistryKey@8
756 RtlCompareMemoryUlong@12
758 RtlCompareUnicodeString@12
761 RtlConvertLongToLargeInteger@4
762 RtlConvertSidToUnicodeString@12
763 RtlConvertUlongToLargeInteger@4
768 RtlCopyUnicodeString@8
772 RtlCreateRegistryKey@8
773 RtlCreateSecurityDescriptor@8
774 RtlCreateUnicodeString@8
775 RtlCustomCPToUnicodeN@24
776 RtlDecompressBuffer@24
777 RtlDecompressChunks@28
778 RtlDecompressFragment@32
780 RtlDeleteAtomFromAtomTable@8
781 ;RtlDeleteElementGenericTable
783 RtlDeleteOwnersRanges@8
785 RtlDeleteRegistryValue@12
787 RtlDestroyAtomTable@4
789 RtlDowncaseUnicodeString@12
791 RtlEnlargedIntegerMultiply@8
792 RtlEnlargedUnsignedDivide@16
793 RtlEnlargedUnsignedMultiply@8
794 ;RtlEnumerateGenericTable
795 ;RtlEnumerateGenericTableWithoutSplaying
799 RtlEqualUnicodeString@12
800 RtlExtendedIntegerMultiply@12
801 RtlExtendedLargeIntegerDivide@16
802 RtlExtendedMagicDivide@20
804 RtlFillMemoryUlong@12
806 RtlFindClearBitsAndSet@12
807 RtlFindFirstRunClear@8
809 RtlFindLeastSignificantBit@8
810 RtlFindLongestRunClear@8
811 RtlFindLongestRunSet@8
813 RtlFindMostSignificantBit@8
816 RtlFindSetBitsAndClear@12
817 ;RtlFindUnicodePrefix
818 RtlFormatCurrentUserKeyPath@4
823 RtlFreeUnicodeString@4
824 RtlGenerate8dot3Name@16
825 ;RtlGetCallersAddress
826 RtlGetCompressionWorkSpaceSize@12
827 RtlGetDaclSecurityDescriptor@16
828 RtlGetDefaultCodePage@8
829 ;RtlGetElementGenericTable
831 RtlGetGroupSecurityDescriptor@12
833 RtlGetOwnerSecurityDescriptor@12
836 RtlImageDirectoryEntryToData@16
838 RtlInitCodePageTable@8
840 RtlInitUnicodeString@8
841 RtlInitializeBitMap@12
842 ;RtlInitializeGenericTable
843 RtlInitializeRangeList@4
845 ;RtlInitializeUnicodePrefix
846 ;RtlInsertElementGenericTable
847 ;RtlInsertUnicodePrefix
849 RtlIntegerToUnicodeString@12
851 RtlIsNameLegalDOS8Dot3@12
852 RtlIsRangeAvailable@40
853 RtlLargeIntegerAdd@16
854 RtlLargeIntegerArithmeticShift@12
855 RtlLargeIntegerDivide@20
856 RtlLargeIntegerNegate@8
857 RtlLargeIntegerShiftLeft@12
858 RtlLargeIntegerShiftRight@12
859 RtlLargeIntegerSubtract@16
860 RtlLengthRequiredSid@4
861 RtlLengthSecurityDescriptor@4
863 RtlLookupAtomInAtomTable@12
864 ;RtlLookupElementGenericTable
866 RtlMergeRangeLists@16
868 RtlMultiByteToUnicodeN@20
869 RtlMultiByteToUnicodeSize@12
870 ;RtlNextUnicodePrefix
871 RtlNtStatusToDosError@4
872 RtlNtStatusToDosErrorNoTeb@4
873 ;RtlNumberGenericTableElements
874 RtlNumberOfClearBits@4
876 RtlOemStringToCountedUnicodeString@12
877 RtlOemStringToUnicodeSize@4
878 RtlOemStringToUnicodeString@12
880 RtlPinAtomInAtomTable@8
882 RtlPrefixUnicodeString@12
883 RtlQueryAtomInAtomTable@24
884 RtlQueryRegistryValues@20
885 RtlQueryTimeZoneInformation@4
888 ;RtlRemoveUnicodePrefix
890 RtlSecondsSince1970ToTime@8
891 RtlSecondsSince1980ToTime@8
894 RtlSetDaclSecurityDescriptor@16
895 RtlSetGroupSecurityDescriptor@12
896 RtlSetOwnerSecurityDescriptor@12
897 RtlSetSaclSecurityDescriptor@16
898 RtlSetTimeZoneInformation@4
900 RtlSubAuthorityCountSid@4
902 RtlTimeFieldsToTime@8
903 RtlTimeToSecondsSince1970@8
904 RtlTimeToSecondsSince1980@8
905 RtlTimeToTimeFields@8
907 @RtlUlonglongByteSwap@8
908 RtlUnicodeStringToAnsiSize@4
909 RtlUnicodeStringToAnsiString@12
910 RtlUnicodeStringToCountedOemString@12
911 RtlUnicodeStringToInteger@12
912 RtlUnicodeStringToOemSize@4
913 RtlUnicodeStringToOemString@12
914 RtlUnicodeToCustomCPN@24
915 RtlUnicodeToMultiByteN@20
916 RtlUnicodeToMultiByteSize@12
919 RtlUpcaseUnicodeChar@4
920 RtlUpcaseUnicodeString@12
921 RtlUpcaseUnicodeStringToAnsiString@12
922 RtlUpcaseUnicodeStringToCountedOemString@12
923 RtlUpcaseUnicodeStringToOemString@12
924 RtlUpcaseUnicodeToCustomCPN@24
925 RtlUpcaseUnicodeToMultiByteN@20
926 RtlUpcaseUnicodeToOemN@20
930 RtlValidSecurityDescriptor@4
932 RtlWriteRegistryValue@24
935 RtlxAnsiStringToUnicodeSize@4
936 RtlxOemStringToUnicodeSize@4
937 RtlxUnicodeStringToAnsiSize@4
938 RtlxUnicodeStringToOemSize@4
942 SeAssignSecurityEx@36
943 SeAuditHardLinkCreation@12
944 SeAuditingFileEvents@8
945 SeAuditingFileEventsWithContext@12
946 SeAuditingFileOrGlobalEvents@18
947 SeAuditingHardLinkEvents@8
948 SeAuditingHardLinkEventsWithContext@12
949 SeCaptureSecurityDescriptor@20
950 SeCaptureSubjectContext@4
951 SeCloseObjectAuditAlarm@12
952 SeCreateAccessState@16
953 SeCreateClientSecurity@16
954 SeCreateClientSecurityFromSubjectContext@16
956 SeDeleteAccessState@4
957 SeDeleteObjectAuditAlarm@8
961 SeImpersonateClient@8
962 SeImpersonateClientEx@8
963 SeLockSubjectContext@4
964 SeMarkLogonSessionForTerminationNotification@4
965 SeOpenObjectAuditAlarm@36
966 SeOpenObjectForDeleteAuditAlarm@36
968 SePrivilegeObjectAuditAlarm@24
969 SePublicDefaultDacl DATA
970 SeQueryAuthenticationIdToken@8
971 SeQueryInformationToken@12
972 SeQuerySecurityDescriptorInfo@16
973 SeQuerySessionIdToken@8
974 SeRegisterLogonSessionTerminatedRoutine@4
975 SeReleaseSecurityDescriptor@12
976 SeReleaseSubjectContext@4
977 SeSetAccessStateGenericMapping@8
978 SeSetSecurityDescriptorInfo@24
979 SeSetSecurityDescriptorInfoEx@28
980 SeSinglePrivilegeCheck@12
981 SeSystemDefaultDacl DATA
982 SeTokenImpersonationLevel@4
984 SeTokenIsRestricted@4
985 SeTokenIsWriteRestricted@4
987 SeUnlockSubjectContext@4
988 SeUnregisterLogonSessionTerminatedRoutine@4
989 SeValidSecurityDescriptor@8
990 WRITE_REGISTER_UCHAR@8
991 WRITE_REGISTER_ULONG@8
992 WRITE_REGISTER_USHORT@8
993 WRITE_REGISTER_BUFFER_UCHAR@12
994 WRITE_REGISTER_BUFFER_ULONG@12
995 WRITE_REGISTER_BUFFER_USHORT@12
996 ZwAccessCheckAndAuditAlarm@44
998 ZwAllocateVirtualMemory@24
1001 ZwCloseObjectAuditAlarm@12
1003 ZwCreateDirectoryObject@12
1008 ZwCreateSymbolicLinkObject@16
1012 ZwDeviceIoControlFile@40
1014 ZwDuplicateObject@28
1017 ZwEnumerateValueKey@24
1018 ZwFlushInstructionCache@12
1020 ZwFreeVirtualMemory@16
1024 ZwMakeTemporaryObject@4
1025 ZwMapViewOfSection@40
1026 ZwNotifyChangeKey@40
1027 ZwOpenDirectoryObject@12
1032 ZwOpenProcessToken@12
1034 ZwOpenSymbolicLinkObject@12
1036 ZwOpenThreadToken@16
1038 ZwQueryDefaultLocale@8
1039 ZwQueryDirectoryFile@44
1040 ZwQueryInformationAtom@20
1041 ZwQueryInformationFile@20
1042 ZwQueryInformationProcess@20
1043 ZwQueryInformationToken@20
1047 ZwQuerySecurityObject@20
1048 ZwQuerySymbolicLinkObject@12
1049 ZwQuerySystemInformation@16
1052 ZwQueryVolumeInformationFile@20
1055 ZwRequestWaitReplyPort@12
1058 ZwSetDefaultLocale@8
1060 ZwSetInformationFile@20
1061 ZwSetInformationObject@16
1062 ZwSetInformationProcess@16
1063 ZwSetInformationThread@16
1064 ZwSetSystemInformation@12
1067 ZwTerminateProcess@8
1070 ZwUnmapViewOfSection@8
1071 ZwWaitForMultipleObjects@20
1072 ZwWaitForSingleObject@12
1076 ZwAdjustPrivilegesToken@24
1077 ZwAssignProcessToJobObject@8
1080 ZwCreateJobObject@12
1083 ZwEnumerateBootEntries@8
1084 ZwFlushVirtualMemory@16
1085 ZwInitiatePowerAction@16
1088 ZwOpenProcessTokenEx@16
1089 ZwOpenThreadTokenEx@20
1091 ZwPowerInformation@20
1092 ZwQueryBootEntryOrder@8
1093 ZwQueryBootOptions@8
1094 ZwQueryDefaultUILanguage@4
1095 ZwQueryDirectoryObject@28
1097 ZwQueryFullAttributesFile@8
1098 ZwQueryInformationJobObject@20
1099 ZwQueryInformationThread@20
1100 ZwQueryInstallUILanguage@4
1103 ZwSetBootEntryOrder@8
1105 ZwSetDefaultUILanguage@4
1107 ZwSetInformationJobObject@16
1108 ZwSetSecurityObject@12
1110 ZwSetVolumeInformationFile@20
1111 ZwTerminateJobObject@8
1112 ZwTranslateFilePath@12
1113 _abnormal_termination