3 ; reactos/ntoskrnl/ntoskrnl.def
5 ; ReactOS Operating System
8 CcRosInitializeFileCache@8
9 CcRosReleaseFileCache@4
18 CcGetFileObjectFromBcb@4
19 CcGetFileObjectFromSectionPtrs@4
20 CcGetFlushedValidData@8
21 CcGetLsnForFileObject@8
22 CcInitializeCacheMap@20
24 CcFastMdlReadWait DATA
25 CcFastReadNotPossible DATA
36 CcPurgeCacheSection@16
39 CcScheduleReadAhead@12
40 CcSetAdditionalCacheAttributes@12
41 CcSetBcbOwnerPointer@8
42 CcSetDirtyPageThreshold@8
43 CcSetDirtyPinnedData@8
44 CcSetLogHandleForFile@12
45 CcSetReadAheadGranularity@8
46 CcUninitializeCacheMap@12
48 CcUnpinDataForThread@8
50 CcWaitForCurrentLazyWriterActivity@0
55 CmUnRegisterCallback@8
57 DbgBreakPointWithStatus@4
58 DbgLoadImageSymbols@12
62 DbgPrintReturnControlC
63 DbgQueryDebugFilterState@8
64 DbgSetDebugFilterState@12
65 @ExAcquireFastMutexUnsafe@4
66 ExAcquireResourceExclusive@8
67 ExAcquireResourceExclusiveLite@8
68 ExAcquireResourceSharedLite@8
69 @ExAcquireRundownProtection@4
70 @ExAcquireRundownProtectionEx@8
71 ExAcquireSharedStarveExclusive@8
72 ExAcquireSharedWaitForExclusive@8
73 @ExAllocateFromPagedLookasideList@4=@ExiAllocateFromPagedLookasideList@4
75 ExAllocatePoolWithQuota@8
76 ExAllocatePoolWithQuotaTag@12
77 ExAllocatePoolWithTag@12
78 ExAllocatePoolWithTagPriority@16
79 ExConvertExclusiveToSharedLite@4
81 ExDeleteNPagedLookasideList@4
82 ExDeletePagedLookasideList@4
84 ExDeleteResourceLite@4
85 ExDesktopObjectType DATA
86 ExDisableResourceBoostLite@4
88 ExEventObjectType DATA
92 ExFreeToPagedLookasideList@8=ExiFreeToPagedLookasideList@8
93 ExGetCurrentProcessorCounts@12
94 ExGetCurrentProcessorCpuUsage@4
95 ExGetExclusiveWaiterCount@4
97 ExGetSharedWaiterCount@4
98 @ExInitializeRundownProtection@4
99 ExInitializeNPagedLookasideList@28
100 ExInitializePagedLookasideList@28
101 ExInitializeResource@4
102 ExInitializeResourceLite@4
104 ExInterlockedAddLargeInteger@16
105 @ExInterlockedAddLargeStatistic@8
106 ExInterlockedAddUlong@12
107 @ExInterlockedCompareExchange64@16
108 ExInterlockedDecrementLong@8
109 ExInterlockedExchangeUlong@12
110 ExInterlockedExtendZone@16
111 ExInterlockedIncrementLong@8
112 @ExInterlockedFlushSList@4
113 ExInterlockedInsertHeadList@12
114 ExInterlockedInsertTailList@12
115 ExInterlockedPopEntryList@8
116 @ExInterlockedPopEntrySList@8
117 ExInterlockedPushEntryList@12
118 @ExInterlockedPushEntrySList@12
119 ExInterlockedRemoveHeadList@8
120 ExIsProcessorFeaturePresent@4
121 ExIsResourceAcquiredExclusiveLite@4
122 ExIsResourceAcquiredSharedLite@4
123 ExLocalTimeToSystemTime@8
126 ExQueryPoolBlockSize@8
128 ExRaiseAccessViolation@0
129 ExRaiseDatatypeMisalignment@0
133 ExRegisterCallback@12
134 ExReinitializeResourceLite@4
135 @ExReInitializeRundownProtection@4
136 @ExReleaseFastMutexUnsafe@4
137 ExReleaseResourceForThread@8
138 ExReleaseResourceForThreadLite@8
139 @ExReleaseResourceLite@4
140 @ExReleaseRundownProtection@4
141 @ExReleaseRundownProtectionEx@8
142 ExRosDumpPagedPoolByTag@4
144 @ExRundownCompleted@4
145 ExSemaphoreObjectType DATA
146 ExSetResourceOwnerPointer@8
147 ExSetTimerResolution@8
148 ExSystemExceptionFilter@0
149 ExSystemTimeToLocalTime@8
150 ExTryToAcquireResourceExclusiveLite@4
151 ExUnregisterCallback@4
154 @ExWaitForRundownProtectionRelease@4
155 ExWindowStationObjectType DATA
156 ExInitializeBinaryTree@12
158 ExInsertBinaryTree@12
159 ExSearchBinaryTree@12
160 ExRemoveBinaryTree@12
161 ExTraverseBinaryTree@16
162 ExInitializeSplayTree@16
167 ExWeightOfSplayTree@8
168 ExTraverseSplayTree@16
169 ExInitializeHashTable@16
174 @ExfAcquirePushLockExclusive@4
175 @ExfAcquirePushLockShared@4
176 @ExfReleasePushLock@4
177 @ExfInterlockedAddUlong@12
178 @ExfInterlockedInsertHeadList@12
179 @ExfInterlockedInsertTailList@12
180 @ExfInterlockedCompareExchange64@12
181 @ExfInterlockedPopEntryList@8
182 @ExfInterlockedPushEntryList@12
183 @ExfInterlockedRemoveHeadList@8
184 @Exfi386InterlockedDecrementLong@4
185 @Exfi386InterlockedExchangeUlong@8
186 @Exfi386InterlockedIncrementLong@4
187 Exi386InterlockedDecrementLong@4
188 Exi386InterlockedExchangeUlong@8
189 Exi386InterlockedIncrementLong@4
190 FsRtlAcquireFileExclusive@4
191 FsRtlAddLargeMcbEntry@28
193 FsRtlAddToTunnelCache@32
194 FsRtlAllocateFileLock@8
196 FsRtlAllocatePoolWithQuota@8
197 FsRtlAllocatePoolWithQuotaTag@12
198 FsRtlAllocatePoolWithTag@12
199 FsRtlAllocateResource@0
200 FsRtlAreNamesEqual@16
202 FsRtlCheckLockForReadAccess@8
203 FsRtlCheckLockForWriteAccess@8
207 FsRtlCurrentBatchOplock@4
208 FsRtlDeleteKeyFromTunnelCache@12
209 FsRtlDeleteTunnelCache@4
210 FsRtlDeregisterUncProvider@4
213 FsRtlDoesDbcsContainWildCards@4
214 FsRtlDoesNameContainWildCards@4
215 FsRtlFastCheckLockForRead@24
216 FsRtlFastCheckLockForWrite@24
217 FsRtlFastUnlockAll@16
218 FsRtlFastUnlockAllByKey@20
219 FsRtlFastUnlockSingle@32
220 FsRtlFindInTunnelCache@32
223 FsRtlGetNextFileLock@8
224 FsRtlGetNextLargeMcbEntry@20
225 FsRtlGetNextMcbEntry@20
226 FsRtlIncrementCcFastReadNotPossible@0
227 FsRtlIncrementCcFastReadNoWait@0
228 FsRtlIncrementCcFastReadResourceMiss@0
229 FsRtlIncrementCcFastReadWait@0
230 FsRtlInitializeFileLock@12
231 FsRtlInitializeLargeMcb@8
233 FsRtlInitializeOplock@4
234 FsRtlInitializeTunnelCache@4
235 FsRtlInsertPerFileObjectContext@8
236 FsRtlInsertPerStreamContext@8
237 FsRtlIsDbcsInExpression@8
238 FsRtlIsFatDbcsLegal@20
239 FsRtlIsHpfsDbcsLegal@20
240 FsRtlIsNameInExpression@16
241 FsRtlIsNtstatusExpected@4
243 FsRtlIsTotalDeviceFailure@4
244 FsRtlLegalAnsiCharacterArray DATA
245 FsRtlLookupLargeMcbEntry@32
246 FsRtlLookupLastLargeMcbEntry@12
247 FsRtlLookupLastLargeMcbEntryAndIndex@16
248 FsRtlLookupLastMcbEntry@12
249 FsRtlLookupMcbEntry@20
250 FsRtlLookupPerFileObjectContext@12
251 FsRtlLookupPerStreamContextInternal@12
253 FsRtlMdlReadComplete@8
254 FsRtlMdlReadCompleteDev@12
256 FsRtlMdlWriteComplete@12
257 FsRtlMdlWriteCompleteDev@16
258 FsRtlNormalizeNtstatus@8
259 FsRtlNotifyChangeDirectory@28
260 FsRtlNotifyCleanup@12
261 FsRtlNotifyFilterChangeDirectory@44
262 FsRtlNotifyFilterReportChange@40
263 FsRtlNotifyFullChangeDirectory@40
264 FsRtlNotifyFullReportChange@36
265 FsRtlNotifyInitializeSync@4
266 FsRtlNotifyReportChange@20
267 FsRtlNotifyUninitializeSync@4
268 FsRtlNotifyVolumeEvent@8
269 FsRtlNumberOfRunsInLargeMcb@4
270 FsRtlNumberOfRunsInMcb@4
272 FsRtlOplockIsFastIoPossible@4
273 FsRtlPostPagingFileStackOverflow@12
274 FsRtlPostStackOverflow@12
275 FsRtlPrepareMdlWrite@24
276 FsRtlPrepareMdlWriteDev@28
278 FsRtlProcessFileLock@12
279 FsRtlRegisterUncProvider@12
281 FsRtlRemoveLargeMcbEntry@20
282 FsRtlRemoveMcbEntry@12
283 FsRtlRemovePerFileObjectContext@12
284 FsRtlRemovePerStreamContext@12
286 FsRtlSplitLargeMcb@20
288 FsRtlTeardownPerStreamContexts@4
289 FsRtlTruncateLargeMcb@12
291 FsRtlUninitializeFileLock@4
292 FsRtlUninitializeLargeMcb@4
293 FsRtlUninitializeMcb@4
294 FsRtlUninitializeOplock@4
295 HalDispatchTable DATA
296 HalPrivateDispatchTable DATA
297 @HalExamineMBR=@xHalExamineMBR@16
298 InbvAcquireDisplayOwnership@0
299 InbvCheckDisplayOwnership@0
301 InbvEnableBootDriver@4
302 InbvEnableDisplayString@4
303 InbvInstallDisplayStringFilter@4
304 InbvIsBootDriverInstalled@0
305 InbvNotifyDisplayOwnershipLost@4
307 InbvSetScrollRegion@16
309 InbvSolidColorFill@20
310 InitSafeBootMode DATA
311 @InterlockedCompareExchange@12
312 @InterlockedDecrement@4
313 @InterlockedExchange@8
314 @InterlockedExchangeAdd@8
315 @InterlockedIncrement@4
316 @InterlockedPushEntrySList@8
317 @InterlockedPopEntrySList@4
318 IoAcquireCancelSpinLock@4
319 IoAcquireRemoveLockEx@20
320 IoAcquireVpbSpinLock@4
321 IoAdapterObjectType DATA
322 IoAllocateAdapterChannel@20
325 IoAllocateController@16
326 IoAllocateDriverObjectExtension@16
327 IoAllocateErrorLogEntry@8
329 IoAssignDriveLetters@16
332 IoAttachDeviceByPointer@8
333 IoAttachDeviceToDeviceStack@8
334 IoAttachDeviceToDeviceStackSafe@12
335 IoBuildAsynchronousFsdRequest@24
336 IoBuildDeviceIoControlRequest@36
338 IoBuildSynchronousFsdRequest@28
342 IoCheckDesiredAccess@8
343 IoCheckEaBufferValidity@12
344 IoCheckFunctionAccess@24
345 IoCheckQuerySetFileInformation@12
346 IoCheckQuerySetVolumeInformation@12
347 IoCheckQuotaBufferValidity@12
348 IoCheckShareAccess@20
350 IoConnectInterrupt@44
356 IoCreateFileSpecifyDeviceObjectHint@60
357 IoCreateNotificationEvent@8
358 IoCreateStreamFileObject@8
359 IoCreateStreamFileObjectEx@12
360 IoCreateStreamFileObjectLite@8
361 IoCreateSymbolicLink@8
362 IoCreateSynchronizationEvent@8
363 IoCreateUnprotectedSymbolicLink@8
373 IoDeleteSymbolicLink@4
375 IoDeviceHandlerObjectSize DATA
376 IoDeviceHandlerObjectType DATA
377 IoDeviceObjectType DATA
378 IoDisconnectInterrupt@4
379 IoDriverObjectType DATA
381 IoEnumerateDeviceObjectList@16
382 IoFastQueryNetworkAttributes@20
383 IoFileObjectType DATA
384 IoForwardAndCatchIrp@8=IoForwardIrpSynchronously@8
385 IoForwardIrpSynchronously@8
387 IoFreeErrorLogEntry@4
391 IoGetAttachedDevice@4
392 IoGetAttachedDeviceReference@4
393 IoGetBaseFileSystemDeviceObject@4
394 IoGetBootDiskInformation@8
395 IoGetConfigurationInformation@0
396 IoGetCurrentProcess@0
397 IoGetDeviceObjectPointer@16
398 IoGetDeviceAttachmentBaseRef@4
399 IoGetDeviceInterfaceAlias@12
400 IoGetDeviceInterfaces@16
401 IoGetDriverObjectExtension@8
402 IoGetDeviceProperty@20
403 IoGetDeviceToVerify@4
404 IoGetDiskDeviceObject@8
406 IoGetFileObjectGenericMapping@0
408 IoGetLowerDeviceObject@4
409 IoGetRelatedDeviceObject@4
410 IoGetRequestorProcess@4
411 IoGetRequestorProcessId@4
412 IoGetRequestorSessionId@8
416 IoInvalidateDeviceRelations@8
417 IoInvalidateDeviceState@4
418 IoInitializeRemoveLockEx@20
420 IoIsFileOriginRemote@4
422 IoIsValidNameGraftingBuffer@8
423 IoIsOperationSynchronous@4
424 IoMakeAssociatedIrp@8
425 IoOpenDeviceInstanceKey@20
426 IoOpenDeviceInterfaceRegistryKey@12
427 IoOpenDeviceRegistryKey@16
429 IoPnPDeliverServicePowerNotification@16
430 IoQueryDeviceDescription@32
431 IoQueryDeviceEnumInfo@8
432 IoQueryFileDosDeviceName@8
433 IoQueryFileInformation@20
434 IoQueryVolumeInformation@20
438 IoRaiseInformationalHardError@12
439 IoReadDiskSignature@12
440 IoReadOperationCount DATA
441 @IoReadPartitionTable@16
442 IoReadPartitionTableEx@8
443 IoReadTransferCount DATA
444 IoRegisterBootDriverReinitialization@12
445 IoRegisterDeviceInterface@16
446 IoRegisterDriverReinitialization@12
447 IoRegisterFileSystem@4
448 IoRegisterFsRegistrationChange@8
449 IoRegisterLastChanceShutdownNotification@4
450 IoRegisterPlugPlayNotification@28
451 IoRegisterShutdownNotification@4
452 IoReleaseCancelSpinLock@4
453 IoReleaseRemoveLockAndWaitEx@12
454 IoReleaseRemoveLockEx@12
455 IoReleaseVpbSpinLock@4
456 IoRemoveShareAccess@8
457 IoReportDetectedDevice@32
458 IoReportHalResourceUsage@16
459 IoReportResourceUsage@36
460 IoReportResourceForDetection@28
461 IoReportTargetDeviceChange@8
462 IoReportTargetDeviceChangeAsynchronous@16
463 IoRequestDeviceEject@4
465 IoSetCompletionRoutineEx@28
466 IoSetSystemPartition@4
467 IoSetDeviceInterfaceState@8
468 IoSetDeviceToVerify@8
470 IoSetHardErrorOrVerifyDevice@8
473 @IoSetPartitionInformation@16
474 IoSetPartitionInformationEx@12
475 IoSetStartIoAttributes@12
477 IoSetThreadHardErrorMode@4
480 IoStartNextPacketByKey@12
483 IoStatisticsLock DATA
485 IoSynchronousPageWrite@20
486 IoSynchronousInvalidateDeviceRelations@8
488 IoUnregisterFileSystem@4
489 IoUnregisterFsRegistrationChange@8
490 IoUnregisterPlugPlayNotification@4
491 IoUnregisterShutdownNotification@4
492 IoUpdateShareAccess@8
493 IoValidateDeviceIoControlAccess@8
494 IoVerifyPartitionTable@8
496 IoVolumeDeviceToDosName@8
497 IoWMIAllocateInstanceIds@12
498 IoWMIDeviceObjectToInstanceName@12
499 IoWMIExecuteMethod@24
500 IoWMIHandleToInstanceName@12
503 IoWMIQueryAllDataMultiple@16
504 IoWMIQuerySingleInstance@16
505 IoWMIQuerySingleInstanceMultiple@20
506 IoWMIRegistrationControl@8
507 IoWMISetNotificationCallback@12
508 IoWMISetSingleInstance@20
509 IoWMISetSingleItem@24
510 IoWMISuggestInstanceName@16
512 IoWriteErrorLogEntry@4
513 IoWriteOperationCount DATA
514 @IoWritePartitionTable@20
515 IoWritePartitionTableEx@8
516 IoWriteTransferCount DATA
518 @IofCompleteRequest@8
519 IoIsWdmVersionAvailable@8
520 KdDebuggerEnabled DATA
521 KdDebuggerNotPresent DATA
527 KdSystemDebugControl@4
529 Ke386IoSetAccessProcess@8
530 Ke386QueryIoAccessMap@8
531 Ke386SetIoAccessMap@8
532 KeAcquireSpinLockAtDpcLevel@4
533 KeAcquireDispatcherDatabaseLockAtDpcLevel
534 @KeAcquireInStackQueuedSpinLockAtDpcLevel@8
535 KeAcquireInterruptSpinLock@4
536 KeAddSystemServiceTable@20
539 ;KeBoostCurrentThread
543 KeCapturePersistentThreadState@28
546 KeDcacheFlushCount DATA
547 KeDelayExecutionThread@12
548 KeDeregisterBugCheckCallback@4
549 KeDeregisterBugCheckReasonCallback@4
551 KeDisconnectInterrupt@4
552 KeEnterCriticalRegion@0
553 KeEnterKernelDebugger@0
554 KeFindConfigurationEntry@16
555 KeFindConfigurationNextEntry@20
560 KeGetRecommendedSharedDataAlignment@0
562 KeI386AllocateGdtSelectors
563 ;KeI386Call16BitCStyleFunction
564 ;KeI386Call16BitFunction
565 KeI386FlatToGdtSelector
567 ;KeI386MachineType DATA
568 KeI386ReleaseGdtSelectors
570 ;KeI386SetGdtSelector
571 KeIcacheFlushCount DATA
573 KeInitializeDeviceQueue@4
576 KeInitializeInterrupt@44
580 KeInitializeSemaphore@12
581 KeInitializeSpinLock@4
583 KeInitializeTimerEx@8
584 KeInsertByKeyDeviceQueue@12
585 KeInsertDeviceQueue@8
590 KeIsAttachedProcess@0
592 KeLeaveCriticalRegion@0
594 KeNumberProcessors DATA
596 KeProfileInterruptWithSource@8
598 KeQueryActiveProcessors@0
599 KeQueryInterruptTime@0
600 KeQueryPriorityThread@4
601 KeQueryRuntimeThread@8
604 KeQueryTimeIncrement@0
605 KeRaiseUserException@4
610 KeReadStateSemaphore@4
612 KeRegisterBugCheckCallback@20
613 KeRegisterBugCheckReasonCallback@16
614 KeReleaseDispatcherDatabaseLockFromDpcLevel
615 @KeReleaseInStackQueuedSpinLockFromDpcLevel@4
616 KeReleaseInterruptSpinLock@8
619 KeReleaseSemaphore@16
620 KeReleaseSpinLockFromDpcLevel@4
621 KeRemoveByKeyDeviceQueue@8
622 KeRemoveByKeyDeviceQueueIfBusy@8
623 KeRemoveDeviceQueue@4
624 KeRemoveEntryDeviceQueue@8
627 KeRemoveSystemServiceTable@4
629 KeRestoreFloatingPointState@4
630 KeRevertToUserAffinityThread@0
632 KeSaveFloatingPointState@4
633 KeSaveStateForHibernate
634 KeServiceDescriptorTable DATA
635 KeSetAffinityThread@8
636 KeSetBasePriorityThread@8
637 KeSetDmaIoCoherency@4
639 KeSetEventBoostPriority@8
640 KeSetIdealProcessorThread@8
642 KeSetKernelStackSwapEnable@4
643 KeSetPriorityThread@8
645 KeSetSystemAffinityThread@4
646 ;KeSetSwapContextNotifyRoutine
647 KeSetTargetProcessorDpc@8
648 ;KeSetThreadSelectNotifyRoutine
652 @KeSetTimeUpdateNotifyRoutine@4
653 KeStackAttachProcess@8
654 KeSynchronizeExecution@12
659 KeUnstackDetachProcess@4
660 KeUserModeCallback@20
661 KeWaitForMultipleObjects@32
662 KeWaitForMutexObject@20
663 KeWaitForSingleObject@20
664 @KefAcquireSpinLockAtDpcLevel@4
665 @KefReleaseSpinLockFromDpcLevel@4
671 KiDispatchInterrupt@0
672 KiEnableTimerWatchdog
673 KiInterruptDispatch2@8
674 KiIpiServiceRoutine@8
676 KiUnexpectedInterrupt@0
677 ;Kii386SpinOnSpinLock
681 LdrFindResourceDirectory_U@16
683 LpcPortObjectType DATA
685 LpcRequestWaitReplyPort@12
686 LsaCallAuthenticationPackage@28
687 LsaDeregisterLogonProcess@8
688 LsaFreeReturnBuffer@4
690 LsaLookupAuthenticationPackage@12
691 LsaRegisterLogonProcess@12
692 Mm64BitPhysicalAddress DATA
693 MmAddPhysicalMemory@8
694 MmAddVerifierThunks@8
695 MmAdjustWorkingSetSize@12
697 MmAllocateContiguousAlignedMemory@36
698 MmAllocateContiguousMemory@12
699 MmAllocateContiguousMemorySpecifyCache@32
700 MmAllocateMappingAddress@8
701 MmAllocateNonCachedMemory@4
702 MmAllocatePagesForMdl@28
703 MmBuildMdlForNonPagedPool@4
704 MmCanFileBeTruncated@8
709 MmDbgTranslatePhysicalAddress@8
710 MmDisableModifiedWriteOfSection@4
711 MmFlushImageSection@8
712 MmForceSectionClosed@8
713 MmFreeContiguousMemory@4
714 MmFreeContiguousMemorySpecifyCache@12
715 MmFreeMappingAddress@8
716 MmFreeNonCachedMemory@8
718 MmGetPhysicalAddress@4
719 MmGetPhysicalMemoryRanges@0
720 MmGetSystemRoutineAddress@4
721 MmGetVirtualForPhysical@8
723 MmHighestUserAddress DATA
725 MmIsDriverVerifying@4
726 MmIsNonPagedSystemAddressValid@4
727 MmIsRecursiveIoFault@0
728 MmIsThisAnNtAsSystem@0
729 MmIsVerifierEnabled@4
730 MmLockPagableDataSection@4
731 MmLockPagableImageSection@4=MmLockPagableDataSection@4
732 MmLockPagableSectionByHandle@4
735 MmMapLockedPagesSpecifyCache@24
736 MmMapLockedPagesWithReservedMapping@16
738 MmMapUserAddressesToPage@12
740 MmMapViewInSessionSpace@12
741 MmMapViewInSystemSpace@12
742 MmMapViewOfSection@40
743 MmMarkPhysicalMemoryAsBad@8
744 MmMarkPhysicalMemoryAsGood@8
747 MmProbeAndLockPages@12
748 MmProbeAndLockProcessPages@16
749 MmProbeAndLockSelectedPages@16
750 MmProtectMdlSystemAddress@8
752 MmRemovePhysicalMemory@8
753 MmResetDriverPaging@4
754 MmSectionObjectType DATA
755 MmSecureVirtualMemory@12
756 MmSetAddressRangeModified@8
757 MmSetBankedSection@24
759 MmSystemRangeStart DATA
760 MmTrimAllSystemPagableMemory@4
761 MmUnlockPagableImageSection@4
765 MmUnmapReservedMapping@12
766 MmUnmapVideoDisplay@8
767 MmUnmapViewInSessionSpace@4
768 MmUnmapViewInSystemSpace@4
769 MmUnmapViewOfSection@8
770 MmUnsecureVirtualMemory@4
771 MmUserProbeAddress DATA
774 NlsMbCodePageTag DATA
775 NlsMbOemCodePageTag DATA
776 NlsOemLeadByteInfo DATA
778 NtAdjustPrivilegesToken@24
780 NtAllocateLocallyUniqueId@4
782 NtAllocateVirtualMemory@24
793 NtDeviceIoControlFile@40
797 NtFreeVirtualMemory@16
801 NtMakePermanentObject@4
802 NtMapViewOfSection@40
803 NtNotifyChangeDirectoryFile@36
806 NtOpenProcessToken@12
807 NtOpenProcessTokenEx@16
810 NtOpenThreadTokenEx@20
811 NtQueryDirectoryFile@44
813 NtQueryInformationAtom@20
814 NtQueryInformationFile@20
815 NtQueryInformationProcess@20
816 NtQueryInformationThread@20
817 NtQueryInformationToken@20
818 NtQueryQuotaInformationFile@36
819 NtQuerySecurityObject@20
820 NtQuerySystemInformation@16
822 NtQueryVolumeInformationFile@20
825 NtRequestWaitReplyPort@12
828 NtSetInformationFile@20
829 NtSetInformationProcess@16
830 NtSetInformationThread@16
831 NtSetQuotaInformationFile@16
832 NtSetSecurityObject@12
833 NtSetVolumeInformationFile@20
840 NtWaitForSingleObject@12
843 ;ObCheckCreateObjectAccess@28
844 ;ObCheckObjectAccess@20
846 ObFindHandleForObject@20
847 ObGetObjectPointerCount@4
848 ObGetObjectSecurity@12
850 ObMakeTemporaryObject@4
851 ObOpenObjectByName@28
852 ObOpenObjectByPointer@28
854 ObQueryObjectAuditingByHandle@8
855 @ObfDereferenceObject@4
856 @ObfReferenceObject@4
857 ObReferenceObjectByHandle@24
858 ObReferenceObjectByName@32
859 ObReferenceObjectByPointer@16
860 ObReleaseObjectSecurity@8
861 ObDereferenceObject@4
862 ;ObSetSecurityDescriptorInfo@24
868 PoRegisterDeviceForIdleDetection@16
869 PoRegisterSystemState@8
874 PoStartNextPowerIrp@4
875 PoUnregisterSystemState@4
878 PsAssignImpersonationToken@8
880 PsChargeProcessNonPagedPoolQuota@4=PsDereferenceImpersonationToken@4
881 PsChargeProcessPagedPoolQuota@8
882 PsChargeProcessPoolQuota@12
883 PsCreateSystemProcess@12
884 PsCreateSystemThread@28
885 PsCreateWin32Process@4
886 PsDereferenceImpersonationToken@4=PsDereferencePrimaryToken@4
887 PsDereferencePrimaryToken@4
888 PsDisableImpersonation@8
889 PsEstablishWin32Callouts@24
890 PsGetCurrentProcessId@0
891 PsGetCurrentProcessSessionId@0
892 PsGetCurrentThreadId@0
893 PsGetCurrentThreadPreviousMode@0
894 PsGetCurrentThreadStackBase@0
895 PsGetCurrentThreadStackLimit@0
898 PsGetJobUIRestrictionsClass@4
899 PsGetProcessCreateTimeQuadPart@4
900 PsGetProcessDebugPort@4
901 PsGetProcessExitProcessCalled@4
902 PsGetProcessExitStatus@4
903 PsGetProcessExitTime@0
905 PsGetProcessImageFileName@4
906 PsGetProcessInheritedFromUniqueProcessId@4
909 PsGetProcessPriorityClass@4
910 PsGetProcessSectionBaseAddress@4
911 PsGetProcessSecurityPort@4
912 PsGetProcessSessionId@4
913 PsGetProcessWin32Process@4
914 PsGetProcessWin32WindowStation@4
915 PsGetThreadFreezeCount@4
916 PsGetThreadHardErrorsAreDisabled@4
919 PsGetThreadProcessId@4
920 PsGetThreadSessionId@4
922 PsGetThreadWin32Thread@4
926 PsImpersonateClient@20
927 PsInitialSystemProcess DATA
928 PsIsProcessBeingDebugged@4
930 PsIsThreadImpersonating@4
931 PsIsThreadTerminating@4
933 PsLookupProcessByProcessId@8
934 PsLookupProcessThreadByCid@12
935 PsLookupThreadByThreadId@8
937 PsReferenceImpersonationToken@16
938 PsReferencePrimaryToken@4
939 PsRemoveCreateThreadNotifyRoutine@4
940 PsRemoveLoadImageNotifyRoutine@4
941 PsRestoreImpersonation@8
943 PsReturnProcessNonPagedPoolQuota@8
944 PsReturnProcessPagedPoolQuota@8
946 PsRevertThreadToSelf@4
947 PsSetCreateProcessNotifyRoutine@8
948 PsSetCreateThreadNotifyRoutine@4
949 PsSetJobUIRestrictionsClass@8
950 PsSetLegoNotifyRoutine@4
951 PsSetProcessPriorityClass@8
952 PsSetProcessSecurityPort@8
953 PsSetProcessWin32Process@8
954 PsSetProcessWin32WindowStation@8
955 PsSetThreadHardErrorsAreDisabled@8
956 PsSetThreadWin32Thread@8
957 PsSetLoadImageNotifyRoutine@4
958 PsTerminateSystemThread@4
960 READ_REGISTER_UCHAR@4
961 READ_REGISTER_ULONG@4
962 READ_REGISTER_USHORT@4
963 READ_REGISTER_BUFFER_UCHAR@12
964 READ_REGISTER_BUFFER_ULONG@12
965 READ_REGISTER_BUFFER_USHORT@12
967 KeRosDumpStackFrames@8
968 KeRosGetStackFrames@8
969 RtlAbsoluteToSelfRelativeSD@12
970 RtlAddAccessAllowedAce@16
972 RtlAddAtomToAtomTable@12
974 ;RtlAllocateAndInitializeSid
976 RtlAnsiCharToUnicodeChar@4
977 RtlAnsiStringToUnicodeSize@4
978 RtlAnsiStringToUnicodeString@12
979 RtlAppendAsciizToString@8
980 RtlAppendStringToString@8
981 RtlAppendUnicodeStringToString@8
982 RtlAppendUnicodeToString@8
983 RtlAreAllAccessesGranted@8
984 RtlAreAnyAccessesGranted@8
989 RtlCaptureStackBackTrace@16
991 RtlCheckRegistryKey@8
996 RtlCompareMemoryUlong@12
998 RtlCompareUnicodeString@12
1000 RtlCompressChunks@28
1001 RtlConvertLongToLargeInteger@4
1002 RtlConvertSidToUnicodeString@12
1003 RtlConvertUlongToLargeInteger@4
1008 RtlCopyUnicodeString@8
1010 RtlCreateAtomTable@8
1012 RtlCreateRegistryKey@8
1013 RtlCreateSecurityDescriptor@8
1014 RtlCreateSystemVolumeInformationFolder@4
1015 RtlCreateUnicodeString@8
1016 RtlCustomCPToUnicodeN@24
1017 RtlDecompressBuffer@24
1018 RtlDecompressChunks@28
1019 RtlDecompressFragment@32
1022 RtlDeleteAtomFromAtomTable@8
1023 RtlDeleteElementGenericTable@8
1024 RtlDeleteElementGenericTableAvl@8
1026 RtlDeleteOwnersRanges@8
1028 RtlDeleteRegistryValue@12
1030 RtlDestroyAtomTable@4
1032 RtlDowncaseUnicodeString@12
1034 RtlEnlargedIntegerMultiply@8
1035 RtlEnlargedUnsignedDivide@16
1036 RtlEnlargedUnsignedMultiply@8
1037 RtlEnumerateGenericTable@8
1038 RtlEnumerateGenericTableAvl@8
1039 RtlEnumerateGenericTableLikeADirectory@28
1040 RtlEnumerateGenericTableWithoutSplaying@8
1041 RtlEnumerateGenericTableWithoutSplayingAvl@8
1045 RtlEqualUnicodeString@12
1046 RtlExtendedIntegerMultiply@12
1047 RtlExtendedLargeIntegerDivide@16
1048 RtlExtendedMagicDivide@20
1050 RtlFillMemoryUlong@12
1052 RtlFindClearBitsAndSet@12
1054 RtlFindFirstRunClear@8
1055 RtlFindFirstRunSet@8
1056 RtlFindLastBackwardRunClear@12
1057 RtlFindLeastSignificantBit@8
1058 RtlFindLongestRunClear@8
1059 RtlFindLongestRunSet@8
1061 RtlFindMostSignificantBit@8
1062 RtlFindNextForwardRunClear@12
1065 RtlFindSetBitsAndClear@12
1066 RtlFindUnicodePrefix@12
1067 RtlFormatCurrentUserKeyPath@4
1072 RtlFreeUnicodeString@4
1074 RtlGenerate8dot3Name@16
1076 RtlGetCallersAddress@8
1077 RtlGetCompressionWorkSpaceSize@12
1078 RtlGetDaclSecurityDescriptor@16
1079 RtlGetDefaultCodePage@8
1080 RtlGetElementGenericTable@8
1081 RtlGetElementGenericTableAvl@8
1083 RtlGetGroupSecurityDescriptor@12
1085 RtlGetNtGlobalFlags@0
1086 RtlGetOwnerSecurityDescriptor@12
1087 RtlGetSaclSecurityDescriptor@16
1088 RtlGetSetBootStatusData@24
1090 RtlHashUnicodeString@16
1092 RtlImageDirectoryEntryToData@16
1094 RtlInitCodePageTable@8
1096 RtlInitUnicodeString@8
1097 RtlInitializeBitMap@12
1098 RtlInitializeGenericTable@20
1099 RtlInitializeGenericTableAvl@20
1100 RtlInitializeRangeList@4
1102 RtlInitializeUnicodePrefix@4
1103 RtlInsertElementGenericTable@16
1104 RtlInsertElementGenericTableAvl@16
1105 RtlInsertElementGenericTableFull@24
1106 RtlInsertElementGenericTableFullAvl@24
1107 RtlInsertUnicodePrefix@12
1108 RtlInt64ToUnicodeString@16
1110 RtlIntegerToUnicode@16
1111 RtlIntegerToUnicodeString@12
1112 RtlInvertRangeList@8
1113 RtlIpv4AddressToStringA@8
1114 RtlIpv4AddressToStringExA@16
1115 RtlIpv4AddressToStringExW@16
1116 RtlIpv4AddressToStringW@8
1117 RtlIpv4StringToAddressA@16
1118 RtlIpv4StringToAddressExA@16
1119 RtlIpv4StringToAddressExW@16
1120 RtlIpv4StringToAddressW@16
1121 RtlIpv6AddressToStringA@8
1122 RtlIpv6AddressToStringExA@16
1123 RtlIpv6AddressToStringExW@16
1124 RtlIpv6AddressToStringW@8
1125 RtlIpv6StringToAddressA@16
1126 RtlIpv6StringToAddressExA@16
1127 RtlIpv6StringToAddressExW@16
1128 RtlIpv6StringToAddressW@16
1129 RtlIsGenericTableEmpty@4
1130 RtlIsGenericTableEmptyAvl@4
1131 RtlIsNameLegalDOS8Dot3@12
1132 RtlIsRangeAvailable@40
1133 RtlIsValidOemCharacter@4
1134 RtlLargeIntegerAdd@16
1135 RtlLargeIntegerArithmeticShift@12
1136 RtlLargeIntegerDivide@20
1137 RtlLargeIntegerNegate@8
1138 RtlLargeIntegerShiftLeft@12
1139 RtlLargeIntegerShiftRight@12
1140 RtlLargeIntegerSubtract@16
1141 RtlLengthRequiredSid@4
1142 RtlLengthSecurityDescriptor@4
1144 RtlLockBootStatusData@4
1145 RtlLookupAtomInAtomTable@12
1146 RtlLookupElementGenericTable@8
1147 RtlLookupElementGenericTableAvl@8
1148 RtlLookupElementGenericTableFull@16
1149 RtlLookupElementGenericTableFullAvl@16
1151 RtlMapSecurityErrorToNtStatus@4
1152 RtlMergeRangeLists@16
1154 RtlMultiByteToUnicodeN@20
1155 RtlMultiByteToUnicodeSize@12
1156 RtlNextUnicodePrefix@8
1157 RtlNtStatusToDosError@4
1158 RtlNtStatusToDosErrorNoTeb@4
1159 RtlNumberGenericTableElements@4
1160 RtlNumberGenericTableElementsAvl@4
1161 RtlNumberOfClearBits@4
1162 RtlNumberOfSetBits@4
1163 RtlOemStringToCountedUnicodeString@12
1164 RtlOemStringToUnicodeSize@4
1165 RtlOemStringToUnicodeString@12
1167 RtlPinAtomInAtomTable@8
1168 @RtlPrefetchMemoryNonTemporal@8
1170 RtlPrefixUnicodeString@12
1171 RtlQueryAtomInAtomTable@24
1172 RtlQueryRegistryValues@20
1173 RtlQueryTimeZoneInformation@4
1177 RtlRealPredecessor@4
1179 RtlRemoveUnicodePrefix@8
1181 RtlSecondsSince1970ToTime@8
1182 RtlSecondsSince1980ToTime@8
1183 RtlSelfRelativeToAbsoluteSD2@8
1184 RtlSelfRelativeToAbsoluteSD@44
1188 RtlSetDaclSecurityDescriptor@16
1189 RtlSetGroupSecurityDescriptor@12
1190 RtlSetOwnerSecurityDescriptor@12
1191 RtlSetSaclSecurityDescriptor@16
1192 RtlSetTimeZoneInformation@4
1196 RtlSubAuthorityCountSid@4
1197 RtlSubAuthoritySid@8
1198 RtlSubtreePredecessor@4
1199 RtlSubtreeSuccessor@4
1201 RtlTimeFieldsToTime@8
1202 RtlTimeToElapsedTimeFields@8
1203 RtlTimeToSecondsSince1970@8
1204 RtlTimeToSecondsSince1980@8
1205 RtlTimeToTimeFields@8
1207 @RtlUlonglongByteSwap@8
1208 RtlUnicodeStringToAnsiSize@4
1209 RtlUnicodeStringToAnsiString@12
1210 RtlUnicodeStringToCountedOemString@12
1211 RtlUnicodeStringToInteger@12
1212 RtlUnicodeStringToOemSize@4
1213 RtlUnicodeStringToOemString@12
1214 RtlUnicodeToCustomCPN@24
1215 RtlUnicodeToMultiByteN@20
1216 RtlUnicodeToMultiByteSize@12
1218 RtlUnlockBootStatusData@4
1220 RtlUpcaseUnicodeChar@4
1221 RtlUpcaseUnicodeString@12
1222 RtlUpcaseUnicodeStringToAnsiString@12
1223 RtlUpcaseUnicodeStringToCountedOemString@12
1224 RtlUpcaseUnicodeStringToOemString@12
1225 RtlUpcaseUnicodeToCustomCPN@24
1226 RtlUpcaseUnicodeToMultiByteN@20
1227 RtlUpcaseUnicodeToOemN@20
1230 @RtlUshortByteSwap@4
1231 RtlValidRelativeSecurityDescriptor@12
1232 RtlValidSecurityDescriptor@4
1234 ;RtlVerifyVersionInfo@16
1235 RtlVolumeDeviceToDosName@8
1236 RtlWalkFrameChain@12
1237 RtlWriteRegistryValue@24
1240 RtlxAnsiStringToUnicodeSize@4
1241 RtlxOemStringToUnicodeSize@4
1242 RtlxUnicodeStringToAnsiSize@4
1243 RtlxUnicodeStringToOemSize@4
1245 SeAppendPrivileges@8
1247 SeAssignSecurityEx@36
1248 SeAuditHardLinkCreation@12
1249 SeAuditingFileEvents@8
1250 SeAuditingFileEventsWithContext@12
1251 SeAuditingFileOrGlobalEvents@12
1252 SeAuditingHardLinkEvents@8
1253 SeAuditingHardLinkEventsWithContext@12
1254 SeCaptureSecurityDescriptor@20
1255 SeCaptureSubjectContext@4
1256 SeCloseObjectAuditAlarm@12
1257 SeCreateAccessState@16
1258 SeCreateClientSecurity@16
1259 SeCreateClientSecurityFromSubjectContext@16
1260 SeDeassignSecurity@4
1261 SeDeleteAccessState@4
1262 SeDeleteObjectAuditAlarm@8
1266 SeImpersonateClient@8
1267 SeImpersonateClientEx@8
1268 SeLockSubjectContext@4
1269 SeMarkLogonSessionForTerminationNotification@4
1270 SeOpenObjectAuditAlarm@36
1271 SeOpenObjectForDeleteAuditAlarm@36
1273 SePrivilegeObjectAuditAlarm@24
1274 SePublicDefaultDacl DATA
1275 SeQueryAuthenticationIdToken@8
1276 SeQueryInformationToken@12
1277 SeQuerySecurityDescriptorInfo@16
1278 SeQuerySessionIdToken@8
1279 SeRegisterLogonSessionTerminatedRoutine@4
1280 SeReleaseSecurityDescriptor@12
1281 SeReleaseSubjectContext@4
1282 SeSetAccessStateGenericMapping@8
1283 SeSetSecurityDescriptorInfo@24
1284 SeSetSecurityDescriptorInfoEx@28
1285 SeSinglePrivilegeCheck@12
1286 SeSystemDefaultDacl DATA
1287 SeTokenImpersonationLevel@4
1289 SeTokenIsRestricted@4
1290 SeTokenIsWriteRestricted@4
1292 SeUnlockSubjectContext@4
1293 SeUnregisterLogonSessionTerminatedRoutine@4
1294 SeValidSecurityDescriptor@8
1295 VerSetConditionMask@16
1296 WRITE_REGISTER_UCHAR@8
1297 WRITE_REGISTER_ULONG@8
1298 WRITE_REGISTER_USHORT@8
1299 WRITE_REGISTER_BUFFER_UCHAR@12
1300 WRITE_REGISTER_BUFFER_ULONG@12
1301 WRITE_REGISTER_BUFFER_USHORT@12
1302 ZwAccessCheckAndAuditAlarm@44
1304 ZwAdjustPrivilegesToken@24
1306 ZwAllocateVirtualMemory@24
1307 ZwAssignProcessToJobObject@8
1312 ZwCloseObjectAuditAlarm@12
1314 ZwCreateDirectoryObject@12
1317 ZwCreateJobObject@12
1320 ZwCreateSymbolicLinkObject@16
1326 ZwDeviceIoControlFile@40
1328 ZwDuplicateObject@28
1330 ZwEnumerateBootEntries@8
1332 ZwEnumerateValueKey@24
1333 ZwFlushInstructionCache@12
1335 ZwFlushVirtualMemory@16
1336 ZwFreeVirtualMemory@16
1338 ZwInitiatePowerAction@16
1342 ZwMakeTemporaryObject@4
1343 ZwMapViewOfSection@40
1344 ZwNotifyChangeKey@40
1345 ZwOpenDirectoryObject@12
1351 ZwOpenProcessToken@12
1352 ZwOpenProcessTokenEx@16
1354 ZwOpenSymbolicLinkObject@12
1356 ZwOpenThreadToken@16
1357 ZwOpenThreadTokenEx@20
1359 ZwPowerInformation@20
1361 ZwQueryBootEntryOrder@8
1362 ZwQueryBootOptions@8
1363 ZwQueryDefaultLocale@8
1364 ZwQueryDefaultUILanguage@4
1365 ZwQueryDirectoryFile@44
1366 ZwQueryDirectoryObject@28
1368 ZwQueryFullAttributesFile@8
1369 ZwQueryInformationAtom@20
1370 ZwQueryInformationFile@20
1371 ZwQueryInformationJobObject@20
1372 ZwQueryInformationProcess@20
1373 ZwQueryInformationThread@20
1374 ZwQueryInformationToken@20
1375 ZwQueryInstallUILanguage@4
1379 ZwQuerySecurityObject@20
1380 ZwQuerySymbolicLinkObject@12
1381 ZwQuerySystemInformation@16
1384 ZwQueryVolumeInformationFile@20
1387 ZwRequestWaitReplyPort@12
1392 ZwSetBootEntryOrder@8
1394 ZwSetDefaultLocale@8
1395 ZwSetDefaultUILanguage@4
1398 ZwSetInformationFile@20
1399 ZwSetInformationJobObject@16
1400 ZwSetInformationObject@16
1401 ZwSetInformationProcess@16
1402 ZwSetInformationThread@16
1403 ZwSetSecurityObject@12
1404 ZwSetSystemInformation@12
1408 ZwSetVolumeInformationFile@20
1409 ZwTerminateJobObject@8
1410 ZwTerminateProcess@8
1411 ZwTranslateFilePath@12
1414 ZwUnmapViewOfSection@8
1415 ZwWaitForMultipleObjects@20
1416 ZwWaitForSingleObject@12
1419 _abnormal_termination