Use free Windows DDK and compile with latest MinGW releases.
[reactos.git] / reactos / ntoskrnl / ntoskrnl.def
1 ; $Id: ntoskrnl.def,v 1.142 2002/09/07 15:12:47 chorns Exp $
2 ;
3 ; reactos/ntoskrnl/ntoskrnl.def
4 ;
5 ; ReactOS Operating System
6 ;
7 EXPORTS
8 CcRosInitializeFileCache@12
9 ;CcRosRequestCacheSegment@20
10 ;CcRosReleaseCacheSegment@12
11 CcRosReleaseFileCache@8
12 CcCopyRead@24
13 CcCopyWrite@20
14 CcMapData@24
15 CcMdlReadComplete@8
16 CcSetDirtyPinnedData@8
17 CcSetFileSizes@8
18 CcUnpinData@4
19 CcZeroData@16
20 DbgBreakPoint@0
21 DbgBreakPointWithStatus@4
22 ;DbgLoadImageSymbols@12
23 DbgPrint
24 DbgPrompt@12
25 DpcQueueSize DATA
26 @ExAcquireFastMutexUnsafe@4
27 ExAcquireResourceExclusive@8
28 ExAcquireResourceExclusiveLite@8
29 ExAcquireResourceSharedLite@8
30 ExAcquireSharedStarveExclusive@8
31 ExAcquireSharedWaitForExclusive@8
32 ExAllocateFromNPagedLookasideList@4
33 ExAllocateFromPagedLookasideList@4
34 ExAllocatePool@8
35 ExAllocatePoolWithQuota@8
36 ExAllocatePoolWithQuotaTag@12
37 ExAllocatePoolWithTag@12
38 ExConvertExclusiveToSharedLite@4
39 ExCreateCallback@16
40 ExDeleteNPagedLookasideList@4
41 ExDeletePagedLookasideList@4
42 ExDeleteResource@4
43 ExDeleteResourceLite@4
44 ExDesktopObjectType DATA
45 ExDisableResourceBoostLite@4
46 ExEventObjectType DATA
47 ExExtendZone@12
48 ExFreePool@4
49 ExFreeToNPagedLookasideList@8
50 ExFreeToPagedLookasideList@8
51 ExGetExclusiveWaiterCount@4
52 ExGetPreviousMode@0
53 ExGetSharedWaiterCount@4
54 ExInitializeNPagedLookasideList@28
55 ExInitializePagedLookasideList@28
56 ExInitializeResource@4
57 ExInitializeResourceLite@4
58 ExInitializeZone@16
59 ExInterlockedAddLargeInteger@16
60 @ExInterlockedAddLargeStatistic@8
61 @ExInterlockedAddUlong@12
62 @ExInterlockedCompareExchange64@16
63 ExInterlockedDecrementLong@8
64 ExInterlockedExchangeUlong@12
65 ExInterlockedExtendZone@16
66 ExInterlockedIncrementLong@8
67 @ExInterlockedInsertHeadList@12
68 @ExInterlockedInsertTailList@12
69 @ExInterlockedPopEntryList@8
70 @ExInterlockedPopEntrySList@8
71 @ExInterlockedPushEntryList@12
72 @ExInterlockedPushEntrySList@12
73 @ExInterlockedRemoveHeadList@8
74 ExIsProcessorFeaturePresent@4
75 ExIsResourceAcquiredExclusiveLite@4
76 ExIsResourceAcquiredSharedLite@4
77 ExLocalTimeToSystemTime@8
78 ExNotifyCallback@12
79 ExPostSystemEvent@12
80 ;ExQueryPoolBlockSize
81 ExQueueWorkItem@8
82 ExRaiseAccessViolation@0
83 ExRaiseDatatypeMisalignment@0
84 ;ExRaiseException
85 ;ExRaiseHardError
86 ExRaiseStatus@4
87 ExRegisterCallback@12
88 ExReinitializeResourceLite@4
89 @ExReleaseFastMutexUnsafe@4
90 ExReleaseResourceForThread@8
91 ExReleaseResourceForThreadLite@8
92 @ExReleaseResourceLite@4
93 ExSetResourceOwnerPointer@8
94 ;ExSystemExceptionFilter
95 ExSystemTimeToLocalTime@8
96 ExTryToAcquireResourceExclusiveLite@4
97 ExUnregisterCallback@4
98 ExWindowStationObjectType DATA
99 ExInitializeBinaryTree@12
100 ExDeleteBinaryTree@4
101 ExInsertBinaryTree@12
102 ExSearchBinaryTree@12
103 ExRemoveBinaryTree@12
104 ExTraverseBinaryTree@16
105 ExInitializeSplayTree@16
106 ExDeleteSplayTree@4
107 ExInsertSplayTree@12
108 ExSearchSplayTree@12
109 ExRemoveSplayTree@12
110 ExWeightOfSplayTree@8
111 ExTraverseSplayTree@16
112 ExInitializeHashTable@16
113 ExDeleteHashTable@4
114 ExInsertHashTable@16
115 ExSearchHashTable@16
116 ExRemoveHashTable@16
117 @ExfInterlockedAddUlong@12
118 @ExfInterlockedInsertHeadList@12
119 @ExfInterlockedInsertTailList@12
120 @ExfInterlockedPopEntryList@8
121 @ExfInterlockedPushEntryList@12
122 @ExfInterlockedRemoveHeadList@8
123 @Exfi386InterlockedDecrementLong@4
124 @Exfi386InterlockedExchangeUlong@8
125 @Exfi386InterlockedIncrementLong@4
126 Exi386InterlockedDecrementLong@4
127 Exi386InterlockedExchangeUlong@8
128 Exi386InterlockedIncrementLong@4
129 FsRtlAddLargeMcbEntry@28
130 FsRtlAddMcbEntry@16
131 FsRtlAddToTunnelCache@32
132 FsRtlAllocateFileLock@8
133 FsRtlAllocatePool@8
134 FsRtlAllocatePoolWithQuota@8
135 FsRtlAllocatePoolWithQuotaTag@12
136 FsRtlAllocatePoolWithTag@12
137 FsRtlAllocateResource@0
138 FsRtlAreNamesEqual@16
139 FsRtlBalanceReads@4
140 FsRtlCheckLockForReadAccess@8
141 FsRtlCheckLockForWriteAccess@8
142 FsRtlCheckOplock@20
143 FsRtlCopyRead@32
144 FsRtlCopyWrite@32
145 FsRtlCurrentBatchOplock@4
146 FsRtlDeleteKeyFromTunnelCache@12
147 FsRtlDeleteTunnelCache@4
148 FsRtlDeregisterUncProvider@4
149 FsRtlDissectDbcs@16
150 FsRtlDissectName@16
151 FsRtlDoesDbcsContainWildCards@4
152 FsRtlDoesNameContainWildCards@4
153 FsRtlFastCheckLockForRead@24
154 FsRtlFastCheckLockForWrite@24
155 FsRtlFastUnlockAll@16
156 FsRtlFastUnlockAllByKey@20
157 FsRtlFastUnlockSingle@32
158 FsRtlFindInTunnelCache@32
159 FsRtlGetFileSize@8
160 FsRtlGetNextFileLock@8
161 FsRtlGetNextLargeMcbEntry@20
162 FsRtlGetNextMcbEntry@20
163 FsRtlInitializeFileLock@12
164 FsRtlInitializeLargeMcb@8
165 FsRtlInitializeMcb@8
166 FsRtlInitializeOplock@4
167 FsRtlInitializeTunnelCache@4
168 FsRtlIsDbcsInExpression@8
169 FsRtlIsFatDbcsLegal@20
170 FsRtlIsHpfsDbcsLegal@20
171 FsRtlIsNameInExpression@16
172 FsRtlIsNtstatusExpected@4
173 FsRtlIsTotalDeviceFailure@4
174 FsRtlLegalAnsiCharacterArray DATA
175 FsRtlLookupLargeMcbEntry@32
176 FsRtlLookupLastLargeMcbEntry@12
177 FsRtlLookupLastMcbEntry@12
178 FsRtlLookupMcbEntry@20
179 FsRtlMdlRead@24
180 FsRtlMdlReadComplete@8
181 FsRtlMdlReadCompleteDev@12
182 FsRtlMdlReadDev@28
183 FsRtlMdlWriteComplete@12
184 FsRtlMdlWriteCompleteDev@16
185 FsRtlNormalizeNtstatus@8
186 FsRtlNotifyChangeDirectory@28
187 FsRtlNotifyCleanup@12
188 FsRtlNotifyFullChangeDirectory@40
189 FsRtlNotifyFullReportChange@36
190 FsRtlNotifyInitializeSync@4
191 FsRtlNotifyReportChange@20
192 FsRtlNotifyUninitializeSync@4
193 FsRtlNotifyVolumeEvent@8
194 FsRtlNumberOfRunsInLargeMcb@4
195 FsRtlNumberOfRunsInMcb@4
196 FsRtlOplockFsctrl@12
197 FsRtlOplockIsFastIoPossible@4
198 FsRtlPostPagingFileStackOverflow@12
199 FsRtlPostStackOverflow@12
200 FsRtlPrepareMdlWrite@24
201 FsRtlPrepareMdlWriteDev@28
202 FsRtlPrivateLock@48
203 FsRtlProcessFileLock@12
204 FsRtlRegisterUncProvider@12
205 FsRtlRemoveLargeMcbEntry@20
206 FsRtlRemoveMcbEntry@12
207 FsRtlSplitLargeMcb@20
208 FsRtlSyncVolumes@12
209 FsRtlTruncateLargeMcb@12
210 FsRtlTruncateMcb@8
211 FsRtlUninitializeFileLock@4
212 FsRtlUninitializeLargeMcb@4
213 FsRtlUninitializeMcb@4
214 FsRtlUninitializeOplock@4
215 HalDispatchTable DATA
216 HalPrivateDispatchTable DATA
217 @InterlockedCompareExchange@12
218 @InterlockedDecrement@4
219 @InterlockedExchange@8
220 @InterlockedExchangeAdd@8
221 @InterlockedIncrement@4
222 @InterlockedPopEntrySList@4
223 @InterlockedPushEntrySList@8
224 IoAcquireCancelSpinLock@4
225 IoAcquireRemoveLockEx@20
226 IoAcquireVpbSpinLock@4
227 IoAdapterObjectType DATA
228 IoAllocateAdapterChannel@20
229 IoAllocateController@16
230 IoAllocateErrorLogEntry@8
231 IoAllocateIrp@8
232 IoAllocateMdl@20
233 IoAssignResources@24
234 IoAttachDevice@12
235 IoAttachDeviceByPointer@8
236 IoAttachDeviceToDeviceStack@8
237 IoBuildAsynchronousFsdRequest@24
238 IoBuildDeviceIoControlRequest@36
239 IoBuildPartialMdl@16
240 IoBuildSynchronousFsdRequest@28
241 IoCallDriver@8
242 IoCancelIrp@4
243 IoCheckDesiredAccess@8
244 IoCheckEaBufferValidity@12
245 IoCheckFunctionAccess@24
246 IoCheckShareAccess@20
247 IoCompleteRequest@8
248 IoConnectInterrupt@44
249 IoCreateController@4
250 IoCreateDevice@28
251 IoCreateFile@56
252 IoCreateNotificationEvent@8
253 IoCreateStreamFileObject@8
254 IoCreateSymbolicLink@8
255 IoCreateSynchronizationEvent@8
256 IoCreateUnprotectedSymbolicLink@8
257 IoDeleteController@4
258 IoDeleteDevice@4
259 IoDeleteSymbolicLink@4
260 IoDetachDevice@4
261 IoDeviceHandlerObjectSize DATA
262 IoDeviceHandlerObjectType DATA
263 IoDisconnectInterrupt@4
264 IoDeviceObjectType DATA
265 IoDriverObjectType DATA
266 IoEnqueueIrp@4
267 IoFastQueryNetworkAttributes@20
268 IoFileObjectType DATA
269 IoFreeController@4
270 IoFreeIrp@4
271 IoFreeMdl@4
272 IoGetAttachedDevice@4
273 IoGetAttachedDeviceReference@4
274 IoGetBaseFileSystemDeviceObject@4
275 IoGetConfigurationInformation@0
276 IoGetCurrentProcess@0
277 IoGetDeviceObjectPointer@16
278 IoGetDeviceToVerify@4
279 IoGetFileObjectGenericMapping@0
280 IoGetInitialStack@0
281 IoGetRelatedDeviceObject@4
282 IoGetRequestorProcess@4
283 IoGetStackLimits@8
284 IoGetTopLevelIrp@0
285 IoInitializeIrp@12
286 IoInitializeRemoveLockEx@20
287 IoInitializeTimer@12
288 IoIsOperationSynchronous@4
289 IoMakeAssociatedIrp@8
290 IoOpenDeviceInstanceKey@20
291 IoPageRead@20
292 IoQueryDeviceDescription@32
293 IoQueryDeviceEnumInfo@8
294 IoQueryFileInformation@20
295 IoQueryVolumeInformation@20
296 IoQueueThreadIrp@4
297 IoRaiseHardError@12
298 IoRaiseInformationalHardError@12
299 IoReadOperationCount DATA
300 IoReadPartitionTable@16
301 IoReadTransferCount DATA
302 IoRegisterDriverReinitialization@12
303 IoRegisterFileSystem@4
304 IoRegisterFsRegistrationChange@8
305 IoRegisterShutdownNotification@4
306 IoReleaseCancelSpinLock@4
307 IoReleaseRemoveLockAndWaitEx@12
308 IoReleaseRemoveLockEx@12
309 IoReleaseVpbSpinLock@4
310 IoRemoveShareAccess@8
311 IoReportHalResourceUsage@16
312 IoReportResourceUsage@36
313 IoSetDeviceToVerify@8
314 IoSetHardErrorOrVerifyDevice@8
315 IoSetInformation@16
316 IoSetPartitionInformation@16
317 IoSetShareAccess@16
318 IoSetThreadHardErrorMode@4
319 IoSetTopLevelIrp@4
320 IoStartNextPacket@8
321 IoStartNextPacketByKey@12
322 IoStartPacket@16
323 IoStartTimer@4
324 IoStatisticsLock DATA
325 IoStopTimer@4
326 IoSynchronousPageWrite@20
327 IoThreadToProcess@4
328 IoUnregisterFileSystem@4
329 IoUnregisterFsRegistrationChange@8
330 IoUnregisterShutdownNotification@4
331 IoUpdateShareAccess@8
332 IoVerifyVolume@8
333 IoWriteErrorLogEntry@4
334 IoWriteOperationCount DATA
335 IoWritePartitionTable@20
336 IoWriteTransferCount DATA
337 @IofCallDriver@8
338 @IofCompleteRequest@8
339 KdDebuggerEnabled DATA
340 KdDebuggerNotPresent DATA
341 KdPollBreakIn@0
342 KdSystemDebugControl@4
343 Ke386CallBios@8
344 ;Ke386IoSetAccessProcess
345 ;Ke386QueryIoAccessMap
346 ;Ke386SetIoAccessMap
347 KeAcquireSpinLockAtDpcLevel@4
348 KeAddSystemServiceTable@20
349 KeAttachProcess@4
350 ;KeBoostCurrentThread
351 KeBugCheck@4
352 KeBugCheckEx@20
353 KeCancelTimer@4
354 KeClearEvent@4
355 KeConnectInterrupt@4
356 KeDcacheFlushCount DATA
357 KeDelayExecutionThread@12
358 KeDeregisterBugCheckCallback@4
359 KeDetachProcess@0
360 KeDisconnectInterrupt@4
361 KeEnterCriticalRegion@0
362 KeEnterKernelDebugger@0
363 ;KeFindConfigurationEntry
364 ;KeFindConfigurationNextEntry
365 ;KeFlushEntireTb
366 KeGetCurrentThread@0
367 KeGetPreviousMode@0
368 ;KeI386AbiosCall
369 ;KeI386AllocateGdtSelectors
370 ;KeI386Call16BitCStyleFunction
371 ;KeI386Call16BitFunction
372 ;KeI386FlatToGdtSelector
373 ;KeI386GetLid
374 ;KeI386MachineType DATA
375 ;KeI386ReleaseGdtSelectors
376 ;KeI386ReleaseLid
377 ;KeI386SetGdtSelector
378 KeIcacheFlushCount DATA
379 KeInitializeApc@32
380 KeInitializeDeviceQueue@4
381 KeInitializeDpc@12
382 KeInitializeEvent@12
383 KeInitializeInterrupt@44
384 KeInitializeMutant@8
385 KeInitializeMutex@8
386 KeInitializeQueue@8
387 KeInitializeSemaphore@12
388 KeInitializeSpinLock@4
389 KeInitializeTimer@4
390 KeInitializeTimerEx@8
391 KeInsertByKeyDeviceQueue@12
392 KeInsertDeviceQueue@8
393 KeInsertHeadQueue@8
394 KeInsertQueue@8
395 KeInsertQueueApc@16
396 KeInsertQueueDpc@12
397 ;KeIsExecutingDpc
398 KeLeaveCriticalRegion@0
399 KeLoaderBlock DATA
400 KeNumberProcessors DATA
401 ;KeProfileInterrupt
402 ;KeProfileInterruptWithSource
403 KePulseEvent@12
404 KeQuerySystemTime@4
405 KeQueryTickCount@4
406 KeQueryTimeIncrement@0
407 ;KeRaiseUserException
408 KeReadStateEvent@4
409 KeReadStateMutant@4
410 KeReadStateMutex@4
411 KeReadStateQueue@4
412 KeReadStateSemaphore@4
413 KeReadStateTimer@4
414 KeRegisterBugCheckCallback@20
415 KeReleaseMutant@16
416 KeReleaseMutex@8
417 KeReleaseSemaphore@16
418 KeReleaseSpinLockFromDpcLevel@4
419 KeRemoveByKeyDeviceQueue@8
420 KeRemoveDeviceQueue@4
421 KeRemoveEntryDeviceQueue@8
422 KeRemoveQueue@12
423 KeRemoveQueueDpc@4
424 KeResetEvent@4
425 ;KeRestoreFloatingPointState
426 KeRundownQueue@4
427 ;KeSaveFloatingPointState
428 KeServiceDescriptorTable DATA
429 ;KeSetAffinityThread
430 KeSetBasePriorityThread@8
431 ;KeSetDmaIoCoherency
432 KeSetEvent@12
433 ;KeSetEventBoostPriority
434 ;KeSetIdealProcessorThread
435 KeSetImportanceDpc@8
436 ;KeSetKernelStackSwapEnable
437 KeSetPriorityThread@8
438 ;KeSetProfileIrql
439 ;@KeSetSwapContextNotifyRoutine
440 KeSetTargetProcessorDpc@8
441 ;@KeSetThreadSelectNotifyRoutine
442 ;KeSetTimeIncrement
443 KeSetTimer@16
444 KeSetTimerEx@20
445 ;@KeSetTimeUpdateNotifyRoutine
446 KeSynchronizeExecution@12
447 ;KeTerminateThread
448 KeTickCount DATA
449 ;KeUpdateRunTime
450 ;KeUserModeCallback
451 KeWaitForMultipleObjects@32
452 KeWaitForMutexObject@20
453 KeWaitForSingleObject@20
454 @KefAcquireSpinLockAtDpcLevel@4
455 @KefReleaseSpinLockFromDpcLevel@4
456 ;Kei386EoiHelper
457 ;@KiAcquireSpinLock@4
458 ;KiBugCheckData DATA
459 ;KiCoprocessorError@0
460 KiDeliverApc@12
461 KiDispatchInterrupt@0
462 KiInterruptDispatch2@8
463 ;KiIpiServiceRoutine@8
464 ;@KiReleaseSpinLock@4
465 ;KiUnexpectedInterrupt
466 ;Kii386SpinOnSpinLock
467 KiRawTicks DATA
468 LdrAccessResource@16
469 ;LdrEnumResources@20
470 ;LdrFindResourceDirectory_U@16
471 LdrFindResource_U@16
472 ;LpcRequestPort@8
473 LsaCallAuthenticationPackage@28
474 LsaDeregisterLogonProcess@8
475 LsaFreeReturnBuffer@4
476 LsaLogonUser@56
477 LsaLookupAuthenticationPackage@12
478 LsaRegisterLogonProcess@12
479 MmAdjustWorkingSetSize@12
480 MmAllocateContiguousAlignedMemory@16
481 MmAllocateContiguousMemory@12
482 MmAllocateNonCachedMemory@4
483 MmBuildMdlForNonPagedPool@4
484 MmCanFileBeTruncated@8
485 MmCopyFromCaller@12
486 MmCopyToCaller@12
487 MmCreateMdl@12
488 MmCreateSection@32
489 MmDbgTranslatePhysicalAddress@8
490 MmDisableModifiedWriteOfSection@4
491 MmFlushImageSection@8
492 MmForceSectionClosed@8
493 MmFreeContiguousMemory@4
494 MmFreeNonCachedMemory@8
495 MmGetPhysicalAddress@4
496 MmGrowKernelStack@4
497 MmHighestUserAddress DATA
498 MmIsAddressValid@4
499 MmIsNonPagedSystemAddressValid@4
500 MmIsRecursiveIoFault@0
501 MmIsThisAnNtAsSystem@0
502 MmLockPagableDataSection@4
503 MmLockPagableImageSection@4=MmLockPagableDataSection@4
504 MmLockPagableSectionByHandle@4
505 MmMapIoSpace@16
506 MmMapLockedPages@8
507 MmMapMemoryDumpMdl@4
508 MmMapVideoDisplay@16
509 MmMapViewInSystemSpace@12
510 MmMapViewOfSection@40
511 MmPageEntireDriver@4
512 MmProbeAndLockPages@12
513 MmQuerySystemSize@0
514 MmResetDriverPaging@4
515 MmSectionObjectType DATA
516 MmSecureVirtualMemory@12
517 MmSetAddressRangeModified@8
518 MmSetBankedSection@24
519 MmSizeOfMdl@8
520 MmUnlockPagableImageSection@4
521 MmUnlockPages@4
522 MmUnmapIoSpace@8
523 MmUnmapLockedPages@8
524 MmUnmapVideoDisplay@8
525 MmUnmapViewInSystemSpace@4
526 MmUnmapViewOfSection@8
527 MmUnsecureVirtualMemory@4
528 MmUserProbeAddress DATA
529 NlsAnsiCodePage DATA
530 NlsLeadByteInfo DATA
531 NlsMbCodePageTag DATA
532 NlsMbOemCodePageTag DATA
533 NlsOemLeadByteInfo DATA
534 NtAddAtom@12
535 NtAdjustPrivilegesToken@24
536 NtAlertThread@4
537 NtAllocateLocallyUniqueId@4
538 NtAllocateUuids@16
539 NtAllocateVirtualMemory@24
540 NtBuildNumber DATA
541 NtClose@4
542 NtConnectPort@32
543 NtCreateEvent@20
544 NtCreateTimer@16
545 NtOpenEvent@12
546 NtCreateFile@44
547 NtCreateSection@28
548 NtDeleteAtom@4
549 NtDeleteFile@4
550 NtDeviceIoControlFile@40
551 NtDuplicateObject@28
552 NtDuplicateToken@24
553 NtFindAtom@12
554 NtFreeVirtualMemory@16
555 NtFsControlFile@40
556 NtGlobalFlag DATA
557 NtLockFile@40
558 NtMapViewOfSection@40
559 NtNotifyChangeDirectoryFile@36
560 NtOpenFile@24
561 NtOpenProcess@16
562 NtOpenProcessToken@12
563 NtQueryDirectoryFile@44
564 NtQueryEaFile@36
565 NtQueryInformationAtom@20
566 NtQueryInformationFile@20
567 NtQueryInformationProcess@20
568 NtQueryInformationToken@20
569 ;NtQueryOleDirectoryFile@ <--- ?
570 NtQuerySecurityObject@20
571 NtQuerySystemTime@4
572 NtQueryVolumeInformationFile@20
573 NtReadFile@36
574 NtRequestPort@20
575 NtRequestWaitReplyPort@12
576 NtSetEvent@8
577 NtSetInformationFile@20
578 NtSetInformationProcess@16
579 NtSetInformationThread@16
580 NtSetSecurityObject@12
581 NtSetSystemTime@8
582 NtUnlockFile@20
583 NtVdmControl@8
584 NtW32Call@20
585 NtWaitForSingleObject@12
586 NtWriteFile@36
587 ObAssignSecurity@16
588 ;ObCheckCreateObjectAccess@28
589 ;ObCheckObjectAccess@20
590 ;ObCreateObject@36
591 ObRosCreateObject@20
592 ;ObFindHandleForObject@20
593 ObGetObjectPointerCount@4
594 ObGetObjectSecurity@12
595 ;ObInsertObject@24
596 ObMakeTemporaryObject@4
597 ObOpenObjectByName@28
598 ObOpenObjectByPointer@28
599 ;ObQueryNameString@16
600 ;ObQueryObjectAuditingByHandle@8
601 @ObfDereferenceObject@4
602 @ObfReferenceObject@4
603 ObReferenceObjectByHandle@24
604 ObReferenceObjectByName@32
605 ObReferenceObjectByPointer@16
606 ObReleaseObjectSecurity@8
607 ;ObSetSecurityDescriptorInfo@24
608 ;PfxFindPrefix
609 ;PfxInitialize
610 ;PfxInsertPrefix
611 ;PfxRemovePrefix
612 PoCallDriver@8
613 PoRegisterDeviceForIdleDetection@16
614 PoRegisterSystemState@8
615 PoRequestPowerIrp@24
616 PoSetDeviceBusy@4
617 PoSetPowerState@12
618 PoSetSystemState@4
619 PoStartNextPowerIrp@4
620 PoUnregisterSystemState@4
621 ;ProbeForWrite@12
622 PsAssignImpersonationToken@8
623 ;PsChargePoolQuota@12
624 PsCreateSystemProcess@12
625 PsCreateSystemThread@28
626 PsCreateWin32Thread@4
627 PsCreateWin32Process@4
628 PsGetWin32Thread@0
629 PsGetWin32Process@0
630 PsEstablishWin32Callouts@24
631 PsGetCurrentProcess@0
632 PsGetCurrentProcessId@0
633 PsGetCurrentThreadId@0
634 PsGetCurrentThread@0
635 PsGetProcessExitTime@0
636 PsGetVersion@16
637 PsImpersonateClient@20
638 PsInitialSystemProcess DATA
639 PsIsThreadTerminating@4
640 PsLookupProcessByProcessId@8
641 PsLookupProcessThreadByCid@12
642 PsLookupThreadByThreadId@8
643 PsProcessType DATA
644 PsReferenceImpersonationToken@16
645 PsReferencePrimaryToken@4
646 ;PsReturnPoolQuota@12
647 PsRevertToSelf@0
648 PsSetCreateProcessNotifyRoutine@8
649 PsSetCreateThreadNotifyRoutine@4
650 ;PsSetLegoNotifyRoutine@4
651 ;PsSetProcessPriorityByClass@8
652 PsTerminateSystemThread@4
653 PsThreadType DATA
654 READ_REGISTER_UCHAR@4
655 READ_REGISTER_ULONG@4
656 READ_REGISTER_USHORT@4
657 READ_REGISTER_BUFFER_UCHAR@12
658 READ_REGISTER_BUFFER_ULONG@12
659 READ_REGISTER_BUFFER_USHORT@12
660 RtlAbsoluteToSelfRelativeSD@12
661 RtlAddAccessAllowedAce@16
662 RtlAddAce@20
663 RtlAddAtomToAtomTable@12
664 ;RtlAllocateAndInitializeSid
665 ;RtlAllocateHeap
666 RtlAnsiCharToUnicodeChar@4
667 RtlAnsiStringToUnicodeSize@4
668 RtlAnsiStringToUnicodeString@12
669 RtlAppendAsciizToString@8
670 RtlAppendStringToString@8
671 RtlAppendUnicodeStringToString@8
672 RtlAppendUnicodeToString@8
673 RtlAreAllAccessesGranted@8
674 RtlAreAnyAccessesGranted@8
675 RtlAreBitsClear@12
676 RtlAreBitsSet@12
677 RtlAssert@16
678 ;RtlCaptureStackBackTrace
679 RtlCharToInteger@12
680 RtlCheckRegistryKey@8
681 RtlClearAllBits@4
682 RtlClearBits@12
683 RtlCompareMemory@12
684 RtlCompareMemoryUlong@12
685 RtlCompareString@12
686 RtlCompareUnicodeString@12
687 RtlCompressBuffer@32
688 RtlCompressChunks@28
689 RtlConvertLongToLargeInteger@4
690 RtlConvertSidToUnicodeString@12
691 RtlConvertUlongToLargeInteger@4
692 RtlCopyLuid@8
693 RtlCopySid@12
694 RtlCopyString@8
695 RtlCopyUnicodeString@8
696 RtlCreateAcl@12
697 RtlCreateAtomTable@8
698 ;RtlCreateHeap
699 RtlCreateRegistryKey@8
700 RtlCreateSecurityDescriptor@8
701 RtlCreateUnicodeString@8
702 RtlCustomCPToUnicodeN@24
703 RtlDecompressBuffer@24
704 RtlDecompressChunks@28
705 RtlDecompressFragment@32
706 ;RtlDelete
707 RtlDeleteAtomFromAtomTable@8
708 ;RtlDeleteElementGenericTable
709 ;RtlDeleteNoSplay
710 RtlDeleteRegistryValue@12
711 RtlDescribeChunk@20
712 RtlDestroyAtomTable@4
713 ;RtlDestroyHeap
714 RtlDowncaseUnicodeString@12
715 RtlEmptyAtomTable@8
716 RtlEnlargedIntegerMultiply@8
717 RtlEnlargedUnsignedDivide@16
718 RtlEnlargedUnsignedMultiply@8
719 ;RtlEnumerateGenericTable
720 ;RtlEnumerateGenericTableWithoutSplaying
721 RtlEqualLuid@8
722 RtlEqualSid@8
723 RtlEqualString@12
724 RtlEqualUnicodeString@12
725 RtlExtendedIntegerMultiply@12
726 RtlExtendedLargeIntegerDivide@16
727 RtlExtendedMagicDivide@20
728 RtlFillMemory@12
729 RtlFillMemoryUlong@12
730 RtlFindClearBits@12
731 RtlFindClearBitsAndSet@12
732 RtlFindFirstRunClear@8
733 RtlFindFirstRunSet@8
734 RtlFindLongestRunClear@8
735 RtlFindLongestRunSet@8
736 RtlFindMessage@20
737 RtlFindSetBits@12
738 RtlFindSetBitsAndClear@12
739 ;RtlFindUnicodePrefix
740 RtlFormatCurrentUserKeyPath@4
741 RtlFreeAnsiString@4
742 ;RtlFreeHeap
743 RtlFreeOemString@4
744 RtlFreeUnicodeString@4
745 RtlGenerate8dot3Name@16
746 ;RtlGetCallersAddress
747 RtlGetCompressionWorkSpaceSize@12
748 RtlGetDaclSecurityDescriptor@16
749 RtlGetDefaultCodePage@8
750 ;RtlGetElementGenericTable
751 RtlGetGroupSecurityDescriptor@12
752 RtlGetOwnerSecurityDescriptor@12
753 RtlImageNtHeader@4
754 RtlInitAnsiString@8
755 ;RtlInitCodePageTable
756 RtlInitString@8
757 RtlInitUnicodeString@8
758 RtlInitializeBitMap@12
759 ;RtlInitializeGenericTable
760 RtlInitializeSid@12
761 ;RtlInitializeUnicodePrefix
762 ;RtlInsertElementGenericTable
763 ;RtlInsertUnicodePrefix
764 RtlIntegerToChar@16
765 RtlIntegerToUnicodeString@12
766 RtlIsNameLegalDOS8Dot3@12
767 RtlLargeIntegerAdd@16
768 RtlLargeIntegerArithmeticShift@12
769 RtlLargeIntegerDivide@20
770 RtlLargeIntegerNegate@8
771 RtlLargeIntegerShiftLeft@12
772 RtlLargeIntegerShiftRight@12
773 RtlLargeIntegerSubtract@16
774 RtlLengthRequiredSid@4
775 RtlLengthSecurityDescriptor@4
776 RtlLengthSid@4
777 RtlLookupAtomInAtomTable@12
778 ;RtlLookupElementGenericTable
779 RtlMapGenericMask@8
780 RtlMoveMemory@12
781 RtlMultiByteToUnicodeN@20
782 RtlMultiByteToUnicodeSize@12
783 ;RtlNextUnicodePrefix
784 RtlNtStatusToDosError@4
785 RtlNtStatusToDosErrorNoTeb@4
786 ;RtlNumberGenericTableElements
787 RtlNumberOfClearBits@4
788 RtlNumberOfSetBits@4
789 RtlOemStringToCountedUnicodeString@12
790 RtlOemStringToUnicodeSize@4
791 RtlOemStringToUnicodeString@12
792 RtlOemToUnicodeN@20
793 RtlPinAtomInAtomTable@8
794 RtlPrefixString@12
795 RtlPrefixUnicodeString@12
796 RtlQueryAtomInAtomTable@24
797 RtlQueryRegistryValues@20
798 RtlQueryTimeZoneInformation@4
799 RtlRaiseException@4
800 ;RtlRandom
801 ;RtlRemoveUnicodePrefix
802 RtlReserveChunk@20
803 RtlSecondsSince1970ToTime@8
804 RtlSecondsSince1980ToTime@8
805 RtlSetAllBits@4
806 RtlSetBits@12
807 RtlSetDaclSecurityDescriptor@16
808 RtlSetGroupSecurityDescriptor@12
809 RtlSetOwnerSecurityDescriptor@12
810 RtlSetSaclSecurityDescriptor@16
811 RtlSetTimeZoneInformation@4
812 ;RtlSplay
813 RtlSubAuthorityCountSid@4
814 RtlSubAuthoritySid@8
815 RtlTimeFieldsToTime@8
816 RtlTimeToSecondsSince1970@8
817 RtlTimeToSecondsSince1980@8
818 RtlTimeToTimeFields@8
819 RtlUnicodeStringToAnsiSize@4
820 RtlUnicodeStringToAnsiString@12
821 RtlUnicodeStringToCountedOemString@12
822 RtlUnicodeStringToInteger@12
823 RtlUnicodeStringToOemSize@4
824 RtlUnicodeStringToOemString@12
825 RtlUnicodeToCustomCPN@24
826 RtlUnicodeToMultiByteN@20
827 RtlUnicodeToMultiByteSize@12
828 RtlUnicodeToOemN@20
829 RtlUnwind@16
830 RtlUpcaseUnicodeChar@4
831 RtlUpcaseUnicodeString@12
832 RtlUpcaseUnicodeStringToAnsiString@12
833 RtlUpcaseUnicodeStringToCountedOemString@12
834 RtlUpcaseUnicodeStringToOemString@12
835 RtlUpcaseUnicodeToCustomCPN@24
836 RtlUpcaseUnicodeToMultiByteN@20
837 RtlUpcaseUnicodeToOemN@20
838 RtlUpperChar@4
839 RtlUpperString@8
840 RtlValidSecurityDescriptor@4
841 RtlValidSid@4
842 RtlWriteRegistryValue@24
843 ;RtlZeroHeap
844 RtlZeroMemory@8
845 RtlxAnsiStringToUnicodeSize@4
846 RtlxOemStringToUnicodeSize@4
847 RtlxUnicodeStringToAnsiSize@4
848 RtlxUnicodeStringToOemSize@4
849 SeAccessCheck@40
850 ;SeAppendPrivileges@8
851 SeAssignSecurity@28
852 ;SeAuditingFileEvents@8
853 ;SeAuditingFileOrGlobalEvents@18
854 ;SeCaptureSecurityDescriptor@20
855 SeCaptureSubjectContext@4
856 ;SeCloseObjectAuditAlarm@12
857 ;SeCreateAccessState@16
858 SeCreateClientSecurity@16
859 SeDeassignSecurity@4
860 ;SeDeleteAccessState@4
861 ;SeDeleteObjectAuditAlarm@8
862 SeExports DATA
863 ;SeFreePrivileges@4
864 SeImpersonateClient@8
865 ;SeLockSubjectContext@4
866 ;SeMarkLogonSessionForTerminationNotification@4
867 ;SeOpenObjectAuditAlarm@36
868 ;SeOpenObjectForDeleteAuditAlarm@36
869 SePrivilegeCheck@12
870 ;SePrivilegeObjectAuditAlarm@24
871 SePublicDefaultDacl DATA
872 ;SeQueryAuthenticationIdToken@8
873 ;SeQuerySecurityDescriptorInfo@16
874 ;SeRegisterLogonSessionTerminatedRoutine@4
875 ;SeReleaseSecurityDescriptor@12
876 SeReleaseSubjectContext@4
877 ;SeSetAccessStateGenericMapping@8
878 ;SeSetSecurityDescriptorInfo@24
879 SeSinglePrivilegeCheck@12
880 SeSystemDefaultDacl DATA
881 SeTokenImpersonationLevel@4
882 SeTokenType@4
883 ;SeUnlockSubjectContext@4
884 ;SeUnregisterLogonSessionTerminatedRoutine@4
885 ;SeValidSecurityDescriptor@8
886 WRITE_REGISTER_UCHAR@8
887 WRITE_REGISTER_ULONG@8
888 WRITE_REGISTER_USHORT@8
889 WRITE_REGISTER_BUFFER_UCHAR@12
890 WRITE_REGISTER_BUFFER_ULONG@12
891 WRITE_REGISTER_BUFFER_USHORT@12
892 ZwAccessCheckAndAuditAlarm@44
893 ZwAlertThread@4
894 ZwAllocateVirtualMemory@24
895 ZwClearEvent@4
896 ZwClose@4
897 ZwCloseObjectAuditAlarm@12
898 ZwConnectPort@32
899 ZwCreateDirectoryObject@12
900 ZwCreateEvent@20
901 ZwCreateFile@44
902 ZwCreateKey@28
903 ZwCreateSection@28
904 ZwCreateSymbolicLinkObject@16
905 ZwDeleteFile@4
906 ZwDeleteKey@4
907 ZwDeleteValueKey@8
908 ZwDeviceIoControlFile@40
909 ZwDisplayString@4
910 ZwDuplicateObject@28
911 ZwDuplicateToken@24
912 ZwEnumerateKey@24
913 ZwEnumerateValueKey@24
914 ZwFlushInstructionCache@12
915 ZwFlushKey@4
916 ZwFreeVirtualMemory@16
917 ZwFsControlFile@40
918 ZwLoadDriver@4
919 ZwLoadKey@8
920 ZwMakeTemporaryObject@4
921 ZwMapViewOfSection@40
922 ZwNotifyChangeKey@40
923 ZwOpenDirectoryObject@12
924 ZwOpenEvent@12
925 ZwOpenFile@24
926 ZwOpenKey@12
927 ZwOpenProcess@16
928 ZwOpenProcessToken@12
929 ZwOpenSection@12
930 ZwOpenSymbolicLinkObject@12
931 ZwOpenThread@16
932 ZwOpenThreadToken@16
933 ZwPulseEvent@8
934 ZwQueryDefaultLocale@8
935 ZwQueryDirectoryFile@44
936 ZwQueryInformationAtom@20
937 ZwQueryInformationFile@20
938 ZwQueryInformationProcess@20
939 ZwQueryInformationToken@20
940 ZwQueryKey@20
941 ZwQueryObject@20
942 ZwQuerySection@20
943 ZwQuerySecurityObject@20
944 ZwQuerySymbolicLinkObject@12
945 ZwQuerySystemInformation@16
946 ZwQuerySystemTime@4
947 ZwQueryValueKey@24
948 ZwQueryVolumeInformationFile@20
949 ZwReadFile@36
950 ZwReplaceKey@12
951 ZwRequestWaitReplyPort@12
952 ZwResetEvent@8
953 ZwSaveKey@8
954 ZwSetDefaultLocale@8
955 ZwSetEvent@8
956 ZwSetInformationFile@20
957 ZwSetInformationObject@16
958 ZwSetInformationProcess@16
959 ZwSetInformationThread@16
960 ZwSetSystemInformation@12
961 ZwSetSystemTime@8
962 ZwSetValueKey@24
963 ZwTerminateProcess@8
964 ZwUnloadDriver@4
965 ZwUnloadKey@4
966 ZwUnmapViewOfSection@8
967 ZwWaitForMultipleObjects@20
968 ZwWaitForSingleObject@12
969 ZwWriteFile@36
970 ZwYieldExecution@0
971 _abnormal_termination
972 ;_alldiv
973 ;_allmul
974 ;_allrem
975 ;_allshl
976 ;_allshr
977 ;_aulldiv
978 ;_aullrem
979 ;_aullshr
980 _except_handler2
981 _except_handler3
982 _global_unwind2
983 _itoa
984 _local_unwind2
985 _purecall
986 _snprintf
987 _snwprintf
988 _stricmp
989 _strlwr
990 _strnicmp
991 _strnset
992 _strrev
993 _strset
994 _strupr
995 _vsnprintf
996 _wcsicmp
997 _wcslwr
998 _wcsnicmp
999 _wcsnset
1000 _wcsrev
1001 _wcsupr
1002 atoi
1003 atol
1004 isdigit
1005 islower
1006 isprint
1007 isspace
1008 isupper
1009 isxdigit
1010 mbstowcs
1011 mbtowc
1012 memchr
1013 memcpy
1014 memmove
1015 memset
1016 qsort
1017 rand
1018 sprintf
1019 srand
1020 strcat
1021 strchr
1022 strcmp
1023 strcpy
1024 strlen
1025 strncat
1026 strncmp
1027 strncpy
1028 strrchr
1029 strspn
1030 strstr
1031 swprintf
1032 tolower
1033 toupper
1034 towlower
1035 towupper
1036 vsprintf
1037 wcscat
1038 wcschr
1039 wcscmp
1040 wcscpy
1041 wcscspn
1042 wcslen
1043 wcsncat
1044 wcsncmp
1045 wcsncpy
1046 wcsrchr
1047 wcsspn
1048 wcsstr
1049 wcstombs
1050 wctomb