2003-08-11 Casper S. Hornstrup <chorns@users.sourceforge.net>
[reactos.git] / reactos / ntoskrnl / ntoskrnl.def
1 ; $Id: ntoskrnl.def,v 1.160 2003/08/11 18:50:12 chorns Exp $
2 ;
3 ; reactos/ntoskrnl/ntoskrnl.def
4 ;
5 ; ReactOS Operating System
6 ;
7 EXPORTS
8 CcRosInitializeFileCache@8
9 CcRosReleaseFileCache@4
10 CcCopyRead@24
11 CcCopyWrite@20
12 CcFlushCache@16
13 CcGetFileObjectFromSectionPtrs@4
14 CcMapData@24
15 CcMdlReadComplete@8
16 CcSetDirtyPinnedData@8
17 CcSetFileSizes@8
18 CcUnpinData@4
19 CcZeroData@16
20 DbgBreakPoint@0
21 DbgBreakPointWithStatus@4
22 ;DbgLoadImageSymbols@12
23 DbgPrint
24 DbgPrompt@12
25 DpcQueueSize DATA
26 @ExAcquireFastMutexUnsafe@4
27 ExAcquireResourceExclusive@8
28 ExAcquireResourceExclusiveLite@8
29 ExAcquireResourceSharedLite@8
30 ExAcquireSharedStarveExclusive@8
31 ExAcquireSharedWaitForExclusive@8
32 @ExAllocateFromPagedLookasideList@4
33 ExAllocatePool@8
34 ExAllocatePoolWithQuota@8
35 ExAllocatePoolWithQuotaTag@12
36 ExAllocatePoolWithTag@12
37 ExConvertExclusiveToSharedLite@4
38 ExCreateCallback@16
39 ExDeleteNPagedLookasideList@4
40 ExDeletePagedLookasideList@4
41 ExDeleteResource@4
42 ExDeleteResourceLite@4
43 ExDesktopObjectType DATA
44 ExDisableResourceBoostLite@4
45 ExEventObjectType DATA
46 ExExtendZone@12
47 ExFreePool@4
48 ExFreeToPagedLookasideList@8
49 ExGetExclusiveWaiterCount@4
50 ExGetPreviousMode@0
51 ExGetSharedWaiterCount@4
52 ExInitializeNPagedLookasideList@28
53 ExInitializePagedLookasideList@28
54 ExInitializeResource@4
55 ExInitializeResourceLite@4
56 ExInitializeZone@16
57 ExInterlockedAddLargeInteger@16
58 @ExInterlockedAddLargeStatistic@8
59 @ExInterlockedAddUlong@12
60 @ExInterlockedCompareExchange64@16
61 ExInterlockedDecrementLong@8
62 ExInterlockedExchangeUlong@12
63 ExInterlockedExtendZone@16
64 ExInterlockedIncrementLong@8
65 @ExInterlockedInsertHeadList@12
66 @ExInterlockedInsertTailList@12
67 @ExInterlockedPopEntryList@8
68 @ExInterlockedPopEntrySList@8
69 @ExInterlockedPushEntryList@12
70 @ExInterlockedPushEntrySList@12
71 @ExInterlockedRemoveHeadList@8
72 ExIsProcessorFeaturePresent@4
73 ExIsResourceAcquiredExclusiveLite@4
74 ExIsResourceAcquiredSharedLite@4
75 ExLocalTimeToSystemTime@8
76 ExNotifyCallback@12
77 ExPostSystemEvent@12
78 ;ExQueryPoolBlockSize
79 ExQueueWorkItem@8
80 ExRaiseAccessViolation@0
81 ExRaiseDatatypeMisalignment@0
82 ;ExRaiseException
83 ;ExRaiseHardError
84 ExRaiseStatus@4
85 ExRegisterCallback@12
86 ExReinitializeResourceLite@4
87 @ExReleaseFastMutexUnsafe@4
88 ExReleaseResourceForThread@8
89 ExReleaseResourceForThreadLite@8
90 @ExReleaseResourceLite@4
91 ExSetResourceOwnerPointer@8
92 ;ExSystemExceptionFilter
93 ExSystemTimeToLocalTime@8
94 ExTryToAcquireResourceExclusiveLite@4
95 ExUnregisterCallback@4
96 ExWindowStationObjectType DATA
97 ExInitializeBinaryTree@12
98 ExDeleteBinaryTree@4
99 ExInsertBinaryTree@12
100 ExSearchBinaryTree@12
101 ExRemoveBinaryTree@12
102 ExTraverseBinaryTree@16
103 ExInitializeSplayTree@16
104 ExDeleteSplayTree@4
105 ExInsertSplayTree@12
106 ExSearchSplayTree@12
107 ExRemoveSplayTree@12
108 ExWeightOfSplayTree@8
109 ExTraverseSplayTree@16
110 ExInitializeHashTable@16
111 ExDeleteHashTable@4
112 ExInsertHashTable@16
113 ExSearchHashTable@16
114 ExRemoveHashTable@16
115 @ExfInterlockedAddUlong@12
116 @ExfInterlockedInsertHeadList@12
117 @ExfInterlockedInsertTailList@12
118 @ExfInterlockedPopEntryList@8
119 @ExfInterlockedPushEntryList@12
120 @ExfInterlockedRemoveHeadList@8
121 @Exfi386InterlockedDecrementLong@4
122 @Exfi386InterlockedExchangeUlong@8
123 @Exfi386InterlockedIncrementLong@4
124 Exi386InterlockedDecrementLong@4
125 Exi386InterlockedExchangeUlong@8
126 Exi386InterlockedIncrementLong@4
127 FsRtlAddLargeMcbEntry@28
128 FsRtlAddMcbEntry@16
129 FsRtlAddToTunnelCache@32
130 FsRtlAllocateFileLock@8
131 FsRtlAllocatePool@8
132 FsRtlAllocatePoolWithQuota@8
133 FsRtlAllocatePoolWithQuotaTag@12
134 FsRtlAllocatePoolWithTag@12
135 FsRtlAllocateResource@0
136 FsRtlAreNamesEqual@16
137 FsRtlBalanceReads@4
138 FsRtlCheckLockForReadAccess@8
139 FsRtlCheckLockForWriteAccess@8
140 FsRtlCheckOplock@20
141 FsRtlCopyRead@32
142 FsRtlCopyWrite@32
143 FsRtlCurrentBatchOplock@4
144 FsRtlDeleteKeyFromTunnelCache@12
145 FsRtlDeleteTunnelCache@4
146 FsRtlDeregisterUncProvider@4
147 FsRtlDissectDbcs@16
148 FsRtlDissectName@16
149 FsRtlDoesDbcsContainWildCards@4
150 FsRtlDoesNameContainWildCards@4
151 FsRtlFastCheckLockForRead@24
152 FsRtlFastCheckLockForWrite@24
153 FsRtlFastUnlockAll@16
154 FsRtlFastUnlockAllByKey@20
155 FsRtlFastUnlockSingle@32
156 FsRtlFindInTunnelCache@32
157 FsRtlGetFileSize@8
158 FsRtlGetNextFileLock@8
159 FsRtlGetNextLargeMcbEntry@20
160 FsRtlGetNextMcbEntry@20
161 FsRtlInitializeFileLock@12
162 FsRtlInitializeLargeMcb@8
163 FsRtlInitializeMcb@8
164 FsRtlInitializeOplock@4
165 FsRtlInitializeTunnelCache@4
166 FsRtlIsDbcsInExpression@8
167 FsRtlIsFatDbcsLegal@20
168 FsRtlIsHpfsDbcsLegal@20
169 FsRtlIsNameInExpression@16
170 FsRtlIsNtstatusExpected@4
171 FsRtlIsTotalDeviceFailure@4
172 FsRtlLegalAnsiCharacterArray DATA
173 FsRtlLookupLargeMcbEntry@32
174 FsRtlLookupLastLargeMcbEntry@12
175 FsRtlLookupLastMcbEntry@12
176 FsRtlLookupMcbEntry@20
177 FsRtlMdlRead@24
178 FsRtlMdlReadComplete@8
179 FsRtlMdlReadCompleteDev@12
180 FsRtlMdlReadDev@28
181 FsRtlMdlWriteComplete@12
182 FsRtlMdlWriteCompleteDev@16
183 FsRtlNormalizeNtstatus@8
184 FsRtlNotifyChangeDirectory@28
185 FsRtlNotifyCleanup@12
186 FsRtlNotifyFullChangeDirectory@40
187 FsRtlNotifyFullReportChange@36
188 FsRtlNotifyInitializeSync@4
189 FsRtlNotifyReportChange@20
190 FsRtlNotifyUninitializeSync@4
191 FsRtlNotifyVolumeEvent@8
192 FsRtlNumberOfRunsInLargeMcb@4
193 FsRtlNumberOfRunsInMcb@4
194 FsRtlOplockFsctrl@12
195 FsRtlOplockIsFastIoPossible@4
196 FsRtlPostPagingFileStackOverflow@12
197 FsRtlPostStackOverflow@12
198 FsRtlPrepareMdlWrite@24
199 FsRtlPrepareMdlWriteDev@28
200 FsRtlPrivateLock@48
201 FsRtlProcessFileLock@12
202 FsRtlRegisterUncProvider@12
203 FsRtlRemoveLargeMcbEntry@20
204 FsRtlRemoveMcbEntry@12
205 FsRtlSplitLargeMcb@20
206 FsRtlSyncVolumes@12
207 FsRtlTruncateLargeMcb@12
208 FsRtlTruncateMcb@8
209 FsRtlUninitializeFileLock@4
210 FsRtlUninitializeLargeMcb@4
211 FsRtlUninitializeMcb@4
212 FsRtlUninitializeOplock@4
213 HalDispatchTable DATA
214 HalPrivateDispatchTable DATA
215 InbvAcquireDisplayOwnership@0
216 InbvCheckDisplayOwnership@0
217 InbvDisplayString@4
218 InbvEnableBootDriver@4
219 InbvEnableDisplayString@4
220 InbvInstallDisplayStringFilter@4
221 InbvIsBootDriverInstalled@0
222 InbvNotifyDisplayOwnershipLost@4
223 InbvResetDisplay@0
224 InbvSetScrollRegion@16
225 InbvSetTextColor@4
226 InbvSolidColorFill@20
227 @InterlockedCompareExchange@12
228 @InterlockedDecrement@4
229 @InterlockedExchange@8
230 @InterlockedExchangeAdd@8
231 @InterlockedIncrement@4
232 @InterlockedPopEntrySList@4
233 @InterlockedPushEntrySList@8
234 IoAcquireCancelSpinLock@4
235 IoAcquireRemoveLockEx@20
236 IoAcquireVpbSpinLock@4
237 IoAdapterObjectType DATA
238 IoAllocateAdapterChannel@20
239 IoAllocateController@16
240 IoAllocateErrorLogEntry@8
241 IoAllocateIrp@8
242 IoAllocateMdl@20
243 IoAssignResources@24
244 IoAttachDevice@12
245 IoAttachDeviceByPointer@8
246 IoAttachDeviceToDeviceStack@8
247 IoBuildAsynchronousFsdRequest@24
248 IoBuildDeviceIoControlRequest@36
249 IoBuildPartialMdl@16
250 IoBuildSynchronousFsdRequest@28
251 IoCallDriver@8
252 IoCancelIrp@4
253 IoCheckDesiredAccess@8
254 IoCheckEaBufferValidity@12
255 IoCheckFunctionAccess@24
256 IoCheckShareAccess@20
257 IoCompleteRequest@8
258 IoConnectInterrupt@44
259 IoCreateController@4
260 IoCreateDevice@28
261 IoCreateFile@56
262 IoCreateNotificationEvent@8
263 IoCreateStreamFileObject@8
264 IoCreateSymbolicLink@8
265 IoCreateSynchronizationEvent@8
266 IoCreateUnprotectedSymbolicLink@8
267 IoDeleteController@4
268 IoDeleteDevice@4
269 IoDeleteSymbolicLink@4
270 IoDetachDevice@4
271 IoDeviceHandlerObjectSize DATA
272 IoDeviceHandlerObjectType DATA
273 IoDisconnectInterrupt@4
274 IoDeviceObjectType DATA
275 IoDriverObjectType DATA
276 IoEnqueueIrp@4
277 IoFastQueryNetworkAttributes@20
278 IoFileObjectType DATA
279 IoFreeController@4
280 IoFreeIrp@4
281 IoFreeMdl@4
282 IoGetAttachedDevice@4
283 IoGetAttachedDeviceReference@4
284 IoGetBaseFileSystemDeviceObject@4
285 IoGetConfigurationInformation@0
286 IoGetCurrentProcess@0
287 IoGetDeviceObjectPointer@16
288 IoGetDeviceToVerify@4
289 IoGetFileObjectGenericMapping@0
290 IoGetInitialStack@0
291 IoGetRelatedDeviceObject@4
292 IoGetRequestorProcess@4
293 IoGetStackLimits@8
294 IoGetTopLevelIrp@0
295 IoInitializeIrp@12
296 IoInvalidateDeviceState@4
297 IoInitializeRemoveLockEx@20
298 IoInitializeTimer@12
299 IoIsOperationSynchronous@4
300 IoMakeAssociatedIrp@8
301 IoOpenDeviceInstanceKey@20
302 IoPageRead@20
303 IoQueryDeviceDescription@32
304 IoQueryDeviceEnumInfo@8
305 IoQueryFileInformation@20
306 IoQueryVolumeInformation@20
307 IoQueueThreadIrp@4
308 IoRaiseHardError@12
309 IoRaiseInformationalHardError@12
310 IoReadOperationCount DATA
311 IoReadPartitionTable@16
312 IoReadTransferCount DATA
313
314 IoFreeWorkItem@4
315 IoAllocateWorkItem@4
316 IoQueueWorkItem@16
317 IoRegisterDeviceInterface@16
318 IoSetDeviceInterfaceState@8
319 IoGetDeviceProperty@20
320 IoOpenDeviceRegistryKey@16
321 IoInvalidateDeviceRelations@8
322
323 IoRegisterDriverReinitialization@12
324 IoRegisterFileSystem@4
325 IoRegisterFsRegistrationChange@8
326 IoRegisterShutdownNotification@4
327 IoReleaseCancelSpinLock@4
328 IoReleaseRemoveLockAndWaitEx@12
329 IoReleaseRemoveLockEx@12
330 IoReleaseVpbSpinLock@4
331 IoRemoveShareAccess@8
332 IoReportHalResourceUsage@16
333 IoReportResourceUsage@36
334 IoSetDeviceToVerify@8
335 IoSetHardErrorOrVerifyDevice@8
336 IoSetInformation@16
337 IoSetPartitionInformation@16
338 IoSetShareAccess@16
339 IoSetThreadHardErrorMode@4
340 IoSetTopLevelIrp@4
341 IoStartNextPacket@8
342 IoStartNextPacketByKey@12
343 IoStartPacket@16
344 IoStartTimer@4
345 IoStatisticsLock DATA
346 IoStopTimer@4
347 IoSynchronousPageWrite@20
348 IoThreadToProcess@4
349 IoUnregisterFileSystem@4
350 IoUnregisterFsRegistrationChange@8
351 IoUnregisterShutdownNotification@4
352 IoUpdateShareAccess@8
353 IoVerifyVolume@8
354 IoWriteErrorLogEntry@4
355 IoWriteOperationCount DATA
356 IoWritePartitionTable@20
357 IoWriteTransferCount DATA
358 @IofCallDriver@8
359 @IofCompleteRequest@8
360 KdDebuggerEnabled DATA
361 KdDebuggerNotPresent DATA
362 KdPollBreakIn@0
363 KdSystemDebugControl@4
364 Ke386CallBios@8
365 ;Ke386IoSetAccessProcess
366 ;Ke386QueryIoAccessMap
367 ;Ke386SetIoAccessMap
368 KeAcquireSpinLockAtDpcLevel@4
369 KeAddSystemServiceTable@20
370 KeAttachProcess@4
371 ;KeBoostCurrentThread
372 KeBugCheck@4
373 KeBugCheckEx@20
374 KeCancelTimer@4
375 KeClearEvent@4
376 KeConnectInterrupt@4
377 KeDcacheFlushCount DATA
378 KeDelayExecutionThread@12
379 KeDeregisterBugCheckCallback@4
380 KeDetachProcess@0
381 KeDisconnectInterrupt@4
382 KeEnterCriticalRegion@0
383 KeEnterKernelDebugger@0
384 ;KeFindConfigurationEntry
385 ;KeFindConfigurationNextEntry
386 ;KeFlushEntireTb
387 KeGetCurrentThread@0
388 KeGetPreviousMode@0
389 ;KeI386AbiosCall
390 ;KeI386AllocateGdtSelectors
391 ;KeI386Call16BitCStyleFunction
392 ;KeI386Call16BitFunction
393 ;KeI386FlatToGdtSelector
394 ;KeI386GetLid
395 ;KeI386MachineType DATA
396 ;KeI386ReleaseGdtSelectors
397 ;KeI386ReleaseLid
398 ;KeI386SetGdtSelector
399 KeIcacheFlushCount DATA
400 KeInitializeApc@32
401 KeInitializeDeviceQueue@4
402 KeInitializeDpc@12
403 KeInitializeEvent@12
404 KeInitializeInterrupt@44
405 KeInitializeMutant@8
406 KeInitializeMutex@8
407 KeInitializeQueue@8
408 KeInitializeSemaphore@12
409 KeInitializeSpinLock@4
410 KeInitializeTimer@4
411 KeInitializeTimerEx@8
412 KeInsertByKeyDeviceQueue@12
413 KeInsertDeviceQueue@8
414 KeInsertHeadQueue@8
415 KeInsertQueue@8
416 KeInsertQueueApc@16
417 KeInsertQueueDpc@12
418 ;KeIsExecutingDpc
419 KeLeaveCriticalRegion@0
420 KeLoaderBlock DATA
421 KeNumberProcessors DATA
422 ;KeProfileInterrupt
423 ;KeProfileInterruptWithSource
424 KePulseEvent@12
425 KeQuerySystemTime@4
426 KeQueryTickCount@4
427 KeQueryTimeIncrement@0
428 ;KeRaiseUserException
429 KeRescheduleThread@0
430 KeReadStateEvent@4
431 KeReadStateMutant@4
432 KeReadStateMutex@4
433 KeReadStateQueue@4
434 KeReadStateSemaphore@4
435 KeReadStateTimer@4
436 KeRegisterBugCheckCallback@20
437 KeReleaseMutant@16
438 KeReleaseMutex@8
439 KeReleaseSemaphore@16
440 KeReleaseSpinLockFromDpcLevel@4
441 KeRemoveByKeyDeviceQueue@8
442 KeRemoveDeviceQueue@4
443 KeRemoveEntryDeviceQueue@8
444 KeRemoveQueue@12
445 KeRemoveQueueDpc@4
446 KeResetEvent@4
447 ;KeRestoreFloatingPointState
448 KeRundownQueue@4
449 ;KeSaveFloatingPointState
450 KeServiceDescriptorTable DATA
451 KeSetAffinityThread@8
452 KeSetBasePriorityThread@8
453 ;KeSetDmaIoCoherency
454 KeSetEvent@12
455 ;KeSetEventBoostPriority
456 ;KeSetIdealProcessorThread
457 KeSetImportanceDpc@8
458 ;KeSetKernelStackSwapEnable
459 KeSetPriorityThread@8
460 ;KeSetProfileIrql
461 ;@KeSetSwapContextNotifyRoutine
462 KeSetTargetProcessorDpc@8
463 ;@KeSetThreadSelectNotifyRoutine
464 ;KeSetTimeIncrement
465 KeSetTimer@16
466 KeSetTimerEx@20
467 ;@KeSetTimeUpdateNotifyRoutine
468 KeSynchronizeExecution@12
469 ;KeTerminateThread
470 KeTickCount DATA
471 ;KeUpdateRunTime
472 ;KeUserModeCallback
473 KeWaitForMultipleObjects@32
474 KeWaitForMutexObject@20
475 KeWaitForSingleObject@20
476 ;@KefAcquireSpinLockAtDpcLevel
477 ;@KefReleaseSpinLockFromDpcLevel
478 ;Kei386EoiHelper
479 ;@KiAcquireSpinLock@4
480 ;KiBugCheckData DATA
481 ;KiCoprocessorError@0
482 KiDeliverApc@12
483 KiDispatchInterrupt@0
484 KiInterruptDispatch2@8
485 ;KiIpiServiceRoutine@8
486 ;@KiReleaseSpinLock@4
487 ;KiUnexpectedInterrupt
488 ;Kii386SpinOnSpinLock
489 KiRawTicks DATA
490 LdrAccessResource@16
491 ;LdrEnumResources@20
492 ;LdrFindResourceDirectory_U@16
493 LdrFindResource_U@16
494 ;LpcRequestPort@8
495 LsaCallAuthenticationPackage@28
496 LsaDeregisterLogonProcess@8
497 LsaFreeReturnBuffer@4
498 LsaLogonUser@56
499 LsaLookupAuthenticationPackage@12
500 LsaRegisterLogonProcess@12
501 MmAdjustWorkingSetSize@12
502 MmAllocateContiguousAlignedMemory@16
503 MmAllocateContiguousMemory@12
504 MmAllocateNonCachedMemory@4
505 MmBuildMdlForNonPagedPool@4
506 MmCanFileBeTruncated@8
507 MmCopyFromCaller@12
508 MmCopyToCaller@12
509 MmCreateMdl@12
510 MmCreateSection@32
511 MmDbgTranslatePhysicalAddress@8
512 MmDisableModifiedWriteOfSection@4
513 MmFlushImageSection@8
514 MmForceSectionClosed@8
515 MmFreeContiguousMemory@4
516 MmFreeNonCachedMemory@8
517 MmGetPhysicalAddress@4
518 MmGrowKernelStack@4
519 MmHighestUserAddress DATA
520 MmIsAddressValid@4
521 MmIsNonPagedSystemAddressValid@4
522 MmIsRecursiveIoFault@0
523 MmIsThisAnNtAsSystem@0
524 MmLockPagableDataSection@4
525 MmLockPagableImageSection@4=MmLockPagableDataSection@4
526 MmLockPagableSectionByHandle@4
527 MmMapIoSpace@16
528 MmMapLockedPages@8
529 MmMapMemoryDumpMdl@4
530 MmMapVideoDisplay@16
531 MmMapViewInSystemSpace@12
532 MmMapViewOfSection@40
533 MmPageEntireDriver@4
534 MmProbeAndLockPages@12
535 MmQuerySystemSize@0
536 MmResetDriverPaging@4
537 MmSectionObjectType DATA
538 MmSecureVirtualMemory@12
539 MmSetAddressRangeModified@8
540 MmSetBankedSection@24
541 MmSizeOfMdl@8
542 MmUnlockPagableImageSection@4
543 MmUnlockPages@4
544 MmUnmapIoSpace@8
545 MmUnmapLockedPages@8
546 MmUnmapVideoDisplay@8
547 MmUnmapViewInSystemSpace@4
548 MmUnmapViewOfSection@8
549 MmUnsecureVirtualMemory@4
550 MmUserProbeAddress DATA
551 NlsAnsiCodePage DATA
552 NlsLeadByteInfo DATA
553 NlsMbCodePageTag DATA
554 NlsMbOemCodePageTag DATA
555 NlsOemLeadByteInfo DATA
556 NtAddAtom@8
557 NtAdjustPrivilegesToken@24
558 NtAlertThread@4
559 NtAllocateLocallyUniqueId@4
560 NtAllocateUuids@12
561 NtAllocateVirtualMemory@24
562 NtBuildNumber DATA
563 NtClose@4
564 NtConnectPort@32
565 NtCreateEvent@20
566 NtCreateTimer@16
567 NtOpenEvent@12
568 NtCreateFile@44
569 NtCreateSection@28
570 NtDeleteAtom@4
571 NtDeleteFile@4
572 NtDeviceIoControlFile@40
573 NtDuplicateObject@28
574 NtDuplicateToken@24
575 NtFindAtom@8
576 NtFreeVirtualMemory@16
577 NtFsControlFile@40
578 NtGlobalFlag DATA
579 NtLockFile@40
580 NtMapViewOfSection@40
581 NtNotifyChangeDirectoryFile@36
582 NtOpenFile@24
583 NtOpenProcess@16
584 NtOpenProcessToken@12
585 NtQueryDirectoryFile@44
586 NtQueryEaFile@36
587 NtQueryInformationAtom@20
588 NtQueryInformationFile@20
589 NtQueryInformationProcess@20
590 NtQueryInformationToken@20
591 ;NtQueryOleDirectoryFile@ <--- ?
592 NtQuerySecurityObject@20
593 NtQuerySystemTime@4
594 NtQueryVolumeInformationFile@20
595 NtReadFile@36
596 NtRequestPort@20
597 NtRequestWaitReplyPort@12
598 NtSetEvent@8
599 NtSetInformationFile@20
600 NtSetInformationProcess@16
601 NtSetInformationThread@16
602 NtSetSecurityObject@12
603 NtSetSystemTime@8
604 NtUnlockFile@20
605 NtVdmControl@8
606 NtW32Call@20
607 NtWaitForSingleObject@12
608 NtWriteFile@36
609 ObAssignSecurity@16
610 ;ObCheckCreateObjectAccess@28
611 ;ObCheckObjectAccess@20
612 ObCreateObject@36
613 ObRosCreateObject@20
614 ;ObFindHandleForObject@20
615 ObGetObjectPointerCount@4
616 ObGetObjectSecurity@12
617 ;ObInsertObject@24
618 ObMakeTemporaryObject@4
619 ObOpenObjectByName@28
620 ObOpenObjectByPointer@28
621 ObQueryNameString@16
622 ;ObQueryObjectAuditingByHandle@8
623 @ObfDereferenceObject@4
624 @ObfReferenceObject@4
625 ObReferenceObjectByHandle@24
626 ObReferenceObjectByName@32
627 ObReferenceObjectByPointer@16
628 ObReleaseObjectSecurity@8
629 ;ObSetSecurityDescriptorInfo@24
630 ;PfxFindPrefix
631 ;PfxInitialize
632 ;PfxInsertPrefix
633 ;PfxRemovePrefix
634 PoCallDriver@8
635 PoRegisterDeviceForIdleDetection@16
636 PoRegisterSystemState@8
637 PoRequestPowerIrp@24
638 PoSetDeviceBusy@4
639 PoSetPowerState@12
640 PoSetSystemState@4
641 PoStartNextPowerIrp@4
642 PoUnregisterSystemState@4
643 ;ProbeForWrite@12
644 PsAssignImpersonationToken@8
645 ;PsChargePoolQuota@12
646 PsCreateSystemProcess@12
647 PsCreateSystemThread@28
648 PsCreateWin32Process@4
649 PsEstablishWin32Callouts@24
650 PsGetCurrentProcessId@0
651 PsGetCurrentThreadId@0
652 PsGetProcessExitTime@0
653 PsGetVersion@16
654 PsGetWin32Thread@0
655 PsGetWin32Process@0
656 PsImpersonateClient@20
657 PsInitialSystemProcess DATA
658 PsIsThreadTerminating@4
659 PsLookupProcessByProcessId@8
660 PsLookupProcessThreadByCid@12
661 PsLookupThreadByThreadId@8
662 PsProcessType DATA
663 PsReferenceImpersonationToken@16
664 PsReferencePrimaryToken@4
665 ;PsReturnPoolQuota@12
666 PsRevertToSelf@0
667 PsSetCreateProcessNotifyRoutine@8
668 PsSetCreateThreadNotifyRoutine@4
669 ;PsSetLegoNotifyRoutine@4
670 ;PsSetProcessPriorityByClass@8
671 PsTerminateSystemThread@4
672 PsThreadType DATA
673 READ_REGISTER_UCHAR@4
674 READ_REGISTER_ULONG@4
675 READ_REGISTER_USHORT@4
676 READ_REGISTER_BUFFER_UCHAR@12
677 READ_REGISTER_BUFFER_ULONG@12
678 READ_REGISTER_BUFFER_USHORT@12
679 RtlAbsoluteToSelfRelativeSD@12
680 RtlAddAccessAllowedAce@16
681 RtlAddAce@20
682 RtlAddAtomToAtomTable@12
683 ;RtlAllocateAndInitializeSid
684 ;RtlAllocateHeap
685 RtlAnsiCharToUnicodeChar@4
686 RtlAnsiStringToUnicodeSize@4
687 RtlAnsiStringToUnicodeString@12
688 RtlAppendAsciizToString@8
689 RtlAppendStringToString@8
690 RtlAppendUnicodeStringToString@8
691 RtlAppendUnicodeToString@8
692 RtlAreAllAccessesGranted@8
693 RtlAreAnyAccessesGranted@8
694 RtlAreBitsClear@12
695 RtlAreBitsSet@12
696 RtlAssert@16
697 ;RtlCaptureStackBackTrace
698 RtlCharToInteger@12
699 RtlCheckRegistryKey@8
700 RtlClearAllBits@4
701 RtlClearBits@12
702 RtlCompareMemory@12
703 RtlCompareMemoryUlong@12
704 RtlCompareString@12
705 RtlCompareUnicodeString@12
706 RtlCompressBuffer@32
707 RtlCompressChunks@28
708 RtlConvertLongToLargeInteger@4
709 RtlConvertSidToUnicodeString@12
710 RtlConvertUlongToLargeInteger@4
711 RtlCopyLuid@8
712 RtlCopySid@12
713 RtlCopyString@8
714 RtlCopyUnicodeString@8
715 RtlCreateAcl@12
716 RtlCreateAtomTable@8
717 ;RtlCreateHeap
718 RtlCreateRegistryKey@8
719 RtlCreateSecurityDescriptor@8
720 RtlCreateUnicodeString@8
721 RtlCustomCPToUnicodeN@24
722 RtlDecompressBuffer@24
723 RtlDecompressChunks@28
724 RtlDecompressFragment@32
725 ;RtlDelete
726 RtlDeleteAtomFromAtomTable@8
727 ;RtlDeleteElementGenericTable
728 ;RtlDeleteNoSplay
729 RtlDeleteRegistryValue@12
730 RtlDescribeChunk@20
731 RtlDestroyAtomTable@4
732 ;RtlDestroyHeap
733 RtlDowncaseUnicodeString@12
734 RtlEmptyAtomTable@8
735 RtlEnlargedIntegerMultiply@8
736 RtlEnlargedUnsignedDivide@16
737 RtlEnlargedUnsignedMultiply@8
738 ;RtlEnumerateGenericTable
739 ;RtlEnumerateGenericTableWithoutSplaying
740 RtlEqualLuid@8
741 RtlEqualSid@8
742 RtlEqualString@12
743 RtlEqualUnicodeString@12
744 RtlExtendedIntegerMultiply@12
745 RtlExtendedLargeIntegerDivide@16
746 RtlExtendedMagicDivide@20
747 RtlFillMemory@12
748 RtlFillMemoryUlong@12
749 RtlFindClearBits@12
750 RtlFindClearBitsAndSet@12
751 RtlFindFirstRunClear@8
752 RtlFindFirstRunSet@8
753 RtlFindLongestRunClear@8
754 RtlFindLongestRunSet@8
755 RtlFindMessage@20
756 RtlFindSetBits@12
757 RtlFindSetBitsAndClear@12
758 ;RtlFindUnicodePrefix
759 RtlFormatCurrentUserKeyPath@4
760 RtlFreeAnsiString@4
761 ;RtlFreeHeap
762 RtlFreeOemString@4
763 RtlFreeUnicodeString@4
764 RtlGenerate8dot3Name@16
765 ;RtlGetCallersAddress
766 RtlGetCompressionWorkSpaceSize@12
767 RtlGetDaclSecurityDescriptor@16
768 RtlGetDefaultCodePage@8
769 ;RtlGetElementGenericTable
770 RtlGetGroupSecurityDescriptor@12
771 RtlGetOwnerSecurityDescriptor@12
772 RtlImageNtHeader@4
773 RtlInitAnsiString@8
774 RtlInitCodePageTable@8
775 RtlInitString@8
776 RtlInitUnicodeString@8
777 RtlInitializeBitMap@12
778 ;RtlInitializeGenericTable
779 RtlInitializeSid@12
780 ;RtlInitializeUnicodePrefix
781 ;RtlInsertElementGenericTable
782 ;RtlInsertUnicodePrefix
783 RtlIntegerToChar@16
784 RtlIntegerToUnicodeString@12
785 RtlIsNameLegalDOS8Dot3@12
786 RtlLargeIntegerAdd@16
787 RtlLargeIntegerArithmeticShift@12
788 RtlLargeIntegerDivide@20
789 RtlLargeIntegerNegate@8
790 RtlLargeIntegerShiftLeft@12
791 RtlLargeIntegerShiftRight@12
792 RtlLargeIntegerSubtract@16
793 RtlLengthRequiredSid@4
794 RtlLengthSecurityDescriptor@4
795 RtlLengthSid@4
796 RtlLookupAtomInAtomTable@12
797 ;RtlLookupElementGenericTable
798 RtlMapGenericMask@8
799 RtlMoveMemory@12
800 RtlMultiByteToUnicodeN@20
801 RtlMultiByteToUnicodeSize@12
802 ;RtlNextUnicodePrefix
803 RtlNtStatusToDosError@4
804 RtlNtStatusToDosErrorNoTeb@4
805 ;RtlNumberGenericTableElements
806 RtlNumberOfClearBits@4
807 RtlNumberOfSetBits@4
808 RtlOemStringToCountedUnicodeString@12
809 RtlOemStringToUnicodeSize@4
810 RtlOemStringToUnicodeString@12
811 RtlOemToUnicodeN@20
812 RtlPinAtomInAtomTable@8
813 RtlPrefixString@12
814 RtlPrefixUnicodeString@12
815 RtlQueryAtomInAtomTable@24
816 RtlQueryRegistryValues@20
817 RtlQueryTimeZoneInformation@4
818 RtlRaiseException@4
819 RtlRandom@4
820 ;RtlRemoveUnicodePrefix
821 RtlReserveChunk@20
822 RtlSecondsSince1970ToTime@8
823 RtlSecondsSince1980ToTime@8
824 RtlSetAllBits@4
825 RtlSetBits@12
826 RtlSetDaclSecurityDescriptor@16
827 RtlSetGroupSecurityDescriptor@12
828 RtlSetOwnerSecurityDescriptor@12
829 RtlSetSaclSecurityDescriptor@16
830 RtlSetTimeZoneInformation@4
831 ;RtlSplay
832 RtlSubAuthorityCountSid@4
833 RtlSubAuthoritySid@8
834 RtlTimeFieldsToTime@8
835 RtlTimeToSecondsSince1970@8
836 RtlTimeToSecondsSince1980@8
837 RtlTimeToTimeFields@8
838 RtlUnicodeStringToAnsiSize@4
839 RtlUnicodeStringToAnsiString@12
840 RtlUnicodeStringToCountedOemString@12
841 RtlUnicodeStringToInteger@12
842 RtlUnicodeStringToOemSize@4
843 RtlUnicodeStringToOemString@12
844 RtlUnicodeToCustomCPN@24
845 RtlUnicodeToMultiByteN@20
846 RtlUnicodeToMultiByteSize@12
847 RtlUnicodeToOemN@20
848 RtlUnwind@16
849 RtlUpcaseUnicodeChar@4
850 RtlUpcaseUnicodeString@12
851 RtlUpcaseUnicodeStringToAnsiString@12
852 RtlUpcaseUnicodeStringToCountedOemString@12
853 RtlUpcaseUnicodeStringToOemString@12
854 RtlUpcaseUnicodeToCustomCPN@24
855 RtlUpcaseUnicodeToMultiByteN@20
856 RtlUpcaseUnicodeToOemN@20
857 RtlUpperChar@4
858 RtlUpperString@8
859 RtlValidSecurityDescriptor@4
860 RtlValidSid@4
861 RtlWriteRegistryValue@24
862 ;RtlZeroHeap
863 RtlZeroMemory@8
864 RtlxAnsiStringToUnicodeSize@4
865 RtlxOemStringToUnicodeSize@4
866 RtlxUnicodeStringToAnsiSize@4
867 RtlxUnicodeStringToOemSize@4
868 SeAccessCheck@40
869 ;SeAppendPrivileges@8
870 SeAssignSecurity@28
871 ;SeAuditingFileEvents@8
872 ;SeAuditingFileOrGlobalEvents@18
873 ;SeCaptureSecurityDescriptor@20
874 SeCaptureSubjectContext@4
875 ;SeCloseObjectAuditAlarm@12
876 ;SeCreateAccessState@16
877 SeCreateClientSecurity@16
878 SeDeassignSecurity@4
879 ;SeDeleteAccessState@4
880 ;SeDeleteObjectAuditAlarm@8
881 SeExports DATA
882 ;SeFreePrivileges@4
883 SeImpersonateClient@8
884 ;SeLockSubjectContext@4
885 ;SeMarkLogonSessionForTerminationNotification@4
886 ;SeOpenObjectAuditAlarm@36
887 ;SeOpenObjectForDeleteAuditAlarm@36
888 SePrivilegeCheck@12
889 ;SePrivilegeObjectAuditAlarm@24
890 SePublicDefaultDacl DATA
891 ;SeQueryAuthenticationIdToken@8
892 ;SeQuerySecurityDescriptorInfo@16
893 ;SeRegisterLogonSessionTerminatedRoutine@4
894 ;SeReleaseSecurityDescriptor@12
895 SeReleaseSubjectContext@4
896 ;SeSetAccessStateGenericMapping@8
897 ;SeSetSecurityDescriptorInfo@24
898 SeSinglePrivilegeCheck@12
899 SeSystemDefaultDacl DATA
900 SeTokenImpersonationLevel@4
901 SeTokenType@4
902 ;SeUnlockSubjectContext@4
903 ;SeUnregisterLogonSessionTerminatedRoutine@4
904 ;SeValidSecurityDescriptor@8
905 WRITE_REGISTER_UCHAR@8
906 WRITE_REGISTER_ULONG@8
907 WRITE_REGISTER_USHORT@8
908 WRITE_REGISTER_BUFFER_UCHAR@12
909 WRITE_REGISTER_BUFFER_ULONG@12
910 WRITE_REGISTER_BUFFER_USHORT@12
911 ZwAccessCheckAndAuditAlarm@44
912 ZwAlertThread@4
913 ZwAllocateVirtualMemory@24
914 ZwClearEvent@4
915 ZwClose@4
916 ZwCloseObjectAuditAlarm@12
917 ZwConnectPort@32
918 ZwCreateDirectoryObject@12
919 ZwCreateEvent@20
920 ZwCreateFile@44
921 ZwCreateKey@28
922 ZwCreateSection@28
923 ZwCreateSymbolicLinkObject@16
924 ZwDeleteFile@4
925 ZwDeleteKey@4
926 ZwDeleteValueKey@8
927 ZwDeviceIoControlFile@40
928 ZwDisplayString@4
929 ZwDuplicateObject@28
930 ZwDuplicateToken@24
931 ZwEnumerateKey@24
932 ZwEnumerateValueKey@24
933 ZwFlushInstructionCache@12
934 ZwFlushKey@4
935 ZwFreeVirtualMemory@16
936 ZwFsControlFile@40
937 ZwLoadDriver@4
938 ZwLoadKey@8
939 ZwMakeTemporaryObject@4
940 ZwMapViewOfSection@40
941 ZwNotifyChangeKey@40
942 ZwOpenDirectoryObject@12
943 ZwOpenEvent@12
944 ZwOpenFile@24
945 ZwOpenKey@12
946 ZwOpenProcess@16
947 ZwOpenProcessToken@12
948 ZwOpenSection@12
949 ZwOpenSymbolicLinkObject@12
950 ZwOpenThread@16
951 ZwOpenThreadToken@16
952 ZwPulseEvent@8
953 ZwQueryDefaultLocale@8
954 ZwQueryDirectoryFile@44
955 ZwQueryInformationAtom@20
956 ZwQueryInformationFile@20
957 ZwQueryInformationProcess@20
958 ZwQueryInformationToken@20
959 ZwQueryKey@20
960 ZwQueryObject@20
961 ZwQuerySection@20
962 ZwQuerySecurityObject@20
963 ZwQuerySymbolicLinkObject@12
964 ZwQuerySystemInformation@16
965 ZwQuerySystemTime@4
966 ZwQueryValueKey@24
967 ZwQueryVolumeInformationFile@20
968 ZwReadFile@36
969 ZwReplaceKey@12
970 ZwRequestWaitReplyPort@12
971 ZwResetEvent@8
972 ZwSaveKey@8
973 ZwSetDefaultLocale@8
974 ZwSetEvent@8
975 ZwSetInformationFile@20
976 ZwSetInformationObject@16
977 ZwSetInformationProcess@16
978 ZwSetInformationThread@16
979 ZwSetSystemInformation@12
980 ZwSetSystemTime@8
981 ZwSetValueKey@24
982 ZwTerminateProcess@8
983 ZwUnloadDriver@4
984 ZwUnloadKey@4
985 ZwUnmapViewOfSection@8
986 ZwWaitForMultipleObjects@20
987 ZwWaitForSingleObject@12
988 ZwWriteFile@36
989 ZwYieldExecution@0
990 _abnormal_termination
991 _alldiv
992 _allmul
993 _allrem
994 _allshl
995 _allshr
996 _aulldiv
997 _aullrem
998 _aullshr
999 _except_handler2
1000 _except_handler3
1001 _global_unwind2
1002 _itoa
1003 _local_unwind2
1004 _purecall
1005 _snprintf
1006 _snwprintf
1007 _stricmp
1008 _strlwr
1009 _strnicmp
1010 _strnset
1011 _strrev
1012 _strset
1013 _strupr
1014 _vsnprintf
1015 _wcsicmp
1016 _wcslwr
1017 _wcsnicmp
1018 _wcsnset
1019 _wcsrev
1020 _wcsupr
1021 atoi
1022 atol
1023 isdigit
1024 islower
1025 isprint
1026 isspace
1027 isupper
1028 isxdigit
1029 mbstowcs
1030 mbtowc
1031 memchr
1032 memcpy
1033 memmove
1034 memset
1035 qsort
1036 rand
1037 sprintf
1038 srand
1039 strcat
1040 strchr
1041 strcmp
1042 strcpy
1043 strlen
1044 strncat
1045 strncmp
1046 strncpy
1047 strrchr
1048 strspn
1049 strstr
1050 swprintf
1051 tolower
1052 toupper
1053 towlower
1054 towupper
1055 vsprintf
1056 wcscat
1057 wcschr
1058 wcscmp
1059 wcscpy
1060 wcscspn
1061 wcslen
1062 wcsncat
1063 wcsncmp
1064 wcsncpy
1065 wcsrchr
1066 wcsspn
1067 wcsstr
1068 wcstombs
1069 wctomb