BCB tracing implementation
[reactos.git] / reactos / ntoskrnl / ntoskrnl.def
1 ; $Id$
2 ;
3 ; reactos/ntoskrnl/ntoskrnl.def
4 ;
5 ; ReactOS Operating System
6 ;
7 EXPORTS
8 CcRosInitializeFileCache@8
9 CcRosReleaseFileCache@4
10 CcRosTraceCacheMap@8
11 CcCanIWrite@16
12 CcCopyRead@24
13 CcCopyWrite@20
14 CcDeferWrite@24
15 CcFastCopyRead@24
16 CcFastCopyWrite@16
17 CcFlushCache@16
18 CcGetDirtyPages@16
19 CcGetFileObjectFromBcb@4
20 CcGetFileObjectFromSectionPtrs@4
21 CcGetFlushedValidData@8
22 CcGetLsnForFileObject@8
23 CcInitializeCacheMap@20
24 CcIsThereDirtyData@4
25 CcFastMdlReadWait DATA
26 CcFastReadNotPossible DATA
27 CcFastReadWait DATA
28 CcMapData@24
29 CcMdlRead@20
30 CcMdlReadComplete@8
31 CcMdlWriteAbort@8
32 CcMdlWriteComplete@12
33 CcPinMappedData@20
34 CcPinRead@24
35 CcPrepareMdlWrite@20
36 CcPreparePinWrite@28
37 CcPurgeCacheSection@16
38 CcRemapBcb@4
39 CcRepinBcb@4
40 CcScheduleReadAhead@12
41 CcSetAdditionalCacheAttributes@12
42 CcSetBcbOwnerPointer@8
43 CcSetDirtyPageThreshold@8
44 CcSetDirtyPinnedData@8
45 CcSetLogHandleForFile@12
46 CcSetReadAheadGranularity@8
47 CcUninitializeCacheMap@12
48 CcUnpinData@4
49 CcUnpinDataForThread@8
50 CcUnpinRepinnedBcb@12
51 CcWaitForCurrentLazyWriterActivity@0
52 CcSetFileSizes@8
53 CcUnpinData@4
54 CcZeroData@16
55 CmRegisterCallback@12
56 CmUnRegisterCallback@8
57 DbgBreakPoint@0
58 DbgBreakPointWithStatus@4
59 DbgLoadImageSymbols@12
60 DbgPrint
61 DbgPrompt@12
62 DbgPrintEx
63 DbgPrintReturnControlC
64 DbgQueryDebugFilterState@8
65 DbgSetDebugFilterState@12
66 @ExAcquireFastMutexUnsafe@4
67 ExAcquireResourceExclusive@8
68 ExAcquireResourceExclusiveLite@8
69 ExAcquireResourceSharedLite@8
70 @ExAcquireRundownProtection@4
71 @ExAcquireRundownProtectionEx@8
72 ExAcquireSharedStarveExclusive@8
73 ExAcquireSharedWaitForExclusive@8
74 ExAllocateFromPagedLookasideList@4=ExiAllocateFromPagedLookasideList@4
75 ExAllocatePool@8
76 ExAllocatePoolWithQuota@8
77 ExAllocatePoolWithQuotaTag@12
78 ExAllocatePoolWithTag@12
79 ExAllocatePoolWithTagPriority@16
80 ExConvertExclusiveToSharedLite@4
81 ExCreateCallback@16
82 ExDeleteNPagedLookasideList@4
83 ExDeletePagedLookasideList@4
84 ExDeleteResource@4
85 ExDeleteResourceLite@4
86 ExDesktopObjectType DATA
87 ExDisableResourceBoostLite@4
88 ExEnumHandleTable@16
89 ExEventObjectType DATA
90 ExExtendZone@12
91 ExFreePool@4
92 ExFreePoolWithTag@8
93 ExFreeToPagedLookasideList@8=ExiFreeToPagedLookasideList@8
94 ExGetCurrentProcessorCounts@12
95 ExGetCurrentProcessorCpuUsage@4
96 ExGetExclusiveWaiterCount@4
97 ExGetPreviousMode@0
98 ExGetSharedWaiterCount@4
99 @ExInitializeRundownProtection@4
100 ExInitializeNPagedLookasideList@28
101 ExInitializePagedLookasideList@28
102 ExInitializeResource@4
103 ExInitializeResourceLite@4
104 ExInitializeZone@16
105 ExInterlockedAddLargeInteger@16
106 @ExInterlockedAddLargeStatistic@8
107 ExInterlockedAddUlong@12
108 @ExInterlockedCompareExchange64@16
109 ExInterlockedDecrementLong@8
110 ExInterlockedExchangeUlong@12
111 ExInterlockedExtendZone@16
112 ExInterlockedIncrementLong@8
113 @ExInterlockedFlushSList@4
114 ExInterlockedInsertHeadList@12
115 ExInterlockedInsertTailList@12
116 ExInterlockedPopEntryList@8
117 @ExInterlockedPopEntrySList@8
118 ExInterlockedPushEntryList@12
119 @ExInterlockedPushEntrySList@12
120 ExInterlockedRemoveHeadList@8
121 ExIsProcessorFeaturePresent@4
122 ExIsResourceAcquiredExclusiveLite@4
123 ExIsResourceAcquiredSharedLite@4
124 ExLocalTimeToSystemTime@8
125 ExNotifyCallback@12
126 ExQueryPoolBlockSize@8
127 ExQueueWorkItem@8
128 ExRaiseAccessViolation@0
129 ExRaiseDatatypeMisalignment@0
130 ExRaiseException@4
131 ExRaiseHardError@24
132 ExRaiseStatus@4
133 ExRegisterCallback@12
134 ExReinitializeResourceLite@4
135 @ExReInitializeRundownProtection@4
136 @ExReleaseFastMutexUnsafe@4
137 ExReleaseResourceForThread@8
138 ExReleaseResourceForThreadLite@8
139 @ExReleaseResourceLite@4
140 @ExReleaseRundownProtection@4
141 @ExReleaseRundownProtectionEx@8
142 @ExRundownCompleted@4
143 ExSemaphoreObjectType DATA
144 ExSetResourceOwnerPointer@8
145 ExSetTimerResolution@8
146 ExSystemExceptionFilter@0
147 ExSystemTimeToLocalTime@8
148 ExTryToAcquireResourceExclusiveLite@4
149 ExUnregisterCallback@4
150 ExUuidCreate@4
151 ExVerifySuite@4
152 @ExWaitForRundownProtectionRelease@4
153 ExWindowStationObjectType DATA
154 @ExfAcquirePushLockExclusive@4
155 @ExfAcquirePushLockShared@4
156 @ExfReleasePushLock@4
157 @ExfInterlockedAddUlong@12
158 @ExfInterlockedInsertHeadList@12
159 @ExfInterlockedInsertTailList@12
160 @ExfInterlockedCompareExchange64@12
161 @ExfInterlockedPopEntryList@8
162 @ExfInterlockedPushEntryList@12
163 @ExfInterlockedRemoveHeadList@8
164 @Exfi386InterlockedDecrementLong@4
165 @Exfi386InterlockedExchangeUlong@8
166 @Exfi386InterlockedIncrementLong@4
167 Exi386InterlockedDecrementLong@4
168 Exi386InterlockedExchangeUlong@8
169 Exi386InterlockedIncrementLong@4
170 FsRtlAcquireFileExclusive@4
171 FsRtlAddLargeMcbEntry@28
172 FsRtlAddMcbEntry@16
173 FsRtlAddToTunnelCache@32
174 FsRtlAllocateFileLock@8
175 FsRtlAllocatePool@8
176 FsRtlAllocatePoolWithQuota@8
177 FsRtlAllocatePoolWithQuotaTag@12
178 FsRtlAllocatePoolWithTag@12
179 FsRtlAllocateResource@0
180 FsRtlAreNamesEqual@16
181 FsRtlBalanceReads@4
182 FsRtlCheckLockForReadAccess@8
183 FsRtlCheckLockForWriteAccess@8
184 FsRtlCheckOplock@20
185 FsRtlCopyRead@32
186 FsRtlCopyWrite@32
187 FsRtlCurrentBatchOplock@4
188 FsRtlDeleteKeyFromTunnelCache@12
189 FsRtlDeleteTunnelCache@4
190 FsRtlDeregisterUncProvider@4
191 FsRtlDissectDbcs@16
192 FsRtlDissectName@16
193 FsRtlDoesDbcsContainWildCards@4
194 FsRtlDoesNameContainWildCards@4
195 FsRtlFastCheckLockForRead@24
196 FsRtlFastCheckLockForWrite@24
197 FsRtlFastUnlockAll@16
198 FsRtlFastUnlockAllByKey@20
199 FsRtlFastUnlockSingle@32
200 FsRtlFindInTunnelCache@32
201 FsRtlFreeFileLock@4
202 FsRtlGetFileSize@8
203 FsRtlGetNextFileLock@8
204 FsRtlGetNextLargeMcbEntry@20
205 FsRtlGetNextMcbEntry@20
206 FsRtlIncrementCcFastReadNotPossible@0
207 FsRtlIncrementCcFastReadNoWait@0
208 FsRtlIncrementCcFastReadResourceMiss@0
209 FsRtlIncrementCcFastReadWait@0
210 FsRtlInitializeFileLock@12
211 FsRtlInitializeLargeMcb@8
212 FsRtlInitializeMcb@8
213 FsRtlInitializeOplock@4
214 FsRtlInitializeTunnelCache@4
215 FsRtlInsertPerFileObjectContext@8
216 FsRtlInsertPerStreamContext@8
217 FsRtlIsDbcsInExpression@8
218 FsRtlIsFatDbcsLegal@20
219 FsRtlIsHpfsDbcsLegal@20
220 FsRtlIsNameInExpression@16
221 FsRtlIsNtstatusExpected@4
222 FsRtlIsPagingFile@4
223 FsRtlIsTotalDeviceFailure@4
224 FsRtlLegalAnsiCharacterArray DATA
225 FsRtlLookupLargeMcbEntry@32
226 FsRtlLookupLastLargeMcbEntry@12
227 FsRtlLookupLastLargeMcbEntryAndIndex@16
228 FsRtlLookupLastMcbEntry@12
229 FsRtlLookupMcbEntry@20
230 FsRtlLookupPerFileObjectContext@12
231 FsRtlLookupPerStreamContextInternal@12
232 FsRtlMdlRead@24
233 FsRtlMdlReadComplete@8
234 FsRtlMdlReadCompleteDev@12
235 FsRtlMdlReadDev@28
236 FsRtlMdlWriteComplete@12
237 FsRtlMdlWriteCompleteDev@16
238 FsRtlNormalizeNtstatus@8
239 FsRtlNotifyChangeDirectory@28
240 FsRtlNotifyCleanup@12
241 FsRtlNotifyFilterChangeDirectory@44
242 FsRtlNotifyFilterReportChange@40
243 FsRtlNotifyFullChangeDirectory@40
244 FsRtlNotifyFullReportChange@36
245 FsRtlNotifyInitializeSync@4
246 FsRtlNotifyReportChange@20
247 FsRtlNotifyUninitializeSync@4
248 FsRtlNotifyVolumeEvent@8
249 FsRtlNumberOfRunsInLargeMcb@4
250 FsRtlNumberOfRunsInMcb@4
251 FsRtlOplockFsctrl@12
252 FsRtlOplockIsFastIoPossible@4
253 FsRtlPostPagingFileStackOverflow@12
254 FsRtlPostStackOverflow@12
255 FsRtlPrepareMdlWrite@24
256 FsRtlPrepareMdlWriteDev@28
257 FsRtlPrivateLock@48
258 FsRtlProcessFileLock@12
259 FsRtlRegisterUncProvider@12
260 FsRtlReleaseFile@4
261 FsRtlRemoveLargeMcbEntry@20
262 FsRtlRemoveMcbEntry@12
263 FsRtlRemovePerFileObjectContext@12
264 FsRtlRemovePerStreamContext@12
265 FsRtlResetLargeMcb@8
266 FsRtlSplitLargeMcb@20
267 FsRtlSyncVolumes@12
268 FsRtlTeardownPerStreamContexts@4
269 FsRtlTruncateLargeMcb@12
270 FsRtlTruncateMcb@8
271 FsRtlUninitializeFileLock@4
272 FsRtlUninitializeLargeMcb@4
273 FsRtlUninitializeMcb@4
274 FsRtlUninitializeOplock@4
275 HalDispatchTable DATA
276 HalPrivateDispatchTable DATA
277 @HalExamineMBR@16
278 InbvAcquireDisplayOwnership@0
279 InbvCheckDisplayOwnership@0
280 InbvDisplayString@4
281 InbvEnableBootDriver@4
282 InbvEnableDisplayString@4
283 InbvInstallDisplayStringFilter@4
284 InbvIsBootDriverInstalled@0
285 InbvNotifyDisplayOwnershipLost@4
286 InbvResetDisplay@0
287 InbvSetScrollRegion@16
288 InbvSetTextColor@4
289 InbvSolidColorFill@20
290 InitSafeBootMode DATA
291 @InterlockedCompareExchange@12
292 @InterlockedDecrement@4
293 @InterlockedExchange@8
294 @InterlockedExchangeAdd@8
295 @InterlockedIncrement@4
296 @InterlockedPushEntrySList@8
297 @InterlockedPopEntrySList@4
298 IoAcquireCancelSpinLock@4
299 IoAcquireRemoveLockEx@20
300 IoAcquireVpbSpinLock@4
301 IoAdapterObjectType DATA
302 IoAllocateAdapterChannel@20
303 IoAllocateIrp@8
304 IoAllocateMdl@20
305 IoAllocateController@16
306 IoAllocateDriverObjectExtension@16
307 IoAllocateErrorLogEntry@8
308 IoAllocateWorkItem@4
309 IoAssignDriveLetters@16
310 IoAssignResources@24
311 IoAttachDevice@12
312 IoAttachDeviceByPointer@8
313 IoAttachDeviceToDeviceStack@8
314 IoAttachDeviceToDeviceStackSafe@12
315 IoBuildAsynchronousFsdRequest@24
316 IoBuildDeviceIoControlRequest@36
317 IoBuildPartialMdl@16
318 IoBuildSynchronousFsdRequest@28
319 IoCallDriver@8
320 IoCancelFileOpen@8
321 IoCancelIrp@4
322 IoCheckDesiredAccess@8
323 IoCheckEaBufferValidity@12
324 IoCheckFunctionAccess@24
325 IoCheckQuerySetFileInformation@12
326 IoCheckQuerySetVolumeInformation@12
327 IoCheckQuotaBufferValidity@12
328 IoCheckShareAccess@20
329 IoCompleteRequest@8
330 IoConnectInterrupt@44
331 IoCreateController@4
332 IoCreateDevice@28
333 IoCreateDisk@8
334 IoCreateDriver@8
335 IoCreateFile@56
336 IoCreateFileSpecifyDeviceObjectHint@60
337 IoCreateNotificationEvent@8
338 IoCreateStreamFileObject@8
339 IoCreateStreamFileObjectEx@12
340 IoCreateStreamFileObjectLite@8
341 IoCreateSymbolicLink@8
342 IoCreateSynchronizationEvent@8
343 IoCreateUnprotectedSymbolicLink@8
344 IoCsqInitialize@28
345 IoCsqInitializeEx@28
346 IoCsqInsertIrp@12
347 IoCsqInsertIrpEx@16
348 IoCsqRemoveIrp@8
349 IoCsqRemoveNextIrp@8
350 IoDeleteController@4
351 IoDeleteDevice@4
352 IoDeleteDriver@4
353 IoDeleteSymbolicLink@4
354 IoDetachDevice@4
355 IoDeviceHandlerObjectSize DATA
356 IoDeviceHandlerObjectType DATA
357 IoDeviceObjectType DATA
358 IoDisconnectInterrupt@4
359 IoDriverObjectType DATA
360 IoEnqueueIrp@4
361 IoEnumerateDeviceObjectList@16
362 IoFastQueryNetworkAttributes@20
363 IoFileObjectType DATA
364 IoForwardAndCatchIrp@8=IoForwardIrpSynchronously@8
365 IoForwardIrpSynchronously@8
366 IoFreeController@4
367 IoFreeErrorLogEntry@4
368 IoFreeIrp@4
369 IoFreeMdl@4
370 IoFreeWorkItem@4
371 IoGetAttachedDevice@4
372 IoGetAttachedDeviceReference@4
373 IoGetBaseFileSystemDeviceObject@4
374 IoGetBootDiskInformation@8
375 IoGetConfigurationInformation@0
376 IoGetCurrentProcess@0
377 IoGetDeviceObjectPointer@16
378 IoGetDeviceAttachmentBaseRef@4
379 IoGetDeviceInterfaceAlias@12
380 IoGetDeviceInterfaces@16
381 IoGetDriverObjectExtension@8
382 IoGetDeviceProperty@20
383 IoGetDeviceToVerify@4
384 IoGetDiskDeviceObject@8
385 IoGetDmaAdapter@12
386 IoGetFileObjectGenericMapping@0
387 IoGetInitialStack@0
388 IoGetLowerDeviceObject@4
389 IoGetRelatedDeviceObject@4
390 IoGetRequestorProcess@4
391 IoGetRequestorProcessId@4
392 IoGetRequestorSessionId@8
393 IoGetStackLimits@8
394 IoGetTopLevelIrp@0
395 IoInitializeIrp@12
396 IoInvalidateDeviceRelations@8
397 IoInvalidateDeviceState@4
398 IoInitializeRemoveLockEx@20
399 IoInitializeTimer@12
400 IoIsFileOriginRemote@4
401 IoIsSystemThread@4
402 IoIsValidNameGraftingBuffer@8
403 IoIsOperationSynchronous@4
404 IoMakeAssociatedIrp@8
405 IoOpenDeviceInterfaceRegistryKey@12
406 IoOpenDeviceRegistryKey@16
407 IoPageRead@20
408 IoPnPDeliverServicePowerNotification@16
409 IoQueryDeviceDescription@32
410 IoQueryFileDosDeviceName@8
411 IoQueryFileInformation@20
412 IoQueryVolumeInformation@20
413 IoQueueThreadIrp@4
414 IoQueueWorkItem@16
415 IoRaiseHardError@12
416 IoRaiseInformationalHardError@12
417 IoReadDiskSignature@12
418 IoReadOperationCount DATA
419 @IoReadPartitionTable@16
420 IoReadPartitionTableEx@8
421 IoReadTransferCount DATA
422 IoRegisterBootDriverReinitialization@12
423 IoRegisterDeviceInterface@16
424 IoRegisterDriverReinitialization@12
425 IoRegisterFileSystem@4
426 IoRegisterFsRegistrationChange@8
427 IoRegisterLastChanceShutdownNotification@4
428 IoRegisterPlugPlayNotification@28
429 IoRegisterShutdownNotification@4
430 IoReleaseCancelSpinLock@4
431 IoReleaseRemoveLockAndWaitEx@12
432 IoReleaseRemoveLockEx@12
433 IoReleaseVpbSpinLock@4
434 IoRemoveShareAccess@8
435 IoReportDetectedDevice@32
436 IoReportHalResourceUsage@16
437 IoReportResourceUsage@36
438 IoReportResourceForDetection@28
439 IoReportTargetDeviceChange@8
440 IoReportTargetDeviceChangeAsynchronous@16
441 IoRequestDeviceEject@4
442 IoReuseIrp@8
443 IoSetCompletionRoutineEx@28
444 IoSetSystemPartition@4
445 IoSetDeviceInterfaceState@8
446 IoSetDeviceToVerify@8
447 IoSetFileOrigin@8
448 IoSetHardErrorOrVerifyDevice@8
449 IoSetInformation@16
450 IoSetIoCompletion@24
451 @IoSetPartitionInformation@16
452 IoSetPartitionInformationEx@12
453 IoSetStartIoAttributes@12
454 IoSetShareAccess@16
455 IoSetThreadHardErrorMode@4
456 IoSetTopLevelIrp@4
457 IoStartNextPacket@8
458 IoStartNextPacketByKey@12
459 IoStartPacket@16
460 IoStartTimer@4
461 IoStatisticsLock DATA
462 IoStopTimer@4
463 IoSynchronousPageWrite@20
464 IoSynchronousInvalidateDeviceRelations@8
465 IoThreadToProcess@4
466 IoUnregisterFileSystem@4
467 IoUnregisterFsRegistrationChange@8
468 IoUnregisterPlugPlayNotification@4
469 IoUnregisterShutdownNotification@4
470 IoUpdateShareAccess@8
471 IoValidateDeviceIoControlAccess@8
472 IoVerifyPartitionTable@8
473 IoVerifyVolume@8
474 IoVolumeDeviceToDosName@8
475 IoWMIAllocateInstanceIds@12
476 IoWMIDeviceObjectToInstanceName@12
477 IoWMIExecuteMethod@24
478 IoWMIHandleToInstanceName@12
479 IoWMIOpenBlock@12
480 IoWMIQueryAllData@12
481 IoWMIQueryAllDataMultiple@16
482 IoWMIQuerySingleInstance@16
483 IoWMIQuerySingleInstanceMultiple@20
484 IoWMIRegistrationControl@8
485 IoWMISetNotificationCallback@12
486 IoWMISetSingleInstance@20
487 IoWMISetSingleItem@24
488 IoWMISuggestInstanceName@16
489 IoWMIWriteEvent@4
490 IoWriteErrorLogEntry@4
491 IoWriteOperationCount DATA
492 @IoWritePartitionTable@20
493 IoWritePartitionTableEx@8
494 IoWriteTransferCount DATA
495 @IofCallDriver@8
496 @IofCompleteRequest@8
497 IoIsWdmVersionAvailable@8
498 KdDebuggerEnabled DATA
499 KdDebuggerNotPresent DATA
500 KdDisableDebugger@0
501 KdEnableDebugger@0
502 KdEnteredDebugger
503 KdPollBreakIn@0
504 KdPowerTransition@4
505 KdpServiceDispatcher@12
506 Ke386CallBios@8
507 Ke386IoSetAccessProcess@8
508 Ke386QueryIoAccessMap@8
509 Ke386SetIoAccessMap@8
510 @KeAcquireGuardedMutex@4
511 @KeAcquireGuardedMutexUnsafe@4
512 KeAcquireSpinLockAtDpcLevel@4
513 @KeAcquireDispatcherDatabaseLockAtDpcLevel@0
514 @KeAcquireInStackQueuedSpinLockAtDpcLevel@8
515 KeAcquireInterruptSpinLock@4
516 KeAddSystemServiceTable@20
517 KeAreApcsDisabled@0
518 KeAttachProcess@4
519 ;KeBoostCurrentThread
520 KeBugCheck@4
521 KeBugCheckEx@20
522 KeCancelTimer@4
523 KeCapturePersistentThreadState@28
524 KeClearEvent@4
525 KeConnectInterrupt@4
526 KeDcacheFlushCount DATA
527 KeDelayExecutionThread@12
528 KeDeregisterBugCheckCallback@4
529 KeDeregisterBugCheckReasonCallback@4
530 KeDetachProcess@0
531 KeDisconnectInterrupt@4
532 KeEnterCriticalRegion@0
533 KeEnterGuardedRegion@0
534 KeEnterKernelDebugger@0
535 KeFindConfigurationEntry@16
536 KeFindConfigurationNextEntry@20
537 KeFlushEntireTb@8
538 KeFlushQueuedDpcs@0
539 KeGetCurrentThread@0
540 KeGetPreviousMode@0
541 KeGetRecommendedSharedDataAlignment@0
542 ;KeI386AbiosCall
543 KeI386AllocateGdtSelectors@8
544 ;KeI386Call16BitCStyleFunction
545 ;KeI386Call16BitFunction
546 KeI386FlatToGdtSelector@12
547 ;KeI386GetLid
548 ;KeI386MachineType DATA
549 KeI386ReleaseGdtSelectors@8
550 ;KeI386ReleaseLid
551 ;KeI386SetGdtSelector
552 KeIcacheFlushCount DATA
553 KeInitializeApc@32
554 KeInitializeDeviceQueue@4
555 KeInitializeDpc@12
556 KeInitializeEvent@12
557 @KeInitializeGuardedMutex@4
558 KeInitializeInterrupt@44
559 KeInitializeMutant@8
560 KeInitializeMutex@8
561 KeInitializeQueue@8
562 KeInitializeSemaphore@12
563 KeInitializeSpinLock@4
564 KeInitializeTimer@4
565 KeInitializeTimerEx@8
566 KeInsertByKeyDeviceQueue@12
567 KeInsertDeviceQueue@8
568 KeInsertHeadQueue@8
569 KeInsertQueue@8
570 KeInsertQueueApc@16
571 KeInsertQueueDpc@12
572 KeIsAttachedProcess@0
573 KeIsExecutingDpc@0
574 KeLeaveCriticalRegion@0
575 KeLeaveGuardedRegion@0
576 KeLoaderBlock DATA
577 KeNumberProcessors DATA
578 KeProfileInterrupt@4
579 KeProfileInterruptWithSource@8
580 KePulseEvent@12
581 KeQueryActiveProcessors@0
582 KeQueryInterruptTime@0
583 KeQueryPriorityThread@4
584 KeQueryRuntimeThread@8
585 KeQuerySystemTime@4
586 KeQueryTickCount@4
587 KeQueryTimeIncrement@0
588 KeRaiseUserException@4
589 KeReadStateEvent@4
590 KeReadStateMutant@4
591 KeReadStateMutex@4
592 KeReadStateQueue@4
593 KeReadStateSemaphore@4
594 KeReadStateTimer@4
595 KeRegisterBugCheckCallback@20
596 KeRegisterBugCheckReasonCallback@16
597 @KeReleaseDispatcherDatabaseLockFromDpcLevel@0
598 @KeReleaseGuardedMutexUnsafe@4
599 @KeReleaseGuardedMutex@4
600 @KeReleaseInStackQueuedSpinLockFromDpcLevel@4
601 KeReleaseInterruptSpinLock@8
602 KeReleaseMutant@16
603 KeReleaseMutex@8
604 KeReleaseSemaphore@16
605 KeReleaseSpinLockFromDpcLevel@4
606 KeRemoveByKeyDeviceQueue@8
607 KeRemoveByKeyDeviceQueueIfBusy@8
608 KeRemoveDeviceQueue@4
609 KeRemoveEntryDeviceQueue@8
610 KeRemoveQueue@12
611 KeRemoveQueueDpc@4
612 KeRemoveSystemServiceTable@4
613 KeResetEvent@4
614 KeRestoreFloatingPointState@4
615 KeRevertToUserAffinityThread@0
616 KeRundownQueue@4
617 KeSaveFloatingPointState@4
618 KeSaveStateForHibernate
619 KeServiceDescriptorTable DATA
620 KeSetAffinityThread@8
621 KeSetBasePriorityThread@8
622 KeSetDmaIoCoherency@4
623 KeSetEvent@12
624 KeSetEventBoostPriority@8
625 KeSetIdealProcessorThread@8
626 KeSetImportanceDpc@8
627 KeSetKernelStackSwapEnable@4
628 KeSetPriorityThread@8
629 KeSetProfileIrql@4
630 KeSetSystemAffinityThread@4
631 ;KeSetSwapContextNotifyRoutine
632 KeSetTargetProcessorDpc@8
633 ;KeSetThreadSelectNotifyRoutine
634 KeSetTimeIncrement@8
635 KeSetTimer@16
636 KeSetTimerEx@20
637 @KeSetTimeUpdateNotifyRoutine@4
638 KeStackAttachProcess@8
639 KeSynchronizeExecution@12
640 KeTerminateThread@4
641 KeTickCount DATA
642 @KeTryToAcquireGuardedMutex@4
643 KeUpdateRunTime@8
644 KeUpdateSystemTime@8
645 KeUnstackDetachProcess@4
646 KeUserModeCallback@20
647 KeWaitForMultipleObjects@32
648 KeWaitForMutexObject@20
649 KeWaitForSingleObject@20
650 @KefAcquireSpinLockAtDpcLevel@4
651 @KefReleaseSpinLockFromDpcLevel@4
652 ;Kei386EoiHelper
653 @KiAcquireSpinLock@4
654 ;KiBugCheckData DATA
655 KiCoprocessorError@0
656 KiDeliverApc@12
657 KiKernelApcDeliveryCheck@0
658 KiDispatchInterrupt@0
659 KiEnableTimerWatchdog
660 KiInterruptDispatch2@8
661 KiIpiServiceRoutine@8
662 @KiReleaseSpinLock@4
663 KiUnexpectedInterrupt@0
664 ;Kii386SpinOnSpinLock
665 KiRawTicks DATA
666 LdrAccessResource@16
667 LdrEnumResources@20
668 LdrFindResourceDirectory_U@16
669 LdrFindResource_U@16
670 LpcPortObjectType DATA
671 LpcRequestPort@8
672 LpcRequestWaitReplyPort@12
673 LsaCallAuthenticationPackage@28
674 LsaDeregisterLogonProcess@8
675 LsaFreeReturnBuffer@4
676 LsaLogonUser@56
677 LsaLookupAuthenticationPackage@12
678 LsaRegisterLogonProcess@12
679 Mm64BitPhysicalAddress DATA
680 MmAddPhysicalMemory@8
681 MmAddVerifierThunks@8
682 MmAdjustWorkingSetSize@12
683 MmAdvanceMdl@8
684 MmAllocateContiguousMemory@12
685 MmAllocateContiguousMemorySpecifyCache@32
686 MmAllocateMappingAddress@8
687 MmAllocateNonCachedMemory@4
688 MmAllocatePagesForMdl@28
689 MmBuildMdlForNonPagedPool@4
690 MmCanFileBeTruncated@8
691 MmCreateMdl@12
692 MmCreateSection@32
693 MmDbgTranslatePhysicalAddress@8
694 MmDisableModifiedWriteOfSection@4
695 MmFlushImageSection@8
696 MmForceSectionClosed@8
697 MmFreeContiguousMemory@4
698 MmFreeContiguousMemorySpecifyCache@12
699 MmFreeMappingAddress@8
700 MmFreeNonCachedMemory@8
701 MmFreePagesFromMdl@4
702 MmGetPhysicalAddress@4
703 MmGetPhysicalMemoryRanges@0
704 MmGetSystemRoutineAddress@4
705 MmGetVirtualForPhysical@8
706 MmGrowKernelStack@4
707 MmHighestUserAddress DATA
708 MmIsAddressValid@4
709 MmIsDriverVerifying@4
710 MmIsNonPagedSystemAddressValid@4
711 MmIsRecursiveIoFault@0
712 MmIsThisAnNtAsSystem@0
713 MmIsVerifierEnabled@4
714 MmLockPagableDataSection@4
715 MmLockPagableImageSection@4=MmLockPagableDataSection@4
716 MmLockPagableSectionByHandle@4
717 MmMapIoSpace@16
718 MmMapLockedPages@8
719 MmMapLockedPagesSpecifyCache@24
720 MmMapLockedPagesWithReservedMapping@16
721 MmMapMemoryDumpMdl@4
722 MmMapUserAddressesToPage@12
723 MmMapVideoDisplay@16
724 MmMapViewInSessionSpace@12
725 MmMapViewInSystemSpace@12
726 MmMapViewOfSection@40
727 MmMarkPhysicalMemoryAsBad@8
728 MmMarkPhysicalMemoryAsGood@8
729 MmPageEntireDriver@4
730 MmPrefetchPages@8
731 MmProbeAndLockPages@12
732 MmProbeAndLockProcessPages@16
733 MmProbeAndLockSelectedPages@16
734 MmProtectMdlSystemAddress@8
735 MmQuerySystemSize@0
736 MmRemovePhysicalMemory@8
737 MmResetDriverPaging@4
738 MmSectionObjectType DATA
739 MmSecureVirtualMemory@12
740 MmSetAddressRangeModified@8
741 MmSetBankedSection@24
742 MmSizeOfMdl@8
743 MmSystemRangeStart DATA
744 MmTrimAllSystemPagableMemory@4
745 MmUnlockPagableImageSection@4
746 MmUnlockPages@4
747 MmUnmapIoSpace@8
748 MmUnmapLockedPages@8
749 MmUnmapReservedMapping@12
750 MmUnmapVideoDisplay@8
751 MmUnmapViewInSessionSpace@4
752 MmUnmapViewInSystemSpace@4
753 MmUnmapViewOfSection@8
754 MmUnsecureVirtualMemory@4
755 MmUserProbeAddress DATA
756 NlsAnsiCodePage DATA
757 NlsLeadByteInfo DATA
758 NlsMbCodePageTag DATA
759 NlsMbOemCodePageTag DATA
760 NlsOemCodePage DATA
761 NlsOemLeadByteInfo DATA
762 NtAddAtom@12
763 NtAdjustPrivilegesToken@24
764 NtAlertThread@4
765 NtAllocateLocallyUniqueId@4
766 NtAllocateUuids@16
767 NtAllocateVirtualMemory@24
768 NtBuildNumber DATA
769 NtClose@4
770 NtConnectPort@32
771 NtCreateEvent@20
772 NtCreateTimer@16
773 NtOpenEvent@12
774 NtCreateFile@44
775 NtCreateSection@28
776 NtDeleteAtom@4
777 NtDeleteFile@4
778 NtDeviceIoControlFile@40
779 NtDuplicateObject@28
780 NtDuplicateToken@24
781 NtFindAtom@12
782 NtFreeVirtualMemory@16
783 NtFsControlFile@40
784 NtGlobalFlag DATA
785 NtLockFile@40
786 NtMakePermanentObject@4
787 NtMapViewOfSection@40
788 NtNotifyChangeDirectoryFile@36
789 NtOpenFile@24
790 NtOpenProcess@16
791 NtOpenProcessToken@12
792 NtOpenProcessTokenEx@16
793 NtOpenThread@16
794 NtOpenThreadToken@16
795 NtOpenThreadTokenEx@20
796 NtQueryDirectoryFile@44
797 NtQueryEaFile@36
798 NtQueryInformationAtom@20
799 NtQueryInformationFile@20
800 NtQueryInformationProcess@20
801 NtQueryInformationThread@20
802 NtQueryInformationToken@20
803 NtQueryQuotaInformationFile@36
804 NtQuerySecurityObject@20
805 NtQuerySystemInformation@16
806 NtQuerySystemTime@4
807 NtQueryVolumeInformationFile@20
808 NtReadFile@36
809 NtRequestPort@8
810 NtRequestWaitReplyPort@12
811 NtSetEaFile@16
812 NtSetEvent@8
813 NtSetInformationFile@20
814 NtSetInformationProcess@16
815 NtSetInformationThread@16
816 NtSetQuotaInformationFile@16
817 NtSetSecurityObject@12
818 NtSetVolumeInformationFile@20
819 NtSetSystemTime@8
820 NtShutdownSystem@4
821 NtTraceEvent@16
822 NtUnlockFile@20
823 NtVdmControl@8
824 NtW32Call@20
825 NtWaitForSingleObject@12
826 NtWriteFile@36
827 ObAssignSecurity@16
828 ;ObCheckCreateObjectAccess@28
829 ;ObCheckObjectAccess@20
830 ObCreateObject@36
831 ObFindHandleForObject@20
832 ObGetObjectPointerCount@4
833 ObGetObjectSecurity@12
834 ObInsertObject@24
835 ObMakeTemporaryObject@4
836 ObOpenObjectByName@28
837 ObOpenObjectByPointer@28
838 ObQueryNameString@16
839 ObQueryObjectAuditingByHandle@8
840 @ObfDereferenceObject@4
841 @ObfReferenceObject@4
842 ObReferenceObjectByHandle@24
843 ObReferenceObjectByName@32
844 ObReferenceObjectByPointer@16
845 ObReleaseObjectSecurity@8
846 ObDereferenceObject@4
847 ;ObSetSecurityDescriptorInfo@24
848 ;PfxFindPrefix
849 ;PfxInitialize
850 ;PfxInsertPrefix
851 ;PfxRemovePrefix
852 PoCallDriver@8
853 PoQueueShutdownWorkItem@4
854 PoRegisterDeviceForIdleDetection@16
855 PoRegisterSystemState@8
856 PoRequestPowerIrp@24
857 PoSetDeviceBusy@4
858 PoSetPowerState@12
859 PoSetSystemState@4
860 PoStartNextPowerIrp@4
861 PoUnregisterSystemState@4
862 ProbeForRead@12
863 ProbeForWrite@12
864 PsAssignImpersonationToken@8
865 PsChargePoolQuota@12
866 PsChargeProcessNonPagedPoolQuota@4=PsDereferenceImpersonationToken@4
867 PsChargeProcessPagedPoolQuota@8
868 PsChargeProcessPoolQuota@12
869 PsCreateSystemProcess@12
870 PsCreateSystemThread@28
871 PsDereferenceImpersonationToken@4=PsDereferencePrimaryToken@4
872 PsDereferencePrimaryToken@4
873 PsDisableImpersonation@8
874 PsEstablishWin32Callouts@4
875 PsGetCurrentProcess@0=KeGetCurrentProcess@0
876 PsGetCurrentProcessId@0
877 PsGetCurrentProcessSessionId@0
878 PsGetCurrentThread@0=KeGetCurrentThread@0
879 PsGetCurrentThreadId@0
880 PsGetCurrentThreadPreviousMode@0
881 PsGetCurrentThreadStackBase@0
882 PsGetCurrentThreadStackLimit@0
883 PsGetJobLock@4
884 PsGetJobSessionId@4
885 PsGetJobUIRestrictionsClass@4
886 PsGetProcessCreateTimeQuadPart@4
887 PsGetProcessDebugPort@4
888 PsGetProcessExitProcessCalled@4
889 PsGetProcessExitStatus@4
890 PsGetProcessExitTime@0
891 PsGetProcessId@4
892 PsGetProcessImageFileName@4
893 PsGetProcessInheritedFromUniqueProcessId@4
894 PsGetProcessJob@4
895 PsGetProcessPeb@4
896 PsGetProcessPriorityClass@4
897 PsGetProcessSectionBaseAddress@4
898 PsGetProcessSecurityPort@4
899 PsGetProcessSessionId@4
900 PsGetProcessWin32Process@4
901 PsGetProcessWin32WindowStation@4
902 PsGetThreadFreezeCount@4
903 PsGetThreadHardErrorsAreDisabled@4
904 PsGetThreadId@4
905 PsGetThreadProcess@4
906 PsGetThreadProcessId@4
907 PsGetThreadSessionId@4
908 PsGetThreadTeb@4
909 PsGetThreadWin32Thread@4
910 PsGetVersion@16
911 PsGetWin32Thread@0
912 PsGetWin32Process@0
913 PsImpersonateClient@20
914 PsInitialSystemProcess DATA
915 PsIsProcessBeingDebugged@4
916 PsIsSystemThread@4
917 PsIsThreadImpersonating@4
918 PsIsThreadTerminating@4
919 PsJobType DATA
920 PsLookupProcessByProcessId@8
921 PsLookupProcessThreadByCid@12
922 PsLookupThreadByThreadId@8
923 PsProcessType DATA
924 PsReferenceImpersonationToken@16
925 PsReferencePrimaryToken@4
926 PsRemoveCreateThreadNotifyRoutine@4
927 PsRemoveLoadImageNotifyRoutine@4
928 PsRestoreImpersonation@8
929 PsReturnPoolQuota@12
930 PsReturnProcessNonPagedPoolQuota@8
931 PsReturnProcessPagedPoolQuota@8
932 PsRevertToSelf@0
933 PsRevertThreadToSelf@4
934 PsSetCreateProcessNotifyRoutine@8
935 PsSetCreateThreadNotifyRoutine@4
936 PsSetJobUIRestrictionsClass@8
937 PsSetLegoNotifyRoutine@4
938 PsSetProcessPriorityClass@8
939 PsSetProcessPriorityByClass@8
940 PsSetProcessSecurityPort@8
941 PsSetProcessWin32Process@8
942 PsSetProcessWindowStation@8
943 PsSetThreadHardErrorsAreDisabled@8
944 PsSetThreadWin32Thread@8
945 PsSetLoadImageNotifyRoutine@4
946 PsTerminateSystemThread@4
947 PsThreadType DATA
948 READ_REGISTER_UCHAR@4
949 READ_REGISTER_ULONG@4
950 READ_REGISTER_USHORT@4
951 READ_REGISTER_BUFFER_UCHAR@12
952 READ_REGISTER_BUFFER_ULONG@12
953 READ_REGISTER_BUFFER_USHORT@12
954 KiRosPrintAddress@4
955 KeRosDumpStackFrames@8
956 KeRosGetStackFrames@8
957 RtlAbsoluteToSelfRelativeSD@12
958 RtlAddAccessAllowedAce@16
959 RtlAddAce@20
960 RtlAddAtomToAtomTable@12
961 RtlAddRange@36
962 ;RtlAllocateAndInitializeSid
963 RtlAllocateHeap@12
964 RtlAnsiCharToUnicodeChar@4
965 RtlAnsiStringToUnicodeSize@4
966 RtlAnsiStringToUnicodeString@12
967 RtlAppendAsciizToString@8
968 RtlAppendStringToString@8
969 RtlAppendUnicodeStringToString@8
970 RtlAppendUnicodeToString@8
971 RtlAreAllAccessesGranted@8
972 RtlAreAnyAccessesGranted@8
973 RtlAreBitsClear@12
974 RtlAreBitsSet@12
975 RtlAssert@16
976 RtlCaptureContext@4
977 RtlCaptureStackBackTrace@16
978 RtlCharToInteger@12
979 RtlCheckRegistryKey@8
980 RtlClearAllBits@4
981 RtlClearBit@8
982 RtlClearBits@12
983 RtlCompareMemory@12
984 RtlCompareMemoryUlong@12
985 RtlCompareString@12
986 RtlCompareUnicodeString@12
987 RtlCompressBuffer@32
988 RtlCompressChunks@28
989 RtlConvertLongToLargeInteger@4
990 RtlConvertSidToUnicodeString@12
991 RtlConvertUlongToLargeInteger@4
992 RtlCopyLuid@8
993 RtlCopyRangeList@8
994 RtlCopySid@12
995 RtlCopyString@8
996 RtlCopyUnicodeString@8
997 RtlCreateAcl@12
998 RtlCreateAtomTable@8
999 RtlCreateHeap@24
1000 RtlCreateRegistryKey@8
1001 RtlCreateSecurityDescriptor@8
1002 RtlCreateSystemVolumeInformationFolder@4
1003 RtlCreateUnicodeString@8
1004 RtlCustomCPToUnicodeN@24
1005 RtlDecompressBuffer@24
1006 RtlDecompressChunks@28
1007 RtlDecompressFragment@32
1008 RtlDelete@4
1009 RtlDeleteAce@8
1010 RtlDeleteAtomFromAtomTable@8
1011 RtlDeleteElementGenericTable@8
1012 RtlDeleteElementGenericTableAvl@8
1013 RtlDeleteNoSplay@8
1014 RtlDeleteOwnersRanges@8
1015 RtlDeleteRange@24
1016 RtlDeleteRegistryValue@12
1017 RtlDescribeChunk@20
1018 RtlDestroyAtomTable@4
1019 RtlDestroyHeap@4
1020 RtlDowncaseUnicodeString@12
1021 RtlEmptyAtomTable@8
1022 RtlEnlargedIntegerMultiply@8
1023 RtlEnlargedUnsignedDivide@16
1024 RtlEnlargedUnsignedMultiply@8
1025 RtlEnumerateGenericTable@8
1026 RtlEnumerateGenericTableAvl@8
1027 RtlEnumerateGenericTableLikeADirectory@28
1028 RtlEnumerateGenericTableWithoutSplaying@8
1029 RtlEnumerateGenericTableWithoutSplayingAvl@8
1030 RtlEqualLuid@8
1031 RtlEqualSid@8
1032 RtlEqualString@12
1033 RtlEqualUnicodeString@12
1034 RtlExtendedIntegerMultiply@12
1035 RtlExtendedLargeIntegerDivide@16
1036 RtlExtendedMagicDivide@20
1037 RtlFillMemory@12
1038 RtlFillMemoryUlong@12
1039 RtlFindClearBits@12
1040 RtlFindClearBitsAndSet@12
1041 RtlFindClearRuns@16
1042 RtlFindFirstRunClear@8
1043 RtlFindFirstRunSet@8
1044 RtlFindLastBackwardRunClear@12
1045 RtlFindLeastSignificantBit@8
1046 RtlFindLongestRunClear@8
1047 RtlFindLongestRunSet@8
1048 RtlFindMessage@20
1049 RtlFindMostSignificantBit@8
1050 RtlFindNextForwardRunClear@12
1051 RtlFindRange@48
1052 RtlFindSetBits@12
1053 RtlFindSetBitsAndClear@12
1054 RtlFindUnicodePrefix@12
1055 RtlFormatCurrentUserKeyPath@4
1056 RtlFreeAnsiString@4
1057 RtlFreeHeap@12
1058 RtlFreeRangeList@4
1059 RtlFreeOemString@4
1060 RtlFreeUnicodeString@4
1061 RtlGUIDFromString@8
1062 RtlGenerate8dot3Name@16
1063 RtlGetAce@12
1064 RtlGetCallersAddress@8
1065 RtlGetCompressionWorkSpaceSize@12
1066 RtlGetDaclSecurityDescriptor@16
1067 RtlGetDefaultCodePage@8
1068 RtlGetElementGenericTable@8
1069 RtlGetElementGenericTableAvl@8
1070 RtlGetFirstRange@12
1071 RtlGetGroupSecurityDescriptor@12
1072 RtlGetNextRange@12
1073 RtlGetNtGlobalFlags@0
1074 RtlGetOwnerSecurityDescriptor@12
1075 RtlGetSaclSecurityDescriptor@16
1076 RtlGetSetBootStatusData@24
1077 RtlGetVersion@4
1078 RtlHashUnicodeString@16
1079 RtlImageNtHeader@4
1080 RtlImageDirectoryEntryToData@16
1081 RtlInitAnsiString@8
1082 RtlInitCodePageTable@8
1083 RtlInitString@8
1084 RtlInitUnicodeString@8
1085 RtlInitializeBitMap@12
1086 RtlInitializeGenericTable@20
1087 RtlInitializeGenericTableAvl@20
1088 RtlInitializeRangeList@4
1089 RtlInitializeSid@12
1090 RtlInitializeUnicodePrefix@4
1091 RtlInsertElementGenericTable@16
1092 RtlInsertElementGenericTableAvl@16
1093 RtlInsertElementGenericTableFull@24
1094 RtlInsertElementGenericTableFullAvl@24
1095 RtlInsertUnicodePrefix@12
1096 RtlInt64ToUnicodeString@16
1097 RtlIntegerToChar@16
1098 RtlIntegerToUnicode@16
1099 RtlIntegerToUnicodeString@12
1100 RtlInvertRangeList@8
1101 RtlIpv4AddressToStringA@8
1102 RtlIpv4AddressToStringExA@16
1103 RtlIpv4AddressToStringExW@16
1104 RtlIpv4AddressToStringW@8
1105 RtlIpv4StringToAddressA@16
1106 RtlIpv4StringToAddressExA@16
1107 RtlIpv4StringToAddressExW@16
1108 RtlIpv4StringToAddressW@16
1109 RtlIpv6AddressToStringA@8
1110 RtlIpv6AddressToStringExA@16
1111 RtlIpv6AddressToStringExW@16
1112 RtlIpv6AddressToStringW@8
1113 RtlIpv6StringToAddressA@16
1114 RtlIpv6StringToAddressExA@16
1115 RtlIpv6StringToAddressExW@16
1116 RtlIpv6StringToAddressW@16
1117 RtlIsGenericTableEmpty@4
1118 RtlIsGenericTableEmptyAvl@4
1119 RtlIsNameLegalDOS8Dot3@12
1120 RtlIsRangeAvailable@40
1121 RtlIsValidOemCharacter@4
1122 RtlLargeIntegerAdd@16
1123 RtlLargeIntegerArithmeticShift@12
1124 RtlLargeIntegerDivide@20
1125 RtlLargeIntegerNegate@8
1126 RtlLargeIntegerShiftLeft@12
1127 RtlLargeIntegerShiftRight@12
1128 RtlLargeIntegerSubtract@16
1129 RtlLengthRequiredSid@4
1130 RtlLengthSecurityDescriptor@4
1131 RtlLengthSid@4
1132 RtlLockBootStatusData@4
1133 RtlLookupAtomInAtomTable@12
1134 RtlLookupElementGenericTable@8
1135 RtlLookupElementGenericTableAvl@8
1136 RtlLookupElementGenericTableFull@16
1137 RtlLookupElementGenericTableFullAvl@16
1138 RtlMapGenericMask@8
1139 RtlMapSecurityErrorToNtStatus@4
1140 RtlMergeRangeLists@16
1141 RtlMoveMemory@12
1142 RtlMultiByteToUnicodeN@20
1143 RtlMultiByteToUnicodeSize@12
1144 RtlNextUnicodePrefix@8
1145 RtlNtStatusToDosError@4
1146 RtlNtStatusToDosErrorNoTeb@4
1147 RtlNumberGenericTableElements@4
1148 RtlNumberGenericTableElementsAvl@4
1149 RtlNumberOfClearBits@4
1150 RtlNumberOfSetBits@4
1151 RtlOemStringToCountedUnicodeString@12
1152 RtlOemStringToUnicodeSize@4
1153 RtlOemStringToUnicodeString@12
1154 RtlOemToUnicodeN@20
1155 RtlPinAtomInAtomTable@8
1156 @RtlPrefetchMemoryNonTemporal@8
1157 RtlPrefixString@12
1158 RtlPrefixUnicodeString@12
1159 RtlQueryAtomInAtomTable@24
1160 RtlQueryRegistryValues@20
1161 RtlQueryTimeZoneInformation@4
1162 RtlRaiseException@4
1163 RtlRandom@4
1164 RtlRandomEx@4
1165 RtlRealPredecessor@4
1166 RtlRealSuccessor@4
1167 RtlRemoveUnicodePrefix@8
1168 RtlReserveChunk@20
1169 RtlSecondsSince1970ToTime@8
1170 RtlSecondsSince1980ToTime@8
1171 RtlSelfRelativeToAbsoluteSD2@8
1172 RtlSelfRelativeToAbsoluteSD@44
1173 RtlSetAllBits@4
1174 RtlSetBit@8
1175 RtlSetBits@12
1176 RtlSetDaclSecurityDescriptor@16
1177 RtlSetGroupSecurityDescriptor@12
1178 RtlSetOwnerSecurityDescriptor@12
1179 RtlSetSaclSecurityDescriptor@16
1180 RtlSetTimeZoneInformation@4
1181 RtlSizeHeap@12
1182 RtlSplay@4
1183 RtlStringFromGUID@8
1184 RtlSubAuthorityCountSid@4
1185 RtlSubAuthoritySid@8
1186 RtlSubtreePredecessor@4
1187 RtlSubtreeSuccessor@4
1188 RtlTestBit@8
1189 RtlTimeFieldsToTime@8
1190 RtlTimeToElapsedTimeFields@8
1191 RtlTimeToSecondsSince1970@8
1192 RtlTimeToSecondsSince1980@8
1193 RtlTimeToTimeFields@8
1194 @RtlUlongByteSwap@4
1195 @RtlUlonglongByteSwap@8
1196 RtlUnicodeStringToAnsiSize@4
1197 RtlUnicodeStringToAnsiString@12
1198 RtlUnicodeStringToCountedOemString@12
1199 RtlUnicodeStringToInteger@12
1200 RtlUnicodeStringToOemSize@4
1201 RtlUnicodeStringToOemString@12
1202 RtlUnicodeToCustomCPN@24
1203 RtlUnicodeToMultiByteN@20
1204 RtlUnicodeToMultiByteSize@12
1205 RtlUnicodeToOemN@20
1206 RtlUnlockBootStatusData@4
1207 RtlUnwind@16
1208 RtlUpcaseUnicodeChar@4
1209 RtlUpcaseUnicodeString@12
1210 RtlUpcaseUnicodeStringToAnsiString@12
1211 RtlUpcaseUnicodeStringToCountedOemString@12
1212 RtlUpcaseUnicodeStringToOemString@12
1213 RtlUpcaseUnicodeToCustomCPN@24
1214 RtlUpcaseUnicodeToMultiByteN@20
1215 RtlUpcaseUnicodeToOemN@20
1216 RtlUpperChar@4
1217 RtlUpperString@8
1218 @RtlUshortByteSwap@4
1219 RtlValidRelativeSecurityDescriptor@12
1220 RtlValidSecurityDescriptor@4
1221 RtlValidSid@4
1222 RtlVerifyVersionInfo@16
1223 RtlVolumeDeviceToDosName@8
1224 RtlWalkFrameChain@12
1225 RtlWriteRegistryValue@24
1226 RtlZeroHeap@8
1227 RtlZeroMemory@8
1228 RtlxAnsiStringToUnicodeSize@4
1229 RtlxOemStringToUnicodeSize@4
1230 RtlxUnicodeStringToAnsiSize@4
1231 RtlxUnicodeStringToOemSize@4
1232 SeAccessCheck@40
1233 SeAppendPrivileges@8
1234 SeAssignSecurity@28
1235 SeAssignSecurityEx@36
1236 SeAuditHardLinkCreation@12
1237 SeAuditingFileEvents@8
1238 SeAuditingFileEventsWithContext@12
1239 SeAuditingFileOrGlobalEvents@12
1240 SeAuditingHardLinkEvents@8
1241 SeAuditingHardLinkEventsWithContext@12
1242 SeCaptureSecurityDescriptor@20
1243 SeCaptureSubjectContext@4
1244 SeCloseObjectAuditAlarm@12
1245 SeCreateAccessState@16
1246 SeCreateClientSecurity@16
1247 SeCreateClientSecurityFromSubjectContext@16
1248 SeDeassignSecurity@4
1249 SeDeleteAccessState@4
1250 SeDeleteObjectAuditAlarm@8
1251 SeExports DATA
1252 SeFilterToken@24
1253 SeFreePrivileges@4
1254 SeImpersonateClient@8
1255 SeImpersonateClientEx@8
1256 SeLockSubjectContext@4
1257 SeMarkLogonSessionForTerminationNotification@4
1258 SeOpenObjectAuditAlarm@36
1259 SeOpenObjectForDeleteAuditAlarm@36
1260 SePrivilegeCheck@12
1261 SePrivilegeObjectAuditAlarm@24
1262 SePublicDefaultDacl DATA
1263 SeQueryAuthenticationIdToken@8
1264 SeQueryInformationToken@12
1265 SeQuerySecurityDescriptorInfo@16
1266 SeQuerySessionIdToken@8
1267 SeRegisterLogonSessionTerminatedRoutine@4
1268 SeReleaseSecurityDescriptor@12
1269 SeReleaseSubjectContext@4
1270 SeSetAccessStateGenericMapping@8
1271 SeSetSecurityDescriptorInfo@24
1272 SeSetSecurityDescriptorInfoEx@28
1273 SeSinglePrivilegeCheck@12
1274 SeSystemDefaultDacl DATA
1275 SeTokenImpersonationLevel@4
1276 SeTokenIsAdmin@4
1277 SeTokenIsRestricted@4
1278 SeTokenIsWriteRestricted@4
1279 SeTokenType@4
1280 SeUnlockSubjectContext@4
1281 SeUnregisterLogonSessionTerminatedRoutine@4
1282 SeValidSecurityDescriptor@8
1283 VerSetConditionMask@16
1284 WRITE_REGISTER_UCHAR@8
1285 WRITE_REGISTER_ULONG@8
1286 WRITE_REGISTER_USHORT@8
1287 WRITE_REGISTER_BUFFER_UCHAR@12
1288 WRITE_REGISTER_BUFFER_ULONG@12
1289 WRITE_REGISTER_BUFFER_USHORT@12
1290 ZwAccessCheckAndAuditAlarm@44
1291 ZwAddBootEntry@8
1292 ZwAdjustPrivilegesToken@24
1293 ZwAlertThread@4
1294 ZwAllocateVirtualMemory@24
1295 ZwAssignProcessToJobObject@8
1296 ZwCancelIoFile@8
1297 ZwCancelTimer@8
1298 ZwClearEvent@4
1299 ZwClose@4
1300 ZwCloseObjectAuditAlarm@12
1301 ZwConnectPort@32
1302 ZwCreateDirectoryObject@12
1303 ZwCreateEvent@20
1304 ZwCreateFile@44
1305 ZwCreateJobObject@12
1306 ZwCreateKey@28
1307 ZwCreateSection@28
1308 ZwCreateSymbolicLinkObject@16
1309 ZwCreateTimer@16
1310 ZwDeleteBootEntry@8
1311 ZwDeleteFile@4
1312 ZwDeleteKey@4
1313 ZwDeleteValueKey@8
1314 ZwDeviceIoControlFile@40
1315 ZwDisplayString@4
1316 ZwDuplicateObject@28
1317 ZwDuplicateToken@24
1318 ZwEnumerateBootEntries@8
1319 ZwEnumerateKey@24
1320 ZwEnumerateValueKey@24
1321 ZwFlushInstructionCache@12
1322 ZwFlushKey@4
1323 ZwFlushVirtualMemory@16
1324 ZwFreeVirtualMemory@16
1325 ZwFsControlFile@40
1326 ZwInitiatePowerAction@16
1327 ZwIsProcessInJob@8
1328 ZwLoadDriver@4
1329 ZwLoadKey@8
1330 ZwMakeTemporaryObject@4
1331 ZwMapViewOfSection@40
1332 ZwNotifyChangeKey@40
1333 ZwOpenDirectoryObject@12
1334 ZwOpenEvent@12
1335 ZwOpenFile@24
1336 ZwOpenJobObject@12
1337 ZwOpenKey@12
1338 ZwOpenProcess@16
1339 ZwOpenProcessToken@12
1340 ZwOpenProcessTokenEx@16
1341 ZwOpenSection@12
1342 ZwOpenSymbolicLinkObject@12
1343 ZwOpenThread@16
1344 ZwOpenThreadToken@16
1345 ZwOpenThreadTokenEx@20
1346 ZwOpenTimer@12
1347 ZwPowerInformation@20
1348 ZwPulseEvent@8
1349 ZwQueryBootEntryOrder@8
1350 ZwQueryBootOptions@8
1351 ZwQueryDefaultLocale@8
1352 ZwQueryDefaultUILanguage@4
1353 ZwQueryDirectoryFile@44
1354 ZwQueryDirectoryObject@28
1355 ZwQueryEaFile@36
1356 ZwQueryFullAttributesFile@8
1357 ZwQueryInformationAtom@20
1358 ZwQueryInformationFile@20
1359 ZwQueryInformationJobObject@20
1360 ZwQueryInformationProcess@20
1361 ZwQueryInformationThread@20
1362 ZwQueryInformationToken@20
1363 ZwQueryInstallUILanguage@4
1364 ZwQueryKey@20
1365 ZwQueryObject@20
1366 ZwQuerySection@20
1367 ZwQuerySecurityObject@20
1368 ZwQuerySymbolicLinkObject@12
1369 ZwQuerySystemInformation@16
1370 ZwQuerySystemTime@4
1371 ZwQueryValueKey@24
1372 ZwQueryVolumeInformationFile@20
1373 ZwReadFile@36
1374 ZwReplaceKey@12
1375 ZwRequestWaitReplyPort@12
1376 ZwResetEvent@8
1377 ZwRestoreKey@12
1378 ZwSaveKey@8
1379 ZwSaveKeyEx@12
1380 ZwSetBootEntryOrder@8
1381 ZwSetBootOptions@8
1382 ZwSetDefaultLocale@8
1383 ZwSetDefaultUILanguage@4
1384 ZwSetEaFile@16
1385 ZwSetEvent@8
1386 ZwSetInformationFile@20
1387 ZwSetInformationJobObject@16
1388 ZwSetInformationObject@16
1389 ZwSetInformationProcess@16
1390 ZwSetInformationThread@16
1391 ZwSetSecurityObject@12
1392 ZwSetSystemInformation@12
1393 ZwSetSystemTime@8
1394 ZwSetTimer@28
1395 ZwSetValueKey@24
1396 ZwSetVolumeInformationFile@20
1397 ZwTerminateJobObject@8
1398 ZwTerminateProcess@8
1399 ZwTranslateFilePath@12
1400 ZwUnloadDriver@4
1401 ZwUnloadKey@4
1402 ZwUnmapViewOfSection@8
1403 ZwWaitForMultipleObjects@20
1404 ZwWaitForSingleObject@12
1405 ZwWriteFile@36
1406 ZwYieldExecution@0
1407 _abnormal_termination
1408 _alldiv
1409 _allmul
1410 _alloca_probe
1411 _allrem
1412 _allshl
1413 _allshr
1414 _aulldiv
1415 _aullrem
1416 _aullshr
1417 _except_handler2
1418 _except_handler3
1419 _global_unwind2
1420 _itoa
1421 _itow
1422 _local_unwind2
1423 _purecall
1424 _snprintf
1425 _snwprintf
1426 _stricmp
1427 _strlwr
1428 _strnicmp
1429 _strnset
1430 _strrev
1431 _strset
1432 _strupr
1433 _vsnprintf
1434 _wcsicmp
1435 _wcslwr
1436 _wcsnicmp
1437 _wcsnset
1438 _wcsrev
1439 _wcsupr
1440 atoi
1441 atol
1442 isdigit
1443 islower
1444 isprint
1445 isspace
1446 isupper
1447 isxdigit
1448 mbstowcs
1449 mbtowc
1450 memchr
1451 memcpy
1452 memmove
1453 memset
1454 qsort
1455 rand
1456 sprintf
1457 srand
1458 strcat
1459 strchr
1460 strcmp
1461 strcpy
1462 strlen
1463 strncat
1464 strncmp
1465 strncpy
1466 strrchr
1467 strspn
1468 strstr
1469 swprintf
1470 tolower
1471 toupper
1472 towlower
1473 towupper
1474 vsprintf
1475 wcscat
1476 wcschr
1477 wcscmp
1478 wcscpy
1479 wcscspn
1480 wcslen
1481 wcsncat
1482 wcsncmp
1483 wcsncpy
1484 wcsrchr
1485 wcsspn
1486 wcsstr
1487 wcstombs
1488 wctomb