1 ; $Id: ntoskrnl.def,v 1.143 2002/09/08 10:23:15 chorns Exp $
3 ; reactos/ntoskrnl/ntoskrnl.def
5 ; ReactOS Operating System
8 CcRosInitializeFileCache@12
9 ;CcRosRequestCacheSegment@20
10 ;CcRosReleaseCacheSegment@12
11 CcRosReleaseFileCache@8
16 CcSetDirtyPinnedData@8
21 DbgBreakPointWithStatus@4
22 ;DbgLoadImageSymbols@12
26 @ExAcquireFastMutexUnsafe@4
27 ExAcquireResourceExclusive@8
28 ExAcquireResourceExclusiveLite@8
29 ExAcquireResourceSharedLite@8
30 ExAcquireSharedStarveExclusive@8
31 ExAcquireSharedWaitForExclusive@8
32 ExAllocateFromPagedLookasideList@4
34 ExAllocatePoolWithQuota@8
35 ExAllocatePoolWithQuotaTag@12
36 ExAllocatePoolWithTag@12
37 ExConvertExclusiveToSharedLite@4
39 ExDeleteNPagedLookasideList@4
40 ExDeletePagedLookasideList@4
42 ExDeleteResourceLite@4
43 ExDesktopObjectType DATA
44 ExDisableResourceBoostLite@4
45 ExEventObjectType DATA
48 ExFreeToPagedLookasideList@8
49 ExGetExclusiveWaiterCount@4
51 ExGetSharedWaiterCount@4
52 ExInitializeNPagedLookasideList@28
53 ExInitializePagedLookasideList@28
54 ExInitializeResource@4
55 ExInitializeResourceLite@4
57 ExInterlockedAddLargeInteger@16
58 @ExInterlockedAddLargeStatistic@8
59 ExInterlockedAddUlong@12
60 @ExInterlockedCompareExchange64@16
61 ExInterlockedDecrementLong@8
62 ExInterlockedExchangeUlong@12
63 ExInterlockedExtendZone@16
64 ExInterlockedIncrementLong@8
65 ExInterlockedInsertHeadList@12
66 ExInterlockedInsertTailList@12
67 ExInterlockedPopEntryList@8
68 @ExInterlockedPopEntrySList@8
69 ExInterlockedPushEntryList@12
70 @ExInterlockedPushEntrySList@12
71 ExInterlockedRemoveHeadList@8
72 ExIsProcessorFeaturePresent@4
73 ExIsResourceAcquiredExclusiveLite@4
74 ExIsResourceAcquiredSharedLite@4
75 ExLocalTimeToSystemTime@8
80 ExRaiseAccessViolation@0
81 ExRaiseDatatypeMisalignment@0
86 ExReinitializeResourceLite@4
87 @ExReleaseFastMutexUnsafe@4
88 ExReleaseResourceForThread@8
89 ExReleaseResourceForThreadLite@8
90 @ExReleaseResourceLite@4
91 ExSetResourceOwnerPointer@8
92 ;ExSystemExceptionFilter
93 ExSystemTimeToLocalTime@8
94 ExTryToAcquireResourceExclusiveLite@4
95 ExUnregisterCallback@4
96 ExWindowStationObjectType DATA
97 ExInitializeBinaryTree@12
100 ExSearchBinaryTree@12
101 ExRemoveBinaryTree@12
102 ExTraverseBinaryTree@16
103 ExInitializeSplayTree@16
108 ExWeightOfSplayTree@8
109 ExTraverseSplayTree@16
110 ExInitializeHashTable@16
115 @ExfInterlockedAddUlong@12
116 @ExfInterlockedInsertHeadList@12
117 @ExfInterlockedInsertTailList@12
118 @ExfInterlockedPopEntryList@8
119 @ExfInterlockedPushEntryList@12
120 @ExfInterlockedRemoveHeadList@8
121 @Exfi386InterlockedDecrementLong@4
122 @Exfi386InterlockedExchangeUlong@8
123 @Exfi386InterlockedIncrementLong@4
124 Exi386InterlockedDecrementLong@4
125 Exi386InterlockedExchangeUlong@8
126 Exi386InterlockedIncrementLong@4
127 FsRtlAddLargeMcbEntry@28
129 FsRtlAddToTunnelCache@32
130 FsRtlAllocateFileLock@8
132 FsRtlAllocatePoolWithQuota@8
133 FsRtlAllocatePoolWithQuotaTag@12
134 FsRtlAllocatePoolWithTag@12
135 FsRtlAllocateResource@0
136 FsRtlAreNamesEqual@16
138 FsRtlCheckLockForReadAccess@8
139 FsRtlCheckLockForWriteAccess@8
143 FsRtlCurrentBatchOplock@4
144 FsRtlDeleteKeyFromTunnelCache@12
145 FsRtlDeleteTunnelCache@4
146 FsRtlDeregisterUncProvider@4
149 FsRtlDoesDbcsContainWildCards@4
150 FsRtlDoesNameContainWildCards@4
151 FsRtlFastCheckLockForRead@24
152 FsRtlFastCheckLockForWrite@24
153 FsRtlFastUnlockAll@16
154 FsRtlFastUnlockAllByKey@20
155 FsRtlFastUnlockSingle@32
156 FsRtlFindInTunnelCache@32
158 FsRtlGetNextFileLock@8
159 FsRtlGetNextLargeMcbEntry@20
160 FsRtlGetNextMcbEntry@20
161 FsRtlInitializeFileLock@12
162 FsRtlInitializeLargeMcb@8
164 FsRtlInitializeOplock@4
165 FsRtlInitializeTunnelCache@4
166 FsRtlIsDbcsInExpression@8
167 FsRtlIsFatDbcsLegal@20
168 FsRtlIsHpfsDbcsLegal@20
169 FsRtlIsNameInExpression@16
170 FsRtlIsNtstatusExpected@4
171 FsRtlIsTotalDeviceFailure@4
172 FsRtlLegalAnsiCharacterArray DATA
173 FsRtlLookupLargeMcbEntry@32
174 FsRtlLookupLastLargeMcbEntry@12
175 FsRtlLookupLastMcbEntry@12
176 FsRtlLookupMcbEntry@20
178 FsRtlMdlReadComplete@8
179 FsRtlMdlReadCompleteDev@12
181 FsRtlMdlWriteComplete@12
182 FsRtlMdlWriteCompleteDev@16
183 FsRtlNormalizeNtstatus@8
184 FsRtlNotifyChangeDirectory@28
185 FsRtlNotifyCleanup@12
186 FsRtlNotifyFullChangeDirectory@40
187 FsRtlNotifyFullReportChange@36
188 FsRtlNotifyInitializeSync@4
189 FsRtlNotifyReportChange@20
190 FsRtlNotifyUninitializeSync@4
191 FsRtlNotifyVolumeEvent@8
192 FsRtlNumberOfRunsInLargeMcb@4
193 FsRtlNumberOfRunsInMcb@4
195 FsRtlOplockIsFastIoPossible@4
196 FsRtlPostPagingFileStackOverflow@12
197 FsRtlPostStackOverflow@12
198 FsRtlPrepareMdlWrite@24
199 FsRtlPrepareMdlWriteDev@28
201 FsRtlProcessFileLock@12
202 FsRtlRegisterUncProvider@12
203 FsRtlRemoveLargeMcbEntry@20
204 FsRtlRemoveMcbEntry@12
205 FsRtlSplitLargeMcb@20
207 FsRtlTruncateLargeMcb@12
209 FsRtlUninitializeFileLock@4
210 FsRtlUninitializeLargeMcb@4
211 FsRtlUninitializeMcb@4
212 FsRtlUninitializeOplock@4
213 HalDispatchTable DATA
214 HalPrivateDispatchTable DATA
215 @InterlockedCompareExchange@12
216 @InterlockedDecrement@4
217 @InterlockedExchange@8
218 @InterlockedExchangeAdd@8
219 @InterlockedIncrement@4
220 IoAcquireCancelSpinLock@4
221 IoAcquireRemoveLockEx@20
222 IoAcquireVpbSpinLock@4
223 IoAdapterObjectType DATA
224 IoAllocateAdapterChannel@20
225 IoAllocateController@16
226 IoAllocateErrorLogEntry@8
231 IoAttachDeviceByPointer@8
232 IoAttachDeviceToDeviceStack@8
233 IoBuildAsynchronousFsdRequest@24
234 IoBuildDeviceIoControlRequest@36
236 IoBuildSynchronousFsdRequest@28
239 IoCheckDesiredAccess@8
240 IoCheckEaBufferValidity@12
241 IoCheckFunctionAccess@24
242 IoCheckShareAccess@20
244 IoConnectInterrupt@44
248 IoCreateNotificationEvent@8
249 IoCreateStreamFileObject@8
250 IoCreateSymbolicLink@8
251 IoCreateSynchronizationEvent@8
252 IoCreateUnprotectedSymbolicLink@8
255 IoDeleteSymbolicLink@4
257 IoDeviceHandlerObjectSize DATA
258 IoDeviceHandlerObjectType DATA
259 IoDisconnectInterrupt@4
260 IoDeviceObjectType DATA
261 IoDriverObjectType DATA
263 IoFastQueryNetworkAttributes@20
264 IoFileObjectType DATA
268 IoGetAttachedDevice@4
269 IoGetAttachedDeviceReference@4
270 IoGetBaseFileSystemDeviceObject@4
271 IoGetConfigurationInformation@0
272 IoGetCurrentProcess@0
273 IoGetDeviceObjectPointer@16
274 IoGetDeviceToVerify@4
275 IoGetFileObjectGenericMapping@0
277 IoGetRelatedDeviceObject@4
278 IoGetRequestorProcess@4
282 IoInitializeRemoveLockEx@20
284 IoIsOperationSynchronous@4
285 IoMakeAssociatedIrp@8
286 IoOpenDeviceInstanceKey@20
288 IoQueryDeviceDescription@32
289 IoQueryDeviceEnumInfo@8
290 IoQueryFileInformation@20
291 IoQueryVolumeInformation@20
294 IoRaiseInformationalHardError@12
295 IoReadOperationCount DATA
296 IoReadPartitionTable@16
297 IoReadTransferCount DATA
298 IoRegisterDriverReinitialization@12
299 IoRegisterFileSystem@4
300 IoRegisterFsRegistrationChange@8
301 IoRegisterShutdownNotification@4
302 IoReleaseCancelSpinLock@4
303 IoReleaseRemoveLockAndWaitEx@12
304 IoReleaseRemoveLockEx@12
305 IoReleaseVpbSpinLock@4
306 IoRemoveShareAccess@8
307 IoReportHalResourceUsage@16
308 IoReportResourceUsage@36
309 IoSetDeviceToVerify@8
310 IoSetHardErrorOrVerifyDevice@8
312 IoSetPartitionInformation@16
314 IoSetThreadHardErrorMode@4
317 IoStartNextPacketByKey@12
320 IoStatisticsLock DATA
322 IoSynchronousPageWrite@20
324 IoUnregisterFileSystem@4
325 IoUnregisterFsRegistrationChange@8
326 IoUnregisterShutdownNotification@4
327 IoUpdateShareAccess@8
329 IoWriteErrorLogEntry@4
330 IoWriteOperationCount DATA
331 IoWritePartitionTable@20
332 IoWriteTransferCount DATA
334 @IofCompleteRequest@8
335 KdDebuggerEnabled DATA
336 KdDebuggerNotPresent DATA
338 KdSystemDebugControl@4
340 ;Ke386IoSetAccessProcess
341 ;Ke386QueryIoAccessMap
343 KeAcquireSpinLockAtDpcLevel@4
344 KeAddSystemServiceTable@20
346 ;KeBoostCurrentThread
352 KeDcacheFlushCount DATA
353 KeDelayExecutionThread@12
354 KeDeregisterBugCheckCallback@4
356 KeDisconnectInterrupt@4
357 KeEnterCriticalRegion@0
358 KeEnterKernelDebugger@0
359 ;KeFindConfigurationEntry
360 ;KeFindConfigurationNextEntry
365 ;KeI386AllocateGdtSelectors
366 ;KeI386Call16BitCStyleFunction
367 ;KeI386Call16BitFunction
368 ;KeI386FlatToGdtSelector
370 ;KeI386MachineType DATA
371 ;KeI386ReleaseGdtSelectors
373 ;KeI386SetGdtSelector
374 KeIcacheFlushCount DATA
376 KeInitializeDeviceQueue@4
379 KeInitializeInterrupt@44
383 KeInitializeSemaphore@12
384 KeInitializeSpinLock@4
386 KeInitializeTimerEx@8
387 KeInsertByKeyDeviceQueue@12
388 KeInsertDeviceQueue@8
394 KeLeaveCriticalRegion@0
396 KeNumberProcessors DATA
398 ;KeProfileInterruptWithSource
402 KeQueryTimeIncrement@0
403 ;KeRaiseUserException
408 KeReadStateSemaphore@4
410 KeRegisterBugCheckCallback@20
413 KeReleaseSemaphore@16
414 KeReleaseSpinLockFromDpcLevel@4
415 KeRemoveByKeyDeviceQueue@8
416 KeRemoveDeviceQueue@4
417 KeRemoveEntryDeviceQueue@8
421 ;KeRestoreFloatingPointState
423 ;KeSaveFloatingPointState
424 KeServiceDescriptorTable DATA
426 KeSetBasePriorityThread@8
429 ;KeSetEventBoostPriority
430 ;KeSetIdealProcessorThread
432 ;KeSetKernelStackSwapEnable
433 KeSetPriorityThread@8
435 ;@KeSetSwapContextNotifyRoutine
436 KeSetTargetProcessorDpc@8
437 ;@KeSetThreadSelectNotifyRoutine
441 ;@KeSetTimeUpdateNotifyRoutine
442 KeSynchronizeExecution@12
447 KeWaitForMultipleObjects@32
448 KeWaitForMutexObject@20
449 KeWaitForSingleObject@20
450 ;@KefAcquireSpinLockAtDpcLevel
451 ;@KefReleaseSpinLockFromDpcLevel
453 ;@KiAcquireSpinLock@4
455 ;KiCoprocessorError@0
457 KiDispatchInterrupt@0
458 KiInterruptDispatch2@8
459 ;KiIpiServiceRoutine@8
460 ;@KiReleaseSpinLock@4
461 ;KiUnexpectedInterrupt
462 ;Kii386SpinOnSpinLock
466 ;LdrFindResourceDirectory_U@16
469 LsaCallAuthenticationPackage@28
470 LsaDeregisterLogonProcess@8
471 LsaFreeReturnBuffer@4
473 LsaLookupAuthenticationPackage@12
474 LsaRegisterLogonProcess@12
475 MmAdjustWorkingSetSize@12
476 MmAllocateContiguousAlignedMemory@16
477 MmAllocateContiguousMemory@12
478 MmAllocateNonCachedMemory@4
479 MmBuildMdlForNonPagedPool@4
480 MmCanFileBeTruncated@8
485 MmDbgTranslatePhysicalAddress@8
486 MmDisableModifiedWriteOfSection@4
487 MmFlushImageSection@8
488 MmForceSectionClosed@8
489 MmFreeContiguousMemory@4
490 MmFreeNonCachedMemory@8
491 MmGetPhysicalAddress@4
493 MmHighestUserAddress DATA
495 MmIsNonPagedSystemAddressValid@4
496 MmIsRecursiveIoFault@0
497 MmIsThisAnNtAsSystem@0
498 MmLockPagableDataSection@4
499 MmLockPagableImageSection@4=MmLockPagableDataSection@4
500 MmLockPagableSectionByHandle@4
505 MmMapViewInSystemSpace@12
506 MmMapViewOfSection@40
508 MmProbeAndLockPages@12
510 MmResetDriverPaging@4
511 MmSectionObjectType DATA
512 MmSecureVirtualMemory@12
513 MmSetAddressRangeModified@8
514 MmSetBankedSection@24
516 MmUnlockPagableImageSection@4
520 MmUnmapVideoDisplay@8
521 MmUnmapViewInSystemSpace@4
522 MmUnmapViewOfSection@8
523 MmUnsecureVirtualMemory@4
524 MmUserProbeAddress DATA
527 NlsMbCodePageTag DATA
528 NlsMbOemCodePageTag DATA
529 NlsOemLeadByteInfo DATA
531 NtAdjustPrivilegesToken@24
533 NtAllocateLocallyUniqueId@4
535 NtAllocateVirtualMemory@24
546 NtDeviceIoControlFile@40
550 NtFreeVirtualMemory@16
554 NtMapViewOfSection@40
555 NtNotifyChangeDirectoryFile@36
558 NtOpenProcessToken@12
559 NtQueryDirectoryFile@44
561 NtQueryInformationAtom@20
562 NtQueryInformationFile@20
563 NtQueryInformationProcess@20
564 NtQueryInformationToken@20
565 ;NtQueryOleDirectoryFile@ <--- ?
566 NtQuerySecurityObject@20
568 NtQueryVolumeInformationFile@20
571 NtRequestWaitReplyPort@12
573 NtSetInformationFile@20
574 NtSetInformationProcess@16
575 NtSetInformationThread@16
576 NtSetSecurityObject@12
581 NtWaitForSingleObject@12
584 ;ObCheckCreateObjectAccess@28
585 ;ObCheckObjectAccess@20
588 ;ObFindHandleForObject@20
589 ObGetObjectPointerCount@4
590 ObGetObjectSecurity@12
592 ObMakeTemporaryObject@4
593 ObOpenObjectByName@28
594 ObOpenObjectByPointer@28
595 ;ObQueryNameString@16
596 ;ObQueryObjectAuditingByHandle@8
597 @ObfDereferenceObject@4
598 @ObfReferenceObject@4
599 ObReferenceObjectByHandle@24
600 ObReferenceObjectByName@32
601 ObReferenceObjectByPointer@16
602 ObReleaseObjectSecurity@8
603 ;ObSetSecurityDescriptorInfo@24
609 PoRegisterDeviceForIdleDetection@16
610 PoRegisterSystemState@8
615 PoStartNextPowerIrp@4
616 PoUnregisterSystemState@4
618 PsAssignImpersonationToken@8
619 ;PsChargePoolQuota@12
620 PsCreateSystemProcess@12
621 PsCreateSystemThread@28
622 PsCreateWin32Thread@4
623 PsCreateWin32Process@4
626 PsEstablishWin32Callouts@24
627 PsGetCurrentProcess@0
628 PsGetCurrentProcessId@0
629 PsGetCurrentThreadId@0
631 PsGetProcessExitTime@0
633 PsImpersonateClient@20
634 PsInitialSystemProcess DATA
635 PsIsThreadTerminating@4
636 PsLookupProcessByProcessId@8
637 PsLookupProcessThreadByCid@12
638 PsLookupThreadByThreadId@8
640 PsReferenceImpersonationToken@16
641 PsReferencePrimaryToken@4
642 ;PsReturnPoolQuota@12
644 PsSetCreateProcessNotifyRoutine@8
645 PsSetCreateThreadNotifyRoutine@4
646 ;PsSetLegoNotifyRoutine@4
647 ;PsSetProcessPriorityByClass@8
648 PsTerminateSystemThread@4
650 READ_REGISTER_UCHAR@4
651 READ_REGISTER_ULONG@4
652 READ_REGISTER_USHORT@4
653 READ_REGISTER_BUFFER_UCHAR@12
654 READ_REGISTER_BUFFER_ULONG@12
655 READ_REGISTER_BUFFER_USHORT@12
656 RtlAbsoluteToSelfRelativeSD@12
657 RtlAddAccessAllowedAce@16
659 RtlAddAtomToAtomTable@12
660 ;RtlAllocateAndInitializeSid
662 RtlAnsiCharToUnicodeChar@4
663 RtlAnsiStringToUnicodeSize@4
664 RtlAnsiStringToUnicodeString@12
665 RtlAppendAsciizToString@8
666 RtlAppendStringToString@8
667 RtlAppendUnicodeStringToString@8
668 RtlAppendUnicodeToString@8
669 RtlAreAllAccessesGranted@8
670 RtlAreAnyAccessesGranted@8
674 ;RtlCaptureStackBackTrace
676 RtlCheckRegistryKey@8
680 RtlCompareMemoryUlong@12
682 RtlCompareUnicodeString@12
685 RtlConvertLongToLargeInteger@4
686 RtlConvertSidToUnicodeString@12
687 RtlConvertUlongToLargeInteger@4
691 RtlCopyUnicodeString@8
695 RtlCreateRegistryKey@8
696 RtlCreateSecurityDescriptor@8
697 RtlCreateUnicodeString@8
698 RtlCustomCPToUnicodeN@24
699 RtlDecompressBuffer@24
700 RtlDecompressChunks@28
701 RtlDecompressFragment@32
703 RtlDeleteAtomFromAtomTable@8
704 ;RtlDeleteElementGenericTable
706 RtlDeleteRegistryValue@12
708 RtlDestroyAtomTable@4
710 RtlDowncaseUnicodeString@12
712 RtlEnlargedIntegerMultiply@8
713 RtlEnlargedUnsignedDivide@16
714 RtlEnlargedUnsignedMultiply@8
715 ;RtlEnumerateGenericTable
716 ;RtlEnumerateGenericTableWithoutSplaying
720 RtlEqualUnicodeString@12
721 RtlExtendedIntegerMultiply@12
722 RtlExtendedLargeIntegerDivide@16
723 RtlExtendedMagicDivide@20
725 RtlFillMemoryUlong@12
727 RtlFindClearBitsAndSet@12
728 RtlFindFirstRunClear@8
730 RtlFindLongestRunClear@8
731 RtlFindLongestRunSet@8
734 RtlFindSetBitsAndClear@12
735 ;RtlFindUnicodePrefix
736 RtlFormatCurrentUserKeyPath@4
740 RtlFreeUnicodeString@4
741 RtlGenerate8dot3Name@16
742 ;RtlGetCallersAddress
743 RtlGetCompressionWorkSpaceSize@12
744 RtlGetDaclSecurityDescriptor@16
745 RtlGetDefaultCodePage@8
746 ;RtlGetElementGenericTable
747 RtlGetGroupSecurityDescriptor@12
748 RtlGetOwnerSecurityDescriptor@12
751 ;RtlInitCodePageTable
753 RtlInitUnicodeString@8
754 RtlInitializeBitMap@12
755 ;RtlInitializeGenericTable
757 ;RtlInitializeUnicodePrefix
758 ;RtlInsertElementGenericTable
759 ;RtlInsertUnicodePrefix
761 RtlIntegerToUnicodeString@12
762 RtlIsNameLegalDOS8Dot3@12
763 RtlLargeIntegerAdd@16
764 RtlLargeIntegerArithmeticShift@12
765 RtlLargeIntegerDivide@20
766 RtlLargeIntegerNegate@8
767 RtlLargeIntegerShiftLeft@12
768 RtlLargeIntegerShiftRight@12
769 RtlLargeIntegerSubtract@16
770 RtlLengthRequiredSid@4
771 RtlLengthSecurityDescriptor@4
773 RtlLookupAtomInAtomTable@12
774 ;RtlLookupElementGenericTable
777 RtlMultiByteToUnicodeN@20
778 RtlMultiByteToUnicodeSize@12
779 ;RtlNextUnicodePrefix
780 RtlNtStatusToDosError@4
781 RtlNtStatusToDosErrorNoTeb@4
782 ;RtlNumberGenericTableElements
783 RtlNumberOfClearBits@4
785 RtlOemStringToCountedUnicodeString@12
786 RtlOemStringToUnicodeSize@4
787 RtlOemStringToUnicodeString@12
789 RtlPinAtomInAtomTable@8
791 RtlPrefixUnicodeString@12
792 RtlQueryAtomInAtomTable@24
793 RtlQueryRegistryValues@20
794 RtlQueryTimeZoneInformation@4
797 ;RtlRemoveUnicodePrefix
799 RtlSecondsSince1970ToTime@8
800 RtlSecondsSince1980ToTime@8
803 RtlSetDaclSecurityDescriptor@16
804 RtlSetGroupSecurityDescriptor@12
805 RtlSetOwnerSecurityDescriptor@12
806 RtlSetSaclSecurityDescriptor@16
807 RtlSetTimeZoneInformation@4
809 RtlSubAuthorityCountSid@4
811 RtlTimeFieldsToTime@8
812 RtlTimeToSecondsSince1970@8
813 RtlTimeToSecondsSince1980@8
814 RtlTimeToTimeFields@8
815 RtlUnicodeStringToAnsiSize@4
816 RtlUnicodeStringToAnsiString@12
817 RtlUnicodeStringToCountedOemString@12
818 RtlUnicodeStringToInteger@12
819 RtlUnicodeStringToOemSize@4
820 RtlUnicodeStringToOemString@12
821 RtlUnicodeToCustomCPN@24
822 RtlUnicodeToMultiByteN@20
823 RtlUnicodeToMultiByteSize@12
826 RtlUpcaseUnicodeChar@4
827 RtlUpcaseUnicodeString@12
828 RtlUpcaseUnicodeStringToAnsiString@12
829 RtlUpcaseUnicodeStringToCountedOemString@12
830 RtlUpcaseUnicodeStringToOemString@12
831 RtlUpcaseUnicodeToCustomCPN@24
832 RtlUpcaseUnicodeToMultiByteN@20
833 RtlUpcaseUnicodeToOemN@20
836 RtlValidSecurityDescriptor@4
838 RtlWriteRegistryValue@24
841 RtlxAnsiStringToUnicodeSize@4
842 RtlxOemStringToUnicodeSize@4
843 RtlxUnicodeStringToAnsiSize@4
844 RtlxUnicodeStringToOemSize@4
846 ;SeAppendPrivileges@8
848 ;SeAuditingFileEvents@8
849 ;SeAuditingFileOrGlobalEvents@18
850 ;SeCaptureSecurityDescriptor@20
851 SeCaptureSubjectContext@4
852 ;SeCloseObjectAuditAlarm@12
853 ;SeCreateAccessState@16
854 SeCreateClientSecurity@16
856 ;SeDeleteAccessState@4
857 ;SeDeleteObjectAuditAlarm@8
860 SeImpersonateClient@8
861 ;SeLockSubjectContext@4
862 ;SeMarkLogonSessionForTerminationNotification@4
863 ;SeOpenObjectAuditAlarm@36
864 ;SeOpenObjectForDeleteAuditAlarm@36
866 ;SePrivilegeObjectAuditAlarm@24
867 SePublicDefaultDacl DATA
868 ;SeQueryAuthenticationIdToken@8
869 ;SeQuerySecurityDescriptorInfo@16
870 ;SeRegisterLogonSessionTerminatedRoutine@4
871 ;SeReleaseSecurityDescriptor@12
872 SeReleaseSubjectContext@4
873 ;SeSetAccessStateGenericMapping@8
874 ;SeSetSecurityDescriptorInfo@24
875 SeSinglePrivilegeCheck@12
876 SeSystemDefaultDacl DATA
877 SeTokenImpersonationLevel@4
879 ;SeUnlockSubjectContext@4
880 ;SeUnregisterLogonSessionTerminatedRoutine@4
881 ;SeValidSecurityDescriptor@8
882 WRITE_REGISTER_UCHAR@8
883 WRITE_REGISTER_ULONG@8
884 WRITE_REGISTER_USHORT@8
885 WRITE_REGISTER_BUFFER_UCHAR@12
886 WRITE_REGISTER_BUFFER_ULONG@12
887 WRITE_REGISTER_BUFFER_USHORT@12
888 ZwAccessCheckAndAuditAlarm@44
890 ZwAllocateVirtualMemory@24
893 ZwCloseObjectAuditAlarm@12
895 ZwCreateDirectoryObject@12
900 ZwCreateSymbolicLinkObject@16
904 ZwDeviceIoControlFile@40
909 ZwEnumerateValueKey@24
910 ZwFlushInstructionCache@12
912 ZwFreeVirtualMemory@16
916 ZwMakeTemporaryObject@4
917 ZwMapViewOfSection@40
919 ZwOpenDirectoryObject@12
924 ZwOpenProcessToken@12
926 ZwOpenSymbolicLinkObject@12
930 ZwQueryDefaultLocale@8
931 ZwQueryDirectoryFile@44
932 ZwQueryInformationAtom@20
933 ZwQueryInformationFile@20
934 ZwQueryInformationProcess@20
935 ZwQueryInformationToken@20
939 ZwQuerySecurityObject@20
940 ZwQuerySymbolicLinkObject@12
941 ZwQuerySystemInformation@16
944 ZwQueryVolumeInformationFile@20
947 ZwRequestWaitReplyPort@12
952 ZwSetInformationFile@20
953 ZwSetInformationObject@16
954 ZwSetInformationProcess@16
955 ZwSetInformationThread@16
956 ZwSetSystemInformation@12
962 ZwUnmapViewOfSection@8
963 ZwWaitForMultipleObjects@20
964 ZwWaitForSingleObject@12
967 _abnormal_termination