1 ; $Id: ntoskrnl.def,v 1.104 2001/04/21 12:39:33 ekohl Exp $
3 ; reactos/ntoskrnl/ntoskrnl.def
5 ; ReactOS Operating System
8 CcInitializeFileCache@12
10 CcRequestCacheSegment@20
11 CcReleaseCacheSegment@12
14 DbgBreakPointWithStatus@4
15 ;DbgLoadImageSymbols@12
18 ExAcquireFastMutexUnsafe@4
19 ExAcquireResourceExclusive@8
20 ExAcquireResourceExclusiveLite@8
21 ExAcquireResourceSharedLite@8
22 ExAcquireSharedStarveExclusive@8
23 ExAcquireSharedWaitForExclusive@8
24 ExAllocateFromPagedLookasideList@4
26 ExAllocatePoolWithQuota@8
27 ExAllocatePoolWithQuotaTag@12
28 ExAllocatePoolWithTag@12
29 ExConvertExclusiveToSharedLite@4
31 ExDeleteNPagedLookasideList@4
32 ExDeletePagedLookasideList@4
34 ExDeleteResourceLite@4
35 ExDesktopObjectType DATA
36 ExDisableResourceBoostLite@4
37 ExEventObjectType DATA
40 ExFreeToPagedLookasideList@8
41 ExGetExclusiveWaiterCount@4
43 ExGetSharedWaiterCount@4
44 ExInitializeNPagedLookasideList
45 ExInitializePagedLookasideList
46 ExInitializeResource@4
47 ExInitializeResourceLite@4
49 ExInterlockedAddLargeInteger@16
50 ;@ExInterlockedAddLargeStatistic@8
51 ExInterlockedAddLargeStatistic@8
52 ExInterlockedAddUlong@12
53 ;@ExInterlockedCompareExchange64@16
54 ExInterlockedCompareExchange64@16
55 ExInterlockedDecrementLong@8
56 ExInterlockedExchangeUlong@12
57 ExInterlockedExtendZone@16
58 ExInterlockedIncrementLong@8
59 ExInterlockedInsertHeadList@12
60 ExInterlockedInsertTailList@12
61 ExInterlockedPopEntryList@8
62 ExInterlockedPopEntrySList@8
63 ExInterlockedPushEntryList@12
64 ExInterlockedPushEntrySList@12
65 ExInterlockedRemoveHeadList@8
66 ExIsProcessorFeaturePresent@4
67 ExIsResourceAcquiredExclusiveLite@4
68 ExIsResourceAcquiredSharedLite@4
69 ExLocalTimeToSystemTime@8
74 ExRaiseAccessViolation@0
75 ExRaiseDatatypeMisalignment@0
80 ExReinitializeResourceLite@4
81 ExReleaseFastMutexUnsafe@4
82 ExReleaseResourceForThread@8
83 ExReleaseResourceForThreadLite@8
84 ExReleaseResourceLite@4
85 ExSetResourceOwnerPointer@8
86 ;ExSystemExceptionFilter
87 ExSystemTimeToLocalTime@8
88 ExTryToAcquireResourceExclusiveLite@4
89 ExUnregisterCallback@4
90 ExWindowStationObjectType DATA
91 ;ExfInterlockedAddUlong
92 ;ExfInterlockedInsertHeadList
93 ;ExfInterlockedInsertTailList
94 ;ExfInterlockedPopEntryList
95 ;ExfInterlockedPushEntryList
96 ;ExfInterlockedRemoveHeadList
97 ;Exfi386InterlockedDecrementLong
98 ;Exfi386InterlockedExchangeUlong
99 ;Exfi386InterlockedIncrementLong
100 ;Exi386InterlockedDecrementLong
101 ;Exi386InterlockedExchangeUlong
102 ;Exi386InterlockedIncrementLong
103 FsRtlAddLargeMcbEntry@28
105 FsRtlAddToTunnelCache@32
107 FsRtlAllocatePoolWithQuota@8
108 FsRtlAllocatePoolWithQuotaTag@12
109 FsRtlAllocatePoolWithTag@12
110 FsRtlAllocateResource@0
111 FsRtlAreNamesEqual@16
113 FsRtlCheckLockForReadAccess@8
114 FsRtlCheckLockForWriteAccess@8
118 FsRtlCurrentBatchOplock@4
119 FsRtlDeleteKeyFromTunnelCache@12
120 FsRtlDeleteTunnelCache@4
121 FsRtlDeregisterUncProvider@4
124 FsRtlDoesDbcsContainWildCards@4
125 FsRtlDoesNameContainWildCards@4
126 FsRtlFastCheckLockForRead@24
127 FsRtlFastCheckLockForWrite@24
128 FsRtlFastUnlockAll@16
129 FsRtlFastUnlockAllByKey@20
130 FsRtlFastUnlockSingle@32
131 FsRtlFindInTunnelCache@32
133 FsRtlGetNextFileLock@8
134 FsRtlGetNextLargeMcbEntry@20
135 FsRtlGetNextMcbEntry@20
136 FsRtlInitializeFileLock@12
137 FsRtlInitializeLargeMcb@8
139 FsRtlInitializeOplock@4
140 FsRtlInitializeTunnelCache@4
141 FsRtlIsDbcsInExpression@8
142 FsRtlIsFatDbcsLegal@20
143 FsRtlIsHpfsDbcsLegal@20
144 FsRtlIsNameInExpression@16
145 FsRtlIsNtstatusExpected@4
146 FsRtlIsTotalDeviceFailure@4
147 FsRtlLegalAnsiCharacterArray DATA
148 FsRtlLookupLargeMcbEntry@32
149 FsRtlLookupLastLargeMcbEntry@12
150 FsRtlLookupLastMcbEntry@12
151 FsRtlLookupMcbEntry@20
153 FsRtlMdlReadComplete@8
154 FsRtlMdlReadCompleteDev@12
156 FsRtlMdlWriteComplete@12
157 FsRtlMdlWriteCompleteDev@16
158 FsRtlNormalizeNtstatus@8
159 FsRtlNotifyChangeDirectory@28
160 FsRtlNotifyCleanup@12
161 FsRtlNotifyFullChangeDirectory@40
162 FsRtlNotifyFullReportChange@36
163 FsRtlNotifyInitializeSync@4
164 FsRtlNotifyReportChange@20
165 FsRtlNotifyUninitializeSync@4
166 FsRtlNumberOfRunsInLargeMcb@4
167 FsRtlNumberOfRunsInMcb@4
169 FsRtlOplockIsFastIoPossible@4
170 FsRtlPostPagingFileStackOverflow@12
171 FsRtlPostStackOverflow@12
172 FsRtlPrepareMdlWrite@24
173 FsRtlPrepareMdlWriteDev@28
175 FsRtlProcessFileLock@12
176 FsRtlRegisterUncProvider@12
177 FsRtlRemoveLargeMcbEntry@20
178 FsRtlRemoveMcbEntry@12
179 FsRtlSplitLargeMcb@20
181 FsRtlTruncateLargeMcb@12
183 FsRtlUninitializeFileLock@4
184 FsRtlUninitializeLargeMcb@4
185 FsRtlUninitializeMcb@4
186 FsRtlUninitializeOplock@4
187 HalDispatchTable DATA
188 HalPrivateDispatchTable DATA
189 ;@InterlockedCompareExchange@12
190 InterlockedCompareExchange@12
191 ;@InterlockedDecrement@4
192 InterlockedDecrement@4
193 ;@InterlockedExchange@8
194 InterlockedExchange@8
195 ;@InterlockedExchangeAdd@8
196 InterlockedExchangeAdd@8
197 ;@InterlockedIncrement@4
198 InterlockedIncrement@4
199 IoAcquireCancelSpinLock@4
200 IoAcquireVpbSpinLock@4
201 IoAdapterObjectType DATA
202 IoAllocateAdapterChannel@20
203 IoAllocateController@16
204 IoAllocateErrorLogEntry@8
209 IoAttachDeviceByPointer@8
210 IoAttachDeviceToDeviceStack@8
211 IoBuildAsynchronousFsdRequest@24
212 IoBuildDeviceIoControlRequest@36
214 IoBuildSynchronousFsdRequest@28
217 IoCheckDesiredAccess@8
218 IoCheckEaBufferValidity@12
219 IoCheckFunctionAccess@24
220 IoCheckShareAccess@20
222 IoConnectInterrupt@44
226 IoCreateNotificationEvent@8
227 IoCreateStreamFileObject@8
228 IoCreateSymbolicLink@8
229 IoCreateSynchronizationEvent@8
230 IoCreateUnprotectedSymbolicLink@8
233 IoDeleteSymbolicLink@4
235 IoDeviceHandlerObjectSize DATA
236 IoDeviceHandlerObjectType DATA
237 IoDisconnectInterrupt@4
238 IoDeviceObjectType DATA
239 IoDriverObjectType DATA
241 IoFastQueryNetworkAttributes@20
242 IoFileObjectType DATA
246 IoGetAttachedDevice@4
247 IoGetBaseFileSystemDeviceObject@4
248 IoGetConfigurationInformation@0
249 IoGetCurrentProcess@0
250 IoGetDeviceObjectPointer@16
251 IoGetDeviceToVerify@4
252 IoGetFileObjectGenericMapping@0
254 IoGetRelatedDeviceObject@4
255 IoGetRequestorProcess@4
260 IoIsOperationSynchronous@4
261 IoMakeAssociatedIrp@8
262 IoOpenDeviceInstanceKey@20
264 IoQueryDeviceDescription@32
265 IoQueryDeviceEnumInfo@8
266 IoQueryFileInformation@20
267 IoQueryVolumeInformation@20
270 IoRaiseInformationalHardError@12
271 IoReadOperationCount DATA
272 IoReadTransferCount DATA
273 IoRegisterDriverReinitialization@12
274 IoRegisterFileSystem@4
275 IoRegisterFsRegistrationChange@8
276 IoRegisterShutdownNotification@4
277 IoReleaseCancelSpinLock@4
278 IoReleaseVpbSpinLock@4
279 IoRemoveShareAccess@8
280 IoReportHalResourceUsage@16
281 IoReportResourceUsage@36
282 IoSetDeviceToVerify@8
283 IoSetHardErrorOrVerifyDevice@8
286 IoSetThreadHardErrorMode@4
289 IoStartNextPacketByKey@12
292 IoStatisticsLock DATA
294 IoSynchronousPageWrite@20
296 IoUnregisterFileSystem@4
297 IoUnregisterFsRegistrationChange@8
298 IoUnregisterShutdownNotification@4
299 IoUpdateShareAccess@8
301 IoWriteErrorLogEntry@4
302 IoWriteOperationCount DATA
303 IoWriteTransferCount DATA
306 ;@IofCompleteRequest@8
308 KdDebuggerEnabled DATA
309 KdDebuggerNotPresent DATA
312 ;Ke386IoSetAccessProcess
313 ;Ke386QueryIoAccessMap
315 KeAcquireSpinLockAtDpcLevel@4
316 KeAddSystemServiceTable@20
318 ;KeBoostCurrentThread
324 ;KeDcacheFlushCount DATA
325 KeDelayExecutionThread@12
326 KeDeregisterBugCheckCallback@4
328 KeDisconnectInterrupt@4
329 KeEnterCriticalRegion@0
330 KeEnterKernelDebugger@0
331 ;KeFindConfigurationEntry
332 ;KeFindConfigurationNextEntry
337 ;KeI386AllocateGdtSelectors
338 ;KeI386Call16BitCStyleFunction
339 ;KeI386Call16BitFunction
340 ;KeI386FlatToGdtSelector
343 ;KeI386ReleaseGdtSelectors
345 ;KeI386SetGdtSelector
346 ;KeIcacheFlushCount DATA
348 KeInitializeDeviceQueue@4
351 KeInitializeInterrupt@44
352 ;KeInitializeMutant@8
355 KeInitializeSemaphore@12
356 KeInitializeSpinLock@4
358 KeInitializeTimerEx@8
359 KeInsertByKeyDeviceQueue@12
360 KeInsertDeviceQueue@8
366 KeLeaveCriticalRegion@0
368 KeNumberProcessors DATA
370 ;KeProfileInterruptWithSource
374 KeQueryTimeIncrement@0
375 ;KeRaiseUserException
380 KeReadStateSemaphore@4
382 KeRegisterBugCheckCallback@20
385 KeReleaseSemaphore@16
386 KeReleaseSpinLockFromDpcLevel@4
387 KeRemoveByKeyDeviceQueue@8
388 KeRemoveDeviceQueue@4
389 ;KeRemoveEntryDeviceQueue
393 ;KeRestoreFloatingPointState
395 ;KeSaveFloatingPointState
396 KeServiceDescriptorTable DATA
398 KeSetBasePriorityThread@8
401 ;KeSetEventBoostPriority
402 ;KeSetIdealProcessorThread
404 ;KeSetKernelStackSwapEnable
405 KeSetPriorityThread@8
407 ;KeSetSwapContextNotifyRoutine
408 KeSetTargetProcessorDpc@8
409 ;KeSetThreadSelectNotifyRoutine
413 ;KeSetTimeUpdateNotifyRoutine
414 KeSynchronizeExecution@12
419 KeWaitForMultipleObjects@32
420 KeWaitForMutexObject@20
421 KeWaitForSingleObject@20
422 ;KefAcquireSpinLockAtDpcLevel
423 ;KefReleaseSpinLockFromDpcLevel
427 ;KiCoprocessorError@0
429 KiDispatchInterrupt@0
430 ;KiIpiServiceRoutine@8
432 ;KiUnexpectedInterrupt
433 ;Kii386SpinOnSpinLock
436 ;LdrFindResourceDirectory_U@16
439 ;LsaCallAuthenticationPackage
440 ;LsaDeregisterLogonProcess
443 ;LsaLookupAuthenticationPackage
444 ;LsaRegisterLogonProcess
445 MmAdjustWorkingSetSize@12
446 MmAllocateContiguousMemory@12
447 MmAllocateNonCachedMemory@4
448 MmBuildMdlForNonPagedPool@4
449 MmCanFileBeTruncated@8
452 MmDbgTranslatePhysicalAddress@8
453 MmDisableModifiedWriteOfSection@4
454 MmFlushImageSection@8
455 MmForceSectionClosed@8
456 MmFreeContiguousMemory@4
457 MmFreeNonCachedMemory@8
458 MmGetPhysicalAddress@4
460 MmHighestUserAddress DATA
462 MmIsNonPagedSystemAddressValid@4
463 MmIsRecursiveIoFault@0
464 MmIsThisAnNtAsSystem@0
465 MmLockPagableDataSection@4
466 MmLockPagableImageSection@4=MmLockPagableDataSection@4
467 MmLockPagableSectionByHandle@4
472 MmMapViewInSystemSpace@12
473 MmMapViewOfSection@40
475 MmProbeAndLockPages@12
477 MmResetDriverPaging@4
478 MmSectionObjectType DATA
479 MmSecureVirtualMemory@12
480 MmSetAddressRangeModified@8
481 MmSetBankedSection@24
483 MmUnlockPagableImageSection@4
487 MmUnmapVideoDisplay@8
488 MmUnmapViewInSystemSpace@4
489 MmUnmapViewOfSection@8
490 MmUnsecureVirtualMemory@4
491 MmUserProbeAddress DATA
494 NlsMbCodePageTag DATA
495 NlsMbOemCodePageTag DATA
496 NlsOemLeadByteInfo DATA
498 NtAdjustPrivilegesToken@24
499 NtAllocateLocallyUniqueId@4
501 NtAllocateVirtualMemory@24
512 NtDeviceIoControlFile@40
516 NtFreeVirtualMemory@16
520 NtMapViewOfSection@40
521 NtNotifyChangeDirectoryFile@36
524 NtOpenProcessToken@12
525 NtQueryDirectoryFile@44
527 NtQueryInformationAtom@20
528 NtQueryInformationFile@20
529 NtQueryInformationProcess@20
530 NtQueryInformationToken@20
531 ;NtQueryOleDirectoryFile@ <--- ?
532 NtQuerySecurityObject@20
534 NtQueryVolumeInformationFile@20
537 NtRequestWaitReplyPort@12
539 NtSetInformationFile@20
540 NtSetInformationProcess@16
541 NtSetInformationThread@16
542 NtSetSecurityObject@12
546 NtWaitForSingleObject@12
549 ;ObCheckCreateObjectAccess@28
550 ;ObCheckObjectAccess@20
553 ObDereferenceObject@4
554 ;ObFindHandleForObject@20
555 ;ObGetObjectPointerCount@4
556 ;ObGetObjectSecurity@12
558 ObMakeTemporaryObject@4
559 ObOpenObjectByName@28
560 ObOpenObjectByPointer@28
561 ;ObQueryNameString@16
562 ;ObQueryObjectAuditingByHandle@8
563 ObReferenceObjectByHandle@24
564 ObReferenceObjectByName@32
565 ObReferenceObjectByPointer@16
566 ;ObReleaseObjectSecurity@8
567 ;ObSetSecurityDescriptorInfo@24
568 ;@ObfDereferenceObject@4
569 ObfDereferenceObject@4
570 ;@ObfReferenceObject@4
572 ObAddEntryDirectory@12
578 PoRegisterDeviceForIdleDetection@16
579 PoRegisterSystemState@8
584 PoStartNextPowerIrp@4
585 PoUnregisterSystemState@4
587 PsAssignImpersonationToken@8
588 ;PsChargePoolQuota@12
589 PsCreateSystemProcess@12
590 PsCreateSystemThread@28
591 ;PsCreateWin32Process@4
592 ;PsEstablishWin32Callouts@24
593 PsGetCurrentProcessId@0
594 PsGetCurrentThreadId@0
596 ;PsGetProcessExitTime@0
598 PsImpersonateClient@20
599 PsInitialSystemProcess DATA
600 ;PsIsThreadTerminating@4
601 ;PsLookupProcessByProcessId@8
602 ;PsLookupProcessThreadByCid@12
603 ;PsLookupThreadByThreadId@8
605 PsReferenceImpersonationToken@16
606 PsReferencePrimaryToken@4
607 ;PsReturnPoolQuota@12
608 ;PsRevertToSelf@0 <-- This is the original size
610 ;PsSetCreateProcessNotifyRoutine@8
611 ;PsSetCreateThreadNotifyRoutine@4
612 ;PsSetLegoNotifyRoutine@4
613 ;PsSetProcessPriorityByClass@8
614 PsTerminateSystemThread@4
616 READ_REGISTER_UCHAR@4
617 READ_REGISTER_ULONG@4
618 READ_REGISTER_USHORT@4
619 READ_REGISTER_BUFFER_UCHAR@12
620 READ_REGISTER_BUFFER_ULONG@12
621 READ_REGISTER_BUFFER_USHORT@12
622 RtlAbsoluteToSelfRelativeSD@12
623 RtlAddAccessAllowedAce@16
625 RtlAddAtomToAtomTable@12
626 ;RtlAllocateAndInitializeSid
628 RtlAnsiCharToUnicodeChar@4
629 RtlAnsiStringToUnicodeSize@4
630 RtlAnsiStringToUnicodeString@12
631 RtlAppendAsciizToString@8
632 RtlAppendStringToString@8
633 RtlAppendUnicodeStringToString@8
634 RtlAppendUnicodeToString@8
635 RtlAreAllAccessesGranted@8
636 RtlAreAnyAccessesGranted@8
640 ;RtlCaptureStackBackTrace
642 RtlCheckRegistryKey@8
646 RtlCompareMemoryUlong@12
648 RtlCompareUnicodeString@12
651 RtlConvertLongToLargeInteger@4
652 RtlConvertSidToUnicodeString@12
653 RtlConvertUlongToLargeInteger@4
657 RtlCopyUnicodeString@8
661 RtlCreateRegistryKey@8
662 RtlCreateSecurityDescriptor@8
663 RtlCreateUnicodeString@8
664 RtlCustomCPToUnicodeN@24
667 ;RtlDecompressFragment
669 RtlDeleteAtomFromAtomTable@8
670 ;RtlDeleteElementGenericTable
672 RtlDeleteRegistryValue@12
674 RtlDestroyAtomTable@4
676 RtlDowncaseUnicodeString@12
678 RtlEnlargedIntegerMultiply@8
679 RtlEnlargedUnsignedDivide@16
680 RtlEnlargedUnsignedMultiply@8
681 ;RtlEnumerateGenericTable
682 ;RtlEnumerateGenericTableWithoutSplaying
686 RtlEqualUnicodeString@12
687 RtlExtendedIntegerMultiply@12
688 RtlExtendedLargeIntegerDivide@16
689 RtlExtendedMagicDivide@20
691 RtlFillMemoryUlong@12
693 RtlFindClearBitsAndSet@12
694 RtlFindFirstRunClear@8
696 RtlFindLongestRunClear@8
697 RtlFindLongestRunSet@8
700 RtlFindSetBitsAndClear@12
701 ;RtlFindUnicodePrefix
702 RtlFormatCurrentUserKeyPath@4
706 RtlFreeUnicodeString@4
707 ;RtlGenerate8dot3Name
708 ;RtlGetCallersAddress
709 ;RtlGetCompressionWorkSpaceSize
710 RtlGetDaclSecurityDescriptor@16
711 RtlGetDefaultCodePage@8
712 ;RtlGetElementGenericTable
713 RtlGetGroupSecurityDescriptor@12
714 RtlGetOwnerSecurityDescriptor@12
717 ;RtlInitCodePageTable
719 RtlInitUnicodeString@8
720 RtlInitializeBitMap@12
721 ;RtlInitializeGenericTable
723 ;RtlInitializeUnicodePrefix
724 ;RtlInsertElementGenericTable
725 ;RtlInsertUnicodePrefix
727 RtlIntegerToUnicodeString@12
728 ;RtlIsNameLegalDOS8Dot3
729 RtlLargeIntegerAdd@16
730 RtlLargeIntegerArithmeticShift@12
731 RtlLargeIntegerDivide@20
732 RtlLargeIntegerNegate@8
733 RtlLargeIntegerShiftLeft@12
734 RtlLargeIntegerShiftRight@12
735 RtlLargeIntegerSubtract@16
736 RtlLengthRequiredSid@4
737 RtlLengthSecurityDescriptor@4
739 RtlLookupAtomInAtomTable@12
740 ;RtlLookupElementGenericTable
743 RtlMultiByteToUnicodeN@20
744 RtlMultiByteToUnicodeSize@12
745 ;RtlNextUnicodePrefix
746 RtlNtStatusToDosError@4
747 RtlNtStatusToDosErrorNoTeb@4
748 ;RtlNumberGenericTableElements
749 RtlNumberOfClearBits@4
751 RtlOemStringToCountedUnicodeString@12
752 RtlOemStringToUnicodeSize@4
753 RtlOemStringToUnicodeString@12
755 RtlPinAtomInAtomTable@8
757 RtlPrefixUnicodeString@12
758 RtlQueryAtomInAtomTable@24
759 RtlQueryRegistryValues@20
760 ;RtlQueryTimeZoneInformation
763 ;RtlRemoveUnicodePrefix
765 RtlSecondsSince1970ToTime@8
766 RtlSecondsSince1980ToTime@8
769 RtlSetDaclSecurityDescriptor@16
770 RtlSetGroupSecurityDescriptor@12
771 RtlSetOwnerSecurityDescriptor@12
772 RtlSetSaclSecurityDescriptor@16
773 ;RtlSetTimeZoneInformation
775 RtlSubAuthorityCountSid@4
777 RtlTimeFieldsToTime@8
778 RtlTimeToSecondsSince1970@8
779 RtlTimeToSecondsSince1980@8
780 RtlTimeToTimeFields@8
781 RtlUnicodeStringToAnsiSize@4
782 RtlUnicodeStringToAnsiString@12
783 RtlUnicodeStringToCountedOemString@12
784 RtlUnicodeStringToInteger@12
785 RtlUnicodeStringToOemSize@4
786 RtlUnicodeStringToOemString@12
787 RtlUnicodeToCustomCPN@24
788 RtlUnicodeToMultiByteN@20
789 RtlUnicodeToMultiByteSize@12
792 RtlUpcaseUnicodeChar@4
793 RtlUpcaseUnicodeString@12
794 RtlUpcaseUnicodeStringToAnsiString@12
795 RtlUpcaseUnicodeStringToCountedOemString@12
796 RtlUpcaseUnicodeStringToOemString@12
797 RtlUpcaseUnicodeToCustomCPN@24
798 RtlUpcaseUnicodeToMultiByteN@20
799 RtlUpcaseUnicodeToOemN@20
802 RtlValidSecurityDescriptor@4
804 RtlWriteRegistryValue@24
807 RtlxAnsiStringToUnicodeSize@4
808 RtlxOemStringToUnicodeSize@4
809 RtlxUnicodeStringToAnsiSize@4
810 RtlxUnicodeStringToOemSize@4
812 ;SeAppendPrivileges@8
814 ;SeAuditingFileEvents@8
815 ;SeAuditingFileOrGlobalEvents@18
816 ;SeCaptureSecurityDescriptor@20
817 SeCaptureSubjectContext@4
818 ;SeCloseObjectAuditAlarm@12
819 ;SeCreateAccessState@16
820 SeCreateClientSecurity@16
822 ;SeDeleteAccessState@4
823 ;SeDeleteObjectAuditAlarm@8
826 SeImpersonateClient@8
827 ;SeLockSubjectContext@4
828 ;SeMarkLogonSessionForTerminationNotification@4
829 ;SeOpenObjectAuditAlarm@36
830 ;SeOpenObjectForDeleteAuditAlarm@36
832 ;SePrivilegeObjectAuditAlarm@24
833 ;SePublicDefaultDacl DATA
834 ;SeQueryAuthenticationIdToken@8
835 ;SeQuerySecurityDescriptorInfo@16
836 ;SeRegisterLogonSessionTerminatedRoutine@4
837 ;SeReleaseSecurityDescriptor@12
838 SeReleaseSubjectContext@4
839 ;SeSetAccessStateGenericMapping@8
840 ;SeSetSecurityDescriptorInfo@24
841 ;SeSinglePrivilegeCheck@12
842 ;SeSystemDefaultDacl DATA
843 ;SeTokenImpersonationLevel@4
845 ;SeUnlockSubjectContext@4
846 ;SeUnregisterLogonSessionTerminatedRoutine@4
847 ;SeValidSecurityDescriptor@8
848 WRITE_REGISTER_UCHAR@8
849 WRITE_REGISTER_ULONG@8
850 WRITE_REGISTER_USHORT@8
851 WRITE_REGISTER_BUFFER_UCHAR@12
852 WRITE_REGISTER_BUFFER_ULONG@12
853 WRITE_REGISTER_BUFFER_USHORT@12
854 ZwAccessCheckAndAuditAlarm@44
856 ZwAllocateVirtualMemory@24
859 ZwCloseObjectAuditAlarm@12
861 ZwCreateDirectoryObject@12
866 ZwCreateSymbolicLinkObject@16
870 ZwDeviceIoControlFile@40
875 ZwEnumerateValueKey@24
876 ZwFlushInstructionCache@12
878 ZwFreeVirtualMemory@16
882 ZwMakeTemporaryObject@4
883 ZwMapViewOfSection@40
885 ZwOpenDirectoryObject@12
890 ZwOpenProcessToken@12
892 ZwOpenSymbolicLinkObject@12
896 ZwQueryDefaultLocale@8
897 ZwQueryDirectoryFile@44
898 ZwQueryInformationAtom@20
899 ZwQueryInformationFile@20
900 ZwQueryInformationProcess@20
901 ZwQueryInformationToken@20
905 ZwQuerySecurityObject@20
906 ZwQuerySymbolicLinkObject@12
907 ZwQuerySystemInformation@16
910 ZwQueryVolumeInformationFile@20
913 ZwRequestWaitReplyPort@12
918 ZwSetInformationFile@20
919 ZwSetInformationObject@16
920 ZwSetInformationProcess@16
921 ZwSetInformationThread@16
922 ZwSetSystemInformation@12
928 ZwUnmapViewOfSection@8
929 ZwWaitForMultipleObjects@20
930 ZwWaitForSingleObject@12
933 ;_abnormal_termination
1014 ; exports from hal.dll
1017 ExAcquireFastMutex@4
1018 ExReleaseFastMutex@4
1019 ExTryToAcquireFastMutex@4
1020 HalAcquireDisplayOwnership@4
1021 HalAdjustResourceList@4
1022 HalAllProcessorsStarted@0
1023 HalAllocateAdapterChannel@20
1024 HalAllocateCommonBuffer@16
1025 ;HalAllocateCrashDumpRegisters@8
1026 HalAssignSlotResources@32
1027 HalBeginSystemInterrupt@12
1028 HalCalibratePerformanceCounter@4
1029 ;@HalClearSoftwareInterrupt@4
1030 ;HalClearSoftwareInterrupt@4
1031 HalDisableSystemInterrupt@8
1033 HalEnableSystemInterrupt@12
1034 HalEndSystemInterrupt@8
1035 HalFlushCommonBuffer@32
1036 HalFreeCommonBuffer@24
1039 HalGetBusDataByOffset@24
1040 HalGetEnvironmentVariable@12
1041 HalGetInterruptVector@24
1044 HalInitializeProcessor@4
1047 HalQueryDisplayParameters@16
1048 HalQueryRealTimeClock@4
1050 HalReportResourceUsage@0
1052 ;@HalRequestSoftwareInterrupt@4
1053 ;HalRequestSoftwareInterrupt@4
1054 HalReturnToFirmware@4
1056 HalSetBusDataByOffset@24
1057 HalSetDisplayParameters@8
1058 HalSetEnvironmentVariable@8
1059 ;HalSetProfileInterval@4
1060 HalSetRealTimeClock@4
1061 ;HalSetTimeIncrement@4
1062 HalStartNextProcessor@8
1063 ;HalStartProfileInterrupt@4
1064 ;HalStopProfileInterrupt@4
1065 HalSystemVectorDispatchEntry@12
1066 HalTranslateBusAddress@24
1067 IoAssignDriveLetters@16
1068 IoFlushAdapterBuffers@24
1069 IoFreeAdapterChannel@4
1070 IoFreeMapRegisters@12
1072 IoReadPartitionTable@16
1073 IoSetPartitionInformation@16
1074 IoWritePartitionTable@20
1075 IoInitializeRemoveLockEx@20
1076 IoAcquireRemoveLockEx@20
1077 IoReleaseRemoveLockEx@12
1078 IoReleaseRemoveLockAndWaitEx@12
1079 IoAdjustPagingPathCount@8
1080 IoGetDeviceInterfaceAlias@12
1081 IoGetDeviceInterfaces@16
1082 IoGetDeviceProperty@20
1083 IoInvalidateDeviceRelations@8
1084 IoInvalidateDeviceState@4
1085 IoOpenDeviceInterfaceRegistryKey@12
1086 IoOpenDeviceRegistryKey@16
1087 IoRegisterDeviceInterface@16
1088 IoRegisterPlugPlayNotification@28
1089 IoReportDetectedDevice@32
1090 IoReportResourceForDetection@28
1091 IoReportTargetDeviceChange@8
1092 IoReportTargetDeviceChangeAsynchronous@16
1093 IoRequestDeviceEject@4
1094 IoSetDeviceInterfaceState@8
1095 IoUnregisterPlugPlayNotification@4
1104 ;@KeAcquireSpinLockRaiseToSynch@4
1105 KeAcquireSpinLockRaiseToSynch@4
1106 KeFlushWriteBuffer@0
1109 KeQueryPerformanceCounter@4
1111 KeRaiseIrqlToDpcLevel@0
1112 KeRaiseIrqlToSynchLevel@0
1114 KeStallExecutionProcessor@4
1115 ;@KfAcquireSpinLock@4
1121 ;@KfReleaseSpinLock@8
1123 READ_PORT_BUFFER_UCHAR@12
1124 READ_PORT_BUFFER_ULONG@12
1125 READ_PORT_BUFFER_USHORT@12
1129 WRITE_PORT_BUFFER_UCHAR@12
1130 WRITE_PORT_BUFFER_ULONG@12
1131 WRITE_PORT_BUFFER_USHORT@12
1135 KdSystemDebugControl@4