reactos/ntoskrnl/ntoskrnl.def

   1 ; $Id: ntoskrnl.def,v 1.129 2002/02/22 17:57:57 ekohl Exp $
   2 ;
   3 ; reactos/ntoskrnl/ntoskrnl.def
   4 ;
   5 ; ReactOS Operating System
   6 ;
   7 EXPORTS
   8 CcRosInitializeFileCache@12
   9 ;CcRosRequestCacheSegment@20
  10 ;CcRosReleaseCacheSegment@12
  11 CcRosReleaseFileCache@8
  12 CcCopyRead@24
  13 CcCopyWrite@20
  14 CcMapData@24
  15 CcMdlReadComplete@8
  16 CcSetDirtyPinnedData@8
  17 CcSetFileSizes@8
  18 CcUnpinData@4
  19 DbgBreakPoint@0
  20 DbgBreakPointWithStatus@4
  21 ;DbgLoadImageSymbols@12
  22 DbgPrint
  23 DbgPrompt@12
  24 DpcQueueSize DATA
  25 @ExAcquireFastMutexUnsafe@4
  26 ExAcquireResourceExclusive@8
  27 ExAcquireResourceExclusiveLite@8
  28 ExAcquireResourceSharedLite@8
  29 ExAcquireSharedStarveExclusive@8
  30 ExAcquireSharedWaitForExclusive@8
  31 ExAllocateFromPagedLookasideList@4
  32 ExAllocatePool@8
  33 ExAllocatePoolWithQuota@8
  34 ExAllocatePoolWithQuotaTag@12
  35 ExAllocatePoolWithTag@12
  36 ExConvertExclusiveToSharedLite@4
  37 ExCreateCallback@16
  38 ExDeleteNPagedLookasideList@4
  39 ExDeletePagedLookasideList@4
  40 ExDeleteResource@4
  41 ExDeleteResourceLite@4
  42 ExDesktopObjectType DATA
  43 ExDisableResourceBoostLite@4
  44 ExEventObjectType DATA
  45 ExExtendZone@12
  46 ExFreePool@4
  47 ExFreeToPagedLookasideList@8
  48 ExGetExclusiveWaiterCount@4
  49 ExGetPreviousMode@0
  50 ExGetSharedWaiterCount@4
  51 ExInitializeNPagedLookasideList@28
  52 ExInitializePagedLookasideList@28
  53 ExInitializeResource@4
  54 ExInitializeResourceLite@4
  55 ExInitializeZone@16
  56 ExInterlockedAddLargeInteger@16
  57 @ExInterlockedAddLargeStatistic@8
  58 ExInterlockedAddUlong@12
  59 @ExInterlockedCompareExchange64@16
  60 ExInterlockedDecrementLong@8
  61 ExInterlockedExchangeUlong@12
  62 ExInterlockedExtendZone@16
  63 ExInterlockedIncrementLong@8
  64 ExInterlockedInsertHeadList@12
  65 ExInterlockedInsertTailList@12
  66 ExInterlockedPopEntryList@8
  67 @ExInterlockedPopEntrySList@8
  68 ExInterlockedPushEntryList@12
  69 @ExInterlockedPushEntrySList@12
  70 ExInterlockedRemoveHeadList@8
  71 ExIsProcessorFeaturePresent@4
  72 ExIsResourceAcquiredExclusiveLite@4
  73 ExIsResourceAcquiredSharedLite@4
  74 ExLocalTimeToSystemTime@8
  75 ExNotifyCallback@12
  76 ExPostSystemEvent@12
  77 ;ExQueryPoolBlockSize
  78 ExQueueWorkItem@8
  79 ExRaiseAccessViolation@0
  80 ExRaiseDatatypeMisalignment@0
  81 ;ExRaiseException
  82 ;ExRaiseHardError
  83 ExRaiseStatus@4
  84 ExRegisterCallback@12
  85 ExReinitializeResourceLite@4
  86 @ExReleaseFastMutexUnsafe@4
  87 ExReleaseResourceForThread@8
  88 ExReleaseResourceForThreadLite@8
  89 @ExReleaseResourceLite@4
  90 ExSetResourceOwnerPointer@8
  91 ;ExSystemExceptionFilter
  92 ExSystemTimeToLocalTime@8
  93 ExTryToAcquireResourceExclusiveLite@4
  94 ExUnregisterCallback@4
  95 ExWindowStationObjectType DATA
  96 @ExfInterlockedAddUlong@12
  97 ;@ExfInterlockedInsertHeadList
  98 ;@ExfInterlockedInsertTailList
  99 ;@ExfInterlockedPopEntryList
 100 ;@ExfInterlockedPushEntryList
 101 ;@ExfInterlockedRemoveHeadList
 102 @Exfi386InterlockedDecrementLong@4
 103 @Exfi386InterlockedExchangeUlong@8
 104 @Exfi386InterlockedIncrementLong@4
 105 Exi386InterlockedDecrementLong@4
 106 Exi386InterlockedExchangeUlong@8
 107 Exi386InterlockedIncrementLong@4
 108 FsRtlAddLargeMcbEntry@28
 109 FsRtlAddMcbEntry@16
 110 FsRtlAddToTunnelCache@32
 111 FsRtlAllocateFileLock@8
 112 FsRtlAllocatePool@8
 113 FsRtlAllocatePoolWithQuota@8
 114 FsRtlAllocatePoolWithQuotaTag@12
 115 FsRtlAllocatePoolWithTag@12
 116 FsRtlAllocateResource@0
 117 FsRtlAreNamesEqual@16
 118 FsRtlBalanceReads@4
 119 FsRtlCheckLockForReadAccess@8
 120 FsRtlCheckLockForWriteAccess@8
 121 FsRtlCheckOplock@20
 122 FsRtlCopyRead@32
 123 FsRtlCopyWrite@32
 124 FsRtlCurrentBatchOplock@4
 125 FsRtlDeleteKeyFromTunnelCache@12
 126 FsRtlDeleteTunnelCache@4
 127 FsRtlDeregisterUncProvider@4
 128 FsRtlDissectDbcs@16
 129 FsRtlDissectName@16
 130 FsRtlDoesDbcsContainWildCards@4
 131 FsRtlDoesNameContainWildCards@4
 132 FsRtlFastCheckLockForRead@24
 133 FsRtlFastCheckLockForWrite@24
 134 FsRtlFastUnlockAll@16
 135 FsRtlFastUnlockAllByKey@20
 136 FsRtlFastUnlockSingle@32
 137 FsRtlFindInTunnelCache@32
 138 FsRtlGetFileSize@8
 139 FsRtlGetNextFileLock@8
 140 FsRtlGetNextLargeMcbEntry@20
 141 FsRtlGetNextMcbEntry@20
 142 FsRtlInitializeFileLock@12
 143 FsRtlInitializeLargeMcb@8
 144 FsRtlInitializeMcb@8
 145 FsRtlInitializeOplock@4
 146 FsRtlInitializeTunnelCache@4
 147 FsRtlIsDbcsInExpression@8
 148 FsRtlIsFatDbcsLegal@20
 149 FsRtlIsHpfsDbcsLegal@20
 150 FsRtlIsNameInExpression@16
 151 FsRtlIsNtstatusExpected@4
 152 FsRtlIsTotalDeviceFailure@4
 153 FsRtlLegalAnsiCharacterArray DATA
 154 FsRtlLookupLargeMcbEntry@32
 155 FsRtlLookupLastLargeMcbEntry@12
 156 FsRtlLookupLastMcbEntry@12
 157 FsRtlLookupMcbEntry@20
 158 FsRtlMdlRead@24
 159 FsRtlMdlReadComplete@8
 160 FsRtlMdlReadCompleteDev@12
 161 FsRtlMdlReadDev@28
 162 FsRtlMdlWriteComplete@12
 163 FsRtlMdlWriteCompleteDev@16
 164 FsRtlNormalizeNtstatus@8
 165 FsRtlNotifyChangeDirectory@28
 166 FsRtlNotifyCleanup@12
 167 FsRtlNotifyFullChangeDirectory@40
 168 FsRtlNotifyFullReportChange@36
 169 FsRtlNotifyInitializeSync@4
 170 FsRtlNotifyReportChange@20
 171 FsRtlNotifyUninitializeSync@4
 172 FsRtlNotifyVolumeEvent@8
 173 FsRtlNumberOfRunsInLargeMcb@4
 174 FsRtlNumberOfRunsInMcb@4
 175 FsRtlOplockFsctrl@12
 176 FsRtlOplockIsFastIoPossible@4
 177 FsRtlPostPagingFileStackOverflow@12
 178 FsRtlPostStackOverflow@12
 179 FsRtlPrepareMdlWrite@24
 180 FsRtlPrepareMdlWriteDev@28
 181 FsRtlPrivateLock@48
 182 FsRtlProcessFileLock@12
 183 FsRtlRegisterUncProvider@12
 184 FsRtlRemoveLargeMcbEntry@20
 185 FsRtlRemoveMcbEntry@12
 186 FsRtlSplitLargeMcb@20
 187 FsRtlSyncVolumes@12
 188 FsRtlTruncateLargeMcb@12
 189 FsRtlTruncateMcb@8
 190 FsRtlUninitializeFileLock@4
 191 FsRtlUninitializeLargeMcb@4
 192 FsRtlUninitializeMcb@4
 193 FsRtlUninitializeOplock@4
 194 HalDispatchTable DATA
 195 HalPrivateDispatchTable DATA
 196 @InterlockedCompareExchange@12
 197 @InterlockedDecrement@4
 198 @InterlockedExchange@8
 199 @InterlockedExchangeAdd@8
 200 @InterlockedIncrement@4
 201 IoAcquireCancelSpinLock@4
 202 IoAcquireVpbSpinLock@4
 203 IoAdapterObjectType DATA
 204 IoAllocateAdapterChannel@20
 205 IoAllocateController@16
 206 IoAllocateErrorLogEntry@8
 207 IoAllocateIrp@8
 208 IoAllocateMdl@20
 209 IoAssignResources@24
 210 IoAttachDevice@12
 211 IoAttachDeviceByPointer@8
 212 IoAttachDeviceToDeviceStack@8
 213 IoBuildAsynchronousFsdRequest@24
 214 IoBuildDeviceIoControlRequest@36
 215 IoBuildPartialMdl@16
 216 IoBuildSynchronousFsdRequest@28
 217 IoCallDriver@8
 218 IoCancelIrp@4
 219 IoCheckDesiredAccess@8
 220 IoCheckEaBufferValidity@12
 221 IoCheckFunctionAccess@24
 222 IoCheckShareAccess@20
 223 IoCompleteRequest@8
 224 IoConnectInterrupt@44
 225 IoCreateController@4
 226 IoCreateDevice@28
 227 IoCreateFile@56
 228 IoCreateNotificationEvent@8
 229 IoCreateStreamFileObject@8
 230 IoCreateSymbolicLink@8
 231 IoCreateSynchronizationEvent@8
 232 IoCreateUnprotectedSymbolicLink@8
 233 IoDeleteController@4
 234 IoDeleteDevice@4
 235 IoDeleteSymbolicLink@4
 236 IoDetachDevice@4
 237 IoDeviceHandlerObjectSize DATA
 238 IoDeviceHandlerObjectType DATA
 239 IoDisconnectInterrupt@4
 240 IoDeviceObjectType DATA
 241 IoDriverObjectType DATA
 242 IoEnqueueIrp@4
 243 IoFastQueryNetworkAttributes@20
 244 IoFileObjectType DATA
 245 IoFreeController@4
 246 IoFreeIrp@4
 247 IoFreeMdl@4
 248 IoGetAttachedDevice@4
 249 IoGetAttachedDeviceReference@4
 250 IoGetBaseFileSystemDeviceObject@4
 251 IoGetConfigurationInformation@0
 252 IoGetCurrentProcess@0
 253 IoGetDeviceObjectPointer@16
 254 IoGetDeviceToVerify@4
 255 IoGetFileObjectGenericMapping@0
 256 IoGetInitialStack@0
 257 IoGetRelatedDeviceObject@4
 258 IoGetRequestorProcess@4
 259 IoGetStackLimits@8
 260 IoGetTopLevelIrp@0
 261 IoInitializeIrp@12
 262 IoInitializeTimer@12
 263 IoIsOperationSynchronous@4
 264 IoMakeAssociatedIrp@8
 265 IoOpenDeviceInstanceKey@20
 266 ;IoPageRead@16
 267 IoQueryDeviceDescription@32
 268 IoQueryDeviceEnumInfo@8
 269 IoQueryFileInformation@20
 270 IoQueryVolumeInformation@20
 271 IoQueueThreadIrp@4
 272 IoRaiseHardError@12
 273 IoRaiseInformationalHardError@12
 274 IoReadOperationCount DATA
 275 IoReadPartitionTable@16
 276 IoReadTransferCount DATA
 277 IoRegisterDriverReinitialization@12
 278 IoRegisterFileSystem@4
 279 IoRegisterFsRegistrationChange@8
 280 IoRegisterShutdownNotification@4
 281 IoReleaseCancelSpinLock@4
 282 IoReleaseVpbSpinLock@4
 283 IoRemoveShareAccess@8
 284 IoReportHalResourceUsage@16
 285 IoReportResourceUsage@36
 286 IoSetDeviceToVerify@8
 287 IoSetHardErrorOrVerifyDevice@8
 288 IoSetInformation@16
 289 IoSetPartitionInformation@16
 290 IoSetShareAccess@16
 291 IoSetThreadHardErrorMode@4
 292 IoSetTopLevelIrp@4
 293 IoStartNextPacket@8
 294 IoStartNextPacketByKey@12
 295 IoStartPacket@16
 296 IoStartTimer@4
 297 IoStatisticsLock DATA
 298 IoStopTimer@4
 299 IoSynchronousPageWrite@20
 300 IoThreadToProcess@4
 301 IoUnregisterFileSystem@4
 302 IoUnregisterFsRegistrationChange@8
 303 IoUnregisterShutdownNotification@4
 304 IoUpdateShareAccess@8
 305 IoVerifyVolume@8
 306 IoWriteErrorLogEntry@4
 307 IoWriteOperationCount DATA
 308 IoWritePartitionTable@20
 309 IoWriteTransferCount DATA
 310 @IofCallDriver@8
 311 @IofCompleteRequest@8
 312 KdDebuggerEnabled DATA
 313 KdDebuggerNotPresent DATA
 314 KdPollBreakIn@0
 315 KdSystemDebugControl@4
 316 Ke386CallBios@8
 317 ;Ke386IoSetAccessProcess
 318 ;Ke386QueryIoAccessMap
 319 ;Ke386SetIoAccessMap
 320 KeAcquireSpinLockAtDpcLevel@4
 321 KeAddSystemServiceTable@20
 322 KeAttachProcess@4
 323 ;KeBoostCurrentThread
 324 KeBugCheck@4
 325 KeBugCheckEx@20
 326 KeCancelTimer@4
 327 KeClearEvent@4
 328 KeConnectInterrupt@4
 329 ;KeDcacheFlushCount DATA
 330 KeDelayExecutionThread@12
 331 KeDeregisterBugCheckCallback@4
 332 KeDetachProcess@0
 333 KeDisconnectInterrupt@4
 334 KeEnterCriticalRegion@0
 335 KeEnterKernelDebugger@0
 336 ;KeFindConfigurationEntry
 337 ;KeFindConfigurationNextEntry
 338 ;KeFlushEntireTb
 339 KeGetCurrentThread@0
 340 KeGetPreviousMode@0
 341 ;KeI386AbiosCall
 342 ;KeI386AllocateGdtSelectors
 343 ;KeI386Call16BitCStyleFunction
 344 ;KeI386Call16BitFunction
 345 ;KeI386FlatToGdtSelector
 346 ;KeI386GetLid
 347 ;KeI386MachineType DATA
 348 ;KeI386ReleaseGdtSelectors
 349 ;KeI386ReleaseLid
 350 ;KeI386SetGdtSelector
 351 ;KeIcacheFlushCount DATA
 352 KeInitializeApc@32
 353 KeInitializeDeviceQueue@4
 354 KeInitializeDpc@12
 355 KeInitializeEvent@12
 356 KeInitializeInterrupt@44
 357 KeInitializeMutant@8
 358 KeInitializeMutex@8
 359 KeInitializeQueue@8
 360 KeInitializeSemaphore@12
 361 KeInitializeSpinLock@4
 362 KeInitializeTimer@4
 363 KeInitializeTimerEx@8
 364 KeInsertByKeyDeviceQueue@12
 365 KeInsertDeviceQueue@8
 366 KeInsertHeadQueue@8
 367 KeInsertQueue@8
 368 KeInsertQueueApc@16
 369 KeInsertQueueDpc@12
 370 ;KeIsExecutingDpc
 371 KeLeaveCriticalRegion@0
 372 KeLoaderBlock DATA
 373 KeNumberProcessors DATA
 374 ;KeProfileInterrupt
 375 ;KeProfileInterruptWithSource
 376 KePulseEvent@12
 377 KeQuerySystemTime@4
 378 KeQueryTickCount@4
 379 KeQueryTimeIncrement@0
 380 ;KeRaiseUserException
 381 KeReadStateEvent@4
 382 KeReadStateMutant@4
 383 KeReadStateMutex@4
 384 KeReadStateQueue@4
 385 KeReadStateSemaphore@4
 386 KeReadStateTimer@4
 387 KeRegisterBugCheckCallback@20
 388 KeReleaseMutant@16
 389 KeReleaseMutex@8
 390 KeReleaseSemaphore@16
 391 KeReleaseSpinLockFromDpcLevel@4
 392 KeRemoveByKeyDeviceQueue@8
 393 KeRemoveDeviceQueue@4
 394 KeRemoveEntryDeviceQueue@8
 395 KeRemoveQueue@12
 396 KeRemoveQueueDpc@4
 397 KeResetEvent@4
 398 ;KeRestoreFloatingPointState
 399 KeRundownQueue@4
 400 ;KeSaveFloatingPointState
 401 KeServiceDescriptorTable DATA
 402 ;KeSetAffinityThread
 403 KeSetBasePriorityThread@8
 404 ;KeSetDmaIoCoherency
 405 KeSetEvent@12
 406 ;KeSetEventBoostPriority
 407 ;KeSetIdealProcessorThread
 408 KeSetImportanceDpc@8
 409 ;KeSetKernelStackSwapEnable
 410 KeSetPriorityThread@8
 411 ;KeSetProfileIrql
 412 ;@KeSetSwapContextNotifyRoutine
 413 KeSetTargetProcessorDpc@8
 414 ;@KeSetThreadSelectNotifyRoutine
 415 ;KeSetTimeIncrement
 416 KeSetTimer@16
 417 KeSetTimerEx@20
 418 ;@KeSetTimeUpdateNotifyRoutine
 419 KeSynchronizeExecution@12
 420 ;KeTerminateThread
 421 KeTickCount DATA
 422 ;KeUpdateRunTime
 423 ;KeUserModeCallback
 424 KeWaitForMultipleObjects@32
 425 KeWaitForMutexObject@20
 426 KeWaitForSingleObject@20
 427 ;@KefAcquireSpinLockAtDpcLevel
 428 ;@KefReleaseSpinLockFromDpcLevel
 429 ;Kei386EoiHelper
 430 ;@KiAcquireSpinLock@4
 431 ;KiBugCheckData DATA
 432 ;KiCoprocessorError@0
 433 KiDeliverApc@12
 434 KiDispatchInterrupt@0
 435 ;KiIpiServiceRoutine@8
 436 ;@KiReleaseSpinLock@4
 437 ;KiUnexpectedInterrupt
 438 ;Kii386SpinOnSpinLock
 439 KiRawTicks DATA
 440 LdrAccessResource@16
 441 ;LdrEnumResources@20
 442 ;LdrFindResourceDirectory_U@16
 443 LdrFindResource_U@16
 444 ;LpcRequestPort@8
 445 LsaCallAuthenticationPackage@28
 446 LsaDeregisterLogonProcess@8
 447 LsaFreeReturnBuffer@4
 448 LsaLogonUser@56
 449 LsaLookupAuthenticationPackage@12
 450 LsaRegisterLogonProcess@12
 451 MmAdjustWorkingSetSize@12
 452 MmAllocateContiguousAlignedMemory@16
 453 MmAllocateContiguousMemory@12
 454 MmAllocateNonCachedMemory@4
 455 MmBuildMdlForNonPagedPool@4
 456 MmCanFileBeTruncated@8
 457 MmCreateMdl@12
 458 MmCreateSection@32
 459 MmDbgTranslatePhysicalAddress@8
 460 MmDisableModifiedWriteOfSection@4
 461 MmFlushImageSection@8
 462 MmForceSectionClosed@8
 463 MmFreeContiguousMemory@4
 464 MmFreeNonCachedMemory@8
 465 MmGetPhysicalAddress@4
 466 MmGrowKernelStack@4
 467 MmHighestUserAddress DATA
 468 MmIsAddressValid@4
 469 MmIsNonPagedSystemAddressValid@4
 470 MmIsRecursiveIoFault@0
 471 MmIsThisAnNtAsSystem@0
 472 MmLockPagableDataSection@4
 473 MmLockPagableImageSection@4=MmLockPagableDataSection@4
 474 MmLockPagableSectionByHandle@4
 475 MmMapIoSpace@16
 476 MmMapLockedPages@8
 477 MmMapMemoryDumpMdl@4
 478 MmMapVideoDisplay@16
 479 MmMapViewInSystemSpace@12
 480 MmMapViewOfSection@40
 481 MmPageEntireDriver@4
 482 MmProbeAndLockPages@12
 483 MmQuerySystemSize@0
 484 MmResetDriverPaging@4
 485 MmSectionObjectType DATA
 486 MmSecureVirtualMemory@12
 487 MmSetAddressRangeModified@8
 488 MmSetBankedSection@24
 489 MmSizeOfMdl@8
 490 MmUnlockPagableImageSection@4
 491 MmUnlockPages@4
 492 MmUnmapIoSpace@8
 493 MmUnmapLockedPages@8
 494 MmUnmapVideoDisplay@8
 495 MmUnmapViewInSystemSpace@4
 496 MmUnmapViewOfSection@8
 497 MmUnsecureVirtualMemory@4
 498 MmUserProbeAddress DATA
 499 NlsAnsiCodePage DATA
 500 NlsLeadByteInfo DATA
 501 NlsMbCodePageTag DATA
 502 NlsMbOemCodePageTag DATA
 503 NlsOemLeadByteInfo DATA
 504 NtAddAtom@8
 505 NtAdjustPrivilegesToken@24
 506 NtAlertThread@4
 507 NtAllocateLocallyUniqueId@4
 508 NtAllocateUuids@12
 509 NtAllocateVirtualMemory@24
 510 NtBuildNumber DATA
 511 NtClose@4
 512 NtConnectPort@32
 513 NtCreateEvent@20
 514 NtCreateTimer@16
 515 NtOpenEvent@12
 516 NtCreateFile@44
 517 NtCreateSection@28
 518 NtDeleteAtom@4
 519 NtDeleteFile@4
 520 NtDeviceIoControlFile@40
 521 NtDuplicateObject@28
 522 NtDuplicateToken@24
 523 NtFindAtom@8
 524 NtFreeVirtualMemory@16
 525 NtFsControlFile@40
 526 NtGlobalFlag DATA
 527 NtLockFile@40
 528 NtMapViewOfSection@40
 529 NtNotifyChangeDirectoryFile@36
 530 NtOpenFile@24
 531 NtOpenProcess@16
 532 NtOpenProcessToken@12
 533 NtQueryDirectoryFile@44
 534 NtQueryEaFile@36
 535 NtQueryInformationAtom@20
 536 NtQueryInformationFile@20
 537 NtQueryInformationProcess@20
 538 NtQueryInformationToken@20
 539 ;NtQueryOleDirectoryFile@ <--- ?
 540 NtQuerySecurityObject@20
 541 NtQuerySystemTime@4
 542 NtQueryVolumeInformationFile@20
 543 NtReadFile@36
 544 NtRequestPort@20
 545 NtRequestWaitReplyPort@12
 546 NtSetEvent@8
 547 NtSetInformationFile@20
 548 NtSetInformationProcess@16
 549 NtSetInformationThread@16
 550 NtSetSecurityObject@12
 551 NtSetSystemTime@8
 552 NtUnlockFile@20
 553 NtVdmControl@8
 554 NtW32Call@20
 555 NtWaitForSingleObject@12
 556 NtWriteFile@36
 557 ObAssignSecurity@16
 558 ;ObCheckCreateObjectAccess@28
 559 ;ObCheckObjectAccess@20
 560 ;ObCreateObject@36
 561 ObCreateObject@20
 562 ;ObFindHandleForObject@20
 563 ObGetObjectPointerCount@4
 564 ObGetObjectSecurity@12
 565 ;ObInsertObject@24
 566 ObMakeTemporaryObject@4
 567 ObOpenObjectByName@28
 568 ObOpenObjectByPointer@28
 569 ;ObQueryNameString@16
 570 ;ObQueryObjectAuditingByHandle@8
 571 @ObfDereferenceObject@4
 572 @ObfReferenceObject@4
 573 ObReferenceObjectByHandle@24
 574 ObReferenceObjectByName@32
 575 ObReferenceObjectByPointer@16
 576 ObReleaseObjectSecurity@8
 577 ;ObSetSecurityDescriptorInfo@24
 578 ;PfxFindPrefix
 579 ;PfxInitialize
 580 ;PfxInsertPrefix
 581 ;PfxRemovePrefix
 582 PoCallDriver@8
 583 PoRegisterDeviceForIdleDetection@16
 584 PoRegisterSystemState@8
 585 PoRequestPowerIrp@24
 586 PoSetDeviceBusy@4
 587 PoSetPowerState@12
 588 PoSetSystemState@4
 589 PoStartNextPowerIrp@4
 590 PoUnregisterSystemState@4
 591 ;ProbeForWrite@12
 592 PsAssignImpersonationToken@8
 593 ;PsChargePoolQuota@12
 594 PsCreateSystemProcess@12
 595 PsCreateSystemThread@28
 596 PsCreateWin32Thread@4
 597 PsCreateWin32Process@4
 598 PsGetWin32Thread@0
 599 PsGetWin32Process@0
 600 PsEstablishWin32Callouts@24
 601 PsGetCurrentProcess@0
 602 PsGetCurrentProcessId@0
 603 PsGetCurrentThreadId@0
 604 PsGetCurrentThread@0
 605 PsGetProcessExitTime@0
 606 PsGetVersion@16
 607 PsImpersonateClient@20
 608 PsInitialSystemProcess DATA
 609 PsIsThreadTerminating@4
 610 PsLookupProcessByProcessId@8
 611 PsLookupProcessThreadByCid@12
 612 PsLookupThreadByThreadId@8
 613 PsProcessType DATA
 614 PsReferenceImpersonationToken@16
 615 PsReferencePrimaryToken@4
 616 ;PsReturnPoolQuota@12
 617 PsRevertToSelf@0
 618 PsSetCreateProcessNotifyRoutine@8
 619 PsSetCreateThreadNotifyRoutine@4
 620 ;PsSetLegoNotifyRoutine@4
 621 ;PsSetProcessPriorityByClass@8
 622 PsTerminateSystemThread@4
 623 PsThreadType DATA
 624 READ_REGISTER_UCHAR@4
 625 READ_REGISTER_ULONG@4
 626 READ_REGISTER_USHORT@4
 627 READ_REGISTER_BUFFER_UCHAR@12
 628 READ_REGISTER_BUFFER_ULONG@12
 629 READ_REGISTER_BUFFER_USHORT@12
 630 RtlAbsoluteToSelfRelativeSD@12
 631 RtlAddAccessAllowedAce@16
 632 RtlAddAce@20
 633 RtlAddAtomToAtomTable@12
 634 ;RtlAllocateAndInitializeSid
 635 ;RtlAllocateHeap
 636 RtlAnsiCharToUnicodeChar@4
 637 RtlAnsiStringToUnicodeSize@4
 638 RtlAnsiStringToUnicodeString@12
 639 RtlAppendAsciizToString@8
 640 RtlAppendStringToString@8
 641 RtlAppendUnicodeStringToString@8
 642 RtlAppendUnicodeToString@8
 643 RtlAreAllAccessesGranted@8
 644 RtlAreAnyAccessesGranted@8
 645 RtlAreBitsClear@12
 646 RtlAreBitsSet@12
 647 RtlAssert@16
 648 ;RtlCaptureStackBackTrace
 649 RtlCharToInteger@12
 650 RtlCheckRegistryKey@8
 651 RtlClearAllBits@4
 652 RtlClearBits@12
 653 RtlCompareMemory@12
 654 RtlCompareMemoryUlong@12
 655 RtlCompareString@12
 656 RtlCompareUnicodeString@12
 657 ;RtlCompressBuffer
 658 ;RtlCompressChunks
 659 RtlConvertLongToLargeInteger@4
 660 RtlConvertSidToUnicodeString@12
 661 RtlConvertUlongToLargeInteger@4
 662 RtlCopyLuid@8
 663 RtlCopySid@12
 664 RtlCopyString@8
 665 RtlCopyUnicodeString@8
 666 RtlCreateAcl@12
 667 RtlCreateAtomTable@8
 668 ;RtlCreateHeap
 669 RtlCreateRegistryKey@8
 670 RtlCreateSecurityDescriptor@8
 671 RtlCreateUnicodeString@8
 672 RtlCustomCPToUnicodeN@24
 673 ;RtlDecompressBuffer
 674 ;RtlDecompressChunks
 675 ;RtlDecompressFragment
 676 ;RtlDelete
 677 RtlDeleteAtomFromAtomTable@8
 678 ;RtlDeleteElementGenericTable
 679 ;RtlDeleteNoSplay
 680 RtlDeleteRegistryValue@12
 681 ;RtlDescribeChunk
 682 RtlDestroyAtomTable@4
 683 ;RtlDestroyHeap
 684 RtlDowncaseUnicodeString@12
 685 RtlEmptyAtomTable@8
 686 RtlEnlargedIntegerMultiply@8
 687 RtlEnlargedUnsignedDivide@16
 688 RtlEnlargedUnsignedMultiply@8
 689 ;RtlEnumerateGenericTable
 690 ;RtlEnumerateGenericTableWithoutSplaying
 691 RtlEqualLuid@8
 692 RtlEqualSid@8
 693 RtlEqualString@12
 694 RtlEqualUnicodeString@12
 695 RtlExtendedIntegerMultiply@12
 696 RtlExtendedLargeIntegerDivide@16
 697 RtlExtendedMagicDivide@20
 698 RtlFillMemory@12
 699 RtlFillMemoryUlong@12
 700 RtlFindClearBits@12
 701 RtlFindClearBitsAndSet@12
 702 RtlFindFirstRunClear@8
 703 RtlFindFirstRunSet@8
 704 RtlFindLongestRunClear@8
 705 RtlFindLongestRunSet@8
 706 RtlFindMessage@20
 707 RtlFindSetBits@12
 708 RtlFindSetBitsAndClear@12
 709 ;RtlFindUnicodePrefix
 710 RtlFormatCurrentUserKeyPath@4
 711 RtlFreeAnsiString@4
 712 ;RtlFreeHeap
 713 RtlFreeOemString@4
 714 RtlFreeUnicodeString@4
 715 ;RtlGenerate8dot3Name
 716 ;RtlGetCallersAddress
 717 ;RtlGetCompressionWorkSpaceSize
 718 RtlGetDaclSecurityDescriptor@16
 719 RtlGetDefaultCodePage@8
 720 ;RtlGetElementGenericTable
 721 RtlGetGroupSecurityDescriptor@12
 722 RtlGetOwnerSecurityDescriptor@12
 723 RtlImageNtHeader@4
 724 RtlInitAnsiString@8
 725 ;RtlInitCodePageTable
 726 RtlInitString@8
 727 RtlInitUnicodeString@8
 728 RtlInitializeBitMap@12
 729 ;RtlInitializeGenericTable
 730 RtlInitializeSid@12
 731 ;RtlInitializeUnicodePrefix
 732 ;RtlInsertElementGenericTable
 733 ;RtlInsertUnicodePrefix
 734 RtlIntegerToChar@16
 735 RtlIntegerToUnicodeString@12
 736 ;RtlIsNameLegalDOS8Dot3
 737 RtlLargeIntegerAdd@16
 738 RtlLargeIntegerArithmeticShift@12
 739 RtlLargeIntegerDivide@20
 740 RtlLargeIntegerNegate@8
 741 RtlLargeIntegerShiftLeft@12
 742 RtlLargeIntegerShiftRight@12
 743 RtlLargeIntegerSubtract@16
 744 RtlLengthRequiredSid@4
 745 RtlLengthSecurityDescriptor@4
 746 RtlLengthSid@4
 747 RtlLookupAtomInAtomTable@12
 748 ;RtlLookupElementGenericTable
 749 RtlMapGenericMask@8
 750 RtlMoveMemory@12
 751 RtlMultiByteToUnicodeN@20
 752 RtlMultiByteToUnicodeSize@12
 753 ;RtlNextUnicodePrefix
 754 RtlNtStatusToDosError@4
 755 RtlNtStatusToDosErrorNoTeb@4
 756 ;RtlNumberGenericTableElements
 757 RtlNumberOfClearBits@4
 758 RtlNumberOfSetBits@4
 759 RtlOemStringToCountedUnicodeString@12
 760 RtlOemStringToUnicodeSize@4
 761 RtlOemStringToUnicodeString@12
 762 RtlOemToUnicodeN@20
 763 RtlPinAtomInAtomTable@8
 764 RtlPrefixString@12
 765 RtlPrefixUnicodeString@12
 766 RtlQueryAtomInAtomTable@24
 767 RtlQueryRegistryValues@20
 768 RtlQueryTimeZoneInformation@4
 769 RtlRaiseException@4
 770 ;RtlRandom
 771 ;RtlRemoveUnicodePrefix
 772 ;RtlReserveChunk
 773 RtlSecondsSince1970ToTime@8
 774 RtlSecondsSince1980ToTime@8
 775 RtlSetAllBits@4
 776 RtlSetBits@12
 777 RtlSetDaclSecurityDescriptor@16
 778 RtlSetGroupSecurityDescriptor@12
 779 RtlSetOwnerSecurityDescriptor@12
 780 RtlSetSaclSecurityDescriptor@16
 781 RtlSetTimeZoneInformation@4
 782 ;RtlSplay
 783 RtlSubAuthorityCountSid@4
 784 RtlSubAuthoritySid@8
 785 RtlTimeFieldsToTime@8
 786 RtlTimeToSecondsSince1970@8
 787 RtlTimeToSecondsSince1980@8
 788 RtlTimeToTimeFields@8
 789 RtlUnicodeStringToAnsiSize@4
 790 RtlUnicodeStringToAnsiString@12
 791 RtlUnicodeStringToCountedOemString@12
 792 RtlUnicodeStringToInteger@12
 793 RtlUnicodeStringToOemSize@4
 794 RtlUnicodeStringToOemString@12
 795 RtlUnicodeToCustomCPN@24
 796 RtlUnicodeToMultiByteN@20
 797 RtlUnicodeToMultiByteSize@12
 798 RtlUnicodeToOemN@20
 799 RtlUnwind@16
 800 RtlUpcaseUnicodeChar@4
 801 RtlUpcaseUnicodeString@12
 802 RtlUpcaseUnicodeStringToAnsiString@12
 803 RtlUpcaseUnicodeStringToCountedOemString@12
 804 RtlUpcaseUnicodeStringToOemString@12
 805 RtlUpcaseUnicodeToCustomCPN@24
 806 RtlUpcaseUnicodeToMultiByteN@20
 807 RtlUpcaseUnicodeToOemN@20
 808 RtlUpperChar@4
 809 RtlUpperString@8
 810 RtlValidSecurityDescriptor@4
 811 RtlValidSid@4
 812 RtlWriteRegistryValue@24
 813 ;RtlZeroHeap
 814 RtlZeroMemory@8
 815 RtlxAnsiStringToUnicodeSize@4
 816 RtlxOemStringToUnicodeSize@4
 817 RtlxUnicodeStringToAnsiSize@4
 818 RtlxUnicodeStringToOemSize@4
 819 SeAccessCheck@40
 820 ;SeAppendPrivileges@8
 821 SeAssignSecurity@28
 822 ;SeAuditingFileEvents@8
 823 ;SeAuditingFileOrGlobalEvents@18
 824 ;SeCaptureSecurityDescriptor@20
 825 SeCaptureSubjectContext@4
 826 ;SeCloseObjectAuditAlarm@12
 827 ;SeCreateAccessState@16
 828 SeCreateClientSecurity@16
 829 SeDeassignSecurity@4
 830 ;SeDeleteAccessState@4
 831 ;SeDeleteObjectAuditAlarm@8
 832 SeExports DATA
 833 ;SeFreePrivileges@4
 834 SeImpersonateClient@8
 835 ;SeLockSubjectContext@4
 836 ;SeMarkLogonSessionForTerminationNotification@4
 837 ;SeOpenObjectAuditAlarm@36
 838 ;SeOpenObjectForDeleteAuditAlarm@36
 839 SePrivilegeCheck@12
 840 ;SePrivilegeObjectAuditAlarm@24
 841 SePublicDefaultDacl DATA
 842 ;SeQueryAuthenticationIdToken@8
 843 ;SeQuerySecurityDescriptorInfo@16
 844 ;SeRegisterLogonSessionTerminatedRoutine@4
 845 ;SeReleaseSecurityDescriptor@12
 846 SeReleaseSubjectContext@4
 847 ;SeSetAccessStateGenericMapping@8
 848 ;SeSetSecurityDescriptorInfo@24
 849 SeSinglePrivilegeCheck@12
 850 SeSystemDefaultDacl DATA
 851 SeTokenImpersonationLevel@4
 852 SeTokenType@4
 853 ;SeUnlockSubjectContext@4
 854 ;SeUnregisterLogonSessionTerminatedRoutine@4
 855 ;SeValidSecurityDescriptor@8
 856 WRITE_REGISTER_UCHAR@8
 857 WRITE_REGISTER_ULONG@8
 858 WRITE_REGISTER_USHORT@8
 859 WRITE_REGISTER_BUFFER_UCHAR@12
 860 WRITE_REGISTER_BUFFER_ULONG@12
 861 WRITE_REGISTER_BUFFER_USHORT@12
 862 ZwAccessCheckAndAuditAlarm@44
 863 ZwAlertThread@4
 864 ZwAllocateVirtualMemory@24
 865 ZwClearEvent@4
 866 ZwClose@4
 867 ZwCloseObjectAuditAlarm@12
 868 ZwConnectPort@32
 869 ZwCreateDirectoryObject@12
 870 ZwCreateEvent@20
 871 ZwCreateFile@44
 872 ZwCreateKey@28
 873 ZwCreateSection@28
 874 ZwCreateSymbolicLinkObject@16
 875 ZwDeleteFile@4
 876 ZwDeleteKey@4
 877 ZwDeleteValueKey@8
 878 ZwDeviceIoControlFile@40
 879 ZwDisplayString@4
 880 ZwDuplicateObject@28
 881 ZwDuplicateToken@24
 882 ZwEnumerateKey@24
 883 ZwEnumerateValueKey@24
 884 ZwFlushInstructionCache@12
 885 ZwFlushKey@4
 886 ZwFreeVirtualMemory@16
 887 ZwFsControlFile@40
 888 ZwLoadDriver@4
 889 ZwLoadKey@8
 890 ZwMakeTemporaryObject@4
 891 ZwMapViewOfSection@40
 892 ZwNotifyChangeKey@40
 893 ZwOpenDirectoryObject@12
 894 ZwOpenEvent@12
 895 ZwOpenFile@24
 896 ZwOpenKey@12
 897 ZwOpenProcess@16
 898 ZwOpenProcessToken@12
 899 ZwOpenSection@12
 900 ZwOpenSymbolicLinkObject@12
 901 ZwOpenThread@16
 902 ZwOpenThreadToken@16
 903 ZwPulseEvent@8
 904 ZwQueryDefaultLocale@8
 905 ZwQueryDirectoryFile@44
 906 ZwQueryInformationAtom@20
 907 ZwQueryInformationFile@20
 908 ZwQueryInformationProcess@20
 909 ZwQueryInformationToken@20
 910 ZwQueryKey@20
 911 ZwQueryObject@20
 912 ZwQuerySection@20
 913 ZwQuerySecurityObject@20
 914 ZwQuerySymbolicLinkObject@12
 915 ZwQuerySystemInformation@16
 916 ZwQuerySystemTime@4
 917 ZwQueryValueKey@24
 918 ZwQueryVolumeInformationFile@20
 919 ZwReadFile@36
 920 ZwReplaceKey@12
 921 ZwRequestWaitReplyPort@12
 922 ZwResetEvent@8
 923 ZwSaveKey@8
 924 ZwSetDefaultLocale@8
 925 ZwSetEvent@8
 926 ZwSetInformationFile@20
 927 ZwSetInformationObject@16
 928 ZwSetInformationProcess@16
 929 ZwSetInformationThread@16
 930 ZwSetSystemInformation@12
 931 ZwSetSystemTime@8
 932 ZwSetValueKey@24
 933 ZwTerminateProcess@8
 934 ZwUnloadDriver@4
 935 ZwUnloadKey@4
 936 ZwUnmapViewOfSection@8
 937 ZwWaitForMultipleObjects@20
 938 ZwWaitForSingleObject@12
 939 ZwWriteFile@36
 940 ZwYieldExecution@0
 941 _abnormal_termination
 942 ;_alldiv
 943 ;_allmul
 944 ;_allrem
 945 ;_allshl
 946 ;_allshr
 947 ;_aulldiv
 948 ;_aullrem
 949 ;_aullshr
 950 _except_handler2
 951 _except_handler3
 952 _global_unwind2
 953 _itoa
 954 _local_unwind2
 955 ;_purecall
 956 _snprintf
 957 _snwprintf
 958 _stricmp
 959 _strlwr
 960 _strnicmp
 961 _strnset
 962 _strrev
 963 _strset
 964 _strupr
 965 _vsnprintf
 966 _wcsicmp
 967 _wcslwr
 968 _wcsnicmp
 969 _wcsnset
 970 _wcsrev
 971 _wcsupr
 972 atoi
 973 atol
 974 isdigit
 975 islower
 976 isprint
 977 isspace
 978 isupper
 979 isxdigit
 980 mbstowcs
 981 mbtowc
 982 memchr
 983 memcpy
 984 memmove
 985 memset
 986 qsort
 987 rand
 988 sprintf
 989 srand
 990 strcat
 991 strchr
 992 strcmp
 993 strcpy
 994 strlen
 995 strncat
 996 strncmp
 997 strncpy
 998 strrchr
 999 strspn
1000 strstr
1001 swprintf
1002 tolower
1003 toupper
1004 towlower
1005 towupper
1006 vsprintf
1007 wcscat
1008 wcschr
1009 wcscmp
1010 wcscpy
1011 wcscspn
1012 wcslen
1013 wcsncat
1014 wcsncmp
1015 wcsncpy
1016 wcsrchr
1017 wcsspn
1018 wcsstr
1019 wcstombs
1020 wctomb