reactos/ntoskrnl/ntoskrnl.def

   1 ; $Id$
   2 ;
   3 ; reactos/ntoskrnl/ntoskrnl.def
   4 ;
   5 ; ReactOS Operating System
   6 ;
   7 EXPORTS
   8 CcRosInitializeFileCache@8
   9 CcRosReleaseFileCache@4
  10 CcRosTraceCacheMap@8
  11 CcCanIWrite@16
  12 CcCopyRead@24
  13 CcCopyWrite@20
  14 CcDeferWrite@24
  15 CcFastCopyRead@24
  16 CcFastCopyWrite@16
  17 CcFlushCache@16
  18 CcGetDirtyPages@16
  19 CcGetFileObjectFromBcb@4
  20 CcGetFileObjectFromSectionPtrs@4
  21 CcGetFlushedValidData@8
  22 CcGetLsnForFileObject@8
  23 CcInitializeCacheMap@20
  24 CcIsThereDirtyData@4
  25 CcFastMdlReadWait DATA
  26 CcFastReadNotPossible DATA
  27 CcFastReadWait DATA
  28 CcMapData@24
  29 CcMdlRead@20
  30 CcMdlReadComplete@8
  31 CcMdlWriteAbort@8
  32 CcMdlWriteComplete@12
  33 CcPinMappedData@20
  34 CcPinRead@24
  35 CcPrepareMdlWrite@20
  36 CcPreparePinWrite@28
  37 CcPurgeCacheSection@16
  38 CcRemapBcb@4
  39 CcRepinBcb@4
  40 CcScheduleReadAhead@12
  41 CcSetAdditionalCacheAttributes@12
  42 CcSetBcbOwnerPointer@8
  43 CcSetDirtyPageThreshold@8
  44 CcSetDirtyPinnedData@8
  45 CcSetLogHandleForFile@12
  46 CcSetReadAheadGranularity@8
  47 CcUninitializeCacheMap@12
  48 CcUnpinData@4
  49 CcUnpinDataForThread@8
  50 CcUnpinRepinnedBcb@12
  51 CcWaitForCurrentLazyWriterActivity@0
  52 CcSetFileSizes@8
  53 CcUnpinData@4
  54 CcZeroData@16
  55 CmRegisterCallback@12
  56 CmUnRegisterCallback@8
  57 DbgBreakPoint@0
  58 DbgBreakPointWithStatus@4
  59 DbgLoadImageSymbols@12
  60 DbgPrint
  61 DbgPrompt@12
  62 DbgPrintEx
  63 DbgPrintReturnControlC
  64 DbgQueryDebugFilterState@8
  65 DbgSetDebugFilterState@12
  66 @ExiAcquireFastMutex@4=@ExAcquireFastMutex@4
  67 @ExAcquireFastMutexUnsafe@4
  68 ExAcquireRundownProtection=@ExfAcquireRundownProtection@4
  69 ExAcquireRundownProtectionCacheAware=@ExfAcquireRundownProtectionCacheAware@4
  70 ExAcquireRundownProtectionCacheAwareEx=@ExfAcquireRundownProtectionCacheAwareEx@8
  71 ExAcquireRundownProtectionEx=@ExfAcquireRundownProtectionEx@8
  72 ExInitializeRundownProtection=@ExfInitializeRundownProtection@4
  73 ExReInitializeRundownProtection=@ExfReInitializeRundownProtection@4
  74 ExReInitializeRundownProtectionCacheAware=@ExfReInitializeRundownProtectionCacheAware@4
  75 ExReleaseRundownProtection=@ExfReleaseRundownProtection@4
  76 ExReleaseRundownProtectionCacheAware=@ExfReleaseRundownProtectionCacheAware@4
  77 ExReleaseRundownProtectionCacheAwareEx=@ExfReleaseRundownProtectionCacheAwareEx@8
  78 ExReleaseRundownProtectionEx=@ExfReleaseRundownProtectionEx@8
  79 ExRundownCompleted=@ExfRundownCompleted@4
  80 ExRundownCompletedCacheAware=@ExfRundownCompletedCacheAware@4
  81 ExWaitForRundownProtectionRelease=@ExfWaitForRundownProtectionRelease@4
  82 ExWaitForRundownProtectionReleaseCacheAware=@ExfWaitForRundownProtectionReleaseCacheAware@4
  83 ExAllocateCacheAwareRundownProtection@8
  84 ExFreeCacheAwareRundownProtection@4
  85 ExInitializeRundownProtectionCacheAware@8
  86 ExSizeOfRundownProtectionCacheAware@0
  87 ExAcquireResourceExclusiveLite@8
  88 ExAcquireResourceSharedLite@8
  89 ExAcquireSharedStarveExclusive@8
  90 ExAcquireSharedWaitForExclusive@8
  91 ExAllocateFromPagedLookasideList@4=ExiAllocateFromPagedLookasideList@4
  92 ExAllocatePool@8
  93 ExAllocatePoolWithQuota@8
  94 ExAllocatePoolWithQuotaTag@12
  95 ExAllocatePoolWithTag@12
  96 ExAllocatePoolWithTagPriority@16
  97 ExConvertExclusiveToSharedLite@4
  98 ExCreateCallback@16
  99 ExDeleteNPagedLookasideList@4
 100 ExDeletePagedLookasideList@4
 101 ExDeleteResourceLite@4
 102 ExDesktopObjectType DATA
 103 ExDisableResourceBoostLite@4
 104 ExEnumHandleTable@16
 105 @ExEnterCriticalRegionAndAcquireFastMutexUnsafe@4
 106 ExEventObjectType DATA
 107 ExExtendZone@12
 108 ExFreePool@4
 109 ExFreePoolWithTag@8
 110 ExFreeToPagedLookasideList@8=ExiFreeToPagedLookasideList@8
 111 ExGetCurrentProcessorCounts@12
 112 ExGetCurrentProcessorCpuUsage@4
 113 ExGetExclusiveWaiterCount@4
 114 ExGetPreviousMode@0
 115 ExGetSharedWaiterCount@4
 116 ExInitializeNPagedLookasideList@28
 117 ExInitializePagedLookasideList@28
 118 ExInitializeResourceLite@4
 119 ExInitializeZone@16
 120 ExInterlockedAddLargeInteger@16
 121 @ExInterlockedAddLargeStatistic@8
 122 ExInterlockedAddUlong@12
 123 @ExInterlockedCompareExchange64@16
 124 ExInterlockedDecrementLong@8
 125 ExInterlockedExchangeUlong@12
 126 ExInterlockedExtendZone@16
 127 ExInterlockedIncrementLong@8
 128 @ExInterlockedFlushSList@4
 129 ExInterlockedInsertHeadList@12
 130 ExInterlockedInsertTailList@12
 131 ExInterlockedPopEntryList@8
 132 @ExInterlockedPopEntrySList@8
 133 ExInterlockedPushEntryList@12
 134 @ExInterlockedPushEntrySList@12
 135 ExInterlockedRemoveHeadList@8
 136 ExIsProcessorFeaturePresent@4
 137 ExIsResourceAcquiredExclusiveLite@4
 138 ExIsResourceAcquiredSharedLite@4
 139 ExLocalTimeToSystemTime@8
 140 ExNotifyCallback@12
 141 ExQueryPoolBlockSize@8
 142 ExQueueWorkItem@8
 143 ExRaiseAccessViolation@0
 144 ExRaiseDatatypeMisalignment@0
 145 ExRaiseException@4=RtlRaiseException@4
 146 ExRaiseHardError@24
 147 ExRaiseStatus@4=RtlRaiseStatus@4
 148 ExRegisterCallback@12
 149 ExReinitializeResourceLite@4
 150 @ExiReleaseFastMutex@4=@ExReleaseFastMutex@4
 151 @ExReleaseFastMutexUnsafe@4
 152 @ExReleaseFastMutexUnsafeAndLeaveCriticalRegion@4
 153 ExReleaseResourceForThreadLite@8
 154 @ExReleaseResourceLite@4
 155 ExSemaphoreObjectType DATA
 156 ExSetResourceOwnerPointer@8
 157 ExSetTimerResolution@8
 158 ExSystemExceptionFilter@0
 159 ExSystemTimeToLocalTime@8
 160 ExTryToAcquireResourceExclusiveLite@4
 161 ExUnregisterCallback@4
 162 ExUuidCreate@4
 163 ExVerifySuite@4
 164 ExWindowStationObjectType DATA
 165 @ExfInterlockedAddUlong@12
 166 @ExfInterlockedInsertHeadList@12
 167 @ExfInterlockedInsertTailList@12
 168 @ExfInterlockedCompareExchange64@12
 169 @ExfInterlockedPopEntryList@8
 170 @ExfInterlockedPushEntryList@12
 171 @ExfInterlockedRemoveHeadList@8
 172 @Exfi386InterlockedDecrementLong@4
 173 @Exfi386InterlockedExchangeUlong@8
 174 @Exfi386InterlockedIncrementLong@4
 175 Exi386InterlockedDecrementLong@4
 176 Exi386InterlockedExchangeUlong@12
 177 Exi386InterlockedIncrementLong@4
 178 FsRtlAcquireFileExclusive@4
 179 FsRtlAddLargeMcbEntry@28
 180 FsRtlAddMcbEntry@16
 181 FsRtlAddToTunnelCache@32
 182 FsRtlAllocateFileLock@8
 183 FsRtlAllocatePool@8
 184 FsRtlAllocatePoolWithQuota@8
 185 FsRtlAllocatePoolWithQuotaTag@12
 186 FsRtlAllocatePoolWithTag@12
 187 FsRtlAllocateResource@0
 188 FsRtlAreNamesEqual@16
 189 FsRtlBalanceReads@4
 190 FsRtlCheckLockForReadAccess@8
 191 FsRtlCheckLockForWriteAccess@8
 192 FsRtlCheckOplock@20
 193 FsRtlCopyRead@32
 194 FsRtlCopyWrite@32
 195 FsRtlCurrentBatchOplock@4
 196 FsRtlDeleteKeyFromTunnelCache@12
 197 FsRtlDeleteTunnelCache@4
 198 FsRtlDeregisterUncProvider@4
 199 FsRtlDissectDbcs@16
 200 FsRtlDissectName@16
 201 FsRtlDoesDbcsContainWildCards@4
 202 FsRtlDoesNameContainWildCards@4
 203 FsRtlFastCheckLockForRead@24
 204 FsRtlFastCheckLockForWrite@24
 205 FsRtlFastUnlockAll@16
 206 FsRtlFastUnlockAllByKey@20
 207 FsRtlFastUnlockSingle@32
 208 FsRtlFindInTunnelCache@32
 209 FsRtlFreeFileLock@4
 210 FsRtlGetFileSize@8
 211 FsRtlGetNextFileLock@8
 212 FsRtlGetNextLargeMcbEntry@20
 213 FsRtlGetNextMcbEntry@20
 214 FsRtlIncrementCcFastReadNotPossible@0
 215 FsRtlIncrementCcFastReadNoWait@0
 216 FsRtlIncrementCcFastReadResourceMiss@0
 217 FsRtlIncrementCcFastReadWait@0
 218 FsRtlInitializeFileLock@12
 219 FsRtlInitializeLargeMcb@8
 220 FsRtlInitializeMcb@8
 221 FsRtlInitializeOplock@4
 222 FsRtlInitializeTunnelCache@4
 223 FsRtlInsertPerFileObjectContext@8
 224 FsRtlInsertPerStreamContext@8
 225 FsRtlIsDbcsInExpression@8
 226 FsRtlIsFatDbcsLegal@20
 227 FsRtlIsHpfsDbcsLegal@20
 228 FsRtlIsNameInExpression@16
 229 FsRtlIsNtstatusExpected@4
 230 FsRtlIsPagingFile@4
 231 FsRtlIsTotalDeviceFailure@4
 232 FsRtlLegalAnsiCharacterArray DATA
 233 FsRtlLookupLargeMcbEntry@32
 234 FsRtlLookupLastLargeMcbEntry@12
 235 FsRtlLookupLastLargeMcbEntryAndIndex@16
 236 FsRtlLookupLastMcbEntry@12
 237 FsRtlLookupMcbEntry@20
 238 FsRtlLookupPerFileObjectContext@12
 239 FsRtlLookupPerStreamContextInternal@12
 240 FsRtlMdlRead@24
 241 FsRtlMdlReadComplete@8
 242 FsRtlMdlReadCompleteDev@12
 243 FsRtlMdlReadDev@28
 244 FsRtlMdlWriteComplete@12
 245 FsRtlMdlWriteCompleteDev@16
 246 FsRtlNormalizeNtstatus@8
 247 FsRtlNotifyChangeDirectory@28
 248 FsRtlNotifyCleanup@12
 249 FsRtlNotifyFilterChangeDirectory@44
 250 FsRtlNotifyFilterReportChange@40
 251 FsRtlNotifyFullChangeDirectory@40
 252 FsRtlNotifyFullReportChange@36
 253 FsRtlNotifyInitializeSync@4
 254 FsRtlNotifyReportChange@20
 255 FsRtlNotifyUninitializeSync@4
 256 FsRtlNotifyVolumeEvent@8
 257 FsRtlNumberOfRunsInLargeMcb@4
 258 FsRtlNumberOfRunsInMcb@4
 259 FsRtlOplockFsctrl@12
 260 FsRtlOplockIsFastIoPossible@4
 261 FsRtlPostPagingFileStackOverflow@12
 262 FsRtlPostStackOverflow@12
 263 FsRtlPrepareMdlWrite@24
 264 FsRtlPrepareMdlWriteDev@28
 265 FsRtlPrivateLock@48
 266 FsRtlProcessFileLock@12
 267 FsRtlRegisterUncProvider@12
 268 FsRtlReleaseFile@4
 269 FsRtlRemoveLargeMcbEntry@20
 270 FsRtlRemoveMcbEntry@12
 271 FsRtlRemovePerFileObjectContext@12
 272 FsRtlRemovePerStreamContext@12
 273 FsRtlResetLargeMcb@8
 274 FsRtlSplitLargeMcb@20
 275 FsRtlSyncVolumes@12
 276 FsRtlTeardownPerStreamContexts@4
 277 FsRtlTruncateLargeMcb@12
 278 FsRtlTruncateMcb@8
 279 FsRtlUninitializeFileLock@4
 280 FsRtlUninitializeLargeMcb@4
 281 FsRtlUninitializeMcb@4
 282 FsRtlUninitializeOplock@4
 283 HalDispatchTable DATA
 284 HalPrivateDispatchTable DATA
 285 @HalExamineMBR@16
 286 InbvAcquireDisplayOwnership@0
 287 InbvCheckDisplayOwnership@0
 288 InbvDisplayString@4
 289 InbvEnableBootDriver@4
 290 InbvEnableDisplayString@4
 291 InbvInstallDisplayStringFilter@4
 292 InbvIsBootDriverInstalled@0
 293 InbvNotifyDisplayOwnershipLost@4
 294 InbvResetDisplay@0
 295 InbvSetScrollRegion@16
 296 InbvSetTextColor@4
 297 InbvSolidColorFill@20
 298 InitSafeBootMode DATA
 299 @InterlockedCompareExchange@12
 300 @InterlockedDecrement@4
 301 @InterlockedExchange@8
 302 @InterlockedExchangeAdd@8
 303 @InterlockedIncrement@4
 304 @InterlockedPushEntrySList@8
 305 @InterlockedPopEntrySList@4
 306 IoAcquireCancelSpinLock@4
 307 IoAcquireRemoveLockEx@20
 308 IoAcquireVpbSpinLock@4
 309 IoAdapterObjectType DATA
 310 IoAllocateAdapterChannel@20
 311 IoAllocateIrp@8
 312 IoAllocateMdl@20
 313 IoAllocateController@16
 314 IoAllocateDriverObjectExtension@16
 315 IoAllocateErrorLogEntry@8
 316 IoAllocateWorkItem@4
 317 IoAssignDriveLetters@16
 318 IoAssignResources@24
 319 IoAttachDevice@12
 320 IoAttachDeviceByPointer@8
 321 IoAttachDeviceToDeviceStack@8
 322 IoAttachDeviceToDeviceStackSafe@12
 323 IoBuildAsynchronousFsdRequest@24
 324 IoBuildDeviceIoControlRequest@36
 325 IoBuildPartialMdl@16
 326 IoBuildSynchronousFsdRequest@28
 327 IoCallDriver@8
 328 IoCancelFileOpen@8
 329 IoCancelIrp@4
 330 IoCheckDesiredAccess@8
 331 IoCheckEaBufferValidity@12
 332 IoCheckFunctionAccess@24
 333 IoCheckQuerySetFileInformation@12
 334 IoCheckQuerySetVolumeInformation@12
 335 IoCheckQuotaBufferValidity@12
 336 IoCheckShareAccess@20
 337 IoCompleteRequest@8
 338 IoConnectInterrupt@44
 339 IoCreateController@4
 340 IoCreateDevice@28
 341 IoCreateDisk@8
 342 IoCreateDriver@8
 343 IoCreateFile@56
 344 IoCreateFileSpecifyDeviceObjectHint@60
 345 IoCreateNotificationEvent@8
 346 IoCreateStreamFileObject@8
 347 IoCreateStreamFileObjectEx@12
 348 IoCreateStreamFileObjectLite@8
 349 IoCreateSymbolicLink@8
 350 IoCreateSynchronizationEvent@8
 351 IoCreateUnprotectedSymbolicLink@8
 352 IoCsqInitialize@28
 353 IoCsqInitializeEx@28
 354 IoCsqInsertIrp@12
 355 IoCsqInsertIrpEx@16
 356 IoCsqRemoveIrp@8
 357 IoCsqRemoveNextIrp@8
 358 IoDeleteController@4
 359 IoDeleteDevice@4
 360 IoDeleteDriver@4
 361 IoDeleteSymbolicLink@4
 362 IoDetachDevice@4
 363 IoDeviceHandlerObjectSize DATA
 364 IoDeviceHandlerObjectType DATA
 365 IoDeviceObjectType DATA
 366 IoDisconnectInterrupt@4
 367 IoDriverObjectType DATA
 368 IoEnqueueIrp@4
 369 IoEnumerateDeviceObjectList@16
 370 IoFastQueryNetworkAttributes@20
 371 IoFileObjectType DATA
 372 IoForwardAndCatchIrp@8=IoForwardIrpSynchronously@8
 373 IoForwardIrpSynchronously@8
 374 IoFreeController@4
 375 IoFreeErrorLogEntry@4
 376 IoFreeIrp@4
 377 IoFreeMdl@4
 378 IoFreeWorkItem@4
 379 IoGetAttachedDevice@4
 380 IoGetAttachedDeviceReference@4
 381 IoGetBaseFileSystemDeviceObject@4
 382 IoGetBootDiskInformation@8
 383 IoGetConfigurationInformation@0
 384 IoGetCurrentProcess@0
 385 IoGetDeviceObjectPointer@16
 386 IoGetDeviceAttachmentBaseRef@4
 387 IoGetDeviceInterfaceAlias@12
 388 IoGetDeviceInterfaces@16
 389 IoGetDriverObjectExtension@8
 390 IoGetDeviceProperty@20
 391 IoGetDeviceToVerify@4
 392 IoGetDiskDeviceObject@8
 393 IoGetDmaAdapter@12
 394 IoGetFileObjectGenericMapping@0
 395 IoGetInitialStack@0
 396 IoGetLowerDeviceObject@4
 397 IoGetRelatedDeviceObject@4
 398 IoGetRequestorProcess@4
 399 IoGetRequestorProcessId@4
 400 IoGetRequestorSessionId@8
 401 IoGetStackLimits@8
 402 IoGetTopLevelIrp@0
 403 IoInitializeIrp@12
 404 IoInvalidateDeviceRelations@8
 405 IoInvalidateDeviceState@4
 406 IoInitializeRemoveLockEx@20
 407 IoInitializeTimer@12
 408 IoIsFileOriginRemote@4
 409 IoIsSystemThread@4
 410 IoIsValidNameGraftingBuffer@8
 411 IoIsOperationSynchronous@4
 412 IoMakeAssociatedIrp@8
 413 IoOpenDeviceInterfaceRegistryKey@12
 414 IoOpenDeviceRegistryKey@16
 415 IoPageRead@20
 416 IoPnPDeliverServicePowerNotification@16
 417 IoQueryDeviceDescription@32
 418 IoQueryFileDosDeviceName@8
 419 IoQueryFileInformation@20
 420 IoQueryVolumeInformation@20
 421 IoQueueThreadIrp@4
 422 IoQueueWorkItem@16
 423 IoRaiseHardError@12
 424 IoRaiseInformationalHardError@12
 425 IoReadDiskSignature@12
 426 IoReadOperationCount DATA
 427 @IoReadPartitionTable@16
 428 IoReadPartitionTableEx@8
 429 IoReadTransferCount DATA
 430 IoRegisterBootDriverReinitialization@12
 431 IoRegisterDeviceInterface@16
 432 IoRegisterDriverReinitialization@12
 433 IoRegisterFileSystem@4
 434 IoRegisterFsRegistrationChange@8
 435 IoRegisterLastChanceShutdownNotification@4
 436 IoRegisterPlugPlayNotification@28
 437 IoRegisterShutdownNotification@4
 438 IoReleaseCancelSpinLock@4
 439 IoReleaseRemoveLockAndWaitEx@12
 440 IoReleaseRemoveLockEx@12
 441 IoReleaseVpbSpinLock@4
 442 IoRemoveShareAccess@8
 443 IoReportDetectedDevice@32
 444 IoReportHalResourceUsage@16
 445 IoReportResourceUsage@36
 446 IoReportResourceForDetection@28
 447 IoReportTargetDeviceChange@8
 448 IoReportTargetDeviceChangeAsynchronous@16
 449 IoRequestDeviceEject@4
 450 IoReuseIrp@8
 451 IoSetCompletionRoutineEx@28
 452 IoSetSystemPartition@4
 453 IoSetDeviceInterfaceState@8
 454 IoSetDeviceToVerify@8
 455 IoSetFileOrigin@8
 456 IoSetHardErrorOrVerifyDevice@8
 457 IoSetInformation@16
 458 IoSetIoCompletion@24
 459 @IoSetPartitionInformation@16
 460 IoSetPartitionInformationEx@12
 461 IoSetStartIoAttributes@12
 462 IoSetShareAccess@16
 463 IoSetThreadHardErrorMode@4
 464 IoSetTopLevelIrp@4
 465 IoStartNextPacket@8
 466 IoStartNextPacketByKey@12
 467 IoStartPacket@16
 468 IoStartTimer@4
 469 IoStatisticsLock DATA
 470 IoStopTimer@4
 471 IoSynchronousPageWrite@20
 472 IoSynchronousInvalidateDeviceRelations@8
 473 IoThreadToProcess@4
 474 IoUnregisterFileSystem@4
 475 IoUnregisterFsRegistrationChange@8
 476 IoUnregisterPlugPlayNotification@4
 477 IoUnregisterShutdownNotification@4
 478 IoUpdateShareAccess@8
 479 IoValidateDeviceIoControlAccess@8
 480 IoVerifyPartitionTable@8
 481 IoVerifyVolume@8
 482 IoVolumeDeviceToDosName@8
 483 IoWMIAllocateInstanceIds@12
 484 IoWMIDeviceObjectToInstanceName@12
 485 IoWMIExecuteMethod@24
 486 IoWMIHandleToInstanceName@12
 487 IoWMIOpenBlock@12
 488 IoWMIQueryAllData@12
 489 IoWMIQueryAllDataMultiple@16
 490 IoWMIQuerySingleInstance@16
 491 IoWMIQuerySingleInstanceMultiple@20
 492 IoWMIRegistrationControl@8
 493 IoWMISetNotificationCallback@12
 494 IoWMISetSingleInstance@20
 495 IoWMISetSingleItem@24
 496 IoWMISuggestInstanceName@16
 497 IoWMIWriteEvent@4
 498 IoWriteErrorLogEntry@4
 499 IoWriteOperationCount DATA
 500 @IoWritePartitionTable@20
 501 IoWritePartitionTableEx@8
 502 IoWriteTransferCount DATA
 503 @IofCallDriver@8
 504 @IofCompleteRequest@8
 505 IoIsWdmVersionAvailable@8
 506 KdComPortInUse DATA
 507 KdDebuggerEnabled DATA
 508 KdDebuggerNotPresent DATA
 509 KdDisableDebugger@0
 510 KdEnableDebugger@0
 511 KdEnteredDebugger
 512 KdPollBreakIn@0
 513 KdPowerTransition@4
 514 KdpServiceDispatcher@12
 515 Ke386CallBios@8
 516 Ke386IoSetAccessProcess@8
 517 Ke386QueryIoAccessMap@8
 518 Ke386SetIoAccessMap@8
 519 @KeAcquireGuardedMutex@4
 520 @KeAcquireGuardedMutexUnsafe@4
 521 KeAcquireSpinLockAtDpcLevel@4
 522 @KeAcquireInStackQueuedSpinLockAtDpcLevel@8
 523 KeAcquireInterruptSpinLock@4
 524 KeAddSystemServiceTable@20
 525 KeAreApcsDisabled@0
 526 KeAttachProcess@4
 527 ;KeBoostCurrentThread
 528 KeBugCheck@4
 529 KeBugCheckEx@20
 530 KeCancelTimer@4
 531 KeCapturePersistentThreadState@28
 532 KeClearEvent@4
 533 KeConnectInterrupt@4
 534 KeDcacheFlushCount DATA
 535 KeDelayExecutionThread@12
 536 KeDeregisterBugCheckCallback@4
 537 KeDeregisterBugCheckReasonCallback@4
 538 KeDetachProcess@0
 539 KeDisconnectInterrupt@4
 540 KeEnterCriticalRegion@0
 541 KeEnterGuardedRegion@0
 542 KeEnterKernelDebugger@0
 543 KeFindConfigurationEntry@16
 544 KeFindConfigurationNextEntry@20
 545 KeFlushEntireTb@8
 546 KeFlushQueuedDpcs@0
 547 KeGetCurrentThread@0
 548 KeGetPreviousMode@0
 549 KeGetRecommendedSharedDataAlignment@0
 550 ;KeI386AbiosCall
 551 KeI386AllocateGdtSelectors@8
 552 ;KeI386Call16BitCStyleFunction
 553 ;KeI386Call16BitFunction
 554 KeI386FlatToGdtSelector@12
 555 ;KeI386GetLid
 556 ;KeI386MachineType DATA
 557 KeI386ReleaseGdtSelectors@8
 558 ;KeI386ReleaseLid
 559 ;KeI386SetGdtSelector
 560 KeIcacheFlushCount DATA
 561 KeInitializeApc@32
 562 KeInitializeDeviceQueue@4
 563 KeInitializeDpc@12
 564 KeInitializeEvent@12
 565 @KeInitializeGuardedMutex@4
 566 KeInitializeInterrupt@44
 567 KeInitializeMutant@8
 568 KeInitializeMutex@8
 569 KeInitializeQueue@8
 570 KeInitializeSemaphore@12
 571 KeInitializeSpinLock@4
 572 KeInitializeTimer@4
 573 KeInitializeTimerEx@8
 574 KeInsertByKeyDeviceQueue@12
 575 KeInsertDeviceQueue@8
 576 KeInsertHeadQueue@8
 577 KeInsertQueue@8
 578 KeInsertQueueApc@16
 579 KeInsertQueueDpc@12
 580 KeIsAttachedProcess@0
 581 KeIsExecutingDpc@0
 582 KeLeaveCriticalRegion@0
 583 KeLeaveGuardedRegion@0
 584 KeLoaderBlock DATA
 585 KeNumberProcessors DATA
 586 KeProfileInterrupt@4
 587 KeProfileInterruptWithSource@8
 588 KePulseEvent@12
 589 KeQueryActiveProcessors@0
 590 KeQueryInterruptTime@0
 591 KeQueryPriorityThread@4
 592 KeQueryRuntimeThread@8
 593 KeQuerySystemTime@4
 594 KeQueryTickCount@4
 595 KeQueryTimeIncrement@0
 596 KeRaiseUserException@4
 597 KeReadStateEvent@4
 598 KeReadStateMutant@4
 599 KeReadStateMutex@4=KeReadStateMutant@4
 600 KeReadStateQueue@4
 601 KeReadStateSemaphore@4
 602 KeReadStateTimer@4
 603 KeRegisterBugCheckCallback@20
 604 KeRegisterBugCheckReasonCallback@16
 605 @KeReleaseGuardedMutexUnsafe@4
 606 @KeReleaseGuardedMutex@4
 607 @KeReleaseInStackQueuedSpinLockFromDpcLevel@4
 608 KeReleaseInterruptSpinLock@8
 609 KeReleaseMutant@16
 610 KeReleaseMutex@8
 611 KeReleaseSemaphore@16
 612 KeReleaseSpinLockFromDpcLevel@4
 613 KeRemoveByKeyDeviceQueue@8
 614 KeRemoveByKeyDeviceQueueIfBusy@8
 615 KeRemoveDeviceQueue@4
 616 KeRemoveEntryDeviceQueue@8
 617 KeRemoveQueue@12
 618 KeRemoveQueueDpc@4
 619 KeRemoveSystemServiceTable@4
 620 KeResetEvent@4
 621 KeRestoreFloatingPointState@4
 622 KeRevertToUserAffinityThread@0
 623 KeRundownQueue@4
 624 KeSaveFloatingPointState@4
 625 KeSaveStateForHibernate
 626 KeServiceDescriptorTable DATA
 627 KeSetAffinityThread@8
 628 KeSetBasePriorityThread@8
 629 KeSetDmaIoCoherency@4
 630 KeSetEvent@12
 631 KeSetEventBoostPriority@8
 632 KeSetIdealProcessorThread@8
 633 KeSetImportanceDpc@8
 634 KeSetKernelStackSwapEnable@4
 635 KeSetPriorityThread@8
 636 KeSetProfileIrql@4
 637 KeSetSystemAffinityThread@4
 638 ;KeSetSwapContextNotifyRoutine
 639 KeSetTargetProcessorDpc@8
 640 ;KeSetThreadSelectNotifyRoutine
 641 KeSetTimeIncrement@8
 642 KeSetTimer@16
 643 KeSetTimerEx@20
 644 @KeSetTimeUpdateNotifyRoutine@4
 645 KeStackAttachProcess@8
 646 KeSynchronizeExecution@12
 647 KeTerminateThread@4
 648 KeTickCount DATA
 649 @KeTryToAcquireGuardedMutex@4
 650 KeUpdateRunTime@8
 651 KeUpdateSystemTime@8
 652 KeUnstackDetachProcess@4
 653 KeUserModeCallback@20
 654 KeWaitForMultipleObjects@32
 655 KeWaitForMutexObject@20=KeWaitForSingleObject@20
 656 KeWaitForSingleObject@20
 657 @KefAcquireSpinLockAtDpcLevel@4
 658 @KefReleaseSpinLockFromDpcLevel@4
 659 ;Kei386EoiHelper
 660 @KiAcquireSpinLock@4
 661 ;KiBugCheckData DATA
 662 KiCoprocessorError@0
 663 KiCheckForKernelApcDelivery@0
 664 KiDeliverApc@12
 665 KiDispatchInterrupt@0
 666 KiEnableTimerWatchdog
 667 KiInterruptDispatch2@8
 668 KiIpiServiceRoutine@8
 669 @KiReleaseSpinLock@4
 670 KiUnexpectedInterrupt@0
 671 ;Kii386SpinOnSpinLock
 672 KiRawTicks DATA
 673 LdrAccessResource@16
 674 LdrEnumResources@20
 675 LdrFindResourceDirectory_U@16
 676 LdrFindResource_U@16
 677 LpcPortObjectType DATA
 678 LpcRequestPort@8
 679 LpcRequestWaitReplyPort@12
 680 LsaCallAuthenticationPackage@28
 681 LsaDeregisterLogonProcess@8
 682 LsaFreeReturnBuffer@4
 683 LsaLogonUser@56
 684 LsaLookupAuthenticationPackage@12
 685 LsaRegisterLogonProcess@12
 686 Mm64BitPhysicalAddress DATA
 687 MmAddPhysicalMemory@8
 688 MmAddVerifierThunks@8
 689 MmAdjustWorkingSetSize@12
 690 MmAdvanceMdl@8
 691 MmAllocateContiguousMemory@12
 692 MmAllocateContiguousMemorySpecifyCache@32
 693 MmAllocateMappingAddress@8
 694 MmAllocateNonCachedMemory@4
 695 MmAllocatePagesForMdl@28
 696 MmBuildMdlForNonPagedPool@4
 697 MmCanFileBeTruncated@8
 698 MmCreateMdl@12
 699 MmCreateSection@32
 700 MmDbgTranslatePhysicalAddress@8
 701 MmDisableModifiedWriteOfSection@4
 702 MmFlushImageSection@8
 703 MmForceSectionClosed@8
 704 MmFreeContiguousMemory@4
 705 MmFreeContiguousMemorySpecifyCache@12
 706 MmFreeMappingAddress@8
 707 MmFreeNonCachedMemory@8
 708 MmFreePagesFromMdl@4
 709 MmGetPhysicalAddress@4
 710 MmGetPhysicalMemoryRanges@0
 711 MmGetSystemRoutineAddress@4
 712 MmGetVirtualForPhysical@8
 713 MmGrowKernelStack@4
 714 MmHighestUserAddress DATA
 715 MmIsAddressValid@4
 716 MmIsDriverVerifying@4
 717 MmIsNonPagedSystemAddressValid@4
 718 MmIsRecursiveIoFault@0
 719 MmIsThisAnNtAsSystem@0
 720 MmIsVerifierEnabled@4
 721 MmLockPagableDataSection@4
 722 MmLockPagableImageSection@4=MmLockPagableDataSection@4
 723 MmLockPagableSectionByHandle@4
 724 MmMapIoSpace@16
 725 MmMapLockedPages@8
 726 MmMapLockedPagesSpecifyCache@24
 727 MmMapLockedPagesWithReservedMapping@16
 728 MmMapMemoryDumpMdl@4
 729 MmMapUserAddressesToPage@12
 730 MmMapVideoDisplay@16
 731 MmMapViewInSessionSpace@12
 732 MmMapViewInSystemSpace@12
 733 MmMapViewOfSection@40
 734 MmMarkPhysicalMemoryAsBad@8
 735 MmMarkPhysicalMemoryAsGood@8
 736 MmPageEntireDriver@4
 737 MmPrefetchPages@8
 738 MmProbeAndLockPages@12
 739 MmProbeAndLockProcessPages@16
 740 MmProbeAndLockSelectedPages@16
 741 MmProtectMdlSystemAddress@8
 742 MmQuerySystemSize@0
 743 MmRemovePhysicalMemory@8
 744 MmResetDriverPaging@4
 745 MmSectionObjectType DATA
 746 MmSecureVirtualMemory@12
 747 MmSetAddressRangeModified@8
 748 MmSetBankedSection@24
 749 MmSizeOfMdl@8
 750 MmSystemRangeStart DATA
 751 MmTrimAllSystemPagableMemory@4
 752 MmUnlockPagableImageSection@4
 753 MmUnlockPages@4
 754 MmUnmapIoSpace@8
 755 MmUnmapLockedPages@8
 756 MmUnmapReservedMapping@12
 757 MmUnmapVideoDisplay@8
 758 MmUnmapViewInSessionSpace@4
 759 MmUnmapViewInSystemSpace@4
 760 MmUnmapViewOfSection@8
 761 MmUnsecureVirtualMemory@4
 762 MmUserProbeAddress DATA
 763 NlsAnsiCodePage DATA
 764 NlsLeadByteInfo DATA
 765 NlsMbCodePageTag DATA
 766 NlsMbOemCodePageTag DATA
 767 NlsOemCodePage DATA
 768 NlsOemLeadByteInfo DATA
 769 NtAddAtom@12
 770 NtAdjustPrivilegesToken@24
 771 NtAlertThread@4
 772 NtAllocateLocallyUniqueId@4
 773 NtAllocateUuids@16
 774 NtAllocateVirtualMemory@24
 775 NtBuildNumber DATA
 776 NtClose@4
 777 NtConnectPort@32
 778 NtCreateEvent@20
 779 NtCreateTimer@16
 780 NtOpenEvent@12
 781 NtCreateFile@44
 782 NtCreateSection@28
 783 NtDeleteAtom@4
 784 NtDeleteFile@4
 785 NtDeviceIoControlFile@40
 786 NtDuplicateObject@28
 787 NtDuplicateToken@24
 788 NtFindAtom@12
 789 NtFreeVirtualMemory@16
 790 NtFsControlFile@40
 791 NtGlobalFlag DATA
 792 NtLockFile@40
 793 NtMakePermanentObject@4
 794 NtMapViewOfSection@40
 795 NtNotifyChangeDirectoryFile@36
 796 NtOpenFile@24
 797 NtOpenProcess@16
 798 NtOpenProcessToken@12
 799 NtOpenProcessTokenEx@16
 800 NtOpenThread@16
 801 NtOpenThreadToken@16
 802 NtOpenThreadTokenEx@20
 803 NtQueryDirectoryFile@44
 804 NtQueryEaFile@36
 805 NtQueryInformationAtom@20
 806 NtQueryInformationFile@20
 807 NtQueryInformationProcess@20
 808 NtQueryInformationThread@20
 809 NtQueryInformationToken@20
 810 NtQueryQuotaInformationFile@36
 811 NtQuerySecurityObject@20
 812 NtQuerySystemInformation@16
 813 NtQuerySystemTime@4
 814 NtQueryVolumeInformationFile@20
 815 NtReadFile@36
 816 NtRequestPort@8
 817 NtRequestWaitReplyPort@12
 818 NtSetEaFile@16
 819 NtSetEvent@8
 820 NtSetInformationFile@20
 821 NtSetInformationProcess@16
 822 NtSetInformationThread@16
 823 NtSetQuotaInformationFile@16
 824 NtSetSecurityObject@12
 825 NtSetVolumeInformationFile@20
 826 NtSetSystemTime@8
 827 NtShutdownSystem@4
 828 NtTraceEvent@16
 829 NtUnlockFile@20
 830 NtVdmControl@8
 831 NtW32Call@20
 832 NtWaitForSingleObject@12
 833 NtWriteFile@36
 834
 835 ;
 836 ; Object Manager
 837 ObAssignSecurity@16
 838 ;ObCheckCreateObjectAccess@28
 839 ;ObCheckObjectAccess@20
 840 ObCloseHandle@8
 841 ObCreateObject@36
 842 ObCreateObjectType@16
 843 ObDereferenceObject@4
 844 ObDereferenceObjectDeferDelete@4
 845 ObDereferenceSecurityDescriptor@8
 846 @ObfDereferenceObject@4
 847 ObFindHandleForObject@20
 848 @ObfReferenceObject@4
 849 ObGetObjectSecurity@12
 850 ObInsertObject@24
 851 ObIsKernelHandle@4
 852 ObLogSecurityDescriptor@12
 853 ObMakeTemporaryObject@4
 854 ObOpenObjectByName@28
 855 ObOpenObjectByPointer@28
 856 ObQueryNameString@16
 857 ObQueryObjectAuditingByHandle@8
 858 ObReferenceObjectByHandle@24
 859 ObReferenceObjectByName@32
 860 ObReferenceObjectByPointer@16
 861 ;ObReferenceSecurityDescriptor@8
 862 ObReleaseObjectSecurity@8
 863 ;ObSetHandleAttributes@12
 864 ;ObSetSecurityDescriptorInfo@24
 865 ;ObSetSecurityObjectByPointer@12
 866
 867 ;
 868 ;
 869 ;
 870 ;PfxFindPrefix
 871 ;PfxInitialize
 872 ;PfxInsertPrefix
 873 ;PfxRemovePrefix
 874 PoCallDriver@8
 875 PoQueueShutdownWorkItem@4
 876 PoRegisterDeviceForIdleDetection@16
 877 PoRegisterSystemState@8
 878 PoRequestPowerIrp@24
 879 PoSetDeviceBusy@4
 880 PoSetPowerState@12
 881 PoSetSystemState@4
 882 PoStartNextPowerIrp@4
 883 PoUnregisterSystemState@4
 884 ProbeForRead@12
 885 ProbeForWrite@12
 886 PsAssignImpersonationToken@8
 887 PsChargePoolQuota@12
 888 PsChargeProcessNonPagedPoolQuota@4=PsDereferenceImpersonationToken@4
 889 PsChargeProcessPagedPoolQuota@8
 890 PsChargeProcessPoolQuota@12
 891 PsCreateSystemProcess@12
 892 PsCreateSystemThread@28
 893 PsDereferenceImpersonationToken@4=PsDereferencePrimaryToken@4
 894 PsDereferencePrimaryToken@4
 895 PsDisableImpersonation@8
 896 PsEstablishWin32Callouts@4
 897 PsGetContextThread@12
 898 PsGetCurrentProcess@0=KeGetCurrentProcess@0
 899 PsGetCurrentProcessId@0
 900 PsGetCurrentProcessWin32Process@0
 901 PsGetCurrentProcessSessionId@0
 902 PsGetCurrentThread@0=KeGetCurrentThread@0
 903 PsGetCurrentThreadId@0
 904 PsGetCurrentThreadPreviousMode@0
 905 PsGetCurrentThreadWin32Thread@0
 906 PsGetCurrentThreadStackBase@0
 907 PsGetCurrentThreadStackLimit@0
 908 PsGetJobLock@4
 909 PsGetJobSessionId@4
 910 PsGetJobUIRestrictionsClass@4
 911 PsGetProcessCreateTimeQuadPart@4
 912 PsGetProcessDebugPort@4
 913 PsGetProcessExitProcessCalled@4
 914 PsGetProcessExitStatus@4
 915 PsGetProcessExitTime@0
 916 PsGetProcessId@4
 917 PsGetProcessImageFileName@4
 918 PsGetProcessInheritedFromUniqueProcessId@4
 919 PsGetProcessJob@4
 920 PsGetProcessPeb@4
 921 PsGetProcessPriorityClass@4
 922 PsGetProcessSectionBaseAddress@4
 923 PsGetProcessSecurityPort@4
 924 PsGetProcessSessionId@4
 925 PsGetProcessWin32Process@4
 926 PsGetProcessWin32WindowStation@4
 927 PsGetThreadFreezeCount@4
 928 PsGetThreadHardErrorsAreDisabled@4
 929 PsGetThreadId@4
 930 PsGetThreadProcess@4
 931 PsGetThreadProcessId@4
 932 PsGetThreadSessionId@4
 933 PsGetThreadTeb@4
 934 PsGetThreadWin32Thread@4
 935 PsGetVersion@16
 936 PsImpersonateClient@20
 937 PsInitialSystemProcess DATA
 938 PsIsProcessBeingDebugged@4
 939 PsIsSystemThread@4
 940 PsIsThreadImpersonating@4
 941 PsIsThreadTerminating@4
 942 PsJobType DATA
 943 PsLookupProcessByProcessId@8
 944 PsLookupProcessThreadByCid@12
 945 PsLookupThreadByThreadId@8
 946 PsProcessType DATA
 947 PsReferenceImpersonationToken@16
 948 PsReferencePrimaryToken@4
 949 PsRemoveCreateThreadNotifyRoutine@4
 950 PsRemoveLoadImageNotifyRoutine@4
 951 PsRestoreImpersonation@8
 952 PsReturnPoolQuota@12
 953 PsReturnProcessNonPagedPoolQuota@8
 954 PsReturnProcessPagedPoolQuota@8
 955 PsRevertToSelf@0
 956 PsRevertThreadToSelf@4
 957 PsSetContextThread@12
 958 PsSetCreateProcessNotifyRoutine@8
 959 PsSetCreateThreadNotifyRoutine@4
 960 PsSetJobUIRestrictionsClass@8
 961 PsSetLegoNotifyRoutine@4
 962 PsSetProcessPriorityClass@8
 963 PsSetProcessPriorityByClass@8
 964 PsSetProcessSecurityPort@8
 965 PsSetProcessWin32Process@8
 966 PsSetProcessWindowStation@8
 967 PsSetThreadHardErrorsAreDisabled@8
 968 PsSetThreadWin32Thread@8
 969 PsSetLoadImageNotifyRoutine@4
 970 PsTerminateSystemThread@4
 971 PsThreadType DATA
 972 READ_REGISTER_UCHAR@4
 973 READ_REGISTER_ULONG@4
 974 READ_REGISTER_USHORT@4
 975 READ_REGISTER_BUFFER_UCHAR@12
 976 READ_REGISTER_BUFFER_ULONG@12
 977 READ_REGISTER_BUFFER_USHORT@12
 978 KiRosPrintAddress@4
 979 KeRosDumpStackFrames@8
 980 KeRosGetStackFrames@8
 981 RtlAbsoluteToSelfRelativeSD@12
 982 RtlAddAccessAllowedAce@16
 983 RtlAddAce@20
 984 RtlAddAtomToAtomTable@12
 985 RtlAddRange@36
 986 ;RtlAllocateAndInitializeSid
 987 RtlAllocateHeap@12
 988 RtlAnsiCharToUnicodeChar@4
 989 RtlAnsiStringToUnicodeSize@4=RtlxAnsiStringToUnicodeSize@4
 990 RtlAnsiStringToUnicodeString@12
 991 RtlAppendAsciizToString@8
 992 RtlAppendStringToString@8
 993 RtlAppendUnicodeStringToString@8
 994 RtlAppendUnicodeToString@8
 995 RtlAreAllAccessesGranted@8
 996 RtlAreAnyAccessesGranted@8
 997 RtlAreBitsClear@12
 998 RtlAreBitsSet@12
 999 RtlAssert@16
1000 RtlCaptureContext@4
1001 RtlCaptureStackBackTrace@16
1002 RtlCharToInteger@12
1003 RtlCheckRegistryKey@8
1004 RtlClearAllBits@4
1005 RtlClearBit@8
1006 RtlClearBits@12
1007 RtlCompareMemory@12
1008 RtlCompareMemoryUlong@12
1009 RtlCompareString@12
1010 RtlCompareUnicodeString@12
1011 RtlCompressBuffer@32
1012 RtlCompressChunks@28
1013 RtlConvertLongToLargeInteger@4
1014 RtlConvertSidToUnicodeString@12
1015 RtlConvertUlongToLargeInteger@4
1016 RtlCopyLuid@8
1017 RtlCopyRangeList@8
1018 RtlCopySid@12
1019 RtlCopyString@8
1020 RtlCopyUnicodeString@8
1021 RtlCreateAcl@12
1022 RtlCreateAtomTable@8
1023 RtlCreateHeap@24
1024 RtlCreateRegistryKey@8
1025 RtlCreateSecurityDescriptor@8
1026 RtlCreateSystemVolumeInformationFolder@4
1027 RtlCreateUnicodeString@8
1028 RtlCustomCPToUnicodeN@24
1029 RtlDecompressBuffer@24
1030 RtlDecompressChunks@28
1031 RtlDecompressFragment@32
1032 RtlDelete@4
1033 RtlDeleteAce@8
1034 RtlDeleteAtomFromAtomTable@8
1035 RtlDeleteElementGenericTable@8
1036 RtlDeleteElementGenericTableAvl@8
1037 RtlDeleteNoSplay@8
1038 RtlDeleteOwnersRanges@8
1039 RtlDeleteRange@24
1040 RtlDeleteRegistryValue@12
1041 RtlDescribeChunk@20
1042 RtlDestroyAtomTable@4
1043 RtlDestroyHeap@4
1044 RtlDowncaseUnicodeString@12
1045 RtlDuplicateUnicodeString@12
1046 RtlEmptyAtomTable@8
1047 RtlEnlargedIntegerMultiply@8
1048 RtlEnlargedUnsignedDivide@16
1049 RtlEnlargedUnsignedMultiply@8
1050 RtlEnumerateGenericTable@8
1051 RtlEnumerateGenericTableAvl@8
1052 RtlEnumerateGenericTableLikeADirectory@28
1053 RtlEnumerateGenericTableWithoutSplaying@8
1054 RtlEnumerateGenericTableWithoutSplayingAvl@8
1055 RtlEqualLuid@8
1056 RtlEqualSid@8
1057 RtlEqualString@12
1058 RtlEqualUnicodeString@12
1059 RtlExtendedIntegerMultiply@12
1060 RtlExtendedLargeIntegerDivide@16
1061 RtlExtendedMagicDivide@20
1062 RtlFillMemory@12
1063 RtlFillMemoryUlong@12
1064 RtlFindClearBits@12
1065 RtlFindClearBitsAndSet@12
1066 RtlFindClearRuns@16
1067 RtlFindFirstRunClear@8
1068 RtlFindFirstRunSet@8
1069 RtlFindLastBackwardRunClear@12
1070 RtlFindLeastSignificantBit@8
1071 RtlFindLongestRunClear@8
1072 RtlFindLongestRunSet@8
1073 RtlFindMessage@20
1074 RtlFindMostSignificantBit@8
1075 RtlFindNextForwardRunClear@12
1076 RtlFindRange@48
1077 RtlFindSetBits@12
1078 RtlFindSetBitsAndClear@12
1079 RtlFindUnicodePrefix@12
1080 RtlFormatCurrentUserKeyPath@4
1081 RtlFreeAnsiString@4
1082 RtlFreeHeap@12
1083 RtlFreeRangeList@4
1084 RtlFreeOemString@4
1085 RtlFreeUnicodeString@4
1086 RtlGUIDFromString@8
1087 RtlGenerate8dot3Name@16
1088 RtlGetAce@12
1089 RtlGetCallersAddress@8
1090 RtlGetCompressionWorkSpaceSize@12
1091 RtlGetDaclSecurityDescriptor@16
1092 RtlGetDefaultCodePage@8
1093 RtlGetElementGenericTable@8
1094 RtlGetElementGenericTableAvl@8
1095 RtlGetFirstRange@12
1096 RtlGetGroupSecurityDescriptor@12
1097 RtlGetNextRange@12
1098 RtlGetNtGlobalFlags@0
1099 RtlGetOwnerSecurityDescriptor@12
1100 RtlGetSaclSecurityDescriptor@16
1101 RtlGetSetBootStatusData@24
1102 RtlGetVersion@4
1103 RtlHashUnicodeString@16
1104 RtlImageNtHeader@4
1105 RtlImageDirectoryEntryToData@16
1106 RtlInitAnsiString@8
1107 RtlInitCodePageTable@8
1108 RtlInitString@8
1109 RtlInitUnicodeString@8
1110 RtlInitializeBitMap@12
1111 RtlInitializeGenericTable@20
1112 RtlInitializeGenericTableAvl@20
1113 RtlInitializeRangeList@4
1114 RtlInitializeSid@12
1115 RtlInitializeUnicodePrefix@4
1116 RtlInsertElementGenericTable@16
1117 RtlInsertElementGenericTableAvl@16
1118 RtlInsertElementGenericTableFull@24
1119 RtlInsertElementGenericTableFullAvl@24
1120 RtlInsertUnicodePrefix@12
1121 RtlInt64ToUnicodeString@16
1122 RtlIntegerToChar@16
1123 RtlIntegerToUnicode@16
1124 RtlIntegerToUnicodeString@12
1125 RtlInvertRangeList@8
1126 RtlIpv4AddressToStringA@8
1127 RtlIpv4AddressToStringExA@16
1128 RtlIpv4AddressToStringExW@16
1129 RtlIpv4AddressToStringW@8
1130 RtlIpv4StringToAddressA@16
1131 RtlIpv4StringToAddressExA@16
1132 RtlIpv4StringToAddressExW@16
1133 RtlIpv4StringToAddressW@16
1134 RtlIpv6AddressToStringA@8
1135 RtlIpv6AddressToStringExA@20
1136 RtlIpv6AddressToStringExW@20
1137 RtlIpv6AddressToStringW@8
1138 RtlIpv6StringToAddressA@12
1139 RtlIpv6StringToAddressExA@16
1140 RtlIpv6StringToAddressExW@16
1141 RtlIpv6StringToAddressW@12
1142 RtlIsGenericTableEmpty@4
1143 RtlIsGenericTableEmptyAvl@4
1144 RtlIsNameLegalDOS8Dot3@12
1145 RtlIsRangeAvailable@40
1146 RtlIsValidOemCharacter@4
1147 RtlLargeIntegerAdd@16
1148 RtlLargeIntegerArithmeticShift@12
1149 RtlLargeIntegerDivide@20
1150 RtlLargeIntegerNegate@8
1151 RtlLargeIntegerShiftLeft@12
1152 RtlLargeIntegerShiftRight@12
1153 RtlLargeIntegerSubtract@16
1154 RtlLengthRequiredSid@4
1155 RtlLengthSecurityDescriptor@4
1156 RtlLengthSid@4
1157 RtlLockBootStatusData@4
1158 RtlLookupAtomInAtomTable@12
1159 RtlLookupElementGenericTable@8
1160 RtlLookupElementGenericTableAvl@8
1161 RtlLookupElementGenericTableFull@16
1162 RtlLookupElementGenericTableFullAvl@16
1163 RtlMapGenericMask@8
1164 RtlMapSecurityErrorToNtStatus@4
1165 RtlMergeRangeLists@16
1166 RtlMoveMemory@12
1167 RtlMultiByteToUnicodeN@20
1168 RtlMultiByteToUnicodeSize@12
1169 RtlNextUnicodePrefix@8
1170 RtlNtStatusToDosError@4
1171 RtlNtStatusToDosErrorNoTeb@4
1172 RtlNumberGenericTableElements@4
1173 RtlNumberGenericTableElementsAvl@4
1174 RtlNumberOfClearBits@4
1175 RtlNumberOfSetBits@4
1176 RtlOemStringToCountedUnicodeString@12
1177 RtlOemStringToUnicodeSize@4=RtlxOemStringToUnicodeSize@4
1178 RtlOemStringToUnicodeString@12
1179 RtlOemToUnicodeN@20
1180 RtlPinAtomInAtomTable@8
1181 @RtlPrefetchMemoryNonTemporal@8
1182 RtlPrefixString@12
1183 RtlPrefixUnicodeString@12
1184 RtlQueryAtomInAtomTable@24
1185 RtlQueryRegistryValues@20
1186 RtlQueryTimeZoneInformation@4
1187 RtlRaiseException@4
1188 RtlRandom@4
1189 RtlRandomEx@4
1190 RtlRealPredecessor@4
1191 RtlRealSuccessor@4
1192 RtlRemoveUnicodePrefix@8
1193 RtlReserveChunk@20
1194 RtlSecondsSince1970ToTime@8
1195 RtlSecondsSince1980ToTime@8
1196 RtlSelfRelativeToAbsoluteSD2@8
1197 RtlSelfRelativeToAbsoluteSD@44
1198 RtlSetAllBits@4
1199 RtlSetBit@8
1200 RtlSetBits@12
1201 RtlSetDaclSecurityDescriptor@16
1202 RtlSetGroupSecurityDescriptor@12
1203 RtlSetOwnerSecurityDescriptor@12
1204 RtlSetSaclSecurityDescriptor@16
1205 RtlSetTimeZoneInformation@4
1206 RtlSizeHeap@12
1207 RtlSplay@4
1208 RtlStringFromGUID@8
1209 RtlSubAuthorityCountSid@4
1210 RtlSubAuthoritySid@8
1211 RtlSubtreePredecessor@4
1212 RtlSubtreeSuccessor@4
1213 RtlTestBit@8
1214 RtlTimeFieldsToTime@8
1215 RtlTimeToElapsedTimeFields@8
1216 RtlTimeToSecondsSince1970@8
1217 RtlTimeToSecondsSince1980@8
1218 RtlTimeToTimeFields@8
1219 @RtlUlongByteSwap@4
1220 @RtlUlonglongByteSwap@8
1221 RtlUnicodeStringToAnsiSize@4=RtlxUnicodeStringToAnsiSize@4
1222 RtlUnicodeStringToAnsiString@12
1223 RtlUnicodeStringToCountedOemString@12
1224 RtlUnicodeStringToInteger@12
1225 RtlUnicodeStringToOemSize@4=RtlxUnicodeStringToOemSize@4
1226 RtlUnicodeStringToOemString@12
1227 RtlUnicodeToCustomCPN@24
1228 RtlUnicodeToMultiByteN@20
1229 RtlUnicodeToMultiByteSize@12
1230 RtlUnicodeToOemN@20
1231 RtlUnlockBootStatusData@4
1232 RtlUnwind@16
1233 RtlUpcaseUnicodeChar@4
1234 RtlUpcaseUnicodeString@12
1235 RtlUpcaseUnicodeStringToAnsiString@12
1236 RtlUpcaseUnicodeStringToCountedOemString@12
1237 RtlUpcaseUnicodeStringToOemString@12
1238 RtlUpcaseUnicodeToCustomCPN@24
1239 RtlUpcaseUnicodeToMultiByteN@20
1240 RtlUpcaseUnicodeToOemN@20
1241 RtlUpperChar@4
1242 RtlUpperString@8
1243 @RtlUshortByteSwap@4
1244 RtlValidRelativeSecurityDescriptor@12
1245 RtlValidSecurityDescriptor@4
1246 RtlValidSid@4
1247 RtlVerifyVersionInfo@16
1248 RtlVolumeDeviceToDosName@8
1249 RtlWalkFrameChain@12
1250 RtlWriteRegistryValue@24
1251 RtlZeroHeap@8
1252 RtlZeroMemory@8
1253 RtlxAnsiStringToUnicodeSize@4
1254 RtlxOemStringToUnicodeSize@4
1255 RtlxUnicodeStringToAnsiSize@4
1256 RtlxUnicodeStringToOemSize@4
1257 SeAccessCheck@40
1258 SeAppendPrivileges@8
1259 SeAssignSecurity@28
1260 SeAssignSecurityEx@36
1261 SeAuditHardLinkCreation@12
1262 SeAuditingFileEvents@8
1263 SeAuditingFileEventsWithContext@12
1264 SeAuditingFileOrGlobalEvents@12
1265 SeAuditingHardLinkEvents@8
1266 SeAuditingHardLinkEventsWithContext@12
1267 SeCaptureSecurityDescriptor@20
1268 SeCaptureSubjectContext@4
1269 SeCloseObjectAuditAlarm@12
1270 SeCreateAccessState@16
1271 SeCreateClientSecurity@16
1272 SeCreateClientSecurityFromSubjectContext@16
1273 SeDeassignSecurity@4
1274 SeDeleteAccessState@4
1275 SeDeleteObjectAuditAlarm@8
1276 SeExports DATA
1277 SeFilterToken@24
1278 SeFreePrivileges@4
1279 SeImpersonateClient@8
1280 SeImpersonateClientEx@8
1281 SeLockSubjectContext@4
1282 SeMarkLogonSessionForTerminationNotification@4
1283 SeOpenObjectAuditAlarm@36
1284 SeOpenObjectForDeleteAuditAlarm@36
1285 SePrivilegeCheck@12
1286 SePrivilegeObjectAuditAlarm@24
1287 SePublicDefaultDacl DATA
1288 SeQueryAuthenticationIdToken@8
1289 SeQueryInformationToken@12
1290 SeQuerySecurityDescriptorInfo@16
1291 SeQuerySessionIdToken@8
1292 SeRegisterLogonSessionTerminatedRoutine@4
1293 SeReleaseSecurityDescriptor@12
1294 SeReleaseSubjectContext@4
1295 SeSetAccessStateGenericMapping@8
1296 SeSetSecurityDescriptorInfo@24
1297 SeSetSecurityDescriptorInfoEx@28
1298 SeSinglePrivilegeCheck@12
1299 SeSystemDefaultDacl DATA
1300 SeTokenImpersonationLevel@4
1301 SeTokenIsAdmin@4
1302 SeTokenIsRestricted@4
1303 SeTokenIsWriteRestricted@4
1304 SeTokenType@4
1305 SeUnlockSubjectContext@4
1306 SeUnregisterLogonSessionTerminatedRoutine@4
1307 SeValidSecurityDescriptor@8
1308 VerSetConditionMask@16
1309 WRITE_REGISTER_UCHAR@8
1310 WRITE_REGISTER_ULONG@8
1311 WRITE_REGISTER_USHORT@8
1312 WRITE_REGISTER_BUFFER_UCHAR@12
1313 WRITE_REGISTER_BUFFER_ULONG@12
1314 WRITE_REGISTER_BUFFER_USHORT@12
1315 ZwAccessCheckAndAuditAlarm@44
1316 ZwAddBootEntry@8
1317 ZwAdjustPrivilegesToken@24
1318 ZwAlertThread@4
1319 ZwAllocateVirtualMemory@24
1320 ZwAssignProcessToJobObject@8
1321 ZwCancelIoFile@8
1322 ZwCancelTimer@8
1323 ZwClearEvent@4
1324 ZwClose@4
1325 ZwCloseObjectAuditAlarm@12
1326 ZwConnectPort@32
1327 ZwCreateDirectoryObject@12
1328 ZwCreateEvent@20
1329 ZwCreateFile@44
1330 ZwCreateJobObject@12
1331 ZwCreateKey@28
1332 ZwCreateSection@28
1333 ZwCreateSymbolicLinkObject@16
1334 ZwCreateTimer@16
1335 ZwDeleteBootEntry@8
1336 ZwDeleteFile@4
1337 ZwDeleteKey@4
1338 ZwDeleteValueKey@8
1339 ZwDeviceIoControlFile@40
1340 ZwDisplayString@4
1341 ZwDuplicateObject@28
1342 ZwDuplicateToken@24
1343 ZwEnumerateBootEntries@8
1344 ZwEnumerateKey@24
1345 ZwEnumerateValueKey@24
1346 ZwFlushInstructionCache@12
1347 ZwFlushKey@4
1348 ZwFlushVirtualMemory@16
1349 ZwFreeVirtualMemory@16
1350 ZwFsControlFile@40
1351 ZwInitiatePowerAction@16
1352 ZwIsProcessInJob@8
1353 ZwLoadDriver@4
1354 ZwLoadKey@8
1355 ZwMakeTemporaryObject@4
1356 ZwMapViewOfSection@40
1357 ZwNotifyChangeKey@40
1358 ZwOpenDirectoryObject@12
1359 ZwOpenEvent@12
1360 ZwOpenFile@24
1361 ZwOpenJobObject@12
1362 ZwOpenKey@12
1363 ZwOpenProcess@16
1364 ZwOpenProcessToken@12
1365 ZwOpenProcessTokenEx@16
1366 ZwOpenSection@12
1367 ZwOpenSymbolicLinkObject@12
1368 ZwOpenThread@16
1369 ZwOpenThreadToken@16
1370 ZwOpenThreadTokenEx@20
1371 ZwOpenTimer@12
1372 ZwPowerInformation@20
1373 ZwPulseEvent@8
1374 ZwQueryBootEntryOrder@8
1375 ZwQueryBootOptions@8
1376 ZwQueryDefaultLocale@8
1377 ZwQueryDefaultUILanguage@4
1378 ZwQueryDirectoryFile@44
1379 ZwQueryDirectoryObject@28
1380 ZwQueryEaFile@36
1381 ZwQueryFullAttributesFile@8
1382 ZwQueryInformationAtom@20
1383 ZwQueryInformationFile@20
1384 ZwQueryInformationJobObject@20
1385 ZwQueryInformationProcess@20
1386 ZwQueryInformationThread@20
1387 ZwQueryInformationToken@20
1388 ZwQueryInstallUILanguage@4
1389 ZwQueryKey@20
1390 ZwQueryObject@20
1391 ZwQuerySection@20
1392 ZwQuerySecurityObject@20
1393 ZwQuerySymbolicLinkObject@12
1394 ZwQuerySystemInformation@16
1395 ZwQuerySystemTime@4
1396 ZwQueryValueKey@24
1397 ZwQueryVolumeInformationFile@20
1398 ZwReadFile@36
1399 ZwReplaceKey@12
1400 ZwRequestWaitReplyPort@12
1401 ZwResetEvent@8
1402 ZwRestoreKey@12
1403 ZwSaveKey@8
1404 ZwSaveKeyEx@12
1405 ZwSetBootEntryOrder@8
1406 ZwSetBootOptions@8
1407 ZwSetDefaultLocale@8
1408 ZwSetDefaultUILanguage@4
1409 ZwSetEaFile@16
1410 ZwSetEvent@8
1411 ZwSetInformationFile@20
1412 ZwSetInformationJobObject@16
1413 ZwSetInformationObject@16
1414 ZwSetInformationProcess@16
1415 ZwSetInformationThread@16
1416 ZwSetSecurityObject@12
1417 ZwSetSystemInformation@12
1418 ZwSetSystemTime@8
1419 ZwSetTimer@28
1420 ZwSetValueKey@24
1421 ZwSetVolumeInformationFile@20
1422 ZwTerminateJobObject@8
1423 ZwTerminateProcess@8
1424 ZwTranslateFilePath@12
1425 ZwUnloadDriver@4
1426 ZwUnloadKey@4
1427 ZwUnmapViewOfSection@8
1428 ZwWaitForMultipleObjects@20
1429 ZwWaitForSingleObject@12
1430 ZwWriteFile@36
1431 ZwYieldExecution@0
1432 _abnormal_termination
1433 _alldiv
1434 _allmul
1435 _alloca_probe
1436 _allrem
1437 _allshl
1438 _allshr
1439 _alldvrm
1440 _aulldiv
1441 _aulldvrm
1442 _aullrem
1443 _aullshr
1444 _except_handler2
1445 _except_handler3
1446 _global_unwind2
1447 _itoa
1448 _itow
1449 _local_unwind2
1450 _purecall
1451 _snprintf
1452 _snwprintf
1453 _stricmp
1454 _strlwr
1455 _strnicmp
1456 _strnset
1457 _strrev
1458 _strset
1459 _strupr
1460 _vsnprintf
1461 _vsnwprintf
1462 _wcsicmp
1463 _wcslwr
1464 _wcsnicmp
1465 _wcsnset
1466 _wcsrev
1467 _wcsupr
1468 atoi
1469 atol
1470 isdigit
1471 islower
1472 isprint
1473 isspace
1474 isupper
1475 isxdigit
1476 mbstowcs
1477 mbtowc
1478 memchr
1479 memcpy
1480 memmove
1481 memset
1482 qsort
1483 rand
1484 sprintf
1485 srand
1486 strcat
1487 strchr
1488 strcmp
1489 strcpy
1490 strlen
1491 strncat
1492 strncmp
1493 strncpy
1494 strrchr
1495 strspn
1496 strstr
1497 swprintf
1498 tolower
1499 toupper
1500 towlower
1501 towupper
1502 vsprintf
1503 wcscat
1504 wcschr
1505 wcscmp
1506 wcscpy
1507 wcscspn
1508 wcslen
1509 wcsncat
1510 wcsncmp
1511 wcsncpy
1512 wcsrchr
1513 wcsspn
1514 wcsstr
1515 wcstombs
1516 wctomb