1 ; $Id: ntoskrnl.def,v 1.99 2001/03/01 15:36:34 ekohl Exp $
3 ; reactos/ntoskrnl/ntoskrnl.def
5 ; ReactOS Operating System
8 CcInitializeFileCache@12
10 CcRequestCacheSegment@20
11 CcReleaseCacheSegment@12
14 DbgBreakPointWithStatus@4
15 ;DbgLoadImageSymbols@12
18 ExAcquireFastMutexUnsafe@4
19 ExAcquireResourceExclusive@8
20 ExAcquireResourceExclusiveLite@8
21 ExAcquireResourceSharedLite@8
22 ExAcquireSharedStarveExclusive@8
23 ExAcquireSharedWaitForExclusive@8
24 ExAllocateFromPagedLookasideList@4
26 ExAllocatePoolWithQuota@8
27 ExAllocatePoolWithQuotaTag@12
28 ExAllocatePoolWithTag@12
29 ExConvertExclusiveToSharedLite@4
31 ExDeleteNPagedLookasideList@4
32 ExDeletePagedLookasideList@4
34 ExDeleteResourceLite@4
35 ExDesktopObjectType DATA
36 ExDisableResourceBoostLite@4
37 ExEventObjectType DATA
40 ExFreeToPagedLookasideList@8
41 ExGetExclusiveWaiterCount@4
43 ExGetSharedWaiterCount@4
44 ExInitializeNPagedLookasideList
45 ExInitializePagedLookasideList
46 ExInitializeResource@4
47 ExInitializeResourceLite@4
49 ExInterlockedAddLargeInteger@16
50 ;@ExInterlockedAddLargeStatistic@8
51 ExInterlockedAddLargeStatistic@8
52 ExInterlockedAddUlong@12
53 ;@ExInterlockedCompareExchange64@16
54 ExInterlockedCompareExchange64@16
55 ExInterlockedDecrementLong@8
56 ExInterlockedExchangeUlong@12
57 ExInterlockedExtendZone@16
58 ExInterlockedIncrementLong@8
59 ExInterlockedInsertHeadList@12
60 ExInterlockedInsertTailList@12
61 ExInterlockedPopEntryList@8
62 ExInterlockedPopEntrySList@8
63 ExInterlockedPushEntryList@12
64 ExInterlockedPushEntrySList@12
65 ExInterlockedRemoveHeadList@8
66 ExIsProcessorFeaturePresent@4
67 ExIsResourceAcquiredExclusiveLite@4
68 ExIsResourceAcquiredSharedLite@4
69 ExLocalTimeToSystemTime@8
74 ExRaiseAccessViolation@0
75 ExRaiseDatatypeMisalignment@0
80 ExReinitializeResourceLite@4
81 ExReleaseFastMutexUnsafe@4
82 ExReleaseResourceForThread@8
83 ExReleaseResourceForThreadLite@8
84 ExReleaseResourceLite@4
85 ExSetResourceOwnerPointer@8
86 ;ExSystemExceptionFilter
87 ExSystemTimeToLocalTime@8
88 ExTryToAcquireResourceExclusiveLite@4
89 ExUnregisterCallback@4
90 ExWindowStationObjectType DATA
91 ;ExfInterlockedAddUlong
92 ;ExfInterlockedInsertHeadList
93 ;ExfInterlockedInsertTailList
94 ;ExfInterlockedPopEntryList
95 ;ExfInterlockedPushEntryList
96 ;ExfInterlockedRemoveHeadList
97 ;Exfi386InterlockedDecrementLong
98 ;Exfi386InterlockedExchangeUlong
99 ;Exfi386InterlockedIncrementLong
100 ;Exi386InterlockedDecrementLong
101 ;Exi386InterlockedExchangeUlong
102 ;Exi386InterlockedIncrementLong
103 FsRtlAddLargeMcbEntry@28
105 FsRtlAddToTunnelCache@32
107 FsRtlAllocatePoolWithQuota@8
108 FsRtlAllocatePoolWithQuotaTag@12
109 FsRtlAllocatePoolWithTag@12
110 FsRtlAllocateResource@0
111 FsRtlAreNamesEqual@16
113 FsRtlCheckLockForReadAccess@8
114 FsRtlCheckLockForWriteAccess@8
118 FsRtlCurrentBatchOplock@4
119 FsRtlDeleteKeyFromTunnelCache@12
120 FsRtlDeleteTunnelCache@4
121 FsRtlDeregisterUncProvider@4
124 FsRtlDoesDbcsContainWildCards@4
125 FsRtlDoesNameContainWildCards@4
126 FsRtlFastCheckLockForRead@24
127 FsRtlFastCheckLockForWrite@24
128 FsRtlFastUnlockAll@16
129 FsRtlFastUnlockAllByKey@20
130 FsRtlFastUnlockSingle@32
131 FsRtlFindInTunnelCache@32
133 FsRtlGetNextFileLock@8
134 FsRtlGetNextLargeMcbEntry@20
135 FsRtlGetNextMcbEntry@20
136 FsRtlInitializeFileLock@12
137 FsRtlInitializeLargeMcb@8
139 FsRtlInitializeOplock@4
140 FsRtlInitializeTunnelCache@4
141 FsRtlIsDbcsInExpression@8
142 FsRtlIsFatDbcsLegal@20
143 FsRtlIsHpfsDbcsLegal@20
144 FsRtlIsNameInExpression@16
145 FsRtlIsNtstatusExpected@4
146 FsRtlIsTotalDeviceFailure@4
147 FsRtlLegalAnsiCharacterArray DATA
148 FsRtlLookupLargeMcbEntry@32
149 FsRtlLookupLastLargeMcbEntry@12
150 FsRtlLookupLastMcbEntry@12
151 FsRtlLookupMcbEntry@20
153 FsRtlMdlReadComplete@8
154 FsRtlMdlReadCompleteDev@12
156 FsRtlMdlWriteComplete@12
157 FsRtlMdlWriteCompleteDev@16
158 FsRtlNormalizeNtstatus@8
159 FsRtlNotifyChangeDirectory@28
160 FsRtlNotifyCleanup@12
161 FsRtlNotifyFullChangeDirectory@40
162 FsRtlNotifyFullReportChange@36
163 FsRtlNotifyInitializeSync@4
164 FsRtlNotifyReportChange@20
165 FsRtlNotifyUninitializeSync@4
166 FsRtlNumberOfRunsInLargeMcb@4
167 FsRtlNumberOfRunsInMcb@4
169 FsRtlOplockIsFastIoPossible@4
170 FsRtlPostPagingFileStackOverflow@12
171 FsRtlPostStackOverflow@12
172 FsRtlPrepareMdlWrite@24
173 FsRtlPrepareMdlWriteDev@28
175 FsRtlProcessFileLock@12
176 FsRtlRegisterUncProvider@12
177 FsRtlRemoveLargeMcbEntry@20
178 FsRtlRemoveMcbEntry@12
179 FsRtlSplitLargeMcb@20
181 FsRtlTruncateLargeMcb@12
183 FsRtlUninitializeFileLock@4
184 FsRtlUninitializeLargeMcb@4
185 FsRtlUninitializeMcb@4
186 FsRtlUninitializeOplock@4
187 HalDispatchTable DATA
188 HalPrivateDispatchTable DATA
189 ;@InterlockedCompareExchange@12
190 InterlockedCompareExchange@12
191 ;@InterlockedDecrement@4
192 InterlockedDecrement@4
193 ;@InterlockedExchange@8
194 InterlockedExchange@8
195 ;@InterlockedExchangeAdd@8
196 InterlockedExchangeAdd@8
197 ;@InterlockedIncrement@4
198 InterlockedIncrement@4
199 IoAcquireCancelSpinLock@4
200 IoAcquireVpbSpinLock@4
201 IoAdapterObjectType DATA
202 IoAllocateAdapterChannel@20
203 IoAllocateController@16
204 IoAllocateErrorLogEntry@8
209 IoAttachDeviceByPointer@8
210 IoAttachDeviceToDeviceStack@8
211 IoBuildAsynchronousFsdRequest@24
212 IoBuildDeviceIoControlRequest@36
214 IoBuildSynchronousFsdRequest@28
217 IoCheckDesiredAccess@8
218 IoCheckEaBufferValidity@12
219 IoCheckFunctionAccess@24
220 IoCheckShareAccess@20
222 IoConnectInterrupt@44
226 IoCreateNotificationEvent@8
227 IoCreateStreamFileObject@8
228 IoCreateSymbolicLink@8
229 IoCreateSynchronizationEvent@8
230 IoCreateUnprotectedSymbolicLink@8
233 IoDeleteSymbolicLink@4
235 IoDeviceHandlerObjectSize DATA
236 IoDeviceHandlerObjectType DATA
237 IoDisconnectInterrupt@4
238 IoDeviceObjectType DATA
239 IoDriverObjectType DATA
241 IoFastQueryNetworkAttributes@20
242 IoFileObjectType DATA
246 IoGetAttachedDevice@4
247 IoGetBaseFileSystemDeviceObject@4
248 IoGetConfigurationInformation@0
249 IoGetCurrentProcess@0
250 IoGetDeviceObjectPointer@16
251 IoGetDeviceToVerify@4
252 IoGetFileObjectGenericMapping@0
254 IoGetRelatedDeviceObject@4
255 IoGetRequestorProcess@4
260 IoIsOperationSynchronous@4
261 IoMakeAssociatedIrp@8
262 IoOpenDeviceInstanceKey@20
264 IoQueryDeviceDescription@32
265 IoQueryDeviceEnumInfo@8
266 IoQueryFileInformation@20
267 IoQueryVolumeInformation@20
270 IoRaiseInformationalHardError@12
271 IoReadOperationCount DATA
272 IoReadTransferCount DATA
273 IoRegisterDriverReinitialization@12
274 IoRegisterFileSystem@4
275 IoRegisterFsRegistrationChange@8
276 IoRegisterShutdownNotification@4
277 IoReleaseCancelSpinLock@4
278 IoReleaseVpbSpinLock@4
279 IoRemoveShareAccess@8
280 IoReportHalResourceUsage@16
281 IoReportResourceUsage@36
282 IoSetDeviceToVerify@8
283 IoSetHardErrorOrVerifyDevice@8
286 IoSetThreadHardErrorMode@4
289 IoStartNextPacketByKey@12
292 IoStatisticsLock DATA
294 IoSynchronousPageWrite@20
296 IoUnregisterFileSystem@4
297 IoUnregisterFsRegistrationChange@8
298 IoUnregisterShutdownNotification@4
299 IoUpdateShareAccess@8
301 IoWriteErrorLogEntry@4
302 IoWriteOperationCount DATA
303 IoWriteTransferCount DATA
306 ;@IofCompleteRequest@8
308 KdDebuggerEnabled DATA
309 KdDebuggerNotPresent DATA
312 ;Ke386IoSetAccessProcess
313 ;Ke386QueryIoAccessMap
315 KeAcquireSpinLockAtDpcLevel@4
316 KeAddSystemServiceTable@20
318 ;KeBoostCurrentThread
324 ;KeDcacheFlushCount DATA
325 KeDelayExecutionThread@12
326 KeDeregisterBugCheckCallback@4
328 KeDisconnectInterrupt@4
329 KeEnterCriticalRegion@0
330 KeEnterKernelDebugger@0
331 ;KeFindConfigurationEntry
332 ;KeFindConfigurationNextEntry
337 ;KeI386AllocateGdtSelectors
338 ;KeI386Call16BitCStyleFunction
339 ;KeI386Call16BitFunction
340 ;KeI386FlatToGdtSelector
343 ;KeI386ReleaseGdtSelectors
345 ;KeI386SetGdtSelector
346 ;KeIcacheFlushCount DATA
348 KeInitializeDeviceQueue@4
351 KeInitializeInterrupt@44
352 ;KeInitializeMutant@8
355 KeInitializeSemaphore@12
356 KeInitializeSpinLock@4
358 KeInitializeTimerEx@8
359 KeInsertByKeyDeviceQueue@12
360 KeInsertDeviceQueue@8
366 KeLeaveCriticalRegion@0
368 KeNumberProcessors DATA
370 ;KeProfileInterruptWithSource
374 KeQueryTimeIncrement@0
375 ;KeRaiseUserException
380 KeReadStateSemaphore@4
382 KeRegisterBugCheckCallback@20
385 KeReleaseSemaphore@16
386 KeReleaseSpinLockFromDpcLevel@4
387 KeRemoveByKeyDeviceQueue@8
388 KeRemoveDeviceQueue@4
389 ;KeRemoveEntryDeviceQueue
393 ;KeRestoreFloatingPointState
395 ;KeSaveFloatingPointState
396 KeServiceDescriptorTable DATA
398 KeSetBasePriorityThread@8
401 ;KeSetEventBoostPriority
402 ;KeSetIdealProcessorThread
404 ;KeSetKernelStackSwapEnable
405 KeSetPriorityThread@8
407 ;KeSetSwapContextNotifyRoutine
408 KeSetTargetProcessorDpc@8
409 ;KeSetThreadSelectNotifyRoutine
413 ;KeSetTimeUpdateNotifyRoutine
414 KeSynchronizeExecution@12
419 KeWaitForMultipleObjects@32
420 KeWaitForMutexObject@20
421 KeWaitForSingleObject@20
422 ;KefAcquireSpinLockAtDpcLevel
423 ;KefReleaseSpinLockFromDpcLevel
427 ;KiCoprocessorError@0
429 KiDispatchInterrupt@0
430 ;KiIpiServiceRoutine@8
432 ;KiUnexpectedInterrupt
433 ;Kii386SpinOnSpinLock
436 ;LdrFindResourceDirectory_U@16
439 ;LsaCallAuthenticationPackage
440 ;LsaDeregisterLogonProcess
443 ;LsaLookupAuthenticationPackage
444 ;LsaRegisterLogonProcess
445 MmAdjustWorkingSetSize@12
446 MmAllocateContiguousMemory@12
447 MmAllocateNonCachedMemory@4
448 MmBuildMdlForNonPagedPool@4
449 MmCanFileBeTruncated@8
452 MmDbgTranslatePhysicalAddress@8
453 MmDisableModifiedWriteOfSection@4
454 MmFlushImageSection@8
455 MmForceSectionClosed@8
456 MmFreeContiguousMemory@4
457 MmFreeNonCachedMemory@8
458 MmGetPhysicalAddress@4
460 MmHighestUserAddress DATA
462 MmIsNonPagedSystemAddressValid@4
463 MmIsRecursiveIoFault@0
464 MmIsThisAnNtAsSystem@0
465 MmLockPagableDataSection@4
466 MmLockPagableImageSection@4=MmLockPagableDataSection@4
467 MmLockPagableSectionByHandle@4
472 MmMapViewInSystemSpace@12
473 MmMapViewOfSection@40
475 MmProbeAndLockPages@12
477 MmResetDriverPaging@4
478 MmSectionObjectType DATA
479 MmSecureVirtualMemory@12
480 MmSetAddressRangeModified@8
481 MmSetBankedSection@24
483 MmUnlockPagableImageSection@4
487 MmUnmapVideoDisplay@8
488 MmUnmapViewInSystemSpace@4
489 MmUnmapViewOfSection@8
490 MmUnsecureVirtualMemory@4
491 MmUserProbeAddress DATA
494 NlsMbCodePageTag DATA
495 NlsMbOemCodePageTag DATA
496 NlsOemLeadByteInfo DATA
498 NtAdjustPrivilegesToken@24
499 NtAllocateLocallyUniqueId@4
501 NtAllocateVirtualMemory@24
512 NtDeviceIoControlFile@40
516 NtFreeVirtualMemory@16
520 NtMapViewOfSection@40
521 NtNotifyChangeDirectoryFile@36
524 NtOpenProcessToken@12
525 NtQueryDirectoryFile@44
527 NtQueryInformationAtom@20
528 NtQueryInformationFile@20
529 NtQueryInformationProcess@20
530 NtQueryInformationToken@20
531 ;NtQueryOleDirectoryFile@ <--- ?
532 NtQuerySecurityObject@20
534 NtQueryVolumeInformationFile@20
537 NtRequestWaitReplyPort@12
539 NtSetInformationFile@20
540 NtSetInformationProcess@16
541 NtSetInformationThread@16
542 NtSetSecurityObject@12
545 ;NtVdmControl@8 <--- ?
546 NtWaitForSingleObject@12
549 ;ObCheckCreateObjectAccess@28
550 ;ObCheckObjectAccess@20
553 ObDereferenceObject@4
554 ;ObFindHandleForObject@20
555 ;ObGetObjectPointerCount@4
556 ;ObGetObjectSecurity@12
558 ObMakeTemporaryObject@4
559 ObOpenObjectByName@28
560 ObOpenObjectByPointer@28
561 ;ObQueryNameString@16
562 ;ObQueryObjectAuditingByHandle@8
563 ObReferenceObjectByHandle@24
564 ObReferenceObjectByName@32
565 ObReferenceObjectByPointer@16
566 ;ObReleaseObjectSecurity@8
567 ;ObSetSecurityDescriptorInfo@24
568 ;@ObfDereferenceObject@4
569 ObfDereferenceObject@4
570 ;@ObfReferenceObject@4
572 ObAddEntryDirectory@12
577 PoQueryPowerSequence@0
578 PoRequestPowerChange@12
579 PoSetDeviceIdleDetection@8
581 PsAssignImpersonationToken@8
582 ;PsChargePoolQuota@12
583 ;PsCreateSystemProcess@12
584 PsCreateSystemThread@28
585 ;PsCreateWin32Process@4
586 ;PsEstablishWin32Callouts@24
587 PsGetCurrentProcessId@0
588 PsGetCurrentThreadId@0
590 ;PsGetProcessExitTime@0
592 PsImpersonateClient@20
593 PsInitialSystemProcess DATA
594 ;PsIsThreadTerminating@4
595 ;PsLookupProcessByProcessId@8
596 ;PsLookupProcessThreadByCid@12
597 ;PsLookupThreadByThreadId@8
599 PsReferenceImpersonationToken@16
600 PsReferencePrimaryToken@4
601 ;PsReturnPoolQuota@12
602 ;PsRevertToSelf@0 <-- This is the original size
604 ;PsSetCreateProcessNotifyRoutine@8
605 ;PsSetCreateThreadNotifyRoutine@4
606 ;PsSetLegoNotifyRoutine@4
607 ;PsSetProcessPriorityByClass@8
608 PsTerminateSystemThread@4
610 READ_REGISTER_UCHAR@4
611 READ_REGISTER_ULONG@4
612 READ_REGISTER_USHORT@4
613 READ_REGISTER_BUFFER_UCHAR@12
614 READ_REGISTER_BUFFER_ULONG@12
615 READ_REGISTER_BUFFER_USHORT@12
616 RtlAbsoluteToSelfRelativeSD@12
617 RtlAddAccessAllowedAce@16
619 RtlAddAtomToAtomTable@12
620 ;RtlAllocateAndInitializeSid
622 RtlAnsiCharToUnicodeChar@4
623 RtlAnsiStringToUnicodeSize@4
624 RtlAnsiStringToUnicodeString@12
625 RtlAppendAsciizToString@8
626 RtlAppendStringToString@8
627 RtlAppendUnicodeStringToString@8
628 RtlAppendUnicodeToString@8
629 RtlAreAllAccessesGranted@8
630 RtlAreAnyAccessesGranted@8
634 ;RtlCaptureStackBackTrace
636 RtlCheckRegistryKey@8
640 RtlCompareMemoryUlong@12
642 RtlCompareUnicodeString@12
645 RtlConvertLongToLargeInteger@4
646 RtlConvertSidToUnicodeString@12
647 RtlConvertUlongToLargeInteger@4
651 RtlCopyUnicodeString@8
655 RtlCreateRegistryKey@8
656 RtlCreateSecurityDescriptor@8
657 RtlCreateUnicodeString@8
658 RtlCustomCPToUnicodeN@24
661 ;RtlDecompressFragment
663 RtlDeleteAtomFromAtomTable@8
664 ;RtlDeleteElementGenericTable
666 RtlDeleteRegistryValue@12
668 RtlDestroyAtomTable@4
670 RtlDowncaseUnicodeString@12
672 RtlEnlargedIntegerMultiply@8
673 RtlEnlargedUnsignedDivide@16
674 RtlEnlargedUnsignedMultiply@8
675 ;RtlEnumerateGenericTable
676 ;RtlEnumerateGenericTableWithoutSplaying
680 RtlEqualUnicodeString@12
681 RtlExtendedIntegerMultiply@12
682 RtlExtendedLargeIntegerDivide@16
683 RtlExtendedMagicDivide@20
685 RtlFillMemoryUlong@12
687 RtlFindClearBitsAndSet@12
688 RtlFindFirstRunClear@8
690 RtlFindLongestRunClear@8
691 RtlFindLongestRunSet@8
694 RtlFindSetBitsAndClear@12
695 ;RtlFindUnicodePrefix
696 RtlFormatCurrentUserKeyPath@4
700 RtlFreeUnicodeString@4
701 ;RtlGenerate8dot3Name
702 ;RtlGetCallersAddress
703 ;RtlGetCompressionWorkSpaceSize
704 RtlGetDaclSecurityDescriptor@16
705 RtlGetDefaultCodePage@8
706 ;RtlGetElementGenericTable
707 RtlGetGroupSecurityDescriptor@12
708 RtlGetOwnerSecurityDescriptor@12
711 ;RtlInitCodePageTable
713 RtlInitUnicodeString@8
714 RtlInitializeBitMap@12
715 ;RtlInitializeGenericTable
717 ;RtlInitializeUnicodePrefix
718 ;RtlInsertElementGenericTable
719 ;RtlInsertUnicodePrefix
721 RtlIntegerToUnicodeString@12
722 ;RtlIsNameLegalDOS8Dot3
723 RtlLargeIntegerAdd@16
724 RtlLargeIntegerArithmeticShift@12
725 RtlLargeIntegerDivide@20
726 RtlLargeIntegerNegate@8
727 RtlLargeIntegerShiftLeft@12
728 RtlLargeIntegerShiftRight@12
729 RtlLargeIntegerSubtract@16
730 RtlLengthRequiredSid@4
731 RtlLengthSecurityDescriptor@4
733 RtlLookupAtomInAtomTable@12
734 ;RtlLookupElementGenericTable
737 RtlMultiByteToUnicodeN@20
738 RtlMultiByteToUnicodeSize@12
739 ;RtlNextUnicodePrefix
740 RtlNtStatusToDosError@4
741 RtlNtStatusToDosErrorNoTeb@4
742 ;RtlNumberGenericTableElements
743 RtlNumberOfClearBits@4
745 RtlOemStringToCountedUnicodeString@12
746 RtlOemStringToUnicodeSize@4
747 RtlOemStringToUnicodeString@12
749 RtlPinAtomInAtomTable@8
751 RtlPrefixUnicodeString@12
752 RtlQueryAtomInAtomTable@24
753 RtlQueryRegistryValues@20
754 ;RtlQueryTimeZoneInformation
757 ;RtlRemoveUnicodePrefix
759 RtlSecondsSince1970ToTime@8
760 RtlSecondsSince1980ToTime@8
763 RtlSetDaclSecurityDescriptor@16
764 RtlSetGroupSecurityDescriptor@12
765 RtlSetOwnerSecurityDescriptor@12
766 RtlSetSaclSecurityDescriptor@16
767 ;RtlSetTimeZoneInformation
769 RtlSubAuthorityCountSid@4
771 RtlTimeFieldsToTime@8
772 RtlTimeToSecondsSince1970@8
773 RtlTimeToSecondsSince1980@8
774 RtlTimeToTimeFields@8
775 RtlUnicodeStringToAnsiSize@4
776 RtlUnicodeStringToAnsiString@12
777 RtlUnicodeStringToCountedOemString@12
778 RtlUnicodeStringToInteger@12
779 RtlUnicodeStringToOemSize@4
780 RtlUnicodeStringToOemString@12
781 RtlUnicodeToCustomCPN@24
782 RtlUnicodeToMultiByteN@20
783 RtlUnicodeToMultiByteSize@12
786 RtlUpcaseUnicodeChar@4
787 RtlUpcaseUnicodeString@12
788 RtlUpcaseUnicodeStringToAnsiString@12
789 RtlUpcaseUnicodeStringToCountedOemString@12
790 RtlUpcaseUnicodeStringToOemString@12
791 RtlUpcaseUnicodeToCustomCPN@24
792 RtlUpcaseUnicodeToMultiByteN@20
793 RtlUpcaseUnicodeToOemN@20
796 RtlValidSecurityDescriptor@4
798 RtlWriteRegistryValue@24
801 RtlxAnsiStringToUnicodeSize@4
802 RtlxOemStringToUnicodeSize@4
803 RtlxUnicodeStringToAnsiSize@4
804 RtlxUnicodeStringToOemSize@4
806 ;SeAppendPrivileges@8
808 ;SeAuditingFileEvents@8
809 ;SeAuditingFileOrGlobalEvents@18
810 ;SeCaptureSecurityDescriptor@20
811 SeCaptureSubjectContext@4
812 ;SeCloseObjectAuditAlarm@12
813 ;SeCreateAccessState@16
814 SeCreateClientSecurity@16
816 ;SeDeleteAccessState@4
817 ;SeDeleteObjectAuditAlarm@8
820 SeImpersonateClient@8
821 ;SeLockSubjectContext@4
822 ;SeMarkLogonSessionForTerminationNotification@4
823 ;SeOpenObjectAuditAlarm@36
824 ;SeOpenObjectForDeleteAuditAlarm@36
826 ;SePrivilegeObjectAuditAlarm@24
827 ;SePublicDefaultDacl DATA
828 ;SeQueryAuthenticationIdToken@8
829 ;SeQuerySecurityDescriptorInfo@16
830 ;SeRegisterLogonSessionTerminatedRoutine@4
831 ;SeReleaseSecurityDescriptor@12
832 SeReleaseSubjectContext@4
833 ;SeSetAccessStateGenericMapping@8
834 ;SeSetSecurityDescriptorInfo@24
835 ;SeSinglePrivilegeCheck@12
836 ;SeSystemDefaultDacl DATA
837 ;SeTokenImpersonationLevel@4
839 ;SeUnlockSubjectContext@4
840 ;SeUnregisterLogonSessionTerminatedRoutine@4
841 ;SeValidSecurityDescriptor@8
842 WRITE_REGISTER_UCHAR@8
843 WRITE_REGISTER_ULONG@8
844 WRITE_REGISTER_USHORT@8
845 WRITE_REGISTER_BUFFER_UCHAR@12
846 WRITE_REGISTER_BUFFER_ULONG@12
847 WRITE_REGISTER_BUFFER_USHORT@12
848 ZwAccessCheckAndAuditAlarm@44
850 ZwAllocateVirtualMemory@24
853 ZwCloseObjectAuditAlarm@12
855 ZwCreateDirectoryObject@12
860 ZwCreateSymbolicLinkObject@16
864 ZwDeviceIoControlFile@40
869 ZwEnumerateValueKey@24
870 ZwFlushInstructionCache@12
872 ZwFreeVirtualMemory@16
876 ZwMakeTemporaryObject@4
877 ZwMapViewOfSection@40
879 ZwOpenDirectoryObject@12
884 ZwOpenProcessToken@12
886 ZwOpenSymbolicLinkObject@12
890 ZwQueryDefaultLocale@8
891 ZwQueryDirectoryFile@44
892 ZwQueryInformationAtom@20
893 ZwQueryInformationFile@20
894 ZwQueryInformationProcess@20
895 ZwQueryInformationToken@20
899 ZwQuerySecurityObject@20
900 ZwQuerySymbolicLinkObject@12
901 ZwQuerySystemInformation@16
904 ZwQueryVolumeInformationFile@20
907 ZwRequestWaitReplyPort@12
912 ZwSetInformationFile@20
913 ZwSetInformationObject@16
914 ZwSetInformationProcess@16
915 ZwSetInformationThread@16
916 ZwSetSystemInformation@12
922 ZwUnmapViewOfSection@8
923 ZwWaitForMultipleObjects@20
924 ZwWaitForSingleObject@12
927 ;_abnormal_termination
1008 ; exports from hal.dll
1011 ExAcquireFastMutex@4
1012 ExReleaseFastMutex@4
1013 ExTryToAcquireFastMutex@4
1014 HalAcquireDisplayOwnership@4
1015 HalAdjustResourceList@4
1016 HalAllProcessorsStarted@0
1017 HalAllocateAdapterChannel@16
1018 HalAllocateCommonBuffer@16
1019 ;HalAllocateCrashDumpRegisters@8
1020 HalAssignSlotResources@32
1021 HalBeginSystemInterrupt@12
1022 HalCalibratePerformanceCounter@4
1023 ;@HalClearSoftwareInterrupt@4
1024 ;HalClearSoftwareInterrupt@4
1025 HalDisableSystemInterrupt@8
1027 HalEnableSystemInterrupt@12
1028 HalEndSystemInterrupt@8
1029 HalFlushCommonBuffer@32
1030 HalFreeCommonBuffer@24
1033 HalGetBusDataByOffset@24
1034 HalGetEnvironmentVariable@12
1035 HalGetInterruptVector@24
1038 HalInitializeProcessor@4
1041 HalQueryDisplayParameters@16
1042 HalQueryRealTimeClock@4
1044 HalReportResourceUsage@0
1046 ;@HalRequestSoftwareInterrupt@4
1047 ;HalRequestSoftwareInterrupt@4
1048 HalReturnToFirmware@4
1050 HalSetBusDataByOffset@24
1051 HalSetDisplayParameters@8
1052 HalSetEnvironmentVariable@8
1053 ;HalSetProfileInterval@4
1054 HalSetRealTimeClock@4
1055 ;HalSetTimeIncrement@4
1056 HalStartNextProcessor@8
1057 ;HalStartProfileInterrupt@4
1058 ;HalStopProfileInterrupt@4
1059 HalSystemVectorDispatchEntry@12
1060 HalTranslateBusAddress@24
1061 IoAssignDriveLetters@16
1062 IoFlushAdapterBuffers@24
1063 IoFreeAdapterChannel@4
1064 IoFreeMapRegisters@12
1066 IoReadPartitionTable@16
1067 IoSetPartitionInformation@16
1068 IoWritePartitionTable@20
1077 ;@KeAcquireSpinLockRaiseToSynch@4
1078 KeAcquireSpinLockRaiseToSynch@4
1079 KeFlushWriteBuffer@0
1082 KeQueryPerformanceCounter@4
1084 KeRaiseIrqlToDpcLevel@0
1085 KeRaiseIrqlToSynchLevel@0
1087 KeStallExecutionProcessor@4
1088 ;@KfAcquireSpinLock@4
1094 ;@KfReleaseSpinLock@8
1096 READ_PORT_BUFFER_UCHAR@12
1097 READ_PORT_BUFFER_ULONG@12
1098 READ_PORT_BUFFER_USHORT@12
1102 WRITE_PORT_BUFFER_UCHAR@12
1103 WRITE_PORT_BUFFER_ULONG@12
1104 WRITE_PORT_BUFFER_USHORT@12