- Export the InitSafeBootMode variable as per KB83764.
[reactos.git] / reactos / ntoskrnl / ntoskrnl.def
1 ; $Id: ntoskrnl.def,v 1.199 2004/11/07 22:55:37 navaraf Exp $
2 ;
3 ; reactos/ntoskrnl/ntoskrnl.def
4 ;
5 ; ReactOS Operating System
6 ;
7 EXPORTS
8 CcRosInitializeFileCache@8
9 CcRosReleaseFileCache@4
10 CcCanIWrite@16
11 CcCopyRead@24
12 CcCopyWrite@20
13 CcDeferWrite@24
14 CcFastCopyRead@24
15 CcFastCopyWrite@16
16 CcFlushCache@16
17 CcGetDirtyPages@16
18 CcGetFileObjectFromBcb@4
19 CcGetFileObjectFromSectionPtrs@4
20 CcGetFlushedValidData@8
21 CcGetLsnForFileObject@8
22 CcInitializeCacheMap@20
23 CcIsThereDirtyData@4
24 CcFastMdlReadWait DATA
25 CcFastReadNotPossible DATA
26 CcFastReadWait DATA
27 CcMapData@24
28 CcMdlRead@20
29 CcMdlReadComplete@8
30 CcMdlWriteAbort@8
31 CcMdlWriteComplete@12
32 CcPinMappedData@20
33 CcPinRead@24
34 CcPrepareMdlWrite@20
35 CcPreparePinWrite@28
36 CcPurgeCacheSection@16
37 CcRemapBcb@4
38 CcRepinBcb@4
39 CcScheduleReadAhead@12
40 CcSetAdditionalCacheAttributes@12
41 CcSetBcbOwnerPointer@8
42 CcSetDirtyPageThreshold@8
43 CcSetDirtyPinnedData@8
44 CcSetLogHandleForFile@12
45 CcSetReadAheadGranularity@8
46 CcUninitializeCacheMap@12
47 CcUnpinData@4
48 CcUnpinDataForThread@8
49 CcUnpinRepinnedBcb@12
50 CcWaitForCurrentLazyWriterActivity@0
51 CcSetFileSizes@8
52 CcUnpinData@4
53 CcZeroData@16
54 CmRegisterCallback@12
55 CmUnRegisterCallback@8
56 DbgBreakPoint@0
57 DbgBreakPointWithStatus@4
58 DbgLoadImageSymbols@12
59 DbgPrint
60 DbgPrompt@12
61 DbgPrintEx
62 DbgPrintReturnControlC
63 DbgQueryDebugFilterState@8
64 DbgSetDebugFilterState@12
65 @ExAcquireFastMutexUnsafe@4
66 ExAcquireResourceExclusive@8
67 ExAcquireResourceExclusiveLite@8
68 ExAcquireResourceSharedLite@8
69 @ExAcquireRundownProtection@4
70 @ExAcquireRundownProtectionEx@8
71 ExAcquireSharedStarveExclusive@8
72 ExAcquireSharedWaitForExclusive@8
73 @ExAllocateFromPagedLookasideList@4=@ExiAllocateFromPagedLookasideList@4
74 ExAllocatePool@8
75 ExAllocatePoolWithQuota@8
76 ExAllocatePoolWithQuotaTag@12
77 ExAllocatePoolWithTag@12
78 ExAllocatePoolWithTagPriority@16
79 ExConvertExclusiveToSharedLite@4
80 ExCreateCallback@16
81 ExDeleteNPagedLookasideList@4
82 ExDeletePagedLookasideList@4
83 ExDeleteResource@4
84 ExDeleteResourceLite@4
85 ExDesktopObjectType DATA
86 ExDisableResourceBoostLite@4
87 ExEnumHandleTable@16
88 ExEventObjectType DATA
89 ExExtendZone@12
90 ExFreePool@4
91 ExFreePoolWithTag@8
92 ExFreeToPagedLookasideList@8=ExiFreeToPagedLookasideList@8
93 ExGetCurrentProcessorCounts@12
94 ExGetCurrentProcessorCpuUsage@4
95 ExGetExclusiveWaiterCount@4
96 ExGetPreviousMode@0
97 ExGetSharedWaiterCount@4
98 @ExInitializeRundownProtection@4
99 ExInitializeNPagedLookasideList@28
100 ExInitializePagedLookasideList@28
101 ExInitializeResource@4
102 ExInitializeResourceLite@4
103 ExInitializeZone@16
104 ExInterlockedAddLargeInteger@16
105 @ExInterlockedAddLargeStatistic@8
106 ExInterlockedAddUlong@12
107 @ExInterlockedCompareExchange64@16
108 ExInterlockedDecrementLong@8
109 ExInterlockedExchangeUlong@12
110 ExInterlockedExtendZone@16
111 ExInterlockedIncrementLong@8
112 @ExInterlockedFlushSList@4
113 ExInterlockedInsertHeadList@12
114 ExInterlockedInsertTailList@12
115 ExInterlockedPopEntryList@8
116 @ExInterlockedPopEntrySList@8
117 ExInterlockedPushEntryList@12
118 @ExInterlockedPushEntrySList@12
119 ExInterlockedRemoveHeadList@8
120 ExIsProcessorFeaturePresent@4
121 ExIsResourceAcquiredExclusiveLite@4
122 ExIsResourceAcquiredSharedLite@4
123 ExLocalTimeToSystemTime@8
124 ExNotifyCallback@12
125 ExPostSystemEvent@12
126 ExQueryPoolBlockSize@8
127 ExQueueWorkItem@8
128 ExRaiseAccessViolation@0
129 ExRaiseDatatypeMisalignment@0
130 ExRaiseException@4
131 ExRaiseHardError@24
132 ExRaiseStatus@4
133 ExRegisterCallback@12
134 ExReinitializeResourceLite@4
135 @ExReInitializeRundownProtection@4
136 @ExReleaseFastMutexUnsafe@4
137 ExReleaseResourceForThread@8
138 ExReleaseResourceForThreadLite@8
139 @ExReleaseResourceLite@4
140 @ExReleaseRundownProtection@4
141 @ExReleaseRundownProtectionEx@8
142 @ExRundownCompleted@4
143 ExSetResourceOwnerPointer@8
144 ExSetTimerResolution@8
145 ExSystemExceptionFilter@0
146 ExSystemTimeToLocalTime@8
147 ExTryToAcquireResourceExclusiveLite@4
148 ExUnregisterCallback@4
149 ExUuidCreate@4
150 ExVerifySuite@4
151 @ExWaitForRundownProtectionRelease@4
152 ExWindowStationObjectType DATA
153 ExInitializeBinaryTree@12
154 ExDeleteBinaryTree@4
155 ExInsertBinaryTree@12
156 ExSearchBinaryTree@12
157 ExRemoveBinaryTree@12
158 ExTraverseBinaryTree@16
159 ExInitializeSplayTree@16
160 ExDeleteSplayTree@4
161 ExInsertSplayTree@12
162 ExSearchSplayTree@12
163 ExRemoveSplayTree@12
164 ExWeightOfSplayTree@8
165 ExTraverseSplayTree@16
166 ExInitializeHashTable@16
167 ExDeleteHashTable@4
168 ExInsertHashTable@16
169 ExSearchHashTable@16
170 ExRemoveHashTable@16
171 @ExfAcquirePushLockExclusive@4
172 @ExfAcquirePushLockShared@4
173 @ExfReleasePushLock@4
174 @ExfInterlockedAddUlong@12
175 @ExfInterlockedInsertHeadList@12
176 @ExfInterlockedInsertTailList@12
177 @ExfInterlockedCompareExchange64@12
178 @ExfInterlockedPopEntryList@8
179 @ExfInterlockedPushEntryList@12
180 @ExfInterlockedRemoveHeadList@8
181 @Exfi386InterlockedDecrementLong@4
182 @Exfi386InterlockedExchangeUlong@8
183 @Exfi386InterlockedIncrementLong@4
184 Exi386InterlockedDecrementLong@4
185 Exi386InterlockedExchangeUlong@8
186 Exi386InterlockedIncrementLong@4
187 FsRtlAcquireFileExclusive@4
188 FsRtlAddLargeMcbEntry@28
189 FsRtlAddMcbEntry@16
190 FsRtlAddToTunnelCache@32
191 FsRtlAllocateFileLock@8
192 FsRtlAllocatePool@8
193 FsRtlAllocatePoolWithQuota@8
194 FsRtlAllocatePoolWithQuotaTag@12
195 FsRtlAllocatePoolWithTag@12
196 FsRtlAllocateResource@0
197 FsRtlAreNamesEqual@16
198 FsRtlBalanceReads@4
199 FsRtlCheckLockForReadAccess@8
200 FsRtlCheckLockForWriteAccess@8
201 FsRtlCheckOplock@20
202 FsRtlCopyRead@32
203 FsRtlCopyWrite@32
204 FsRtlCurrentBatchOplock@4
205 FsRtlDeleteKeyFromTunnelCache@12
206 FsRtlDeleteTunnelCache@4
207 FsRtlDeregisterUncProvider@4
208 FsRtlDissectDbcs@16
209 FsRtlDissectName@16
210 FsRtlDoesDbcsContainWildCards@4
211 FsRtlDoesNameContainWildCards@4
212 FsRtlFastCheckLockForRead@24
213 FsRtlFastCheckLockForWrite@24
214 FsRtlFastUnlockAll@16
215 FsRtlFastUnlockAllByKey@20
216 FsRtlFastUnlockSingle@32
217 FsRtlFindInTunnelCache@32
218 FsRtlFreeFileLock@4
219 FsRtlGetFileSize@8
220 FsRtlGetNextFileLock@8
221 FsRtlGetNextLargeMcbEntry@20
222 FsRtlGetNextMcbEntry@20
223 FsRtlIncrementCcFastReadNotPossible@0
224 FsRtlIncrementCcFastReadNoWait@0
225 FsRtlIncrementCcFastReadResourceMiss@0
226 FsRtlIncrementCcFastReadWait@0
227 FsRtlInitializeFileLock@12
228 FsRtlInitializeLargeMcb@8
229 FsRtlInitializeMcb@8
230 FsRtlInitializeOplock@4
231 FsRtlInitializeTunnelCache@4
232 FsRtlInsertPerFileObjectContext@8
233 FsRtlInsertPerStreamContext@8
234 FsRtlIsDbcsInExpression@8
235 FsRtlIsFatDbcsLegal@20
236 FsRtlIsHpfsDbcsLegal@20
237 FsRtlIsNameInExpression@16
238 FsRtlIsNtstatusExpected@4
239 FsRtlIsPagingFile
240 FsRtlIsTotalDeviceFailure@4
241 FsRtlLegalAnsiCharacterArray DATA
242 FsRtlLookupLargeMcbEntry@32
243 FsRtlLookupLastLargeMcbEntry@12
244 FsRtlLookupLastLargeMcbEntryAndInde@16=FsRtlLookupLastLargeMcbEntryAndIndex@16
245 FsRtlLookupLastMcbEntry@12
246 FsRtlLookupMcbEntry@20
247 FsRtlLookupPerFileObjectContext@12
248 FsRtlLookupPerStreamContextInternal@12
249 FsRtlMdlRead@24
250 FsRtlMdlReadComplete@8
251 FsRtlMdlReadCompleteDev@12
252 FsRtlMdlReadDev@28
253 FsRtlMdlWriteComplete@12
254 FsRtlMdlWriteCompleteDev@16
255 FsRtlNormalizeNtstatus@8
256 FsRtlNotifyChangeDirectory@28
257 FsRtlNotifyCleanup@12
258 FsRtlNotifyFilterChangeDirectory@44
259 FsRtlNotifyFilterReportChange@40
260 FsRtlNotifyFullChangeDirectory@40
261 FsRtlNotifyFullReportChange@36
262 FsRtlNotifyInitializeSync@4
263 FsRtlNotifyReportChange@20
264 FsRtlNotifyUninitializeSync@4
265 FsRtlNotifyVolumeEvent@8
266 FsRtlNumberOfRunsInLargeMcb@4
267 FsRtlNumberOfRunsInMcb@4
268 FsRtlOplockFsctrl@12
269 FsRtlOplockIsFastIoPossible@4
270 FsRtlPostPagingFileStackOverflow@12
271 FsRtlPostStackOverflow@12
272 FsRtlPrepareMdlWrite@24
273 FsRtlPrepareMdlWriteDev@28
274 FsRtlPrivateLock@48
275 FsRtlProcessFileLock@12
276 FsRtlRegisterUncProvider@12
277 FsRtlReleaseFile@4
278 FsRtlRemoveLargeMcbEntry@20
279 FsRtlRemoveMcbEntry@12
280 FsRtlRemovePerFileObjectContext@12
281 FsRtlRemovePerStreamContext@12
282 FsRtlResetLargeMcb@8
283 FsRtlSplitLargeMcb@20
284 FsRtlSyncVolumes@12
285 FsRtlTruncateLargeMcb@12
286 FsRtlTruncateMcb@8
287 FsRtlUninitializeFileLock@4
288 FsRtlUninitializeLargeMcb@4
289 FsRtlUninitializeMcb@4
290 FsRtlUninitializeOplock@4
291 HalDispatchTable DATA
292 HalPrivateDispatchTable DATA
293 @HalExamineMBR=@xHalExamineMBR@16
294 InbvAcquireDisplayOwnership@0
295 InbvCheckDisplayOwnership@0
296 InbvDisplayString@4
297 InbvEnableBootDriver@4
298 InbvEnableDisplayString@4
299 InbvInstallDisplayStringFilter@4
300 InbvIsBootDriverInstalled@0
301 InbvNotifyDisplayOwnershipLost@4
302 InbvResetDisplay@0
303 InbvSetScrollRegion@16
304 InbvSetTextColor@4
305 InbvSolidColorFill@20
306 InitSafeBootMode DATA
307 @InterlockedCompareExchange@12
308 @InterlockedDecrement@4
309 @InterlockedExchange@8
310 @InterlockedExchangeAdd@8
311 @InterlockedIncrement@4
312 @InterlockedPushEntrySList@8
313 @InterlockedPopEntrySList@4
314 IoAcquireCancelSpinLock@4
315 IoAcquireRemoveLockEx@20
316 IoAcquireVpbSpinLock@4
317 IoAdapterObjectType DATA
318 IoAllocateAdapterChannel@20
319 IoAllocateIrp@8
320 IoAllocateMdl@20
321 IoAllocateController@16
322 IoAllocateDriverObjectExtension@16
323 IoAllocateErrorLogEntry@8
324 IoAllocateWorkItem@4
325 IoAssignDriveLetters@16
326 IoAssignResources@24
327 IoAttachDevice@12
328 IoAttachDeviceByPointer@8
329 IoAttachDeviceToDeviceStack@8
330 IoAttachDeviceToDeviceStackSafe@12
331 IoBuildAsynchronousFsdRequest@24
332 IoBuildDeviceIoControlRequest@36
333 IoBuildPartialMdl@16
334 IoBuildSynchronousFsdRequest@28
335 IoCallDriver@8
336 IoCancelFileOpen@8
337 IoCancelIrp@4
338 IoCheckDesiredAccess@8
339 IoCheckEaBufferValidity@12
340 IoCheckFunctionAccess@24
341 IoCheckQuerySetFileInformation@12
342 IoCheckQuerySetVolumeInformation@12
343 IoCheckQuotaBufferValidity@12
344 IoCheckShareAccess@20
345 IoCompleteRequest@8
346 IoConnectInterrupt@44
347 IoCreateController@4
348 IoCreateDevice@28
349 IoCreateDisk@8
350 IoCreateDriver@8
351 IoCreateFile@56
352 IoCreateFileSpecifyDeviceObjectHint@60
353 IoCreateNotificationEvent@8
354 IoCreateStreamFileObject@8
355 IoCreateStreamFileObjectEx@12
356 IoCreateStreamFileObjectLite@8
357 IoCreateSymbolicLink@8
358 IoCreateSynchronizationEvent@8
359 IoCreateUnprotectedSymbolicLink@8
360 IoDeleteController@4
361 IoDeleteDevice@4
362 IoDeleteDriver@4
363 IoDeleteSymbolicLink@4
364 IoDetachDevice@4
365 IoDeviceHandlerObjectSize DATA
366 IoDeviceHandlerObjectType DATA
367 IoDeviceObjectType DATA
368 IoDisconnectInterrupt@4
369 IoDriverObjectType DATA
370 IoEnqueueIrp@4
371 IoEnumerateDeviceObjectList@16
372 IoFastQueryNetworkAttributes@20
373 IoFileObjectType DATA
374 IoForwardAndCatchIrp@8=IoForwardIrpSynchronously@8
375 IoForwardIrpSynchronously@8
376 IoFreeController@4
377 IoFreeErrorLogEntry@4
378 IoFreeIrp@4
379 IoFreeMdl@4
380 IoFreeWorkItem@4
381 IoGetAttachedDevice@4
382 IoGetAttachedDeviceReference@4
383 IoGetBaseFileSystemDeviceObject@4
384 IoGetBootDiskInformation@8
385 IoGetConfigurationInformation@0
386 IoGetCurrentProcess@0
387 IoGetDeviceObjectPointer@16
388 IoGetDeviceAttachmentBaseRef@4
389 IoGetDeviceInterfaceAlias@12
390 IoGetDeviceInterfaces@16
391 IoGetDriverObjectExtension@8
392 IoGetDeviceProperty@20
393 IoGetDeviceToVerify@4
394 IoGetDiskDeviceObject@8
395 IoGetDmaAdapter@12
396 IoGetFileObjectGenericMapping@0
397 IoGetInitialStack@0
398 IoGetLowerDeviceObject@4
399 IoGetRelatedDeviceObject@4
400 IoGetRequestorProcess@4
401 IoGetRequestorProcessId@4
402 IoGetRequestorSessionId@8
403 IoGetStackLimits@8
404 IoGetTopLevelIrp@0
405 IoInitializeIrp@12
406 IoInvalidateDeviceRelations@8
407 IoInvalidateDeviceState@4
408 IoInitializeRemoveLockEx@20
409 IoInitializeTimer@12
410 IoIsFileOriginRemote@4
411 IoIsSystemThread@4
412 IoIsValidNameGraftingBuffer@8
413 IoIsOperationSynchronous@4
414 IoMakeAssociatedIrp@8
415 IoOpenDeviceInstanceKey@20
416 IoOpenDeviceInterfaceRegistryKey@12
417 IoOpenDeviceRegistryKey@16
418 IoPageRead@20
419 IoPnPDeliverServicePowerNotification@16
420 IoQueryDeviceDescription@32
421 IoQueryDeviceEnumInfo@8
422 IoQueryFileDosDeviceName@8
423 IoQueryFileInformation@20
424 IoQueryVolumeInformation@20
425 IoQueueThreadIrp@4
426 IoQueueWorkItem@16
427 IoRaiseHardError@12
428 IoRaiseInformationalHardError@12
429 IoReadDiskSignature@12
430 IoReadOperationCount DATA
431 IoReadPartitionTable@16
432 IoReadPartitionTableEx@8
433 IoReadTransferCount DATA
434 IoRegisterBootDriverReinitialization@12
435 IoRegisterDeviceInterface@16
436 IoRegisterDriverReinitialization@12
437 IoRegisterFileSystem@4
438 IoRegisterFsRegistrationChange@8
439 IoRegisterLastChanceShutdownNotification@4
440 IoRegisterPlugPlayNotification@28
441 IoRegisterShutdownNotification@4
442 IoReleaseCancelSpinLock@4
443 IoReleaseRemoveLockAndWaitEx@12
444 IoReleaseRemoveLockEx@12
445 IoReleaseVpbSpinLock@4
446 IoRemoveShareAccess@8
447 IoReportDetectedDevice@32
448 IoReportHalResourceUsage@16
449 IoReportResourceUsage@36
450 IoReportResourceForDetection@28
451 IoReportTargetDeviceChange@8
452 IoReportTargetDeviceChangeAsynchronous@16
453 IoRequestDeviceEject@4
454 IoReuseIrp@8
455 IoSetCompletionRoutineEx@28
456 IoSetSystemPartition@4
457 IoSetDeviceInterfaceState@8
458 IoSetDeviceToVerify@8
459 IoSetFileOrigin@8
460 IoSetHardErrorOrVerifyDevice@8
461 IoSetInformation@16
462 IoSetIoCompletion@24
463 IoSetPartitionInformation@16
464 IoSetPartitionInformationEx@12
465 IoSetStartIoAttributes@12
466 IoSetShareAccess@16
467 IoSetThreadHardErrorMode@4
468 IoSetTopLevelIrp@4
469 IoStartNextPacket@8
470 IoStartNextPacketByKey@12
471 IoStartPacket@16
472 IoStartTimer@4
473 IoStatisticsLock DATA
474 IoStopTimer@4
475 IoSynchronousPageWrite@20
476 IoSynchronousInvalidateDeviceRelations@8
477 IoThreadToProcess@4
478 IoUnregisterFileSystem@4
479 IoUnregisterFsRegistrationChange@8
480 IoUnregisterPlugPlayNotification@4
481 IoUnregisterShutdownNotification@4
482 IoUpdateShareAccess@8
483 IoValidateDeviceIoControlAccess@8
484 IoVerifyPartitionTable@8
485 IoVerifyVolume@8
486 IoVolumeDeviceToDosName@8
487 IoWMIAllocateInstanceIds@12
488 IoWMIDeviceObjectToInstanceName@12
489 IoWMIExecuteMethod@24
490 IoWMIHandleToInstanceName@12
491 IoWMIOpenBlock@12
492 IoWMIQueryAllData@12
493 IoWMIQueryAllDataMultiple@16
494 IoWMIQuerySingleInstance@16
495 IoWMIQuerySingleInstanceMultiple@20
496 IoWMIRegistrationControl@8
497 IoWMISetNotificationCallback@12
498 IoWMISetSingleInstance@20
499 IoWMISetSingleItem@24
500 IoWMISuggestInstanceName@16
501 IoWMIWriteEvent@4
502 IoWriteErrorLogEntry@4
503 IoWriteOperationCount DATA
504 IoWritePartitionTable@20
505 IoWritePartitionTableEx@8
506 IoWriteTransferCount DATA
507 @IofCallDriver@8
508 @IofCompleteRequest@8
509 IoIsWdmVersionAvailable@8
510 KdDebuggerEnabled DATA
511 KdDebuggerNotPresent DATA
512 KdDisableDebugger@0
513 KdEnableDebugger@0
514 KdEnteredDebugger
515 KdPollBreakIn@0
516 KdPowerTransition@4
517 KdSystemDebugControl@4
518 Ke386CallBios@8
519 Ke386IoSetAccessProcess@8
520 Ke386QueryIoAccessMap@8
521 Ke386SetIoAccessMap@8
522 KeAcquireSpinLockAtDpcLevel@4
523 KeAcquireDispatcherDatabaseLockAtDpcLevel
524 @KeAcquireInStackQueuedSpinLockAtDpcLevel@8
525 KeAcquireInterruptSpinLock@4
526 KeAddSystemServiceTable@20
527 KeAreApcsDisabled@0
528 KeAttachProcess@4
529 ;KeBoostCurrentThread
530 KeBugCheck@4
531 KeBugCheckEx@20
532 KeCancelTimer@4
533 KeCapturePersistentThreadState@28
534 KeClearEvent@4
535 KeConnectInterrupt@4
536 KeDcacheFlushCount DATA
537 KeDelayExecutionThread@12
538 KeDeregisterBugCheckCallback@4
539 KeDeregisterBugCheckReasonCallback@4
540 KeDetachProcess@0
541 KeDisconnectInterrupt@4
542 KeEnterCriticalRegion@0
543 KeEnterKernelDebugger@0
544 KeFindConfigurationEntry@16
545 KeFindConfigurationNextEntry@20
546 KeFlushEntireTb@8
547 KeFlushQueuedDpcs@0
548 KeGetCurrentThread@0
549 KeGetPreviousMode@0
550 KeGetRecommendedSharedDataAlignment@0
551 ;KeI386AbiosCall
552 KeI386AllocateGdtSelectors
553 ;KeI386Call16BitCStyleFunction
554 ;KeI386Call16BitFunction
555 KeI386FlatToGdtSelector
556 ;KeI386GetLid
557 ;KeI386MachineType DATA
558 KeI386ReleaseGdtSelectors
559 ;KeI386ReleaseLid
560 ;KeI386SetGdtSelector
561 KeIcacheFlushCount DATA
562 KeInitializeApc@32
563 KeInitializeDeviceQueue@4
564 KeInitializeDpc@12
565 KeInitializeEvent@12
566 KeInitializeInterrupt@44
567 KeInitializeMutant@8
568 KeInitializeMutex@8
569 KeInitializeQueue@8
570 KeInitializeSemaphore@12
571 KeInitializeSpinLock@4
572 KeInitializeTimer@4
573 KeInitializeTimerEx@8
574 KeInsertByKeyDeviceQueue@12
575 KeInsertDeviceQueue@8
576 KeInsertHeadQueue@8
577 KeInsertQueue@8
578 KeInsertQueueApc@16
579 KeInsertQueueDpc@12
580 KeIsAttachedProcess@0
581 KeIsExecutingDpc@0
582 KeLeaveCriticalRegion@0
583 KeLoaderBlock DATA
584 KeNumberProcessors DATA
585 KeProfileInterrupt@4
586 KeProfileInterruptWithSource@8
587 KePulseEvent@12
588 KeQueryActiveProcessors@0
589 KeQueryInterruptTime@0
590 KeQueryPriorityThread@4
591 KeQueryRuntimeThread@8
592 KeQuerySystemTime@4
593 KeQueryTickCount@4
594 KeQueryTimeIncrement@0
595 KeRaiseUserException@4
596 KeReadStateEvent@4
597 KeReadStateMutant@4
598 KeReadStateMutex@4
599 KeReadStateQueue@4
600 KeReadStateSemaphore@4
601 KeReadStateTimer@4
602 KeRegisterBugCheckCallback@20
603 KeRegisterBugCheckReasonCallback@16
604 KeReleaseDispatcherDatabaseLockFromDpcLevel
605 @KeReleaseInStackQueuedSpinLockFromDpcLevel@4
606 KeReleaseInterruptSpinLock@8
607 KeReleaseMutant@16
608 KeReleaseMutex@8
609 KeReleaseSemaphore@16
610 KeReleaseSpinLockFromDpcLevel@4
611 KeRemoveByKeyDeviceQueue@8
612 KeRemoveByKeyDeviceQueueIfBusy@8
613 KeRemoveDeviceQueue@4
614 KeRemoveEntryDeviceQueue@8
615 KeRemoveQueue@12
616 KeRemoveQueueDpc@4
617 KeRemoveSystemServiceTable@4
618 KeResetEvent@4
619 KeRestoreFloatingPointState@4
620 KeRevertToUserAffinityThread@0
621 KeRundownQueue@4
622 KeSaveFloatingPointState@4
623 KeSaveStateForHibernate
624 KeServiceDescriptorTable DATA
625 KeSetAffinityThread@8
626 KeSetBasePriorityThread@8
627 KeSetDmaIoCoherency@4
628 KeSetEvent@12
629 KeSetEventBoostPriority@8
630 KeSetIdealProcessorThread@8
631 KeSetImportanceDpc@8
632 KeSetKernelStackSwapEnable@4
633 KeSetPriorityThread@8
634 KeSetProfileIrql@4
635 KeSetSystemAffinityThread@4
636 ;KeSetSwapContextNotifyRoutine
637 KeSetTargetProcessorDpc@8
638 ;KeSetThreadSelectNotifyRoutine
639 KeSetTimeIncrement@8
640 KeSetTimer@16
641 KeSetTimerEx@20
642 @KeSetTimeUpdateNotifyRoutine@4
643 KeStackAttachProcess@8
644 KeSynchronizeExecution@12
645 KeTerminateThread@4
646 KeTickCount DATA
647 KeUpdateRunTime@8
648 KeUpdateSystemTime@8
649 KeUnstackDetachProcess@4
650 KeUserModeCallback@20
651 KeWaitForMultipleObjects@32
652 KeWaitForMutexObject@20
653 KeWaitForSingleObject@20
654 @KefAcquireSpinLockAtDpcLevel@4
655 @KefReleaseSpinLockFromDpcLevel@4
656 ;Kei386EoiHelper
657 @KiAcquireSpinLock@4
658 ;KiBugCheckData DATA
659 KiCoprocessorError@0
660 KiDeliverApc@12
661 KiDispatchInterrupt@0
662 KiEnableTimerWatchdog
663 KiInterruptDispatch2@8
664 KiIpiServiceRoutine@8
665 @KiReleaseSpinLock@4
666 KiUnexpectedInterrupt@0
667 ;Kii386SpinOnSpinLock
668 KiRawTicks DATA
669 LdrAccessResource@16
670 LdrEnumResources@20
671 LdrFindResourceDirectory_U@16
672 LdrFindResource_U@16
673 LpcRequestPort@8
674 LpcRequestWaitReplyPort@12
675 LsaCallAuthenticationPackage@28
676 LsaDeregisterLogonProcess@8
677 LsaFreeReturnBuffer@4
678 LsaLogonUser@56
679 LsaLookupAuthenticationPackage@12
680 LsaRegisterLogonProcess@12
681 Mm64BitPhysicalAddress DATA
682 MmAddPhysicalMemory@8
683 MmAddVerifierThunks@8
684 MmAdjustWorkingSetSize@12
685 MmAdvanceMdl@8
686 MmAllocateContiguousAlignedMemory@36
687 MmAllocateContiguousMemory@12
688 MmAllocateContiguousMemorySpecifyCache@32
689 MmAllocateMappingAddress@8
690 MmAllocateNonCachedMemory@4
691 MmAllocatePagesForMdl@28
692 MmBuildMdlForNonPagedPool@4
693 MmCanFileBeTruncated@8
694 MmCopyFromCaller@12
695 MmCopyToCaller@12
696 MmCreateMdl@12
697 MmCreateSection@32
698 MmDbgTranslatePhysicalAddress@8
699 MmDisableModifiedWriteOfSection@4
700 MmFlushImageSection@8
701 MmForceSectionClosed@8
702 MmFreeContiguousMemory@4
703 MmFreeContiguousMemorySpecifyCache@12
704 MmFreeMappingAddress@8
705 MmFreeNonCachedMemory@8
706 MmFreePagesFromMdl@4
707 MmGetPhysicalAddress@4
708 MmGetPhysicalMemoryRanges@0
709 MmGetSystemRoutineAddress@4
710 MmGetVirtualForPhysical@8
711 MmGrowKernelStack@4
712 MmHighestUserAddress DATA
713 MmIsAddressValid@4
714 MmIsDriverVerifying@4
715 MmIsNonPagedSystemAddressValid@4
716 MmIsRecursiveIoFault@0
717 MmIsThisAnNtAsSystem@0
718 MmIsVerifierEnabled@4
719 MmLockPagableDataSection@4
720 MmLockPagableImageSection@4=MmLockPagableDataSection@4
721 MmLockPagableSectionByHandle@4
722 MmMapIoSpace@16
723 MmMapLockedPages@8
724 MmMapLockedPagesSpecifyCache@24
725 MmMapLockedPagesWithReservedMapping@16
726 MmMapMemoryDumpMdl@4
727 MmMapUserAddressesToPage@12
728 MmMapVideoDisplay@16
729 MmMapViewInSessionSpace@12
730 MmMapViewInSystemSpace@12
731 MmMapViewOfSection@40
732 MmMarkPhysicalMemoryAsBad@8
733 MmMarkPhysicalMemoryAsGood@8
734 MmPageEntireDriver@4
735 MmPrefetchPages@8
736 MmProbeAndLockPages@12
737 MmProbeAndLockProcessPages@16
738 MmProbeAndLockSelectedPages@16
739 MmProtectMdlSystemAddress@8
740 MmQuerySystemSize@0
741 MmRemovePhysicalMemory@8
742 MmResetDriverPaging@4
743 MmSectionObjectType DATA
744 MmSecureVirtualMemory@12
745 MmSetAddressRangeModified@8
746 MmSetBankedSection@24
747 MmSizeOfMdl@8
748 MmSystemRangeStart DATA
749 MmTrimAllSystemPagableMemory@4
750 MmUnlockPagableImageSection@4
751 MmUnlockPages@4
752 MmUnmapIoSpace@8
753 MmUnmapLockedPages@8
754 MmUnmapReservedMapping@12
755 MmUnmapVideoDisplay@8
756 MmUnmapViewInSessionSpace@4
757 MmUnmapViewInSystemSpace@4
758 MmUnmapViewOfSection@8
759 MmUnsecureVirtualMemory@4
760 MmUserProbeAddress DATA
761 NlsAnsiCodePage DATA
762 NlsLeadByteInfo DATA
763 NlsMbCodePageTag DATA
764 NlsMbOemCodePageTag DATA
765 NlsOemLeadByteInfo DATA
766 NtAddAtom@12
767 NtAdjustPrivilegesToken@24
768 NtAlertThread@4
769 NtAllocateLocallyUniqueId@4
770 NtAllocateUuids@12
771 NtAllocateVirtualMemory@24
772 NtBuildNumber DATA
773 NtClose@4
774 NtConnectPort@32
775 NtCreateEvent@20
776 NtCreateTimer@16
777 NtOpenEvent@12
778 NtCreateFile@44
779 NtCreateSection@28
780 NtDeleteAtom@4
781 NtDeleteFile@4
782 NtDeviceIoControlFile@40
783 NtDuplicateObject@28
784 NtDuplicateToken@24
785 NtFindAtom@12
786 NtFreeVirtualMemory@16
787 NtFsControlFile@40
788 NtGlobalFlag DATA
789 NtLockFile@40
790 NtMakePermanentObject@4
791 NtMapViewOfSection@40
792 NtNotifyChangeDirectoryFile@36
793 NtOpenFile@24
794 NtOpenProcess@16
795 NtOpenProcessToken@12
796 NtOpenProcessTokenEx@16
797 NtOpenThread@16
798 NtOpenThreadToken@16
799 NtOpenThreadTokenEx@20
800 NtQueryDirectoryFile@44
801 NtQueryEaFile@36
802 NtQueryInformationAtom@20
803 NtQueryInformationFile@20
804 NtQueryInformationProcess@20
805 NtQueryInformationThread@20
806 NtQueryInformationToken@20
807 ;NtQueryOleDirectoryFile@44 <--- ?
808 NtQueryQuotaInformationFile@36
809 NtQuerySecurityObject@20
810 NtQuerySystemInformation@16
811 NtQuerySystemTime@4
812 NtQueryVolumeInformationFile@20
813 NtReadFile@36
814 NtRequestPort@8
815 NtRequestWaitReplyPort@12
816 NtSetEaFile@16
817 NtSetEvent@8
818 NtSetInformationFile@20
819 NtSetInformationProcess@16
820 NtSetInformationThread@16
821 NtSetQuotaInformationFile@16
822 NtSetSecurityObject@12
823 NtSetVolumeInformationFile@20
824 NtSetSystemTime@8
825 NtShutdownSystem@4
826 NtTraceEvent@16
827 NtUnlockFile@20
828 NtVdmControl@8
829 NtW32Call@20
830 NtWaitForSingleObject@12
831 NtWriteFile@36
832 ObAssignSecurity@16
833 ;ObCheckCreateObjectAccess@28
834 ;ObCheckObjectAccess@20
835 ObCreateObject@36
836 ObFindHandleForObject@20
837 ObGetObjectPointerCount@4
838 ObGetObjectSecurity@12
839 ObInsertObject@24
840 ObMakeTemporaryObject@4
841 ObOpenObjectByName@28
842 ObOpenObjectByPointer@28
843 ObQueryNameString@16
844 ObQueryObjectAuditingByHandle@8
845 @ObfDereferenceObject@4
846 @ObfReferenceObject@4
847 ObReferenceObjectByHandle@24
848 ObReferenceObjectByName@32
849 ObReferenceObjectByPointer@16
850 ObReleaseObjectSecurity@8
851 ObDereferenceObject@4
852 ;ObSetSecurityDescriptorInfo@24
853 ;PfxFindPrefix
854 ;PfxInitialize
855 ;PfxInsertPrefix
856 ;PfxRemovePrefix
857 PoCallDriver@8
858 PoRegisterDeviceForIdleDetection@16
859 PoRegisterSystemState@8
860 PoRequestPowerIrp@24
861 PoSetDeviceBusy@4
862 PoSetPowerState@12
863 PoSetSystemState@4
864 PoStartNextPowerIrp@4
865 PoUnregisterSystemState@4
866 ProbeForRead@12
867 ProbeForWrite@12
868 PsAssignImpersonationToken@8
869 PsChargePoolQuota@12
870 PsChargeProcessNonPagedPoolQuota@4=PsDereferenceImpersonationToken@4
871 PsChargeProcessPagedPoolQuota@8
872 PsChargeProcessPoolQuota@12
873 PsCreateSystemProcess@12
874 PsCreateSystemThread@28
875 PsCreateWin32Process@4
876 PsDereferenceImpersonationToken@4=PsDereferencePrimaryToken@4
877 PsDereferencePrimaryToken@4
878 PsDisableImpersonation@8
879 PsEstablishWin32Callouts@24
880 PsGetCurrentProcessId@0
881 PsGetCurrentProcessSessionId@0
882 PsGetCurrentThreadId@0
883 PsGetCurrentThreadPreviousMode@0
884 PsGetCurrentThreadStackBase@0
885 PsGetCurrentThreadStackLimit@0
886 PsGetJobLock@4
887 PsGetJobSessionId@4
888 PsGetJobUIRestrictionsClass@4
889 PsGetProcessCreateTimeQuadPart@4
890 PsGetProcessDebugPort@4
891 PsGetProcessExitProcessCalled@4
892 PsGetProcessExitStatus@4
893 PsGetProcessExitTime@0
894 PsGetProcessId@4
895 PsGetProcessImageFileName@4
896 PsGetProcessInheritedFromUniqueProcessId@4
897 PsGetProcessJob@4
898 PsGetProcessPeb@4
899 PsGetProcessPriorityClass@4
900 PsGetProcessSectionBaseAddress@4
901 PsGetProcessSecurityPort@4
902 PsGetProcessSessionId@4
903 PsGetProcessWin32Process@4
904 PsGetProcessWin32WindowStation@4
905 PsGetThreadFreezeCount@4
906 PsGetThreadHardErrorsAreDisabled@4
907 PsGetThreadId@4
908 PsGetThreadProcess@4
909 PsGetThreadProcessId@4
910 PsGetThreadSessionId@4
911 PsGetThreadTeb@4
912 PsGetThreadWin32Thread@4
913 PsGetVersion@16
914 PsGetWin32Thread@0
915 PsGetWin32Process@0
916 PsImpersonateClient@20
917 PsInitialSystemProcess DATA
918 PsIsProcessBeingDebugged@4
919 PsIsSystemThread@4
920 PsIsThreadImpersonating@4
921 PsIsThreadTerminating@4
922 PsJobType DATA
923 PsLookupProcessByProcessId@8
924 PsLookupProcessThreadByCid@12
925 PsLookupThreadByThreadId@8
926 PsProcessType DATA
927 PsReferenceImpersonationToken@16
928 PsReferencePrimaryToken@4
929 PsRemoveCreateThreadNotifyRoutine@4
930 PsRemoveLoadImageNotifyRoutine@4
931 PsRestoreImpersonation@8
932 PsReturnPoolQuota@12
933 PsReturnProcessNonPagedPoolQuota@8
934 PsReturnProcessPagedPoolQuota@8
935 PsRevertToSelf@0
936 PsRevertThreadToSelf@4
937 PsSetCreateProcessNotifyRoutine@8
938 PsSetCreateThreadNotifyRoutine@4
939 PsSetJobUIRestrictionsClass@8
940 PsSetLegoNotifyRoutine@4
941 PsSetProcessPriorityClass@8
942 PsSetProcessSecurityPort@8
943 PsSetProcessWin32Process@8
944 PsSetProcessWin32WindowStation@8
945 PsSetThreadHardErrorsAreDisabled@8
946 PsSetThreadWin32Thread@8
947 PsSetLoadImageNotifyRoutine@4
948 PsTerminateSystemThread@4
949 PsThreadType DATA
950 READ_REGISTER_UCHAR@4
951 READ_REGISTER_ULONG@4
952 READ_REGISTER_USHORT@4
953 READ_REGISTER_BUFFER_UCHAR@12
954 READ_REGISTER_BUFFER_ULONG@12
955 READ_REGISTER_BUFFER_USHORT@12
956 KeRosPrintAddress@4
957 KeRosDumpStackFrames@8
958 RtlAbsoluteToSelfRelativeSD@12
959 RtlAddAccessAllowedAce@16
960 RtlAddAce@20
961 RtlAddAtomToAtomTable@12
962 RtlAddRange@36
963 ;RtlAllocateAndInitializeSid
964 RtlAllocateHeap@12
965 RtlAnsiCharToUnicodeChar@4
966 RtlAnsiStringToUnicodeSize@4
967 RtlAnsiStringToUnicodeString@12
968 RtlAppendAsciizToString@8
969 RtlAppendStringToString@8
970 RtlAppendUnicodeStringToString@8
971 RtlAppendUnicodeToString@8
972 RtlAreAllAccessesGranted@8
973 RtlAreAnyAccessesGranted@8
974 RtlAreBitsClear@12
975 RtlAreBitsSet@12
976 RtlAssert@16
977 RtlCaptureContext@4
978 RtlCaptureStackBackTrace@16
979 RtlCharToInteger@12
980 RtlCheckRegistryKey@8
981 RtlClearAllBits@4
982 RtlClearBit@8
983 RtlClearBits@12
984 RtlCompareMemory@12
985 RtlCompareMemoryUlong@12
986 RtlCompareString@12
987 RtlCompareUnicodeString@12
988 RtlCompressBuffer@32
989 RtlCompressChunks@28
990 RtlConvertLongToLargeInteger@4
991 RtlConvertSidToUnicodeString@12
992 RtlConvertUlongToLargeInteger@4
993 RtlCopyLuid@8
994 RtlCopyRangeList@8
995 RtlCopySid@12
996 RtlCopyString@8
997 RtlCopyUnicodeString@8
998 RtlCreateAcl@12
999 RtlCreateAtomTable@8
1000 RtlCreateHeap@24
1001 RtlCreateRegistryKey@8
1002 RtlCreateSecurityDescriptor@8
1003 RtlCreateSystemVolumeInformationFolder@4
1004 RtlCreateUnicodeString@8
1005 RtlCustomCPToUnicodeN@24
1006 RtlDecompressBuffer@24
1007 RtlDecompressChunks@28
1008 RtlDecompressFragment@32
1009 RtlDelete@4
1010 RtlDeleteAce@8
1011 RtlDeleteAtomFromAtomTable@8
1012 RtlDeleteElementGenericTable@8
1013 RtlDeleteElementGenericTableAvl@8
1014 RtlDeleteNoSplay@8
1015 RtlDeleteOwnersRanges@8
1016 RtlDeleteRange@24
1017 RtlDeleteRegistryValue@12
1018 RtlDescribeChunk@20
1019 RtlDestroyAtomTable@4
1020 RtlDestroyHeap@4
1021 RtlDowncaseUnicodeString@12
1022 RtlEmptyAtomTable@8
1023 RtlEnlargedIntegerMultiply@8
1024 RtlEnlargedUnsignedDivide@16
1025 RtlEnlargedUnsignedMultiply@8
1026 RtlEnumerateGenericTable@8
1027 RtlEnumerateGenericTableAvl@8
1028 RtlEnumerateGenericTableLikeADirectory@28
1029 RtlEnumerateGenericTableWithoutSplaying@8
1030 RtlEnumerateGenericTableWithoutSplayingAvl@8
1031 RtlEqualLuid@8
1032 RtlEqualSid@8
1033 RtlEqualString@12
1034 RtlEqualUnicodeString@12
1035 RtlExtendedIntegerMultiply@12
1036 RtlExtendedLargeIntegerDivide@16
1037 RtlExtendedMagicDivide@20
1038 RtlFillMemory@12
1039 RtlFillMemoryUlong@12
1040 RtlFindClearBits@12
1041 RtlFindClearBitsAndSet@12
1042 RtlFindClearRuns@16
1043 RtlFindFirstRunClear@8
1044 RtlFindFirstRunSet@8
1045 RtlFindLastBackwardRunClear@12
1046 RtlFindLeastSignificantBit@8
1047 RtlFindLongestRunClear@8
1048 RtlFindLongestRunSet@8
1049 RtlFindMessage@20
1050 RtlFindMostSignificantBit@8
1051 RtlFindNextForwardRunClear@12
1052 RtlFindRange@48
1053 RtlFindSetBits@12
1054 RtlFindSetBitsAndClear@12
1055 RtlFindUnicodePrefix@12
1056 RtlFormatCurrentUserKeyPath@4
1057 RtlFreeAnsiString@4
1058 RtlFreeHeap@12
1059 RtlFreeRangeList@4
1060 RtlFreeOemString@4
1061 RtlFreeUnicodeString@4
1062 RtlGUIDFromString@8
1063 RtlGenerate8dot3Name@16
1064 RtlGetAce@12
1065 RtlGetCallersAddress@8
1066 RtlGetCompressionWorkSpaceSize@12
1067 RtlGetDaclSecurityDescriptor@16
1068 RtlGetDefaultCodePage@8
1069 RtlGetElementGenericTable@8
1070 RtlGetElementGenericTableAvl@8
1071 RtlGetFirstRange@12
1072 RtlGetGroupSecurityDescriptor@12
1073 RtlGetNextRange@12
1074 RtlGetNtGlobalFlags@0
1075 RtlGetOwnerSecurityDescriptor@12
1076 RtlGetSaclSecurityDescriptor@16
1077 RtlGetSetBootStatusData@24
1078 RtlGetVersion@4
1079 RtlHashUnicodeString@16
1080 RtlImageNtHeader@4
1081 RtlImageDirectoryEntryToData@16
1082 RtlInitAnsiString@8
1083 RtlInitCodePageTable@8
1084 RtlInitString@8
1085 RtlInitUnicodeString@8
1086 RtlInitializeBitMap@12
1087 RtlInitializeGenericTable@20
1088 RtlInitializeGenericTableAvl@20
1089 RtlInitializeRangeList@4
1090 RtlInitializeSid@12
1091 RtlInitializeUnicodePrefix@4
1092 RtlInsertElementGenericTable@16
1093 RtlInsertElementGenericTableAvl@16
1094 RtlInsertElementGenericTableFull@24
1095 RtlInsertElementGenericTableFullAvl@24
1096 RtlInsertUnicodePrefix@12
1097 RtlInt64ToUnicodeString@16
1098 RtlIntegerToChar@16
1099 RtlIntegerToUnicode@16
1100 RtlIntegerToUnicodeString@12
1101 RtlInvertRangeList@8
1102 RtlIpv4AddressToStringA@8
1103 RtlIpv4AddressToStringExA@16
1104 RtlIpv4AddressToStringExW@16
1105 RtlIpv4AddressToStringW@8
1106 RtlIpv4StringToAddressA@16
1107 RtlIpv4StringToAddressExA@16
1108 RtlIpv4StringToAddressExW@16
1109 RtlIpv4StringToAddressW@16
1110 RtlIpv6AddressToStringA@8
1111 RtlIpv6AddressToStringExA@16
1112 RtlIpv6AddressToStringExW@16
1113 RtlIpv6AddressToStringW@8
1114 RtlIpv6StringToAddressA@16
1115 RtlIpv6StringToAddressExA@16
1116 RtlIpv6StringToAddressExW@16
1117 RtlIpv6StringToAddressW@16
1118 RtlIsGenericTableEmpty@4
1119 RtlIsGenericTableEmptyAvl@4
1120 RtlIsNameLegalDOS8Dot3@12
1121 RtlIsRangeAvailable@40
1122 RtlIsValidOemCharacter@4
1123 RtlLargeIntegerAdd@16
1124 RtlLargeIntegerArithmeticShift@12
1125 RtlLargeIntegerDivide@20
1126 RtlLargeIntegerNegate@8
1127 RtlLargeIntegerShiftLeft@12
1128 RtlLargeIntegerShiftRight@12
1129 RtlLargeIntegerSubtract@16
1130 RtlLengthRequiredSid@4
1131 RtlLengthSecurityDescriptor@4
1132 RtlLengthSid@4
1133 RtlLockBootStatusData@4
1134 RtlLookupAtomInAtomTable@12
1135 RtlLookupElementGenericTable@8
1136 RtlLookupElementGenericTableAvl@8
1137 RtlLookupElementGenericTableFull@16
1138 RtlLookupElementGenericTableFullAvl@16
1139 RtlMapGenericMask@8
1140 RtlMapSecurityErrorToNtStatus@4
1141 RtlMergeRangeLists@16
1142 RtlMoveMemory@12
1143 RtlMultiByteToUnicodeN@20
1144 RtlMultiByteToUnicodeSize@12
1145 RtlNextUnicodePrefix@8
1146 RtlNtStatusToDosError@4
1147 RtlNtStatusToDosErrorNoTeb@4
1148 RtlNumberGenericTableElements@4
1149 RtlNumberGenericTableElementsAvl@4
1150 RtlNumberOfClearBits@4
1151 RtlNumberOfSetBits@4
1152 RtlOemStringToCountedUnicodeString@12
1153 RtlOemStringToUnicodeSize@4
1154 RtlOemStringToUnicodeString@12
1155 RtlOemToUnicodeN@20
1156 RtlPinAtomInAtomTable@8
1157 @RtlPrefetchMemoryNonTemporal@8
1158 RtlPrefixString@12
1159 RtlPrefixUnicodeString@12
1160 RtlQueryAtomInAtomTable@24
1161 RtlQueryRegistryValues@20
1162 RtlQueryTimeZoneInformation@4
1163 RtlRaiseException@4
1164 RtlRandom@4
1165 RtlRandomEx@4
1166 RtlRealPredecessor@4
1167 RtlRealSuccessor@4
1168 RtlRemoveUnicodePrefix@8
1169 RtlReserveChunk@20
1170 RtlSecondsSince1970ToTime@8
1171 RtlSecondsSince1980ToTime@8
1172 RtlSelfRelativeToAbsoluteSD2@8
1173 RtlSelfRelativeToAbsoluteSD@44
1174 RtlSetAllBits@4
1175 RtlSetBit@8
1176 RtlSetBits@12
1177 RtlSetDaclSecurityDescriptor@16
1178 RtlSetGroupSecurityDescriptor@12
1179 RtlSetOwnerSecurityDescriptor@12
1180 RtlSetSaclSecurityDescriptor@16
1181 RtlSetTimeZoneInformation@4
1182 RtlSizeHeap@12
1183 RtlSplay@4
1184 RtlStringFromGUID@8
1185 RtlSubAuthorityCountSid@4
1186 RtlSubAuthoritySid@8
1187 RtlSubtreePredecessor@4
1188 RtlSubtreeSuccessor@4
1189 RtlTestBit@8
1190 RtlTimeFieldsToTime@8
1191 RtlTimeToElapsedTimeFields@8
1192 RtlTimeToSecondsSince1970@8
1193 RtlTimeToSecondsSince1980@8
1194 RtlTimeToTimeFields@8
1195 @RtlUlongByteSwap@4
1196 @RtlUlonglongByteSwap@8
1197 RtlUnicodeStringToAnsiSize@4
1198 RtlUnicodeStringToAnsiString@12
1199 RtlUnicodeStringToCountedOemString@12
1200 RtlUnicodeStringToInteger@12
1201 RtlUnicodeStringToOemSize@4
1202 RtlUnicodeStringToOemString@12
1203 RtlUnicodeToCustomCPN@24
1204 RtlUnicodeToMultiByteN@20
1205 RtlUnicodeToMultiByteSize@12
1206 RtlUnicodeToOemN@20
1207 RtlUnlockBootStatusData@4
1208 RtlUnwind@16
1209 RtlUpcaseUnicodeChar@4
1210 RtlUpcaseUnicodeString@12
1211 RtlUpcaseUnicodeStringToAnsiString@12
1212 RtlUpcaseUnicodeStringToCountedOemString@12
1213 RtlUpcaseUnicodeStringToOemString@12
1214 RtlUpcaseUnicodeToCustomCPN@24
1215 RtlUpcaseUnicodeToMultiByteN@20
1216 RtlUpcaseUnicodeToOemN@20
1217 RtlUpperChar@4
1218 RtlUpperString@8
1219 @RtlUshortByteSwap@4
1220 RtlValidRelativeSecurityDescriptor@12
1221 RtlValidSecurityDescriptor@4
1222 RtlValidSid@4
1223 ;RtlVerifyVersionInfo@16
1224 RtlVolumeDeviceToDosName@8
1225 RtlWalkFrameChain@12
1226 RtlWriteRegistryValue@24
1227 RtlZeroHeap@8
1228 RtlZeroMemory@8
1229 RtlxAnsiStringToUnicodeSize@4
1230 RtlxOemStringToUnicodeSize@4
1231 RtlxUnicodeStringToAnsiSize@4
1232 RtlxUnicodeStringToOemSize@4
1233 SeAccessCheck@40
1234 SeAppendPrivileges@8
1235 SeAssignSecurity@28
1236 SeAssignSecurityEx@36
1237 SeAuditHardLinkCreation@12
1238 SeAuditingFileEvents@8
1239 SeAuditingFileEventsWithContext@12
1240 SeAuditingFileOrGlobalEvents@12
1241 SeAuditingHardLinkEvents@8
1242 SeAuditingHardLinkEventsWithContext@12
1243 SeCaptureSecurityDescriptor@20
1244 SeCaptureSubjectContext@4
1245 SeCloseObjectAuditAlarm@12
1246 SeCreateAccessState@16
1247 SeCreateClientSecurity@16
1248 SeCreateClientSecurityFromSubjectContext@16
1249 SeDeassignSecurity@4
1250 SeDeleteAccessState@4
1251 SeDeleteObjectAuditAlarm@8
1252 SeExports DATA
1253 SeFilterToken@24
1254 SeFreePrivileges@4
1255 SeImpersonateClient@8
1256 SeImpersonateClientEx@8
1257 SeLockSubjectContext@4
1258 SeMarkLogonSessionForTerminationNotification@4
1259 SeOpenObjectAuditAlarm@36
1260 SeOpenObjectForDeleteAuditAlarm@36
1261 SePrivilegeCheck@12
1262 SePrivilegeObjectAuditAlarm@24
1263 SePublicDefaultDacl DATA
1264 SeQueryAuthenticationIdToken@8
1265 SeQueryInformationToken@12
1266 SeQuerySecurityDescriptorInfo@16
1267 SeQuerySessionIdToken@8
1268 SeRegisterLogonSessionTerminatedRoutine@4
1269 SeReleaseSecurityDescriptor@12
1270 SeReleaseSubjectContext@4
1271 SeSetAccessStateGenericMapping@8
1272 SeSetSecurityDescriptorInfo@24
1273 SeSetSecurityDescriptorInfoEx@28
1274 SeSinglePrivilegeCheck@12
1275 SeSystemDefaultDacl DATA
1276 SeTokenImpersonationLevel@4
1277 SeTokenIsAdmin@4
1278 SeTokenIsRestricted@4
1279 SeTokenIsWriteRestricted@4
1280 SeTokenType@4
1281 SeUnlockSubjectContext@4
1282 SeUnregisterLogonSessionTerminatedRoutine@4
1283 SeValidSecurityDescriptor@8
1284 VerSetConditionMask@16
1285 WRITE_REGISTER_UCHAR@8
1286 WRITE_REGISTER_ULONG@8
1287 WRITE_REGISTER_USHORT@8
1288 WRITE_REGISTER_BUFFER_UCHAR@12
1289 WRITE_REGISTER_BUFFER_ULONG@12
1290 WRITE_REGISTER_BUFFER_USHORT@12
1291 ZwAccessCheckAndAuditAlarm@44
1292 ZwAddBootEntry@8
1293 ZwAdjustPrivilegesToken@24
1294 ZwAlertThread@4
1295 ZwAllocateVirtualMemory@24
1296 ZwAssignProcessToJobObject@8
1297 ZwCancelIoFile@8
1298 ZwCancelTimer@8
1299 ZwClearEvent@4
1300 ZwClose@4
1301 ZwCloseObjectAuditAlarm@12
1302 ZwConnectPort@32
1303 ZwCreateDirectoryObject@12
1304 ZwCreateEvent@20
1305 ZwCreateFile@44
1306 ZwCreateJobObject@12
1307 ZwCreateKey@28
1308 ZwCreateSection@28
1309 ZwCreateSymbolicLinkObject@16
1310 ZwCreateTimer@16
1311 ZwDeleteBootEntry@8
1312 ZwDeleteFile@4
1313 ZwDeleteKey@4
1314 ZwDeleteValueKey@8
1315 ZwDeviceIoControlFile@40
1316 ZwDisplayString@4
1317 ZwDuplicateObject@28
1318 ZwDuplicateToken@24
1319 ZwEnumerateBootEntries@8
1320 ZwEnumerateKey@24
1321 ZwEnumerateValueKey@24
1322 ZwFlushInstructionCache@12
1323 ZwFlushKey@4
1324 ZwFlushVirtualMemory@16
1325 ZwFreeVirtualMemory@16
1326 ZwFsControlFile@40
1327 ZwInitiatePowerAction@16
1328 ZwIsProcessInJob@8
1329 ZwLoadDriver@4
1330 ZwLoadKey@8
1331 ZwMakeTemporaryObject@4
1332 ZwMapViewOfSection@40
1333 ZwNotifyChangeKey@40
1334 ZwOpenDirectoryObject@12
1335 ZwOpenEvent@12
1336 ZwOpenFile@24
1337 ZwOpenJobObject@12
1338 ZwOpenKey@12
1339 ZwOpenProcess@16
1340 ZwOpenProcessToken@12
1341 ZwOpenProcessTokenEx@16
1342 ZwOpenSection@12
1343 ZwOpenSymbolicLinkObject@12
1344 ZwOpenThread@16
1345 ZwOpenThreadToken@16
1346 ZwOpenThreadTokenEx@20
1347 ZwOpenTimer@12
1348 ZwPowerInformation@20
1349 ZwPulseEvent@8
1350 ZwQueryBootEntryOrder@8
1351 ZwQueryBootOptions@8
1352 ZwQueryDefaultLocale@8
1353 ZwQueryDefaultUILanguage@4
1354 ZwQueryDirectoryFile@44
1355 ZwQueryDirectoryObject@28
1356 ZwQueryEaFile@36
1357 ZwQueryFullAttributesFile@8
1358 ZwQueryInformationAtom@20
1359 ZwQueryInformationFile@20
1360 ZwQueryInformationJobObject@20
1361 ZwQueryInformationProcess@20
1362 ZwQueryInformationThread@20
1363 ZwQueryInformationToken@20
1364 ZwQueryInstallUILanguage@4
1365 ZwQueryKey@20
1366 ZwQueryObject@20
1367 ZwQuerySection@20
1368 ZwQuerySecurityObject@20
1369 ZwQuerySymbolicLinkObject@12
1370 ZwQuerySystemInformation@16
1371 ZwQuerySystemTime@4
1372 ZwQueryValueKey@24
1373 ZwQueryVolumeInformationFile@20
1374 ZwReadFile@36
1375 ZwReplaceKey@12
1376 ZwRequestWaitReplyPort@12
1377 ZwResetEvent@8
1378 ZwRestoreKey@12
1379 ZwSaveKey@8
1380 ZwSaveKeyEx@12
1381 ZwSetBootEntryOrder@8
1382 ZwSetBootOptions@8
1383 ZwSetDefaultLocale@8
1384 ZwSetDefaultUILanguage@4
1385 ZwSetEaFile@16
1386 ZwSetEvent@8
1387 ZwSetInformationFile@20
1388 ZwSetInformationJobObject@16
1389 ZwSetInformationObject@16
1390 ZwSetInformationProcess@16
1391 ZwSetInformationThread@16
1392 ZwSetSecurityObject@12
1393 ZwSetSystemInformation@12
1394 ZwSetSystemTime@8
1395 ZwSetTimer@28
1396 ZwSetValueKey@24
1397 ZwSetVolumeInformationFile@20
1398 ZwTerminateJobObject@8
1399 ZwTerminateProcess@8
1400 ZwTranslateFilePath@12
1401 ZwUnloadDriver@4
1402 ZwUnloadKey@4
1403 ZwUnmapViewOfSection@8
1404 ZwWaitForMultipleObjects@20
1405 ZwWaitForSingleObject@12
1406 ZwWriteFile@36
1407 ZwYieldExecution@0
1408 _abnormal_termination
1409 _alldiv
1410 _allmul
1411 _allrem
1412 _allshl
1413 _allshr
1414 _aulldiv
1415 _aullrem
1416 _aullshr
1417 _except_handler2
1418 _except_handler3
1419 _global_unwind2
1420 _itoa
1421 _itow
1422 _local_unwind2
1423 _purecall
1424 _snprintf
1425 _snwprintf
1426 _stricmp
1427 _strlwr
1428 _strnicmp
1429 _strnset
1430 _strrev
1431 _strset
1432 _strupr
1433 _vsnprintf
1434 _wcsicmp
1435 _wcslwr
1436 _wcsnicmp
1437 _wcsnset
1438 _wcsrev
1439 _wcsupr
1440 atoi
1441 atol
1442 isdigit
1443 islower
1444 isprint
1445 isspace
1446 isupper
1447 isxdigit
1448 mbstowcs
1449 mbtowc
1450 memchr
1451 memcpy
1452 memmove
1453 memset
1454 qsort
1455 rand
1456 sprintf
1457 srand
1458 strcat
1459 strchr
1460 strcmp
1461 strcpy
1462 strlen
1463 strncat
1464 strncmp
1465 strncpy
1466 strrchr
1467 strspn
1468 strstr
1469 swprintf
1470 tolower
1471 toupper
1472 towlower
1473 towupper
1474 vsprintf
1475 wcscat
1476 wcschr
1477 wcscmp
1478 wcscpy
1479 wcscspn
1480 wcslen
1481 wcsncat
1482 wcsncmp
1483 wcsncpy
1484 wcsrchr
1485 wcsspn
1486 wcsstr
1487 wcstombs
1488 wctomb