reactos/ntoskrnl/ntoskrnl.def

   1 ; $Id: ntoskrnl.def,v 1.131 2002/03/23 13:53:22 chorns Exp $
   2 ;
   3 ; reactos/ntoskrnl/ntoskrnl.def
   4 ;
   5 ; ReactOS Operating System
   6 ;
   7 EXPORTS
   8 CcRosInitializeFileCache@12
   9 ;CcRosRequestCacheSegment@20
  10 ;CcRosReleaseCacheSegment@12
  11 CcRosReleaseFileCache@8
  12 CcCopyRead@24
  13 CcCopyWrite@20
  14 CcMapData@24
  15 CcMdlReadComplete@8
  16 CcSetDirtyPinnedData@8
  17 CcSetFileSizes@8
  18 CcUnpinData@4
  19 DbgBreakPoint@0
  20 DbgBreakPointWithStatus@4
  21 ;DbgLoadImageSymbols@12
  22 DbgPrint
  23 DbgPrompt@12
  24 DpcQueueSize DATA
  25 @ExAcquireFastMutexUnsafe@4
  26 ExAcquireResourceExclusive@8
  27 ExAcquireResourceExclusiveLite@8
  28 ExAcquireResourceSharedLite@8
  29 ExAcquireSharedStarveExclusive@8
  30 ExAcquireSharedWaitForExclusive@8
  31 ExAllocateFromPagedLookasideList@4
  32 ExAllocatePool@8
  33 ExAllocatePoolWithQuota@8
  34 ExAllocatePoolWithQuotaTag@12
  35 ExAllocatePoolWithTag@12
  36 ExConvertExclusiveToSharedLite@4
  37 ExCreateCallback@16
  38 ExDeleteNPagedLookasideList@4
  39 ExDeletePagedLookasideList@4
  40 ExDeleteResource@4
  41 ExDeleteResourceLite@4
  42 ExDesktopObjectType DATA
  43 ExDisableResourceBoostLite@4
  44 ExEventObjectType DATA
  45 ExExtendZone@12
  46 ExFreePool@4
  47 ExFreeToPagedLookasideList@8
  48 ExGetExclusiveWaiterCount@4
  49 ExGetPreviousMode@0
  50 ExGetSharedWaiterCount@4
  51 ExInitializeNPagedLookasideList@28
  52 ExInitializePagedLookasideList@28
  53 ExInitializeResource@4
  54 ExInitializeResourceLite@4
  55 ExInitializeZone@16
  56 ExInterlockedAddLargeInteger@16
  57 @ExInterlockedAddLargeStatistic@8
  58 ExInterlockedAddUlong@12
  59 @ExInterlockedCompareExchange64@16
  60 ExInterlockedDecrementLong@8
  61 ExInterlockedExchangeUlong@12
  62 ExInterlockedExtendZone@16
  63 ExInterlockedIncrementLong@8
  64 ExInterlockedInsertHeadList@12
  65 ExInterlockedInsertTailList@12
  66 ExInterlockedPopEntryList@8
  67 @ExInterlockedPopEntrySList@8
  68 ExInterlockedPushEntryList@12
  69 @ExInterlockedPushEntrySList@12
  70 ExInterlockedRemoveHeadList@8
  71 ExIsProcessorFeaturePresent@4
  72 ExIsResourceAcquiredExclusiveLite@4
  73 ExIsResourceAcquiredSharedLite@4
  74 ExLocalTimeToSystemTime@8
  75 ExNotifyCallback@12
  76 ExPostSystemEvent@12
  77 ;ExQueryPoolBlockSize
  78 ExQueueWorkItem@8
  79 ExRaiseAccessViolation@0
  80 ExRaiseDatatypeMisalignment@0
  81 ;ExRaiseException
  82 ;ExRaiseHardError
  83 ExRaiseStatus@4
  84 ExRegisterCallback@12
  85 ExReinitializeResourceLite@4
  86 @ExReleaseFastMutexUnsafe@4
  87 ExReleaseResourceForThread@8
  88 ExReleaseResourceForThreadLite@8
  89 @ExReleaseResourceLite@4
  90 ExSetResourceOwnerPointer@8
  91 ;ExSystemExceptionFilter
  92 ExSystemTimeToLocalTime@8
  93 ExTryToAcquireResourceExclusiveLite@4
  94 ExUnregisterCallback@4
  95 ExWindowStationObjectType DATA
  96 ExInitializeBinaryTree@12
  97 ExDeleteBinaryTree@4
  98 ExInsertBinaryTree@12
  99 ExSearchBinaryTree@12
 100 ExRemoveBinaryTree@12
 101 ExInitializeSplayTree@16
 102 ExDeleteSplayTree@4
 103 ExInsertSplayTree@12
 104 ExSearchSplayTree@12
 105 ExRemoveSplayTree@12
 106 ExWeightOfSplayTree@8
 107 ExInitializeHashTable@16
 108 ExDeleteHashTable@4
 109 ExInsertHashTable@16
 110 ExSearchHashTable@16
 111 ExRemoveHashTable@16
 112 @ExfInterlockedAddUlong@12
 113 ;@ExfInterlockedInsertHeadList
 114 ;@ExfInterlockedInsertTailList
 115 ;@ExfInterlockedPopEntryList
 116 ;@ExfInterlockedPushEntryList
 117 ;@ExfInterlockedRemoveHeadList
 118 @Exfi386InterlockedDecrementLong@4
 119 @Exfi386InterlockedExchangeUlong@8
 120 @Exfi386InterlockedIncrementLong@4
 121 Exi386InterlockedDecrementLong@4
 122 Exi386InterlockedExchangeUlong@8
 123 Exi386InterlockedIncrementLong@4
 124 FsRtlAddLargeMcbEntry@28
 125 FsRtlAddMcbEntry@16
 126 FsRtlAddToTunnelCache@32
 127 FsRtlAllocateFileLock@8
 128 FsRtlAllocatePool@8
 129 FsRtlAllocatePoolWithQuota@8
 130 FsRtlAllocatePoolWithQuotaTag@12
 131 FsRtlAllocatePoolWithTag@12
 132 FsRtlAllocateResource@0
 133 FsRtlAreNamesEqual@16
 134 FsRtlBalanceReads@4
 135 FsRtlCheckLockForReadAccess@8
 136 FsRtlCheckLockForWriteAccess@8
 137 FsRtlCheckOplock@20
 138 FsRtlCopyRead@32
 139 FsRtlCopyWrite@32
 140 FsRtlCurrentBatchOplock@4
 141 FsRtlDeleteKeyFromTunnelCache@12
 142 FsRtlDeleteTunnelCache@4
 143 FsRtlDeregisterUncProvider@4
 144 FsRtlDissectDbcs@16
 145 FsRtlDissectName@16
 146 FsRtlDoesDbcsContainWildCards@4
 147 FsRtlDoesNameContainWildCards@4
 148 FsRtlFastCheckLockForRead@24
 149 FsRtlFastCheckLockForWrite@24
 150 FsRtlFastUnlockAll@16
 151 FsRtlFastUnlockAllByKey@20
 152 FsRtlFastUnlockSingle@32
 153 FsRtlFindInTunnelCache@32
 154 FsRtlGetFileSize@8
 155 FsRtlGetNextFileLock@8
 156 FsRtlGetNextLargeMcbEntry@20
 157 FsRtlGetNextMcbEntry@20
 158 FsRtlInitializeFileLock@12
 159 FsRtlInitializeLargeMcb@8
 160 FsRtlInitializeMcb@8
 161 FsRtlInitializeOplock@4
 162 FsRtlInitializeTunnelCache@4
 163 FsRtlIsDbcsInExpression@8
 164 FsRtlIsFatDbcsLegal@20
 165 FsRtlIsHpfsDbcsLegal@20
 166 FsRtlIsNameInExpression@16
 167 FsRtlIsNtstatusExpected@4
 168 FsRtlIsTotalDeviceFailure@4
 169 FsRtlLegalAnsiCharacterArray DATA
 170 FsRtlLookupLargeMcbEntry@32
 171 FsRtlLookupLastLargeMcbEntry@12
 172 FsRtlLookupLastMcbEntry@12
 173 FsRtlLookupMcbEntry@20
 174 FsRtlMdlRead@24
 175 FsRtlMdlReadComplete@8
 176 FsRtlMdlReadCompleteDev@12
 177 FsRtlMdlReadDev@28
 178 FsRtlMdlWriteComplete@12
 179 FsRtlMdlWriteCompleteDev@16
 180 FsRtlNormalizeNtstatus@8
 181 FsRtlNotifyChangeDirectory@28
 182 FsRtlNotifyCleanup@12
 183 FsRtlNotifyFullChangeDirectory@40
 184 FsRtlNotifyFullReportChange@36
 185 FsRtlNotifyInitializeSync@4
 186 FsRtlNotifyReportChange@20
 187 FsRtlNotifyUninitializeSync@4
 188 FsRtlNotifyVolumeEvent@8
 189 FsRtlNumberOfRunsInLargeMcb@4
 190 FsRtlNumberOfRunsInMcb@4
 191 FsRtlOplockFsctrl@12
 192 FsRtlOplockIsFastIoPossible@4
 193 FsRtlPostPagingFileStackOverflow@12
 194 FsRtlPostStackOverflow@12
 195 FsRtlPrepareMdlWrite@24
 196 FsRtlPrepareMdlWriteDev@28
 197 FsRtlPrivateLock@48
 198 FsRtlProcessFileLock@12
 199 FsRtlRegisterUncProvider@12
 200 FsRtlRemoveLargeMcbEntry@20
 201 FsRtlRemoveMcbEntry@12
 202 FsRtlSplitLargeMcb@20
 203 FsRtlSyncVolumes@12
 204 FsRtlTruncateLargeMcb@12
 205 FsRtlTruncateMcb@8
 206 FsRtlUninitializeFileLock@4
 207 FsRtlUninitializeLargeMcb@4
 208 FsRtlUninitializeMcb@4
 209 FsRtlUninitializeOplock@4
 210 HalDispatchTable DATA
 211 HalPrivateDispatchTable DATA
 212 @InterlockedCompareExchange@12
 213 @InterlockedDecrement@4
 214 @InterlockedExchange@8
 215 @InterlockedExchangeAdd@8
 216 @InterlockedIncrement@4
 217 IoAcquireCancelSpinLock@4
 218 IoAcquireVpbSpinLock@4
 219 IoAdapterObjectType DATA
 220 IoAllocateAdapterChannel@20
 221 IoAllocateController@16
 222 IoAllocateErrorLogEntry@8
 223 IoAllocateIrp@8
 224 IoAllocateMdl@20
 225 IoAssignResources@24
 226 IoAttachDevice@12
 227 IoAttachDeviceByPointer@8
 228 IoAttachDeviceToDeviceStack@8
 229 IoBuildAsynchronousFsdRequest@24
 230 IoBuildDeviceIoControlRequest@36
 231 IoBuildPartialMdl@16
 232 IoBuildSynchronousFsdRequest@28
 233 IoCallDriver@8
 234 IoCancelIrp@4
 235 IoCheckDesiredAccess@8
 236 IoCheckEaBufferValidity@12
 237 IoCheckFunctionAccess@24
 238 IoCheckShareAccess@20
 239 IoCompleteRequest@8
 240 IoConnectInterrupt@44
 241 IoCreateController@4
 242 IoCreateDevice@28
 243 IoCreateFile@56
 244 IoCreateNotificationEvent@8
 245 IoCreateStreamFileObject@8
 246 IoCreateSymbolicLink@8
 247 IoCreateSynchronizationEvent@8
 248 IoCreateUnprotectedSymbolicLink@8
 249 IoDeleteController@4
 250 IoDeleteDevice@4
 251 IoDeleteSymbolicLink@4
 252 IoDetachDevice@4
 253 IoDeviceHandlerObjectSize DATA
 254 IoDeviceHandlerObjectType DATA
 255 IoDisconnectInterrupt@4
 256 IoDeviceObjectType DATA
 257 IoDriverObjectType DATA
 258 IoEnqueueIrp@4
 259 IoFastQueryNetworkAttributes@20
 260 IoFileObjectType DATA
 261 IoFreeController@4
 262 IoFreeIrp@4
 263 IoFreeMdl@4
 264 IoGetAttachedDevice@4
 265 IoGetAttachedDeviceReference@4
 266 IoGetBaseFileSystemDeviceObject@4
 267 IoGetConfigurationInformation@0
 268 IoGetCurrentProcess@0
 269 IoGetDeviceObjectPointer@16
 270 IoGetDeviceToVerify@4
 271 IoGetFileObjectGenericMapping@0
 272 IoGetInitialStack@0
 273 IoGetRelatedDeviceObject@4
 274 IoGetRequestorProcess@4
 275 IoGetStackLimits@8
 276 IoGetTopLevelIrp@0
 277 IoInitializeIrp@12
 278 IoInitializeTimer@12
 279 IoIsOperationSynchronous@4
 280 IoMakeAssociatedIrp@8
 281 IoOpenDeviceInstanceKey@20
 282 ;IoPageRead@16
 283 IoQueryDeviceDescription@32
 284 IoQueryDeviceEnumInfo@8
 285 IoQueryFileInformation@20
 286 IoQueryVolumeInformation@20
 287 IoQueueThreadIrp@4
 288 IoRaiseHardError@12
 289 IoRaiseInformationalHardError@12
 290 IoReadOperationCount DATA
 291 IoReadPartitionTable@16
 292 IoReadTransferCount DATA
 293 IoRegisterDriverReinitialization@12
 294 IoRegisterFileSystem@4
 295 IoRegisterFsRegistrationChange@8
 296 IoRegisterShutdownNotification@4
 297 IoReleaseCancelSpinLock@4
 298 IoReleaseVpbSpinLock@4
 299 IoRemoveShareAccess@8
 300 IoReportHalResourceUsage@16
 301 IoReportResourceUsage@36
 302 IoSetDeviceToVerify@8
 303 IoSetHardErrorOrVerifyDevice@8
 304 IoSetInformation@16
 305 IoSetPartitionInformation@16
 306 IoSetShareAccess@16
 307 IoSetThreadHardErrorMode@4
 308 IoSetTopLevelIrp@4
 309 IoStartNextPacket@8
 310 IoStartNextPacketByKey@12
 311 IoStartPacket@16
 312 IoStartTimer@4
 313 IoStatisticsLock DATA
 314 IoStopTimer@4
 315 IoSynchronousPageWrite@20
 316 IoThreadToProcess@4
 317 IoUnregisterFileSystem@4
 318 IoUnregisterFsRegistrationChange@8
 319 IoUnregisterShutdownNotification@4
 320 IoUpdateShareAccess@8
 321 IoVerifyVolume@8
 322 IoWriteErrorLogEntry@4
 323 IoWriteOperationCount DATA
 324 IoWritePartitionTable@20
 325 IoWriteTransferCount DATA
 326 @IofCallDriver@8
 327 @IofCompleteRequest@8
 328 KdDebuggerEnabled DATA
 329 KdDebuggerNotPresent DATA
 330 KdPollBreakIn@0
 331 KdSystemDebugControl@4
 332 Ke386CallBios@8
 333 ;Ke386IoSetAccessProcess
 334 ;Ke386QueryIoAccessMap
 335 ;Ke386SetIoAccessMap
 336 KeAcquireSpinLockAtDpcLevel@4
 337 KeAddSystemServiceTable@20
 338 KeAttachProcess@4
 339 ;KeBoostCurrentThread
 340 KeBugCheck@4
 341 KeBugCheckEx@20
 342 KeCancelTimer@4
 343 KeClearEvent@4
 344 KeConnectInterrupt@4
 345 ;KeDcacheFlushCount DATA
 346 KeDelayExecutionThread@12
 347 KeDeregisterBugCheckCallback@4
 348 KeDetachProcess@0
 349 KeDisconnectInterrupt@4
 350 KeEnterCriticalRegion@0
 351 KeEnterKernelDebugger@0
 352 ;KeFindConfigurationEntry
 353 ;KeFindConfigurationNextEntry
 354 ;KeFlushEntireTb
 355 KeGetCurrentThread@0
 356 KeGetPreviousMode@0
 357 ;KeI386AbiosCall
 358 ;KeI386AllocateGdtSelectors
 359 ;KeI386Call16BitCStyleFunction
 360 ;KeI386Call16BitFunction
 361 ;KeI386FlatToGdtSelector
 362 ;KeI386GetLid
 363 ;KeI386MachineType DATA
 364 ;KeI386ReleaseGdtSelectors
 365 ;KeI386ReleaseLid
 366 ;KeI386SetGdtSelector
 367 ;KeIcacheFlushCount DATA
 368 KeInitializeApc@32
 369 KeInitializeDeviceQueue@4
 370 KeInitializeDpc@12
 371 KeInitializeEvent@12
 372 KeInitializeInterrupt@44
 373 KeInitializeMutant@8
 374 KeInitializeMutex@8
 375 KeInitializeQueue@8
 376 KeInitializeSemaphore@12
 377 KeInitializeSpinLock@4
 378 KeInitializeTimer@4
 379 KeInitializeTimerEx@8
 380 KeInsertByKeyDeviceQueue@12
 381 KeInsertDeviceQueue@8
 382 KeInsertHeadQueue@8
 383 KeInsertQueue@8
 384 KeInsertQueueApc@16
 385 KeInsertQueueDpc@12
 386 ;KeIsExecutingDpc
 387 KeLeaveCriticalRegion@0
 388 KeLoaderBlock DATA
 389 KeNumberProcessors DATA
 390 ;KeProfileInterrupt
 391 ;KeProfileInterruptWithSource
 392 KePulseEvent@12
 393 KeQuerySystemTime@4
 394 KeQueryTickCount@4
 395 KeQueryTimeIncrement@0
 396 ;KeRaiseUserException
 397 KeReadStateEvent@4
 398 KeReadStateMutant@4
 399 KeReadStateMutex@4
 400 KeReadStateQueue@4
 401 KeReadStateSemaphore@4
 402 KeReadStateTimer@4
 403 KeRegisterBugCheckCallback@20
 404 KeReleaseMutant@16
 405 KeReleaseMutex@8
 406 KeReleaseSemaphore@16
 407 KeReleaseSpinLockFromDpcLevel@4
 408 KeRemoveByKeyDeviceQueue@8
 409 KeRemoveDeviceQueue@4
 410 KeRemoveEntryDeviceQueue@8
 411 KeRemoveQueue@12
 412 KeRemoveQueueDpc@4
 413 KeResetEvent@4
 414 ;KeRestoreFloatingPointState
 415 KeRundownQueue@4
 416 ;KeSaveFloatingPointState
 417 KeServiceDescriptorTable DATA
 418 ;KeSetAffinityThread
 419 KeSetBasePriorityThread@8
 420 ;KeSetDmaIoCoherency
 421 KeSetEvent@12
 422 ;KeSetEventBoostPriority
 423 ;KeSetIdealProcessorThread
 424 KeSetImportanceDpc@8
 425 ;KeSetKernelStackSwapEnable
 426 KeSetPriorityThread@8
 427 ;KeSetProfileIrql
 428 ;@KeSetSwapContextNotifyRoutine
 429 KeSetTargetProcessorDpc@8
 430 ;@KeSetThreadSelectNotifyRoutine
 431 ;KeSetTimeIncrement
 432 KeSetTimer@16
 433 KeSetTimerEx@20
 434 ;@KeSetTimeUpdateNotifyRoutine
 435 KeSynchronizeExecution@12
 436 ;KeTerminateThread
 437 KeTickCount DATA
 438 ;KeUpdateRunTime
 439 ;KeUserModeCallback
 440 KeWaitForMultipleObjects@32
 441 KeWaitForMutexObject@20
 442 KeWaitForSingleObject@20
 443 ;@KefAcquireSpinLockAtDpcLevel
 444 ;@KefReleaseSpinLockFromDpcLevel
 445 ;Kei386EoiHelper
 446 ;@KiAcquireSpinLock@4
 447 ;KiBugCheckData DATA
 448 ;KiCoprocessorError@0
 449 KiDeliverApc@12
 450 KiDispatchInterrupt@0
 451 ;KiIpiServiceRoutine@8
 452 ;@KiReleaseSpinLock@4
 453 ;KiUnexpectedInterrupt
 454 ;Kii386SpinOnSpinLock
 455 KiRawTicks DATA
 456 LdrAccessResource@16
 457 ;LdrEnumResources@20
 458 ;LdrFindResourceDirectory_U@16
 459 LdrFindResource_U@16
 460 ;LpcRequestPort@8
 461 LsaCallAuthenticationPackage@28
 462 LsaDeregisterLogonProcess@8
 463 LsaFreeReturnBuffer@4
 464 LsaLogonUser@56
 465 LsaLookupAuthenticationPackage@12
 466 LsaRegisterLogonProcess@12
 467 MmAdjustWorkingSetSize@12
 468 MmAllocateContiguousAlignedMemory@16
 469 MmAllocateContiguousMemory@12
 470 MmAllocateNonCachedMemory@4
 471 MmBuildMdlForNonPagedPool@4
 472 MmCanFileBeTruncated@8
 473 MmCreateMdl@12
 474 MmCreateSection@32
 475 MmDbgTranslatePhysicalAddress@8
 476 MmDisableModifiedWriteOfSection@4
 477 MmFlushImageSection@8
 478 MmForceSectionClosed@8
 479 MmFreeContiguousMemory@4
 480 MmFreeNonCachedMemory@8
 481 MmGetPhysicalAddress@4
 482 MmGrowKernelStack@4
 483 MmHighestUserAddress DATA
 484 MmIsAddressValid@4
 485 MmIsNonPagedSystemAddressValid@4
 486 MmIsRecursiveIoFault@0
 487 MmIsThisAnNtAsSystem@0
 488 MmLockPagableDataSection@4
 489 MmLockPagableImageSection@4=MmLockPagableDataSection@4
 490 MmLockPagableSectionByHandle@4
 491 MmMapIoSpace@16
 492 MmMapLockedPages@8
 493 MmMapMemoryDumpMdl@4
 494 MmMapVideoDisplay@16
 495 MmMapViewInSystemSpace@12
 496 MmMapViewOfSection@40
 497 MmPageEntireDriver@4
 498 MmProbeAndLockPages@12
 499 MmQuerySystemSize@0
 500 MmResetDriverPaging@4
 501 MmSectionObjectType DATA
 502 MmSecureVirtualMemory@12
 503 MmSetAddressRangeModified@8
 504 MmSetBankedSection@24
 505 MmSizeOfMdl@8
 506 MmUnlockPagableImageSection@4
 507 MmUnlockPages@4
 508 MmUnmapIoSpace@8
 509 MmUnmapLockedPages@8
 510 MmUnmapVideoDisplay@8
 511 MmUnmapViewInSystemSpace@4
 512 MmUnmapViewOfSection@8
 513 MmUnsecureVirtualMemory@4
 514 MmUserProbeAddress DATA
 515 NlsAnsiCodePage DATA
 516 NlsLeadByteInfo DATA
 517 NlsMbCodePageTag DATA
 518 NlsMbOemCodePageTag DATA
 519 NlsOemLeadByteInfo DATA
 520 NtAddAtom@8
 521 NtAdjustPrivilegesToken@24
 522 NtAlertThread@4
 523 NtAllocateLocallyUniqueId@4
 524 NtAllocateUuids@12
 525 NtAllocateVirtualMemory@24
 526 NtBuildNumber DATA
 527 NtClose@4
 528 NtConnectPort@32
 529 NtCreateEvent@20
 530 NtCreateTimer@16
 531 NtOpenEvent@12
 532 NtCreateFile@44
 533 NtCreateSection@28
 534 NtDeleteAtom@4
 535 NtDeleteFile@4
 536 NtDeviceIoControlFile@40
 537 NtDuplicateObject@28
 538 NtDuplicateToken@24
 539 NtFindAtom@8
 540 NtFreeVirtualMemory@16
 541 NtFsControlFile@40
 542 NtGlobalFlag DATA
 543 NtLockFile@40
 544 NtMapViewOfSection@40
 545 NtNotifyChangeDirectoryFile@36
 546 NtOpenFile@24
 547 NtOpenProcess@16
 548 NtOpenProcessToken@12
 549 NtQueryDirectoryFile@44
 550 NtQueryEaFile@36
 551 NtQueryInformationAtom@20
 552 NtQueryInformationFile@20
 553 NtQueryInformationProcess@20
 554 NtQueryInformationToken@20
 555 ;NtQueryOleDirectoryFile@ <--- ?
 556 NtQuerySecurityObject@20
 557 NtQuerySystemTime@4
 558 NtQueryVolumeInformationFile@20
 559 NtReadFile@36
 560 NtRequestPort@20
 561 NtRequestWaitReplyPort@12
 562 NtSetEvent@8
 563 NtSetInformationFile@20
 564 NtSetInformationProcess@16
 565 NtSetInformationThread@16
 566 NtSetSecurityObject@12
 567 NtSetSystemTime@8
 568 NtUnlockFile@20
 569 NtVdmControl@8
 570 NtW32Call@20
 571 NtWaitForSingleObject@12
 572 NtWriteFile@36
 573 ObAssignSecurity@16
 574 ;ObCheckCreateObjectAccess@28
 575 ;ObCheckObjectAccess@20
 576 ;ObCreateObject@36
 577 ObCreateObject@20
 578 ;ObFindHandleForObject@20
 579 ObGetObjectPointerCount@4
 580 ObGetObjectSecurity@12
 581 ;ObInsertObject@24
 582 ObMakeTemporaryObject@4
 583 ObOpenObjectByName@28
 584 ObOpenObjectByPointer@28
 585 ;ObQueryNameString@16
 586 ;ObQueryObjectAuditingByHandle@8
 587 @ObfDereferenceObject@4
 588 @ObfReferenceObject@4
 589 ObReferenceObjectByHandle@24
 590 ObReferenceObjectByName@32
 591 ObReferenceObjectByPointer@16
 592 ObReleaseObjectSecurity@8
 593 ;ObSetSecurityDescriptorInfo@24
 594 ;PfxFindPrefix
 595 ;PfxInitialize
 596 ;PfxInsertPrefix
 597 ;PfxRemovePrefix
 598 PoCallDriver@8
 599 PoRegisterDeviceForIdleDetection@16
 600 PoRegisterSystemState@8
 601 PoRequestPowerIrp@24
 602 PoSetDeviceBusy@4
 603 PoSetPowerState@12
 604 PoSetSystemState@4
 605 PoStartNextPowerIrp@4
 606 PoUnregisterSystemState@4
 607 ;ProbeForWrite@12
 608 PsAssignImpersonationToken@8
 609 ;PsChargePoolQuota@12
 610 PsCreateSystemProcess@12
 611 PsCreateSystemThread@28
 612 PsCreateWin32Thread@4
 613 PsCreateWin32Process@4
 614 PsGetWin32Thread@0
 615 PsGetWin32Process@0
 616 PsEstablishWin32Callouts@24
 617 PsGetCurrentProcess@0
 618 PsGetCurrentProcessId@0
 619 PsGetCurrentThreadId@0
 620 PsGetCurrentThread@0
 621 PsGetProcessExitTime@0
 622 PsGetVersion@16
 623 PsImpersonateClient@20
 624 PsInitialSystemProcess DATA
 625 PsIsThreadTerminating@4
 626 PsLookupProcessByProcessId@8
 627 PsLookupProcessThreadByCid@12
 628 PsLookupThreadByThreadId@8
 629 PsProcessType DATA
 630 PsReferenceImpersonationToken@16
 631 PsReferencePrimaryToken@4
 632 ;PsReturnPoolQuota@12
 633 PsRevertToSelf@0
 634 PsSetCreateProcessNotifyRoutine@8
 635 PsSetCreateThreadNotifyRoutine@4
 636 ;PsSetLegoNotifyRoutine@4
 637 ;PsSetProcessPriorityByClass@8
 638 PsTerminateSystemThread@4
 639 PsThreadType DATA
 640 READ_REGISTER_UCHAR@4
 641 READ_REGISTER_ULONG@4
 642 READ_REGISTER_USHORT@4
 643 READ_REGISTER_BUFFER_UCHAR@12
 644 READ_REGISTER_BUFFER_ULONG@12
 645 READ_REGISTER_BUFFER_USHORT@12
 646 RtlAbsoluteToSelfRelativeSD@12
 647 RtlAddAccessAllowedAce@16
 648 RtlAddAce@20
 649 RtlAddAtomToAtomTable@12
 650 ;RtlAllocateAndInitializeSid
 651 ;RtlAllocateHeap
 652 RtlAnsiCharToUnicodeChar@4
 653 RtlAnsiStringToUnicodeSize@4
 654 RtlAnsiStringToUnicodeString@12
 655 RtlAppendAsciizToString@8
 656 RtlAppendStringToString@8
 657 RtlAppendUnicodeStringToString@8
 658 RtlAppendUnicodeToString@8
 659 RtlAreAllAccessesGranted@8
 660 RtlAreAnyAccessesGranted@8
 661 RtlAreBitsClear@12
 662 RtlAreBitsSet@12
 663 RtlAssert@16
 664 ;RtlCaptureStackBackTrace
 665 RtlCharToInteger@12
 666 RtlCheckRegistryKey@8
 667 RtlClearAllBits@4
 668 RtlClearBits@12
 669 RtlCompareMemory@12
 670 RtlCompareMemoryUlong@12
 671 RtlCompareString@12
 672 RtlCompareUnicodeString@12
 673 ;RtlCompressBuffer
 674 ;RtlCompressChunks
 675 RtlConvertLongToLargeInteger@4
 676 RtlConvertSidToUnicodeString@12
 677 RtlConvertUlongToLargeInteger@4
 678 RtlCopyLuid@8
 679 RtlCopySid@12
 680 RtlCopyString@8
 681 RtlCopyUnicodeString@8
 682 RtlCreateAcl@12
 683 RtlCreateAtomTable@8
 684 ;RtlCreateHeap
 685 RtlCreateRegistryKey@8
 686 RtlCreateSecurityDescriptor@8
 687 RtlCreateUnicodeString@8
 688 RtlCustomCPToUnicodeN@24
 689 ;RtlDecompressBuffer
 690 ;RtlDecompressChunks
 691 ;RtlDecompressFragment
 692 ;RtlDelete
 693 RtlDeleteAtomFromAtomTable@8
 694 ;RtlDeleteElementGenericTable
 695 ;RtlDeleteNoSplay
 696 RtlDeleteRegistryValue@12
 697 ;RtlDescribeChunk
 698 RtlDestroyAtomTable@4
 699 ;RtlDestroyHeap
 700 RtlDowncaseUnicodeString@12
 701 RtlEmptyAtomTable@8
 702 RtlEnlargedIntegerMultiply@8
 703 RtlEnlargedUnsignedDivide@16
 704 RtlEnlargedUnsignedMultiply@8
 705 ;RtlEnumerateGenericTable
 706 ;RtlEnumerateGenericTableWithoutSplaying
 707 RtlEqualLuid@8
 708 RtlEqualSid@8
 709 RtlEqualString@12
 710 RtlEqualUnicodeString@12
 711 RtlExtendedIntegerMultiply@12
 712 RtlExtendedLargeIntegerDivide@16
 713 RtlExtendedMagicDivide@20
 714 RtlFillMemory@12
 715 RtlFillMemoryUlong@12
 716 RtlFindClearBits@12
 717 RtlFindClearBitsAndSet@12
 718 RtlFindFirstRunClear@8
 719 RtlFindFirstRunSet@8
 720 RtlFindLongestRunClear@8
 721 RtlFindLongestRunSet@8
 722 RtlFindMessage@20
 723 RtlFindSetBits@12
 724 RtlFindSetBitsAndClear@12
 725 ;RtlFindUnicodePrefix
 726 RtlFormatCurrentUserKeyPath@4
 727 RtlFreeAnsiString@4
 728 ;RtlFreeHeap
 729 RtlFreeOemString@4
 730 RtlFreeUnicodeString@4
 731 ;RtlGenerate8dot3Name
 732 ;RtlGetCallersAddress
 733 ;RtlGetCompressionWorkSpaceSize
 734 RtlGetDaclSecurityDescriptor@16
 735 RtlGetDefaultCodePage@8
 736 ;RtlGetElementGenericTable
 737 RtlGetGroupSecurityDescriptor@12
 738 RtlGetOwnerSecurityDescriptor@12
 739 RtlImageNtHeader@4
 740 RtlInitAnsiString@8
 741 ;RtlInitCodePageTable
 742 RtlInitString@8
 743 RtlInitUnicodeString@8
 744 RtlInitializeBitMap@12
 745 ;RtlInitializeGenericTable
 746 RtlInitializeSid@12
 747 ;RtlInitializeUnicodePrefix
 748 ;RtlInsertElementGenericTable
 749 ;RtlInsertUnicodePrefix
 750 RtlIntegerToChar@16
 751 RtlIntegerToUnicodeString@12
 752 ;RtlIsNameLegalDOS8Dot3
 753 RtlLargeIntegerAdd@16
 754 RtlLargeIntegerArithmeticShift@12
 755 RtlLargeIntegerDivide@20
 756 RtlLargeIntegerNegate@8
 757 RtlLargeIntegerShiftLeft@12
 758 RtlLargeIntegerShiftRight@12
 759 RtlLargeIntegerSubtract@16
 760 RtlLengthRequiredSid@4
 761 RtlLengthSecurityDescriptor@4
 762 RtlLengthSid@4
 763 RtlLookupAtomInAtomTable@12
 764 ;RtlLookupElementGenericTable
 765 RtlMapGenericMask@8
 766 RtlMoveMemory@12
 767 RtlMultiByteToUnicodeN@20
 768 RtlMultiByteToUnicodeSize@12
 769 ;RtlNextUnicodePrefix
 770 RtlNtStatusToDosError@4
 771 RtlNtStatusToDosErrorNoTeb@4
 772 ;RtlNumberGenericTableElements
 773 RtlNumberOfClearBits@4
 774 RtlNumberOfSetBits@4
 775 RtlOemStringToCountedUnicodeString@12
 776 RtlOemStringToUnicodeSize@4
 777 RtlOemStringToUnicodeString@12
 778 RtlOemToUnicodeN@20
 779 RtlPinAtomInAtomTable@8
 780 RtlPrefixString@12
 781 RtlPrefixUnicodeString@12
 782 RtlQueryAtomInAtomTable@24
 783 RtlQueryRegistryValues@20
 784 RtlQueryTimeZoneInformation@4
 785 RtlRaiseException@4
 786 ;RtlRandom
 787 ;RtlRemoveUnicodePrefix
 788 ;RtlReserveChunk
 789 RtlSecondsSince1970ToTime@8
 790 RtlSecondsSince1980ToTime@8
 791 RtlSetAllBits@4
 792 RtlSetBits@12
 793 RtlSetDaclSecurityDescriptor@16
 794 RtlSetGroupSecurityDescriptor@12
 795 RtlSetOwnerSecurityDescriptor@12
 796 RtlSetSaclSecurityDescriptor@16
 797 RtlSetTimeZoneInformation@4
 798 ;RtlSplay
 799 RtlSubAuthorityCountSid@4
 800 RtlSubAuthoritySid@8
 801 RtlTimeFieldsToTime@8
 802 RtlTimeToSecondsSince1970@8
 803 RtlTimeToSecondsSince1980@8
 804 RtlTimeToTimeFields@8
 805 RtlUnicodeStringToAnsiSize@4
 806 RtlUnicodeStringToAnsiString@12
 807 RtlUnicodeStringToCountedOemString@12
 808 RtlUnicodeStringToInteger@12
 809 RtlUnicodeStringToOemSize@4
 810 RtlUnicodeStringToOemString@12
 811 RtlUnicodeToCustomCPN@24
 812 RtlUnicodeToMultiByteN@20
 813 RtlUnicodeToMultiByteSize@12
 814 RtlUnicodeToOemN@20
 815 RtlUnwind@16
 816 RtlUpcaseUnicodeChar@4
 817 RtlUpcaseUnicodeString@12
 818 RtlUpcaseUnicodeStringToAnsiString@12
 819 RtlUpcaseUnicodeStringToCountedOemString@12
 820 RtlUpcaseUnicodeStringToOemString@12
 821 RtlUpcaseUnicodeToCustomCPN@24
 822 RtlUpcaseUnicodeToMultiByteN@20
 823 RtlUpcaseUnicodeToOemN@20
 824 RtlUpperChar@4
 825 RtlUpperString@8
 826 RtlValidSecurityDescriptor@4
 827 RtlValidSid@4
 828 RtlWriteRegistryValue@24
 829 ;RtlZeroHeap
 830 RtlZeroMemory@8
 831 RtlxAnsiStringToUnicodeSize@4
 832 RtlxOemStringToUnicodeSize@4
 833 RtlxUnicodeStringToAnsiSize@4
 834 RtlxUnicodeStringToOemSize@4
 835 SeAccessCheck@40
 836 ;SeAppendPrivileges@8
 837 SeAssignSecurity@28
 838 ;SeAuditingFileEvents@8
 839 ;SeAuditingFileOrGlobalEvents@18
 840 ;SeCaptureSecurityDescriptor@20
 841 SeCaptureSubjectContext@4
 842 ;SeCloseObjectAuditAlarm@12
 843 ;SeCreateAccessState@16
 844 SeCreateClientSecurity@16
 845 SeDeassignSecurity@4
 846 ;SeDeleteAccessState@4
 847 ;SeDeleteObjectAuditAlarm@8
 848 SeExports DATA
 849 ;SeFreePrivileges@4
 850 SeImpersonateClient@8
 851 ;SeLockSubjectContext@4
 852 ;SeMarkLogonSessionForTerminationNotification@4
 853 ;SeOpenObjectAuditAlarm@36
 854 ;SeOpenObjectForDeleteAuditAlarm@36
 855 SePrivilegeCheck@12
 856 ;SePrivilegeObjectAuditAlarm@24
 857 SePublicDefaultDacl DATA
 858 ;SeQueryAuthenticationIdToken@8
 859 ;SeQuerySecurityDescriptorInfo@16
 860 ;SeRegisterLogonSessionTerminatedRoutine@4
 861 ;SeReleaseSecurityDescriptor@12
 862 SeReleaseSubjectContext@4
 863 ;SeSetAccessStateGenericMapping@8
 864 ;SeSetSecurityDescriptorInfo@24
 865 SeSinglePrivilegeCheck@12
 866 SeSystemDefaultDacl DATA
 867 SeTokenImpersonationLevel@4
 868 SeTokenType@4
 869 ;SeUnlockSubjectContext@4
 870 ;SeUnregisterLogonSessionTerminatedRoutine@4
 871 ;SeValidSecurityDescriptor@8
 872 WRITE_REGISTER_UCHAR@8
 873 WRITE_REGISTER_ULONG@8
 874 WRITE_REGISTER_USHORT@8
 875 WRITE_REGISTER_BUFFER_UCHAR@12
 876 WRITE_REGISTER_BUFFER_ULONG@12
 877 WRITE_REGISTER_BUFFER_USHORT@12
 878 ZwAccessCheckAndAuditAlarm@44
 879 ZwAlertThread@4
 880 ZwAllocateVirtualMemory@24
 881 ZwClearEvent@4
 882 ZwClose@4
 883 ZwCloseObjectAuditAlarm@12
 884 ZwConnectPort@32
 885 ZwCreateDirectoryObject@12
 886 ZwCreateEvent@20
 887 ZwCreateFile@44
 888 ZwCreateKey@28
 889 ZwCreateSection@28
 890 ZwCreateSymbolicLinkObject@16
 891 ZwDeleteFile@4
 892 ZwDeleteKey@4
 893 ZwDeleteValueKey@8
 894 ZwDeviceIoControlFile@40
 895 ZwDisplayString@4
 896 ZwDuplicateObject@28
 897 ZwDuplicateToken@24
 898 ZwEnumerateKey@24
 899 ZwEnumerateValueKey@24
 900 ZwFlushInstructionCache@12
 901 ZwFlushKey@4
 902 ZwFreeVirtualMemory@16
 903 ZwFsControlFile@40
 904 ZwLoadDriver@4
 905 ZwLoadKey@8
 906 ZwMakeTemporaryObject@4
 907 ZwMapViewOfSection@40
 908 ZwNotifyChangeKey@40
 909 ZwOpenDirectoryObject@12
 910 ZwOpenEvent@12
 911 ZwOpenFile@24
 912 ZwOpenKey@12
 913 ZwOpenProcess@16
 914 ZwOpenProcessToken@12
 915 ZwOpenSection@12
 916 ZwOpenSymbolicLinkObject@12
 917 ZwOpenThread@16
 918 ZwOpenThreadToken@16
 919 ZwPulseEvent@8
 920 ZwQueryDefaultLocale@8
 921 ZwQueryDirectoryFile@44
 922 ZwQueryInformationAtom@20
 923 ZwQueryInformationFile@20
 924 ZwQueryInformationProcess@20
 925 ZwQueryInformationToken@20
 926 ZwQueryKey@20
 927 ZwQueryObject@20
 928 ZwQuerySection@20
 929 ZwQuerySecurityObject@20
 930 ZwQuerySymbolicLinkObject@12
 931 ZwQuerySystemInformation@16
 932 ZwQuerySystemTime@4
 933 ZwQueryValueKey@24
 934 ZwQueryVolumeInformationFile@20
 935 ZwReadFile@36
 936 ZwReplaceKey@12
 937 ZwRequestWaitReplyPort@12
 938 ZwResetEvent@8
 939 ZwSaveKey@8
 940 ZwSetDefaultLocale@8
 941 ZwSetEvent@8
 942 ZwSetInformationFile@20
 943 ZwSetInformationObject@16
 944 ZwSetInformationProcess@16
 945 ZwSetInformationThread@16
 946 ZwSetSystemInformation@12
 947 ZwSetSystemTime@8
 948 ZwSetValueKey@24
 949 ZwTerminateProcess@8
 950 ZwUnloadDriver@4
 951 ZwUnloadKey@4
 952 ZwUnmapViewOfSection@8
 953 ZwWaitForMultipleObjects@20
 954 ZwWaitForSingleObject@12
 955 ZwWriteFile@36
 956 ZwYieldExecution@0
 957 _abnormal_termination
 958 ;_alldiv
 959 ;_allmul
 960 ;_allrem
 961 ;_allshl
 962 ;_allshr
 963 ;_aulldiv
 964 ;_aullrem
 965 ;_aullshr
 966 _except_handler2
 967 _except_handler3
 968 _global_unwind2
 969 _itoa
 970 _local_unwind2
 971 ;_purecall
 972 _snprintf
 973 _snwprintf
 974 _stricmp
 975 _strlwr
 976 _strnicmp
 977 _strnset
 978 _strrev
 979 _strset
 980 _strupr
 981 _vsnprintf
 982 _wcsicmp
 983 _wcslwr
 984 _wcsnicmp
 985 _wcsnset
 986 _wcsrev
 987 _wcsupr
 988 atoi
 989 atol
 990 isdigit
 991 islower
 992 isprint
 993 isspace
 994 isupper
 995 isxdigit
 996 mbstowcs
 997 mbtowc
 998 memchr
 999 memcpy
1000 memmove
1001 memset
1002 qsort
1003 rand
1004 sprintf
1005 srand
1006 strcat
1007 strchr
1008 strcmp
1009 strcpy
1010 strlen
1011 strncat
1012 strncmp
1013 strncpy
1014 strrchr
1015 strspn
1016 strstr
1017 swprintf
1018 tolower
1019 toupper
1020 towlower
1021 towupper
1022 vsprintf
1023 wcscat
1024 wcschr
1025 wcscmp
1026 wcscpy
1027 wcscspn
1028 wcslen
1029 wcsncat
1030 wcsncmp
1031 wcsncpy
1032 wcsrchr
1033 wcsspn
1034 wcsstr
1035 wcstombs
1036 wctomb