reactos-specific debugging functions KeRosDumpStackFrames and KeRosPrintAddress
[reactos.git] / reactos / ntoskrnl / ntoskrnl.def
1 ; $Id: ntoskrnl.def,v 1.183 2004/05/28 21:16:27 royce Exp $
2 ;
3 ; reactos/ntoskrnl/ntoskrnl.def
4 ;
5 ; ReactOS Operating System
6 ;
7 EXPORTS
8 CcRosInitializeFileCache@8
9 CcRosReleaseFileCache@4
10 CcCopyRead@24
11 CcCopyWrite@20
12 CcFlushCache@16
13 CcGetFileObjectFromSectionPtrs@4
14 CcMapData@24
15 CcMdlReadComplete@8
16 CcSetDirtyPinnedData@8
17 CcSetFileSizes@8
18 CcUnpinData@4
19 CcZeroData@16
20 DbgBreakPoint@0
21 DbgBreakPointWithStatus@4
22 ;DbgLoadImageSymbols@12
23 DbgPrint
24 DbgPrompt@12
25 DpcQueueSize DATA
26 @ExAcquireFastMutexUnsafe@4
27 ExAcquireResourceExclusive@8
28 ExAcquireResourceExclusiveLite@8
29 ExAcquireResourceSharedLite@8
30 ExAcquireSharedStarveExclusive@8
31 ExAcquireSharedWaitForExclusive@8
32 @ExAllocateFromPagedLookasideList@4
33 ExAllocatePool@8
34 ExAllocatePoolWithQuota@8
35 ExAllocatePoolWithQuotaTag@12
36 ExAllocatePoolWithTag@12
37 ExConvertExclusiveToSharedLite@4
38 ExCreateCallback@16
39 ExDeleteNPagedLookasideList@4
40 ExDeletePagedLookasideList@4
41 ExDeleteResource@4
42 ExDeleteResourceLite@4
43 ExDesktopObjectType DATA
44 ExDisableResourceBoostLite@4
45 ExEventObjectType DATA
46 ExExtendZone@12
47 ExFreePool@4
48 ExFreePoolWithTag@8
49 ExFreeToPagedLookasideList@8
50 ExGetExclusiveWaiterCount@4
51 ExGetPreviousMode@0
52 ExGetSharedWaiterCount@4
53 ExInitializeNPagedLookasideList@28
54 ExInitializePagedLookasideList@28
55 ExInitializeResource@4
56 ExInitializeResourceLite@4
57 ExInitializeZone@16
58 ExInterlockedAddLargeInteger@16
59 @ExInterlockedAddLargeStatistic@8
60 @ExInterlockedAddUlong@12
61 @ExInterlockedCompareExchange64@16
62 ExInterlockedDecrementLong@8
63 ExInterlockedExchangeUlong@12
64 ExInterlockedExtendZone@16
65 ExInterlockedIncrementLong@8
66 @ExInterlockedInsertHeadList@12
67 @ExInterlockedInsertTailList@12
68 @ExInterlockedPopEntryList@8
69 @ExInterlockedPopEntrySList@8
70 @ExInterlockedPushEntryList@12
71 @ExInterlockedPushEntrySList@12
72 @ExInterlockedRemoveHeadList@8
73 ExIsProcessorFeaturePresent@4
74 ExIsResourceAcquiredExclusiveLite@4
75 ExIsResourceAcquiredSharedLite@4
76 ExLocalTimeToSystemTime@8
77 ExNotifyCallback@12
78 ExPostSystemEvent@12
79 ;ExQueryPoolBlockSize
80 ExQueueWorkItem@8
81 ExRaiseAccessViolation@0
82 ExRaiseDatatypeMisalignment@0
83 ;ExRaiseException
84 ;ExRaiseHardError
85 ExRaiseStatus@4
86 ExRegisterCallback@12
87 ExReinitializeResourceLite@4
88 @ExReleaseFastMutexUnsafe@4
89 ExReleaseResourceForThread@8
90 ExReleaseResourceForThreadLite@8
91 @ExReleaseResourceLite@4
92 ExSetResourceOwnerPointer@8
93 ;ExSystemExceptionFilter
94 ExSystemTimeToLocalTime@8
95 ExTryToAcquireResourceExclusiveLite@4
96 ExUnregisterCallback@4
97 ExWindowStationObjectType DATA
98 ExInitializeBinaryTree@12
99 ExDeleteBinaryTree@4
100 ExInsertBinaryTree@12
101 ExSearchBinaryTree@12
102 ExRemoveBinaryTree@12
103 ExTraverseBinaryTree@16
104 ExInitializeSplayTree@16
105 ExDeleteSplayTree@4
106 ExInsertSplayTree@12
107 ExSearchSplayTree@12
108 ExRemoveSplayTree@12
109 ExWeightOfSplayTree@8
110 ExTraverseSplayTree@16
111 ExInitializeHashTable@16
112 ExDeleteHashTable@4
113 ExInsertHashTable@16
114 ExSearchHashTable@16
115 ExRemoveHashTable@16
116 @ExfInterlockedAddUlong@12
117 @ExfInterlockedInsertHeadList@12
118 @ExfInterlockedInsertTailList@12
119 @ExfInterlockedPopEntryList@8
120 @ExfInterlockedPushEntryList@12
121 @ExfInterlockedRemoveHeadList@8
122 @Exfi386InterlockedDecrementLong@4
123 @Exfi386InterlockedExchangeUlong@8
124 @Exfi386InterlockedIncrementLong@4
125 Exi386InterlockedDecrementLong@4
126 Exi386InterlockedExchangeUlong@8
127 Exi386InterlockedIncrementLong@4
128 FsRtlAddLargeMcbEntry@28
129 FsRtlAddMcbEntry@16
130 FsRtlAddToTunnelCache@32
131 FsRtlAllocateFileLock@8
132 FsRtlAllocatePool@8
133 FsRtlAllocatePoolWithQuota@8
134 FsRtlAllocatePoolWithQuotaTag@12
135 FsRtlAllocatePoolWithTag@12
136 FsRtlAllocateResource@0
137 FsRtlAreNamesEqual@16
138 FsRtlBalanceReads@4
139 FsRtlCheckLockForReadAccess@8
140 FsRtlCheckLockForWriteAccess@8
141 FsRtlCheckOplock@20
142 FsRtlCopyRead@32
143 FsRtlCopyWrite@32
144 FsRtlCurrentBatchOplock@4
145 FsRtlDeleteKeyFromTunnelCache@12
146 FsRtlDeleteTunnelCache@4
147 FsRtlDeregisterUncProvider@4
148 FsRtlDissectDbcs@16
149 FsRtlDissectName@16
150 FsRtlDoesDbcsContainWildCards@4
151 FsRtlDoesNameContainWildCards@4
152 FsRtlFastCheckLockForRead@24
153 FsRtlFastCheckLockForWrite@24
154 FsRtlFastUnlockAll@16
155 FsRtlFastUnlockAllByKey@20
156 FsRtlFastUnlockSingle@32
157 FsRtlFindInTunnelCache@32
158 FsRtlGetFileSize@8
159 FsRtlGetNextFileLock@8
160 FsRtlGetNextLargeMcbEntry@20
161 FsRtlGetNextMcbEntry@20
162 FsRtlInitializeFileLock@12
163 FsRtlInitializeLargeMcb@8
164 FsRtlInitializeMcb@8
165 FsRtlInitializeOplock@4
166 FsRtlInitializeTunnelCache@4
167 FsRtlIsDbcsInExpression@8
168 FsRtlIsFatDbcsLegal@20
169 FsRtlIsHpfsDbcsLegal@20
170 FsRtlIsNameInExpression@16
171 FsRtlIsNtstatusExpected@4
172 FsRtlIsTotalDeviceFailure@4
173 FsRtlLegalAnsiCharacterArray DATA
174 FsRtlLookupLargeMcbEntry@32
175 FsRtlLookupLastLargeMcbEntry@12
176 FsRtlLookupLastMcbEntry@12
177 FsRtlLookupMcbEntry@20
178 FsRtlMdlRead@24
179 FsRtlMdlReadComplete@8
180 FsRtlMdlReadCompleteDev@12
181 FsRtlMdlReadDev@28
182 FsRtlMdlWriteComplete@12
183 FsRtlMdlWriteCompleteDev@16
184 FsRtlNormalizeNtstatus@8
185 FsRtlNotifyChangeDirectory@28
186 FsRtlNotifyCleanup@12
187 FsRtlNotifyFullChangeDirectory@40
188 FsRtlNotifyFullReportChange@36
189 FsRtlNotifyInitializeSync@4
190 FsRtlNotifyReportChange@20
191 FsRtlNotifyUninitializeSync@4
192 FsRtlNotifyVolumeEvent@8
193 FsRtlNumberOfRunsInLargeMcb@4
194 FsRtlNumberOfRunsInMcb@4
195 FsRtlOplockFsctrl@12
196 FsRtlOplockIsFastIoPossible@4
197 FsRtlPostPagingFileStackOverflow@12
198 FsRtlPostStackOverflow@12
199 FsRtlPrepareMdlWrite@24
200 FsRtlPrepareMdlWriteDev@28
201 FsRtlPrivateLock@48
202 FsRtlProcessFileLock@12
203 FsRtlRegisterUncProvider@12
204 FsRtlRemoveLargeMcbEntry@20
205 FsRtlRemoveMcbEntry@12
206 FsRtlSplitLargeMcb@20
207 FsRtlSyncVolumes@12
208 FsRtlTruncateLargeMcb@12
209 FsRtlTruncateMcb@8
210 FsRtlUninitializeFileLock@4
211 FsRtlUninitializeLargeMcb@4
212 FsRtlUninitializeMcb@4
213 FsRtlUninitializeOplock@4
214 HalDispatchTable DATA
215 HalPrivateDispatchTable DATA
216 InbvAcquireDisplayOwnership@0
217 InbvCheckDisplayOwnership@0
218 InbvDisplayString@4
219 InbvEnableBootDriver@4
220 InbvEnableDisplayString@4
221 InbvInstallDisplayStringFilter@4
222 InbvIsBootDriverInstalled@0
223 InbvNotifyDisplayOwnershipLost@4
224 InbvResetDisplay@0
225 InbvSetScrollRegion@16
226 InbvSetTextColor@4
227 InbvSolidColorFill@20
228 @InterlockedCompareExchange@12
229 @InterlockedDecrement@4
230 @InterlockedExchange@8
231 @InterlockedExchangeAdd@8
232 @InterlockedIncrement@4
233 @InterlockedPopEntrySList@4
234 @InterlockedPushEntrySList@8
235 IoAcquireCancelSpinLock@4
236 IoAcquireRemoveLockEx@20
237 IoAcquireVpbSpinLock@4
238 IoAdapterObjectType DATA
239 IoAllocateAdapterChannel@20
240 IoAllocateController@16
241 IoAllocateDriverObjectExtension@16
242 IoAllocateErrorLogEntry@8
243 IoAllocateIrp@8
244 IoAllocateMdl@20
245 IoAllocateWorkItem@4
246 IoAssignResources@24
247 IoAttachDevice@12
248 IoAttachDeviceByPointer@8
249 IoAttachDeviceToDeviceStack@8
250 IoBuildAsynchronousFsdRequest@24
251 IoBuildDeviceIoControlRequest@36
252 IoBuildPartialMdl@16
253 IoBuildSynchronousFsdRequest@28
254 IoCallDriver@8
255 IoCancelIrp@4
256 IoCheckDesiredAccess@8
257 IoCheckEaBufferValidity@12
258 IoCheckFunctionAccess@24
259 IoCheckShareAccess@20
260 IoCompleteRequest@8
261 IoConnectInterrupt@44
262 IoCreateController@4
263 IoCreateDevice@28
264 IoCreateFile@56
265 IoCreateNotificationEvent@8
266 IoCreateStreamFileObject@8
267 IoCreateSymbolicLink@8
268 IoCreateSynchronizationEvent@8
269 IoCreateUnprotectedSymbolicLink@8
270 IoDeleteController@4
271 IoDeleteDevice@4
272 IoDeleteSymbolicLink@4
273 IoDetachDevice@4
274 IoDeviceHandlerObjectSize DATA
275 IoDeviceHandlerObjectType DATA
276 IoDisconnectInterrupt@4
277 IoDeviceObjectType DATA
278 IoDriverObjectType DATA
279 IoEnqueueIrp@4
280 IoFastQueryNetworkAttributes@20
281 IoFileObjectType DATA
282 IoFreeController@4
283 IoFreeIrp@4
284 IoFreeMdl@4
285 IoFreeWorkItem@4
286 IoGetAttachedDevice@4
287 IoGetAttachedDeviceReference@4
288 IoGetBaseFileSystemDeviceObject@4
289 IoGetConfigurationInformation@0
290 IoGetCurrentProcess@0
291 IoGetDriverObjectExtension@8
292 IoGetDeviceObjectPointer@16
293 IoGetDeviceProperty@20
294 IoGetDeviceToVerify@4
295 IoGetFileObjectGenericMapping@0
296 IoGetInitialStack@0
297 IoGetRelatedDeviceObject@4
298 IoGetRequestorProcess@4
299 IoGetStackLimits@8
300 IoGetTopLevelIrp@0
301 IoInitializeIrp@12
302 IoInvalidateDeviceRelations@8
303 IoInvalidateDeviceState@4
304 IoInitializeRemoveLockEx@20
305 IoInitializeTimer@12
306 IoIsOperationSynchronous@4
307 IoMakeAssociatedIrp@8
308 IoOpenDeviceInstanceKey@20
309 IoOpenDeviceRegistryKey@16
310 IoPageRead@20
311 IoQueryDeviceDescription@32
312 IoQueryDeviceEnumInfo@8
313 IoQueryFileInformation@20
314 IoQueryVolumeInformation@20
315 IoQueueThreadIrp@4
316 IoQueueWorkItem@16
317 IoRaiseHardError@12
318 IoRaiseInformationalHardError@12
319 IoReadOperationCount DATA
320 IoReadPartitionTable@16
321 IoReadTransferCount DATA
322 IoRegisterDeviceInterface@16
323 IoRegisterDriverReinitialization@12
324 IoRegisterFileSystem@4
325 IoRegisterFsRegistrationChange@8
326 IoRegisterShutdownNotification@4
327 IoReleaseCancelSpinLock@4
328 IoReleaseRemoveLockAndWaitEx@12
329 IoReleaseRemoveLockEx@12
330 IoReleaseVpbSpinLock@4
331 IoRemoveShareAccess@8
332 IoReportHalResourceUsage@16
333 IoReportResourceUsage@36
334 IoSetDeviceInterfaceState@8
335 IoSetDeviceToVerify@8
336 IoSetHardErrorOrVerifyDevice@8
337 IoSetInformation@16
338 IoSetPartitionInformation@16
339 IoSetShareAccess@16
340 IoSetThreadHardErrorMode@4
341 IoSetTopLevelIrp@4
342 IoStartNextPacket@8
343 IoStartNextPacketByKey@12
344 IoStartPacket@16
345 IoStartTimer@4
346 IoStatisticsLock DATA
347 IoStopTimer@4
348 IoSynchronousPageWrite@20
349 IoThreadToProcess@4
350 IoUnregisterFileSystem@4
351 IoUnregisterFsRegistrationChange@8
352 IoUnregisterShutdownNotification@4
353 IoUpdateShareAccess@8
354 IoVerifyVolume@8
355 IoWriteErrorLogEntry@4
356 IoWriteOperationCount DATA
357 IoWritePartitionTable@20
358 IoWriteTransferCount DATA
359 @IofCallDriver@8
360 @IofCompleteRequest@8
361 KdDebuggerEnabled DATA
362 KdDebuggerNotPresent DATA
363 KdPollBreakIn@0
364 KdSystemDebugControl@4
365 Ke386CallBios@8
366 Ke386IoSetAccessProcess@8
367 Ke386QueryIoAccessMap@8
368 Ke386SetIoAccessMap@8
369 KeAcquireSpinLockAtDpcLevel@4
370 KeAddSystemServiceTable@20
371 KeAttachProcess@4
372 ;KeBoostCurrentThread
373 KeBugCheck@4
374 KeBugCheckEx@20
375 KeCancelTimer@4
376 KeClearEvent@4
377 KeConnectInterrupt@4
378 KeDcacheFlushCount DATA
379 KeDelayExecutionThread@12
380 KeDeregisterBugCheckCallback@4
381 KeDetachProcess@0
382 KeDisconnectInterrupt@4
383 KeEnterCriticalRegion@0
384 KeEnterKernelDebugger@0
385 ;KeFindConfigurationEntry
386 ;KeFindConfigurationNextEntry
387 ;KeFlushEntireTb
388 KeGetCurrentThread@0
389 KeGetPreviousMode@0
390 ;KeI386AbiosCall
391 ;KeI386AllocateGdtSelectors
392 ;KeI386Call16BitCStyleFunction
393 ;KeI386Call16BitFunction
394 ;KeI386FlatToGdtSelector
395 ;KeI386GetLid
396 ;KeI386MachineType DATA
397 ;KeI386ReleaseGdtSelectors
398 ;KeI386ReleaseLid
399 ;KeI386SetGdtSelector
400 KeIcacheFlushCount DATA
401 KeInitializeApc@32
402 KeInitializeDeviceQueue@4
403 KeInitializeDpc@12
404 KeInitializeEvent@12
405 KeInitializeInterrupt@44
406 KeInitializeMutant@8
407 KeInitializeMutex@8
408 KeInitializeQueue@8
409 KeInitializeSemaphore@12
410 KeInitializeSpinLock@4
411 KeInitializeTimer@4
412 KeInitializeTimerEx@8
413 KeInsertByKeyDeviceQueue@12
414 KeInsertDeviceQueue@8
415 KeInsertHeadQueue@8
416 KeInsertQueue@8
417 KeInsertQueueApc@16
418 KeInsertQueueDpc@12
419 ;KeIsExecutingDpc
420 KeLeaveCriticalRegion@0
421 KeLoaderBlock DATA
422 KeNumberProcessors DATA
423 ;KeProfileInterrupt
424 ;KeProfileInterruptWithSource
425 KePulseEvent@12
426 KeQuerySystemTime@4
427 KeQueryTickCount@4
428 KeQueryTimeIncrement@0
429 ;KeRaiseUserException
430 KeRescheduleThread@0
431 KeReadStateEvent@4
432 KeReadStateMutant@4
433 KeReadStateMutex@4
434 KeReadStateQueue@4
435 KeReadStateSemaphore@4
436 KeReadStateTimer@4
437 KeRegisterBugCheckCallback@20
438 KeReleaseMutant@16
439 KeReleaseMutex@8
440 KeReleaseSemaphore@16
441 KeReleaseSpinLockFromDpcLevel@4
442 KeRemoveByKeyDeviceQueue@8
443 KeRemoveDeviceQueue@4
444 KeRemoveEntryDeviceQueue@8
445 KeRemoveQueue@12
446 KeRemoveQueueDpc@4
447 KeResetEvent@4
448 KeRestoreFloatingPointState@4
449 KeRundownQueue@4
450 KeSaveFloatingPointState@4
451 KeServiceDescriptorTable DATA
452 KeSetAffinityThread@8
453 KeSetBasePriorityThread@8
454 ;KeSetDmaIoCoherency
455 KeSetEvent@12
456 ;KeSetEventBoostPriority
457 ;KeSetIdealProcessorThread
458 KeSetImportanceDpc@8
459 ;KeSetKernelStackSwapEnable
460 KeSetPriorityThread@8
461 ;KeSetProfileIrql
462 ;@KeSetSwapContextNotifyRoutine
463 KeSetTargetProcessorDpc@8
464 ;@KeSetThreadSelectNotifyRoutine
465 ;KeSetTimeIncrement
466 KeSetTimer@16
467 KeSetTimerEx@20
468 ;@KeSetTimeUpdateNotifyRoutine
469 KeSynchronizeExecution@12
470 ;KeTerminateThread
471 KeTickCount DATA
472 ;KeUpdateRunTime
473 ;KeUserModeCallback
474 KeWaitForMultipleObjects@32
475 KeWaitForMutexObject@20
476 KeWaitForSingleObject@20
477 @KefAcquireSpinLockAtDpcLevel@4=KefAcquireSpinLockAtDpcLevel
478 @KefReleaseSpinLockFromDpcLevel@4=KefReleaseSpinLockFromDpcLevel
479 ;Kei386EoiHelper
480 @KiAcquireSpinLock@4
481 ;KiBugCheckData DATA
482 ;KiCoprocessorError@0
483 KiDeliverApc@12
484 KiDispatchInterrupt@0
485 KiInterruptDispatch2@8
486 ;KiIpiServiceRoutine@8
487 @KiReleaseSpinLock@4
488 ;KiUnexpectedInterrupt
489 ;Kii386SpinOnSpinLock
490 KiRawTicks DATA
491 LdrAccessResource@16
492 ;LdrEnumResources@20
493 ;LdrFindResourceDirectory_U@16
494 LdrFindResource_U@16
495 ;LpcRequestPort@8
496 LsaCallAuthenticationPackage@28
497 LsaDeregisterLogonProcess@8
498 LsaFreeReturnBuffer@4
499 LsaLogonUser@56
500 LsaLookupAuthenticationPackage@12
501 LsaRegisterLogonProcess@12
502 MmAdjustWorkingSetSize@12
503 MmAllocateContiguousAlignedMemory@36
504 MmAllocateContiguousMemory@12
505 MmAllocateContiguousMemorySpecifyCache@32
506 MmAllocateNonCachedMemory@4
507 MmAllocatePagesForMdl@28
508 MmBuildMdlForNonPagedPool@4
509 MmCanFileBeTruncated@8
510 MmCopyFromCaller@12
511 MmCopyToCaller@12
512 MmCreateMdl@12
513 MmCreateSection@32
514 MmDbgTranslatePhysicalAddress@8
515 MmDisableModifiedWriteOfSection@4
516 MmFlushImageSection@8
517 MmForceSectionClosed@8
518 MmFreeContiguousMemory@4
519 MmFreeContiguousMemorySpecifyCache@12
520 MmFreeNonCachedMemory@8
521 MmFreePagesFromMdl@4
522 MmGetPhysicalAddress@4
523 MmGrowKernelStack@4
524 MmHighestUserAddress DATA
525 MmIsAddressValid@4
526 MmIsNonPagedSystemAddressValid@4
527 MmIsRecursiveIoFault@0
528 MmIsThisAnNtAsSystem@0
529 MmLockPagableDataSection@4
530 MmLockPagableImageSection@4=MmLockPagableDataSection@4
531 MmLockPagableSectionByHandle@4
532 MmMapIoSpace@16
533 MmMapLockedPages@8
534 MmMapLockedPagesSpecifyCache@24
535 MmMapMemoryDumpMdl@4
536 MmMapVideoDisplay@16
537 MmMapViewInSystemSpace@12
538 MmMapViewOfSection@40
539 MmPageEntireDriver@4
540 MmProbeAndLockPages@12
541 MmQuerySystemSize@0
542 MmResetDriverPaging@4
543 MmSectionObjectType DATA
544 MmSecureVirtualMemory@12
545 MmSetAddressRangeModified@8
546 MmSetBankedSection@24
547 MmSizeOfMdl@8
548 MmUnlockPagableImageSection@4
549 MmUnlockPages@4
550 MmUnmapIoSpace@8
551 MmUnmapLockedPages@8
552 MmUnmapVideoDisplay@8
553 MmUnmapViewInSystemSpace@4
554 MmUnmapViewOfSection@8
555 MmUnsecureVirtualMemory@4
556 MmUserProbeAddress DATA
557 NlsAnsiCodePage DATA
558 NlsLeadByteInfo DATA
559 NlsMbCodePageTag DATA
560 NlsMbOemCodePageTag DATA
561 NlsOemLeadByteInfo DATA
562 NtAddAtom@8
563 NtAdjustPrivilegesToken@24
564 NtAlertThread@4
565 NtAllocateLocallyUniqueId@4
566 NtAllocateUuids@12
567 NtAllocateVirtualMemory@24
568 NtBuildNumber DATA
569 NtClose@4
570 NtConnectPort@32
571 NtCreateEvent@20
572 NtCreateTimer@16
573 NtOpenEvent@12
574 NtCreateFile@44
575 NtCreateSection@28
576 NtDeleteAtom@4
577 NtDeleteFile@4
578 NtDeviceIoControlFile@40
579 NtDuplicateObject@28
580 NtDuplicateToken@24
581 NtFindAtom@8
582 NtFreeVirtualMemory@16
583 NtFsControlFile@40
584 NtGlobalFlag DATA
585 NtLockFile@40
586 NtMapViewOfSection@40
587 NtNotifyChangeDirectoryFile@36
588 NtOpenFile@24
589 NtOpenProcess@16
590 NtOpenProcessToken@12
591 NtQueryDirectoryFile@44
592 NtQueryEaFile@36
593 NtQueryInformationAtom@20
594 NtQueryInformationFile@20
595 NtQueryInformationProcess@20
596 NtQueryInformationToken@20
597 ;NtQueryOleDirectoryFile@ <--- ?
598 NtQuerySecurityObject@20
599 NtQuerySystemTime@4
600 NtQueryVolumeInformationFile@20
601 NtReadFile@36
602 NtRequestPort@20
603 NtRequestWaitReplyPort@12
604 NtSetEvent@8
605 NtSetInformationFile@20
606 NtSetInformationProcess@16
607 NtSetInformationThread@16
608 NtSetSecurityObject@12
609 NtSetSystemTime@8
610 NtUnlockFile@20
611 NtVdmControl@8
612 NtW32Call@20
613 NtWaitForSingleObject@12
614 NtWriteFile@36
615 ObAssignSecurity@16
616 ;ObCheckCreateObjectAccess@28
617 ;ObCheckObjectAccess@20
618 ObCreateObject@36
619 ;ObFindHandleForObject@20
620 ObGetObjectPointerCount@4
621 ObGetObjectSecurity@12
622 ObInsertObject@24
623 ObMakeTemporaryObject@4
624 ObOpenObjectByName@28
625 ObOpenObjectByPointer@28
626 ObQueryNameString@16
627 ObQueryObjectAuditingByHandle@8
628 @ObfDereferenceObject@4
629 @ObfReferenceObject@4
630 ObReferenceObjectByHandle@24
631 ObReferenceObjectByName@32
632 ObReferenceObjectByPointer@16
633 ObReleaseObjectSecurity@8
634 ObDereferenceObject@4
635 ;ObSetSecurityDescriptorInfo@24
636 ;PfxFindPrefix
637 ;PfxInitialize
638 ;PfxInsertPrefix
639 ;PfxRemovePrefix
640 PoCallDriver@8
641 PoRegisterDeviceForIdleDetection@16
642 PoRegisterSystemState@8
643 PoRequestPowerIrp@24
644 PoSetDeviceBusy@4
645 PoSetPowerState@12
646 PoSetSystemState@4
647 PoStartNextPowerIrp@4
648 PoUnregisterSystemState@4
649 ProbeForRead@12
650 ProbeForWrite@12
651 PsAssignImpersonationToken@8
652 ;PsChargePoolQuota@12
653 PsCreateSystemProcess@12
654 PsCreateSystemThread@28
655 PsCreateWin32Process@4
656 PsEstablishWin32Callouts@24
657 PsGetCurrentProcessId@0
658 PsGetCurrentThreadId@0
659 PsGetProcessExitTime@0
660 PsGetVersion@16
661 PsGetWin32Thread@0
662 PsGetWin32Process@0
663 PsImpersonateClient@20
664 PsInitialSystemProcess DATA
665 PsIsThreadTerminating@4
666 PsLookupProcessByProcessId@8
667 PsLookupProcessThreadByCid@12
668 PsLookupThreadByThreadId@8
669 PsProcessType DATA
670 PsReferenceImpersonationToken@16
671 PsReferencePrimaryToken@4
672 ;PsReturnPoolQuota@12
673 PsRevertToSelf@0
674 PsSetCreateProcessNotifyRoutine@8
675 PsSetCreateThreadNotifyRoutine@4
676 ;PsSetLegoNotifyRoutine@4
677 PsSetLoadImageNotifyRoutine@4
678 ;PsSetProcessPriorityByClass@8
679 PsTerminateSystemThread@4
680 PsThreadType DATA
681 READ_REGISTER_UCHAR@4
682 READ_REGISTER_ULONG@4
683 READ_REGISTER_USHORT@4
684 READ_REGISTER_BUFFER_UCHAR@12
685 READ_REGISTER_BUFFER_ULONG@12
686 READ_REGISTER_BUFFER_USHORT@12
687 KeRosPrintAddress@4
688 KeRosDumpStackFrames@8
689 RtlAbsoluteToSelfRelativeSD@12
690 RtlAddAccessAllowedAce@16
691 RtlAddAce@20
692 RtlAddAtomToAtomTable@12
693 RtlAddRange@36
694 ;RtlAllocateAndInitializeSid
695 ;RtlAllocateHeap
696 RtlAnsiCharToUnicodeChar@4
697 RtlAnsiStringToUnicodeSize@4
698 RtlAnsiStringToUnicodeString@12
699 RtlAppendAsciizToString@8
700 RtlAppendStringToString@8
701 RtlAppendUnicodeStringToString@8
702 RtlAppendUnicodeToString@8
703 RtlAreAllAccessesGranted@8
704 RtlAreAnyAccessesGranted@8
705 RtlAreBitsClear@12
706 RtlAreBitsSet@12
707 RtlAssert@16
708 ;RtlCaptureStackBackTrace
709 RtlCharToInteger@12
710 RtlCheckRegistryKey@8
711 RtlClearAllBits@4
712 RtlClearBits@12
713 RtlCompareMemory@12
714 RtlCompareMemoryUlong@12
715 RtlCompareString@12
716 RtlCompareUnicodeString@12
717 RtlCompressBuffer@32
718 RtlCompressChunks@28
719 RtlConvertLongToLargeInteger@4
720 RtlConvertSidToUnicodeString@12
721 RtlConvertUlongToLargeInteger@4
722 RtlCopyLuid@8
723 RtlCopyRangeList@8
724 RtlCopySid@12
725 RtlCopyString@8
726 RtlCopyUnicodeString@8
727 RtlCreateAcl@12
728 RtlCreateAtomTable@8
729 ;RtlCreateHeap
730 RtlCreateRegistryKey@8
731 RtlCreateSecurityDescriptor@8
732 RtlCreateUnicodeString@8
733 RtlCustomCPToUnicodeN@24
734 RtlDecompressBuffer@24
735 RtlDecompressChunks@28
736 RtlDecompressFragment@32
737 ;RtlDelete
738 RtlDeleteAtomFromAtomTable@8
739 ;RtlDeleteElementGenericTable
740 ;RtlDeleteNoSplay
741 RtlDeleteOwnersRanges@8
742 RtlDeleteRange@24
743 RtlDeleteRegistryValue@12
744 RtlDescribeChunk@20
745 RtlDestroyAtomTable@4
746 ;RtlDestroyHeap
747 RtlDowncaseUnicodeString@12
748 RtlEmptyAtomTable@8
749 RtlEnlargedIntegerMultiply@8
750 RtlEnlargedUnsignedDivide@16
751 RtlEnlargedUnsignedMultiply@8
752 ;RtlEnumerateGenericTable
753 ;RtlEnumerateGenericTableWithoutSplaying
754 RtlEqualLuid@8
755 RtlEqualSid@8
756 RtlEqualString@12
757 RtlEqualUnicodeString@12
758 RtlExtendedIntegerMultiply@12
759 RtlExtendedLargeIntegerDivide@16
760 RtlExtendedMagicDivide@20
761 RtlFillMemory@12
762 RtlFillMemoryUlong@12
763 RtlFindClearBits@12
764 RtlFindClearBitsAndSet@12
765 RtlFindFirstRunClear@8
766 RtlFindFirstRunSet@8
767 RtlFindLeastSignificantBit@8
768 RtlFindLongestRunClear@8
769 RtlFindLongestRunSet@8
770 RtlFindMessage@20
771 RtlFindMostSignificantBit@8
772 RtlFindRange@48
773 RtlFindSetBits@12
774 RtlFindSetBitsAndClear@12
775 ;RtlFindUnicodePrefix
776 RtlFormatCurrentUserKeyPath@4
777 RtlFreeAnsiString@4
778 ;RtlFreeHeap
779 RtlFreeRangeList@4
780 RtlFreeOemString@4
781 RtlFreeUnicodeString@4
782 RtlGenerate8dot3Name@16
783 ;RtlGetCallersAddress
784 RtlGetCompressionWorkSpaceSize@12
785 RtlGetDaclSecurityDescriptor@16
786 RtlGetDefaultCodePage@8
787 ;RtlGetElementGenericTable
788 RtlGetFirstRange@12
789 RtlGetGroupSecurityDescriptor@12
790 RtlGetNextRange@12
791 RtlGetOwnerSecurityDescriptor@12
792 RtlGetVersion@4
793 RtlImageNtHeader@4
794 RtlImageDirectoryEntryToData@16
795 RtlInitAnsiString@8
796 RtlInitCodePageTable@8
797 RtlInitString@8
798 RtlInitUnicodeString@8
799 RtlInitializeBitMap@12
800 ;RtlInitializeGenericTable
801 RtlInitializeRangeList@4
802 RtlInitializeSid@12
803 ;RtlInitializeUnicodePrefix
804 ;RtlInsertElementGenericTable
805 ;RtlInsertUnicodePrefix
806 RtlIntegerToChar@16
807 RtlIntegerToUnicodeString@12
808 RtlInvertRangeList@8
809 RtlIsNameLegalDOS8Dot3@12
810 RtlIsRangeAvailable@40
811 RtlLargeIntegerAdd@16
812 RtlLargeIntegerArithmeticShift@12
813 RtlLargeIntegerDivide@20
814 RtlLargeIntegerNegate@8
815 RtlLargeIntegerShiftLeft@12
816 RtlLargeIntegerShiftRight@12
817 RtlLargeIntegerSubtract@16
818 RtlLengthRequiredSid@4
819 RtlLengthSecurityDescriptor@4
820 RtlLengthSid@4
821 RtlLookupAtomInAtomTable@12
822 ;RtlLookupElementGenericTable
823 RtlMapGenericMask@8
824 RtlMergeRangeLists@16
825 RtlMoveMemory@12
826 RtlMultiByteToUnicodeN@20
827 RtlMultiByteToUnicodeSize@12
828 ;RtlNextUnicodePrefix
829 RtlNtStatusToDosError@4
830 RtlNtStatusToDosErrorNoTeb@4
831 ;RtlNumberGenericTableElements
832 RtlNumberOfClearBits@4
833 RtlNumberOfSetBits@4
834 RtlOemStringToCountedUnicodeString@12
835 RtlOemStringToUnicodeSize@4
836 RtlOemStringToUnicodeString@12
837 RtlOemToUnicodeN@20
838 RtlPinAtomInAtomTable@8
839 RtlPrefixString@12
840 RtlPrefixUnicodeString@12
841 RtlQueryAtomInAtomTable@24
842 RtlQueryRegistryValues@20
843 RtlQueryTimeZoneInformation@4
844 RtlRaiseException@4
845 RtlRandom@4
846 ;RtlRemoveUnicodePrefix
847 RtlReserveChunk@20
848 RtlSecondsSince1970ToTime@8
849 RtlSecondsSince1980ToTime@8
850 RtlSetAllBits@4
851 RtlSetBits@12
852 RtlSetDaclSecurityDescriptor@16
853 RtlSetGroupSecurityDescriptor@12
854 RtlSetOwnerSecurityDescriptor@12
855 RtlSetSaclSecurityDescriptor@16
856 RtlSetTimeZoneInformation@4
857 ;RtlSplay
858 RtlSubAuthorityCountSid@4
859 RtlSubAuthoritySid@8
860 RtlTimeFieldsToTime@8
861 RtlTimeToSecondsSince1970@8
862 RtlTimeToSecondsSince1980@8
863 RtlTimeToTimeFields@8
864 @RtlUlongByteSwap@4
865 @RtlUlonglongByteSwap@8
866 RtlUnicodeStringToAnsiSize@4
867 RtlUnicodeStringToAnsiString@12
868 RtlUnicodeStringToCountedOemString@12
869 RtlUnicodeStringToInteger@12
870 RtlUnicodeStringToOemSize@4
871 RtlUnicodeStringToOemString@12
872 RtlUnicodeToCustomCPN@24
873 RtlUnicodeToMultiByteN@20
874 RtlUnicodeToMultiByteSize@12
875 RtlUnicodeToOemN@20
876 RtlUnwind@16
877 RtlUpcaseUnicodeChar@4
878 RtlUpcaseUnicodeString@12
879 RtlUpcaseUnicodeStringToAnsiString@12
880 RtlUpcaseUnicodeStringToCountedOemString@12
881 RtlUpcaseUnicodeStringToOemString@12
882 RtlUpcaseUnicodeToCustomCPN@24
883 RtlUpcaseUnicodeToMultiByteN@20
884 RtlUpcaseUnicodeToOemN@20
885 RtlUpperChar@4
886 RtlUpperString@8
887 @RtlUshortByteSwap@4
888 RtlValidSecurityDescriptor@4
889 RtlValidSid@4
890 RtlWriteRegistryValue@24
891 ;RtlZeroHeap
892 RtlZeroMemory@8
893 RtlxAnsiStringToUnicodeSize@4
894 RtlxOemStringToUnicodeSize@4
895 RtlxUnicodeStringToAnsiSize@4
896 RtlxUnicodeStringToOemSize@4
897 SeAccessCheck@40
898 ;SeAppendPrivileges@8
899 SeAssignSecurity@28
900 ;SeAuditingFileEvents@8
901 ;SeAuditingFileOrGlobalEvents@18
902 ;SeCaptureSecurityDescriptor@20
903 SeCaptureSubjectContext@4
904 ;SeCloseObjectAuditAlarm@12
905 ;SeCreateAccessState@16
906 SeCreateClientSecurity@16
907 SeDeassignSecurity@4
908 ;SeDeleteAccessState@4
909 SeDeleteObjectAuditAlarm@8
910 SeExports DATA
911 ;SeFreePrivileges@4
912 SeImpersonateClient@8
913 SeLockSubjectContext@4
914 ;SeMarkLogonSessionForTerminationNotification@4
915 SeOpenObjectAuditAlarm@36
916 SeOpenObjectForDeleteAuditAlarm@36
917 SePrivilegeCheck@12
918 ;SePrivilegeObjectAuditAlarm@24
919 SePublicDefaultDacl DATA
920 SeQueryAuthenticationIdToken@8
921 SeQuerySecurityDescriptorInfo@16
922 ;SeRegisterLogonSessionTerminatedRoutine@4
923 ;SeReleaseSecurityDescriptor@12
924 SeReleaseSubjectContext@4
925 ;SeSetAccessStateGenericMapping@8
926 SeSetSecurityDescriptorInfo@24
927 SeSinglePrivilegeCheck@12
928 SeSystemDefaultDacl DATA
929 SeTokenImpersonationLevel@4
930 SeTokenType@4
931 SeUnlockSubjectContext@4
932 ;SeUnregisterLogonSessionTerminatedRoutine@4
933 SeValidSecurityDescriptor@8
934 WRITE_REGISTER_UCHAR@8
935 WRITE_REGISTER_ULONG@8
936 WRITE_REGISTER_USHORT@8
937 WRITE_REGISTER_BUFFER_UCHAR@12
938 WRITE_REGISTER_BUFFER_ULONG@12
939 WRITE_REGISTER_BUFFER_USHORT@12
940 ZwAccessCheckAndAuditAlarm@44
941 ZwAlertThread@4
942 ZwAllocateVirtualMemory@24
943 ZwClearEvent@4
944 ZwClose@4
945 ZwCloseObjectAuditAlarm@12
946 ZwConnectPort@32
947 ZwCreateDirectoryObject@12
948 ZwCreateEvent@20
949 ZwCreateFile@44
950 ZwCreateKey@28
951 ZwCreateSection@28
952 ZwCreateSymbolicLinkObject@16
953 ZwDeleteFile@4
954 ZwDeleteKey@4
955 ZwDeleteValueKey@8
956 ZwDeviceIoControlFile@40
957 ZwDisplayString@4
958 ZwDuplicateObject@28
959 ZwDuplicateToken@24
960 ZwEnumerateKey@24
961 ZwEnumerateValueKey@24
962 ZwFlushInstructionCache@12
963 ZwFlushKey@4
964 ZwFreeVirtualMemory@16
965 ZwFsControlFile@40
966 ZwLoadDriver@4
967 ZwLoadKey@8
968 ZwMakeTemporaryObject@4
969 ZwMapViewOfSection@40
970 ZwNotifyChangeKey@40
971 ZwOpenDirectoryObject@12
972 ZwOpenEvent@12
973 ZwOpenFile@24
974 ZwOpenKey@12
975 ZwOpenProcess@16
976 ZwOpenProcessToken@12
977 ZwOpenSection@12
978 ZwOpenSymbolicLinkObject@12
979 ZwOpenThread@16
980 ZwOpenThreadToken@16
981 ZwPulseEvent@8
982 ZwQueryDefaultLocale@8
983 ZwQueryDirectoryFile@44
984 ZwQueryInformationAtom@20
985 ZwQueryInformationFile@20
986 ZwQueryInformationProcess@20
987 ZwQueryInformationToken@20
988 ZwQueryKey@20
989 ZwQueryObject@20
990 ZwQuerySection@20
991 ZwQuerySecurityObject@20
992 ZwQuerySymbolicLinkObject@12
993 ZwQuerySystemInformation@16
994 ZwQuerySystemTime@4
995 ZwQueryValueKey@24
996 ZwQueryVolumeInformationFile@20
997 ZwReadFile@36
998 ZwReplaceKey@12
999 ZwRequestWaitReplyPort@12
1000 ZwResetEvent@8
1001 ZwSaveKey@8
1002 ZwSetDefaultLocale@8
1003 ZwSetEvent@8
1004 ZwSetInformationFile@20
1005 ZwSetInformationObject@16
1006 ZwSetInformationProcess@16
1007 ZwSetInformationThread@16
1008 ZwSetSystemInformation@12
1009 ZwSetSystemTime@8
1010 ZwSetValueKey@24
1011 ZwTerminateProcess@8
1012 ZwUnloadDriver@4
1013 ZwUnloadKey@4
1014 ZwUnmapViewOfSection@8
1015 ZwWaitForMultipleObjects@20
1016 ZwWaitForSingleObject@12
1017 ZwWriteFile@36
1018 ZwYieldExecution@0
1019 _abnormal_termination
1020 _alldiv
1021 _allmul
1022 _allrem
1023 _allshl
1024 _allshr
1025 _aulldiv
1026 _aullrem
1027 _aullshr
1028 _except_handler2
1029 _except_handler3
1030 _global_unwind2
1031 _itoa
1032 _itow
1033 _local_unwind2
1034 _purecall
1035 _snprintf
1036 _snwprintf
1037 _stricmp
1038 _strlwr
1039 _strnicmp
1040 _strnset
1041 _strrev
1042 _strset
1043 _strupr
1044 _vsnprintf
1045 _wcsicmp
1046 _wcslwr
1047 _wcsnicmp
1048 _wcsnset
1049 _wcsrev
1050 _wcsupr
1051 atoi
1052 atol
1053 isdigit
1054 islower
1055 isprint
1056 isspace
1057 isupper
1058 isxdigit
1059 mbstowcs
1060 mbtowc
1061 memchr
1062 memcpy
1063 memmove
1064 memset
1065 qsort
1066 rand
1067 sprintf
1068 srand
1069 strcat
1070 strchr
1071 strcmp
1072 strcpy
1073 strlen
1074 strncat
1075 strncmp
1076 strncpy
1077 strrchr
1078 strspn
1079 strstr
1080 swprintf
1081 tolower
1082 toupper
1083 towlower
1084 towupper
1085 vsprintf
1086 wcscat
1087 wcschr
1088 wcscmp
1089 wcscpy
1090 wcscspn
1091 wcslen
1092 wcsncat
1093 wcsncmp
1094 wcsncpy
1095 wcsrchr
1096 wcsspn
1097 wcsstr
1098 wcstombs
1099 wctomb