3 ; reactos/ntoskrnl/ntoskrnl.def
5 ; ReactOS Operating System
8 CcRosInitializeFileCache@8
9 CcRosReleaseFileCache@4
19 CcGetFileObjectFromBcb@4
20 CcGetFileObjectFromSectionPtrs@4
21 CcGetFlushedValidData@8
22 CcGetLsnForFileObject@8
23 CcInitializeCacheMap@20
25 CcFastMdlReadWait DATA
26 CcFastReadNotPossible DATA
37 CcPurgeCacheSection@16
40 CcScheduleReadAhead@12
41 CcSetAdditionalCacheAttributes@12
42 CcSetBcbOwnerPointer@8
43 CcSetDirtyPageThreshold@8
44 CcSetDirtyPinnedData@8
45 CcSetLogHandleForFile@12
46 CcSetReadAheadGranularity@8
47 CcUninitializeCacheMap@12
49 CcUnpinDataForThread@8
51 CcWaitForCurrentLazyWriterActivity@0
56 CmUnRegisterCallback@8
58 DbgBreakPointWithStatus@4
59 DbgLoadImageSymbols@12
63 DbgPrintReturnControlC
64 DbgQueryDebugFilterState@8
65 DbgSetDebugFilterState@12
66 @ExiAcquireFastMutex@4=@ExAcquireFastMutex@4
67 @ExAcquireFastMutexUnsafe@4
68 ExAcquireRundownProtection=@ExfAcquireRundownProtection@4
69 ExAcquireRundownProtectionCacheAware=@ExfAcquireRundownProtectionCacheAware@4
70 ExAcquireRundownProtectionCacheAwareEx=@ExfAcquireRundownProtectionCacheAwareEx@8
71 ExAcquireRundownProtectionEx=@ExfAcquireRundownProtectionEx@8
72 ExInitializeRundownProtection=@ExfInitializeRundownProtection@4
73 ExReInitializeRundownProtection=@ExfReInitializeRundownProtection@4
74 ExReInitializeRundownProtectionCacheAware=@ExfReInitializeRundownProtectionCacheAware@4
75 ExReleaseRundownProtection=@ExfReleaseRundownProtection@4
76 ExReleaseRundownProtectionCacheAware=@ExfReleaseRundownProtectionCacheAware@4
77 ExReleaseRundownProtectionCacheAwareEx=@ExfReleaseRundownProtectionCacheAwareEx@8
78 ExReleaseRundownProtectionEx=@ExfReleaseRundownProtectionEx@8
79 ExRundownCompleted=@ExfRundownCompleted@4
80 ExRundownCompletedCacheAware=@ExfRundownCompletedCacheAware@4
81 ExWaitForRundownProtectionRelease=@ExfWaitForRundownProtectionRelease@4
82 ExWaitForRundownProtectionReleaseCacheAware=@ExfWaitForRundownProtectionReleaseCacheAware@4
83 ExAllocateCacheAwareRundownProtection@8
84 ExFreeCacheAwareRundownProtection@4
85 ExInitializeRundownProtectionCacheAware@8
86 ExSizeOfRundownProtectionCacheAware@0
87 ExAcquireResourceExclusiveLite@8
88 ExAcquireResourceSharedLite@8
89 ExAcquireSharedStarveExclusive@8
90 ExAcquireSharedWaitForExclusive@8
91 ExAllocateFromPagedLookasideList@4=ExiAllocateFromPagedLookasideList@4
93 ExAllocatePoolWithQuota@8
94 ExAllocatePoolWithQuotaTag@12
95 ExAllocatePoolWithTag@12
96 ExAllocatePoolWithTagPriority@16
97 ExConvertExclusiveToSharedLite@4
99 ExDeleteNPagedLookasideList@4
100 ExDeletePagedLookasideList@4
101 ExDeleteResourceLite@4
102 ExDesktopObjectType DATA
103 ExDisableResourceBoostLite@4
105 @ExEnterCriticalRegionAndAcquireFastMutexUnsafe@4
106 ExEventObjectType DATA
110 ExFreeToPagedLookasideList@8=ExiFreeToPagedLookasideList@8
111 ExGetCurrentProcessorCounts@12
112 ExGetCurrentProcessorCpuUsage@4
113 ExGetExclusiveWaiterCount@4
115 ExGetSharedWaiterCount@4
116 ExInitializeNPagedLookasideList@28
117 ExInitializePagedLookasideList@28
118 ExInitializeResourceLite@4
120 ExInterlockedAddLargeInteger@16
121 @ExInterlockedAddLargeStatistic@8
122 ExInterlockedAddUlong@12
123 @ExInterlockedCompareExchange64@16
124 ExInterlockedDecrementLong@8
125 ExInterlockedExchangeUlong@12
126 ExInterlockedExtendZone@16
127 ExInterlockedIncrementLong@8
128 @ExInterlockedFlushSList@4
129 ExInterlockedInsertHeadList@12
130 ExInterlockedInsertTailList@12
131 ExInterlockedPopEntryList@8
132 @ExInterlockedPopEntrySList@8
133 ExInterlockedPushEntryList@12
134 @ExInterlockedPushEntrySList@12
135 ExInterlockedRemoveHeadList@8
136 ExIsProcessorFeaturePresent@4
137 ExIsResourceAcquiredExclusiveLite@4
138 ExIsResourceAcquiredSharedLite@4
139 ExLocalTimeToSystemTime@8
141 ExQueryPoolBlockSize@8
143 ExRaiseAccessViolation@0
144 ExRaiseDatatypeMisalignment@0
145 ExRaiseException@4=RtlRaiseException@4
147 ExRaiseStatus@4=RtlRaiseStatus@4
148 ExRegisterCallback@12
149 ExReinitializeResourceLite@4
150 @ExiReleaseFastMutex@4=@ExReleaseFastMutex@4
151 @ExReleaseFastMutexUnsafe@4
152 @ExReleaseFastMutexUnsafeAndLeaveCriticalRegion@4
153 ExReleaseResourceForThreadLite@8
154 @ExReleaseResourceLite@4
155 ExSemaphoreObjectType DATA
156 ExSetResourceOwnerPointer@8
157 ExSetTimerResolution@8
158 ExSystemExceptionFilter@0
159 ExSystemTimeToLocalTime@8
160 ExTryToAcquireResourceExclusiveLite@4
161 ExUnregisterCallback@4
164 ExWindowStationObjectType DATA
165 @ExfInterlockedAddUlong@12
166 @ExfInterlockedInsertHeadList@12
167 @ExfInterlockedInsertTailList@12
168 @ExfInterlockedCompareExchange64@12
169 @ExfInterlockedPopEntryList@8
170 @ExfInterlockedPushEntryList@12
171 @ExfInterlockedRemoveHeadList@8
172 @Exfi386InterlockedDecrementLong@4
173 @Exfi386InterlockedExchangeUlong@8
174 @Exfi386InterlockedIncrementLong@4
175 Exi386InterlockedDecrementLong@4
176 Exi386InterlockedExchangeUlong@12
177 Exi386InterlockedIncrementLong@4
178 FsRtlAcquireFileExclusive@4
179 FsRtlAddLargeMcbEntry@28
181 FsRtlAddToTunnelCache@32
182 FsRtlAllocateFileLock@8
184 FsRtlAllocatePoolWithQuota@8
185 FsRtlAllocatePoolWithQuotaTag@12
186 FsRtlAllocatePoolWithTag@12
187 FsRtlAllocateResource@0
188 FsRtlAreNamesEqual@16
190 FsRtlCheckLockForReadAccess@8
191 FsRtlCheckLockForWriteAccess@8
195 FsRtlCurrentBatchOplock@4
196 FsRtlDeleteKeyFromTunnelCache@12
197 FsRtlDeleteTunnelCache@4
198 FsRtlDeregisterUncProvider@4
201 FsRtlDoesDbcsContainWildCards@4
202 FsRtlDoesNameContainWildCards@4
203 FsRtlFastCheckLockForRead@24
204 FsRtlFastCheckLockForWrite@24
205 FsRtlFastUnlockAll@16
206 FsRtlFastUnlockAllByKey@20
207 FsRtlFastUnlockSingle@32
208 FsRtlFindInTunnelCache@32
211 FsRtlGetNextFileLock@8
212 FsRtlGetNextLargeMcbEntry@20
213 FsRtlGetNextMcbEntry@20
214 FsRtlIncrementCcFastReadNotPossible@0
215 FsRtlIncrementCcFastReadNoWait@0
216 FsRtlIncrementCcFastReadResourceMiss@0
217 FsRtlIncrementCcFastReadWait@0
218 FsRtlInitializeFileLock@12
219 FsRtlInitializeLargeMcb@8
221 FsRtlInitializeOplock@4
222 FsRtlInitializeTunnelCache@4
223 FsRtlInsertPerFileObjectContext@8
224 FsRtlInsertPerStreamContext@8
225 FsRtlIsDbcsInExpression@8
226 FsRtlIsFatDbcsLegal@20
227 FsRtlIsHpfsDbcsLegal@20
228 FsRtlIsNameInExpression@16
229 FsRtlIsNtstatusExpected@4
231 FsRtlIsTotalDeviceFailure@4
232 FsRtlLegalAnsiCharacterArray DATA
233 FsRtlLookupLargeMcbEntry@32
234 FsRtlLookupLastLargeMcbEntry@12
235 FsRtlLookupLastLargeMcbEntryAndIndex@16
236 FsRtlLookupLastMcbEntry@12
237 FsRtlLookupMcbEntry@20
238 FsRtlLookupPerFileObjectContext@12
239 FsRtlLookupPerStreamContextInternal@12
241 FsRtlMdlReadComplete@8
242 FsRtlMdlReadCompleteDev@12
244 FsRtlMdlWriteComplete@12
245 FsRtlMdlWriteCompleteDev@16
246 FsRtlNormalizeNtstatus@8
247 FsRtlNotifyChangeDirectory@28
248 FsRtlNotifyCleanup@12
249 FsRtlNotifyFilterChangeDirectory@44
250 FsRtlNotifyFilterReportChange@40
251 FsRtlNotifyFullChangeDirectory@40
252 FsRtlNotifyFullReportChange@36
253 FsRtlNotifyInitializeSync@4
254 FsRtlNotifyReportChange@20
255 FsRtlNotifyUninitializeSync@4
256 FsRtlNotifyVolumeEvent@8
257 FsRtlNumberOfRunsInLargeMcb@4
258 FsRtlNumberOfRunsInMcb@4
260 FsRtlOplockIsFastIoPossible@4
261 FsRtlPostPagingFileStackOverflow@12
262 FsRtlPostStackOverflow@12
263 FsRtlPrepareMdlWrite@24
264 FsRtlPrepareMdlWriteDev@28
266 FsRtlProcessFileLock@12
267 FsRtlRegisterUncProvider@12
269 FsRtlRemoveLargeMcbEntry@20
270 FsRtlRemoveMcbEntry@12
271 FsRtlRemovePerFileObjectContext@12
272 FsRtlRemovePerStreamContext@12
274 FsRtlSplitLargeMcb@20
276 FsRtlTeardownPerStreamContexts@4
277 FsRtlTruncateLargeMcb@12
279 FsRtlUninitializeFileLock@4
280 FsRtlUninitializeLargeMcb@4
281 FsRtlUninitializeMcb@4
282 FsRtlUninitializeOplock@4
283 HalDispatchTable DATA
284 HalPrivateDispatchTable DATA
286 InbvAcquireDisplayOwnership@0
287 InbvCheckDisplayOwnership@0
289 InbvEnableBootDriver@4
290 InbvEnableDisplayString@4
291 InbvInstallDisplayStringFilter@4
292 InbvIsBootDriverInstalled@0
293 InbvNotifyDisplayOwnershipLost@4
295 InbvSetScrollRegion@16
297 InbvSolidColorFill@20
298 InitSafeBootMode DATA
299 @InterlockedCompareExchange@12
300 @InterlockedDecrement@4
301 @InterlockedExchange@8
302 @InterlockedExchangeAdd@8
303 @InterlockedIncrement@4
304 @InterlockedPushEntrySList@8
305 @InterlockedPopEntrySList@4
306 IoAcquireCancelSpinLock@4
307 IoAcquireRemoveLockEx@20
308 IoAcquireVpbSpinLock@4
309 IoAdapterObjectType DATA
310 IoAllocateAdapterChannel@20
313 IoAllocateController@16
314 IoAllocateDriverObjectExtension@16
315 IoAllocateErrorLogEntry@8
317 IoAssignDriveLetters@16
320 IoAttachDeviceByPointer@8
321 IoAttachDeviceToDeviceStack@8
322 IoAttachDeviceToDeviceStackSafe@12
323 IoBuildAsynchronousFsdRequest@24
324 IoBuildDeviceIoControlRequest@36
326 IoBuildSynchronousFsdRequest@28
330 IoCheckDesiredAccess@8
331 IoCheckEaBufferValidity@12
332 IoCheckFunctionAccess@24
333 IoCheckQuerySetFileInformation@12
334 IoCheckQuerySetVolumeInformation@12
335 IoCheckQuotaBufferValidity@12
336 IoCheckShareAccess@20
338 IoConnectInterrupt@44
344 IoCreateFileSpecifyDeviceObjectHint@60
345 IoCreateNotificationEvent@8
346 IoCreateStreamFileObject@8
347 IoCreateStreamFileObjectEx@12
348 IoCreateStreamFileObjectLite@8
349 IoCreateSymbolicLink@8
350 IoCreateSynchronizationEvent@8
351 IoCreateUnprotectedSymbolicLink@8
361 IoDeleteSymbolicLink@4
363 IoDeviceHandlerObjectSize DATA
364 IoDeviceHandlerObjectType DATA
365 IoDeviceObjectType DATA
366 IoDisconnectInterrupt@4
367 IoDriverObjectType DATA
369 IoEnumerateDeviceObjectList@16
370 IoFastQueryNetworkAttributes@20
371 IoFileObjectType DATA
372 IoForwardAndCatchIrp@8=IoForwardIrpSynchronously@8
373 IoForwardIrpSynchronously@8
375 IoFreeErrorLogEntry@4
379 IoGetAttachedDevice@4
380 IoGetAttachedDeviceReference@4
381 IoGetBaseFileSystemDeviceObject@4
382 IoGetBootDiskInformation@8
383 IoGetConfigurationInformation@0
384 IoGetCurrentProcess@0
385 IoGetDeviceObjectPointer@16
386 IoGetDeviceAttachmentBaseRef@4
387 IoGetDeviceInterfaceAlias@12
388 IoGetDeviceInterfaces@16
389 IoGetDriverObjectExtension@8
390 IoGetDeviceProperty@20
391 IoGetDeviceToVerify@4
392 IoGetDiskDeviceObject@8
394 IoGetFileObjectGenericMapping@0
396 IoGetLowerDeviceObject@4
397 IoGetRelatedDeviceObject@4
398 IoGetRequestorProcess@4
399 IoGetRequestorProcessId@4
400 IoGetRequestorSessionId@8
404 IoInvalidateDeviceRelations@8
405 IoInvalidateDeviceState@4
406 IoInitializeRemoveLockEx@20
408 IoIsFileOriginRemote@4
410 IoIsValidNameGraftingBuffer@8
411 IoIsOperationSynchronous@4
412 IoMakeAssociatedIrp@8
413 IoOpenDeviceInterfaceRegistryKey@12
414 IoOpenDeviceRegistryKey@16
416 IoPnPDeliverServicePowerNotification@16
417 IoQueryDeviceDescription@32
418 IoQueryFileDosDeviceName@8
419 IoQueryFileInformation@20
420 IoQueryVolumeInformation@20
424 IoRaiseInformationalHardError@12
425 IoReadDiskSignature@12
426 IoReadOperationCount DATA
427 @IoReadPartitionTable@16
428 IoReadPartitionTableEx@8
429 IoReadTransferCount DATA
430 IoRegisterBootDriverReinitialization@12
431 IoRegisterDeviceInterface@16
432 IoRegisterDriverReinitialization@12
433 IoRegisterFileSystem@4
434 IoRegisterFsRegistrationChange@8
435 IoRegisterLastChanceShutdownNotification@4
436 IoRegisterPlugPlayNotification@28
437 IoRegisterShutdownNotification@4
438 IoReleaseCancelSpinLock@4
439 IoReleaseRemoveLockAndWaitEx@12
440 IoReleaseRemoveLockEx@12
441 IoReleaseVpbSpinLock@4
442 IoRemoveShareAccess@8
443 IoReportDetectedDevice@32
444 IoReportHalResourceUsage@16
445 IoReportResourceUsage@36
446 IoReportResourceForDetection@28
447 IoReportTargetDeviceChange@8
448 IoReportTargetDeviceChangeAsynchronous@16
449 IoRequestDeviceEject@4
451 IoSetCompletionRoutineEx@28
452 IoSetSystemPartition@4
453 IoSetDeviceInterfaceState@8
454 IoSetDeviceToVerify@8
456 IoSetHardErrorOrVerifyDevice@8
459 @IoSetPartitionInformation@16
460 IoSetPartitionInformationEx@12
461 IoSetStartIoAttributes@12
463 IoSetThreadHardErrorMode@4
466 IoStartNextPacketByKey@12
469 IoStatisticsLock DATA
471 IoSynchronousPageWrite@20
472 IoSynchronousInvalidateDeviceRelations@8
474 IoUnregisterFileSystem@4
475 IoUnregisterFsRegistrationChange@8
476 IoUnregisterPlugPlayNotification@4
477 IoUnregisterShutdownNotification@4
478 IoUpdateShareAccess@8
479 IoValidateDeviceIoControlAccess@8
480 IoVerifyPartitionTable@8
482 IoVolumeDeviceToDosName@8
483 IoWMIAllocateInstanceIds@12
484 IoWMIDeviceObjectToInstanceName@12
485 IoWMIExecuteMethod@24
486 IoWMIHandleToInstanceName@12
489 IoWMIQueryAllDataMultiple@16
490 IoWMIQuerySingleInstance@16
491 IoWMIQuerySingleInstanceMultiple@20
492 IoWMIRegistrationControl@8
493 IoWMISetNotificationCallback@12
494 IoWMISetSingleInstance@20
495 IoWMISetSingleItem@24
496 IoWMISuggestInstanceName@16
498 IoWriteErrorLogEntry@4
499 IoWriteOperationCount DATA
500 @IoWritePartitionTable@20
501 IoWritePartitionTableEx@8
502 IoWriteTransferCount DATA
504 @IofCompleteRequest@8
505 IoIsWdmVersionAvailable@8
507 KdDebuggerEnabled DATA
508 KdDebuggerNotPresent DATA
514 KdpServiceDispatcher@12
516 Ke386IoSetAccessProcess@8
517 Ke386QueryIoAccessMap@8
518 Ke386SetIoAccessMap@8
519 @KeAcquireGuardedMutex@4
520 @KeAcquireGuardedMutexUnsafe@4
521 KeAcquireSpinLockAtDpcLevel@4
522 @KeAcquireInStackQueuedSpinLockAtDpcLevel@8
523 KeAcquireInterruptSpinLock@4
524 KeAddSystemServiceTable@20
527 ;KeBoostCurrentThread
531 KeCapturePersistentThreadState@28
534 KeDcacheFlushCount DATA
535 KeDelayExecutionThread@12
536 KeDeregisterBugCheckCallback@4
537 KeDeregisterBugCheckReasonCallback@4
539 KeDisconnectInterrupt@4
540 KeEnterCriticalRegion@0
541 KeEnterGuardedRegion@0
542 KeEnterKernelDebugger@0
543 KeFindConfigurationEntry@16
544 KeFindConfigurationNextEntry@20
549 KeGetRecommendedSharedDataAlignment@0
551 KeI386AllocateGdtSelectors@8
552 ;KeI386Call16BitCStyleFunction
553 ;KeI386Call16BitFunction
554 KeI386FlatToGdtSelector@12
556 ;KeI386MachineType DATA
557 KeI386ReleaseGdtSelectors@8
559 ;KeI386SetGdtSelector
560 KeIcacheFlushCount DATA
562 KeInitializeDeviceQueue@4
565 @KeInitializeGuardedMutex@4
566 KeInitializeInterrupt@44
570 KeInitializeSemaphore@12
571 KeInitializeSpinLock@4
573 KeInitializeTimerEx@8
574 KeInsertByKeyDeviceQueue@12
575 KeInsertDeviceQueue@8
580 KeIsAttachedProcess@0
582 KeLeaveCriticalRegion@0
583 KeLeaveGuardedRegion@0
585 KeNumberProcessors DATA
587 KeProfileInterruptWithSource@8
589 KeQueryActiveProcessors@0
590 KeQueryInterruptTime@0
591 KeQueryPriorityThread@4
592 KeQueryRuntimeThread@8
595 KeQueryTimeIncrement@0
596 KeRaiseUserException@4
599 KeReadStateMutex@4=KeReadStateMutant@4
601 KeReadStateSemaphore@4
603 KeRegisterBugCheckCallback@20
604 KeRegisterBugCheckReasonCallback@16
605 @KeReleaseGuardedMutexUnsafe@4
606 @KeReleaseGuardedMutex@4
607 @KeReleaseInStackQueuedSpinLockFromDpcLevel@4
608 KeReleaseInterruptSpinLock@8
611 KeReleaseSemaphore@16
612 KeReleaseSpinLockFromDpcLevel@4
613 KeRemoveByKeyDeviceQueue@8
614 KeRemoveByKeyDeviceQueueIfBusy@8
615 KeRemoveDeviceQueue@4
616 KeRemoveEntryDeviceQueue@8
619 KeRemoveSystemServiceTable@4
621 KeRestoreFloatingPointState@4
622 KeRevertToUserAffinityThread@0
624 KeSaveFloatingPointState@4
625 KeSaveStateForHibernate
626 KeServiceDescriptorTable DATA
627 KeSetAffinityThread@8
628 KeSetBasePriorityThread@8
629 KeSetDmaIoCoherency@4
631 KeSetEventBoostPriority@8
632 KeSetIdealProcessorThread@8
634 KeSetKernelStackSwapEnable@4
635 KeSetPriorityThread@8
637 KeSetSystemAffinityThread@4
638 ;KeSetSwapContextNotifyRoutine
639 KeSetTargetProcessorDpc@8
640 ;KeSetThreadSelectNotifyRoutine
644 @KeSetTimeUpdateNotifyRoutine@4
645 KeStackAttachProcess@8
646 KeSynchronizeExecution@12
649 @KeTryToAcquireGuardedMutex@4
652 KeUnstackDetachProcess@4
653 KeUserModeCallback@20
654 KeWaitForMultipleObjects@32
655 KeWaitForMutexObject@20=KeWaitForSingleObject@20
656 KeWaitForSingleObject@20
657 @KefAcquireSpinLockAtDpcLevel@4
658 @KefReleaseSpinLockFromDpcLevel@4
663 KiCheckForKernelApcDelivery@0
665 KiDispatchInterrupt@0
666 KiEnableTimerWatchdog
667 KiInterruptDispatch2@8
668 KiIpiServiceRoutine@8
670 KiUnexpectedInterrupt@0
671 ;Kii386SpinOnSpinLock
675 LdrFindResourceDirectory_U@16
677 LpcPortObjectType DATA
679 LpcRequestWaitReplyPort@12
680 LsaCallAuthenticationPackage@28
681 LsaDeregisterLogonProcess@8
682 LsaFreeReturnBuffer@4
684 LsaLookupAuthenticationPackage@12
685 LsaRegisterLogonProcess@12
686 Mm64BitPhysicalAddress DATA
687 MmAddPhysicalMemory@8
688 MmAddVerifierThunks@8
689 MmAdjustWorkingSetSize@12
691 MmAllocateContiguousMemory@12
692 MmAllocateContiguousMemorySpecifyCache@32
693 MmAllocateMappingAddress@8
694 MmAllocateNonCachedMemory@4
695 MmAllocatePagesForMdl@28
696 MmBuildMdlForNonPagedPool@4
697 MmCanFileBeTruncated@8
700 MmDbgTranslatePhysicalAddress@8
701 MmDisableModifiedWriteOfSection@4
702 MmFlushImageSection@8
703 MmForceSectionClosed@8
704 MmFreeContiguousMemory@4
705 MmFreeContiguousMemorySpecifyCache@12
706 MmFreeMappingAddress@8
707 MmFreeNonCachedMemory@8
709 MmGetPhysicalAddress@4
710 MmGetPhysicalMemoryRanges@0
711 MmGetSystemRoutineAddress@4
712 MmGetVirtualForPhysical@8
714 MmHighestUserAddress DATA
716 MmIsDriverVerifying@4
717 MmIsNonPagedSystemAddressValid@4
718 MmIsRecursiveIoFault@0
719 MmIsThisAnNtAsSystem@0
720 MmIsVerifierEnabled@4
721 MmLockPagableDataSection@4
722 MmLockPagableImageSection@4=MmLockPagableDataSection@4
723 MmLockPagableSectionByHandle@4
726 MmMapLockedPagesSpecifyCache@24
727 MmMapLockedPagesWithReservedMapping@16
729 MmMapUserAddressesToPage@12
731 MmMapViewInSessionSpace@12
732 MmMapViewInSystemSpace@12
733 MmMapViewOfSection@40
734 MmMarkPhysicalMemoryAsBad@8
735 MmMarkPhysicalMemoryAsGood@8
738 MmProbeAndLockPages@12
739 MmProbeAndLockProcessPages@16
740 MmProbeAndLockSelectedPages@16
741 MmProtectMdlSystemAddress@8
743 MmRemovePhysicalMemory@8
744 MmResetDriverPaging@4
745 MmSectionObjectType DATA
746 MmSecureVirtualMemory@12
747 MmSetAddressRangeModified@8
748 MmSetBankedSection@24
750 MmSystemRangeStart DATA
751 MmTrimAllSystemPagableMemory@4
752 MmUnlockPagableImageSection@4
756 MmUnmapReservedMapping@12
757 MmUnmapVideoDisplay@8
758 MmUnmapViewInSessionSpace@4
759 MmUnmapViewInSystemSpace@4
760 MmUnmapViewOfSection@8
761 MmUnsecureVirtualMemory@4
762 MmUserProbeAddress DATA
765 NlsMbCodePageTag DATA
766 NlsMbOemCodePageTag DATA
768 NlsOemLeadByteInfo DATA
770 NtAdjustPrivilegesToken@24
772 NtAllocateLocallyUniqueId@4
774 NtAllocateVirtualMemory@24
785 NtDeviceIoControlFile@40
789 NtFreeVirtualMemory@16
793 NtMakePermanentObject@4
794 NtMapViewOfSection@40
795 NtNotifyChangeDirectoryFile@36
798 NtOpenProcessToken@12
799 NtOpenProcessTokenEx@16
802 NtOpenThreadTokenEx@20
803 NtQueryDirectoryFile@44
805 NtQueryInformationAtom@20
806 NtQueryInformationFile@20
807 NtQueryInformationProcess@20
808 NtQueryInformationThread@20
809 NtQueryInformationToken@20
810 NtQueryQuotaInformationFile@36
811 NtQuerySecurityObject@20
812 NtQuerySystemInformation@16
814 NtQueryVolumeInformationFile@20
817 NtRequestWaitReplyPort@12
820 NtSetInformationFile@20
821 NtSetInformationProcess@16
822 NtSetInformationThread@16
823 NtSetQuotaInformationFile@16
824 NtSetSecurityObject@12
825 NtSetVolumeInformationFile@20
832 NtWaitForSingleObject@12
838 ;ObCheckCreateObjectAccess@28
839 ;ObCheckObjectAccess@20
842 ObCreateObjectType@16
843 ObDereferenceObject@4
844 ObDereferenceObjectDeferDelete@4
845 ObDereferenceSecurityDescriptor@8
846 @ObfDereferenceObject@4
847 ObFindHandleForObject@20
848 @ObfReferenceObject@4
849 ObGetObjectSecurity@12
852 ObLogSecurityDescriptor@12
853 ObMakeTemporaryObject@4
854 ObOpenObjectByName@28
855 ObOpenObjectByPointer@28
857 ObQueryObjectAuditingByHandle@8
858 ObReferenceObjectByHandle@24
859 ObReferenceObjectByName@32
860 ObReferenceObjectByPointer@16
861 ;ObReferenceSecurityDescriptor@8
862 ObReleaseObjectSecurity@8
863 ;ObSetHandleAttributes@12
864 ;ObSetSecurityDescriptorInfo@24
865 ;ObSetSecurityObjectByPointer@12
875 PoQueueShutdownWorkItem@4
876 PoRegisterDeviceForIdleDetection@16
877 PoRegisterSystemState@8
882 PoStartNextPowerIrp@4
883 PoUnregisterSystemState@4
886 PsAssignImpersonationToken@8
888 PsChargeProcessNonPagedPoolQuota@4=PsDereferenceImpersonationToken@4
889 PsChargeProcessPagedPoolQuota@8
890 PsChargeProcessPoolQuota@12
891 PsCreateSystemProcess@12
892 PsCreateSystemThread@28
893 PsDereferenceImpersonationToken@4=PsDereferencePrimaryToken@4
894 PsDereferencePrimaryToken@4
895 PsDisableImpersonation@8
896 PsEstablishWin32Callouts@4
897 PsGetCurrentProcess@0=KeGetCurrentProcess@0
898 PsGetCurrentProcessId@0
899 PsGetCurrentProcessSessionId@0
900 PsGetCurrentThread@0=KeGetCurrentThread@0
901 PsGetCurrentThreadId@0
902 PsGetCurrentThreadPreviousMode@0
903 PsGetCurrentThreadStackBase@0
904 PsGetCurrentThreadStackLimit@0
907 PsGetJobUIRestrictionsClass@4
908 PsGetProcessCreateTimeQuadPart@4
909 PsGetProcessDebugPort@4
910 PsGetProcessExitProcessCalled@4
911 PsGetProcessExitStatus@4
912 PsGetProcessExitTime@0
914 PsGetProcessImageFileName@4
915 PsGetProcessInheritedFromUniqueProcessId@4
918 PsGetProcessPriorityClass@4
919 PsGetProcessSectionBaseAddress@4
920 PsGetProcessSecurityPort@4
921 PsGetProcessSessionId@4
922 PsGetProcessWin32Process@4
923 PsGetProcessWin32WindowStation@4
924 PsGetThreadFreezeCount@4
925 PsGetThreadHardErrorsAreDisabled@4
928 PsGetThreadProcessId@4
929 PsGetThreadSessionId@4
931 PsGetThreadWin32Thread@4
935 PsImpersonateClient@20
936 PsInitialSystemProcess DATA
937 PsIsProcessBeingDebugged@4
939 PsIsThreadImpersonating@4
940 PsIsThreadTerminating@4
942 PsLookupProcessByProcessId@8
943 PsLookupProcessThreadByCid@12
944 PsLookupThreadByThreadId@8
946 PsReferenceImpersonationToken@16
947 PsReferencePrimaryToken@4
948 PsRemoveCreateThreadNotifyRoutine@4
949 PsRemoveLoadImageNotifyRoutine@4
950 PsRestoreImpersonation@8
952 PsReturnProcessNonPagedPoolQuota@8
953 PsReturnProcessPagedPoolQuota@8
955 PsRevertThreadToSelf@4
956 PsSetCreateProcessNotifyRoutine@8
957 PsSetCreateThreadNotifyRoutine@4
958 PsSetJobUIRestrictionsClass@8
959 PsSetLegoNotifyRoutine@4
960 PsSetProcessPriorityClass@8
961 PsSetProcessPriorityByClass@8
962 PsSetProcessSecurityPort@8
963 PsSetProcessWin32Process@8
964 PsSetProcessWindowStation@8
965 PsSetThreadHardErrorsAreDisabled@8
966 PsSetThreadWin32Thread@8
967 PsSetLoadImageNotifyRoutine@4
968 PsTerminateSystemThread@4
970 READ_REGISTER_UCHAR@4
971 READ_REGISTER_ULONG@4
972 READ_REGISTER_USHORT@4
973 READ_REGISTER_BUFFER_UCHAR@12
974 READ_REGISTER_BUFFER_ULONG@12
975 READ_REGISTER_BUFFER_USHORT@12
977 KeRosDumpStackFrames@8
978 KeRosGetStackFrames@8
979 RtlAbsoluteToSelfRelativeSD@12
980 RtlAddAccessAllowedAce@16
982 RtlAddAtomToAtomTable@12
984 ;RtlAllocateAndInitializeSid
986 RtlAnsiCharToUnicodeChar@4
987 RtlAnsiStringToUnicodeSize@4=RtlxAnsiStringToUnicodeSize@4
988 RtlAnsiStringToUnicodeString@12
989 RtlAppendAsciizToString@8
990 RtlAppendStringToString@8
991 RtlAppendUnicodeStringToString@8
992 RtlAppendUnicodeToString@8
993 RtlAreAllAccessesGranted@8
994 RtlAreAnyAccessesGranted@8
999 RtlCaptureStackBackTrace@16
1001 RtlCheckRegistryKey@8
1006 RtlCompareMemoryUlong@12
1008 RtlCompareUnicodeString@12
1009 RtlCompressBuffer@32
1010 RtlCompressChunks@28
1011 RtlConvertLongToLargeInteger@4
1012 RtlConvertSidToUnicodeString@12
1013 RtlConvertUlongToLargeInteger@4
1018 RtlCopyUnicodeString@8
1020 RtlCreateAtomTable@8
1022 RtlCreateRegistryKey@8
1023 RtlCreateSecurityDescriptor@8
1024 RtlCreateSystemVolumeInformationFolder@4
1025 RtlCreateUnicodeString@8
1026 RtlCustomCPToUnicodeN@24
1027 RtlDecompressBuffer@24
1028 RtlDecompressChunks@28
1029 RtlDecompressFragment@32
1032 RtlDeleteAtomFromAtomTable@8
1033 RtlDeleteElementGenericTable@8
1034 RtlDeleteElementGenericTableAvl@8
1036 RtlDeleteOwnersRanges@8
1038 RtlDeleteRegistryValue@12
1040 RtlDestroyAtomTable@4
1042 RtlDowncaseUnicodeString@12
1043 RtlDuplicateUnicodeString@12
1045 RtlEnlargedIntegerMultiply@8
1046 RtlEnlargedUnsignedDivide@16
1047 RtlEnlargedUnsignedMultiply@8
1048 RtlEnumerateGenericTable@8
1049 RtlEnumerateGenericTableAvl@8
1050 RtlEnumerateGenericTableLikeADirectory@28
1051 RtlEnumerateGenericTableWithoutSplaying@8
1052 RtlEnumerateGenericTableWithoutSplayingAvl@8
1056 RtlEqualUnicodeString@12
1057 RtlExtendedIntegerMultiply@12
1058 RtlExtendedLargeIntegerDivide@16
1059 RtlExtendedMagicDivide@20
1061 RtlFillMemoryUlong@12
1063 RtlFindClearBitsAndSet@12
1065 RtlFindFirstRunClear@8
1066 RtlFindFirstRunSet@8
1067 RtlFindLastBackwardRunClear@12
1068 RtlFindLeastSignificantBit@8
1069 RtlFindLongestRunClear@8
1070 RtlFindLongestRunSet@8
1072 RtlFindMostSignificantBit@8
1073 RtlFindNextForwardRunClear@12
1076 RtlFindSetBitsAndClear@12
1077 RtlFindUnicodePrefix@12
1078 RtlFormatCurrentUserKeyPath@4
1083 RtlFreeUnicodeString@4
1085 RtlGenerate8dot3Name@16
1087 RtlGetCallersAddress@8
1088 RtlGetCompressionWorkSpaceSize@12
1089 RtlGetDaclSecurityDescriptor@16
1090 RtlGetDefaultCodePage@8
1091 RtlGetElementGenericTable@8
1092 RtlGetElementGenericTableAvl@8
1094 RtlGetGroupSecurityDescriptor@12
1096 RtlGetNtGlobalFlags@0
1097 RtlGetOwnerSecurityDescriptor@12
1098 RtlGetSaclSecurityDescriptor@16
1099 RtlGetSetBootStatusData@24
1101 RtlHashUnicodeString@16
1103 RtlImageDirectoryEntryToData@16
1105 RtlInitCodePageTable@8
1107 RtlInitUnicodeString@8
1108 RtlInitializeBitMap@12
1109 RtlInitializeGenericTable@20
1110 RtlInitializeGenericTableAvl@20
1111 RtlInitializeRangeList@4
1113 RtlInitializeUnicodePrefix@4
1114 RtlInsertElementGenericTable@16
1115 RtlInsertElementGenericTableAvl@16
1116 RtlInsertElementGenericTableFull@24
1117 RtlInsertElementGenericTableFullAvl@24
1118 RtlInsertUnicodePrefix@12
1119 RtlInt64ToUnicodeString@16
1121 RtlIntegerToUnicode@16
1122 RtlIntegerToUnicodeString@12
1123 RtlInvertRangeList@8
1124 RtlIpv4AddressToStringA@8
1125 RtlIpv4AddressToStringExA@16
1126 RtlIpv4AddressToStringExW@16
1127 RtlIpv4AddressToStringW@8
1128 RtlIpv4StringToAddressA@16
1129 RtlIpv4StringToAddressExA@16
1130 RtlIpv4StringToAddressExW@16
1131 RtlIpv4StringToAddressW@16
1132 RtlIpv6AddressToStringA@8
1133 RtlIpv6AddressToStringExA@20
1134 RtlIpv6AddressToStringExW@20
1135 RtlIpv6AddressToStringW@8
1136 RtlIpv6StringToAddressA@12
1137 RtlIpv6StringToAddressExA@16
1138 RtlIpv6StringToAddressExW@16
1139 RtlIpv6StringToAddressW@12
1140 RtlIsGenericTableEmpty@4
1141 RtlIsGenericTableEmptyAvl@4
1142 RtlIsNameLegalDOS8Dot3@12
1143 RtlIsRangeAvailable@40
1144 RtlIsValidOemCharacter@4
1145 RtlLargeIntegerAdd@16
1146 RtlLargeIntegerArithmeticShift@12
1147 RtlLargeIntegerDivide@20
1148 RtlLargeIntegerNegate@8
1149 RtlLargeIntegerShiftLeft@12
1150 RtlLargeIntegerShiftRight@12
1151 RtlLargeIntegerSubtract@16
1152 RtlLengthRequiredSid@4
1153 RtlLengthSecurityDescriptor@4
1155 RtlLockBootStatusData@4
1156 RtlLookupAtomInAtomTable@12
1157 RtlLookupElementGenericTable@8
1158 RtlLookupElementGenericTableAvl@8
1159 RtlLookupElementGenericTableFull@16
1160 RtlLookupElementGenericTableFullAvl@16
1162 RtlMapSecurityErrorToNtStatus@4
1163 RtlMergeRangeLists@16
1165 RtlMultiByteToUnicodeN@20
1166 RtlMultiByteToUnicodeSize@12
1167 RtlNextUnicodePrefix@8
1168 RtlNtStatusToDosError@4
1169 RtlNtStatusToDosErrorNoTeb@4
1170 RtlNumberGenericTableElements@4
1171 RtlNumberGenericTableElementsAvl@4
1172 RtlNumberOfClearBits@4
1173 RtlNumberOfSetBits@4
1174 RtlOemStringToCountedUnicodeString@12
1175 RtlOemStringToUnicodeSize@4=RtlxOemStringToUnicodeSize@4
1176 RtlOemStringToUnicodeString@12
1178 RtlPinAtomInAtomTable@8
1179 @RtlPrefetchMemoryNonTemporal@8
1181 RtlPrefixUnicodeString@12
1182 RtlQueryAtomInAtomTable@24
1183 RtlQueryRegistryValues@20
1184 RtlQueryTimeZoneInformation@4
1188 RtlRealPredecessor@4
1190 RtlRemoveUnicodePrefix@8
1192 RtlSecondsSince1970ToTime@8
1193 RtlSecondsSince1980ToTime@8
1194 RtlSelfRelativeToAbsoluteSD2@8
1195 RtlSelfRelativeToAbsoluteSD@44
1199 RtlSetDaclSecurityDescriptor@16
1200 RtlSetGroupSecurityDescriptor@12
1201 RtlSetOwnerSecurityDescriptor@12
1202 RtlSetSaclSecurityDescriptor@16
1203 RtlSetTimeZoneInformation@4
1207 RtlSubAuthorityCountSid@4
1208 RtlSubAuthoritySid@8
1209 RtlSubtreePredecessor@4
1210 RtlSubtreeSuccessor@4
1212 RtlTimeFieldsToTime@8
1213 RtlTimeToElapsedTimeFields@8
1214 RtlTimeToSecondsSince1970@8
1215 RtlTimeToSecondsSince1980@8
1216 RtlTimeToTimeFields@8
1218 @RtlUlonglongByteSwap@8
1219 RtlUnicodeStringToAnsiSize@4=RtlxUnicodeStringToAnsiSize@4
1220 RtlUnicodeStringToAnsiString@12
1221 RtlUnicodeStringToCountedOemString@12
1222 RtlUnicodeStringToInteger@12
1223 RtlUnicodeStringToOemSize@4=RtlxUnicodeStringToOemSize@4
1224 RtlUnicodeStringToOemString@12
1225 RtlUnicodeToCustomCPN@24
1226 RtlUnicodeToMultiByteN@20
1227 RtlUnicodeToMultiByteSize@12
1229 RtlUnlockBootStatusData@4
1231 RtlUpcaseUnicodeChar@4
1232 RtlUpcaseUnicodeString@12
1233 RtlUpcaseUnicodeStringToAnsiString@12
1234 RtlUpcaseUnicodeStringToCountedOemString@12
1235 RtlUpcaseUnicodeStringToOemString@12
1236 RtlUpcaseUnicodeToCustomCPN@24
1237 RtlUpcaseUnicodeToMultiByteN@20
1238 RtlUpcaseUnicodeToOemN@20
1241 @RtlUshortByteSwap@4
1242 RtlValidRelativeSecurityDescriptor@12
1243 RtlValidSecurityDescriptor@4
1245 RtlVerifyVersionInfo@16
1246 RtlVolumeDeviceToDosName@8
1247 RtlWalkFrameChain@12
1248 RtlWriteRegistryValue@24
1251 RtlxAnsiStringToUnicodeSize@4
1252 RtlxOemStringToUnicodeSize@4
1253 RtlxUnicodeStringToAnsiSize@4
1254 RtlxUnicodeStringToOemSize@4
1256 SeAppendPrivileges@8
1258 SeAssignSecurityEx@36
1259 SeAuditHardLinkCreation@12
1260 SeAuditingFileEvents@8
1261 SeAuditingFileEventsWithContext@12
1262 SeAuditingFileOrGlobalEvents@12
1263 SeAuditingHardLinkEvents@8
1264 SeAuditingHardLinkEventsWithContext@12
1265 SeCaptureSecurityDescriptor@20
1266 SeCaptureSubjectContext@4
1267 SeCloseObjectAuditAlarm@12
1268 SeCreateAccessState@16
1269 SeCreateClientSecurity@16
1270 SeCreateClientSecurityFromSubjectContext@16
1271 SeDeassignSecurity@4
1272 SeDeleteAccessState@4
1273 SeDeleteObjectAuditAlarm@8
1277 SeImpersonateClient@8
1278 SeImpersonateClientEx@8
1279 SeLockSubjectContext@4
1280 SeMarkLogonSessionForTerminationNotification@4
1281 SeOpenObjectAuditAlarm@36
1282 SeOpenObjectForDeleteAuditAlarm@36
1284 SePrivilegeObjectAuditAlarm@24
1285 SePublicDefaultDacl DATA
1286 SeQueryAuthenticationIdToken@8
1287 SeQueryInformationToken@12
1288 SeQuerySecurityDescriptorInfo@16
1289 SeQuerySessionIdToken@8
1290 SeRegisterLogonSessionTerminatedRoutine@4
1291 SeReleaseSecurityDescriptor@12
1292 SeReleaseSubjectContext@4
1293 SeSetAccessStateGenericMapping@8
1294 SeSetSecurityDescriptorInfo@24
1295 SeSetSecurityDescriptorInfoEx@28
1296 SeSinglePrivilegeCheck@12
1297 SeSystemDefaultDacl DATA
1298 SeTokenImpersonationLevel@4
1300 SeTokenIsRestricted@4
1301 SeTokenIsWriteRestricted@4
1303 SeUnlockSubjectContext@4
1304 SeUnregisterLogonSessionTerminatedRoutine@4
1305 SeValidSecurityDescriptor@8
1306 VerSetConditionMask@16
1307 WRITE_REGISTER_UCHAR@8
1308 WRITE_REGISTER_ULONG@8
1309 WRITE_REGISTER_USHORT@8
1310 WRITE_REGISTER_BUFFER_UCHAR@12
1311 WRITE_REGISTER_BUFFER_ULONG@12
1312 WRITE_REGISTER_BUFFER_USHORT@12
1313 ZwAccessCheckAndAuditAlarm@44
1315 ZwAdjustPrivilegesToken@24
1317 ZwAllocateVirtualMemory@24
1318 ZwAssignProcessToJobObject@8
1323 ZwCloseObjectAuditAlarm@12
1325 ZwCreateDirectoryObject@12
1328 ZwCreateJobObject@12
1331 ZwCreateSymbolicLinkObject@16
1337 ZwDeviceIoControlFile@40
1339 ZwDuplicateObject@28
1341 ZwEnumerateBootEntries@8
1343 ZwEnumerateValueKey@24
1344 ZwFlushInstructionCache@12
1346 ZwFlushVirtualMemory@16
1347 ZwFreeVirtualMemory@16
1349 ZwInitiatePowerAction@16
1353 ZwMakeTemporaryObject@4
1354 ZwMapViewOfSection@40
1355 ZwNotifyChangeKey@40
1356 ZwOpenDirectoryObject@12
1362 ZwOpenProcessToken@12
1363 ZwOpenProcessTokenEx@16
1365 ZwOpenSymbolicLinkObject@12
1367 ZwOpenThreadToken@16
1368 ZwOpenThreadTokenEx@20
1370 ZwPowerInformation@20
1372 ZwQueryBootEntryOrder@8
1373 ZwQueryBootOptions@8
1374 ZwQueryDefaultLocale@8
1375 ZwQueryDefaultUILanguage@4
1376 ZwQueryDirectoryFile@44
1377 ZwQueryDirectoryObject@28
1379 ZwQueryFullAttributesFile@8
1380 ZwQueryInformationAtom@20
1381 ZwQueryInformationFile@20
1382 ZwQueryInformationJobObject@20
1383 ZwQueryInformationProcess@20
1384 ZwQueryInformationThread@20
1385 ZwQueryInformationToken@20
1386 ZwQueryInstallUILanguage@4
1390 ZwQuerySecurityObject@20
1391 ZwQuerySymbolicLinkObject@12
1392 ZwQuerySystemInformation@16
1395 ZwQueryVolumeInformationFile@20
1398 ZwRequestWaitReplyPort@12
1403 ZwSetBootEntryOrder@8
1405 ZwSetDefaultLocale@8
1406 ZwSetDefaultUILanguage@4
1409 ZwSetInformationFile@20
1410 ZwSetInformationJobObject@16
1411 ZwSetInformationObject@16
1412 ZwSetInformationProcess@16
1413 ZwSetInformationThread@16
1414 ZwSetSecurityObject@12
1415 ZwSetSystemInformation@12
1419 ZwSetVolumeInformationFile@20
1420 ZwTerminateJobObject@8
1421 ZwTerminateProcess@8
1422 ZwTranslateFilePath@12
1425 ZwUnmapViewOfSection@8
1426 ZwWaitForMultipleObjects@20
1427 ZwWaitForSingleObject@12
1430 _abnormal_termination