reactos/ntoskrnl/ntoskrnl.def

   1 ; $Id: ntoskrnl.def,v 1.126 2002/01/27 01:11:23 dwelch Exp $
   2 ;
   3 ; reactos/ntoskrnl/ntoskrnl.def
   4 ;
   5 ; ReactOS Operating System
   6 ;
   7 EXPORTS
   8 CcRosInitializeFileCache@12
   9 ;CcRosRequestCacheSegment@20
  10 ;CcRosReleaseCacheSegment@12
  11 CcRosReleaseFileCache@8
  12 CcCopyRead@24
  13 CcCopyWrite@20
  14 CcMapData@24
  15 CcMdlReadComplete@8
  16 CcSetDirtyPinnedData@8
  17 CcSetFileSizes@8
  18 CcUnpinData@4
  19 DbgBreakPoint@0
  20 DbgBreakPointWithStatus@4
  21 ;DbgLoadImageSymbols@12
  22 DbgPrint
  23 DbgPrompt@12
  24 DpcQueueSize DATA
  25 @ExAcquireFastMutexUnsafe@4
  26 ExAcquireResourceExclusive@8
  27 ExAcquireResourceExclusiveLite@8
  28 ExAcquireResourceSharedLite@8
  29 ExAcquireSharedStarveExclusive@8
  30 ExAcquireSharedWaitForExclusive@8
  31 ExAllocateFromPagedLookasideList@4
  32 ExAllocatePool@8
  33 ExAllocatePoolWithQuota@8
  34 ExAllocatePoolWithQuotaTag@12
  35 ExAllocatePoolWithTag@12
  36 ExConvertExclusiveToSharedLite@4
  37 ExCreateCallback@16
  38 ExDeleteNPagedLookasideList@4
  39 ExDeletePagedLookasideList@4
  40 ExDeleteResource@4
  41 ExDeleteResourceLite@4
  42 ExDesktopObjectType DATA
  43 ExDisableResourceBoostLite@4
  44 ExEventObjectType DATA
  45 ExExtendZone@12
  46 ExFreePool@4
  47 ExFreeToPagedLookasideList@8
  48 ExGetExclusiveWaiterCount@4
  49 ExGetPreviousMode@0
  50 ExGetSharedWaiterCount@4
  51 ExInitializeNPagedLookasideList@28
  52 ExInitializePagedLookasideList@28
  53 ExInitializeResource@4
  54 ExInitializeResourceLite@4
  55 ExInitializeZone@16
  56 ExInterlockedAddLargeInteger@16
  57 @ExInterlockedAddLargeStatistic@8
  58 ExInterlockedAddUlong@12
  59 @ExInterlockedCompareExchange64@16
  60 ExInterlockedDecrementLong@8
  61 ExInterlockedExchangeUlong@12
  62 ExInterlockedExtendZone@16
  63 ExInterlockedIncrementLong@8
  64 ExInterlockedInsertHeadList@12
  65 ExInterlockedInsertTailList@12
  66 ExInterlockedPopEntryList@8
  67 @ExInterlockedPopEntrySList@8
  68 ExInterlockedPushEntryList@12
  69 @ExInterlockedPushEntrySList@12
  70 ExInterlockedRemoveHeadList@8
  71 ExIsProcessorFeaturePresent@4
  72 ExIsResourceAcquiredExclusiveLite@4
  73 ExIsResourceAcquiredSharedLite@4
  74 ExLocalTimeToSystemTime@8
  75 ExNotifyCallback@12
  76 ExPostSystemEvent@12
  77 ;ExQueryPoolBlockSize
  78 ExQueueWorkItem@8
  79 ExRaiseAccessViolation@0
  80 ExRaiseDatatypeMisalignment@0
  81 ;ExRaiseException
  82 ;ExRaiseHardError
  83 ExRaiseStatus@4
  84 ExRegisterCallback@12
  85 ExReinitializeResourceLite@4
  86 @ExReleaseFastMutexUnsafe@4
  87 ExReleaseResourceForThread@8
  88 ExReleaseResourceForThreadLite@8
  89 @ExReleaseResourceLite@4
  90 ExSetResourceOwnerPointer@8
  91 ;ExSystemExceptionFilter
  92 ExSystemTimeToLocalTime@8
  93 ExTryToAcquireResourceExclusiveLite@4
  94 ExUnregisterCallback@4
  95 ExWindowStationObjectType DATA
  96 @ExfInterlockedAddUlong@12
  97 ;@ExfInterlockedInsertHeadList
  98 ;@ExfInterlockedInsertTailList
  99 ;@ExfInterlockedPopEntryList
 100 ;@ExfInterlockedPushEntryList
 101 ;@ExfInterlockedRemoveHeadList
 102 @Exfi386InterlockedDecrementLong@4
 103 @Exfi386InterlockedExchangeUlong@8
 104 @Exfi386InterlockedIncrementLong@4
 105 Exi386InterlockedDecrementLong@4
 106 Exi386InterlockedExchangeUlong@8
 107 Exi386InterlockedIncrementLong@4
 108 FsRtlAddLargeMcbEntry@28
 109 FsRtlAddMcbEntry@16
 110 FsRtlAddToTunnelCache@32
 111 FsRtlAllocateFileLock@8
 112 FsRtlAllocatePool@8
 113 FsRtlAllocatePoolWithQuota@8
 114 FsRtlAllocatePoolWithQuotaTag@12
 115 FsRtlAllocatePoolWithTag@12
 116 FsRtlAllocateResource@0
 117 FsRtlAreNamesEqual@16
 118 FsRtlBalanceReads@4
 119 FsRtlCheckLockForReadAccess@8
 120 FsRtlCheckLockForWriteAccess@8
 121 FsRtlCheckOplock@20
 122 FsRtlCopyRead@32
 123 FsRtlCopyWrite@32
 124 FsRtlCurrentBatchOplock@4
 125 FsRtlDeleteKeyFromTunnelCache@12
 126 FsRtlDeleteTunnelCache@4
 127 FsRtlDeregisterUncProvider@4
 128 FsRtlDissectDbcs@16
 129 FsRtlDissectName@16
 130 FsRtlDoesDbcsContainWildCards@4
 131 FsRtlDoesNameContainWildCards@4
 132 FsRtlFastCheckLockForRead@24
 133 FsRtlFastCheckLockForWrite@24
 134 FsRtlFastUnlockAll@16
 135 FsRtlFastUnlockAllByKey@20
 136 FsRtlFastUnlockSingle@32
 137 FsRtlFindInTunnelCache@32
 138 FsRtlGetFileSize@8
 139 FsRtlGetNextFileLock@8
 140 FsRtlGetNextLargeMcbEntry@20
 141 FsRtlGetNextMcbEntry@20
 142 FsRtlInitializeFileLock@12
 143 FsRtlInitializeLargeMcb@8
 144 FsRtlInitializeMcb@8
 145 FsRtlInitializeOplock@4
 146 FsRtlInitializeTunnelCache@4
 147 FsRtlIsDbcsInExpression@8
 148 FsRtlIsFatDbcsLegal@20
 149 FsRtlIsHpfsDbcsLegal@20
 150 FsRtlIsNameInExpression@16
 151 FsRtlIsNtstatusExpected@4
 152 FsRtlIsTotalDeviceFailure@4
 153 FsRtlLegalAnsiCharacterArray DATA
 154 FsRtlLookupLargeMcbEntry@32
 155 FsRtlLookupLastLargeMcbEntry@12
 156 FsRtlLookupLastMcbEntry@12
 157 FsRtlLookupMcbEntry@20
 158 FsRtlMdlRead@24
 159 FsRtlMdlReadComplete@8
 160 FsRtlMdlReadCompleteDev@12
 161 FsRtlMdlReadDev@28
 162 FsRtlMdlWriteComplete@12
 163 FsRtlMdlWriteCompleteDev@16
 164 FsRtlNormalizeNtstatus@8
 165 FsRtlNotifyChangeDirectory@28
 166 FsRtlNotifyCleanup@12
 167 FsRtlNotifyFullChangeDirectory@40
 168 FsRtlNotifyFullReportChange@36
 169 FsRtlNotifyInitializeSync@4
 170 FsRtlNotifyReportChange@20
 171 FsRtlNotifyUninitializeSync@4
 172 FsRtlNotifyVolumeEvent@8
 173 FsRtlNumberOfRunsInLargeMcb@4
 174 FsRtlNumberOfRunsInMcb@4
 175 FsRtlOplockFsctrl@12
 176 FsRtlOplockIsFastIoPossible@4
 177 FsRtlPostPagingFileStackOverflow@12
 178 FsRtlPostStackOverflow@12
 179 FsRtlPrepareMdlWrite@24
 180 FsRtlPrepareMdlWriteDev@28
 181 FsRtlPrivateLock@48
 182 FsRtlProcessFileLock@12
 183 FsRtlRegisterUncProvider@12
 184 FsRtlRemoveLargeMcbEntry@20
 185 FsRtlRemoveMcbEntry@12
 186 FsRtlSplitLargeMcb@20
 187 FsRtlSyncVolumes@12
 188 FsRtlTruncateLargeMcb@12
 189 FsRtlTruncateMcb@8
 190 FsRtlUninitializeFileLock@4
 191 FsRtlUninitializeLargeMcb@4
 192 FsRtlUninitializeMcb@4
 193 FsRtlUninitializeOplock@4
 194 HalDispatchTable DATA
 195 HalPrivateDispatchTable DATA
 196 @InterlockedCompareExchange@12
 197 @InterlockedDecrement@4
 198 @InterlockedExchange@8
 199 @InterlockedExchangeAdd@8
 200 @InterlockedIncrement@4
 201 IoAcquireCancelSpinLock@4
 202 IoAcquireVpbSpinLock@4
 203 IoAdapterObjectType DATA
 204 IoAllocateAdapterChannel@20
 205 IoAllocateController@16
 206 IoAllocateErrorLogEntry@8
 207 IoAllocateIrp@8
 208 IoAllocateMdl@20
 209 IoAssignResources@24
 210 IoAttachDevice@12
 211 IoAttachDeviceByPointer@8
 212 IoAttachDeviceToDeviceStack@8
 213 IoBuildAsynchronousFsdRequest@24
 214 IoBuildDeviceIoControlRequest@36
 215 IoBuildPartialMdl@16
 216 IoBuildSynchronousFsdRequest@28
 217 IoCallDriver@8
 218 IoCancelIrp@4
 219 IoCheckDesiredAccess@8
 220 IoCheckEaBufferValidity@12
 221 IoCheckFunctionAccess@24
 222 IoCheckShareAccess@20
 223 IoCompleteRequest@8
 224 IoConnectInterrupt@44
 225 IoCreateController@4
 226 IoCreateDevice@28
 227 IoCreateFile@56
 228 IoCreateNotificationEvent@8
 229 IoCreateStreamFileObject@8
 230 IoCreateSymbolicLink@8
 231 IoCreateSynchronizationEvent@8
 232 IoCreateUnprotectedSymbolicLink@8
 233 IoDeleteController@4
 234 IoDeleteDevice@4
 235 IoDeleteSymbolicLink@4
 236 IoDetachDevice@4
 237 IoDeviceHandlerObjectSize DATA
 238 IoDeviceHandlerObjectType DATA
 239 IoDisconnectInterrupt@4
 240 IoDeviceObjectType DATA
 241 IoDriverObjectType DATA
 242 IoEnqueueIrp@4
 243 IoFastQueryNetworkAttributes@20
 244 IoFileObjectType DATA
 245 IoFreeController@4
 246 IoFreeIrp@4
 247 IoFreeMdl@4
 248 IoGetAttachedDevice@4
 249 IoGetAttachedDeviceReference@4
 250 IoGetBaseFileSystemDeviceObject@4
 251 IoGetConfigurationInformation@0
 252 IoGetCurrentProcess@0
 253 IoGetDeviceObjectPointer@16
 254 IoGetDeviceToVerify@4
 255 IoGetFileObjectGenericMapping@0
 256 IoGetInitialStack@0
 257 IoGetRelatedDeviceObject@4
 258 IoGetRequestorProcess@4
 259 IoGetStackLimits@8
 260 IoGetTopLevelIrp@0
 261 IoInitializeIrp@12
 262 IoInitializeTimer@12
 263 IoIsOperationSynchronous@4
 264 IoMakeAssociatedIrp@8
 265 IoOpenDeviceInstanceKey@20
 266 ;IoPageRead@16
 267 IoQueryDeviceDescription@32
 268 IoQueryDeviceEnumInfo@8
 269 IoQueryFileInformation@20
 270 IoQueryVolumeInformation@20
 271 IoQueueThreadIrp@4
 272 IoRaiseHardError@12
 273 IoRaiseInformationalHardError@12
 274 IoReadOperationCount DATA
 275 IoReadPartitionTable@16
 276 IoReadTransferCount DATA
 277 IoRegisterDriverReinitialization@12
 278 IoRegisterFileSystem@4
 279 IoRegisterFsRegistrationChange@8
 280 IoRegisterShutdownNotification@4
 281 IoReleaseCancelSpinLock@4
 282 IoReleaseVpbSpinLock@4
 283 IoRemoveShareAccess@8
 284 IoReportHalResourceUsage@16
 285 IoReportResourceUsage@36
 286 IoSetDeviceToVerify@8
 287 IoSetHardErrorOrVerifyDevice@8
 288 IoSetInformation@16
 289 IoSetPartitionInformation@16
 290 IoSetShareAccess@16
 291 IoSetThreadHardErrorMode@4
 292 IoSetTopLevelIrp@4
 293 IoStartNextPacket@8
 294 IoStartNextPacketByKey@12
 295 IoStartPacket@16
 296 IoStartTimer@4
 297 IoStatisticsLock DATA
 298 IoStopTimer@4
 299 IoSynchronousPageWrite@20
 300 IoThreadToProcess@4
 301 IoUnregisterFileSystem@4
 302 IoUnregisterFsRegistrationChange@8
 303 IoUnregisterShutdownNotification@4
 304 IoUpdateShareAccess@8
 305 IoVerifyVolume@8
 306 IoWriteErrorLogEntry@4
 307 IoWriteOperationCount DATA
 308 IoWritePartitionTable@20
 309 IoWriteTransferCount DATA
 310 @IofCallDriver@8
 311 @IofCompleteRequest@8
 312 KdDebuggerEnabled DATA
 313 KdDebuggerNotPresent DATA
 314 KdPollBreakIn@0
 315 KdSystemDebugControl@4
 316 Ke386CallBios@8
 317 ;Ke386IoSetAccessProcess
 318 ;Ke386QueryIoAccessMap
 319 ;Ke386SetIoAccessMap
 320 KeAcquireSpinLockAtDpcLevel@4
 321 KeAddSystemServiceTable@20
 322 KeAttachProcess@4
 323 ;KeBoostCurrentThread
 324 KeBugCheck@4
 325 KeBugCheckEx@20
 326 KeCancelTimer@4
 327 KeClearEvent@4
 328 KeConnectInterrupt@4
 329 ;KeDcacheFlushCount DATA
 330 KeDelayExecutionThread@12
 331 KeDeregisterBugCheckCallback@4
 332 KeDetachProcess@0
 333 KeDisconnectInterrupt@4
 334 KeEnterCriticalRegion@0
 335 KeEnterKernelDebugger@0
 336 ;KeFindConfigurationEntry
 337 ;KeFindConfigurationNextEntry
 338 ;KeFlushEntireTb
 339 KeGetCurrentThread@0
 340 KeGetPreviousMode@0
 341 ;KeI386AbiosCall
 342 ;KeI386AllocateGdtSelectors
 343 ;KeI386Call16BitCStyleFunction
 344 ;KeI386Call16BitFunction
 345 ;KeI386FlatToGdtSelector
 346 ;KeI386GetLid
 347 ;KeI386MachineType
 348 ;KeI386ReleaseGdtSelectors
 349 ;KeI386ReleaseLid
 350 ;KeI386SetGdtSelector
 351 ;KeIcacheFlushCount DATA
 352 KeInitializeApc@32
 353 KeInitializeDeviceQueue@4
 354 KeInitializeDpc@12
 355 KeInitializeEvent@12
 356 KeInitializeInterrupt@44
 357 KeInitializeMutant@8
 358 KeInitializeMutex@8
 359 KeInitializeQueue@8
 360 KeInitializeSemaphore@12
 361 KeInitializeSpinLock@4
 362 KeInitializeTimer@4
 363 KeInitializeTimerEx@8
 364 KeInsertByKeyDeviceQueue@12
 365 KeInsertDeviceQueue@8
 366 KeInsertHeadQueue@8
 367 KeInsertQueue@8
 368 KeInsertQueueApc@16
 369 KeInsertQueueDpc@12
 370 ;KeIsExecutingDpc
 371 KeLeaveCriticalRegion@0
 372 KeLoaderBlock DATA
 373 KeNumberProcessors DATA
 374 ;KeProfileInterrupt
 375 ;KeProfileInterruptWithSource
 376 KePulseEvent@12
 377 KeQuerySystemTime@4
 378 KeQueryTickCount@4
 379 KeQueryTimeIncrement@0
 380 ;KeRaiseUserException
 381 KeReadStateEvent@4
 382 KeReadStateMutant@4
 383 KeReadStateMutex@4
 384 KeReadStateQueue@4
 385 KeReadStateSemaphore@4
 386 KeReadStateTimer@4
 387 KeRegisterBugCheckCallback@20
 388 KeReleaseMutant@16
 389 KeReleaseMutex@8
 390 KeReleaseSemaphore@16
 391 KeReleaseSpinLockFromDpcLevel@4
 392 KeRemoveByKeyDeviceQueue@8
 393 KeRemoveDeviceQueue@4
 394 KeRemoveEntryDeviceQueue@8
 395 KeRemoveQueue@12
 396 KeRemoveQueueDpc@4
 397 KeResetEvent@4
 398 ;KeRestoreFloatingPointState
 399 KeRundownQueue@4
 400 ;KeSaveFloatingPointState
 401 KeServiceDescriptorTable DATA
 402 ;KeSetAffinityThread
 403 KeSetBasePriorityThread@8
 404 ;KeSetDmaIoCoherency
 405 KeSetEvent@12
 406 ;KeSetEventBoostPriority
 407 ;KeSetIdealProcessorThread
 408 KeSetImportanceDpc@8
 409 ;KeSetKernelStackSwapEnable
 410 KeSetPriorityThread@8
 411 ;KeSetProfileIrql
 412 ;@KeSetSwapContextNotifyRoutine
 413 KeSetTargetProcessorDpc@8
 414 ;@KeSetThreadSelectNotifyRoutine
 415 ;KeSetTimeIncrement
 416 KeSetTimer@16
 417 KeSetTimerEx@20
 418 ;@KeSetTimeUpdateNotifyRoutine
 419 KeSynchronizeExecution@12
 420 ;KeTerminateThread
 421 KeTickCount DATA
 422 ;KeUpdateRunTime
 423 ;KeUserModeCallback
 424 KeWaitForMultipleObjects@32
 425 KeWaitForMutexObject@20
 426 KeWaitForSingleObject@20
 427 ;@KefAcquireSpinLockAtDpcLevel
 428 ;@KefReleaseSpinLockFromDpcLevel
 429 ;Kei386EoiHelper
 430 ;@KiAcquireSpinLock@4
 431 ;KiBugCheckData DATA
 432 ;KiCoprocessorError@0
 433 KiDeliverApc@12
 434 KiDispatchInterrupt@0
 435 ;KiIpiServiceRoutine@8
 436 ;@KiReleaseSpinLock@4
 437 ;KiUnexpectedInterrupt
 438 ;Kii386SpinOnSpinLock
 439 KiRawTicks DATA
 440 LdrAccessResource@16
 441 ;LdrEnumResources@20
 442 ;LdrFindResourceDirectory_U@16
 443 LdrFindResource_U@16
 444 ;LpcRequestPort@8
 445 LsaCallAuthenticationPackage@28
 446 LsaDeregisterLogonProcess@8
 447 LsaFreeReturnBuffer@4
 448 LsaLogonUser@56
 449 LsaLookupAuthenticationPackage@12
 450 LsaRegisterLogonProcess@12
 451 MmAdjustWorkingSetSize@12
 452 MmAllocateContiguousAlignedMemory@16
 453 MmAllocateContiguousMemory@12
 454 MmAllocateNonCachedMemory@4
 455 MmBuildMdlForNonPagedPool@4
 456 MmCanFileBeTruncated@8
 457 MmCreateMdl@12
 458 MmCreateSection@32
 459 MmDbgTranslatePhysicalAddress@8
 460 MmDisableModifiedWriteOfSection@4
 461 MmFlushImageSection@8
 462 MmForceSectionClosed@8
 463 MmFreeContiguousMemory@4
 464 MmFreeNonCachedMemory@8
 465 MmGetPhysicalAddress@4
 466 MmGrowKernelStack@4
 467 MmHighestUserAddress DATA
 468 MmIsAddressValid@4
 469 MmIsNonPagedSystemAddressValid@4
 470 MmIsRecursiveIoFault@0
 471 MmIsThisAnNtAsSystem@0
 472 MmLockPagableDataSection@4
 473 MmLockPagableImageSection@4=MmLockPagableDataSection@4
 474 MmLockPagableSectionByHandle@4
 475 MmMapIoSpace@16
 476 MmMapLockedPages@8
 477 MmMapMemoryDumpMdl@4
 478 MmMapVideoDisplay@16
 479 MmMapViewInSystemSpace@12
 480 MmMapViewOfSection@40
 481 MmPageEntireDriver@4
 482 MmProbeAndLockPages@12
 483 MmQuerySystemSize@0
 484 MmResetDriverPaging@4
 485 MmSectionObjectType DATA
 486 MmSecureVirtualMemory@12
 487 MmSetAddressRangeModified@8
 488 MmSetBankedSection@24
 489 MmSizeOfMdl@8
 490 MmUnlockPagableImageSection@4
 491 MmUnlockPages@4
 492 MmUnmapIoSpace@8
 493 MmUnmapLockedPages@8
 494 MmUnmapVideoDisplay@8
 495 MmUnmapViewInSystemSpace@4
 496 MmUnmapViewOfSection@8
 497 MmUnsecureVirtualMemory@4
 498 MmUserProbeAddress DATA
 499 NlsAnsiCodePage DATA
 500 NlsLeadByteInfo DATA
 501 NlsMbCodePageTag DATA
 502 NlsMbOemCodePageTag DATA
 503 NlsOemLeadByteInfo DATA
 504 NtAddAtom@8
 505 NtAdjustPrivilegesToken@24
 506 NtAlertThread@4
 507 NtAllocateLocallyUniqueId@4
 508 NtAllocateUuids@12
 509 NtAllocateVirtualMemory@24
 510 NtBuildNumber DATA
 511 NtClose@4
 512 NtConnectPort@32
 513 NtCreateEvent@20
 514 NtCreateTimer@16
 515 NtOpenEvent@12
 516 NtCreateFile@44
 517 NtCreateSection@28
 518 NtDeleteAtom@4
 519 NtDeleteFile@4
 520 NtDeviceIoControlFile@40
 521 NtDuplicateObject@28
 522 NtDuplicateToken@24
 523 NtFindAtom@8
 524 NtFreeVirtualMemory@16
 525 NtFsControlFile@40
 526 NtGlobalFlag DATA
 527 NtLockFile@40
 528 NtMapViewOfSection@40
 529 NtNotifyChangeDirectoryFile@36
 530 NtOpenFile@24
 531 NtOpenProcess@16
 532 NtOpenProcessToken@12
 533 NtQueryDirectoryFile@44
 534 NtQueryEaFile@36
 535 NtQueryInformationAtom@20
 536 NtQueryInformationFile@20
 537 NtQueryInformationProcess@20
 538 NtQueryInformationToken@20
 539 ;NtQueryOleDirectoryFile@ <--- ?
 540 NtQuerySecurityObject@20
 541 NtQuerySystemTime@4
 542 NtQueryVolumeInformationFile@20
 543 NtReadFile@36
 544 NtRequestPort@20
 545 NtRequestWaitReplyPort@12
 546 NtSetEvent@8
 547 NtSetInformationFile@20
 548 NtSetInformationProcess@16
 549 NtSetInformationThread@16
 550 NtSetSecurityObject@12
 551 NtSetSystemTime@8
 552 NtUnlockFile@20
 553 NtVdmControl@8
 554 NtW32Call@20
 555 NtWaitForSingleObject@12
 556 NtWriteFile@36
 557 ;ObAssignSecurity@16
 558 ;ObCheckCreateObjectAccess@28
 559 ;ObCheckObjectAccess@20
 560 ;ObCreateObject@36
 561 ObCreateObject@20
 562 ;ObFindHandleForObject@20
 563 ;ObGetObjectPointerCount@4
 564 ;ObGetObjectSecurity@12
 565 ;ObInsertObject@24
 566 ObMakeTemporaryObject@4
 567 ObOpenObjectByName@28
 568 ObOpenObjectByPointer@28
 569 ;ObQueryNameString@16
 570 ;ObQueryObjectAuditingByHandle@8
 571 @ObfDereferenceObject@4
 572 @ObfReferenceObject@4
 573 ObReferenceObjectByHandle@24
 574 ObReferenceObjectByName@32
 575 ObReferenceObjectByPointer@16
 576 ;ObReleaseObjectSecurity@8
 577 ;ObSetSecurityDescriptorInfo@24
 578 ObAddEntryDirectory@12
 579 ;PfxFindPrefix
 580 ;PfxInitialize
 581 ;PfxInsertPrefix
 582 ;PfxRemovePrefix
 583 PoCallDriver@8
 584 PoRegisterDeviceForIdleDetection@16
 585 PoRegisterSystemState@8
 586 PoRequestPowerIrp@24
 587 PoSetDeviceBusy@4
 588 PoSetPowerState@12
 589 PoSetSystemState@4
 590 PoStartNextPowerIrp@4
 591 PoUnregisterSystemState@4
 592 ;ProbeForWrite@12
 593 PsAssignImpersonationToken@8
 594 ;PsChargePoolQuota@12
 595 PsCreateSystemProcess@12
 596 PsCreateSystemThread@28
 597 PsCreateWin32Thread@4
 598 PsCreateWin32Process@4
 599 PsGetWin32Thread@0
 600 PsGetWin32Process@0
 601 PsEstablishWin32Callouts@24
 602 PsGetCurrentProcess@0
 603 PsGetCurrentProcessId@0
 604 PsGetCurrentThreadId@0
 605 PsGetCurrentThread@0
 606 PsGetProcessExitTime@0
 607 PsGetVersion@16
 608 PsImpersonateClient@20
 609 PsInitialSystemProcess DATA
 610 PsIsThreadTerminating@4
 611 PsLookupProcessByProcessId@8
 612 PsLookupProcessThreadByCid@12
 613 PsLookupThreadByThreadId@8
 614 PsProcessType DATA
 615 PsReferenceImpersonationToken@16
 616 PsReferencePrimaryToken@4
 617 ;PsReturnPoolQuota@12
 618 PsRevertToSelf@0
 619 PsSetCreateProcessNotifyRoutine@8
 620 PsSetCreateThreadNotifyRoutine@4
 621 ;PsSetLegoNotifyRoutine@4
 622 ;PsSetProcessPriorityByClass@8
 623 PsTerminateSystemThread@4
 624 PsThreadType DATA
 625 READ_REGISTER_UCHAR@4
 626 READ_REGISTER_ULONG@4
 627 READ_REGISTER_USHORT@4
 628 READ_REGISTER_BUFFER_UCHAR@12
 629 READ_REGISTER_BUFFER_ULONG@12
 630 READ_REGISTER_BUFFER_USHORT@12
 631 RtlAbsoluteToSelfRelativeSD@12
 632 RtlAddAccessAllowedAce@16
 633 RtlAddAce@20
 634 RtlAddAtomToAtomTable@12
 635 ;RtlAllocateAndInitializeSid
 636 ;RtlAllocateHeap
 637 RtlAnsiCharToUnicodeChar@4
 638 RtlAnsiStringToUnicodeSize@4
 639 RtlAnsiStringToUnicodeString@12
 640 RtlAppendAsciizToString@8
 641 RtlAppendStringToString@8
 642 RtlAppendUnicodeStringToString@8
 643 RtlAppendUnicodeToString@8
 644 RtlAreAllAccessesGranted@8
 645 RtlAreAnyAccessesGranted@8
 646 RtlAreBitsClear@12
 647 RtlAreBitsSet@12
 648 RtlAssert@16
 649 ;RtlCaptureStackBackTrace
 650 RtlCharToInteger@12
 651 RtlCheckRegistryKey@8
 652 RtlClearAllBits@4
 653 RtlClearBits@12
 654 RtlCompareMemory@12
 655 RtlCompareMemoryUlong@12
 656 RtlCompareString@12
 657 RtlCompareUnicodeString@12
 658 ;RtlCompressBuffer
 659 ;RtlCompressChunks
 660 RtlConvertLongToLargeInteger@4
 661 RtlConvertSidToUnicodeString@12
 662 RtlConvertUlongToLargeInteger@4
 663 RtlCopyLuid@8
 664 RtlCopySid@12
 665 RtlCopyString@8
 666 RtlCopyUnicodeString@8
 667 RtlCreateAcl@12
 668 RtlCreateAtomTable@8
 669 ;RtlCreateHeap
 670 RtlCreateRegistryKey@8
 671 RtlCreateSecurityDescriptor@8
 672 RtlCreateUnicodeString@8
 673 RtlCustomCPToUnicodeN@24
 674 ;RtlDecompressBuffer
 675 ;RtlDecompressChunks
 676 ;RtlDecompressFragment
 677 ;RtlDelete
 678 RtlDeleteAtomFromAtomTable@8
 679 ;RtlDeleteElementGenericTable
 680 ;RtlDeleteNoSplay
 681 RtlDeleteRegistryValue@12
 682 ;RtlDescribeChunk
 683 RtlDestroyAtomTable@4
 684 ;RtlDestroyHeap
 685 RtlDowncaseUnicodeString@12
 686 RtlEmptyAtomTable@8
 687 RtlEnlargedIntegerMultiply@8
 688 RtlEnlargedUnsignedDivide@16
 689 RtlEnlargedUnsignedMultiply@8
 690 ;RtlEnumerateGenericTable
 691 ;RtlEnumerateGenericTableWithoutSplaying
 692 RtlEqualLuid@8
 693 RtlEqualSid@8
 694 RtlEqualString@12
 695 RtlEqualUnicodeString@12
 696 RtlExtendedIntegerMultiply@12
 697 RtlExtendedLargeIntegerDivide@16
 698 RtlExtendedMagicDivide@20
 699 RtlFillMemory@12
 700 RtlFillMemoryUlong@12
 701 RtlFindClearBits@12
 702 RtlFindClearBitsAndSet@12
 703 RtlFindFirstRunClear@8
 704 RtlFindFirstRunSet@8
 705 RtlFindLongestRunClear@8
 706 RtlFindLongestRunSet@8
 707 RtlFindMessage@20
 708 RtlFindSetBits@12
 709 RtlFindSetBitsAndClear@12
 710 ;RtlFindUnicodePrefix
 711 RtlFormatCurrentUserKeyPath@4
 712 RtlFreeAnsiString@4
 713 ;RtlFreeHeap
 714 RtlFreeOemString@4
 715 RtlFreeUnicodeString@4
 716 ;RtlGenerate8dot3Name
 717 ;RtlGetCallersAddress
 718 ;RtlGetCompressionWorkSpaceSize
 719 RtlGetDaclSecurityDescriptor@16
 720 RtlGetDefaultCodePage@8
 721 ;RtlGetElementGenericTable
 722 RtlGetGroupSecurityDescriptor@12
 723 RtlGetOwnerSecurityDescriptor@12
 724 RtlImageNtHeader@4
 725 RtlInitAnsiString@8
 726 ;RtlInitCodePageTable
 727 RtlInitString@8
 728 RtlInitUnicodeString@8
 729 RtlInitializeBitMap@12
 730 ;RtlInitializeGenericTable
 731 RtlInitializeSid@12
 732 ;RtlInitializeUnicodePrefix
 733 ;RtlInsertElementGenericTable
 734 ;RtlInsertUnicodePrefix
 735 RtlIntegerToChar@16
 736 RtlIntegerToUnicodeString@12
 737 ;RtlIsNameLegalDOS8Dot3
 738 RtlLargeIntegerAdd@16
 739 RtlLargeIntegerArithmeticShift@12
 740 RtlLargeIntegerDivide@20
 741 RtlLargeIntegerNegate@8
 742 RtlLargeIntegerShiftLeft@12
 743 RtlLargeIntegerShiftRight@12
 744 RtlLargeIntegerSubtract@16
 745 RtlLengthRequiredSid@4
 746 RtlLengthSecurityDescriptor@4
 747 RtlLengthSid@4
 748 RtlLookupAtomInAtomTable@12
 749 ;RtlLookupElementGenericTable
 750 RtlMapGenericMask@8
 751 RtlMoveMemory@12
 752 RtlMultiByteToUnicodeN@20
 753 RtlMultiByteToUnicodeSize@12
 754 ;RtlNextUnicodePrefix
 755 RtlNtStatusToDosError@4
 756 RtlNtStatusToDosErrorNoTeb@4
 757 ;RtlNumberGenericTableElements
 758 RtlNumberOfClearBits@4
 759 RtlNumberOfSetBits@4
 760 RtlOemStringToCountedUnicodeString@12
 761 RtlOemStringToUnicodeSize@4
 762 RtlOemStringToUnicodeString@12
 763 RtlOemToUnicodeN@20
 764 RtlPinAtomInAtomTable@8
 765 RtlPrefixString@12
 766 RtlPrefixUnicodeString@12
 767 RtlQueryAtomInAtomTable@24
 768 RtlQueryRegistryValues@20
 769 RtlQueryTimeZoneInformation@4
 770 RtlRaiseException@4
 771 ;RtlRandom
 772 ;RtlRemoveUnicodePrefix
 773 ;RtlReserveChunk
 774 RtlSecondsSince1970ToTime@8
 775 RtlSecondsSince1980ToTime@8
 776 RtlSetAllBits@4
 777 RtlSetBits@12
 778 RtlSetDaclSecurityDescriptor@16
 779 RtlSetGroupSecurityDescriptor@12
 780 RtlSetOwnerSecurityDescriptor@12
 781 RtlSetSaclSecurityDescriptor@16
 782 RtlSetTimeZoneInformation@4
 783 ;RtlSplay
 784 RtlSubAuthorityCountSid@4
 785 RtlSubAuthoritySid@8
 786 RtlTimeFieldsToTime@8
 787 RtlTimeToSecondsSince1970@8
 788 RtlTimeToSecondsSince1980@8
 789 RtlTimeToTimeFields@8
 790 RtlUnicodeStringToAnsiSize@4
 791 RtlUnicodeStringToAnsiString@12
 792 RtlUnicodeStringToCountedOemString@12
 793 RtlUnicodeStringToInteger@12
 794 RtlUnicodeStringToOemSize@4
 795 RtlUnicodeStringToOemString@12
 796 RtlUnicodeToCustomCPN@24
 797 RtlUnicodeToMultiByteN@20
 798 RtlUnicodeToMultiByteSize@12
 799 RtlUnicodeToOemN@20
 800 RtlUnwind@16
 801 RtlUpcaseUnicodeChar@4
 802 RtlUpcaseUnicodeString@12
 803 RtlUpcaseUnicodeStringToAnsiString@12
 804 RtlUpcaseUnicodeStringToCountedOemString@12
 805 RtlUpcaseUnicodeStringToOemString@12
 806 RtlUpcaseUnicodeToCustomCPN@24
 807 RtlUpcaseUnicodeToMultiByteN@20
 808 RtlUpcaseUnicodeToOemN@20
 809 RtlUpperChar@4
 810 RtlUpperString@8
 811 RtlValidSecurityDescriptor@4
 812 RtlValidSid@4
 813 RtlWriteRegistryValue@24
 814 ;RtlZeroHeap
 815 RtlZeroMemory@8
 816 RtlxAnsiStringToUnicodeSize@4
 817 RtlxOemStringToUnicodeSize@4
 818 RtlxUnicodeStringToAnsiSize@4
 819 RtlxUnicodeStringToOemSize@4
 820 SeAccessCheck@40
 821 ;SeAppendPrivileges@8
 822 SeAssignSecurity@28
 823 ;SeAuditingFileEvents@8
 824 ;SeAuditingFileOrGlobalEvents@18
 825 ;SeCaptureSecurityDescriptor@20
 826 SeCaptureSubjectContext@4
 827 ;SeCloseObjectAuditAlarm@12
 828 ;SeCreateAccessState@16
 829 SeCreateClientSecurity@16
 830 SeDeassignSecurity@4
 831 ;SeDeleteAccessState@4
 832 ;SeDeleteObjectAuditAlarm@8
 833 ;SeExports DATA ???
 834 ;SeFreePrivileges@4
 835 SeImpersonateClient@8
 836 ;SeLockSubjectContext@4
 837 ;SeMarkLogonSessionForTerminationNotification@4
 838 ;SeOpenObjectAuditAlarm@36
 839 ;SeOpenObjectForDeleteAuditAlarm@36
 840 SePrivilegeCheck@12
 841 ;SePrivilegeObjectAuditAlarm@24
 842 ;SePublicDefaultDacl DATA
 843 ;SeQueryAuthenticationIdToken@8
 844 ;SeQuerySecurityDescriptorInfo@16
 845 ;SeRegisterLogonSessionTerminatedRoutine@4
 846 ;SeReleaseSecurityDescriptor@12
 847 SeReleaseSubjectContext@4
 848 ;SeSetAccessStateGenericMapping@8
 849 ;SeSetSecurityDescriptorInfo@24
 850 ;SeSinglePrivilegeCheck@12
 851 ;SeSystemDefaultDacl DATA
 852 ;SeTokenImpersonationLevel@4
 853 SeTokenType DATA
 854 ;SeUnlockSubjectContext@4
 855 ;SeUnregisterLogonSessionTerminatedRoutine@4
 856 ;SeValidSecurityDescriptor@8
 857 WRITE_REGISTER_UCHAR@8
 858 WRITE_REGISTER_ULONG@8
 859 WRITE_REGISTER_USHORT@8
 860 WRITE_REGISTER_BUFFER_UCHAR@12
 861 WRITE_REGISTER_BUFFER_ULONG@12
 862 WRITE_REGISTER_BUFFER_USHORT@12
 863 ZwAccessCheckAndAuditAlarm@44
 864 ZwAlertThread@4
 865 ZwAllocateVirtualMemory@24
 866 ZwClearEvent@4
 867 ZwClose@4
 868 ZwCloseObjectAuditAlarm@12
 869 ZwConnectPort@32
 870 ZwCreateDirectoryObject@12
 871 ZwCreateEvent@20
 872 ZwCreateFile@44
 873 ZwCreateKey@28
 874 ZwCreateSection@28
 875 ZwCreateSymbolicLinkObject@16
 876 ZwDeleteFile@4
 877 ZwDeleteKey@4
 878 ZwDeleteValueKey@8
 879 ZwDeviceIoControlFile@40
 880 ZwDisplayString@4
 881 ZwDuplicateObject@28
 882 ZwDuplicateToken@24
 883 ZwEnumerateKey@24
 884 ZwEnumerateValueKey@24
 885 ZwFlushInstructionCache@12
 886 ZwFlushKey@4
 887 ZwFreeVirtualMemory@16
 888 ZwFsControlFile@40
 889 ZwLoadDriver@4
 890 ZwLoadKey@8
 891 ZwMakeTemporaryObject@4
 892 ZwMapViewOfSection@40
 893 ZwNotifyChangeKey@40
 894 ZwOpenDirectoryObject@12
 895 ZwOpenEvent@12
 896 ZwOpenFile@24
 897 ZwOpenKey@12
 898 ZwOpenProcess@16
 899 ZwOpenProcessToken@12
 900 ZwOpenSection@12
 901 ZwOpenSymbolicLinkObject@12
 902 ZwOpenThread@16
 903 ZwOpenThreadToken@16
 904 ZwPulseEvent@8
 905 ZwQueryDefaultLocale@8
 906 ZwQueryDirectoryFile@44
 907 ZwQueryInformationAtom@20
 908 ZwQueryInformationFile@20
 909 ZwQueryInformationProcess@20
 910 ZwQueryInformationToken@20
 911 ZwQueryKey@20
 912 ZwQueryObject@20
 913 ZwQuerySection@20
 914 ZwQuerySecurityObject@20
 915 ZwQuerySymbolicLinkObject@12
 916 ZwQuerySystemInformation@16
 917 ZwQuerySystemTime@4
 918 ZwQueryValueKey@24
 919 ZwQueryVolumeInformationFile@20
 920 ZwReadFile@36
 921 ZwReplaceKey@12
 922 ZwRequestWaitReplyPort@12
 923 ZwResetEvent@8
 924 ZwSaveKey@8
 925 ZwSetDefaultLocale@8
 926 ZwSetEvent@8
 927 ZwSetInformationFile@20
 928 ZwSetInformationObject@16
 929 ZwSetInformationProcess@16
 930 ZwSetInformationThread@16
 931 ZwSetSystemInformation@12
 932 ZwSetSystemTime@8
 933 ZwSetValueKey@24
 934 ZwTerminateProcess@8
 935 ZwUnloadDriver@4
 936 ZwUnloadKey@4
 937 ZwUnmapViewOfSection@8
 938 ZwWaitForMultipleObjects@20
 939 ZwWaitForSingleObject@12
 940 ZwWriteFile@36
 941 ZwYieldExecution@0
 942 _abnormal_termination
 943 ;_alldiv
 944 ;_allmul
 945 ;_allrem
 946 ;_allshl
 947 ;_allshr
 948 ;_aulldiv
 949 ;_aullrem
 950 ;_aullshr
 951 _except_handler2
 952 _except_handler3
 953 _global_unwind2
 954 _itoa
 955 _local_unwind2
 956 ;_purecall
 957 _snprintf
 958 _snwprintf
 959 _stricmp
 960 _strlwr
 961 _strnicmp
 962 _strnset
 963 _strrev
 964 _strset
 965 _strupr
 966 _vsnprintf
 967 _wcsicmp
 968 _wcslwr
 969 _wcsnicmp
 970 _wcsnset
 971 _wcsrev
 972 _wcsupr
 973 atoi
 974 atol
 975 isdigit
 976 islower
 977 isprint
 978 isspace
 979 isupper
 980 isxdigit
 981 mbstowcs
 982 mbtowc
 983 memchr
 984 memcpy
 985 memmove
 986 memset
 987 qsort
 988 rand
 989 sprintf
 990 srand
 991 strcat
 992 strchr
 993 strcmp
 994 strcpy
 995 strlen
 996 strncat
 997 strncmp
 998 strncpy
 999 strrchr
1000 strspn
1001 strstr
1002 swprintf
1003 tolower
1004 toupper
1005 towlower
1006 towupper
1007 vsprintf
1008 wcscat
1009 wcschr
1010 wcscmp
1011 wcscpy
1012 wcscspn
1013 wcslen
1014 wcsncat
1015 wcsncmp
1016 wcsncpy
1017 wcsrchr
1018 wcsspn
1019 wcsstr
1020 wcstombs
1021 wctomb