reactos/ntoskrnl/ntoskrnl.def

   1 ; $Id: ntoskrnl.def,v 1.138 2002/07/25 13:18:31 ekohl Exp $
   2 ;
   3 ; reactos/ntoskrnl/ntoskrnl.def
   4 ;
   5 ; ReactOS Operating System
   6 ;
   7 EXPORTS
   8 CcRosInitializeFileCache@12
   9 ;CcRosRequestCacheSegment@20
  10 ;CcRosReleaseCacheSegment@12
  11 CcRosReleaseFileCache@8
  12 CcCopyRead@24
  13 CcCopyWrite@20
  14 CcMapData@24
  15 CcMdlReadComplete@8
  16 CcSetDirtyPinnedData@8
  17 CcSetFileSizes@8
  18 CcUnpinData@4
  19 CcZeroData@16
  20 DbgBreakPoint@0
  21 DbgBreakPointWithStatus@4
  22 ;DbgLoadImageSymbols@12
  23 DbgPrint
  24 DbgPrompt@12
  25 DpcQueueSize DATA
  26 @ExAcquireFastMutexUnsafe@4
  27 ExAcquireResourceExclusive@8
  28 ExAcquireResourceExclusiveLite@8
  29 ExAcquireResourceSharedLite@8
  30 ExAcquireSharedStarveExclusive@8
  31 ExAcquireSharedWaitForExclusive@8
  32 ExAllocateFromPagedLookasideList@4
  33 ExAllocatePool@8
  34 ExAllocatePoolWithQuota@8
  35 ExAllocatePoolWithQuotaTag@12
  36 ExAllocatePoolWithTag@12
  37 ExConvertExclusiveToSharedLite@4
  38 ExCreateCallback@16
  39 ExDeleteNPagedLookasideList@4
  40 ExDeletePagedLookasideList@4
  41 ExDeleteResource@4
  42 ExDeleteResourceLite@4
  43 ExDesktopObjectType DATA
  44 ExDisableResourceBoostLite@4
  45 ExEventObjectType DATA
  46 ExExtendZone@12
  47 ExFreePool@4
  48 ExFreeToPagedLookasideList@8
  49 ExGetExclusiveWaiterCount@4
  50 ExGetPreviousMode@0
  51 ExGetSharedWaiterCount@4
  52 ExInitializeNPagedLookasideList@28
  53 ExInitializePagedLookasideList@28
  54 ExInitializeResource@4
  55 ExInitializeResourceLite@4
  56 ExInitializeZone@16
  57 ExInterlockedAddLargeInteger@16
  58 @ExInterlockedAddLargeStatistic@8
  59 ExInterlockedAddUlong@12
  60 @ExInterlockedCompareExchange64@16
  61 ExInterlockedDecrementLong@8
  62 ExInterlockedExchangeUlong@12
  63 ExInterlockedExtendZone@16
  64 ExInterlockedIncrementLong@8
  65 ExInterlockedInsertHeadList@12
  66 ExInterlockedInsertTailList@12
  67 ExInterlockedPopEntryList@8
  68 @ExInterlockedPopEntrySList@8
  69 ExInterlockedPushEntryList@12
  70 @ExInterlockedPushEntrySList@12
  71 ExInterlockedRemoveHeadList@8
  72 ExIsProcessorFeaturePresent@4
  73 ExIsResourceAcquiredExclusiveLite@4
  74 ExIsResourceAcquiredSharedLite@4
  75 ExLocalTimeToSystemTime@8
  76 ExNotifyCallback@12
  77 ExPostSystemEvent@12
  78 ;ExQueryPoolBlockSize
  79 ExQueueWorkItem@8
  80 ExRaiseAccessViolation@0
  81 ExRaiseDatatypeMisalignment@0
  82 ;ExRaiseException
  83 ;ExRaiseHardError
  84 ExRaiseStatus@4
  85 ExRegisterCallback@12
  86 ExReinitializeResourceLite@4
  87 @ExReleaseFastMutexUnsafe@4
  88 ExReleaseResourceForThread@8
  89 ExReleaseResourceForThreadLite@8
  90 @ExReleaseResourceLite@4
  91 ExSetResourceOwnerPointer@8
  92 ;ExSystemExceptionFilter
  93 ExSystemTimeToLocalTime@8
  94 ExTryToAcquireResourceExclusiveLite@4
  95 ExUnregisterCallback@4
  96 ExWindowStationObjectType DATA
  97 ExInitializeBinaryTree@12
  98 ExDeleteBinaryTree@4
  99 ExInsertBinaryTree@12
 100 ExSearchBinaryTree@12
 101 ExRemoveBinaryTree@12
 102 ExTraverseBinaryTree@16
 103 ExInitializeSplayTree@16
 104 ExDeleteSplayTree@4
 105 ExInsertSplayTree@12
 106 ExSearchSplayTree@12
 107 ExRemoveSplayTree@12
 108 ExWeightOfSplayTree@8
 109 ExTraverseSplayTree@16
 110 ExInitializeHashTable@16
 111 ExDeleteHashTable@4
 112 ExInsertHashTable@16
 113 ExSearchHashTable@16
 114 ExRemoveHashTable@16
 115 @ExfInterlockedAddUlong@12
 116 ;@ExfInterlockedInsertHeadList
 117 ;@ExfInterlockedInsertTailList
 118 ;@ExfInterlockedPopEntryList
 119 ;@ExfInterlockedPushEntryList
 120 ;@ExfInterlockedRemoveHeadList
 121 @Exfi386InterlockedDecrementLong@4
 122 @Exfi386InterlockedExchangeUlong@8
 123 @Exfi386InterlockedIncrementLong@4
 124 Exi386InterlockedDecrementLong@4
 125 Exi386InterlockedExchangeUlong@8
 126 Exi386InterlockedIncrementLong@4
 127 FsRtlAddLargeMcbEntry@28
 128 FsRtlAddMcbEntry@16
 129 FsRtlAddToTunnelCache@32
 130 FsRtlAllocateFileLock@8
 131 FsRtlAllocatePool@8
 132 FsRtlAllocatePoolWithQuota@8
 133 FsRtlAllocatePoolWithQuotaTag@12
 134 FsRtlAllocatePoolWithTag@12
 135 FsRtlAllocateResource@0
 136 FsRtlAreNamesEqual@16
 137 FsRtlBalanceReads@4
 138 FsRtlCheckLockForReadAccess@8
 139 FsRtlCheckLockForWriteAccess@8
 140 FsRtlCheckOplock@20
 141 FsRtlCopyRead@32
 142 FsRtlCopyWrite@32
 143 FsRtlCurrentBatchOplock@4
 144 FsRtlDeleteKeyFromTunnelCache@12
 145 FsRtlDeleteTunnelCache@4
 146 FsRtlDeregisterUncProvider@4
 147 FsRtlDissectDbcs@16
 148 FsRtlDissectName@16
 149 FsRtlDoesDbcsContainWildCards@4
 150 FsRtlDoesNameContainWildCards@4
 151 FsRtlFastCheckLockForRead@24
 152 FsRtlFastCheckLockForWrite@24
 153 FsRtlFastUnlockAll@16
 154 FsRtlFastUnlockAllByKey@20
 155 FsRtlFastUnlockSingle@32
 156 FsRtlFindInTunnelCache@32
 157 FsRtlGetFileSize@8
 158 FsRtlGetNextFileLock@8
 159 FsRtlGetNextLargeMcbEntry@20
 160 FsRtlGetNextMcbEntry@20
 161 FsRtlInitializeFileLock@12
 162 FsRtlInitializeLargeMcb@8
 163 FsRtlInitializeMcb@8
 164 FsRtlInitializeOplock@4
 165 FsRtlInitializeTunnelCache@4
 166 FsRtlIsDbcsInExpression@8
 167 FsRtlIsFatDbcsLegal@20
 168 FsRtlIsHpfsDbcsLegal@20
 169 FsRtlIsNameInExpression@16
 170 FsRtlIsNtstatusExpected@4
 171 FsRtlIsTotalDeviceFailure@4
 172 FsRtlLegalAnsiCharacterArray DATA
 173 FsRtlLookupLargeMcbEntry@32
 174 FsRtlLookupLastLargeMcbEntry@12
 175 FsRtlLookupLastMcbEntry@12
 176 FsRtlLookupMcbEntry@20
 177 FsRtlMdlRead@24
 178 FsRtlMdlReadComplete@8
 179 FsRtlMdlReadCompleteDev@12
 180 FsRtlMdlReadDev@28
 181 FsRtlMdlWriteComplete@12
 182 FsRtlMdlWriteCompleteDev@16
 183 FsRtlNormalizeNtstatus@8
 184 FsRtlNotifyChangeDirectory@28
 185 FsRtlNotifyCleanup@12
 186 FsRtlNotifyFullChangeDirectory@40
 187 FsRtlNotifyFullReportChange@36
 188 FsRtlNotifyInitializeSync@4
 189 FsRtlNotifyReportChange@20
 190 FsRtlNotifyUninitializeSync@4
 191 FsRtlNotifyVolumeEvent@8
 192 FsRtlNumberOfRunsInLargeMcb@4
 193 FsRtlNumberOfRunsInMcb@4
 194 FsRtlOplockFsctrl@12
 195 FsRtlOplockIsFastIoPossible@4
 196 FsRtlPostPagingFileStackOverflow@12
 197 FsRtlPostStackOverflow@12
 198 FsRtlPrepareMdlWrite@24
 199 FsRtlPrepareMdlWriteDev@28
 200 FsRtlPrivateLock@48
 201 FsRtlProcessFileLock@12
 202 FsRtlRegisterUncProvider@12
 203 FsRtlRemoveLargeMcbEntry@20
 204 FsRtlRemoveMcbEntry@12
 205 FsRtlSplitLargeMcb@20
 206 FsRtlSyncVolumes@12
 207 FsRtlTruncateLargeMcb@12
 208 FsRtlTruncateMcb@8
 209 FsRtlUninitializeFileLock@4
 210 FsRtlUninitializeLargeMcb@4
 211 FsRtlUninitializeMcb@4
 212 FsRtlUninitializeOplock@4
 213 HalDispatchTable DATA
 214 HalPrivateDispatchTable DATA
 215 @InterlockedCompareExchange@12
 216 @InterlockedDecrement@4
 217 @InterlockedExchange@8
 218 @InterlockedExchangeAdd@8
 219 @InterlockedIncrement@4
 220 IoAcquireCancelSpinLock@4
 221 IoAcquireVpbSpinLock@4
 222 IoAdapterObjectType DATA
 223 IoAllocateAdapterChannel@20
 224 IoAllocateController@16
 225 IoAllocateErrorLogEntry@8
 226 IoAllocateIrp@8
 227 IoAllocateMdl@20
 228 IoAssignResources@24
 229 IoAttachDevice@12
 230 IoAttachDeviceByPointer@8
 231 IoAttachDeviceToDeviceStack@8
 232 IoBuildAsynchronousFsdRequest@24
 233 IoBuildDeviceIoControlRequest@36
 234 IoBuildPartialMdl@16
 235 IoBuildSynchronousFsdRequest@28
 236 IoCallDriver@8
 237 IoCancelIrp@4
 238 IoCheckDesiredAccess@8
 239 IoCheckEaBufferValidity@12
 240 IoCheckFunctionAccess@24
 241 IoCheckShareAccess@20
 242 IoCompleteRequest@8
 243 IoConnectInterrupt@44
 244 IoCreateController@4
 245 IoCreateDevice@28
 246 IoCreateFile@56
 247 IoCreateNotificationEvent@8
 248 IoCreateStreamFileObject@8
 249 IoCreateSymbolicLink@8
 250 IoCreateSynchronizationEvent@8
 251 IoCreateUnprotectedSymbolicLink@8
 252 IoDeleteController@4
 253 IoDeleteDevice@4
 254 IoDeleteSymbolicLink@4
 255 IoDetachDevice@4
 256 IoDeviceHandlerObjectSize DATA
 257 IoDeviceHandlerObjectType DATA
 258 IoDisconnectInterrupt@4
 259 IoDeviceObjectType DATA
 260 IoDriverObjectType DATA
 261 IoEnqueueIrp@4
 262 IoFastQueryNetworkAttributes@20
 263 IoFileObjectType DATA
 264 IoFreeController@4
 265 IoFreeIrp@4
 266 IoFreeMdl@4
 267 IoGetAttachedDevice@4
 268 IoGetAttachedDeviceReference@4
 269 IoGetBaseFileSystemDeviceObject@4
 270 IoGetConfigurationInformation@0
 271 IoGetCurrentProcess@0
 272 IoGetDeviceObjectPointer@16
 273 IoGetDeviceToVerify@4
 274 IoGetFileObjectGenericMapping@0
 275 IoGetInitialStack@0
 276 IoGetRelatedDeviceObject@4
 277 IoGetRequestorProcess@4
 278 IoGetStackLimits@8
 279 IoGetTopLevelIrp@0
 280 IoInitializeIrp@12
 281 IoInitializeTimer@12
 282 IoIsOperationSynchronous@4
 283 IoMakeAssociatedIrp@8
 284 IoOpenDeviceInstanceKey@20
 285 ;IoPageRead@16
 286 IoQueryDeviceDescription@32
 287 IoQueryDeviceEnumInfo@8
 288 IoQueryFileInformation@20
 289 IoQueryVolumeInformation@20
 290 IoQueueThreadIrp@4
 291 IoRaiseHardError@12
 292 IoRaiseInformationalHardError@12
 293 IoReadOperationCount DATA
 294 IoReadPartitionTable@16
 295 IoReadTransferCount DATA
 296 IoRegisterDriverReinitialization@12
 297 IoRegisterFileSystem@4
 298 IoRegisterFsRegistrationChange@8
 299 IoRegisterShutdownNotification@4
 300 IoReleaseCancelSpinLock@4
 301 IoReleaseVpbSpinLock@4
 302 IoRemoveShareAccess@8
 303 IoReportHalResourceUsage@16
 304 IoReportResourceUsage@36
 305 IoSetDeviceToVerify@8
 306 IoSetHardErrorOrVerifyDevice@8
 307 IoSetInformation@16
 308 IoSetPartitionInformation@16
 309 IoSetShareAccess@16
 310 IoSetThreadHardErrorMode@4
 311 IoSetTopLevelIrp@4
 312 IoStartNextPacket@8
 313 IoStartNextPacketByKey@12
 314 IoStartPacket@16
 315 IoStartTimer@4
 316 IoStatisticsLock DATA
 317 IoStopTimer@4
 318 IoSynchronousPageWrite@20
 319 IoThreadToProcess@4
 320 IoUnregisterFileSystem@4
 321 IoUnregisterFsRegistrationChange@8
 322 IoUnregisterShutdownNotification@4
 323 IoUpdateShareAccess@8
 324 IoVerifyVolume@8
 325 IoWriteErrorLogEntry@4
 326 IoWriteOperationCount DATA
 327 IoWritePartitionTable@20
 328 IoWriteTransferCount DATA
 329 @IofCallDriver@8
 330 @IofCompleteRequest@8
 331 KdDebuggerEnabled DATA
 332 KdDebuggerNotPresent DATA
 333 KdPollBreakIn@0
 334 KdSystemDebugControl@4
 335 Ke386CallBios@8
 336 ;Ke386IoSetAccessProcess
 337 ;Ke386QueryIoAccessMap
 338 ;Ke386SetIoAccessMap
 339 KeAcquireSpinLockAtDpcLevel@4
 340 KeAddSystemServiceTable@20
 341 KeAttachProcess@4
 342 ;KeBoostCurrentThread
 343 KeBugCheck@4
 344 KeBugCheckEx@20
 345 KeCancelTimer@4
 346 KeClearEvent@4
 347 KeConnectInterrupt@4
 348 ;KeDcacheFlushCount DATA
 349 KeDelayExecutionThread@12
 350 KeDeregisterBugCheckCallback@4
 351 KeDetachProcess@0
 352 KeDisconnectInterrupt@4
 353 KeEnterCriticalRegion@0
 354 KeEnterKernelDebugger@0
 355 ;KeFindConfigurationEntry
 356 ;KeFindConfigurationNextEntry
 357 ;KeFlushEntireTb
 358 KeGetCurrentThread@0
 359 KeGetPreviousMode@0
 360 ;KeI386AbiosCall
 361 ;KeI386AllocateGdtSelectors
 362 ;KeI386Call16BitCStyleFunction
 363 ;KeI386Call16BitFunction
 364 ;KeI386FlatToGdtSelector
 365 ;KeI386GetLid
 366 ;KeI386MachineType DATA
 367 ;KeI386ReleaseGdtSelectors
 368 ;KeI386ReleaseLid
 369 ;KeI386SetGdtSelector
 370 ;KeIcacheFlushCount DATA
 371 KeInitializeApc@32
 372 KeInitializeDeviceQueue@4
 373 KeInitializeDpc@12
 374 KeInitializeEvent@12
 375 KeInitializeInterrupt@44
 376 KeInitializeMutant@8
 377 KeInitializeMutex@8
 378 KeInitializeQueue@8
 379 KeInitializeSemaphore@12
 380 KeInitializeSpinLock@4
 381 KeInitializeTimer@4
 382 KeInitializeTimerEx@8
 383 KeInsertByKeyDeviceQueue@12
 384 KeInsertDeviceQueue@8
 385 KeInsertHeadQueue@8
 386 KeInsertQueue@8
 387 KeInsertQueueApc@16
 388 KeInsertQueueDpc@12
 389 ;KeIsExecutingDpc
 390 KeLeaveCriticalRegion@0
 391 KeLoaderBlock DATA
 392 KeNumberProcessors DATA
 393 ;KeProfileInterrupt
 394 ;KeProfileInterruptWithSource
 395 KePulseEvent@12
 396 KeQuerySystemTime@4
 397 KeQueryTickCount@4
 398 KeQueryTimeIncrement@0
 399 ;KeRaiseUserException
 400 KeReadStateEvent@4
 401 KeReadStateMutant@4
 402 KeReadStateMutex@4
 403 KeReadStateQueue@4
 404 KeReadStateSemaphore@4
 405 KeReadStateTimer@4
 406 KeRegisterBugCheckCallback@20
 407 KeReleaseMutant@16
 408 KeReleaseMutex@8
 409 KeReleaseSemaphore@16
 410 KeReleaseSpinLockFromDpcLevel@4
 411 KeRemoveByKeyDeviceQueue@8
 412 KeRemoveDeviceQueue@4
 413 KeRemoveEntryDeviceQueue@8
 414 KeRemoveQueue@12
 415 KeRemoveQueueDpc@4
 416 KeResetEvent@4
 417 ;KeRestoreFloatingPointState
 418 KeRundownQueue@4
 419 ;KeSaveFloatingPointState
 420 KeServiceDescriptorTable DATA
 421 ;KeSetAffinityThread
 422 KeSetBasePriorityThread@8
 423 ;KeSetDmaIoCoherency
 424 KeSetEvent@12
 425 ;KeSetEventBoostPriority
 426 ;KeSetIdealProcessorThread
 427 KeSetImportanceDpc@8
 428 ;KeSetKernelStackSwapEnable
 429 KeSetPriorityThread@8
 430 ;KeSetProfileIrql
 431 ;@KeSetSwapContextNotifyRoutine
 432 KeSetTargetProcessorDpc@8
 433 ;@KeSetThreadSelectNotifyRoutine
 434 ;KeSetTimeIncrement
 435 KeSetTimer@16
 436 KeSetTimerEx@20
 437 ;@KeSetTimeUpdateNotifyRoutine
 438 KeSynchronizeExecution@12
 439 ;KeTerminateThread
 440 KeTickCount DATA
 441 ;KeUpdateRunTime
 442 ;KeUserModeCallback
 443 KeWaitForMultipleObjects@32
 444 KeWaitForMutexObject@20
 445 KeWaitForSingleObject@20
 446 ;@KefAcquireSpinLockAtDpcLevel
 447 ;@KefReleaseSpinLockFromDpcLevel
 448 ;Kei386EoiHelper
 449 ;@KiAcquireSpinLock@4
 450 ;KiBugCheckData DATA
 451 ;KiCoprocessorError@0
 452 KiDeliverApc@12
 453 KiDispatchInterrupt@0
 454 KiInterruptDispatch2@8
 455 ;KiIpiServiceRoutine@8
 456 ;@KiReleaseSpinLock@4
 457 ;KiUnexpectedInterrupt
 458 ;Kii386SpinOnSpinLock
 459 KiRawTicks DATA
 460 LdrAccessResource@16
 461 ;LdrEnumResources@20
 462 ;LdrFindResourceDirectory_U@16
 463 LdrFindResource_U@16
 464 ;LpcRequestPort@8
 465 LsaCallAuthenticationPackage@28
 466 LsaDeregisterLogonProcess@8
 467 LsaFreeReturnBuffer@4
 468 LsaLogonUser@56
 469 LsaLookupAuthenticationPackage@12
 470 LsaRegisterLogonProcess@12
 471 MmAdjustWorkingSetSize@12
 472 MmAllocateContiguousAlignedMemory@16
 473 MmAllocateContiguousMemory@12
 474 MmAllocateNonCachedMemory@4
 475 MmBuildMdlForNonPagedPool@4
 476 MmCanFileBeTruncated@8
 477 MmCopyFromCaller@12
 478 MmCopyToCaller@12
 479 MmCreateMdl@12
 480 MmCreateSection@32
 481 MmDbgTranslatePhysicalAddress@8
 482 MmDisableModifiedWriteOfSection@4
 483 MmFlushImageSection@8
 484 MmForceSectionClosed@8
 485 MmFreeContiguousMemory@4
 486 MmFreeNonCachedMemory@8
 487 MmGetPhysicalAddress@4
 488 MmGrowKernelStack@4
 489 MmHighestUserAddress DATA
 490 MmIsAddressValid@4
 491 MmIsNonPagedSystemAddressValid@4
 492 MmIsRecursiveIoFault@0
 493 MmIsThisAnNtAsSystem@0
 494 MmLockPagableDataSection@4
 495 MmLockPagableImageSection@4=MmLockPagableDataSection@4
 496 MmLockPagableSectionByHandle@4
 497 MmMapIoSpace@16
 498 MmMapLockedPages@8
 499 MmMapMemoryDumpMdl@4
 500 MmMapVideoDisplay@16
 501 MmMapViewInSystemSpace@12
 502 MmMapViewOfSection@40
 503 MmPageEntireDriver@4
 504 MmProbeAndLockPages@12
 505 MmQuerySystemSize@0
 506 MmResetDriverPaging@4
 507 MmSectionObjectType DATA
 508 MmSecureVirtualMemory@12
 509 MmSetAddressRangeModified@8
 510 MmSetBankedSection@24
 511 MmSizeOfMdl@8
 512 MmUnlockPagableImageSection@4
 513 MmUnlockPages@4
 514 MmUnmapIoSpace@8
 515 MmUnmapLockedPages@8
 516 MmUnmapVideoDisplay@8
 517 MmUnmapViewInSystemSpace@4
 518 MmUnmapViewOfSection@8
 519 MmUnsecureVirtualMemory@4
 520 MmUserProbeAddress DATA
 521 NlsAnsiCodePage DATA
 522 NlsLeadByteInfo DATA
 523 NlsMbCodePageTag DATA
 524 NlsMbOemCodePageTag DATA
 525 NlsOemLeadByteInfo DATA
 526 NtAddAtom@8
 527 NtAdjustPrivilegesToken@24
 528 NtAlertThread@4
 529 NtAllocateLocallyUniqueId@4
 530 NtAllocateUuids@12
 531 NtAllocateVirtualMemory@24
 532 NtBuildNumber DATA
 533 NtClose@4
 534 NtConnectPort@32
 535 NtCreateEvent@20
 536 NtCreateTimer@16
 537 NtOpenEvent@12
 538 NtCreateFile@44
 539 NtCreateSection@28
 540 NtDeleteAtom@4
 541 NtDeleteFile@4
 542 NtDeviceIoControlFile@40
 543 NtDuplicateObject@28
 544 NtDuplicateToken@24
 545 NtFindAtom@8
 546 NtFreeVirtualMemory@16
 547 NtFsControlFile@40
 548 NtGlobalFlag DATA
 549 NtLockFile@40
 550 NtMapViewOfSection@40
 551 NtNotifyChangeDirectoryFile@36
 552 NtOpenFile@24
 553 NtOpenProcess@16
 554 NtOpenProcessToken@12
 555 NtQueryDirectoryFile@44
 556 NtQueryEaFile@36
 557 NtQueryInformationAtom@20
 558 NtQueryInformationFile@20
 559 NtQueryInformationProcess@20
 560 NtQueryInformationToken@20
 561 ;NtQueryOleDirectoryFile@ <--- ?
 562 NtQuerySecurityObject@20
 563 NtQuerySystemTime@4
 564 NtQueryVolumeInformationFile@20
 565 NtReadFile@36
 566 NtRequestPort@20
 567 NtRequestWaitReplyPort@12
 568 NtSetEvent@8
 569 NtSetInformationFile@20
 570 NtSetInformationProcess@16
 571 NtSetInformationThread@16
 572 NtSetSecurityObject@12
 573 NtSetSystemTime@8
 574 NtUnlockFile@20
 575 NtVdmControl@8
 576 NtW32Call@20
 577 NtWaitForSingleObject@12
 578 NtWriteFile@36
 579 ObAssignSecurity@16
 580 ;ObCheckCreateObjectAccess@28
 581 ;ObCheckObjectAccess@20
 582 ;ObCreateObject@36
 583 ObCreateObject@20
 584 ;ObFindHandleForObject@20
 585 ObGetObjectPointerCount@4
 586 ObGetObjectSecurity@12
 587 ;ObInsertObject@24
 588 ObMakeTemporaryObject@4
 589 ObOpenObjectByName@28
 590 ObOpenObjectByPointer@28
 591 ;ObQueryNameString@16
 592 ;ObQueryObjectAuditingByHandle@8
 593 @ObfDereferenceObject@4
 594 @ObfReferenceObject@4
 595 ObReferenceObjectByHandle@24
 596 ObReferenceObjectByName@32
 597 ObReferenceObjectByPointer@16
 598 ObReleaseObjectSecurity@8
 599 ;ObSetSecurityDescriptorInfo@24
 600 ;PfxFindPrefix
 601 ;PfxInitialize
 602 ;PfxInsertPrefix
 603 ;PfxRemovePrefix
 604 PoCallDriver@8
 605 PoRegisterDeviceForIdleDetection@16
 606 PoRegisterSystemState@8
 607 PoRequestPowerIrp@24
 608 PoSetDeviceBusy@4
 609 PoSetPowerState@12
 610 PoSetSystemState@4
 611 PoStartNextPowerIrp@4
 612 PoUnregisterSystemState@4
 613 ;ProbeForWrite@12
 614 PsAssignImpersonationToken@8
 615 ;PsChargePoolQuota@12
 616 PsCreateSystemProcess@12
 617 PsCreateSystemThread@28
 618 PsCreateWin32Thread@4
 619 PsCreateWin32Process@4
 620 PsGetWin32Thread@0
 621 PsGetWin32Process@0
 622 PsEstablishWin32Callouts@24
 623 PsGetCurrentProcess@0
 624 PsGetCurrentProcessId@0
 625 PsGetCurrentThreadId@0
 626 PsGetCurrentThread@0
 627 PsGetProcessExitTime@0
 628 PsGetVersion@16
 629 PsImpersonateClient@20
 630 PsInitialSystemProcess DATA
 631 PsIsThreadTerminating@4
 632 PsLookupProcessByProcessId@8
 633 PsLookupProcessThreadByCid@12
 634 PsLookupThreadByThreadId@8
 635 PsProcessType DATA
 636 PsReferenceImpersonationToken@16
 637 PsReferencePrimaryToken@4
 638 ;PsReturnPoolQuota@12
 639 PsRevertToSelf@0
 640 PsSetCreateProcessNotifyRoutine@8
 641 PsSetCreateThreadNotifyRoutine@4
 642 ;PsSetLegoNotifyRoutine@4
 643 ;PsSetProcessPriorityByClass@8
 644 PsTerminateSystemThread@4
 645 PsThreadType DATA
 646 READ_REGISTER_UCHAR@4
 647 READ_REGISTER_ULONG@4
 648 READ_REGISTER_USHORT@4
 649 READ_REGISTER_BUFFER_UCHAR@12
 650 READ_REGISTER_BUFFER_ULONG@12
 651 READ_REGISTER_BUFFER_USHORT@12
 652 RtlAbsoluteToSelfRelativeSD@12
 653 RtlAddAccessAllowedAce@16
 654 RtlAddAce@20
 655 RtlAddAtomToAtomTable@12
 656 ;RtlAllocateAndInitializeSid
 657 ;RtlAllocateHeap
 658 RtlAnsiCharToUnicodeChar@4
 659 RtlAnsiStringToUnicodeSize@4
 660 RtlAnsiStringToUnicodeString@12
 661 RtlAppendAsciizToString@8
 662 RtlAppendStringToString@8
 663 RtlAppendUnicodeStringToString@8
 664 RtlAppendUnicodeToString@8
 665 RtlAreAllAccessesGranted@8
 666 RtlAreAnyAccessesGranted@8
 667 RtlAreBitsClear@12
 668 RtlAreBitsSet@12
 669 RtlAssert@16
 670 ;RtlCaptureStackBackTrace
 671 RtlCharToInteger@12
 672 RtlCheckRegistryKey@8
 673 RtlClearAllBits@4
 674 RtlClearBits@12
 675 RtlCompareMemory@12
 676 RtlCompareMemoryUlong@12
 677 RtlCompareString@12
 678 RtlCompareUnicodeString@12
 679 RtlCompressBuffer@32
 680 RtlCompressChunks@28
 681 RtlConvertLongToLargeInteger@4
 682 RtlConvertSidToUnicodeString@12
 683 RtlConvertUlongToLargeInteger@4
 684 RtlCopyLuid@8
 685 RtlCopySid@12
 686 RtlCopyString@8
 687 RtlCopyUnicodeString@8
 688 RtlCreateAcl@12
 689 RtlCreateAtomTable@8
 690 ;RtlCreateHeap
 691 RtlCreateRegistryKey@8
 692 RtlCreateSecurityDescriptor@8
 693 RtlCreateUnicodeString@8
 694 RtlCustomCPToUnicodeN@24
 695 RtlDecompressBuffer@24
 696 RtlDecompressChunks@28
 697 RtlDecompressFragment@32
 698 ;RtlDelete
 699 RtlDeleteAtomFromAtomTable@8
 700 ;RtlDeleteElementGenericTable
 701 ;RtlDeleteNoSplay
 702 RtlDeleteRegistryValue@12
 703 RtlDescribeChunk@20
 704 RtlDestroyAtomTable@4
 705 ;RtlDestroyHeap
 706 RtlDowncaseUnicodeString@12
 707 RtlEmptyAtomTable@8
 708 RtlEnlargedIntegerMultiply@8
 709 RtlEnlargedUnsignedDivide@16
 710 RtlEnlargedUnsignedMultiply@8
 711 ;RtlEnumerateGenericTable
 712 ;RtlEnumerateGenericTableWithoutSplaying
 713 RtlEqualLuid@8
 714 RtlEqualSid@8
 715 RtlEqualString@12
 716 RtlEqualUnicodeString@12
 717 RtlExtendedIntegerMultiply@12
 718 RtlExtendedLargeIntegerDivide@16
 719 RtlExtendedMagicDivide@20
 720 RtlFillMemory@12
 721 RtlFillMemoryUlong@12
 722 RtlFindClearBits@12
 723 RtlFindClearBitsAndSet@12
 724 RtlFindFirstRunClear@8
 725 RtlFindFirstRunSet@8
 726 RtlFindLongestRunClear@8
 727 RtlFindLongestRunSet@8
 728 RtlFindMessage@20
 729 RtlFindSetBits@12
 730 RtlFindSetBitsAndClear@12
 731 ;RtlFindUnicodePrefix
 732 RtlFormatCurrentUserKeyPath@4
 733 RtlFreeAnsiString@4
 734 ;RtlFreeHeap
 735 RtlFreeOemString@4
 736 RtlFreeUnicodeString@4
 737 RtlGenerate8dot3Name@16
 738 ;RtlGetCallersAddress
 739 RtlGetCompressionWorkSpaceSize@12
 740 RtlGetDaclSecurityDescriptor@16
 741 RtlGetDefaultCodePage@8
 742 ;RtlGetElementGenericTable
 743 RtlGetGroupSecurityDescriptor@12
 744 RtlGetOwnerSecurityDescriptor@12
 745 RtlImageNtHeader@4
 746 RtlInitAnsiString@8
 747 ;RtlInitCodePageTable
 748 RtlInitString@8
 749 RtlInitUnicodeString@8
 750 RtlInitializeBitMap@12
 751 ;RtlInitializeGenericTable
 752 RtlInitializeSid@12
 753 ;RtlInitializeUnicodePrefix
 754 ;RtlInsertElementGenericTable
 755 ;RtlInsertUnicodePrefix
 756 RtlIntegerToChar@16
 757 RtlIntegerToUnicodeString@12
 758 RtlIsNameLegalDOS8Dot3@12
 759 RtlLargeIntegerAdd@16
 760 RtlLargeIntegerArithmeticShift@12
 761 RtlLargeIntegerDivide@20
 762 RtlLargeIntegerNegate@8
 763 RtlLargeIntegerShiftLeft@12
 764 RtlLargeIntegerShiftRight@12
 765 RtlLargeIntegerSubtract@16
 766 RtlLengthRequiredSid@4
 767 RtlLengthSecurityDescriptor@4
 768 RtlLengthSid@4
 769 RtlLookupAtomInAtomTable@12
 770 ;RtlLookupElementGenericTable
 771 RtlMapGenericMask@8
 772 RtlMoveMemory@12
 773 RtlMultiByteToUnicodeN@20
 774 RtlMultiByteToUnicodeSize@12
 775 ;RtlNextUnicodePrefix
 776 RtlNtStatusToDosError@4
 777 RtlNtStatusToDosErrorNoTeb@4
 778 ;RtlNumberGenericTableElements
 779 RtlNumberOfClearBits@4
 780 RtlNumberOfSetBits@4
 781 RtlOemStringToCountedUnicodeString@12
 782 RtlOemStringToUnicodeSize@4
 783 RtlOemStringToUnicodeString@12
 784 RtlOemToUnicodeN@20
 785 RtlPinAtomInAtomTable@8
 786 RtlPrefixString@12
 787 RtlPrefixUnicodeString@12
 788 RtlQueryAtomInAtomTable@24
 789 RtlQueryRegistryValues@20
 790 RtlQueryTimeZoneInformation@4
 791 RtlRaiseException@4
 792 ;RtlRandom
 793 ;RtlRemoveUnicodePrefix
 794 RtlReserveChunk@20
 795 RtlSecondsSince1970ToTime@8
 796 RtlSecondsSince1980ToTime@8
 797 RtlSetAllBits@4
 798 RtlSetBits@12
 799 RtlSetDaclSecurityDescriptor@16
 800 RtlSetGroupSecurityDescriptor@12
 801 RtlSetOwnerSecurityDescriptor@12
 802 RtlSetSaclSecurityDescriptor@16
 803 RtlSetTimeZoneInformation@4
 804 ;RtlSplay
 805 RtlSubAuthorityCountSid@4
 806 RtlSubAuthoritySid@8
 807 RtlTimeFieldsToTime@8
 808 RtlTimeToSecondsSince1970@8
 809 RtlTimeToSecondsSince1980@8
 810 RtlTimeToTimeFields@8
 811 RtlUnicodeStringToAnsiSize@4
 812 RtlUnicodeStringToAnsiString@12
 813 RtlUnicodeStringToCountedOemString@12
 814 RtlUnicodeStringToInteger@12
 815 RtlUnicodeStringToOemSize@4
 816 RtlUnicodeStringToOemString@12
 817 RtlUnicodeToCustomCPN@24
 818 RtlUnicodeToMultiByteN@20
 819 RtlUnicodeToMultiByteSize@12
 820 RtlUnicodeToOemN@20
 821 RtlUnwind@16
 822 RtlUpcaseUnicodeChar@4
 823 RtlUpcaseUnicodeString@12
 824 RtlUpcaseUnicodeStringToAnsiString@12
 825 RtlUpcaseUnicodeStringToCountedOemString@12
 826 RtlUpcaseUnicodeStringToOemString@12
 827 RtlUpcaseUnicodeToCustomCPN@24
 828 RtlUpcaseUnicodeToMultiByteN@20
 829 RtlUpcaseUnicodeToOemN@20
 830 RtlUpperChar@4
 831 RtlUpperString@8
 832 RtlValidSecurityDescriptor@4
 833 RtlValidSid@4
 834 RtlWriteRegistryValue@24
 835 ;RtlZeroHeap
 836 RtlZeroMemory@8
 837 RtlxAnsiStringToUnicodeSize@4
 838 RtlxOemStringToUnicodeSize@4
 839 RtlxUnicodeStringToAnsiSize@4
 840 RtlxUnicodeStringToOemSize@4
 841 SeAccessCheck@40
 842 ;SeAppendPrivileges@8
 843 SeAssignSecurity@28
 844 ;SeAuditingFileEvents@8
 845 ;SeAuditingFileOrGlobalEvents@18
 846 ;SeCaptureSecurityDescriptor@20
 847 SeCaptureSubjectContext@4
 848 ;SeCloseObjectAuditAlarm@12
 849 ;SeCreateAccessState@16
 850 SeCreateClientSecurity@16
 851 SeDeassignSecurity@4
 852 ;SeDeleteAccessState@4
 853 ;SeDeleteObjectAuditAlarm@8
 854 SeExports DATA
 855 ;SeFreePrivileges@4
 856 SeImpersonateClient@8
 857 ;SeLockSubjectContext@4
 858 ;SeMarkLogonSessionForTerminationNotification@4
 859 ;SeOpenObjectAuditAlarm@36
 860 ;SeOpenObjectForDeleteAuditAlarm@36
 861 SePrivilegeCheck@12
 862 ;SePrivilegeObjectAuditAlarm@24
 863 SePublicDefaultDacl DATA
 864 ;SeQueryAuthenticationIdToken@8
 865 ;SeQuerySecurityDescriptorInfo@16
 866 ;SeRegisterLogonSessionTerminatedRoutine@4
 867 ;SeReleaseSecurityDescriptor@12
 868 SeReleaseSubjectContext@4
 869 ;SeSetAccessStateGenericMapping@8
 870 ;SeSetSecurityDescriptorInfo@24
 871 SeSinglePrivilegeCheck@12
 872 SeSystemDefaultDacl DATA
 873 SeTokenImpersonationLevel@4
 874 SeTokenType@4
 875 ;SeUnlockSubjectContext@4
 876 ;SeUnregisterLogonSessionTerminatedRoutine@4
 877 ;SeValidSecurityDescriptor@8
 878 WRITE_REGISTER_UCHAR@8
 879 WRITE_REGISTER_ULONG@8
 880 WRITE_REGISTER_USHORT@8
 881 WRITE_REGISTER_BUFFER_UCHAR@12
 882 WRITE_REGISTER_BUFFER_ULONG@12
 883 WRITE_REGISTER_BUFFER_USHORT@12
 884 ZwAccessCheckAndAuditAlarm@44
 885 ZwAlertThread@4
 886 ZwAllocateVirtualMemory@24
 887 ZwClearEvent@4
 888 ZwClose@4
 889 ZwCloseObjectAuditAlarm@12
 890 ZwConnectPort@32
 891 ZwCreateDirectoryObject@12
 892 ZwCreateEvent@20
 893 ZwCreateFile@44
 894 ZwCreateKey@28
 895 ZwCreateSection@28
 896 ZwCreateSymbolicLinkObject@16
 897 ZwDeleteFile@4
 898 ZwDeleteKey@4
 899 ZwDeleteValueKey@8
 900 ZwDeviceIoControlFile@40
 901 ZwDisplayString@4
 902 ZwDuplicateObject@28
 903 ZwDuplicateToken@24
 904 ZwEnumerateKey@24
 905 ZwEnumerateValueKey@24
 906 ZwFlushInstructionCache@12
 907 ZwFlushKey@4
 908 ZwFreeVirtualMemory@16
 909 ZwFsControlFile@40
 910 ZwLoadDriver@4
 911 ZwLoadKey@8
 912 ZwMakeTemporaryObject@4
 913 ZwMapViewOfSection@40
 914 ZwNotifyChangeKey@40
 915 ZwOpenDirectoryObject@12
 916 ZwOpenEvent@12
 917 ZwOpenFile@24
 918 ZwOpenKey@12
 919 ZwOpenProcess@16
 920 ZwOpenProcessToken@12
 921 ZwOpenSection@12
 922 ZwOpenSymbolicLinkObject@12
 923 ZwOpenThread@16
 924 ZwOpenThreadToken@16
 925 ZwPulseEvent@8
 926 ZwQueryDefaultLocale@8
 927 ZwQueryDirectoryFile@44
 928 ZwQueryInformationAtom@20
 929 ZwQueryInformationFile@20
 930 ZwQueryInformationProcess@20
 931 ZwQueryInformationToken@20
 932 ZwQueryKey@20
 933 ZwQueryObject@20
 934 ZwQuerySection@20
 935 ZwQuerySecurityObject@20
 936 ZwQuerySymbolicLinkObject@12
 937 ZwQuerySystemInformation@16
 938 ZwQuerySystemTime@4
 939 ZwQueryValueKey@24
 940 ZwQueryVolumeInformationFile@20
 941 ZwReadFile@36
 942 ZwReplaceKey@12
 943 ZwRequestWaitReplyPort@12
 944 ZwResetEvent@8
 945 ZwSaveKey@8
 946 ZwSetDefaultLocale@8
 947 ZwSetEvent@8
 948 ZwSetInformationFile@20
 949 ZwSetInformationObject@16
 950 ZwSetInformationProcess@16
 951 ZwSetInformationThread@16
 952 ZwSetSystemInformation@12
 953 ZwSetSystemTime@8
 954 ZwSetValueKey@24
 955 ZwTerminateProcess@8
 956 ZwUnloadDriver@4
 957 ZwUnloadKey@4
 958 ZwUnmapViewOfSection@8
 959 ZwWaitForMultipleObjects@20
 960 ZwWaitForSingleObject@12
 961 ZwWriteFile@36
 962 ZwYieldExecution@0
 963 _abnormal_termination
 964 ;_alldiv
 965 ;_allmul
 966 ;_allrem
 967 ;_allshl
 968 ;_allshr
 969 ;_aulldiv
 970 ;_aullrem
 971 ;_aullshr
 972 _except_handler2
 973 _except_handler3
 974 _global_unwind2
 975 _itoa
 976 _local_unwind2
 977 _purecall
 978 _snprintf
 979 _snwprintf
 980 _stricmp
 981 _strlwr
 982 _strnicmp
 983 _strnset
 984 _strrev
 985 _strset
 986 _strupr
 987 _vsnprintf
 988 _wcsicmp
 989 _wcslwr
 990 _wcsnicmp
 991 _wcsnset
 992 _wcsrev
 993 _wcsupr
 994 atoi
 995 atol
 996 isdigit
 997 islower
 998 isprint
 999 isspace
1000 isupper
1001 isxdigit
1002 mbstowcs
1003 mbtowc
1004 memchr
1005 memcpy
1006 memmove
1007 memset
1008 qsort
1009 rand
1010 sprintf
1011 srand
1012 strcat
1013 strchr
1014 strcmp
1015 strcpy
1016 strlen
1017 strncat
1018 strncmp
1019 strncpy
1020 strrchr
1021 strspn
1022 strstr
1023 swprintf
1024 tolower
1025 toupper
1026 towlower
1027 towupper
1028 vsprintf
1029 wcscat
1030 wcschr
1031 wcscmp
1032 wcscpy
1033 wcscspn
1034 wcslen
1035 wcsncat
1036 wcsncmp
1037 wcsncpy
1038 wcsrchr
1039 wcsspn
1040 wcsstr
1041 wcstombs
1042 wctomb