- Implemented ObQueryNameString().
[reactos.git] / reactos / ntoskrnl / ntoskrnl.def
1 ; $Id: ntoskrnl.def,v 1.153 2003/06/02 10:04:28 ekohl Exp $
2 ;
3 ; reactos/ntoskrnl/ntoskrnl.def
4 ;
5 ; ReactOS Operating System
6 ;
7 EXPORTS
8 CcRosInitializeFileCache@8
9 CcRosReleaseFileCache@4
10 CcCopyRead@24
11 CcCopyWrite@20
12 CcFlushCache@16
13 CcGetFileObjectFromSectionPtrs@4
14 CcMapData@24
15 CcMdlReadComplete@8
16 CcSetDirtyPinnedData@8
17 CcSetFileSizes@8
18 CcUnpinData@4
19 CcZeroData@16
20 DbgBreakPoint@0
21 DbgBreakPointWithStatus@4
22 ;DbgLoadImageSymbols@12
23 DbgPrint
24 DbgPrompt@12
25 DpcQueueSize DATA
26 @ExAcquireFastMutexUnsafe@4
27 ExAcquireResourceExclusive@8
28 ExAcquireResourceExclusiveLite@8
29 ExAcquireResourceSharedLite@8
30 ExAcquireSharedStarveExclusive@8
31 ExAcquireSharedWaitForExclusive@8
32 ExAllocateFromPagedLookasideList@4
33 ExAllocatePool@8
34 ExAllocatePoolWithQuota@8
35 ExAllocatePoolWithQuotaTag@12
36 ExAllocatePoolWithTag@12
37 ExConvertExclusiveToSharedLite@4
38 ExCreateCallback@16
39 ExDeleteNPagedLookasideList@4
40 ExDeletePagedLookasideList@4
41 ExDeleteResource@4
42 ExDeleteResourceLite@4
43 ExDesktopObjectType DATA
44 ExDisableResourceBoostLite@4
45 ExEventObjectType DATA
46 ExExtendZone@12
47 ExFreePool@4
48 ExFreeToPagedLookasideList@8
49 ExGetExclusiveWaiterCount@4
50 ExGetPreviousMode@0
51 ExGetSharedWaiterCount@4
52 ExInitializeNPagedLookasideList@28
53 ExInitializePagedLookasideList@28
54 ExInitializeResource@4
55 ExInitializeResourceLite@4
56 ExInitializeZone@16
57 ExInterlockedAddLargeInteger@16
58 @ExInterlockedAddLargeStatistic@8
59 ExInterlockedAddUlong@12
60 @ExInterlockedCompareExchange64@16
61 ExInterlockedDecrementLong@8
62 ExInterlockedExchangeUlong@12
63 ExInterlockedExtendZone@16
64 ExInterlockedIncrementLong@8
65 ExInterlockedInsertHeadList@12
66 ExInterlockedInsertTailList@12
67 ExInterlockedPopEntryList@8
68 @ExInterlockedPopEntrySList@8
69 ExInterlockedPushEntryList@12
70 @ExInterlockedPushEntrySList@12
71 ExInterlockedRemoveHeadList@8
72 ExIsProcessorFeaturePresent@4
73 ExIsResourceAcquiredExclusiveLite@4
74 ExIsResourceAcquiredSharedLite@4
75 ExLocalTimeToSystemTime@8
76 ExNotifyCallback@12
77 ExPostSystemEvent@12
78 ;ExQueryPoolBlockSize
79 ExQueueWorkItem@8
80 ExRaiseAccessViolation@0
81 ExRaiseDatatypeMisalignment@0
82 ;ExRaiseException
83 ;ExRaiseHardError
84 ExRaiseStatus@4
85 ExRegisterCallback@12
86 ExReinitializeResourceLite@4
87 @ExReleaseFastMutexUnsafe@4
88 ExReleaseResourceForThread@8
89 ExReleaseResourceForThreadLite@8
90 @ExReleaseResourceLite@4
91 ExSetResourceOwnerPointer@8
92 ;ExSystemExceptionFilter
93 ExSystemTimeToLocalTime@8
94 ExTryToAcquireResourceExclusiveLite@4
95 ExUnregisterCallback@4
96 ExWindowStationObjectType DATA
97 ExInitializeBinaryTree@12
98 ExDeleteBinaryTree@4
99 ExInsertBinaryTree@12
100 ExSearchBinaryTree@12
101 ExRemoveBinaryTree@12
102 ExTraverseBinaryTree@16
103 ExInitializeSplayTree@16
104 ExDeleteSplayTree@4
105 ExInsertSplayTree@12
106 ExSearchSplayTree@12
107 ExRemoveSplayTree@12
108 ExWeightOfSplayTree@8
109 ExTraverseSplayTree@16
110 ExInitializeHashTable@16
111 ExDeleteHashTable@4
112 ExInsertHashTable@16
113 ExSearchHashTable@16
114 ExRemoveHashTable@16
115 @ExfInterlockedAddUlong@12
116 @ExfInterlockedInsertHeadList@12
117 @ExfInterlockedInsertTailList@12
118 @ExfInterlockedPopEntryList@8
119 @ExfInterlockedPushEntryList@12
120 @ExfInterlockedRemoveHeadList@8
121 @Exfi386InterlockedDecrementLong@4
122 @Exfi386InterlockedExchangeUlong@8
123 @Exfi386InterlockedIncrementLong@4
124 Exi386InterlockedDecrementLong@4
125 Exi386InterlockedExchangeUlong@8
126 Exi386InterlockedIncrementLong@4
127 FsRtlAddLargeMcbEntry@28
128 FsRtlAddMcbEntry@16
129 FsRtlAddToTunnelCache@32
130 FsRtlAllocateFileLock@8
131 FsRtlAllocatePool@8
132 FsRtlAllocatePoolWithQuota@8
133 FsRtlAllocatePoolWithQuotaTag@12
134 FsRtlAllocatePoolWithTag@12
135 FsRtlAllocateResource@0
136 FsRtlAreNamesEqual@16
137 FsRtlBalanceReads@4
138 FsRtlCheckLockForReadAccess@8
139 FsRtlCheckLockForWriteAccess@8
140 FsRtlCheckOplock@20
141 FsRtlCopyRead@32
142 FsRtlCopyWrite@32
143 FsRtlCurrentBatchOplock@4
144 FsRtlDeleteKeyFromTunnelCache@12
145 FsRtlDeleteTunnelCache@4
146 FsRtlDeregisterUncProvider@4
147 FsRtlDissectDbcs@16
148 FsRtlDissectName@16
149 FsRtlDoesDbcsContainWildCards@4
150 FsRtlDoesNameContainWildCards@4
151 FsRtlFastCheckLockForRead@24
152 FsRtlFastCheckLockForWrite@24
153 FsRtlFastUnlockAll@16
154 FsRtlFastUnlockAllByKey@20
155 FsRtlFastUnlockSingle@32
156 FsRtlFindInTunnelCache@32
157 FsRtlGetFileSize@8
158 FsRtlGetNextFileLock@8
159 FsRtlGetNextLargeMcbEntry@20
160 FsRtlGetNextMcbEntry@20
161 FsRtlInitializeFileLock@12
162 FsRtlInitializeLargeMcb@8
163 FsRtlInitializeMcb@8
164 FsRtlInitializeOplock@4
165 FsRtlInitializeTunnelCache@4
166 FsRtlIsDbcsInExpression@8
167 FsRtlIsFatDbcsLegal@20
168 FsRtlIsHpfsDbcsLegal@20
169 FsRtlIsNameInExpression@16
170 FsRtlIsNtstatusExpected@4
171 FsRtlIsTotalDeviceFailure@4
172 FsRtlLegalAnsiCharacterArray DATA
173 FsRtlLookupLargeMcbEntry@32
174 FsRtlLookupLastLargeMcbEntry@12
175 FsRtlLookupLastMcbEntry@12
176 FsRtlLookupMcbEntry@20
177 FsRtlMdlRead@24
178 FsRtlMdlReadComplete@8
179 FsRtlMdlReadCompleteDev@12
180 FsRtlMdlReadDev@28
181 FsRtlMdlWriteComplete@12
182 FsRtlMdlWriteCompleteDev@16
183 FsRtlNormalizeNtstatus@8
184 FsRtlNotifyChangeDirectory@28
185 FsRtlNotifyCleanup@12
186 FsRtlNotifyFullChangeDirectory@40
187 FsRtlNotifyFullReportChange@36
188 FsRtlNotifyInitializeSync@4
189 FsRtlNotifyReportChange@20
190 FsRtlNotifyUninitializeSync@4
191 FsRtlNotifyVolumeEvent@8
192 FsRtlNumberOfRunsInLargeMcb@4
193 FsRtlNumberOfRunsInMcb@4
194 FsRtlOplockFsctrl@12
195 FsRtlOplockIsFastIoPossible@4
196 FsRtlPostPagingFileStackOverflow@12
197 FsRtlPostStackOverflow@12
198 FsRtlPrepareMdlWrite@24
199 FsRtlPrepareMdlWriteDev@28
200 FsRtlPrivateLock@48
201 FsRtlProcessFileLock@12
202 FsRtlRegisterUncProvider@12
203 FsRtlRemoveLargeMcbEntry@20
204 FsRtlRemoveMcbEntry@12
205 FsRtlSplitLargeMcb@20
206 FsRtlSyncVolumes@12
207 FsRtlTruncateLargeMcb@12
208 FsRtlTruncateMcb@8
209 FsRtlUninitializeFileLock@4
210 FsRtlUninitializeLargeMcb@4
211 FsRtlUninitializeMcb@4
212 FsRtlUninitializeOplock@4
213 HalDispatchTable DATA
214 HalPrivateDispatchTable DATA
215 @InterlockedCompareExchange@12
216 @InterlockedDecrement@4
217 @InterlockedExchange@8
218 @InterlockedExchangeAdd@8
219 @InterlockedIncrement@4
220 IoAcquireCancelSpinLock@4
221 IoAcquireRemoveLockEx@20
222 IoAcquireVpbSpinLock@4
223 IoAdapterObjectType DATA
224 IoAllocateAdapterChannel@20
225 IoAllocateController@16
226 IoAllocateErrorLogEntry@8
227 IoAllocateIrp@8
228 IoAllocateMdl@20
229 IoAssignResources@24
230 IoAttachDevice@12
231 IoAttachDeviceByPointer@8
232 IoAttachDeviceToDeviceStack@8
233 IoBuildAsynchronousFsdRequest@24
234 IoBuildDeviceIoControlRequest@36
235 IoBuildPartialMdl@16
236 IoBuildSynchronousFsdRequest@28
237 IoCallDriver@8
238 IoCancelIrp@4
239 IoCheckDesiredAccess@8
240 IoCheckEaBufferValidity@12
241 IoCheckFunctionAccess@24
242 IoCheckShareAccess@20
243 IoCompleteRequest@8
244 IoConnectInterrupt@44
245 IoCreateController@4
246 IoCreateDevice@28
247 IoCreateFile@56
248 IoCreateNotificationEvent@8
249 IoCreateStreamFileObject@8
250 IoCreateSymbolicLink@8
251 IoCreateSynchronizationEvent@8
252 IoCreateUnprotectedSymbolicLink@8
253 IoDeleteController@4
254 IoDeleteDevice@4
255 IoDeleteSymbolicLink@4
256 IoDetachDevice@4
257 IoDeviceHandlerObjectSize DATA
258 IoDeviceHandlerObjectType DATA
259 IoDisconnectInterrupt@4
260 IoDeviceObjectType DATA
261 IoDriverObjectType DATA
262 IoEnqueueIrp@4
263 IoFastQueryNetworkAttributes@20
264 IoFileObjectType DATA
265 IoFreeController@4
266 IoFreeIrp@4
267 IoFreeMdl@4
268 IoGetAttachedDevice@4
269 IoGetAttachedDeviceReference@4
270 IoGetBaseFileSystemDeviceObject@4
271 IoGetConfigurationInformation@0
272 IoGetCurrentProcess@0
273 IoGetDeviceObjectPointer@16
274 IoGetDeviceToVerify@4
275 IoGetFileObjectGenericMapping@0
276 IoGetInitialStack@0
277 IoGetRelatedDeviceObject@4
278 IoGetRequestorProcess@4
279 IoGetStackLimits@8
280 IoGetTopLevelIrp@0
281 IoInitializeIrp@12
282 IoInvalidateDeviceState@4
283 IoInitializeRemoveLockEx@20
284 IoInitializeTimer@12
285 IoIsOperationSynchronous@4
286 IoMakeAssociatedIrp@8
287 IoOpenDeviceInstanceKey@20
288 IoPageRead@20
289 IoQueryDeviceDescription@32
290 IoQueryDeviceEnumInfo@8
291 IoQueryFileInformation@20
292 IoQueryVolumeInformation@20
293 IoQueueThreadIrp@4
294 IoRaiseHardError@12
295 IoRaiseInformationalHardError@12
296 IoReadOperationCount DATA
297 IoReadPartitionTable@16
298 IoReadTransferCount DATA
299
300 IoFreeWorkItem@4
301 IoAllocateWorkItem@4
302 IoQueueWorkItem@16
303 IoRegisterDeviceInterface@16
304 IoSetDeviceInterfaceState@8
305 IoGetDeviceProperty@20
306 IoOpenDeviceRegistryKey@16
307 IoInvalidateDeviceRelations@8
308
309 IoRegisterDriverReinitialization@12
310 IoRegisterFileSystem@4
311 IoRegisterFsRegistrationChange@8
312 IoRegisterShutdownNotification@4
313 IoReleaseCancelSpinLock@4
314 IoReleaseRemoveLockAndWaitEx@12
315 IoReleaseRemoveLockEx@12
316 IoReleaseVpbSpinLock@4
317 IoRemoveShareAccess@8
318 IoReportHalResourceUsage@16
319 IoReportResourceUsage@36
320 IoSetDeviceToVerify@8
321 IoSetHardErrorOrVerifyDevice@8
322 IoSetInformation@16
323 IoSetPartitionInformation@16
324 IoSetShareAccess@16
325 IoSetThreadHardErrorMode@4
326 IoSetTopLevelIrp@4
327 IoStartNextPacket@8
328 IoStartNextPacketByKey@12
329 IoStartPacket@16
330 IoStartTimer@4
331 IoStatisticsLock DATA
332 IoStopTimer@4
333 IoSynchronousPageWrite@20
334 IoThreadToProcess@4
335 IoUnregisterFileSystem@4
336 IoUnregisterFsRegistrationChange@8
337 IoUnregisterShutdownNotification@4
338 IoUpdateShareAccess@8
339 IoVerifyVolume@8
340 IoWriteErrorLogEntry@4
341 IoWriteOperationCount DATA
342 IoWritePartitionTable@20
343 IoWriteTransferCount DATA
344 @IofCallDriver@8
345 @IofCompleteRequest@8
346 KdDebuggerEnabled DATA
347 KdDebuggerNotPresent DATA
348 KdPollBreakIn@0
349 KdSystemDebugControl@4
350 Ke386CallBios@8
351 ;Ke386IoSetAccessProcess
352 ;Ke386QueryIoAccessMap
353 ;Ke386SetIoAccessMap
354 KeAcquireSpinLockAtDpcLevel@4
355 KeAddSystemServiceTable@20
356 KeAttachProcess@4
357 ;KeBoostCurrentThread
358 KeBugCheck@4
359 KeBugCheckEx@20
360 KeCancelTimer@4
361 KeClearEvent@4
362 KeConnectInterrupt@4
363 KeDcacheFlushCount DATA
364 KeDelayExecutionThread@12
365 KeDeregisterBugCheckCallback@4
366 KeDetachProcess@0
367 KeDisconnectInterrupt@4
368 KeEnterCriticalRegion@0
369 KeEnterKernelDebugger@0
370 ;KeFindConfigurationEntry
371 ;KeFindConfigurationNextEntry
372 ;KeFlushEntireTb
373 KeGetCurrentThread@0
374 KeGetPreviousMode@0
375 ;KeI386AbiosCall
376 ;KeI386AllocateGdtSelectors
377 ;KeI386Call16BitCStyleFunction
378 ;KeI386Call16BitFunction
379 ;KeI386FlatToGdtSelector
380 ;KeI386GetLid
381 ;KeI386MachineType DATA
382 ;KeI386ReleaseGdtSelectors
383 ;KeI386ReleaseLid
384 ;KeI386SetGdtSelector
385 KeIcacheFlushCount DATA
386 KeInitializeApc@32
387 KeInitializeDeviceQueue@4
388 KeInitializeDpc@12
389 KeInitializeEvent@12
390 KeInitializeInterrupt@44
391 KeInitializeMutant@8
392 KeInitializeMutex@8
393 KeInitializeQueue@8
394 KeInitializeSemaphore@12
395 KeInitializeSpinLock@4
396 KeInitializeTimer@4
397 KeInitializeTimerEx@8
398 KeInsertByKeyDeviceQueue@12
399 KeInsertDeviceQueue@8
400 KeInsertHeadQueue@8
401 KeInsertQueue@8
402 KeInsertQueueApc@16
403 KeInsertQueueDpc@12
404 ;KeIsExecutingDpc
405 KeLeaveCriticalRegion@0
406 KeLoaderBlock DATA
407 KeNumberProcessors DATA
408 ;KeProfileInterrupt
409 ;KeProfileInterruptWithSource
410 KePulseEvent@12
411 KeQuerySystemTime@4
412 KeQueryTickCount@4
413 KeQueryTimeIncrement@0
414 ;KeRaiseUserException
415 KeRescheduleThread@0
416 KeReadStateEvent@4
417 KeReadStateMutant@4
418 KeReadStateMutex@4
419 KeReadStateQueue@4
420 KeReadStateSemaphore@4
421 KeReadStateTimer@4
422 KeRegisterBugCheckCallback@20
423 KeReleaseMutant@16
424 KeReleaseMutex@8
425 KeReleaseSemaphore@16
426 KeReleaseSpinLockFromDpcLevel@4
427 KeRemoveByKeyDeviceQueue@8
428 KeRemoveDeviceQueue@4
429 KeRemoveEntryDeviceQueue@8
430 KeRemoveQueue@12
431 KeRemoveQueueDpc@4
432 KeResetEvent@4
433 ;KeRestoreFloatingPointState
434 KeRundownQueue@4
435 ;KeSaveFloatingPointState
436 KeServiceDescriptorTable DATA
437 KeSetAffinityThread@8
438 KeSetBasePriorityThread@8
439 ;KeSetDmaIoCoherency
440 KeSetEvent@12
441 ;KeSetEventBoostPriority
442 ;KeSetIdealProcessorThread
443 KeSetImportanceDpc@8
444 ;KeSetKernelStackSwapEnable
445 KeSetPriorityThread@8
446 ;KeSetProfileIrql
447 ;@KeSetSwapContextNotifyRoutine
448 KeSetTargetProcessorDpc@8
449 ;@KeSetThreadSelectNotifyRoutine
450 ;KeSetTimeIncrement
451 KeSetTimer@16
452 KeSetTimerEx@20
453 ;@KeSetTimeUpdateNotifyRoutine
454 KeSynchronizeExecution@12
455 ;KeTerminateThread
456 KeTickCount DATA
457 ;KeUpdateRunTime
458 ;KeUserModeCallback
459 KeWaitForMultipleObjects@32
460 KeWaitForMutexObject@20
461 KeWaitForSingleObject@20
462 ;@KefAcquireSpinLockAtDpcLevel
463 ;@KefReleaseSpinLockFromDpcLevel
464 ;Kei386EoiHelper
465 ;@KiAcquireSpinLock@4
466 ;KiBugCheckData DATA
467 ;KiCoprocessorError@0
468 KiDeliverApc@12
469 KiDispatchInterrupt@0
470 KiInterruptDispatch2@8
471 ;KiIpiServiceRoutine@8
472 ;@KiReleaseSpinLock@4
473 ;KiUnexpectedInterrupt
474 ;Kii386SpinOnSpinLock
475 KiRawTicks DATA
476 LdrAccessResource@16
477 ;LdrEnumResources@20
478 ;LdrFindResourceDirectory_U@16
479 LdrFindResource_U@16
480 ;LpcRequestPort@8
481 LsaCallAuthenticationPackage@28
482 LsaDeregisterLogonProcess@8
483 LsaFreeReturnBuffer@4
484 LsaLogonUser@56
485 LsaLookupAuthenticationPackage@12
486 LsaRegisterLogonProcess@12
487 MmAdjustWorkingSetSize@12
488 MmAllocateContiguousAlignedMemory@16
489 MmAllocateContiguousMemory@12
490 MmAllocateNonCachedMemory@4
491 MmBuildMdlForNonPagedPool@4
492 MmCanFileBeTruncated@8
493 MmCopyFromCaller@12
494 MmCopyToCaller@12
495 MmCreateMdl@12
496 MmCreateSection@32
497 MmDbgTranslatePhysicalAddress@8
498 MmDisableModifiedWriteOfSection@4
499 MmFlushImageSection@8
500 MmForceSectionClosed@8
501 MmFreeContiguousMemory@4
502 MmFreeNonCachedMemory@8
503 MmGetPhysicalAddress@4
504 MmGrowKernelStack@4
505 MmHighestUserAddress DATA
506 MmIsAddressValid@4
507 MmIsNonPagedSystemAddressValid@4
508 MmIsRecursiveIoFault@0
509 MmIsThisAnNtAsSystem@0
510 MmLockPagableDataSection@4
511 MmLockPagableImageSection@4=MmLockPagableDataSection@4
512 MmLockPagableSectionByHandle@4
513 MmMapIoSpace@16
514 MmMapLockedPages@8
515 MmMapMemoryDumpMdl@4
516 MmMapVideoDisplay@16
517 MmMapViewInSystemSpace@12
518 MmMapViewOfSection@40
519 MmPageEntireDriver@4
520 MmProbeAndLockPages@12
521 MmQuerySystemSize@0
522 MmResetDriverPaging@4
523 MmSectionObjectType DATA
524 MmSecureVirtualMemory@12
525 MmSetAddressRangeModified@8
526 MmSetBankedSection@24
527 MmSizeOfMdl@8
528 MmUnlockPagableImageSection@4
529 MmUnlockPages@4
530 MmUnmapIoSpace@8
531 MmUnmapLockedPages@8
532 MmUnmapVideoDisplay@8
533 MmUnmapViewInSystemSpace@4
534 MmUnmapViewOfSection@8
535 MmUnsecureVirtualMemory@4
536 MmUserProbeAddress DATA
537 NlsAnsiCodePage DATA
538 NlsLeadByteInfo DATA
539 NlsMbCodePageTag DATA
540 NlsMbOemCodePageTag DATA
541 NlsOemLeadByteInfo DATA
542 NtAddAtom@8
543 NtAdjustPrivilegesToken@24
544 NtAlertThread@4
545 NtAllocateLocallyUniqueId@4
546 NtAllocateUuids@12
547 NtAllocateVirtualMemory@24
548 NtBuildNumber DATA
549 NtClose@4
550 NtConnectPort@32
551 NtCreateEvent@20
552 NtCreateTimer@16
553 NtOpenEvent@12
554 NtCreateFile@44
555 NtCreateSection@28
556 NtDeleteAtom@4
557 NtDeleteFile@4
558 NtDeviceIoControlFile@40
559 NtDuplicateObject@28
560 NtDuplicateToken@24
561 NtFindAtom@8
562 NtFreeVirtualMemory@16
563 NtFsControlFile@40
564 NtGlobalFlag DATA
565 NtLockFile@40
566 NtMapViewOfSection@40
567 NtNotifyChangeDirectoryFile@36
568 NtOpenFile@24
569 NtOpenProcess@16
570 NtOpenProcessToken@12
571 NtQueryDirectoryFile@44
572 NtQueryEaFile@36
573 NtQueryInformationAtom@20
574 NtQueryInformationFile@20
575 NtQueryInformationProcess@20
576 NtQueryInformationToken@20
577 ;NtQueryOleDirectoryFile@ <--- ?
578 NtQuerySecurityObject@20
579 NtQuerySystemTime@4
580 NtQueryVolumeInformationFile@20
581 NtReadFile@36
582 NtRequestPort@20
583 NtRequestWaitReplyPort@12
584 NtSetEvent@8
585 NtSetInformationFile@20
586 NtSetInformationProcess@16
587 NtSetInformationThread@16
588 NtSetSecurityObject@12
589 NtSetSystemTime@8
590 NtUnlockFile@20
591 NtVdmControl@8
592 NtW32Call@20
593 NtWaitForSingleObject@12
594 NtWriteFile@36
595 ObAssignSecurity@16
596 ;ObCheckCreateObjectAccess@28
597 ;ObCheckObjectAccess@20
598 ;ObCreateObject@36
599 ObCreateObject@20
600 ;ObFindHandleForObject@20
601 ObGetObjectPointerCount@4
602 ObGetObjectSecurity@12
603 ;ObInsertObject@24
604 ObMakeTemporaryObject@4
605 ObOpenObjectByName@28
606 ObOpenObjectByPointer@28
607 ObQueryNameString@16
608 ;ObQueryObjectAuditingByHandle@8
609 @ObfDereferenceObject@4
610 @ObfReferenceObject@4
611 ObReferenceObjectByHandle@24
612 ObReferenceObjectByName@32
613 ObReferenceObjectByPointer@16
614 ObReleaseObjectSecurity@8
615 ;ObSetSecurityDescriptorInfo@24
616 ;PfxFindPrefix
617 ;PfxInitialize
618 ;PfxInsertPrefix
619 ;PfxRemovePrefix
620 PoCallDriver@8
621 PoRegisterDeviceForIdleDetection@16
622 PoRegisterSystemState@8
623 PoRequestPowerIrp@24
624 PoSetDeviceBusy@4
625 PoSetPowerState@12
626 PoSetSystemState@4
627 PoStartNextPowerIrp@4
628 PoUnregisterSystemState@4
629 ;ProbeForWrite@12
630 PsAssignImpersonationToken@8
631 ;PsChargePoolQuota@12
632 PsCreateSystemProcess@12
633 PsCreateSystemThread@28
634 PsCreateWin32Thread@4
635 PsCreateWin32Process@4
636 PsGetWin32Thread@0
637 PsGetWin32Process@0
638 PsEstablishWin32Callouts@24
639 PsGetCurrentProcessId@0
640 PsGetCurrentThreadId@0
641 PsGetProcessExitTime@0
642 PsGetVersion@16
643 PsImpersonateClient@20
644 PsInitialSystemProcess DATA
645 PsIsThreadTerminating@4
646 PsLookupProcessByProcessId@8
647 PsLookupProcessThreadByCid@12
648 PsLookupThreadByThreadId@8
649 PsProcessType DATA
650 PsReferenceImpersonationToken@16
651 PsReferencePrimaryToken@4
652 ;PsReturnPoolQuota@12
653 PsRevertToSelf@0
654 PsSetCreateProcessNotifyRoutine@8
655 PsSetCreateThreadNotifyRoutine@4
656 ;PsSetLegoNotifyRoutine@4
657 ;PsSetProcessPriorityByClass@8
658 PsTerminateSystemThread@4
659 PsThreadType DATA
660 READ_REGISTER_UCHAR@4
661 READ_REGISTER_ULONG@4
662 READ_REGISTER_USHORT@4
663 READ_REGISTER_BUFFER_UCHAR@12
664 READ_REGISTER_BUFFER_ULONG@12
665 READ_REGISTER_BUFFER_USHORT@12
666 RtlAbsoluteToSelfRelativeSD@12
667 RtlAddAccessAllowedAce@16
668 RtlAddAce@20
669 RtlAddAtomToAtomTable@12
670 ;RtlAllocateAndInitializeSid
671 ;RtlAllocateHeap
672 RtlAnsiCharToUnicodeChar@4
673 RtlAnsiStringToUnicodeSize@4
674 RtlAnsiStringToUnicodeString@12
675 RtlAppendAsciizToString@8
676 RtlAppendStringToString@8
677 RtlAppendUnicodeStringToString@8
678 RtlAppendUnicodeToString@8
679 RtlAreAllAccessesGranted@8
680 RtlAreAnyAccessesGranted@8
681 RtlAreBitsClear@12
682 RtlAreBitsSet@12
683 RtlAssert@16
684 ;RtlCaptureStackBackTrace
685 RtlCharToInteger@12
686 RtlCheckRegistryKey@8
687 RtlClearAllBits@4
688 RtlClearBits@12
689 RtlCompareMemory@12
690 RtlCompareMemoryUlong@12
691 RtlCompareString@12
692 RtlCompareUnicodeString@12
693 RtlCompressBuffer@32
694 RtlCompressChunks@28
695 RtlConvertLongToLargeInteger@4
696 RtlConvertSidToUnicodeString@12
697 RtlConvertUlongToLargeInteger@4
698 RtlCopyLuid@8
699 RtlCopySid@12
700 RtlCopyString@8
701 RtlCopyUnicodeString@8
702 RtlCreateAcl@12
703 RtlCreateAtomTable@8
704 ;RtlCreateHeap
705 RtlCreateRegistryKey@8
706 RtlCreateSecurityDescriptor@8
707 RtlCreateUnicodeString@8
708 RtlCustomCPToUnicodeN@24
709 RtlDecompressBuffer@24
710 RtlDecompressChunks@28
711 RtlDecompressFragment@32
712 ;RtlDelete
713 RtlDeleteAtomFromAtomTable@8
714 ;RtlDeleteElementGenericTable
715 ;RtlDeleteNoSplay
716 RtlDeleteRegistryValue@12
717 RtlDescribeChunk@20
718 RtlDestroyAtomTable@4
719 ;RtlDestroyHeap
720 RtlDowncaseUnicodeString@12
721 RtlEmptyAtomTable@8
722 RtlEnlargedIntegerMultiply@8
723 RtlEnlargedUnsignedDivide@16
724 RtlEnlargedUnsignedMultiply@8
725 ;RtlEnumerateGenericTable
726 ;RtlEnumerateGenericTableWithoutSplaying
727 RtlEqualLuid@8
728 RtlEqualSid@8
729 RtlEqualString@12
730 RtlEqualUnicodeString@12
731 RtlExtendedIntegerMultiply@12
732 RtlExtendedLargeIntegerDivide@16
733 RtlExtendedMagicDivide@20
734 RtlFillMemory@12
735 RtlFillMemoryUlong@12
736 RtlFindClearBits@12
737 RtlFindClearBitsAndSet@12
738 RtlFindFirstRunClear@8
739 RtlFindFirstRunSet@8
740 RtlFindLongestRunClear@8
741 RtlFindLongestRunSet@8
742 RtlFindMessage@20
743 RtlFindSetBits@12
744 RtlFindSetBitsAndClear@12
745 ;RtlFindUnicodePrefix
746 RtlFormatCurrentUserKeyPath@4
747 RtlFreeAnsiString@4
748 ;RtlFreeHeap
749 RtlFreeOemString@4
750 RtlFreeUnicodeString@4
751 RtlGenerate8dot3Name@16
752 ;RtlGetCallersAddress
753 RtlGetCompressionWorkSpaceSize@12
754 RtlGetDaclSecurityDescriptor@16
755 RtlGetDefaultCodePage@8
756 ;RtlGetElementGenericTable
757 RtlGetGroupSecurityDescriptor@12
758 RtlGetOwnerSecurityDescriptor@12
759 RtlImageNtHeader@4
760 RtlInitAnsiString@8
761 RtlInitCodePageTable@8
762 RtlInitString@8
763 RtlInitUnicodeString@8
764 RtlInitializeBitMap@12
765 ;RtlInitializeGenericTable
766 RtlInitializeSid@12
767 ;RtlInitializeUnicodePrefix
768 ;RtlInsertElementGenericTable
769 ;RtlInsertUnicodePrefix
770 RtlIntegerToChar@16
771 RtlIntegerToUnicodeString@12
772 RtlIsNameLegalDOS8Dot3@12
773 RtlLargeIntegerAdd@16
774 RtlLargeIntegerArithmeticShift@12
775 RtlLargeIntegerDivide@20
776 RtlLargeIntegerNegate@8
777 RtlLargeIntegerShiftLeft@12
778 RtlLargeIntegerShiftRight@12
779 RtlLargeIntegerSubtract@16
780 RtlLengthRequiredSid@4
781 RtlLengthSecurityDescriptor@4
782 RtlLengthSid@4
783 RtlLookupAtomInAtomTable@12
784 ;RtlLookupElementGenericTable
785 RtlMapGenericMask@8
786 RtlMoveMemory@12
787 RtlMultiByteToUnicodeN@20
788 RtlMultiByteToUnicodeSize@12
789 ;RtlNextUnicodePrefix
790 RtlNtStatusToDosError@4
791 RtlNtStatusToDosErrorNoTeb@4
792 ;RtlNumberGenericTableElements
793 RtlNumberOfClearBits@4
794 RtlNumberOfSetBits@4
795 RtlOemStringToCountedUnicodeString@12
796 RtlOemStringToUnicodeSize@4
797 RtlOemStringToUnicodeString@12
798 RtlOemToUnicodeN@20
799 RtlPinAtomInAtomTable@8
800 RtlPrefixString@12
801 RtlPrefixUnicodeString@12
802 RtlQueryAtomInAtomTable@24
803 RtlQueryRegistryValues@20
804 RtlQueryTimeZoneInformation@4
805 RtlRaiseException@4
806 ;RtlRandom
807 ;RtlRemoveUnicodePrefix
808 RtlReserveChunk@20
809 RtlSecondsSince1970ToTime@8
810 RtlSecondsSince1980ToTime@8
811 RtlSetAllBits@4
812 RtlSetBits@12
813 RtlSetDaclSecurityDescriptor@16
814 RtlSetGroupSecurityDescriptor@12
815 RtlSetOwnerSecurityDescriptor@12
816 RtlSetSaclSecurityDescriptor@16
817 RtlSetTimeZoneInformation@4
818 ;RtlSplay
819 RtlSubAuthorityCountSid@4
820 RtlSubAuthoritySid@8
821 RtlTimeFieldsToTime@8
822 RtlTimeToSecondsSince1970@8
823 RtlTimeToSecondsSince1980@8
824 RtlTimeToTimeFields@8
825 RtlUnicodeStringToAnsiSize@4
826 RtlUnicodeStringToAnsiString@12
827 RtlUnicodeStringToCountedOemString@12
828 RtlUnicodeStringToInteger@12
829 RtlUnicodeStringToOemSize@4
830 RtlUnicodeStringToOemString@12
831 RtlUnicodeToCustomCPN@24
832 RtlUnicodeToMultiByteN@20
833 RtlUnicodeToMultiByteSize@12
834 RtlUnicodeToOemN@20
835 RtlUnwind@16
836 RtlUpcaseUnicodeChar@4
837 RtlUpcaseUnicodeString@12
838 RtlUpcaseUnicodeStringToAnsiString@12
839 RtlUpcaseUnicodeStringToCountedOemString@12
840 RtlUpcaseUnicodeStringToOemString@12
841 RtlUpcaseUnicodeToCustomCPN@24
842 RtlUpcaseUnicodeToMultiByteN@20
843 RtlUpcaseUnicodeToOemN@20
844 RtlUpperChar@4
845 RtlUpperString@8
846 RtlValidSecurityDescriptor@4
847 RtlValidSid@4
848 RtlWriteRegistryValue@24
849 ;RtlZeroHeap
850 RtlZeroMemory@8
851 RtlxAnsiStringToUnicodeSize@4
852 RtlxOemStringToUnicodeSize@4
853 RtlxUnicodeStringToAnsiSize@4
854 RtlxUnicodeStringToOemSize@4
855 SeAccessCheck@40
856 ;SeAppendPrivileges@8
857 SeAssignSecurity@28
858 ;SeAuditingFileEvents@8
859 ;SeAuditingFileOrGlobalEvents@18
860 ;SeCaptureSecurityDescriptor@20
861 SeCaptureSubjectContext@4
862 ;SeCloseObjectAuditAlarm@12
863 ;SeCreateAccessState@16
864 SeCreateClientSecurity@16
865 SeDeassignSecurity@4
866 ;SeDeleteAccessState@4
867 ;SeDeleteObjectAuditAlarm@8
868 SeExports DATA
869 ;SeFreePrivileges@4
870 SeImpersonateClient@8
871 ;SeLockSubjectContext@4
872 ;SeMarkLogonSessionForTerminationNotification@4
873 ;SeOpenObjectAuditAlarm@36
874 ;SeOpenObjectForDeleteAuditAlarm@36
875 SePrivilegeCheck@12
876 ;SePrivilegeObjectAuditAlarm@24
877 SePublicDefaultDacl DATA
878 ;SeQueryAuthenticationIdToken@8
879 ;SeQuerySecurityDescriptorInfo@16
880 ;SeRegisterLogonSessionTerminatedRoutine@4
881 ;SeReleaseSecurityDescriptor@12
882 SeReleaseSubjectContext@4
883 ;SeSetAccessStateGenericMapping@8
884 ;SeSetSecurityDescriptorInfo@24
885 SeSinglePrivilegeCheck@12
886 SeSystemDefaultDacl DATA
887 SeTokenImpersonationLevel@4
888 SeTokenType@4
889 ;SeUnlockSubjectContext@4
890 ;SeUnregisterLogonSessionTerminatedRoutine@4
891 ;SeValidSecurityDescriptor@8
892 WRITE_REGISTER_UCHAR@8
893 WRITE_REGISTER_ULONG@8
894 WRITE_REGISTER_USHORT@8
895 WRITE_REGISTER_BUFFER_UCHAR@12
896 WRITE_REGISTER_BUFFER_ULONG@12
897 WRITE_REGISTER_BUFFER_USHORT@12
898 ZwAccessCheckAndAuditAlarm@44
899 ZwAlertThread@4
900 ZwAllocateVirtualMemory@24
901 ZwClearEvent@4
902 ZwClose@4
903 ZwCloseObjectAuditAlarm@12
904 ZwConnectPort@32
905 ZwCreateDirectoryObject@12
906 ZwCreateEvent@20
907 ZwCreateFile@44
908 ZwCreateKey@28
909 ZwCreateSection@28
910 ZwCreateSymbolicLinkObject@16
911 ZwDeleteFile@4
912 ZwDeleteKey@4
913 ZwDeleteValueKey@8
914 ZwDeviceIoControlFile@40
915 ZwDisplayString@4
916 ZwDuplicateObject@28
917 ZwDuplicateToken@24
918 ZwEnumerateKey@24
919 ZwEnumerateValueKey@24
920 ZwFlushInstructionCache@12
921 ZwFlushKey@4
922 ZwFreeVirtualMemory@16
923 ZwFsControlFile@40
924 ZwLoadDriver@4
925 ZwLoadKey@8
926 ZwMakeTemporaryObject@4
927 ZwMapViewOfSection@40
928 ZwNotifyChangeKey@40
929 ZwOpenDirectoryObject@12
930 ZwOpenEvent@12
931 ZwOpenFile@24
932 ZwOpenKey@12
933 ZwOpenProcess@16
934 ZwOpenProcessToken@12
935 ZwOpenSection@12
936 ZwOpenSymbolicLinkObject@12
937 ZwOpenThread@16
938 ZwOpenThreadToken@16
939 ZwPulseEvent@8
940 ZwQueryDefaultLocale@8
941 ZwQueryDirectoryFile@44
942 ZwQueryInformationAtom@20
943 ZwQueryInformationFile@20
944 ZwQueryInformationProcess@20
945 ZwQueryInformationToken@20
946 ZwQueryKey@20
947 ZwQueryObject@20
948 ZwQuerySection@20
949 ZwQuerySecurityObject@20
950 ZwQuerySymbolicLinkObject@12
951 ZwQuerySystemInformation@16
952 ZwQuerySystemTime@4
953 ZwQueryValueKey@24
954 ZwQueryVolumeInformationFile@20
955 ZwReadFile@36
956 ZwReplaceKey@12
957 ZwRequestWaitReplyPort@12
958 ZwResetEvent@8
959 ZwSaveKey@8
960 ZwSetDefaultLocale@8
961 ZwSetEvent@8
962 ZwSetInformationFile@20
963 ZwSetInformationObject@16
964 ZwSetInformationProcess@16
965 ZwSetInformationThread@16
966 ZwSetSystemInformation@12
967 ZwSetSystemTime@8
968 ZwSetValueKey@24
969 ZwTerminateProcess@8
970 ZwUnloadDriver@4
971 ZwUnloadKey@4
972 ZwUnmapViewOfSection@8
973 ZwWaitForMultipleObjects@20
974 ZwWaitForSingleObject@12
975 ZwWriteFile@36
976 ZwYieldExecution@0
977 _abnormal_termination
978 _alldiv@4
979 _allmul@4
980 _allrem@4
981 _allshl@4
982 _allshr@4
983 _aulldiv@4
984 _aullrem@4
985 _aullshr@4
986 _except_handler2
987 _except_handler3
988 _global_unwind2
989 _itoa
990 _local_unwind2
991 _purecall
992 _snprintf
993 _snwprintf
994 _stricmp
995 _strlwr
996 _strnicmp
997 _strnset
998 _strrev
999 _strset
1000 _strupr
1001 _vsnprintf
1002 _wcsicmp
1003 _wcslwr
1004 _wcsnicmp
1005 _wcsnset
1006 _wcsrev
1007 _wcsupr
1008 atoi
1009 atol
1010 isdigit
1011 islower
1012 isprint
1013 isspace
1014 isupper
1015 isxdigit
1016 mbstowcs
1017 mbtowc
1018 memchr
1019 memcpy
1020 memmove
1021 memset
1022 qsort
1023 rand
1024 sprintf
1025 srand
1026 strcat
1027 strchr
1028 strcmp
1029 strcpy
1030 strlen
1031 strncat
1032 strncmp
1033 strncpy
1034 strrchr
1035 strspn
1036 strstr
1037 swprintf
1038 tolower
1039 toupper
1040 towlower
1041 towupper
1042 vsprintf
1043 wcscat
1044 wcschr
1045 wcscmp
1046 wcscpy
1047 wcscspn
1048 wcslen
1049 wcsncat
1050 wcsncmp
1051 wcsncpy
1052 wcsrchr
1053 wcsspn
1054 wcsstr
1055 wcstombs
1056 wctomb