reactos/ntoskrnl/ntoskrnl.def

   1 ; $Id: ntoskrnl.def,v 1.157 2003/06/20 16:22:56 ekohl Exp $
   2 ;
   3 ; reactos/ntoskrnl/ntoskrnl.def
   4 ;
   5 ; ReactOS Operating System
   6 ;
   7 EXPORTS
   8 CcRosInitializeFileCache@8
   9 CcRosReleaseFileCache@4
  10 CcCopyRead@24
  11 CcCopyWrite@20
  12 CcFlushCache@16
  13 CcGetFileObjectFromSectionPtrs@4
  14 CcMapData@24
  15 CcMdlReadComplete@8
  16 CcSetDirtyPinnedData@8
  17 CcSetFileSizes@8
  18 CcUnpinData@4
  19 CcZeroData@16
  20 DbgBreakPoint@0
  21 DbgBreakPointWithStatus@4
  22 ;DbgLoadImageSymbols@12
  23 DbgPrint
  24 DbgPrompt@12
  25 DpcQueueSize DATA
  26 @ExAcquireFastMutexUnsafe@4
  27 ExAcquireResourceExclusive@8
  28 ExAcquireResourceExclusiveLite@8
  29 ExAcquireResourceSharedLite@8
  30 ExAcquireSharedStarveExclusive@8
  31 ExAcquireSharedWaitForExclusive@8
  32 ExAllocateFromPagedLookasideList@4
  33 ExAllocatePool@8
  34 ExAllocatePoolWithQuota@8
  35 ExAllocatePoolWithQuotaTag@12
  36 ExAllocatePoolWithTag@12
  37 ExConvertExclusiveToSharedLite@4
  38 ExCreateCallback@16
  39 ExDeleteNPagedLookasideList@4
  40 ExDeletePagedLookasideList@4
  41 ExDeleteResource@4
  42 ExDeleteResourceLite@4
  43 ExDesktopObjectType DATA
  44 ExDisableResourceBoostLite@4
  45 ExEventObjectType DATA
  46 ExExtendZone@12
  47 ExFreePool@4
  48 ExFreeToPagedLookasideList@8
  49 ExGetExclusiveWaiterCount@4
  50 ExGetPreviousMode@0
  51 ExGetSharedWaiterCount@4
  52 ExInitializeNPagedLookasideList@28
  53 ExInitializePagedLookasideList@28
  54 ExInitializeResource@4
  55 ExInitializeResourceLite@4
  56 ExInitializeZone@16
  57 ExInterlockedAddLargeInteger@16
  58 @ExInterlockedAddLargeStatistic@8
  59 ExInterlockedAddUlong@12
  60 @ExInterlockedCompareExchange64@16
  61 ExInterlockedDecrementLong@8
  62 ExInterlockedExchangeUlong@12
  63 ExInterlockedExtendZone@16
  64 ExInterlockedIncrementLong@8
  65 ExInterlockedInsertHeadList@12
  66 ExInterlockedInsertTailList@12
  67 ExInterlockedPopEntryList@8
  68 @ExInterlockedPopEntrySList@8
  69 ExInterlockedPushEntryList@12
  70 @ExInterlockedPushEntrySList@12
  71 ExInterlockedRemoveHeadList@8
  72 ExIsProcessorFeaturePresent@4
  73 ExIsResourceAcquiredExclusiveLite@4
  74 ExIsResourceAcquiredSharedLite@4
  75 ExLocalTimeToSystemTime@8
  76 ExNotifyCallback@12
  77 ExPostSystemEvent@12
  78 ;ExQueryPoolBlockSize
  79 ExQueueWorkItem@8
  80 ExRaiseAccessViolation@0
  81 ExRaiseDatatypeMisalignment@0
  82 ;ExRaiseException
  83 ;ExRaiseHardError
  84 ExRaiseStatus@4
  85 ExRegisterCallback@12
  86 ExReinitializeResourceLite@4
  87 @ExReleaseFastMutexUnsafe@4
  88 ExReleaseResourceForThread@8
  89 ExReleaseResourceForThreadLite@8
  90 @ExReleaseResourceLite@4
  91 ExSetResourceOwnerPointer@8
  92 ;ExSystemExceptionFilter
  93 ExSystemTimeToLocalTime@8
  94 ExTryToAcquireResourceExclusiveLite@4
  95 ExUnregisterCallback@4
  96 ExWindowStationObjectType DATA
  97 ExInitializeBinaryTree@12
  98 ExDeleteBinaryTree@4
  99 ExInsertBinaryTree@12
 100 ExSearchBinaryTree@12
 101 ExRemoveBinaryTree@12
 102 ExTraverseBinaryTree@16
 103 ExInitializeSplayTree@16
 104 ExDeleteSplayTree@4
 105 ExInsertSplayTree@12
 106 ExSearchSplayTree@12
 107 ExRemoveSplayTree@12
 108 ExWeightOfSplayTree@8
 109 ExTraverseSplayTree@16
 110 ExInitializeHashTable@16
 111 ExDeleteHashTable@4
 112 ExInsertHashTable@16
 113 ExSearchHashTable@16
 114 ExRemoveHashTable@16
 115 @ExfInterlockedAddUlong@12
 116 @ExfInterlockedInsertHeadList@12
 117 @ExfInterlockedInsertTailList@12
 118 @ExfInterlockedPopEntryList@8
 119 @ExfInterlockedPushEntryList@12
 120 @ExfInterlockedRemoveHeadList@8
 121 @Exfi386InterlockedDecrementLong@4
 122 @Exfi386InterlockedExchangeUlong@8
 123 @Exfi386InterlockedIncrementLong@4
 124 Exi386InterlockedDecrementLong@4
 125 Exi386InterlockedExchangeUlong@8
 126 Exi386InterlockedIncrementLong@4
 127 FsRtlAddLargeMcbEntry@28
 128 FsRtlAddMcbEntry@16
 129 FsRtlAddToTunnelCache@32
 130 FsRtlAllocateFileLock@8
 131 FsRtlAllocatePool@8
 132 FsRtlAllocatePoolWithQuota@8
 133 FsRtlAllocatePoolWithQuotaTag@12
 134 FsRtlAllocatePoolWithTag@12
 135 FsRtlAllocateResource@0
 136 FsRtlAreNamesEqual@16
 137 FsRtlBalanceReads@4
 138 FsRtlCheckLockForReadAccess@8
 139 FsRtlCheckLockForWriteAccess@8
 140 FsRtlCheckOplock@20
 141 FsRtlCopyRead@32
 142 FsRtlCopyWrite@32
 143 FsRtlCurrentBatchOplock@4
 144 FsRtlDeleteKeyFromTunnelCache@12
 145 FsRtlDeleteTunnelCache@4
 146 FsRtlDeregisterUncProvider@4
 147 FsRtlDissectDbcs@16
 148 FsRtlDissectName@16
 149 FsRtlDoesDbcsContainWildCards@4
 150 FsRtlDoesNameContainWildCards@4
 151 FsRtlFastCheckLockForRead@24
 152 FsRtlFastCheckLockForWrite@24
 153 FsRtlFastUnlockAll@16
 154 FsRtlFastUnlockAllByKey@20
 155 FsRtlFastUnlockSingle@32
 156 FsRtlFindInTunnelCache@32
 157 FsRtlGetFileSize@8
 158 FsRtlGetNextFileLock@8
 159 FsRtlGetNextLargeMcbEntry@20
 160 FsRtlGetNextMcbEntry@20
 161 FsRtlInitializeFileLock@12
 162 FsRtlInitializeLargeMcb@8
 163 FsRtlInitializeMcb@8
 164 FsRtlInitializeOplock@4
 165 FsRtlInitializeTunnelCache@4
 166 FsRtlIsDbcsInExpression@8
 167 FsRtlIsFatDbcsLegal@20
 168 FsRtlIsHpfsDbcsLegal@20
 169 FsRtlIsNameInExpression@16
 170 FsRtlIsNtstatusExpected@4
 171 FsRtlIsTotalDeviceFailure@4
 172 FsRtlLegalAnsiCharacterArray DATA
 173 FsRtlLookupLargeMcbEntry@32
 174 FsRtlLookupLastLargeMcbEntry@12
 175 FsRtlLookupLastMcbEntry@12
 176 FsRtlLookupMcbEntry@20
 177 FsRtlMdlRead@24
 178 FsRtlMdlReadComplete@8
 179 FsRtlMdlReadCompleteDev@12
 180 FsRtlMdlReadDev@28
 181 FsRtlMdlWriteComplete@12
 182 FsRtlMdlWriteCompleteDev@16
 183 FsRtlNormalizeNtstatus@8
 184 FsRtlNotifyChangeDirectory@28
 185 FsRtlNotifyCleanup@12
 186 FsRtlNotifyFullChangeDirectory@40
 187 FsRtlNotifyFullReportChange@36
 188 FsRtlNotifyInitializeSync@4
 189 FsRtlNotifyReportChange@20
 190 FsRtlNotifyUninitializeSync@4
 191 FsRtlNotifyVolumeEvent@8
 192 FsRtlNumberOfRunsInLargeMcb@4
 193 FsRtlNumberOfRunsInMcb@4
 194 FsRtlOplockFsctrl@12
 195 FsRtlOplockIsFastIoPossible@4
 196 FsRtlPostPagingFileStackOverflow@12
 197 FsRtlPostStackOverflow@12
 198 FsRtlPrepareMdlWrite@24
 199 FsRtlPrepareMdlWriteDev@28
 200 FsRtlPrivateLock@48
 201 FsRtlProcessFileLock@12
 202 FsRtlRegisterUncProvider@12
 203 FsRtlRemoveLargeMcbEntry@20
 204 FsRtlRemoveMcbEntry@12
 205 FsRtlSplitLargeMcb@20
 206 FsRtlSyncVolumes@12
 207 FsRtlTruncateLargeMcb@12
 208 FsRtlTruncateMcb@8
 209 FsRtlUninitializeFileLock@4
 210 FsRtlUninitializeLargeMcb@4
 211 FsRtlUninitializeMcb@4
 212 FsRtlUninitializeOplock@4
 213 HalDispatchTable DATA
 214 HalPrivateDispatchTable DATA
 215 @InterlockedCompareExchange@12
 216 @InterlockedDecrement@4
 217 @InterlockedExchange@8
 218 @InterlockedExchangeAdd@8
 219 @InterlockedIncrement@4
 220 IoAcquireCancelSpinLock@4
 221 IoAcquireRemoveLockEx@20
 222 IoAcquireVpbSpinLock@4
 223 IoAdapterObjectType DATA
 224 IoAllocateAdapterChannel@20
 225 IoAllocateController@16
 226 IoAllocateErrorLogEntry@8
 227 IoAllocateIrp@8
 228 IoAllocateMdl@20
 229 IoAssignResources@24
 230 IoAttachDevice@12
 231 IoAttachDeviceByPointer@8
 232 IoAttachDeviceToDeviceStack@8
 233 IoBuildAsynchronousFsdRequest@24
 234 IoBuildDeviceIoControlRequest@36
 235 IoBuildPartialMdl@16
 236 IoBuildSynchronousFsdRequest@28
 237 IoCallDriver@8
 238 IoCancelIrp@4
 239 IoCheckDesiredAccess@8
 240 IoCheckEaBufferValidity@12
 241 IoCheckFunctionAccess@24
 242 IoCheckShareAccess@20
 243 IoCompleteRequest@8
 244 IoConnectInterrupt@44
 245 IoCreateController@4
 246 IoCreateDevice@28
 247 IoCreateFile@56
 248 IoCreateNotificationEvent@8
 249 IoCreateStreamFileObject@8
 250 IoCreateSymbolicLink@8
 251 IoCreateSynchronizationEvent@8
 252 IoCreateUnprotectedSymbolicLink@8
 253 IoDeleteController@4
 254 IoDeleteDevice@4
 255 IoDeleteSymbolicLink@4
 256 IoDetachDevice@4
 257 IoDeviceHandlerObjectSize DATA
 258 IoDeviceHandlerObjectType DATA
 259 IoDisconnectInterrupt@4
 260 IoDeviceObjectType DATA
 261 IoDriverObjectType DATA
 262 IoEnqueueIrp@4
 263 IoFastQueryNetworkAttributes@20
 264 IoFileObjectType DATA
 265 IoFreeController@4
 266 IoFreeIrp@4
 267 IoFreeMdl@4
 268 IoGetAttachedDevice@4
 269 IoGetAttachedDeviceReference@4
 270 IoGetBaseFileSystemDeviceObject@4
 271 IoGetConfigurationInformation@0
 272 IoGetCurrentProcess@0
 273 IoGetDeviceObjectPointer@16
 274 IoGetDeviceToVerify@4
 275 IoGetFileObjectGenericMapping@0
 276 IoGetInitialStack@0
 277 IoGetRelatedDeviceObject@4
 278 IoGetRequestorProcess@4
 279 IoGetStackLimits@8
 280 IoGetTopLevelIrp@0
 281 IoInitializeIrp@12
 282 IoInvalidateDeviceState@4
 283 IoInitializeRemoveLockEx@20
 284 IoInitializeTimer@12
 285 IoIsOperationSynchronous@4
 286 IoMakeAssociatedIrp@8
 287 IoOpenDeviceInstanceKey@20
 288 IoPageRead@20
 289 IoQueryDeviceDescription@32
 290 IoQueryDeviceEnumInfo@8
 291 IoQueryFileInformation@20
 292 IoQueryVolumeInformation@20
 293 IoQueueThreadIrp@4
 294 IoRaiseHardError@12
 295 IoRaiseInformationalHardError@12
 296 IoReadOperationCount DATA
 297 IoReadPartitionTable@16
 298 IoReadTransferCount DATA
 299
 300 IoFreeWorkItem@4
 301 IoAllocateWorkItem@4
 302 IoQueueWorkItem@16
 303 IoRegisterDeviceInterface@16
 304 IoSetDeviceInterfaceState@8
 305 IoGetDeviceProperty@20
 306 IoOpenDeviceRegistryKey@16
 307 IoInvalidateDeviceRelations@8
 308
 309 IoRegisterDriverReinitialization@12
 310 IoRegisterFileSystem@4
 311 IoRegisterFsRegistrationChange@8
 312 IoRegisterShutdownNotification@4
 313 IoReleaseCancelSpinLock@4
 314 IoReleaseRemoveLockAndWaitEx@12
 315 IoReleaseRemoveLockEx@12
 316 IoReleaseVpbSpinLock@4
 317 IoRemoveShareAccess@8
 318 IoReportHalResourceUsage@16
 319 IoReportResourceUsage@36
 320 IoSetDeviceToVerify@8
 321 IoSetHardErrorOrVerifyDevice@8
 322 IoSetInformation@16
 323 IoSetPartitionInformation@16
 324 IoSetShareAccess@16
 325 IoSetThreadHardErrorMode@4
 326 IoSetTopLevelIrp@4
 327 IoStartNextPacket@8
 328 IoStartNextPacketByKey@12
 329 IoStartPacket@16
 330 IoStartTimer@4
 331 IoStatisticsLock DATA
 332 IoStopTimer@4
 333 IoSynchronousPageWrite@20
 334 IoThreadToProcess@4
 335 IoUnregisterFileSystem@4
 336 IoUnregisterFsRegistrationChange@8
 337 IoUnregisterShutdownNotification@4
 338 IoUpdateShareAccess@8
 339 IoVerifyVolume@8
 340 IoWriteErrorLogEntry@4
 341 IoWriteOperationCount DATA
 342 IoWritePartitionTable@20
 343 IoWriteTransferCount DATA
 344 @IofCallDriver@8
 345 @IofCompleteRequest@8
 346 KdDebuggerEnabled DATA
 347 KdDebuggerNotPresent DATA
 348 KdPollBreakIn@0
 349 KdSystemDebugControl@4
 350 Ke386CallBios@8
 351 ;Ke386IoSetAccessProcess
 352 ;Ke386QueryIoAccessMap
 353 ;Ke386SetIoAccessMap
 354 KeAcquireSpinLockAtDpcLevel@4
 355 KeAddSystemServiceTable@20
 356 KeAttachProcess@4
 357 ;KeBoostCurrentThread
 358 KeBugCheck@4
 359 KeBugCheckEx@20
 360 KeCancelTimer@4
 361 KeClearEvent@4
 362 KeConnectInterrupt@4
 363 KeDcacheFlushCount DATA
 364 KeDelayExecutionThread@12
 365 KeDeregisterBugCheckCallback@4
 366 KeDetachProcess@0
 367 KeDisconnectInterrupt@4
 368 KeEnterCriticalRegion@0
 369 KeEnterKernelDebugger@0
 370 ;KeFindConfigurationEntry
 371 ;KeFindConfigurationNextEntry
 372 ;KeFlushEntireTb
 373 KeGetCurrentThread@0
 374 KeGetPreviousMode@0
 375 ;KeI386AbiosCall
 376 ;KeI386AllocateGdtSelectors
 377 ;KeI386Call16BitCStyleFunction
 378 ;KeI386Call16BitFunction
 379 ;KeI386FlatToGdtSelector
 380 ;KeI386GetLid
 381 ;KeI386MachineType DATA
 382 ;KeI386ReleaseGdtSelectors
 383 ;KeI386ReleaseLid
 384 ;KeI386SetGdtSelector
 385 KeIcacheFlushCount DATA
 386 KeInitializeApc@32
 387 KeInitializeDeviceQueue@4
 388 KeInitializeDpc@12
 389 KeInitializeEvent@12
 390 KeInitializeInterrupt@44
 391 KeInitializeMutant@8
 392 KeInitializeMutex@8
 393 KeInitializeQueue@8
 394 KeInitializeSemaphore@12
 395 KeInitializeSpinLock@4
 396 KeInitializeTimer@4
 397 KeInitializeTimerEx@8
 398 KeInsertByKeyDeviceQueue@12
 399 KeInsertDeviceQueue@8
 400 KeInsertHeadQueue@8
 401 KeInsertQueue@8
 402 KeInsertQueueApc@16
 403 KeInsertQueueDpc@12
 404 ;KeIsExecutingDpc
 405 KeLeaveCriticalRegion@0
 406 KeLoaderBlock DATA
 407 KeNumberProcessors DATA
 408 ;KeProfileInterrupt
 409 ;KeProfileInterruptWithSource
 410 KePulseEvent@12
 411 KeQuerySystemTime@4
 412 KeQueryTickCount@4
 413 KeQueryTimeIncrement@0
 414 ;KeRaiseUserException
 415 KeRescheduleThread@0
 416 KeReadStateEvent@4
 417 KeReadStateMutant@4
 418 KeReadStateMutex@4
 419 KeReadStateQueue@4
 420 KeReadStateSemaphore@4
 421 KeReadStateTimer@4
 422 KeRegisterBugCheckCallback@20
 423 KeReleaseMutant@16
 424 KeReleaseMutex@8
 425 KeReleaseSemaphore@16
 426 KeReleaseSpinLockFromDpcLevel@4
 427 KeRemoveByKeyDeviceQueue@8
 428 KeRemoveDeviceQueue@4
 429 KeRemoveEntryDeviceQueue@8
 430 KeRemoveQueue@12
 431 KeRemoveQueueDpc@4
 432 KeResetEvent@4
 433 ;KeRestoreFloatingPointState
 434 KeRundownQueue@4
 435 ;KeSaveFloatingPointState
 436 KeServiceDescriptorTable DATA
 437 KeSetAffinityThread@8
 438 KeSetBasePriorityThread@8
 439 ;KeSetDmaIoCoherency
 440 KeSetEvent@12
 441 ;KeSetEventBoostPriority
 442 ;KeSetIdealProcessorThread
 443 KeSetImportanceDpc@8
 444 ;KeSetKernelStackSwapEnable
 445 KeSetPriorityThread@8
 446 ;KeSetProfileIrql
 447 ;@KeSetSwapContextNotifyRoutine
 448 KeSetTargetProcessorDpc@8
 449 ;@KeSetThreadSelectNotifyRoutine
 450 ;KeSetTimeIncrement
 451 KeSetTimer@16
 452 KeSetTimerEx@20
 453 ;@KeSetTimeUpdateNotifyRoutine
 454 KeSynchronizeExecution@12
 455 ;KeTerminateThread
 456 KeTickCount DATA
 457 ;KeUpdateRunTime
 458 ;KeUserModeCallback
 459 KeWaitForMultipleObjects@32
 460 KeWaitForMutexObject@20
 461 KeWaitForSingleObject@20
 462 ;@KefAcquireSpinLockAtDpcLevel
 463 ;@KefReleaseSpinLockFromDpcLevel
 464 ;Kei386EoiHelper
 465 ;@KiAcquireSpinLock@4
 466 ;KiBugCheckData DATA
 467 ;KiCoprocessorError@0
 468 KiDeliverApc@12
 469 KiDispatchInterrupt@0
 470 KiInterruptDispatch2@8
 471 ;KiIpiServiceRoutine@8
 472 ;@KiReleaseSpinLock@4
 473 ;KiUnexpectedInterrupt
 474 ;Kii386SpinOnSpinLock
 475 KiRawTicks DATA
 476 LdrAccessResource@16
 477 ;LdrEnumResources@20
 478 ;LdrFindResourceDirectory_U@16
 479 LdrFindResource_U@16
 480 ;LpcRequestPort@8
 481 LsaCallAuthenticationPackage@28
 482 LsaDeregisterLogonProcess@8
 483 LsaFreeReturnBuffer@4
 484 LsaLogonUser@56
 485 LsaLookupAuthenticationPackage@12
 486 LsaRegisterLogonProcess@12
 487 MmAdjustWorkingSetSize@12
 488 MmAllocateContiguousAlignedMemory@16
 489 MmAllocateContiguousMemory@12
 490 MmAllocateNonCachedMemory@4
 491 MmBuildMdlForNonPagedPool@4
 492 MmCanFileBeTruncated@8
 493 MmCopyFromCaller@12
 494 MmCopyToCaller@12
 495 MmCreateMdl@12
 496 MmCreateSection@32
 497 MmDbgTranslatePhysicalAddress@8
 498 MmDisableModifiedWriteOfSection@4
 499 MmFlushImageSection@8
 500 MmForceSectionClosed@8
 501 MmFreeContiguousMemory@4
 502 MmFreeNonCachedMemory@8
 503 MmGetPhysicalAddress@4
 504 MmGrowKernelStack@4
 505 MmHighestUserAddress DATA
 506 MmIsAddressValid@4
 507 MmIsNonPagedSystemAddressValid@4
 508 MmIsRecursiveIoFault@0
 509 MmIsThisAnNtAsSystem@0
 510 MmLockPagableDataSection@4
 511 MmLockPagableImageSection@4=MmLockPagableDataSection@4
 512 MmLockPagableSectionByHandle@4
 513 MmMapIoSpace@16
 514 MmMapLockedPages@8
 515 MmMapMemoryDumpMdl@4
 516 MmMapVideoDisplay@16
 517 MmMapViewInSystemSpace@12
 518 MmMapViewOfSection@40
 519 MmPageEntireDriver@4
 520 MmProbeAndLockPages@12
 521 MmQuerySystemSize@0
 522 MmResetDriverPaging@4
 523 MmSectionObjectType DATA
 524 MmSecureVirtualMemory@12
 525 MmSetAddressRangeModified@8
 526 MmSetBankedSection@24
 527 MmSizeOfMdl@8
 528 MmUnlockPagableImageSection@4
 529 MmUnlockPages@4
 530 MmUnmapIoSpace@8
 531 MmUnmapLockedPages@8
 532 MmUnmapVideoDisplay@8
 533 MmUnmapViewInSystemSpace@4
 534 MmUnmapViewOfSection@8
 535 MmUnsecureVirtualMemory@4
 536 MmUserProbeAddress DATA
 537 NlsAnsiCodePage DATA
 538 NlsLeadByteInfo DATA
 539 NlsMbCodePageTag DATA
 540 NlsMbOemCodePageTag DATA
 541 NlsOemLeadByteInfo DATA
 542 NtAddAtom@8
 543 NtAdjustPrivilegesToken@24
 544 NtAlertThread@4
 545 NtAllocateLocallyUniqueId@4
 546 NtAllocateUuids@12
 547 NtAllocateVirtualMemory@24
 548 NtBuildNumber DATA
 549 NtClose@4
 550 NtConnectPort@32
 551 NtCreateEvent@20
 552 NtCreateTimer@16
 553 NtOpenEvent@12
 554 NtCreateFile@44
 555 NtCreateSection@28
 556 NtDeleteAtom@4
 557 NtDeleteFile@4
 558 NtDeviceIoControlFile@40
 559 NtDuplicateObject@28
 560 NtDuplicateToken@24
 561 NtFindAtom@8
 562 NtFreeVirtualMemory@16
 563 NtFsControlFile@40
 564 NtGlobalFlag DATA
 565 NtLockFile@40
 566 NtMapViewOfSection@40
 567 NtNotifyChangeDirectoryFile@36
 568 NtOpenFile@24
 569 NtOpenProcess@16
 570 NtOpenProcessToken@12
 571 NtQueryDirectoryFile@44
 572 NtQueryEaFile@36
 573 NtQueryInformationAtom@20
 574 NtQueryInformationFile@20
 575 NtQueryInformationProcess@20
 576 NtQueryInformationToken@20
 577 ;NtQueryOleDirectoryFile@ <--- ?
 578 NtQuerySecurityObject@20
 579 NtQuerySystemTime@4
 580 NtQueryVolumeInformationFile@20
 581 NtReadFile@36
 582 NtRequestPort@20
 583 NtRequestWaitReplyPort@12
 584 NtSetEvent@8
 585 NtSetInformationFile@20
 586 NtSetInformationProcess@16
 587 NtSetInformationThread@16
 588 NtSetSecurityObject@12
 589 NtSetSystemTime@8
 590 NtUnlockFile@20
 591 NtVdmControl@8
 592 NtW32Call@20
 593 NtWaitForSingleObject@12
 594 NtWriteFile@36
 595 ObAssignSecurity@16
 596 ;ObCheckCreateObjectAccess@28
 597 ;ObCheckObjectAccess@20
 598 ObCreateObject@36
 599 ObRosCreateObject@20
 600 ;ObFindHandleForObject@20
 601 ObGetObjectPointerCount@4
 602 ObGetObjectSecurity@12
 603 ;ObInsertObject@24
 604 ObMakeTemporaryObject@4
 605 ObOpenObjectByName@28
 606 ObOpenObjectByPointer@28
 607 ObQueryNameString@16
 608 ;ObQueryObjectAuditingByHandle@8
 609 @ObfDereferenceObject@4
 610 @ObfReferenceObject@4
 611 ObReferenceObjectByHandle@24
 612 ObReferenceObjectByName@32
 613 ObReferenceObjectByPointer@16
 614 ObReleaseObjectSecurity@8
 615 ;ObSetSecurityDescriptorInfo@24
 616 ;PfxFindPrefix
 617 ;PfxInitialize
 618 ;PfxInsertPrefix
 619 ;PfxRemovePrefix
 620 PoCallDriver@8
 621 PoRegisterDeviceForIdleDetection@16
 622 PoRegisterSystemState@8
 623 PoRequestPowerIrp@24
 624 PoSetDeviceBusy@4
 625 PoSetPowerState@12
 626 PoSetSystemState@4
 627 PoStartNextPowerIrp@4
 628 PoUnregisterSystemState@4
 629 ;ProbeForWrite@12
 630 PsAssignImpersonationToken@8
 631 ;PsChargePoolQuota@12
 632 PsCreateSystemProcess@12
 633 PsCreateSystemThread@28
 634 PsCreateWin32Process@4
 635 PsEstablishWin32Callouts@24
 636 PsGetCurrentProcessId@0
 637 PsGetCurrentThreadId@0
 638 PsGetProcessExitTime@0
 639 PsGetVersion@16
 640 PsGetWin32Thread@0
 641 PsGetWin32Process@0
 642 PsImpersonateClient@20
 643 PsInitialSystemProcess DATA
 644 PsIsThreadTerminating@4
 645 PsLookupProcessByProcessId@8
 646 PsLookupProcessThreadByCid@12
 647 PsLookupThreadByThreadId@8
 648 PsProcessType DATA
 649 PsReferenceImpersonationToken@16
 650 PsReferencePrimaryToken@4
 651 ;PsReturnPoolQuota@12
 652 PsRevertToSelf@0
 653 PsSetCreateProcessNotifyRoutine@8
 654 PsSetCreateThreadNotifyRoutine@4
 655 ;PsSetLegoNotifyRoutine@4
 656 ;PsSetProcessPriorityByClass@8
 657 PsTerminateSystemThread@4
 658 PsThreadType DATA
 659 READ_REGISTER_UCHAR@4
 660 READ_REGISTER_ULONG@4
 661 READ_REGISTER_USHORT@4
 662 READ_REGISTER_BUFFER_UCHAR@12
 663 READ_REGISTER_BUFFER_ULONG@12
 664 READ_REGISTER_BUFFER_USHORT@12
 665 RtlAbsoluteToSelfRelativeSD@12
 666 RtlAddAccessAllowedAce@16
 667 RtlAddAce@20
 668 RtlAddAtomToAtomTable@12
 669 ;RtlAllocateAndInitializeSid
 670 ;RtlAllocateHeap
 671 RtlAnsiCharToUnicodeChar@4
 672 RtlAnsiStringToUnicodeSize@4
 673 RtlAnsiStringToUnicodeString@12
 674 RtlAppendAsciizToString@8
 675 RtlAppendStringToString@8
 676 RtlAppendUnicodeStringToString@8
 677 RtlAppendUnicodeToString@8
 678 RtlAreAllAccessesGranted@8
 679 RtlAreAnyAccessesGranted@8
 680 RtlAreBitsClear@12
 681 RtlAreBitsSet@12
 682 RtlAssert@16
 683 ;RtlCaptureStackBackTrace
 684 RtlCharToInteger@12
 685 RtlCheckRegistryKey@8
 686 RtlClearAllBits@4
 687 RtlClearBits@12
 688 RtlCompareMemory@12
 689 RtlCompareMemoryUlong@12
 690 RtlCompareString@12
 691 RtlCompareUnicodeString@12
 692 RtlCompressBuffer@32
 693 RtlCompressChunks@28
 694 RtlConvertLongToLargeInteger@4
 695 RtlConvertSidToUnicodeString@12
 696 RtlConvertUlongToLargeInteger@4
 697 RtlCopyLuid@8
 698 RtlCopySid@12
 699 RtlCopyString@8
 700 RtlCopyUnicodeString@8
 701 RtlCreateAcl@12
 702 RtlCreateAtomTable@8
 703 ;RtlCreateHeap
 704 RtlCreateRegistryKey@8
 705 RtlCreateSecurityDescriptor@8
 706 RtlCreateUnicodeString@8
 707 RtlCustomCPToUnicodeN@24
 708 RtlDecompressBuffer@24
 709 RtlDecompressChunks@28
 710 RtlDecompressFragment@32
 711 ;RtlDelete
 712 RtlDeleteAtomFromAtomTable@8
 713 ;RtlDeleteElementGenericTable
 714 ;RtlDeleteNoSplay
 715 RtlDeleteRegistryValue@12
 716 RtlDescribeChunk@20
 717 RtlDestroyAtomTable@4
 718 ;RtlDestroyHeap
 719 RtlDowncaseUnicodeString@12
 720 RtlEmptyAtomTable@8
 721 RtlEnlargedIntegerMultiply@8
 722 RtlEnlargedUnsignedDivide@16
 723 RtlEnlargedUnsignedMultiply@8
 724 ;RtlEnumerateGenericTable
 725 ;RtlEnumerateGenericTableWithoutSplaying
 726 RtlEqualLuid@8
 727 RtlEqualSid@8
 728 RtlEqualString@12
 729 RtlEqualUnicodeString@12
 730 RtlExtendedIntegerMultiply@12
 731 RtlExtendedLargeIntegerDivide@16
 732 RtlExtendedMagicDivide@20
 733 RtlFillMemory@12
 734 RtlFillMemoryUlong@12
 735 RtlFindClearBits@12
 736 RtlFindClearBitsAndSet@12
 737 RtlFindFirstRunClear@8
 738 RtlFindFirstRunSet@8
 739 RtlFindLongestRunClear@8
 740 RtlFindLongestRunSet@8
 741 RtlFindMessage@20
 742 RtlFindSetBits@12
 743 RtlFindSetBitsAndClear@12
 744 ;RtlFindUnicodePrefix
 745 RtlFormatCurrentUserKeyPath@4
 746 RtlFreeAnsiString@4
 747 ;RtlFreeHeap
 748 RtlFreeOemString@4
 749 RtlFreeUnicodeString@4
 750 RtlGenerate8dot3Name@16
 751 ;RtlGetCallersAddress
 752 RtlGetCompressionWorkSpaceSize@12
 753 RtlGetDaclSecurityDescriptor@16
 754 RtlGetDefaultCodePage@8
 755 ;RtlGetElementGenericTable
 756 RtlGetGroupSecurityDescriptor@12
 757 RtlGetOwnerSecurityDescriptor@12
 758 RtlImageNtHeader@4
 759 RtlInitAnsiString@8
 760 RtlInitCodePageTable@8
 761 RtlInitString@8
 762 RtlInitUnicodeString@8
 763 RtlInitializeBitMap@12
 764 ;RtlInitializeGenericTable
 765 RtlInitializeSid@12
 766 ;RtlInitializeUnicodePrefix
 767 ;RtlInsertElementGenericTable
 768 ;RtlInsertUnicodePrefix
 769 RtlIntegerToChar@16
 770 RtlIntegerToUnicodeString@12
 771 RtlIsNameLegalDOS8Dot3@12
 772 RtlLargeIntegerAdd@16
 773 RtlLargeIntegerArithmeticShift@12
 774 RtlLargeIntegerDivide@20
 775 RtlLargeIntegerNegate@8
 776 RtlLargeIntegerShiftLeft@12
 777 RtlLargeIntegerShiftRight@12
 778 RtlLargeIntegerSubtract@16
 779 RtlLengthRequiredSid@4
 780 RtlLengthSecurityDescriptor@4
 781 RtlLengthSid@4
 782 RtlLookupAtomInAtomTable@12
 783 ;RtlLookupElementGenericTable
 784 RtlMapGenericMask@8
 785 RtlMoveMemory@12
 786 RtlMultiByteToUnicodeN@20
 787 RtlMultiByteToUnicodeSize@12
 788 ;RtlNextUnicodePrefix
 789 RtlNtStatusToDosError@4
 790 RtlNtStatusToDosErrorNoTeb@4
 791 ;RtlNumberGenericTableElements
 792 RtlNumberOfClearBits@4
 793 RtlNumberOfSetBits@4
 794 RtlOemStringToCountedUnicodeString@12
 795 RtlOemStringToUnicodeSize@4
 796 RtlOemStringToUnicodeString@12
 797 RtlOemToUnicodeN@20
 798 RtlPinAtomInAtomTable@8
 799 RtlPrefixString@12
 800 RtlPrefixUnicodeString@12
 801 RtlQueryAtomInAtomTable@24
 802 RtlQueryRegistryValues@20
 803 RtlQueryTimeZoneInformation@4
 804 RtlRaiseException@4
 805 RtlRandom@4
 806 ;RtlRemoveUnicodePrefix
 807 RtlReserveChunk@20
 808 RtlSecondsSince1970ToTime@8
 809 RtlSecondsSince1980ToTime@8
 810 RtlSetAllBits@4
 811 RtlSetBits@12
 812 RtlSetDaclSecurityDescriptor@16
 813 RtlSetGroupSecurityDescriptor@12
 814 RtlSetOwnerSecurityDescriptor@12
 815 RtlSetSaclSecurityDescriptor@16
 816 RtlSetTimeZoneInformation@4
 817 ;RtlSplay
 818 RtlSubAuthorityCountSid@4
 819 RtlSubAuthoritySid@8
 820 RtlTimeFieldsToTime@8
 821 RtlTimeToSecondsSince1970@8
 822 RtlTimeToSecondsSince1980@8
 823 RtlTimeToTimeFields@8
 824 RtlUnicodeStringToAnsiSize@4
 825 RtlUnicodeStringToAnsiString@12
 826 RtlUnicodeStringToCountedOemString@12
 827 RtlUnicodeStringToInteger@12
 828 RtlUnicodeStringToOemSize@4
 829 RtlUnicodeStringToOemString@12
 830 RtlUnicodeToCustomCPN@24
 831 RtlUnicodeToMultiByteN@20
 832 RtlUnicodeToMultiByteSize@12
 833 RtlUnicodeToOemN@20
 834 RtlUnwind@16
 835 RtlUpcaseUnicodeChar@4
 836 RtlUpcaseUnicodeString@12
 837 RtlUpcaseUnicodeStringToAnsiString@12
 838 RtlUpcaseUnicodeStringToCountedOemString@12
 839 RtlUpcaseUnicodeStringToOemString@12
 840 RtlUpcaseUnicodeToCustomCPN@24
 841 RtlUpcaseUnicodeToMultiByteN@20
 842 RtlUpcaseUnicodeToOemN@20
 843 RtlUpperChar@4
 844 RtlUpperString@8
 845 RtlValidSecurityDescriptor@4
 846 RtlValidSid@4
 847 RtlWriteRegistryValue@24
 848 ;RtlZeroHeap
 849 RtlZeroMemory@8
 850 RtlxAnsiStringToUnicodeSize@4
 851 RtlxOemStringToUnicodeSize@4
 852 RtlxUnicodeStringToAnsiSize@4
 853 RtlxUnicodeStringToOemSize@4
 854 SeAccessCheck@40
 855 ;SeAppendPrivileges@8
 856 SeAssignSecurity@28
 857 ;SeAuditingFileEvents@8
 858 ;SeAuditingFileOrGlobalEvents@18
 859 ;SeCaptureSecurityDescriptor@20
 860 SeCaptureSubjectContext@4
 861 ;SeCloseObjectAuditAlarm@12
 862 ;SeCreateAccessState@16
 863 SeCreateClientSecurity@16
 864 SeDeassignSecurity@4
 865 ;SeDeleteAccessState@4
 866 ;SeDeleteObjectAuditAlarm@8
 867 SeExports DATA
 868 ;SeFreePrivileges@4
 869 SeImpersonateClient@8
 870 ;SeLockSubjectContext@4
 871 ;SeMarkLogonSessionForTerminationNotification@4
 872 ;SeOpenObjectAuditAlarm@36
 873 ;SeOpenObjectForDeleteAuditAlarm@36
 874 SePrivilegeCheck@12
 875 ;SePrivilegeObjectAuditAlarm@24
 876 SePublicDefaultDacl DATA
 877 ;SeQueryAuthenticationIdToken@8
 878 ;SeQuerySecurityDescriptorInfo@16
 879 ;SeRegisterLogonSessionTerminatedRoutine@4
 880 ;SeReleaseSecurityDescriptor@12
 881 SeReleaseSubjectContext@4
 882 ;SeSetAccessStateGenericMapping@8
 883 ;SeSetSecurityDescriptorInfo@24
 884 SeSinglePrivilegeCheck@12
 885 SeSystemDefaultDacl DATA
 886 SeTokenImpersonationLevel@4
 887 SeTokenType@4
 888 ;SeUnlockSubjectContext@4
 889 ;SeUnregisterLogonSessionTerminatedRoutine@4
 890 ;SeValidSecurityDescriptor@8
 891 WRITE_REGISTER_UCHAR@8
 892 WRITE_REGISTER_ULONG@8
 893 WRITE_REGISTER_USHORT@8
 894 WRITE_REGISTER_BUFFER_UCHAR@12
 895 WRITE_REGISTER_BUFFER_ULONG@12
 896 WRITE_REGISTER_BUFFER_USHORT@12
 897 ZwAccessCheckAndAuditAlarm@44
 898 ZwAlertThread@4
 899 ZwAllocateVirtualMemory@24
 900 ZwClearEvent@4
 901 ZwClose@4
 902 ZwCloseObjectAuditAlarm@12
 903 ZwConnectPort@32
 904 ZwCreateDirectoryObject@12
 905 ZwCreateEvent@20
 906 ZwCreateFile@44
 907 ZwCreateKey@28
 908 ZwCreateSection@28
 909 ZwCreateSymbolicLinkObject@16
 910 ZwDeleteFile@4
 911 ZwDeleteKey@4
 912 ZwDeleteValueKey@8
 913 ZwDeviceIoControlFile@40
 914 ZwDisplayString@4
 915 ZwDuplicateObject@28
 916 ZwDuplicateToken@24
 917 ZwEnumerateKey@24
 918 ZwEnumerateValueKey@24
 919 ZwFlushInstructionCache@12
 920 ZwFlushKey@4
 921 ZwFreeVirtualMemory@16
 922 ZwFsControlFile@40
 923 ZwLoadDriver@4
 924 ZwLoadKey@8
 925 ZwMakeTemporaryObject@4
 926 ZwMapViewOfSection@40
 927 ZwNotifyChangeKey@40
 928 ZwOpenDirectoryObject@12
 929 ZwOpenEvent@12
 930 ZwOpenFile@24
 931 ZwOpenKey@12
 932 ZwOpenProcess@16
 933 ZwOpenProcessToken@12
 934 ZwOpenSection@12
 935 ZwOpenSymbolicLinkObject@12
 936 ZwOpenThread@16
 937 ZwOpenThreadToken@16
 938 ZwPulseEvent@8
 939 ZwQueryDefaultLocale@8
 940 ZwQueryDirectoryFile@44
 941 ZwQueryInformationAtom@20
 942 ZwQueryInformationFile@20
 943 ZwQueryInformationProcess@20
 944 ZwQueryInformationToken@20
 945 ZwQueryKey@20
 946 ZwQueryObject@20
 947 ZwQuerySection@20
 948 ZwQuerySecurityObject@20
 949 ZwQuerySymbolicLinkObject@12
 950 ZwQuerySystemInformation@16
 951 ZwQuerySystemTime@4
 952 ZwQueryValueKey@24
 953 ZwQueryVolumeInformationFile@20
 954 ZwReadFile@36
 955 ZwReplaceKey@12
 956 ZwRequestWaitReplyPort@12
 957 ZwResetEvent@8
 958 ZwSaveKey@8
 959 ZwSetDefaultLocale@8
 960 ZwSetEvent@8
 961 ZwSetInformationFile@20
 962 ZwSetInformationObject@16
 963 ZwSetInformationProcess@16
 964 ZwSetInformationThread@16
 965 ZwSetSystemInformation@12
 966 ZwSetSystemTime@8
 967 ZwSetValueKey@24
 968 ZwTerminateProcess@8
 969 ZwUnloadDriver@4
 970 ZwUnloadKey@4
 971 ZwUnmapViewOfSection@8
 972 ZwWaitForMultipleObjects@20
 973 ZwWaitForSingleObject@12
 974 ZwWriteFile@36
 975 ZwYieldExecution@0
 976 _abnormal_termination
 977 _alldiv
 978 _allmul
 979 _allrem
 980 _allshl
 981 _allshr
 982 _aulldiv
 983 _aullrem
 984 _aullshr
 985 _except_handler2
 986 _except_handler3
 987 _global_unwind2
 988 _itoa
 989 _local_unwind2
 990 _purecall
 991 _snprintf
 992 _snwprintf
 993 _stricmp
 994 _strlwr
 995 _strnicmp
 996 _strnset
 997 _strrev
 998 _strset
 999 _strupr
1000 _vsnprintf
1001 _wcsicmp
1002 _wcslwr
1003 _wcsnicmp
1004 _wcsnset
1005 _wcsrev
1006 _wcsupr
1007 atoi
1008 atol
1009 isdigit
1010 islower
1011 isprint
1012 isspace
1013 isupper
1014 isxdigit
1015 mbstowcs
1016 mbtowc
1017 memchr
1018 memcpy
1019 memmove
1020 memset
1021 qsort
1022 rand
1023 sprintf
1024 srand
1025 strcat
1026 strchr
1027 strcmp
1028 strcpy
1029 strlen
1030 strncat
1031 strncmp
1032 strncpy
1033 strrchr
1034 strspn
1035 strstr
1036 swprintf
1037 tolower
1038 toupper
1039 towlower
1040 towupper
1041 vsprintf
1042 wcscat
1043 wcschr
1044 wcscmp
1045 wcscpy
1046 wcscspn
1047 wcslen
1048 wcsncat
1049 wcsncmp
1050 wcsncpy
1051 wcsrchr
1052 wcsspn
1053 wcsstr
1054 wcstombs
1055 wctomb