reactos/ntoskrnl/ntoskrnl.def

   1 ; $Id$
   2 ;
   3 ; reactos/ntoskrnl/ntoskrnl.def
   4 ;
   5 ; ReactOS Operating System
   6 ;
   7 EXPORTS
   8 CcRosInitializeFileCache@8
   9 CcRosReleaseFileCache@4
  10 CcRosTraceCacheMap@8
  11 CcCanIWrite@16
  12 CcCopyRead@24
  13 CcCopyWrite@20
  14 CcDeferWrite@24
  15 CcFastCopyRead@24
  16 CcFastCopyWrite@16
  17 CcFlushCache@16
  18 CcGetDirtyPages@16
  19 CcGetFileObjectFromBcb@4
  20 CcGetFileObjectFromSectionPtrs@4
  21 CcGetFlushedValidData@8
  22 CcGetLsnForFileObject@8
  23 CcInitializeCacheMap@20
  24 CcIsThereDirtyData@4
  25 CcFastMdlReadWait DATA
  26 CcFastReadNotPossible DATA
  27 CcFastReadWait DATA
  28 CcMapData@24
  29 CcMdlRead@20
  30 CcMdlReadComplete@8
  31 CcMdlWriteAbort@8
  32 CcMdlWriteComplete@12
  33 CcPinMappedData@20
  34 CcPinRead@24
  35 CcPrepareMdlWrite@20
  36 CcPreparePinWrite@28
  37 CcPurgeCacheSection@16
  38 CcRemapBcb@4
  39 CcRepinBcb@4
  40 CcScheduleReadAhead@12
  41 CcSetAdditionalCacheAttributes@12
  42 CcSetBcbOwnerPointer@8
  43 CcSetDirtyPageThreshold@8
  44 CcSetDirtyPinnedData@8
  45 CcSetLogHandleForFile@12
  46 CcSetReadAheadGranularity@8
  47 CcUninitializeCacheMap@12
  48 CcUnpinData@4
  49 CcUnpinDataForThread@8
  50 CcUnpinRepinnedBcb@12
  51 CcWaitForCurrentLazyWriterActivity@0
  52 CcSetFileSizes@8
  53 CcUnpinData@4
  54 CcZeroData@16
  55 CmRegisterCallback@12
  56 CmUnRegisterCallback@8
  57 DbgBreakPoint@0
  58 DbgBreakPointWithStatus@4
  59 DbgLoadImageSymbols@12
  60 DbgPrint
  61 DbgPrompt@12
  62 DbgPrintEx
  63 DbgPrintReturnControlC
  64 DbgQueryDebugFilterState@8
  65 DbgSetDebugFilterState@12
  66 @ExiAcquireFastMutex@4=@ExAcquireFastMutex@4
  67 @ExAcquireFastMutexUnsafe@4
  68 ExAcquireRundownProtection=@ExfAcquireRundownProtection@4
  69 ExAcquireRundownProtectionCacheAware=@ExfAcquireRundownProtectionCacheAware@4
  70 ExAcquireRundownProtectionCacheAwareEx=@ExfAcquireRundownProtectionCacheAwareEx@8
  71 ExAcquireRundownProtectionEx=@ExfAcquireRundownProtectionEx@8
  72 ExInitializeRundownProtection=@ExfInitializeRundownProtection@4
  73 ExReInitializeRundownProtection=@ExfReInitializeRundownProtection@4
  74 ExReInitializeRundownProtectionCacheAware=@ExfReInitializeRundownProtectionCacheAware@4
  75 ExReleaseRundownProtection=@ExfReleaseRundownProtection@4
  76 ExReleaseRundownProtectionCacheAware=@ExfReleaseRundownProtectionCacheAware@4
  77 ExReleaseRundownProtectionCacheAwareEx=@ExfReleaseRundownProtectionCacheAwareEx@8
  78 ExReleaseRundownProtectionEx=@ExfReleaseRundownProtectionEx@8
  79 ExRundownCompleted=@ExfRundownCompleted@4
  80 ExRundownCompletedCacheAware=@ExfRundownCompletedCacheAware@4
  81 ExWaitForRundownProtectionRelease=@ExfWaitForRundownProtectionRelease@4
  82 ExWaitForRundownProtectionReleaseCacheAware=@ExfWaitForRundownProtectionReleaseCacheAware@4
  83 ExAllocateCacheAwareRundownProtection@8
  84 ExFreeCacheAwareRundownProtection@4
  85 ExInitializeRundownProtectionCacheAware@8
  86 ExSizeOfRundownProtectionCacheAware@0
  87 ExAcquireResourceExclusiveLite@8
  88 ExAcquireResourceSharedLite@8
  89 ExAcquireSharedStarveExclusive@8
  90 ExAcquireSharedWaitForExclusive@8
  91 ExAllocateFromPagedLookasideList@4=ExiAllocateFromPagedLookasideList@4
  92 ExAllocatePool@8
  93 ExAllocatePoolWithQuota@8
  94 ExAllocatePoolWithQuotaTag@12
  95 ExAllocatePoolWithTag@12
  96 ExAllocatePoolWithTagPriority@16
  97 ExConvertExclusiveToSharedLite@4
  98 ExCreateCallback@16
  99 ExDeleteNPagedLookasideList@4
 100 ExDeletePagedLookasideList@4
 101 ExDeleteResourceLite@4
 102 ExDesktopObjectType DATA
 103 ExDisableResourceBoostLite@4
 104 ExEnumHandleTable@16
 105 @ExEnterCriticalRegionAndAcquireFastMutexUnsafe@4
 106 ExEventObjectType DATA
 107 ExExtendZone@12
 108 ExFreePool@4
 109 ExFreePoolWithTag@8
 110 ExFreeToPagedLookasideList@8=ExiFreeToPagedLookasideList@8
 111 ExGetCurrentProcessorCounts@12
 112 ExGetCurrentProcessorCpuUsage@4
 113 ExGetExclusiveWaiterCount@4
 114 ExGetPreviousMode@0
 115 ExGetSharedWaiterCount@4
 116 ExInitializeNPagedLookasideList@28
 117 ExInitializePagedLookasideList@28
 118 ExInitializeResourceLite@4
 119 ExInitializeZone@16
 120 ExInterlockedAddLargeInteger@16
 121 @ExInterlockedAddLargeStatistic@8
 122 ExInterlockedAddUlong@12
 123 @ExInterlockedCompareExchange64@16
 124 ExInterlockedDecrementLong@8
 125 ExInterlockedExchangeUlong@12
 126 ExInterlockedExtendZone@16
 127 ExInterlockedIncrementLong@8
 128 @ExInterlockedFlushSList@4
 129 ExInterlockedInsertHeadList@12
 130 ExInterlockedInsertTailList@12
 131 ExInterlockedPopEntryList@8
 132 @ExInterlockedPopEntrySList@8
 133 ExInterlockedPushEntryList@12
 134 @ExInterlockedPushEntrySList@12
 135 ExInterlockedRemoveHeadList@8
 136 ExIsProcessorFeaturePresent@4
 137 ExIsResourceAcquiredExclusiveLite@4
 138 ExIsResourceAcquiredSharedLite@4
 139 ExLocalTimeToSystemTime@8
 140 ExNotifyCallback@12
 141 ExQueryPoolBlockSize@8
 142 ExQueueWorkItem@8
 143 ExRaiseAccessViolation@0
 144 ExRaiseDatatypeMisalignment@0
 145 ExRaiseException@4=RtlRaiseException@4
 146 ExRaiseHardError@24
 147 ExRaiseStatus@4=RtlRaiseStatus@4
 148 ExRegisterCallback@12
 149 ExReinitializeResourceLite@4
 150 @ExiReleaseFastMutex@4=@ExReleaseFastMutex@4
 151 @ExReleaseFastMutexUnsafe@4
 152 @ExReleaseFastMutexUnsafeAndLeaveCriticalRegion@4
 153 ExReleaseResourceForThreadLite@8
 154 @ExReleaseResourceLite@4
 155 ExSemaphoreObjectType DATA
 156 ExSetResourceOwnerPointer@8
 157 ExSetTimerResolution@8
 158 ExSystemExceptionFilter@0
 159 ExSystemTimeToLocalTime@8
 160 ExTryToAcquireResourceExclusiveLite@4
 161 ExUnregisterCallback@4
 162 ExUuidCreate@4
 163 ExVerifySuite@4
 164 ExWindowStationObjectType DATA
 165 @ExfInterlockedAddUlong@12
 166 @ExfInterlockedInsertHeadList@12
 167 @ExfInterlockedInsertTailList@12
 168 @ExfInterlockedCompareExchange64@12
 169 @ExfInterlockedPopEntryList@8
 170 @ExfInterlockedPushEntryList@12
 171 @ExfInterlockedRemoveHeadList@8
 172 @Exfi386InterlockedDecrementLong@4
 173 @Exfi386InterlockedExchangeUlong@8
 174 @Exfi386InterlockedIncrementLong@4
 175 Exi386InterlockedDecrementLong@4
 176 Exi386InterlockedExchangeUlong@12
 177 Exi386InterlockedIncrementLong@4
 178 FsRtlAcquireFileExclusive@4
 179 FsRtlAddLargeMcbEntry@28
 180 FsRtlAddMcbEntry@16
 181 FsRtlAddToTunnelCache@32
 182 FsRtlAllocateFileLock@8
 183 FsRtlAllocatePool@8
 184 FsRtlAllocatePoolWithQuota@8
 185 FsRtlAllocatePoolWithQuotaTag@12
 186 FsRtlAllocatePoolWithTag@12
 187 FsRtlAllocateResource@0
 188 FsRtlAreNamesEqual@16
 189 FsRtlBalanceReads@4
 190 FsRtlCheckLockForReadAccess@8
 191 FsRtlCheckLockForWriteAccess@8
 192 FsRtlCheckOplock@20
 193 FsRtlCopyRead@32
 194 FsRtlCopyWrite@32
 195 FsRtlCurrentBatchOplock@4
 196 FsRtlDeleteKeyFromTunnelCache@12
 197 FsRtlDeleteTunnelCache@4
 198 FsRtlDeregisterUncProvider@4
 199 FsRtlDissectDbcs@16
 200 FsRtlDissectName@16
 201 FsRtlDoesDbcsContainWildCards@4
 202 FsRtlDoesNameContainWildCards@4
 203 FsRtlFastCheckLockForRead@24
 204 FsRtlFastCheckLockForWrite@24
 205 FsRtlFastUnlockAll@16
 206 FsRtlFastUnlockAllByKey@20
 207 FsRtlFastUnlockSingle@32
 208 FsRtlFindInTunnelCache@32
 209 FsRtlFreeFileLock@4
 210 FsRtlGetFileSize@8
 211 FsRtlGetNextFileLock@8
 212 FsRtlGetNextLargeMcbEntry@20
 213 FsRtlGetNextMcbEntry@20
 214 FsRtlIncrementCcFastReadNotPossible@0
 215 FsRtlIncrementCcFastReadNoWait@0
 216 FsRtlIncrementCcFastReadResourceMiss@0
 217 FsRtlIncrementCcFastReadWait@0
 218 FsRtlInitializeFileLock@12
 219 FsRtlInitializeLargeMcb@8
 220 FsRtlInitializeMcb@8
 221 FsRtlInitializeOplock@4
 222 FsRtlInitializeTunnelCache@4
 223 FsRtlInsertPerFileObjectContext@8
 224 FsRtlInsertPerStreamContext@8
 225 FsRtlIsDbcsInExpression@8
 226 FsRtlIsFatDbcsLegal@20
 227 FsRtlIsHpfsDbcsLegal@20
 228 FsRtlIsNameInExpression@16
 229 FsRtlIsNtstatusExpected@4
 230 FsRtlIsPagingFile@4
 231 FsRtlIsTotalDeviceFailure@4
 232 FsRtlLegalAnsiCharacterArray DATA
 233 FsRtlLookupLargeMcbEntry@32
 234 FsRtlLookupLastLargeMcbEntry@12
 235 FsRtlLookupLastLargeMcbEntryAndIndex@16
 236 FsRtlLookupLastMcbEntry@12
 237 FsRtlLookupMcbEntry@20
 238 FsRtlLookupPerFileObjectContext@12
 239 FsRtlLookupPerStreamContextInternal@12
 240 FsRtlMdlRead@24
 241 FsRtlMdlReadComplete@8
 242 FsRtlMdlReadCompleteDev@12
 243 FsRtlMdlReadDev@28
 244 FsRtlMdlWriteComplete@12
 245 FsRtlMdlWriteCompleteDev@16
 246 FsRtlNormalizeNtstatus@8
 247 FsRtlNotifyChangeDirectory@28
 248 FsRtlNotifyCleanup@12
 249 FsRtlNotifyFilterChangeDirectory@44
 250 FsRtlNotifyFilterReportChange@40
 251 FsRtlNotifyFullChangeDirectory@40
 252 FsRtlNotifyFullReportChange@36
 253 FsRtlNotifyInitializeSync@4
 254 FsRtlNotifyReportChange@20
 255 FsRtlNotifyUninitializeSync@4
 256 FsRtlNotifyVolumeEvent@8
 257 FsRtlNumberOfRunsInLargeMcb@4
 258 FsRtlNumberOfRunsInMcb@4
 259 FsRtlOplockFsctrl@12
 260 FsRtlOplockIsFastIoPossible@4
 261 FsRtlPostPagingFileStackOverflow@12
 262 FsRtlPostStackOverflow@12
 263 FsRtlPrepareMdlWrite@24
 264 FsRtlPrepareMdlWriteDev@28
 265 FsRtlPrivateLock@48
 266 FsRtlProcessFileLock@12
 267 FsRtlRegisterUncProvider@12
 268 FsRtlReleaseFile@4
 269 FsRtlRemoveLargeMcbEntry@20
 270 FsRtlRemoveMcbEntry@12
 271 FsRtlRemovePerFileObjectContext@12
 272 FsRtlRemovePerStreamContext@12
 273 FsRtlResetLargeMcb@8
 274 FsRtlSplitLargeMcb@20
 275 FsRtlSyncVolumes@12
 276 FsRtlTeardownPerStreamContexts@4
 277 FsRtlTruncateLargeMcb@12
 278 FsRtlTruncateMcb@8
 279 FsRtlUninitializeFileLock@4
 280 FsRtlUninitializeLargeMcb@4
 281 FsRtlUninitializeMcb@4
 282 FsRtlUninitializeOplock@4
 283 HalDispatchTable DATA
 284 HalPrivateDispatchTable DATA
 285 @HalExamineMBR@16
 286 InbvAcquireDisplayOwnership@0
 287 InbvCheckDisplayOwnership@0
 288 InbvDisplayString@4
 289 InbvEnableBootDriver@4
 290 InbvEnableDisplayString@4
 291 InbvInstallDisplayStringFilter@4
 292 InbvIsBootDriverInstalled@0
 293 InbvNotifyDisplayOwnershipLost@4
 294 InbvResetDisplay@0
 295 InbvSetScrollRegion@16
 296 InbvSetTextColor@4
 297 InbvSolidColorFill@20
 298 InitSafeBootMode DATA
 299 @InterlockedCompareExchange@12
 300 @InterlockedDecrement@4
 301 @InterlockedExchange@8
 302 @InterlockedExchangeAdd@8
 303 @InterlockedIncrement@4
 304 @InterlockedPushEntrySList@8
 305 @InterlockedPopEntrySList@4
 306 IoAcquireCancelSpinLock@4
 307 IoAcquireRemoveLockEx@20
 308 IoAcquireVpbSpinLock@4
 309 IoAdapterObjectType DATA
 310 IoAllocateAdapterChannel@20
 311 IoAllocateIrp@8
 312 IoAllocateMdl@20
 313 IoAllocateController@16
 314 IoAllocateDriverObjectExtension@16
 315 IoAllocateErrorLogEntry@8
 316 IoAllocateWorkItem@4
 317 IoAssignDriveLetters@16
 318 IoAssignResources@24
 319 IoAttachDevice@12
 320 IoAttachDeviceByPointer@8
 321 IoAttachDeviceToDeviceStack@8
 322 IoAttachDeviceToDeviceStackSafe@12
 323 IoBuildAsynchronousFsdRequest@24
 324 IoBuildDeviceIoControlRequest@36
 325 IoBuildPartialMdl@16
 326 IoBuildSynchronousFsdRequest@28
 327 IoCallDriver@8
 328 IoCancelFileOpen@8
 329 IoCancelIrp@4
 330 IoCheckDesiredAccess@8
 331 IoCheckEaBufferValidity@12
 332 IoCheckFunctionAccess@24
 333 IoCheckQuerySetFileInformation@12
 334 IoCheckQuerySetVolumeInformation@12
 335 IoCheckQuotaBufferValidity@12
 336 IoCheckShareAccess@20
 337 IoCompleteRequest@8
 338 IoConnectInterrupt@44
 339 IoCreateController@4
 340 IoCreateDevice@28
 341 IoCreateDisk@8
 342 IoCreateDriver@8
 343 IoCreateFile@56
 344 IoCreateFileSpecifyDeviceObjectHint@60
 345 IoCreateNotificationEvent@8
 346 IoCreateStreamFileObject@8
 347 IoCreateStreamFileObjectEx@12
 348 IoCreateStreamFileObjectLite@8
 349 IoCreateSymbolicLink@8
 350 IoCreateSynchronizationEvent@8
 351 IoCreateUnprotectedSymbolicLink@8
 352 IoCsqInitialize@28
 353 IoCsqInitializeEx@28
 354 IoCsqInsertIrp@12
 355 IoCsqInsertIrpEx@16
 356 IoCsqRemoveIrp@8
 357 IoCsqRemoveNextIrp@8
 358 IoDeleteController@4
 359 IoDeleteDevice@4
 360 IoDeleteDriver@4
 361 IoDeleteSymbolicLink@4
 362 IoDetachDevice@4
 363 IoDeviceHandlerObjectSize DATA
 364 IoDeviceHandlerObjectType DATA
 365 IoDeviceObjectType DATA
 366 IoDisconnectInterrupt@4
 367 IoDriverObjectType DATA
 368 IoEnqueueIrp@4
 369 IoEnumerateDeviceObjectList@16
 370 IoFastQueryNetworkAttributes@20
 371 IoFileObjectType DATA
 372 IoForwardAndCatchIrp@8=IoForwardIrpSynchronously@8
 373 IoForwardIrpSynchronously@8
 374 IoFreeController@4
 375 IoFreeErrorLogEntry@4
 376 IoFreeIrp@4
 377 IoFreeMdl@4
 378 IoFreeWorkItem@4
 379 IoGetAttachedDevice@4
 380 IoGetAttachedDeviceReference@4
 381 IoGetBaseFileSystemDeviceObject@4
 382 IoGetBootDiskInformation@8
 383 IoGetConfigurationInformation@0
 384 IoGetCurrentProcess@0
 385 IoGetDeviceObjectPointer@16
 386 IoGetDeviceAttachmentBaseRef@4
 387 IoGetDeviceInterfaceAlias@12
 388 IoGetDeviceInterfaces@16
 389 IoGetDriverObjectExtension@8
 390 IoGetDeviceProperty@20
 391 IoGetDeviceToVerify@4
 392 IoGetDiskDeviceObject@8
 393 IoGetDmaAdapter@12
 394 IoGetFileObjectGenericMapping@0
 395 IoGetInitialStack@0
 396 IoGetLowerDeviceObject@4
 397 IoGetRelatedDeviceObject@4
 398 IoGetRequestorProcess@4
 399 IoGetRequestorProcessId@4
 400 IoGetRequestorSessionId@8
 401 IoGetStackLimits@8
 402 IoGetTopLevelIrp@0
 403 IoInitializeIrp@12
 404 IoInvalidateDeviceRelations@8
 405 IoInvalidateDeviceState@4
 406 IoInitializeRemoveLockEx@20
 407 IoInitializeTimer@12
 408 IoIsFileOriginRemote@4
 409 IoIsSystemThread@4
 410 IoIsValidNameGraftingBuffer@8
 411 IoIsOperationSynchronous@4
 412 IoMakeAssociatedIrp@8
 413 IoOpenDeviceInterfaceRegistryKey@12
 414 IoOpenDeviceRegistryKey@16
 415 IoPageRead@20
 416 IoPnPDeliverServicePowerNotification@16
 417 IoQueryDeviceDescription@32
 418 IoQueryFileDosDeviceName@8
 419 IoQueryFileInformation@20
 420 IoQueryVolumeInformation@20
 421 IoQueueThreadIrp@4
 422 IoQueueWorkItem@16
 423 IoRaiseHardError@12
 424 IoRaiseInformationalHardError@12
 425 IoReadDiskSignature@12
 426 IoReadOperationCount DATA
 427 @IoReadPartitionTable@16
 428 IoReadPartitionTableEx@8
 429 IoReadTransferCount DATA
 430 IoRegisterBootDriverReinitialization@12
 431 IoRegisterDeviceInterface@16
 432 IoRegisterDriverReinitialization@12
 433 IoRegisterFileSystem@4
 434 IoRegisterFsRegistrationChange@8
 435 IoRegisterLastChanceShutdownNotification@4
 436 IoRegisterPlugPlayNotification@28
 437 IoRegisterShutdownNotification@4
 438 IoReleaseCancelSpinLock@4
 439 IoReleaseRemoveLockAndWaitEx@12
 440 IoReleaseRemoveLockEx@12
 441 IoReleaseVpbSpinLock@4
 442 IoRemoveShareAccess@8
 443 IoReportDetectedDevice@32
 444 IoReportHalResourceUsage@16
 445 IoReportResourceUsage@36
 446 IoReportResourceForDetection@28
 447 IoReportTargetDeviceChange@8
 448 IoReportTargetDeviceChangeAsynchronous@16
 449 IoRequestDeviceEject@4
 450 IoReuseIrp@8
 451 IoSetCompletionRoutineEx@28
 452 IoSetSystemPartition@4
 453 IoSetDeviceInterfaceState@8
 454 IoSetDeviceToVerify@8
 455 IoSetFileOrigin@8
 456 IoSetHardErrorOrVerifyDevice@8
 457 IoSetInformation@16
 458 IoSetIoCompletion@24
 459 @IoSetPartitionInformation@16
 460 IoSetPartitionInformationEx@12
 461 IoSetStartIoAttributes@12
 462 IoSetShareAccess@16
 463 IoSetThreadHardErrorMode@4
 464 IoSetTopLevelIrp@4
 465 IoStartNextPacket@8
 466 IoStartNextPacketByKey@12
 467 IoStartPacket@16
 468 IoStartTimer@4
 469 IoStatisticsLock DATA
 470 IoStopTimer@4
 471 IoSynchronousPageWrite@20
 472 IoSynchronousInvalidateDeviceRelations@8
 473 IoThreadToProcess@4
 474 IoUnregisterFileSystem@4
 475 IoUnregisterFsRegistrationChange@8
 476 IoUnregisterPlugPlayNotification@4
 477 IoUnregisterShutdownNotification@4
 478 IoUpdateShareAccess@8
 479 IoValidateDeviceIoControlAccess@8
 480 IoVerifyPartitionTable@8
 481 IoVerifyVolume@8
 482 IoVolumeDeviceToDosName@8
 483 IoWMIAllocateInstanceIds@12
 484 IoWMIDeviceObjectToInstanceName@12
 485 IoWMIExecuteMethod@24
 486 IoWMIHandleToInstanceName@12
 487 IoWMIOpenBlock@12
 488 IoWMIQueryAllData@12
 489 IoWMIQueryAllDataMultiple@16
 490 IoWMIQuerySingleInstance@16
 491 IoWMIQuerySingleInstanceMultiple@20
 492 IoWMIRegistrationControl@8
 493 IoWMISetNotificationCallback@12
 494 IoWMISetSingleInstance@20
 495 IoWMISetSingleItem@24
 496 IoWMISuggestInstanceName@16
 497 IoWMIWriteEvent@4
 498 IoWriteErrorLogEntry@4
 499 IoWriteOperationCount DATA
 500 @IoWritePartitionTable@20
 501 IoWritePartitionTableEx@8
 502 IoWriteTransferCount DATA
 503 @IofCallDriver@8
 504 @IofCompleteRequest@8
 505 IoIsWdmVersionAvailable@8
 506 KdComPortInUse DATA
 507 KdDebuggerEnabled DATA
 508 KdDebuggerNotPresent DATA
 509 KdDisableDebugger@0
 510 KdEnableDebugger@0
 511 KdEnteredDebugger
 512 KdPollBreakIn@0
 513 KdPowerTransition@4
 514 KdpServiceDispatcher@12
 515 Ke386CallBios@8
 516 Ke386IoSetAccessProcess@8
 517 Ke386QueryIoAccessMap@8
 518 Ke386SetIoAccessMap@8
 519 @KeAcquireGuardedMutex@4
 520 @KeAcquireGuardedMutexUnsafe@4
 521 KeAcquireSpinLockAtDpcLevel@4
 522 @KeAcquireInStackQueuedSpinLockAtDpcLevel@8
 523 KeAcquireInterruptSpinLock@4
 524 KeAddSystemServiceTable@20
 525 KeAreApcsDisabled@0
 526 KeAttachProcess@4
 527 ;KeBoostCurrentThread
 528 KeBugCheck@4
 529 KeBugCheckEx@20
 530 KeCancelTimer@4
 531 KeCapturePersistentThreadState@28
 532 KeClearEvent@4
 533 KeConnectInterrupt@4
 534 KeDcacheFlushCount DATA
 535 KeDelayExecutionThread@12
 536 KeDeregisterBugCheckCallback@4
 537 KeDeregisterBugCheckReasonCallback@4
 538 KeDetachProcess@0
 539 KeDisconnectInterrupt@4
 540 KeEnterCriticalRegion@0
 541 KeEnterGuardedRegion@0
 542 KeEnterKernelDebugger@0
 543 KeFindConfigurationEntry@16
 544 KeFindConfigurationNextEntry@20
 545 KeFlushEntireTb@8
 546 KeFlushQueuedDpcs@0
 547 KeGetCurrentThread@0
 548 KeGetPreviousMode@0
 549 KeGetRecommendedSharedDataAlignment@0
 550 ;KeI386AbiosCall
 551 KeI386AllocateGdtSelectors@8
 552 ;KeI386Call16BitCStyleFunction
 553 ;KeI386Call16BitFunction
 554 KeI386FlatToGdtSelector@12
 555 ;KeI386GetLid
 556 ;KeI386MachineType DATA
 557 KeI386ReleaseGdtSelectors@8
 558 ;KeI386ReleaseLid
 559 ;KeI386SetGdtSelector
 560 KeIcacheFlushCount DATA
 561 KeInitializeApc@32
 562 KeInitializeDeviceQueue@4
 563 KeInitializeDpc@12
 564 KeInitializeEvent@12
 565 @KeInitializeGuardedMutex@4
 566 KeInitializeInterrupt@44
 567 KeInitializeMutant@8
 568 KeInitializeMutex@8
 569 KeInitializeQueue@8
 570 KeInitializeSemaphore@12
 571 KeInitializeSpinLock@4
 572 KeInitializeTimer@4
 573 KeInitializeTimerEx@8
 574 KeInsertByKeyDeviceQueue@12
 575 KeInsertDeviceQueue@8
 576 KeInsertHeadQueue@8
 577 KeInsertQueue@8
 578 KeInsertQueueApc@16
 579 KeInsertQueueDpc@12
 580 KeIsAttachedProcess@0
 581 KeIsExecutingDpc@0
 582 KeLeaveCriticalRegion@0
 583 KeLeaveGuardedRegion@0
 584 KeLoaderBlock DATA
 585 KeNumberProcessors DATA
 586 KeProfileInterrupt@4
 587 KeProfileInterruptWithSource@8
 588 KePulseEvent@12
 589 KeQueryActiveProcessors@0
 590 KeQueryInterruptTime@0
 591 KeQueryPriorityThread@4
 592 KeQueryRuntimeThread@8
 593 KeQuerySystemTime@4
 594 KeQueryTickCount@4
 595 KeQueryTimeIncrement@0
 596 KeRaiseUserException@4
 597 KeReadStateEvent@4
 598 KeReadStateMutant@4
 599 KeReadStateMutex@4=KeReadStateMutant@4
 600 KeReadStateQueue@4
 601 KeReadStateSemaphore@4
 602 KeReadStateTimer@4
 603 KeRegisterBugCheckCallback@20
 604 KeRegisterBugCheckReasonCallback@16
 605 @KeReleaseGuardedMutexUnsafe@4
 606 @KeReleaseGuardedMutex@4
 607 @KeReleaseInStackQueuedSpinLockFromDpcLevel@4
 608 KeReleaseInterruptSpinLock@8
 609 KeReleaseMutant@16
 610 KeReleaseMutex@8
 611 KeReleaseSemaphore@16
 612 KeReleaseSpinLockFromDpcLevel@4
 613 KeRemoveByKeyDeviceQueue@8
 614 KeRemoveByKeyDeviceQueueIfBusy@8
 615 KeRemoveDeviceQueue@4
 616 KeRemoveEntryDeviceQueue@8
 617 KeRemoveQueue@12
 618 KeRemoveQueueDpc@4
 619 KeRemoveSystemServiceTable@4
 620 KeResetEvent@4
 621 KeRestoreFloatingPointState@4
 622 KeRevertToUserAffinityThread@0
 623 KeRundownQueue@4
 624 KeSaveFloatingPointState@4
 625 KeSaveStateForHibernate
 626 KeServiceDescriptorTable DATA
 627 KeSetAffinityThread@8
 628 KeSetBasePriorityThread@8
 629 KeSetDmaIoCoherency@4
 630 KeSetEvent@12
 631 KeSetEventBoostPriority@8
 632 KeSetIdealProcessorThread@8
 633 KeSetImportanceDpc@8
 634 KeSetKernelStackSwapEnable@4
 635 KeSetPriorityThread@8
 636 KeSetProfileIrql@4
 637 KeSetSystemAffinityThread@4
 638 ;KeSetSwapContextNotifyRoutine
 639 KeSetTargetProcessorDpc@8
 640 ;KeSetThreadSelectNotifyRoutine
 641 KeSetTimeIncrement@8
 642 KeSetTimer@16
 643 KeSetTimerEx@20
 644 @KeSetTimeUpdateNotifyRoutine@4
 645 KeStackAttachProcess@8
 646 KeSynchronizeExecution@12
 647 KeTerminateThread@4
 648 KeTickCount DATA
 649 @KeTryToAcquireGuardedMutex@4
 650 KeUpdateRunTime@8
 651 KeUpdateSystemTime@8
 652 KeUnstackDetachProcess@4
 653 KeUserModeCallback@20
 654 KeWaitForMultipleObjects@32
 655 KeWaitForMutexObject@20=KeWaitForSingleObject@20
 656 KeWaitForSingleObject@20
 657 @KefAcquireSpinLockAtDpcLevel@4
 658 @KefReleaseSpinLockFromDpcLevel@4
 659 Kei386EoiHelper@0
 660 @KiAcquireSpinLock@4
 661 ;KiBugCheckData DATA
 662 KiCoprocessorError@0
 663 KiCheckForKernelApcDelivery@0
 664 KiDeliverApc@12
 665 KiDispatchInterrupt@0
 666 KiEnableTimerWatchdog
 667 KiIpiServiceRoutine@8
 668 @KiReleaseSpinLock@4
 669 KiUnexpectedInterrupt
 670 ;Kii386SpinOnSpinLock
 671 KiRawTicks DATA
 672 LdrAccessResource@16
 673 LdrEnumResources@20
 674 LdrFindResourceDirectory_U@16
 675 LdrFindResource_U@16
 676 LpcPortObjectType DATA
 677 LpcRequestPort@8
 678 LpcRequestWaitReplyPort@12
 679 LsaCallAuthenticationPackage@28
 680 LsaDeregisterLogonProcess@8
 681 LsaFreeReturnBuffer@4
 682 LsaLogonUser@56
 683 LsaLookupAuthenticationPackage@12
 684 LsaRegisterLogonProcess@12
 685 Mm64BitPhysicalAddress DATA
 686 MmAddPhysicalMemory@8
 687 MmAddVerifierThunks@8
 688 MmAdjustWorkingSetSize@12
 689 MmAdvanceMdl@8
 690 MmAllocateContiguousMemory@12
 691 MmAllocateContiguousMemorySpecifyCache@32
 692 MmAllocateMappingAddress@8
 693 MmAllocateNonCachedMemory@4
 694 MmAllocatePagesForMdl@28
 695 MmBuildMdlForNonPagedPool@4
 696 MmCanFileBeTruncated@8
 697 MmCreateMdl@12
 698 MmCreateSection@32
 699 MmDbgTranslatePhysicalAddress@8
 700 MmDisableModifiedWriteOfSection@4
 701 MmFlushImageSection@8
 702 MmForceSectionClosed@8
 703 MmFreeContiguousMemory@4
 704 MmFreeContiguousMemorySpecifyCache@12
 705 MmFreeMappingAddress@8
 706 MmFreeNonCachedMemory@8
 707 MmFreePagesFromMdl@4
 708 MmGetPhysicalAddress@4
 709 MmGetPhysicalMemoryRanges@0
 710 MmGetSystemRoutineAddress@4
 711 MmGetVirtualForPhysical@8
 712 MmGrowKernelStack@4
 713 MmHighestUserAddress DATA
 714 MmIsAddressValid@4
 715 MmIsDriverVerifying@4
 716 MmIsNonPagedSystemAddressValid@4
 717 MmIsRecursiveIoFault@0
 718 MmIsThisAnNtAsSystem@0
 719 MmIsVerifierEnabled@4
 720 MmLockPagableDataSection@4
 721 MmLockPagableImageSection@4=MmLockPagableDataSection@4
 722 MmLockPagableSectionByHandle@4
 723 MmMapIoSpace@16
 724 MmMapLockedPages@8
 725 MmMapLockedPagesSpecifyCache@24
 726 MmMapLockedPagesWithReservedMapping@16
 727 MmMapMemoryDumpMdl@4
 728 MmMapUserAddressesToPage@12
 729 MmMapVideoDisplay@16
 730 MmMapViewInSessionSpace@12
 731 MmMapViewInSystemSpace@12
 732 MmMapViewOfSection@40
 733 MmMarkPhysicalMemoryAsBad@8
 734 MmMarkPhysicalMemoryAsGood@8
 735 MmPageEntireDriver@4
 736 MmPrefetchPages@8
 737 MmProbeAndLockPages@12
 738 MmProbeAndLockProcessPages@16
 739 MmProbeAndLockSelectedPages@16
 740 MmProtectMdlSystemAddress@8
 741 MmQuerySystemSize@0
 742 MmRemovePhysicalMemory@8
 743 MmResetDriverPaging@4
 744 MmSectionObjectType DATA
 745 MmSecureVirtualMemory@12
 746 MmSetAddressRangeModified@8
 747 MmSetBankedSection@24
 748 MmSizeOfMdl@8
 749 MmSystemRangeStart DATA
 750 MmTrimAllSystemPagableMemory@4
 751 MmUnlockPagableImageSection@4
 752 MmUnlockPages@4
 753 MmUnmapIoSpace@8
 754 MmUnmapLockedPages@8
 755 MmUnmapReservedMapping@12
 756 MmUnmapVideoDisplay@8
 757 MmUnmapViewInSessionSpace@4
 758 MmUnmapViewInSystemSpace@4
 759 MmUnmapViewOfSection@8
 760 MmUnsecureVirtualMemory@4
 761 MmUserProbeAddress DATA
 762 NlsAnsiCodePage DATA
 763 NlsLeadByteInfo DATA
 764 NlsMbCodePageTag DATA
 765 NlsMbOemCodePageTag DATA
 766 NlsOemCodePage DATA
 767 NlsOemLeadByteInfo DATA
 768 NtAddAtom@12
 769 NtAdjustPrivilegesToken@24
 770 NtAlertThread@4
 771 NtAllocateLocallyUniqueId@4
 772 NtAllocateUuids@16
 773 NtAllocateVirtualMemory@24
 774 NtBuildNumber DATA
 775 NtClose@4
 776 NtConnectPort@32
 777 NtCreateEvent@20
 778 NtCreateTimer@16
 779 NtOpenEvent@12
 780 NtCreateFile@44
 781 NtCreateSection@28
 782 NtDeleteAtom@4
 783 NtDeleteFile@4
 784 NtDeviceIoControlFile@40
 785 NtDuplicateObject@28
 786 NtDuplicateToken@24
 787 NtFindAtom@12
 788 NtFreeVirtualMemory@16
 789 NtFsControlFile@40
 790 NtGlobalFlag DATA
 791 NtLockFile@40
 792 NtMakePermanentObject@4
 793 NtMapViewOfSection@40
 794 NtNotifyChangeDirectoryFile@36
 795 NtOpenFile@24
 796 NtOpenProcess@16
 797 NtOpenProcessToken@12
 798 NtOpenProcessTokenEx@16
 799 NtOpenThread@16
 800 NtOpenThreadToken@16
 801 NtOpenThreadTokenEx@20
 802 NtQueryDirectoryFile@44
 803 NtQueryEaFile@36
 804 NtQueryInformationAtom@20
 805 NtQueryInformationFile@20
 806 NtQueryInformationProcess@20
 807 NtQueryInformationThread@20
 808 NtQueryInformationToken@20
 809 NtQueryQuotaInformationFile@36
 810 NtQuerySecurityObject@20
 811 NtQuerySystemInformation@16
 812 NtQuerySystemTime@4
 813 NtQueryVolumeInformationFile@20
 814 NtReadFile@36
 815 NtRequestPort@8
 816 NtRequestWaitReplyPort@12
 817 NtSetEaFile@16
 818 NtSetEvent@8
 819 NtSetInformationFile@20
 820 NtSetInformationProcess@16
 821 NtSetInformationThread@16
 822 NtSetQuotaInformationFile@16
 823 NtSetSecurityObject@12
 824 NtSetVolumeInformationFile@20
 825 NtSetSystemTime@8
 826 NtShutdownSystem@4
 827 NtTraceEvent@16
 828 NtUnlockFile@20
 829 NtVdmControl@8
 830 NtW32Call@20
 831 NtWaitForSingleObject@12
 832 NtWriteFile@36
 833
 834 ;
 835 ; Object Manager
 836 ObAssignSecurity@16
 837 ;ObCheckCreateObjectAccess@28
 838 ;ObCheckObjectAccess@20
 839 ObCloseHandle@8
 840 ObCreateObject@36
 841 ObCreateObjectType@16
 842 ObDereferenceObject@4
 843 ObDereferenceObjectDeferDelete@4
 844 ObDereferenceSecurityDescriptor@8
 845 @ObfDereferenceObject@4
 846 ObFindHandleForObject@20
 847 @ObfReferenceObject@4
 848 ObGetObjectSecurity@12
 849 ObInsertObject@24
 850 ObIsKernelHandle@4
 851 ObLogSecurityDescriptor@12
 852 ObMakeTemporaryObject@4
 853 ObOpenObjectByName@28
 854 ObOpenObjectByPointer@28
 855 ObQueryNameString@16
 856 ObQueryObjectAuditingByHandle@8
 857 ObReferenceObjectByHandle@24
 858 ObReferenceObjectByName@32
 859 ObReferenceObjectByPointer@16
 860 ;ObReferenceSecurityDescriptor@8
 861 ObReleaseObjectSecurity@8
 862 ;ObSetHandleAttributes@12
 863 ;ObSetSecurityDescriptorInfo@24
 864 ;ObSetSecurityObjectByPointer@12
 865
 866 ;
 867 ;
 868 ;
 869 ;PfxFindPrefix
 870 ;PfxInitialize
 871 ;PfxInsertPrefix
 872 ;PfxRemovePrefix
 873 PoCallDriver@8
 874 PoQueueShutdownWorkItem@4
 875 PoRegisterDeviceForIdleDetection@16
 876 PoRegisterSystemState@8
 877 PoRequestPowerIrp@24
 878 PoSetDeviceBusy@4
 879 PoSetPowerState@12
 880 PoSetSystemState@4
 881 PoStartNextPowerIrp@4
 882 PoUnregisterSystemState@4
 883 ProbeForRead@12
 884 ProbeForWrite@12
 885 PsAssignImpersonationToken@8
 886 PsChargePoolQuota@12
 887 PsChargeProcessNonPagedPoolQuota@4=PsDereferenceImpersonationToken@4
 888 PsChargeProcessPagedPoolQuota@8
 889 PsChargeProcessPoolQuota@12
 890 PsCreateSystemProcess@12
 891 PsCreateSystemThread@28
 892 PsDereferenceImpersonationToken@4=PsDereferencePrimaryToken@4
 893 PsDereferencePrimaryToken@4
 894 PsDisableImpersonation@8
 895 PsEstablishWin32Callouts@4
 896 PsGetContextThread@12
 897 PsGetCurrentProcess@0=KeGetCurrentProcess@0
 898 PsGetCurrentProcessId@0
 899 PsGetCurrentProcessWin32Process@0
 900 PsGetCurrentProcessSessionId@0
 901 PsGetCurrentThread@0=KeGetCurrentThread@0
 902 PsGetCurrentThreadId@0
 903 PsGetCurrentThreadPreviousMode@0
 904 PsGetCurrentThreadWin32Thread@0
 905 PsGetCurrentThreadStackBase@0
 906 PsGetCurrentThreadStackLimit@0
 907 PsGetJobLock@4
 908 PsGetJobSessionId@4
 909 PsGetJobUIRestrictionsClass@4
 910 PsGetProcessCreateTimeQuadPart@4
 911 PsGetProcessDebugPort@4
 912 PsGetProcessExitProcessCalled@4
 913 PsGetProcessExitStatus@4
 914 PsGetProcessExitTime@0
 915 PsGetProcessId@4
 916 PsGetProcessImageFileName@4
 917 PsGetProcessInheritedFromUniqueProcessId@4
 918 PsGetProcessJob@4
 919 PsGetProcessPeb@4
 920 PsGetProcessPriorityClass@4
 921 PsGetProcessSectionBaseAddress@4
 922 PsGetProcessSecurityPort@4
 923 PsGetProcessSessionId@4
 924 PsGetProcessWin32Process@4
 925 PsGetProcessWin32WindowStation@4
 926 PsGetThreadFreezeCount@4
 927 PsGetThreadHardErrorsAreDisabled@4
 928 PsGetThreadId@4
 929 PsGetThreadProcess@4
 930 PsGetThreadProcessId@4
 931 PsGetThreadSessionId@4
 932 PsGetThreadTeb@4
 933 PsGetThreadWin32Thread@4
 934 PsGetVersion@16
 935 PsImpersonateClient@20
 936 PsInitialSystemProcess DATA
 937 PsIsProcessBeingDebugged@4
 938 PsIsSystemThread@4
 939 PsIsThreadImpersonating@4
 940 PsIsThreadTerminating@4
 941 PsJobType DATA
 942 PsLookupProcessByProcessId@8
 943 PsLookupProcessThreadByCid@12
 944 PsLookupThreadByThreadId@8
 945 PsProcessType DATA
 946 PsReferenceImpersonationToken@16
 947 PsReferencePrimaryToken@4
 948 PsRemoveCreateThreadNotifyRoutine@4
 949 PsRemoveLoadImageNotifyRoutine@4
 950 PsRestoreImpersonation@8
 951 PsReturnPoolQuota@12
 952 PsReturnProcessNonPagedPoolQuota@8
 953 PsReturnProcessPagedPoolQuota@8
 954 PsRevertToSelf@0
 955 PsRevertThreadToSelf@4
 956 PsSetContextThread@12
 957 PsSetCreateProcessNotifyRoutine@8
 958 PsSetCreateThreadNotifyRoutine@4
 959 PsSetJobUIRestrictionsClass@8
 960 PsSetLegoNotifyRoutine@4
 961 PsSetProcessPriorityClass@8
 962 PsSetProcessPriorityByClass@8
 963 PsSetProcessSecurityPort@8
 964 PsSetProcessWin32Process@8
 965 PsSetProcessWindowStation@8
 966 PsSetThreadHardErrorsAreDisabled@8
 967 PsSetThreadWin32Thread@8
 968 PsSetLoadImageNotifyRoutine@4
 969 PsTerminateSystemThread@4
 970 PsThreadType DATA
 971 READ_REGISTER_UCHAR@4
 972 READ_REGISTER_ULONG@4
 973 READ_REGISTER_USHORT@4
 974 READ_REGISTER_BUFFER_UCHAR@12
 975 READ_REGISTER_BUFFER_ULONG@12
 976 READ_REGISTER_BUFFER_USHORT@12
 977 KiRosPrintAddress@4
 978 KeRosDumpStackFrames@8
 979 KeRosGetStackFrames@8
 980 RtlAbsoluteToSelfRelativeSD@12
 981 RtlAddAccessAllowedAce@16
 982 RtlAddAce@20
 983 RtlAddAtomToAtomTable@12
 984 RtlAddRange@36
 985 ;RtlAllocateAndInitializeSid
 986 RtlAllocateHeap@12
 987 RtlAnsiCharToUnicodeChar@4
 988 RtlAnsiStringToUnicodeSize@4=RtlxAnsiStringToUnicodeSize@4
 989 RtlAnsiStringToUnicodeString@12
 990 RtlAppendAsciizToString@8
 991 RtlAppendStringToString@8
 992 RtlAppendUnicodeStringToString@8
 993 RtlAppendUnicodeToString@8
 994 RtlAreAllAccessesGranted@8
 995 RtlAreAnyAccessesGranted@8
 996 RtlAreBitsClear@12
 997 RtlAreBitsSet@12
 998 RtlAssert@16
 999 RtlCaptureContext@4
1000 RtlCaptureStackBackTrace@16
1001 RtlCharToInteger@12
1002 RtlCheckRegistryKey@8
1003 RtlClearAllBits@4
1004 RtlClearBit@8
1005 RtlClearBits@12
1006 RtlCompareMemory@12
1007 RtlCompareMemoryUlong@12
1008 RtlCompareString@12
1009 RtlCompareUnicodeString@12
1010 RtlCompressBuffer@32
1011 RtlCompressChunks@28
1012 RtlConvertLongToLargeInteger@4
1013 RtlConvertSidToUnicodeString@12
1014 RtlConvertUlongToLargeInteger@4
1015 RtlCopyLuid@8
1016 RtlCopyRangeList@8
1017 RtlCopySid@12
1018 RtlCopyString@8
1019 RtlCopyUnicodeString@8
1020 RtlCreateAcl@12
1021 RtlCreateAtomTable@8
1022 RtlCreateHeap@24
1023 RtlCreateRegistryKey@8
1024 RtlCreateSecurityDescriptor@8
1025 RtlCreateSystemVolumeInformationFolder@4
1026 RtlCreateUnicodeString@8
1027 RtlCustomCPToUnicodeN@24
1028 RtlDecompressBuffer@24
1029 RtlDecompressChunks@28
1030 RtlDecompressFragment@32
1031 RtlDelete@4
1032 RtlDeleteAce@8
1033 RtlDeleteAtomFromAtomTable@8
1034 RtlDeleteElementGenericTable@8
1035 RtlDeleteElementGenericTableAvl@8
1036 RtlDeleteNoSplay@8
1037 RtlDeleteOwnersRanges@8
1038 RtlDeleteRange@24
1039 RtlDeleteRegistryValue@12
1040 RtlDescribeChunk@20
1041 RtlDestroyAtomTable@4
1042 RtlDestroyHeap@4
1043 RtlDowncaseUnicodeString@12
1044 RtlDuplicateUnicodeString@12
1045 RtlEmptyAtomTable@8
1046 RtlEnlargedIntegerMultiply@8
1047 RtlEnlargedUnsignedDivide@16
1048 RtlEnlargedUnsignedMultiply@8
1049 RtlEnumerateGenericTable@8
1050 RtlEnumerateGenericTableAvl@8
1051 RtlEnumerateGenericTableLikeADirectory@28
1052 RtlEnumerateGenericTableWithoutSplaying@8
1053 RtlEnumerateGenericTableWithoutSplayingAvl@8
1054 RtlEqualLuid@8
1055 RtlEqualSid@8
1056 RtlEqualString@12
1057 RtlEqualUnicodeString@12
1058 RtlExtendedIntegerMultiply@12
1059 RtlExtendedLargeIntegerDivide@16
1060 RtlExtendedMagicDivide@20
1061 RtlFillMemory@12
1062 RtlFillMemoryUlong@12
1063 RtlFindClearBits@12
1064 RtlFindClearBitsAndSet@12
1065 RtlFindClearRuns@16
1066 RtlFindFirstRunClear@8
1067 RtlFindFirstRunSet@8
1068 RtlFindLastBackwardRunClear@12
1069 RtlFindLeastSignificantBit@8
1070 RtlFindLongestRunClear@8
1071 RtlFindLongestRunSet@8
1072 RtlFindMessage@20
1073 RtlFindMostSignificantBit@8
1074 RtlFindNextForwardRunClear@12
1075 RtlFindRange@48
1076 RtlFindSetBits@12
1077 RtlFindSetBitsAndClear@12
1078 RtlFindUnicodePrefix@12
1079 RtlFormatCurrentUserKeyPath@4
1080 RtlFreeAnsiString@4
1081 RtlFreeHeap@12
1082 RtlFreeRangeList@4
1083 RtlFreeOemString@4
1084 RtlFreeUnicodeString@4
1085 RtlGUIDFromString@8
1086 RtlGenerate8dot3Name@16
1087 RtlGetAce@12
1088 RtlGetCallersAddress@8
1089 RtlGetCompressionWorkSpaceSize@12
1090 RtlGetDaclSecurityDescriptor@16
1091 RtlGetDefaultCodePage@8
1092 RtlGetElementGenericTable@8
1093 RtlGetElementGenericTableAvl@8
1094 RtlGetFirstRange@12
1095 RtlGetGroupSecurityDescriptor@12
1096 RtlGetNextRange@12
1097 RtlGetNtGlobalFlags@0
1098 RtlGetOwnerSecurityDescriptor@12
1099 RtlGetSaclSecurityDescriptor@16
1100 RtlGetSetBootStatusData@24
1101 RtlGetVersion@4
1102 RtlHashUnicodeString@16
1103 RtlImageNtHeader@4
1104 RtlImageDirectoryEntryToData@16
1105 RtlInitAnsiString@8
1106 RtlInitCodePageTable@8
1107 RtlInitString@8
1108 RtlInitUnicodeString@8
1109 RtlInitializeBitMap@12
1110 RtlInitializeGenericTable@20
1111 RtlInitializeGenericTableAvl@20
1112 RtlInitializeRangeList@4
1113 RtlInitializeSid@12
1114 RtlInitializeUnicodePrefix@4
1115 RtlInsertElementGenericTable@16
1116 RtlInsertElementGenericTableAvl@16
1117 RtlInsertElementGenericTableFull@24
1118 RtlInsertElementGenericTableFullAvl@24
1119 RtlInsertUnicodePrefix@12
1120 RtlInt64ToUnicodeString@16
1121 RtlIntegerToChar@16
1122 RtlIntegerToUnicode@16
1123 RtlIntegerToUnicodeString@12
1124 RtlInvertRangeList@8
1125 RtlIpv4AddressToStringA@8
1126 RtlIpv4AddressToStringExA@16
1127 RtlIpv4AddressToStringExW@16
1128 RtlIpv4AddressToStringW@8
1129 RtlIpv4StringToAddressA@16
1130 RtlIpv4StringToAddressExA@16
1131 RtlIpv4StringToAddressExW@16
1132 RtlIpv4StringToAddressW@16
1133 RtlIpv6AddressToStringA@8
1134 RtlIpv6AddressToStringExA@20
1135 RtlIpv6AddressToStringExW@20
1136 RtlIpv6AddressToStringW@8
1137 RtlIpv6StringToAddressA@12
1138 RtlIpv6StringToAddressExA@16
1139 RtlIpv6StringToAddressExW@16
1140 RtlIpv6StringToAddressW@12
1141 RtlIsGenericTableEmpty@4
1142 RtlIsGenericTableEmptyAvl@4
1143 RtlIsNameLegalDOS8Dot3@12
1144 RtlIsRangeAvailable@40
1145 RtlIsValidOemCharacter@4
1146 RtlLargeIntegerAdd@16
1147 RtlLargeIntegerArithmeticShift@12
1148 RtlLargeIntegerDivide@20
1149 RtlLargeIntegerNegate@8
1150 RtlLargeIntegerShiftLeft@12
1151 RtlLargeIntegerShiftRight@12
1152 RtlLargeIntegerSubtract@16
1153 RtlLengthRequiredSid@4
1154 RtlLengthSecurityDescriptor@4
1155 RtlLengthSid@4
1156 RtlLockBootStatusData@4
1157 RtlLookupAtomInAtomTable@12
1158 RtlLookupElementGenericTable@8
1159 RtlLookupElementGenericTableAvl@8
1160 RtlLookupElementGenericTableFull@16
1161 RtlLookupElementGenericTableFullAvl@16
1162 RtlMapGenericMask@8
1163 RtlMapSecurityErrorToNtStatus@4
1164 RtlMergeRangeLists@16
1165 RtlMoveMemory@12
1166 RtlMultiByteToUnicodeN@20
1167 RtlMultiByteToUnicodeSize@12
1168 RtlNextUnicodePrefix@8
1169 RtlNtStatusToDosError@4
1170 RtlNtStatusToDosErrorNoTeb@4
1171 RtlNumberGenericTableElements@4
1172 RtlNumberGenericTableElementsAvl@4
1173 RtlNumberOfClearBits@4
1174 RtlNumberOfSetBits@4
1175 RtlOemStringToCountedUnicodeString@12
1176 RtlOemStringToUnicodeSize@4=RtlxOemStringToUnicodeSize@4
1177 RtlOemStringToUnicodeString@12
1178 RtlOemToUnicodeN@20
1179 RtlPinAtomInAtomTable@8
1180 @RtlPrefetchMemoryNonTemporal@8
1181 RtlPrefixString@12
1182 RtlPrefixUnicodeString@12
1183 RtlQueryAtomInAtomTable@24
1184 RtlQueryRegistryValues@20
1185 RtlQueryTimeZoneInformation@4
1186 RtlRaiseException@4
1187 RtlRandom@4
1188 RtlRandomEx@4
1189 RtlRealPredecessor@4
1190 RtlRealSuccessor@4
1191 RtlRemoveUnicodePrefix@8
1192 RtlReserveChunk@20
1193 RtlSecondsSince1970ToTime@8
1194 RtlSecondsSince1980ToTime@8
1195 RtlSelfRelativeToAbsoluteSD2@8
1196 RtlSelfRelativeToAbsoluteSD@44
1197 RtlSetAllBits@4
1198 RtlSetBit@8
1199 RtlSetBits@12
1200 RtlSetDaclSecurityDescriptor@16
1201 RtlSetGroupSecurityDescriptor@12
1202 RtlSetOwnerSecurityDescriptor@12
1203 RtlSetSaclSecurityDescriptor@16
1204 RtlSetTimeZoneInformation@4
1205 RtlSizeHeap@12
1206 RtlSplay@4
1207 RtlStringFromGUID@8
1208 RtlSubAuthorityCountSid@4
1209 RtlSubAuthoritySid@8
1210 RtlSubtreePredecessor@4
1211 RtlSubtreeSuccessor@4
1212 RtlTestBit@8
1213 RtlTimeFieldsToTime@8
1214 RtlTimeToElapsedTimeFields@8
1215 RtlTimeToSecondsSince1970@8
1216 RtlTimeToSecondsSince1980@8
1217 RtlTimeToTimeFields@8
1218 @RtlUlongByteSwap@4
1219 @RtlUlonglongByteSwap@8
1220 RtlUnicodeStringToAnsiSize@4=RtlxUnicodeStringToAnsiSize@4
1221 RtlUnicodeStringToAnsiString@12
1222 RtlUnicodeStringToCountedOemString@12
1223 RtlUnicodeStringToInteger@12
1224 RtlUnicodeStringToOemSize@4=RtlxUnicodeStringToOemSize@4
1225 RtlUnicodeStringToOemString@12
1226 RtlUnicodeToCustomCPN@24
1227 RtlUnicodeToMultiByteN@20
1228 RtlUnicodeToMultiByteSize@12
1229 RtlUnicodeToOemN@20
1230 RtlUnlockBootStatusData@4
1231 RtlUnwind@16
1232 RtlUpcaseUnicodeChar@4
1233 RtlUpcaseUnicodeString@12
1234 RtlUpcaseUnicodeStringToAnsiString@12
1235 RtlUpcaseUnicodeStringToCountedOemString@12
1236 RtlUpcaseUnicodeStringToOemString@12
1237 RtlUpcaseUnicodeToCustomCPN@24
1238 RtlUpcaseUnicodeToMultiByteN@20
1239 RtlUpcaseUnicodeToOemN@20
1240 RtlUpperChar@4
1241 RtlUpperString@8
1242 @RtlUshortByteSwap@4
1243 RtlValidRelativeSecurityDescriptor@12
1244 RtlValidSecurityDescriptor@4
1245 RtlValidSid@4
1246 RtlVerifyVersionInfo@16
1247 RtlVolumeDeviceToDosName@8
1248 RtlWalkFrameChain@12
1249 RtlWriteRegistryValue@24
1250 RtlZeroHeap@8
1251 RtlZeroMemory@8
1252 RtlxAnsiStringToUnicodeSize@4
1253 RtlxOemStringToUnicodeSize@4
1254 RtlxUnicodeStringToAnsiSize@4
1255 RtlxUnicodeStringToOemSize@4
1256 SeAccessCheck@40
1257 SeAppendPrivileges@8
1258 SeAssignSecurity@28
1259 SeAssignSecurityEx@36
1260 SeAuditHardLinkCreation@12
1261 SeAuditingFileEvents@8
1262 SeAuditingFileEventsWithContext@12
1263 SeAuditingFileOrGlobalEvents@12
1264 SeAuditingHardLinkEvents@8
1265 SeAuditingHardLinkEventsWithContext@12
1266 SeCaptureSecurityDescriptor@20
1267 SeCaptureSubjectContext@4
1268 SeCloseObjectAuditAlarm@12
1269 SeCreateAccessState@16
1270 SeCreateClientSecurity@16
1271 SeCreateClientSecurityFromSubjectContext@16
1272 SeDeassignSecurity@4
1273 SeDeleteAccessState@4
1274 SeDeleteObjectAuditAlarm@8
1275 SeExports DATA
1276 SeFilterToken@24
1277 SeFreePrivileges@4
1278 SeImpersonateClient@8
1279 SeImpersonateClientEx@8
1280 SeLockSubjectContext@4
1281 SeMarkLogonSessionForTerminationNotification@4
1282 SeOpenObjectAuditAlarm@36
1283 SeOpenObjectForDeleteAuditAlarm@36
1284 SePrivilegeCheck@12
1285 SePrivilegeObjectAuditAlarm@24
1286 SePublicDefaultDacl DATA
1287 SeQueryAuthenticationIdToken@8
1288 SeQueryInformationToken@12
1289 SeQuerySecurityDescriptorInfo@16
1290 SeQuerySessionIdToken@8
1291 SeRegisterLogonSessionTerminatedRoutine@4
1292 SeReleaseSecurityDescriptor@12
1293 SeReleaseSubjectContext@4
1294 SeSetAccessStateGenericMapping@8
1295 SeSetSecurityDescriptorInfo@24
1296 SeSetSecurityDescriptorInfoEx@28
1297 SeSinglePrivilegeCheck@12
1298 SeSystemDefaultDacl DATA
1299 SeTokenImpersonationLevel@4
1300 SeTokenIsAdmin@4
1301 SeTokenIsRestricted@4
1302 SeTokenIsWriteRestricted@4
1303 SeTokenType@4
1304 SeUnlockSubjectContext@4
1305 SeUnregisterLogonSessionTerminatedRoutine@4
1306 SeValidSecurityDescriptor@8
1307 VerSetConditionMask@16
1308 WRITE_REGISTER_UCHAR@8
1309 WRITE_REGISTER_ULONG@8
1310 WRITE_REGISTER_USHORT@8
1311 WRITE_REGISTER_BUFFER_UCHAR@12
1312 WRITE_REGISTER_BUFFER_ULONG@12
1313 WRITE_REGISTER_BUFFER_USHORT@12
1314 ZwAccessCheckAndAuditAlarm@44
1315 ZwAddBootEntry@8
1316 ZwAdjustPrivilegesToken@24
1317 ZwAlertThread@4
1318 ZwAllocateVirtualMemory@24
1319 ZwAssignProcessToJobObject@8
1320 ZwCancelIoFile@8
1321 ZwCancelTimer@8
1322 ZwClearEvent@4
1323 ZwClose@4
1324 ZwCloseObjectAuditAlarm@12
1325 ZwConnectPort@32
1326 ZwCreateDirectoryObject@12
1327 ZwCreateEvent@20
1328 ZwCreateFile@44
1329 ZwCreateJobObject@12
1330 ZwCreateKey@28
1331 ZwCreateSection@28
1332 ZwCreateSymbolicLinkObject@16
1333 ZwCreateTimer@16
1334 ZwDeleteBootEntry@8
1335 ZwDeleteFile@4
1336 ZwDeleteKey@4
1337 ZwDeleteValueKey@8
1338 ZwDeviceIoControlFile@40
1339 ZwDisplayString@4
1340 ZwDuplicateObject@28
1341 ZwDuplicateToken@24
1342 ZwEnumerateBootEntries@8
1343 ZwEnumerateKey@24
1344 ZwEnumerateValueKey@24
1345 ZwFlushInstructionCache@12
1346 ZwFlushKey@4
1347 ZwFlushVirtualMemory@16
1348 ZwFreeVirtualMemory@16
1349 ZwFsControlFile@40
1350 ZwInitiatePowerAction@16
1351 ZwIsProcessInJob@8
1352 ZwLoadDriver@4
1353 ZwLoadKey@8
1354 ZwMakeTemporaryObject@4
1355 ZwMapViewOfSection@40
1356 ZwNotifyChangeKey@40
1357 ZwOpenDirectoryObject@12
1358 ZwOpenEvent@12
1359 ZwOpenFile@24
1360 ZwOpenJobObject@12
1361 ZwOpenKey@12
1362 ZwOpenProcess@16
1363 ZwOpenProcessToken@12
1364 ZwOpenProcessTokenEx@16
1365 ZwOpenSection@12
1366 ZwOpenSymbolicLinkObject@12
1367 ZwOpenThread@16
1368 ZwOpenThreadToken@16
1369 ZwOpenThreadTokenEx@20
1370 ZwOpenTimer@12
1371 ZwPowerInformation@20
1372 ZwPulseEvent@8
1373 ZwQueryBootEntryOrder@8
1374 ZwQueryBootOptions@8
1375 ZwQueryDefaultLocale@8
1376 ZwQueryDefaultUILanguage@4
1377 ZwQueryDirectoryFile@44
1378 ZwQueryDirectoryObject@28
1379 ZwQueryEaFile@36
1380 ZwQueryFullAttributesFile@8
1381 ZwQueryInformationAtom@20
1382 ZwQueryInformationFile@20
1383 ZwQueryInformationJobObject@20
1384 ZwQueryInformationProcess@20
1385 ZwQueryInformationThread@20
1386 ZwQueryInformationToken@20
1387 ZwQueryInstallUILanguage@4
1388 ZwQueryKey@20
1389 ZwQueryObject@20
1390 ZwQuerySection@20
1391 ZwQuerySecurityObject@20
1392 ZwQuerySymbolicLinkObject@12
1393 ZwQuerySystemInformation@16
1394 ZwQuerySystemTime@4
1395 ZwQueryValueKey@24
1396 ZwQueryVolumeInformationFile@20
1397 ZwReadFile@36
1398 ZwReplaceKey@12
1399 ZwRequestWaitReplyPort@12
1400 ZwResetEvent@8
1401 ZwRestoreKey@12
1402 ZwSaveKey@8
1403 ZwSaveKeyEx@12
1404 ZwSetBootEntryOrder@8
1405 ZwSetBootOptions@8
1406 ZwSetDefaultLocale@8
1407 ZwSetDefaultUILanguage@4
1408 ZwSetEaFile@16
1409 ZwSetEvent@8
1410 ZwSetInformationFile@20
1411 ZwSetInformationJobObject@16
1412 ZwSetInformationObject@16
1413 ZwSetInformationProcess@16
1414 ZwSetInformationThread@16
1415 ZwSetSecurityObject@12
1416 ZwSetSystemInformation@12
1417 ZwSetSystemTime@8
1418 ZwSetTimer@28
1419 ZwSetValueKey@24
1420 ZwSetVolumeInformationFile@20
1421 ZwTerminateJobObject@8
1422 ZwTerminateProcess@8
1423 ZwTranslateFilePath@12
1424 ZwUnloadDriver@4
1425 ZwUnloadKey@4
1426 ZwUnmapViewOfSection@8
1427 ZwWaitForMultipleObjects@20
1428 ZwWaitForSingleObject@12
1429 ZwWriteFile@36
1430 ZwYieldExecution@0
1431 _abnormal_termination
1432 _alldiv
1433 _allmul
1434 _alloca_probe
1435 _allrem
1436 _allshl
1437 _allshr
1438 _alldvrm
1439 _aulldiv
1440 _aulldvrm
1441 _aullrem
1442 _aullshr
1443 _except_handler2
1444 _except_handler3
1445 _global_unwind2
1446 _itoa
1447 _itow
1448 _local_unwind2
1449 _purecall
1450 _snprintf
1451 _snwprintf
1452 _stricmp
1453 _strlwr
1454 _strnicmp
1455 _strnset
1456 _strrev
1457 _strset
1458 _strupr
1459 _vsnprintf
1460 _vsnwprintf
1461 _wcsicmp
1462 _wcslwr
1463 _wcsnicmp
1464 _wcsnset
1465 _wcsrev
1466 _wcsupr
1467 atoi
1468 atol
1469 isdigit
1470 islower
1471 isprint
1472 isspace
1473 isupper
1474 isxdigit
1475 mbstowcs
1476 mbtowc
1477 memchr
1478 memcpy
1479 memmove
1480 memset
1481 qsort
1482 rand
1483 sprintf
1484 srand
1485 strcat
1486 strchr
1487 strcmp
1488 strcpy
1489 strlen
1490 strncat
1491 strncmp
1492 strncpy
1493 strrchr
1494 strspn
1495 strstr
1496 swprintf
1497 tolower
1498 toupper
1499 towlower
1500 towupper
1501 vsprintf
1502 wcscat
1503 wcschr
1504 wcscmp
1505 wcscpy
1506 wcscspn
1507 wcslen
1508 wcsncat
1509 wcsncmp
1510 wcsncpy
1511 wcsrchr
1512 wcsspn
1513 wcsstr
1514 wcstombs
1515 wctomb