1 ; $Id: ntoskrnl.edf,v 1.109 2002/01/04 13:09:37 ekohl Exp $
3 ; reactos/ntoskrnl/ntoskrnl.def
5 ; ReactOS Operating System
8 CcRosInitializeFileCache=CcRosInitializeFileCache@12
9 CcMdlReadComplete=CcMdlReadComplete@8
10 ;CcRosRequestCacheSegment=CcRosRequestCacheSegment@20
11 ;CcRosReleaseCacheSegment=CcRosReleaseCacheSegment@12
12 CcRosReleaseFileCache=CcRosReleaseFileCache@8
13 CcCopyRead=CcCopyRead@24
14 CcCopyWrite=CcCopyWrite@20
15 CcMapData=CcMapData@24
16 CcSetDirtyPinnedData=CcSetDirtyPinnedData@8
17 CcUnpinData=CcUnpinData@4
18 CcSetFileSizes=CcSetFileSizes@8
19 DbgBreakPoint=DbgBreakPoint@0
20 DbgBreakPointWithStatus=DbgBreakPointWithStatus@4
21 ;DbgLoadImageSymbols=DbgLoadImageSymbols@12
23 DbgPrompt=DbgPrompt@12
25 ExAcquireFastMutexUnsafe=@ExAcquireFastMutexUnsafe@4
26 ExAcquireResourceExclusive=ExAcquireResourceExclusive@8
27 ExAcquireResourceExclusiveLite=ExAcquireResourceExclusiveLite@8
28 ExAcquireResourceSharedLite=ExAcquireResourceSharedLite@8
29 ExAcquireSharedStarveExclusive=ExAcquireSharedStarveExclusive@8
30 ExAcquireSharedWaitForExclusive=ExAcquireSharedWaitForExclusive@8
31 ExAllocateFromPagedLookasideList=ExAllocateFromPagedLookasideList@4
32 ExAllocatePool=ExAllocatePool@8
33 ExAllocatePoolWithQuota=ExAllocatePoolWithQuota@8
34 ExAllocatePoolWithQuotaTag=ExAllocatePoolWithQuotaTag@12
35 ExAllocatePoolWithTag=ExAllocatePoolWithTag@12
36 ExConvertExclusiveToSharedLite=ExConvertExclusiveToSharedLite@4
37 ExCreateCallback=ExCreateCallback@16
38 ExDeleteNPagedLookasideList=ExDeleteNPagedLookasideList@4
39 ExDeletePagedLookasideList=ExDeletePagedLookasideList@4
40 ExDeleteResource=ExDeleteResource@4
41 ExDeleteResourceLite=ExDeleteResourceLite@4
42 ExDesktopObjectType DATA
43 ExDisableResourceBoostLite=ExDisableResourceBoostLite@4
44 ExEventObjectType DATA
45 ExExtendZone=ExExtendZone@12
46 ExFreePool=ExFreePool@4
47 ExFreeToPagedLookasideList=ExFreeToPagedLookasideList@8
48 ExGetExclusiveWaiterCount=ExGetExclusiveWaiterCount@4
49 ExGetPreviousMode=ExGetPreviousMode@0
50 ExGetSharedWaiterCount=ExGetSharedWaiterCount@4
51 ExInitializeNPagedLookasideList=ExInitializeNPagedLookasideList@28
52 ExInitializePagedLookasideList=ExInitializePagedLookasideList@28
53 ExInitializeResource=ExInitializeResource@4
54 ExInitializeResourceLite=ExInitializeResourceLite@4
55 ExInitializeZone=ExInitializeZone@16
56 ExInterlockedAddLargeInteger=ExInterlockedAddLargeInteger@16
57 ExInterlockedAddLargeStatistic=@ExInterlockedAddLargeStatistic@8
58 ExInterlockedAddUlong=ExInterlockedAddUlong@12
59 ExInterlockedCompareExchange64=@ExInterlockedCompareExchange64@16
60 ExInterlockedDecrementLong=ExInterlockedDecrementLong@8
61 ExInterlockedExchangeUlong=ExInterlockedExchangeUlong@12
62 ExInterlockedExtendZone=ExInterlockedExtendZone@16
63 ExInterlockedIncrementLong=ExInterlockedIncrementLong@8
64 ExInterlockedInsertHeadList=ExInterlockedInsertHeadList@12
65 ExInterlockedInsertTailList=ExInterlockedInsertTailList@12
66 ExInterlockedPopEntryList=ExInterlockedPopEntryList@8
67 ExInterlockedPopEntrySList=@ExInterlockedPopEntrySList@8
68 ExInterlockedPushEntryList=ExInterlockedPushEntryList@12
69 ExInterlockedPushEntrySList=@ExInterlockedPushEntrySList@12
70 ExInterlockedRemoveHeadList=ExInterlockedRemoveHeadList@8
71 ExIsProcessorFeaturePresent=ExIsProcessorFeaturePresent@4
72 ExIsResourceAcquiredExclusiveLite=ExIsResourceAcquiredExclusiveLite@4
73 ExIsResourceAcquiredSharedLite=ExIsResourceAcquiredSharedLite@4
74 ExLocalTimeToSystemTime=ExLocalTimeToSystemTime@8
75 ExNotifyCallback=ExNotifyCallback@12
76 ExPostSystemEvent=ExPostSystemEvent@12
78 ExQueueWorkItem=ExQueueWorkItem@8
79 ExRaiseAccessViolation=ExRaiseAccessViolation@0
80 ExRaiseDatatypeMisalignment=ExRaiseDatatypeMisalignment@0
83 ExRaiseStatus=ExRaiseStatus@4
84 ExRegisterCallback=ExRegisterCallback@12
85 ExReinitializeResourceLite=ExReinitializeResourceLite@4
86 ExReleaseFastMutexUnsafe=@ExReleaseFastMutexUnsafe@4
87 ExReleaseResourceForThread=ExReleaseResourceForThread@8
88 ExReleaseResourceForThreadLite=ExReleaseResourceForThreadLite@8
89 ExReleaseResourceLite=@ExReleaseResourceLite@4
90 ExSetResourceOwnerPointer=ExSetResourceOwnerPointer@8
91 ;ExSystemExceptionFilter
92 ExSystemTimeToLocalTime=ExSystemTimeToLocalTime@8
93 ExTryToAcquireResourceExclusiveLite=ExTryToAcquireResourceExclusiveLite@4
94 ExUnregisterCallback=ExUnregisterCallback@4
95 ExWindowStationObjectType DATA
96 ExfInterlockedAddUlong=@ExfInterlockedAddUlong@12
97 ;ExfInterlockedInsertHeadList
98 ;ExfInterlockedInsertTailList
99 ;ExfInterlockedPopEntryList
100 ;ExfInterlockedPushEntryList
101 ;ExfInterlockedRemoveHeadList
102 Exfi386InterlockedDecrementLong=@Exfi386InterlockedDecrementLong@4
103 Exfi386InterlockedExchangeUlong=@Exfi386InterlockedExchangeUlong@8
104 Exfi386InterlockedIncrementLong=@Exfi386InterlockedIncrementLong@4
105 Exi386InterlockedDecrementLong=Exi386InterlockedDecrementLong@4
106 Exi386InterlockedExchangeUlong=Exi386InterlockedExchangeUlong@8
107 Exi386InterlockedIncrementLong=Exi386InterlockedIncrementLong@4
108 FsRtlAddLargeMcbEntry=FsRtlAddLargeMcbEntry@28
109 FsRtlAddMcbEntry=FsRtlAddMcbEntry@16
110 FsRtlAddToTunnelCache=FsRtlAddToTunnelCache@32
111 FsRtlAllocatePool=FsRtlAllocatePool@8
112 FsRtlAllocatePoolWithQuota=FsRtlAllocatePoolWithQuota@8
113 FsRtlAllocatePoolWithQuotaTag=FsRtlAllocatePoolWithQuotaTag@12
114 FsRtlAllocatePoolWithTag=FsRtlAllocatePoolWithTag@12
115 FsRtlAllocateResource=FsRtlAllocateResource@0
116 FsRtlAreNamesEqual=FsRtlAreNamesEqual@16
117 FsRtlBalanceReads=FsRtlBalanceReads@4
118 FsRtlCheckLockForReadAccess=FsRtlCheckLockForReadAccess@8
119 FsRtlCheckLockForWriteAccess=FsRtlCheckLockForWriteAccess@8
120 FsRtlCheckOplock=FsRtlCheckOplock@20
121 FsRtlCopyRead=FsRtlCopyRead@32
122 FsRtlCopyWrite=FsRtlCopyWrite@32
123 FsRtlCurrentBatchOplock=FsRtlCurrentBatchOplock@4
124 FsRtlDeleteKeyFromTunnelCache=FsRtlDeleteKeyFromTunnelCache@12
125 FsRtlDeleteTunnelCache=FsRtlDeleteTunnelCache@4
126 FsRtlDeregisterUncProvider=FsRtlDeregisterUncProvider@4
127 FsRtlDissectDbcs=FsRtlDissectDbcs@16
128 FsRtlDissectName=FsRtlDissectName@16
129 FsRtlDoesDbcsContainWildCards=FsRtlDoesDbcsContainWildCards@4
130 FsRtlDoesNameContainWildCards=FsRtlDoesNameContainWildCards@4
131 FsRtlFastCheckLockForRead=FsRtlFastCheckLockForRead@24
132 FsRtlFastCheckLockForWrite=FsRtlFastCheckLockForWrite@24
133 FsRtlFastUnlockAll=FsRtlFastUnlockAll@16
134 FsRtlFastUnlockAllByKey=FsRtlFastUnlockAllByKey@20
135 FsRtlFastUnlockSingle=FsRtlFastUnlockSingle@32
136 FsRtlFindInTunnelCache=FsRtlFindInTunnelCache@32
137 FsRtlGetFileSize=FsRtlGetFileSize@8
138 FsRtlGetNextFileLock=FsRtlGetNextFileLock@8
139 FsRtlGetNextLargeMcbEntry=FsRtlGetNextLargeMcbEntry@20
140 FsRtlGetNextMcbEntry=FsRtlGetNextMcbEntry@20
141 FsRtlInitializeFileLock=FsRtlInitializeFileLock@12
142 FsRtlInitializeLargeMcb=FsRtlInitializeLargeMcb@8
143 FsRtlInitializeMcb=FsRtlInitializeMcb@8
144 FsRtlInitializeOplock=FsRtlInitializeOplock@4
145 FsRtlInitializeTunnelCache=FsRtlInitializeTunnelCache@4
146 FsRtlIsDbcsInExpression=FsRtlIsDbcsInExpression@8
147 FsRtlIsFatDbcsLegal=FsRtlIsFatDbcsLegal@20
148 FsRtlIsHpfsDbcsLegal=FsRtlIsHpfsDbcsLegal@20
149 FsRtlIsNameInExpression=FsRtlIsNameInExpression@16
150 FsRtlIsNtstatusExpected=FsRtlIsNtstatusExpected@4
151 FsRtlIsTotalDeviceFailure=FsRtlIsTotalDeviceFailure@4
152 FsRtlLegalAnsiCharacterArray DATA
153 FsRtlLookupLargeMcbEntry=FsRtlLookupLargeMcbEntry@32
154 FsRtlLookupLastLargeMcbEntry=FsRtlLookupLastLargeMcbEntry@12
155 FsRtlLookupLastMcbEntry=FsRtlLookupLastMcbEntry@12
156 FsRtlLookupMcbEntry=FsRtlLookupMcbEntry@20
157 FsRtlMdlRead=FsRtlMdlRead@24
158 FsRtlMdlReadComplete=FsRtlMdlReadComplete@8
159 FsRtlMdlReadCompleteDev=FsRtlMdlReadCompleteDev@12
160 FsRtlMdlReadDev=FsRtlMdlReadDev@28
161 FsRtlMdlWriteComplete=FsRtlMdlWriteComplete@12
162 FsRtlMdlWriteCompleteDev=FsRtlMdlWriteCompleteDev@16
163 FsRtlNormalizeNtstatus=FsRtlNormalizeNtstatus@8
164 FsRtlNotifyChangeDirectory=FsRtlNotifyChangeDirectory@28
165 FsRtlNotifyCleanup=FsRtlNotifyCleanup@12
166 FsRtlNotifyFullChangeDirectory=FsRtlNotifyFullChangeDirectory@40
167 FsRtlNotifyFullReportChange=FsRtlNotifyFullReportChange@36
168 FsRtlNotifyInitializeSync=FsRtlNotifyInitializeSync@4
169 FsRtlNotifyReportChange=FsRtlNotifyReportChange@20
170 FsRtlNotifyUninitializeSync=FsRtlNotifyUninitializeSync@4
171 FsRtlNumberOfRunsInLargeMcb=FsRtlNumberOfRunsInLargeMcb@4
172 FsRtlNumberOfRunsInMcb=FsRtlNumberOfRunsInMcb@4
173 FsRtlOplockFsctrl=FsRtlOplockFsctrl@12
174 FsRtlOplockIsFastIoPossible=FsRtlOplockIsFastIoPossible@4
175 FsRtlPostPagingFileStackOverflow=FsRtlPostPagingFileStackOverflow@12
176 FsRtlPostStackOverflow=FsRtlPostStackOverflow@12
177 FsRtlPrepareMdlWrite=FsRtlPrepareMdlWrite@24
178 FsRtlPrepareMdlWriteDev=FsRtlPrepareMdlWriteDev@28
179 FsRtlPrivateLock=FsRtlPrivateLock@48
180 FsRtlProcessFileLock=FsRtlProcessFileLock@12
181 FsRtlRegisterUncProvider=FsRtlRegisterUncProvider@12
182 FsRtlRemoveLargeMcbEntry=FsRtlRemoveLargeMcbEntry@20
183 FsRtlRemoveMcbEntry=FsRtlRemoveMcbEntry@12
184 FsRtlSplitLargeMcb=FsRtlSplitLargeMcb@20
185 FsRtlSyncVolumes=FsRtlSyncVolumes@12
186 FsRtlTruncateLargeMcb=FsRtlTruncateLargeMcb@12
187 FsRtlTruncateMcb=FsRtlTruncateMcb@8
188 FsRtlUninitializeFileLock=FsRtlUninitializeFileLock@4
189 FsRtlUninitializeLargeMcb=FsRtlUninitializeLargeMcb@4
190 FsRtlUninitializeMcb=FsRtlUninitializeMcb@4
191 FsRtlUninitializeOplock=FsRtlUninitializeOplock@4
192 HalDispatchTable DATA
193 HalPrivateDispatchTable DATA
194 InterlockedCompareExchange=@InterlockedCompareExchange@12
195 InterlockedDecrement=@InterlockedDecrement@4
196 InterlockedExchange=@InterlockedExchange@8
197 InterlockedExchangeAdd=@InterlockedExchangeAdd@8
198 InterlockedIncrement=@InterlockedIncrement@4
199 IoAcquireCancelSpinLock=IoAcquireCancelSpinLock@4
200 IoAcquireVpbSpinLock=IoAcquireVpbSpinLock@4
201 IoAdapterObjectType DATA
202 IoAllocateAdapterChannel=IoAllocateAdapterChannel@20
203 IoAllocateIrp=IoAllocateIrp@8
204 IoAllocateMdl=IoAllocateMdl@20
205 IoAllocateController=IoAllocateController@16
206 IoAllocateErrorLogEntry=IoAllocateErrorLogEntry@8
207 IoAssignResources=IoAssignResources@24
208 IoAttachDevice=IoAttachDevice@12
209 IoAttachDeviceByPointer=IoAttachDeviceByPointer@8
210 IoAttachDeviceToDeviceStack=IoAttachDeviceToDeviceStack@8
211 IoBuildAsynchronousFsdRequest=IoBuildAsynchronousFsdRequest@24
212 IoBuildDeviceIoControlRequest=IoBuildDeviceIoControlRequest@36
213 IoBuildPartialMdl=IoBuildPartialMdl@16
214 IoBuildSynchronousFsdRequest=IoBuildSynchronousFsdRequest@28
215 IoCallDriver=IoCallDriver@8
216 IoCancelIrp=IoCancelIrp@4
217 IoCheckDesiredAccess=IoCheckDesiredAccess@8
218 IoCheckEaBufferValidity=IoCheckEaBufferValidity@12
219 IoCheckFunctionAccess=IoCheckFunctionAccess@24
220 IoCheckShareAccess=IoCheckShareAccess@20
221 IoCompleteRequest=IoCompleteRequest@8
222 IoConnectInterrupt=IoConnectInterrupt@44
223 IoCreateController=IoCreateController@4
224 IoCreateDevice=IoCreateDevice@28
225 IoCreateFile=IoCreateFile@56
226 IoCreateNotificationEvent=IoCreateNotificationEvent@8
227 IoCreateStreamFileObject=IoCreateStreamFileObject@8
228 IoCreateSymbolicLink=IoCreateSymbolicLink@8
229 IoCreateSynchronizationEvent=IoCreateSynchronizationEvent@8
230 IoCreateUnprotectedSymbolicLink=IoCreateUnprotectedSymbolicLink@8
231 IoDeleteController=IoDeleteController@4
232 IoDeleteDevice=IoDeleteDevice@4
233 IoDeleteSymbolicLink=IoDeleteSymbolicLink@4
234 IoDetachDevice=IoDetachDevice@4
235 IoDeviceHandlerObjectSize DATA
236 IoDeviceHandlerObjectType DATA
237 IoDeviceObjectType DATA
238 IoDisconnectInterrupt=IoDisconnectInterrupt@4
239 IoDriverObjectType DATA
240 IoEnqueueIrp=IoEnqueueIrp@4
241 IoFastQueryNetworkAttributes=IoFastQueryNetworkAttributes@20
242 IoFileObjectType DATA
243 IoFreeController=IoFreeController@4
244 IoFreeIrp=IoFreeIrp@4
245 IoFreeMdl=IoFreeMdl@4
246 IoGetAttachedDevice=IoGetAttachedDevice@4
247 IoGetAttachedDeviceReference=IoGetAttachedDeviceReference@4
248 IoGetBaseFileSystemDeviceObject=IoGetBaseFileSystemDeviceObject@4
249 IoGetConfigurationInformation=IoGetConfigurationInformation@0
250 IoGetCurrentProcess=IoGetCurrentProcess@0
251 IoGetDeviceObjectPointer=IoGetDeviceObjectPointer@16
252 IoGetDeviceToVerify=IoGetDeviceToVerify@4
253 IoGetFileObjectGenericMapping=IoGetFileObjectGenericMapping@0
254 IoGetInitialStack=IoGetInitialStack@0
255 IoGetRelatedDeviceObject=IoGetRelatedDeviceObject@4
256 IoGetRequestorProcess=IoGetRequestorProcess@4
257 IoGetStackLimits=IoGetStackLimits@8
258 IoGetTopLevelIrp=IoGetTopLevelIrp@0
259 IoInitializeIrp=IoInitializeIrp@12
260 IoInitializeTimer=IoInitializeTimer@12
261 IoIsOperationSynchronous=IoIsOperationSynchronous@4
262 IoMakeAssociatedIrp=IoMakeAssociatedIrp@8
263 IoOpenDeviceInstanceKey=IoOpenDeviceInstanceKey@20
264 ;IoPageRead=IoPageRead@16
265 IoQueryDeviceDescription=IoQueryDeviceDescription@32
266 IoQueryDeviceEnumInfo=IoQueryDeviceEnumInfo@8
267 IoQueryFileInformation=IoQueryFileInformation@20
268 IoQueryVolumeInformation=IoQueryVolumeInformation@20
269 IoQueueThreadIrp=IoQueueThreadIrp@4
270 IoRaiseHardError=IoRaiseHardError@12
271 IoRaiseInformationalHardError=IoRaiseInformationalHardError@12
272 IoReadOperationCount DATA
273 IoReadPartitionTable=IoReadPartitionTable@16
274 IoReadTransferCount DATA
275 IoRegisterDriverReinitialization=IoRegisterDriverReinitialization@12
276 IoRegisterFileSystem=IoRegisterFileSystem@4
277 IoRegisterFsRegistrationChange=IoRegisterFsRegistrationChange@8
278 IoRegisterShutdownNotification=IoRegisterShutdownNotification@4
279 IoReleaseCancelSpinLock=IoReleaseCancelSpinLock@4
280 IoReleaseVpbSpinLock=IoReleaseVpbSpinLock@4
281 IoRemoveShareAccess=IoRemoveShareAccess@8
282 IoReportHalResourceUsage=IoReportHalResourceUsage@16
283 IoReportResourceUsage=IoReportResourceUsage@36
284 IoSetDeviceToVerify=IoSetDeviceToVerify@8
285 IoSetHardErrorOrVerifyDevice=IoSetHardErrorOrVerifyDevice@8
286 IoSetInformation=IoSetInformation@16
287 IoSetPartitionInformation=IoSetPartitionInformation@16
288 IoSetShareAccess=IoSetShareAccess@16
289 IoSetThreadHardErrorMode=IoSetThreadHardErrorMode@4
290 IoSetTopLevelIrp=IoSetTopLevelIrp@4
291 IoStartNextPacket=IoStartNextPacket@8
292 IoStartNextPacketByKey=IoStartNextPacketByKey@12
293 IoStartPacket=IoStartPacket@16
294 IoStartTimer=IoStartTimer@4
295 IoStatisticsLock DATA
296 IoStopTimer=IoStopTimer@4
297 IoSynchronousPageWrite=IoSynchronousPageWrite@20
298 IoThreadToProcess=IoThreadToProcess@4
299 IoUnregisterFileSystem=IoUnregisterFileSystem@4
300 IoUnregisterFsRegistrationChange=IoUnregisterFsRegistrationChange@8
301 IoUnregisterShutdownNotification=IoUnregisterShutdownNotification@4
302 IoUpdateShareAccess=IoUpdateShareAccess@8
303 IoVerifyVolume=IoVerifyVolume@8
304 IoWriteErrorLogEntry=IoWriteErrorLogEntry@4
305 IoWriteOperationCount DATA
306 IoWritePartitionTable=IoWritePartitionTable@20
307 IoWriteTransferCount DATA
308 IofCallDriver=@IofCallDriver@8
309 IofCompleteRequest=@IofCompleteRequest@8
310 KdDebuggerEnabled DATA
311 KdDebuggerNotPresent DATA
312 KdPollBreakIn=KdPollBreakIn@0
313 KdSystemDebugControl=KdSystemDebugControl@4
314 Ke386CallBios=Ke386CallBios@8
315 ;Ke386IoSetAccessProcess
316 ;Ke386QueryIoAccessMap
318 KeAcquireSpinLockAtDpcLevel=KeAcquireSpinLockAtDpcLevel@4
319 KeAddSystemServiceTable=KeAddSystemServiceTable@20
320 KeAttachProcess=KeAttachProcess@4
321 ;KeBoostCurrentThread
322 KeBugCheck=KeBugCheck@4
323 KeBugCheckEx=KeBugCheckEx@20
324 KeCancelTimer=KeCancelTimer@4
325 KeClearEvent=KeClearEvent@4
326 KeConnectInterrupt=KeConnectInterrupt@4
327 ;KeDcacheFlushCount DATA
328 KeDelayExecutionThread=KeDelayExecutionThread@12
329 KeDeregisterBugCheckCallback=KeDeregisterBugCheckCallback@4
330 KeDetachProcess=KeDetachProcess@0
331 KeDisconnectInterrupt=KeDisconnectInterrupt@4
332 KeEnterCriticalRegion=KeEnterCriticalRegion@0
333 KeEnterKernelDebugger=KeEnterKernelDebugger@0
334 ;KeFindConfigurationEntry
335 ;KeFindConfigurationNextEntry
337 KeGetCurrentThread=KeGetCurrentThread@0
338 KeGetPreviousMode=KeGetPreviousMode@0
340 ;KeI386AllocateGdtSelectors
341 ;KeI386Call16BitCStyleFunction
342 ;KeI386Call16BitFunction
343 ;KeI386FlatToGdtSelector
346 ;KeI386ReleaseGdtSelectors
348 ;KeI386SetGdtSelector
349 ;KeIcacheFlushCount DATA
350 KeInitializeApc=KeInitializeApc@32
351 KeInitializeDeviceQueue=KeInitializeDeviceQueue@4
352 KeInitializeDpc=KeInitializeDpc@12
353 KeInitializeEvent=KeInitializeEvent@12
354 KeInitializeInterrupt=KeInitializeInterrupt@44
355 KeInitializeMutant=KeInitializeMutant@8
356 KeInitializeMutex=KeInitializeMutex@8
357 KeInitializeQueue=KeInitializeQueue@8
358 KeInitializeSemaphore=KeInitializeSemaphore@12
359 KeInitializeSpinLock=KeInitializeSpinLock@4
360 KeInitializeTimer=KeInitializeTimer@4
361 KeInitializeTimerEx=KeInitializeTimerEx@8
362 KeInsertByKeyDeviceQueue=KeInsertByKeyDeviceQueue@12
363 KeInsertDeviceQueue=KeInsertDeviceQueue@8
364 KeInsertHeadQueue=KeInsertHeadQueue@8
365 KeInsertQueue=KeInsertQueue@8
366 KeInsertQueueApc=KeInsertQueueApc@16
367 KeInsertQueueDpc=KeInsertQueueDpc@12
369 KeLeaveCriticalRegion=KeLeaveCriticalRegion@0
371 KeNumberProcessors DATA
373 ;KeProfileInterruptWithSource
374 KePulseEvent=KePulseEvent@12
375 KeQuerySystemTime=KeQuerySystemTime@4
376 KeQueryTickCount=KeQueryTickCount@4
377 KeQueryTimeIncrement=KeQueryTimeIncrement@0
378 ;KeRaiseUserException
379 KeReadStateEvent=KeReadStateEvent@4
380 KeReadStateMutant=KeReadStateMutant@4
381 KeReadStateMutex=KeReadStateMutex@4
382 KeReadStateQueue=KeReadStateQueue@4
383 KeReadStateSemaphore=KeReadStateSemaphore@4
384 KeReadStateTimer=KeReadStateTimer@4
385 KeRegisterBugCheckCallback=KeRegisterBugCheckCallback@20
386 KeReleaseMutant=KeReleaseMutant@16
387 KeReleaseMutex=KeReleaseMutex@8
388 KeReleaseSemaphore=KeReleaseSemaphore@16
389 KeReleaseSpinLockFromDpcLevel=KeReleaseSpinLockFromDpcLevel@4
390 KeRemoveByKeyDeviceQueue=KeRemoveByKeyDeviceQueue@8
391 KeRemoveDeviceQueue=KeRemoveDeviceQueue@4
392 KeRemoveEntryDeviceQueue=KeRemoveEntryDeviceQueue@8
393 KeRemoveQueue=KeRemoveQueue@12
394 KeRemoveQueueDpc=KeRemoveQueueDpc@4
395 KeResetEvent=KeResetEvent@4
396 ;KeRestoreFloatingPointState
397 KeRundownQueue=KeRundownQueue@4
398 ;KeSaveFloatingPointState
399 KeServiceDescriptorTable DATA
401 KeSetBasePriorityThread=KeSetBasePriorityThread@8
403 KeSetEvent=KeSetEvent@12
404 ;KeSetEventBoostPriority
405 ;KeSetIdealProcessorThread
406 KeSetImportanceDpc=KeSetImportanceDpc@8
407 ;KeSetKernelStackSwapEnable
408 KeSetPriorityThread=KeSetPriorityThread@8
410 ;KeSetSwapContextNotifyRoutine
411 KeSetTargetProcessorDpc=KeSetTargetProcessorDpc@8
412 ;KeSetThreadSelectNotifyRoutine
414 KeSetTimer=KeSetTimer@16
415 KeSetTimerEx=KeSetTimerEx@20
416 ;KeSetTimeUpdateNotifyRoutine
417 KeSynchronizeExecution=KeSynchronizeExecution@12
422 KeWaitForMultipleObjects=KeWaitForMultipleObjects@32
423 KeWaitForMutexObject=KeWaitForMutexObject@20
424 KeWaitForSingleObject=KeWaitForSingleObject@20
425 ;KefAcquireSpinLockAtDpcLevel
426 ;KefReleaseSpinLockFromDpcLevel
430 ;KiCoprocessorError@0
431 KiDeliverApc=KiDeliverApc@12
432 KiDispatchInterrupt=KiDispatchInterrupt@0
433 ;KiIpiServiceRoutine@8
435 ;KiUnexpectedInterrupt
436 ;Kii386SpinOnSpinLock
438 LdrAccessResource=LdrAccessResource@16
440 ;LdrFindResourceDirectory_U@16
441 LdrFindResource_U=LdrFindResource_U@16
443 LsaCallAuthenticationPackage=LsaCallAuthenticationPackage@28
444 LsaDeregisterLogonProcess=LsaDeregisterLogonProcess@8
445 LsaFreeReturnBuffer=LsaFreeReturnBuffer@4
446 LsaLogonUser=LsaLogonUser@56
447 LsaLookupAuthenticationPackage=LsaLookupAuthenticationPackage@12
448 LsaRegisterLogonProcess=LsaRegisterLogonProcess@12
449 MmAdjustWorkingSetSize=MmAdjustWorkingSetSize@12
450 MmAllocateContiguousAlignedMemory=MmAllocateContiguousAlignedMemory@16
451 MmAllocateContiguousMemory=MmAllocateContiguousMemory@12
452 MmAllocateNonCachedMemory=MmAllocateNonCachedMemory@4
453 MmBuildMdlForNonPagedPool=MmBuildMdlForNonPagedPool@4
454 MmCanFileBeTruncated=MmCanFileBeTruncated@8
455 MmCreateMdl=MmCreateMdl@12
456 MmCreateSection=MmCreateSection@32
457 MmDbgTranslatePhysicalAddress=MmDbgTranslatePhysicalAddress@8
458 MmDisableModifiedWriteOfSection=MmDisableModifiedWriteOfSection@4
459 MmFlushImageSection=MmFlushImageSection@8
460 MmForceSectionClosed=MmForceSectionClosed@8
461 MmFreeContiguousMemory=MmFreeContiguousMemory@4
462 MmFreeNonCachedMemory=MmFreeNonCachedMemory@8
463 MmGetPhysicalAddress=MmGetPhysicalAddress@4
464 MmGrowKernelStack=MmGrowKernelStack@4
465 MmHighestUserAddress DATA
466 MmIsAddressValid=MmIsAddressValid@4
467 MmIsNonPagedSystemAddressValid=MmIsNonPagedSystemAddressValid@4
468 MmIsRecursiveIoFault=MmIsRecursiveIoFault@0
469 MmIsThisAnNtAsSystem=MmIsThisAnNtAsSystem@0
470 MmLockPagableDataSection=MmLockPagableDataSection@4
471 MmLockPagableImageSection=MmLockPagableDataSection@4
472 MmLockPagableSectionByHandle=MmLockPagableSectionByHandle@4
473 MmMapIoSpace=MmMapIoSpace@16
474 MmMapLockedPages=MmMapLockedPages@8
475 MmMapMemoryDumpMdl=MmMapMemoryDumpMdl@4
476 MmMapVideoDisplay=MmMapVideoDisplay@16
477 MmMapViewInSystemSpace=MmMapViewInSystemSpace@12
478 MmMapViewOfSection=MmMapViewOfSection@40
479 MmPageEntireDriver=MmPageEntireDriver@4
480 MmProbeAndLockPages=MmProbeAndLockPages@12
481 MmQuerySystemSize=MmQuerySystemSize@0
482 MmResetDriverPaging=MmResetDriverPaging@4
483 MmSectionObjectType DATA
484 MmSecureVirtualMemory=MmSecureVirtualMemory@12
485 MmSetAddressRangeModified=MmSetAddressRangeModified@8
486 MmSetBankedSection=MmSetBankedSection@24
487 MmSizeOfMdl=MmSizeOfMdl@8
488 MmUnlockPagableImageSection=MmUnlockPagableImageSection@4
489 MmUnlockPages=MmUnlockPages@4
490 MmUnmapIoSpace=MmUnmapIoSpace@8
491 MmUnmapLockedPages=MmUnmapLockedPages@8
492 MmUnmapVideoDisplay=MmUnmapVideoDisplay@8
493 MmUnmapViewInSystemSpace=MmUnmapViewInSystemSpace@4
494 MmUnmapViewOfSection=MmUnmapViewOfSection@8
495 MmUnsecureVirtualMemory=MmUnsecureVirtualMemory@4
496 MmUserProbeAddress DATA
499 NlsMbCodePageTag DATA
500 NlsMbOemCodePageTag DATA
501 NlsOemLeadByteInfo DATA
502 NtAddAtom=NtAddAtom@8
503 NtAdjustPrivilegesToken=NtAdjustPrivilegesToken@24
504 NtAllocateLocallyUniqueId=NtAllocateLocallyUniqueId@4
505 NtAllocateUuids=NtAllocateUuids@12
506 NtAllocateVirtualMemory=NtAllocateVirtualMemory@24
509 NtConnectPort=NtConnectPort@32
510 NtCreateEvent=NtCreateEvent@20
511 NtCreateTimer=NtCreateTimer@16
512 NtOpenEvent=NtOpenEvent@12
513 NtCreateFile=NtCreateFile@44
514 NtCreateSection=NtCreateSection@28
515 NtDeleteAtom=NtDeleteAtom@4
516 NtDeleteFile=NtDeleteFile@4
517 NtDeviceIoControlFile=NtDeviceIoControlFile@40
518 NtDuplicateObject=NtDuplicateObject@28
519 NtDuplicateToken=NtDuplicateToken@24
520 NtFindAtom=NtFindAtom@8
521 NtFreeVirtualMemory=NtFreeVirtualMemory@16
522 NtFsControlFile=NtFsControlFile@40
524 NtLockFile=NtLockFile@40
525 NtMapViewOfSection=NtMapViewOfSection@40
526 NtNotifyChangeDirectoryFile=NtNotifyChangeDirectoryFile@36
527 NtOpenFile=NtOpenFile@24
528 NtOpenProcess=NtOpenProcess@16
529 NtOpenProcessToken=NtOpenProcessToken@12
530 NtQueryDirectoryFile=NtQueryDirectoryFile@44
531 NtQueryEaFile=NtQueryEaFile@36
532 NtQueryInformationAtom=NtQueryInformationAtom@20
533 NtQueryInformationFile=NtQueryInformationFile@20
534 NtQueryInformationProcess=NtQueryInformationProcess@20
535 NtQueryInformationToken=NtQueryInformationToken@20
536 ;NtQueryOleDirectoryFile@44 <--- ?
537 NtQuerySecurityObject=NtQuerySecurityObject@20
538 NtQuerySystemTime=NtQuerySystemTime@4
539 NtQueryVolumeInformationFile=NtQueryVolumeInformationFile@20
540 NtReadFile=NtReadFile@36
541 NtRequestPort=NtRequestPort@8
542 NtRequestWaitReplyPort@12
543 NtSetEvent=NtSetEvent@8
544 NtSetInformationFile=NtSetInformationFile@20
545 NtSetInformationProcess=NtSetInformationProcess@16
546 NtSetInformationThread=NtSetInformationThread@16
547 NtSetSecurityObject=NtSetSecurityObject@12
548 NtSetSystemTime=NtSetSystemTime@8
549 NtUnlockFile=NtUnlockFile@20
550 NtVdmControl=NtVdmControl@8
551 NtWaitForSingleObject=NtWaitForSingleObject@12
552 NtWriteFile=NtWriteFile@36
553 ;ObAssignSecurity=ObAssignSecurity@16
554 ;ObCheckCreateObjectAccess=ObCheckCreateObjectAccess@28
555 ;ObCheckObjectAccess=ObCheckObjectAccess@20
556 ;ObCreateObject=ObCreateObject@36
557 ObCreateObject=ObCreateObject@20
558 ;ObFindHandleForObject=ObFindHandleForObject@20
559 ;ObGetObjectPointerCount=ObGetObjectPointerCount@4
560 ;ObGetObjectSecurity=ObGetObjectSecurity@12
561 ;ObInsertObject=ObInsertObject@24
562 ObMakeTemporaryObject=ObMakeTemporaryObject@4
563 ObOpenObjectByName=ObOpenObjectByName@28
564 ObOpenObjectByPointer=ObOpenObjectByPointer@28
565 ;ObQueryNameString=ObQueryNameString@16
566 ;ObQueryObjectAuditingByHandle=ObQueryObjectAuditingByHandle@8
567 ObfDereferenceObject=@ObfDereferenceObject@4
568 ObfReferenceObject=@ObfReferenceObject@4
569 ObReferenceObjectByHandle=ObReferenceObjectByHandle@24
570 ObReferenceObjectByName=ObReferenceObjectByName@32
571 ObReferenceObjectByPointer=ObReferenceObjectByPointer@16
572 ;ObReleaseObjectSecurity=ObReleaseObjectSecurity@8
573 ;ObSetSecurityDescriptorInfo=ObSetSecurityDescriptorInfo@24
574 ObAddEntryDirectory=ObAddEntryDirectory@12
579 PoCallDriver=PoCallDriver@8
580 PoRegisterDeviceForIdleDetection=PoRegisterDeviceForIdleDetection@16
581 PoRegisterSystemState=PoRegisterSystemState@8
582 PoRequestPowerIrp=PoRequestPowerIrp@24
583 PoSetDeviceBusy=PoSetDeviceBusy@4
584 PoSetPowerState=PoSetPowerState@12
585 PoSetSystemState=PoSetSystemState@4
586 PoStartNextPowerIrp=PoStartNextPowerIrp@4
587 PoUnregisterSystemState=PoUnregisterSystemState@4
588 ;ProbeForWrite=ProbeForWrite@12
589 PsAssignImpersonationToken=PsAssignImpersonationToken@8
590 ;PsChargePoolQuota=PsChargePoolQuota@12
591 PsCreateSystemProcess=PsCreateSystemProcess@12
592 PsCreateSystemThread=PsCreateSystemThread@28
593 PsCreateWin32Process=PsCreateWin32Process@4
594 PsDispatchThread=PsDispatchThread@4
595 PsEstablishWin32Callouts=PsEstablishWin32Callouts@24
596 PsGetCurrentProcessId=PsGetCurrentProcessId@0
597 PsGetCurrentThreadId=PsGetCurrentThreadId@0
598 PsGetCurrentThread=PsGetCurrentThread@0
599 PsGetProcessExitTime=PsGetProcessExitTime@0
600 PsGetVersion=PsGetVersion@16
601 PsImpersonateClient=PsImpersonateClient@20
602 PsInitialSystemProcess DATA
603 PsIsThreadTerminating=PsIsThreadTerminating@4
604 PsLookupProcessByProcessId=PsLookupProcessByProcessId@8
605 PsLookupProcessThreadByCid=PsLookupProcessThreadByCid@12
606 PsLookupThreadByThreadId=PsLookupThreadByThreadId@8
608 PsReferenceImpersonationToken=PsReferenceImpersonationToken@16
609 PsReferencePrimaryToken=PsReferencePrimaryToken@4
611 PsRevertToSelf=PsRevertToSelf@0
612 PsSetCreateProcessNotifyRoutine=PsSetCreateProcessNotifyRoutine@8
613 PsSetCreateThreadNotifyRoutine=PsSetCreateThreadNotifyRoutine@4
614 ;PsSetLegoNotifyRoutine
615 ;PsSetProcessPriorityByClass
616 PsTerminateSystemThread=PsTerminateSystemThread@4
618 READ_REGISTER_UCHAR=READ_REGISTER_UCHAR@4
619 READ_REGISTER_ULONG=READ_REGISTER_ULONG@4
620 READ_REGISTER_USHORT=READ_REGISTER_USHORT@4
621 READ_REGISTER_BUFFER_UCHAR=READ_REGISTER_BUFFER_UCHAR@12
622 READ_REGISTER_BUFFER_ULONG=READ_REGISTER_BUFFER_ULONG@12
623 READ_REGISTER_BUFFER_USHORT=READ_REGISTER_BUFFER_USHORT@12
624 RtlAbsoluteToSelfRelativeSD=RtlAbsoluteToSelfRelativeSD@12
625 RtlAddAccessAllowedAce=RtlAddAccessAllowedAce@16
626 RtlAddAce=RtlAddAce@20
627 RtlAddAtomToAtomTable=RtlAddAtomToAtomTable@12
628 ;RtlAllocateAndInitializeSid
630 RtlAnsiCharToUnicodeChar=RtlAnsiCharToUnicodeChar@4
631 RtlAnsiStringToUnicodeSize=RtlAnsiStringToUnicodeSize@4
632 RtlAnsiStringToUnicodeString=RtlAnsiStringToUnicodeString@12
633 RtlAppendAsciizToString=RtlAppendAsciizToString@8
634 RtlAppendStringToString=RtlAppendStringToString@8
635 RtlAppendUnicodeStringToString=RtlAppendUnicodeStringToString@8
636 RtlAppendUnicodeToString=RtlAppendUnicodeToString@8
637 RtlAreAllAccessesGranted=RtlAreAllAccessesGranted@8
638 RtlAreAnyAccessesGranted=RtlAreAnyAccessesGranted@8
639 RtlAreBitsClear=RtlAreBitsClear@12
640 RtlAreBitsSet=RtlAreBitsSet@12
641 RtlAssert=RtlAssert@16
642 ;RtlCaptureStackBackTrace
643 RtlCharToInteger=RtlCharToInteger@12
644 RtlCheckRegistryKey=RtlCheckRegistryKey@8
645 RtlClearAllBits=RtlClearAllBits@4
646 RtlClearBits=RtlClearBits@12
647 RtlCompareMemory=RtlCompareMemory@12
648 RtlCompareMemoryUlong=RtlCompareMemoryUlong@12
649 RtlCompareString=RtlCompareString@12
650 RtlCompareUnicodeString=RtlCompareUnicodeString@12
653 RtlConvertLongToLargeInteger=RtlConvertLongToLargeInteger@4
654 RtlConvertSidToUnicodeString=RtlConvertSidToUnicodeString@12
655 RtlConvertUlongToLargeInteger=RtlConvertUlongToLargeInteger@4
656 RtlCopyLuid=RtlCopyLuid@8
657 RtlCopySid=RtlCopySid@12
658 RtlCopyString=RtlCopyString@8
659 RtlCopyUnicodeString=RtlCopyUnicodeString@8
660 RtlCreateAcl=RtlCreateAcl@12
661 RtlCreateAtomTable=RtlCreateAtomTable@8
663 RtlCreateRegistryKey=RtlCreateRegistryKey@8
664 RtlCreateSecurityDescriptor=RtlCreateSecurityDescriptor@8
665 RtlCreateUnicodeString=RtlCreateUnicodeString@8
666 RtlCustomCPToUnicodeN=RtlCustomCPToUnicodeN@24
669 ;RtlDecompressFragment
671 RtlDeleteAtomFromAtomTable=RtlDeleteAtomFromAtomTable@8
672 ;RtlDeleteElementGenericTable
674 RtlDeleteRegistryValue=RtlDeleteRegistryValue@12
676 RtlDestroyAtomTable=RtlDestroyAtomTable@4
678 RtlDowncaseUnicodeString=RtlDowncaseUnicodeString@12
679 RtlEmptyAtomTable=RtlEmptyAtomTable@8
680 RtlEnlargedIntegerMultiply=RtlEnlargedIntegerMultiply@8
681 RtlEnlargedUnsignedDivide=RtlEnlargedUnsignedDivide@16
682 RtlEnlargedUnsignedMultiply=RtlEnlargedUnsignedMultiply@8
683 ;RtlEnumerateGenericTable
684 ;RtlEnumerateGenericTableWithoutSplaying
685 RtlEqualLuid=RtlEqualLuid@8
686 RtlEqualSid=RtlEqualSid@8
687 RtlEqualString=RtlEqualString@12
688 RtlEqualUnicodeString=RtlEqualUnicodeString@12
689 RtlExtendedIntegerMultiply=RtlExtendedIntegerMultiply@12
690 RtlExtendedLargeIntegerDivide=RtlExtendedLargeIntegerDivide@16
691 RtlExtendedMagicDivide=RtlExtendedMagicDivide@20
692 RtlFillMemory=RtlFillMemory@12
693 RtlFillMemoryUlong=RtlFillMemoryUlong@12
694 RtlFindClearBits=RtlFindClearBits@12
695 RtlFindClearBitsAndSet=RtlFindClearBitsAndSet@12
696 RtlFindFirstRunClear=RtlFindFirstRunClear@8
697 RtlFindFirstRunSet=RtlFindFirstRunSet@8
698 RtlFindLongestRunClear=RtlFindLongestRunClear@8
699 RtlFindLongestRunSet=RtlFindLongestRunSet@8
700 RtlFindMessage=RtlFindMessage@20
701 RtlFindSetBits=RtlFindSetBits@12
702 RtlFindSetBitsAndClear=RtlFindSetBitsAndClear@12
703 ;RtlFindUnicodePrefix
704 RtlFormatCurrentUserKeyPath=RtlFormatCurrentUserKeyPath@4
705 RtlFreeAnsiString=RtlFreeAnsiString@4
707 RtlFreeOemString=RtlFreeOemString@4
708 RtlFreeUnicodeString=RtlFreeUnicodeString@4
709 ;RtlGenerate8dot3Name
710 ;RtlGetCallersAddress
711 ;RtlGetCompressionWorkSpaceSize
712 RtlGetDaclSecurityDescriptor=RtlGetDaclSecurityDescriptor@16
713 RtlGetDefaultCodePage=RtlGetDefaultCodePage@8
714 ;RtlGetElementGenericTable
715 RtlGetGroupSecurityDescriptor=RtlGetGroupSecurityDescriptor@12
716 RtlGetOwnerSecurityDescriptor=RtlGetOwnerSecurityDescriptor@12
717 RtlImageNtHeader=RtlImageNtHeader@4
718 RtlInitAnsiString=RtlInitAnsiString@8
719 ;RtlInitCodePageTable
720 RtlInitString=RtlInitString@8
721 RtlInitUnicodeString=RtlInitUnicodeString@8
722 RtlInitializeBitMap=RtlInitializeBitMap@12
723 ;RtlInitializeGenericTable
724 RtlInitializeSid=RtlInitializeSid@12
725 ;RtlInitializeUnicodePrefix
726 ;RtlInsertElementGenericTable
727 ;RtlInsertUnicodePrefix
728 RtlIntegerToChar=RtlIntegerToChar@16
729 RtlIntegerToUnicodeString=RtlIntegerToUnicodeString@12
730 ;RtlIsNameLegalDOS8Dot3
731 RtlLargeIntegerAdd=RtlLargeIntegerAdd@16
732 RtlLargeIntegerArithmeticShift=RtlLargeIntegerArithmeticShift@12
733 RtlLargeIntegerDivide=RtlLargeIntegerDivide@20
734 RtlLargeIntegerNegate=RtlLargeIntegerNegate@8
735 RtlLargeIntegerShiftLeft=RtlLargeIntegerShiftLeft@12
736 RtlLargeIntegerShiftRight=RtlLargeIntegerShiftRight@12
737 RtlLargeIntegerSubtract=RtlLargeIntegerSubtract@16
738 RtlLengthRequiredSid=RtlLengthRequiredSid@4
739 RtlLengthSecurityDescriptor=RtlLengthSecurityDescriptor@4
740 RtlLengthSid=RtlLengthSid@4
741 RtlLookupAtomInAtomTable=RtlLookupAtomInAtomTable@12
742 ;RtlLookupElementGenericTable
743 RtlMapGenericMask=RtlMapGenericMask@8
744 RtlMoveMemory=RtlMoveMemory@12
745 RtlMultiByteToUnicodeN=RtlMultiByteToUnicodeN@20
746 RtlMultiByteToUnicodeSize=RtlMultiByteToUnicodeSize@12
747 ;RtlNextUnicodePrefix
748 RtlNtStatusToDosError=RtlNtStatusToDosError@4
749 RtlNtStatusToDosErrorNoTeb=RtlNtStatusToDosErrorNoTeb@4
750 ;RtlNumberGenericTableElements
751 RtlNumberOfClearBits=RtlNumberOfClearBits@4
752 RtlNumberOfSetBits=RtlNumberOfSetBits@4
753 RtlOemStringToCountedUnicodeString=RtlOemStringToCountedUnicodeString@12
754 RtlOemStringToUnicodeSize=RtlOemStringToUnicodeSize@4
755 RtlOemStringToUnicodeString=RtlOemStringToUnicodeString@12
756 RtlPinAtomInAtomTable=RtlPinAtomInAtomTable@8
757 RtlPrefixString=RtlPrefixString@12
758 RtlPrefixUnicodeString=RtlPrefixUnicodeString@12
759 RtlQueryAtomInAtomTable=RtlQueryAtomInAtomTable@24
760 RtlQueryRegistryValues=RtlQueryRegistryValues@20
761 RtlQueryTimeZoneInformation=RtlQueryTimeZoneInformation@4
762 RtlRaiseException=RtlRaiseException@4
764 ;RtlRemoveUnicodePrefix
766 RtlSecondsSince1970ToTime=RtlSecondsSince1970ToTime@8
767 RtlSecondsSince1980ToTime=RtlSecondsSince1980ToTime@8
768 RtlSetAllBits=RtlSetAllBits@4
769 RtlSetBits=RtlSetBits@12
770 RtlSetDaclSecurityDescriptor=RtlSetDaclSecurityDescriptor@16
771 RtlSetGroupSecurityDescriptor=RtlSetGroupSecurityDescriptor@12
772 RtlSetOwnerSecurityDescriptor=RtlSetOwnerSecurityDescriptor@12
773 RtlSetSaclSecurityDescriptor=RtlSetSaclSecurityDescriptor@16
774 RtlSetTimeZoneInformation=RtlSetTimeZoneInformation@4
776 RtlSubAuthorityCountSid=RtlSubAuthorityCountSid@4
777 RtlSubAuthoritySid=RtlSubAuthoritySid@8
778 RtlTimeFieldsToTime=RtlTimeFieldsToTime@8
779 RtlTimeToSecondsSince1970=RtlTimeToSecondsSince1970@8
780 RtlTimeToSecondsSince1980=RtlTimeToSecondsSince1980@8
781 RtlTimeToTimeFields=RtlTimeToTimeFields@8
782 RtlUnicodeStringToAnsiSize=RtlUnicodeStringToAnsiSize@4
783 RtlUnicodeStringToAnsiString=RtlUnicodeStringToAnsiString@12
784 RtlUnicodeStringToCountedOemString=RtlUnicodeStringToCountedOemString@12
785 RtlUnicodeStringToInteger=RtlUnicodeStringToInteger@12
786 RtlUnicodeStringToOemSize=RtlUnicodeStringToOemSize@4
787 RtlUnicodeStringToOemString=RtlUnicodeStringToOemString@12
788 RtlUnicodeToCustomCPN=RtlUnicodeToCustomCPN@24
789 RtlUnicodeToMultiByteN=RtlUnicodeToMultiByteN@20
790 RtlUnicodeToMultiByteSize=RtlUnicodeToMultiByteSize@12
791 RtlUnicodeToOemN=RtlUnicodeToOemN@20
792 RtlUnwind=RtlUnwind@16
793 RtlUpcaseUnicodeChar=RtlUpcaseUnicodeChar@4
794 RtlUpcaseUnicodeString=RtlUpcaseUnicodeString@12
795 RtlUpcaseUnicodeStringToAnsiString=RtlUpcaseUnicodeStringToAnsiString@12
796 RtlUpcaseUnicodeStringToCountedOemString=RtlUpcaseUnicodeStringToCountedOemString@12
797 RtlUpcaseUnicodeStringToOemString=RtlUpcaseUnicodeStringToOemString@12
798 RtlUpcaseUnicodeToCustomCPN=RtlUpcaseUnicodeToCustomCPN@24
799 RtlUpcaseUnicodeToMultiByteN=RtlUpcaseUnicodeToMultiByteN@20
800 RtlUpcaseUnicodeToOemN=RtlUpcaseUnicodeToOemN@20
801 RtlUpperChar=RtlUpperChar@4
802 RtlUpperString=RtlUpperString@8
803 RtlValidSecurityDescriptor=RtlValidSecurityDescriptor@4
804 RtlValidSid=RtlValidSid@4
805 RtlWriteRegistryValue=RtlWriteRegistryValue@24
807 RtlZeroMemory=RtlZeroMemory@8
808 RtlxAnsiStringToUnicodeSize=RtlxAnsiStringToUnicodeSize@4
809 RtlxOemStringToUnicodeSize=RtlxOemStringToUnicodeSize@4
810 RtlxUnicodeStringToAnsiSize=RtlxUnicodeStringToAnsiSize@4
811 RtlxUnicodeStringToOemSize=RtlxUnicodeStringToOemSize@4
812 SeAccessCheck=SeAccessCheck@40
813 ;SeAppendPrivileges=SeAppendPrivileges@8
814 SeAssignSecurity=SeAssignSecurity@28
815 ;SeAuditingFileEvents=SeAuditingFileEvents@8
816 ;SeAuditingFileOrGlobalEvents=SeAuditingFileOrGlobalEvents@18
817 ;SeCaptureSecurityDescriptor=SeCaptureSecurityDescriptor@20
818 SeCaptureSubjectContext=SeCaptureSubjectContext@4
819 ;SeCloseObjectAuditAlarm=SeCloseObjectAuditAlarm@12
820 ;SeCreateAccessState=SeCreateAccessState@16
821 SeCreateClientSecurity=SeCreateClientSecurity@16
822 SeDeassignSecurity=SeDeassignSecurity@4
823 ;SeDeleteAccessState=SeDeleteAccessState@4
824 ;SeDeleteObjectAuditAlarm=SeDeleteObjectAuditAlarm@8
826 ;SeFreePrivileges=SeFreePrivileges@4
827 SeImpersonateClient=SeImpersonateClient@8
828 ;SeLockSubjectContext=SeLockSubjectContext@4
829 ;SeMarkLogonSessionForTerminationNotification=SeMarkLogonSessionForTerminationNotification@4
830 ;SeOpenObjectAuditAlarm=SeOpenObjectAuditAlarm@36
831 ;SeOpenObjectForDeleteAuditAlarm=SeOpenObjectForDeleteAuditAlarm@36
832 SePrivilegeCheck=SePrivilegeCheck@12
833 ;SePrivilegeObjectAuditAlarm=SePrivilegeObjectAuditAlarm@24
834 ;SePublicDefaultDacl DATA
835 ;SeQueryAuthenticationIdToken=SeQueryAuthenticationIdToken@8
836 ;SeQuerySecurityDescriptorInfo=SeQuerySecurityDescriptorInfo@16
837 ;SeRegisterLogonSessionTerminatedRoutine=SeRegisterLogonSessionTerminatedRoutine@4
838 ;SeReleaseSecurityDescriptor=SeReleaseSecurityDescriptor@12
839 SeReleaseSubjectContext=SeReleaseSubjectContext@4
840 ;SeSetAccessStateGenericMapping=SeSetAccessStateGenericMapping@8
841 ;SeSetSecurityDescriptorInfo=SeSetSecurityDescriptorInfo@24
842 ;SeSinglePrivilegeCheck=SeSinglePrivilegeCheck@12
843 ;SeSystemDefaultDacl DATA
844 ;SeTokenImpersonationLevel=SeTokenImpersonationLevel@4
846 ;SeUnlockSubjectContext=SeUnlockSubjectContext@4
847 ;SeUnregisterLogonSessionTerminatedRoutine=SeUnregisterLogonSessionTerminatedRoutine@4
848 ;SeValidSecurityDescriptor=SeValidSecurityDescriptor@8
849 WRITE_REGISTER_UCHAR=WRITE_REGISTER_UCHAR@8
850 WRITE_REGISTER_ULONG=WRITE_REGISTER_ULONG@8
851 WRITE_REGISTER_USHORT=WRITE_REGISTER_USHORT@8
852 WRITE_REGISTER_BUFFER_UCHAR=WRITE_REGISTER_BUFFER_UCHAR@12
853 WRITE_REGISTER_BUFFER_ULONG=WRITE_REGISTER_BUFFER_ULONG@12
854 WRITE_REGISTER_BUFFER_USHORT=WRITE_REGISTER_BUFFER_USHORT@12
855 ZwAccessCheckAndAuditAlarm=ZwAccessCheckAndAuditAlarm@44
856 ZwAlertThread=ZwAlertThread@4
857 ZwAllocateVirtualMemory=ZwAllocateVirtualMemory@24
858 ZwClearEvent=ZwClearEvent@4
860 ZwCloseObjectAuditAlarm=ZwCloseObjectAuditAlarm@12
861 ZwConnectPort=ZwConnectPort@32
862 ZwCreateDirectoryObject=ZwCreateDirectoryObject@12
863 ZwCreateEvent=ZwCreateEvent@20
864 ZwCreateFile=ZwCreateFile@44
865 ZwCreateKey=ZwCreateKey@28
866 ZwCreateSection=ZwCreateSection@28
867 ZwCreateSymbolicLinkObject=ZwCreateSymbolicLinkObject@16
868 ZwDeleteFile=ZwDeleteFile@4
869 ZwDeleteKey=ZwDeleteKey@4
870 ZwDeleteValueKey=ZwDeleteValueKey@8
871 ZwDeviceIoControlFile=ZwDeviceIoControlFile@40
872 ZwDisplayString=ZwDisplayString@4
873 ZwDuplicateObject=ZwDuplicateObject@28
874 ZwDuplicateToken=ZwDuplicateToken@24
875 ZwEnumerateKey=ZwEnumerateKey@24
876 ZwEnumerateValueKey=ZwEnumerateValueKey@24
877 ZwFlushInstructionCache=ZwFlushInstructionCache@12
878 ZwFlushKey=ZwFlushKey@4
879 ZwFreeVirtualMemory=ZwFreeVirtualMemory@16
880 ZwFsControlFile=ZwFsControlFile@40
881 ZwLoadDriver=ZwLoadDriver@4
882 ZwLoadKey=ZwLoadKey@8
883 ZwMakeTemporaryObject=ZwMakeTemporaryObject@4
884 ZwMapViewOfSection=ZwMapViewOfSection@40
885 ZwNotifyChangeKey=ZwNotifyChangeKey@40
886 ZwOpenDirectoryObject=ZwOpenDirectoryObject@12
887 ZwOpenEvent=ZwOpenEvent@12
888 ZwOpenFile=ZwOpenFile@24
889 ZwOpenKey=ZwOpenKey@12
890 ZwOpenProcess=ZwOpenProcess@16
891 ZwOpenProcessToken=ZwOpenProcessToken@12
892 ZwOpenSection=ZwOpenSection@12
893 ZwOpenSymbolicLinkObject=ZwOpenSymbolicLinkObject@12
894 ZwOpenThread=ZwOpenThread@16
895 ZwOpenThreadToken=ZwOpenThreadToken@16
896 ZwPulseEvent=ZwPulseEvent@8
897 ZwQueryDefaultLocale=ZwQueryDefaultLocale@8
898 ZwQueryDirectoryFile=ZwQueryDirectoryFile@44
899 ZwQueryInformationAtom=ZwQueryInformationAtom@20
900 ZwQueryInformationFile=ZwQueryInformationFile@20
901 ZwQueryInformationProcess=ZwQueryInformationProcess@20
902 ZwQueryInformationToken=ZwQueryInformationToken@20
903 ZwQueryKey=ZwQueryKey@20
904 ZwQueryObject=ZwQueryObject@20
905 ZwQuerySection=ZwQuerySection@20
906 ZwQuerySecurityObject=ZwQuerySecurityObject@20
907 ZwQuerySymbolicLinkObject=ZwQuerySymbolicLinkObject@12
908 ZwQuerySystemInformation=ZwQuerySystemInformation@16
909 ZwQuerySystemTime=ZwQuerySystemTime@4
910 ZwQueryValueKey=ZwQueryValueKey@24
911 ZwQueryVolumeInformationFile=ZwQueryVolumeInformationFile@20
912 ZwReadFile=ZwReadFile@36
913 ZwReplaceKey=ZwReplaceKey@12
914 ZwRequestWaitReplyPort=ZwRequestWaitReplyPort@12
915 ZwResetEvent=ZwResetEvent@8
916 ZwSaveKey=ZwSaveKey@8
917 ZwSetDefaultLocale=ZwSetDefaultLocale@8
918 ZwSetEvent=ZwSetEvent@8
919 ZwSetInformationFile=ZwSetInformationFile@20
920 ZwSetInformationObject=ZwSetInformationObject@16
921 ZwSetInformationProcess=ZwSetInformationProcess@16
922 ZwSetInformationThread=ZwSetInformationThread@16
923 ZwSetSystemInformation=ZwSetSystemInformation@12
924 ZwSetSystemTime=ZwSetSystemTime@8
925 ZwSetValueKey=ZwSetValueKey@24
926 ZwTerminateProcess=ZwTerminateProcess@8
927 ZwUnloadDriver=ZwUnloadDriver@4
928 ZwUnloadKey=ZwUnloadKey@4
929 ZwUnmapViewOfSection=ZwUnmapViewOfSection@8
930 ZwWaitForMultipleObjects=ZwWaitForMultipleObjects@20
931 ZwWaitForSingleObject=ZwWaitForSingleObject@12
932 ZwWriteFile=ZwWriteFile@36
933 ZwYieldExecution=ZwYieldExecution@0
934 _abnormal_termination