; $Id: ntoskrnl.def,v 1.153 2003/06/02 10:04:28 ekohl Exp $
;
; reactos/ntoskrnl/ntoskrnl.def
;
; ReactOS Operating System
;
EXPORTS
CcRosInitializeFileCache@8
CcRosReleaseFileCache@4
CcCopyRead@24
CcCopyWrite@20
CcFlushCache@16
CcGetFileObjectFromSectionPtrs@4
CcMapData@24
CcMdlReadComplete@8
CcSetDirtyPinnedData@8
CcSetFileSizes@8
CcUnpinData@4
CcZeroData@16
DbgBreakPoint@0
DbgBreakPointWithStatus@4
;DbgLoadImageSymbols@12
DbgPrint
DbgPrompt@12
DpcQueueSize DATA
@ExAcquireFastMutexUnsafe@4
ExAcquireResourceExclusive@8
ExAcquireResourceExclusiveLite@8
ExAcquireResourceSharedLite@8
ExAcquireSharedStarveExclusive@8
ExAcquireSharedWaitForExclusive@8
ExAllocateFromPagedLookasideList@4
ExAllocatePool@8
ExAllocatePoolWithQuota@8
ExAllocatePoolWithQuotaTag@12
ExAllocatePoolWithTag@12
ExConvertExclusiveToSharedLite@4
ExCreateCallback@16
ExDeleteNPagedLookasideList@4
ExDeletePagedLookasideList@4
ExDeleteResource@4
ExDeleteResourceLite@4
ExDesktopObjectType DATA
ExDisableResourceBoostLite@4
ExEventObjectType DATA
ExExtendZone@12
ExFreePool@4
ExFreeToPagedLookasideList@8
ExGetExclusiveWaiterCount@4
ExGetPreviousMode@0
ExGetSharedWaiterCount@4
ExInitializeNPagedLookasideList@28
ExInitializePagedLookasideList@28
ExInitializeResource@4
ExInitializeResourceLite@4
ExInitializeZone@16
ExInterlockedAddLargeInteger@16
@ExInterlockedAddLargeStatistic@8
ExInterlockedAddUlong@12
@ExInterlockedCompareExchange64@16
ExInterlockedDecrementLong@8
ExInterlockedExchangeUlong@12
ExInterlockedExtendZone@16
ExInterlockedIncrementLong@8
ExInterlockedInsertHeadList@12
ExInterlockedInsertTailList@12
ExInterlockedPopEntryList@8
@ExInterlockedPopEntrySList@8
ExInterlockedPushEntryList@12
@ExInterlockedPushEntrySList@12
ExInterlockedRemoveHeadList@8
ExIsProcessorFeaturePresent@4
ExIsResourceAcquiredExclusiveLite@4
ExIsResourceAcquiredSharedLite@4
ExLocalTimeToSystemTime@8
ExNotifyCallback@12
ExPostSystemEvent@12
;ExQueryPoolBlockSize
ExQueueWorkItem@8
ExRaiseAccessViolation@0
ExRaiseDatatypeMisalignment@0
;ExRaiseException
;ExRaiseHardError
ExRaiseStatus@4
ExRegisterCallback@12
ExReinitializeResourceLite@4
@ExReleaseFastMutexUnsafe@4
ExReleaseResourceForThread@8
ExReleaseResourceForThreadLite@8
@ExReleaseResourceLite@4
ExSetResourceOwnerPointer@8
;ExSystemExceptionFilter
ExSystemTimeToLocalTime@8
ExTryToAcquireResourceExclusiveLite@4
ExUnregisterCallback@4
ExWindowStationObjectType DATA
ExInitializeBinaryTree@12
ExDeleteBinaryTree@4
ExInsertBinaryTree@12
ExSearchBinaryTree@12
ExRemoveBinaryTree@12
ExTraverseBinaryTree@16
ExInitializeSplayTree@16
ExDeleteSplayTree@4
ExInsertSplayTree@12
ExSearchSplayTree@12
ExRemoveSplayTree@12
ExWeightOfSplayTree@8
ExTraverseSplayTree@16
ExInitializeHashTable@16
ExDeleteHashTable@4
ExInsertHashTable@16
ExSearchHashTable@16
ExRemoveHashTable@16
@ExfInterlockedAddUlong@12
@ExfInterlockedInsertHeadList@12
@ExfInterlockedInsertTailList@12
@ExfInterlockedPopEntryList@8
@ExfInterlockedPushEntryList@12
@ExfInterlockedRemoveHeadList@8
@Exfi386InterlockedDecrementLong@4
@Exfi386InterlockedExchangeUlong@8
@Exfi386InterlockedIncrementLong@4
Exi386InterlockedDecrementLong@4
Exi386InterlockedExchangeUlong@8
Exi386InterlockedIncrementLong@4
FsRtlAddLargeMcbEntry@28
FsRtlAddMcbEntry@16
FsRtlAddToTunnelCache@32
FsRtlAllocateFileLock@8
FsRtlAllocatePool@8
FsRtlAllocatePoolWithQuota@8
FsRtlAllocatePoolWithQuotaTag@12
FsRtlAllocatePoolWithTag@12
FsRtlAllocateResource@0
FsRtlAreNamesEqual@16
FsRtlBalanceReads@4
FsRtlCheckLockForReadAccess@8
FsRtlCheckLockForWriteAccess@8
FsRtlCheckOplock@20
FsRtlCopyRead@32
FsRtlCopyWrite@32
FsRtlCurrentBatchOplock@4
FsRtlDeleteKeyFromTunnelCache@12
FsRtlDeleteTunnelCache@4
FsRtlDeregisterUncProvider@4
FsRtlDissectDbcs@16
FsRtlDissectName@16
FsRtlDoesDbcsContainWildCards@4
FsRtlDoesNameContainWildCards@4
FsRtlFastCheckLockForRead@24
FsRtlFastCheckLockForWrite@24
FsRtlFastUnlockAll@16
FsRtlFastUnlockAllByKey@20
FsRtlFastUnlockSingle@32
FsRtlFindInTunnelCache@32
FsRtlGetFileSize@8
FsRtlGetNextFileLock@8
FsRtlGetNextLargeMcbEntry@20
FsRtlGetNextMcbEntry@20
FsRtlInitializeFileLock@12
FsRtlInitializeLargeMcb@8
FsRtlInitializeMcb@8
FsRtlInitializeOplock@4
FsRtlInitializeTunnelCache@4
FsRtlIsDbcsInExpression@8
FsRtlIsFatDbcsLegal@20
FsRtlIsHpfsDbcsLegal@20
FsRtlIsNameInExpression@16
FsRtlIsNtstatusExpected@4
FsRtlIsTotalDeviceFailure@4
FsRtlLegalAnsiCharacterArray DATA
FsRtlLookupLargeMcbEntry@32
FsRtlLookupLastLargeMcbEntry@12
FsRtlLookupLastMcbEntry@12
FsRtlLookupMcbEntry@20
FsRtlMdlRead@24
FsRtlMdlReadComplete@8
FsRtlMdlReadCompleteDev@12
FsRtlMdlReadDev@28
FsRtlMdlWriteComplete@12
FsRtlMdlWriteCompleteDev@16
FsRtlNormalizeNtstatus@8
FsRtlNotifyChangeDirectory@28
FsRtlNotifyCleanup@12
FsRtlNotifyFullChangeDirectory@40
FsRtlNotifyFullReportChange@36
FsRtlNotifyInitializeSync@4
FsRtlNotifyReportChange@20
FsRtlNotifyUninitializeSync@4
FsRtlNotifyVolumeEvent@8
FsRtlNumberOfRunsInLargeMcb@4
FsRtlNumberOfRunsInMcb@4
FsRtlOplockFsctrl@12
FsRtlOplockIsFastIoPossible@4
FsRtlPostPagingFileStackOverflow@12
FsRtlPostStackOverflow@12
FsRtlPrepareMdlWrite@24
FsRtlPrepareMdlWriteDev@28
FsRtlPrivateLock@48
FsRtlProcessFileLock@12
FsRtlRegisterUncProvider@12
FsRtlRemoveLargeMcbEntry@20
FsRtlRemoveMcbEntry@12
FsRtlSplitLargeMcb@20
FsRtlSyncVolumes@12
FsRtlTruncateLargeMcb@12
FsRtlTruncateMcb@8
FsRtlUninitializeFileLock@4
FsRtlUninitializeLargeMcb@4
FsRtlUninitializeMcb@4
FsRtlUninitializeOplock@4
HalDispatchTable DATA
HalPrivateDispatchTable DATA
@InterlockedCompareExchange@12
@InterlockedDecrement@4
@InterlockedExchange@8
@InterlockedExchangeAdd@8
@InterlockedIncrement@4
IoAcquireCancelSpinLock@4
IoAcquireRemoveLockEx@20
IoAcquireVpbSpinLock@4
IoAdapterObjectType DATA
IoAllocateAdapterChannel@20
IoAllocateController@16
IoAllocateErrorLogEntry@8
IoAllocateIrp@8
IoAllocateMdl@20
IoAssignResources@24
IoAttachDevice@12
IoAttachDeviceByPointer@8
IoAttachDeviceToDeviceStack@8
IoBuildAsynchronousFsdRequest@24
IoBuildDeviceIoControlRequest@36
IoBuildPartialMdl@16
IoBuildSynchronousFsdRequest@28
IoCallDriver@8
IoCancelIrp@4
IoCheckDesiredAccess@8
IoCheckEaBufferValidity@12
IoCheckFunctionAccess@24
IoCheckShareAccess@20
IoCompleteRequest@8
IoConnectInterrupt@44
IoCreateController@4
IoCreateDevice@28
IoCreateFile@56
IoCreateNotificationEvent@8
IoCreateStreamFileObject@8
IoCreateSymbolicLink@8
IoCreateSynchronizationEvent@8
IoCreateUnprotectedSymbolicLink@8
IoDeleteController@4
IoDeleteDevice@4
IoDeleteSymbolicLink@4
IoDetachDevice@4
IoDeviceHandlerObjectSize DATA
IoDeviceHandlerObjectType DATA
IoDisconnectInterrupt@4
IoDeviceObjectType DATA
IoDriverObjectType DATA
IoEnqueueIrp@4
IoFastQueryNetworkAttributes@20
IoFileObjectType DATA
IoFreeController@4
IoFreeIrp@4
IoFreeMdl@4
IoGetAttachedDevice@4
IoGetAttachedDeviceReference@4
IoGetBaseFileSystemDeviceObject@4
IoGetConfigurationInformation@0
IoGetCurrentProcess@0
IoGetDeviceObjectPointer@16
IoGetDeviceToVerify@4
IoGetFileObjectGenericMapping@0
IoGetInitialStack@0
IoGetRelatedDeviceObject@4
IoGetRequestorProcess@4
IoGetStackLimits@8
IoGetTopLevelIrp@0
IoInitializeIrp@12
IoInvalidateDeviceState@4
IoInitializeRemoveLockEx@20
IoInitializeTimer@12
IoIsOperationSynchronous@4
IoMakeAssociatedIrp@8
IoOpenDeviceInstanceKey@20
IoPageRead@20
IoQueryDeviceDescription@32
IoQueryDeviceEnumInfo@8
IoQueryFileInformation@20
IoQueryVolumeInformation@20
IoQueueThreadIrp@4
IoRaiseHardError@12
IoRaiseInformationalHardError@12
IoReadOperationCount DATA
IoReadPartitionTable@16
IoReadTransferCount DATA

IoFreeWorkItem@4
IoAllocateWorkItem@4
IoQueueWorkItem@16
IoRegisterDeviceInterface@16
IoSetDeviceInterfaceState@8
IoGetDeviceProperty@20
IoOpenDeviceRegistryKey@16
IoInvalidateDeviceRelations@8

IoRegisterDriverReinitialization@12
IoRegisterFileSystem@4
IoRegisterFsRegistrationChange@8
IoRegisterShutdownNotification@4
IoReleaseCancelSpinLock@4
IoReleaseRemoveLockAndWaitEx@12
IoReleaseRemoveLockEx@12
IoReleaseVpbSpinLock@4
IoRemoveShareAccess@8
IoReportHalResourceUsage@16
IoReportResourceUsage@36
IoSetDeviceToVerify@8
IoSetHardErrorOrVerifyDevice@8
IoSetInformation@16
IoSetPartitionInformation@16
IoSetShareAccess@16
IoSetThreadHardErrorMode@4
IoSetTopLevelIrp@4
IoStartNextPacket@8
IoStartNextPacketByKey@12
IoStartPacket@16
IoStartTimer@4
IoStatisticsLock DATA
IoStopTimer@4
IoSynchronousPageWrite@20
IoThreadToProcess@4
IoUnregisterFileSystem@4
IoUnregisterFsRegistrationChange@8
IoUnregisterShutdownNotification@4
IoUpdateShareAccess@8
IoVerifyVolume@8
IoWriteErrorLogEntry@4
IoWriteOperationCount DATA
IoWritePartitionTable@20
IoWriteTransferCount DATA
@IofCallDriver@8
@IofCompleteRequest@8
KdDebuggerEnabled DATA
KdDebuggerNotPresent DATA
KdPollBreakIn@0
KdSystemDebugControl@4
Ke386CallBios@8
;Ke386IoSetAccessProcess
;Ke386QueryIoAccessMap
;Ke386SetIoAccessMap
KeAcquireSpinLockAtDpcLevel@4
KeAddSystemServiceTable@20
KeAttachProcess@4
;KeBoostCurrentThread
KeBugCheck@4
KeBugCheckEx@20
KeCancelTimer@4
KeClearEvent@4
KeConnectInterrupt@4
KeDcacheFlushCount DATA
KeDelayExecutionThread@12
KeDeregisterBugCheckCallback@4
KeDetachProcess@0
KeDisconnectInterrupt@4
KeEnterCriticalRegion@0
KeEnterKernelDebugger@0
;KeFindConfigurationEntry
;KeFindConfigurationNextEntry
;KeFlushEntireTb
KeGetCurrentThread@0
KeGetPreviousMode@0
;KeI386AbiosCall
;KeI386AllocateGdtSelectors
;KeI386Call16BitCStyleFunction
;KeI386Call16BitFunction
;KeI386FlatToGdtSelector
;KeI386GetLid
;KeI386MachineType DATA
;KeI386ReleaseGdtSelectors
;KeI386ReleaseLid
;KeI386SetGdtSelector
KeIcacheFlushCount DATA
KeInitializeApc@32
KeInitializeDeviceQueue@4
KeInitializeDpc@12
KeInitializeEvent@12
KeInitializeInterrupt@44
KeInitializeMutant@8
KeInitializeMutex@8
KeInitializeQueue@8
KeInitializeSemaphore@12
KeInitializeSpinLock@4
KeInitializeTimer@4
KeInitializeTimerEx@8
KeInsertByKeyDeviceQueue@12
KeInsertDeviceQueue@8
KeInsertHeadQueue@8
KeInsertQueue@8
KeInsertQueueApc@16
KeInsertQueueDpc@12
;KeIsExecutingDpc
KeLeaveCriticalRegion@0
KeLoaderBlock DATA
KeNumberProcessors DATA
;KeProfileInterrupt
;KeProfileInterruptWithSource
KePulseEvent@12
KeQuerySystemTime@4
KeQueryTickCount@4
KeQueryTimeIncrement@0
;KeRaiseUserException
KeRescheduleThread@0
KeReadStateEvent@4
KeReadStateMutant@4
KeReadStateMutex@4
KeReadStateQueue@4
KeReadStateSemaphore@4
KeReadStateTimer@4
KeRegisterBugCheckCallback@20
KeReleaseMutant@16
KeReleaseMutex@8
KeReleaseSemaphore@16
KeReleaseSpinLockFromDpcLevel@4
KeRemoveByKeyDeviceQueue@8
KeRemoveDeviceQueue@4
KeRemoveEntryDeviceQueue@8
KeRemoveQueue@12
KeRemoveQueueDpc@4
KeResetEvent@4
;KeRestoreFloatingPointState
KeRundownQueue@4
;KeSaveFloatingPointState
KeServiceDescriptorTable DATA
KeSetAffinityThread@8
KeSetBasePriorityThread@8
;KeSetDmaIoCoherency
KeSetEvent@12
;KeSetEventBoostPriority
;KeSetIdealProcessorThread
KeSetImportanceDpc@8
;KeSetKernelStackSwapEnable
KeSetPriorityThread@8
;KeSetProfileIrql
;@KeSetSwapContextNotifyRoutine
KeSetTargetProcessorDpc@8
;@KeSetThreadSelectNotifyRoutine
;KeSetTimeIncrement
KeSetTimer@16
KeSetTimerEx@20
;@KeSetTimeUpdateNotifyRoutine
KeSynchronizeExecution@12
;KeTerminateThread
KeTickCount DATA
;KeUpdateRunTime
;KeUserModeCallback
KeWaitForMultipleObjects@32
KeWaitForMutexObject@20
KeWaitForSingleObject@20
;@KefAcquireSpinLockAtDpcLevel
;@KefReleaseSpinLockFromDpcLevel
;Kei386EoiHelper
;@KiAcquireSpinLock@4
;KiBugCheckData DATA
;KiCoprocessorError@0
KiDeliverApc@12
KiDispatchInterrupt@0
KiInterruptDispatch2@8
;KiIpiServiceRoutine@8
;@KiReleaseSpinLock@4
;KiUnexpectedInterrupt
;Kii386SpinOnSpinLock
KiRawTicks DATA
LdrAccessResource@16
;LdrEnumResources@20
;LdrFindResourceDirectory_U@16
LdrFindResource_U@16
;LpcRequestPort@8
LsaCallAuthenticationPackage@28
LsaDeregisterLogonProcess@8
LsaFreeReturnBuffer@4
LsaLogonUser@56
LsaLookupAuthenticationPackage@12
LsaRegisterLogonProcess@12
MmAdjustWorkingSetSize@12
MmAllocateContiguousAlignedMemory@16
MmAllocateContiguousMemory@12
MmAllocateNonCachedMemory@4
MmBuildMdlForNonPagedPool@4
MmCanFileBeTruncated@8
MmCopyFromCaller@12
MmCopyToCaller@12
MmCreateMdl@12
MmCreateSection@32
MmDbgTranslatePhysicalAddress@8
MmDisableModifiedWriteOfSection@4
MmFlushImageSection@8
MmForceSectionClosed@8
MmFreeContiguousMemory@4
MmFreeNonCachedMemory@8
MmGetPhysicalAddress@4
MmGrowKernelStack@4
MmHighestUserAddress DATA
MmIsAddressValid@4
MmIsNonPagedSystemAddressValid@4
MmIsRecursiveIoFault@0
MmIsThisAnNtAsSystem@0
MmLockPagableDataSection@4
MmLockPagableImageSection@4=MmLockPagableDataSection@4
MmLockPagableSectionByHandle@4
MmMapIoSpace@16
MmMapLockedPages@8
MmMapMemoryDumpMdl@4
MmMapVideoDisplay@16
MmMapViewInSystemSpace@12
MmMapViewOfSection@40
MmPageEntireDriver@4
MmProbeAndLockPages@12
MmQuerySystemSize@0
MmResetDriverPaging@4
MmSectionObjectType DATA
MmSecureVirtualMemory@12
MmSetAddressRangeModified@8
MmSetBankedSection@24
MmSizeOfMdl@8
MmUnlockPagableImageSection@4
MmUnlockPages@4
MmUnmapIoSpace@8
MmUnmapLockedPages@8
MmUnmapVideoDisplay@8
MmUnmapViewInSystemSpace@4
MmUnmapViewOfSection@8
MmUnsecureVirtualMemory@4
MmUserProbeAddress DATA
NlsAnsiCodePage DATA
NlsLeadByteInfo DATA
NlsMbCodePageTag DATA
NlsMbOemCodePageTag DATA
NlsOemLeadByteInfo DATA
NtAddAtom@8
NtAdjustPrivilegesToken@24
NtAlertThread@4
NtAllocateLocallyUniqueId@4
NtAllocateUuids@12
NtAllocateVirtualMemory@24
NtBuildNumber DATA
NtClose@4
NtConnectPort@32
NtCreateEvent@20
NtCreateTimer@16
NtOpenEvent@12
NtCreateFile@44
NtCreateSection@28
NtDeleteAtom@4
NtDeleteFile@4
NtDeviceIoControlFile@40
NtDuplicateObject@28
NtDuplicateToken@24
NtFindAtom@8
NtFreeVirtualMemory@16
NtFsControlFile@40
NtGlobalFlag DATA
NtLockFile@40
NtMapViewOfSection@40
NtNotifyChangeDirectoryFile@36
NtOpenFile@24
NtOpenProcess@16
NtOpenProcessToken@12
NtQueryDirectoryFile@44
NtQueryEaFile@36
NtQueryInformationAtom@20
NtQueryInformationFile@20
NtQueryInformationProcess@20
NtQueryInformationToken@20
;NtQueryOleDirectoryFile@ <--- ?
NtQuerySecurityObject@20
NtQuerySystemTime@4
NtQueryVolumeInformationFile@20
NtReadFile@36
NtRequestPort@20
NtRequestWaitReplyPort@12
NtSetEvent@8
NtSetInformationFile@20
NtSetInformationProcess@16
NtSetInformationThread@16
NtSetSecurityObject@12
NtSetSystemTime@8
NtUnlockFile@20
NtVdmControl@8
NtW32Call@20
NtWaitForSingleObject@12
NtWriteFile@36
ObAssignSecurity@16
;ObCheckCreateObjectAccess@28
;ObCheckObjectAccess@20
;ObCreateObject@36
ObCreateObject@20
;ObFindHandleForObject@20
ObGetObjectPointerCount@4
ObGetObjectSecurity@12
;ObInsertObject@24
ObMakeTemporaryObject@4
ObOpenObjectByName@28
ObOpenObjectByPointer@28
ObQueryNameString@16
;ObQueryObjectAuditingByHandle@8
@ObfDereferenceObject@4
@ObfReferenceObject@4
ObReferenceObjectByHandle@24
ObReferenceObjectByName@32
ObReferenceObjectByPointer@16
ObReleaseObjectSecurity@8
;ObSetSecurityDescriptorInfo@24
;PfxFindPrefix
;PfxInitialize
;PfxInsertPrefix
;PfxRemovePrefix
PoCallDriver@8
PoRegisterDeviceForIdleDetection@16
PoRegisterSystemState@8
PoRequestPowerIrp@24
PoSetDeviceBusy@4
PoSetPowerState@12
PoSetSystemState@4
PoStartNextPowerIrp@4
PoUnregisterSystemState@4
;ProbeForWrite@12
PsAssignImpersonationToken@8
;PsChargePoolQuota@12
PsCreateSystemProcess@12
PsCreateSystemThread@28
PsCreateWin32Thread@4
PsCreateWin32Process@4
PsGetWin32Thread@0
PsGetWin32Process@0
PsEstablishWin32Callouts@24
PsGetCurrentProcessId@0
PsGetCurrentThreadId@0
PsGetProcessExitTime@0
PsGetVersion@16
PsImpersonateClient@20
PsInitialSystemProcess DATA
PsIsThreadTerminating@4
PsLookupProcessByProcessId@8
PsLookupProcessThreadByCid@12
PsLookupThreadByThreadId@8
PsProcessType DATA
PsReferenceImpersonationToken@16
PsReferencePrimaryToken@4
;PsReturnPoolQuota@12
PsRevertToSelf@0
PsSetCreateProcessNotifyRoutine@8
PsSetCreateThreadNotifyRoutine@4
;PsSetLegoNotifyRoutine@4
;PsSetProcessPriorityByClass@8
PsTerminateSystemThread@4
PsThreadType DATA
READ_REGISTER_UCHAR@4
READ_REGISTER_ULONG@4
READ_REGISTER_USHORT@4
READ_REGISTER_BUFFER_UCHAR@12
READ_REGISTER_BUFFER_ULONG@12
READ_REGISTER_BUFFER_USHORT@12
RtlAbsoluteToSelfRelativeSD@12
RtlAddAccessAllowedAce@16
RtlAddAce@20
RtlAddAtomToAtomTable@12
;RtlAllocateAndInitializeSid
;RtlAllocateHeap
RtlAnsiCharToUnicodeChar@4
RtlAnsiStringToUnicodeSize@4
RtlAnsiStringToUnicodeString@12
RtlAppendAsciizToString@8
RtlAppendStringToString@8
RtlAppendUnicodeStringToString@8
RtlAppendUnicodeToString@8
RtlAreAllAccessesGranted@8
RtlAreAnyAccessesGranted@8
RtlAreBitsClear@12
RtlAreBitsSet@12
RtlAssert@16
;RtlCaptureStackBackTrace
RtlCharToInteger@12
RtlCheckRegistryKey@8
RtlClearAllBits@4
RtlClearBits@12
RtlCompareMemory@12
RtlCompareMemoryUlong@12
RtlCompareString@12
RtlCompareUnicodeString@12
RtlCompressBuffer@32
RtlCompressChunks@28
RtlConvertLongToLargeInteger@4
RtlConvertSidToUnicodeString@12
RtlConvertUlongToLargeInteger@4
RtlCopyLuid@8
RtlCopySid@12
RtlCopyString@8
RtlCopyUnicodeString@8
RtlCreateAcl@12
RtlCreateAtomTable@8
;RtlCreateHeap
RtlCreateRegistryKey@8
RtlCreateSecurityDescriptor@8
RtlCreateUnicodeString@8
RtlCustomCPToUnicodeN@24
RtlDecompressBuffer@24
RtlDecompressChunks@28
RtlDecompressFragment@32
;RtlDelete
RtlDeleteAtomFromAtomTable@8
;RtlDeleteElementGenericTable
;RtlDeleteNoSplay
RtlDeleteRegistryValue@12
RtlDescribeChunk@20
RtlDestroyAtomTable@4
;RtlDestroyHeap
RtlDowncaseUnicodeString@12
RtlEmptyAtomTable@8
RtlEnlargedIntegerMultiply@8
RtlEnlargedUnsignedDivide@16
RtlEnlargedUnsignedMultiply@8
;RtlEnumerateGenericTable
;RtlEnumerateGenericTableWithoutSplaying
RtlEqualLuid@8
RtlEqualSid@8
RtlEqualString@12
RtlEqualUnicodeString@12
RtlExtendedIntegerMultiply@12
RtlExtendedLargeIntegerDivide@16
RtlExtendedMagicDivide@20
RtlFillMemory@12
RtlFillMemoryUlong@12
RtlFindClearBits@12
RtlFindClearBitsAndSet@12
RtlFindFirstRunClear@8
RtlFindFirstRunSet@8
RtlFindLongestRunClear@8
RtlFindLongestRunSet@8
RtlFindMessage@20
RtlFindSetBits@12
RtlFindSetBitsAndClear@12
;RtlFindUnicodePrefix
RtlFormatCurrentUserKeyPath@4
RtlFreeAnsiString@4
;RtlFreeHeap
RtlFreeOemString@4
RtlFreeUnicodeString@4
RtlGenerate8dot3Name@16
;RtlGetCallersAddress
RtlGetCompressionWorkSpaceSize@12
RtlGetDaclSecurityDescriptor@16
RtlGetDefaultCodePage@8
;RtlGetElementGenericTable
RtlGetGroupSecurityDescriptor@12
RtlGetOwnerSecurityDescriptor@12
RtlImageNtHeader@4
RtlInitAnsiString@8
RtlInitCodePageTable@8
RtlInitString@8
RtlInitUnicodeString@8
RtlInitializeBitMap@12
;RtlInitializeGenericTable
RtlInitializeSid@12
;RtlInitializeUnicodePrefix
;RtlInsertElementGenericTable
;RtlInsertUnicodePrefix
RtlIntegerToChar@16
RtlIntegerToUnicodeString@12
RtlIsNameLegalDOS8Dot3@12
RtlLargeIntegerAdd@16
RtlLargeIntegerArithmeticShift@12
RtlLargeIntegerDivide@20
RtlLargeIntegerNegate@8
RtlLargeIntegerShiftLeft@12
RtlLargeIntegerShiftRight@12
RtlLargeIntegerSubtract@16
RtlLengthRequiredSid@4
RtlLengthSecurityDescriptor@4
RtlLengthSid@4
RtlLookupAtomInAtomTable@12
;RtlLookupElementGenericTable
RtlMapGenericMask@8
RtlMoveMemory@12
RtlMultiByteToUnicodeN@20
RtlMultiByteToUnicodeSize@12
;RtlNextUnicodePrefix
RtlNtStatusToDosError@4
RtlNtStatusToDosErrorNoTeb@4
;RtlNumberGenericTableElements
RtlNumberOfClearBits@4
RtlNumberOfSetBits@4
RtlOemStringToCountedUnicodeString@12
RtlOemStringToUnicodeSize@4
RtlOemStringToUnicodeString@12
RtlOemToUnicodeN@20
RtlPinAtomInAtomTable@8
RtlPrefixString@12
RtlPrefixUnicodeString@12
RtlQueryAtomInAtomTable@24
RtlQueryRegistryValues@20
RtlQueryTimeZoneInformation@4
RtlRaiseException@4
;RtlRandom
;RtlRemoveUnicodePrefix
RtlReserveChunk@20
RtlSecondsSince1970ToTime@8
RtlSecondsSince1980ToTime@8
RtlSetAllBits@4
RtlSetBits@12
RtlSetDaclSecurityDescriptor@16
RtlSetGroupSecurityDescriptor@12
RtlSetOwnerSecurityDescriptor@12
RtlSetSaclSecurityDescriptor@16
RtlSetTimeZoneInformation@4
;RtlSplay
RtlSubAuthorityCountSid@4
RtlSubAuthoritySid@8
RtlTimeFieldsToTime@8
RtlTimeToSecondsSince1970@8
RtlTimeToSecondsSince1980@8
RtlTimeToTimeFields@8
RtlUnicodeStringToAnsiSize@4
RtlUnicodeStringToAnsiString@12
RtlUnicodeStringToCountedOemString@12
RtlUnicodeStringToInteger@12
RtlUnicodeStringToOemSize@4
RtlUnicodeStringToOemString@12
RtlUnicodeToCustomCPN@24
RtlUnicodeToMultiByteN@20
RtlUnicodeToMultiByteSize@12
RtlUnicodeToOemN@20
RtlUnwind@16
RtlUpcaseUnicodeChar@4
RtlUpcaseUnicodeString@12
RtlUpcaseUnicodeStringToAnsiString@12
RtlUpcaseUnicodeStringToCountedOemString@12
RtlUpcaseUnicodeStringToOemString@12
RtlUpcaseUnicodeToCustomCPN@24
RtlUpcaseUnicodeToMultiByteN@20
RtlUpcaseUnicodeToOemN@20
RtlUpperChar@4
RtlUpperString@8
RtlValidSecurityDescriptor@4
RtlValidSid@4
RtlWriteRegistryValue@24
;RtlZeroHeap
RtlZeroMemory@8
RtlxAnsiStringToUnicodeSize@4
RtlxOemStringToUnicodeSize@4
RtlxUnicodeStringToAnsiSize@4
RtlxUnicodeStringToOemSize@4
SeAccessCheck@40
;SeAppendPrivileges@8
SeAssignSecurity@28
;SeAuditingFileEvents@8
;SeAuditingFileOrGlobalEvents@18
;SeCaptureSecurityDescriptor@20
SeCaptureSubjectContext@4
;SeCloseObjectAuditAlarm@12
;SeCreateAccessState@16
SeCreateClientSecurity@16
SeDeassignSecurity@4
;SeDeleteAccessState@4
;SeDeleteObjectAuditAlarm@8
SeExports DATA
;SeFreePrivileges@4
SeImpersonateClient@8
;SeLockSubjectContext@4
;SeMarkLogonSessionForTerminationNotification@4
;SeOpenObjectAuditAlarm@36
;SeOpenObjectForDeleteAuditAlarm@36
SePrivilegeCheck@12
;SePrivilegeObjectAuditAlarm@24
SePublicDefaultDacl DATA
;SeQueryAuthenticationIdToken@8
;SeQuerySecurityDescriptorInfo@16
;SeRegisterLogonSessionTerminatedRoutine@4
;SeReleaseSecurityDescriptor@12
SeReleaseSubjectContext@4
;SeSetAccessStateGenericMapping@8
;SeSetSecurityDescriptorInfo@24
SeSinglePrivilegeCheck@12
SeSystemDefaultDacl DATA
SeTokenImpersonationLevel@4
SeTokenType@4
;SeUnlockSubjectContext@4
;SeUnregisterLogonSessionTerminatedRoutine@4
;SeValidSecurityDescriptor@8
WRITE_REGISTER_UCHAR@8
WRITE_REGISTER_ULONG@8
WRITE_REGISTER_USHORT@8
WRITE_REGISTER_BUFFER_UCHAR@12
WRITE_REGISTER_BUFFER_ULONG@12
WRITE_REGISTER_BUFFER_USHORT@12
ZwAccessCheckAndAuditAlarm@44
ZwAlertThread@4
ZwAllocateVirtualMemory@24
ZwClearEvent@4
ZwClose@4
ZwCloseObjectAuditAlarm@12
ZwConnectPort@32
ZwCreateDirectoryObject@12
ZwCreateEvent@20
ZwCreateFile@44
ZwCreateKey@28
ZwCreateSection@28
ZwCreateSymbolicLinkObject@16
ZwDeleteFile@4
ZwDeleteKey@4
ZwDeleteValueKey@8
ZwDeviceIoControlFile@40
ZwDisplayString@4
ZwDuplicateObject@28
ZwDuplicateToken@24
ZwEnumerateKey@24
ZwEnumerateValueKey@24
ZwFlushInstructionCache@12
ZwFlushKey@4
ZwFreeVirtualMemory@16
ZwFsControlFile@40
ZwLoadDriver@4
ZwLoadKey@8
ZwMakeTemporaryObject@4
ZwMapViewOfSection@40
ZwNotifyChangeKey@40
ZwOpenDirectoryObject@12
ZwOpenEvent@12
ZwOpenFile@24
ZwOpenKey@12
ZwOpenProcess@16
ZwOpenProcessToken@12
ZwOpenSection@12
ZwOpenSymbolicLinkObject@12
ZwOpenThread@16
ZwOpenThreadToken@16
ZwPulseEvent@8
ZwQueryDefaultLocale@8
ZwQueryDirectoryFile@44
ZwQueryInformationAtom@20
ZwQueryInformationFile@20
ZwQueryInformationProcess@20
ZwQueryInformationToken@20
ZwQueryKey@20
ZwQueryObject@20
ZwQuerySection@20
ZwQuerySecurityObject@20
ZwQuerySymbolicLinkObject@12
ZwQuerySystemInformation@16
ZwQuerySystemTime@4
ZwQueryValueKey@24
ZwQueryVolumeInformationFile@20
ZwReadFile@36
ZwReplaceKey@12
ZwRequestWaitReplyPort@12
ZwResetEvent@8
ZwSaveKey@8
ZwSetDefaultLocale@8
ZwSetEvent@8
ZwSetInformationFile@20
ZwSetInformationObject@16
ZwSetInformationProcess@16
ZwSetInformationThread@16
ZwSetSystemInformation@12
ZwSetSystemTime@8
ZwSetValueKey@24
ZwTerminateProcess@8
ZwUnloadDriver@4
ZwUnloadKey@4
ZwUnmapViewOfSection@8
ZwWaitForMultipleObjects@20
ZwWaitForSingleObject@12
ZwWriteFile@36
ZwYieldExecution@0
_abnormal_termination
_alldiv@4
_allmul@4
_allrem@4
_allshl@4
_allshr@4
_aulldiv@4
_aullrem@4
_aullshr@4
_except_handler2
_except_handler3
_global_unwind2
_itoa
_local_unwind2
_purecall
_snprintf
_snwprintf
_stricmp
_strlwr
_strnicmp
_strnset
_strrev
_strset
_strupr
_vsnprintf
_wcsicmp
_wcslwr
_wcsnicmp
_wcsnset
_wcsrev
_wcsupr
atoi
atol
isdigit
islower
isprint
isspace
isupper
isxdigit
mbstowcs
mbtowc
memchr
memcpy
memmove
memset
qsort
rand
sprintf
srand
strcat
strchr
strcmp
strcpy
strlen
strncat
strncmp
strncpy
strrchr
strspn
strstr
swprintf
tolower
toupper
towlower
towupper
vsprintf
wcscat
wcschr
wcscmp
wcscpy
wcscspn
wcslen
wcsncat
wcsncmp
wcsncpy
wcsrchr
wcsspn
wcsstr
wcstombs
wctomb