-; $Id: ntoskrnl.def,v 1.174 2004/02/03 14:23:29 ekohl Exp $
+; $Id$
;
; reactos/ntoskrnl/ntoskrnl.def
;
EXPORTS
CcRosInitializeFileCache@8
CcRosReleaseFileCache@4
+CcRosTraceCacheMap@8
+CcCanIWrite@16
CcCopyRead@24
CcCopyWrite@20
+CcDeferWrite@24
+CcFastCopyRead@24
+CcFastCopyWrite@16
CcFlushCache@16
+CcGetDirtyPages@16
+CcGetFileObjectFromBcb@4
CcGetFileObjectFromSectionPtrs@4
+CcGetFlushedValidData@8
+CcGetLsnForFileObject@8
+CcInitializeCacheMap@20
+CcIsThereDirtyData@4
+CcFastMdlReadWait DATA
+CcFastReadNotPossible DATA
+CcFastReadWait DATA
CcMapData@24
+CcMdlRead@20
CcMdlReadComplete@8
+CcMdlWriteAbort@8
+CcMdlWriteComplete@12
+CcPinMappedData@20
+CcPinRead@24
+CcPrepareMdlWrite@20
+CcPreparePinWrite@28
+CcPurgeCacheSection@16
+CcRemapBcb@4
+CcRepinBcb@4
+CcScheduleReadAhead@12
+CcSetAdditionalCacheAttributes@12
+CcSetBcbOwnerPointer@8
+CcSetDirtyPageThreshold@8
CcSetDirtyPinnedData@8
+CcSetLogHandleForFile@12
+CcSetReadAheadGranularity@8
+CcUninitializeCacheMap@12
+CcUnpinData@4
+CcUnpinDataForThread@8
+CcUnpinRepinnedBcb@12
+CcWaitForCurrentLazyWriterActivity@0
CcSetFileSizes@8
CcUnpinData@4
CcZeroData@16
+CmRegisterCallback@12
+CmUnRegisterCallback@8
DbgBreakPoint@0
DbgBreakPointWithStatus@4
-;DbgLoadImageSymbols@12
+DbgLoadImageSymbols@12
DbgPrint
DbgPrompt@12
-DpcQueueSize DATA
+DbgPrintEx
+DbgPrintReturnControlC
+DbgQueryDebugFilterState@8
+DbgSetDebugFilterState@12
+@ExiAcquireFastMutex@4=@ExAcquireFastMutex@4
@ExAcquireFastMutexUnsafe@4
+ExAcquireRundownProtection=@ExfAcquireRundownProtection@4
+ExAcquireRundownProtectionCacheAware=@ExfAcquireRundownProtectionCacheAware@4
+ExAcquireRundownProtectionCacheAwareEx=@ExfAcquireRundownProtectionCacheAwareEx@8
+ExAcquireRundownProtectionEx=@ExfAcquireRundownProtectionEx@8
+ExInitializeRundownProtection=@ExfInitializeRundownProtection@4
+ExReInitializeRundownProtection=@ExfReInitializeRundownProtection@4
+ExReInitializeRundownProtectionCacheAware=@ExfReInitializeRundownProtectionCacheAware@4
+ExReleaseRundownProtection=@ExfReleaseRundownProtection@4
+ExReleaseRundownProtectionCacheAware=@ExfReleaseRundownProtectionCacheAware@4
+ExReleaseRundownProtectionCacheAwareEx=@ExfReleaseRundownProtectionCacheAwareEx@8
+ExReleaseRundownProtectionEx=@ExfReleaseRundownProtectionEx@8
+ExRundownCompleted=@ExfRundownCompleted@4
+ExRundownCompletedCacheAware=@ExfRundownCompletedCacheAware@4
+ExWaitForRundownProtectionRelease=@ExfWaitForRundownProtectionRelease@4
+ExWaitForRundownProtectionReleaseCacheAware=@ExfWaitForRundownProtectionReleaseCacheAware@4
+ExAllocateCacheAwareRundownProtection@8
+ExFreeCacheAwareRundownProtection@4
+ExInitializeRundownProtectionCacheAware@8
+ExSizeOfRundownProtectionCacheAware@0
ExAcquireResourceExclusive@8
ExAcquireResourceExclusiveLite@8
ExAcquireResourceSharedLite@8
ExAcquireSharedStarveExclusive@8
ExAcquireSharedWaitForExclusive@8
-@ExAllocateFromPagedLookasideList@4
+ExAllocateFromPagedLookasideList@4=ExiAllocateFromPagedLookasideList@4
ExAllocatePool@8
ExAllocatePoolWithQuota@8
ExAllocatePoolWithQuotaTag@12
ExAllocatePoolWithTag@12
+ExAllocatePoolWithTagPriority@16
ExConvertExclusiveToSharedLite@4
ExCreateCallback@16
ExDeleteNPagedLookasideList@4
ExDeleteResourceLite@4
ExDesktopObjectType DATA
ExDisableResourceBoostLite@4
+ExEnumHandleTable@16
+@ExEnterCriticalRegionAndAcquireFastMutexUnsafe@4
ExEventObjectType DATA
ExExtendZone@12
ExFreePool@4
ExFreePoolWithTag@8
-ExFreeToPagedLookasideList@8
+ExFreeToPagedLookasideList@8=ExiFreeToPagedLookasideList@8
+ExGetCurrentProcessorCounts@12
+ExGetCurrentProcessorCpuUsage@4
ExGetExclusiveWaiterCount@4
ExGetPreviousMode@0
ExGetSharedWaiterCount@4
ExInitializeZone@16
ExInterlockedAddLargeInteger@16
@ExInterlockedAddLargeStatistic@8
-@ExInterlockedAddUlong@12
+ExInterlockedAddUlong@12
@ExInterlockedCompareExchange64@16
ExInterlockedDecrementLong@8
ExInterlockedExchangeUlong@12
ExInterlockedExtendZone@16
ExInterlockedIncrementLong@8
-@ExInterlockedInsertHeadList@12
-@ExInterlockedInsertTailList@12
-@ExInterlockedPopEntryList@8
+@ExInterlockedFlushSList@4
+ExInterlockedInsertHeadList@12
+ExInterlockedInsertTailList@12
+ExInterlockedPopEntryList@8
@ExInterlockedPopEntrySList@8
-@ExInterlockedPushEntryList@12
+ExInterlockedPushEntryList@12
@ExInterlockedPushEntrySList@12
-@ExInterlockedRemoveHeadList@8
+ExInterlockedRemoveHeadList@8
ExIsProcessorFeaturePresent@4
ExIsResourceAcquiredExclusiveLite@4
ExIsResourceAcquiredSharedLite@4
ExLocalTimeToSystemTime@8
ExNotifyCallback@12
-ExPostSystemEvent@12
-;ExQueryPoolBlockSize
+ExQueryPoolBlockSize@8
ExQueueWorkItem@8
ExRaiseAccessViolation@0
ExRaiseDatatypeMisalignment@0
-;ExRaiseException
-;ExRaiseHardError
-ExRaiseStatus@4
+ExRaiseException@4=RtlRaiseException@4
+ExRaiseHardError@24
+ExRaiseStatus@4=RtlRaiseStatus@4
ExRegisterCallback@12
ExReinitializeResourceLite@4
+@ExiReleaseFastMutex@4=@ExReleaseFastMutex@4
@ExReleaseFastMutexUnsafe@4
+@ExReleaseFastMutexUnsafeAndLeaveCriticalRegion@4
ExReleaseResourceForThread@8
ExReleaseResourceForThreadLite@8
@ExReleaseResourceLite@4
+ExSemaphoreObjectType DATA
ExSetResourceOwnerPointer@8
-;ExSystemExceptionFilter
+ExSetTimerResolution@8
+ExSystemExceptionFilter@0
ExSystemTimeToLocalTime@8
ExTryToAcquireResourceExclusiveLite@4
ExUnregisterCallback@4
+ExUuidCreate@4
+ExVerifySuite@4
ExWindowStationObjectType DATA
-ExInitializeBinaryTree@12
-ExDeleteBinaryTree@4
-ExInsertBinaryTree@12
-ExSearchBinaryTree@12
-ExRemoveBinaryTree@12
-ExTraverseBinaryTree@16
-ExInitializeSplayTree@16
-ExDeleteSplayTree@4
-ExInsertSplayTree@12
-ExSearchSplayTree@12
-ExRemoveSplayTree@12
-ExWeightOfSplayTree@8
-ExTraverseSplayTree@16
-ExInitializeHashTable@16
-ExDeleteHashTable@4
-ExInsertHashTable@16
-ExSearchHashTable@16
-ExRemoveHashTable@16
@ExfInterlockedAddUlong@12
@ExfInterlockedInsertHeadList@12
@ExfInterlockedInsertTailList@12
+@ExfInterlockedCompareExchange64@12
@ExfInterlockedPopEntryList@8
@ExfInterlockedPushEntryList@12
@ExfInterlockedRemoveHeadList@8
@Exfi386InterlockedExchangeUlong@8
@Exfi386InterlockedIncrementLong@4
Exi386InterlockedDecrementLong@4
-Exi386InterlockedExchangeUlong@8
+Exi386InterlockedExchangeUlong@12
Exi386InterlockedIncrementLong@4
+FsRtlAcquireFileExclusive@4
FsRtlAddLargeMcbEntry@28
FsRtlAddMcbEntry@16
FsRtlAddToTunnelCache@32
FsRtlFastUnlockAllByKey@20
FsRtlFastUnlockSingle@32
FsRtlFindInTunnelCache@32
+FsRtlFreeFileLock@4
FsRtlGetFileSize@8
FsRtlGetNextFileLock@8
FsRtlGetNextLargeMcbEntry@20
FsRtlGetNextMcbEntry@20
+FsRtlIncrementCcFastReadNotPossible@0
+FsRtlIncrementCcFastReadNoWait@0
+FsRtlIncrementCcFastReadResourceMiss@0
+FsRtlIncrementCcFastReadWait@0
FsRtlInitializeFileLock@12
FsRtlInitializeLargeMcb@8
FsRtlInitializeMcb@8
FsRtlInitializeOplock@4
FsRtlInitializeTunnelCache@4
+FsRtlInsertPerFileObjectContext@8
+FsRtlInsertPerStreamContext@8
FsRtlIsDbcsInExpression@8
FsRtlIsFatDbcsLegal@20
FsRtlIsHpfsDbcsLegal@20
FsRtlIsNameInExpression@16
FsRtlIsNtstatusExpected@4
+FsRtlIsPagingFile@4
FsRtlIsTotalDeviceFailure@4
FsRtlLegalAnsiCharacterArray DATA
FsRtlLookupLargeMcbEntry@32
FsRtlLookupLastLargeMcbEntry@12
+FsRtlLookupLastLargeMcbEntryAndIndex@16
FsRtlLookupLastMcbEntry@12
FsRtlLookupMcbEntry@20
+FsRtlLookupPerFileObjectContext@12
+FsRtlLookupPerStreamContextInternal@12
FsRtlMdlRead@24
FsRtlMdlReadComplete@8
FsRtlMdlReadCompleteDev@12
FsRtlNormalizeNtstatus@8
FsRtlNotifyChangeDirectory@28
FsRtlNotifyCleanup@12
+FsRtlNotifyFilterChangeDirectory@44
+FsRtlNotifyFilterReportChange@40
FsRtlNotifyFullChangeDirectory@40
FsRtlNotifyFullReportChange@36
FsRtlNotifyInitializeSync@4
FsRtlPrivateLock@48
FsRtlProcessFileLock@12
FsRtlRegisterUncProvider@12
+FsRtlReleaseFile@4
FsRtlRemoveLargeMcbEntry@20
FsRtlRemoveMcbEntry@12
+FsRtlRemovePerFileObjectContext@12
+FsRtlRemovePerStreamContext@12
+FsRtlResetLargeMcb@8
FsRtlSplitLargeMcb@20
FsRtlSyncVolumes@12
+FsRtlTeardownPerStreamContexts@4
FsRtlTruncateLargeMcb@12
FsRtlTruncateMcb@8
FsRtlUninitializeFileLock@4
FsRtlUninitializeOplock@4
HalDispatchTable DATA
HalPrivateDispatchTable DATA
+@HalExamineMBR@16
InbvAcquireDisplayOwnership@0
InbvCheckDisplayOwnership@0
InbvDisplayString@4
InbvSetScrollRegion@16
InbvSetTextColor@4
InbvSolidColorFill@20
+InitSafeBootMode DATA
@InterlockedCompareExchange@12
@InterlockedDecrement@4
@InterlockedExchange@8
@InterlockedExchangeAdd@8
@InterlockedIncrement@4
-@InterlockedPopEntrySList@4
@InterlockedPushEntrySList@8
+@InterlockedPopEntrySList@4
IoAcquireCancelSpinLock@4
IoAcquireRemoveLockEx@20
IoAcquireVpbSpinLock@4
IoAdapterObjectType DATA
IoAllocateAdapterChannel@20
-IoAllocateController@16
-IoAllocateErrorLogEntry@8
IoAllocateIrp@8
IoAllocateMdl@20
+IoAllocateController@16
+IoAllocateDriverObjectExtension@16
+IoAllocateErrorLogEntry@8
IoAllocateWorkItem@4
+IoAssignDriveLetters@16
IoAssignResources@24
IoAttachDevice@12
IoAttachDeviceByPointer@8
IoAttachDeviceToDeviceStack@8
+IoAttachDeviceToDeviceStackSafe@12
IoBuildAsynchronousFsdRequest@24
IoBuildDeviceIoControlRequest@36
IoBuildPartialMdl@16
IoBuildSynchronousFsdRequest@28
IoCallDriver@8
+IoCancelFileOpen@8
IoCancelIrp@4
IoCheckDesiredAccess@8
IoCheckEaBufferValidity@12
IoCheckFunctionAccess@24
+IoCheckQuerySetFileInformation@12
+IoCheckQuerySetVolumeInformation@12
+IoCheckQuotaBufferValidity@12
IoCheckShareAccess@20
IoCompleteRequest@8
IoConnectInterrupt@44
IoCreateController@4
IoCreateDevice@28
+IoCreateDisk@8
+IoCreateDriver@8
IoCreateFile@56
+IoCreateFileSpecifyDeviceObjectHint@60
IoCreateNotificationEvent@8
IoCreateStreamFileObject@8
+IoCreateStreamFileObjectEx@12
+IoCreateStreamFileObjectLite@8
IoCreateSymbolicLink@8
IoCreateSynchronizationEvent@8
IoCreateUnprotectedSymbolicLink@8
+IoCsqInitialize@28
+IoCsqInitializeEx@28
+IoCsqInsertIrp@12
+IoCsqInsertIrpEx@16
+IoCsqRemoveIrp@8
+IoCsqRemoveNextIrp@8
IoDeleteController@4
IoDeleteDevice@4
+IoDeleteDriver@4
IoDeleteSymbolicLink@4
IoDetachDevice@4
IoDeviceHandlerObjectSize DATA
IoDeviceHandlerObjectType DATA
-IoDisconnectInterrupt@4
IoDeviceObjectType DATA
+IoDisconnectInterrupt@4
IoDriverObjectType DATA
IoEnqueueIrp@4
+IoEnumerateDeviceObjectList@16
IoFastQueryNetworkAttributes@20
IoFileObjectType DATA
+IoForwardAndCatchIrp@8=IoForwardIrpSynchronously@8
+IoForwardIrpSynchronously@8
IoFreeController@4
+IoFreeErrorLogEntry@4
IoFreeIrp@4
IoFreeMdl@4
IoFreeWorkItem@4
IoGetAttachedDevice@4
IoGetAttachedDeviceReference@4
IoGetBaseFileSystemDeviceObject@4
+IoGetBootDiskInformation@8
IoGetConfigurationInformation@0
IoGetCurrentProcess@0
IoGetDeviceObjectPointer@16
+IoGetDeviceAttachmentBaseRef@4
+IoGetDeviceInterfaceAlias@12
+IoGetDeviceInterfaces@16
+IoGetDriverObjectExtension@8
IoGetDeviceProperty@20
IoGetDeviceToVerify@4
+IoGetDiskDeviceObject@8
+IoGetDmaAdapter@12
IoGetFileObjectGenericMapping@0
IoGetInitialStack@0
+IoGetLowerDeviceObject@4
IoGetRelatedDeviceObject@4
IoGetRequestorProcess@4
+IoGetRequestorProcessId@4
+IoGetRequestorSessionId@8
IoGetStackLimits@8
IoGetTopLevelIrp@0
IoInitializeIrp@12
IoInvalidateDeviceState@4
IoInitializeRemoveLockEx@20
IoInitializeTimer@12
+IoIsFileOriginRemote@4
+IoIsSystemThread@4
+IoIsValidNameGraftingBuffer@8
IoIsOperationSynchronous@4
IoMakeAssociatedIrp@8
-IoOpenDeviceInstanceKey@20
+IoOpenDeviceInterfaceRegistryKey@12
IoOpenDeviceRegistryKey@16
IoPageRead@20
+IoPnPDeliverServicePowerNotification@16
IoQueryDeviceDescription@32
-IoQueryDeviceEnumInfo@8
+IoQueryFileDosDeviceName@8
IoQueryFileInformation@20
IoQueryVolumeInformation@20
IoQueueThreadIrp@4
IoQueueWorkItem@16
IoRaiseHardError@12
IoRaiseInformationalHardError@12
+IoReadDiskSignature@12
IoReadOperationCount DATA
-IoReadPartitionTable@16
+@IoReadPartitionTable@16
+IoReadPartitionTableEx@8
IoReadTransferCount DATA
+IoRegisterBootDriverReinitialization@12
IoRegisterDeviceInterface@16
IoRegisterDriverReinitialization@12
IoRegisterFileSystem@4
IoRegisterFsRegistrationChange@8
+IoRegisterLastChanceShutdownNotification@4
+IoRegisterPlugPlayNotification@28
IoRegisterShutdownNotification@4
IoReleaseCancelSpinLock@4
IoReleaseRemoveLockAndWaitEx@12
IoReleaseRemoveLockEx@12
IoReleaseVpbSpinLock@4
IoRemoveShareAccess@8
+IoReportDetectedDevice@32
IoReportHalResourceUsage@16
IoReportResourceUsage@36
+IoReportResourceForDetection@28
+IoReportTargetDeviceChange@8
+IoReportTargetDeviceChangeAsynchronous@16
+IoRequestDeviceEject@4
+IoReuseIrp@8
+IoSetCompletionRoutineEx@28
+IoSetSystemPartition@4
IoSetDeviceInterfaceState@8
IoSetDeviceToVerify@8
+IoSetFileOrigin@8
IoSetHardErrorOrVerifyDevice@8
IoSetInformation@16
-IoSetPartitionInformation@16
+IoSetIoCompletion@24
+@IoSetPartitionInformation@16
+IoSetPartitionInformationEx@12
+IoSetStartIoAttributes@12
IoSetShareAccess@16
IoSetThreadHardErrorMode@4
IoSetTopLevelIrp@4
IoStatisticsLock DATA
IoStopTimer@4
IoSynchronousPageWrite@20
+IoSynchronousInvalidateDeviceRelations@8
IoThreadToProcess@4
IoUnregisterFileSystem@4
IoUnregisterFsRegistrationChange@8
+IoUnregisterPlugPlayNotification@4
IoUnregisterShutdownNotification@4
IoUpdateShareAccess@8
+IoValidateDeviceIoControlAccess@8
+IoVerifyPartitionTable@8
IoVerifyVolume@8
+IoVolumeDeviceToDosName@8
+IoWMIAllocateInstanceIds@12
+IoWMIDeviceObjectToInstanceName@12
+IoWMIExecuteMethod@24
+IoWMIHandleToInstanceName@12
+IoWMIOpenBlock@12
+IoWMIQueryAllData@12
+IoWMIQueryAllDataMultiple@16
+IoWMIQuerySingleInstance@16
+IoWMIQuerySingleInstanceMultiple@20
+IoWMIRegistrationControl@8
+IoWMISetNotificationCallback@12
+IoWMISetSingleInstance@20
+IoWMISetSingleItem@24
+IoWMISuggestInstanceName@16
+IoWMIWriteEvent@4
IoWriteErrorLogEntry@4
IoWriteOperationCount DATA
-IoWritePartitionTable@20
+@IoWritePartitionTable@20
+IoWritePartitionTableEx@8
IoWriteTransferCount DATA
@IofCallDriver@8
@IofCompleteRequest@8
+IoIsWdmVersionAvailable@8
KdDebuggerEnabled DATA
KdDebuggerNotPresent DATA
+KdDisableDebugger@0
+KdEnableDebugger@0
+KdEnteredDebugger
KdPollBreakIn@0
-KdSystemDebugControl@4
+KdPowerTransition@4
+KdpServiceDispatcher@12
Ke386CallBios@8
Ke386IoSetAccessProcess@8
Ke386QueryIoAccessMap@8
Ke386SetIoAccessMap@8
+@KeAcquireGuardedMutex@4
+@KeAcquireGuardedMutexUnsafe@4
KeAcquireSpinLockAtDpcLevel@4
+@KeAcquireDispatcherDatabaseLockAtDpcLevel@0
+@KeAcquireInStackQueuedSpinLockAtDpcLevel@8
+KeAcquireInterruptSpinLock@4
KeAddSystemServiceTable@20
+KeAreApcsDisabled@0
KeAttachProcess@4
;KeBoostCurrentThread
KeBugCheck@4
KeBugCheckEx@20
KeCancelTimer@4
+KeCapturePersistentThreadState@28
KeClearEvent@4
KeConnectInterrupt@4
KeDcacheFlushCount DATA
KeDelayExecutionThread@12
KeDeregisterBugCheckCallback@4
+KeDeregisterBugCheckReasonCallback@4
KeDetachProcess@0
KeDisconnectInterrupt@4
KeEnterCriticalRegion@0
+KeEnterGuardedRegion@0
KeEnterKernelDebugger@0
-;KeFindConfigurationEntry
-;KeFindConfigurationNextEntry
-;KeFlushEntireTb
+KeFindConfigurationEntry@16
+KeFindConfigurationNextEntry@20
+KeFlushEntireTb@8
+KeFlushQueuedDpcs@0
KeGetCurrentThread@0
KeGetPreviousMode@0
+KeGetRecommendedSharedDataAlignment@0
;KeI386AbiosCall
-;KeI386AllocateGdtSelectors
+KeI386AllocateGdtSelectors@8
;KeI386Call16BitCStyleFunction
;KeI386Call16BitFunction
-;KeI386FlatToGdtSelector
+KeI386FlatToGdtSelector@12
;KeI386GetLid
;KeI386MachineType DATA
-;KeI386ReleaseGdtSelectors
+KeI386ReleaseGdtSelectors@8
;KeI386ReleaseLid
;KeI386SetGdtSelector
KeIcacheFlushCount DATA
KeInitializeDeviceQueue@4
KeInitializeDpc@12
KeInitializeEvent@12
+@KeInitializeGuardedMutex@4
KeInitializeInterrupt@44
KeInitializeMutant@8
KeInitializeMutex@8
KeInsertQueue@8
KeInsertQueueApc@16
KeInsertQueueDpc@12
-;KeIsExecutingDpc
+KeIsAttachedProcess@0
+KeIsExecutingDpc@0
KeLeaveCriticalRegion@0
+KeLeaveGuardedRegion@0
KeLoaderBlock DATA
KeNumberProcessors DATA
-;KeProfileInterrupt
-;KeProfileInterruptWithSource
+KeProfileInterrupt@4
+KeProfileInterruptWithSource@8
KePulseEvent@12
+KeQueryActiveProcessors@0
+KeQueryInterruptTime@0
+KeQueryPriorityThread@4
+KeQueryRuntimeThread@8
KeQuerySystemTime@4
KeQueryTickCount@4
KeQueryTimeIncrement@0
-;KeRaiseUserException
-KeRescheduleThread@0
+KeRaiseUserException@4
KeReadStateEvent@4
KeReadStateMutant@4
-KeReadStateMutex@4
+KeReadStateMutex@4=KeReadStateMutant@4
KeReadStateQueue@4
KeReadStateSemaphore@4
KeReadStateTimer@4
KeRegisterBugCheckCallback@20
+KeRegisterBugCheckReasonCallback@16
+@KeReleaseDispatcherDatabaseLockFromDpcLevel@0
+@KeReleaseGuardedMutexUnsafe@4
+@KeReleaseGuardedMutex@4
+@KeReleaseInStackQueuedSpinLockFromDpcLevel@4
+KeReleaseInterruptSpinLock@8
KeReleaseMutant@16
KeReleaseMutex@8
KeReleaseSemaphore@16
KeReleaseSpinLockFromDpcLevel@4
KeRemoveByKeyDeviceQueue@8
+KeRemoveByKeyDeviceQueueIfBusy@8
KeRemoveDeviceQueue@4
KeRemoveEntryDeviceQueue@8
KeRemoveQueue@12
KeRemoveQueueDpc@4
+KeRemoveSystemServiceTable@4
KeResetEvent@4
KeRestoreFloatingPointState@4
+KeRevertToUserAffinityThread@0
KeRundownQueue@4
KeSaveFloatingPointState@4
+KeSaveStateForHibernate
KeServiceDescriptorTable DATA
KeSetAffinityThread@8
KeSetBasePriorityThread@8
-;KeSetDmaIoCoherency
+KeSetDmaIoCoherency@4
KeSetEvent@12
-;KeSetEventBoostPriority
-;KeSetIdealProcessorThread
+KeSetEventBoostPriority@8
+KeSetIdealProcessorThread@8
KeSetImportanceDpc@8
-;KeSetKernelStackSwapEnable
+KeSetKernelStackSwapEnable@4
KeSetPriorityThread@8
-;KeSetProfileIrql
-;@KeSetSwapContextNotifyRoutine
+KeSetProfileIrql@4
+KeSetSystemAffinityThread@4
+;KeSetSwapContextNotifyRoutine
KeSetTargetProcessorDpc@8
-;@KeSetThreadSelectNotifyRoutine
-;KeSetTimeIncrement
+;KeSetThreadSelectNotifyRoutine
+KeSetTimeIncrement@8
KeSetTimer@16
KeSetTimerEx@20
-;@KeSetTimeUpdateNotifyRoutine
+@KeSetTimeUpdateNotifyRoutine@4
+KeStackAttachProcess@8
KeSynchronizeExecution@12
-;KeTerminateThread
+KeTerminateThread@4
KeTickCount DATA
-;KeUpdateRunTime
-;KeUserModeCallback
+@KeTryToAcquireGuardedMutex@4
+KeUpdateRunTime@8
+KeUpdateSystemTime@8
+KeUnstackDetachProcess@4
+KeUserModeCallback@20
KeWaitForMultipleObjects@32
-KeWaitForMutexObject@20
+KeWaitForMutexObject@20=KeWaitForSingleObject@20
KeWaitForSingleObject@20
-;@KefAcquireSpinLockAtDpcLevel
-;@KefReleaseSpinLockFromDpcLevel
+@KefAcquireSpinLockAtDpcLevel@4
+@KefReleaseSpinLockFromDpcLevel@4
;Kei386EoiHelper
@KiAcquireSpinLock@4
;KiBugCheckData DATA
-;KiCoprocessorError@0
+KiCoprocessorError@0
+KiCheckForKernelApcDelivery@0
KiDeliverApc@12
KiDispatchInterrupt@0
+KiEnableTimerWatchdog
KiInterruptDispatch2@8
-;KiIpiServiceRoutine@8
+KiIpiServiceRoutine@8
@KiReleaseSpinLock@4
-;KiUnexpectedInterrupt
+KiUnexpectedInterrupt@0
;Kii386SpinOnSpinLock
KiRawTicks DATA
LdrAccessResource@16
-;LdrEnumResources@20
-;LdrFindResourceDirectory_U@16
+LdrEnumResources@20
+LdrFindResourceDirectory_U@16
LdrFindResource_U@16
-;LpcRequestPort@8
+LpcPortObjectType DATA
+LpcRequestPort@8
+LpcRequestWaitReplyPort@12
LsaCallAuthenticationPackage@28
LsaDeregisterLogonProcess@8
LsaFreeReturnBuffer@4
LsaLogonUser@56
LsaLookupAuthenticationPackage@12
LsaRegisterLogonProcess@12
+Mm64BitPhysicalAddress DATA
+MmAddPhysicalMemory@8
+MmAddVerifierThunks@8
MmAdjustWorkingSetSize@12
-MmAllocateContiguousAlignedMemory@36
+MmAdvanceMdl@8
MmAllocateContiguousMemory@12
MmAllocateContiguousMemorySpecifyCache@32
+MmAllocateMappingAddress@8
MmAllocateNonCachedMemory@4
+MmAllocatePagesForMdl@28
MmBuildMdlForNonPagedPool@4
MmCanFileBeTruncated@8
-MmCopyFromCaller@12
-MmCopyToCaller@12
MmCreateMdl@12
MmCreateSection@32
MmDbgTranslatePhysicalAddress@8
MmForceSectionClosed@8
MmFreeContiguousMemory@4
MmFreeContiguousMemorySpecifyCache@12
+MmFreeMappingAddress@8
MmFreeNonCachedMemory@8
+MmFreePagesFromMdl@4
MmGetPhysicalAddress@4
+MmGetPhysicalMemoryRanges@0
+MmGetSystemRoutineAddress@4
+MmGetVirtualForPhysical@8
MmGrowKernelStack@4
MmHighestUserAddress DATA
MmIsAddressValid@4
+MmIsDriverVerifying@4
MmIsNonPagedSystemAddressValid@4
MmIsRecursiveIoFault@0
MmIsThisAnNtAsSystem@0
+MmIsVerifierEnabled@4
MmLockPagableDataSection@4
MmLockPagableImageSection@4=MmLockPagableDataSection@4
MmLockPagableSectionByHandle@4
MmMapIoSpace@16
MmMapLockedPages@8
+MmMapLockedPagesSpecifyCache@24
+MmMapLockedPagesWithReservedMapping@16
MmMapMemoryDumpMdl@4
+MmMapUserAddressesToPage@12
MmMapVideoDisplay@16
+MmMapViewInSessionSpace@12
MmMapViewInSystemSpace@12
MmMapViewOfSection@40
+MmMarkPhysicalMemoryAsBad@8
+MmMarkPhysicalMemoryAsGood@8
MmPageEntireDriver@4
+MmPrefetchPages@8
MmProbeAndLockPages@12
+MmProbeAndLockProcessPages@16
+MmProbeAndLockSelectedPages@16
+MmProtectMdlSystemAddress@8
MmQuerySystemSize@0
+MmRemovePhysicalMemory@8
MmResetDriverPaging@4
MmSectionObjectType DATA
MmSecureVirtualMemory@12
MmSetAddressRangeModified@8
MmSetBankedSection@24
MmSizeOfMdl@8
+MmSystemRangeStart DATA
+MmTrimAllSystemPagableMemory@4
MmUnlockPagableImageSection@4
MmUnlockPages@4
MmUnmapIoSpace@8
MmUnmapLockedPages@8
+MmUnmapReservedMapping@12
MmUnmapVideoDisplay@8
+MmUnmapViewInSessionSpace@4
MmUnmapViewInSystemSpace@4
MmUnmapViewOfSection@8
MmUnsecureVirtualMemory@4
NlsLeadByteInfo DATA
NlsMbCodePageTag DATA
NlsMbOemCodePageTag DATA
+NlsOemCodePage DATA
NlsOemLeadByteInfo DATA
-NtAddAtom@8
+NtAddAtom@12
NtAdjustPrivilegesToken@24
NtAlertThread@4
NtAllocateLocallyUniqueId@4
-NtAllocateUuids@12
+NtAllocateUuids@16
NtAllocateVirtualMemory@24
NtBuildNumber DATA
NtClose@4
NtDeviceIoControlFile@40
NtDuplicateObject@28
NtDuplicateToken@24
-NtFindAtom@8
+NtFindAtom@12
NtFreeVirtualMemory@16
NtFsControlFile@40
NtGlobalFlag DATA
NtLockFile@40
+NtMakePermanentObject@4
NtMapViewOfSection@40
NtNotifyChangeDirectoryFile@36
NtOpenFile@24
NtOpenProcess@16
NtOpenProcessToken@12
+NtOpenProcessTokenEx@16
+NtOpenThread@16
+NtOpenThreadToken@16
+NtOpenThreadTokenEx@20
NtQueryDirectoryFile@44
NtQueryEaFile@36
NtQueryInformationAtom@20
NtQueryInformationFile@20
NtQueryInformationProcess@20
+NtQueryInformationThread@20
NtQueryInformationToken@20
-;NtQueryOleDirectoryFile@ <--- ?
+NtQueryQuotaInformationFile@36
NtQuerySecurityObject@20
+NtQuerySystemInformation@16
NtQuerySystemTime@4
NtQueryVolumeInformationFile@20
NtReadFile@36
-NtRequestPort@20
+NtRequestPort@8
NtRequestWaitReplyPort@12
+NtSetEaFile@16
NtSetEvent@8
NtSetInformationFile@20
NtSetInformationProcess@16
NtSetInformationThread@16
+NtSetQuotaInformationFile@16
NtSetSecurityObject@12
+NtSetVolumeInformationFile@20
NtSetSystemTime@8
+NtShutdownSystem@4
+NtTraceEvent@16
NtUnlockFile@20
NtVdmControl@8
NtW32Call@20
;ObCheckCreateObjectAccess@28
;ObCheckObjectAccess@20
ObCreateObject@36
-;ObFindHandleForObject@20
+ObDereferenceSecurityDescriptor@8
+ObFindHandleForObject@20
ObGetObjectPointerCount@4
ObGetObjectSecurity@12
ObInsertObject@24
+ObLogSecurityDescriptor@12
ObMakeTemporaryObject@4
ObOpenObjectByName@28
ObOpenObjectByPointer@28
;PfxInsertPrefix
;PfxRemovePrefix
PoCallDriver@8
+PoQueueShutdownWorkItem@4
PoRegisterDeviceForIdleDetection@16
PoRegisterSystemState@8
PoRequestPowerIrp@24
ProbeForRead@12
ProbeForWrite@12
PsAssignImpersonationToken@8
-;PsChargePoolQuota@12
+PsChargePoolQuota@12
+PsChargeProcessNonPagedPoolQuota@4=PsDereferenceImpersonationToken@4
+PsChargeProcessPagedPoolQuota@8
+PsChargeProcessPoolQuota@12
PsCreateSystemProcess@12
PsCreateSystemThread@28
-PsCreateWin32Process@4
-PsEstablishWin32Callouts@24
+PsDereferenceImpersonationToken@4=PsDereferencePrimaryToken@4
+PsDereferencePrimaryToken@4
+PsDisableImpersonation@8
+PsEstablishWin32Callouts@4
+PsGetCurrentProcess@0=KeGetCurrentProcess@0
PsGetCurrentProcessId@0
+PsGetCurrentProcessSessionId@0
+PsGetCurrentThread@0=KeGetCurrentThread@0
PsGetCurrentThreadId@0
+PsGetCurrentThreadPreviousMode@0
+PsGetCurrentThreadStackBase@0
+PsGetCurrentThreadStackLimit@0
+PsGetJobLock@4
+PsGetJobSessionId@4
+PsGetJobUIRestrictionsClass@4
+PsGetProcessCreateTimeQuadPart@4
+PsGetProcessDebugPort@4
+PsGetProcessExitProcessCalled@4
+PsGetProcessExitStatus@4
PsGetProcessExitTime@0
+PsGetProcessId@4
+PsGetProcessImageFileName@4
+PsGetProcessInheritedFromUniqueProcessId@4
+PsGetProcessJob@4
+PsGetProcessPeb@4
+PsGetProcessPriorityClass@4
+PsGetProcessSectionBaseAddress@4
+PsGetProcessSecurityPort@4
+PsGetProcessSessionId@4
+PsGetProcessWin32Process@4
+PsGetProcessWin32WindowStation@4
+PsGetThreadFreezeCount@4
+PsGetThreadHardErrorsAreDisabled@4
+PsGetThreadId@4
+PsGetThreadProcess@4
+PsGetThreadProcessId@4
+PsGetThreadSessionId@4
+PsGetThreadTeb@4
+PsGetThreadWin32Thread@4
PsGetVersion@16
PsGetWin32Thread@0
PsGetWin32Process@0
PsImpersonateClient@20
PsInitialSystemProcess DATA
+PsIsProcessBeingDebugged@4
+PsIsSystemThread@4
+PsIsThreadImpersonating@4
PsIsThreadTerminating@4
+PsJobType DATA
PsLookupProcessByProcessId@8
PsLookupProcessThreadByCid@12
PsLookupThreadByThreadId@8
PsProcessType DATA
PsReferenceImpersonationToken@16
PsReferencePrimaryToken@4
-;PsReturnPoolQuota@12
+PsRemoveCreateThreadNotifyRoutine@4
+PsRemoveLoadImageNotifyRoutine@4
+PsRestoreImpersonation@8
+PsReturnPoolQuota@12
+PsReturnProcessNonPagedPoolQuota@8
+PsReturnProcessPagedPoolQuota@8
PsRevertToSelf@0
+PsRevertThreadToSelf@4
PsSetCreateProcessNotifyRoutine@8
PsSetCreateThreadNotifyRoutine@4
-;PsSetLegoNotifyRoutine@4
-;PsSetProcessPriorityByClass@8
+PsSetJobUIRestrictionsClass@8
+PsSetLegoNotifyRoutine@4
+PsSetProcessPriorityClass@8
+PsSetProcessPriorityByClass@8
+PsSetProcessSecurityPort@8
+PsSetProcessWin32Process@8
+PsSetProcessWindowStation@8
+PsSetThreadHardErrorsAreDisabled@8
+PsSetThreadWin32Thread@8
+PsSetLoadImageNotifyRoutine@4
PsTerminateSystemThread@4
PsThreadType DATA
READ_REGISTER_UCHAR@4
READ_REGISTER_BUFFER_UCHAR@12
READ_REGISTER_BUFFER_ULONG@12
READ_REGISTER_BUFFER_USHORT@12
+KiRosPrintAddress@4
+KeRosDumpStackFrames@8
+KeRosGetStackFrames@8
RtlAbsoluteToSelfRelativeSD@12
RtlAddAccessAllowedAce@16
RtlAddAce@20
RtlAddAtomToAtomTable@12
+RtlAddRange@36
;RtlAllocateAndInitializeSid
-;RtlAllocateHeap
+RtlAllocateHeap@12
RtlAnsiCharToUnicodeChar@4
-RtlAnsiStringToUnicodeSize@4
+RtlAnsiStringToUnicodeSize@4=RtlxAnsiStringToUnicodeSize@4
RtlAnsiStringToUnicodeString@12
RtlAppendAsciizToString@8
RtlAppendStringToString@8
RtlAreBitsClear@12
RtlAreBitsSet@12
RtlAssert@16
-;RtlCaptureStackBackTrace
+RtlCaptureContext@4
+RtlCaptureStackBackTrace@16
RtlCharToInteger@12
RtlCheckRegistryKey@8
RtlClearAllBits@4
+RtlClearBit@8
RtlClearBits@12
RtlCompareMemory@12
RtlCompareMemoryUlong@12
RtlConvertSidToUnicodeString@12
RtlConvertUlongToLargeInteger@4
RtlCopyLuid@8
+RtlCopyRangeList@8
RtlCopySid@12
RtlCopyString@8
RtlCopyUnicodeString@8
RtlCreateAcl@12
RtlCreateAtomTable@8
-;RtlCreateHeap
+RtlCreateHeap@24
RtlCreateRegistryKey@8
RtlCreateSecurityDescriptor@8
+RtlCreateSystemVolumeInformationFolder@4
RtlCreateUnicodeString@8
RtlCustomCPToUnicodeN@24
RtlDecompressBuffer@24
RtlDecompressChunks@28
RtlDecompressFragment@32
-;RtlDelete
+RtlDelete@4
+RtlDeleteAce@8
RtlDeleteAtomFromAtomTable@8
-;RtlDeleteElementGenericTable
-;RtlDeleteNoSplay
+RtlDeleteElementGenericTable@8
+RtlDeleteElementGenericTableAvl@8
+RtlDeleteNoSplay@8
+RtlDeleteOwnersRanges@8
+RtlDeleteRange@24
RtlDeleteRegistryValue@12
RtlDescribeChunk@20
RtlDestroyAtomTable@4
-;RtlDestroyHeap
+RtlDestroyHeap@4
RtlDowncaseUnicodeString@12
+RtlDuplicateUnicodeString@12
RtlEmptyAtomTable@8
RtlEnlargedIntegerMultiply@8
RtlEnlargedUnsignedDivide@16
RtlEnlargedUnsignedMultiply@8
-;RtlEnumerateGenericTable
-;RtlEnumerateGenericTableWithoutSplaying
+RtlEnumerateGenericTable@8
+RtlEnumerateGenericTableAvl@8
+RtlEnumerateGenericTableLikeADirectory@28
+RtlEnumerateGenericTableWithoutSplaying@8
+RtlEnumerateGenericTableWithoutSplayingAvl@8
RtlEqualLuid@8
RtlEqualSid@8
RtlEqualString@12
RtlFillMemoryUlong@12
RtlFindClearBits@12
RtlFindClearBitsAndSet@12
+RtlFindClearRuns@16
RtlFindFirstRunClear@8
RtlFindFirstRunSet@8
+RtlFindLastBackwardRunClear@12
RtlFindLeastSignificantBit@8
RtlFindLongestRunClear@8
RtlFindLongestRunSet@8
RtlFindMessage@20
RtlFindMostSignificantBit@8
+RtlFindNextForwardRunClear@12
+RtlFindRange@48
RtlFindSetBits@12
RtlFindSetBitsAndClear@12
-;RtlFindUnicodePrefix
+RtlFindUnicodePrefix@12
RtlFormatCurrentUserKeyPath@4
RtlFreeAnsiString@4
-;RtlFreeHeap
+RtlFreeHeap@12
+RtlFreeRangeList@4
RtlFreeOemString@4
RtlFreeUnicodeString@4
+RtlGUIDFromString@8
RtlGenerate8dot3Name@16
-;RtlGetCallersAddress
+RtlGetAce@12
+RtlGetCallersAddress@8
RtlGetCompressionWorkSpaceSize@12
RtlGetDaclSecurityDescriptor@16
RtlGetDefaultCodePage@8
-;RtlGetElementGenericTable
+RtlGetElementGenericTable@8
+RtlGetElementGenericTableAvl@8
+RtlGetFirstRange@12
RtlGetGroupSecurityDescriptor@12
+RtlGetNextRange@12
+RtlGetNtGlobalFlags@0
RtlGetOwnerSecurityDescriptor@12
+RtlGetSaclSecurityDescriptor@16
+RtlGetSetBootStatusData@24
+RtlGetVersion@4
+RtlHashUnicodeString@16
RtlImageNtHeader@4
RtlImageDirectoryEntryToData@16
RtlInitAnsiString@8
RtlInitString@8
RtlInitUnicodeString@8
RtlInitializeBitMap@12
-;RtlInitializeGenericTable
+RtlInitializeGenericTable@20
+RtlInitializeGenericTableAvl@20
+RtlInitializeRangeList@4
RtlInitializeSid@12
-;RtlInitializeUnicodePrefix
-;RtlInsertElementGenericTable
-;RtlInsertUnicodePrefix
+RtlInitializeUnicodePrefix@4
+RtlInsertElementGenericTable@16
+RtlInsertElementGenericTableAvl@16
+RtlInsertElementGenericTableFull@24
+RtlInsertElementGenericTableFullAvl@24
+RtlInsertUnicodePrefix@12
+RtlInt64ToUnicodeString@16
RtlIntegerToChar@16
+RtlIntegerToUnicode@16
RtlIntegerToUnicodeString@12
+RtlInvertRangeList@8
+RtlIpv4AddressToStringA@8
+RtlIpv4AddressToStringExA@16
+RtlIpv4AddressToStringExW@16
+RtlIpv4AddressToStringW@8
+RtlIpv4StringToAddressA@16
+RtlIpv4StringToAddressExA@16
+RtlIpv4StringToAddressExW@16
+RtlIpv4StringToAddressW@16
+RtlIpv6AddressToStringA@8
+RtlIpv6AddressToStringExA@16
+RtlIpv6AddressToStringExW@16
+RtlIpv6AddressToStringW@8
+RtlIpv6StringToAddressA@12
+RtlIpv6StringToAddressExA@16
+RtlIpv6StringToAddressExW@16
+RtlIpv6StringToAddressW@12
+RtlIsGenericTableEmpty@4
+RtlIsGenericTableEmptyAvl@4
RtlIsNameLegalDOS8Dot3@12
+RtlIsRangeAvailable@40
+RtlIsValidOemCharacter@4
RtlLargeIntegerAdd@16
RtlLargeIntegerArithmeticShift@12
RtlLargeIntegerDivide@20
RtlLengthRequiredSid@4
RtlLengthSecurityDescriptor@4
RtlLengthSid@4
+RtlLockBootStatusData@4
RtlLookupAtomInAtomTable@12
-;RtlLookupElementGenericTable
+RtlLookupElementGenericTable@8
+RtlLookupElementGenericTableAvl@8
+RtlLookupElementGenericTableFull@16
+RtlLookupElementGenericTableFullAvl@16
RtlMapGenericMask@8
+RtlMapSecurityErrorToNtStatus@4
+RtlMergeRangeLists@16
RtlMoveMemory@12
RtlMultiByteToUnicodeN@20
RtlMultiByteToUnicodeSize@12
-;RtlNextUnicodePrefix
+RtlNextUnicodePrefix@8
RtlNtStatusToDosError@4
RtlNtStatusToDosErrorNoTeb@4
-;RtlNumberGenericTableElements
+RtlNumberGenericTableElements@4
+RtlNumberGenericTableElementsAvl@4
RtlNumberOfClearBits@4
RtlNumberOfSetBits@4
RtlOemStringToCountedUnicodeString@12
-RtlOemStringToUnicodeSize@4
+RtlOemStringToUnicodeSize@4=RtlxOemStringToUnicodeSize@4
RtlOemStringToUnicodeString@12
RtlOemToUnicodeN@20
RtlPinAtomInAtomTable@8
+@RtlPrefetchMemoryNonTemporal@8
RtlPrefixString@12
RtlPrefixUnicodeString@12
RtlQueryAtomInAtomTable@24
RtlQueryTimeZoneInformation@4
RtlRaiseException@4
RtlRandom@4
-;RtlRemoveUnicodePrefix
+RtlRandomEx@4
+RtlRealPredecessor@4
+RtlRealSuccessor@4
+RtlRemoveUnicodePrefix@8
RtlReserveChunk@20
RtlSecondsSince1970ToTime@8
RtlSecondsSince1980ToTime@8
+RtlSelfRelativeToAbsoluteSD2@8
+RtlSelfRelativeToAbsoluteSD@44
RtlSetAllBits@4
+RtlSetBit@8
RtlSetBits@12
RtlSetDaclSecurityDescriptor@16
RtlSetGroupSecurityDescriptor@12
RtlSetOwnerSecurityDescriptor@12
RtlSetSaclSecurityDescriptor@16
RtlSetTimeZoneInformation@4
-;RtlSplay
+RtlSizeHeap@12
+RtlSplay@4
+RtlStringFromGUID@8
RtlSubAuthorityCountSid@4
RtlSubAuthoritySid@8
+RtlSubtreePredecessor@4
+RtlSubtreeSuccessor@4
+RtlTestBit@8
RtlTimeFieldsToTime@8
+RtlTimeToElapsedTimeFields@8
RtlTimeToSecondsSince1970@8
RtlTimeToSecondsSince1980@8
RtlTimeToTimeFields@8
@RtlUlongByteSwap@4
@RtlUlonglongByteSwap@8
-RtlUnicodeStringToAnsiSize@4
+RtlUnicodeStringToAnsiSize@4=RtlxUnicodeStringToAnsiSize@4
RtlUnicodeStringToAnsiString@12
RtlUnicodeStringToCountedOemString@12
RtlUnicodeStringToInteger@12
-RtlUnicodeStringToOemSize@4
+RtlUnicodeStringToOemSize@4=RtlxUnicodeStringToOemSize@4
RtlUnicodeStringToOemString@12
RtlUnicodeToCustomCPN@24
RtlUnicodeToMultiByteN@20
RtlUnicodeToMultiByteSize@12
RtlUnicodeToOemN@20
+RtlUnlockBootStatusData@4
RtlUnwind@16
RtlUpcaseUnicodeChar@4
RtlUpcaseUnicodeString@12
RtlUpperChar@4
RtlUpperString@8
@RtlUshortByteSwap@4
+RtlValidRelativeSecurityDescriptor@12
RtlValidSecurityDescriptor@4
RtlValidSid@4
+RtlVerifyVersionInfo@16
+RtlVolumeDeviceToDosName@8
+RtlWalkFrameChain@12
RtlWriteRegistryValue@24
-;RtlZeroHeap
+RtlZeroHeap@8
RtlZeroMemory@8
RtlxAnsiStringToUnicodeSize@4
RtlxOemStringToUnicodeSize@4
RtlxUnicodeStringToAnsiSize@4
RtlxUnicodeStringToOemSize@4
SeAccessCheck@40
-;SeAppendPrivileges@8
+SeAppendPrivileges@8
SeAssignSecurity@28
-;SeAuditingFileEvents@8
-;SeAuditingFileOrGlobalEvents@18
-;SeCaptureSecurityDescriptor@20
+SeAssignSecurityEx@36
+SeAuditHardLinkCreation@12
+SeAuditingFileEvents@8
+SeAuditingFileEventsWithContext@12
+SeAuditingFileOrGlobalEvents@12
+SeAuditingHardLinkEvents@8
+SeAuditingHardLinkEventsWithContext@12
+SeCaptureSecurityDescriptor@20
SeCaptureSubjectContext@4
-;SeCloseObjectAuditAlarm@12
-;SeCreateAccessState@16
+SeCloseObjectAuditAlarm@12
+SeCreateAccessState@16
SeCreateClientSecurity@16
+SeCreateClientSecurityFromSubjectContext@16
SeDeassignSecurity@4
-;SeDeleteAccessState@4
-;SeDeleteObjectAuditAlarm@8
+SeDeleteAccessState@4
+SeDeleteObjectAuditAlarm@8
SeExports DATA
-;SeFreePrivileges@4
+SeFilterToken@24
+SeFreePrivileges@4
SeImpersonateClient@8
-;SeLockSubjectContext@4
-;SeMarkLogonSessionForTerminationNotification@4
-;SeOpenObjectAuditAlarm@36
-;SeOpenObjectForDeleteAuditAlarm@36
+SeImpersonateClientEx@8
+SeLockSubjectContext@4
+SeMarkLogonSessionForTerminationNotification@4
+SeOpenObjectAuditAlarm@36
+SeOpenObjectForDeleteAuditAlarm@36
SePrivilegeCheck@12
-;SePrivilegeObjectAuditAlarm@24
+SePrivilegeObjectAuditAlarm@24
SePublicDefaultDacl DATA
-;SeQueryAuthenticationIdToken@8
-;SeQuerySecurityDescriptorInfo@16
-;SeRegisterLogonSessionTerminatedRoutine@4
-;SeReleaseSecurityDescriptor@12
+SeQueryAuthenticationIdToken@8
+SeQueryInformationToken@12
+SeQuerySecurityDescriptorInfo@16
+SeQuerySessionIdToken@8
+SeRegisterLogonSessionTerminatedRoutine@4
+SeReleaseSecurityDescriptor@12
SeReleaseSubjectContext@4
-;SeSetAccessStateGenericMapping@8
-;SeSetSecurityDescriptorInfo@24
+SeSetAccessStateGenericMapping@8
+SeSetSecurityDescriptorInfo@24
+SeSetSecurityDescriptorInfoEx@28
SeSinglePrivilegeCheck@12
SeSystemDefaultDacl DATA
SeTokenImpersonationLevel@4
+SeTokenIsAdmin@4
+SeTokenIsRestricted@4
+SeTokenIsWriteRestricted@4
SeTokenType@4
-;SeUnlockSubjectContext@4
-;SeUnregisterLogonSessionTerminatedRoutine@4
-;SeValidSecurityDescriptor@8
+SeUnlockSubjectContext@4
+SeUnregisterLogonSessionTerminatedRoutine@4
+SeValidSecurityDescriptor@8
+VerSetConditionMask@16
WRITE_REGISTER_UCHAR@8
WRITE_REGISTER_ULONG@8
WRITE_REGISTER_USHORT@8
WRITE_REGISTER_BUFFER_ULONG@12
WRITE_REGISTER_BUFFER_USHORT@12
ZwAccessCheckAndAuditAlarm@44
+ZwAddBootEntry@8
+ZwAdjustPrivilegesToken@24
ZwAlertThread@4
ZwAllocateVirtualMemory@24
+ZwAssignProcessToJobObject@8
+ZwCancelIoFile@8
+ZwCancelTimer@8
ZwClearEvent@4
ZwClose@4
ZwCloseObjectAuditAlarm@12
ZwCreateDirectoryObject@12
ZwCreateEvent@20
ZwCreateFile@44
+ZwCreateJobObject@12
ZwCreateKey@28
ZwCreateSection@28
ZwCreateSymbolicLinkObject@16
+ZwCreateTimer@16
+ZwDeleteBootEntry@8
ZwDeleteFile@4
ZwDeleteKey@4
ZwDeleteValueKey@8
ZwDisplayString@4
ZwDuplicateObject@28
ZwDuplicateToken@24
+ZwEnumerateBootEntries@8
ZwEnumerateKey@24
ZwEnumerateValueKey@24
ZwFlushInstructionCache@12
ZwFlushKey@4
+ZwFlushVirtualMemory@16
ZwFreeVirtualMemory@16
ZwFsControlFile@40
+ZwInitiatePowerAction@16
+ZwIsProcessInJob@8
ZwLoadDriver@4
ZwLoadKey@8
ZwMakeTemporaryObject@4
ZwOpenDirectoryObject@12
ZwOpenEvent@12
ZwOpenFile@24
+ZwOpenJobObject@12
ZwOpenKey@12
ZwOpenProcess@16
ZwOpenProcessToken@12
+ZwOpenProcessTokenEx@16
ZwOpenSection@12
ZwOpenSymbolicLinkObject@12
ZwOpenThread@16
ZwOpenThreadToken@16
+ZwOpenThreadTokenEx@20
+ZwOpenTimer@12
+ZwPowerInformation@20
ZwPulseEvent@8
+ZwQueryBootEntryOrder@8
+ZwQueryBootOptions@8
ZwQueryDefaultLocale@8
+ZwQueryDefaultUILanguage@4
ZwQueryDirectoryFile@44
+ZwQueryDirectoryObject@28
+ZwQueryEaFile@36
+ZwQueryFullAttributesFile@8
ZwQueryInformationAtom@20
ZwQueryInformationFile@20
+ZwQueryInformationJobObject@20
ZwQueryInformationProcess@20
+ZwQueryInformationThread@20
ZwQueryInformationToken@20
+ZwQueryInstallUILanguage@4
ZwQueryKey@20
ZwQueryObject@20
ZwQuerySection@20
ZwReplaceKey@12
ZwRequestWaitReplyPort@12
ZwResetEvent@8
+ZwRestoreKey@12
ZwSaveKey@8
+ZwSaveKeyEx@12
+ZwSetBootEntryOrder@8
+ZwSetBootOptions@8
ZwSetDefaultLocale@8
+ZwSetDefaultUILanguage@4
+ZwSetEaFile@16
ZwSetEvent@8
ZwSetInformationFile@20
+ZwSetInformationJobObject@16
ZwSetInformationObject@16
ZwSetInformationProcess@16
ZwSetInformationThread@16
+ZwSetSecurityObject@12
ZwSetSystemInformation@12
ZwSetSystemTime@8
+ZwSetTimer@28
ZwSetValueKey@24
+ZwSetVolumeInformationFile@20
+ZwTerminateJobObject@8
ZwTerminateProcess@8
+ZwTranslateFilePath@12
ZwUnloadDriver@4
ZwUnloadKey@4
ZwUnmapViewOfSection@8
_abnormal_termination
_alldiv
_allmul
+_alloca_probe
_allrem
_allshl
_allshr
+_alldvrm
_aulldiv
+_aulldvrm
_aullrem
_aullshr
_except_handler2
_strset
_strupr
_vsnprintf
+_vsnwprintf
_wcsicmp
_wcslwr
_wcsnicmp