-; $Id: ntoskrnl.def,v 1.201 2004/11/21 16:34:57 navaraf Exp $
+; $Id$
;
; reactos/ntoskrnl/ntoskrnl.def
;
EXPORTS
CcRosInitializeFileCache@8
CcRosReleaseFileCache@4
+CcRosTraceCacheMap@8
CcCanIWrite@16
CcCopyRead@24
CcCopyWrite@20
DbgPrintReturnControlC
DbgQueryDebugFilterState@8
DbgSetDebugFilterState@12
+@ExiAcquireFastMutex@4=@ExAcquireFastMutex@4
@ExAcquireFastMutexUnsafe@4
-ExAcquireResourceExclusive@8
+ExAcquireRundownProtection=@ExfAcquireRundownProtection@4
+ExAcquireRundownProtectionCacheAware=@ExfAcquireRundownProtectionCacheAware@4
+ExAcquireRundownProtectionCacheAwareEx=@ExfAcquireRundownProtectionCacheAwareEx@8
+ExAcquireRundownProtectionEx=@ExfAcquireRundownProtectionEx@8
+ExInitializeRundownProtection=@ExfInitializeRundownProtection@4
+ExReInitializeRundownProtection=@ExfReInitializeRundownProtection@4
+ExReInitializeRundownProtectionCacheAware=@ExfReInitializeRundownProtectionCacheAware@4
+ExReleaseRundownProtection=@ExfReleaseRundownProtection@4
+ExReleaseRundownProtectionCacheAware=@ExfReleaseRundownProtectionCacheAware@4
+ExReleaseRundownProtectionCacheAwareEx=@ExfReleaseRundownProtectionCacheAwareEx@8
+ExReleaseRundownProtectionEx=@ExfReleaseRundownProtectionEx@8
+ExRundownCompleted=@ExfRundownCompleted@4
+ExRundownCompletedCacheAware=@ExfRundownCompletedCacheAware@4
+ExWaitForRundownProtectionRelease=@ExfWaitForRundownProtectionRelease@4
+ExWaitForRundownProtectionReleaseCacheAware=@ExfWaitForRundownProtectionReleaseCacheAware@4
+ExAllocateCacheAwareRundownProtection@8
+ExFreeCacheAwareRundownProtection@4
+ExInitializeRundownProtectionCacheAware@8
+ExSizeOfRundownProtectionCacheAware@0
ExAcquireResourceExclusiveLite@8
ExAcquireResourceSharedLite@8
-@ExAcquireRundownProtection@4
-@ExAcquireRundownProtectionEx@8
ExAcquireSharedStarveExclusive@8
ExAcquireSharedWaitForExclusive@8
-@ExAllocateFromPagedLookasideList@4=@ExiAllocateFromPagedLookasideList@4
+ExAllocateFromPagedLookasideList@4=ExiAllocateFromPagedLookasideList@4
ExAllocatePool@8
ExAllocatePoolWithQuota@8
ExAllocatePoolWithQuotaTag@12
ExCreateCallback@16
ExDeleteNPagedLookasideList@4
ExDeletePagedLookasideList@4
-ExDeleteResource@4
ExDeleteResourceLite@4
-ExDesktopObjectType DATA
+ExDesktopObjectType
ExDisableResourceBoostLite@4
ExEnumHandleTable@16
-ExEventObjectType DATA
+@ExEnterCriticalRegionAndAcquireFastMutexUnsafe@4
+ExEventObjectType=_ExEventObjectType
ExExtendZone@12
ExFreePool@4
ExFreePoolWithTag@8
ExGetExclusiveWaiterCount@4
ExGetPreviousMode@0
ExGetSharedWaiterCount@4
-@ExInitializeRundownProtection@4
ExInitializeNPagedLookasideList@28
ExInitializePagedLookasideList@28
-ExInitializeResource@4
ExInitializeResourceLite@4
ExInitializeZone@16
ExInterlockedAddLargeInteger@16
ExIsResourceAcquiredSharedLite@4
ExLocalTimeToSystemTime@8
ExNotifyCallback@12
-ExPostSystemEvent@12
ExQueryPoolBlockSize@8
ExQueueWorkItem@8
ExRaiseAccessViolation@0
ExRaiseDatatypeMisalignment@0
-ExRaiseException@4
+ExRaiseException@4=RtlRaiseException@4
ExRaiseHardError@24
-ExRaiseStatus@4
+ExRaiseStatus@4=RtlRaiseStatus@4
ExRegisterCallback@12
ExReinitializeResourceLite@4
-@ExReInitializeRundownProtection@4
+@ExiReleaseFastMutex@4=@ExReleaseFastMutex@4
@ExReleaseFastMutexUnsafe@4
-ExReleaseResourceForThread@8
+@ExReleaseFastMutexUnsafeAndLeaveCriticalRegion@4
ExReleaseResourceForThreadLite@8
@ExReleaseResourceLite@4
-@ExReleaseRundownProtection@4
-@ExReleaseRundownProtectionEx@8
-@ExRundownCompleted@4
+ExSemaphoreObjectType=_ExSemaphoreObjectType
ExSetResourceOwnerPointer@8
ExSetTimerResolution@8
ExSystemExceptionFilter@0
ExSystemTimeToLocalTime@8
+@ExiTryToAcquireFastMutex@4=@ExTryToAcquireFastMutex@4
ExTryToAcquireResourceExclusiveLite@4
ExUnregisterCallback@4
ExUuidCreate@4
ExVerifySuite@4
-@ExWaitForRundownProtectionRelease@4
ExWindowStationObjectType DATA
-ExInitializeBinaryTree@12
-ExDeleteBinaryTree@4
-ExInsertBinaryTree@12
-ExSearchBinaryTree@12
-ExRemoveBinaryTree@12
-ExTraverseBinaryTree@16
-ExInitializeSplayTree@16
-ExDeleteSplayTree@4
-ExInsertSplayTree@12
-ExSearchSplayTree@12
-ExRemoveSplayTree@12
-ExWeightOfSplayTree@8
-ExTraverseSplayTree@16
-ExInitializeHashTable@16
-ExDeleteHashTable@4
-ExInsertHashTable@16
-ExSearchHashTable@16
-ExRemoveHashTable@16
-@ExfAcquirePushLockExclusive@4
-@ExfAcquirePushLockShared@4
-@ExfReleasePushLock@4
@ExfInterlockedAddUlong@12
@ExfInterlockedInsertHeadList@12
@ExfInterlockedInsertTailList@12
@Exfi386InterlockedExchangeUlong@8
@Exfi386InterlockedIncrementLong@4
Exi386InterlockedDecrementLong@4
-Exi386InterlockedExchangeUlong@8
+Exi386InterlockedExchangeUlong@12
Exi386InterlockedIncrementLong@4
-FsRtlAcquireFileExclusive@4
-FsRtlAddLargeMcbEntry@28
-FsRtlAddMcbEntry@16
-FsRtlAddToTunnelCache@32
-FsRtlAllocateFileLock@8
-FsRtlAllocatePool@8
-FsRtlAllocatePoolWithQuota@8
-FsRtlAllocatePoolWithQuotaTag@12
-FsRtlAllocatePoolWithTag@12
-FsRtlAllocateResource@0
+FsRtlAcquireFileExclusive
+;FsRtlAddBaseMcbEntry
+FsRtlAddLargeMcbEntry
+FsRtlAddMcbEntry
+FsRtlAddToTunnelCache
+FsRtlAllocateFileLock
+FsRtlAllocatePool
+FsRtlAllocatePoolWithQuota
+FsRtlAllocatePoolWithQuotaTag
+FsRtlAllocatePoolWithTag
+FsRtlAllocateResource
FsRtlAreNamesEqual@16
-FsRtlBalanceReads@4
+FsRtlBalanceReads
FsRtlCheckLockForReadAccess@8
FsRtlCheckLockForWriteAccess@8
-FsRtlCheckOplock@20
-FsRtlCopyRead@32
-FsRtlCopyWrite@32
-FsRtlCurrentBatchOplock@4
-FsRtlDeleteKeyFromTunnelCache@12
-FsRtlDeleteTunnelCache@4
-FsRtlDeregisterUncProvider@4
-FsRtlDissectDbcs@16
-FsRtlDissectName@16
-FsRtlDoesDbcsContainWildCards@4
+FsRtlCheckOplock
+FsRtlCopyRead
+FsRtlCopyWrite
+;FsRtlCreateSectionForDataScan
+FsRtlCurrentBatchOplock
+FsRtlDeleteKeyFromTunnelCache
+FsRtlDeleteTunnelCache
+FsRtlDeregisterUncProvider
+FsRtlDissectDbcs
+FsRtlDissectName
+FsRtlDoesDbcsContainWildCards
FsRtlDoesNameContainWildCards@4
-FsRtlFastCheckLockForRead@24
-FsRtlFastCheckLockForWrite@24
+FsRtlFastCheckLockForRead
+FsRtlFastCheckLockForWrite
FsRtlFastUnlockAll@16
-FsRtlFastUnlockAllByKey@20
-FsRtlFastUnlockSingle@32
-FsRtlFindInTunnelCache@32
-FsRtlFreeFileLock@4
-FsRtlGetFileSize@8
-FsRtlGetNextFileLock@8
-FsRtlGetNextLargeMcbEntry@20
-FsRtlGetNextMcbEntry@20
-FsRtlIncrementCcFastReadNotPossible@0
-FsRtlIncrementCcFastReadNoWait@0
-FsRtlIncrementCcFastReadResourceMiss@0
-FsRtlIncrementCcFastReadWait@0
+FsRtlFastUnlockAllByKey
+FsRtlFastUnlockSingle
+FsRtlFindInTunnelCache
+FsRtlFreeFileLock
+FsRtlGetFileSize
+;FsRtlGetNextBaseMcbEntry
+FsRtlGetNextFileLock
+FsRtlGetNextLargeMcbEntry
+FsRtlGetNextMcbEntry
+FsRtlIncrementCcFastReadNotPossible
+FsRtlIncrementCcFastReadNoWait
+FsRtlIncrementCcFastReadResourceMiss
+FsRtlIncrementCcFastReadWait
+;FsRtlInitializeBaseMcb
FsRtlInitializeFileLock@12
-FsRtlInitializeLargeMcb@8
-FsRtlInitializeMcb@8
-FsRtlInitializeOplock@4
-FsRtlInitializeTunnelCache@4
-FsRtlInsertPerFileObjectContext@8
-FsRtlInsertPerStreamContext@8
-FsRtlIsDbcsInExpression@8
-FsRtlIsFatDbcsLegal@20
-FsRtlIsHpfsDbcsLegal@20
+FsRtlInitializeLargeMcb
+FsRtlInitializeMcb
+FsRtlInitializeOplock
+FsRtlInitializeTunnelCache
+FsRtlInsertPerFileObjectContext
+FsRtlInsertPerStreamContext
+FsRtlIsDbcsInExpression
+FsRtlIsFatDbcsLegal
+FsRtlIsHpfsDbcsLegal
FsRtlIsNameInExpression@16
-FsRtlIsNtstatusExpected@4
+FsRtlIsNtstatusExpected
FsRtlIsPagingFile
-FsRtlIsTotalDeviceFailure@4
-FsRtlLegalAnsiCharacterArray DATA
-FsRtlLookupLargeMcbEntry@32
-FsRtlLookupLastLargeMcbEntry@12
-FsRtlLookupLastLargeMcbEntryAndIndex@16
-FsRtlLookupLastMcbEntry@12
-FsRtlLookupMcbEntry@20
-FsRtlLookupPerFileObjectContext@12
-FsRtlLookupPerStreamContextInternal@12
-FsRtlMdlRead@24
-FsRtlMdlReadComplete@8
-FsRtlMdlReadCompleteDev@12
-FsRtlMdlReadDev@28
-FsRtlMdlWriteComplete@12
-FsRtlMdlWriteCompleteDev@16
-FsRtlNormalizeNtstatus@8
-FsRtlNotifyChangeDirectory@28
-FsRtlNotifyCleanup@12
-FsRtlNotifyFilterChangeDirectory@44
-FsRtlNotifyFilterReportChange@40
-FsRtlNotifyFullChangeDirectory@40
-FsRtlNotifyFullReportChange@36
-FsRtlNotifyInitializeSync@4
-FsRtlNotifyReportChange@20
-FsRtlNotifyUninitializeSync@4
-FsRtlNotifyVolumeEvent@8
-FsRtlNumberOfRunsInLargeMcb@4
-FsRtlNumberOfRunsInMcb@4
-FsRtlOplockFsctrl@12
-FsRtlOplockIsFastIoPossible@4
-FsRtlPostPagingFileStackOverflow@12
-FsRtlPostStackOverflow@12
-FsRtlPrepareMdlWrite@24
-FsRtlPrepareMdlWriteDev@28
-FsRtlPrivateLock@48
+FsRtlIsTotalDeviceFailure
+FsRtlLegalAnsiCharacterArray=_FsRtlLegalAnsiCharacterArray
+;FsRtlLookupBaseMcbEntry
+FsRtlLookupLargeMcbEntry
+;FsRtlLookupLastBaseMcbEntry
+;FsRtlLookupLastBaseMcbEntryAndIndex
+FsRtlLookupLastLargeMcbEntry
+FsRtlLookupLastLargeMcbEntryAndIndex
+FsRtlLookupLastMcbEntry
+FsRtlLookupMcbEntry
+FsRtlLookupPerFileObjectContext
+FsRtlLookupPerStreamContextInternal
+FsRtlMdlRead
+FsRtlMdlReadComplete
+FsRtlMdlReadCompleteDev
+FsRtlMdlReadDev
+FsRtlMdlWriteComplete
+FsRtlMdlWriteCompleteDev
+FsRtlNormalizeNtstatus
+FsRtlNotifyChangeDirectory
+FsRtlNotifyCleanup
+FsRtlNotifyFilterChangeDirectory
+FsRtlNotifyFilterReportChange
+FsRtlNotifyFullChangeDirectory
+FsRtlNotifyFullReportChange
+FsRtlNotifyInitializeSync
+FsRtlNotifyReportChange
+FsRtlNotifyUninitializeSync
+FsRtlNotifyVolumeEvent
+;FsRtlNumberOfRunsInBaseMcb
+FsRtlNumberOfRunsInLargeMcb
+FsRtlNumberOfRunsInMcb
+FsRtlOplockFsctrl
+FsRtlOplockIsFastIoPossible
+FsRtlPostPagingFileStackOverflow
+FsRtlPostStackOverflow
+FsRtlPrepareMdlWrite
+FsRtlPrepareMdlWriteDev
+FsRtlPrivateLock
FsRtlProcessFileLock@12
-FsRtlRegisterUncProvider@12
-FsRtlReleaseFile@4
-FsRtlRemoveLargeMcbEntry@20
-FsRtlRemoveMcbEntry@12
-FsRtlRemovePerFileObjectContext@12
-FsRtlRemovePerStreamContext@12
-FsRtlResetLargeMcb@8
-FsRtlSplitLargeMcb@20
-FsRtlSyncVolumes@12
-FsRtlTeardownPerStreamContexts@4
-FsRtlTruncateLargeMcb@12
-FsRtlTruncateMcb@8
+FsRtlRegisterFileSystemFilterCallbacks
+FsRtlRegisterUncProvider
+FsRtlReleaseFile
+;FsRtlRemoveBaseMcbEntry
+FsRtlRemoveLargeMcbEntry
+FsRtlRemoveMcbEntry
+FsRtlRemovePerFileObjectContext
+FsRtlRemovePerStreamContext
+;FsRtlResetBaseMcb
+FsRtlResetLargeMcb
+;FsRtlSplitBaseMcb
+FsRtlSplitLargeMcb
+FsRtlSyncVolumes
+FsRtlTeardownPerStreamContexts
+;FsRtlTruncateBaseMcb
+FsRtlTruncateLargeMcb
+FsRtlTruncateMcb
+;FsRtlUninitializeBaseMcb
FsRtlUninitializeFileLock@4
-FsRtlUninitializeLargeMcb@4
-FsRtlUninitializeMcb@4
-FsRtlUninitializeOplock@4
-HalDispatchTable DATA
+FsRtlUninitializeLargeMcb
+FsRtlUninitializeMcb
+FsRtlUninitializeOplock
+HalDispatchTable=_HalDispatchTable
HalPrivateDispatchTable DATA
-@HalExamineMBR=@xHalExamineMBR@16
+@HalExamineMBR@16
InbvAcquireDisplayOwnership@0
InbvCheckDisplayOwnership@0
InbvDisplayString@4
IoAllocateDriverObjectExtension@16
IoAllocateErrorLogEntry@8
IoAllocateWorkItem@4
-IoAssignDriveLetters@16
+@IoAssignDriveLetters@16
IoAssignResources@24
IoAttachDevice@12
IoAttachDeviceByPointer@8
IoCreateSymbolicLink@8
IoCreateSynchronizationEvent@8
IoCreateUnprotectedSymbolicLink@8
+IoCsqInitialize@28
+IoCsqInitializeEx@28
+IoCsqInsertIrp@12
+IoCsqInsertIrpEx@16
+IoCsqRemoveIrp@8
+IoCsqRemoveNextIrp@8
IoDeleteController@4
IoDeleteDevice@4
IoDeleteDriver@4
IoEnqueueIrp@4
IoEnumerateDeviceObjectList@16
IoFastQueryNetworkAttributes@20
-IoFileObjectType DATA
+IoFileObjectType=_IoFileObjectType
IoForwardAndCatchIrp@8=IoForwardIrpSynchronously@8
IoForwardIrpSynchronously@8
IoFreeController@4
IoIsValidNameGraftingBuffer@8
IoIsOperationSynchronous@4
IoMakeAssociatedIrp@8
-IoOpenDeviceInstanceKey@20
IoOpenDeviceInterfaceRegistryKey@12
IoOpenDeviceRegistryKey@16
IoPageRead@20
IoPnPDeliverServicePowerNotification@16
IoQueryDeviceDescription@32
-IoQueryDeviceEnumInfo@8
IoQueryFileDosDeviceName@8
IoQueryFileInformation@20
IoQueryVolumeInformation@20
IoRaiseInformationalHardError@12
IoReadDiskSignature@12
IoReadOperationCount DATA
-IoReadPartitionTable@16
+@IoReadPartitionTable@16
IoReadPartitionTableEx@8
IoReadTransferCount DATA
IoRegisterBootDriverReinitialization@12
IoSetHardErrorOrVerifyDevice@8
IoSetInformation@16
IoSetIoCompletion@24
-IoSetPartitionInformation@16
+@IoSetPartitionInformation@16
IoSetPartitionInformationEx@12
IoSetStartIoAttributes@12
IoSetShareAccess@16
IoWMIWriteEvent@4
IoWriteErrorLogEntry@4
IoWriteOperationCount DATA
-IoWritePartitionTable@20
+@IoWritePartitionTable@20
IoWritePartitionTableEx@8
IoWriteTransferCount DATA
@IofCallDriver@8
@IofCompleteRequest@8
IoIsWdmVersionAvailable@8
-KdDebuggerEnabled DATA
-KdDebuggerNotPresent DATA
-KdDisableDebugger@0
-KdEnableDebugger@0
-KdEnteredDebugger
-KdPollBreakIn@0
-KdPowerTransition@4
-KdSystemDebugControl@4
+KdComPortInUse
+KdDebuggerNotPresent=_KdDebuggerNotPresent
Ke386CallBios@8
-Ke386IoSetAccessProcess@8
-Ke386QueryIoAccessMap@8
-Ke386SetIoAccessMap@8
+@KeAcquireGuardedMutex@4
+@KeAcquireGuardedMutexUnsafe@4
KeAcquireSpinLockAtDpcLevel@4
-KeAcquireDispatcherDatabaseLockAtDpcLevel
@KeAcquireInStackQueuedSpinLockAtDpcLevel@8
KeAcquireInterruptSpinLock@4
KeAddSystemServiceTable@20
KeDeregisterBugCheckReasonCallback@4
KeDetachProcess@0
KeDisconnectInterrupt@4
-KeEnterCriticalRegion@0
-KeEnterKernelDebugger@0
+KeEnterCriticalRegion@0=_KeEnterCriticalRegion@0
+KeEnterGuardedRegion@0=_KeEnterGuardedRegion@0
+;KeEnterKernelDebugger@0
KeFindConfigurationEntry@16
KeFindConfigurationNextEntry@20
KeFlushEntireTb@8
KeGetPreviousMode@0
KeGetRecommendedSharedDataAlignment@0
;KeI386AbiosCall
-KeI386AllocateGdtSelectors
+KeI386AllocateGdtSelectors@8
;KeI386Call16BitCStyleFunction
;KeI386Call16BitFunction
-KeI386FlatToGdtSelector
+KeI386FlatToGdtSelector@12
;KeI386GetLid
;KeI386MachineType DATA
-KeI386ReleaseGdtSelectors
+KeI386ReleaseGdtSelectors@8
;KeI386ReleaseLid
;KeI386SetGdtSelector
KeIcacheFlushCount DATA
KeInitializeDeviceQueue@4
KeInitializeDpc@12
KeInitializeEvent@12
+@KeInitializeGuardedMutex@4
KeInitializeInterrupt@44
KeInitializeMutant@8
KeInitializeMutex@8
KeInsertQueueDpc@12
KeIsAttachedProcess@0
KeIsExecutingDpc@0
-KeLeaveCriticalRegion@0
+KeLeaveCriticalRegion@0=_KeLeaveCriticalRegion@0
+KeLeaveGuardedRegion@0=_KeLeaveGuardedRegion@0
KeLoaderBlock DATA
KeNumberProcessors DATA
KeProfileInterrupt@4
KeRaiseUserException@4
KeReadStateEvent@4
KeReadStateMutant@4
-KeReadStateMutex@4
+KeReadStateMutex@4=KeReadStateMutant@4
KeReadStateQueue@4
KeReadStateSemaphore@4
KeReadStateTimer@4
KeRegisterBugCheckCallback@20
KeRegisterBugCheckReasonCallback@16
-KeReleaseDispatcherDatabaseLockFromDpcLevel
+@KeReleaseGuardedMutexUnsafe@4
+@KeReleaseGuardedMutex@4
@KeReleaseInStackQueuedSpinLockFromDpcLevel@4
KeReleaseInterruptSpinLock@8
KeReleaseMutant@16
KeSetTimeIncrement@8
KeSetTimer@16
KeSetTimerEx@20
-@KeSetTimeUpdateNotifyRoutine@4
KeStackAttachProcess@8
KeSynchronizeExecution@12
KeTerminateThread@4
KeTickCount DATA
-KeUpdateRunTime@8
-KeUpdateSystemTime@8
+@KeTryToAcquireGuardedMutex@4
+@KeTryToAcquireSpinLockAtDpcLevel@4
+KeUpdateRunTime@4
+KeUpdateSystemTime@0
KeUnstackDetachProcess@4
KeUserModeCallback@20
KeWaitForMultipleObjects@32
-KeWaitForMutexObject@20
+KeWaitForMutexObject@20=KeWaitForSingleObject@20
KeWaitForSingleObject@20
@KefAcquireSpinLockAtDpcLevel@4
@KefReleaseSpinLockFromDpcLevel@4
-;Kei386EoiHelper
+Kei386EoiHelper@0
@KiAcquireSpinLock@4
;KiBugCheckData DATA
KiCoprocessorError@0
+KiCheckForKernelApcDelivery@0
KiDeliverApc@12
KiDispatchInterrupt@0
-KiEnableTimerWatchdog
-KiInterruptDispatch2@8
+;KiEnableTimerWatchdog
KiIpiServiceRoutine@8
@KiReleaseSpinLock@4
-KiUnexpectedInterrupt@0
+KiUnexpectedInterrupt
;Kii386SpinOnSpinLock
KiRawTicks DATA
LdrAccessResource@16
LdrEnumResources@20
LdrFindResourceDirectory_U@16
LdrFindResource_U@16
+LpcPortObjectType DATA
LpcRequestPort@8
LpcRequestWaitReplyPort@12
LsaCallAuthenticationPackage@28
MmAddVerifierThunks@8
MmAdjustWorkingSetSize@12
MmAdvanceMdl@8
-MmAllocateContiguousAlignedMemory@36
MmAllocateContiguousMemory@12
MmAllocateContiguousMemorySpecifyCache@32
MmAllocateMappingAddress@8
MmAllocatePagesForMdl@28
MmBuildMdlForNonPagedPool@4
MmCanFileBeTruncated@8
-MmCopyFromCaller@12
-MmCopyToCaller@12
MmCreateMdl@12
MmCreateSection@32
MmDbgTranslatePhysicalAddress@8
NlsLeadByteInfo DATA
NlsMbCodePageTag DATA
NlsMbOemCodePageTag DATA
+NlsOemCodePage DATA
NlsOemLeadByteInfo DATA
NtAddAtom@12
NtAdjustPrivilegesToken@24
NtQueryInformationProcess@20
NtQueryInformationThread@20
NtQueryInformationToken@20
-;NtQueryOleDirectoryFile@44 <--- ?
NtQueryQuotaInformationFile@36
NtQuerySecurityObject@20
NtQuerySystemInformation@16
NtW32Call@20
NtWaitForSingleObject@12
NtWriteFile@36
+
+;
+; Object Manager
ObAssignSecurity@16
;ObCheckCreateObjectAccess@28
;ObCheckObjectAccess@20
+ObCloseHandle@8
ObCreateObject@36
+ObCreateObjectType@16
+ObDereferenceObject@4
+ObDereferenceObjectDeferDelete@4
+ObDereferenceSecurityDescriptor@8
+@ObfDereferenceObject@4
ObFindHandleForObject@20
-ObGetObjectPointerCount@4
+@ObfReferenceObject@4
ObGetObjectSecurity@12
ObInsertObject@24
+ObIsKernelHandle@4
+ObLogSecurityDescriptor@12
ObMakeTemporaryObject@4
ObOpenObjectByName@28
ObOpenObjectByPointer@28
ObQueryNameString@16
ObQueryObjectAuditingByHandle@8
-@ObfDereferenceObject@4
-@ObfReferenceObject@4
ObReferenceObjectByHandle@24
ObReferenceObjectByName@32
ObReferenceObjectByPointer@16
+;ObReferenceSecurityDescriptor@8
ObReleaseObjectSecurity@8
-ObDereferenceObject@4
+;ObSetHandleAttributes@12
;ObSetSecurityDescriptorInfo@24
+;ObSetSecurityObjectByPointer@12
+
+;
+;
+;
;PfxFindPrefix
;PfxInitialize
;PfxInsertPrefix
;PfxRemovePrefix
PoCallDriver@8
+PoQueueShutdownWorkItem@4
PoRegisterDeviceForIdleDetection@16
PoRegisterSystemState@8
PoRequestPowerIrp@24
PsChargeProcessPoolQuota@12
PsCreateSystemProcess@12
PsCreateSystemThread@28
-PsCreateWin32Process@4
PsDereferenceImpersonationToken@4=PsDereferencePrimaryToken@4
PsDereferencePrimaryToken@4
PsDisableImpersonation@8
-PsEstablishWin32Callouts@24
+PsEstablishWin32Callouts@4
+PsGetContextThread@12
+PsGetCurrentProcess@0=IoGetCurrentProcess@0
PsGetCurrentProcessId@0
+PsGetCurrentProcessWin32Process@0
PsGetCurrentProcessSessionId@0
+PsGetCurrentThread@0=KeGetCurrentThread@0
PsGetCurrentThreadId@0
PsGetCurrentThreadPreviousMode@0
+PsGetCurrentThreadWin32Thread@0
PsGetCurrentThreadStackBase@0
PsGetCurrentThreadStackLimit@0
PsGetJobLock@4
PsGetThreadTeb@4
PsGetThreadWin32Thread@4
PsGetVersion@16
-PsGetWin32Thread@0
-PsGetWin32Process@0
PsImpersonateClient@20
PsInitialSystemProcess DATA
PsIsProcessBeingDebugged@4
PsLookupProcessByProcessId@8
PsLookupProcessThreadByCid@12
PsLookupThreadByThreadId@8
-PsProcessType DATA
+PsProcessType=_PsProcessType
PsReferenceImpersonationToken@16
PsReferencePrimaryToken@4
PsRemoveCreateThreadNotifyRoutine@4
PsReturnProcessPagedPoolQuota@8
PsRevertToSelf@0
PsRevertThreadToSelf@4
+PsSetContextThread@12
PsSetCreateProcessNotifyRoutine@8
PsSetCreateThreadNotifyRoutine@4
PsSetJobUIRestrictionsClass@8
PsSetLegoNotifyRoutine@4
PsSetProcessPriorityClass@8
+PsSetProcessPriorityByClass@8
PsSetProcessSecurityPort@8
PsSetProcessWin32Process@8
-PsSetProcessWin32WindowStation@8
+PsSetProcessWindowStation@8
PsSetThreadHardErrorsAreDisabled@8
PsSetThreadWin32Thread@8
PsSetLoadImageNotifyRoutine@4
PsTerminateSystemThread@4
-PsThreadType DATA
+PsThreadType=_PsThreadType
READ_REGISTER_UCHAR@4
READ_REGISTER_ULONG@4
READ_REGISTER_USHORT@4
READ_REGISTER_BUFFER_UCHAR@12
READ_REGISTER_BUFFER_ULONG@12
READ_REGISTER_BUFFER_USHORT@12
-KeRosPrintAddress@4
+KiRosPrintAddress@4
KeRosDumpStackFrames@8
RtlAbsoluteToSelfRelativeSD@12
RtlAddAccessAllowedAce@16
;RtlAllocateAndInitializeSid
RtlAllocateHeap@12
RtlAnsiCharToUnicodeChar@4
-RtlAnsiStringToUnicodeSize@4
+RtlAnsiStringToUnicodeSize@4=RtlxAnsiStringToUnicodeSize@4
RtlAnsiStringToUnicodeString@12
RtlAppendAsciizToString@8
RtlAppendStringToString@8
RtlDestroyAtomTable@4
RtlDestroyHeap@4
RtlDowncaseUnicodeString@12
+RtlDuplicateUnicodeString@12
RtlEmptyAtomTable@8
RtlEnlargedIntegerMultiply@8
RtlEnlargedUnsignedDivide@16
RtlIpv4StringToAddressExW@16
RtlIpv4StringToAddressW@16
RtlIpv6AddressToStringA@8
-RtlIpv6AddressToStringExA@16
-RtlIpv6AddressToStringExW@16
+RtlIpv6AddressToStringExA@20
+RtlIpv6AddressToStringExW@20
RtlIpv6AddressToStringW@8
-RtlIpv6StringToAddressA@16
+RtlIpv6StringToAddressA@12
RtlIpv6StringToAddressExA@16
RtlIpv6StringToAddressExW@16
-RtlIpv6StringToAddressW@16
+RtlIpv6StringToAddressW@12
RtlIsGenericTableEmpty@4
RtlIsGenericTableEmptyAvl@4
RtlIsNameLegalDOS8Dot3@12
RtlNumberOfClearBits@4
RtlNumberOfSetBits@4
RtlOemStringToCountedUnicodeString@12
-RtlOemStringToUnicodeSize@4
+RtlOemStringToUnicodeSize@4=RtlxOemStringToUnicodeSize@4
RtlOemStringToUnicodeString@12
RtlOemToUnicodeN@20
RtlPinAtomInAtomTable@8
RtlTimeToTimeFields@8
@RtlUlongByteSwap@4
@RtlUlonglongByteSwap@8
-RtlUnicodeStringToAnsiSize@4
+RtlUnicodeStringToAnsiSize@4=RtlxUnicodeStringToAnsiSize@4
RtlUnicodeStringToAnsiString@12
RtlUnicodeStringToCountedOemString@12
RtlUnicodeStringToInteger@12
-RtlUnicodeStringToOemSize@4
+RtlUnicodeStringToOemSize@4=RtlxUnicodeStringToOemSize@4
RtlUnicodeStringToOemString@12
RtlUnicodeToCustomCPN@24
RtlUnicodeToMultiByteN@20
RtlValidRelativeSecurityDescriptor@12
RtlValidSecurityDescriptor@4
RtlValidSid@4
-;RtlVerifyVersionInfo@16
+RtlVerifyVersionInfo@16
RtlVolumeDeviceToDosName@8
RtlWalkFrameChain@12
RtlWriteRegistryValue@24
ZwCreateSection@28
ZwCreateSymbolicLinkObject@16
ZwCreateTimer@16
-ZwDeleteBootEntry@8
ZwDeleteFile@4
ZwDeleteKey@4
ZwDeleteValueKey@8
ZwSetVolumeInformationFile@20
ZwTerminateJobObject@8
ZwTerminateProcess@8
-ZwTranslateFilePath@12
+ZwTranslateFilePath@16
ZwUnloadDriver@4
ZwUnloadKey@4
ZwUnmapViewOfSection@8
_abnormal_termination
_alldiv
_allmul
+_alloca_probe
_allrem
_allshl
_allshr
+_alldvrm
_aulldiv
+_aulldvrm
_aullrem
_aullshr
_except_handler2
_strset
_strupr
_vsnprintf
+_vsnwprintf
_wcsicmp
_wcslwr
_wcsnicmp