ntoskrnl/ntoskrnl.def

   1 ; $Id$
   2 ;
   3 ; reactos/ntoskrnl/ntoskrnl.def
   4 ;
   5 ; ReactOS Operating System
   6 ;
   7 EXPORTS
   8 CcRosInitializeFileCache@12
   9 ;CcRosRequestCacheSegment@20
  10 ;CcRosReleaseCacheSegment@12
  11 CcRosReleaseFileCache@8
  12 CcCopyRead@24
  13 CcCopyWrite@20
  14 CcFlushCache@16
  15 CcGetFileObjectFromSectionPtrs@4
  16 CcMapData@24
  17 CcMdlReadComplete@8
  18 CcSetDirtyPinnedData@8
  19 CcSetFileSizes@8
  20 CcUnpinData@4
  21 CcZeroData@16
  22 DbgBreakPoint@0
  23 DbgBreakPointWithStatus@4
  24 ;DbgLoadImageSymbols@12
  25 DbgPrint
  26 DbgPrompt@12
  27 DpcQueueSize DATA
  28 @ExAcquireFastMutexUnsafe@4
  29 ExAcquireResourceExclusive@8
  30 ExAcquireResourceExclusiveLite@8
  31 ExAcquireResourceSharedLite@8
  32 ExAcquireSharedStarveExclusive@8
  33 ExAcquireSharedWaitForExclusive@8
  34 ExAllocateFromPagedLookasideList@4
  35 ExAllocatePool@8
  36 ExAllocatePoolWithQuota@8
  37 ExAllocatePoolWithQuotaTag@12
  38 ExAllocatePoolWithTag@12
  39 ExConvertExclusiveToSharedLite@4
  40 ExCreateCallback@16
  41 ExDeleteNPagedLookasideList@4
  42 ExDeletePagedLookasideList@4
  43 ExDeleteResource@4
  44 ExDeleteResourceLite@4
  45 ExDesktopObjectType DATA
  46 ExDisableResourceBoostLite@4
  47 ExEventObjectType DATA
  48 ExExtendZone@12
  49 ExFreePool@4
  50 ExFreeToPagedLookasideList@8
  51 ExGetExclusiveWaiterCount@4
  52 ExGetPreviousMode@0
  53 ExGetSharedWaiterCount@4
  54 ExInitializeNPagedLookasideList@28
  55 ExInitializePagedLookasideList@28
  56 ExInitializeResource@4
  57 ExInitializeResourceLite@4
  58 ExInitializeZone@16
  59 ExInterlockedAddLargeInteger@16
  60 @ExInterlockedAddLargeStatistic@8
  61 ExInterlockedAddUlong@12
  62 @ExInterlockedCompareExchange64@16
  63 ExInterlockedDecrementLong@8
  64 ExInterlockedExchangeUlong@12
  65 ExInterlockedExtendZone@16
  66 ExInterlockedIncrementLong@8
  67 ExInterlockedInsertHeadList@12
  68 ExInterlockedInsertTailList@12
  69 ExInterlockedPopEntryList@8
  70 @ExInterlockedPopEntrySList@8
  71 ExInterlockedPushEntryList@12
  72 @ExInterlockedPushEntrySList@12
  73 ExInterlockedRemoveHeadList@8
  74 ExIsProcessorFeaturePresent@4
  75 ExIsResourceAcquiredExclusiveLite@4
  76 ExIsResourceAcquiredSharedLite@4
  77 ExLocalTimeToSystemTime@8
  78 ExNotifyCallback@12
  79 ExPostSystemEvent@12
  80 ;ExQueryPoolBlockSize
  81 ExQueueWorkItem@8
  82 ExRaiseAccessViolation@0
  83 ExRaiseDatatypeMisalignment@0
  84 ;ExRaiseException
  85 ;ExRaiseHardError
  86 ExRaiseStatus@4
  87 ExRegisterCallback@12
  88 ExReinitializeResourceLite@4
  89 @ExReleaseFastMutexUnsafe@4
  90 ExReleaseResourceForThread@8
  91 ExReleaseResourceForThreadLite@8
  92 @ExReleaseResourceLite@4
  93 ExSetResourceOwnerPointer@8
  94 ;ExSystemExceptionFilter
  95 ExSystemTimeToLocalTime@8
  96 ExTryToAcquireResourceExclusiveLite@4
  97 ExUnregisterCallback@4
  98 ExWindowStationObjectType DATA
  99 ExInitializeBinaryTree@12
 100 ExDeleteBinaryTree@4
 101 ExInsertBinaryTree@12
 102 ExSearchBinaryTree@12
 103 ExRemoveBinaryTree@12
 104 ExTraverseBinaryTree@16
 105 ExInitializeSplayTree@16
 106 ExDeleteSplayTree@4
 107 ExInsertSplayTree@12
 108 ExSearchSplayTree@12
 109 ExRemoveSplayTree@12
 110 ExWeightOfSplayTree@8
 111 ExTraverseSplayTree@16
 112 ExInitializeHashTable@16
 113 ExDeleteHashTable@4
 114 ExInsertHashTable@16
 115 ExSearchHashTable@16
 116 ExRemoveHashTable@16
 117 @ExfInterlockedAddUlong@12
 118 @ExfInterlockedInsertHeadList@12
 119 @ExfInterlockedInsertTailList@12
 120 @ExfInterlockedPopEntryList@8
 121 @ExfInterlockedPushEntryList@12
 122 @ExfInterlockedRemoveHeadList@8
 123 @Exfi386InterlockedDecrementLong@4
 124 @Exfi386InterlockedExchangeUlong@8
 125 @Exfi386InterlockedIncrementLong@4
 126 Exi386InterlockedDecrementLong@4
 127 Exi386InterlockedExchangeUlong@8
 128 Exi386InterlockedIncrementLong@4
 129 FsRtlAddLargeMcbEntry@28
 130 FsRtlAddMcbEntry@16
 131 FsRtlAddToTunnelCache@32
 132 FsRtlAllocateFileLock@8
 133 FsRtlAllocatePool@8
 134 FsRtlAllocatePoolWithQuota@8
 135 FsRtlAllocatePoolWithQuotaTag@12
 136 FsRtlAllocatePoolWithTag@12
 137 FsRtlAllocateResource@0
 138 FsRtlAreNamesEqual@16
 139 FsRtlBalanceReads@4
 140 FsRtlCheckLockForReadAccess@8
 141 FsRtlCheckLockForWriteAccess@8
 142 FsRtlCheckOplock@20
 143 FsRtlCopyRead@32
 144 FsRtlCopyWrite@32
 145 FsRtlCurrentBatchOplock@4
 146 FsRtlDeleteKeyFromTunnelCache@12
 147 FsRtlDeleteTunnelCache@4
 148 FsRtlDeregisterUncProvider@4
 149 FsRtlDissectDbcs@16
 150 FsRtlDissectName@16
 151 FsRtlDoesDbcsContainWildCards@4
 152 FsRtlDoesNameContainWildCards@4
 153 FsRtlFastCheckLockForRead@24
 154 FsRtlFastCheckLockForWrite@24
 155 FsRtlFastUnlockAll@16
 156 FsRtlFastUnlockAllByKey@20
 157 FsRtlFastUnlockSingle@32
 158 FsRtlFindInTunnelCache@32
 159 FsRtlGetFileSize@8
 160 FsRtlGetNextFileLock@8
 161 FsRtlGetNextLargeMcbEntry@20
 162 FsRtlGetNextMcbEntry@20
 163 FsRtlInitializeFileLock@12
 164 FsRtlInitializeLargeMcb@8
 165 FsRtlInitializeMcb@8
 166 FsRtlInitializeOplock@4
 167 FsRtlInitializeTunnelCache@4
 168 FsRtlIsDbcsInExpression@8
 169 FsRtlIsFatDbcsLegal@20
 170 FsRtlIsHpfsDbcsLegal@20
 171 FsRtlIsNameInExpression@16
 172 FsRtlIsNtstatusExpected@4
 173 FsRtlIsTotalDeviceFailure@4
 174 FsRtlLegalAnsiCharacterArray DATA
 175 FsRtlLookupLargeMcbEntry@32
 176 FsRtlLookupLastLargeMcbEntry@12
 177 FsRtlLookupLastMcbEntry@12
 178 FsRtlLookupMcbEntry@20
 179 FsRtlMdlRead@24
 180 FsRtlMdlReadComplete@8
 181 FsRtlMdlReadCompleteDev@12
 182 FsRtlMdlReadDev@28
 183 FsRtlMdlWriteComplete@12
 184 FsRtlMdlWriteCompleteDev@16
 185 FsRtlNormalizeNtstatus@8
 186 FsRtlNotifyChangeDirectory@28
 187 FsRtlNotifyCleanup@12
 188 FsRtlNotifyFullChangeDirectory@40
 189 FsRtlNotifyFullReportChange@36
 190 FsRtlNotifyInitializeSync@4
 191 FsRtlNotifyReportChange@20
 192 FsRtlNotifyUninitializeSync@4
 193 FsRtlNotifyVolumeEvent@8
 194 FsRtlNumberOfRunsInLargeMcb@4
 195 FsRtlNumberOfRunsInMcb@4
 196 FsRtlOplockFsctrl@12
 197 FsRtlOplockIsFastIoPossible@4
 198 FsRtlPostPagingFileStackOverflow@12
 199 FsRtlPostStackOverflow@12
 200 FsRtlPrepareMdlWrite@24
 201 FsRtlPrepareMdlWriteDev@28
 202 FsRtlPrivateLock@48
 203 FsRtlProcessFileLock@12
 204 FsRtlRegisterUncProvider@12
 205 FsRtlRemoveLargeMcbEntry@20
 206 FsRtlRemoveMcbEntry@12
 207 FsRtlSplitLargeMcb@20
 208 FsRtlSyncVolumes@12
 209 FsRtlTruncateLargeMcb@12
 210 FsRtlTruncateMcb@8
 211 FsRtlUninitializeFileLock@4
 212 FsRtlUninitializeLargeMcb@4
 213 FsRtlUninitializeMcb@4
 214 FsRtlUninitializeOplock@4
 215 HalDispatchTable DATA
 216 HalPrivateDispatchTable DATA
 217 @InterlockedCompareExchange@12
 218 @InterlockedDecrement@4
 219 @InterlockedExchange@8
 220 @InterlockedExchangeAdd@8
 221 @InterlockedIncrement@4
 222 IoAcquireCancelSpinLock@4
 223 IoAcquireRemoveLockEx@20
 224 IoAcquireVpbSpinLock@4
 225 IoAdapterObjectType DATA
 226 IoAllocateAdapterChannel@20
 227 IoAllocateController@16
 228 IoAllocateErrorLogEntry@8
 229 IoAllocateIrp@8
 230 IoAllocateMdl@20
 231 IoAssignResources@24
 232 IoAttachDevice@12
 233 IoAttachDeviceByPointer@8
 234 IoAttachDeviceToDeviceStack@8
 235 IoBuildAsynchronousFsdRequest@24
 236 IoBuildDeviceIoControlRequest@36
 237 IoBuildPartialMdl@16
 238 IoBuildSynchronousFsdRequest@28
 239 IoCallDriver@8
 240 IoCancelIrp@4
 241 IoCheckDesiredAccess@8
 242 IoCheckEaBufferValidity@12
 243 IoCheckFunctionAccess@24
 244 IoCheckShareAccess@20
 245 IoCompleteRequest@8
 246 IoConnectInterrupt@44
 247 IoCreateController@4
 248 IoCreateDevice@28
 249 IoCreateFile@56
 250 IoCreateNotificationEvent@8
 251 IoCreateStreamFileObject@8
 252 IoCreateSymbolicLink@8
 253 IoCreateSynchronizationEvent@8
 254 IoCreateUnprotectedSymbolicLink@8
 255 IoDeleteController@4
 256 IoDeleteDevice@4
 257 IoDeleteSymbolicLink@4
 258 IoDetachDevice@4
 259 IoDeviceHandlerObjectSize DATA
 260 IoDeviceHandlerObjectType DATA
 261 IoDisconnectInterrupt@4
 262 IoDeviceObjectType DATA
 263 IoDriverObjectType DATA
 264 IoEnqueueIrp@4
 265 IoFastQueryNetworkAttributes@20
 266 IoFileObjectType DATA
 267 IoFreeController@4
 268 IoFreeIrp@4
 269 IoFreeMdl@4
 270 IoGetAttachedDevice@4
 271 IoGetAttachedDeviceReference@4
 272 IoGetBaseFileSystemDeviceObject@4
 273 IoGetConfigurationInformation@0
 274 IoGetCurrentProcess@0
 275 IoGetDeviceObjectPointer@16
 276 IoGetDeviceToVerify@4
 277 IoGetFileObjectGenericMapping@0
 278 IoGetInitialStack@0
 279 IoGetRelatedDeviceObject@4
 280 IoGetRequestorProcess@4
 281 IoGetStackLimits@8
 282 IoGetTopLevelIrp@0
 283 IoInitializeIrp@12
 284 IoInvalidateDeviceState@4
 285 IoInitializeRemoveLockEx@20
 286 IoInitializeTimer@12
 287 IoIsOperationSynchronous@4
 288 IoMakeAssociatedIrp@8
 289 IoOpenDeviceInstanceKey@20
 290 IoPageRead@20
 291 IoQueryDeviceDescription@32
 292 IoQueryDeviceEnumInfo@8
 293 IoQueryFileInformation@20
 294 IoQueryVolumeInformation@20
 295 IoQueueThreadIrp@4
 296 IoRaiseHardError@12
 297 IoRaiseInformationalHardError@12
 298 IoReadOperationCount DATA
 299 IoReadPartitionTable@16
 300 IoReadTransferCount DATA
 301
 302 IoFreeWorkItem@4
 303 IoAllocateWorkItem@4
 304 IoQueueWorkItem@16
 305 IoRegisterDeviceInterface@16
 306 IoSetDeviceInterfaceState@8
 307 IoGetDeviceProperty@20
 308 IoOpenDeviceRegistryKey@16
 309 IoInvalidateDeviceRelations@8
 310
 311 IoRegisterDriverReinitialization@12
 312 IoRegisterFileSystem@4
 313 IoRegisterFsRegistrationChange@8
 314 IoRegisterShutdownNotification@4
 315 IoReleaseCancelSpinLock@4
 316 IoReleaseRemoveLockAndWaitEx@12
 317 IoReleaseRemoveLockEx@12
 318 IoReleaseVpbSpinLock@4
 319 IoRemoveShareAccess@8
 320 IoReportHalResourceUsage@16
 321 IoReportResourceUsage@36
 322 IoSetDeviceToVerify@8
 323 IoSetHardErrorOrVerifyDevice@8
 324 IoSetInformation@16
 325 IoSetPartitionInformation@16
 326 IoSetShareAccess@16
 327 IoSetThreadHardErrorMode@4
 328 IoSetTopLevelIrp@4
 329 IoStartNextPacket@8
 330 IoStartNextPacketByKey@12
 331 IoStartPacket@16
 332 IoStartTimer@4
 333 IoStatisticsLock DATA
 334 IoStopTimer@4
 335 IoSynchronousPageWrite@20
 336 IoThreadToProcess@4
 337 IoUnregisterFileSystem@4
 338 IoUnregisterFsRegistrationChange@8
 339 IoUnregisterShutdownNotification@4
 340 IoUpdateShareAccess@8
 341 IoVerifyVolume@8
 342 IoWriteErrorLogEntry@4
 343 IoWriteOperationCount DATA
 344 IoWritePartitionTable@20
 345 IoWriteTransferCount DATA
 346 @IofCallDriver@8
 347 @IofCompleteRequest@8
 348 KdDebuggerEnabled DATA
 349 KdDebuggerNotPresent DATA
 350 KdPollBreakIn@0
 351 KdSystemDebugControl@4
 352 Ke386CallBios@8
 353 ;Ke386IoSetAccessProcess
 354 ;Ke386QueryIoAccessMap
 355 ;Ke386SetIoAccessMap
 356 KeAcquireSpinLockAtDpcLevel@4
 357 KeAddSystemServiceTable@20
 358 KeAttachProcess@4
 359 ;KeBoostCurrentThread
 360 KeBugCheck@4
 361 KeBugCheckEx@20
 362 KeCancelTimer@4
 363 KeClearEvent@4
 364 KeConnectInterrupt@4
 365 KeDcacheFlushCount DATA
 366 KeDelayExecutionThread@12
 367 KeDeregisterBugCheckCallback@4
 368 KeDetachProcess@0
 369 KeDisconnectInterrupt@4
 370 KeEnterCriticalRegion@0
 371 KeEnterKernelDebugger@0
 372 ;KeFindConfigurationEntry
 373 ;KeFindConfigurationNextEntry
 374 ;KeFlushEntireTb
 375 KeGetCurrentThread@0
 376 KeGetPreviousMode@0
 377 ;KeI386AbiosCall
 378 ;KeI386AllocateGdtSelectors
 379 ;KeI386Call16BitCStyleFunction
 380 ;KeI386Call16BitFunction
 381 ;KeI386FlatToGdtSelector
 382 ;KeI386GetLid
 383 ;KeI386MachineType DATA
 384 ;KeI386ReleaseGdtSelectors
 385 ;KeI386ReleaseLid
 386 ;KeI386SetGdtSelector
 387 KeIcacheFlushCount DATA
 388 KeInitializeApc@32
 389 KeInitializeDeviceQueue@4
 390 KeInitializeDpc@12
 391 KeInitializeEvent@12
 392 KeInitializeInterrupt@44
 393 KeInitializeMutant@8
 394 KeInitializeMutex@8
 395 KeInitializeQueue@8
 396 KeInitializeSemaphore@12
 397 KeInitializeSpinLock@4
 398 KeInitializeTimer@4
 399 KeInitializeTimerEx@8
 400 KeInsertByKeyDeviceQueue@12
 401 KeInsertDeviceQueue@8
 402 KeInsertHeadQueue@8
 403 KeInsertQueue@8
 404 KeInsertQueueApc@16
 405 KeInsertQueueDpc@12
 406 ;KeIsExecutingDpc
 407 KeLeaveCriticalRegion@0
 408 KeLoaderBlock DATA
 409 KeNumberProcessors DATA
 410 ;KeProfileInterrupt
 411 ;KeProfileInterruptWithSource
 412 KePulseEvent@12
 413 KeQuerySystemTime@4
 414 KeQueryTickCount@4
 415 KeQueryTimeIncrement@0
 416 ;KeRaiseUserException
 417 KeReadStateEvent@4
 418 KeReadStateMutant@4
 419 KeReadStateMutex@4
 420 KeReadStateQueue@4
 421 KeReadStateSemaphore@4
 422 KeReadStateTimer@4
 423 KeRegisterBugCheckCallback@20
 424 KeReleaseMutant@16
 425 KeReleaseMutex@8
 426 KeReleaseSemaphore@16
 427 KeReleaseSpinLockFromDpcLevel@4
 428 KeRemoveByKeyDeviceQueue@8
 429 KeRemoveDeviceQueue@4
 430 KeRemoveEntryDeviceQueue@8
 431 KeRemoveQueue@12
 432 KeRemoveQueueDpc@4
 433 KeResetEvent@4
 434 ;KeRestoreFloatingPointState
 435 KeRundownQueue@4
 436 ;KeSaveFloatingPointState
 437 KeServiceDescriptorTable DATA
 438 ;KeSetAffinityThread
 439 KeSetBasePriorityThread@8
 440 ;KeSetDmaIoCoherency
 441 KeSetEvent@12
 442 ;KeSetEventBoostPriority
 443 ;KeSetIdealProcessorThread
 444 KeSetImportanceDpc@8
 445 ;KeSetKernelStackSwapEnable
 446 KeSetPriorityThread@8
 447 ;KeSetProfileIrql
 448 ;@KeSetSwapContextNotifyRoutine
 449 KeSetTargetProcessorDpc@8
 450 ;@KeSetThreadSelectNotifyRoutine
 451 ;KeSetTimeIncrement
 452 KeSetTimer@16
 453 KeSetTimerEx@20
 454 ;@KeSetTimeUpdateNotifyRoutine
 455 KeSynchronizeExecution@12
 456 ;KeTerminateThread
 457 KeTickCount DATA
 458 ;KeUpdateRunTime
 459 ;KeUserModeCallback
 460 KeWaitForMultipleObjects@32
 461 KeWaitForMutexObject@20
 462 KeWaitForSingleObject@20
 463 ;@KefAcquireSpinLockAtDpcLevel
 464 ;@KefReleaseSpinLockFromDpcLevel
 465 ;Kei386EoiHelper
 466 ;@KiAcquireSpinLock@4
 467 ;KiBugCheckData DATA
 468 ;KiCoprocessorError@0
 469 KiDeliverApc@12
 470 KiDispatchInterrupt@0
 471 KiInterruptDispatch2@8
 472 ;KiIpiServiceRoutine@8
 473 ;@KiReleaseSpinLock@4
 474 ;KiUnexpectedInterrupt
 475 ;Kii386SpinOnSpinLock
 476 KiRawTicks DATA
 477 LdrAccessResource@16
 478 ;LdrEnumResources@20
 479 ;LdrFindResourceDirectory_U@16
 480 LdrFindResource_U@16
 481 ;LpcRequestPort@8
 482 LsaCallAuthenticationPackage@28
 483 LsaDeregisterLogonProcess@8
 484 LsaFreeReturnBuffer@4
 485 LsaLogonUser@56
 486 LsaLookupAuthenticationPackage@12
 487 LsaRegisterLogonProcess@12
 488 MmAdjustWorkingSetSize@12
 489 MmAllocateContiguousAlignedMemory@16
 490 MmAllocateContiguousMemory@12
 491 MmAllocateNonCachedMemory@4
 492 MmBuildMdlForNonPagedPool@4
 493 MmCanFileBeTruncated@8
 494 MmCopyFromCaller@12
 495 MmCopyToCaller@12
 496 MmCreateMdl@12
 497 MmCreateSection@32
 498 MmDbgTranslatePhysicalAddress@8
 499 MmDisableModifiedWriteOfSection@4
 500 MmFlushImageSection@8
 501 MmForceSectionClosed@8
 502 MmFreeContiguousMemory@4
 503 MmFreeNonCachedMemory@8
 504 MmGetPhysicalAddress@4
 505 MmGrowKernelStack@4
 506 MmHighestUserAddress DATA
 507 MmIsAddressValid@4
 508 MmIsNonPagedSystemAddressValid@4
 509 MmIsRecursiveIoFault@0
 510 MmIsThisAnNtAsSystem@0
 511 MmLockPagableDataSection@4
 512 MmLockPagableImageSection@4=MmLockPagableDataSection@4
 513 MmLockPagableSectionByHandle@4
 514 MmMapIoSpace@16
 515 MmMapLockedPages@8
 516 MmMapMemoryDumpMdl@4
 517 MmMapVideoDisplay@16
 518 MmMapViewInSystemSpace@12
 519 MmMapViewOfSection@40
 520 MmPageEntireDriver@4
 521 MmProbeAndLockPages@12
 522 MmQuerySystemSize@0
 523 MmResetDriverPaging@4
 524 MmSectionObjectType DATA
 525 MmSecureVirtualMemory@12
 526 MmSetAddressRangeModified@8
 527 MmSetBankedSection@24
 528 MmSizeOfMdl@8
 529 MmUnlockPagableImageSection@4
 530 MmUnlockPages@4
 531 MmUnmapIoSpace@8
 532 MmUnmapLockedPages@8
 533 MmUnmapVideoDisplay@8
 534 MmUnmapViewInSystemSpace@4
 535 MmUnmapViewOfSection@8
 536 MmUnsecureVirtualMemory@4
 537 MmUserProbeAddress DATA
 538 NlsAnsiCodePage DATA
 539 NlsLeadByteInfo DATA
 540 NlsMbCodePageTag DATA
 541 NlsMbOemCodePageTag DATA
 542 NlsOemLeadByteInfo DATA
 543 NtAddAtom@8
 544 NtAdjustPrivilegesToken@24
 545 NtAlertThread@4
 546 NtAllocateLocallyUniqueId@4
 547 NtAllocateUuids@12
 548 NtAllocateVirtualMemory@24
 549 NtBuildNumber DATA
 550 NtClose@4
 551 NtConnectPort@32
 552 NtCreateEvent@20
 553 NtCreateTimer@16
 554 NtOpenEvent@12
 555 NtCreateFile@44
 556 NtCreateSection@28
 557 NtDeleteAtom@4
 558 NtDeleteFile@4
 559 NtDeviceIoControlFile@40
 560 NtDuplicateObject@28
 561 NtDuplicateToken@24
 562 NtFindAtom@8
 563 NtFreeVirtualMemory@16
 564 NtFsControlFile@40
 565 NtGlobalFlag DATA
 566 NtLockFile@40
 567 NtMapViewOfSection@40
 568 NtNotifyChangeDirectoryFile@36
 569 NtOpenFile@24
 570 NtOpenProcess@16
 571 NtOpenProcessToken@12
 572 NtQueryDirectoryFile@44
 573 NtQueryEaFile@36
 574 NtQueryInformationAtom@20
 575 NtQueryInformationFile@20
 576 NtQueryInformationProcess@20
 577 NtQueryInformationToken@20
 578 ;NtQueryOleDirectoryFile@ <--- ?
 579 NtQuerySecurityObject@20
 580 NtQuerySystemTime@4
 581 NtQueryVolumeInformationFile@20
 582 NtReadFile@36
 583 NtRequestPort@20
 584 NtRequestWaitReplyPort@12
 585 NtSetEvent@8
 586 NtSetInformationFile@20
 587 NtSetInformationProcess@16
 588 NtSetInformationThread@16
 589 NtSetSecurityObject@12
 590 NtSetSystemTime@8
 591 NtUnlockFile@20
 592 NtVdmControl@8
 593 NtW32Call@20
 594 NtWaitForSingleObject@12
 595 NtWriteFile@36
 596 ObAssignSecurity@16
 597 ;ObCheckCreateObjectAccess@28
 598 ;ObCheckObjectAccess@20
 599 ;ObCreateObject@36
 600 ObCreateObject@20
 601 ;ObFindHandleForObject@20
 602 ObGetObjectPointerCount@4
 603 ObGetObjectSecurity@12
 604 ;ObInsertObject@24
 605 ObMakeTemporaryObject@4
 606 ObOpenObjectByName@28
 607 ObOpenObjectByPointer@28
 608 ;ObQueryNameString@16
 609 ;ObQueryObjectAuditingByHandle@8
 610 @ObfDereferenceObject@4
 611 @ObfReferenceObject@4
 612 ObReferenceObjectByHandle@24
 613 ObReferenceObjectByName@32
 614 ObReferenceObjectByPointer@16
 615 ObReleaseObjectSecurity@8
 616 ;ObSetSecurityDescriptorInfo@24
 617 ;PfxFindPrefix
 618 ;PfxInitialize
 619 ;PfxInsertPrefix
 620 ;PfxRemovePrefix
 621 PoCallDriver@8
 622 PoRegisterDeviceForIdleDetection@16
 623 PoRegisterSystemState@8
 624 PoRequestPowerIrp@24
 625 PoSetDeviceBusy@4
 626 PoSetPowerState@12
 627 PoSetSystemState@4
 628 PoStartNextPowerIrp@4
 629 PoUnregisterSystemState@4
 630 ;ProbeForWrite@12
 631 PsAssignImpersonationToken@8
 632 ;PsChargePoolQuota@12
 633 PsCreateSystemProcess@12
 634 PsCreateSystemThread@28
 635 PsCreateWin32Thread@4
 636 PsCreateWin32Process@4
 637 PsGetWin32Thread@0
 638 PsGetWin32Process@0
 639 PsEstablishWin32Callouts@24
 640 PsGetCurrentProcess@0
 641 PsGetCurrentProcessId@0
 642 PsGetCurrentThreadId@0
 643 PsGetCurrentThread@0
 644 PsGetProcessExitTime@0
 645 PsGetVersion@16
 646 PsImpersonateClient@20
 647 PsInitialSystemProcess DATA
 648 PsIsThreadTerminating@4
 649 PsLookupProcessByProcessId@8
 650 PsLookupProcessThreadByCid@12
 651 PsLookupThreadByThreadId@8
 652 PsProcessType DATA
 653 PsReferenceImpersonationToken@16
 654 PsReferencePrimaryToken@4
 655 ;PsReturnPoolQuota@12
 656 PsRevertToSelf@0
 657 PsSetCreateProcessNotifyRoutine@8
 658 PsSetCreateThreadNotifyRoutine@4
 659 ;PsSetLegoNotifyRoutine@4
 660 ;PsSetProcessPriorityByClass@8
 661 PsTerminateSystemThread@4
 662 PsThreadType DATA
 663 READ_REGISTER_UCHAR@4
 664 READ_REGISTER_ULONG@4
 665 READ_REGISTER_USHORT@4
 666 READ_REGISTER_BUFFER_UCHAR@12
 667 READ_REGISTER_BUFFER_ULONG@12
 668 READ_REGISTER_BUFFER_USHORT@12
 669 RtlAbsoluteToSelfRelativeSD@12
 670 RtlAddAccessAllowedAce@16
 671 RtlAddAce@20
 672 RtlAddAtomToAtomTable@12
 673 ;RtlAllocateAndInitializeSid
 674 ;RtlAllocateHeap
 675 RtlAnsiCharToUnicodeChar@4
 676 RtlAnsiStringToUnicodeSize@4
 677 RtlAnsiStringToUnicodeString@12
 678 RtlAppendAsciizToString@8
 679 RtlAppendStringToString@8
 680 RtlAppendUnicodeStringToString@8
 681 RtlAppendUnicodeToString@8
 682 RtlAreAllAccessesGranted@8
 683 RtlAreAnyAccessesGranted@8
 684 RtlAreBitsClear@12
 685 RtlAreBitsSet@12
 686 RtlAssert@16
 687 ;RtlCaptureStackBackTrace
 688 RtlCharToInteger@12
 689 RtlCheckRegistryKey@8
 690 RtlClearAllBits@4
 691 RtlClearBits@12
 692 RtlCompareMemory@12
 693 RtlCompareMemoryUlong@12
 694 RtlCompareString@12
 695 RtlCompareUnicodeString@12
 696 RtlCompressBuffer@32
 697 RtlCompressChunks@28
 698 RtlConvertLongToLargeInteger@4
 699 RtlConvertSidToUnicodeString@12
 700 RtlConvertUlongToLargeInteger@4
 701 RtlCopyLuid@8
 702 RtlCopySid@12
 703 RtlCopyString@8
 704 RtlCopyUnicodeString@8
 705 RtlCreateAcl@12
 706 RtlCreateAtomTable@8
 707 ;RtlCreateHeap
 708 RtlCreateRegistryKey@8
 709 RtlCreateSecurityDescriptor@8
 710 RtlCreateUnicodeString@8
 711 RtlCustomCPToUnicodeN@24
 712 RtlDecompressBuffer@24
 713 RtlDecompressChunks@28
 714 RtlDecompressFragment@32
 715 ;RtlDelete
 716 RtlDeleteAtomFromAtomTable@8
 717 ;RtlDeleteElementGenericTable
 718 ;RtlDeleteNoSplay
 719 RtlDeleteRegistryValue@12
 720 RtlDescribeChunk@20
 721 RtlDestroyAtomTable@4
 722 ;RtlDestroyHeap
 723 RtlDowncaseUnicodeString@12
 724 RtlEmptyAtomTable@8
 725 RtlEnlargedIntegerMultiply@8
 726 RtlEnlargedUnsignedDivide@16
 727 RtlEnlargedUnsignedMultiply@8
 728 ;RtlEnumerateGenericTable
 729 ;RtlEnumerateGenericTableWithoutSplaying
 730 RtlEqualLuid@8
 731 RtlEqualSid@8
 732 RtlEqualString@12
 733 RtlEqualUnicodeString@12
 734 RtlExtendedIntegerMultiply@12
 735 RtlExtendedLargeIntegerDivide@16
 736 RtlExtendedMagicDivide@20
 737 RtlFillMemory@12
 738 RtlFillMemoryUlong@12
 739 RtlFindClearBits@12
 740 RtlFindClearBitsAndSet@12
 741 RtlFindFirstRunClear@8
 742 RtlFindFirstRunSet@8
 743 RtlFindLongestRunClear@8
 744 RtlFindLongestRunSet@8
 745 RtlFindMessage@20
 746 RtlFindSetBits@12
 747 RtlFindSetBitsAndClear@12
 748 ;RtlFindUnicodePrefix
 749 RtlFormatCurrentUserKeyPath@4
 750 RtlFreeAnsiString@4
 751 ;RtlFreeHeap
 752 RtlFreeOemString@4
 753 RtlFreeUnicodeString@4
 754 RtlGenerate8dot3Name@16
 755 ;RtlGetCallersAddress
 756 RtlGetCompressionWorkSpaceSize@12
 757 RtlGetDaclSecurityDescriptor@16
 758 RtlGetDefaultCodePage@8
 759 ;RtlGetElementGenericTable
 760 RtlGetGroupSecurityDescriptor@12
 761 RtlGetOwnerSecurityDescriptor@12
 762 RtlImageNtHeader@4
 763 RtlInitAnsiString@8
 764 ;RtlInitCodePageTable
 765 RtlInitString@8
 766 RtlInitUnicodeString@8
 767 RtlInitializeBitMap@12
 768 ;RtlInitializeGenericTable
 769 RtlInitializeSid@12
 770 ;RtlInitializeUnicodePrefix
 771 ;RtlInsertElementGenericTable
 772 ;RtlInsertUnicodePrefix
 773 RtlIntegerToChar@16
 774 RtlIntegerToUnicodeString@12
 775 RtlIsNameLegalDOS8Dot3@12
 776 RtlLargeIntegerAdd@16
 777 RtlLargeIntegerArithmeticShift@12
 778 RtlLargeIntegerDivide@20
 779 RtlLargeIntegerNegate@8
 780 RtlLargeIntegerShiftLeft@12
 781 RtlLargeIntegerShiftRight@12
 782 RtlLargeIntegerSubtract@16
 783 RtlLengthRequiredSid@4
 784 RtlLengthSecurityDescriptor@4
 785 RtlLengthSid@4
 786 RtlLookupAtomInAtomTable@12
 787 ;RtlLookupElementGenericTable
 788 RtlMapGenericMask@8
 789 RtlMoveMemory@12
 790 RtlMultiByteToUnicodeN@20
 791 RtlMultiByteToUnicodeSize@12
 792 ;RtlNextUnicodePrefix
 793 RtlNtStatusToDosError@4
 794 RtlNtStatusToDosErrorNoTeb@4
 795 ;RtlNumberGenericTableElements
 796 RtlNumberOfClearBits@4
 797 RtlNumberOfSetBits@4
 798 RtlOemStringToCountedUnicodeString@12
 799 RtlOemStringToUnicodeSize@4
 800 RtlOemStringToUnicodeString@12
 801 RtlOemToUnicodeN@20
 802 RtlPinAtomInAtomTable@8
 803 RtlPrefixString@12
 804 RtlPrefixUnicodeString@12
 805 RtlQueryAtomInAtomTable@24
 806 RtlQueryRegistryValues@20
 807 RtlQueryTimeZoneInformation@4
 808 RtlRaiseException@4
 809 ;RtlRandom
 810 ;RtlRemoveUnicodePrefix
 811 RtlReserveChunk@20
 812 RtlSecondsSince1970ToTime@8
 813 RtlSecondsSince1980ToTime@8
 814 RtlSetAllBits@4
 815 RtlSetBits@12
 816 RtlSetDaclSecurityDescriptor@16
 817 RtlSetGroupSecurityDescriptor@12
 818 RtlSetOwnerSecurityDescriptor@12
 819 RtlSetSaclSecurityDescriptor@16
 820 RtlSetTimeZoneInformation@4
 821 ;RtlSplay
 822 RtlSubAuthorityCountSid@4
 823 RtlSubAuthoritySid@8
 824 RtlTimeFieldsToTime@8
 825 RtlTimeToSecondsSince1970@8
 826 RtlTimeToSecondsSince1980@8
 827 RtlTimeToTimeFields@8
 828 RtlUnicodeStringToAnsiSize@4
 829 RtlUnicodeStringToAnsiString@12
 830 RtlUnicodeStringToCountedOemString@12
 831 RtlUnicodeStringToInteger@12
 832 RtlUnicodeStringToOemSize@4
 833 RtlUnicodeStringToOemString@12
 834 RtlUnicodeToCustomCPN@24
 835 RtlUnicodeToMultiByteN@20
 836 RtlUnicodeToMultiByteSize@12
 837 RtlUnicodeToOemN@20
 838 RtlUnwind@16
 839 RtlUpcaseUnicodeChar@4
 840 RtlUpcaseUnicodeString@12
 841 RtlUpcaseUnicodeStringToAnsiString@12
 842 RtlUpcaseUnicodeStringToCountedOemString@12
 843 RtlUpcaseUnicodeStringToOemString@12
 844 RtlUpcaseUnicodeToCustomCPN@24
 845 RtlUpcaseUnicodeToMultiByteN@20
 846 RtlUpcaseUnicodeToOemN@20
 847 RtlUpperChar@4
 848 RtlUpperString@8
 849 RtlValidSecurityDescriptor@4
 850 RtlValidSid@4
 851 RtlWriteRegistryValue@24
 852 ;RtlZeroHeap
 853 RtlZeroMemory@8
 854 RtlxAnsiStringToUnicodeSize@4
 855 RtlxOemStringToUnicodeSize@4
 856 RtlxUnicodeStringToAnsiSize@4
 857 RtlxUnicodeStringToOemSize@4
 858 SeAccessCheck@40
 859 ;SeAppendPrivileges@8
 860 SeAssignSecurity@28
 861 ;SeAuditingFileEvents@8
 862 ;SeAuditingFileOrGlobalEvents@18
 863 ;SeCaptureSecurityDescriptor@20
 864 SeCaptureSubjectContext@4
 865 ;SeCloseObjectAuditAlarm@12
 866 ;SeCreateAccessState@16
 867 SeCreateClientSecurity@16
 868 SeDeassignSecurity@4
 869 ;SeDeleteAccessState@4
 870 ;SeDeleteObjectAuditAlarm@8
 871 SeExports DATA
 872 ;SeFreePrivileges@4
 873 SeImpersonateClient@8
 874 ;SeLockSubjectContext@4
 875 ;SeMarkLogonSessionForTerminationNotification@4
 876 ;SeOpenObjectAuditAlarm@36
 877 ;SeOpenObjectForDeleteAuditAlarm@36
 878 SePrivilegeCheck@12
 879 ;SePrivilegeObjectAuditAlarm@24
 880 SePublicDefaultDacl DATA
 881 ;SeQueryAuthenticationIdToken@8
 882 ;SeQuerySecurityDescriptorInfo@16
 883 ;SeRegisterLogonSessionTerminatedRoutine@4
 884 ;SeReleaseSecurityDescriptor@12
 885 SeReleaseSubjectContext@4
 886 ;SeSetAccessStateGenericMapping@8
 887 ;SeSetSecurityDescriptorInfo@24
 888 SeSinglePrivilegeCheck@12
 889 SeSystemDefaultDacl DATA
 890 SeTokenImpersonationLevel@4
 891 SeTokenType@4
 892 ;SeUnlockSubjectContext@4
 893 ;SeUnregisterLogonSessionTerminatedRoutine@4
 894 ;SeValidSecurityDescriptor@8
 895 WRITE_REGISTER_UCHAR@8
 896 WRITE_REGISTER_ULONG@8
 897 WRITE_REGISTER_USHORT@8
 898 WRITE_REGISTER_BUFFER_UCHAR@12
 899 WRITE_REGISTER_BUFFER_ULONG@12
 900 WRITE_REGISTER_BUFFER_USHORT@12
 901 ZwAccessCheckAndAuditAlarm@44
 902 ZwAlertThread@4
 903 ZwAllocateVirtualMemory@24
 904 ZwClearEvent@4
 905 ZwClose@4
 906 ZwCloseObjectAuditAlarm@12
 907 ZwConnectPort@32
 908 ZwCreateDirectoryObject@12
 909 ZwCreateEvent@20
 910 ZwCreateFile@44
 911 ZwCreateKey@28
 912 ZwCreateSection@28
 913 ZwCreateSymbolicLinkObject@16
 914 ZwDeleteFile@4
 915 ZwDeleteKey@4
 916 ZwDeleteValueKey@8
 917 ZwDeviceIoControlFile@40
 918 ZwDisplayString@4
 919 ZwDuplicateObject@28
 920 ZwDuplicateToken@24
 921 ZwEnumerateKey@24
 922 ZwEnumerateValueKey@24
 923 ZwFlushInstructionCache@12
 924 ZwFlushKey@4
 925 ZwFreeVirtualMemory@16
 926 ZwFsControlFile@40
 927 ZwLoadDriver@4
 928 ZwLoadKey@8
 929 ZwMakeTemporaryObject@4
 930 ZwMapViewOfSection@40
 931 ZwNotifyChangeKey@40
 932 ZwOpenDirectoryObject@12
 933 ZwOpenEvent@12
 934 ZwOpenFile@24
 935 ZwOpenKey@12
 936 ZwOpenProcess@16
 937 ZwOpenProcessToken@12
 938 ZwOpenSection@12
 939 ZwOpenSymbolicLinkObject@12
 940 ZwOpenThread@16
 941 ZwOpenThreadToken@16
 942 ZwPulseEvent@8
 943 ZwQueryDefaultLocale@8
 944 ZwQueryDirectoryFile@44
 945 ZwQueryInformationAtom@20
 946 ZwQueryInformationFile@20
 947 ZwQueryInformationProcess@20
 948 ZwQueryInformationToken@20
 949 ZwQueryKey@20
 950 ZwQueryObject@20
 951 ZwQuerySection@20
 952 ZwQuerySecurityObject@20
 953 ZwQuerySymbolicLinkObject@12
 954 ZwQuerySystemInformation@16
 955 ZwQuerySystemTime@4
 956 ZwQueryValueKey@24
 957 ZwQueryVolumeInformationFile@20
 958 ZwReadFile@36
 959 ZwReplaceKey@12
 960 ZwRequestWaitReplyPort@12
 961 ZwResetEvent@8
 962 ZwSaveKey@8
 963 ZwSetDefaultLocale@8
 964 ZwSetEvent@8
 965 ZwSetInformationFile@20
 966 ZwSetInformationObject@16
 967 ZwSetInformationProcess@16
 968 ZwSetInformationThread@16
 969 ZwSetSystemInformation@12
 970 ZwSetSystemTime@8
 971 ZwSetValueKey@24
 972 ZwTerminateProcess@8
 973 ZwUnloadDriver@4
 974 ZwUnloadKey@4
 975 ZwUnmapViewOfSection@8
 976 ZwWaitForMultipleObjects@20
 977 ZwWaitForSingleObject@12
 978 ZwWriteFile@36
 979 ZwYieldExecution@0
 980 _abnormal_termination
 981 ;_alldiv
 982 ;_allmul
 983 ;_allrem
 984 ;_allshl
 985 ;_allshr
 986 ;_aulldiv
 987 ;_aullrem
 988 ;_aullshr
 989 _except_handler2
 990 _except_handler3
 991 _global_unwind2
 992 _itoa
 993 _local_unwind2
 994 _purecall
 995 _snprintf
 996 _snwprintf
 997 _stricmp
 998 _strlwr
 999 _strnicmp
1000 _strnset
1001 _strrev
1002 _strset
1003 _strupr
1004 _vsnprintf
1005 _wcsicmp
1006 _wcslwr
1007 _wcsnicmp
1008 _wcsnset
1009 _wcsrev
1010 _wcsupr
1011 atoi
1012 atol
1013 isdigit
1014 islower
1015 isprint
1016 isspace
1017 isupper
1018 isxdigit
1019 mbstowcs
1020 mbtowc
1021 memchr
1022 memcpy
1023 memmove
1024 memset
1025 qsort
1026 rand
1027 sprintf
1028 srand
1029 strcat
1030 strchr
1031 strcmp
1032 strcpy
1033 strlen
1034 strncat
1035 strncmp
1036 strncpy
1037 strrchr
1038 strspn
1039 strstr
1040 swprintf
1041 tolower
1042 toupper
1043 towlower
1044 towupper
1045 vsprintf
1046 wcscat
1047 wcschr
1048 wcscmp
1049 wcscpy
1050 wcscspn
1051 wcslen
1052 wcsncat
1053 wcsncmp
1054 wcsncpy
1055 wcsrchr
1056 wcsspn
1057 wcsstr
1058 wcstombs
1059 wctomb