Fixed prototype for MmSetAddressRangeModified().
[reactos.git] / ntoskrnl / ntoskrnl.def
1 ; $Id$
2 ;
3 ; reactos/ntoskrnl/ntoskrnl.def
4 ;
5 ; ReactOS Operating System
6 ;
7 EXPORTS
8 CcRosInitializeFileCache@8
9 CcRosReleaseFileCache@4
10 CcCopyRead@24
11 CcCopyWrite@20
12 CcFlushCache@16
13 CcGetFileObjectFromSectionPtrs@4
14 CcMapData@24
15 CcMdlReadComplete@8
16 CcSetDirtyPinnedData@8
17 CcSetFileSizes@8
18 CcUnpinData@4
19 CcZeroData@16
20 DbgBreakPoint@0
21 DbgBreakPointWithStatus@4
22 ;DbgLoadImageSymbols@12
23 DbgPrint
24 DbgPrompt@12
25 DpcQueueSize DATA
26 @ExAcquireFastMutexUnsafe@4
27 ExAcquireResourceExclusive@8
28 ExAcquireResourceExclusiveLite@8
29 ExAcquireResourceSharedLite@8
30 ExAcquireSharedStarveExclusive@8
31 ExAcquireSharedWaitForExclusive@8
32 ExAllocateFromPagedLookasideList@4
33 ExAllocatePool@8
34 ExAllocatePoolWithQuota@8
35 ExAllocatePoolWithQuotaTag@12
36 ExAllocatePoolWithTag@12
37 ExConvertExclusiveToSharedLite@4
38 ExCreateCallback@16
39 ExDeleteNPagedLookasideList@4
40 ExDeletePagedLookasideList@4
41 ExDeleteResource@4
42 ExDeleteResourceLite@4
43 ExDesktopObjectType DATA
44 ExDisableResourceBoostLite@4
45 ExEventObjectType DATA
46 ExExtendZone@12
47 ExFreePool@4
48 ExFreeToPagedLookasideList@8
49 ExGetExclusiveWaiterCount@4
50 ExGetPreviousMode@0
51 ExGetSharedWaiterCount@4
52 ExInitializeNPagedLookasideList@28
53 ExInitializePagedLookasideList@28
54 ExInitializeResource@4
55 ExInitializeResourceLite@4
56 ExInitializeZone@16
57 ExInterlockedAddLargeInteger@16
58 @ExInterlockedAddLargeStatistic@8
59 ExInterlockedAddUlong@12
60 @ExInterlockedCompareExchange64@16
61 ExInterlockedDecrementLong@8
62 ExInterlockedExchangeUlong@12
63 ExInterlockedExtendZone@16
64 ExInterlockedIncrementLong@8
65 ExInterlockedInsertHeadList@12
66 ExInterlockedInsertTailList@12
67 ExInterlockedPopEntryList@8
68 @ExInterlockedPopEntrySList@8
69 ExInterlockedPushEntryList@12
70 @ExInterlockedPushEntrySList@12
71 ExInterlockedRemoveHeadList@8
72 ExIsProcessorFeaturePresent@4
73 ExIsResourceAcquiredExclusiveLite@4
74 ExIsResourceAcquiredSharedLite@4
75 ExLocalTimeToSystemTime@8
76 ExNotifyCallback@12
77 ExPostSystemEvent@12
78 ;ExQueryPoolBlockSize
79 ExQueueWorkItem@8
80 ExRaiseAccessViolation@0
81 ExRaiseDatatypeMisalignment@0
82 ;ExRaiseException
83 ;ExRaiseHardError
84 ExRaiseStatus@4
85 ExRegisterCallback@12
86 ExReinitializeResourceLite@4
87 @ExReleaseFastMutexUnsafe@4
88 ExReleaseResourceForThread@8
89 ExReleaseResourceForThreadLite@8
90 @ExReleaseResourceLite@4
91 ExSetResourceOwnerPointer@8
92 ;ExSystemExceptionFilter
93 ExSystemTimeToLocalTime@8
94 ExTryToAcquireResourceExclusiveLite@4
95 ExUnregisterCallback@4
96 ExWindowStationObjectType DATA
97 ExInitializeBinaryTree@12
98 ExDeleteBinaryTree@4
99 ExInsertBinaryTree@12
100 ExSearchBinaryTree@12
101 ExRemoveBinaryTree@12
102 ExTraverseBinaryTree@16
103 ExInitializeSplayTree@16
104 ExDeleteSplayTree@4
105 ExInsertSplayTree@12
106 ExSearchSplayTree@12
107 ExRemoveSplayTree@12
108 ExWeightOfSplayTree@8
109 ExTraverseSplayTree@16
110 ExInitializeHashTable@16
111 ExDeleteHashTable@4
112 ExInsertHashTable@16
113 ExSearchHashTable@16
114 ExRemoveHashTable@16
115 @ExfInterlockedAddUlong@12
116 @ExfInterlockedInsertHeadList@12
117 @ExfInterlockedInsertTailList@12
118 @ExfInterlockedPopEntryList@8
119 @ExfInterlockedPushEntryList@12
120 @ExfInterlockedRemoveHeadList@8
121 @Exfi386InterlockedDecrementLong@4
122 @Exfi386InterlockedExchangeUlong@8
123 @Exfi386InterlockedIncrementLong@4
124 Exi386InterlockedDecrementLong@4
125 Exi386InterlockedExchangeUlong@8
126 Exi386InterlockedIncrementLong@4
127 FsRtlAddLargeMcbEntry@28
128 FsRtlAddMcbEntry@16
129 FsRtlAddToTunnelCache@32
130 FsRtlAllocateFileLock@8
131 FsRtlAllocatePool@8
132 FsRtlAllocatePoolWithQuota@8
133 FsRtlAllocatePoolWithQuotaTag@12
134 FsRtlAllocatePoolWithTag@12
135 FsRtlAllocateResource@0
136 FsRtlAreNamesEqual@16
137 FsRtlBalanceReads@4
138 FsRtlCheckLockForReadAccess@8
139 FsRtlCheckLockForWriteAccess@8
140 FsRtlCheckOplock@20
141 FsRtlCopyRead@32
142 FsRtlCopyWrite@32
143 FsRtlCurrentBatchOplock@4
144 FsRtlDeleteKeyFromTunnelCache@12
145 FsRtlDeleteTunnelCache@4
146 FsRtlDeregisterUncProvider@4
147 FsRtlDissectDbcs@16
148 FsRtlDissectName@16
149 FsRtlDoesDbcsContainWildCards@4
150 FsRtlDoesNameContainWildCards@4
151 FsRtlFastCheckLockForRead@24
152 FsRtlFastCheckLockForWrite@24
153 FsRtlFastUnlockAll@16
154 FsRtlFastUnlockAllByKey@20
155 FsRtlFastUnlockSingle@32
156 FsRtlFindInTunnelCache@32
157 FsRtlGetFileSize@8
158 FsRtlGetNextFileLock@8
159 FsRtlGetNextLargeMcbEntry@20
160 FsRtlGetNextMcbEntry@20
161 FsRtlInitializeFileLock@12
162 FsRtlInitializeLargeMcb@8
163 FsRtlInitializeMcb@8
164 FsRtlInitializeOplock@4
165 FsRtlInitializeTunnelCache@4
166 FsRtlIsDbcsInExpression@8
167 FsRtlIsFatDbcsLegal@20
168 FsRtlIsHpfsDbcsLegal@20
169 FsRtlIsNameInExpression@16
170 FsRtlIsNtstatusExpected@4
171 FsRtlIsTotalDeviceFailure@4
172 FsRtlLegalAnsiCharacterArray DATA
173 FsRtlLookupLargeMcbEntry@32
174 FsRtlLookupLastLargeMcbEntry@12
175 FsRtlLookupLastMcbEntry@12
176 FsRtlLookupMcbEntry@20
177 FsRtlMdlRead@24
178 FsRtlMdlReadComplete@8
179 FsRtlMdlReadCompleteDev@12
180 FsRtlMdlReadDev@28
181 FsRtlMdlWriteComplete@12
182 FsRtlMdlWriteCompleteDev@16
183 FsRtlNormalizeNtstatus@8
184 FsRtlNotifyChangeDirectory@28
185 FsRtlNotifyCleanup@12
186 FsRtlNotifyFullChangeDirectory@40
187 FsRtlNotifyFullReportChange@36
188 FsRtlNotifyInitializeSync@4
189 FsRtlNotifyReportChange@20
190 FsRtlNotifyUninitializeSync@4
191 FsRtlNotifyVolumeEvent@8
192 FsRtlNumberOfRunsInLargeMcb@4
193 FsRtlNumberOfRunsInMcb@4
194 FsRtlOplockFsctrl@12
195 FsRtlOplockIsFastIoPossible@4
196 FsRtlPostPagingFileStackOverflow@12
197 FsRtlPostStackOverflow@12
198 FsRtlPrepareMdlWrite@24
199 FsRtlPrepareMdlWriteDev@28
200 FsRtlPrivateLock@48
201 FsRtlProcessFileLock@12
202 FsRtlRegisterUncProvider@12
203 FsRtlRemoveLargeMcbEntry@20
204 FsRtlRemoveMcbEntry@12
205 FsRtlSplitLargeMcb@20
206 FsRtlSyncVolumes@12
207 FsRtlTruncateLargeMcb@12
208 FsRtlTruncateMcb@8
209 FsRtlUninitializeFileLock@4
210 FsRtlUninitializeLargeMcb@4
211 FsRtlUninitializeMcb@4
212 FsRtlUninitializeOplock@4
213 HalDispatchTable DATA
214 HalPrivateDispatchTable DATA
215 InbvAcquireDisplayOwnership@0
216 InbvCheckDisplayOwnership@0
217 InbvDisplayString@4
218 InbvEnableBootDriver@4
219 InbvEnableDisplayString@4
220 InbvInstallDisplayStringFilter@4
221 InbvIsBootDriverInstalled@0
222 InbvNotifyDisplayOwnershipLost@4
223 InbvResetDisplay@0
224 InbvSetScrollRegion@16
225 InbvSetTextColor@4
226 InbvSolidColorFill@20
227 @InterlockedCompareExchange@12
228 @InterlockedDecrement@4
229 @InterlockedExchange@8
230 @InterlockedExchangeAdd@8
231 @InterlockedIncrement@4
232 @InterlockedPopEntrySList@4
233 @InterlockedPushEntrySList@8
234 IoAcquireCancelSpinLock@4
235 IoAcquireRemoveLockEx@20
236 IoAcquireVpbSpinLock@4
237 IoAdapterObjectType DATA
238 IoAllocateAdapterChannel@20
239 IoAllocateController@16
240 IoAllocateErrorLogEntry@8
241 IoAllocateIrp@8
242 IoAllocateMdl@20
243 IoAssignResources@24
244 IoAttachDevice@12
245 IoAttachDeviceByPointer@8
246 IoAttachDeviceToDeviceStack@8
247 IoBuildAsynchronousFsdRequest@24
248 IoBuildDeviceIoControlRequest@36
249 IoBuildPartialMdl@16
250 IoBuildSynchronousFsdRequest@28
251 IoCallDriver@8
252 IoCancelIrp@4
253 IoCheckDesiredAccess@8
254 IoCheckEaBufferValidity@12
255 IoCheckFunctionAccess@24
256 IoCheckShareAccess@20
257 IoCompleteRequest@8
258 IoConnectInterrupt@44
259 IoCreateController@4
260 IoCreateDevice@28
261 IoCreateFile@56
262 IoCreateNotificationEvent@8
263 IoCreateStreamFileObject@8
264 IoCreateSymbolicLink@8
265 IoCreateSynchronizationEvent@8
266 IoCreateUnprotectedSymbolicLink@8
267 IoDeleteController@4
268 IoDeleteDevice@4
269 IoDeleteSymbolicLink@4
270 IoDetachDevice@4
271 IoDeviceHandlerObjectSize DATA
272 IoDeviceHandlerObjectType DATA
273 IoDisconnectInterrupt@4
274 IoDeviceObjectType DATA
275 IoDriverObjectType DATA
276 IoEnqueueIrp@4
277 IoFastQueryNetworkAttributes@20
278 IoFileObjectType DATA
279 IoFreeController@4
280 IoFreeIrp@4
281 IoFreeMdl@4
282 IoGetAttachedDevice@4
283 IoGetAttachedDeviceReference@4
284 IoGetBaseFileSystemDeviceObject@4
285 IoGetConfigurationInformation@0
286 IoGetCurrentProcess@0
287 IoGetDeviceObjectPointer@16
288 IoGetDeviceToVerify@4
289 IoGetFileObjectGenericMapping@0
290 IoGetInitialStack@0
291 IoGetRelatedDeviceObject@4
292 IoGetRequestorProcess@4
293 IoGetStackLimits@8
294 IoGetTopLevelIrp@0
295 IoInitializeIrp@12
296 IoInvalidateDeviceState@4
297 IoInitializeRemoveLockEx@20
298 IoInitializeTimer@12
299 IoIsOperationSynchronous@4
300 IoMakeAssociatedIrp@8
301 IoOpenDeviceInstanceKey@20
302 IoPageRead@20
303 IoQueryDeviceDescription@32
304 IoQueryDeviceEnumInfo@8
305 IoQueryFileInformation@20
306 IoQueryVolumeInformation@20
307 IoQueueThreadIrp@4
308 IoRaiseHardError@12
309 IoRaiseInformationalHardError@12
310 IoReadOperationCount DATA
311 @IoReadPartitionTable@16
312 IoReadTransferCount DATA
313
314 IoFreeWorkItem@4
315 IoAllocateWorkItem@4
316 IoQueueWorkItem@16
317 IoRegisterDeviceInterface@16
318 IoSetDeviceInterfaceState@8
319 IoGetDeviceProperty@20
320 IoOpenDeviceRegistryKey@16
321 IoInvalidateDeviceRelations@8
322
323 IoRegisterDriverReinitialization@12
324 IoRegisterFileSystem@4
325 IoRegisterFsRegistrationChange@8
326 IoRegisterShutdownNotification@4
327 IoReleaseCancelSpinLock@4
328 IoReleaseRemoveLockAndWaitEx@12
329 IoReleaseRemoveLockEx@12
330 IoReleaseVpbSpinLock@4
331 IoRemoveShareAccess@8
332 IoReportHalResourceUsage@16
333 IoReportResourceUsage@36
334 IoSetDeviceToVerify@8
335 IoSetHardErrorOrVerifyDevice@8
336 IoSetInformation@16
337 @IoSetPartitionInformation@16
338 IoSetShareAccess@16
339 IoSetThreadHardErrorMode@4
340 IoSetTopLevelIrp@4
341 IoStartNextPacket@8
342 IoStartNextPacketByKey@12
343 IoStartPacket@16
344 IoStartTimer@4
345 IoStatisticsLock DATA
346 IoStopTimer@4
347 IoSynchronousPageWrite@20
348 IoThreadToProcess@4
349 IoUnregisterFileSystem@4
350 IoUnregisterFsRegistrationChange@8
351 IoUnregisterShutdownNotification@4
352 IoUpdateShareAccess@8
353 IoVerifyVolume@8
354 IoWriteErrorLogEntry@4
355 IoWriteOperationCount DATA
356 IoWritePartitionTable@20
357 IoWriteTransferCount DATA
358 @IofCallDriver@8
359 @IofCompleteRequest@8
360 KdDebuggerEnabled DATA
361 KdDebuggerNotPresent DATA
362 KdPollBreakIn@0
363 KdSystemDebugControl@4
364 Ke386CallBios@8
365 Ke386IoSetAccessProcess@8
366 Ke386QueryIoAccessMap@8
367 Ke386SetIoAccessMap@8
368 KeAcquireSpinLockAtDpcLevel@4
369 KeAddSystemServiceTable@20
370 KeAttachProcess@4
371 ;KeBoostCurrentThread
372 KeBugCheck@4
373 KeBugCheckEx@20
374 KeCancelTimer@4
375 KeClearEvent@4
376 KeConnectInterrupt@4
377 KeDcacheFlushCount DATA
378 KeDelayExecutionThread@12
379 KeDeregisterBugCheckCallback@4
380 KeDetachProcess@0
381 KeDisconnectInterrupt@4
382 KeEnterCriticalRegion@0
383 KeEnterKernelDebugger@0
384 ;KeFindConfigurationEntry
385 ;KeFindConfigurationNextEntry
386 ;KeFlushEntireTb
387 KeGetCurrentThread@0
388 KeGetPreviousMode@0
389 ;KeI386AbiosCall
390 ;KeI386AllocateGdtSelectors
391 ;KeI386Call16BitCStyleFunction
392 ;KeI386Call16BitFunction
393 ;KeI386FlatToGdtSelector
394 ;KeI386GetLid
395 ;KeI386MachineType DATA
396 ;KeI386ReleaseGdtSelectors
397 ;KeI386ReleaseLid
398 ;KeI386SetGdtSelector
399 KeIcacheFlushCount DATA
400 KeInitializeApc@32
401 KeInitializeDeviceQueue@4
402 KeInitializeDpc@12
403 KeInitializeEvent@12
404 KeInitializeInterrupt@44
405 KeInitializeMutant@8
406 KeInitializeMutex@8
407 KeInitializeQueue@8
408 KeInitializeSemaphore@12
409 KeInitializeSpinLock@4
410 KeInitializeTimer@4
411 KeInitializeTimerEx@8
412 KeInsertByKeyDeviceQueue@12
413 KeInsertDeviceQueue@8
414 KeInsertHeadQueue@8
415 KeInsertQueue@8
416 KeInsertQueueApc@16
417 KeInsertQueueDpc@12
418 ;KeIsExecutingDpc
419 KeLeaveCriticalRegion@0
420 KeLoaderBlock DATA
421 KeNumberProcessors DATA
422 ;KeProfileInterrupt
423 ;KeProfileInterruptWithSource
424 KePulseEvent@12
425 KeQuerySystemTime@4
426 KeQueryTickCount@4
427 KeQueryTimeIncrement@0
428 ;KeRaiseUserException
429 KeRescheduleThread@0
430 KeReadStateEvent@4
431 KeReadStateMutant@4
432 KeReadStateMutex@4
433 KeReadStateQueue@4
434 KeReadStateSemaphore@4
435 KeReadStateTimer@4
436 KeRegisterBugCheckCallback@20
437 KeReleaseMutant@16
438 KeReleaseMutex@8
439 KeReleaseSemaphore@16
440 KeReleaseSpinLockFromDpcLevel@4
441 KeRemoveByKeyDeviceQueue@8
442 KeRemoveDeviceQueue@4
443 KeRemoveEntryDeviceQueue@8
444 KeRemoveQueue@12
445 KeRemoveQueueDpc@4
446 KeResetEvent@4
447 KeRestoreFloatingPointState@4
448 KeRundownQueue@4
449 KeSaveFloatingPointState@4
450 KeServiceDescriptorTable DATA
451 KeSetAffinityThread@8
452 KeSetBasePriorityThread@8
453 ;KeSetDmaIoCoherency
454 KeSetEvent@12
455 ;KeSetEventBoostPriority
456 ;KeSetIdealProcessorThread
457 KeSetImportanceDpc@8
458 ;KeSetKernelStackSwapEnable
459 KeSetPriorityThread@8
460 ;KeSetProfileIrql
461 ;@KeSetSwapContextNotifyRoutine
462 KeSetTargetProcessorDpc@8
463 ;@KeSetThreadSelectNotifyRoutine
464 ;KeSetTimeIncrement
465 KeSetTimer@16
466 KeSetTimerEx@20
467 ;@KeSetTimeUpdateNotifyRoutine
468 KeSynchronizeExecution@12
469 ;KeTerminateThread
470 KeTickCount DATA
471 ;KeUpdateRunTime
472 ;KeUserModeCallback
473 KeWaitForMultipleObjects@32
474 KeWaitForMutexObject@20
475 KeWaitForSingleObject@20
476 ;@KefAcquireSpinLockAtDpcLevel
477 ;@KefReleaseSpinLockFromDpcLevel
478 ;Kei386EoiHelper
479 ;@KiAcquireSpinLock@4
480 ;KiBugCheckData DATA
481 ;KiCoprocessorError@0
482 KiDeliverApc@12
483 KiDispatchInterrupt@0
484 KiInterruptDispatch2@8
485 ;KiIpiServiceRoutine@8
486 ;@KiReleaseSpinLock@4
487 ;KiUnexpectedInterrupt
488 ;Kii386SpinOnSpinLock
489 KiRawTicks DATA
490 LdrAccessResource@16
491 ;LdrEnumResources@20
492 ;LdrFindResourceDirectory_U@16
493 LdrFindResource_U@16
494 ;LpcRequestPort@8
495 LsaCallAuthenticationPackage@28
496 LsaDeregisterLogonProcess@4
497 LsaFreeReturnBuffer@4
498 LsaLogonUser@56
499 LsaLookupAuthenticationPackage@12
500 LsaRegisterLogonProcess@12
501 MmAdjustWorkingSetSize@16
502 MmAllocateContiguousAlignedMemory@16
503 MmAllocateContiguousMemory@12
504 MmAllocateNonCachedMemory@4
505 MmBuildMdlForNonPagedPool@4
506 MmCanFileBeTruncated@8
507 MmCopyFromCaller@12
508 MmCopyToCaller@12
509 MmCreateMdl@12
510 MmCreateSection@32
511 MmDbgTranslatePhysicalAddress@8
512 MmDisableModifiedWriteOfSection@4
513 MmFlushImageSection@8
514 MmForceSectionClosed@8
515 MmFreeContiguousMemory@4
516 MmFreeNonCachedMemory@8
517 MmGetPhysicalAddress@4
518 MmGrowKernelStack@4
519 MmHighestUserAddress DATA
520 MmIsAddressValid@4
521 MmIsNonPagedSystemAddressValid@4
522 MmIsRecursiveIoFault@0
523 MmIsThisAnNtAsSystem@0
524 MmLockPagableDataSection@4
525 MmLockPagableImageSection@4=MmLockPagableDataSection@4
526 MmLockPagableSectionByHandle@4
527 MmMapIoSpace@16
528 MmMapLockedPages@8
529 MmMapMemoryDumpMdl@4
530 MmMapVideoDisplay@16
531 MmMapViewInSystemSpace@12
532 MmMapViewOfSection@40
533 MmPageEntireDriver@4
534 MmProbeAndLockPages@12
535 MmQuerySystemSize@0
536 MmResetDriverPaging@4
537 MmSectionObjectType DATA
538 MmSecureVirtualMemory@12
539 MmSetAddressRangeModified@8
540 MmSetBankedSection@24
541 MmSizeOfMdl@8
542 MmUnlockPagableImageSection@4
543 MmUnlockPages@4
544 MmUnmapIoSpace@8
545 MmUnmapLockedPages@8
546 MmUnmapVideoDisplay@8
547 MmUnmapViewInSystemSpace@4
548 MmUnmapViewOfSection@8
549 MmUnsecureVirtualMemory@4
550 MmUserProbeAddress DATA
551 NlsAnsiCodePage DATA
552 NlsLeadByteInfo DATA
553 NlsMbCodePageTag DATA
554 NlsMbOemCodePageTag DATA
555 NlsOemLeadByteInfo DATA
556 NtAddAtom@8
557 NtAdjustPrivilegesToken@24
558 NtAlertThread@4
559 NtAllocateLocallyUniqueId@4
560 NtAllocateUuids@16
561 NtAllocateVirtualMemory@24
562 NtBuildNumber DATA
563 NtClose@4
564 NtConnectPort@32
565 NtCreateEvent@20
566 NtCreateTimer@16
567 NtOpenEvent@12
568 NtCreateFile@44
569 NtCreateSection@28
570 NtDeleteAtom@4
571 NtDeleteFile@4
572 NtDeviceIoControlFile@40
573 NtDuplicateObject@28
574 NtDuplicateToken@24
575 NtFindAtom@8
576 NtFreeVirtualMemory@16
577 NtFsControlFile@40
578 NtGlobalFlag DATA
579 NtLockFile@40
580 NtMapViewOfSection@40
581 NtNotifyChangeDirectoryFile@36
582 NtOpenFile@24
583 NtOpenProcess@16
584 NtOpenProcessToken@12
585 NtQueryDirectoryFile@44
586 NtQueryEaFile@36
587 NtQueryInformationAtom@20
588 NtQueryInformationFile@20
589 NtQueryInformationProcess@20
590 NtQueryInformationToken@20
591 ;NtQueryOleDirectoryFile@ <--- ?
592 NtQuerySecurityObject@20
593 NtQuerySystemTime@4
594 NtQueryVolumeInformationFile@20
595 NtReadFile@36
596 NtRequestPort@8
597 NtRequestWaitReplyPort@12
598 NtSetEvent@8
599 NtSetInformationFile@20
600 NtSetInformationProcess@16
601 NtSetInformationThread@16
602 NtSetSecurityObject@12
603 NtSetSystemTime@8
604 NtUnlockFile@20
605 NtVdmControl@8
606 NtW32Call@20
607 NtWaitForSingleObject@12
608 NtWriteFile@36
609 ObAssignSecurity@16
610 ;ObCheckCreateObjectAccess@28
611 ;ObCheckObjectAccess@20
612 ObCreateObject@36
613 ObRosCreateObject@20
614 ;ObFindHandleForObject@20
615 ObGetObjectPointerCount@4
616 ObGetObjectSecurity@12
617 ;ObInsertObject@24
618 ObMakeTemporaryObject@4
619 ObOpenObjectByName@28
620 ObOpenObjectByPointer@28
621 ObQueryNameString@16
622 ;ObQueryObjectAuditingByHandle@8
623 @ObfDereferenceObject@4
624 @ObfReferenceObject@4
625 ObReferenceObjectByHandle@24
626 ObReferenceObjectByName@32
627 ObReferenceObjectByPointer@16
628 ObReleaseObjectSecurity@8
629 ;ObSetSecurityDescriptorInfo@24
630 ;PfxFindPrefix
631 ;PfxInitialize
632 ;PfxInsertPrefix
633 ;PfxRemovePrefix
634 PoCallDriver@8
635 PoRegisterDeviceForIdleDetection@16
636 PoRegisterSystemState@8
637 PoRequestPowerIrp@24
638 PoSetDeviceBusy@4
639 PoSetPowerState@12
640 PoSetSystemState@4
641 PoStartNextPowerIrp@4
642 PoUnregisterSystemState@4
643 ProbeForRead@12
644 ProbeForWrite@12
645 PsAssignImpersonationToken@8
646 ;PsChargePoolQuota@12
647 PsCreateSystemProcess@12
648 PsCreateSystemThread@28
649 PsCreateWin32Process@4
650 PsEstablishWin32Callouts@24
651 PsGetCurrentProcessId@0
652 PsGetCurrentThreadId@0
653 PsGetProcessExitTime@0
654 PsGetVersion@16
655 PsGetWin32Thread@0
656 PsGetWin32Process@0
657 PsImpersonateClient@20
658 PsInitialSystemProcess DATA
659 PsIsThreadTerminating@4
660 PsLookupProcessByProcessId@8
661 PsLookupProcessThreadByCid@12
662 PsLookupThreadByThreadId@8
663 PsProcessType DATA
664 PsReferenceImpersonationToken@16
665 PsReferencePrimaryToken@4
666 ;PsReturnPoolQuota@12
667 PsRevertToSelf@0
668 PsSetCreateProcessNotifyRoutine@8
669 PsSetCreateThreadNotifyRoutine@4
670 ;PsSetLegoNotifyRoutine@4
671 ;PsSetProcessPriorityByClass@8
672 PsTerminateSystemThread@4
673 PsThreadType DATA
674 READ_REGISTER_UCHAR@4
675 READ_REGISTER_ULONG@4
676 READ_REGISTER_USHORT@4
677 READ_REGISTER_BUFFER_UCHAR@12
678 READ_REGISTER_BUFFER_ULONG@12
679 READ_REGISTER_BUFFER_USHORT@12
680 RtlAbsoluteToSelfRelativeSD@12
681 RtlAddAccessAllowedAce@16
682 RtlAddAce@20
683 RtlAddAtomToAtomTable@12
684 ;RtlAllocateAndInitializeSid
685 ;RtlAllocateHeap
686 RtlAnsiCharToUnicodeChar@4
687 RtlAnsiStringToUnicodeSize@4
688 RtlAnsiStringToUnicodeString@12
689 RtlAppendAsciizToString@8
690 RtlAppendStringToString@8
691 RtlAppendUnicodeStringToString@8
692 RtlAppendUnicodeToString@8
693 RtlAreAllAccessesGranted@8
694 RtlAreAnyAccessesGranted@8
695 RtlAreBitsClear@12
696 RtlAreBitsSet@12
697 RtlAssert@16
698 ;RtlCaptureStackBackTrace
699 RtlCharToInteger@12
700 RtlCheckRegistryKey@8
701 RtlClearAllBits@4
702 RtlClearBits@12
703 RtlCompareMemory@12
704 RtlCompareMemoryUlong@12
705 RtlCompareString@12
706 RtlCompareUnicodeString@12
707 RtlCompressBuffer@32
708 RtlCompressChunks@28
709 RtlConvertLongToLargeInteger@4
710 RtlConvertSidToUnicodeString@12
711 RtlConvertUlongToLargeInteger@4
712 RtlCopyLuid@8
713 RtlCopySid@12
714 RtlCopyString@8
715 RtlCopyUnicodeString@8
716 RtlCreateAcl@12
717 RtlCreateAtomTable@8
718 ;RtlCreateHeap
719 RtlCreateRegistryKey@8
720 RtlCreateSecurityDescriptor@8
721 RtlCreateUnicodeString@8
722 RtlCustomCPToUnicodeN@24
723 RtlDecompressBuffer@24
724 RtlDecompressChunks@28
725 RtlDecompressFragment@32
726 ;RtlDelete
727 RtlDeleteAtomFromAtomTable@8
728 ;RtlDeleteElementGenericTable
729 ;RtlDeleteNoSplay
730 RtlDeleteRegistryValue@12
731 RtlDescribeChunk@20
732 RtlDestroyAtomTable@4
733 ;RtlDestroyHeap
734 RtlDowncaseUnicodeString@12
735 RtlEmptyAtomTable@8
736 RtlEnlargedIntegerMultiply@8
737 RtlEnlargedUnsignedDivide@16
738 RtlEnlargedUnsignedMultiply@8
739 ;RtlEnumerateGenericTable
740 ;RtlEnumerateGenericTableWithoutSplaying
741 RtlEqualLuid@8
742 RtlEqualSid@8
743 RtlEqualString@12
744 RtlEqualUnicodeString@12
745 RtlExtendedIntegerMultiply@12
746 RtlExtendedLargeIntegerDivide@16
747 RtlExtendedMagicDivide@20
748 RtlFillMemory@12
749 RtlFillMemoryUlong@12
750 RtlFindClearBits@12
751 RtlFindClearBitsAndSet@12
752 RtlFindFirstRunClear@8
753 RtlFindFirstRunSet@8
754 RtlFindLongestRunClear@8
755 RtlFindLongestRunSet@8
756 RtlFindMessage@20
757 RtlFindSetBits@12
758 RtlFindSetBitsAndClear@12
759 ;RtlFindUnicodePrefix
760 RtlFormatCurrentUserKeyPath@4
761 RtlFreeAnsiString@4
762 ;RtlFreeHeap
763 RtlFreeOemString@4
764 RtlFreeUnicodeString@4
765 RtlGenerate8dot3Name@16
766 ;RtlGetCallersAddress
767 RtlGetCompressionWorkSpaceSize@12
768 RtlGetDaclSecurityDescriptor@16
769 RtlGetDefaultCodePage@8
770 ;RtlGetElementGenericTable
771 RtlGetGroupSecurityDescriptor@12
772 RtlGetOwnerSecurityDescriptor@12
773 RtlImageNtHeader@4
774 RtlImageDirectoryEntryToData@16
775 RtlInitAnsiString@8
776 RtlInitCodePageTable@8
777 RtlInitString@8
778 RtlInitUnicodeString@8
779 RtlInitializeBitMap@12
780 ;RtlInitializeGenericTable
781 RtlInitializeSid@12
782 ;RtlInitializeUnicodePrefix
783 ;RtlInsertElementGenericTable
784 ;RtlInsertUnicodePrefix
785 RtlIntegerToChar@16
786 RtlIntegerToUnicodeString@12
787 RtlIsNameLegalDOS8Dot3@12
788 RtlLargeIntegerAdd@16
789 RtlLargeIntegerArithmeticShift@12
790 RtlLargeIntegerDivide@20
791 RtlLargeIntegerNegate@8
792 RtlLargeIntegerShiftLeft@12
793 RtlLargeIntegerShiftRight@12
794 RtlLargeIntegerSubtract@16
795 RtlLengthRequiredSid@4
796 RtlLengthSecurityDescriptor@4
797 RtlLengthSid@4
798 RtlLookupAtomInAtomTable@12
799 ;RtlLookupElementGenericTable
800 RtlMapGenericMask@8
801 RtlMoveMemory@12
802 RtlMultiByteToUnicodeN@20
803 RtlMultiByteToUnicodeSize@12
804 ;RtlNextUnicodePrefix
805 RtlNtStatusToDosError@4
806 RtlNtStatusToDosErrorNoTeb@4
807 ;RtlNumberGenericTableElements
808 RtlNumberOfClearBits@4
809 RtlNumberOfSetBits@4
810 RtlOemStringToCountedUnicodeString@12
811 RtlOemStringToUnicodeSize@4
812 RtlOemStringToUnicodeString@12
813 RtlOemToUnicodeN@20
814 RtlPinAtomInAtomTable@8
815 RtlPrefixString@12
816 RtlPrefixUnicodeString@12
817 RtlQueryAtomInAtomTable@24
818 RtlQueryRegistryValues@20
819 RtlQueryTimeZoneInformation@4
820 RtlRaiseException@4
821 RtlRandom@4
822 ;RtlRemoveUnicodePrefix
823 RtlReserveChunk@20
824 RtlSecondsSince1970ToTime@8
825 RtlSecondsSince1980ToTime@8
826 RtlSetAllBits@4
827 RtlSetBits@12
828 RtlSetDaclSecurityDescriptor@16
829 RtlSetGroupSecurityDescriptor@12
830 RtlSetOwnerSecurityDescriptor@12
831 RtlSetSaclSecurityDescriptor@16
832 RtlSetTimeZoneInformation@4
833 ;RtlSplay
834 RtlSubAuthorityCountSid@4
835 RtlSubAuthoritySid@8
836 RtlTimeFieldsToTime@8
837 RtlTimeToSecondsSince1970@8
838 RtlTimeToSecondsSince1980@8
839 RtlTimeToTimeFields@8
840 RtlUnicodeStringToAnsiSize@4
841 RtlUnicodeStringToAnsiString@12
842 RtlUnicodeStringToCountedOemString@12
843 RtlUnicodeStringToInteger@12
844 RtlUnicodeStringToOemSize@4
845 RtlUnicodeStringToOemString@12
846 RtlUnicodeToCustomCPN@24
847 RtlUnicodeToMultiByteN@20
848 RtlUnicodeToMultiByteSize@12
849 RtlUnicodeToOemN@20
850 RtlUnwind@16
851 RtlUpcaseUnicodeChar@4
852 RtlUpcaseUnicodeString@12
853 RtlUpcaseUnicodeStringToAnsiString@12
854 RtlUpcaseUnicodeStringToCountedOemString@12
855 RtlUpcaseUnicodeStringToOemString@12
856 RtlUpcaseUnicodeToCustomCPN@24
857 RtlUpcaseUnicodeToMultiByteN@20
858 RtlUpcaseUnicodeToOemN@20
859 RtlUpperChar@4
860 RtlUpperString@8
861 RtlValidSecurityDescriptor@4
862 RtlValidSid@4
863 RtlWriteRegistryValue@24
864 ;RtlZeroHeap
865 RtlZeroMemory@8
866 RtlxAnsiStringToUnicodeSize@4
867 RtlxOemStringToUnicodeSize@4
868 RtlxUnicodeStringToAnsiSize@4
869 RtlxUnicodeStringToOemSize@4
870 SeAccessCheck@40
871 ;SeAppendPrivileges@8
872 SeAssignSecurity@28
873 ;SeAuditingFileEvents@8
874 ;SeAuditingFileOrGlobalEvents@18
875 ;SeCaptureSecurityDescriptor@20
876 SeCaptureSubjectContext@4
877 ;SeCloseObjectAuditAlarm@12
878 ;SeCreateAccessState@16
879 SeCreateClientSecurity@16
880 SeDeassignSecurity@4
881 ;SeDeleteAccessState@4
882 ;SeDeleteObjectAuditAlarm@8
883 SeExports DATA
884 ;SeFreePrivileges@4
885 SeImpersonateClient@8
886 ;SeLockSubjectContext@4
887 ;SeMarkLogonSessionForTerminationNotification@4
888 ;SeOpenObjectAuditAlarm@36
889 ;SeOpenObjectForDeleteAuditAlarm@36
890 SePrivilegeCheck@12
891 ;SePrivilegeObjectAuditAlarm@24
892 SePublicDefaultDacl DATA
893 ;SeQueryAuthenticationIdToken@8
894 ;SeQuerySecurityDescriptorInfo@16
895 ;SeRegisterLogonSessionTerminatedRoutine@4
896 ;SeReleaseSecurityDescriptor@12
897 SeReleaseSubjectContext@4
898 ;SeSetAccessStateGenericMapping@8
899 ;SeSetSecurityDescriptorInfo@24
900 SeSinglePrivilegeCheck@12
901 SeSystemDefaultDacl DATA
902 SeTokenImpersonationLevel@4
903 SeTokenType@4
904 ;SeUnlockSubjectContext@4
905 ;SeUnregisterLogonSessionTerminatedRoutine@4
906 ;SeValidSecurityDescriptor@8
907 WRITE_REGISTER_UCHAR@8
908 WRITE_REGISTER_ULONG@8
909 WRITE_REGISTER_USHORT@8
910 WRITE_REGISTER_BUFFER_UCHAR@12
911 WRITE_REGISTER_BUFFER_ULONG@12
912 WRITE_REGISTER_BUFFER_USHORT@12
913 ZwAccessCheckAndAuditAlarm@44
914 ZwAlertThread@4
915 ZwAllocateVirtualMemory@24
916 ZwClearEvent@4
917 ZwClose@4
918 ZwCloseObjectAuditAlarm@12
919 ZwConnectPort@32
920 ZwCreateDirectoryObject@12
921 ZwCreateEvent@20
922 ZwCreateFile@44
923 ZwCreateKey@28
924 ZwCreateSection@28
925 ZwCreateSymbolicLinkObject@16
926 ZwDeleteFile@4
927 ZwDeleteKey@4
928 ZwDeleteValueKey@8
929 ZwDeviceIoControlFile@40
930 ZwDisplayString@4
931 ZwDuplicateObject@28
932 ZwDuplicateToken@24
933 ZwEnumerateKey@24
934 ZwEnumerateValueKey@24
935 ZwFlushInstructionCache@12
936 ZwFlushKey@4
937 ZwFreeVirtualMemory@16
938 ZwFsControlFile@40
939 ZwLoadDriver@4
940 ZwLoadKey@8
941 ZwMakeTemporaryObject@4
942 ZwMapViewOfSection@40
943 ZwNotifyChangeKey@40
944 ZwOpenDirectoryObject@12
945 ZwOpenEvent@12
946 ZwOpenFile@24
947 ZwOpenKey@12
948 ZwOpenProcess@16
949 ZwOpenProcessToken@12
950 ZwOpenSection@12
951 ZwOpenSymbolicLinkObject@12
952 ZwOpenThread@16
953 ZwOpenThreadToken@16
954 ZwPulseEvent@8
955 ZwQueryDefaultLocale@8
956 ZwQueryDirectoryFile@44
957 ZwQueryInformationAtom@20
958 ZwQueryInformationFile@20
959 ZwQueryInformationProcess@20
960 ZwQueryInformationToken@20
961 ZwQueryKey@20
962 ZwQueryObject@20
963 ZwQuerySection@20
964 ZwQuerySecurityObject@20
965 ZwQuerySymbolicLinkObject@12
966 ZwQuerySystemInformation@16
967 ZwQuerySystemTime@4
968 ZwQueryValueKey@24
969 ZwQueryVolumeInformationFile@20
970 ZwReadFile@36
971 ZwReplaceKey@12
972 ZwRequestWaitReplyPort@12
973 ZwResetEvent@8
974 ZwSaveKey@8
975 ZwSetDefaultLocale@8
976 ZwSetEvent@8
977 ZwSetInformationFile@20
978 ZwSetInformationObject@16
979 ZwSetInformationProcess@16
980 ZwSetInformationThread@16
981 ZwSetSystemInformation@12
982 ZwSetSystemTime@8
983 ZwSetValueKey@24
984 ZwTerminateProcess@8
985 ZwUnloadDriver@4
986 ZwUnloadKey@4
987 ZwUnmapViewOfSection@8
988 ZwWaitForMultipleObjects@20
989 ZwWaitForSingleObject@12
990 ZwWriteFile@36
991 ZwYieldExecution@0
992 _abnormal_termination
993 _except_handler2
994 _itoa
995 _purecall
996 _snprintf
997 _snwprintf
998 _stricmp
999 _strlwr
1000 _strnicmp
1001 _strnset
1002 _strrev
1003 _strset
1004 _strupr
1005 _vsnprintf
1006 _wcsicmp
1007 _wcslwr
1008 _wcsnicmp
1009 _wcsnset
1010 _wcsrev
1011 _wcsupr
1012 atoi
1013 atol
1014 isdigit
1015 islower
1016 isprint
1017 isspace
1018 isupper
1019 isxdigit
1020 mbstowcs
1021 mbtowc
1022 memchr
1023 memcpy
1024 memmove
1025 memset
1026 qsort
1027 rand
1028 sprintf
1029 srand
1030 strcat
1031 strchr
1032 strcmp
1033 strcpy
1034 strlen
1035 strncat
1036 strncmp
1037 strncpy
1038 strrchr
1039 strspn
1040 strstr
1041 swprintf
1042 tolower
1043 toupper
1044 towlower
1045 towupper
1046 vsprintf
1047 wcscat
1048 wcschr
1049 wcscmp
1050 wcscpy
1051 wcscspn
1052 wcslen
1053 wcsncat
1054 wcsncmp
1055 wcsncpy
1056 wcsrchr
1057 wcsspn
1058 wcsstr
1059 wcstombs
1060 wctomb