lib/lib32/ddk/ntoskrnl.def

   1 LIBRARY ntoskrnl.exe
   2 EXPORTS
   3 ;CcCanIWrite
   4 ;CcCopyRead
   5 ;CcCopyWrite
   6 ;CcDeferWrite
   7 ;CcFastCopyRead
   8 ;CcFastCopyWrite
   9 ;CcFastMdlReadWait
  10 ;CcFastReadNotPossible
  11 ;CcFastReadWait
  12 ;CcFlushCache
  13 ;CcGetDirtyPages
  14 ;CcGetFileObjectFromBcb
  15 ;CcGetFileObjectFromSectionPtrs
  16 ;CcGetFlushedValidData
  17 ;CcGetLsnForFileObject
  18 ;CcInitializeCacheMap
  19 ;CcIsThereDirtyData
  20 ;CcMapData
  21 ;CcMdlRead
  22 ;CcMdlReadComplete
  23 ;CcMdlWriteAbort
  24 ;CcMdlWriteComplete
  25 ;CcPinMappedData
  26 ;CcPinRead
  27 ;CcPrepareMdlWrite
  28 ;CcPreparePinWrite
  29 ;CcPurgeCacheSection
  30 ;CcRemapBcb
  31 ;CcRepinBcb
  32 ;CcScheduleReadAhead
  33 ;CcSetAdditionalCacheAttributes
  34 ;CcSetBcbOwnerPointer
  35 ;CcSetDirtyPageThreshold
  36 ;CcSetDirtyPinnedData
  37 ;CcSetFileSizes
  38 ;CcSetLogHandleForFile
  39 ;CcSetReadAheadGranularity
  40 ;CcUninitializeCacheMap
  41 ;CcUnpinData
  42 ;CcUnpinDataForThread
  43 ;CcUnpinRepinnedBcb
  44 ;CcWaitForCurrentLazyWriterActivity
  45 ;CcZeroData
  46 CmRegisterCallback@12
  47 CmUnRegisterCallback@4
  48 DbgBreakPoint@0
  49 DbgBreakPointWithStatus@4
  50 ;DbgLoadImageSymbols
  51 DbgPrint
  52 DbgPrintEx
  53 DbgPrintReturnControlC
  54 ;DbgPrompt
  55 DbgQueryDebugFilterState@8
  56 DbgSetDebugFilterState@12
  57 @ExAcquireFastMutexUnsafe@4
  58 ExAcquireResourceExclusiveLite@8
  59 ExAcquireResourceSharedLite@8
  60 ;ExAcquireRundownProtection
  61 ExAcquireSharedStarveExclusive@8
  62 ExAcquireSharedWaitForExclusive@8
  63 ExAllocateFromPagedLookasideList@4
  64 ExAllocatePool@8
  65 ExAllocatePoolWithQuota@8
  66 ExAllocatePoolWithQuotaTag@12
  67 ExAllocatePoolWithTag@12
  68 ExAllocatePoolWithTagPriority@16
  69 ExConvertExclusiveToSharedLite@4
  70 ExCreateCallback@16
  71 ExDeleteNPagedLookasideList@4
  72 ExDeletePagedLookasideList@4
  73 ExDeleteResourceLite@4
  74 ExDesktopObjectType DATA
  75 ;ExDisableResourceBoostLite
  76 ;ExEnumHandleTable
  77 ExEventObjectType DATA
  78 ExExtendZone@12
  79 @Exfi386InterlockedDecrementLong@4
  80 @Exfi386InterlockedExchangeUlong@8
  81 @Exfi386InterlockedIncrementLong@4
  82 @ExfInterlockedAddUlong@12
  83 @ExfInterlockedInsertHeadList@12
  84 @ExfInterlockedInsertTailList@12
  85 @ExfInterlockedPopEntryList@8
  86 @ExfInterlockedPushEntryList@12
  87 @ExfInterlockedRemoveHeadList@8
  88 ExFreePool@4
  89 ExFreePoolWithTag@8
  90 ExFreeToPagedLookasideList@8
  91 ;ExGetCurrentProcessorCounts
  92 ;ExGetCurrentProcessorCpuUsage
  93 ExGetExclusiveWaiterCount@4
  94 ExGetPreviousMode@0
  95 ExGetSharedWaiterCount@4
  96 Exi386InterlockedDecrementLong@4
  97 Exi386InterlockedExchangeUlong@8
  98 Exi386InterlockedIncrementLong@4
  99 ExInitializeNPagedLookasideList@28
 100 ExInitializePagedLookasideList@28
 101 ExInitializeResourceLite@4
 102 ;ExInitializeRundownProtection
 103 ExInitializeZone@16
 104 ExInterlockedAddLargeInteger@12
 105 @ExInterlockedAddLargeStatistic@8
 106 ExInterlockedAddUlong@12
 107 @ExInterlockedCompareExchange64@16
 108 ExInterlockedDecrementLong@8
 109 ExInterlockedExchangeUlong@12
 110 ExInterlockedExtendZone@16
 111 @ExInterlockedFlushSList@4
 112 @ExInterlockedIncrementLong@8
 113 ExInterlockedInsertHeadList@12
 114 ExInterlockedInsertTailList@12
 115 ExInterlockedPopEntryList@8
 116 @ExInterlockedPopEntrySList@8
 117 ExInterlockedPushEntryList@12
 118 @ExInterlockedPushEntrySList@12
 119 ExInterlockedRemoveHeadList@8
 120 ExIsProcessorFeaturePresent@4
 121 ExIsResourceAcquiredExclusiveLite@4
 122 ExIsResourceAcquiredSharedLite@4
 123 ExLocalTimeToSystemTime@8
 124 ExNotifyCallback@12
 125 ;ExQueryPoolBlockSize
 126 ExQueueWorkItem@8
 127 ExRaiseAccessViolation@0
 128 ExRaiseDatatypeMisalignment@0
 129 ;ExRaiseException
 130 ;ExRaiseHardError
 131 ExRaiseStatus@4
 132 ;ExReInitializeRundownProtection
 133 ExRegisterCallback@12
 134 ExReinitializeResourceLite@4
 135 @ExReleaseFastMutexUnsafe@4
 136 ExReleaseResourceForThreadLite@8
 137 @ExReleaseResourceLite@4
 138 ;ExReleaseRundownProtection
 139 ;ExRundownCompleted
 140 ExSemaphoreObjectType DATA
 141 ExSetResourceOwnerPointer@8
 142 ExSetTimerResolution@8
 143 ;ExSystemExceptionFilter
 144 ExSystemTimeToLocalTime@8
 145 ExUnregisterCallback@4
 146 ExUuidCreate@4
 147 ExVerifySuite@4
 148 ;ExWaitForRundownProtectionRelease
 149 ExWindowStationObjectType DATA
 150 ;FsRtlAcquireFileExclusive
 151 ;FsRtlAddLargeMcbEntry
 152 ;FsRtlAddMcbEntry
 153 ;FsRtlAddToTunnelCache
 154 ;FsRtlAllocateFileLock
 155 ;FsRtlAllocatePool
 156 ;FsRtlAllocatePoolWithQuota
 157 ;FsRtlAllocatePoolWithQuotaTag
 158 ;FsRtlAllocatePoolWithTag
 159 ;FsRtlAllocateResource
 160 ;FsRtlAreNamesEqual
 161 ;FsRtlBalanceReads
 162 ;FsRtlCheckLockForReadAccess
 163 ;FsRtlCheckLockForWriteAccess
 164 ;FsRtlCheckOplock
 165 ;FsRtlCopyRead
 166 ;FsRtlCopyWrite
 167 ;FsRtlCurrentBatchOplock
 168 ;FsRtlDeleteKeyFromTunnelCache
 169 ;FsRtlDeleteTunnelCache
 170 ;FsRtlDeregisterUncProvider
 171 ;FsRtlDissectDbcs
 172 ;FsRtlDissectName
 173 ;FsRtlDoesDbcsContainWildCards
 174 ;FsRtlDoesNameContainWildCards
 175 ;FsRtlFastCheckLockForRead
 176 ;FsRtlFastCheckLockForWrite
 177 ;FsRtlFastUnlockAll
 178 ;FsRtlFastUnlockAllByKey
 179 ;FsRtlFastUnlockSingle
 180 ;FsRtlFindInTunnelCache
 181 ;FsRtlFreeFileLock
 182 ;FsRtlGetFileSize
 183 ;FsRtlGetNextFileLock
 184 ;FsRtlGetNextLargeMcbEntry
 185 ;FsRtlGetNextMcbEntry
 186 ;FsRtlIncrementCcFastReadNoWait
 187 ;FsRtlIncrementCcFastReadNotPossible
 188 ;FsRtlIncrementCcFastReadResourceMiss
 189 ;FsRtlIncrementCcFastReadWait
 190 ;FsRtlInitializeFileLock
 191 ;FsRtlInitializeLargeMcb
 192 ;FsRtlInitializeMcb
 193 ;FsRtlInitializeOplock
 194 ;FsRtlInitializeTunnelCache
 195 ;FsRtlInsertPerFileObjectContext
 196 ;FsRtlInsertPerStreamContext
 197 ;FsRtlIsDbcsInExpression
 198 ;FsRtlIsFatDbcsLegal
 199 ;FsRtlIsHpfsDbcsLegal
 200 ;FsRtlIsNameInExpression
 201 ;FsRtlIsNtstatusExpected
 202 ;FsRtlIsPagingFile
 203 FsRtlIsTotalDeviceFailure@4
 204 ;FsRtlLegalAnsiCharacterArray
 205 ;FsRtlLookupLargeMcbEntry
 206 ;FsRtlLookupLastLargeMcbEntry
 207 ;FsRtlLookupLastLargeMcbEntryAndIndex
 208 ;FsRtlLookupLastMcbEntry
 209 ;FsRtlLookupMcbEntry
 210 ;FsRtlLookupPerFileObjectContext
 211 ;FsRtlLookupPerStreamContextInternal
 212 ;FsRtlMdlRead
 213 ;FsRtlMdlReadComplete
 214 ;FsRtlMdlReadCompleteDev
 215 ;FsRtlMdlReadDev
 216 ;FsRtlMdlWriteComplete
 217 ;FsRtlMdlWriteCompleteDev
 218 ;FsRtlNormalizeNtstatus
 219 ;FsRtlNotifyChangeDirectory
 220 ;FsRtlNotifyCleanup
 221 ;FsRtlNotifyFilterChangeDirectory
 222 ;FsRtlNotifyFilterReportChange
 223 ;FsRtlNotifyFullChangeDirectory
 224 ;FsRtlNotifyFullReportChange
 225 ;FsRtlNotifyInitializeSync
 226 ;FsRtlNotifyReportChange
 227 ;FsRtlNotifyUninitializeSync
 228 ;FsRtlNotifyVolumeEvent
 229 ;FsRtlNumberOfRunsInLargeMcb
 230 ;FsRtlNumberOfRunsInMcb
 231 ;FsRtlOplockFsctrl
 232 ;FsRtlOplockIsFastIoPossible
 233 ;FsRtlPostPagingFileStackOverflow
 234 ;FsRtlPostStackOverflow
 235 ;FsRtlPrepareMdlWrite
 236 ;FsRtlPrepareMdlWriteDev
 237 ;FsRtlPrivateLock
 238 ;FsRtlProcessFileLock
 239 ;FsRtlRegisterFileSystemFilterCallbacks
 240 ;FsRtlRegisterUncProvider
 241 ;FsRtlReleaseFile
 242 ;FsRtlRemoveLargeMcbEntry
 243 ;FsRtlRemoveMcbEntry
 244 ;FsRtlRemovePerFileObjectContext
 245 ;FsRtlRemovePerStreamContext
 246 ;FsRtlResetLargeMcb
 247 ;FsRtlSplitLargeMcb
 248 ;FsRtlSyncVolumes
 249 ;FsRtlTeardownPerStreamContexts
 250 ;FsRtlTruncateLargeMcb
 251 ;FsRtlTruncateMcb
 252 ;FsRtlUninitializeFileLock
 253 ;FsRtlUninitializeLargeMcb
 254 ;FsRtlUninitializeMcb
 255 ;FsRtlUninitializeOplock
 256 ;HalDispatchTable DATA
 257 @HalExamineMBR@16
 258 ;HalPrivateDispatchTable DATA
 259 ;HeadlessDispatch
 260 ;InbvAcquireDisplayOwnership
 261 ;InbvCheckDisplayOwnership
 262 ;InbvDisplayString
 263 ;InbvEnableBootDriver
 264 ;InbvEnableDisplayString
 265 ;InbvInstallDisplayStringFilter
 266 ;InbvIsBootDriverInstalled
 267 ;InbvNotifyDisplayOwnershipLost
 268 ;InbvResetDisplay
 269 ;InbvSetScrollRegion
 270 ;InbvSetTextColor
 271 ;InbvSolidColorFill
 272 ;InitSafeBootMode DATA
 273 @InterlockedCompareExchange@12
 274 @InterlockedDecrement@4
 275 @InterlockedExchange@8
 276 @InterlockedExchangeAdd@8
 277 @InterlockedIncrement@4
 278 @InterlockedPopEntrySList@4
 279 @InterlockedPushEntrySList@8
 280 IoAcquireCancelSpinLock@4
 281 IoAcquireRemoveLockEx@20
 282 ;IoAcquireVpbSpinLock
 283 IoAdapterObjectType DATA
 284 IoAllocateAdapterChannel@20
 285 IoAllocateController@16
 286 IoAllocateDriverObjectExtension@16
 287 IoAllocateErrorLogEntry@8
 288 IoAllocateIrp@8
 289 IoAllocateMdl@20
 290 IoAllocateWorkItem@4
 291 ;IoAssignDriveLetters
 292 IoAssignResources@24
 293 IoAttachDevice@12
 294 IoAttachDeviceByPointer@8
 295 IoAttachDeviceToDeviceStack@8
 296 ;IoAttachDeviceToDeviceStackSafe
 297 IoBuildAsynchronousFsdRequest@24
 298 IoBuildDeviceIoControlRequest@36
 299 IoBuildPartialMdl@16
 300 IoBuildSynchronousFsdRequest@28
 301 ;IoCallDriver
 302 IoCancelFileOpen@8
 303 IoCancelIrp@4
 304 ;IoCheckDesiredAccess
 305 ;IoCheckEaBufferValidity
 306 ;IoCheckFunctionAccess
 307 ;IoCheckQuerySetFileInformation
 308 ;IoCheckQuerySetVolumeInformation
 309 ;IoCheckQuotaBufferValidity
 310 IoCheckShareAccess@20
 311 ;IoCompleteRequest
 312 IoConnectInterrupt@44
 313 IoCreateController@4
 314 IoCreateDevice@28
 315 IoCreateDisk@8
 316 ;IoCreateDriver
 317 IoCreateFile@56
 318 ;IoCreateFileSpecifyDeviceObjectHint
 319 IoCreateNotificationEvent@8
 320 ;IoCreateStreamFileObject
 321 ;IoCreateStreamFileObjectEx
 322 ;IoCreateStreamFileObjectLite
 323 IoCreateSymbolicLink@8
 324 IoCreateSynchronizationEvent@8
 325 IoCreateUnprotectedSymbolicLink@8
 326 IoCsqInitialize@28
 327 IoCsqInsertIrp@12
 328 IoCsqRemoveIrp@8
 329 IoCsqRemoveNextIrp@8
 330 IoDeleteController@4
 331 IoDeleteDevice@4
 332 ;IoDeleteDriver
 333 IoDeleteSymbolicLink@4
 334 IoDetachDevice@4
 335 IoDeviceHandlerObjectSize DATA
 336 IoDeviceHandlerObjectType DATA
 337 IoDeviceObjectType DATA
 338 IoDisconnectInterrupt@4
 339 IoDriverObjectType DATA
 340 ;IoEnqueueIrp
 341 ;IoEnumerateDeviceObjectList
 342 ;IoFastQueryNetworkAttributes
 343 IoFileObjectType DATA
 344 ;IoForwardAndCatchIrp
 345 IoForwardIrpSynchronously@8
 346 IoFreeController@4
 347 IoFreeErrorLogEntry@4
 348 IoFreeIrp@4
 349 IoFreeMdl@4
 350 IoFreeWorkItem@4
 351 IoGetAttachedDevice@4
 352 IoGetAttachedDeviceReference@4
 353 ;IoGetBaseFileSystemDeviceObject
 354 IoGetBootDiskInformation@8
 355 IoGetConfigurationInformation@0
 356 IoGetCurrentProcess@0
 357 ;IoGetDeviceAttachmentBaseRef
 358 IoGetDeviceInterfaceAlias@12
 359 IoGetDeviceInterfaces@16
 360 IoGetDeviceObjectPointer@16
 361 IoGetDeviceProperty@20
 362 IoGetDeviceToVerify@4
 363 ;IoGetDiskDeviceObject
 364 IoGetDmaAdapter@12
 365 IoGetDriverObjectExtension@8
 366 IoGetFileObjectGenericMapping@0
 367 IoGetInitialStack@0
 368 ;IoGetLowerDeviceObject
 369 IoGetRelatedDeviceObject@4
 370 ;IoGetRequestorProcess
 371 ;IoGetRequestorProcessId
 372 ;IoGetRequestorSessionId
 373 IoGetStackLimits@8
 374 ;IoGetTopLevelIrp
 375 IoInitializeIrp@12
 376 IoInitializeRemoveLockEx@20
 377 IoInitializeTimer@12
 378 IoInvalidateDeviceRelations@8
 379 IoInvalidateDeviceState@4
 380 ;IoIsFileOriginRemote
 381 ;IoIsOperationSynchronous
 382 ;IoIsSystemThread
 383 ;IoIsValidNameGraftingBuffer
 384 IoIsWdmVersionAvailable@8
 385 IoMakeAssociatedIrp@8
 386 IoOpenDeviceInterfaceRegistryKey@12
 387 IoOpenDeviceRegistryKey@16
 388 ;IoPageRead
 389 ;IoPnPDeliverServicePowerNotification
 390 IoQueryDeviceDescription@32
 391 ;IoQueryFileDosDeviceName
 392 ;IoQueryFileInformation
 393 ;IoQueryVolumeInformation
 394 ;IoQueueThreadIrp
 395 IoQueueWorkItem@16
 396 IoRaiseHardError@12
 397 IoRaiseInformationalHardError@12
 398 IoReadDiskSignature@12
 399 ;IoReadOperationCount DATA
 400 @IoReadPartitionTable@16
 401 IoReadPartitionTableEx@8
 402 ;IoReadTransferCount DATA
 403 IoRegisterBootDriverReinitialization@12
 404 IoRegisterDeviceInterface@16
 405 IoRegisterDriverReinitialization@12
 406 ;IoRegisterFileSystem
 407 ;IoRegisterFsRegistrationChange
 408 ;IoRegisterLastChanceShutdownNotification
 409 IoRegisterPlugPlayNotification@28
 410 IoRegisterShutdownNotification@4
 411 IoReleaseCancelSpinLock@4
 412 IoReleaseRemoveLockAndWaitEx@12
 413 IoReleaseRemoveLockEx@12
 414 ;IoReleaseVpbSpinLock
 415 IoRemoveShareAccess@8
 416 IoReportDetectedDevice@32
 417 ;IoReportHalResourceUsage
 418 IoReportResourceForDetection@28
 419 IoReportResourceUsage@36
 420 IoReportTargetDeviceChange@8
 421 IoReportTargetDeviceChangeAsynchronous@16
 422 IoRequestDeviceEject@4
 423 IoReuseIrp@8
 424 IoSetCompletionRoutineEx@28
 425 IoSetDeviceInterfaceState@8
 426 ;IoSetDeviceToVerify
 427 ;IoSetFileOrigin
 428 IoSetHardErrorOrVerifyDevice@8
 429 ;IoSetInformation
 430 ;IoSetIoCompletion
 431 @IoSetPartitionInformation@16
 432 IoSetPartitionInformationEx@12
 433 IoSetShareAccess@16
 434 IoSetStartIoAttributes@12
 435 IoSetSystemPartition@4
 436 IoSetThreadHardErrorMode@4
 437 ;IoSetTopLevelIrp
 438 IoStartNextPacket@8
 439 IoStartNextPacketByKey@12
 440 IoStartPacket@16
 441 IoStartTimer@4
 442 ;IoStatisticsLock DATA
 443 IoStopTimer@4
 444 ;IoSynchronousInvalidateDeviceRelations
 445 ;IoSynchronousPageWrite
 446 ;IoThreadToProcess
 447 ;IoUnregisterFileSystem
 448 ;IoUnregisterFsRegistrationChange
 449 IoUnregisterPlugPlayNotification@4
 450 IoUnregisterShutdownNotification@4
 451 IoUpdateShareAccess@8
 452 IoVerifyPartitionTable@8
 453 ;IoVerifyVolume
 454 IoVolumeDeviceToDosName@8
 455 IoWMIAllocateInstanceIds@12
 456 IoWMIDeviceObjectToInstanceName@12
 457 IoWMIExecuteMethod@24
 458 IoWMIHandleToInstanceName@12
 459 IoWMIOpenBlock@12
 460 IoWMIQueryAllData@12
 461 IoWMIQueryAllDataMultiple@16
 462 IoWMIQuerySingleInstance@16
 463 IoWMIQuerySingleInstanceMultiple@20
 464 IoWMIRegistrationControl@8
 465 IoWMISetNotificationCallback@12
 466 IoWMISetSingleInstance@20
 467 IoWMISetSingleItem@24
 468 IoWMISuggestInstanceName@16
 469 IoWMIWriteEvent@4
 470 IoWriteErrorLogEntry@4
 471 ;IoWriteOperationCount DATA
 472 @IoWritePartitionTable@20
 473 IoWritePartitionTableEx@8
 474 ;IoWriteTransferCount DATA
 475 @IofCallDriver@8
 476 @IofCompleteRequest@8
 477 ;KdDebuggerEnabled DATA
 478 ;KdDebuggerNotPresent DATA
 479 KdDisableDebugger@0
 480 KdEnableDebugger@0
 481 ;KdEnteredDebugger DATA
 482 ;KdPollBreakIn
 483 ;KdPowerTransition
 484 ;Ke386CallBios
 485 Ke386IoSetAccessProcess@8
 486 Ke386QueryIoAccessMap@8
 487 Ke386SetIoAccessMap@8
 488 @KeAcquireInStackQueuedSpinLockAtDpcLevel@8
 489 KeAcquireInterruptSpinLock@4
 490 ;KeAcquireSpinLockAtDpcLevel
 491 KeAddSystemServiceTable@20
 492 KeAreApcsDisabled@0
 493 KeAttachProcess@4
 494 KeBugCheck@4
 495 KeBugCheckEx@20
 496 KeCancelTimer@4
 497 KeClearEvent@4
 498 ;KeConnectInterrupt
 499 ;KeDcacheFlushCount DATA
 500 KeDelayExecutionThread@12
 501 KeDeregisterBugCheckCallback@4
 502 KeDetachProcess@0
 503 ;KeDisconnectInterrupt
 504 KeEnterCriticalRegion@0
 505 ;KeEnterKernelDebugger
 506 ;KeFindConfigurationEntry
 507 ;KeFindConfigurationNextEntry
 508 ;KeFlushEntireTb
 509 KeFlushQueuedDpcs@0
 510 KeGetCurrentThread@0
 511 KeGetPreviousMode@0
 512 KeGetRecommendedSharedDataAlignment@0
 513 ;KeI386AbiosCall
 514 ;KeI386AllocateGdtSelectors
 515 ;KeI386Call16BitCStyleFunction
 516 ;KeI386Call16BitFunction
 517 ;KeI386FlatToGdtSelector
 518 ;KeI386GetLid
 519 ;KeI386MachineType DATA
 520 ;KeI386ReleaseGdtSelectors
 521 ;KeI386ReleaseLid
 522 ;KeI386SetGdtSelector
 523 ;KeIcacheFlushCount DATA
 524 KeInitializeApc@32
 525 KeInitializeDeviceQueue@4
 526 KeInitializeDpc@12
 527 KeInitializeEvent@12
 528 ;KeInitializeInterrupt
 529 ;KeInitializeMutant
 530 KeInitializeMutex@8
 531 ;KeInitializeQueue
 532 KeInitializeSemaphore@12
 533 KeInitializeSpinLock@4
 534 KeInitializeTimer@4
 535 KeInitializeTimerEx@8
 536 KeInsertByKeyDeviceQueue@12
 537 KeInsertDeviceQueue@8
 538 ;KeInsertHeadQueue
 539 ;KeInsertQueue
 540 ;KeInsertQueueApc
 541 KeInsertQueueDpc@12
 542 ;KeIsAttachedProcess
 543 ;KeIsExecutingDpc
 544 KeLeaveCriticalRegion@0
 545 ;KeLoaderBlock DATA
 546 KeNumberProcessors DATA
 547 ;KeProfileInterrupt
 548 ;KeProfileInterruptWithSource
 549 KePulseEvent@12
 550 KeQueryActiveProcessors@0
 551 KeQueryActiveProcessorCount@4
 552 KeQueryInterruptTime@0
 553 KeQueryPriorityThread@4
 554 ;KeQueryRuntimeThread
 555 KeQuerySystemTime@4
 556 KeQueryTickCount@4
 557 KeQueryTimeIncrement@0
 558 ;KeRaiseUserException
 559 KeReadStateEvent@4
 560 ;KeReadStateMutant
 561 KeReadStateMutex@4
 562 ;KeReadStateQueue
 563 KeReadStateSemaphore@4
 564 KeReadStateTimer@4
 565 KeRegisterBugCheckCallback@20
 566 KeReleaseInStackQueuedSpinLockFromDpcLevel@4
 567 KeReleaseInterruptSpinLock@8
 568 ;KeReleaseMutant
 569 KeReleaseMutex@8
 570 KeReleaseSemaphore@16
 571 ;KeReleaseSpinLockFromDpcLevel
 572 KeRemoveByKeyDeviceQueue@8
 573 ;KeRemoveByKeyDeviceQueueIfBusy
 574 KeRemoveDeviceQueue@4
 575 KeRemoveEntryDeviceQueue@8
 576 ;KeRemoveQueue
 577 KeRemoveQueueDpc@4
 578 ;KeRemoveSystemServiceTable
 579 KeResetEvent@4
 580 KeRestoreFloatingPointState@4
 581 ;KeRevertToUserAffinityThread
 582 ;KeRundownQueue
 583 KeSaveFloatingPointState@4
 584 ;KeSaveStateForHibernate
 585 ;KeServiceDescriptorTable DATA
 586 ;KeSetAffinityThread
 587 KeSetBasePriorityThread@8
 588 ;KeSetDmaIoCoherency
 589 KeSetEvent@12
 590 ;KeSetEventBoostPriority
 591 ;KeSetIdealProcessorThread
 592 KeSetImportanceDpc@8
 593 ;KeSetKernelStackSwapEnable
 594 KeSetPriorityThread@8
 595 ;KeSetProfileIrql
 596 ;KeSetSystemAffinityThread
 597 KeSetTargetProcessorDpc@8
 598 ;KeSetTimeIncrement
 599 @KeSetTimeUpdateNotifyRoutine@4
 600 KeSetTimer@16
 601 KeSetTimerEx@20
 602 ;KeStackAttachProcess
 603 KeSynchronizeExecution@12
 604 ;KeTerminateThread
 605 ;KeTickCount DATA
 606 ;KeUnstackDetachProcess
 607 ;KeUpdateRunTime
 608 ;KeUpdateSystemTime
 609 ;KeUserModeCallback
 610 KeWaitForMultipleObjects@32
 611 KeWaitForMutexObject@20
 612 KeWaitForSingleObject@20
 613 @KefAcquireSpinLockAtDpcLevel@4
 614 @KefReleaseSpinLockFromDpcLevel@4
 615 ;Kei386EoiHelper
 616 ;KiAcquireSpinLock
 617 ;KiBugCheckData DATA
 618 ;KiCoprocessorError
 619 ;KiDeliverApc
 620 ;KiDispatchInterrupt
 621 ;KiEnableTimerWatchdog DATA
 622 ;KiIpiServiceRoutine
 623 ;KiReleaseSpinLock
 624 ;KiUnexpectedInterrupt
 625 ;Kii386SpinOnSpinLock
 626 ;LdrAccessResource
 627 ;LdrEnumResources
 628 ;LdrFindResourceDirectory_U
 629 ;LdrFindResource_U
 630 LpcPortObjectType DATA
 631 ;LpcRequestPort
 632 ;LpcRequestWaitReplyPort
 633 ;LsaCallAuthenticationPackage
 634 ;LsaDeregisterLogonProcess
 635 ;LsaFreeReturnBuffer
 636 ;LsaLogonUser
 637 ;LsaLookupAuthenticationPackage
 638 ;LsaRegisterLogonProcess
 639 ;Mm64BitPhysicalAddress DATA
 640 ;MmAddPhysicalMemory
 641 ;MmAddVerifierThunks
 642 ;MmAdjustWorkingSetSize
 643 MmAdvanceMdl@8
 644 MmAllocateContiguousMemory@12
 645 MmAllocateContiguousMemorySpecifyCache@20
 646 MmAllocateMappingAddress@8
 647 MmAllocateNonCachedMemory@4
 648 MmAllocatePagesForMdl@28
 649 MmBuildMdlForNonPagedPool@4
 650 ;MmCanFileBeTruncated
 651 MmCreateMdl@12
 652 MmCreateSection@32
 653 ;MmDisableModifiedWriteOfSection
 654 MmFlushImageSection@8
 655 ;MmForceSectionClosed
 656 MmFreeContiguousMemory@4
 657 MmFreeContiguousMemorySpecifyCache@12
 658 MmFreeMappingAddress@8
 659 MmFreeNonCachedMemory@8
 660 MmFreePagesFromMdl@4
 661 MmGetPhysicalAddress@4
 662 MmGetPhysicalMemoryRanges@0
 663 MmGetSystemRoutineAddress@4
 664 MmGetVirtualForPhysical@4
 665 ;MmGrowKernelStack
 666 ;MmHighestUserAddress DATA
 667 MmIsAddressValid@4
 668 MmIsDriverVerifying@4
 669 MmIsNonPagedSystemAddressValid@4
 670 ;MmIsRecursiveIoFault
 671 MmIsThisAnNtAsSystem@0
 672 MmIsVerifierEnabled@4
 673 MmLockPagableDataSection@4
 674 MmLockPagableImageSection@4
 675 MmLockPagableSectionByHandle@4
 676 MmMapIoSpace@16
 677 MmMapLockedPages@8
 678 MmMapLockedPagesSpecifyCache@24
 679 MmMapLockedPagesWithReservedMapping@16
 680 ;MmMapMemoryDumpMdl
 681 MmMapUserAddressesToPage@12
 682 MmMapVideoDisplay@12
 683 MmMapViewInSessionSpace@12
 684 MmMapViewInSystemSpace@12
 685 ;MmMapViewOfSection
 686 MmMarkPhysicalMemoryAsBad@8
 687 MmMarkPhysicalMemoryAsGood@8
 688 MmPageEntireDriver@4
 689 ;MmPrefetchPages
 690 MmProbeAndLockPages@12
 691 MmProbeAndLockProcessPages@16
 692 ;MmProbeAndLockSelectedPages
 693 MmProtectMdlSystemAddress@8
 694 MmQuerySystemSize@0
 695 MmRemovePhysicalMemory@8
 696 MmResetDriverPaging@4
 697 MmSectionObjectType DATA
 698 MmSecureVirtualMemory@12
 699 ;MmSetAddressRangeModified
 700 ;MmSetBankedSection
 701 MmSizeOfMdl@8
 702 ;MmSystemRangeStart DATA
 703 ;MmTrimAllSystemPagableMemory
 704 MmUnlockPagableImageSection@4
 705 MmUnlockPages@4
 706 MmUnmapIoSpace@8
 707 MmUnmapLockedPages@8
 708 MmUnmapReservedMapping@12
 709 MmUnmapVideoDisplay@8
 710 MmUnmapViewInSessionSpace@4
 711 MmUnmapViewInSystemSpace@4
 712 ;MmUnmapViewOfSection
 713 MmUnsecureVirtualMemory@4
 714 ;MmUserProbeAddress DATA
 715 ;NlsAnsiCodePage DATA
 716 ;NlsLeadByteInfo
 717 ;NlsMbCodePageTag DATA
 718 ;NlsMbOemCodePageTag DATA
 719 ;NlsOemCodePage DATA
 720 ;NlsOemLeadByteInfo
 721 NtAddAtom@12
 722 NtAdjustPrivilegesToken@24
 723 NtAllocateLocallyUniqueId@4
 724 NtAllocateUuids@16
 725 NtAllocateVirtualMemory@24
 726 ;NtBuildNumber DATA
 727 NtClose@4
 728 NtConnectPort@32
 729 NtCreateEvent@20
 730 ;NtCreateFile
 731 NtCreateSection@28
 732 NtDeleteAtom@4
 733 NtDeleteFile@4
 734 NtDeviceIoControlFile@40
 735 NtDuplicateObject@28
 736 NtDuplicateToken@24
 737 NtFindAtom@12
 738 NtFreeVirtualMemory@16
 739 ;NtFsControlFile
 740 ;NtGlobalFlag DATA
 741 ;NtLockFile
 742 ;NtMakePermanentObject
 743 NtMapViewOfSection@40
 744 ;NtNotifyChangeDirectoryFile
 745 NtOpenFile@24
 746 NtOpenProcess@16
 747 NtOpenProcessToken@12
 748 ;NtOpenProcessTokenEx
 749 NtOpenThread@16
 750 NtOpenThreadToken@16
 751 ;NtOpenThreadTokenEx
 752 ;NtQueryDirectoryFile
 753 NtQueryEaFile@36
 754 NtQueryInformationAtom@20
 755 ;NtQueryInformationFile
 756 NtQueryInformationProcess@20
 757 NtQueryInformationThread@20
 758 NtQueryInformationToken@20
 759 ;NtQueryQuotaInformationFile
 760 NtQuerySecurityObject@20
 761 NtQuerySystemInformation@16
 762 ;NtQueryVolumeInformationFile
 763 NtReadFile@36
 764 NtRequestPort@8
 765 NtRequestWaitReplyPort@12
 766 NtSetEaFile@16
 767 NtSetEvent@8
 768 ;NtSetInformationFile
 769 NtSetInformationProcess@16
 770 NtSetInformationThread@16
 771 ;NtSetQuotaInformationFile
 772 NtSetSecurityObject@12
 773 ;NtSetVolumeInformationFile
 774 NtShutdownSystem@4
 775 ;NtTraceEvent
 776 ;NtUnlockFile
 777 NtVdmControl@8
 778 NtWaitForSingleObject@12
 779 NtWriteFile@36
 780 ObAssignSecurity@16
 781 ;ObCheckCreateObjectAccess
 782 ;ObCheckObjectAccess
 783 ;ObCloseHandle
 784 ObCreateObject@36
 785 ;ObCreateObjectType
 786 ;ObDereferenceObject
 787 ObDereferenceSecurityDescriptor@8
 788 ;ObFindHandleForObject
 789 ObGetObjectSecurity@12
 790 ObInsertObject@24
 791 ObLogSecurityDescriptor@12
 792 ObMakeTemporaryObject@4
 793 ObOpenObjectByName@28
 794 ObOpenObjectByPointer@28
 795 ;ObQueryNameString
 796 ObQueryObjectAuditingByHandle@8
 797 ObReferenceObjectByHandle@24
 798 ObReferenceObjectByName@32
 799 ObReferenceObjectByPointer@16
 800 ObReferenceSecurityDescriptor@8
 801 ObReleaseObjectSecurity@8
 802 ;ObSetHandleAttributes
 803 ;ObSetSecurityDescriptorInfo
 804 ;ObSetSecurityObjectByPointer
 805 @ObfDereferenceObject@4
 806 @ObfReferenceObject@4
 807 ;PfxFindPrefix
 808 ;PfxInitialize
 809 ;PfxInsertPrefix
 810 ;PfxRemovePrefix
 811 PoCallDriver@8
 812 ;PoCancelDeviceNotify
 813 ;PoQueueShutdownWorkItem
 814 PoRegisterDeviceForIdleDetection@16
 815 ;PoRegisterDeviceNotify
 816 PoRegisterSystemState@8
 817 PoRequestPowerIrp@24
 818 PoRequestShutdownEvent@4
 819 ;PoSetHiberRange
 820 PoSetPowerState@12
 821 PoSetSystemState@4
 822 ;PoShutdownBugCheck
 823 PoStartNextPowerIrp@4
 824 PoUnregisterSystemState@4
 825 ProbeForRead@12
 826 ProbeForWrite@12
 827 ;PsAssignImpersonationToken
 828 ;PsChargePoolQuota
 829 ;PsChargeProcessNonPagedPoolQuota
 830 ;PsChargeProcessPagedPoolQuota
 831 ;PsChargeProcessPoolQuota
 832 PsCreateSystemProcess@12
 833 PsCreateSystemThread@28
 834 ;PsDereferenceImpersonationToken
 835 ;PsDereferencePrimaryToken
 836 ;PsDisableImpersonation
 837 ;PsEstablishWin32Callouts
 838 ;PsGetCurrentProcess
 839 PsGetCurrentProcessId@0
 840 ;PsGetCurrentProcessSessionId
 841 ;PsGetCurrentThread
 842 PsGetCurrentThreadId@0
 843 ;PsGetCurrentThreadPreviousMode
 844 ;PsGetCurrentThreadStackBase
 845 ;PsGetCurrentThreadStackLimit
 846 ;PsGetJobLock
 847 ;PsGetJobSessionId
 848 ;PsGetJobUIRestrictionsClass
 849 ;PsGetProcessCreateTimeQuadPart
 850 ;PsGetProcessDebugPort
 851 ;PsGetProcessExitProcessCalled
 852 ;PsGetProcessExitStatus
 853 ;PsGetProcessExitTime
 854 ;PsGetProcessId
 855 ;PsGetProcessImageFileName
 856 ;PsGetProcessInheritedFromUniqueProcessId
 857 ;PsGetProcessJob
 858 ;PsGetProcessPeb
 859 ;PsGetProcessPriorityClass
 860 ;PsGetProcessSectionBaseAddress
 861 ;PsGetProcessSecurityPort
 862 ;PsGetProcessSessionId
 863 ;PsGetProcessWin32Process
 864 ;PsGetProcessWin32WindowStation
 865 ;PsGetThreadFreezeCount
 866 ;PsGetThreadHardErrorsAreDisabled
 867 ;PsGetThreadId
 868 ;PsGetThreadProcess
 869 ;PsGetThreadProcessId
 870 ;PsGetThreadSessionId
 871 ;PsGetThreadTeb
 872 ;PsGetThreadWin32Thread
 873 PsGetVersion@16
 874 ;PsImpersonateClient
 875 ;PsInitialSystemProcess DATA
 876 ;PsIsProcessBeingDebugged
 877 ;PsIsSystemThread
 878 ;PsIsThreadImpersonating
 879 ;PsIsThreadTerminating
 880 ;PsJobType DATA
 881 ;PsLookupProcessByProcessId
 882 ;PsLookupProcessThreadByCid
 883 ;PsLookupThreadByThreadId
 884 ;PsProcessType DATA
 885 ;PsReferenceImpersonationToken
 886 ;PsReferencePrimaryToken
 887 PsRemoveCreateThreadNotifyRoutine@4
 888 PsRemoveLoadImageNotifyRoutine@4
 889 ;PsRestoreImpersonation
 890 ;PsReturnPoolQuota
 891 ;PsReturnProcessNonPagedPoolQuota
 892 ;PsReturnProcessPagedPoolQuota
 893 ;PsRevertThreadToSelf
 894 ;PsRevertToSelf
 895 PsSetCreateProcessNotifyRoutine@8
 896 PsSetCreateThreadNotifyRoutine@4
 897 ;PsSetJobUIRestrictionsClass
 898 ;PsSetLegoNotifyRoutine
 899 PsSetLoadImageNotifyRoutine@4
 900 ;PsSetProcessPriorityByClass
 901 ;PsSetProcessPriorityClass
 902 ;PsSetProcessSecurityPort
 903 ;PsSetProcessWin32Process
 904 ;PsSetProcessWindowStation
 905 ;PsSetThreadHardErrorsAreDisabled
 906 ;PsSetThreadWin32Thread
 907 PsTerminateSystemThread@4
 908 ;PsThreadType DATA
 909 READ_REGISTER_BUFFER_UCHAR@12
 910 READ_REGISTER_BUFFER_ULONG@12
 911 READ_REGISTER_BUFFER_USHORT@12
 912 READ_REGISTER_UCHAR@4
 913 READ_REGISTER_ULONG@4
 914 READ_REGISTER_USHORT@4
 915 ;RtlAbsoluteToSelfRelativeSD
 916 ;RtlAddAccessAllowedAce
 917 ;RtlAddAce
 918 ;RtlAddAtomToAtomTable
 919 RtlAddRange@28
 920 ;RtlAllocateHeap
 921 ;RtlAnsiCharToUnicodeChar
 922 RtlAnsiStringToUnicodeSize@4
 923 RtlAnsiStringToUnicodeString@12
 924 ;RtlAppendAsciizToString
 925 ;RtlAppendStringToString
 926 RtlAppendUnicodeStringToString@8
 927 RtlAppendUnicodeToString@8
 928 ;RtlAreAllAccessesGranted
 929 ;RtlAreAnyAccessesGranted
 930 RtlAreBitsClear@12
 931 RtlAreBitsSet@12
 932 RtlAssert@16
 933 ;RtlCaptureContext
 934 ;RtlCaptureStackBackTrace
 935 RtlCharToInteger@12
 936 RtlCheckRegistryKey@8
 937 RtlClearAllBits@4
 938 RtlClearBit@8
 939 RtlClearBits@12
 940 RtlCompareMemory@12
 941 ;RtlCompareMemoryUlong
 942 RtlCompareString@12
 943 RtlCompareUnicodeString@12
 944 ;RtlCompressBuffer
 945 ;RtlCompressChunks
 946 RtlConvertLongToLargeInteger@4
 947 ;RtlConvertSidToUnicodeString
 948 RtlConvertUlongToLargeInteger@4
 949 ;RtlCopyLuid
 950 RtlCopyRangeList@8
 951 ;RtlCopySid
 952 RtlCopyString@8
 953 RtlCopyUnicodeString@8
 954 ;RtlCreateAcl
 955 ;RtlCreateAtomTable
 956 ;RtlCreateHeap
 957 RtlCreateRegistryKey@8
 958 RtlCreateSecurityDescriptor@8
 959 ;RtlCreateSystemVolumeInformationFolder
 960 ;RtlCreateUnicodeString
 961 ;RtlCustomCPToUnicodeN
 962 ;RtlDecompressBuffer
 963 ;RtlDecompressChunks
 964 ;RtlDecompressFragment
 965 ;RtlDelete
 966 ;RtlDeleteAce
 967 ;RtlDeleteAtomFromAtomTable
 968 ;RtlDeleteElementGenericTable
 969 ;RtlDeleteElementGenericTableAvl
 970 ;RtlDeleteNoSplay
 971 RtlDeleteOwnersRanges@8
 972 RtlDeleteRange@16
 973 RtlDeleteRegistryValue@12
 974 ;RtlDescribeChunk
 975 ;RtlDestroyAtomTable
 976 ;RtlDestroyHeap
 977 ;RtlDowncaseUnicodeString
 978 ;RtlEmptyAtomTable
 979 RtlEnlargedIntegerMultiply@8
 980 RtlEnlargedUnsignedDivide@12
 981 RtlEnlargedUnsignedMultiply@8
 982 ;RtlEnumerateGenericTable
 983 ;RtlEnumerateGenericTableAvl
 984 ;RtlEnumerateGenericTableLikeADirectory
 985 ;RtlEnumerateGenericTableWithoutSplaying
 986 ;RtlEnumerateGenericTableWithoutSplayingAvl
 987 ;RtlEqualLuid
 988 ;RtlEqualSid
 989 RtlEqualString@12
 990 RtlEqualUnicodeString@12
 991 RtlExtendedIntegerMultiply@8
 992 RtlExtendedLargeIntegerDivide@12
 993 RtlExtendedMagicDivide@12
 994 ;RtlFillMemory
 995 ;RtlFillMemoryUlong
 996 RtlFindClearBits@12
 997 RtlFindClearBitsAndSet@12
 998 RtlFindClearRuns@16
 999 RtlFindFirstRunClear@8
1000 RtlFindLastBackwardRunClear@12
1001 RtlFindLeastSignificantBit@4
1002 RtlFindLongestRunClear@8
1003 ;RtlFindMessage
1004 RtlFindMostSignificantBit@4
1005 RtlFindNextForwardRunClear@12
1006 RtlFindRange@40
1007 RtlFindSetBits@12
1008 RtlFindSetBitsAndClear@12
1009 ;RtlFindUnicodePrefix
1010 ;RtlFormatCurrentUserKeyPath
1011 RtlFreeAnsiString@4
1012 ;RtlFreeHeap
1013 ;RtlFreeOemString
1014 RtlFreeRangeList@4
1015 RtlFreeUnicodeString@4
1016 RtlGUIDFromString@8
1017 ;RtlGenerate8dot3Name
1018 ;RtlGetAce
1019 RtlGetCallersAddress@8
1020 ;RtlGetCompressionWorkSpaceSize
1021 ;RtlGetDaclSecurityDescriptor
1022 ;RtlGetDefaultCodePage
1023 ;RtlGetElementGenericTable
1024 ;RtlGetElementGenericTableAvl
1025 RtlGetFirstRange@12
1026 ;RtlGetGroupSecurityDescriptor
1027 RtlGetNextRange@12
1028 ;RtlGetNtGlobalFlags
1029 ;RtlGetOwnerSecurityDescriptor
1030 ;RtlGetSaclSecurityDescriptor
1031 ;RtlGetSetBootStatusData
1032 RtlGetVersion@4
1033 RtlHashUnicodeString@16
1034 ;RtlImageDirectoryEntryToData
1035 ;RtlImageNtHeader
1036 RtlInitAnsiString@8
1037 ;RtlInitCodePageTable
1038 RtlInitString@8
1039 RtlInitUnicodeString@8
1040 RtlInitializeBitMap@12
1041 ;RtlInitializeGenericTable
1042 ;RtlInitializeGenericTableAvl
1043 RtlInitializeRangeList@4
1044 ;RtlInitializeSid
1045 ;RtlInitializeUnicodePrefix
1046 ;RtlInsertElementGenericTable
1047 ;RtlInsertElementGenericTableAvl
1048 ;RtlInsertElementGenericTableFull
1049 ;RtlInsertElementGenericTableFullAvl
1050 ;RtlInsertUnicodePrefix
1051 RtlInt64ToUnicodeString@12
1052 ;RtlIntegerToChar
1053 ;RtlIntegerToUnicode
1054 RtlIntegerToUnicodeString@12
1055 RtlInvertRangeList@8
1056 ;RtlIpv4AddressToStringA
1057 ;RtlIpv4AddressToStringW
1058 ;RtlIpv4StringToAddressA
1059 ;RtlIpv4StringToAddressW
1060 ;RtlIpv6AddressToStringA
1061 ;RtlIpv6AddressToStringW
1062 ;RtlIpv6StringToAddressA
1063 ;RtlIpv6StringToAddressW
1064 ;RtlIsGenericTableEmpty
1065 ;RtlIsGenericTableEmptyAvl
1066 ;RtlIsNameLegalDOS8Dot3
1067 RtlIsRangeAvailable@32
1068 ;RtlIsValidOemCharacter
1069 RtlLargeIntegerAdd@8
1070 RtlLargeIntegerArithmeticShift@8
1071 RtlLargeIntegerDivide@12
1072 RtlLargeIntegerNegate@4
1073 RtlLargeIntegerShiftLeft@8
1074 RtlLargeIntegerShiftRight@8
1075 RtlLargeIntegerSubtract@8
1076 ;RtlLengthRequiredSid
1077 RtlLengthSecurityDescriptor@4
1078 ;RtlLengthSid
1079 ;RtlLockBootStatusData
1080 ;RtlLookupAtomInAtomTable
1081 ;RtlLookupElementGenericTable
1082 ;RtlLookupElementGenericTableAvl
1083 ;RtlLookupElementGenericTableFull
1084 ;RtlLookupElementGenericTableFullAvl
1085 RtlMapGenericMask@8
1086 ;RtlMapSecurityErrorToNtStatus
1087 RtlMergeRangeLists@16
1088 ;RtlMoveMemory
1089 ;RtlMultiByteToUnicodeN
1090 ;RtlMultiByteToUnicodeSize
1091 ;RtlNextUnicodePrefix
1092 ;RtlNtStatusToDosError
1093 ;RtlNtStatusToDosErrorNoTeb
1094 ;RtlNumberGenericTableElements
1095 ;RtlNumberGenericTableElementsAvl
1096 RtlNumberOfClearBits@4
1097 RtlNumberOfSetBits@4
1098 ;RtlOemStringToCountedUnicodeString
1099 ;RtlOemStringToUnicodeSize
1100 ;RtlOemStringToUnicodeString
1101 ;RtlOemToUnicodeN
1102 ;RtlPinAtomInAtomTable
1103 @RtlPrefetchMemoryNonTemporal@8
1104 ;RtlPrefixString
1105 RtlPrefixUnicodeString@12
1106 ;RtlQueryAtomInAtomTable
1107 RtlQueryRegistryValues@20
1108 ;RtlQueryTimeZoneInformation
1109 ;RtlRaiseException
1110 ;RtlRandom
1111 ;RtlRandomEx
1112 ;RtlRealPredecessor
1113 ;RtlRealSuccessor
1114 ;RtlRemoveUnicodePrefix
1115 ;RtlReserveChunk
1116 ;RtlSecondsSince1970ToTime
1117 ;RtlSecondsSince1980ToTime
1118 ;RtlSelfRelativeToAbsoluteSD
1119 ;RtlSelfRelativeToAbsoluteSD2
1120 RtlSetAllBits@4
1121 RtlSetBit@8
1122 RtlSetBits@12
1123 RtlSetDaclSecurityDescriptor@16
1124 ;RtlSetGroupSecurityDescriptor
1125 ;RtlSetOwnerSecurityDescriptor
1126 ;RtlSetSaclSecurityDescriptor
1127 ;RtlSetTimeZoneInformation
1128 ;RtlSizeHeap
1129 ;RtlSplay
1130 RtlStringFromGUID@8
1131 ;RtlSubAuthorityCountSid
1132 ;RtlSubAuthoritySid
1133 ;RtlSubtreePredecessor
1134 ;RtlSubtreeSuccessor
1135 RtlTestBit@8
1136 RtlTimeFieldsToTime@8
1137 ;RtlTimeToElapsedTimeFields
1138 ;RtlTimeToSecondsSince1970
1139 ;RtlTimeToSecondsSince1980
1140 RtlTimeToTimeFields@8
1141 ;RtlTraceDatabaseAdd
1142 ;RtlTraceDatabaseCreate
1143 ;RtlTraceDatabaseDestroy
1144 ;RtlTraceDatabaseEnumerate
1145 ;RtlTraceDatabaseFind
1146 ;RtlTraceDatabaseLock
1147 ;RtlTraceDatabaseUnlock
1148 ;RtlTraceDatabaseValidate
1149 @RtlUlongByteSwap@4
1150 @RtlUlonglongByteSwap@4
1151 RtlUnicodeStringToAnsiSize@4
1152 RtlUnicodeStringToAnsiString@12
1153 ;RtlUnicodeStringToCountedOemString
1154 RtlUnicodeStringToInteger@12
1155 ;RtlUnicodeStringToOemSize
1156 ;RtlUnicodeStringToOemString
1157 ;RtlUnicodeToCustomCPN
1158 ;RtlUnicodeToMultiByteN
1159 ;RtlUnicodeToMultiByteSize
1160 ;RtlUnicodeToOemN
1161 ;RtlUnlockBootStatusData
1162 ;RtlUnwind
1163 RtlUpcaseUnicodeChar@4
1164 RtlUpcaseUnicodeString@12
1165 ;RtlUpcaseUnicodeStringToAnsiString
1166 ;RtlUpcaseUnicodeStringToCountedOemString
1167 ;RtlUpcaseUnicodeStringToOemString
1168 ;RtlUpcaseUnicodeToCustomCPN
1169 ;RtlUpcaseUnicodeToMultiByteN
1170 ;RtlUpcaseUnicodeToOemN
1171 RtlUpperChar@4
1172 RtlUpperString@8
1173 RtlUshortByteSwap@4
1174 RtlValidRelativeSecurityDescriptor@12
1175 RtlValidSecurityDescriptor@4
1176 ;RtlValidSid
1177 RtlVerifyVersionInfo@12
1178 RtlVolumeDeviceToDosName@8
1179 RtlWalkFrameChain@12
1180 RtlWriteRegistryValue@24
1181 ;RtlZeroHeap
1182 ;RtlZeroMemory
1183 ;RtlxAnsiStringToUnicodeSize
1184 ;RtlxOemStringToUnicodeSize
1185 RtlxUnicodeStringToAnsiSize@4
1186 ;RtlxUnicodeStringToOemSize
1187 SeAccessCheck@40
1188 ;SeAppendPrivileges
1189 SeAssignSecurity@28
1190 SeAssignSecurityEx@36
1191 ;SeAuditHardLinkCreation
1192 ;SeAuditingFileEvents
1193 ;SeAuditingFileOrGlobalEvents
1194 ;SeAuditingHardLinkEvents
1195 ;SeCaptureSecurityDescriptor
1196 ;SeCaptureSubjectContext
1197 ;SeCloseObjectAuditAlarm
1198 ;SeCreateAccessState
1199 ;SeCreateClientSecurity
1200 ;SeCreateClientSecurityFromSubjectContext
1201 SeDeassignSecurity@4
1202 ;SeDeleteAccessState
1203 ;SeDeleteObjectAuditAlarm
1204 ;SeExports DATA
1205 ;SeFilterToken
1206 ;SeFreePrivileges
1207 ;SeImpersonateClient
1208 ;SeImpersonateClientEx
1209 ;SeLockSubjectContext
1210 ;SeMarkLogonSessionForTerminationNotification
1211 ;SeOpenObjectAuditAlarm
1212 ;SeOpenObjectForDeleteAuditAlarm
1213 ;SePrivilegeCheck
1214 ;SePrivilegeObjectAuditAlarm
1215 ;SePublicDefaultDacl DATA
1216 ;SeQueryAuthenticationIdToken
1217 ;SeQueryInformationToken
1218 ;SeQuerySecurityDescriptorInfo
1219 ;SeQuerySessionIdToken
1220 ;SeRegisterLogonSessionTerminatedRoutine
1221 ;SeReleaseSecurityDescriptor
1222 ;SeReleaseSubjectContext
1223 ;SeSetAccessStateGenericMapping
1224 ;SeSetSecurityDescriptorInfo
1225 ;SeSetSecurityDescriptorInfoEx
1226 SeSinglePrivilegeCheck@8
1227 ;SeSystemDefaultDacl DATA
1228 ;SeTokenImpersonationLevel
1229 ;SeTokenIsAdmin
1230 ;SeTokenIsRestricted
1231 SeTokenObjectType DATA
1232 ;SeTokenType
1233 ;SeUnlockSubjectContext
1234 ;SeUnregisterLogonSessionTerminatedRoutine
1235 SeValidSecurityDescriptor@8
1236 VerSetConditionMask@16
1237 ;VfFailDeviceNode
1238 ;VfFailDriver
1239 ;VfFailSystemBIOS
1240 ;VfIsVerificationEnabled
1241 WRITE_REGISTER_BUFFER_UCHAR@12
1242 WRITE_REGISTER_BUFFER_ULONG@12
1243 WRITE_REGISTER_BUFFER_USHORT@12
1244 WRITE_REGISTER_UCHAR@8
1245 WRITE_REGISTER_ULONG@8
1246 WRITE_REGISTER_USHORT@8
1247 ;WmiFlushTrace
1248 ;WmiGetClock
1249 ;WmiQueryTrace
1250 WmiQueryTraceInformation@20
1251 ;WmiStartTrace
1252 ;WmiStopTrace
1253 WmiTraceMessage
1254 ;WmiTraceMessageVa
1255 ;WmiUpdateTrace
1256 ;XIPDispatch
1257 ZwAccessCheckAndAuditAlarm@44
1258 ;ZwAddBootEntry
1259 ZwAdjustPrivilegesToken@24
1260 ZwAlertThread@4
1261 ZwAllocateVirtualMemory@24
1262 ZwAssignProcessToJobObject@8
1263 ZwCancelIoFile@8
1264 ZwCancelTimer@8
1265 ;ZwClearEvent
1266 ZwClose@4
1267 ZwCloseObjectAuditAlarm@12
1268 ZwConnectPort@32
1269 ZwCreateDirectoryObject@12
1270 ZwCreateEvent@20
1271 ZwCreateFile@44
1272 ZwCreateJobObject@12
1273 ZwCreateKey@28
1274 ZwCreateSection@28
1275 ZwCreateSymbolicLinkObject@16
1276 ZwCreateTimer@16
1277 ;ZwDeleteBootEntry
1278 ZwDeleteFile@4
1279 ZwDeleteKey@4
1280 ZwDeleteValueKey@8
1281 ZwDeviceIoControlFile@40
1282 ZwDisplayString@4
1283 ZwDuplicateObject@28
1284 ZwDuplicateToken@24
1285 ;ZwEnumerateBootEntries
1286 ZwEnumerateKey@24
1287 ZwEnumerateValueKey@24
1288 ZwFlushInstructionCache@12
1289 ZwFlushKey@4
1290 ZwFlushVirtualMemory@16
1291 ZwFreeVirtualMemory@16
1292 ;ZwFsControlFile
1293 ZwInitiatePowerAction@16
1294 ;ZwIsProcessInJob
1295 ZwLoadDriver@4
1296 ZwLoadKey@8
1297 ZwMakeTemporaryObject@4
1298 ZwMapViewOfSection@40
1299 ZwNotifyChangeKey@40
1300 ZwOpenDirectoryObject@12
1301 ;ZwOpenEvent
1302 ZwOpenFile@24
1303 ZwOpenJobObject@12
1304 ZwOpenKey@12
1305 ;ZwOpenProcess
1306 ZwOpenProcessToken@12
1307 ;ZwOpenProcessTokenEx
1308 ZwOpenSection@12
1309 ZwOpenSymbolicLinkObject@12
1310 ZwOpenThread@16
1311 ZwOpenThreadToken@16
1312 ;ZwOpenThreadTokenEx
1313 ZwOpenTimer@12
1314 ZwPowerInformation@20
1315 ;ZwPulseEvent
1316 ;ZwQueryBootEntryOrder
1317 ;ZwQueryBootOptions
1318 ZwQueryDefaultLocale@8
1319 ZwQueryDefaultUILanguage@4
1320 ZwQueryDirectoryFile@44
1321 ZwQueryDirectoryObject@28
1322 ZwQueryEaFile@36
1323 ZwQueryFullAttributesFile@8
1324 ZwQueryInformationFile@20
1325 ZwQueryInformationJobObject@20
1326 ZwQueryInformationProcess@20
1327 ZwQueryInformationThread@20
1328 ZwQueryInformationToken@20
1329 ZwQueryInstallUILanguage@4
1330 ZwQueryKey@20
1331 ZwQueryObject@20
1332 ZwQuerySection@20
1333 ZwQuerySecurityObject@20
1334 ZwQuerySymbolicLinkObject@12
1335 ZwQuerySystemInformation@16
1336 ZwQueryValueKey@24
1337 ZwQueryVolumeInformationFile@20
1338 ZwReadFile@36
1339 ZwReplaceKey@12
1340 ZwRequestWaitReplyPort@12
1341 ;ZwResetEvent
1342 ZwRestoreKey@12
1343 ZwSaveKey@8
1344 ;ZwSaveKeyEx
1345 ;ZwSetBootEntryOrder
1346 ;ZwSetBootOptions
1347 ZwSetDefaultLocale@8
1348 ZwSetDefaultUILanguage@4
1349 ZwSetEaFile@16
1350 ZwSetEvent@8
1351 ZwSetInformationFile@20
1352 ZwSetInformationJobObject@16
1353 ZwSetInformationObject@16
1354 ZwSetInformationProcess@16
1355 ZwSetInformationThread@16
1356 ZwSetSecurityObject@12
1357 ZwSetSystemInformation@12
1358 ZwSetSystemTime@8
1359 ZwSetTimer@28
1360 ZwSetValueKey@24
1361 ;ZwSetVolumeInformationFile
1362 ZwTerminateJobObject@8
1363 ZwTerminateProcess@8
1364 ;ZwTranslateFilePath
1365 ZwUnloadDriver@4
1366 ZwUnloadKey@4
1367 ZwUnmapViewOfSection@8
1368 ;ZwWaitForMultipleObjects
1369 ZwWaitForSingleObject@12
1370 ZwWriteFile@36
1371 ZwYieldExecution@0
1372 ;_CIcos
1373 ;_CIsin
1374 ;_CIsqrt
1375 ;_abnormal_termination
1376 ;_alldiv
1377 ;_alldvrm
1378 ;_allmul
1379 ;_alloca_probe
1380 ;_allrem
1381 ;_allshl
1382 ;_allshr
1383 ;_aulldiv
1384 ;_aulldvrm
1385 ;_aullrem
1386 ;_aullshr
1387 ;_except_handler2
1388 ;_except_handler3
1389 ;_global_unwind2
1390 ;_itoa
1391 ;_itow
1392 ;_local_unwind2
1393 ;_purecall
1394 _snprintf
1395 _snwprintf
1396 _stricmp
1397 _strlwr
1398 _strnicmp
1399 _strnset
1400 _strrev
1401 _strset
1402 _strupr
1403 _vsnprintf
1404 _vsnwprintf
1405 _wcsicmp@8
1406 _wcslwr@4
1407 _wcsnicmp@12
1408 _wcsnset@12
1409 _wcsrev@4
1410 _wcsupr@4
1411 ;atoi
1412 ;atol
1413 ;isdigit
1414 ;islower
1415 ;isprint
1416 ;isspace
1417 ;isupper
1418 ;isxdigit
1419 ;mbstowcs
1420 ;mbtowc
1421 memchr
1422 memcpy
1423 memmove
1424 memset
1425 ;qsort
1426 ;rand
1427 sprintf
1428 ;srand
1429 strcat
1430 strchr
1431 strcmp
1432 strcpy
1433 strlen
1434 strncat
1435 strncmp
1436 strncpy
1437 strrchr
1438 strspn
1439 strstr
1440 swprintf
1441 ;tolower
1442 ;toupper
1443 ;towlower
1444 ;towupper
1445 ;vDbgPrintEx
1446 ;vDbgPrintExWithPrefix
1447 ;vsprintf
1448 wcscat
1449 wcschr
1450 wcscmp
1451 wcscpy
1452 wcscspn
1453 wcslen
1454 wcsncat
1455 wcsncmp
1456 wcsncpy
1457 wcsrchr
1458 wcsspn
1459 wcsstr
1460 ;wcstombs
1461 ;wctomb