wslapi/lib/ddk/ntoskrnl.def

   1 LIBRARY ntoskrnl.exe
   2 EXPORTS
   3 ;CcCanIWrite
   4 ;CcCopyRead
   5 ;CcCopyWrite
   6 ;CcDeferWrite
   7 ;CcFastCopyRead
   8 ;CcFastCopyWrite
   9 ;CcFastMdlReadWait
  10 ;CcFastReadNotPossible
  11 ;CcFastReadWait
  12 ;CcFlushCache
  13 ;CcGetDirtyPages
  14 ;CcGetFileObjectFromBcb
  15 ;CcGetFileObjectFromSectionPtrs
  16 ;CcGetFlushedValidData
  17 ;CcGetLsnForFileObject
  18 ;CcInitializeCacheMap
  19 ;CcIsThereDirtyData
  20 ;CcMapData
  21 ;CcMdlRead
  22 ;CcMdlReadComplete
  23 ;CcMdlWriteAbort
  24 ;CcMdlWriteComplete
  25 ;CcPinMappedData
  26 ;CcPinRead
  27 ;CcPrepareMdlWrite
  28 ;CcPreparePinWrite
  29 ;CcPurgeCacheSection
  30 ;CcRemapBcb
  31 ;CcRepinBcb
  32 ;CcScheduleReadAhead
  33 ;CcSetAdditionalCacheAttributes
  34 ;CcSetBcbOwnerPointer
  35 ;CcSetDirtyPageThreshold
  36 ;CcSetDirtyPinnedData
  37 ;CcSetFileSizes
  38 ;CcSetLogHandleForFile
  39 ;CcSetReadAheadGranularity
  40 ;CcUninitializeCacheMap
  41 ;CcUnpinData
  42 ;CcUnpinDataForThread
  43 ;CcUnpinRepinnedBcb
  44 ;CcWaitForCurrentLazyWriterActivity
  45 ;CcZeroData
  46 CmRegisterCallback@12
  47 CmUnRegisterCallback@4
  48 DbgBreakPoint@0
  49 DbgBreakPointWithStatus@4
  50 ;DbgLoadImageSymbols
  51 DbgPrint
  52 DbgPrintEx
  53 DbgPrintReturnControlC
  54 ;DbgPrompt
  55 DbgQueryDebugFilterState@8
  56 DbgSetDebugFilterState@12
  57 @ExAcquireFastMutexUnsafe@4
  58 ExAcquireResourceExclusiveLite@8
  59 ExAcquireResourceSharedLite@8
  60 ;ExAcquireRundownProtection
  61 ExAcquireSharedStarveExclusive@8
  62 ExAcquireSharedWaitForExclusive@8
  63 ExAllocateFromPagedLookasideList@4
  64 ExAllocatePool@8
  65 ExAllocatePoolWithQuota@8
  66 ExAllocatePoolWithQuotaTag@12
  67 ExAllocatePoolWithTag@12
  68 ExAllocatePoolWithTagPriority@16
  69 ExConvertExclusiveToSharedLite@4
  70 ExCreateCallback@16
  71 ExDeleteNPagedLookasideList@4
  72 ExDeletePagedLookasideList@4
  73 ExDeleteResourceLite@4
  74 ExDesktopObjectType DATA
  75 ;ExDisableResourceBoostLite
  76 ;ExEnumHandleTable
  77 ExEventObjectType DATA
  78 ExExtendZone@12
  79 @Exfi386InterlockedDecrementLong@4
  80 @Exfi386InterlockedExchangeUlong@8
  81 @Exfi386InterlockedIncrementLong@4
  82 @ExfInterlockedAddUlong@12
  83 @ExfInterlockedInsertHeadList@12
  84 @ExfInterlockedInsertTailList@12
  85 @ExfInterlockedPopEntryList@8
  86 @ExfInterlockedPushEntryList@12
  87 @ExfInterlockedRemoveHeadList@8
  88 ExFreePool@4
  89 ExFreePoolWithTag@8
  90 ExFreeToPagedLookasideList@8
  91 ;ExGetCurrentProcessorCounts
  92 ;ExGetCurrentProcessorCpuUsage
  93 ExGetExclusiveWaiterCount@4
  94 ExGetPreviousMode@0
  95 ExGetSharedWaiterCount@4
  96 Exi386InterlockedDecrementLong@4
  97 Exi386InterlockedExchangeUlong@8
  98 Exi386InterlockedIncrementLong@4
  99 ExInitializeNPagedLookasideList@28
 100 ExInitializePagedLookasideList@28
 101 ExInitializeResourceLite@4
 102 ;ExInitializeRundownProtection
 103 ExInitializeZone@16
 104 ExInterlockedAddLargeInteger@12
 105 @ExInterlockedAddLargeStatistic@8
 106 ExInterlockedAddUlong@12
 107 @ExInterlockedCompareExchange64@16
 108 ExInterlockedDecrementLong@8
 109 ExInterlockedExchangeUlong@12
 110 ExInterlockedExtendZone@16
 111 @ExInterlockedFlushSList@4
 112 @ExInterlockedIncrementLong@8
 113 ExInterlockedInsertHeadList@12
 114 ExInterlockedInsertTailList@12
 115 ExInterlockedPopEntryList@8
 116 @ExInterlockedPopEntrySList@8
 117 ExInterlockedPushEntryList@12
 118 @ExInterlockedPushEntrySList@12
 119 ExInterlockedRemoveHeadList@8
 120 ExIsProcessorFeaturePresent@4
 121 ExIsResourceAcquiredExclusiveLite@4
 122 ExIsResourceAcquiredSharedLite@4
 123 ExLocalTimeToSystemTime@8
 124 ExNotifyCallback@12
 125 ;ExQueryPoolBlockSize
 126 ExQueueWorkItem@8
 127 ExRaiseAccessViolation@0
 128 ExRaiseDatatypeMisalignment@0
 129 ;ExRaiseException
 130 ;ExRaiseHardError
 131 ExRaiseStatus@4
 132 ;ExReInitializeRundownProtection
 133 ExRegisterCallback@12
 134 ExReinitializeResourceLite@4
 135 @ExReleaseFastMutexUnsafe@4
 136 ExReleaseResourceForThreadLite@8
 137 @ExReleaseResourceLite@4
 138 ;ExReleaseRundownProtection
 139 ;ExRundownCompleted
 140 ExSemaphoreObjectType DATA
 141 ExSetResourceOwnerPointer@8
 142 ExSetTimerResolution@8
 143 ;ExSystemExceptionFilter
 144 ExSystemTimeToLocalTime@8
 145 ExUnregisterCallback@4
 146 ExUuidCreate@4
 147 ExVerifySuite@4
 148 ;ExWaitForRundownProtectionRelease
 149 ExWindowStationObjectType DATA
 150 ;FsRtlAcquireFileExclusive
 151 ;FsRtlAddLargeMcbEntry
 152 ;FsRtlAddMcbEntry
 153 ;FsRtlAddToTunnelCache
 154 ;FsRtlAllocateFileLock
 155 ;FsRtlAllocatePool
 156 ;FsRtlAllocatePoolWithQuota
 157 ;FsRtlAllocatePoolWithQuotaTag
 158 ;FsRtlAllocatePoolWithTag
 159 ;FsRtlAllocateResource
 160 ;FsRtlAreNamesEqual
 161 ;FsRtlBalanceReads
 162 ;FsRtlCheckLockForReadAccess
 163 ;FsRtlCheckLockForWriteAccess
 164 ;FsRtlCheckOplock
 165 ;FsRtlCopyRead
 166 ;FsRtlCopyWrite
 167 ;FsRtlCurrentBatchOplock
 168 ;FsRtlDeleteKeyFromTunnelCache
 169 ;FsRtlDeleteTunnelCache
 170 ;FsRtlDeregisterUncProvider
 171 ;FsRtlDissectDbcs
 172 ;FsRtlDissectName
 173 ;FsRtlDoesDbcsContainWildCards
 174 ;FsRtlDoesNameContainWildCards
 175 ;FsRtlFastCheckLockForRead
 176 ;FsRtlFastCheckLockForWrite
 177 ;FsRtlFastUnlockAll
 178 ;FsRtlFastUnlockAllByKey
 179 ;FsRtlFastUnlockSingle
 180 ;FsRtlFindInTunnelCache
 181 ;FsRtlFreeFileLock
 182 ;FsRtlGetFileSize
 183 ;FsRtlGetNextFileLock
 184 ;FsRtlGetNextLargeMcbEntry
 185 ;FsRtlGetNextMcbEntry
 186 ;FsRtlIncrementCcFastReadNoWait
 187 ;FsRtlIncrementCcFastReadNotPossible
 188 ;FsRtlIncrementCcFastReadResourceMiss
 189 ;FsRtlIncrementCcFastReadWait
 190 ;FsRtlInitializeFileLock
 191 ;FsRtlInitializeLargeMcb
 192 ;FsRtlInitializeMcb
 193 ;FsRtlInitializeOplock
 194 ;FsRtlInitializeTunnelCache
 195 ;FsRtlInsertPerFileObjectContext
 196 ;FsRtlInsertPerStreamContext
 197 ;FsRtlIsDbcsInExpression
 198 ;FsRtlIsFatDbcsLegal
 199 ;FsRtlIsHpfsDbcsLegal
 200 ;FsRtlIsNameInExpression
 201 ;FsRtlIsNtstatusExpected
 202 ;FsRtlIsPagingFile
 203 FsRtlIsTotalDeviceFailure@4
 204 ;FsRtlLegalAnsiCharacterArray
 205 ;FsRtlLookupLargeMcbEntry
 206 ;FsRtlLookupLastLargeMcbEntry
 207 ;FsRtlLookupLastLargeMcbEntryAndIndex
 208 ;FsRtlLookupLastMcbEntry
 209 ;FsRtlLookupMcbEntry
 210 ;FsRtlLookupPerFileObjectContext
 211 ;FsRtlLookupPerStreamContextInternal
 212 ;FsRtlMdlRead
 213 ;FsRtlMdlReadComplete
 214 ;FsRtlMdlReadCompleteDev
 215 ;FsRtlMdlReadDev
 216 ;FsRtlMdlWriteComplete
 217 ;FsRtlMdlWriteCompleteDev
 218 ;FsRtlNormalizeNtstatus
 219 ;FsRtlNotifyChangeDirectory
 220 ;FsRtlNotifyCleanup
 221 ;FsRtlNotifyFilterChangeDirectory
 222 ;FsRtlNotifyFilterReportChange
 223 ;FsRtlNotifyFullChangeDirectory
 224 ;FsRtlNotifyFullReportChange
 225 ;FsRtlNotifyInitializeSync
 226 ;FsRtlNotifyReportChange
 227 ;FsRtlNotifyUninitializeSync
 228 ;FsRtlNotifyVolumeEvent
 229 ;FsRtlNumberOfRunsInLargeMcb
 230 ;FsRtlNumberOfRunsInMcb
 231 ;FsRtlOplockFsctrl
 232 ;FsRtlOplockIsFastIoPossible
 233 ;FsRtlPostPagingFileStackOverflow
 234 ;FsRtlPostStackOverflow
 235 ;FsRtlPrepareMdlWrite
 236 ;FsRtlPrepareMdlWriteDev
 237 ;FsRtlPrivateLock
 238 ;FsRtlProcessFileLock
 239 ;FsRtlRegisterFileSystemFilterCallbacks
 240 ;FsRtlRegisterUncProvider
 241 ;FsRtlReleaseFile
 242 ;FsRtlRemoveLargeMcbEntry
 243 ;FsRtlRemoveMcbEntry
 244 ;FsRtlRemovePerFileObjectContext
 245 ;FsRtlRemovePerStreamContext
 246 ;FsRtlResetLargeMcb
 247 ;FsRtlSplitLargeMcb
 248 ;FsRtlSyncVolumes
 249 ;FsRtlTeardownPerStreamContexts
 250 ;FsRtlTruncateLargeMcb
 251 ;FsRtlTruncateMcb
 252 ;FsRtlUninitializeFileLock
 253 ;FsRtlUninitializeLargeMcb
 254 ;FsRtlUninitializeMcb
 255 ;FsRtlUninitializeOplock
 256 ;HalDispatchTable DATA
 257 @HalExamineMBR@16
 258 ;HalPrivateDispatchTable DATA
 259 ;HeadlessDispatch
 260 ;InbvAcquireDisplayOwnership
 261 ;InbvCheckDisplayOwnership
 262 ;InbvDisplayString
 263 ;InbvEnableBootDriver
 264 ;InbvEnableDisplayString
 265 ;InbvInstallDisplayStringFilter
 266 ;InbvIsBootDriverInstalled
 267 ;InbvNotifyDisplayOwnershipLost
 268 ;InbvResetDisplay
 269 ;InbvSetScrollRegion
 270 ;InbvSetTextColor
 271 ;InbvSolidColorFill
 272 ;InitSafeBootMode DATA
 273 @InterlockedCompareExchange@12
 274 @InterlockedDecrement@4
 275 @InterlockedExchange@8
 276 @InterlockedExchangeAdd@8
 277 @InterlockedIncrement@4
 278 @InterlockedPopEntrySList@4
 279 @InterlockedPushEntrySList@8
 280 IoAcquireCancelSpinLock@4
 281 IoAcquireRemoveLockEx@20
 282 ;IoAcquireVpbSpinLock
 283 IoAdapterObjectType DATA
 284 IoAllocateAdapterChannel@20
 285 IoAllocateController@16
 286 IoAllocateDriverObjectExtension@16
 287 IoAllocateErrorLogEntry@8
 288 IoAllocateIrp@8
 289 IoAllocateMdl@20
 290 IoAllocateWorkItem@4
 291 ;IoAssignDriveLetters
 292 IoAssignResources@24
 293 IoAttachDevice@12
 294 IoAttachDeviceByPointer@8
 295 IoAttachDeviceToDeviceStack@8
 296 ;IoAttachDeviceToDeviceStackSafe
 297 IoBuildAsynchronousFsdRequest@24
 298 IoBuildDeviceIoControlRequest@36
 299 IoBuildPartialMdl@16
 300 IoBuildSynchronousFsdRequest@28
 301 ;IoCallDriver
 302 IoCancelFileOpen@8
 303 IoCancelIrp@4
 304 ;IoCheckDesiredAccess
 305 ;IoCheckEaBufferValidity
 306 ;IoCheckFunctionAccess
 307 ;IoCheckQuerySetFileInformation
 308 ;IoCheckQuerySetVolumeInformation
 309 ;IoCheckQuotaBufferValidity
 310 IoCheckShareAccess@20
 311 ;IoCompleteRequest
 312 IoConnectInterrupt@44
 313 IoCreateController@4
 314 IoCreateDevice@28
 315 IoCreateDisk@8
 316 ;IoCreateDriver
 317 IoCreateFile@56
 318 ;IoCreateFileSpecifyDeviceObjectHint
 319 IoCreateNotificationEvent@8
 320 ;IoCreateStreamFileObject
 321 ;IoCreateStreamFileObjectEx
 322 ;IoCreateStreamFileObjectLite
 323 IoCreateSymbolicLink@8
 324 IoCreateSynchronizationEvent@8
 325 IoCreateUnprotectedSymbolicLink@8
 326 IoCsqInitialize@28
 327 IoCsqInsertIrp@12
 328 IoCsqRemoveIrp@8
 329 IoCsqRemoveNextIrp@8
 330 IoDeleteController@4
 331 IoDeleteDevice@4
 332 ;IoDeleteDriver
 333 IoDeleteSymbolicLink@4
 334 IoDetachDevice@4
 335 IoDeviceHandlerObjectSize DATA
 336 IoDeviceHandlerObjectType DATA
 337 IoDeviceObjectType DATA
 338 IoDisconnectInterrupt@4
 339 IoDriverObjectType DATA
 340 ;IoEnqueueIrp
 341 ;IoEnumerateDeviceObjectList
 342 ;IoFastQueryNetworkAttributes
 343 IoFileObjectType DATA
 344 ;IoForwardAndCatchIrp
 345 IoForwardIrpSynchronously@8
 346 IoFreeController@4
 347 IoFreeErrorLogEntry@4
 348 IoFreeIrp@4
 349 IoFreeMdl@4
 350 IoFreeWorkItem@4
 351 IoGetAttachedDevice@4
 352 IoGetAttachedDeviceReference@4
 353 ;IoGetBaseFileSystemDeviceObject
 354 IoGetBootDiskInformation@8
 355 IoGetConfigurationInformation@0
 356 IoGetCurrentProcess@0
 357 ;IoGetDeviceAttachmentBaseRef
 358 IoGetDeviceInterfaceAlias@12
 359 IoGetDeviceInterfaces@16
 360 IoGetDeviceObjectPointer@16
 361 IoGetDeviceProperty@20
 362 IoGetDeviceToVerify@4
 363 ;IoGetDiskDeviceObject
 364 IoGetDmaAdapter@12
 365 IoGetDriverObjectExtension@8
 366 IoGetFileObjectGenericMapping@0
 367 IoGetInitialStack@0
 368 ;IoGetLowerDeviceObject
 369 IoGetRelatedDeviceObject@4
 370 ;IoGetRequestorProcess
 371 ;IoGetRequestorProcessId
 372 ;IoGetRequestorSessionId
 373 IoGetStackLimits@8
 374 ;IoGetTopLevelIrp
 375 IoInitializeIrp@12
 376 IoInitializeRemoveLockEx@20
 377 IoInitializeTimer@12
 378 IoInvalidateDeviceRelations@8
 379 IoInvalidateDeviceState@4
 380 ;IoIsFileOriginRemote
 381 ;IoIsOperationSynchronous
 382 ;IoIsSystemThread
 383 ;IoIsValidNameGraftingBuffer
 384 IoIsWdmVersionAvailable@8
 385 IoMakeAssociatedIrp@8
 386 IoOpenDeviceInterfaceRegistryKey@12
 387 IoOpenDeviceRegistryKey@16
 388 ;IoPageRead
 389 ;IoPnPDeliverServicePowerNotification
 390 IoQueryDeviceDescription@32
 391 ;IoQueryFileDosDeviceName
 392 ;IoQueryFileInformation
 393 ;IoQueryVolumeInformation
 394 ;IoQueueThreadIrp
 395 IoQueueWorkItem@16
 396 IoRaiseHardError@12
 397 IoRaiseInformationalHardError@12
 398 IoReadDiskSignature@12
 399 ;IoReadOperationCount DATA
 400 @IoReadPartitionTable@16
 401 IoReadPartitionTableEx@8
 402 ;IoReadTransferCount DATA
 403 IoRegisterBootDriverReinitialization@12
 404 IoRegisterDeviceInterface@16
 405 IoRegisterDriverReinitialization@12
 406 ;IoRegisterFileSystem
 407 ;IoRegisterFsRegistrationChange
 408 ;IoRegisterLastChanceShutdownNotification
 409 IoRegisterPlugPlayNotification@28
 410 IoRegisterShutdownNotification@4
 411 IoReleaseCancelSpinLock@4
 412 IoReleaseRemoveLockAndWaitEx@12
 413 IoReleaseRemoveLockEx@12
 414 ;IoReleaseVpbSpinLock
 415 IoRemoveShareAccess@8
 416 IoReportDetectedDevice@32
 417 ;IoReportHalResourceUsage
 418 IoReportResourceForDetection@28
 419 IoReportResourceUsage@36
 420 IoReportTargetDeviceChange@8
 421 IoReportTargetDeviceChangeAsynchronous@16
 422 IoRequestDeviceEject@4
 423 IoReuseIrp@8
 424 IoSetCompletionRoutineEx@28
 425 IoSetDeviceInterfaceState@8
 426 ;IoSetDeviceToVerify
 427 ;IoSetFileOrigin
 428 IoSetHardErrorOrVerifyDevice@8
 429 ;IoSetInformation
 430 ;IoSetIoCompletion
 431 @IoSetPartitionInformation@16
 432 IoSetPartitionInformationEx@12
 433 IoSetShareAccess@16
 434 IoSetStartIoAttributes@12
 435 IoSetSystemPartition@4
 436 IoSetThreadHardErrorMode@4
 437 ;IoSetTopLevelIrp
 438 IoStartNextPacket@8
 439 IoStartNextPacketByKey@12
 440 IoStartPacket@16
 441 IoStartTimer@4
 442 ;IoStatisticsLock DATA
 443 IoStopTimer@4
 444 ;IoSynchronousInvalidateDeviceRelations
 445 ;IoSynchronousPageWrite
 446 ;IoThreadToProcess
 447 ;IoUnregisterFileSystem
 448 ;IoUnregisterFsRegistrationChange
 449 IoUnregisterPlugPlayNotification@4
 450 IoUnregisterShutdownNotification@4
 451 IoUpdateShareAccess@8
 452 IoVerifyPartitionTable@8
 453 ;IoVerifyVolume
 454 IoVolumeDeviceToDosName@8
 455 IoWMIAllocateInstanceIds@12
 456 IoWMIDeviceObjectToInstanceName@12
 457 IoWMIExecuteMethod@24
 458 IoWMIHandleToInstanceName@12
 459 IoWMIOpenBlock@12
 460 IoWMIQueryAllData@12
 461 IoWMIQueryAllDataMultiple@16
 462 IoWMIQuerySingleInstance@16
 463 IoWMIQuerySingleInstanceMultiple@20
 464 IoWMIRegistrationControl@8
 465 IoWMISetNotificationCallback@12
 466 IoWMISetSingleInstance@20
 467 IoWMISetSingleItem@24
 468 IoWMISuggestInstanceName@16
 469 IoWMIWriteEvent@4
 470 IoWriteErrorLogEntry@4
 471 ;IoWriteOperationCount DATA
 472 @IoWritePartitionTable@20
 473 IoWritePartitionTableEx@8
 474 ;IoWriteTransferCount DATA
 475 @IofCallDriver@8
 476 @IofCompleteRequest@8
 477 ;KdDebuggerEnabled DATA
 478 ;KdDebuggerNotPresent DATA
 479 KdDisableDebugger@0
 480 KdEnableDebugger@0
 481 ;KdEnteredDebugger DATA
 482 ;KdPollBreakIn
 483 ;KdPowerTransition
 484 ;Ke386CallBios
 485 Ke386IoSetAccessProcess@8
 486 Ke386QueryIoAccessMap@8
 487 Ke386SetIoAccessMap@8
 488 @KeAcquireInStackQueuedSpinLockAtDpcLevel@8
 489 KeAcquireInterruptSpinLock@4
 490 ;KeAcquireSpinLockAtDpcLevel
 491 KeAddSystemServiceTable@20
 492 KeAreApcsDisabled@0
 493 KeAttachProcess@4
 494 KeBugCheck@4
 495 KeBugCheckEx@20
 496 KeCancelTimer@4
 497 KeClearEvent@4
 498 ;KeConnectInterrupt
 499 ;KeDcacheFlushCount DATA
 500 KeDelayExecutionThread@12
 501 KeDeregisterBugCheckCallback@4
 502 KeDetachProcess@0
 503 ;KeDisconnectInterrupt
 504 KeEnterCriticalRegion@0
 505 ;KeEnterKernelDebugger
 506 ;KeFindConfigurationEntry
 507 ;KeFindConfigurationNextEntry
 508 ;KeFlushEntireTb
 509 KeFlushQueuedDpcs@0
 510 KeGetCurrentThread@0
 511 KeGetPreviousMode@0
 512 KeGetRecommendedSharedDataAlignment@0
 513 ;KeI386AbiosCall
 514 ;KeI386AllocateGdtSelectors
 515 ;KeI386Call16BitCStyleFunction
 516 ;KeI386Call16BitFunction
 517 ;KeI386FlatToGdtSelector
 518 ;KeI386GetLid
 519 ;KeI386MachineType DATA
 520 ;KeI386ReleaseGdtSelectors
 521 ;KeI386ReleaseLid
 522 ;KeI386SetGdtSelector
 523 ;KeIcacheFlushCount DATA
 524 KeInitializeApc@32
 525 KeInitializeDeviceQueue@4
 526 KeInitializeDpc@12
 527 KeInitializeEvent@12
 528 ;KeInitializeInterrupt
 529 ;KeInitializeMutant
 530 KeInitializeMutex@8
 531 ;KeInitializeQueue
 532 KeInitializeSemaphore@12
 533 KeInitializeSpinLock@4
 534 KeInitializeTimer@4
 535 KeInitializeTimerEx@8
 536 KeInsertByKeyDeviceQueue@12
 537 KeInsertDeviceQueue@8
 538 ;KeInsertHeadQueue
 539 ;KeInsertQueue
 540 ;KeInsertQueueApc
 541 KeInsertQueueDpc@12
 542 ;KeIsAttachedProcess
 543 ;KeIsExecutingDpc
 544 KeLeaveCriticalRegion@0
 545 ;KeLoaderBlock DATA
 546 KeNumberProcessors DATA
 547 ;KeProfileInterrupt
 548 ;KeProfileInterruptWithSource
 549 KePulseEvent@12
 550 ;KeQueryActiveProcessors
 551 KeQueryInterruptTime@0
 552 KeQueryPriorityThread@4
 553 ;KeQueryRuntimeThread
 554 KeQuerySystemTime@4
 555 KeQueryTickCount@4
 556 KeQueryTimeIncrement@0
 557 ;KeRaiseUserException
 558 KeReadStateEvent@4
 559 ;KeReadStateMutant
 560 KeReadStateMutex@4
 561 ;KeReadStateQueue
 562 KeReadStateSemaphore@4
 563 KeReadStateTimer@4
 564 KeRegisterBugCheckCallback@20
 565 KeReleaseInStackQueuedSpinLockFromDpcLevel@4
 566 KeReleaseInterruptSpinLock@8
 567 ;KeReleaseMutant
 568 KeReleaseMutex@8
 569 KeReleaseSemaphore@16
 570 ;KeReleaseSpinLockFromDpcLevel
 571 KeRemoveByKeyDeviceQueue@8
 572 ;KeRemoveByKeyDeviceQueueIfBusy
 573 KeRemoveDeviceQueue@4
 574 KeRemoveEntryDeviceQueue@8
 575 ;KeRemoveQueue
 576 KeRemoveQueueDpc@4
 577 ;KeRemoveSystemServiceTable
 578 KeResetEvent@4
 579 KeRestoreFloatingPointState@4
 580 ;KeRevertToUserAffinityThread
 581 ;KeRundownQueue
 582 KeSaveFloatingPointState@4
 583 ;KeSaveStateForHibernate
 584 ;KeServiceDescriptorTable DATA
 585 ;KeSetAffinityThread
 586 KeSetBasePriorityThread@8
 587 ;KeSetDmaIoCoherency
 588 KeSetEvent@12
 589 ;KeSetEventBoostPriority
 590 ;KeSetIdealProcessorThread
 591 KeSetImportanceDpc@8
 592 ;KeSetKernelStackSwapEnable
 593 KeSetPriorityThread@8
 594 ;KeSetProfileIrql
 595 ;KeSetSystemAffinityThread
 596 KeSetTargetProcessorDpc@8
 597 ;KeSetTimeIncrement
 598 @KeSetTimeUpdateNotifyRoutine@4
 599 KeSetTimer@16
 600 KeSetTimerEx@20
 601 ;KeStackAttachProcess
 602 KeSynchronizeExecution@12
 603 ;KeTerminateThread
 604 ;KeTickCount DATA
 605 ;KeUnstackDetachProcess
 606 ;KeUpdateRunTime
 607 ;KeUpdateSystemTime
 608 ;KeUserModeCallback
 609 KeWaitForMultipleObjects@32
 610 KeWaitForMutexObject@20
 611 KeWaitForSingleObject@20
 612 @KefAcquireSpinLockAtDpcLevel@4
 613 @KefReleaseSpinLockFromDpcLevel@4
 614 ;Kei386EoiHelper
 615 ;KiAcquireSpinLock
 616 ;KiBugCheckData DATA
 617 ;KiCoprocessorError
 618 ;KiDeliverApc
 619 ;KiDispatchInterrupt
 620 ;KiEnableTimerWatchdog DATA
 621 ;KiIpiServiceRoutine
 622 ;KiReleaseSpinLock
 623 ;KiUnexpectedInterrupt
 624 ;Kii386SpinOnSpinLock
 625 ;LdrAccessResource
 626 ;LdrEnumResources
 627 ;LdrFindResourceDirectory_U
 628 ;LdrFindResource_U
 629 LpcPortObjectType DATA
 630 ;LpcRequestPort
 631 ;LpcRequestWaitReplyPort
 632 ;LsaCallAuthenticationPackage
 633 ;LsaDeregisterLogonProcess
 634 ;LsaFreeReturnBuffer
 635 ;LsaLogonUser
 636 ;LsaLookupAuthenticationPackage
 637 ;LsaRegisterLogonProcess
 638 ;Mm64BitPhysicalAddress DATA
 639 ;MmAddPhysicalMemory
 640 ;MmAddVerifierThunks
 641 ;MmAdjustWorkingSetSize
 642 MmAdvanceMdl@8
 643 MmAllocateContiguousMemory@12
 644 MmAllocateContiguousMemorySpecifyCache@20
 645 MmAllocateMappingAddress@8
 646 MmAllocateNonCachedMemory@4
 647 MmAllocatePagesForMdl@28
 648 MmBuildMdlForNonPagedPool@4
 649 ;MmCanFileBeTruncated
 650 MmCreateMdl@12
 651 MmCreateSection@32
 652 ;MmDisableModifiedWriteOfSection
 653 MmFlushImageSection@8
 654 ;MmForceSectionClosed
 655 MmFreeContiguousMemory@4
 656 MmFreeContiguousMemorySpecifyCache@12
 657 MmFreeMappingAddress@8
 658 MmFreeNonCachedMemory@8
 659 MmFreePagesFromMdl@4
 660 MmGetPhysicalAddress@4
 661 MmGetPhysicalMemoryRanges@0
 662 MmGetSystemRoutineAddress@4
 663 MmGetVirtualForPhysical@4
 664 ;MmGrowKernelStack
 665 ;MmHighestUserAddress DATA
 666 MmIsAddressValid@4
 667 MmIsDriverVerifying@4
 668 MmIsNonPagedSystemAddressValid@4
 669 ;MmIsRecursiveIoFault
 670 MmIsThisAnNtAsSystem@0
 671 MmIsVerifierEnabled@4
 672 MmLockPagableDataSection@4
 673 MmLockPagableImageSection@4
 674 MmLockPagableSectionByHandle@4
 675 MmMapIoSpace@16
 676 MmMapLockedPages@8
 677 MmMapLockedPagesSpecifyCache@24
 678 MmMapLockedPagesWithReservedMapping@16
 679 ;MmMapMemoryDumpMdl
 680 MmMapUserAddressesToPage@12
 681 MmMapVideoDisplay@12
 682 MmMapViewInSessionSpace@12
 683 MmMapViewInSystemSpace@12
 684 ;MmMapViewOfSection
 685 MmMarkPhysicalMemoryAsBad@8
 686 MmMarkPhysicalMemoryAsGood@8
 687 MmPageEntireDriver@4
 688 ;MmPrefetchPages
 689 MmProbeAndLockPages@12
 690 MmProbeAndLockProcessPages@16
 691 ;MmProbeAndLockSelectedPages
 692 MmProtectMdlSystemAddress@8
 693 MmQuerySystemSize@0
 694 MmRemovePhysicalMemory@8
 695 MmResetDriverPaging@4
 696 MmSectionObjectType DATA
 697 MmSecureVirtualMemory@12
 698 ;MmSetAddressRangeModified
 699 ;MmSetBankedSection
 700 MmSizeOfMdl@8
 701 ;MmSystemRangeStart DATA
 702 ;MmTrimAllSystemPagableMemory
 703 MmUnlockPagableImageSection@4
 704 MmUnlockPages@4
 705 MmUnmapIoSpace@8
 706 MmUnmapLockedPages@8
 707 MmUnmapReservedMapping@12
 708 MmUnmapVideoDisplay@8
 709 MmUnmapViewInSessionSpace@4
 710 MmUnmapViewInSystemSpace@4
 711 ;MmUnmapViewOfSection
 712 MmUnsecureVirtualMemory@4
 713 ;MmUserProbeAddress DATA
 714 ;NlsAnsiCodePage DATA
 715 ;NlsLeadByteInfo
 716 ;NlsMbCodePageTag DATA
 717 ;NlsMbOemCodePageTag DATA
 718 ;NlsOemCodePage DATA
 719 ;NlsOemLeadByteInfo
 720 NtAddAtom@12
 721 NtAdjustPrivilegesToken@24
 722 NtAllocateLocallyUniqueId@4
 723 NtAllocateUuids@16
 724 NtAllocateVirtualMemory@24
 725 ;NtBuildNumber DATA
 726 NtClose@4
 727 NtConnectPort@32
 728 NtCreateEvent@20
 729 ;NtCreateFile
 730 NtCreateSection@28
 731 NtDeleteAtom@4
 732 NtDeleteFile@4
 733 NtDeviceIoControlFile@40
 734 NtDuplicateObject@28
 735 NtDuplicateToken@24
 736 NtFindAtom@12
 737 NtFreeVirtualMemory@16
 738 ;NtFsControlFile
 739 ;NtGlobalFlag DATA
 740 ;NtLockFile
 741 ;NtMakePermanentObject
 742 NtMapViewOfSection@40
 743 ;NtNotifyChangeDirectoryFile
 744 NtOpenFile@24
 745 NtOpenProcess@16
 746 NtOpenProcessToken@12
 747 ;NtOpenProcessTokenEx
 748 NtOpenThread@16
 749 NtOpenThreadToken@16
 750 ;NtOpenThreadTokenEx
 751 ;NtQueryDirectoryFile
 752 NtQueryEaFile@36
 753 NtQueryInformationAtom@20
 754 ;NtQueryInformationFile
 755 NtQueryInformationProcess@20
 756 NtQueryInformationThread@20
 757 NtQueryInformationToken@20
 758 ;NtQueryQuotaInformationFile
 759 NtQuerySecurityObject@20
 760 NtQuerySystemInformation@16
 761 ;NtQueryVolumeInformationFile
 762 NtReadFile@36
 763 NtRequestPort@8
 764 NtRequestWaitReplyPort@12
 765 NtSetEaFile@16
 766 NtSetEvent@8
 767 ;NtSetInformationFile
 768 NtSetInformationProcess@16
 769 NtSetInformationThread@16
 770 ;NtSetQuotaInformationFile
 771 NtSetSecurityObject@12
 772 ;NtSetVolumeInformationFile
 773 NtShutdownSystem@4
 774 ;NtTraceEvent
 775 ;NtUnlockFile
 776 NtVdmControl@8
 777 NtWaitForSingleObject@12
 778 NtWriteFile@36
 779 ObAssignSecurity@16
 780 ;ObCheckCreateObjectAccess
 781 ;ObCheckObjectAccess
 782 ;ObCloseHandle
 783 ObCreateObject@36
 784 ;ObCreateObjectType
 785 ;ObDereferenceObject
 786 ObDereferenceSecurityDescriptor@8
 787 ;ObFindHandleForObject
 788 ObGetObjectSecurity@12
 789 ObInsertObject@24
 790 ObLogSecurityDescriptor@12
 791 ObMakeTemporaryObject@4
 792 ObOpenObjectByName@28
 793 ObOpenObjectByPointer@28
 794 ;ObQueryNameString
 795 ObQueryObjectAuditingByHandle@8
 796 ObReferenceObjectByHandle@24
 797 ObReferenceObjectByName@32
 798 ObReferenceObjectByPointer@16
 799 ObReferenceSecurityDescriptor@8
 800 ObReleaseObjectSecurity@8
 801 ;ObSetHandleAttributes
 802 ;ObSetSecurityDescriptorInfo
 803 ;ObSetSecurityObjectByPointer
 804 @ObfDereferenceObject@4
 805 @ObfReferenceObject@4
 806 ;PfxFindPrefix
 807 ;PfxInitialize
 808 ;PfxInsertPrefix
 809 ;PfxRemovePrefix
 810 PoCallDriver@8
 811 ;PoCancelDeviceNotify
 812 ;PoQueueShutdownWorkItem
 813 PoRegisterDeviceForIdleDetection@16
 814 ;PoRegisterDeviceNotify
 815 PoRegisterSystemState@8
 816 PoRequestPowerIrp@24
 817 PoRequestShutdownEvent@4
 818 ;PoSetHiberRange
 819 PoSetPowerState@12
 820 PoSetSystemState@4
 821 ;PoShutdownBugCheck
 822 PoStartNextPowerIrp@4
 823 PoUnregisterSystemState@4
 824 ProbeForRead@12
 825 ProbeForWrite@12
 826 ;PsAssignImpersonationToken
 827 ;PsChargePoolQuota
 828 ;PsChargeProcessNonPagedPoolQuota
 829 ;PsChargeProcessPagedPoolQuota
 830 ;PsChargeProcessPoolQuota
 831 PsCreateSystemProcess@12
 832 PsCreateSystemThread@28
 833 ;PsDereferenceImpersonationToken
 834 ;PsDereferencePrimaryToken
 835 ;PsDisableImpersonation
 836 ;PsEstablishWin32Callouts
 837 ;PsGetCurrentProcess
 838 PsGetCurrentProcessId@0
 839 ;PsGetCurrentProcessSessionId
 840 ;PsGetCurrentThread
 841 PsGetCurrentThreadId@0
 842 ;PsGetCurrentThreadPreviousMode
 843 ;PsGetCurrentThreadStackBase
 844 ;PsGetCurrentThreadStackLimit
 845 ;PsGetJobLock
 846 ;PsGetJobSessionId
 847 ;PsGetJobUIRestrictionsClass
 848 ;PsGetProcessCreateTimeQuadPart
 849 ;PsGetProcessDebugPort
 850 ;PsGetProcessExitProcessCalled
 851 ;PsGetProcessExitStatus
 852 ;PsGetProcessExitTime
 853 ;PsGetProcessId
 854 ;PsGetProcessImageFileName
 855 ;PsGetProcessInheritedFromUniqueProcessId
 856 ;PsGetProcessJob
 857 ;PsGetProcessPeb
 858 ;PsGetProcessPriorityClass
 859 ;PsGetProcessSectionBaseAddress
 860 ;PsGetProcessSecurityPort
 861 ;PsGetProcessSessionId
 862 ;PsGetProcessWin32Process
 863 ;PsGetProcessWin32WindowStation
 864 ;PsGetThreadFreezeCount
 865 ;PsGetThreadHardErrorsAreDisabled
 866 ;PsGetThreadId
 867 ;PsGetThreadProcess
 868 ;PsGetThreadProcessId
 869 ;PsGetThreadSessionId
 870 ;PsGetThreadTeb
 871 ;PsGetThreadWin32Thread
 872 PsGetVersion@16
 873 ;PsImpersonateClient
 874 ;PsInitialSystemProcess DATA
 875 ;PsIsProcessBeingDebugged
 876 ;PsIsSystemThread
 877 ;PsIsThreadImpersonating
 878 ;PsIsThreadTerminating
 879 ;PsJobType DATA
 880 ;PsLookupProcessByProcessId
 881 ;PsLookupProcessThreadByCid
 882 ;PsLookupThreadByThreadId
 883 ;PsProcessType DATA
 884 ;PsReferenceImpersonationToken
 885 ;PsReferencePrimaryToken
 886 PsRemoveCreateThreadNotifyRoutine@4
 887 PsRemoveLoadImageNotifyRoutine@4
 888 ;PsRestoreImpersonation
 889 ;PsReturnPoolQuota
 890 ;PsReturnProcessNonPagedPoolQuota
 891 ;PsReturnProcessPagedPoolQuota
 892 ;PsRevertThreadToSelf
 893 ;PsRevertToSelf
 894 PsSetCreateProcessNotifyRoutine@8
 895 PsSetCreateThreadNotifyRoutine@4
 896 ;PsSetJobUIRestrictionsClass
 897 ;PsSetLegoNotifyRoutine
 898 PsSetLoadImageNotifyRoutine@4
 899 ;PsSetProcessPriorityByClass
 900 ;PsSetProcessPriorityClass
 901 ;PsSetProcessSecurityPort
 902 ;PsSetProcessWin32Process
 903 ;PsSetProcessWindowStation
 904 ;PsSetThreadHardErrorsAreDisabled
 905 ;PsSetThreadWin32Thread
 906 PsTerminateSystemThread@4
 907 ;PsThreadType DATA
 908 READ_REGISTER_BUFFER_UCHAR@12
 909 READ_REGISTER_BUFFER_ULONG@12
 910 READ_REGISTER_BUFFER_USHORT@12
 911 READ_REGISTER_UCHAR@4
 912 READ_REGISTER_ULONG@4
 913 READ_REGISTER_USHORT@4
 914 ;RtlAbsoluteToSelfRelativeSD
 915 ;RtlAddAccessAllowedAce
 916 ;RtlAddAce
 917 ;RtlAddAtomToAtomTable
 918 RtlAddRange@28
 919 ;RtlAllocateHeap
 920 ;RtlAnsiCharToUnicodeChar
 921 RtlAnsiStringToUnicodeSize@4
 922 RtlAnsiStringToUnicodeString@12
 923 ;RtlAppendAsciizToString
 924 ;RtlAppendStringToString
 925 RtlAppendUnicodeStringToString@8
 926 RtlAppendUnicodeToString@8
 927 ;RtlAreAllAccessesGranted
 928 ;RtlAreAnyAccessesGranted
 929 RtlAreBitsClear@12
 930 RtlAreBitsSet@12
 931 RtlAssert@16
 932 ;RtlCaptureContext
 933 ;RtlCaptureStackBackTrace
 934 RtlCharToInteger@12
 935 RtlCheckRegistryKey@8
 936 RtlClearAllBits@4
 937 RtlClearBit@8
 938 RtlClearBits@12
 939 RtlCompareMemory@12
 940 ;RtlCompareMemoryUlong
 941 RtlCompareString@12
 942 RtlCompareUnicodeString@12
 943 ;RtlCompressBuffer
 944 ;RtlCompressChunks
 945 RtlConvertLongToLargeInteger@4
 946 ;RtlConvertSidToUnicodeString
 947 RtlConvertUlongToLargeInteger@4
 948 ;RtlCopyLuid
 949 RtlCopyRangeList@8
 950 ;RtlCopySid
 951 RtlCopyString@8
 952 RtlCopyUnicodeString@8
 953 ;RtlCreateAcl
 954 ;RtlCreateAtomTable
 955 ;RtlCreateHeap
 956 RtlCreateRegistryKey@8
 957 RtlCreateSecurityDescriptor@8
 958 ;RtlCreateSystemVolumeInformationFolder
 959 ;RtlCreateUnicodeString
 960 ;RtlCustomCPToUnicodeN
 961 ;RtlDecompressBuffer
 962 ;RtlDecompressChunks
 963 ;RtlDecompressFragment
 964 ;RtlDelete
 965 ;RtlDeleteAce
 966 ;RtlDeleteAtomFromAtomTable
 967 ;RtlDeleteElementGenericTable
 968 ;RtlDeleteElementGenericTableAvl
 969 ;RtlDeleteNoSplay
 970 RtlDeleteOwnersRanges@8
 971 RtlDeleteRange@16
 972 RtlDeleteRegistryValue@12
 973 ;RtlDescribeChunk
 974 ;RtlDestroyAtomTable
 975 ;RtlDestroyHeap
 976 ;RtlDowncaseUnicodeString
 977 ;RtlEmptyAtomTable
 978 RtlEnlargedIntegerMultiply@8
 979 RtlEnlargedUnsignedDivide@12
 980 RtlEnlargedUnsignedMultiply@8
 981 ;RtlEnumerateGenericTable
 982 ;RtlEnumerateGenericTableAvl
 983 ;RtlEnumerateGenericTableLikeADirectory
 984 ;RtlEnumerateGenericTableWithoutSplaying
 985 ;RtlEnumerateGenericTableWithoutSplayingAvl
 986 ;RtlEqualLuid
 987 ;RtlEqualSid
 988 RtlEqualString@12
 989 RtlEqualUnicodeString@12
 990 RtlExtendedIntegerMultiply@8
 991 RtlExtendedLargeIntegerDivide@12
 992 RtlExtendedMagicDivide@12
 993 ;RtlFillMemory
 994 ;RtlFillMemoryUlong
 995 RtlFindClearBits@12
 996 RtlFindClearBitsAndSet@12
 997 RtlFindClearRuns@16
 998 RtlFindFirstRunClear@8
 999 RtlFindLastBackwardRunClear@12
1000 RtlFindLeastSignificantBit@4
1001 RtlFindLongestRunClear@8
1002 ;RtlFindMessage
1003 RtlFindMostSignificantBit@4
1004 RtlFindNextForwardRunClear@12
1005 RtlFindRange@40
1006 RtlFindSetBits@12
1007 RtlFindSetBitsAndClear@12
1008 ;RtlFindUnicodePrefix
1009 ;RtlFormatCurrentUserKeyPath
1010 RtlFreeAnsiString@4
1011 ;RtlFreeHeap
1012 ;RtlFreeOemString
1013 RtlFreeRangeList@4
1014 RtlFreeUnicodeString@4
1015 RtlGUIDFromString@8
1016 ;RtlGenerate8dot3Name
1017 ;RtlGetAce
1018 RtlGetCallersAddress@8
1019 ;RtlGetCompressionWorkSpaceSize
1020 ;RtlGetDaclSecurityDescriptor
1021 ;RtlGetDefaultCodePage
1022 ;RtlGetElementGenericTable
1023 ;RtlGetElementGenericTableAvl
1024 RtlGetFirstRange@12
1025 ;RtlGetGroupSecurityDescriptor
1026 RtlGetNextRange@12
1027 ;RtlGetNtGlobalFlags
1028 ;RtlGetOwnerSecurityDescriptor
1029 ;RtlGetSaclSecurityDescriptor
1030 ;RtlGetSetBootStatusData
1031 RtlGetVersion@4
1032 RtlHashUnicodeString@16
1033 ;RtlImageDirectoryEntryToData
1034 ;RtlImageNtHeader
1035 RtlInitAnsiString@8
1036 ;RtlInitCodePageTable
1037 RtlInitString@8
1038 RtlInitUnicodeString@8
1039 RtlInitializeBitMap@12
1040 ;RtlInitializeGenericTable
1041 ;RtlInitializeGenericTableAvl
1042 RtlInitializeRangeList@4
1043 ;RtlInitializeSid
1044 ;RtlInitializeUnicodePrefix
1045 ;RtlInsertElementGenericTable
1046 ;RtlInsertElementGenericTableAvl
1047 ;RtlInsertElementGenericTableFull
1048 ;RtlInsertElementGenericTableFullAvl
1049 ;RtlInsertUnicodePrefix
1050 RtlInt64ToUnicodeString@12
1051 ;RtlIntegerToChar
1052 ;RtlIntegerToUnicode
1053 RtlIntegerToUnicodeString@12
1054 RtlInvertRangeList@8
1055 ;RtlIpv4AddressToStringA
1056 ;RtlIpv4AddressToStringW
1057 ;RtlIpv4StringToAddressA
1058 ;RtlIpv4StringToAddressW
1059 ;RtlIpv6AddressToStringA
1060 ;RtlIpv6AddressToStringW
1061 ;RtlIpv6StringToAddressA
1062 ;RtlIpv6StringToAddressW
1063 ;RtlIsGenericTableEmpty
1064 ;RtlIsGenericTableEmptyAvl
1065 ;RtlIsNameLegalDOS8Dot3
1066 RtlIsRangeAvailable@32
1067 ;RtlIsValidOemCharacter
1068 RtlLargeIntegerAdd@8
1069 RtlLargeIntegerArithmeticShift@8
1070 RtlLargeIntegerDivide@12
1071 RtlLargeIntegerNegate@4
1072 RtlLargeIntegerShiftLeft@8
1073 RtlLargeIntegerShiftRight@8
1074 RtlLargeIntegerSubtract@8
1075 ;RtlLengthRequiredSid
1076 RtlLengthSecurityDescriptor@4
1077 ;RtlLengthSid
1078 ;RtlLockBootStatusData
1079 ;RtlLookupAtomInAtomTable
1080 ;RtlLookupElementGenericTable
1081 ;RtlLookupElementGenericTableAvl
1082 ;RtlLookupElementGenericTableFull
1083 ;RtlLookupElementGenericTableFullAvl
1084 RtlMapGenericMask@8
1085 ;RtlMapSecurityErrorToNtStatus
1086 RtlMergeRangeLists@16
1087 ;RtlMoveMemory
1088 ;RtlMultiByteToUnicodeN
1089 ;RtlMultiByteToUnicodeSize
1090 ;RtlNextUnicodePrefix
1091 ;RtlNtStatusToDosError
1092 ;RtlNtStatusToDosErrorNoTeb
1093 ;RtlNumberGenericTableElements
1094 ;RtlNumberGenericTableElementsAvl
1095 RtlNumberOfClearBits@4
1096 RtlNumberOfSetBits@4
1097 ;RtlOemStringToCountedUnicodeString
1098 ;RtlOemStringToUnicodeSize
1099 ;RtlOemStringToUnicodeString
1100 ;RtlOemToUnicodeN
1101 ;RtlPinAtomInAtomTable
1102 @RtlPrefetchMemoryNonTemporal@8
1103 ;RtlPrefixString
1104 RtlPrefixUnicodeString@12
1105 ;RtlQueryAtomInAtomTable
1106 RtlQueryRegistryValues@20
1107 ;RtlQueryTimeZoneInformation
1108 ;RtlRaiseException
1109 ;RtlRandom
1110 ;RtlRandomEx
1111 ;RtlRealPredecessor
1112 ;RtlRealSuccessor
1113 ;RtlRemoveUnicodePrefix
1114 ;RtlReserveChunk
1115 ;RtlSecondsSince1970ToTime
1116 ;RtlSecondsSince1980ToTime
1117 ;RtlSelfRelativeToAbsoluteSD
1118 ;RtlSelfRelativeToAbsoluteSD2
1119 RtlSetAllBits@4
1120 RtlSetBit@8
1121 RtlSetBits@12
1122 RtlSetDaclSecurityDescriptor@16
1123 ;RtlSetGroupSecurityDescriptor
1124 ;RtlSetOwnerSecurityDescriptor
1125 ;RtlSetSaclSecurityDescriptor
1126 ;RtlSetTimeZoneInformation
1127 ;RtlSizeHeap
1128 ;RtlSplay
1129 RtlStringFromGUID@8
1130 ;RtlSubAuthorityCountSid
1131 ;RtlSubAuthoritySid
1132 ;RtlSubtreePredecessor
1133 ;RtlSubtreeSuccessor
1134 RtlTestBit@8
1135 RtlTimeFieldsToTime@8
1136 ;RtlTimeToElapsedTimeFields
1137 ;RtlTimeToSecondsSince1970
1138 ;RtlTimeToSecondsSince1980
1139 RtlTimeToTimeFields@8
1140 ;RtlTraceDatabaseAdd
1141 ;RtlTraceDatabaseCreate
1142 ;RtlTraceDatabaseDestroy
1143 ;RtlTraceDatabaseEnumerate
1144 ;RtlTraceDatabaseFind
1145 ;RtlTraceDatabaseLock
1146 ;RtlTraceDatabaseUnlock
1147 ;RtlTraceDatabaseValidate
1148 @RtlUlongByteSwap@4
1149 @RtlUlonglongByteSwap@4
1150 RtlUnicodeStringToAnsiSize@4
1151 RtlUnicodeStringToAnsiString@12
1152 ;RtlUnicodeStringToCountedOemString
1153 RtlUnicodeStringToInteger@12
1154 ;RtlUnicodeStringToOemSize
1155 ;RtlUnicodeStringToOemString
1156 ;RtlUnicodeToCustomCPN
1157 ;RtlUnicodeToMultiByteN
1158 ;RtlUnicodeToMultiByteSize
1159 ;RtlUnicodeToOemN
1160 ;RtlUnlockBootStatusData
1161 ;RtlUnwind
1162 RtlUpcaseUnicodeChar@4
1163 RtlUpcaseUnicodeString@12
1164 ;RtlUpcaseUnicodeStringToAnsiString
1165 ;RtlUpcaseUnicodeStringToCountedOemString
1166 ;RtlUpcaseUnicodeStringToOemString
1167 ;RtlUpcaseUnicodeToCustomCPN
1168 ;RtlUpcaseUnicodeToMultiByteN
1169 ;RtlUpcaseUnicodeToOemN
1170 RtlUpperChar@4
1171 RtlUpperString@8
1172 RtlUshortByteSwap@4
1173 RtlValidRelativeSecurityDescriptor@12
1174 RtlValidSecurityDescriptor@4
1175 ;RtlValidSid
1176 RtlVerifyVersionInfo@12
1177 RtlVolumeDeviceToDosName@8
1178 RtlWalkFrameChain@12
1179 RtlWriteRegistryValue@24
1180 ;RtlZeroHeap
1181 ;RtlZeroMemory
1182 ;RtlxAnsiStringToUnicodeSize
1183 ;RtlxOemStringToUnicodeSize
1184 RtlxUnicodeStringToAnsiSize@4
1185 ;RtlxUnicodeStringToOemSize
1186 SeAccessCheck@40
1187 ;SeAppendPrivileges
1188 SeAssignSecurity@28
1189 SeAssignSecurityEx@36
1190 ;SeAuditHardLinkCreation
1191 ;SeAuditingFileEvents
1192 ;SeAuditingFileOrGlobalEvents
1193 ;SeAuditingHardLinkEvents
1194 ;SeCaptureSecurityDescriptor
1195 ;SeCaptureSubjectContext
1196 ;SeCloseObjectAuditAlarm
1197 ;SeCreateAccessState
1198 ;SeCreateClientSecurity
1199 ;SeCreateClientSecurityFromSubjectContext
1200 SeDeassignSecurity@4
1201 ;SeDeleteAccessState
1202 ;SeDeleteObjectAuditAlarm
1203 ;SeExports DATA
1204 ;SeFilterToken
1205 ;SeFreePrivileges
1206 ;SeImpersonateClient
1207 ;SeImpersonateClientEx
1208 ;SeLockSubjectContext
1209 ;SeMarkLogonSessionForTerminationNotification
1210 ;SeOpenObjectAuditAlarm
1211 ;SeOpenObjectForDeleteAuditAlarm
1212 ;SePrivilegeCheck
1213 ;SePrivilegeObjectAuditAlarm
1214 ;SePublicDefaultDacl DATA
1215 ;SeQueryAuthenticationIdToken
1216 ;SeQueryInformationToken
1217 ;SeQuerySecurityDescriptorInfo
1218 ;SeQuerySessionIdToken
1219 ;SeRegisterLogonSessionTerminatedRoutine
1220 ;SeReleaseSecurityDescriptor
1221 ;SeReleaseSubjectContext
1222 ;SeSetAccessStateGenericMapping
1223 ;SeSetSecurityDescriptorInfo
1224 ;SeSetSecurityDescriptorInfoEx
1225 SeSinglePrivilegeCheck@8
1226 ;SeSystemDefaultDacl DATA
1227 ;SeTokenImpersonationLevel
1228 ;SeTokenIsAdmin
1229 ;SeTokenIsRestricted
1230 SeTokenObjectType DATA
1231 ;SeTokenType
1232 ;SeUnlockSubjectContext
1233 ;SeUnregisterLogonSessionTerminatedRoutine
1234 SeValidSecurityDescriptor@8
1235 VerSetConditionMask@16
1236 ;VfFailDeviceNode
1237 ;VfFailDriver
1238 ;VfFailSystemBIOS
1239 ;VfIsVerificationEnabled
1240 WRITE_REGISTER_BUFFER_UCHAR@12
1241 WRITE_REGISTER_BUFFER_ULONG@12
1242 WRITE_REGISTER_BUFFER_USHORT@12
1243 WRITE_REGISTER_UCHAR@8
1244 WRITE_REGISTER_ULONG@8
1245 WRITE_REGISTER_USHORT@8
1246 ;WmiFlushTrace
1247 ;WmiGetClock
1248 ;WmiQueryTrace
1249 WmiQueryTraceInformation@20
1250 ;WmiStartTrace
1251 ;WmiStopTrace
1252 WmiTraceMessage
1253 ;WmiTraceMessageVa
1254 ;WmiUpdateTrace
1255 ;XIPDispatch
1256 ZwAccessCheckAndAuditAlarm@44
1257 ;ZwAddBootEntry
1258 ZwAdjustPrivilegesToken@24
1259 ZwAlertThread@4
1260 ZwAllocateVirtualMemory@24
1261 ZwAssignProcessToJobObject@8
1262 ZwCancelIoFile@8
1263 ZwCancelTimer@8
1264 ;ZwClearEvent
1265 ZwClose@4
1266 ZwCloseObjectAuditAlarm@12
1267 ZwConnectPort@32
1268 ZwCreateDirectoryObject@12
1269 ZwCreateEvent@20
1270 ZwCreateFile@44
1271 ZwCreateJobObject@12
1272 ZwCreateKey@28
1273 ZwCreateSection@28
1274 ZwCreateSymbolicLinkObject@16
1275 ZwCreateTimer@16
1276 ;ZwDeleteBootEntry
1277 ZwDeleteFile@4
1278 ZwDeleteKey@4
1279 ZwDeleteValueKey@8
1280 ZwDeviceIoControlFile@40
1281 ZwDisplayString@4
1282 ZwDuplicateObject@28
1283 ZwDuplicateToken@24
1284 ;ZwEnumerateBootEntries
1285 ZwEnumerateKey@24
1286 ZwEnumerateValueKey@24
1287 ZwFlushInstructionCache@12
1288 ZwFlushKey@4
1289 ZwFlushVirtualMemory@16
1290 ZwFreeVirtualMemory@16
1291 ;ZwFsControlFile
1292 ZwInitiatePowerAction@16
1293 ;ZwIsProcessInJob
1294 ZwLoadDriver@4
1295 ZwLoadKey@8
1296 ZwMakeTemporaryObject@4
1297 ZwMapViewOfSection@40
1298 ZwNotifyChangeKey@40
1299 ZwOpenDirectoryObject@12
1300 ;ZwOpenEvent
1301 ZwOpenFile@24
1302 ZwOpenJobObject@12
1303 ZwOpenKey@12
1304 ;ZwOpenProcess
1305 ZwOpenProcessToken@12
1306 ;ZwOpenProcessTokenEx
1307 ZwOpenSection@12
1308 ZwOpenSymbolicLinkObject@12
1309 ZwOpenThread@16
1310 ZwOpenThreadToken@16
1311 ;ZwOpenThreadTokenEx
1312 ZwOpenTimer@12
1313 ZwPowerInformation@20
1314 ;ZwPulseEvent
1315 ;ZwQueryBootEntryOrder
1316 ;ZwQueryBootOptions
1317 ZwQueryDefaultLocale@8
1318 ZwQueryDefaultUILanguage@4
1319 ZwQueryDirectoryFile@44
1320 ZwQueryDirectoryObject@28
1321 ZwQueryEaFile@36
1322 ZwQueryFullAttributesFile@8
1323 ZwQueryInformationFile@20
1324 ZwQueryInformationJobObject@20
1325 ZwQueryInformationProcess@20
1326 ZwQueryInformationThread@20
1327 ZwQueryInformationToken@20
1328 ZwQueryInstallUILanguage@4
1329 ZwQueryKey@20
1330 ZwQueryObject@20
1331 ZwQuerySection@20
1332 ZwQuerySecurityObject@20
1333 ZwQuerySymbolicLinkObject@12
1334 ZwQuerySystemInformation@16
1335 ZwQueryValueKey@24
1336 ZwQueryVolumeInformationFile@20
1337 ZwReadFile@36
1338 ZwReplaceKey@12
1339 ZwRequestWaitReplyPort@12
1340 ;ZwResetEvent
1341 ZwRestoreKey@12
1342 ZwSaveKey@8
1343 ;ZwSaveKeyEx
1344 ;ZwSetBootEntryOrder
1345 ;ZwSetBootOptions
1346 ZwSetDefaultLocale@8
1347 ZwSetDefaultUILanguage@4
1348 ZwSetEaFile@16
1349 ZwSetEvent@8
1350 ZwSetInformationFile@20
1351 ZwSetInformationJobObject@16
1352 ZwSetInformationObject@16
1353 ZwSetInformationProcess@16
1354 ZwSetInformationThread@16
1355 ZwSetSecurityObject@12
1356 ZwSetSystemInformation@12
1357 ZwSetSystemTime@8
1358 ZwSetTimer@28
1359 ZwSetValueKey@24
1360 ;ZwSetVolumeInformationFile
1361 ZwTerminateJobObject@8
1362 ZwTerminateProcess@8
1363 ;ZwTranslateFilePath
1364 ZwUnloadDriver@4
1365 ZwUnloadKey@4
1366 ZwUnmapViewOfSection@8
1367 ;ZwWaitForMultipleObjects
1368 ZwWaitForSingleObject@12
1369 ZwWriteFile@36
1370 ZwYieldExecution@0
1371 ;_CIcos
1372 ;_CIsin
1373 ;_CIsqrt
1374 ;_abnormal_termination
1375 ;_alldiv
1376 ;_alldvrm
1377 ;_allmul
1378 ;_alloca_probe
1379 ;_allrem
1380 ;_allshl
1381 ;_allshr
1382 ;_aulldiv
1383 ;_aulldvrm
1384 ;_aullrem
1385 ;_aullshr
1386 ;_except_handler2
1387 ;_except_handler3
1388 ;_global_unwind2
1389 ;_itoa
1390 ;_itow
1391 ;_local_unwind2
1392 ;_purecall
1393 _snprintf
1394 _snwprintf
1395 _stricmp
1396 _strlwr
1397 _strnicmp
1398 _strnset
1399 _strrev
1400 _strset
1401 _strupr
1402 _vsnprintf
1403 _vsnwprintf
1404 _wcsicmp@8
1405 _wcslwr@4
1406 _wcsnicmp@12
1407 _wcsnset@12
1408 _wcsrev@4
1409 _wcsupr@4
1410 ;atoi
1411 ;atol
1412 ;isdigit
1413 ;islower
1414 ;isprint
1415 ;isspace
1416 ;isupper
1417 ;isxdigit
1418 ;mbstowcs
1419 ;mbtowc
1420 memchr
1421 memcpy
1422 memmove
1423 memset
1424 ;qsort
1425 ;rand
1426 sprintf
1427 ;srand
1428 strcat
1429 strchr
1430 strcmp
1431 strcpy
1432 strlen
1433 strncat
1434 strncmp
1435 strncpy
1436 strrchr
1437 strspn
1438 strstr
1439 swprintf
1440 ;tolower
1441 ;toupper
1442 ;towlower
1443 ;towupper
1444 ;vDbgPrintEx
1445 ;vDbgPrintExWithPrefix
1446 ;vsprintf
1447 wcscat
1448 wcschr
1449 wcscmp
1450 wcscpy
1451 wcscspn
1452 wcslen
1453 wcsncat
1454 wcsncmp
1455 wcsncpy
1456 wcsrchr
1457 wcsspn
1458 wcsstr
1459 ;wcstombs
1460 ;wctomb