• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1;
2; Definition file of ntoskrnl.exe
3; Automatic generated by gendef
4; written by Kai Tietz 2008
5;
6LIBRARY "ntoskrnl.exe"
7EXPORTS
8@ExAcquireFastMutexUnsafe@4
9@ExAcquireRundownProtection@4
10@ExAcquireRundownProtectionCacheAware@4
11@ExAcquireRundownProtectionCacheAwareEx@4
12@ExAcquireRundownProtectionEx@4
13@ExEnterCriticalRegionAndAcquireFastMutexUnsafe@4
14@ExInitializeRundownProtection@4
15@ExInterlockedAddLargeStatistic@8
16@ExInterlockedCompareExchange64@16
17@ExInterlockedFlushSList@4
18@ExInterlockedPopEntrySList@8
19@ExInterlockedPushEntrySList@12
20@ExReInitializeRundownProtection@4
21@ExReInitializeRundownProtectionCacheAware@4
22@ExReleaseFastMutexUnsafe@4
23@ExReleaseFastMutexUnsafeAndLeaveCriticalRegion@4
24@ExReleaseResourceAndLeaveCriticalRegion@4
25@ExReleaseResourceAndLeavePriorityRegion@4
26@ExReleaseResourceLite@4
27@ExReleaseRundownProtection@4
28@ExReleaseRundownProtectionCacheAware@4
29@ExReleaseRundownProtectionCacheAwareEx@8
30@ExReleaseRundownProtectionEx@8
31@ExRundownCompleted@4
32@ExRundownCompletedCacheAware@4
33@ExWaitForRundownProtectionRelease@4
34@ExWaitForRundownProtectionReleaseCacheAware@4
35@ExfAcquirePushLockExclusive@4
36@ExfAcquirePushLockShared@4
37@ExfInterlockedAddUlong@12
38@ExfInterlockedCompareExchange64@12
39@ExfInterlockedInsertHeadList@12
40@ExfInterlockedInsertTailList@12
41@ExfInterlockedPopEntryList@8
42@ExfInterlockedPushEntryList@12
43@ExfInterlockedRemoveHeadList@8
44@ExfReleasePushLock@8
45@ExfReleasePushLockExclusive@4
46@ExfReleasePushLockShared@4
47@ExfTryAcquirePushLockShared@4
48@ExfTryToWakePushLock@4
49@ExfUnblockPushLock@8
50@Exfi386InterlockedDecrementLong@4
51@Exfi386InterlockedExchangeUlong@8
52@Exfi386InterlockedIncrementLong@4
53@ExiAcquireFastMutex@4
54@ExiReleaseFastMutex@4
55@ExiTryToAcquireFastMutex@4
56@HalExamineMBR@16
57@InterlockedCompareExchange@12
58@InterlockedDecrement@4
59@InterlockedExchange@8
60@InterlockedExchangeAdd@8
61@InterlockedIncrement@4
62@InterlockedPopEntrySList@4
63@InterlockedPushEntrySList@8
64@IoGetPagingIoPriority@4
65@IoReadPartitionTable@16
66@IoSetPartitionInformation@16
67@IoWritePartitionTable@20
68@IofCallDriver@8
69@IofCompleteRequest@8
70@KeAcquireGuardedMutex@4
71@KeAcquireGuardedMutexUnsafe@4
72@KeAcquireInStackQueuedSpinLockAtDpcLevel@8
73@KeAcquireInStackQueuedSpinLockForDpc@8
74@KeAcquireSpinLockForDpc@8
75@KeInitializeGuardedMutex@4
76@KeInvalidateRangeAllCaches@8
77@KeReleaseGuardedMutex@4
78@KeReleaseGuardedMutexUnsafe@4
79@KeReleaseInStackQueuedSpinLockForDpc@4
80@KeReleaseInStackQueuedSpinLockFromDpcLevel@4
81@KeReleaseSpinLockForDpc@8
82@KeTestSpinLock@4
83@KeTryToAcquireGuardedMutex@4
84@KeTryToAcquireSpinLockAtDpcLevel@4
85;KeUpdateRunTime
86@KefAcquireSpinLockAtDpcLevel@4
87@KefReleaseSpinLockFromDpcLevel@4
88@KiAcquireSpinLock@8
89;KiCheckForSListAddress
90@KiReleaseSpinLock@4
91@ObfDereferenceObject@4
92;ObfDereferenceObjectWithTag
93@ObfReferenceObject@4
94;ObfReferenceObjectWithTag
95@RtlPrefetchMemoryNonTemporal@8
96@RtlUlongByteSwap@4
97@RtlUlonglongByteSwap@8
98@RtlUshortByteSwap@4
99;SeAuditingWithTokenForSubcategory
100;WmiGetClock
101;Kei386EoiHelper
102AlpcGetHeaderSize@4
103AlpcGetMessageAttribute@8
104AlpcInitializeMessageAttribute@16
105CcCanIWrite@16
106CcCoherencyFlushAndPurgeCache@20
107CcCopyRead@24
108CcCopyWrite@20
109CcCopyWriteWontFlush@12
110CcDeferWrite@24
111CcFastCopyRead@24
112CcFastCopyWrite@16
113CcFastMdlReadWait DATA
114CcFlushCache@16
115CcGetDirtyPages@16
116CcGetFileObjectFromBcb@4
117CcGetFileObjectFromSectionPtrs@4
118CcGetFileObjectFromSectionPtrsRef@4
119CcGetFlushedValidData@8
120CcGetLsnForFileObject@8
121CcInitializeCacheMap@20
122CcIsThereDirtyData@4
123CcIsThereDirtyDataEx@8
124CcMapData@24
125CcMdlRead@20
126CcMdlReadComplete@8
127CcMdlWriteAbort@8
128CcMdlWriteComplete@12
129CcPinMappedData@20
130CcPinRead@24
131CcPrepareMdlWrite@20
132CcPreparePinWrite@28
133CcPurgeCacheSection@16
134CcRemapBcb@4
135CcRepinBcb@4
136CcScheduleReadAhead@12
137CcSetAdditionalCacheAttributes@12
138CcSetBcbOwnerPointer@8
139CcSetDirtyPageThreshold@8
140CcSetDirtyPinnedData@8
141CcSetFileSizes@8
142CcSetFileSizesEx@8
143CcSetLogHandleForFile@12
144CcSetParallelFlushFile@8
145CcSetReadAheadGranularity@8
146CcTestControl@12
147CcUninitializeCacheMap@12
148CcUnpinData@4
149CcUnpinDataForThread@8
150CcUnpinRepinnedBcb@12
151CcWaitForCurrentLazyWriterActivity@0
152CcZeroData@16
153CmCallbackGetKeyObjectID@16
154CmGetBoundTransaction@8
155CmGetCallbackVersion@8
156CmKeyObjectType DATA
157CmRegisterCallback@12
158CmRegisterCallbackEx@24
159CmSetCallbackObjectContext@16
160CmUnRegisterCallback@8
161DbgBreakPoint@0
162DbgBreakPointWithStatus@4
163DbgCommandString@8
164DbgLoadImageSymbols@12
165DbgPrint
166DbgPrintEx
167DbgPrintReturnControlC
168DbgPrompt@12
169DbgQueryDebugFilterState@8
170DbgSetDebugFilterState@12
171DbgSetDebugPrintCallback@8
172DbgkLkmdRegisterCallback@12
173DbgkLkmdUnregisterCallback@4
174EmClientQueryRuleState@8
175EmClientRuleDeregisterNotification@4
176EmClientRuleEvaluate@16
177EmClientRuleRegisterNotification@16
178EmProviderDeregister@4
179EmProviderDeregisterEntry@4
180EmProviderRegister@24
181EmProviderRegisterEntry@16
182EmpProviderRegister@24
183EtwActivityIdControl@8
184EtwEnableTrace@44
185EtwEventEnabled@12
186EtwProviderEnabled@20
187EtwRegister@16
188EtwRegisterClassicProvider@20
189EtwSendTraceBuffer@24
190EtwUnregister@8
191EtwWrite@24
192EtwWriteEndScenario@24
193EtwWriteEx@40
194EtwWriteStartScenario@24
195EtwWriteString@28
196EtwWriteTransfer@28
197ExAcquireCacheAwarePushLockExclusive@4
198ExAcquireResourceExclusiveLite@8
199ExAcquireResourceSharedLite@8
200ExAcquireSharedStarveExclusive@8
201ExAcquireSharedWaitForExclusive@8
202ExAcquireSpinLockExclusive@4
203ExAcquireSpinLockExclusiveAtDpcLevel@4
204ExAcquireSpinLockShared@4
205ExAcquireSpinLockSharedAtDpcLevel@4
206ExAllocateCacheAwarePushLock@4
207ExAllocateCacheAwareRundownProtection@8
208ExAllocateFromPagedLookasideList@4
209ExAllocatePool@8
210ExAllocatePoolWithQuota@8
211ExAllocatePoolWithQuotaTag@12
212ExAllocatePoolWithTag@12
213ExAllocatePoolWithTagPriority@16
214ExConvertExclusiveToSharedLite@4
215ExCreateCallback@16
216ExDeleteLookasideListEx@4
217ExDeleteNPagedLookasideList@4
218ExDeletePagedLookasideList@4
219ExDeleteResourceLite@4
220ExDesktopObjectType DATA
221ExDisableResourceBoostLite@4
222ExEnterCriticalRegionAndAcquireResourceExclusive@4
223ExEnterCriticalRegionAndAcquireResourceShared@4
224ExEnterCriticalRegionAndAcquireSharedWaitForExclusive@4
225ExEnterPriorityRegionAndAcquireResourceExclusive@4
226ExEnterPriorityRegionAndAcquireResourceShared@4
227ExEnumHandleTable@16
228ExEventObjectType DATA
229ExExtendZone@12
230ExFetchLicenseData@12
231ExFlushLookasideListEx@4
232ExFreeCacheAwarePushLock@4
233ExFreeCacheAwareRundownProtection@4
234ExFreePool@4
235ExFreePoolWithTag@8
236ExFreeToPagedLookasideList@8
237ExGetCurrentProcessorCounts@12
238ExGetCurrentProcessorCpuUsage@4
239ExGetExclusiveWaiterCount@4
240ExGetLicenseTamperState@4
241ExGetPreviousMode@0
242ExGetSharedWaiterCount@4
243ExInitializeLookasideListEx@32
244ExInitializeNPagedLookasideList@28
245ExInitializePagedLookasideList@28
246ExInitializePushLock@4
247ExInitializeResourceLite@4
248ExInitializeRundownProtectionCacheAware@8
249ExInitializeZone@16
250ExInterlockedAddLargeInteger@16
251ExInterlockedAddUlong@12
252ExInterlockedDecrementLong@8
253ExInterlockedExchangeUlong@12
254ExInterlockedExtendZone@16
255@ExInterlockedIncrementLong@8
256ExInterlockedInsertHeadList@12
257ExInterlockedInsertTailList@12
258ExInterlockedPopEntryList@8
259ExInterlockedPushEntryList@12
260ExInterlockedRemoveHeadList@8
261ExIsProcessorFeaturePresent@4
262ExIsResourceAcquiredExclusiveLite@4
263ExIsResourceAcquiredSharedLite@4
264ExLocalTimeToSystemTime@8
265ExNotifyCallback@12
266ExQueryAttributeInformation@16
267ExQueryPoolBlockSize@8
268ExQueueWorkItem@8
269ExRaiseAccessViolation@0
270ExRaiseDatatypeMisalignment@0
271ExRaiseException@24
272ExRaiseHardError@24
273ExRaiseStatus@4
274ExRegisterAttributeInformationCallback@4
275ExRegisterCallback@12
276ExRegisterExtension@12
277ExReinitializeResourceLite@4
278ExReleaseCacheAwarePushLockExclusive@4
279ExReleaseResourceForThreadLite@8
280ExReleaseSpinLockExclusive@8
281ExReleaseSpinLockExclusiveFromDpcLevel@4
282ExReleaseSpinLockShared@8
283ExReleaseSpinLockSharedFromDpcLevel@4
284ExSemaphoreObjectType DATA
285ExSetLicenseTamperState@4
286ExSetResourceOwnerPointer@8
287ExSetResourceOwnerPointerEx@12
288ExSetTimerResolution@8
289ExSizeOfRundownProtectionCacheAware@0
290ExSystemExceptionFilter@0
291ExSystemTimeToLocalTime@8
292ExTryConvertSharedSpinLockExclusive@4
293ExUnregisterAttributeInformationCallback@4
294ExUnregisterCallback@4
295ExUnregisterExtension@4
296ExUpdateLicenseData@8
297ExUuidCreate@4
298ExVerifySuite@4
299ExWindowStationObjectType DATA
300Exi386InterlockedDecrementLong@4
301Exi386InterlockedExchangeUlong@8
302Exi386InterlockedIncrementLong@4
303FirstEntrySList@4
304FsRtlAcknowledgeEcp@4
305FsRtlAcquireFileExclusive@4
306FsRtlAddBaseMcbEntry@28
307FsRtlAddBaseMcbEntryEx@28
308FsRtlAddLargeMcbEntry@28
309FsRtlAddMcbEntry@16
310FsRtlAddToTunnelCache@32
311FsRtlAllocateExtraCreateParameter@24
312FsRtlAllocateExtraCreateParameterFromLookasideList@24
313FsRtlAllocateExtraCreateParameterList@8
314FsRtlAllocateFileLock@8
315FsRtlAllocatePool@8
316FsRtlAllocatePoolWithQuota@8
317FsRtlAllocatePoolWithQuotaTag@12
318FsRtlAllocatePoolWithTag@12
319FsRtlAllocateResource@0
320FsRtlAreNamesEqual@16
321FsRtlAreThereCurrentOrInProgressFileLocks@4
322FsRtlAreVolumeStartupApplicationsComplete@0
323FsRtlBalanceReads@4
324FsRtlCancellableWaitForMultipleObjects@24
325FsRtlCancellableWaitForSingleObject@12
326FsRtlChangeBackingFileObject@16
327FsRtlCheckLockForReadAccess@8
328FsRtlCheckLockForWriteAccess@8
329FsRtlCheckOplock@20
330FsRtlCheckOplockEx@24
331FsRtlCopyRead@32
332FsRtlCopyWrite@32
333FsRtlCreateSectionForDataScan@40
334FsRtlCurrentBatchOplock@4
335FsRtlCurrentOplock@4
336FsRtlCurrentOplockH@4
337FsRtlDeleteExtraCreateParameterLookasideList@8
338FsRtlDeleteKeyFromTunnelCache@12
339FsRtlDeleteTunnelCache@4
340FsRtlDeregisterUncProvider@4
341FsRtlDissectDbcs@16
342FsRtlDissectName@16
343FsRtlDoesDbcsContainWildCards@4
344FsRtlDoesNameContainWildCards@4
345FsRtlFastCheckLockForRead@24
346FsRtlFastCheckLockForWrite@24
347FsRtlFastUnlockAll@16
348FsRtlFastUnlockAllByKey@20
349FsRtlFastUnlockSingle@32
350FsRtlFindExtraCreateParameter@16
351FsRtlFindInTunnelCache@32
352FsRtlFreeExtraCreateParameter@4
353FsRtlFreeExtraCreateParameterList@4
354FsRtlFreeFileLock@4
355FsRtlGetEcpListFromIrp@8
356FsRtlGetFileSize@8
357FsRtlGetNextBaseMcbEntry@20
358FsRtlGetNextExtraCreateParameter@20
359FsRtlGetNextFileLock@8
360FsRtlGetNextLargeMcbEntry@20
361FsRtlGetNextMcbEntry@20
362FsRtlGetVirtualDiskNestingLevel@12
363FsRtlIncrementCcFastMdlReadWait@0
364FsRtlIncrementCcFastReadNoWait@0
365FsRtlIncrementCcFastReadNotPossible@0
366FsRtlIncrementCcFastReadResourceMiss@0
367FsRtlIncrementCcFastReadWait@0
368FsRtlInitExtraCreateParameterLookasideList@16
369FsRtlInitializeBaseMcb@8
370FsRtlInitializeBaseMcbEx@12
371FsRtlInitializeExtraCreateParameter@24
372FsRtlInitializeExtraCreateParameterList@4
373FsRtlInitializeFileLock@12
374FsRtlInitializeLargeMcb@8
375FsRtlInitializeMcb@8
376FsRtlInitializeOplock@4
377FsRtlInitializeTunnelCache@4
378FsRtlInsertExtraCreateParameter@8
379FsRtlInsertPerFileContext@8
380FsRtlInsertPerFileObjectContext@8
381FsRtlInsertPerStreamContext@8
382FsRtlIsDbcsInExpression@8
383FsRtlIsEcpAcknowledged@4
384FsRtlIsEcpFromUserMode@4
385FsRtlIsFatDbcsLegal@20
386FsRtlIsHpfsDbcsLegal@20
387FsRtlIsNameInExpression@16
388FsRtlIsNtstatusExpected@4
389FsRtlIsPagingFile@4
390FsRtlIsTotalDeviceFailure@4
391FsRtlLegalAnsiCharacterArray DATA
392FsRtlLogCcFlushError@20
393FsRtlLookupBaseMcbEntry@32
394FsRtlLookupLargeMcbEntry@32
395FsRtlLookupLastBaseMcbEntry@12
396FsRtlLookupLastBaseMcbEntryAndIndex@16
397FsRtlLookupLastLargeMcbEntry@12
398FsRtlLookupLastLargeMcbEntryAndIndex@16
399FsRtlLookupLastMcbEntry@12
400FsRtlLookupMcbEntry@20
401FsRtlLookupPerFileContext@12
402FsRtlLookupPerFileObjectContext@12
403FsRtlLookupPerStreamContextInternal@12
404FsRtlMdlRead@24
405FsRtlMdlReadComplete@8
406FsRtlMdlReadCompleteDev@12
407FsRtlMdlReadDev@28
408FsRtlMdlWriteComplete@12
409FsRtlMdlWriteCompleteDev@16
410FsRtlMupGetProviderIdFromName@8
411FsRtlMupGetProviderInfoFromFileObject@16
412FsRtlNormalizeNtstatus@8
413FsRtlNotifyChangeDirectory@28
414FsRtlNotifyCleanup@12
415FsRtlNotifyCleanupAll@8
416FsRtlNotifyFilterChangeDirectory@44
417FsRtlNotifyFilterReportChange@40
418FsRtlNotifyFullChangeDirectory@40
419FsRtlNotifyFullReportChange@36
420FsRtlNotifyInitializeSync@4
421FsRtlNotifyReportChange@20
422FsRtlNotifyUninitializeSync@4
423FsRtlNotifyVolumeEvent@8
424FsRtlNotifyVolumeEventEx@12
425FsRtlNumberOfRunsInBaseMcb@4
426FsRtlNumberOfRunsInLargeMcb@4
427FsRtlNumberOfRunsInMcb@4
428FsRtlOplockBreakH@24
429FsRtlOplockBreakToNone@24
430FsRtlOplockBreakToNoneEx@24
431FsRtlOplockFsctrl@12
432FsRtlOplockFsctrlEx@16
433FsRtlOplockIsFastIoPossible@4
434FsRtlOplockIsSharedRequest@4
435FsRtlOplockKeysEqual@8
436FsRtlPostPagingFileStackOverflow@12
437FsRtlPostStackOverflow@12
438FsRtlPrepareMdlWrite@24
439FsRtlPrepareMdlWriteDev@28
440FsRtlPrivateLock@48
441FsRtlProcessFileLock@12
442FsRtlQueryMaximumVirtualDiskNestingLevel@0
443FsRtlRegisterFileSystemFilterCallbacks@8
444FsRtlRegisterFltMgrCalls@4
445FsRtlRegisterMupCalls@4
446FsRtlRegisterUncProvider@12
447FsRtlRegisterUncProviderEx@16
448FsRtlReleaseFile@4
449FsRtlRemoveBaseMcbEntry@20
450FsRtlRemoveDotsFromPath@12
451FsRtlRemoveExtraCreateParameter@16
452FsRtlRemoveLargeMcbEntry@20
453FsRtlRemoveMcbEntry@12
454FsRtlRemovePerFileContext@12
455FsRtlRemovePerFileObjectContext@12
456FsRtlRemovePerStreamContext@12
457FsRtlResetBaseMcb@4
458FsRtlResetLargeMcb@8
459FsRtlSetEcpListIntoIrp@8
460FsRtlSplitBaseMcb@20
461FsRtlSplitLargeMcb@20
462FsRtlSyncVolumes@12
463FsRtlTeardownPerFileContexts@4
464FsRtlTeardownPerStreamContexts@4
465FsRtlTruncateBaseMcb@12
466FsRtlTruncateLargeMcb@12
467FsRtlTruncateMcb@8
468FsRtlUninitializeBaseMcb@4
469FsRtlUninitializeFileLock@4
470FsRtlUninitializeLargeMcb@4
471FsRtlUninitializeMcb@4
472FsRtlUninitializeOplock@4
473FsRtlValidateReparsePointBuffer@8
474HalDispatchTable DATA
475HalPrivateDispatchTable DATA
476HeadlessDispatch@20
477HvlQueryConnection@4
478InbvAcquireDisplayOwnership@0
479InbvCheckDisplayOwnership@0
480InbvDisplayString@4
481InbvEnableBootDriver@4
482InbvEnableDisplayString@4
483InbvInstallDisplayStringFilter@4
484InbvIsBootDriverInstalled@0
485InbvNotifyDisplayOwnershipLost@4
486InbvResetDisplay@0
487InbvSetScrollRegion@16
488InbvSetTextColor@4
489InbvSolidColorFill@20
490InitSafeBootMode DATA
491IoAcquireCancelSpinLock@4
492IoAcquireRemoveLockEx@20
493IoAcquireVpbSpinLock@4
494IoAdapterObjectType DATA
495IoAdjustStackSizeForRedirection@12
496IoAllocateAdapterChannel@20
497IoAllocateController@16
498IoAllocateDriverObjectExtension@16
499IoAllocateErrorLogEntry@8
500IoAllocateIrp@8
501IoAllocateMdl@20
502IoAllocateMiniCompletionPacket@8
503IoAllocateSfioStreamIdentifier@16
504IoAllocateWorkItem@4
505IoApplyPriorityInfoThread@12
506IoAssignResources@24
507IoAttachDevice@12
508IoAttachDeviceByPointer@8
509IoAttachDeviceToDeviceStack@8
510IoAttachDeviceToDeviceStackSafe@12
511IoBuildAsynchronousFsdRequest@24
512IoBuildDeviceIoControlRequest@36
513IoBuildPartialMdl@16
514IoBuildSynchronousFsdRequest@28
515IoCallDriver@8
516IoCancelFileOpen@8
517IoCancelIrp@4
518IoCheckDesiredAccess@8
519IoCheckEaBufferValidity@12
520IoCheckFunctionAccess@24
521IoCheckQuerySetFileInformation@12
522IoCheckQuerySetVolumeInformation@12
523IoCheckQuotaBufferValidity@12
524IoCheckShareAccess@20
525IoCheckShareAccessEx@24
526IoClearDependency@12
527IoClearIrpExtraCreateParameter@4
528IoCompleteRequest@8
529IoConnectInterrupt@44
530IoConnectInterruptEx@4
531IoCreateArcName@4
532IoCreateController@4
533IoCreateDevice@28
534IoCreateDisk@8
535IoCreateDriver@8
536IoCreateFile@56
537IoCreateFileEx@60
538IoCreateFileSpecifyDeviceObjectHint@60
539IoCreateNotificationEvent@8
540IoCreateStreamFileObject@8
541IoCreateStreamFileObjectEx@12
542IoCreateStreamFileObjectLite@8
543IoCreateSymbolicLink@8
544IoCreateSynchronizationEvent@8
545IoCreateUnprotectedSymbolicLink@8
546IoCsqInitialize@28
547IoCsqInitializeEx@28
548IoCsqInsertIrp@12
549IoCsqInsertIrpEx@16
550IoCsqRemoveIrp@8
551IoCsqRemoveNextIrp@8
552IoDeleteAllDependencyRelations@4
553IoDeleteController@4
554IoDeleteDevice@4
555IoDeleteDriver@4
556IoDeleteSymbolicLink@4
557IoDetachDevice@4
558IoDeviceHandlerObjectSize DATA
559IoDeviceHandlerObjectType DATA
560IoDeviceObjectType DATA
561IoDisconnectInterrupt@4
562IoDisconnectInterruptEx@4
563IoDriverObjectType DATA
564IoDuplicateDependency@12
565IoEnqueueIrp@4
566IoEnumerateDeviceObjectList@16
567IoEnumerateRegisteredFiltersList@12
568IoFastQueryNetworkAttributes@20
569IoFileObjectType DATA
570IoForwardAndCatchIrp@8
571IoForwardIrpSynchronously@8
572IoFreeController@4
573IoFreeErrorLogEntry@4
574IoFreeIrp@4
575IoFreeMdl@4
576IoFreeMiniCompletionPacket@4
577IoFreeSfioStreamIdentifier@8
578IoFreeWorkItem@4
579IoGetAffinityInterrupt@8
580IoGetAttachedDevice@4
581IoGetAttachedDeviceReference@4
582IoGetBaseFileSystemDeviceObject@4
583IoGetBootDiskInformation@8
584IoGetBootDiskInformationLite@4
585IoGetConfigurationInformation@0
586IoGetContainerInformation@16
587IoGetCurrentProcess@0
588IoGetDeviceAttachmentBaseRef@4
589IoGetDeviceInterfaceAlias@12
590IoGetDeviceInterfaces@16
591IoGetDeviceNumaNode@8
592IoGetDeviceObjectPointer@16
593IoGetDeviceProperty@20
594IoGetDevicePropertyData@32
595IoGetDeviceToVerify@4
596IoGetDiskDeviceObject@8
597IoGetDmaAdapter@12
598IoGetDriverObjectExtension@8
599IoGetFileObjectGenericMapping@0
600IoGetInitialStack@0
601IoGetIoPriorityHint@4
602IoGetIrpExtraCreateParameter@8
603IoGetLowerDeviceObject@4
604IoGetOplockKeyContext@4
605IoGetRelatedDeviceObject@4
606IoGetRequestorProcess@4
607IoGetRequestorProcessId@4
608IoGetRequestorSessionId@8
609IoGetSfioStreamIdentifier@8
610IoGetStackLimits@8
611IoGetSymlinkSupportInformation@8
612IoGetTopLevelIrp@0
613IoGetTransactionParameterBlock@4
614IoInitializeIrp@12
615IoInitializeRemoveLockEx@20
616IoInitializeTimer@12
617IoInitializeWorkItem@8
618IoInvalidateDeviceRelations@8
619IoInvalidateDeviceState@4
620IoIsFileObjectIgnoringSharing@4
621IoIsFileOriginRemote@4
622IoIsOperationSynchronous@4
623IoIsSystemThread@4
624IoIsValidNameGraftingBuffer@8
625IoIsWdmVersionAvailable@8
626IoMakeAssociatedIrp@8
627IoOpenDeviceInterfaceRegistryKey@12
628IoOpenDeviceRegistryKey@16
629IoPageRead@20
630IoQueryDeviceDescription@32
631IoQueryFileDosDeviceName@8
632IoQueryFileInformation@20
633IoQueryVolumeInformation@20
634IoQueueThreadIrp@4
635IoQueueWorkItem@16
636IoQueueWorkItemEx@16
637IoRaiseHardError@12
638IoRaiseInformationalHardError@12
639IoReadDiskSignature@12
640IoReadOperationCount DATA
641IoReadPartitionTableEx@8
642IoReadTransferCount DATA
643IoRegisterBootDriverReinitialization@12
644IoRegisterContainerNotification@20
645IoRegisterDeviceInterface@16
646IoRegisterDriverReinitialization@12
647IoRegisterFileSystem@4
648IoRegisterFsRegistrationChange@8
649IoRegisterFsRegistrationChangeMountAware@12
650IoRegisterLastChanceShutdownNotification@4
651IoRegisterPlugPlayNotification@28
652IoRegisterPriorityCallback@8
653IoRegisterShutdownNotification@4
654IoReleaseCancelSpinLock@4
655IoReleaseRemoveLockAndWaitEx@12
656IoReleaseRemoveLockEx@12
657IoReleaseVpbSpinLock@4
658IoRemoveShareAccess@8
659IoReplaceFileObjectName@12
660IoReplacePartitionUnit@12
661IoReportDetectedDevice@32
662IoReportHalResourceUsage@16
663IoReportResourceForDetection@28
664IoReportResourceUsage@36
665IoReportRootDevice@4
666IoReportTargetDeviceChange@8
667IoReportTargetDeviceChangeAsynchronous@16
668IoRequestDeviceEject@4
669IoRequestDeviceEjectEx@16
670IoRetrievePriorityInfo@16
671IoReuseIrp@8
672IoSetCompletionRoutineEx@28
673IoSetDependency@8
674IoSetDeviceInterfaceState@8
675IoSetDevicePropertyData@28
676IoSetDeviceToVerify@8
677IoSetFileObjectIgnoreSharing@4
678IoSetFileOrigin@8
679IoSetHardErrorOrVerifyDevice@8
680IoSetInformation@16
681IoSetIoCompletion@24
682IoSetIoCompletionEx@28
683IoSetIoPriorityHint@8
684IoSetIoPriorityHintIntoFileObject@8
685IoSetIoPriorityHintIntoThread@8
686IoSetIrpExtraCreateParameter@8
687IoSetOplockKeyContext@12
688IoSetPartitionInformationEx@12
689IoSetShareAccess@16
690IoSetShareAccessEx@20
691IoSetStartIoAttributes@12
692IoSetSystemPartition@4
693IoSetThreadHardErrorMode@4
694IoSetTopLevelIrp@4
695IoSizeofWorkItem@0
696IoStartNextPacket@8
697IoStartNextPacketByKey@12
698IoStartPacket@16
699IoStartTimer@4
700IoStatisticsLock DATA
701IoStopTimer@4
702IoSynchronousInvalidateDeviceRelations@8
703IoSynchronousPageWrite@20
704IoThreadToProcess@4
705IoTranslateBusAddress@24
706IoUninitializeWorkItem@4
707IoUnregisterContainerNotification@4
708IoUnregisterFileSystem@4
709IoUnregisterFsRegistrationChange@8
710IoUnregisterPlugPlayNotification@4
711IoUnregisterPlugPlayNotificationEx@4
712IoUnregisterPriorityCallback@4
713IoUnregisterShutdownNotification@4
714IoUpdateShareAccess@8
715IoValidateDeviceIoControlAccess@8
716IoVerifyPartitionTable@8
717IoVerifyVolume@8
718IoVolumeDeviceToDosName@8
719IoWMIAllocateInstanceIds@12
720IoWMIDeviceObjectToInstanceName@12
721IoWMIExecuteMethod@24
722IoWMIHandleToInstanceName@12
723IoWMIOpenBlock@12
724IoWMIQueryAllData@12
725IoWMIQueryAllDataMultiple@16
726IoWMIQuerySingleInstance@16
727IoWMIQuerySingleInstanceMultiple@20
728IoWMIRegistrationControl@8
729IoWMISetNotificationCallback@12
730IoWMISetSingleInstance@20
731IoWMISetSingleItem@24
732IoWMISuggestInstanceName@16
733IoWMIWriteEvent@4
734IoWithinStackLimits@8
735IoWriteErrorLogEntry@4
736IoWriteOperationCount DATA
737IoWritePartitionTableEx@8
738IoWriteTransferCount DATA
739KdChangeOption@24
740KdDebuggerEnabled DATA
741KdDebuggerNotPresent DATA
742KdDisableDebugger@0
743KdEnableDebugger@0
744KdEnteredDebugger DATA
745KdPollBreakIn@0
746KdPowerTransition@4
747KdRefreshDebuggerNotPresent@0
748KdSystemDebugControl@28
749Ke386CallBios@8
750Ke386IoSetAccessProcess@8
751Ke386QueryIoAccessMap@8
752Ke386SetIoAccessMap@8
753KeAcquireInterruptSpinLock@4
754KeAcquireSpinLockAtDpcLevel@4
755KeAddGroupAffinityEx@12
756KeAddProcessorAffinityEx@8
757KeAddProcessorGroupAffinity@8
758KeAddSystemServiceTable@20
759KeAlertThread@8
760KeAllocateCalloutStack@4
761KeAllocateCalloutStackEx@16
762KeAndAffinityEx@12
763KeAndGroupAffinityEx@12
764KeAreAllApcsDisabled@0
765KeAreApcsDisabled@0
766KeAttachProcess@4
767KeBugCheck@4
768KeBugCheckEx@20
769KeCancelTimer@4
770KeCapturePersistentThreadState@32
771KeCheckProcessorAffinityEx@8
772KeCheckProcessorGroupAffinity@8
773KeClearEvent@4
774KeComplementAffinityEx@8
775KeCopyAffinityEx@8
776KeCountSetBitsAffinityEx@4
777KeCountSetBitsGroupAffinity@4
778KeDelayExecutionThread@12
779KeDeregisterBugCheckCallback@4
780KeDeregisterBugCheckReasonCallback@4
781KeDeregisterNmiCallback@4
782KeDeregisterProcessorChangeCallback@4
783KeDetachProcess@0
784KeEnterCriticalRegion@0
785KeEnterGuardedRegion@0
786KeEnterKernelDebugger@0
787KeEnumerateNextProcessor@8
788KeExpandKernelStackAndCallout@12
789KeExpandKernelStackAndCalloutEx@20
790KeFindConfigurationEntry@16
791KeFindConfigurationNextEntry@20
792KeFindFirstSetLeftAffinityEx@4
793KeFindFirstSetLeftGroupAffinity@4
794KeFindFirstSetRightGroupAffinity@4
795KeFirstGroupAffinityEx@8
796KeFlushEntireTb@8
797KeFlushQueuedDpcs@0
798KeFreeCalloutStack@4
799KeGenericCallDpc@8
800KeGetCurrentNodeNumber@0
801KeGetCurrentProcessorNumberEx@4
802KeGetCurrentThread@0
803KeGetPreviousMode@0
804KeGetProcessorIndexFromNumber@4
805KeGetProcessorNumberFromIndex@8
806KeGetRecommendedSharedDataAlignment@0
807KeGetXSaveFeatureFlags@0
808KeI386AbiosCall@16
809KeI386AllocateGdtSelectors@8
810KeI386Call16BitCStyleFunction@0
811KeI386Call16BitFunction@0
812KeI386FlatToGdtSelector@12
813KeI386GetLid@20
814KeI386MachineType DATA
815KeI386ReleaseGdtSelectors@8
816KeI386ReleaseLid@8
817KeI386SetGdtSelector@8
818KeInitializeAffinityEx@4
819KeInitializeApc@32
820KeInitializeCrashDumpHeader@20
821KeInitializeDeviceQueue@4
822KeInitializeDpc@12
823KeInitializeEnumerationContext@8
824KeInitializeEnumerationContextFromGroup@8
825KeInitializeEvent@12
826KeInitializeInterrupt@52
827KeInitializeMutant@8
828KeInitializeMutex@8
829KeInitializeQueue@8
830KeInitializeSemaphore@12
831KeInitializeSpinLock@4
832KeInitializeThreadedDpc@12
833KeInitializeTimer@4
834KeInitializeTimerEx@8
835KeInsertByKeyDeviceQueue@12
836KeInsertDeviceQueue@8
837KeInsertHeadQueue@8
838KeInsertQueue@8
839KeInsertQueueApc@16
840KeInsertQueueDpc@12
841KeInterlockedClearProcessorAffinityEx@8
842KeInterlockedSetProcessorAffinityEx@8
843KeInvalidateAllCaches@0
844KeIpiGenericCall@8
845KeIsAttachedProcess@0
846KeIsEmptyAffinityEx@4
847KeIsEqualAffinityEx@8
848KeIsExecutingDpc@0
849KeIsSingleGroupAffinityEx@8
850KeIsSubsetAffinityEx@8
851KeIsWaitListEmpty@4
852KeLeaveCriticalRegion@0
853KeLeaveGuardedRegion@0
854KeLoaderBlock DATA
855KeNumberProcessors DATA
856KeOrAffinityEx@12
857KePollFreezeExecution@0
858KeProcessorGroupAffinity@8
859KeProfileInterrupt@8
860KeProfileInterruptWithSource@8
861KePulseEvent@12
862KeQueryActiveGroupCount@0
863KeQueryActiveProcessorAffinity@4
864KeQueryActiveProcessorCount@4
865KeQueryActiveProcessorCountEx@4
866KeQueryActiveProcessors@0
867KeQueryDpcWatchdogInformation@4
868KeQueryGroupAffinity@4
869KeQueryGroupAffinityEx@8
870KeQueryHardwareCounterConfiguration@12
871KeQueryHighestNodeNumber@0
872KeQueryInterruptTime@0
873KeQueryLogicalProcessorRelationship@16
874KeQueryMaximumGroupCount@0
875KeQueryMaximumProcessorCount@0
876KeQueryMaximumProcessorCountEx@4
877KeQueryNodeActiveAffinity@12
878KeQueryNodeMaximumProcessorCount@4
879KeQueryPriorityThread@4
880KeQueryRuntimeThread@8
881KeQuerySystemTime@4
882KeQueryTickCount@4
883KeQueryTimeIncrement@0
884KeQueryUnbiasedInterruptTime@0
885KeRaiseUserException@4
886KeReadStateEvent@4
887KeReadStateMutant@4
888KeReadStateMutex@4
889KeReadStateQueue@4
890KeReadStateSemaphore@4
891KeReadStateTimer@4
892KeRegisterBugCheckCallback@20
893KeRegisterBugCheckReasonCallback@16
894KeRegisterNmiCallback@8
895KeRegisterProcessorChangeCallback@12
896KeReleaseInterruptSpinLock@8
897KeReleaseMutant@16
898KeReleaseMutex@8
899KeReleaseSemaphore@16
900KeReleaseSpinLockFromDpcLevel@4
901KeRemoveByKeyDeviceQueue@8
902KeRemoveByKeyDeviceQueueIfBusy@8
903KeRemoveDeviceQueue@4
904KeRemoveEntryDeviceQueue@8
905KeRemoveGroupAffinityEx@12
906KeRemoveProcessorAffinityEx@8
907KeRemoveProcessorGroupAffinity@8
908KeRemoveQueue@12
909KeRemoveQueueDpc@4
910KeRemoveQueueEx@24
911KeRemoveSystemServiceTable@4
912KeResetEvent@4
913KeRestoreExtendedProcessorState@4
914KeRestoreFloatingPointState@4
915KeRevertToUserAffinityThread@0
916KeRevertToUserAffinityThreadEx@4
917KeRevertToUserGroupAffinityThread@4
918KeRundownQueue@4
919KeSaveExtendedProcessorState@12
920KeSaveFloatingPointState@4
921KeSaveStateForHibernate@0
922KeServiceDescriptorTable DATA
923KeSetActualBasePriorityThread@8
924KeSetAffinityThread@8
925KeSetBasePriorityThread@8
926KeSetCoalescableTimer@24
927KeSetDmaIoCoherency@4
928KeSetEvent@12
929KeSetEventBoostPriority@8
930KeSetHardwareCounterConfiguration@8
931KeSetIdealProcessorThread@8
932KeSetImportanceDpc@8
933KeSetKernelStackSwapEnable@4
934KeSetPriorityThread@8
935KeSetProfileIrql@4
936KeSetSystemAffinityThread@4
937KeSetSystemAffinityThreadEx@4
938KeSetSystemGroupAffinityThread@8
939KeSetTargetProcessorDpc@8
940KeSetTargetProcessorDpcEx@8
941KeSetTimeIncrement@8
942KeSetTimer@16
943KeSetTimerEx@20
944KeSignalCallDpcDone@4
945KeSignalCallDpcSynchronize@4
946KeStackAttachProcess@8
947KeStartDynamicProcessor@16
948KeSubtractAffinityEx@12
949KeSynchronizeExecution@12
950KeTestAlertThread@4
951KeTickCount DATA
952KeUnstackDetachProcess@4
953KeUpdateSystemTime@0
954KeUserModeCallback@20
955KeWaitForMultipleObjects@32
956KeWaitForMutexObject@20
957KeWaitForSingleObject@20
958KiBugCheckData DATA
959KiCheckForKernelApcDelivery@0
960KiCoprocessorError@0
961KiDeliverApc@12
962KiDispatchInterrupt@0
963KiIpiServiceRoutine@8
964;KiUnexpectedInterrupt ; Check!!! Couldn't determine function argument count. Function doesn't return.
965LdrAccessResource@16
966LdrEnumResources@20
967LdrFindResourceDirectory_U@16
968LdrFindResourceEx_U@20
969LdrFindResource_U@16
970LdrResFindResource@36
971LdrResFindResourceDirectory@28
972LdrResSearchResource@32
973LpcPortObjectType DATA
974LpcReplyWaitReplyPort@12
975LpcRequestPort@8
976LpcRequestWaitReplyPort@12
977LpcRequestWaitReplyPortEx@12
978LpcSendWaitReceivePort@28
979LsaCallAuthenticationPackage@28
980LsaDeregisterLogonProcess@4
981LsaFreeReturnBuffer@4
982LsaLogonUser@56
983LsaLookupAuthenticationPackage@12
984LsaRegisterLogonProcess@12
985Mm64BitPhysicalAddress DATA
986MmAddPhysicalMemory@8
987MmAddVerifierThunks@8
988MmAdjustWorkingSetSize@16
989MmAdvanceMdl@8
990MmAllocateContiguousMemory@12
991MmAllocateContiguousMemorySpecifyCache@32
992MmAllocateContiguousMemorySpecifyCacheNode@36
993MmAllocateMappingAddress@8
994MmAllocateNonCachedMemory@4
995MmAllocatePagesForMdl@28
996MmAllocatePagesForMdlEx@36
997MmBadPointer DATA
998MmBuildMdlForNonPagedPool@4
999MmCanFileBeTruncated@8
1000MmCommitSessionMappedView@8
1001MmCopyVirtualMemory@28
1002MmCreateMdl@12
1003MmCreateMirror@0
1004MmCreateSection@32
1005MmDisableModifiedWriteOfSection@4
1006MmDoesFileHaveUserWritableReferences@4
1007MmFlushImageSection@8
1008MmForceSectionClosed@8
1009MmFreeContiguousMemory@4
1010MmFreeContiguousMemorySpecifyCache@12
1011MmFreeMappingAddress@8
1012MmFreeNonCachedMemory@8
1013MmFreePagesFromMdl@4
1014MmGetPhysicalAddress@4
1015MmGetPhysicalMemoryRanges@0
1016MmGetSystemRoutineAddress@4
1017MmGetVirtualForPhysical@8
1018MmGrowKernelStack@4
1019MmHighestUserAddress DATA
1020MmIsAddressValid@4
1021MmIsDriverVerifying@4
1022MmIsDriverVerifyingByAddress@4
1023MmIsIoSpaceActive@12
1024MmIsNonPagedSystemAddressValid@4
1025MmIsRecursiveIoFault@0
1026MmIsThisAnNtAsSystem@0
1027MmIsVerifierEnabled@4
1028MmLockPagableDataSection@4
1029MmLockPagableImageSection@4
1030MmLockPagableSectionByHandle@4
1031MmMapIoSpace@16
1032MmMapLockedPages@8
1033MmMapLockedPagesSpecifyCache@24
1034MmMapLockedPagesWithReservedMapping@16
1035MmMapMemoryDumpMdl@4
1036MmMapUserAddressesToPage@12
1037MmMapVideoDisplay@16
1038MmMapViewInSessionSpace@12
1039MmMapViewInSystemSpace@12
1040MmMapViewOfSection@40
1041MmMarkPhysicalMemoryAsBad@8
1042MmMarkPhysicalMemoryAsGood@8
1043MmPageEntireDriver@4
1044MmPrefetchPages@8
1045MmProbeAndLockPages@12
1046MmProbeAndLockProcessPages@16
1047MmProbeAndLockSelectedPages@16
1048MmProtectMdlSystemAddress@8
1049MmQuerySystemSize@0
1050MmRemovePhysicalMemory@8
1051MmResetDriverPaging@4
1052MmRotatePhysicalView@24
1053MmSectionObjectType DATA
1054MmSecureVirtualMemory@12
1055MmSetAddressRangeModified@8
1056MmSetBankedSection@24
1057MmSizeOfMdl@8
1058MmSystemRangeStart DATA
1059MmTrimAllSystemPagableMemory@4
1060MmUnlockPagableImageSection@4
1061MmUnlockPages@4
1062MmUnmapIoSpace@8
1063MmUnmapLockedPages@8
1064MmUnmapReservedMapping@12
1065MmUnmapVideoDisplay@8
1066MmUnmapViewInSessionSpace@4
1067MmUnmapViewInSystemSpace@4
1068MmUnmapViewOfSection@8
1069MmUnsecureVirtualMemory@4
1070MmUserProbeAddress DATA
1071NlsAnsiCodePage DATA
1072NlsLeadByteInfo DATA
1073NlsMbCodePageTag DATA
1074NlsMbOemCodePageTag DATA
1075NlsOemCodePage DATA
1076NlsOemLeadByteInfo DATA
1077NtAddAtom@12
1078NtAdjustPrivilegesToken@24
1079NtAllocateLocallyUniqueId@4
1080NtAllocateUuids@16
1081NtAllocateVirtualMemory@24
1082NtBuildGUID@0
1083NtBuildLab@0
1084NtBuildNumber@0
1085NtClose@4
1086NtCommitComplete@8
1087NtCommitEnlistment@8
1088NtCommitTransaction@8
1089NtConnectPort@32
1090NtCreateEnlistment@32
1091NtCreateEvent@20
1092NtCreateFile@44
1093NtCreateResourceManager@28
1094NtCreateSection@28
1095NtCreateTransaction@40
1096NtCreateTransactionManager@24
1097NtDeleteAtom@4
1098NtDeleteFile@4
1099NtDeviceIoControlFile@40
1100NtDuplicateObject@28
1101NtDuplicateToken@24
1102NtEnumerateTransactionObject@20
1103NtFindAtom@12
1104NtFreeVirtualMemory@16
1105NtFreezeTransactions@8
1106NtFsControlFile@40
1107NtGetEnvironmentVariableEx@20
1108NtGetNotificationResourceManager@28
1109NtGlobalFlag DATA
1110NtLockFile@40
1111NtMakePermanentObject@4
1112NtMapViewOfSection@40
1113NtNotifyChangeDirectoryFile@36
1114NtOpenEnlistment@20
1115NtOpenFile@24
1116NtOpenProcess@16
1117NtOpenProcessToken@12
1118NtOpenProcessTokenEx@16
1119NtOpenResourceManager@20
1120NtOpenThread@16
1121NtOpenThreadToken@16
1122NtOpenThreadTokenEx@20
1123NtOpenTransaction@20
1124NtOpenTransactionManager@24
1125NtPrePrepareComplete@8
1126NtPrePrepareEnlistment@8
1127NtPrepareComplete@8
1128NtPrepareEnlistment@8
1129NtPropagationComplete@16
1130NtPropagationFailed@12
1131NtQueryDirectoryFile@44
1132NtQueryEaFile@36
1133NtQueryEnvironmentVariableInfoEx@16
1134NtQueryInformationAtom@20
1135NtQueryInformationEnlistment@20
1136NtQueryInformationFile@20
1137NtQueryInformationProcess@20
1138NtQueryInformationResourceManager@20
1139NtQueryInformationThread@20
1140NtQueryInformationToken@20
1141NtQueryInformationTransaction@20
1142NtQueryInformationTransactionManager@20
1143NtQueryQuotaInformationFile@36
1144NtQuerySecurityAttributesToken@24
1145NtQuerySecurityObject@20
1146NtQuerySystemInformation@16
1147NtQuerySystemInformationEx@24
1148NtQueryVolumeInformationFile@20
1149NtReadFile@36
1150NtReadOnlyEnlistment@8
1151NtRecoverEnlistment@8
1152NtRecoverResourceManager@4
1153NtRecoverTransactionManager@4
1154NtRequestPort@8
1155NtRequestWaitReplyPort@12
1156NtRollbackComplete@8
1157NtRollbackEnlistment@8
1158NtRollbackTransaction@8
1159NtSetEaFile@16
1160NtSetEvent@8
1161NtSetInformationEnlistment@16
1162NtSetInformationFile@20
1163NtSetInformationProcess@16
1164NtSetInformationResourceManager@16
1165NtSetInformationThread@16
1166NtSetInformationToken@16
1167NtSetInformationTransaction@16
1168NtSetQuotaInformationFile@16
1169NtSetSecurityObject@12
1170NtSetVolumeInformationFile@20
1171NtShutdownSystem@4
1172NtThawTransactions@0
1173NtTraceControl@24
1174NtTraceEvent@16
1175NtUnlockFile@20
1176NtVdmControl@8
1177NtWaitForSingleObject@12
1178NtWriteFile@36
1179ObAssignSecurity@16
1180ObCheckCreateObjectAccess@28
1181ObCheckObjectAccess@20
1182ObCloseHandle@8
1183ObCreateObject@36
1184ObCreateObjectType@16
1185ObDeleteCapturedInsertInfo@4
1186ObDereferenceObject@4
1187ObDereferenceObjectDeferDelete@4
1188ObDereferenceObjectDeferDeleteWithTag@8
1189ObDereferenceSecurityDescriptor@8
1190ObFindHandleForObject@20
1191ObGetFilterVersion@0
1192ObGetObjectSecurity@12
1193ObGetObjectType@4
1194ObInsertObject@24
1195ObIsDosDeviceLocallyMapped@8
1196ObIsKernelHandle@4
1197ObLogSecurityDescriptor@12
1198ObMakeTemporaryObject@4
1199ObOpenObjectByName@28
1200ObOpenObjectByPointer@28
1201ObOpenObjectByPointerWithTag@32
1202ObQueryNameInfo@4
1203ObQueryNameString@16
1204ObQueryObjectAuditingByHandle@8
1205ObReferenceObjectByHandle@24
1206ObReferenceObjectByHandleWithTag@28
1207ObReferenceObjectByName@32
1208ObReferenceObjectByPointer@16
1209ObReferenceObjectByPointerWithTag@20
1210ObReferenceSecurityDescriptor@8
1211ObRegisterCallbacks@8
1212ObReleaseObjectSecurity@8
1213ObSetHandleAttributes@12
1214ObSetSecurityDescriptorInfo@24
1215ObSetSecurityObjectByPointer@12
1216ObUnRegisterCallbacks@4
1217POGOBuffer DATA
1218PcwAddInstance@20
1219PcwCloseInstance@4
1220PcwCreateInstance@20
1221PcwRegister@8
1222PcwUnregister@4
1223PfFileInfoNotify@4
1224PfxFindPrefix@8
1225PfxInitialize@4
1226PfxInsertPrefix@12
1227PfxRemovePrefix@8
1228PoCallDriver@8
1229PoCancelDeviceNotify@4
1230PoClearPowerRequest@8
1231PoCreatePowerRequest@12
1232PoDeletePowerRequest@4
1233PoDisableSleepStates@12
1234PoEndDeviceBusy@4
1235PoGetSystemWake@4
1236PoQueryWatchdogTime@8
1237PoQueueShutdownWorkItem@4
1238PoReenableSleepStates@4
1239PoRegisterDeviceForIdleDetection@16
1240PoRegisterDeviceNotify@24
1241PoRegisterPowerSettingCallback@20
1242PoRegisterSystemState@8
1243PoRequestPowerIrp@24
1244PoRequestShutdownEvent@4
1245PoSetDeviceBusyEx@4
1246PoSetFixedWakeSource@4
1247PoSetHiberRange@20
1248PoSetPowerRequest@8
1249PoSetPowerState@12
1250PoSetSystemState@4
1251PoSetSystemWake@4
1252PoShutdownBugCheck@4
1253PoStartDeviceBusy@4
1254PoStartNextPowerIrp@4
1255PoUnregisterPowerSettingCallback@4
1256PoUnregisterSystemState@4
1257PoUserShutdownInitiated@0
1258ProbeForRead@12
1259ProbeForWrite@12
1260PsCreateSystemProcess@12
1261PsAcquireProcessExitSynchronization@4
1262PsAssignImpersonationToken@8
1263PsChargePoolQuota@12
1264PsChargeProcessCpuCycles@12
1265PsChargeProcessNonPagedPoolQuota@8
1266PsChargeProcessPagedPoolQuota@8
1267PsChargeProcessPoolQuota@12
1268PsCreateSystemThread@28
1269PsDereferenceImpersonationToken@4
1270PsDereferencePrimaryToken@4
1271PsDisableImpersonation@8
1272PsEnterPriorityRegion@0
1273PsEstablishWin32Callouts@4
1274PsGetContextThread@12
1275PsGetCurrentProcess@0
1276PsGetCurrentProcessId@0
1277PsGetCurrentProcessSessionId@0
1278PsGetCurrentProcessWin32Process@0
1279PsGetCurrentThread@0
1280PsGetCurrentThreadId@0
1281PsGetCurrentThreadPreviousMode@0
1282PsGetCurrentThreadProcess@0
1283PsGetCurrentThreadProcessId@0
1284PsGetCurrentThreadStackBase@0
1285PsGetCurrentThreadStackLimit@0
1286PsGetCurrentThreadTeb@0
1287PsGetCurrentThreadWin32Thread@0
1288PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion@4
1289PsGetJobLock@4
1290PsGetJobSessionId@4
1291PsGetJobUIRestrictionsClass@4
1292PsGetProcessCreateTimeQuadPart@4
1293PsGetProcessDebugPort@4
1294PsGetProcessExitProcessCalled@4
1295PsGetProcessExitStatus@4
1296PsGetProcessExitTime@0
1297PsGetProcessId@4
1298PsGetProcessImageFileName@4
1299PsGetProcessInheritedFromUniqueProcessId@4
1300PsGetProcessJob@4
1301PsGetProcessPeb@4
1302PsGetProcessPriorityClass@4
1303PsGetProcessSectionBaseAddress@4
1304PsGetProcessSecurityPort@4
1305PsGetProcessSessionId@4
1306PsGetProcessSessionIdEx@4
1307PsGetProcessWin32Process@4
1308PsGetProcessWin32WindowStation@4
1309PsGetThreadFreezeCount@4
1310PsGetThreadHardErrorsAreDisabled@4
1311PsGetThreadId@4
1312PsGetThreadProcess@4
1313PsGetThreadProcessId@4
1314PsGetThreadSessionId@4
1315PsGetThreadTeb@4
1316PsGetThreadWin32Thread@4
1317PsGetVersion@16
1318PsImpersonateClient@20
1319PsInitialSystemProcess DATA
1320PsIsCurrentThreadPrefetching@0
1321PsIsProcessBeingDebugged@4
1322PsIsProtectedProcess@4
1323PsIsSystemProcess@4
1324PsIsSystemThread@4
1325PsIsThreadImpersonating@4
1326PsIsThreadTerminating@4
1327PsJobType DATA
1328PsLeavePriorityRegion@0
1329PsLookupProcessByProcessId@8
1330PsLookupProcessThreadByCid@12
1331PsLookupThreadByThreadId@8
1332PsProcessType DATA
1333PsQueryProcessExceptionFlags@12
1334PsReferenceImpersonationToken@16
1335PsReferencePrimaryToken@4
1336PsReferenceProcessFilePointer@8
1337PsReleaseProcessExitSynchronization@4
1338PsRemoveCreateThreadNotifyRoutine@4
1339PsRemoveLoadImageNotifyRoutine@4
1340PsRestoreImpersonation@8
1341PsResumeProcess@4
1342PsReturnPoolQuota@12
1343PsReturnProcessNonPagedPoolQuota@8
1344PsReturnProcessPagedPoolQuota@8
1345PsRevertThreadToSelf@4
1346PsRevertToSelf@0
1347PsSetContextThread@12
1348PsSetCreateProcessNotifyRoutine@8
1349PsSetCreateProcessNotifyRoutineEx@8
1350PsSetCreateThreadNotifyRoutine@4
1351PsSetCurrentThreadPrefetching@4
1352PsSetJobUIRestrictionsClass@8
1353PsSetLegoNotifyRoutine@4
1354PsSetLoadImageNotifyRoutine@4
1355PsSetProcessPriorityByClass@8
1356PsSetProcessPriorityClass@8
1357PsSetProcessSecurityPort@8
1358PsSetProcessWin32Process@12
1359PsSetProcessWindowStation@8
1360PsSetThreadHardErrorsAreDisabled@8
1361PsSetThreadWin32Thread@12
1362PsSuspendProcess@4
1363PsTerminateSystemThread@4
1364PsThreadType DATA
1365PsUILanguageComitted DATA
1366PsWrapApcWow64Thread@8
1367READ_REGISTER_BUFFER_UCHAR@12
1368READ_REGISTER_BUFFER_ULONG@12
1369READ_REGISTER_BUFFER_USHORT@12
1370READ_REGISTER_UCHAR@4
1371READ_REGISTER_ULONG@4
1372READ_REGISTER_USHORT@4
1373RtlAbsoluteToSelfRelativeSD@12
1374RtlAddAccessAllowedAce@16
1375RtlAddAccessAllowedAceEx@20
1376RtlAddAce@20
1377RtlAddAtomToAtomTable@12
1378RtlAddRange@36
1379RtlAllocateHeap@12
1380RtlAnsiCharToUnicodeChar@4
1381RtlAnsiStringToUnicodeSize@4
1382RtlAnsiStringToUnicodeString@12
1383RtlAppendAsciizToString@8
1384RtlAppendStringToString@8
1385RtlAppendUnicodeStringToString@8
1386RtlAppendUnicodeToString@8
1387RtlAreAllAccessesGranted@8
1388RtlAreAnyAccessesGranted@8
1389RtlAreBitsClear@12
1390RtlAreBitsSet@12
1391RtlAssert@16
1392RtlCaptureContext@4
1393RtlCaptureStackBackTrace@16
1394RtlCharToInteger@12
1395RtlCheckRegistryKey@8
1396RtlClearAllBits@4
1397RtlClearBit@8
1398RtlClearBits@12
1399RtlCmDecodeMemIoResource@8
1400RtlCmEncodeMemIoResource@24
1401RtlCompareAltitudes@8
1402RtlCompareMemory@12
1403RtlCompareMemoryUlong@12
1404RtlCompareString@12
1405RtlCompareUnicodeString@12
1406RtlCompareUnicodeStrings@20
1407RtlCompressBuffer@32
1408RtlCompressChunks@28
1409RtlComputeCrc32@12
1410RtlContractHashTable@4
1411RtlConvertLongToLargeInteger@4
1412RtlConvertSidToUnicodeString@12
1413RtlConvertUlongToLargeInteger@4
1414RtlCopyLuid@8
1415RtlCopyLuidAndAttributesArray@12
1416RtlCopyRangeList@8
1417RtlCopySid@12
1418RtlCopySidAndAttributesArray@28
1419RtlCopyString@8
1420RtlCopyUnicodeString@8
1421RtlCreateAcl@12
1422RtlCreateAtomTable@8
1423RtlCreateHashTable@12
1424RtlCreateHeap@24
1425RtlCreateRegistryKey@8
1426RtlCreateSecurityDescriptor@8
1427RtlCreateSystemVolumeInformationFolder@4
1428RtlCreateUnicodeString@8
1429RtlCustomCPToUnicodeN@24
1430RtlDecompressBuffer@24
1431RtlDecompressChunks@28
1432RtlDecompressFragment@32
1433RtlDelete@4
1434RtlDeleteAce@8
1435RtlDeleteAtomFromAtomTable@8
1436RtlDeleteElementGenericTable@8
1437RtlDeleteElementGenericTableAvl@8
1438RtlDeleteHashTable@4
1439RtlDeleteNoSplay@8
1440RtlDeleteOwnersRanges@8
1441RtlDeleteRange@24
1442RtlDeleteRegistryValue@12
1443RtlDescribeChunk@20
1444RtlDestroyAtomTable@4
1445RtlDestroyHeap@4
1446RtlDowncaseUnicodeChar@4
1447RtlDowncaseUnicodeString@12
1448RtlDuplicateUnicodeString@12
1449RtlEmptyAtomTable@8
1450RtlEndEnumerationHashTable@8
1451RtlEndWeakEnumerationHashTable@8
1452RtlEnlargedIntegerMultiply@8
1453RtlEnlargedUnsignedDivide@16
1454RtlEnlargedUnsignedMultiply@8
1455RtlEnumerateEntryHashTable@8
1456RtlEnumerateGenericTable@8
1457RtlEnumerateGenericTableAvl@8
1458RtlEnumerateGenericTableLikeADirectory@28
1459RtlEnumerateGenericTableWithoutSplaying@8
1460RtlEnumerateGenericTableWithoutSplayingAvl@8
1461RtlEqualLuid@8
1462RtlEqualSid@8
1463RtlEqualString@12
1464RtlEqualUnicodeString@12
1465RtlEthernetAddressToStringA@8
1466RtlEthernetAddressToStringW@8
1467RtlEthernetStringToAddressA@12
1468RtlEthernetStringToAddressW@12
1469RtlExpandHashTable@4
1470RtlExtendedIntegerMultiply@12
1471RtlExtendedLargeIntegerDivide@16
1472RtlExtendedMagicDivide@20
1473RtlFillMemory@12
1474RtlFillMemoryUlong@12
1475RtlFillMemoryUlonglong@16
1476RtlFindAceByType@12
1477RtlFindClearBits@12
1478RtlFindClearBitsAndSet@12
1479RtlFindClearRuns@16
1480RtlFindClosestEncodableLength@12
1481RtlFindFirstRunClear@8
1482RtlFindLastBackwardRunClear@12
1483RtlFindLeastSignificantBit@8
1484RtlFindLongestRunClear@8
1485RtlFindMessage@20
1486RtlFindMostSignificantBit@8
1487RtlFindNextForwardRunClear@12
1488RtlFindRange@48
1489RtlFindSetBits@12
1490RtlFindSetBitsAndClear@12
1491RtlFindUnicodePrefix@12
1492RtlFormatCurrentUserKeyPath@4
1493RtlFormatMessage@36
1494RtlFreeAnsiString@4
1495RtlFreeHeap@12
1496RtlFreeOemString@4
1497RtlFreeRangeList@4
1498RtlFreeUnicodeString@4
1499RtlGUIDFromString@8
1500RtlGenerate8dot3Name@16
1501RtlGetAce@12
1502RtlGetCallersAddress@8
1503RtlGetCompressionWorkSpaceSize@12
1504RtlGetDaclSecurityDescriptor@16
1505RtlGetDefaultCodePage@8
1506RtlGetElementGenericTable@8
1507RtlGetElementGenericTableAvl@8
1508RtlGetEnabledExtendedFeatures@8
1509RtlGetFirstRange@12
1510RtlGetGroupSecurityDescriptor@12
1511RtlGetIntegerAtom@8
1512RtlGetLastRange@12
1513RtlGetNextEntryHashTable@8
1514RtlGetNextRange@12
1515RtlGetNtGlobalFlags@0
1516RtlGetOwnerSecurityDescriptor@12
1517RtlGetProductInfo@20
1518RtlGetSaclSecurityDescriptor@16
1519RtlGetSetBootStatusData@24
1520RtlGetThreadLangIdByIndex@16
1521RtlGetVersion@4
1522RtlHashUnicodeString@16
1523RtlIdnToAscii@20
1524RtlIdnToNameprepUnicode@20
1525RtlIdnToUnicode@20
1526RtlImageDirectoryEntryToData@16
1527RtlImageNtHeader@4
1528RtlInitAnsiString@8
1529RtlInitAnsiStringEx@8
1530RtlInitCodePageTable@8
1531RtlInitEnumerationHashTable@8
1532RtlInitString@8
1533RtlInitUnicodeString@8
1534RtlInitUnicodeStringEx@8
1535RtlInitWeakEnumerationHashTable@8
1536RtlInitializeBitMap@12
1537RtlInitializeGenericTable@20
1538RtlInitializeGenericTableAvl@20
1539RtlInitializeRangeList@4
1540RtlInitializeSid@12
1541RtlInitializeUnicodePrefix@4
1542RtlInsertElementGenericTable@16
1543RtlInsertElementGenericTableAvl@16
1544RtlInsertElementGenericTableFull@24
1545RtlInsertElementGenericTableFullAvl@24
1546RtlInsertEntryHashTable@16
1547RtlInsertUnicodePrefix@12
1548RtlInt64ToUnicodeString@16
1549RtlIntegerToChar@16
1550RtlIntegerToUnicode@16
1551RtlIntegerToUnicodeString@12
1552RtlInvertRangeList@8
1553RtlInvertRangeListEx@20
1554RtlIoDecodeMemIoResource@16
1555RtlIoEncodeMemIoResource@40
1556RtlIpv4AddressToStringA@8
1557RtlIpv4AddressToStringExA@16
1558RtlIpv4AddressToStringExW@16
1559RtlIpv4AddressToStringW@8
1560RtlIpv4StringToAddressA@16
1561RtlIpv4StringToAddressExA@16
1562RtlIpv4StringToAddressExW@16
1563RtlIpv4StringToAddressW@16
1564RtlIpv6AddressToStringA@8
1565RtlIpv6AddressToStringExA@20
1566RtlIpv6AddressToStringExW@20
1567RtlIpv6AddressToStringW@8
1568RtlIpv6StringToAddressA@12
1569RtlIpv6StringToAddressExA@16
1570RtlIpv6StringToAddressExW@16
1571RtlIpv6StringToAddressW@12
1572RtlIsGenericTableEmpty@4
1573RtlIsGenericTableEmptyAvl@4
1574RtlIsNameLegalDOS8Dot3@12
1575RtlIsNormalizedString@16
1576RtlIsNtDdiVersionAvailable@4
1577RtlIsRangeAvailable@40
1578RtlIsServicePackVersionInstalled@4
1579RtlIsValidOemCharacter@4
1580RtlLargeIntegerAdd@16
1581RtlLargeIntegerArithmeticShift@12
1582RtlLargeIntegerDivide@20
1583RtlLargeIntegerNegate@8
1584RtlLargeIntegerShiftLeft@12
1585RtlLargeIntegerShiftRight@12
1586RtlLargeIntegerSubtract@16
1587RtlLengthRequiredSid@4
1588RtlLengthSecurityDescriptor@4
1589RtlLengthSid@4
1590RtlLoadString@32
1591RtlLocalTimeToSystemTime@8
1592RtlLockBootStatusData@4
1593RtlLookupAtomInAtomTable@12
1594RtlLookupElementGenericTable@8
1595RtlLookupElementGenericTableAvl@8
1596RtlLookupElementGenericTableFull@16
1597RtlLookupElementGenericTableFullAvl@16
1598RtlLookupEntryHashTable@12
1599RtlLookupFirstMatchingElementGenericTableAvl@12
1600RtlMapGenericMask@8
1601RtlMapSecurityErrorToNtStatus@4
1602RtlMergeRangeLists@16
1603RtlMoveMemory@12
1604RtlMultiByteToUnicodeN@20
1605RtlMultiByteToUnicodeSize@12
1606RtlNextUnicodePrefix@8
1607RtlNormalizeString@20
1608RtlNtStatusToDosError@4
1609RtlNtStatusToDosErrorNoTeb@4
1610RtlNumberGenericTableElements@4
1611RtlNumberGenericTableElementsAvl@4
1612RtlNumberOfClearBits@4
1613RtlNumberOfSetBits@4
1614RtlNumberOfSetBitsUlongPtr@4
1615RtlOemStringToCountedUnicodeString@12
1616RtlOemStringToUnicodeSize@4
1617RtlOemStringToUnicodeString@12
1618RtlOemToUnicodeN@20
1619RtlOwnerAcesPresent@4
1620RtlPinAtomInAtomTable@8
1621RtlPrefixString@12
1622RtlPrefixUnicodeString@12
1623RtlQueryAtomInAtomTable@24
1624RtlQueryDynamicTimeZoneInformation@4
1625RtlQueryElevationFlags@4
1626RtlQueryModuleInformation@12
1627RtlQueryRegistryValues@20
1628RtlQueryTimeZoneInformation@4
1629RtlRaiseException@24
1630RtlRandom@4
1631RtlRandomEx@4
1632RtlRealPredecessor@4
1633RtlRealSuccessor@4
1634RtlRemoveEntryHashTable@12
1635RtlRemoveUnicodePrefix@8
1636RtlReplaceSidInSd@16
1637RtlReserveChunk@20
1638RtlRunOnceBeginInitialize@12
1639RtlRunOnceComplete@12
1640RtlRunOnceExecuteOnce@16
1641RtlRunOnceInitialize@4
1642RtlSecondsSince1970ToTime@8
1643RtlSecondsSince1980ToTime@8
1644RtlSelfRelativeToAbsoluteSD2@8
1645RtlSelfRelativeToAbsoluteSD@44
1646RtlSetAllBits@4
1647RtlSetBit@8
1648RtlSetBits@12
1649RtlSetDaclSecurityDescriptor@16
1650RtlSetDynamicTimeZoneInformation@4
1651RtlSetGroupSecurityDescriptor@12
1652RtlSetOwnerSecurityDescriptor@12
1653RtlSetSaclSecurityDescriptor@16
1654RtlSetTimeZoneInformation@4
1655RtlSidHashInitialize@12
1656RtlSidHashLookup@8
1657RtlSizeHeap@12
1658RtlSplay@4
1659RtlStringFromGUID@8
1660RtlSubAuthorityCountSid@4
1661RtlSubAuthoritySid@8
1662RtlSubtreePredecessor@4
1663RtlSubtreeSuccessor@4
1664RtlSystemTimeToLocalTime@8
1665RtlTestBit@8
1666RtlTimeFieldsToTime@8
1667RtlTimeToElapsedTimeFields@8
1668RtlTimeToSecondsSince1970@8
1669RtlTimeToSecondsSince1980@8
1670RtlTimeToTimeFields@8
1671RtlTraceDatabaseAdd@16
1672RtlTraceDatabaseCreate@20
1673RtlTraceDatabaseDestroy@4
1674RtlTraceDatabaseEnumerate@12
1675RtlTraceDatabaseFind@16
1676RtlTraceDatabaseLock@4
1677RtlTraceDatabaseUnlock@4
1678RtlTraceDatabaseValidate@4
1679RtlUTF8ToUnicodeN@20
1680RtlUnicodeStringToAnsiSize@4
1681RtlUnicodeStringToAnsiString@12
1682RtlUnicodeStringToCountedOemString@12
1683RtlUnicodeStringToInteger@12
1684RtlUnicodeStringToOemSize@4
1685RtlUnicodeStringToOemString@12
1686RtlUnicodeToCustomCPN@24
1687RtlUnicodeToMultiByteN@20
1688RtlUnicodeToMultiByteSize@12
1689RtlUnicodeToOemN@20
1690RtlUnicodeToUTF8N@20
1691RtlUnlockBootStatusData@4
1692RtlUnwind@16
1693RtlUpcaseUnicodeChar@4
1694RtlUpcaseUnicodeString@12
1695RtlUpcaseUnicodeStringToAnsiString@12
1696RtlUpcaseUnicodeStringToCountedOemString@12
1697RtlUpcaseUnicodeStringToOemString@12
1698RtlUpcaseUnicodeToCustomCPN@24
1699RtlUpcaseUnicodeToMultiByteN@20
1700RtlUpcaseUnicodeToOemN@20
1701RtlUpperChar@4
1702RtlUpperString@8
1703RtlValidRelativeSecurityDescriptor@12
1704RtlValidSecurityDescriptor@4
1705RtlValidSid@4
1706RtlValidateUnicodeString@8
1707RtlVerifyVersionInfo@16
1708RtlVolumeDeviceToDosName@8
1709RtlWalkFrameChain@12
1710RtlWeaklyEnumerateEntryHashTable@8
1711RtlWriteRegistryValue@24
1712RtlZeroHeap@8
1713RtlZeroMemory@8
1714RtlxAnsiStringToUnicodeSize@4
1715RtlxOemStringToUnicodeSize@4
1716RtlxUnicodeStringToAnsiSize@4
1717RtlxUnicodeStringToOemSize@4
1718SeAccessCheck@40
1719SeAccessCheckEx@24
1720SeAccessCheckFromState@40
1721SeAccessCheckWithHint@44
1722SeAppendPrivileges@8
1723SeAssignSecurity@28
1724SeAssignSecurityEx@36
1725SeAuditHardLinkCreation@12
1726SeAuditHardLinkCreationWithTransaction@16
1727SeAuditTransactionStateChange@12
1728SeAuditingAnyFileEventsWithContext@8
1729SeAuditingFileEvents@8
1730SeAuditingFileEventsWithContext@12
1731SeAuditingFileOrGlobalEvents@12
1732SeAuditingHardLinkEvents@8
1733SeAuditingHardLinkEventsWithContext@12
1734SeCaptureSecurityDescriptor@20
1735SeCaptureSubjectContext@4
1736SeCaptureSubjectContextEx@12
1737SeCloseObjectAuditAlarm@12
1738SeCloseObjectAuditAlarmForNonObObject@16
1739SeComputeAutoInheritByObjectType@12
1740SeCreateAccessState@16
1741SeCreateAccessStateEx@24
1742SeCreateClientSecurity@16
1743SeCreateClientSecurityFromSubjectContext@16
1744SeDeassignSecurity@4
1745SeDeleteAccessState@4
1746SeDeleteObjectAuditAlarm@8
1747SeDeleteObjectAuditAlarmWithTransaction@12
1748SeExamineSacl@24
1749SeExports DATA
1750SeFilterToken@24
1751SeFreePrivileges@4
1752SeGetLinkedToken@12
1753SeImpersonateClient@8
1754SeImpersonateClientEx@8
1755SeLocateProcessImageName@8
1756SeLockSubjectContext@4
1757SeMarkLogonSessionForTerminationNotification@4
1758SeOpenObjectAuditAlarm@36
1759SeOpenObjectAuditAlarmForNonObObject@44
1760SeOpenObjectAuditAlarmWithTransaction@40
1761SeOpenObjectForDeleteAuditAlarm@36
1762SeOpenObjectForDeleteAuditAlarmWithTransaction@40
1763SePrivilegeCheck@12
1764SePrivilegeObjectAuditAlarm@24
1765SePublicDefaultDacl DATA
1766SeQueryAuthenticationIdToken@8
1767SeQueryInformationToken@12
1768SeQuerySecurityAttributesToken@24
1769SeQuerySecurityDescriptorInfo@16
1770SeQuerySessionIdToken@8
1771SeRegisterLogonSessionTerminatedRoutine@4
1772SeReleaseSecurityDescriptor@12
1773SeReleaseSubjectContext@4
1774SeReportSecurityEvent@16
1775SeReportSecurityEventWithSubCategory@20
1776SeSetAccessStateGenericMapping@8
1777SeSetAuditParameter@16
1778SeSetSecurityAttributesToken@16
1779SeSetSecurityDescriptorInfo@24
1780SeSetSecurityDescriptorInfoEx@28
1781SeSinglePrivilegeCheck@12
1782SeSrpAccessCheck@24
1783SeSystemDefaultDacl DATA
1784SeTokenImpersonationLevel@4
1785SeTokenIsAdmin@4
1786SeTokenIsRestricted@4
1787SeTokenIsWriteRestricted@4
1788SeTokenObjectType DATA
1789SeTokenType@4
1790SeUnlockSubjectContext@4
1791SeUnregisterLogonSessionTerminatedRoutine@4
1792SeValidSecurityDescriptor@8
1793TmCancelPropagationRequest@4
1794TmCommitComplete@8
1795TmCommitEnlistment@8
1796TmCommitTransaction@8
1797TmCreateEnlistment@36
1798TmCurrentTransaction@4
1799TmDereferenceEnlistmentKey@8
1800TmEnableCallbacks@12
1801TmEndPropagationRequest@4
1802TmEnlistmentObjectType DATA
1803TmFreezeTransactions@12
1804TmGetTransactionId@8
1805TmInitSystem@0
1806TmInitSystemPhase2@0
1807TmInitializeResourceManager@20
1808TmInitializeTransaction@36
1809TmIsTransactionActive@4
1810TmPrePrepareComplete@8
1811TmPrePrepareEnlistment@8
1812TmPrepareComplete@8
1813TmPrepareEnlistment@8
1814TmPropagationComplete@16
1815TmPropagationFailed@12
1816TmReadOnlyEnlistment@8
1817TmRecoverEnlistment@8
1818TmRecoverResourceManager@4
1819TmRecoverTransactionManager@8
1820TmReferenceEnlistmentKey@8
1821TmRequestOutcomeEnlistment@8
1822TmResourceManagerObjectType DATA
1823TmRollbackComplete@8
1824TmRollbackEnlistment@8
1825TmRollbackTransaction@8
1826TmSetCurrentTransaction@4
1827TmThawTransactions@0
1828TmTransactionManagerObjectType DATA
1829TmTransactionObjectType DATA
1830TmpIsKTMCommitCoordinator@4
1831VerSetConditionMask@16
1832VfFailDeviceNode@0
1833VfFailDriver@0
1834VfFailSystemBIOS@0
1835VfIsVerificationEnabled@8
1836WRITE_REGISTER_BUFFER_UCHAR@12
1837WRITE_REGISTER_BUFFER_ULONG@12
1838WRITE_REGISTER_BUFFER_USHORT@12
1839WRITE_REGISTER_UCHAR@8
1840WRITE_REGISTER_ULONG@8
1841WRITE_REGISTER_USHORT@8
1842WheaAddErrorSource@8
1843WheaConfigureErrorSource@8
1844WheaGetErrorSource@4
1845WheaInitializeRecordHeader@4
1846WheaReportHwError@4
1847WmiQueryTraceInformation@20
1848WmiTraceMessage
1849WmiTraceMessageVa@24
1850XIPDispatch@12
1851ZwAccessCheckAndAuditAlarm@44
1852ZwAddBootEntry@8
1853ZwAddDriverEntry@8
1854ZwAdjustPrivilegesToken@24
1855ZwAlertThread@4
1856ZwAllocateLocallyUniqueId@4
1857ZwAllocateVirtualMemory@24
1858ZwAlpcAcceptConnectPort@36
1859ZwAlpcCancelMessage@12
1860ZwAlpcConnectPort@44
1861ZwAlpcCreatePort@12
1862ZwAlpcCreatePortSection@24
1863ZwAlpcCreateResourceReserve@16
1864ZwAlpcCreateSectionView@12
1865ZwAlpcCreateSecurityContext@12
1866ZwAlpcDeletePortSection@12
1867ZwAlpcDeleteResourceReserve@12
1868ZwAlpcDeleteSectionView@12
1869ZwAlpcDeleteSecurityContext@12
1870ZwAlpcDisconnectPort@8
1871ZwAlpcQueryInformation@20
1872ZwAlpcSendWaitReceivePort@32
1873ZwAlpcSetInformation@16
1874ZwAssignProcessToJobObject@8
1875ZwCancelIoFile@8
1876ZwCancelTimer@8
1877ZwClearEvent@4
1878ZwClose@4
1879ZwCloseObjectAuditAlarm@12
1880ZwCommitComplete@8
1881ZwCommitEnlistment@8
1882ZwCommitTransaction@8
1883ZwConnectPort@32
1884ZwCreateDirectoryObject@12
1885ZwCreateEnlistment@32
1886ZwCreateEvent@20
1887ZwCreateFile@44
1888ZwCreateIoCompletion@16
1889ZwCreateJobObject@12
1890ZwCreateKey@28
1891ZwCreateKeyTransacted@32
1892ZwCreateResourceManager@28
1893ZwCreateSection@28
1894ZwCreateSymbolicLinkObject@16
1895ZwCreateTimer@16
1896ZwCreateTransaction@40
1897ZwCreateTransactionManager@24
1898ZwDeleteBootEntry@4
1899ZwDeleteDriverEntry@4
1900ZwDeleteFile@4
1901ZwDeleteKey@4
1902ZwDeleteValueKey@8
1903ZwDeviceIoControlFile@40
1904ZwDisplayString@4
1905ZwDuplicateObject@28
1906ZwDuplicateToken@24
1907ZwEnumerateBootEntries@8
1908ZwEnumerateDriverEntries@8
1909ZwEnumerateKey@24
1910ZwEnumerateTransactionObject@20
1911ZwEnumerateValueKey@24
1912ZwFlushBuffersFile@8
1913ZwFlushInstructionCache@12
1914ZwFlushKey@4
1915ZwFlushVirtualMemory@16
1916ZwFreeVirtualMemory@16
1917ZwFsControlFile@40
1918ZwGetNotificationResourceManager@28
1919ZwImpersonateAnonymousToken@4
1920ZwInitiatePowerAction@16
1921ZwIsProcessInJob@8
1922ZwLoadDriver@4
1923ZwLoadKey@8
1924ZwLoadKeyEx@32
1925ZwLockFile@40
1926ZwLockProductActivationKeys@8
1927ZwMakeTemporaryObject@4
1928ZwMapViewOfSection@40
1929ZwModifyBootEntry@4
1930ZwModifyDriverEntry@4
1931ZwNotifyChangeKey@40
1932ZwNotifyChangeSession@32
1933ZwOpenDirectoryObject@12
1934ZwOpenEnlistment@20
1935ZwOpenEvent@12
1936ZwOpenFile@24
1937ZwOpenJobObject@12
1938ZwOpenKey@12
1939ZwOpenKeyEx@16
1940ZwOpenKeyTransacted@16
1941ZwOpenKeyTransactedEx@20
1942ZwOpenProcess@16
1943ZwOpenProcessToken@12
1944ZwOpenProcessTokenEx@16
1945ZwOpenResourceManager@20
1946ZwOpenSection@12
1947ZwOpenSession@12
1948ZwOpenSymbolicLinkObject@12
1949ZwOpenThread@16
1950ZwOpenThreadToken@16
1951ZwOpenThreadTokenEx@20
1952ZwOpenTimer@12
1953ZwOpenTransaction@20
1954ZwOpenTransactionManager@24
1955ZwPowerInformation@20
1956ZwPrePrepareComplete@8
1957ZwPrePrepareEnlistment@8
1958ZwPrepareComplete@8
1959ZwPrepareEnlistment@8
1960ZwPropagationComplete@16
1961ZwPropagationFailed@12
1962ZwPulseEvent@8
1963ZwQueryBootEntryOrder@8
1964ZwQueryBootOptions@8
1965ZwQueryDefaultLocale@8
1966ZwQueryDefaultUILanguage@4
1967ZwQueryDirectoryFile@44
1968ZwQueryDirectoryObject@28
1969ZwQueryDriverEntryOrder@8
1970ZwQueryEaFile@36
1971ZwQueryFullAttributesFile@8
1972ZwQueryInformationEnlistment@20
1973ZwQueryInformationFile@20
1974ZwQueryInformationJobObject@20
1975ZwQueryInformationProcess@20
1976ZwQueryInformationResourceManager@20
1977ZwQueryInformationThread@20
1978ZwQueryInformationToken@20
1979ZwQueryInformationTransaction@20
1980ZwQueryInformationTransactionManager@20
1981ZwQueryInstallUILanguage@4
1982ZwQueryKey@20
1983ZwQueryLicenseValue@20
1984ZwQueryObject@20
1985ZwQueryQuotaInformationFile@36
1986ZwQuerySection@20
1987ZwQuerySecurityAttributesToken@24
1988ZwQuerySecurityObject@20
1989ZwQuerySymbolicLinkObject@12
1990ZwQuerySystemInformation@16
1991ZwQueryValueKey@24
1992ZwQueryVirtualMemory@24
1993ZwQueryVolumeInformationFile@20
1994ZwReadFile@36
1995ZwReadOnlyEnlistment@8
1996ZwRecoverEnlistment@8
1997ZwRecoverResourceManager@4
1998ZwRecoverTransactionManager@4
1999ZwRemoveIoCompletion@20
2000ZwRemoveIoCompletionEx@24
2001ZwReplaceKey@12
2002ZwRequestPort@8
2003ZwRequestWaitReplyPort@12
2004ZwResetEvent@8
2005ZwRestoreKey@12
2006ZwRollbackComplete@8
2007ZwRollbackEnlistment@8
2008ZwRollbackTransaction@8
2009ZwSaveKey@8
2010ZwSaveKeyEx@12
2011ZwSecureConnectPort@36
2012ZwSetBootEntryOrder@8
2013ZwSetBootOptions@8
2014ZwSetDefaultLocale@8
2015ZwSetDefaultUILanguage@4
2016ZwSetDriverEntryOrder@8
2017ZwSetEaFile@16
2018ZwSetEvent@8
2019ZwSetInformationEnlistment@16
2020ZwSetInformationFile@20
2021ZwSetInformationJobObject@16
2022ZwSetInformationObject@16
2023ZwSetInformationProcess@16
2024ZwSetInformationResourceManager@16
2025ZwSetInformationThread@16
2026ZwSetInformationToken@16
2027ZwSetInformationTransaction@16
2028ZwSetQuotaInformationFile@16
2029ZwSetSecurityObject@12
2030ZwSetSystemInformation@12
2031ZwSetSystemTime@8
2032ZwSetTimer@28
2033ZwSetTimerEx@16
2034ZwSetValueKey@24
2035ZwSetVolumeInformationFile@20
2036ZwTerminateJobObject@8
2037ZwTerminateProcess@8
2038ZwTraceEvent@16
2039ZwTranslateFilePath@16
2040ZwUnloadDriver@4
2041ZwUnloadKey@4
2042ZwUnloadKeyEx@8
2043ZwUnlockFile@20
2044ZwUnmapViewOfSection@8
2045ZwWaitForMultipleObjects@20
2046ZwWaitForSingleObject@12
2047ZwWriteFile@36
2048ZwYieldExecution@0
2049_CIcos
2050_CIsin
2051_CIsqrt
2052_abnormal_termination
2053_alldiv@16
2054_alldvrm@16
2055_allmul@16
2056_alloca_probe
2057_alloca_probe_16
2058_alloca_probe_8
2059_allrem@16
2060_allshl
2061_allshr
2062_aulldiv@16
2063_aulldvrm@16
2064_aullrem@16
2065_aullshr
2066;_chkstk
2067_except_handler2
2068_except_handler3
2069_global_unwind2
2070_i64toa_s
2071_i64tow_s
2072_itoa
2073_itoa_s
2074_itow
2075_itow_s
2076_local_unwind2
2077_ltoa_s
2078_ltow_s
2079_makepath_s
2080_purecall
2081_snprintf
2082_snprintf_s
2083_snscanf_s
2084_snwprintf
2085_snwprintf_s
2086_snwscanf_s
2087_splitpath_s
2088_stricmp
2089_strlwr
2090_strnicmp
2091_strnset
2092_strnset_s
2093_strrev
2094_strset
2095_strset_s
2096_strtoui64
2097_strupr
2098_swprintf
2099_ui64toa_s
2100_ui64tow_s
2101_ultoa_s
2102_ultow_s
2103_vsnprintf
2104_vsnprintf_s
2105_vsnwprintf
2106_vsnwprintf_s
2107_vswprintf
2108_wcsicmp
2109_wcslwr
2110_wcsnicmp
2111_wcsnset
2112_wcsnset_s
2113_wcsrev
2114_wcsset_s
2115_wcsupr
2116_wmakepath_s
2117_wsplitpath_s
2118_wtoi
2119_wtol
2120atoi
2121atol
2122bsearch
2123isdigit
2124islower
2125isprint
2126isspace
2127isupper
2128isxdigit
2129mbstowcs
2130mbtowc
2131memchr
2132memcpy
2133memcpy_s
2134memmove
2135memmove_s
2136memset
2137psMUITest DATA
2138qsort
2139rand
2140sprintf
2141sprintf_s
2142srand
2143sscanf_s
2144strcat
2145strcat_s
2146strchr
2147strcmp
2148strcpy
2149strcpy_s
2150strlen
2151strncat
2152strncat_s
2153strncmp
2154strncpy
2155strncpy_s
2156strnlen
2157strrchr
2158strspn
2159strstr
2160strtok_s
2161swprintf
2162swprintf_s
2163swscanf_s
2164tolower
2165toupper
2166towlower
2167towupper
2168vDbgPrintEx@16
2169vDbgPrintExWithPrefix@20
2170vsprintf
2171vsprintf_s
2172vswprintf_s
2173wcscat
2174wcscat_s
2175wcschr
2176wcscmp
2177wcscpy
2178wcscpy_s
2179wcscspn
2180wcslen
2181wcsncat
2182wcsncat_s
2183wcsncmp
2184wcsncpy
2185wcsncpy_s
2186wcsnlen
2187wcsrchr
2188wcsspn
2189wcsstr
2190wcstombs
2191wcstoul
2192wctomb
2193