1; 2; Definition file of ntoskrnl.exe 3; Automatic generated by gendef 4; written by Kai Tietz 2008 5; 6LIBRARY "ntoskrnl.exe" 7EXPORTS 8@ExAcquireFastMutexUnsafe@4 9@ExAcquireRundownProtection@4 10@ExAcquireRundownProtectionCacheAware@4 11@ExAcquireRundownProtectionCacheAwareEx@4 12@ExAcquireRundownProtectionEx@4 13@ExEnterCriticalRegionAndAcquireFastMutexUnsafe@4 14@ExInitializeRundownProtection@4 15@ExInterlockedAddLargeStatistic@8 16@ExInterlockedCompareExchange64@16 17@ExInterlockedFlushSList@4 18@ExInterlockedPopEntrySList@8 19@ExInterlockedPushEntrySList@12 20@ExReInitializeRundownProtection@4 21@ExReInitializeRundownProtectionCacheAware@4 22@ExReleaseFastMutexUnsafe@4 23@ExReleaseFastMutexUnsafeAndLeaveCriticalRegion@4 24@ExReleaseResourceAndLeaveCriticalRegion@4 25@ExReleaseResourceAndLeavePriorityRegion@4 26@ExReleaseResourceLite@4 27@ExReleaseRundownProtection@4 28@ExReleaseRundownProtectionCacheAware@4 29@ExReleaseRundownProtectionCacheAwareEx@8 30@ExReleaseRundownProtectionEx@8 31@ExRundownCompleted@4 32@ExRundownCompletedCacheAware@4 33@ExWaitForRundownProtectionRelease@4 34@ExWaitForRundownProtectionReleaseCacheAware@4 35@ExfAcquirePushLockExclusive@4 36@ExfAcquirePushLockShared@4 37@ExfInterlockedAddUlong@12 38@ExfInterlockedCompareExchange64@12 39@ExfInterlockedInsertHeadList@12 40@ExfInterlockedInsertTailList@12 41@ExfInterlockedPopEntryList@8 42@ExfInterlockedPushEntryList@12 43@ExfInterlockedRemoveHeadList@8 44@ExfReleasePushLock@8 45@ExfReleasePushLockExclusive@4 46@ExfReleasePushLockShared@4 47@ExfTryAcquirePushLockShared@4 48@ExfTryToWakePushLock@4 49@ExfUnblockPushLock@8 50@Exfi386InterlockedDecrementLong@4 51@Exfi386InterlockedExchangeUlong@8 52@Exfi386InterlockedIncrementLong@4 53@ExiAcquireFastMutex@4 54@ExiReleaseFastMutex@4 55@ExiTryToAcquireFastMutex@4 56@HalExamineMBR@16 57@InterlockedCompareExchange@12 58@InterlockedDecrement@4 59@InterlockedExchange@8 60@InterlockedExchangeAdd@8 61@InterlockedIncrement@4 62@InterlockedPopEntrySList@4 63@InterlockedPushEntrySList@8 64@IoGetPagingIoPriority@4 65@IoReadPartitionTable@16 66@IoSetPartitionInformation@16 67@IoWritePartitionTable@20 68@IofCallDriver@8 69@IofCompleteRequest@8 70@KeAcquireGuardedMutex@4 71@KeAcquireGuardedMutexUnsafe@4 72@KeAcquireInStackQueuedSpinLockAtDpcLevel@8 73@KeAcquireInStackQueuedSpinLockForDpc@8 74@KeAcquireSpinLockForDpc@8 75@KeInitializeGuardedMutex@4 76@KeInvalidateRangeAllCaches@8 77@KeReleaseGuardedMutex@4 78@KeReleaseGuardedMutexUnsafe@4 79@KeReleaseInStackQueuedSpinLockForDpc@4 80@KeReleaseInStackQueuedSpinLockFromDpcLevel@4 81@KeReleaseSpinLockForDpc@8 82@KeTestSpinLock@4 83@KeTryToAcquireGuardedMutex@4 84@KeTryToAcquireSpinLockAtDpcLevel@4 85;KeUpdateRunTime 86@KefAcquireSpinLockAtDpcLevel@4 87@KefReleaseSpinLockFromDpcLevel@4 88@KiAcquireSpinLock@8 89;KiCheckForSListAddress 90@KiReleaseSpinLock@4 91@ObfDereferenceObject@4 92;ObfDereferenceObjectWithTag 93@ObfReferenceObject@4 94;ObfReferenceObjectWithTag 95@RtlPrefetchMemoryNonTemporal@8 96@RtlUlongByteSwap@4 97@RtlUlonglongByteSwap@8 98@RtlUshortByteSwap@4 99;SeAuditingWithTokenForSubcategory 100;WmiGetClock 101;Kei386EoiHelper 102AlpcGetHeaderSize@4 103AlpcGetMessageAttribute@8 104AlpcInitializeMessageAttribute@16 105CcCanIWrite@16 106CcCoherencyFlushAndPurgeCache@20 107CcCopyRead@24 108CcCopyWrite@20 109CcCopyWriteWontFlush@12 110CcDeferWrite@24 111CcFastCopyRead@24 112CcFastCopyWrite@16 113CcFastMdlReadWait DATA 114CcFlushCache@16 115CcGetDirtyPages@16 116CcGetFileObjectFromBcb@4 117CcGetFileObjectFromSectionPtrs@4 118CcGetFileObjectFromSectionPtrsRef@4 119CcGetFlushedValidData@8 120CcGetLsnForFileObject@8 121CcInitializeCacheMap@20 122CcIsThereDirtyData@4 123CcIsThereDirtyDataEx@8 124CcMapData@24 125CcMdlRead@20 126CcMdlReadComplete@8 127CcMdlWriteAbort@8 128CcMdlWriteComplete@12 129CcPinMappedData@20 130CcPinRead@24 131CcPrepareMdlWrite@20 132CcPreparePinWrite@28 133CcPurgeCacheSection@16 134CcRemapBcb@4 135CcRepinBcb@4 136CcScheduleReadAhead@12 137CcSetAdditionalCacheAttributes@12 138CcSetBcbOwnerPointer@8 139CcSetDirtyPageThreshold@8 140CcSetDirtyPinnedData@8 141CcSetFileSizes@8 142CcSetFileSizesEx@8 143CcSetLogHandleForFile@12 144CcSetParallelFlushFile@8 145CcSetReadAheadGranularity@8 146CcTestControl@12 147CcUninitializeCacheMap@12 148CcUnpinData@4 149CcUnpinDataForThread@8 150CcUnpinRepinnedBcb@12 151CcWaitForCurrentLazyWriterActivity@0 152CcZeroData@16 153CmCallbackGetKeyObjectID@16 154CmGetBoundTransaction@8 155CmGetCallbackVersion@8 156CmKeyObjectType DATA 157CmRegisterCallback@12 158CmRegisterCallbackEx@24 159CmSetCallbackObjectContext@16 160CmUnRegisterCallback@8 161DbgBreakPoint@0 162DbgBreakPointWithStatus@4 163DbgCommandString@8 164DbgLoadImageSymbols@12 165DbgPrint 166DbgPrintEx 167DbgPrintReturnControlC 168DbgPrompt@12 169DbgQueryDebugFilterState@8 170DbgSetDebugFilterState@12 171DbgSetDebugPrintCallback@8 172DbgkLkmdRegisterCallback@12 173DbgkLkmdUnregisterCallback@4 174EmClientQueryRuleState@8 175EmClientRuleDeregisterNotification@4 176EmClientRuleEvaluate@16 177EmClientRuleRegisterNotification@16 178EmProviderDeregister@4 179EmProviderDeregisterEntry@4 180EmProviderRegister@24 181EmProviderRegisterEntry@16 182EmpProviderRegister@24 183EtwActivityIdControl@8 184EtwEnableTrace@44 185EtwEventEnabled@12 186EtwProviderEnabled@20 187EtwRegister@16 188EtwRegisterClassicProvider@20 189EtwSendTraceBuffer@24 190EtwUnregister@8 191EtwWrite@24 192EtwWriteEndScenario@24 193EtwWriteEx@40 194EtwWriteStartScenario@24 195EtwWriteString@28 196EtwWriteTransfer@28 197ExAcquireCacheAwarePushLockExclusive@4 198ExAcquireResourceExclusiveLite@8 199ExAcquireResourceSharedLite@8 200ExAcquireSharedStarveExclusive@8 201ExAcquireSharedWaitForExclusive@8 202ExAcquireSpinLockExclusive@4 203ExAcquireSpinLockExclusiveAtDpcLevel@4 204ExAcquireSpinLockShared@4 205ExAcquireSpinLockSharedAtDpcLevel@4 206ExAllocateCacheAwarePushLock@4 207ExAllocateCacheAwareRundownProtection@8 208ExAllocateFromPagedLookasideList@4 209ExAllocatePool@8 210ExAllocatePoolWithQuota@8 211ExAllocatePoolWithQuotaTag@12 212ExAllocatePoolWithTag@12 213ExAllocatePoolWithTagPriority@16 214ExConvertExclusiveToSharedLite@4 215ExCreateCallback@16 216ExDeleteLookasideListEx@4 217ExDeleteNPagedLookasideList@4 218ExDeletePagedLookasideList@4 219ExDeleteResourceLite@4 220ExDesktopObjectType DATA 221ExDisableResourceBoostLite@4 222ExEnterCriticalRegionAndAcquireResourceExclusive@4 223ExEnterCriticalRegionAndAcquireResourceShared@4 224ExEnterCriticalRegionAndAcquireSharedWaitForExclusive@4 225ExEnterPriorityRegionAndAcquireResourceExclusive@4 226ExEnterPriorityRegionAndAcquireResourceShared@4 227ExEnumHandleTable@16 228ExEventObjectType DATA 229ExExtendZone@12 230ExFetchLicenseData@12 231ExFlushLookasideListEx@4 232ExFreeCacheAwarePushLock@4 233ExFreeCacheAwareRundownProtection@4 234ExFreePool@4 235ExFreePoolWithTag@8 236ExFreeToPagedLookasideList@8 237ExGetCurrentProcessorCounts@12 238ExGetCurrentProcessorCpuUsage@4 239ExGetExclusiveWaiterCount@4 240ExGetLicenseTamperState@4 241ExGetPreviousMode@0 242ExGetSharedWaiterCount@4 243ExInitializeLookasideListEx@32 244ExInitializeNPagedLookasideList@28 245ExInitializePagedLookasideList@28 246ExInitializePushLock@4 247ExInitializeResourceLite@4 248ExInitializeRundownProtectionCacheAware@8 249ExInitializeZone@16 250ExInterlockedAddLargeInteger@16 251ExInterlockedAddUlong@12 252ExInterlockedDecrementLong@8 253ExInterlockedExchangeUlong@12 254ExInterlockedExtendZone@16 255@ExInterlockedIncrementLong@8 256ExInterlockedInsertHeadList@12 257ExInterlockedInsertTailList@12 258ExInterlockedPopEntryList@8 259ExInterlockedPushEntryList@12 260ExInterlockedRemoveHeadList@8 261ExIsProcessorFeaturePresent@4 262ExIsResourceAcquiredExclusiveLite@4 263ExIsResourceAcquiredSharedLite@4 264ExLocalTimeToSystemTime@8 265ExNotifyCallback@12 266ExQueryAttributeInformation@16 267ExQueryPoolBlockSize@8 268ExQueueWorkItem@8 269ExRaiseAccessViolation@0 270ExRaiseDatatypeMisalignment@0 271ExRaiseException@24 272ExRaiseHardError@24 273ExRaiseStatus@4 274ExRegisterAttributeInformationCallback@4 275ExRegisterCallback@12 276ExRegisterExtension@12 277ExReinitializeResourceLite@4 278ExReleaseCacheAwarePushLockExclusive@4 279ExReleaseResourceForThreadLite@8 280ExReleaseSpinLockExclusive@8 281ExReleaseSpinLockExclusiveFromDpcLevel@4 282ExReleaseSpinLockShared@8 283ExReleaseSpinLockSharedFromDpcLevel@4 284ExSemaphoreObjectType DATA 285ExSetLicenseTamperState@4 286ExSetResourceOwnerPointer@8 287ExSetResourceOwnerPointerEx@12 288ExSetTimerResolution@8 289ExSizeOfRundownProtectionCacheAware@0 290ExSystemExceptionFilter@0 291ExSystemTimeToLocalTime@8 292ExTryConvertSharedSpinLockExclusive@4 293ExUnregisterAttributeInformationCallback@4 294ExUnregisterCallback@4 295ExUnregisterExtension@4 296ExUpdateLicenseData@8 297ExUuidCreate@4 298ExVerifySuite@4 299ExWindowStationObjectType DATA 300Exi386InterlockedDecrementLong@4 301Exi386InterlockedExchangeUlong@8 302Exi386InterlockedIncrementLong@4 303FirstEntrySList@4 304FsRtlAcknowledgeEcp@4 305FsRtlAcquireFileExclusive@4 306FsRtlAddBaseMcbEntry@28 307FsRtlAddBaseMcbEntryEx@28 308FsRtlAddLargeMcbEntry@28 309FsRtlAddMcbEntry@16 310FsRtlAddToTunnelCache@32 311FsRtlAllocateExtraCreateParameter@24 312FsRtlAllocateExtraCreateParameterFromLookasideList@24 313FsRtlAllocateExtraCreateParameterList@8 314FsRtlAllocateFileLock@8 315FsRtlAllocatePool@8 316FsRtlAllocatePoolWithQuota@8 317FsRtlAllocatePoolWithQuotaTag@12 318FsRtlAllocatePoolWithTag@12 319FsRtlAllocateResource@0 320FsRtlAreNamesEqual@16 321FsRtlAreThereCurrentOrInProgressFileLocks@4 322FsRtlAreVolumeStartupApplicationsComplete@0 323FsRtlBalanceReads@4 324FsRtlCancellableWaitForMultipleObjects@24 325FsRtlCancellableWaitForSingleObject@12 326FsRtlChangeBackingFileObject@16 327FsRtlCheckLockForReadAccess@8 328FsRtlCheckLockForWriteAccess@8 329FsRtlCheckOplock@20 330FsRtlCheckOplockEx@24 331FsRtlCopyRead@32 332FsRtlCopyWrite@32 333FsRtlCreateSectionForDataScan@40 334FsRtlCurrentBatchOplock@4 335FsRtlCurrentOplock@4 336FsRtlCurrentOplockH@4 337FsRtlDeleteExtraCreateParameterLookasideList@8 338FsRtlDeleteKeyFromTunnelCache@12 339FsRtlDeleteTunnelCache@4 340FsRtlDeregisterUncProvider@4 341FsRtlDissectDbcs@16 342FsRtlDissectName@16 343FsRtlDoesDbcsContainWildCards@4 344FsRtlDoesNameContainWildCards@4 345FsRtlFastCheckLockForRead@24 346FsRtlFastCheckLockForWrite@24 347FsRtlFastUnlockAll@16 348FsRtlFastUnlockAllByKey@20 349FsRtlFastUnlockSingle@32 350FsRtlFindExtraCreateParameter@16 351FsRtlFindInTunnelCache@32 352FsRtlFreeExtraCreateParameter@4 353FsRtlFreeExtraCreateParameterList@4 354FsRtlFreeFileLock@4 355FsRtlGetEcpListFromIrp@8 356FsRtlGetFileSize@8 357FsRtlGetNextBaseMcbEntry@20 358FsRtlGetNextExtraCreateParameter@20 359FsRtlGetNextFileLock@8 360FsRtlGetNextLargeMcbEntry@20 361FsRtlGetNextMcbEntry@20 362FsRtlGetVirtualDiskNestingLevel@12 363FsRtlIncrementCcFastMdlReadWait@0 364FsRtlIncrementCcFastReadNoWait@0 365FsRtlIncrementCcFastReadNotPossible@0 366FsRtlIncrementCcFastReadResourceMiss@0 367FsRtlIncrementCcFastReadWait@0 368FsRtlInitExtraCreateParameterLookasideList@16 369FsRtlInitializeBaseMcb@8 370FsRtlInitializeBaseMcbEx@12 371FsRtlInitializeExtraCreateParameter@24 372FsRtlInitializeExtraCreateParameterList@4 373FsRtlInitializeFileLock@12 374FsRtlInitializeLargeMcb@8 375FsRtlInitializeMcb@8 376FsRtlInitializeOplock@4 377FsRtlInitializeTunnelCache@4 378FsRtlInsertExtraCreateParameter@8 379FsRtlInsertPerFileContext@8 380FsRtlInsertPerFileObjectContext@8 381FsRtlInsertPerStreamContext@8 382FsRtlIsDbcsInExpression@8 383FsRtlIsEcpAcknowledged@4 384FsRtlIsEcpFromUserMode@4 385FsRtlIsFatDbcsLegal@20 386FsRtlIsHpfsDbcsLegal@20 387FsRtlIsNameInExpression@16 388FsRtlIsNtstatusExpected@4 389FsRtlIsPagingFile@4 390FsRtlIsTotalDeviceFailure@4 391FsRtlLegalAnsiCharacterArray DATA 392FsRtlLogCcFlushError@20 393FsRtlLookupBaseMcbEntry@32 394FsRtlLookupLargeMcbEntry@32 395FsRtlLookupLastBaseMcbEntry@12 396FsRtlLookupLastBaseMcbEntryAndIndex@16 397FsRtlLookupLastLargeMcbEntry@12 398FsRtlLookupLastLargeMcbEntryAndIndex@16 399FsRtlLookupLastMcbEntry@12 400FsRtlLookupMcbEntry@20 401FsRtlLookupPerFileContext@12 402FsRtlLookupPerFileObjectContext@12 403FsRtlLookupPerStreamContextInternal@12 404FsRtlMdlRead@24 405FsRtlMdlReadComplete@8 406FsRtlMdlReadCompleteDev@12 407FsRtlMdlReadDev@28 408FsRtlMdlWriteComplete@12 409FsRtlMdlWriteCompleteDev@16 410FsRtlMupGetProviderIdFromName@8 411FsRtlMupGetProviderInfoFromFileObject@16 412FsRtlNormalizeNtstatus@8 413FsRtlNotifyChangeDirectory@28 414FsRtlNotifyCleanup@12 415FsRtlNotifyCleanupAll@8 416FsRtlNotifyFilterChangeDirectory@44 417FsRtlNotifyFilterReportChange@40 418FsRtlNotifyFullChangeDirectory@40 419FsRtlNotifyFullReportChange@36 420FsRtlNotifyInitializeSync@4 421FsRtlNotifyReportChange@20 422FsRtlNotifyUninitializeSync@4 423FsRtlNotifyVolumeEvent@8 424FsRtlNotifyVolumeEventEx@12 425FsRtlNumberOfRunsInBaseMcb@4 426FsRtlNumberOfRunsInLargeMcb@4 427FsRtlNumberOfRunsInMcb@4 428FsRtlOplockBreakH@24 429FsRtlOplockBreakToNone@24 430FsRtlOplockBreakToNoneEx@24 431FsRtlOplockFsctrl@12 432FsRtlOplockFsctrlEx@16 433FsRtlOplockIsFastIoPossible@4 434FsRtlOplockIsSharedRequest@4 435FsRtlOplockKeysEqual@8 436FsRtlPostPagingFileStackOverflow@12 437FsRtlPostStackOverflow@12 438FsRtlPrepareMdlWrite@24 439FsRtlPrepareMdlWriteDev@28 440FsRtlPrivateLock@48 441FsRtlProcessFileLock@12 442FsRtlQueryMaximumVirtualDiskNestingLevel@0 443FsRtlRegisterFileSystemFilterCallbacks@8 444FsRtlRegisterFltMgrCalls@4 445FsRtlRegisterMupCalls@4 446FsRtlRegisterUncProvider@12 447FsRtlRegisterUncProviderEx@16 448FsRtlReleaseFile@4 449FsRtlRemoveBaseMcbEntry@20 450FsRtlRemoveDotsFromPath@12 451FsRtlRemoveExtraCreateParameter@16 452FsRtlRemoveLargeMcbEntry@20 453FsRtlRemoveMcbEntry@12 454FsRtlRemovePerFileContext@12 455FsRtlRemovePerFileObjectContext@12 456FsRtlRemovePerStreamContext@12 457FsRtlResetBaseMcb@4 458FsRtlResetLargeMcb@8 459FsRtlSetEcpListIntoIrp@8 460FsRtlSplitBaseMcb@20 461FsRtlSplitLargeMcb@20 462FsRtlSyncVolumes@12 463FsRtlTeardownPerFileContexts@4 464FsRtlTeardownPerStreamContexts@4 465FsRtlTruncateBaseMcb@12 466FsRtlTruncateLargeMcb@12 467FsRtlTruncateMcb@8 468FsRtlUninitializeBaseMcb@4 469FsRtlUninitializeFileLock@4 470FsRtlUninitializeLargeMcb@4 471FsRtlUninitializeMcb@4 472FsRtlUninitializeOplock@4 473FsRtlValidateReparsePointBuffer@8 474HalDispatchTable DATA 475HalPrivateDispatchTable DATA 476HeadlessDispatch@20 477HvlQueryConnection@4 478InbvAcquireDisplayOwnership@0 479InbvCheckDisplayOwnership@0 480InbvDisplayString@4 481InbvEnableBootDriver@4 482InbvEnableDisplayString@4 483InbvInstallDisplayStringFilter@4 484InbvIsBootDriverInstalled@0 485InbvNotifyDisplayOwnershipLost@4 486InbvResetDisplay@0 487InbvSetScrollRegion@16 488InbvSetTextColor@4 489InbvSolidColorFill@20 490InitSafeBootMode DATA 491IoAcquireCancelSpinLock@4 492IoAcquireRemoveLockEx@20 493IoAcquireVpbSpinLock@4 494IoAdapterObjectType DATA 495IoAdjustStackSizeForRedirection@12 496IoAllocateAdapterChannel@20 497IoAllocateController@16 498IoAllocateDriverObjectExtension@16 499IoAllocateErrorLogEntry@8 500IoAllocateIrp@8 501IoAllocateMdl@20 502IoAllocateMiniCompletionPacket@8 503IoAllocateSfioStreamIdentifier@16 504IoAllocateWorkItem@4 505IoApplyPriorityInfoThread@12 506IoAssignResources@24 507IoAttachDevice@12 508IoAttachDeviceByPointer@8 509IoAttachDeviceToDeviceStack@8 510IoAttachDeviceToDeviceStackSafe@12 511IoBuildAsynchronousFsdRequest@24 512IoBuildDeviceIoControlRequest@36 513IoBuildPartialMdl@16 514IoBuildSynchronousFsdRequest@28 515IoCallDriver@8 516IoCancelFileOpen@8 517IoCancelIrp@4 518IoCheckDesiredAccess@8 519IoCheckEaBufferValidity@12 520IoCheckFunctionAccess@24 521IoCheckQuerySetFileInformation@12 522IoCheckQuerySetVolumeInformation@12 523IoCheckQuotaBufferValidity@12 524IoCheckShareAccess@20 525IoCheckShareAccessEx@24 526IoClearDependency@12 527IoClearIrpExtraCreateParameter@4 528IoCompleteRequest@8 529IoConnectInterrupt@44 530IoConnectInterruptEx@4 531IoCreateArcName@4 532IoCreateController@4 533IoCreateDevice@28 534IoCreateDisk@8 535IoCreateDriver@8 536IoCreateFile@56 537IoCreateFileEx@60 538IoCreateFileSpecifyDeviceObjectHint@60 539IoCreateNotificationEvent@8 540IoCreateStreamFileObject@8 541IoCreateStreamFileObjectEx@12 542IoCreateStreamFileObjectLite@8 543IoCreateSymbolicLink@8 544IoCreateSynchronizationEvent@8 545IoCreateUnprotectedSymbolicLink@8 546IoCsqInitialize@28 547IoCsqInitializeEx@28 548IoCsqInsertIrp@12 549IoCsqInsertIrpEx@16 550IoCsqRemoveIrp@8 551IoCsqRemoveNextIrp@8 552IoDeleteAllDependencyRelations@4 553IoDeleteController@4 554IoDeleteDevice@4 555IoDeleteDriver@4 556IoDeleteSymbolicLink@4 557IoDetachDevice@4 558IoDeviceHandlerObjectSize DATA 559IoDeviceHandlerObjectType DATA 560IoDeviceObjectType DATA 561IoDisconnectInterrupt@4 562IoDisconnectInterruptEx@4 563IoDriverObjectType DATA 564IoDuplicateDependency@12 565IoEnqueueIrp@4 566IoEnumerateDeviceObjectList@16 567IoEnumerateRegisteredFiltersList@12 568IoFastQueryNetworkAttributes@20 569IoFileObjectType DATA 570IoForwardAndCatchIrp@8 571IoForwardIrpSynchronously@8 572IoFreeController@4 573IoFreeErrorLogEntry@4 574IoFreeIrp@4 575IoFreeMdl@4 576IoFreeMiniCompletionPacket@4 577IoFreeSfioStreamIdentifier@8 578IoFreeWorkItem@4 579IoGetAffinityInterrupt@8 580IoGetAttachedDevice@4 581IoGetAttachedDeviceReference@4 582IoGetBaseFileSystemDeviceObject@4 583IoGetBootDiskInformation@8 584IoGetBootDiskInformationLite@4 585IoGetConfigurationInformation@0 586IoGetContainerInformation@16 587IoGetCurrentProcess@0 588IoGetDeviceAttachmentBaseRef@4 589IoGetDeviceInterfaceAlias@12 590IoGetDeviceInterfaces@16 591IoGetDeviceNumaNode@8 592IoGetDeviceObjectPointer@16 593IoGetDeviceProperty@20 594IoGetDevicePropertyData@32 595IoGetDeviceToVerify@4 596IoGetDiskDeviceObject@8 597IoGetDmaAdapter@12 598IoGetDriverObjectExtension@8 599IoGetFileObjectGenericMapping@0 600IoGetInitialStack@0 601IoGetIoPriorityHint@4 602IoGetIrpExtraCreateParameter@8 603IoGetLowerDeviceObject@4 604IoGetOplockKeyContext@4 605IoGetRelatedDeviceObject@4 606IoGetRequestorProcess@4 607IoGetRequestorProcessId@4 608IoGetRequestorSessionId@8 609IoGetSfioStreamIdentifier@8 610IoGetStackLimits@8 611IoGetSymlinkSupportInformation@8 612IoGetTopLevelIrp@0 613IoGetTransactionParameterBlock@4 614IoInitializeIrp@12 615IoInitializeRemoveLockEx@20 616IoInitializeTimer@12 617IoInitializeWorkItem@8 618IoInvalidateDeviceRelations@8 619IoInvalidateDeviceState@4 620IoIsFileObjectIgnoringSharing@4 621IoIsFileOriginRemote@4 622IoIsOperationSynchronous@4 623IoIsSystemThread@4 624IoIsValidNameGraftingBuffer@8 625IoIsWdmVersionAvailable@8 626IoMakeAssociatedIrp@8 627IoOpenDeviceInterfaceRegistryKey@12 628IoOpenDeviceRegistryKey@16 629IoPageRead@20 630IoQueryDeviceDescription@32 631IoQueryFileDosDeviceName@8 632IoQueryFileInformation@20 633IoQueryVolumeInformation@20 634IoQueueThreadIrp@4 635IoQueueWorkItem@16 636IoQueueWorkItemEx@16 637IoRaiseHardError@12 638IoRaiseInformationalHardError@12 639IoReadDiskSignature@12 640IoReadOperationCount DATA 641IoReadPartitionTableEx@8 642IoReadTransferCount DATA 643IoRegisterBootDriverReinitialization@12 644IoRegisterContainerNotification@20 645IoRegisterDeviceInterface@16 646IoRegisterDriverReinitialization@12 647IoRegisterFileSystem@4 648IoRegisterFsRegistrationChange@8 649IoRegisterFsRegistrationChangeMountAware@12 650IoRegisterLastChanceShutdownNotification@4 651IoRegisterPlugPlayNotification@28 652IoRegisterPriorityCallback@8 653IoRegisterShutdownNotification@4 654IoReleaseCancelSpinLock@4 655IoReleaseRemoveLockAndWaitEx@12 656IoReleaseRemoveLockEx@12 657IoReleaseVpbSpinLock@4 658IoRemoveShareAccess@8 659IoReplaceFileObjectName@12 660IoReplacePartitionUnit@12 661IoReportDetectedDevice@32 662IoReportHalResourceUsage@16 663IoReportResourceForDetection@28 664IoReportResourceUsage@36 665IoReportRootDevice@4 666IoReportTargetDeviceChange@8 667IoReportTargetDeviceChangeAsynchronous@16 668IoRequestDeviceEject@4 669IoRequestDeviceEjectEx@16 670IoRetrievePriorityInfo@16 671IoReuseIrp@8 672IoSetCompletionRoutineEx@28 673IoSetDependency@8 674IoSetDeviceInterfaceState@8 675IoSetDevicePropertyData@28 676IoSetDeviceToVerify@8 677IoSetFileObjectIgnoreSharing@4 678IoSetFileOrigin@8 679IoSetHardErrorOrVerifyDevice@8 680IoSetInformation@16 681IoSetIoCompletion@24 682IoSetIoCompletionEx@28 683IoSetIoPriorityHint@8 684IoSetIoPriorityHintIntoFileObject@8 685IoSetIoPriorityHintIntoThread@8 686IoSetIrpExtraCreateParameter@8 687IoSetOplockKeyContext@12 688IoSetPartitionInformationEx@12 689IoSetShareAccess@16 690IoSetShareAccessEx@20 691IoSetStartIoAttributes@12 692IoSetSystemPartition@4 693IoSetThreadHardErrorMode@4 694IoSetTopLevelIrp@4 695IoSizeofWorkItem@0 696IoStartNextPacket@8 697IoStartNextPacketByKey@12 698IoStartPacket@16 699IoStartTimer@4 700IoStatisticsLock DATA 701IoStopTimer@4 702IoSynchronousInvalidateDeviceRelations@8 703IoSynchronousPageWrite@20 704IoThreadToProcess@4 705IoTranslateBusAddress@24 706IoUninitializeWorkItem@4 707IoUnregisterContainerNotification@4 708IoUnregisterFileSystem@4 709IoUnregisterFsRegistrationChange@8 710IoUnregisterPlugPlayNotification@4 711IoUnregisterPlugPlayNotificationEx@4 712IoUnregisterPriorityCallback@4 713IoUnregisterShutdownNotification@4 714IoUpdateShareAccess@8 715IoValidateDeviceIoControlAccess@8 716IoVerifyPartitionTable@8 717IoVerifyVolume@8 718IoVolumeDeviceToDosName@8 719IoWMIAllocateInstanceIds@12 720IoWMIDeviceObjectToInstanceName@12 721IoWMIExecuteMethod@24 722IoWMIHandleToInstanceName@12 723IoWMIOpenBlock@12 724IoWMIQueryAllData@12 725IoWMIQueryAllDataMultiple@16 726IoWMIQuerySingleInstance@16 727IoWMIQuerySingleInstanceMultiple@20 728IoWMIRegistrationControl@8 729IoWMISetNotificationCallback@12 730IoWMISetSingleInstance@20 731IoWMISetSingleItem@24 732IoWMISuggestInstanceName@16 733IoWMIWriteEvent@4 734IoWithinStackLimits@8 735IoWriteErrorLogEntry@4 736IoWriteOperationCount DATA 737IoWritePartitionTableEx@8 738IoWriteTransferCount DATA 739KdChangeOption@24 740KdDebuggerEnabled DATA 741KdDebuggerNotPresent DATA 742KdDisableDebugger@0 743KdEnableDebugger@0 744KdEnteredDebugger DATA 745KdPollBreakIn@0 746KdPowerTransition@4 747KdRefreshDebuggerNotPresent@0 748KdSystemDebugControl@28 749Ke386CallBios@8 750Ke386IoSetAccessProcess@8 751Ke386QueryIoAccessMap@8 752Ke386SetIoAccessMap@8 753KeAcquireInterruptSpinLock@4 754KeAcquireSpinLockAtDpcLevel@4 755KeAddGroupAffinityEx@12 756KeAddProcessorAffinityEx@8 757KeAddProcessorGroupAffinity@8 758KeAddSystemServiceTable@20 759KeAlertThread@8 760KeAllocateCalloutStack@4 761KeAllocateCalloutStackEx@16 762KeAndAffinityEx@12 763KeAndGroupAffinityEx@12 764KeAreAllApcsDisabled@0 765KeAreApcsDisabled@0 766KeAttachProcess@4 767KeBugCheck@4 768KeBugCheckEx@20 769KeCancelTimer@4 770KeCapturePersistentThreadState@32 771KeCheckProcessorAffinityEx@8 772KeCheckProcessorGroupAffinity@8 773KeClearEvent@4 774KeComplementAffinityEx@8 775KeCopyAffinityEx@8 776KeCountSetBitsAffinityEx@4 777KeCountSetBitsGroupAffinity@4 778KeDelayExecutionThread@12 779KeDeregisterBugCheckCallback@4 780KeDeregisterBugCheckReasonCallback@4 781KeDeregisterNmiCallback@4 782KeDeregisterProcessorChangeCallback@4 783KeDetachProcess@0 784KeEnterCriticalRegion@0 785KeEnterGuardedRegion@0 786KeEnterKernelDebugger@0 787KeEnumerateNextProcessor@8 788KeExpandKernelStackAndCallout@12 789KeExpandKernelStackAndCalloutEx@20 790KeFindConfigurationEntry@16 791KeFindConfigurationNextEntry@20 792KeFindFirstSetLeftAffinityEx@4 793KeFindFirstSetLeftGroupAffinity@4 794KeFindFirstSetRightGroupAffinity@4 795KeFirstGroupAffinityEx@8 796KeFlushEntireTb@8 797KeFlushQueuedDpcs@0 798KeFreeCalloutStack@4 799KeGenericCallDpc@8 800KeGetCurrentNodeNumber@0 801KeGetCurrentProcessorNumberEx@4 802KeGetCurrentThread@0 803KeGetPreviousMode@0 804KeGetProcessorIndexFromNumber@4 805KeGetProcessorNumberFromIndex@8 806KeGetRecommendedSharedDataAlignment@0 807KeGetXSaveFeatureFlags@0 808KeI386AbiosCall@16 809KeI386AllocateGdtSelectors@8 810KeI386Call16BitCStyleFunction@0 811KeI386Call16BitFunction@0 812KeI386FlatToGdtSelector@12 813KeI386GetLid@20 814KeI386MachineType DATA 815KeI386ReleaseGdtSelectors@8 816KeI386ReleaseLid@8 817KeI386SetGdtSelector@8 818KeInitializeAffinityEx@4 819KeInitializeApc@32 820KeInitializeCrashDumpHeader@20 821KeInitializeDeviceQueue@4 822KeInitializeDpc@12 823KeInitializeEnumerationContext@8 824KeInitializeEnumerationContextFromGroup@8 825KeInitializeEvent@12 826KeInitializeInterrupt@52 827KeInitializeMutant@8 828KeInitializeMutex@8 829KeInitializeQueue@8 830KeInitializeSemaphore@12 831KeInitializeSpinLock@4 832KeInitializeThreadedDpc@12 833KeInitializeTimer@4 834KeInitializeTimerEx@8 835KeInsertByKeyDeviceQueue@12 836KeInsertDeviceQueue@8 837KeInsertHeadQueue@8 838KeInsertQueue@8 839KeInsertQueueApc@16 840KeInsertQueueDpc@12 841KeInterlockedClearProcessorAffinityEx@8 842KeInterlockedSetProcessorAffinityEx@8 843KeInvalidateAllCaches@0 844KeIpiGenericCall@8 845KeIsAttachedProcess@0 846KeIsEmptyAffinityEx@4 847KeIsEqualAffinityEx@8 848KeIsExecutingDpc@0 849KeIsSingleGroupAffinityEx@8 850KeIsSubsetAffinityEx@8 851KeIsWaitListEmpty@4 852KeLeaveCriticalRegion@0 853KeLeaveGuardedRegion@0 854KeLoaderBlock DATA 855KeNumberProcessors DATA 856KeOrAffinityEx@12 857KePollFreezeExecution@0 858KeProcessorGroupAffinity@8 859KeProfileInterrupt@8 860KeProfileInterruptWithSource@8 861KePulseEvent@12 862KeQueryActiveGroupCount@0 863KeQueryActiveProcessorAffinity@4 864KeQueryActiveProcessorCount@4 865KeQueryActiveProcessorCountEx@4 866KeQueryActiveProcessors@0 867KeQueryDpcWatchdogInformation@4 868KeQueryGroupAffinity@4 869KeQueryGroupAffinityEx@8 870KeQueryHardwareCounterConfiguration@12 871KeQueryHighestNodeNumber@0 872KeQueryInterruptTime@0 873KeQueryLogicalProcessorRelationship@16 874KeQueryMaximumGroupCount@0 875KeQueryMaximumProcessorCount@0 876KeQueryMaximumProcessorCountEx@4 877KeQueryNodeActiveAffinity@12 878KeQueryNodeMaximumProcessorCount@4 879KeQueryPriorityThread@4 880KeQueryRuntimeThread@8 881KeQuerySystemTime@4 882KeQueryTickCount@4 883KeQueryTimeIncrement@0 884KeQueryUnbiasedInterruptTime@0 885KeRaiseUserException@4 886KeReadStateEvent@4 887KeReadStateMutant@4 888KeReadStateMutex@4 889KeReadStateQueue@4 890KeReadStateSemaphore@4 891KeReadStateTimer@4 892KeRegisterBugCheckCallback@20 893KeRegisterBugCheckReasonCallback@16 894KeRegisterNmiCallback@8 895KeRegisterProcessorChangeCallback@12 896KeReleaseInterruptSpinLock@8 897KeReleaseMutant@16 898KeReleaseMutex@8 899KeReleaseSemaphore@16 900KeReleaseSpinLockFromDpcLevel@4 901KeRemoveByKeyDeviceQueue@8 902KeRemoveByKeyDeviceQueueIfBusy@8 903KeRemoveDeviceQueue@4 904KeRemoveEntryDeviceQueue@8 905KeRemoveGroupAffinityEx@12 906KeRemoveProcessorAffinityEx@8 907KeRemoveProcessorGroupAffinity@8 908KeRemoveQueue@12 909KeRemoveQueueDpc@4 910KeRemoveQueueEx@24 911KeRemoveSystemServiceTable@4 912KeResetEvent@4 913KeRestoreExtendedProcessorState@4 914KeRestoreFloatingPointState@4 915KeRevertToUserAffinityThread@0 916KeRevertToUserAffinityThreadEx@4 917KeRevertToUserGroupAffinityThread@4 918KeRundownQueue@4 919KeSaveExtendedProcessorState@12 920KeSaveFloatingPointState@4 921KeSaveStateForHibernate@0 922KeServiceDescriptorTable DATA 923KeSetActualBasePriorityThread@8 924KeSetAffinityThread@8 925KeSetBasePriorityThread@8 926KeSetCoalescableTimer@24 927KeSetDmaIoCoherency@4 928KeSetEvent@12 929KeSetEventBoostPriority@8 930KeSetHardwareCounterConfiguration@8 931KeSetIdealProcessorThread@8 932KeSetImportanceDpc@8 933KeSetKernelStackSwapEnable@4 934KeSetPriorityThread@8 935KeSetProfileIrql@4 936KeSetSystemAffinityThread@4 937KeSetSystemAffinityThreadEx@4 938KeSetSystemGroupAffinityThread@8 939KeSetTargetProcessorDpc@8 940KeSetTargetProcessorDpcEx@8 941KeSetTimeIncrement@8 942KeSetTimer@16 943KeSetTimerEx@20 944KeSignalCallDpcDone@4 945KeSignalCallDpcSynchronize@4 946KeStackAttachProcess@8 947KeStartDynamicProcessor@16 948KeSubtractAffinityEx@12 949KeSynchronizeExecution@12 950KeTestAlertThread@4 951KeTickCount DATA 952KeUnstackDetachProcess@4 953KeUpdateSystemTime@0 954KeUserModeCallback@20 955KeWaitForMultipleObjects@32 956KeWaitForMutexObject@20 957KeWaitForSingleObject@20 958KiBugCheckData DATA 959KiCheckForKernelApcDelivery@0 960KiCoprocessorError@0 961KiDeliverApc@12 962KiDispatchInterrupt@0 963KiIpiServiceRoutine@8 964;KiUnexpectedInterrupt ; Check!!! Couldn't determine function argument count. Function doesn't return. 965LdrAccessResource@16 966LdrEnumResources@20 967LdrFindResourceDirectory_U@16 968LdrFindResourceEx_U@20 969LdrFindResource_U@16 970LdrResFindResource@36 971LdrResFindResourceDirectory@28 972LdrResSearchResource@32 973LpcPortObjectType DATA 974LpcReplyWaitReplyPort@12 975LpcRequestPort@8 976LpcRequestWaitReplyPort@12 977LpcRequestWaitReplyPortEx@12 978LpcSendWaitReceivePort@28 979LsaCallAuthenticationPackage@28 980LsaDeregisterLogonProcess@4 981LsaFreeReturnBuffer@4 982LsaLogonUser@56 983LsaLookupAuthenticationPackage@12 984LsaRegisterLogonProcess@12 985Mm64BitPhysicalAddress DATA 986MmAddPhysicalMemory@8 987MmAddVerifierThunks@8 988MmAdjustWorkingSetSize@16 989MmAdvanceMdl@8 990MmAllocateContiguousMemory@12 991MmAllocateContiguousMemorySpecifyCache@32 992MmAllocateContiguousMemorySpecifyCacheNode@36 993MmAllocateMappingAddress@8 994MmAllocateNonCachedMemory@4 995MmAllocatePagesForMdl@28 996MmAllocatePagesForMdlEx@36 997MmBadPointer DATA 998MmBuildMdlForNonPagedPool@4 999MmCanFileBeTruncated@8 1000MmCommitSessionMappedView@8 1001MmCopyVirtualMemory@28 1002MmCreateMdl@12 1003MmCreateMirror@0 1004MmCreateSection@32 1005MmDisableModifiedWriteOfSection@4 1006MmDoesFileHaveUserWritableReferences@4 1007MmFlushImageSection@8 1008MmForceSectionClosed@8 1009MmFreeContiguousMemory@4 1010MmFreeContiguousMemorySpecifyCache@12 1011MmFreeMappingAddress@8 1012MmFreeNonCachedMemory@8 1013MmFreePagesFromMdl@4 1014MmGetPhysicalAddress@4 1015MmGetPhysicalMemoryRanges@0 1016MmGetSystemRoutineAddress@4 1017MmGetVirtualForPhysical@8 1018MmGrowKernelStack@4 1019MmHighestUserAddress DATA 1020MmIsAddressValid@4 1021MmIsDriverVerifying@4 1022MmIsDriverVerifyingByAddress@4 1023MmIsIoSpaceActive@12 1024MmIsNonPagedSystemAddressValid@4 1025MmIsRecursiveIoFault@0 1026MmIsThisAnNtAsSystem@0 1027MmIsVerifierEnabled@4 1028MmLockPagableDataSection@4 1029MmLockPagableImageSection@4 1030MmLockPagableSectionByHandle@4 1031MmMapIoSpace@16 1032MmMapLockedPages@8 1033MmMapLockedPagesSpecifyCache@24 1034MmMapLockedPagesWithReservedMapping@16 1035MmMapMemoryDumpMdl@4 1036MmMapUserAddressesToPage@12 1037MmMapVideoDisplay@16 1038MmMapViewInSessionSpace@12 1039MmMapViewInSystemSpace@12 1040MmMapViewOfSection@40 1041MmMarkPhysicalMemoryAsBad@8 1042MmMarkPhysicalMemoryAsGood@8 1043MmPageEntireDriver@4 1044MmPrefetchPages@8 1045MmProbeAndLockPages@12 1046MmProbeAndLockProcessPages@16 1047MmProbeAndLockSelectedPages@16 1048MmProtectMdlSystemAddress@8 1049MmQuerySystemSize@0 1050MmRemovePhysicalMemory@8 1051MmResetDriverPaging@4 1052MmRotatePhysicalView@24 1053MmSectionObjectType DATA 1054MmSecureVirtualMemory@12 1055MmSetAddressRangeModified@8 1056MmSetBankedSection@24 1057MmSizeOfMdl@8 1058MmSystemRangeStart DATA 1059MmTrimAllSystemPagableMemory@4 1060MmUnlockPagableImageSection@4 1061MmUnlockPages@4 1062MmUnmapIoSpace@8 1063MmUnmapLockedPages@8 1064MmUnmapReservedMapping@12 1065MmUnmapVideoDisplay@8 1066MmUnmapViewInSessionSpace@4 1067MmUnmapViewInSystemSpace@4 1068MmUnmapViewOfSection@8 1069MmUnsecureVirtualMemory@4 1070MmUserProbeAddress DATA 1071NlsAnsiCodePage DATA 1072NlsLeadByteInfo DATA 1073NlsMbCodePageTag DATA 1074NlsMbOemCodePageTag DATA 1075NlsOemCodePage DATA 1076NlsOemLeadByteInfo DATA 1077NtAddAtom@12 1078NtAdjustPrivilegesToken@24 1079NtAllocateLocallyUniqueId@4 1080NtAllocateUuids@16 1081NtAllocateVirtualMemory@24 1082NtBuildGUID@0 1083NtBuildLab@0 1084NtBuildNumber@0 1085NtClose@4 1086NtCommitComplete@8 1087NtCommitEnlistment@8 1088NtCommitTransaction@8 1089NtConnectPort@32 1090NtCreateEnlistment@32 1091NtCreateEvent@20 1092NtCreateFile@44 1093NtCreateResourceManager@28 1094NtCreateSection@28 1095NtCreateTransaction@40 1096NtCreateTransactionManager@24 1097NtDeleteAtom@4 1098NtDeleteFile@4 1099NtDeviceIoControlFile@40 1100NtDuplicateObject@28 1101NtDuplicateToken@24 1102NtEnumerateTransactionObject@20 1103NtFindAtom@12 1104NtFreeVirtualMemory@16 1105NtFreezeTransactions@8 1106NtFsControlFile@40 1107NtGetEnvironmentVariableEx@20 1108NtGetNotificationResourceManager@28 1109NtGlobalFlag DATA 1110NtLockFile@40 1111NtMakePermanentObject@4 1112NtMapViewOfSection@40 1113NtNotifyChangeDirectoryFile@36 1114NtOpenEnlistment@20 1115NtOpenFile@24 1116NtOpenProcess@16 1117NtOpenProcessToken@12 1118NtOpenProcessTokenEx@16 1119NtOpenResourceManager@20 1120NtOpenThread@16 1121NtOpenThreadToken@16 1122NtOpenThreadTokenEx@20 1123NtOpenTransaction@20 1124NtOpenTransactionManager@24 1125NtPrePrepareComplete@8 1126NtPrePrepareEnlistment@8 1127NtPrepareComplete@8 1128NtPrepareEnlistment@8 1129NtPropagationComplete@16 1130NtPropagationFailed@12 1131NtQueryDirectoryFile@44 1132NtQueryEaFile@36 1133NtQueryEnvironmentVariableInfoEx@16 1134NtQueryInformationAtom@20 1135NtQueryInformationEnlistment@20 1136NtQueryInformationFile@20 1137NtQueryInformationProcess@20 1138NtQueryInformationResourceManager@20 1139NtQueryInformationThread@20 1140NtQueryInformationToken@20 1141NtQueryInformationTransaction@20 1142NtQueryInformationTransactionManager@20 1143NtQueryQuotaInformationFile@36 1144NtQuerySecurityAttributesToken@24 1145NtQuerySecurityObject@20 1146NtQuerySystemInformation@16 1147NtQuerySystemInformationEx@24 1148NtQueryVolumeInformationFile@20 1149NtReadFile@36 1150NtReadOnlyEnlistment@8 1151NtRecoverEnlistment@8 1152NtRecoverResourceManager@4 1153NtRecoverTransactionManager@4 1154NtRequestPort@8 1155NtRequestWaitReplyPort@12 1156NtRollbackComplete@8 1157NtRollbackEnlistment@8 1158NtRollbackTransaction@8 1159NtSetEaFile@16 1160NtSetEvent@8 1161NtSetInformationEnlistment@16 1162NtSetInformationFile@20 1163NtSetInformationProcess@16 1164NtSetInformationResourceManager@16 1165NtSetInformationThread@16 1166NtSetInformationToken@16 1167NtSetInformationTransaction@16 1168NtSetQuotaInformationFile@16 1169NtSetSecurityObject@12 1170NtSetVolumeInformationFile@20 1171NtShutdownSystem@4 1172NtThawTransactions@0 1173NtTraceControl@24 1174NtTraceEvent@16 1175NtUnlockFile@20 1176NtVdmControl@8 1177NtWaitForSingleObject@12 1178NtWriteFile@36 1179ObAssignSecurity@16 1180ObCheckCreateObjectAccess@28 1181ObCheckObjectAccess@20 1182ObCloseHandle@8 1183ObCreateObject@36 1184ObCreateObjectType@16 1185ObDeleteCapturedInsertInfo@4 1186ObDereferenceObject@4 1187ObDereferenceObjectDeferDelete@4 1188ObDereferenceObjectDeferDeleteWithTag@8 1189ObDereferenceSecurityDescriptor@8 1190ObFindHandleForObject@20 1191ObGetFilterVersion@0 1192ObGetObjectSecurity@12 1193ObGetObjectType@4 1194ObInsertObject@24 1195ObIsDosDeviceLocallyMapped@8 1196ObIsKernelHandle@4 1197ObLogSecurityDescriptor@12 1198ObMakeTemporaryObject@4 1199ObOpenObjectByName@28 1200ObOpenObjectByPointer@28 1201ObOpenObjectByPointerWithTag@32 1202ObQueryNameInfo@4 1203ObQueryNameString@16 1204ObQueryObjectAuditingByHandle@8 1205ObReferenceObjectByHandle@24 1206ObReferenceObjectByHandleWithTag@28 1207ObReferenceObjectByName@32 1208ObReferenceObjectByPointer@16 1209ObReferenceObjectByPointerWithTag@20 1210ObReferenceSecurityDescriptor@8 1211ObRegisterCallbacks@8 1212ObReleaseObjectSecurity@8 1213ObSetHandleAttributes@12 1214ObSetSecurityDescriptorInfo@24 1215ObSetSecurityObjectByPointer@12 1216ObUnRegisterCallbacks@4 1217POGOBuffer DATA 1218PcwAddInstance@20 1219PcwCloseInstance@4 1220PcwCreateInstance@20 1221PcwRegister@8 1222PcwUnregister@4 1223PfFileInfoNotify@4 1224PfxFindPrefix@8 1225PfxInitialize@4 1226PfxInsertPrefix@12 1227PfxRemovePrefix@8 1228PoCallDriver@8 1229PoCancelDeviceNotify@4 1230PoClearPowerRequest@8 1231PoCreatePowerRequest@12 1232PoDeletePowerRequest@4 1233PoDisableSleepStates@12 1234PoEndDeviceBusy@4 1235PoGetSystemWake@4 1236PoQueryWatchdogTime@8 1237PoQueueShutdownWorkItem@4 1238PoReenableSleepStates@4 1239PoRegisterDeviceForIdleDetection@16 1240PoRegisterDeviceNotify@24 1241PoRegisterPowerSettingCallback@20 1242PoRegisterSystemState@8 1243PoRequestPowerIrp@24 1244PoRequestShutdownEvent@4 1245PoSetDeviceBusyEx@4 1246PoSetFixedWakeSource@4 1247PoSetHiberRange@20 1248PoSetPowerRequest@8 1249PoSetPowerState@12 1250PoSetSystemState@4 1251PoSetSystemWake@4 1252PoShutdownBugCheck@4 1253PoStartDeviceBusy@4 1254PoStartNextPowerIrp@4 1255PoUnregisterPowerSettingCallback@4 1256PoUnregisterSystemState@4 1257PoUserShutdownInitiated@0 1258ProbeForRead@12 1259ProbeForWrite@12 1260PsCreateSystemProcess@12 1261PsAcquireProcessExitSynchronization@4 1262PsAssignImpersonationToken@8 1263PsChargePoolQuota@12 1264PsChargeProcessCpuCycles@12 1265PsChargeProcessNonPagedPoolQuota@8 1266PsChargeProcessPagedPoolQuota@8 1267PsChargeProcessPoolQuota@12 1268PsCreateSystemThread@28 1269PsDereferenceImpersonationToken@4 1270PsDereferencePrimaryToken@4 1271PsDisableImpersonation@8 1272PsEnterPriorityRegion@0 1273PsEstablishWin32Callouts@4 1274PsGetContextThread@12 1275PsGetCurrentProcess@0 1276PsGetCurrentProcessId@0 1277PsGetCurrentProcessSessionId@0 1278PsGetCurrentProcessWin32Process@0 1279PsGetCurrentThread@0 1280PsGetCurrentThreadId@0 1281PsGetCurrentThreadPreviousMode@0 1282PsGetCurrentThreadProcess@0 1283PsGetCurrentThreadProcessId@0 1284PsGetCurrentThreadStackBase@0 1285PsGetCurrentThreadStackLimit@0 1286PsGetCurrentThreadTeb@0 1287PsGetCurrentThreadWin32Thread@0 1288PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion@4 1289PsGetJobLock@4 1290PsGetJobSessionId@4 1291PsGetJobUIRestrictionsClass@4 1292PsGetProcessCreateTimeQuadPart@4 1293PsGetProcessDebugPort@4 1294PsGetProcessExitProcessCalled@4 1295PsGetProcessExitStatus@4 1296PsGetProcessExitTime@0 1297PsGetProcessId@4 1298PsGetProcessImageFileName@4 1299PsGetProcessInheritedFromUniqueProcessId@4 1300PsGetProcessJob@4 1301PsGetProcessPeb@4 1302PsGetProcessPriorityClass@4 1303PsGetProcessSectionBaseAddress@4 1304PsGetProcessSecurityPort@4 1305PsGetProcessSessionId@4 1306PsGetProcessSessionIdEx@4 1307PsGetProcessWin32Process@4 1308PsGetProcessWin32WindowStation@4 1309PsGetThreadFreezeCount@4 1310PsGetThreadHardErrorsAreDisabled@4 1311PsGetThreadId@4 1312PsGetThreadProcess@4 1313PsGetThreadProcessId@4 1314PsGetThreadSessionId@4 1315PsGetThreadTeb@4 1316PsGetThreadWin32Thread@4 1317PsGetVersion@16 1318PsImpersonateClient@20 1319PsInitialSystemProcess DATA 1320PsIsCurrentThreadPrefetching@0 1321PsIsProcessBeingDebugged@4 1322PsIsProtectedProcess@4 1323PsIsSystemProcess@4 1324PsIsSystemThread@4 1325PsIsThreadImpersonating@4 1326PsIsThreadTerminating@4 1327PsJobType DATA 1328PsLeavePriorityRegion@0 1329PsLookupProcessByProcessId@8 1330PsLookupProcessThreadByCid@12 1331PsLookupThreadByThreadId@8 1332PsProcessType DATA 1333PsQueryProcessExceptionFlags@12 1334PsReferenceImpersonationToken@16 1335PsReferencePrimaryToken@4 1336PsReferenceProcessFilePointer@8 1337PsReleaseProcessExitSynchronization@4 1338PsRemoveCreateThreadNotifyRoutine@4 1339PsRemoveLoadImageNotifyRoutine@4 1340PsRestoreImpersonation@8 1341PsResumeProcess@4 1342PsReturnPoolQuota@12 1343PsReturnProcessNonPagedPoolQuota@8 1344PsReturnProcessPagedPoolQuota@8 1345PsRevertThreadToSelf@4 1346PsRevertToSelf@0 1347PsSetContextThread@12 1348PsSetCreateProcessNotifyRoutine@8 1349PsSetCreateProcessNotifyRoutineEx@8 1350PsSetCreateThreadNotifyRoutine@4 1351PsSetCurrentThreadPrefetching@4 1352PsSetJobUIRestrictionsClass@8 1353PsSetLegoNotifyRoutine@4 1354PsSetLoadImageNotifyRoutine@4 1355PsSetProcessPriorityByClass@8 1356PsSetProcessPriorityClass@8 1357PsSetProcessSecurityPort@8 1358PsSetProcessWin32Process@12 1359PsSetProcessWindowStation@8 1360PsSetThreadHardErrorsAreDisabled@8 1361PsSetThreadWin32Thread@12 1362PsSuspendProcess@4 1363PsTerminateSystemThread@4 1364PsThreadType DATA 1365PsUILanguageComitted DATA 1366PsWrapApcWow64Thread@8 1367READ_REGISTER_BUFFER_UCHAR@12 1368READ_REGISTER_BUFFER_ULONG@12 1369READ_REGISTER_BUFFER_USHORT@12 1370READ_REGISTER_UCHAR@4 1371READ_REGISTER_ULONG@4 1372READ_REGISTER_USHORT@4 1373RtlAbsoluteToSelfRelativeSD@12 1374RtlAddAccessAllowedAce@16 1375RtlAddAccessAllowedAceEx@20 1376RtlAddAce@20 1377RtlAddAtomToAtomTable@12 1378RtlAddRange@36 1379RtlAllocateHeap@12 1380RtlAnsiCharToUnicodeChar@4 1381RtlAnsiStringToUnicodeSize@4 1382RtlAnsiStringToUnicodeString@12 1383RtlAppendAsciizToString@8 1384RtlAppendStringToString@8 1385RtlAppendUnicodeStringToString@8 1386RtlAppendUnicodeToString@8 1387RtlAreAllAccessesGranted@8 1388RtlAreAnyAccessesGranted@8 1389RtlAreBitsClear@12 1390RtlAreBitsSet@12 1391RtlAssert@16 1392RtlCaptureContext@4 1393RtlCaptureStackBackTrace@16 1394RtlCharToInteger@12 1395RtlCheckRegistryKey@8 1396RtlClearAllBits@4 1397RtlClearBit@8 1398RtlClearBits@12 1399RtlCmDecodeMemIoResource@8 1400RtlCmEncodeMemIoResource@24 1401RtlCompareAltitudes@8 1402RtlCompareMemory@12 1403RtlCompareMemoryUlong@12 1404RtlCompareString@12 1405RtlCompareUnicodeString@12 1406RtlCompareUnicodeStrings@20 1407RtlCompressBuffer@32 1408RtlCompressChunks@28 1409RtlComputeCrc32@12 1410RtlContractHashTable@4 1411RtlConvertLongToLargeInteger@4 1412RtlConvertSidToUnicodeString@12 1413RtlConvertUlongToLargeInteger@4 1414RtlCopyLuid@8 1415RtlCopyLuidAndAttributesArray@12 1416RtlCopyRangeList@8 1417RtlCopySid@12 1418RtlCopySidAndAttributesArray@28 1419RtlCopyString@8 1420RtlCopyUnicodeString@8 1421RtlCreateAcl@12 1422RtlCreateAtomTable@8 1423RtlCreateHashTable@12 1424RtlCreateHeap@24 1425RtlCreateRegistryKey@8 1426RtlCreateSecurityDescriptor@8 1427RtlCreateSystemVolumeInformationFolder@4 1428RtlCreateUnicodeString@8 1429RtlCustomCPToUnicodeN@24 1430RtlDecompressBuffer@24 1431RtlDecompressChunks@28 1432RtlDecompressFragment@32 1433RtlDelete@4 1434RtlDeleteAce@8 1435RtlDeleteAtomFromAtomTable@8 1436RtlDeleteElementGenericTable@8 1437RtlDeleteElementGenericTableAvl@8 1438RtlDeleteHashTable@4 1439RtlDeleteNoSplay@8 1440RtlDeleteOwnersRanges@8 1441RtlDeleteRange@24 1442RtlDeleteRegistryValue@12 1443RtlDescribeChunk@20 1444RtlDestroyAtomTable@4 1445RtlDestroyHeap@4 1446RtlDowncaseUnicodeChar@4 1447RtlDowncaseUnicodeString@12 1448RtlDuplicateUnicodeString@12 1449RtlEmptyAtomTable@8 1450RtlEndEnumerationHashTable@8 1451RtlEndWeakEnumerationHashTable@8 1452RtlEnlargedIntegerMultiply@8 1453RtlEnlargedUnsignedDivide@16 1454RtlEnlargedUnsignedMultiply@8 1455RtlEnumerateEntryHashTable@8 1456RtlEnumerateGenericTable@8 1457RtlEnumerateGenericTableAvl@8 1458RtlEnumerateGenericTableLikeADirectory@28 1459RtlEnumerateGenericTableWithoutSplaying@8 1460RtlEnumerateGenericTableWithoutSplayingAvl@8 1461RtlEqualLuid@8 1462RtlEqualSid@8 1463RtlEqualString@12 1464RtlEqualUnicodeString@12 1465RtlEthernetAddressToStringA@8 1466RtlEthernetAddressToStringW@8 1467RtlEthernetStringToAddressA@12 1468RtlEthernetStringToAddressW@12 1469RtlExpandHashTable@4 1470RtlExtendedIntegerMultiply@12 1471RtlExtendedLargeIntegerDivide@16 1472RtlExtendedMagicDivide@20 1473RtlFillMemory@12 1474RtlFillMemoryUlong@12 1475RtlFillMemoryUlonglong@16 1476RtlFindAceByType@12 1477RtlFindClearBits@12 1478RtlFindClearBitsAndSet@12 1479RtlFindClearRuns@16 1480RtlFindClosestEncodableLength@12 1481RtlFindFirstRunClear@8 1482RtlFindLastBackwardRunClear@12 1483RtlFindLeastSignificantBit@8 1484RtlFindLongestRunClear@8 1485RtlFindMessage@20 1486RtlFindMostSignificantBit@8 1487RtlFindNextForwardRunClear@12 1488RtlFindRange@48 1489RtlFindSetBits@12 1490RtlFindSetBitsAndClear@12 1491RtlFindUnicodePrefix@12 1492RtlFormatCurrentUserKeyPath@4 1493RtlFormatMessage@36 1494RtlFreeAnsiString@4 1495RtlFreeHeap@12 1496RtlFreeOemString@4 1497RtlFreeRangeList@4 1498RtlFreeUnicodeString@4 1499RtlGUIDFromString@8 1500RtlGenerate8dot3Name@16 1501RtlGetAce@12 1502RtlGetCallersAddress@8 1503RtlGetCompressionWorkSpaceSize@12 1504RtlGetDaclSecurityDescriptor@16 1505RtlGetDefaultCodePage@8 1506RtlGetElementGenericTable@8 1507RtlGetElementGenericTableAvl@8 1508RtlGetEnabledExtendedFeatures@8 1509RtlGetFirstRange@12 1510RtlGetGroupSecurityDescriptor@12 1511RtlGetIntegerAtom@8 1512RtlGetLastRange@12 1513RtlGetNextEntryHashTable@8 1514RtlGetNextRange@12 1515RtlGetNtGlobalFlags@0 1516RtlGetOwnerSecurityDescriptor@12 1517RtlGetProductInfo@20 1518RtlGetSaclSecurityDescriptor@16 1519RtlGetSetBootStatusData@24 1520RtlGetThreadLangIdByIndex@16 1521RtlGetVersion@4 1522RtlHashUnicodeString@16 1523RtlIdnToAscii@20 1524RtlIdnToNameprepUnicode@20 1525RtlIdnToUnicode@20 1526RtlImageDirectoryEntryToData@16 1527RtlImageNtHeader@4 1528RtlInitAnsiString@8 1529RtlInitAnsiStringEx@8 1530RtlInitCodePageTable@8 1531RtlInitEnumerationHashTable@8 1532RtlInitString@8 1533RtlInitUnicodeString@8 1534RtlInitUnicodeStringEx@8 1535RtlInitWeakEnumerationHashTable@8 1536RtlInitializeBitMap@12 1537RtlInitializeGenericTable@20 1538RtlInitializeGenericTableAvl@20 1539RtlInitializeRangeList@4 1540RtlInitializeSid@12 1541RtlInitializeUnicodePrefix@4 1542RtlInsertElementGenericTable@16 1543RtlInsertElementGenericTableAvl@16 1544RtlInsertElementGenericTableFull@24 1545RtlInsertElementGenericTableFullAvl@24 1546RtlInsertEntryHashTable@16 1547RtlInsertUnicodePrefix@12 1548RtlInt64ToUnicodeString@16 1549RtlIntegerToChar@16 1550RtlIntegerToUnicode@16 1551RtlIntegerToUnicodeString@12 1552RtlInvertRangeList@8 1553RtlInvertRangeListEx@20 1554RtlIoDecodeMemIoResource@16 1555RtlIoEncodeMemIoResource@40 1556RtlIpv4AddressToStringA@8 1557RtlIpv4AddressToStringExA@16 1558RtlIpv4AddressToStringExW@16 1559RtlIpv4AddressToStringW@8 1560RtlIpv4StringToAddressA@16 1561RtlIpv4StringToAddressExA@16 1562RtlIpv4StringToAddressExW@16 1563RtlIpv4StringToAddressW@16 1564RtlIpv6AddressToStringA@8 1565RtlIpv6AddressToStringExA@20 1566RtlIpv6AddressToStringExW@20 1567RtlIpv6AddressToStringW@8 1568RtlIpv6StringToAddressA@12 1569RtlIpv6StringToAddressExA@16 1570RtlIpv6StringToAddressExW@16 1571RtlIpv6StringToAddressW@12 1572RtlIsGenericTableEmpty@4 1573RtlIsGenericTableEmptyAvl@4 1574RtlIsNameLegalDOS8Dot3@12 1575RtlIsNormalizedString@16 1576RtlIsNtDdiVersionAvailable@4 1577RtlIsRangeAvailable@40 1578RtlIsServicePackVersionInstalled@4 1579RtlIsValidOemCharacter@4 1580RtlLargeIntegerAdd@16 1581RtlLargeIntegerArithmeticShift@12 1582RtlLargeIntegerDivide@20 1583RtlLargeIntegerNegate@8 1584RtlLargeIntegerShiftLeft@12 1585RtlLargeIntegerShiftRight@12 1586RtlLargeIntegerSubtract@16 1587RtlLengthRequiredSid@4 1588RtlLengthSecurityDescriptor@4 1589RtlLengthSid@4 1590RtlLoadString@32 1591RtlLocalTimeToSystemTime@8 1592RtlLockBootStatusData@4 1593RtlLookupAtomInAtomTable@12 1594RtlLookupElementGenericTable@8 1595RtlLookupElementGenericTableAvl@8 1596RtlLookupElementGenericTableFull@16 1597RtlLookupElementGenericTableFullAvl@16 1598RtlLookupEntryHashTable@12 1599RtlLookupFirstMatchingElementGenericTableAvl@12 1600RtlMapGenericMask@8 1601RtlMapSecurityErrorToNtStatus@4 1602RtlMergeRangeLists@16 1603RtlMoveMemory@12 1604RtlMultiByteToUnicodeN@20 1605RtlMultiByteToUnicodeSize@12 1606RtlNextUnicodePrefix@8 1607RtlNormalizeString@20 1608RtlNtStatusToDosError@4 1609RtlNtStatusToDosErrorNoTeb@4 1610RtlNumberGenericTableElements@4 1611RtlNumberGenericTableElementsAvl@4 1612RtlNumberOfClearBits@4 1613RtlNumberOfSetBits@4 1614RtlNumberOfSetBitsUlongPtr@4 1615RtlOemStringToCountedUnicodeString@12 1616RtlOemStringToUnicodeSize@4 1617RtlOemStringToUnicodeString@12 1618RtlOemToUnicodeN@20 1619RtlOwnerAcesPresent@4 1620RtlPinAtomInAtomTable@8 1621RtlPrefixString@12 1622RtlPrefixUnicodeString@12 1623RtlQueryAtomInAtomTable@24 1624RtlQueryDynamicTimeZoneInformation@4 1625RtlQueryElevationFlags@4 1626RtlQueryModuleInformation@12 1627RtlQueryRegistryValues@20 1628RtlQueryTimeZoneInformation@4 1629RtlRaiseException@24 1630RtlRandom@4 1631RtlRandomEx@4 1632RtlRealPredecessor@4 1633RtlRealSuccessor@4 1634RtlRemoveEntryHashTable@12 1635RtlRemoveUnicodePrefix@8 1636RtlReplaceSidInSd@16 1637RtlReserveChunk@20 1638RtlRunOnceBeginInitialize@12 1639RtlRunOnceComplete@12 1640RtlRunOnceExecuteOnce@16 1641RtlRunOnceInitialize@4 1642RtlSecondsSince1970ToTime@8 1643RtlSecondsSince1980ToTime@8 1644RtlSelfRelativeToAbsoluteSD2@8 1645RtlSelfRelativeToAbsoluteSD@44 1646RtlSetAllBits@4 1647RtlSetBit@8 1648RtlSetBits@12 1649RtlSetDaclSecurityDescriptor@16 1650RtlSetDynamicTimeZoneInformation@4 1651RtlSetGroupSecurityDescriptor@12 1652RtlSetOwnerSecurityDescriptor@12 1653RtlSetSaclSecurityDescriptor@16 1654RtlSetTimeZoneInformation@4 1655RtlSidHashInitialize@12 1656RtlSidHashLookup@8 1657RtlSizeHeap@12 1658RtlSplay@4 1659RtlStringFromGUID@8 1660RtlSubAuthorityCountSid@4 1661RtlSubAuthoritySid@8 1662RtlSubtreePredecessor@4 1663RtlSubtreeSuccessor@4 1664RtlSystemTimeToLocalTime@8 1665RtlTestBit@8 1666RtlTimeFieldsToTime@8 1667RtlTimeToElapsedTimeFields@8 1668RtlTimeToSecondsSince1970@8 1669RtlTimeToSecondsSince1980@8 1670RtlTimeToTimeFields@8 1671RtlTraceDatabaseAdd@16 1672RtlTraceDatabaseCreate@20 1673RtlTraceDatabaseDestroy@4 1674RtlTraceDatabaseEnumerate@12 1675RtlTraceDatabaseFind@16 1676RtlTraceDatabaseLock@4 1677RtlTraceDatabaseUnlock@4 1678RtlTraceDatabaseValidate@4 1679RtlUTF8ToUnicodeN@20 1680RtlUnicodeStringToAnsiSize@4 1681RtlUnicodeStringToAnsiString@12 1682RtlUnicodeStringToCountedOemString@12 1683RtlUnicodeStringToInteger@12 1684RtlUnicodeStringToOemSize@4 1685RtlUnicodeStringToOemString@12 1686RtlUnicodeToCustomCPN@24 1687RtlUnicodeToMultiByteN@20 1688RtlUnicodeToMultiByteSize@12 1689RtlUnicodeToOemN@20 1690RtlUnicodeToUTF8N@20 1691RtlUnlockBootStatusData@4 1692RtlUnwind@16 1693RtlUpcaseUnicodeChar@4 1694RtlUpcaseUnicodeString@12 1695RtlUpcaseUnicodeStringToAnsiString@12 1696RtlUpcaseUnicodeStringToCountedOemString@12 1697RtlUpcaseUnicodeStringToOemString@12 1698RtlUpcaseUnicodeToCustomCPN@24 1699RtlUpcaseUnicodeToMultiByteN@20 1700RtlUpcaseUnicodeToOemN@20 1701RtlUpperChar@4 1702RtlUpperString@8 1703RtlValidRelativeSecurityDescriptor@12 1704RtlValidSecurityDescriptor@4 1705RtlValidSid@4 1706RtlValidateUnicodeString@8 1707RtlVerifyVersionInfo@16 1708RtlVolumeDeviceToDosName@8 1709RtlWalkFrameChain@12 1710RtlWeaklyEnumerateEntryHashTable@8 1711RtlWriteRegistryValue@24 1712RtlZeroHeap@8 1713RtlZeroMemory@8 1714RtlxAnsiStringToUnicodeSize@4 1715RtlxOemStringToUnicodeSize@4 1716RtlxUnicodeStringToAnsiSize@4 1717RtlxUnicodeStringToOemSize@4 1718SeAccessCheck@40 1719SeAccessCheckEx@24 1720SeAccessCheckFromState@40 1721SeAccessCheckWithHint@44 1722SeAppendPrivileges@8 1723SeAssignSecurity@28 1724SeAssignSecurityEx@36 1725SeAuditHardLinkCreation@12 1726SeAuditHardLinkCreationWithTransaction@16 1727SeAuditTransactionStateChange@12 1728SeAuditingAnyFileEventsWithContext@8 1729SeAuditingFileEvents@8 1730SeAuditingFileEventsWithContext@12 1731SeAuditingFileOrGlobalEvents@12 1732SeAuditingHardLinkEvents@8 1733SeAuditingHardLinkEventsWithContext@12 1734SeCaptureSecurityDescriptor@20 1735SeCaptureSubjectContext@4 1736SeCaptureSubjectContextEx@12 1737SeCloseObjectAuditAlarm@12 1738SeCloseObjectAuditAlarmForNonObObject@16 1739SeComputeAutoInheritByObjectType@12 1740SeCreateAccessState@16 1741SeCreateAccessStateEx@24 1742SeCreateClientSecurity@16 1743SeCreateClientSecurityFromSubjectContext@16 1744SeDeassignSecurity@4 1745SeDeleteAccessState@4 1746SeDeleteObjectAuditAlarm@8 1747SeDeleteObjectAuditAlarmWithTransaction@12 1748SeExamineSacl@24 1749SeExports DATA 1750SeFilterToken@24 1751SeFreePrivileges@4 1752SeGetLinkedToken@12 1753SeImpersonateClient@8 1754SeImpersonateClientEx@8 1755SeLocateProcessImageName@8 1756SeLockSubjectContext@4 1757SeMarkLogonSessionForTerminationNotification@4 1758SeOpenObjectAuditAlarm@36 1759SeOpenObjectAuditAlarmForNonObObject@44 1760SeOpenObjectAuditAlarmWithTransaction@40 1761SeOpenObjectForDeleteAuditAlarm@36 1762SeOpenObjectForDeleteAuditAlarmWithTransaction@40 1763SePrivilegeCheck@12 1764SePrivilegeObjectAuditAlarm@24 1765SePublicDefaultDacl DATA 1766SeQueryAuthenticationIdToken@8 1767SeQueryInformationToken@12 1768SeQuerySecurityAttributesToken@24 1769SeQuerySecurityDescriptorInfo@16 1770SeQuerySessionIdToken@8 1771SeRegisterLogonSessionTerminatedRoutine@4 1772SeReleaseSecurityDescriptor@12 1773SeReleaseSubjectContext@4 1774SeReportSecurityEvent@16 1775SeReportSecurityEventWithSubCategory@20 1776SeSetAccessStateGenericMapping@8 1777SeSetAuditParameter@16 1778SeSetSecurityAttributesToken@16 1779SeSetSecurityDescriptorInfo@24 1780SeSetSecurityDescriptorInfoEx@28 1781SeSinglePrivilegeCheck@12 1782SeSrpAccessCheck@24 1783SeSystemDefaultDacl DATA 1784SeTokenImpersonationLevel@4 1785SeTokenIsAdmin@4 1786SeTokenIsRestricted@4 1787SeTokenIsWriteRestricted@4 1788SeTokenObjectType DATA 1789SeTokenType@4 1790SeUnlockSubjectContext@4 1791SeUnregisterLogonSessionTerminatedRoutine@4 1792SeValidSecurityDescriptor@8 1793TmCancelPropagationRequest@4 1794TmCommitComplete@8 1795TmCommitEnlistment@8 1796TmCommitTransaction@8 1797TmCreateEnlistment@36 1798TmCurrentTransaction@4 1799TmDereferenceEnlistmentKey@8 1800TmEnableCallbacks@12 1801TmEndPropagationRequest@4 1802TmEnlistmentObjectType DATA 1803TmFreezeTransactions@12 1804TmGetTransactionId@8 1805TmInitSystem@0 1806TmInitSystemPhase2@0 1807TmInitializeResourceManager@20 1808TmInitializeTransaction@36 1809TmIsTransactionActive@4 1810TmPrePrepareComplete@8 1811TmPrePrepareEnlistment@8 1812TmPrepareComplete@8 1813TmPrepareEnlistment@8 1814TmPropagationComplete@16 1815TmPropagationFailed@12 1816TmReadOnlyEnlistment@8 1817TmRecoverEnlistment@8 1818TmRecoverResourceManager@4 1819TmRecoverTransactionManager@8 1820TmReferenceEnlistmentKey@8 1821TmRequestOutcomeEnlistment@8 1822TmResourceManagerObjectType DATA 1823TmRollbackComplete@8 1824TmRollbackEnlistment@8 1825TmRollbackTransaction@8 1826TmSetCurrentTransaction@4 1827TmThawTransactions@0 1828TmTransactionManagerObjectType DATA 1829TmTransactionObjectType DATA 1830TmpIsKTMCommitCoordinator@4 1831VerSetConditionMask@16 1832VfFailDeviceNode@0 1833VfFailDriver@0 1834VfFailSystemBIOS@0 1835VfIsVerificationEnabled@8 1836WRITE_REGISTER_BUFFER_UCHAR@12 1837WRITE_REGISTER_BUFFER_ULONG@12 1838WRITE_REGISTER_BUFFER_USHORT@12 1839WRITE_REGISTER_UCHAR@8 1840WRITE_REGISTER_ULONG@8 1841WRITE_REGISTER_USHORT@8 1842WheaAddErrorSource@8 1843WheaConfigureErrorSource@8 1844WheaGetErrorSource@4 1845WheaInitializeRecordHeader@4 1846WheaReportHwError@4 1847WmiQueryTraceInformation@20 1848WmiTraceMessage 1849WmiTraceMessageVa@24 1850XIPDispatch@12 1851ZwAccessCheckAndAuditAlarm@44 1852ZwAddBootEntry@8 1853ZwAddDriverEntry@8 1854ZwAdjustPrivilegesToken@24 1855ZwAlertThread@4 1856ZwAllocateLocallyUniqueId@4 1857ZwAllocateVirtualMemory@24 1858ZwAlpcAcceptConnectPort@36 1859ZwAlpcCancelMessage@12 1860ZwAlpcConnectPort@44 1861ZwAlpcCreatePort@12 1862ZwAlpcCreatePortSection@24 1863ZwAlpcCreateResourceReserve@16 1864ZwAlpcCreateSectionView@12 1865ZwAlpcCreateSecurityContext@12 1866ZwAlpcDeletePortSection@12 1867ZwAlpcDeleteResourceReserve@12 1868ZwAlpcDeleteSectionView@12 1869ZwAlpcDeleteSecurityContext@12 1870ZwAlpcDisconnectPort@8 1871ZwAlpcQueryInformation@20 1872ZwAlpcSendWaitReceivePort@32 1873ZwAlpcSetInformation@16 1874ZwAssignProcessToJobObject@8 1875ZwCancelIoFile@8 1876ZwCancelTimer@8 1877ZwClearEvent@4 1878ZwClose@4 1879ZwCloseObjectAuditAlarm@12 1880ZwCommitComplete@8 1881ZwCommitEnlistment@8 1882ZwCommitTransaction@8 1883ZwConnectPort@32 1884ZwCreateDirectoryObject@12 1885ZwCreateEnlistment@32 1886ZwCreateEvent@20 1887ZwCreateFile@44 1888ZwCreateIoCompletion@16 1889ZwCreateJobObject@12 1890ZwCreateKey@28 1891ZwCreateKeyTransacted@32 1892ZwCreateResourceManager@28 1893ZwCreateSection@28 1894ZwCreateSymbolicLinkObject@16 1895ZwCreateTimer@16 1896ZwCreateTransaction@40 1897ZwCreateTransactionManager@24 1898ZwDeleteBootEntry@4 1899ZwDeleteDriverEntry@4 1900ZwDeleteFile@4 1901ZwDeleteKey@4 1902ZwDeleteValueKey@8 1903ZwDeviceIoControlFile@40 1904ZwDisplayString@4 1905ZwDuplicateObject@28 1906ZwDuplicateToken@24 1907ZwEnumerateBootEntries@8 1908ZwEnumerateDriverEntries@8 1909ZwEnumerateKey@24 1910ZwEnumerateTransactionObject@20 1911ZwEnumerateValueKey@24 1912ZwFlushBuffersFile@8 1913ZwFlushInstructionCache@12 1914ZwFlushKey@4 1915ZwFlushVirtualMemory@16 1916ZwFreeVirtualMemory@16 1917ZwFsControlFile@40 1918ZwGetNotificationResourceManager@28 1919ZwImpersonateAnonymousToken@4 1920ZwInitiatePowerAction@16 1921ZwIsProcessInJob@8 1922ZwLoadDriver@4 1923ZwLoadKey@8 1924ZwLoadKeyEx@32 1925ZwLockFile@40 1926ZwLockProductActivationKeys@8 1927ZwMakeTemporaryObject@4 1928ZwMapViewOfSection@40 1929ZwModifyBootEntry@4 1930ZwModifyDriverEntry@4 1931ZwNotifyChangeKey@40 1932ZwNotifyChangeSession@32 1933ZwOpenDirectoryObject@12 1934ZwOpenEnlistment@20 1935ZwOpenEvent@12 1936ZwOpenFile@24 1937ZwOpenJobObject@12 1938ZwOpenKey@12 1939ZwOpenKeyEx@16 1940ZwOpenKeyTransacted@16 1941ZwOpenKeyTransactedEx@20 1942ZwOpenProcess@16 1943ZwOpenProcessToken@12 1944ZwOpenProcessTokenEx@16 1945ZwOpenResourceManager@20 1946ZwOpenSection@12 1947ZwOpenSession@12 1948ZwOpenSymbolicLinkObject@12 1949ZwOpenThread@16 1950ZwOpenThreadToken@16 1951ZwOpenThreadTokenEx@20 1952ZwOpenTimer@12 1953ZwOpenTransaction@20 1954ZwOpenTransactionManager@24 1955ZwPowerInformation@20 1956ZwPrePrepareComplete@8 1957ZwPrePrepareEnlistment@8 1958ZwPrepareComplete@8 1959ZwPrepareEnlistment@8 1960ZwPropagationComplete@16 1961ZwPropagationFailed@12 1962ZwPulseEvent@8 1963ZwQueryBootEntryOrder@8 1964ZwQueryBootOptions@8 1965ZwQueryDefaultLocale@8 1966ZwQueryDefaultUILanguage@4 1967ZwQueryDirectoryFile@44 1968ZwQueryDirectoryObject@28 1969ZwQueryDriverEntryOrder@8 1970ZwQueryEaFile@36 1971ZwQueryFullAttributesFile@8 1972ZwQueryInformationEnlistment@20 1973ZwQueryInformationFile@20 1974ZwQueryInformationJobObject@20 1975ZwQueryInformationProcess@20 1976ZwQueryInformationResourceManager@20 1977ZwQueryInformationThread@20 1978ZwQueryInformationToken@20 1979ZwQueryInformationTransaction@20 1980ZwQueryInformationTransactionManager@20 1981ZwQueryInstallUILanguage@4 1982ZwQueryKey@20 1983ZwQueryLicenseValue@20 1984ZwQueryObject@20 1985ZwQueryQuotaInformationFile@36 1986ZwQuerySection@20 1987ZwQuerySecurityAttributesToken@24 1988ZwQuerySecurityObject@20 1989ZwQuerySymbolicLinkObject@12 1990ZwQuerySystemInformation@16 1991ZwQueryValueKey@24 1992ZwQueryVirtualMemory@24 1993ZwQueryVolumeInformationFile@20 1994ZwReadFile@36 1995ZwReadOnlyEnlistment@8 1996ZwRecoverEnlistment@8 1997ZwRecoverResourceManager@4 1998ZwRecoverTransactionManager@4 1999ZwRemoveIoCompletion@20 2000ZwRemoveIoCompletionEx@24 2001ZwReplaceKey@12 2002ZwRequestPort@8 2003ZwRequestWaitReplyPort@12 2004ZwResetEvent@8 2005ZwRestoreKey@12 2006ZwRollbackComplete@8 2007ZwRollbackEnlistment@8 2008ZwRollbackTransaction@8 2009ZwSaveKey@8 2010ZwSaveKeyEx@12 2011ZwSecureConnectPort@36 2012ZwSetBootEntryOrder@8 2013ZwSetBootOptions@8 2014ZwSetDefaultLocale@8 2015ZwSetDefaultUILanguage@4 2016ZwSetDriverEntryOrder@8 2017ZwSetEaFile@16 2018ZwSetEvent@8 2019ZwSetInformationEnlistment@16 2020ZwSetInformationFile@20 2021ZwSetInformationJobObject@16 2022ZwSetInformationObject@16 2023ZwSetInformationProcess@16 2024ZwSetInformationResourceManager@16 2025ZwSetInformationThread@16 2026ZwSetInformationToken@16 2027ZwSetInformationTransaction@16 2028ZwSetQuotaInformationFile@16 2029ZwSetSecurityObject@12 2030ZwSetSystemInformation@12 2031ZwSetSystemTime@8 2032ZwSetTimer@28 2033ZwSetTimerEx@16 2034ZwSetValueKey@24 2035ZwSetVolumeInformationFile@20 2036ZwTerminateJobObject@8 2037ZwTerminateProcess@8 2038ZwTraceEvent@16 2039ZwTranslateFilePath@16 2040ZwUnloadDriver@4 2041ZwUnloadKey@4 2042ZwUnloadKeyEx@8 2043ZwUnlockFile@20 2044ZwUnmapViewOfSection@8 2045ZwWaitForMultipleObjects@20 2046ZwWaitForSingleObject@12 2047ZwWriteFile@36 2048ZwYieldExecution@0 2049_CIcos 2050_CIsin 2051_CIsqrt 2052_abnormal_termination 2053_alldiv@16 2054_alldvrm@16 2055_allmul@16 2056_alloca_probe 2057_alloca_probe_16 2058_alloca_probe_8 2059_allrem@16 2060_allshl 2061_allshr 2062_aulldiv@16 2063_aulldvrm@16 2064_aullrem@16 2065_aullshr 2066;_chkstk 2067_except_handler2 2068_except_handler3 2069_global_unwind2 2070_i64toa_s 2071_i64tow_s 2072_itoa 2073_itoa_s 2074_itow 2075_itow_s 2076_local_unwind2 2077_ltoa_s 2078_ltow_s 2079_makepath_s 2080_purecall 2081_snprintf 2082_snprintf_s 2083_snscanf_s 2084_snwprintf 2085_snwprintf_s 2086_snwscanf_s 2087_splitpath_s 2088_stricmp 2089_strlwr 2090_strnicmp 2091_strnset 2092_strnset_s 2093_strrev 2094_strset 2095_strset_s 2096_strtoui64 2097_strupr 2098_swprintf 2099_ui64toa_s 2100_ui64tow_s 2101_ultoa_s 2102_ultow_s 2103_vsnprintf 2104_vsnprintf_s 2105_vsnwprintf 2106_vsnwprintf_s 2107_vswprintf 2108_wcsicmp 2109_wcslwr 2110_wcsnicmp 2111_wcsnset 2112_wcsnset_s 2113_wcsrev 2114_wcsset_s 2115_wcsupr 2116_wmakepath_s 2117_wsplitpath_s 2118_wtoi 2119_wtol 2120atoi 2121atol 2122bsearch 2123isdigit 2124islower 2125isprint 2126isspace 2127isupper 2128isxdigit 2129mbstowcs 2130mbtowc 2131memchr 2132memcpy 2133memcpy_s 2134memmove 2135memmove_s 2136memset 2137psMUITest DATA 2138qsort 2139rand 2140sprintf 2141sprintf_s 2142srand 2143sscanf_s 2144strcat 2145strcat_s 2146strchr 2147strcmp 2148strcpy 2149strcpy_s 2150strlen 2151strncat 2152strncat_s 2153strncmp 2154strncpy 2155strncpy_s 2156strnlen 2157strrchr 2158strspn 2159strstr 2160strtok_s 2161swprintf 2162swprintf_s 2163swscanf_s 2164tolower 2165toupper 2166towlower 2167towupper 2168vDbgPrintEx@16 2169vDbgPrintExWithPrefix@20 2170vsprintf 2171vsprintf_s 2172vswprintf_s 2173wcscat 2174wcscat_s 2175wcschr 2176wcscmp 2177wcscpy 2178wcscpy_s 2179wcscspn 2180wcslen 2181wcsncat 2182wcsncat_s 2183wcsncmp 2184wcsncpy 2185wcsncpy_s 2186wcsnlen 2187wcsrchr 2188wcsspn 2189wcsstr 2190wcstombs 2191wcstoul 2192wctomb 2193