| ; |
| ; Definition file of ntoskrnl.exe |
| ; Automatic generated by gendef |
| ; written by Kai Tietz 2008 |
| ; |
| LIBRARY "ntoskrnl.exe" |
| EXPORTS |
| @ExAcquireFastMutexUnsafe@4 |
| @ExAcquireRundownProtection@4 |
| @ExAcquireRundownProtectionCacheAware@4 |
| @ExAcquireRundownProtectionCacheAwareEx@4 |
| @ExAcquireRundownProtectionEx@4 |
| @ExEnterCriticalRegionAndAcquireFastMutexUnsafe@4 |
| @ExInitializeRundownProtection@4 |
| @ExInterlockedAddLargeStatistic@8 |
| @ExInterlockedCompareExchange64@16 |
| @ExInterlockedFlushSList@4 |
| @ExInterlockedPopEntrySList@8 |
| @ExInterlockedPushEntrySList@12 |
| @ExReInitializeRundownProtection@4 |
| @ExReInitializeRundownProtectionCacheAware@4 |
| @ExReleaseFastMutexUnsafe@4 |
| @ExReleaseFastMutexUnsafeAndLeaveCriticalRegion@4 |
| @ExReleaseResourceAndLeaveCriticalRegion@4 |
| @ExReleaseResourceAndLeavePriorityRegion@4 |
| @ExReleaseResourceLite@4 |
| @ExReleaseRundownProtection@4 |
| @ExReleaseRundownProtectionCacheAware@4 |
| @ExReleaseRundownProtectionCacheAwareEx@8 |
| @ExReleaseRundownProtectionEx@8 |
| @ExRundownCompleted@4 |
| @ExRundownCompletedCacheAware@4 |
| @ExWaitForRundownProtectionRelease@4 |
| @ExWaitForRundownProtectionReleaseCacheAware@4 |
| @ExfAcquirePushLockExclusive@4 |
| @ExfAcquirePushLockShared@4 |
| @ExfInterlockedAddUlong@12 |
| @ExfInterlockedCompareExchange64@12 |
| @ExfInterlockedInsertHeadList@12 |
| @ExfInterlockedInsertTailList@12 |
| @ExfInterlockedPopEntryList@8 |
| @ExfInterlockedPushEntryList@12 |
| @ExfInterlockedRemoveHeadList@8 |
| @ExfReleasePushLock@8 |
| @ExfReleasePushLockExclusive@4 |
| @ExfReleasePushLockShared@4 |
| @ExfTryAcquirePushLockShared@4 |
| @ExfTryToWakePushLock@4 |
| @ExfUnblockPushLock@8 |
| @Exfi386InterlockedDecrementLong@4 |
| @Exfi386InterlockedExchangeUlong@8 |
| @Exfi386InterlockedIncrementLong@4 |
| @ExiAcquireFastMutex@4 |
| @ExiReleaseFastMutex@4 |
| @ExiTryToAcquireFastMutex@4 |
| @HalExamineMBR@16 |
| @InterlockedCompareExchange@12 |
| @InterlockedDecrement@4 |
| @InterlockedExchange@8 |
| @InterlockedExchangeAdd@8 |
| @InterlockedIncrement@4 |
| @InterlockedPopEntrySList@4 |
| @InterlockedPushEntrySList@8 |
| @IoGetPagingIoPriority@4 |
| @IoReadPartitionTable@16 |
| @IoSetPartitionInformation@16 |
| @IoWritePartitionTable@20 |
| @IofCallDriver@8 |
| @IofCompleteRequest@8 |
| @KeAcquireGuardedMutex@4 |
| @KeAcquireGuardedMutexUnsafe@4 |
| @KeAcquireInStackQueuedSpinLockAtDpcLevel@8 |
| @KeAcquireInStackQueuedSpinLockForDpc@8 |
| @KeAcquireSpinLockForDpc@8 |
| @KeInitializeGuardedMutex@4 |
| @KeInvalidateRangeAllCaches@8 |
| @KeReleaseGuardedMutex@4 |
| @KeReleaseGuardedMutexUnsafe@4 |
| @KeReleaseInStackQueuedSpinLockForDpc@4 |
| @KeReleaseInStackQueuedSpinLockFromDpcLevel@4 |
| @KeReleaseSpinLockForDpc@8 |
| @KeTestSpinLock@4 |
| @KeTryToAcquireGuardedMutex@4 |
| @KeTryToAcquireSpinLockAtDpcLevel@4 |
| ;KeUpdateRunTime |
| @KefAcquireSpinLockAtDpcLevel@4 |
| @KefReleaseSpinLockFromDpcLevel@4 |
| @KiAcquireSpinLock@8 |
| ;KiCheckForSListAddress |
| @KiReleaseSpinLock@4 |
| @ObfDereferenceObject@4 |
| ;ObfDereferenceObjectWithTag |
| @ObfReferenceObject@4 |
| ;ObfReferenceObjectWithTag |
| @RtlPrefetchMemoryNonTemporal@8 |
| @RtlUlongByteSwap@4 |
| @RtlUlonglongByteSwap@8 |
| @RtlUshortByteSwap@4 |
| ;SeAuditingWithTokenForSubcategory |
| ;WmiGetClock |
| ;Kei386EoiHelper |
| AlpcGetHeaderSize@4 |
| AlpcGetMessageAttribute@8 |
| AlpcInitializeMessageAttribute@16 |
| CcCanIWrite@16 |
| CcCoherencyFlushAndPurgeCache@20 |
| CcCopyRead@24 |
| CcCopyWrite@20 |
| CcCopyWriteWontFlush@12 |
| CcDeferWrite@24 |
| CcFastCopyRead@24 |
| CcFastCopyWrite@16 |
| CcFastMdlReadWait DATA |
| CcFlushCache@16 |
| CcGetDirtyPages@16 |
| CcGetFileObjectFromBcb@4 |
| CcGetFileObjectFromSectionPtrs@4 |
| CcGetFileObjectFromSectionPtrsRef@4 |
| CcGetFlushedValidData@8 |
| CcGetLsnForFileObject@8 |
| CcInitializeCacheMap@20 |
| CcIsThereDirtyData@4 |
| CcIsThereDirtyDataEx@8 |
| CcMapData@24 |
| CcMdlRead@20 |
| CcMdlReadComplete@8 |
| CcMdlWriteAbort@8 |
| CcMdlWriteComplete@12 |
| CcPinMappedData@20 |
| CcPinRead@24 |
| CcPrepareMdlWrite@20 |
| CcPreparePinWrite@28 |
| CcPurgeCacheSection@16 |
| CcRemapBcb@4 |
| CcRepinBcb@4 |
| CcScheduleReadAhead@12 |
| CcSetAdditionalCacheAttributes@12 |
| CcSetBcbOwnerPointer@8 |
| CcSetDirtyPageThreshold@8 |
| CcSetDirtyPinnedData@8 |
| CcSetFileSizes@8 |
| CcSetFileSizesEx@8 |
| CcSetLogHandleForFile@12 |
| CcSetParallelFlushFile@8 |
| CcSetReadAheadGranularity@8 |
| CcTestControl@12 |
| CcUninitializeCacheMap@12 |
| CcUnpinData@4 |
| CcUnpinDataForThread@8 |
| CcUnpinRepinnedBcb@12 |
| CcWaitForCurrentLazyWriterActivity@0 |
| CcZeroData@16 |
| CmCallbackGetKeyObjectID@16 |
| CmGetBoundTransaction@8 |
| CmGetCallbackVersion@8 |
| CmKeyObjectType DATA |
| CmRegisterCallback@12 |
| CmRegisterCallbackEx@24 |
| CmSetCallbackObjectContext@16 |
| CmUnRegisterCallback@8 |
| DbgBreakPoint@0 |
| DbgBreakPointWithStatus@4 |
| DbgCommandString@8 |
| DbgLoadImageSymbols@12 |
| DbgPrint |
| DbgPrintEx |
| DbgPrintReturnControlC |
| DbgPrompt@12 |
| DbgQueryDebugFilterState@8 |
| DbgSetDebugFilterState@12 |
| DbgSetDebugPrintCallback@8 |
| DbgkLkmdRegisterCallback@12 |
| DbgkLkmdUnregisterCallback@4 |
| EmClientQueryRuleState@8 |
| EmClientRuleDeregisterNotification@4 |
| EmClientRuleEvaluate@16 |
| EmClientRuleRegisterNotification@16 |
| EmProviderDeregister@4 |
| EmProviderDeregisterEntry@4 |
| EmProviderRegister@24 |
| EmProviderRegisterEntry@16 |
| EmpProviderRegister@24 |
| EtwActivityIdControl@8 |
| EtwEnableTrace@44 |
| EtwEventEnabled@12 |
| EtwProviderEnabled@20 |
| EtwRegister@16 |
| EtwRegisterClassicProvider@20 |
| EtwSendTraceBuffer@24 |
| EtwUnregister@8 |
| EtwWrite@24 |
| EtwWriteEndScenario@24 |
| EtwWriteEx@40 |
| EtwWriteStartScenario@24 |
| EtwWriteString@28 |
| EtwWriteTransfer@28 |
| ExAcquireCacheAwarePushLockExclusive@4 |
| ExAcquireResourceExclusiveLite@8 |
| ExAcquireResourceSharedLite@8 |
| ExAcquireSharedStarveExclusive@8 |
| ExAcquireSharedWaitForExclusive@8 |
| ExAcquireSpinLockExclusive@4 |
| ExAcquireSpinLockExclusiveAtDpcLevel@4 |
| ExAcquireSpinLockShared@4 |
| ExAcquireSpinLockSharedAtDpcLevel@4 |
| ExAllocateCacheAwarePushLock@4 |
| ExAllocateCacheAwareRundownProtection@8 |
| ExAllocateFromPagedLookasideList@4 |
| ExAllocatePool@8 |
| ExAllocatePoolWithQuota@8 |
| ExAllocatePoolWithQuotaTag@12 |
| ExAllocatePoolWithTag@12 |
| ExAllocatePoolWithTagPriority@16 |
| ExConvertExclusiveToSharedLite@4 |
| ExCreateCallback@16 |
| ExDeleteLookasideListEx@4 |
| ExDeleteNPagedLookasideList@4 |
| ExDeletePagedLookasideList@4 |
| ExDeleteResourceLite@4 |
| ExDesktopObjectType DATA |
| ExDisableResourceBoostLite@4 |
| ExEnterCriticalRegionAndAcquireResourceExclusive@4 |
| ExEnterCriticalRegionAndAcquireResourceShared@4 |
| ExEnterCriticalRegionAndAcquireSharedWaitForExclusive@4 |
| ExEnterPriorityRegionAndAcquireResourceExclusive@4 |
| ExEnterPriorityRegionAndAcquireResourceShared@4 |
| ExEnumHandleTable@16 |
| ExEventObjectType DATA |
| ExExtendZone@12 |
| ExFetchLicenseData@12 |
| ExFlushLookasideListEx@4 |
| ExFreeCacheAwarePushLock@4 |
| ExFreeCacheAwareRundownProtection@4 |
| ExFreePool@4 |
| ExFreePoolWithTag@8 |
| ExFreeToPagedLookasideList@8 |
| ExGetCurrentProcessorCounts@12 |
| ExGetCurrentProcessorCpuUsage@4 |
| ExGetExclusiveWaiterCount@4 |
| ExGetLicenseTamperState@4 |
| ExGetPreviousMode@0 |
| ExGetSharedWaiterCount@4 |
| ExInitializeLookasideListEx@32 |
| ExInitializeNPagedLookasideList@28 |
| ExInitializePagedLookasideList@28 |
| ExInitializePushLock@4 |
| ExInitializeResourceLite@4 |
| ExInitializeRundownProtectionCacheAware@8 |
| ExInitializeZone@16 |
| ExInterlockedAddLargeInteger@16 |
| ExInterlockedAddUlong@12 |
| ExInterlockedDecrementLong@8 |
| ExInterlockedExchangeUlong@12 |
| ExInterlockedExtendZone@16 |
| @ExInterlockedIncrementLong@8 |
| ExInterlockedInsertHeadList@12 |
| ExInterlockedInsertTailList@12 |
| ExInterlockedPopEntryList@8 |
| ExInterlockedPushEntryList@12 |
| ExInterlockedRemoveHeadList@8 |
| ExIsProcessorFeaturePresent@4 |
| ExIsResourceAcquiredExclusiveLite@4 |
| ExIsResourceAcquiredSharedLite@4 |
| ExLocalTimeToSystemTime@8 |
| ExNotifyCallback@12 |
| ExQueryAttributeInformation@16 |
| ExQueryPoolBlockSize@8 |
| ExQueueWorkItem@8 |
| ExRaiseAccessViolation@0 |
| ExRaiseDatatypeMisalignment@0 |
| ExRaiseException@24 |
| ExRaiseHardError@24 |
| ExRaiseStatus@4 |
| ExRegisterAttributeInformationCallback@4 |
| ExRegisterCallback@12 |
| ExRegisterExtension@12 |
| ExReinitializeResourceLite@4 |
| ExReleaseCacheAwarePushLockExclusive@4 |
| ExReleaseResourceForThreadLite@8 |
| ExReleaseSpinLockExclusive@8 |
| ExReleaseSpinLockExclusiveFromDpcLevel@4 |
| ExReleaseSpinLockShared@8 |
| ExReleaseSpinLockSharedFromDpcLevel@4 |
| ExSemaphoreObjectType DATA |
| ExSetLicenseTamperState@4 |
| ExSetResourceOwnerPointer@8 |
| ExSetResourceOwnerPointerEx@12 |
| ExSetTimerResolution@8 |
| ExSizeOfRundownProtectionCacheAware@0 |
| ExSystemExceptionFilter@0 |
| ExSystemTimeToLocalTime@8 |
| ExTryConvertSharedSpinLockExclusive@4 |
| ExUnregisterAttributeInformationCallback@4 |
| ExUnregisterCallback@4 |
| ExUnregisterExtension@4 |
| ExUpdateLicenseData@8 |
| ExUuidCreate@4 |
| ExVerifySuite@4 |
| ExWindowStationObjectType DATA |
| Exi386InterlockedDecrementLong@4 |
| Exi386InterlockedExchangeUlong@8 |
| Exi386InterlockedIncrementLong@4 |
| FirstEntrySList@4 |
| FsRtlAcknowledgeEcp@4 |
| FsRtlAcquireFileExclusive@4 |
| FsRtlAddBaseMcbEntry@28 |
| FsRtlAddBaseMcbEntryEx@28 |
| FsRtlAddLargeMcbEntry@28 |
| FsRtlAddMcbEntry@16 |
| FsRtlAddToTunnelCache@32 |
| FsRtlAllocateExtraCreateParameter@24 |
| FsRtlAllocateExtraCreateParameterFromLookasideList@24 |
| FsRtlAllocateExtraCreateParameterList@8 |
| FsRtlAllocateFileLock@8 |
| FsRtlAllocatePool@8 |
| FsRtlAllocatePoolWithQuota@8 |
| FsRtlAllocatePoolWithQuotaTag@12 |
| FsRtlAllocatePoolWithTag@12 |
| FsRtlAllocateResource@0 |
| FsRtlAreNamesEqual@16 |
| FsRtlAreThereCurrentOrInProgressFileLocks@4 |
| FsRtlAreVolumeStartupApplicationsComplete@0 |
| FsRtlBalanceReads@4 |
| FsRtlCancellableWaitForMultipleObjects@24 |
| FsRtlCancellableWaitForSingleObject@12 |
| FsRtlChangeBackingFileObject@16 |
| FsRtlCheckLockForReadAccess@8 |
| FsRtlCheckLockForWriteAccess@8 |
| FsRtlCheckOplock@20 |
| FsRtlCheckOplockEx@24 |
| FsRtlCopyRead@32 |
| FsRtlCopyWrite@32 |
| FsRtlCreateSectionForDataScan@40 |
| FsRtlCurrentBatchOplock@4 |
| FsRtlCurrentOplock@4 |
| FsRtlCurrentOplockH@4 |
| FsRtlDeleteExtraCreateParameterLookasideList@8 |
| FsRtlDeleteKeyFromTunnelCache@12 |
| FsRtlDeleteTunnelCache@4 |
| FsRtlDeregisterUncProvider@4 |
| FsRtlDissectDbcs@16 |
| FsRtlDissectName@16 |
| FsRtlDoesDbcsContainWildCards@4 |
| FsRtlDoesNameContainWildCards@4 |
| FsRtlFastCheckLockForRead@24 |
| FsRtlFastCheckLockForWrite@24 |
| FsRtlFastUnlockAll@16 |
| FsRtlFastUnlockAllByKey@20 |
| FsRtlFastUnlockSingle@32 |
| FsRtlFindExtraCreateParameter@16 |
| FsRtlFindInTunnelCache@32 |
| FsRtlFreeExtraCreateParameter@4 |
| FsRtlFreeExtraCreateParameterList@4 |
| FsRtlFreeFileLock@4 |
| FsRtlGetEcpListFromIrp@8 |
| FsRtlGetFileSize@8 |
| FsRtlGetNextBaseMcbEntry@20 |
| FsRtlGetNextExtraCreateParameter@20 |
| FsRtlGetNextFileLock@8 |
| FsRtlGetNextLargeMcbEntry@20 |
| FsRtlGetNextMcbEntry@20 |
| FsRtlGetVirtualDiskNestingLevel@12 |
| FsRtlIncrementCcFastMdlReadWait@0 |
| FsRtlIncrementCcFastReadNoWait@0 |
| FsRtlIncrementCcFastReadNotPossible@0 |
| FsRtlIncrementCcFastReadResourceMiss@0 |
| FsRtlIncrementCcFastReadWait@0 |
| FsRtlInitExtraCreateParameterLookasideList@16 |
| FsRtlInitializeBaseMcb@8 |
| FsRtlInitializeBaseMcbEx@12 |
| FsRtlInitializeExtraCreateParameter@24 |
| FsRtlInitializeExtraCreateParameterList@4 |
| FsRtlInitializeFileLock@12 |
| FsRtlInitializeLargeMcb@8 |
| FsRtlInitializeMcb@8 |
| FsRtlInitializeOplock@4 |
| FsRtlInitializeTunnelCache@4 |
| FsRtlInsertExtraCreateParameter@8 |
| FsRtlInsertPerFileContext@8 |
| FsRtlInsertPerFileObjectContext@8 |
| FsRtlInsertPerStreamContext@8 |
| FsRtlIsDbcsInExpression@8 |
| FsRtlIsEcpAcknowledged@4 |
| FsRtlIsEcpFromUserMode@4 |
| FsRtlIsFatDbcsLegal@20 |
| FsRtlIsHpfsDbcsLegal@20 |
| FsRtlIsNameInExpression@16 |
| FsRtlIsNtstatusExpected@4 |
| FsRtlIsPagingFile@4 |
| FsRtlIsTotalDeviceFailure@4 |
| FsRtlLegalAnsiCharacterArray DATA |
| FsRtlLogCcFlushError@20 |
| FsRtlLookupBaseMcbEntry@32 |
| FsRtlLookupLargeMcbEntry@32 |
| FsRtlLookupLastBaseMcbEntry@12 |
| FsRtlLookupLastBaseMcbEntryAndIndex@16 |
| FsRtlLookupLastLargeMcbEntry@12 |
| FsRtlLookupLastLargeMcbEntryAndIndex@16 |
| FsRtlLookupLastMcbEntry@12 |
| FsRtlLookupMcbEntry@20 |
| FsRtlLookupPerFileContext@12 |
| FsRtlLookupPerFileObjectContext@12 |
| FsRtlLookupPerStreamContextInternal@12 |
| FsRtlMdlRead@24 |
| FsRtlMdlReadComplete@8 |
| FsRtlMdlReadCompleteDev@12 |
| FsRtlMdlReadDev@28 |
| FsRtlMdlWriteComplete@12 |
| FsRtlMdlWriteCompleteDev@16 |
| FsRtlMupGetProviderIdFromName@8 |
| FsRtlMupGetProviderInfoFromFileObject@16 |
| FsRtlNormalizeNtstatus@8 |
| FsRtlNotifyChangeDirectory@28 |
| FsRtlNotifyCleanup@12 |
| FsRtlNotifyCleanupAll@8 |
| FsRtlNotifyFilterChangeDirectory@44 |
| FsRtlNotifyFilterReportChange@40 |
| FsRtlNotifyFullChangeDirectory@40 |
| FsRtlNotifyFullReportChange@36 |
| FsRtlNotifyInitializeSync@4 |
| FsRtlNotifyReportChange@20 |
| FsRtlNotifyUninitializeSync@4 |
| FsRtlNotifyVolumeEvent@8 |
| FsRtlNotifyVolumeEventEx@12 |
| FsRtlNumberOfRunsInBaseMcb@4 |
| FsRtlNumberOfRunsInLargeMcb@4 |
| FsRtlNumberOfRunsInMcb@4 |
| FsRtlOplockBreakH@24 |
| FsRtlOplockBreakToNone@24 |
| FsRtlOplockBreakToNoneEx@24 |
| FsRtlOplockFsctrl@12 |
| FsRtlOplockFsctrlEx@16 |
| FsRtlOplockIsFastIoPossible@4 |
| FsRtlOplockIsSharedRequest@4 |
| FsRtlOplockKeysEqual@8 |
| FsRtlPostPagingFileStackOverflow@12 |
| FsRtlPostStackOverflow@12 |
| FsRtlPrepareMdlWrite@24 |
| FsRtlPrepareMdlWriteDev@28 |
| FsRtlPrivateLock@48 |
| FsRtlProcessFileLock@12 |
| FsRtlQueryMaximumVirtualDiskNestingLevel@0 |
| FsRtlRegisterFileSystemFilterCallbacks@8 |
| FsRtlRegisterFltMgrCalls@4 |
| FsRtlRegisterMupCalls@4 |
| FsRtlRegisterUncProvider@12 |
| FsRtlRegisterUncProviderEx@16 |
| FsRtlReleaseFile@4 |
| FsRtlRemoveBaseMcbEntry@20 |
| FsRtlRemoveDotsFromPath@12 |
| FsRtlRemoveExtraCreateParameter@16 |
| FsRtlRemoveLargeMcbEntry@20 |
| FsRtlRemoveMcbEntry@12 |
| FsRtlRemovePerFileContext@12 |
| FsRtlRemovePerFileObjectContext@12 |
| FsRtlRemovePerStreamContext@12 |
| FsRtlResetBaseMcb@4 |
| FsRtlResetLargeMcb@8 |
| FsRtlSetEcpListIntoIrp@8 |
| FsRtlSplitBaseMcb@20 |
| FsRtlSplitLargeMcb@20 |
| FsRtlSyncVolumes@12 |
| FsRtlTeardownPerFileContexts@4 |
| FsRtlTeardownPerStreamContexts@4 |
| FsRtlTruncateBaseMcb@12 |
| FsRtlTruncateLargeMcb@12 |
| FsRtlTruncateMcb@8 |
| FsRtlUninitializeBaseMcb@4 |
| FsRtlUninitializeFileLock@4 |
| FsRtlUninitializeLargeMcb@4 |
| FsRtlUninitializeMcb@4 |
| FsRtlUninitializeOplock@4 |
| FsRtlValidateReparsePointBuffer@8 |
| HalDispatchTable DATA |
| HalPrivateDispatchTable DATA |
| HeadlessDispatch@20 |
| HvlQueryConnection@4 |
| InbvAcquireDisplayOwnership@0 |
| InbvCheckDisplayOwnership@0 |
| InbvDisplayString@4 |
| InbvEnableBootDriver@4 |
| InbvEnableDisplayString@4 |
| InbvInstallDisplayStringFilter@4 |
| InbvIsBootDriverInstalled@0 |
| InbvNotifyDisplayOwnershipLost@4 |
| InbvResetDisplay@0 |
| InbvSetScrollRegion@16 |
| InbvSetTextColor@4 |
| InbvSolidColorFill@20 |
| InitSafeBootMode DATA |
| IoAcquireCancelSpinLock@4 |
| IoAcquireRemoveLockEx@20 |
| IoAcquireVpbSpinLock@4 |
| IoAdapterObjectType DATA |
| IoAdjustStackSizeForRedirection@12 |
| IoAllocateAdapterChannel@20 |
| IoAllocateController@16 |
| IoAllocateDriverObjectExtension@16 |
| IoAllocateErrorLogEntry@8 |
| IoAllocateIrp@8 |
| IoAllocateMdl@20 |
| IoAllocateMiniCompletionPacket@8 |
| IoAllocateSfioStreamIdentifier@16 |
| IoAllocateWorkItem@4 |
| IoApplyPriorityInfoThread@12 |
| IoAssignResources@24 |
| IoAttachDevice@12 |
| IoAttachDeviceByPointer@8 |
| IoAttachDeviceToDeviceStack@8 |
| IoAttachDeviceToDeviceStackSafe@12 |
| IoBuildAsynchronousFsdRequest@24 |
| IoBuildDeviceIoControlRequest@36 |
| IoBuildPartialMdl@16 |
| IoBuildSynchronousFsdRequest@28 |
| IoCallDriver@8 |
| IoCancelFileOpen@8 |
| IoCancelIrp@4 |
| IoCheckDesiredAccess@8 |
| IoCheckEaBufferValidity@12 |
| IoCheckFunctionAccess@24 |
| IoCheckQuerySetFileInformation@12 |
| IoCheckQuerySetVolumeInformation@12 |
| IoCheckQuotaBufferValidity@12 |
| IoCheckShareAccess@20 |
| IoCheckShareAccessEx@24 |
| IoClearDependency@12 |
| IoClearIrpExtraCreateParameter@4 |
| IoCompleteRequest@8 |
| IoConnectInterrupt@44 |
| IoConnectInterruptEx@4 |
| IoCreateArcName@4 |
| IoCreateController@4 |
| IoCreateDevice@28 |
| IoCreateDisk@8 |
| IoCreateDriver@8 |
| IoCreateFile@56 |
| IoCreateFileEx@60 |
| IoCreateFileSpecifyDeviceObjectHint@60 |
| IoCreateNotificationEvent@8 |
| IoCreateStreamFileObject@8 |
| IoCreateStreamFileObjectEx@12 |
| IoCreateStreamFileObjectLite@8 |
| IoCreateSymbolicLink@8 |
| IoCreateSynchronizationEvent@8 |
| IoCreateUnprotectedSymbolicLink@8 |
| IoCsqInitialize@28 |
| IoCsqInitializeEx@28 |
| IoCsqInsertIrp@12 |
| IoCsqInsertIrpEx@16 |
| IoCsqRemoveIrp@8 |
| IoCsqRemoveNextIrp@8 |
| IoDeleteAllDependencyRelations@4 |
| IoDeleteController@4 |
| IoDeleteDevice@4 |
| IoDeleteDriver@4 |
| IoDeleteSymbolicLink@4 |
| IoDetachDevice@4 |
| IoDeviceHandlerObjectSize DATA |
| IoDeviceHandlerObjectType DATA |
| IoDeviceObjectType DATA |
| IoDisconnectInterrupt@4 |
| IoDisconnectInterruptEx@4 |
| IoDriverObjectType DATA |
| IoDuplicateDependency@12 |
| IoEnqueueIrp@4 |
| IoEnumerateDeviceObjectList@16 |
| IoEnumerateRegisteredFiltersList@12 |
| IoFastQueryNetworkAttributes@20 |
| IoFileObjectType DATA |
| IoForwardAndCatchIrp@8 |
| IoForwardIrpSynchronously@8 |
| IoFreeController@4 |
| IoFreeErrorLogEntry@4 |
| IoFreeIrp@4 |
| IoFreeMdl@4 |
| IoFreeMiniCompletionPacket@4 |
| IoFreeSfioStreamIdentifier@8 |
| IoFreeWorkItem@4 |
| IoGetAffinityInterrupt@8 |
| IoGetAttachedDevice@4 |
| IoGetAttachedDeviceReference@4 |
| IoGetBaseFileSystemDeviceObject@4 |
| IoGetBootDiskInformation@8 |
| IoGetBootDiskInformationLite@4 |
| IoGetConfigurationInformation@0 |
| IoGetContainerInformation@16 |
| IoGetCurrentProcess@0 |
| IoGetDeviceAttachmentBaseRef@4 |
| IoGetDeviceInterfaceAlias@12 |
| IoGetDeviceInterfaces@16 |
| IoGetDeviceNumaNode@8 |
| IoGetDeviceObjectPointer@16 |
| IoGetDeviceProperty@20 |
| IoGetDevicePropertyData@32 |
| IoGetDeviceToVerify@4 |
| IoGetDiskDeviceObject@8 |
| IoGetDmaAdapter@12 |
| IoGetDriverObjectExtension@8 |
| IoGetFileObjectGenericMapping@0 |
| IoGetInitialStack@0 |
| IoGetIoPriorityHint@4 |
| IoGetIrpExtraCreateParameter@8 |
| IoGetLowerDeviceObject@4 |
| IoGetOplockKeyContext@4 |
| IoGetRelatedDeviceObject@4 |
| IoGetRequestorProcess@4 |
| IoGetRequestorProcessId@4 |
| IoGetRequestorSessionId@8 |
| IoGetSfioStreamIdentifier@8 |
| IoGetStackLimits@8 |
| IoGetSymlinkSupportInformation@8 |
| IoGetTopLevelIrp@0 |
| IoGetTransactionParameterBlock@4 |
| IoInitializeIrp@12 |
| IoInitializeRemoveLockEx@20 |
| IoInitializeTimer@12 |
| IoInitializeWorkItem@8 |
| IoInvalidateDeviceRelations@8 |
| IoInvalidateDeviceState@4 |
| IoIsFileObjectIgnoringSharing@4 |
| IoIsFileOriginRemote@4 |
| IoIsOperationSynchronous@4 |
| IoIsSystemThread@4 |
| IoIsValidNameGraftingBuffer@8 |
| IoIsWdmVersionAvailable@8 |
| IoMakeAssociatedIrp@8 |
| IoOpenDeviceInterfaceRegistryKey@12 |
| IoOpenDeviceRegistryKey@16 |
| IoPageRead@20 |
| IoQueryDeviceDescription@32 |
| IoQueryFileDosDeviceName@8 |
| IoQueryFileInformation@20 |
| IoQueryVolumeInformation@20 |
| IoQueueThreadIrp@4 |
| IoQueueWorkItem@16 |
| IoQueueWorkItemEx@16 |
| IoRaiseHardError@12 |
| IoRaiseInformationalHardError@12 |
| IoReadDiskSignature@12 |
| IoReadOperationCount DATA |
| IoReadPartitionTableEx@8 |
| IoReadTransferCount DATA |
| IoRegisterBootDriverReinitialization@12 |
| IoRegisterContainerNotification@20 |
| IoRegisterDeviceInterface@16 |
| IoRegisterDriverReinitialization@12 |
| IoRegisterFileSystem@4 |
| IoRegisterFsRegistrationChange@8 |
| IoRegisterFsRegistrationChangeMountAware@12 |
| IoRegisterLastChanceShutdownNotification@4 |
| IoRegisterPlugPlayNotification@28 |
| IoRegisterPriorityCallback@8 |
| IoRegisterShutdownNotification@4 |
| IoReleaseCancelSpinLock@4 |
| IoReleaseRemoveLockAndWaitEx@12 |
| IoReleaseRemoveLockEx@12 |
| IoReleaseVpbSpinLock@4 |
| IoRemoveShareAccess@8 |
| IoReplaceFileObjectName@12 |
| IoReplacePartitionUnit@12 |
| IoReportDetectedDevice@32 |
| IoReportHalResourceUsage@16 |
| IoReportResourceForDetection@28 |
| IoReportResourceUsage@36 |
| IoReportRootDevice@4 |
| IoReportTargetDeviceChange@8 |
| IoReportTargetDeviceChangeAsynchronous@16 |
| IoRequestDeviceEject@4 |
| IoRequestDeviceEjectEx@16 |
| IoRetrievePriorityInfo@16 |
| IoReuseIrp@8 |
| IoSetCompletionRoutineEx@28 |
| IoSetDependency@8 |
| IoSetDeviceInterfaceState@8 |
| IoSetDevicePropertyData@28 |
| IoSetDeviceToVerify@8 |
| IoSetFileObjectIgnoreSharing@4 |
| IoSetFileOrigin@8 |
| IoSetHardErrorOrVerifyDevice@8 |
| IoSetInformation@16 |
| IoSetIoCompletion@24 |
| IoSetIoCompletionEx@28 |
| IoSetIoPriorityHint@8 |
| IoSetIoPriorityHintIntoFileObject@8 |
| IoSetIoPriorityHintIntoThread@8 |
| IoSetIrpExtraCreateParameter@8 |
| IoSetOplockKeyContext@12 |
| IoSetPartitionInformationEx@12 |
| IoSetShareAccess@16 |
| IoSetShareAccessEx@20 |
| IoSetStartIoAttributes@12 |
| IoSetSystemPartition@4 |
| IoSetThreadHardErrorMode@4 |
| IoSetTopLevelIrp@4 |
| IoSizeofWorkItem@0 |
| IoStartNextPacket@8 |
| IoStartNextPacketByKey@12 |
| IoStartPacket@16 |
| IoStartTimer@4 |
| IoStatisticsLock DATA |
| IoStopTimer@4 |
| IoSynchronousInvalidateDeviceRelations@8 |
| IoSynchronousPageWrite@20 |
| IoThreadToProcess@4 |
| IoTranslateBusAddress@24 |
| IoUninitializeWorkItem@4 |
| IoUnregisterContainerNotification@4 |
| IoUnregisterFileSystem@4 |
| IoUnregisterFsRegistrationChange@8 |
| IoUnregisterPlugPlayNotification@4 |
| IoUnregisterPlugPlayNotificationEx@4 |
| IoUnregisterPriorityCallback@4 |
| IoUnregisterShutdownNotification@4 |
| IoUpdateShareAccess@8 |
| IoValidateDeviceIoControlAccess@8 |
| IoVerifyPartitionTable@8 |
| IoVerifyVolume@8 |
| IoVolumeDeviceToDosName@8 |
| IoWMIAllocateInstanceIds@12 |
| IoWMIDeviceObjectToInstanceName@12 |
| IoWMIExecuteMethod@24 |
| IoWMIHandleToInstanceName@12 |
| IoWMIOpenBlock@12 |
| IoWMIQueryAllData@12 |
| IoWMIQueryAllDataMultiple@16 |
| IoWMIQuerySingleInstance@16 |
| IoWMIQuerySingleInstanceMultiple@20 |
| IoWMIRegistrationControl@8 |
| IoWMISetNotificationCallback@12 |
| IoWMISetSingleInstance@20 |
| IoWMISetSingleItem@24 |
| IoWMISuggestInstanceName@16 |
| IoWMIWriteEvent@4 |
| IoWithinStackLimits@8 |
| IoWriteErrorLogEntry@4 |
| IoWriteOperationCount DATA |
| IoWritePartitionTableEx@8 |
| IoWriteTransferCount DATA |
| KdChangeOption@24 |
| KdDebuggerEnabled DATA |
| KdDebuggerNotPresent DATA |
| KdDisableDebugger@0 |
| KdEnableDebugger@0 |
| KdEnteredDebugger DATA |
| KdPollBreakIn@0 |
| KdPowerTransition@4 |
| KdRefreshDebuggerNotPresent@0 |
| KdSystemDebugControl@28 |
| Ke386CallBios@8 |
| Ke386IoSetAccessProcess@8 |
| Ke386QueryIoAccessMap@8 |
| Ke386SetIoAccessMap@8 |
| KeAcquireInterruptSpinLock@4 |
| KeAcquireSpinLockAtDpcLevel@4 |
| KeAddGroupAffinityEx@12 |
| KeAddProcessorAffinityEx@8 |
| KeAddProcessorGroupAffinity@8 |
| KeAddSystemServiceTable@20 |
| KeAlertThread@8 |
| KeAllocateCalloutStack@4 |
| KeAllocateCalloutStackEx@16 |
| KeAndAffinityEx@12 |
| KeAndGroupAffinityEx@12 |
| KeAreAllApcsDisabled@0 |
| KeAreApcsDisabled@0 |
| KeAttachProcess@4 |
| KeBugCheck@4 |
| KeBugCheckEx@20 |
| KeCancelTimer@4 |
| KeCapturePersistentThreadState@32 |
| KeCheckProcessorAffinityEx@8 |
| KeCheckProcessorGroupAffinity@8 |
| KeClearEvent@4 |
| KeComplementAffinityEx@8 |
| KeCopyAffinityEx@8 |
| KeCountSetBitsAffinityEx@4 |
| KeCountSetBitsGroupAffinity@4 |
| KeDelayExecutionThread@12 |
| KeDeregisterBugCheckCallback@4 |
| KeDeregisterBugCheckReasonCallback@4 |
| KeDeregisterNmiCallback@4 |
| KeDeregisterProcessorChangeCallback@4 |
| KeDetachProcess@0 |
| KeEnterCriticalRegion@0 |
| KeEnterGuardedRegion@0 |
| KeEnterKernelDebugger@0 |
| KeEnumerateNextProcessor@8 |
| KeExpandKernelStackAndCallout@12 |
| KeExpandKernelStackAndCalloutEx@20 |
| KeFindConfigurationEntry@16 |
| KeFindConfigurationNextEntry@20 |
| KeFindFirstSetLeftAffinityEx@4 |
| KeFindFirstSetLeftGroupAffinity@4 |
| KeFindFirstSetRightGroupAffinity@4 |
| KeFirstGroupAffinityEx@8 |
| KeFlushEntireTb@8 |
| KeFlushQueuedDpcs@0 |
| KeFreeCalloutStack@4 |
| KeGenericCallDpc@8 |
| KeGetCurrentNodeNumber@0 |
| KeGetCurrentProcessorNumberEx@4 |
| KeGetCurrentThread@0 |
| KeGetPreviousMode@0 |
| KeGetProcessorIndexFromNumber@4 |
| KeGetProcessorNumberFromIndex@8 |
| KeGetRecommendedSharedDataAlignment@0 |
| KeGetXSaveFeatureFlags@0 |
| KeI386AbiosCall@16 |
| KeI386AllocateGdtSelectors@8 |
| KeI386Call16BitCStyleFunction@0 |
| KeI386Call16BitFunction@0 |
| KeI386FlatToGdtSelector@12 |
| KeI386GetLid@20 |
| KeI386MachineType DATA |
| KeI386ReleaseGdtSelectors@8 |
| KeI386ReleaseLid@8 |
| KeI386SetGdtSelector@8 |
| KeInitializeAffinityEx@4 |
| KeInitializeApc@32 |
| KeInitializeCrashDumpHeader@20 |
| KeInitializeDeviceQueue@4 |
| KeInitializeDpc@12 |
| KeInitializeEnumerationContext@8 |
| KeInitializeEnumerationContextFromGroup@8 |
| KeInitializeEvent@12 |
| KeInitializeInterrupt@52 |
| KeInitializeMutant@8 |
| KeInitializeMutex@8 |
| KeInitializeQueue@8 |
| KeInitializeSemaphore@12 |
| KeInitializeSpinLock@4 |
| KeInitializeThreadedDpc@12 |
| KeInitializeTimer@4 |
| KeInitializeTimerEx@8 |
| KeInsertByKeyDeviceQueue@12 |
| KeInsertDeviceQueue@8 |
| KeInsertHeadQueue@8 |
| KeInsertQueue@8 |
| KeInsertQueueApc@16 |
| KeInsertQueueDpc@12 |
| KeInterlockedClearProcessorAffinityEx@8 |
| KeInterlockedSetProcessorAffinityEx@8 |
| KeInvalidateAllCaches@0 |
| KeIpiGenericCall@8 |
| KeIsAttachedProcess@0 |
| KeIsEmptyAffinityEx@4 |
| KeIsEqualAffinityEx@8 |
| KeIsExecutingDpc@0 |
| KeIsSingleGroupAffinityEx@8 |
| KeIsSubsetAffinityEx@8 |
| KeIsWaitListEmpty@4 |
| KeLeaveCriticalRegion@0 |
| KeLeaveGuardedRegion@0 |
| KeLoaderBlock DATA |
| KeNumberProcessors DATA |
| KeOrAffinityEx@12 |
| KePollFreezeExecution@0 |
| KeProcessorGroupAffinity@8 |
| KeProfileInterrupt@8 |
| KeProfileInterruptWithSource@8 |
| KePulseEvent@12 |
| KeQueryActiveGroupCount@0 |
| KeQueryActiveProcessorAffinity@4 |
| KeQueryActiveProcessorCount@4 |
| KeQueryActiveProcessorCountEx@4 |
| KeQueryActiveProcessors@0 |
| KeQueryDpcWatchdogInformation@4 |
| KeQueryGroupAffinity@4 |
| KeQueryGroupAffinityEx@8 |
| KeQueryHardwareCounterConfiguration@12 |
| KeQueryHighestNodeNumber@0 |
| KeQueryInterruptTime@0 |
| KeQueryLogicalProcessorRelationship@16 |
| KeQueryMaximumGroupCount@0 |
| KeQueryMaximumProcessorCount@0 |
| KeQueryMaximumProcessorCountEx@4 |
| KeQueryNodeActiveAffinity@12 |
| KeQueryNodeMaximumProcessorCount@4 |
| KeQueryPriorityThread@4 |
| KeQueryRuntimeThread@8 |
| KeQuerySystemTime@4 |
| KeQueryTickCount@4 |
| KeQueryTimeIncrement@0 |
| KeQueryUnbiasedInterruptTime@0 |
| KeRaiseUserException@4 |
| KeReadStateEvent@4 |
| KeReadStateMutant@4 |
| KeReadStateMutex@4 |
| KeReadStateQueue@4 |
| KeReadStateSemaphore@4 |
| KeReadStateTimer@4 |
| KeRegisterBugCheckCallback@20 |
| KeRegisterBugCheckReasonCallback@16 |
| KeRegisterNmiCallback@8 |
| KeRegisterProcessorChangeCallback@12 |
| KeReleaseInterruptSpinLock@8 |
| KeReleaseMutant@16 |
| KeReleaseMutex@8 |
| KeReleaseSemaphore@16 |
| KeReleaseSpinLockFromDpcLevel@4 |
| KeRemoveByKeyDeviceQueue@8 |
| KeRemoveByKeyDeviceQueueIfBusy@8 |
| KeRemoveDeviceQueue@4 |
| KeRemoveEntryDeviceQueue@8 |
| KeRemoveGroupAffinityEx@12 |
| KeRemoveProcessorAffinityEx@8 |
| KeRemoveProcessorGroupAffinity@8 |
| KeRemoveQueue@12 |
| KeRemoveQueueDpc@4 |
| KeRemoveQueueEx@24 |
| KeRemoveSystemServiceTable@4 |
| KeResetEvent@4 |
| KeRestoreExtendedProcessorState@4 |
| KeRestoreFloatingPointState@4 |
| KeRevertToUserAffinityThread@0 |
| KeRevertToUserAffinityThreadEx@4 |
| KeRevertToUserGroupAffinityThread@4 |
| KeRundownQueue@4 |
| KeSaveExtendedProcessorState@12 |
| KeSaveFloatingPointState@4 |
| KeSaveStateForHibernate@0 |
| KeServiceDescriptorTable DATA |
| KeSetActualBasePriorityThread@8 |
| KeSetAffinityThread@8 |
| KeSetBasePriorityThread@8 |
| KeSetCoalescableTimer@24 |
| KeSetDmaIoCoherency@4 |
| KeSetEvent@12 |
| KeSetEventBoostPriority@8 |
| KeSetHardwareCounterConfiguration@8 |
| KeSetIdealProcessorThread@8 |
| KeSetImportanceDpc@8 |
| KeSetKernelStackSwapEnable@4 |
| KeSetPriorityThread@8 |
| KeSetProfileIrql@4 |
| KeSetSystemAffinityThread@4 |
| KeSetSystemAffinityThreadEx@4 |
| KeSetSystemGroupAffinityThread@8 |
| KeSetTargetProcessorDpc@8 |
| KeSetTargetProcessorDpcEx@8 |
| KeSetTimeIncrement@8 |
| KeSetTimer@16 |
| KeSetTimerEx@20 |
| KeSignalCallDpcDone@4 |
| KeSignalCallDpcSynchronize@4 |
| KeStackAttachProcess@8 |
| KeStartDynamicProcessor@16 |
| KeSubtractAffinityEx@12 |
| KeSynchronizeExecution@12 |
| KeTestAlertThread@4 |
| KeTickCount DATA |
| KeUnstackDetachProcess@4 |
| KeUpdateSystemTime@0 |
| KeUserModeCallback@20 |
| KeWaitForMultipleObjects@32 |
| KeWaitForMutexObject@20 |
| KeWaitForSingleObject@20 |
| KiBugCheckData DATA |
| KiCheckForKernelApcDelivery@0 |
| KiCoprocessorError@0 |
| KiDeliverApc@12 |
| KiDispatchInterrupt@0 |
| KiIpiServiceRoutine@8 |
| ;KiUnexpectedInterrupt ; Check!!! Couldn't determine function argument count. Function doesn't return. |
| LdrAccessResource@16 |
| LdrEnumResources@20 |
| LdrFindResourceDirectory_U@16 |
| LdrFindResourceEx_U@20 |
| LdrFindResource_U@16 |
| LdrResFindResource@36 |
| LdrResFindResourceDirectory@28 |
| LdrResSearchResource@32 |
| LpcPortObjectType DATA |
| LpcReplyWaitReplyPort@12 |
| LpcRequestPort@8 |
| LpcRequestWaitReplyPort@12 |
| LpcRequestWaitReplyPortEx@12 |
| LpcSendWaitReceivePort@28 |
| LsaCallAuthenticationPackage@28 |
| LsaDeregisterLogonProcess@4 |
| LsaFreeReturnBuffer@4 |
| LsaLogonUser@56 |
| LsaLookupAuthenticationPackage@12 |
| LsaRegisterLogonProcess@12 |
| Mm64BitPhysicalAddress DATA |
| MmAddPhysicalMemory@8 |
| MmAddVerifierThunks@8 |
| MmAdjustWorkingSetSize@16 |
| MmAdvanceMdl@8 |
| MmAllocateContiguousMemory@12 |
| MmAllocateContiguousMemorySpecifyCache@32 |
| MmAllocateContiguousMemorySpecifyCacheNode@36 |
| MmAllocateMappingAddress@8 |
| MmAllocateNonCachedMemory@4 |
| MmAllocatePagesForMdl@28 |
| MmAllocatePagesForMdlEx@36 |
| MmBadPointer DATA |
| MmBuildMdlForNonPagedPool@4 |
| MmCanFileBeTruncated@8 |
| MmCommitSessionMappedView@8 |
| MmCopyVirtualMemory@28 |
| MmCreateMdl@12 |
| MmCreateMirror@0 |
| MmCreateSection@32 |
| MmDisableModifiedWriteOfSection@4 |
| MmDoesFileHaveUserWritableReferences@4 |
| MmFlushImageSection@8 |
| MmForceSectionClosed@8 |
| MmFreeContiguousMemory@4 |
| MmFreeContiguousMemorySpecifyCache@12 |
| MmFreeMappingAddress@8 |
| MmFreeNonCachedMemory@8 |
| MmFreePagesFromMdl@4 |
| MmGetPhysicalAddress@4 |
| MmGetPhysicalMemoryRanges@0 |
| MmGetSystemRoutineAddress@4 |
| MmGetVirtualForPhysical@8 |
| MmGrowKernelStack@4 |
| MmHighestUserAddress DATA |
| MmIsAddressValid@4 |
| MmIsDriverVerifying@4 |
| MmIsDriverVerifyingByAddress@4 |
| MmIsIoSpaceActive@12 |
| MmIsNonPagedSystemAddressValid@4 |
| MmIsRecursiveIoFault@0 |
| MmIsThisAnNtAsSystem@0 |
| MmIsVerifierEnabled@4 |
| MmLockPagableDataSection@4 |
| MmLockPagableImageSection@4 |
| MmLockPagableSectionByHandle@4 |
| MmMapIoSpace@16 |
| MmMapLockedPages@8 |
| MmMapLockedPagesSpecifyCache@24 |
| MmMapLockedPagesWithReservedMapping@16 |
| MmMapMemoryDumpMdl@4 |
| MmMapUserAddressesToPage@12 |
| MmMapVideoDisplay@16 |
| MmMapViewInSessionSpace@12 |
| MmMapViewInSystemSpace@12 |
| MmMapViewOfSection@40 |
| MmMarkPhysicalMemoryAsBad@8 |
| MmMarkPhysicalMemoryAsGood@8 |
| MmPageEntireDriver@4 |
| MmPrefetchPages@8 |
| MmProbeAndLockPages@12 |
| MmProbeAndLockProcessPages@16 |
| MmProbeAndLockSelectedPages@16 |
| MmProtectMdlSystemAddress@8 |
| MmQuerySystemSize@0 |
| MmRemovePhysicalMemory@8 |
| MmResetDriverPaging@4 |
| MmRotatePhysicalView@24 |
| MmSectionObjectType DATA |
| MmSecureVirtualMemory@12 |
| MmSetAddressRangeModified@8 |
| MmSetBankedSection@24 |
| MmSizeOfMdl@8 |
| MmSystemRangeStart DATA |
| MmTrimAllSystemPagableMemory@4 |
| MmUnlockPagableImageSection@4 |
| MmUnlockPages@4 |
| MmUnmapIoSpace@8 |
| MmUnmapLockedPages@8 |
| MmUnmapReservedMapping@12 |
| MmUnmapVideoDisplay@8 |
| MmUnmapViewInSessionSpace@4 |
| MmUnmapViewInSystemSpace@4 |
| MmUnmapViewOfSection@8 |
| MmUnsecureVirtualMemory@4 |
| MmUserProbeAddress DATA |
| NlsAnsiCodePage DATA |
| NlsLeadByteInfo DATA |
| NlsMbCodePageTag DATA |
| NlsMbOemCodePageTag DATA |
| NlsOemCodePage DATA |
| NlsOemLeadByteInfo DATA |
| NtAddAtom@12 |
| NtAdjustPrivilegesToken@24 |
| NtAllocateLocallyUniqueId@4 |
| NtAllocateUuids@16 |
| NtAllocateVirtualMemory@24 |
| NtBuildGUID@0 |
| NtBuildLab@0 |
| NtBuildNumber@0 |
| NtClose@4 |
| NtCommitComplete@8 |
| NtCommitEnlistment@8 |
| NtCommitTransaction@8 |
| NtConnectPort@32 |
| NtCreateEnlistment@32 |
| NtCreateEvent@20 |
| NtCreateFile@44 |
| NtCreateResourceManager@28 |
| NtCreateSection@28 |
| NtCreateTransaction@40 |
| NtCreateTransactionManager@24 |
| NtDeleteAtom@4 |
| NtDeleteFile@4 |
| NtDeviceIoControlFile@40 |
| NtDuplicateObject@28 |
| NtDuplicateToken@24 |
| NtEnumerateTransactionObject@20 |
| NtFindAtom@12 |
| NtFreeVirtualMemory@16 |
| NtFreezeTransactions@8 |
| NtFsControlFile@40 |
| NtGetEnvironmentVariableEx@20 |
| NtGetNotificationResourceManager@28 |
| NtGlobalFlag DATA |
| NtLockFile@40 |
| NtMakePermanentObject@4 |
| NtMapViewOfSection@40 |
| NtNotifyChangeDirectoryFile@36 |
| NtOpenEnlistment@20 |
| NtOpenFile@24 |
| NtOpenProcess@16 |
| NtOpenProcessToken@12 |
| NtOpenProcessTokenEx@16 |
| NtOpenResourceManager@20 |
| NtOpenThread@16 |
| NtOpenThreadToken@16 |
| NtOpenThreadTokenEx@20 |
| NtOpenTransaction@20 |
| NtOpenTransactionManager@24 |
| NtPrePrepareComplete@8 |
| NtPrePrepareEnlistment@8 |
| NtPrepareComplete@8 |
| NtPrepareEnlistment@8 |
| NtPropagationComplete@16 |
| NtPropagationFailed@12 |
| NtQueryDirectoryFile@44 |
| NtQueryEaFile@36 |
| NtQueryEnvironmentVariableInfoEx@16 |
| NtQueryInformationAtom@20 |
| NtQueryInformationEnlistment@20 |
| NtQueryInformationFile@20 |
| NtQueryInformationProcess@20 |
| NtQueryInformationResourceManager@20 |
| NtQueryInformationThread@20 |
| NtQueryInformationToken@20 |
| NtQueryInformationTransaction@20 |
| NtQueryInformationTransactionManager@20 |
| NtQueryQuotaInformationFile@36 |
| NtQuerySecurityAttributesToken@24 |
| NtQuerySecurityObject@20 |
| NtQuerySystemInformation@16 |
| NtQuerySystemInformationEx@24 |
| NtQueryVolumeInformationFile@20 |
| NtReadFile@36 |
| NtReadOnlyEnlistment@8 |
| NtRecoverEnlistment@8 |
| NtRecoverResourceManager@4 |
| NtRecoverTransactionManager@4 |
| NtRequestPort@8 |
| NtRequestWaitReplyPort@12 |
| NtRollbackComplete@8 |
| NtRollbackEnlistment@8 |
| NtRollbackTransaction@8 |
| NtSetEaFile@16 |
| NtSetEvent@8 |
| NtSetInformationEnlistment@16 |
| NtSetInformationFile@20 |
| NtSetInformationProcess@16 |
| NtSetInformationResourceManager@16 |
| NtSetInformationThread@16 |
| NtSetInformationToken@16 |
| NtSetInformationTransaction@16 |
| NtSetQuotaInformationFile@16 |
| NtSetSecurityObject@12 |
| NtSetVolumeInformationFile@20 |
| NtShutdownSystem@4 |
| NtThawTransactions@0 |
| NtTraceControl@24 |
| NtTraceEvent@16 |
| NtUnlockFile@20 |
| NtVdmControl@8 |
| NtWaitForSingleObject@12 |
| NtWriteFile@36 |
| ObAssignSecurity@16 |
| ObCheckCreateObjectAccess@28 |
| ObCheckObjectAccess@20 |
| ObCloseHandle@8 |
| ObCreateObject@36 |
| ObCreateObjectType@16 |
| ObDeleteCapturedInsertInfo@4 |
| ObDereferenceObject@4 |
| ObDereferenceObjectDeferDelete@4 |
| ObDereferenceObjectDeferDeleteWithTag@8 |
| ObDereferenceSecurityDescriptor@8 |
| ObFindHandleForObject@20 |
| ObGetFilterVersion@0 |
| ObGetObjectSecurity@12 |
| ObGetObjectType@4 |
| ObInsertObject@24 |
| ObIsDosDeviceLocallyMapped@8 |
| ObIsKernelHandle@4 |
| ObLogSecurityDescriptor@12 |
| ObMakeTemporaryObject@4 |
| ObOpenObjectByName@28 |
| ObOpenObjectByPointer@28 |
| ObOpenObjectByPointerWithTag@32 |
| ObQueryNameInfo@4 |
| ObQueryNameString@16 |
| ObQueryObjectAuditingByHandle@8 |
| ObReferenceObjectByHandle@24 |
| ObReferenceObjectByHandleWithTag@28 |
| ObReferenceObjectByName@32 |
| ObReferenceObjectByPointer@16 |
| ObReferenceObjectByPointerWithTag@20 |
| ObReferenceSecurityDescriptor@8 |
| ObRegisterCallbacks@8 |
| ObReleaseObjectSecurity@8 |
| ObSetHandleAttributes@12 |
| ObSetSecurityDescriptorInfo@24 |
| ObSetSecurityObjectByPointer@12 |
| ObUnRegisterCallbacks@4 |
| POGOBuffer DATA |
| PcwAddInstance@20 |
| PcwCloseInstance@4 |
| PcwCreateInstance@20 |
| PcwRegister@8 |
| PcwUnregister@4 |
| PfFileInfoNotify@4 |
| PfxFindPrefix@8 |
| PfxInitialize@4 |
| PfxInsertPrefix@12 |
| PfxRemovePrefix@8 |
| PoCallDriver@8 |
| PoCancelDeviceNotify@4 |
| PoClearPowerRequest@8 |
| PoCreatePowerRequest@12 |
| PoDeletePowerRequest@4 |
| PoDisableSleepStates@12 |
| PoEndDeviceBusy@4 |
| PoGetSystemWake@4 |
| PoQueryWatchdogTime@8 |
| PoQueueShutdownWorkItem@4 |
| PoReenableSleepStates@4 |
| PoRegisterDeviceForIdleDetection@16 |
| PoRegisterDeviceNotify@24 |
| PoRegisterPowerSettingCallback@20 |
| PoRegisterSystemState@8 |
| PoRequestPowerIrp@24 |
| PoRequestShutdownEvent@4 |
| PoSetDeviceBusyEx@4 |
| PoSetFixedWakeSource@4 |
| PoSetHiberRange@20 |
| PoSetPowerRequest@8 |
| PoSetPowerState@12 |
| PoSetSystemState@4 |
| PoSetSystemWake@4 |
| PoShutdownBugCheck@4 |
| PoStartDeviceBusy@4 |
| PoStartNextPowerIrp@4 |
| PoUnregisterPowerSettingCallback@4 |
| PoUnregisterSystemState@4 |
| PoUserShutdownInitiated@0 |
| ProbeForRead@12 |
| ProbeForWrite@12 |
| PsCreateSystemProcess@12 |
| PsAcquireProcessExitSynchronization@4 |
| PsAssignImpersonationToken@8 |
| PsChargePoolQuota@12 |
| PsChargeProcessCpuCycles@12 |
| PsChargeProcessNonPagedPoolQuota@8 |
| PsChargeProcessPagedPoolQuota@8 |
| PsChargeProcessPoolQuota@12 |
| PsCreateSystemThread@28 |
| PsDereferenceImpersonationToken@4 |
| PsDereferencePrimaryToken@4 |
| PsDisableImpersonation@8 |
| PsEnterPriorityRegion@0 |
| PsEstablishWin32Callouts@4 |
| PsGetContextThread@12 |
| PsGetCurrentProcess@0 |
| PsGetCurrentProcessId@0 |
| PsGetCurrentProcessSessionId@0 |
| PsGetCurrentProcessWin32Process@0 |
| PsGetCurrentThread@0 |
| PsGetCurrentThreadId@0 |
| PsGetCurrentThreadPreviousMode@0 |
| PsGetCurrentThreadProcess@0 |
| PsGetCurrentThreadProcessId@0 |
| PsGetCurrentThreadStackBase@0 |
| PsGetCurrentThreadStackLimit@0 |
| PsGetCurrentThreadTeb@0 |
| PsGetCurrentThreadWin32Thread@0 |
| PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion@4 |
| PsGetJobLock@4 |
| PsGetJobSessionId@4 |
| PsGetJobUIRestrictionsClass@4 |
| PsGetProcessCreateTimeQuadPart@4 |
| PsGetProcessDebugPort@4 |
| PsGetProcessExitProcessCalled@4 |
| PsGetProcessExitStatus@4 |
| PsGetProcessExitTime@0 |
| PsGetProcessId@4 |
| PsGetProcessImageFileName@4 |
| PsGetProcessInheritedFromUniqueProcessId@4 |
| PsGetProcessJob@4 |
| PsGetProcessPeb@4 |
| PsGetProcessPriorityClass@4 |
| PsGetProcessSectionBaseAddress@4 |
| PsGetProcessSecurityPort@4 |
| PsGetProcessSessionId@4 |
| PsGetProcessSessionIdEx@4 |
| PsGetProcessWin32Process@4 |
| PsGetProcessWin32WindowStation@4 |
| PsGetThreadFreezeCount@4 |
| PsGetThreadHardErrorsAreDisabled@4 |
| PsGetThreadId@4 |
| PsGetThreadProcess@4 |
| PsGetThreadProcessId@4 |
| PsGetThreadSessionId@4 |
| PsGetThreadTeb@4 |
| PsGetThreadWin32Thread@4 |
| PsGetVersion@16 |
| PsImpersonateClient@20 |
| PsInitialSystemProcess DATA |
| PsIsCurrentThreadPrefetching@0 |
| PsIsProcessBeingDebugged@4 |
| PsIsProtectedProcess@4 |
| PsIsSystemProcess@4 |
| PsIsSystemThread@4 |
| PsIsThreadImpersonating@4 |
| PsIsThreadTerminating@4 |
| PsJobType DATA |
| PsLeavePriorityRegion@0 |
| PsLookupProcessByProcessId@8 |
| PsLookupProcessThreadByCid@12 |
| PsLookupThreadByThreadId@8 |
| PsProcessType DATA |
| PsQueryProcessExceptionFlags@12 |
| PsReferenceImpersonationToken@16 |
| PsReferencePrimaryToken@4 |
| PsReferenceProcessFilePointer@8 |
| PsReleaseProcessExitSynchronization@4 |
| PsRemoveCreateThreadNotifyRoutine@4 |
| PsRemoveLoadImageNotifyRoutine@4 |
| PsRestoreImpersonation@8 |
| PsResumeProcess@4 |
| PsReturnPoolQuota@12 |
| PsReturnProcessNonPagedPoolQuota@8 |
| PsReturnProcessPagedPoolQuota@8 |
| PsRevertThreadToSelf@4 |
| PsRevertToSelf@0 |
| PsSetContextThread@12 |
| PsSetCreateProcessNotifyRoutine@8 |
| PsSetCreateProcessNotifyRoutineEx@8 |
| PsSetCreateThreadNotifyRoutine@4 |
| PsSetCurrentThreadPrefetching@4 |
| PsSetJobUIRestrictionsClass@8 |
| PsSetLegoNotifyRoutine@4 |
| PsSetLoadImageNotifyRoutine@4 |
| PsSetProcessPriorityByClass@8 |
| PsSetProcessPriorityClass@8 |
| PsSetProcessSecurityPort@8 |
| PsSetProcessWin32Process@12 |
| PsSetProcessWindowStation@8 |
| PsSetThreadHardErrorsAreDisabled@8 |
| PsSetThreadWin32Thread@12 |
| PsSuspendProcess@4 |
| PsTerminateSystemThread@4 |
| PsThreadType DATA |
| PsUILanguageComitted DATA |
| PsWrapApcWow64Thread@8 |
| READ_REGISTER_BUFFER_UCHAR@12 |
| READ_REGISTER_BUFFER_ULONG@12 |
| READ_REGISTER_BUFFER_USHORT@12 |
| READ_REGISTER_UCHAR@4 |
| READ_REGISTER_ULONG@4 |
| READ_REGISTER_USHORT@4 |
| RtlAbsoluteToSelfRelativeSD@12 |
| RtlAddAccessAllowedAce@16 |
| RtlAddAccessAllowedAceEx@20 |
| RtlAddAce@20 |
| RtlAddAtomToAtomTable@12 |
| RtlAddRange@36 |
| RtlAllocateHeap@12 |
| RtlAnsiCharToUnicodeChar@4 |
| RtlAnsiStringToUnicodeSize@4 |
| RtlAnsiStringToUnicodeString@12 |
| RtlAppendAsciizToString@8 |
| RtlAppendStringToString@8 |
| RtlAppendUnicodeStringToString@8 |
| RtlAppendUnicodeToString@8 |
| RtlAreAllAccessesGranted@8 |
| RtlAreAnyAccessesGranted@8 |
| RtlAreBitsClear@12 |
| RtlAreBitsSet@12 |
| RtlAssert@16 |
| RtlCaptureContext@4 |
| RtlCaptureStackBackTrace@16 |
| RtlCharToInteger@12 |
| RtlCheckRegistryKey@8 |
| RtlClearAllBits@4 |
| RtlClearBit@8 |
| RtlClearBits@12 |
| RtlCmDecodeMemIoResource@8 |
| RtlCmEncodeMemIoResource@24 |
| RtlCompareAltitudes@8 |
| RtlCompareMemory@12 |
| RtlCompareMemoryUlong@12 |
| RtlCompareString@12 |
| RtlCompareUnicodeString@12 |
| RtlCompareUnicodeStrings@20 |
| RtlCompressBuffer@32 |
| RtlCompressChunks@28 |
| RtlComputeCrc32@12 |
| RtlContractHashTable@4 |
| RtlConvertLongToLargeInteger@4 |
| RtlConvertSidToUnicodeString@12 |
| RtlConvertUlongToLargeInteger@4 |
| RtlCopyLuid@8 |
| RtlCopyLuidAndAttributesArray@12 |
| RtlCopyRangeList@8 |
| RtlCopySid@12 |
| RtlCopySidAndAttributesArray@28 |
| RtlCopyString@8 |
| RtlCopyUnicodeString@8 |
| RtlCreateAcl@12 |
| RtlCreateAtomTable@8 |
| RtlCreateHashTable@12 |
| RtlCreateHeap@24 |
| RtlCreateRegistryKey@8 |
| RtlCreateSecurityDescriptor@8 |
| RtlCreateSystemVolumeInformationFolder@4 |
| RtlCreateUnicodeString@8 |
| RtlCustomCPToUnicodeN@24 |
| RtlDecompressBuffer@24 |
| RtlDecompressChunks@28 |
| RtlDecompressFragment@32 |
| RtlDelete@4 |
| RtlDeleteAce@8 |
| RtlDeleteAtomFromAtomTable@8 |
| RtlDeleteElementGenericTable@8 |
| RtlDeleteElementGenericTableAvl@8 |
| RtlDeleteHashTable@4 |
| RtlDeleteNoSplay@8 |
| RtlDeleteOwnersRanges@8 |
| RtlDeleteRange@24 |
| RtlDeleteRegistryValue@12 |
| RtlDescribeChunk@20 |
| RtlDestroyAtomTable@4 |
| RtlDestroyHeap@4 |
| RtlDowncaseUnicodeChar@4 |
| RtlDowncaseUnicodeString@12 |
| RtlDuplicateUnicodeString@12 |
| RtlEmptyAtomTable@8 |
| RtlEndEnumerationHashTable@8 |
| RtlEndWeakEnumerationHashTable@8 |
| RtlEnlargedIntegerMultiply@8 |
| RtlEnlargedUnsignedDivide@16 |
| RtlEnlargedUnsignedMultiply@8 |
| RtlEnumerateEntryHashTable@8 |
| RtlEnumerateGenericTable@8 |
| RtlEnumerateGenericTableAvl@8 |
| RtlEnumerateGenericTableLikeADirectory@28 |
| RtlEnumerateGenericTableWithoutSplaying@8 |
| RtlEnumerateGenericTableWithoutSplayingAvl@8 |
| RtlEqualLuid@8 |
| RtlEqualSid@8 |
| RtlEqualString@12 |
| RtlEqualUnicodeString@12 |
| RtlEthernetAddressToStringA@8 |
| RtlEthernetAddressToStringW@8 |
| RtlEthernetStringToAddressA@12 |
| RtlEthernetStringToAddressW@12 |
| RtlExpandHashTable@4 |
| RtlExtendedIntegerMultiply@12 |
| RtlExtendedLargeIntegerDivide@16 |
| RtlExtendedMagicDivide@20 |
| RtlFillMemory@12 |
| RtlFillMemoryUlong@12 |
| RtlFillMemoryUlonglong@16 |
| RtlFindAceByType@12 |
| RtlFindClearBits@12 |
| RtlFindClearBitsAndSet@12 |
| RtlFindClearRuns@16 |
| RtlFindClosestEncodableLength@12 |
| RtlFindFirstRunClear@8 |
| RtlFindLastBackwardRunClear@12 |
| RtlFindLeastSignificantBit@8 |
| RtlFindLongestRunClear@8 |
| RtlFindMessage@20 |
| RtlFindMostSignificantBit@8 |
| RtlFindNextForwardRunClear@12 |
| RtlFindRange@48 |
| RtlFindSetBits@12 |
| RtlFindSetBitsAndClear@12 |
| RtlFindUnicodePrefix@12 |
| RtlFormatCurrentUserKeyPath@4 |
| RtlFormatMessage@36 |
| RtlFreeAnsiString@4 |
| RtlFreeHeap@12 |
| RtlFreeOemString@4 |
| RtlFreeRangeList@4 |
| RtlFreeUnicodeString@4 |
| RtlGUIDFromString@8 |
| RtlGenerate8dot3Name@16 |
| RtlGetAce@12 |
| RtlGetCallersAddress@8 |
| RtlGetCompressionWorkSpaceSize@12 |
| RtlGetDaclSecurityDescriptor@16 |
| RtlGetDefaultCodePage@8 |
| RtlGetElementGenericTable@8 |
| RtlGetElementGenericTableAvl@8 |
| RtlGetEnabledExtendedFeatures@8 |
| RtlGetFirstRange@12 |
| RtlGetGroupSecurityDescriptor@12 |
| RtlGetIntegerAtom@8 |
| RtlGetLastRange@12 |
| RtlGetNextEntryHashTable@8 |
| RtlGetNextRange@12 |
| RtlGetNtGlobalFlags@0 |
| RtlGetOwnerSecurityDescriptor@12 |
| RtlGetProductInfo@20 |
| RtlGetSaclSecurityDescriptor@16 |
| RtlGetSetBootStatusData@24 |
| RtlGetThreadLangIdByIndex@16 |
| RtlGetVersion@4 |
| RtlHashUnicodeString@16 |
| RtlIdnToAscii@20 |
| RtlIdnToNameprepUnicode@20 |
| RtlIdnToUnicode@20 |
| RtlImageDirectoryEntryToData@16 |
| RtlImageNtHeader@4 |
| RtlInitAnsiString@8 |
| RtlInitAnsiStringEx@8 |
| RtlInitCodePageTable@8 |
| RtlInitEnumerationHashTable@8 |
| RtlInitString@8 |
| RtlInitUnicodeString@8 |
| RtlInitUnicodeStringEx@8 |
| RtlInitWeakEnumerationHashTable@8 |
| RtlInitializeBitMap@12 |
| RtlInitializeGenericTable@20 |
| RtlInitializeGenericTableAvl@20 |
| RtlInitializeRangeList@4 |
| RtlInitializeSid@12 |
| RtlInitializeUnicodePrefix@4 |
| RtlInsertElementGenericTable@16 |
| RtlInsertElementGenericTableAvl@16 |
| RtlInsertElementGenericTableFull@24 |
| RtlInsertElementGenericTableFullAvl@24 |
| RtlInsertEntryHashTable@16 |
| RtlInsertUnicodePrefix@12 |
| RtlInt64ToUnicodeString@16 |
| RtlIntegerToChar@16 |
| RtlIntegerToUnicode@16 |
| RtlIntegerToUnicodeString@12 |
| RtlInvertRangeList@8 |
| RtlInvertRangeListEx@20 |
| RtlIoDecodeMemIoResource@16 |
| RtlIoEncodeMemIoResource@40 |
| RtlIpv4AddressToStringA@8 |
| RtlIpv4AddressToStringExA@16 |
| RtlIpv4AddressToStringExW@16 |
| RtlIpv4AddressToStringW@8 |
| RtlIpv4StringToAddressA@16 |
| RtlIpv4StringToAddressExA@16 |
| RtlIpv4StringToAddressExW@16 |
| RtlIpv4StringToAddressW@16 |
| RtlIpv6AddressToStringA@8 |
| RtlIpv6AddressToStringExA@20 |
| RtlIpv6AddressToStringExW@20 |
| RtlIpv6AddressToStringW@8 |
| RtlIpv6StringToAddressA@12 |
| RtlIpv6StringToAddressExA@16 |
| RtlIpv6StringToAddressExW@16 |
| RtlIpv6StringToAddressW@12 |
| RtlIsGenericTableEmpty@4 |
| RtlIsGenericTableEmptyAvl@4 |
| RtlIsNameLegalDOS8Dot3@12 |
| RtlIsNormalizedString@16 |
| RtlIsNtDdiVersionAvailable@4 |
| RtlIsRangeAvailable@40 |
| RtlIsServicePackVersionInstalled@4 |
| RtlIsValidOemCharacter@4 |
| RtlLargeIntegerAdd@16 |
| RtlLargeIntegerArithmeticShift@12 |
| RtlLargeIntegerDivide@20 |
| RtlLargeIntegerNegate@8 |
| RtlLargeIntegerShiftLeft@12 |
| RtlLargeIntegerShiftRight@12 |
| RtlLargeIntegerSubtract@16 |
| RtlLengthRequiredSid@4 |
| RtlLengthSecurityDescriptor@4 |
| RtlLengthSid@4 |
| RtlLoadString@32 |
| RtlLocalTimeToSystemTime@8 |
| RtlLockBootStatusData@4 |
| RtlLookupAtomInAtomTable@12 |
| RtlLookupElementGenericTable@8 |
| RtlLookupElementGenericTableAvl@8 |
| RtlLookupElementGenericTableFull@16 |
| RtlLookupElementGenericTableFullAvl@16 |
| RtlLookupEntryHashTable@12 |
| RtlLookupFirstMatchingElementGenericTableAvl@12 |
| RtlMapGenericMask@8 |
| RtlMapSecurityErrorToNtStatus@4 |
| RtlMergeRangeLists@16 |
| RtlMoveMemory@12 |
| RtlMultiByteToUnicodeN@20 |
| RtlMultiByteToUnicodeSize@12 |
| RtlNextUnicodePrefix@8 |
| RtlNormalizeString@20 |
| RtlNtStatusToDosError@4 |
| RtlNtStatusToDosErrorNoTeb@4 |
| RtlNumberGenericTableElements@4 |
| RtlNumberGenericTableElementsAvl@4 |
| RtlNumberOfClearBits@4 |
| RtlNumberOfSetBits@4 |
| RtlNumberOfSetBitsUlongPtr@4 |
| RtlOemStringToCountedUnicodeString@12 |
| RtlOemStringToUnicodeSize@4 |
| RtlOemStringToUnicodeString@12 |
| RtlOemToUnicodeN@20 |
| RtlOwnerAcesPresent@4 |
| RtlPinAtomInAtomTable@8 |
| RtlPrefixString@12 |
| RtlPrefixUnicodeString@12 |
| RtlQueryAtomInAtomTable@24 |
| RtlQueryDynamicTimeZoneInformation@4 |
| RtlQueryElevationFlags@4 |
| RtlQueryModuleInformation@12 |
| RtlQueryRegistryValues@20 |
| RtlQueryTimeZoneInformation@4 |
| RtlRaiseException@24 |
| RtlRandom@4 |
| RtlRandomEx@4 |
| RtlRealPredecessor@4 |
| RtlRealSuccessor@4 |
| RtlRemoveEntryHashTable@12 |
| RtlRemoveUnicodePrefix@8 |
| RtlReplaceSidInSd@16 |
| RtlReserveChunk@20 |
| RtlRunOnceBeginInitialize@12 |
| RtlRunOnceComplete@12 |
| RtlRunOnceExecuteOnce@16 |
| RtlRunOnceInitialize@4 |
| RtlSecondsSince1970ToTime@8 |
| RtlSecondsSince1980ToTime@8 |
| RtlSelfRelativeToAbsoluteSD2@8 |
| RtlSelfRelativeToAbsoluteSD@44 |
| RtlSetAllBits@4 |
| RtlSetBit@8 |
| RtlSetBits@12 |
| RtlSetDaclSecurityDescriptor@16 |
| RtlSetDynamicTimeZoneInformation@4 |
| RtlSetGroupSecurityDescriptor@12 |
| RtlSetOwnerSecurityDescriptor@12 |
| RtlSetSaclSecurityDescriptor@16 |
| RtlSetTimeZoneInformation@4 |
| RtlSidHashInitialize@12 |
| RtlSidHashLookup@8 |
| RtlSizeHeap@12 |
| RtlSplay@4 |
| RtlStringFromGUID@8 |
| RtlSubAuthorityCountSid@4 |
| RtlSubAuthoritySid@8 |
| RtlSubtreePredecessor@4 |
| RtlSubtreeSuccessor@4 |
| RtlSystemTimeToLocalTime@8 |
| RtlTestBit@8 |
| RtlTimeFieldsToTime@8 |
| RtlTimeToElapsedTimeFields@8 |
| RtlTimeToSecondsSince1970@8 |
| RtlTimeToSecondsSince1980@8 |
| RtlTimeToTimeFields@8 |
| RtlTraceDatabaseAdd@16 |
| RtlTraceDatabaseCreate@20 |
| RtlTraceDatabaseDestroy@4 |
| RtlTraceDatabaseEnumerate@12 |
| RtlTraceDatabaseFind@16 |
| RtlTraceDatabaseLock@4 |
| RtlTraceDatabaseUnlock@4 |
| RtlTraceDatabaseValidate@4 |
| RtlUTF8ToUnicodeN@20 |
| RtlUnicodeStringToAnsiSize@4 |
| RtlUnicodeStringToAnsiString@12 |
| RtlUnicodeStringToCountedOemString@12 |
| RtlUnicodeStringToInteger@12 |
| RtlUnicodeStringToOemSize@4 |
| RtlUnicodeStringToOemString@12 |
| RtlUnicodeToCustomCPN@24 |
| RtlUnicodeToMultiByteN@20 |
| RtlUnicodeToMultiByteSize@12 |
| RtlUnicodeToOemN@20 |
| RtlUnicodeToUTF8N@20 |
| RtlUnlockBootStatusData@4 |
| RtlUnwind@16 |
| RtlUpcaseUnicodeChar@4 |
| RtlUpcaseUnicodeString@12 |
| RtlUpcaseUnicodeStringToAnsiString@12 |
| RtlUpcaseUnicodeStringToCountedOemString@12 |
| RtlUpcaseUnicodeStringToOemString@12 |
| RtlUpcaseUnicodeToCustomCPN@24 |
| RtlUpcaseUnicodeToMultiByteN@20 |
| RtlUpcaseUnicodeToOemN@20 |
| RtlUpperChar@4 |
| RtlUpperString@8 |
| RtlValidRelativeSecurityDescriptor@12 |
| RtlValidSecurityDescriptor@4 |
| RtlValidSid@4 |
| RtlValidateUnicodeString@8 |
| RtlVerifyVersionInfo@16 |
| RtlVolumeDeviceToDosName@8 |
| RtlWalkFrameChain@12 |
| RtlWeaklyEnumerateEntryHashTable@8 |
| RtlWriteRegistryValue@24 |
| RtlZeroHeap@8 |
| RtlZeroMemory@8 |
| RtlxAnsiStringToUnicodeSize@4 |
| RtlxOemStringToUnicodeSize@4 |
| RtlxUnicodeStringToAnsiSize@4 |
| RtlxUnicodeStringToOemSize@4 |
| SeAccessCheck@40 |
| SeAccessCheckEx@24 |
| SeAccessCheckFromState@40 |
| SeAccessCheckWithHint@44 |
| SeAppendPrivileges@8 |
| SeAssignSecurity@28 |
| SeAssignSecurityEx@36 |
| SeAuditHardLinkCreation@12 |
| SeAuditHardLinkCreationWithTransaction@16 |
| SeAuditTransactionStateChange@12 |
| SeAuditingAnyFileEventsWithContext@8 |
| SeAuditingFileEvents@8 |
| SeAuditingFileEventsWithContext@12 |
| SeAuditingFileOrGlobalEvents@12 |
| SeAuditingHardLinkEvents@8 |
| SeAuditingHardLinkEventsWithContext@12 |
| SeCaptureSecurityDescriptor@20 |
| SeCaptureSubjectContext@4 |
| SeCaptureSubjectContextEx@12 |
| SeCloseObjectAuditAlarm@12 |
| SeCloseObjectAuditAlarmForNonObObject@16 |
| SeComputeAutoInheritByObjectType@12 |
| SeCreateAccessState@16 |
| SeCreateAccessStateEx@24 |
| SeCreateClientSecurity@16 |
| SeCreateClientSecurityFromSubjectContext@16 |
| SeDeassignSecurity@4 |
| SeDeleteAccessState@4 |
| SeDeleteObjectAuditAlarm@8 |
| SeDeleteObjectAuditAlarmWithTransaction@12 |
| SeExamineSacl@24 |
| SeExports DATA |
| SeFilterToken@24 |
| SeFreePrivileges@4 |
| SeGetLinkedToken@12 |
| SeImpersonateClient@8 |
| SeImpersonateClientEx@8 |
| SeLocateProcessImageName@8 |
| SeLockSubjectContext@4 |
| SeMarkLogonSessionForTerminationNotification@4 |
| SeOpenObjectAuditAlarm@36 |
| SeOpenObjectAuditAlarmForNonObObject@44 |
| SeOpenObjectAuditAlarmWithTransaction@40 |
| SeOpenObjectForDeleteAuditAlarm@36 |
| SeOpenObjectForDeleteAuditAlarmWithTransaction@40 |
| SePrivilegeCheck@12 |
| SePrivilegeObjectAuditAlarm@24 |
| SePublicDefaultDacl DATA |
| SeQueryAuthenticationIdToken@8 |
| SeQueryInformationToken@12 |
| SeQuerySecurityAttributesToken@24 |
| SeQuerySecurityDescriptorInfo@16 |
| SeQuerySessionIdToken@8 |
| SeRegisterLogonSessionTerminatedRoutine@4 |
| SeReleaseSecurityDescriptor@12 |
| SeReleaseSubjectContext@4 |
| SeReportSecurityEvent@16 |
| SeReportSecurityEventWithSubCategory@20 |
| SeSetAccessStateGenericMapping@8 |
| SeSetAuditParameter@16 |
| SeSetSecurityAttributesToken@16 |
| SeSetSecurityDescriptorInfo@24 |
| SeSetSecurityDescriptorInfoEx@28 |
| SeSinglePrivilegeCheck@12 |
| SeSrpAccessCheck@24 |
| SeSystemDefaultDacl DATA |
| SeTokenImpersonationLevel@4 |
| SeTokenIsAdmin@4 |
| SeTokenIsRestricted@4 |
| SeTokenIsWriteRestricted@4 |
| SeTokenObjectType DATA |
| SeTokenType@4 |
| SeUnlockSubjectContext@4 |
| SeUnregisterLogonSessionTerminatedRoutine@4 |
| SeValidSecurityDescriptor@8 |
| TmCancelPropagationRequest@4 |
| TmCommitComplete@8 |
| TmCommitEnlistment@8 |
| TmCommitTransaction@8 |
| TmCreateEnlistment@36 |
| TmCurrentTransaction@4 |
| TmDereferenceEnlistmentKey@8 |
| TmEnableCallbacks@12 |
| TmEndPropagationRequest@4 |
| TmEnlistmentObjectType DATA |
| TmFreezeTransactions@12 |
| TmGetTransactionId@8 |
| TmInitSystem@0 |
| TmInitSystemPhase2@0 |
| TmInitializeResourceManager@20 |
| TmInitializeTransaction@36 |
| TmIsTransactionActive@4 |
| TmPrePrepareComplete@8 |
| TmPrePrepareEnlistment@8 |
| TmPrepareComplete@8 |
| TmPrepareEnlistment@8 |
| TmPropagationComplete@16 |
| TmPropagationFailed@12 |
| TmReadOnlyEnlistment@8 |
| TmRecoverEnlistment@8 |
| TmRecoverResourceManager@4 |
| TmRecoverTransactionManager@8 |
| TmReferenceEnlistmentKey@8 |
| TmRequestOutcomeEnlistment@8 |
| TmResourceManagerObjectType DATA |
| TmRollbackComplete@8 |
| TmRollbackEnlistment@8 |
| TmRollbackTransaction@8 |
| TmSetCurrentTransaction@4 |
| TmThawTransactions@0 |
| TmTransactionManagerObjectType DATA |
| TmTransactionObjectType DATA |
| TmpIsKTMCommitCoordinator@4 |
| VerSetConditionMask@16 |
| VfFailDeviceNode@0 |
| VfFailDriver@0 |
| VfFailSystemBIOS@0 |
| VfIsVerificationEnabled@8 |
| WRITE_REGISTER_BUFFER_UCHAR@12 |
| WRITE_REGISTER_BUFFER_ULONG@12 |
| WRITE_REGISTER_BUFFER_USHORT@12 |
| WRITE_REGISTER_UCHAR@8 |
| WRITE_REGISTER_ULONG@8 |
| WRITE_REGISTER_USHORT@8 |
| WheaAddErrorSource@8 |
| WheaConfigureErrorSource@8 |
| WheaGetErrorSource@4 |
| WheaInitializeRecordHeader@4 |
| WheaReportHwError@4 |
| WmiQueryTraceInformation@20 |
| WmiTraceMessage |
| WmiTraceMessageVa@24 |
| XIPDispatch@12 |
| ZwAccessCheckAndAuditAlarm@44 |
| ZwAddBootEntry@8 |
| ZwAddDriverEntry@8 |
| ZwAdjustPrivilegesToken@24 |
| ZwAlertThread@4 |
| ZwAllocateLocallyUniqueId@4 |
| ZwAllocateVirtualMemory@24 |
| ZwAlpcAcceptConnectPort@36 |
| ZwAlpcCancelMessage@12 |
| ZwAlpcConnectPort@44 |
| ZwAlpcCreatePort@12 |
| ZwAlpcCreatePortSection@24 |
| ZwAlpcCreateResourceReserve@16 |
| ZwAlpcCreateSectionView@12 |
| ZwAlpcCreateSecurityContext@12 |
| ZwAlpcDeletePortSection@12 |
| ZwAlpcDeleteResourceReserve@12 |
| ZwAlpcDeleteSectionView@12 |
| ZwAlpcDeleteSecurityContext@12 |
| ZwAlpcDisconnectPort@8 |
| ZwAlpcQueryInformation@20 |
| ZwAlpcSendWaitReceivePort@32 |
| ZwAlpcSetInformation@16 |
| ZwAssignProcessToJobObject@8 |
| ZwCancelIoFile@8 |
| ZwCancelTimer@8 |
| ZwClearEvent@4 |
| ZwClose@4 |
| ZwCloseObjectAuditAlarm@12 |
| ZwCommitComplete@8 |
| ZwCommitEnlistment@8 |
| ZwCommitTransaction@8 |
| ZwConnectPort@32 |
| ZwCreateDirectoryObject@12 |
| ZwCreateEnlistment@32 |
| ZwCreateEvent@20 |
| ZwCreateFile@44 |
| ZwCreateIoCompletion@16 |
| ZwCreateJobObject@12 |
| ZwCreateKey@28 |
| ZwCreateKeyTransacted@32 |
| ZwCreateResourceManager@28 |
| ZwCreateSection@28 |
| ZwCreateSymbolicLinkObject@16 |
| ZwCreateTimer@16 |
| ZwCreateTransaction@40 |
| ZwCreateTransactionManager@24 |
| ZwDeleteBootEntry@4 |
| ZwDeleteDriverEntry@4 |
| ZwDeleteFile@4 |
| ZwDeleteKey@4 |
| ZwDeleteValueKey@8 |
| ZwDeviceIoControlFile@40 |
| ZwDisplayString@4 |
| ZwDuplicateObject@28 |
| ZwDuplicateToken@24 |
| ZwEnumerateBootEntries@8 |
| ZwEnumerateDriverEntries@8 |
| ZwEnumerateKey@24 |
| ZwEnumerateTransactionObject@20 |
| ZwEnumerateValueKey@24 |
| ZwFlushBuffersFile@8 |
| ZwFlushInstructionCache@12 |
| ZwFlushKey@4 |
| ZwFlushVirtualMemory@16 |
| ZwFreeVirtualMemory@16 |
| ZwFsControlFile@40 |
| ZwGetNotificationResourceManager@28 |
| ZwImpersonateAnonymousToken@4 |
| ZwInitiatePowerAction@16 |
| ZwIsProcessInJob@8 |
| ZwLoadDriver@4 |
| ZwLoadKey@8 |
| ZwLoadKeyEx@32 |
| ZwLockFile@40 |
| ZwLockProductActivationKeys@8 |
| ZwMakeTemporaryObject@4 |
| ZwMapViewOfSection@40 |
| ZwModifyBootEntry@4 |
| ZwModifyDriverEntry@4 |
| ZwNotifyChangeKey@40 |
| ZwNotifyChangeSession@32 |
| ZwOpenDirectoryObject@12 |
| ZwOpenEnlistment@20 |
| ZwOpenEvent@12 |
| ZwOpenFile@24 |
| ZwOpenJobObject@12 |
| ZwOpenKey@12 |
| ZwOpenKeyEx@16 |
| ZwOpenKeyTransacted@16 |
| ZwOpenKeyTransactedEx@20 |
| ZwOpenProcess@16 |
| ZwOpenProcessToken@12 |
| ZwOpenProcessTokenEx@16 |
| ZwOpenResourceManager@20 |
| ZwOpenSection@12 |
| ZwOpenSession@12 |
| ZwOpenSymbolicLinkObject@12 |
| ZwOpenThread@16 |
| ZwOpenThreadToken@16 |
| ZwOpenThreadTokenEx@20 |
| ZwOpenTimer@12 |
| ZwOpenTransaction@20 |
| ZwOpenTransactionManager@24 |
| ZwPowerInformation@20 |
| ZwPrePrepareComplete@8 |
| ZwPrePrepareEnlistment@8 |
| ZwPrepareComplete@8 |
| ZwPrepareEnlistment@8 |
| ZwPropagationComplete@16 |
| ZwPropagationFailed@12 |
| ZwPulseEvent@8 |
| ZwQueryBootEntryOrder@8 |
| ZwQueryBootOptions@8 |
| ZwQueryDefaultLocale@8 |
| ZwQueryDefaultUILanguage@4 |
| ZwQueryDirectoryFile@44 |
| ZwQueryDirectoryObject@28 |
| ZwQueryDriverEntryOrder@8 |
| ZwQueryEaFile@36 |
| ZwQueryFullAttributesFile@8 |
| ZwQueryInformationEnlistment@20 |
| ZwQueryInformationFile@20 |
| ZwQueryInformationJobObject@20 |
| ZwQueryInformationProcess@20 |
| ZwQueryInformationResourceManager@20 |
| ZwQueryInformationThread@20 |
| ZwQueryInformationToken@20 |
| ZwQueryInformationTransaction@20 |
| ZwQueryInformationTransactionManager@20 |
| ZwQueryInstallUILanguage@4 |
| ZwQueryKey@20 |
| ZwQueryLicenseValue@20 |
| ZwQueryObject@20 |
| ZwQueryQuotaInformationFile@36 |
| ZwQuerySection@20 |
| ZwQuerySecurityAttributesToken@24 |
| ZwQuerySecurityObject@20 |
| ZwQuerySymbolicLinkObject@12 |
| ZwQuerySystemInformation@16 |
| ZwQueryValueKey@24 |
| ZwQueryVirtualMemory@24 |
| ZwQueryVolumeInformationFile@20 |
| ZwReadFile@36 |
| ZwReadOnlyEnlistment@8 |
| ZwRecoverEnlistment@8 |
| ZwRecoverResourceManager@4 |
| ZwRecoverTransactionManager@4 |
| ZwRemoveIoCompletion@20 |
| ZwRemoveIoCompletionEx@24 |
| ZwReplaceKey@12 |
| ZwRequestPort@8 |
| ZwRequestWaitReplyPort@12 |
| ZwResetEvent@8 |
| ZwRestoreKey@12 |
| ZwRollbackComplete@8 |
| ZwRollbackEnlistment@8 |
| ZwRollbackTransaction@8 |
| ZwSaveKey@8 |
| ZwSaveKeyEx@12 |
| ZwSecureConnectPort@36 |
| ZwSetBootEntryOrder@8 |
| ZwSetBootOptions@8 |
| ZwSetDefaultLocale@8 |
| ZwSetDefaultUILanguage@4 |
| ZwSetDriverEntryOrder@8 |
| ZwSetEaFile@16 |
| ZwSetEvent@8 |
| ZwSetInformationEnlistment@16 |
| ZwSetInformationFile@20 |
| ZwSetInformationJobObject@16 |
| ZwSetInformationObject@16 |
| ZwSetInformationProcess@16 |
| ZwSetInformationResourceManager@16 |
| ZwSetInformationThread@16 |
| ZwSetInformationToken@16 |
| ZwSetInformationTransaction@16 |
| ZwSetQuotaInformationFile@16 |
| ZwSetSecurityObject@12 |
| ZwSetSystemInformation@12 |
| ZwSetSystemTime@8 |
| ZwSetTimer@28 |
| ZwSetTimerEx@16 |
| ZwSetValueKey@24 |
| ZwSetVolumeInformationFile@20 |
| ZwTerminateJobObject@8 |
| ZwTerminateProcess@8 |
| ZwTraceEvent@16 |
| ZwTranslateFilePath@16 |
| ZwUnloadDriver@4 |
| ZwUnloadKey@4 |
| ZwUnloadKeyEx@8 |
| ZwUnlockFile@20 |
| ZwUnmapViewOfSection@8 |
| ZwWaitForMultipleObjects@20 |
| ZwWaitForSingleObject@12 |
| ZwWriteFile@36 |
| ZwYieldExecution@0 |
| _CIcos |
| _CIsin |
| _CIsqrt |
| _abnormal_termination |
| _alldiv@16 |
| _alldvrm@16 |
| _allmul@16 |
| _alloca_probe |
| _alloca_probe_16 |
| _alloca_probe_8 |
| _allrem@16 |
| _allshl |
| _allshr |
| _aulldiv@16 |
| _aulldvrm@16 |
| _aullrem@16 |
| _aullshr |
| ;_chkstk |
| _except_handler2 |
| _except_handler3 |
| _global_unwind2 |
| _i64toa_s |
| _i64tow_s |
| _itoa |
| _itoa_s |
| _itow |
| _itow_s |
| _local_unwind2 |
| _ltoa_s |
| _ltow_s |
| _makepath_s |
| _purecall |
| _snprintf |
| _snprintf_s |
| _snscanf_s |
| _snwprintf |
| _snwprintf_s |
| _snwscanf_s |
| _splitpath_s |
| _stricmp |
| _strlwr |
| _strnicmp |
| _strnset |
| _strnset_s |
| _strrev |
| _strset |
| _strset_s |
| _strtoui64 |
| _strupr |
| _swprintf |
| _ui64toa_s |
| _ui64tow_s |
| _ultoa_s |
| _ultow_s |
| _vsnprintf |
| _vsnprintf_s |
| _vsnwprintf |
| _vsnwprintf_s |
| _vswprintf |
| _wcsicmp |
| _wcslwr |
| _wcsnicmp |
| _wcsnset |
| _wcsnset_s |
| _wcsrev |
| _wcsset_s |
| _wcsupr |
| _wmakepath_s |
| _wsplitpath_s |
| _wtoi |
| _wtol |
| atoi |
| atol |
| bsearch |
| isdigit |
| islower |
| isprint |
| isspace |
| isupper |
| isxdigit |
| mbstowcs |
| mbtowc |
| memchr |
| memcpy |
| memcpy_s |
| memmove |
| memmove_s |
| memset |
| psMUITest DATA |
| qsort |
| rand |
| sprintf |
| sprintf_s |
| srand |
| sscanf_s |
| strcat |
| strcat_s |
| strchr |
| strcmp |
| strcpy |
| strcpy_s |
| strlen |
| strncat |
| strncat_s |
| strncmp |
| strncpy |
| strncpy_s |
| strnlen |
| strrchr |
| strspn |
| strstr |
| strtok_s |
| swprintf |
| swprintf_s |
| swscanf_s |
| tolower |
| toupper |
| towlower |
| towupper |
| vDbgPrintEx@16 |
| vDbgPrintExWithPrefix@20 |
| vsprintf |
| vsprintf_s |
| vswprintf_s |
| wcscat |
| wcscat_s |
| wcschr |
| wcscmp |
| wcscpy |
| wcscpy_s |
| wcscspn |
| wcslen |
| wcsncat |
| wcsncat_s |
| wcsncmp |
| wcsncpy |
| wcsncpy_s |
| wcsnlen |
| wcsrchr |
| wcsspn |
| wcsstr |
| wcstombs |
| wcstoul |
| wctomb |
