1;
   2; Definition file of ntoskrnl.exe
   3; Automatic generated by gendef
   4; written by Kai Tietz 2008
   5;
   6LIBRARY "ntoskrnl.exe"
   7EXPORTS
   8@ExAcquireFastMutexUnsafe@4
   9@ExAcquireRundownProtection@4
  10@ExAcquireRundownProtectionCacheAware@4
  11@ExAcquireRundownProtectionCacheAwareEx@4
  12@ExAcquireRundownProtectionEx@4
  13@ExEnterCriticalRegionAndAcquireFastMutexUnsafe@4
  14@ExInitializeRundownProtection@4
  15@ExInterlockedAddLargeStatistic@8
  16@ExInterlockedCompareExchange64@16
  17@ExInterlockedFlushSList@4
  18@ExInterlockedPopEntrySList@8
  19@ExInterlockedPushEntrySList@12
  20@ExReInitializeRundownProtection@4
  21@ExReInitializeRundownProtectionCacheAware@4
  22@ExReleaseFastMutexUnsafe@4
  23@ExReleaseFastMutexUnsafeAndLeaveCriticalRegion@4
  24@ExReleaseResourceAndLeaveCriticalRegion@4
  25@ExReleaseResourceAndLeavePriorityRegion@4
  26@ExReleaseResourceLite@4
  27@ExReleaseRundownProtection@4
  28@ExReleaseRundownProtectionCacheAware@4
  29@ExReleaseRundownProtectionCacheAwareEx@8
  30@ExReleaseRundownProtectionEx@8
  31@ExRundownCompleted@4
  32@ExRundownCompletedCacheAware@4
  33@ExWaitForRundownProtectionRelease@4
  34@ExWaitForRundownProtectionReleaseCacheAware@4
  35@ExfAcquirePushLockExclusive@4
  36@ExfAcquirePushLockShared@4
  37@ExfInterlockedAddUlong@12
  38@ExfInterlockedCompareExchange64@12
  39@ExfInterlockedInsertHeadList@12
  40@ExfInterlockedInsertTailList@12
  41@ExfInterlockedPopEntryList@8
  42@ExfInterlockedPushEntryList@12
  43@ExfInterlockedRemoveHeadList@8
  44@ExfReleasePushLock@8
  45@ExfReleasePushLockExclusive@4
  46@ExfReleasePushLockShared@4
  47@ExfTryAcquirePushLockShared@4
  48@ExfTryToWakePushLock@4
  49@ExfUnblockPushLock@8
  50@Exfi386InterlockedDecrementLong@4
  51@Exfi386InterlockedExchangeUlong@8
  52@Exfi386InterlockedIncrementLong@4
  53@ExiAcquireFastMutex@4
  54@ExiReleaseFastMutex@4
  55@ExiTryToAcquireFastMutex@4
  56@HalExamineMBR@16
  57@InterlockedCompareExchange@12
  58@InterlockedDecrement@4
  59@InterlockedExchange@8
  60@InterlockedExchangeAdd@8
  61@InterlockedIncrement@4
  62@InterlockedPopEntrySList@4
  63@InterlockedPushEntrySList@8
  64@IoGetPagingIoPriority@4
  65@IoReadPartitionTable@16
  66@IoSetPartitionInformation@16
  67@IoWritePartitionTable@20
  68@IofCallDriver@8
  69@IofCompleteRequest@8
  70@KeAcquireGuardedMutex@4
  71@KeAcquireGuardedMutexUnsafe@4
  72@KeAcquireInStackQueuedSpinLockAtDpcLevel@8
  73@KeAcquireInStackQueuedSpinLockForDpc@8
  74@KeAcquireSpinLockForDpc@8
  75@KeInitializeGuardedMutex@4
  76@KeInvalidateRangeAllCaches@8
  77@KeReleaseGuardedMutex@4
  78@KeReleaseGuardedMutexUnsafe@4
  79@KeReleaseInStackQueuedSpinLockForDpc@4
  80@KeReleaseInStackQueuedSpinLockFromDpcLevel@4
  81@KeReleaseSpinLockForDpc@8
  82@KeTestSpinLock@4
  83@KeTryToAcquireGuardedMutex@4
  84@KeTryToAcquireSpinLockAtDpcLevel@4
  85;KeUpdateRunTime
  86@KefAcquireSpinLockAtDpcLevel@4
  87@KefReleaseSpinLockFromDpcLevel@4
  88@KiAcquireSpinLock@8
  89;KiCheckForSListAddress
  90@KiReleaseSpinLock@4
  91@ObfDereferenceObject@4
  92;ObfDereferenceObjectWithTag
  93@ObfReferenceObject@4
  94;ObfReferenceObjectWithTag
  95@RtlPrefetchMemoryNonTemporal@8
  96@RtlUlongByteSwap@4
  97@RtlUlonglongByteSwap@8
  98@RtlUshortByteSwap@4
  99;SeAuditingWithTokenForSubcategory
 100;WmiGetClock
 101;Kei386EoiHelper
 102AlpcGetHeaderSize@4
 103AlpcGetMessageAttribute@8
 104AlpcInitializeMessageAttribute@16
 105CcCanIWrite@16
 106CcCoherencyFlushAndPurgeCache@20
 107CcCopyRead@24
 108CcCopyWrite@20
 109CcCopyWriteWontFlush@12
 110CcDeferWrite@24
 111CcFastCopyRead@24
 112CcFastCopyWrite@16
 113CcFastMdlReadWait DATA
 114CcFlushCache@16
 115CcGetDirtyPages@16
 116CcGetFileObjectFromBcb@4
 117CcGetFileObjectFromSectionPtrs@4
 118CcGetFileObjectFromSectionPtrsRef@4
 119CcGetFlushedValidData@8
 120CcGetLsnForFileObject@8
 121CcInitializeCacheMap@20
 122CcIsThereDirtyData@4
 123CcIsThereDirtyDataEx@8
 124CcMapData@24
 125CcMdlRead@20
 126CcMdlReadComplete@8
 127CcMdlWriteAbort@8
 128CcMdlWriteComplete@12
 129CcPinMappedData@20
 130CcPinRead@24
 131CcPrepareMdlWrite@20
 132CcPreparePinWrite@28
 133CcPurgeCacheSection@16
 134CcRemapBcb@4
 135CcRepinBcb@4
 136CcScheduleReadAhead@12
 137CcSetAdditionalCacheAttributes@12
 138CcSetBcbOwnerPointer@8
 139CcSetDirtyPageThreshold@8
 140CcSetDirtyPinnedData@8
 141CcSetFileSizes@8
 142CcSetFileSizesEx@8
 143CcSetLogHandleForFile@12
 144CcSetParallelFlushFile@8
 145CcSetReadAheadGranularity@8
 146CcTestControl@12
 147CcUninitializeCacheMap@12
 148CcUnpinData@4
 149CcUnpinDataForThread@8
 150CcUnpinRepinnedBcb@12
 151CcWaitForCurrentLazyWriterActivity@0
 152CcZeroData@16
 153CmCallbackGetKeyObjectID@16
 154CmGetBoundTransaction@8
 155CmGetCallbackVersion@8
 156CmKeyObjectType DATA
 157CmRegisterCallback@12
 158CmRegisterCallbackEx@24
 159CmSetCallbackObjectContext@16
 160CmUnRegisterCallback@8
 161DbgBreakPoint@0
 162DbgBreakPointWithStatus@4
 163DbgCommandString@8
 164DbgLoadImageSymbols@12
 165DbgPrint
 166DbgPrintEx
 167DbgPrintReturnControlC
 168DbgPrompt@12
 169DbgQueryDebugFilterState@8
 170DbgSetDebugFilterState@12
 171DbgSetDebugPrintCallback@8
 172DbgkLkmdRegisterCallback@12
 173DbgkLkmdUnregisterCallback@4
 174EmClientQueryRuleState@8
 175EmClientRuleDeregisterNotification@4
 176EmClientRuleEvaluate@16
 177EmClientRuleRegisterNotification@16
 178EmProviderDeregister@4
 179EmProviderDeregisterEntry@4
 180EmProviderRegister@24
 181EmProviderRegisterEntry@16
 182EmpProviderRegister@24
 183EtwActivityIdControl@8
 184EtwEnableTrace@44
 185EtwEventEnabled@12
 186EtwProviderEnabled@20
 187EtwRegister@16
 188EtwRegisterClassicProvider@20
 189EtwSendTraceBuffer@24
 190EtwUnregister@8
 191EtwWrite@24
 192EtwWriteEndScenario@24
 193EtwWriteEx@40
 194EtwWriteStartScenario@24
 195EtwWriteString@28
 196EtwWriteTransfer@28
 197ExAcquireCacheAwarePushLockExclusive@4
 198ExAcquireResourceExclusiveLite@8
 199ExAcquireResourceSharedLite@8
 200ExAcquireSharedStarveExclusive@8
 201ExAcquireSharedWaitForExclusive@8
 202ExAcquireSpinLockExclusive@4
 203ExAcquireSpinLockExclusiveAtDpcLevel@4
 204ExAcquireSpinLockShared@4
 205ExAcquireSpinLockSharedAtDpcLevel@4
 206ExAllocateCacheAwarePushLock@4
 207ExAllocateCacheAwareRundownProtection@8
 208ExAllocateFromPagedLookasideList@4
 209ExAllocatePool@8
 210ExAllocatePoolWithQuota@8
 211ExAllocatePoolWithQuotaTag@12
 212ExAllocatePoolWithTag@12
 213ExAllocatePoolWithTagPriority@16
 214ExConvertExclusiveToSharedLite@4
 215ExCreateCallback@16
 216ExDeleteLookasideListEx@4
 217ExDeleteNPagedLookasideList@4
 218ExDeletePagedLookasideList@4
 219ExDeleteResourceLite@4
 220ExDesktopObjectType DATA
 221ExDisableResourceBoostLite@4
 222ExEnterCriticalRegionAndAcquireResourceExclusive@4
 223ExEnterCriticalRegionAndAcquireResourceShared@4
 224ExEnterCriticalRegionAndAcquireSharedWaitForExclusive@4
 225ExEnterPriorityRegionAndAcquireResourceExclusive@4
 226ExEnterPriorityRegionAndAcquireResourceShared@4
 227ExEnumHandleTable@16
 228ExEventObjectType DATA
 229ExExtendZone@12
 230ExFetchLicenseData@12
 231ExFlushLookasideListEx@4
 232ExFreeCacheAwarePushLock@4
 233ExFreeCacheAwareRundownProtection@4
 234ExFreePool@4
 235ExFreePoolWithTag@8
 236ExFreeToPagedLookasideList@8
 237ExGetCurrentProcessorCounts@12
 238ExGetCurrentProcessorCpuUsage@4
 239ExGetExclusiveWaiterCount@4
 240ExGetLicenseTamperState@4
 241ExGetPreviousMode@0
 242ExGetSharedWaiterCount@4
 243ExInitializeLookasideListEx@32
 244ExInitializeNPagedLookasideList@28
 245ExInitializePagedLookasideList@28
 246ExInitializePushLock@4
 247ExInitializeResourceLite@4
 248ExInitializeRundownProtectionCacheAware@8
 249ExInitializeZone@16
 250ExInterlockedAddLargeInteger@16
 251ExInterlockedAddUlong@12
 252ExInterlockedDecrementLong@8
 253ExInterlockedExchangeUlong@12
 254ExInterlockedExtendZone@16
 255@ExInterlockedIncrementLong@8
 256ExInterlockedInsertHeadList@12
 257ExInterlockedInsertTailList@12
 258ExInterlockedPopEntryList@8
 259ExInterlockedPushEntryList@12
 260ExInterlockedRemoveHeadList@8
 261ExIsProcessorFeaturePresent@4
 262ExIsResourceAcquiredExclusiveLite@4
 263ExIsResourceAcquiredSharedLite@4
 264ExLocalTimeToSystemTime@8
 265ExNotifyCallback@12
 266ExQueryAttributeInformation@16
 267ExQueryPoolBlockSize@8
 268ExQueueWorkItem@8
 269ExRaiseAccessViolation@0
 270ExRaiseDatatypeMisalignment@0
 271ExRaiseException@24
 272ExRaiseHardError@24
 273ExRaiseStatus@4
 274ExRegisterAttributeInformationCallback@4
 275ExRegisterCallback@12
 276ExRegisterExtension@12
 277ExReinitializeResourceLite@4
 278ExReleaseCacheAwarePushLockExclusive@4
 279ExReleaseResourceForThreadLite@8
 280ExReleaseSpinLockExclusive@8
 281ExReleaseSpinLockExclusiveFromDpcLevel@4
 282ExReleaseSpinLockShared@8
 283ExReleaseSpinLockSharedFromDpcLevel@4
 284ExSemaphoreObjectType DATA
 285ExSetLicenseTamperState@4
 286ExSetResourceOwnerPointer@8
 287ExSetResourceOwnerPointerEx@12
 288ExSetTimerResolution@8
 289ExSizeOfRundownProtectionCacheAware@0
 290ExSystemExceptionFilter@0
 291ExSystemTimeToLocalTime@8
 292ExTryConvertSharedSpinLockExclusive@4
 293ExUnregisterAttributeInformationCallback@4
 294ExUnregisterCallback@4
 295ExUnregisterExtension@4
 296ExUpdateLicenseData@8
 297ExUuidCreate@4
 298ExVerifySuite@4
 299ExWindowStationObjectType DATA
 300Exi386InterlockedDecrementLong@4
 301Exi386InterlockedExchangeUlong@8
 302Exi386InterlockedIncrementLong@4
 303FirstEntrySList@4
 304FsRtlAcknowledgeEcp@4
 305FsRtlAcquireFileExclusive@4
 306FsRtlAddBaseMcbEntry@28
 307FsRtlAddBaseMcbEntryEx@28
 308FsRtlAddLargeMcbEntry@28
 309FsRtlAddMcbEntry@16
 310FsRtlAddToTunnelCache@32
 311FsRtlAllocateExtraCreateParameter@24
 312FsRtlAllocateExtraCreateParameterFromLookasideList@24
 313FsRtlAllocateExtraCreateParameterList@8
 314FsRtlAllocateFileLock@8
 315FsRtlAllocatePool@8
 316FsRtlAllocatePoolWithQuota@8
 317FsRtlAllocatePoolWithQuotaTag@12
 318FsRtlAllocatePoolWithTag@12
 319FsRtlAllocateResource@0
 320FsRtlAreNamesEqual@16
 321FsRtlAreThereCurrentOrInProgressFileLocks@4
 322FsRtlAreVolumeStartupApplicationsComplete@0
 323FsRtlBalanceReads@4
 324FsRtlCancellableWaitForMultipleObjects@24
 325FsRtlCancellableWaitForSingleObject@12
 326FsRtlChangeBackingFileObject@16
 327FsRtlCheckLockForReadAccess@8
 328FsRtlCheckLockForWriteAccess@8
 329FsRtlCheckOplock@20
 330FsRtlCheckOplockEx@24
 331FsRtlCopyRead@32
 332FsRtlCopyWrite@32
 333FsRtlCreateSectionForDataScan@40
 334FsRtlCurrentBatchOplock@4
 335FsRtlCurrentOplock@4
 336FsRtlCurrentOplockH@4
 337FsRtlDeleteExtraCreateParameterLookasideList@8
 338FsRtlDeleteKeyFromTunnelCache@12
 339FsRtlDeleteTunnelCache@4
 340FsRtlDeregisterUncProvider@4
 341FsRtlDissectDbcs@16
 342FsRtlDissectName@16
 343FsRtlDoesDbcsContainWildCards@4
 344FsRtlDoesNameContainWildCards@4
 345FsRtlFastCheckLockForRead@24
 346FsRtlFastCheckLockForWrite@24
 347FsRtlFastUnlockAll@16
 348FsRtlFastUnlockAllByKey@20
 349FsRtlFastUnlockSingle@32
 350FsRtlFindExtraCreateParameter@16
 351FsRtlFindInTunnelCache@32
 352FsRtlFreeExtraCreateParameter@4
 353FsRtlFreeExtraCreateParameterList@4
 354FsRtlFreeFileLock@4
 355FsRtlGetEcpListFromIrp@8
 356FsRtlGetFileSize@8
 357FsRtlGetNextBaseMcbEntry@20
 358FsRtlGetNextExtraCreateParameter@20
 359FsRtlGetNextFileLock@8
 360FsRtlGetNextLargeMcbEntry@20
 361FsRtlGetNextMcbEntry@20
 362FsRtlGetVirtualDiskNestingLevel@12
 363FsRtlIncrementCcFastMdlReadWait@0
 364FsRtlIncrementCcFastReadNoWait@0
 365FsRtlIncrementCcFastReadNotPossible@0
 366FsRtlIncrementCcFastReadResourceMiss@0
 367FsRtlIncrementCcFastReadWait@0
 368FsRtlInitExtraCreateParameterLookasideList@16
 369FsRtlInitializeBaseMcb@8
 370FsRtlInitializeBaseMcbEx@12
 371FsRtlInitializeExtraCreateParameter@24
 372FsRtlInitializeExtraCreateParameterList@4
 373FsRtlInitializeFileLock@12
 374FsRtlInitializeLargeMcb@8
 375FsRtlInitializeMcb@8
 376FsRtlInitializeOplock@4
 377FsRtlInitializeTunnelCache@4
 378FsRtlInsertExtraCreateParameter@8
 379FsRtlInsertPerFileContext@8
 380FsRtlInsertPerFileObjectContext@8
 381FsRtlInsertPerStreamContext@8
 382FsRtlIsDbcsInExpression@8
 383FsRtlIsEcpAcknowledged@4
 384FsRtlIsEcpFromUserMode@4
 385FsRtlIsFatDbcsLegal@20
 386FsRtlIsHpfsDbcsLegal@20
 387FsRtlIsNameInExpression@16
 388FsRtlIsNtstatusExpected@4
 389FsRtlIsPagingFile@4
 390FsRtlIsTotalDeviceFailure@4
 391FsRtlLegalAnsiCharacterArray DATA
 392FsRtlLogCcFlushError@20
 393FsRtlLookupBaseMcbEntry@32
 394FsRtlLookupLargeMcbEntry@32
 395FsRtlLookupLastBaseMcbEntry@12
 396FsRtlLookupLastBaseMcbEntryAndIndex@16
 397FsRtlLookupLastLargeMcbEntry@12
 398FsRtlLookupLastLargeMcbEntryAndIndex@16
 399FsRtlLookupLastMcbEntry@12
 400FsRtlLookupMcbEntry@20
 401FsRtlLookupPerFileContext@12
 402FsRtlLookupPerFileObjectContext@12
 403FsRtlLookupPerStreamContextInternal@12
 404FsRtlMdlRead@24
 405FsRtlMdlReadComplete@8
 406FsRtlMdlReadCompleteDev@12
 407FsRtlMdlReadDev@28
 408FsRtlMdlWriteComplete@12
 409FsRtlMdlWriteCompleteDev@16
 410FsRtlMupGetProviderIdFromName@8
 411FsRtlMupGetProviderInfoFromFileObject@16
 412FsRtlNormalizeNtstatus@8
 413FsRtlNotifyChangeDirectory@28
 414FsRtlNotifyCleanup@12
 415FsRtlNotifyCleanupAll@8
 416FsRtlNotifyFilterChangeDirectory@44
 417FsRtlNotifyFilterReportChange@40
 418FsRtlNotifyFullChangeDirectory@40
 419FsRtlNotifyFullReportChange@36
 420FsRtlNotifyInitializeSync@4
 421FsRtlNotifyReportChange@20
 422FsRtlNotifyUninitializeSync@4
 423FsRtlNotifyVolumeEvent@8
 424FsRtlNotifyVolumeEventEx@12
 425FsRtlNumberOfRunsInBaseMcb@4
 426FsRtlNumberOfRunsInLargeMcb@4
 427FsRtlNumberOfRunsInMcb@4
 428FsRtlOplockBreakH@24
 429FsRtlOplockBreakToNone@24
 430FsRtlOplockBreakToNoneEx@24
 431FsRtlOplockFsctrl@12
 432FsRtlOplockFsctrlEx@16
 433FsRtlOplockIsFastIoPossible@4
 434FsRtlOplockIsSharedRequest@4
 435FsRtlOplockKeysEqual@8
 436FsRtlPostPagingFileStackOverflow@12
 437FsRtlPostStackOverflow@12
 438FsRtlPrepareMdlWrite@24
 439FsRtlPrepareMdlWriteDev@28
 440FsRtlPrivateLock@48
 441FsRtlProcessFileLock@12
 442FsRtlQueryMaximumVirtualDiskNestingLevel@0
 443FsRtlRegisterFileSystemFilterCallbacks@8
 444FsRtlRegisterFltMgrCalls@4
 445FsRtlRegisterMupCalls@4
 446FsRtlRegisterUncProvider@12
 447FsRtlRegisterUncProviderEx@16
 448FsRtlReleaseFile@4
 449FsRtlRemoveBaseMcbEntry@20
 450FsRtlRemoveDotsFromPath@12
 451FsRtlRemoveExtraCreateParameter@16
 452FsRtlRemoveLargeMcbEntry@20
 453FsRtlRemoveMcbEntry@12
 454FsRtlRemovePerFileContext@12
 455FsRtlRemovePerFileObjectContext@12
 456FsRtlRemovePerStreamContext@12
 457FsRtlResetBaseMcb@4
 458FsRtlResetLargeMcb@8
 459FsRtlSetEcpListIntoIrp@8
 460FsRtlSplitBaseMcb@20
 461FsRtlSplitLargeMcb@20
 462FsRtlSyncVolumes@12
 463FsRtlTeardownPerFileContexts@4
 464FsRtlTeardownPerStreamContexts@4
 465FsRtlTruncateBaseMcb@12
 466FsRtlTruncateLargeMcb@12
 467FsRtlTruncateMcb@8
 468FsRtlUninitializeBaseMcb@4
 469FsRtlUninitializeFileLock@4
 470FsRtlUninitializeLargeMcb@4
 471FsRtlUninitializeMcb@4
 472FsRtlUninitializeOplock@4
 473FsRtlValidateReparsePointBuffer@8
 474HalDispatchTable DATA
 475HalPrivateDispatchTable DATA
 476HeadlessDispatch@20
 477HvlQueryConnection@4
 478InbvAcquireDisplayOwnership@0
 479InbvCheckDisplayOwnership@0
 480InbvDisplayString@4
 481InbvEnableBootDriver@4
 482InbvEnableDisplayString@4
 483InbvInstallDisplayStringFilter@4
 484InbvIsBootDriverInstalled@0
 485InbvNotifyDisplayOwnershipLost@4
 486InbvResetDisplay@0
 487InbvSetScrollRegion@16
 488InbvSetTextColor@4
 489InbvSolidColorFill@20
 490InitSafeBootMode DATA
 491IoAcquireCancelSpinLock@4
 492IoAcquireRemoveLockEx@20
 493IoAcquireVpbSpinLock@4
 494IoAdapterObjectType DATA
 495IoAdjustStackSizeForRedirection@12
 496IoAllocateAdapterChannel@20
 497IoAllocateController@16
 498IoAllocateDriverObjectExtension@16
 499IoAllocateErrorLogEntry@8
 500IoAllocateIrp@8
 501IoAllocateMdl@20
 502IoAllocateMiniCompletionPacket@8
 503IoAllocateSfioStreamIdentifier@16
 504IoAllocateWorkItem@4
 505IoApplyPriorityInfoThread@12
 506IoAssignResources@24
 507IoAttachDevice@12
 508IoAttachDeviceByPointer@8
 509IoAttachDeviceToDeviceStack@8
 510IoAttachDeviceToDeviceStackSafe@12
 511IoBuildAsynchronousFsdRequest@24
 512IoBuildDeviceIoControlRequest@36
 513IoBuildPartialMdl@16
 514IoBuildSynchronousFsdRequest@28
 515IoCallDriver@8
 516IoCancelFileOpen@8
 517IoCancelIrp@4
 518IoCheckDesiredAccess@8
 519IoCheckEaBufferValidity@12
 520IoCheckFunctionAccess@24
 521IoCheckQuerySetFileInformation@12
 522IoCheckQuerySetVolumeInformation@12
 523IoCheckQuotaBufferValidity@12
 524IoCheckShareAccess@20
 525IoCheckShareAccessEx@24
 526IoClearDependency@12
 527IoClearIrpExtraCreateParameter@4
 528IoCompleteRequest@8
 529IoConnectInterrupt@44
 530IoConnectInterruptEx@4
 531IoCreateArcName@4
 532IoCreateController@4
 533IoCreateDevice@28
 534IoCreateDisk@8
 535IoCreateDriver@8
 536IoCreateFile@56
 537IoCreateFileEx@60
 538IoCreateFileSpecifyDeviceObjectHint@60
 539IoCreateNotificationEvent@8
 540IoCreateStreamFileObject@8
 541IoCreateStreamFileObjectEx@12
 542IoCreateStreamFileObjectLite@8
 543IoCreateSymbolicLink@8
 544IoCreateSynchronizationEvent@8
 545IoCreateUnprotectedSymbolicLink@8
 546IoCsqInitialize@28
 547IoCsqInitializeEx@28
 548IoCsqInsertIrp@12
 549IoCsqInsertIrpEx@16
 550IoCsqRemoveIrp@8
 551IoCsqRemoveNextIrp@8
 552IoDeleteAllDependencyRelations@4
 553IoDeleteController@4
 554IoDeleteDevice@4
 555IoDeleteDriver@4
 556IoDeleteSymbolicLink@4
 557IoDetachDevice@4
 558IoDeviceHandlerObjectSize DATA
 559IoDeviceHandlerObjectType DATA
 560IoDeviceObjectType DATA
 561IoDisconnectInterrupt@4
 562IoDisconnectInterruptEx@4
 563IoDriverObjectType DATA
 564IoDuplicateDependency@12
 565IoEnqueueIrp@4
 566IoEnumerateDeviceObjectList@16
 567IoEnumerateRegisteredFiltersList@12
 568IoFastQueryNetworkAttributes@20
 569IoFileObjectType DATA
 570IoForwardAndCatchIrp@8
 571IoForwardIrpSynchronously@8
 572IoFreeController@4
 573IoFreeErrorLogEntry@4
 574IoFreeIrp@4
 575IoFreeMdl@4
 576IoFreeMiniCompletionPacket@4
 577IoFreeSfioStreamIdentifier@8
 578IoFreeWorkItem@4
 579IoGetAffinityInterrupt@8
 580IoGetAttachedDevice@4
 581IoGetAttachedDeviceReference@4
 582IoGetBaseFileSystemDeviceObject@4
 583IoGetBootDiskInformation@8
 584IoGetBootDiskInformationLite@4
 585IoGetConfigurationInformation@0
 586IoGetContainerInformation@16
 587IoGetCurrentProcess@0
 588IoGetDeviceAttachmentBaseRef@4
 589IoGetDeviceInterfaceAlias@12
 590IoGetDeviceInterfaces@16
 591IoGetDeviceNumaNode@8
 592IoGetDeviceObjectPointer@16
 593IoGetDeviceProperty@20
 594IoGetDevicePropertyData@32
 595IoGetDeviceToVerify@4
 596IoGetDiskDeviceObject@8
 597IoGetDmaAdapter@12
 598IoGetDriverObjectExtension@8
 599IoGetFileObjectGenericMapping@0
 600IoGetInitialStack@0
 601IoGetIoPriorityHint@4
 602IoGetIrpExtraCreateParameter@8
 603IoGetLowerDeviceObject@4
 604IoGetOplockKeyContext@4
 605IoGetRelatedDeviceObject@4
 606IoGetRequestorProcess@4
 607IoGetRequestorProcessId@4
 608IoGetRequestorSessionId@8
 609IoGetSfioStreamIdentifier@8
 610IoGetStackLimits@8
 611IoGetSymlinkSupportInformation@8
 612IoGetTopLevelIrp@0
 613IoGetTransactionParameterBlock@4
 614IoInitializeIrp@12
 615IoInitializeRemoveLockEx@20
 616IoInitializeTimer@12
 617IoInitializeWorkItem@8
 618IoInvalidateDeviceRelations@8
 619IoInvalidateDeviceState@4
 620IoIsFileObjectIgnoringSharing@4
 621IoIsFileOriginRemote@4
 622IoIsOperationSynchronous@4
 623IoIsSystemThread@4
 624IoIsValidNameGraftingBuffer@8
 625IoIsWdmVersionAvailable@8
 626IoMakeAssociatedIrp@8
 627IoOpenDeviceInterfaceRegistryKey@12
 628IoOpenDeviceRegistryKey@16
 629IoPageRead@20
 630IoQueryDeviceDescription@32
 631IoQueryFileDosDeviceName@8
 632IoQueryFileInformation@20
 633IoQueryVolumeInformation@20
 634IoQueueThreadIrp@4
 635IoQueueWorkItem@16
 636IoQueueWorkItemEx@16
 637IoRaiseHardError@12
 638IoRaiseInformationalHardError@12
 639IoReadDiskSignature@12
 640IoReadOperationCount DATA
 641IoReadPartitionTableEx@8
 642IoReadTransferCount DATA
 643IoRegisterBootDriverReinitialization@12
 644IoRegisterContainerNotification@20
 645IoRegisterDeviceInterface@16
 646IoRegisterDriverReinitialization@12
 647IoRegisterFileSystem@4
 648IoRegisterFsRegistrationChange@8
 649IoRegisterFsRegistrationChangeMountAware@12
 650IoRegisterLastChanceShutdownNotification@4
 651IoRegisterPlugPlayNotification@28
 652IoRegisterPriorityCallback@8
 653IoRegisterShutdownNotification@4
 654IoReleaseCancelSpinLock@4
 655IoReleaseRemoveLockAndWaitEx@12
 656IoReleaseRemoveLockEx@12
 657IoReleaseVpbSpinLock@4
 658IoRemoveShareAccess@8
 659IoReplaceFileObjectName@12
 660IoReplacePartitionUnit@12
 661IoReportDetectedDevice@32
 662IoReportHalResourceUsage@16
 663IoReportResourceForDetection@28
 664IoReportResourceUsage@36
 665IoReportRootDevice@4
 666IoReportTargetDeviceChange@8
 667IoReportTargetDeviceChangeAsynchronous@16
 668IoRequestDeviceEject@4
 669IoRequestDeviceEjectEx@16
 670IoRetrievePriorityInfo@16
 671IoReuseIrp@8
 672IoSetCompletionRoutineEx@28
 673IoSetDependency@8
 674IoSetDeviceInterfaceState@8
 675IoSetDevicePropertyData@28
 676IoSetDeviceToVerify@8
 677IoSetFileObjectIgnoreSharing@4
 678IoSetFileOrigin@8
 679IoSetHardErrorOrVerifyDevice@8
 680IoSetInformation@16
 681IoSetIoCompletion@24
 682IoSetIoCompletionEx@28
 683IoSetIoPriorityHint@8
 684IoSetIoPriorityHintIntoFileObject@8
 685IoSetIoPriorityHintIntoThread@8
 686IoSetIrpExtraCreateParameter@8
 687IoSetOplockKeyContext@12
 688IoSetPartitionInformationEx@12
 689IoSetShareAccess@16
 690IoSetShareAccessEx@20
 691IoSetStartIoAttributes@12
 692IoSetSystemPartition@4
 693IoSetThreadHardErrorMode@4
 694IoSetTopLevelIrp@4
 695IoSizeofWorkItem@0
 696IoStartNextPacket@8
 697IoStartNextPacketByKey@12
 698IoStartPacket@16
 699IoStartTimer@4
 700IoStatisticsLock DATA
 701IoStopTimer@4
 702IoSynchronousInvalidateDeviceRelations@8
 703IoSynchronousPageWrite@20
 704IoThreadToProcess@4
 705IoTranslateBusAddress@24
 706IoUninitializeWorkItem@4
 707IoUnregisterContainerNotification@4
 708IoUnregisterFileSystem@4
 709IoUnregisterFsRegistrationChange@8
 710IoUnregisterPlugPlayNotification@4
 711IoUnregisterPlugPlayNotificationEx@4
 712IoUnregisterPriorityCallback@4
 713IoUnregisterShutdownNotification@4
 714IoUpdateShareAccess@8
 715IoValidateDeviceIoControlAccess@8
 716IoVerifyPartitionTable@8
 717IoVerifyVolume@8
 718IoVolumeDeviceToDosName@8
 719IoWMIAllocateInstanceIds@12
 720IoWMIDeviceObjectToInstanceName@12
 721IoWMIExecuteMethod@24
 722IoWMIHandleToInstanceName@12
 723IoWMIOpenBlock@12
 724IoWMIQueryAllData@12
 725IoWMIQueryAllDataMultiple@16
 726IoWMIQuerySingleInstance@16
 727IoWMIQuerySingleInstanceMultiple@20
 728IoWMIRegistrationControl@8
 729IoWMISetNotificationCallback@12
 730IoWMISetSingleInstance@20
 731IoWMISetSingleItem@24
 732IoWMISuggestInstanceName@16
 733IoWMIWriteEvent@4
 734IoWithinStackLimits@8
 735IoWriteErrorLogEntry@4
 736IoWriteOperationCount DATA
 737IoWritePartitionTableEx@8
 738IoWriteTransferCount DATA
 739KdChangeOption@24
 740KdDebuggerEnabled DATA
 741KdDebuggerNotPresent DATA
 742KdDisableDebugger@0
 743KdEnableDebugger@0
 744KdEnteredDebugger DATA
 745KdPollBreakIn@0
 746KdPowerTransition@4
 747KdRefreshDebuggerNotPresent@0
 748KdSystemDebugControl@28
 749Ke386CallBios@8
 750Ke386IoSetAccessProcess@8
 751Ke386QueryIoAccessMap@8
 752Ke386SetIoAccessMap@8
 753KeAcquireInterruptSpinLock@4
 754KeAcquireSpinLockAtDpcLevel@4
 755KeAddGroupAffinityEx@12
 756KeAddProcessorAffinityEx@8
 757KeAddProcessorGroupAffinity@8
 758KeAddSystemServiceTable@20
 759KeAlertThread@8
 760KeAllocateCalloutStack@4
 761KeAllocateCalloutStackEx@16
 762KeAndAffinityEx@12
 763KeAndGroupAffinityEx@12
 764KeAreAllApcsDisabled@0
 765KeAreApcsDisabled@0
 766KeAttachProcess@4
 767KeBugCheck@4
 768KeBugCheckEx@20
 769KeCancelTimer@4
 770KeCapturePersistentThreadState@32
 771KeCheckProcessorAffinityEx@8
 772KeCheckProcessorGroupAffinity@8
 773KeClearEvent@4
 774KeComplementAffinityEx@8
 775KeCopyAffinityEx@8
 776KeCountSetBitsAffinityEx@4
 777KeCountSetBitsGroupAffinity@4
 778KeDelayExecutionThread@12
 779KeDeregisterBugCheckCallback@4
 780KeDeregisterBugCheckReasonCallback@4
 781KeDeregisterNmiCallback@4
 782KeDeregisterProcessorChangeCallback@4
 783KeDetachProcess@0
 784KeEnterCriticalRegion@0
 785KeEnterGuardedRegion@0
 786KeEnterKernelDebugger@0
 787KeEnumerateNextProcessor@8
 788KeExpandKernelStackAndCallout@12
 789KeExpandKernelStackAndCalloutEx@20
 790KeFindConfigurationEntry@16
 791KeFindConfigurationNextEntry@20
 792KeFindFirstSetLeftAffinityEx@4
 793KeFindFirstSetLeftGroupAffinity@4
 794KeFindFirstSetRightGroupAffinity@4
 795KeFirstGroupAffinityEx@8
 796KeFlushEntireTb@8
 797KeFlushQueuedDpcs@0
 798KeFreeCalloutStack@4
 799KeGenericCallDpc@8
 800KeGetCurrentNodeNumber@0
 801KeGetCurrentProcessorNumberEx@4
 802KeGetCurrentThread@0
 803KeGetPreviousMode@0
 804KeGetProcessorIndexFromNumber@4
 805KeGetProcessorNumberFromIndex@8
 806KeGetRecommendedSharedDataAlignment@0
 807KeGetXSaveFeatureFlags@0
 808KeI386AbiosCall@16
 809KeI386AllocateGdtSelectors@8
 810KeI386Call16BitCStyleFunction@0
 811KeI386Call16BitFunction@0
 812KeI386FlatToGdtSelector@12
 813KeI386GetLid@20
 814KeI386MachineType DATA
 815KeI386ReleaseGdtSelectors@8
 816KeI386ReleaseLid@8
 817KeI386SetGdtSelector@8
 818KeInitializeAffinityEx@4
 819KeInitializeApc@32
 820KeInitializeCrashDumpHeader@20
 821KeInitializeDeviceQueue@4
 822KeInitializeDpc@12
 823KeInitializeEnumerationContext@8
 824KeInitializeEnumerationContextFromGroup@8
 825KeInitializeEvent@12
 826KeInitializeInterrupt@52
 827KeInitializeMutant@8
 828KeInitializeMutex@8
 829KeInitializeQueue@8
 830KeInitializeSemaphore@12
 831KeInitializeSpinLock@4
 832KeInitializeThreadedDpc@12
 833KeInitializeTimer@4
 834KeInitializeTimerEx@8
 835KeInsertByKeyDeviceQueue@12
 836KeInsertDeviceQueue@8
 837KeInsertHeadQueue@8
 838KeInsertQueue@8
 839KeInsertQueueApc@16
 840KeInsertQueueDpc@12
 841KeInterlockedClearProcessorAffinityEx@8
 842KeInterlockedSetProcessorAffinityEx@8
 843KeInvalidateAllCaches@0
 844KeIpiGenericCall@8
 845KeIsAttachedProcess@0
 846KeIsEmptyAffinityEx@4
 847KeIsEqualAffinityEx@8
 848KeIsExecutingDpc@0
 849KeIsSingleGroupAffinityEx@8
 850KeIsSubsetAffinityEx@8
 851KeIsWaitListEmpty@4
 852KeLeaveCriticalRegion@0
 853KeLeaveGuardedRegion@0
 854KeLoaderBlock DATA
 855KeNumberProcessors DATA
 856KeOrAffinityEx@12
 857KePollFreezeExecution@0
 858KeProcessorGroupAffinity@8
 859KeProfileInterrupt@8
 860KeProfileInterruptWithSource@8
 861KePulseEvent@12
 862KeQueryActiveGroupCount@0
 863KeQueryActiveProcessorAffinity@4
 864KeQueryActiveProcessorCount@4
 865KeQueryActiveProcessorCountEx@4
 866KeQueryActiveProcessors@0
 867KeQueryDpcWatchdogInformation@4
 868KeQueryGroupAffinity@4
 869KeQueryGroupAffinityEx@8
 870KeQueryHardwareCounterConfiguration@12
 871KeQueryHighestNodeNumber@0
 872KeQueryInterruptTime@0
 873KeQueryLogicalProcessorRelationship@16
 874KeQueryMaximumGroupCount@0
 875KeQueryMaximumProcessorCount@0
 876KeQueryMaximumProcessorCountEx@4
 877KeQueryNodeActiveAffinity@12
 878KeQueryNodeMaximumProcessorCount@4
 879KeQueryPriorityThread@4
 880KeQueryRuntimeThread@8
 881KeQuerySystemTime@4
 882KeQueryTickCount@4
 883KeQueryTimeIncrement@0
 884KeQueryUnbiasedInterruptTime@0
 885KeRaiseUserException@4
 886KeReadStateEvent@4
 887KeReadStateMutant@4
 888KeReadStateMutex@4
 889KeReadStateQueue@4
 890KeReadStateSemaphore@4
 891KeReadStateTimer@4
 892KeRegisterBugCheckCallback@20
 893KeRegisterBugCheckReasonCallback@16
 894KeRegisterNmiCallback@8
 895KeRegisterProcessorChangeCallback@12
 896KeReleaseInterruptSpinLock@8
 897KeReleaseMutant@16
 898KeReleaseMutex@8
 899KeReleaseSemaphore@16
 900KeReleaseSpinLockFromDpcLevel@4
 901KeRemoveByKeyDeviceQueue@8
 902KeRemoveByKeyDeviceQueueIfBusy@8
 903KeRemoveDeviceQueue@4
 904KeRemoveEntryDeviceQueue@8
 905KeRemoveGroupAffinityEx@12
 906KeRemoveProcessorAffinityEx@8
 907KeRemoveProcessorGroupAffinity@8
 908KeRemoveQueue@12
 909KeRemoveQueueDpc@4
 910KeRemoveQueueEx@24
 911KeRemoveSystemServiceTable@4
 912KeResetEvent@4
 913KeRestoreExtendedProcessorState@4
 914KeRestoreFloatingPointState@4
 915KeRevertToUserAffinityThread@0
 916KeRevertToUserAffinityThreadEx@4
 917KeRevertToUserGroupAffinityThread@4
 918KeRundownQueue@4
 919KeSaveExtendedProcessorState@12
 920KeSaveFloatingPointState@4
 921KeSaveStateForHibernate@0
 922KeServiceDescriptorTable DATA
 923KeSetActualBasePriorityThread@8
 924KeSetAffinityThread@8
 925KeSetBasePriorityThread@8
 926KeSetCoalescableTimer@24
 927KeSetDmaIoCoherency@4
 928KeSetEvent@12
 929KeSetEventBoostPriority@8
 930KeSetHardwareCounterConfiguration@8
 931KeSetIdealProcessorThread@8
 932KeSetImportanceDpc@8
 933KeSetKernelStackSwapEnable@4
 934KeSetPriorityThread@8
 935KeSetProfileIrql@4
 936KeSetSystemAffinityThread@4
 937KeSetSystemAffinityThreadEx@4
 938KeSetSystemGroupAffinityThread@8
 939KeSetTargetProcessorDpc@8
 940KeSetTargetProcessorDpcEx@8
 941KeSetTimeIncrement@8
 942KeSetTimer@16
 943KeSetTimerEx@20
 944KeSignalCallDpcDone@4
 945KeSignalCallDpcSynchronize@4
 946KeStackAttachProcess@8
 947KeStartDynamicProcessor@16
 948KeSubtractAffinityEx@12
 949KeSynchronizeExecution@12
 950KeTestAlertThread@4
 951KeTickCount DATA
 952KeUnstackDetachProcess@4
 953KeUpdateSystemTime@0
 954KeUserModeCallback@20
 955KeWaitForMultipleObjects@32
 956KeWaitForMutexObject@20
 957KeWaitForSingleObject@20
 958KiBugCheckData DATA
 959KiCheckForKernelApcDelivery@0
 960KiCoprocessorError@0
 961KiDeliverApc@12
 962KiDispatchInterrupt@0
 963KiIpiServiceRoutine@8
 964;KiUnexpectedInterrupt ; Check!!! Couldn't determine function argument count. Function doesn't return. 
 965LdrAccessResource@16
 966LdrEnumResources@20
 967LdrFindResourceDirectory_U@16
 968LdrFindResourceEx_U@20
 969LdrFindResource_U@16
 970LdrResFindResource@36
 971LdrResFindResourceDirectory@28
 972LdrResSearchResource@32
 973LpcPortObjectType DATA
 974LpcReplyWaitReplyPort@12
 975LpcRequestPort@8
 976LpcRequestWaitReplyPort@12
 977LpcRequestWaitReplyPortEx@12
 978LpcSendWaitReceivePort@28
 979LsaCallAuthenticationPackage@28
 980LsaDeregisterLogonProcess@4
 981LsaFreeReturnBuffer@4
 982LsaLogonUser@56
 983LsaLookupAuthenticationPackage@12
 984LsaRegisterLogonProcess@12
 985Mm64BitPhysicalAddress DATA
 986MmAddPhysicalMemory@8
 987MmAddVerifierThunks@8
 988MmAdjustWorkingSetSize@16
 989MmAdvanceMdl@8
 990MmAllocateContiguousMemory@12
 991MmAllocateContiguousMemorySpecifyCache@32
 992MmAllocateContiguousMemorySpecifyCacheNode@36
 993MmAllocateMappingAddress@8
 994MmAllocateNonCachedMemory@4
 995MmAllocatePagesForMdl@28
 996MmAllocatePagesForMdlEx@36
 997MmBadPointer DATA
 998MmBuildMdlForNonPagedPool@4
 999MmCanFileBeTruncated@8
1000MmCommitSessionMappedView@8
1001MmCopyVirtualMemory@28
1002MmCreateMdl@12
1003MmCreateMirror@0
1004MmCreateSection@32
1005MmDisableModifiedWriteOfSection@4
1006MmDoesFileHaveUserWritableReferences@4
1007MmFlushImageSection@8
1008MmForceSectionClosed@8
1009MmFreeContiguousMemory@4
1010MmFreeContiguousMemorySpecifyCache@12
1011MmFreeMappingAddress@8
1012MmFreeNonCachedMemory@8
1013MmFreePagesFromMdl@4
1014MmGetPhysicalAddress@4
1015MmGetPhysicalMemoryRanges@0
1016MmGetSystemRoutineAddress@4
1017MmGetVirtualForPhysical@8
1018MmGrowKernelStack@4
1019MmHighestUserAddress DATA
1020MmIsAddressValid@4
1021MmIsDriverVerifying@4
1022MmIsDriverVerifyingByAddress@4
1023MmIsIoSpaceActive@12
1024MmIsNonPagedSystemAddressValid@4
1025MmIsRecursiveIoFault@0
1026MmIsThisAnNtAsSystem@0
1027MmIsVerifierEnabled@4
1028MmLockPagableDataSection@4
1029MmLockPagableImageSection@4
1030MmLockPagableSectionByHandle@4
1031MmMapIoSpace@16
1032MmMapLockedPages@8
1033MmMapLockedPagesSpecifyCache@24
1034MmMapLockedPagesWithReservedMapping@16
1035MmMapMemoryDumpMdl@4
1036MmMapUserAddressesToPage@12
1037MmMapVideoDisplay@16
1038MmMapViewInSessionSpace@12
1039MmMapViewInSystemSpace@12
1040MmMapViewOfSection@40
1041MmMarkPhysicalMemoryAsBad@8
1042MmMarkPhysicalMemoryAsGood@8
1043MmPageEntireDriver@4
1044MmPrefetchPages@8
1045MmProbeAndLockPages@12
1046MmProbeAndLockProcessPages@16
1047MmProbeAndLockSelectedPages@16
1048MmProtectMdlSystemAddress@8
1049MmQuerySystemSize@0
1050MmRemovePhysicalMemory@8
1051MmResetDriverPaging@4
1052MmRotatePhysicalView@24
1053MmSectionObjectType DATA
1054MmSecureVirtualMemory@12
1055MmSetAddressRangeModified@8
1056MmSetBankedSection@24
1057MmSizeOfMdl@8
1058MmSystemRangeStart DATA
1059MmTrimAllSystemPagableMemory@4
1060MmUnlockPagableImageSection@4
1061MmUnlockPages@4
1062MmUnmapIoSpace@8
1063MmUnmapLockedPages@8
1064MmUnmapReservedMapping@12
1065MmUnmapVideoDisplay@8
1066MmUnmapViewInSessionSpace@4
1067MmUnmapViewInSystemSpace@4
1068MmUnmapViewOfSection@8
1069MmUnsecureVirtualMemory@4
1070MmUserProbeAddress DATA
1071NlsAnsiCodePage DATA
1072NlsLeadByteInfo DATA
1073NlsMbCodePageTag DATA
1074NlsMbOemCodePageTag DATA
1075NlsOemCodePage DATA
1076NlsOemLeadByteInfo DATA
1077NtAddAtom@12
1078NtAdjustPrivilegesToken@24
1079NtAllocateLocallyUniqueId@4
1080NtAllocateUuids@16
1081NtAllocateVirtualMemory@24
1082NtBuildGUID@0
1083NtBuildLab@0
1084NtBuildNumber@0
1085NtClose@4
1086NtCommitComplete@8
1087NtCommitEnlistment@8
1088NtCommitTransaction@8
1089NtConnectPort@32
1090NtCreateEnlistment@32
1091NtCreateEvent@20
1092NtCreateFile@44
1093NtCreateResourceManager@28
1094NtCreateSection@28
1095NtCreateTransaction@40
1096NtCreateTransactionManager@24
1097NtDeleteAtom@4
1098NtDeleteFile@4
1099NtDeviceIoControlFile@40
1100NtDuplicateObject@28
1101NtDuplicateToken@24
1102NtEnumerateTransactionObject@20
1103NtFindAtom@12
1104NtFreeVirtualMemory@16
1105NtFreezeTransactions@8
1106NtFsControlFile@40
1107NtGetEnvironmentVariableEx@20
1108NtGetNotificationResourceManager@28
1109NtGlobalFlag DATA
1110NtLockFile@40
1111NtMakePermanentObject@4
1112NtMapViewOfSection@40
1113NtNotifyChangeDirectoryFile@36
1114NtOpenEnlistment@20
1115NtOpenFile@24
1116NtOpenProcess@16
1117NtOpenProcessToken@12
1118NtOpenProcessTokenEx@16
1119NtOpenResourceManager@20
1120NtOpenThread@16
1121NtOpenThreadToken@16
1122NtOpenThreadTokenEx@20
1123NtOpenTransaction@20
1124NtOpenTransactionManager@24
1125NtPrePrepareComplete@8
1126NtPrePrepareEnlistment@8
1127NtPrepareComplete@8
1128NtPrepareEnlistment@8
1129NtPropagationComplete@16
1130NtPropagationFailed@12
1131NtQueryDirectoryFile@44
1132NtQueryEaFile@36
1133NtQueryEnvironmentVariableInfoEx@16
1134NtQueryInformationAtom@20
1135NtQueryInformationEnlistment@20
1136NtQueryInformationFile@20
1137NtQueryInformationProcess@20
1138NtQueryInformationResourceManager@20
1139NtQueryInformationThread@20
1140NtQueryInformationToken@20
1141NtQueryInformationTransaction@20
1142NtQueryInformationTransactionManager@20
1143NtQueryQuotaInformationFile@36
1144NtQuerySecurityAttributesToken@24
1145NtQuerySecurityObject@20
1146NtQuerySystemInformation@16
1147NtQuerySystemInformationEx@24
1148NtQueryVolumeInformationFile@20
1149NtReadFile@36
1150NtReadOnlyEnlistment@8
1151NtRecoverEnlistment@8
1152NtRecoverResourceManager@4
1153NtRecoverTransactionManager@4
1154NtRequestPort@8
1155NtRequestWaitReplyPort@12
1156NtRollbackComplete@8
1157NtRollbackEnlistment@8
1158NtRollbackTransaction@8
1159NtSetEaFile@16
1160NtSetEvent@8
1161NtSetInformationEnlistment@16
1162NtSetInformationFile@20
1163NtSetInformationProcess@16
1164NtSetInformationResourceManager@16
1165NtSetInformationThread@16
1166NtSetInformationToken@16
1167NtSetInformationTransaction@16
1168NtSetQuotaInformationFile@16
1169NtSetSecurityObject@12
1170NtSetVolumeInformationFile@20
1171NtShutdownSystem@4
1172NtThawTransactions@0
1173NtTraceControl@24
1174NtTraceEvent@16
1175NtUnlockFile@20
1176NtVdmControl@8
1177NtWaitForSingleObject@12
1178NtWriteFile@36
1179ObAssignSecurity@16
1180ObCheckCreateObjectAccess@28
1181ObCheckObjectAccess@20
1182ObCloseHandle@8
1183ObCreateObject@36
1184ObCreateObjectType@16
1185ObDeleteCapturedInsertInfo@4
1186ObDereferenceObject@4
1187ObDereferenceObjectDeferDelete@4
1188ObDereferenceObjectDeferDeleteWithTag@8
1189ObDereferenceSecurityDescriptor@8
1190ObFindHandleForObject@20
1191ObGetFilterVersion@0
1192ObGetObjectSecurity@12
1193ObGetObjectType@4
1194ObInsertObject@24
1195ObIsDosDeviceLocallyMapped@8
1196ObIsKernelHandle@4
1197ObLogSecurityDescriptor@12
1198ObMakeTemporaryObject@4
1199ObOpenObjectByName@28
1200ObOpenObjectByPointer@28
1201ObOpenObjectByPointerWithTag@32
1202ObQueryNameInfo@4
1203ObQueryNameString@16
1204ObQueryObjectAuditingByHandle@8
1205ObReferenceObjectByHandle@24
1206ObReferenceObjectByHandleWithTag@28
1207ObReferenceObjectByName@32
1208ObReferenceObjectByPointer@16
1209ObReferenceObjectByPointerWithTag@20
1210ObReferenceSecurityDescriptor@8
1211ObRegisterCallbacks@8
1212ObReleaseObjectSecurity@8
1213ObSetHandleAttributes@12
1214ObSetSecurityDescriptorInfo@24
1215ObSetSecurityObjectByPointer@12
1216ObUnRegisterCallbacks@4
1217POGOBuffer DATA
1218PcwAddInstance@20
1219PcwCloseInstance@4
1220PcwCreateInstance@20
1221PcwRegister@8
1222PcwUnregister@4
1223PfFileInfoNotify@4
1224PfxFindPrefix@8
1225PfxInitialize@4
1226PfxInsertPrefix@12
1227PfxRemovePrefix@8
1228PoCallDriver@8
1229PoCancelDeviceNotify@4
1230PoClearPowerRequest@8
1231PoCreatePowerRequest@12
1232PoDeletePowerRequest@4
1233PoDisableSleepStates@12
1234PoEndDeviceBusy@4
1235PoGetSystemWake@4
1236PoQueryWatchdogTime@8
1237PoQueueShutdownWorkItem@4
1238PoReenableSleepStates@4
1239PoRegisterDeviceForIdleDetection@16
1240PoRegisterDeviceNotify@24
1241PoRegisterPowerSettingCallback@20
1242PoRegisterSystemState@8
1243PoRequestPowerIrp@24
1244PoRequestShutdownEvent@4
1245PoSetDeviceBusyEx@4
1246PoSetFixedWakeSource@4
1247PoSetHiberRange@20
1248PoSetPowerRequest@8
1249PoSetPowerState@12
1250PoSetSystemState@4
1251PoSetSystemWake@4
1252PoShutdownBugCheck@4
1253PoStartDeviceBusy@4
1254PoStartNextPowerIrp@4
1255PoUnregisterPowerSettingCallback@4
1256PoUnregisterSystemState@4
1257PoUserShutdownInitiated@0
1258ProbeForRead@12
1259ProbeForWrite@12
1260PsCreateSystemProcess@12
1261PsAcquireProcessExitSynchronization@4
1262PsAssignImpersonationToken@8
1263PsChargePoolQuota@12
1264PsChargeProcessCpuCycles@12
1265PsChargeProcessNonPagedPoolQuota@8
1266PsChargeProcessPagedPoolQuota@8
1267PsChargeProcessPoolQuota@12
1268PsCreateSystemThread@28
1269PsDereferenceImpersonationToken@4
1270PsDereferencePrimaryToken@4
1271PsDisableImpersonation@8
1272PsEnterPriorityRegion@0
1273PsEstablishWin32Callouts@4
1274PsGetContextThread@12
1275PsGetCurrentProcess@0
1276PsGetCurrentProcessId@0
1277PsGetCurrentProcessSessionId@0
1278PsGetCurrentProcessWin32Process@0
1279PsGetCurrentThread@0
1280PsGetCurrentThreadId@0
1281PsGetCurrentThreadPreviousMode@0
1282PsGetCurrentThreadProcess@0
1283PsGetCurrentThreadProcessId@0
1284PsGetCurrentThreadStackBase@0
1285PsGetCurrentThreadStackLimit@0
1286PsGetCurrentThreadTeb@0
1287PsGetCurrentThreadWin32Thread@0
1288PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion@4
1289PsGetJobLock@4
1290PsGetJobSessionId@4
1291PsGetJobUIRestrictionsClass@4
1292PsGetProcessCreateTimeQuadPart@4
1293PsGetProcessDebugPort@4
1294PsGetProcessExitProcessCalled@4
1295PsGetProcessExitStatus@4
1296PsGetProcessExitTime@0
1297PsGetProcessId@4
1298PsGetProcessImageFileName@4
1299PsGetProcessInheritedFromUniqueProcessId@4
1300PsGetProcessJob@4
1301PsGetProcessPeb@4
1302PsGetProcessPriorityClass@4
1303PsGetProcessSectionBaseAddress@4
1304PsGetProcessSecurityPort@4
1305PsGetProcessSessionId@4
1306PsGetProcessSessionIdEx@4
1307PsGetProcessWin32Process@4
1308PsGetProcessWin32WindowStation@4
1309PsGetThreadFreezeCount@4
1310PsGetThreadHardErrorsAreDisabled@4
1311PsGetThreadId@4
1312PsGetThreadProcess@4
1313PsGetThreadProcessId@4
1314PsGetThreadSessionId@4
1315PsGetThreadTeb@4
1316PsGetThreadWin32Thread@4
1317PsGetVersion@16
1318PsImpersonateClient@20
1319PsInitialSystemProcess DATA
1320PsIsCurrentThreadPrefetching@0
1321PsIsProcessBeingDebugged@4
1322PsIsProtectedProcess@4
1323PsIsSystemProcess@4
1324PsIsSystemThread@4
1325PsIsThreadImpersonating@4
1326PsIsThreadTerminating@4
1327PsJobType DATA
1328PsLeavePriorityRegion@0
1329PsLookupProcessByProcessId@8
1330PsLookupProcessThreadByCid@12
1331PsLookupThreadByThreadId@8
1332PsProcessType DATA
1333PsQueryProcessExceptionFlags@12
1334PsReferenceImpersonationToken@16
1335PsReferencePrimaryToken@4
1336PsReferenceProcessFilePointer@8
1337PsReleaseProcessExitSynchronization@4
1338PsRemoveCreateThreadNotifyRoutine@4
1339PsRemoveLoadImageNotifyRoutine@4
1340PsRestoreImpersonation@8
1341PsResumeProcess@4
1342PsReturnPoolQuota@12
1343PsReturnProcessNonPagedPoolQuota@8
1344PsReturnProcessPagedPoolQuota@8
1345PsRevertThreadToSelf@4
1346PsRevertToSelf@0
1347PsSetContextThread@12
1348PsSetCreateProcessNotifyRoutine@8
1349PsSetCreateProcessNotifyRoutineEx@8
1350PsSetCreateThreadNotifyRoutine@4
1351PsSetCurrentThreadPrefetching@4
1352PsSetJobUIRestrictionsClass@8
1353PsSetLegoNotifyRoutine@4
1354PsSetLoadImageNotifyRoutine@4
1355PsSetProcessPriorityByClass@8
1356PsSetProcessPriorityClass@8
1357PsSetProcessSecurityPort@8
1358PsSetProcessWin32Process@12
1359PsSetProcessWindowStation@8
1360PsSetThreadHardErrorsAreDisabled@8
1361PsSetThreadWin32Thread@12
1362PsSuspendProcess@4
1363PsTerminateSystemThread@4
1364PsThreadType DATA
1365PsUILanguageComitted DATA
1366PsWrapApcWow64Thread@8
1367READ_REGISTER_BUFFER_UCHAR@12
1368READ_REGISTER_BUFFER_ULONG@12
1369READ_REGISTER_BUFFER_USHORT@12
1370READ_REGISTER_UCHAR@4
1371READ_REGISTER_ULONG@4
1372READ_REGISTER_USHORT@4
1373RtlAbsoluteToSelfRelativeSD@12
1374RtlAddAccessAllowedAce@16
1375RtlAddAccessAllowedAceEx@20
1376RtlAddAce@20
1377RtlAddAtomToAtomTable@12
1378RtlAddRange@36
1379RtlAllocateHeap@12
1380RtlAnsiCharToUnicodeChar@4
1381RtlAnsiStringToUnicodeSize@4
1382RtlAnsiStringToUnicodeString@12
1383RtlAppendAsciizToString@8
1384RtlAppendStringToString@8
1385RtlAppendUnicodeStringToString@8
1386RtlAppendUnicodeToString@8
1387RtlAreAllAccessesGranted@8
1388RtlAreAnyAccessesGranted@8
1389RtlAreBitsClear@12
1390RtlAreBitsSet@12
1391RtlAssert@16
1392RtlCaptureContext@4
1393RtlCaptureStackBackTrace@16
1394RtlCharToInteger@12
1395RtlCheckRegistryKey@8
1396RtlClearAllBits@4
1397RtlClearBit@8
1398RtlClearBits@12
1399RtlCmDecodeMemIoResource@8
1400RtlCmEncodeMemIoResource@24
1401RtlCompareAltitudes@8
1402RtlCompareMemory@12
1403RtlCompareMemoryUlong@12
1404RtlCompareString@12
1405RtlCompareUnicodeString@12
1406RtlCompareUnicodeStrings@20
1407RtlCompressBuffer@32
1408RtlCompressChunks@28
1409RtlComputeCrc32@12
1410RtlContractHashTable@4
1411RtlConvertLongToLargeInteger@4
1412RtlConvertSidToUnicodeString@12
1413RtlConvertUlongToLargeInteger@4
1414RtlCopyLuid@8
1415RtlCopyLuidAndAttributesArray@12
1416RtlCopyRangeList@8
1417RtlCopySid@12
1418RtlCopySidAndAttributesArray@28
1419RtlCopyString@8
1420RtlCopyUnicodeString@8
1421RtlCreateAcl@12
1422RtlCreateAtomTable@8
1423RtlCreateHashTable@12
1424RtlCreateHeap@24
1425RtlCreateRegistryKey@8
1426RtlCreateSecurityDescriptor@8
1427RtlCreateSystemVolumeInformationFolder@4
1428RtlCreateUnicodeString@8
1429RtlCustomCPToUnicodeN@24
1430RtlDecompressBuffer@24
1431RtlDecompressChunks@28
1432RtlDecompressFragment@32
1433RtlDelete@4
1434RtlDeleteAce@8
1435RtlDeleteAtomFromAtomTable@8
1436RtlDeleteElementGenericTable@8
1437RtlDeleteElementGenericTableAvl@8
1438RtlDeleteHashTable@4
1439RtlDeleteNoSplay@8
1440RtlDeleteOwnersRanges@8
1441RtlDeleteRange@24
1442RtlDeleteRegistryValue@12
1443RtlDescribeChunk@20
1444RtlDestroyAtomTable@4
1445RtlDestroyHeap@4
1446RtlDowncaseUnicodeChar@4
1447RtlDowncaseUnicodeString@12
1448RtlDuplicateUnicodeString@12
1449RtlEmptyAtomTable@8
1450RtlEndEnumerationHashTable@8
1451RtlEndWeakEnumerationHashTable@8
1452RtlEnlargedIntegerMultiply@8
1453RtlEnlargedUnsignedDivide@16
1454RtlEnlargedUnsignedMultiply@8
1455RtlEnumerateEntryHashTable@8
1456RtlEnumerateGenericTable@8
1457RtlEnumerateGenericTableAvl@8
1458RtlEnumerateGenericTableLikeADirectory@28
1459RtlEnumerateGenericTableWithoutSplaying@8
1460RtlEnumerateGenericTableWithoutSplayingAvl@8
1461RtlEqualLuid@8
1462RtlEqualSid@8
1463RtlEqualString@12
1464RtlEqualUnicodeString@12
1465RtlEthernetAddressToStringA@8
1466RtlEthernetAddressToStringW@8
1467RtlEthernetStringToAddressA@12
1468RtlEthernetStringToAddressW@12
1469RtlExpandHashTable@4
1470RtlExtendedIntegerMultiply@12
1471RtlExtendedLargeIntegerDivide@16
1472RtlExtendedMagicDivide@20
1473RtlFillMemory@12
1474RtlFillMemoryUlong@12
1475RtlFillMemoryUlonglong@16
1476RtlFindAceByType@12
1477RtlFindClearBits@12
1478RtlFindClearBitsAndSet@12
1479RtlFindClearRuns@16
1480RtlFindClosestEncodableLength@12
1481RtlFindFirstRunClear@8
1482RtlFindLastBackwardRunClear@12
1483RtlFindLeastSignificantBit@8
1484RtlFindLongestRunClear@8
1485RtlFindMessage@20
1486RtlFindMostSignificantBit@8
1487RtlFindNextForwardRunClear@12
1488RtlFindRange@48
1489RtlFindSetBits@12
1490RtlFindSetBitsAndClear@12
1491RtlFindUnicodePrefix@12
1492RtlFormatCurrentUserKeyPath@4
1493RtlFormatMessage@36
1494RtlFreeAnsiString@4
1495RtlFreeHeap@12
1496RtlFreeOemString@4
1497RtlFreeRangeList@4
1498RtlFreeUnicodeString@4
1499RtlGUIDFromString@8
1500RtlGenerate8dot3Name@16
1501RtlGetAce@12
1502RtlGetCallersAddress@8
1503RtlGetCompressionWorkSpaceSize@12
1504RtlGetDaclSecurityDescriptor@16
1505RtlGetDefaultCodePage@8
1506RtlGetElementGenericTable@8
1507RtlGetElementGenericTableAvl@8
1508RtlGetEnabledExtendedFeatures@8
1509RtlGetFirstRange@12
1510RtlGetGroupSecurityDescriptor@12
1511RtlGetIntegerAtom@8
1512RtlGetLastRange@12
1513RtlGetNextEntryHashTable@8
1514RtlGetNextRange@12
1515RtlGetNtGlobalFlags@0
1516RtlGetOwnerSecurityDescriptor@12
1517RtlGetProductInfo@20
1518RtlGetSaclSecurityDescriptor@16
1519RtlGetSetBootStatusData@24
1520RtlGetThreadLangIdByIndex@16
1521RtlGetVersion@4
1522RtlHashUnicodeString@16
1523RtlIdnToAscii@20
1524RtlIdnToNameprepUnicode@20
1525RtlIdnToUnicode@20
1526RtlImageDirectoryEntryToData@16
1527RtlImageNtHeader@4
1528RtlInitAnsiString@8
1529RtlInitAnsiStringEx@8
1530RtlInitCodePageTable@8
1531RtlInitEnumerationHashTable@8
1532RtlInitString@8
1533RtlInitUnicodeString@8
1534RtlInitUnicodeStringEx@8
1535RtlInitWeakEnumerationHashTable@8
1536RtlInitializeBitMap@12
1537RtlInitializeGenericTable@20
1538RtlInitializeGenericTableAvl@20
1539RtlInitializeRangeList@4
1540RtlInitializeSid@12
1541RtlInitializeUnicodePrefix@4
1542RtlInsertElementGenericTable@16
1543RtlInsertElementGenericTableAvl@16
1544RtlInsertElementGenericTableFull@24
1545RtlInsertElementGenericTableFullAvl@24
1546RtlInsertEntryHashTable@16
1547RtlInsertUnicodePrefix@12
1548RtlInt64ToUnicodeString@16
1549RtlIntegerToChar@16
1550RtlIntegerToUnicode@16
1551RtlIntegerToUnicodeString@12
1552RtlInvertRangeList@8
1553RtlInvertRangeListEx@20
1554RtlIoDecodeMemIoResource@16
1555RtlIoEncodeMemIoResource@40
1556RtlIpv4AddressToStringA@8
1557RtlIpv4AddressToStringExA@16
1558RtlIpv4AddressToStringExW@16
1559RtlIpv4AddressToStringW@8
1560RtlIpv4StringToAddressA@16
1561RtlIpv4StringToAddressExA@16
1562RtlIpv4StringToAddressExW@16
1563RtlIpv4StringToAddressW@16
1564RtlIpv6AddressToStringA@8
1565RtlIpv6AddressToStringExA@20
1566RtlIpv6AddressToStringExW@20
1567RtlIpv6AddressToStringW@8
1568RtlIpv6StringToAddressA@12
1569RtlIpv6StringToAddressExA@16
1570RtlIpv6StringToAddressExW@16
1571RtlIpv6StringToAddressW@12
1572RtlIsGenericTableEmpty@4
1573RtlIsGenericTableEmptyAvl@4
1574RtlIsNameLegalDOS8Dot3@12
1575RtlIsNormalizedString@16
1576RtlIsNtDdiVersionAvailable@4
1577RtlIsRangeAvailable@40
1578RtlIsServicePackVersionInstalled@4
1579RtlIsValidOemCharacter@4
1580RtlLargeIntegerAdd@16
1581RtlLargeIntegerArithmeticShift@12
1582RtlLargeIntegerDivide@20
1583RtlLargeIntegerNegate@8
1584RtlLargeIntegerShiftLeft@12
1585RtlLargeIntegerShiftRight@12
1586RtlLargeIntegerSubtract@16
1587RtlLengthRequiredSid@4
1588RtlLengthSecurityDescriptor@4
1589RtlLengthSid@4
1590RtlLoadString@32
1591RtlLocalTimeToSystemTime@8
1592RtlLockBootStatusData@4
1593RtlLookupAtomInAtomTable@12
1594RtlLookupElementGenericTable@8
1595RtlLookupElementGenericTableAvl@8
1596RtlLookupElementGenericTableFull@16
1597RtlLookupElementGenericTableFullAvl@16
1598RtlLookupEntryHashTable@12
1599RtlLookupFirstMatchingElementGenericTableAvl@12
1600RtlMapGenericMask@8
1601RtlMapSecurityErrorToNtStatus@4
1602RtlMergeRangeLists@16
1603RtlMoveMemory@12
1604RtlMultiByteToUnicodeN@20
1605RtlMultiByteToUnicodeSize@12
1606RtlNextUnicodePrefix@8
1607RtlNormalizeString@20
1608RtlNtStatusToDosError@4
1609RtlNtStatusToDosErrorNoTeb@4
1610RtlNumberGenericTableElements@4
1611RtlNumberGenericTableElementsAvl@4
1612RtlNumberOfClearBits@4
1613RtlNumberOfSetBits@4
1614RtlNumberOfSetBitsUlongPtr@4
1615RtlOemStringToCountedUnicodeString@12
1616RtlOemStringToUnicodeSize@4
1617RtlOemStringToUnicodeString@12
1618RtlOemToUnicodeN@20
1619RtlOwnerAcesPresent@4
1620RtlPinAtomInAtomTable@8
1621RtlPrefixString@12
1622RtlPrefixUnicodeString@12
1623RtlQueryAtomInAtomTable@24
1624RtlQueryDynamicTimeZoneInformation@4
1625RtlQueryElevationFlags@4
1626RtlQueryModuleInformation@12
1627RtlQueryRegistryValues@20
1628RtlQueryTimeZoneInformation@4
1629RtlRaiseException@24
1630RtlRandom@4
1631RtlRandomEx@4
1632RtlRealPredecessor@4
1633RtlRealSuccessor@4
1634RtlRemoveEntryHashTable@12
1635RtlRemoveUnicodePrefix@8
1636RtlReplaceSidInSd@16
1637RtlReserveChunk@20
1638RtlRunOnceBeginInitialize@12
1639RtlRunOnceComplete@12
1640RtlRunOnceExecuteOnce@16
1641RtlRunOnceInitialize@4
1642RtlSecondsSince1970ToTime@8
1643RtlSecondsSince1980ToTime@8
1644RtlSelfRelativeToAbsoluteSD2@8
1645RtlSelfRelativeToAbsoluteSD@44
1646RtlSetAllBits@4
1647RtlSetBit@8
1648RtlSetBits@12
1649RtlSetDaclSecurityDescriptor@16
1650RtlSetDynamicTimeZoneInformation@4
1651RtlSetGroupSecurityDescriptor@12
1652RtlSetOwnerSecurityDescriptor@12
1653RtlSetSaclSecurityDescriptor@16
1654RtlSetTimeZoneInformation@4
1655RtlSidHashInitialize@12
1656RtlSidHashLookup@8
1657RtlSizeHeap@12
1658RtlSplay@4
1659RtlStringFromGUID@8
1660RtlSubAuthorityCountSid@4
1661RtlSubAuthoritySid@8
1662RtlSubtreePredecessor@4
1663RtlSubtreeSuccessor@4
1664RtlSystemTimeToLocalTime@8
1665RtlTestBit@8
1666RtlTimeFieldsToTime@8
1667RtlTimeToElapsedTimeFields@8
1668RtlTimeToSecondsSince1970@8
1669RtlTimeToSecondsSince1980@8
1670RtlTimeToTimeFields@8
1671RtlTraceDatabaseAdd@16
1672RtlTraceDatabaseCreate@20
1673RtlTraceDatabaseDestroy@4
1674RtlTraceDatabaseEnumerate@12
1675RtlTraceDatabaseFind@16
1676RtlTraceDatabaseLock@4
1677RtlTraceDatabaseUnlock@4
1678RtlTraceDatabaseValidate@4
1679RtlUTF8ToUnicodeN@20
1680RtlUnicodeStringToAnsiSize@4
1681RtlUnicodeStringToAnsiString@12
1682RtlUnicodeStringToCountedOemString@12
1683RtlUnicodeStringToInteger@12
1684RtlUnicodeStringToOemSize@4
1685RtlUnicodeStringToOemString@12
1686RtlUnicodeToCustomCPN@24
1687RtlUnicodeToMultiByteN@20
1688RtlUnicodeToMultiByteSize@12
1689RtlUnicodeToOemN@20
1690RtlUnicodeToUTF8N@20
1691RtlUnlockBootStatusData@4
1692RtlUnwind@16
1693RtlUpcaseUnicodeChar@4
1694RtlUpcaseUnicodeString@12
1695RtlUpcaseUnicodeStringToAnsiString@12
1696RtlUpcaseUnicodeStringToCountedOemString@12
1697RtlUpcaseUnicodeStringToOemString@12
1698RtlUpcaseUnicodeToCustomCPN@24
1699RtlUpcaseUnicodeToMultiByteN@20
1700RtlUpcaseUnicodeToOemN@20
1701RtlUpperChar@4
1702RtlUpperString@8
1703RtlValidRelativeSecurityDescriptor@12
1704RtlValidSecurityDescriptor@4
1705RtlValidSid@4
1706RtlValidateUnicodeString@8
1707RtlVerifyVersionInfo@16
1708RtlVolumeDeviceToDosName@8
1709RtlWalkFrameChain@12
1710RtlWeaklyEnumerateEntryHashTable@8
1711RtlWriteRegistryValue@24
1712RtlZeroHeap@8
1713RtlZeroMemory@8
1714RtlxAnsiStringToUnicodeSize@4
1715RtlxOemStringToUnicodeSize@4
1716RtlxUnicodeStringToAnsiSize@4
1717RtlxUnicodeStringToOemSize@4
1718SeAccessCheck@40
1719SeAccessCheckEx@24
1720SeAccessCheckFromState@40
1721SeAccessCheckWithHint@44
1722SeAppendPrivileges@8
1723SeAssignSecurity@28
1724SeAssignSecurityEx@36
1725SeAuditHardLinkCreation@12
1726SeAuditHardLinkCreationWithTransaction@16
1727SeAuditTransactionStateChange@12
1728SeAuditingAnyFileEventsWithContext@8
1729SeAuditingFileEvents@8
1730SeAuditingFileEventsWithContext@12
1731SeAuditingFileOrGlobalEvents@12
1732SeAuditingHardLinkEvents@8
1733SeAuditingHardLinkEventsWithContext@12
1734SeCaptureSecurityDescriptor@20
1735SeCaptureSubjectContext@4
1736SeCaptureSubjectContextEx@12
1737SeCloseObjectAuditAlarm@12
1738SeCloseObjectAuditAlarmForNonObObject@16
1739SeComputeAutoInheritByObjectType@12
1740SeCreateAccessState@16
1741SeCreateAccessStateEx@24
1742SeCreateClientSecurity@16
1743SeCreateClientSecurityFromSubjectContext@16
1744SeDeassignSecurity@4
1745SeDeleteAccessState@4
1746SeDeleteObjectAuditAlarm@8
1747SeDeleteObjectAuditAlarmWithTransaction@12
1748SeExamineSacl@24
1749SeExports DATA
1750SeFilterToken@24
1751SeFreePrivileges@4
1752SeGetLinkedToken@12
1753SeImpersonateClient@8
1754SeImpersonateClientEx@8
1755SeLocateProcessImageName@8
1756SeLockSubjectContext@4
1757SeMarkLogonSessionForTerminationNotification@4
1758SeOpenObjectAuditAlarm@36
1759SeOpenObjectAuditAlarmForNonObObject@44
1760SeOpenObjectAuditAlarmWithTransaction@40
1761SeOpenObjectForDeleteAuditAlarm@36
1762SeOpenObjectForDeleteAuditAlarmWithTransaction@40
1763SePrivilegeCheck@12
1764SePrivilegeObjectAuditAlarm@24
1765SePublicDefaultDacl DATA
1766SeQueryAuthenticationIdToken@8
1767SeQueryInformationToken@12
1768SeQuerySecurityAttributesToken@24
1769SeQuerySecurityDescriptorInfo@16
1770SeQuerySessionIdToken@8
1771SeRegisterLogonSessionTerminatedRoutine@4
1772SeReleaseSecurityDescriptor@12
1773SeReleaseSubjectContext@4
1774SeReportSecurityEvent@16
1775SeReportSecurityEventWithSubCategory@20
1776SeSetAccessStateGenericMapping@8
1777SeSetAuditParameter@16
1778SeSetSecurityAttributesToken@16
1779SeSetSecurityDescriptorInfo@24
1780SeSetSecurityDescriptorInfoEx@28
1781SeSinglePrivilegeCheck@12
1782SeSrpAccessCheck@24
1783SeSystemDefaultDacl DATA
1784SeTokenImpersonationLevel@4
1785SeTokenIsAdmin@4
1786SeTokenIsRestricted@4
1787SeTokenIsWriteRestricted@4
1788SeTokenObjectType DATA
1789SeTokenType@4
1790SeUnlockSubjectContext@4
1791SeUnregisterLogonSessionTerminatedRoutine@4
1792SeValidSecurityDescriptor@8
1793TmCancelPropagationRequest@4
1794TmCommitComplete@8
1795TmCommitEnlistment@8
1796TmCommitTransaction@8
1797TmCreateEnlistment@36
1798TmCurrentTransaction@4
1799TmDereferenceEnlistmentKey@8
1800TmEnableCallbacks@12
1801TmEndPropagationRequest@4
1802TmEnlistmentObjectType DATA
1803TmFreezeTransactions@12
1804TmGetTransactionId@8
1805TmInitSystem@0
1806TmInitSystemPhase2@0
1807TmInitializeResourceManager@20
1808TmInitializeTransaction@36
1809TmIsTransactionActive@4
1810TmPrePrepareComplete@8
1811TmPrePrepareEnlistment@8
1812TmPrepareComplete@8
1813TmPrepareEnlistment@8
1814TmPropagationComplete@16
1815TmPropagationFailed@12
1816TmReadOnlyEnlistment@8
1817TmRecoverEnlistment@8
1818TmRecoverResourceManager@4
1819TmRecoverTransactionManager@8
1820TmReferenceEnlistmentKey@8
1821TmRequestOutcomeEnlistment@8
1822TmResourceManagerObjectType DATA
1823TmRollbackComplete@8
1824TmRollbackEnlistment@8
1825TmRollbackTransaction@8
1826TmSetCurrentTransaction@4
1827TmThawTransactions@0
1828TmTransactionManagerObjectType DATA
1829TmTransactionObjectType DATA
1830TmpIsKTMCommitCoordinator@4
1831VerSetConditionMask@16
1832VfFailDeviceNode@0
1833VfFailDriver@0
1834VfFailSystemBIOS@0
1835VfIsVerificationEnabled@8
1836WRITE_REGISTER_BUFFER_UCHAR@12
1837WRITE_REGISTER_BUFFER_ULONG@12
1838WRITE_REGISTER_BUFFER_USHORT@12
1839WRITE_REGISTER_UCHAR@8
1840WRITE_REGISTER_ULONG@8
1841WRITE_REGISTER_USHORT@8
1842WheaAddErrorSource@8
1843WheaConfigureErrorSource@8
1844WheaGetErrorSource@4
1845WheaInitializeRecordHeader@4
1846WheaReportHwError@4
1847WmiQueryTraceInformation@20
1848WmiTraceMessage
1849WmiTraceMessageVa@24
1850XIPDispatch@12
1851ZwAccessCheckAndAuditAlarm@44
1852ZwAddBootEntry@8
1853ZwAddDriverEntry@8
1854ZwAdjustPrivilegesToken@24
1855ZwAlertThread@4
1856ZwAllocateLocallyUniqueId@4
1857ZwAllocateVirtualMemory@24
1858ZwAlpcAcceptConnectPort@36
1859ZwAlpcCancelMessage@12
1860ZwAlpcConnectPort@44
1861ZwAlpcCreatePort@12
1862ZwAlpcCreatePortSection@24
1863ZwAlpcCreateResourceReserve@16
1864ZwAlpcCreateSectionView@12
1865ZwAlpcCreateSecurityContext@12
1866ZwAlpcDeletePortSection@12
1867ZwAlpcDeleteResourceReserve@12
1868ZwAlpcDeleteSectionView@12
1869ZwAlpcDeleteSecurityContext@12
1870ZwAlpcDisconnectPort@8
1871ZwAlpcQueryInformation@20
1872ZwAlpcSendWaitReceivePort@32
1873ZwAlpcSetInformation@16
1874ZwAssignProcessToJobObject@8
1875ZwCancelIoFile@8
1876ZwCancelTimer@8
1877ZwClearEvent@4
1878ZwClose@4
1879ZwCloseObjectAuditAlarm@12
1880ZwCommitComplete@8
1881ZwCommitEnlistment@8
1882ZwCommitTransaction@8
1883ZwConnectPort@32
1884ZwCreateDirectoryObject@12
1885ZwCreateEnlistment@32
1886ZwCreateEvent@20
1887ZwCreateFile@44
1888ZwCreateIoCompletion@16
1889ZwCreateJobObject@12
1890ZwCreateKey@28
1891ZwCreateKeyTransacted@32
1892ZwCreateResourceManager@28
1893ZwCreateSection@28
1894ZwCreateSymbolicLinkObject@16
1895ZwCreateTimer@16
1896ZwCreateTransaction@40
1897ZwCreateTransactionManager@24
1898ZwDeleteBootEntry@4
1899ZwDeleteDriverEntry@4
1900ZwDeleteFile@4
1901ZwDeleteKey@4
1902ZwDeleteValueKey@8
1903ZwDeviceIoControlFile@40
1904ZwDisplayString@4
1905ZwDuplicateObject@28
1906ZwDuplicateToken@24
1907ZwEnumerateBootEntries@8
1908ZwEnumerateDriverEntries@8
1909ZwEnumerateKey@24
1910ZwEnumerateTransactionObject@20
1911ZwEnumerateValueKey@24
1912ZwFlushBuffersFile@8
1913ZwFlushInstructionCache@12
1914ZwFlushKey@4
1915ZwFlushVirtualMemory@16
1916ZwFreeVirtualMemory@16
1917ZwFsControlFile@40
1918ZwGetNotificationResourceManager@28
1919ZwImpersonateAnonymousToken@4
1920ZwInitiatePowerAction@16
1921ZwIsProcessInJob@8
1922ZwLoadDriver@4
1923ZwLoadKey@8
1924ZwLoadKeyEx@32
1925ZwLockFile@40
1926ZwLockProductActivationKeys@8
1927ZwMakeTemporaryObject@4
1928ZwMapViewOfSection@40
1929ZwModifyBootEntry@4
1930ZwModifyDriverEntry@4
1931ZwNotifyChangeKey@40
1932ZwNotifyChangeSession@32
1933ZwOpenDirectoryObject@12
1934ZwOpenEnlistment@20
1935ZwOpenEvent@12
1936ZwOpenFile@24
1937ZwOpenJobObject@12
1938ZwOpenKey@12
1939ZwOpenKeyEx@16
1940ZwOpenKeyTransacted@16
1941ZwOpenKeyTransactedEx@20
1942ZwOpenProcess@16
1943ZwOpenProcessToken@12
1944ZwOpenProcessTokenEx@16
1945ZwOpenResourceManager@20
1946ZwOpenSection@12
1947ZwOpenSession@12
1948ZwOpenSymbolicLinkObject@12
1949ZwOpenThread@16
1950ZwOpenThreadToken@16
1951ZwOpenThreadTokenEx@20
1952ZwOpenTimer@12
1953ZwOpenTransaction@20
1954ZwOpenTransactionManager@24
1955ZwPowerInformation@20
1956ZwPrePrepareComplete@8
1957ZwPrePrepareEnlistment@8
1958ZwPrepareComplete@8
1959ZwPrepareEnlistment@8
1960ZwPropagationComplete@16
1961ZwPropagationFailed@12
1962ZwPulseEvent@8
1963ZwQueryBootEntryOrder@8
1964ZwQueryBootOptions@8
1965ZwQueryDefaultLocale@8
1966ZwQueryDefaultUILanguage@4
1967ZwQueryDirectoryFile@44
1968ZwQueryDirectoryObject@28
1969ZwQueryDriverEntryOrder@8
1970ZwQueryEaFile@36
1971ZwQueryFullAttributesFile@8
1972ZwQueryInformationEnlistment@20
1973ZwQueryInformationFile@20
1974ZwQueryInformationJobObject@20
1975ZwQueryInformationProcess@20
1976ZwQueryInformationResourceManager@20
1977ZwQueryInformationThread@20
1978ZwQueryInformationToken@20
1979ZwQueryInformationTransaction@20
1980ZwQueryInformationTransactionManager@20
1981ZwQueryInstallUILanguage@4
1982ZwQueryKey@20
1983ZwQueryLicenseValue@20
1984ZwQueryObject@20
1985ZwQueryQuotaInformationFile@36
1986ZwQuerySection@20
1987ZwQuerySecurityAttributesToken@24
1988ZwQuerySecurityObject@20
1989ZwQuerySymbolicLinkObject@12
1990ZwQuerySystemInformation@16
1991ZwQueryValueKey@24
1992ZwQueryVirtualMemory@24
1993ZwQueryVolumeInformationFile@20
1994ZwReadFile@36
1995ZwReadOnlyEnlistment@8
1996ZwRecoverEnlistment@8
1997ZwRecoverResourceManager@4
1998ZwRecoverTransactionManager@4
1999ZwRemoveIoCompletion@20
2000ZwRemoveIoCompletionEx@24
2001ZwReplaceKey@12
2002ZwRequestPort@8
2003ZwRequestWaitReplyPort@12
2004ZwResetEvent@8
2005ZwRestoreKey@12
2006ZwRollbackComplete@8
2007ZwRollbackEnlistment@8
2008ZwRollbackTransaction@8
2009ZwSaveKey@8
2010ZwSaveKeyEx@12
2011ZwSecureConnectPort@36
2012ZwSetBootEntryOrder@8
2013ZwSetBootOptions@8
2014ZwSetDefaultLocale@8
2015ZwSetDefaultUILanguage@4
2016ZwSetDriverEntryOrder@8
2017ZwSetEaFile@16
2018ZwSetEvent@8
2019ZwSetInformationEnlistment@16
2020ZwSetInformationFile@20
2021ZwSetInformationJobObject@16
2022ZwSetInformationObject@16
2023ZwSetInformationProcess@16
2024ZwSetInformationResourceManager@16
2025ZwSetInformationThread@16
2026ZwSetInformationToken@16
2027ZwSetInformationTransaction@16
2028ZwSetQuotaInformationFile@16
2029ZwSetSecurityObject@12
2030ZwSetSystemInformation@12
2031ZwSetSystemTime@8
2032ZwSetTimer@28
2033ZwSetTimerEx@16
2034ZwSetValueKey@24
2035ZwSetVolumeInformationFile@20
2036ZwTerminateJobObject@8
2037ZwTerminateProcess@8
2038ZwTraceEvent@16
2039ZwTranslateFilePath@16
2040ZwUnloadDriver@4
2041ZwUnloadKey@4
2042ZwUnloadKeyEx@8
2043ZwUnlockFile@20
2044ZwUnmapViewOfSection@8
2045ZwWaitForMultipleObjects@20
2046ZwWaitForSingleObject@12
2047ZwWriteFile@36
2048ZwYieldExecution@0
2049_CIcos
2050_CIsin
2051_CIsqrt
2052_abnormal_termination
2053_alldiv@16
2054_alldvrm@16
2055_allmul@16
2056_alloca_probe
2057_alloca_probe_16
2058_alloca_probe_8
2059_allrem@16
2060_allshl
2061_allshr
2062_aulldiv@16
2063_aulldvrm@16
2064_aullrem@16
2065_aullshr
2066;_chkstk
2067_except_handler2
2068_except_handler3
2069_global_unwind2
2070_i64toa_s
2071_i64tow_s
2072_itoa
2073_itoa_s
2074_itow
2075_itow_s
2076_local_unwind2
2077_ltoa_s
2078_ltow_s
2079_makepath_s
2080_purecall
2081_snprintf
2082_snprintf_s
2083_snscanf_s
2084_snwprintf
2085_snwprintf_s
2086_snwscanf_s
2087_splitpath_s
2088_stricmp
2089_strlwr
2090strlwr == _strlwr
2091_strnicmp
2092_strnset
2093_strnset_s
2094_strrev
2095_strset
2096_strset_s
2097_strtoui64
2098_strupr
2099_swprintf
2100_ui64toa_s
2101_ui64tow_s
2102_ultoa_s
2103_ultow_s
2104_vsnprintf
2105_vsnprintf_s
2106_vsnwprintf
2107_vsnwprintf_s
2108_vswprintf
2109_wcsicmp
2110_wcslwr
2111wcslwr == _wcslwr
2112_wcsnicmp
2113_wcsnset
2114_wcsnset_s
2115_wcsrev
2116_wcsset_s
2117_wcsupr
2118_wmakepath_s
2119_wsplitpath_s
2120_wtoi
2121_wtol
2122atoi
2123atol
2124bsearch
2125isdigit
2126islower
2127isprint
2128isspace
2129isupper
2130isxdigit
2131mbstowcs
2132mbtowc
2133memchr
2134memcpy
2135memcpy_s
2136memmove
2137memmove_s
2138memset
2139psMUITest DATA
2140qsort
2141rand
2142sprintf
2143sprintf_s
2144srand
2145sscanf_s
2146strcat
2147strcat_s
2148strchr
2149strcmp
2150strcpy
2151strcpy_s
2152strlen
2153strncat
2154strncat_s
2155strncmp
2156strncpy
2157strncpy_s
2158strnlen
2159strrchr
2160strspn
2161strstr
2162strtok_s
2163swprintf
2164swprintf_s
2165swscanf_s
2166tolower
2167toupper
2168towlower
2169towupper
2170vDbgPrintEx@16
2171vDbgPrintExWithPrefix@20
2172vsprintf
2173vsprintf_s
2174vswprintf_s
2175wcscat
2176wcscat_s
2177wcschr
2178wcscmp
2179wcscpy
2180wcscpy_s
2181wcscspn
2182wcslen
2183wcsncat
2184wcsncat_s
2185wcsncmp
2186wcsncpy
2187wcsncpy_s
2188wcsnlen
2189wcsrchr
2190wcsspn
2191wcsstr
2192wcstombs
2193wcstoul
2194wctomb