mirror of
https://github.com/reactos/reactos.git
synced 2024-10-31 11:56:26 +00:00
1e6c809d07
Changes for compiling with w32api * include/ddk/obfuncs.h (ObCreateObject): Remove. * include/ntos/zwtypes.h (ObRosCreateObject): * ntoskrnl/ntoskrnl.def, ntoskrnl/ntoskrnl.edf: Export ObCreateObject@36 and ObRosCreateObject@20. * ntoskrnl/cm/ntfunc.c, ntoskrnl/cm/registry.c, ntoskrnl/cm/regobj.c, ntoskrnl/io/create.c, ntoskrnl/io/device.c, ntoskrnl/io/iocomp.c, ntoskrnl/lpc/connect.c, ntoskrnl/lpc/create.c, ntoskrnl/mm/section.c, ntoskrnl/nt/evtpair.c, ntoskrnl/nt/mutant.c, ntoskrnl/nt/ntevent.c, ntoskrnl/nt/ntsem.c, ntoskrnl/nt/nttimer.c, ntoskrnl/nt/profile.c, ntoskrnl/ob/dirobj.c, ntoskrnl/ob/namespc.c, ntoskrnl/ob/symlink.c, ntoskrnl/ps/create.c, ntoskrnl/ps/process.c, ntoskrnl/se/token.c, subsys/win32k/ntuser/winsta.c: Use ObRosCreateObject, not ObCreateObject. * ntoskrnl/ob/object.c (ObRosCreateObject): Rename from ObCreateObject. (ObCreateObject): Add stub. svn path=/trunk/; revision=4866
1057 lines
23 KiB
Modula-2
1057 lines
23 KiB
Modula-2
; $Id: ntoskrnl.def,v 1.155 2003/06/07 12:17:19 chorns Exp $
|
|
;
|
|
; reactos/ntoskrnl/ntoskrnl.def
|
|
;
|
|
; ReactOS Operating System
|
|
;
|
|
EXPORTS
|
|
CcRosInitializeFileCache@8
|
|
CcRosReleaseFileCache@4
|
|
CcCopyRead@24
|
|
CcCopyWrite@20
|
|
CcFlushCache@16
|
|
CcGetFileObjectFromSectionPtrs@4
|
|
CcMapData@24
|
|
CcMdlReadComplete@8
|
|
CcSetDirtyPinnedData@8
|
|
CcSetFileSizes@8
|
|
CcUnpinData@4
|
|
CcZeroData@16
|
|
DbgBreakPoint@0
|
|
DbgBreakPointWithStatus@4
|
|
;DbgLoadImageSymbols@12
|
|
DbgPrint
|
|
DbgPrompt@12
|
|
DpcQueueSize DATA
|
|
@ExAcquireFastMutexUnsafe@4
|
|
ExAcquireResourceExclusive@8
|
|
ExAcquireResourceExclusiveLite@8
|
|
ExAcquireResourceSharedLite@8
|
|
ExAcquireSharedStarveExclusive@8
|
|
ExAcquireSharedWaitForExclusive@8
|
|
ExAllocateFromPagedLookasideList@4
|
|
ExAllocatePool@8
|
|
ExAllocatePoolWithQuota@8
|
|
ExAllocatePoolWithQuotaTag@12
|
|
ExAllocatePoolWithTag@12
|
|
ExConvertExclusiveToSharedLite@4
|
|
ExCreateCallback@16
|
|
ExDeleteNPagedLookasideList@4
|
|
ExDeletePagedLookasideList@4
|
|
ExDeleteResource@4
|
|
ExDeleteResourceLite@4
|
|
ExDesktopObjectType DATA
|
|
ExDisableResourceBoostLite@4
|
|
ExEventObjectType DATA
|
|
ExExtendZone@12
|
|
ExFreePool@4
|
|
ExFreeToPagedLookasideList@8
|
|
ExGetExclusiveWaiterCount@4
|
|
ExGetPreviousMode@0
|
|
ExGetSharedWaiterCount@4
|
|
ExInitializeNPagedLookasideList@28
|
|
ExInitializePagedLookasideList@28
|
|
ExInitializeResource@4
|
|
ExInitializeResourceLite@4
|
|
ExInitializeZone@16
|
|
ExInterlockedAddLargeInteger@16
|
|
@ExInterlockedAddLargeStatistic@8
|
|
ExInterlockedAddUlong@12
|
|
@ExInterlockedCompareExchange64@16
|
|
ExInterlockedDecrementLong@8
|
|
ExInterlockedExchangeUlong@12
|
|
ExInterlockedExtendZone@16
|
|
ExInterlockedIncrementLong@8
|
|
ExInterlockedInsertHeadList@12
|
|
ExInterlockedInsertTailList@12
|
|
ExInterlockedPopEntryList@8
|
|
@ExInterlockedPopEntrySList@8
|
|
ExInterlockedPushEntryList@12
|
|
@ExInterlockedPushEntrySList@12
|
|
ExInterlockedRemoveHeadList@8
|
|
ExIsProcessorFeaturePresent@4
|
|
ExIsResourceAcquiredExclusiveLite@4
|
|
ExIsResourceAcquiredSharedLite@4
|
|
ExLocalTimeToSystemTime@8
|
|
ExNotifyCallback@12
|
|
ExPostSystemEvent@12
|
|
;ExQueryPoolBlockSize
|
|
ExQueueWorkItem@8
|
|
ExRaiseAccessViolation@0
|
|
ExRaiseDatatypeMisalignment@0
|
|
;ExRaiseException
|
|
;ExRaiseHardError
|
|
ExRaiseStatus@4
|
|
ExRegisterCallback@12
|
|
ExReinitializeResourceLite@4
|
|
@ExReleaseFastMutexUnsafe@4
|
|
ExReleaseResourceForThread@8
|
|
ExReleaseResourceForThreadLite@8
|
|
@ExReleaseResourceLite@4
|
|
ExSetResourceOwnerPointer@8
|
|
;ExSystemExceptionFilter
|
|
ExSystemTimeToLocalTime@8
|
|
ExTryToAcquireResourceExclusiveLite@4
|
|
ExUnregisterCallback@4
|
|
ExWindowStationObjectType DATA
|
|
ExInitializeBinaryTree@12
|
|
ExDeleteBinaryTree@4
|
|
ExInsertBinaryTree@12
|
|
ExSearchBinaryTree@12
|
|
ExRemoveBinaryTree@12
|
|
ExTraverseBinaryTree@16
|
|
ExInitializeSplayTree@16
|
|
ExDeleteSplayTree@4
|
|
ExInsertSplayTree@12
|
|
ExSearchSplayTree@12
|
|
ExRemoveSplayTree@12
|
|
ExWeightOfSplayTree@8
|
|
ExTraverseSplayTree@16
|
|
ExInitializeHashTable@16
|
|
ExDeleteHashTable@4
|
|
ExInsertHashTable@16
|
|
ExSearchHashTable@16
|
|
ExRemoveHashTable@16
|
|
@ExfInterlockedAddUlong@12
|
|
@ExfInterlockedInsertHeadList@12
|
|
@ExfInterlockedInsertTailList@12
|
|
@ExfInterlockedPopEntryList@8
|
|
@ExfInterlockedPushEntryList@12
|
|
@ExfInterlockedRemoveHeadList@8
|
|
@Exfi386InterlockedDecrementLong@4
|
|
@Exfi386InterlockedExchangeUlong@8
|
|
@Exfi386InterlockedIncrementLong@4
|
|
Exi386InterlockedDecrementLong@4
|
|
Exi386InterlockedExchangeUlong@8
|
|
Exi386InterlockedIncrementLong@4
|
|
FsRtlAddLargeMcbEntry@28
|
|
FsRtlAddMcbEntry@16
|
|
FsRtlAddToTunnelCache@32
|
|
FsRtlAllocateFileLock@8
|
|
FsRtlAllocatePool@8
|
|
FsRtlAllocatePoolWithQuota@8
|
|
FsRtlAllocatePoolWithQuotaTag@12
|
|
FsRtlAllocatePoolWithTag@12
|
|
FsRtlAllocateResource@0
|
|
FsRtlAreNamesEqual@16
|
|
FsRtlBalanceReads@4
|
|
FsRtlCheckLockForReadAccess@8
|
|
FsRtlCheckLockForWriteAccess@8
|
|
FsRtlCheckOplock@20
|
|
FsRtlCopyRead@32
|
|
FsRtlCopyWrite@32
|
|
FsRtlCurrentBatchOplock@4
|
|
FsRtlDeleteKeyFromTunnelCache@12
|
|
FsRtlDeleteTunnelCache@4
|
|
FsRtlDeregisterUncProvider@4
|
|
FsRtlDissectDbcs@16
|
|
FsRtlDissectName@16
|
|
FsRtlDoesDbcsContainWildCards@4
|
|
FsRtlDoesNameContainWildCards@4
|
|
FsRtlFastCheckLockForRead@24
|
|
FsRtlFastCheckLockForWrite@24
|
|
FsRtlFastUnlockAll@16
|
|
FsRtlFastUnlockAllByKey@20
|
|
FsRtlFastUnlockSingle@32
|
|
FsRtlFindInTunnelCache@32
|
|
FsRtlGetFileSize@8
|
|
FsRtlGetNextFileLock@8
|
|
FsRtlGetNextLargeMcbEntry@20
|
|
FsRtlGetNextMcbEntry@20
|
|
FsRtlInitializeFileLock@12
|
|
FsRtlInitializeLargeMcb@8
|
|
FsRtlInitializeMcb@8
|
|
FsRtlInitializeOplock@4
|
|
FsRtlInitializeTunnelCache@4
|
|
FsRtlIsDbcsInExpression@8
|
|
FsRtlIsFatDbcsLegal@20
|
|
FsRtlIsHpfsDbcsLegal@20
|
|
FsRtlIsNameInExpression@16
|
|
FsRtlIsNtstatusExpected@4
|
|
FsRtlIsTotalDeviceFailure@4
|
|
FsRtlLegalAnsiCharacterArray DATA
|
|
FsRtlLookupLargeMcbEntry@32
|
|
FsRtlLookupLastLargeMcbEntry@12
|
|
FsRtlLookupLastMcbEntry@12
|
|
FsRtlLookupMcbEntry@20
|
|
FsRtlMdlRead@24
|
|
FsRtlMdlReadComplete@8
|
|
FsRtlMdlReadCompleteDev@12
|
|
FsRtlMdlReadDev@28
|
|
FsRtlMdlWriteComplete@12
|
|
FsRtlMdlWriteCompleteDev@16
|
|
FsRtlNormalizeNtstatus@8
|
|
FsRtlNotifyChangeDirectory@28
|
|
FsRtlNotifyCleanup@12
|
|
FsRtlNotifyFullChangeDirectory@40
|
|
FsRtlNotifyFullReportChange@36
|
|
FsRtlNotifyInitializeSync@4
|
|
FsRtlNotifyReportChange@20
|
|
FsRtlNotifyUninitializeSync@4
|
|
FsRtlNotifyVolumeEvent@8
|
|
FsRtlNumberOfRunsInLargeMcb@4
|
|
FsRtlNumberOfRunsInMcb@4
|
|
FsRtlOplockFsctrl@12
|
|
FsRtlOplockIsFastIoPossible@4
|
|
FsRtlPostPagingFileStackOverflow@12
|
|
FsRtlPostStackOverflow@12
|
|
FsRtlPrepareMdlWrite@24
|
|
FsRtlPrepareMdlWriteDev@28
|
|
FsRtlPrivateLock@48
|
|
FsRtlProcessFileLock@12
|
|
FsRtlRegisterUncProvider@12
|
|
FsRtlRemoveLargeMcbEntry@20
|
|
FsRtlRemoveMcbEntry@12
|
|
FsRtlSplitLargeMcb@20
|
|
FsRtlSyncVolumes@12
|
|
FsRtlTruncateLargeMcb@12
|
|
FsRtlTruncateMcb@8
|
|
FsRtlUninitializeFileLock@4
|
|
FsRtlUninitializeLargeMcb@4
|
|
FsRtlUninitializeMcb@4
|
|
FsRtlUninitializeOplock@4
|
|
HalDispatchTable DATA
|
|
HalPrivateDispatchTable DATA
|
|
@InterlockedCompareExchange@12
|
|
@InterlockedDecrement@4
|
|
@InterlockedExchange@8
|
|
@InterlockedExchangeAdd@8
|
|
@InterlockedIncrement@4
|
|
IoAcquireCancelSpinLock@4
|
|
IoAcquireRemoveLockEx@20
|
|
IoAcquireVpbSpinLock@4
|
|
IoAdapterObjectType DATA
|
|
IoAllocateAdapterChannel@20
|
|
IoAllocateController@16
|
|
IoAllocateErrorLogEntry@8
|
|
IoAllocateIrp@8
|
|
IoAllocateMdl@20
|
|
IoAssignResources@24
|
|
IoAttachDevice@12
|
|
IoAttachDeviceByPointer@8
|
|
IoAttachDeviceToDeviceStack@8
|
|
IoBuildAsynchronousFsdRequest@24
|
|
IoBuildDeviceIoControlRequest@36
|
|
IoBuildPartialMdl@16
|
|
IoBuildSynchronousFsdRequest@28
|
|
IoCallDriver@8
|
|
IoCancelIrp@4
|
|
IoCheckDesiredAccess@8
|
|
IoCheckEaBufferValidity@12
|
|
IoCheckFunctionAccess@24
|
|
IoCheckShareAccess@20
|
|
IoCompleteRequest@8
|
|
IoConnectInterrupt@44
|
|
IoCreateController@4
|
|
IoCreateDevice@28
|
|
IoCreateFile@56
|
|
IoCreateNotificationEvent@8
|
|
IoCreateStreamFileObject@8
|
|
IoCreateSymbolicLink@8
|
|
IoCreateSynchronizationEvent@8
|
|
IoCreateUnprotectedSymbolicLink@8
|
|
IoDeleteController@4
|
|
IoDeleteDevice@4
|
|
IoDeleteSymbolicLink@4
|
|
IoDetachDevice@4
|
|
IoDeviceHandlerObjectSize DATA
|
|
IoDeviceHandlerObjectType DATA
|
|
IoDisconnectInterrupt@4
|
|
IoDeviceObjectType DATA
|
|
IoDriverObjectType DATA
|
|
IoEnqueueIrp@4
|
|
IoFastQueryNetworkAttributes@20
|
|
IoFileObjectType DATA
|
|
IoFreeController@4
|
|
IoFreeIrp@4
|
|
IoFreeMdl@4
|
|
IoGetAttachedDevice@4
|
|
IoGetAttachedDeviceReference@4
|
|
IoGetBaseFileSystemDeviceObject@4
|
|
IoGetConfigurationInformation@0
|
|
IoGetCurrentProcess@0
|
|
IoGetDeviceObjectPointer@16
|
|
IoGetDeviceToVerify@4
|
|
IoGetFileObjectGenericMapping@0
|
|
IoGetInitialStack@0
|
|
IoGetRelatedDeviceObject@4
|
|
IoGetRequestorProcess@4
|
|
IoGetStackLimits@8
|
|
IoGetTopLevelIrp@0
|
|
IoInitializeIrp@12
|
|
IoInvalidateDeviceState@4
|
|
IoInitializeRemoveLockEx@20
|
|
IoInitializeTimer@12
|
|
IoIsOperationSynchronous@4
|
|
IoMakeAssociatedIrp@8
|
|
IoOpenDeviceInstanceKey@20
|
|
IoPageRead@20
|
|
IoQueryDeviceDescription@32
|
|
IoQueryDeviceEnumInfo@8
|
|
IoQueryFileInformation@20
|
|
IoQueryVolumeInformation@20
|
|
IoQueueThreadIrp@4
|
|
IoRaiseHardError@12
|
|
IoRaiseInformationalHardError@12
|
|
IoReadOperationCount DATA
|
|
IoReadPartitionTable@16
|
|
IoReadTransferCount DATA
|
|
|
|
IoFreeWorkItem@4
|
|
IoAllocateWorkItem@4
|
|
IoQueueWorkItem@16
|
|
IoRegisterDeviceInterface@16
|
|
IoSetDeviceInterfaceState@8
|
|
IoGetDeviceProperty@20
|
|
IoOpenDeviceRegistryKey@16
|
|
IoInvalidateDeviceRelations@8
|
|
|
|
IoRegisterDriverReinitialization@12
|
|
IoRegisterFileSystem@4
|
|
IoRegisterFsRegistrationChange@8
|
|
IoRegisterShutdownNotification@4
|
|
IoReleaseCancelSpinLock@4
|
|
IoReleaseRemoveLockAndWaitEx@12
|
|
IoReleaseRemoveLockEx@12
|
|
IoReleaseVpbSpinLock@4
|
|
IoRemoveShareAccess@8
|
|
IoReportHalResourceUsage@16
|
|
IoReportResourceUsage@36
|
|
IoSetDeviceToVerify@8
|
|
IoSetHardErrorOrVerifyDevice@8
|
|
IoSetInformation@16
|
|
IoSetPartitionInformation@16
|
|
IoSetShareAccess@16
|
|
IoSetThreadHardErrorMode@4
|
|
IoSetTopLevelIrp@4
|
|
IoStartNextPacket@8
|
|
IoStartNextPacketByKey@12
|
|
IoStartPacket@16
|
|
IoStartTimer@4
|
|
IoStatisticsLock DATA
|
|
IoStopTimer@4
|
|
IoSynchronousPageWrite@20
|
|
IoThreadToProcess@4
|
|
IoUnregisterFileSystem@4
|
|
IoUnregisterFsRegistrationChange@8
|
|
IoUnregisterShutdownNotification@4
|
|
IoUpdateShareAccess@8
|
|
IoVerifyVolume@8
|
|
IoWriteErrorLogEntry@4
|
|
IoWriteOperationCount DATA
|
|
IoWritePartitionTable@20
|
|
IoWriteTransferCount DATA
|
|
@IofCallDriver@8
|
|
@IofCompleteRequest@8
|
|
KdDebuggerEnabled DATA
|
|
KdDebuggerNotPresent DATA
|
|
KdPollBreakIn@0
|
|
KdSystemDebugControl@4
|
|
Ke386CallBios@8
|
|
;Ke386IoSetAccessProcess
|
|
;Ke386QueryIoAccessMap
|
|
;Ke386SetIoAccessMap
|
|
KeAcquireSpinLockAtDpcLevel@4
|
|
KeAddSystemServiceTable@20
|
|
KeAttachProcess@4
|
|
;KeBoostCurrentThread
|
|
KeBugCheck@4
|
|
KeBugCheckEx@20
|
|
KeCancelTimer@4
|
|
KeClearEvent@4
|
|
KeConnectInterrupt@4
|
|
KeDcacheFlushCount DATA
|
|
KeDelayExecutionThread@12
|
|
KeDeregisterBugCheckCallback@4
|
|
KeDetachProcess@0
|
|
KeDisconnectInterrupt@4
|
|
KeEnterCriticalRegion@0
|
|
KeEnterKernelDebugger@0
|
|
;KeFindConfigurationEntry
|
|
;KeFindConfigurationNextEntry
|
|
;KeFlushEntireTb
|
|
KeGetCurrentThread@0
|
|
KeGetPreviousMode@0
|
|
;KeI386AbiosCall
|
|
;KeI386AllocateGdtSelectors
|
|
;KeI386Call16BitCStyleFunction
|
|
;KeI386Call16BitFunction
|
|
;KeI386FlatToGdtSelector
|
|
;KeI386GetLid
|
|
;KeI386MachineType DATA
|
|
;KeI386ReleaseGdtSelectors
|
|
;KeI386ReleaseLid
|
|
;KeI386SetGdtSelector
|
|
KeIcacheFlushCount DATA
|
|
KeInitializeApc@32
|
|
KeInitializeDeviceQueue@4
|
|
KeInitializeDpc@12
|
|
KeInitializeEvent@12
|
|
KeInitializeInterrupt@44
|
|
KeInitializeMutant@8
|
|
KeInitializeMutex@8
|
|
KeInitializeQueue@8
|
|
KeInitializeSemaphore@12
|
|
KeInitializeSpinLock@4
|
|
KeInitializeTimer@4
|
|
KeInitializeTimerEx@8
|
|
KeInsertByKeyDeviceQueue@12
|
|
KeInsertDeviceQueue@8
|
|
KeInsertHeadQueue@8
|
|
KeInsertQueue@8
|
|
KeInsertQueueApc@16
|
|
KeInsertQueueDpc@12
|
|
;KeIsExecutingDpc
|
|
KeLeaveCriticalRegion@0
|
|
KeLoaderBlock DATA
|
|
KeNumberProcessors DATA
|
|
;KeProfileInterrupt
|
|
;KeProfileInterruptWithSource
|
|
KePulseEvent@12
|
|
KeQuerySystemTime@4
|
|
KeQueryTickCount@4
|
|
KeQueryTimeIncrement@0
|
|
;KeRaiseUserException
|
|
KeRescheduleThread@0
|
|
KeReadStateEvent@4
|
|
KeReadStateMutant@4
|
|
KeReadStateMutex@4
|
|
KeReadStateQueue@4
|
|
KeReadStateSemaphore@4
|
|
KeReadStateTimer@4
|
|
KeRegisterBugCheckCallback@20
|
|
KeReleaseMutant@16
|
|
KeReleaseMutex@8
|
|
KeReleaseSemaphore@16
|
|
KeReleaseSpinLockFromDpcLevel@4
|
|
KeRemoveByKeyDeviceQueue@8
|
|
KeRemoveDeviceQueue@4
|
|
KeRemoveEntryDeviceQueue@8
|
|
KeRemoveQueue@12
|
|
KeRemoveQueueDpc@4
|
|
KeResetEvent@4
|
|
;KeRestoreFloatingPointState
|
|
KeRundownQueue@4
|
|
;KeSaveFloatingPointState
|
|
KeServiceDescriptorTable DATA
|
|
KeSetAffinityThread@8
|
|
KeSetBasePriorityThread@8
|
|
;KeSetDmaIoCoherency
|
|
KeSetEvent@12
|
|
;KeSetEventBoostPriority
|
|
;KeSetIdealProcessorThread
|
|
KeSetImportanceDpc@8
|
|
;KeSetKernelStackSwapEnable
|
|
KeSetPriorityThread@8
|
|
;KeSetProfileIrql
|
|
;@KeSetSwapContextNotifyRoutine
|
|
KeSetTargetProcessorDpc@8
|
|
;@KeSetThreadSelectNotifyRoutine
|
|
;KeSetTimeIncrement
|
|
KeSetTimer@16
|
|
KeSetTimerEx@20
|
|
;@KeSetTimeUpdateNotifyRoutine
|
|
KeSynchronizeExecution@12
|
|
;KeTerminateThread
|
|
KeTickCount DATA
|
|
;KeUpdateRunTime
|
|
;KeUserModeCallback
|
|
KeWaitForMultipleObjects@32
|
|
KeWaitForMutexObject@20
|
|
KeWaitForSingleObject@20
|
|
;@KefAcquireSpinLockAtDpcLevel
|
|
;@KefReleaseSpinLockFromDpcLevel
|
|
;Kei386EoiHelper
|
|
;@KiAcquireSpinLock@4
|
|
;KiBugCheckData DATA
|
|
;KiCoprocessorError@0
|
|
KiDeliverApc@12
|
|
KiDispatchInterrupt@0
|
|
KiInterruptDispatch2@8
|
|
;KiIpiServiceRoutine@8
|
|
;@KiReleaseSpinLock@4
|
|
;KiUnexpectedInterrupt
|
|
;Kii386SpinOnSpinLock
|
|
KiRawTicks DATA
|
|
LdrAccessResource@16
|
|
;LdrEnumResources@20
|
|
;LdrFindResourceDirectory_U@16
|
|
LdrFindResource_U@16
|
|
;LpcRequestPort@8
|
|
LsaCallAuthenticationPackage@28
|
|
LsaDeregisterLogonProcess@8
|
|
LsaFreeReturnBuffer@4
|
|
LsaLogonUser@56
|
|
LsaLookupAuthenticationPackage@12
|
|
LsaRegisterLogonProcess@12
|
|
MmAdjustWorkingSetSize@12
|
|
MmAllocateContiguousAlignedMemory@16
|
|
MmAllocateContiguousMemory@12
|
|
MmAllocateNonCachedMemory@4
|
|
MmBuildMdlForNonPagedPool@4
|
|
MmCanFileBeTruncated@8
|
|
MmCopyFromCaller@12
|
|
MmCopyToCaller@12
|
|
MmCreateMdl@12
|
|
MmCreateSection@32
|
|
MmDbgTranslatePhysicalAddress@8
|
|
MmDisableModifiedWriteOfSection@4
|
|
MmFlushImageSection@8
|
|
MmForceSectionClosed@8
|
|
MmFreeContiguousMemory@4
|
|
MmFreeNonCachedMemory@8
|
|
MmGetPhysicalAddress@4
|
|
MmGrowKernelStack@4
|
|
MmHighestUserAddress DATA
|
|
MmIsAddressValid@4
|
|
MmIsNonPagedSystemAddressValid@4
|
|
MmIsRecursiveIoFault@0
|
|
MmIsThisAnNtAsSystem@0
|
|
MmLockPagableDataSection@4
|
|
MmLockPagableImageSection@4=MmLockPagableDataSection@4
|
|
MmLockPagableSectionByHandle@4
|
|
MmMapIoSpace@16
|
|
MmMapLockedPages@8
|
|
MmMapMemoryDumpMdl@4
|
|
MmMapVideoDisplay@16
|
|
MmMapViewInSystemSpace@12
|
|
MmMapViewOfSection@40
|
|
MmPageEntireDriver@4
|
|
MmProbeAndLockPages@12
|
|
MmQuerySystemSize@0
|
|
MmResetDriverPaging@4
|
|
MmSectionObjectType DATA
|
|
MmSecureVirtualMemory@12
|
|
MmSetAddressRangeModified@8
|
|
MmSetBankedSection@24
|
|
MmSizeOfMdl@8
|
|
MmUnlockPagableImageSection@4
|
|
MmUnlockPages@4
|
|
MmUnmapIoSpace@8
|
|
MmUnmapLockedPages@8
|
|
MmUnmapVideoDisplay@8
|
|
MmUnmapViewInSystemSpace@4
|
|
MmUnmapViewOfSection@8
|
|
MmUnsecureVirtualMemory@4
|
|
MmUserProbeAddress DATA
|
|
NlsAnsiCodePage DATA
|
|
NlsLeadByteInfo DATA
|
|
NlsMbCodePageTag DATA
|
|
NlsMbOemCodePageTag DATA
|
|
NlsOemLeadByteInfo DATA
|
|
NtAddAtom@8
|
|
NtAdjustPrivilegesToken@24
|
|
NtAlertThread@4
|
|
NtAllocateLocallyUniqueId@4
|
|
NtAllocateUuids@12
|
|
NtAllocateVirtualMemory@24
|
|
NtBuildNumber DATA
|
|
NtClose@4
|
|
NtConnectPort@32
|
|
NtCreateEvent@20
|
|
NtCreateTimer@16
|
|
NtOpenEvent@12
|
|
NtCreateFile@44
|
|
NtCreateSection@28
|
|
NtDeleteAtom@4
|
|
NtDeleteFile@4
|
|
NtDeviceIoControlFile@40
|
|
NtDuplicateObject@28
|
|
NtDuplicateToken@24
|
|
NtFindAtom@8
|
|
NtFreeVirtualMemory@16
|
|
NtFsControlFile@40
|
|
NtGlobalFlag DATA
|
|
NtLockFile@40
|
|
NtMapViewOfSection@40
|
|
NtNotifyChangeDirectoryFile@36
|
|
NtOpenFile@24
|
|
NtOpenProcess@16
|
|
NtOpenProcessToken@12
|
|
NtQueryDirectoryFile@44
|
|
NtQueryEaFile@36
|
|
NtQueryInformationAtom@20
|
|
NtQueryInformationFile@20
|
|
NtQueryInformationProcess@20
|
|
NtQueryInformationToken@20
|
|
;NtQueryOleDirectoryFile@ <--- ?
|
|
NtQuerySecurityObject@20
|
|
NtQuerySystemTime@4
|
|
NtQueryVolumeInformationFile@20
|
|
NtReadFile@36
|
|
NtRequestPort@20
|
|
NtRequestWaitReplyPort@12
|
|
NtSetEvent@8
|
|
NtSetInformationFile@20
|
|
NtSetInformationProcess@16
|
|
NtSetInformationThread@16
|
|
NtSetSecurityObject@12
|
|
NtSetSystemTime@8
|
|
NtUnlockFile@20
|
|
NtVdmControl@8
|
|
NtW32Call@20
|
|
NtWaitForSingleObject@12
|
|
NtWriteFile@36
|
|
ObAssignSecurity@16
|
|
;ObCheckCreateObjectAccess@28
|
|
;ObCheckObjectAccess@20
|
|
ObCreateObject@36
|
|
ObRosCreateObject@20
|
|
;ObFindHandleForObject@20
|
|
ObGetObjectPointerCount@4
|
|
ObGetObjectSecurity@12
|
|
;ObInsertObject@24
|
|
ObMakeTemporaryObject@4
|
|
ObOpenObjectByName@28
|
|
ObOpenObjectByPointer@28
|
|
ObQueryNameString@16
|
|
;ObQueryObjectAuditingByHandle@8
|
|
@ObfDereferenceObject@4
|
|
@ObfReferenceObject@4
|
|
ObReferenceObjectByHandle@24
|
|
ObReferenceObjectByName@32
|
|
ObReferenceObjectByPointer@16
|
|
ObReleaseObjectSecurity@8
|
|
;ObSetSecurityDescriptorInfo@24
|
|
;PfxFindPrefix
|
|
;PfxInitialize
|
|
;PfxInsertPrefix
|
|
;PfxRemovePrefix
|
|
PoCallDriver@8
|
|
PoRegisterDeviceForIdleDetection@16
|
|
PoRegisterSystemState@8
|
|
PoRequestPowerIrp@24
|
|
PoSetDeviceBusy@4
|
|
PoSetPowerState@12
|
|
PoSetSystemState@4
|
|
PoStartNextPowerIrp@4
|
|
PoUnregisterSystemState@4
|
|
;ProbeForWrite@12
|
|
PsAssignImpersonationToken@8
|
|
;PsChargePoolQuota@12
|
|
PsCreateSystemProcess@12
|
|
PsCreateSystemThread@28
|
|
PsCreateWin32Thread@4
|
|
PsCreateWin32Process@4
|
|
PsGetWin32Thread@0
|
|
PsGetWin32Process@0
|
|
PsEstablishWin32Callouts@24
|
|
PsGetCurrentProcessId@0
|
|
PsGetCurrentThreadId@0
|
|
PsGetProcessExitTime@0
|
|
PsGetVersion@16
|
|
PsImpersonateClient@20
|
|
PsInitialSystemProcess DATA
|
|
PsIsThreadTerminating@4
|
|
PsLookupProcessByProcessId@8
|
|
PsLookupProcessThreadByCid@12
|
|
PsLookupThreadByThreadId@8
|
|
PsProcessType DATA
|
|
PsReferenceImpersonationToken@16
|
|
PsReferencePrimaryToken@4
|
|
;PsReturnPoolQuota@12
|
|
PsRevertToSelf@0
|
|
PsSetCreateProcessNotifyRoutine@8
|
|
PsSetCreateThreadNotifyRoutine@4
|
|
;PsSetLegoNotifyRoutine@4
|
|
;PsSetProcessPriorityByClass@8
|
|
PsTerminateSystemThread@4
|
|
PsThreadType DATA
|
|
READ_REGISTER_UCHAR@4
|
|
READ_REGISTER_ULONG@4
|
|
READ_REGISTER_USHORT@4
|
|
READ_REGISTER_BUFFER_UCHAR@12
|
|
READ_REGISTER_BUFFER_ULONG@12
|
|
READ_REGISTER_BUFFER_USHORT@12
|
|
RtlAbsoluteToSelfRelativeSD@12
|
|
RtlAddAccessAllowedAce@16
|
|
RtlAddAce@20
|
|
RtlAddAtomToAtomTable@12
|
|
;RtlAllocateAndInitializeSid
|
|
;RtlAllocateHeap
|
|
RtlAnsiCharToUnicodeChar@4
|
|
RtlAnsiStringToUnicodeSize@4
|
|
RtlAnsiStringToUnicodeString@12
|
|
RtlAppendAsciizToString@8
|
|
RtlAppendStringToString@8
|
|
RtlAppendUnicodeStringToString@8
|
|
RtlAppendUnicodeToString@8
|
|
RtlAreAllAccessesGranted@8
|
|
RtlAreAnyAccessesGranted@8
|
|
RtlAreBitsClear@12
|
|
RtlAreBitsSet@12
|
|
RtlAssert@16
|
|
;RtlCaptureStackBackTrace
|
|
RtlCharToInteger@12
|
|
RtlCheckRegistryKey@8
|
|
RtlClearAllBits@4
|
|
RtlClearBits@12
|
|
RtlCompareMemory@12
|
|
RtlCompareMemoryUlong@12
|
|
RtlCompareString@12
|
|
RtlCompareUnicodeString@12
|
|
RtlCompressBuffer@32
|
|
RtlCompressChunks@28
|
|
RtlConvertLongToLargeInteger@4
|
|
RtlConvertSidToUnicodeString@12
|
|
RtlConvertUlongToLargeInteger@4
|
|
RtlCopyLuid@8
|
|
RtlCopySid@12
|
|
RtlCopyString@8
|
|
RtlCopyUnicodeString@8
|
|
RtlCreateAcl@12
|
|
RtlCreateAtomTable@8
|
|
;RtlCreateHeap
|
|
RtlCreateRegistryKey@8
|
|
RtlCreateSecurityDescriptor@8
|
|
RtlCreateUnicodeString@8
|
|
RtlCustomCPToUnicodeN@24
|
|
RtlDecompressBuffer@24
|
|
RtlDecompressChunks@28
|
|
RtlDecompressFragment@32
|
|
;RtlDelete
|
|
RtlDeleteAtomFromAtomTable@8
|
|
;RtlDeleteElementGenericTable
|
|
;RtlDeleteNoSplay
|
|
RtlDeleteRegistryValue@12
|
|
RtlDescribeChunk@20
|
|
RtlDestroyAtomTable@4
|
|
;RtlDestroyHeap
|
|
RtlDowncaseUnicodeString@12
|
|
RtlEmptyAtomTable@8
|
|
RtlEnlargedIntegerMultiply@8
|
|
RtlEnlargedUnsignedDivide@16
|
|
RtlEnlargedUnsignedMultiply@8
|
|
;RtlEnumerateGenericTable
|
|
;RtlEnumerateGenericTableWithoutSplaying
|
|
RtlEqualLuid@8
|
|
RtlEqualSid@8
|
|
RtlEqualString@12
|
|
RtlEqualUnicodeString@12
|
|
RtlExtendedIntegerMultiply@12
|
|
RtlExtendedLargeIntegerDivide@16
|
|
RtlExtendedMagicDivide@20
|
|
RtlFillMemory@12
|
|
RtlFillMemoryUlong@12
|
|
RtlFindClearBits@12
|
|
RtlFindClearBitsAndSet@12
|
|
RtlFindFirstRunClear@8
|
|
RtlFindFirstRunSet@8
|
|
RtlFindLongestRunClear@8
|
|
RtlFindLongestRunSet@8
|
|
RtlFindMessage@20
|
|
RtlFindSetBits@12
|
|
RtlFindSetBitsAndClear@12
|
|
;RtlFindUnicodePrefix
|
|
RtlFormatCurrentUserKeyPath@4
|
|
RtlFreeAnsiString@4
|
|
;RtlFreeHeap
|
|
RtlFreeOemString@4
|
|
RtlFreeUnicodeString@4
|
|
RtlGenerate8dot3Name@16
|
|
;RtlGetCallersAddress
|
|
RtlGetCompressionWorkSpaceSize@12
|
|
RtlGetDaclSecurityDescriptor@16
|
|
RtlGetDefaultCodePage@8
|
|
;RtlGetElementGenericTable
|
|
RtlGetGroupSecurityDescriptor@12
|
|
RtlGetOwnerSecurityDescriptor@12
|
|
RtlImageNtHeader@4
|
|
RtlInitAnsiString@8
|
|
RtlInitCodePageTable@8
|
|
RtlInitString@8
|
|
RtlInitUnicodeString@8
|
|
RtlInitializeBitMap@12
|
|
;RtlInitializeGenericTable
|
|
RtlInitializeSid@12
|
|
;RtlInitializeUnicodePrefix
|
|
;RtlInsertElementGenericTable
|
|
;RtlInsertUnicodePrefix
|
|
RtlIntegerToChar@16
|
|
RtlIntegerToUnicodeString@12
|
|
RtlIsNameLegalDOS8Dot3@12
|
|
RtlLargeIntegerAdd@16
|
|
RtlLargeIntegerArithmeticShift@12
|
|
RtlLargeIntegerDivide@20
|
|
RtlLargeIntegerNegate@8
|
|
RtlLargeIntegerShiftLeft@12
|
|
RtlLargeIntegerShiftRight@12
|
|
RtlLargeIntegerSubtract@16
|
|
RtlLengthRequiredSid@4
|
|
RtlLengthSecurityDescriptor@4
|
|
RtlLengthSid@4
|
|
RtlLookupAtomInAtomTable@12
|
|
;RtlLookupElementGenericTable
|
|
RtlMapGenericMask@8
|
|
RtlMoveMemory@12
|
|
RtlMultiByteToUnicodeN@20
|
|
RtlMultiByteToUnicodeSize@12
|
|
;RtlNextUnicodePrefix
|
|
RtlNtStatusToDosError@4
|
|
RtlNtStatusToDosErrorNoTeb@4
|
|
;RtlNumberGenericTableElements
|
|
RtlNumberOfClearBits@4
|
|
RtlNumberOfSetBits@4
|
|
RtlOemStringToCountedUnicodeString@12
|
|
RtlOemStringToUnicodeSize@4
|
|
RtlOemStringToUnicodeString@12
|
|
RtlOemToUnicodeN@20
|
|
RtlPinAtomInAtomTable@8
|
|
RtlPrefixString@12
|
|
RtlPrefixUnicodeString@12
|
|
RtlQueryAtomInAtomTable@24
|
|
RtlQueryRegistryValues@20
|
|
RtlQueryTimeZoneInformation@4
|
|
RtlRaiseException@4
|
|
RtlRandom@4
|
|
;RtlRemoveUnicodePrefix
|
|
RtlReserveChunk@20
|
|
RtlSecondsSince1970ToTime@8
|
|
RtlSecondsSince1980ToTime@8
|
|
RtlSetAllBits@4
|
|
RtlSetBits@12
|
|
RtlSetDaclSecurityDescriptor@16
|
|
RtlSetGroupSecurityDescriptor@12
|
|
RtlSetOwnerSecurityDescriptor@12
|
|
RtlSetSaclSecurityDescriptor@16
|
|
RtlSetTimeZoneInformation@4
|
|
;RtlSplay
|
|
RtlSubAuthorityCountSid@4
|
|
RtlSubAuthoritySid@8
|
|
RtlTimeFieldsToTime@8
|
|
RtlTimeToSecondsSince1970@8
|
|
RtlTimeToSecondsSince1980@8
|
|
RtlTimeToTimeFields@8
|
|
RtlUnicodeStringToAnsiSize@4
|
|
RtlUnicodeStringToAnsiString@12
|
|
RtlUnicodeStringToCountedOemString@12
|
|
RtlUnicodeStringToInteger@12
|
|
RtlUnicodeStringToOemSize@4
|
|
RtlUnicodeStringToOemString@12
|
|
RtlUnicodeToCustomCPN@24
|
|
RtlUnicodeToMultiByteN@20
|
|
RtlUnicodeToMultiByteSize@12
|
|
RtlUnicodeToOemN@20
|
|
RtlUnwind@16
|
|
RtlUpcaseUnicodeChar@4
|
|
RtlUpcaseUnicodeString@12
|
|
RtlUpcaseUnicodeStringToAnsiString@12
|
|
RtlUpcaseUnicodeStringToCountedOemString@12
|
|
RtlUpcaseUnicodeStringToOemString@12
|
|
RtlUpcaseUnicodeToCustomCPN@24
|
|
RtlUpcaseUnicodeToMultiByteN@20
|
|
RtlUpcaseUnicodeToOemN@20
|
|
RtlUpperChar@4
|
|
RtlUpperString@8
|
|
RtlValidSecurityDescriptor@4
|
|
RtlValidSid@4
|
|
RtlWriteRegistryValue@24
|
|
;RtlZeroHeap
|
|
RtlZeroMemory@8
|
|
RtlxAnsiStringToUnicodeSize@4
|
|
RtlxOemStringToUnicodeSize@4
|
|
RtlxUnicodeStringToAnsiSize@4
|
|
RtlxUnicodeStringToOemSize@4
|
|
SeAccessCheck@40
|
|
;SeAppendPrivileges@8
|
|
SeAssignSecurity@28
|
|
;SeAuditingFileEvents@8
|
|
;SeAuditingFileOrGlobalEvents@18
|
|
;SeCaptureSecurityDescriptor@20
|
|
SeCaptureSubjectContext@4
|
|
;SeCloseObjectAuditAlarm@12
|
|
;SeCreateAccessState@16
|
|
SeCreateClientSecurity@16
|
|
SeDeassignSecurity@4
|
|
;SeDeleteAccessState@4
|
|
;SeDeleteObjectAuditAlarm@8
|
|
SeExports DATA
|
|
;SeFreePrivileges@4
|
|
SeImpersonateClient@8
|
|
;SeLockSubjectContext@4
|
|
;SeMarkLogonSessionForTerminationNotification@4
|
|
;SeOpenObjectAuditAlarm@36
|
|
;SeOpenObjectForDeleteAuditAlarm@36
|
|
SePrivilegeCheck@12
|
|
;SePrivilegeObjectAuditAlarm@24
|
|
SePublicDefaultDacl DATA
|
|
;SeQueryAuthenticationIdToken@8
|
|
;SeQuerySecurityDescriptorInfo@16
|
|
;SeRegisterLogonSessionTerminatedRoutine@4
|
|
;SeReleaseSecurityDescriptor@12
|
|
SeReleaseSubjectContext@4
|
|
;SeSetAccessStateGenericMapping@8
|
|
;SeSetSecurityDescriptorInfo@24
|
|
SeSinglePrivilegeCheck@12
|
|
SeSystemDefaultDacl DATA
|
|
SeTokenImpersonationLevel@4
|
|
SeTokenType@4
|
|
;SeUnlockSubjectContext@4
|
|
;SeUnregisterLogonSessionTerminatedRoutine@4
|
|
;SeValidSecurityDescriptor@8
|
|
WRITE_REGISTER_UCHAR@8
|
|
WRITE_REGISTER_ULONG@8
|
|
WRITE_REGISTER_USHORT@8
|
|
WRITE_REGISTER_BUFFER_UCHAR@12
|
|
WRITE_REGISTER_BUFFER_ULONG@12
|
|
WRITE_REGISTER_BUFFER_USHORT@12
|
|
ZwAccessCheckAndAuditAlarm@44
|
|
ZwAlertThread@4
|
|
ZwAllocateVirtualMemory@24
|
|
ZwClearEvent@4
|
|
ZwClose@4
|
|
ZwCloseObjectAuditAlarm@12
|
|
ZwConnectPort@32
|
|
ZwCreateDirectoryObject@12
|
|
ZwCreateEvent@20
|
|
ZwCreateFile@44
|
|
ZwCreateKey@28
|
|
ZwCreateSection@28
|
|
ZwCreateSymbolicLinkObject@16
|
|
ZwDeleteFile@4
|
|
ZwDeleteKey@4
|
|
ZwDeleteValueKey@8
|
|
ZwDeviceIoControlFile@40
|
|
ZwDisplayString@4
|
|
ZwDuplicateObject@28
|
|
ZwDuplicateToken@24
|
|
ZwEnumerateKey@24
|
|
ZwEnumerateValueKey@24
|
|
ZwFlushInstructionCache@12
|
|
ZwFlushKey@4
|
|
ZwFreeVirtualMemory@16
|
|
ZwFsControlFile@40
|
|
ZwLoadDriver@4
|
|
ZwLoadKey@8
|
|
ZwMakeTemporaryObject@4
|
|
ZwMapViewOfSection@40
|
|
ZwNotifyChangeKey@40
|
|
ZwOpenDirectoryObject@12
|
|
ZwOpenEvent@12
|
|
ZwOpenFile@24
|
|
ZwOpenKey@12
|
|
ZwOpenProcess@16
|
|
ZwOpenProcessToken@12
|
|
ZwOpenSection@12
|
|
ZwOpenSymbolicLinkObject@12
|
|
ZwOpenThread@16
|
|
ZwOpenThreadToken@16
|
|
ZwPulseEvent@8
|
|
ZwQueryDefaultLocale@8
|
|
ZwQueryDirectoryFile@44
|
|
ZwQueryInformationAtom@20
|
|
ZwQueryInformationFile@20
|
|
ZwQueryInformationProcess@20
|
|
ZwQueryInformationToken@20
|
|
ZwQueryKey@20
|
|
ZwQueryObject@20
|
|
ZwQuerySection@20
|
|
ZwQuerySecurityObject@20
|
|
ZwQuerySymbolicLinkObject@12
|
|
ZwQuerySystemInformation@16
|
|
ZwQuerySystemTime@4
|
|
ZwQueryValueKey@24
|
|
ZwQueryVolumeInformationFile@20
|
|
ZwReadFile@36
|
|
ZwReplaceKey@12
|
|
ZwRequestWaitReplyPort@12
|
|
ZwResetEvent@8
|
|
ZwSaveKey@8
|
|
ZwSetDefaultLocale@8
|
|
ZwSetEvent@8
|
|
ZwSetInformationFile@20
|
|
ZwSetInformationObject@16
|
|
ZwSetInformationProcess@16
|
|
ZwSetInformationThread@16
|
|
ZwSetSystemInformation@12
|
|
ZwSetSystemTime@8
|
|
ZwSetValueKey@24
|
|
ZwTerminateProcess@8
|
|
ZwUnloadDriver@4
|
|
ZwUnloadKey@4
|
|
ZwUnmapViewOfSection@8
|
|
ZwWaitForMultipleObjects@20
|
|
ZwWaitForSingleObject@12
|
|
ZwWriteFile@36
|
|
ZwYieldExecution@0
|
|
_abnormal_termination
|
|
_alldiv@4
|
|
_allmul@4
|
|
_allrem@4
|
|
_allshl@4
|
|
_allshr@4
|
|
_aulldiv@4
|
|
_aullrem@4
|
|
_aullshr@4
|
|
_except_handler2
|
|
_except_handler3
|
|
_global_unwind2
|
|
_itoa
|
|
_local_unwind2
|
|
_purecall
|
|
_snprintf
|
|
_snwprintf
|
|
_stricmp
|
|
_strlwr
|
|
_strnicmp
|
|
_strnset
|
|
_strrev
|
|
_strset
|
|
_strupr
|
|
_vsnprintf
|
|
_wcsicmp
|
|
_wcslwr
|
|
_wcsnicmp
|
|
_wcsnset
|
|
_wcsrev
|
|
_wcsupr
|
|
atoi
|
|
atol
|
|
isdigit
|
|
islower
|
|
isprint
|
|
isspace
|
|
isupper
|
|
isxdigit
|
|
mbstowcs
|
|
mbtowc
|
|
memchr
|
|
memcpy
|
|
memmove
|
|
memset
|
|
qsort
|
|
rand
|
|
sprintf
|
|
srand
|
|
strcat
|
|
strchr
|
|
strcmp
|
|
strcpy
|
|
strlen
|
|
strncat
|
|
strncmp
|
|
strncpy
|
|
strrchr
|
|
strspn
|
|
strstr
|
|
swprintf
|
|
tolower
|
|
toupper
|
|
towlower
|
|
towupper
|
|
vsprintf
|
|
wcscat
|
|
wcschr
|
|
wcscmp
|
|
wcscpy
|
|
wcscspn
|
|
wcslen
|
|
wcsncat
|
|
wcsncmp
|
|
wcsncpy
|
|
wcsrchr
|
|
wcsspn
|
|
wcsstr
|
|
wcstombs
|
|
wctomb
|