| LIBRARY ntoskrnl.exe |
| EXPORTS |
| ;CcCanIWrite |
| ;CcCopyRead |
| ;CcCopyWrite |
| ;CcDeferWrite |
| ;CcFastCopyRead |
| ;CcFastCopyWrite |
| ;CcFastMdlReadWait |
| ;CcFastReadNotPossible |
| ;CcFastReadWait |
| ;CcFlushCache |
| ;CcGetDirtyPages |
| ;CcGetFileObjectFromBcb |
| ;CcGetFileObjectFromSectionPtrs |
| ;CcGetFlushedValidData |
| ;CcGetLsnForFileObject |
| ;CcInitializeCacheMap |
| ;CcIsThereDirtyData |
| ;CcMapData |
| ;CcMdlRead |
| ;CcMdlReadComplete |
| ;CcMdlWriteAbort |
| ;CcMdlWriteComplete |
| ;CcPinMappedData |
| ;CcPinRead |
| ;CcPrepareMdlWrite |
| ;CcPreparePinWrite |
| ;CcPurgeCacheSection |
| ;CcRemapBcb |
| ;CcRepinBcb |
| ;CcScheduleReadAhead |
| ;CcSetAdditionalCacheAttributes |
| ;CcSetBcbOwnerPointer |
| ;CcSetDirtyPageThreshold |
| ;CcSetDirtyPinnedData |
| ;CcSetFileSizes |
| ;CcSetLogHandleForFile |
| ;CcSetReadAheadGranularity |
| ;CcUninitializeCacheMap |
| ;CcUnpinData |
| ;CcUnpinDataForThread |
| ;CcUnpinRepinnedBcb |
| ;CcWaitForCurrentLazyWriterActivity |
| ;CcZeroData |
| CmRegisterCallback@12 |
| CmUnRegisterCallback@4 |
| DbgBreakPoint@0 |
| DbgBreakPointWithStatus@4 |
| ;DbgLoadImageSymbols |
| DbgPrint |
| DbgPrintEx |
| DbgPrintReturnControlC |
| ;DbgPrompt |
| DbgQueryDebugFilterState@8 |
| DbgSetDebugFilterState@12 |
| @ExAcquireFastMutexUnsafe@4 |
| ExAcquireResourceExclusiveLite@8 |
| ExAcquireResourceSharedLite@8 |
| ;ExAcquireRundownProtection |
| ExAcquireSharedStarveExclusive@8 |
| ExAcquireSharedWaitForExclusive@8 |
| ExAllocateFromPagedLookasideList@4 |
| ExAllocatePool@8 |
| ExAllocatePoolWithQuota@8 |
| ExAllocatePoolWithQuotaTag@12 |
| ExAllocatePoolWithTag@12 |
| ExAllocatePoolWithTagPriority@16 |
| ExConvertExclusiveToSharedLite@4 |
| ExCreateCallback@16 |
| ExDeleteNPagedLookasideList@4 |
| ExDeletePagedLookasideList@4 |
| ExDeleteResourceLite@4 |
| ExDesktopObjectType DATA |
| ;ExDisableResourceBoostLite |
| ;ExEnumHandleTable |
| ExEventObjectType DATA |
| ExExtendZone@12 |
| @Exfi386InterlockedDecrementLong@4 |
| @Exfi386InterlockedExchangeUlong@8 |
| @Exfi386InterlockedIncrementLong@4 |
| @ExfInterlockedAddUlong@12 |
| @ExfInterlockedInsertHeadList@12 |
| @ExfInterlockedInsertTailList@12 |
| @ExfInterlockedPopEntryList@8 |
| @ExfInterlockedPushEntryList@12 |
| @ExfInterlockedRemoveHeadList@8 |
| ExFreePool@4 |
| ExFreePoolWithTag@8 |
| ExFreeToPagedLookasideList@8 |
| ;ExGetCurrentProcessorCounts |
| ;ExGetCurrentProcessorCpuUsage |
| ExGetExclusiveWaiterCount@4 |
| ExGetPreviousMode@0 |
| ExGetSharedWaiterCount@4 |
| Exi386InterlockedDecrementLong@4 |
| Exi386InterlockedExchangeUlong@8 |
| Exi386InterlockedIncrementLong@4 |
| ExInitializeNPagedLookasideList@28 |
| ExInitializePagedLookasideList@28 |
| ExInitializeResourceLite@4 |
| ;ExInitializeRundownProtection |
| ExInitializeZone@16 |
| ExInterlockedAddLargeInteger@12 |
| @ExInterlockedAddLargeStatistic@8 |
| ExInterlockedAddUlong@12 |
| @ExInterlockedCompareExchange64@16 |
| ExInterlockedDecrementLong@8 |
| ExInterlockedExchangeUlong@12 |
| ExInterlockedExtendZone@16 |
| @ExInterlockedFlushSList@4 |
| @ExInterlockedIncrementLong@8 |
| ExInterlockedInsertHeadList@12 |
| ExInterlockedInsertTailList@12 |
| ExInterlockedPopEntryList@8 |
| @ExInterlockedPopEntrySList@8 |
| ExInterlockedPushEntryList@12 |
| @ExInterlockedPushEntrySList@12 |
| ExInterlockedRemoveHeadList@8 |
| ExIsProcessorFeaturePresent@4 |
| ExIsResourceAcquiredExclusiveLite@4 |
| ExIsResourceAcquiredSharedLite@4 |
| ExLocalTimeToSystemTime@8 |
| ExNotifyCallback@12 |
| ;ExQueryPoolBlockSize |
| ExQueueWorkItem@8 |
| ExRaiseAccessViolation@0 |
| ExRaiseDatatypeMisalignment@0 |
| ;ExRaiseException |
| ;ExRaiseHardError |
| ExRaiseStatus@4 |
| ;ExReInitializeRundownProtection |
| ExRegisterCallback@12 |
| ExReinitializeResourceLite@4 |
| @ExReleaseFastMutexUnsafe@4 |
| ExReleaseResourceForThreadLite@8 |
| @ExReleaseResourceLite@4 |
| ;ExReleaseRundownProtection |
| ;ExRundownCompleted |
| ExSemaphoreObjectType DATA |
| ExSetResourceOwnerPointer@8 |
| ExSetTimerResolution@8 |
| ;ExSystemExceptionFilter |
| ExSystemTimeToLocalTime@8 |
| ExUnregisterCallback@4 |
| ExUuidCreate@4 |
| ExVerifySuite@4 |
| ;ExWaitForRundownProtectionRelease |
| ExWindowStationObjectType DATA |
| ;FsRtlAcquireFileExclusive |
| ;FsRtlAddLargeMcbEntry |
| ;FsRtlAddMcbEntry |
| ;FsRtlAddToTunnelCache |
| ;FsRtlAllocateFileLock |
| ;FsRtlAllocatePool |
| ;FsRtlAllocatePoolWithQuota |
| ;FsRtlAllocatePoolWithQuotaTag |
| ;FsRtlAllocatePoolWithTag |
| ;FsRtlAllocateResource |
| ;FsRtlAreNamesEqual |
| ;FsRtlBalanceReads |
| ;FsRtlCheckLockForReadAccess |
| ;FsRtlCheckLockForWriteAccess |
| ;FsRtlCheckOplock |
| ;FsRtlCopyRead |
| ;FsRtlCopyWrite |
| ;FsRtlCurrentBatchOplock |
| ;FsRtlDeleteKeyFromTunnelCache |
| ;FsRtlDeleteTunnelCache |
| ;FsRtlDeregisterUncProvider |
| ;FsRtlDissectDbcs |
| ;FsRtlDissectName |
| ;FsRtlDoesDbcsContainWildCards |
| ;FsRtlDoesNameContainWildCards |
| ;FsRtlFastCheckLockForRead |
| ;FsRtlFastCheckLockForWrite |
| ;FsRtlFastUnlockAll |
| ;FsRtlFastUnlockAllByKey |
| ;FsRtlFastUnlockSingle |
| ;FsRtlFindInTunnelCache |
| ;FsRtlFreeFileLock |
| ;FsRtlGetFileSize |
| ;FsRtlGetNextFileLock |
| ;FsRtlGetNextLargeMcbEntry |
| ;FsRtlGetNextMcbEntry |
| ;FsRtlIncrementCcFastReadNoWait |
| ;FsRtlIncrementCcFastReadNotPossible |
| ;FsRtlIncrementCcFastReadResourceMiss |
| ;FsRtlIncrementCcFastReadWait |
| ;FsRtlInitializeFileLock |
| ;FsRtlInitializeLargeMcb |
| ;FsRtlInitializeMcb |
| ;FsRtlInitializeOplock |
| ;FsRtlInitializeTunnelCache |
| ;FsRtlInsertPerFileObjectContext |
| ;FsRtlInsertPerStreamContext |
| ;FsRtlIsDbcsInExpression |
| ;FsRtlIsFatDbcsLegal |
| ;FsRtlIsHpfsDbcsLegal |
| ;FsRtlIsNameInExpression |
| ;FsRtlIsNtstatusExpected |
| ;FsRtlIsPagingFile |
| FsRtlIsTotalDeviceFailure@4 |
| ;FsRtlLegalAnsiCharacterArray |
| ;FsRtlLookupLargeMcbEntry |
| ;FsRtlLookupLastLargeMcbEntry |
| ;FsRtlLookupLastLargeMcbEntryAndIndex |
| ;FsRtlLookupLastMcbEntry |
| ;FsRtlLookupMcbEntry |
| ;FsRtlLookupPerFileObjectContext |
| ;FsRtlLookupPerStreamContextInternal |
| ;FsRtlMdlRead |
| ;FsRtlMdlReadComplete |
| ;FsRtlMdlReadCompleteDev |
| ;FsRtlMdlReadDev |
| ;FsRtlMdlWriteComplete |
| ;FsRtlMdlWriteCompleteDev |
| ;FsRtlNormalizeNtstatus |
| ;FsRtlNotifyChangeDirectory |
| ;FsRtlNotifyCleanup |
| ;FsRtlNotifyFilterChangeDirectory |
| ;FsRtlNotifyFilterReportChange |
| ;FsRtlNotifyFullChangeDirectory |
| ;FsRtlNotifyFullReportChange |
| ;FsRtlNotifyInitializeSync |
| ;FsRtlNotifyReportChange |
| ;FsRtlNotifyUninitializeSync |
| ;FsRtlNotifyVolumeEvent |
| ;FsRtlNumberOfRunsInLargeMcb |
| ;FsRtlNumberOfRunsInMcb |
| ;FsRtlOplockFsctrl |
| ;FsRtlOplockIsFastIoPossible |
| ;FsRtlPostPagingFileStackOverflow |
| ;FsRtlPostStackOverflow |
| ;FsRtlPrepareMdlWrite |
| ;FsRtlPrepareMdlWriteDev |
| ;FsRtlPrivateLock |
| ;FsRtlProcessFileLock |
| ;FsRtlRegisterFileSystemFilterCallbacks |
| ;FsRtlRegisterUncProvider |
| ;FsRtlReleaseFile |
| ;FsRtlRemoveLargeMcbEntry |
| ;FsRtlRemoveMcbEntry |
| ;FsRtlRemovePerFileObjectContext |
| ;FsRtlRemovePerStreamContext |
| ;FsRtlResetLargeMcb |
| ;FsRtlSplitLargeMcb |
| ;FsRtlSyncVolumes |
| ;FsRtlTeardownPerStreamContexts |
| ;FsRtlTruncateLargeMcb |
| ;FsRtlTruncateMcb |
| ;FsRtlUninitializeFileLock |
| ;FsRtlUninitializeLargeMcb |
| ;FsRtlUninitializeMcb |
| ;FsRtlUninitializeOplock |
| ;HalDispatchTable DATA |
| @HalExamineMBR@16 |
| ;HalPrivateDispatchTable DATA |
| ;HeadlessDispatch |
| ;InbvAcquireDisplayOwnership |
| ;InbvCheckDisplayOwnership |
| ;InbvDisplayString |
| ;InbvEnableBootDriver |
| ;InbvEnableDisplayString |
| ;InbvInstallDisplayStringFilter |
| ;InbvIsBootDriverInstalled |
| ;InbvNotifyDisplayOwnershipLost |
| ;InbvResetDisplay |
| ;InbvSetScrollRegion |
| ;InbvSetTextColor |
| ;InbvSolidColorFill |
| ;InitSafeBootMode DATA |
| @InterlockedCompareExchange@12 |
| @InterlockedDecrement@4 |
| @InterlockedExchange@8 |
| @InterlockedExchangeAdd@8 |
| @InterlockedIncrement@4 |
| @InterlockedPopEntrySList@4 |
| @InterlockedPushEntrySList@8 |
| IoAcquireCancelSpinLock@4 |
| IoAcquireRemoveLockEx@20 |
| ;IoAcquireVpbSpinLock |
| IoAdapterObjectType DATA |
| IoAllocateAdapterChannel@20 |
| IoAllocateController@16 |
| IoAllocateDriverObjectExtension@16 |
| IoAllocateErrorLogEntry@8 |
| IoAllocateIrp@8 |
| IoAllocateMdl@20 |
| IoAllocateWorkItem@4 |
| ;IoAssignDriveLetters |
| IoAssignResources@24 |
| IoAttachDevice@12 |
| IoAttachDeviceByPointer@8 |
| IoAttachDeviceToDeviceStack@8 |
| ;IoAttachDeviceToDeviceStackSafe |
| IoBuildAsynchronousFsdRequest@24 |
| IoBuildDeviceIoControlRequest@36 |
| IoBuildPartialMdl@16 |
| IoBuildSynchronousFsdRequest@28 |
| ;IoCallDriver |
| IoCancelFileOpen@8 |
| IoCancelIrp@4 |
| ;IoCheckDesiredAccess |
| ;IoCheckEaBufferValidity |
| ;IoCheckFunctionAccess |
| ;IoCheckQuerySetFileInformation |
| ;IoCheckQuerySetVolumeInformation |
| ;IoCheckQuotaBufferValidity |
| IoCheckShareAccess@20 |
| ;IoCompleteRequest |
| IoConnectInterrupt@44 |
| IoCreateController@4 |
| IoCreateDevice@28 |
| IoCreateDisk@8 |
| ;IoCreateDriver |
| IoCreateFile@56 |
| ;IoCreateFileSpecifyDeviceObjectHint |
| IoCreateNotificationEvent@8 |
| ;IoCreateStreamFileObject |
| ;IoCreateStreamFileObjectEx |
| ;IoCreateStreamFileObjectLite |
| IoCreateSymbolicLink@8 |
| IoCreateSynchronizationEvent@8 |
| IoCreateUnprotectedSymbolicLink@8 |
| IoCsqInitialize@28 |
| IoCsqInsertIrp@12 |
| IoCsqRemoveIrp@8 |
| IoCsqRemoveNextIrp@8 |
| IoDeleteController@4 |
| IoDeleteDevice@4 |
| ;IoDeleteDriver |
| IoDeleteSymbolicLink@4 |
| IoDetachDevice@4 |
| IoDeviceHandlerObjectSize DATA |
| IoDeviceHandlerObjectType DATA |
| IoDeviceObjectType DATA |
| IoDisconnectInterrupt@4 |
| IoDriverObjectType DATA |
| ;IoEnqueueIrp |
| ;IoEnumerateDeviceObjectList |
| ;IoFastQueryNetworkAttributes |
| IoFileObjectType DATA |
| ;IoForwardAndCatchIrp |
| IoForwardIrpSynchronously@8 |
| IoFreeController@4 |
| IoFreeErrorLogEntry@4 |
| IoFreeIrp@4 |
| IoFreeMdl@4 |
| IoFreeWorkItem@4 |
| IoGetAttachedDevice@4 |
| IoGetAttachedDeviceReference@4 |
| ;IoGetBaseFileSystemDeviceObject |
| IoGetBootDiskInformation@8 |
| IoGetConfigurationInformation@0 |
| IoGetCurrentProcess@0 |
| ;IoGetDeviceAttachmentBaseRef |
| IoGetDeviceInterfaceAlias@12 |
| IoGetDeviceInterfaces@16 |
| IoGetDeviceObjectPointer@16 |
| IoGetDeviceProperty@20 |
| IoGetDeviceToVerify@4 |
| ;IoGetDiskDeviceObject |
| IoGetDmaAdapter@12 |
| IoGetDriverObjectExtension@8 |
| IoGetFileObjectGenericMapping@0 |
| IoGetInitialStack@0 |
| ;IoGetLowerDeviceObject |
| IoGetRelatedDeviceObject@4 |
| ;IoGetRequestorProcess |
| ;IoGetRequestorProcessId |
| ;IoGetRequestorSessionId |
| IoGetStackLimits@8 |
| ;IoGetTopLevelIrp |
| IoInitializeIrp@12 |
| IoInitializeRemoveLockEx@20 |
| IoInitializeTimer@12 |
| IoInvalidateDeviceRelations@8 |
| IoInvalidateDeviceState@4 |
| ;IoIsFileOriginRemote |
| ;IoIsOperationSynchronous |
| ;IoIsSystemThread |
| ;IoIsValidNameGraftingBuffer |
| IoIsWdmVersionAvailable@8 |
| IoMakeAssociatedIrp@8 |
| IoOpenDeviceInterfaceRegistryKey@12 |
| IoOpenDeviceRegistryKey@16 |
| ;IoPageRead |
| ;IoPnPDeliverServicePowerNotification |
| IoQueryDeviceDescription@32 |
| ;IoQueryFileDosDeviceName |
| ;IoQueryFileInformation |
| ;IoQueryVolumeInformation |
| ;IoQueueThreadIrp |
| IoQueueWorkItem@16 |
| IoRaiseHardError@12 |
| IoRaiseInformationalHardError@12 |
| IoReadDiskSignature@12 |
| ;IoReadOperationCount DATA |
| @IoReadPartitionTable@16 |
| IoReadPartitionTableEx@8 |
| ;IoReadTransferCount DATA |
| IoRegisterBootDriverReinitialization@12 |
| IoRegisterDeviceInterface@16 |
| IoRegisterDriverReinitialization@12 |
| ;IoRegisterFileSystem |
| ;IoRegisterFsRegistrationChange |
| ;IoRegisterLastChanceShutdownNotification |
| IoRegisterPlugPlayNotification@28 |
| IoRegisterShutdownNotification@4 |
| IoReleaseCancelSpinLock@4 |
| IoReleaseRemoveLockAndWaitEx@12 |
| IoReleaseRemoveLockEx@12 |
| ;IoReleaseVpbSpinLock |
| IoRemoveShareAccess@8 |
| IoReportDetectedDevice@32 |
| ;IoReportHalResourceUsage |
| IoReportResourceForDetection@28 |
| IoReportResourceUsage@36 |
| IoReportTargetDeviceChange@8 |
| IoReportTargetDeviceChangeAsynchronous@16 |
| IoRequestDeviceEject@4 |
| IoReuseIrp@8 |
| IoSetCompletionRoutineEx@28 |
| IoSetDeviceInterfaceState@8 |
| ;IoSetDeviceToVerify |
| ;IoSetFileOrigin |
| IoSetHardErrorOrVerifyDevice@8 |
| ;IoSetInformation |
| ;IoSetIoCompletion |
| @IoSetPartitionInformation@16 |
| IoSetPartitionInformationEx@12 |
| IoSetShareAccess@16 |
| IoSetStartIoAttributes@12 |
| IoSetSystemPartition@4 |
| IoSetThreadHardErrorMode@4 |
| ;IoSetTopLevelIrp |
| IoStartNextPacket@8 |
| IoStartNextPacketByKey@12 |
| IoStartPacket@16 |
| IoStartTimer@4 |
| ;IoStatisticsLock DATA |
| IoStopTimer@4 |
| ;IoSynchronousInvalidateDeviceRelations |
| ;IoSynchronousPageWrite |
| ;IoThreadToProcess |
| ;IoUnregisterFileSystem |
| ;IoUnregisterFsRegistrationChange |
| IoUnregisterPlugPlayNotification@4 |
| IoUnregisterShutdownNotification@4 |
| IoUpdateShareAccess@8 |
| IoVerifyPartitionTable@8 |
| ;IoVerifyVolume |
| IoVolumeDeviceToDosName@8 |
| IoWMIAllocateInstanceIds@12 |
| IoWMIDeviceObjectToInstanceName@12 |
| IoWMIExecuteMethod@24 |
| IoWMIHandleToInstanceName@12 |
| IoWMIOpenBlock@12 |
| IoWMIQueryAllData@12 |
| IoWMIQueryAllDataMultiple@16 |
| IoWMIQuerySingleInstance@16 |
| IoWMIQuerySingleInstanceMultiple@20 |
| IoWMIRegistrationControl@8 |
| IoWMISetNotificationCallback@12 |
| IoWMISetSingleInstance@20 |
| IoWMISetSingleItem@24 |
| IoWMISuggestInstanceName@16 |
| IoWMIWriteEvent@4 |
| IoWriteErrorLogEntry@4 |
| ;IoWriteOperationCount DATA |
| @IoWritePartitionTable@20 |
| IoWritePartitionTableEx@8 |
| ;IoWriteTransferCount DATA |
| @IofCallDriver@8 |
| @IofCompleteRequest@8 |
| ;KdDebuggerEnabled DATA |
| ;KdDebuggerNotPresent DATA |
| KdDisableDebugger@0 |
| KdEnableDebugger@0 |
| ;KdEnteredDebugger DATA |
| ;KdPollBreakIn |
| ;KdPowerTransition |
| ;Ke386CallBios |
| Ke386IoSetAccessProcess@8 |
| Ke386QueryIoAccessMap@8 |
| Ke386SetIoAccessMap@8 |
| @KeAcquireInStackQueuedSpinLockAtDpcLevel@8 |
| KeAcquireInterruptSpinLock@4 |
| ;KeAcquireSpinLockAtDpcLevel |
| KeAddSystemServiceTable@20 |
| KeAreApcsDisabled@0 |
| KeAttachProcess@4 |
| KeBugCheck@4 |
| KeBugCheckEx@20 |
| KeCancelTimer@4 |
| KeClearEvent@4 |
| ;KeConnectInterrupt |
| ;KeDcacheFlushCount DATA |
| KeDelayExecutionThread@12 |
| KeDeregisterBugCheckCallback@4 |
| KeDetachProcess@0 |
| ;KeDisconnectInterrupt |
| KeEnterCriticalRegion@0 |
| ;KeEnterKernelDebugger |
| ;KeFindConfigurationEntry |
| ;KeFindConfigurationNextEntry |
| ;KeFlushEntireTb |
| KeGetCurrentThread@0 |
| KeGetPreviousMode@0 |
| KeGetRecommendedSharedDataAlignment@0 |
| ;KeI386AbiosCall |
| ;KeI386AllocateGdtSelectors |
| ;KeI386Call16BitCStyleFunction |
| ;KeI386Call16BitFunction |
| ;KeI386FlatToGdtSelector |
| ;KeI386GetLid |
| ;KeI386MachineType DATA |
| ;KeI386ReleaseGdtSelectors |
| ;KeI386ReleaseLid |
| ;KeI386SetGdtSelector |
| ;KeIcacheFlushCount DATA |
| KeInitializeApc@32 |
| KeInitializeDeviceQueue@4 |
| KeInitializeDpc@12 |
| KeInitializeEvent@12 |
| ;KeInitializeInterrupt |
| ;KeInitializeMutant |
| KeInitializeMutex@8 |
| ;KeInitializeQueue |
| KeInitializeSemaphore@12 |
| KeInitializeSpinLock@4 |
| KeInitializeTimer@4 |
| KeInitializeTimerEx@8 |
| KeInsertByKeyDeviceQueue@12 |
| KeInsertDeviceQueue@8 |
| ;KeInsertHeadQueue |
| ;KeInsertQueue |
| ;KeInsertQueueApc |
| KeInsertQueueDpc@12 |
| ;KeIsAttachedProcess |
| ;KeIsExecutingDpc |
| KeLeaveCriticalRegion@0 |
| ;KeLoaderBlock DATA |
| ;KeNumberProcessors DATA |
| ;KeProfileInterrupt |
| ;KeProfileInterruptWithSource |
| KePulseEvent@12 |
| ;KeQueryActiveProcessors |
| KeQueryInterruptTime@0 |
| KeQueryPriorityThread@4 |
| ;KeQueryRuntimeThread |
| KeQuerySystemTime@4 |
| KeQueryTickCount@4 |
| KeQueryTimeIncrement@0 |
| ;KeRaiseUserException |
| KeReadStateEvent@4 |
| ;KeReadStateMutant |
| KeReadStateMutex@4 |
| ;KeReadStateQueue |
| KeReadStateSemaphore@4 |
| KeReadStateTimer@4 |
| KeRegisterBugCheckCallback@20 |
| KeReleaseInStackQueuedSpinLockFromDpcLevel@4 |
| KeReleaseInterruptSpinLock@8 |
| ;KeReleaseMutant |
| KeReleaseMutex@8 |
| KeReleaseSemaphore@16 |
| ;KeReleaseSpinLockFromDpcLevel |
| KeRemoveByKeyDeviceQueue@8 |
| ;KeRemoveByKeyDeviceQueueIfBusy |
| KeRemoveDeviceQueue@4 |
| KeRemoveEntryDeviceQueue@8 |
| ;KeRemoveQueue |
| KeRemoveQueueDpc@4 |
| ;KeRemoveSystemServiceTable |
| KeResetEvent@4 |
| KeRestoreFloatingPointState@4 |
| ;KeRevertToUserAffinityThread |
| ;KeRundownQueue |
| KeSaveFloatingPointState@4 |
| ;KeSaveStateForHibernate |
| ;KeServiceDescriptorTable DATA |
| ;KeSetAffinityThread |
| KeSetBasePriorityThread@8 |
| ;KeSetDmaIoCoherency |
| KeSetEvent@12 |
| ;KeSetEventBoostPriority |
| ;KeSetIdealProcessorThread |
| KeSetImportanceDpc@8 |
| ;KeSetKernelStackSwapEnable |
| KeSetPriorityThread@8 |
| ;KeSetProfileIrql |
| ;KeSetSystemAffinityThread |
| KeSetTargetProcessorDpc@8 |
| ;KeSetTimeIncrement |
| @KeSetTimeUpdateNotifyRoutine@4 |
| KeSetTimer@16 |
| KeSetTimerEx@20 |
| ;KeStackAttachProcess |
| KeSynchronizeExecution@12 |
| ;KeTerminateThread |
| ;KeTickCount DATA |
| ;KeUnstackDetachProcess |
| ;KeUpdateRunTime |
| ;KeUpdateSystemTime |
| ;KeUserModeCallback |
| KeWaitForMultipleObjects@32 |
| KeWaitForMutexObject@20 |
| KeWaitForSingleObject@20 |
| @KefAcquireSpinLockAtDpcLevel@4 |
| @KefReleaseSpinLockFromDpcLevel@4 |
| ;Kei386EoiHelper |
| ;KiAcquireSpinLock |
| ;KiBugCheckData DATA |
| ;KiCoprocessorError |
| ;KiDeliverApc |
| ;KiDispatchInterrupt |
| ;KiEnableTimerWatchdog DATA |
| ;KiIpiServiceRoutine |
| ;KiReleaseSpinLock |
| ;KiUnexpectedInterrupt |
| ;Kii386SpinOnSpinLock |
| ;LdrAccessResource |
| ;LdrEnumResources |
| ;LdrFindResourceDirectory_U |
| ;LdrFindResource_U |
| LpcPortObjectType DATA |
| ;LpcRequestPort |
| ;LpcRequestWaitReplyPort |
| ;LsaCallAuthenticationPackage |
| ;LsaDeregisterLogonProcess |
| ;LsaFreeReturnBuffer |
| ;LsaLogonUser |
| ;LsaLookupAuthenticationPackage |
| ;LsaRegisterLogonProcess |
| ;Mm64BitPhysicalAddress DATA |
| ;MmAddPhysicalMemory |
| ;MmAddVerifierThunks |
| ;MmAdjustWorkingSetSize |
| MmAdvanceMdl@8 |
| MmAllocateContiguousMemory@12 |
| MmAllocateContiguousMemorySpecifyCache@20 |
| MmAllocateMappingAddress@8 |
| MmAllocateNonCachedMemory@4 |
| MmAllocatePagesForMdl@28 |
| MmBuildMdlForNonPagedPool@4 |
| ;MmCanFileBeTruncated |
| MmCreateMdl@12 |
| MmCreateSection@32 |
| ;MmDisableModifiedWriteOfSection |
| MmFlushImageSection@8 |
| ;MmForceSectionClosed |
| MmFreeContiguousMemory@4 |
| MmFreeContiguousMemorySpecifyCache@12 |
| MmFreeMappingAddress@8 |
| MmFreeNonCachedMemory@8 |
| MmFreePagesFromMdl@4 |
| MmGetPhysicalAddress@4 |
| MmGetPhysicalMemoryRanges@0 |
| MmGetSystemRoutineAddress@4 |
| MmGetVirtualForPhysical@4 |
| ;MmGrowKernelStack |
| ;MmHighestUserAddress DATA |
| MmIsAddressValid@4 |
| MmIsDriverVerifying@4 |
| MmIsNonPagedSystemAddressValid@4 |
| ;MmIsRecursiveIoFault |
| MmIsThisAnNtAsSystem@0 |
| MmIsVerifierEnabled@4 |
| MmLockPagableDataSection@4 |
| MmLockPagableImageSection@4 |
| MmLockPagableSectionByHandle@4 |
| MmMapIoSpace@16 |
| MmMapLockedPages@8 |
| MmMapLockedPagesSpecifyCache@24 |
| MmMapLockedPagesWithReservedMapping@16 |
| ;MmMapMemoryDumpMdl |
| MmMapUserAddressesToPage@12 |
| MmMapVideoDisplay@12 |
| MmMapViewInSessionSpace@12 |
| MmMapViewInSystemSpace@12 |
| ;MmMapViewOfSection |
| MmMarkPhysicalMemoryAsBad@8 |
| MmMarkPhysicalMemoryAsGood@8 |
| MmPageEntireDriver@4 |
| ;MmPrefetchPages |
| MmProbeAndLockPages@12 |
| MmProbeAndLockProcessPages@16 |
| ;MmProbeAndLockSelectedPages |
| MmProtectMdlSystemAddress@8 |
| MmQuerySystemSize@0 |
| MmRemovePhysicalMemory@8 |
| MmResetDriverPaging@4 |
| MmSectionObjectType DATA |
| MmSecureVirtualMemory@12 |
| ;MmSetAddressRangeModified |
| ;MmSetBankedSection |
| MmSizeOfMdl@8 |
| ;MmSystemRangeStart DATA |
| ;MmTrimAllSystemPagableMemory |
| MmUnlockPagableImageSection@4 |
| MmUnlockPages@4 |
| MmUnmapIoSpace@8 |
| MmUnmapLockedPages@8 |
| MmUnmapReservedMapping@12 |
| MmUnmapVideoDisplay@8 |
| MmUnmapViewInSessionSpace@4 |
| MmUnmapViewInSystemSpace@4 |
| ;MmUnmapViewOfSection |
| MmUnsecureVirtualMemory@4 |
| ;MmUserProbeAddress DATA |
| ;NlsAnsiCodePage DATA |
| ;NlsLeadByteInfo |
| ;NlsMbCodePageTag DATA |
| ;NlsMbOemCodePageTag DATA |
| ;NlsOemCodePage DATA |
| ;NlsOemLeadByteInfo |
| NtAddAtom@12 |
| NtAdjustPrivilegesToken@24 |
| NtAllocateLocallyUniqueId@4 |
| NtAllocateUuids@16 |
| NtAllocateVirtualMemory@24 |
| ;NtBuildNumber DATA |
| NtClose@4 |
| NtConnectPort@32 |
| NtCreateEvent@20 |
| ;NtCreateFile |
| NtCreateSection@28 |
| NtDeleteAtom@4 |
| NtDeleteFile@4 |
| NtDeviceIoControlFile@40 |
| NtDuplicateObject@28 |
| NtDuplicateToken@24 |
| NtFindAtom@12 |
| NtFreeVirtualMemory@16 |
| ;NtFsControlFile |
| ;NtGlobalFlag DATA |
| ;NtLockFile |
| ;NtMakePermanentObject |
| NtMapViewOfSection@40 |
| ;NtNotifyChangeDirectoryFile |
| NtOpenFile@24 |
| NtOpenProcess@16 |
| NtOpenProcessToken@12 |
| ;NtOpenProcessTokenEx |
| NtOpenThread@16 |
| NtOpenThreadToken@16 |
| ;NtOpenThreadTokenEx |
| ;NtQueryDirectoryFile |
| ;NtQueryEaFile |
| NtQueryInformationAtom@20 |
| ;NtQueryInformationFile |
| NtQueryInformationProcess@20 |
| NtQueryInformationThread@20 |
| NtQueryInformationToken@20 |
| ;NtQueryQuotaInformationFile |
| NtQuerySecurityObject@20 |
| NtQuerySystemInformation@16 |
| ;NtQueryVolumeInformationFile |
| NtReadFile@36 |
| NtRequestPort@8 |
| NtRequestWaitReplyPort@12 |
| ;NtSetEaFile |
| NtSetEvent@8 |
| ;NtSetInformationFile |
| NtSetInformationProcess@16 |
| NtSetInformationThread@16 |
| ;NtSetQuotaInformationFile |
| NtSetSecurityObject@12 |
| ;NtSetVolumeInformationFile |
| NtShutdownSystem@4 |
| ;NtTraceEvent |
| ;NtUnlockFile |
| NtVdmControl@8 |
| NtWaitForSingleObject@12 |
| NtWriteFile@36 |
| ObAssignSecurity@16 |
| ;ObCheckCreateObjectAccess |
| ;ObCheckObjectAccess |
| ;ObCloseHandle |
| ObCreateObject@36 |
| ;ObCreateObjectType |
| ;ObDereferenceObject |
| ObDereferenceSecurityDescriptor@8 |
| ;ObFindHandleForObject |
| ObGetObjectSecurity@12 |
| ObInsertObject@24 |
| ObLogSecurityDescriptor@12 |
| ObMakeTemporaryObject@4 |
| ObOpenObjectByName@28 |
| ObOpenObjectByPointer@28 |
| ;ObQueryNameString |
| ObQueryObjectAuditingByHandle@8 |
| ObReferenceObjectByHandle@24 |
| ObReferenceObjectByName@32 |
| ObReferenceObjectByPointer@16 |
| ObReferenceSecurityDescriptor@8 |
| ObReleaseObjectSecurity@8 |
| ;ObSetHandleAttributes |
| ;ObSetSecurityDescriptorInfo |
| ;ObSetSecurityObjectByPointer |
| @ObfDereferenceObject@4 |
| @ObfReferenceObject@4 |
| ;PfxFindPrefix |
| ;PfxInitialize |
| ;PfxInsertPrefix |
| ;PfxRemovePrefix |
| PoCallDriver@8 |
| ;PoCancelDeviceNotify |
| ;PoQueueShutdownWorkItem |
| PoRegisterDeviceForIdleDetection@16 |
| ;PoRegisterDeviceNotify |
| PoRegisterSystemState@8 |
| PoRequestPowerIrp@24 |
| PoRequestShutdownEvent@4 |
| ;PoSetHiberRange |
| PoSetPowerState@12 |
| PoSetSystemState@4 |
| ;PoShutdownBugCheck |
| PoStartNextPowerIrp@4 |
| PoUnregisterSystemState@4 |
| ProbeForRead@12 |
| ProbeForWrite@12 |
| ;PsAssignImpersonationToken |
| ;PsChargePoolQuota |
| ;PsChargeProcessNonPagedPoolQuota |
| ;PsChargeProcessPagedPoolQuota |
| ;PsChargeProcessPoolQuota |
| PsCreateSystemProcess@12 |
| PsCreateSystemThread@28 |
| ;PsDereferenceImpersonationToken |
| ;PsDereferencePrimaryToken |
| ;PsDisableImpersonation |
| ;PsEstablishWin32Callouts |
| ;PsGetCurrentProcess |
| PsGetCurrentProcessId@0 |
| ;PsGetCurrentProcessSessionId |
| ;PsGetCurrentThread |
| PsGetCurrentThreadId@0 |
| ;PsGetCurrentThreadPreviousMode |
| ;PsGetCurrentThreadStackBase |
| ;PsGetCurrentThreadStackLimit |
| ;PsGetJobLock |
| ;PsGetJobSessionId |
| ;PsGetJobUIRestrictionsClass |
| ;PsGetProcessCreateTimeQuadPart |
| ;PsGetProcessDebugPort |
| ;PsGetProcessExitProcessCalled |
| ;PsGetProcessExitStatus |
| ;PsGetProcessExitTime |
| ;PsGetProcessId |
| ;PsGetProcessImageFileName |
| ;PsGetProcessInheritedFromUniqueProcessId |
| ;PsGetProcessJob |
| ;PsGetProcessPeb |
| ;PsGetProcessPriorityClass |
| ;PsGetProcessSectionBaseAddress |
| ;PsGetProcessSecurityPort |
| ;PsGetProcessSessionId |
| ;PsGetProcessWin32Process |
| ;PsGetProcessWin32WindowStation |
| ;PsGetThreadFreezeCount |
| ;PsGetThreadHardErrorsAreDisabled |
| ;PsGetThreadId |
| ;PsGetThreadProcess |
| ;PsGetThreadProcessId |
| ;PsGetThreadSessionId |
| ;PsGetThreadTeb |
| ;PsGetThreadWin32Thread |
| PsGetVersion@16 |
| ;PsImpersonateClient |
| ;PsInitialSystemProcess DATA |
| ;PsIsProcessBeingDebugged |
| ;PsIsSystemThread |
| ;PsIsThreadImpersonating |
| ;PsIsThreadTerminating |
| ;PsJobType DATA |
| ;PsLookupProcessByProcessId |
| ;PsLookupProcessThreadByCid |
| ;PsLookupThreadByThreadId |
| ;PsProcessType DATA |
| ;PsReferenceImpersonationToken |
| ;PsReferencePrimaryToken |
| PsRemoveCreateThreadNotifyRoutine@4 |
| PsRemoveLoadImageNotifyRoutine@4 |
| ;PsRestoreImpersonation |
| ;PsReturnPoolQuota |
| ;PsReturnProcessNonPagedPoolQuota |
| ;PsReturnProcessPagedPoolQuota |
| ;PsRevertThreadToSelf |
| ;PsRevertToSelf |
| PsSetCreateProcessNotifyRoutine@8 |
| PsSetCreateThreadNotifyRoutine@4 |
| ;PsSetJobUIRestrictionsClass |
| ;PsSetLegoNotifyRoutine |
| PsSetLoadImageNotifyRoutine@4 |
| ;PsSetProcessPriorityByClass |
| ;PsSetProcessPriorityClass |
| ;PsSetProcessSecurityPort |
| ;PsSetProcessWin32Process |
| ;PsSetProcessWindowStation |
| ;PsSetThreadHardErrorsAreDisabled |
| ;PsSetThreadWin32Thread |
| PsTerminateSystemThread@4 |
| ;PsThreadType DATA |
| READ_REGISTER_BUFFER_UCHAR@12 |
| READ_REGISTER_BUFFER_ULONG@12 |
| READ_REGISTER_BUFFER_USHORT@12 |
| READ_REGISTER_UCHAR@4 |
| READ_REGISTER_ULONG@4 |
| READ_REGISTER_USHORT@4 |
| ;RtlAbsoluteToSelfRelativeSD |
| ;RtlAddAccessAllowedAce |
| ;RtlAddAce |
| ;RtlAddAtomToAtomTable |
| RtlAddRange@28 |
| ;RtlAllocateHeap |
| ;RtlAnsiCharToUnicodeChar |
| RtlAnsiStringToUnicodeSize@4 |
| RtlAnsiStringToUnicodeString@12 |
| ;RtlAppendAsciizToString |
| ;RtlAppendStringToString |
| RtlAppendUnicodeStringToString@8 |
| RtlAppendUnicodeToString@8 |
| ;RtlAreAllAccessesGranted |
| ;RtlAreAnyAccessesGranted |
| RtlAreBitsClear@12 |
| RtlAreBitsSet@12 |
| RtlAssert@16 |
| ;RtlCaptureContext |
| ;RtlCaptureStackBackTrace |
| RtlCharToInteger@12 |
| RtlCheckRegistryKey@8 |
| RtlClearAllBits@4 |
| RtlClearBit@8 |
| RtlClearBits@12 |
| RtlCompareMemory@12 |
| ;RtlCompareMemoryUlong |
| RtlCompareString@12 |
| RtlCompareUnicodeString@12 |
| ;RtlCompressBuffer |
| ;RtlCompressChunks |
| RtlConvertLongToLargeInteger@4 |
| ;RtlConvertSidToUnicodeString |
| RtlConvertUlongToLargeInteger@4 |
| ;RtlCopyLuid |
| RtlCopyRangeList@8 |
| ;RtlCopySid |
| RtlCopyString@8 |
| RtlCopyUnicodeString@8 |
| ;RtlCreateAcl |
| ;RtlCreateAtomTable |
| ;RtlCreateHeap |
| RtlCreateRegistryKey@8 |
| RtlCreateSecurityDescriptor@8 |
| ;RtlCreateSystemVolumeInformationFolder |
| ;RtlCreateUnicodeString |
| ;RtlCustomCPToUnicodeN |
| ;RtlDecompressBuffer |
| ;RtlDecompressChunks |
| ;RtlDecompressFragment |
| ;RtlDelete |
| ;RtlDeleteAce |
| ;RtlDeleteAtomFromAtomTable |
| ;RtlDeleteElementGenericTable |
| ;RtlDeleteElementGenericTableAvl |
| ;RtlDeleteNoSplay |
| RtlDeleteOwnersRanges@8 |
| RtlDeleteRange@16 |
| RtlDeleteRegistryValue@12 |
| ;RtlDescribeChunk |
| ;RtlDestroyAtomTable |
| ;RtlDestroyHeap |
| ;RtlDowncaseUnicodeString |
| ;RtlEmptyAtomTable |
| RtlEnlargedIntegerMultiply@8 |
| RtlEnlargedUnsignedDivide@12 |
| RtlEnlargedUnsignedMultiply@8 |
| ;RtlEnumerateGenericTable |
| ;RtlEnumerateGenericTableAvl |
| ;RtlEnumerateGenericTableLikeADirectory |
| ;RtlEnumerateGenericTableWithoutSplaying |
| ;RtlEnumerateGenericTableWithoutSplayingAvl |
| ;RtlEqualLuid |
| ;RtlEqualSid |
| RtlEqualString@12 |
| RtlEqualUnicodeString@12 |
| RtlExtendedIntegerMultiply@8 |
| RtlExtendedLargeIntegerDivide@12 |
| RtlExtendedMagicDivide@12 |
| ;RtlFillMemory |
| ;RtlFillMemoryUlong |
| RtlFindClearBits@12 |
| RtlFindClearBitsAndSet@12 |
| RtlFindClearRuns@16 |
| RtlFindFirstRunClear@8 |
| RtlFindLastBackwardRunClear@12 |
| RtlFindLeastSignificantBit@4 |
| RtlFindLongestRunClear@8 |
| ;RtlFindMessage |
| RtlFindMostSignificantBit@4 |
| RtlFindNextForwardRunClear@12 |
| RtlFindRange@40 |
| RtlFindSetBits@12 |
| RtlFindSetBitsAndClear@12 |
| ;RtlFindUnicodePrefix |
| ;RtlFormatCurrentUserKeyPath |
| RtlFreeAnsiString@4 |
| ;RtlFreeHeap |
| ;RtlFreeOemString |
| RtlFreeRangeList@4 |
| RtlFreeUnicodeString@4 |
| RtlGUIDFromString@8 |
| ;RtlGenerate8dot3Name |
| ;RtlGetAce |
| RtlGetCallersAddress@8 |
| ;RtlGetCompressionWorkSpaceSize |
| ;RtlGetDaclSecurityDescriptor |
| ;RtlGetDefaultCodePage |
| ;RtlGetElementGenericTable |
| ;RtlGetElementGenericTableAvl |
| RtlGetFirstRange@12 |
| ;RtlGetGroupSecurityDescriptor |
| RtlGetNextRange@12 |
| ;RtlGetNtGlobalFlags |
| ;RtlGetOwnerSecurityDescriptor |
| ;RtlGetSaclSecurityDescriptor |
| ;RtlGetSetBootStatusData |
| RtlGetVersion@4 |
| RtlHashUnicodeString@16 |
| ;RtlImageDirectoryEntryToData |
| ;RtlImageNtHeader |
| RtlInitAnsiString@8 |
| ;RtlInitCodePageTable |
| RtlInitString@8 |
| RtlInitUnicodeString@8 |
| RtlInitializeBitMap@12 |
| ;RtlInitializeGenericTable |
| ;RtlInitializeGenericTableAvl |
| RtlInitializeRangeList@4 |
| ;RtlInitializeSid |
| ;RtlInitializeUnicodePrefix |
| ;RtlInsertElementGenericTable |
| ;RtlInsertElementGenericTableAvl |
| ;RtlInsertElementGenericTableFull |
| ;RtlInsertElementGenericTableFullAvl |
| ;RtlInsertUnicodePrefix |
| RtlInt64ToUnicodeString@12 |
| ;RtlIntegerToChar |
| ;RtlIntegerToUnicode |
| RtlIntegerToUnicodeString@12 |
| RtlInvertRangeList@8 |
| ;RtlIpv4AddressToStringA |
| ;RtlIpv4AddressToStringW |
| ;RtlIpv4StringToAddressA |
| ;RtlIpv4StringToAddressW |
| ;RtlIpv6AddressToStringA |
| ;RtlIpv6AddressToStringW |
| ;RtlIpv6StringToAddressA |
| ;RtlIpv6StringToAddressW |
| ;RtlIsGenericTableEmpty |
| ;RtlIsGenericTableEmptyAvl |
| ;RtlIsNameLegalDOS8Dot3 |
| RtlIsRangeAvailable@32 |
| ;RtlIsValidOemCharacter |
| RtlLargeIntegerAdd@8 |
| RtlLargeIntegerArithmeticShift@8 |
| RtlLargeIntegerDivide@12 |
| RtlLargeIntegerNegate@4 |
| RtlLargeIntegerShiftLeft@8 |
| RtlLargeIntegerShiftRight@8 |
| RtlLargeIntegerSubtract@8 |
| ;RtlLengthRequiredSid |
| RtlLengthSecurityDescriptor@4 |
| ;RtlLengthSid |
| ;RtlLockBootStatusData |
| ;RtlLookupAtomInAtomTable |
| ;RtlLookupElementGenericTable |
| ;RtlLookupElementGenericTableAvl |
| ;RtlLookupElementGenericTableFull |
| ;RtlLookupElementGenericTableFullAvl |
| RtlMapGenericMask@8 |
| ;RtlMapSecurityErrorToNtStatus |
| RtlMergeRangeLists@16 |
| ;RtlMoveMemory |
| ;RtlMultiByteToUnicodeN |
| ;RtlMultiByteToUnicodeSize |
| ;RtlNextUnicodePrefix |
| ;RtlNtStatusToDosError |
| ;RtlNtStatusToDosErrorNoTeb |
| ;RtlNumberGenericTableElements |
| ;RtlNumberGenericTableElementsAvl |
| RtlNumberOfClearBits@4 |
| RtlNumberOfSetBits@4 |
| ;RtlOemStringToCountedUnicodeString |
| ;RtlOemStringToUnicodeSize |
| ;RtlOemStringToUnicodeString |
| ;RtlOemToUnicodeN |
| ;RtlPinAtomInAtomTable |
| @RtlPrefetchMemoryNonTemporal@8 |
| ;RtlPrefixString |
| RtlPrefixUnicodeString@12 |
| ;RtlQueryAtomInAtomTable |
| RtlQueryRegistryValues@20 |
| ;RtlQueryTimeZoneInformation |
| ;RtlRaiseException |
| ;RtlRandom |
| ;RtlRandomEx |
| ;RtlRealPredecessor |
| ;RtlRealSuccessor |
| ;RtlRemoveUnicodePrefix |
| ;RtlReserveChunk |
| ;RtlSecondsSince1970ToTime |
| ;RtlSecondsSince1980ToTime |
| ;RtlSelfRelativeToAbsoluteSD |
| ;RtlSelfRelativeToAbsoluteSD2 |
| RtlSetAllBits@4 |
| RtlSetBit@8 |
| RtlSetBits@12 |
| RtlSetDaclSecurityDescriptor@16 |
| ;RtlSetGroupSecurityDescriptor |
| ;RtlSetOwnerSecurityDescriptor |
| ;RtlSetSaclSecurityDescriptor |
| ;RtlSetTimeZoneInformation |
| ;RtlSizeHeap |
| ;RtlSplay |
| RtlStringFromGUID@8 |
| ;RtlSubAuthorityCountSid |
| ;RtlSubAuthoritySid |
| ;RtlSubtreePredecessor |
| ;RtlSubtreeSuccessor |
| RtlTestBit@8 |
| RtlTimeFieldsToTime@8 |
| ;RtlTimeToElapsedTimeFields |
| ;RtlTimeToSecondsSince1970 |
| ;RtlTimeToSecondsSince1980 |
| RtlTimeToTimeFields@8 |
| ;RtlTraceDatabaseAdd |
| ;RtlTraceDatabaseCreate |
| ;RtlTraceDatabaseDestroy |
| ;RtlTraceDatabaseEnumerate |
| ;RtlTraceDatabaseFind |
| ;RtlTraceDatabaseLock |
| ;RtlTraceDatabaseUnlock |
| ;RtlTraceDatabaseValidate |
| @RtlUlongByteSwap@4 |
| @RtlUlonglongByteSwap@4 |
| RtlUnicodeStringToAnsiSize@4 |
| RtlUnicodeStringToAnsiString@12 |
| ;RtlUnicodeStringToCountedOemString |
| RtlUnicodeStringToInteger@12 |
| ;RtlUnicodeStringToOemSize |
| ;RtlUnicodeStringToOemString |
| ;RtlUnicodeToCustomCPN |
| ;RtlUnicodeToMultiByteN |
| ;RtlUnicodeToMultiByteSize |
| ;RtlUnicodeToOemN |
| ;RtlUnlockBootStatusData |
| ;RtlUnwind |
| RtlUpcaseUnicodeChar@4 |
| RtlUpcaseUnicodeString@12 |
| ;RtlUpcaseUnicodeStringToAnsiString |
| ;RtlUpcaseUnicodeStringToCountedOemString |
| ;RtlUpcaseUnicodeStringToOemString |
| ;RtlUpcaseUnicodeToCustomCPN |
| ;RtlUpcaseUnicodeToMultiByteN |
| ;RtlUpcaseUnicodeToOemN |
| RtlUpperChar@4 |
| RtlUpperString@8 |
| RtlUshortByteSwap@4 |
| RtlValidRelativeSecurityDescriptor@12 |
| RtlValidSecurityDescriptor@4 |
| ;RtlValidSid |
| RtlVerifyVersionInfo@12 |
| RtlVolumeDeviceToDosName@8 |
| RtlWalkFrameChain@12 |
| RtlWriteRegistryValue@24 |
| ;RtlZeroHeap |
| ;RtlZeroMemory |
| ;RtlxAnsiStringToUnicodeSize |
| ;RtlxOemStringToUnicodeSize |
| RtlxUnicodeStringToAnsiSize@4 |
| ;RtlxUnicodeStringToOemSize |
| SeAccessCheck@40 |
| ;SeAppendPrivileges |
| SeAssignSecurity@28 |
| SeAssignSecurityEx@36 |
| ;SeAuditHardLinkCreation |
| ;SeAuditingFileEvents |
| ;SeAuditingFileOrGlobalEvents |
| ;SeAuditingHardLinkEvents |
| ;SeCaptureSecurityDescriptor |
| ;SeCaptureSubjectContext |
| ;SeCloseObjectAuditAlarm |
| ;SeCreateAccessState |
| ;SeCreateClientSecurity |
| ;SeCreateClientSecurityFromSubjectContext |
| SeDeassignSecurity@4 |
| ;SeDeleteAccessState |
| ;SeDeleteObjectAuditAlarm |
| ;SeExports DATA |
| ;SeFilterToken |
| ;SeFreePrivileges |
| ;SeImpersonateClient |
| ;SeImpersonateClientEx |
| ;SeLockSubjectContext |
| ;SeMarkLogonSessionForTerminationNotification |
| ;SeOpenObjectAuditAlarm |
| ;SeOpenObjectForDeleteAuditAlarm |
| ;SePrivilegeCheck |
| ;SePrivilegeObjectAuditAlarm |
| ;SePublicDefaultDacl DATA |
| ;SeQueryAuthenticationIdToken |
| ;SeQueryInformationToken |
| ;SeQuerySecurityDescriptorInfo |
| ;SeQuerySessionIdToken |
| ;SeRegisterLogonSessionTerminatedRoutine |
| ;SeReleaseSecurityDescriptor |
| ;SeReleaseSubjectContext |
| ;SeSetAccessStateGenericMapping |
| ;SeSetSecurityDescriptorInfo |
| ;SeSetSecurityDescriptorInfoEx |
| SeSinglePrivilegeCheck@8 |
| ;SeSystemDefaultDacl DATA |
| ;SeTokenImpersonationLevel |
| ;SeTokenIsAdmin |
| ;SeTokenIsRestricted |
| SeTokenObjectType DATA |
| ;SeTokenType |
| ;SeUnlockSubjectContext |
| ;SeUnregisterLogonSessionTerminatedRoutine |
| SeValidSecurityDescriptor@8 |
| VerSetConditionMask@16 |
| ;VfFailDeviceNode |
| ;VfFailDriver |
| ;VfFailSystemBIOS |
| ;VfIsVerificationEnabled |
| WRITE_REGISTER_BUFFER_UCHAR@12 |
| WRITE_REGISTER_BUFFER_ULONG@12 |
| WRITE_REGISTER_BUFFER_USHORT@12 |
| WRITE_REGISTER_UCHAR@8 |
| WRITE_REGISTER_ULONG@8 |
| WRITE_REGISTER_USHORT@8 |
| ;WmiFlushTrace |
| ;WmiGetClock |
| ;WmiQueryTrace |
| WmiQueryTraceInformation@20 |
| ;WmiStartTrace |
| ;WmiStopTrace |
| WmiTraceMessage |
| ;WmiTraceMessageVa |
| ;WmiUpdateTrace |
| ;XIPDispatch |
| ZwAccessCheckAndAuditAlarm@44 |
| ;ZwAddBootEntry |
| ZwAdjustPrivilegesToken@24 |
| ZwAlertThread@4 |
| ZwAllocateVirtualMemory@24 |
| ZwAssignProcessToJobObject@8 |
| ZwCancelIoFile@8 |
| ZwCancelTimer@8 |
| ;ZwClearEvent |
| ZwClose@4 |
| ZwCloseObjectAuditAlarm@12 |
| ZwConnectPort@32 |
| ZwCreateDirectoryObject@12 |
| ZwCreateEvent@20 |
| ZwCreateFile@44 |
| ZwCreateJobObject@12 |
| ZwCreateKey@28 |
| ZwCreateSection@28 |
| ZwCreateSymbolicLinkObject@16 |
| ZwCreateTimer@16 |
| ;ZwDeleteBootEntry |
| ZwDeleteFile@4 |
| ZwDeleteKey@4 |
| ZwDeleteValueKey@8 |
| ZwDeviceIoControlFile@40 |
| ZwDisplayString@4 |
| ZwDuplicateObject@28 |
| ZwDuplicateToken@24 |
| ;ZwEnumerateBootEntries |
| ZwEnumerateKey@24 |
| ZwEnumerateValueKey@24 |
| ZwFlushInstructionCache@12 |
| ZwFlushKey@4 |
| ZwFlushVirtualMemory@16 |
| ZwFreeVirtualMemory@16 |
| ;ZwFsControlFile |
| ZwInitiatePowerAction@16 |
| ;ZwIsProcessInJob |
| ZwLoadDriver@4 |
| ZwLoadKey@8 |
| ZwMakeTemporaryObject@4 |
| ZwMapViewOfSection@40 |
| ZwNotifyChangeKey@40 |
| ZwOpenDirectoryObject@12 |
| ;ZwOpenEvent |
| ZwOpenFile@24 |
| ZwOpenJobObject@12 |
| ZwOpenKey@12 |
| ;ZwOpenProcess |
| ZwOpenProcessToken@12 |
| ;ZwOpenProcessTokenEx |
| ZwOpenSection@12 |
| ZwOpenSymbolicLinkObject@12 |
| ZwOpenThread@16 |
| ZwOpenThreadToken@16 |
| ;ZwOpenThreadTokenEx |
| ZwOpenTimer@12 |
| ZwPowerInformation@20 |
| ;ZwPulseEvent |
| ;ZwQueryBootEntryOrder |
| ;ZwQueryBootOptions |
| ZwQueryDefaultLocale@8 |
| ZwQueryDefaultUILanguage@4 |
| ZwQueryDirectoryFile@44 |
| ZwQueryDirectoryObject@28 |
| ;ZwQueryEaFile |
| ZwQueryFullAttributesFile@8 |
| ZwQueryInformationFile@20 |
| ZwQueryInformationJobObject@20 |
| ZwQueryInformationProcess@20 |
| ZwQueryInformationThread@20 |
| ZwQueryInformationToken@20 |
| ZwQueryInstallUILanguage@4 |
| ZwQueryKey@20 |
| ZwQueryObject@20 |
| ZwQuerySection@20 |
| ZwQuerySecurityObject@20 |
| ZwQuerySymbolicLinkObject@12 |
| ZwQuerySystemInformation@16 |
| ZwQueryValueKey@24 |
| ZwQueryVolumeInformationFile@20 |
| ZwReadFile@36 |
| ZwReplaceKey@12 |
| ZwRequestWaitReplyPort@12 |
| ;ZwResetEvent |
| ZwRestoreKey@12 |
| ZwSaveKey@8 |
| ;ZwSaveKeyEx |
| ;ZwSetBootEntryOrder |
| ;ZwSetBootOptions |
| ZwSetDefaultLocale@8 |
| ZwSetDefaultUILanguage@4 |
| ;ZwSetEaFile |
| ZwSetEvent@8 |
| ZwSetInformationFile@20 |
| ZwSetInformationJobObject@16 |
| ZwSetInformationObject@16 |
| ZwSetInformationProcess@16 |
| ZwSetInformationThread@16 |
| ZwSetSecurityObject@12 |
| ZwSetSystemInformation@12 |
| ZwSetSystemTime@8 |
| ZwSetTimer@28 |
| ZwSetValueKey@24 |
| ;ZwSetVolumeInformationFile |
| ZwTerminateJobObject@8 |
| ZwTerminateProcess@8 |
| ;ZwTranslateFilePath |
| ZwUnloadDriver@4 |
| ZwUnloadKey@4 |
| ZwUnmapViewOfSection@8 |
| ;ZwWaitForMultipleObjects |
| ZwWaitForSingleObject@12 |
| ZwWriteFile@36 |
| ZwYieldExecution@0 |
| ;_CIcos |
| ;_CIsin |
| ;_CIsqrt |
| ;_abnormal_termination |
| ;_alldiv |
| ;_alldvrm |
| ;_allmul |
| ;_alloca_probe |
| ;_allrem |
| ;_allshl |
| ;_allshr |
| ;_aulldiv |
| ;_aulldvrm |
| ;_aullrem |
| ;_aullshr |
| ;_except_handler2 |
| ;_except_handler3 |
| ;_global_unwind2 |
| ;_itoa |
| ;_itow |
| ;_local_unwind2 |
| ;_purecall |
| _snprintf |
| _snwprintf |
| _stricmp |
| _strlwr |
| _strnicmp |
| _strnset |
| _strrev |
| _strset |
| _strupr |
| _vsnprintf |
| _vsnwprintf |
| _wcsicmp@8 |
| _wcslwr@4 |
| _wcsnicmp@12 |
| _wcsnset@12 |
| _wcsrev@4 |
| _wcsupr@4 |
| ;atoi |
| ;atol |
| ;isdigit |
| ;islower |
| ;isprint |
| ;isspace |
| ;isupper |
| ;isxdigit |
| ;mbstowcs |
| ;mbtowc |
| memchr |
| memcpy |
| memmove |
| memset |
| ;qsort |
| ;rand |
| sprintf |
| ;srand |
| strcat |
| strchr |
| strcmp |
| strcpy |
| strlen |
| strncat |
| strncmp |
| strncpy |
| strrchr |
| strspn |
| strstr |
| swprintf |
| ;tolower |
| ;toupper |
| ;towlower |
| ;towupper |
| ;vDbgPrintEx |
| ;vDbgPrintExWithPrefix |
| ;vsprintf |
| wcscat |
| wcschr |
| wcscmp |
| wcscpy |
| wcscspn |
| wcslen |
| wcsncat |
| wcsncmp |
| wcsncpy |
| wcsrchr |
| wcsspn |
| wcsstr |
| ;wcstombs |
| ;wctomb |
