You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
854 lines
21 KiB
854 lines
21 KiB
EXPORTS
|
|
DbgUiConnectToDbg
|
|
DbgUiWaitStateChange
|
|
DbgUiContinue
|
|
DbgUiStopDebugging
|
|
DbgUiDebugActiveProcess
|
|
DbgUiGetThreadDebugObject
|
|
DbgUiSetThreadDebugObject
|
|
DbgUiRemoteBreakin
|
|
DbgUiIssueRemoteBreakin
|
|
DbgUiConvertStateChangeStructure
|
|
DbgBreakPoint
|
|
DbgPrint
|
|
DbgPrintEx
|
|
vDbgPrintEx
|
|
vDbgPrintExWithPrefix
|
|
DbgPrintReturnControlC
|
|
DbgPrompt
|
|
DbgUserBreakPoint
|
|
DbgSetDebugFilterState
|
|
DbgQueryDebugFilterState
|
|
KiUserApcDispatcher
|
|
KiUserCallbackDispatcher
|
|
KiUserExceptionDispatcher
|
|
KiRaiseUserExceptionDispatcher
|
|
LdrAccessResource
|
|
LdrEnumerateLoadedModules
|
|
LdrEnumResources
|
|
LdrFindEntryForAddress
|
|
LdrFindResource_U
|
|
LdrFindResourceEx_U
|
|
LdrFindResourceDirectory_U
|
|
LdrGetDllHandle
|
|
LdrGetDllHandleEx
|
|
#if defined(_X86_)
|
|
LdrHotPatchRoutine
|
|
#endif
|
|
LdrAddRefDll
|
|
LdrGetProcedureAddress
|
|
LdrInitializeThunk
|
|
LdrLoadDll
|
|
#if defined(_WIN64)
|
|
LdrProcessInitializationComplete = LdrpProcessInitializationComplete
|
|
#endif
|
|
LdrSetDllManifestProber
|
|
LdrLockLoaderLock
|
|
LdrSetAppCompatDllRedirectionCallback
|
|
LdrShutdownProcess
|
|
LdrShutdownThread
|
|
LdrUnloadDll
|
|
LdrUnlockLoaderLock
|
|
LdrDisableThreadCalloutsForDll
|
|
LdrInitShimEngineDynamic
|
|
NlsMbCodePageTag CONSTANT // Data - use pointer for access
|
|
NlsMbOemCodePageTag CONSTANT // Data - use pointer for access
|
|
NlsAnsiCodePage CONSTANT // Data - use pointer for access
|
|
PfxFindPrefix
|
|
PfxInitialize
|
|
PfxInsertPrefix
|
|
PfxRemovePrefix
|
|
RtlAbortRXact
|
|
RtlAbsoluteToSelfRelativeSD
|
|
RtlAcquirePebLock
|
|
RtlAcquireResourceExclusive
|
|
RtlAcquireResourceShared
|
|
RtlActivateActivationContextUnsafeFast
|
|
RtlAddAccessAllowedAce
|
|
RtlAddAccessAllowedAceEx
|
|
RtlAddAccessAllowedObjectAce
|
|
RtlAddAccessDeniedAce
|
|
RtlAddAccessDeniedAceEx
|
|
RtlAddAccessDeniedObjectAce
|
|
RtlAddCompoundAce
|
|
RtlAddAce
|
|
RtlAddActionToRXact
|
|
RtlAddAtomToAtomTable
|
|
RtlAddAttributeActionToRXact
|
|
RtlAddAuditAccessAce
|
|
RtlAddAuditAccessAceEx
|
|
RtlAddAuditAccessObjectAce
|
|
RtlAddressInSectionTable
|
|
RtlAdjustPrivilege
|
|
RtlAllocateAndInitializeSid
|
|
RtlAllocateHandle
|
|
RtlAllocateHeap
|
|
RtlAnsiCharToUnicodeChar
|
|
RtlAnsiStringToUnicodeSize=RtlxAnsiStringToUnicodeSize
|
|
RtlAnsiStringToUnicodeString
|
|
RtlAppendAsciizToString
|
|
RtlAppendStringToString
|
|
RtlAppendUnicodeToString
|
|
RtlAppendUnicodeStringToString
|
|
RtlApplicationVerifierStop
|
|
RtlApplyRXact
|
|
RtlApplyRXactNoFlush
|
|
RtlAreAllAccessesGranted
|
|
RtlAreAnyAccessesGranted
|
|
RtlAreBitsClear
|
|
RtlAreBitsSet
|
|
RtlAssert
|
|
RtlCharToInteger
|
|
RtlCheckForOrphanedCriticalSections
|
|
RtlCheckProcessParameters
|
|
RtlCheckRegistryKey
|
|
RtlClearAllBits
|
|
RtlClearBits
|
|
RtlCompactHeap
|
|
RtlCompareMemory
|
|
RtlCompareMemoryUlong
|
|
RtlCompareString
|
|
RtlCompareUnicodeString
|
|
RtlCompressBuffer
|
|
RtlComputeCrc32
|
|
RtlComputeImportTableHash
|
|
RtlConvertExclusiveToShared
|
|
#if !defined(_WIN64)
|
|
RtlConvertLongToLargeInteger = __RtlConvertLongToLargeInteger
|
|
RtlConvertUlongToLargeInteger = __RtlConvertUlongToLargeInteger
|
|
#endif
|
|
RtlConvertSharedToExclusive
|
|
RtlConvertSidToUnicodeString
|
|
RtlConvertUiListToApiList
|
|
RtlConvertToAutoInheritSecurityObject
|
|
RtlCopyLuid
|
|
RtlCopyLuidAndAttributesArray
|
|
RtlCopyMappedMemory
|
|
RtlCopySecurityDescriptor
|
|
RtlCopySid
|
|
RtlCopySidAndAttributesArray
|
|
RtlCopyString
|
|
RtlCopyUnicodeString
|
|
RtlCreateAcl
|
|
RtlCreateAndSetSD
|
|
RtlCreateAtomTable
|
|
RtlCreateEnvironment
|
|
RtlCreateHeap
|
|
RtlCreateProcessParameters
|
|
RtlCreateRegistryKey
|
|
RtlCreateSecurityDescriptor
|
|
RtlCreateUnicodeString
|
|
RtlCreateUnicodeStringFromAsciiz
|
|
RtlCreateUserProcess
|
|
RtlCreateUserSecurityObject
|
|
RtlCreateUserThread
|
|
RtlExitUserThread
|
|
RtlDeactivateActivationContextUnsafeFast
|
|
RtlDecompressBuffer
|
|
RtlDecompressFragment
|
|
RtlDefaultNpAcl
|
|
RtlDelete
|
|
RtlDeleteNoSplay
|
|
RtlDeleteAce
|
|
RtlDeleteAtomFromAtomTable
|
|
RtlDeleteCriticalSection
|
|
RtlDeleteElementGenericTable
|
|
RtlDeleteElementGenericTableAvl
|
|
RtlDeleteRegistryValue
|
|
RtlDeleteResource
|
|
RtlDeleteSecurityObject
|
|
RtlDeNormalizeProcessParams
|
|
RtlDestroyAtomTable
|
|
RtlDestroyEnvironment
|
|
RtlDestroyHandleTable
|
|
RtlDestroyHeap
|
|
RtlDestroyProcessParameters
|
|
RtlDetermineDosPathNameType_U
|
|
RtlDllShutdownInProgress
|
|
RtlDoesFileExists_U
|
|
RtlDosPathNameToNtPathName_U
|
|
RtlDosPathNameToRelativeNtPathName_U
|
|
RtlNtPathNameToDosPathName
|
|
RtlDosSearchPath_U
|
|
RtlDosSearchPath_Ustr
|
|
RtlDowncaseUnicodeChar
|
|
RtlDowncaseUnicodeString
|
|
RtlDumpResource
|
|
RtlDuplicateUnicodeString
|
|
RtlEmptyAtomTable
|
|
RtlEnableEarlyCriticalSectionEventCreation
|
|
#ifndef _WIN64
|
|
RtlEnlargedIntegerMultiply = _RtlEnlargedIntegerMultiply
|
|
RtlEnlargedUnsignedMultiply = _RtlEnlargedUnsignedMultiply
|
|
RtlEnlargedUnsignedDivide = _RtlEnlargedUnsignedDivide
|
|
#endif
|
|
RtlEnterCriticalSection
|
|
RtlEnumerateGenericTable
|
|
RtlEnumerateGenericTableAvl
|
|
RtlEnumerateGenericTableLikeADirectory
|
|
RtlEnumerateGenericTableWithoutSplaying
|
|
RtlEnumerateGenericTableWithoutSplayingAvl
|
|
RtlEnumProcessHeaps
|
|
RtlEqualComputerName
|
|
RtlEqualDomainName
|
|
RtlEqualLuid
|
|
RtlEqualPrefixSid
|
|
RtlEqualSid
|
|
RtlEqualString
|
|
RtlEqualUnicodeString
|
|
RtlEraseUnicodeString
|
|
|
|
#if !defined(_WIN64)
|
|
|
|
RtlExtendedIntegerMultiply
|
|
RtlExtendedLargeIntegerDivide
|
|
|
|
#endif
|
|
|
|
#if defined(_X86_) || defined(_IA64_)
|
|
|
|
RtlExtendedMagicDivide
|
|
|
|
#endif
|
|
|
|
RtlExpandEnvironmentStrings_U
|
|
RtlFillMemory
|
|
|
|
#if !defined(_AMD64_)
|
|
|
|
RtlFillMemoryUlong
|
|
|
|
#endif
|
|
|
|
RtlFindCharInUnicodeString
|
|
RtlFindClearBits
|
|
RtlFindClearBitsAndSet
|
|
RtlFindClearRuns
|
|
RtlFindLongestRunClear
|
|
RtlFindLastBackwardRunClear
|
|
RtlFindNextForwardRunClear
|
|
RtlFindMessage
|
|
RtlFindSetBits
|
|
RtlFindSetBitsAndClear
|
|
RtlFirstFreeAce
|
|
RtlFormatMessage
|
|
RtlFormatCurrentUserKeyPath
|
|
RtlFreeAnsiString
|
|
RtlFreeHandle
|
|
RtlFreeHeap
|
|
RtlFreeOemString
|
|
RtlFreeSid
|
|
RtlFreeUnicodeString
|
|
RtlFreeUserThreadStack
|
|
RtlGenerate8dot3Name
|
|
RtlGetAce
|
|
RtlGetCompressionWorkSpaceSize
|
|
RtlGetControlSecurityDescriptor
|
|
RtlSetControlSecurityDescriptor
|
|
RtlSetAttributesSecurityDescriptor
|
|
RtlSetEnvironmentStrings
|
|
RtlGetCurrentDirectory_U
|
|
RtlGetDaclSecurityDescriptor
|
|
RtlGetElementGenericTable
|
|
RtlGetElementGenericTableAvl
|
|
RtlGetFrame
|
|
#if defined(BUILD_WOW6432)
|
|
RtlGetNativeSystemInformation = NtWow64GetNativeSystemInformation
|
|
NtWow64QueryInformationProcess64
|
|
NtWow64ReadVirtualMemory64
|
|
#else
|
|
RtlGetNativeSystemInformation = NtQuerySystemInformation
|
|
#endif
|
|
RtlGetNtVersionNumbers
|
|
RtlGUIDFromString
|
|
RtlGetFullPathName_U
|
|
RtlGetFullPathName_UstrEx
|
|
RtlGetGroupSecurityDescriptor
|
|
RtlGetLastNtStatus
|
|
RtlGetLastWin32Error
|
|
RtlGetLongestNtPathLength
|
|
RtlGetUserInfoHeap
|
|
RtlGetUnloadEventTrace
|
|
RtlGetNtGlobalFlags
|
|
RtlGetNtProductType
|
|
RtlGetOwnerSecurityDescriptor
|
|
RtlGetSaclSecurityDescriptor
|
|
RtlGetSecurityDescriptorRMControl
|
|
RtlGetThreadErrorMode
|
|
RtlGetVersion
|
|
RtlIdentifierAuthoritySid
|
|
RtlImageDirectoryEntryToData
|
|
RtlImageNtHeader
|
|
RtlImageNtHeaderEx
|
|
RtlImageRvaToSection
|
|
RtlImageRvaToVa
|
|
RtlImpersonateSelf
|
|
RtlInitAnsiString
|
|
RtlInitAnsiStringEx
|
|
RtlInitializeAtomPackage
|
|
RtlInitializeBitMap
|
|
RtlInitializeContext
|
|
RtlInitializeCriticalSection
|
|
RtlInitializeCriticalSectionAndSpinCount
|
|
RtlSetCriticalSectionSpinCount
|
|
RtlInitializeGenericTable
|
|
RtlInitializeGenericTableAvl
|
|
RtlInitializeHandleTable
|
|
RtlInitializeResource
|
|
RtlInitializeRXact
|
|
RtlInitializeSid
|
|
RtlInitializeSListHead
|
|
RtlInitString
|
|
RtlInitUnicodeString
|
|
RtlInitUnicodeStringEx
|
|
RtlInsertElementGenericTable
|
|
RtlInsertElementGenericTableAvl
|
|
RtlInsertElementGenericTableFull
|
|
RtlInsertElementGenericTableFullAvl
|
|
RtlIntegerToChar
|
|
RtlIntegerToUnicodeString
|
|
RtlInterlockedFlushSList
|
|
RtlInterlockedPopEntrySList
|
|
RtlInterlockedPushEntrySList
|
|
RtlQueryDepthSList
|
|
RtlInterlockedPushListSList=InterlockedPushListSList
|
|
RtlFirstEntrySList=FirstEntrySList
|
|
#if !defined(_WIN64)
|
|
RtlInterlockedCompareExchange64=InterlockedCompareExchange64
|
|
#endif
|
|
RtlInt64ToUnicodeString
|
|
RtlIpv4AddressToStringA
|
|
RtlIpv4AddressToStringW
|
|
RtlIpv4AddressToStringExA
|
|
RtlIpv4AddressToStringExW
|
|
RtlIpv4StringToAddressA
|
|
RtlIpv4StringToAddressW
|
|
RtlIpv4StringToAddressExA
|
|
RtlIpv4StringToAddressExW
|
|
RtlIpv6AddressToStringA
|
|
RtlIpv6AddressToStringW
|
|
RtlIpv6AddressToStringExA
|
|
RtlIpv6AddressToStringExW
|
|
RtlIpv6StringToAddressA
|
|
RtlIpv6StringToAddressW
|
|
RtlIpv6StringToAddressExA
|
|
RtlIpv6StringToAddressExW
|
|
RtlIsDosDeviceName_U
|
|
RtlIsGenericTableEmpty
|
|
RtlIsGenericTableEmptyAvl
|
|
RtlIsNameLegalDOS8Dot3
|
|
RtlIsValidHandle
|
|
RtlIsValidIndexHandle
|
|
#if !defined(_WIN64)
|
|
RtlLargeIntegerAdd
|
|
RtlLargeIntegerArithmeticShift
|
|
RtlLargeIntegerDivide
|
|
RtlLargeIntegerNegate
|
|
RtlLargeIntegerShiftLeft
|
|
RtlLargeIntegerShiftRight
|
|
RtlLargeIntegerSubtract
|
|
#endif
|
|
RtlLargeIntegerToChar
|
|
RtlLeaveCriticalSection
|
|
RtlLengthRequiredSid
|
|
RtlLengthSecurityDescriptor
|
|
RtlLengthSid
|
|
RtlLockHeap
|
|
RtlLookupAtomInAtomTable
|
|
RtlLookupElementGenericTable
|
|
RtlLookupElementGenericTableAvl
|
|
RtlLookupElementGenericTableFull
|
|
RtlLookupElementGenericTableFullAvl
|
|
RtlMakeSelfRelativeSD
|
|
RtlMapGenericMask
|
|
RtlMapSecurityErrorToNtStatus
|
|
#if !defined(_M_IA64)
|
|
RtlMoveMemory
|
|
#endif
|
|
RtlConsoleMultiByteToUnicodeN
|
|
RtlMultiByteToUnicodeN
|
|
RtlMultiByteToUnicodeSize
|
|
RtlMultipleAllocateHeap
|
|
RtlMultipleFreeHeap
|
|
RtlNewInstanceSecurityObject
|
|
RtlNewSecurityGrantedAccess
|
|
RtlNewSecurityObject
|
|
RtlNewSecurityObjectEx
|
|
RtlNewSecurityObjectWithMultipleInheritance
|
|
RtlNormalizeProcessParams
|
|
RtlNtStatusToDosError
|
|
RtlNtStatusToDosErrorNoTeb
|
|
RtlNumberGenericTableElements
|
|
RtlNumberGenericTableElementsAvl
|
|
RtlNumberOfClearBits
|
|
RtlNumberOfSetBits
|
|
RtlOemStringToUnicodeSize=RtlxOemStringToUnicodeSize
|
|
RtlOemStringToUnicodeString
|
|
RtlOemToUnicodeN
|
|
RtlOpenCurrentUser
|
|
RtlPcToFileHeader
|
|
RtlpNtCreateKey
|
|
RtlpNtEnumerateSubKey
|
|
RtlpNtMakeTemporaryKey
|
|
RtlpNtOpenKey
|
|
RtlpNtQueryValueKey
|
|
RtlpNtSetValueKey
|
|
RtlPinAtomInAtomTable
|
|
RtlPopFrame
|
|
RtlPrefixString
|
|
RtlPrefixUnicodeString
|
|
RtlPushFrame
|
|
RtlQueueApcWow64Thread
|
|
RtlQueryAtomInAtomTable
|
|
RtlQueryEnvironmentVariable_U
|
|
RtlQueryHeapInformation
|
|
RtlQueryInformationAcl
|
|
RtlQueryRegistryValues
|
|
RtlQuerySecurityObject
|
|
RtlQueryTimeZoneInformation
|
|
RtlRaiseException
|
|
RtlRaiseStatus
|
|
RtlRandom
|
|
RtlRandomEx
|
|
RtlReAllocateHeap
|
|
RtlRealPredecessor
|
|
RtlRealSuccessor
|
|
RtlReleasePebLock
|
|
RtlReleaseRelativeName
|
|
RtlReleaseResource
|
|
RtlRemoteCall
|
|
RtlRestoreLastWin32Error
|
|
RtlRunDecodeUnicodeString
|
|
RtlRunEncodeUnicodeString
|
|
RtlSecondsSince1970ToTime
|
|
RtlSecondsSince1980ToTime
|
|
RtlSelfRelativeToAbsoluteSD
|
|
RtlSelfRelativeToAbsoluteSD2
|
|
RtlSetAllBits
|
|
RtlSetBits
|
|
RtlSetCurrentDirectory_U
|
|
RtlSetCurrentEnvironment
|
|
RtlSetDaclSecurityDescriptor
|
|
RtlSetEnvironmentVariable
|
|
RtlSetGroupSecurityDescriptor
|
|
RtlSetHeapInformation
|
|
RtlSetLastWin32Error
|
|
RtlSetLastWin32ErrorAndNtStatusFromNtStatus
|
|
RtlSetUserValueHeap
|
|
RtlSetUserFlagsHeap
|
|
RtlSetInformationAcl
|
|
RtlSetOwnerSecurityDescriptor
|
|
RtlSetProcessIsCritical
|
|
RtlSetSaclSecurityDescriptor
|
|
RtlSetSecurityDescriptorRMControl
|
|
RtlSetSecurityObject
|
|
RtlSetSecurityObjectEx
|
|
RtlSetThreadErrorMode
|
|
RtlSetThreadIsCritical
|
|
RtlSetTimeZoneInformation
|
|
RtlSizeHeap
|
|
RtlSplay
|
|
RtlStartRXact
|
|
RtlStringFromGUID
|
|
RtlSubAuthorityCountSid
|
|
RtlSubAuthoritySid
|
|
RtlSubtreePredecessor
|
|
RtlSubtreeSuccessor
|
|
RtlTimeToElapsedTimeFields
|
|
RtlTimeFieldsToTime
|
|
RtlTimeToSecondsSince1970
|
|
RtlTimeToSecondsSince1980
|
|
RtlTimeToTimeFields
|
|
RtlTraceDatabaseCreate
|
|
RtlTraceDatabaseDestroy
|
|
RtlTraceDatabaseValidate
|
|
RtlTraceDatabaseAdd
|
|
RtlTraceDatabaseFind
|
|
RtlTraceDatabaseEnumerate
|
|
RtlTraceDatabaseLock
|
|
RtlTraceDatabaseUnlock
|
|
RtlTryEnterCriticalSection
|
|
RtlUnhandledExceptionFilter
|
|
RtlUnhandledExceptionFilter2
|
|
RtlUnicodeStringToAnsiSize=RtlxUnicodeStringToAnsiSize
|
|
RtlUnicodeStringToAnsiString
|
|
RtlUnicodeStringToInteger
|
|
RtlUnicodeStringToOemSize=RtlxUnicodeStringToOemSize
|
|
RtlUnicodeStringToOemString
|
|
RtlUnicodeStringToCountedOemString
|
|
RtlUnicodeToMultiByteN
|
|
RtlUnicodeToOemN
|
|
RtlUnicodeToMultiByteSize
|
|
RtlUniform
|
|
RtlUnlockHeap
|
|
RtlUnwind
|
|
RtlUpcaseUnicodeChar
|
|
RtlUpcaseUnicodeString
|
|
RtlUpcaseUnicodeStringToAnsiString
|
|
RtlUpcaseUnicodeStringToOemString
|
|
RtlUpcaseUnicodeStringToCountedOemString
|
|
RtlUpcaseUnicodeToMultiByteN
|
|
RtlUpcaseUnicodeToOemN
|
|
RtlUpperChar
|
|
RtlUpperString
|
|
RtlValidAcl
|
|
RtlValidateUnicodeString
|
|
RtlValidSecurityDescriptor
|
|
RtlValidRelativeSecurityDescriptor
|
|
RtlValidSid
|
|
RtlVerifyVersionInfo
|
|
RtlWalkFrameChain
|
|
RtlWalkHeap
|
|
RtlWow64EnableFsRedirection = RtlpWow64EnableFsRedirection
|
|
RtlWriteRegistryValue
|
|
RtlxAnsiStringToUnicodeSize
|
|
RtlxOemStringToUnicodeSize
|
|
RtlxUnicodeStringToAnsiSize
|
|
RtlxUnicodeStringToOemSize
|
|
RtlZeroHeap
|
|
RtlZeroMemory
|
|
RtlSystemTimeToLocalTime
|
|
RtlLocalTimeToSystemTime
|
|
//
|
|
// #if BUILD_WOW6432, Csr functions are in ntdll\wow6432\wow64csr.c.
|
|
//
|
|
CsrClientConnectToServer
|
|
CsrClientCallServer
|
|
CsrAllocateCaptureBuffer
|
|
CsrFreeCaptureBuffer
|
|
CsrAllocateMessagePointer
|
|
CsrCaptureMessageBuffer
|
|
CsrCaptureMessageString
|
|
CsrCaptureMessageMultiUnicodeStringsInPlace
|
|
CsrCaptureTimeout
|
|
CsrProbeForWrite
|
|
CsrProbeForRead
|
|
CsrNewThread
|
|
CsrIdentifyAlertableThread
|
|
CsrSetPriorityClass
|
|
CsrGetProcessId
|
|
RtlCutoverTimeToSystemTime
|
|
RtlExtendHeap
|
|
RtlUsageHeap
|
|
RtlCreateTagHeap
|
|
RtlQueryTagHeap
|
|
RtlGetProcessHeaps
|
|
RtlCreateQueryDebugBuffer
|
|
RtlDestroyQueryDebugBuffer
|
|
RtlQueryProcessDebugInformation
|
|
RtlFlushSecureMemoryCache
|
|
RtlRegisterSecureMemoryCacheCallback
|
|
|
|
atan
|
|
tan
|
|
sin
|
|
cos
|
|
ceil
|
|
floor
|
|
log
|
|
pow
|
|
sqrt
|
|
abs
|
|
fabs
|
|
labs
|
|
|
|
RtlpNotOwnerCriticalSection
|
|
RtlpWaitForCriticalSection
|
|
RtlpUnWaitCriticalSection
|
|
|
|
RtlIsTextUnicode
|
|
|
|
RtlGetCallersAddress
|
|
#if i386
|
|
RtlCaptureStackContext
|
|
#endif // i386
|
|
RtlLogStackBackTrace
|
|
RtlCaptureContext
|
|
RtlCaptureStackBackTrace
|
|
RtlValidateHeap
|
|
RtlValidateProcessHeaps
|
|
RtlQueryProcessLockInformation
|
|
RtlQueryProcessBackTraceInformation
|
|
RtlQueryProcessHeapInformation
|
|
LdrQueryProcessModuleInformation
|
|
LdrQueryImageFileExecutionOptions
|
|
LdrQueryImageFileExecutionOptionsEx
|
|
LdrLockLoaderLock
|
|
LdrUnlockLoaderLock
|
|
|
|
RtlInitNlsTables
|
|
RtlResetRtlTranslations
|
|
RtlCustomCPToUnicodeN
|
|
RtlUnicodeToCustomCPN
|
|
RtlUpcaseUnicodeToCustomCPN
|
|
RtlInitCodePageTable
|
|
LdrProcessRelocationBlock
|
|
LdrVerifyImageMatchesChecksum
|
|
VerSetConditionMask
|
|
|
|
RtlAddVectoredExceptionHandler
|
|
RtlRemoveVectoredExceptionHandler
|
|
|
|
strlen
|
|
strcpy
|
|
strstr
|
|
strchr
|
|
strrchr
|
|
strspn
|
|
strcspn
|
|
strpbrk
|
|
strcat
|
|
strcmp
|
|
strncmp
|
|
strncat
|
|
strncpy
|
|
strtol
|
|
strtoul
|
|
_strlwr
|
|
_stricmp
|
|
_strnicmp
|
|
_strcmpi = _stricmp
|
|
_strupr
|
|
toupper
|
|
tolower
|
|
towlower
|
|
towupper
|
|
wcslen
|
|
wcscpy
|
|
wcsstr
|
|
wcschr
|
|
wcstol
|
|
wcstoul
|
|
_wcstoui64
|
|
wcsrchr
|
|
wcscspn
|
|
wcspbrk
|
|
wcscat
|
|
wcscmp
|
|
wcsspn
|
|
wcsncmp
|
|
wcsncat
|
|
wcsncpy
|
|
_wcsupr
|
|
_wcslwr
|
|
_wcsicmp
|
|
_wcsnicmp
|
|
_memccpy
|
|
mbstowcs
|
|
wcstombs
|
|
memchr
|
|
memcmp
|
|
#if defined(_IA64_)
|
|
memset PRIVATE
|
|
memcpy PRIVATE
|
|
memmove PRIVATE
|
|
#else
|
|
memset
|
|
memcpy
|
|
memmove
|
|
#endif
|
|
_memicmp
|
|
sprintf
|
|
_snprintf
|
|
swprintf
|
|
_snwprintf
|
|
vsprintf
|
|
_vsnprintf
|
|
_vscwprintf
|
|
sscanf
|
|
qsort
|
|
atol
|
|
_wtol
|
|
atoi
|
|
_wtoi
|
|
_atoi64
|
|
_wtoi64
|
|
_itoa
|
|
_itow
|
|
_i64toa
|
|
_i64tow
|
|
_ltoa
|
|
_ltow
|
|
_ultoa
|
|
_ui64toa
|
|
_ultow
|
|
_splitpath
|
|
isupper
|
|
islower
|
|
isdigit
|
|
isalpha
|
|
isxdigit
|
|
isspace
|
|
ispunct
|
|
isalnum
|
|
isprint
|
|
isgraph
|
|
iscntrl
|
|
toupper
|
|
tolower
|
|
_tolower
|
|
_toupper
|
|
__isascii
|
|
__toascii
|
|
__iscsymf
|
|
__iscsym
|
|
bsearch
|
|
_ui64tow
|
|
_lfind
|
|
_vsnwprintf
|
|
|
|
iswalpha
|
|
iswctype
|
|
iswxdigit
|
|
iswdigit
|
|
iswspace
|
|
iswlower
|
|
_fltused CONSTANT
|
|
|
|
RtlProtectHeap
|
|
|
|
RtlSetUnicodeCallouts
|
|
|
|
RtlConvertVariantToProperty
|
|
RtlConvertPropertyToVariant
|
|
PropertyLengthAsVariant
|
|
|
|
RtlRegisterWait
|
|
RtlDeregisterWait
|
|
RtlDeregisterWaitEx
|
|
RtlQueueWorkItem
|
|
RtlCreateTimerQueue
|
|
RtlCreateTimer
|
|
RtlUpdateTimer
|
|
RtlDeleteTimer
|
|
RtlDeleteTimerQueue
|
|
RtlDeleteTimerQueueEx
|
|
RtlSetThreadPoolStartFunc
|
|
RtlSetIoCompletionCallback
|
|
//RtlThreadPoolCleanup
|
|
RtlDebugPrintTimes
|
|
RtlSetTimer
|
|
RtlCancelTimer
|
|
|
|
RtlDnsHostNameToComputerName
|
|
|
|
LdrLoadAlternateResourceModule
|
|
LdrUnloadAlternateResourceModule
|
|
LdrAlternateResourcesEnabled
|
|
LdrFlushAlternateResourceModules
|
|
|
|
#if !defined(_AMD64_)
|
|
|
|
RtlUshortByteSwap
|
|
RtlUlongByteSwap
|
|
RtlUlonglongByteSwap
|
|
|
|
#endif
|
|
|
|
RtlFindLeastSignificantBit
|
|
RtlFindMostSignificantBit
|
|
|
|
RtlCreateActivationContext
|
|
RtlAddRefActivationContext
|
|
RtlReleaseActivationContext
|
|
RtlZombifyActivationContext
|
|
|
|
RtlActivateActivationContext
|
|
RtlActivateActivationContextEx
|
|
RtlDeactivateActivationContext
|
|
|
|
RtlDosApplyFileIsolationRedirection_Ustr
|
|
RtlFindActivationContextSectionGuid
|
|
RtlFindActivationContextSectionString
|
|
RtlFreeThreadActivationContextStack
|
|
RtlGetActiveActivationContext
|
|
RtlIsActivationContextActive
|
|
RtlQueryInformationActiveActivationContext
|
|
RtlQueryInformationActivationContext
|
|
|
|
RtlHashUnicodeString
|
|
|
|
RtlGetCurrentPeb
|
|
RtlComputePrivatizedDllName_U
|
|
|
|
#if !defined(BUILD_WOW6432) // Nonnative binaries get thunked before ever needing these.
|
|
|
|
RtlInitMemoryStream
|
|
RtlAddRefMemoryStream
|
|
RtlReleaseMemoryStream
|
|
RtlQueryInterfaceMemoryStream
|
|
RtlReadMemoryStream
|
|
RtlWriteMemoryStream
|
|
RtlSeekMemoryStream
|
|
RtlSetMemoryStreamSize
|
|
RtlCopyMemoryStreamTo
|
|
RtlCommitMemoryStream
|
|
RtlRevertMemoryStream
|
|
RtlLockMemoryStreamRegion
|
|
RtlUnlockMemoryStreamRegion
|
|
RtlStatMemoryStream
|
|
RtlCloneMemoryStream
|
|
|
|
RtlInitOutOfProcessMemoryStream
|
|
RtlFinalReleaseOutOfProcessMemoryStream
|
|
RtlReadOutOfProcessMemoryStream
|
|
RtlCopyOutOfProcessMemoryStreamTo
|
|
|
|
RtlCreateSystemVolumeInformationFolder
|
|
|
|
#endif // BUILD_WOW6432
|
|
|
|
LdrCreateOutOfProcessImage
|
|
LdrFindCreateProcessManifest
|
|
LdrAccessOutOfProcessResource
|
|
LdrDestroyOutOfProcessImage
|
|
|
|
RtlMultiAppendUnicodeStringBuffer
|
|
RtlpEnsureBufferSize
|
|
RtlAppendPathElement
|
|
RtlGetLengthWithoutLastFullDosOrNtPathElement
|
|
RtlGetLengthWithoutTrailingPathSeperators
|
|
RtlpApplyLengthFunction
|
|
|
|
RtlLockBootStatusData
|
|
RtlGetSetBootStatusData
|
|
RtlUnlockBootStatusData
|
|
RtlCreateBootStatusDataFile
|
|
|
|
RtlIsThreadWithinLoaderCallout
|
|
|
|
EtwStartTraceA
|
|
EtwStartTraceW
|
|
EtwStopTraceA
|
|
EtwStopTraceW
|
|
EtwQueryTraceA
|
|
EtwQueryTraceW
|
|
EtwUpdateTraceA
|
|
EtwUpdateTraceW
|
|
EtwFlushTraceA
|
|
EtwFlushTraceW
|
|
EtwControlTraceA
|
|
EtwControlTraceW
|
|
EtwQueryAllTracesA
|
|
EtwQueryAllTracesW
|
|
EtwGetTraceLoggerHandle
|
|
EtwGetTraceEnableLevel
|
|
EtwGetTraceEnableFlags
|
|
EtwCreateTraceInstanceId
|
|
EtwEnableTrace
|
|
EtwEnumerateTraceGuids
|
|
EtwRegisterTraceGuidsA
|
|
EtwRegisterTraceGuidsW
|
|
EtwTraceEvent
|
|
EtwTraceEventInstance
|
|
EtwTraceMessage
|
|
EtwTraceMessageVa
|
|
EtwUnregisterTraceGuids
|
|
EtwNotificationRegistrationA
|
|
EtwNotificationRegistrationW
|
|
EtwReceiveNotificationsA
|
|
EtwReceiveNotificationsW
|
|
EtwpGetTraceBuffer
|
|
EtwpSetHWConfigFunction
|
|
|
|
NtGetTickCount = RtlGetTickCount
|