3 ; ReactOS Operating System
8 CsrCaptureParameterBuffer@16
9 CsrReleaseParameterBuffer@4
10 CsrAllocateCaptureBuffer@12
11 CsrAllocateCapturePointer@12
12 CsrAllocateMessagePointer@12
13 CsrCaptureMessageBuffer@16
14 CsrCaptureMessageString@20
16 CsrClientCallServer@16
17 CsrClientConnectToServer@0
18 CsrFreeCaptureBuffer@4
19 CsrIdentifyAlertableThread@0
31 DbgUiIssueRemoteBreakin@4
33 DbgUiWaitStateChange@8
35 KiRaiseUserExceptionDispatcher
37 KiUserCallbackDispatcher
38 KiUserExceptionDispatcher
40 LdrDisableThreadCalloutsForDll@4
42 LdrFindEntryForAddress@8
43 LdrFindResourceDirectory_U@16
46 LdrGetProcedureAddress@16
49 ;LdrProcessRelocationBlock@16
50 LdrQueryImageFileExecutionOptions@24
51 LdrQueryProcessModuleInformation@12
55 LdrVerifyImageMatchesChecksum@16
58 NlsMbOemCodePageTag DATA
59 NtAcceptConnectPort@24
61 NtAccessCheckAndAuditAlarm@44
63 NtAdjustGroupsToken@24
64 NtAdjustPrivilegesToken@24
67 NtAllocateLocallyUniqueId@4
69 NtAllocateVirtualMemory@24
75 NtCloseObjectAuditAlarm@12
76 NtCompleteConnectPort@4
80 NtCreateDirectoryObject@12
84 NtCreateIoCompletion@16
86 NtCreateMailslotFile@32
88 NtCreateNamedPipeFile@56
95 NtCreateSymbolicLinkObject@16
99 NtCreateWaitablePort@20
104 NtDeleteObjectAuditAlarm@12
106 NtDeviceIoControlFile@40
111 NtEnumerateValueKey@24
115 NtFlushInstructionCache@12
117 NtFlushVirtualMemory@16
119 NtFreeVirtualMemory@16
122 NtGetPlugPlayEvent@16
124 NtImpersonateClientOfPort@8
125 NtImpersonateThread@12
126 NtInitializeRegistry@4
133 NtLockVirtualMemory@16
134 NtMakeTemporaryObject@4
135 NtMapViewOfSection@40
136 NtNotifyChangeDirectoryFile@36
139 NtOpenDirectoryObject@12
143 NtOpenIoCompletion@12
146 NtOpenObjectAuditAlarm@48
148 NtOpenProcessToken@12
151 NtOpenSymbolicLinkObject@12
157 NtPrivilegedServiceAuditAlarm@20
158 NtPrivilegeObjectAuditAlarm@24
159 NtProtectVirtualMemory@20
161 NtQueryAttributesFile@8
162 NtQueryDefaultLocale@8
163 NtQueryDirectoryFile@44
164 NtQueryDirectoryObject@28
167 NtQueryFullAttributesFile@8
168 NtQueryInformationAtom@20
169 NtQueryInformationFile@20
170 NtQueryInformationPort@20
171 NtQueryInformationProcess@20
172 NtQueryInformationThread@20
173 NtQueryInformationToken@20
174 NtQueryIoCompletion@20
175 NtQueryIntervalProfile@8
177 NtQueryMultipleValueKey@24
180 NtQueryOleDirectoryFile@44
181 NtQueryPerformanceCounter@8
183 NtQuerySecurityObject@20
185 NtQuerySymbolicLinkObject@12
186 NtQuerySystemEnvironmentValue@16
187 NtQuerySystemInformation@16
190 NtQueryTimerResolution@12
192 NtQueryVirtualMemory@24
193 NtQueryVolumeInformationFile@20
200 NtReadVirtualMemory@20
201 NtRegisterThreadTerminatePort@4
203 NtReleaseSemaphore@12
204 NtRemoveIoCompletion@20
207 NtReplyWaitReceivePort@16
208 NtReplyWaitReplyPort@8
209 NtReplyWaitSendChannel@12
211 NtRequestWaitReplyPort@12
216 NtSendWaitReplyChannel@16
217 NtSetContextChannel@4
219 NtSetDefaultHardErrorPort@4
224 NtSetHighWaitLowEventPair@4
225 NtSetHighWaitLowThread@0
226 NtSetInformationFile@20
227 NtSetInformationKey@16
228 NtSetInformationObject@16
229 NtSetInformationProcess@16
230 NtSetInformationThread@16
231 NtSetInformationToken@16
232 NtSetIntervalProfile@8
236 NtSetLowWaitHighEventPair@4
237 NtSetLowWaitHighThread@0
238 NtSetSecurityObject@12
239 NtSetSystemEnvironmentValue@8
240 NtSetSystemInformation@12
241 NtSetSystemPowerState@12
244 NtSetTimerResolution@12
246 NtSetVolumeInformationFile@20
248 NtSignalAndWaitForSingleObject@16
252 NtSystemDebugControl@24
259 NtUnlockVirtualMemory@16
260 NtUnmapViewOfSection@8
262 NtWaitForMultipleObjects@20
263 NtWaitForSingleObject@12
264 NtWaitHighEventPair@4
268 NtWriteRequestData@24
269 NtWriteVirtualMemory@20
276 ;PropertyLengthAsVariant
279 RtlAbsoluteToSelfRelativeSD@12
281 RtlAcquireResourceExclusive@8
282 RtlAcquireResourceShared@8
283 RtlAddAccessAllowedAce@16
284 RtlAddAccessDeniedAce@16
287 RtlAddAtomToAtomTable@12
288 ;RtlAddAttributeActionToRXact
289 RtlAddAuditAccessAce@24
291 RtlAdjustPrivilege@16
292 RtlAllocateAndInitializeSid@44
295 RtlAnsiCharToUnicodeChar@4
296 RtlAnsiStringToUnicodeSize@4
297 RtlAnsiStringToUnicodeString@12
298 RtlAppendAsciizToString@8
299 RtlAppendStringToString@8
300 RtlAppendUnicodeStringToString@8
301 RtlAppendUnicodeToString@8
303 ;RtlApplyRXactNoFlush
304 RtlAreAllAccessesGranted@8
305 RtlAreAnyAccessesGranted@8
309 RtlBaseProcessStartRoutine DATA
310 ;RtlCaptureStackBackTrace
312 RtlCheckRegistryKey@8
318 RtlCompareMemoryUlong@12
320 RtlCompareUnicodeString@12
322 ;RtlConsoleMultiByteToUnicodeN
323 RtlConvertExclusiveToShared@4
324 RtlConvertLongToLargeInteger@4
325 RtlConvertSharedToExclusive@4
326 RtlConvertSidToUnicodeString@12
327 ;RtlConvertUiListToApiList
328 RtlConvertUlongToLargeInteger@4
330 RtlCopyLuidAndAttributesArray@12
331 ;RtlCopySecurityDescriptor
333 RtlCopySidAndAttributesArray@28
335 RtlCopyUnicodeString@8
339 RtlCreateEnvironment@8
341 RtlCreateProcessParameters@40
342 ;RtlCreatePropertySet
343 RtlCreateQueryDebugBuffer@8
344 RtlCreateRegistryKey@8
345 RtlCreateSecurityDescriptor@8
347 RtlCreateUnicodeString@8
348 RtlCreateUnicodeStringFromAsciiz@8
349 RtlCreateUserProcess@40
350 ;RtlCreateUserSecurityObject
351 RtlCreateUserThread@40
352 RtlCustomCPToUnicodeN@24
353 ;RtlCutoverTimeToSystemTime
354 RtlDeNormalizeProcessParams@4
355 RtlDecompressBuffer@24
356 RtlDecompressFragment@32
359 RtlDeleteAtomFromAtomTable@8
360 RtlDeleteCriticalSection@4
361 RtlDeleteElementGenericTable@8
363 RtlDeleteRegistryValue@12
365 RtlDeleteSecurityObject@4
366 RtlDestroyAtomTable@4
367 RtlDestroyEnvironment@4
368 RtlDestroyHandleTable@4
370 RtlDestroyProcessParameters@4
371 RtlDestroyQueryDebugBuffer@4
372 RtlDetermineDosPathNameType_U@4
373 RtlDoesFileExists_U@4
374 RtlDosPathNameToNtPathName_U@16
375 RtlDosSearchPath_U@24
376 RtlDowncaseUnicodeString@12
379 RtlEnlargedIntegerMultiply@8
380 RtlEnlargedUnsignedDivide@16
381 RtlEnlargedUnsignedMultiply@8
382 RtlEnterCriticalSection@4
383 RtlEnumProcessHeaps@8
384 RtlEnumerateGenericTable@8
385 RtlEnumerateGenericTableWithoutSplaying@8
386 ;RtlEnumerateProperties
387 RtlEqualComputerName@8
393 RtlEqualUnicodeString@12
394 RtlEraseUnicodeString@4
396 RtlExpandEnvironmentStrings_U@16
398 RtlExtendedIntegerMultiply@12
399 RtlExtendedLargeIntegerDivide@16
400 RtlExtendedMagicDivide@20
402 RtlFillMemoryUlong@12
404 RtlFindClearBitsAndSet@12
405 RtlFindLongestRunClear@8
406 RtlFindLongestRunSet@8
409 RtlFindSetBitsAndClear@12
412 RtlFormatCurrentUserKeyPath@4
419 RtlFreeUnicodeString@4
420 RtlFreeUserThreadStack@8
421 RtlGenerate8dot3Name@16
423 RtlGetCallersAddress@4
424 RtlGetCompressionWorkSpaceSize@12
425 RtlGetControlSecurityDescriptor@12
426 RtlGetCurrentDirectory_U@8
427 RtlGetDaclSecurityDescriptor@16
428 RtlGetElementGenericTable@8
429 RtlGetFullPathName_U@16
430 RtlGetGroupSecurityDescriptor@12
431 RtlGetLongestNtPathLength@0
432 RtlGetNtGlobalFlags@0
433 RtlGetNtProductType@4
434 RtlGetNtVersionNumbers@12
435 RtlGetOwnerSecurityDescriptor@12
437 RtlGetSaclSecurityDescriptor@16
439 ;RtlGuidToPropertySetName
440 RtlIdentifierAuthoritySid@4
441 RtlImageDirectoryEntryToData@16
443 RtlImageRvaToSection@12
447 RtlInitCodePageTable@8
450 RtlInitUnicodeString@8
451 ;RtlInitializeAtomPackage
452 RtlInitializeBitMap@12
453 RtlInitializeContext@20
454 RtlInitializeCriticalSection@4
455 RtlInitializeGenericTable@20
456 RtlInitializeHandleTable@12
458 RtlInitializeResource@4
460 RtlInsertElementGenericTable@16
462 RtlIntegerToUnicodeString@12
463 RtlIsDosDeviceName_U@4
464 RtlIsGenericTableEmpty@4
465 RtlIsNameLegalDOS8Dot3@12
468 RtlIsValidIndexHandle@12
469 RtlLargeIntegerAdd@16
470 RtlLargeIntegerArithmeticShift@12
471 RtlLargeIntegerDivide@20
472 RtlLargeIntegerNegate@8
473 RtlLargeIntegerShiftLeft@12
474 RtlLargeIntegerShiftRight@12
475 RtlLargeIntegerSubtract@16
476 RtlLargeIntegerToChar@16
477 RtlLeaveCriticalSection@4
478 RtlLengthRequiredSid@4
479 RtlLengthSecurityDescriptor@4
481 RtlLocalTimeToSystemTime@8
483 RtlLookupAtomInAtomTable@12
484 RtlLookupElementGenericTable@8
485 RtlMakeSelfRelativeSD@12
488 RtlMultiByteToUnicodeN@20
489 RtlMultiByteToUnicodeSize@12
490 ;RtlNewInstanceSecurityObject
491 ;RtlNewSecurityGrantedAccess
492 RtlNewSecurityObject@24
493 RtlNormalizeProcessParams@4
494 RtlNtStatusToDosError@4
495 RtlNumberGenericTableElements@4
496 RtlNumberOfClearBits@4
498 RtlOemStringToUnicodeSize@4
499 RtlOemStringToUnicodeString@12
503 RtlPinAtomInAtomTable@8
505 RtlPrefixUnicodeString@12
506 ;RtlPropertySetNameToGuid
508 RtlQueryAtomInAtomTable@24
509 RtlQueryEnvironmentVariable_U@12
510 RtlQueryInformationAcl@16
511 ;RtlQueryProcessBackTraceInformation
512 RtlQueryProcessDebugInformation@12
513 ;RtlQueryProcessHeapInformation
514 ;RtlQueryProcessLockInformation
516 ;RtlQueryPropertyNames
518 RtlQueryRegistryValues@20
519 ;RtlQuerySecutityObject
521 RtlQueryTimeZoneInformation@4
531 RtlResetRtlTranslations@4
532 RtlRunDecodeUnicodeString@8
533 RtlRunEncodeUnicodeString@8
534 RtlSecondsSince1970ToTime@8
535 RtlSecondsSince1980ToTime@8
536 RtlSelfRelativeToAbsoluteSD@44
538 ;RtlSetAttributesSecurityDescriptor
540 RtlSetCurrentDirectory_U@4
541 RtlSetCurrentEnvironment@8
542 RtlSetDaclSecurityDescriptor@16
543 RtlSetEnvironmentVariable@12
544 RtlSetGroupSecurityDescriptor@12
545 RtlSetInformationAcl@16
546 RtlSetOwnerSecurityDescriptor@12
549 ;RtlSetPropertySetClassId
550 RtlSetSaclSecurityDescriptor@16
551 ;RtlSetSecurityObject
552 RtlSetTimeZoneInformation@4
553 ;RtlSetUnicodeCallouts
559 RtlSubAuthorityCountSid@4
561 RtlSubtreePredecessor@4
562 RtlSubtreeSuccessor@4
563 RtlSystemTimeToLocalTime@8
564 RtlTimeFieldsToTime@8
565 RtlTimeToElapsedTimeFields@8
566 RtlTimeToSecondsSince1970@8
567 RtlTimeToSecondsSince1980@8
568 RtlTimeToTimeFields@8
569 RtlTryEnterCriticalSection@4
570 RtlUnicodeStringToAnsiSize@4
571 RtlUnicodeStringToAnsiString@12
572 RtlUnicodeStringToCountedOemString@12
573 RtlUnicodeStringToInteger@12
574 RtlUnicodeStringToOemSize@4
575 RtlUnicodeStringToOemString@12
576 RtlUnicodeToCustomCPN@24
577 RtlUnicodeToMultiByteN@20
578 RtlUnicodeToMultiByteSize@12
583 RtlUpcaseUnicodeChar@4
584 RtlUpcaseUnicodeString@12
585 RtlUpcaseUnicodeStringToAnsiString@12
586 RtlUpcaseUnicodeStringToCountedOemString@12
587 RtlUpcaseUnicodeStringToOemString@12
588 RtlUpcaseUnicodeToCustomCPN@24
589 RtlUpcaseUnicodeToMultiByteN@20
590 RtlUpcaseUnicodeToOemN@20
595 RtlValidSecurityDescriptor@4
598 RtlValidateProcessHeaps@0
600 RtlWriteRegistryValue@24
604 RtlpNtEnumerateSubKey@16
605 RtlpNtMakeTemporaryKey@4
607 RtlpNtQueryValueKey@20
609 RtlpUnWaitCriticalSection@4
610 RtlpWaitForCriticalSection@4
611 RtlxAnsiStringToUnicodeSize@4
612 RtlxOemStringToUnicodeSize@4
613 RtlxUnicodeStringToAnsiSize@4
614 RtlxUnicodeStringToOemSize@4
616 ZwAcceptConnectPort@24
618 ZwAccessCheckAndAuditAlarm@44
620 ZwAdjustGroupsToken@24
621 ZwAdjustPrivilegesToken@24
622 ZwAlertResumeThread@8
624 ZwAllocateLocallyUniqueId@4
626 ZwAllocateVirtualMemory@24
632 ZwCloseObjectAuditAlarm@12
633 ZwCompleteConnectPort@4
637 ZwCreateDirectoryObject@12
641 ZwCreateIoCompletion@16
643 ZwCreateMailslotFile@32
645 ZwCreateNamedPipeFile@56
646 ZwCreatePagingFile@16
652 ZwCreateSymbolicLinkObject@16
660 ZwDeleteObjectAuditAlarm@12
662 ZwDeviceIoControlFile@40
667 ZwEnumerateValueKey@24
671 ZwFlushInstructionCache@12
673 ZwFlushVirtualMemory@16
675 ZwFreeVirtualMemory@16
678 ZwGetPlugPlayEvent@16
680 ZwImpersonateClientOfPort@8
681 ZwImpersonateThread@12
682 ZwInitializeRegistry@4
689 ZwLockVirtualMemory@16
690 ZwMakeTemporaryObject@4
691 ZwMapViewOfSection@40
692 ZwNotifyChangeDirectoryFile@36
695 ZwOpenDirectoryObject@12
699 ZwOpenIoCompletion@12
702 ZwOpenObjectAuditAlarm@48
704 ZwOpenProcessToken@12
707 ZwOpenSymbolicLinkObject@12
713 ZwPrivilegedServiceAuditAlarm@20
714 ZwPrivilegeObjectAuditAlarm@24
715 ZwProtectVirtualMemory@20
718 ZwQueryInformationAtom@20
719 ZwQueryAttributesFile@8
720 ZwQueryDefaultLocale@8
721 ZwQueryDirectoryFile@44
722 ZwQueryDirectoryObject@28
725 ZwQueryFullAttributesFile@8
726 ZwQueryInformationFile@20
727 ZwQueryInformationPort@20
728 ZwQueryInformationProcess@20
729 ZwQueryInformationThread@20
730 ZwQueryInformationToken@20
731 ZwQueryIntervalProfile@8
732 ZwQueryIoCompletion@20
734 ZwQueryMultipleValueKey@24
737 ZwQueryOleDirectoryFile@44
738 ZwQueryPerformanceCounter@8
740 ZwQuerySecurityObject@20
742 ZwQuerySymbolicLinkObject@12
743 ZwQuerySystemEnvironmentValue@16
744 ZwQuerySystemInformation@16
747 ZwQueryTimerResolution@12
749 ZwQueryVirtualMemory@24
750 ZwQueryVolumeInformationFile@20
756 ZwReadVirtualMemory@20
757 ZwRegisterThreadTerminatePort@4
759 ZwReleaseSemaphore@12
760 ZwRemoveIoCompletion@20
763 ZwReplyWaitReceivePort@16
764 ZwReplyWaitReplyPort@8
765 ZwReplyWaitSendChannel@12
767 ZwRequestWaitReplyPort@12
772 ZwSendWaitReplyChannel@16
773 ZwSetContextChannel@4
775 ZwSetDefaultHardErrorPort@4
780 ZwSetHighWaitLowEventPair@4
781 ZwSetHighWaitLowThread@0
782 ZwSetInformationFile@20
783 ZwSetInformationKey@16
784 ZwSetInformationObject@16
785 ZwSetInformationProcess@16
786 ZwSetInformationThread@16
787 ZwSetInformationToken@16
788 ZwSetIntervalProfile@8
792 ZwSetLowWaitHighEventPair@4
793 ZwSetLowWaitHighThread@0
794 ZwSetSecurityObject@12
795 ZwSetSystemEnvironmentValue@8
796 ZwSetSystemInformation@12
797 ZwSetSystemPowerState@12
800 ZwSetTimerResolution@12
802 ZwSetVolumeInformationFile@20
804 ZwSignalAndWaitForSingleObject@16
808 ZwSystemDebugControl@24
815 ZwUnlockVirtualMemory@16
816 ZwUnmapViewOfSection@8
818 ZwWaitForMultipleObjects@20
819 ZwWaitForSingleObject@12
820 ZwWaitHighEventPair@4
824 ZwWriteRequestData@24
825 ZwWriteVirtualMemory@20
947 InterlockedIncrement@4
948 InterlockedDecrement@4
949 InterlockedExchange@8
950 InterlockedCompareExchange@12
952 ;RtlIpv4StringToAddressW
953 ;?Allocate@CBufferAllocator@@UAEPAXK@Z
954 ;CsrCaptureMessageMultiUnicodeStringsInPlace
957 DbgPrintReturnControlC
958 DbgQueryDebugFilterState@8
959 DbgSetDebugFilterState@12
960 ;DbgUiConvertStateChangeStructure
961 DbgUiDebugActiveProcess@4
962 ;DbgUiGetThreadDebugObject
963 ;DbgUiSetThreadDebugObject
965 ;LdrAccessOutOfProcessResource
967 LdrAlternateResourcesEnabled@0
968 ;LdrCreateOutOfProcessImage
969 ;LdrDestroyOutOfProcessImage
970 ;LdrEnumerateLoadedModules
971 ;LdrFindCreateProcessManifest
973 LdrFlushAlternateResourceModules@0
975 ;LdrInitShimEngineDynamic
976 ;LdrLoadAlternateResourceModule
978 ;LdrSetAppCompatDllRedirectionCallback
979 ;LdrSetDllManifestProber
980 ;LdrUnloadAlternateResourceModule
981 LdrUnlockLoaderLock@8
983 NtAccessCheckByType@44
984 NtAccessCheckByTypeAndAuditAlarm@64
985 NtAccessCheckByTypeResultList@44
986 NtAccessCheckByTypeResultListAndAuditAlarm@64
987 NtAccessCheckByTypeResultListAndAuditAlarmByHandle@68
989 NtAllocateUserPhysicalPages@12
990 NtAreMappedFilesTheSame@8
991 ;NtAssignProcessToJobObject
992 NtCancelDeviceWakeupRequest@4
999 NtCreateKeyedEvent@16
1001 ;NtDebugActiveProcess
1004 ;NtEnumerateBootEntries
1005 ;NtEnumerateSystemEnvironmentValuesEx
1007 NtFreeUserPhysicalPages@12
1008 NtGetDevicePowerState@8
1010 NtImpersonateAnonymousToken@4
1011 NtInitiatePowerAction@16
1013 NtIsSystemResumeAutomatic@0
1014 NtLockProductActivationKeys@8
1016 NtMakePermanentObject@4
1017 NtMapUserPhysicalPages@12
1018 NtMapUserPhysicalPagesScatter@12
1020 NtNotifyChangeMultipleKeys@48
1023 NtOpenProcessTokenEx@16
1024 NtOpenThreadTokenEx@20
1025 NtPowerInformation@20
1026 ;NtQueryBootEntryOrder
1028 ;NtQueryDebugFilterState
1029 NtQueryDefaultUILanguage@4
1030 NtQueryInformationJobObject@20
1031 NtQueryInstallUILanguage@4
1032 NtQueryOpenSubKeys@8
1033 NtQueryPortInformationProcess@0
1034 ;NtQuerySystemEnvironmentValueEx
1035 NtReleaseKeyedEvent@16
1036 ;NtRemoveProcessDebug
1038 NtReplyWaitReceivePortEx@20
1039 NtRequestDeviceWakeup@4
1040 NtRequestWakeupLatency@4
1041 NtResetWriteWatch@12
1045 NtSecureConnectPort@36
1046 ;NtSetBootEntryOrder
1048 ;NtSetDebugFilterState
1049 NtSetDefaultUILanguage@4
1050 ;NtSetEventBoostPriority
1051 NtSetHighWaitLowThread@0
1052 ;NtSetInformationDebugObject
1053 NtSetInformationJobObject@16
1054 NtSetLowWaitHighThread@0
1055 NtSetQuotaInformationFile@16
1056 ;NtSetSystemEnvironmentValueEx
1057 NtSetThreadExecutionState@8
1060 NtTerminateJobObject@8
1062 ;NtTranslateFilePath
1064 ;NtWaitForDebugEvent
1065 NtWaitForKeyedEvent@16
1066 ;RtlActivateActivationContext
1067 ;RtlActivateActivationContextEx
1068 ;RtlActivateActivationContextUnsafeFast
1069 RtlAddAccessAllowedAceEx@20
1070 ;RtlAddAccessAllowedObjectAce
1071 RtlAddAccessDeniedAceEx@20
1072 ;RtlAddAccessDeniedObjectAce
1073 ;RtlAddAuditAccessAceEx
1074 ;RtlAddAuditAccessObjectAce
1076 RtlAddRefActivationContext@4
1077 ;RtlAddRefMemoryStream
1078 ;RtlAddVectoredExceptionHandler
1079 ;RtlAddressInSectionTable
1080 ;RtlAppendPathElement
1081 ;RtlApplicationVerifierStop
1085 ;RtlCaptureStackContext
1086 ;RtlCheckForOrphanedCriticalSections
1087 ;RtlCheckProcessParameters
1088 ;RtlCloneMemoryStream
1089 ;RtlCommitMemoryStream
1092 ;RtlComputeImportTableHash
1093 ;RtlComputePrivatizedDllName_U
1094 ;RtlConvertPropertyToVariant
1095 ;RtlConvertToAutoInheritSecurityObject
1096 ;RtlConvertVariantToProperty
1097 ;RtlCopyMemoryStreamTo
1098 ;RtlCopyOutOfProcessMemoryStreamTo
1100 ;RtlCreateActivationContext
1101 ;RtlCreateBootStatusDataFile
1102 ;RtlCreateSystemVolumeInformationFolder
1104 RtlCreateTimerQueue@4
1105 RtlDeactivateActivationContext@8
1106 ;RtlDeactivateActivationContextUnsafeFast
1109 ;RtlDeleteElementGenericTableAvl
1110 RtlDeleteOwnersRanges@8
1113 RtlDeleteTimerQueue@4
1114 RtlDeleteTimerQueueEx@8
1116 RtlDeregisterWaitEx@8
1117 RtlDllShutdownInProgress@0
1118 ;RtlDnsHostNameToComputerName
1119 ;RtlDosApplyFileIsolationRedirection_Ustr
1120 ;RtlDosSearchPath_Ustr
1121 RtlDowncaseUnicodeChar@4
1122 RtlDuplicateUnicodeString@12
1123 ;RtlEnableEarlyCriticalSectionEventCreation
1124 ;RtlEnumerateGenericTableAvl
1125 ;RtlEnumerateGenericTableLikeADirectory
1126 ;RtlEnumerateGenericTableWithoutSplayingAvl
1127 ;RtlFinalReleaseOutOfProcessMemoryStream
1128 ;RtlFindActivationContextSectionGuid
1129 ;RtlFindActivationContextSectionString
1130 RtlFindCharInUnicodeString@16
1132 RtlFindLastBackwardRunClear@12
1133 RtlFindLeastSignificantBit@8
1134 RtlFindMostSignificantBit@8
1135 RtlFindNextForwardRunClear@12
1138 ;RtlFlushSecureMemoryCache
1141 ;RtlFreeThreadActivationContextStack
1143 RtlGetActiveActivationContext@4
1145 ;RtlGetElementGenericTableAvl
1148 RtlGetLastNtStatus@0
1149 RtlGetLastWin32Error@0
1150 ;RtlGetLengthWithoutLastFullDosOrNtPathElement
1151 ;RtlGetLengthWithoutTrailingPathSeperators
1152 RtlGetNativeSystemInformation@16
1154 ;RtlGetSecurityDescriptorRMControl
1155 ;RtlGetSetBootStatusData
1157 RtlHashUnicodeString@16
1158 ;RtlInitMemoryStream
1159 ;RtlInitOutOfProcessMemoryStream
1160 RtlInitUnicodeStringEx@8
1161 RtlInitializeCriticalSectionAndSpinCount@8
1162 ;RtlInitializeGenericTableAvl
1163 RtlInitializeRangeList@4
1164 RtlInitializeSListHead@4
1165 ;RtlInsertElementGenericTableAvl
1166 RtlInt64ToUnicodeString@16
1167 RtlInterlockedFlushSList@4
1168 RtlInterlockedPopEntrySList@4
1169 RtlInterlockedPushEntrySList@8
1170 ;RtlInterlockedPushListSList
1171 RtlInvertRangeList@8
1172 ;RtlIpv4AddressToStringA
1173 ;RtlIpv4AddressToStringW
1174 ;RtlIpv4StringToAddressA
1175 ;RtlIpv6AddressToStringA
1176 ;RtlIpv6AddressToStringW
1177 ;RtlIpv6StringToAddressA
1178 ;RtlIpv6StringToAddressW
1179 ;RtlIsActivationContextActive
1180 ;RtlIsGenericTableEmptyAvl
1181 RtlIsRangeAvailable@40
1182 ;RtlIsThreadWithinLoaderCallout
1183 ;RtlLockBootStatusData
1184 ;RtlLockMemoryStreamRegion
1185 RtlLogStackBackTrace@0
1186 ;RtlLookupElementGenericTableAvl
1187 ;RtlMapSecurityErrorToNtStatus
1188 RtlMergeRangeLists@16
1189 ;RtlMultiAppendUnicodeStringBuffer
1190 ;RtlNewSecurityObjectEx
1191 ;RtlNewSecurityObjectWithMultipleInheritance
1192 ;RtlNtPathNameToDosPathName
1193 RtlNtStatusToDosErrorNoTeb@4
1194 ;RtlNumberGenericTableElementsAvl
1195 ;RtlOnMappedStreamEvent
1198 RtlQueryDepthSList@4
1199 RtlQueryHeapInformation@20
1200 RtlQueryInformationActivationContext@28
1201 ;RtlQueryInformationActiveActivationContext
1202 ;RtlQueryInterfaceMemoryStream
1203 ;RtlQueueApcWow64Thread
1206 ;RtlReadMemoryStream
1207 ;RtlReadOutOfProcessMemoryStream
1208 ;RtlRegisterSecureMemoryCacheCallback
1210 RtlReleaseActivationContext@4
1211 ;RtlReleaseMemoryStream
1212 ;RtlRemoveVectoredExceptionHandler
1213 RtlRestoreLastWin32Error@4
1214 ;RtlRevertMemoryStream
1215 ;RtlSeekMemoryStream
1216 ;RtlSelfRelativeToAbsoluteSD2
1217 ;RtlSetControlSecurityDescriptor
1218 RtlSetCriticalSectionSpinCount@4
1219 RtlSetHeapInformation@16
1220 RtlSetIoCompletionCallback@12
1221 RtlSetLastWin32Error@4
1222 RtlSetLastWin32ErrorAndNtStatusFromNtStatus@4
1223 ;RtlSetMemoryStreamSize
1224 ;RtlSetProcessIsCritical
1225 ;RtlSetSecurityDescriptorRMControl
1226 ;RtlSetSecurityObjectEx
1227 ;RtlSetThreadIsCritical
1228 ;RtlSetThreadPoolStartFunc
1230 ;RtlStatMemoryStream
1232 ;RtlTraceDatabaseAdd
1233 ;RtlTraceDatabaseCreate
1234 ;RtlTraceDatabaseDestroy
1235 ;RtlTraceDatabaseEnumerate
1236 ;RtlTraceDatabaseFind
1237 ;RtlTraceDatabaseLock
1238 ;RtlTraceDatabaseUnlock
1239 ;RtlTraceDatabaseValidate
1241 @RtlUlonglongByteSwap@8
1242 ;RtlUnhandledExceptionFilter
1243 ;RtlUnhandledExceptionFilter2
1244 ;RtlUnlockBootStatusData
1245 ;RtlUnlockMemoryStreamRegion
1247 @RtlUshortByteSwap@4
1248 RtlValidRelativeSecurityDescriptor@12
1249 ;RtlValidateUnicodeString
1250 RtlVerifyVersionInfo@16
1251 RtlWalkFrameChain@12
1252 ;RtlWriteMemoryStream
1253 RtlZombifyActivationContext@4
1254 ;RtlpApplyLengthFunction
1255 ;RtlpEnsureBufferSize
1256 ;RtlpNotOwnerCriticalSection
1257 VerSetConditionMask@16
1258 ZwAccessCheckByType@44
1259 ZwAccessCheckByTypeAndAuditAlarm@64
1260 ZwAccessCheckByTypeResultList@44
1261 ZwAccessCheckByTypeResultListAndAuditAlarm@64
1262 ZwAccessCheckByTypeResultListAndAuditAlarmByHandle@68
1264 ZwAllocateUserPhysicalPages@12
1265 ZwAreMappedFilesTheSame@8
1266 ZwAssignProcessToJobObject@8
1267 ZwCancelDeviceWakeupRequest@4
1271 ;ZwCreateDebugObject
1272 ZwCreateJobObject@12
1274 ZwCreateKeyedEvent@16
1276 ZwCreateWaitablePort@20
1277 ;ZwDebugActiveProcess
1280 ;ZwEnumerateBootEntries
1281 ;ZwEnumerateSystemEnvironmentValuesEx
1283 ZwFreeUserPhysicalPages@12
1284 ZwGetDevicePowerState@8
1286 ZwImpersonateAnonymousToken@4
1287 ZwInitiatePowerAction@16
1289 ZwIsSystemResumeAutomatic@0
1290 ZwLockProductActivationKeys@8
1292 ZwMakePermanentObject@4
1293 ZwMapUserPhysicalPages@12
1294 ZwMapUserPhysicalPagesScatter@12
1296 ZwNotifyChangeMultipleKeys@48
1299 ZwOpenProcessTokenEx@16
1300 ZwOpenThreadTokenEx@20
1301 ZwPowerInformation@20
1302 ;ZwQueryBootEntryOrder
1304 ;ZwQueryDebugFilterState
1305 ZwQueryDefaultUILanguage@4
1306 ZwQueryInformationJobObject@20
1307 ZwQueryInstallUILanguage@4
1308 ZwQueryOpenSubKeys@8
1309 ZwQueryPortInformationProcess@0
1310 ZwQueryQuotaInformationFile@36
1311 ;ZwQuerySystemEnvironmentValueEx
1312 ZwReleaseKeyedEvent@16
1313 ;ZwRemoveProcessDebug
1315 ZwReplyWaitReceivePortEx@20
1316 ZwRequestDeviceWakeup@4
1317 ZwRequestWakeupLatency@4
1318 ZwResetWriteWatch@12
1322 ZwSecureConnectPort@36
1323 ;ZwSetBootEntryOrder
1325 ;ZwSetDebugFilterState
1326 ZwSetDefaultUILanguage@4
1327 ;ZwSetEventBoostPriority
1328 ZwSetHighWaitLowThread@0
1329 ;ZwSetInformationDebugObject
1330 ZwSetInformationJobObject@16
1331 ZwSetLowWaitHighThread@0
1332 ZwSetQuotaInformationFile@16
1333 ;ZwSetSystemEnvironmentValueEx
1334 ZwSetThreadExecutionState@8
1337 ZwTerminateJobObject@8
1339 ;ZwTranslateFilePath
1341 ;ZwWaitForDebugEvent
1342 ZwWaitForKeyedEvent@16
1348 ;__eCommonExceptions
1470 vDbgPrintExWithPrefix