From e611b132f9b8abe35b362e5870b74bce94a1e58e Mon Sep 17 00:00:00 2001 From: Adam Date: Sat, 16 May 2020 20:51:50 -0700 Subject: initial commit --- private/ntos/init/ntoskrnl.src | 1002 ++++++++++++++++++++++++++++++++++++++++ 1 file changed, 1002 insertions(+) create mode 100644 private/ntos/init/ntoskrnl.src (limited to 'private/ntos/init/ntoskrnl.src') diff --git a/private/ntos/init/ntoskrnl.src b/private/ntos/init/ntoskrnl.src new file mode 100644 index 000000000..a71148abb --- /dev/null +++ b/private/ntos/init/ntoskrnl.src @@ -0,0 +1,1002 @@ +#undef RtlMoveMemory +#undef RtlCopyMemory +#undef RtlFillMemory +#undef RtlZeroMemory +NAME ntoskrnl.exe + +DESCRIPTION 'Windows NT Kernel' + +EXPORTS + CcCanIWrite + CcCopyRead + CcFastCopyRead + CcCopyWrite + CcFastCopyWrite + CcDeferWrite + CcFlushCache + CcGetDirtyPages + CcGetFileObjectFromBcb + CcGetFileObjectFromSectionPtrs + CcGetLsnForFileObject + CcInitializeCacheMap + CcIsThereDirtyData + CcMapData + CcMdlRead + CcMdlReadComplete + CcMdlWriteComplete + CcPinMappedData + CcPinRead + CcPrepareMdlWrite + CcPreparePinWrite + CcPurgeCacheSection + CcRepinBcb + CcScheduleReadAhead + CcSetAdditionalCacheAttributes + CcSetBcbOwnerPointer + CcSetDirtyPageThreshold + CcSetDirtyPinnedData + CcSetFileSizes + CcSetLogHandleForFile + CcSetReadAheadGranularity + CcUninitializeCacheMap + CcUnpinData + CcUnpinDataForThread + CcUnpinRepinnedBcb + CcZeroData + CcFastReadNotPossible CONSTANT // Data - use pointer for access + CcFastReadWait CONSTANT // Data - use pointer for access + CcFastMdlReadWait CONSTANT // Data - use pointer for access + DbgBreakPoint + DbgBreakPointWithStatus + DbgLoadImageSymbols + DbgPrint + DbgPrompt + ExAcquireFastMutexUnsafe + ExAcquireResourceExclusive + ExAcquireResourceExclusiveLite + ExAcquireResourceSharedLite + ExAcquireSharedStarveExclusive + ExAcquireSharedWaitForExclusive + ExAllocatePool + ExAllocatePoolWithQuota + ExAllocatePoolWithQuotaTag + ExAllocatePoolWithTag + ExConvertExclusiveToSharedLite + ExCreateCallback + ExDeleteResource + ExDeleteResourceLite + ExDesktopObjectType CONSTANT // Data - use pointer for access + ExDisableResourceBoostLite + ExEnumHandleTable + ExEventObjectType CONSTANT // Data - use pointer for access + ExExtendZone + ExFreePool + ExGetExclusiveWaiterCount + ExGetPreviousMode + ExGetSharedWaiterCount + ExInitializeNPagedLookasideList + ExIsProcessorFeaturePresent + ExDeleteNPagedLookasideList + ExInitializePagedLookasideList + ExDeletePagedLookasideList + ExInitializeResource + ExInitializeResourceLite + ExReinitializeResourceLite + ExInitializeZone + ExInterlockedAddLargeInteger + ExInterlockedAddLargeStatistic + ExInterlockedAddUlong + ExInterlockedDecrementLong + ExInterlockedExchangeUlong + ExInterlockedExtendZone + ExInterlockedIncrementLong + ExInterlockedInsertHeadList + ExInterlockedInsertTailList + ExInterlockedPopEntryList + ExInterlockedPushEntryList + ExInterlockedRemoveHeadList + ExIsResourceAcquiredExclusiveLite + ExIsResourceAcquiredSharedLite + ExLocalTimeToSystemTime + ExNotifyCallback + ExPostSystemEvent + ExQueryPoolBlockSize + ExQueueWorkItem + ExRaiseAccessViolation + ExRaiseDatatypeMisalignment + ExRaiseException + ExRaiseStatus + ExRaiseHardError + ExRegisterCallback + ExReleaseFastMutexUnsafe + ExReleaseResourceLite + ExReleaseResourceForThread + ExReleaseResourceForThreadLite + ExSetResourceOwnerPointer + ExSystemExceptionFilter + ExSystemTimeToLocalTime +// ExTryToAcquireFastMutexUnsafe + ExUnregisterCallback + ExWindowStationObjectType CONSTANT // Data - use pointer for access + FsRtlAddLargeMcbEntry + FsRtlAddMcbEntry + FsRtlAllocatePool + FsRtlAllocatePoolWithTag + FsRtlAllocatePoolWithQuota + FsRtlAllocatePoolWithQuotaTag + FsRtlAllocateResource + FsRtlAreNamesEqual + FsRtlBalanceReads + FsRtlCheckLockForReadAccess + FsRtlCheckLockForWriteAccess + FsRtlCheckOplock + FsRtlCopyRead + FsRtlCopyWrite + FsRtlGetFileSize + FsRtlMdlReadDev + FsRtlMdlReadComplete + FsRtlMdlReadCompleteDev + FsRtlPrepareMdlWriteDev + FsRtlMdlWriteComplete + FsRtlMdlWriteCompleteDev + FsRtlCurrentBatchOplock + FsRtlDeregisterUncProvider + FsRtlDissectDbcs + FsRtlDissectName + FsRtlDoesDbcsContainWildCards + FsRtlDoesNameContainWildCards + FsRtlFastCheckLockForRead + FsRtlFastCheckLockForWrite + FsRtlFastUnlockSingle + FsRtlFastUnlockAll + FsRtlFastUnlockAllByKey + FsRtlGetNextFileLock + FsRtlGetNextLargeMcbEntry + FsRtlGetNextMcbEntry + FsRtlInitializeFileLock + FsRtlInitializeLargeMcb + FsRtlInitializeMcb + FsRtlInitializeOplock + FsRtlIsDbcsInExpression + FsRtlIsFatDbcsLegal + FsRtlIsHpfsDbcsLegal + FsRtlIsNameInExpression + FsRtlIsNtstatusExpected + FsRtlIsTotalDeviceFailure + FsRtlLegalAnsiCharacterArray CONSTANT // Data - use pointer for access + FsRtlLookupLargeMcbEntry + FsRtlLookupLastLargeMcbEntry + FsRtlLookupLastMcbEntry + FsRtlLookupMcbEntry + FsRtlMdlRead + FsRtlNormalizeNtstatus + FsRtlNotifyInitializeSync + FsRtlNotifyUninitializeSync + FsRtlNotifyChangeDirectory + FsRtlNotifyReportChange + FsRtlNotifyCleanup + FsRtlNotifyFullChangeDirectory + FsRtlNotifyFullReportChange + FsRtlNumberOfRunsInLargeMcb + FsRtlNumberOfRunsInMcb + FsRtlOplockFsctrl + FsRtlOplockIsFastIoPossible + FsRtlPostStackOverflow + FsRtlPostPagingFileStackOverflow + FsRtlPrepareMdlWrite + FsRtlPrivateLock + FsRtlProcessFileLock + FsRtlRegisterUncProvider + FsRtlRemoveLargeMcbEntry + FsRtlRemoveMcbEntry + FsRtlSplitLargeMcb + FsRtlSyncVolumes + FsRtlTruncateMcb + FsRtlTruncateLargeMcb + FsRtlUninitializeFileLock + FsRtlUninitializeLargeMcb + FsRtlUninitializeMcb + FsRtlUninitializeOplock + FsRtlInitializeTunnelCache + FsRtlAddToTunnelCache + FsRtlFindInTunnelCache + FsRtlDeleteKeyFromTunnelCache + FsRtlDeleteTunnelCache + HalDispatchTable CONSTANT // Data - use pointer for access + HalPrivateDispatchTable CONSTANT // Data - use pointer for access + IoAcquireCancelSpinLock + IoAcquireVpbSpinLock + IoAdapterObjectType CONSTANT // Data - use pointer for access + IoDeviceHandlerObjectType CONSTANT // Data - use pointer for access + IoDeviceHandlerObjectSize CONSTANT // Data - use pointer for access + IoAllocateAdapterChannel + IoAllocateController + IoAllocateErrorLogEntry + IoAllocateIrp + IoAllocateMdl + IoAssignResources + IoAttachDevice + IoAttachDeviceByPointer + IoAttachDeviceToDeviceStack + IoBuildAsynchronousFsdRequest + IoBuildDeviceIoControlRequest + IoBuildPartialMdl + IoBuildSynchronousFsdRequest + IoCallDriver + IofCallDriver + IoCancelIrp + IoCheckDesiredAccess + IoCheckEaBufferValidity + IoCheckFunctionAccess + IoCheckShareAccess + IoCompleteRequest + IofCompleteRequest + IoConnectInterrupt + IoCreateController + IoCreateDevice + IoCreateFile + IoCreateNotificationEvent + IoCreateStreamFileObject + IoCreateSymbolicLink + IoCreateSynchronizationEvent + IoCreateUnprotectedSymbolicLink + IoDeleteController + IoDeleteDevice + IoDeleteSymbolicLink + IoDetachDevice + IoDeviceObjectType CONSTANT // Data - use pointer for access + IoDisconnectInterrupt + IoDriverObjectType CONSTANT // Data - use pointer for access + IoEnqueueIrp + IoFastQueryNetworkAttributes + IoFileObjectType CONSTANT // Data - use pointer for access + IoFreeController + IoFreeIrp + IoFreeMdl + IoGetAttachedDevice + IoGetBaseFileSystemDeviceObject + IoGetConfigurationInformation + IoGetCurrentProcess + IoGetDeviceObjectPointer +#if _PNP_POWER_STUB_ENABLED_ + IoGetDeviceProperty +#endif + IoGetDeviceToVerify + IoGetFileObjectGenericMapping + IoGetInitialStack + IoGetRelatedDeviceObject + IoGetRequestorProcess + IoGetStackLimits=RtlpGetStackLimits + IoGetTopLevelIrp + IoInitializeIrp + IoInitializeTimer + IoIsOperationSynchronous + IoIsSystemThread + IoMakeAssociatedIrp + IoOpenDeviceInstanceKey + IoPageRead + IoQueryDeviceDescription + IoQueryDeviceEnumInfo + IoQueryFileInformation +#if _PNP_POWER_STUB_ENABLED_ + IoQuerySystemInformation +#endif + IoQueryVolumeInformation + IoQueueThreadIrp + IoRaiseHardError + IoRaiseInformationalHardError + IoReadOperationCount CONSTANT // Data - use pointer for access + IoReadTransferCount CONSTANT // Data - use pointer for access + IoRegisterDriverReinitialization + IoRegisterFileSystem + IoRegisterFsRegistrationChange +#if _PNP_POWER_STUB_ENABLED_ + IoRegisterPlugPlayNotification +#endif + IoRegisterShutdownNotification + IoReleaseCancelSpinLock + IoReleaseVpbSpinLock + IoRemoveShareAccess +#if _PNP_POWER_STUB_ENABLED_ + IoReportDeviceStatus +#endif + IoReportHalResourceUsage + IoReportResourceUsage +#if _PNP_POWER_STUB_ENABLED_ + IoSetDeviceProperty +#endif + IoSetDeviceToVerify + IoSetHardErrorOrVerifyDevice + IoSetInformation + IoSetShareAccess + IoSetThreadHardErrorMode + IoSetTopLevelIrp + IoStartNextPacket + IoStartNextPacketByKey + IoStartPacket + IoStartTimer + IoStatisticsLock CONSTANT // Data - use pointer for access + IoStopTimer + IoSynchronousPageWrite + IoThreadToProcess + IoUnregisterFileSystem + IoUnregisterFsRegistrationChange +#if _PNP_POWER_STUB_ENABLED_ + IoUnregisterPlugPlayNotification +#endif + IoUnregisterShutdownNotification + IoUpdateShareAccess + IoVerifyVolume + IoWriteErrorLogEntry + IoWriteOperationCount CONSTANT // Data - use pointer for access + IoWriteTransferCount CONSTANT // Data - use pointer for access + KdDebuggerEnabled CONSTANT // Data - use pointer for access + KdDebuggerNotPresent CONSTANT // Data - use pointer for access + KdPollBreakIn + KeAddSystemServiceTable + KeAttachProcess + KeBoostCurrentThread + KeBugCheck + KeBugCheckEx + KeCancelTimer + KeClearEvent + KeConnectInterrupt + KeDcacheFlushCount CONSTANT // Data - use pointer for access + KeDelayExecutionThread + KeDetachProcess + KeDeregisterBugCheckCallback + KeDisconnectInterrupt + KeEnterCriticalRegion + KeEnterKernelDebugger + KeFindConfigurationEntry + KeFindConfigurationNextEntry + KeFlushEntireTb + KeIcacheFlushCount CONSTANT // Data - use pointer for access + KeInitializeDeviceQueue + KeInitializeApc + KeInitializeDpc + KeInitializeEvent + KeInitializeInterrupt + KeInitializeMutant + KeInitializeMutex + KeInitializeQueue + KeInitializeSemaphore + KeInitializeTimer + KeInitializeTimerEx + KeInsertByKeyDeviceQueue + KeInsertDeviceQueue + KeInsertQueue + KeInsertHeadQueue + KeInsertQueueApc + KeInsertQueueDpc + KeLeaveCriticalRegion + KeLoaderBlock CONSTANT // Data - use pointer for access + KeNumberProcessors CONSTANT // Data - use pointer for access + KeProfileInterrupt + KeProfileInterruptWithSource + KePulseEvent + KeQuerySystemTime + KeQueryTickCount + KeQueryTimeIncrement + KeRaiseUserException + KeReadStateTimer + KeReadStateEvent + KeReadStateMutant + KeReadStateMutex=KeReadStateMutant + KeReadStateQueue + KeReadStateSemaphore + KeRegisterBugCheckCallback + KeReleaseMutant + KeReleaseMutex + KeReleaseSemaphore + KeRemoveByKeyDeviceQueue + KeRemoveDeviceQueue + KeRemoveEntryDeviceQueue + KeRemoveQueue + KeRemoveQueueDpc + KeResetEvent + KeRundownQueue + KeServiceDescriptorTable CONSTANT // Data - use pointer for access + KeSetAffinityThread + KeSetDmaIoCoherency + KeSetEvent + KeSetEventBoostPriority + KeSetBasePriorityThread + KeSetIdealProcessorThread + KeSetImportanceDpc + KeSetPriorityThread + KeSetSwapContextNotifyRoutine; + KeSetTargetProcessorDpc + KeSetTimeIncrement + KeSetTimer + KeSetTimerEx + KeSetTimeUpdateNotifyRoutine; + KeSetThreadSelectNotifyRoutine; + KeSynchronizeExecution + KeTerminateThread + KeTickCount CONSTANT // Data - use pointer for access + KeUserModeCallback + KeUpdateRunTime + KeUpdateSystemTime + KeWaitForMultipleObjects + KeWaitForSingleObject + KeWaitForMutexObject=KeWaitForSingleObject + KiAcquireSpinLock + KiBugCheckData // Data - use pointer for access + KiReleaseSpinLock + KeInitializeSpinLock + KeAcquireSpinLockAtDpcLevel + KeReleaseSpinLockFromDpcLevel + KeSetKernelStackSwapEnable + LdrEnumResources + LdrAccessResource + LdrFindResource_U + LdrFindResourceDirectory_U + LpcRequestPort + LsaCallAuthenticationPackage + LsaDeregisterLogonProcess + LsaFreeReturnBuffer + LsaLogonUser + LsaLookupAuthenticationPackage + LsaRegisterLogonProcess + MmAdjustWorkingSetSize + MmAllocateContiguousMemory +#ifdef MEMPRINT + MemPrint + MemPrintInitialize +#endif + MmAllocateNonCachedMemory + MmBuildMdlForNonPagedPool + MmCanFileBeTruncated + MmCreateMdl + MmCreateSection + MmDbgTranslatePhysicalAddress + MmDisableModifiedWriteOfSection + MmFlushImageSection + MmForceSectionClosed + MmFreeContiguousMemory + MmFreeNonCachedMemory + MmGetPhysicalAddress + MmGrowKernelStack + MmIsAddressValid + MmIsNonPagedSystemAddressValid + MmIsRecursiveIoFault + MmIsThisAnNtAsSystem + MmLockPagableDataSection + MmLockPagableSectionByHandle + MmMapIoSpace + MmMapLockedPages + MmMapMemoryDumpMdl + MmMapVideoDisplay + MmMapViewOfSection + MmMapViewInSystemSpace + MmPageEntireDriver + MmProbeAndLockPages + MmQuerySystemSize + MmResetDriverPaging + MmSectionObjectType CONSTANT + MmSecureVirtualMemory + MmSetAddressRangeModified + MmSetBankedSection + MmSizeOfMdl + MmUnlockPagableImageSection + MmUnlockPages + MmUnmapIoSpace + MmUnmapLockedPages + MmUnmapVideoDisplay + MmUnmapViewOfSection + MmUnmapViewInSystemSpace + MmUnsecureVirtualMemory + NlsAnsiCodePage CONSTANT // Data - use pointer for access + NlsLeadByteInfo CONSTANT // Data - use pointer for access + NlsOemLeadByteInfo CONSTANT // Data - use pointer for access + NlsMbCodePageTag CONSTANT // Data - use pointer for access + NlsMbOemCodePageTag CONSTANT // Data - use pointer for access + NtAddAtom + NtAdjustPrivilegesToken + NtAllocateLocallyUniqueId + NtAllocateUuids + NtAllocateVirtualMemory + NtClose + NtConnectPort + NtCreateEvent + NtCreateFile + NtCreateSection + NtDeleteAtom + NtDeleteFile + NtDeviceIoControlFile + NtDuplicateObject + NtDuplicateToken + NtFindAtom + NtFreeVirtualMemory + NtFsControlFile + NtGlobalFlag CONSTANT // Data - use pointer for access + NtLockFile + NtMapViewOfSection + NtNotifyChangeDirectoryFile + NtOpenFile + NtOpenProcess + NtOpenProcessToken + NtQueryDirectoryFile + NtQueryEaFile + NtQueryInformationAtom + NtQueryInformationFile + NtQueryInformationProcess + NtQueryInformationToken + NtQueryOleDirectoryFile + //NtQueryQuotaInformationFile + NtQuerySecurityObject + NtQueryVolumeInformationFile + NtReadFile + NtRequestPort + NtRequestWaitReplyPort + NtSetEvent + NtSetInformationFile + NtSetInformationProcess + NtSetInformationThread + //NtSetQuotaInformationFile + NtSetSecurityObject + NtUnlockFile + NtVdmControl + NtWaitForSingleObject + NtWriteFile + ObAssignSecurity + ObCheckCreateObjectAccess + ObCheckObjectAccess + ObCreateObject + ObDereferenceObject + ObfDereferenceObject + ObFindHandleForObject + ObGetObjectPointerCount + ObGetObjectSecurity + ObInsertObject + ObMakeTemporaryObject + ObOpenObjectByName + ObOpenObjectByPointer + ObQueryObjectAuditingByHandle + ObQueryNameString + ObReferenceObjectByHandle + ObReferenceObjectByName + ObReferenceObjectByPointer + ObReleaseObjectSecurity + ObSetSecurityDescriptorInfo + ObfReferenceObject + PfxFindPrefix + PfxInitialize + PfxInsertPrefix + PfxRemovePrefix + PoQueryPowerSequence + PoSetDeviceIdleDetection + PoRequestPowerChange + ProbeForWrite + PsAssignImpersonationToken + PsChargePoolQuota + PsCreateSystemProcess + PsCreateSystemThread + PsCreateWin32Process + PsGetCurrentProcessId + PsGetCurrentThreadId + PsGetProcessExitTime + PsGetVersion + PsImpersonateClient + PsInitialSystemProcess + PsIsThreadTerminating + PsEstablishWin32Callouts + PsLookupProcessThreadByCid + PsLookupProcessByProcessId + PsLookupThreadByThreadId + PsProcessType CONSTANT + PsReferenceImpersonationToken + PsReferencePrimaryToken + PsReturnPoolQuota + PsRevertToSelf + PsSetCreateProcessNotifyRoutine + PsSetCreateThreadNotifyRoutine + PsSetLegoNotifyRoutine + PsSetProcessPriorityByClass + PsTerminateSystemThread + PsThreadType CONSTANT + RtlAddAce + RtlAllocateAndInitializeSid + RtlAllocateHeap + RtlAddAccessAllowedAce + RtlAddAtomToAtomTable + RtlAnsiCharToUnicodeChar + RtlAnsiStringToUnicodeSize=RtlxAnsiStringToUnicodeSize + RtlAnsiStringToUnicodeString + RtlAppendAsciizToString + RtlAppendStringToString + RtlAppendUnicodeStringToString + RtlAppendUnicodeToString + RtlAreAllAccessesGranted + RtlAreAnyAccessesGranted + RtlAreBitsClear + RtlAreBitsSet + RtlAssert + RtlCaptureStackBackTrace + RtlCharToInteger + RtlCheckRegistryKey + RtlClearAllBits + RtlClearBits + RtlCompareMemory + RtlCompareMemoryUlong + RtlCompareString + RtlCompareUnicodeString + RtlCompressBuffer + RtlCompressChunks + RtlConvertLongToLargeInteger + RtlConvertUlongToLargeInteger + RtlCopyLuid + RtlCopyString + RtlCopyUnicodeString + RtlCreateAtomTable + RtlCreateAcl + RtlCreateHeap + RtlCreateRegistryKey + RtlCreateSecurityDescriptor + RtlCreateUnicodeString + RtlDecompressBuffer + RtlDecompressChunks + RtlDecompressFragment + RtlDelete + RtlDeleteAtomFromAtomTable + RtlDeleteNoSplay + RtlDeleteElementGenericTable + RtlDeleteRegistryValue + RtlDescribeChunk + RtlDestroyAtomTable + RtlDestroyHeap + RtlDowncaseUnicodeString + RtlEmptyAtomTable + RtlEnlargedIntegerMultiply + RtlEnlargedUnsignedDivide + RtlEnlargedUnsignedMultiply + RtlEnumerateGenericTable + RtlEnumerateGenericTableWithoutSplaying + RtlEqualLuid + RtlEqualString + RtlEqualUnicodeString + RtlExtendedIntegerMultiply + RtlExtendedLargeIntegerDivide + RtlExtendedMagicDivide + RtlFillMemory + RtlFillMemoryUlong + RtlFindClearBits + RtlFindClearBitsAndSet + RtlFindFirstRunClear + RtlFindFirstRunSet + RtlFindLongestRunClear + RtlFindLongestRunSet + RtlFindMessage + RtlFindSetBits + RtlFindSetBitsAndClear + RtlFindUnicodePrefix + RtlFormatCurrentUserKeyPath + RtlFreeAnsiString + RtlFreeHeap + RtlFreeOemString + RtlFreeUnicodeString + RtlGenerate8dot3Name + RtlGetCallersAddress + RtlGetCompressionWorkSpaceSize + RtlGetDefaultCodePage + RtlGetElementGenericTable + RtlImageNtHeader + RtlInitAnsiString + RtlInitString + RtlInitUnicodeString + RtlInitializeBitMap + RtlInitializeGenericTable + RtlInitializeUnicodePrefix + RtlInsertElementGenericTable + RtlInsertUnicodePrefix + RtlIntegerToChar + RtlIntegerToUnicodeString + RtlIsNameLegalDOS8Dot3 + RtlLargeIntegerAdd + RtlLargeIntegerArithmeticShift + RtlLargeIntegerDivide + RtlLargeIntegerNegate + RtlLargeIntegerShiftLeft + RtlLargeIntegerShiftRight + RtlLargeIntegerSubtract + RtlLengthSecurityDescriptor + RtlLookupAtomInAtomTable + RtlLookupElementGenericTable + RtlMapGenericMask + RtlMoveMemory + RtlMultiByteToUnicodeN + RtlMultiByteToUnicodeSize + RtlNextUnicodePrefix + RtlNtStatusToDosError + RtlNtStatusToDosErrorNoTeb + RtlNumberGenericTableElements + RtlNumberOfClearBits + RtlNumberOfSetBits + RtlOemStringToCountedUnicodeString + RtlOemStringToUnicodeSize=RtlxOemStringToUnicodeSize + RtlOemStringToUnicodeString + RtlOemToUnicodeN + RtlPinAtomInAtomTable + RtlPrefixString + RtlPrefixUnicodeString + RtlQueryAtomInAtomTable + RtlQueryRegistryValues + RtlQueryTimeZoneInformation + RtlRaiseException + RtlRemoveUnicodePrefix + RtlReserveChunk + RtlRandom + RtlSecondsSince1970ToTime + RtlSecondsSince1980ToTime + RtlSetAllBits + RtlSetBits + RtlSetDaclSecurityDescriptor + RtlSetSaclSecurityDescriptor + RtlSetTimeZoneInformation + RtlSplay + RtlTimeFieldsToTime + RtlTimeToSecondsSince1970 + RtlTimeToSecondsSince1980 + RtlTimeToTimeFields + RtlUnicodeStringToAnsiSize=RtlxUnicodeStringToAnsiSize + RtlUnicodeStringToAnsiString + RtlUnicodeToMultiByteN + RtlUnicodeToMultiByteSize + RtlUnicodeToOemN + RtlUnicodeStringToOemSize=RtlxUnicodeStringToOemSize + RtlUnicodeStringToOemString + RtlUnicodeStringToCountedOemString + RtlCustomCPToUnicodeN + RtlUnicodeToCustomCPN + RtlInitCodePageTable + RtlUnicodeStringToInteger + RtlUnwind + RtlUpcaseUnicodeChar + RtlUpcaseUnicodeString + RtlUpcaseUnicodeStringToAnsiString + RtlUpcaseUnicodeToMultiByteN + RtlUpcaseUnicodeToOemN + RtlUpcaseUnicodeStringToOemString + RtlUpcaseUnicodeStringToCountedOemString + RtlUpcaseUnicodeToCustomCPN + RtlUpperChar + RtlUpperString + RtlValidSecurityDescriptor + RtlWriteRegistryValue + RtlxAnsiStringToUnicodeSize + RtlxOemStringToUnicodeSize + RtlxUnicodeStringToAnsiSize + RtlxUnicodeStringToOemSize + RtlZeroHeap + RtlZeroMemory + SeAccessCheck + SeAssignSecurity + SeCaptureSecurityDescriptor + SeCaptureSubjectContext + SeCloseObjectAuditAlarm + SeCreateAccessState + SeCreateClientSecurity + SeDeassignSecurity + SeDeleteAccessState + SeDeleteObjectAuditAlarm + SeImpersonateClient + SeLockSubjectContext + SeOpenObjectAuditAlarm + SeOpenObjectForDeleteAuditAlarm + SePrivilegeCheck + SePrivilegeObjectAuditAlarm + SeQuerySecurityDescriptorInfo + SeReleaseSecurityDescriptor + SeReleaseSubjectContext + SeSetSecurityDescriptorInfo + SeSinglePrivilegeCheck + SeTokenType + SeTokenImpersonationLevel + SeUnlockSubjectContext + SeAppendPrivileges + SeFreePrivileges + SeAuditingFileEvents + SeAuditingFileOrGlobalEvents + SeSetAccessStateGenericMapping + SeQueryAuthenticationIdToken + SeValidSecurityDescriptor + SeRegisterLogonSessionTerminatedRoutine + SeUnregisterLogonSessionTerminatedRoutine + SeMarkLogonSessionForTerminationNotification + + // + // System default DACLs + // + // SePublicDefaultDacl - is for protecting things so that + // normal users can use it. + // + // SeSystemDefaultDacl - is for protecting things so that + // only the system (and administrators) can get to it. + // + + SePublicDefaultDacl CONSTANT + SeSystemDefaultDacl CONSTANT + + // + // Pointer to structure containing security + // exports + // + + // + // Use SeEnableAccessToExports() before + // using (see se.h) + // + + SeExports CONSTANT + + + ZwAccessCheckAndAuditAlarm + ZwAlertThread + ZwAllocateVirtualMemory + ZwConnectPort + ZwClearEvent + ZwClose + ZwCloseObjectAuditAlarm + ZwCreateDirectoryObject + ZwCreateEvent + ZwCreateFile + ZwCreateKey + ZwCreateSection + ZwCreateSymbolicLinkObject + ZwDeleteFile + ZwDeleteKey + ZwDeleteValueKey + ZwDeviceIoControlFile + ZwDisplayString + ZwDuplicateObject + ZwDuplicateToken + ZwEnumerateKey + ZwEnumerateValueKey + ZwFlushInstructionCache + ZwFlushKey + ZwFreeVirtualMemory + ZwFsControlFile + ZwLoadDriver + ZwLoadKey + ZwMakeTemporaryObject + ZwMapViewOfSection + ZwNotifyChangeKey + ZwOpenDirectoryObject + ZwOpenEvent + ZwOpenFile + ZwOpenKey + ZwOpenProcess + ZwOpenProcessToken + ZwOpenThread + ZwOpenThreadToken + ZwOpenSection + ZwOpenSymbolicLinkObject + ZwPulseEvent + ZwQueryDefaultLocale + ZwQueryDirectoryFile + ZwQueryInformationFile + ZwQueryInformationProcess + ZwQueryInformationToken + ZwQueryKey + ZwQueryObject + ZwQuerySection + ZwQuerySecurityObject + ZwQuerySymbolicLinkObject + ZwQuerySystemInformation + ZwQueryInformationToken + ZwQueryVolumeInformationFile + ZwQueryValueKey + ZwReadFile + ZwReplaceKey + ZwRequestWaitReplyPort + ZwResetEvent + ZwSaveKey + ZwSetDefaultLocale + ZwSetEvent + ZwSetInformationFile + ZwSetInformationObject + ZwSetInformationProcess + ZwSetInformationThread + ZwSetSystemInformation + ZwSetSystemTime + ZwSetValueKey + ZwTerminateProcess + ZwUnmapViewOfSection + ZwUnloadDriver + ZwUnloadKey + ZwWaitForMultipleObjects + ZwWaitForSingleObject + ZwWriteFile + ZwYieldExecution + + RtlAbsoluteToSelfRelativeSD + RtlConvertSidToUnicodeString + RtlCopySid + RtlEqualSid + RtlGetDaclSecurityDescriptor + RtlGetGroupSecurityDescriptor + RtlGetOwnerSecurityDescriptor + RtlInitializeSid + RtlLengthRequiredSid + RtlLengthSid + RtlSetGroupSecurityDescriptor + RtlSetOwnerSecurityDescriptor + RtlSubAuthorityCountSid + RtlSubAuthoritySid + RtlValidSid + + NtBuildNumber CONSTANT + +// +// ntcrt.lib +// + _itoa + _purecall + _snprintf + _snwprintf + _stricmp + _strlwr + _strnicmp + _strnset + _strrev + _strset + _strupr + _vsnprintf + _wcsicmp + _wcslwr + _wcsnicmp + _wcsnset + _wcsrev + _wcsupr + isdigit + islower + isprint + isspace + isupper + isxdigit + mbstowcs + mbtowc + memchr + qsort + rand + sprintf + srand + strcat + strchr + strcmp + strcpy + strlen + strncat + strncmp + strncpy + strrchr + strspn + strstr + swprintf + tolower + towlower + toupper + towupper + vsprintf + wcscat + wcschr + wcscmp + wcscpy + wcscspn + wcslen + wcsncat + wcsncmp + wcsncpy + wcsrchr + wcsspn + wcsstr + wcstombs + wctomb + +// +// Hack-o-rama to support the stupid ATI miniport driver. +// Get rid of these if we can someday. +// + atol + atoi -- cgit v1.2.3