2 ; ReactOS Operating System
7 CsrAllocateCaptureBuffer@8
8 CsrAllocateMessagePointer@12
9 CsrCaptureMessageBuffer@16
10 CsrCaptureMessageMultiUnicodeStringsInPlace@12
11 CsrCaptureMessageString@20
13 CsrClientCallServer@16
14 CsrClientConnectToServer@20
15 CsrFreeCaptureBuffer@4
17 CsrIdentifyAlertableThread@0
25 DbgPrintReturnControlC
27 DbgQueryDebugFilterState@8
28 DbgSetDebugFilterState@12
31 DbgUiConvertStateChangeStructure@8
32 DbgUiDebugActiveProcess@4
33 DbgUiGetThreadDebugObject@0
34 DbgUiIssueRemoteBreakin@4
36 DbgUiSetThreadDebugObject@4
38 DbgUiWaitStateChange@8
43 ;EtwCreateTraceInstanceId
45 ;EtwEnumerateTraceGuids
48 ;EtwGetTraceEnableFlags
49 ;EtwGetTraceEnableLevel
50 ;EtwGetTraceLoggerHandle
51 ;EtwNotificationRegistrationA
52 ;EtwNotificationRegistrationW
57 ;EtwReceiveNotificationsA
58 ;EtwReceiveNotificationsW
59 ;EtwRegisterTraceGuidsA
60 ;EtwRegisterTraceGuidsW
66 ;EtwTraceEventInstance
69 ;EtwUnregisterTraceGuids
73 ;EtwpSetHWConfigFunction
74 ;ExpInterlockedPopEntrySListEnd
75 ;ExpInterlockedPopEntrySListFault
76 ;ExpInterlockedPopEntrySListResume
80 KiRaiseUserExceptionDispatcher@0
81 KiUserApcDispatcher@16
82 KiUserCallbackDispatcher@12
83 KiUserExceptionDispatcher@8
84 ;LdrAccessOutOfProcessResource
87 ;LdrAlternateResourcesEnabled
88 ;LdrCreateOutOfProcessImage
89 ;LdrDestroyOutOfProcessImage
90 LdrDisableThreadCalloutsForDll@4
92 LdrFindEntryForAddress@8
93 ;LdrEnumerateLoadedModules
94 ;LdrFindCreateProcessManifest
95 LdrFindEntryForAddress@8
96 LdrFindResourceDirectory_U@16
100 ;LdrFlushAlternateResourceModules
103 LdrGetProcedureAddress@16
105 ;LdrInitShimEngineDynamic
106 LdrInitializeThunk@16
107 ;LdrLoadAlternateResourceModule
110 ;LdrOpenImageFileOptionsKey
111 LdrProcessRelocationBlock@16
112 LdrQueryImageFileExecutionOptions@24
113 ;LdrQueryImageFileExecutionOptionsEx
114 ;LdrQueryImageFileKeyOption
115 LdrQueryProcessModuleInformation@12
116 ;LdrSetAppCompatDllRedirectionCallback
117 ;LdrSetDllManifestProber
120 LdrUnloadAlternateResourceModule@4
122 LdrUnlockLoaderLock@8
123 LdrVerifyImageMatchesChecksum@16
125 NlsMbCodePageTag DATA
126 NlsMbOemCodePageTag DATA
127 NtAcceptConnectPort@24
129 NtAccessCheckAndAuditAlarm@44
130 NtAccessCheckByType@44
131 NtAccessCheckByTypeAndAuditAlarm@64
132 NtAccessCheckByTypeResultList@44
133 NtAccessCheckByTypeResultListAndAuditAlarm@64
134 NtAccessCheckByTypeResultListAndAuditAlarmByHandle@68
138 NtAdjustGroupsToken@24
139 NtAdjustPrivilegesToken@24
140 NtAlertResumeThread@8
142 NtAllocateLocallyUniqueId@4
143 NtAllocateUserPhysicalPages@12
145 NtAllocateVirtualMemory@24
146 NtApphelpCacheControl@8
147 NtAreMappedFilesTheSame@8
148 NtAssignProcessToJobObject@8
150 NtCancelDeviceWakeupRequest@4
155 NtCloseObjectAuditAlarm@12
158 NtCompleteConnectPort@4
162 NtCreateDebugObject@16
163 NtCreateDirectoryObject@12
167 NtCreateIoCompletion@16
171 NtCreateKeyedEvent@16
172 NtCreateMailslotFile@32
174 NtCreateNamedPipeFile@56
175 NtCreatePagingFile@16
182 NtCreateSymbolicLinkObject@16
186 NtCreateWaitablePort@20
187 NtCurrentTeb=_NtCurrentTeb@0
188 NtDebugActiveProcess@8
193 NtDeleteDriverEntry@4
196 NtDeleteObjectAuditAlarm@12
198 NtDeviceIoControlFile@40
202 NtEnumerateBootEntries@8
203 NtEnumerateDriverEntries@8
205 NtEnumerateSystemEnvironmentValuesEx@12
206 NtEnumerateValueKey@24
211 NtFlushInstructionCache@12
213 NtFlushVirtualMemory@16
215 NtFreeUserPhysicalPages@12
216 NtFreeVirtualMemory@16
219 NtGetCurrentProcessorNumber@0
220 NtGetDevicePowerState@8
221 NtGetPlugPlayEvent@16
224 NtImpersonateAnonymousToken@4
225 NtImpersonateClientOfPort@8
226 NtImpersonateThread@12
227 NtInitializeRegistry@4
228 NtInitiatePowerAction@16
230 NtIsSystemResumeAutomatic@0
237 NtLockProductActivationKeys@8
239 NtLockVirtualMemory@16
240 NtMakePermanentObject@4
241 NtMakeTemporaryObject@4
242 NtMapUserPhysicalPages@12
243 NtMapUserPhysicalPagesScatter@12
244 NtMapViewOfSection@40
246 NtModifyDriverEntry@4
247 NtNotifyChangeDirectoryFile@36
249 NtNotifyChangeMultipleKeys@48
250 NtOpenDirectoryObject@12
254 NtOpenIoCompletion@12
259 NtOpenObjectAuditAlarm@48
261 NtOpenProcessToken@12
262 NtOpenProcessTokenEx@16
265 NtOpenSymbolicLinkObject@12
268 NtOpenThreadTokenEx@20
271 NtPowerInformation@20
273 NtPrivilegeObjectAuditAlarm@24
274 NtPrivilegedServiceAuditAlarm@20
275 NtProtectVirtualMemory@20
277 NtQueryAttributesFile@8
278 NtQueryBootEntryOrder@8
280 NtQueryDebugFilterState@8
281 NtQueryDefaultLocale@8
282 NtQueryDefaultUILanguage@4
283 NtQueryDirectoryFile@44
284 NtQueryDirectoryObject@28
285 NtQueryDriverEntryOrder@8
288 NtQueryFullAttributesFile@8
289 NtQueryInformationAtom@20
290 NtQueryInformationFile@20
291 NtQueryInformationJobObject@20
292 NtQueryInformationPort@20
293 NtQueryInformationProcess@20
294 NtQueryInformationThread@20
295 NtQueryInformationToken@20
296 NtQueryInstallUILanguage@4
297 NtQueryIntervalProfile@8
298 NtQueryIoCompletion@20
300 NtQueryMultipleValueKey@24
304 NtQueryOpenSubKeysEx@16
305 NtQueryPerformanceCounter@8
306 NtQueryPortInformationProcess@0
307 NtQueryQuotaInformationFile@36
309 NtQuerySecurityObject@20
311 NtQuerySymbolicLinkObject@12
312 NtQuerySystemEnvironmentValue@16
313 NtQuerySystemEnvironmentValueEx@20
314 NtQuerySystemInformation@16
317 NtQueryTimerResolution@12
319 NtQueryVirtualMemory@24
320 NtQueryVolumeInformationFile@20
327 NtReadVirtualMemory@20
328 NtRegisterThreadTerminatePort@4
329 NtReleaseKeyedEvent@16
331 NtReleaseSemaphore@12
332 NtRemoveIoCompletion@20
333 NtRemoveProcessDebug@8
337 NtReplyWaitReceivePort@16
338 NtReplyWaitReceivePortEx@20
339 NtReplyWaitReplyPort@8
340 NtRequestDeviceWakeup@4
342 NtRequestWaitReplyPort@12
343 NtRequestWakeupLatency@4
352 NtSecureConnectPort@36
353 NtSetBootEntryOrder@8
356 NtSetDebugFilterState@12
357 NtSetDefaultHardErrorPort@4
359 NtSetDefaultUILanguage@4
360 NtSetDriverEntryOrder@8
363 NtSetEventBoostPriority@4
365 NtSetHighWaitLowEventPair@4
366 NtSetInformationDebugObject@20
367 NtSetInformationFile@20
368 NtSetInformationJobObject@16
369 NtSetInformationKey@16
370 NtSetInformationObject@16
371 NtSetInformationProcess@16
372 NtSetInformationThread@16
373 NtSetInformationToken@16
374 NtSetIntervalProfile@8
378 NtSetLowWaitHighEventPair@4
379 NtSetQuotaInformationFile@16
380 NtSetSecurityObject@12
381 NtSetSystemEnvironmentValue@8
382 NtSetSystemEnvironmentValueEx@8
383 NtSetSystemInformation@12
384 NtSetSystemPowerState@12
386 NtSetThreadExecutionState@8
388 NtSetTimerResolution@12
391 NtSetVolumeInformationFile@20
393 NtSignalAndWaitForSingleObject@16
398 NtSystemDebugControl@24
399 NtTerminateJobObject@8
404 NtTranslateFilePath@16
410 NtUnlockVirtualMemory@16
411 NtUnmapViewOfSection@8
413 NtWaitForDebugEvent@16
414 NtWaitForKeyedEvent@16
415 NtWaitForMultipleObjects@20
416 NtWaitForMultipleObjects32@20
417 NtWaitForSingleObject@12
418 NtWaitHighEventPair@4
422 NtWriteRequestData@24
423 NtWriteVirtualMemory@20
429 ;PropertyLengthAsVariant
431 RtlAbsoluteToSelfRelativeSD@12
433 RtlAcquirePrivilege@16
434 RtlAcquireResourceExclusive@8
435 RtlAcquireResourceShared@8
436 RtlAcquireSRWLockExclusive@4
437 RtlAcquireSRWLockShared@4
438 RtlActivateActivationContext@12
439 ;RtlActivateActivationContextEx
440 RtlActivateActivationContextUnsafeFast@8
441 RtlAddAccessAllowedAce@16
442 RtlAddAccessAllowedAceEx@20
443 RtlAddAccessAllowedObjectAce@28
444 RtlAddAccessDeniedAce@16
445 RtlAddAccessDeniedAceEx@20
446 RtlAddAccessDeniedObjectAce@28
449 RtlAddAtomToAtomTable@12
450 ;RtlAddAttributeActionToRXact
451 RtlAddAuditAccessAce@24
452 RtlAddAuditAccessAceEx@28
453 RtlAddAuditAccessObjectAce@36
455 RtlAddMandatoryAce@24
456 RtlAddRefActivationContext@4
457 ;RtlAddRefMemoryStream
458 ;RtlAddVectoredContinueHandler
459 RtlAddVectoredExceptionHandler@8
460 ;RtlAddressInSectionTable
461 RtlAdjustPrivilege@16
462 RtlAllocateActivationContextStack@4
463 RtlAllocateAndInitializeSid@44
466 RtlAnsiCharToUnicodeChar@4
467 RtlAnsiStringToUnicodeSize@4=RtlxAnsiStringToUnicodeSize@4
468 RtlAnsiStringToUnicodeString@12
469 RtlAppendAsciizToString@8
470 ;RtlAppendPathElement
471 RtlAppendStringToString@8
472 RtlAppendUnicodeStringToString@8
473 RtlAppendUnicodeToString@8
475 ;RtlApplyRXactNoFlush
476 RtlAreAllAccessesGranted@8
477 RtlAreAnyAccessesGranted@8
483 RtlCaptureStackBackTrace@16
484 ;RtlCaptureStackContext
486 ;RtlCheckForOrphanedCriticalSections
487 ;RtlCheckProcessParameters
488 RtlCheckRegistryKey@8
491 ;RtlCloneMemoryStream
492 ;RtlCommitMemoryStream
495 RtlCompareMemoryUlong@12
497 RtlCompareUnicodeString@12
500 ;RtlComputeImportTableHash
501 ;RtlComputePrivatizedDllName_U
502 ;RtlConsoleMultiByteToUnicodeN
503 RtlConvertExclusiveToShared@4
504 RtlConvertLongToLargeInteger@4
505 ;RtlConvertPropertyToVariant
506 RtlConvertSharedToExclusive@4
507 RtlConvertSidToUnicodeString@12
508 ;RtlConvertToAutoInheritSecurityObject
509 ;RtlConvertUiListToApiList
510 RtlConvertUlongToLargeInteger@4
511 ;RtlConvertVariantToProperty
513 RtlCopyLuidAndAttributesArray@12
515 ;RtlCopyMemoryStreamTo
516 ;RtlCopyOutOfProcessMemoryStreamTo
517 RtlCopySecurityDescriptor@8
519 RtlCopySidAndAttributesArray@28
521 RtlCopyUnicodeString@8
523 RtlCreateActivationContext@8
526 ;RtlCreateBootStatusDataFile
527 RtlCreateEnvironment@8
529 RtlCreateProcessParameters@40
530 RtlCreateQueryDebugBuffer@8
531 RtlCreateRegistryKey@8
532 RtlCreateSecurityDescriptor@8
533 RtlCreateSystemVolumeInformationFolder@4
536 RtlCreateTimerQueue@4
537 RtlCreateUnicodeString@8
538 RtlCreateUnicodeStringFromAsciiz@8
539 RtlCreateUserProcess@40
540 ;RtlCreateUserSecurityObject
541 RtlCreateUserThread@40
542 RtlCustomCPToUnicodeN@24
543 RtlCutoverTimeToSystemTime@16
544 RtlDeNormalizeProcessParams@4
545 RtlDeactivateActivationContext@8
546 RtlDeactivateActivationContextUnsafeFast@4
547 RtlDecodePointer=RtlEncodePointer@4
548 RtlDecodeSystemPointer@4=RtlEncodeSystemPointer@4
549 RtlDecompressBuffer@24
550 RtlDecompressFragment@32
554 RtlDeleteAtomFromAtomTable@8
555 RtlDeleteCriticalSection@4
556 RtlDeleteElementGenericTable@8
557 RtlDeleteElementGenericTableAvl@8
559 RtlDeleteRegistryValue@12
561 RtlDeleteSecurityObject@4
563 RtlDeleteTimerQueue@4
564 RtlDeleteTimerQueueEx@8
566 RtlDeregisterWaitEx@8
567 RtlDestroyAtomTable@4
568 RtlDestroyEnvironment@4
569 RtlDestroyHandleTable@4
571 RtlDestroyProcessParameters@4
572 RtlDestroyQueryDebugBuffer@4
573 RtlDetermineDosPathNameType_U@4
574 RtlDllShutdownInProgress@0
575 ;RtlDnsHostNameToComputerName
576 RtlDoesFileExists_U@4
577 ;RtlDosApplyFileIsolationRedirection_Ustr
578 RtlDosPathNameToNtPathName_U@16
579 ;RtlDosPathNameToNtPathName_U_WithStatus
580 RtlDosPathNameToRelativeNtPathName_U@16
581 ;RtlDosPathNameToRelativeNtPathName_U_WithStatus
582 RtlDosSearchPath_U@24
583 ;RtlDosSearchPath_Ustr
584 RtlDowncaseUnicodeChar@4
585 RtlDowncaseUnicodeString@12
587 RtlDuplicateUnicodeString@12
589 ;RtlEnableEarlyCriticalSectionEventCreation
591 RtlEncodeSystemPointer@4
592 RtlEnlargedIntegerMultiply@8
593 RtlEnlargedUnsignedDivide@16
594 RtlEnlargedUnsignedMultiply@8
595 RtlEnterCriticalSection@4
596 RtlEnumProcessHeaps@8
597 RtlEnumerateGenericTable@8
598 RtlEnumerateGenericTableAvl@8
599 RtlEnumerateGenericTableLikeADirectory@28
600 RtlEnumerateGenericTableWithoutSplaying@8
601 RtlEnumerateGenericTableWithoutSplayingAvl@8
602 RtlEqualComputerName@8
608 RtlEqualUnicodeString@12
609 RtlEraseUnicodeString@4
611 RtlExpandEnvironmentStrings_U@16
613 RtlExtendedIntegerMultiply@12
614 RtlExtendedLargeIntegerDivide@16
615 RtlExtendedMagicDivide@20
617 RtlFillMemoryUlong@12
618 ;RtlFinalReleaseOutOfProcessMemoryStream
619 ;RtlFindActivationContextSectionGuid
620 RtlFindActivationContextSectionString@20
621 RtlFindCharInUnicodeString@16
623 RtlFindClearBitsAndSet@12
625 RtlFindLastBackwardRunClear@12
626 RtlFindLeastSignificantBit@8
627 RtlFindLongestRunClear@8
629 RtlFindMostSignificantBit@8
630 RtlFindNextForwardRunClear@12
632 RtlFindSetBitsAndClear@12
635 RtlFlushSecureMemoryCache@8
636 RtlFormatCurrentUserKeyPath@4
639 ;RtlFreeActivationContextStack
645 ;RtlFreeThreadActivationContextStack
646 RtlFreeUnicodeString@4
647 RtlFreeUserThreadStack@8
649 RtlGenerate8dot3Name@16
651 RtlGetActiveActivationContext@4
652 RtlGetCallersAddress@8
653 RtlGetCompressionWorkSpaceSize@12
654 RtlGetControlSecurityDescriptor@12
655 ;RtlGetCriticalSectionRecursionCount
656 RtlGetCurrentDirectory_U@8
658 RtlGetCurrentProcessorNumber@0
659 RtlGetDaclSecurityDescriptor@16
660 RtlGetElementGenericTable@8
661 RtlGetElementGenericTableAvl@8
663 RtlGetFullPathName_U@16
664 ;RtlGetFullPathName_UstrEx
665 RtlGetGroupSecurityDescriptor@12
667 RtlGetLastWin32Error@0
668 ;RtlGetLengthWithoutLastFullDosOrNtPathElement
669 ;RtlGetLengthWithoutTrailingPathSeperators
670 RtlGetLongestNtPathLength@0
671 ;RtlGetNativeSystemInformation
672 RtlGetNtGlobalFlags@0
673 RtlGetNtProductType@4
674 RtlGetNtVersionNumbers@12
675 RtlGetOwnerSecurityDescriptor@12
677 RtlGetSaclSecurityDescriptor@16
678 RtlGetSecurityDescriptorRMControl@8
679 RtlGetSetBootStatusData@24
680 ;RtlGetThreadErrorMode
681 ;RtlGetUnloadEventTrace
682 RtlGetUserInfoHeap@20
684 RtlHashUnicodeString@16
685 RtlIdentifierAuthoritySid@4
686 RtlImageDirectoryEntryToData@16
689 RtlImageRvaToSection@12
693 RtlInitAnsiStringEx@8
694 RtlInitCodePageTable@8
697 ;RtlInitOutOfProcessMemoryStream
699 RtlInitUnicodeString@8
700 RtlInitUnicodeStringEx@8
701 ;RtlInitializeAtomPackage
702 RtlInitializeBitMap@12
703 RtlInitializeConditionVariable@4
704 RtlInitializeContext@20
705 RtlInitializeCriticalSection@4
706 RtlInitializeCriticalSectionAndSpinCount@8
707 RtlInitializeGenericTable@20
708 RtlInitializeGenericTableAvl@20
709 RtlInitializeHandleTable@12
711 RtlInitializeResource@4
712 RtlInitializeSListHead@4
714 RtlInitializeSRWLock@4
715 RtlInsertElementGenericTable@16
716 RtlInsertElementGenericTableAvl@16
717 RtlInsertElementGenericTableFull@24
718 RtlInsertElementGenericTableFullAvl@24
719 RtlInt64ToUnicodeString@16
721 RtlIntegerToUnicodeString@12
722 RtlInterlockedCompareExchange64@20
723 RtlInterlockedFlushSList@4
724 RtlInterlockedPopEntrySList@4
725 RtlInterlockedPushEntrySList@8
726 RtlInterlockedPushListSList@16
727 RtlIpv4AddressToStringA@8
728 RtlIpv4AddressToStringExA@16
729 RtlIpv4AddressToStringExW@16
730 RtlIpv4AddressToStringW@8
731 RtlIpv4StringToAddressA@16
732 RtlIpv4StringToAddressExA@16
733 RtlIpv4StringToAddressExW@16
734 RtlIpv4StringToAddressW@16
735 RtlIpv6AddressToStringA@8
736 RtlIpv6AddressToStringExA@20
737 RtlIpv6AddressToStringExW@20
738 RtlIpv6AddressToStringW@8
739 RtlIpv6StringToAddressA@12
740 RtlIpv6StringToAddressExA@16
741 RtlIpv6StringToAddressExW@16
742 RtlIpv6StringToAddressW@12
743 ;RtlIsActivationContextActive
744 ;RtlIsCriticalSectionLocked
745 ;RtlIsCriticalSectionLockedByThread
746 RtlIsDosDeviceName_U@4
747 RtlIsGenericTableEmpty@4
748 RtlIsGenericTableEmptyAvl@4
749 RtlIsNameLegalDOS8Dot3@12
751 RtlIsThreadWithinLoaderCallout@0
753 RtlIsValidIndexHandle@12
754 RtlLargeIntegerAdd@16
755 RtlLargeIntegerArithmeticShift@12
756 RtlLargeIntegerDivide@20
757 RtlLargeIntegerNegate@8
758 RtlLargeIntegerShiftLeft@12
759 RtlLargeIntegerShiftRight@12
760 RtlLargeIntegerSubtract@16
761 RtlLargeIntegerToChar@16
762 RtlLeaveCriticalSection@4
763 RtlLengthRequiredSid@4
764 RtlLengthSecurityDescriptor@4
766 RtlLocalTimeToSystemTime@8
767 RtlLockBootStatusData@4
769 ;RtlLockMemoryStreamRegion
770 ;RtlLogStackBackTrace
771 RtlLookupAtomInAtomTable@12
772 RtlLookupElementGenericTable@8
773 RtlLookupElementGenericTableAvl@8
774 RtlLookupElementGenericTableFull@16
775 RtlLookupElementGenericTableFullAvl@16
776 RtlMakeSelfRelativeSD@12
778 ;RtlMapSecurityErrorToNtStatus
780 ;RtlMultiAppendUnicodeStringBuffer
781 RtlMultiByteToUnicodeN@20
782 RtlMultiByteToUnicodeSize@12
783 RtlMultipleAllocateHeap@20
784 RtlMultipleFreeHeap@16
785 ;RtlNewInstanceSecurityObject
786 ;RtlNewSecurityGrantedAccess
787 RtlNewSecurityObject@24
788 ;RtlNewSecurityObjectEx
789 ;RtlNewSecurityObjectWithMultipleInheritance
790 RtlNormalizeProcessParams@4
791 RtlNtPathNameToDosPathName@16
792 RtlNtStatusToDosError@4
793 RtlNtStatusToDosErrorNoTeb@4
794 RtlNumberGenericTableElements@4
795 RtlNumberGenericTableElementsAvl@4
796 RtlNumberOfClearBits@4
798 RtlOemStringToUnicodeSize@4=RtlxOemStringToUnicodeSize@4
799 RtlOemStringToUnicodeString@12
803 RtlPinAtomInAtomTable@8
806 RtlPrefixUnicodeString@12
809 RtlQueryAtomInAtomTable@24
811 RtlQueryEnvironmentVariable_U@12
812 RtlQueryHeapInformation@20
813 RtlQueryInformationAcl@16
814 RtlQueryInformationActivationContext@28
815 ;RtlQueryInformationActiveActivationContext
816 ;RtlQueryInterfaceMemoryStream
817 ;RtlQueryProcessBackTraceInformation
818 RtlQueryProcessDebugInformation@12
819 ;RtlQueryProcessHeapInformation
820 ;RtlQueryProcessLockInformation
821 RtlQueryRegistryValues@20
822 RtlQuerySecurityObject@20
824 RtlQueryTimeZoneInformation@4
825 ;RtlQueueApcWow64Thread
833 ;RtlReadOutOfProcessMemoryStream
836 RtlRegisterSecureMemoryCacheCallback@4
838 RtlReleaseActivationContext@4
839 ;RtlReleaseMemoryStream
841 RtlReleasePrivilege@4
842 RtlReleaseRelativeName@4
844 RtlReleaseSRWLockExclusive@4
845 RtlReleaseSRWLockShared@4
847 ;RtlRemoveVectoredContinueHandler
848 RtlRemoveVectoredExceptionHandler@4
849 RtlResetRtlTranslations@4
850 RtlRestoreLastWin32Error@4=RtlSetLastWin32Error@4
851 ;RtlRevertMemoryStream
852 RtlRunDecodeUnicodeString@8
853 RtlRunEncodeUnicodeString@8
854 RtlSecondsSince1970ToTime@8
855 RtlSecondsSince1980ToTime@8
857 RtlSelfRelativeToAbsoluteSD@44
858 RtlSelfRelativeToAbsoluteSD2@8
860 RtlSetAttributesSecurityDescriptor@12
862 RtlSetControlSecurityDescriptor@12
863 RtlSetCriticalSectionSpinCount@8
864 RtlSetCurrentDirectory_U@4
865 RtlSetCurrentEnvironment@8
866 RtlSetDaclSecurityDescriptor@16
867 ;RtlSetEnvironmentStrings
868 RtlSetEnvironmentVariable@12
869 RtlSetGroupSecurityDescriptor@12
870 RtlSetHeapInformation@16
871 RtlSetInformationAcl@16
872 RtlSetIoCompletionCallback@12
873 RtlSetLastWin32Error@4
874 RtlSetLastWin32ErrorAndNtStatusFromNtStatus@4
875 ;RtlSetMemoryStreamSize
876 RtlSetOwnerSecurityDescriptor@12
877 RtlSetProcessIsCritical@12
878 RtlSetSaclSecurityDescriptor@16
879 RtlSetSecurityDescriptorRMControl@8
880 RtlSetSecurityObject@20
881 ;RtlSetSecurityObjectEx
882 ;RtlSetThreadErrorMode
883 ;RtlSetThreadIsCritical
884 ;RtlSetThreadPoolStartFunc
885 RtlSetTimeZoneInformation@4
887 RtlSetUnhandledExceptionFilter@4
888 ;RtlSetUnicodeCallouts
889 RtlSetUserFlagsHeap@16
890 RtlSetUserValueHeap@16
892 RtlSleepConditionVariableCS@12
893 RtlSleepConditionVariableSRW@16
898 RtlSubAuthorityCountSid@4
900 RtlSubtreePredecessor@4
901 RtlSubtreeSuccessor@4
902 RtlSystemTimeToLocalTime@8
903 RtlTimeFieldsToTime@8
904 RtlTimeToElapsedTimeFields@8
905 RtlTimeToSecondsSince1970@8
906 RtlTimeToSecondsSince1980@8
907 RtlTimeToTimeFields@8
909 ;RtlTraceDatabaseCreate
910 ;RtlTraceDatabaseDestroy
911 ;RtlTraceDatabaseEnumerate
912 ;RtlTraceDatabaseFind
913 ;RtlTraceDatabaseLock
914 ;RtlTraceDatabaseUnlock
915 ;RtlTraceDatabaseValidate
916 RtlTryEnterCriticalSection@4
918 @RtlUlonglongByteSwap@8
919 RtlUnhandledExceptionFilter@4
920 ;RtlUnhandledExceptionFilter2
921 RtlUnicodeStringToAnsiSize@4=RtlxUnicodeStringToAnsiSize@4
922 RtlUnicodeStringToAnsiString@12
923 RtlUnicodeStringToCountedOemString@12
924 RtlUnicodeStringToInteger@12
925 RtlUnicodeStringToOemSize@4=RtlxUnicodeStringToOemSize@4
926 RtlUnicodeStringToOemString@12
927 RtlUnicodeToCustomCPN@24
928 RtlUnicodeToMultiByteN@20
929 RtlUnicodeToMultiByteSize@12
932 RtlUnlockBootStatusData@4
934 ;RtlUnlockMemoryStreamRegion
936 RtlUpcaseUnicodeChar@4
937 RtlUpcaseUnicodeString@12
938 RtlUpcaseUnicodeStringToAnsiString@12
939 RtlUpcaseUnicodeStringToCountedOemString@12
940 RtlUpcaseUnicodeStringToOemString@12
941 RtlUpcaseUnicodeToCustomCPN@24
942 RtlUpcaseUnicodeToMultiByteN@20
943 RtlUpcaseUnicodeToOemN@20
950 RtlValidRelativeSecurityDescriptor@12
951 RtlValidSecurityDescriptor@4
954 RtlValidateProcessHeaps@0
955 RtlValidateUnicodeString@8
956 RtlVerifyVersionInfo@16
959 ;RtlWow64EnableFsRedirection
960 ;RtlWow64EnableFsRedirectionEx
961 RtlWakeAllConditionVariable@4
962 RtlWakeConditionVariable@4
963 RtlWriteRegistryValue@24
964 ;RtlWriteMemoryStream
965 RtlWriteRegistryValue@24
968 RtlZombifyActivationContext@4
969 ;RtlpApplyLengthFunction
970 RtlpEnsureBufferSize@12
971 ;RtlpNotOwnerCriticalSection
973 RtlpNtEnumerateSubKey@16
974 RtlpNtMakeTemporaryKey@4
976 RtlpNtQueryValueKey@20
978 RtlpUnWaitCriticalSection@4
979 RtlpWaitForCriticalSection@4
980 RtlxAnsiStringToUnicodeSize@4
981 RtlxOemStringToUnicodeSize@4
982 RtlxUnicodeStringToAnsiSize@4
983 RtlxUnicodeStringToOemSize@4
984 VerSetConditionMask@16
985 ZwAcceptConnectPort@24
987 ZwAccessCheckAndAuditAlarm@44
988 ZwAccessCheckByType@44
989 ZwAccessCheckByTypeAndAuditAlarm@64
990 ZwAccessCheckByTypeResultList@44
991 ZwAccessCheckByTypeResultListAndAuditAlarm@64
992 ZwAccessCheckByTypeResultListAndAuditAlarmByHandle@68
996 ZwAdjustGroupsToken@24
997 ZwAdjustPrivilegesToken@24
998 ZwAlertResumeThread@8
1000 ZwAllocateLocallyUniqueId@4
1001 ZwAllocateUserPhysicalPages@12
1003 ZwAllocateVirtualMemory@24
1004 ZwApphelpCacheControl@8
1005 ZwAssignProcessToJobObject@8
1007 ZwCancelDeviceWakeupRequest@4
1012 ZwCloseObjectAuditAlarm@12
1015 ZwCompleteConnectPort@4
1019 ZwCreateDebugObject@16
1020 ZwCreateDirectoryObject@12
1022 ZwCreateEventPair@12
1024 ZwCreateIoCompletion@16
1025 ZwCreateJobObject@12
1028 ZwCreateKeyedEvent@16
1029 ZwCreateMailslotFile@32
1031 ZwCreateNamedPipeFile@56
1032 ZwCreatePagingFile@16
1035 ZwCreateProcessEx@36
1038 ZwCreateSemaphore@20
1039 ZwCreateSymbolicLinkObject@16
1043 ZwCreateWaitablePort@20
1044 ZwDebugActiveProcess@8
1049 ZwDeleteDriverEntry@4
1052 ZwDeleteObjectAuditAlarm@12
1054 ZwDeviceIoControlFile@40
1056 ZwDuplicateObject@28
1058 ZwEnumerateBootEntries@8
1059 ZwEnumerateDriverEntries@8
1061 ZwEnumerateSystemEnvironmentValuesEx@12
1062 ZwEnumerateValueKey@24
1066 ZwFlushBuffersFile@8
1067 ZwFlushInstructionCache@12
1069 ZwFlushVirtualMemory@16
1070 ZwFlushWriteBuffer@0
1071 ZwFreeVirtualMemory@16
1073 ZwGetContextThread@8
1074 ZwGetCurrentProcessorNumber@0
1075 ZwGetDevicePowerState@8
1076 ZwGetPlugPlayEvent@16
1078 ZwImpersonateAnonymousToken@4
1079 ZwImpersonateClientOfPort@8
1080 ZwImpersonateThread@12
1081 ZwInitializeRegistry@4
1082 ZwInitiatePowerAction@16
1084 ZwIsSystemResumeAutomatic@0
1091 ZwLockProductActivationKeys@8
1093 ZwLockVirtualMemory@16
1094 ZwMakePermanentObject@4
1095 ZwMakeTemporaryObject@4
1096 ZwMapUserPhysicalPages@12
1097 ZwMapUserPhysicalPagesScatter@12
1098 ZwMapViewOfSection@40
1100 ZwModifyDriverEntry@4
1101 ZwNotifyChangeDirectoryFile@36
1102 ZwNotifyChangeKey@40
1103 ZwNotifyChangeMultipleKeys@48
1104 ZwOpenDirectoryObject@12
1108 ZwOpenIoCompletion@12
1113 ZwOpenObjectAuditAlarm@48
1115 ZwOpenProcessToken@12
1116 ZwOpenProcessTokenEx@16
1119 ZwOpenSymbolicLinkObject@12
1121 ZwOpenThreadToken@16
1122 ZwOpenThreadTokenEx@20
1124 ZwPlugPlayControl@12
1125 ZwPowerInformation@20
1127 ZwPrivilegeObjectAuditAlarm@24
1128 ZwPrivilegedServiceAuditAlarm@20
1129 ZwProtectVirtualMemory@20
1131 ZwQueryAttributesFile@8
1132 ZwQueryBootEntryOrder@8
1133 ZwQueryBootOptions@8
1134 ZwQueryDebugFilterState@8
1135 ZwQueryDefaultLocale@8
1136 ZwQueryDefaultUILanguage@4
1137 ZwQueryDirectoryFile@44
1138 ZwQueryDirectoryObject@28
1139 ZwQueryDriverEntryOrder@8
1142 ZwQueryFullAttributesFile@8
1143 ZwQueryInformationAtom@20
1144 ZwQueryInformationFile@20
1145 ZwQueryInformationJobObject@20
1146 ZwQueryInformationPort@20
1147 ZwQueryInformationProcess@20
1148 ZwQueryInformationThread@20
1149 ZwQueryInformationToken@20
1150 ZwQueryInstallUILanguage@4
1151 ZwQueryIntervalProfile@8
1152 ZwQueryIoCompletion@20
1154 ZwQueryMultipleValueKey@24
1157 ZwQueryOpenSubKeys@8
1158 ZwQueryOpenSubKeysEx@16
1159 ZwQueryPerformanceCounter@8
1160 ZwQueryPortInformationProcess@0
1161 ZwQueryQuotaInformationFile@36
1163 ZwQuerySecurityObject@20
1165 ZwQuerySymbolicLinkObject@12
1166 ZwQuerySystemEnvironmentValue@16
1167 ZwQuerySystemEnvironmentValueEx@20
1168 ZwQuerySystemInformation@16
1171 ZwQueryTimerResolution@12
1173 ZwQueryVirtualMemory@24
1174 ZwQueryVolumeInformationFile@20
1179 ZwReadFileScatter@36
1180 ZwReadRequestData@24
1181 ZwReadVirtualMemory@20
1182 ZwRegisterThreadTerminatePort@4
1183 ZwReleaseKeyedEvent@16
1185 ZwReleaseSemaphore@12
1186 ZwRemoveIoCompletion@20
1187 ZwRemoveProcessDebug@8
1191 ZwReplyWaitReceivePort@16
1192 ZwReplyWaitReceivePortEx@20
1193 ZwReplyWaitReplyPort@8
1194 ZwRequestDeviceWakeup@4
1196 ZwRequestWaitReplyPort@12
1197 ZwRequestWakeupLatency@4
1199 ZwResetWriteWatch@12
1206 ZwSecureConnectPort@36
1207 ZwSetBootEntryOrder@8
1209 ZwSetContextThread@8
1210 ZwSetDebugFilterState@12
1211 ZwSetDefaultHardErrorPort@4
1212 ZwSetDefaultLocale@8
1213 ZwSetDefaultUILanguage@4
1214 ZwSetDriverEntryOrder@8
1217 ZwSetEventBoostPriority@4
1218 ZwSetHighEventPair@4
1219 ZwSetHighWaitLowEventPair@4
1220 ZwSetInformationDebugObject@20
1221 ZwSetInformationFile@20
1222 ZwSetInformationJobObject@16
1223 ZwSetInformationKey@16
1224 ZwSetInformationObject@16
1225 ZwSetInformationProcess@16
1226 ZwSetInformationThread@16
1227 ZwSetInformationToken@16
1228 ZwSetIntervalProfile@8
1229 ZwSetIoCompletion@20
1232 ZwSetLowWaitHighEventPair@4
1233 ZwSetQuotaInformationFile@16
1234 ZwSetSecurityObject@12
1235 ZwSetSystemEnvironmentValue@8
1236 ZwSetSystemEnvironmentValueEx@8
1237 ZwSetSystemInformation@12
1238 ZwSetSystemPowerState@12
1240 ZwSetThreadExecutionState@8
1242 ZwSetTimerResolution@12
1245 ZwSetVolumeInformationFile@20
1247 ZwSignalAndWaitForSingleObject@16
1252 ZwSystemDebugControl@24
1253 ZwTerminateJobObject@8
1254 ZwTerminateProcess@8
1258 ZwTranslateFilePath@16
1264 ZwUnlockVirtualMemory@16
1265 ZwUnmapViewOfSection@8
1267 ZwWaitForDebugEvent@16
1268 ZwWaitForKeyedEvent@16
1269 ZwWaitForMultipleObjects@20
1270 ZwWaitForMultipleObjects32@20
1271 ZwWaitForSingleObject@12
1272 ZwWaitHighEventPair@4
1273 ZwWaitLowEventPair@4
1275 ZwWriteFileGather@36
1276 ZwWriteRequestData@24
1277 ZwWriteVirtualMemory@20
1399 vDbgPrintExWithPrefix@20