LIBRARY ntdll.dll
EXPORTS
-CsrCaptureParameterBuffer@16
-CsrReleaseParameterBuffer@4
-CsrAllocateCaptureBuffer@12
-CsrAllocateCapturePointer@12
+CsrAllocateCaptureBuffer@8
CsrAllocateMessagePointer@12
CsrCaptureMessageBuffer@16
+CsrCaptureMessageMultiUnicodeStringsInPlace@12
CsrCaptureMessageString@20
CsrCaptureTimeout@8
CsrClientCallServer@16
-CsrClientConnectToServer@0
+CsrClientConnectToServer@20
CsrFreeCaptureBuffer@4
+CsrGetProcessId@0
CsrIdentifyAlertableThread@0
CsrNewThread@0
CsrProbeForRead@12
DbgPrint
DbgPrintEx
DbgPrompt@12
-DbgSsHandleKmApiMsg@8
-DbgSsInitialize@16
DbgUiConnectToDbg@0
DbgUiContinue@8
DbgUiIssueRemoteBreakin@4
DbgUiWaitStateChange@8
DbgUserBreakPoint@0
KiRaiseUserExceptionDispatcher@0
-KiUserApcDispatcher@20
+KiUserApcDispatcher@16
KiUserCallbackDispatcher@12
KiUserExceptionDispatcher@8
LdrAccessResource@16
NtProtectVirtualMemory@20
NtPulseEvent@8
NtQueryAttributesFile@8
+NtQueryDebugFilterState@8
NtQueryDefaultLocale@8
NtQueryDefaultUILanguage@4
NtQueryDirectoryFile@44
NtRequestWaitReplyPort@12
NtResetEvent@8
NtRestoreKey@12
+NtResumeProcess@4
NtResumeThread@8
NtSaveKey@8
+NtSecureConnectPort@36
+NtSetDebugFilterState@12
NtSetContextThread@8
NtSetDefaultHardErrorPort@4
NtSetDefaultLocale@8
NtSignalAndWaitForSingleObject@16
NtStartProfile@4
NtStopProfile@4
+NtSuspendProcess@4
NtSuspendThread@8
NtSystemDebugControl@24
NtTerminateJobObject@8
NtUnlockVirtualMemory@16
NtUnmapViewOfSection@8
NtVdmControl@8
+NtWaitForDebugEvent@16
NtWaitForMultipleObjects@20
NtWaitForSingleObject@12
NtWaitHighEventPair@4
RtlAllocateHandle@8
RtlAllocateHeap@12
RtlAnsiCharToUnicodeChar@4
-RtlAnsiStringToUnicodeSize@4
+RtlAnsiStringToUnicodeSize@4=RtlxAnsiStringToUnicodeSize@4
RtlAnsiStringToUnicodeString@12
RtlAppendAsciizToString@8
RtlAppendStringToString@8
RtlAreBitsClear@12
RtlAreBitsSet@12
RtlAssert@16
-RtlBaseProcessStartRoutine DATA
;RtlCaptureStackBackTrace
RtlCharToInteger@12
RtlCheckRegistryKey@8
RtlDeleteRange@24
RtlDeleteRegistryValue@12
RtlDeleteResource@4
-;RtlDeleteSecurityObject
+RtlDeleteSecurityObject@4
RtlDeleteTimer@12
RtlDeleteTimerQueue@4
RtlDeleteTimerQueueEx@8
RtlDetermineDosPathNameType_U@4
RtlDoesFileExists_U@4
RtlDosPathNameToNtPathName_U@16
+RtlDosPathNameToRelativeNtPathName_U@16
RtlDosSearchPath_U@24
RtlDowncaseUnicodeChar@4
RtlDowncaseUnicodeString@12
RtlGetSecurityDescriptorRMControl@8
;RtlGetUserInfoHeap
RtlGetVersion@4
+RtlHashUnicodeString@16
RtlIdentifierAuthoritySid@4
RtlImageDirectoryEntryToData@16
RtlImageNtHeader@4
RtlIpv6AddressToStringExA@16
RtlIpv6AddressToStringExW@16
RtlIpv6AddressToStringW@8
-RtlIpv6StringToAddressA@16
+RtlIpv6StringToAddressA@12
RtlIpv6StringToAddressExA@16
RtlIpv6StringToAddressExW@16
-RtlIpv6StringToAddressW@16
+RtlIpv6StringToAddressW@12
RtlIsDosDeviceName_U@4
RtlIsGenericTableEmpty@4
RtlIsGenericTableEmptyAvl@4
RtlMultiByteToUnicodeSize@12
;RtlNewInstanceSecurityObject
;RtlNewSecurityGrantedAccess
-;RtlNewSecurityObject
+RtlNewSecurityObject@24
RtlNormalizeProcessParams@4
RtlNtPathNameToDosPathName@16
RtlNtStatusToDosError@4
RtlNumberGenericTableElementsAvl@4
RtlNumberOfClearBits@4
RtlNumberOfSetBits@4
-RtlOemStringToUnicodeSize@4
+RtlOemStringToUnicodeSize@4=RtlxOemStringToUnicodeSize@4
RtlOemStringToUnicodeString@12
RtlOemToUnicodeN@20
RtlOpenCurrentUser@8
;RtlQueryProcessHeapInformation
;RtlQueryProcessLockInformation
RtlQueryRegistryValues@20
-;RtlQuerySecurityObject
+RtlQuerySecurityObject@20
;RtlQueryTagHeap
RtlQueryTimeZoneInformation@4
RtlRaiseException@4
RtlRealPredecessor@4
RtlRealSuccessor@4
RtlReleasePebLock@0
+RtlReleaseRelativeName@4
RtlReleaseResource@4
;RtlRemoteCall
RtlRemoveVectoredExceptionHandler@4
RtlRunEncodeUnicodeString@8
RtlSecondsSince1970ToTime@8
RtlSecondsSince1980ToTime@8
+RtlSelfRelativeToAbsoluteSD2@8
RtlSelfRelativeToAbsoluteSD@44
RtlSetAllBits@4
RtlSetAttributesSecurityDescriptor@12
RtlSetLastWin32Error@4
RtlSetLastWin32ErrorAndNtStatusFromNtStatus@4
RtlSetOwnerSecurityDescriptor@12
+RtlSetProcessIsCritical@12
RtlSetSaclSecurityDescriptor@16
RtlSetSecurityDescriptorRMControl@8
-;RtlSetSecurityObject
+RtlSetSecurityObject@20
RtlSetTimeZoneInformation@4
;RtlSetUnicodeCallouts
;RtlSetUserFlagsHeap
RtlTryEnterCriticalSection@4
@RtlUlongByteSwap@4
@RtlUlonglongByteSwap@8
-RtlUnicodeStringToAnsiSize@4
+RtlUnicodeStringToAnsiSize@4=RtlxUnicodeStringToAnsiSize@4
RtlUnicodeStringToAnsiString@12
RtlUnicodeStringToCountedOemString@12
RtlUnicodeStringToInteger@12
-RtlUnicodeStringToOemSize@4
+RtlUnicodeStringToOemSize@4=RtlxUnicodeStringToOemSize@4
RtlUnicodeStringToOemString@12
RtlUnicodeToCustomCPN@24
RtlUnicodeToMultiByteN@20
RtlpNtOpenKey@16
RtlpNtQueryValueKey@20
RtlpNtSetValueKey@16
-;RtlpUnWaitCriticalSection
-;RtlpWaitForCriticalSection
+RtlpUnWaitCriticalSection@4
+RtlpWaitForCriticalSection@4
RtlxAnsiStringToUnicodeSize@4
RtlxOemStringToUnicodeSize@4
RtlxUnicodeStringToAnsiSize@4
ZwCompleteConnectPort@4
ZwConnectPort@32
ZwContinue@8
+ZwCreateDebugObject@16
ZwCreateDirectoryObject@12
ZwCreateEvent@20
ZwCreateEventPair@12
ZwCreateThread@32
ZwCreateTimer@16
ZwCreateToken@52
+ZwDebugContinue@12
ZwDelayExecution@8
ZwDeleteAtom@4
ZwDeleteFile@4
ZwRequestWaitReplyPort@12
ZwResetEvent@8
ZwRestoreKey@12
+ZwResumeProcess@4
ZwResumeThread@8
ZwSaveKey@8
+ZwSecureConnectPort@36
ZwSetContextThread@8
ZwSetDefaultHardErrorPort@4
ZwSetDefaultLocale@8
ZwSignalAndWaitForSingleObject@16
ZwStartProfile@4
ZwStopProfile@4
+ZwSuspendProcess@4
ZwSuspendThread@8
ZwSystemDebugControl@24
ZwTerminateProcess@8