350 lines
6.4 KiB
Modula-2
350 lines
6.4 KiB
Modula-2
;note that the Zw... functions are alternate names for the
|
|
;Nt... functions. (see www.sysinternals.com for details)
|
|
;if you change a Nt.. function DON'T FORGET to change the
|
|
;Zw one too.
|
|
|
|
LIBRARY ntdll.dll
|
|
EXPORTS
|
|
|
|
DbgBreakPoint@0
|
|
DbgPrint
|
|
DbgUiConnectToDbg@0
|
|
DbgUiContinue@8
|
|
DbgUiWaitStateChange@8
|
|
DbgUserBreakPoint@0
|
|
LdrGetProcedureAddress@16
|
|
LdrProcessRelocationBlock@16
|
|
NlsAnsiCodePage
|
|
NlsMbCodePageTag
|
|
NlsMbOemCodePageTag
|
|
NtAccessCheck@32
|
|
NtAdjustPrivilegesToken@24
|
|
NtAllocateVirtualMemory@24
|
|
NtClose@4
|
|
NtConnectPort@32
|
|
NtCreateFile@44
|
|
NtCreateKey@28
|
|
NtCurrentTeb@0
|
|
NtDeleteKey@4
|
|
NtDeleteValueKey@8
|
|
NtDisplayString@4
|
|
NtEnumerateKey@24
|
|
NtEnumerateValueKey@24
|
|
NtFlushVirtualMemory@16
|
|
NtFreeVirtualMemory@16
|
|
NtLockVirtualMemory@16
|
|
NtOpenEvent@12
|
|
NtOpenFile@24
|
|
NtOpenKey@12
|
|
NtOpenProcessToken@12
|
|
NtOpenThreadToken@16
|
|
NtProtectVirtualMemory@20
|
|
NtQueryInformationToken@20
|
|
NtQueryKey@20
|
|
NtQueryValueKey@24
|
|
NtQueryVirtualMemory@24
|
|
NtReadFile@36
|
|
NtReadVirtualMemory@20
|
|
NtRequestWaitReplyPort@12
|
|
NtSetSecurityObject@12
|
|
NtSetValueKey@24
|
|
NtShutdownSystem@4
|
|
NtUnlockVirtualMemory@16
|
|
NtWaitForSingleObject@12
|
|
NtWriteFile@36
|
|
NtWriteVirtualMemory@20
|
|
RtlAcquirePebLock@0
|
|
RtlAcquireResourceExclusive@8
|
|
RtlAcquireResourceShared@8
|
|
RtlAddAccessAllowedAce@16
|
|
RtlAllocateAndInitializeSid@44
|
|
RtlAllocateHandle@8
|
|
RtlAllocateHeap@12
|
|
RtlAnsiCharToUnicodeChar@4
|
|
RtlAnsiStringToUnicodeSize@4
|
|
RtlAnsiStringToUnicodeString@12
|
|
RtlAppendAsciizToString@8
|
|
RtlAppendStringToString@8
|
|
RtlAppendUnicodeStringToString@8
|
|
RtlAppendUnicodeToString@8
|
|
RtlAreBitsClear@12
|
|
RtlAreBitsSet@12
|
|
RtlCharToInteger@12
|
|
RtlClearAllBits@4
|
|
RtlClearBits@12
|
|
RtlCompareMemory@12
|
|
RtlCompareMemoryUlong@12
|
|
RtlCompareString@12
|
|
RtlCompareUnicodeString@12
|
|
RtlConvertSidToUnicodeString@12
|
|
RtlCopySid@12
|
|
RtlCopyString@8
|
|
RtlCopyUnicodeString@8
|
|
RtlCreateAcl@12
|
|
RtlCreateEnvironment@8
|
|
RtlCreateHeap@24
|
|
RtlCreateProcessParameters@40
|
|
RtlCreateSecurityDescriptor@8
|
|
RtlCreateUnicodeString@8
|
|
RtlCreateUnicodeStringFromAsciiz@8
|
|
RtlDeleteResource@4
|
|
RtlDeNormalizeProcessParams@4
|
|
RtlDestroyEnvironment@4
|
|
RtlDestroyHandleTable@4
|
|
RtlDestroyHeap@4
|
|
RtlDestroyProcessParameters@4
|
|
RtlDetermineDosPathNameType_U@4
|
|
RtlDoesFileExists_U@4
|
|
RtlDosPathNameToNtPathName_U@16
|
|
RtlDosSearchPath_U@24
|
|
RtlDowncaseUnicodeString@12
|
|
RtlEnumProcessHeaps@8
|
|
RtlEqualComputerName@8
|
|
RtlEqualDomainName@8
|
|
RtlEqualPrefixSid@8
|
|
RtlEqualSid@8
|
|
RtlEqualString@12
|
|
RtlEqualUnicodeString@12
|
|
RtlEraseUnicodeString@4
|
|
RtlExpandEnvironmentStrings_U@16
|
|
RtlFillMemory@12
|
|
RtlFillMemoryUlong@12
|
|
RtlFindClearBits@12
|
|
RtlFindClearBitsAndSet@12
|
|
RtlFindLongestRunClear@8
|
|
RtlFindLongestRunSet@8
|
|
RtlFindSetBits@12
|
|
RtlFindSetBitsAndClear@12
|
|
RtlFreeAnsiString@4
|
|
RtlFreeHandle@8
|
|
RtlFreeHeap@12
|
|
RtlFreeOemString@4
|
|
RtlFreeSid@4
|
|
RtlFreeUnicodeString@4
|
|
RtlGetAce@12
|
|
RtlGetControlSecurityDescriptor@12
|
|
RtlGetCurrentDirectory_U@8
|
|
RtlGetDaclSecurityDescriptor@16
|
|
RtlGetFullPathName_U@16
|
|
RtlGetGroupSecurityDescriptor@12
|
|
RtlGetLongestNtPathLength@0
|
|
RtlGetNtGlobalFlags@0
|
|
RtlGetOwnerSecurityDescriptor@12
|
|
RtlGetProcessHeaps@8
|
|
RtlGetSaclSecurityDescriptor@16
|
|
RtlIdentifierAuthoritySid@4
|
|
RtlImageDirectoryEntryToData@16
|
|
RtlImageNtHeader@4
|
|
RtlImageRvaToSection@12
|
|
RtlImageRvaToVa@16
|
|
RtlImpersonateSelf@4
|
|
RtlInitAnsiString@8
|
|
RtlInitCodePageTable@8
|
|
RtlInitNlsTables@16
|
|
RtlInitString@8
|
|
RtlInitUnicodeString@8
|
|
RtlInitializeBitMap@12
|
|
RtlInitializeHandleTable@12
|
|
RtlInitializeResource@4
|
|
RtlInitializeSid@12
|
|
RtlIntegerToChar@16
|
|
RtlIntegerToUnicodeString@12
|
|
RtlIsDosDeviceName_U@4
|
|
RtlIsNameLegalDOS8Dot3@12
|
|
RtlIsTextUnicode@12
|
|
RtlIsValidHandle@8
|
|
RtlIsValidIndexHandle@12
|
|
RtlLargeIntegerAdd@16
|
|
RtlLengthRequiredSid@4
|
|
RtlLengthSecurityDescriptor@4
|
|
RtlLengthSid@4
|
|
RtlLockHeap@4
|
|
RtlMakeSelfRelativeSD@12
|
|
RtlMoveMemory@12
|
|
RtlMultiByteToUnicodeN@20
|
|
RtlMultiByteToUnicodeSize@12
|
|
RtlNormalizeProcessParams@4
|
|
RtlNtStatusToDosError@4
|
|
RtlNumberOfClearBits@4
|
|
RtlNumberOfSetBits@4
|
|
RtlOemStringToUnicodeSize@4
|
|
RtlOemStringToUnicodeString@12
|
|
RtlOemToUnicodeN@12
|
|
RtlOpenCurrentUser@8
|
|
RtlPrefixString@12
|
|
RtlPrefixUnicodeString@12
|
|
RtlQueryEnvironmentVariable_U@12
|
|
RtlReAllocateHeap@16
|
|
RtlReleasePebLock@0
|
|
RtlReleaseResource@4
|
|
RtlResetRtlTranslations@4
|
|
RtlSetAllBits@4
|
|
RtlSetBits@12
|
|
RtlSetCurrentDirectory_U@4
|
|
RtlSetCurrentEnvironment@8
|
|
RtlSetDaclSecurityDescriptor@16
|
|
RtlSetEnvironmentVariable@12
|
|
RtlSetGroupSecurityDescriptor@12
|
|
RtlSetOwnerSecurityDescriptor@12
|
|
RtlSetSaclSecurityDescriptor@16
|
|
RtlSizeHeap@12
|
|
RtlSubAuthorityCountSid@4
|
|
RtlSubAuthoritySid@8
|
|
RtlTimeToSecondsSince1970@8
|
|
RtlUnicodeStringToAnsiSize@4
|
|
RtlUnicodeStringToAnsiString@12
|
|
RtlUnicodeStringToCountedOemString@12
|
|
RtlUnicodeStringToOemSize@4
|
|
RtlUnicodeStringToOemString@12
|
|
RtlUnicodeToMultiByteN@20
|
|
RtlUnicodeToMultiByteSize@12
|
|
RtlUnicodeToOemN@20
|
|
RtlUnlockHeap@4
|
|
RtlUpcaseUnicodeChar@4
|
|
RtlUpcaseUnicodeString@12
|
|
RtlUpcaseUnicodeStringToAnsiString@12
|
|
RtlUpcaseUnicodeStringToCountedOemString@12
|
|
RtlUpcaseUnicodeStringToOemString@12
|
|
RtlUpcaseUnicodeToMultiByteN@20
|
|
RtlUpcaseUnicodeToOemN@20
|
|
RtlUpperChar@4
|
|
RtlUpperString@12
|
|
RtlValidSid@4
|
|
RtlValidateHeap@12
|
|
RtlValidateProcessHeaps@0
|
|
RtlValidSecurityDescriptor@4
|
|
RtlZeroMemory@8
|
|
RtlxAnsiStringToUnicodeSize@4
|
|
RtlxOemStringToUnicodeSize@4
|
|
RtlxUnicodeStringToAnsiSize@4
|
|
RtlxUnicodeStringToOemSize@4
|
|
ZwAccessCheck@32
|
|
ZwAdjustPrivilegesToken@24
|
|
ZwAllocateVirtualMemory@24
|
|
ZwClose@4
|
|
ZwConnectPort@32
|
|
ZwCreateFile@44
|
|
ZwCreateKey@28
|
|
ZwDeleteValueKey@8
|
|
ZwEnumerateKey@24
|
|
ZwEnumerateValueKey@24
|
|
ZwFlushVirtualMemory@16
|
|
ZwFreeVirtualMemory@16
|
|
ZwLockVirtualMemory@16
|
|
ZwOpenEvent@12
|
|
ZwOpenFile@24
|
|
ZwOpenKey@12
|
|
ZwOpenProcessToken@12
|
|
ZwOpenThreadToken@16
|
|
ZwProtectVirtualMemory@20
|
|
ZwQueryInformationToken@20
|
|
ZwQueryKey@20
|
|
ZwQueryValueKey@24
|
|
ZwQueryVirtualMemory@24
|
|
ZwReadFile@36
|
|
ZwReadVirtualMemory@20
|
|
ZwRequestWaitReplyPort@12
|
|
ZwSetSecurityObject@12
|
|
ZwSetValueKey@24
|
|
ZwUnlockVirtualMemory@16
|
|
ZwWaitForSingleObject@12
|
|
ZwWriteFile@36
|
|
ZwWriteVirtualMemory@20
|
|
__isascii
|
|
__iscsym
|
|
__iscsymf
|
|
__toascii
|
|
_itoa
|
|
_itow
|
|
_ltoa
|
|
_ltow
|
|
_snprintf
|
|
_snwprintf
|
|
_strcmpi
|
|
_stricmp
|
|
_strlwr
|
|
_strnicmp
|
|
_strupr
|
|
_tolower
|
|
_toupper
|
|
_ultoa
|
|
_ultow
|
|
_vsnprintf
|
|
_wcsicmp
|
|
_wcslwr
|
|
_wcsnicmp
|
|
_wcsupr
|
|
_wtoi
|
|
_wtol
|
|
abs
|
|
atan
|
|
atoi
|
|
atol
|
|
ceil
|
|
cos
|
|
fabs
|
|
floor
|
|
isalnum
|
|
isalpha
|
|
iscntrl
|
|
isdigit
|
|
isgraph
|
|
islower
|
|
isprint
|
|
ispunct
|
|
isspace
|
|
isupper
|
|
iswalpha
|
|
iswctype
|
|
isxdigit
|
|
labs
|
|
log
|
|
mbstowcs
|
|
memchr
|
|
memcmp
|
|
memcpy
|
|
memmove
|
|
memset
|
|
pow
|
|
sin
|
|
sprintf
|
|
sqrt
|
|
strcat
|
|
strchr
|
|
strcmp
|
|
strcpy
|
|
strcspn
|
|
strlen
|
|
strncat
|
|
strncmp
|
|
strncpy
|
|
strpbrk
|
|
strrchr
|
|
strspn
|
|
strstr
|
|
strtol
|
|
strtoul
|
|
swprintf
|
|
tan
|
|
tolower
|
|
toupper
|
|
towlower
|
|
towupper
|
|
vsprintf
|
|
wcscat
|
|
wcschr
|
|
wcscmp
|
|
wcscpy
|
|
wcscspn
|
|
wcslen
|
|
wcsncat
|
|
wcsncmp
|
|
wcsncpy
|
|
wcspbrk
|
|
wcsrchr
|
|
wcsspn
|
|
wcsstr
|
|
wcstol
|
|
wcstombs
|
|
wcstoul
|