ntdll.def

ReactOS是一些高手根据Windows XP的内核编写出的类XP。内核实现机理和API函数调用几乎相同。甚至可以兼容XP的程序。喜欢研究系统内核的人可以看一看。

; $Id: ntdll.def 27344 2007-06-30 14:12:10Z greatlrd $
;
; ReactOS Operating System
;
LIBRARY ntdll.dll

EXPORTS
CsrAllocateCaptureBuffer@8
CsrAllocateMessagePointer@12
CsrCaptureMessageBuffer@16
CsrCaptureMessageMultiUnicodeStringsInPlace@12
CsrCaptureMessageString@20
CsrCaptureTimeout@8
CsrClientCallServer@16
CsrClientConnectToServer@20
CsrFreeCaptureBuffer@4
CsrGetProcessId@0
CsrIdentifyAlertableThread@0
CsrNewThread@0
CsrProbeForRead@12
CsrProbeForWrite@12
CsrSetPriorityClass@8
DbgBreakPoint@0
DbgPrint
DbgPrintEx
DbgPrompt@12
DbgUiConvertStateChangeStructure@8
DbgUiDebugActiveProcess@4
DbgUiConnectToDbg@0
DbgUiContinue@8
DbgUiGetThreadDebugObject@0
DbgUiIssueRemoteBreakin@4
DbgUiRemoteBreakin@0
DbgUiSetThreadDebugObject@4
DbgUiStopDebugging@4
DbgUiWaitStateChange@8
DbgUserBreakPoint@0
KiRaiseUserExceptionDispatcher@0
KiUserApcDispatcher@16
KiUserCallbackDispatcher@12
KiUserExceptionDispatcher@8
KiIntSystemCall@0
KiFastSystemCallRet@0
KiFastSystemCall@0
LdrAccessResource@16
LdrAddRefDll@8
LdrDisableThreadCalloutsForDll@4
LdrEnumResources@20
LdrFindEntryForAddress@8
LdrFindResourceDirectory_U@16
LdrFindResource_U@16
LdrGetDllHandle@16
LdrGetProcedureAddress@16
LdrInitializeThunk@16
LdrLoadDll@16
LdrProcessRelocationBlock@16
LdrQueryImageFileExecutionOptions@24
LdrQueryProcessModuleInformation@12
LdrShutdownProcess@0
LdrShutdownThread@0
LdrUnloadDll@4
LdrVerifyImageMatchesChecksum@16
NlsAnsiCodePage DATA
NlsMbCodePageTag DATA
NlsMbOemCodePageTag DATA
NtAcceptConnectPort@24
NtAccessCheck@32
NtAccessCheckAndAuditAlarm@44
NtAddAtom@12
NtAddBootEntry@8
NtAdjustGroupsToken@24
NtAdjustPrivilegesToken@24
NtAlertResumeThread@8
NtAlertThread@4
NtAllocateLocallyUniqueId@4
NtAllocateUuids@16
NtAllocateVirtualMemory@24
NtAssignProcessToJobObject@8
NtCallbackReturn@12
NtCancelIoFile@8
NtCancelTimer@8
NtClearEvent@4
NtClose@4
NtCloseObjectAuditAlarm@12
NtCompareTokens@12
NtCompleteConnectPort@4
NtConnectPort@32
NtContinue@8
NtCreateDebugObject@16
NtCreateDirectoryObject@12
NtCreateEvent@20
NtCreateEventPair@12
NtCreateFile@44
NtCreateIoCompletion@16
NtCreateJobObject@12
NtCreateKey@28
NtCreateMailslotFile@32
NtCreateMutant@16
NtCreateNamedPipeFile@56
NtCreatePagingFile@16
NtCreatePort@20
NtCreateProcess@32
NtCreateProfile@36
NtCreateSection@28
NtCreateSemaphore@20
NtCreateSymbolicLinkObject@16
NtCreateThread@32
NtCreateTimer@16
NtCreateToken@52
NtCreateWaitablePort@20
NtCurrentTeb=_NtCurrentTeb@0
NtDebugContinue@12
NtDelayExecution@8
NtDeleteAtom@4
NtDeleteFile@4
NtDeleteKey@4
NtDeleteObjectAuditAlarm@12
NtDeleteValueKey@8
NtDeviceIoControlFile@40
NtDisplayString@4
NtDuplicateObject@28
NtDuplicateToken@24
NtEnumerateKey@24
NtEnumerateValueKey@24
NtExtendSection@8
NtFindAtom@12
NtFlushBuffersFile@8
NtFlushInstructionCache@12
NtFlushKey@4
NtFlushVirtualMemory@16
NtFlushWriteBuffer@0
NtFreeVirtualMemory@16
NtFsControlFile@40
NtGetContextThread@8
NtGetPlugPlayEvent@16
NtImpersonateAnonymousToken@4
NtImpersonateClientOfPort@8
NtImpersonateThread@12
NtInitializeRegistry@4
NtIsProcessInJob@8
NtListenPort@8
NtLoadDriver@4
NtLoadKey@8
NtLoadKey2@12
NtLockFile@40
NtLockVirtualMemory@16
NtMakeTemporaryObject@4
NtMapViewOfSection@40
NtNotifyChangeDirectoryFile@36
NtNotifyChangeKey@40
NtOpenDirectoryObject@12
NtOpenEvent@12
NtOpenEventPair@12
NtOpenFile@24
NtOpenIoCompletion@12
NtOpenJobObject@12
NtOpenKey@12
NtOpenMutant@12
NtOpenObjectAuditAlarm@48
NtOpenProcess@16
NtOpenProcessToken@12
NtOpenSection@12
NtOpenSemaphore@12
NtOpenSymbolicLinkObject@12
NtOpenThread@16
NtOpenThreadToken@16
NtOpenTimer@12
NtPlugPlayControl@12
NtPowerInformation@20
NtPrivilegeCheck@12
NtPrivilegedServiceAuditAlarm@20
NtPrivilegeObjectAuditAlarm@24
NtProtectVirtualMemory@20
NtPulseEvent@8
NtQueryAttributesFile@8
NtQueryDebugFilterState@8
NtQueryDefaultLocale@8
NtQueryDefaultUILanguage@4
NtQueryDirectoryFile@44
NtQueryDirectoryObject@28
NtQueryEaFile@36
NtQueryEvent@20
NtQueryFullAttributesFile@8
NtQueryInformationAtom@20
NtQueryInformationFile@20
NtQueryInformationJobObject@20
NtQueryInformationPort@20
NtQueryInformationProcess@20
NtQueryInformationThread@20
NtQueryInformationToken@20
NtQueryInstallUILanguage@4
NtQueryIntervalProfile@8
NtQueryIoCompletion@20
NtQueryKey@20
NtQueryMultipleValueKey@24
NtQueryMutant@20
NtQueryObject@20
NtQueryPerformanceCounter@8
NtQuerySection@20
NtQuerySecurityObject@20
NtQuerySemaphore@20
NtQuerySymbolicLinkObject@12
NtQuerySystemEnvironmentValue@16
NtQuerySystemInformation@16
NtQuerySystemTime@4
NtQueryTimer@20
NtQueryTimerResolution@12
NtQueryValueKey@24
NtQueryVirtualMemory@24
NtQueryVolumeInformationFile@20
NtQueueApcThread@20
NtRaiseException@12
NtRaiseHardError@24
NtReadFile@36
NtReadFileScatter@36
NtReadRequestData@24
NtReadVirtualMemory@20
NtRegisterThreadTerminatePort@4
NtReleaseMutant@8
NtReleaseSemaphore@12
NtRemoveIoCompletion@20
NtReplaceKey@12
NtReplyPort@8
NtReplyWaitReceivePort@16
NtReplyWaitReceivePortEx@20
NtReplyWaitReplyPort@8
NtRequestPort@8
NtRequestWaitReplyPort@12
NtResetEvent@8
NtRestoreKey@12
NtResumeProcess@4
NtResumeThread@8
NtSaveKey@8
NtSecureConnectPort@36
NtSetContextThread@8
NtSetDebugFilterState@12
NtSetDefaultHardErrorPort@4
NtSetDefaultLocale@8
NtSetDefaultUILanguage@4
NtSetEaFile@16
NtSetEvent@8
NtSetHighEventPair@4
NtSetHighWaitLowEventPair@4
NtSetInformationDebugObject@20
NtSetInformationFile@20
NtSetInformationJobObject@16
NtSetInformationKey@16
NtSetInformationObject@16
NtSetInformationProcess@16
NtSetInformationThread@16
NtSetInformationToken@16
NtSetIntervalProfile@8
NtSetIoCompletion@20
NtSetLdtEntries@24
NtSetLowEventPair@4
NtSetLowWaitHighEventPair@4
NtSetSecurityObject@12
NtSetSystemEnvironmentValue@8
NtSetSystemInformation@12
NtSetSystemPowerState@12
NtSetSystemTime@8
NtSetTimer@28
NtSetTimerResolution@12
NtSetUuidSeed@4
NtSetValueKey@24
NtSetVolumeInformationFile@20
NtShutdownSystem@4
NtSignalAndWaitForSingleObject@16
NtStartProfile@4
NtStopProfile@4
NtSuspendProcess@4
NtSuspendThread@8
NtSystemDebugControl@24
NtTerminateJobObject@8
NtTerminateProcess@8
NtTerminateThread@8
NtTestAlert@0
NtUnloadDriver@4
NtUnloadKey@4
NtUnlockFile@20
NtUnlockVirtualMemory@16
NtUnmapViewOfSection@8
NtVdmControl@8
NtWaitForDebugEvent@16
NtWaitForMultipleObjects@20
NtWaitForSingleObject@12
NtWaitHighEventPair@4
NtWaitLowEventPair@4
NtWriteFile@36
NtWriteFileGather@36
NtWriteRequestData@24
NtWriteVirtualMemory@20
NtYieldExecution@0
;PfxFindPrefix
;PfxInitialize
;PfxInsertPrefix
;PfxRemovePrefix
;PropertyLengthAsVariant
;RestoreEm87Context
;RtlAbortRXact
RtlAbsoluteToSelfRelativeSD@12
RtlAcquirePebLock@0
RtlAcquireResourceExclusive@8
RtlAcquireResourceShared@8
RtlAcquireSRWLockExclusive@4
RtlAcquireSRWLockShared@4
RtlAddAccessAllowedAce@16
RtlAddAccessAllowedAceEx@20
RtlAddAccessAllowedObjectAce@28
RtlAddAccessDeniedAce@16
RtlAddAccessDeniedAceEx@20
RtlAddAccessDeniedObjectAce@28
RtlAddAce@20
;RtlAddActionToRXact
RtlAddAtomToAtomTable@12
;RtlAddAttributeActionToRXact
RtlAddAuditAccessAce@24
RtlAddAuditAccessAceEx@28
RtlAddAuditAccessObjectAce@36
;RtlAddCompoundAce
RtlAddMandatoryAce@24
RtlAddRange@36
RtlAddVectoredExceptionHandler@8
RtlAdjustPrivilege@16
RtlAllocateAndInitializeSid@44
RtlAllocateHandle@8
RtlAllocateHeap@12
RtlAnsiCharToUnicodeChar@4
RtlAnsiStringToUnicodeSize@4=RtlxAnsiStringToUnicodeSize@4
RtlAnsiStringToUnicodeString@12
RtlAppendAsciizToString@8
RtlAppendStringToString@8
RtlAppendUnicodeStringToString@8
RtlAppendUnicodeToString@8
;RtlApplyRXact
;RtlApplyRXactNoFlush
RtlAreAllAccessesGranted@8
RtlAreAnyAccessesGranted@8
RtlAreBitsClear@12
RtlAreBitsSet@12
RtlAssert@16
RtlCaptureStackBackTrace@16
RtlCharToInteger@12
RtlCheckRegistryKey@8
RtlClearAllBits@4
RtlClearBits@12
RtlCompactHeap@8
RtlCompareMemory@12
RtlCompareMemoryUlong@12
RtlCompareString@12
RtlCompareUnicodeString@12
RtlCompressBuffer@32
RtlComputeCrc32@12
;RtlConsoleMultiByteToUnicodeN
RtlConvertExclusiveToShared@4
RtlConvertLongToLargeInteger@4
RtlConvertSharedToExclusive@4
RtlConvertSidToUnicodeString@12
;RtlConvertUiListToApiList
RtlConvertUlongToLargeInteger@4
RtlCopyLuid@8
RtlCopyLuidAndAttributesArray@12
RtlCopyRangeList@8
;RtlCopySecurityDescriptor
RtlCopySid@12
RtlCopySidAndAttributesArray@28
RtlCopyString@8
RtlCopyUnicodeString@8
RtlCreateAcl@12
;RtlCreateAndSetSD
RtlCreateAtomTable@8
RtlCreateEnvironment@8
RtlCreateHeap@24
RtlCreateProcessParameters@40
RtlCreateQueryDebugBuffer@8
RtlCreateRegistryKey@8
RtlCreateSecurityDescriptor@8
RtlCreateTagHeap@16
RtlCreateTimer@28
RtlCreateTimerQueue@4
RtlCreateUnicodeString@8
RtlCreateUnicodeStringFromAsciiz@8
RtlCreateUserProcess@40
;RtlCreateUserSecurityObject
RtlCreateUserThread@40
RtlCustomCPToUnicodeN@24
RtlCutoverTimeToSystemTime@16
RtlDeNormalizeProcessParams@4
RtlDecodePointer=RtlEncodePointer@4
RtlDecompressBuffer@24
RtlDecompressFragment@32
RtlDelete@4
RtlDeleteAce@8
RtlDeleteAtomFromAtomTable@8
RtlDeleteCriticalSection@4
RtlDeleteElementGenericTable@8
RtlDeleteElementGenericTableAvl@8
RtlDeleteNoSplay@8
RtlDeleteOwnersRanges@8
RtlDeleteRange@24
RtlDeleteRegistryValue@12
RtlDeleteResource@4
RtlDeleteSecurityObject@4
RtlDeleteTimer@12
RtlDeleteTimerQueue@4
RtlDeleteTimerQueueEx@8
RtlDestroyAtomTable@4
RtlDestroyEnvironment@4
RtlDestroyHandleTable@4
RtlDestroyHeap@4
RtlDestroyProcessParameters@4
RtlDestroyQueryDebugBuffer@4
RtlDetermineDosPathNameType_U@4
RtlDllShutdownInProgress@0
RtlDoesFileExists_U@4
RtlDosPathNameToNtPathName_U@16
RtlDosPathNameToRelativeNtPathName_U@16
RtlDosSearchPath_U@24
RtlDowncaseUnicodeChar@4
RtlDowncaseUnicodeString@12
RtlDumpResource@4
RtlDuplicateUnicodeString@12
RtlEmptyAtomTable@8
RtlEncodePointer@4
RtlEnlargedIntegerMultiply@8
RtlEnlargedUnsignedDivide@16
RtlEnlargedUnsignedMultiply@8
RtlEnterCriticalSection@4
RtlEnumProcessHeaps@8
RtlEnumerateGenericTable@8
RtlEnumerateGenericTableAvl@8
RtlEnumerateGenericTableLikeADirectory@28
RtlEnumerateGenericTableWithoutSplaying@8
RtlEnumerateGenericTableWithoutSplayingAvl@8
RtlEqualComputerName@8
RtlEqualDomainName@8
RtlEqualLuid@8
RtlEqualPrefixSid@8
RtlEqualSid@8
RtlEqualString@12
RtlEqualUnicodeString@12
RtlEraseUnicodeString@4
RtlExitUserThread@4
RtlExpandEnvironmentStrings_U@16
RtlExtendHeap@16
RtlExtendedIntegerMultiply@12
RtlExtendedLargeIntegerDivide@16
RtlExtendedMagicDivide@20
RtlFillMemory@12
RtlFillMemoryUlong@12
RtlFindClearBits@12
RtlFindClearBitsAndSet@12
RtlFindClearRuns@16
RtlFindLastBackwardRunClear@12
RtlFindLeastSignificantBit@8
RtlFindLongestRunClear@8
RtlFindLongestRunSet@8
RtlFindMessage@20
RtlFindMostSignificantBit@8
RtlFindNextForwardRunClear@12
RtlFindRange@48
RtlFindSetBits@12
RtlFindSetBitsAndClear@12
RtlFirstFreeAce@8
RtlFormatCurrentUserKeyPath@4
RtlFormatMessage@32
RtlFreeAnsiString@4
RtlFreeHandle@8
RtlFreeHeap@12
RtlFreeOemString@4
RtlFreeRangeList@4
RtlFreeSid@4
RtlFreeUnicodeString@4
RtlFreeUserThreadStack@8
RtlGUIDFromString@8
RtlGenerate8dot3Name@16
RtlGetAce@12
;RtlGetCallersAddress
RtlGetCompressionWorkSpaceSize@12
RtlGetControlSecurityDescriptor@12
RtlGetCurrentDirectory_U@8
RtlGetDaclSecurityDescriptor@16
RtlGetElementGenericTable@8
RtlGetElementGenericTableAvl@8
RtlGetFirstRange@12
RtlGetFullPathName_U@16
RtlGetGroupSecurityDescriptor@12
RtlGetLastNtStatus@0
RtlGetLastWin32Error@0
RtlGetLongestNtPathLength@0
RtlGetNextRange@12
RtlGetNtGlobalFlags@0
RtlGetNtProductType@4
RtlGetNtVersionNumbers@12
RtlGetOwnerSecurityDescriptor@12
RtlGetProcessHeaps@8
RtlGetSaclSecurityDescriptor@16
RtlGetSecurityDescriptorRMControl@8
RtlGetSetBootStatusData@24
RtlGetUserInfoHeap@20
RtlGetVersion@4
RtlHashUnicodeString@16
RtlIdentifierAuthoritySid@4
RtlImageDirectoryEntryToData@16
RtlImageNtHeader@4
RtlImageRvaToSection@12
RtlImageRvaToVa@16
RtlImpersonateSelf@4
RtlInitAnsiString@8
RtlInitCodePageTable@8
RtlInitNlsTables@16
RtlInitString@8
RtlInitUnicodeString@8
RtlInitUnicodeStringEx@8
;RtlInitializeAtomPackage
RtlInitializeBitMap@12
RtlInitializeConditionVariable@4
RtlInitializeContext@20
RtlInitializeCriticalSection@4
RtlInitializeCriticalSectionAndSpinCount@8
RtlInitializeGenericTable@20
RtlInitializeGenericTableAvl@20
RtlInitializeHandleTable@12
RtlInitializeRangeList@4
RtlInitializeResource@4
;RtlInitializeRXact
RtlInitializeSid@12
RtlInitializeSRWLock@4
RtlInsertElementGenericTable@16
RtlInsertElementGenericTableAvl@16
RtlInsertElementGenericTableFull@24
RtlInsertElementGenericTableFullAvl@24
RtlInt64ToUnicodeString@16
RtlIntegerToChar@16
RtlIntegerToUnicodeString@12
RtlInvertRangeList@8
RtlIpv4AddressToStringA@8
RtlIpv4AddressToStringExA@16
RtlIpv4AddressToStringExW@16
RtlIpv4AddressToStringW@8
RtlIpv4StringToAddressA@16
RtlIpv4StringToAddressExA@16
RtlIpv4StringToAddressExW@16
RtlIpv4StringToAddressW@16
RtlIpv6AddressToStringA@8
RtlIpv6AddressToStringExA@20
RtlIpv6AddressToStringExW@20