ntdll.def

ReactOS是一些高手根据Windows XP的内核编写出的类XP。内核实现机理和API函数调用几乎相同。甚至可以兼容XP的程序。喜欢研究系统内核的人可以看一看。

RtlIpv6AddressToStringW@8
RtlIpv6StringToAddressA@12
RtlIpv6StringToAddressExA@16
RtlIpv6StringToAddressExW@16
RtlIpv6StringToAddressW@12
RtlIsDosDeviceName_U@4
RtlIsGenericTableEmpty@4
RtlIsGenericTableEmptyAvl@4
RtlIsNameLegalDOS8Dot3@12
RtlIsRangeAvailable@40
RtlIsTextUnicode@12
RtlIsValidHandle@8
RtlIsValidIndexHandle@12
RtlLargeIntegerAdd@16
RtlLargeIntegerArithmeticShift@12
RtlLargeIntegerDivide@20
RtlLargeIntegerNegate@8
RtlLargeIntegerShiftLeft@12
RtlLargeIntegerShiftRight@12
RtlLargeIntegerSubtract@16
RtlLargeIntegerToChar@16
RtlLeaveCriticalSection@4
RtlLengthRequiredSid@4
RtlLengthSecurityDescriptor@4
RtlLengthSid@4
RtlLocalTimeToSystemTime@8
RtlLockBootStatusData@4
RtlLockHeap@4
RtlLookupAtomInAtomTable@12
RtlLookupElementGenericTable@8
RtlLookupElementGenericTableAvl@8
RtlLookupElementGenericTableFull@16
RtlLookupElementGenericTableFullAvl@16
RtlMakeSelfRelativeSD@12
RtlMapGenericMask@8
RtlMergeRangeLists@16
RtlMoveMemory@12
RtlMultiByteToUnicodeN@20
RtlMultiByteToUnicodeSize@12
;RtlNewInstanceSecurityObject
;RtlNewSecurityGrantedAccess
RtlNewSecurityObject@24
RtlNormalizeProcessParams@4
RtlNtPathNameToDosPathName@16
RtlNtStatusToDosError@4
RtlNumberGenericTableElements@4
RtlNumberGenericTableElementsAvl@4
RtlNumberOfClearBits@4
RtlNumberOfSetBits@4
RtlOemStringToUnicodeSize@4=RtlxOemStringToUnicodeSize@4
RtlOemStringToUnicodeString@12
RtlOemToUnicodeN@20
RtlOpenCurrentUser@8
RtlPcToFileHeader@8
RtlPinAtomInAtomTable@8
RtlPrefixString@12
RtlPrefixUnicodeString@12
;RtlProtectHeap
RtlQueryAtomInAtomTable@24
RtlQueryEnvironmentVariable_U@12
RtlQueryInformationAcl@16
;RtlQueryProcessBackTraceInformation
RtlQueryProcessDebugInformation@12
;RtlQueryProcessHeapInformation
;RtlQueryProcessLockInformation
RtlQueryRegistryValues@20
RtlQuerySecurityObject@20
RtlQueryTagHeap@20
RtlQueryTimeZoneInformation@4
RtlQueueWorkItem@12
RtlRaiseException@4
RtlRaiseStatus@4
RtlRandom@4
RtlRandomEx=RtlRandom@4
RtlReAllocateHeap@16
RtlRealPredecessor@4
RtlRealSuccessor@4
RtlReleasePebLock@0
RtlReleaseRelativeName@4
RtlReleaseResource@4
RtlReleaseSRWLockExclusive@4
RtlReleaseSRWLockShared@4
;RtlRemoteCall
RtlRemoveVectoredExceptionHandler@4
RtlResetRtlTranslations@4
RtlRestoreLastWin32Error@4=RtlSetLastWin32Error@4
RtlRunDecodeUnicodeString@8
RtlRunEncodeUnicodeString@8
RtlSecondsSince1970ToTime@8
RtlSecondsSince1980ToTime@8
RtlSelfRelativeToAbsoluteSD2@8
RtlSelfRelativeToAbsoluteSD@44
RtlSetAllBits@4
RtlSetAttributesSecurityDescriptor@12
RtlSetBits@12
RtlSetControlSecurityDescriptor@12
RtlSetCriticalSectionSpinCount@8
RtlSetCurrentDirectory_U@4
RtlSetCurrentEnvironment@8
RtlSetDaclSecurityDescriptor@16
RtlSetEnvironmentVariable@12
RtlSetGroupSecurityDescriptor@12
RtlSetInformationAcl@16
RtlSetLastWin32Error@4
RtlSetLastWin32ErrorAndNtStatusFromNtStatus@4
RtlSetOwnerSecurityDescriptor@12
RtlSetProcessIsCritical@12
RtlSetSaclSecurityDescriptor@16
RtlSetSecurityDescriptorRMControl@8
RtlSetSecurityObject@20
RtlSetTimeZoneInformation@4
;RtlSetUnicodeCallouts
;RtlSetUserFlagsHeap
RtlSetUserValueHeap@16
RtlSizeHeap@12
RtlSleepConditionVariableCS@12
RtlSleepConditionVariableSRW@16
RtlSplay@4
;RtlStartRXact
RtlStringFromGUID@8
RtlSubAuthorityCountSid@4
RtlSubAuthoritySid@8
RtlSubtreePredecessor@4
RtlSubtreeSuccessor@4
RtlSystemTimeToLocalTime@8
RtlTimeFieldsToTime@8
RtlTimeToElapsedTimeFields@8
RtlTimeToSecondsSince1970@8
RtlTimeToSecondsSince1980@8
RtlTimeToTimeFields@8
RtlTryEnterCriticalSection@4
@RtlUlongByteSwap@4
@RtlUlonglongByteSwap@8
RtlUnhandledExceptionFilter@4
RtlUnicodeStringToAnsiSize@4=RtlxUnicodeStringToAnsiSize@4
RtlUnicodeStringToAnsiString@12
RtlUnicodeStringToCountedOemString@12
RtlUnicodeStringToInteger@12
RtlUnicodeStringToOemSize@4=RtlxUnicodeStringToOemSize@4
RtlUnicodeStringToOemString@12
RtlUnicodeToCustomCPN@24
RtlUnicodeToMultiByteN@20
RtlUnicodeToMultiByteSize@12
RtlUnicodeToOemN@20
RtlUniform@4
RtlUnlockBootStatusData@4
RtlUnlockHeap@4
RtlUnwind@16
RtlUpcaseUnicodeChar@4
RtlUpcaseUnicodeString@12
RtlUpcaseUnicodeStringToAnsiString@12
RtlUpcaseUnicodeStringToCountedOemString@12
RtlUpcaseUnicodeStringToOemString@12
RtlUpcaseUnicodeToCustomCPN@24
RtlUpcaseUnicodeToMultiByteN@20
RtlUpcaseUnicodeToOemN@20
RtlUpdateTimer@16
RtlUpperChar@4
RtlUpperString@8
RtlUsageHeap@12
@RtlUshortByteSwap@4
RtlValidAcl@4
RtlValidRelativeSecurityDescriptor@12
RtlValidSecurityDescriptor@4
RtlValidSid@4
RtlValidateHeap@12
RtlValidateProcessHeaps@0
RtlValidateUnicodeString@8
RtlVerifyVersionInfo@16
;RtlWalkHeap
RtlWakeAllConditionVariable@4
RtlWakeConditionVariable@4
RtlWriteRegistryValue@24
;RtlZeroHeap
RtlZeroMemory@8
RtlpEnsureBufferSize@12
RtlpNtCreateKey@24
RtlpNtEnumerateSubKey@16
RtlpNtMakeTemporaryKey@4
RtlpNtOpenKey@16
RtlpNtQueryValueKey@20
RtlpNtSetValueKey@16
RtlpUnWaitCriticalSection@4
RtlpWaitForCriticalSection@4
RtlxAnsiStringToUnicodeSize@4
RtlxOemStringToUnicodeSize@4
RtlxUnicodeStringToAnsiSize@4
RtlxUnicodeStringToOemSize@4
;SaveEm87Context
VerSetConditionMask@16
ZwAcceptConnectPort@24
ZwAccessCheck@32
ZwAccessCheckAndAuditAlarm@44
ZwAddAtom@12
ZwAdjustGroupsToken@24
ZwAdjustPrivilegesToken@24
ZwAlertResumeThread@8
ZwAlertThread@4
ZwAllocateLocallyUniqueId@4
ZwAllocateUuids@16
ZwAllocateVirtualMemory@24
ZwAssignProcessToJobObject@8
ZwCallbackReturn@12
ZwCancelIoFile@8
ZwCancelTimer@8
ZwClearEvent@4
ZwClose@4
ZwCloseObjectAuditAlarm@12
ZwCompareTokens@12
ZwCompleteConnectPort@4
ZwConnectPort@32
ZwContinue@8
ZwCreateDebugObject@16
ZwCreateDirectoryObject@12
ZwCreateEvent@20
ZwCreateEventPair@12
ZwCreateFile@44
ZwCreateIoCompletion@16
ZwCreateJobObject@12
ZwCreateKey@28
ZwCreateMailslotFile@32
ZwCreateMutant@16
ZwCreateNamedPipeFile@56
ZwCreatePagingFile@16
ZwCreatePort@20
ZwCreateProcess@32
ZwCreateProfile@36
ZwCreateSection@28
ZwCreateSemaphore@20
ZwCreateSymbolicLinkObject@16
ZwCreateThread@32
ZwCreateTimer@16
ZwCreateToken@52
ZwCreateWaitablePort@20
ZwDebugContinue@12
ZwDelayExecution@8
ZwDeleteAtom@4
ZwDeleteFile@4
ZwDeleteKey@4
ZwDeleteObjectAuditAlarm@12
ZwDeleteValueKey@8
ZwDeviceIoControlFile@40
ZwDisplayString@4
ZwDuplicateObject@28
ZwDuplicateToken@24
ZwEnumerateKey@24
ZwEnumerateValueKey@24
ZwExtendSection@8
ZwFindAtom@12
ZwFlushBuffersFile@8
ZwFlushInstructionCache@12
ZwFlushKey@4
ZwFlushVirtualMemory@16
ZwFlushWriteBuffer@0
ZwFreeVirtualMemory@16
ZwFsControlFile@40
ZwGetContextThread@8
ZwGetPlugPlayEvent@16
ZwImpersonateAnonymousToken@4
ZwImpersonateClientOfPort@8
ZwImpersonateThread@12
ZwInitializeRegistry@4
ZwIsProcessInJob@8
ZwListenPort@8
ZwLoadDriver@4
ZwLoadKey@8
ZwLoadKey2@12
ZwLockFile@40
ZwLockVirtualMemory@16
ZwMakeTemporaryObject@4
ZwMapViewOfSection@40
ZwNotifyChangeDirectoryFile@36
ZwNotifyChangeKey@40
ZwOpenDirectoryObject@12
ZwOpenEvent@12
ZwOpenEventPair@12
ZwOpenFile@24
ZwOpenIoCompletion@12
ZwOpenJobObject@12
ZwOpenKey@12
ZwOpenMutant@12
ZwOpenObjectAuditAlarm@48
ZwOpenProcess@16
ZwOpenProcessToken@12
ZwOpenSection@12
ZwOpenSemaphore@12
ZwOpenSymbolicLinkObject@12
ZwOpenThread@16
ZwOpenThreadToken@16
ZwOpenTimer@12
ZwPlugPlayControl@12
ZwPowerInformation@20
ZwPrivilegeCheck@12
ZwPrivilegedServiceAuditAlarm@20
ZwPrivilegeObjectAuditAlarm@24
ZwProtectVirtualMemory@20
ZwPulseEvent@8
ZwQueryAttributesFile@8
ZwQueryDebugFilterState@8
ZwQueryDefaultLocale@8
ZwQueryDefaultUILanguage@4
ZwQueryDirectoryFile@44
ZwQueryDirectoryObject@28
ZwQueryEaFile@36
ZwQueryEvent@20
ZwQueryFullAttributesFile@8
ZwQueryInformationAtom@20
ZwQueryInformationFile@20
ZwQueryInformationJobObject@20
ZwQueryInformationPort@20
ZwQueryInformationProcess@20
ZwQueryInformationThread@20
ZwQueryInformationToken@20
ZwQueryInstallUILanguage@4
ZwQueryIntervalProfile@8
ZwQueryIoCompletion@20
ZwQueryKey@20
ZwQueryMultipleValueKey@24
ZwQueryMutant@20
ZwQueryObject@20
ZwQueryPerformanceCounter@8
ZwQuerySection@20
ZwQuerySecurityObject@20
ZwQuerySemaphore@20
ZwQuerySymbolicLinkObject@12
ZwQuerySystemEnvironmentValue@16
ZwQuerySystemInformation@16
ZwQuerySystemTime@4
ZwQueryTimer@20
ZwQueryTimerResolution@12
ZwQueryValueKey@24
ZwQueryVirtualMemory@24
ZwQueryVolumeInformationFile@20
ZwQueueApcThread@20
ZwRaiseException@12
ZwRaiseHardError@24
ZwReadFile@36
ZwReadFileScatter@36
ZwReadRequestData@24
ZwReadVirtualMemory@20
ZwRegisterThreadTerminatePort@4
ZwReleaseMutant@8
ZwReleaseSemaphore@12
ZwRemoveIoCompletion@20
ZwReplaceKey@12
ZwReplyPort@8
ZwReplyWaitReceivePort@16
ZwReplyWaitReceivePortEx@20
ZwReplyWaitReplyPort@8
ZwRequestPort@8
ZwRequestWaitReplyPort@12
ZwResetEvent@8
ZwRestoreKey@12
ZwResumeProcess@4
ZwResumeThread@8
ZwSaveKey@8
ZwSecureConnectPort@36
ZwSetContextThread@8
ZwSetDebugFilterState@12
ZwSetDefaultHardErrorPort@4
ZwSetDefaultLocale@8
ZwSetDefaultUILanguage@4
ZwSetEaFile@16
ZwSetEvent@8
ZwSetHighEventPair@4
ZwSetHighWaitLowEventPair@4
ZwSetInformationDebugObject@20
ZwSetInformationFile@20
ZwSetInformationJobObject@16
ZwSetInformationKey@16
ZwSetInformationObject@16
ZwSetInformationProcess@16
ZwSetInformationThread@16
ZwSetInformationToken@16
ZwSetIntervalProfile@8
ZwSetIoCompletion@20
ZwSetLdtEntries@24
ZwSetLowEventPair@4
ZwSetLowWaitHighEventPair@4
ZwSetSecurityObject@12
ZwSetSystemEnvironmentValue@8
ZwSetSystemInformation@12
ZwSetSystemPowerState@12
ZwSetSystemTime@8
ZwSetTimer@28
ZwSetTimerResolution@12
ZwSetUuidSeed@4
ZwSetValueKey@24
ZwSetVolumeInformationFile@20
ZwShutdownSystem@4
ZwSignalAndWaitForSingleObject@16
ZwStartProfile@4
ZwStopProfile@4
ZwSuspendProcess@4
ZwSuspendThread@8
ZwSystemDebugControl@24
ZwTerminateJobObject@8
ZwTerminateProcess@8
ZwTerminateThread@8
ZwTestAlert@0
ZwUnloadDriver@4
ZwUnloadKey@4
ZwUnlockFile@20
ZwUnlockVirtualMemory@16
ZwUnmapViewOfSection@8
ZwVdmControl@8
ZwWaitForDebugEvent@16
ZwWaitForMultipleObjects@20
ZwWaitForSingleObject@12
ZwWaitHighEventPair@4
ZwWaitLowEventPair@4
ZwWriteFile@36
ZwWriteFileGather@36
ZwWriteRequestData@24
ZwWriteVirtualMemory@20
ZwYieldExecution@0
__isascii
__iscsym
__iscsymf
__toascii
_alldiv
_allmul
_alloca_probe
_allrem
_allshl
_allshr
_atoi64
_aulldiv
_aullrem
_aullshr
_chkstk
_fltused
_ftol
_i64toa
_i64tow
_itoa
_itow
_lfind
_ltoa
_ltow
_memccpy
_memicmp
_snprintf
_snwprintf
_splitpath
_strcmpi
_stricmp
_strlwr
_strnicmp
_strupr
_tolower
_toupper
_ui64toa
_ui64tow
_ultoa
_ultow
_vsnprintf
_vsnwprintf
_wcsicmp
_wcslwr
_wcsnicmp
_wcsupr
_wtoi
_wtoi64
_wtol
abs
atan
atoi
atol
bsearch
ceil
cos
fabs
floor
isalnum
isalpha
iscntrl
isdigit
isgraph
islower
isprint
ispunct
isspace
isupper
iswalpha
iswctype
iswdigit
iswlower
iswspace
iswxdigit
isxdigit
labs
log
mbstowcs
memchr
memcmp
memcpy
memmove
memset
pow
qsort
sin
sprintf
sqrt
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtol
strtoul
strtoull
swprintf
tan
tolower
toupper
towlower
towupper
vsprintf
wcscat
wcschr
wcscmp
wcscpy
wcscspn
wcslen
wcsncat
wcsncmp
wcsncpy
wcspbrk
wcsrchr
wcsspn
wcsstr
wcstol
wcstombs
wcstoul
; EOF