; ; Generated from: :iprtvfs:file(vd,d:\VMs\nt350\nt350.vdi):vfs(dvm):file(open,vol0):vfs(mount):/winnt35/system32/ntdll.dll ; Size file: 0x41b40 (269120) ; Format: PE ; Size of image: 0x46000 (286720) ; Architecture: X86 ; Timestamp: 0x2e67e68d - 1994-09-03T02:59:25 ; CsrAllocateCaptureBuffer CsrAllocateCapturePointer CsrAllocateMessagePointer CsrCaptureMessageBuffer CsrCaptureMessageString CsrCaptureTimeout CsrClientCallServer CsrClientConnectToServer CsrClientMaxMessage CsrClientSendMessage CsrClientThreadConnect CsrFreeCaptureBuffer CsrIdentifyAlertableThread CsrNewThread CsrProbeForRead CsrProbeForWrite CsrSetPriorityClass CsrpProcessCallbackRequest DbgBreakPoint DbgPrint DbgPrompt DbgSsHandleKmApiMsg DbgSsInitialize DbgUiConnectToDbg DbgUiContinue DbgUiWaitStateChange DbgUserBreakPoint KiUserApcDispatcher KiUserExceptionDispatcher LdrAccessResource LdrDisableThreadCalloutsForDll LdrFindEntryForAddress LdrFindResourceDirectory_U LdrFindResource_U LdrGetDllHandle LdrGetProcedureAddress LdrInitializeThunk LdrLoadDll LdrProcessRelocationBlock LdrQueryImageFileExecutionOptions LdrQueryProcessModuleInformation LdrShutdownProcess LdrShutdownThread LdrUnloadDll LdrVerifyImageMatchesChecksum NPXEMULATORTABLE NlsMbCodePageTag NlsMbOemCodePageTag NtAcceptConnectPort NtAccessCheck NtAccessCheckAndAuditAlarm NtAdjustGroupsToken NtAdjustPrivilegesToken NtAlertResumeThread NtAlertThread NtAllocateLocallyUniqueId NtAllocateVirtualMemory NtCancelIoFile NtCancelTimer NtClearEvent NtClose NtCloseObjectAuditAlarm NtCompleteConnectPort NtConnectPort NtContinue NtCreateDirectoryObject NtCreateEvent NtCreateEventPair NtCreateFile NtCreateIoCompletion NtCreateKey NtCreateMailslotFile NtCreateMutant NtCreateNamedPipeFile NtCreatePagingFile NtCreatePort NtCreateProcess NtCreateProfile NtCreateSection NtCreateSemaphore NtCreateSymbolicLinkObject NtCreateThread NtCreateTimer NtCreateToken NtCurrentTeb NtDelayExecution NtDeleteFile NtDeleteKey NtDeleteValueKey NtDeviceIoControlFile NtDisplayString NtDuplicateObject NtDuplicateToken NtEnumerateKey NtEnumerateValueKey NtExtendSection NtFlushBuffersFile NtFlushInstructionCache NtFlushKey NtFlushVirtualMemory NtFlushWriteBuffer NtFreeVirtualMemory NtFsControlFile NtGetContextThread NtGetTickCount NtImpersonateClientOfPort NtImpersonateThread NtInitializeRegistry NtListenPort NtLoadDriver NtLoadKey NtLockFile NtLockVirtualMemory NtMakeTemporaryObject NtMapViewOfSection NtNotifyChangeDirectoryFile NtNotifyChangeKey NtOpenDirectoryObject NtOpenEvent NtOpenEventPair NtOpenFile NtOpenIoCompletion NtOpenKey NtOpenMutant NtOpenObjectAuditAlarm NtOpenProcess NtOpenProcessToken NtOpenSection NtOpenSemaphore NtOpenSymbolicLinkObject NtOpenThread NtOpenThreadToken NtOpenTimer NtPrivilegeCheck NtPrivilegeObjectAuditAlarm NtPrivilegedServiceAuditAlarm NtProtectVirtualMemory NtPulseEvent NtQueryAttributesFile NtQueryDefaultLocale NtQueryDirectoryFile NtQueryDirectoryObject NtQueryEaFile NtQueryEvent NtQueryInformationFile NtQueryInformationPort NtQueryInformationProcess NtQueryInformationThread NtQueryInformationToken NtQueryIntervalProfile NtQueryIoCompletion NtQueryKey NtQueryMutant NtQueryObject NtQueryPerformanceCounter NtQuerySection NtQuerySecurityObject NtQuerySemaphore NtQuerySymbolicLinkObject NtQuerySystemEnvironmentValue NtQuerySystemInformation NtQuerySystemTime NtQueryTimer NtQueryTimerResolution NtQueryValueKey NtQueryVirtualMemory NtQueryVolumeInformationFile NtRaiseException NtRaiseHardError NtReadFile NtReadRequestData NtReadVirtualMemory NtRegisterThreadTerminatePort NtReleaseMutant NtReleaseProcessMutant NtReleaseSemaphore NtRemoveIoCompletion NtReplaceKey NtReplyPort NtReplyWaitReceivePort NtReplyWaitReplyPort NtRequestPort NtRequestWaitReplyPort NtResetEvent NtRestoreKey NtResumeThread NtSaveKey NtSetContextThread NtSetDefaultHardErrorPort NtSetDefaultLocale NtSetEaFile NtSetEvent NtSetHighEventPair NtSetHighWaitLowEventPair NtSetHighWaitLowThread NtSetInformationFile NtSetInformationKey NtSetInformationObject NtSetInformationProcess NtSetInformationThread NtSetInformationToken NtSetIntervalProfile NtSetLdtEntries NtSetLowEventPair NtSetLowWaitHighEventPair NtSetLowWaitHighThread NtSetSecurityObject NtSetSystemEnvironmentValue NtSetSystemInformation NtSetSystemTime NtSetTimer NtSetTimerResolution NtSetValueKey NtSetVolumeInformationFile NtShutdownSystem NtStartProfile NtStopProfile NtSuspendThread NtSystemDebugControl NtTerminateProcess NtTerminateThread NtTestAlert NtUnloadDriver NtUnloadKey NtUnlockFile NtUnlockVirtualMemory NtUnmapViewOfSection NtVdmControl NtWaitForMultipleObjects NtWaitForProcessMutant NtWaitForSingleObject NtWaitHighEventPair NtWaitLowEventPair NtWriteFile NtWriteRequestData NtWriteVirtualMemory PfxFindPrefix PfxInitialize PfxInsertPrefix PfxRemovePrefix RestoreEm87Context RtlAbortRXact RtlAbsoluteToSelfRelativeSD RtlAcquirePebLock RtlAcquireResourceExclusive RtlAcquireResourceShared RtlAddAccessAllowedAce RtlAddAccessDeniedAce RtlAddAce RtlAddActionToRXact RtlAddAttributeActionToRXact RtlAddAuditAccessAce RtlAdjustPrivilege RtlAllocateAndInitializeSid RtlAllocateHeap RtlAnsiCharToUnicodeChar RtlAnsiStringToUnicodeSize RtlAnsiStringToUnicodeString RtlAppendAsciizToString RtlAppendStringToString RtlAppendUnicodeStringToString RtlAppendUnicodeToString RtlApplyRXact RtlApplyRXactNoFlush RtlAreAllAccessesGranted RtlAreAnyAccessesGranted RtlAreBitsClear RtlAreBitsSet RtlAssert RtlCaptureStackBackTrace RtlCharToInteger RtlCheckRegistryKey RtlClearAllBits RtlClearBits RtlCompactHeap RtlCompareMemory RtlCompareMemoryUlong RtlCompareString RtlCompareUnicodeString RtlCompressBuffer RtlConsoleMultiByteToUnicodeN RtlConvertExclusiveToShared RtlConvertLongToLargeInteger RtlConvertSharedToExclusive RtlConvertSidToUnicodeString RtlConvertUiListToApiList RtlConvertUlongToLargeInteger RtlCopyLuid RtlCopyLuidAndAttributesArray RtlCopySecurityDescriptor RtlCopySid RtlCopySidAndAttributesArray RtlCopyString RtlCopyUnicodeString RtlCreateAcl RtlCreateAndSetSD RtlCreateEnvironment RtlCreateHeap RtlCreateProcessParameters RtlCreateRegistryKey RtlCreateSecurityDescriptor RtlCreateUnicodeString RtlCreateUnicodeStringFromAsciiz RtlCreateUserProcess RtlCreateUserSecurityObject RtlCreateUserThread RtlCustomCPToUnicodeN RtlCutoverTimeToSystemTime RtlDeNormalizeProcessParams RtlDecompressBuffer RtlDecompressFragment RtlDelete RtlDeleteAce RtlDeleteCriticalSection RtlDeleteElementGenericTable RtlDeleteRegistryValue RtlDeleteResource RtlDeleteSecurityObject RtlDestroyEnvironment RtlDestroyHeap RtlDestroyProcessParameters RtlDetermineDosPathNameType_U RtlDoesFileExists_U RtlDosPathNameToNtPathName_U RtlDosSearchPath_U RtlDumpResource RtlEnlargedIntegerMultiply RtlEnlargedUnsignedDivide RtlEnlargedUnsignedMultiply RtlEnterCriticalSection RtlEnumerateGenericTable RtlEnumerateGenericTableWithoutSplaying RtlEqualComputerName RtlEqualDomainName RtlEqualLuid RtlEqualPrefixSid RtlEqualSid RtlEqualString RtlEqualUnicodeString RtlEraseUnicodeString RtlExpandEnvironmentStrings_U RtlExtendedIntegerMultiply RtlExtendedLargeIntegerDivide RtlExtendedMagicDivide RtlFillMemory RtlFillMemoryUlong RtlFindClearBits RtlFindClearBitsAndSet RtlFindLongestRunClear RtlFindLongestRunSet RtlFindMessage RtlFindSetBits RtlFindSetBitsAndClear RtlFirstFreeAce RtlFormatCurrentUserKeyPath RtlFormatMessage RtlFreeAnsiString RtlFreeHeap RtlFreeOemString RtlFreeSid RtlFreeUnicodeString RtlGenerate8dot3Name RtlGetAce RtlGetCallersAddress RtlGetCompressionWorkSpaceSize RtlGetControlSecurityDescriptor RtlGetCurrentDirectory_U RtlGetDaclSecurityDescriptor RtlGetElementGenericTable RtlGetFullPathName_U RtlGetGroupSecurityDescriptor RtlGetLongestNtPathLength RtlGetNtGlobalFlags RtlGetNtProductType RtlGetOwnerSecurityDescriptor RtlGetSaclSecurityDescriptor RtlGetUserFlagsHeap RtlGetUserValueHeap RtlIdentifierAuthoritySid RtlImageDirectoryEntryToData RtlImageNtHeader RtlImpersonateSelf RtlInitAnsiString RtlInitCodePageTable RtlInitNlsTables RtlInitString RtlInitUnicodeString RtlInitializeBitMap RtlInitializeContext RtlInitializeCriticalSection RtlInitializeGenericTable RtlInitializeRXact RtlInitializeResource RtlInitializeSid RtlInitializeStackTraceDataBase RtlInsertElementGenericTable RtlIntegerToChar RtlIntegerToUnicodeString RtlIsDosDeviceName_U RtlIsGenericTableEmpty RtlIsTextUnicode RtlLargeIntegerAdd RtlLargeIntegerArithmeticShift RtlLargeIntegerDivide RtlLargeIntegerNegate RtlLargeIntegerShiftLeft RtlLargeIntegerShiftRight RtlLargeIntegerSubtract RtlLargeIntegerToChar RtlLeaveCriticalSection RtlLengthRequiredSid RtlLengthSecurityDescriptor RtlLengthSid RtlLocalTimeToSystemTime RtlLockHeap RtlLogStackBackTrace RtlLookupElementGenericTable RtlLookupSymbolByAddress RtlLookupSymbolByName RtlMakeSelfRelativeSD RtlMapGenericMask RtlMoveMemory RtlMultiByteToUnicodeN RtlMultiByteToUnicodeSize RtlNewInstanceSecurityObject RtlNewSecurityGrantedAccess RtlNewSecurityObject RtlNormalizeProcessParams RtlNtStatusToDosError RtlNumberGenericTableElements RtlNumberOfClearBits RtlNumberOfSetBits RtlOemStringToUnicodeSize RtlOemStringToUnicodeString RtlOemToUnicodeN RtlOpenCurrentUser RtlPcToFileHeader RtlPrefixString RtlPrefixUnicodeString RtlQueryEnvironmentVariable_U RtlQueryInformationAcl RtlQueryModuleInformation RtlQueryProcessBackTraceInformation RtlQueryProcessHeapInformation RtlQueryProcessLockInformation RtlQueryRegistryValues RtlQuerySecurityObject RtlQueryTimeZoneInformation RtlRaiseException RtlRaiseStatus RtlRandom RtlReAllocateHeap RtlRealPredecessor RtlRealSuccessor RtlReleasePebLock RtlReleaseResource RtlRemoteCall RtlResetRtlTranslations RtlRunDecodeUnicodeString RtlRunEncodeUnicodeString RtlSecondsSince1970ToTime RtlSecondsSince1980ToTime RtlSelfRelativeToAbsoluteSD RtlSetAllBits RtlSetBits RtlSetCurrentDirectory_U RtlSetCurrentEnvironment RtlSetDaclSecurityDescriptor RtlSetEnvironmentVariable RtlSetGroupSecurityDescriptor RtlSetInformationAcl RtlSetOwnerSecurityDescriptor RtlSetSaclSecurityDescriptor RtlSetSecurityObject RtlSetTimeZoneInformation RtlSetUserFlagsHeap RtlSetUserValueHeap RtlSizeHeap RtlSnapShotHeap RtlSplay RtlStartRXact RtlSubAuthorityCountSid RtlSubAuthoritySid RtlSubtreePredecessor RtlSubtreeSuccessor RtlSystemTimeToLocalTime RtlTimeFieldsToTime RtlTimeToElapsedTimeFields RtlTimeToSecondsSince1970 RtlTimeToSecondsSince1980 RtlTimeToTimeFields RtlUnicodeStringToAnsiSize RtlUnicodeStringToAnsiString RtlUnicodeStringToCountedOemString RtlUnicodeStringToInteger RtlUnicodeStringToOemSize RtlUnicodeStringToOemString RtlUnicodeToCustomCPN RtlUnicodeToMultiByteN RtlUnicodeToMultiByteSize RtlUnicodeToOemN RtlUniform RtlUnlockHeap RtlUnwind RtlUpcaseUnicodeChar RtlUpcaseUnicodeString RtlUpcaseUnicodeStringToAnsiString RtlUpcaseUnicodeStringToCountedOemString RtlUpcaseUnicodeStringToOemString RtlUpcaseUnicodeToCustomCPN RtlUpcaseUnicodeToMultiByteN RtlUpcaseUnicodeToOemN RtlUpperChar RtlUpperString RtlValidAcl RtlValidSecurityDescriptor RtlValidSid RtlValidateHeap RtlWalkHeap RtlWriteRegistryValue RtlZeroHeap RtlZeroMemory RtlpInitializeRtl RtlpNtCreateKey RtlpNtEnumerateSubKey RtlpNtMakeTemporaryKey RtlpNtOpenKey RtlpNtQueryValueKey RtlpNtSetValueKey RtlpUnWaitCriticalSection RtlpWaitForCriticalSection RtlxAnsiStringToUnicodeSize RtlxOemStringToUnicodeSize RtlxUnicodeStringToAnsiSize RtlxUnicodeStringToOemSize SaveEm87Context ZwAcceptConnectPort ZwAccessCheck ZwAccessCheckAndAuditAlarm ZwAdjustGroupsToken ZwAdjustPrivilegesToken ZwAlertResumeThread ZwAlertThread ZwAllocateLocallyUniqueId ZwAllocateVirtualMemory ZwCancelIoFile ZwCancelTimer ZwClearEvent ZwClose ZwCloseObjectAuditAlarm ZwCompleteConnectPort ZwConnectPort ZwContinue ZwCreateDirectoryObject ZwCreateEvent ZwCreateEventPair ZwCreateFile ZwCreateIoCompletion ZwCreateKey ZwCreateMailslotFile ZwCreateMutant ZwCreateNamedPipeFile ZwCreatePagingFile ZwCreatePort ZwCreateProcess ZwCreateProfile ZwCreateSection ZwCreateSemaphore ZwCreateSymbolicLinkObject ZwCreateThread ZwCreateTimer ZwCreateToken ZwDelayExecution ZwDeleteFile ZwDeleteKey ZwDeleteValueKey ZwDeviceIoControlFile ZwDisplayString ZwDuplicateObject ZwDuplicateToken ZwEnumerateKey ZwEnumerateValueKey ZwExtendSection ZwFlushBuffersFile ZwFlushInstructionCache ZwFlushKey ZwFlushVirtualMemory ZwFlushWriteBuffer ZwFreeVirtualMemory ZwFsControlFile ZwGetContextThread ZwGetTickCount ZwImpersonateClientOfPort ZwImpersonateThread ZwInitializeRegistry ZwListenPort ZwLoadDriver ZwLoadKey ZwLockFile ZwLockVirtualMemory ZwMakeTemporaryObject ZwMapViewOfSection ZwNotifyChangeDirectoryFile ZwNotifyChangeKey ZwOpenDirectoryObject ZwOpenEvent ZwOpenEventPair ZwOpenFile ZwOpenIoCompletion ZwOpenKey ZwOpenMutant ZwOpenObjectAuditAlarm ZwOpenProcess ZwOpenProcessToken ZwOpenSection ZwOpenSemaphore ZwOpenSymbolicLinkObject ZwOpenThread ZwOpenThreadToken ZwOpenTimer ZwPrivilegeCheck ZwPrivilegeObjectAuditAlarm ZwPrivilegedServiceAuditAlarm ZwProtectVirtualMemory ZwPulseEvent ZwQueryAttributesFile ZwQueryDefaultLocale ZwQueryDirectoryFile ZwQueryDirectoryObject ZwQueryEaFile ZwQueryEvent ZwQueryInformationFile ZwQueryInformationPort ZwQueryInformationProcess ZwQueryInformationThread ZwQueryInformationToken ZwQueryIntervalProfile ZwQueryIoCompletion ZwQueryKey ZwQueryMutant ZwQueryObject ZwQueryPerformanceCounter ZwQuerySection ZwQuerySecurityObject ZwQuerySemaphore ZwQuerySymbolicLinkObject ZwQuerySystemEnvironmentValue ZwQuerySystemInformation ZwQuerySystemTime ZwQueryTimer ZwQueryTimerResolution ZwQueryValueKey ZwQueryVirtualMemory ZwQueryVolumeInformationFile ZwRaiseException ZwRaiseHardError ZwReadFile ZwReadRequestData ZwReadVirtualMemory ZwRegisterThreadTerminatePort ZwReleaseMutant ZwReleaseProcessMutant ZwReleaseSemaphore ZwRemoveIoCompletion ZwReplaceKey ZwReplyPort ZwReplyWaitReceivePort ZwReplyWaitReplyPort ZwRequestPort ZwRequestWaitReplyPort ZwResetEvent ZwRestoreKey ZwResumeThread ZwSaveKey ZwSetContextThread ZwSetDefaultHardErrorPort ZwSetDefaultLocale ZwSetEaFile ZwSetEvent ZwSetHighEventPair ZwSetHighWaitLowEventPair ZwSetHighWaitLowThread ZwSetInformationFile ZwSetInformationKey ZwSetInformationObject ZwSetInformationProcess ZwSetInformationThread ZwSetInformationToken ZwSetIntervalProfile ZwSetLdtEntries ZwSetLowEventPair ZwSetLowWaitHighEventPair ZwSetLowWaitHighThread ZwSetSecurityObject ZwSetSystemEnvironmentValue ZwSetSystemInformation ZwSetSystemTime ZwSetTimer ZwSetTimerResolution ZwSetValueKey ZwSetVolumeInformationFile ZwShutdownSystem ZwStartProfile ZwStopProfile ZwSuspendThread ZwSystemDebugControl ZwTerminateProcess ZwTerminateThread ZwTestAlert ZwUnloadDriver ZwUnloadKey ZwUnlockFile ZwUnlockVirtualMemory ZwUnmapViewOfSection ZwVdmControl ZwWaitForMultipleObjects ZwWaitForProcessMutant ZwWaitForSingleObject ZwWaitHighEventPair ZwWaitLowEventPair ZwWriteFile ZwWriteRequestData ZwWriteVirtualMemory _CIpow __eCommonExceptions __eEmulatorInit __eF2XM1 __eFABS __eFADD32 __eFADD64 __eFADDPreg __eFADDreg __eFADDtop __eFCHS __eFCOM __eFCOM32 __eFCOM64 __eFCOMP __eFCOMP32 __eFCOMP64 __eFCOMPP __eFCOS __eFDECSTP __eFDIV32 __eFDIV64 __eFDIVPreg __eFDIVR32 __eFDIVR64 __eFDIVRPreg __eFDIVRreg __eFDIVRtop __eFDIVreg __eFDIVtop __eFFREE __eFIADD16 __eFIADD32 __eFICOM16 __eFICOM32 __eFICOMP16 __eFICOMP32 __eFIDIV16 __eFIDIV32 __eFIDIVR16 __eFIDIVR32 __eFILD16 __eFILD32 __eFILD64 __eFIMUL16 __eFIMUL32 __eFINCSTP __eFINIT __eFIST16 __eFIST32 __eFISTP16 __eFISTP32 __eFISTP64 __eFISUB16 __eFISUB32 __eFISUBR16 __eFISUBR32 __eFLD1 __eFLD32 __eFLD64 __eFLD80 __eFLDCW __eFLDENV __eFLDL2E __eFLDLN2 __eFLDPI __eFLDZ __eFMUL32 __eFMUL64 __eFMULPreg __eFMULreg __eFMULtop __eFPATAN __eFPREM __eFPREM1 __eFPTAN __eFRNDINT __eFRSTOR __eFSAVE __eFSCALE __eFSIN __eFSQRT __eFST __eFST32 __eFST64 __eFSTCW __eFSTENV __eFSTP __eFSTP32 __eFSTP64 __eFSTP80 __eFSTSW __eFSUB32 __eFSUB64 __eFSUBPreg __eFSUBR32 __eFSUBR64 __eFSUBRPreg __eFSUBRreg __eFSUBRtop __eFSUBreg __eFSUBtop __eFTST __eFUCOM __eFUCOMP __eFUCOMPP __eFXAM __eFXCH __eFXTRACT __eFYL2X __eFYL2XP1 __eGetStatusWord _abnormal_termination _chkstk _except_handler2 _fltused _ftol _global_unwind2 _itoa _local_unwind2 _ltoa _memccpy _memicmp _snprintf _snwprintf _splitpath _strcmpi _stricmp _strlwr _strnicmp _strupr _ultoa _vsnprintf _wcsicmp _wcslwr _wcsnicmp _wcsupr abs atan atoi atol ceil cos fabs floor isalpha isdigit islower isprint isspace isupper iswalpha iswctype isxdigit labs log mbstowcs memchr memcmp memcpy memmove memset pow qsort sin sprintf sqrt sscanf strcat strchr strcmp strcpy strcspn strlen strncat strncmp strncpy strpbrk strrchr strspn strstr swprintf tan tolower toupper towlower towupper vsprintf wcscat wcschr wcscmp wcscpy wcscspn wcslen wcsncat wcsncmp wcsncpy wcspbrk wcsrchr wcsspn wcsstr wcstok wcstol wcstombs wcstoul