2005-01-17 07:10:34 +00:00
|
|
|
NtAcceptConnectPort 6
|
|
|
|
|
NtAccessCheck 8
|
|
|
|
|
NtAccessCheckAndAuditAlarm 11
|
|
|
|
|
NtAddAtom 3
|
|
|
|
|
NtAddBootEntry 2
|
|
|
|
|
NtAdjustGroupsToken 6
|
|
|
|
|
NtAdjustPrivilegesToken 6
|
|
|
|
|
NtAlertResumeThread 2
|
|
|
|
|
NtAlertThread 1
|
|
|
|
|
NtAllocateLocallyUniqueId 1
|
|
|
|
|
NtAllocateUuids 4
|
|
|
|
|
NtAllocateVirtualMemory 6
|
|
|
|
|
NtAssignProcessToJobObject 2
|
|
|
|
|
NtCallbackReturn 3
|
|
|
|
|
NtCancelIoFile 2
|
|
|
|
|
NtCancelTimer 2
|
|
|
|
|
NtClearEvent 1
|
|
|
|
|
NtClose 1
|
|
|
|
|
NtCloseObjectAuditAlarm 3
|
|
|
|
|
NtCompleteConnectPort 1
|
|
|
|
|
NtConnectPort 8
|
|
|
|
|
NtContinue 2
|
- More sharing between ntdll/ntoskrnl: shared Dbg code.
- Added NtCreateDebugObject, NtDebugContinue, NtQueryDebugFilterState, NtSetDebugFilterState, NtWaitForDebugEvent to system call list.
- Added some debug constants to headers
- Updated RtlpCheckForActiveDebugger in ntoskrnl to return whatever we're expecting as the "normal" case.
- Added RtlpSetInDbgPrint to rtl support library for special DbgPrint implementation difference in user-mode
- Removed all the deprecated debug APIs in ntdll.
- Implemented NtQueryDebugFilterState and NtSetDebugFilterState based on royce's implementation.
- Started modifications on KeDebugService, and implemented DebugService in rtl
- Implemented all the Dbg* APIs in RTL.
- Implemented DbgUiConnectToDbg, DbgUiContinue, DbgUiWaitStateChange, DbgUiRemoteBreakin, DbgUiIssueRemoteBreakin
- Changed KD Print callbacks to also receive the length of the string.
Right now, one call that should be shared still isn't (the final DebugPrint call) because calling KeDebugService from kernel-mode seems to cause a hang. Also, DebugService does not currently cause an exception like it should (instead it still calls the Kdp handler), because those changes would've made the patch even bigger and are still untested.
svn path=/trunk/; revision=18078
2005-09-26 04:59:48 +00:00
|
|
|
NtCreateDebugObject 4
|
2005-01-17 07:10:34 +00:00
|
|
|
NtCreateDirectoryObject 3
|
|
|
|
|
NtCreateEvent 5
|
|
|
|
|
NtCreateEventPair 3
|
|
|
|
|
NtCreateFile 11
|
|
|
|
|
NtCreateIoCompletion 4
|
|
|
|
|
NtCreateJobObject 3
|
|
|
|
|
NtCreateKey 7
|
|
|
|
|
NtCreateMailslotFile 8
|
|
|
|
|
NtCreateMutant 4
|
|
|
|
|
NtCreateNamedPipeFile 14
|
|
|
|
|
NtCreatePagingFile 4
|
|
|
|
|
NtCreatePort 5
|
|
|
|
|
NtCreateProcess 8
|
|
|
|
|
NtCreateProfile 9
|
|
|
|
|
NtCreateSection 7
|
|
|
|
|
NtCreateSemaphore 5
|
|
|
|
|
NtCreateSymbolicLinkObject 4
|
|
|
|
|
NtCreateThread 8
|
|
|
|
|
NtCreateTimer 4
|
|
|
|
|
NtCreateToken 13
|
|
|
|
|
NtCreateWaitablePort 5
|
- More sharing between ntdll/ntoskrnl: shared Dbg code.
- Added NtCreateDebugObject, NtDebugContinue, NtQueryDebugFilterState, NtSetDebugFilterState, NtWaitForDebugEvent to system call list.
- Added some debug constants to headers
- Updated RtlpCheckForActiveDebugger in ntoskrnl to return whatever we're expecting as the "normal" case.
- Added RtlpSetInDbgPrint to rtl support library for special DbgPrint implementation difference in user-mode
- Removed all the deprecated debug APIs in ntdll.
- Implemented NtQueryDebugFilterState and NtSetDebugFilterState based on royce's implementation.
- Started modifications on KeDebugService, and implemented DebugService in rtl
- Implemented all the Dbg* APIs in RTL.
- Implemented DbgUiConnectToDbg, DbgUiContinue, DbgUiWaitStateChange, DbgUiRemoteBreakin, DbgUiIssueRemoteBreakin
- Changed KD Print callbacks to also receive the length of the string.
Right now, one call that should be shared still isn't (the final DebugPrint call) because calling KeDebugService from kernel-mode seems to cause a hang. Also, DebugService does not currently cause an exception like it should (instead it still calls the Kdp handler), because those changes would've made the patch even bigger and are still untested.
svn path=/trunk/; revision=18078
2005-09-26 04:59:48 +00:00
|
|
|
NtDebugContinue 3
|
2005-01-17 07:10:34 +00:00
|
|
|
NtDelayExecution 2
|
|
|
|
|
NtDeleteAtom 1
|
|
|
|
|
NtDeleteBootEntry 2
|
|
|
|
|
NtDeleteFile 1
|
|
|
|
|
NtDeleteKey 1
|
|
|
|
|
NtDeleteObjectAuditAlarm 3
|
|
|
|
|
NtDeleteValueKey 2
|
|
|
|
|
NtDeviceIoControlFile 10
|
|
|
|
|
NtDisplayString 1
|
|
|
|
|
NtDuplicateObject 7
|
|
|
|
|
NtDuplicateToken 6
|
|
|
|
|
NtEnumerateBootEntries 2
|
|
|
|
|
NtEnumerateKey 6
|
|
|
|
|
NtEnumerateValueKey 6
|
|
|
|
|
NtExtendSection 2
|
|
|
|
|
NtFindAtom 3
|
|
|
|
|
NtFlushBuffersFile 2
|
|
|
|
|
NtFlushInstructionCache 3
|
|
|
|
|
NtFlushKey 1
|
|
|
|
|
NtFlushVirtualMemory 4
|
|
|
|
|
NtFlushWriteBuffer 0
|
|
|
|
|
NtFreeVirtualMemory 4
|
|
|
|
|
NtFsControlFile 10
|
|
|
|
|
NtGetContextThread 2
|
|
|
|
|
NtGetPlugPlayEvent 4
|
|
|
|
|
NtGetTickCount 0
|
2006-01-05 13:40:05 +00:00
|
|
|
NtImpersonateAnonymousToken 1
|
2005-01-17 07:10:34 +00:00
|
|
|
NtImpersonateClientOfPort 2
|
|
|
|
|
NtImpersonateThread 3
|
|
|
|
|
NtInitializeRegistry 1
|
|
|
|
|
NtInitiatePowerAction 4
|
|
|
|
|
NtIsProcessInJob 2
|
|
|
|
|
NtListenPort 2
|
|
|
|
|
NtLoadDriver 1
|
|
|
|
|
NtLoadKey 2
|
|
|
|
|
NtLoadKey2 3
|
|
|
|
|
NtLockFile 10
|
|
|
|
|
NtLockVirtualMemory 4
|
|
|
|
|
NtMakePermanentObject 1
|
|
|
|
|
NtMakeTemporaryObject 1
|
|
|
|
|
NtMapViewOfSection 10
|
|
|
|
|
NtNotifyChangeDirectoryFile 9
|
|
|
|
|
NtNotifyChangeKey 10
|
|
|
|
|
NtOpenDirectoryObject 3
|
|
|
|
|
NtOpenEvent 3
|
|
|
|
|
NtOpenEventPair 3
|
|
|
|
|
NtOpenFile 6
|
|
|
|
|
NtOpenIoCompletion 3
|
|
|
|
|
NtOpenJobObject 3
|
|
|
|
|
NtOpenKey 3
|
|
|
|
|
NtOpenMutant 3
|
|
|
|
|
NtOpenObjectAuditAlarm 12
|
|
|
|
|
NtOpenProcess 4
|
|
|
|
|
NtOpenProcessToken 3
|
|
|
|
|
NtOpenProcessTokenEx 4
|
|
|
|
|
NtOpenSection 3
|
|
|
|
|
NtOpenSemaphore 3
|
|
|
|
|
NtOpenSymbolicLinkObject 3
|
|
|
|
|
NtOpenThread 4
|
|
|
|
|
NtOpenThreadToken 4
|
|
|
|
|
NtOpenThreadTokenEx 5
|
|
|
|
|
NtOpenTimer 3
|
2005-01-18 13:59:14 +00:00
|
|
|
NtPlugPlayControl 3
|
2005-01-17 07:10:34 +00:00
|
|
|
NtPowerInformation 5
|
|
|
|
|
NtPrivilegeCheck 3
|
|
|
|
|
NtPrivilegedServiceAuditAlarm 5
|
|
|
|
|
NtPrivilegeObjectAuditAlarm 6
|
|
|
|
|
NtProtectVirtualMemory 5
|
|
|
|
|
NtPulseEvent 2
|
|
|
|
|
NtQueryInformationAtom 5
|
|
|
|
|
NtQueryAttributesFile 2
|
|
|
|
|
NtQueryBootEntryOrder 2
|
|
|
|
|
NtQueryBootOptions 2
|
- More sharing between ntdll/ntoskrnl: shared Dbg code.
- Added NtCreateDebugObject, NtDebugContinue, NtQueryDebugFilterState, NtSetDebugFilterState, NtWaitForDebugEvent to system call list.
- Added some debug constants to headers
- Updated RtlpCheckForActiveDebugger in ntoskrnl to return whatever we're expecting as the "normal" case.
- Added RtlpSetInDbgPrint to rtl support library for special DbgPrint implementation difference in user-mode
- Removed all the deprecated debug APIs in ntdll.
- Implemented NtQueryDebugFilterState and NtSetDebugFilterState based on royce's implementation.
- Started modifications on KeDebugService, and implemented DebugService in rtl
- Implemented all the Dbg* APIs in RTL.
- Implemented DbgUiConnectToDbg, DbgUiContinue, DbgUiWaitStateChange, DbgUiRemoteBreakin, DbgUiIssueRemoteBreakin
- Changed KD Print callbacks to also receive the length of the string.
Right now, one call that should be shared still isn't (the final DebugPrint call) because calling KeDebugService from kernel-mode seems to cause a hang. Also, DebugService does not currently cause an exception like it should (instead it still calls the Kdp handler), because those changes would've made the patch even bigger and are still untested.
svn path=/trunk/; revision=18078
2005-09-26 04:59:48 +00:00
|
|
|
NtQueryDebugFilterState 2
|
2005-01-17 07:10:34 +00:00
|
|
|
NtQueryDefaultLocale 2
|
|
|
|
|
NtQueryDefaultUILanguage 1
|
|
|
|
|
NtQueryDirectoryFile 11
|
|
|
|
|
NtQueryDirectoryObject 7
|
|
|
|
|
NtQueryEaFile 9
|
|
|
|
|
NtQueryEvent 5
|
|
|
|
|
NtQueryFullAttributesFile 2
|
|
|
|
|
NtQueryInformationFile 5
|
|
|
|
|
NtQueryInformationJobObject 5
|
|
|
|
|
NtQueryInformationPort 5
|
|
|
|
|
NtQueryInformationProcess 5
|
|
|
|
|
NtQueryInformationThread 5
|
|
|
|
|
NtQueryInformationToken 5
|
|
|
|
|
NtQueryInstallUILanguage 1
|
|
|
|
|
NtQueryIntervalProfile 2
|
|
|
|
|
NtQueryIoCompletion 5
|
|
|
|
|
NtQueryKey 5
|
|
|
|
|
NtQueryMultipleValueKey 6
|
|
|
|
|
NtQueryMutant 5
|
|
|
|
|
NtQueryObject 5
|
|
|
|
|
NtQueryPerformanceCounter 2
|
|
|
|
|
NtQueryQuotaInformationFile 9
|
|
|
|
|
NtQuerySection 5
|
|
|
|
|
NtQuerySecurityObject 5
|
|
|
|
|
NtQuerySemaphore 5
|
|
|
|
|
NtQuerySymbolicLinkObject 3
|
|
|
|
|
NtQuerySystemEnvironmentValue 4
|
|
|
|
|
NtQuerySystemInformation 4
|
|
|
|
|
NtQuerySystemTime 1
|
|
|
|
|
NtQueryTimer 5
|
|
|
|
|
NtQueryTimerResolution 3
|
|
|
|
|
NtQueryValueKey 6
|
|
|
|
|
NtQueryVirtualMemory 6
|
|
|
|
|
NtQueryVolumeInformationFile 5
|
|
|
|
|
NtQueueApcThread 5
|
|
|
|
|
NtRaiseException 3
|
|
|
|
|
NtRaiseHardError 6
|
|
|
|
|
NtReadFile 9
|
|
|
|
|
NtReadFileScatter 9
|
|
|
|
|
NtReadRequestData 6
|
|
|
|
|
NtReadVirtualMemory 5
|
|
|
|
|
NtRegisterThreadTerminatePort 1
|
|
|
|
|
NtReleaseMutant 2
|
|
|
|
|
NtReleaseSemaphore 3
|
|
|
|
|
NtRemoveIoCompletion 5
|
|
|
|
|
NtReplaceKey 3
|
|
|
|
|
NtReplyPort 2
|
|
|
|
|
NtReplyWaitReceivePort 4
|
2006-01-05 13:40:05 +00:00
|
|
|
NtReplyWaitReceivePortEx 5
|
2005-01-17 07:10:34 +00:00
|
|
|
NtReplyWaitReplyPort 2
|
|
|
|
|
NtRequestPort 2
|
|
|
|
|
NtRequestWaitReplyPort 3
|
|
|
|
|
NtResetEvent 2
|
|
|
|
|
NtRestoreKey 3
|
2005-04-29 16:41:52 +00:00
|
|
|
NtResumeProcess 1
|
2005-01-17 07:10:34 +00:00
|
|
|
NtResumeThread 2
|
|
|
|
|
NtSaveKey 2
|
|
|
|
|
NtSaveKeyEx 3
|
2005-09-07 19:37:28 +00:00
|
|
|
NtSecureConnectPort 9
|
2005-01-17 07:10:34 +00:00
|
|
|
NtSetBootEntryOrder 2
|
|
|
|
|
NtSetBootOptions 2
|
- More sharing between ntdll/ntoskrnl: shared Dbg code.
- Added NtCreateDebugObject, NtDebugContinue, NtQueryDebugFilterState, NtSetDebugFilterState, NtWaitForDebugEvent to system call list.
- Added some debug constants to headers
- Updated RtlpCheckForActiveDebugger in ntoskrnl to return whatever we're expecting as the "normal" case.
- Added RtlpSetInDbgPrint to rtl support library for special DbgPrint implementation difference in user-mode
- Removed all the deprecated debug APIs in ntdll.
- Implemented NtQueryDebugFilterState and NtSetDebugFilterState based on royce's implementation.
- Started modifications on KeDebugService, and implemented DebugService in rtl
- Implemented all the Dbg* APIs in RTL.
- Implemented DbgUiConnectToDbg, DbgUiContinue, DbgUiWaitStateChange, DbgUiRemoteBreakin, DbgUiIssueRemoteBreakin
- Changed KD Print callbacks to also receive the length of the string.
Right now, one call that should be shared still isn't (the final DebugPrint call) because calling KeDebugService from kernel-mode seems to cause a hang. Also, DebugService does not currently cause an exception like it should (instead it still calls the Kdp handler), because those changes would've made the patch even bigger and are still untested.
svn path=/trunk/; revision=18078
2005-09-26 04:59:48 +00:00
|
|
|
NtSetDebugFilterState 3
|
2005-01-17 07:10:34 +00:00
|
|
|
NtSetIoCompletion 5
|
|
|
|
|
NtSetContextThread 2
|
|
|
|
|
NtSetDefaultHardErrorPort 1
|
|
|
|
|
NtSetDefaultLocale 2
|
|
|
|
|
NtSetDefaultUILanguage 1
|
|
|
|
|
NtSetEaFile 4
|
|
|
|
|
NtSetEvent 2
|
|
|
|
|
NtSetHighEventPair 1
|
|
|
|
|
NtSetHighWaitLowEventPair 1
|
|
|
|
|
NtSetInformationFile 5
|
|
|
|
|
NtSetInformationKey 4
|
|
|
|
|
NtSetInformationJobObject 4
|
|
|
|
|
NtSetInformationObject 4
|
|
|
|
|
NtSetInformationProcess 4
|
|
|
|
|
NtSetInformationThread 4
|
|
|
|
|
NtSetInformationToken 4
|
|
|
|
|
NtSetIntervalProfile 2
|
|
|
|
|
NtSetLdtEntries 6
|
|
|
|
|
NtSetLowEventPair 1
|
|
|
|
|
NtSetLowWaitHighEventPair 1
|
|
|
|
|
NtSetQuotaInformationFile 4
|
|
|
|
|
NtSetSecurityObject 3
|
|
|
|
|
NtSetSystemEnvironmentValue 2
|
|
|
|
|
NtSetSystemInformation 3
|
|
|
|
|
NtSetSystemPowerState 3
|
|
|
|
|
NtSetSystemTime 2
|
|
|
|
|
NtSetTimer 7
|
|
|
|
|
NtSetTimerResolution 3
|
|
|
|
|
NtSetUuidSeed 1
|
|
|
|
|
NtSetValueKey 6
|
|
|
|
|
NtSetVolumeInformationFile 5
|
|
|
|
|
NtShutdownSystem 1
|
|
|
|
|
NtSignalAndWaitForSingleObject 4
|
|
|
|
|
NtStartProfile 1
|
|
|
|
|
NtStopProfile 1
|
2005-04-29 16:41:52 +00:00
|
|
|
NtSuspendProcess 1
|
2005-01-17 07:10:34 +00:00
|
|
|
NtSuspendThread 2
|
|
|
|
|
NtSystemDebugControl 6
|
|
|
|
|
NtTerminateJobObject 2
|
|
|
|
|
NtTerminateProcess 2
|
|
|
|
|
NtTerminateThread 2
|
|
|
|
|
NtTestAlert 0
|
|
|
|
|
NtTraceEvent 4
|
|
|
|
|
NtTranslateFilePath 3
|
|
|
|
|
NtUnloadDriver 1
|
|
|
|
|
NtUnloadKey 1
|
|
|
|
|
NtUnlockFile 5
|
|
|
|
|
NtUnlockVirtualMemory 4
|
|
|
|
|
NtUnmapViewOfSection 2
|
|
|
|
|
NtVdmControl 2
|
- More sharing between ntdll/ntoskrnl: shared Dbg code.
- Added NtCreateDebugObject, NtDebugContinue, NtQueryDebugFilterState, NtSetDebugFilterState, NtWaitForDebugEvent to system call list.
- Added some debug constants to headers
- Updated RtlpCheckForActiveDebugger in ntoskrnl to return whatever we're expecting as the "normal" case.
- Added RtlpSetInDbgPrint to rtl support library for special DbgPrint implementation difference in user-mode
- Removed all the deprecated debug APIs in ntdll.
- Implemented NtQueryDebugFilterState and NtSetDebugFilterState based on royce's implementation.
- Started modifications on KeDebugService, and implemented DebugService in rtl
- Implemented all the Dbg* APIs in RTL.
- Implemented DbgUiConnectToDbg, DbgUiContinue, DbgUiWaitStateChange, DbgUiRemoteBreakin, DbgUiIssueRemoteBreakin
- Changed KD Print callbacks to also receive the length of the string.
Right now, one call that should be shared still isn't (the final DebugPrint call) because calling KeDebugService from kernel-mode seems to cause a hang. Also, DebugService does not currently cause an exception like it should (instead it still calls the Kdp handler), because those changes would've made the patch even bigger and are still untested.
svn path=/trunk/; revision=18078
2005-09-26 04:59:48 +00:00
|
|
|
NtWaitForDebugEvent 4
|
2005-01-17 07:10:34 +00:00
|
|
|
NtWaitForMultipleObjects 5
|
|
|
|
|
NtWaitForSingleObject 3
|
|
|
|
|
NtWaitHighEventPair 1
|
|
|
|
|
NtWaitLowEventPair 1
|
|
|
|
|
NtWriteFile 9
|
|
|
|
|
NtWriteFileGather 9
|
|
|
|
|
NtWriteRequestData 6
|
|
|
|
|
NtWriteVirtualMemory 5
|
|
|
|
|
NtW32Call 5
|
|
|
|
|
NtYieldExecution 0
|