VirtualBox

source: vbox/trunk/src/VBox/HostDrivers/Support/win/import-template-ntdll.h

Last change on this file was 80212, checked in by vboxsync, 5 years ago

SUPHardNt: Hack for fending off unwanted APCs during early process initialization, preventing them from tripping over when we're evicted code they need (executable memory allocations). We only allow the LdrInitializeThunk APC to go thru. bugdbref:29744598

  • Property svn:eol-style set to native
  • Property svn:keywords set to Author Date Id Revision
File size: 4.7 KB
RevLine 
[52356]1SUPHARNT_IMPORT_SYSCALL(NtAllocateVirtualMemory, 24)
[52943]2SUPHARNT_IMPORT_SYSCALL(NtClearEvent, 4)
[52356]3SUPHARNT_IMPORT_SYSCALL(NtClose, 4)
[52943]4SUPHARNT_IMPORT_SYSCALL(NtCreateEvent, 20)
[52356]5SUPHARNT_IMPORT_SYSCALL(NtCreateFile, 44)
[52947]6SUPHARNT_IMPORT_SYSCALL(NtCreateSymbolicLinkObject, 16)
[52356]7SUPHARNT_IMPORT_SYSCALL(NtDelayExecution, 8)
8SUPHARNT_IMPORT_SYSCALL(NtDeviceIoControlFile, 40)
9SUPHARNT_IMPORT_SYSCALL(NtDuplicateObject, 28)
[54998]10SUPHARNT_IMPORT_SYSCALL(NtFlushBuffersFile, 8)
[52356]11SUPHARNT_IMPORT_SYSCALL(NtFreeVirtualMemory, 16)
12SUPHARNT_IMPORT_SYSCALL(NtGetContextThread, 8)
13SUPHARNT_IMPORT_SYSCALL(NtMapViewOfSection, 40)
14SUPHARNT_IMPORT_SYSCALL(NtOpenDirectoryObject, 12)
[52943]15SUPHARNT_IMPORT_SYSCALL(NtOpenEvent, 12)
[52365]16SUPHARNT_IMPORT_SYSCALL(NtOpenKey, 12)
[52356]17SUPHARNT_IMPORT_SYSCALL(NtOpenProcess, 16)
18SUPHARNT_IMPORT_SYSCALL(NtOpenProcessToken, 12)
[52947]19SUPHARNT_IMPORT_SYSCALL(NtOpenSymbolicLinkObject, 12)
[52356]20SUPHARNT_IMPORT_SYSCALL(NtOpenThread, 16)
21SUPHARNT_IMPORT_SYSCALL(NtOpenThreadToken, 16)
22SUPHARNT_IMPORT_SYSCALL(NtProtectVirtualMemory, 20)
23SUPHARNT_IMPORT_SYSCALL(NtQueryDirectoryFile, 44)
24SUPHARNT_IMPORT_SYSCALL(NtQueryDirectoryObject, 28)
[52943]25SUPHARNT_IMPORT_SYSCALL(NtQueryEvent, 20)
[52356]26SUPHARNT_IMPORT_SYSCALL(NtQueryInformationFile, 20)
27SUPHARNT_IMPORT_SYSCALL(NtQueryInformationProcess, 20)
28SUPHARNT_IMPORT_SYSCALL(NtQueryInformationThread, 20)
29SUPHARNT_IMPORT_SYSCALL(NtQueryInformationToken, 20)
30SUPHARNT_IMPORT_SYSCALL(NtQueryObject, 20)
[52943]31SUPHARNT_IMPORT_SYSCALL(NtQuerySecurityObject, 20)
[52947]32SUPHARNT_IMPORT_SYSCALL(NtQuerySymbolicLinkObject, 12)
[52877]33SUPHARNT_IMPORT_SYSCALL(NtQuerySystemInformation, 16)
[52356]34SUPHARNT_IMPORT_SYSCALL(NtQueryTimerResolution, 12)
[52365]35SUPHARNT_IMPORT_SYSCALL(NtQueryValueKey, 24)
[52356]36SUPHARNT_IMPORT_SYSCALL(NtQueryVirtualMemory, 24)
37SUPHARNT_IMPORT_SYSCALL(NtReadFile, 36)
38SUPHARNT_IMPORT_SYSCALL(NtReadVirtualMemory, 20)
[52943]39SUPHARNT_IMPORT_SYSCALL(NtResetEvent, 8)
[52356]40SUPHARNT_IMPORT_SYSCALL(NtResumeProcess, 4)
41SUPHARNT_IMPORT_SYSCALL(NtResumeThread, 8)
42SUPHARNT_IMPORT_SYSCALL(NtSetContextThread, 8)
[52943]43SUPHARNT_IMPORT_SYSCALL(NtSetEvent, 8)
[52356]44SUPHARNT_IMPORT_SYSCALL(NtSetInformationFile, 20)
45SUPHARNT_IMPORT_SYSCALL(NtSetInformationObject, 16)
46SUPHARNT_IMPORT_SYSCALL(NtSetInformationProcess, 16)
47SUPHARNT_IMPORT_SYSCALL(NtSetInformationThread, 16)
48SUPHARNT_IMPORT_SYSCALL(NtSetTimerResolution, 12)
49SUPHARNT_IMPORT_SYSCALL(NtSuspendProcess, 4)
50SUPHARNT_IMPORT_SYSCALL(NtSuspendThread, 8)
51SUPHARNT_IMPORT_SYSCALL(NtTerminateProcess, 8)
52SUPHARNT_IMPORT_SYSCALL(NtTerminateThread, 8)
[80212]53SUPHARNT_IMPORT_SYSCALL(NtTestAlert, 0)
[52356]54SUPHARNT_IMPORT_SYSCALL(NtUnmapViewOfSection, 8)
[52943]55SUPHARNT_IMPORT_SYSCALL(NtWaitForMultipleObjects, 20)
[52356]56SUPHARNT_IMPORT_SYSCALL(NtWaitForSingleObject, 12)
57SUPHARNT_IMPORT_SYSCALL(NtWriteFile, 36)
58SUPHARNT_IMPORT_SYSCALL(NtWriteVirtualMemory, 20)
59SUPHARNT_IMPORT_SYSCALL(NtYieldExecution, 0)
[52953]60SUPHARNT_IMPORT_SYSCALL(NtCreateSection, 28)
61SUPHARNT_IMPORT_SYSCALL(NtQueryVolumeInformationFile, 20)
[52356]62
[52941]63SUPHARNT_IMPORT_STDCALL_EARLY(LdrInitializeThunk, 12)
[52953]64SUPHARNT_IMPORT_STDCALL_EARLY_OPTIONAL(LdrRegisterDllNotification, 16)
[53822]65SUPHARNT_IMPORT_STDCALL_EARLY(LdrGetDllHandle, 16)
[67979]66SUPHARNT_IMPORT_STDCALL_EARLY_OPTIONAL(ApiSetQueryApiSetPresence, 8)
[52943]67
[52356]68SUPHARNT_IMPORT_STDCALL(RtlAddAccessAllowedAce, 16)
69SUPHARNT_IMPORT_STDCALL(RtlAddAccessDeniedAce, 16)
[52949]70SUPHARNT_IMPORT_STDCALL(RtlAllocateHeap, 12)
[52940]71SUPHARNT_IMPORT_STDCALL(RtlCompactHeap, 8)
[52356]72SUPHARNT_IMPORT_STDCALL(RtlCopySid, 12)
73SUPHARNT_IMPORT_STDCALL(RtlCreateAcl, 12)
[52949]74SUPHARNT_IMPORT_STDCALL(RtlCreateHeap, 24)
[52356]75SUPHARNT_IMPORT_STDCALL(RtlCreateProcessParameters, 40)
76SUPHARNT_IMPORT_STDCALL(RtlCreateSecurityDescriptor, 8)
77SUPHARNT_IMPORT_STDCALL(RtlCreateUserProcess, 40)
78SUPHARNT_IMPORT_STDCALL(RtlCreateUserThread, 40)
79SUPHARNT_IMPORT_STDCALL(RtlDestroyProcessParameters, 4)
[52941]80SUPHARNT_IMPORT_STDCALL_EARLY(RtlDosApplyFileIsolationRedirection_Ustr, 36)
81SUPHARNT_IMPORT_STDCALL_EARLY(RtlEqualSid, 8)
82SUPHARNT_IMPORT_STDCALL_EARLY_OPTIONAL(RtlExitUserProcess, 4)
83SUPHARNT_IMPORT_STDCALL_EARLY(RtlExitUserThread, 4)
[52365]84SUPHARNT_IMPORT_STDCALL(RtlExpandEnvironmentStrings_U, 16)
[52949]85SUPHARNT_IMPORT_STDCALL(RtlFreeHeap, 12)
[52941]86SUPHARNT_IMPORT_STDCALL_EARLY(RtlFreeUnicodeString, 4)
87SUPHARNT_IMPORT_STDCALL_EARLY(RtlGetLastNtStatus, 0)
88SUPHARNT_IMPORT_STDCALL_EARLY(RtlGetLastWin32Error, 0)
89SUPHARNT_IMPORT_STDCALL_EARLY(RtlGetVersion, 4)
[52943]90SUPHARNT_IMPORT_STDCALL_EARLY(RtlInitializeSid, 12)
[52941]91SUPHARNT_IMPORT_STDCALL_EARLY(RtlNtStatusToDosError, 4)
92SUPHARNT_IMPORT_STDCALL_EARLY(RtlReAllocateHeap, 16)
93SUPHARNT_IMPORT_STDCALL_EARLY(RtlRestoreLastWin32Error, 4)
[52356]94SUPHARNT_IMPORT_STDCALL(RtlSetDaclSecurityDescriptor, 16)
[52941]95SUPHARNT_IMPORT_STDCALL_EARLY(RtlSetLastWin32Error, 4)
96SUPHARNT_IMPORT_STDCALL_EARLY(RtlSetLastWin32ErrorAndNtStatusFromNtStatus, 4)
[52949]97SUPHARNT_IMPORT_STDCALL(RtlSizeHeap, 12)
[52943]98SUPHARNT_IMPORT_STDCALL_EARLY(RtlSubAuthoritySid, 8)
[52356]99
Note: See TracBrowser for help on using the repository browser.

© 2023 Oracle
ContactPrivacy policyTerms of Use