https://git.reactos.org/?p=reactos.git;a=commitdiff;h=d1c55af4eaf484cac104fc...
commit d1c55af4eaf484cac104fc6440506a39e7436ba6 Author: Timo Kreuzer timo.kreuzer@reactos.org AuthorDate: Thu Sep 19 15:56:29 2019 +0200 Commit: Timo Kreuzer timo.kreuzer@reactos.org CommitDate: Fri Jan 3 13:00:45 2020 +0100
[NTDLL] Ordinals -> @ --- dll/ntdll/def/ntdll.spec | 2714 +++++++++++++++++++++++----------------------- 1 file changed, 1357 insertions(+), 1357 deletions(-)
diff --git a/dll/ntdll/def/ntdll.spec b/dll/ntdll/def/ntdll.spec index 6a60709a952..f17f1e8a87e 100644 --- a/dll/ntdll/def/ntdll.spec +++ b/dll/ntdll/def/ntdll.spec @@ -1,903 +1,903 @@ -# 1 stdcall PropertyLengthAsVariant(ptr long long long) -# 2 stdcall RtlConvertPropertyToVariant(ptr long ptr ptr) -# 3 stdcall RtlConvertVariantToProperty(ptr long ptr ptr ptr long ptr) -4 fastcall RtlActivateActivationContextUnsafeFast(ptr ptr) -5 fastcall RtlDeactivateActivationContextUnsafeFast(ptr) -6 fastcall RtlInterlockedPushListSList(ptr ptr ptr long) -7 fastcall -arch=i386 RtlUlongByteSwap(long) -8 fastcall -ret64 RtlUlonglongByteSwap(double) -9 fastcall -arch=i386 RtlUshortByteSwap(long) -10 stdcall -arch=i386,x86_64 ExpInterlockedPopEntrySListEnd() -11 stdcall -arch=i386,x86_64 ExpInterlockedPopEntrySListFault() -12 stdcall -arch=i386,x86_64 ExpInterlockedPopEntrySListResume() -13 stdcall CsrAllocateCaptureBuffer(long long) -14 stdcall CsrAllocateMessagePointer(ptr long ptr) -15 stdcall CsrCaptureMessageBuffer(ptr ptr long ptr) -16 stdcall CsrCaptureMessageMultiUnicodeStringsInPlace(ptr long ptr) -17 stdcall CsrCaptureMessageString(ptr str long long ptr) -18 stdcall CsrCaptureTimeout(long ptr) -19 stdcall CsrClientCallServer(ptr ptr long long) -20 stdcall CsrClientConnectToServer(str long ptr ptr ptr) -21 stdcall CsrFreeCaptureBuffer(ptr) -22 stdcall CsrGetProcessId() -23 stdcall CsrIdentifyAlertableThread() -24 stdcall CsrNewThread() -25 stdcall CsrProbeForRead(ptr long long) -26 stdcall CsrProbeForWrite(ptr long long) -27 stdcall CsrSetPriorityClass(ptr ptr) -28 stdcall DbgBreakPoint() -29 varargs DbgPrint(str) -30 varargs DbgPrintEx(long long str) -31 varargs DbgPrintReturnControlC(str) -32 stdcall DbgPrompt(ptr ptr long) -33 stdcall DbgQueryDebugFilterState(long long) -34 stdcall DbgSetDebugFilterState(long long long) -35 stdcall DbgUiConnectToDbg() -36 stdcall DbgUiContinue(ptr long) -37 stdcall DbgUiConvertStateChangeStructure(ptr ptr) -38 stdcall DbgUiDebugActiveProcess(ptr) -39 stdcall DbgUiGetThreadDebugObject() -40 stdcall DbgUiIssueRemoteBreakin(ptr) -41 stdcall DbgUiRemoteBreakin() -42 stdcall DbgUiSetThreadDebugObject(ptr) -43 stdcall DbgUiStopDebugging(ptr) -44 stdcall DbgUiWaitStateChange(ptr ptr) -45 stdcall DbgUserBreakPoint() -46 stdcall EtwControlTraceA(double str ptr long) -47 stdcall EtwControlTraceW(double wstr ptr long) -48 stdcall -stub EtwCreateTraceInstanceId(ptr ptr) -49 stdcall EtwEnableTrace(long long long ptr double) -50 stdcall -stub EtwEnumerateTraceGuids(ptr long ptr) -51 stdcall EtwFlushTraceA(double str ptr) -52 stdcall EtwFlushTraceW(double wstr ptr) -53 stdcall EtwGetTraceEnableFlags(double) -54 stdcall EtwGetTraceEnableLevel(double) -55 stdcall EtwGetTraceLoggerHandle(ptr) -56 stdcall -stub EtwNotificationRegistrationA(ptr long ptr long long) -57 stdcall -stub EtwNotificationRegistrationW(ptr long ptr long long) -58 stdcall EtwQueryAllTracesA(ptr long ptr) -59 stdcall EtwQueryAllTracesW(ptr long ptr) -60 stdcall EtwQueryTraceA(double str ptr) -61 stdcall EtwQueryTraceW(double wstr ptr) -62 stdcall -stub EtwReceiveNotificationsA(long long long long) -63 stdcall -stub EtwReceiveNotificationsW(long long long long) -64 stdcall EtwRegisterTraceGuidsA(ptr ptr ptr long ptr str str ptr) -65 stdcall EtwRegisterTraceGuidsW(ptr ptr ptr long ptr wstr wstr ptr) -66 stdcall EtwStartTraceA(ptr str ptr) -67 stdcall EtwStartTraceW(ptr wstr ptr) -68 stdcall EtwStopTraceA(double str ptr) -69 stdcall EtwStopTraceW(double wstr ptr) -70 stdcall EtwTraceEvent(double ptr) -71 stdcall -stub EtwTraceEventInstance(double ptr ptr ptr) -72 varargs EtwTraceMessage(ptr long ptr long) -73 stdcall -stub EtwTraceMessageVa(double long ptr long ptr) -74 stdcall EtwUnregisterTraceGuids(double) -75 stdcall EtwUpdateTraceA(double str ptr) -76 stdcall EtwUpdateTraceW(double wstr ptr) -77 stdcall -stub EtwpGetTraceBuffer(long long long long) -78 stdcall -stub EtwpSetHWConfigFunction(ptr long) -79 stdcall -arch=i386 KiFastSystemCall() -80 stdcall -arch=i386 KiFastSystemCallRet() -81 stdcall -arch=i386 KiIntSystemCall() -82 stdcall KiRaiseUserExceptionDispatcher() -83 stdcall KiUserApcDispatcher(ptr ptr ptr ptr) -84 stdcall KiUserCallbackDispatcher(ptr ptr long) ; CHECKME -85 stdcall KiUserExceptionDispatcher(ptr ptr) -86 stdcall LdrAccessOutOfProcessResource(ptr ptr ptr ptr ptr) -87 stdcall LdrAccessResource(long ptr ptr ptr) -88 stdcall LdrAddRefDll(long ptr) -# 89 stdcall LdrAlternateResourcesEnabled -90 stdcall LdrCreateOutOfProcessImage(long ptr ptr ptr) -91 stdcall LdrDestroyOutOfProcessImage(ptr) -92 stdcall LdrDisableThreadCalloutsForDll(long) -93 stdcall LdrEnumResources(ptr ptr long ptr ptr) -94 stdcall LdrEnumerateLoadedModules(long ptr long) -95 stdcall LdrFindCreateProcessManifest(long ptr ptr long ptr) ; 5.1 and 5.2 only -96 stdcall LdrFindEntryForAddress(ptr ptr) -97 stdcall LdrFindResourceDirectory_U(long ptr long ptr) +# @ stdcall PropertyLengthAsVariant(ptr long long long) +# @ stdcall RtlConvertPropertyToVariant(ptr long ptr ptr) +# @ stdcall RtlConvertVariantToProperty(ptr long ptr ptr ptr long ptr) +@ fastcall RtlActivateActivationContextUnsafeFast(ptr ptr) +@ fastcall RtlDeactivateActivationContextUnsafeFast(ptr) +@ fastcall RtlInterlockedPushListSList(ptr ptr ptr long) +@ fastcall -arch=i386 RtlUlongByteSwap(long) +@ fastcall -ret64 RtlUlonglongByteSwap(double) +@ fastcall -arch=i386 RtlUshortByteSwap(long) +@ stdcall -arch=i386,x86_64 ExpInterlockedPopEntrySListEnd() +@ stdcall -arch=i386,x86_64 ExpInterlockedPopEntrySListFault() +@ stdcall -arch=i386,x86_64 ExpInterlockedPopEntrySListResume() +@ stdcall CsrAllocateCaptureBuffer(long long) +@ stdcall CsrAllocateMessagePointer(ptr long ptr) +@ stdcall CsrCaptureMessageBuffer(ptr ptr long ptr) +@ stdcall CsrCaptureMessageMultiUnicodeStringsInPlace(ptr long ptr) +@ stdcall CsrCaptureMessageString(ptr str long long ptr) +@ stdcall CsrCaptureTimeout(long ptr) +@ stdcall CsrClientCallServer(ptr ptr long long) +@ stdcall CsrClientConnectToServer(str long ptr ptr ptr) +@ stdcall CsrFreeCaptureBuffer(ptr) +@ stdcall CsrGetProcessId() +@ stdcall CsrIdentifyAlertableThread() +@ stdcall CsrNewThread() +@ stdcall CsrProbeForRead(ptr long long) +@ stdcall CsrProbeForWrite(ptr long long) +@ stdcall CsrSetPriorityClass(ptr ptr) +@ stdcall DbgBreakPoint() +@ varargs DbgPrint(str) +@ varargs DbgPrintEx(long long str) +@ varargs DbgPrintReturnControlC(str) +@ stdcall DbgPrompt(ptr ptr long) +@ stdcall DbgQueryDebugFilterState(long long) +@ stdcall DbgSetDebugFilterState(long long long) +@ stdcall DbgUiConnectToDbg() +@ stdcall DbgUiContinue(ptr long) +@ stdcall DbgUiConvertStateChangeStructure(ptr ptr) +@ stdcall DbgUiDebugActiveProcess(ptr) +@ stdcall DbgUiGetThreadDebugObject() +@ stdcall DbgUiIssueRemoteBreakin(ptr) +@ stdcall DbgUiRemoteBreakin() +@ stdcall DbgUiSetThreadDebugObject(ptr) +@ stdcall DbgUiStopDebugging(ptr) +@ stdcall DbgUiWaitStateChange(ptr ptr) +@ stdcall DbgUserBreakPoint() +@ stdcall EtwControlTraceA(double str ptr long) +@ stdcall EtwControlTraceW(double wstr ptr long) +@ stdcall -stub EtwCreateTraceInstanceId(ptr ptr) +@ stdcall EtwEnableTrace(long long long ptr double) +@ stdcall -stub EtwEnumerateTraceGuids(ptr long ptr) +@ stdcall EtwFlushTraceA(double str ptr) +@ stdcall EtwFlushTraceW(double wstr ptr) +@ stdcall EtwGetTraceEnableFlags(double) +@ stdcall EtwGetTraceEnableLevel(double) +@ stdcall EtwGetTraceLoggerHandle(ptr) +@ stdcall -stub EtwNotificationRegistrationA(ptr long ptr long long) +@ stdcall -stub EtwNotificationRegistrationW(ptr long ptr long long) +@ stdcall EtwQueryAllTracesA(ptr long ptr) +@ stdcall EtwQueryAllTracesW(ptr long ptr) +@ stdcall EtwQueryTraceA(double str ptr) +@ stdcall EtwQueryTraceW(double wstr ptr) +@ stdcall -stub EtwReceiveNotificationsA(long long long long) +@ stdcall -stub EtwReceiveNotificationsW(long long long long) +@ stdcall EtwRegisterTraceGuidsA(ptr ptr ptr long ptr str str ptr) +@ stdcall EtwRegisterTraceGuidsW(ptr ptr ptr long ptr wstr wstr ptr) +@ stdcall EtwStartTraceA(ptr str ptr) +@ stdcall EtwStartTraceW(ptr wstr ptr) +@ stdcall EtwStopTraceA(double str ptr) +@ stdcall EtwStopTraceW(double wstr ptr) +@ stdcall EtwTraceEvent(double ptr) +@ stdcall -stub EtwTraceEventInstance(double ptr ptr ptr) +@ varargs EtwTraceMessage(ptr long ptr long) +@ stdcall -stub EtwTraceMessageVa(double long ptr long ptr) +@ stdcall EtwUnregisterTraceGuids(double) +@ stdcall EtwUpdateTraceA(double str ptr) +@ stdcall EtwUpdateTraceW(double wstr ptr) +@ stdcall -stub EtwpGetTraceBuffer(long long long long) +@ stdcall -stub EtwpSetHWConfigFunction(ptr long) +@ stdcall -arch=i386 KiFastSystemCall() +@ stdcall -arch=i386 KiFastSystemCallRet() +@ stdcall -arch=i386 KiIntSystemCall() +@ stdcall KiRaiseUserExceptionDispatcher() +@ stdcall KiUserApcDispatcher(ptr ptr ptr ptr) +@ stdcall KiUserCallbackDispatcher(ptr ptr long) ; CHECKME +@ stdcall KiUserExceptionDispatcher(ptr ptr) +@ stdcall LdrAccessOutOfProcessResource(ptr ptr ptr ptr ptr) +@ stdcall LdrAccessResource(long ptr ptr ptr) +@ stdcall LdrAddRefDll(long ptr) +# @ stdcall LdrAlternateResourcesEnabled +@ stdcall LdrCreateOutOfProcessImage(long ptr ptr ptr) +@ stdcall LdrDestroyOutOfProcessImage(ptr) +@ stdcall LdrDisableThreadCalloutsForDll(long) +@ stdcall LdrEnumResources(ptr ptr long ptr ptr) +@ stdcall LdrEnumerateLoadedModules(long ptr long) +@ stdcall LdrFindCreateProcessManifest(long ptr ptr long ptr) ; 5.1 and 5.2 only +@ stdcall LdrFindEntryForAddress(ptr ptr) +@ stdcall LdrFindResourceDirectory_U(long ptr long ptr) # stdcall LdrFindResourceEx_U ; 5.1 and higher -99 stdcall LdrFindResource_U(long ptr long ptr) -100 stdcall LdrFlushAlternateResourceModules() -101 stdcall LdrGetDllHandle(wstr long ptr ptr) -102 stdcall LdrGetDllHandleEx(long wstr long ptr ptr) -103 stdcall LdrGetProcedureAddress(ptr ptr long ptr) +@ stdcall LdrFindResource_U(long ptr long ptr) +@ stdcall LdrFlushAlternateResourceModules() +@ stdcall LdrGetDllHandle(wstr long ptr ptr) +@ stdcall LdrGetDllHandleEx(long wstr long ptr ptr) +@ stdcall LdrGetProcedureAddress(ptr ptr long ptr) # stdcall LdrHotPatchRoutine # stdcall LdrInitShimEngineDynamic -106 stdcall LdrInitializeThunk(long long long long) -107 stdcall LdrLoadAlternateResourceModule(ptr ptr) -108 stdcall LdrLoadDll(wstr long ptr ptr) -109 stdcall LdrLockLoaderLock(long ptr ptr) -110 stdcall LdrOpenImageFileOptionsKey(ptr long ptr) ; 5.2 SP1 and higher -111 stdcall LdrProcessRelocationBlock(ptr long ptr long) -112 stdcall LdrQueryImageFileExecutionOptions(ptr str long ptr long ptr) +@ stdcall LdrInitializeThunk(long long long long) +@ stdcall LdrLoadAlternateResourceModule(ptr ptr) +@ stdcall LdrLoadDll(wstr long ptr ptr) +@ stdcall LdrLockLoaderLock(long ptr ptr) +@ stdcall LdrOpenImageFileOptionsKey(ptr long ptr) ; 5.2 SP1 and higher +@ stdcall LdrProcessRelocationBlock(ptr long ptr long) +@ stdcall LdrQueryImageFileExecutionOptions(ptr str long ptr long ptr) # stdcall LdrQueryImageFileExecutionOptionsEx(ptr ptr long ptr long ptr long) -114 stdcall LdrQueryImageFileKeyOption(ptr ptr long ptr long ptr) -115 stdcall LdrQueryProcessModuleInformation(ptr long ptr) +@ stdcall LdrQueryImageFileKeyOption(ptr ptr long ptr long ptr) +@ stdcall LdrQueryProcessModuleInformation(ptr long ptr) # stdcall LdrSetAppCompatDllRedirectionCallback -117 stdcall LdrSetDllManifestProber(ptr) -118 stdcall LdrShutdownProcess() -119 stdcall LdrShutdownThread() -120 stdcall LdrUnloadAlternateResourceModule(ptr) -121 stdcall LdrUnloadDll(ptr) -122 stdcall LdrUnlockLoaderLock(long long) -123 stdcall LdrVerifyImageMatchesChecksum(ptr long long long) -124 extern NlsAnsiCodePage -125 extern NlsMbCodePageTag -126 extern NlsMbOemCodePageTag -127 stdcall NtAcceptConnectPort(ptr long ptr long long ptr) -128 stdcall NtAccessCheck(ptr long long ptr ptr ptr ptr ptr) -129 stdcall NtAccessCheckAndAuditAlarm(ptr long ptr ptr ptr long ptr long ptr ptr ptr) -130 stdcall NtAccessCheckByType(ptr ptr ptr long ptr long ptr ptr long ptr ptr) -131 stdcall NtAccessCheckByTypeAndAuditAlarm(ptr ptr ptr ptr ptr ptr long long long ptr long ptr long ptr ptr ptr) -132 stdcall NtAccessCheckByTypeResultList(ptr ptr ptr long ptr long ptr ptr long ptr ptr) -133 stdcall NtAccessCheckByTypeResultListAndAuditAlarm(ptr ptr ptr ptr ptr ptr long long long ptr long ptr long ptr ptr ptr) -134 stdcall NtAccessCheckByTypeResultListAndAuditAlarmByHandle(ptr ptr ptr ptr ptr ptr ptr long long long ptr long ptr long ptr ptr ptr) -135 stdcall NtAddAtom(ptr long ptr) -136 stdcall NtAddBootEntry(ptr long) -137 stdcall NtAddDriverEntry(ptr long) ; 5.2 and higher -138 stdcall NtAdjustGroupsToken(long long ptr long ptr ptr) -139 stdcall NtAdjustPrivilegesToken(long long long long long long) -140 stdcall NtAlertResumeThread(long ptr) -141 stdcall NtAlertThread(long) -142 stdcall NtAllocateLocallyUniqueId(ptr) -143 stdcall NtAllocateUserPhysicalPages(ptr ptr ptr) -144 stdcall NtAllocateUuids(ptr ptr ptr ptr) -145 stdcall NtAllocateVirtualMemory(long ptr ptr ptr long long) -146 stdcall NtApphelpCacheControl(long ptr) -147 stdcall NtAreMappedFilesTheSame(ptr ptr) -148 stdcall NtAssignProcessToJobObject(long long) -149 stdcall NtCallbackReturn(ptr long long) -150 stdcall NtCancelDeviceWakeupRequest(ptr) -151 stdcall NtCancelIoFile(long ptr) -152 stdcall NtCancelTimer(long ptr) -153 stdcall NtClearEvent(long) -154 stdcall NtClose(long) -155 stdcall NtCloseObjectAuditAlarm(ptr ptr long) -156 stdcall NtCompactKeys(long ptr) -157 stdcall NtCompareTokens(ptr ptr ptr) -158 stdcall NtCompleteConnectPort(ptr) -159 stdcall NtCompressKey(ptr) -160 stdcall NtConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr) -161 stdcall NtContinue(ptr long) -162 stdcall NtCreateDebugObject(ptr long ptr long) -163 stdcall NtCreateDirectoryObject(long long long) -164 stdcall NtCreateEvent(long long long long long) -165 stdcall NtCreateEventPair(ptr long ptr) -166 stdcall NtCreateFile(ptr long ptr ptr long long long ptr long long ptr) -167 stdcall NtCreateIoCompletion(ptr long ptr long) -168 stdcall NtCreateJobObject(ptr long ptr) -169 stdcall NtCreateJobSet(long ptr long) -170 stdcall NtCreateKey(ptr long ptr long ptr long long) -171 stdcall NtCreateKeyedEvent(ptr long ptr long) -172 stdcall NtCreateMailslotFile(long long long long long long long long) -173 stdcall NtCreateMutant(ptr long ptr long) -174 stdcall NtCreateNamedPipeFile(ptr long ptr ptr long long long long long long long long long ptr) -175 stdcall NtCreatePagingFile(long long long long) -176 stdcall NtCreatePort(ptr ptr long long ptr) -177 stdcall NtCreateProcess(ptr long ptr ptr long ptr ptr ptr) -178 stdcall NtCreateProcessEx(ptr long ptr ptr long ptr ptr ptr long) -179 stdcall NtCreateProfile(ptr ptr ptr long long ptr long long long) ; CHECKME -180 stdcall NtCreateSection(ptr long ptr ptr long long long) -181 stdcall NtCreateSemaphore(ptr long ptr long long) -182 stdcall NtCreateSymbolicLinkObject(ptr long ptr ptr) -183 stdcall NtCreateThread(ptr long ptr ptr ptr ptr ptr long) -184 stdcall NtCreateTimer(ptr long ptr long) -185 stdcall NtCreateToken(ptr long ptr long ptr ptr ptr ptr ptr ptr ptr ptr ptr) -186 stdcall NtCreateWaitablePort(ptr ptr long long long) -187 stdcall -arch=win32 NtCurrentTeb() _NtCurrentTeb -188 stdcall NtDebugActiveProcess(ptr ptr) -189 stdcall NtDebugContinue(ptr ptr long) -190 stdcall NtDelayExecution(long ptr) -191 stdcall NtDeleteAtom(long) -192 stdcall NtDeleteBootEntry(long) -193 stdcall NtDeleteDriverEntry(long) -194 stdcall NtDeleteFile(ptr) -195 stdcall NtDeleteKey(long) -196 stdcall NtDeleteObjectAuditAlarm(ptr ptr long) -197 stdcall NtDeleteValueKey(long ptr) -198 stdcall NtDeviceIoControlFile(long long long long long long long long long long) -199 stdcall NtDisplayString(ptr) -200 stdcall NtDuplicateObject(long long long ptr long long long) -201 stdcall NtDuplicateToken(long long long long long long) -202 stdcall NtEnumerateBootEntries(ptr ptr) -203 stdcall NtEnumerateDriverEntries(ptr ptr) -204 stdcall NtEnumerateKey (long long long long long long) -205 stdcall NtEnumerateSystemEnvironmentValuesEx(long ptr long) -206 stdcall NtEnumerateValueKey(long long long long long long) -207 stdcall NtExtendSection(ptr ptr) -208 stdcall NtFilterToken(ptr long ptr ptr ptr ptr) -209 stdcall NtFindAtom(ptr long ptr) -210 stdcall NtFlushBuffersFile(long ptr) -211 stdcall NtFlushInstructionCache(long ptr long) -212 stdcall NtFlushKey(long) -213 stdcall NtFlushVirtualMemory(long ptr ptr long) -214 stdcall NtFlushWriteBuffer() -215 stdcall NtFreeUserPhysicalPages(ptr ptr ptr) -216 stdcall NtFreeVirtualMemory(long ptr ptr long) -217 stdcall NtFsControlFile(long long long long long long long long long long) -218 stdcall NtGetContextThread(long ptr) -219 stdcall NtGetCurrentProcessorNumber() ; 5.2 and higher -220 stdcall NtGetDevicePowerState(ptr ptr) -221 stdcall NtGetPlugPlayEvent(long long ptr long) -222 stdcall NtGetTickCount() RtlGetTickCount -223 stdcall NtGetWriteWatch(long long ptr long ptr ptr ptr) -224 stdcall NtImpersonateAnonymousToken(ptr) -225 stdcall NtImpersonateClientOfPort(ptr ptr) -226 stdcall NtImpersonateThread(ptr ptr ptr) -227 stdcall NtInitializeRegistry(long) -228 stdcall NtInitiatePowerAction (long long long long) -229 stdcall NtIsProcessInJob(long long) -230 stdcall NtIsSystemResumeAutomatic() -231 stdcall NtListenPort(ptr ptr) -232 stdcall NtLoadDriver(ptr) -233 stdcall NtLoadKey2(ptr ptr long) -234 stdcall NtLoadKey(ptr ptr) -235 stdcall NtLoadKeyEx(ptr ptr long ptr) -236 stdcall NtLockFile(long long ptr ptr ptr ptr ptr ptr long long) -237 stdcall NtLockProductActivationKeys(ptr ptr) -238 stdcall NtLockRegistryKey(ptr) -239 stdcall NtLockVirtualMemory(long ptr ptr long) -240 stdcall NtMakePermanentObject(ptr) -241 stdcall NtMakeTemporaryObject(long) -242 stdcall NtMapUserPhysicalPages(ptr ptr ptr) -243 stdcall NtMapUserPhysicalPagesScatter(ptr ptr ptr) -244 stdcall NtMapViewOfSection(long long ptr long long ptr ptr long long long) -245 stdcall NtModifyBootEntry(ptr) -246 stdcall NtModifyDriverEntry(ptr) -247 stdcall NtNotifyChangeDirectoryFile(long long ptr ptr ptr ptr long long long) -248 stdcall NtNotifyChangeKey(long long ptr ptr ptr long long ptr long long) -249 stdcall NtNotifyChangeMultipleKeys(ptr long ptr ptr ptr ptr ptr long long ptr long long) -250 stdcall NtOpenDirectoryObject(long long long) -251 stdcall NtOpenEvent(long long long) -252 stdcall NtOpenEventPair(ptr long ptr) -253 stdcall NtOpenFile(ptr long ptr ptr long long) -254 stdcall NtOpenIoCompletion(ptr long ptr) -255 stdcall NtOpenJobObject(ptr long ptr) -256 stdcall NtOpenKey(ptr long ptr) -257 stdcall NtOpenKeyedEvent(ptr long ptr) -258 stdcall NtOpenMutant(ptr long ptr) -259 stdcall NtOpenObjectAuditAlarm(ptr ptr ptr ptr ptr ptr long long ptr long long ptr) -260 stdcall NtOpenProcess(ptr long ptr ptr) -261 stdcall NtOpenProcessToken(long long ptr) -262 stdcall NtOpenProcessTokenEx(long long long ptr) -263 stdcall NtOpenSection(ptr long ptr) -264 stdcall NtOpenSemaphore(long long ptr) -265 stdcall NtOpenSymbolicLinkObject (ptr long ptr) -266 stdcall NtOpenThread(ptr long ptr ptr) -267 stdcall NtOpenThreadToken(long long long ptr) -268 stdcall NtOpenThreadTokenEx(long long long long ptr) -269 stdcall NtOpenTimer(ptr long ptr) -270 stdcall NtPlugPlayControl(ptr ptr long) -271 stdcall NtPowerInformation(long ptr long ptr long) -272 stdcall NtPrivilegeCheck(ptr ptr ptr) -273 stdcall NtPrivilegeObjectAuditAlarm(ptr ptr ptr long ptr long) -274 stdcall NtPrivilegedServiceAuditAlarm(ptr ptr ptr ptr long) -275 stdcall NtProtectVirtualMemory(long ptr ptr long ptr) -276 stdcall NtPulseEvent(long ptr) -277 stdcall NtQueryAttributesFile(ptr ptr) -278 stdcall NtQueryBootEntryOrder(ptr ptr) -279 stdcall NtQueryBootOptions(ptr ptr) -280 stdcall NtQueryDebugFilterState(long long) -281 stdcall NtQueryDefaultLocale(long ptr) -282 stdcall NtQueryDefaultUILanguage(ptr) -283 stdcall NtQueryDirectoryFile(long long ptr ptr ptr ptr long long long ptr long) -284 stdcall NtQueryDirectoryObject(long ptr long long long ptr ptr) -285 stdcall NtQueryDriverEntryOrder(ptr ptr) -286 stdcall NtQueryEaFile(long ptr ptr long long ptr long ptr long) -287 stdcall NtQueryEvent(long long ptr long ptr) -288 stdcall NtQueryFullAttributesFile(ptr ptr) -289 stdcall NtQueryInformationAtom(long long ptr long ptr) -290 stdcall NtQueryInformationFile(long ptr ptr long long) -291 stdcall NtQueryInformationJobObject(long long ptr long ptr) -292 stdcall NtQueryInformationPort(ptr long ptr long ptr) -293 stdcall NtQueryInformationProcess(long long ptr long ptr) -294 stdcall NtQueryInformationThread(long long ptr long ptr) -295 stdcall NtQueryInformationToken(long long ptr long ptr) -296 stdcall NtQueryInstallUILanguage(ptr) -297 stdcall NtQueryIntervalProfile(long ptr) -298 stdcall NtQueryIoCompletion(long long ptr long ptr) -299 stdcall NtQueryKey (long long ptr long ptr) -300 stdcall NtQueryMultipleValueKey(long ptr long ptr long ptr) -301 stdcall NtQueryMutant(long long ptr long ptr) -302 stdcall NtQueryObject(long long long long long) -303 stdcall NtQueryOpenSubKeys(ptr ptr) -304 stdcall NtQueryOpenSubKeysEx(ptr long ptr ptr) -305 stdcall NtQueryPerformanceCounter(ptr ptr) -306 stdcall NtQueryPortInformationProcess() -307 stdcall NtQueryQuotaInformationFile(ptr ptr ptr long long ptr long ptr long) -308 stdcall NtQuerySection (long long long long long) -309 stdcall NtQuerySecurityObject (long long long long long) -310 stdcall NtQuerySemaphore (long long ptr long ptr) -311 stdcall NtQuerySymbolicLinkObject(long ptr ptr) -312 stdcall NtQuerySystemEnvironmentValue(ptr ptr long ptr) -313 stdcall NtQuerySystemEnvironmentValueEx(ptr ptr ptr ptr ptr) -314 stdcall NtQuerySystemInformation(long long long long) -315 stdcall NtQuerySystemTime(ptr) -316 stdcall NtQueryTimer(ptr long ptr long ptr) -317 stdcall NtQueryTimerResolution(long long long) -318 stdcall NtQueryValueKey(long long long long long long) -319 stdcall NtQueryVirtualMemory(long ptr long ptr long ptr) -320 stdcall NtQueryVolumeInformationFile(long ptr ptr long long) -321 stdcall NtQueueApcThread(long ptr long long long) -322 stdcall NtRaiseException(ptr ptr long) -323 stdcall NtRaiseHardError(long long long ptr long ptr) -324 stdcall NtReadFile(long long ptr ptr ptr ptr long ptr ptr) -325 stdcall NtReadFileScatter(long long ptr ptr ptr ptr long ptr ptr) -326 stdcall NtReadRequestData(ptr ptr long ptr long ptr) -327 stdcall NtReadVirtualMemory(long ptr ptr long ptr) -328 stdcall NtRegisterThreadTerminatePort(ptr) -329 stdcall NtReleaseKeyedEvent(ptr ptr long ptr) -330 stdcall NtReleaseMutant(long ptr) -331 stdcall NtReleaseSemaphore(long long ptr) -332 stdcall NtRemoveIoCompletion(ptr ptr ptr ptr ptr) -333 stdcall NtRemoveProcessDebug(ptr ptr) -334 stdcall NtRenameKey(ptr ptr) -335 stdcall NtReplaceKey(ptr long ptr) -336 stdcall NtReplyPort(ptr ptr) -337 stdcall NtReplyWaitReceivePort(ptr ptr ptr ptr) -338 stdcall NtReplyWaitReceivePortEx(ptr ptr ptr ptr ptr) -339 stdcall NtReplyWaitReplyPort(ptr ptr) -340 stdcall NtRequestDeviceWakeup(ptr) -341 stdcall NtRequestPort(ptr ptr) -342 stdcall NtRequestWaitReplyPort(ptr ptr ptr) -343 stdcall NtRequestWakeupLatency(long) -344 stdcall NtResetEvent(long ptr) -345 stdcall NtResetWriteWatch(long ptr long) -346 stdcall NtRestoreKey(long long long) -347 stdcall NtResumeProcess(ptr) -348 stdcall NtResumeThread(long long) -349 stdcall NtSaveKey(long long) -350 stdcall NtSaveKeyEx(ptr ptr long) -351 stdcall NtSaveMergedKeys(ptr ptr ptr) -352 stdcall NtSecureConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr ptr) -353 stdcall NtSetBootEntryOrder(ptr ptr) -354 stdcall NtSetBootOptions(ptr long) -355 stdcall NtSetContextThread(long ptr) -356 stdcall NtSetDebugFilterState(long long long) -357 stdcall NtSetDefaultHardErrorPort(ptr) -358 stdcall NtSetDefaultLocale(long long) -359 stdcall NtSetDefaultUILanguage(long) -360 stdcall NtSetDriverEntryOrder(ptr ptr) -361 stdcall NtSetEaFile(long ptr ptr long) -362 stdcall NtSetEvent(long long) -363 stdcall NtSetEventBoostPriority(ptr) -364 stdcall NtSetHighEventPair(ptr) -365 stdcall NtSetHighWaitLowEventPair(ptr) -366 stdcall NtSetInformationDebugObject(ptr long ptr long ptr) -367 stdcall NtSetInformationFile(long long long long long) -368 stdcall NtSetInformationJobObject(long long ptr long) -369 stdcall NtSetInformationKey(long long ptr long) -370 stdcall NtSetInformationObject(long long ptr long) -371 stdcall NtSetInformationProcess(long long long long) -372 stdcall NtSetInformationThread(long long ptr long) -373 stdcall NtSetInformationToken(long long ptr long) -374 stdcall NtSetIntervalProfile(long long) -375 stdcall NtSetIoCompletion(ptr long ptr long long) -376 stdcall NtSetLdtEntries(long int64 long int64) -377 stdcall NtSetLowEventPair(ptr) -378 stdcall NtSetLowWaitHighEventPair(ptr) -379 stdcall NtSetQuotaInformationFile(ptr ptr ptr long) -380 stdcall NtSetSecurityObject(long long ptr) -381 stdcall NtSetSystemEnvironmentValue(ptr ptr) -382 stdcall NtSetSystemEnvironmentValueEx(ptr ptr ptr ptr ptr) -383 stdcall NtSetSystemInformation(long ptr long) -384 stdcall NtSetSystemPowerState(long long long) -385 stdcall NtSetSystemTime(ptr ptr) -386 stdcall NtSetThreadExecutionState(long ptr) -387 stdcall NtSetTimer(long ptr ptr ptr long long ptr) -388 stdcall NtSetTimerResolution(long long ptr) -389 stdcall NtSetUuidSeed(ptr) -390 stdcall NtSetValueKey(long long long long long long) -391 stdcall NtSetVolumeInformationFile(long ptr ptr long long) -392 stdcall NtShutdownSystem(long) -393 stdcall NtSignalAndWaitForSingleObject(long long long ptr) -394 stdcall NtStartProfile(ptr) -395 stdcall NtStopProfile(ptr) -396 stdcall NtSuspendProcess(ptr) -397 stdcall NtSuspendThread(long ptr) -398 stdcall NtSystemDebugControl(long ptr long ptr long ptr) -399 stdcall NtTerminateJobObject(long long) -400 stdcall NtTerminateProcess(long long) -401 stdcall NtTerminateThread(long long) -402 stdcall NtTestAlert() -403 stdcall NtTraceEvent(long long long ptr) -404 stdcall NtTranslateFilePath(ptr long ptr long) -405 stdcall NtUnloadDriver(ptr) -406 stdcall NtUnloadKey2(ptr long) -407 stdcall NtUnloadKey(long) -408 stdcall NtUnloadKeyEx(ptr ptr) -409 stdcall NtUnlockFile(long ptr ptr ptr ptr) -410 stdcall NtUnlockVirtualMemory(long ptr ptr long) -411 stdcall NtUnmapViewOfSection(long ptr) -412 stdcall NtVdmControl(long ptr) -413 stdcall NtWaitForDebugEvent(ptr long ptr ptr) -414 stdcall NtWaitForKeyedEvent(ptr ptr long ptr) -415 stdcall NtWaitForMultipleObjects32(long ptr long long ptr) -416 stdcall NtWaitForMultipleObjects(long ptr long long ptr) -417 stdcall NtWaitForSingleObject(long long long) -418 stdcall NtWaitHighEventPair(ptr) -419 stdcall NtWaitLowEventPair(ptr) -420 stdcall NtWriteFile(long long ptr ptr ptr ptr long ptr ptr) -421 stdcall NtWriteFileGather(long long ptr ptr ptr ptr long ptr ptr) -422 stdcall NtWriteRequestData(ptr ptr long ptr long ptr) -423 stdcall NtWriteVirtualMemory(long ptr ptr long ptr) -424 stdcall NtYieldExecution() +@ stdcall LdrSetDllManifestProber(ptr) +@ stdcall LdrShutdownProcess() +@ stdcall LdrShutdownThread() +@ stdcall LdrUnloadAlternateResourceModule(ptr) +@ stdcall LdrUnloadDll(ptr) +@ stdcall LdrUnlockLoaderLock(long long) +@ stdcall LdrVerifyImageMatchesChecksum(ptr long long long) +@ extern NlsAnsiCodePage +@ extern NlsMbCodePageTag +@ extern NlsMbOemCodePageTag +@ stdcall NtAcceptConnectPort(ptr long ptr long long ptr) +@ stdcall NtAccessCheck(ptr long long ptr ptr ptr ptr ptr) +@ stdcall NtAccessCheckAndAuditAlarm(ptr long ptr ptr ptr long ptr long ptr ptr ptr) +@ stdcall NtAccessCheckByType(ptr ptr ptr long ptr long ptr ptr long ptr ptr) +@ stdcall NtAccessCheckByTypeAndAuditAlarm(ptr ptr ptr ptr ptr ptr long long long ptr long ptr long ptr ptr ptr) +@ stdcall NtAccessCheckByTypeResultList(ptr ptr ptr long ptr long ptr ptr long ptr ptr) +@ stdcall NtAccessCheckByTypeResultListAndAuditAlarm(ptr ptr ptr ptr ptr ptr long long long ptr long ptr long ptr ptr ptr) +@ stdcall NtAccessCheckByTypeResultListAndAuditAlarmByHandle(ptr ptr ptr ptr ptr ptr ptr long long long ptr long ptr long ptr ptr ptr) +@ stdcall NtAddAtom(ptr long ptr) +@ stdcall NtAddBootEntry(ptr long) +@ stdcall NtAddDriverEntry(ptr long) ; 5.2 and higher +@ stdcall NtAdjustGroupsToken(long long ptr long ptr ptr) +@ stdcall NtAdjustPrivilegesToken(long long long long long long) +@ stdcall NtAlertResumeThread(long ptr) +@ stdcall NtAlertThread(long) +@ stdcall NtAllocateLocallyUniqueId(ptr) +@ stdcall NtAllocateUserPhysicalPages(ptr ptr ptr) +@ stdcall NtAllocateUuids(ptr ptr ptr ptr) +@ stdcall NtAllocateVirtualMemory(long ptr ptr ptr long long) +@ stdcall NtApphelpCacheControl(long ptr) +@ stdcall NtAreMappedFilesTheSame(ptr ptr) +@ stdcall NtAssignProcessToJobObject(long long) +@ stdcall NtCallbackReturn(ptr long long) +@ stdcall NtCancelDeviceWakeupRequest(ptr) +@ stdcall NtCancelIoFile(long ptr) +@ stdcall NtCancelTimer(long ptr) +@ stdcall NtClearEvent(long) +@ stdcall NtClose(long) +@ stdcall NtCloseObjectAuditAlarm(ptr ptr long) +@ stdcall NtCompactKeys(long ptr) +@ stdcall NtCompareTokens(ptr ptr ptr) +@ stdcall NtCompleteConnectPort(ptr) +@ stdcall NtCompressKey(ptr) +@ stdcall NtConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr) +@ stdcall NtContinue(ptr long) +@ stdcall NtCreateDebugObject(ptr long ptr long) +@ stdcall NtCreateDirectoryObject(long long long) +@ stdcall NtCreateEvent(long long long long long) +@ stdcall NtCreateEventPair(ptr long ptr) +@ stdcall NtCreateFile(ptr long ptr ptr long long long ptr long long ptr) +@ stdcall NtCreateIoCompletion(ptr long ptr long) +@ stdcall NtCreateJobObject(ptr long ptr) +@ stdcall NtCreateJobSet(long ptr long) +@ stdcall NtCreateKey(ptr long ptr long ptr long long) +@ stdcall NtCreateKeyedEvent(ptr long ptr long) +@ stdcall NtCreateMailslotFile(long long long long long long long long) +@ stdcall NtCreateMutant(ptr long ptr long) +@ stdcall NtCreateNamedPipeFile(ptr long ptr ptr long long long long long long long long long ptr) +@ stdcall NtCreatePagingFile(long long long long) +@ stdcall NtCreatePort(ptr ptr long long ptr) +@ stdcall NtCreateProcess(ptr long ptr ptr long ptr ptr ptr) +@ stdcall NtCreateProcessEx(ptr long ptr ptr long ptr ptr ptr long) +@ stdcall NtCreateProfile(ptr ptr ptr long long ptr long long long) ; CHECKME +@ stdcall NtCreateSection(ptr long ptr ptr long long long) +@ stdcall NtCreateSemaphore(ptr long ptr long long) +@ stdcall NtCreateSymbolicLinkObject(ptr long ptr ptr) +@ stdcall NtCreateThread(ptr long ptr ptr ptr ptr ptr long) +@ stdcall NtCreateTimer(ptr long ptr long) +@ stdcall NtCreateToken(ptr long ptr long ptr ptr ptr ptr ptr ptr ptr ptr ptr) +@ stdcall NtCreateWaitablePort(ptr ptr long long long) +@ stdcall -arch=win32 NtCurrentTeb() _NtCurrentTeb +@ stdcall NtDebugActiveProcess(ptr ptr) +@ stdcall NtDebugContinue(ptr ptr long) +@ stdcall NtDelayExecution(long ptr) +@ stdcall NtDeleteAtom(long) +@ stdcall NtDeleteBootEntry(long) +@ stdcall NtDeleteDriverEntry(long) +@ stdcall NtDeleteFile(ptr) +@ stdcall NtDeleteKey(long) +@ stdcall NtDeleteObjectAuditAlarm(ptr ptr long) +@ stdcall NtDeleteValueKey(long ptr) +@ stdcall NtDeviceIoControlFile(long long long long long long long long long long) +@ stdcall NtDisplayString(ptr) +@ stdcall NtDuplicateObject(long long long ptr long long long) +@ stdcall NtDuplicateToken(long long long long long long) +@ stdcall NtEnumerateBootEntries(ptr ptr) +@ stdcall NtEnumerateDriverEntries(ptr ptr) +@ stdcall NtEnumerateKey (long long long long long long) +@ stdcall NtEnumerateSystemEnvironmentValuesEx(long ptr long) +@ stdcall NtEnumerateValueKey(long long long long long long) +@ stdcall NtExtendSection(ptr ptr) +@ stdcall NtFilterToken(ptr long ptr ptr ptr ptr) +@ stdcall NtFindAtom(ptr long ptr) +@ stdcall NtFlushBuffersFile(long ptr) +@ stdcall NtFlushInstructionCache(long ptr long) +@ stdcall NtFlushKey(long) +@ stdcall NtFlushVirtualMemory(long ptr ptr long) +@ stdcall NtFlushWriteBuffer() +@ stdcall NtFreeUserPhysicalPages(ptr ptr ptr) +@ stdcall NtFreeVirtualMemory(long ptr ptr long) +@ stdcall NtFsControlFile(long long long long long long long long long long) +@ stdcall NtGetContextThread(long ptr) +@ stdcall NtGetCurrentProcessorNumber() ; 5.2 and higher +@ stdcall NtGetDevicePowerState(ptr ptr) +@ stdcall NtGetPlugPlayEvent(long long ptr long) +@ stdcall NtGetTickCount() RtlGetTickCount +@ stdcall NtGetWriteWatch(long long ptr long ptr ptr ptr) +@ stdcall NtImpersonateAnonymousToken(ptr) +@ stdcall NtImpersonateClientOfPort(ptr ptr) +@ stdcall NtImpersonateThread(ptr ptr ptr) +@ stdcall NtInitializeRegistry(long) +@ stdcall NtInitiatePowerAction (long long long long) +@ stdcall NtIsProcessInJob(long long) +@ stdcall NtIsSystemResumeAutomatic() +@ stdcall NtListenPort(ptr ptr) +@ stdcall NtLoadDriver(ptr) +@ stdcall NtLoadKey2(ptr ptr long) +@ stdcall NtLoadKey(ptr ptr) +@ stdcall NtLoadKeyEx(ptr ptr long ptr) +@ stdcall NtLockFile(long long ptr ptr ptr ptr ptr ptr long long) +@ stdcall NtLockProductActivationKeys(ptr ptr) +@ stdcall NtLockRegistryKey(ptr) +@ stdcall NtLockVirtualMemory(long ptr ptr long) +@ stdcall NtMakePermanentObject(ptr) +@ stdcall NtMakeTemporaryObject(long) +@ stdcall NtMapUserPhysicalPages(ptr ptr ptr) +@ stdcall NtMapUserPhysicalPagesScatter(ptr ptr ptr) +@ stdcall NtMapViewOfSection(long long ptr long long ptr ptr long long long) +@ stdcall NtModifyBootEntry(ptr) +@ stdcall NtModifyDriverEntry(ptr) +@ stdcall NtNotifyChangeDirectoryFile(long long ptr ptr ptr ptr long long long) +@ stdcall NtNotifyChangeKey(long long ptr ptr ptr long long ptr long long) +@ stdcall NtNotifyChangeMultipleKeys(ptr long ptr ptr ptr ptr ptr long long ptr long long) +@ stdcall NtOpenDirectoryObject(long long long) +@ stdcall NtOpenEvent(long long long) +@ stdcall NtOpenEventPair(ptr long ptr) +@ stdcall NtOpenFile(ptr long ptr ptr long long) +@ stdcall NtOpenIoCompletion(ptr long ptr) +@ stdcall NtOpenJobObject(ptr long ptr) +@ stdcall NtOpenKey(ptr long ptr) +@ stdcall NtOpenKeyedEvent(ptr long ptr) +@ stdcall NtOpenMutant(ptr long ptr) +@ stdcall NtOpenObjectAuditAlarm(ptr ptr ptr ptr ptr ptr long long ptr long long ptr) +@ stdcall NtOpenProcess(ptr long ptr ptr) +@ stdcall NtOpenProcessToken(long long ptr) +@ stdcall NtOpenProcessTokenEx(long long long ptr) +@ stdcall NtOpenSection(ptr long ptr) +@ stdcall NtOpenSemaphore(long long ptr) +@ stdcall NtOpenSymbolicLinkObject (ptr long ptr) +@ stdcall NtOpenThread(ptr long ptr ptr) +@ stdcall NtOpenThreadToken(long long long ptr) +@ stdcall NtOpenThreadTokenEx(long long long long ptr) +@ stdcall NtOpenTimer(ptr long ptr) +@ stdcall NtPlugPlayControl(ptr ptr long) +@ stdcall NtPowerInformation(long ptr long ptr long) +@ stdcall NtPrivilegeCheck(ptr ptr ptr) +@ stdcall NtPrivilegeObjectAuditAlarm(ptr ptr ptr long ptr long) +@ stdcall NtPrivilegedServiceAuditAlarm(ptr ptr ptr ptr long) +@ stdcall NtProtectVirtualMemory(long ptr ptr long ptr) +@ stdcall NtPulseEvent(long ptr) +@ stdcall NtQueryAttributesFile(ptr ptr) +@ stdcall NtQueryBootEntryOrder(ptr ptr) +@ stdcall NtQueryBootOptions(ptr ptr) +@ stdcall NtQueryDebugFilterState(long long) +@ stdcall NtQueryDefaultLocale(long ptr) +@ stdcall NtQueryDefaultUILanguage(ptr) +@ stdcall NtQueryDirectoryFile(long long ptr ptr ptr ptr long long long ptr long) +@ stdcall NtQueryDirectoryObject(long ptr long long long ptr ptr) +@ stdcall NtQueryDriverEntryOrder(ptr ptr) +@ stdcall NtQueryEaFile(long ptr ptr long long ptr long ptr long) +@ stdcall NtQueryEvent(long long ptr long ptr) +@ stdcall NtQueryFullAttributesFile(ptr ptr) +@ stdcall NtQueryInformationAtom(long long ptr long ptr) +@ stdcall NtQueryInformationFile(long ptr ptr long long) +@ stdcall NtQueryInformationJobObject(long long ptr long ptr) +@ stdcall NtQueryInformationPort(ptr long ptr long ptr) +@ stdcall NtQueryInformationProcess(long long ptr long ptr) +@ stdcall NtQueryInformationThread(long long ptr long ptr) +@ stdcall NtQueryInformationToken(long long ptr long ptr) +@ stdcall NtQueryInstallUILanguage(ptr) +@ stdcall NtQueryIntervalProfile(long ptr) +@ stdcall NtQueryIoCompletion(long long ptr long ptr) +@ stdcall NtQueryKey (long long ptr long ptr) +@ stdcall NtQueryMultipleValueKey(long ptr long ptr long ptr) +@ stdcall NtQueryMutant(long long ptr long ptr) +@ stdcall NtQueryObject(long long long long long) +@ stdcall NtQueryOpenSubKeys(ptr ptr) +@ stdcall NtQueryOpenSubKeysEx(ptr long ptr ptr) +@ stdcall NtQueryPerformanceCounter(ptr ptr) +@ stdcall NtQueryPortInformationProcess() +@ stdcall NtQueryQuotaInformationFile(ptr ptr ptr long long ptr long ptr long) +@ stdcall NtQuerySection (long long long long long) +@ stdcall NtQuerySecurityObject (long long long long long) +@ stdcall NtQuerySemaphore (long long ptr long ptr) +@ stdcall NtQuerySymbolicLinkObject(long ptr ptr) +@ stdcall NtQuerySystemEnvironmentValue(ptr ptr long ptr) +@ stdcall NtQuerySystemEnvironmentValueEx(ptr ptr ptr ptr ptr) +@ stdcall NtQuerySystemInformation(long long long long) +@ stdcall NtQuerySystemTime(ptr) +@ stdcall NtQueryTimer(ptr long ptr long ptr) +@ stdcall NtQueryTimerResolution(long long long) +@ stdcall NtQueryValueKey(long long long long long long) +@ stdcall NtQueryVirtualMemory(long ptr long ptr long ptr) +@ stdcall NtQueryVolumeInformationFile(long ptr ptr long long) +@ stdcall NtQueueApcThread(long ptr long long long) +@ stdcall NtRaiseException(ptr ptr long) +@ stdcall NtRaiseHardError(long long long ptr long ptr) +@ stdcall NtReadFile(long long ptr ptr ptr ptr long ptr ptr) +@ stdcall NtReadFileScatter(long long ptr ptr ptr ptr long ptr ptr) +@ stdcall NtReadRequestData(ptr ptr long ptr long ptr) +@ stdcall NtReadVirtualMemory(long ptr ptr long ptr) +@ stdcall NtRegisterThreadTerminatePort(ptr) +@ stdcall NtReleaseKeyedEvent(ptr ptr long ptr) +@ stdcall NtReleaseMutant(long ptr) +@ stdcall NtReleaseSemaphore(long long ptr) +@ stdcall NtRemoveIoCompletion(ptr ptr ptr ptr ptr) +@ stdcall NtRemoveProcessDebug(ptr ptr) +@ stdcall NtRenameKey(ptr ptr) +@ stdcall NtReplaceKey(ptr long ptr) +@ stdcall NtReplyPort(ptr ptr) +@ stdcall NtReplyWaitReceivePort(ptr ptr ptr ptr) +@ stdcall NtReplyWaitReceivePortEx(ptr ptr ptr ptr ptr) +@ stdcall NtReplyWaitReplyPort(ptr ptr) +@ stdcall NtRequestDeviceWakeup(ptr) +@ stdcall NtRequestPort(ptr ptr) +@ stdcall NtRequestWaitReplyPort(ptr ptr ptr) +@ stdcall NtRequestWakeupLatency(long) +@ stdcall NtResetEvent(long ptr) +@ stdcall NtResetWriteWatch(long ptr long) +@ stdcall NtRestoreKey(long long long) +@ stdcall NtResumeProcess(ptr) +@ stdcall NtResumeThread(long long) +@ stdcall NtSaveKey(long long) +@ stdcall NtSaveKeyEx(ptr ptr long) +@ stdcall NtSaveMergedKeys(ptr ptr ptr) +@ stdcall NtSecureConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr ptr) +@ stdcall NtSetBootEntryOrder(ptr ptr) +@ stdcall NtSetBootOptions(ptr long) +@ stdcall NtSetContextThread(long ptr) +@ stdcall NtSetDebugFilterState(long long long) +@ stdcall NtSetDefaultHardErrorPort(ptr) +@ stdcall NtSetDefaultLocale(long long) +@ stdcall NtSetDefaultUILanguage(long) +@ stdcall NtSetDriverEntryOrder(ptr ptr) +@ stdcall NtSetEaFile(long ptr ptr long) +@ stdcall NtSetEvent(long long) +@ stdcall NtSetEventBoostPriority(ptr) +@ stdcall NtSetHighEventPair(ptr) +@ stdcall NtSetHighWaitLowEventPair(ptr) +@ stdcall NtSetInformationDebugObject(ptr long ptr long ptr) +@ stdcall NtSetInformationFile(long long long long long) +@ stdcall NtSetInformationJobObject(long long ptr long) +@ stdcall NtSetInformationKey(long long ptr long) +@ stdcall NtSetInformationObject(long long ptr long) +@ stdcall NtSetInformationProcess(long long long long) +@ stdcall NtSetInformationThread(long long ptr long) +@ stdcall NtSetInformationToken(long long ptr long) +@ stdcall NtSetIntervalProfile(long long) +@ stdcall NtSetIoCompletion(ptr long ptr long long) +@ stdcall NtSetLdtEntries(long int64 long int64) +@ stdcall NtSetLowEventPair(ptr) +@ stdcall NtSetLowWaitHighEventPair(ptr) +@ stdcall NtSetQuotaInformationFile(ptr ptr ptr long) +@ stdcall NtSetSecurityObject(long long ptr) +@ stdcall NtSetSystemEnvironmentValue(ptr ptr) +@ stdcall NtSetSystemEnvironmentValueEx(ptr ptr ptr ptr ptr) +@ stdcall NtSetSystemInformation(long ptr long) +@ stdcall NtSetSystemPowerState(long long long) +@ stdcall NtSetSystemTime(ptr ptr) +@ stdcall NtSetThreadExecutionState(long ptr) +@ stdcall NtSetTimer(long ptr ptr ptr long long ptr) +@ stdcall NtSetTimerResolution(long long ptr) +@ stdcall NtSetUuidSeed(ptr) +@ stdcall NtSetValueKey(long long long long long long) +@ stdcall NtSetVolumeInformationFile(long ptr ptr long long) +@ stdcall NtShutdownSystem(long) +@ stdcall NtSignalAndWaitForSingleObject(long long long ptr) +@ stdcall NtStartProfile(ptr) +@ stdcall NtStopProfile(ptr) +@ stdcall NtSuspendProcess(ptr) +@ stdcall NtSuspendThread(long ptr) +@ stdcall NtSystemDebugControl(long ptr long ptr long ptr) +@ stdcall NtTerminateJobObject(long long) +@ stdcall NtTerminateProcess(long long) +@ stdcall NtTerminateThread(long long) +@ stdcall NtTestAlert() +@ stdcall NtTraceEvent(long long long ptr) +@ stdcall NtTranslateFilePath(ptr long ptr long) +@ stdcall NtUnloadDriver(ptr) +@ stdcall NtUnloadKey2(ptr long) +@ stdcall NtUnloadKey(long) +@ stdcall NtUnloadKeyEx(ptr ptr) +@ stdcall NtUnlockFile(long ptr ptr ptr ptr) +@ stdcall NtUnlockVirtualMemory(long ptr ptr long) +@ stdcall NtUnmapViewOfSection(long ptr) +@ stdcall NtVdmControl(long ptr) +@ stdcall NtWaitForDebugEvent(ptr long ptr ptr) +@ stdcall NtWaitForKeyedEvent(ptr ptr long ptr) +@ stdcall NtWaitForMultipleObjects32(long ptr long long ptr) +@ stdcall NtWaitForMultipleObjects(long ptr long long ptr) +@ stdcall NtWaitForSingleObject(long long long) +@ stdcall NtWaitHighEventPair(ptr) +@ stdcall NtWaitLowEventPair(ptr) +@ stdcall NtWriteFile(long long ptr ptr ptr ptr long ptr ptr) +@ stdcall NtWriteFileGather(long long ptr ptr ptr ptr long ptr ptr) +@ stdcall NtWriteRequestData(ptr ptr long ptr long ptr) +@ stdcall NtWriteVirtualMemory(long ptr ptr long ptr) +@ stdcall NtYieldExecution() # stdcall PfxFindPrefix # stdcall PfxInitialize # stdcall PfxInsertPrefix # stdcall PfxRemovePrefix -429 stdcall RtlAbortRXact(ptr) -430 stdcall RtlAbsoluteToSelfRelativeSD(ptr ptr ptr) -431 stdcall RtlAcquirePebLock() -432 stdcall RtlAcquirePrivilege(ptr long long ptr) -433 stdcall RtlAcquireResourceExclusive(ptr long) -434 stdcall RtlAcquireResourceShared(ptr long) -435 stdcall RtlActivateActivationContext(long ptr ptr) -436 stdcall RtlActivateActivationContextEx(long ptr ptr ptr) -437 stdcall RtlAddAccessAllowedAce(ptr long long ptr) -438 stdcall RtlAddAccessAllowedAceEx(ptr long long long ptr) -439 stdcall RtlAddAccessAllowedObjectAce(ptr long long long ptr ptr ptr) -440 stdcall RtlAddAccessDeniedAce(ptr long long ptr) -441 stdcall RtlAddAccessDeniedAceEx(ptr long long long ptr) -442 stdcall RtlAddAccessDeniedObjectAce(ptr long long long ptr ptr ptr) -443 stdcall RtlAddAce(ptr long long ptr long) -444 stdcall RtlAddActionToRXact(ptr long ptr long ptr long) -445 stdcall RtlAddAtomToAtomTable(ptr wstr ptr) -446 stdcall RtlAddAttributeActionToRXact(ptr long ptr ptr ptr long ptr long) -447 stdcall RtlAddAuditAccessAce(ptr long long ptr long long) -448 stdcall RtlAddAuditAccessAceEx(ptr long long long ptr long long) -449 stdcall RtlAddAuditAccessObjectAce(ptr long long long ptr ptr ptr long long) +@ stdcall RtlAbortRXact(ptr) +@ stdcall RtlAbsoluteToSelfRelativeSD(ptr ptr ptr) +@ stdcall RtlAcquirePebLock() +@ stdcall RtlAcquirePrivilege(ptr long long ptr) +@ stdcall RtlAcquireResourceExclusive(ptr long) +@ stdcall RtlAcquireResourceShared(ptr long) +@ stdcall RtlActivateActivationContext(long ptr ptr) +@ stdcall RtlActivateActivationContextEx(long ptr ptr ptr) +@ stdcall RtlAddAccessAllowedAce(ptr long long ptr) +@ stdcall RtlAddAccessAllowedAceEx(ptr long long long ptr) +@ stdcall RtlAddAccessAllowedObjectAce(ptr long long long ptr ptr ptr) +@ stdcall RtlAddAccessDeniedAce(ptr long long ptr) +@ stdcall RtlAddAccessDeniedAceEx(ptr long long long ptr) +@ stdcall RtlAddAccessDeniedObjectAce(ptr long long long ptr ptr ptr) +@ stdcall RtlAddAce(ptr long long ptr long) +@ stdcall RtlAddActionToRXact(ptr long ptr long ptr long) +@ stdcall RtlAddAtomToAtomTable(ptr wstr ptr) +@ stdcall RtlAddAttributeActionToRXact(ptr long ptr ptr ptr long ptr long) +@ stdcall RtlAddAuditAccessAce(ptr long long ptr long long) +@ stdcall RtlAddAuditAccessAceEx(ptr long long long ptr long long) +@ stdcall RtlAddAuditAccessObjectAce(ptr long long long ptr ptr ptr long long) # stdcall RtlAddCompoundAce @ stdcall -arch=x86_64 RtlAddFunctionTable(ptr long long) -451 stdcall RtlAddRefActivationContext(ptr) -452 stdcall RtlAddRefMemoryStream(ptr) -453 stdcall RtlAddVectoredContinueHandler(long ptr) -454 stdcall RtlAddVectoredExceptionHandler(long ptr) +@ stdcall RtlAddRefActivationContext(ptr) +@ stdcall RtlAddRefMemoryStream(ptr) +@ stdcall RtlAddVectoredContinueHandler(long ptr) +@ stdcall RtlAddVectoredExceptionHandler(long ptr) # stdcall RtlAddressInSectionTable -456 stdcall RtlAdjustPrivilege(long long long ptr) -457 stdcall RtlAllocateActivationContextStack(ptr) ; CHECKME -458 stdcall RtlAllocateAndInitializeSid(ptr long long long long long long long long long ptr) -459 stdcall RtlAllocateHandle(ptr ptr) -460 stdcall RtlAllocateHeap(ptr long ptr) -461 stdcall RtlAnsiCharToUnicodeChar(ptr) -462 stdcall RtlAnsiStringToUnicodeSize(ptr) RtlxAnsiStringToUnicodeSize -463 stdcall RtlAnsiStringToUnicodeString(ptr ptr long) -464 stdcall RtlAppendAsciizToString(ptr str) +@ stdcall RtlAdjustPrivilege(long long long ptr) +@ stdcall RtlAllocateActivationContextStack(ptr) ; CHECKME +@ stdcall RtlAllocateAndInitializeSid(ptr long long long long long long long long long ptr) +@ stdcall RtlAllocateHandle(ptr ptr) +@ stdcall RtlAllocateHeap(ptr long ptr) +@ stdcall RtlAnsiCharToUnicodeChar(ptr) +@ stdcall RtlAnsiStringToUnicodeSize(ptr) RtlxAnsiStringToUnicodeSize +@ stdcall RtlAnsiStringToUnicodeString(ptr ptr long) +@ stdcall RtlAppendAsciizToString(ptr str) # stdcall RtlAppendPathElement -466 stdcall RtlAppendStringToString(ptr ptr) -467 stdcall RtlAppendUnicodeStringToString(ptr ptr) -468 stdcall RtlAppendUnicodeToString(ptr wstr) -469 stdcall RtlApplicationVerifierStop(ptr str ptr str ptr str ptr str ptr str) -470 stdcall RtlApplyRXact(ptr) -471 stdcall RtlApplyRXactNoFlush(ptr) -472 stdcall RtlAreAllAccessesGranted(long long) -473 stdcall RtlAreAnyAccessesGranted(long long) -474 stdcall RtlAreBitsClear(ptr long long) -475 stdcall RtlAreBitsSet(ptr long long) -476 stdcall RtlAssert(ptr ptr long ptr) +@ stdcall RtlAppendStringToString(ptr ptr) +@ stdcall RtlAppendUnicodeStringToString(ptr ptr) +@ stdcall RtlAppendUnicodeToString(ptr wstr) +@ stdcall RtlApplicationVerifierStop(ptr str ptr str ptr str ptr str ptr str) +@ stdcall RtlApplyRXact(ptr) +@ stdcall RtlApplyRXactNoFlush(ptr) +@ stdcall RtlAreAllAccessesGranted(long long) +@ stdcall RtlAreAnyAccessesGranted(long long) +@ stdcall RtlAreBitsClear(ptr long long) +@ stdcall RtlAreBitsSet(ptr long long) +@ stdcall RtlAssert(ptr ptr long ptr) # stdcall RtlCancelTimer -478 stdcall -register RtlCaptureContext(ptr) -479 stdcall RtlCaptureStackBackTrace(long long ptr ptr) +@ stdcall -register RtlCaptureContext(ptr) +@ stdcall RtlCaptureStackBackTrace(long long ptr ptr) # stdcall RtlCaptureStackContext -481 stdcall RtlCharToInteger(ptr long ptr) -482 stdcall RtlCheckForOrphanedCriticalSections(ptr) +@ stdcall RtlCharToInteger(ptr long ptr) +@ stdcall RtlCheckForOrphanedCriticalSections(ptr) # stdcall RtlCheckProcessParameters -484 stdcall RtlCheckRegistryKey(long ptr) -485 stdcall RtlClearAllBits(ptr) -486 stdcall RtlClearBits(ptr long long) -487 stdcall RtlCloneMemoryStream(ptr ptr) -488 stdcall RtlCommitMemoryStream(ptr long) -489 stdcall RtlCompactHeap(long long) -490 stdcall RtlCompareMemory(ptr ptr long) -491 stdcall RtlCompareMemoryUlong(ptr long long) -492 stdcall RtlCompareString(ptr ptr long) -493 stdcall RtlCompareUnicodeString (ptr ptr long) -494 stdcall RtlCompressBuffer(long ptr long ptr long long ptr ptr) -495 stdcall RtlComputeCrc32(long ptr long) -496 stdcall RtlComputeImportTableHash(ptr ptr long) -497 stdcall RtlComputePrivatizedDllName_U(ptr ptr ptr) -498 stdcall RtlConsoleMultiByteToUnicodeN(ptr long ptr ptr long ptr) -499 stdcall RtlConvertExclusiveToShared(ptr) -500 stdcall -arch=win32 -ret64 RtlConvertLongToLargeInteger(long) -501 stdcall RtlConvertSharedToExclusive(ptr) -502 stdcall RtlConvertSidToUnicodeString(ptr ptr long) -503 stdcall RtlConvertToAutoInheritSecurityObject(ptr ptr ptr ptr long ptr) -504 stdcall RtlConvertUiListToApiList(ptr ptr long) -505 stdcall -arch=win32 -ret64 RtlConvertUlongToLargeInteger(long) -506 stdcall RtlCopyLuid(ptr ptr) -507 stdcall RtlCopyLuidAndAttributesArray(long ptr ptr) -508 stdcall RtlCopyMappedMemory(ptr ptr long) -509 stdcall RtlCopyMemoryStreamTo(ptr ptr int64 ptr ptr) -510 stdcall RtlCopyOutOfProcessMemoryStreamTo(ptr ptr int64 ptr ptr) RtlCopyMemoryStreamTo -511 stdcall RtlCopySecurityDescriptor(ptr ptr) -512 stdcall RtlCopySid(long ptr ptr) -513 stdcall RtlCopySidAndAttributesArray(long ptr long ptr ptr ptr ptr) -514 stdcall RtlCopyString(ptr ptr) -515 stdcall RtlCopyUnicodeString(ptr ptr) -516 stdcall RtlCreateAcl(ptr long long) -517 stdcall RtlCreateActivationContext(long ptr long ptr ptr ptr) -518 stdcall RtlCreateAndSetSD(ptr long ptr ptr ptr) -519 stdcall RtlCreateAtomTable(long ptr) -520 stdcall RtlCreateBootStatusDataFile() -521 stdcall RtlCreateEnvironment(long ptr) -522 stdcall RtlCreateHeap(long ptr long long ptr ptr) -523 stdcall RtlCreateProcessParameters(ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr) -524 stdcall RtlCreateQueryDebugBuffer(long long) -525 stdcall RtlCreateRegistryKey(long wstr) -526 stdcall RtlCreateSecurityDescriptor(ptr long) -527 stdcall RtlCreateSystemVolumeInformationFolder(ptr) -528 stdcall RtlCreateTagHeap(ptr long str str) -529 stdcall RtlCreateTimer(ptr ptr ptr ptr long long long) -530 stdcall RtlCreateTimerQueue(ptr) -531 stdcall RtlCreateUnicodeString(ptr wstr) -532 stdcall RtlCreateUnicodeStringFromAsciiz(ptr str) -533 stdcall RtlCreateUserProcess(ptr long ptr ptr ptr ptr long ptr ptr ptr) -534 stdcall RtlCreateUserSecurityObject(ptr long ptr ptr long ptr ptr) -535 stdcall RtlCreateUserThread(long ptr long ptr long long ptr ptr ptr ptr) -536 stdcall RtlCustomCPToUnicodeN(ptr wstr long ptr str long) -537 stdcall RtlCutoverTimeToSystemTime(ptr ptr ptr long) -538 stdcall RtlDeNormalizeProcessParams(ptr) -539 stdcall RtlDeactivateActivationContext(long long) +@ stdcall RtlCheckRegistryKey(long ptr) +@ stdcall RtlClearAllBits(ptr) +@ stdcall RtlClearBits(ptr long long) +@ stdcall RtlCloneMemoryStream(ptr ptr) +@ stdcall RtlCommitMemoryStream(ptr long) +@ stdcall RtlCompactHeap(long long) +@ stdcall RtlCompareMemory(ptr ptr long) +@ stdcall RtlCompareMemoryUlong(ptr long long) +@ stdcall RtlCompareString(ptr ptr long) +@ stdcall RtlCompareUnicodeString (ptr ptr long) +@ stdcall RtlCompressBuffer(long ptr long ptr long long ptr ptr) +@ stdcall RtlComputeCrc32(long ptr long) +@ stdcall RtlComputeImportTableHash(ptr ptr long) +@ stdcall RtlComputePrivatizedDllName_U(ptr ptr ptr) +@ stdcall RtlConsoleMultiByteToUnicodeN(ptr long ptr ptr long ptr) +@ stdcall RtlConvertExclusiveToShared(ptr) +@ stdcall -arch=win32 -ret64 RtlConvertLongToLargeInteger(long) +@ stdcall RtlConvertSharedToExclusive(ptr) +@ stdcall RtlConvertSidToUnicodeString(ptr ptr long) +@ stdcall RtlConvertToAutoInheritSecurityObject(ptr ptr ptr ptr long ptr) +@ stdcall RtlConvertUiListToApiList(ptr ptr long) +@ stdcall -arch=win32 -ret64 RtlConvertUlongToLargeInteger(long) +@ stdcall RtlCopyLuid(ptr ptr) +@ stdcall RtlCopyLuidAndAttributesArray(long ptr ptr) +@ stdcall RtlCopyMappedMemory(ptr ptr long) +@ stdcall RtlCopyMemoryStreamTo(ptr ptr int64 ptr ptr) +@ stdcall RtlCopyOutOfProcessMemoryStreamTo(ptr ptr int64 ptr ptr) RtlCopyMemoryStreamTo +@ stdcall RtlCopySecurityDescriptor(ptr ptr) +@ stdcall RtlCopySid(long ptr ptr) +@ stdcall RtlCopySidAndAttributesArray(long ptr long ptr ptr ptr ptr) +@ stdcall RtlCopyString(ptr ptr) +@ stdcall RtlCopyUnicodeString(ptr ptr) +@ stdcall RtlCreateAcl(ptr long long) +@ stdcall RtlCreateActivationContext(long ptr long ptr ptr ptr) +@ stdcall RtlCreateAndSetSD(ptr long ptr ptr ptr) +@ stdcall RtlCreateAtomTable(long ptr) +@ stdcall RtlCreateBootStatusDataFile() +@ stdcall RtlCreateEnvironment(long ptr) +@ stdcall RtlCreateHeap(long ptr long long ptr ptr) +@ stdcall RtlCreateProcessParameters(ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr) +@ stdcall RtlCreateQueryDebugBuffer(long long) +@ stdcall RtlCreateRegistryKey(long wstr) +@ stdcall RtlCreateSecurityDescriptor(ptr long) +@ stdcall RtlCreateSystemVolumeInformationFolder(ptr) +@ stdcall RtlCreateTagHeap(ptr long str str) +@ stdcall RtlCreateTimer(ptr ptr ptr ptr long long long) +@ stdcall RtlCreateTimerQueue(ptr) +@ stdcall RtlCreateUnicodeString(ptr wstr) +@ stdcall RtlCreateUnicodeStringFromAsciiz(ptr str) +@ stdcall RtlCreateUserProcess(ptr long ptr ptr ptr ptr long ptr ptr ptr) +@ stdcall RtlCreateUserSecurityObject(ptr long ptr ptr long ptr ptr) +@ stdcall RtlCreateUserThread(long ptr long ptr long long ptr ptr ptr ptr) +@ stdcall RtlCustomCPToUnicodeN(ptr wstr long ptr str long) +@ stdcall RtlCutoverTimeToSystemTime(ptr ptr ptr long) +@ stdcall RtlDeNormalizeProcessParams(ptr) +@ stdcall RtlDeactivateActivationContext(long long) # RtlDebugPrintTimes -541 stdcall RtlDecodePointer(ptr) -542 stdcall RtlDecodeSystemPointer(ptr) -543 stdcall RtlDecompressBuffer(long ptr long ptr long ptr) -544 stdcall RtlDecompressFragment(long ptr long ptr long long ptr ptr) -545 stdcall RtlDefaultNpAcl(ptr) -546 stdcall RtlDelete(ptr) -547 stdcall RtlDeleteAce(ptr long) -548 stdcall RtlDeleteAtomFromAtomTable(ptr long) -549 stdcall RtlDeleteCriticalSection(ptr) -550 stdcall RtlDeleteElementGenericTable(ptr ptr) -551 stdcall RtlDeleteElementGenericTableAvl(ptr ptr) +@ stdcall RtlDecodePointer(ptr) +@ stdcall RtlDecodeSystemPointer(ptr) +@ stdcall RtlDecompressBuffer(long ptr long ptr long ptr) +@ stdcall RtlDecompressFragment(long ptr long ptr long long ptr ptr) +@ stdcall RtlDefaultNpAcl(ptr) +@ stdcall RtlDelete(ptr) +@ stdcall RtlDeleteAce(ptr long) +@ stdcall RtlDeleteAtomFromAtomTable(ptr long) +@ stdcall RtlDeleteCriticalSection(ptr) +@ stdcall RtlDeleteElementGenericTable(ptr ptr) +@ stdcall RtlDeleteElementGenericTableAvl(ptr ptr) @ cdecl -arch=x86_64 RtlDeleteFunctionTable(ptr) -552 stdcall RtlDeleteNoSplay(ptr ptr) -553 stdcall RtlDeleteRegistryValue(long ptr ptr) -554 stdcall RtlDeleteResource(ptr) -555 stdcall RtlDeleteSecurityObject(ptr) -556 stdcall RtlDeleteTimer(ptr ptr ptr) -557 stdcall RtlDeleteTimerQueue(ptr) -558 stdcall RtlDeleteTimerQueueEx(ptr ptr) -559 stdcall RtlDeregisterWait(ptr) -560 stdcall RtlDeregisterWaitEx(ptr ptr) -561 stdcall RtlDestroyAtomTable(ptr) -562 stdcall RtlDestroyEnvironment(ptr) -563 stdcall RtlDestroyHandleTable(ptr) -564 stdcall RtlDestroyHeap(long) -565 stdcall RtlDestroyProcessParameters(ptr) -566 stdcall RtlDestroyQueryDebugBuffer(ptr) -567 stdcall RtlDetermineDosPathNameType_U(wstr) -568 stdcall RtlDllShutdownInProgress() -569 stdcall RtlDnsHostNameToComputerName(ptr ptr long) -570 stdcall RtlDoesFileExists_U(wstr) -571 stdcall RtlDosApplyFileIsolationRedirection_Ustr(long ptr ptr ptr ptr ptr ptr ptr ptr) -572 stdcall RtlDosPathNameToNtPathName_U(wstr ptr ptr ptr) -573 stdcall RtlDosPathNameToNtPathName_U_WithStatus(wstr ptr ptr ptr) ; 5.2 SP1, and higher -574 stdcall RtlDosPathNameToRelativeNtPathName_U(ptr ptr ptr ptr) -575 stdcall RtlDosPathNameToRelativeNtPathName_U_WithStatus(wstr ptr ptr ptr) -576 stdcall RtlDosSearchPath_U(wstr wstr wstr long ptr ptr) -577 stdcall RtlDosSearchPath_Ustr(long ptr ptr ptr ptr ptr ptr ptr ptr) -578 stdcall RtlDowncaseUnicodeChar(long) -579 stdcall RtlDowncaseUnicodeString(ptr ptr long) -580 stdcall RtlDumpResource(ptr) -581 stdcall RtlDuplicateUnicodeString(long ptr ptr) -582 stdcall RtlEmptyAtomTable(ptr long) +@ stdcall RtlDeleteNoSplay(ptr ptr) +@ stdcall RtlDeleteRegistryValue(long ptr ptr) +@ stdcall RtlDeleteResource(ptr) +@ stdcall RtlDeleteSecurityObject(ptr) +@ stdcall RtlDeleteTimer(ptr ptr ptr) +@ stdcall RtlDeleteTimerQueue(ptr) +@ stdcall RtlDeleteTimerQueueEx(ptr ptr) +@ stdcall RtlDeregisterWait(ptr) +@ stdcall RtlDeregisterWaitEx(ptr ptr) +@ stdcall RtlDestroyAtomTable(ptr) +@ stdcall RtlDestroyEnvironment(ptr) +@ stdcall RtlDestroyHandleTable(ptr) +@ stdcall RtlDestroyHeap(long) +@ stdcall RtlDestroyProcessParameters(ptr) +@ stdcall RtlDestroyQueryDebugBuffer(ptr) +@ stdcall RtlDetermineDosPathNameType_U(wstr) +@ stdcall RtlDllShutdownInProgress() +@ stdcall RtlDnsHostNameToComputerName(ptr ptr long) +@ stdcall RtlDoesFileExists_U(wstr) +@ stdcall RtlDosApplyFileIsolationRedirection_Ustr(long ptr ptr ptr ptr ptr ptr ptr ptr) +@ stdcall RtlDosPathNameToNtPathName_U(wstr ptr ptr ptr) +@ stdcall RtlDosPathNameToNtPathName_U_WithStatus(wstr ptr ptr ptr) ; 5.2 SP1, and higher +@ stdcall RtlDosPathNameToRelativeNtPathName_U(ptr ptr ptr ptr) +@ stdcall RtlDosPathNameToRelativeNtPathName_U_WithStatus(wstr ptr ptr ptr) +@ stdcall RtlDosSearchPath_U(wstr wstr wstr long ptr ptr) +@ stdcall RtlDosSearchPath_Ustr(long ptr ptr ptr ptr ptr ptr ptr ptr) +@ stdcall RtlDowncaseUnicodeChar(long) +@ stdcall RtlDowncaseUnicodeString(ptr ptr long) +@ stdcall RtlDumpResource(ptr) +@ stdcall RtlDuplicateUnicodeString(long ptr ptr) +@ stdcall RtlEmptyAtomTable(ptr long) # stdcall RtlEnableEarlyCriticalSectionEventCreation -584 stdcall RtlEncodePointer(ptr) -585 stdcall RtlEncodeSystemPointer(ptr) -586 stdcall -arch=win32 -ret64 RtlEnlargedIntegerMultiply(long long) -587 stdcall -arch=win32 RtlEnlargedUnsignedDivide(double long ptr) -588 stdcall -arch=win32 -ret64 RtlEnlargedUnsignedMultiply(long long) -589 stdcall RtlEnterCriticalSection(ptr) -590 stdcall RtlEnumProcessHeaps(ptr ptr) -591 stdcall RtlEnumerateGenericTable(ptr long) -592 stdcall RtlEnumerateGenericTableAvl(ptr long) -593 stdcall RtlEnumerateGenericTableLikeADirectory(ptr ptr ptr long ptr ptr ptr) -594 stdcall RtlEnumerateGenericTableWithoutSplaying(ptr ptr) -595 stdcall RtlEnumerateGenericTableWithoutSplayingAvl(ptr ptr) -596 stdcall RtlEqualComputerName(ptr ptr) -597 stdcall RtlEqualDomainName(ptr ptr) -598 stdcall RtlEqualLuid(ptr ptr) -599 stdcall RtlEqualPrefixSid(ptr ptr) -600 stdcall RtlEqualSid(long long) -601 stdcall RtlEqualString(ptr ptr long) -602 stdcall RtlEqualUnicodeString(ptr ptr long) -603 stdcall RtlEraseUnicodeString(ptr) -604 stdcall RtlExitUserThread(long) -605 stdcall RtlExpandEnvironmentStrings_U(ptr ptr ptr ptr) -606 stdcall RtlExtendHeap(ptr long ptr ptr) -607 stdcall -arch=win32 -ret64 RtlExtendedIntegerMultiply(double long) -608 stdcall -arch=win32 -ret64 RtlExtendedLargeIntegerDivide(double long ptr) -609 stdcall -arch=win32 -ret64 RtlExtendedMagicDivide(double double long) -610 stdcall RtlFillMemory(ptr long long) -611 stdcall RtlFillMemoryUlong(ptr long long) -612 stdcall RtlFinalReleaseOutOfProcessMemoryStream(ptr) -613 stdcall RtlFindActivationContextSectionGuid(long ptr long ptr ptr) -614 stdcall RtlFindActivationContextSectionString(long ptr long ptr ptr) -615 stdcall RtlFindCharInUnicodeString(long ptr ptr ptr) -616 stdcall RtlFindClearBits(ptr long long) -617 stdcall RtlFindClearBitsAndSet(ptr long long) -618 stdcall RtlFindClearRuns(ptr ptr long long) -619 stdcall RtlFindLastBackwardRunClear(ptr long ptr) -620 stdcall RtlFindLeastSignificantBit(double) -621 stdcall RtlFindLongestRunClear(ptr long) -622 stdcall RtlFindMessage(long long long long ptr) -623 stdcall RtlFindMostSignificantBit(double) -624 stdcall RtlFindNextForwardRunClear(ptr long ptr) -625 stdcall RtlFindSetBits(ptr long long) -626 stdcall RtlFindSetBitsAndClear(ptr long long) -627 stdcall RtlFirstEntrySList(ptr) -628 stdcall RtlFirstFreeAce(ptr ptr) -629 stdcall RtlFlushSecureMemoryCache(ptr ptr) -630 stdcall RtlFormatCurrentUserKeyPath(ptr) -631 stdcall RtlFormatMessage(ptr long long long long ptr ptr long ptr) -632 stdcall RtlFormatMessageEx(ptr long long long long ptr ptr long ptr long) -633 stdcall RtlFreeActivationContextStack(ptr) -634 stdcall RtlFreeAnsiString(long) -635 stdcall RtlFreeHandle(ptr ptr) -636 stdcall RtlFreeHeap(long long long) -637 stdcall RtlFreeOemString(ptr) -638 stdcall RtlFreeSid(long) -639 stdcall RtlFreeThreadActivationContextStack() -640 stdcall RtlFreeUnicodeString(ptr) -641 stdcall RtlFreeUserThreadStack(ptr ptr) ; 4.0 to 5.2 only -642 stdcall RtlGUIDFromString(ptr ptr) -643 stdcall RtlGenerate8dot3Name(ptr ptr long ptr) -644 stdcall RtlGetAce(ptr long ptr) -645 stdcall RtlGetActiveActivationContext(ptr) -646 stdcall RtlGetCallersAddress(ptr ptr) -647 stdcall RtlGetCompressionWorkSpaceSize(long ptr ptr) -648 stdcall RtlGetControlSecurityDescriptor(ptr ptr ptr) -649 stdcall RtlGetCriticalSectionRecursionCount(ptr) -650 stdcall RtlGetCurrentDirectory_U(long ptr) -651 stdcall RtlGetCurrentPeb() -652 stdcall RtlGetCurrentProcessorNumber() ; 5.2 SP1 and higher -653 stdcall RtlGetDaclSecurityDescriptor(ptr ptr ptr ptr) -654 stdcall RtlGetElementGenericTable(ptr long) -655 stdcall RtlGetElementGenericTableAvl(ptr long) -656 stdcall RtlGetFrame() -657 stdcall RtlGetFullPathName_U(wstr long ptr ptr) -658 stdcall RtlGetFullPathName_UstrEx(ptr ptr ptr ptr ptr ptr ptr ptr) -659 stdcall RtlGetGroupSecurityDescriptor(ptr ptr ptr) -660 stdcall RtlGetLastNtStatus() -661 stdcall RtlGetLastWin32Error() -662 stdcall RtlGetLengthWithoutLastFullDosOrNtPathElement(long ptr ptr) +@ stdcall RtlEncodePointer(ptr) +@ stdcall RtlEncodeSystemPointer(ptr) +@ stdcall -arch=win32 -ret64 RtlEnlargedIntegerMultiply(long long) +@ stdcall -arch=win32 RtlEnlargedUnsignedDivide(double long ptr) +@ stdcall -arch=win32 -ret64 RtlEnlargedUnsignedMultiply(long long) +@ stdcall RtlEnterCriticalSection(ptr) +@ stdcall RtlEnumProcessHeaps(ptr ptr) +@ stdcall RtlEnumerateGenericTable(ptr long) +@ stdcall RtlEnumerateGenericTableAvl(ptr long) +@ stdcall RtlEnumerateGenericTableLikeADirectory(ptr ptr ptr long ptr ptr ptr) +@ stdcall RtlEnumerateGenericTableWithoutSplaying(ptr ptr) +@ stdcall RtlEnumerateGenericTableWithoutSplayingAvl(ptr ptr) +@ stdcall RtlEqualComputerName(ptr ptr) +@ stdcall RtlEqualDomainName(ptr ptr) +@ stdcall RtlEqualLuid(ptr ptr) +@ stdcall RtlEqualPrefixSid(ptr ptr) +@ stdcall RtlEqualSid(long long) +@ stdcall RtlEqualString(ptr ptr long) +@ stdcall RtlEqualUnicodeString(ptr ptr long) +@ stdcall RtlEraseUnicodeString(ptr) +@ stdcall RtlExitUserThread(long) +@ stdcall RtlExpandEnvironmentStrings_U(ptr ptr ptr ptr) +@ stdcall RtlExtendHeap(ptr long ptr ptr) +@ stdcall -arch=win32 -ret64 RtlExtendedIntegerMultiply(double long) +@ stdcall -arch=win32 -ret64 RtlExtendedLargeIntegerDivide(double long ptr) +@ stdcall -arch=win32 -ret64 RtlExtendedMagicDivide(double double long) +@ stdcall RtlFillMemory(ptr long long) +@ stdcall RtlFillMemoryUlong(ptr long long) +@ stdcall RtlFinalReleaseOutOfProcessMemoryStream(ptr) +@ stdcall RtlFindActivationContextSectionGuid(long ptr long ptr ptr) +@ stdcall RtlFindActivationContextSectionString(long ptr long ptr ptr) +@ stdcall RtlFindCharInUnicodeString(long ptr ptr ptr) +@ stdcall RtlFindClearBits(ptr long long) +@ stdcall RtlFindClearBitsAndSet(ptr long long) +@ stdcall RtlFindClearRuns(ptr ptr long long) +@ stdcall RtlFindLastBackwardRunClear(ptr long ptr) +@ stdcall RtlFindLeastSignificantBit(double) +@ stdcall RtlFindLongestRunClear(ptr long) +@ stdcall RtlFindMessage(long long long long ptr) +@ stdcall RtlFindMostSignificantBit(double) +@ stdcall RtlFindNextForwardRunClear(ptr long ptr) +@ stdcall RtlFindSetBits(ptr long long) +@ stdcall RtlFindSetBitsAndClear(ptr long long) +@ stdcall RtlFirstEntrySList(ptr) +@ stdcall RtlFirstFreeAce(ptr ptr) +@ stdcall RtlFlushSecureMemoryCache(ptr ptr) +@ stdcall RtlFormatCurrentUserKeyPath(ptr) +@ stdcall RtlFormatMessage(ptr long long long long ptr ptr long ptr) +@ stdcall RtlFormatMessageEx(ptr long long long long ptr ptr long ptr long) +@ stdcall RtlFreeActivationContextStack(ptr) +@ stdcall RtlFreeAnsiString(long) +@ stdcall RtlFreeHandle(ptr ptr) +@ stdcall RtlFreeHeap(long long long) +@ stdcall RtlFreeOemString(ptr) +@ stdcall RtlFreeSid(long) +@ stdcall RtlFreeThreadActivationContextStack() +@ stdcall RtlFreeUnicodeString(ptr) +@ stdcall RtlFreeUserThreadStack(ptr ptr) ; 4.0 to 5.2 only +@ stdcall RtlGUIDFromString(ptr ptr) +@ stdcall RtlGenerate8dot3Name(ptr ptr long ptr) +@ stdcall RtlGetAce(ptr long ptr) +@ stdcall RtlGetActiveActivationContext(ptr) +@ stdcall RtlGetCallersAddress(ptr ptr) +@ stdcall RtlGetCompressionWorkSpaceSize(long ptr ptr) +@ stdcall RtlGetControlSecurityDescriptor(ptr ptr ptr) +@ stdcall RtlGetCriticalSectionRecursionCount(ptr) +@ stdcall RtlGetCurrentDirectory_U(long ptr) +@ stdcall RtlGetCurrentPeb() +@ stdcall RtlGetCurrentProcessorNumber() ; 5.2 SP1 and higher +@ stdcall RtlGetDaclSecurityDescriptor(ptr ptr ptr ptr) +@ stdcall RtlGetElementGenericTable(ptr long) +@ stdcall RtlGetElementGenericTableAvl(ptr long) +@ stdcall RtlGetFrame() +@ stdcall RtlGetFullPathName_U(wstr long ptr ptr) +@ stdcall RtlGetFullPathName_UstrEx(ptr ptr ptr ptr ptr ptr ptr ptr) +@ stdcall RtlGetGroupSecurityDescriptor(ptr ptr ptr) +@ stdcall RtlGetLastNtStatus() +@ stdcall RtlGetLastWin32Error() +@ stdcall RtlGetLengthWithoutLastFullDosOrNtPathElement(long ptr ptr) ; Yes, Microsoft really misspelled this one! -663 stdcall RtlGetLengthWithoutTrailingPathSeperators(long ptr ptr) RtlGetLengthWithoutTrailingPathSeparators -664 stdcall RtlGetLongestNtPathLength() -665 stdcall RtlGetNativeSystemInformation(long long long long) NtQuerySystemInformation -666 stdcall RtlGetNtGlobalFlags() -667 stdcall RtlGetNtProductType(ptr) -668 stdcall RtlGetNtVersionNumbers(ptr ptr ptr) -669 stdcall RtlGetOwnerSecurityDescriptor(ptr ptr ptr) -670 stdcall RtlGetProcessHeaps(long ptr) -671 stdcall RtlGetSaclSecurityDescriptor(ptr ptr ptr ptr) -672 stdcall RtlGetSecurityDescriptorRMControl(ptr ptr) -673 stdcall RtlGetSetBootStatusData(ptr long long ptr long long) -674 stdcall RtlGetThreadErrorMode() +@ stdcall RtlGetLengthWithoutTrailingPathSeperators(long ptr ptr) RtlGetLengthWithoutTrailingPathSeparators +@ stdcall RtlGetLongestNtPathLength() +@ stdcall RtlGetNativeSystemInformation(long long long long) NtQuerySystemInformation +@ stdcall RtlGetNtGlobalFlags() +@ stdcall RtlGetNtProductType(ptr) +@ stdcall RtlGetNtVersionNumbers(ptr ptr ptr) +@ stdcall RtlGetOwnerSecurityDescriptor(ptr ptr ptr) +@ stdcall RtlGetProcessHeaps(long ptr) +@ stdcall RtlGetSaclSecurityDescriptor(ptr ptr ptr ptr) +@ stdcall RtlGetSecurityDescriptorRMControl(ptr ptr) +@ stdcall RtlGetSetBootStatusData(ptr long long ptr long long) +@ stdcall RtlGetThreadErrorMode() # stdcall RtlGetUnloadEventTrace -676 stdcall RtlGetUserInfoHeap(ptr long ptr ptr ptr) -677 stdcall RtlGetVersion(ptr) -678 stdcall RtlHashUnicodeString(ptr long long ptr) -679 stdcall RtlIdentifierAuthoritySid(ptr) -680 stdcall RtlImageDirectoryEntryToData(long long long ptr) -681 stdcall RtlImageNtHeader(long) -682 stdcall RtlImageNtHeaderEx(long ptr double ptr) -683 stdcall RtlImageRvaToSection(ptr long long) -684 stdcall RtlImageRvaToVa(ptr long long ptr) -685 stdcall RtlImpersonateSelf(long) -686 stdcall RtlInitAnsiString(ptr str) -687 stdcall RtlInitAnsiStringEx(ptr str) -688 stdcall RtlInitCodePageTable(ptr ptr) -689 stdcall RtlInitMemoryStream(ptr) -690 stdcall RtlInitNlsTables(ptr ptr ptr ptr) -691 stdcall RtlInitOutOfProcessMemoryStream(ptr) -692 stdcall RtlInitString(ptr str) -693 stdcall RtlInitUnicodeString(ptr wstr) -694 stdcall RtlInitUnicodeStringEx(ptr wstr) +@ stdcall RtlGetUserInfoHeap(ptr long ptr ptr ptr) +@ stdcall RtlGetVersion(ptr) +@ stdcall RtlHashUnicodeString(ptr long long ptr) +@ stdcall RtlIdentifierAuthoritySid(ptr) +@ stdcall RtlImageDirectoryEntryToData(long long long ptr) +@ stdcall RtlImageNtHeader(long) +@ stdcall RtlImageNtHeaderEx(long ptr double ptr) +@ stdcall RtlImageRvaToSection(ptr long long) +@ stdcall RtlImageRvaToVa(ptr long long ptr) +@ stdcall RtlImpersonateSelf(long) +@ stdcall RtlInitAnsiString(ptr str) +@ stdcall RtlInitAnsiStringEx(ptr str) +@ stdcall RtlInitCodePageTable(ptr ptr) +@ stdcall RtlInitMemoryStream(ptr) +@ stdcall RtlInitNlsTables(ptr ptr ptr ptr) +@ stdcall RtlInitOutOfProcessMemoryStream(ptr) +@ stdcall RtlInitString(ptr str) +@ stdcall RtlInitUnicodeString(ptr wstr) +@ stdcall RtlInitUnicodeStringEx(ptr wstr) # stdcall RtlInitializeAtomPackage -696 stdcall RtlInitializeBitMap(ptr long long) -697 stdcall RtlInitializeContext(ptr ptr ptr ptr ptr) -698 stdcall RtlInitializeCriticalSection(ptr) -699 stdcall RtlInitializeCriticalSectionAndSpinCount(ptr long) -700 stdcall RtlInitializeGenericTable(ptr ptr ptr ptr ptr) -701 stdcall RtlInitializeGenericTableAvl(ptr ptr ptr ptr ptr) -702 stdcall RtlInitializeHandleTable(long long ptr) -703 stdcall RtlInitializeRXact(ptr long ptr) -704 stdcall RtlInitializeResource(ptr) -705 stdcall RtlInitializeSListHead(ptr) -706 stdcall RtlInitializeSid(ptr ptr long) -707 stdcall RtlInsertElementGenericTable(ptr ptr long ptr) -708 stdcall RtlInsertElementGenericTableAvl(ptr ptr long ptr) +@ stdcall RtlInitializeBitMap(ptr long long) +@ stdcall RtlInitializeContext(ptr ptr ptr ptr ptr) +@ stdcall RtlInitializeCriticalSection(ptr) +@ stdcall RtlInitializeCriticalSectionAndSpinCount(ptr long) +@ stdcall RtlInitializeGenericTable(ptr ptr ptr ptr ptr) +@ stdcall RtlInitializeGenericTableAvl(ptr ptr ptr ptr ptr) +@ stdcall RtlInitializeHandleTable(long long ptr) +@ stdcall RtlInitializeRXact(ptr long ptr) +@ stdcall RtlInitializeResource(ptr) +@ stdcall RtlInitializeSListHead(ptr) +@ stdcall RtlInitializeSid(ptr ptr long) +@ stdcall RtlInsertElementGenericTable(ptr ptr long ptr) +@ stdcall RtlInsertElementGenericTableAvl(ptr ptr long ptr) # RtlInsertElementGenericTableFull # stdcall RtlInsertElementGenericTableFullAvl(ptr ptr long ptr ptr long) @ stdcall -arch=x86_64 RtlInstallFunctionTableCallback(double double long ptr ptr ptr) -711 stdcall RtlInt64ToUnicodeString(double long ptr) -712 stdcall RtlIntegerToChar(long long long ptr) -713 stdcall RtlIntegerToUnicodeString(long long ptr) -714 stdcall -arch=win32 -ret64 RtlInterlockedCompareExchange64(ptr double double) -715 stdcall RtlInterlockedFlushSList(ptr) -716 stdcall RtlInterlockedPopEntrySList(ptr) -717 stdcall RtlInterlockedPushEntrySList(ptr ptr) -718 stdcall RtlIpv4AddressToStringA(ptr ptr) -719 stdcall RtlIpv4AddressToStringExA(ptr long ptr ptr) -720 stdcall RtlIpv4AddressToStringExW(ptr long ptr ptr) -721 stdcall RtlIpv4AddressToStringW(ptr ptr) -722 stdcall RtlIpv4StringToAddressA(str long ptr ptr) -723 stdcall RtlIpv4StringToAddressExA(str long ptr ptr) -724 stdcall RtlIpv4StringToAddressExW(wstr long ptr ptr) -725 stdcall RtlIpv4StringToAddressW(wstr long ptr ptr) -726 stdcall RtlIpv6AddressToStringA(ptr ptr) -727 stdcall RtlIpv6AddressToStringExA(ptr long long ptr ptr) -728 stdcall RtlIpv6AddressToStringExW(ptr long long ptr ptr) -729 stdcall RtlIpv6AddressToStringW(ptr ptr) -730 stdcall RtlIpv6StringToAddressA(str ptr ptr) -731 stdcall RtlIpv6StringToAddressExA(str ptr ptr ptr) -732 stdcall RtlIpv6StringToAddressExW(wstr ptr ptr ptr) -733 stdcall RtlIpv6StringToAddressW(wstr ptr ptr) -734 stdcall RtlIsActivationContextActive(ptr) -735 stdcall RtlIsCriticalSectionLocked(ptr) -736 stdcall RtlIsCriticalSectionLockedByThread(ptr) -737 stdcall RtlIsDosDeviceName_U(wstr) -738 stdcall RtlIsGenericTableEmpty(ptr) -739 stdcall RtlIsGenericTableEmptyAvl(ptr) -740 stdcall RtlIsNameLegalDOS8Dot3(ptr ptr ptr) -741 stdcall RtlIsTextUnicode(ptr long ptr) -742 stdcall RtlIsThreadWithinLoaderCallout() -743 stdcall RtlIsValidHandle(ptr ptr) -744 stdcall RtlIsValidIndexHandle(ptr long ptr) -745 stdcall -arch=win32 -ret64 RtlLargeIntegerAdd(double double) -746 stdcall -arch=win32 -ret64 RtlLargeIntegerArithmeticShift(double long) -747 stdcall -arch=win32 -ret64 RtlLargeIntegerDivide(double double ptr) -748 stdcall -arch=win32 -ret64 RtlLargeIntegerNegate(double) -749 stdcall -arch=win32 -ret64 RtlLargeIntegerShiftLeft(double long) -750 stdcall -arch=win32 -ret64 RtlLargeIntegerShiftRight(double long) -751 stdcall -arch=win32 -ret64 RtlLargeIntegerSubtract(double double) -752 stdcall RtlLargeIntegerToChar(ptr long long ptr) -753 stdcall RtlLeaveCriticalSection(ptr) -754 stdcall RtlLengthRequiredSid(long) -755 stdcall RtlLengthSecurityDescriptor(ptr) -756 stdcall RtlLengthSid(ptr) -757 stdcall RtlLocalTimeToSystemTime(ptr ptr) -758 stdcall RtlLockBootStatusData(ptr) -759 stdcall RtlLockHeap(long) -760 stdcall RtlLockMemoryStreamRegion(ptr int64 int64 long) +@ stdcall RtlInt64ToUnicodeString(double long ptr) +@ stdcall RtlIntegerToChar(long long long ptr) +@ stdcall RtlIntegerToUnicodeString(long long ptr) +@ stdcall -arch=win32 -ret64 RtlInterlockedCompareExchange64(ptr double double) +@ stdcall RtlInterlockedFlushSList(ptr) +@ stdcall RtlInterlockedPopEntrySList(ptr) +@ stdcall RtlInterlockedPushEntrySList(ptr ptr) +@ stdcall RtlIpv4AddressToStringA(ptr ptr) +@ stdcall RtlIpv4AddressToStringExA(ptr long ptr ptr) +@ stdcall RtlIpv4AddressToStringExW(ptr long ptr ptr) +@ stdcall RtlIpv4AddressToStringW(ptr ptr) +@ stdcall RtlIpv4StringToAddressA(str long ptr ptr) +@ stdcall RtlIpv4StringToAddressExA(str long ptr ptr) +@ stdcall RtlIpv4StringToAddressExW(wstr long ptr ptr) +@ stdcall RtlIpv4StringToAddressW(wstr long ptr ptr) +@ stdcall RtlIpv6AddressToStringA(ptr ptr) +@ stdcall RtlIpv6AddressToStringExA(ptr long long ptr ptr) +@ stdcall RtlIpv6AddressToStringExW(ptr long long ptr ptr) +@ stdcall RtlIpv6AddressToStringW(ptr ptr) +@ stdcall RtlIpv6StringToAddressA(str ptr ptr) +@ stdcall RtlIpv6StringToAddressExA(str ptr ptr ptr) +@ stdcall RtlIpv6StringToAddressExW(wstr ptr ptr ptr) +@ stdcall RtlIpv6StringToAddressW(wstr ptr ptr) +@ stdcall RtlIsActivationContextActive(ptr) +@ stdcall RtlIsCriticalSectionLocked(ptr) +@ stdcall RtlIsCriticalSectionLockedByThread(ptr) +@ stdcall RtlIsDosDeviceName_U(wstr) +@ stdcall RtlIsGenericTableEmpty(ptr) +@ stdcall RtlIsGenericTableEmptyAvl(ptr) +@ stdcall RtlIsNameLegalDOS8Dot3(ptr ptr ptr) +@ stdcall RtlIsTextUnicode(ptr long ptr) +@ stdcall RtlIsThreadWithinLoaderCallout() +@ stdcall RtlIsValidHandle(ptr ptr) +@ stdcall RtlIsValidIndexHandle(ptr long ptr) +@ stdcall -arch=win32 -ret64 RtlLargeIntegerAdd(double double) +@ stdcall -arch=win32 -ret64 RtlLargeIntegerArithmeticShift(double long) +@ stdcall -arch=win32 -ret64 RtlLargeIntegerDivide(double double ptr) +@ stdcall -arch=win32 -ret64 RtlLargeIntegerNegate(double) +@ stdcall -arch=win32 -ret64 RtlLargeIntegerShiftLeft(double long) +@ stdcall -arch=win32 -ret64 RtlLargeIntegerShiftRight(double long) +@ stdcall -arch=win32 -ret64 RtlLargeIntegerSubtract(double double) +@ stdcall RtlLargeIntegerToChar(ptr long long ptr) +@ stdcall RtlLeaveCriticalSection(ptr) +@ stdcall RtlLengthRequiredSid(long) +@ stdcall RtlLengthSecurityDescriptor(ptr) +@ stdcall RtlLengthSid(ptr) +@ stdcall RtlLocalTimeToSystemTime(ptr ptr) +@ stdcall RtlLockBootStatusData(ptr) +@ stdcall RtlLockHeap(long) +@ stdcall RtlLockMemoryStreamRegion(ptr int64 int64 long) # stdcall RtlLogStackBackTrace -762 stdcall RtlLookupAtomInAtomTable(ptr wstr ptr) -763 stdcall RtlLookupElementGenericTable(ptr ptr) -764 stdcall RtlLookupElementGenericTableAvl(ptr ptr) +@ stdcall RtlLookupAtomInAtomTable(ptr wstr ptr) +@ stdcall RtlLookupElementGenericTable(ptr ptr) +@ stdcall RtlLookupElementGenericTableAvl(ptr ptr) # RtlLookupElementGenericTableFull # RtlLookupElementGenericTableFullAvl @ stdcall -arch=x86_64 RtlLookupFunctionEntry(long ptr ptr) -767 stdcall RtlMakeSelfRelativeSD(ptr ptr ptr) -768 stdcall RtlMapGenericMask(long ptr) -769 stdcall RtlMapSecurityErrorToNtStatus(long) -770 stdcall RtlMoveMemory(ptr ptr long) -771 stdcall RtlMultiAppendUnicodeStringBuffer(ptr long ptr) -772 stdcall RtlMultiByteToUnicodeN(ptr long ptr ptr long) -773 stdcall RtlMultiByteToUnicodeSize(ptr str long) +@ stdcall RtlMakeSelfRelativeSD(ptr ptr ptr) +@ stdcall RtlMapGenericMask(long ptr) +@ stdcall RtlMapSecurityErrorToNtStatus(long) +@ stdcall RtlMoveMemory(ptr ptr long) +@ stdcall RtlMultiAppendUnicodeStringBuffer(ptr long ptr) +@ stdcall RtlMultiByteToUnicodeN(ptr long ptr ptr long) +@ stdcall RtlMultiByteToUnicodeSize(ptr str long) # RtlMultipleAllocateHeap # RtlMultipleFreeHeap -776 stdcall RtlNewInstanceSecurityObject(long long ptr ptr ptr ptr ptr long ptr ptr) -777 stdcall RtlNewSecurityGrantedAccess(long ptr ptr ptr ptr ptr) -778 stdcall RtlNewSecurityObject(ptr ptr ptr long ptr ptr) -779 stdcall RtlNewSecurityObjectEx(ptr ptr ptr ptr long long ptr ptr) -780 stdcall RtlNewSecurityObjectWithMultipleInheritance(ptr ptr ptr ptr long long long ptr ptr) -781 stdcall RtlNormalizeProcessParams(ptr) -782 stdcall RtlNtPathNameToDosPathName(long ptr ptr ptr) ; CHECKME (last arg) -783 stdcall RtlNtStatusToDosError(long) -784 stdcall RtlNtStatusToDosErrorNoTeb(long) -785 stdcall RtlNumberGenericTableElements(ptr) -786 stdcall RtlNumberGenericTableElementsAvl(ptr) -787 stdcall RtlNumberOfClearBits(ptr) -788 stdcall RtlNumberOfSetBits(ptr) -789 stdcall RtlOemStringToUnicodeSize(ptr) RtlxOemStringToUnicodeSize -790 stdcall RtlOemStringToUnicodeString(ptr ptr long) -791 stdcall RtlOemToUnicodeN(ptr long ptr ptr long) -792 stdcall RtlOpenCurrentUser(long ptr) -793 stdcall RtlPcToFileHeader(ptr ptr) -794 stdcall RtlPinAtomInAtomTable(ptr long) -795 stdcall RtlPopFrame(ptr) -796 stdcall RtlPrefixString(ptr ptr long) -797 stdcall RtlPrefixUnicodeString(ptr ptr long) -798 stdcall RtlProtectHeap(ptr long) -799 stdcall RtlPushFrame(ptr) -800 stdcall RtlQueryAtomInAtomTable(ptr long ptr ptr ptr ptr) -801 stdcall RtlQueryDepthSList(ptr) -802 stdcall RtlQueryEnvironmentVariable_U(ptr ptr ptr) -803 stdcall RtlQueryHeapInformation(long long ptr long ptr) -804 stdcall RtlQueryInformationAcl(ptr ptr long long) -805 stdcall RtlQueryInformationActivationContext(long long ptr long ptr long ptr) -806 stdcall RtlQueryInformationActiveActivationContext(long ptr long ptr) -807 stdcall RtlQueryInterfaceMemoryStream(ptr ptr ptr) +@ stdcall RtlNewInstanceSecurityObject(long long ptr ptr ptr ptr ptr long ptr ptr) +@ stdcall RtlNewSecurityGrantedAccess(long ptr ptr ptr ptr ptr) +@ stdcall RtlNewSecurityObject(ptr ptr ptr long ptr ptr) +@ stdcall RtlNewSecurityObjectEx(ptr ptr ptr ptr long long ptr ptr) +@ stdcall RtlNewSecurityObjectWithMultipleInheritance(ptr ptr ptr ptr long long long ptr ptr) +@ stdcall RtlNormalizeProcessParams(ptr) +@ stdcall RtlNtPathNameToDosPathName(long ptr ptr ptr) ; CHECKME (last arg) +@ stdcall RtlNtStatusToDosError(long) +@ stdcall RtlNtStatusToDosErrorNoTeb(long) +@ stdcall RtlNumberGenericTableElements(ptr) +@ stdcall RtlNumberGenericTableElementsAvl(ptr) +@ stdcall RtlNumberOfClearBits(ptr) +@ stdcall RtlNumberOfSetBits(ptr) +@ stdcall RtlOemStringToUnicodeSize(ptr) RtlxOemStringToUnicodeSize +@ stdcall RtlOemStringToUnicodeString(ptr ptr long) +@ stdcall RtlOemToUnicodeN(ptr long ptr ptr long) +@ stdcall RtlOpenCurrentUser(long ptr) +@ stdcall RtlPcToFileHeader(ptr ptr) +@ stdcall RtlPinAtomInAtomTable(ptr long) +@ stdcall RtlPopFrame(ptr) +@ stdcall RtlPrefixString(ptr ptr long) +@ stdcall RtlPrefixUnicodeString(ptr ptr long) +@ stdcall RtlProtectHeap(ptr long) +@ stdcall RtlPushFrame(ptr) +@ stdcall RtlQueryAtomInAtomTable(ptr long ptr ptr ptr ptr) +@ stdcall RtlQueryDepthSList(ptr) +@ stdcall RtlQueryEnvironmentVariable_U(ptr ptr ptr) +@ stdcall RtlQueryHeapInformation(long long ptr long ptr) +@ stdcall RtlQueryInformationAcl(ptr ptr long long) +@ stdcall RtlQueryInformationActivationContext(long long ptr long ptr long ptr) +@ stdcall RtlQueryInformationActiveActivationContext(long ptr long ptr) +@ stdcall RtlQueryInterfaceMemoryStream(ptr ptr ptr) # stdcall RtlQueryProcessBackTraceInformation -809 stdcall RtlQueryProcessDebugInformation(long long ptr) +@ stdcall RtlQueryProcessDebugInformation(long long ptr) # stdcall RtlQueryProcessHeapInformation # stdcall RtlQueryProcessLockInformation -812 stdcall RtlQueryRegistryValues(long ptr ptr ptr ptr) -813 stdcall RtlQuerySecurityObject(ptr long ptr long ptr) -814 stdcall RtlQueryTagHeap(ptr long long long ptr) -815 stdcall RtlQueryTimeZoneInformation(ptr) +@ stdcall RtlQueryRegistryValues(long ptr ptr ptr ptr) +@ stdcall RtlQuerySecurityObject(ptr long ptr long ptr) +@ stdcall RtlQueryTagHeap(ptr long long long ptr) +@ stdcall RtlQueryTimeZoneInformation(ptr) # stdcall RtlQueueApcWow64Thread -817 stdcall RtlQueueWorkItem(ptr ptr long) -818 stdcall -register RtlRaiseException(ptr) -819 stdcall RtlRaiseStatus(long) -820 stdcall RtlRandom(ptr) -821 stdcall RtlRandomEx(ptr) -822 stdcall RtlReAllocateHeap(long long ptr long) -823 stdcall RtlReadMemoryStream(ptr ptr long ptr) -824 stdcall RtlReadOutOfProcessMemoryStream(ptr ptr long ptr) -825 stdcall RtlRealPredecessor(ptr) -826 stdcall RtlRealSuccessor(ptr) -827 stdcall RtlRegisterSecureMemoryCacheCallback(ptr) -828 stdcall RtlRegisterWait(ptr ptr ptr ptr long long) -829 stdcall RtlReleaseActivationContext(ptr) -830 stdcall RtlReleaseMemoryStream(ptr) -831 stdcall RtlReleasePebLock() -832 stdcall RtlReleasePrivilege(ptr) -833 stdcall RtlReleaseRelativeName(ptr) -834 stdcall RtlReleaseResource(ptr) -835 stdcall RtlRemoteCall(ptr ptr ptr long ptr long long) -836 stdcall RtlRemoveVectoredContinueHandler(ptr) -837 stdcall RtlRemoveVectoredExceptionHandler(ptr) -838 stdcall RtlResetRtlTranslations(ptr) +@ stdcall RtlQueueWorkItem(ptr ptr long) +@ stdcall -register RtlRaiseException(ptr) +@ stdcall RtlRaiseStatus(long) +@ stdcall RtlRandom(ptr) +@ stdcall RtlRandomEx(ptr) +@ stdcall RtlReAllocateHeap(long long ptr long) +@ stdcall RtlReadMemoryStream(ptr ptr long ptr) +@ stdcall RtlReadOutOfProcessMemoryStream(ptr ptr long ptr) +@ stdcall RtlRealPredecessor(ptr) +@ stdcall RtlRealSuccessor(ptr) +@ stdcall RtlRegisterSecureMemoryCacheCallback(ptr) +@ stdcall RtlRegisterWait(ptr ptr ptr ptr long long) +@ stdcall RtlReleaseActivationContext(ptr) +@ stdcall RtlReleaseMemoryStream(ptr) +@ stdcall RtlReleasePebLock() +@ stdcall RtlReleasePrivilege(ptr) +@ stdcall RtlReleaseRelativeName(ptr) +@ stdcall RtlReleaseResource(ptr) +@ stdcall RtlRemoteCall(ptr ptr ptr long ptr long long) +@ stdcall RtlRemoveVectoredContinueHandler(ptr) +@ stdcall RtlRemoveVectoredExceptionHandler(ptr) +@ stdcall RtlResetRtlTranslations(ptr) @ stdcall -arch=x86_64 RtlRestoreContext(ptr ptr) -839 stdcall RtlRestoreLastWin32Error(long) RtlSetLastWin32Error -840 stdcall RtlRevertMemoryStream(ptr) -841 stdcall RtlRunDecodeUnicodeString(long ptr) -842 stdcall RtlRunEncodeUnicodeString(long ptr) -843 stdcall RtlSecondsSince1970ToTime(long ptr) -844 stdcall RtlSecondsSince1980ToTime(long ptr) -845 stdcall RtlSeekMemoryStream(ptr int64 long ptr) -846 stdcall RtlSelfRelativeToAbsoluteSD2(ptr ptr) -847 stdcall RtlSelfRelativeToAbsoluteSD(ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr) -848 stdcall RtlSetAllBits(ptr) -849 stdcall RtlSetAttributesSecurityDescriptor(ptr long ptr) -850 stdcall RtlSetBits(ptr long long) -851 stdcall RtlSetControlSecurityDescriptor(ptr long long) -852 stdcall RtlSetCriticalSectionSpinCount(ptr long) -853 stdcall RtlSetCurrentDirectory_U(ptr) -854 stdcall RtlSetCurrentEnvironment(wstr ptr) -855 stdcall RtlSetDaclSecurityDescriptor(ptr long ptr long) -856 stdcall RtlSetEnvironmentStrings(wstr long) -857 stdcall RtlSetEnvironmentVariable(ptr ptr ptr) -858 stdcall RtlSetGroupSecurityDescriptor(ptr ptr long) -859 stdcall RtlSetHeapInformation(ptr long ptr ptr) -860 stdcall RtlSetInformationAcl(ptr ptr long long) -861 stdcall RtlSetIoCompletionCallback(long ptr long) -862 stdcall RtlSetLastWin32Error(long) -863 stdcall RtlSetLastWin32ErrorAndNtStatusFromNtStatus(long) -864 stdcall RtlSetMemoryStreamSize(ptr int64) -865 stdcall RtlSetOwnerSecurityDescriptor(ptr ptr long) -866 cdecl RtlSetProcessIsCritical(long ptr long) -867 stdcall RtlSetSaclSecurityDescriptor(ptr long ptr long) -868 stdcall RtlSetSecurityDescriptorRMControl(ptr ptr) -869 stdcall RtlSetSecurityObject(long ptr ptr ptr ptr) -870 stdcall RtlSetSecurityObjectEx(long ptr ptr long ptr ptr) -871 stdcall RtlSetThreadErrorMode(long ptr) -872 cdecl RtlSetThreadIsCritical(long ptr long) -873 stdcall RtlSetThreadPoolStartFunc(ptr ptr) -874 stdcall RtlSetTimeZoneInformation(ptr) +@ stdcall RtlRestoreLastWin32Error(long) RtlSetLastWin32Error +@ stdcall RtlRevertMemoryStream(ptr) +@ stdcall RtlRunDecodeUnicodeString(long ptr) +@ stdcall RtlRunEncodeUnicodeString(long ptr) +@ stdcall RtlSecondsSince1970ToTime(long ptr) +@ stdcall RtlSecondsSince1980ToTime(long ptr) +@ stdcall RtlSeekMemoryStream(ptr int64 long ptr) +@ stdcall RtlSelfRelativeToAbsoluteSD2(ptr ptr) +@ stdcall RtlSelfRelativeToAbsoluteSD(ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr) +@ stdcall RtlSetAllBits(ptr) +@ stdcall RtlSetAttributesSecurityDescriptor(ptr long ptr) +@ stdcall RtlSetBits(ptr long long) +@ stdcall RtlSetControlSecurityDescriptor(ptr long long) +@ stdcall RtlSetCriticalSectionSpinCount(ptr long) +@ stdcall RtlSetCurrentDirectory_U(ptr) +@ stdcall RtlSetCurrentEnvironment(wstr ptr) +@ stdcall RtlSetDaclSecurityDescriptor(ptr long ptr long) +@ stdcall RtlSetEnvironmentStrings(wstr long) +@ stdcall RtlSetEnvironmentVariable(ptr ptr ptr) +@ stdcall RtlSetGroupSecurityDescriptor(ptr ptr long) +@ stdcall RtlSetHeapInformation(ptr long ptr ptr) +@ stdcall RtlSetInformationAcl(ptr ptr long long) +@ stdcall RtlSetIoCompletionCallback(long ptr long) +@ stdcall RtlSetLastWin32Error(long) +@ stdcall RtlSetLastWin32ErrorAndNtStatusFromNtStatus(long) +@ stdcall RtlSetMemoryStreamSize(ptr int64) +@ stdcall RtlSetOwnerSecurityDescriptor(ptr ptr long) +@ cdecl RtlSetProcessIsCritical(long ptr long) +@ stdcall RtlSetSaclSecurityDescriptor(ptr long ptr long) +@ stdcall RtlSetSecurityDescriptorRMControl(ptr ptr) +@ stdcall RtlSetSecurityObject(long ptr ptr ptr ptr) +@ stdcall RtlSetSecurityObjectEx(long ptr ptr long ptr ptr) +@ stdcall RtlSetThreadErrorMode(long ptr) +@ cdecl RtlSetThreadIsCritical(long ptr long) +@ stdcall RtlSetThreadPoolStartFunc(ptr ptr) +@ stdcall RtlSetTimeZoneInformation(ptr) # stdcall RtlSetTimer -876 stdcall RtlSetUnhandledExceptionFilter(ptr) +@ stdcall RtlSetUnhandledExceptionFilter(ptr) # stdcall RtlSetUnicodeCallouts -878 stdcall RtlSetUserFlagsHeap(ptr long ptr long long) -879 stdcall RtlSetUserValueHeap(ptr long ptr ptr) -880 stdcall RtlSizeHeap(long long ptr) -881 stdcall RtlSplay(ptr) -882 stdcall RtlStartRXact(ptr) -883 stdcall RtlStatMemoryStream(ptr ptr long) -884 stdcall RtlStringFromGUID(ptr ptr) -885 stdcall RtlSubAuthorityCountSid(ptr) -886 stdcall RtlSubAuthoritySid(ptr long) -887 stdcall RtlSubtreePredecessor(ptr) -888 stdcall RtlSubtreeSuccessor(ptr) -889 stdcall RtlSystemTimeToLocalTime(ptr ptr) -890 stdcall RtlTimeFieldsToTime(ptr ptr) -891 stdcall RtlTimeToElapsedTimeFields(long long) -892 stdcall RtlTimeToSecondsSince1970(ptr ptr) -893 stdcall RtlTimeToSecondsSince1980(ptr ptr) -894 stdcall RtlTimeToTimeFields (long long) +@ stdcall RtlSetUserFlagsHeap(ptr long ptr long long) +@ stdcall RtlSetUserValueHeap(ptr long ptr ptr) +@ stdcall RtlSizeHeap(long long ptr) +@ stdcall RtlSplay(ptr) +@ stdcall RtlStartRXact(ptr) +@ stdcall RtlStatMemoryStream(ptr ptr long) +@ stdcall RtlStringFromGUID(ptr ptr) +@ stdcall RtlSubAuthorityCountSid(ptr) +@ stdcall RtlSubAuthoritySid(ptr long) +@ stdcall RtlSubtreePredecessor(ptr) +@ stdcall RtlSubtreeSuccessor(ptr) +@ stdcall RtlSystemTimeToLocalTime(ptr ptr) +@ stdcall RtlTimeFieldsToTime(ptr ptr) +@ stdcall RtlTimeToElapsedTimeFields(long long) +@ stdcall RtlTimeToSecondsSince1970(ptr ptr) +@ stdcall RtlTimeToSecondsSince1980(ptr ptr) +@ stdcall RtlTimeToTimeFields (long long) # stdcall RtlTraceDatabaseAdd # stdcall RtlTraceDatabaseCreate # stdcall RtlTraceDatabaseDestroy @@ -906,511 +906,511 @@ # stdcall RtlTraceDatabaseLock # stdcall RtlTraceDatabaseUnlock # stdcall RtlTraceDatabaseValidate -903 stdcall RtlTryEnterCriticalSection(ptr) +@ stdcall RtlTryEnterCriticalSection(ptr) # stdcall RtlUnhandledExceptionFilter2 -905 stdcall RtlUnhandledExceptionFilter(ptr) -906 stdcall RtlUnicodeStringToAnsiSize(ptr) RtlxUnicodeStringToAnsiSize -907 stdcall RtlUnicodeStringToAnsiString(ptr ptr long) -908 stdcall RtlUnicodeStringToCountedOemString(ptr ptr long) -909 stdcall RtlUnicodeStringToInteger(ptr long ptr) -910 stdcall RtlUnicodeStringToOemSize(ptr) RtlxUnicodeStringToOemSize -911 stdcall RtlUnicodeStringToOemString(ptr ptr long) -912 stdcall RtlUnicodeToCustomCPN(ptr ptr long ptr wstr long) -913 stdcall RtlUnicodeToMultiByteN(ptr long ptr ptr long) -914 stdcall RtlUnicodeToMultiByteSize(ptr ptr long) -915 stdcall RtlUnicodeToOemN(ptr long ptr ptr long) -916 stdcall RtlUniform(ptr) -917 stdcall RtlUnlockBootStatusData(ptr) -918 stdcall RtlUnlockHeap(long) -919 stdcall RtlUnlockMemoryStreamRegion(ptr int64 int64 long) -920 stdcall -register RtlUnwind(ptr ptr ptr ptr) +@ stdcall RtlUnhandledExceptionFilter(ptr) +@ stdcall RtlUnicodeStringToAnsiSize(ptr) RtlxUnicodeStringToAnsiSize +@ stdcall RtlUnicodeStringToAnsiString(ptr ptr long) +@ stdcall RtlUnicodeStringToCountedOemString(ptr ptr long) +@ stdcall RtlUnicodeStringToInteger(ptr long ptr) +@ stdcall RtlUnicodeStringToOemSize(ptr) RtlxUnicodeStringToOemSize +@ stdcall RtlUnicodeStringToOemString(ptr ptr long) +@ stdcall RtlUnicodeToCustomCPN(ptr ptr long ptr wstr long) +@ stdcall RtlUnicodeToMultiByteN(ptr long ptr ptr long) +@ stdcall RtlUnicodeToMultiByteSize(ptr ptr long) +@ stdcall RtlUnicodeToOemN(ptr long ptr ptr long) +@ stdcall RtlUniform(ptr) +@ stdcall RtlUnlockBootStatusData(ptr) +@ stdcall RtlUnlockHeap(long) +@ stdcall RtlUnlockMemoryStreamRegion(ptr int64 int64 long) +@ stdcall -register RtlUnwind(ptr ptr ptr ptr) @ stdcall -arch=x86_64 RtlUnwindEx(long long ptr long ptr) -921 stdcall RtlUpcaseUnicodeChar(long) -922 stdcall RtlUpcaseUnicodeString(ptr ptr long) -923 stdcall RtlUpcaseUnicodeStringToAnsiString(ptr ptr long) -924 stdcall RtlUpcaseUnicodeStringToCountedOemString(ptr ptr long) -925 stdcall RtlUpcaseUnicodeStringToOemString(ptr ptr long) -926 stdcall RtlUpcaseUnicodeToCustomCPN(ptr ptr long ptr wstr long) -927 stdcall RtlUpcaseUnicodeToMultiByteN(ptr long ptr ptr long) -928 stdcall RtlUpcaseUnicodeToOemN(ptr long ptr ptr long) -929 stdcall RtlUpdateTimer(ptr ptr long long) -930 stdcall RtlUpperChar(long) -931 stdcall RtlUpperString(ptr ptr) -932 stdcall RtlUsageHeap(ptr long ptr) -933 stdcall RtlValidAcl(ptr) -934 stdcall RtlValidRelativeSecurityDescriptor(ptr long long) -935 stdcall RtlValidSecurityDescriptor(ptr) -936 stdcall RtlValidSid(ptr) -937 stdcall RtlValidateHeap(long long ptr) -938 stdcall RtlValidateProcessHeaps() -939 stdcall RtlValidateUnicodeString(long ptr) -940 stdcall RtlVerifyVersionInfo(ptr long double) +@ stdcall RtlUpcaseUnicodeChar(long) +@ stdcall RtlUpcaseUnicodeString(ptr ptr long) +@ stdcall RtlUpcaseUnicodeStringToAnsiString(ptr ptr long) +@ stdcall RtlUpcaseUnicodeStringToCountedOemString(ptr ptr long) +@ stdcall RtlUpcaseUnicodeStringToOemString(ptr ptr long) +@ stdcall RtlUpcaseUnicodeToCustomCPN(ptr ptr long ptr wstr long) +@ stdcall RtlUpcaseUnicodeToMultiByteN(ptr long ptr ptr long) +@ stdcall RtlUpcaseUnicodeToOemN(ptr long ptr ptr long) +@ stdcall RtlUpdateTimer(ptr ptr long long) +@ stdcall RtlUpperChar(long) +@ stdcall RtlUpperString(ptr ptr) +@ stdcall RtlUsageHeap(ptr long ptr) +@ stdcall RtlValidAcl(ptr) +@ stdcall RtlValidRelativeSecurityDescriptor(ptr long long) +@ stdcall RtlValidSecurityDescriptor(ptr) +@ stdcall RtlValidSid(ptr) +@ stdcall RtlValidateHeap(long long ptr) +@ stdcall RtlValidateProcessHeaps() +@ stdcall RtlValidateUnicodeString(long ptr) +@ stdcall RtlVerifyVersionInfo(ptr long double) @ stdcall -arch=x86_64 RtlVirtualUnwind(long long long ptr ptr ptr ptr ptr) -941 stdcall RtlWalkFrameChain(ptr long long) -942 stdcall RtlWalkHeap(long ptr) -943 stdcall RtlWow64EnableFsRedirection(long) -944 stdcall RtlWow64EnableFsRedirectionEx(long ptr) -945 stdcall RtlWriteMemoryStream(ptr ptr long ptr) -946 stdcall RtlWriteRegistryValue(long ptr ptr long ptr long) -947 stdcall RtlZeroHeap(ptr long) -948 stdcall RtlZeroMemory(ptr long) -949 stdcall RtlZombifyActivationContext(ptr) -950 stdcall RtlpApplyLengthFunction(long long ptr ptr) -951 stdcall RtlpEnsureBufferSize(long ptr long) +@ stdcall RtlWalkFrameChain(ptr long long) +@ stdcall RtlWalkHeap(long ptr) +@ stdcall RtlWow64EnableFsRedirection(long) +@ stdcall RtlWow64EnableFsRedirectionEx(long ptr) +@ stdcall RtlWriteMemoryStream(ptr ptr long ptr) +@ stdcall RtlWriteRegistryValue(long ptr ptr long ptr long) +@ stdcall RtlZeroHeap(ptr long) +@ stdcall RtlZeroMemory(ptr long) +@ stdcall RtlZombifyActivationContext(ptr) +@ stdcall RtlpApplyLengthFunction(long long ptr ptr) +@ stdcall RtlpEnsureBufferSize(long ptr long) # stdcall RtlpNotOwnerCriticalSection -953 stdcall RtlpNtCreateKey(ptr long ptr long ptr ptr) -954 stdcall RtlpNtEnumerateSubKey(ptr ptr long long) -955 stdcall RtlpNtMakeTemporaryKey(ptr) -956 stdcall RtlpNtOpenKey(ptr long ptr long) -957 stdcall RtlpNtQueryValueKey(ptr ptr ptr ptr long) -958 stdcall RtlpNtSetValueKey(ptr long ptr long) -959 stdcall RtlpUnWaitCriticalSection(ptr) -960 stdcall RtlpWaitForCriticalSection(ptr) -961 stdcall RtlxAnsiStringToUnicodeSize(ptr) -962 stdcall RtlxOemStringToUnicodeSize(ptr) -963 stdcall RtlxUnicodeStringToAnsiSize(ptr) -964 stdcall RtlxUnicodeStringToOemSize(ptr) -965 stdcall -ret64 VerSetConditionMask(double long long) -966 stdcall ZwAcceptConnectPort(ptr long ptr long long ptr) NtAcceptConnectPort -967 stdcall ZwAccessCheck(ptr long long ptr ptr ptr ptr ptr) NtAccessCheck -968 stdcall ZwAccessCheckAndAuditAlarm(ptr long ptr ptr ptr long ptr long ptr ptr ptr) NtAccessCheckAndAuditAlarm -969 stdcall ZwAccessCheckByType(ptr ptr ptr long ptr long ptr ptr long ptr ptr) NtAccessCheckByType -970 stdcall ZwAccessCheckByTypeAndAuditAlarm(ptr ptr ptr ptr ptr ptr long long long ptr long ptr long ptr ptr ptr) NtAccessCheckByTypeAndAuditAlarm -971 stdcall ZwAccessCheckByTypeResultList(ptr ptr ptr long ptr long ptr ptr long ptr ptr) NtAccessCheckByTypeResultList -972 stdcall ZwAccessCheckByTypeResultListAndAuditAlarm(ptr ptr ptr ptr ptr ptr long long long ptr long ptr long ptr ptr ptr) NtAccessCheckByTypeResultListAndAuditAlarm -973 stdcall ZwAccessCheckByTypeResultListAndAuditAlarmByHandle(ptr ptr ptr ptr ptr ptr ptr long long long ptr long ptr long ptr ptr ptr) NtAccessCheckByTypeResultListAndAuditAlarmByHandle -974 stdcall ZwAddAtom(ptr long ptr) NtAddAtom -975 stdcall ZwAddBootEntry(ptr long) -976 stdcall ZwAddDriverEntry(ptr long) -977 stdcall ZwAdjustGroupsToken(long long long long long long) NtAdjustGroupsToken -978 stdcall ZwAdjustPrivilegesToken(long long long long long long) NtAdjustPrivilegesToken -979 stdcall ZwAlertResumeThread(long ptr) NtAlertResumeThread -980 stdcall ZwAlertThread(long) NtAlertThread -981 stdcall ZwAllocateLocallyUniqueId(ptr) NtAllocateLocallyUniqueId -982 stdcall ZwAllocateUserPhysicalPages(ptr ptr ptr) -983 stdcall ZwAllocateUuids(ptr ptr ptr ptr) NtAllocateUuids -984 stdcall ZwAllocateVirtualMemory(long ptr ptr ptr long long) NtAllocateVirtualMemory -985 stdcall ZwApphelpCacheControl(long ptr) -986 stdcall ZwAreMappedFilesTheSame(ptr ptr) NtAreMappedFilesTheSame -987 stdcall ZwAssignProcessToJobObject(long long) NtAssignProcessToJobObject -988 stdcall ZwCallbackReturn(ptr long long) -989 stdcall ZwCancelDeviceWakeupRequest(ptr) -990 stdcall ZwCancelIoFile(long ptr) NtCancelIoFile -991 stdcall ZwCancelTimer(long ptr) NtCancelTimer -992 stdcall ZwClearEvent(long) NtClearEvent -993 stdcall ZwClose(long) NtClose -994 stdcall ZwCloseObjectAuditAlarm(ptr ptr long) -995 stdcall ZwCompactKeys(long ptr) NtCompactKeys -996 stdcall ZwCompareTokens(ptr ptr ptr) NtCompareTokens -997 stdcall ZwCompleteConnectPort(ptr) NtCompleteConnectPort -998 stdcall ZwCompressKey(ptr) NtCompressKey -999 stdcall ZwConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr) NtConnectPort -1000 stdcall ZwContinue(ptr long) NtContinue -1001 stdcall ZwCreateDebugObject(ptr long ptr long) NtCreateDebugObject -1002 stdcall ZwCreateDirectoryObject(long long long) NtCreateDirectoryObject -1003 stdcall ZwCreateEvent(long long long long long) NtCreateEvent -1004 stdcall ZwCreateEventPair(ptr long ptr) NtCreateEventPair -1005 stdcall ZwCreateFile(ptr long ptr ptr long long long ptr long long ptr) NtCreateFile -1006 stdcall ZwCreateIoCompletion(ptr long ptr long) NtCreateIoCompletion -1007 stdcall ZwCreateJobObject(ptr long ptr) NtCreateJobObject -1008 stdcall ZwCreateJobSet(long ptr long) NtCreateJobSet -1009 stdcall ZwCreateKey(ptr long ptr long ptr long long) NtCreateKey -1010 stdcall ZwCreateKeyedEvent(ptr long ptr long) NtCreateKeyedEvent -1011 stdcall ZwCreateMailslotFile(long long long long long long long long) NtCreateMailslotFile -1012 stdcall ZwCreateMutant(ptr long ptr long) NtCreateMutant -1013 stdcall ZwCreateNamedPipeFile(ptr long ptr ptr long long long long long long long long long ptr) NtCreateNamedPipeFile -1014 stdcall ZwCreatePagingFile(long long long long) NtCreatePagingFile -1015 stdcall ZwCreatePort(ptr ptr long long long) NtCreatePort -1016 stdcall ZwCreateProcess(ptr long ptr ptr long ptr ptr ptr) -1017 stdcall ZwCreateProcessEx(ptr long ptr ptr long ptr ptr ptr long) NtCreateProcessEx -1018 stdcall ZwCreateProfile(ptr ptr ptr long long ptr long long long) NtCreateProfile ; CHECKME -1019 stdcall ZwCreateSection(ptr long ptr ptr long long long) NtCreateSection -1020 stdcall ZwCreateSemaphore(ptr long ptr long long) NtCreateSemaphore -1021 stdcall ZwCreateSymbolicLinkObject(ptr long ptr ptr) NtCreateSymbolicLinkObject -1022 stdcall ZwCreateThread(ptr long ptr ptr ptr ptr ptr long) -1023 stdcall ZwCreateTimer(ptr long ptr long) NtCreateTimer -1024 stdcall ZwCreateToken(ptr long ptr long ptr ptr ptr ptr ptr ptr ptr ptr ptr) -1025 stdcall ZwCreateWaitablePort(ptr ptr long long long) NtCreateWaitablePort -1026 stdcall ZwDebugActiveProcess(ptr ptr) NtDebugActiveProcess -1027 stdcall ZwDebugContinue(ptr ptr long) NtDebugContinue -1028 stdcall ZwDelayExecution(long ptr) NtDelayExecution -1029 stdcall ZwDeleteAtom(long) NtDeleteAtom -1030 stdcall ZwDeleteBootEntry(long) NtDeleteBootEntry -1031 stdcall ZwDeleteDriverEntry(long) -1032 stdcall ZwDeleteFile(ptr) NtDeleteFile -1033 stdcall ZwDeleteKey(long) NtDeleteKey -1034 stdcall ZwDeleteObjectAuditAlarm(ptr ptr long) -1035 stdcall ZwDeleteValueKey(long ptr) NtDeleteValueKey -1036 stdcall ZwDeviceIoControlFile(long long long long long long long long long long) NtDeviceIoControlFile -1037 stdcall ZwDisplayString(ptr) NtDisplayString -1038 stdcall ZwDuplicateObject(long long long ptr long long long) NtDuplicateObject -1039 stdcall ZwDuplicateToken(long long long long long long) NtDuplicateToken -1040 stdcall ZwEnumerateBootEntries(ptr ptr) -1041 stdcall ZwEnumerateDriverEntries(ptr ptr) -1042 stdcall ZwEnumerateKey(long long long ptr long ptr) NtEnumerateKey -1043 stdcall ZwEnumerateSystemEnvironmentValuesEx(long ptr long) NtEnumerateSystemEnvironmentValuesEx -1044 stdcall ZwEnumerateValueKey(long long long ptr long ptr) NtEnumerateValueKey -1045 stdcall ZwExtendSection(ptr ptr) NtExtendSection -1046 stdcall ZwFilterToken(ptr long ptr ptr ptr ptr) NtFilterToken -1047 stdcall ZwFindAtom(ptr long ptr) NtFindAtom -1048 stdcall ZwFlushBuffersFile(long ptr) NtFlushBuffersFile -1049 stdcall ZwFlushInstructionCache(long ptr long) NtFlushInstructionCache -1050 stdcall ZwFlushKey(long) NtFlushKey -1051 stdcall ZwFlushVirtualMemory(long ptr ptr long) NtFlushVirtualMemory -1052 stdcall ZwFlushWriteBuffer() -1053 stdcall ZwFreeUserPhysicalPages(ptr ptr ptr) -1054 stdcall ZwFreeVirtualMemory(long ptr ptr long) NtFreeVirtualMemory -1055 stdcall ZwFsControlFile(long long long long long long long long long long) NtFsControlFile -1056 stdcall ZwGetContextThread(long ptr) NtGetContextThread -1057 stdcall ZwGetCurrentProcessorNumber() -1058 stdcall ZwGetDevicePowerState(ptr ptr) -1059 stdcall ZwGetPlugPlayEvent(long long ptr long) -1060 stdcall ZwGetWriteWatch(long long ptr long ptr ptr ptr) NtGetWriteWatch -1061 stdcall ZwImpersonateAnonymousToken(ptr) -1062 stdcall ZwImpersonateClientOfPort(ptr ptr) NtImpersonateClientOfPort -1063 stdcall ZwImpersonateThread(ptr ptr ptr) NtImpersonateThread -1064 stdcall ZwInitializeRegistry(long) -1065 stdcall ZwInitiatePowerAction(long long long long) NtInitiatePowerAction -1066 stdcall ZwIsProcessInJob(long long) NtIsProcessInJob -1067 stdcall ZwIsSystemResumeAutomatic() -1068 stdcall ZwListenPort(ptr ptr) NtListenPort -1069 stdcall ZwLoadDriver(ptr) NtLoadDriver -1070 stdcall ZwLoadKey2(ptr ptr long) NtLoadKey2 -1071 stdcall ZwLoadKey(ptr ptr) NtLoadKey -1072 stdcall ZwLoadKeyEx(ptr ptr long ptr) -1073 stdcall ZwLockFile(long long ptr ptr ptr ptr ptr ptr long long) NtLockFile -1074 stdcall ZwLockProductActivationKeys(ptr ptr) NtLockProductActivationKeys -1075 stdcall ZwLockRegistryKey(ptr) NtLockRegistryKey -1076 stdcall ZwLockVirtualMemory(long ptr ptr long) NtLockVirtualMemory -1077 stdcall ZwMakePermanentObject(ptr) NtMakePermanentObject -1078 stdcall ZwMakeTemporaryObject(long) NtMakeTemporaryObject -1079 stdcall ZwMapUserPhysicalPages(ptr ptr ptr) -1080 stdcall ZwMapUserPhysicalPagesScatter(ptr ptr ptr) -1081 stdcall ZwMapViewOfSection(long long ptr long long ptr ptr long long long) NtMapViewOfSection -1082 stdcall ZwModifyBootEntry(ptr) NtModifyBootEntry -1083 stdcall ZwModifyDriverEntry(ptr) -1084 stdcall ZwNotifyChangeDirectoryFile(long long ptr ptr ptr ptr long long long) NtNotifyChangeDirectoryFile -1085 stdcall ZwNotifyChangeKey(long long ptr ptr ptr long long ptr long long) NtNotifyChangeKey -1086 stdcall ZwNotifyChangeMultipleKeys(ptr long ptr ptr ptr ptr ptr long long ptr long long) NtNotifyChangeMultipleKeys -1087 stdcall ZwOpenDirectoryObject(long long long) NtOpenDirectoryObject -1088 stdcall ZwOpenEvent(long long long) NtOpenEvent -1089 stdcall ZwOpenEventPair(ptr long ptr) NtOpenEventPair -1090 stdcall ZwOpenFile(ptr long ptr ptr long long) NtOpenFile -1091 stdcall ZwOpenIoCompletion(ptr long ptr) NtOpenIoCompletion -1092 stdcall ZwOpenJobObject(ptr long ptr) NtOpenJobObject -1093 stdcall ZwOpenKey(ptr long ptr) NtOpenKey -1094 stdcall ZwOpenKeyedEvent(ptr long ptr) NtOpenKeyedEvent -1095 stdcall ZwOpenMutant(ptr long ptr) NtOpenMutant -1096 stdcall ZwOpenObjectAuditAlarm(ptr ptr ptr ptr ptr ptr long long ptr long long ptr) -1097 stdcall ZwOpenProcess(ptr long ptr ptr) NtOpenProcess -1098 stdcall ZwOpenProcessToken(long long ptr) NtOpenProcessToken -1099 stdcall ZwOpenProcessTokenEx(long long long ptr) NtOpenProcessTokenEx -1100 stdcall ZwOpenSection(ptr long ptr) NtOpenSection -1101 stdcall ZwOpenSemaphore(long long ptr) NtOpenSemaphore -1102 stdcall ZwOpenSymbolicLinkObject (ptr long ptr) NtOpenSymbolicLinkObject -1103 stdcall ZwOpenThread(ptr long ptr ptr) NtOpenThread -1104 stdcall ZwOpenThreadToken(long long long ptr) NtOpenThreadToken -1105 stdcall ZwOpenThreadTokenEx(long long long long ptr) NtOpenThreadTokenEx -1106 stdcall ZwOpenTimer(ptr long ptr) NtOpenTimer -1107 stdcall ZwPlugPlayControl(ptr ptr long) -1108 stdcall ZwPowerInformation(long ptr long ptr long) NtPowerInformation -1109 stdcall ZwPrivilegeCheck(ptr ptr ptr) NtPrivilegeCheck -1110 stdcall ZwPrivilegeObjectAuditAlarm(ptr ptr ptr long ptr long) -1111 stdcall ZwPrivilegedServiceAuditAlarm(ptr ptr ptr ptr long) -1112 stdcall ZwProtectVirtualMemory(long ptr ptr long ptr) NtProtectVirtualMemory -1113 stdcall ZwPulseEvent(long ptr) NtPulseEvent -1114 stdcall ZwQueryAttributesFile(ptr ptr) NtQueryAttributesFile -1115 stdcall ZwQueryBootEntryOrder(ptr ptr) NtQueryBootEntryOrder -1116 stdcall ZwQueryBootOptions(ptr ptr) NtQueryBootOptions -1117 stdcall ZwQueryDebugFilterState(long long) NtQueryDebugFilterState -1118 stdcall ZwQueryDefaultLocale(long ptr) NtQueryDefaultLocale -1119 stdcall ZwQueryDefaultUILanguage(ptr) NtQueryDefaultUILanguage -1120 stdcall ZwQueryDirectoryFile(long long ptr ptr ptr ptr long long long ptr long) NtQueryDirectoryFile -1121 stdcall ZwQueryDirectoryObject(long ptr long long long ptr ptr) NtQueryDirectoryObject -1122 stdcall ZwQueryDriverEntryOrder(ptr ptr) -1123 stdcall ZwQueryEaFile(long ptr ptr long long ptr long ptr long) NtQueryEaFile -1124 stdcall ZwQueryEvent(long long ptr long ptr) NtQueryEvent -1125 stdcall ZwQueryFullAttributesFile(ptr ptr) NtQueryFullAttributesFile -1126 stdcall ZwQueryInformationAtom(long long ptr long ptr) NtQueryInformationAtom -1127 stdcall ZwQueryInformationFile(long ptr ptr long long) NtQueryInformationFile -1128 stdcall ZwQueryInformationJobObject(long long ptr long ptr) NtQueryInformationJobObject -1129 stdcall ZwQueryInformationPort(ptr long ptr long ptr) NtQueryInformationPort -1130 stdcall ZwQueryInformationProcess(long long ptr long ptr) NtQueryInformationProcess -1131 stdcall ZwQueryInformationThread(long long ptr long ptr) NtQueryInformationThread -1132 stdcall ZwQueryInformationToken(long long ptr long ptr) NtQueryInformationToken -1133 stdcall ZwQueryInstallUILanguage(ptr) NtQueryInstallUILanguage -1134 stdcall ZwQueryIntervalProfile(long ptr) NtQueryIntervalProfile -1135 stdcall ZwQueryIoCompletion(long long ptr long ptr) NtQueryIoCompletion -1136 stdcall ZwQueryKey(long long ptr long ptr) NtQueryKey -1137 stdcall ZwQueryMultipleValueKey(long ptr long ptr long ptr) NtQueryMultipleValueKey -1138 stdcall ZwQueryMutant(long long ptr long ptr) NtQueryMutant -1139 stdcall ZwQueryObject(long long long long long) NtQueryObject -1140 stdcall ZwQueryOpenSubKeys(ptr ptr) NtQueryOpenSubKeys -1141 stdcall ZwQueryOpenSubKeysEx(ptr long ptr ptr) -1142 stdcall ZwQueryPerformanceCounter (long long) NtQueryPerformanceCounter -1143 stdcall ZwQueryPortInformationProcess() NtQueryPortInformationProcess -1144 stdcall ZwQueryQuotaInformationFile(ptr ptr ptr long long ptr long ptr long) NtQueryQuotaInformationFile -1145 stdcall ZwQuerySection (long long long long long) NtQuerySection -1146 stdcall ZwQuerySecurityObject (long long long long long) NtQuerySecurityObject -1147 stdcall ZwQuerySemaphore (long long long long long) NtQuerySemaphore -1148 stdcall ZwQuerySymbolicLinkObject(long ptr ptr) NtQuerySymbolicLinkObject -1149 stdcall ZwQuerySystemEnvironmentValue(ptr ptr long ptr) NtQuerySystemEnvironmentValue -1150 stdcall ZwQuerySystemEnvironmentValueEx(ptr ptr ptr ptr ptr) NtQuerySystemEnvironmentValueEx -1151 stdcall ZwQuerySystemInformation(long long long long) NtQuerySystemInformation -1152 stdcall ZwQuerySystemTime(ptr) NtQuerySystemTime -1153 stdcall ZwQueryTimer(ptr long ptr long ptr) NtQueryTimer -1154 stdcall ZwQueryTimerResolution(long long long) NtQueryTimerResolution -1155 stdcall ZwQueryValueKey(long ptr long ptr long ptr) NtQueryValueKey -1156 stdcall ZwQueryVirtualMemory(long ptr long ptr long ptr) NtQueryVirtualMemory -1157 stdcall ZwQueryVolumeInformationFile(long ptr ptr long long) NtQueryVolumeInformationFile -1158 stdcall ZwQueueApcThread(long ptr long long long) NtQueueApcThread -1159 stdcall ZwRaiseException(ptr ptr long) NtRaiseException -1160 stdcall ZwRaiseHardError(long long long ptr long ptr) NtRaiseHardError -1161 stdcall ZwReadFile(long long ptr ptr ptr ptr long ptr ptr) NtReadFile -1162 stdcall ZwReadFileScatter(long long ptr ptr ptr ptr long ptr ptr) NtReadFileScatter -1163 stdcall ZwReadRequestData(ptr ptr long ptr long ptr) NtReadRequestData -1164 stdcall ZwReadVirtualMemory(long ptr ptr long ptr) NtReadVirtualMemory -1165 stdcall ZwRegisterThreadTerminatePort(ptr) NtRegisterThreadTerminatePort -1166 stdcall ZwReleaseKeyedEvent(ptr ptr long ptr) NtReleaseKeyedEvent -1167 stdcall ZwReleaseMutant(long ptr) NtReleaseMutant -1168 stdcall ZwReleaseSemaphore(long long ptr) NtReleaseSemaphore -1169 stdcall ZwRemoveIoCompletion(ptr ptr ptr ptr ptr) NtRemoveIoCompletion -1170 stdcall ZwRemoveProcessDebug(ptr ptr) NtRemoveProcessDebug -1171 stdcall ZwRenameKey(ptr ptr) NtRenameKey -1172 stdcall ZwReplaceKey(ptr long ptr) NtReplaceKey -1173 stdcall ZwReplyPort(ptr ptr) NtReplyPort -1174 stdcall ZwReplyWaitReceivePort(ptr ptr ptr ptr) NtReplyWaitReceivePort -1175 stdcall ZwReplyWaitReceivePortEx(ptr ptr ptr ptr ptr) -1176 stdcall ZwReplyWaitReplyPort(ptr ptr) -1177 stdcall ZwRequestDeviceWakeup(ptr) -1178 stdcall ZwRequestPort(ptr ptr) -1179 stdcall ZwRequestWaitReplyPort(ptr ptr ptr) -1180 stdcall ZwRequestWakeupLatency(long) -1181 stdcall ZwResetEvent(long ptr) -1182 stdcall ZwResetWriteWatch(long ptr long) -1183 stdcall ZwRestoreKey(long long long) -1184 stdcall ZwResumeProcess(ptr) -1185 stdcall ZwResumeThread(long long) -1186 stdcall ZwSaveKey(long long) -1187 stdcall ZwSaveKeyEx(ptr ptr long) -1188 stdcall ZwSaveMergedKeys(ptr ptr ptr) -1189 stdcall ZwSecureConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr ptr) -1190 stdcall ZwSetBootEntryOrder(ptr ptr) -1191 stdcall ZwSetBootOptions(ptr long) -1192 stdcall ZwSetContextThread(long ptr) -1193 stdcall ZwSetDebugFilterState(long long long) -1194 stdcall ZwSetDefaultHardErrorPort(ptr) -1195 stdcall ZwSetDefaultLocale(long long) -1196 stdcall ZwSetDefaultUILanguage(long) -1197 stdcall ZwSetDriverEntryOrder(ptr ptr) -1198 stdcall ZwSetEaFile(long ptr ptr long) -1199 stdcall ZwSetEvent(long long) -1200 stdcall ZwSetEventBoostPriority(ptr) -1201 stdcall ZwSetHighEventPair(ptr) -1202 stdcall ZwSetHighWaitLowEventPair(ptr) -1203 stdcall ZwSetInformationDebugObject(ptr long ptr long ptr) -1204 stdcall ZwSetInformationFile(long long long long long) -1205 stdcall ZwSetInformationJobObject(long long ptr long) -1206 stdcall ZwSetInformationKey(long long ptr long) -1207 stdcall ZwSetInformationObject(long long ptr long) -1208 stdcall ZwSetInformationProcess(long long long long) -1209 stdcall ZwSetInformationThread(long long ptr long) -1210 stdcall ZwSetInformationToken(long long ptr long) -1211 stdcall ZwSetIntervalProfile(long long) -1212 stdcall ZwSetIoCompletion(ptr long ptr long long) -1213 stdcall ZwSetLdtEntries(long int64 long int64) -1214 stdcall ZwSetLowEventPair(ptr) -1215 stdcall ZwSetLowWaitHighEventPair(ptr) -1216 stdcall ZwSetQuotaInformationFile(ptr ptr ptr long) -1217 stdcall ZwSetSecurityObject(long long ptr) -1218 stdcall ZwSetSystemEnvironmentValue(ptr ptr) -1219 stdcall ZwSetSystemEnvironmentValueEx(ptr ptr ptr ptr ptr) NtSetSystemEnvironmentValueEx -1220 stdcall ZwSetSystemInformation(long ptr long) -1221 stdcall ZwSetSystemPowerState(long long long) -1222 stdcall ZwSetSystemTime(ptr ptr) -1223 stdcall ZwSetThreadExecutionState(long ptr) -1224 stdcall ZwSetTimer(long ptr ptr ptr long long ptr) -1225 stdcall ZwSetTimerResolution(long long ptr) -1226 stdcall ZwSetUuidSeed(ptr) -1227 stdcall ZwSetValueKey(long long long long long long) -1228 stdcall ZwSetVolumeInformationFile(long ptr ptr long long) -1229 stdcall ZwShutdownSystem(long) -1230 stdcall ZwSignalAndWaitForSingleObject(long long long ptr) -1231 stdcall ZwStartProfile(ptr) -1232 stdcall ZwStopProfile(ptr) -1233 stdcall ZwSuspendProcess(ptr) -1234 stdcall ZwSuspendThread(long ptr) -1235 stdcall ZwSystemDebugControl(long ptr long ptr long ptr) -1236 stdcall ZwTerminateJobObject(long long) -1237 stdcall ZwTerminateProcess(long long) -1238 stdcall ZwTerminateThread(long long) -1239 stdcall ZwTestAlert() -1240 stdcall ZwTraceEvent(long long long ptr) -1241 stdcall ZwTranslateFilePath(ptr long ptr long) -1242 stdcall ZwUnloadDriver(ptr) -1243 stdcall ZwUnloadKey2(ptr long) -1244 stdcall ZwUnloadKey(long) -1245 stdcall ZwUnloadKeyEx(ptr ptr) -1246 stdcall ZwUnlockFile(long ptr ptr ptr ptr) -1247 stdcall ZwUnlockVirtualMemory(long ptr ptr long) -1248 stdcall ZwUnmapViewOfSection(long ptr) -1249 stdcall ZwVdmControl(long ptr) -1250 stdcall ZwWaitForDebugEvent(ptr long ptr ptr) -1251 stdcall ZwWaitForKeyedEvent(ptr ptr long ptr) -1252 stdcall ZwWaitForMultipleObjects32(long ptr long long ptr) -1253 stdcall ZwWaitForMultipleObjects(long ptr long long ptr) -1254 stdcall ZwWaitForSingleObject(long long long) -1255 stdcall ZwWaitHighEventPair(ptr) -1256 stdcall ZwWaitLowEventPair(ptr) -1257 stdcall ZwWriteFile(long long ptr ptr ptr ptr long ptr ptr) -1258 stdcall ZwWriteFileGather(long long ptr ptr ptr ptr long ptr ptr) -1259 stdcall ZwWriteRequestData(ptr ptr long ptr long ptr) -1260 stdcall ZwWriteVirtualMemory(long ptr ptr long ptr) -1261 stdcall ZwYieldExecution() -1262 cdecl -arch=i386 _CIcos() -1263 cdecl -arch=i386 _CIlog() -1264 cdecl -arch=i386 _CIpow() -1265 cdecl -arch=i386 _CIsin() -1266 cdecl -arch=i386 _CIsqrt() +@ stdcall RtlpNtCreateKey(ptr long ptr long ptr ptr) +@ stdcall RtlpNtEnumerateSubKey(ptr ptr long long) +@ stdcall RtlpNtMakeTemporaryKey(ptr) +@ stdcall RtlpNtOpenKey(ptr long ptr long) +@ stdcall RtlpNtQueryValueKey(ptr ptr ptr ptr long) +@ stdcall RtlpNtSetValueKey(ptr long ptr long) +@ stdcall RtlpUnWaitCriticalSection(ptr) +@ stdcall RtlpWaitForCriticalSection(ptr) +@ stdcall RtlxAnsiStringToUnicodeSize(ptr) +@ stdcall RtlxOemStringToUnicodeSize(ptr) +@ stdcall RtlxUnicodeStringToAnsiSize(ptr) +@ stdcall RtlxUnicodeStringToOemSize(ptr) +@ stdcall -ret64 VerSetConditionMask(double long long) +@ stdcall ZwAcceptConnectPort(ptr long ptr long long ptr) NtAcceptConnectPort +@ stdcall ZwAccessCheck(ptr long long ptr ptr ptr ptr ptr) NtAccessCheck +@ stdcall ZwAccessCheckAndAuditAlarm(ptr long ptr ptr ptr long ptr long ptr ptr ptr) NtAccessCheckAndAuditAlarm +@ stdcall ZwAccessCheckByType(ptr ptr ptr long ptr long ptr ptr long ptr ptr) NtAccessCheckByType +@ stdcall ZwAccessCheckByTypeAndAuditAlarm(ptr ptr ptr ptr ptr ptr long long long ptr long ptr long ptr ptr ptr) NtAccessCheckByTypeAndAuditAlarm +@ stdcall ZwAccessCheckByTypeResultList(ptr ptr ptr long ptr long ptr ptr long ptr ptr) NtAccessCheckByTypeResultList +@ stdcall ZwAccessCheckByTypeResultListAndAuditAlarm(ptr ptr ptr ptr ptr ptr long long long ptr long ptr long ptr ptr ptr) NtAccessCheckByTypeResultListAndAuditAlarm +@ stdcall ZwAccessCheckByTypeResultListAndAuditAlarmByHandle(ptr ptr ptr ptr ptr ptr ptr long long long ptr long ptr long ptr ptr ptr) NtAccessCheckByTypeResultListAndAuditAlarmByHandle +@ stdcall ZwAddAtom(ptr long ptr) NtAddAtom +@ stdcall ZwAddBootEntry(ptr long) +@ stdcall ZwAddDriverEntry(ptr long) +@ stdcall ZwAdjustGroupsToken(long long long long long long) NtAdjustGroupsToken +@ stdcall ZwAdjustPrivilegesToken(long long long long long long) NtAdjustPrivilegesToken +@ stdcall ZwAlertResumeThread(long ptr) NtAlertResumeThread +@ stdcall ZwAlertThread(long) NtAlertThread +@ stdcall ZwAllocateLocallyUniqueId(ptr) NtAllocateLocallyUniqueId +@ stdcall ZwAllocateUserPhysicalPages(ptr ptr ptr) +@ stdcall ZwAllocateUuids(ptr ptr ptr ptr) NtAllocateUuids +@ stdcall ZwAllocateVirtualMemory(long ptr ptr ptr long long) NtAllocateVirtualMemory +@ stdcall ZwApphelpCacheControl(long ptr) +@ stdcall ZwAreMappedFilesTheSame(ptr ptr) NtAreMappedFilesTheSame +@ stdcall ZwAssignProcessToJobObject(long long) NtAssignProcessToJobObject +@ stdcall ZwCallbackReturn(ptr long long) +@ stdcall ZwCancelDeviceWakeupRequest(ptr) +@ stdcall ZwCancelIoFile(long ptr) NtCancelIoFile +@ stdcall ZwCancelTimer(long ptr) NtCancelTimer +@ stdcall ZwClearEvent(long) NtClearEvent +@ stdcall ZwClose(long) NtClose +@ stdcall ZwCloseObjectAuditAlarm(ptr ptr long) +@ stdcall ZwCompactKeys(long ptr) NtCompactKeys +@ stdcall ZwCompareTokens(ptr ptr ptr) NtCompareTokens +@ stdcall ZwCompleteConnectPort(ptr) NtCompleteConnectPort +@ stdcall ZwCompressKey(ptr) NtCompressKey +@ stdcall ZwConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr) NtConnectPort +@ stdcall ZwContinue(ptr long) NtContinue +@ stdcall ZwCreateDebugObject(ptr long ptr long) NtCreateDebugObject +@ stdcall ZwCreateDirectoryObject(long long long) NtCreateDirectoryObject +@ stdcall ZwCreateEvent(long long long long long) NtCreateEvent +@ stdcall ZwCreateEventPair(ptr long ptr) NtCreateEventPair +@ stdcall ZwCreateFile(ptr long ptr ptr long long long ptr long long ptr) NtCreateFile +@ stdcall ZwCreateIoCompletion(ptr long ptr long) NtCreateIoCompletion +@ stdcall ZwCreateJobObject(ptr long ptr) NtCreateJobObject +@ stdcall ZwCreateJobSet(long ptr long) NtCreateJobSet +@ stdcall ZwCreateKey(ptr long ptr long ptr long long) NtCreateKey +@ stdcall ZwCreateKeyedEvent(ptr long ptr long) NtCreateKeyedEvent +@ stdcall ZwCreateMailslotFile(long long long long long long long long) NtCreateMailslotFile +@ stdcall ZwCreateMutant(ptr long ptr long) NtCreateMutant +@ stdcall ZwCreateNamedPipeFile(ptr long ptr ptr long long long long long long long long long ptr) NtCreateNamedPipeFile +@ stdcall ZwCreatePagingFile(long long long long) NtCreatePagingFile +@ stdcall ZwCreatePort(ptr ptr long long long) NtCreatePort +@ stdcall ZwCreateProcess(ptr long ptr ptr long ptr ptr ptr) +@ stdcall ZwCreateProcessEx(ptr long ptr ptr long ptr ptr ptr long) NtCreateProcessEx +@ stdcall ZwCreateProfile(ptr ptr ptr long long ptr long long long) NtCreateProfile ; CHECKME +@ stdcall ZwCreateSection(ptr long ptr ptr long long long) NtCreateSection +@ stdcall ZwCreateSemaphore(ptr long ptr long long) NtCreateSemaphore +@ stdcall ZwCreateSymbolicLinkObject(ptr long ptr ptr) NtCreateSymbolicLinkObject +@ stdcall ZwCreateThread(ptr long ptr ptr ptr ptr ptr long) +@ stdcall ZwCreateTimer(ptr long ptr long) NtCreateTimer +@ stdcall ZwCreateToken(ptr long ptr long ptr ptr ptr ptr ptr ptr ptr ptr ptr) +@ stdcall ZwCreateWaitablePort(ptr ptr long long long) NtCreateWaitablePort +@ stdcall ZwDebugActiveProcess(ptr ptr) NtDebugActiveProcess +@ stdcall ZwDebugContinue(ptr ptr long) NtDebugContinue +@ stdcall ZwDelayExecution(long ptr) NtDelayExecution +@ stdcall ZwDeleteAtom(long) NtDeleteAtom +@ stdcall ZwDeleteBootEntry(long) NtDeleteBootEntry +@ stdcall ZwDeleteDriverEntry(long) +@ stdcall ZwDeleteFile(ptr) NtDeleteFile +@ stdcall ZwDeleteKey(long) NtDeleteKey +@ stdcall ZwDeleteObjectAuditAlarm(ptr ptr long) +@ stdcall ZwDeleteValueKey(long ptr) NtDeleteValueKey +@ stdcall ZwDeviceIoControlFile(long long long long long long long long long long) NtDeviceIoControlFile +@ stdcall ZwDisplayString(ptr) NtDisplayString +@ stdcall ZwDuplicateObject(long long long ptr long long long) NtDuplicateObject +@ stdcall ZwDuplicateToken(long long long long long long) NtDuplicateToken +@ stdcall ZwEnumerateBootEntries(ptr ptr) +@ stdcall ZwEnumerateDriverEntries(ptr ptr) +@ stdcall ZwEnumerateKey(long long long ptr long ptr) NtEnumerateKey +@ stdcall ZwEnumerateSystemEnvironmentValuesEx(long ptr long) NtEnumerateSystemEnvironmentValuesEx +@ stdcall ZwEnumerateValueKey(long long long ptr long ptr) NtEnumerateValueKey +@ stdcall ZwExtendSection(ptr ptr) NtExtendSection +@ stdcall ZwFilterToken(ptr long ptr ptr ptr ptr) NtFilterToken +@ stdcall ZwFindAtom(ptr long ptr) NtFindAtom +@ stdcall ZwFlushBuffersFile(long ptr) NtFlushBuffersFile +@ stdcall ZwFlushInstructionCache(long ptr long) NtFlushInstructionCache +@ stdcall ZwFlushKey(long) NtFlushKey +@ stdcall ZwFlushVirtualMemory(long ptr ptr long) NtFlushVirtualMemory +@ stdcall ZwFlushWriteBuffer() +@ stdcall ZwFreeUserPhysicalPages(ptr ptr ptr) +@ stdcall ZwFreeVirtualMemory(long ptr ptr long) NtFreeVirtualMemory +@ stdcall ZwFsControlFile(long long long long long long long long long long) NtFsControlFile +@ stdcall ZwGetContextThread(long ptr) NtGetContextThread +@ stdcall ZwGetCurrentProcessorNumber() +@ stdcall ZwGetDevicePowerState(ptr ptr) +@ stdcall ZwGetPlugPlayEvent(long long ptr long) +@ stdcall ZwGetWriteWatch(long long ptr long ptr ptr ptr) NtGetWriteWatch +@ stdcall ZwImpersonateAnonymousToken(ptr) +@ stdcall ZwImpersonateClientOfPort(ptr ptr) NtImpersonateClientOfPort +@ stdcall ZwImpersonateThread(ptr ptr ptr) NtImpersonateThread +@ stdcall ZwInitializeRegistry(long) +@ stdcall ZwInitiatePowerAction(long long long long) NtInitiatePowerAction +@ stdcall ZwIsProcessInJob(long long) NtIsProcessInJob +@ stdcall ZwIsSystemResumeAutomatic() +@ stdcall ZwListenPort(ptr ptr) NtListenPort +@ stdcall ZwLoadDriver(ptr) NtLoadDriver +@ stdcall ZwLoadKey2(ptr ptr long) NtLoadKey2 +@ stdcall ZwLoadKey(ptr ptr) NtLoadKey +@ stdcall ZwLoadKeyEx(ptr ptr long ptr) +@ stdcall ZwLockFile(long long ptr ptr ptr ptr ptr ptr long long) NtLockFile +@ stdcall ZwLockProductActivationKeys(ptr ptr) NtLockProductActivationKeys +@ stdcall ZwLockRegistryKey(ptr) NtLockRegistryKey +@ stdcall ZwLockVirtualMemory(long ptr ptr long) NtLockVirtualMemory +@ stdcall ZwMakePermanentObject(ptr) NtMakePermanentObject +@ stdcall ZwMakeTemporaryObject(long) NtMakeTemporaryObject +@ stdcall ZwMapUserPhysicalPages(ptr ptr ptr) +@ stdcall ZwMapUserPhysicalPagesScatter(ptr ptr ptr) +@ stdcall ZwMapViewOfSection(long long ptr long long ptr ptr long long long) NtMapViewOfSection +@ stdcall ZwModifyBootEntry(ptr) NtModifyBootEntry +@ stdcall ZwModifyDriverEntry(ptr) +@ stdcall ZwNotifyChangeDirectoryFile(long long ptr ptr ptr ptr long long long) NtNotifyChangeDirectoryFile +@ stdcall ZwNotifyChangeKey(long long ptr ptr ptr long long ptr long long) NtNotifyChangeKey +@ stdcall ZwNotifyChangeMultipleKeys(ptr long ptr ptr ptr ptr ptr long long ptr long long) NtNotifyChangeMultipleKeys +@ stdcall ZwOpenDirectoryObject(long long long) NtOpenDirectoryObject +@ stdcall ZwOpenEvent(long long long) NtOpenEvent +@ stdcall ZwOpenEventPair(ptr long ptr) NtOpenEventPair +@ stdcall ZwOpenFile(ptr long ptr ptr long long) NtOpenFile +@ stdcall ZwOpenIoCompletion(ptr long ptr) NtOpenIoCompletion +@ stdcall ZwOpenJobObject(ptr long ptr) NtOpenJobObject +@ stdcall ZwOpenKey(ptr long ptr) NtOpenKey +@ stdcall ZwOpenKeyedEvent(ptr long ptr) NtOpenKeyedEvent +@ stdcall ZwOpenMutant(ptr long ptr) NtOpenMutant +@ stdcall ZwOpenObjectAuditAlarm(ptr ptr ptr ptr ptr ptr long long ptr long long ptr) +@ stdcall ZwOpenProcess(ptr long ptr ptr) NtOpenProcess +@ stdcall ZwOpenProcessToken(long long ptr) NtOpenProcessToken +@ stdcall ZwOpenProcessTokenEx(long long long ptr) NtOpenProcessTokenEx +@ stdcall ZwOpenSection(ptr long ptr) NtOpenSection +@ stdcall ZwOpenSemaphore(long long ptr) NtOpenSemaphore +@ stdcall ZwOpenSymbolicLinkObject (ptr long ptr) NtOpenSymbolicLinkObject +@ stdcall ZwOpenThread(ptr long ptr ptr) NtOpenThread +@ stdcall ZwOpenThreadToken(long long long ptr) NtOpenThreadToken +@ stdcall ZwOpenThreadTokenEx(long long long long ptr) NtOpenThreadTokenEx +@ stdcall ZwOpenTimer(ptr long ptr) NtOpenTimer +@ stdcall ZwPlugPlayControl(ptr ptr long) +@ stdcall ZwPowerInformation(long ptr long ptr long) NtPowerInformation +@ stdcall ZwPrivilegeCheck(ptr ptr ptr) NtPrivilegeCheck +@ stdcall ZwPrivilegeObjectAuditAlarm(ptr ptr ptr long ptr long) +@ stdcall ZwPrivilegedServiceAuditAlarm(ptr ptr ptr ptr long) +@ stdcall ZwProtectVirtualMemory(long ptr ptr long ptr) NtProtectVirtualMemory +@ stdcall ZwPulseEvent(long ptr) NtPulseEvent +@ stdcall ZwQueryAttributesFile(ptr ptr) NtQueryAttributesFile +@ stdcall ZwQueryBootEntryOrder(ptr ptr) NtQueryBootEntryOrder +@ stdcall ZwQueryBootOptions(ptr ptr) NtQueryBootOptions +@ stdcall ZwQueryDebugFilterState(long long) NtQueryDebugFilterState +@ stdcall ZwQueryDefaultLocale(long ptr) NtQueryDefaultLocale +@ stdcall ZwQueryDefaultUILanguage(ptr) NtQueryDefaultUILanguage +@ stdcall ZwQueryDirectoryFile(long long ptr ptr ptr ptr long long long ptr long) NtQueryDirectoryFile +@ stdcall ZwQueryDirectoryObject(long ptr long long long ptr ptr) NtQueryDirectoryObject +@ stdcall ZwQueryDriverEntryOrder(ptr ptr) +@ stdcall ZwQueryEaFile(long ptr ptr long long ptr long ptr long) NtQueryEaFile +@ stdcall ZwQueryEvent(long long ptr long ptr) NtQueryEvent +@ stdcall ZwQueryFullAttributesFile(ptr ptr) NtQueryFullAttributesFile +@ stdcall ZwQueryInformationAtom(long long ptr long ptr) NtQueryInformationAtom +@ stdcall ZwQueryInformationFile(long ptr ptr long long) NtQueryInformationFile +@ stdcall ZwQueryInformationJobObject(long long ptr long ptr) NtQueryInformationJobObject +@ stdcall ZwQueryInformationPort(ptr long ptr long ptr) NtQueryInformationPort +@ stdcall ZwQueryInformationProcess(long long ptr long ptr) NtQueryInformationProcess +@ stdcall ZwQueryInformationThread(long long ptr long ptr) NtQueryInformationThread +@ stdcall ZwQueryInformationToken(long long ptr long ptr) NtQueryInformationToken +@ stdcall ZwQueryInstallUILanguage(ptr) NtQueryInstallUILanguage +@ stdcall ZwQueryIntervalProfile(long ptr) NtQueryIntervalProfile +@ stdcall ZwQueryIoCompletion(long long ptr long ptr) NtQueryIoCompletion +@ stdcall ZwQueryKey(long long ptr long ptr) NtQueryKey +@ stdcall ZwQueryMultipleValueKey(long ptr long ptr long ptr) NtQueryMultipleValueKey +@ stdcall ZwQueryMutant(long long ptr long ptr) NtQueryMutant +@ stdcall ZwQueryObject(long long long long long) NtQueryObject +@ stdcall ZwQueryOpenSubKeys(ptr ptr) NtQueryOpenSubKeys +@ stdcall ZwQueryOpenSubKeysEx(ptr long ptr ptr) +@ stdcall ZwQueryPerformanceCounter (long long) NtQueryPerformanceCounter +@ stdcall ZwQueryPortInformationProcess() NtQueryPortInformationProcess +@ stdcall ZwQueryQuotaInformationFile(ptr ptr ptr long long ptr long ptr long) NtQueryQuotaInformationFile +@ stdcall ZwQuerySection (long long long long long) NtQuerySection +@ stdcall ZwQuerySecurityObject (long long long long long) NtQuerySecurityObject +@ stdcall ZwQuerySemaphore (long long long long long) NtQuerySemaphore +@ stdcall ZwQuerySymbolicLinkObject(long ptr ptr) NtQuerySymbolicLinkObject +@ stdcall ZwQuerySystemEnvironmentValue(ptr ptr long ptr) NtQuerySystemEnvironmentValue +@ stdcall ZwQuerySystemEnvironmentValueEx(ptr ptr ptr ptr ptr) NtQuerySystemEnvironmentValueEx +@ stdcall ZwQuerySystemInformation(long long long long) NtQuerySystemInformation +@ stdcall ZwQuerySystemTime(ptr) NtQuerySystemTime +@ stdcall ZwQueryTimer(ptr long ptr long ptr) NtQueryTimer +@ stdcall ZwQueryTimerResolution(long long long) NtQueryTimerResolution +@ stdcall ZwQueryValueKey(long ptr long ptr long ptr) NtQueryValueKey +@ stdcall ZwQueryVirtualMemory(long ptr long ptr long ptr) NtQueryVirtualMemory +@ stdcall ZwQueryVolumeInformationFile(long ptr ptr long long) NtQueryVolumeInformationFile +@ stdcall ZwQueueApcThread(long ptr long long long) NtQueueApcThread +@ stdcall ZwRaiseException(ptr ptr long) NtRaiseException +@ stdcall ZwRaiseHardError(long long long ptr long ptr) NtRaiseHardError +@ stdcall ZwReadFile(long long ptr ptr ptr ptr long ptr ptr) NtReadFile +@ stdcall ZwReadFileScatter(long long ptr ptr ptr ptr long ptr ptr) NtReadFileScatter +@ stdcall ZwReadRequestData(ptr ptr long ptr long ptr) NtReadRequestData +@ stdcall ZwReadVirtualMemory(long ptr ptr long ptr) NtReadVirtualMemory +@ stdcall ZwRegisterThreadTerminatePort(ptr) NtRegisterThreadTerminatePort +@ stdcall ZwReleaseKeyedEvent(ptr ptr long ptr) NtReleaseKeyedEvent +@ stdcall ZwReleaseMutant(long ptr) NtReleaseMutant +@ stdcall ZwReleaseSemaphore(long long ptr) NtReleaseSemaphore +@ stdcall ZwRemoveIoCompletion(ptr ptr ptr ptr ptr) NtRemoveIoCompletion +@ stdcall ZwRemoveProcessDebug(ptr ptr) NtRemoveProcessDebug +@ stdcall ZwRenameKey(ptr ptr) NtRenameKey +@ stdcall ZwReplaceKey(ptr long ptr) NtReplaceKey +@ stdcall ZwReplyPort(ptr ptr) NtReplyPort +@ stdcall ZwReplyWaitReceivePort(ptr ptr ptr ptr) NtReplyWaitReceivePort +@ stdcall ZwReplyWaitReceivePortEx(ptr ptr ptr ptr ptr) +@ stdcall ZwReplyWaitReplyPort(ptr ptr) +@ stdcall ZwRequestDeviceWakeup(ptr) +@ stdcall ZwRequestPort(ptr ptr) +@ stdcall ZwRequestWaitReplyPort(ptr ptr ptr) +@ stdcall ZwRequestWakeupLatency(long) +@ stdcall ZwResetEvent(long ptr) +@ stdcall ZwResetWriteWatch(long ptr long) +@ stdcall ZwRestoreKey(long long long) +@ stdcall ZwResumeProcess(ptr) +@ stdcall ZwResumeThread(long long) +@ stdcall ZwSaveKey(long long) +@ stdcall ZwSaveKeyEx(ptr ptr long) +@ stdcall ZwSaveMergedKeys(ptr ptr ptr) +@ stdcall ZwSecureConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr ptr) +@ stdcall ZwSetBootEntryOrder(ptr ptr) +@ stdcall ZwSetBootOptions(ptr long) +@ stdcall ZwSetContextThread(long ptr) +@ stdcall ZwSetDebugFilterState(long long long) +@ stdcall ZwSetDefaultHardErrorPort(ptr) +@ stdcall ZwSetDefaultLocale(long long) +@ stdcall ZwSetDefaultUILanguage(long) +@ stdcall ZwSetDriverEntryOrder(ptr ptr) +@ stdcall ZwSetEaFile(long ptr ptr long) +@ stdcall ZwSetEvent(long long) +@ stdcall ZwSetEventBoostPriority(ptr) +@ stdcall ZwSetHighEventPair(ptr) +@ stdcall ZwSetHighWaitLowEventPair(ptr) +@ stdcall ZwSetInformationDebugObject(ptr long ptr long ptr) +@ stdcall ZwSetInformationFile(long long long long long) +@ stdcall ZwSetInformationJobObject(long long ptr long) +@ stdcall ZwSetInformationKey(long long ptr long) +@ stdcall ZwSetInformationObject(long long ptr long) +@ stdcall ZwSetInformationProcess(long long long long) +@ stdcall ZwSetInformationThread(long long ptr long) +@ stdcall ZwSetInformationToken(long long ptr long) +@ stdcall ZwSetIntervalProfile(long long) +@ stdcall ZwSetIoCompletion(ptr long ptr long long) +@ stdcall ZwSetLdtEntries(long int64 long int64) +@ stdcall ZwSetLowEventPair(ptr) +@ stdcall ZwSetLowWaitHighEventPair(ptr) +@ stdcall ZwSetQuotaInformationFile(ptr ptr ptr long) +@ stdcall ZwSetSecurityObject(long long ptr) +@ stdcall ZwSetSystemEnvironmentValue(ptr ptr) +@ stdcall ZwSetSystemEnvironmentValueEx(ptr ptr ptr ptr ptr) NtSetSystemEnvironmentValueEx +@ stdcall ZwSetSystemInformation(long ptr long) +@ stdcall ZwSetSystemPowerState(long long long) +@ stdcall ZwSetSystemTime(ptr ptr) +@ stdcall ZwSetThreadExecutionState(long ptr) +@ stdcall ZwSetTimer(long ptr ptr ptr long long ptr) +@ stdcall ZwSetTimerResolution(long long ptr) +@ stdcall ZwSetUuidSeed(ptr) +@ stdcall ZwSetValueKey(long long long long long long) +@ stdcall ZwSetVolumeInformationFile(long ptr ptr long long) +@ stdcall ZwShutdownSystem(long) +@ stdcall ZwSignalAndWaitForSingleObject(long long long ptr) +@ stdcall ZwStartProfile(ptr) +@ stdcall ZwStopProfile(ptr) +@ stdcall ZwSuspendProcess(ptr) +@ stdcall ZwSuspendThread(long ptr) +@ stdcall ZwSystemDebugControl(long ptr long ptr long ptr) +@ stdcall ZwTerminateJobObject(long long) +@ stdcall ZwTerminateProcess(long long) +@ stdcall ZwTerminateThread(long long) +@ stdcall ZwTestAlert() +@ stdcall ZwTraceEvent(long long long ptr) +@ stdcall ZwTranslateFilePath(ptr long ptr long) +@ stdcall ZwUnloadDriver(ptr) +@ stdcall ZwUnloadKey2(ptr long) +@ stdcall ZwUnloadKey(long) +@ stdcall ZwUnloadKeyEx(ptr ptr) +@ stdcall ZwUnlockFile(long ptr ptr ptr ptr) +@ stdcall ZwUnlockVirtualMemory(long ptr ptr long) +@ stdcall ZwUnmapViewOfSection(long ptr) +@ stdcall ZwVdmControl(long ptr) +@ stdcall ZwWaitForDebugEvent(ptr long ptr ptr) +@ stdcall ZwWaitForKeyedEvent(ptr ptr long ptr) +@ stdcall ZwWaitForMultipleObjects32(long ptr long long ptr) +@ stdcall ZwWaitForMultipleObjects(long ptr long long ptr) +@ stdcall ZwWaitForSingleObject(long long long) +@ stdcall ZwWaitHighEventPair(ptr) +@ stdcall ZwWaitLowEventPair(ptr) +@ stdcall ZwWriteFile(long long ptr ptr ptr ptr long ptr ptr) +@ stdcall ZwWriteFileGather(long long ptr ptr ptr ptr long ptr ptr) +@ stdcall ZwWriteRequestData(ptr ptr long ptr long ptr) +@ stdcall ZwWriteVirtualMemory(long ptr ptr long ptr) +@ stdcall ZwYieldExecution() +@ cdecl -arch=i386 _CIcos() +@ cdecl -arch=i386 _CIlog() +@ cdecl -arch=i386 _CIpow() +@ cdecl -arch=i386 _CIsin() +@ cdecl -arch=i386 _CIsqrt() @ cdecl -arch=x86_64,arm __C_specific_handler(ptr long ptr ptr) @ cdecl -arch=arm __jump_unwind() -1267 cdecl __isascii(long) -1268 cdecl __iscsym(long) -1269 cdecl __iscsymf(long) -1270 cdecl __toascii(long) -1271 cdecl -arch=i386 -ret64 _alldiv(double double) -1272 cdecl -arch=i386 _alldvrm() -1273 cdecl -arch=i386 -ret64 _allmul(double double) -1274 cdecl -arch=i386 -norelay _alloca_probe() -1275 cdecl -arch=i386 -ret64 _allrem(double double) -1276 cdecl -arch=i386 _allshl() -1277 cdecl -arch=i386 _allshr() -1278 cdecl -ret64 _atoi64(str) -1279 cdecl -arch=i386 -ret64 _aulldiv(double double) -1280 cdecl -arch=i386 _aulldvrm() -1281 cdecl -arch=i386 -ret64 _aullrem(double double) -1282 cdecl -arch=i386 _aullshr() -1283 extern -arch=i386 _chkstk -1284 cdecl -arch=i386,x86_64,arm _fltused() -1285 cdecl -arch=i386 -ret64 _ftol() -1286 cdecl _i64toa(double ptr long) -1287 cdecl _i64tow(double ptr long) -1288 cdecl _itoa(long ptr long) -1289 cdecl _itow(long ptr long) -1290 cdecl _lfind(ptr ptr ptr long ptr) +@ cdecl __isascii(long) +@ cdecl __iscsym(long) +@ cdecl __iscsymf(long) +@ cdecl __toascii(long) +@ cdecl -arch=i386 -ret64 _alldiv(double double) +@ cdecl -arch=i386 _alldvrm() +@ cdecl -arch=i386 -ret64 _allmul(double double) +@ cdecl -arch=i386 -norelay _alloca_probe() +@ cdecl -arch=i386 -ret64 _allrem(double double) +@ cdecl -arch=i386 _allshl() +@ cdecl -arch=i386 _allshr() +@ cdecl -ret64 _atoi64(str) +@ cdecl -arch=i386 -ret64 _aulldiv(double double) +@ cdecl -arch=i386 _aulldvrm() +@ cdecl -arch=i386 -ret64 _aullrem(double double) +@ cdecl -arch=i386 _aullshr() +@ extern -arch=i386 _chkstk +@ cdecl -arch=i386,x86_64,arm _fltused() +@ cdecl -arch=i386 -ret64 _ftol() +@ cdecl _i64toa(double ptr long) +@ cdecl _i64tow(double ptr long) +@ cdecl _itoa(long ptr long) +@ cdecl _itow(long ptr long) +@ cdecl _lfind(ptr ptr ptr long ptr) @ cdecl -arch=x86_64 _local_unwind() -1291 cdecl _ltoa(long ptr long) -1292 cdecl _ltow(long ptr long) -1293 cdecl _memccpy(ptr ptr long long) -1294 cdecl _memicmp(str str long) +@ cdecl _ltoa(long ptr long) +@ cdecl _ltow(long ptr long) +@ cdecl _memccpy(ptr ptr long long) +@ cdecl _memicmp(str str long) @ cdecl -arch=x86_64 _setjmp(ptr ptr) @ cdecl -arch=x86_64 _setjmpex(ptr ptr) -1295 varargs _snprintf(ptr long str) -1296 varargs _snwprintf(ptr long wstr) -1297 cdecl _splitpath(str ptr ptr ptr ptr) -1298 cdecl _strcmpi(str str) _stricmp -1299 cdecl _stricmp(str str) -1300 cdecl _strlwr(str) -1301 cdecl _strnicmp(str str long) -1302 cdecl _strupr(str) -1303 cdecl _tolower(long) -1304 cdecl _toupper(long) -1305 cdecl _ui64toa(double ptr long) -1306 cdecl _ui64tow(double ptr long) -1307 cdecl _ultoa(long ptr long) -1308 cdecl _ultow(long ptr long) -1309 cdecl _vscwprintf(wstr ptr) -1310 cdecl _vsnprintf(ptr long str ptr) -1311 cdecl _vsnwprintf(ptr long wstr ptr) -1312 cdecl _wcsicmp(wstr wstr) -1313 cdecl _wcslwr(wstr) -1314 cdecl _wcsnicmp(wstr wstr long) -1315 cdecl _wcstoui64(wstr ptr long) -1316 cdecl _wcsupr(wstr) -1317 cdecl _wtoi(wstr) -1318 cdecl _wtoi64(wstr) -1319 cdecl _wtol(wstr) -1320 cdecl abs(long) -1321 cdecl -arch=i386,x86_64 atan(double) -1322 cdecl atoi(str) -1323 cdecl atol(str) -1324 cdecl bsearch(ptr ptr long long ptr) -1325 cdecl ceil(double) -1326 cdecl cos(double) -1327 cdecl fabs(double) -1328 cdecl floor(double) -1329 cdecl isalnum(long) -1330 cdecl isalpha(long) -1331 cdecl iscntrl(long) -1332 cdecl isdigit(long) -1333 cdecl isgraph(long) -1334 cdecl islower(long) -1335 cdecl isprint(long) -1336 cdecl ispunct(long) -1337 cdecl isspace(long) -1338 cdecl isupper(long) -1339 cdecl iswalpha(long) -1340 cdecl iswctype(long long) -1341 cdecl iswdigit(long) -1342 cdecl iswlower(long) -1343 cdecl iswspace(long) -1344 cdecl iswxdigit(long) -1345 cdecl isxdigit(long) -1346 cdecl labs(long) -1347 cdecl -arch=i386,x86_64 log(double) +@ varargs _snprintf(ptr long str) +@ varargs _snwprintf(ptr long wstr) +@ cdecl _splitpath(str ptr ptr ptr ptr) +@ cdecl _strcmpi(str str) _stricmp +@ cdecl _stricmp(str str) +@ cdecl _strlwr(str) +@ cdecl _strnicmp(str str long) +@ cdecl _strupr(str) +@ cdecl _tolower(long) +@ cdecl _toupper(long) +@ cdecl _ui64toa(double ptr long) +@ cdecl _ui64tow(double ptr long) +@ cdecl _ultoa(long ptr long) +@ cdecl _ultow(long ptr long) +@ cdecl _vscwprintf(wstr ptr) +@ cdecl _vsnprintf(ptr long str ptr) +@ cdecl _vsnwprintf(ptr long wstr ptr) +@ cdecl _wcsicmp(wstr wstr) +@ cdecl _wcslwr(wstr) +@ cdecl _wcsnicmp(wstr wstr long) +@ cdecl _wcstoui64(wstr ptr long) +@ cdecl _wcsupr(wstr) +@ cdecl _wtoi(wstr) +@ cdecl _wtoi64(wstr) +@ cdecl _wtol(wstr) +@ cdecl abs(long) +@ cdecl -arch=i386,x86_64 atan(double) +@ cdecl atoi(str) +@ cdecl atol(str) +@ cdecl bsearch(ptr ptr long long ptr) +@ cdecl ceil(double) +@ cdecl cos(double) +@ cdecl fabs(double) +@ cdecl floor(double) +@ cdecl isalnum(long) +@ cdecl isalpha(long) +@ cdecl iscntrl(long) +@ cdecl isdigit(long) +@ cdecl isgraph(long) +@ cdecl islower(long) +@ cdecl isprint(long) +@ cdecl ispunct(long) +@ cdecl isspace(long) +@ cdecl isupper(long) +@ cdecl iswalpha(long) +@ cdecl iswctype(long long) +@ cdecl iswdigit(long) +@ cdecl iswlower(long) +@ cdecl iswspace(long) +@ cdecl iswxdigit(long) +@ cdecl isxdigit(long) +@ cdecl labs(long) +@ cdecl -arch=i386,x86_64 log(double) @ cdecl -arch=x86_64 longjmp(ptr) -1348 cdecl mbstowcs(ptr str long) -1349 cdecl memchr(ptr long long) -1350 cdecl memcmp(ptr ptr long) -1351 cdecl memcpy(ptr ptr long) memmove -1352 cdecl memmove(ptr ptr long) -1353 cdecl memset(ptr long long) -1354 cdecl -arch=i386,x86_64,arm pow(double double) -1355 cdecl qsort(ptr long long ptr) -1356 cdecl sin(double) -1357 varargs sprintf(ptr str) -1358 cdecl -arch=i386,x86_64 sqrt(double) -1359 varargs sscanf(str str) -1360 cdecl strcat(str str) -1361 cdecl strchr(str long) -1362 cdecl strcmp(str str) -1363 cdecl strcpy(ptr str) -1364 cdecl strcspn(str str) -1365 cdecl strlen(str) -1366 cdecl strncat(str str long) -1367 cdecl strncmp(str str long) -1368 cdecl strncpy(ptr str long) -1369 cdecl strpbrk(str str) -1370 cdecl strrchr(str long) -1371 cdecl strspn(str str) -1372 cdecl strstr(str str) -1373 cdecl strtol(str ptr long) -1374 cdecl strtoul(str ptr long) -1375 varargs swprintf(ptr wstr) -1376 cdecl -arch=i386,x86_64 tan(double) -1377 cdecl tolower(long) -1378 cdecl toupper(long) -1379 cdecl towlower(long) -1380 cdecl towupper(long) -1381 stdcall vDbgPrintEx(long long str ptr) -1382 stdcall vDbgPrintExWithPrefix(str long long str ptr) -1383 cdecl vsprintf(ptr str ptr) -1384 cdecl wcscat(wstr wstr) -1385 cdecl wcschr(wstr long) -1386 cdecl wcscmp(wstr wstr) -1387 cdecl wcscpy(ptr wstr) -1388 cdecl wcscspn(wstr wstr) -1389 cdecl wcslen(wstr) -1390 cdecl wcsncat(wstr wstr long) -1391 cdecl wcsncmp(wstr wstr long) -1392 cdecl wcsncpy(ptr wstr long) -1393 cdecl wcspbrk(wstr wstr) -1394 cdecl wcsrchr(wstr long) -1395 cdecl wcsspn(wstr wstr) -1396 cdecl wcsstr(wstr wstr) -1397 cdecl wcstol(wstr ptr long) -1398 cdecl wcstombs(ptr ptr long) -1399 cdecl wcstoul(wstr ptr long) +@ cdecl mbstowcs(ptr str long) +@ cdecl memchr(ptr long long) +@ cdecl memcmp(ptr ptr long) +@ cdecl memcpy(ptr ptr long) memmove +@ cdecl memmove(ptr ptr long) +@ cdecl memset(ptr long long) +@ cdecl -arch=i386,x86_64,arm pow(double double) +@ cdecl qsort(ptr long long ptr) +@ cdecl sin(double) +@ varargs sprintf(ptr str) +@ cdecl -arch=i386,x86_64 sqrt(double) +@ varargs sscanf(str str) +@ cdecl strcat(str str) +@ cdecl strchr(str long) +@ cdecl strcmp(str str) +@ cdecl strcpy(ptr str) +@ cdecl strcspn(str str) +@ cdecl strlen(str) +@ cdecl strncat(str str long) +@ cdecl strncmp(str str long) +@ cdecl strncpy(ptr str long) +@ cdecl strpbrk(str str) +@ cdecl strrchr(str long) +@ cdecl strspn(str str) +@ cdecl strstr(str str) +@ cdecl strtol(str ptr long) +@ cdecl strtoul(str ptr long) +@ varargs swprintf(ptr wstr) +@ cdecl -arch=i386,x86_64 tan(double) +@ cdecl tolower(long) +@ cdecl toupper(long) +@ cdecl towlower(long) +@ cdecl towupper(long) +@ stdcall vDbgPrintEx(long long str ptr) +@ stdcall vDbgPrintExWithPrefix(str long long str ptr) +@ cdecl vsprintf(ptr str ptr) +@ cdecl wcscat(wstr wstr) +@ cdecl wcschr(wstr long) +@ cdecl wcscmp(wstr wstr) +@ cdecl wcscpy(ptr wstr) +@ cdecl wcscspn(wstr wstr) +@ cdecl wcslen(wstr) +@ cdecl wcsncat(wstr wstr long) +@ cdecl wcsncmp(wstr wstr long) +@ cdecl wcsncpy(ptr wstr long) +@ cdecl wcspbrk(wstr wstr) +@ cdecl wcsrchr(wstr long) +@ cdecl wcsspn(wstr wstr) +@ cdecl wcsstr(wstr wstr) +@ cdecl wcstol(wstr ptr long) +@ cdecl wcstombs(ptr ptr long) +@ cdecl wcstoul(wstr ptr long)
# FIXME: check if this is correct @ stdcall -arch=arm __dtoi64()