1 ; $Id: ntdll.edf,v 1.112 2004/06/27 12:21:14 ekohl Exp $
3 ; ReactOS Operating System
8 CsrCaptureParameterBuffer=CsrCaptureParameterBuffer@16
9 CsrReleaseParameterBuffer=CsrReleaseParameterBuffer@4
10 CsrAllocateCaptureBuffer=CsrAllocateCaptureBuffer@12
11 CsrAllocateCapturePointer=CsrAllocateCapturePointer@12
12 CsrAllocateMessagePointer=CsrAllocateMessagePointer@12
13 CsrCaptureMessageBuffer=CsrCaptureMessageBuffer@16
14 CsrCaptureMessageString=CsrCaptureMessageString@20
15 CsrCaptureTimeout=CsrCaptureTimeout@8
16 CsrClientCallServer=CsrClientCallServer@16
17 CsrClientConnectToServer=CsrClientConnectToServer@0
18 CsrFreeCaptureBuffer=CsrFreeCaptureBuffer@4
19 CsrIdentifyAlertableThread=CsrIdentifyAlertableThread@0
20 CsrIsCsrss=CsrIsCsrss@0
21 CsrNewThread=CsrNewThread@0
22 CsrProbeForRead=CsrProbeForRead@12
23 CsrProbeForWrite=CsrProbeForWrite@12
24 CsrSetPriorityClass=CsrSetPriorityClass@8
25 DbgBreakPoint=DbgBreakPoint@0
27 DbgPrompt=DbgPrompt@12
28 DbgSsHandleKmApiMsg=DbgSsHandleKmApiMsg@8
29 DbgSsInitialize=DbgSsInitialize@16
30 DbgUiConnectToDbg=DbgUiConnectToDbg@0
31 DbgUiContinue=DbgUiContinue@8
32 DbgUiIssueRemoteBreakin=DbgUiIssueRemoteBreakin@4
33 DbgUiRemoteBreakin=DbgUiRemoteBreakin@0
34 DbgUiWaitStateChange=DbgUiWaitStateChange@8
35 DbgUserBreakPoint=DbgUserBreakPoint@0
36 InterlockedIncrement=InterlockedIncrement@4
37 InterlockedDecrement=InterlockedDecrement@4
38 InterlockedExchange=InterlockedExchange@8
39 InterlockedCompareExchange=InterlockedCompareExchange@12
40 KiRaiseUserExceptionDispatcher=KiRaiseUserExceptionDispatcher@0
41 KiUserApcDispatcher=KiUserApcDispatcher@20
42 KiUserCallbackDispatcher=KiUserCallbackDispatcher@12
43 KiUserExceptionDispatcher=KiUserExceptionDispatcher@8
44 LdrAccessResource=LdrAccessResource@16
45 LdrDisableThreadCalloutsForDll=LdrDisableThreadCalloutsForDll@4
47 LdrFindEntryForAddress=LdrFindEntryForAddress@8
48 LdrFindResourceDirectory_U=LdrFindResourceDirectory_U@16
49 LdrFindResource_U=LdrFindResource_U@16
50 LdrGetDllHandle=LdrGetDllHandle@16
51 LdrGetProcedureAddress=LdrGetProcedureAddress@16
52 LdrInitializeThunk=LdrInitializeThunk@16
53 LdrLoadDll=LdrLoadDll@16
54 LdrProcessRelocationBlock=LdrProcessRelocationBlock@16
55 LdrQueryImageFileExecutionOptions=LdrQueryImageFileExecutionOptions@24
56 LdrQueryProcessModuleInformation=LdrQueryProcessModuleInformation@12
57 LdrShutdownProcess=LdrShutdownProcess@0
58 LdrShutdownThread=LdrShutdownThread@0
59 LdrUnloadDll=LdrUnloadDll@4
60 LdrVerifyImageMatchesChecksum=LdrVerifyImageMatchesChecksum@16
63 NlsMbOemCodePageTag DATA
64 NtAcceptConnectPort=NtAcceptConnectPort@24
65 NtAccessCheck=NtAccessCheck@32
66 NtAccessCheckAndAuditAlarm=NtAccessCheckAndAuditAlarm@44
67 NtAddAtom=NtAddAtom@12
68 NtAdjustGroupsToken=NtAdjustGroupsToken@24
69 NtAdjustPrivilegesToken=NtAdjustPrivilegesToken@24
70 NtAlertResumeThread=NtAlertResumeThread@8
71 NtAlertThread=NtAlertThread@4
72 NtAllocateLocallyUniqueId=NtAllocateLocallyUniqueId@4
73 NtAllocateUuids=NtAllocateUuids@12
74 NtAllocateVirtualMemory=NtAllocateVirtualMemory@24
75 NtCallbackReturn=NtCallbackReturn@12
76 NtCancelIoFile=NtCancelIoFile@8
77 NtCancelTimer=NtCancelTimer@8
78 NtClearEvent=NtClearEvent@4
80 NtCloseObjectAuditAlarm=NtCloseObjectAuditAlarm@12
81 NtCompleteConnectPort=NtCompleteConnectPort@4
82 NtConnectPort=NtConnectPort@32
83 NtContinue=NtContinue@8
84 NtCreateChannel=NtCreateChannel@8
85 NtCreateDirectoryObject=NtCreateDirectoryObject@12
86 NtCreateEvent=NtCreateEvent@20
87 NtCreateEventPair=NtCreateEventPair@12
88 NtCreateFile=NtCreateFile@44
89 NtCreateIoCompletion=NtCreateIoCompletion@16
90 NtCreateKey=NtCreateKey@28
91 NtCreateMailslotFile=NtCreateMailslotFile@32
92 NtCreateMutant=NtCreateMutant@16
93 NtCreateNamedPipeFile=NtCreateNamedPipeFile@56
94 NtCreatePagingFile=NtCreatePagingFile@16
95 NtCreatePort=NtCreatePort@20
96 NtCreateProcess=NtCreateProcess@32
97 NtCreateProfile=NtCreateProfile@36
98 NtCreateSection=NtCreateSection@28
99 NtCreateSemaphore=NtCreateSemaphore@20
100 NtCreateSymbolicLinkObject=NtCreateSymbolicLinkObject@16
101 NtCreateThread=NtCreateThread@32
102 NtCreateTimer=NtCreateTimer@16
103 NtCreateToken=NtCreateToken@52
104 NtCreateWaitablePort=NtCreateWaitablePort@20
105 NtCurrentTeb=_NtCurrentTeb@0
106 NtDelayExecution=NtDelayExecution@8
107 NtDeleteAtom=NtDeleteAtom@4
108 NtDeleteFile=NtDeleteFile@4
109 NtDeleteKey=NtDeleteKey@4
110 NtDeleteObjectAuditAlarm=NtDeleteObjectAuditAlarm@12
111 NtDeleteValueKey=NtDeleteValueKey@8
112 NtDeviceIoControlFile=NtDeviceIoControlFile@40
113 NtDisplayString=NtDisplayString@4
114 NtDuplicateObject=NtDuplicateObject@28
115 NtDuplicateToken=NtDuplicateToken@24
116 NtEnumerateKey=NtEnumerateKey@24
117 NtEnumerateValueKey=NtEnumerateValueKey@24
118 NtExtendSection=NtExtendSection@8
119 NtFindAtom=NtFindAtom@12
120 NtFlushBuffersFile=NtFlushBuffersFile@8
121 NtFlushInstructionCache=NtFlushInstructionCache@12
122 NtFlushKey=NtFlushKey@4
123 NtFlushVirtualMemory=NtFlushVirtualMemory@16
124 NtFlushWriteBuffer=NtFlushWriteBuffer@0
125 NtFreeVirtualMemory=NtFreeVirtualMemory@16
126 NtFsControlFile=NtFsControlFile@40
127 NtGetContextThread=NtGetContextThread@8
128 NtGetPlugPlayEvent=NtGetPlugPlayEvent@16
129 NtGetTickCount=NtGetTickCount@0
130 NtImpersonateClientOfPort=NtImpersonateClientOfPort@8
131 NtImpersonateThread=NtImpersonateThread@12
132 NtInitializeRegistry=NtInitializeRegistry@4
133 NtListenChannel=NtListenChannel@8
134 NtListenPort=NtListenPort@8
135 NtLoadDriver=NtLoadDriver@4
136 NtLoadKey=NtLoadKey@8
137 NtLoadKey2=NtLoadKey2@12
138 NtLockFile=NtLockFile@40
139 NtLockVirtualMemory=NtLockVirtualMemory@16
140 NtMakeTemporaryObject=NtMakeTemporaryObject@4
141 NtMapViewOfSection=NtMapViewOfSection@40
142 NtNotifyChangeDirectoryFile=NtNotifyChangeDirectoryFile@36
143 NtNotifyChangeKey=NtNotifyChangeKey@40
144 NtOpenChannel=NtOpenChannel@8
145 NtOpenDirectoryObject=NtOpenDirectoryObject@12
146 NtOpenEvent=NtOpenEvent@12
147 NtOpenEventPair=NtOpenEventPair@12
148 NtOpenFile=NtOpenFile@24
149 NtOpenIoCompletion=NtOpenIoCompletion@12
150 NtOpenKey=NtOpenKey@12
151 NtOpenMutant=NtOpenMutant@12
152 NtOpenObjectAuditAlarm=NtOpenObjectAuditAlarm@48
153 NtOpenProcess=NtOpenProcess@16
154 NtOpenProcessToken=NtOpenProcessToken@12
155 NtOpenSection=NtOpenSection@12
156 NtOpenSemaphore=NtOpenSemaphore@12
157 NtOpenSymbolicLinkObject=NtOpenSymbolicLinkObject@12
158 NtOpenThread=NtOpenThread@16
159 NtOpenThreadToken=NtOpenThreadToken@16
160 NtOpenTimer=NtOpenTimer@12
161 NtPlugPlayControl=NtPlugPlayControl@16
162 NtPrivilegeCheck=NtPrivilegeCheck@12
163 NtPrivilegedServiceAuditAlarm=NtPrivilegedServiceAuditAlarm@20
164 NtPrivilegeObjectAuditAlarm=NtPrivilegeObjectAuditAlarm@24
165 NtProtectVirtualMemory=NtProtectVirtualMemory@20
166 NtPulseEvent=NtPulseEvent@8
167 NtQueryAttributesFile=NtQueryAttributesFile@8
168 NtQueryDefaultLocale=NtQueryDefaultLocale@8
169 NtQueryDirectoryFile=NtQueryDirectoryFile@44
170 NtQueryDirectoryObject=NtQueryDirectoryObject@28
171 NtQueryEaFile=NtQueryEaFile@36
172 NtQueryEvent=NtQueryEvent@20
173 NtQueryFullAttributesFile=NtQueryFullAttributesFile@8
174 NtQueryInformationAtom=NtQueryInformationAtom@20
175 NtQueryInformationFile=NtQueryInformationFile@20
176 NtQueryInformationPort=NtQueryInformationPort@20
177 NtQueryInformationProcess=NtQueryInformationProcess@20
178 NtQueryInformationThread=NtQueryInformationThread@20
179 NtQueryInformationToken=NtQueryInformationToken@20
180 NtQueryIoCompletion=NtQueryIoCompletion@20
181 NtQueryIntervalProfile=NtQueryIntervalProfile@8
182 NtQueryKey=NtQueryKey@20
183 NtQueryMultipleValueKey=NtQueryMultipleValueKey@24
184 NtQueryMutant=NtQueryMutant@20
185 NtQueryObject=NtQueryObject@20
186 NtQueryOleDirectoryFile=NtQueryOleDirectoryFile@44
187 NtQueryPerformanceCounter=NtQueryPerformanceCounter@8
188 NtQuerySection=NtQuerySection@20
189 NtQuerySecurityObject=NtQuerySecurityObject@20
190 NtQuerySemaphore=NtQuerySemaphore@20
191 NtQuerySymbolicLinkObject=NtQuerySymbolicLinkObject@12
192 NtQuerySystemEnvironmentValue=NtQuerySystemEnvironmentValue@16
193 NtQuerySystemInformation=NtQuerySystemInformation@16
194 NtQuerySystemTime=NtQuerySystemTime@4
195 NtQueryTimer=NtQueryTimer@20
196 NtQueryTimerResolution=NtQueryTimerResolution@12
197 NtQueryValueKey=NtQueryValueKey@24
198 NtQueryVirtualMemory=NtQueryVirtualMemory@24
199 NtQueryVolumeInformationFile=NtQueryVolumeInformationFile@20
200 NtQueueApcThread=NtQueueApcThread@20
201 NtRaiseException=NtRaiseException@12
202 NtRaiseHardError=NtRaiseHardError@24
203 NtReadFile=NtReadFile@36
204 NtReadFileScatter=NtReadFileScatter@36
205 NtReadRequestData=NtReadRequestData@24
206 NtReadVirtualMemory=NtReadVirtualMemory@20
207 NtRegisterThreadTerminatePort=NtRegisterThreadTerminatePort@4
208 NtReleaseMutant=NtReleaseMutant@8
209 NtReleaseSemaphore=NtReleaseSemaphore@12
210 NtRemoveIoCompletion=NtRemoveIoCompletion@20
211 NtReplaceKey=NtReplaceKey@12
212 NtReplyPort=NtReplyPort@8
213 NtReplyWaitReceivePort=NtReplyWaitReceivePort@16
214 NtReplyWaitReplyPort=NtReplyWaitReplyPort@8
215 NtReplyWaitSendChannel=NtReplyWaitSendChannel@12
216 NtRequestPort=NtRequestPort@8
217 NtRequestWaitReplyPort=NtRequestWaitReplyPort@12
218 NtResetEvent=NtResetEvent@8
219 NtRestoreKey=NtRestoreKey@12
220 NtResumeThread=NtResumeThread@8
221 NtSaveKey=NtSaveKey@8
222 NtSendWaitReplyChannel=NtSendWaitReplyChannel@16
223 NtSetContextChannel=NtSetContextChannel@4
224 NtSetContextThread=NtSetContextThread@8
225 NtSetDefaultHardErrorPort=NtSetDefaultHardErrorPort@4
226 NtSetDefaultLocale=NtSetDefaultLocale@8
227 NtSetEaFile=NtSetEaFile@16
228 NtSetEvent=NtSetEvent@8
229 NtSetHighEventPair=NtSetHighEventPair@4
230 NtSetHighWaitLowEventPair=NtSetHighWaitLowEventPair@4
231 NtSetHighWaitLowThread=NtSetHighWaitLowThread@0
232 NtSetInformationFile=NtSetInformationFile@20
233 NtSetInformationKey=NtSetInformationKey@16
234 NtSetInformationObject=NtSetInformationObject@16
235 NtSetInformationProcess=NtSetInformationProcess@16
236 NtSetInformationThread=NtSetInformationThread@16
237 NtSetInformationToken=NtSetInformationToken@16
238 NtSetIntervalProfile=NtSetIntervalProfile@8
239 NtSetIoCompletion=NtSetIoCompletion@20
240 NtSetLdtEntries=NtSetLdtEntries@24
241 NtSetLowEventPair=NtSetLowEventPair@4
242 NtSetLowWaitHighEventPair=NtSetLowWaitHighEventPair@4
243 NtSetLowWaitHighThread=NtSetLowWaitHighThread@0
244 NtSetSecurityObject=NtSetSecurityObject@12
245 NtSetSystemEnvironmentValue=NtSetSystemEnvironmentValue@8
246 NtSetSystemInformation=NtSetSystemInformation@12
247 NtSetSystemPowerState=NtSetSystemPowerState@12
248 NtSetSystemTime=NtSetSystemTime@8
249 NtSetTimer=NtSetTimer@28
250 NtSetTimerResolution=NtSetTimerResolution@12
251 NtSetValueKey=NtSetValueKey@24
252 NtSetVolumeInformationFile=NtSetVolumeInformationFile@20
253 NtShutdownSystem=NtShutdownSystem@4
254 NtSignalAndWaitForSingleObject=NtSignalAndWaitForSingleObject@16
255 NtStartProfile=NtStartProfile@4
256 NtStopProfile=NtStopProfile@4
257 NtSuspendThread=NtSuspendThread@8
258 NtSystemDebugControl=NtSystemDebugControl@24
259 NtTerminateProcess=NtTerminateProcess@8
260 NtTerminateThread=NtTerminateThread@8
261 NtTestAlert=NtTestAlert@0
262 NtUnloadDriver=NtUnloadDriver@4
263 NtUnloadKey=NtUnloadKey@4
264 NtUnlockFile=NtUnlockFile@20
265 NtUnlockVirtualMemory=NtUnlockVirtualMemory@16
266 NtUnmapViewOfSection=NtUnmapViewOfSection@8
267 NtVdmControl=NtVdmControl@8
268 NtWaitForMultipleObjects=NtWaitForMultipleObjects@20
269 NtWaitForSingleObject=NtWaitForSingleObject@12
270 NtWaitHighEventPair=NtWaitHighEventPair@4
271 NtWaitLowEventPair=NtWaitLowEventPair@4
272 NtWriteFile=NtWriteFile@36
273 NtWriteFileGather=NtWriteFileGather@36
274 NtWriteRequestData=NtWriteRequestData@24
275 NtWriteVirtualMemory=NtWriteVirtualMemory@20
276 NtW32Call=NtW32Call@20
277 NtYieldExecution=NtYieldExecution@0
282 ;PropertyLengthAsVariant
285 RtlAbsoluteToSelfRelativeSD=RtlAbsoluteToSelfRelativeSD@12
286 RtlAcquirePebLock=RtlAcquirePebLock@0
287 RtlAcquireResourceExclusive=RtlAcquireResourceExclusive@8
288 RtlAcquireResourceShared=RtlAcquireResourceShared@8
289 RtlAddAccessAllowedAce=RtlAddAccessAllowedAce@16
290 RtlAddAccessAllowedAceEx=RtlAddAccessAllowedAceEx@20
291 RtlAddAccessDeniedAce=RtlAddAccessDeniedAce@16
292 RtlAddAccessDeniedAceEx=RtlAddAccessDeniedAceEx@20
293 RtlAddAce=RtlAddAce@20
295 RtlAddAtomToAtomTable=RtlAddAtomToAtomTable@12
296 ;RtlAddAttributeActionToRXact
297 RtlAddAuditAccessAce=RtlAddAuditAccessAce@24
299 RtlAddRange=RtlAddRange@36
300 RtlAdjustPrivilege=RtlAdjustPrivilege@16
301 RtlAllocateAndInitializeSid=RtlAllocateAndInitializeSid@44
302 RtlAllocateHandle=RtlAllocateHandle@8
303 RtlAllocateHeap=RtlAllocateHeap@12
304 RtlAnsiCharToUnicodeChar=RtlAnsiCharToUnicodeChar@4
305 RtlAnsiStringToUnicodeSize=RtlAnsiStringToUnicodeSize@4
306 RtlAnsiStringToUnicodeString=RtlAnsiStringToUnicodeString@12
307 RtlAppendAsciizToString=RtlAppendAsciizToString@8
308 RtlAppendStringToString=RtlAppendStringToString@8
309 RtlAppendUnicodeStringToString=RtlAppendUnicodeStringToString@8
310 RtlAppendUnicodeToString=RtlAppendUnicodeToString@8
312 ;RtlApplyRXactNoFlush
313 RtlAreAllAccessesGranted=RtlAreAllAccessesGranted@8
314 RtlAreAnyAccessesGranted=RtlAreAnyAccessesGranted@8
315 RtlAreBitsClear=RtlAreBitsClear@12
316 RtlAreBitsSet=RtlAreBitsSet@12
317 RtlAssert=RtlAssert@16
318 RtlBaseProcessStartRoutine DATA
319 ;RtlCaptureStackBackTrace
320 RtlCharToInteger=RtlCharToInteger@12
321 RtlCheckRegistryKey=RtlCheckRegistryKey@8
322 RtlClearAllBits=RtlClearAllBits@4
323 RtlClearBits=RtlClearBits@12
325 RtlCompactHeap=RtlCompactHeap@8
326 RtlCompareMemory=RtlCompareMemory@12
327 RtlCompareMemoryUlong=RtlCompareMemoryUlong@12
328 RtlCompareString=RtlCompareString@12
329 RtlCompareUnicodeString=RtlCompareUnicodeString@12
330 RtlCompressBuffer=RtlCompressBuffer@32
331 RtlComputeCrc32=RtlComputeCrc32@12
332 ;RtlConsoleMultiByteToUnicodeN
333 RtlConvertExclusiveToShared=RtlConvertExclusiveToShared@4
334 RtlConvertLongToLargeInteger=RtlConvertLongToLargeInteger@4
335 RtlConvertSharedToExclusive=RtlConvertSharedToExclusive@4
336 RtlConvertSidToUnicodeString=RtlConvertSidToUnicodeString@12
337 ;RtlConvertUiListToApiList
338 RtlConvertUlongToLargeInteger=RtlConvertUlongToLargeInteger@4
339 RtlCopyLuid=RtlCopyLuid@8
340 RtlCopyLuidAndAttributesArray=RtlCopyLuidAndAttributesArray@12
341 RtlCopyRangeList=RtlCopyRangeList@8
342 ;RtlCopySecurityDescriptor
343 RtlCopySid=RtlCopySid@12
344 RtlCopySidAndAttributesArray=RtlCopySidAndAttributesArray@28
345 RtlCopyString=RtlCopyString@8
346 RtlCopyUnicodeString=RtlCopyUnicodeString@8
347 RtlCreateAcl=RtlCreateAcl@12
349 RtlCreateAtomTable=RtlCreateAtomTable@8
350 RtlCreateEnvironment=RtlCreateEnvironment@8
351 RtlCreateHeap=RtlCreateHeap@24
352 RtlCreateProcessParameters=RtlCreateProcessParameters@40
353 ;RtlCreatePropertySet
354 ;RtlCreateQueryDebugBuffer
355 RtlCreateRegistryKey=RtlCreateRegistryKey@8
356 RtlCreateSecurityDescriptor=RtlCreateSecurityDescriptor@8
358 RtlCreateUnicodeString=RtlCreateUnicodeString@8
359 RtlCreateUnicodeStringFromAsciiz=RtlCreateUnicodeStringFromAsciiz@8
360 RtlCreateUserProcess=RtlCreateUserProcess@40
361 ;RtlCreateUserSecurityObject
362 RtlCreateUserThread=RtlCreateUserThread@40
363 RtlCustomCPToUnicodeN=RtlCustomCPToUnicodeN@24
364 ;RtlCutoverTimeToSystemTime
365 RtlDeNormalizeProcessParams=RtlDeNormalizeProcessParams@4
366 RtlDecompressBuffer=RtlDecompressBuffer@24
367 RtlDecompressFragment=RtlDecompressFragment@32
369 RtlDeleteAce=RtlDeleteAce@8
370 RtlDeleteAtomFromAtomTable=RtlDeleteAtomFromAtomTable@8
371 RtlDeleteCriticalSection=RtlDeleteCriticalSection@4
372 RtlDuplicateUnicodeString=RtlDuplicateUnicodeString@12
373 RtlSetCriticalSectionSpinCount=RtlSetCriticalSectionSpinCount@8
374 ;RtlDeleteElementGenericTable
376 RtlDeleteOwnersRanges=RtlDeleteOwnersRanges@8
377 RtlDeleteRange=RtlDeleteRange@24
378 RtlDeleteRegistryValue=RtlDeleteRegistryValue@12
379 RtlDeleteResource=RtlDeleteResource@4
380 ;RtlDeleteSecurityObject
381 RtlDestroyAtomTable=RtlDestroyAtomTable@4
382 RtlDestroyEnvironment=RtlDestroyEnvironment@4
383 RtlDestroyHandleTable=RtlDestroyHandleTable@4
384 RtlDestroyHeap=RtlDestroyHeap@4
385 RtlDestroyProcessParameters=RtlDestroyProcessParameters@4
386 ;RtlDestroyQueryDebugBuffer
387 RtlDetermineDosPathNameType_U=RtlDetermineDosPathNameType_U@4
388 RtlDoesFileExists_U=RtlDoesFileExists_U@4
389 RtlDosPathNameToNtPathName_U=RtlDosPathNameToNtPathName_U@16
390 RtlDosSearchPath_U=RtlDosSearchPath_U@24
391 RtlDowncaseUnicodeChar=RtlDowncaseUnicodeChar@4
392 RtlDowncaseUnicodeString=RtlDowncaseUnicodeString@12
393 RtlDumpResource=RtlDumpResource@4
394 RtlEmptyAtomTable=RtlEmptyAtomTable@8
395 RtlEnlargedIntegerMultiply=RtlEnlargedIntegerMultiply@8
396 RtlEnlargedUnsignedDivide=RtlEnlargedUnsignedDivide@16
397 RtlEnlargedUnsignedMultiply=RtlEnlargedUnsignedMultiply@8
398 RtlEnterCriticalSection=RtlEnterCriticalSection@4
399 RtlEnumProcessHeaps=RtlEnumProcessHeaps@8
400 ;RtlEnumerateGenericTable
401 ;RtlEnumerateGenericTableWithoutSplaying
402 ;RtlEnumerateProperties
403 RtlEqualComputerName=RtlEqualComputerName@8
404 RtlEqualDomainName=RtlEqualDomainName@8
405 RtlEqualLuid=RtlEqualLuid@8
406 RtlEqualPrefixSid=RtlEqualPrefixSid@8
407 RtlEqualSid=RtlEqualSid@8
408 RtlEqualString=RtlEqualString@12
409 RtlEqualUnicodeString=RtlEqualUnicodeString@12
410 RtlEraseUnicodeString=RtlEraseUnicodeString@4
411 RtlExitUserThread=RtlExitUserThread@4
412 RtlExpandEnvironmentStrings_U=RtlExpandEnvironmentStrings_U@16
414 RtlExtendedIntegerMultiply=RtlExtendedIntegerMultiply@12
415 RtlExtendedLargeIntegerDivide=RtlExtendedLargeIntegerDivide@16
416 RtlExtendedMagicDivide=RtlExtendedMagicDivide@20
417 RtlFillMemory=RtlFillMemory@12
418 RtlFillMemoryUlong=RtlFillMemoryUlong@12
419 RtlFindClearBits=RtlFindClearBits@12
420 RtlFindClearBitsAndSet=RtlFindClearBitsAndSet@12
421 RtlFindClearRuns=RtlFindClearRuns@16
422 RtlFindLastBackwardRunClear=RtlFindLastBackwardRunClear@12
423 RtlFindLeastSignificantBit=RtlFindLeastSignificantBit@8
424 RtlFindLongestRunClear=RtlFindLongestRunClear@8
425 RtlFindLongestRunSet=RtlFindLongestRunSet@8
426 RtlFindMessage=RtlFindMessage@20
427 RtlFindMostSignificantBit=RtlFindMostSignificantBit@8
428 RtlFindNextForwardRunClear=RtlFindNextForwardRunClear@12
429 RtlFindRange=RtlFindRange@48
430 RtlFindSetBits=RtlFindSetBits@12
431 RtlFindSetBitsAndClear=RtlFindSetBitsAndClear@12
432 RtlFirstFreeAce=RtlFirstFreeAce@8
434 RtlFormatCurrentUserKeyPath=RtlFormatCurrentUserKeyPath@4
436 RtlFreeAnsiString=RtlFreeAnsiString@4
437 RtlFreeHandle=RtlFreeHandle@8
438 RtlFreeHeap=RtlFreeHeap@12
439 RtlFreeOemString=RtlFreeOemString@4
440 RtlFreeRangeList=RtlFreeRangeList@4
441 RtlFreeSid=RtlFreeSid@4
442 RtlFreeUnicodeString=RtlFreeUnicodeString@4
443 RtlFreeUserThreadStack=RtlFreeUserThreadStack@8
444 RtlGUIDFromString=RtlGUIDFromString@8
445 RtlGenerate8dot3Name=RtlGenerate8dot3Name@16
446 RtlGetAce=RtlGetAce@12
447 ;RtlGetCallersAddress
448 RtlGetCompressionWorkSpaceSize=RtlGetCompressionWorkSpaceSize@12
449 RtlGetControlSecurityDescriptor=RtlGetControlSecurityDescriptor@12
450 RtlGetCurrentDirectory_U=RtlGetCurrentDirectory_U@8
451 RtlGetDaclSecurityDescriptor=RtlGetDaclSecurityDescriptor@16
452 ;RtlGetElementGenericTable
453 RtlGetFirstRange=RtlGetFirstRange@12
454 RtlGetFullPathName_U=RtlGetFullPathName_U@16
455 RtlGetGroupSecurityDescriptor=RtlGetGroupSecurityDescriptor@12
456 RtlGetLongestNtPathLength=RtlGetLongestNtPathLength@0
457 RtlGetNextRange=RtlGetNextRange@12
458 RtlGetNtGlobalFlags=RtlGetNtGlobalFlags@0
459 RtlGetNtProductType=RtlGetNtProductType@4
460 RtlGetNtVersionNumbers=RtlGetNtVersionNumbers@12
461 RtlGetOwnerSecurityDescriptor=RtlGetOwnerSecurityDescriptor@12
462 RtlGetProcessHeaps=RtlGetProcessHeaps@8
463 RtlGetSaclSecurityDescriptor=RtlGetSaclSecurityDescriptor@16
465 RtlGetVersion=RtlGetVersion@4
466 ;RtlGuidToPropertySetName
467 RtlIdentifierAuthoritySid=RtlIdentifierAuthoritySid@4
468 RtlImageDirectoryEntryToData=RtlImageDirectoryEntryToData@16
469 RtlImageNtHeader=RtlImageNtHeader@4
470 RtlImageRvaToSection=RtlImageRvaToSection@12
471 RtlImageRvaToVa=RtlImageRvaToVa@16
472 RtlImpersonateSelf=RtlImpersonateSelf@4
473 RtlInitAnsiString=RtlInitAnsiString@8
474 RtlInitCodePageTable=RtlInitCodePageTable@8
475 RtlInitNlsTables=RtlInitNlsTables@16
476 RtlInitString=RtlInitString@8
477 RtlInitUnicodeString=RtlInitUnicodeString@8
478 ;RtlInitializeAtomPackage
479 RtlInitializeBitMap=RtlInitializeBitMap@12
480 RtlInitializeContext=RtlInitializeContext@20
481 RtlInitializeCriticalSection=RtlInitializeCriticalSection@4
482 RtlInitializeCriticalSectionAndSpinCount=RtlInitializeCriticalSectionAndSpinCount@8
483 ;RtlInitializeGenericTable
484 RtlInitializeHandleTable=RtlInitializeHandleTable@12
485 RtlInitializeRangeList=RtlInitializeRangeList@4
486 RtlInitializeResource=RtlInitializeResource@4
488 RtlInitializeSid=RtlInitializeSid@12
489 ;RtlInsertElementGenericTable
490 RtlInt64ToUnicodeString=RtlInt64ToUnicodeString@16
491 RtlIntegerToChar=RtlIntegerToChar@16
492 RtlIntegerToUnicodeString=RtlIntegerToUnicodeString@12
493 RtlInvertRangeList=RtlInvertRangeList@8
494 RtlIsDosDeviceName_U=RtlIsDosDeviceName_U@4
495 ;RtlIsGenericTableEmpty
496 RtlIsNameLegalDOS8Dot3=RtlIsNameLegalDOS8Dot3@12
497 RtlIsRangeAvailable=RtlIsRangeAvailable@40
498 RtlIsTextUnicode=RtlIsTextUnicode@12
499 RtlIsValidHandle=RtlIsValidHandle@8
500 RtlIsValidIndexHandle=RtlIsValidIndexHandle@12
501 RtlLargeIntegerAdd=RtlLargeIntegerAdd@16
502 RtlLargeIntegerArithmeticShift=RtlLargeIntegerArithmeticShift@12
503 RtlLargeIntegerDivide=RtlLargeIntegerDivide@20
504 RtlLargeIntegerNegate=RtlLargeIntegerNegate@8
505 RtlLargeIntegerShiftLeft=RtlLargeIntegerShiftLeft@12
506 RtlLargeIntegerShiftRight=RtlLargeIntegerShiftRight@12
507 RtlLargeIntegerSubtract=RtlLargeIntegerSubtract@16
508 RtlLargeIntegerToChar=RtlLargeIntegerToChar@16
509 RtlLeaveCriticalSection=RtlLeaveCriticalSection@4
510 RtlLengthRequiredSid=RtlLengthRequiredSid@4
511 RtlLengthSecurityDescriptor=RtlLengthSecurityDescriptor@4
512 RtlLengthSid=RtlLengthSid@4
513 RtlLocalTimeToSystemTime=RtlLocalTimeToSystemTime@8
514 RtlLockHeap=RtlLockHeap@4
515 RtlLookupAtomInAtomTable=RtlLookupAtomInAtomTable@12
516 ;RtlLookupElementGenericTable
517 RtlMakeSelfRelativeSD=RtlMakeSelfRelativeSD@12
518 RtlMapGenericMask=RtlMapGenericMask@8
519 RtlMergeRangeLists=RtlMergeRangeLists@16
520 RtlMoveMemory=RtlMoveMemory@12
521 RtlMultiByteToUnicodeN=RtlMultiByteToUnicodeN@20
522 RtlMultiByteToUnicodeSize=RtlMultiByteToUnicodeSize@12
523 ;RtlNewInstanceSecurityObject
524 ;RtlNewSecurityGrantedAccess
525 ;RtlNewSecurityObject
526 RtlNormalizeProcessParams=RtlNormalizeProcessParams@4
527 RtlNtStatusToDosError=RtlNtStatusToDosError@4
528 RtlNtPathNameToDosPathName=RtlNtPathNameToDosPathName@16
529 ;RtlNumberGenericTableElements
530 RtlNumberOfClearBits=RtlNumberOfClearBits@4
531 RtlNumberOfSetBits=RtlNumberOfSetBits@4
532 RtlOemStringToUnicodeSize=RtlOemStringToUnicodeSize@4
533 RtlOemStringToUnicodeString=RtlOemStringToUnicodeString@12
534 RtlOemToUnicodeN=RtlOemToUnicodeN@20
535 RtlOpenCurrentUser=RtlOpenCurrentUser@8
537 RtlPinAtomInAtomTable=RtlPinAtomInAtomTable@8
538 RtlPrefixString=RtlPrefixString@12
539 RtlPrefixUnicodeString=RtlPrefixUnicodeString@12
540 ;RtlPropertySetNameToGuid
542 RtlQueryAtomInAtomTable=RtlQueryAtomInAtomTable@24
543 RtlQueryEnvironmentVariable_U=RtlQueryEnvironmentVariable_U@12
544 RtlQueryInformationAcl=RtlQueryInformationAcl@16
545 ;RtlQueryProcessBackTraceInformation
546 ;RtlQueryProcessDebugInformation
547 ;RtlQueryProcessHeapInformation
548 ;RtlQueryProcessLockInformation
550 ;RtlQueryPropertyNames
552 RtlQueryRegistryValues=RtlQueryRegistryValues@20
553 ;RtlQuerySecutityObject
555 RtlQueryTimeZoneInformation=RtlQueryTimeZoneInformation@4
556 RtlRaiseException=RtlRaiseException@4
557 RtlRaiseStatus=RtlRaiseStatus@4
558 RtlRandom=RtlRandom@4
559 RtlRandomEx=RtlRandom@4
560 RtlReAllocateHeap=RtlReAllocateHeap@16
563 RtlReleasePebLock=RtlReleasePebLock@0
564 RtlReleaseResource=RtlReleaseResource@4
566 RtlResetRtlTranslations=RtlResetRtlTranslations@4
567 RtlRunDecodeUnicodeString=RtlRunDecodeUnicodeString@8
568 RtlRunEncodeUnicodeString=RtlRunEncodeUnicodeString@8
569 RtlSecondsSince1970ToTime=RtlSecondsSince1970ToTime@8
570 RtlSecondsSince1980ToTime=RtlSecondsSince1980ToTime@8
571 RtlSelfRelativeToAbsoluteSD=RtlSelfRelativeToAbsoluteSD@44
572 RtlSetAllBits=RtlSetAllBits@4
573 ;RtlSetAttributesSecurityDescriptor
574 RtlSetBits=RtlSetBits@12
575 RtlSetCurrentDirectory_U=RtlSetCurrentDirectory_U@4
576 RtlSetCurrentEnvironment=RtlSetCurrentEnvironment@8
577 RtlSetDaclSecurityDescriptor=RtlSetDaclSecurityDescriptor@16
578 RtlSetEnvironmentVariable=RtlSetEnvironmentVariable@12
579 RtlSetGroupSecurityDescriptor=RtlSetGroupSecurityDescriptor@12
580 RtlSetInformationAcl=RtlSetInformationAcl@16
581 RtlSetOwnerSecurityDescriptor=RtlSetOwnerSecurityDescriptor@12
584 ;RtlSetPropertySetClassId
585 RtlSetSaclSecurityDescriptor=RtlSetSaclSecurityDescriptor@16
586 ;RtlSetSecurityObject
587 RtlSetTimeZoneInformation=RtlSetTimeZoneInformation@4
588 ;RtlSetUnicodeCallouts
591 RtlSizeHeap=RtlSizeHeap@12
594 RtlStringFromGUID=RtlStringFromGUID@8
595 RtlSubAuthorityCountSid=RtlSubAuthorityCountSid@4
596 RtlSubAuthoritySid=RtlSubAuthoritySid@8
597 RtlSubtreePredecessor=RtlSubtreePredecessor@4
598 RtlSubtreeSuccessor=RtlSubtreeSuccessor@4
599 RtlSystemTimeToLocalTime=RtlSystemTimeToLocalTime@8
600 RtlTimeFieldsToTime=RtlTimeFieldsToTime@8
601 RtlTimeToElapsedTimeFields=RtlTimeToElapsedTimeFields@8
602 RtlTimeToSecondsSince1970=RtlTimeToSecondsSince1970@8
603 RtlTimeToSecondsSince1980=RtlTimeToSecondsSince1980@8
604 RtlTimeToTimeFields=RtlTimeToTimeFields@8
605 RtlTryEnterCriticalSection=RtlTryEnterCriticalSection@4
606 RtlUlongByteSwap=@RtlUlongByteSwap@4
607 RtlUlonglongByteSwap=@RtlUlonglongByteSwap@8
608 RtlUnicodeStringToAnsiSize=RtlUnicodeStringToAnsiSize@4
609 RtlUnicodeStringToAnsiString=RtlUnicodeStringToAnsiString@12
610 RtlUnicodeStringToCountedOemString=RtlUnicodeStringToCountedOemString@12
611 RtlUnicodeStringToInteger=RtlUnicodeStringToInteger@12
612 RtlUnicodeStringToOemSize=RtlUnicodeStringToOemSize@4
613 RtlUnicodeStringToOemString=RtlUnicodeStringToOemString@12
614 RtlUnicodeToCustomCPN=RtlUnicodeToCustomCPN@24
615 RtlUnicodeToMultiByteN=RtlUnicodeToMultiByteN@20
616 RtlUnicodeToMultiByteSize=RtlUnicodeToMultiByteSize@12
617 RtlUnicodeToOemN=RtlUnicodeToOemN@20
618 RtlUniform=RtlUniform@4
619 RtlUnlockHeap=RtlUnlockHeap@4
620 RtlUnwind=RtlUnwind@16
621 RtlUpcaseUnicodeChar=RtlUpcaseUnicodeChar@4
622 RtlUpcaseUnicodeString=RtlUpcaseUnicodeString@12
623 RtlUpcaseUnicodeStringToAnsiString=RtlUpcaseUnicodeStringToAnsiString@12
624 RtlUpcaseUnicodeStringToCountedOemString=RtlUpcaseUnicodeStringToCountedOemString@12
625 RtlUpcaseUnicodeStringToOemString=RtlUpcaseUnicodeStringToOemString@12
626 RtlUpcaseUnicodeToCustomCPN=RtlUpcaseUnicodeToCustomCPN@24
627 RtlUpcaseUnicodeToMultiByteN=RtlUpcaseUnicodeToMultiByteN@20
628 RtlUpcaseUnicodeToOemN=RtlUpcaseUnicodeToOemN@20
629 RtlUpperChar=RtlUpperChar@4
630 RtlUpperString=RtlUpperString@8
632 RtlUshortByteSwap=@RtlUshortByteSwap@4
633 RtlValidAcl=RtlValidAcl@4
634 RtlValidSecurityDescriptor=RtlValidSecurityDescriptor@4
635 RtlValidSid=RtlValidSid@4
636 RtlValidateHeap=RtlValidateHeap@12
637 RtlValidateProcessHeaps=RtlValidateProcessHeaps@0
639 RtlWriteRegistryValue=RtlWriteRegistryValue@24
641 RtlZeroMemory=RtlZeroMemory@8
642 RtlpEnsureBufferSize=RtlpEnsureBufferSize@12
643 RtlpNtCreateKey=RtlpNtCreateKey@24
644 RtlpNtEnumerateSubKey=RtlpNtEnumerateSubKey@16
645 RtlpNtMakeTemporaryKey=RtlpNtMakeTemporaryKey@4
646 RtlpNtOpenKey=RtlpNtOpenKey@16
647 RtlpNtQueryValueKey=RtlpNtQueryValueKey@20
648 RtlpNtSetValueKey=RtlpNtSetValueKey@16
649 ;RtlpUnWaitCriticalSection
650 ;RtlpWaitForCriticalSection
651 RtlxAnsiStringToUnicodeSize=RtlxAnsiStringToUnicodeSize@4
652 RtlxOemStringToUnicodeSize=RtlxOemStringToUnicodeSize@4
653 RtlxUnicodeStringToAnsiSize=RtlxUnicodeStringToAnsiSize@4
654 RtlxUnicodeStringToOemSize=RtlxUnicodeStringToOemSize@4
656 ZwAcceptConnectPort=ZwAcceptConnectPort@24
657 ZwAccessCheck=ZwAccessCheck@32
658 ZwAccessCheckAndAuditAlarm=ZwAccessCheckAndAuditAlarm@44
659 ZwAddAtom=ZwAddAtom@12
660 ZwAdjustGroupsToken=ZwAdjustGroupsToken@24
661 ZwAdjustPrivilegesToken=ZwAdjustPrivilegesToken@24
662 ZwAlertResumeThread=ZwAlertResumeThread@8
663 ZwAlertThread=ZwAlertThread@4
664 ZwAllocateLocallyUniqueId=ZwAllocateLocallyUniqueId@4
665 ZwAllocateUuids=ZwAllocateUuids@12
666 ZwAllocateVirtualMemory=ZwAllocateVirtualMemory@24
667 ZwCallbackReturn=ZwCallbackReturn@12
668 ZwCancelIoFile=ZwCancelIoFile@8
669 ZwCancelTimer=ZwCancelTimer@8
670 ZwClearEvent=ZwClearEvent@4
672 ZwCloseObjectAuditAlarm=ZwCloseObjectAuditAlarm@12
673 ZwCompleteConnectPort=ZwCompleteConnectPort@4
674 ZwConnectPort=ZwConnectPort@32
675 ZwContinue=ZwContinue@8
676 ZwCreateChannel=ZwCreateChannel@8
677 ZwCreateDirectoryObject=ZwCreateDirectoryObject@12
678 ZwCreateEvent=ZwCreateEvent@20
679 ZwCreateEventPair=ZwCreateEventPair@12
680 ZwCreateFile=ZwCreateFile@44
681 ZwCreateIoCompletion=ZwCreateIoCompletion@16
682 ZwCreateKey=ZwCreateKey@28
683 ZwCreateMailslotFile=ZwCreateMailslotFile@32
684 ZwCreateMutant=ZwCreateMutant@16
685 ZwCreateNamedPipeFile=ZwCreateNamedPipeFile@56
686 ZwCreatePagingFile=ZwCreatePagingFile@16
687 ZwCreatePort=ZwCreatePort@20
688 ZwCreateProcess=ZwCreateProcess@32
689 ZwCreateProfile=ZwCreateProfile@36
690 ZwCreateSection=ZwCreateSection@28
691 ZwCreateSemaphore=ZwCreateSemaphore@20
692 ZwCreateSymbolicLinkObject=ZwCreateSymbolicLinkObject@16
693 ZwCreateThread=ZwCreateThread@32
694 ZwCreateTimer=ZwCreateTimer@16
695 ZwCreateToken=ZwCreateToken@52
696 ZwDelayExecution=ZwDelayExecution@8
697 ZwDeleteAtom=ZwDeleteAtom@4
698 ZwDeleteFile=ZwDeleteFile@4
699 ZwDeleteKey=ZwDeleteKey@4
700 ZwDeleteObjectAuditAlarm=ZwDeleteObjectAuditAlarm@12
701 ZwDeleteValueKey=ZwDeleteValueKey@8
702 ZwDeviceIoControlFile=ZwDeviceIoControlFile@40
703 ZwDisplayString=ZwDisplayString@4
704 ZwDuplicateObject=ZwDuplicateObject@28
705 ZwDuplicateToken=ZwDuplicateToken@24
706 ZwEnumerateKey=ZwEnumerateKey@24
707 ZwEnumerateValueKey=ZwEnumerateValueKey@24
708 ZwExtendSection=ZwExtendSection@8
709 ZwFindAtom=ZwFindAtom@12
710 ZwFlushBuffersFile=ZwFlushBuffersFile@8
711 ZwFlushInstructionCache=ZwFlushInstructionCache@12
712 ZwFlushKey=ZwFlushKey@4
713 ZwFlushVirtualMemory=ZwFlushVirtualMemory@16
714 ZwFlushWriteBuffer=ZwFlushWriteBuffer@0
715 ZwFreeVirtualMemory=ZwFreeVirtualMemory@16
716 ZwFsControlFile=ZwFsControlFile@40
717 ZwGetContextThread=ZwGetContextThread@8
718 ZwGetPlugPlayEvent=ZwGetPlugPlayEvent@16
719 ZwGetTickCount=ZwGetTickCount@0
720 ZwImpersonateClientOfPort=ZwImpersonateClientOfPort@8
721 ZwImpersonateThread=ZwImpersonateThread@12
722 ZwInitializeRegistry=ZwInitializeRegistry@4
723 ZwListenChannel=ZwListenChannel@8
724 ZwListenPort=ZwListenPort@8
725 ZwLoadDriver=ZwLoadDriver@4
726 ZwLoadKey=ZwLoadKey@8
727 ZwLoadKey2=ZwLoadKey2@12
728 ZwLockFile=ZwLockFile@40
729 ZwLockVirtualMemory=ZwLockVirtualMemory@16
730 ZwMakeTemporaryObject=ZwMakeTemporaryObject@4
731 ZwMapViewOfSection=ZwMapViewOfSection@40
732 ZwNotifyChangeDirectoryFile=ZwNotifyChangeDirectoryFile@36
733 ZwNotifyChangeKey=ZwNotifyChangeKey@40
734 ZwOpenChannel=ZwOpenChannel@8
735 ZwOpenDirectoryObject=ZwOpenDirectoryObject@12
736 ZwOpenEvent=ZwOpenEvent@12
737 ZwOpenEventPair=ZwOpenEventPair@12
738 ZwOpenFile=ZwOpenFile@24
739 ZwOpenIoCompletion=ZwOpenIoCompletion@12
740 ZwOpenKey=ZwOpenKey@12
741 ZwOpenMutant=ZwOpenMutant@12
742 ZwOpenObjectAuditAlarm=ZwOpenObjectAuditAlarm@48
743 ZwOpenProcess=ZwOpenProcess@16
744 ZwOpenProcessToken=ZwOpenProcessToken@12
745 ZwOpenSection=ZwOpenSection@12
746 ZwOpenSemaphore=ZwOpenSemaphore@12
747 ZwOpenSymbolicLinkObject=ZwOpenSymbolicLinkObject@12
748 ZwOpenThread=ZwOpenThread@16
749 ZwOpenThreadToken=ZwOpenThreadToken@16
750 ZwOpenTimer=ZwOpenTimer@12
751 ZwPlugPlayControl=ZwPlugPlayControl@16
752 ZwPrivilegeCheck=ZwPrivilegeCheck@12
753 ZwPrivilegedServiceAuditAlarm=ZwPrivilegedServiceAuditAlarm@20
754 ZwPrivilegeObjectAuditAlarm=ZwPrivilegeObjectAuditAlarm@24
755 ZwProtectVirtualMemory=ZwProtectVirtualMemory@20
756 ZwPulseEvent=ZwPulseEvent@8
757 ZwQueueApcThread=ZwQueueApcThread@20
758 ZwQueryInformationAtom=ZwQueryInformationAtom@20
759 ZwQueryAttributesFile=ZwQueryAttributesFile@8
760 ZwQueryDefaultLocale=ZwQueryDefaultLocale@8
761 ZwQueryDirectoryFile=ZwQueryDirectoryFile@44
762 ZwQueryDirectoryObject=ZwQueryDirectoryObject@28
763 ZwQueryEaFile=ZwQueryEaFile@36
764 ZwQueryEvent=ZwQueryEvent@20
765 ZwQueryFullAttributesFile=ZwQueryFullAttributesFile@8
766 ZwQueryInformationFile=ZwQueryInformationFile@20
767 ZwQueryInformationPort=ZwQueryInformationPort@20
768 ZwQueryInformationProcess=ZwQueryInformationProcess@20
769 ZwQueryInformationThread=ZwQueryInformationThread@20
770 ZwQueryInformationToken=ZwQueryInformationToken@20
771 ZwQueryIntervalProfile=ZwQueryIntervalProfile@8
772 ZwQueryIoCompletion=ZwQueryIoCompletion@20
773 ZwQueryKey=ZwQueryKey@20
774 ZwQueryMultipleValueKey=ZwQueryMultipleValueKey@24
775 ZwQueryMutant=ZwQueryMutant@20
776 ZwQueryObject=ZwQueryObject@20
777 ZwQueryOleDirectoryFile=ZwQueryOleDirectoryFile@44
778 ZwQueryPerformanceCounter=ZwQueryPerformanceCounter@8
779 ZwQuerySection=ZwQuerySection@20
780 ZwQuerySecurityObject=ZwQuerySecurityObject@20
781 ZwQuerySemaphore=ZwQuerySemaphore@20
782 ZwQuerySymbolicLinkObject=ZwQuerySymbolicLinkObject@12
783 ZwQuerySystemEnvironmentValue=ZwQuerySystemEnvironmentValue@16
784 ZwQuerySystemInformation=ZwQuerySystemInformation@16
785 ZwQuerySystemTime=ZwQuerySystemTime@4
786 ZwQueryTimer=ZwQueryTimer@20
787 ZwQueryTimerResolution=ZwQueryTimerResolution@12
788 ZwQueryValueKey=ZwQueryValueKey@24
789 ZwQueryVirtualMemory=ZwQueryVirtualMemory@24
790 ZwQueryVolumeInformationFile=ZwQueryVolumeInformationFile@20
791 ZwRaiseException=ZwRaiseException@12
792 ZwRaiseHardError=ZwRaiseHardError@24
793 ZwReadFile=ZwReadFile@36
794 ZwReadFileScatter=ZwReadFileScatter@36
795 ZwReadRequestData=ZwReadRequestData@24
796 ZwReadVirtualMemory=ZwReadVirtualMemory@20
797 ZwRegisterThreadTerminatePort=ZwRegisterThreadTerminatePort@4
798 ZwReleaseMutant=ZwReleaseMutant@8
799 ZwReleaseSemaphore=ZwReleaseSemaphore@12
800 ZwRemoveIoCompletion=ZwRemoveIoCompletion@20
801 ZwReplaceKey=ZwReplaceKey@12
802 ZwReplyPort=ZwReplyPort@8
803 ZwReplyWaitReceivePort=ZwReplyWaitReceivePort@16
804 ZwReplyWaitReplyPort=ZwReplyWaitReplyPort@8
805 ZwReplyWaitSendChannel=ZwReplyWaitSendChannel@12
806 ZwRequestPort=ZwRequestPort@8
807 ZwRequestWaitReplyPort=ZwRequestWaitReplyPort@12
808 ZwResetEvent=ZwResetEvent@8
809 ZwRestoreKey=ZwRestoreKey@12
810 ZwResumeThread=ZwResumeThread@8
811 ZwSaveKey=ZwSaveKey@8
812 ZwSendWaitReplyChannel=ZwSendWaitReplyChannel@16
813 ZwSetContextChannel=ZwSetContextChannel@4
814 ZwSetContextThread=ZwSetContextThread@8
815 ZwSetDefaultHardErrorPort=ZwSetDefaultHardErrorPort@4
816 ZwSetDefaultLocale=ZwSetDefaultLocale@8
817 ZwSetEaFile=ZwSetEaFile@16
818 ZwSetEvent=ZwSetEvent@8
819 ZwSetHighEventPair=ZwSetHighEventPair@4
820 ZwSetHighWaitLowEventPair=ZwSetHighWaitLowEventPair@4
821 ZwSetHighWaitLowThread=ZwSetHighWaitLowThread@0
822 ZwSetInformationFile=ZwSetInformationFile@20
823 ZwSetInformationKey=ZwSetInformationKey@16
824 ZwSetInformationObject=ZwSetInformationObject@16
825 ZwSetInformationProcess=ZwSetInformationProcess@16
826 ZwSetInformationThread=ZwSetInformationThread@16
827 ZwSetInformationToken=ZwSetInformationToken@16
828 ZwSetIntervalProfile=ZwSetIntervalProfile@8
829 ZwSetIoCompletion=ZwSetIoCompletion@20
830 ZwSetLdtEntries=ZwSetLdtEntries@24
831 ZwSetLowEventPair=ZwSetLowEventPair@4
832 ZwSetLowWaitHighEventPair=ZwSetLowWaitHighEventPair@4
833 ZwSetLowWaitHighThread=ZwSetLowWaitHighThread@0
834 ZwSetSecurityObject=ZwSetSecurityObject@12
835 ZwSetSystemEnvironmentValue=ZwSetSystemEnvironmentValue@8
836 ZwSetSystemInformation=ZwSetSystemInformation@12
837 ZwSetSystemPowerState=ZwSetSystemPowerState@12
838 ZwSetSystemTime=ZwSetSystemTime@8
839 ZwSetTimer=ZwSetTimer@28
840 ZwSetTimerResolution=ZwSetTimerResolution@12
841 ZwSetValueKey=ZwSetValueKey@24
842 ZwSetVolumeInformationFile=ZwSetVolumeInformationFile@20
843 ZwShutdownSystem=ZwShutdownSystem@4
844 ZwSignalAndWaitForSingleObject=ZwSignalAndWaitForSingleObject@16
845 ZwStartProfile=ZwStartProfile@4
846 ZwStopProfile=ZwStopProfile@4
847 ZwSuspendThread=ZwSuspendThread@8
848 ZwSystemDebugControl=ZwSystemDebugControl@24
849 ZwTerminateProcess=ZwTerminateProcess@8
850 ZwTerminateThread=ZwTerminateThread@8
851 ZwTestAlert=ZwTestAlert@0
852 ZwUnloadDriver=ZwUnloadDriver@4
853 ZwUnloadKey=ZwUnloadKey@4
854 ZwUnlockFile=ZwUnlockFile@20
855 ZwUnlockVirtualMemory=ZwUnlockVirtualMemory@16
856 ZwUnmapViewOfSection=ZwUnmapViewOfSection@8
857 ZwVdmControl=ZwVdmControl@8
858 ZwWaitForMultipleObjects=ZwWaitForMultipleObjects@20
859 ZwWaitForSingleObject=ZwWaitForSingleObject@12
860 ZwWaitHighEventPair=ZwWaitHighEventPair@4
861 ZwWaitLowEventPair=ZwWaitLowEventPair@4
862 ZwWriteFile=ZwWriteFile@36
863 ZwWriteFileGather=ZwWriteFileGather@36
864 ZwWriteRequestData=ZwWriteRequestData@24
865 ZwWriteVirtualMemory=ZwWriteVirtualMemory@20
866 ZwW32Call=ZwW32Call@20
867 ZwYieldExecution=ZwYieldExecution@0