fixed a typo in the NtAccessCheck declaration

[reactos.git] / reactos / include / ndk / zwfuncs.h

diff --git a/reactos/include/ndk/zwfuncs.h b/reactos/include/ndk/zwfuncs.h
index 916635a..d79d6c5 100644 (file)
--- a/reactos/include/ndk/zwfuncs.h
+++ b/reactos/include/ndk/zwfuncs.h
@@ -10,42 +10,115 @@
 #define _ZWFUNCS_H
 
 /* DEPENDENCIES **************************************************************/
-#include "lpctypes.h"
-#include "zwtypes.h"
-#include "kdtypes.h"
+#define _WMIKM_
+#include <evntrace.h>
 
 /* FUNCTION TYPES ************************************************************/
 
 /* PROTOTYPES ****************************************************************/
 
-/* FIXME: FILE NEEDS CLEANUP */
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
 NtAcceptConnectPort(
     PHANDLE PortHandle,
-    HANDLE NamedPortHandle,
-    PLPC_MESSAGE ServerReply,
-    BOOLEAN AcceptIt,
-    PLPC_SECTION_WRITE WriteMap,
-    PLPC_SECTION_READ ReadMap
+    PVOID PortContext OPTIONAL,
+    PPORT_MESSAGE ConnectionRequest,
+    BOOLEAN AcceptConnection,
+    PPORT_VIEW ServerView OPTIONAL,
+    PREMOTE_PORT_VIEW ClientView OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAcceptConnectPort(
+    PHANDLE PortHandle,
+    PVOID PortContext OPTIONAL,
+    PPORT_MESSAGE ConnectionRequest,
+    BOOLEAN AcceptConnection,
+    PPORT_VIEW ServerView OPTIONAL,
+    PREMOTE_PORT_VIEW ClientView OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtAccessCheck(
+    IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+    IN HANDLE ClientToken,
+    IN ACCESS_MASK DesiredAccess,
+    IN PGENERIC_MAPPING GenericMapping,
+    OUT PPRIVILEGE_SET PrivilegeSet,
+    OUT PULONG ReturnLength,
+    OUT PACCESS_MASK GrantedAccess,
+    OUT PNTSTATUS AccessStatus
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAccessCheck(
+    IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+    IN HANDLE ClientToken,
+    IN ACCESS_MASK DesiredAccess,
+    IN PGENERIC_MAPPING GenericMapping,
+    OUT PPRIVILEGE_SET PrivilegeSet,
+    OUT PULONG ReturnLength,
+    OUT PACCESS_MASK GrantedAccess,
+    OUT PNTSTATUS AccessStatus
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtAccessCheckAndAuditAlarm(
+    IN PUNICODE_STRING SubsystemName,
+    IN PVOID HandleId,
+    IN PUNICODE_STRING ObjectTypeName,
+    IN PUNICODE_STRING ObjectName,
+    IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+    IN ACCESS_MASK DesiredAccess,
+    IN PGENERIC_MAPPING GenericMapping,
+    IN BOOLEAN ObjectCreation,
+    OUT PACCESS_MASK GrantedAccess,
+    OUT PNTSTATUS AccessStatus,
+    OUT PBOOLEAN GenerateOnClose
+);
+
+NTSTATUS
+NTAPI
+NtAddAtom(
+    IN     PWSTR  AtomName,
+    IN     ULONG AtomNameLength,
+    IN OUT PRTL_ATOM  Atom
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAddAtom(
+    IN     PWSTR  AtomName,
+    IN     ULONG AtomNameLength,
+    IN OUT PRTL_ATOM  Atom
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtAddBootEntry(
     IN PUNICODE_STRING EntryName,
     IN PUNICODE_STRING EntryValue
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwAddBootEntry(
     IN PUNICODE_STRING EntryName,
     IN PUNICODE_STRING EntryValue
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
 NtAdjustGroupsToken(
     IN HANDLE TokenHandle,
     IN BOOLEAN  ResetToDefault,
@@ -55,8 +128,9 @@ NtAdjustGroupsToken(
     OUT PULONG  ReturnLength
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwAdjustGroupsToken(
     IN HANDLE TokenHandle,
     IN BOOLEAN  ResetToDefault,
@@ -66,8 +140,9 @@ ZwAdjustGroupsToken(
     OUT PULONG  ReturnLength
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
 NtAdjustPrivilegesToken(
     IN HANDLE  TokenHandle,
     IN BOOLEAN  DisableAllPrivileges,
@@ -77,8 +152,9 @@ NtAdjustPrivilegesToken(
     OUT PULONG ReturnLength
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwAdjustPrivilegesToken(
     IN HANDLE  TokenHandle,
     IN BOOLEAN  DisableAllPrivileges,
@@ -89,46 +165,69 @@ ZwAdjustPrivilegesToken(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtAlertResumeThread(
     IN HANDLE ThreadHandle,
     OUT PULONG SuspendCount
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwAlertResumeThread(
     IN HANDLE ThreadHandle,
     OUT PULONG SuspendCount
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtAlertThread(
     IN HANDLE ThreadHandle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwAlertThread(
     IN HANDLE ThreadHandle
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtAllocateLocallyUniqueId(
     OUT LUID *LocallyUniqueId
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwAllocateLocallyUniqueId(
     OUT PLUID Luid
 );
 
 NTSTATUS
-STDCALL
-NtAllocateVirtualMemory (
+NTAPI
+NtAllocateUuids(
+    PULARGE_INTEGER Time,
+    PULONG Range,
+    PULONG Sequence,
+    PUCHAR Seed
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAllocateUuids(
+    PULARGE_INTEGER Time,
+    PULONG Range,
+    PULONG Sequence,
+    PUCHAR Seed
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtAllocateVirtualMemory(
     IN HANDLE ProcessHandle,
     IN OUT PVOID *BaseAddress,
     IN ULONG  ZeroBits,
@@ -137,9 +236,10 @@ NtAllocateVirtualMemory (
     IN ULONG  Protect
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
-ZwAllocateVirtualMemory (
+NTAPI
+ZwAllocateVirtualMemory(
     IN HANDLE ProcessHandle,
     IN OUT PVOID *BaseAddress,
     IN ULONG  ZeroBits,
@@ -148,30 +248,32 @@ ZwAllocateVirtualMemory (
     IN ULONG  Protect
 );
 
-NTSTATUS 
-STDCALL 
+NTSTATUS
+NTAPI
 NtAssignProcessToJobObject(
     HANDLE JobHandle,
-    HANDLE ProcessHandle)
-;
+    HANDLE ProcessHandle
+);
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwAssignProcessToJobObject(
     HANDLE JobHandle,
     HANDLE ProcessHandle
 );
 
-NTSTATUS 
-STDCALL 
+NTSTATUS
+NTAPI
 NtCallbackReturn(
     PVOID Result,
     ULONG ResultLength,
     NTSTATUS Status
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwCallbackReturn(
     PVOID Result,
     ULONG ResultLength,
@@ -179,123 +281,176 @@ ZwCallbackReturn(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtCancelIoFile(
     IN HANDLE FileHandle,
     OUT PIO_STATUS_BLOCK IoStatusBlock
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwCancelIoFile(
     IN HANDLE FileHandle,
     OUT PIO_STATUS_BLOCK IoStatusBlock
 );
 
 NTSTATUS
-STDCALL
+NTAPI
+NtCancelTimer(
+    IN HANDLE TimerHandle,
+    OUT PBOOLEAN CurrentState OPTIONAL
+);
+
+NTSTATUS
+NTAPI
 NtClearEvent(
-    IN HANDLE  EventHandle
+    IN HANDLE EventHandle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwClearEvent(
-    IN HANDLE  EventHandle
+    IN HANDLE EventHandle
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtCreateDebugObject(
+    OUT PHANDLE DebugHandle,
+    IN ACCESS_MASK DesiredAccess,
+    IN POBJECT_ATTRIBUTES ObjectAttributes,
+    IN BOOLEAN KillProcessOnExit
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateDebugObject(
+    OUT PHANDLE DebugHandle,
+    IN ACCESS_MASK DesiredAccess,
+    IN POBJECT_ATTRIBUTES ObjectAttributes,
+    IN BOOLEAN KillProcessOnExit
 );
 
-NTSTATUS 
-STDCALL 
+NTSTATUS
+NTAPI
 NtCreateJobObject(
-    PHANDLE JobHandle, 
+    PHANDLE JobHandle,
     ACCESS_MASK DesiredAccess,
     POBJECT_ATTRIBUTES ObjectAttributes
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwCreateJobObject(
-    PHANDLE JobHandle, 
+    PHANDLE JobHandle,
     ACCESS_MASK DesiredAccess,
     POBJECT_ATTRIBUTES ObjectAttributes
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtClose(
     IN HANDLE Handle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwClose(
     IN HANDLE Handle
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtCloseObjectAuditAlarm(
     IN PUNICODE_STRING SubsystemName,
     IN PVOID HandleId,
     IN BOOLEAN GenerateOnClose
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwCloseObjectAuditAlarm(
     IN PUNICODE_STRING SubsystemName,
     IN PVOID HandleId,
     IN BOOLEAN GenerateOnClose
 );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
 NtCompleteConnectPort(
     HANDLE PortHandle
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwCompleteConnectPort(
     HANDLE PortHandle
 );
 
-NTSTATUS 
-STDCALL
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
 NtConnectPort(
     PHANDLE PortHandle,
     PUNICODE_STRING PortName,
     PSECURITY_QUALITY_OF_SERVICE SecurityQos,
-    PLPC_SECTION_WRITE SectionInfo,
-    PLPC_SECTION_READ MapInfo,
-    PULONG MaxMessageSize,
-    PVOID ConnectInfo,
-    PULONG ConnectInfoLength
+    PPORT_VIEW ClientView OPTIONAL,
+    PREMOTE_PORT_VIEW ServerView OPTIONAL,
+    PULONG MaxMessageLength OPTIONAL,
+    PVOID ConnectionInformation OPTIONAL,
+    PULONG ConnectionInformationLength OPTIONAL
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwConnectPort(
     PHANDLE PortHandle,
     PUNICODE_STRING PortName,
     PSECURITY_QUALITY_OF_SERVICE SecurityQos,
-    PLPC_SECTION_WRITE SectionInfo,
-    PLPC_SECTION_READ MapInfo,
-    PULONG MaxMessageSize,
-    PVOID ConnectInfo,
-    PULONG ConnectInfoLength
+    PPORT_VIEW ClientView OPTIONAL,
+    PREMOTE_PORT_VIEW ServerView OPTIONAL,
+    PULONG MaxMessageLength OPTIONAL,
+    PVOID ConnectionInformation OPTIONAL,
+    PULONG ConnectionInformationLength OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtContinue(
+    IN PCONTEXT Context,
+    IN BOOLEAN TestAlert
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwContinue(
+    IN PCONTEXT Context,
+    IN BOOLEAN TestAlert
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtCreateDirectoryObject(
     OUT PHANDLE DirectoryHandle,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwCreateDirectoryObject(
     OUT PHANDLE DirectoryHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -303,7 +458,7 @@ ZwCreateDirectoryObject(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtCreateEvent(
     OUT PHANDLE EventHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -312,8 +467,9 @@ NtCreateEvent(
     IN BOOLEAN InitialState
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwCreateEvent(
     OUT PHANDLE EventHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -323,23 +479,25 @@ ZwCreateEvent(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtCreateEventPair(
     OUT PHANDLE EventPairHandle,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwCreateEventPair(
     OUT PHANDLE EventPairHandle,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtCreateFile(
     OUT PHANDLE FileHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -354,8 +512,9 @@ NtCreateFile(
     IN ULONG EaLength
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwCreateFile(
     OUT PHANDLE FileHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -371,7 +530,7 @@ ZwCreateFile(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtCreateIoCompletion(
     OUT PHANDLE             IoCompletionHandle,
     IN  ACCESS_MASK         DesiredAccess,
@@ -379,8 +538,9 @@ NtCreateIoCompletion(
     IN  ULONG               NumberOfConcurrentThreads
     );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwCreateIoCompletion(
    OUT PHANDLE             IoCompletionHandle,
    IN  ACCESS_MASK         DesiredAccess,
@@ -388,8 +548,8 @@ ZwCreateIoCompletion(
    IN  ULONG               NumberOfConcurrentThreads
    );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
 NtCreateKey(
     OUT PHANDLE KeyHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -400,8 +560,9 @@ NtCreateKey(
     IN PULONG Disposition OPTIONAL
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwCreateKey(
     OUT PHANDLE KeyHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -413,7 +574,7 @@ ZwCreateKey(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtCreateMailslotFile(
     OUT PHANDLE MailSlotFileHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -425,8 +586,9 @@ NtCreateMailslotFile(
     IN PLARGE_INTEGER TimeOut
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwCreateMailslotFile(
     OUT PHANDLE MailSlotFileHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -439,7 +601,7 @@ ZwCreateMailslotFile(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtCreateMutant(
     OUT PHANDLE MutantHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -447,8 +609,9 @@ NtCreateMutant(
     IN BOOLEAN InitialOwner
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwCreateMutant(
     OUT PHANDLE MutantHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -456,8 +619,8 @@ ZwCreateMutant(
     IN BOOLEAN InitialOwner
 );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
 NtCreateNamedPipeFile(
     OUT PHANDLE NamedPipeFileHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -475,8 +638,9 @@ NtCreateNamedPipeFile(
     IN PLARGE_INTEGER DefaultTimeOut
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwCreateNamedPipeFile(
     OUT PHANDLE NamedPipeFileHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -494,28 +658,48 @@ ZwCreateNamedPipeFile(
     IN PLARGE_INTEGER DefaultTimeOut
 );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
+NtCreatePagingFile(
+    IN PUNICODE_STRING FileName,
+    IN PLARGE_INTEGER InitialSize,
+    IN PLARGE_INTEGER MaxiumSize,
+    IN ULONG Reserved
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreatePagingFile(
+    IN PUNICODE_STRING FileName,
+    IN PLARGE_INTEGER InitialSize,
+    IN PLARGE_INTEGER MaxiumSize,
+    IN ULONG Reserved
+);
+
+NTSTATUS
+NTAPI
 NtCreatePort(
     PHANDLE PortHandle,
     POBJECT_ATTRIBUTES ObjectAttributes,
-    ULONG MaxConnectInfoLength,
-    ULONG MaxDataLength,
-    ULONG NPMessageQueueSize OPTIONAL
+    ULONG MaxConnectionInfoLength,
+    ULONG MaxMessageLength,
+    ULONG MaxPoolUsage
 );
 
-NTSTATUS 
-STDCALL
-NtCreatePort(
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreatePort(
     PHANDLE PortHandle,
     POBJECT_ATTRIBUTES ObjectAttributes,
-    ULONG MaxConnectInfoLength,
-    ULONG MaxDataLength,
-    ULONG NPMessageQueueSize OPTIONAL
+    ULONG MaxConnectionInfoLength,
+    ULONG MaxMessageLength,
+    ULONG MaxPoolUsage
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtCreateProcess(
     OUT PHANDLE ProcessHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -527,8 +711,9 @@ NtCreateProcess(
     IN HANDLE ExceptionPort OPTIONAL
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwCreateProcess(
     OUT PHANDLE ProcessHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -541,7 +726,37 @@ ZwCreateProcess(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
+NtCreateProfile(
+    OUT PHANDLE ProfileHandle,
+    IN HANDLE ProcessHandle,
+    IN PVOID ImageBase,
+    IN ULONG ImageSize,
+    IN ULONG Granularity,
+    OUT PVOID Buffer,
+    IN ULONG ProfilingSize,
+    IN KPROFILE_SOURCE Source,
+    IN KAFFINITY ProcessorMask
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateProfile(
+    OUT PHANDLE ProfileHandle,
+    IN POBJECT_ATTRIBUTES ObjectAttributes,
+    IN ULONG ImageBase,
+    IN ULONG ImageSize,
+    IN ULONG Granularity,
+    OUT PVOID Buffer,
+    IN ULONG ProfilingSize,
+    IN ULONG ClockSource,
+    IN ULONG ProcessorMask
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
 NtCreateSection(
     OUT PHANDLE SectionHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -552,8 +767,9 @@ NtCreateSection(
     IN HANDLE FileHandle OPTIONAL
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwCreateSection(
     OUT PHANDLE SectionHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -565,7 +781,7 @@ ZwCreateSection(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtCreateSemaphore(
     OUT PHANDLE SemaphoreHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -574,8 +790,9 @@ NtCreateSemaphore(
     IN LONG MaximumCount
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwCreateSemaphore(
     OUT PHANDLE SemaphoreHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -585,7 +802,7 @@ ZwCreateSemaphore(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtCreateSymbolicLinkObject(
     OUT PHANDLE SymbolicLinkHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -593,8 +810,9 @@ NtCreateSymbolicLinkObject(
     IN PUNICODE_STRING Name
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwCreateSymbolicLinkObject(
     OUT PHANDLE SymbolicLinkHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -603,7 +821,34 @@ ZwCreateSymbolicLinkObject(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
+NtCreateThread(
+    OUT PHANDLE ThreadHandle,
+    IN  ACCESS_MASK DesiredAccess,
+    IN  POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+    IN  HANDLE ProcessHandle,
+    OUT PCLIENT_ID ClientId,
+    IN  PCONTEXT ThreadContext,
+    IN  PINITIAL_TEB UserStack,
+    IN  BOOLEAN CreateSuspended
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateThread(
+    OUT PHANDLE ThreadHandle,
+    IN ACCESS_MASK DesiredAccess,
+    IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+    IN HANDLE ProcessHandle,
+    OUT PCLIENT_ID ClientId,
+    IN PCONTEXT ThreadContext,
+    IN PINITIAL_TEB UserStack,
+    IN BOOLEAN CreateSuspended
+);
+
+NTSTATUS
+NTAPI
 NtCreateTimer(
     OUT PHANDLE TimerHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -611,17 +856,20 @@ NtCreateTimer(
     IN TIMER_TYPE TimerType
 );
 
+#ifdef NTOS_MODE_USER
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwCreateTimer(
     OUT PHANDLE TimerHandle,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
     IN TIMER_TYPE TimerType
 );
+#endif
 
 NTSTATUS
-STDCALL
+NTAPI
 NtCreateToken(
     OUT PHANDLE TokenHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -638,8 +886,9 @@ NtCreateToken(
     IN PTOKEN_SOURCE TokenSource
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwCreateToken(
     OUT PHANDLE TokenHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -656,8 +905,8 @@ ZwCreateToken(
     IN PTOKEN_SOURCE TokenSource
 );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
 NtCreateWaitablePort(
     PHANDLE PortHandle,
     POBJECT_ATTRIBUTES ObjectAttributes,
@@ -666,8 +915,9 @@ NtCreateWaitablePort(
     ULONG NPMessageQueueSize OPTIONAL
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwCreateWaitablePort(
     PHANDLE PortHandle,
     POBJECT_ATTRIBUTES ObjectAttributes,
@@ -676,155 +926,257 @@ ZwCreateWaitablePort(
     ULONG NPMessageQueueSize OPTIONAL
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
+NtQueryDebugFilterState(
+     ULONG ComponentId,
+     ULONG Level
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtDebugContinue(
+    IN HANDLE DebugObject,
+    IN PCLIENT_ID AppClientId,
+    IN NTSTATUS ContinueStatus
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDebugContinue(
+    IN HANDLE DebugObject,
+    IN PCLIENT_ID AppClientId,
+    IN NTSTATUS ContinueStatus
+);
+
+NTSTATUS
+NTAPI
+NtDelayExecution(
+    IN BOOLEAN Alertable,
+    IN LARGE_INTEGER *Interval
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDelayExecution(
+    IN BOOLEAN Alertable,
+    IN LARGE_INTEGER *Interval
+);
+
+NTSTATUS
+NTAPI
 NtDeleteAtom(
     IN RTL_ATOM Atom
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwDeleteAtom(
     IN RTL_ATOM Atom
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtDeleteBootEntry(
     IN PUNICODE_STRING EntryName,
     IN PUNICODE_STRING EntryValue
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwDeleteBootEntry(
     IN PUNICODE_STRING EntryName,
     IN PUNICODE_STRING EntryValue
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtDeleteFile(
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwDeleteFile(
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtDeleteKey(
     IN HANDLE KeyHandle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwDeleteKey(
     IN HANDLE KeyHandle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtDeleteObjectAuditAlarm(
-    IN PUNICODE_STRING SubsystemName, 
-    IN PVOID HandleId, 
-    IN BOOLEAN GenerateOnClose 
+    IN PUNICODE_STRING SubsystemName,
+    IN PVOID HandleId,
+    IN BOOLEAN GenerateOnClose
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwDeleteObjectAuditAlarm(
-    IN PUNICODE_STRING SubsystemName, 
-    IN PVOID HandleId, 
-    IN BOOLEAN GenerateOnClose 
-);  
+    IN PUNICODE_STRING SubsystemName,
+    IN PVOID HandleId,
+    IN BOOLEAN GenerateOnClose
+);
 
 NTSTATUS
-STDCALL
+NTAPI
 NtDeleteValueKey(
     IN HANDLE KeyHandle,
     IN PUNICODE_STRING ValueName
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwDeleteValueKey(
     IN HANDLE KeyHandle,
     IN PUNICODE_STRING ValueName
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtDeviceIoControlFile(
     IN HANDLE DeviceHandle,
-    IN HANDLE Event OPTIONAL, 
-    IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL, 
-    IN PVOID UserApcContext OPTIONAL, 
-    OUT PIO_STATUS_BLOCK IoStatusBlock, 
+    IN HANDLE Event OPTIONAL,
+    IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
+    IN PVOID UserApcContext OPTIONAL,
+    OUT PIO_STATUS_BLOCK IoStatusBlock,
     IN ULONG IoControlCode,
-    IN PVOID InputBuffer, 
+    IN PVOID InputBuffer,
     IN ULONG InputBufferSize,
     OUT PVOID OutputBuffer,
     IN ULONG OutputBufferSize
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwDeviceIoControlFile(
     IN HANDLE DeviceHandle,
-    IN HANDLE Event OPTIONAL, 
-    IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL, 
-    IN PVOID UserApcContext OPTIONAL, 
-    OUT PIO_STATUS_BLOCK IoStatusBlock, 
+    IN HANDLE Event OPTIONAL,
+    IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
+    IN PVOID UserApcContext OPTIONAL,
+    OUT PIO_STATUS_BLOCK IoStatusBlock,
     IN ULONG IoControlCode,
-    IN PVOID InputBuffer, 
+    IN PVOID InputBuffer,
     IN ULONG InputBufferSize,
     OUT PVOID OutputBuffer,
     IN ULONG OutputBufferSize
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtDisplayString(
     IN PUNICODE_STRING DisplayString
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwDisplayString(
     IN PUNICODE_STRING DisplayString
 );
 
 NTSTATUS
-STDCALL
-NtEnumerateBootEntries(
-    IN ULONG Unknown1,
-    IN ULONG Unknown2
+NTAPI
+NtDuplicateObject(
+    IN HANDLE SourceProcessHandle,
+    IN HANDLE SourceHandle,
+    IN HANDLE TargetProcessHandle,
+    OUT PHANDLE TargetHandle,
+    IN ACCESS_MASK DesiredAccess,
+    IN ULONG HandleAttributes,
+    IN ULONG Options
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
-ZwEnumerateBootEntries(
-    IN ULONG Unknown1,
-    IN ULONG Unknown2
+NTAPI
+ZwDuplicateObject(
+    IN HANDLE SourceProcessHandle,
+    IN HANDLE SourceHandle,
+    IN HANDLE TargetProcessHandle,
+    OUT PHANDLE TargetHandle,
+    IN ACCESS_MASK DesiredAccess,
+    IN ULONG HandleAttributes,
+    IN ULONG Options
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
-NtEnumerateKey(
-    IN HANDLE KeyHandle,
-    IN ULONG Index,
-    IN KEY_INFORMATION_CLASS KeyInformationClass,
-    OUT PVOID KeyInformation,
-    IN ULONG Length,
+NTAPI
+NtDuplicateToken(
+    IN HANDLE ExistingTokenHandle,
+    IN ACCESS_MASK DesiredAccess,
+    IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+    IN BOOLEAN EffectiveOnly,
+    IN TOKEN_TYPE TokenType,
+    OUT PHANDLE NewTokenHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDuplicateToken(
+    IN HANDLE ExistingTokenHandle,
+    IN ACCESS_MASK DesiredAccess,
+    IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+    IN BOOLEAN EffectiveOnly,
+    IN TOKEN_TYPE TokenType,
+    OUT PHANDLE NewTokenHandle
+);
+
+NTSTATUS
+NTAPI
+NtEnumerateBootEntries(
+    IN ULONG Unknown1,
+    IN ULONG Unknown2
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwEnumerateBootEntries(
+    IN ULONG Unknown1,
+    IN ULONG Unknown2
+);
+
+NTSTATUS
+NTAPI
+NtEnumerateKey(
+    IN HANDLE KeyHandle,
+    IN ULONG Index,
+    IN KEY_INFORMATION_CLASS KeyInformationClass,
+    OUT PVOID KeyInformation,
+    IN ULONG Length,
     OUT PULONG ResultLength
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwEnumerateKey(
     IN HANDLE KeyHandle,
     IN ULONG Index,
@@ -833,8 +1185,9 @@ ZwEnumerateKey(
     IN ULONG Length,
     OUT PULONG ResultLength
 );
+
 NTSTATUS
-STDCALL
+NTAPI
 NtEnumerateValueKey(
     IN HANDLE KeyHandle,
     IN ULONG Index,
@@ -844,8 +1197,9 @@ NtEnumerateValueKey(
     OUT PULONG ResultLength
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwEnumerateValueKey(
     IN HANDLE KeyHandle,
     IN ULONG Index,
@@ -856,133 +1210,217 @@ ZwEnumerateValueKey(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
+NtExtendSection(
+    IN HANDLE SectionHandle,
+    IN PLARGE_INTEGER NewMaximumSize
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwExtendSection(
+    IN HANDLE SectionHandle,
+    IN PLARGE_INTEGER NewMaximumSize
+);
+
+NTSTATUS
+NTAPI
+NtFindAtom(
+    IN  PWSTR AtomName,
+    IN  ULONG AtomNameLength,
+    OUT PRTL_ATOM Atom OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwFindAtom(
+    IN  PWSTR AtomName,
+    IN  ULONG AtomNameLength,
+    OUT PRTL_ATOM Atom OPTIONAL
+);
+
+NTSTATUS
+NTAPI
 NtFlushBuffersFile(
     IN HANDLE FileHandle,
     OUT PIO_STATUS_BLOCK IoStatusBlock
 );
 
+#ifdef NTOS_MODE_USER
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwFlushBuffersFile(
     IN HANDLE FileHandle,
     OUT PIO_STATUS_BLOCK IoStatusBlock
 );
+#endif
+
+NTSTATUS
+NTAPI
+NtFlushInstructionCache(
+    IN HANDLE ProcessHandle,
+    IN PVOID BaseAddress,
+    IN ULONG NumberOfBytesToFlush
+);
 
 NTSTATUS
-STDCALL
+NTAPI
 NtFlushKey(
     IN HANDLE KeyHandle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwFlushKey(
     IN HANDLE KeyHandle
 );
- 
-NTSTATUS 
-STDCALL 
+
+NTSTATUS
+NTAPI
+NtFlushVirtualMemory(
+    IN HANDLE ProcessHandle,
+    IN PVOID BaseAddress,
+    IN ULONG NumberOfBytesToFlush,
+    OUT PULONG NumberOfBytesFlushed OPTIONAL
+);
+
+NTSTATUS
+NTAPI
 NtFlushWriteBuffer(VOID);
 
-NTSTATUS 
-STDCALL 
-ZwFlushWriteBuffer(VOID);                      
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwFlushWriteBuffer(VOID);
 
-NTSTATUS 
-STDCALL 
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
 NtFreeVirtualMemory(
     IN HANDLE ProcessHandle,
-    IN PVOID  *BaseAddress,    
-    IN PULONG  RegionSize,    
+    IN PVOID  *BaseAddress,
+    IN PULONG  RegionSize,
     IN ULONG  FreeType
 );
-                    
-NTSTATUS 
-STDCALL 
+
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwFreeVirtualMemory(
     IN HANDLE ProcessHandle,
-    IN PVOID  *BaseAddress,    
-    IN PULONG  RegionSize,    
+    IN PVOID  *BaseAddress,
+    IN PULONG  RegionSize,
     IN ULONG  FreeType
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtFsControlFile(
     IN HANDLE DeviceHandle,
-    IN HANDLE Event OPTIONAL, 
-    IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 
-    IN PVOID ApcContext OPTIONAL, 
-    OUT PIO_STATUS_BLOCK IoStatusBlock, 
+    IN HANDLE Event OPTIONAL,
+    IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+    IN PVOID ApcContext OPTIONAL,
+    OUT PIO_STATUS_BLOCK IoStatusBlock,
     IN ULONG IoControlCode,
-    IN PVOID InputBuffer, 
+    IN PVOID InputBuffer,
     IN ULONG InputBufferSize,
     OUT PVOID OutputBuffer,
     IN ULONG OutputBufferSize
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwFsControlFile(
     IN HANDLE DeviceHandle,
-    IN HANDLE Event OPTIONAL, 
-    IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 
-    IN PVOID ApcContext OPTIONAL, 
-    OUT PIO_STATUS_BLOCK IoStatusBlock, 
+    IN HANDLE Event OPTIONAL,
+    IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+    IN PVOID ApcContext OPTIONAL,
+    OUT PIO_STATUS_BLOCK IoStatusBlock,
     IN ULONG IoControlCode,
-    IN PVOID InputBuffer, 
+    IN PVOID InputBuffer,
     IN ULONG InputBufferSize,
     OUT PVOID OutputBuffer,
     IN ULONG OutputBufferSize
 );
 
 NTSTATUS
-STDCALL 
+NTAPI
 NtGetContextThread(
     IN HANDLE ThreadHandle,
     OUT PCONTEXT Context
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL 
+NTAPI
 ZwGetContextThread(
     IN HANDLE ThreadHandle,
     OUT PCONTEXT Context
 );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
+NtGetPlugPlayEvent(
+    IN ULONG Reserved1,
+    IN ULONG Reserved2,
+    OUT PPLUGPLAY_EVENT_BLOCK Buffer,
+    IN ULONG BufferSize
+);
+
+ULONG
+NTAPI
+NtGetTickCount(
+    VOID
+);
+
+NTSYSAPI
+ULONG
+NTAPI
+ZwGetTickCount(
+    VOID
+);
+
+NTSTATUS
+NTAPI
 NtImpersonateClientOfPort(
     HANDLE PortHandle,
-    PLPC_MESSAGE ClientMessage
+    PPORT_MESSAGE ClientMessage
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwImpersonateClientOfPort(
     HANDLE PortHandle,
-    PLPC_MESSAGE ClientMessage
+    PPORT_MESSAGE ClientMessage
 );
 
 NTSTATUS
-STDCALL 
+NTAPI
 NtImpersonateThread(
     IN HANDLE ThreadHandle,
     IN HANDLE ThreadToImpersonate,
     IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL 
+NTAPI
 ZwImpersonateThread(
     IN HANDLE ThreadHandle,
     IN HANDLE ThreadToImpersonate,
     IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtInitiatePowerAction(
     POWER_ACTION SystemAction,
     SYSTEM_POWER_STATE MinSystemState,
@@ -990,8 +1428,9 @@ NtInitiatePowerAction(
     BOOLEAN Asynchronous
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwInitiatePowerAction(
     POWER_ACTION SystemAction,
     SYSTEM_POWER_STATE MinSystemState,
@@ -1000,57 +1439,94 @@ ZwInitiatePowerAction(
 );
 
 NTSTATUS
-STDCALL 
+NTAPI
 NtInitializeRegistry(
     BOOLEAN SetUpBoot
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL 
+NTAPI
 ZwInitializeRegistry(
     BOOLEAN SetUpBoot
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtIsProcessInJob(
     IN HANDLE ProcessHandle,
     IN HANDLE JobHandle OPTIONAL
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwIsProcessInJob(
     IN HANDLE ProcessHandle,
     IN HANDLE JobHandle OPTIONAL
 );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
 NtListenPort(HANDLE PortHandle,
-             PLPC_MESSAGE LpcMessage
+             PPORT_MESSAGE ConnectionRequest
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwListenPort(HANDLE PortHandle,
-             PLPC_MESSAGE LpcMessage
+             PPORT_MESSAGE ConnectionRequest
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtLoadDriver(
     IN PUNICODE_STRING DriverServiceName
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL 
+NTAPI
 ZwLoadDriver(
     IN PUNICODE_STRING DriverServiceName
 );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
+NtLoadKey(
+    IN POBJECT_ATTRIBUTES KeyObjectAttributes,
+    IN POBJECT_ATTRIBUTES FileObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwLoadKey(
+    IN POBJECT_ATTRIBUTES KeyObjectAttributes,
+    IN POBJECT_ATTRIBUTES FileObjectAttributes
+);
+
+NTSTATUS
+NTAPI
+NtLoadKey2(
+    IN POBJECT_ATTRIBUTES KeyObjectAttributes,
+    IN POBJECT_ATTRIBUTES FileObjectAttributes,
+    IN ULONG Flags
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwLoadKey2(
+    IN POBJECT_ATTRIBUTES KeyObjectAttributes,
+    IN POBJECT_ATTRIBUTES FileObjectAttributes,
+    IN ULONG Flags
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
 NtLockFile(
     IN  HANDLE FileHandle,
     IN  HANDLE Event OPTIONAL,
@@ -1059,13 +1535,15 @@ NtLockFile(
     OUT PIO_STATUS_BLOCK IoStatusBlock,
     IN  PLARGE_INTEGER ByteOffset,
     IN  PLARGE_INTEGER Length,
-    IN  PULONG Key,
+    IN  ULONG Key,
     IN  BOOLEAN FailImmediatedly,
     IN  BOOLEAN ExclusiveLock
 );
 
-NTSTATUS 
-STDCALL
+
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwLockFile(
     IN  HANDLE FileHandle,
     IN  HANDLE Event OPTIONAL,
@@ -1074,37 +1552,58 @@ ZwLockFile(
     OUT PIO_STATUS_BLOCK IoStatusBlock,
     IN  PLARGE_INTEGER ByteOffset,
     IN  PLARGE_INTEGER Length,
-    IN  PULONG Key,
+    IN  ULONG Key,
     IN  BOOLEAN FailImmediatedly,
     IN  BOOLEAN ExclusiveLock
 );
 
 NTSTATUS
-STDCALL
+NTAPI
+NtLockVirtualMemory(
+    HANDLE ProcessHandle,
+    PVOID BaseAddress,
+    ULONG NumberOfBytesToLock,
+    PULONG NumberOfBytesLocked
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwLockVirtualMemory(
+    HANDLE ProcessHandle,
+    PVOID BaseAddress,
+    ULONG NumberOfBytesToLock,
+    PULONG NumberOfBytesLocked
+);
+
+NTSTATUS
+NTAPI
 NtMakePermanentObject(
     IN HANDLE Object
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwMakePermanentObject(
     IN HANDLE Object
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtMakeTemporaryObject(
-    IN HANDLE Handle 
+    IN HANDLE Handle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwMakeTemporaryObject(
-    IN HANDLE Handle 
+    IN HANDLE Handle
 );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
 NtMapViewOfSection(
     IN HANDLE SectionHandle,
     IN HANDLE ProcessHandle,
@@ -1118,8 +1617,9 @@ NtMapViewOfSection(
     IN ULONG AccessProtection
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwMapViewOfSection(
     IN HANDLE SectionHandle,
     IN HANDLE ProcessHandle,
@@ -1134,12 +1634,12 @@ ZwMapViewOfSection(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtNotifyChangeDirectoryFile(
     IN HANDLE FileHandle,
-    IN HANDLE Event OPTIONAL, 
-    IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 
-    IN PVOID ApcContext OPTIONAL, 
+    IN HANDLE Event OPTIONAL,
+    IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+    IN PVOID ApcContext OPTIONAL,
     OUT PIO_STATUS_BLOCK IoStatusBlock,
     OUT PVOID Buffer,
     IN ULONG BufferSize,
@@ -1147,13 +1647,14 @@ NtNotifyChangeDirectoryFile(
     IN BOOLEAN WatchTree
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwNotifyChangeDirectoryFile(
     IN HANDLE FileHandle,
-    IN HANDLE Event OPTIONAL, 
-    IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 
-    IN PVOID ApcContext OPTIONAL, 
+    IN HANDLE Event OPTIONAL,
+    IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+    IN PVOID ApcContext OPTIONAL,
     OUT PIO_STATUS_BLOCK IoStatusBlock,
     OUT PVOID Buffer,
     IN ULONG BufferSize,
@@ -1162,45 +1663,47 @@ ZwNotifyChangeDirectoryFile(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtNotifyChangeKey(
     IN HANDLE KeyHandle,
     IN HANDLE Event,
-    IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 
-    IN PVOID ApcContext OPTIONAL, 
+    IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+    IN PVOID ApcContext OPTIONAL,
     OUT PIO_STATUS_BLOCK IoStatusBlock,
     IN ULONG CompletionFilter,
-    IN BOOLEAN Asynchroneous, 
+    IN BOOLEAN Asynchroneous,
     OUT PVOID ChangeBuffer,
     IN ULONG Length,
     IN BOOLEAN WatchSubtree
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwNotifyChangeKey(
     IN HANDLE KeyHandle,
     IN HANDLE Event,
-    IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 
-    IN PVOID ApcContext OPTIONAL, 
+    IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+    IN PVOID ApcContext OPTIONAL,
     OUT PIO_STATUS_BLOCK IoStatusBlock,
     IN ULONG CompletionFilter,
-    IN BOOLEAN Asynchroneous, 
+    IN BOOLEAN Asynchroneous,
     OUT PVOID ChangeBuffer,
     IN ULONG Length,
     IN BOOLEAN WatchSubtree
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtOpenDirectoryObject(
     OUT PHANDLE FileHandle,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwOpenDirectoryObject(
     OUT PHANDLE FileHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -1208,15 +1711,16 @@ ZwOpenDirectoryObject(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtOpenEvent(
     OUT PHANDLE EventHandle,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwOpenEvent(
     OUT PHANDLE EventHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -1224,23 +1728,25 @@ ZwOpenEvent(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtOpenEventPair(
     OUT PHANDLE EventPairHandle,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwOpenEventPair(
     OUT PHANDLE EventPairHandle,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtOpenFile(
     OUT PHANDLE FileHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -1250,8 +1756,9 @@ NtOpenFile(
     IN ULONG OpenOptions
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwOpenFile(
     OUT PHANDLE FileHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -1262,47 +1769,50 @@ ZwOpenFile(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtOpenIoCompletion(
     OUT PHANDLE CompetionPort,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwOpenIoCompletion(
     OUT PHANDLE CompetionPort,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
-NTSTATUS 
-STDCALL 
+NTSTATUS
+NTAPI
 NtOpenJobObject(
-    PHANDLE JobHandle, 
+    PHANDLE JobHandle,
     ACCESS_MASK DesiredAccess,
     POBJECT_ATTRIBUTES ObjectAttributes
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwOpenJobObject(
-    PHANDLE JobHandle, 
+    PHANDLE JobHandle,
     ACCESS_MASK DesiredAccess,
     POBJECT_ATTRIBUTES ObjectAttributes
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtOpenKey(
     OUT PHANDLE KeyHandle,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwOpenKey(
     OUT PHANDLE KeyHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -1310,23 +1820,61 @@ ZwOpenKey(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtOpenMutant(
     OUT PHANDLE MutantHandle,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwOpenMutant(
     OUT PHANDLE MutantHandle,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
-NTSTATUS 
-STDCALL
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtOpenObjectAuditAlarm(
+    IN PUNICODE_STRING SubsystemName,
+    IN PVOID HandleId,
+    IN PUNICODE_STRING ObjectTypeName,
+    IN PUNICODE_STRING ObjectName,
+    IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+    IN HANDLE ClientToken,
+    IN ULONG DesiredAccess,
+    IN ULONG GrantedAccess,
+    IN PPRIVILEGE_SET Privileges,
+    IN BOOLEAN ObjectCreation,
+    IN BOOLEAN AccessGranted,
+    OUT PBOOLEAN GenerateOnClose
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenObjectAuditAlarm(
+    IN PUNICODE_STRING SubsystemName,
+    IN PVOID HandleId,
+    IN PUNICODE_STRING ObjectTypeName,
+    IN PUNICODE_STRING ObjectName,
+    IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+    IN HANDLE ClientToken,
+    IN ULONG DesiredAccess,
+    IN ULONG GrantedAccess,
+    IN PPRIVILEGE_SET Privileges,
+    IN BOOLEAN ObjectCreation,
+    IN BOOLEAN AccessGranted,
+    OUT PBOOLEAN GenerateOnClose
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
 NtOpenProcess(
     OUT PHANDLE ProcessHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -1334,33 +1882,37 @@ NtOpenProcess(
     IN PCLIENT_ID ClientId
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwOpenProcess(
     OUT PHANDLE ProcessHandle,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes,
     IN PCLIENT_ID ClientId
-); 
+);
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtOpenProcessToken(
     IN HANDLE ProcessHandle,
     IN ACCESS_MASK DesiredAccess,
     OUT PHANDLE TokenHandle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwOpenProcessToken(
     IN HANDLE ProcessHandle,
     IN ACCESS_MASK DesiredAccess,
     OUT PHANDLE TokenHandle
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtOpenProcessTokenEx(
     IN HANDLE ProcessHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -1368,8 +1920,9 @@ NtOpenProcessTokenEx(
     OUT PHANDLE TokenHandle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwOpenProcessTokenEx(
     IN HANDLE ProcessHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -1378,15 +1931,16 @@ ZwOpenProcessTokenEx(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtOpenSection(
     OUT PHANDLE SectionHandle,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwOpenSection(
     OUT PHANDLE SectionHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -1394,31 +1948,33 @@ ZwOpenSection(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtOpenSemaphore(
-    IN HANDLE SemaphoreHandle,
+    OUT PHANDLE SemaphoreHandle,
     IN ACCESS_MASK DesiredAcces,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwOpenSemaphore(
-    IN HANDLE SemaphoreHandle,
+    OUT PHANDLE SemaphoreHandle,
     IN ACCESS_MASK DesiredAcces,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtOpenSymbolicLinkObject(
     OUT PHANDLE SymbolicLinkHandle,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwOpenSymbolicLinkObject(
     OUT PHANDLE SymbolicLinkHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -1426,7 +1982,7 @@ ZwOpenSymbolicLinkObject(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtOpenThread(
     OUT PHANDLE ThreadHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -1434,8 +1990,9 @@ NtOpenThread(
     IN PCLIENT_ID ClientId
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwOpenThread(
     OUT PHANDLE ThreadHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -1443,8 +2000,9 @@ ZwOpenThread(
     IN PCLIENT_ID ClientId
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtOpenThreadToken(
     IN HANDLE ThreadHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -1452,8 +2010,9 @@ NtOpenThreadToken(
     OUT PHANDLE TokenHandle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwOpenThreadToken(
     IN HANDLE ThreadHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -1461,8 +2020,9 @@ ZwOpenThreadToken(
     OUT PHANDLE TokenHandle
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtOpenThreadTokenEx(
     IN HANDLE ThreadHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -1471,8 +2031,9 @@ NtOpenThreadTokenEx(
     OUT PHANDLE TokenHandle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwOpenThreadTokenEx(
     IN HANDLE ThreadHandle,
     IN ACCESS_MASK DesiredAccess,
@@ -1482,58 +2043,75 @@ ZwOpenThreadTokenEx(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtOpenTimer(
     OUT PHANDLE TimerHandle,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
+
+#ifdef NTOS_MODE_USER
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwOpenTimer(
     OUT PHANDLE TimerHandle,
     IN ACCESS_MASK DesiredAccess,
     IN POBJECT_ATTRIBUTES ObjectAttributes
 );
+#endif
+
+NTSTATUS
+NTAPI
+NtPlugPlayControl(
+    IN PLUGPLAY_CONTROL_CLASS PlugPlayControlClass,
+    IN OUT PVOID Buffer,
+    IN ULONG BufferSize
+);
 
-NTSTATUS 
-STDCALL 
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
 NtPowerInformation(
     POWER_INFORMATION_LEVEL PowerInformationLevel,
-    PVOID InputBuffer, 
+    PVOID InputBuffer,
     ULONG InputBufferLength,
     PVOID OutputBuffer,
     ULONG OutputBufferLength
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwPowerInformation(
     POWER_INFORMATION_LEVEL PowerInformationLevel,
-    PVOID InputBuffer, 
+    PVOID InputBuffer,
     ULONG InputBufferLength,
     PVOID OutputBuffer,
     ULONG OutputBufferLength
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtPrivilegeCheck(
     IN HANDLE ClientToken,
     IN PPRIVILEGE_SET RequiredPrivileges,
     IN PBOOLEAN Result
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwPrivilegeCheck(
     IN HANDLE ClientToken,
     IN PPRIVILEGE_SET RequiredPrivileges,
     IN PBOOLEAN Result
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtPrivilegedServiceAuditAlarm(
     IN PUNICODE_STRING SubsystemName,
     IN PUNICODE_STRING ServiceName,
@@ -1542,18 +2120,20 @@ NtPrivilegedServiceAuditAlarm(
     IN BOOLEAN AccessGranted
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwPrivilegedServiceAuditAlarm(
-    IN PUNICODE_STRING SubsystemName,    
-    IN PUNICODE_STRING ServiceName,    
+    IN PUNICODE_STRING SubsystemName,
+    IN PUNICODE_STRING ServiceName,
     IN HANDLE ClientToken,
-    IN PPRIVILEGE_SET Privileges,    
-    IN BOOLEAN AccessGranted     
-);    
+    IN PPRIVILEGE_SET Privileges,
+    IN BOOLEAN AccessGranted
+);
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtPrivilegeObjectAuditAlarm(
     IN PUNICODE_STRING SubsystemName,
     IN PVOID HandleId,
@@ -1563,8 +2143,9 @@ NtPrivilegeObjectAuditAlarm(
     IN BOOLEAN AccessGranted
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwPrivilegeObjectAuditAlarm(
     IN PUNICODE_STRING SubsystemName,
     IN PVOID HandleId,
@@ -1575,28 +2156,51 @@ ZwPrivilegeObjectAuditAlarm(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
+NtProtectVirtualMemory(
+    IN HANDLE ProcessHandle,
+    IN PVOID *BaseAddress,
+    IN ULONG *NumberOfBytesToProtect,
+    IN ULONG NewAccessProtection,
+    OUT PULONG OldAccessProtection
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwProtectVirtualMemory(
+    IN HANDLE ProcessHandle,
+    IN PVOID *BaseAddress,
+    IN ULONG *NumberOfBytesToProtect,
+    IN ULONG NewAccessProtection,
+    OUT PULONG OldAccessProtection
+);
+
+NTSTATUS
+NTAPI
 NtPulseEvent(
     IN HANDLE EventHandle,
     IN PLONG PulseCount OPTIONAL
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwPulseEvent(
     IN HANDLE EventHandle,
     IN PLONG PulseCount OPTIONAL
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtQueryAttributesFile(
     IN POBJECT_ATTRIBUTES ObjectAttributes,
     OUT PFILE_BASIC_INFORMATION FileInformation
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryAttributesFile(
     IN POBJECT_ATTRIBUTES ObjectAttributes,
     OUT PFILE_BASIC_INFORMATION FileInformation
@@ -1604,60 +2208,66 @@ ZwQueryAttributesFile(
 
 
 NTSTATUS
-STDCALL
+NTAPI
 NtQueryBootEntryOrder(
     IN ULONG Unknown1,
     IN ULONG Unknown2
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryBootEntryOrder(
     IN ULONG Unknown1,
     IN ULONG Unknown2
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtQueryBootOptions(
     IN ULONG Unknown1,
     IN ULONG Unknown2
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryBootOptions(
     IN ULONG Unknown1,
     IN ULONG Unknown2
 );
+
 NTSTATUS
-STDCALL
+NTAPI
 NtQueryDefaultLocale(
     IN BOOLEAN UserProfile,
     OUT PLCID DefaultLocaleId
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryDefaultLocale(
     IN BOOLEAN UserProfile,
     OUT PLCID DefaultLocaleId
 );
 
-NTSTATUS 
-STDCALL 
+NTSTATUS
+NTAPI
 NtQueryDefaultUILanguage(
     PLANGID LanguageId
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwQueryDefaultUILanguage(
     PLANGID LanguageId
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtQueryDirectoryFile(
     IN HANDLE FileHandle,
     IN HANDLE Event OPTIONAL,
@@ -1672,8 +2282,9 @@ NtQueryDirectoryFile(
     IN BOOLEAN RestartScan
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryDirectoryFile(
     IN HANDLE FileHandle,
     IN HANDLE Event OPTIONAL,
@@ -1689,21 +2300,48 @@ ZwQueryDirectoryFile(
 );
 
 NTSTATUS
-STDCALL
-NtQueryEaFile(
-    IN HANDLE FileHandle,
-    OUT PIO_STATUS_BLOCK IoStatusBlock,
-    OUT PVOID Buffer,
-    IN ULONG Length,
-    IN BOOLEAN ReturnSingleEntry,
-    IN PVOID EaList OPTIONAL,
-    IN ULONG EaListLength,
-    IN PULONG EaIndex OPTIONAL,
-    IN BOOLEAN RestartScan
-);
+NTAPI
+NtQueryDirectoryObject(
+    IN     HANDLE DirectoryHandle,
+    OUT    PVOID Buffer,
+    IN     ULONG BufferLength,
+    IN     BOOLEAN ReturnSingleEntry,
+    IN     BOOLEAN RestartScan,
+    IN OUT PULONG Context,
+    OUT    PULONG ReturnLength OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryDirectoryObject(
+    IN     HANDLE DirectoryHandle,
+    OUT    PVOID Buffer,
+    IN     ULONG BufferLength,
+    IN     BOOLEAN ReturnSingleEntry,
+    IN     BOOLEAN RestartScan,
+    IN OUT PULONG Context,
+    OUT    PULONG ReturnLength OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtQueryEaFile(
+    IN HANDLE FileHandle,
+    OUT PIO_STATUS_BLOCK IoStatusBlock,
+    OUT PVOID Buffer,
+    IN ULONG Length,
+    IN BOOLEAN ReturnSingleEntry,
+    IN PVOID EaList OPTIONAL,
+    IN ULONG EaListLength,
+    IN PULONG EaIndex OPTIONAL,
+    IN BOOLEAN RestartScan
+);
 
+#ifdef NTOS_MODE_USER
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryEaFile(
     IN HANDLE FileHandle,
     OUT PIO_STATUS_BLOCK IoStatusBlock,
@@ -1715,9 +2353,10 @@ ZwQueryEaFile(
     IN PULONG EaIndex OPTIONAL,
     IN BOOLEAN RestartScan
 );
+#endif
 
 NTSTATUS
-STDCALL
+NTAPI
 NtQueryEvent(
     IN HANDLE EventHandle,
     IN EVENT_INFORMATION_CLASS EventInformationClass,
@@ -1725,8 +2364,10 @@ NtQueryEvent(
     IN ULONG EventInformationLength,
     OUT PULONG ReturnLength
 );
+
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryEvent(
     IN HANDLE EventHandle,
     IN EVENT_INFORMATION_CLASS EventInformationClass,
@@ -1736,21 +2377,44 @@ ZwQueryEvent(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtQueryFullAttributesFile(
     IN POBJECT_ATTRIBUTES ObjectAttributes,
     OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwQueryFullAttributesFile(
     IN POBJECT_ATTRIBUTES ObjectAttributes,
     OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
 );
 
 NTSTATUS
-STDCALL
+NTAPI
+NtQueryInformationAtom(
+    IN  RTL_ATOM Atom,
+    IN  ATOM_INFORMATION_CLASS AtomInformationClass,
+    OUT PVOID AtomInformation,
+    IN  ULONG AtomInformationLength,
+    OUT PULONG ReturnLength OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryInformationAtom(
+    IN  RTL_ATOM Atom,
+    IN  ATOM_INFORMATION_CLASS AtomInformationClass,
+    OUT PVOID AtomInformation,
+    IN  ULONG AtomInformationLength,
+    OUT PULONG ReturnLength OPTIONAL
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
 NtQueryInformationFile(
     IN HANDLE FileHandle,
     OUT PIO_STATUS_BLOCK IoStatusBlock,
@@ -1759,8 +2423,9 @@ NtQueryInformationFile(
     IN FILE_INFORMATION_CLASS FileInformationClass
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryInformationFile(
     HANDLE FileHandle,
     PIO_STATUS_BLOCK IoStatusBlock,
@@ -1769,41 +2434,43 @@ ZwQueryInformationFile(
     FILE_INFORMATION_CLASS FileInformationClass
 );
 
-NTSTATUS 
-STDCALL 
+NTSTATUS
+NTAPI
 NtQueryInformationJobObject(
     HANDLE JobHandle,
-    JOBOBJECTINFOCLASS JobInformationClass, 
+    JOBOBJECTINFOCLASS JobInformationClass,
     PVOID JobInformation,
-    ULONG JobInformationLength, 
+    ULONG JobInformationLength,
     PULONG ReturnLength
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwQueryInformationJobObject(
     HANDLE JobHandle,
-    JOBOBJECTINFOCLASS JobInformationClass, 
+    JOBOBJECTINFOCLASS JobInformationClass,
     PVOID JobInformation,
-    ULONG JobInformationLength, 
+    ULONG JobInformationLength,
     PULONG ReturnLength
 );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
 NtQueryInformationPort(
     HANDLE PortHandle,
-    CINT PortInformationClass,
+    PORT_INFORMATION_CLASS PortInformationClass,
     PVOID PortInformation,
     ULONG PortInformationLength,
     PULONG ReturnLength
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwQueryInformationPort(
     HANDLE PortHandle,
-    CINT PortInformationClass,
+    PORT_INFORMATION_CLASS PortInformationClass,
     PVOID PortInformation,
     ULONG PortInformationLength,
     PULONG ReturnLength
@@ -1811,7 +2478,7 @@ ZwQueryInformationPort(
 
 #ifndef _NTDDK_
 NTSTATUS
-STDCALL
+NTAPI
 NtQueryInformationProcess(
     IN HANDLE  ProcessHandle,
     IN PROCESSINFOCLASS  ProcessInformationClass,
@@ -1819,9 +2486,10 @@ NtQueryInformationProcess(
     IN ULONG  ProcessInformationLength,
     OUT PULONG  ReturnLength OPTIONAL
 );
- 
+
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryInformationProcess(
     IN HANDLE  ProcessHandle,
     IN PROCESSINFOCLASS  ProcessInformationClass,
@@ -1832,27 +2500,29 @@ ZwQueryInformationProcess(
 #endif
 
 NTSTATUS
-STDCALL
+NTAPI
 NtQueryInformationThread(
     IN HANDLE ThreadHandle,
     IN THREADINFOCLASS ThreadInformationClass,
     OUT PVOID ThreadInformation,
     IN ULONG ThreadInformationLength,
-    OUT PULONG ReturnLength 
+    OUT PULONG ReturnLength
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwQueryInformationThread(
     IN HANDLE ThreadHandle,
     IN THREADINFOCLASS ThreadInformationClass,
     OUT PVOID ThreadInformation,
-    IN ULONG ThreadInformationLength, 
+    IN ULONG ThreadInformationLength,
     OUT PULONG ReturnLength
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtQueryInformationToken(
     IN HANDLE TokenHandle,
     IN TOKEN_INFORMATION_CLASS TokenInformationClass,
@@ -1861,8 +2531,9 @@ NtQueryInformationToken(
     OUT PULONG ReturnLength
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryInformationToken(
     IN HANDLE TokenHandle,
     IN TOKEN_INFORMATION_CLASS TokenInformationClass,
@@ -1871,20 +2542,36 @@ ZwQueryInformationToken(
     OUT PULONG ReturnLength
 );
 
-NTSTATUS 
-STDCALL 
+NTSTATUS
+NTAPI
 NtQueryInstallUILanguage(
     PLANGID LanguageId
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwQueryInstallUILanguage(
     PLANGID LanguageId
 );
 
 NTSTATUS
-STDCALL
+NTAPI
+NtQueryIntervalProfile(
+    IN  KPROFILE_SOURCE ProfileSource,
+    OUT PULONG Interval
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryIntervalProfile(
+    OUT PULONG Interval,
+    OUT KPROFILE_SOURCE ClockSource
+);
+
+NTSTATUS
+NTAPI
 NtQueryIoCompletion(
     IN  HANDLE IoCompletionHandle,
     IN  IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass,
@@ -1893,8 +2580,9 @@ NtQueryIoCompletion(
     OUT PULONG ResultLength OPTIONAL
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryIoCompletion(
     IN  HANDLE IoCompletionHandle,
     IN  IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass,
@@ -1904,7 +2592,7 @@ ZwQueryIoCompletion(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtQueryKey(
     IN HANDLE KeyHandle,
     IN KEY_INFORMATION_CLASS KeyInformationClass,
@@ -1913,8 +2601,9 @@ NtQueryKey(
     OUT PULONG ResultLength
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryKey(
     IN HANDLE KeyHandle,
     IN KEY_INFORMATION_CLASS KeyInformationClass,
@@ -1923,8 +2612,9 @@ ZwQueryKey(
     OUT PULONG ResultLength
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtQueryQuotaInformationFile(
     IN HANDLE FileHandle,
     OUT PIO_STATUS_BLOCK IoStatusBlock,
@@ -1937,9 +2627,9 @@ NtQueryQuotaInformationFile(
     IN BOOLEAN RestartScan
 );
 
-
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryQuotaInformationFile(
     IN HANDLE FileHandle,
     OUT PIO_STATUS_BLOCK IoStatusBlock,
@@ -1953,7 +2643,7 @@ ZwQueryQuotaInformationFile(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtQueryMultipleValueKey(
     IN HANDLE KeyHandle,
     IN OUT PKEY_VALUE_ENTRY ValueList,
@@ -1963,8 +2653,9 @@ NtQueryMultipleValueKey(
     OUT PULONG ReturnLength
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryMultipleValueKey(
     IN HANDLE KeyHandle,
     IN OUT PKEY_VALUE_ENTRY ValueList,
@@ -1975,7 +2666,7 @@ ZwQueryMultipleValueKey(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtQueryMutant(
     IN HANDLE MutantHandle,
     IN MUTANT_INFORMATION_CLASS MutantInformationClass,
@@ -1984,8 +2675,9 @@ NtQueryMutant(
     OUT PULONG ResultLength
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryMutant(
     IN HANDLE MutantHandle,
     IN MUTANT_INFORMATION_CLASS MutantInformationClass,
@@ -1995,21 +2687,86 @@ ZwQueryMutant(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
+NtQueryObject(
+    IN HANDLE ObjectHandle,
+    IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
+    OUT PVOID ObjectInformation,
+    IN ULONG Length,
+    OUT PULONG ResultLength OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryObject(
+    IN HANDLE ObjectHandle,
+    IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
+    OUT PVOID ObjectInformation,
+    IN ULONG Length,
+    OUT PULONG ResultLength OPTIONAL
+);
+
+NTSTATUS
+NTAPI
 NtQueryPerformanceCounter(
     IN PLARGE_INTEGER Counter,
     IN PLARGE_INTEGER Frequency
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryPerformanceCounter(
     IN PLARGE_INTEGER Counter,
     IN PLARGE_INTEGER Frequency
 );
 
 NTSTATUS
-STDCALL
+NTAPI
+NtQuerySection(
+    IN HANDLE SectionHandle,
+    IN SECTION_INFORMATION_CLASS SectionInformationClass,
+    OUT PVOID SectionInformation,
+    IN ULONG Length,
+    OUT PULONG ResultLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQuerySection(
+    IN HANDLE SectionHandle,
+    IN SECTION_INFORMATION_CLASS SectionInformationClass,
+    OUT PVOID SectionInformation,
+    IN ULONG Length,
+    OUT PULONG ResultLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtQuerySecurityObject(
+    IN HANDLE Handle,
+    IN SECURITY_INFORMATION SecurityInformation,
+    OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
+    IN ULONG Length,
+    OUT PULONG ResultLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQuerySecurityObject(
+    IN HANDLE Handle,
+    IN SECURITY_INFORMATION SecurityInformation,
+    OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
+    IN ULONG Length,
+    OUT PULONG ResultLength
+);
+
+NTSTATUS
+NTAPI
 NtQuerySemaphore(
     IN  HANDLE SemaphoreHandle,
     IN  SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass,
@@ -2018,8 +2775,9 @@ NtQuerySemaphore(
     OUT PULONG ReturnLength
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQuerySemaphore(
     IN  HANDLE SemaphoreHandle,
     IN  SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass,
@@ -2029,32 +2787,34 @@ ZwQuerySemaphore(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtQuerySymbolicLinkObject(
     IN HANDLE SymLinkObjHandle,
     OUT PUNICODE_STRING LinkTarget,
     OUT PULONG DataWritten OPTIONAL
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQuerySymbolicLinkObject(
     IN HANDLE SymLinkObjHandle,
     OUT PUNICODE_STRING LinkName,
     OUT PULONG DataWritten OPTIONAL
-); 
+);
 
 NTSTATUS
-STDCALL
+NTAPI
 NtQuerySystemEnvironmentValue(
     IN PUNICODE_STRING Name,
-    OUT PVOID Value,
+    OUT PWSTR Value,
     ULONG Length,
     PULONG ReturnLength
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQuerySystemEnvironmentValue(
     IN PUNICODE_STRING Name,
     OUT PVOID Value,
@@ -2063,7 +2823,7 @@ ZwQuerySystemEnvironmentValue(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtQuerySystemInformation(
     IN  SYSTEM_INFORMATION_CLASS SystemInformationClass,
     OUT PVOID SystemInformation,
@@ -2071,8 +2831,9 @@ NtQuerySystemInformation(
     OUT PULONG ResultLength
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQuerySystemInformation(
     IN  SYSTEM_INFORMATION_CLASS SystemInformationClass,
     OUT PVOID SystemInformation,
@@ -2081,13 +2842,20 @@ ZwQuerySystemInformation(
 );
 
 NTSTATUS
-STDCALL
-NtQuerySystemTime (
+NTAPI
+NtQuerySystemTime(
+    OUT PLARGE_INTEGER CurrentTime
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQuerySystemTime(
     OUT PLARGE_INTEGER CurrentTime
 );
-     
+
 NTSTATUS
-STDCALL
+NTAPI
 NtQueryTimer(
     IN HANDLE TimerHandle,
     IN TIMER_INFORMATION_CLASS TimerInformationClass,
@@ -2095,8 +2863,10 @@ NtQueryTimer(
     IN ULONG Length,
     OUT PULONG ResultLength
 );
+
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryTimer(
     IN HANDLE TimerHandle,
     IN TIMER_INFORMATION_CLASS TimerInformationClass,
@@ -2106,23 +2876,24 @@ ZwQueryTimer(
 );
 
 NTSTATUS
-STDCALL 
-NtQueryTimerResolution ( 
+NTAPI
+NtQueryTimerResolution(
     OUT PULONG MinimumResolution,
-    OUT PULONG MaximumResolution, 
-    OUT PULONG ActualResolution 
-); 
+    OUT PULONG MaximumResolution,
+    OUT PULONG ActualResolution
+);
 
+NTSYSAPI
 NTSTATUS
-STDCALL 
-ZwQueryTimerResolution ( 
+NTAPI
+ZwQueryTimerResolution(
     OUT PULONG MinimumResolution,
-    OUT PULONG MaximumResolution, 
-    OUT PULONG ActualResolution 
-); 
-     
+    OUT PULONG MaximumResolution,
+    OUT PULONG ActualResolution
+);
+
 NTSTATUS
-STDCALL
+NTAPI
 NtQueryValueKey(
     IN HANDLE KeyHandle,
     IN PUNICODE_STRING ValueName,
@@ -2132,8 +2903,9 @@ NtQueryValueKey(
     OUT PULONG ResultLength
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryValueKey(
     IN HANDLE KeyHandle,
     IN PUNICODE_STRING ValueName,
@@ -2144,17 +2916,42 @@ ZwQueryValueKey(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
+NtQueryVirtualMemory(
+    IN HANDLE ProcessHandle,
+    IN PVOID Address,
+    IN MEMORY_INFORMATION_CLASS VirtualMemoryInformationClass,
+    OUT PVOID VirtualMemoryInformation,
+    IN ULONG Length,
+    OUT PULONG ResultLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryVirtualMemory(
+    IN HANDLE ProcessHandle,
+    IN PVOID Address,
+    IN MEMORY_INFORMATION_CLASS VirtualMemoryInformationClass,
+    OUT PVOID VirtualMemoryInformation,
+    IN ULONG Length,
+    OUT PULONG ResultLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
 NtQueryVolumeInformationFile(
     IN HANDLE FileHandle,
     OUT PIO_STATUS_BLOCK IoStatusBlock,
     OUT PVOID FsInformation,
     IN ULONG Length,
-    IN FS_INFORMATION_CLASS FsInformationClass 
+    IN FS_INFORMATION_CLASS FsInformationClass
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueryVolumeInformationFile(
     IN HANDLE FileHandle,
     OUT PIO_STATUS_BLOCK IoStatusBlock,
@@ -2164,7 +2961,7 @@ ZwQueryVolumeInformationFile(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtQueueApcThread(
     HANDLE ThreadHandle,
     PKNORMAL_ROUTINE ApcRoutine,
@@ -2173,8 +2970,9 @@ NtQueueApcThread(
     PVOID SystemArgument2
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwQueueApcThread(
     HANDLE ThreadHandle,
     PKNORMAL_ROUTINE ApcRoutine,
@@ -2184,15 +2982,16 @@ ZwQueueApcThread(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtRaiseException(
     IN PEXCEPTION_RECORD ExceptionRecord,
     IN PCONTEXT Context,
     IN BOOLEAN SearchFrames
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwRaiseException(
     IN PEXCEPTION_RECORD ExceptionRecord,
     IN PCONTEXT Context,
@@ -2200,7 +2999,31 @@ ZwRaiseException(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
+NtRaiseHardError(
+    IN NTSTATUS ErrorStatus,
+    IN ULONG NumberOfParameters,
+    IN ULONG UnicodeStringParameterMask,
+    IN PULONG_PTR Parameters,
+    IN ULONG ValidResponseOptions,
+    OUT PULONG Response
+); 
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwRaiseHardError(
+    IN NTSTATUS ErrorStatus,
+    IN ULONG NumberOfParameters,
+    IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL,
+    IN PVOID *Parameters,
+    IN HARDERROR_RESPONSE_OPTION ResponseOption,
+    OUT PHARDERROR_RESPONSE Response
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
 NtReadFile(
     IN HANDLE FileHandle,
     IN HANDLE Event OPTIONAL,
@@ -2210,11 +3033,12 @@ NtReadFile(
     OUT PVOID Buffer,
     IN ULONG BufferLength,
     IN PLARGE_INTEGER ByteOffset OPTIONAL,
-    IN PULONG Key OPTIONAL    
+    IN PULONG Key OPTIONAL
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwReadFile(
     IN HANDLE FileHandle,
     IN HANDLE Event OPTIONAL,
@@ -2224,11 +3048,11 @@ ZwReadFile(
     OUT PVOID Buffer,
     IN ULONG BufferLength,
     IN PLARGE_INTEGER ByteOffset OPTIONAL,
-    IN PULONG Key OPTIONAL    
+    IN PULONG Key OPTIONAL
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtReadFileScatter(
     IN HANDLE FileHandle,
     IN HANDLE Event OPTIONAL,
@@ -2241,8 +3065,9 @@ NtReadFileScatter(
     IN PULONG Key OPTIONAL
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwReadFileScatter(
     IN HANDLE FileHandle,
     IN HANDLE Event OPTIONAL,
@@ -2255,22 +3080,23 @@ ZwReadFileScatter(
     IN PULONG Key OPTIONAL
 );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
 NtReadRequestData(
     HANDLE PortHandle,
-    PLPC_MESSAGE Message,
+    PPORT_MESSAGE Message,
     ULONG Index,
     PVOID Buffer,
     ULONG BufferLength,
     PULONG ReturnLength
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwReadRequestData(
     HANDLE PortHandle,
-    PLPC_MESSAGE Message,
+    PPORT_MESSAGE Message,
     ULONG Index,
     PVOID Buffer,
     ULONG BufferLength,
@@ -2278,60 +3104,65 @@ ZwReadRequestData(
 );
 
 NTSTATUS
-STDCALL
-NtReadVirtualMemory( 
+NTAPI
+NtReadVirtualMemory(
     IN HANDLE ProcessHandle,
     IN PVOID BaseAddress,
     OUT PVOID Buffer,
     IN ULONG  NumberOfBytesToRead,
     OUT PULONG NumberOfBytesRead
-); 
+);
+
+NTSYSAPI
 NTSTATUS
-STDCALL
-ZwReadVirtualMemory( 
+NTAPI
+ZwReadVirtualMemory(
     IN HANDLE ProcessHandle,
     IN PVOID BaseAddress,
     OUT PVOID Buffer,
     IN ULONG  NumberOfBytesToRead,
     OUT PULONG NumberOfBytesRead
-);     
+);
 
 NTSTATUS
-STDCALL    
+NTAPI
 NtRegisterThreadTerminatePort(
     HANDLE TerminationPort
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL    
+NTAPI
 ZwRegisterThreadTerminatePort(
     HANDLE TerminationPort
 );
 
 NTSTATUS
-STDCALL    
+NTAPI
 NtReleaseMutant(
     IN HANDLE MutantHandle,
     IN PLONG ReleaseCount OPTIONAL
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL    
+NTAPI
 ZwReleaseMutant(
     IN HANDLE MutantHandle,
     IN PLONG ReleaseCount OPTIONAL
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtReleaseSemaphore(
     IN  HANDLE SemaphoreHandle,
     IN  LONG ReleaseCount,
     OUT PLONG PreviousCount
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwReleaseSemaphore(
     IN  HANDLE SemaphoreHandle,
     IN  LONG ReleaseCount,
@@ -2339,7 +3170,7 @@ ZwReleaseSemaphore(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtRemoveIoCompletion(
     IN  HANDLE IoCompletionHandle,
     OUT PVOID *CompletionKey,
@@ -2348,8 +3179,9 @@ NtRemoveIoCompletion(
     IN  PLARGE_INTEGER Timeout OPTIONAL
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwRemoveIoCompletion(
     IN  HANDLE IoCompletionHandle,
     OUT PVOID *CompletionKey,
@@ -2359,119 +3191,129 @@ ZwRemoveIoCompletion(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtReplaceKey(
     IN POBJECT_ATTRIBUTES ObjectAttributes,
     IN HANDLE Key,
     IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
 );
+
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwReplaceKey(
     IN POBJECT_ATTRIBUTES ObjectAttributes,
     IN HANDLE Key,
     IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
 );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
 NtReplyPort(
     HANDLE PortHandle,
-    PLPC_MESSAGE LpcReply
+    PPORT_MESSAGE LpcReply
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwReplyPort(
     HANDLE PortHandle,
-    PLPC_MESSAGE LpcReply
+    PPORT_MESSAGE LpcReply
 );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
 NtReplyWaitReceivePort(
     HANDLE PortHandle,
-    PULONG PortId,
-    PLPC_MESSAGE MessageReply,
-    PLPC_MESSAGE MessageRequest
+    PVOID *PortContext OPTIONAL,
+    PPORT_MESSAGE ReplyMessage OPTIONAL,
+    PPORT_MESSAGE ReceiveMessage
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwReplyWaitReceivePort(
     HANDLE PortHandle,
-    PULONG PortId,
-    PLPC_MESSAGE MessageReply,
-    PLPC_MESSAGE MessageRequest
+    PVOID *PortContext OPTIONAL,
+    PPORT_MESSAGE ReplyMessage,
+    PPORT_MESSAGE ReceiveMessage
 );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
 NtReplyWaitReplyPort(
     HANDLE PortHandle,
-    PLPC_MESSAGE ReplyMessage
+    PPORT_MESSAGE ReplyMessage
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwReplyWaitReplyPort(
     HANDLE PortHandle,
-    PLPC_MESSAGE ReplyMessage
+    PPORT_MESSAGE ReplyMessage
 );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
 NtRequestPort(
     HANDLE PortHandle,
-    PLPC_MESSAGE LpcMessage);
+    PPORT_MESSAGE LpcMessage);
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwRequestPort(
     HANDLE PortHandle,
-    PLPC_MESSAGE LpcMessage
+    PPORT_MESSAGE LpcMessage
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtRequestWaitReplyPort(
     HANDLE PortHandle,
-    PLPC_MESSAGE LpcReply,
-    PLPC_MESSAGE LpcRequest
+    PPORT_MESSAGE LpcReply,
+    PPORT_MESSAGE LpcRequest
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwRequestWaitReplyPort(
     HANDLE PortHandle,
-    PLPC_MESSAGE LpcReply,
-    PLPC_MESSAGE LpcRequest
+    PPORT_MESSAGE LpcReply,
+    PPORT_MESSAGE LpcRequest
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtResetEvent(
     HANDLE EventHandle,
     PLONG NumberOfWaitingThreads OPTIONAL
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwResetEvent(
     HANDLE EventHandle,
     PLONG NumberOfWaitingThreads OPTIONAL
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtRestoreKey(
     HANDLE KeyHandle,
     HANDLE FileHandle,
     ULONG RestoreFlags
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwRestoreKey(
     HANDLE KeyHandle,
     HANDLE FileHandle,
@@ -2479,139 +3321,193 @@ ZwRestoreKey(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtResumeThread(
     IN HANDLE ThreadHandle,
     OUT PULONG SuspendCount
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwResumeThread(
     IN HANDLE ThreadHandle,
     OUT PULONG SuspendCount
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtResumeProcess(
     IN HANDLE ProcessHandle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwResumeProcess(
     IN HANDLE ProcessHandle
 );
-    
+
 NTSTATUS
-STDCALL
+NTAPI
 NtSaveKey(
     IN HANDLE KeyHandle,
     IN HANDLE FileHandle
 );
+
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSaveKey(
     IN HANDLE KeyHandle,
     IN HANDLE FileHandle
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtSaveKeyEx(
     IN HANDLE KeyHandle,
     IN HANDLE FileHandle,
     IN ULONG Flags
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSaveKeyEx(
     IN HANDLE KeyHandle,
     IN HANDLE FileHandle,
     IN ULONG Flags
 );
 
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtSecureConnectPort(
+    PHANDLE PortHandle,
+    PUNICODE_STRING PortName,
+    PSECURITY_QUALITY_OF_SERVICE SecurityQos,
+    PPORT_VIEW ClientView OPTIONAL,
+    PSID Sid OPTIONAL,
+    PREMOTE_PORT_VIEW ServerView OPTIONAL,
+    PULONG MaxMessageLength OPTIONAL,
+    PVOID ConnectionInformation OPTIONAL,
+    PULONG ConnectionInformationLength OPTIONAL
+);
+
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
+ZwSecureConnectPort(
+    PHANDLE PortHandle,
+    PUNICODE_STRING PortName,
+    PSECURITY_QUALITY_OF_SERVICE SecurityQos,
+    PPORT_VIEW ClientView OPTIONAL,
+    PSID Sid OPTIONAL,
+    PREMOTE_PORT_VIEW ServerView OPTIONAL,
+    PULONG MaxMessageLength OPTIONAL,
+    PVOID ConnectionInformation OPTIONAL,
+    PULONG ConnectionInformationLength OPTIONAL
+);
+
+NTSTATUS
+NTAPI
 NtSetBootEntryOrder(
     IN ULONG Unknown1,
     IN ULONG Unknown2
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetBootEntryOrder(
     IN ULONG Unknown1,
     IN ULONG Unknown2
 );
 
-NTSTATUS 
-STDCALL 
+NTSTATUS
+NTAPI
 NtSetBootOptions(
-    ULONG Unknown1, 
+    ULONG Unknown1,
     ULONG Unknown2
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwSetBootOptions(
-    ULONG Unknown1, 
+    ULONG Unknown1,
     ULONG Unknown2
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtSetContextThread(
     IN HANDLE ThreadHandle,
     IN PCONTEXT Context
 );
+
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetContextThread(
     IN HANDLE ThreadHandle,
     IN PCONTEXT Context
 );
 
+NTSYSAPI
+NTSTATUS
+NTAPI
+NtSetDebugFilterState(
+    ULONG ComponentId,
+    ULONG Level,
+    BOOLEAN State
+);
+
 NTSTATUS
-STDCALL
+NTAPI
 NtSetDefaultLocale(
     IN BOOLEAN UserProfile,
     IN LCID DefaultLocaleId
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetDefaultLocale(
     IN BOOLEAN UserProfile,
     IN LCID DefaultLocaleId
 );
 
-NTSTATUS 
-STDCALL 
+NTSTATUS
+NTAPI
 NtSetDefaultUILanguage(
     LANGID LanguageId
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwSetDefaultUILanguage(
     LANGID LanguageId
 );
+
 NTSTATUS
-STDCALL
+NTAPI
 NtSetDefaultHardErrorPort(
     IN HANDLE PortHandle
 );
+
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetDefaultHardErrorPort(
     IN HANDLE PortHandle
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtSetEaFile(
     IN HANDLE FileHandle,
     IN PIO_STATUS_BLOCK IoStatusBlock,
@@ -2619,53 +3515,61 @@ NtSetEaFile(
     ULONG EaBufferSize
 );
 
+#ifdef NTOS_MODE_USER
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetEaFile(
     IN HANDLE FileHandle,
     IN PIO_STATUS_BLOCK IoStatusBlock,
     PVOID EaBuffer,
     ULONG EaBufferSize
 );
+#endif
 
 NTSTATUS
-STDCALL
+NTAPI
 NtSetEvent(
     IN HANDLE EventHandle,
     OUT PLONG PreviousState  OPTIONAL
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetEvent(
     IN HANDLE EventHandle,
     OUT PLONG PreviousState  OPTIONAL
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtSetHighEventPair(
     IN HANDLE EventPairHandle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetHighEventPair(
     IN HANDLE EventPairHandle
 );
 NTSTATUS
-STDCALL
+NTAPI
 NtSetHighWaitLowEventPair(
     IN HANDLE EventPairHandle
 );
+
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetHighWaitLowEventPair(
     IN HANDLE EventPairHandle
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtSetInformationFile(
     IN HANDLE FileHandle,
     IN PIO_STATUS_BLOCK IoStatusBlock,
@@ -2674,8 +3578,9 @@ NtSetInformationFile(
     IN FILE_INFORMATION_CLASS FileInformationClass
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetInformationFile(
     IN HANDLE FileHandle,
     IN PIO_STATUS_BLOCK IoStatusBlock,
@@ -2684,61 +3589,114 @@ ZwSetInformationFile(
     IN FILE_INFORMATION_CLASS FileInformationClass
 );
 
-NTSTATUS 
-STDCALL 
+NTSTATUS
+NTAPI
 NtSetInformationJobObject(
     HANDLE JobHandle,
     JOBOBJECTINFOCLASS JobInformationClass,
-    PVOID JobInformation, 
+    PVOID JobInformation,
     ULONG JobInformationLength
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwSetInformationJobObject(
     HANDLE JobHandle,
     JOBOBJECTINFOCLASS JobInformationClass,
-    PVOID JobInformation, 
+    PVOID JobInformation,
     ULONG JobInformationLength
 );
 
 NTSTATUS
-STDCALL
-NtSetInformationThread(
-    IN HANDLE ThreadHandle,
-    IN THREADINFOCLASS ThreadInformationClass,
-    IN PVOID ThreadInformation,
-    IN ULONG ThreadInformationLength
-);
-NTSTATUS
-STDCALL
-ZwSetInformationThread(
-    IN HANDLE ThreadHandle,
-    IN THREADINFOCLASS ThreadInformationClass,
-    IN PVOID ThreadInformation,
-    IN ULONG ThreadInformationLength
+NTAPI
+NtSetInformationKey(
+    IN HANDLE KeyHandle,
+    IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
+    IN PVOID KeyInformation,
+    IN ULONG KeyInformationLength
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
-NtSetInformationToken(
-    IN HANDLE TokenHandle,            
-    IN TOKEN_INFORMATION_CLASS TokenInformationClass,
-    OUT PVOID TokenInformation,       
-    IN ULONG TokenInformationLength   
+NTAPI
+ZwSetInformationKey(
+    IN HANDLE KeyHandle,
+    IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
+    IN PVOID KeyInformation,
+    IN ULONG KeyInformationLength
 );
 
 NTSTATUS
-STDCALL
-ZwSetInformationToken(
-    IN HANDLE TokenHandle,            
-    IN TOKEN_INFORMATION_CLASS TokenInformationClass,
-    OUT PVOID TokenInformation,       
-    IN ULONG TokenInformationLength   
+NTAPI
+NtSetInformationObject(
+    IN HANDLE ObjectHandle,
+    IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
+    IN PVOID ObjectInformation,
+    IN ULONG Length
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetInformationObject(
+    IN HANDLE ObjectHandle,
+    IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
+    IN PVOID ObjectInformation,
+    IN ULONG Length
+);
+
+NTSTATUS
+NTAPI
+NtSetInformationProcess(
+    IN HANDLE ProcessHandle,
+    IN PROCESSINFOCLASS ProcessInformationClass,
+    IN PVOID ProcessInformation,
+    IN ULONG ProcessInformationLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtSetInformationThread(
+    IN HANDLE ThreadHandle,
+    IN THREADINFOCLASS ThreadInformationClass,
+    IN PVOID ThreadInformation,
+    IN ULONG ThreadInformationLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetInformationThread(
+    IN HANDLE ThreadHandle,
+    IN THREADINFOCLASS ThreadInformationClass,
+    IN PVOID ThreadInformation,
+    IN ULONG ThreadInformationLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtSetInformationToken(
+    IN HANDLE TokenHandle,
+    IN TOKEN_INFORMATION_CLASS TokenInformationClass,
+    OUT PVOID TokenInformation,
+    IN ULONG TokenInformationLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetInformationToken(
+    IN HANDLE TokenHandle,
+    IN TOKEN_INFORMATION_CLASS TokenInformationClass,
+    OUT PVOID TokenInformation,
+    IN ULONG TokenInformationLength
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtSetIoCompletion(
     IN HANDLE IoCompletionPortHandle,
     IN PVOID CompletionKey,
@@ -2747,8 +3705,9 @@ NtSetIoCompletion(
     IN ULONG CompletionInformation
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetIoCompletion(
     IN HANDLE IoCompletionPortHandle,
     IN PVOID CompletionKey,
@@ -2757,131 +3716,173 @@ ZwSetIoCompletion(
     IN ULONG CompletionInformation
 );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
 NtSetIntervalProfile(
     ULONG Interval,
     KPROFILE_SOURCE ClockSource
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwSetIntervalProfile(
     ULONG Interval,
     KPROFILE_SOURCE ClockSource
 );
 
 NTSTATUS
-STDCALL
+NTAPI
+NtSetLdtEntries(
+    ULONG Selector1,
+    LDT_ENTRY LdtEntry1,
+    ULONG Selector2,
+    LDT_ENTRY LdtEntry2
+);
+
+NTSTATUS
+NTAPI
 NtSetLowEventPair(
     HANDLE EventPair
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetLowEventPair(
     HANDLE EventPair
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtSetLowWaitHighEventPair(
     HANDLE EventPair
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetLowWaitHighEventPair(
     HANDLE EventPair
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
 NtSetQuotaInformationFile(
     HANDLE FileHandle,
-    PIO_STATUS_BLOCK IoStatusBlock, 
-    PFILE_QUOTA_INFORMATION Buffer,
+    PIO_STATUS_BLOCK IoStatusBlock,
+    PVOID Buffer,
     ULONG BufferLength
-); 
+);
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwSetQuotaInformationFile(
     HANDLE FileHandle,
-    PIO_STATUS_BLOCK IoStatusBlock, 
-    PFILE_QUOTA_INFORMATION Buffer,
+    PIO_STATUS_BLOCK IoStatusBlock,
+    PVOID Buffer,
     ULONG BufferLength
-); 
+);
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtSetSecurityObject(
-    IN HANDLE Handle, 
-    IN SECURITY_INFORMATION SecurityInformation, 
-    IN PSECURITY_DESCRIPTOR SecurityDescriptor 
-); 
+    IN HANDLE Handle,
+    IN SECURITY_INFORMATION SecurityInformation,
+    IN PSECURITY_DESCRIPTOR SecurityDescriptor
+);
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetSecurityObject(
-    IN HANDLE Handle, 
-    IN SECURITY_INFORMATION SecurityInformation, 
-    IN PSECURITY_DESCRIPTOR SecurityDescriptor 
-); 
+    IN HANDLE Handle,
+    IN SECURITY_INFORMATION SecurityInformation,
+    IN PSECURITY_DESCRIPTOR SecurityDescriptor
+);
 
 NTSTATUS
-STDCALL
+NTAPI
 NtSetSystemEnvironmentValue(
     IN PUNICODE_STRING VariableName,
     IN PUNICODE_STRING Value
 );
+
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetSystemEnvironmentValue(
     IN PUNICODE_STRING VariableName,
     IN PUNICODE_STRING Value
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtSetSystemInformation(
     IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
     IN PVOID SystemInformation,
     IN ULONG SystemInformationLength
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetSystemInformation(
     IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
     IN PVOID SystemInformation,
     IN ULONG SystemInformationLength
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
+NtSetSystemPowerState(
+    IN POWER_ACTION SystemAction,
+    IN SYSTEM_POWER_STATE MinSystemState,
+    IN ULONG Flags
+);
+
+NTSTATUS
+NTAPI
 NtSetSystemTime(
     IN PLARGE_INTEGER SystemTime,
     IN PLARGE_INTEGER NewSystemTime OPTIONAL
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetSystemTime(
     IN PLARGE_INTEGER SystemTime,
     IN PLARGE_INTEGER NewSystemTime OPTIONAL
 );
 
 NTSTATUS
-STDCALL
+NTAPI
+NtSetTimer(
+    IN HANDLE TimerHandle,
+    IN PLARGE_INTEGER DueTime,
+    IN PTIMER_APC_ROUTINE TimerApcRoutine,
+    IN PVOID TimerContext,
+    IN BOOLEAN WakeTimer,
+    IN LONG Period OPTIONAL,
+    OUT PBOOLEAN PreviousState OPTIONAL
+);
+
+NTSTATUS
+NTAPI
 NtSetTimerResolution(
     IN ULONG RequestedResolution,
     IN BOOLEAN SetOrUnset,
     OUT PULONG ActualResolution
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetTimerResolution(
     IN ULONG RequestedResolution,
     IN BOOLEAN SetOrUnset,
@@ -2889,19 +3890,20 @@ ZwSetTimerResolution(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtSetUuidSeed(
     IN PUCHAR UuidSeed
 );
-    
+
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetUuidSeed(
     IN PUCHAR UuidSeed
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtSetValueKey(
     IN HANDLE KeyHandle,
     IN PUNICODE_STRING ValueName,
@@ -2911,8 +3913,9 @@ NtSetValueKey(
     IN ULONG DataSize
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetValueKey(
     IN HANDLE KeyHandle,
     IN PUNICODE_STRING ValueName,
@@ -2922,8 +3925,9 @@ ZwSetValueKey(
     IN ULONG DataSize
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtSetVolumeInformationFile(
     IN HANDLE FileHandle,
     OUT PIO_STATUS_BLOCK IoStatusBlock,
@@ -2932,8 +3936,9 @@ NtSetVolumeInformationFile(
     IN FS_INFORMATION_CLASS FsInformationClass
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSetVolumeInformationFile(
     IN HANDLE FileHandle,
     OUT PIO_STATUS_BLOCK IoStatusBlock,
@@ -2943,19 +3948,20 @@ ZwSetVolumeInformationFile(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtShutdownSystem(
-    IN ULONG Action
+    IN SHUTDOWN_ACTION Action
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwShutdownSystem(
-    IN ULONG Action
+    IN SHUTDOWN_ACTION Action
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtSignalAndWaitForSingleObject(
     IN HANDLE SignalObject,
     IN HANDLE WaitObject,
@@ -2963,8 +3969,9 @@ NtSignalAndWaitForSingleObject(
     IN PLARGE_INTEGER Time
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwSignalAndWaitForSingleObject(
     IN HANDLE SignalObject,
     IN HANDLE WaitObject,
@@ -2973,59 +3980,130 @@ ZwSignalAndWaitForSingleObject(
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtStartProfile(
     HANDLE ProfileHandle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwStartProfile(
     HANDLE ProfileHandle
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtStopProfile(
     HANDLE ProfileHandle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwStopProfile(
     HANDLE ProfileHandle
 );
 
-NTSTATUS 
-STDCALL 
+NTSTATUS
+NTAPI
+NtSuspendProcess(
+    IN HANDLE ProcessHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSuspendProcess(
+    IN HANDLE ProcessHandle
+);
+
+NTSTATUS
+NTAPI
+NtSuspendThread(
+    IN HANDLE ThreadHandle,
+    IN PULONG PreviousSuspendCount
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSuspendThread(
+    IN HANDLE ThreadHandle,
+    IN PULONG PreviousSuspendCount
+);
+
+NTSTATUS
+NTAPI
+NtSystemDebugControl(
+    DEBUG_CONTROL_CODE ControlCode,
+    PVOID InputBuffer,
+    ULONG InputBufferLength,
+    PVOID OutputBuffer,
+    ULONG OutputBufferLength,
+    PULONG ReturnLength
+);
+
+NTSTATUS
+NTAPI
 NtTerminateProcess(
     IN HANDLE ProcessHandle,
     IN NTSTATUS ExitStatus
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwTerminateProcess(
     IN HANDLE ProcessHandle,
     IN NTSTATUS ExitStatus
 );
 
-NTSTATUS 
-STDCALL 
+NTSTATUS
+NTAPI
+NtTerminateThread(
+    IN HANDLE ThreadHandle,
+    IN NTSTATUS ExitStatus
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwTerminateThread(
+    IN HANDLE ThreadHandle,
+    IN NTSTATUS ExitStatus
+);
+
+NTSTATUS
+NTAPI
 NtTerminateJobObject(
-    HANDLE JobHandle, 
+    HANDLE JobHandle,
     NTSTATUS ExitStatus
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwTerminateJobObject(
-    HANDLE JobHandle, 
+    HANDLE JobHandle,
     NTSTATUS ExitStatus
 );
 
 NTSTATUS
-STDCALL
+NTAPI
+NtTestAlert(
+    VOID
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwTestAlert(
+    VOID
+);
+
+NTSTATUS
+NTAPI
 NtTraceEvent(
     IN ULONG TraceHandle,
     IN ULONG Flags,
@@ -3033,8 +4111,9 @@ NtTraceEvent(
     IN struct _EVENT_TRACE_HEADER* TraceHeader
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwTraceEvent(
     IN ULONG TraceHandle,
     IN ULONG Flags,
@@ -3042,154 +4121,209 @@ ZwTraceEvent(
     IN struct _EVENT_TRACE_HEADER* TraceHeader
 );
 
-NTSTATUS 
-STDCALL 
+NTSTATUS
+NTAPI
 NtTranslateFilePath(
-    ULONG Unknown1, 
+    ULONG Unknown1,
     ULONG Unknown2,
     ULONG Unknown3
 );
 
-NTSTATUS 
-STDCALL 
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwTranslateFilePath(
-    ULONG Unknown1, 
+    ULONG Unknown1,
     ULONG Unknown2,
     ULONG Unknown3
 );
 
-NTSTATUS 
-STDCALL
+NTSTATUS
+NTAPI
 NtUnloadDriver(
     IN PUNICODE_STRING DriverServiceName
 );
 
-NTSTATUS 
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
 ZwUnloadDriver(
     IN PUNICODE_STRING DriverServiceName
 );
 
 NTSTATUS
-STDCALL
+NTAPI
+NtUnloadKey(
+    IN POBJECT_ATTRIBUTES KeyObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwUnloadKey(
+    IN POBJECT_ATTRIBUTES KeyObjectAttributes
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtUnlockFile(
+    IN HANDLE FileHandle,
+    OUT PIO_STATUS_BLOCK IoStatusBlock,
+    IN PLARGE_INTEGER ByteOffset,
+    IN PLARGE_INTEGER Lenght,
+    OUT ULONG Key OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwUnlockFile(
+    IN HANDLE FileHandle,
+    OUT PIO_STATUS_BLOCK IoStatusBlock,
+    IN PLARGE_INTEGER ByteOffset,
+    IN PLARGE_INTEGER Lenght,
+    OUT ULONG Key OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtUnlockVirtualMemory(
+    IN HANDLE ProcessHandle,
+    IN PVOID BaseAddress,
+    IN ULONG  NumberOfBytesToUnlock,
+    OUT PULONG NumberOfBytesUnlocked OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwUnlockVirtualMemory(
+    IN HANDLE ProcessHandle,
+    IN PVOID BaseAddress,
+    IN ULONG  NumberOfBytesToUnlock,
+    OUT PULONG NumberOfBytesUnlocked OPTIONAL
+);
+
+NTSTATUS
+NTAPI
 NtUnmapViewOfSection(
     IN HANDLE ProcessHandle,
     IN PVOID BaseAddress
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwUnmapViewOfSection(
     IN HANDLE ProcessHandle,
     IN PVOID BaseAddress
 );
 
-NTSTATUS 
-STDCALL
-NtWriteRequestData(
-    HANDLE PortHandle,
-    PLPC_MESSAGE Message,
-    ULONG Index,
-    PVOID Buffer,
-    ULONG BufferLength,
-    PULONG ReturnLength
+NTSTATUS
+NTAPI
+NtVdmControl(
+    ULONG ControlCode,
+    PVOID ControlData
 );
 
-NTSTATUS 
-STDCALL
-ZwWriteRequestData(
-    HANDLE PortHandle,
-    PLPC_MESSAGE Message,
-    ULONG Index,
-    PVOID Buffer,
-    ULONG BufferLength,
-    PULONG ReturnLength
+NTSTATUS
+NTAPI
+NtW32Call(
+    IN ULONG RoutineIndex,
+    IN PVOID Argument,
+    IN ULONG ArgumentLength,
+    OUT PVOID* Result OPTIONAL,
+    OUT PULONG ResultLength OPTIONAL
 );
 
+NTSYSCALLAPI
 NTSTATUS
-STDCALL 
-NtWriteVirtualMemory(
-    IN HANDLE ProcessHandle,
-    IN PVOID  BaseAddress,
-    IN PVOID Buffer,
-    IN ULONG NumberOfBytesToWrite,
-    OUT PULONG NumberOfBytesWritten
+NTAPI
+NtWaitForDebugEvent(
+    IN HANDLE DebugObject,
+    IN BOOLEAN Alertable,
+    IN PLARGE_INTEGER Timeout OPTIONAL,
+    OUT PDBGUI_WAIT_STATE_CHANGE StateChange
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL 
-ZwWriteVirtualMemory(
-    IN HANDLE ProcessHandle,
-    IN PVOID  BaseAddress,
-    IN PVOID Buffer,
-    IN ULONG NumberOfBytesToWrite,
-    OUT PULONG NumberOfBytesWritten
+NTAPI
+ZwWaitForDebugEvent(
+    IN HANDLE DebugObject,
+    IN BOOLEAN Alertable,
+    IN PLARGE_INTEGER Timeout OPTIONAL,
+    OUT PDBGUI_WAIT_STATE_CHANGE StateChange
+);
+
+NTSTATUS
+NTAPI
+NtWaitForMultipleObjects(
+    IN ULONG Count,
+    IN HANDLE Object[],
+    IN WAIT_TYPE WaitType,
+    IN BOOLEAN Alertable,
+    IN PLARGE_INTEGER Time
 );
 
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwWaitForMultipleObjects(
+    IN ULONG Count,
+    IN HANDLE Object[],
+    IN WAIT_TYPE WaitType,
+    IN BOOLEAN Alertable,
+    IN PLARGE_INTEGER Time
+);
 
 NTSTATUS
-STDCALL
-NtWaitForSingleObject (
+NTAPI
+NtWaitForSingleObject(
     IN HANDLE Object,
     IN BOOLEAN Alertable,
     IN PLARGE_INTEGER Time
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
-ZwWaitForSingleObject (
+NTAPI
+ZwWaitForSingleObject(
     IN HANDLE Object,
     IN BOOLEAN Alertable,
     IN PLARGE_INTEGER Time
 );
 
-
 NTSTATUS
-STDCALL
+NTAPI
 NtWaitHighEventPair(
     IN HANDLE EventPairHandle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwWaitHighEventPair(
     IN HANDLE EventPairHandle
 );
 
 NTSTATUS
-STDCALL
+NTAPI
 NtWaitLowEventPair(
     IN HANDLE EventPairHandle
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwWaitLowEventPair(
     IN HANDLE EventPairHandle
 );
 
-NTSTATUS 
-STDCALL
-NtUnlockFile(
-    IN HANDLE FileHandle,
-    OUT PIO_STATUS_BLOCK IoStatusBlock,
-    IN PLARGE_INTEGER ByteOffset,
-    IN PLARGE_INTEGER Lenght,
-    OUT PULONG Key OPTIONAL
-);
-NTSTATUS 
-STDCALL
-ZwUnlockFile(
-    IN HANDLE FileHandle,
-    OUT PIO_STATUS_BLOCK IoStatusBlock,
-    IN PLARGE_INTEGER ByteOffset,
-    IN PLARGE_INTEGER Lenght,
-    OUT PULONG Key OPTIONAL
-);
-    
-
+NTSYSCALLAPI
 NTSTATUS
-STDCALL
+NTAPI
 NtWriteFile(
     IN HANDLE FileHandle,
     IN HANDLE Event OPTIONAL,
@@ -3202,8 +4336,9 @@ NtWriteFile(
     IN PULONG Key OPTIONAL
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
+NTAPI
 ZwWriteFile(
     IN HANDLE FileHandle,
     IN HANDLE Event OPTIONAL,
@@ -3212,890 +4347,94 @@ ZwWriteFile(
     OUT PIO_STATUS_BLOCK IoStatusBlock,
     IN PVOID Buffer,
     IN ULONG Length,
-    IN PLARGE_INTEGER ByteOffset ,
+    IN PLARGE_INTEGER ByteOffset,
     IN PULONG Key OPTIONAL
 );
 
 NTSTATUS
-STDCALL 
-NtWriteFileGather( 
-    IN HANDLE FileHandle, 
-    IN HANDLE Event OPTIONAL, 
-    IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 
-    IN PVOID ApcContext OPTIONAL, 
+NTAPI
+NtWriteFileGather(
+    IN HANDLE FileHandle,
+    IN HANDLE Event OPTIONAL,
+    IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+    IN PVOID ApcContext OPTIONAL,
     OUT PIO_STATUS_BLOCK IoStatusBlock,
-    IN FILE_SEGMENT_ELEMENT BufferDescription[], 
-    IN ULONG BufferLength, 
-    IN PLARGE_INTEGER ByteOffset, 
+    IN FILE_SEGMENT_ELEMENT BufferDescription[],
+    IN ULONG BufferLength,
+    IN PLARGE_INTEGER ByteOffset,
     IN PULONG Key OPTIONAL
-); 
+);
 
+NTSYSAPI
 NTSTATUS
-STDCALL 
-ZwWriteFileGather( 
-    IN HANDLE FileHandle, 
-    IN HANDLE Event OPTIONAL, 
-    IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 
-    IN PVOID ApcContext OPTIONAL, 
+NTAPI
+ZwWriteFileGather(
+    IN HANDLE FileHandle,
+    IN HANDLE Event OPTIONAL,
+    IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+    IN PVOID ApcContext OPTIONAL,
     OUT PIO_STATUS_BLOCK IoStatusBlock,
-    IN FILE_SEGMENT_ELEMENT BufferDescription[], 
-    IN ULONG BufferLength, 
-    IN PLARGE_INTEGER ByteOffset, 
+    IN FILE_SEGMENT_ELEMENT BufferDescription[],
+    IN ULONG BufferLength,
+    IN PLARGE_INTEGER ByteOffset,
     IN PULONG Key OPTIONAL
-); 
-
-NTSTATUS 
-STDCALL 
-NtSuspendThread(
-    IN HANDLE ThreadHandle,
-    IN PULONG PreviousSuspendCount 
-);
-
-NTSTATUS 
-STDCALL 
-ZwSuspendThread(
-    IN HANDLE ThreadHandle,
-    IN PULONG PreviousSuspendCount 
-);
-
-NTSTATUS
-STDCALL
-NtSuspendProcess(
-    IN HANDLE ProcessHandle
-);
-
-NTSTATUS
-STDCALL
-ZwSuspendProcess(
-    IN HANDLE ProcessHandle
-);
-
-NTSTATUS 
-STDCALL 
-NtTerminateThread(
-    IN HANDLE ThreadHandle ,
-    IN NTSTATUS ExitStatus
-);
-NTSTATUS 
-STDCALL 
-ZwTerminateThread(
-    IN HANDLE ThreadHandle ,
-    IN NTSTATUS ExitStatus
-);
-
-NTSTATUS 
-STDCALL 
-NtTestAlert(
-    VOID 
-);
-NTSTATUS 
-STDCALL 
-ZwTestAlert(
-    VOID 
-);
-
-NTSTATUS
-STDCALL 
-NtYieldExecution(
-    VOID
-);
-
-NTSTATUS
-STDCALL 
-ZwYieldExecution(
-    VOID
-);
-
-NTSTATUS
-STDCALL
-NtPlugPlayControl(
-    DWORD Unknown1,
-    DWORD Unknown2,
-    DWORD Unknown3
 );
 
 NTSTATUS
-STDCALL
-NtGetPlugPlayEvent(
-    ULONG Reserved1,
-    ULONG Reserved2,
+NTAPI
+NtWriteRequestData(
+    HANDLE PortHandle,
+    PPORT_MESSAGE Message,
+    ULONG Index,
     PVOID Buffer,
-    ULONG BufferLength
-);
-
-NTSTATUS 
-STDCALL 
-NtSetSystemPowerState(
-    IN POWER_ACTION SystemAction,
-    IN SYSTEM_POWER_STATE MinSystemState,
-    IN ULONG Flags
-);
-
-NTSTATUS 
-STDCALL 
-NtSystemDebugControl(
-    DEBUG_CONTROL_CODE ControlCode,
-    PVOID InputBuffer,
-    ULONG InputBufferLength,
-    PVOID OutputBuffer,
-    ULONG OutputBufferLength,
+    ULONG BufferLength,
     PULONG ReturnLength
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
-NtVdmControl(
-    ULONG ControlCode, 
-    PVOID ControlData
-);
-
-NTSTATUS 
-STDCALL
-NtW32Call(
-    IN ULONG RoutineIndex,
-    IN PVOID Argument,
-    IN ULONG ArgumentLength,
-    OUT PVOID* Result OPTIONAL,
-    OUT PULONG ResultLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-NtCreateChannel(
-    VOID
-);
-
-NTSTATUS
-STDCALL
-NtListenChannel(
-    VOID
-);
-
-NTSTATUS
-STDCALL
-NtOpenChannel(
-    VOID
-);
-
-NTSTATUS
-STDCALL
-NtReplyWaitSendChannel(
-    VOID
-);
-
-NTSTATUS
-STDCALL
-NtSendWaitReplyChannel(
-    VOID
-);
-
-NTSTATUS
-STDCALL
-NtSetContextChannel(
-    VOID
-);
-
-NTSTATUS
-STDCALL
-NtSetLdtEntries(
-    ULONG Selector1,
-    LDT_ENTRY LdtEntry1,
-    ULONG Selector2,
-    LDT_ENTRY LdtEntry2
-);
-
-NTSTATUS
-STDCALL
-NtQueryOleDirectoryFile(
-    VOID
-);
-
-NTSTATUS
-STDCALL
-NtAccessCheck(
-    IN PSECURITY_DESCRIPTOR SecurityDescriptor,
-    IN HANDLE ClientToken,
-    IN ACCESS_MASK DesiredAcces,
-    IN PGENERIC_MAPPING GenericMapping,
-    OUT PPRIVILEGE_SET PrivilegeSet,
-    OUT PULONG ReturnLength,
-    OUT PACCESS_MASK GrantedAccess,
-    OUT PNTSTATUS AccessStatus
-);
-
-NTSTATUS
-STDCALL
-ZwAccessCheck(
-    IN PSECURITY_DESCRIPTOR SecurityDescriptor,
-    IN HANDLE ClientToken,
-    IN ACCESS_MASK DesiredAcces,
-    IN PGENERIC_MAPPING GenericMapping,
-    OUT PPRIVILEGE_SET PrivilegeSet,
-    OUT PULONG ReturnLength,
-    OUT PACCESS_MASK GrantedAccess,
-    OUT PNTSTATUS AccessStatus
-);
-
-NTSTATUS
-STDCALL
-NtAccessCheckAndAuditAlarm(
-    IN PUNICODE_STRING SubsystemName,
-    IN PHANDLE ObjectHandle,
-    IN PUNICODE_STRING ObjectTypeName,
-    IN PUNICODE_STRING ObjectName,
-    IN PSECURITY_DESCRIPTOR SecurityDescriptor,
-    IN ACCESS_MASK DesiredAccess,
-    IN PGENERIC_MAPPING GenericMapping,
-    IN BOOLEAN ObjectCreation,
-    OUT PACCESS_MASK GrantedAccess,
-    OUT PNTSTATUS AccessStatus,
-    OUT PBOOLEAN GenerateOnClose
-);
-
-NTSTATUS
-STDCALL
-NtCancelTimer(
-    IN HANDLE TimerHandle,
-    OUT PBOOLEAN CurrentState OPTIONAL
-);
-
-
-NTSTATUS
-STDCALL
-NtContinue(
-    IN PCONTEXT Context,
-    IN BOOLEAN TestAlert
+NTAPI
+ZwWriteRequestData(
+    HANDLE PortHandle,
+    PPORT_MESSAGE Message,
+    ULONG Index,
+    PVOID Buffer,
+    ULONG BufferLength,
+    PULONG ReturnLength
 );
 
 NTSTATUS
-STDCALL
-NtCreatePagingFile(
-    IN PUNICODE_STRING FileName,
-    IN PLARGE_INTEGER InitialSize,
-    IN PLARGE_INTEGER MaxiumSize,
-    IN ULONG Reserved
-);
-
-NTSTATUS 
-STDCALL
-NtCreateProfile(
-    OUT PHANDLE ProfileHandle, 
+NTAPI
+NtWriteVirtualMemory(
     IN HANDLE ProcessHandle,
-    IN PVOID ImageBase, 
-    IN ULONG ImageSize, 
-    IN ULONG Granularity,
-    OUT PVOID Buffer, 
-    IN ULONG ProfilingSize,
-    IN KPROFILE_SOURCE Source,
-    IN KAFFINITY ProcessorMask
-);
-
-NTSTATUS
-STDCALL 
-NtCreateThread(
-    OUT PHANDLE ThreadHandle,
-    IN  ACCESS_MASK DesiredAccess,
-    IN  POBJECT_ATTRIBUTES ObjectAttributes    OPTIONAL,
-    IN  HANDLE ProcessHandle,
-    OUT PCLIENT_ID ClientId,
-    IN  PCONTEXT ThreadContext,
-    IN  PINITIAL_TEB UserStack,
-    IN  BOOLEAN CreateSuspended
-);
-
-NTSTATUS
-STDCALL
-NtDelayExecution(
-    IN BOOLEAN Alertable,
-    IN LARGE_INTEGER *Interval
-);
-
-NTSTATUS
-STDCALL
-NtExtendSection(
-    IN HANDLE SectionHandle,
-    IN PLARGE_INTEGER NewMaximumSize
+    IN PVOID  BaseAddress,
+    IN PVOID Buffer,
+    IN ULONG NumberOfBytesToWrite,
+    OUT PULONG NumberOfBytesWritten
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
-NtFlushInstructionCache(
+NTAPI
+ZwWriteVirtualMemory(
     IN HANDLE ProcessHandle,
-    IN PVOID BaseAddress,
-    IN UINT NumberOfBytesToFlush
+    IN PVOID  BaseAddress,
+    IN PVOID Buffer,
+    IN ULONG NumberOfBytesToWrite,
+    OUT PULONG NumberOfBytesWritten
 );
 
 NTSTATUS
-STDCALL
-NtFlushVirtualMemory(
-    IN HANDLE ProcessHandle,
-    IN PVOID BaseAddress,
-    IN ULONG NumberOfBytesToFlush,
-    OUT PULONG NumberOfBytesFlushed OPTIONAL
-);
-
-ULONG
-STDCALL 
-NtGetTickCount(
+NTAPI
+NtYieldExecution(
     VOID
 );
 
+NTSYSAPI
 NTSTATUS
-STDCALL
-NtLoadKey(
-    IN POBJECT_ATTRIBUTES KeyObjectAttributes,
-    IN POBJECT_ATTRIBUTES FileObjectAttributes
-);
-
-
-NTSTATUS
-STDCALL
-NtLockVirtualMemory(
-    HANDLE ProcessHandle,
-    PVOID BaseAddress,
-    ULONG NumberOfBytesToLock,
-    PULONG NumberOfBytesLocked
-);
-
-NTSTATUS
-STDCALL
-NtOpenObjectAuditAlarm(
-    IN PUNICODE_STRING SubsystemName,
-    IN PVOID HandleId,
-    IN PUNICODE_STRING ObjectTypeName,
-    IN PUNICODE_STRING ObjectName,
-    IN PSECURITY_DESCRIPTOR SecurityDescriptor,
-    IN HANDLE ClientToken,
-    IN ULONG DesiredAccess,
-    IN ULONG GrantedAccess,
-    IN PPRIVILEGE_SET Privileges,
-    IN BOOLEAN ObjectCreation,
-    IN BOOLEAN AccessGranted,
-    OUT PBOOLEAN GenerateOnClose
-);
-
-NTSTATUS
-STDCALL
-NtProtectVirtualMemory(
-    IN HANDLE ProcessHandle,
-    IN PVOID *BaseAddress,
-    IN ULONG *NumberOfBytesToProtect,
-    IN ULONG NewAccessProtection,
-    OUT PULONG OldAccessProtection
-);
-
-NTSTATUS
-STDCALL
-NtQueryDirectoryObject(
-    IN     HANDLE DirectoryHandle,
-    OUT    PVOID Buffer,
-    IN     ULONG BufferLength,
-    IN     BOOLEAN ReturnSingleEntry,
-    IN     BOOLEAN RestartScan,
-    IN OUT PULONG Context,
-    OUT    PULONG ReturnLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-NtQueryIntervalProfile(
-    IN  KPROFILE_SOURCE ProfileSource,
-    OUT PULONG Interval
-);
-
-NTSTATUS
-STDCALL
-NtQuerySection(
-    IN HANDLE SectionHandle,
-    IN CINT SectionInformationClass,
-    OUT PVOID SectionInformation,
-    IN ULONG Length,
-    OUT PULONG ResultLength
-);
-
-NTSTATUS
-STDCALL
-NtQueryVirtualMemory(
-    IN HANDLE ProcessHandle,
-    IN PVOID Address,
-    IN IN CINT VirtualMemoryInformationClass,
-    OUT PVOID VirtualMemoryInformation,
-    IN ULONG Length,
-    OUT PULONG ResultLength
-);
-
-NTSTATUS
-STDCALL
-NtRaiseHardError(
-    IN NTSTATUS ErrorStatus,
-    IN ULONG NumberOfParameters,
-    IN PUNICODE_STRING UnicodeStringParameterMask  OPTIONAL,
-    IN PVOID *Parameters,
-    IN HARDERROR_RESPONSE_OPTION ResponseOption,
-    OUT PHARDERROR_RESPONSE Response
-);
-
-NTSTATUS
-STDCALL
-NtSetInformationKey(
-    IN HANDLE KeyHandle,
-    IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
-    IN PVOID KeyInformation,
-    IN ULONG KeyInformationLength
-);
-
-NTSTATUS
-STDCALL
-NtSetInformationObject(
-    IN HANDLE ObjectHandle,
-    IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
-    IN PVOID ObjectInformation,
-    IN ULONG Length 
-);
-
-NTSTATUS
-STDCALL
-NtSetTimer(
-    IN HANDLE TimerHandle,
-    IN PLARGE_INTEGER DueTime,
-    IN PTIMER_APC_ROUTINE TimerApcRoutine,
-    IN PVOID TimerContext,
-    IN BOOLEAN WakeTimer,
-    IN LONG Period OPTIONAL,
-    OUT PBOOLEAN PreviousState OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-NtUnloadKey(
-    IN POBJECT_ATTRIBUTES KeyObjectAttributes
-);
-
-NTSTATUS 
-STDCALL
-NtUnlockVirtualMemory(
-    IN HANDLE ProcessHandle,
-    IN PVOID BaseAddress,
-    IN ULONG  NumberOfBytesToUnlock,
-    OUT PULONG NumberOfBytesUnlocked OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-NtWaitForMultipleObjects(
-    IN ULONG Count,
-    IN HANDLE Object[],
-    IN WAIT_TYPE WaitType,
-    IN BOOLEAN Alertable,
-    IN PLARGE_INTEGER Time
-);
-
-NTSTATUS 
-STDCALL 
-ZwContinue(
-    IN PCONTEXT Context, 
-    IN CINT IrqLevel
-);
-
-NTSTATUS
-STDCALL
-ZwQuerySystemTime (
-    OUT PLARGE_INTEGER CurrentTime
-);
-
-
-NTSTATUS
-STDCALL
-NtDuplicateObject(
-    IN HANDLE SourceProcessHandle,
-    IN HANDLE SourceHandle,
-    IN HANDLE TargetProcessHandle,
-    OUT PHANDLE TargetHandle,
-    IN ACCESS_MASK DesiredAccess,
-    IN ULONG HandleAttributes,
-    IN ULONG Options
-);
-
-NTSTATUS
-STDCALL
-ZwDuplicateObject(
-    IN HANDLE SourceProcessHandle,
-    IN HANDLE SourceHandle,
-    IN HANDLE TargetProcessHandle,
-    OUT PHANDLE TargetHandle,
-    IN ACCESS_MASK DesiredAccess,
-    IN ULONG HandleAttributes,
-    IN ULONG Options
-);
-
-NTSTATUS
-STDCALL
-NtAddAtom(
-    IN     PWSTR  AtomName,
-    IN     ULONG AtomNameLength,
-    IN OUT PRTL_ATOM  Atom
-);
-
-NTSTATUS
-STDCALL
-ZwAddAtom(
-    IN     PWSTR  AtomName,
-    IN     ULONG AtomNameLength,
-    IN OUT PRTL_ATOM  Atom
-);
-
-NTSTATUS
-STDCALL
-NtAllocateUuids(
-    PULARGE_INTEGER Time,
-    PULONG Range,
-    PULONG Sequence,
-    PUCHAR Seed
-);
-
-NTSTATUS
-STDCALL
-ZwAllocateUuids(
-    PULARGE_INTEGER Time,
-    PULONG Range,
-    PULONG Sequence,
-    PUCHAR Seed
-);
-
-NTSTATUS
-STDCALL
-ZwCreatePagingFile(
-    IN PUNICODE_STRING FileName,
-    IN PLARGE_INTEGER InitialSize,
-    IN PLARGE_INTEGER MaxiumSize,
-    IN ULONG Reserved
-);
-
-NTSTATUS
-STDCALL 
-ZwCreateThread(
-    OUT PHANDLE ThreadHandle,
-    IN ACCESS_MASK DesiredAccess,
-    IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
-    IN HANDLE ProcessHandle,
-    OUT PCLIENT_ID ClientId,
-    IN PCONTEXT ThreadContext,
-    IN PINITIAL_TEB UserStack,
-    IN BOOLEAN CreateSuspended
-);
-
-NTSTATUS 
-STDCALL
-NtDuplicateToken(
-    IN HANDLE ExistingTokenHandle,
-    IN ACCESS_MASK DesiredAccess,
-    IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
-    IN BOOLEAN EffectiveOnly,
-    IN TOKEN_TYPE TokenType,
-    OUT PHANDLE NewTokenHandle
-);
-
-NTSTATUS
-STDCALL
-NtFindAtom(
-    IN  PWSTR AtomName,
-    IN  ULONG AtomNameLength,
-    OUT PRTL_ATOM Atom OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-ZwFindAtom(
-    IN  PWSTR AtomName,
-    IN  ULONG AtomNameLength,
-    OUT PRTL_ATOM Atom OPTIONAL
-);
-
-ULONG
-STDCALL
-ZwGetTickCount(
+NTAPI
+ZwYieldExecution(
     VOID
 );
 
-NTSTATUS
-STDCALL
-ZwLoadKey(
-    IN POBJECT_ATTRIBUTES KeyObjectAttributes,
-    IN POBJECT_ATTRIBUTES FileObjectAttributes
-);
-
-NTSTATUS
-STDCALL
-ZwLockVirtualMemory(
-    HANDLE ProcessHandle,
-    PVOID BaseAddress,
-    ULONG NumberOfBytesToLock,
-    PULONG NumberOfBytesLocked
-);
-
-NTSTATUS
-STDCALL
-ZwOpenObjectAuditAlarm(
-    IN PUNICODE_STRING SubsystemName,
-    IN PVOID HandleId,
-    IN PUNICODE_STRING ObjectTypeName,
-    IN PUNICODE_STRING ObjectName,
-    IN PSECURITY_DESCRIPTOR SecurityDescriptor,
-    IN HANDLE ClientToken,
-    IN ULONG DesiredAccess,
-    IN ULONG GrantedAccess,
-    IN PPRIVILEGE_SET Privileges,
-    IN BOOLEAN ObjectCreation,
-    IN BOOLEAN AccessGranted,
-    OUT PBOOLEAN GenerateOnClose
-);
-
-NTSTATUS
-STDCALL
-ZwProtectVirtualMemory(
-    IN HANDLE ProcessHandle,
-    IN PVOID *BaseAddress,
-    IN ULONG *NumberOfBytesToProtect,
-    IN ULONG NewAccessProtection,
-    OUT PULONG OldAccessProtection
-);
-
-NTSTATUS
-STDCALL
-NtQueryInformationAtom(
-    IN  RTL_ATOM Atom,
-    IN  ATOM_INFORMATION_CLASS AtomInformationClass,
-    OUT PVOID AtomInformation,
-    IN  ULONG AtomInformationLength,
-    OUT PULONG ReturnLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-ZwQueryInformationAtom(
-    IN  RTL_ATOM Atom,
-    IN  ATOM_INFORMATION_CLASS AtomInformationClass,
-    OUT PVOID AtomInformation,
-    IN  ULONG AtomInformationLength,
-    OUT PULONG ReturnLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-ZwQueryDirectoryObject(
-    IN     HANDLE DirectoryHandle,
-    OUT    PVOID Buffer,
-    IN     ULONG BufferLength,
-    IN     BOOLEAN ReturnSingleEntry,
-    IN     BOOLEAN RestartScan,
-    IN OUT PULONG Context,
-    OUT    PULONG ReturnLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-ZwQueryIntervalProfile(
-    OUT PULONG Interval,
-    OUT KPROFILE_SOURCE ClockSource
-);
-
-NTSTATUS
-STDCALL
-ZwQueryObject(
-    IN HANDLE ObjectHandle,
-    IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
-    OUT PVOID ObjectInformation,
-    IN ULONG Length,
-    OUT PULONG ResultLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-NtQuerySecurityObject(
-    IN HANDLE Handle,
-    IN SECURITY_INFORMATION SecurityInformation,
-    OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
-    IN ULONG Length,
-    OUT PULONG ResultLength
-);
-
-NTSTATUS
-STDCALL
-ZwQuerySecurityObject(
-    IN HANDLE Handle,
-    IN SECURITY_INFORMATION SecurityInformation,
-    OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
-    IN ULONG Length,
-    OUT PULONG ResultLength
-);
-
-
-NTSTATUS
-STDCALL
-ZwQueryVirtualMemory(
-    IN HANDLE ProcessHandle,
-    IN PVOID Address,
-    IN IN CINT VirtualMemoryInformationClass,
-    OUT PVOID VirtualMemoryInformation,
-    IN ULONG Length,
-    OUT PULONG ResultLength
-);
-
-NTSTATUS
-STDCALL
-ZwRaiseHardError(
-    IN NTSTATUS Status,
-    ULONG Unknown2,
-    ULONG Unknown3,
-    ULONG Unknown4,
-    ULONG Unknown5,
-    ULONG Unknown6
-);
-
-NTSTATUS
-STDCALL
-ZwSetInformationKey(
-    IN HANDLE KeyHandle,
-    IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
-    IN PVOID KeyInformation,
-    IN ULONG KeyInformationLength
-);
-
-NTSTATUS
-STDCALL
-ZwSetInformationObject(
-    IN HANDLE ObjectHandle,
-    IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
-    IN PVOID ObjectInformation,
-    IN ULONG Length
-);
-
-NTSTATUS
-STDCALL
-NtSetInformationProcess(
-    IN HANDLE ProcessHandle,
-    IN PROCESSINFOCLASS ProcessInformationClass,
-    IN PVOID ProcessInformation,
-    IN ULONG ProcessInformationLength
-);
-
-NTSTATUS
-STDCALL
-ZwUnloadKey(
-    IN POBJECT_ATTRIBUTES KeyObjectAttributes
-);
-
-NTSTATUS 
-STDCALL
-ZwUnlockVirtualMemory(
-    IN HANDLE ProcessHandle,
-    IN PVOID BaseAddress,
-    IN ULONG  NumberOfBytesToUnlock,
-    OUT PULONG NumberOfBytesUnlocked OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-ZwWaitForMultipleObjects (
-    IN ULONG Count,
-    IN HANDLE Object[],
-    IN WAIT_TYPE WaitType,
-    IN BOOLEAN Alertable,
-    IN PLARGE_INTEGER Time
-);
-
-NTSTATUS 
-STDCALL
-ZwCreateProfile(
-    OUT PHANDLE ProfileHandle, 
-    IN POBJECT_ATTRIBUTES ObjectAttributes,
-    IN ULONG ImageBase, 
-    IN ULONG ImageSize, 
-    IN ULONG Granularity,
-    OUT PVOID Buffer, 
-    IN ULONG ProfilingSize,
-    IN ULONG ClockSource,
-    IN ULONG ProcessorMask
-);
-
-NTSTATUS
-STDCALL
-ZwDelayExecution(
-    IN BOOLEAN Alertable,
-    IN LARGE_INTEGER *Interval
-);
-
-NTSTATUS
-STDCALL
-ZwExtendSection(
-    IN HANDLE SectionHandle,
-    IN PLARGE_INTEGER NewMaximumSize
-);
-
-NTSTATUS
-STDCALL
-ZwQuerySection(
-    IN HANDLE SectionHandle,
-    IN CINT SectionInformationClass,
-    OUT PVOID SectionInformation,
-    IN ULONG Length,
-    OUT PULONG ResultLength
-);
-
-NTSTATUS
-STDCALL
-NtLoadKey2(
-    IN POBJECT_ATTRIBUTES KeyObjectAttributes,
-    IN POBJECT_ATTRIBUTES FileObjectAttributes,
-    IN ULONG Flags
-);
-
-NTSTATUS
-STDCALL
-ZwLoadKey2(
-    IN POBJECT_ATTRIBUTES KeyObjectAttributes,
-    IN POBJECT_ATTRIBUTES FileObjectAttributes,
-    IN ULONG Flags
-);
-
-NTSTATUS
-STDCALL
-NtQuerySystemTime (
-    OUT PLARGE_INTEGER CurrentTime
-);
-
-NTSTATUS
-STDCALL
-NtQueryObject(
-    IN HANDLE ObjectHandle,
-    IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
-    OUT PVOID ObjectInformation,
-    IN ULONG Length,
-    OUT PULONG ResultLength OPTIONAL
-);
-
-static inline struct _PEB * NtCurrentPeb(void)
-{
- struct _PEB * pPeb;
-
-#if defined(__GNUC__)
-
- __asm__ __volatile__
- (
-  "movl %%fs:0x30, %0\n" /* fs:30h == Teb->Peb */
-  : "=r" (pPeb) /* can't have two memory operands */
-  : /* no inputs */
- );
-
-#elif defined(_MSC_VER)
-
-    __asm mov eax, fs:0x30;
-    __asm mov pPeb, eax
-
-#else
-#error Unknown compiler for inline assembler
-#endif
-
- return pPeb;
-}   
 #endif