--- /dev/null
+ #include "include/reactos/msvctarget.h"
+
+ @ stdcall CcCanIWrite(ptr long long long)
+ @ stdcall CcCopyRead(ptr ptr long long ptr ptr)
+ @ stdcall CcCopyWrite(ptr ptr long long ptr)
+ @ stdcall CcDeferWrite(ptr ptr ptr ptr long long)
+ @ stdcall CcFastCopyRead(ptr long long long ptr ptr)
+ @ stdcall CcFastCopyWrite(ptr long long ptr)
+ @ extern CcFastMdlReadWait
+ @ extern CcFastReadNotPossible
+ @ extern CcFastReadWait
+ @ stdcall CcFlushCache(ptr ptr long ptr)
+ @ stdcall CcGetDirtyPages(ptr ptr ptr ptr)
+ @ stdcall CcGetFileObjectFromBcb(ptr)
+ @ stdcall CcGetFileObjectFromSectionPtrs(ptr)
+ @ stdcall CcGetFlushedValidData(ptr long)
+ @ stdcall CcGetLsnForFileObject(ptr ptr)
+ @ stdcall CcInitializeCacheMap(ptr ptr long ptr ptr)
+ @ stdcall CcIsThereDirtyData(ptr)
+ @ stdcall CcMapData(ptr ptr long long ptr ptr)
+ @ stdcall CcMdlRead(ptr ptr long ptr ptr)
+ @ stdcall CcMdlReadComplete(ptr ptr)
+ @ stdcall CcMdlWriteAbort(ptr ptr)
+ @ stdcall CcMdlWriteComplete(ptr ptr ptr)
+ @ stdcall CcPinMappedData(ptr ptr long long ptr)
+ @ stdcall CcPinRead(ptr ptr long long ptr ptr)
+ @ stdcall CcPrepareMdlWrite(ptr ptr long ptr ptr)
+ @ stdcall CcPreparePinWrite(ptr ptr long long long ptr ptr)
+ @ stdcall CcPurgeCacheSection(ptr ptr long long)
+ @ stdcall CcRemapBcb(ptr)
+ @ stdcall CcRepinBcb(ptr)
+ @ stdcall CcScheduleReadAhead(ptr ptr long)
+ @ stdcall CcSetAdditionalCacheAttributes(ptr long long)
+ @ stdcall CcSetBcbOwnerPointer(ptr ptr)
+ @ stdcall CcSetDirtyPageThreshold(ptr long)
+ @ stdcall CcSetDirtyPinnedData(ptr ptr)
+ @ stdcall CcSetFileSizes(ptr ptr)
+ @ stdcall CcSetLogHandleForFile(ptr ptr ptr)
+ @ stdcall CcSetReadAheadGranularity(ptr long)
+ @ stdcall CcUninitializeCacheMap(ptr ptr ptr)
+ @ stdcall CcUnpinData(ptr)
+ @ stdcall CcUnpinDataForThread(ptr ptr)
+ @ stdcall CcUnpinRepinnedBcb(ptr long ptr)
+ @ stdcall CcWaitForCurrentLazyWriterActivity()
+ @ stdcall CcZeroData(ptr ptr ptr long)
+ @ stdcall CmRegisterCallback(ptr ptr ptr)
+ @ stdcall CmUnRegisterCallback(long long)
+ @ stdcall DbgBreakPoint()
+ @ stdcall DbgBreakPointWithStatus(long)
+ ;DbgCommandString
+ @ stdcall DbgLoadImageSymbols(ptr ptr long)
+ @ cdecl DbgPrint(str)
+ @ cdecl DbgPrintEx(long long str)
+ @ cdecl DbgPrintReturnControlC(str)
+ @ stdcall DbgPrompt(str ptr long)
+ @ stdcall DbgQueryDebugFilterState(long long)
+ @ stdcall DbgSetDebugFilterState(long long long)
++#ifdef __x86_64__
++@ fastcall ExAcquireFastMutex(ptr)
++#endif
+ @ fastcall ExAcquireFastMutexUnsafe(ptr)
+ @ stdcall ExAcquireResourceExclusiveLite(ptr long)
+ @ stdcall ExAcquireResourceSharedLite(ptr long)
+ @ fastcall ExAcquireRundownProtection(ptr) ExfAcquireRundownProtection
+ @ fastcall ExAcquireRundownProtectionCacheAware(ptr) ExfAcquireRundownProtectionCacheAware
+ @ fastcall ExAcquireRundownProtectionCacheAwareEx(ptr long) ExfAcquireRundownProtectionCacheAwareEx
+ @ fastcall ExAcquireRundownProtectionEx(ptr long) ExfAcquireRundownProtectionEx
+ @ stdcall ExAcquireSharedStarveExclusive(ptr long)
+ @ stdcall ExAcquireSharedWaitForExclusive(ptr long)
+ @ stdcall ExAllocateCacheAwareRundownProtection(long long)
+ @ stdcall ExAllocateFromPagedLookasideList(ptr) ExiAllocateFromPagedLookasideList
+ @ stdcall ExAllocatePool(long long)
+ @ stdcall ExAllocatePoolWithQuota(long long)
+ @ stdcall ExAllocatePoolWithQuotaTag(long long long)
+ @ stdcall ExAllocatePoolWithTag(long long long)
+ @ stdcall ExAllocatePoolWithTagPriority(long long long long)
+ @ stdcall ExConvertExclusiveToSharedLite(ptr)
+ @ stdcall ExCreateCallback(ptr ptr long long)
+ @ stdcall ExDeleteNPagedLookasideList(ptr)
+ @ stdcall ExDeletePagedLookasideList(ptr)
+ @ stdcall ExDeleteResourceLite(ptr)
+ @ extern ExDesktopObjectType
+ @ stdcall ExDisableResourceBoostLite(ptr)
+ @ fastcall ExEnterCriticalRegionAndAcquireFastMutexUnsafe(ptr)
+ @ stdcall ExEnterCriticalRegionAndAcquireResourceExclusive(ptr)
+ ;ExEnterCriticalRegionAndAcquireResourceShared
+ ;ExEnterCriticalRegionAndAcquireSharedWaitForExclusive
+ @ stdcall ExEnumHandleTable(ptr ptr ptr ptr)
+ @ extern ExEventObjectType _ExEventObjectType
+ @ stdcall ExExtendZone(ptr ptr long)
+ @ stdcall ExFreeCacheAwareRundownProtection(ptr)
+ @ stdcall ExFreePool(ptr)
+ @ stdcall ExFreePoolWithTag(ptr long)
+ @ stdcall ExFreeToPagedLookasideList(ptr ptr) ExiFreeToPagedLookasideList
+ @ stdcall ExGetCurrentProcessorCounts(ptr ptr ptr)
+ @ stdcall ExGetCurrentProcessorCpuUsage(ptr)
+ @ stdcall ExGetExclusiveWaiterCount(ptr)
+ @ stdcall ExGetPreviousMode()
+ @ stdcall ExGetSharedWaiterCount(ptr)
+ @ stdcall ExInitializeNPagedLookasideList(ptr ptr ptr long long long long)
+ @ stdcall ExInitializePagedLookasideList(ptr ptr ptr long long long long)
+ @ stdcall ExInitializeResourceLite(ptr)
+ @ fastcall ExInitializeRundownProtection(ptr) ExfInitializeRundownProtection
+ @ stdcall ExInitializeRundownProtectionCacheAware(ptr long)
+ @ stdcall ExInitializeZone(ptr long ptr long)
+ @ stdcall ExInterlockedAddLargeInteger(ptr long long ptr)
+ @ fastcall ExInterlockedAddLargeStatistic(ptr long)
+ @ stdcall ExInterlockedAddUlong(ptr long ptr)
++#ifndef __x86_64__
+ @ fastcall ExInterlockedCompareExchange64(ptr ptr ptr ptr)
+ @ stdcall ExInterlockedDecrementLong(ptr ptr)
+ @ stdcall ExInterlockedExchangeUlong(ptr long ptr)
++#endif
+ @ stdcall ExInterlockedExtendZone(ptr ptr long ptr)
++#ifndef __x86_64__
+ @ fastcall ExInterlockedFlushSList(ptr)
+ @ stdcall ExInterlockedIncrementLong(ptr ptr)
++#endif
+ @ stdcall ExInterlockedInsertHeadList(ptr ptr ptr)
+ @ stdcall ExInterlockedInsertTailList(ptr ptr ptr)
+ @ stdcall ExInterlockedPopEntryList(ptr ptr)
++#ifndef __x86_64__
+ @ fastcall ExInterlockedPopEntrySList(ptr ptr)
++#endif
+ @ stdcall ExInterlockedPushEntryList(ptr ptr ptr)
++#ifndef __x86_64__
+ @ fastcall ExInterlockedPushEntrySList(ptr ptr ptr)
++#endif
+ @ stdcall ExInterlockedRemoveHeadList(ptr ptr)
+ @ stdcall ExIsProcessorFeaturePresent(long)
+ @ stdcall ExIsResourceAcquiredExclusiveLite(ptr)
+ @ stdcall ExIsResourceAcquiredSharedLite(ptr)
+ @ stdcall ExLocalTimeToSystemTime(ptr ptr)
+ @ stdcall ExNotifyCallback(ptr ptr ptr)
+ @ stdcall ExQueryPoolBlockSize(ptr ptr)
+ @ stdcall ExQueueWorkItem(ptr long)
+ @ stdcall ExRaiseAccessViolation()
+ @ stdcall ExRaiseDatatypeMisalignment()
+ @ stdcall ExRaiseException(ptr) RtlRaiseException
+ @ stdcall ExRaiseHardError(long long long ptr long ptr)
+ @ stdcall ExRaiseStatus(long) RtlRaiseStatus
+ @ fastcall ExReInitializeRundownProtection(ptr) ExfReInitializeRundownProtection
+ @ fastcall ExReInitializeRundownProtectionCacheAware(ptr) ExfReInitializeRundownProtectionCacheAware
+ @ stdcall ExRegisterCallback(ptr ptr ptr)
+ @ stdcall ExReinitializeResourceLite(ptr)
++#ifdef __x86_64__
++@ fastcall ExReleaseFastMutex(ptr)
++#endif
+ @ fastcall ExReleaseFastMutexUnsafe(ptr)
+ @ fastcall ExReleaseFastMutexUnsafeAndLeaveCriticalRegion(ptr)
+ @ fastcall ExReleaseResourceAndLeaveCriticalRegion(ptr)
+ @ stdcall ExReleaseResourceForThreadLite(ptr long)
+ @ fastcall ExReleaseResourceLite(ptr)
+ @ fastcall ExReleaseRundownProtection(ptr) ExfReleaseRundownProtection
+ @ fastcall ExReleaseRundownProtectionCacheAware(ptr) ExfReleaseRundownProtectionCacheAware
+ @ fastcall ExReleaseRundownProtectionCacheAwareEx(ptr long) ExfReleaseRundownProtectionCacheAwareEx
+ @ fastcall ExReleaseRundownProtectionEx(ptr long) ExfReleaseRundownProtectionEx
+ @ fastcall ExRundownCompleted(ptr) ExfRundownCompleted
+ @ fastcall ExRundownCompletedCacheAware(ptr) ExfRundownCompletedCacheAware
+ @ extern ExSemaphoreObjectType _ExSemaphoreObjectType
+ @ stdcall ExSetResourceOwnerPointer(ptr ptr)
+ @ stdcall ExSetTimerResolution(long long)
+ @ stdcall ExSizeOfRundownProtectionCacheAware()
+ @ stdcall ExSystemExceptionFilter()
+ @ stdcall ExSystemTimeToLocalTime(ptr ptr)
++#ifdef __x86_64__
++@ fastcall ExTryToAcquireFastMutex(ptr)
++#endif
+ @ stdcall ExUnregisterCallback(ptr)
+ @ stdcall ExUuidCreate(ptr)
+ @ stdcall ExVerifySuite(long)
+ @ fastcall ExWaitForRundownProtectionRelease(ptr) ExfWaitForRundownProtectionRelease
+ @ fastcall ExWaitForRundownProtectionReleaseCacheAware(ptr) ExfWaitForRundownProtectionReleaseCacheAware
+ @ extern ExWindowStationObjectType
+ @ fastcall ExfAcquirePushLockExclusive(ptr)
+ @ fastcall ExfAcquirePushLockShared(ptr)
++#ifndef __x86_64__
+ @ fastcall ExfInterlockedAddUlong(ptr long ptr)
+ @ fastcall ExfInterlockedCompareExchange64(ptr ptr ptr)
+ @ fastcall ExfInterlockedInsertHeadList(ptr ptr ptr)
+ @ fastcall ExfInterlockedInsertTailList(ptr ptr ptr)
+ @ fastcall ExfInterlockedPopEntryList(ptr ptr)
+ @ fastcall ExfInterlockedPushEntryList(ptr ptr ptr)
+ @ fastcall ExfInterlockedRemoveHeadList(ptr ptr)
++#endif
+ @ fastcall ExfReleasePushLock(ptr)
+ @ fastcall ExfReleasePushLockExclusive(ptr)
+ @ fastcall ExfReleasePushLockShared(ptr)
+ @ fastcall ExfTryToWakePushLock(ptr)
+ @ fastcall ExfUnblockPushLock(ptr ptr)
++#ifdef __x86_64__
++@ stdcall ExpInterlockedFlushSList(ptr)
++@ stdcall ExpInterlockedPopEntrySList(ptr ptr)
++@ stdcall ExpInterlockedPushEntrySList(ptr ptr)
++#endif
+ #ifdef _M_IX86
+ @ fastcall Exfi386InterlockedDecrementLong(ptr)
+ @ fastcall Exfi386InterlockedExchangeUlong(ptr long)
+ @ fastcall Exfi386InterlockedIncrementLong(ptr)
+ @ stdcall Exi386InterlockedDecrementLong(ptr)
+ @ stdcall Exi386InterlockedExchangeUlong(ptr long long)
+ @ stdcall Exi386InterlockedIncrementLong(ptr)
+ #endif
++#ifdef _M_IX86
+ @ fastcall ExiAcquireFastMutex(ptr) ExAcquireFastMutex
+ @ fastcall ExiReleaseFastMutex(ptr) ExReleaseFastMutex
+ @ fastcall ExiTryToAcquireFastMutex(ptr) ExTryToAcquireFastMutex
++#endif
+ @ stdcall FsRtlAcquireFileExclusive(ptr)
+ ;FsRtlAddBaseMcbEntry
+ @ stdcall FsRtlAddLargeMcbEntry(ptr long long long long long long)
+ @ stdcall FsRtlAddMcbEntry(ptr long long long)
+ @ stdcall FsRtlAddToTunnelCache(ptr long long ptr ptr long long ptr)
+ @ stdcall FsRtlAllocateFileLock(ptr ptr)
+ @ stdcall FsRtlAllocatePool(long long)
+ @ stdcall FsRtlAllocatePoolWithQuota(long long)
+ @ stdcall FsRtlAllocatePoolWithQuotaTag(long long long)
+ @ stdcall FsRtlAllocatePoolWithTag(long long long)
+ @ stdcall FsRtlAllocateResource()
+ @ stdcall FsRtlAreNamesEqual(ptr ptr long wstr)
+ @ stdcall FsRtlBalanceReads(ptr)
+ @ stdcall FsRtlCheckLockForReadAccess(ptr ptr)
+ @ stdcall FsRtlCheckLockForWriteAccess(ptr ptr)
+ @ stdcall FsRtlCheckOplock(ptr ptr ptr ptr ptr)
+ @ stdcall FsRtlCopyRead(ptr ptr long long long ptr ptr ptr)
+ @ stdcall FsRtlCopyWrite(ptr ptr long long long ptr ptr ptr)
+ @ stdcall FsRtlCreateSectionForDataScan(ptr ptr ptr ptr long ptr ptr long long long)
+ @ stdcall FsRtlCurrentBatchOplock(ptr)
+ @ stdcall FsRtlDeleteKeyFromTunnelCache(ptr long long)
+ @ stdcall FsRtlDeleteTunnelCache(ptr)
+ @ stdcall FsRtlDeregisterUncProvider(ptr)
+ @ stdcall FsRtlDissectDbcs(long ptr ptr ptr)
+ @ stdcall FsRtlDissectName(long ptr ptr ptr)
+ @ stdcall FsRtlDoesDbcsContainWildCards(ptr)
+ @ stdcall FsRtlDoesNameContainWildCards(ptr)
+ @ stdcall FsRtlFastCheckLockForRead(ptr ptr ptr long ptr ptr)
+ @ stdcall FsRtlFastCheckLockForWrite(ptr ptr ptr long ptr ptr)
+ @ stdcall FsRtlFastUnlockAll(ptr ptr ptr ptr)
+ @ stdcall FsRtlFastUnlockAllByKey(ptr ptr ptr long ptr)
+ @ stdcall FsRtlFastUnlockSingle(ptr ptr ptr ptr ptr long ptr long)
+ @ stdcall FsRtlFindInTunnelCache(ptr long long ptr ptr ptr ptr ptr)
+ @ stdcall FsRtlFreeFileLock(ptr)
+ @ stdcall FsRtlGetFileSize(ptr ptr)
+ ;FsRtlGetNextBaseMcbEntry
+ @ stdcall FsRtlGetNextFileLock(ptr long)
+ @ stdcall FsRtlGetNextLargeMcbEntry(ptr long ptr ptr ptr)
+ @ stdcall FsRtlGetNextMcbEntry(ptr long ptr ptr ptr)
+ @ stdcall FsRtlIncrementCcFastReadNoWait()
+ @ stdcall FsRtlIncrementCcFastReadNotPossible()
+ @ stdcall FsRtlIncrementCcFastReadResourceMiss()
+ @ stdcall FsRtlIncrementCcFastReadWait()
+ ;FsRtlInitializeBaseMcb
+ @ stdcall FsRtlInitializeFileLock(ptr ptr ptr)
+ @ stdcall FsRtlInitializeLargeMcb(ptr long)
+ @ stdcall FsRtlInitializeMcb(ptr long)
+ @ stdcall FsRtlInitializeOplock(ptr)
+ @ stdcall FsRtlInitializeTunnelCache(ptr)
+ @ stdcall FsRtlInsertPerFileObjectContext(ptr ptr)
+ @ stdcall FsRtlInsertPerStreamContext(ptr ptr)
+ @ stdcall FsRtlIsDbcsInExpression(ptr ptr)
+ @ stdcall FsRtlIsFatDbcsLegal(long ptr long long long)
+ @ stdcall FsRtlIsHpfsDbcsLegal(long ptr long long long)
+ @ stdcall FsRtlIsNameInExpression(ptr ptr long wstr)
+ @ stdcall FsRtlIsNtstatusExpected(long)
+ @ stdcall FsRtlIsPagingFile(ptr)
+ @ stdcall FsRtlIsTotalDeviceFailure(ptr)
+ @ extern FsRtlLegalAnsiCharacterArray _FsRtlLegalAnsiCharacterArray
+ ;FsRtlLookupBaseMcbEntry
+ @ stdcall FsRtlLookupLargeMcbEntry(ptr long long ptr ptr ptr ptr ptr)
+ ;FsRtlLookupLastBaseMcbEntry
+ ;FsRtlLookupLastBaseMcbEntryAndIndex
+ @ stdcall FsRtlLookupLastLargeMcbEntry(ptr ptr ptr)
+ @ stdcall FsRtlLookupLastLargeMcbEntryAndIndex(ptr ptr ptr ptr)
+ @ stdcall FsRtlLookupLastMcbEntry(ptr ptr ptr)
+ @ stdcall FsRtlLookupMcbEntry(ptr long ptr ptr ptr)
+ @ stdcall FsRtlLookupPerFileObjectContext(ptr ptr ptr)
+ @ stdcall FsRtlLookupPerStreamContextInternal(ptr ptr ptr)
+ @ stdcall FsRtlMdlRead(ptr ptr long long ptr ptr)
+ @ stdcall FsRtlMdlReadComplete(ptr ptr)
+ @ stdcall FsRtlMdlReadCompleteDev(ptr ptr ptr)
+ @ stdcall FsRtlMdlReadDev(ptr ptr long long ptr ptr ptr)
+ @ stdcall FsRtlMdlWriteComplete(ptr ptr ptr)
+ @ stdcall FsRtlMdlWriteCompleteDev(ptr ptr ptr ptr)
+ @ stdcall FsRtlNormalizeNtstatus(long long)
+ @ stdcall FsRtlNotifyChangeDirectory(ptr ptr ptr ptr long long ptr)
+ @ stdcall FsRtlNotifyCleanup(ptr ptr ptr)
+ @ stdcall FsRtlNotifyFilterChangeDirectory(ptr ptr ptr ptr long long long ptr ptr ptr ptr)
+ @ stdcall FsRtlNotifyFilterReportChange(ptr ptr ptr long ptr ptr long long ptr ptr)
+ @ stdcall FsRtlNotifyFullChangeDirectory(ptr ptr ptr ptr long long long ptr ptr ptr)
+ @ stdcall FsRtlNotifyFullReportChange(ptr ptr ptr long ptr ptr long long ptr)
+ @ stdcall FsRtlNotifyInitializeSync(ptr)
+ @ stdcall FsRtlNotifyReportChange(ptr ptr ptr ptr long)
+ @ stdcall FsRtlNotifyUninitializeSync(ptr)
+ @ stdcall FsRtlNotifyVolumeEvent(ptr long)
+ ;FsRtlNumberOfRunsInBaseMcb
+ @ stdcall FsRtlNumberOfRunsInLargeMcb(ptr)
+ @ stdcall FsRtlNumberOfRunsInMcb(ptr)
+ @ stdcall FsRtlOplockFsctrl(ptr ptr long)
+ @ stdcall FsRtlOplockIsFastIoPossible(ptr)
+ @ stdcall FsRtlPostPagingFileStackOverflow(ptr ptr ptr)
+ @ stdcall FsRtlPostStackOverflow(ptr ptr ptr)
+ @ stdcall FsRtlPrepareMdlWrite(ptr ptr long long ptr ptr)
+ @ stdcall FsRtlPrepareMdlWriteDev(ptr ptr long long ptr ptr ptr)
+ @ stdcall FsRtlPrivateLock(ptr ptr ptr ptr ptr long long long ptr ptr ptr long)
+ @ stdcall FsRtlProcessFileLock(ptr ptr ptr)
+ @ stdcall FsRtlRegisterFileSystemFilterCallbacks(ptr ptr)
+ @ stdcall FsRtlRegisterUncProvider(ptr ptr long)
+ @ stdcall FsRtlReleaseFile(ptr)
+ ;FsRtlRemoveBaseMcbEntry
+ @ stdcall FsRtlRemoveLargeMcbEntry(ptr long long long long)
+ @ stdcall FsRtlRemoveMcbEntry(ptr long long)
+ @ stdcall FsRtlRemovePerFileObjectContext(ptr ptr ptr)
+ @ stdcall FsRtlRemovePerStreamContext(ptr ptr ptr)
+ ;FsRtlResetBaseMcb
+ @ stdcall FsRtlResetLargeMcb(ptr long)
+ ;FsRtlSplitBaseMcb
+ @ stdcall FsRtlSplitLargeMcb(ptr long long long long)
+ @ stdcall FsRtlSyncVolumes(long long long)
+ @ stdcall FsRtlTeardownPerStreamContexts(ptr)
+ ;FsRtlTruncateBaseMcb
+ @ stdcall FsRtlTruncateLargeMcb(ptr long long)
+ @ stdcall FsRtlTruncateMcb(ptr long)
+ ;FsRtlUninitializeBaseMcb
+ @ stdcall FsRtlUninitializeFileLock(ptr)
+ @ stdcall FsRtlUninitializeLargeMcb(ptr)
+ @ stdcall FsRtlUninitializeMcb(ptr)
+ @ stdcall FsRtlUninitializeOplock(ptr)
+ @ extern HalDispatchTable _HalDispatchTable
+ @ fastcall HalExamineMBR(ptr long long ptr)
+ @ extern HalPrivateDispatchTable
+ ;HeadlessDispatch
+ @ stdcall InbvAcquireDisplayOwnership()
+ @ stdcall InbvCheckDisplayOwnership()
+ @ stdcall InbvDisplayString(str)
+ @ stdcall InbvEnableBootDriver(long)
+ @ stdcall InbvEnableDisplayString(long)
+ @ stdcall InbvInstallDisplayStringFilter(ptr)
+ @ stdcall InbvIsBootDriverInstalled()
+ @ stdcall InbvNotifyDisplayOwnershipLost(ptr)
+ @ stdcall InbvResetDisplay()
+ @ stdcall InbvSetScrollRegion(long long long long)
+ @ stdcall InbvSetTextColor(long)
+ @ stdcall InbvSolidColorFill(long long long long long)
+ @ extern InitSafeBootMode
+ @ fastcall InterlockedCompareExchange(ptr long long)
+ @ fastcall InterlockedDecrement(ptr)
+ @ fastcall InterlockedExchange(ptr long)
+ @ fastcall InterlockedExchangeAdd(ptr long)
+ @ fastcall InterlockedIncrement(ptr)
++#ifndef __x86_64__
+ @ fastcall InterlockedPopEntrySList(ptr)
+ @ fastcall InterlockedPushEntrySList(ptr ptr)
++#endif
+ @ stdcall IoAcquireCancelSpinLock(ptr)
+ @ stdcall IoAcquireRemoveLockEx(ptr ptr str long long)
+ @ stdcall IoAcquireVpbSpinLock(ptr)
+ @ extern IoAdapterObjectType
+ @ stdcall IoAllocateAdapterChannel(ptr ptr long ptr ptr)
+ @ stdcall IoAllocateController(ptr ptr ptr ptr)
+ @ stdcall IoAllocateDriverObjectExtension(ptr ptr long ptr)
+ @ stdcall IoAllocateErrorLogEntry(ptr long)
+ @ stdcall IoAllocateIrp(long long)
+ @ stdcall IoAllocateMdl(ptr long long long ptr)
+ @ stdcall IoAllocateWorkItem(ptr)
+ @ fastcall IoAssignDriveLetters(ptr ptr ptr ptr)
+ @ stdcall IoAssignResources(ptr ptr ptr ptr ptr ptr)
+ @ stdcall IoAttachDevice(ptr ptr ptr)
+ @ stdcall IoAttachDeviceByPointer(ptr ptr)
+ @ stdcall IoAttachDeviceToDeviceStack(ptr ptr)
+ @ stdcall IoAttachDeviceToDeviceStackSafe(ptr ptr ptr)
+ @ stdcall IoBuildAsynchronousFsdRequest(long ptr ptr long ptr ptr)
+ @ stdcall IoBuildDeviceIoControlRequest(long ptr ptr long ptr long long ptr ptr)
+ @ stdcall IoBuildPartialMdl(ptr ptr ptr long)
+ @ stdcall IoBuildSynchronousFsdRequest(long ptr ptr long ptr ptr ptr)
+ @ stdcall IoCallDriver(ptr ptr)
+ @ stdcall IoCancelFileOpen(ptr ptr)
+ @ stdcall IoCancelIrp(ptr)
+ @ stdcall IoCheckDesiredAccess(ptr long)
+ @ stdcall IoCheckEaBufferValidity(ptr long ptr)
+ @ stdcall IoCheckFunctionAccess(long long long long ptr ptr)
+ @ stdcall IoCheckQuerySetFileInformation(long long long)
+ @ stdcall IoCheckQuerySetVolumeInformation(long long long)
+ @ stdcall IoCheckQuotaBufferValidity(ptr long ptr)
+ @ stdcall IoCheckShareAccess(long long ptr ptr long)
+ @ stdcall IoCompleteRequest(ptr long)
+ @ stdcall IoConnectInterrupt(ptr ptr ptr ptr long long long long long long long)
+ @ stdcall IoCreateController(long)
+ @ stdcall IoCreateDevice(ptr long ptr long long long ptr)
+ @ stdcall IoCreateDisk(ptr ptr)
+ @ stdcall IoCreateDriver(ptr ptr)
+ @ stdcall IoCreateFile(ptr long ptr ptr ptr long long long long ptr long long ptr long)
+ @ stdcall IoCreateFileSpecifyDeviceObjectHint(ptr long ptr ptr ptr long long long long ptr long long ptr long ptr)
+ @ stdcall IoCreateNotificationEvent(ptr ptr)
+ @ stdcall IoCreateStreamFileObject(ptr ptr)
+ @ stdcall IoCreateStreamFileObjectEx(ptr ptr ptr)
+ @ stdcall IoCreateStreamFileObjectLite(ptr ptr)
+ @ stdcall IoCreateSymbolicLink(ptr ptr)
+ @ stdcall IoCreateSynchronizationEvent(ptr ptr)
+ @ stdcall IoCreateUnprotectedSymbolicLink(ptr ptr)
+ @ stdcall IoCsqInitialize(ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall IoCsqInitializeEx(ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall IoCsqInsertIrp(ptr ptr ptr)
+ @ stdcall IoCsqInsertIrpEx(ptr ptr ptr ptr)
+ @ stdcall IoCsqRemoveIrp(ptr ptr)
+ @ stdcall IoCsqRemoveNextIrp(ptr ptr)
+ @ stdcall IoDeleteController(ptr)
+ @ stdcall IoDeleteDevice(ptr)
+ @ stdcall IoDeleteDriver(ptr)
+ @ stdcall IoDeleteSymbolicLink(ptr)
+ @ stdcall IoDetachDevice(ptr)
+ @ extern IoDeviceHandlerObjectSize
+ @ extern IoDeviceHandlerObjectType
+ @ extern IoDeviceObjectType
+ @ stdcall IoDisconnectInterrupt(ptr)
+ @ extern IoDriverObjectType
+ @ stdcall IoEnqueueIrp(ptr)
+ @ stdcall IoEnumerateDeviceObjectList(ptr ptr long ptr)
+ @ stdcall IoEnumerateRegisteredFiltersList(ptr long ptr)
+ @ stdcall IoFastQueryNetworkAttributes(ptr long long ptr ptr)
+ @ extern IoFileObjectType _IoFileObjectType
+ @ stdcall IoForwardAndCatchIrp(ptr ptr) IoForwardIrpSynchronously
+ @ stdcall IoForwardIrpSynchronously(ptr ptr)
+ @ stdcall IoFreeController(ptr)
+ @ stdcall IoFreeErrorLogEntry(ptr)
+ @ stdcall IoFreeIrp(ptr)
+ @ stdcall IoFreeMdl(ptr)
+ @ stdcall IoFreeWorkItem(ptr)
+ @ stdcall IoGetAttachedDevice(ptr)
+ @ stdcall IoGetAttachedDeviceReference(ptr)
+ @ stdcall IoGetBaseFileSystemDeviceObject(ptr)
+ @ stdcall IoGetBootDiskInformation(ptr long)
+ @ stdcall IoGetConfigurationInformation()
+ @ stdcall IoGetCurrentProcess()
+ @ stdcall IoGetDeviceAttachmentBaseRef(ptr)
+ @ stdcall IoGetDeviceInterfaceAlias(ptr ptr ptr)
+ @ stdcall IoGetDeviceInterfaces(ptr ptr long ptr)
+ @ stdcall IoGetDeviceObjectPointer(ptr long ptr ptr)
+ @ stdcall IoGetDeviceProperty(ptr long long ptr ptr)
+ @ stdcall IoGetDeviceToVerify(ptr)
+ @ stdcall IoGetDiskDeviceObject(ptr ptr)
+ @ stdcall IoGetDmaAdapter(ptr ptr ptr)
+ @ stdcall IoGetDriverObjectExtension(ptr ptr)
+ @ stdcall IoGetFileObjectGenericMapping()
+ @ stdcall IoGetInitialStack()
+ @ stdcall IoGetLowerDeviceObject(ptr)
+ @ fastcall IoGetPagingIoPriority(ptr)
+ @ stdcall IoGetRelatedDeviceObject(ptr)
+ @ stdcall IoGetRequestorProcess(ptr)
+ @ stdcall IoGetRequestorProcessId(ptr)
+ @ stdcall IoGetRequestorSessionId(ptr ptr)
+ @ stdcall IoGetStackLimits(ptr ptr)
+ @ stdcall IoGetTopLevelIrp()
+ @ stdcall IoInitializeIrp(ptr long long)
+ @ stdcall IoInitializeRemoveLockEx(ptr long long long long)
+ @ stdcall IoInitializeTimer(ptr ptr ptr)
+ @ stdcall IoInvalidateDeviceRelations(ptr long)
+ @ stdcall IoInvalidateDeviceState(ptr)
+ @ stdcall IoIsFileOriginRemote(ptr)
+ @ stdcall IoIsOperationSynchronous(ptr)
+ @ stdcall IoIsSystemThread(ptr)
+ @ stdcall IoIsValidNameGraftingBuffer(ptr ptr)
+ @ stdcall IoIsWdmVersionAvailable(long long)
+ @ stdcall IoMakeAssociatedIrp(ptr long)
+ @ stdcall IoOpenDeviceInterfaceRegistryKey(ptr long ptr)
+ @ stdcall IoOpenDeviceRegistryKey(ptr long long ptr)
+ @ stdcall IoPageRead(ptr ptr ptr ptr ptr)
+ @ stdcall IoPnPDeliverServicePowerNotification(long long long long)
+ @ stdcall IoQueryDeviceDescription(ptr ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall IoQueryFileDosDeviceName(ptr ptr)
+ @ stdcall IoQueryFileInformation(ptr long long ptr ptr)
+ @ stdcall IoQueryVolumeInformation(ptr long long ptr ptr)
+ @ stdcall IoQueueThreadIrp(ptr)
+ @ stdcall IoQueueWorkItem(ptr ptr long ptr)
+ @ stdcall IoRaiseHardError(ptr ptr ptr)
+ @ stdcall IoRaiseInformationalHardError(long ptr ptr)
+ @ stdcall IoReadDiskSignature(ptr long ptr)
+ @ extern IoReadOperationCount
+ @ fastcall IoReadPartitionTable(ptr long long ptr)
+ @ stdcall IoReadPartitionTableEx(ptr ptr)
+ @ extern IoReadTransferCount
+ @ stdcall IoRegisterBootDriverReinitialization(ptr ptr ptr)
+ @ stdcall IoRegisterDeviceInterface(ptr ptr ptr ptr)
+ @ stdcall IoRegisterDriverReinitialization(ptr ptr ptr)
+ @ stdcall IoRegisterFileSystem(ptr)
+ @ stdcall IoRegisterFsRegistrationChange(ptr ptr)
+ @ stdcall IoRegisterLastChanceShutdownNotification(ptr)
+ @ stdcall IoRegisterPlugPlayNotification(long long ptr ptr ptr ptr ptr)
+ @ stdcall IoRegisterShutdownNotification(ptr)
+ @ stdcall IoReleaseCancelSpinLock(long)
+ @ stdcall IoReleaseRemoveLockAndWaitEx(ptr ptr long)
+ @ stdcall IoReleaseRemoveLockEx(ptr ptr long)
+ @ stdcall IoReleaseVpbSpinLock(long)
+ @ stdcall IoRemoveShareAccess(ptr ptr)
+ @ stdcall IoReportDetectedDevice(ptr long long long ptr ptr long ptr)
+ @ stdcall IoReportHalResourceUsage(ptr ptr ptr long)
+ @ stdcall IoReportResourceForDetection(ptr ptr long ptr ptr long ptr)
+ @ stdcall IoReportResourceUsage(ptr ptr ptr long ptr ptr long long ptr)
+ @ stdcall IoReportTargetDeviceChange(ptr ptr)
+ @ stdcall IoReportTargetDeviceChangeAsynchronous(ptr ptr ptr ptr)
+ @ stdcall IoRequestDeviceEject(ptr)
+ @ stdcall IoReuseIrp(ptr long)
+ @ stdcall IoSetCompletionRoutineEx(ptr ptr ptr ptr long long long)
+ @ stdcall IoSetDeviceInterfaceState(ptr long)
+ @ stdcall IoSetDeviceToVerify(ptr ptr)
+ @ stdcall IoSetFileOrigin(ptr long)
+ @ stdcall IoSetHardErrorOrVerifyDevice(ptr ptr)
+ @ stdcall IoSetInformation(ptr ptr long ptr)
+ @ stdcall IoSetIoCompletion(ptr ptr ptr long ptr long)
+ @ fastcall IoSetPartitionInformation(ptr long long long)
+ @ stdcall IoSetPartitionInformationEx(ptr long ptr)
+ @ stdcall IoSetShareAccess(long long ptr ptr)
+ @ stdcall IoSetStartIoAttributes(ptr long long)
+ @ stdcall IoSetSystemPartition(ptr)
+ @ stdcall IoSetThreadHardErrorMode(long)
+ @ stdcall IoSetTopLevelIrp(ptr)
+ @ stdcall IoStartNextPacket(ptr long)
+ @ stdcall IoStartNextPacketByKey(ptr long long)
+ @ stdcall IoStartPacket(ptr ptr ptr ptr)
+ @ stdcall IoStartTimer(ptr)
+ @ extern IoStatisticsLock
+ @ stdcall IoStopTimer(ptr)
+ @ stdcall IoSynchronousInvalidateDeviceRelations(ptr long)
+ @ stdcall IoSynchronousPageWrite(ptr ptr ptr ptr ptr)
+ @ stdcall IoThreadToProcess(ptr)
+ ;IoTranslateBusAddress
+ @ stdcall IoUnregisterFileSystem(ptr)
+ @ stdcall IoUnregisterFsRegistrationChange(ptr ptr)
+ @ stdcall IoUnregisterPlugPlayNotification(ptr)
+ @ stdcall IoUnregisterShutdownNotification(ptr)
+ @ stdcall IoUpdateShareAccess(ptr ptr)
+ @ stdcall IoValidateDeviceIoControlAccess(ptr long)
+ @ stdcall IoVerifyPartitionTable(ptr long)
+ @ stdcall IoVerifyVolume(ptr long)
+ @ stdcall IoVolumeDeviceToDosName(ptr ptr)
+ @ stdcall IoWMIAllocateInstanceIds(ptr long ptr)
+ @ stdcall IoWMIDeviceObjectToInstanceName(ptr ptr ptr)
+ @ stdcall IoWMIExecuteMethod(ptr ptr long long ptr ptr)
+ @ stdcall IoWMIHandleToInstanceName(ptr ptr ptr)
+ @ stdcall IoWMIOpenBlock(ptr long ptr)
+ @ stdcall IoWMIQueryAllData(ptr ptr ptr)
+ @ stdcall IoWMIQueryAllDataMultiple(ptr long ptr ptr)
+ @ stdcall IoWMIQuerySingleInstance(ptr ptr ptr ptr)
+ @ stdcall IoWMIQuerySingleInstanceMultiple(ptr ptr long ptr ptr)
+ @ stdcall IoWMIRegistrationControl(ptr long)
+ @ stdcall IoWMISetNotificationCallback(ptr ptr ptr)
+ @ stdcall IoWMISetSingleInstance(ptr ptr long long ptr)
+ @ stdcall IoWMISetSingleItem(ptr ptr long long long ptr)
+ @ stdcall IoWMISuggestInstanceName(ptr ptr long ptr)
+ @ stdcall IoWMIWriteEvent(ptr)
+ @ stdcall IoWriteErrorLogEntry(ptr)
+ @ extern IoWriteOperationCount
+ @ fastcall IoWritePartitionTable(ptr long long long ptr)
+ @ stdcall IoWritePartitionTableEx(ptr ptr)
+ @ extern IoWriteTransferCount
+ @ fastcall IofCallDriver(ptr ptr)
+ @ fastcall IofCompleteRequest(ptr long)
+ @ stdcall KdChangeOption(long long ptr long ptr ptr)
+ @ extern KdDebuggerEnabled _KdDebuggerEnabled
+ @ extern KdDebuggerNotPresent _KdDebuggerNotPresent
+ @ stdcall KdDisableDebugger()
+ @ stdcall KdEnableDebugger()
+ @ extern KdEnteredDebugger
+ @ stdcall KdPollBreakIn()
+ @ stdcall KdPowerTransition(long)
+ @ stdcall KdRefreshDebuggerNotPresent()
+ @ stdcall KdSystemDebugControl(long ptr long ptr long ptr long)
+ #ifdef _M_IX86
+ @ stdcall Ke386CallBios(long ptr)
+ ;Ke386IoSetAccessProcess
+ ;Ke386QueryIoAccessMap
+ ;Ke386SetIoAccessMap
+ #endif
+ @ fastcall KeAcquireGuardedMutex(ptr)
+ @ fastcall KeAcquireGuardedMutexUnsafe(ptr)
+ @ fastcall KeAcquireInStackQueuedSpinLockAtDpcLevel(ptr ptr)
+ @ fastcall KeAcquireInStackQueuedSpinLockForDpc(ptr ptr)
+ @ stdcall KeAcquireInterruptSpinLock(ptr)
+ @ stdcall KeAcquireSpinLockAtDpcLevel(ptr)
+ @ fastcall KeAcquireSpinLockForDpc(ptr)
++#ifdef __x86_64__
++@ stdcall KeAcquireSpinLockRaiseToDpc(ptr)
++#endif
+ @ stdcall KeAddSystemServiceTable(ptr ptr long ptr long)
+ @ stdcall KeAreAllApcsDisabled()
+ @ stdcall KeAreApcsDisabled()
+ @ stdcall KeAttachProcess(ptr)
+ @ stdcall KeBugCheck(long)
+ @ stdcall KeBugCheckEx(long ptr ptr ptr ptr)
+ @ stdcall KeCancelTimer(ptr)
+ @ stdcall KeCapturePersistentThreadState(ptr long long long long long ptr)
+ @ stdcall KeClearEvent(ptr)
+ @ stdcall KeConnectInterrupt(ptr)
+ @ stdcall KeDelayExecutionThread(long long ptr)
+ @ stdcall KeDeregisterBugCheckCallback(ptr)
+ @ stdcall KeDeregisterBugCheckReasonCallback(ptr)
+ @ stdcall KeDeregisterNmiCallback(ptr)
+ @ stdcall KeDetachProcess()
+ @ stdcall KeDisconnectInterrupt(ptr)
+ @ stdcall KeEnterCriticalRegion() _KeEnterCriticalRegion
+ @ stdcall KeEnterGuardedRegion() _KeEnterGuardedRegion
+ @ stdcall KeEnterKernelDebugger()
+ @ stdcall KeFindConfigurationEntry(ptr long long ptr)
+ @ stdcall KeFindConfigurationNextEntry(ptr long long ptr ptr)
+ @ stdcall KeFlushEntireTb(long long)
+ @ stdcall KeFlushQueuedDpcs()
+ ;KeGenericCallDpc
+ @ stdcall KeGetCurrentThread()
+ @ stdcall KeGetPreviousMode()
+ @ stdcall KeGetRecommendedSharedDataAlignment()
+ #ifdef _M_IX86
+ ;KeI386AbiosCall
+ @ stdcall KeI386AllocateGdtSelectors(ptr long)
+ ;KeI386Call16BitCStyleFunction
+ ;KeI386Call16BitFunction
+ @ stdcall KeI386FlatToGdtSelector(long long long)
+ ;KeI386GetLid
+ @ extern KeI386MachineType
+ @ stdcall KeI386ReleaseGdtSelectors(ptr long)
+ ;KeI386ReleaseLid
+ ;KeI386SetGdtSelector
+ #endif
+ @ stdcall KeInitializeApc(ptr ptr long ptr ptr ptr long ptr)
+ @ stdcall KeInitializeCrashDumpHeader(long long ptr long ptr)
+ @ stdcall KeInitializeDeviceQueue(ptr)
+ @ stdcall KeInitializeDpc(ptr ptr ptr)
+ @ stdcall KeInitializeEvent(ptr long long)
+ @ fastcall KeInitializeGuardedMutex(ptr)
+ @ stdcall KeInitializeInterrupt(ptr ptr ptr ptr long long long long long long long)
+ @ stdcall KeInitializeMutant(ptr long)
+ @ stdcall KeInitializeMutex(ptr long)
+ @ stdcall KeInitializeQueue(ptr long)
+ @ stdcall KeInitializeSemaphore(ptr long long)
++#ifndef __x86_64__
+ @ stdcall KeInitializeSpinLock(ptr)
++#endif
+ @ stdcall KeInitializeThreadedDpc(ptr ptr ptr)
+ @ stdcall KeInitializeTimer(ptr)
+ @ stdcall KeInitializeTimerEx(ptr long)
+ @ stdcall KeInsertByKeyDeviceQueue(ptr ptr long)
+ @ stdcall KeInsertDeviceQueue(ptr ptr)
+ @ stdcall KeInsertHeadQueue(ptr ptr)
+ @ stdcall KeInsertQueue(ptr ptr)
+ @ stdcall KeInsertQueueApc(ptr ptr ptr long)
+ @ stdcall KeInsertQueueDpc(ptr ptr ptr)
+ @ stdcall KeInvalidateAllCaches()
+ @ stdcall KeIpiGenericCall(ptr ptr)
+ @ stdcall KeIsAttachedProcess()
+ @ stdcall KeIsExecutingDpc()
+ ;KeIsWaitListEmpty
+ @ stdcall KeLeaveCriticalRegion() _KeLeaveCriticalRegion
+ @ stdcall KeLeaveGuardedRegion() _KeLeaveGuardedRegion
+ @ extern KeLoaderBlock
+ @ extern KeNumberProcessors
+ @ stdcall KeProfileInterrupt(ptr)
+ @ stdcall KeProfileInterruptWithSource(ptr long)
+ @ stdcall KePulseEvent(ptr long long)
+ @ stdcall KeQueryActiveProcessors()
++#ifndef __x86_64__
+ @ stdcall KeQueryInterruptTime()
++#endif
+ @ stdcall KeQueryPriorityThread(ptr)
+ @ stdcall KeQueryRuntimeThread(ptr ptr)
++#ifndef __x86_64__
+ @ stdcall KeQuerySystemTime(ptr)
++#endif
+ @ stdcall KeQueryTickCount(ptr)
+ @ stdcall KeQueryTimeIncrement()
+ @ stdcall KeRaiseUserException(long)
+ @ stdcall KeReadStateEvent(ptr)
+ @ stdcall KeReadStateMutant(ptr)
+ @ stdcall KeReadStateMutex(ptr) KeReadStateMutant
+ @ stdcall KeReadStateQueue(ptr)
+ @ stdcall KeReadStateSemaphore(ptr)
+ @ stdcall KeReadStateTimer(ptr)
+ @ stdcall KeRegisterBugCheckCallback(ptr ptr ptr long ptr)
+ @ stdcall KeRegisterBugCheckReasonCallback(ptr ptr ptr ptr)
+ @ stdcall KeRegisterNmiCallback(ptr ptr)
+ @ fastcall KeReleaseGuardedMutex(ptr)
+ @ fastcall KeReleaseGuardedMutexUnsafe(ptr)
+ @ fastcall KeReleaseInStackQueuedSpinLockForDpc(ptr)
+ @ fastcall KeReleaseInStackQueuedSpinLockFromDpcLevel(ptr)
+ @ stdcall KeReleaseInterruptSpinLock(ptr long)
+ @ stdcall KeReleaseMutant(ptr long long long)
+ @ stdcall KeReleaseMutex(ptr long)
+ @ stdcall KeReleaseSemaphore(ptr long long long)
++#ifdef __x86_64__
++@ stdcall KeReleaseSpinLock(ptr long)
++#endif
+ @ fastcall KeReleaseSpinLockForDpc(ptr long)
+ @ stdcall KeReleaseSpinLockFromDpcLevel(ptr)
+ @ stdcall KeRemoveByKeyDeviceQueue(ptr long)
+ @ stdcall KeRemoveByKeyDeviceQueueIfBusy(ptr long)
+ @ stdcall KeRemoveDeviceQueue(ptr)
+ @ stdcall KeRemoveEntryDeviceQueue(ptr ptr)
+ @ stdcall KeRemoveQueue(ptr long ptr)
+ @ stdcall KeRemoveQueueDpc(ptr)
+ @ stdcall KeRemoveSystemServiceTable(long)
+ @ stdcall KeResetEvent(ptr)
+ @ stdcall KeRestoreFloatingPointState(ptr)
+ @ stdcall KeRevertToUserAffinityThread()
+ @ stdcall KeRundownQueue(ptr)
+ @ stdcall KeSaveFloatingPointState(ptr)
+ @ cdecl KeSaveStateForHibernate(ptr)
+ @ extern KeServiceDescriptorTable
+ @ stdcall KeSetAffinityThread(ptr long)
+ @ stdcall KeSetBasePriorityThread(ptr long)
+ @ stdcall KeSetDmaIoCoherency(long)
+ @ stdcall KeSetEvent(ptr long long)
+ @ stdcall KeSetEventBoostPriority(ptr ptr)
+ @ stdcall KeSetIdealProcessorThread(ptr long)
+ @ stdcall KeSetImportanceDpc(ptr long)
+ @ stdcall KeSetKernelStackSwapEnable(long)
+ @ stdcall KeSetPriorityThread(ptr long)
+ @ stdcall KeSetProfileIrql(long)
+ @ stdcall KeSetSystemAffinityThread(long)
+ @ stdcall KeSetTargetProcessorDpc(ptr long)
+ @ stdcall KeSetTimeIncrement(long long)
+ @ stdcall KeSetTimer(ptr long long ptr)
+ @ stdcall KeSetTimerEx(ptr long long long ptr)
+ ;KeSignalCallDpcDone
+ ;KeSignalCallDpcSynchronize
+ @ stdcall KeStackAttachProcess(ptr ptr)
+ @ stdcall KeSynchronizeExecution(ptr ptr ptr)
+ @ stdcall KeTerminateThread(long)
+ @ fastcall KeTestSpinLock(ptr)
+ @ extern KeTickCount
+ @ fastcall KeTryToAcquireGuardedMutex(ptr)
+ @ fastcall KeTryToAcquireSpinLockAtDpcLevel(ptr)
+ @ stdcall KeUnstackDetachProcess(ptr)
+ @ stdcall KeUpdateRunTime(ptr long)
+ #ifdef _M_IX86
+ @ stdcall KeUpdateSystemTime()
+ #else
+ @ stdcall KeUpdateSystemTime(ptr long long)
+ #endif
+ @ stdcall KeUserModeCallback(long ptr long ptr ptr)
+ @ stdcall KeWaitForMultipleObjects(long ptr long long long long ptr ptr)
+ @ stdcall KeWaitForMutexObject(ptr long long long ptr) KeWaitForSingleObject
+ @ stdcall KeWaitForSingleObject(ptr long long long ptr)
+ @ fastcall KefAcquireSpinLockAtDpcLevel(ptr)
+ @ fastcall KefReleaseSpinLockFromDpcLevel(ptr)
+ #ifdef _M_IX86
+ @ stdcall Kei386EoiHelper()
+ #endif
+ @ fastcall KiAcquireSpinLock(ptr)
+ @ extern KiBugCheckData
+ @ stdcall KiCheckForKernelApcDelivery()
+ #ifdef _M_IX86
+ @ stdcall KiCoprocessorError()
+ #endif
+ @ stdcall KiDeliverApc(long ptr ptr)
+ #ifdef _M_IX86
+ @ stdcall KiDispatchInterrupt()
+ #endif
+ @ extern KiEnableTimerWatchdog
+ @ stdcall KiIpiServiceRoutine(ptr ptr)
+ @ fastcall KiReleaseSpinLock(ptr)
+ @ cdecl KiUnexpectedInterrupt()
+ #ifdef _M_IX86
+ ;Kii386SpinOnSpinLock
+ #endif
+ @ stdcall LdrAccessResource(ptr ptr ptr ptr)
+ @ stdcall LdrEnumResources(ptr ptr long ptr ptr)
+ @ stdcall LdrFindResourceDirectory_U(ptr ptr long ptr)
+ @ stdcall LdrFindResource_U(ptr ptr long ptr)
+ @ extern LpcPortObjectType
+ @ stdcall LpcRequestPort(ptr ptr)
+ @ stdcall LpcRequestWaitReplyPort(ptr ptr ptr)
+ @ stdcall LsaCallAuthenticationPackage(long long long long long long long)
+ @ stdcall LsaDeregisterLogonProcess(long long)
+ @ stdcall LsaFreeReturnBuffer(ptr)
+ @ stdcall LsaLogonUser(ptr ptr long long ptr long ptr ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall LsaLookupAuthenticationPackage(long long long)
+ @ stdcall LsaRegisterLogonProcess(ptr ptr ptr)
+ @ extern Mm64BitPhysicalAddress
+ @ stdcall MmAddPhysicalMemory(ptr ptr)
+ @ stdcall MmAddVerifierThunks(ptr long)
+ @ stdcall MmAdjustWorkingSetSize(long long long long)
+ @ stdcall MmAdvanceMdl(ptr long)
+ @ stdcall MmAllocateContiguousMemory(long long long)
+ @ stdcall MmAllocateContiguousMemorySpecifyCache(long long long long long long long long)
+ @ stdcall MmAllocateMappingAddress(long long)
+ @ stdcall MmAllocateNonCachedMemory(long)
+ @ stdcall MmAllocatePagesForMdl(ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall MmAllocatePagesForMdlEx(long long long long long long long long long)
+ @ stdcall MmBuildMdlForNonPagedPool(ptr)
+ @ stdcall MmCanFileBeTruncated(ptr ptr)
+ ;MmCommitSessionMappedView
+ @ stdcall MmCreateMdl(ptr ptr long)
+ ;MmCreateMirror
+ @ stdcall MmCreateSection(ptr long ptr ptr long long ptr ptr)
+ @ stdcall MmDisableModifiedWriteOfSection(long)
+ @ stdcall MmFlushImageSection(ptr long)
+ @ stdcall MmForceSectionClosed(ptr long)
+ @ stdcall MmFreeContiguousMemory(ptr)
+ @ stdcall MmFreeContiguousMemorySpecifyCache(ptr long long)
+ @ stdcall MmFreeMappingAddress(ptr long)
+ @ stdcall MmFreeNonCachedMemory(ptr long)
+ @ stdcall MmFreePagesFromMdl(ptr)
+ @ stdcall MmGetPhysicalAddress(ptr)
+ @ stdcall MmGetPhysicalMemoryRanges()
+ @ stdcall MmGetSystemRoutineAddress(ptr)
+ @ stdcall MmGetVirtualForPhysical(long long)
+ @ stdcall MmGrowKernelStack(ptr)
+ @ extern MmHighestUserAddress
+ @ stdcall MmIsAddressValid(ptr)
+ @ stdcall MmIsDriverVerifying(ptr)
+ ;MmIsIoSpaceActive
+ @ stdcall MmIsNonPagedSystemAddressValid(ptr)
+ @ stdcall MmIsRecursiveIoFault()
+ @ stdcall MmIsThisAnNtAsSystem()
+ @ stdcall MmIsVerifierEnabled(ptr)
+ @ stdcall MmLockPagableDataSection(ptr)
+ @ stdcall MmLockPagableImageSection(ptr) MmLockPagableDataSection
+ @ stdcall MmLockPagableSectionByHandle(ptr)
+ @ stdcall MmMapIoSpace(long long long long)
+ @ stdcall MmMapLockedPages(ptr long)
+ @ stdcall MmMapLockedPagesSpecifyCache(ptr long long ptr long long)
+ @ stdcall MmMapLockedPagesWithReservedMapping(ptr long ptr long)
+ @ stdcall MmMapMemoryDumpMdl(ptr)
+ @ stdcall MmMapUserAddressesToPage(ptr long ptr)
+ @ stdcall MmMapVideoDisplay(long long long long)
+ @ stdcall MmMapViewInSessionSpace(ptr ptr ptr)
+ @ stdcall MmMapViewInSystemSpace(ptr ptr ptr)
+ @ stdcall MmMapViewOfSection(ptr ptr ptr long long ptr ptr long long long)
+ @ stdcall MmMarkPhysicalMemoryAsBad(ptr ptr)
+ @ stdcall MmMarkPhysicalMemoryAsGood(ptr ptr)
+ @ stdcall MmPageEntireDriver(ptr)
+ @ stdcall MmPrefetchPages(long ptr)
+ @ stdcall MmProbeAndLockPages(ptr long long)
+ @ stdcall MmProbeAndLockProcessPages(ptr ptr long long)
+ @ stdcall MmProbeAndLockSelectedPages(ptr ptr long long)
+ @ stdcall MmProtectMdlSystemAddress(ptr long)
+ @ stdcall MmQuerySystemSize()
+ @ stdcall MmRemovePhysicalMemory(ptr ptr)
+ @ stdcall MmResetDriverPaging(ptr)
+ @ extern MmSectionObjectType
+ @ stdcall MmSecureVirtualMemory(ptr long long)
+ @ stdcall MmSetAddressRangeModified(ptr long)
+ @ stdcall MmSetBankedSection(long long long long long long)
+ @ stdcall MmSizeOfMdl(ptr long)
+ @ extern MmSystemRangeStart
+ @ stdcall MmTrimAllSystemPagableMemory(long)
+ @ stdcall MmUnlockPagableImageSection(ptr)
+ @ stdcall MmUnlockPages(ptr)
+ @ stdcall MmUnmapIoSpace(ptr long)
+ @ stdcall MmUnmapLockedPages(ptr ptr)
+ @ stdcall MmUnmapReservedMapping(ptr long ptr)
+ @ stdcall MmUnmapVideoDisplay(ptr long)
+ @ stdcall MmUnmapViewInSessionSpace(ptr)
+ @ stdcall MmUnmapViewInSystemSpace(ptr)
+ @ stdcall MmUnmapViewOfSection(ptr ptr)
+ @ stdcall MmUnsecureVirtualMemory(ptr)
+ @ extern MmUserProbeAddress
+ @ extern NlsAnsiCodePage
+ @ extern NlsLeadByteInfo
+ @ extern NlsMbCodePageTag
+ @ extern NlsMbOemCodePageTag
+ @ extern NlsOemCodePage
+ @ extern NlsOemLeadByteInfo _NlsOemLeadByteInfo
+ @ stdcall NtAddAtom(wstr long ptr)
+ @ stdcall NtAdjustPrivilegesToken(ptr long ptr long ptr ptr)
+ @ stdcall NtAlertThread(ptr)
+ @ stdcall NtAllocateLocallyUniqueId(ptr)
+ @ stdcall NtAllocateUuids(ptr ptr ptr ptr)
+ @ stdcall NtAllocateVirtualMemory(ptr ptr long ptr long long)
+ @ extern NtBuildNumber
+ @ stdcall NtClose(ptr)
+ @ stdcall NtConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall NtCreateEvent(ptr long ptr long long)
+ @ stdcall NtCreateFile(ptr long ptr ptr ptr long long long long ptr long)
+ @ stdcall NtCreateSection(ptr long ptr ptr long long ptr)
+ @ stdcall NtCreateTimer(ptr long ptr long)
+ @ stdcall NtDeleteAtom(ptr)
+ @ stdcall NtDeleteFile(ptr)
+ @ stdcall NtDeviceIoControlFile(ptr ptr ptr ptr ptr long ptr long ptr long)
+ @ stdcall NtDuplicateObject(ptr ptr ptr ptr long long long)
+ @ stdcall NtDuplicateToken(ptr long ptr long long ptr)
+ @ stdcall NtFindAtom(wstr long ptr)
+ @ stdcall NtFreeVirtualMemory(ptr ptr ptr long)
+ @ stdcall NtFsControlFile(ptr ptr ptr ptr ptr long ptr long ptr long)
+ @ extern NtGlobalFlag
+ @ stdcall NtLockFile(ptr ptr ptr ptr ptr ptr ptr long long long)
+ @ stdcall NtMakePermanentObject(ptr)
+ @ stdcall NtMapViewOfSection(ptr ptr ptr long long ptr ptr long long long)
+ @ stdcall NtNotifyChangeDirectoryFile(ptr ptr ptr ptr ptr ptr long long long)
+ @ stdcall NtOpenEvent(ptr long ptr)
+ @ stdcall NtOpenFile(ptr long ptr ptr long long)
+ @ stdcall NtOpenProcess(ptr long ptr ptr)
+ @ stdcall NtOpenProcessToken(ptr long ptr)
+ @ stdcall NtOpenProcessTokenEx(ptr long long ptr)
+ @ stdcall NtOpenThread(ptr long ptr ptr)
+ @ stdcall NtOpenThreadToken(ptr long long ptr)
+ @ stdcall NtOpenThreadTokenEx(ptr long long long ptr)
+ @ stdcall NtQueryDirectoryFile(ptr ptr ptr ptr ptr ptr long long long ptr long)
+ @ stdcall NtQueryEaFile(ptr ptr ptr long long ptr long ptr long)
+ @ stdcall NtQueryInformationAtom(ptr long ptr long ptr)
+ @ stdcall NtQueryInformationFile(ptr ptr ptr long long)
+ @ stdcall NtQueryInformationProcess(ptr ptr ptr long ptr)
+ @ stdcall NtQueryInformationThread(ptr long ptr long ptr)
+ @ stdcall NtQueryInformationToken(ptr long ptr long ptr)
+ @ stdcall NtQueryQuotaInformationFile(ptr ptr ptr long long ptr long ptr long)
+ @ stdcall NtQuerySecurityObject(ptr long ptr long ptr)
+ @ stdcall NtQuerySystemInformation(long ptr long ptr)
+ @ stdcall NtQueryVolumeInformationFile(ptr ptr ptr long long)
+ @ stdcall NtReadFile(ptr ptr ptr ptr ptr ptr long ptr ptr)
+ @ stdcall NtRequestPort(ptr ptr)
+ @ stdcall NtRequestWaitReplyPort(ptr ptr ptr)
+ @ stdcall NtSetEaFile(ptr ptr ptr long)
+ @ stdcall NtSetEvent(ptr ptr)
+ @ stdcall NtSetInformationFile(ptr ptr ptr long long)
+ @ stdcall NtSetInformationProcess(ptr ptr ptr long)
+ @ stdcall NtSetInformationThread(ptr long ptr long)
+ @ stdcall NtSetQuotaInformationFile(ptr ptr ptr long)
+ @ stdcall NtSetSecurityObject(ptr long ptr)
+ @ stdcall NtSetVolumeInformationFile(ptr ptr ptr long long)
+ @ stdcall NtShutdownSystem(long)
+ @ stdcall NtTraceEvent(long long long ptr)
+ @ stdcall NtUnlockFile(ptr ptr ptr ptr long)
+ @ stdcall NtVdmControl(long ptr)
+ @ stdcall NtWaitForSingleObject(ptr long ptr)
+ @ stdcall NtWriteFile(ptr ptr ptr ptr ptr ptr long ptr ptr)
+ @ stdcall ObAssignSecurity(ptr ptr ptr ptr)
+ @ stdcall ObCheckCreateObjectAccess(ptr long ptr ptr long long ptr)
+ @ stdcall ObCheckObjectAccess(ptr ptr long long ptr)
+ @ stdcall ObCloseHandle(ptr long)
+ @ stdcall ObCreateObject(long ptr ptr long ptr long long long ptr)
+ @ stdcall ObCreateObjectType(ptr ptr ptr ptr)
+ ;ObDeleteCapturedInsertInfo
+ @ stdcall ObDereferenceObject(ptr)
+ @ stdcall ObDereferenceObjectDeferDelete(ptr)
+ @ stdcall ObDereferenceSecurityDescriptor(ptr long)
+ @ stdcall ObFindHandleForObject(ptr ptr ptr ptr ptr)
+ @ stdcall ObGetObjectSecurity(ptr ptr ptr)
+ @ stdcall ObInsertObject(ptr ptr long long ptr ptr)
+ @ stdcall ObIsKernelHandle(ptr)
+ @ stdcall ObLogSecurityDescriptor(ptr ptr long)
+ @ stdcall ObMakeTemporaryObject(ptr)
+ @ stdcall ObOpenObjectByName(ptr ptr long ptr long ptr ptr)
+ @ stdcall ObOpenObjectByPointer(ptr long ptr long ptr long ptr)
+ @ stdcall ObQueryNameString(ptr ptr long ptr)
+ @ stdcall ObQueryObjectAuditingByHandle(ptr ptr)
+ @ stdcall ObReferenceObjectByHandle(ptr long ptr long ptr ptr)
+ @ stdcall ObReferenceObjectByName(ptr long ptr long ptr long ptr ptr)
+ @ stdcall ObReferenceObjectByPointer(ptr long ptr long)
+ @ stdcall ObReferenceSecurityDescriptor(ptr long)
+ @ stdcall ObReleaseObjectSecurity(ptr long)
+ ;ObSetHandleAttributes@12
+ @ stdcall ObSetSecurityDescriptorInfo(ptr ptr ptr ptr long ptr)
+ @ stdcall ObSetSecurityObjectByPointer(ptr long ptr)
+ @ fastcall ObfDereferenceObject(ptr)
+ @ fastcall ObfReferenceObject(ptr)
+ ;PfxFindPrefix
+ ;PfxInitialize
+ ;PfxInsertPrefix
+ ;PfxRemovePrefix
+ @ stdcall PoCallDriver(ptr ptr)
+ ;PoCancelDeviceNotify
+ @ stdcall PoQueueShutdownWorkItem(ptr)
+ @ stdcall PoRegisterDeviceForIdleDetection(ptr long long long)
+ ;PoRegisterDeviceNotify
+ @ stdcall PoRegisterSystemState(ptr long)
+ @ stdcall PoRequestPowerIrp(ptr long long ptr ptr ptr)
+ ;PoRequestShutdownEvent
+ ;PoSetHiberRange
+ @ stdcall PoSetPowerState(ptr long long)
+ @ stdcall PoSetSystemState(long)
+ ;PoShutdownBugCheck
+ @ stdcall PoStartNextPowerIrp(ptr)
+ @ stdcall PoUnregisterSystemState(ptr)
+ @ stdcall ProbeForRead(ptr long long)
+ @ stdcall ProbeForWrite(ptr long long)
+ @ stdcall PsAssignImpersonationToken(ptr ptr)
+ @ stdcall PsChargePoolQuota(ptr long long)
+ @ stdcall PsChargeProcessNonPagedPoolQuota(ptr long)
+ @ stdcall PsChargeProcessPagedPoolQuota(ptr long)
+ @ stdcall PsChargeProcessPoolQuota(ptr long long)
+ @ stdcall PsCreateSystemProcess(ptr long ptr)
+ @ stdcall PsCreateSystemThread(ptr long ptr ptr ptr ptr ptr)
+ @ stdcall PsDereferenceImpersonationToken(ptr) PsDereferencePrimaryToken
+ @ stdcall PsDereferencePrimaryToken(ptr)
+ @ stdcall PsDisableImpersonation(ptr ptr)
+ @ stdcall PsEstablishWin32Callouts(ptr)
+ @ stdcall PsGetContextThread(ptr ptr long)
+ @ stdcall PsGetCurrentProcess() IoGetCurrentProcess
+ @ stdcall PsGetCurrentProcessId()
+ @ stdcall PsGetCurrentProcessSessionId()
+ @ stdcall PsGetCurrentProcessWin32Process()
+ @ stdcall PsGetCurrentThread() KeGetCurrentThread
+ @ stdcall PsGetCurrentThreadId()
+ @ stdcall PsGetCurrentThreadPreviousMode()
+ ;PsGetCurrentThreadProcess
+ ;PsGetCurrentThreadProcessId
+ @ stdcall PsGetCurrentThreadStackBase()
+ @ stdcall PsGetCurrentThreadStackLimit()
+ ;PsGetCurrentThreadTeb
+ @ stdcall PsGetCurrentThreadWin32Thread()
+ ;PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion
+ @ stdcall PsGetJobLock(ptr)
+ @ stdcall PsGetJobSessionId(ptr)
+ @ stdcall PsGetJobUIRestrictionsClass(ptr)
+ @ stdcall PsGetProcessCreateTimeQuadPart(ptr)
+ @ stdcall PsGetProcessDebugPort(ptr)
+ @ stdcall PsGetProcessExitProcessCalled(ptr)
+ @ stdcall PsGetProcessExitStatus(ptr)
+ @ stdcall PsGetProcessExitTime()
+ @ stdcall PsGetProcessId(ptr)
+ @ stdcall PsGetProcessImageFileName(ptr)
+ @ stdcall PsGetProcessInheritedFromUniqueProcessId(ptr)
+ @ stdcall PsGetProcessJob(ptr)
+ @ stdcall PsGetProcessPeb(ptr)
+ @ stdcall PsGetProcessPriorityClass(ptr)
+ @ stdcall PsGetProcessSectionBaseAddress(ptr)
+ @ stdcall PsGetProcessSecurityPort(ptr)
+ @ stdcall PsGetProcessSessionId(ptr)
+ ;PsGetProcessSessionIdEx
+ @ stdcall PsGetProcessWin32Process(ptr)
+ @ stdcall PsGetProcessWin32WindowStation(ptr)
+ @ stdcall PsGetThreadFreezeCount(ptr)
+ @ stdcall PsGetThreadHardErrorsAreDisabled(ptr)
+ @ stdcall PsGetThreadId(ptr)
+ @ stdcall PsGetThreadProcess(ptr)
+ @ stdcall PsGetThreadProcessId(ptr)
+ @ stdcall PsGetThreadSessionId(ptr)
+ @ stdcall PsGetThreadTeb(ptr)
+ @ stdcall PsGetThreadWin32Thread(ptr)
+ @ stdcall PsGetVersion(ptr ptr ptr ptr)
+ @ stdcall PsImpersonateClient(ptr ptr long long long)
+ @ extern PsInitialSystemProcess
+ @ stdcall PsIsProcessBeingDebugged(ptr)
+ @ stdcall PsIsSystemProcess(ptr)
+ @ stdcall PsIsSystemThread(ptr)
+ @ stdcall PsIsThreadImpersonating(ptr)
+ @ stdcall PsIsThreadTerminating(ptr)
+ @ extern PsJobType
+ @ stdcall PsLookupProcessByProcessId(ptr ptr)
+ @ stdcall PsLookupProcessThreadByCid(ptr ptr ptr)
+ @ stdcall PsLookupThreadByThreadId(ptr ptr)
+ @ extern PsProcessType _PsProcessType
+ @ stdcall PsReferenceImpersonationToken(ptr ptr ptr ptr)
+ @ stdcall PsReferencePrimaryToken(ptr)
+ @ stdcall PsRemoveCreateThreadNotifyRoutine(ptr)
+ @ stdcall PsRemoveLoadImageNotifyRoutine(ptr)
+ @ stdcall PsRestoreImpersonation(ptr ptr)
+ @ stdcall PsReturnPoolQuota(ptr long long)
+ @ stdcall PsReturnProcessNonPagedPoolQuota(ptr long)
+ @ stdcall PsReturnProcessPagedPoolQuota(ptr long)
+ @ stdcall PsRevertThreadToSelf(ptr)
+ @ stdcall PsRevertToSelf()
+ @ stdcall PsSetContextThread(ptr ptr long)
+ @ stdcall PsSetCreateProcessNotifyRoutine(ptr long)
+ @ stdcall PsSetCreateThreadNotifyRoutine(ptr)
+ @ stdcall PsSetJobUIRestrictionsClass(ptr long)
+ @ stdcall PsSetLegoNotifyRoutine(ptr)
+ @ stdcall PsSetLoadImageNotifyRoutine(ptr)
+ @ stdcall PsSetProcessPriorityByClass(ptr ptr)
+ @ stdcall PsSetProcessPriorityClass(ptr long)
+ @ stdcall PsSetProcessSecurityPort(ptr ptr)
+ @ stdcall PsSetProcessWin32Process(ptr ptr)
+ @ stdcall PsSetProcessWindowStation(ptr ptr)
+ @ stdcall PsSetThreadHardErrorsAreDisabled(ptr long)
+ @ stdcall PsSetThreadWin32Thread(ptr ptr)
+ @ stdcall PsTerminateSystemThread(long)
+ @ extern PsThreadType _PsThreadType
+ ;PsWrapApcWow64Thread
++#ifndef __x86_64__
+ @ stdcall READ_REGISTER_BUFFER_UCHAR(ptr ptr long)
+ @ stdcall READ_REGISTER_BUFFER_ULONG(ptr ptr long)
+ @ stdcall READ_REGISTER_BUFFER_USHORT(ptr ptr long)
+ @ stdcall READ_REGISTER_UCHAR(ptr)
+ @ stdcall READ_REGISTER_ULONG(ptr)
+ @ stdcall READ_REGISTER_USHORT(ptr)
++#endif
+ @ stdcall KeRosDumpStackFrames(ptr long)
+ @ stdcall RtlAbsoluteToSelfRelativeSD(ptr ptr ptr)
+ @ stdcall RtlAddAccessAllowedAce(ptr long long ptr)
+ @ stdcall RtlAddAccessAllowedAceEx(ptr long long long ptr)
+ @ stdcall RtlAddAce(ptr long long ptr long)
+ @ stdcall RtlAddAtomToAtomTable(ptr wstr ptr)
+ @ stdcall RtlAddRange(ptr long long long long long long ptr ptr)
+ @ stdcall RtlAllocateAndInitializeSid(ptr long long long long long long long long long ptr)
+ @ stdcall RtlAllocateHeap(ptr long long)
+ @ stdcall RtlAnsiCharToUnicodeChar(ptr)
+ @ stdcall RtlAnsiStringToUnicodeSize(ptr) RtlxAnsiStringToUnicodeSize
+ @ stdcall RtlAnsiStringToUnicodeString(ptr ptr long)
+ @ stdcall RtlAppendAsciizToString(ptr str)
+ @ stdcall RtlAppendStringToString(ptr ptr)
+ @ stdcall RtlAppendUnicodeStringToString(ptr ptr)
+ @ stdcall RtlAppendUnicodeToString(ptr wstr)
+ @ stdcall RtlAreAllAccessesGranted(long long)
+ @ stdcall RtlAreAnyAccessesGranted(long long)
+ @ stdcall RtlAreBitsClear(ptr long long)
+ @ stdcall RtlAreBitsSet(ptr long long)
+ @ stdcall RtlAssert(str str long str)
+ @ stdcall RtlCaptureContext(ptr)
+ @ stdcall RtlCaptureStackBackTrace(long long ptr ptr)
+ @ stdcall RtlCharToInteger(str long ptr)
+ @ stdcall RtlCheckRegistryKey(long wstr)
+ @ stdcall RtlClearAllBits(ptr)
+ @ stdcall RtlClearBit(ptr long)
+ @ stdcall RtlClearBits(ptr long long)
+ @ stdcall RtlCompareMemory(ptr ptr long)
+ @ stdcall RtlCompareMemoryUlong(ptr long long)
+ @ stdcall RtlCompareString(ptr ptr long)
+ @ stdcall RtlCompareUnicodeString(ptr ptr long)
+ @ stdcall RtlCompressBuffer(long ptr long ptr long long ptr ptr)
+ @ stdcall RtlCompressChunks(ptr long ptr long ptr long ptr)
+ @ stdcall RtlConvertLongToLargeInteger(long)
+ @ stdcall RtlConvertSidToUnicodeString(ptr ptr long)
+ @ stdcall RtlConvertUlongToLargeInteger(long)
+ @ stdcall RtlCopyLuid(ptr ptr)
+ @ stdcall RtlCopyRangeList(ptr ptr)
+ @ stdcall RtlCopySid(long ptr ptr)
+ @ stdcall RtlCopyString(ptr ptr)
+ @ stdcall RtlCopyUnicodeString(ptr ptr)
+ @ stdcall RtlCreateAcl(ptr long long)
+ @ stdcall RtlCreateAtomTable(long ptr)
+ @ stdcall RtlCreateHeap(long ptr long long ptr ptr)
+ @ stdcall RtlCreateRegistryKey(long wstr)
+ @ stdcall RtlCreateSecurityDescriptor(ptr long)
+ @ stdcall RtlCreateSystemVolumeInformationFolder(ptr)
+ @ stdcall RtlCreateUnicodeString(ptr wstr)
+ @ stdcall RtlCustomCPToUnicodeN(ptr wstr long ptr ptr long)
+ @ stdcall RtlDecompressBuffer(long ptr long ptr long ptr)
+ @ stdcall RtlDecompressChunks(ptr long ptr long ptr long ptr)
+ @ stdcall RtlDecompressFragment(long ptr long ptr long long ptr ptr)
+ @ stdcall RtlDelete(ptr)
+ @ stdcall RtlDeleteAce(ptr long)
+ @ stdcall RtlDeleteAtomFromAtomTable(ptr ptr)
+ @ stdcall RtlDeleteElementGenericTable(ptr ptr)
+ @ stdcall RtlDeleteElementGenericTableAvl(ptr ptr)
+ @ stdcall RtlDeleteNoSplay(ptr ptr)
+ @ stdcall RtlDeleteOwnersRanges(ptr ptr)
+ @ stdcall RtlDeleteRange(ptr long long long long ptr)
+ @ stdcall RtlDeleteRegistryValue(long wstr wstr)
+ @ stdcall RtlDescribeChunk(long ptr ptr ptr ptr)
+ @ stdcall RtlDestroyAtomTable(ptr)
+ @ stdcall RtlDestroyHeap(ptr)
+ @ stdcall RtlDowncaseUnicodeString(ptr ptr long)
+ @ stdcall RtlEmptyAtomTable(ptr long)
+ @ stdcall RtlEnlargedIntegerMultiply(long long)
+ @ stdcall RtlEnlargedUnsignedDivide(long long long ptr)
+ @ stdcall RtlEnlargedUnsignedMultiply(long long)
+ @ stdcall RtlEnumerateGenericTable(ptr long)
+ @ stdcall RtlEnumerateGenericTableAvl(ptr long)
+ @ stdcall RtlEnumerateGenericTableLikeADirectory(ptr ptr ptr long ptr ptr ptr)
+ @ stdcall RtlEnumerateGenericTableWithoutSplaying(ptr ptr)
+ @ stdcall RtlEnumerateGenericTableWithoutSplayingAvl(ptr ptr)
+ @ stdcall RtlEqualLuid(ptr ptr)
+ @ stdcall RtlEqualSid(ptr ptr)
+ @ stdcall RtlEqualString(ptr ptr long)
+ @ stdcall RtlEqualUnicodeString(ptr ptr long)
+ @ stdcall RtlExtendedIntegerMultiply(long long long)
+ @ stdcall RtlExtendedLargeIntegerDivide(long long long ptr)
+ @ stdcall RtlExtendedMagicDivide(long long long long long)
+ @ stdcall RtlFillMemory(ptr long long)
+ @ stdcall RtlFillMemoryUlong(ptr long long)
+ @ stdcall RtlFindClearBits(ptr long long)
+ @ stdcall RtlFindClearBitsAndSet(ptr long long)
+ @ stdcall RtlFindClearRuns(ptr ptr long long)
+ @ stdcall RtlFindFirstRunClear(ptr ptr)
+ @ stdcall RtlFindLastBackwardRunClear(ptr long ptr)
+ @ stdcall RtlFindLeastSignificantBit(long long)
+ @ stdcall RtlFindLongestRunClear(ptr ptr)
+ @ stdcall RtlFindMessage(ptr long long long ptr)
+ @ stdcall RtlFindMostSignificantBit(long long)
+ @ stdcall RtlFindNextForwardRunClear(ptr long ptr)
+ @ stdcall RtlFindRange(ptr long long long long long long long long ptr ptr ptr)
+ @ stdcall RtlFindSetBits(ptr long long)
+ @ stdcall RtlFindSetBitsAndClear(ptr long long)
+ @ stdcall RtlFindUnicodePrefix(ptr ptr long)
+ @ stdcall RtlFormatCurrentUserKeyPath(ptr)
+ @ stdcall RtlFreeAnsiString(ptr)
+ @ stdcall RtlFreeHeap(ptr long ptr)
+ @ stdcall RtlFreeOemString(ptr)
+ @ stdcall RtlFreeRangeList(ptr)
+ @ stdcall RtlFreeUnicodeString(ptr)
+ @ stdcall RtlGUIDFromString(ptr ptr)
+ @ stdcall RtlGenerate8dot3Name(ptr ptr long ptr)
+ @ stdcall RtlGetAce(ptr long ptr)
+ @ stdcall RtlGetCallersAddress(ptr ptr)
+ @ stdcall RtlGetCompressionWorkSpaceSize(long ptr ptr)
+ @ stdcall RtlGetDaclSecurityDescriptor(ptr ptr ptr ptr)
+ @ stdcall RtlGetDefaultCodePage(ptr ptr)
+ @ stdcall RtlGetElementGenericTable(ptr long)
+ @ stdcall RtlGetElementGenericTableAvl(ptr long)
+ @ stdcall RtlGetFirstRange(ptr ptr ptr)
+ @ stdcall RtlGetGroupSecurityDescriptor(ptr ptr ptr)
+ @ stdcall RtlGetNextRange(ptr ptr long)
+ @ stdcall RtlGetNtGlobalFlags()
+ @ stdcall RtlGetOwnerSecurityDescriptor(ptr ptr ptr)
+ @ stdcall RtlGetSaclSecurityDescriptor(ptr ptr ptr ptr)
+ @ stdcall RtlGetSetBootStatusData(ptr long long ptr long long)
+ @ stdcall RtlGetVersion(ptr)
+ @ stdcall RtlHashUnicodeString(ptr long long ptr)
+ @ stdcall RtlImageDirectoryEntryToData(ptr long long ptr)
+ @ stdcall RtlImageNtHeader(ptr)
+ @ stdcall RtlInitAnsiString(ptr str)
+ @ stdcall RtlInitAnsiStringEx(ptr str)
+ @ stdcall RtlInitCodePageTable(ptr ptr)
+ @ stdcall RtlInitString(ptr str)
+ @ stdcall RtlInitUnicodeString(ptr wstr)
+ @ stdcall RtlInitUnicodeStringEx(ptr wstr)
+ @ stdcall RtlInitializeBitMap(ptr ptr long)
+ @ stdcall RtlInitializeGenericTable(ptr ptr ptr ptr ptr)
+ @ stdcall RtlInitializeGenericTableAvl(ptr ptr ptr ptr ptr)
+ @ stdcall RtlInitializeRangeList(ptr)
+ @ stdcall RtlInitializeSid(ptr ptr long)
+ @ stdcall RtlInitializeUnicodePrefix(ptr)
+ @ stdcall RtlInsertElementGenericTable(ptr ptr long ptr)
+ @ stdcall RtlInsertElementGenericTableAvl(ptr ptr long ptr)
+ @ stdcall RtlInsertElementGenericTableFull(ptr ptr long ptr ptr long)
+ @ stdcall RtlInsertElementGenericTableFullAvl(ptr ptr long ptr ptr ptr)
+ @ stdcall RtlInsertUnicodePrefix(ptr ptr ptr)
+ @ stdcall RtlInt64ToUnicodeString(long long long ptr)
+ @ stdcall RtlIntegerToChar(long long long ptr)
+ @ stdcall RtlIntegerToUnicode(long long long ptr)
+ @ stdcall RtlIntegerToUnicodeString(long long ptr)
+ @ stdcall RtlInvertRangeList(ptr ptr)
+ @ stdcall RtlIpv4AddressToStringA(ptr ptr)
+ @ stdcall RtlIpv4AddressToStringExA(ptr long ptr ptr)
+ @ stdcall RtlIpv4AddressToStringExW(ptr long ptr ptr)
+ @ stdcall RtlIpv4AddressToStringW(ptr ptr)
+ @ stdcall RtlIpv4StringToAddressA(str long ptr ptr)
+ @ stdcall RtlIpv4StringToAddressExA(str long ptr ptr)
+ @ stdcall RtlIpv4StringToAddressExW(wstr long ptr ptr)
+ @ stdcall RtlIpv4StringToAddressW(wstr long ptr ptr)
+ @ stdcall RtlIpv6AddressToStringA(ptr ptr)
+ @ stdcall RtlIpv6AddressToStringExA(ptr long long ptr ptr)
+ @ stdcall RtlIpv6AddressToStringExW(ptr long long ptr ptr)
+ @ stdcall RtlIpv6AddressToStringW(ptr ptr)
+ @ stdcall RtlIpv6StringToAddressA(str ptr ptr)
+ @ stdcall RtlIpv6StringToAddressExA(str ptr ptr ptr)
+ @ stdcall RtlIpv6StringToAddressExW(wstr ptr ptr ptr)
+ @ stdcall RtlIpv6StringToAddressW(wstr ptr ptr)
+ @ stdcall RtlIsGenericTableEmpty(ptr)
+ @ stdcall RtlIsGenericTableEmptyAvl(ptr)
+ @ stdcall RtlIsNameLegalDOS8Dot3(ptr ptr ptr)
+ @ stdcall RtlIsRangeAvailable(ptr long long long long long long ptr ptr ptr)
+ @ stdcall RtlIsValidOemCharacter(ptr)
+ @ stdcall RtlLargeIntegerAdd(long long long long)
+ @ stdcall RtlLargeIntegerArithmeticShift(long long long)
+ @ stdcall RtlLargeIntegerDivide(long long long long ptr)
+ @ stdcall RtlLargeIntegerNegate(long long)
+ @ stdcall RtlLargeIntegerShiftLeft(long long long)
+ @ stdcall RtlLargeIntegerShiftRight(long long long)
+ @ stdcall RtlLargeIntegerSubtract(long long long long)
+ @ stdcall RtlLengthRequiredSid(long)
+ @ stdcall RtlLengthSecurityDescriptor(ptr)
+ @ stdcall RtlLengthSid(ptr)
+ @ stdcall RtlLockBootStatusData(ptr)
+ @ stdcall RtlLookupAtomInAtomTable(ptr wstr ptr)
+ @ stdcall RtlLookupElementGenericTable(ptr ptr)
+ @ stdcall RtlLookupElementGenericTableAvl(ptr ptr)
+ @ stdcall RtlLookupElementGenericTableFull(ptr ptr ptr ptr)
+ @ stdcall RtlLookupElementGenericTableFullAvl(ptr ptr ptr ptr)
+ @ stdcall RtlMapGenericMask(ptr ptr)
+ @ stdcall RtlMapSecurityErrorToNtStatus(long)
+ @ stdcall RtlMergeRangeLists(ptr ptr ptr long)
+ @ stdcall RtlMoveMemory(ptr ptr long)
+ @ stdcall RtlMultiByteToUnicodeN(ptr long ptr str long)
+ @ stdcall RtlMultiByteToUnicodeSize(ptr str long)
+ @ stdcall RtlNextUnicodePrefix(ptr long)
+ @ stdcall RtlNtStatusToDosError(long)
+ @ stdcall RtlNtStatusToDosErrorNoTeb(long)
+ @ stdcall RtlNumberGenericTableElements(ptr)
+ @ stdcall RtlNumberGenericTableElementsAvl(ptr)
+ @ stdcall RtlNumberOfClearBits(ptr)
+ @ stdcall RtlNumberOfSetBits(ptr)
+ @ stdcall RtlOemStringToCountedUnicodeString(ptr ptr long)
+ @ stdcall RtlOemStringToUnicodeSize(ptr) RtlxOemStringToUnicodeSize
+ @ stdcall RtlOemStringToUnicodeString(ptr ptr long)
+ @ stdcall RtlOemToUnicodeN(wstr long ptr ptr long)
+ @ stdcall RtlPinAtomInAtomTable(ptr ptr)
+ @ fastcall RtlPrefetchMemoryNonTemporal(ptr long)
+ @ stdcall RtlPrefixString(ptr ptr long)
+ @ stdcall RtlPrefixUnicodeString(ptr ptr long)
+ @ stdcall RtlQueryAtomInAtomTable(ptr ptr ptr ptr ptr ptr)
+ @ stdcall RtlQueryRegistryValues(long wstr ptr ptr ptr)
+ @ stdcall RtlQueryTimeZoneInformation(ptr)
+ @ stdcall RtlRaiseException(ptr)
+ @ stdcall RtlRandom(ptr)
+ @ stdcall RtlRandomEx(ptr)
+ @ stdcall RtlRealPredecessor(ptr)
+ @ stdcall RtlRealSuccessor(ptr)
+ @ stdcall RtlRemoveUnicodePrefix(ptr ptr)
+ @ stdcall RtlReserveChunk(long ptr ptr ptr long)
+ @ stdcall RtlSecondsSince1970ToTime(long ptr)
+ @ stdcall RtlSecondsSince1980ToTime(long ptr)
+ @ stdcall RtlSelfRelativeToAbsoluteSD(ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall RtlSelfRelativeToAbsoluteSD2(ptr long)
+ @ stdcall RtlSetAllBits(ptr)
+ @ stdcall RtlSetBit(ptr long)
+ @ stdcall RtlSetBits(ptr long long)
+ @ stdcall RtlSetDaclSecurityDescriptor(ptr long ptr long)
+ @ stdcall RtlSetGroupSecurityDescriptor(ptr ptr long)
+ @ stdcall RtlSetOwnerSecurityDescriptor(ptr ptr long)
+ @ stdcall RtlSetSaclSecurityDescriptor(ptr long ptr long)
+ @ stdcall RtlSetTimeZoneInformation(ptr)
+ @ stdcall RtlSizeHeap(ptr long ptr)
+ @ stdcall RtlSplay(ptr)
+ @ stdcall RtlStringFromGUID(ptr ptr)
+ @ stdcall RtlSubAuthorityCountSid(ptr)
+ @ stdcall RtlSubAuthoritySid(ptr long)
+ @ stdcall RtlSubtreePredecessor(ptr)
+ @ stdcall RtlSubtreeSuccessor(ptr)
+ @ stdcall RtlTestBit(ptr long)
+ @ stdcall RtlTimeFieldsToTime(ptr ptr)
+ @ stdcall RtlTimeToElapsedTimeFields(ptr ptr)
+ @ stdcall RtlTimeToSecondsSince1970(ptr ptr)
+ @ stdcall RtlTimeToSecondsSince1980(ptr ptr)
+ @ stdcall RtlTimeToTimeFields(ptr ptr)
+ ;RtlTraceDatabaseAdd
+ ;RtlTraceDatabaseCreate
+ ;RtlTraceDatabaseDestroy
+ ;RtlTraceDatabaseEnumerate
+ ;RtlTraceDatabaseFind
+ ;RtlTraceDatabaseLock
+ ;RtlTraceDatabaseUnlock
+ ;RtlTraceDatabaseValidate
++#ifndef __x86_64__
+ @ fastcall RtlUlongByteSwap(long)
+ @ fastcall RtlUlonglongByteSwap(long long)
++#endif
+ @ stdcall RtlUnicodeStringToAnsiSize(ptr) RtlxUnicodeStringToAnsiSize
+ @ stdcall RtlUnicodeStringToAnsiString(ptr ptr long)
+ @ stdcall RtlUnicodeStringToCountedOemString(ptr ptr long)
+ @ stdcall RtlUnicodeStringToInteger(ptr long ptr)
+ @ stdcall RtlUnicodeStringToOemSize(ptr) RtlxUnicodeStringToOemSize
+ @ stdcall RtlUnicodeStringToOemString(ptr ptr long)
+ @ stdcall RtlUnicodeToCustomCPN(ptr ptr long ptr wstr long)
+ @ stdcall RtlUnicodeToMultiByteN(ptr long ptr wstr long)
+ @ stdcall RtlUnicodeToMultiByteSize(ptr wstr long)
+ @ stdcall RtlUnicodeToOemN(ptr long ptr wstr long)
+ @ stdcall RtlUnlockBootStatusData(ptr)
+ @ stdcall RtlUnwind(ptr ptr ptr ptr)
+ @ stdcall RtlUpcaseUnicodeChar(long)
+ @ stdcall RtlUpcaseUnicodeString(ptr ptr long)
+ @ stdcall RtlUpcaseUnicodeStringToAnsiString(ptr ptr long)
+ @ stdcall RtlUpcaseUnicodeStringToCountedOemString(ptr ptr long)
+ @ stdcall RtlUpcaseUnicodeStringToOemString(ptr ptr long)
+ @ stdcall RtlUpcaseUnicodeToCustomCPN(ptr ptr long ptr wstr long)
+ @ stdcall RtlUpcaseUnicodeToMultiByteN(ptr long ptr wstr long)
+ @ stdcall RtlUpcaseUnicodeToOemN(ptr long ptr wstr long)
+ @ stdcall RtlUpperChar(long)
+ @ stdcall RtlUpperString(ptr ptr)
++#ifndef __x86_64__
+ @ fastcall RtlUshortByteSwap(long)
++#endif
+ @ stdcall RtlValidRelativeSecurityDescriptor(ptr long long)
+ @ stdcall RtlValidSecurityDescriptor(ptr)
+ @ stdcall RtlValidSid(ptr)
+ @ stdcall RtlVerifyVersionInfo(ptr long long long)
+ @ stdcall RtlVolumeDeviceToDosName(ptr ptr)
+ @ stdcall RtlWalkFrameChain(ptr long long)
+ @ stdcall RtlWriteRegistryValue(long wstr wstr long ptr long)
+ @ stdcall RtlZeroHeap(ptr long)
+ @ stdcall RtlZeroMemory(ptr long)
+ @ stdcall RtlxAnsiStringToUnicodeSize(ptr)
+ @ stdcall RtlxOemStringToUnicodeSize(ptr)
+ @ stdcall RtlxUnicodeStringToAnsiSize(ptr)
+ @ stdcall RtlxUnicodeStringToOemSize(ptr)
+ @ stdcall SeAccessCheck(ptr ptr ptr long long ptr ptr long ptr ptr)
+ @ stdcall SeAppendPrivileges(ptr ptr)
+ @ stdcall SeAssignSecurity(ptr ptr ptr long ptr ptr ptr)
+ @ stdcall SeAssignSecurityEx(ptr ptr ptr ptr long long ptr ptr ptr)
+ @ stdcall SeAuditHardLinkCreation(ptr ptr long)
+ @ stdcall SeAuditingFileEvents(long ptr)
+ @ stdcall SeAuditingFileEventsWithContext(long ptr ptr)
+ @ stdcall SeAuditingFileOrGlobalEvents(long ptr ptr)
+ @ stdcall SeAuditingHardLinkEvents(long ptr)
+ @ stdcall SeAuditingHardLinkEventsWithContext(long ptr ptr)
+ @ stdcall SeCaptureSecurityDescriptor(ptr long long long ptr)
+ @ stdcall SeCaptureSubjectContext(ptr)
+ @ stdcall SeCloseObjectAuditAlarm(ptr ptr long)
+ @ stdcall SeCreateAccessState(ptr ptr long ptr)
+ @ stdcall SeCreateClientSecurity(ptr ptr long ptr)
+ @ stdcall SeCreateClientSecurityFromSubjectContext(ptr ptr long ptr)
+ @ stdcall SeDeassignSecurity(ptr)
+ @ stdcall SeDeleteAccessState(ptr)
+ @ stdcall SeDeleteObjectAuditAlarm(ptr ptr)
+ @ extern SeExports
+ @ stdcall SeFilterToken(ptr long ptr ptr ptr ptr)
+ @ stdcall SeFreePrivileges(ptr)
+ @ stdcall SeImpersonateClient(ptr ptr)
+ @ stdcall SeImpersonateClientEx(ptr ptr)
+ @ stdcall SeLockSubjectContext(ptr)
+ @ stdcall SeMarkLogonSessionForTerminationNotification(ptr)
+ @ stdcall SeOpenObjectAuditAlarm(ptr ptr ptr ptr ptr long long long ptr)
+ @ stdcall SeOpenObjectForDeleteAuditAlarm(ptr ptr ptr ptr ptr long long long ptr)
+ @ stdcall SePrivilegeCheck(ptr ptr long)
+ @ stdcall SePrivilegeObjectAuditAlarm(ptr ptr long ptr long long)
+ @ extern SePublicDefaultDacl
+ @ stdcall SeQueryAuthenticationIdToken(ptr ptr)
+ @ stdcall SeQueryInformationToken(ptr long ptr)
+ @ stdcall SeQuerySecurityDescriptorInfo(ptr ptr ptr ptr)
+ @ stdcall SeQuerySessionIdToken(ptr ptr)
+ @ stdcall SeRegisterLogonSessionTerminatedRoutine(ptr)
+ @ stdcall SeReleaseSecurityDescriptor(ptr long long)
+ @ stdcall SeReleaseSubjectContext(ptr)
+ @ stdcall SeSetAccessStateGenericMapping(ptr ptr)
+ ;SeSetAuditParameter
+ @ stdcall SeSetSecurityDescriptorInfo(ptr ptr ptr ptr long ptr)
+ @ stdcall SeSetSecurityDescriptorInfoEx(ptr ptr ptr ptr long long ptr)
+ @ stdcall SeSinglePrivilegeCheck(long long long)
+ @ extern SeSystemDefaultDacl
+ @ stdcall SeTokenImpersonationLevel(ptr)
+ @ stdcall SeTokenIsAdmin(ptr)
+ @ stdcall SeTokenIsRestricted(ptr)
+ @ stdcall SeTokenIsWriteRestricted(ptr)
+ @ stdcall SeTokenType(ptr)
+ @ stdcall SeUnlockSubjectContext(ptr)
+ @ stdcall SeUnregisterLogonSessionTerminatedRoutine(ptr)
+ @ stdcall SeValidSecurityDescriptor(long ptr)
+ @ stdcall VerSetConditionMask(long long long long)
+ ;VfFailDeviceNode
+ ;VfFailDriver
+ ;VfFailSystemBIOS
+ ;VfIsVerificationEnabled
++#ifndef __x86_64__
+ @ stdcall WRITE_REGISTER_BUFFER_UCHAR(ptr ptr long)
+ @ stdcall WRITE_REGISTER_BUFFER_ULONG(ptr ptr long)
+ @ stdcall WRITE_REGISTER_BUFFER_USHORT(ptr ptr long)
+ @ stdcall WRITE_REGISTER_UCHAR(ptr long)
+ @ stdcall WRITE_REGISTER_ULONG(ptr long)
+ @ stdcall WRITE_REGISTER_USHORT(ptr long)
++#endif
+ ;WmiFlushTrace
+ ;WmiGetClock
+ ;WmiQueryTrace
+ @ stdcall WmiQueryTraceInformation(long ptr long ptr ptr)
+ ;WmiStartTrace
+ ;WmiStopTrace
+ ;WmiTraceFastEvent
+ @ cdecl WmiTraceMessage()
+ @ stdcall WmiTraceMessageVa(ptr long ptr long long)
+ ;WmiUpdateTrace
+ ;XIPDispatch
+ @ stdcall ZwAccessCheckAndAuditAlarm(ptr ptr ptr ptr ptr long ptr long ptr ptr ptr)
+ @ stdcall ZwAddBootEntry(ptr long)
+ @ stdcall ZwAddDriverEntry(ptr long)
+ @ stdcall ZwAdjustPrivilegesToken(ptr long ptr long ptr ptr)
+ @ stdcall ZwAlertThread(ptr)
+ @ stdcall ZwAllocateVirtualMemory(ptr ptr long ptr long long)
+ @ stdcall ZwAssignProcessToJobObject(ptr ptr)
+ @ stdcall ZwCancelIoFile(ptr ptr)
+ @ stdcall ZwCancelTimer(ptr ptr)
+ @ stdcall ZwClearEvent(ptr)
+ @ stdcall ZwClose(ptr)
+ @ stdcall ZwCloseObjectAuditAlarm(ptr ptr long)
+ @ stdcall ZwConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall ZwCreateDirectoryObject(ptr long ptr)
+ @ stdcall ZwCreateEvent(ptr long ptr long long)
+ @ stdcall ZwCreateFile(ptr long ptr ptr ptr long long long long ptr long)
+ @ stdcall ZwCreateJobObject(ptr long ptr)
+ @ stdcall ZwCreateKey(ptr long ptr long ptr long ptr)
+ @ stdcall ZwCreateSection(ptr long ptr ptr long long ptr)
+ @ stdcall ZwCreateSymbolicLinkObject(ptr long ptr ptr)
+ @ stdcall ZwCreateTimer(ptr long ptr long)
+ @ stdcall ZwDeleteBootEntry(long)
+ @ stdcall ZwDeleteDriverEntry(long)
+ @ stdcall ZwDeleteFile(ptr)
+ @ stdcall ZwDeleteKey(ptr)
+ @ stdcall ZwDeleteValueKey(ptr ptr)
+ @ stdcall ZwDeviceIoControlFile(ptr ptr ptr ptr ptr long ptr long ptr long)
+ @ stdcall ZwDisplayString(ptr)
+ @ stdcall ZwDuplicateObject(ptr ptr ptr ptr long long long)
+ @ stdcall ZwDuplicateToken(ptr long ptr long long ptr)
+ @ stdcall ZwEnumerateBootEntries(ptr ptr)
+ @ stdcall ZwEnumerateDriverEntries(ptr ptr)
+ @ stdcall ZwEnumerateKey(ptr long long ptr long ptr)
+ @ stdcall ZwEnumerateValueKey(ptr long long ptr long ptr)
+ @ stdcall ZwFlushInstructionCache(ptr ptr long)
+ @ stdcall ZwFlushKey(ptr)
+ @ stdcall ZwFlushVirtualMemory(ptr ptr ptr ptr)
+ @ stdcall ZwFreeVirtualMemory(ptr ptr ptr long)
+ @ stdcall ZwFsControlFile(ptr ptr ptr ptr ptr long ptr long ptr long)
+ @ stdcall ZwInitiatePowerAction(long long long long)
+ @ stdcall ZwIsProcessInJob(ptr ptr)
+ @ stdcall ZwLoadDriver(ptr)
+ @ stdcall ZwLoadKey(ptr ptr)
+ @ stdcall ZwMakeTemporaryObject(ptr)
+ @ stdcall ZwMapViewOfSection(ptr ptr ptr long long ptr ptr long long long)
+ @ stdcall ZwModifyBootEntry(ptr)
+ @ stdcall ZwModifyDriverEntry(ptr)
+ @ stdcall ZwNotifyChangeKey(ptr ptr ptr ptr ptr long long ptr long long)
+ @ stdcall ZwOpenDirectoryObject(ptr long ptr)
+ @ stdcall ZwOpenEvent(ptr long ptr)
+ @ stdcall ZwOpenFile(ptr long ptr ptr long long)
+ @ stdcall ZwOpenJobObject(ptr long ptr)
+ @ stdcall ZwOpenKey(ptr long ptr)
+ @ stdcall ZwOpenProcess(ptr long ptr ptr)
+ @ stdcall ZwOpenProcessToken(ptr long ptr)
+ @ stdcall ZwOpenProcessTokenEx(ptr long long ptr)
+ @ stdcall ZwOpenSection(ptr long ptr)
+ @ stdcall ZwOpenSymbolicLinkObject(ptr long ptr)
+ @ stdcall ZwOpenThread(ptr long ptr ptr)
+ @ stdcall ZwOpenThreadToken(ptr long long ptr)
+ @ stdcall ZwOpenThreadTokenEx(ptr long long long ptr)
+ @ stdcall ZwOpenTimer(ptr long ptr)
+ @ stdcall ZwPowerInformation(long ptr long ptr long)
+ @ stdcall ZwPulseEvent(ptr ptr)
+ @ stdcall ZwQueryBootEntryOrder(ptr ptr)
+ @ stdcall ZwQueryBootOptions(ptr ptr)
+ @ stdcall ZwQueryDefaultLocale(long ptr)
+ @ stdcall ZwQueryDefaultUILanguage(ptr)
+ @ stdcall ZwQueryDirectoryFile(ptr ptr ptr ptr ptr ptr long long long ptr long)
+ @ stdcall ZwQueryDirectoryObject(ptr ptr long long long ptr ptr)
+ @ stdcall ZwQueryDriverEntryOrder(ptr ptr)
+ @ stdcall ZwQueryEaFile(ptr ptr ptr long long ptr long ptr long)
+ @ stdcall ZwQueryFullAttributesFile(ptr ptr)
+ @ stdcall ZwQueryInformationAtom(ptr long ptr long ptr)
+ @ stdcall ZwQueryInformationFile(ptr ptr ptr long long)
+ @ stdcall ZwQueryInformationJobObject(ptr long ptr long ptr)
+ @ stdcall ZwQueryInformationProcess(ptr long ptr long ptr)
+ @ stdcall ZwQueryInformationThread(ptr long ptr long ptr)
+ @ stdcall ZwQueryInformationToken(ptr long long long ptr)
+ @ stdcall ZwQueryInstallUILanguage(ptr)
+ @ stdcall ZwQueryKey(ptr long ptr long ptr)
+ @ stdcall ZwQueryObject(ptr long ptr long ptr)
+ @ stdcall ZwQuerySection(ptr long ptr long ptr)
+ @ stdcall ZwQuerySecurityObject(ptr long ptr long ptr)
+ @ stdcall ZwQuerySymbolicLinkObject(ptr ptr ptr)
+ @ stdcall ZwQuerySystemInformation(long ptr long ptr)
+ @ stdcall ZwQueryValueKey(ptr ptr long ptr long ptr)
+ @ stdcall ZwQueryVolumeInformationFile(ptr ptr ptr long long)
+ @ stdcall ZwReadFile(ptr ptr ptr ptr ptr ptr long ptr ptr)
+ @ stdcall ZwReplaceKey(ptr ptr ptr)
+ @ stdcall ZwRequestWaitReplyPort(ptr ptr ptr)
+ @ stdcall ZwResetEvent(ptr ptr)
+ @ stdcall ZwRestoreKey(ptr ptr long)
+ @ stdcall ZwSaveKey(ptr ptr)
+ @ stdcall ZwSaveKeyEx(ptr ptr long)
+ @ stdcall ZwSecureConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall ZwSetBootEntryOrder(ptr ptr)
+ @ stdcall ZwSetBootOptions(ptr long)
+ @ stdcall ZwSetDefaultLocale(long long)
+ @ stdcall ZwSetDefaultUILanguage(long)
+ @ stdcall ZwSetDriverEntryOrder(ptr ptr)
+ @ stdcall ZwSetEaFile(ptr ptr ptr long)
+ @ stdcall ZwSetEvent(ptr ptr)
+ @ stdcall ZwSetInformationFile(ptr ptr ptr long long)
+ @ stdcall ZwSetInformationJobObject(ptr long ptr long)
+ @ stdcall ZwSetInformationObject(ptr long ptr long)
+ @ stdcall ZwSetInformationProcess(ptr long ptr long)
+ @ stdcall ZwSetInformationThread(ptr long ptr long)
+ @ stdcall ZwSetSecurityObject(ptr long ptr)
+ @ stdcall ZwSetSystemInformation(long ptr long)
+ @ stdcall ZwSetSystemTime(ptr ptr)
+ @ stdcall ZwSetTimer(ptr ptr ptr ptr long long ptr)
+ @ stdcall ZwSetValueKey(ptr ptr long long ptr long)
+ @ stdcall ZwSetVolumeInformationFile(ptr ptr ptr long long)
+ @ stdcall ZwTerminateJobObject(ptr long)
+ @ stdcall ZwTerminateProcess(ptr long)
+ @ stdcall ZwTranslateFilePath(ptr long ptr long)
+ @ stdcall ZwUnloadDriver(ptr)
+ @ stdcall ZwUnloadKey(ptr)
+ @ stdcall ZwUnmapViewOfSection(ptr ptr)
+ @ stdcall ZwWaitForMultipleObjects(long ptr long long ptr)
+ @ stdcall ZwWaitForSingleObject(ptr long ptr)
+ @ stdcall ZwWriteFile(ptr ptr ptr ptr ptr ptr long ptr ptr)
+ @ stdcall ZwYieldExecution()
+ ;_CIcos
+ ;_CIsin
+ ;_CIsqrt
++#ifndef __x86_64
+ @ cdecl _abnormal_termination()
++#endif
+ #ifdef _M_IX86
+ @ cdecl _alldiv()
+ @ cdecl _alldvrm()
+ @ cdecl _allmul()
+ @ cdecl _alloca_probe()
+ @ cdecl _allrem()
+ @ cdecl _allshl()
+ @ cdecl _allshr()
+ @ cdecl _aulldiv()
+ @ cdecl _aulldvrm()
+ @ cdecl _aullrem()
+ @ cdecl _aullshr()
+ #endif
++#ifndef __x86_64
+ @ cdecl _except_handler2()
+ @ cdecl _except_handler3()
+ @ cdecl _global_unwind2()
++#endif
+ @ cdecl _itoa()
+ @ cdecl _itow()
++#ifndef __x86_64
+ @ cdecl _local_unwind2()
++#endif
+ @ cdecl _purecall()
+ @ cdecl _snprintf()
+ @ cdecl _snwprintf()
+ @ cdecl _stricmp()
+ @ cdecl _strlwr()
+ @ cdecl _strnicmp()
+ @ cdecl _strnset()
+ @ cdecl _strrev()
+ @ cdecl _strset()
+ @ cdecl _strupr()
+ @ cdecl _vsnprintf()
+ @ cdecl _vsnwprintf()
+ @ cdecl _wcsicmp()
+ @ cdecl _wcslwr()
+ @ cdecl _wcsnicmp()
+ @ cdecl _wcsnset()
+ @ cdecl _wcsrev()
+ @ cdecl _wcsupr()
+ @ cdecl atoi()
+ @ cdecl atol()
+ @ cdecl isdigit()
+ @ cdecl islower()
+ @ cdecl isprint()
+ @ cdecl isspace()
+ @ cdecl isupper()
+ @ cdecl isxdigit()
+ @ cdecl mbstowcs()
+ @ cdecl mbtowc()
+ @ cdecl memchr()
+ @ cdecl memcpy()
+ @ cdecl memmove()
+ @ cdecl memset()
+ @ cdecl qsort()
+ @ cdecl rand()
+ @ cdecl sprintf()
+ @ cdecl srand()
+ @ cdecl strcat()
+ @ cdecl strchr()
+ @ cdecl strcmp()
+ @ cdecl strcpy()
+ @ cdecl strlen()
+ @ cdecl strncat()
+ @ cdecl strncmp()
+ @ cdecl strncpy()
+ @ cdecl strrchr()
+ @ cdecl strspn()
+ @ cdecl strstr()
+ @ cdecl swprintf()
+ @ cdecl tolower()
+ @ cdecl toupper()
+ @ cdecl towlower()
+ @ cdecl towupper()
+ @ stdcall vDbgPrintEx(long long str ptr)
+ @ stdcall vDbgPrintExWithPrefix(str long long str ptr)
+ @ cdecl vsprintf()
+ @ cdecl wcscat()
+ @ cdecl wcschr()
+ @ cdecl wcscmp()
+ @ cdecl wcscpy()
+ @ cdecl wcscspn()
+ @ cdecl wcslen()
+ @ cdecl wcsncat()
+ @ cdecl wcsncmp()
+ @ cdecl wcsncpy()
+ @ cdecl wcsrchr()
+ @ cdecl wcsspn()
+ @ cdecl wcsstr()
+ @ cdecl wcstombs()
+ @ cdecl wctomb()