sync to trunk head (37079)

svn path=/branches/ros-amd64-bringup/; revision=37088

diff --cc reactos/hal/hal/hal.rbuild
index de3da99,71c4308..b78559a
--- 1/reactos/hal/hal/hal.rbuild
--- 2/reactos/hal/hal/hal.rbuild
+++ b/reactos/hal/hal/hal.rbuild
@@@ -9,20 -9,20 +9,20 @@@
                <define name="_NTHAL_" />
                <file>hal.c</file>
                <file>hal.rc</file>
-               <file>hal.spec</file>
+               <file>hal.pspec</file>
        </module>
 -    </if>
 -    <if property="ARCH" value="i386">
 +      </if>
 +      <if property="ARCH" value="i386">
        <module name="hal" type="kernelmodedll">
-               <importlibrary definition="hal.spec" />
+               <importlibrary definition="hal.pspec" />
                <include base="ntoskrnl">include</include>
                <library>ntoskrnl</library>
                <define name="_NTHAL_" />
                <file>hal.c</file>
                <file>hal.rc</file>
-               <file>hal.spec</file>
+               <file>hal.pspec</file>
        </module>
 -    </if>
 +      </if>
        <if property="ARCH" value="i386">
                <module ifnot="false" name="halupalias" type="alias" installbase="system32" installname="hal.dll" aliasof="halup">
                </module>

diff --cc reactos/lib/sdk/crt/string/ctype.c
Simple merge

diff --cc reactos/ntoskrnl/include/internal/ke_x.h
index b6a7738,e4afc35..c28b1a7
--- 1/reactos/ntoskrnl/include/internal/ke_x.h
--- 2/reactos/ntoskrnl/include/internal/ke_x.h
+++ b/reactos/ntoskrnl/include/internal/ke_x.h
@@@ -88,6 -88,46 +88,48 @@@ Ke386SanitizeDr(IN PVOID DrAddress
  }
  #endif /* _M_IX86 */
  
+ #ifndef _M_ARM
+ PRKTHREAD
+ FORCEINLINE
+ KeGetCurrentThread(VOID)
+ {
+ #ifdef _M_IX86
+     /* Return the current thread */
+     return ((PKIPCR)KeGetPcr())->PrcbData.CurrentThread;
++#elif defined (_M_AMD64)
++    return (PRKTHREAD)__readgsqword(FIELD_OFFSET(KIPCR, Prcb.CurrentThread));
+ #else
+     PKPRCB Prcb = KeGetCurrentPrcb();
+     return Prcb->CurrentThread;
+ #endif
+ }
+ 
+ UCHAR
+ FORCEINLINE
+ KeGetPreviousMode(VOID)
+ {
+     /* Return the current mode */
+     return KeGetCurrentThread()->PreviousMode;
+ }
+ #endif
+ 
+ VOID
+ FORCEINLINE
+ KeFlushProcessTb(VOID)
+ {
+     /* Flush the TLB by resetting CR3 */
+ #ifdef _M_PPC
+     __asm__("sync\n\tisync\n\t");
+ #elif _M_ARM
+     //
+     // We need to implement this!
+     //
+     ASSERTMSG("Need ARM flush routine\n", FALSE);
+ #else
+     __writecr3(__readcr3());
+ #endif
+ }
+ 
  //
  // Enters a Guarded Region
  //

diff --cc reactos/ntoskrnl/mm/section.c
Simple merge

diff --cc reactos/ntoskrnl/mm/virtual.c
Simple merge

diff --cc reactos/ntoskrnl/ntoskrnl-amd64hack.rbuild
index fe0109b,0000000..1e39788
mode 100644,000000..100644
--- 1/reactos/ntoskrnl/ntoskrnl-amd64hack.rbuild
--- /dev/null
+++ b/reactos/ntoskrnl/ntoskrnl-amd64hack.rbuild
@@@ -1,489 -1,0 +1,489 @@@
-       <importlibrary definition="ntoskrnl.spec" />
 +<?xml version="1.0"?>
 +<!DOCTYPE module SYSTEM "../tools/rbuild/project.dtd">
 +<module name="ntoskrnl" type="kernel" installbase="system32" installname="ntoskrnl.exe" baseaddress="0xfffff80000800000" entrypoint="KiSystemStartup" allowwarnings="true">
 +      <bootstrap installbase="$(CDOUTPUT)" />
-       <file>ntoskrnl.spec</file>
++      <importlibrary definition="ntoskrnl.pspec" />
 +      <define name="_DISABLE_TIDENTS" />
 +      <define name="__NTOSKRNL__" />
 +      <define name="_NTOSKRNL_" />
 +      <define name="_NTSYSTEM_" />
 +      <define name="__NO_CTYPE_INLINES" />
 +      <define name="WIN9X_COMPAT_SPINLOCK" />
 +      <define name="_IN_KERNEL_" />
 +      <if property="_WINKD_" value="1">
 +              <define name="_WINKD_" />
 +      </if>
 +      <if property="_ELF_" value="1">
 +              <define name="_ELF_" />
 +      </if>
 +      <include base="cmlib">.</include>
 +      <include base="ntoskrnl">include</include>
 +      <include base="ntoskrnl" root="intermediate"></include>
 +      <include base="ntoskrnl" root="intermediate">include</include>
 +      <include base="ntoskrnl" root="intermediate">include/internal</include>
 +      <include base="ReactOS">include/reactos/drivers</include>
 +      <library>csq</library>
 +      <library>hal</library>
 +      <library>pseh</library>
 +      <library>cmlib</library>
 +      <library>rtl</library>
 +      <library>rossym</library>
 +      <library>libcntpr</library>
 +      <library>kdcom</library>
 +      <library>bootvid</library>
 +      <library>wdmguid</library>
 +      <dependency>bugcodes</dependency>
 +      <directory name="include">
 +              <pch>ntoskrnl.h</pch>
 +      </directory>
 +      <file>amd64stubs.c</file>
 +      <directory name="ke">
 +              <if property="ARCH" value="i386">
 +                      <directory name="i386">
 +                              <file first="true">boot.S</file>
 +                              <file>abios.c</file>
 +                              <file>cpu.c</file>
 +                              <file>ctxswitch.S</file>
 +                              <file>exp.c</file>
 +                              <file>irqobj.c</file>
 +                              <file>kiinit.c</file>
 +                              <file>ldt.c</file>
 +                              <file>mtrr.c</file>
 +                              <file>patpge.c</file>
 +                              <file>systimer.S</file>
 +                              <file>thrdini.c</file>
 +                              <file>trap.s</file>
 +                              <file>usercall_asm.S</file>
 +                              <file>usercall.c</file>
 +                              <file>v86vdm.c</file>
 +                              <file>v86m_sup.S</file>
 +                      </directory>
 +              </if>
 +              <if property="ARCH" value="arm">
 +                      <directory name="arm">
 +                              <file first="true">boot.s</file>
 +                              <file>cpu.c</file>
 +                              <file>ctxswtch.s</file>
 +                              <file>exp.c</file>
 +                              <file>kiinit.c</file>
 +                              <file>stubs_asm.s</file>
 +                              <file>thrdini.c</file>
 +                              <file>time.c</file>
 +                              <file>trap.s</file>
 +                              <file>trapc.c</file>
 +                              <file>usercall.c</file>
 +                      </directory>
 +              </if>
 +              <if property="ARCH" value="powerpc">
 +                      <directory name="powerpc">
 +                              <file first="true">main_asm.S</file>
 +                              <file>cpu.c</file>
 +                              <file>exp.c</file>
 +                              <file>kiinit.c</file>
 +                              <file>ppc_irq.c</file>
 +                              <file>stubs.c</file>
 +                              <file>systimer.c</file>
 +                              <file>thrdini.c</file>
 +                              <file>ctxswitch.c</file>
 +                              <file>ctxhelp.S</file>
 +                      </directory>
 +              </if>
 +              <if property="ARCH" value="amd64">
 +                      <directory name="amd64">
 +                              <file first="true">boot.S</file>
 +                              <file>cpu.c</file>
 +                              <file>ctxswitch.S</file>
 +                              <file>except.c</file>
 +                              <file>irql.c</file>
 +                              <file>kiinit.c</file>
 +                              <file>spinlock.c</file>
 +                              <file>thrdini.c</file>
 +                              <file>trap.S</file>
 +                      </directory>
 +              </if>
 +              <file>apc.c</file>
 +              <file>balmgr.c</file>
 +              <file>bug.c</file>
 +              <file>clock.c</file>
 +              <file>config.c</file>
 +              <file>devqueue.c</file>
 +              <file>dpc.c</file>
 +              <file>eventobj.c</file>
 +              <file>except.c</file>
 +              <file>freeldr.c</file>
 +              <file>gate.c</file>
 +              <file>gmutex.c</file>
 +              <file>ipi.c</file>
 +              <file>krnlinit.c</file>
 +              <file>mutex.c</file>
 +              <file>procobj.c</file>
 +              <file>profobj.c</file>
 +              <file>queue.c</file>
 +              <file>semphobj.c</file>
 +              <file>spinlock.c</file>
 +              <file>thrdschd.c</file>
 +              <file>thrdobj.c</file>
 +              <file>timerobj.c</file>
 +              <file>wait.c</file>
 +      </directory>
 +      <directory name="cc">
 +              <file>cacheman.c</file>
 +              <file>copy.c</file>
 +              <file>fs.c</file>
 +              <file>mdl.c</file>
 +              <file>pin.c</file>
 +              <file>view.c</file>
 +      </directory>
 +      <directory name="config">
 +              <if property="ARCH" value="i386">
 +                      <directory name="i386">
 +                              <file>cmhardwr.c</file>
 +                      </directory>
 +              </if>
 +              <if property="ARCH" value="amd64">
 +                      <directory name="i386">
 +                              <file>cmhardwr.c</file>
 +                      </directory>
 +              </if>
 +              <if property="ARCH" value="arm">
 +                      <directory name="arm">
 +                              <file>cmhardwr.c</file>
 +                      </directory>
 +              </if>
 +              <if property="ARCH" value="powerpc">
 +                      <directory name="powerpc">
 +                              <file>cmhardwr.c</file>
 +                      </directory>
 +              </if>
 +              <file>cmalloc.c</file>
 +              <file>cmapi.c</file>
 +              <file>cmboot.c</file>
 +              <file>cmcheck.c</file>
 +              <file>cmcontrl.c</file>
 +              <file>cmconfig.c</file>
 +              <file>cmdata.c</file>
 +              <file>cmdelay.c</file>
 +              <file>cmindex.c</file>
 +              <file>cminit.c</file>
 +              <file>cmhook.c</file>
 +              <file>cmkcbncb.c</file>
 +              <file>cmkeydel.c</file>
 +              <file>cmlazy.c</file>
 +              <file>cmmapvw.c</file>
 +              <file>cmname.c</file>
 +              <file>cmparse.c</file>
 +              <file>cmse.c</file>
 +              <file>cmsecach.c</file>
 +              <file>cmsysini.c</file>
 +              <file>cmvalue.c</file>
 +              <file>cmvalche.c</file>
 +              <file>cmwraprs.c</file>
 +              <file>ntapi.c</file>
 +      </directory>
 +      <directory name="dbgk">
 +              <file>dbgkutil.c</file>
 +              <file>dbgkobj.c</file>
 +      </directory>
 +      <directory name="ex" root="intermediate">
 +              <file>zw.S</file>
 +      </directory>
 +      <directory name="ex">
 +              <if property="ARCH" value="i386">
 +                      <directory name="i386">
 +                              <file>interlck_asm.S</file>
 +                              <file>fastinterlck_asm.S</file>
 +                              <file>ioport.S</file>
 +                      </directory>
 +              </if>
 +              <file>atom.c</file>
 +              <file>callback.c</file>
 +              <file>dbgctrl.c</file>
 +              <file>efi.c</file>
 +              <file>event.c</file>
 +              <file>evtpair.c</file>
 +              <file>exintrin.c</file>
 +              <file>fastinterlck.c</file>
 +              <file>fmutex.c</file>
 +              <file>handle.c</file>
 +              <file>harderr.c</file>
 +              <file>hdlsterm.c</file>
 +              <file>init.c</file>
 +              <file>keyedevt.c</file>
 +              <file>locale.c</file>
 +              <file>lookas.c</file>
 +              <file>mutant.c</file>
 +              <file>pushlock.c</file>
 +              <file>profile.c</file>
 +              <file>resource.c</file>
 +              <file>rundown.c</file>
 +              <file>sem.c</file>
 +              <file>shutdown.c</file>
 +              <file>sysinfo.c</file>
 +              <file>time.c</file>
 +              <file>timer.c</file>
 +              <file>uuid.c</file>
 +              <file>win32k.c</file>
 +              <file>work.c</file>
 +              <file>xipdisp.c</file>
 +              <file>zone.c</file>
 +      </directory>
 +      <directory name="fsrtl">
 +              <file>dbcsname.c</file>
 +              <file>fastio.c</file>
 +              <file>faulttol.c</file>
 +              <file>filelock.c</file>
 +              <file>filter.c</file>
 +              <file>filtrctx.c</file>
 +              <file>fsfilter.c</file>
 +              <file>fsrtlpc.c</file>
 +              <file>largemcb.c</file>
 +              <file>name.c</file>
 +              <file>notify.c</file>
 +              <file>oplock.c</file>
 +              <file>pnp.c</file>
 +              <file>stackovf.c</file>
 +              <file>tunnel.c</file>
 +              <file>unc.c</file>
 +      </directory>
 +      <directory name="fstub">
 +              <file>disksup.c</file>
 +              <file>fstubex.c</file>
 +              <file>halstub.c</file>
 +      </directory>
 +      <directory name="inbv">
 +              <file>inbv.c</file>
 +      </directory>
 +      <directory name="io">
 +              <directory name="iomgr">
 +                      <file>adapter.c</file>
 +                      <file>arcname.c</file>
 +                      <file>bootlog.c</file>
 +                      <file>controller.c</file>
 +                      <file>device.c</file>
 +                      <file>deviface.c</file>
 +                      <file>driver.c</file>
 +                      <file>drvrlist.c</file>
 +                      <file>error.c</file>
 +                      <file>file.c</file>
 +                      <file>iocomp.c</file>
 +                      <file>ioevent.c</file>
 +                      <file>iofunc.c</file>
 +                      <file>iomdl.c</file>
 +                      <file>iomgr.c</file>
 +                      <file>iorsrce.c</file>
 +                      <file>iotimer.c</file>
 +                      <file>iowork.c</file>
 +                      <file>irp.c</file>
 +                      <file>irq.c</file>
 +                      <file>ramdisk.c</file>
 +                      <file>rawfs.c</file>
 +                      <file>remlock.c</file>
 +                      <file>util.c</file>
 +                      <file>symlink.c</file>
 +                      <file>volume.c</file>
 +              </directory>
 +              <directory name="pnpmgr">
 +                      <file>plugplay.c</file>
 +                      <file>pnpdma.c</file>
 +                      <file>pnpmgr.c</file>
 +                      <file>pnpnotify.c</file>
 +                      <file>pnpreport.c</file>
 +                      <file>pnproot.c</file>
 +              </directory>
 +      </directory>
 +      <if property="_WINKD_" value="0">
 +              <directory name="kdbg">
 +                      <if property="ARCH" value="i386">
 +                              <directory name="i386">
 +                                      <if property="KDBG" value="1">
 +                                              <group>
 +                                                      <file>i386-dis.c</file>
 +                                                      <file>kdb_help.S</file>
 +                                                      <file>longjmp.S</file>
 +                                                      <file>setjmp.S</file>
 +                                              </group>
 +                                      </if>
 +                              </directory>
 +                      </if>
 +                      <if property="KDBG" value="1">
 +                              <!-- file>kdb.c</file -->
 +                              <!-- file>kdb_cli.c</file -->
 +                              <!-- file>kdb_expr.c</file -->
 +                              <file>kdb_keyboard.c</file>
 +                              <file>kdb_serial.c</file>
 +                              <if property="ARCH" value="amd64">
 +                                      <directory name="amd64">
 +                                              <file>kdb.c</file>
 +                                      </directory>
 +                              </if>
 +                      </if>
 +                      <if property="DBG_OR_KDBG" value="true">
 +                              <file>kdb_symbols.c</file>
 +                      </if>
 +              </directory>
 +              <directory name="kd">
 +                      <directory name="wrappers">
 +                              <file>bochs.c</file>
 +                              <if property="ARCH" value="i386">
 +                                      <file>gdbstub.c</file>
 +                              </if>
 +                              <if property="ARCH" value="powerpc">
 +                                      <file>gdbstub_powerpc.c</file>
 +                              </if>
 +                              <file>kdbg.c</file>
 +                      </directory>
 +                      <file>kdinit.c</file>
 +                      <file>kdio.c</file>
 +                      <file>kdmain.c</file>
 +              </directory>
 +      </if>
 +      <if property="_WINKD_" value ="1">
 +              <directory name="kd64">
 +                      <file>kdapi.c</file>
 +                      <file>kdbreak.c</file>
 +                      <file>kddata.c</file>
 +                      <file>kdinit.c</file>
 +                      <file>kdlock.c</file>
 +                      <file>kdprint.c</file>
 +                      <file>kdtrap.c</file>
 +              </directory>
 +      </if>
 +      <directory name="lpc">
 +              <file>close.c</file>
 +              <file>complete.c</file>
 +              <file>connect.c</file>
 +              <file>create.c</file>
 +              <file>listen.c</file>
 +              <file>port.c</file>
 +              <file>reply.c</file>
 +              <file>send.c</file>
 +      </directory>
 +      <directory name="mm">
 +              <if property="ARCH" value="i386">
 +                      <directory name="i386">
 +                              <file>page.c</file>
 +                      </directory>
 +              </if>
 +              <if property="ARCH" value="arm">
 +                      <directory name="arm">
 +                              <file>stubs.c</file>
 +                      </directory>
 +              </if>
 +              <if property="ARCH" value="powerpc">
 +                      <directory name="powerpc">
 +                              <file>pfault.c</file>
 +                              <file>page.c</file>
 +                      </directory>
 +              </if>
 +              <if property="ARCH" value="amd64">
 +                      <directory name="amd64">
 +                              <file>page.c</file>
 +                      </directory>
 +              </if>
 +              <file>anonmem.c</file>
 +              <file>balance.c</file>
 +              <file>cont.c</file>
 +              <file>drvlck.c</file>
 +              <file>freelist.c</file>
 +              <file>iospace.c</file>
 +              <file>kmap.c</file>
 +              <file>marea.c</file>
 +              <file>mdlsup.c</file>
 +              <file>mm.c</file>
 +              <file>mminit.c</file>
 +              <file>mpw.c</file>
 +              <file>ncache.c</file>
 +              <file>npool.c</file>
 +              <file>pagefile.c</file>
 +              <file>pageop.c</file>
 +              <file>pe.c</file>
 +              <file>physical.c</file>
 +              <file>pool.c</file>
 +              <file>ppool.c</file>
 +              <file>procsup.c</file>
 +              <file>region.c</file>
 +              <file>rmap.c</file>
 +              <file>section.c</file>
 +              <file>sysldr.c</file>
 +              <file>verifier.c</file>
 +              <file>virtual.c</file>
 +              <file>wset.c</file>
 +              <if property="_ELF_" value="1">
 +                      <file>elf32.c</file>
 +                      <file>elf64.c</file>
 +              </if>
 +      </directory>
 +      <directory name="ob">
 +              <file>obdir.c</file>
 +              <file>obinit.c</file>
 +              <file>obhandle.c</file>
 +              <file>obname.c</file>
 +              <file>oblife.c</file>
 +              <file>obref.c</file>
 +              <file>obsdcach.c</file>
 +              <file>obsecure.c</file>
 +              <file>oblink.c</file>
 +              <file>obwait.c</file>
 +      </directory>
 +      <directory name="po">
 +              <file>power.c</file>
 +              <file>events.c</file>
 +      </directory>
 +      <directory name="ps">
 +              <if property="ARCH" value="i386">
 +                      <directory name="i386">
 +                              <file>psctx.c</file>
 +                      </directory>
 +              </if>
 +              <if property="ARCH" value="arm">
 +                      <directory name="arm">
 +                              <file>psctx.c</file>
 +                      </directory>
 +              </if>
 +              <file>debug.c</file>
 +              <file>job.c</file>
 +              <file>kill.c</file>
 +              <file>psnotify.c</file>
 +              <file>process.c</file>
 +              <file>psmgr.c</file>
 +              <file>query.c</file>
 +              <file>quota.c</file>
 +              <file>security.c</file>
 +              <file>state.c</file>
 +              <file>thread.c</file>
 +              <file>win32.c</file>
 +      </directory>
 +      <directory name="rtl">
 +              <if property="ARCH" value="arm">
 +                      <directory name="arm">
 +                              <file>rtlexcpt.c</file>
 +                      </directory>
 +              </if>
 +              <file>libsupp.c</file>
 +              <file>misc.c</file>
 +      </directory>
 +      <directory name="se">
 +              <file>access.c</file>
 +              <file>acl.c</file>
 +              <file>audit.c</file>
 +              <file>lsa.c</file>
 +              <file>priv.c</file>
 +              <file>sd.c</file>
 +              <file>semgr.c</file>
 +              <file>sid.c</file>
 +              <file>token.c</file>
 +      </directory>
 +      <directory name="vdm">
 +              <if property="ARCH" value="i386">
 +                      <file>vdmmain.c</file>
 +                      <file>vdmexec.c</file>
 +              </if>
 +      </directory>
 +      <directory name="wmi">
 +              <file>wmi.c</file>
 +      </directory>
 +      <file>ntoskrnl.rc</file>
++      <file>ntoskrnl.pspec</file>
 +      <linkerscript>ntoskrnl_$(ARCH).lnk</linkerscript>
 +</module>
 +

diff --cc reactos/ntoskrnl/ntoskrnl.pspec
index 0000000,c742bd3..9fb2550
mode 000000,100644..100644
--- /dev/null
--- 2/reactos/ntoskrnl/ntoskrnl.pspec
+++ b/reactos/ntoskrnl/ntoskrnl.pspec
@@@ -1,0 -1,1606 +1,1660 @@@
+ #include "include/reactos/msvctarget.h"
+ 
+ @ stdcall CcCanIWrite(ptr long long long)
+ @ stdcall CcCopyRead(ptr ptr long long ptr ptr)
+ @ stdcall CcCopyWrite(ptr ptr long long ptr)
+ @ stdcall CcDeferWrite(ptr ptr ptr ptr long long)
+ @ stdcall CcFastCopyRead(ptr long long long ptr ptr)
+ @ stdcall CcFastCopyWrite(ptr long long ptr)
+ @ extern CcFastMdlReadWait
+ @ extern CcFastReadNotPossible
+ @ extern CcFastReadWait
+ @ stdcall CcFlushCache(ptr ptr long ptr)
+ @ stdcall CcGetDirtyPages(ptr ptr ptr ptr)
+ @ stdcall CcGetFileObjectFromBcb(ptr)
+ @ stdcall CcGetFileObjectFromSectionPtrs(ptr)
+ @ stdcall CcGetFlushedValidData(ptr long)
+ @ stdcall CcGetLsnForFileObject(ptr ptr)
+ @ stdcall CcInitializeCacheMap(ptr ptr long ptr ptr)
+ @ stdcall CcIsThereDirtyData(ptr)
+ @ stdcall CcMapData(ptr ptr long long ptr ptr)
+ @ stdcall CcMdlRead(ptr ptr long ptr ptr)
+ @ stdcall CcMdlReadComplete(ptr ptr)
+ @ stdcall CcMdlWriteAbort(ptr ptr)
+ @ stdcall CcMdlWriteComplete(ptr ptr ptr)
+ @ stdcall CcPinMappedData(ptr ptr long long ptr)
+ @ stdcall CcPinRead(ptr ptr long long ptr ptr)
+ @ stdcall CcPrepareMdlWrite(ptr ptr long ptr ptr)
+ @ stdcall CcPreparePinWrite(ptr ptr long long long ptr ptr)
+ @ stdcall CcPurgeCacheSection(ptr ptr long long)
+ @ stdcall CcRemapBcb(ptr)
+ @ stdcall CcRepinBcb(ptr)
+ @ stdcall CcScheduleReadAhead(ptr ptr long)
+ @ stdcall CcSetAdditionalCacheAttributes(ptr long long)
+ @ stdcall CcSetBcbOwnerPointer(ptr ptr)
+ @ stdcall CcSetDirtyPageThreshold(ptr long)
+ @ stdcall CcSetDirtyPinnedData(ptr ptr)
+ @ stdcall CcSetFileSizes(ptr ptr)
+ @ stdcall CcSetLogHandleForFile(ptr ptr ptr)
+ @ stdcall CcSetReadAheadGranularity(ptr long)
+ @ stdcall CcUninitializeCacheMap(ptr ptr ptr)
+ @ stdcall CcUnpinData(ptr)
+ @ stdcall CcUnpinDataForThread(ptr ptr)
+ @ stdcall CcUnpinRepinnedBcb(ptr long ptr)
+ @ stdcall CcWaitForCurrentLazyWriterActivity()
+ @ stdcall CcZeroData(ptr ptr ptr long)
+ @ stdcall CmRegisterCallback(ptr ptr ptr)
+ @ stdcall CmUnRegisterCallback(long long)
+ @ stdcall DbgBreakPoint()
+ @ stdcall DbgBreakPointWithStatus(long)
+ ;DbgCommandString
+ @ stdcall DbgLoadImageSymbols(ptr ptr long)
+ @ cdecl DbgPrint(str)
+ @ cdecl DbgPrintEx(long long str)
+ @ cdecl DbgPrintReturnControlC(str)
+ @ stdcall DbgPrompt(str ptr long)
+ @ stdcall DbgQueryDebugFilterState(long long)
+ @ stdcall DbgSetDebugFilterState(long long long)
++#ifdef __x86_64__
++@ fastcall ExAcquireFastMutex(ptr)
++#endif
+ @ fastcall ExAcquireFastMutexUnsafe(ptr)
+ @ stdcall ExAcquireResourceExclusiveLite(ptr long)
+ @ stdcall ExAcquireResourceSharedLite(ptr long)
+ @ fastcall ExAcquireRundownProtection(ptr) ExfAcquireRundownProtection
+ @ fastcall ExAcquireRundownProtectionCacheAware(ptr) ExfAcquireRundownProtectionCacheAware
+ @ fastcall ExAcquireRundownProtectionCacheAwareEx(ptr long) ExfAcquireRundownProtectionCacheAwareEx
+ @ fastcall ExAcquireRundownProtectionEx(ptr long) ExfAcquireRundownProtectionEx
+ @ stdcall ExAcquireSharedStarveExclusive(ptr long)
+ @ stdcall ExAcquireSharedWaitForExclusive(ptr long)
+ @ stdcall ExAllocateCacheAwareRundownProtection(long long)
+ @ stdcall ExAllocateFromPagedLookasideList(ptr) ExiAllocateFromPagedLookasideList
+ @ stdcall ExAllocatePool(long long)
+ @ stdcall ExAllocatePoolWithQuota(long long)
+ @ stdcall ExAllocatePoolWithQuotaTag(long long long)
+ @ stdcall ExAllocatePoolWithTag(long long long)
+ @ stdcall ExAllocatePoolWithTagPriority(long long long long)
+ @ stdcall ExConvertExclusiveToSharedLite(ptr)
+ @ stdcall ExCreateCallback(ptr ptr long long)
+ @ stdcall ExDeleteNPagedLookasideList(ptr)
+ @ stdcall ExDeletePagedLookasideList(ptr)
+ @ stdcall ExDeleteResourceLite(ptr)
+ @ extern ExDesktopObjectType
+ @ stdcall ExDisableResourceBoostLite(ptr)
+ @ fastcall ExEnterCriticalRegionAndAcquireFastMutexUnsafe(ptr)
+ @ stdcall ExEnterCriticalRegionAndAcquireResourceExclusive(ptr)
+ ;ExEnterCriticalRegionAndAcquireResourceShared
+ ;ExEnterCriticalRegionAndAcquireSharedWaitForExclusive
+ @ stdcall ExEnumHandleTable(ptr ptr ptr ptr)
+ @ extern ExEventObjectType _ExEventObjectType
+ @ stdcall ExExtendZone(ptr ptr long)
+ @ stdcall ExFreeCacheAwareRundownProtection(ptr)
+ @ stdcall ExFreePool(ptr)
+ @ stdcall ExFreePoolWithTag(ptr long)
+ @ stdcall ExFreeToPagedLookasideList(ptr ptr) ExiFreeToPagedLookasideList
+ @ stdcall ExGetCurrentProcessorCounts(ptr ptr ptr)
+ @ stdcall ExGetCurrentProcessorCpuUsage(ptr)
+ @ stdcall ExGetExclusiveWaiterCount(ptr)
+ @ stdcall ExGetPreviousMode()
+ @ stdcall ExGetSharedWaiterCount(ptr)
+ @ stdcall ExInitializeNPagedLookasideList(ptr ptr ptr long long long long)
+ @ stdcall ExInitializePagedLookasideList(ptr ptr ptr long long long long)
+ @ stdcall ExInitializeResourceLite(ptr)
+ @ fastcall ExInitializeRundownProtection(ptr) ExfInitializeRundownProtection
+ @ stdcall ExInitializeRundownProtectionCacheAware(ptr long)
+ @ stdcall ExInitializeZone(ptr long ptr long)
+ @ stdcall ExInterlockedAddLargeInteger(ptr long long ptr)
+ @ fastcall ExInterlockedAddLargeStatistic(ptr long)
+ @ stdcall ExInterlockedAddUlong(ptr long ptr)
++#ifndef __x86_64__
+ @ fastcall ExInterlockedCompareExchange64(ptr ptr ptr ptr)
+ @ stdcall ExInterlockedDecrementLong(ptr ptr)
+ @ stdcall ExInterlockedExchangeUlong(ptr long ptr)
++#endif
+ @ stdcall ExInterlockedExtendZone(ptr ptr long ptr)
++#ifndef __x86_64__
+ @ fastcall ExInterlockedFlushSList(ptr)
+ @ stdcall ExInterlockedIncrementLong(ptr ptr)
++#endif
+ @ stdcall ExInterlockedInsertHeadList(ptr ptr ptr)
+ @ stdcall ExInterlockedInsertTailList(ptr ptr ptr)
+ @ stdcall ExInterlockedPopEntryList(ptr ptr)
++#ifndef __x86_64__
+ @ fastcall ExInterlockedPopEntrySList(ptr ptr)
++#endif
+ @ stdcall ExInterlockedPushEntryList(ptr ptr ptr)
++#ifndef __x86_64__
+ @ fastcall ExInterlockedPushEntrySList(ptr ptr ptr)
++#endif
+ @ stdcall ExInterlockedRemoveHeadList(ptr ptr)
+ @ stdcall ExIsProcessorFeaturePresent(long)
+ @ stdcall ExIsResourceAcquiredExclusiveLite(ptr)
+ @ stdcall ExIsResourceAcquiredSharedLite(ptr)
+ @ stdcall ExLocalTimeToSystemTime(ptr ptr)
+ @ stdcall ExNotifyCallback(ptr ptr ptr)
+ @ stdcall ExQueryPoolBlockSize(ptr ptr)
+ @ stdcall ExQueueWorkItem(ptr long)
+ @ stdcall ExRaiseAccessViolation()
+ @ stdcall ExRaiseDatatypeMisalignment()
+ @ stdcall ExRaiseException(ptr) RtlRaiseException
+ @ stdcall ExRaiseHardError(long long long ptr long ptr)
+ @ stdcall ExRaiseStatus(long) RtlRaiseStatus
+ @ fastcall ExReInitializeRundownProtection(ptr) ExfReInitializeRundownProtection
+ @ fastcall ExReInitializeRundownProtectionCacheAware(ptr) ExfReInitializeRundownProtectionCacheAware
+ @ stdcall ExRegisterCallback(ptr ptr ptr)
+ @ stdcall ExReinitializeResourceLite(ptr)
++#ifdef __x86_64__
++@ fastcall ExReleaseFastMutex(ptr)
++#endif
+ @ fastcall ExReleaseFastMutexUnsafe(ptr)
+ @ fastcall ExReleaseFastMutexUnsafeAndLeaveCriticalRegion(ptr)
+ @ fastcall ExReleaseResourceAndLeaveCriticalRegion(ptr)
+ @ stdcall ExReleaseResourceForThreadLite(ptr long)
+ @ fastcall ExReleaseResourceLite(ptr)
+ @ fastcall ExReleaseRundownProtection(ptr) ExfReleaseRundownProtection
+ @ fastcall ExReleaseRundownProtectionCacheAware(ptr) ExfReleaseRundownProtectionCacheAware
+ @ fastcall ExReleaseRundownProtectionCacheAwareEx(ptr long) ExfReleaseRundownProtectionCacheAwareEx
+ @ fastcall ExReleaseRundownProtectionEx(ptr long) ExfReleaseRundownProtectionEx
+ @ fastcall ExRundownCompleted(ptr) ExfRundownCompleted
+ @ fastcall ExRundownCompletedCacheAware(ptr) ExfRundownCompletedCacheAware
+ @ extern ExSemaphoreObjectType _ExSemaphoreObjectType
+ @ stdcall ExSetResourceOwnerPointer(ptr ptr)
+ @ stdcall ExSetTimerResolution(long long)
+ @ stdcall ExSizeOfRundownProtectionCacheAware()
+ @ stdcall ExSystemExceptionFilter()
+ @ stdcall ExSystemTimeToLocalTime(ptr ptr)
++#ifdef __x86_64__
++@ fastcall ExTryToAcquireFastMutex(ptr)
++#endif
+ @ stdcall ExUnregisterCallback(ptr)
+ @ stdcall ExUuidCreate(ptr)
+ @ stdcall ExVerifySuite(long)
+ @ fastcall ExWaitForRundownProtectionRelease(ptr) ExfWaitForRundownProtectionRelease
+ @ fastcall ExWaitForRundownProtectionReleaseCacheAware(ptr) ExfWaitForRundownProtectionReleaseCacheAware
+ @ extern ExWindowStationObjectType
+ @ fastcall ExfAcquirePushLockExclusive(ptr)
+ @ fastcall ExfAcquirePushLockShared(ptr)
++#ifndef __x86_64__
+ @ fastcall ExfInterlockedAddUlong(ptr long ptr)
+ @ fastcall ExfInterlockedCompareExchange64(ptr ptr ptr)
+ @ fastcall ExfInterlockedInsertHeadList(ptr ptr ptr)
+ @ fastcall ExfInterlockedInsertTailList(ptr ptr ptr)
+ @ fastcall ExfInterlockedPopEntryList(ptr ptr)
+ @ fastcall ExfInterlockedPushEntryList(ptr ptr ptr)
+ @ fastcall ExfInterlockedRemoveHeadList(ptr ptr)
++#endif
+ @ fastcall ExfReleasePushLock(ptr)
+ @ fastcall ExfReleasePushLockExclusive(ptr)
+ @ fastcall ExfReleasePushLockShared(ptr)
+ @ fastcall ExfTryToWakePushLock(ptr)
+ @ fastcall ExfUnblockPushLock(ptr ptr)
++#ifdef __x86_64__
++@ stdcall ExpInterlockedFlushSList(ptr)
++@ stdcall ExpInterlockedPopEntrySList(ptr ptr)
++@ stdcall ExpInterlockedPushEntrySList(ptr ptr)
++#endif
+ #ifdef _M_IX86
+ @ fastcall Exfi386InterlockedDecrementLong(ptr)
+ @ fastcall Exfi386InterlockedExchangeUlong(ptr long)
+ @ fastcall Exfi386InterlockedIncrementLong(ptr)
+ @ stdcall Exi386InterlockedDecrementLong(ptr)
+ @ stdcall Exi386InterlockedExchangeUlong(ptr long long)
+ @ stdcall Exi386InterlockedIncrementLong(ptr)
+ #endif
++#ifdef _M_IX86
+ @ fastcall ExiAcquireFastMutex(ptr) ExAcquireFastMutex
+ @ fastcall ExiReleaseFastMutex(ptr) ExReleaseFastMutex
+ @ fastcall ExiTryToAcquireFastMutex(ptr) ExTryToAcquireFastMutex
++#endif
+ @ stdcall FsRtlAcquireFileExclusive(ptr)
+ ;FsRtlAddBaseMcbEntry
+ @ stdcall FsRtlAddLargeMcbEntry(ptr long long long long long long)
+ @ stdcall FsRtlAddMcbEntry(ptr long long long)
+ @ stdcall FsRtlAddToTunnelCache(ptr long long ptr ptr long long ptr)
+ @ stdcall FsRtlAllocateFileLock(ptr ptr)
+ @ stdcall FsRtlAllocatePool(long long)
+ @ stdcall FsRtlAllocatePoolWithQuota(long long)
+ @ stdcall FsRtlAllocatePoolWithQuotaTag(long long long)
+ @ stdcall FsRtlAllocatePoolWithTag(long long long)
+ @ stdcall FsRtlAllocateResource()
+ @ stdcall FsRtlAreNamesEqual(ptr ptr long wstr)
+ @ stdcall FsRtlBalanceReads(ptr)
+ @ stdcall FsRtlCheckLockForReadAccess(ptr ptr)
+ @ stdcall FsRtlCheckLockForWriteAccess(ptr ptr)
+ @ stdcall FsRtlCheckOplock(ptr ptr ptr ptr ptr)
+ @ stdcall FsRtlCopyRead(ptr ptr long long long ptr ptr ptr)
+ @ stdcall FsRtlCopyWrite(ptr ptr long long long ptr ptr ptr)
+ @ stdcall FsRtlCreateSectionForDataScan(ptr ptr ptr ptr long ptr ptr long long long)
+ @ stdcall FsRtlCurrentBatchOplock(ptr)
+ @ stdcall FsRtlDeleteKeyFromTunnelCache(ptr long long)
+ @ stdcall FsRtlDeleteTunnelCache(ptr)
+ @ stdcall FsRtlDeregisterUncProvider(ptr)
+ @ stdcall FsRtlDissectDbcs(long ptr ptr ptr)
+ @ stdcall FsRtlDissectName(long ptr ptr ptr)
+ @ stdcall FsRtlDoesDbcsContainWildCards(ptr)
+ @ stdcall FsRtlDoesNameContainWildCards(ptr)
+ @ stdcall FsRtlFastCheckLockForRead(ptr ptr ptr long ptr ptr)
+ @ stdcall FsRtlFastCheckLockForWrite(ptr ptr ptr long ptr ptr)
+ @ stdcall FsRtlFastUnlockAll(ptr ptr ptr ptr)
+ @ stdcall FsRtlFastUnlockAllByKey(ptr ptr ptr long ptr)
+ @ stdcall FsRtlFastUnlockSingle(ptr ptr ptr ptr ptr long ptr long)
+ @ stdcall FsRtlFindInTunnelCache(ptr long long ptr ptr ptr ptr ptr)
+ @ stdcall FsRtlFreeFileLock(ptr)
+ @ stdcall FsRtlGetFileSize(ptr ptr)
+ ;FsRtlGetNextBaseMcbEntry
+ @ stdcall FsRtlGetNextFileLock(ptr long)
+ @ stdcall FsRtlGetNextLargeMcbEntry(ptr long ptr ptr ptr)
+ @ stdcall FsRtlGetNextMcbEntry(ptr long ptr ptr ptr)
+ @ stdcall FsRtlIncrementCcFastReadNoWait()
+ @ stdcall FsRtlIncrementCcFastReadNotPossible()
+ @ stdcall FsRtlIncrementCcFastReadResourceMiss()
+ @ stdcall FsRtlIncrementCcFastReadWait()
+ ;FsRtlInitializeBaseMcb
+ @ stdcall FsRtlInitializeFileLock(ptr ptr ptr)
+ @ stdcall FsRtlInitializeLargeMcb(ptr long)
+ @ stdcall FsRtlInitializeMcb(ptr long)
+ @ stdcall FsRtlInitializeOplock(ptr)
+ @ stdcall FsRtlInitializeTunnelCache(ptr)
+ @ stdcall FsRtlInsertPerFileObjectContext(ptr ptr)
+ @ stdcall FsRtlInsertPerStreamContext(ptr ptr)
+ @ stdcall FsRtlIsDbcsInExpression(ptr ptr)
+ @ stdcall FsRtlIsFatDbcsLegal(long ptr long long long)
+ @ stdcall FsRtlIsHpfsDbcsLegal(long ptr long long long)
+ @ stdcall FsRtlIsNameInExpression(ptr ptr long wstr)
+ @ stdcall FsRtlIsNtstatusExpected(long)
+ @ stdcall FsRtlIsPagingFile(ptr)
+ @ stdcall FsRtlIsTotalDeviceFailure(ptr)
+ @ extern FsRtlLegalAnsiCharacterArray _FsRtlLegalAnsiCharacterArray
+ ;FsRtlLookupBaseMcbEntry
+ @ stdcall FsRtlLookupLargeMcbEntry(ptr long long ptr ptr ptr ptr ptr)
+ ;FsRtlLookupLastBaseMcbEntry
+ ;FsRtlLookupLastBaseMcbEntryAndIndex
+ @ stdcall FsRtlLookupLastLargeMcbEntry(ptr ptr ptr)
+ @ stdcall FsRtlLookupLastLargeMcbEntryAndIndex(ptr ptr ptr ptr)
+ @ stdcall FsRtlLookupLastMcbEntry(ptr ptr ptr)
+ @ stdcall FsRtlLookupMcbEntry(ptr long ptr ptr ptr)
+ @ stdcall FsRtlLookupPerFileObjectContext(ptr ptr ptr)
+ @ stdcall FsRtlLookupPerStreamContextInternal(ptr ptr ptr)
+ @ stdcall FsRtlMdlRead(ptr ptr long long ptr ptr)
+ @ stdcall FsRtlMdlReadComplete(ptr ptr)
+ @ stdcall FsRtlMdlReadCompleteDev(ptr ptr ptr)
+ @ stdcall FsRtlMdlReadDev(ptr ptr long long ptr ptr ptr)
+ @ stdcall FsRtlMdlWriteComplete(ptr ptr ptr)
+ @ stdcall FsRtlMdlWriteCompleteDev(ptr ptr ptr ptr)
+ @ stdcall FsRtlNormalizeNtstatus(long long)
+ @ stdcall FsRtlNotifyChangeDirectory(ptr ptr ptr ptr long long ptr)
+ @ stdcall FsRtlNotifyCleanup(ptr ptr ptr)
+ @ stdcall FsRtlNotifyFilterChangeDirectory(ptr ptr ptr ptr long long long ptr ptr ptr ptr)
+ @ stdcall FsRtlNotifyFilterReportChange(ptr ptr ptr long ptr ptr long long ptr ptr)
+ @ stdcall FsRtlNotifyFullChangeDirectory(ptr ptr ptr ptr long long long ptr ptr ptr)
+ @ stdcall FsRtlNotifyFullReportChange(ptr ptr ptr long ptr ptr long long ptr)
+ @ stdcall FsRtlNotifyInitializeSync(ptr)
+ @ stdcall FsRtlNotifyReportChange(ptr ptr ptr ptr long)
+ @ stdcall FsRtlNotifyUninitializeSync(ptr)
+ @ stdcall FsRtlNotifyVolumeEvent(ptr long)
+ ;FsRtlNumberOfRunsInBaseMcb
+ @ stdcall FsRtlNumberOfRunsInLargeMcb(ptr)
+ @ stdcall FsRtlNumberOfRunsInMcb(ptr)
+ @ stdcall FsRtlOplockFsctrl(ptr ptr long)
+ @ stdcall FsRtlOplockIsFastIoPossible(ptr)
+ @ stdcall FsRtlPostPagingFileStackOverflow(ptr ptr ptr)
+ @ stdcall FsRtlPostStackOverflow(ptr ptr ptr)
+ @ stdcall FsRtlPrepareMdlWrite(ptr ptr long long ptr ptr)
+ @ stdcall FsRtlPrepareMdlWriteDev(ptr ptr long long ptr ptr ptr)
+ @ stdcall FsRtlPrivateLock(ptr ptr ptr ptr ptr long long long ptr ptr ptr long)
+ @ stdcall FsRtlProcessFileLock(ptr ptr ptr)
+ @ stdcall FsRtlRegisterFileSystemFilterCallbacks(ptr ptr)
+ @ stdcall FsRtlRegisterUncProvider(ptr ptr long)
+ @ stdcall FsRtlReleaseFile(ptr)
+ ;FsRtlRemoveBaseMcbEntry
+ @ stdcall FsRtlRemoveLargeMcbEntry(ptr long long long long)
+ @ stdcall FsRtlRemoveMcbEntry(ptr long long)
+ @ stdcall FsRtlRemovePerFileObjectContext(ptr ptr ptr)
+ @ stdcall FsRtlRemovePerStreamContext(ptr ptr ptr)
+ ;FsRtlResetBaseMcb
+ @ stdcall FsRtlResetLargeMcb(ptr long)
+ ;FsRtlSplitBaseMcb
+ @ stdcall FsRtlSplitLargeMcb(ptr long long long long)
+ @ stdcall FsRtlSyncVolumes(long long long)
+ @ stdcall FsRtlTeardownPerStreamContexts(ptr)
+ ;FsRtlTruncateBaseMcb
+ @ stdcall FsRtlTruncateLargeMcb(ptr long long)
+ @ stdcall FsRtlTruncateMcb(ptr long)
+ ;FsRtlUninitializeBaseMcb
+ @ stdcall FsRtlUninitializeFileLock(ptr)
+ @ stdcall FsRtlUninitializeLargeMcb(ptr)
+ @ stdcall FsRtlUninitializeMcb(ptr)
+ @ stdcall FsRtlUninitializeOplock(ptr)
+ @ extern HalDispatchTable _HalDispatchTable
+ @ fastcall HalExamineMBR(ptr long long ptr)
+ @ extern HalPrivateDispatchTable
+ ;HeadlessDispatch
+ @ stdcall InbvAcquireDisplayOwnership()
+ @ stdcall InbvCheckDisplayOwnership()
+ @ stdcall InbvDisplayString(str)
+ @ stdcall InbvEnableBootDriver(long)
+ @ stdcall InbvEnableDisplayString(long)
+ @ stdcall InbvInstallDisplayStringFilter(ptr)
+ @ stdcall InbvIsBootDriverInstalled()
+ @ stdcall InbvNotifyDisplayOwnershipLost(ptr)
+ @ stdcall InbvResetDisplay()
+ @ stdcall InbvSetScrollRegion(long long long long)
+ @ stdcall InbvSetTextColor(long)
+ @ stdcall InbvSolidColorFill(long long long long long)
+ @ extern InitSafeBootMode
+ @ fastcall InterlockedCompareExchange(ptr long long)
+ @ fastcall InterlockedDecrement(ptr)
+ @ fastcall InterlockedExchange(ptr long)
+ @ fastcall InterlockedExchangeAdd(ptr long)
+ @ fastcall InterlockedIncrement(ptr)
++#ifndef __x86_64__
+ @ fastcall InterlockedPopEntrySList(ptr)
+ @ fastcall InterlockedPushEntrySList(ptr ptr)
++#endif
+ @ stdcall IoAcquireCancelSpinLock(ptr)
+ @ stdcall IoAcquireRemoveLockEx(ptr ptr str long long)
+ @ stdcall IoAcquireVpbSpinLock(ptr)
+ @ extern IoAdapterObjectType
+ @ stdcall IoAllocateAdapterChannel(ptr ptr long ptr ptr)
+ @ stdcall IoAllocateController(ptr ptr ptr ptr)
+ @ stdcall IoAllocateDriverObjectExtension(ptr ptr long ptr)
+ @ stdcall IoAllocateErrorLogEntry(ptr long)
+ @ stdcall IoAllocateIrp(long long)
+ @ stdcall IoAllocateMdl(ptr long long long ptr)
+ @ stdcall IoAllocateWorkItem(ptr)
+ @ fastcall IoAssignDriveLetters(ptr ptr ptr ptr)
+ @ stdcall IoAssignResources(ptr ptr ptr ptr ptr ptr)
+ @ stdcall IoAttachDevice(ptr ptr ptr)
+ @ stdcall IoAttachDeviceByPointer(ptr ptr)
+ @ stdcall IoAttachDeviceToDeviceStack(ptr ptr)
+ @ stdcall IoAttachDeviceToDeviceStackSafe(ptr ptr ptr)
+ @ stdcall IoBuildAsynchronousFsdRequest(long ptr ptr long ptr ptr)
+ @ stdcall IoBuildDeviceIoControlRequest(long ptr ptr long ptr long long ptr ptr)
+ @ stdcall IoBuildPartialMdl(ptr ptr ptr long)
+ @ stdcall IoBuildSynchronousFsdRequest(long ptr ptr long ptr ptr ptr)
+ @ stdcall IoCallDriver(ptr ptr)
+ @ stdcall IoCancelFileOpen(ptr ptr)
+ @ stdcall IoCancelIrp(ptr)
+ @ stdcall IoCheckDesiredAccess(ptr long)
+ @ stdcall IoCheckEaBufferValidity(ptr long ptr)
+ @ stdcall IoCheckFunctionAccess(long long long long ptr ptr)
+ @ stdcall IoCheckQuerySetFileInformation(long long long)
+ @ stdcall IoCheckQuerySetVolumeInformation(long long long)
+ @ stdcall IoCheckQuotaBufferValidity(ptr long ptr)
+ @ stdcall IoCheckShareAccess(long long ptr ptr long)
+ @ stdcall IoCompleteRequest(ptr long)
+ @ stdcall IoConnectInterrupt(ptr ptr ptr ptr long long long long long long long)
+ @ stdcall IoCreateController(long)
+ @ stdcall IoCreateDevice(ptr long ptr long long long ptr)
+ @ stdcall IoCreateDisk(ptr ptr)
+ @ stdcall IoCreateDriver(ptr ptr)
+ @ stdcall IoCreateFile(ptr long ptr ptr ptr long long long long ptr long long ptr long)
+ @ stdcall IoCreateFileSpecifyDeviceObjectHint(ptr long ptr ptr ptr long long long long ptr long long ptr long ptr)
+ @ stdcall IoCreateNotificationEvent(ptr ptr)
+ @ stdcall IoCreateStreamFileObject(ptr ptr)
+ @ stdcall IoCreateStreamFileObjectEx(ptr ptr ptr)
+ @ stdcall IoCreateStreamFileObjectLite(ptr ptr)
+ @ stdcall IoCreateSymbolicLink(ptr ptr)
+ @ stdcall IoCreateSynchronizationEvent(ptr ptr)
+ @ stdcall IoCreateUnprotectedSymbolicLink(ptr ptr)
+ @ stdcall IoCsqInitialize(ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall IoCsqInitializeEx(ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall IoCsqInsertIrp(ptr ptr ptr)
+ @ stdcall IoCsqInsertIrpEx(ptr ptr ptr ptr)
+ @ stdcall IoCsqRemoveIrp(ptr ptr)
+ @ stdcall IoCsqRemoveNextIrp(ptr ptr)
+ @ stdcall IoDeleteController(ptr)
+ @ stdcall IoDeleteDevice(ptr)
+ @ stdcall IoDeleteDriver(ptr)
+ @ stdcall IoDeleteSymbolicLink(ptr)
+ @ stdcall IoDetachDevice(ptr)
+ @ extern IoDeviceHandlerObjectSize
+ @ extern IoDeviceHandlerObjectType
+ @ extern IoDeviceObjectType
+ @ stdcall IoDisconnectInterrupt(ptr)
+ @ extern IoDriverObjectType
+ @ stdcall IoEnqueueIrp(ptr)
+ @ stdcall IoEnumerateDeviceObjectList(ptr ptr long ptr)
+ @ stdcall IoEnumerateRegisteredFiltersList(ptr long ptr)
+ @ stdcall IoFastQueryNetworkAttributes(ptr long long ptr ptr)
+ @ extern IoFileObjectType _IoFileObjectType
+ @ stdcall IoForwardAndCatchIrp(ptr ptr) IoForwardIrpSynchronously
+ @ stdcall IoForwardIrpSynchronously(ptr ptr)
+ @ stdcall IoFreeController(ptr)
+ @ stdcall IoFreeErrorLogEntry(ptr)
+ @ stdcall IoFreeIrp(ptr)
+ @ stdcall IoFreeMdl(ptr)
+ @ stdcall IoFreeWorkItem(ptr)
+ @ stdcall IoGetAttachedDevice(ptr)
+ @ stdcall IoGetAttachedDeviceReference(ptr)
+ @ stdcall IoGetBaseFileSystemDeviceObject(ptr)
+ @ stdcall IoGetBootDiskInformation(ptr long)
+ @ stdcall IoGetConfigurationInformation()
+ @ stdcall IoGetCurrentProcess()
+ @ stdcall IoGetDeviceAttachmentBaseRef(ptr)
+ @ stdcall IoGetDeviceInterfaceAlias(ptr ptr ptr)
+ @ stdcall IoGetDeviceInterfaces(ptr ptr long ptr)
+ @ stdcall IoGetDeviceObjectPointer(ptr long ptr ptr)
+ @ stdcall IoGetDeviceProperty(ptr long long ptr ptr)
+ @ stdcall IoGetDeviceToVerify(ptr)
+ @ stdcall IoGetDiskDeviceObject(ptr ptr)
+ @ stdcall IoGetDmaAdapter(ptr ptr ptr)
+ @ stdcall IoGetDriverObjectExtension(ptr ptr)
+ @ stdcall IoGetFileObjectGenericMapping()
+ @ stdcall IoGetInitialStack()
+ @ stdcall IoGetLowerDeviceObject(ptr)
+ @ fastcall IoGetPagingIoPriority(ptr)
+ @ stdcall IoGetRelatedDeviceObject(ptr)
+ @ stdcall IoGetRequestorProcess(ptr)
+ @ stdcall IoGetRequestorProcessId(ptr)
+ @ stdcall IoGetRequestorSessionId(ptr ptr)
+ @ stdcall IoGetStackLimits(ptr ptr)
+ @ stdcall IoGetTopLevelIrp()
+ @ stdcall IoInitializeIrp(ptr long long)
+ @ stdcall IoInitializeRemoveLockEx(ptr long long long long)
+ @ stdcall IoInitializeTimer(ptr ptr ptr)
+ @ stdcall IoInvalidateDeviceRelations(ptr long)
+ @ stdcall IoInvalidateDeviceState(ptr)
+ @ stdcall IoIsFileOriginRemote(ptr)
+ @ stdcall IoIsOperationSynchronous(ptr)
+ @ stdcall IoIsSystemThread(ptr)
+ @ stdcall IoIsValidNameGraftingBuffer(ptr ptr)
+ @ stdcall IoIsWdmVersionAvailable(long long)
+ @ stdcall IoMakeAssociatedIrp(ptr long)
+ @ stdcall IoOpenDeviceInterfaceRegistryKey(ptr long ptr)
+ @ stdcall IoOpenDeviceRegistryKey(ptr long long ptr)
+ @ stdcall IoPageRead(ptr ptr ptr ptr ptr)
+ @ stdcall IoPnPDeliverServicePowerNotification(long long long long)
+ @ stdcall IoQueryDeviceDescription(ptr ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall IoQueryFileDosDeviceName(ptr ptr)
+ @ stdcall IoQueryFileInformation(ptr long long ptr ptr)
+ @ stdcall IoQueryVolumeInformation(ptr long long ptr ptr)
+ @ stdcall IoQueueThreadIrp(ptr)
+ @ stdcall IoQueueWorkItem(ptr ptr long ptr)
+ @ stdcall IoRaiseHardError(ptr ptr ptr)
+ @ stdcall IoRaiseInformationalHardError(long ptr ptr)
+ @ stdcall IoReadDiskSignature(ptr long ptr)
+ @ extern IoReadOperationCount
+ @ fastcall IoReadPartitionTable(ptr long long ptr)
+ @ stdcall IoReadPartitionTableEx(ptr ptr)
+ @ extern IoReadTransferCount
+ @ stdcall IoRegisterBootDriverReinitialization(ptr ptr ptr)
+ @ stdcall IoRegisterDeviceInterface(ptr ptr ptr ptr)
+ @ stdcall IoRegisterDriverReinitialization(ptr ptr ptr)
+ @ stdcall IoRegisterFileSystem(ptr)
+ @ stdcall IoRegisterFsRegistrationChange(ptr ptr)
+ @ stdcall IoRegisterLastChanceShutdownNotification(ptr)
+ @ stdcall IoRegisterPlugPlayNotification(long long ptr ptr ptr ptr ptr)
+ @ stdcall IoRegisterShutdownNotification(ptr)
+ @ stdcall IoReleaseCancelSpinLock(long)
+ @ stdcall IoReleaseRemoveLockAndWaitEx(ptr ptr long)
+ @ stdcall IoReleaseRemoveLockEx(ptr ptr long)
+ @ stdcall IoReleaseVpbSpinLock(long)
+ @ stdcall IoRemoveShareAccess(ptr ptr)
+ @ stdcall IoReportDetectedDevice(ptr long long long ptr ptr long ptr)
+ @ stdcall IoReportHalResourceUsage(ptr ptr ptr long)
+ @ stdcall IoReportResourceForDetection(ptr ptr long ptr ptr long ptr)
+ @ stdcall IoReportResourceUsage(ptr ptr ptr long ptr ptr long long ptr)
+ @ stdcall IoReportTargetDeviceChange(ptr ptr)
+ @ stdcall IoReportTargetDeviceChangeAsynchronous(ptr ptr ptr ptr)
+ @ stdcall IoRequestDeviceEject(ptr)
+ @ stdcall IoReuseIrp(ptr long)
+ @ stdcall IoSetCompletionRoutineEx(ptr ptr ptr ptr long long long)
+ @ stdcall IoSetDeviceInterfaceState(ptr long)
+ @ stdcall IoSetDeviceToVerify(ptr ptr)
+ @ stdcall IoSetFileOrigin(ptr long)
+ @ stdcall IoSetHardErrorOrVerifyDevice(ptr ptr)
+ @ stdcall IoSetInformation(ptr ptr long ptr)
+ @ stdcall IoSetIoCompletion(ptr ptr ptr long ptr long)
+ @ fastcall IoSetPartitionInformation(ptr long long long)
+ @ stdcall IoSetPartitionInformationEx(ptr long ptr)
+ @ stdcall IoSetShareAccess(long long ptr ptr)
+ @ stdcall IoSetStartIoAttributes(ptr long long)
+ @ stdcall IoSetSystemPartition(ptr)
+ @ stdcall IoSetThreadHardErrorMode(long)
+ @ stdcall IoSetTopLevelIrp(ptr)
+ @ stdcall IoStartNextPacket(ptr long)
+ @ stdcall IoStartNextPacketByKey(ptr long long)
+ @ stdcall IoStartPacket(ptr ptr ptr ptr)
+ @ stdcall IoStartTimer(ptr)
+ @ extern IoStatisticsLock
+ @ stdcall IoStopTimer(ptr)
+ @ stdcall IoSynchronousInvalidateDeviceRelations(ptr long)
+ @ stdcall IoSynchronousPageWrite(ptr ptr ptr ptr ptr)
+ @ stdcall IoThreadToProcess(ptr)
+ ;IoTranslateBusAddress
+ @ stdcall IoUnregisterFileSystem(ptr)
+ @ stdcall IoUnregisterFsRegistrationChange(ptr ptr)
+ @ stdcall IoUnregisterPlugPlayNotification(ptr)
+ @ stdcall IoUnregisterShutdownNotification(ptr)
+ @ stdcall IoUpdateShareAccess(ptr ptr)
+ @ stdcall IoValidateDeviceIoControlAccess(ptr long)
+ @ stdcall IoVerifyPartitionTable(ptr long)
+ @ stdcall IoVerifyVolume(ptr long)
+ @ stdcall IoVolumeDeviceToDosName(ptr ptr)
+ @ stdcall IoWMIAllocateInstanceIds(ptr long ptr)
+ @ stdcall IoWMIDeviceObjectToInstanceName(ptr ptr ptr)
+ @ stdcall IoWMIExecuteMethod(ptr ptr long long ptr ptr)
+ @ stdcall IoWMIHandleToInstanceName(ptr ptr ptr)
+ @ stdcall IoWMIOpenBlock(ptr long ptr)
+ @ stdcall IoWMIQueryAllData(ptr ptr ptr)
+ @ stdcall IoWMIQueryAllDataMultiple(ptr long ptr ptr)
+ @ stdcall IoWMIQuerySingleInstance(ptr ptr ptr ptr)
+ @ stdcall IoWMIQuerySingleInstanceMultiple(ptr ptr long ptr ptr)
+ @ stdcall IoWMIRegistrationControl(ptr long)
+ @ stdcall IoWMISetNotificationCallback(ptr ptr ptr)
+ @ stdcall IoWMISetSingleInstance(ptr ptr long long ptr)
+ @ stdcall IoWMISetSingleItem(ptr ptr long long long ptr)
+ @ stdcall IoWMISuggestInstanceName(ptr ptr long ptr)
+ @ stdcall IoWMIWriteEvent(ptr)
+ @ stdcall IoWriteErrorLogEntry(ptr)
+ @ extern IoWriteOperationCount
+ @ fastcall IoWritePartitionTable(ptr long long long ptr)
+ @ stdcall IoWritePartitionTableEx(ptr ptr)
+ @ extern IoWriteTransferCount
+ @ fastcall IofCallDriver(ptr ptr)
+ @ fastcall IofCompleteRequest(ptr long)
+ @ stdcall KdChangeOption(long long ptr long ptr ptr)
+ @ extern KdDebuggerEnabled _KdDebuggerEnabled
+ @ extern KdDebuggerNotPresent _KdDebuggerNotPresent
+ @ stdcall KdDisableDebugger()
+ @ stdcall KdEnableDebugger()
+ @ extern KdEnteredDebugger
+ @ stdcall KdPollBreakIn()
+ @ stdcall KdPowerTransition(long)
+ @ stdcall KdRefreshDebuggerNotPresent()
+ @ stdcall KdSystemDebugControl(long ptr long ptr long ptr long)
+ #ifdef _M_IX86
+ @ stdcall Ke386CallBios(long ptr)
+ ;Ke386IoSetAccessProcess
+ ;Ke386QueryIoAccessMap
+ ;Ke386SetIoAccessMap
+ #endif
+ @ fastcall KeAcquireGuardedMutex(ptr)
+ @ fastcall KeAcquireGuardedMutexUnsafe(ptr)
+ @ fastcall KeAcquireInStackQueuedSpinLockAtDpcLevel(ptr ptr)
+ @ fastcall KeAcquireInStackQueuedSpinLockForDpc(ptr ptr)
+ @ stdcall KeAcquireInterruptSpinLock(ptr)
+ @ stdcall KeAcquireSpinLockAtDpcLevel(ptr)
+ @ fastcall KeAcquireSpinLockForDpc(ptr)
++#ifdef __x86_64__
++@ stdcall KeAcquireSpinLockRaiseToDpc(ptr)
++#endif
+ @ stdcall KeAddSystemServiceTable(ptr ptr long ptr long)
+ @ stdcall KeAreAllApcsDisabled()
+ @ stdcall KeAreApcsDisabled()
+ @ stdcall KeAttachProcess(ptr)
+ @ stdcall KeBugCheck(long)
+ @ stdcall KeBugCheckEx(long ptr ptr ptr ptr)
+ @ stdcall KeCancelTimer(ptr)
+ @ stdcall KeCapturePersistentThreadState(ptr long long long long long ptr)
+ @ stdcall KeClearEvent(ptr)
+ @ stdcall KeConnectInterrupt(ptr)
+ @ stdcall KeDelayExecutionThread(long long ptr)
+ @ stdcall KeDeregisterBugCheckCallback(ptr)
+ @ stdcall KeDeregisterBugCheckReasonCallback(ptr)
+ @ stdcall KeDeregisterNmiCallback(ptr)
+ @ stdcall KeDetachProcess()
+ @ stdcall KeDisconnectInterrupt(ptr)
+ @ stdcall KeEnterCriticalRegion() _KeEnterCriticalRegion
+ @ stdcall KeEnterGuardedRegion() _KeEnterGuardedRegion
+ @ stdcall KeEnterKernelDebugger()
+ @ stdcall KeFindConfigurationEntry(ptr long long ptr)
+ @ stdcall KeFindConfigurationNextEntry(ptr long long ptr ptr)
+ @ stdcall KeFlushEntireTb(long long)
+ @ stdcall KeFlushQueuedDpcs()
+ ;KeGenericCallDpc
+ @ stdcall KeGetCurrentThread()
+ @ stdcall KeGetPreviousMode()
+ @ stdcall KeGetRecommendedSharedDataAlignment()
+ #ifdef _M_IX86
+ ;KeI386AbiosCall
+ @ stdcall KeI386AllocateGdtSelectors(ptr long)
+ ;KeI386Call16BitCStyleFunction
+ ;KeI386Call16BitFunction
+ @ stdcall KeI386FlatToGdtSelector(long long long)
+ ;KeI386GetLid
+ @ extern KeI386MachineType
+ @ stdcall KeI386ReleaseGdtSelectors(ptr long)
+ ;KeI386ReleaseLid
+ ;KeI386SetGdtSelector
+ #endif
+ @ stdcall KeInitializeApc(ptr ptr long ptr ptr ptr long ptr)
+ @ stdcall KeInitializeCrashDumpHeader(long long ptr long ptr)
+ @ stdcall KeInitializeDeviceQueue(ptr)
+ @ stdcall KeInitializeDpc(ptr ptr ptr)
+ @ stdcall KeInitializeEvent(ptr long long)
+ @ fastcall KeInitializeGuardedMutex(ptr)
+ @ stdcall KeInitializeInterrupt(ptr ptr ptr ptr long long long long long long long)
+ @ stdcall KeInitializeMutant(ptr long)
+ @ stdcall KeInitializeMutex(ptr long)
+ @ stdcall KeInitializeQueue(ptr long)
+ @ stdcall KeInitializeSemaphore(ptr long long)
++#ifndef __x86_64__
+ @ stdcall KeInitializeSpinLock(ptr)
++#endif
+ @ stdcall KeInitializeThreadedDpc(ptr ptr ptr)
+ @ stdcall KeInitializeTimer(ptr)
+ @ stdcall KeInitializeTimerEx(ptr long)
+ @ stdcall KeInsertByKeyDeviceQueue(ptr ptr long)
+ @ stdcall KeInsertDeviceQueue(ptr ptr)
+ @ stdcall KeInsertHeadQueue(ptr ptr)
+ @ stdcall KeInsertQueue(ptr ptr)
+ @ stdcall KeInsertQueueApc(ptr ptr ptr long)
+ @ stdcall KeInsertQueueDpc(ptr ptr ptr)
+ @ stdcall KeInvalidateAllCaches()
+ @ stdcall KeIpiGenericCall(ptr ptr)
+ @ stdcall KeIsAttachedProcess()
+ @ stdcall KeIsExecutingDpc()
+ ;KeIsWaitListEmpty
+ @ stdcall KeLeaveCriticalRegion() _KeLeaveCriticalRegion
+ @ stdcall KeLeaveGuardedRegion() _KeLeaveGuardedRegion
+ @ extern KeLoaderBlock
+ @ extern KeNumberProcessors
+ @ stdcall KeProfileInterrupt(ptr)
+ @ stdcall KeProfileInterruptWithSource(ptr long)
+ @ stdcall KePulseEvent(ptr long long)
+ @ stdcall KeQueryActiveProcessors()
++#ifndef __x86_64__
+ @ stdcall KeQueryInterruptTime()
++#endif
+ @ stdcall KeQueryPriorityThread(ptr)
+ @ stdcall KeQueryRuntimeThread(ptr ptr)
++#ifndef __x86_64__
+ @ stdcall KeQuerySystemTime(ptr)
++#endif
+ @ stdcall KeQueryTickCount(ptr)
+ @ stdcall KeQueryTimeIncrement()
+ @ stdcall KeRaiseUserException(long)
+ @ stdcall KeReadStateEvent(ptr)
+ @ stdcall KeReadStateMutant(ptr)
+ @ stdcall KeReadStateMutex(ptr) KeReadStateMutant
+ @ stdcall KeReadStateQueue(ptr)
+ @ stdcall KeReadStateSemaphore(ptr)
+ @ stdcall KeReadStateTimer(ptr)
+ @ stdcall KeRegisterBugCheckCallback(ptr ptr ptr long ptr)
+ @ stdcall KeRegisterBugCheckReasonCallback(ptr ptr ptr ptr)
+ @ stdcall KeRegisterNmiCallback(ptr ptr)
+ @ fastcall KeReleaseGuardedMutex(ptr)
+ @ fastcall KeReleaseGuardedMutexUnsafe(ptr)
+ @ fastcall KeReleaseInStackQueuedSpinLockForDpc(ptr)
+ @ fastcall KeReleaseInStackQueuedSpinLockFromDpcLevel(ptr)
+ @ stdcall KeReleaseInterruptSpinLock(ptr long)
+ @ stdcall KeReleaseMutant(ptr long long long)
+ @ stdcall KeReleaseMutex(ptr long)
+ @ stdcall KeReleaseSemaphore(ptr long long long)
++#ifdef __x86_64__
++@ stdcall KeReleaseSpinLock(ptr long)
++#endif
+ @ fastcall KeReleaseSpinLockForDpc(ptr long)
+ @ stdcall KeReleaseSpinLockFromDpcLevel(ptr)
+ @ stdcall KeRemoveByKeyDeviceQueue(ptr long)
+ @ stdcall KeRemoveByKeyDeviceQueueIfBusy(ptr long)
+ @ stdcall KeRemoveDeviceQueue(ptr)
+ @ stdcall KeRemoveEntryDeviceQueue(ptr ptr)
+ @ stdcall KeRemoveQueue(ptr long ptr)
+ @ stdcall KeRemoveQueueDpc(ptr)
+ @ stdcall KeRemoveSystemServiceTable(long)
+ @ stdcall KeResetEvent(ptr)
+ @ stdcall KeRestoreFloatingPointState(ptr)
+ @ stdcall KeRevertToUserAffinityThread()
+ @ stdcall KeRundownQueue(ptr)
+ @ stdcall KeSaveFloatingPointState(ptr)
+ @ cdecl KeSaveStateForHibernate(ptr)
+ @ extern KeServiceDescriptorTable
+ @ stdcall KeSetAffinityThread(ptr long)
+ @ stdcall KeSetBasePriorityThread(ptr long)
+ @ stdcall KeSetDmaIoCoherency(long)
+ @ stdcall KeSetEvent(ptr long long)
+ @ stdcall KeSetEventBoostPriority(ptr ptr)
+ @ stdcall KeSetIdealProcessorThread(ptr long)
+ @ stdcall KeSetImportanceDpc(ptr long)
+ @ stdcall KeSetKernelStackSwapEnable(long)
+ @ stdcall KeSetPriorityThread(ptr long)
+ @ stdcall KeSetProfileIrql(long)
+ @ stdcall KeSetSystemAffinityThread(long)
+ @ stdcall KeSetTargetProcessorDpc(ptr long)
+ @ stdcall KeSetTimeIncrement(long long)
+ @ stdcall KeSetTimer(ptr long long ptr)
+ @ stdcall KeSetTimerEx(ptr long long long ptr)
+ ;KeSignalCallDpcDone
+ ;KeSignalCallDpcSynchronize
+ @ stdcall KeStackAttachProcess(ptr ptr)
+ @ stdcall KeSynchronizeExecution(ptr ptr ptr)
+ @ stdcall KeTerminateThread(long)
+ @ fastcall KeTestSpinLock(ptr)
+ @ extern KeTickCount
+ @ fastcall KeTryToAcquireGuardedMutex(ptr)
+ @ fastcall KeTryToAcquireSpinLockAtDpcLevel(ptr)
+ @ stdcall KeUnstackDetachProcess(ptr)
+ @ stdcall KeUpdateRunTime(ptr long)
+ #ifdef _M_IX86
+ @ stdcall KeUpdateSystemTime()
+ #else
+ @ stdcall KeUpdateSystemTime(ptr long long)
+ #endif
+ @ stdcall KeUserModeCallback(long ptr long ptr ptr)
+ @ stdcall KeWaitForMultipleObjects(long ptr long long long long ptr ptr)
+ @ stdcall KeWaitForMutexObject(ptr long long long ptr) KeWaitForSingleObject
+ @ stdcall KeWaitForSingleObject(ptr long long long ptr)
+ @ fastcall KefAcquireSpinLockAtDpcLevel(ptr)
+ @ fastcall KefReleaseSpinLockFromDpcLevel(ptr)
+ #ifdef _M_IX86
+ @ stdcall Kei386EoiHelper()
+ #endif
+ @ fastcall KiAcquireSpinLock(ptr)
+ @ extern KiBugCheckData
+ @ stdcall KiCheckForKernelApcDelivery()
+ #ifdef _M_IX86
+ @ stdcall KiCoprocessorError()
+ #endif
+ @ stdcall KiDeliverApc(long ptr ptr)
+ #ifdef _M_IX86
+ @ stdcall KiDispatchInterrupt()
+ #endif
+ @ extern KiEnableTimerWatchdog
+ @ stdcall KiIpiServiceRoutine(ptr ptr)
+ @ fastcall KiReleaseSpinLock(ptr)
+ @ cdecl KiUnexpectedInterrupt()
+ #ifdef _M_IX86
+ ;Kii386SpinOnSpinLock
+ #endif
+ @ stdcall LdrAccessResource(ptr ptr ptr ptr)
+ @ stdcall LdrEnumResources(ptr ptr long ptr ptr)
+ @ stdcall LdrFindResourceDirectory_U(ptr ptr long ptr)
+ @ stdcall LdrFindResource_U(ptr ptr long ptr)
+ @ extern LpcPortObjectType
+ @ stdcall LpcRequestPort(ptr ptr)
+ @ stdcall LpcRequestWaitReplyPort(ptr ptr ptr)
+ @ stdcall LsaCallAuthenticationPackage(long long long long long long long)
+ @ stdcall LsaDeregisterLogonProcess(long long)
+ @ stdcall LsaFreeReturnBuffer(ptr)
+ @ stdcall LsaLogonUser(ptr ptr long long ptr long ptr ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall LsaLookupAuthenticationPackage(long long long)
+ @ stdcall LsaRegisterLogonProcess(ptr ptr ptr)
+ @ extern Mm64BitPhysicalAddress
+ @ stdcall MmAddPhysicalMemory(ptr ptr)
+ @ stdcall MmAddVerifierThunks(ptr long)
+ @ stdcall MmAdjustWorkingSetSize(long long long long)
+ @ stdcall MmAdvanceMdl(ptr long)
+ @ stdcall MmAllocateContiguousMemory(long long long)
+ @ stdcall MmAllocateContiguousMemorySpecifyCache(long long long long long long long long)
+ @ stdcall MmAllocateMappingAddress(long long)
+ @ stdcall MmAllocateNonCachedMemory(long)
+ @ stdcall MmAllocatePagesForMdl(ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall MmAllocatePagesForMdlEx(long long long long long long long long long)
+ @ stdcall MmBuildMdlForNonPagedPool(ptr)
+ @ stdcall MmCanFileBeTruncated(ptr ptr)
+ ;MmCommitSessionMappedView
+ @ stdcall MmCreateMdl(ptr ptr long)
+ ;MmCreateMirror
+ @ stdcall MmCreateSection(ptr long ptr ptr long long ptr ptr)
+ @ stdcall MmDisableModifiedWriteOfSection(long)
+ @ stdcall MmFlushImageSection(ptr long)
+ @ stdcall MmForceSectionClosed(ptr long)
+ @ stdcall MmFreeContiguousMemory(ptr)
+ @ stdcall MmFreeContiguousMemorySpecifyCache(ptr long long)
+ @ stdcall MmFreeMappingAddress(ptr long)
+ @ stdcall MmFreeNonCachedMemory(ptr long)
+ @ stdcall MmFreePagesFromMdl(ptr)
+ @ stdcall MmGetPhysicalAddress(ptr)
+ @ stdcall MmGetPhysicalMemoryRanges()
+ @ stdcall MmGetSystemRoutineAddress(ptr)
+ @ stdcall MmGetVirtualForPhysical(long long)
+ @ stdcall MmGrowKernelStack(ptr)
+ @ extern MmHighestUserAddress
+ @ stdcall MmIsAddressValid(ptr)
+ @ stdcall MmIsDriverVerifying(ptr)
+ ;MmIsIoSpaceActive
+ @ stdcall MmIsNonPagedSystemAddressValid(ptr)
+ @ stdcall MmIsRecursiveIoFault()
+ @ stdcall MmIsThisAnNtAsSystem()
+ @ stdcall MmIsVerifierEnabled(ptr)
+ @ stdcall MmLockPagableDataSection(ptr)
+ @ stdcall MmLockPagableImageSection(ptr) MmLockPagableDataSection
+ @ stdcall MmLockPagableSectionByHandle(ptr)
+ @ stdcall MmMapIoSpace(long long long long)
+ @ stdcall MmMapLockedPages(ptr long)
+ @ stdcall MmMapLockedPagesSpecifyCache(ptr long long ptr long long)
+ @ stdcall MmMapLockedPagesWithReservedMapping(ptr long ptr long)
+ @ stdcall MmMapMemoryDumpMdl(ptr)
+ @ stdcall MmMapUserAddressesToPage(ptr long ptr)
+ @ stdcall MmMapVideoDisplay(long long long long)
+ @ stdcall MmMapViewInSessionSpace(ptr ptr ptr)
+ @ stdcall MmMapViewInSystemSpace(ptr ptr ptr)
+ @ stdcall MmMapViewOfSection(ptr ptr ptr long long ptr ptr long long long)
+ @ stdcall MmMarkPhysicalMemoryAsBad(ptr ptr)
+ @ stdcall MmMarkPhysicalMemoryAsGood(ptr ptr)
+ @ stdcall MmPageEntireDriver(ptr)
+ @ stdcall MmPrefetchPages(long ptr)
+ @ stdcall MmProbeAndLockPages(ptr long long)
+ @ stdcall MmProbeAndLockProcessPages(ptr ptr long long)
+ @ stdcall MmProbeAndLockSelectedPages(ptr ptr long long)
+ @ stdcall MmProtectMdlSystemAddress(ptr long)
+ @ stdcall MmQuerySystemSize()
+ @ stdcall MmRemovePhysicalMemory(ptr ptr)
+ @ stdcall MmResetDriverPaging(ptr)
+ @ extern MmSectionObjectType
+ @ stdcall MmSecureVirtualMemory(ptr long long)
+ @ stdcall MmSetAddressRangeModified(ptr long)
+ @ stdcall MmSetBankedSection(long long long long long long)
+ @ stdcall MmSizeOfMdl(ptr long)
+ @ extern MmSystemRangeStart
+ @ stdcall MmTrimAllSystemPagableMemory(long)
+ @ stdcall MmUnlockPagableImageSection(ptr)
+ @ stdcall MmUnlockPages(ptr)
+ @ stdcall MmUnmapIoSpace(ptr long)
+ @ stdcall MmUnmapLockedPages(ptr ptr)
+ @ stdcall MmUnmapReservedMapping(ptr long ptr)
+ @ stdcall MmUnmapVideoDisplay(ptr long)
+ @ stdcall MmUnmapViewInSessionSpace(ptr)
+ @ stdcall MmUnmapViewInSystemSpace(ptr)
+ @ stdcall MmUnmapViewOfSection(ptr ptr)
+ @ stdcall MmUnsecureVirtualMemory(ptr)
+ @ extern MmUserProbeAddress
+ @ extern NlsAnsiCodePage
+ @ extern NlsLeadByteInfo
+ @ extern NlsMbCodePageTag
+ @ extern NlsMbOemCodePageTag
+ @ extern NlsOemCodePage
+ @ extern NlsOemLeadByteInfo _NlsOemLeadByteInfo
+ @ stdcall NtAddAtom(wstr long ptr)
+ @ stdcall NtAdjustPrivilegesToken(ptr long ptr long ptr ptr)
+ @ stdcall NtAlertThread(ptr)
+ @ stdcall NtAllocateLocallyUniqueId(ptr)
+ @ stdcall NtAllocateUuids(ptr ptr ptr ptr)
+ @ stdcall NtAllocateVirtualMemory(ptr ptr long ptr long long)
+ @ extern NtBuildNumber
+ @ stdcall NtClose(ptr)
+ @ stdcall NtConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall NtCreateEvent(ptr long ptr long long)
+ @ stdcall NtCreateFile(ptr long ptr ptr ptr long long long long ptr long)
+ @ stdcall NtCreateSection(ptr long ptr ptr long long ptr)
+ @ stdcall NtCreateTimer(ptr long ptr long)
+ @ stdcall NtDeleteAtom(ptr)
+ @ stdcall NtDeleteFile(ptr)
+ @ stdcall NtDeviceIoControlFile(ptr ptr ptr ptr ptr long ptr long ptr long)
+ @ stdcall NtDuplicateObject(ptr ptr ptr ptr long long long)
+ @ stdcall NtDuplicateToken(ptr long ptr long long ptr)
+ @ stdcall NtFindAtom(wstr long ptr)
+ @ stdcall NtFreeVirtualMemory(ptr ptr ptr long)
+ @ stdcall NtFsControlFile(ptr ptr ptr ptr ptr long ptr long ptr long)
+ @ extern NtGlobalFlag
+ @ stdcall NtLockFile(ptr ptr ptr ptr ptr ptr ptr long long long)
+ @ stdcall NtMakePermanentObject(ptr)
+ @ stdcall NtMapViewOfSection(ptr ptr ptr long long ptr ptr long long long)
+ @ stdcall NtNotifyChangeDirectoryFile(ptr ptr ptr ptr ptr ptr long long long)
+ @ stdcall NtOpenEvent(ptr long ptr)
+ @ stdcall NtOpenFile(ptr long ptr ptr long long)
+ @ stdcall NtOpenProcess(ptr long ptr ptr)
+ @ stdcall NtOpenProcessToken(ptr long ptr)
+ @ stdcall NtOpenProcessTokenEx(ptr long long ptr)
+ @ stdcall NtOpenThread(ptr long ptr ptr)
+ @ stdcall NtOpenThreadToken(ptr long long ptr)
+ @ stdcall NtOpenThreadTokenEx(ptr long long long ptr)
+ @ stdcall NtQueryDirectoryFile(ptr ptr ptr ptr ptr ptr long long long ptr long)
+ @ stdcall NtQueryEaFile(ptr ptr ptr long long ptr long ptr long)
+ @ stdcall NtQueryInformationAtom(ptr long ptr long ptr)
+ @ stdcall NtQueryInformationFile(ptr ptr ptr long long)
+ @ stdcall NtQueryInformationProcess(ptr ptr ptr long ptr)
+ @ stdcall NtQueryInformationThread(ptr long ptr long ptr)
+ @ stdcall NtQueryInformationToken(ptr long ptr long ptr)
+ @ stdcall NtQueryQuotaInformationFile(ptr ptr ptr long long ptr long ptr long)
+ @ stdcall NtQuerySecurityObject(ptr long ptr long ptr)
+ @ stdcall NtQuerySystemInformation(long ptr long ptr)
+ @ stdcall NtQueryVolumeInformationFile(ptr ptr ptr long long)
+ @ stdcall NtReadFile(ptr ptr ptr ptr ptr ptr long ptr ptr)
+ @ stdcall NtRequestPort(ptr ptr)
+ @ stdcall NtRequestWaitReplyPort(ptr ptr ptr)
+ @ stdcall NtSetEaFile(ptr ptr ptr long)
+ @ stdcall NtSetEvent(ptr ptr)
+ @ stdcall NtSetInformationFile(ptr ptr ptr long long)
+ @ stdcall NtSetInformationProcess(ptr ptr ptr long)
+ @ stdcall NtSetInformationThread(ptr long ptr long)
+ @ stdcall NtSetQuotaInformationFile(ptr ptr ptr long)
+ @ stdcall NtSetSecurityObject(ptr long ptr)
+ @ stdcall NtSetVolumeInformationFile(ptr ptr ptr long long)
+ @ stdcall NtShutdownSystem(long)
+ @ stdcall NtTraceEvent(long long long ptr)
+ @ stdcall NtUnlockFile(ptr ptr ptr ptr long)
+ @ stdcall NtVdmControl(long ptr)
+ @ stdcall NtWaitForSingleObject(ptr long ptr)
+ @ stdcall NtWriteFile(ptr ptr ptr ptr ptr ptr long ptr ptr)
+ @ stdcall ObAssignSecurity(ptr ptr ptr ptr)
+ @ stdcall ObCheckCreateObjectAccess(ptr long ptr ptr long long ptr)
+ @ stdcall ObCheckObjectAccess(ptr ptr long long ptr)
+ @ stdcall ObCloseHandle(ptr long)
+ @ stdcall ObCreateObject(long ptr ptr long ptr long long long ptr)
+ @ stdcall ObCreateObjectType(ptr ptr ptr ptr)
+ ;ObDeleteCapturedInsertInfo
+ @ stdcall ObDereferenceObject(ptr)
+ @ stdcall ObDereferenceObjectDeferDelete(ptr)
+ @ stdcall ObDereferenceSecurityDescriptor(ptr long)
+ @ stdcall ObFindHandleForObject(ptr ptr ptr ptr ptr)
+ @ stdcall ObGetObjectSecurity(ptr ptr ptr)
+ @ stdcall ObInsertObject(ptr ptr long long ptr ptr)
+ @ stdcall ObIsKernelHandle(ptr)
+ @ stdcall ObLogSecurityDescriptor(ptr ptr long)
+ @ stdcall ObMakeTemporaryObject(ptr)
+ @ stdcall ObOpenObjectByName(ptr ptr long ptr long ptr ptr)
+ @ stdcall ObOpenObjectByPointer(ptr long ptr long ptr long ptr)
+ @ stdcall ObQueryNameString(ptr ptr long ptr)
+ @ stdcall ObQueryObjectAuditingByHandle(ptr ptr)
+ @ stdcall ObReferenceObjectByHandle(ptr long ptr long ptr ptr)
+ @ stdcall ObReferenceObjectByName(ptr long ptr long ptr long ptr ptr)
+ @ stdcall ObReferenceObjectByPointer(ptr long ptr long)
+ @ stdcall ObReferenceSecurityDescriptor(ptr long)
+ @ stdcall ObReleaseObjectSecurity(ptr long)
+ ;ObSetHandleAttributes@12
+ @ stdcall ObSetSecurityDescriptorInfo(ptr ptr ptr ptr long ptr)
+ @ stdcall ObSetSecurityObjectByPointer(ptr long ptr)
+ @ fastcall ObfDereferenceObject(ptr)
+ @ fastcall ObfReferenceObject(ptr)
+ ;PfxFindPrefix
+ ;PfxInitialize
+ ;PfxInsertPrefix
+ ;PfxRemovePrefix
+ @ stdcall PoCallDriver(ptr ptr)
+ ;PoCancelDeviceNotify
+ @ stdcall PoQueueShutdownWorkItem(ptr)
+ @ stdcall PoRegisterDeviceForIdleDetection(ptr long long long)
+ ;PoRegisterDeviceNotify
+ @ stdcall PoRegisterSystemState(ptr long)
+ @ stdcall PoRequestPowerIrp(ptr long long ptr ptr ptr)
+ ;PoRequestShutdownEvent
+ ;PoSetHiberRange
+ @ stdcall PoSetPowerState(ptr long long)
+ @ stdcall PoSetSystemState(long)
+ ;PoShutdownBugCheck
+ @ stdcall PoStartNextPowerIrp(ptr)
+ @ stdcall PoUnregisterSystemState(ptr)
+ @ stdcall ProbeForRead(ptr long long)
+ @ stdcall ProbeForWrite(ptr long long)
+ @ stdcall PsAssignImpersonationToken(ptr ptr)
+ @ stdcall PsChargePoolQuota(ptr long long)
+ @ stdcall PsChargeProcessNonPagedPoolQuota(ptr long)
+ @ stdcall PsChargeProcessPagedPoolQuota(ptr long)
+ @ stdcall PsChargeProcessPoolQuota(ptr long long)
+ @ stdcall PsCreateSystemProcess(ptr long ptr)
+ @ stdcall PsCreateSystemThread(ptr long ptr ptr ptr ptr ptr)
+ @ stdcall PsDereferenceImpersonationToken(ptr) PsDereferencePrimaryToken
+ @ stdcall PsDereferencePrimaryToken(ptr)
+ @ stdcall PsDisableImpersonation(ptr ptr)
+ @ stdcall PsEstablishWin32Callouts(ptr)
+ @ stdcall PsGetContextThread(ptr ptr long)
+ @ stdcall PsGetCurrentProcess() IoGetCurrentProcess
+ @ stdcall PsGetCurrentProcessId()
+ @ stdcall PsGetCurrentProcessSessionId()
+ @ stdcall PsGetCurrentProcessWin32Process()
+ @ stdcall PsGetCurrentThread() KeGetCurrentThread
+ @ stdcall PsGetCurrentThreadId()
+ @ stdcall PsGetCurrentThreadPreviousMode()
+ ;PsGetCurrentThreadProcess
+ ;PsGetCurrentThreadProcessId
+ @ stdcall PsGetCurrentThreadStackBase()
+ @ stdcall PsGetCurrentThreadStackLimit()
+ ;PsGetCurrentThreadTeb
+ @ stdcall PsGetCurrentThreadWin32Thread()
+ ;PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion
+ @ stdcall PsGetJobLock(ptr)
+ @ stdcall PsGetJobSessionId(ptr)
+ @ stdcall PsGetJobUIRestrictionsClass(ptr)
+ @ stdcall PsGetProcessCreateTimeQuadPart(ptr)
+ @ stdcall PsGetProcessDebugPort(ptr)
+ @ stdcall PsGetProcessExitProcessCalled(ptr)
+ @ stdcall PsGetProcessExitStatus(ptr)
+ @ stdcall PsGetProcessExitTime()
+ @ stdcall PsGetProcessId(ptr)
+ @ stdcall PsGetProcessImageFileName(ptr)
+ @ stdcall PsGetProcessInheritedFromUniqueProcessId(ptr)
+ @ stdcall PsGetProcessJob(ptr)
+ @ stdcall PsGetProcessPeb(ptr)
+ @ stdcall PsGetProcessPriorityClass(ptr)
+ @ stdcall PsGetProcessSectionBaseAddress(ptr)
+ @ stdcall PsGetProcessSecurityPort(ptr)
+ @ stdcall PsGetProcessSessionId(ptr)
+ ;PsGetProcessSessionIdEx
+ @ stdcall PsGetProcessWin32Process(ptr)
+ @ stdcall PsGetProcessWin32WindowStation(ptr)
+ @ stdcall PsGetThreadFreezeCount(ptr)
+ @ stdcall PsGetThreadHardErrorsAreDisabled(ptr)
+ @ stdcall PsGetThreadId(ptr)
+ @ stdcall PsGetThreadProcess(ptr)
+ @ stdcall PsGetThreadProcessId(ptr)
+ @ stdcall PsGetThreadSessionId(ptr)
+ @ stdcall PsGetThreadTeb(ptr)
+ @ stdcall PsGetThreadWin32Thread(ptr)
+ @ stdcall PsGetVersion(ptr ptr ptr ptr)
+ @ stdcall PsImpersonateClient(ptr ptr long long long)
+ @ extern PsInitialSystemProcess
+ @ stdcall PsIsProcessBeingDebugged(ptr)
+ @ stdcall PsIsSystemProcess(ptr)
+ @ stdcall PsIsSystemThread(ptr)
+ @ stdcall PsIsThreadImpersonating(ptr)
+ @ stdcall PsIsThreadTerminating(ptr)
+ @ extern PsJobType
+ @ stdcall PsLookupProcessByProcessId(ptr ptr)
+ @ stdcall PsLookupProcessThreadByCid(ptr ptr ptr)
+ @ stdcall PsLookupThreadByThreadId(ptr ptr)
+ @ extern PsProcessType _PsProcessType
+ @ stdcall PsReferenceImpersonationToken(ptr ptr ptr ptr)
+ @ stdcall PsReferencePrimaryToken(ptr)
+ @ stdcall PsRemoveCreateThreadNotifyRoutine(ptr)
+ @ stdcall PsRemoveLoadImageNotifyRoutine(ptr)
+ @ stdcall PsRestoreImpersonation(ptr ptr)
+ @ stdcall PsReturnPoolQuota(ptr long long)
+ @ stdcall PsReturnProcessNonPagedPoolQuota(ptr long)
+ @ stdcall PsReturnProcessPagedPoolQuota(ptr long)
+ @ stdcall PsRevertThreadToSelf(ptr)
+ @ stdcall PsRevertToSelf()
+ @ stdcall PsSetContextThread(ptr ptr long)
+ @ stdcall PsSetCreateProcessNotifyRoutine(ptr long)
+ @ stdcall PsSetCreateThreadNotifyRoutine(ptr)
+ @ stdcall PsSetJobUIRestrictionsClass(ptr long)
+ @ stdcall PsSetLegoNotifyRoutine(ptr)
+ @ stdcall PsSetLoadImageNotifyRoutine(ptr)
+ @ stdcall PsSetProcessPriorityByClass(ptr ptr)
+ @ stdcall PsSetProcessPriorityClass(ptr long)
+ @ stdcall PsSetProcessSecurityPort(ptr ptr)
+ @ stdcall PsSetProcessWin32Process(ptr ptr)
+ @ stdcall PsSetProcessWindowStation(ptr ptr)
+ @ stdcall PsSetThreadHardErrorsAreDisabled(ptr long)
+ @ stdcall PsSetThreadWin32Thread(ptr ptr)
+ @ stdcall PsTerminateSystemThread(long)
+ @ extern PsThreadType _PsThreadType
+ ;PsWrapApcWow64Thread
++#ifndef __x86_64__
+ @ stdcall READ_REGISTER_BUFFER_UCHAR(ptr ptr long)
+ @ stdcall READ_REGISTER_BUFFER_ULONG(ptr ptr long)
+ @ stdcall READ_REGISTER_BUFFER_USHORT(ptr ptr long)
+ @ stdcall READ_REGISTER_UCHAR(ptr)
+ @ stdcall READ_REGISTER_ULONG(ptr)
+ @ stdcall READ_REGISTER_USHORT(ptr)
++#endif
+ @ stdcall KeRosDumpStackFrames(ptr long)
+ @ stdcall RtlAbsoluteToSelfRelativeSD(ptr ptr ptr)
+ @ stdcall RtlAddAccessAllowedAce(ptr long long ptr)
+ @ stdcall RtlAddAccessAllowedAceEx(ptr long long long ptr)
+ @ stdcall RtlAddAce(ptr long long ptr long)
+ @ stdcall RtlAddAtomToAtomTable(ptr wstr ptr)
+ @ stdcall RtlAddRange(ptr long long long long long long ptr ptr)
+ @ stdcall RtlAllocateAndInitializeSid(ptr long long long long long long long long long ptr)
+ @ stdcall RtlAllocateHeap(ptr long long)
+ @ stdcall RtlAnsiCharToUnicodeChar(ptr)
+ @ stdcall RtlAnsiStringToUnicodeSize(ptr) RtlxAnsiStringToUnicodeSize
+ @ stdcall RtlAnsiStringToUnicodeString(ptr ptr long)
+ @ stdcall RtlAppendAsciizToString(ptr str)
+ @ stdcall RtlAppendStringToString(ptr ptr)
+ @ stdcall RtlAppendUnicodeStringToString(ptr ptr)
+ @ stdcall RtlAppendUnicodeToString(ptr wstr)
+ @ stdcall RtlAreAllAccessesGranted(long long)
+ @ stdcall RtlAreAnyAccessesGranted(long long)
+ @ stdcall RtlAreBitsClear(ptr long long)
+ @ stdcall RtlAreBitsSet(ptr long long)
+ @ stdcall RtlAssert(str str long str)
+ @ stdcall RtlCaptureContext(ptr)
+ @ stdcall RtlCaptureStackBackTrace(long long ptr ptr)
+ @ stdcall RtlCharToInteger(str long ptr)
+ @ stdcall RtlCheckRegistryKey(long wstr)
+ @ stdcall RtlClearAllBits(ptr)
+ @ stdcall RtlClearBit(ptr long)
+ @ stdcall RtlClearBits(ptr long long)
+ @ stdcall RtlCompareMemory(ptr ptr long)
+ @ stdcall RtlCompareMemoryUlong(ptr long long)
+ @ stdcall RtlCompareString(ptr ptr long)
+ @ stdcall RtlCompareUnicodeString(ptr ptr long)
+ @ stdcall RtlCompressBuffer(long ptr long ptr long long ptr ptr)
+ @ stdcall RtlCompressChunks(ptr long ptr long ptr long ptr)
+ @ stdcall RtlConvertLongToLargeInteger(long)
+ @ stdcall RtlConvertSidToUnicodeString(ptr ptr long)
+ @ stdcall RtlConvertUlongToLargeInteger(long)
+ @ stdcall RtlCopyLuid(ptr ptr)
+ @ stdcall RtlCopyRangeList(ptr ptr)
+ @ stdcall RtlCopySid(long ptr ptr)
+ @ stdcall RtlCopyString(ptr ptr)
+ @ stdcall RtlCopyUnicodeString(ptr ptr)
+ @ stdcall RtlCreateAcl(ptr long long)
+ @ stdcall RtlCreateAtomTable(long ptr)
+ @ stdcall RtlCreateHeap(long ptr long long ptr ptr)
+ @ stdcall RtlCreateRegistryKey(long wstr)
+ @ stdcall RtlCreateSecurityDescriptor(ptr long)
+ @ stdcall RtlCreateSystemVolumeInformationFolder(ptr)
+ @ stdcall RtlCreateUnicodeString(ptr wstr)
+ @ stdcall RtlCustomCPToUnicodeN(ptr wstr long ptr ptr long)
+ @ stdcall RtlDecompressBuffer(long ptr long ptr long ptr)
+ @ stdcall RtlDecompressChunks(ptr long ptr long ptr long ptr)
+ @ stdcall RtlDecompressFragment(long ptr long ptr long long ptr ptr)
+ @ stdcall RtlDelete(ptr)
+ @ stdcall RtlDeleteAce(ptr long)
+ @ stdcall RtlDeleteAtomFromAtomTable(ptr ptr)
+ @ stdcall RtlDeleteElementGenericTable(ptr ptr)
+ @ stdcall RtlDeleteElementGenericTableAvl(ptr ptr)
+ @ stdcall RtlDeleteNoSplay(ptr ptr)
+ @ stdcall RtlDeleteOwnersRanges(ptr ptr)
+ @ stdcall RtlDeleteRange(ptr long long long long ptr)
+ @ stdcall RtlDeleteRegistryValue(long wstr wstr)
+ @ stdcall RtlDescribeChunk(long ptr ptr ptr ptr)
+ @ stdcall RtlDestroyAtomTable(ptr)
+ @ stdcall RtlDestroyHeap(ptr)
+ @ stdcall RtlDowncaseUnicodeString(ptr ptr long)
+ @ stdcall RtlEmptyAtomTable(ptr long)
+ @ stdcall RtlEnlargedIntegerMultiply(long long)
+ @ stdcall RtlEnlargedUnsignedDivide(long long long ptr)
+ @ stdcall RtlEnlargedUnsignedMultiply(long long)
+ @ stdcall RtlEnumerateGenericTable(ptr long)
+ @ stdcall RtlEnumerateGenericTableAvl(ptr long)
+ @ stdcall RtlEnumerateGenericTableLikeADirectory(ptr ptr ptr long ptr ptr ptr)
+ @ stdcall RtlEnumerateGenericTableWithoutSplaying(ptr ptr)
+ @ stdcall RtlEnumerateGenericTableWithoutSplayingAvl(ptr ptr)
+ @ stdcall RtlEqualLuid(ptr ptr)
+ @ stdcall RtlEqualSid(ptr ptr)
+ @ stdcall RtlEqualString(ptr ptr long)
+ @ stdcall RtlEqualUnicodeString(ptr ptr long)
+ @ stdcall RtlExtendedIntegerMultiply(long long long)
+ @ stdcall RtlExtendedLargeIntegerDivide(long long long ptr)
+ @ stdcall RtlExtendedMagicDivide(long long long long long)
+ @ stdcall RtlFillMemory(ptr long long)
+ @ stdcall RtlFillMemoryUlong(ptr long long)
+ @ stdcall RtlFindClearBits(ptr long long)
+ @ stdcall RtlFindClearBitsAndSet(ptr long long)
+ @ stdcall RtlFindClearRuns(ptr ptr long long)
+ @ stdcall RtlFindFirstRunClear(ptr ptr)
+ @ stdcall RtlFindLastBackwardRunClear(ptr long ptr)
+ @ stdcall RtlFindLeastSignificantBit(long long)
+ @ stdcall RtlFindLongestRunClear(ptr ptr)
+ @ stdcall RtlFindMessage(ptr long long long ptr)
+ @ stdcall RtlFindMostSignificantBit(long long)
+ @ stdcall RtlFindNextForwardRunClear(ptr long ptr)
+ @ stdcall RtlFindRange(ptr long long long long long long long long ptr ptr ptr)
+ @ stdcall RtlFindSetBits(ptr long long)
+ @ stdcall RtlFindSetBitsAndClear(ptr long long)
+ @ stdcall RtlFindUnicodePrefix(ptr ptr long)
+ @ stdcall RtlFormatCurrentUserKeyPath(ptr)
+ @ stdcall RtlFreeAnsiString(ptr)
+ @ stdcall RtlFreeHeap(ptr long ptr)
+ @ stdcall RtlFreeOemString(ptr)
+ @ stdcall RtlFreeRangeList(ptr)
+ @ stdcall RtlFreeUnicodeString(ptr)
+ @ stdcall RtlGUIDFromString(ptr ptr)
+ @ stdcall RtlGenerate8dot3Name(ptr ptr long ptr)
+ @ stdcall RtlGetAce(ptr long ptr)
+ @ stdcall RtlGetCallersAddress(ptr ptr)
+ @ stdcall RtlGetCompressionWorkSpaceSize(long ptr ptr)
+ @ stdcall RtlGetDaclSecurityDescriptor(ptr ptr ptr ptr)
+ @ stdcall RtlGetDefaultCodePage(ptr ptr)
+ @ stdcall RtlGetElementGenericTable(ptr long)
+ @ stdcall RtlGetElementGenericTableAvl(ptr long)
+ @ stdcall RtlGetFirstRange(ptr ptr ptr)
+ @ stdcall RtlGetGroupSecurityDescriptor(ptr ptr ptr)
+ @ stdcall RtlGetNextRange(ptr ptr long)
+ @ stdcall RtlGetNtGlobalFlags()
+ @ stdcall RtlGetOwnerSecurityDescriptor(ptr ptr ptr)
+ @ stdcall RtlGetSaclSecurityDescriptor(ptr ptr ptr ptr)
+ @ stdcall RtlGetSetBootStatusData(ptr long long ptr long long)
+ @ stdcall RtlGetVersion(ptr)
+ @ stdcall RtlHashUnicodeString(ptr long long ptr)
+ @ stdcall RtlImageDirectoryEntryToData(ptr long long ptr)
+ @ stdcall RtlImageNtHeader(ptr)
+ @ stdcall RtlInitAnsiString(ptr str)
+ @ stdcall RtlInitAnsiStringEx(ptr str)
+ @ stdcall RtlInitCodePageTable(ptr ptr)
+ @ stdcall RtlInitString(ptr str)
+ @ stdcall RtlInitUnicodeString(ptr wstr)
+ @ stdcall RtlInitUnicodeStringEx(ptr wstr)
+ @ stdcall RtlInitializeBitMap(ptr ptr long)
+ @ stdcall RtlInitializeGenericTable(ptr ptr ptr ptr ptr)
+ @ stdcall RtlInitializeGenericTableAvl(ptr ptr ptr ptr ptr)
+ @ stdcall RtlInitializeRangeList(ptr)
+ @ stdcall RtlInitializeSid(ptr ptr long)
+ @ stdcall RtlInitializeUnicodePrefix(ptr)
+ @ stdcall RtlInsertElementGenericTable(ptr ptr long ptr)
+ @ stdcall RtlInsertElementGenericTableAvl(ptr ptr long ptr)
+ @ stdcall RtlInsertElementGenericTableFull(ptr ptr long ptr ptr long)
+ @ stdcall RtlInsertElementGenericTableFullAvl(ptr ptr long ptr ptr ptr)
+ @ stdcall RtlInsertUnicodePrefix(ptr ptr ptr)
+ @ stdcall RtlInt64ToUnicodeString(long long long ptr)
+ @ stdcall RtlIntegerToChar(long long long ptr)
+ @ stdcall RtlIntegerToUnicode(long long long ptr)
+ @ stdcall RtlIntegerToUnicodeString(long long ptr)
+ @ stdcall RtlInvertRangeList(ptr ptr)
+ @ stdcall RtlIpv4AddressToStringA(ptr ptr)
+ @ stdcall RtlIpv4AddressToStringExA(ptr long ptr ptr)
+ @ stdcall RtlIpv4AddressToStringExW(ptr long ptr ptr)
+ @ stdcall RtlIpv4AddressToStringW(ptr ptr)
+ @ stdcall RtlIpv4StringToAddressA(str long ptr ptr)
+ @ stdcall RtlIpv4StringToAddressExA(str long ptr ptr)
+ @ stdcall RtlIpv4StringToAddressExW(wstr long ptr ptr)
+ @ stdcall RtlIpv4StringToAddressW(wstr long ptr ptr)
+ @ stdcall RtlIpv6AddressToStringA(ptr ptr)
+ @ stdcall RtlIpv6AddressToStringExA(ptr long long ptr ptr)
+ @ stdcall RtlIpv6AddressToStringExW(ptr long long ptr ptr)
+ @ stdcall RtlIpv6AddressToStringW(ptr ptr)
+ @ stdcall RtlIpv6StringToAddressA(str ptr ptr)
+ @ stdcall RtlIpv6StringToAddressExA(str ptr ptr ptr)
+ @ stdcall RtlIpv6StringToAddressExW(wstr ptr ptr ptr)
+ @ stdcall RtlIpv6StringToAddressW(wstr ptr ptr)
+ @ stdcall RtlIsGenericTableEmpty(ptr)
+ @ stdcall RtlIsGenericTableEmptyAvl(ptr)
+ @ stdcall RtlIsNameLegalDOS8Dot3(ptr ptr ptr)
+ @ stdcall RtlIsRangeAvailable(ptr long long long long long long ptr ptr ptr)
+ @ stdcall RtlIsValidOemCharacter(ptr)
+ @ stdcall RtlLargeIntegerAdd(long long long long)
+ @ stdcall RtlLargeIntegerArithmeticShift(long long long)
+ @ stdcall RtlLargeIntegerDivide(long long long long ptr)
+ @ stdcall RtlLargeIntegerNegate(long long)
+ @ stdcall RtlLargeIntegerShiftLeft(long long long)
+ @ stdcall RtlLargeIntegerShiftRight(long long long)
+ @ stdcall RtlLargeIntegerSubtract(long long long long)
+ @ stdcall RtlLengthRequiredSid(long)
+ @ stdcall RtlLengthSecurityDescriptor(ptr)
+ @ stdcall RtlLengthSid(ptr)
+ @ stdcall RtlLockBootStatusData(ptr)
+ @ stdcall RtlLookupAtomInAtomTable(ptr wstr ptr)
+ @ stdcall RtlLookupElementGenericTable(ptr ptr)
+ @ stdcall RtlLookupElementGenericTableAvl(ptr ptr)
+ @ stdcall RtlLookupElementGenericTableFull(ptr ptr ptr ptr)
+ @ stdcall RtlLookupElementGenericTableFullAvl(ptr ptr ptr ptr)
+ @ stdcall RtlMapGenericMask(ptr ptr)
+ @ stdcall RtlMapSecurityErrorToNtStatus(long)
+ @ stdcall RtlMergeRangeLists(ptr ptr ptr long)
+ @ stdcall RtlMoveMemory(ptr ptr long)
+ @ stdcall RtlMultiByteToUnicodeN(ptr long ptr str long)
+ @ stdcall RtlMultiByteToUnicodeSize(ptr str long)
+ @ stdcall RtlNextUnicodePrefix(ptr long)
+ @ stdcall RtlNtStatusToDosError(long)
+ @ stdcall RtlNtStatusToDosErrorNoTeb(long)
+ @ stdcall RtlNumberGenericTableElements(ptr)
+ @ stdcall RtlNumberGenericTableElementsAvl(ptr)
+ @ stdcall RtlNumberOfClearBits(ptr)
+ @ stdcall RtlNumberOfSetBits(ptr)
+ @ stdcall RtlOemStringToCountedUnicodeString(ptr ptr long)
+ @ stdcall RtlOemStringToUnicodeSize(ptr) RtlxOemStringToUnicodeSize
+ @ stdcall RtlOemStringToUnicodeString(ptr ptr long)
+ @ stdcall RtlOemToUnicodeN(wstr long ptr ptr long)
+ @ stdcall RtlPinAtomInAtomTable(ptr ptr)
+ @ fastcall RtlPrefetchMemoryNonTemporal(ptr long)
+ @ stdcall RtlPrefixString(ptr ptr long)
+ @ stdcall RtlPrefixUnicodeString(ptr ptr long)
+ @ stdcall RtlQueryAtomInAtomTable(ptr ptr ptr ptr ptr ptr)
+ @ stdcall RtlQueryRegistryValues(long wstr ptr ptr ptr)
+ @ stdcall RtlQueryTimeZoneInformation(ptr)
+ @ stdcall RtlRaiseException(ptr)
+ @ stdcall RtlRandom(ptr)
+ @ stdcall RtlRandomEx(ptr)
+ @ stdcall RtlRealPredecessor(ptr)
+ @ stdcall RtlRealSuccessor(ptr)
+ @ stdcall RtlRemoveUnicodePrefix(ptr ptr)
+ @ stdcall RtlReserveChunk(long ptr ptr ptr long)
+ @ stdcall RtlSecondsSince1970ToTime(long ptr)
+ @ stdcall RtlSecondsSince1980ToTime(long ptr)
+ @ stdcall RtlSelfRelativeToAbsoluteSD(ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall RtlSelfRelativeToAbsoluteSD2(ptr long)
+ @ stdcall RtlSetAllBits(ptr)
+ @ stdcall RtlSetBit(ptr long)
+ @ stdcall RtlSetBits(ptr long long)
+ @ stdcall RtlSetDaclSecurityDescriptor(ptr long ptr long)
+ @ stdcall RtlSetGroupSecurityDescriptor(ptr ptr long)
+ @ stdcall RtlSetOwnerSecurityDescriptor(ptr ptr long)
+ @ stdcall RtlSetSaclSecurityDescriptor(ptr long ptr long)
+ @ stdcall RtlSetTimeZoneInformation(ptr)
+ @ stdcall RtlSizeHeap(ptr long ptr)
+ @ stdcall RtlSplay(ptr)
+ @ stdcall RtlStringFromGUID(ptr ptr)
+ @ stdcall RtlSubAuthorityCountSid(ptr)
+ @ stdcall RtlSubAuthoritySid(ptr long)
+ @ stdcall RtlSubtreePredecessor(ptr)
+ @ stdcall RtlSubtreeSuccessor(ptr)
+ @ stdcall RtlTestBit(ptr long)
+ @ stdcall RtlTimeFieldsToTime(ptr ptr)
+ @ stdcall RtlTimeToElapsedTimeFields(ptr ptr)
+ @ stdcall RtlTimeToSecondsSince1970(ptr ptr)
+ @ stdcall RtlTimeToSecondsSince1980(ptr ptr)
+ @ stdcall RtlTimeToTimeFields(ptr ptr)
+ ;RtlTraceDatabaseAdd
+ ;RtlTraceDatabaseCreate
+ ;RtlTraceDatabaseDestroy
+ ;RtlTraceDatabaseEnumerate
+ ;RtlTraceDatabaseFind
+ ;RtlTraceDatabaseLock
+ ;RtlTraceDatabaseUnlock
+ ;RtlTraceDatabaseValidate
++#ifndef __x86_64__
+ @ fastcall RtlUlongByteSwap(long)
+ @ fastcall RtlUlonglongByteSwap(long long)
++#endif
+ @ stdcall RtlUnicodeStringToAnsiSize(ptr) RtlxUnicodeStringToAnsiSize
+ @ stdcall RtlUnicodeStringToAnsiString(ptr ptr long)
+ @ stdcall RtlUnicodeStringToCountedOemString(ptr ptr long)
+ @ stdcall RtlUnicodeStringToInteger(ptr long ptr)
+ @ stdcall RtlUnicodeStringToOemSize(ptr) RtlxUnicodeStringToOemSize
+ @ stdcall RtlUnicodeStringToOemString(ptr ptr long)
+ @ stdcall RtlUnicodeToCustomCPN(ptr ptr long ptr wstr long)
+ @ stdcall RtlUnicodeToMultiByteN(ptr long ptr wstr long)
+ @ stdcall RtlUnicodeToMultiByteSize(ptr wstr long)
+ @ stdcall RtlUnicodeToOemN(ptr long ptr wstr long)
+ @ stdcall RtlUnlockBootStatusData(ptr)
+ @ stdcall RtlUnwind(ptr ptr ptr ptr)
+ @ stdcall RtlUpcaseUnicodeChar(long)
+ @ stdcall RtlUpcaseUnicodeString(ptr ptr long)
+ @ stdcall RtlUpcaseUnicodeStringToAnsiString(ptr ptr long)
+ @ stdcall RtlUpcaseUnicodeStringToCountedOemString(ptr ptr long)
+ @ stdcall RtlUpcaseUnicodeStringToOemString(ptr ptr long)
+ @ stdcall RtlUpcaseUnicodeToCustomCPN(ptr ptr long ptr wstr long)
+ @ stdcall RtlUpcaseUnicodeToMultiByteN(ptr long ptr wstr long)
+ @ stdcall RtlUpcaseUnicodeToOemN(ptr long ptr wstr long)
+ @ stdcall RtlUpperChar(long)
+ @ stdcall RtlUpperString(ptr ptr)
++#ifndef __x86_64__
+ @ fastcall RtlUshortByteSwap(long)
++#endif
+ @ stdcall RtlValidRelativeSecurityDescriptor(ptr long long)
+ @ stdcall RtlValidSecurityDescriptor(ptr)
+ @ stdcall RtlValidSid(ptr)
+ @ stdcall RtlVerifyVersionInfo(ptr long long long)
+ @ stdcall RtlVolumeDeviceToDosName(ptr ptr)
+ @ stdcall RtlWalkFrameChain(ptr long long)
+ @ stdcall RtlWriteRegistryValue(long wstr wstr long ptr long)
+ @ stdcall RtlZeroHeap(ptr long)
+ @ stdcall RtlZeroMemory(ptr long)
+ @ stdcall RtlxAnsiStringToUnicodeSize(ptr)
+ @ stdcall RtlxOemStringToUnicodeSize(ptr)
+ @ stdcall RtlxUnicodeStringToAnsiSize(ptr)
+ @ stdcall RtlxUnicodeStringToOemSize(ptr)
+ @ stdcall SeAccessCheck(ptr ptr ptr long long ptr ptr long ptr ptr)
+ @ stdcall SeAppendPrivileges(ptr ptr)
+ @ stdcall SeAssignSecurity(ptr ptr ptr long ptr ptr ptr)
+ @ stdcall SeAssignSecurityEx(ptr ptr ptr ptr long long ptr ptr ptr)
+ @ stdcall SeAuditHardLinkCreation(ptr ptr long)
+ @ stdcall SeAuditingFileEvents(long ptr)
+ @ stdcall SeAuditingFileEventsWithContext(long ptr ptr)
+ @ stdcall SeAuditingFileOrGlobalEvents(long ptr ptr)
+ @ stdcall SeAuditingHardLinkEvents(long ptr)
+ @ stdcall SeAuditingHardLinkEventsWithContext(long ptr ptr)
+ @ stdcall SeCaptureSecurityDescriptor(ptr long long long ptr)
+ @ stdcall SeCaptureSubjectContext(ptr)
+ @ stdcall SeCloseObjectAuditAlarm(ptr ptr long)
+ @ stdcall SeCreateAccessState(ptr ptr long ptr)
+ @ stdcall SeCreateClientSecurity(ptr ptr long ptr)
+ @ stdcall SeCreateClientSecurityFromSubjectContext(ptr ptr long ptr)
+ @ stdcall SeDeassignSecurity(ptr)
+ @ stdcall SeDeleteAccessState(ptr)
+ @ stdcall SeDeleteObjectAuditAlarm(ptr ptr)
+ @ extern SeExports
+ @ stdcall SeFilterToken(ptr long ptr ptr ptr ptr)
+ @ stdcall SeFreePrivileges(ptr)
+ @ stdcall SeImpersonateClient(ptr ptr)
+ @ stdcall SeImpersonateClientEx(ptr ptr)
+ @ stdcall SeLockSubjectContext(ptr)
+ @ stdcall SeMarkLogonSessionForTerminationNotification(ptr)
+ @ stdcall SeOpenObjectAuditAlarm(ptr ptr ptr ptr ptr long long long ptr)
+ @ stdcall SeOpenObjectForDeleteAuditAlarm(ptr ptr ptr ptr ptr long long long ptr)
+ @ stdcall SePrivilegeCheck(ptr ptr long)
+ @ stdcall SePrivilegeObjectAuditAlarm(ptr ptr long ptr long long)
+ @ extern SePublicDefaultDacl
+ @ stdcall SeQueryAuthenticationIdToken(ptr ptr)
+ @ stdcall SeQueryInformationToken(ptr long ptr)
+ @ stdcall SeQuerySecurityDescriptorInfo(ptr ptr ptr ptr)
+ @ stdcall SeQuerySessionIdToken(ptr ptr)
+ @ stdcall SeRegisterLogonSessionTerminatedRoutine(ptr)
+ @ stdcall SeReleaseSecurityDescriptor(ptr long long)
+ @ stdcall SeReleaseSubjectContext(ptr)
+ @ stdcall SeSetAccessStateGenericMapping(ptr ptr)
+ ;SeSetAuditParameter
+ @ stdcall SeSetSecurityDescriptorInfo(ptr ptr ptr ptr long ptr)
+ @ stdcall SeSetSecurityDescriptorInfoEx(ptr ptr ptr ptr long long ptr)
+ @ stdcall SeSinglePrivilegeCheck(long long long)
+ @ extern SeSystemDefaultDacl
+ @ stdcall SeTokenImpersonationLevel(ptr)
+ @ stdcall SeTokenIsAdmin(ptr)
+ @ stdcall SeTokenIsRestricted(ptr)
+ @ stdcall SeTokenIsWriteRestricted(ptr)
+ @ stdcall SeTokenType(ptr)
+ @ stdcall SeUnlockSubjectContext(ptr)
+ @ stdcall SeUnregisterLogonSessionTerminatedRoutine(ptr)
+ @ stdcall SeValidSecurityDescriptor(long ptr)
+ @ stdcall VerSetConditionMask(long long long long)
+ ;VfFailDeviceNode
+ ;VfFailDriver
+ ;VfFailSystemBIOS
+ ;VfIsVerificationEnabled
++#ifndef __x86_64__
+ @ stdcall WRITE_REGISTER_BUFFER_UCHAR(ptr ptr long)
+ @ stdcall WRITE_REGISTER_BUFFER_ULONG(ptr ptr long)
+ @ stdcall WRITE_REGISTER_BUFFER_USHORT(ptr ptr long)
+ @ stdcall WRITE_REGISTER_UCHAR(ptr long)
+ @ stdcall WRITE_REGISTER_ULONG(ptr long)
+ @ stdcall WRITE_REGISTER_USHORT(ptr long)
++#endif
+ ;WmiFlushTrace
+ ;WmiGetClock
+ ;WmiQueryTrace
+ @ stdcall WmiQueryTraceInformation(long ptr long ptr ptr)
+ ;WmiStartTrace
+ ;WmiStopTrace
+ ;WmiTraceFastEvent
+ @ cdecl WmiTraceMessage()
+ @ stdcall WmiTraceMessageVa(ptr long ptr long long)
+ ;WmiUpdateTrace
+ ;XIPDispatch
+ @ stdcall ZwAccessCheckAndAuditAlarm(ptr ptr ptr ptr ptr long ptr long ptr ptr ptr)
+ @ stdcall ZwAddBootEntry(ptr long)
+ @ stdcall ZwAddDriverEntry(ptr long)
+ @ stdcall ZwAdjustPrivilegesToken(ptr long ptr long ptr ptr)
+ @ stdcall ZwAlertThread(ptr)
+ @ stdcall ZwAllocateVirtualMemory(ptr ptr long ptr long long)
+ @ stdcall ZwAssignProcessToJobObject(ptr ptr)
+ @ stdcall ZwCancelIoFile(ptr ptr)
+ @ stdcall ZwCancelTimer(ptr ptr)
+ @ stdcall ZwClearEvent(ptr)
+ @ stdcall ZwClose(ptr)
+ @ stdcall ZwCloseObjectAuditAlarm(ptr ptr long)
+ @ stdcall ZwConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall ZwCreateDirectoryObject(ptr long ptr)
+ @ stdcall ZwCreateEvent(ptr long ptr long long)
+ @ stdcall ZwCreateFile(ptr long ptr ptr ptr long long long long ptr long)
+ @ stdcall ZwCreateJobObject(ptr long ptr)
+ @ stdcall ZwCreateKey(ptr long ptr long ptr long ptr)
+ @ stdcall ZwCreateSection(ptr long ptr ptr long long ptr)
+ @ stdcall ZwCreateSymbolicLinkObject(ptr long ptr ptr)
+ @ stdcall ZwCreateTimer(ptr long ptr long)
+ @ stdcall ZwDeleteBootEntry(long)
+ @ stdcall ZwDeleteDriverEntry(long)
+ @ stdcall ZwDeleteFile(ptr)
+ @ stdcall ZwDeleteKey(ptr)
+ @ stdcall ZwDeleteValueKey(ptr ptr)
+ @ stdcall ZwDeviceIoControlFile(ptr ptr ptr ptr ptr long ptr long ptr long)
+ @ stdcall ZwDisplayString(ptr)
+ @ stdcall ZwDuplicateObject(ptr ptr ptr ptr long long long)
+ @ stdcall ZwDuplicateToken(ptr long ptr long long ptr)
+ @ stdcall ZwEnumerateBootEntries(ptr ptr)
+ @ stdcall ZwEnumerateDriverEntries(ptr ptr)
+ @ stdcall ZwEnumerateKey(ptr long long ptr long ptr)
+ @ stdcall ZwEnumerateValueKey(ptr long long ptr long ptr)
+ @ stdcall ZwFlushInstructionCache(ptr ptr long)
+ @ stdcall ZwFlushKey(ptr)
+ @ stdcall ZwFlushVirtualMemory(ptr ptr ptr ptr)
+ @ stdcall ZwFreeVirtualMemory(ptr ptr ptr long)
+ @ stdcall ZwFsControlFile(ptr ptr ptr ptr ptr long ptr long ptr long)
+ @ stdcall ZwInitiatePowerAction(long long long long)
+ @ stdcall ZwIsProcessInJob(ptr ptr)
+ @ stdcall ZwLoadDriver(ptr)
+ @ stdcall ZwLoadKey(ptr ptr)
+ @ stdcall ZwMakeTemporaryObject(ptr)
+ @ stdcall ZwMapViewOfSection(ptr ptr ptr long long ptr ptr long long long)
+ @ stdcall ZwModifyBootEntry(ptr)
+ @ stdcall ZwModifyDriverEntry(ptr)
+ @ stdcall ZwNotifyChangeKey(ptr ptr ptr ptr ptr long long ptr long long)
+ @ stdcall ZwOpenDirectoryObject(ptr long ptr)
+ @ stdcall ZwOpenEvent(ptr long ptr)
+ @ stdcall ZwOpenFile(ptr long ptr ptr long long)
+ @ stdcall ZwOpenJobObject(ptr long ptr)
+ @ stdcall ZwOpenKey(ptr long ptr)
+ @ stdcall ZwOpenProcess(ptr long ptr ptr)
+ @ stdcall ZwOpenProcessToken(ptr long ptr)
+ @ stdcall ZwOpenProcessTokenEx(ptr long long ptr)
+ @ stdcall ZwOpenSection(ptr long ptr)
+ @ stdcall ZwOpenSymbolicLinkObject(ptr long ptr)
+ @ stdcall ZwOpenThread(ptr long ptr ptr)
+ @ stdcall ZwOpenThreadToken(ptr long long ptr)
+ @ stdcall ZwOpenThreadTokenEx(ptr long long long ptr)
+ @ stdcall ZwOpenTimer(ptr long ptr)
+ @ stdcall ZwPowerInformation(long ptr long ptr long)
+ @ stdcall ZwPulseEvent(ptr ptr)
+ @ stdcall ZwQueryBootEntryOrder(ptr ptr)
+ @ stdcall ZwQueryBootOptions(ptr ptr)
+ @ stdcall ZwQueryDefaultLocale(long ptr)
+ @ stdcall ZwQueryDefaultUILanguage(ptr)
+ @ stdcall ZwQueryDirectoryFile(ptr ptr ptr ptr ptr ptr long long long ptr long)
+ @ stdcall ZwQueryDirectoryObject(ptr ptr long long long ptr ptr)
+ @ stdcall ZwQueryDriverEntryOrder(ptr ptr)
+ @ stdcall ZwQueryEaFile(ptr ptr ptr long long ptr long ptr long)
+ @ stdcall ZwQueryFullAttributesFile(ptr ptr)
+ @ stdcall ZwQueryInformationAtom(ptr long ptr long ptr)
+ @ stdcall ZwQueryInformationFile(ptr ptr ptr long long)
+ @ stdcall ZwQueryInformationJobObject(ptr long ptr long ptr)
+ @ stdcall ZwQueryInformationProcess(ptr long ptr long ptr)
+ @ stdcall ZwQueryInformationThread(ptr long ptr long ptr)
+ @ stdcall ZwQueryInformationToken(ptr long long long ptr)
+ @ stdcall ZwQueryInstallUILanguage(ptr)
+ @ stdcall ZwQueryKey(ptr long ptr long ptr)
+ @ stdcall ZwQueryObject(ptr long ptr long ptr)
+ @ stdcall ZwQuerySection(ptr long ptr long ptr)
+ @ stdcall ZwQuerySecurityObject(ptr long ptr long ptr)
+ @ stdcall ZwQuerySymbolicLinkObject(ptr ptr ptr)
+ @ stdcall ZwQuerySystemInformation(long ptr long ptr)
+ @ stdcall ZwQueryValueKey(ptr ptr long ptr long ptr)
+ @ stdcall ZwQueryVolumeInformationFile(ptr ptr ptr long long)
+ @ stdcall ZwReadFile(ptr ptr ptr ptr ptr ptr long ptr ptr)
+ @ stdcall ZwReplaceKey(ptr ptr ptr)
+ @ stdcall ZwRequestWaitReplyPort(ptr ptr ptr)
+ @ stdcall ZwResetEvent(ptr ptr)
+ @ stdcall ZwRestoreKey(ptr ptr long)
+ @ stdcall ZwSaveKey(ptr ptr)
+ @ stdcall ZwSaveKeyEx(ptr ptr long)
+ @ stdcall ZwSecureConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr ptr)
+ @ stdcall ZwSetBootEntryOrder(ptr ptr)
+ @ stdcall ZwSetBootOptions(ptr long)
+ @ stdcall ZwSetDefaultLocale(long long)
+ @ stdcall ZwSetDefaultUILanguage(long)
+ @ stdcall ZwSetDriverEntryOrder(ptr ptr)
+ @ stdcall ZwSetEaFile(ptr ptr ptr long)
+ @ stdcall ZwSetEvent(ptr ptr)
+ @ stdcall ZwSetInformationFile(ptr ptr ptr long long)
+ @ stdcall ZwSetInformationJobObject(ptr long ptr long)
+ @ stdcall ZwSetInformationObject(ptr long ptr long)
+ @ stdcall ZwSetInformationProcess(ptr long ptr long)
+ @ stdcall ZwSetInformationThread(ptr long ptr long)
+ @ stdcall ZwSetSecurityObject(ptr long ptr)
+ @ stdcall ZwSetSystemInformation(long ptr long)
+ @ stdcall ZwSetSystemTime(ptr ptr)
+ @ stdcall ZwSetTimer(ptr ptr ptr ptr long long ptr)
+ @ stdcall ZwSetValueKey(ptr ptr long long ptr long)
+ @ stdcall ZwSetVolumeInformationFile(ptr ptr ptr long long)
+ @ stdcall ZwTerminateJobObject(ptr long)
+ @ stdcall ZwTerminateProcess(ptr long)
+ @ stdcall ZwTranslateFilePath(ptr long ptr long)
+ @ stdcall ZwUnloadDriver(ptr)
+ @ stdcall ZwUnloadKey(ptr)
+ @ stdcall ZwUnmapViewOfSection(ptr ptr)
+ @ stdcall ZwWaitForMultipleObjects(long ptr long long ptr)
+ @ stdcall ZwWaitForSingleObject(ptr long ptr)
+ @ stdcall ZwWriteFile(ptr ptr ptr ptr ptr ptr long ptr ptr)
+ @ stdcall ZwYieldExecution()
+ ;_CIcos
+ ;_CIsin
+ ;_CIsqrt
++#ifndef __x86_64
+ @ cdecl _abnormal_termination()
++#endif
+ #ifdef _M_IX86
+ @ cdecl _alldiv()
+ @ cdecl _alldvrm()
+ @ cdecl _allmul()
+ @ cdecl _alloca_probe()
+ @ cdecl _allrem()
+ @ cdecl _allshl()
+ @ cdecl _allshr()
+ @ cdecl _aulldiv()
+ @ cdecl _aulldvrm()
+ @ cdecl _aullrem()
+ @ cdecl _aullshr()
+ #endif
++#ifndef __x86_64
+ @ cdecl _except_handler2()
+ @ cdecl _except_handler3()
+ @ cdecl _global_unwind2()
++#endif
+ @ cdecl _itoa()
+ @ cdecl _itow()
++#ifndef __x86_64
+ @ cdecl _local_unwind2()
++#endif
+ @ cdecl _purecall()
+ @ cdecl _snprintf()
+ @ cdecl _snwprintf()
+ @ cdecl _stricmp()
+ @ cdecl _strlwr()
+ @ cdecl _strnicmp()
+ @ cdecl _strnset()
+ @ cdecl _strrev()
+ @ cdecl _strset()
+ @ cdecl _strupr()
+ @ cdecl _vsnprintf()
+ @ cdecl _vsnwprintf()
+ @ cdecl _wcsicmp()
+ @ cdecl _wcslwr()
+ @ cdecl _wcsnicmp()
+ @ cdecl _wcsnset()
+ @ cdecl _wcsrev()
+ @ cdecl _wcsupr()
+ @ cdecl atoi()
+ @ cdecl atol()
+ @ cdecl isdigit()
+ @ cdecl islower()
+ @ cdecl isprint()
+ @ cdecl isspace()
+ @ cdecl isupper()
+ @ cdecl isxdigit()
+ @ cdecl mbstowcs()
+ @ cdecl mbtowc()
+ @ cdecl memchr()
+ @ cdecl memcpy()
+ @ cdecl memmove()
+ @ cdecl memset()
+ @ cdecl qsort()
+ @ cdecl rand()
+ @ cdecl sprintf()
+ @ cdecl srand()
+ @ cdecl strcat()
+ @ cdecl strchr()
+ @ cdecl strcmp()
+ @ cdecl strcpy()
+ @ cdecl strlen()
+ @ cdecl strncat()
+ @ cdecl strncmp()
+ @ cdecl strncpy()
+ @ cdecl strrchr()
+ @ cdecl strspn()
+ @ cdecl strstr()
+ @ cdecl swprintf()
+ @ cdecl tolower()
+ @ cdecl toupper()
+ @ cdecl towlower()
+ @ cdecl towupper()
+ @ stdcall vDbgPrintEx(long long str ptr)
+ @ stdcall vDbgPrintExWithPrefix(str long long str ptr)
+ @ cdecl vsprintf()
+ @ cdecl wcscat()
+ @ cdecl wcschr()
+ @ cdecl wcscmp()
+ @ cdecl wcscpy()
+ @ cdecl wcscspn()
+ @ cdecl wcslen()
+ @ cdecl wcsncat()
+ @ cdecl wcsncmp()
+ @ cdecl wcsncpy()
+ @ cdecl wcsrchr()
+ @ cdecl wcsspn()
+ @ cdecl wcsstr()
+ @ cdecl wcstombs()
+ @ cdecl wctomb()