+++ /dev/null
-/*
- * Win32 Global/Local heap functions (GlobalXXX, LocalXXX).
- * These functions included in Win32 for compatibility with 16 bit Windows
- * Especially the moveable blocks and handles are oldish.
- * But the ability to directly allocate memory with GPTR and LPTR is widely
- * used.
- */
-
-#include <windows.h>
-
-#define MAGIC_GLOBAL_USED 0x5342BEEF
-#define GLOBAL_LOCK_MAX 0xFF
-
-typedef struct __GLOBAL_LOCAL_HANDLE
-{
- ULONG Magic;
- LPVOID Pointer;
- BYTE Flags;
- BYTE LockCount;
-} GLOBAL_HANDLE, LOCAL_HANDLE, *PGLOBAL_HANDLE, *PLOCAL_HANDLE;
-
-/*********************************************************************
-* GlobalAlloc -- KERNEL32 *
-*********************************************************************/
-HGLOBAL WINAPI GlobalAlloc(UINT flags, DWORD size)
-{
- PGLOBAL_HANDLE phandle;
- LPVOID palloc;
-
- aprintf("GlobalAlloc( 0x%X, 0x%lX )\n", flags, size );
-
- if((flags & GMEM_MOVEABLE)==0) /* POINTER */
- {
- palloc=HeapAlloc(__ProcessHeap, 0, size);
- return (HGLOBAL) palloc;
- }
- else /* HANDLE */
- {
- HeapLock(__ProcessHeap);
-
-
- phandle=__HeapAllocFragment(__ProcessHeap, 0, sizeof(GLOBAL_HANDLE));
- if(size)
- {
- palloc=HeapAlloc(__ProcessHeap, 0, size+sizeof(HANDLE));
- *(PHANDLE)palloc=(HANDLE) &(phandle->Pointer);
- phandle->Pointer=palloc+sizeof(HANDLE);
- }
- else
- phandle->Pointer=NULL;
- phandle->Magic=MAGIC_GLOBAL_USED;
- phandle->Flags=flags>>8;
- phandle->LockCount=0;
- HeapUnlock(__ProcessHeap);
-
- return (HGLOBAL) &(phandle->Pointer);
- }
-}
-
-/*********************************************************************
-* GlobalLock -- KERNEL32 *
-*********************************************************************/
-LPVOID WINAPI GlobalLock(HGLOBAL hmem)
-{
- PGLOBAL_HANDLE phandle;
- LPVOID palloc;
-
- aprintf("GlobalLock( 0x%lX )\n", (ULONG) hmem );
-
- if(((ULONG)hmem%8)==0)
- return (LPVOID) hmem;
-
- HeapLock(__ProcessHeap);
- phandle=(PGLOBAL_HANDLE)(((LPVOID) hmem)-4);
- if(phandle->Magic==MAGIC_GLOBAL_USED)
- {
- if(phandle->LockCount<GLOBAL_LOCK_MAX)
- phandle->LockCount++;
- palloc=phandle->Pointer;
- }
- else
- {
- dprintf("GlobalLock: invalid handle\n");
- palloc=(LPVOID) hmem;
- }
- HeapUnlock(__ProcessHeap);
- return palloc;
-}
-
-/*********************************************************************
-* GlobalUnlock -- KERNEL32 *
-*********************************************************************/
-BOOL WINAPI GlobalUnlock(HGLOBAL hmem)
-{
- PGLOBAL_HANDLE phandle;
- BOOL locked;
-
- aprintf("GlobalUnlock( 0x%lX )\n", (ULONG) hmem );
-
- if(((ULONG)hmem%8)==0)
- return FALSE;
-
- HeapLock(__ProcessHeap);
- phandle=(PGLOBAL_HANDLE)(((LPVOID) hmem)-4);
- if(phandle->Magic==MAGIC_GLOBAL_USED)
- {
- if((phandle->LockCount<GLOBAL_LOCK_MAX)&&(phandle->LockCount>0))
- phandle->LockCount--;
-
- locked=(phandle->LockCount==0) ? TRUE : FALSE;
- }
- else
- {
- dprintf("GlobalUnlock: invalid handle\n");
- locked=FALSE;
- }
- HeapUnlock(__ProcessHeap);
- return locked;
-}
-
-/*********************************************************************
-* GlobalHandle -- KERNEL32 *
-*********************************************************************/
-HGLOBAL WINAPI GlobalHandle(LPCVOID pmem)
-{
- aprintf("GlobalHandle( 0x%lX )\n", (ULONG) pmem );
-
- if(((ULONG)pmem%8)==0) /* FIXED */
- return (HGLOBAL) pmem;
- else /* MOVEABLE */
- return (HGLOBAL) *(LPVOID *)(pmem-sizeof(HANDLE));
-}
-
-/*********************************************************************
-* GlobalReAlloc -- KERNEL32 *
-*********************************************************************/
-HGLOBAL WINAPI GlobalReAlloc(HGLOBAL hmem, DWORD size, UINT flags)
-{
- LPVOID palloc;
- HGLOBAL hnew;
- PGLOBAL_HANDLE phandle;
-
- aprintf("GlobalReAlloc( 0x%lX, 0x%lX, 0x%X )\n", (ULONG) hmem, size, flags );
-
- hnew=NULL;
- HeapLock(__ProcessHeap);
- if(flags & GMEM_MODIFY) /* modify flags */
- {
- if( (((ULONG)hmem%8)==0) && (flags & GMEM_MOVEABLE))
- {
- /* make a fixed block moveable
- * actually only NT is able to do this. And it's soo simple
- */
- size=HeapSize(__ProcessHeap, 0, (LPVOID) hmem);
- hnew=GlobalAlloc( flags, size);
- palloc=GlobalLock(hnew);
- memcpy(palloc, (LPVOID) hmem, size);
- GlobalUnlock(hnew);
- GlobalFree(hmem);
- }
- else if((((ULONG)hmem%8) != 0)&&(flags & GMEM_DISCARDABLE))
- {
- /* change the flags to make our block "discardable" */
- phandle=(PGLOBAL_HANDLE)(((LPVOID) hmem)-4);
- phandle->Flags = phandle->Flags | (GMEM_DISCARDABLE >> 8);
- hnew=hmem;
- }
- else
- {
- SetLastError(ERROR_INVALID_PARAMETER);
- hnew=NULL;
- }
- }
- else
- {
- if(((ULONG)hmem%8)!=0)
- {
- /* reallocate fixed memory */
- hnew=(HANDLE)HeapReAlloc(__ProcessHeap, 0, (LPVOID) hmem, size);
- }
- else
- {
- /* reallocate a moveable block */
- phandle=(PGLOBAL_HANDLE)(((LPVOID) hmem)-4);
- if(phandle->LockCount!=0)
- SetLastError(ERROR_INVALID_HANDLE);
- else if(size!=0)
- {
- hnew=hmem;
- if(phandle->Pointer)
- {
- palloc=HeapReAlloc(__ProcessHeap, 0,
- phandle->Pointer-sizeof(HANDLE),
- size+sizeof(HANDLE) );
- phandle->Pointer=palloc+sizeof(HANDLE);
- }
- else
- {
- palloc=HeapAlloc(__ProcessHeap, 0, size+sizeof(HANDLE));
- *(PHANDLE)palloc=hmem;
- phandle->Pointer=palloc+sizeof(HANDLE);
- }
- }
- else
- {
- if(phandle->Pointer)
- {
- HeapFree(__ProcessHeap, 0, phandle->Pointer-sizeof(HANDLE));
- phandle->Pointer=NULL;
- }
- }
- }
- }
- HeapUnlock(__ProcessHeap);
- return hnew;
-}
-
-/*********************************************************************
-* GlobalFree -- KERNEL32 *
-*********************************************************************/
-HGLOBAL WINAPI GlobalFree(HGLOBAL hmem)
-{
- PGLOBAL_HANDLE phandle;
-
- aprintf("GlobalFree( 0x%lX )\n", (ULONG) hmem );
-
- if(((ULONG)hmem%4)==0) /* POINTER */
- {
- HeapFree(__ProcessHeap, 0, (LPVOID) hmem);
- }
- else /* HANDLE */
- {
- HeapLock(__ProcessHeap);
- phandle=(PGLOBAL_HANDLE)(((LPVOID) hmem)-4);
- if(phandle->Magic==MAGIC_GLOBAL_USED)
- {
- HeapLock(__ProcessHeap);
- if(phandle->LockCount!=0)
- SetLastError(ERROR_INVALID_HANDLE);
- if(phandle->Pointer)
- HeapFree(__ProcessHeap, 0, phandle->Pointer-sizeof(HANDLE));
- __HeapFreeFragment(__ProcessHeap, 0, phandle);
- }
- HeapUnlock(__ProcessHeap);
- }
- return hmem;
-}
-
-/*********************************************************************
-* GlobalSize -- KERNEL32 *
-*********************************************************************/
-DWORD WINAPI GlobalSize(HGLOBAL hmem)
-{
- DWORD retval;
- PGLOBAL_HANDLE phandle;
-
- aprintf("GlobalSize( 0x%lX )\n", (ULONG) hmem );
-
- if(((ULONG)hmem%8)==0)
- {
- retval=HeapSize(__ProcessHeap, 0, hmem);
- }
- else
- {
- HeapLock(__ProcessHeap);
- phandle=(PGLOBAL_HANDLE)(((LPVOID) hmem)-4);
- if(phandle->Magic==MAGIC_GLOBAL_USED)
- {
- retval=HeapSize(__ProcessHeap, 0, (phandle->Pointer)-sizeof(HANDLE))-4;
- }
- else
- {
- dprintf("GlobalSize: invalid handle\n");
- retval=0;
- }
- HeapUnlock(__ProcessHeap);
- }
- return retval;
-}
-
-/*********************************************************************
-* GlobalWire -- KERNEL32 *
-*********************************************************************/
-LPVOID WINAPI GlobalWire(HGLOBAL hmem)
-{
- return GlobalLock( hmem );
-}
-
-/*********************************************************************
-* GlobalUnWire -- KERNEL32 *
-*********************************************************************/
-BOOL WINAPI GlobalUnWire(HGLOBAL hmem)
-{
- return GlobalUnlock( hmem);
-}
-
-/*********************************************************************
-* GlobalFix -- KERNEL32 *
-*********************************************************************/
-VOID WINAPI GlobalFix(HGLOBAL hmem)
-{
- GlobalLock( hmem );
-}
-
-/*********************************************************************
-* GlobalUnfix -- KERNEL32 *
-*********************************************************************/
-VOID WINAPI GlobalUnfix(HGLOBAL hmem)
-{
- GlobalUnlock( hmem);
-}
-
-/*********************************************************************
-* GlobalFlags -- KERNEL32 *
-*********************************************************************/
-UINT WINAPI GlobalFlags(HGLOBAL hmem)
-{
- return LocalFlags( (HLOCAL) hmem);
-}
-
+++ /dev/null
-; Machine generated, don't edit
-
-
-SECTION .text
-
-GLOBAL _NtAcceptConnectPort
-GLOBAL _ZwAcceptConnectPort
-_NtAcceptConnectPort:
-_ZwAcceptConnectPort:
- mov eax,0
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtAccessCheck
-GLOBAL _ZwAccessCheck
-_NtAccessCheck:
-_ZwAccessCheck:
- mov eax,1
- lea edx,[esp+4]
- int 2Eh
- ret 32
-
-GLOBAL _NtAccessCheckAndAuditAlarm
-GLOBAL _ZwAccessCheckAndAuditAlarm
-_NtAccessCheckAndAuditAlarm:
-_ZwAccessCheckAndAuditAlarm:
- mov eax,2
- lea edx,[esp+4]
- int 2Eh
- ret 44
-
-GLOBAL _NtAddAtom
-GLOBAL _ZwAddAtom
-_NtAddAtom:
-_ZwAddAtom:
- mov eax,3
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtAdjustGroupsToken
-GLOBAL _ZwAdjustGroupsToken
-_NtAdjustGroupsToken:
-_ZwAdjustGroupsToken:
- mov eax,4
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtAdjustPrivilegesToken
-GLOBAL _ZwAdjustPrivilegesToken
-_NtAdjustPrivilegesToken:
-_ZwAdjustPrivilegesToken:
- mov eax,5
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtAlertResumeThread
-GLOBAL _ZwAlertResumeThread
-_NtAlertResumeThread:
-_ZwAlertResumeThread:
- mov eax,6
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtAlertThread
-GLOBAL _ZwAlertThread
-_NtAlertThread:
-_ZwAlertThread:
- mov eax,7
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtAllocateLocallyUniqueId
-GLOBAL _ZwAllocateLocallyUniqueId
-_NtAllocateLocallyUniqueId:
-_ZwAllocateLocallyUniqueId:
- mov eax,8
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtAllocateUuids
-GLOBAL _ZwAllocateUuids
-_NtAllocateUuids:
-_ZwAllocateUuids:
- mov eax,9
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtAllocateVirtualMemory
-GLOBAL _ZwAllocateVirtualMemory
-_NtAllocateVirtualMemory:
-_ZwAllocateVirtualMemory:
- mov eax,10
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtCallbackReturn
-GLOBAL _ZwCallbackReturn
-_NtCallbackReturn:
-_ZwCallbackReturn:
- mov eax,11
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtCancelIoFile
-GLOBAL _ZwCancelIoFile
-_NtCancelIoFile:
-_ZwCancelIoFile:
- mov eax,12
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtCancelTimer
-GLOBAL _ZwCancelTimer
-_NtCancelTimer:
-_ZwCancelTimer:
- mov eax,13
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtClearEvent
-GLOBAL _ZwClearEvent
-_NtClearEvent:
-_ZwClearEvent:
- mov eax,14
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtClose
-GLOBAL _ZwClose
-_NtClose:
-_ZwClose:
- mov eax,15
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtCloseObjectAuditAlarm
-GLOBAL _ZwCloseObjectAuditAlarm
-_NtCloseObjectAuditAlarm:
-_ZwCloseObjectAuditAlarm:
- mov eax,16
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtCompleteConnectPort
-GLOBAL _ZwCompleteConnectPort
-_NtCompleteConnectPort:
-_ZwCompleteConnectPort:
- mov eax,17
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtConnectPort
-GLOBAL _ZwConnectPort
-_NtConnectPort:
-_ZwConnectPort:
- mov eax,18
- lea edx,[esp+4]
- int 2Eh
- ret 32
-
-GLOBAL _NtContinue
-GLOBAL _ZwContinue
-_NtContinue:
-_ZwContinue:
- mov eax,19
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtCreateDirectoryObject
-GLOBAL _ZwCreateDirectoryObject
-_NtCreateDirectoryObject:
-_ZwCreateDirectoryObject:
- mov eax,20
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtCreateEvent
-GLOBAL _ZwCreateEvent
-_NtCreateEvent:
-_ZwCreateEvent:
- mov eax,21
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtCreateEventPair
-GLOBAL _ZwCreateEventPair
-_NtCreateEventPair:
-_ZwCreateEventPair:
- mov eax,22
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtCreateFile
-GLOBAL _ZwCreateFile
-_NtCreateFile:
-_ZwCreateFile:
- mov eax,23
- lea edx,[esp+4]
- int 2Eh
- ret 44
-
-GLOBAL _NtCreateIoCompletion
-GLOBAL _ZwCreateIoCompletion
-_NtCreateIoCompletion:
-_ZwCreateIoCompletion:
- mov eax,24
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtCreateKey
-GLOBAL _ZwCreateKey
-_NtCreateKey:
-_ZwCreateKey:
- mov eax,25
- lea edx,[esp+4]
- int 2Eh
- ret 28
-
-GLOBAL _NtCreateMailslotFile
-GLOBAL _ZwCreateMailslotFile
-_NtCreateMailslotFile:
-_ZwCreateMailslotFile:
- mov eax,26
- lea edx,[esp+4]
- int 2Eh
- ret 32
-
-GLOBAL _NtCreateMutant
-GLOBAL _ZwCreateMutant
-_NtCreateMutant:
-_ZwCreateMutant:
- mov eax,27
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtCreateNamedPipeFile
-GLOBAL _ZwCreateNamedPipeFile
-_NtCreateNamedPipeFile:
-_ZwCreateNamedPipeFile:
- mov eax,28
- lea edx,[esp+4]
- int 2Eh
- ret 56
-
-GLOBAL _NtCreatePagingFile
-GLOBAL _ZwCreatePagingFile
-_NtCreatePagingFile:
-_ZwCreatePagingFile:
- mov eax,29
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtCreatePort
-GLOBAL _ZwCreatePort
-_NtCreatePort:
-_ZwCreatePort:
- mov eax,30
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtCreateProcess
-GLOBAL _ZwCreateProcess
-_NtCreateProcess:
-_ZwCreateProcess:
- mov eax,31
- lea edx,[esp+4]
- int 2Eh
- ret 32
-
-GLOBAL _NtCreateProfile
-GLOBAL _ZwCreateProfile
-_NtCreateProfile:
-_ZwCreateProfile:
- mov eax,32
- lea edx,[esp+4]
- int 2Eh
- ret 36
-
-GLOBAL _NtCreateSection
-GLOBAL _ZwCreateSection
-_NtCreateSection:
-_ZwCreateSection:
- mov eax,33
- lea edx,[esp+4]
- int 2Eh
- ret 28
-
-GLOBAL _NtCreateSemaphore
-GLOBAL _ZwCreateSemaphore
-_NtCreateSemaphore:
-_ZwCreateSemaphore:
- mov eax,34
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtCreateSymbolicLinkObject
-GLOBAL _ZwCreateSymbolicLinkObject
-_NtCreateSymbolicLinkObject:
-_ZwCreateSymbolicLinkObject:
- mov eax,35
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtCreateThread
-GLOBAL _ZwCreateThread
-_NtCreateThread:
-_ZwCreateThread:
- mov eax,36
- lea edx,[esp+4]
- int 2Eh
- ret 32
-
-GLOBAL _NtCreateTimer
-GLOBAL _ZwCreateTimer
-_NtCreateTimer:
-_ZwCreateTimer:
- mov eax,37
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtCreateToken
-GLOBAL _ZwCreateToken
-_NtCreateToken:
-_ZwCreateToken:
- mov eax,38
- lea edx,[esp+4]
- int 2Eh
- ret 52
-
-GLOBAL _NtDelayExecution
-GLOBAL _ZwDelayExecution
-_NtDelayExecution:
-_ZwDelayExecution:
- mov eax,39
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtDeleteAtom
-GLOBAL _ZwDeleteAtom
-_NtDeleteAtom:
-_ZwDeleteAtom:
- mov eax,40
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtDeleteFile
-GLOBAL _ZwDeleteFile
-_NtDeleteFile:
-_ZwDeleteFile:
- mov eax,41
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtDeleteKey
-GLOBAL _ZwDeleteKey
-_NtDeleteKey:
-_ZwDeleteKey:
- mov eax,42
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtDeleteObjectAuditAlarm
-GLOBAL _ZwDeleteObjectAuditAlarm
-_NtDeleteObjectAuditAlarm:
-_ZwDeleteObjectAuditAlarm:
- mov eax,43
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtDeleteValueKey
-GLOBAL _ZwDeleteValueKey
-_NtDeleteValueKey:
-_ZwDeleteValueKey:
- mov eax,44
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtDeviceIoControlFile
-GLOBAL _ZwDeviceIoControlFile
-_NtDeviceIoControlFile:
-_ZwDeviceIoControlFile:
- mov eax,45
- lea edx,[esp+4]
- int 2Eh
- ret 40
-
-GLOBAL _NtDisplayString
-GLOBAL _ZwDisplayString
-_NtDisplayString:
-_ZwDisplayString:
- mov eax,46
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtDuplicateObject
-GLOBAL _ZwDuplicateObject
-_NtDuplicateObject:
-_ZwDuplicateObject:
- mov eax,47
- lea edx,[esp+4]
- int 2Eh
- ret 28
-
-GLOBAL _NtDuplicateToken
-GLOBAL _ZwDuplicateToken
-_NtDuplicateToken:
-_ZwDuplicateToken:
- mov eax,48
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtEnumerateKey
-GLOBAL _ZwEnumerateKey
-_NtEnumerateKey:
-_ZwEnumerateKey:
- mov eax,49
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtEnumerateValueKey
-GLOBAL _ZwEnumerateValueKey
-_NtEnumerateValueKey:
-_ZwEnumerateValueKey:
- mov eax,50
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtExtendSection
-GLOBAL _ZwExtendSection
-_NtExtendSection:
-_ZwExtendSection:
- mov eax,51
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtFindAtom
-GLOBAL _ZwFindAtom
-_NtFindAtom:
-_ZwFindAtom:
- mov eax,52
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtFlushBuffersFile
-GLOBAL _ZwFlushBuffersFile
-_NtFlushBuffersFile:
-_ZwFlushBuffersFile:
- mov eax,53
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtFlushInstructionCache
-GLOBAL _ZwFlushInstructionCache
-_NtFlushInstructionCache:
-_ZwFlushInstructionCache:
- mov eax,54
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtFlushKey
-GLOBAL _ZwFlushKey
-_NtFlushKey:
-_ZwFlushKey:
- mov eax,55
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtFlushVirtualMemory
-GLOBAL _ZwFlushVirtualMemory
-_NtFlushVirtualMemory:
-_ZwFlushVirtualMemory:
- mov eax,56
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtFlushWriteBuffer
-GLOBAL _ZwFlushWriteBuffer
-_NtFlushWriteBuffer:
-_ZwFlushWriteBuffer:
- mov eax,57
- lea edx,[esp+4]
- int 2Eh
- ret 0
-
-GLOBAL _NtFreeVirtualMemory
-GLOBAL _ZwFreeVirtualMemory
-_NtFreeVirtualMemory:
-_ZwFreeVirtualMemory:
- mov eax,58
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtFsControlFile
-GLOBAL _ZwFsControlFile
-_NtFsControlFile:
-_ZwFsControlFile:
- mov eax,59
- lea edx,[esp+4]
- int 2Eh
- ret 40
-
-GLOBAL _NtGetContextThread
-GLOBAL _ZwGetContextThread
-_NtGetContextThread:
-_ZwGetContextThread:
- mov eax,60
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtGetPlugPlayEvent
-GLOBAL _ZwGetPlugPlayEvent
-_NtGetPlugPlayEvent:
-_ZwGetPlugPlayEvent:
- mov eax,61
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtGetTickCount
-GLOBAL _ZwGetTickCount
-_NtGetTickCount:
-_ZwGetTickCount:
- mov eax,62
- lea edx,[esp+4]
- int 2Eh
- ret 0
-
-GLOBAL _NtImpersonateClientOfPort
-GLOBAL _ZwImpersonateClientOfPort
-_NtImpersonateClientOfPort:
-_ZwImpersonateClientOfPort:
- mov eax,63
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtImpersonateThread
-GLOBAL _ZwImpersonateThread
-_NtImpersonateThread:
-_ZwImpersonateThread:
- mov eax,64
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtInitializeRegistry
-GLOBAL _ZwInitializeRegistry
-_NtInitializeRegistry:
-_ZwInitializeRegistry:
- mov eax,65
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtListenPort
-GLOBAL _ZwListenPort
-_NtListenPort:
-_ZwListenPort:
- mov eax,66
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtLoadDriver
-GLOBAL _ZwLoadDriver
-_NtLoadDriver:
-_ZwLoadDriver:
- mov eax,67
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtLoadKey
-GLOBAL _ZwLoadKey
-_NtLoadKey:
-_ZwLoadKey:
- mov eax,68
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtLoadKey2
-GLOBAL _ZwLoadKey2
-_NtLoadKey2:
-_ZwLoadKey2:
- mov eax,69
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtLockFile
-GLOBAL _ZwLockFile
-_NtLockFile:
-_ZwLockFile:
- mov eax,70
- lea edx,[esp+4]
- int 2Eh
- ret 40
-
-GLOBAL _NtLockVirtualMemory
-GLOBAL _ZwLockVirtualMemory
-_NtLockVirtualMemory:
-_ZwLockVirtualMemory:
- mov eax,71
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtMakeTemporaryObject
-GLOBAL _ZwMakeTemporaryObject
-_NtMakeTemporaryObject:
-_ZwMakeTemporaryObject:
- mov eax,72
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtMapViewOfSection
-GLOBAL _ZwMapViewOfSection
-_NtMapViewOfSection:
-_ZwMapViewOfSection:
- mov eax,73
- lea edx,[esp+4]
- int 2Eh
- ret 40
-
-GLOBAL _NtNotifyChangeDirectoryFile
-GLOBAL _ZwNotifyChangeDirectoryFile
-_NtNotifyChangeDirectoryFile:
-_ZwNotifyChangeDirectoryFile:
- mov eax,74
- lea edx,[esp+4]
- int 2Eh
- ret 36
-
-GLOBAL _NtNotifyChangeKey
-GLOBAL _ZwNotifyChangeKey
-_NtNotifyChangeKey:
-_ZwNotifyChangeKey:
- mov eax,75
- lea edx,[esp+4]
- int 2Eh
- ret 40
-
-GLOBAL _NtOpenDirectoryObject
-GLOBAL _ZwOpenDirectoryObject
-_NtOpenDirectoryObject:
-_ZwOpenDirectoryObject:
- mov eax,76
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtOpenEvent
-GLOBAL _ZwOpenEvent
-_NtOpenEvent:
-_ZwOpenEvent:
- mov eax,77
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtOpenEventPair
-GLOBAL _ZwOpenEventPair
-_NtOpenEventPair:
-_ZwOpenEventPair:
- mov eax,78
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtOpenFile
-GLOBAL _ZwOpenFile
-_NtOpenFile:
-_ZwOpenFile:
- mov eax,79
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtOpenIoCompletion
-GLOBAL _ZwOpenIoCompletion
-_NtOpenIoCompletion:
-_ZwOpenIoCompletion:
- mov eax,80
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtOpenKey
-GLOBAL _ZwOpenKey
-_NtOpenKey:
-_ZwOpenKey:
- mov eax,81
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtOpenMutant
-GLOBAL _ZwOpenMutant
-_NtOpenMutant:
-_ZwOpenMutant:
- mov eax,82
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtOpenObjectAuditAlarm
-GLOBAL _ZwOpenObjectAuditAlarm
-_NtOpenObjectAuditAlarm:
-_ZwOpenObjectAuditAlarm:
- mov eax,83
- lea edx,[esp+4]
- int 2Eh
- ret 48
-
-GLOBAL _NtOpenProcess
-GLOBAL _ZwOpenProcess
-_NtOpenProcess:
-_ZwOpenProcess:
- mov eax,84
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtOpenProcessToken
-GLOBAL _ZwOpenProcessToken
-_NtOpenProcessToken:
-_ZwOpenProcessToken:
- mov eax,85
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtOpenSection
-GLOBAL _ZwOpenSection
-_NtOpenSection:
-_ZwOpenSection:
- mov eax,86
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtOpenSemaphore
-GLOBAL _ZwOpenSemaphore
-_NtOpenSemaphore:
-_ZwOpenSemaphore:
- mov eax,87
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtOpenSymbolicLinkObject
-GLOBAL _ZwOpenSymbolicLinkObject
-_NtOpenSymbolicLinkObject:
-_ZwOpenSymbolicLinkObject:
- mov eax,88
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtOpenThread
-GLOBAL _ZwOpenThread
-_NtOpenThread:
-_ZwOpenThread:
- mov eax,89
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtOpenThreadToken
-GLOBAL _ZwOpenThreadToken
-_NtOpenThreadToken:
-_ZwOpenThreadToken:
- mov eax,90
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtOpenTimer
-GLOBAL _ZwOpenTimer
-_NtOpenTimer:
-_ZwOpenTimer:
- mov eax,91
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtPlugPlayControl
-GLOBAL _ZwPlugPlayControl
-_NtPlugPlayControl:
-_ZwPlugPlayControl:
- mov eax,92
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtPrivilegeCheck
-GLOBAL _ZwPrivilegeCheck
-_NtPrivilegeCheck:
-_ZwPrivilegeCheck:
- mov eax,93
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtPrivilegedServiceAuditAlarm
-GLOBAL _ZwPrivilegedServiceAuditAlarm
-_NtPrivilegedServiceAuditAlarm:
-_ZwPrivilegedServiceAuditAlarm:
- mov eax,94
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtPrivilegeObjectAuditAlarm
-GLOBAL _ZwPrivilegeObjectAuditAlarm
-_NtPrivilegeObjectAuditAlarm:
-_ZwPrivilegeObjectAuditAlarm:
- mov eax,95
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtProtectVirtualMemory
-GLOBAL _ZwProtectVirtualMemory
-_NtProtectVirtualMemory:
-_ZwProtectVirtualMemory:
- mov eax,96
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtPulseEvent
-GLOBAL _ZwPulseEvent
-_NtPulseEvent:
-_ZwPulseEvent:
- mov eax,97
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtQueryInformationAtom
-GLOBAL _ZwQueryInformationAtom
-_NtQueryInformationAtom:
-_ZwQueryInformationAtom:
- mov eax,98
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtQueryAttributesFile
-GLOBAL _ZwQueryAttributesFile
-_NtQueryAttributesFile:
-_ZwQueryAttributesFile:
- mov eax,99
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtQueryDefaultLocale
-GLOBAL _ZwQueryDefaultLocale
-_NtQueryDefaultLocale:
-_ZwQueryDefaultLocale:
- mov eax,100
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtQueryDirectoryFile
-GLOBAL _ZwQueryDirectoryFile
-_NtQueryDirectoryFile:
-_ZwQueryDirectoryFile:
- mov eax,101
- lea edx,[esp+4]
- int 2Eh
- ret 44
-
-GLOBAL _NtQueryDirectoryObject
-GLOBAL _ZwQueryDirectoryObject
-_NtQueryDirectoryObject:
-_ZwQueryDirectoryObject:
- mov eax,102
- lea edx,[esp+4]
- int 2Eh
- ret 28
-
-GLOBAL _NtQueryEaFile
-GLOBAL _ZwQueryEaFile
-_NtQueryEaFile:
-_ZwQueryEaFile:
- mov eax,103
- lea edx,[esp+4]
- int 2Eh
- ret 36
-
-GLOBAL _NtQueryEvent
-GLOBAL _ZwQueryEvent
-_NtQueryEvent:
-_ZwQueryEvent:
- mov eax,104
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtQueryFullAttributesFile
-GLOBAL _ZwQueryFullAttributesFile
-_NtQueryFullAttributesFile:
-_ZwQueryFullAttributesFile:
- mov eax,105
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtQueryInformationFile
-GLOBAL _ZwQueryInformationFile
-_NtQueryInformationFile:
-_ZwQueryInformationFile:
- mov eax,106
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtQueryIoCompletion
-GLOBAL _ZwQueryIoCompletion
-_NtQueryIoCompletion:
-_ZwQueryIoCompletion:
- mov eax,107
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtQueryInformationPort
-GLOBAL _ZwQueryInformationPort
-_NtQueryInformationPort:
-_ZwQueryInformationPort:
- mov eax,108
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtQueryInformationProcess
-GLOBAL _ZwQueryInformationProcess
-_NtQueryInformationProcess:
-_ZwQueryInformationProcess:
- mov eax,109
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtQueryInformationThread
-GLOBAL _ZwQueryInformationThread
-_NtQueryInformationThread:
-_ZwQueryInformationThread:
- mov eax,110
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtQueryInformationToken
-GLOBAL _ZwQueryInformationToken
-_NtQueryInformationToken:
-_ZwQueryInformationToken:
- mov eax,111
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtQueryIntervalProfile
-GLOBAL _ZwQueryIntervalProfile
-_NtQueryIntervalProfile:
-_ZwQueryIntervalProfile:
- mov eax,112
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtQueryKey
-GLOBAL _ZwQueryKey
-_NtQueryKey:
-_ZwQueryKey:
- mov eax,113
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtQueryMultipleValueKey
-GLOBAL _ZwQueryMultipleValueKey
-_NtQueryMultipleValueKey:
-_ZwQueryMultipleValueKey:
- mov eax,114
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtQueryMutant
-GLOBAL _ZwQueryMutant
-_NtQueryMutant:
-_ZwQueryMutant:
- mov eax,115
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtQueryObject
-GLOBAL _ZwQueryObject
-_NtQueryObject:
-_ZwQueryObject:
- mov eax,116
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtQueryOleDirectoryFile
-GLOBAL _ZwQueryOleDirectoryFile
-_NtQueryOleDirectoryFile:
-_ZwQueryOleDirectoryFile:
- mov eax,117
- lea edx,[esp+4]
- int 2Eh
- ret 44
-
-GLOBAL _NtQueryPerformanceCounter
-GLOBAL _ZwQueryPerformanceCounter
-_NtQueryPerformanceCounter:
-_ZwQueryPerformanceCounter:
- mov eax,118
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtQuerySection
-GLOBAL _ZwQuerySection
-_NtQuerySection:
-_ZwQuerySection:
- mov eax,119
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtQuerySecurityObject
-GLOBAL _ZwQuerySecurityObject
-_NtQuerySecurityObject:
-_ZwQuerySecurityObject:
- mov eax,120
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtQuerySemaphore
-GLOBAL _ZwQuerySemaphore
-_NtQuerySemaphore:
-_ZwQuerySemaphore:
- mov eax,121
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtQuerySymbolicLinkObject
-GLOBAL _ZwQuerySymbolicLinkObject
-_NtQuerySymbolicLinkObject:
-_ZwQuerySymbolicLinkObject:
- mov eax,122
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtQuerySystemEnvironmentValue
-GLOBAL _ZwQuerySystemEnvironmentValue
-_NtQuerySystemEnvironmentValue:
-_ZwQuerySystemEnvironmentValue:
- mov eax,123
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtQuerySystemInformation
-GLOBAL _ZwQuerySystemInformation
-_NtQuerySystemInformation:
-_ZwQuerySystemInformation:
- mov eax,124
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtQuerySystemTime
-GLOBAL _ZwQuerySystemTime
-_NtQuerySystemTime:
-_ZwQuerySystemTime:
- mov eax,125
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtQueryTimer
-GLOBAL _ZwQueryTimer
-_NtQueryTimer:
-_ZwQueryTimer:
- mov eax,126
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtQueryTimerResolution
-GLOBAL _ZwQueryTimerResolution
-_NtQueryTimerResolution:
-_ZwQueryTimerResolution:
- mov eax,127
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtQueryValueKey
-GLOBAL _ZwQueryValueKey
-_NtQueryValueKey:
-_ZwQueryValueKey:
- mov eax,128
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtQueryVirtualMemory
-GLOBAL _ZwQueryVirtualMemory
-_NtQueryVirtualMemory:
-_ZwQueryVirtualMemory:
- mov eax,129
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtQueryVolumeInformationFile
-GLOBAL _ZwQueryVolumeInformationFile
-_NtQueryVolumeInformationFile:
-_ZwQueryVolumeInformationFile:
- mov eax,130
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtQueueApcThread
-GLOBAL _ZwQueueApcThread
-_NtQueueApcThread:
-_ZwQueueApcThread:
- mov eax,131
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtRaiseException
-GLOBAL _ZwRaiseException
-_NtRaiseException:
-_ZwRaiseException:
- mov eax,132
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtRaiseHardError
-GLOBAL _ZwRaiseHardError
-_NtRaiseHardError:
-_ZwRaiseHardError:
- mov eax,133
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtReadFile
-GLOBAL _ZwReadFile
-_NtReadFile:
-_ZwReadFile:
- mov eax,134
- lea edx,[esp+4]
- int 2Eh
- ret 36
-
-GLOBAL _NtReadFileScatter
-GLOBAL _ZwReadFileScatter
-_NtReadFileScatter:
-_ZwReadFileScatter:
- mov eax,135
- lea edx,[esp+4]
- int 2Eh
- ret 36
-
-GLOBAL _NtReadRequestData
-GLOBAL _ZwReadRequestData
-_NtReadRequestData:
-_ZwReadRequestData:
- mov eax,136
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtReadVirtualMemory
-GLOBAL _ZwReadVirtualMemory
-_NtReadVirtualMemory:
-_ZwReadVirtualMemory:
- mov eax,137
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtRegisterThreadTerminatePort
-GLOBAL _ZwRegisterThreadTerminatePort
-_NtRegisterThreadTerminatePort:
-_ZwRegisterThreadTerminatePort:
- mov eax,138
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtReleaseMutant
-GLOBAL _ZwReleaseMutant
-_NtReleaseMutant:
-_ZwReleaseMutant:
- mov eax,139
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtReleaseSemaphore
-GLOBAL _ZwReleaseSemaphore
-_NtReleaseSemaphore:
-_ZwReleaseSemaphore:
- mov eax,140
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtRemoveIoCompletion
-GLOBAL _ZwRemoveIoCompletion
-_NtRemoveIoCompletion:
-_ZwRemoveIoCompletion:
- mov eax,141
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtReplaceKey
-GLOBAL _ZwReplaceKey
-_NtReplaceKey:
-_ZwReplaceKey:
- mov eax,142
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtReplyPort
-GLOBAL _ZwReplyPort
-_NtReplyPort:
-_ZwReplyPort:
- mov eax,143
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtReplyWaitReceivePort
-GLOBAL _ZwReplyWaitReceivePort
-_NtReplyWaitReceivePort:
-_ZwReplyWaitReceivePort:
- mov eax,144
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtReplyWaitReplyPort
-GLOBAL _ZwReplyWaitReplyPort
-_NtReplyWaitReplyPort:
-_ZwReplyWaitReplyPort:
- mov eax,145
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtRequestPort
-GLOBAL _ZwRequestPort
-_NtRequestPort:
-_ZwRequestPort:
- mov eax,146
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtRequestWaitReplyPort
-GLOBAL _ZwRequestWaitReplyPort
-_NtRequestWaitReplyPort:
-_ZwRequestWaitReplyPort:
- mov eax,147
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtResetEvent
-GLOBAL _ZwResetEvent
-_NtResetEvent:
-_ZwResetEvent:
- mov eax,148
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtRestoreKey
-GLOBAL _ZwRestoreKey
-_NtRestoreKey:
-_ZwRestoreKey:
- mov eax,149
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtResumeThread
-GLOBAL _ZwResumeThread
-_NtResumeThread:
-_ZwResumeThread:
- mov eax,150
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtSaveKey
-GLOBAL _ZwSaveKey
-_NtSaveKey:
-_ZwSaveKey:
- mov eax,151
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtSetIoCompletion
-GLOBAL _ZwSetIoCompletion
-_NtSetIoCompletion:
-_ZwSetIoCompletion:
- mov eax,152
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtSetContextThread
-GLOBAL _ZwSetContextThread
-_NtSetContextThread:
-_ZwSetContextThread:
- mov eax,153
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtSetDefaultHardErrorPort
-GLOBAL _ZwSetDefaultHardErrorPort
-_NtSetDefaultHardErrorPort:
-_ZwSetDefaultHardErrorPort:
- mov eax,154
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtSetDefaultLocale
-GLOBAL _ZwSetDefaultLocale
-_NtSetDefaultLocale:
-_ZwSetDefaultLocale:
- mov eax,155
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtSetEaFile
-GLOBAL _ZwSetEaFile
-_NtSetEaFile:
-_ZwSetEaFile:
- mov eax,156
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtSetEvent
-GLOBAL _ZwSetEvent
-_NtSetEvent:
-_ZwSetEvent:
- mov eax,157
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtSetHighEventPair
-GLOBAL _ZwSetHighEventPair
-_NtSetHighEventPair:
-_ZwSetHighEventPair:
- mov eax,158
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtSetHighWaitLowEventPair
-GLOBAL _ZwSetHighWaitLowEventPair
-_NtSetHighWaitLowEventPair:
-_ZwSetHighWaitLowEventPair:
- mov eax,159
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtSetInformationFile
-GLOBAL _ZwSetInformationFile
-_NtSetInformationFile:
-_ZwSetInformationFile:
- mov eax,160
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtSetInformationKey
-GLOBAL _ZwSetInformationKey
-_NtSetInformationKey:
-_ZwSetInformationKey:
- mov eax,161
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtSetInformationObject
-GLOBAL _ZwSetInformationObject
-_NtSetInformationObject:
-_ZwSetInformationObject:
- mov eax,162
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtSetInformationProcess
-GLOBAL _ZwSetInformationProcess
-_NtSetInformationProcess:
-_ZwSetInformationProcess:
- mov eax,163
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtSetInformationThread
-GLOBAL _ZwSetInformationThread
-_NtSetInformationThread:
-_ZwSetInformationThread:
- mov eax,164
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtSetInformationToken
-GLOBAL _ZwSetInformationToken
-_NtSetInformationToken:
-_ZwSetInformationToken:
- mov eax,165
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtSetIntervalProfile
-GLOBAL _ZwSetIntervalProfile
-_NtSetIntervalProfile:
-_ZwSetIntervalProfile:
- mov eax,166
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtSetLdtEntries
-GLOBAL _ZwSetLdtEntries
-_NtSetLdtEntries:
-_ZwSetLdtEntries:
- mov eax,167
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtSetLowEventPair
-GLOBAL _ZwSetLowEventPair
-_NtSetLowEventPair:
-_ZwSetLowEventPair:
- mov eax,168
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtSetLowWaitHighEventPair
-GLOBAL _ZwSetLowWaitHighEventPair
-_NtSetLowWaitHighEventPair:
-_ZwSetLowWaitHighEventPair:
- mov eax,169
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtSetSecurityObject
-GLOBAL _ZwSetSecurityObject
-_NtSetSecurityObject:
-_ZwSetSecurityObject:
- mov eax,170
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtSetSystemEnvironmentValue
-GLOBAL _ZwSetSystemEnvironmentValue
-_NtSetSystemEnvironmentValue:
-_ZwSetSystemEnvironmentValue:
- mov eax,171
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtSetSystemInformation
-GLOBAL _ZwSetSystemInformation
-_NtSetSystemInformation:
-_ZwSetSystemInformation:
- mov eax,172
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtSetSystemPowerState
-GLOBAL _ZwSetSystemPowerState
-_NtSetSystemPowerState:
-_ZwSetSystemPowerState:
- mov eax,173
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtSetSystemTime
-GLOBAL _ZwSetSystemTime
-_NtSetSystemTime:
-_ZwSetSystemTime:
- mov eax,174
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtSetTimer
-GLOBAL _ZwSetTimer
-_NtSetTimer:
-_ZwSetTimer:
- mov eax,175
- lea edx,[esp+4]
- int 2Eh
- ret 28
-
-GLOBAL _NtSetTimerResolution
-GLOBAL _ZwSetTimerResolution
-_NtSetTimerResolution:
-_ZwSetTimerResolution:
- mov eax,176
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtSetValueKey
-GLOBAL _ZwSetValueKey
-_NtSetValueKey:
-_ZwSetValueKey:
- mov eax,177
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtSetVolumeInformationFile
-GLOBAL _ZwSetVolumeInformationFile
-_NtSetVolumeInformationFile:
-_ZwSetVolumeInformationFile:
- mov eax,178
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtShutdownSystem
-GLOBAL _ZwShutdownSystem
-_NtShutdownSystem:
-_ZwShutdownSystem:
- mov eax,179
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtSignalAndWaitForSingleObject
-GLOBAL _ZwSignalAndWaitForSingleObject
-_NtSignalAndWaitForSingleObject:
-_ZwSignalAndWaitForSingleObject:
- mov eax,180
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtStartProfile
-GLOBAL _ZwStartProfile
-_NtStartProfile:
-_ZwStartProfile:
- mov eax,181
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtStopProfile
-GLOBAL _ZwStopProfile
-_NtStopProfile:
-_ZwStopProfile:
- mov eax,182
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtSuspendThread
-GLOBAL _ZwSuspendThread
-_NtSuspendThread:
-_ZwSuspendThread:
- mov eax,183
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtSystemDebugControl
-GLOBAL _ZwSystemDebugControl
-_NtSystemDebugControl:
-_ZwSystemDebugControl:
- mov eax,184
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtTerminateProcess
-GLOBAL _ZwTerminateProcess
-_NtTerminateProcess:
-_ZwTerminateProcess:
- mov eax,185
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtTerminateThread
-GLOBAL _ZwTerminateThread
-_NtTerminateThread:
-_ZwTerminateThread:
- mov eax,186
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtTestAlert
-GLOBAL _ZwTestAlert
-_NtTestAlert:
-_ZwTestAlert:
- mov eax,187
- lea edx,[esp+4]
- int 2Eh
- ret 0
-
-GLOBAL _NtUnloadDriver
-GLOBAL _ZwUnloadDriver
-_NtUnloadDriver:
-_ZwUnloadDriver:
- mov eax,188
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtUnloadKey
-GLOBAL _ZwUnloadKey
-_NtUnloadKey:
-_ZwUnloadKey:
- mov eax,189
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtUnlockFile
-GLOBAL _ZwUnlockFile
-_NtUnlockFile:
-_ZwUnlockFile:
- mov eax,190
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtUnlockVirtualMemory
-GLOBAL _ZwUnlockVirtualMemory
-_NtUnlockVirtualMemory:
-_ZwUnlockVirtualMemory:
- mov eax,191
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtUnmapViewOfSection
-GLOBAL _ZwUnmapViewOfSection
-_NtUnmapViewOfSection:
-_ZwUnmapViewOfSection:
- mov eax,192
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtVdmControl
-GLOBAL _ZwVdmControl
-_NtVdmControl:
-_ZwVdmControl:
- mov eax,193
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtWaitForMultipleObjects
-GLOBAL _ZwWaitForMultipleObjects
-_NtWaitForMultipleObjects:
-_ZwWaitForMultipleObjects:
- mov eax,194
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtWaitForSingleObject
-GLOBAL _ZwWaitForSingleObject
-_NtWaitForSingleObject:
-_ZwWaitForSingleObject:
- mov eax,195
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtWaitHighEventPair
-GLOBAL _ZwWaitHighEventPair
-_NtWaitHighEventPair:
-_ZwWaitHighEventPair:
- mov eax,196
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtWaitLowEventPair
-GLOBAL _ZwWaitLowEventPair
-_NtWaitLowEventPair:
-_ZwWaitLowEventPair:
- mov eax,197
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtWriteFile
-GLOBAL _ZwWriteFile
-_NtWriteFile:
-_ZwWriteFile:
- mov eax,198
- lea edx,[esp+4]
- int 2Eh
- ret 36
-
-GLOBAL _NtWriteFileGather
-GLOBAL _ZwWriteFileGather
-_NtWriteFileGather:
-_ZwWriteFileGather:
- mov eax,199
- lea edx,[esp+4]
- int 2Eh
- ret 36
-
-GLOBAL _NtWriteRequestData
-GLOBAL _ZwWriteRequestData
-_NtWriteRequestData:
-_ZwWriteRequestData:
- mov eax,200
- lea edx,[esp+4]
- int 2Eh
- ret 24
-
-GLOBAL _NtWriteVirtualMemory
-GLOBAL _ZwWriteVirtualMemory
-_NtWriteVirtualMemory:
-_ZwWriteVirtualMemory:
- mov eax,201
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtW32Call
-GLOBAL _ZwW32Call
-_NtW32Call:
-_ZwW32Call:
- mov eax,202
- lea edx,[esp+4]
- int 2Eh
- ret 20
-
-GLOBAL _NtCreateChannel
-GLOBAL _ZwCreateChannel
-_NtCreateChannel:
-_ZwCreateChannel:
- mov eax,203
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtListenChannel
-GLOBAL _ZwListenChannel
-_NtListenChannel:
-_ZwListenChannel:
- mov eax,204
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtOpenChannel
-GLOBAL _ZwOpenChannel
-_NtOpenChannel:
-_ZwOpenChannel:
- mov eax,205
- lea edx,[esp+4]
- int 2Eh
- ret 8
-
-GLOBAL _NtReplyWaitSendChannel
-GLOBAL _ZwReplyWaitSendChannel
-_NtReplyWaitSendChannel:
-_ZwReplyWaitSendChannel:
- mov eax,206
- lea edx,[esp+4]
- int 2Eh
- ret 12
-
-GLOBAL _NtSendWaitReplyChannel
-GLOBAL _ZwSendWaitReplyChannel
-_NtSendWaitReplyChannel:
-_ZwSendWaitReplyChannel:
- mov eax,207
- lea edx,[esp+4]
- int 2Eh
- ret 16
-
-GLOBAL _NtSetContextChannel
-GLOBAL _ZwSetContextChannel
-_NtSetContextChannel:
-_ZwSetContextChannel:
- mov eax,208
- lea edx,[esp+4]
- int 2Eh
- ret 4
-
-GLOBAL _NtYieldExecution
-GLOBAL _ZwYieldExecution
-_NtYieldExecution:
-_ZwYieldExecution:
- mov eax,209
- lea edx,[esp+4]
- int 2Eh
- ret 0
-
+++ /dev/null
-/*
- * This file was machine generated by export
- * Don't edit
- *
- *
-*/
-#include <internal/symbol.h>
-#include <ddk/ntddk.h>
-#include <ddk/ntifs.h>
-#include <internal/ke.h>
-#include <internal/ntoskrnl.h>
-#include <internal/mm.h>
-#include <wstring.h>
-#ifdef __cplusplus
-extern "C" {
-#endif
-#ifdef __cplusplus
-}
-#endif
-export symbol_table[]={
-{"_free_page",(unsigned int)free_page},
-{"_get_dma_page",(unsigned int)get_dma_page},
-{"_DbgPrint",(unsigned int)DbgPrint},
-{"_printk",(unsigned int)printk},
-{"_ExAcquireFastMutex",(unsigned int)ExAcquireFastMutex},
-{"_ExAcquireFastMutexUnsafe",(unsigned int)ExAcquireFastMutexUnsafe},
-{"_ExAcquireResourceExclusive",(unsigned int)ExAcquireResourceExclusive},
-{"_ExAcquireResourceExclusiveLite",(unsigned int)ExAcquireResourceExclusiveLite},
-{"_ExAcquireResourceSharedLite",(unsigned int)ExAcquireResourceSharedLite},
-{"_ExAcquireSharedStarveExclusive",(unsigned int)ExAcquireSharedStarveExclusive},
-{"_ExAcquireSharedWaitForExclusive",(unsigned int)ExAcquireSharedWaitForExclusive},
-{"_ExAllocateFromNPagedLookasideList",(unsigned int)ExAllocateFromNPagedLookasideList},
-{"_ExAllocateFromPagedLookasideList",(unsigned int)ExAllocateFromPagedLookasideList},
-{"_ExAllocateFromZone",(unsigned int)ExAllocateFromZone},
-{"_ExAllocatePool",(unsigned int)ExAllocatePool},
-{"_ExAllocatePoolWithQuota",(unsigned int)ExAllocatePoolWithQuota},
-{"_ExAllocatePoolWithQuotaTag",(unsigned int)ExAllocatePoolWithQuotaTag},
-{"_ExAllocatePoolWithTag",(unsigned int)ExAllocatePoolWithTag},
-{"_ExConvertExclusiveToSharedLite",(unsigned int)ExConvertExclusiveToSharedLite},
-{"_ExDeleteNPagedLookasideList",(unsigned int)ExDeleteNPagedLookasideList},
-{"_ExDeletePagedLookasideList",(unsigned int)ExDeletePagedLookasideList},
-{"_ExDeleteResource",(unsigned int)ExDeleteResource},
-{"_ExDeleteResourceLite",(unsigned int)ExDeleteResourceLite},
-{"_ExExtendZone",(unsigned int)ExExtendZone},
-{"_ExFreePool",(unsigned int)ExFreePool},
-{"_ExFreeToNPagedLookasideList",(unsigned int)ExFreeToNPagedLookasideList},
-{"_ExFreeToPagedLookasideList",(unsigned int)ExFreeToPagedLookasideList},
-{"_ExFreeToZone",(unsigned int)ExFreeToZone},
-{"_ExGetCurrentResourceThread",(unsigned int)ExGetCurrentResourceThread},
-{"_ExGetExclusiveWaiterCount",(unsigned int)ExGetExclusiveWaiterCount},
-{"_ExGetSharedWaiterCount",(unsigned int)ExGetSharedWaiterCount},
-{"_ExHookException",(unsigned int)ExHookException},
-{"_ExInitializeFastMutex",(unsigned int)ExInitializeFastMutex},
-{"_ExInitializeNPagedLookasideList",(unsigned int)ExInitializeNPagedLookasideList},
-{"_ExInitializePagedLookasideList",(unsigned int)ExInitializePagedLookasideList},
-{"_ExInitializeResource",(unsigned int)ExInitializeResource},
-{"_ExInitializeResourceLite",(unsigned int)ExInitializeResourceLite},
-{"_ExInitializeSListHead",(unsigned int)ExInitializeSListHead},
-{"_ExInitializeWorkItem",(unsigned int)ExInitializeWorkItem},
-{"_ExInitializeZone",(unsigned int)ExInitializeZone},
-{"_ExInterlockedAddLargeInteger",(unsigned int)ExInterlockedAddLargeInteger},
-{"_ExInterlockedAddUlong",(unsigned int)ExInterlockedAddUlong},
-{"_ExInterlockedAllocateFromZone",(unsigned int)ExInterlockedAllocateFromZone},
-{"_ExInterlockedDecrementLong",(unsigned int)ExInterlockedDecrementLong},
-{"_ExInterlockedExchangeUlong",(unsigned int)ExInterlockedExchangeUlong},
-{"_ExInterlockedExtendZone",(unsigned int)ExInterlockedExtendZone},
-{"_ExInterlockedFreeToZone",(unsigned int)ExInterlockedFreeToZone},
-{"_ExInterlockedIncrementLong",(unsigned int)ExInterlockedIncrementLong},
-{"_ExInterlockedInsertHeadList",(unsigned int)ExInterlockedInsertHeadList},
-{"_ExInterlockedInsertTailList",(unsigned int)ExInterlockedInsertTailList},
-{"_ExInterlockedPopEntryList",(unsigned int)ExInterlockedPopEntryList},
-{"_ExInterlockedPopEntrySList",(unsigned int)ExInterlockedPopEntrySList},
-{"_ExInterlockedPushEntryList",(unsigned int)ExInterlockedPushEntryList},
-{"_ExInterlockedPushEntrySList",(unsigned int)ExInterlockedPushEntrySList},
-{"_ExInterlockedRemoveHeadList",(unsigned int)ExInterlockedRemoveHeadList},
-{"_ExIsFullZone",(unsigned int)ExIsFullZone},
-{"_ExIsObjectInFirstZoneSegment",(unsigned int)ExIsObjectInFirstZoneSegment},
-{"_ExIsResourceAcquiredExclusiveLite",(unsigned int)ExIsResourceAcquiredExclusiveLite},
-{"_ExIsResourceAcquiredSharedLite",(unsigned int)ExIsResourceAcquiredSharedLite},
-{"_ExLocalTimeToSystemTime",(unsigned int)ExLocalTimeToSystemTime},
-{"_ExQueryDepthSListHead",(unsigned int)ExQueryDepthSListHead},
-{"_ExQueueWorkItem",(unsigned int)ExQueueWorkItem},
-{"_ExRaiseStatus",(unsigned int)ExRaiseStatus},
-{"_ExReinitializeResourceLite",(unsigned int)ExReinitializeResourceLite},
-{"_ExReleaseFastMutex",(unsigned int)ExReleaseFastMutex},
-{"_ExReleaseFastMutexUnsafe",(unsigned int)ExReleaseFastMutexUnsafe},
-{"_ExReleaseResource",(unsigned int)ExReleaseResource},
-{"_ExReleaseResourceForThread",(unsigned int)ExReleaseResourceForThread},
-{"_ExReleaseResourceForThreadLite",(unsigned int)ExReleaseResourceForThreadLite},
-{"_ExSystemTimeToLocalTime",(unsigned int)ExSystemTimeToLocalTime},
-{"_ExTryToAcquireFastMutex",(unsigned int)ExTryToAcquireFastMutex},
-{"_ExTryToAcquireResourceExclusiveLite",(unsigned int)ExTryToAcquireResourceExclusiveLite},
-{"_InterlockedCompareExchange",(unsigned int)InterlockedCompareExchange},
-{"_InterlockedExchange",(unsigned int)InterlockedExchange},
-{"_InterlockedExchangeAdd",(unsigned int)InterlockedExchangeAdd},
-{"_InterlockedIncrement",(unsigned int)InterlockedIncrement},
-{"_HalAllocateCommonBuffer",(unsigned int)HalAllocateCommonBuffer},
-{"_HalAssignSlotResources",(unsigned int)HalAssignSlotResources},
-{"_HalExamineMBR",(unsigned int)HalExamineMBR},
-{"_HalFreeCommonBuffer",(unsigned int)HalFreeCommonBuffer},
-{"_HalGetAdapter",(unsigned int)HalGetAdapter},
-{"_HalGetBusData",(unsigned int)HalGetBusData},
-{"_HalGetBusDataByOffset",(unsigned int)HalGetBusDataByOffset},
-{"_HalGetDmaAlignmentRequirement",(unsigned int)HalGetDmaAlignmentRequirement},
-{"_HalGetInterruptVector",(unsigned int)HalGetInterruptVector},
-{"_HalQuerySystemInformation",(unsigned int)HalQuerySystemInformation},
-{"_HalReadDmaCounter",(unsigned int)HalReadDmaCounter},
-{"_HalSetBusData",(unsigned int)HalSetBusData},
-{"_HalSetBusDataByOffset",(unsigned int)HalSetBusDataByOffset},
-{"_HalTranslateBusAddress",(unsigned int)HalTranslateBusAddress},
-{"_IoAcquireCancelSpinLock",(unsigned int)IoAcquireCancelSpinLock},
-{"_IoAllocateAdapterChannel",(unsigned int)IoAllocateAdapterChannel},
-{"_IoAllocateController",(unsigned int)IoAllocateController},
-{"_IoAllocateErrorLogEntry",(unsigned int)IoAllocateErrorLogEntry},
-{"_IoAllocateIrp",(unsigned int)IoAllocateIrp},
-{"_IoAllocateMdl",(unsigned int)IoAllocateMdl},
-{"_IoAssignArcName",(unsigned int)IoAssignArcName},
-{"_IoAssignResources",(unsigned int)IoAssignResources},
-{"_IoAttachDevice",(unsigned int)IoAttachDevice},
-{"_IoAttachDeviceByPointer",(unsigned int)IoAttachDeviceByPointer},
-{"_IoAttachDeviceToDeviceStack",(unsigned int)IoAttachDeviceToDeviceStack},
-{"_IoBuildAsynchronousFsdRequest",(unsigned int)IoBuildAsynchronousFsdRequest},
-{"_IoBuildDeviceIoControlRequest",(unsigned int)IoBuildDeviceIoControlRequest},
-{"_IoBuildPartialMdl",(unsigned int)IoBuildPartialMdl},
-{"_IoBuildSynchronousFsdRequest",(unsigned int)IoBuildSynchronousFsdRequest},
-{"_IoCallDriver",(unsigned int)IoCallDriver},
-{"_IoCancelIrp",(unsigned int)IoCancelIrp},
-{"_IoCheckShareAccess",(unsigned int)IoCheckShareAccess},
-{"_IoCompleteRequest",(unsigned int)IoCompleteRequest},
-{"_IoConnectInterrupt",(unsigned int)IoConnectInterrupt},
-{"_IoCreateController",(unsigned int)IoCreateController},
-{"_IoCreateDevice",(unsigned int)IoCreateDevice},
-{"_IoCreateNotificationEvent",(unsigned int)IoCreateNotificationEvent},
-{"_IoCreateSymbolicLink",(unsigned int)IoCreateSymbolicLink},
-{"_IoCreateSynchronizationEvent",(unsigned int)IoCreateSynchronizationEvent},
-{"_IoCreateUnprotectedSymbolicLink",(unsigned int)IoCreateUnprotectedSymbolicLink},
-{"_IoDeassignArcName",(unsigned int)IoDeassignArcName},
-{"_IoDeleteController",(unsigned int)IoDeleteController},
-{"_IoDeleteDevice",(unsigned int)IoDeleteDevice},
-{"_IoDeleteSymbolicLink",(unsigned int)IoDeleteSymbolicLink},
-{"_IoDetachDevice",(unsigned int)IoDetachDevice},
-{"_IoDisconnectInterrupt",(unsigned int)IoDisconnectInterrupt},
-{"_IoFlushAdapterBuffers",(unsigned int)IoFlushAdapterBuffers},
-{"_IoFreeAdapterChannel",(unsigned int)IoFreeAdapterChannel},
-{"_IoFreeController",(unsigned int)IoFreeController},
-{"_IoFreeIrp",(unsigned int)IoFreeIrp},
-{"_IoFreeMapRegisters",(unsigned int)IoFreeMapRegisters},
-{"_IoFreeMdl",(unsigned int)IoFreeMdl},
-{"_IoGetConfigurationInformation",(unsigned int)IoGetConfigurationInformation},
-{"_IoGetCurrentIrpStackLocation",(unsigned int)IoGetCurrentIrpStackLocation},
-{"_IoGetCurrentProcess",(unsigned int)IoGetCurrentProcess},
-{"_IoGetDeviceObjectPointer",(unsigned int)IoGetDeviceObjectPointer},
-{"_IoGetDeviceToVerify",(unsigned int)IoGetDeviceToVerify},
-{"_IoGetFileObjectGenericMapping",(unsigned int)IoGetFileObjectGenericMapping},
-{"_IoGetFunctionCodeFromCtlCode",(unsigned int)IoGetFunctionCodeFromCtlCode},
-{"_IoGetInitialStack",(unsigned int)IoGetInitialStack},
-{"_IoGetNextIrpStackLocation",(unsigned int)IoGetNextIrpStackLocation},
-{"_IoGetRelatedDeviceObject",(unsigned int)IoGetRelatedDeviceObject},
-{"_IoInitializeDpcRequest",(unsigned int)IoInitializeDpcRequest},
-{"_IoInitializeIrp",(unsigned int)IoInitializeIrp},
-{"_IoInitializeTimer",(unsigned int)IoInitializeTimer},
-{"_IoIsErrorUserInduced",(unsigned int)IoIsErrorUserInduced},
-{"_IoIsTotalDeviceFailure",(unsigned int)IoIsTotalDeviceFailure},
-{"_IoMakeAssociatedIrp",(unsigned int)IoMakeAssociatedIrp},
-{"_IoMapTransfer",(unsigned int)IoMapTransfer},
-{"_IoMarkIrpPending",(unsigned int)IoMarkIrpPending},
-{"_IoQueryDeviceDescription",(unsigned int)IoQueryDeviceDescription},
-{"_IoRaiseHardError",(unsigned int)IoRaiseHardError},
-{"_IoRaiseInformationalHardError",(unsigned int)IoRaiseInformationalHardError},
-{"_IoReadPartitionTable",(unsigned int)IoReadPartitionTable},
-{"_IoRegisterDriverReinitialization",(unsigned int)IoRegisterDriverReinitialization},
-{"_IoRegisterFileSystem",(unsigned int)IoRegisterFileSystem},
-{"_IoRegisterShutdownNotification",(unsigned int)IoRegisterShutdownNotification},
-{"_IoReleaseCancelSpinLock",(unsigned int)IoReleaseCancelSpinLock},
-{"_IoRemoveShareAccess",(unsigned int)IoRemoveShareAccess},
-{"_IoReportResourceUsage",(unsigned int)IoReportResourceUsage},
-{"_IoRequestDpc",(unsigned int)IoRequestDpc},
-{"_IoSetCancelRoutine",(unsigned int)IoSetCancelRoutine},
-{"_IoSetCompletionRoutine",(unsigned int)IoSetCompletionRoutine},
-{"_IoSetHardErrorOrVerifyDevice",(unsigned int)IoSetHardErrorOrVerifyDevice},
-{"_IoSetNextIrpStackLocation",(unsigned int)IoSetNextIrpStackLocation},
-{"_IoSetPartitionInformation",(unsigned int)IoSetPartitionInformation},
-{"_IoSetShareAccess",(unsigned int)IoSetShareAccess},
-{"_IoSizeOfIrp",(unsigned int)IoSizeOfIrp},
-{"_IoStartNextPacket",(unsigned int)IoStartNextPacket},
-{"_IoStartNextPacketByKey",(unsigned int)IoStartNextPacketByKey},
-{"_IoStartPacket",(unsigned int)IoStartPacket},
-{"_IoStartTimer",(unsigned int)IoStartTimer},
-{"_IoStopTimer",(unsigned int)IoStopTimer},
-{"_IoUnregisterShutdownNotification",(unsigned int)IoUnregisterShutdownNotification},
-{"_IoUpdateShareAccess",(unsigned int)IoUpdateShareAccess},
-{"_IoWriteErrorLogEntry",(unsigned int)IoWriteErrorLogEntry},
-{"_IoWritePartitionTable",(unsigned int)IoWritePartitionTable},
-{"_KeAcquireSpinLock",(unsigned int)KeAcquireSpinLock},
-{"_KeAcquireSpinLockAtDpcLevel",(unsigned int)KeAcquireSpinLockAtDpcLevel},
-{"_KeBugCheck",(unsigned int)KeBugCheck},
-{"_KeBugCheckEx",(unsigned int)KeBugCheckEx},
-{"_KeCancelTimer",(unsigned int)KeCancelTimer},
-{"_KeClearEvent",(unsigned int)KeClearEvent},
-{"_KeDelayExecutionThread",(unsigned int)KeDelayExecutionThread},
-{"_KeDeregisterBugCheckCallback",(unsigned int)KeDeregisterBugCheckCallback},
-{"_KeEnterCriticalRegion",(unsigned int)KeEnterCriticalRegion},
-{"_KeFlushIoBuffers",(unsigned int)KeFlushIoBuffers},
-{"_KeGetCurrentIrql",(unsigned int)KeGetCurrentIrql},
-{"_KeGetCurrentProcessorNumber",(unsigned int)KeGetCurrentProcessorNumber},
-{"_KeGetDcacheFillSize",(unsigned int)KeGetDcacheFillSize},
-{"_KeInitializeCallbackRecord",(unsigned int)KeInitializeCallbackRecord},
-{"_KeInitializeDeviceQueue",(unsigned int)KeInitializeDeviceQueue},
-{"_KeInitializeDpc",(unsigned int)KeInitializeDpc},
-{"_KeInitializeEvent",(unsigned int)KeInitializeEvent},
-{"_KeInitializeMutex",(unsigned int)KeInitializeMutex},
-{"_KeInitializeSemaphore",(unsigned int)KeInitializeSemaphore},
-{"_KeInitializeSpinLock",(unsigned int)KeInitializeSpinLock},
-{"_KeInitializeTimer",(unsigned int)KeInitializeTimer},
-{"_KeInitializeTimerEx",(unsigned int)KeInitializeTimerEx},
-{"_KeInsertByKeyDeviceQueue",(unsigned int)KeInsertByKeyDeviceQueue},
-{"_KeInsertDeviceQueue",(unsigned int)KeInsertDeviceQueue},
-{"_KeInsertQueueDpc",(unsigned int)KeInsertQueueDpc},
-{"_KeLeaveCriticalRegion",(unsigned int)KeLeaveCriticalRegion},
-{"_KeLowerIrql",(unsigned int)KeLowerIrql},
-{"_KeQueryPerformanceCounter",(unsigned int)KeQueryPerformanceCounter},
-{"_KeQuerySystemTime",(unsigned int)KeQuerySystemTime},
-{"_KeQueryTickCount",(unsigned int)KeQueryTickCount},
-{"_KeQueryTimeIncrement",(unsigned int)KeQueryTimeIncrement},
-{"_KeRaiseIrql",(unsigned int)KeRaiseIrql},
-{"_KeReadStateEvent",(unsigned int)KeReadStateEvent},
-{"_KeReadStateMutex",(unsigned int)KeReadStateMutex},
-{"_KeReadStateSemaphore",(unsigned int)KeReadStateSemaphore},
-{"_KeReadStateTimer",(unsigned int)KeReadStateTimer},
-{"_KeRegisterBugCheckCallback",(unsigned int)KeRegisterBugCheckCallback},
-{"_KeReleaseMutex",(unsigned int)KeReleaseMutex},
-{"_KeReleaseSemaphore",(unsigned int)KeReleaseSemaphore},
-{"_KeReleaseSpinLock",(unsigned int)KeReleaseSpinLock},
-{"_KeReleaseSpinLockFromDpcLevel",(unsigned int)KeReleaseSpinLockFromDpcLevel},
-{"_KeRemoveByKeyDeviceQueue",(unsigned int)KeRemoveByKeyDeviceQueue},
-{"_KeRemoveDeviceQueue",(unsigned int)KeRemoveDeviceQueue},
-{"_KeRemoveQueueDpc",(unsigned int)KeRemoveQueueDpc},
-{"_KeResetEvent",(unsigned int)KeResetEvent},
-{"_KeSetBasePriorityThread",(unsigned int)KeSetBasePriorityThread},
-{"_KeSetEvent",(unsigned int)KeSetEvent},
-{"_KeSetPriorityThread",(unsigned int)KeSetPriorityThread},
-{"_KeSetTimer",(unsigned int)KeSetTimer},
-{"_KeSetTimerEx",(unsigned int)KeSetTimerEx},
-{"_KeStallExecutionProcessor",(unsigned int)KeStallExecutionProcessor},
-{"_KeSynchronizeExecution",(unsigned int)KeSynchronizeExecution},
-{"_KeWaitForMultipleObjects",(unsigned int)KeWaitForMultipleObjects},
-{"_KeWaitForMutexObject",(unsigned int)KeWaitForMutexObject},
-{"_KeWaitForSingleObject",(unsigned int)KeWaitForSingleObject},
-{"_MmAllocateContiguousMemory",(unsigned int)MmAllocateContiguousMemory},
-{"_MmAllocateNonCachedMemory",(unsigned int)MmAllocateNonCachedMemory},
-{"_MmBuildMdlForNonPagedPool",(unsigned int)MmBuildMdlForNonPagedPool},
-{"_MmCreateMdl",(unsigned int)MmCreateMdl},
-{"_MmFreeContiguousMemory",(unsigned int)MmFreeContiguousMemory},
-{"_MmFreeNonCachedMemory",(unsigned int)MmFreeNonCachedMemory},
-{"_MmGetMdlByteCount",(unsigned int)MmGetMdlByteCount},
-{"_MmGetMdlByteOffset",(unsigned int)MmGetMdlByteOffset},
-{"_MmGetMdlVirtualAddress",(unsigned int)MmGetMdlVirtualAddress},
-{"_MmGetPhysicalAddress",(unsigned int)MmGetPhysicalAddress},
-{"_MmGetSystemAddressForMdl",(unsigned int)MmGetSystemAddressForMdl},
-{"_MmInitializeMdl",(unsigned int)MmInitializeMdl},
-{"_MmIsAddressValid",(unsigned int)MmIsAddressValid},
-{"_MmIsNonPagedSystemAddressValid",(unsigned int)MmIsNonPagedSystemAddressValid},
-{"_MmIsThisAnNtAsSystem",(unsigned int)MmIsThisAnNtAsSystem},
-{"_MmLockPagableCodeSection",(unsigned int)MmLockPagableCodeSection},
-{"_MmLockPagableDataSection",(unsigned int)MmLockPagableDataSection},
-{"_MmLockPagableSectionByHandle",(unsigned int)MmLockPagableSectionByHandle},
-{"_MmMapIoSpace",(unsigned int)MmMapIoSpace},
-{"_MmMapLockedPages",(unsigned int)MmMapLockedPages},
-{"_MmPageEntireDriver",(unsigned int)MmPageEntireDriver},
-{"_MmResetDriverPaging",(unsigned int)MmResetDriverPaging},
-{"_MmPrepareMdlForReuse",(unsigned int)MmPrepareMdlForReuse},
-{"_MmProbeAndLockPages",(unsigned int)MmProbeAndLockPages},
-{"_MmQuerySystemSize",(unsigned int)MmQuerySystemSize},
-{"_MmSizeOfMdl",(unsigned int)MmSizeOfMdl},
-{"_MmUnlockPages",(unsigned int)MmUnlockPages},
-{"_MmUnlockPagableImageSection",(unsigned int)MmUnlockPagableImageSection},
-{"_MmUnmapIoSpace",(unsigned int)MmUnmapIoSpace},
-{"_MmUnmapLockedPages",(unsigned int)MmUnmapLockedPages},
-{"_ObDereferenceObject",(unsigned int)ObDereferenceObject},
-{"_ObReferenceObjectByHandle",(unsigned int)ObReferenceObjectByHandle},
-{"_ObReferenceObjectByPointer",(unsigned int)ObReferenceObjectByPointer},
-{"_PsCreateSystemThread",(unsigned int)PsCreateSystemThread},
-{"_PsGetCurrentProcess",(unsigned int)PsGetCurrentProcess},
-{"_PsGetCurrentThread",(unsigned int)PsGetCurrentThread},
-{"_PsTerminateSystemThread",(unsigned int)PsTerminateSystemThread},
-{"_InitializeListHead",(unsigned int)InitializeListHead},
-{"_InitializeObjectAttributes",(unsigned int)InitializeObjectAttributes},
-{"_InsertHeadList",(unsigned int)InsertHeadList},
-{"_InsertTailList",(unsigned int)InsertTailList},
-{"_PopEntryList",(unsigned int)PopEntryList},
-{"_PushEntryList",(unsigned int)PushEntryList},
-{"_RemoveEntryList",(unsigned int)RemoveEntryList},
-{"_RemoveHeadList",(unsigned int)RemoveHeadList},
-{"_RemoveTailList",(unsigned int)RemoveTailList},
-{"_RtlAnsiStringToUnicodeSize",(unsigned int)RtlAnsiStringToUnicodeSize},
-{"_RtlAnsiStringToUnicodeString",(unsigned int)RtlAnsiStringToUnicodeString},
-{"_RtlAppendUnicodeStringToString",(unsigned int)RtlAppendUnicodeStringToString},
-{"_RtlAppendUnicodeToString",(unsigned int)RtlAppendUnicodeToString},
-{"_RtlCharToInteger",(unsigned int)RtlCharToInteger},
-{"_RtlCheckRegistryKey",(unsigned int)RtlCheckRegistryKey},
-{"_RtlCompareMemory",(unsigned int)RtlCompareMemory},
-{"_RtlCompareString",(unsigned int)RtlCompareString},
-{"_RtlCompareUnicodeString",(unsigned int)RtlCompareUnicodeString},
-{"_RtlConvertLongToLargeInteger",(unsigned int)RtlConvertLongToLargeInteger},
-{"_RtlConvertUlongToLargeInteger",(unsigned int)RtlConvertUlongToLargeInteger},
-{"_RtlCopyBytes",(unsigned int)RtlCopyBytes},
-{"_RtlCopyMemory",(unsigned int)RtlCopyMemory},
-{"_RtlCopyString",(unsigned int)RtlCopyString},
-{"_RtlCopyUnicodeString",(unsigned int)RtlCopyUnicodeString},
-{"_RtlCreateRegistryKey",(unsigned int)RtlCreateRegistryKey},
-{"_RtlCreateSecurityDescriptor",(unsigned int)RtlCreateSecurityDescriptor},
-{"_RtlDeleteRegistryValue",(unsigned int)RtlDeleteRegistryValue},
-{"_RtlEnlargedIntegerMultiply",(unsigned int)RtlEnlargedIntegerMultiply},
-{"_RtlEnlargedUnsignedDivide",(unsigned int)RtlEnlargedUnsignedDivide},
-{"_RtlEnlargedUnsignedMultiply",(unsigned int)RtlEnlargedUnsignedMultiply},
-{"_RtlEqualString",(unsigned int)RtlEqualString},
-{"_RtlEqualUnicodeString",(unsigned int)RtlEqualUnicodeString},
-{"_RtlExtendedIntegerMultiply",(unsigned int)RtlExtendedIntegerMultiply},
-{"_RtlExtendedLargeIntegerDivide",(unsigned int)RtlExtendedLargeIntegerDivide},
-{"_RtlExtendedMagicDivide",(unsigned int)RtlExtendedMagicDivide},
-{"_RtlFillMemory",(unsigned int)RtlFillMemory},
-{"_RtlFreeAnsiString",(unsigned int)RtlFreeAnsiString},
-{"_RtlFreeUnicodeString",(unsigned int)RtlFreeUnicodeString},
-{"_RtlInitAnsiString",(unsigned int)RtlInitAnsiString},
-{"_RtlInitString",(unsigned int)RtlInitString},
-{"_RtlInitUnicodeString",(unsigned int)RtlInitUnicodeString},
-{"_RtlIntegerToUnicodeString",(unsigned int)RtlIntegerToUnicodeString},
-{"_RtlLargeIntegerAdd",(unsigned int)RtlLargeIntegerAdd},
-{"_RtlLargeIntegerAnd",(unsigned int)RtlLargeIntegerAnd},
-{"_RtlLargeIntegerArithmeticShift",(unsigned int)RtlLargeIntegerArithmeticShift},
-{"_RtlLargeIntegerDivide",(unsigned int)RtlLargeIntegerDivide},
-{"_RtlLargeIntegerEqualTo",(unsigned int)RtlLargeIntegerEqualTo},
-{"_RtlLargeIntegerEqualToZero",(unsigned int)RtlLargeIntegerEqualToZero},
-{"_RtlLargeIntegerGreaterThan",(unsigned int)RtlLargeIntegerGreaterThan},
-{"_RtlLargeIntegerGreaterThanOrEqualTo",(unsigned int)RtlLargeIntegerGreaterThanOrEqualTo},
-{"_RtlLargeIntegerGreaterThanOrEqualToZero",(unsigned int)RtlLargeIntegerGreaterThanOrEqualToZero},
-{"_RtlLargeIntegerGreaterThanZero",(unsigned int)RtlLargeIntegerGreaterThanZero},
-{"_RtlLargeIntegerLessThan",(unsigned int)RtlLargeIntegerLessThan},
-{"_RtlLargeIntegerLessThanOrEqualTo",(unsigned int)RtlLargeIntegerLessThanOrEqualTo},
-{"_RtlLargeIntegerLessThanZero",(unsigned int)RtlLargeIntegerLessThanZero},
-{"_RtlLargeIntegerNegate",(unsigned int)RtlLargeIntegerNegate},
-{"_RtlLargeIntegerNotEqualTo",(unsigned int)RtlLargeIntegerNotEqualTo},
-{"_RtlLargeIntegerShiftLeft",(unsigned int)RtlLargeIntegerShiftLeft},
-{"_RtlLargeIntegerShiftRight",(unsigned int)RtlLargeIntegerShiftRight},
-{"_RtlLargeIntegerSubtract",(unsigned int)RtlLargeIntegerSubtract},
-{"_RtlLengthSecurityDescriptor",(unsigned int)RtlLengthSecurityDescriptor},
-{"_RtlMoveMemory",(unsigned int)RtlMoveMemory},
-{"_RtlQueryRegistryValues",(unsigned int)RtlQueryRegistryValues},
-{"_RtlRetrieveUlong",(unsigned int)RtlRetrieveUlong},
-{"_RtlRetrieveUshort",(unsigned int)RtlRetrieveUshort},
-{"_RtlSetDaclSecurityDescriptor",(unsigned int)RtlSetDaclSecurityDescriptor},
-{"_RtlStoreUlong",(unsigned int)RtlStoreUlong},
-{"_RtlStoreUshort",(unsigned int)RtlStoreUshort},
-{"_RtlTimeFieldsToTime",(unsigned int)RtlTimeFieldsToTime},
-{"_RtlTimeToTimeFields",(unsigned int)RtlTimeToTimeFields},
-{"_RtlUnicodeStringToAnsiString",(unsigned int)RtlUnicodeStringToAnsiString},
-{"_RtlUnicodeStringToInteger",(unsigned int)RtlUnicodeStringToInteger},
-{"_RtlUpcaseUnicodeString",(unsigned int)RtlUpcaseUnicodeString},
-{"_RtlUpperString",(unsigned int)RtlUpperString},
-{"_RtlValidSecurityDescriptor",(unsigned int)RtlValidSecurityDescriptor},
-{"_RtlWriteRegistryValue",(unsigned int)RtlWriteRegistryValue},
-{"_RtlZeroMemory",(unsigned int)RtlZeroMemory},
-{"_SeAccessCheck",(unsigned int)SeAccessCheck},
-{"_SeAssignSecurity",(unsigned int)SeAssignSecurity},
-{"_SeDeassignSecurity",(unsigned int)SeDeassignSecurity},
-{"_SeSinglePrivilegeCheck",(unsigned int)SeSinglePrivilegeCheck},
-{"_ZwClose",(unsigned int)ZwClose},
-{"_ZwCreateDirectoryObject",(unsigned int)ZwCreateDirectoryObject},
-{"_ZwCreateFile",(unsigned int)ZwCreateFile},
-{"_ZwCreateKey",(unsigned int)ZwCreateKey},
-{"_ZwDeleteKey",(unsigned int)ZwDeleteKey},
-{"_ZwEnumerateKey",(unsigned int)ZwEnumerateKey},
-{"_ZwEnumerateValueKey",(unsigned int)ZwEnumerateValueKey},
-{"_ZwFlushKey",(unsigned int)ZwFlushKey},
-{"_ZwMakeTemporaryObject",(unsigned int)ZwMakeTemporaryObject},
-{"_ZwMapViewOfSection",(unsigned int)ZwMapViewOfSection},
-{"_ZwOpenFile",(unsigned int)ZwOpenFile},
-{"_ZwOpenKey",(unsigned int)ZwOpenKey},
-{"_ZwOpenSection",(unsigned int)ZwOpenSection},
-{"_ZwQueryInformationFile",(unsigned int)ZwQueryInformationFile},
-{"_ZwQueryKey",(unsigned int)ZwQueryKey},
-{"_ZwQueryValueKey",(unsigned int)ZwQueryValueKey},
-{"_ZwReadFile",(unsigned int)ZwReadFile},
-{"_ZwSetInformationFile",(unsigned int)ZwSetInformationFile},
-{"_ZwSetInformationThread",(unsigned int)ZwSetInformationThread},
-{"_ZwSetValueKey",(unsigned int)ZwSetValueKey},
-{"_ZwUnmapViewOfSection",(unsigned int)ZwUnmapViewOfSection},
-{"_ZwWriteFile",(unsigned int)ZwWriteFile},
-{"_sprintf",(unsigned int)sprintf},
-{"_wcschr",(unsigned int)wcschr},
-{"_wcsncat",(unsigned int)wcsncat},
-{"_wcsncpy",(unsigned int)wcsncpy},
-{"_wtolower",(unsigned int)wtolower},
-{"_wtoupper",(unsigned int)wtoupper},
-{"_CbInitDccb",(unsigned int)CbInitDccb},
-{"_CbAcquireForRead",(unsigned int)CbAcquireForRead},
-{"_CbReleaseFromRead",(unsigned int)CbReleaseFromRead},
-{NULL,NULL},
-};