1 @ stdcall
-fastcall ExAcquireFastMutexUnsafe
(ptr
)
2 @ stub ExAcquireRundownProtection
3 @ stub ExAcquireRundownProtectionEx
4 @ stub ExInitializeRundownProtection
5 @ stub ExInterlockedAddLargeStatistic
6 @ stub ExInterlockedCompareExchange64
7 @ stdcall
-fastcall
-arch
=i386 ExInterlockedFlushSList
(ptr
) NTOSKRNL_ExInterlockedFlushSList
8 @ stdcall
-fastcall
-arch
=i386 ExInterlockedPopEntrySList
(ptr ptr
) NTOSKRNL_ExInterlockedPopEntrySList
9 @ stdcall
-fastcall
-arch
=i386 ExInterlockedPushEntrySList
(ptr ptr ptr
) NTOSKRNL_ExInterlockedPushEntrySList
10 @ stub ExReInitializeRundownProtection
11 @ stdcall
-fastcall ExReleaseFastMutexUnsafe
(ptr
)
12 @ stdcall
-fastcall ExReleaseResourceLite
(ptr
)
13 @ stub ExReleaseRundownProtection
14 @ stub ExReleaseRundownProtectionEx
15 @ stub ExRundownCompleted
16 @ stub ExWaitForRundownProtectionRelease
17 @ stub ExfAcquirePushLockExclusive
18 @ stub ExfAcquirePushLockShared
19 @ stub ExfInterlockedAddUlong
20 @ stub ExfInterlockedCompareExchange64
21 @ stub ExfInterlockedInsertHeadList
22 @ stub ExfInterlockedInsertTailList
23 @ stub ExfInterlockedPopEntryList
24 @ stub ExfInterlockedPushEntryList
25 @ stdcall
-fastcall
-arch
=i386 ExfInterlockedRemoveHeadList
(ptr ptr
)
26 @ stub ExfReleasePushLock
27 @ stub Exfi386InterlockedDecrementLong
28 @ stub Exfi386InterlockedExchangeUlong
29 @ stub Exfi386InterlockedIncrementLong
30 @ stdcall
-arch
=win64 ExpInterlockedFlushSList
(ptr
) RtlInterlockedFlushSList
31 @ stdcall
-arch
=win64 ExpInterlockedPopEntrySList
(ptr
) RtlInterlockedPopEntrySList
32 @ stdcall
-arch
=win64 ExpInterlockedPushEntrySList
(ptr ptr
) RtlInterlockedPushEntrySList
34 @ stdcall
-fastcall InterlockedCompareExchange
(ptr long long
) NTOSKRNL_InterlockedCompareExchange
35 @ stdcall
-fastcall InterlockedDecrement
(ptr
) NTOSKRNL_InterlockedDecrement
36 @ stdcall
-fastcall InterlockedExchange
(ptr long
) NTOSKRNL_InterlockedExchange
37 @ stdcall
-fastcall InterlockedExchangeAdd
(ptr long
) NTOSKRNL_InterlockedExchangeAdd
38 @ stdcall
-fastcall InterlockedIncrement
(ptr
) NTOSKRNL_InterlockedIncrement
39 @ stdcall
-fastcall
-arch
=win32 InterlockedPopEntrySList
(ptr
) NTOSKRNL_InterlockedPopEntrySList
40 @ stdcall
-fastcall
-arch
=win32 InterlockedPushEntrySList
(ptr ptr
) NTOSKRNL_InterlockedPushEntrySList
41 @ stdcall
-arch
=win64 ExQueryDepthSList
(ptr
) RtlQueryDepthSList
42 @ stub IoAssignDriveLetters
43 @ stub IoReadPartitionTable
44 @ stub IoSetPartitionInformation
45 @ stub IoWritePartitionTable
46 @ stdcall
-fastcall IofCallDriver
(ptr ptr
)
47 @ stdcall
-fastcall IofCompleteRequest
(ptr long
)
48 @ stdcall
-arch
=arm
,arm64
,x86_64 KeAcquireInStackQueuedSpinLock
(ptr ptr
)
49 @ stdcall
-fastcall KeAcquireInStackQueuedSpinLockAtDpcLevel
(ptr ptr
)
50 @ stdcall KeEnterGuardedRegion
()
51 @ stdcall KeExpandKernelStackAndCallout
(ptr ptr long
)
52 @ stdcall KeExpandKernelStackAndCalloutEx
(ptr ptr long long ptr
)
53 @ stdcall KeLeaveGuardedRegion
()
54 @ stdcall
-arch
=arm
,arm64
,x86_64 KeReleaseInStackQueuedSpinLock
(ptr
)
55 @ stdcall
-fastcall KeReleaseInStackQueuedSpinLockFromDpcLevel
(ptr
)
56 @ stub KeSetTimeUpdateNotifyRoutine
57 @ stub KefAcquireSpinLockAtDpcLevel
58 @ stub KefReleaseSpinLockFromDpcLevel
59 @ stub KiAcquireSpinLock
60 @ stub KiReleaseSpinLock
61 @ stdcall
-fastcall ObfDereferenceObject
(ptr
)
62 @ stdcall
-fastcall ObfReferenceObject
(ptr
)
63 @ stub RtlPrefetchMemoryNonTemporal
64 @ cdecl
-i386
-norelay RtlUlongByteSwap
()
65 @ cdecl
-ret64 RtlUlonglongByteSwap
(int64
)
66 @ cdecl
-i386
-norelay RtlUshortByteSwap
()
68 @ stub Kei386EoiHelper
69 @ stub Kii386SpinOnSpinLock
75 @ stub CcFastCopyWrite
76 @ stub CcFastMdlReadWait
77 @ stub CcFastReadNotPossible
80 @ stub CcGetDirtyPages
81 @ stub CcGetFileObjectFromBcb
82 @ stub CcGetFileObjectFromSectionPtrs
83 @ stub CcGetFlushedValidData
84 @ stub CcGetLsnForFileObject
85 @ stub CcInitializeCacheMap
86 @ stub CcIsThereDirtyData
89 @ stub CcMdlReadComplete
90 @ stub CcMdlWriteAbort
91 @ stub CcMdlWriteComplete
92 @ stub CcPinMappedData
94 @ stub CcPrepareMdlWrite
95 @ stub CcPreparePinWrite
96 @ stub CcPurgeCacheSection
99 @ stub CcScheduleReadAhead
100 @ stub CcSetAdditionalCacheAttributes
101 @ stub CcSetBcbOwnerPointer
102 @ stub CcSetDirtyPageThreshold
103 @ stub CcSetDirtyPinnedData
104 @ stub CcSetFileSizes
105 @ stub CcSetLogHandleForFile
106 @ stub CcSetReadAheadGranularity
107 @ stub CcUninitializeCacheMap
109 @ stub CcUnpinDataForThread
110 @ stub CcUnpinRepinnedBcb
111 @ stub CcWaitForCurrentLazyWriterActivity
113 @ stdcall CmRegisterCallback
(ptr ptr ptr
)
114 @ stdcall CmUnRegisterCallback
(int64
)
115 @ stdcall DbgBreakPoint
()
116 @ stub DbgBreakPointWithStatus
117 @ stub DbgLoadImageSymbols
118 @ varargs DbgPrint
(str
)
119 @ varargs DbgPrintEx
(long long str
)
120 @ stub DbgPrintReturnControlC
122 @ stdcall DbgQueryDebugFilterState
(long long
)
123 @ stub DbgSetDebugFilterState
124 @ stdcall ExAcquireResourceExclusiveLite
(ptr long
)
125 @ stdcall ExAcquireResourceSharedLite
(ptr long
)
126 @ stdcall ExAcquireSharedStarveExclusive
(ptr long
)
127 @ stdcall ExAcquireSharedWaitForExclusive
(ptr long
)
128 @ stub ExAllocateFromPagedLookasideList
129 @ stdcall ExAllocatePool
(long long
)
130 @ stdcall ExAllocatePoolWithQuota
(long long
)
131 @ stdcall ExAllocatePoolWithQuotaTag
(long long long
)
132 @ stdcall ExAllocatePoolWithTag
(long long long
)
133 @ stub ExAllocatePoolWithTagPriority
134 @ stub ExConvertExclusiveToSharedLite
135 @ stdcall ExCreateCallback
(ptr ptr long long
)
136 @ stdcall ExDeleteNPagedLookasideList
(ptr
)
137 @ stdcall ExDeletePagedLookasideList
(ptr
)
138 @ stdcall ExDeleteResourceLite
(ptr
)
139 @ stub ExDesktopObjectType
140 @ stub ExDisableResourceBoostLite
141 @ stub ExEnumHandleTable
142 @ extern ExEventObjectType
144 @ stdcall
-fastcall ExfUnblockPushLock
(ptr ptr
)
145 @ stdcall ExFreePool
(ptr
)
146 @ stdcall ExFreePoolWithTag
(ptr long
)
147 @ stub ExFreeToPagedLookasideList
148 @ stub ExGetCurrentProcessorCounts
149 @ stub ExGetCurrentProcessorCpuUsage
150 @ stdcall ExGetExclusiveWaiterCount
(ptr
)
151 @ stub ExGetPreviousMode
152 @ stdcall ExGetSharedWaiterCount
(ptr
)
153 @ stdcall ExInitializeNPagedLookasideList
(ptr ptr ptr long long long long
)
154 @ stdcall ExInitializePagedLookasideList
(ptr ptr ptr long long long long
)
155 @ stdcall ExInitializeResourceLite
(ptr
)
156 @ stdcall ExInitializeZone
(ptr long ptr long
)
157 @ stub ExInterlockedAddLargeInteger
158 @ stub ExInterlockedAddUlong
159 @ stub ExInterlockedDecrementLong
160 @ stub ExInterlockedExchangeUlong
161 @ stub ExInterlockedExtendZone
162 @ stub ExInterlockedIncrementLong
163 @ stub ExInterlockedInsertHeadList
164 @ stub ExInterlockedInsertTailList
165 @ stub ExInterlockedPopEntryList
166 @ stub ExInterlockedPushEntryList
167 @ stdcall ExInterlockedRemoveHeadList
(ptr ptr
)
168 @ stub ExIsProcessorFeaturePresent
169 @ stdcall ExIsResourceAcquiredExclusiveLite
(ptr
)
170 @ stdcall ExIsResourceAcquiredSharedLite
(ptr
)
171 @ stdcall ExLocalTimeToSystemTime
(ptr ptr
) RtlLocalTimeToSystemTime
172 @ stub ExNotifyCallback
173 @ stub ExQueryPoolBlockSize
174 @ stub ExQueueWorkItem
175 @ stub ExRaiseAccessViolation
176 @ stub ExRaiseDatatypeMisalignment
177 @ stub ExRaiseException
178 @ stub ExRaiseHardError
180 @ stub ExRegisterCallback
181 @ stub ExReinitializeResourceLite
182 @ stdcall ExReleaseResourceForThreadLite
(ptr long
)
183 @ extern ExSemaphoreObjectType
184 @ stub ExSetResourceOwnerPointer
185 @ stdcall ExSetTimerResolution
(long long
)
186 @ stub ExSystemExceptionFilter
187 @ stdcall ExSystemTimeToLocalTime
(ptr ptr
) RtlSystemTimeToLocalTime
188 @ stub ExUnregisterCallback
189 @ stdcall ExUuidCreate
(ptr
)
191 @ stub ExWindowStationObjectType
192 @ stub Exi386InterlockedDecrementLong
193 @ stub Exi386InterlockedExchangeUlong
194 @ stub Exi386InterlockedIncrementLong
195 @ stub FsRtlAcquireFileExclusive
196 @ stub FsRtlAddLargeMcbEntry
197 @ stub FsRtlAddMcbEntry
198 @ stub FsRtlAddToTunnelCache
199 @ stub FsRtlAllocateFileLock
200 @ stub FsRtlAllocatePool
201 @ stub FsRtlAllocatePoolWithQuota
202 @ stub FsRtlAllocatePoolWithQuotaTag
203 @ stub FsRtlAllocatePoolWithTag
204 @ stub FsRtlAllocateResource
205 @ stub FsRtlAreNamesEqual
206 @ stub FsRtlBalanceReads
207 @ stub FsRtlCheckLockForReadAccess
208 @ stub FsRtlCheckLockForWriteAccess
209 @ stub FsRtlCheckOplock
211 @ stub FsRtlCopyWrite
212 @ stub FsRtlCurrentBatchOplock
213 @ stub FsRtlDeleteKeyFromTunnelCache
214 @ stub FsRtlDeleteTunnelCache
215 @ stub FsRtlDeregisterUncProvider
216 @ stub FsRtlDissectDbcs
217 @ stub FsRtlDissectName
218 @ stub FsRtlDoesDbcsContainWildCards
219 @ stub FsRtlDoesNameContainWildCards
220 @ stub FsRtlFastCheckLockForRead
221 @ stub FsRtlFastCheckLockForWrite
222 @ stub FsRtlFastUnlockAll
223 @ stub FsRtlFastUnlockAllByKey
224 @ stub FsRtlFastUnlockSingle
225 @ stub FsRtlFindInTunnelCache
226 @ stub FsRtlFreeFileLock
227 @ stub FsRtlGetFileSize
228 @ stub FsRtlGetNextFileLock
229 @ stub FsRtlGetNextLargeMcbEntry
230 @ stub FsRtlGetNextMcbEntry
231 @ stub FsRtlIncrementCcFastReadNoWait
232 @ stub FsRtlIncrementCcFastReadNotPossible
233 @ stub FsRtlIncrementCcFastReadResourceMiss
234 @ stub FsRtlIncrementCcFastReadWait
235 @ stub FsRtlInitializeFileLock
236 @ stub FsRtlInitializeLargeMcb
237 @ stub FsRtlInitializeMcb
238 @ stub FsRtlInitializeOplock
239 @ stub FsRtlInitializeTunnelCache
240 @ stub FsRtlInsertPerFileObjectContext
241 @ stub FsRtlInsertPerStreamContext
242 @ stub FsRtlIsDbcsInExpression
243 @ stub FsRtlIsFatDbcsLegal
244 @ stub FsRtlIsHpfsDbcsLegal
245 @ stdcall FsRtlIsNameInExpression
(ptr ptr long ptr
)
246 @ stub FsRtlIsNtstatusExpected
247 @ stub FsRtlIsPagingFile
248 @ stub FsRtlIsTotalDeviceFailure
249 @ stub FsRtlLegalAnsiCharacterArray
250 @ stub FsRtlLookupLargeMcbEntry
251 @ stub FsRtlLookupLastLargeMcbEntry
252 @ stub FsRtlLookupLastLargeMcbEntryAndIndex
253 @ stub FsRtlLookupLastMcbEntry
254 @ stub FsRtlLookupMcbEntry
255 @ stub FsRtlLookupPerFileObjectContext
256 @ stub FsRtlLookupPerStreamContextInternal
258 @ stub FsRtlMdlReadComplete
259 @ stub FsRtlMdlReadCompleteDev
260 @ stub FsRtlMdlReadDev
261 @ stub FsRtlMdlWriteComplete
262 @ stub FsRtlMdlWriteCompleteDev
263 @ stub FsRtlNormalizeNtstatus
264 @ stub FsRtlNotifyChangeDirectory
265 @ stub FsRtlNotifyCleanup
266 @ stub FsRtlNotifyFilterChangeDirectory
267 @ stub FsRtlNotifyFilterReportChange
268 @ stub FsRtlNotifyFullChangeDirectory
269 @ stub FsRtlNotifyFullReportChange
270 @ stub FsRtlNotifyInitializeSync
271 @ stub FsRtlNotifyReportChange
272 @ stub FsRtlNotifyUninitializeSync
273 @ stub FsRtlNotifyVolumeEvent
274 @ stub FsRtlNumberOfRunsInLargeMcb
275 @ stub FsRtlNumberOfRunsInMcb
276 @ stub FsRtlOplockFsctrl
277 @ stub FsRtlOplockIsFastIoPossible
278 @ stub FsRtlPostPagingFileStackOverflow
279 @ stub FsRtlPostStackOverflow
280 @ stub FsRtlPrepareMdlWrite
281 @ stub FsRtlPrepareMdlWriteDev
282 @ stub FsRtlPrivateLock
283 @ stub FsRtlProcessFileLock
284 @ stdcall FsRtlRegisterFileSystemFilterCallbacks
(ptr ptr
)
285 @ stdcall FsRtlRegisterUncProvider
(ptr ptr long
)
286 @ stub FsRtlReleaseFile
287 @ stub FsRtlRemoveLargeMcbEntry
288 @ stub FsRtlRemoveMcbEntry
289 @ stub FsRtlRemovePerFileObjectContext
290 @ stub FsRtlRemovePerStreamContext
291 @ stub FsRtlResetLargeMcb
292 @ stub FsRtlSplitLargeMcb
293 @ stub FsRtlSyncVolumes
294 @ stub FsRtlTeardownPerStreamContexts
295 @ stub FsRtlTruncateLargeMcb
296 @ stub FsRtlTruncateMcb
297 @ stub FsRtlUninitializeFileLock
298 @ stub FsRtlUninitializeLargeMcb
299 @ stub FsRtlUninitializeMcb
300 @ stub FsRtlUninitializeOplock
301 @ stub HalDispatchTable
302 @ stub HalPrivateDispatchTable
303 @ stub HeadlessDispatch
304 @ stub InbvAcquireDisplayOwnership
305 @ stub InbvCheckDisplayOwnership
306 @ stub InbvDisplayString
307 @ stub InbvEnableBootDriver
308 @ stub InbvEnableDisplayString
309 @ stub InbvInstallDisplayStringFilter
310 @ stub InbvIsBootDriverInstalled
311 @ stub InbvNotifyDisplayOwnershipLost
312 @ stub InbvResetDisplay
313 @ stub InbvSetScrollRegion
314 @ stub InbvSetTextColor
315 @ stub InbvSolidColorFill
316 @ extern InitSafeBootMode
317 @ stdcall IoAcquireCancelSpinLock
(ptr
)
318 @ stdcall IoAcquireRemoveLockEx
(ptr ptr str long long
)
319 @ stub IoAcquireVpbSpinLock
320 @ stub IoAdapterObjectType
321 @ stub IoAllocateAdapterChannel
322 @ stub IoAllocateController
323 @ stdcall IoAllocateDriverObjectExtension
(ptr ptr long ptr
)
324 @ stdcall IoAllocateErrorLogEntry
(ptr long
)
325 @ stdcall IoAllocateIrp
(long long
)
326 @ stdcall IoAllocateMdl
(ptr long long long ptr
)
327 @ stdcall IoAllocateWorkItem
(ptr
)
328 @ stub IoAssignResources
329 @ stdcall IoAttachDevice
(ptr ptr ptr
)
330 @ stub IoAttachDeviceByPointer
331 @ stdcall IoAttachDeviceToDeviceStack
(ptr ptr
)
332 @ stub IoAttachDeviceToDeviceStackSafe
333 @ stub IoBuildAsynchronousFsdRequest
334 @ stdcall IoBuildDeviceIoControlRequest
(long ptr ptr long ptr long long ptr ptr
)
335 @ stub IoBuildPartialMdl
336 @ stdcall IoBuildSynchronousFsdRequest
(long ptr ptr long ptr ptr ptr
)
337 @ stdcall IoCallDriver
(ptr ptr
)
338 @ stub IoCancelFileOpen
340 @ stub IoCheckDesiredAccess
341 @ stub IoCheckEaBufferValidity
342 @ stub IoCheckFunctionAccess
343 @ stub IoCheckQuerySetFileInformation
344 @ stub IoCheckQuerySetVolumeInformation
345 @ stub IoCheckQuotaBufferValidity
346 @ stub IoCheckShareAccess
347 @ stdcall IoCompleteRequest
(ptr long
)
348 @ stub IoConnectInterrupt
349 @ stub IoCreateController
350 @ stdcall IoCreateDevice
(ptr long ptr long long long ptr
)
352 @ stdcall IoCreateDriver
(ptr ptr
)
353 @ stdcall IoCreateFile
(ptr long ptr ptr ptr long long long long ptr long long ptr long
)
354 @ stub IoCreateFileSpecifyDeviceObjectHint
355 @ stdcall IoCreateNotificationEvent
(ptr ptr
)
356 @ stub IoCreateStreamFileObject
357 @ stub IoCreateStreamFileObjectEx
358 @ stub IoCreateStreamFileObjectLite
359 @ stdcall IoCreateSymbolicLink
(ptr ptr
)
360 @ stdcall IoCreateSynchronizationEvent
(ptr ptr
)
361 @ stub IoCreateUnprotectedSymbolicLink
362 @ stdcall IoCsqInitialize
(ptr ptr ptr ptr ptr ptr ptr
)
363 @ stub IoCsqInsertIrp
364 @ stub IoCsqRemoveIrp
365 @ stub IoCsqRemoveNextIrp
366 @ stub IoDeleteController
367 @ stdcall IoDeleteDevice
(ptr
)
368 @ stdcall IoDeleteDriver
(ptr
)
369 @ stdcall IoDeleteSymbolicLink
(ptr
)
370 @ stub IoDetachDevice
371 @ stub IoDeviceHandlerObjectSize
372 @ stub IoDeviceHandlerObjectType
373 @ extern IoDeviceObjectType
374 @ stub IoDisconnectInterrupt
375 @ extern IoDriverObjectType
377 @ stub IoEnumerateDeviceObjectList
378 @ stub IoFastQueryNetworkAttributes
379 @ extern IoFileObjectType
380 @ stub IoForwardAndCatchIrp
381 @ stub IoForwardIrpSynchronously
382 @ stub IoFreeController
383 @ stub IoFreeErrorLogEntry
384 @ stdcall IoFreeIrp
(ptr
)
385 @ stdcall IoFreeMdl
(ptr
)
386 @ stub IoFreeWorkItem
387 @ stdcall IoGetAttachedDevice
(ptr
)
388 @ stdcall IoGetAttachedDeviceReference
(ptr
)
389 @ stub IoGetBaseFileSystemDeviceObject
390 @ stub IoGetBootDiskInformation
391 @ stdcall IoGetConfigurationInformation
()
392 @ stdcall IoGetCurrentProcess
()
393 @ stub IoGetDeviceAttachmentBaseRef
394 @ stub IoGetDeviceInterfaceAlias
395 @ stdcall IoGetDeviceInterfaces
(ptr ptr long ptr
)
396 @ stdcall IoGetDeviceObjectPointer
(ptr long ptr ptr
)
397 @ stdcall IoGetDeviceProperty
(ptr long long ptr ptr
)
398 @ stub IoGetDeviceToVerify
399 @ stub IoGetDiskDeviceObject
400 @ stub IoGetDmaAdapter
401 @ stdcall IoGetDriverObjectExtension
(ptr ptr
)
402 @ stub IoGetFileObjectGenericMapping
403 @ stub IoGetInitialStack
404 @ stub IoGetLowerDeviceObject
405 @ stdcall IoGetRelatedDeviceObject
(ptr
)
406 @ stub IoGetRequestorProcess
407 @ stub IoGetRequestorProcessId
408 @ stub IoGetRequestorSessionId
409 @ stub IoGetStackLimits
410 @ stub IoGetTopLevelIrp
411 @ stdcall IoInitializeIrp
(ptr long long
)
412 @ stdcall IoInitializeRemoveLockEx
(ptr long long long long
)
413 @ stdcall IoInitializeTimer
(ptr ptr ptr
)
414 @ stdcall IoInvalidateDeviceRelations
(ptr long
)
415 @ stub IoInvalidateDeviceState
416 @ stub IoIsFileOriginRemote
417 @ stub IoIsOperationSynchronous
418 @ stub IoIsSystemThread
419 @ stub IoIsValidNameGraftingBuffer
420 @ stdcall IoIsWdmVersionAvailable
(long long
)
421 @ stub IoMakeAssociatedIrp
422 @ stub IoOpenDeviceInterfaceRegistryKey
423 @ stub IoOpenDeviceRegistryKey
425 @ stub IoPnPDeliverServicePowerNotification
426 @ stdcall IoQueryDeviceDescription
(ptr ptr ptr ptr ptr ptr ptr ptr
)
427 @ stub IoQueryFileDosDeviceName
428 @ stub IoQueryFileInformation
429 @ stub IoQueryVolumeInformation
430 @ stub IoQueueThreadIrp
431 @ stub IoQueueWorkItem
432 @ stub IoRaiseHardError
433 @ stub IoRaiseInformationalHardError
434 @ stub IoReadDiskSignature
435 @ stub IoReadOperationCount
436 @ stub IoReadPartitionTableEx
437 @ stub IoReadTransferCount
438 @ stub IoRegisterBootDriverReinitialization
439 @ stdcall IoRegisterDeviceInterface
(ptr ptr ptr ptr
)
440 @ stdcall IoRegisterDriverReinitialization
(ptr ptr ptr
)
441 @ stdcall IoRegisterFileSystem
(ptr
)
442 @ stub IoRegisterFsRegistrationChange
443 @ stub IoRegisterLastChanceShutdownNotification
444 @ stdcall IoRegisterPlugPlayNotification
(long long ptr ptr ptr ptr ptr
)
445 @ stdcall IoRegisterShutdownNotification
(ptr
)
446 @ stdcall IoReleaseCancelSpinLock
(long
)
447 @ stdcall IoReleaseRemoveLockAndWaitEx
(ptr ptr long
)
448 @ stub IoReleaseRemoveLockEx
449 @ stub IoReleaseVpbSpinLock
450 @ stub IoRemoveShareAccess
451 @ stub IoReportDetectedDevice
452 @ stub IoReportHalResourceUsage
453 @ stdcall IoReportResourceForDetection
(ptr ptr long ptr ptr long ptr
)
454 @ stdcall IoReportResourceUsage
(ptr ptr ptr long ptr ptr long long ptr
)
455 @ stub IoReportTargetDeviceChange
456 @ stub IoReportTargetDeviceChangeAsynchronous
457 @ stub IoRequestDeviceEject
459 @ stub IoSetCompletionRoutineEx
460 @ stdcall IoSetDeviceInterfaceState
(ptr long
)
461 @ stub IoSetDeviceToVerify
462 @ stub IoSetFileOrigin
463 @ stub IoSetHardErrorOrVerifyDevice
464 @ stub IoSetInformation
465 @ stub IoSetIoCompletion
466 @ stub IoSetPartitionInformationEx
467 @ stub IoSetShareAccess
468 @ stub IoSetStartIoAttributes
469 @ stub IoSetSystemPartition
470 @ stdcall IoSetThreadHardErrorMode
(long
)
471 @ stub IoSetTopLevelIrp
472 @ stdcall IoStartNextPacket
(ptr long
)
473 @ stub IoStartNextPacketByKey
475 @ stdcall IoStartTimer
(ptr
)
476 @ stub IoStatisticsLock
477 @ stdcall IoStopTimer
(ptr
)
478 @ stub IoSynchronousInvalidateDeviceRelations
479 @ stub IoSynchronousPageWrite
480 @ stub IoThreadToProcess
481 @ stdcall IoUnregisterFileSystem
(ptr
)
482 @ stub IoUnregisterFsRegistrationChange
483 @ stdcall IoUnregisterPlugPlayNotification
(ptr
)
484 @ stdcall IoUnregisterShutdownNotification
(ptr
)
485 @ stub IoUpdateShareAccess
486 @ stub IoValidateDeviceIoControlAccess
487 @ stub IoVerifyPartitionTable
488 @ stub IoVerifyVolume
489 @ stub IoVolumeDeviceToDosName
490 @ stub IoWMIAllocateInstanceIds
491 @ stub IoWMIDeviceObjectToInstanceName
492 @ stub IoWMIExecuteMethod
493 @ stub IoWMIHandleToInstanceName
494 @ stdcall IoWMIOpenBlock
(ptr long ptr
)
495 @ stub IoWMIQueryAllData
496 @ stub IoWMIQueryAllDataMultiple
497 @ stub IoWMIQuerySingleInstance
498 @ stub IoWMIQuerySingleInstanceMultiple
499 @ stdcall IoWMIRegistrationControl
(ptr long
)
500 @ stub IoWMISetNotificationCallback
501 @ stub IoWMISetSingleInstance
502 @ stub IoWMISetSingleItem
503 @ stub IoWMISuggestInstanceName
504 @ stub IoWMIWriteEvent
505 @ stub IoWriteErrorLogEntry
506 @ stub IoWriteOperationCount
507 @ stub IoWritePartitionTableEx
508 @ stub IoWriteTransferCount
509 @ extern KdDebuggerEnabled
510 @ stub KdDebuggerNotPresent
511 @ stub KdDisableDebugger
512 @ stub KdEnableDebugger
513 @ stub KdEnteredDebugger
515 @ stub KdPowerTransition
517 @ stdcall Ke386IoSetAccessProcess
(ptr long
)
518 @ stub Ke386QueryIoAccessMap
519 @ stdcall Ke386SetIoAccessMap
(long ptr
)
520 @ stub KeAcquireInterruptSpinLock
521 @ stdcall KeAcquireSpinLockAtDpcLevel
(ptr
)
522 @ stdcall
-arch
=arm
,arm64
,x86_64 KeAcquireSpinLockRaiseToDpc
(ptr
)
523 @ stub KeAddSystemServiceTable
524 @ stub KeAreApcsDisabled
525 @ stub KeAttachProcess
528 @ stdcall KeCancelTimer
(ptr
)
529 @ stub KeCapturePersistentThreadState
530 @ stdcall KeClearEvent
(ptr
)
531 @ stub KeConnectInterrupt
532 @ stub KeDcacheFlushCount
533 @ stdcall KeDelayExecutionThread
(long long ptr
)
534 @ stub KeDeregisterBugCheckCallback
535 @ stub KeDeregisterBugCheckReasonCallback
536 @ stub KeDetachProcess
537 @ stub KeDisconnectInterrupt
538 @ stdcall KeEnterCriticalRegion
()
539 @ stub KeEnterKernelDebugger
540 @ stub KeFindConfigurationEntry
541 @ stub KeFindConfigurationNextEntry
542 @ stub KeFlushEntireTb
543 @ stdcall KeFlushQueuedDpcs
()
544 @ stdcall KeGetCurrentThread
()
545 @ stub KeGetPreviousMode
546 @ stub KeGetRecommendedSharedDataAlignment
547 @ stub KeI386AbiosCall
548 @ stub KeI386AllocateGdtSelectors
549 @ stub KeI386Call16BitCStyleFunction
550 @ stub KeI386Call16BitFunction
551 @ stub KeI386FlatToGdtSelector
553 @ stub KeI386MachineType
554 @ stub KeI386ReleaseGdtSelectors
555 @ stub KeI386ReleaseLid
556 @ stub KeI386SetGdtSelector
557 @ stub KeIcacheFlushCount
558 @ stub KeInitializeApc
559 @ stub KeInitializeDeviceQueue
560 @ stdcall KeInitializeDpc
(ptr ptr ptr
)
561 @ stdcall KeInitializeEvent
(ptr long long
)
562 @ stub KeInitializeInterrupt
563 @ stub KeInitializeMutant
564 @ stdcall KeInitializeMutex
(ptr long
)
565 @ stub KeInitializeQueue
566 @ stdcall KeInitializeSemaphore
(ptr long long
)
567 @ stdcall KeInitializeSpinLock
(ptr
)
568 @ stdcall KeInitializeTimer
(ptr
)
569 @ stdcall KeInitializeTimerEx
(ptr long
)
570 @ stub KeInsertByKeyDeviceQueue
571 @ stub KeInsertDeviceQueue
572 @ stub KeInsertHeadQueue
573 @ stdcall KeInsertQueue
(ptr ptr
)
574 @ stub KeInsertQueueApc
575 @ stub KeInsertQueueDpc
576 @ stub KeIsAttachedProcess
577 @ stub KeIsExecutingDpc
578 @ stdcall KeLeaveCriticalRegion
()
580 @ stub KeNumberProcessors
581 @ stub KeProfileInterrupt
582 @ stub KeProfileInterruptWithSource
584 @ stdcall KeQueryActiveProcessors
()
585 @ stdcall KeQueryInterruptTime
()
586 @ stub KeQueryPriorityThread
587 @ stub KeQueryRuntimeThread
588 @ stdcall KeQuerySystemTime
(ptr
)
589 @ stdcall KeQueryTickCount
(ptr
)
590 @ stdcall KeQueryTimeIncrement
()
591 @ stub KeRaiseUserException
592 @ stub KeReadStateEvent
593 @ stub KeReadStateMutant
594 @ stub KeReadStateMutex
595 @ stub KeReadStateQueue
596 @ stub KeReadStateSemaphore
597 @ stub KeReadStateTimer
598 @ stub KeRegisterBugCheckCallback
599 @ stub KeRegisterBugCheckReasonCallback
600 @ stub KeReleaseInterruptSpinLock
601 @ stub KeReleaseMutant
602 @ stdcall KeReleaseMutex
(ptr long
)
603 @ stdcall KeReleaseSemaphore
(ptr long long long
)
604 @ stdcall
-arch
=arm
,arm64
,x86_64 KeReleaseSpinLock
(ptr long
)
605 @ stdcall KeReleaseSpinLockFromDpcLevel
(ptr
)
606 @ stub KeRemoveByKeyDeviceQueue
607 @ stub KeRemoveByKeyDeviceQueueIfBusy
608 @ stub KeRemoveDeviceQueue
609 @ stub KeRemoveEntryDeviceQueue
611 @ stub KeRemoveQueueDpc
612 @ stub KeRemoveSystemServiceTable
613 @ stdcall KeResetEvent
(ptr
)
614 @ stub KeRestoreFloatingPointState
615 @ stdcall KeRevertToUserAffinityThread
()
616 @ stub KeRundownQueue
617 @ stub KeSaveFloatingPointState
618 @ stub KeSaveStateForHibernate
619 @ extern KeServiceDescriptorTable
620 @ stub KeSetAffinityThread
621 @ stub KeSetBasePriorityThread
622 @ stub KeSetDmaIoCoherency
623 @ stdcall KeSetEvent
(ptr long long
)
624 @ stub KeSetEventBoostPriority
625 @ stub KeSetIdealProcessorThread
626 @ stub KeSetImportanceDpc
627 @ stub KeSetKernelStackSwapEnable
628 @ stdcall KeSetPriorityThread
(ptr long
)
629 @ stub KeSetProfileIrql
630 @ stdcall KeSetSystemAffinityThread
(long
)
631 @ stdcall KeSetTargetProcessorDpc
(ptr long
)
632 @ stub KeSetTimeIncrement
634 @ stdcall KeSetTimerEx
(ptr int64 long ptr
)
635 @ stub KeStackAttachProcess
636 @ stub KeSynchronizeExecution
637 @ stub KeTerminateThread
639 @ stub KeUnstackDetachProcess
640 @ stub KeUpdateRunTime
641 @ stub KeUpdateSystemTime
642 @ stub KeUserModeCallback
643 @ stdcall KeWaitForMultipleObjects
(long ptr long long long long ptr ptr
)
644 @ stdcall KeWaitForMutexObject
(ptr long long long ptr
)
645 @ stdcall KeWaitForSingleObject
(ptr long long long ptr
)
646 @ stub KiBugCheckData
647 @ stub KiCoprocessorError
649 @ stub KiDispatchInterrupt
650 @ stub KiEnableTimerWatchdog
651 @ stub KiIpiServiceRoutine
652 @ stub KiUnexpectedInterrupt
653 @ stdcall LdrAccessResource
(long ptr ptr ptr
)
654 @ stub LdrEnumResources
655 @ stdcall LdrFindResourceDirectory_U
(long ptr long ptr
)
656 @ stdcall LdrFindResource_U
(long ptr long ptr
)
657 @ stub LpcPortObjectType
658 @ stub LpcRequestPort
659 @ stub LpcRequestWaitReplyPort
660 @ stub LsaCallAuthenticationPackage
661 @ stub LsaDeregisterLogonProcess
662 @ stub LsaFreeReturnBuffer
664 @ stub LsaLookupAuthenticationPackage
665 @ stub LsaRegisterLogonProcess
666 @ stub Mm64BitPhysicalAddress
667 @ stub MmAddPhysicalMemory
668 @ stub MmAddVerifierThunks
669 @ stub MmAdjustWorkingSetSize
671 @ stdcall MmAllocateContiguousMemory
(long int64
)
672 @ stdcall MmAllocateContiguousMemorySpecifyCache
(long int64 int64 int64 long
)
673 @ stub MmAllocateMappingAddress
674 @ stdcall MmAllocateNonCachedMemory
(long
)
675 @ stdcall MmAllocatePagesForMdl
(int64 int64 int64 long
)
676 @ stdcall MmBuildMdlForNonPagedPool
(ptr
)
677 @ stub MmCanFileBeTruncated
678 @ stub MmCommitSessionMappedView
679 @ stdcall MmCopyVirtualMemory
(ptr ptr ptr ptr long long ptr
)
681 @ stdcall MmCreateSection
(ptr long ptr ptr long long long ptr
)
682 @ stub MmDisableModifiedWriteOfSection
683 @ stub MmFlushImageSection
684 @ stub MmForceSectionClosed
685 @ stub MmFreeContiguousMemory
686 @ stub MmFreeContiguousMemorySpecifyCache
687 @ stub MmFreeMappingAddress
688 @ stdcall MmFreeNonCachedMemory
(ptr long
)
689 @ stub MmFreePagesFromMdl
690 @ stub MmGetPhysicalAddress
691 @ stub MmGetPhysicalMemoryRanges
692 @ stdcall MmGetSystemRoutineAddress
(ptr
)
693 @ stub MmGetVirtualForPhysical
694 @ stub MmGrowKernelStack
695 @ stub MmHighestUserAddress
696 @ stdcall MmIsAddressValid
(ptr
)
697 @ stub MmIsDriverVerifying
698 @ stub MmIsNonPagedSystemAddressValid
699 @ stub MmIsRecursiveIoFault
700 @ stub MmIsThisAnNtAsSystem
701 @ stub MmIsVerifierEnabled
702 @ stub MmLockPagableDataSection
703 @ stub MmLockPagableImageSection
704 @ stdcall MmLockPagableSectionByHandle
(ptr
)
705 @ stdcall MmMapIoSpace
(int64 long long
)
706 @ stub MmMapLockedPages
707 @ stdcall MmMapLockedPagesSpecifyCache
(ptr long long ptr long long
)
708 @ stub MmMapLockedPagesWithReservedMapping
709 @ stub MmMapMemoryDumpMdl
710 @ stub MmMapUserAddressesToPage
711 @ stub MmMapVideoDisplay
712 @ stub MmMapViewInSessionSpace
713 @ stub MmMapViewInSystemSpace
714 @ stub MmMapViewOfSection
715 @ stub MmMarkPhysicalMemoryAsBad
716 @ stub MmMarkPhysicalMemoryAsGood
717 @ stdcall MmPageEntireDriver
(ptr
)
718 @ stub MmPrefetchPages
719 @ stdcall MmProbeAndLockPages
(ptr long long
)
720 @ stub MmProbeAndLockProcessPages
721 @ stub MmProbeAndLockSelectedPages
722 @ stub MmProtectMdlSystemAddress
723 @ stdcall MmQuerySystemSize
()
724 @ stub MmRemovePhysicalMemory
725 @ stdcall MmResetDriverPaging
(ptr
)
726 @ stub MmSectionObjectType
727 @ stub MmSecureVirtualMemory
728 @ stub MmSetAddressRangeModified
729 @ stub MmSetBankedSection
731 @ stub MmSystemRangeStart
732 @ stub MmTrimAllSystemPagableMemory
733 @ stdcall MmUnlockPagableImageSection
(ptr
)
734 @ stdcall MmUnlockPages
(ptr
)
735 @ stdcall MmUnmapIoSpace
(ptr long
)
736 @ stub MmUnmapLockedPages
737 @ stub MmUnmapReservedMapping
738 @ stub MmUnmapVideoDisplay
739 @ stub MmUnmapViewInSessionSpace
740 @ stub MmUnmapViewInSystemSpace
741 @ stub MmUnmapViewOfSection
742 @ stub MmUnsecureVirtualMemory
743 @ stub MmUserProbeAddress
744 @ extern NlsAnsiCodePage ntdll.NlsAnsiCodePage
745 @ stub NlsLeadByteInfo
746 @ extern NlsMbCodePageTag ntdll.NlsMbCodePageTag
747 @ extern NlsMbOemCodePageTag ntdll.NlsMbOemCodePageTag
748 @ stub NlsOemCodePage
749 @ stub NlsOemLeadByteInfo
750 @ stdcall NtAddAtom
(ptr long ptr
)
751 @ stdcall NtAdjustPrivilegesToken
(long long ptr long ptr ptr
)
752 @ stdcall NtAllocateLocallyUniqueId
(ptr
)
753 @ stdcall NtAllocateUuids
(ptr ptr ptr ptr
)
754 @ stdcall NtAllocateVirtualMemory
(long ptr long ptr long long
)
755 @ extern NtBuildNumber
756 @ stdcall NtClose
(long
)
757 @ stdcall NtConnectPort
(ptr ptr ptr ptr ptr ptr ptr ptr
)
758 @ stdcall NtCreateEvent
(ptr long ptr long long
)
759 @ stdcall NtCreateFile
(ptr long ptr ptr ptr long long long long ptr long
)
760 @ stdcall NtCreateSection
(ptr long ptr ptr long long long
)
761 @ stdcall NtDeleteAtom
(long
)
762 @ stdcall NtDeleteFile
(ptr
)
763 @ stdcall NtDeviceIoControlFile
(long long ptr ptr ptr long ptr long ptr long
)
764 @ stdcall NtDuplicateObject
(long long long ptr long long long
)
765 @ stdcall NtDuplicateToken
(long long ptr long long ptr
)
766 @ stdcall NtFindAtom
(ptr long ptr
)
767 @ stdcall NtFreeVirtualMemory
(long ptr ptr long
)
768 @ stdcall NtFsControlFile
(long long ptr ptr ptr long ptr long ptr long
)
770 @ stdcall NtLockFile
(long long ptr ptr ptr ptr ptr ptr long long
)
771 @ stub NtMakePermanentObject
772 @ stdcall NtMapViewOfSection
(long long ptr long long ptr ptr long long long
)
773 @ stdcall NtNotifyChangeDirectoryFile
(long long ptr ptr ptr ptr long long long
)
774 @ stdcall NtOpenFile
(ptr long ptr ptr long long
)
775 @ stdcall NtOpenProcess
(ptr long ptr ptr
)
776 @ stdcall NtOpenProcessToken
(long long ptr
)
777 @ stdcall NtOpenProcessTokenEx
(long long long ptr
)
778 @ stdcall NtOpenThread
(ptr long ptr ptr
)
779 @ stdcall NtOpenThreadToken
(long long long ptr
)
780 @ stdcall NtOpenThreadTokenEx
(long long long long ptr
)
781 @ stdcall NtQueryDirectoryFile
(long long ptr ptr ptr ptr long long long ptr long
)
782 @ stdcall NtQueryEaFile
(long ptr ptr long long ptr long ptr long
)
783 @ stdcall NtQueryInformationAtom
(long long ptr long ptr
)
784 @ stdcall NtQueryInformationFile
(long ptr ptr long long
)
785 @ stdcall NtQueryInformationProcess
(long long ptr long ptr
)
786 @ stdcall NtQueryInformationThread
(long long ptr long ptr
)
787 @ stdcall NtQueryInformationToken
(long long ptr long ptr
)
788 @ stub NtQueryQuotaInformationFile
789 @ stdcall NtQuerySecurityObject
(long long ptr long ptr
)
790 @ stdcall NtQuerySystemInformation
(long ptr long ptr
)
791 @ stdcall NtQueryVolumeInformationFile
(long ptr ptr long long
)
792 @ stdcall NtReadFile
(long long ptr ptr ptr ptr long ptr ptr
)
794 @ stdcall NtRequestWaitReplyPort
(ptr ptr ptr
)
795 @ stdcall NtSetEaFile
(long ptr ptr long
)
796 @ stdcall NtSetEvent
(long ptr
)
797 @ stdcall NtSetInformationFile
(long ptr ptr long long
)
798 @ stdcall NtSetInformationProcess
(long long ptr long
)
799 @ stdcall NtSetInformationThread
(long long ptr long
)
800 @ stub NtSetQuotaInformationFile
801 @ stdcall NtSetSecurityObject
(long long ptr
)
802 @ stdcall NtSetVolumeInformationFile
(long ptr ptr long long
)
803 @ stdcall NtShutdownSystem
(long
)
805 @ stdcall NtUnlockFile
(long ptr ptr ptr ptr
)
807 @ stdcall NtWaitForSingleObject
(long long ptr
)
808 @ stdcall NtWriteFile
(long long ptr ptr ptr ptr long ptr ptr
)
809 @ stub ObAssignSecurity
810 @ stub ObCheckCreateObjectAccess
811 @ stub ObCheckObjectAccess
813 @ stub ObCreateObject
814 @ stub ObCreateObjectType
815 @ stdcall ObDereferenceObject
(ptr
)
816 @ stub ObDereferenceSecurityDescriptor
817 @ stub ObFindHandleForObject
818 @ stdcall ObGetFilterVersion
()
819 @ stub ObGetObjectSecurity
820 @ stdcall ObGetObjectType
(ptr
)
821 @ stub ObInsertObject
822 @ stub ObLogSecurityDescriptor
823 @ stub ObMakeTemporaryObject
824 @ stub ObOpenObjectByName
825 @ stub ObOpenObjectByPointer
826 @ stdcall ObQueryNameString
(ptr ptr long ptr
)
827 @ stub ObQueryObjectAuditingByHandle
828 @ stdcall ObReferenceObjectByHandle
(long long ptr long ptr ptr
)
829 @ stdcall ObReferenceObjectByName
(ptr long ptr long ptr long ptr ptr
)
830 @ stdcall ObReferenceObjectByPointer
(ptr long ptr long
)
831 @ stub ObReferenceSecurityDescriptor
832 @ stdcall ObRegisterCallbacks
(ptr ptr
)
833 @ stub ObReleaseObjectSecurity
834 @ stub ObSetHandleAttributes
835 @ stub ObSetSecurityDescriptorInfo
836 @ stub ObSetSecurityObjectByPointer
837 @ stdcall ObUnRegisterCallbacks
(ptr
)
840 @ stub PfxInsertPrefix
841 @ stub PfxRemovePrefix
843 @ stub PoCancelDeviceNotify
844 @ stub PoQueueShutdownWorkItem
845 @ stub PoRegisterDeviceForIdleDetection
846 @ stub PoRegisterDeviceNotify
847 @ stub PoRegisterSystemState
848 @ stub PoRequestPowerIrp
849 @ stub PoRequestShutdownEvent
850 @ stub PoSetHiberRange
851 @ stdcall PoSetPowerState
(ptr long long
)
852 @ stub PoSetSystemState
853 @ stub PoShutdownBugCheck
854 @ stub PoStartNextPowerIrp
855 @ stub PoUnregisterSystemState
856 @ stdcall ProbeForRead
(ptr long long
)
857 @ stdcall ProbeForWrite
(ptr long long
)
858 @ stdcall PsAcquireProcessExitSynchronization
(ptr
)
859 @ stub PsAssignImpersonationToken
860 @ stub PsChargePoolQuota
861 @ stub PsChargeProcessNonPagedPoolQuota
862 @ stub PsChargeProcessPagedPoolQuota
863 @ stub PsChargeProcessPoolQuota
864 @ stub PsCreateSystemProcess
865 @ stdcall PsCreateSystemThread
(ptr long ptr long ptr ptr ptr
)
866 @ stub PsDereferenceImpersonationToken
867 @ stub PsDereferencePrimaryToken
868 @ stub PsDisableImpersonation
869 @ stub PsEstablishWin32Callouts
870 @ stub PsGetContextThread
871 @ stdcall PsGetCurrentProcess
() IoGetCurrentProcess
872 @ stdcall PsGetCurrentProcessId
()
873 @ stub PsGetCurrentProcessSessionId
874 @ stdcall PsGetCurrentThread
() KeGetCurrentThread
875 @ stdcall PsGetCurrentThreadId
()
876 @ stub PsGetCurrentThreadPreviousMode
877 @ stub PsGetCurrentThreadStackBase
878 @ stub PsGetCurrentThreadStackLimit
880 @ stub PsGetJobSessionId
881 @ stub PsGetJobUIRestrictionsClass
882 @ stub PsGetProcessCreateTimeQuadPart
883 @ stub PsGetProcessDebugPort
884 @ stub PsGetProcessExitProcessCalled
885 @ stub PsGetProcessExitStatus
886 @ stub PsGetProcessExitTime
887 @ stdcall PsGetProcessId
(ptr
)
888 @ stub PsGetProcessImageFileName
889 @ stub PsGetProcessInheritedFromUniqueProcessId
890 @ stub PsGetProcessJob
891 @ stub PsGetProcessPeb
892 @ stub PsGetProcessPriorityClass
893 @ stub PsGetProcessSectionBaseAddress
894 @ stub PsGetProcessSecurityPort
895 @ stub PsGetProcessSessionId
896 @ stub PsGetProcessWin32Process
897 @ stub PsGetProcessWin32WindowStation
898 @ stdcall
-arch
=x86_64 PsGetProcessWow64Process
(ptr
)
899 @ stub PsGetThreadFreezeCount
900 @ stub PsGetThreadHardErrorsAreDisabled
902 @ stub PsGetThreadProcess
903 @ stub PsGetThreadProcessId
904 @ stub PsGetThreadSessionId
905 @ stub PsGetThreadTeb
906 @ stub PsGetThreadWin32Thread
907 @ stdcall PsGetVersion
(ptr ptr ptr ptr
)
908 @ stdcall PsImpersonateClient
(ptr ptr long long long
)
909 @ stub PsInitialSystemProcess
910 @ stub PsIsProcessBeingDebugged
911 @ stub PsIsSystemThread
912 @ stub PsIsThreadImpersonating
913 @ stub PsIsThreadTerminating
915 @ stdcall PsLookupProcessByProcessId
(ptr ptr
)
916 @ stub PsLookupProcessThreadByCid
917 @ stub PsLookupThreadByThreadId
918 @ extern PsProcessType
919 @ stub PsReferenceImpersonationToken
920 @ stub PsReferencePrimaryToken
921 @ stdcall PsReferenceProcessFilePointer
(ptr ptr
)
922 @ stdcall PsReleaseProcessExitSynchronization
(ptr
)
923 @ stdcall PsRemoveCreateThreadNotifyRoutine
(ptr
)
924 @ stdcall PsRemoveLoadImageNotifyRoutine
(ptr
)
925 @ stub PsRestoreImpersonation
926 @ stdcall PsResumeProcess
(ptr
)
927 @ stub PsReturnPoolQuota
928 @ stub PsReturnProcessNonPagedPoolQuota
929 @ stub PsReturnProcessPagedPoolQuota
930 @ stub PsRevertThreadToSelf
931 @ stdcall PsRevertToSelf
()
932 @ stub PsSetContextThread
933 @ stdcall PsSetCreateProcessNotifyRoutine
(ptr long
)
934 @ stdcall PsSetCreateProcessNotifyRoutineEx
(ptr long
)
935 @ stdcall PsSetCreateThreadNotifyRoutine
(ptr
)
936 @ stub PsSetJobUIRestrictionsClass
937 @ stub PsSetLegoNotifyRoutine
938 @ stdcall PsSetLoadImageNotifyRoutine
(ptr
)
939 @ stub PsSetProcessPriorityByClass
940 @ stub PsSetProcessPriorityClass
941 @ stub PsSetProcessSecurityPort
942 @ stub PsSetProcessWin32Process
943 @ stub PsSetProcessWindowStation
944 @ stub PsSetThreadHardErrorsAreDisabled
945 @ stub PsSetThreadWin32Thread
946 @ stdcall PsSuspendProcess
(ptr
)
947 @ stdcall PsTerminateSystemThread
(long
)
948 @ extern PsThreadType
949 @ stdcall READ_REGISTER_BUFFER_UCHAR
(ptr ptr long
)
950 @ stub READ_REGISTER_BUFFER_ULONG
951 @ stub READ_REGISTER_BUFFER_USHORT
952 @ stub READ_REGISTER_UCHAR
953 @ stub READ_REGISTER_ULONG
954 @ stub READ_REGISTER_USHORT
955 @ stdcall RtlAbsoluteToSelfRelativeSD
(ptr ptr ptr
)
956 @ stdcall RtlAddAccessAllowedAce
(ptr long long ptr
)
957 @ stdcall RtlAddAccessAllowedAceEx
(ptr long long long ptr
)
958 @ stdcall RtlAddAce
(ptr long long ptr long
)
959 @ stdcall RtlAddAtomToAtomTable
(ptr wstr ptr
)
961 @ stdcall RtlAllocateHeap
(long long long
)
962 @ stdcall RtlAnsiCharToUnicodeChar
(ptr
)
963 @ stdcall RtlAnsiStringToUnicodeSize
(ptr
)
964 @ stdcall RtlAnsiStringToUnicodeString
(ptr ptr long
)
965 @ stdcall RtlAppendAsciizToString
(ptr str
)
966 @ stdcall RtlAppendStringToString
(ptr ptr
)
967 @ stdcall RtlAppendUnicodeStringToString
(ptr ptr
)
968 @ stdcall RtlAppendUnicodeToString
(ptr wstr
)
969 @ stdcall RtlAreAllAccessesGranted
(long long
)
970 @ stdcall RtlAreAnyAccessesGranted
(long long
)
971 @ stdcall RtlAreBitsClear
(ptr long long
)
972 @ stdcall RtlAreBitsSet
(ptr long long
)
973 @ stdcall RtlAssert
(ptr ptr long str
)
974 @ stdcall
-norelay RtlCaptureContext
(ptr
)
975 @ stdcall RtlCaptureStackBackTrace
(long long ptr ptr
)
976 @ stdcall RtlCharToInteger
(ptr long ptr
)
977 @ stdcall RtlCheckRegistryKey
(long ptr
)
978 @ stdcall RtlClearAllBits
(ptr
)
980 @ stdcall RtlClearBits
(ptr long long
)
981 @ stdcall RtlCompareMemory
(ptr ptr long
)
982 @ stdcall RtlCompareMemoryUlong
(ptr long long
)
983 @ stdcall RtlCompareString
(ptr ptr long
)
984 @ stdcall RtlCompareUnicodeString
(ptr ptr long
)
985 @ stdcall RtlCompressBuffer
(long ptr long ptr long long ptr ptr
)
986 @ stub RtlCompressChunks
987 @ stdcall
-arch
=win32
-ret64 RtlConvertLongToLargeInteger
(long
)
988 @ stdcall RtlConvertSidToUnicodeString
(ptr ptr long
)
989 @ stdcall
-arch
=win32
-ret64 RtlConvertUlongToLargeInteger
(long
)
990 @ stdcall RtlCopyLuid
(ptr ptr
)
991 @ stdcall
-arch
=x86_64 RtlCopyMemory
(ptr ptr long
)
992 @ stub RtlCopyRangeList
993 @ stdcall RtlCopySid
(long ptr ptr
)
994 @ stdcall RtlCopyString
(ptr ptr
)
995 @ stdcall RtlCopyUnicodeString
(ptr ptr
)
996 @ stdcall RtlCreateAcl
(ptr long long
)
997 @ stdcall RtlCreateAtomTable
(long ptr
)
998 @ stdcall RtlCreateHeap
(long ptr long long ptr ptr
)
999 @ stdcall RtlCreateRegistryKey
(long wstr
)
1000 @ stdcall RtlCreateSecurityDescriptor
(ptr long
)
1001 @ stub RtlCreateSystemVolumeInformationFolder
1002 @ stdcall RtlCreateUnicodeString
(ptr wstr
)
1003 @ stub RtlCustomCPToUnicodeN
1004 @ stdcall RtlDecompressBuffer
(long ptr long ptr long ptr
)
1005 @ stub RtlDecompressChunks
1006 @ stdcall RtlDecompressFragment
(long ptr long ptr long long ptr ptr
)
1008 @ stdcall RtlDeleteAce
(ptr long
)
1009 @ stdcall RtlDeleteAtomFromAtomTable
(ptr long
)
1010 @ stub RtlDeleteElementGenericTable
1011 @ stub RtlDeleteElementGenericTableAvl
1012 @ stub RtlDeleteNoSplay
1013 @ stub RtlDeleteOwnersRanges
1014 @ stub RtlDeleteRange
1015 @ stdcall RtlDeleteRegistryValue
(long ptr ptr
)
1016 @ stub RtlDescribeChunk
1017 @ stdcall RtlDestroyAtomTable
(ptr
)
1018 @ stdcall RtlDestroyHeap
(long
)
1019 @ stdcall RtlDowncaseUnicodeString
(ptr ptr long
)
1020 @ stdcall RtlEmptyAtomTable
(ptr long
)
1021 @ stdcall
-arch
=win32
-ret64 RtlEnlargedIntegerMultiply
(long long
)
1022 @ stdcall
-arch
=win32 RtlEnlargedUnsignedDivide
(int64 long ptr
)
1023 @ stdcall
-arch
=win32
-ret64 RtlEnlargedUnsignedMultiply
(long long
)
1024 @ stub RtlEnumerateGenericTable
1025 @ stub RtlEnumerateGenericTableAvl
1026 @ stub RtlEnumerateGenericTableLikeADirectory
1027 @ stdcall RtlEnumerateGenericTableWithoutSplaying
(ptr ptr
)
1028 @ stub RtlEnumerateGenericTableWithoutSplayingAvl
1029 @ stdcall RtlEqualLuid
(ptr ptr
)
1030 @ stdcall RtlEqualSid
(ptr ptr
)
1031 @ stdcall RtlEqualString
(ptr ptr long
)
1032 @ stdcall RtlEqualUnicodeString
(ptr ptr long
)
1033 @ stdcall
-arch
=win32
-ret64 RtlExtendedIntegerMultiply
(int64 long
)
1034 @ stdcall
-arch
=win32
-ret64 RtlExtendedLargeIntegerDivide
(int64 long ptr
)
1035 @ stdcall
-arch
=win32
-ret64 RtlExtendedMagicDivide
(int64 int64 long
)
1036 @ stdcall RtlFillMemory
(ptr long long
)
1037 @ stdcall RtlFillMemoryUlong
(ptr long long
)
1038 @ stdcall RtlFindClearBits
(ptr long long
)
1039 @ stdcall RtlFindClearBitsAndSet
(ptr long long
)
1040 @ stdcall RtlFindClearRuns
(ptr ptr long long
)
1041 @ stub RtlFindFirstRunClear
1042 @ stdcall RtlFindLastBackwardRunClear
(ptr long ptr
)
1043 @ stdcall RtlFindLeastSignificantBit
(int64
)
1044 @ stdcall RtlFindLongestRunClear
(ptr ptr
)
1045 @ stdcall RtlFindMessage
(long long long long ptr
)
1046 @ stdcall RtlFindMostSignificantBit
(int64
)
1047 @ stdcall RtlFindNextForwardRunClear
(ptr long ptr
)
1049 @ stdcall RtlFindSetBits
(ptr long long
)
1050 @ stdcall RtlFindSetBitsAndClear
(ptr long long
)
1051 @ stub RtlFindUnicodePrefix
1052 @ stdcall RtlFormatCurrentUserKeyPath
(ptr
)
1053 @ stdcall RtlFreeAnsiString
(ptr
)
1054 @ stdcall RtlFreeHeap
(long long ptr
)
1055 @ stdcall RtlFreeOemString
(ptr
)
1056 @ stub RtlFreeRangeList
1057 @ stdcall RtlFreeUnicodeString
(ptr
)
1058 @ stdcall RtlGUIDFromString
(ptr ptr
)
1059 @ stub RtlGenerate8dot3Name
1060 @ stdcall RtlGetAce
(ptr long ptr
)
1061 @ stub RtlGetCallersAddress
1062 @ stdcall RtlGetCompressionWorkSpaceSize
(long ptr ptr
)
1063 @ stdcall RtlGetDaclSecurityDescriptor
(ptr ptr ptr ptr
)
1064 @ stub RtlGetDefaultCodePage
1065 @ stub RtlGetElementGenericTable
1066 @ stub RtlGetElementGenericTableAvl
1067 @ stub RtlGetFirstRange
1068 @ stdcall RtlGetGroupSecurityDescriptor
(ptr ptr ptr
)
1069 @ stub RtlGetNextRange
1070 @ stdcall RtlGetNtGlobalFlags
()
1071 @ stdcall RtlGetOwnerSecurityDescriptor
(ptr ptr ptr
)
1072 @ stdcall RtlGetSaclSecurityDescriptor
(ptr ptr ptr ptr
)
1073 @ stub RtlGetSetBootStatusData
1074 @ stdcall RtlGetVersion
(ptr
)
1075 @ stdcall RtlHashUnicodeString
(ptr long long ptr
)
1076 @ stdcall RtlImageDirectoryEntryToData
(long long long ptr
)
1077 @ stdcall RtlImageNtHeader
(long
)
1078 @ stdcall RtlInitAnsiString
(ptr str
)
1079 @ stub RtlInitCodePageTable
1080 @ stdcall RtlInitString
(ptr str
)
1081 @ stdcall RtlInitUnicodeString
(ptr wstr
)
1082 @ stdcall RtlInitializeBitMap
(ptr ptr long
)
1083 @ stdcall RtlInitializeGenericTable
(ptr ptr ptr ptr ptr
)
1084 @ stdcall RtlInitializeGenericTableAvl
(ptr ptr ptr ptr ptr
)
1085 @ stub RtlInitializeRangeList
1086 @ stdcall RtlInitializeSid
(ptr ptr long
)
1087 @ stub RtlInitializeUnicodePrefix
1088 @ stub RtlInsertElementGenericTable
1089 @ stdcall RtlInsertElementGenericTableAvl
(ptr ptr long ptr
)
1090 @ stub RtlInsertElementGenericTableFull
1091 @ stub RtlInsertElementGenericTableFullAvl
1092 @ stub RtlInsertUnicodePrefix
1093 @ stdcall RtlInt64ToUnicodeString
(int64 long ptr
)
1094 @ stdcall RtlIntegerToChar
(long long long ptr
)
1095 @ stub RtlIntegerToUnicode
1096 @ stdcall RtlIntegerToUnicodeString
(long long ptr
)
1097 @ stub RtlInvertRangeList
1098 @ stdcall RtlIpv4AddressToStringA
(ptr ptr
)
1099 @ stdcall RtlIpv4AddressToStringExA
(ptr long ptr ptr
)
1100 @ stdcall RtlIpv4AddressToStringExW
(ptr long ptr ptr
)
1101 @ stdcall RtlIpv4AddressToStringW
(ptr ptr
)
1102 @ stub RtlIpv4StringToAddressA
1103 @ stub RtlIpv4StringToAddressExA
1104 @ stdcall RtlIpv4StringToAddressExW
(wstr long ptr ptr
)
1105 @ stdcall RtlIpv4StringToAddressW
(wstr long ptr ptr
)
1106 @ stub RtlIpv6AddressToStringA
1107 @ stub RtlIpv6AddressToStringExA
1108 @ stub RtlIpv6AddressToStringExW
1109 @ stub RtlIpv6AddressToStringW
1110 @ stub RtlIpv6StringToAddressA
1111 @ stub RtlIpv6StringToAddressExA
1112 @ stdcall RtlIpv6StringToAddressExW
(wstr ptr ptr ptr
)
1113 @ stub RtlIpv6StringToAddressW
1114 @ stub RtlIsGenericTableEmpty
1115 @ stub RtlIsGenericTableEmptyAvl
1116 @ stdcall RtlIsNameLegalDOS8Dot3
(ptr ptr ptr
)
1117 @ stub RtlIsRangeAvailable
1118 @ stub RtlIsValidOemCharacter
1119 @ stdcall
-arch
=win32
-ret64 RtlLargeIntegerAdd
(int64 int64
)
1120 @ stdcall
-arch
=win32
-ret64 RtlLargeIntegerArithmeticShift
(int64 long
)
1121 @ stdcall
-arch
=win32
-ret64 RtlLargeIntegerDivide
(int64 int64 ptr
)
1122 @ stdcall
-arch
=win32
-ret64 RtlLargeIntegerNegate
(int64
)
1123 @ stdcall
-arch
=win32
-ret64 RtlLargeIntegerShiftLeft
(int64 long
)
1124 @ stdcall
-arch
=win32
-ret64 RtlLargeIntegerShiftRight
(int64 long
)
1125 @ stdcall
-arch
=win32
-ret64 RtlLargeIntegerSubtract
(int64 int64
)
1126 @ stdcall RtlLengthRequiredSid
(long
)
1127 @ stdcall RtlLengthSecurityDescriptor
(ptr
)
1128 @ stdcall RtlLengthSid
(ptr
)
1129 @ stub RtlLockBootStatusData
1130 @ stdcall RtlLookupAtomInAtomTable
(ptr wstr ptr
)
1131 @ stub RtlLookupElementGenericTable
1132 @ stub RtlLookupElementGenericTableAvl
1133 @ stub RtlLookupElementGenericTableFull
1134 @ stub RtlLookupElementGenericTableFullAvl
1135 @ stdcall RtlMapGenericMask
(ptr ptr
)
1136 @ stub RtlMapSecurityErrorToNtStatus
1137 @ stub RtlMergeRangeLists
1138 @ stdcall RtlMoveMemory
(ptr ptr long
)
1139 @ stdcall RtlMultiByteToUnicodeN
(ptr long ptr ptr long
)
1140 @ stdcall RtlMultiByteToUnicodeSize
(ptr str long
)
1141 @ stub RtlNextUnicodePrefix
1142 @ stdcall RtlNtStatusToDosError
(long
)
1143 @ stdcall RtlNtStatusToDosErrorNoTeb
(long
)
1144 @ stdcall RtlNumberGenericTableElements
(ptr
)
1145 @ stub RtlNumberGenericTableElementsAvl
1146 @ stdcall RtlNumberOfClearBits
(ptr
)
1147 @ stdcall RtlNumberOfSetBits
(ptr
)
1148 @ stub RtlOemStringToCountedUnicodeString
1149 @ stdcall RtlOemStringToUnicodeSize
(ptr
)
1150 @ stdcall RtlOemStringToUnicodeString
(ptr ptr long
)
1151 @ stdcall RtlOemToUnicodeN
(ptr long ptr ptr long
)
1152 @ stdcall RtlPinAtomInAtomTable
(ptr long
)
1153 @ stdcall RtlPrefixString
(ptr ptr long
)
1154 @ stdcall RtlPrefixUnicodeString
(ptr ptr long
)
1155 @ stdcall RtlQueryAtomInAtomTable
(ptr long ptr ptr ptr ptr
)
1156 @ stdcall RtlQueryRegistryValues
(long ptr ptr ptr ptr
)
1157 @ stdcall RtlQueryTimeZoneInformation
(ptr
)
1158 @ stdcall
-norelay RtlRaiseException
(ptr
)
1159 @ stdcall RtlRandom
(ptr
)
1160 @ stdcall RtlRandomEx
(ptr
)
1161 @ stub RtlRealPredecessor
1162 @ stub RtlRealSuccessor
1163 @ stub RtlRemoveUnicodePrefix
1164 @ stub RtlReserveChunk
1165 @ stdcall RtlSecondsSince1970ToTime
(long ptr
)
1166 @ stdcall RtlSecondsSince1980ToTime
(long ptr
)
1167 @ stub RtlSelfRelativeToAbsoluteSD2
1168 @ stdcall RtlSelfRelativeToAbsoluteSD
(ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr
)
1169 @ stdcall RtlSetAllBits
(ptr
)
1171 @ stdcall RtlSetBits
(ptr long long
)
1172 @ stdcall RtlSetDaclSecurityDescriptor
(ptr long ptr long
)
1173 @ stdcall RtlSetGroupSecurityDescriptor
(ptr ptr long
)
1174 @ stdcall RtlSetOwnerSecurityDescriptor
(ptr ptr long
)
1175 @ stdcall RtlSetSaclSecurityDescriptor
(ptr long ptr long
)
1176 @ stdcall RtlSetTimeZoneInformation
(ptr
)
1177 @ stdcall RtlSizeHeap
(long long ptr
)
1179 @ stdcall RtlStringFromGUID
(ptr ptr
)
1180 @ stdcall RtlSubAuthorityCountSid
(ptr
)
1181 @ stdcall RtlSubAuthoritySid
(ptr long
)
1182 @ stub RtlSubtreePredecessor
1183 @ stub RtlSubtreeSuccessor
1185 @ stdcall RtlTimeFieldsToTime
(ptr ptr
)
1186 @ stdcall RtlTimeToElapsedTimeFields
(ptr ptr
)
1187 @ stdcall RtlTimeToSecondsSince1970
(ptr ptr
)
1188 @ stdcall RtlTimeToSecondsSince1980
(ptr ptr
)
1189 @ stdcall RtlTimeToTimeFields
(ptr ptr
)
1190 @ stub RtlTraceDatabaseAdd
1191 @ stub RtlTraceDatabaseCreate
1192 @ stub RtlTraceDatabaseDestroy
1193 @ stub RtlTraceDatabaseEnumerate
1194 @ stub RtlTraceDatabaseFind
1195 @ stub RtlTraceDatabaseLock
1196 @ stub RtlTraceDatabaseUnlock
1197 @ stub RtlTraceDatabaseValidate
1198 @ stdcall RtlUnicodeStringToAnsiSize
(ptr
)
1199 @ stdcall RtlUnicodeStringToAnsiString
(ptr ptr long
)
1200 @ stub RtlUnicodeStringToCountedOemString
1201 @ stdcall RtlUnicodeStringToInteger
(ptr long ptr
)
1202 @ stdcall RtlUnicodeStringToOemSize
(ptr
)
1203 @ stdcall RtlUnicodeStringToOemString
(ptr ptr long
)
1204 @ stub RtlUnicodeToCustomCPN
1205 @ stdcall RtlUnicodeToMultiByteN
(ptr long ptr ptr long
)
1206 @ stdcall RtlUnicodeToMultiByteSize
(ptr ptr long
)
1207 @ stdcall RtlUnicodeToOemN
(ptr long ptr ptr long
)
1208 @ stub RtlUnlockBootStatusData
1209 @ stdcall
-norelay RtlUnwind
(ptr ptr ptr ptr
)
1210 @ stdcall
-arch
=x86_64 RtlUnwindEx
(ptr ptr ptr ptr ptr ptr
)
1211 @ stdcall RtlUpcaseUnicodeChar
(long
)
1212 @ stdcall RtlUpcaseUnicodeString
(ptr ptr long
)
1213 @ stdcall RtlUpcaseUnicodeStringToAnsiString
(ptr ptr long
)
1214 @ stdcall RtlUpcaseUnicodeStringToCountedOemString
(ptr ptr long
)
1215 @ stdcall RtlUpcaseUnicodeStringToOemString
(ptr ptr long
)
1216 @ stub RtlUpcaseUnicodeToCustomCPN
1217 @ stdcall RtlUpcaseUnicodeToMultiByteN
(ptr long ptr ptr long
)
1218 @ stdcall RtlUpcaseUnicodeToOemN
(ptr long ptr ptr long
)
1219 @ stdcall RtlUpperChar
(long
)
1220 @ stdcall RtlUpperString
(ptr ptr
)
1221 @ stdcall RtlValidRelativeSecurityDescriptor
(ptr long long
)
1222 @ stdcall RtlValidSecurityDescriptor
(ptr
)
1223 @ stdcall RtlValidSid
(ptr
)
1224 @ stdcall RtlVerifyVersionInfo
(ptr long int64
)
1225 @ stub RtlVolumeDeviceToDosName
1226 @ stub RtlWalkFrameChain
1227 @ stdcall RtlWriteRegistryValue
(long ptr ptr long ptr long
)
1229 @ stdcall RtlZeroMemory
(ptr long
)
1230 @ stdcall RtlxAnsiStringToUnicodeSize
(ptr
)
1231 @ stdcall RtlxOemStringToUnicodeSize
(ptr
)
1232 @ stdcall RtlxUnicodeStringToAnsiSize
(ptr
)
1233 @ stdcall RtlxUnicodeStringToOemSize
(ptr
)
1234 @ stub SeAccessCheck
1235 @ stub SeAppendPrivileges
1236 @ stub SeAssignSecurity
1237 @ stub SeAssignSecurityEx
1238 @ stub SeAuditHardLinkCreation
1239 @ stub SeAuditingFileEvents
1240 @ stub SeAuditingFileEventsWithContext
1241 @ stub SeAuditingFileOrGlobalEvents
1242 @ stub SeAuditingHardLinkEvents
1243 @ stub SeAuditingHardLinkEventsWithContext
1244 @ stub SeCaptureSecurityDescriptor
1245 @ stub SeCaptureSubjectContext
1246 @ stub SeCloseObjectAuditAlarm
1247 @ stub SeCreateAccessState
1248 @ stub SeCreateClientSecurity
1249 @ stub SeCreateClientSecurityFromSubjectContext
1250 @ stub SeDeassignSecurity
1251 @ stub SeDeleteAccessState
1252 @ stub SeDeleteObjectAuditAlarm
1254 @ stub SeFilterToken
1255 @ stub SeFreePrivileges
1256 @ stub SeImpersonateClient
1257 @ stub SeImpersonateClientEx
1258 @ stub SeLockSubjectContext
1259 @ stub SeMarkLogonSessionForTerminationNotification
1260 @ stub SeOpenObjectAuditAlarm
1261 @ stub SeOpenObjectForDeleteAuditAlarm
1262 @ stub SePrivilegeCheck
1263 @ stub SePrivilegeObjectAuditAlarm
1264 @ stub SePublicDefaultDacl
1265 @ stub SeQueryAuthenticationIdToken
1266 @ stub SeQueryInformationToken
1267 @ stub SeQuerySecurityDescriptorInfo
1268 @ stub SeQuerySessionIdToken
1269 @ stub SeRegisterLogonSessionTerminatedRoutine
1270 @ stub SeReleaseSecurityDescriptor
1271 @ stub SeReleaseSubjectContext
1272 @ stub SeSetAccessStateGenericMapping
1273 @ stub SeSetSecurityDescriptorInfo
1274 @ stub SeSetSecurityDescriptorInfoEx
1275 @ stdcall SeSinglePrivilegeCheck
(int64 long
)
1276 @ stub SeSystemDefaultDacl
1277 @ stub SeTokenImpersonationLevel
1278 @ stub SeTokenIsAdmin
1279 @ stub SeTokenIsRestricted
1280 @ stub SeTokenIsWriteRestricted
1281 @ extern SeTokenObjectType
1283 @ stub SeUnlockSubjectContext
1284 @ stub SeUnregisterLogonSessionTerminatedRoutine
1285 @ stub SeValidSecurityDescriptor
1286 @ stdcall
-ret64 VerSetConditionMask
(int64 long long
)
1287 @ stub VfFailDeviceNode
1289 @ stub VfFailSystemBIOS
1290 @ stub VfIsVerificationEnabled
1291 @ stub WRITE_REGISTER_BUFFER_UCHAR
1292 @ stub WRITE_REGISTER_BUFFER_ULONG
1293 @ stub WRITE_REGISTER_BUFFER_USHORT
1294 @ stub WRITE_REGISTER_UCHAR
1295 @ stub WRITE_REGISTER_ULONG
1296 @ stub WRITE_REGISTER_USHORT
1297 @ stub WmiFlushTrace
1298 @ stub WmiQueryTrace
1299 @ stub WmiQueryTraceInformation
1300 @ stub WmiStartTrace
1302 @ stub WmiTraceMessage
1303 @ stub WmiTraceMessageVa
1304 @ stub WmiUpdateTrace
1306 @ stdcall
-private ZwAccessCheckAndAuditAlarm
(ptr long ptr ptr ptr long ptr long ptr ptr ptr
) NtAccessCheckAndAuditAlarm
1307 @ stub ZwAddBootEntry
1308 @ stdcall
-private ZwAdjustPrivilegesToken
(long long ptr long ptr ptr
) NtAdjustPrivilegesToken
1309 @ stdcall
-private ZwAlertThread
(long
) NtAlertThread
1310 @ stdcall
-private ZwAllocateVirtualMemory
(long ptr long ptr long long
) NtAllocateVirtualMemory
1311 @ stdcall
-private ZwAssignProcessToJobObject
(long long
) NtAssignProcessToJobObject
1312 @ stdcall
-private ZwCancelIoFile
(long ptr
) NtCancelIoFile
1313 @ stdcall
-private ZwCancelTimer
(long ptr
) NtCancelTimer
1314 @ stdcall
-private ZwClearEvent
(long
) NtClearEvent
1315 @ stdcall ZwClose
(long
) NtClose
1316 @ stub ZwCloseObjectAuditAlarm
1317 @ stdcall
-private ZwConnectPort
(ptr ptr ptr ptr ptr ptr ptr ptr
) NtConnectPort
1318 @ stdcall
-private ZwCreateDirectoryObject
(ptr long ptr
) NtCreateDirectoryObject
1319 @ stdcall ZwCreateEvent
(ptr long ptr long long
) NtCreateEvent
1320 @ stdcall ZwCreateFile
(ptr long ptr ptr ptr long long long long ptr long
) NtCreateFile
1321 @ stdcall
-private ZwCreateJobObject
(ptr long ptr
) NtCreateJobObject
1322 @ stdcall
-private ZwCreateKey
(ptr long ptr long ptr long ptr
) NtCreateKey
1323 @ stdcall
-private ZwCreateSection
(ptr long ptr ptr long long long
) NtCreateSection
1324 @ stdcall
-private ZwCreateSymbolicLinkObject
(ptr long ptr ptr
) NtCreateSymbolicLinkObject
1325 @ stdcall
-private ZwCreateTimer
(ptr long ptr long
) NtCreateTimer
1326 @ stub ZwDeleteBootEntry
1327 @ stdcall
-private ZwDeleteFile
(ptr
) NtDeleteFile
1328 @ stdcall
-private ZwDeleteKey
(long
) NtDeleteKey
1329 @ stdcall
-private ZwDeleteValueKey
(long ptr
) NtDeleteValueKey
1330 @ stdcall
-private ZwDeviceIoControlFile
(long long ptr ptr ptr long ptr long ptr long
) NtDeviceIoControlFile
1331 @ stdcall
-private ZwDisplayString
(ptr
) NtDisplayString
1332 @ stdcall ZwDuplicateObject
(long long long ptr long long long
) NtDuplicateObject
1333 @ stdcall
-private ZwDuplicateToken
(long long ptr long long ptr
) NtDuplicateToken
1334 @ stub ZwEnumerateBootEntries
1335 @ stdcall
-private ZwEnumerateKey
(long long long ptr long ptr
) NtEnumerateKey
1336 @ stdcall
-private ZwEnumerateValueKey
(long long long ptr long ptr
) NtEnumerateValueKey
1337 @ stdcall
-private ZwFlushInstructionCache
(long ptr long
) NtFlushInstructionCache
1338 @ stdcall
-private ZwFlushKey
(long
) NtFlushKey
1339 @ stdcall
-private ZwFlushVirtualMemory
(long ptr ptr long
) NtFlushVirtualMemory
1340 @ stdcall
-private ZwFreeVirtualMemory
(long ptr ptr long
) NtFreeVirtualMemory
1341 @ stdcall
-private ZwFsControlFile
(long long ptr ptr ptr long ptr long ptr long
) NtFsControlFile
1342 @ stdcall
-private ZwInitiatePowerAction
(long long long long
) NtInitiatePowerAction
1343 @ stdcall
-private ZwIsProcessInJob
(long long
) NtIsProcessInJob
1344 @ stdcall ZwLoadDriver
(ptr
)
1345 @ stdcall
-private ZwLoadKey
(ptr ptr
) NtLoadKey
1346 @ stdcall
-private ZwMakeTemporaryObject
(long
) NtMakeTemporaryObject
1347 @ stdcall
-private ZwMapViewOfSection
(long long ptr long long ptr ptr long long long
) NtMapViewOfSection
1348 @ stdcall
-private ZwNotifyChangeKey
(long long ptr ptr ptr long long ptr long long
) NtNotifyChangeKey
1349 @ stdcall
-private ZwOpenDirectoryObject
(ptr long ptr
) NtOpenDirectoryObject
1350 @ stdcall
-private ZwOpenEvent
(ptr long ptr
) NtOpenEvent
1351 @ stdcall ZwOpenFile
(ptr long ptr ptr long long
) NtOpenFile
1352 @ stdcall
-private ZwOpenJobObject
(ptr long ptr
) NtOpenJobObject
1353 @ stdcall
-private ZwOpenKey
(ptr long ptr
) NtOpenKey
1354 @ stdcall
-private ZwOpenProcess
(ptr long ptr ptr
) NtOpenProcess
1355 @ stdcall
-private ZwOpenProcessToken
(long long ptr
) NtOpenProcessToken
1356 @ stdcall
-private ZwOpenProcessTokenEx
(long long long ptr
) NtOpenProcessTokenEx
1357 @ stdcall
-private ZwOpenSection
(ptr long ptr
) NtOpenSection
1358 @ stdcall
-private ZwOpenSymbolicLinkObject
(ptr long ptr
) NtOpenSymbolicLinkObject
1359 @ stdcall
-private ZwOpenThread
(ptr long ptr ptr
) NtOpenThread
1360 @ stdcall
-private ZwOpenThreadToken
(long long long ptr
) NtOpenThreadToken
1361 @ stdcall
-private ZwOpenThreadTokenEx
(long long long long ptr
) NtOpenThreadTokenEx
1362 @ stdcall
-private ZwOpenTimer
(ptr long ptr
) NtOpenTimer
1363 @ stdcall
-private ZwPowerInformation
(long ptr long ptr long
) NtPowerInformation
1364 @ stdcall
-private ZwPulseEvent
(long ptr
) NtPulseEvent
1365 @ stub ZwQueryBootEntryOrder
1366 @ stub ZwQueryBootOptions
1367 @ stdcall
-private ZwQueryDefaultLocale
(long ptr
) NtQueryDefaultLocale
1368 @ stdcall
-private ZwQueryDefaultUILanguage
(ptr
) NtQueryDefaultUILanguage
1369 @ stdcall
-private ZwQueryDirectoryFile
(long long ptr ptr ptr ptr long long long ptr long
) NtQueryDirectoryFile
1370 @ stdcall
-private ZwQueryDirectoryObject
(long ptr long long long ptr ptr
) NtQueryDirectoryObject
1371 @ stdcall
-private ZwQueryEaFile
(long ptr ptr long long ptr long ptr long
) NtQueryEaFile
1372 @ stdcall
-private ZwQueryFullAttributesFile
(ptr ptr
) NtQueryFullAttributesFile
1373 @ stdcall
-private ZwQueryInformationFile
(long ptr ptr long long
) NtQueryInformationFile
1374 @ stdcall
-private ZwQueryInformationJobObject
(long long ptr long ptr
) NtQueryInformationJobObject
1375 @ stdcall
-private ZwQueryInformationProcess
(long long ptr long ptr
) NtQueryInformationProcess
1376 @ stdcall
-private ZwQueryInformationThread
(long long ptr long ptr
) NtQueryInformationThread
1377 @ stdcall
-private ZwQueryInformationToken
(long long ptr long ptr
) NtQueryInformationToken
1378 @ stdcall
-private ZwQueryInstallUILanguage
(ptr
) NtQueryInstallUILanguage
1379 @ stdcall
-private ZwQueryKey
(long long ptr long ptr
) NtQueryKey
1380 @ stdcall
-private ZwQueryObject
(long long ptr long ptr
) NtQueryObject
1381 @ stdcall
-private ZwQuerySection
(long long ptr long ptr
) NtQuerySection
1382 @ stdcall
-private ZwQuerySecurityObject
(long long ptr long ptr
) NtQuerySecurityObject
1383 @ stdcall
-private ZwQuerySymbolicLinkObject
(long ptr ptr
) NtQuerySymbolicLinkObject
1384 @ stdcall
-private ZwQuerySystemInformation
(long ptr long ptr
) NtQuerySystemInformation
1385 @ stdcall
-private ZwQueryValueKey
(long ptr long ptr long ptr
) NtQueryValueKey
1386 @ stdcall
-private ZwQueryVolumeInformationFile
(long ptr ptr long long
) NtQueryVolumeInformationFile
1387 @ stdcall
-private ZwReadFile
(long long ptr ptr ptr ptr long ptr ptr
) NtReadFile
1388 @ stdcall
-private ZwReplaceKey
(ptr long ptr
) NtReplaceKey
1389 @ stdcall
-private ZwRequestWaitReplyPort
(ptr ptr ptr
) NtRequestWaitReplyPort
1390 @ stdcall
-private ZwResetEvent
(long ptr
) NtResetEvent
1391 @ stdcall
-private ZwRestoreKey
(long long long
) NtRestoreKey
1392 @ stdcall
-private ZwSaveKey
(long long
) NtSaveKey
1394 @ stub ZwSetBootEntryOrder
1395 @ stub ZwSetBootOptions
1396 @ stdcall
-private ZwSetDefaultLocale
(long long
) NtSetDefaultLocale
1397 @ stdcall
-private ZwSetDefaultUILanguage
(long
) NtSetDefaultUILanguage
1398 @ stdcall
-private ZwSetEaFile
(long ptr ptr long
) NtSetEaFile
1399 @ stdcall ZwSetEvent
(long ptr
) NtSetEvent
1400 @ stdcall
-private ZwSetInformationFile
(long ptr ptr long long
) NtSetInformationFile
1401 @ stdcall
-private ZwSetInformationJobObject
(long long ptr long
) NtSetInformationJobObject
1402 @ stdcall
-private ZwSetInformationObject
(long long ptr long
) NtSetInformationObject
1403 @ stdcall
-private ZwSetInformationProcess
(long long ptr long
) NtSetInformationProcess
1404 @ stdcall
-private ZwSetInformationThread
(long long ptr long
) NtSetInformationThread
1405 @ stdcall
-private ZwSetSecurityObject
(long long ptr
) NtSetSecurityObject
1406 @ stdcall
-private ZwSetSystemInformation
(long ptr long
) NtSetSystemInformation
1407 @ stdcall
-private ZwSetSystemTime
(ptr ptr
) NtSetSystemTime
1408 @ stdcall
-private ZwSetTimer
(long ptr ptr ptr long long ptr
) NtSetTimer
1409 @ stdcall
-private ZwSetValueKey
(long ptr long long ptr long
) NtSetValueKey
1410 @ stdcall
-private ZwSetVolumeInformationFile
(long ptr ptr long long
) NtSetVolumeInformationFile
1411 @ stdcall
-private ZwTerminateJobObject
(long long
) NtTerminateJobObject
1412 @ stdcall
-private ZwTerminateProcess
(long long
) NtTerminateProcess
1413 @ stub ZwTranslateFilePath
1414 @ stdcall ZwUnloadDriver
(ptr
)
1415 @ stdcall
-private ZwUnloadKey
(ptr
) NtUnloadKey
1416 @ stdcall
-private ZwUnmapViewOfSection
(long ptr
) NtUnmapViewOfSection
1417 @ stdcall
-private ZwWaitForMultipleObjects
(long ptr long long ptr
) NtWaitForMultipleObjects
1418 @ stdcall ZwWaitForSingleObject
(long long ptr
) NtWaitForSingleObject
1419 @ stdcall ZwWriteFile
(long long ptr ptr ptr ptr long ptr ptr
) NtWriteFile
1420 @ stdcall
-private ZwYieldExecution
() NtYieldExecution
1421 @ stdcall
-arch
=x86_64 __C_specific_handler
(ptr long ptr ptr
)
1422 @ stdcall
-private
-arch
=arm
,x86_64
-norelay __chkstk
()
1423 @ cdecl
-private
-arch
=i386 _CIcos
() msvcrt._CIcos
1424 @ cdecl
-private
-arch
=i386 _CIsin
() msvcrt._CIsin
1425 @ cdecl
-private
-arch
=i386 _CIsqrt
() msvcrt._CIsqrt
1426 @ cdecl
-private _abnormal_termination
() msvcrt._abnormal_termination
1427 @ stdcall
-private
-arch
=i386
-ret64 _alldiv
(int64 int64
)
1428 @ stdcall
-private
-arch
=i386
-norelay _alldvrm
(int64 int64
)
1429 @ stdcall
-private
-arch
=i386
-ret64 _allmul
(int64 int64
)
1430 @ stdcall
-private
-arch
=i386
-norelay _alloca_probe
()
1431 @ stdcall
-private
-arch
=i386
-ret64 _allrem
(int64 int64
)
1432 @ stdcall
-private
-arch
=i386
-ret64 _allshl
(int64 long
)
1433 @ stdcall
-private
-arch
=i386
-ret64 _allshr
(int64 long
)
1434 @ stdcall
-private
-arch
=i386
-ret64 _aulldiv
(int64 int64
)
1435 @ stdcall
-private
-arch
=i386
-norelay _aulldvrm
(int64 int64
)
1436 @ stdcall
-private
-arch
=i386
-ret64 _aullrem
(int64 int64
)
1437 @ stdcall
-private
-arch
=i386
-ret64 _aullshr
(int64 long
)
1438 @ stdcall
-private
-arch
=i386
-norelay _chkstk
()
1439 @ cdecl
-private
-arch
=i386 _except_handler2
(ptr ptr ptr ptr
) msvcrt._except_handler2
1440 @ cdecl
-private
-arch
=i386 _except_handler3
(ptr ptr ptr ptr
) msvcrt._except_handler3
1441 @ cdecl
-private
-arch
=i386 _global_unwind2
(ptr
) msvcrt._global_unwind2
1442 @ cdecl
-private _itoa
(long ptr long
) msvcrt._itoa
1443 @ cdecl
-private _itow
(long ptr long
) msvcrt._itow
1444 @ cdecl
-private
-arch
=x86_64 _local_unwind
(ptr ptr
) msvcrt._local_unwind
1445 @ cdecl
-private
-arch
=i386 _local_unwind2
(ptr long
) msvcrt._local_unwind2
1446 @ cdecl
-private _purecall
() msvcrt._purecall
1447 @ varargs
-private _snprintf
(ptr long str
) msvcrt._snprintf
1448 @ varargs
-private _snwprintf
(ptr long wstr
) msvcrt._snwprintf
1449 @ cdecl
-private _stricmp
(str str
) NTOSKRNL__stricmp
1450 @ cdecl
-private _strlwr
(str
) msvcrt._strlwr
1451 @ cdecl
-private _strnicmp
(str str long
) NTOSKRNL__strnicmp
1452 @ cdecl
-private _strnset
(str long long
) msvcrt._strnset
1453 @ cdecl
-private _strrev
(str
) msvcrt._strrev
1454 @ cdecl
-private _strset
(str long
) msvcrt._strset
1455 @ cdecl
-private _strupr
(str
) msvcrt._strupr
1456 @ cdecl _vsnprintf
(ptr long str ptr
) msvcrt._vsnprintf
1457 @ cdecl
-private _vsnwprintf
(ptr long wstr ptr
) msvcrt._vsnwprintf
1458 @ cdecl
-private _wcsicmp
(wstr wstr
) msvcrt._wcsicmp
1459 @ cdecl
-private _wcslwr
(wstr
) msvcrt._wcslwr
1460 @ cdecl
-private _wcsnicmp
(wstr wstr long
) NTOSKRNL__wcsnicmp
1461 @ cdecl
-private _wcsnset
(wstr long long
) msvcrt._wcsnset
1462 @ cdecl
-private _wcsrev
(wstr
) msvcrt._wcsrev
1463 @ cdecl
-private _wcsupr
(wstr
) msvcrt._wcsupr
1464 @ cdecl
-private atoi
(str
) msvcrt.atoi
1465 @ cdecl
-private atol
(str
) msvcrt.atol
1466 @ cdecl
-private isdigit
(long
) msvcrt.isdigit
1467 @ cdecl
-private islower
(long
) msvcrt.islower
1468 @ cdecl
-private isprint
(long
) msvcrt.isprint
1469 @ cdecl
-private isspace
(long
) msvcrt.isspace
1470 @ cdecl
-private isupper
(long
) msvcrt.isupper
1471 @ cdecl
-private isxdigit
(long
) msvcrt.isxdigit
1472 @ cdecl
-private mbstowcs
(ptr str long
) msvcrt.mbstowcs
1473 @ cdecl
-private mbtowc
(ptr str long
) msvcrt.mbtowc
1474 @ cdecl
-private memchr
(ptr long long
) msvcrt.memchr
1475 @ cdecl
-private memcpy
(ptr ptr long
) NTOSKRNL_memcpy
1476 @ cdecl
-private memmove
(ptr ptr long
) msvcrt.memmove
1477 @ cdecl
-private memset
(ptr long long
) NTOSKRNL_memset
1478 @ cdecl
-private qsort
(ptr long long ptr
) msvcrt.qsort
1479 @ cdecl
-private rand
() msvcrt.rand
1480 @ varargs
-private sprintf
(ptr str
) msvcrt.sprintf
1481 @ cdecl
-private srand
(long
) msvcrt.srand
1482 @ cdecl
-private strcat
(str str
) msvcrt.strcat
1483 @ cdecl
-private strchr
(str long
) msvcrt.strchr
1484 @ cdecl
-private strcmp
(str str
) msvcrt.strcmp
1485 @ cdecl
-private strcpy
(ptr str
) msvcrt.strcpy
1486 @ cdecl
-private strlen
(str
) msvcrt.strlen
1487 @ cdecl
-private strncat
(str str long
) msvcrt.strncat
1488 @ cdecl
-private strncmp
(str str long
) msvcrt.strncmp
1489 @ cdecl
-private strncpy
(ptr str long
) msvcrt.strncpy
1490 @ cdecl
-private strrchr
(str long
) msvcrt.strrchr
1491 @ cdecl
-private strspn
(str str
) msvcrt.strspn
1492 @ cdecl
-private strstr
(str str
) msvcrt.strstr
1493 @ varargs
-private swprintf
(ptr wstr
) msvcrt.swprintf
1494 @ cdecl
-private tolower
(long
) msvcrt.tolower
1495 @ cdecl
-private toupper
(long
) msvcrt.toupper
1496 @ cdecl
-private towlower
(long
) msvcrt.towlower
1497 @ cdecl
-private towupper
(long
) msvcrt.towupper
1498 @ stdcall vDbgPrintEx
(long long str ptr
)
1499 @ stdcall vDbgPrintExWithPrefix
(str long long str ptr
)
1500 @ cdecl
-private vsprintf
(ptr str ptr
) msvcrt.vsprintf
1501 @ cdecl
-private wcscat
(wstr wstr
) msvcrt.wcscat
1502 @ cdecl
-private wcschr
(wstr long
) msvcrt.wcschr
1503 @ cdecl
-private wcscmp
(wstr wstr
) msvcrt.wcscmp
1504 @ cdecl
-private wcscpy
(ptr wstr
) msvcrt.wcscpy
1505 @ cdecl
-private wcscspn
(wstr wstr
) msvcrt.wcscspn
1506 @ cdecl
-private wcslen
(wstr
) msvcrt.wcslen
1507 @ cdecl
-private wcsncat
(wstr wstr long
) msvcrt.wcsncat
1508 @ cdecl
-private wcsncmp
(wstr wstr long
) NTOSKRNL_wcsncmp
1509 @ cdecl
-private wcsncpy
(ptr wstr long
) msvcrt.wcsncpy
1510 @ cdecl
-private wcsrchr
(wstr long
) msvcrt.wcsrchr
1511 @ cdecl
-private wcsspn
(wstr wstr
) msvcrt.wcsspn
1512 @ cdecl
-private wcsstr
(wstr wstr
) msvcrt.wcsstr
1513 @ cdecl
-private wcstombs
(ptr ptr long
) msvcrt.wcstombs
1514 @ cdecl
-private wctomb
(ptr long
) msvcrt.wctomb
1516 ################################################################
1517 # Wine internal extensions
1519 # All functions must be prefixed with '__wine_' (for internal functions)
1520 # or 'wine_' (for user-visible functions) to avoid namespace conflicts.
1522 @ cdecl wine_ntoskrnl_main_loop
(long
)