From 624deeb49d7dd4591ae65299079ce2f107d8942a Mon Sep 17 00:00:00 2001 From: Alexandre Julliard Date: Fri, 14 Oct 2016 09:39:34 +0200 Subject: [PATCH] ntdll: Prevent importing the Zw functions. It's better to consistently use the Nt ones. Signed-off-by: Alexandre Julliard --- dlls/ntdll/ntdll.spec | 394 ++++++++++++++++++------------------ dlls/ntoskrnl.exe/ntoskrnl.exe.spec | 206 +++++++++---------- 2 files changed, 300 insertions(+), 300 deletions(-) diff --git a/dlls/ntdll/ntdll.spec b/dlls/ntdll/ntdll.spec index 244a72141b8..d138ac1349e 100644 --- a/dlls/ntdll/ntdll.spec +++ b/dlls/ntdll/ntdll.spec @@ -1015,306 +1015,306 @@ @ stdcall WinSqmEndSession(long) @ stdcall WinSqmIsOptedIn() @ stdcall WinSqmStartSession(ptr long long) -@ stdcall ZwAcceptConnectPort(ptr long ptr long long ptr) NtAcceptConnectPort -@ stdcall ZwAccessCheck(ptr long long ptr ptr ptr ptr ptr) NtAccessCheck -@ stdcall ZwAccessCheckAndAuditAlarm(ptr long ptr ptr ptr long ptr long ptr ptr ptr) NtAccessCheckAndAuditAlarm +@ stdcall -private ZwAcceptConnectPort(ptr long ptr long long ptr) NtAcceptConnectPort +@ stdcall -private ZwAccessCheck(ptr long long ptr ptr ptr ptr ptr) NtAccessCheck +@ stdcall -private ZwAccessCheckAndAuditAlarm(ptr long ptr ptr ptr long ptr long ptr ptr ptr) NtAccessCheckAndAuditAlarm # @ stub ZwAccessCheckByType # @ stub ZwAccessCheckByTypeAndAuditAlarm # @ stub ZwAccessCheckByTypeResultList # @ stub ZwAccessCheckByTypeResultListAndAuditAlarm # @ stub ZwAccessCheckByTypeResultListAndAuditAlarmByHandle -@ stdcall ZwAddAtom(ptr long ptr) NtAddAtom +@ stdcall -private ZwAddAtom(ptr long ptr) NtAddAtom # @ stub ZwAddBootEntry -@ stdcall ZwAdjustGroupsToken(long long ptr long ptr ptr) NtAdjustGroupsToken -@ stdcall ZwAdjustPrivilegesToken(long long long long long long) NtAdjustPrivilegesToken -@ stdcall ZwAlertResumeThread(long ptr) NtAlertResumeThread -@ stdcall ZwAlertThread(long) NtAlertThread -@ stdcall ZwAllocateLocallyUniqueId(ptr) NtAllocateLocallyUniqueId +@ stdcall -private ZwAdjustGroupsToken(long long ptr long ptr ptr) NtAdjustGroupsToken +@ stdcall -private ZwAdjustPrivilegesToken(long long long long long long) NtAdjustPrivilegesToken +@ stdcall -private ZwAlertResumeThread(long ptr) NtAlertResumeThread +@ stdcall -private ZwAlertThread(long) NtAlertThread +@ stdcall -private ZwAllocateLocallyUniqueId(ptr) NtAllocateLocallyUniqueId # @ stub ZwAllocateUserPhysicalPages -@ stdcall ZwAllocateUuids(ptr ptr ptr) NtAllocateUuids -@ stdcall ZwAllocateVirtualMemory(long ptr ptr ptr long long) NtAllocateVirtualMemory -@ stdcall ZwAreMappedFilesTheSame(ptr ptr) NtAreMappedFilesTheSame -@ stdcall ZwAssignProcessToJobObject(long long) NtAssignProcessToJobObject +@ stdcall -private ZwAllocateUuids(ptr ptr ptr) NtAllocateUuids +@ stdcall -private ZwAllocateVirtualMemory(long ptr ptr ptr long long) NtAllocateVirtualMemory +@ stdcall -private ZwAreMappedFilesTheSame(ptr ptr) NtAreMappedFilesTheSame +@ stdcall -private ZwAssignProcessToJobObject(long long) NtAssignProcessToJobObject @ stub ZwCallbackReturn # @ stub ZwCancelDeviceWakeupRequest -@ stdcall ZwCancelIoFile(long ptr) NtCancelIoFile -@ stdcall ZwCancelIoFileEx(long ptr ptr) NtCancelIoFileEx -@ stdcall ZwCancelTimer(long ptr) NtCancelTimer -@ stdcall ZwClearEvent(long) NtClearEvent -@ stdcall ZwClose(long) NtClose +@ stdcall -private ZwCancelIoFile(long ptr) NtCancelIoFile +@ stdcall -private ZwCancelIoFileEx(long ptr ptr) NtCancelIoFileEx +@ stdcall -private ZwCancelTimer(long ptr) NtCancelTimer +@ stdcall -private ZwClearEvent(long) NtClearEvent +@ stdcall -private ZwClose(long) NtClose @ stub ZwCloseObjectAuditAlarm # @ stub ZwCompactKeys # @ stub ZwCompareTokens -@ stdcall ZwCompleteConnectPort(ptr) NtCompleteConnectPort +@ stdcall -private ZwCompleteConnectPort(ptr) NtCompleteConnectPort # @ stub ZwCompressKey -@ stdcall ZwConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr) NtConnectPort +@ stdcall -private ZwConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr) NtConnectPort @ stub ZwContinue # @ stub ZwCreateDebugObject -@ stdcall ZwCreateDirectoryObject(long long long) NtCreateDirectoryObject -@ stdcall ZwCreateEvent(long long long long long) NtCreateEvent +@ stdcall -private ZwCreateDirectoryObject(long long long) NtCreateDirectoryObject +@ stdcall -private ZwCreateEvent(long long long long long) NtCreateEvent @ stub ZwCreateEventPair -@ stdcall ZwCreateFile(ptr long ptr ptr long long long ptr long long ptr) NtCreateFile -@ stdcall ZwCreateIoCompletion(ptr long ptr long) NtCreateIoCompletion -@ stdcall ZwCreateJobObject(ptr long ptr) NtCreateJobObject +@ stdcall -private ZwCreateFile(ptr long ptr ptr long long long ptr long long ptr) NtCreateFile +@ stdcall -private ZwCreateIoCompletion(ptr long ptr long) NtCreateIoCompletion +@ stdcall -private ZwCreateJobObject(ptr long ptr) NtCreateJobObject # @ stub ZwCreateJobSet -@ stdcall ZwCreateKey(ptr long ptr long ptr long long) NtCreateKey -@ stdcall ZwCreateKeyTransacted(ptr long ptr long ptr long long ptr) NtCreateKeyTransacted -@ stdcall ZwCreateKeyedEvent(ptr long ptr long) NtCreateKeyedEvent -@ stdcall ZwCreateMailslotFile(long long long long long long long long) NtCreateMailslotFile -@ stdcall ZwCreateMutant(ptr long ptr long) NtCreateMutant -@ stdcall ZwCreateNamedPipeFile(ptr long ptr ptr long long long long long long long long long ptr) NtCreateNamedPipeFile -@ stdcall ZwCreatePagingFile(long long long long) NtCreatePagingFile -@ stdcall ZwCreatePort(ptr ptr long long ptr) NtCreatePort +@ stdcall -private ZwCreateKey(ptr long ptr long ptr long long) NtCreateKey +@ stdcall -private ZwCreateKeyTransacted(ptr long ptr long ptr long long ptr) NtCreateKeyTransacted +@ stdcall -private ZwCreateKeyedEvent(ptr long ptr long) NtCreateKeyedEvent +@ stdcall -private ZwCreateMailslotFile(long long long long long long long long) NtCreateMailslotFile +@ stdcall -private ZwCreateMutant(ptr long ptr long) NtCreateMutant +@ stdcall -private ZwCreateNamedPipeFile(ptr long ptr ptr long long long long long long long long long ptr) NtCreateNamedPipeFile +@ stdcall -private ZwCreatePagingFile(long long long long) NtCreatePagingFile +@ stdcall -private ZwCreatePort(ptr ptr long long ptr) NtCreatePort @ stub ZwCreateProcess # @ stub ZwCreateProcessEx @ stub ZwCreateProfile -@ stdcall ZwCreateSection(ptr long ptr ptr long long long) NtCreateSection -@ stdcall ZwCreateSemaphore(ptr long ptr long long) NtCreateSemaphore -@ stdcall ZwCreateSymbolicLinkObject(ptr long ptr ptr) NtCreateSymbolicLinkObject +@ stdcall -private ZwCreateSection(ptr long ptr ptr long long long) NtCreateSection +@ stdcall -private ZwCreateSemaphore(ptr long ptr long long) NtCreateSemaphore +@ stdcall -private ZwCreateSymbolicLinkObject(ptr long ptr ptr) NtCreateSymbolicLinkObject @ stub ZwCreateThread -@ stdcall ZwCreateTimer(ptr long ptr long) NtCreateTimer +@ stdcall -private ZwCreateTimer(ptr long ptr long) NtCreateTimer @ stub ZwCreateToken # @ stub ZwCreateWaitablePort # @ stub ZwDebugActiveProcess # @ stub ZwDebugContinue -@ stdcall ZwDelayExecution(long ptr) NtDelayExecution -@ stdcall ZwDeleteAtom(long) NtDeleteAtom +@ stdcall -private ZwDelayExecution(long ptr) NtDelayExecution +@ stdcall -private ZwDeleteAtom(long) NtDeleteAtom # @ stub ZwDeleteBootEntry -@ stdcall ZwDeleteFile(ptr) NtDeleteFile -@ stdcall ZwDeleteKey(long) NtDeleteKey +@ stdcall -private ZwDeleteFile(ptr) NtDeleteFile +@ stdcall -private ZwDeleteKey(long) NtDeleteKey # @ stub ZwDeleteObjectAuditAlarm -@ stdcall ZwDeleteValueKey(long ptr) NtDeleteValueKey -@ stdcall ZwDeviceIoControlFile(long long long long long long long long long long) NtDeviceIoControlFile -@ stdcall ZwDisplayString(ptr) NtDisplayString -@ stdcall ZwDuplicateObject(long long long ptr long long long) NtDuplicateObject -@ stdcall ZwDuplicateToken(long long long long long long) NtDuplicateToken +@ stdcall -private ZwDeleteValueKey(long ptr) NtDeleteValueKey +@ stdcall -private ZwDeviceIoControlFile(long long long long long long long long long long) NtDeviceIoControlFile +@ stdcall -private ZwDisplayString(ptr) NtDisplayString +@ stdcall -private ZwDuplicateObject(long long long ptr long long long) NtDuplicateObject +@ stdcall -private ZwDuplicateToken(long long long long long long) NtDuplicateToken # @ stub ZwEnumerateBootEntries @ stub ZwEnumerateBus -@ stdcall ZwEnumerateKey(long long long ptr long ptr) NtEnumerateKey +@ stdcall -private ZwEnumerateKey(long long long ptr long ptr) NtEnumerateKey # @ stub ZwEnumerateSystemEnvironmentValuesEx -@ stdcall ZwEnumerateValueKey(long long long ptr long ptr) NtEnumerateValueKey +@ stdcall -private ZwEnumerateValueKey(long long long ptr long ptr) NtEnumerateValueKey @ stub ZwExtendSection # @ stub ZwFilterToken -@ stdcall ZwFindAtom(ptr long ptr) NtFindAtom -@ stdcall ZwFlushBuffersFile(long ptr) NtFlushBuffersFile -@ stdcall ZwFlushInstructionCache(long ptr long) NtFlushInstructionCache -@ stdcall ZwFlushKey(long) NtFlushKey -@ stdcall ZwFlushVirtualMemory(long ptr ptr long) NtFlushVirtualMemory +@ stdcall -private ZwFindAtom(ptr long ptr) NtFindAtom +@ stdcall -private ZwFlushBuffersFile(long ptr) NtFlushBuffersFile +@ stdcall -private ZwFlushInstructionCache(long ptr long) NtFlushInstructionCache +@ stdcall -private ZwFlushKey(long) NtFlushKey +@ stdcall -private ZwFlushVirtualMemory(long ptr ptr long) NtFlushVirtualMemory @ stub ZwFlushWriteBuffer # @ stub ZwFreeUserPhysicalPages -@ stdcall ZwFreeVirtualMemory(long ptr ptr long) NtFreeVirtualMemory -@ stdcall ZwFsControlFile(long long long long long long long long long long) NtFsControlFile -@ stdcall ZwGetContextThread(long ptr) NtGetContextThread -@ stdcall ZwGetCurrentProcessorNumber() NtGetCurrentProcessorNumber +@ stdcall -private ZwFreeVirtualMemory(long ptr ptr long) NtFreeVirtualMemory +@ stdcall -private ZwFsControlFile(long long long long long long long long long long) NtFsControlFile +@ stdcall -private ZwGetContextThread(long ptr) NtGetContextThread +@ stdcall -private ZwGetCurrentProcessorNumber() NtGetCurrentProcessorNumber # @ stub ZwGetDevicePowerState @ stub ZwGetPlugPlayEvent -@ stdcall ZwGetTickCount() NtGetTickCount -@ stdcall ZwGetWriteWatch(long long ptr long ptr ptr ptr) NtGetWriteWatch -@ stdcall ZwImpersonateAnonymousToken(long) NtImpersonateAnonymousToken +@ stdcall -private ZwGetTickCount() NtGetTickCount +@ stdcall -private ZwGetWriteWatch(long long ptr long ptr ptr ptr) NtGetWriteWatch +@ stdcall -private ZwImpersonateAnonymousToken(long) NtImpersonateAnonymousToken @ stub ZwImpersonateClientOfPort @ stub ZwImpersonateThread @ stub ZwInitializeRegistry -@ stdcall ZwInitiatePowerAction(long long long long) NtInitiatePowerAction -@ stdcall ZwIsProcessInJob(long long) NtIsProcessInJob +@ stdcall -private ZwInitiatePowerAction(long long long long) NtInitiatePowerAction +@ stdcall -private ZwIsProcessInJob(long long) NtIsProcessInJob # @ stub ZwIsSystemResumeAutomatic -@ stdcall ZwListenPort(ptr ptr) NtListenPort -@ stdcall ZwLoadDriver(ptr) NtLoadDriver +@ stdcall -private ZwListenPort(ptr ptr) NtListenPort +@ stdcall -private ZwLoadDriver(ptr) NtLoadDriver # @ stub ZwLoadKey2 -@ stdcall ZwLoadKey(ptr ptr) NtLoadKey -@ stdcall ZwLockFile(long long ptr ptr ptr ptr ptr ptr long long) NtLockFile +@ stdcall -private ZwLoadKey(ptr ptr) NtLoadKey +@ stdcall -private ZwLockFile(long long ptr ptr ptr ptr ptr ptr long long) NtLockFile # @ stub ZwLockProductActivationKeys # @ stub ZwLockRegistryKey -@ stdcall ZwLockVirtualMemory(long ptr ptr long) NtLockVirtualMemory +@ stdcall -private ZwLockVirtualMemory(long ptr ptr long) NtLockVirtualMemory # @ stub ZwMakePermanentObject -@ stdcall ZwMakeTemporaryObject(long) NtMakeTemporaryObject +@ stdcall -private ZwMakeTemporaryObject(long) NtMakeTemporaryObject # @ stub ZwMapUserPhysicalPages # @ stub ZwMapUserPhysicalPagesScatter -@ stdcall ZwMapViewOfSection(long long ptr long long ptr ptr long long long) NtMapViewOfSection +@ stdcall -private ZwMapViewOfSection(long long ptr long long ptr ptr long long long) NtMapViewOfSection # @ stub ZwModifyBootEntry -@ stdcall ZwNotifyChangeDirectoryFile(long long ptr ptr ptr ptr long long long) NtNotifyChangeDirectoryFile -@ stdcall ZwNotifyChangeKey(long long ptr ptr ptr long long ptr long long) NtNotifyChangeKey -@ stdcall ZwNotifyChangeMultipleKeys(long long ptr long ptr ptr ptr long long ptr long long) NtNotifyChangeMultipleKeys -@ stdcall ZwOpenDirectoryObject(long long long) NtOpenDirectoryObject -@ stdcall ZwOpenEvent(long long long) NtOpenEvent +@ stdcall -private ZwNotifyChangeDirectoryFile(long long ptr ptr ptr ptr long long long) NtNotifyChangeDirectoryFile +@ stdcall -private ZwNotifyChangeKey(long long ptr ptr ptr long long ptr long long) NtNotifyChangeKey +@ stdcall -private ZwNotifyChangeMultipleKeys(long long ptr long ptr ptr ptr long long ptr long long) NtNotifyChangeMultipleKeys +@ stdcall -private ZwOpenDirectoryObject(long long long) NtOpenDirectoryObject +@ stdcall -private ZwOpenEvent(long long long) NtOpenEvent @ stub ZwOpenEventPair -@ stdcall ZwOpenFile(ptr long ptr ptr long long) NtOpenFile -@ stdcall ZwOpenIoCompletion(ptr long ptr) NtOpenIoCompletion -@ stdcall ZwOpenJobObject(ptr long ptr) NtOpenJobObject -@ stdcall ZwOpenKey(ptr long ptr) NtOpenKey -@ stdcall ZwOpenKeyEx(ptr long ptr long) NtOpenKeyEx -@ stdcall ZwOpenKeyTransacted(ptr long ptr long) NtOpenKeyTransacted -@ stdcall ZwOpenKeyTransactedEx(ptr long ptr long long) NtOpenKeyTransactedEx -@ stdcall ZwOpenKeyedEvent(ptr long ptr) NtOpenKeyedEvent -@ stdcall ZwOpenMutant(ptr long ptr) NtOpenMutant +@ stdcall -private ZwOpenFile(ptr long ptr ptr long long) NtOpenFile +@ stdcall -private ZwOpenIoCompletion(ptr long ptr) NtOpenIoCompletion +@ stdcall -private ZwOpenJobObject(ptr long ptr) NtOpenJobObject +@ stdcall -private ZwOpenKey(ptr long ptr) NtOpenKey +@ stdcall -private ZwOpenKeyEx(ptr long ptr long) NtOpenKeyEx +@ stdcall -private ZwOpenKeyTransacted(ptr long ptr long) NtOpenKeyTransacted +@ stdcall -private ZwOpenKeyTransactedEx(ptr long ptr long long) NtOpenKeyTransactedEx +@ stdcall -private ZwOpenKeyedEvent(ptr long ptr) NtOpenKeyedEvent +@ stdcall -private ZwOpenMutant(ptr long ptr) NtOpenMutant @ stub ZwOpenObjectAuditAlarm -@ stdcall ZwOpenProcess(ptr long ptr ptr) NtOpenProcess -@ stdcall ZwOpenProcessToken(long long ptr) NtOpenProcessToken -@ stdcall ZwOpenProcessTokenEx(long long long ptr) NtOpenProcessTokenEx -@ stdcall ZwOpenSection(ptr long ptr) NtOpenSection -@ stdcall ZwOpenSemaphore(long long ptr) NtOpenSemaphore -@ stdcall ZwOpenSymbolicLinkObject (ptr long ptr) NtOpenSymbolicLinkObject -@ stdcall ZwOpenThread(ptr long ptr ptr) NtOpenThread -@ stdcall ZwOpenThreadToken(long long long ptr) NtOpenThreadToken -@ stdcall ZwOpenThreadTokenEx(long long long long ptr) NtOpenThreadTokenEx -@ stdcall ZwOpenTimer(ptr long ptr) NtOpenTimer +@ stdcall -private ZwOpenProcess(ptr long ptr ptr) NtOpenProcess +@ stdcall -private ZwOpenProcessToken(long long ptr) NtOpenProcessToken +@ stdcall -private ZwOpenProcessTokenEx(long long long ptr) NtOpenProcessTokenEx +@ stdcall -private ZwOpenSection(ptr long ptr) NtOpenSection +@ stdcall -private ZwOpenSemaphore(long long ptr) NtOpenSemaphore +@ stdcall -private ZwOpenSymbolicLinkObject (ptr long ptr) NtOpenSymbolicLinkObject +@ stdcall -private ZwOpenThread(ptr long ptr ptr) NtOpenThread +@ stdcall -private ZwOpenThreadToken(long long long ptr) NtOpenThreadToken +@ stdcall -private ZwOpenThreadTokenEx(long long long long ptr) NtOpenThreadTokenEx +@ stdcall -private ZwOpenTimer(ptr long ptr) NtOpenTimer @ stub ZwPlugPlayControl -@ stdcall ZwPowerInformation(long ptr long ptr long) NtPowerInformation -@ stdcall ZwPrivilegeCheck(ptr ptr ptr) NtPrivilegeCheck +@ stdcall -private ZwPowerInformation(long ptr long ptr long) NtPowerInformation +@ stdcall -private ZwPrivilegeCheck(ptr ptr ptr) NtPrivilegeCheck @ stub ZwPrivilegeObjectAuditAlarm @ stub ZwPrivilegedServiceAuditAlarm -@ stdcall ZwProtectVirtualMemory(long ptr ptr long ptr) NtProtectVirtualMemory -@ stdcall ZwPulseEvent(long ptr) NtPulseEvent -@ stdcall ZwQueryAttributesFile(ptr ptr) NtQueryAttributesFile +@ stdcall -private ZwProtectVirtualMemory(long ptr ptr long ptr) NtProtectVirtualMemory +@ stdcall -private ZwPulseEvent(long ptr) NtPulseEvent +@ stdcall -private ZwQueryAttributesFile(ptr ptr) NtQueryAttributesFile # @ stub ZwQueryBootEntryOrder # @ stub ZwQueryBootOptions # @ stub ZwQueryDebugFilterState -@ stdcall ZwQueryDefaultLocale(long ptr) NtQueryDefaultLocale -@ stdcall ZwQueryDefaultUILanguage(ptr) NtQueryDefaultUILanguage -@ stdcall ZwQueryDirectoryFile(long long ptr ptr ptr ptr long long long ptr long) NtQueryDirectoryFile -@ stdcall ZwQueryDirectoryObject(long ptr long long long ptr ptr) NtQueryDirectoryObject -@ stdcall ZwQueryEaFile(long ptr ptr long long ptr long ptr long) NtQueryEaFile -@ stdcall ZwQueryEvent(long long ptr long ptr) NtQueryEvent -@ stdcall ZwQueryFullAttributesFile(ptr ptr) NtQueryFullAttributesFile -@ stdcall ZwQueryInformationAtom(long long ptr long ptr) NtQueryInformationAtom -@ stdcall ZwQueryInformationFile(long ptr ptr long long) NtQueryInformationFile -@ stdcall ZwQueryInformationJobObject(long long ptr long ptr) NtQueryInformationJobObject +@ stdcall -private ZwQueryDefaultLocale(long ptr) NtQueryDefaultLocale +@ stdcall -private ZwQueryDefaultUILanguage(ptr) NtQueryDefaultUILanguage +@ stdcall -private ZwQueryDirectoryFile(long long ptr ptr ptr ptr long long long ptr long) NtQueryDirectoryFile +@ stdcall -private ZwQueryDirectoryObject(long ptr long long long ptr ptr) NtQueryDirectoryObject +@ stdcall -private ZwQueryEaFile(long ptr ptr long long ptr long ptr long) NtQueryEaFile +@ stdcall -private ZwQueryEvent(long long ptr long ptr) NtQueryEvent +@ stdcall -private ZwQueryFullAttributesFile(ptr ptr) NtQueryFullAttributesFile +@ stdcall -private ZwQueryInformationAtom(long long ptr long ptr) NtQueryInformationAtom +@ stdcall -private ZwQueryInformationFile(long ptr ptr long long) NtQueryInformationFile +@ stdcall -private ZwQueryInformationJobObject(long long ptr long ptr) NtQueryInformationJobObject @ stub ZwQueryInformationPort -@ stdcall ZwQueryInformationProcess(long long ptr long ptr) NtQueryInformationProcess -@ stdcall ZwQueryInformationThread(long long ptr long ptr) NtQueryInformationThread -@ stdcall ZwQueryInformationToken(long long ptr long ptr) NtQueryInformationToken -@ stdcall ZwQueryInstallUILanguage(ptr) NtQueryInstallUILanguage +@ stdcall -private ZwQueryInformationProcess(long long ptr long ptr) NtQueryInformationProcess +@ stdcall -private ZwQueryInformationThread(long long ptr long ptr) NtQueryInformationThread +@ stdcall -private ZwQueryInformationToken(long long ptr long ptr) NtQueryInformationToken +@ stdcall -private ZwQueryInstallUILanguage(ptr) NtQueryInstallUILanguage @ stub ZwQueryIntervalProfile -@ stdcall ZwQueryIoCompletion(long long ptr long ptr) NtQueryIoCompletion -@ stdcall ZwQueryKey(long long ptr long ptr) NtQueryKey -@ stdcall ZwQueryLicenseValue(ptr ptr ptr long ptr) NtQueryLicenseValue -@ stdcall ZwQueryMultipleValueKey(long ptr long ptr long ptr) NtQueryMultipleValueKey -@ stdcall ZwQueryMutant(long long ptr long ptr) NtQueryMutant -@ stdcall ZwQueryObject(long long long long long) NtQueryObject +@ stdcall -private ZwQueryIoCompletion(long long ptr long ptr) NtQueryIoCompletion +@ stdcall -private ZwQueryKey(long long ptr long ptr) NtQueryKey +@ stdcall -private ZwQueryLicenseValue(ptr ptr ptr long ptr) NtQueryLicenseValue +@ stdcall -private ZwQueryMultipleValueKey(long ptr long ptr long ptr) NtQueryMultipleValueKey +@ stdcall -private ZwQueryMutant(long long ptr long ptr) NtQueryMutant +@ stdcall -private ZwQueryObject(long long long long long) NtQueryObject @ stub ZwQueryOpenSubKeys -@ stdcall ZwQueryPerformanceCounter(ptr ptr) NtQueryPerformanceCounter +@ stdcall -private ZwQueryPerformanceCounter(ptr ptr) NtQueryPerformanceCounter # @ stub ZwQueryPortInformationProcess # @ stub ZwQueryQuotaInformationFile -@ stdcall ZwQuerySection(long long ptr long ptr) NtQuerySection -@ stdcall ZwQuerySecurityObject (long long long long long) NtQuerySecurityObject -@ stdcall ZwQuerySemaphore(long long ptr long ptr) NtQuerySemaphore -@ stdcall ZwQuerySymbolicLinkObject(long ptr ptr) NtQuerySymbolicLinkObject -@ stdcall ZwQuerySystemEnvironmentValue(ptr ptr long ptr) NtQuerySystemEnvironmentValue -@ stdcall ZwQuerySystemEnvironmentValueEx(ptr ptr ptr ptr ptr) NtQuerySystemEnvironmentValueEx -@ stdcall ZwQuerySystemInformation(long long long long) NtQuerySystemInformation -@ stdcall ZwQuerySystemInformationEx(long ptr long ptr long ptr) NtQuerySystemInformationEx -@ stdcall ZwQuerySystemTime(ptr) NtQuerySystemTime -@ stdcall ZwQueryTimer(ptr long ptr long ptr) NtQueryTimer -@ stdcall ZwQueryTimerResolution(long long long) NtQueryTimerResolution -@ stdcall ZwQueryValueKey(long ptr long ptr long ptr) NtQueryValueKey -@ stdcall ZwQueryVirtualMemory(long ptr long ptr long ptr) NtQueryVirtualMemory -@ stdcall ZwQueryVolumeInformationFile(long ptr ptr long long) NtQueryVolumeInformationFile -@ stdcall ZwQueueApcThread(long ptr long long long) NtQueueApcThread -@ stdcall ZwRaiseException(ptr ptr long) NtRaiseException -@ stdcall ZwRaiseHardError(long long ptr ptr long long) NtRaiseHardError -@ stdcall ZwReadFile(long long ptr ptr ptr ptr long ptr ptr) NtReadFile -@ stdcall ZwReadFileScatter(long long ptr ptr ptr ptr long ptr ptr) NtReadFileScatter +@ stdcall -private ZwQuerySection(long long ptr long ptr) NtQuerySection +@ stdcall -private ZwQuerySecurityObject (long long long long long) NtQuerySecurityObject +@ stdcall -private ZwQuerySemaphore(long long ptr long ptr) NtQuerySemaphore +@ stdcall -private ZwQuerySymbolicLinkObject(long ptr ptr) NtQuerySymbolicLinkObject +@ stdcall -private ZwQuerySystemEnvironmentValue(ptr ptr long ptr) NtQuerySystemEnvironmentValue +@ stdcall -private ZwQuerySystemEnvironmentValueEx(ptr ptr ptr ptr ptr) NtQuerySystemEnvironmentValueEx +@ stdcall -private ZwQuerySystemInformation(long long long long) NtQuerySystemInformation +@ stdcall -private ZwQuerySystemInformationEx(long ptr long ptr long ptr) NtQuerySystemInformationEx +@ stdcall -private ZwQuerySystemTime(ptr) NtQuerySystemTime +@ stdcall -private ZwQueryTimer(ptr long ptr long ptr) NtQueryTimer +@ stdcall -private ZwQueryTimerResolution(long long long) NtQueryTimerResolution +@ stdcall -private ZwQueryValueKey(long ptr long ptr long ptr) NtQueryValueKey +@ stdcall -private ZwQueryVirtualMemory(long ptr long ptr long ptr) NtQueryVirtualMemory +@ stdcall -private ZwQueryVolumeInformationFile(long ptr ptr long long) NtQueryVolumeInformationFile +@ stdcall -private ZwQueueApcThread(long ptr long long long) NtQueueApcThread +@ stdcall -private ZwRaiseException(ptr ptr long) NtRaiseException +@ stdcall -private ZwRaiseHardError(long long ptr ptr long long) NtRaiseHardError +@ stdcall -private ZwReadFile(long long ptr ptr ptr ptr long ptr ptr) NtReadFile +@ stdcall -private ZwReadFileScatter(long long ptr ptr ptr ptr long ptr ptr) NtReadFileScatter @ stub ZwReadRequestData -@ stdcall ZwReadVirtualMemory(long ptr ptr long ptr) NtReadVirtualMemory +@ stdcall -private ZwReadVirtualMemory(long ptr ptr long ptr) NtReadVirtualMemory @ stub ZwRegisterNewDevice -@ stdcall ZwRegisterThreadTerminatePort(ptr) NtRegisterThreadTerminatePort -@ stdcall ZwReleaseKeyedEvent(long ptr long ptr) NtReleaseKeyedEvent -@ stdcall ZwReleaseMutant(long ptr) NtReleaseMutant +@ stdcall -private ZwRegisterThreadTerminatePort(ptr) NtRegisterThreadTerminatePort +@ stdcall -private ZwReleaseKeyedEvent(long ptr long ptr) NtReleaseKeyedEvent +@ stdcall -private ZwReleaseMutant(long ptr) NtReleaseMutant @ stub ZwReleaseProcessMutant -@ stdcall ZwReleaseSemaphore(long long ptr) NtReleaseSemaphore -@ stdcall ZwRemoveIoCompletion(ptr ptr ptr ptr ptr) NtRemoveIoCompletion +@ stdcall -private ZwReleaseSemaphore(long long ptr) NtReleaseSemaphore +@ stdcall -private ZwRemoveIoCompletion(ptr ptr ptr ptr ptr) NtRemoveIoCompletion # @ stub ZwRemoveProcessDebug -@ stdcall ZwRenameKey(long ptr) NtRenameKey -@ stdcall ZwReplaceKey(ptr long ptr) NtReplaceKey +@ stdcall -private ZwRenameKey(long ptr) NtRenameKey +@ stdcall -private ZwReplaceKey(ptr long ptr) NtReplaceKey @ stub ZwReplyPort -@ stdcall ZwReplyWaitReceivePort(ptr ptr ptr ptr) NtReplyWaitReceivePort +@ stdcall -private ZwReplyWaitReceivePort(ptr ptr ptr ptr) NtReplyWaitReceivePort @ stub ZwReplyWaitReceivePortEx @ stub ZwReplyWaitReplyPort # @ stub ZwRequestDeviceWakeup @ stub ZwRequestPort -@ stdcall ZwRequestWaitReplyPort(ptr ptr ptr) NtRequestWaitReplyPort +@ stdcall -private ZwRequestWaitReplyPort(ptr ptr ptr) NtRequestWaitReplyPort # @ stub ZwRequestWakeupLatency -@ stdcall ZwResetEvent(long ptr) NtResetEvent -@ stdcall ZwResetWriteWatch(long ptr long) NtResetWriteWatch -@ stdcall ZwRestoreKey(long long long) NtRestoreKey -@ stdcall ZwResumeProcess(long) NtResumeProcess -@ stdcall ZwResumeThread(long long) NtResumeThread -@ stdcall ZwSaveKey(long long) NtSaveKey +@ stdcall -private ZwResetEvent(long ptr) NtResetEvent +@ stdcall -private ZwResetWriteWatch(long ptr long) NtResetWriteWatch +@ stdcall -private ZwRestoreKey(long long long) NtRestoreKey +@ stdcall -private ZwResumeProcess(long) NtResumeProcess +@ stdcall -private ZwResumeThread(long long) NtResumeThread +@ stdcall -private ZwSaveKey(long long) NtSaveKey # @ stub ZwSaveKeyEx # @ stub ZwSaveMergedKeys -@ stdcall ZwSecureConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr ptr) NtSecureConnectPort +@ stdcall -private ZwSecureConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr ptr) NtSecureConnectPort # @ stub ZwSetBootEntryOrder # @ stub ZwSetBootOptions -@ stdcall ZwSetContextThread(long ptr) NtSetContextThread +@ stdcall -private ZwSetContextThread(long ptr) NtSetContextThread @ stub ZwSetDebugFilterState @ stub ZwSetDefaultHardErrorPort -@ stdcall ZwSetDefaultLocale(long long) NtSetDefaultLocale -@ stdcall ZwSetDefaultUILanguage(long) NtSetDefaultUILanguage -@ stdcall ZwSetEaFile(long ptr ptr long) NtSetEaFile -@ stdcall ZwSetEvent(long long) NtSetEvent +@ stdcall -private ZwSetDefaultLocale(long long) NtSetDefaultLocale +@ stdcall -private ZwSetDefaultUILanguage(long) NtSetDefaultUILanguage +@ stdcall -private ZwSetEaFile(long ptr ptr long) NtSetEaFile +@ stdcall -private ZwSetEvent(long long) NtSetEvent # @ stub ZwSetEventBoostPriority @ stub ZwSetHighEventPair @ stub ZwSetHighWaitLowEventPair @ stub ZwSetHighWaitLowThread # @ stub ZwSetInformationDebugObject -@ stdcall ZwSetInformationFile(long long long long long) NtSetInformationFile -@ stdcall ZwSetInformationJobObject(long long ptr long) NtSetInformationJobObject -@ stdcall ZwSetInformationKey(long long ptr long) NtSetInformationKey -@ stdcall ZwSetInformationObject(long long ptr long) NtSetInformationObject -@ stdcall ZwSetInformationProcess(long long long long) NtSetInformationProcess -@ stdcall ZwSetInformationThread(long long ptr long) NtSetInformationThread -@ stdcall ZwSetInformationToken(long long ptr long) NtSetInformationToken -@ stdcall ZwSetIntervalProfile(long long) NtSetIntervalProfile -@ stdcall ZwSetIoCompletion(ptr long ptr long long) NtSetIoCompletion -@ stdcall ZwSetLdtEntries(long long long long long long) NtSetLdtEntries +@ stdcall -private ZwSetInformationFile(long long long long long) NtSetInformationFile +@ stdcall -private ZwSetInformationJobObject(long long ptr long) NtSetInformationJobObject +@ stdcall -private ZwSetInformationKey(long long ptr long) NtSetInformationKey +@ stdcall -private ZwSetInformationObject(long long ptr long) NtSetInformationObject +@ stdcall -private ZwSetInformationProcess(long long long long) NtSetInformationProcess +@ stdcall -private ZwSetInformationThread(long long ptr long) NtSetInformationThread +@ stdcall -private ZwSetInformationToken(long long ptr long) NtSetInformationToken +@ stdcall -private ZwSetIntervalProfile(long long) NtSetIntervalProfile +@ stdcall -private ZwSetIoCompletion(ptr long ptr long long) NtSetIoCompletion +@ stdcall -private ZwSetLdtEntries(long long long long long long) NtSetLdtEntries @ stub ZwSetLowEventPair @ stub ZwSetLowWaitHighEventPair @ stub ZwSetLowWaitHighThread # @ stub ZwSetQuotaInformationFile -@ stdcall ZwSetSecurityObject(long long ptr) NtSetSecurityObject +@ stdcall -private ZwSetSecurityObject(long long ptr) NtSetSecurityObject @ stub ZwSetSystemEnvironmentValue # @ stub ZwSetSystemEnvironmentValueEx -@ stdcall ZwSetSystemInformation(long ptr long) NtSetSystemInformation +@ stdcall -private ZwSetSystemInformation(long ptr long) NtSetSystemInformation @ stub ZwSetSystemPowerState -@ stdcall ZwSetSystemTime(ptr ptr) NtSetSystemTime +@ stdcall -private ZwSetSystemTime(ptr ptr) NtSetSystemTime # @ stub ZwSetThreadExecutionState -@ stdcall ZwSetTimer(long ptr ptr ptr long long ptr) NtSetTimer -@ stdcall ZwSetTimerResolution(long long ptr) NtSetTimerResolution +@ stdcall -private ZwSetTimer(long ptr ptr ptr long long ptr) NtSetTimer +@ stdcall -private ZwSetTimerResolution(long long ptr) NtSetTimerResolution # @ stub ZwSetUuidSeed -@ stdcall ZwSetValueKey(long long long long long long) NtSetValueKey -@ stdcall ZwSetVolumeInformationFile(long ptr ptr long long) NtSetVolumeInformationFile -@ stdcall ZwShutdownSystem(long) NtShutdownSystem -@ stdcall ZwSignalAndWaitForSingleObject(long long long ptr) NtSignalAndWaitForSingleObject +@ stdcall -private ZwSetValueKey(long long long long long long) NtSetValueKey +@ stdcall -private ZwSetVolumeInformationFile(long ptr ptr long long) NtSetVolumeInformationFile +@ stdcall -private ZwShutdownSystem(long) NtShutdownSystem +@ stdcall -private ZwSignalAndWaitForSingleObject(long long long ptr) NtSignalAndWaitForSingleObject @ stub ZwStartProfile @ stub ZwStopProfile -@ stdcall ZwSuspendProcess(long) NtSuspendProcess -@ stdcall ZwSuspendThread(long ptr) NtSuspendThread -@ stdcall ZwSystemDebugControl(long ptr long ptr long ptr) NtSystemDebugControl -@ stdcall ZwTerminateJobObject(long long) NtTerminateJobObject -@ stdcall ZwTerminateProcess(long long) NtTerminateProcess -@ stdcall ZwTerminateThread(long long) NtTerminateThread +@ stdcall -private ZwSuspendProcess(long) NtSuspendProcess +@ stdcall -private ZwSuspendThread(long ptr) NtSuspendThread +@ stdcall -private ZwSystemDebugControl(long ptr long ptr long ptr) NtSystemDebugControl +@ stdcall -private ZwTerminateJobObject(long long) NtTerminateJobObject +@ stdcall -private ZwTerminateProcess(long long) NtTerminateProcess +@ stdcall -private ZwTerminateThread(long long) NtTerminateThread @ stub ZwTestAlert # @ stub ZwTraceEvent # @ stub ZwTranslateFilePath -@ stdcall ZwUnloadDriver(ptr) NtUnloadDriver -@ stdcall ZwUnloadKey(long) NtUnloadKey +@ stdcall -private ZwUnloadDriver(ptr) NtUnloadDriver +@ stdcall -private ZwUnloadKey(long) NtUnloadKey @ stub ZwUnloadKeyEx -@ stdcall ZwUnlockFile(long ptr ptr ptr ptr) NtUnlockFile -@ stdcall ZwUnlockVirtualMemory(long ptr ptr long) NtUnlockVirtualMemory -@ stdcall ZwUnmapViewOfSection(long ptr) NtUnmapViewOfSection +@ stdcall -private ZwUnlockFile(long ptr ptr ptr ptr) NtUnlockFile +@ stdcall -private ZwUnlockVirtualMemory(long ptr ptr long) NtUnlockVirtualMemory +@ stdcall -private ZwUnmapViewOfSection(long ptr) NtUnmapViewOfSection @ stub ZwVdmControl @ stub ZwW32Call # @ stub ZwWaitForDebugEvent -@ stdcall ZwWaitForKeyedEvent(long ptr long ptr) NtWaitForKeyedEvent -@ stdcall ZwWaitForMultipleObjects(long ptr long long ptr) NtWaitForMultipleObjects +@ stdcall -private ZwWaitForKeyedEvent(long ptr long ptr) NtWaitForKeyedEvent +@ stdcall -private ZwWaitForMultipleObjects(long ptr long long ptr) NtWaitForMultipleObjects @ stub ZwWaitForProcessMutant -@ stdcall ZwWaitForSingleObject(long long long) NtWaitForSingleObject +@ stdcall -private ZwWaitForSingleObject(long long long) NtWaitForSingleObject @ stub ZwWaitHighEventPair @ stub ZwWaitLowEventPair -@ stdcall ZwWriteFile(long long ptr ptr ptr ptr long ptr ptr) NtWriteFile -@ stdcall ZwWriteFileGather(long long ptr ptr ptr ptr long ptr ptr) NtWriteFileGather +@ stdcall -private ZwWriteFile(long long ptr ptr ptr ptr long ptr ptr) NtWriteFile +@ stdcall -private ZwWriteFileGather(long long ptr ptr ptr ptr long ptr ptr) NtWriteFileGather @ stub ZwWriteRequestData -@ stdcall ZwWriteVirtualMemory(long ptr ptr long ptr) NtWriteVirtualMemory -@ stdcall ZwYieldExecution() NtYieldExecution +@ stdcall -private ZwWriteVirtualMemory(long ptr ptr long ptr) NtWriteVirtualMemory +@ stdcall -private ZwYieldExecution() NtYieldExecution @ cdecl -private -arch=i386 _CIcos() NTDLL__CIcos @ cdecl -private -arch=i386 _CIlog() NTDLL__CIlog @ cdecl -private -arch=i386 _CIpow() NTDLL__CIpow diff --git a/dlls/ntoskrnl.exe/ntoskrnl.exe.spec b/dlls/ntoskrnl.exe/ntoskrnl.exe.spec index c1b5749f949..3a2fc925017 100644 --- a/dlls/ntoskrnl.exe/ntoskrnl.exe.spec +++ b/dlls/ntoskrnl.exe/ntoskrnl.exe.spec @@ -1276,121 +1276,121 @@ @ stub WmiTraceMessageVa @ stub WmiUpdateTrace @ stub XIPDispatch -@ stdcall ZwAccessCheckAndAuditAlarm(ptr long ptr ptr ptr long ptr long ptr ptr ptr) ntdll.ZwAccessCheckAndAuditAlarm +@ stdcall -private ZwAccessCheckAndAuditAlarm(ptr long ptr ptr ptr long ptr long ptr ptr ptr) ntdll.ZwAccessCheckAndAuditAlarm @ stub ZwAddBootEntry -@ stdcall ZwAdjustPrivilegesToken(long long long long long long) ntdll.ZwAdjustPrivilegesToken -@ stdcall ZwAlertThread(long) ntdll.ZwAlertThread -@ stdcall ZwAllocateVirtualMemory(long ptr ptr ptr long long) ntdll.ZwAllocateVirtualMemory -@ stdcall ZwAssignProcessToJobObject(long long) ntdll.ZwAssignProcessToJobObject -@ stdcall ZwCancelIoFile(long ptr) ntdll.ZwCancelIoFile -@ stdcall ZwCancelTimer(long ptr) ntdll.ZwCancelTimer -@ stdcall ZwClearEvent(long) ntdll.ZwClearEvent -@ stdcall ZwClose(long) ntdll.ZwClose +@ stdcall -private ZwAdjustPrivilegesToken(long long long long long long) ntdll.ZwAdjustPrivilegesToken +@ stdcall -private ZwAlertThread(long) ntdll.ZwAlertThread +@ stdcall -private ZwAllocateVirtualMemory(long ptr ptr ptr long long) ntdll.ZwAllocateVirtualMemory +@ stdcall -private ZwAssignProcessToJobObject(long long) ntdll.ZwAssignProcessToJobObject +@ stdcall -private ZwCancelIoFile(long ptr) ntdll.ZwCancelIoFile +@ stdcall -private ZwCancelTimer(long ptr) ntdll.ZwCancelTimer +@ stdcall -private ZwClearEvent(long) ntdll.ZwClearEvent +@ stdcall -private ZwClose(long) ntdll.ZwClose @ stub ZwCloseObjectAuditAlarm -@ stdcall ZwConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr) ntdll.ZwConnectPort -@ stdcall ZwCreateDirectoryObject(long long long) ntdll.ZwCreateDirectoryObject -@ stdcall ZwCreateEvent(long long long long long) ntdll.ZwCreateEvent -@ stdcall ZwCreateFile(ptr long ptr ptr long long long ptr long long ptr) ntdll.ZwCreateFile -@ stdcall ZwCreateJobObject(ptr long ptr) ntdll.ZwCreateJobObject -@ stdcall ZwCreateKey(ptr long ptr long ptr long long) ntdll.ZwCreateKey -@ stdcall ZwCreateSection(ptr long ptr ptr long long long) ntdll.ZwCreateSection -@ stdcall ZwCreateSymbolicLinkObject(ptr long ptr ptr) ntdll.ZwCreateSymbolicLinkObject -@ stdcall ZwCreateTimer(ptr long ptr long) ntdll.ZwCreateTimer +@ stdcall -private ZwConnectPort(ptr ptr ptr ptr ptr ptr ptr ptr) ntdll.ZwConnectPort +@ stdcall -private ZwCreateDirectoryObject(long long long) ntdll.ZwCreateDirectoryObject +@ stdcall -private ZwCreateEvent(long long long long long) ntdll.ZwCreateEvent +@ stdcall -private ZwCreateFile(ptr long ptr ptr long long long ptr long long ptr) ntdll.ZwCreateFile +@ stdcall -private ZwCreateJobObject(ptr long ptr) ntdll.ZwCreateJobObject +@ stdcall -private ZwCreateKey(ptr long ptr long ptr long long) ntdll.ZwCreateKey +@ stdcall -private ZwCreateSection(ptr long ptr ptr long long long) ntdll.ZwCreateSection +@ stdcall -private ZwCreateSymbolicLinkObject(ptr long ptr ptr) ntdll.ZwCreateSymbolicLinkObject +@ stdcall -private ZwCreateTimer(ptr long ptr long) ntdll.ZwCreateTimer @ stub ZwDeleteBootEntry -@ stdcall ZwDeleteFile(ptr) ntdll.ZwDeleteFile -@ stdcall ZwDeleteKey(long) ntdll.ZwDeleteKey -@ stdcall ZwDeleteValueKey(long ptr) ntdll.ZwDeleteValueKey -@ stdcall ZwDeviceIoControlFile(long long long long long long long long long long) ntdll.ZwDeviceIoControlFile -@ stdcall ZwDisplayString(ptr) ntdll.ZwDisplayString -@ stdcall ZwDuplicateObject(long long long ptr long long long) ntdll.ZwDuplicateObject -@ stdcall ZwDuplicateToken(long long long long long long) ntdll.ZwDuplicateToken +@ stdcall -private ZwDeleteFile(ptr) ntdll.ZwDeleteFile +@ stdcall -private ZwDeleteKey(long) ntdll.ZwDeleteKey +@ stdcall -private ZwDeleteValueKey(long ptr) ntdll.ZwDeleteValueKey +@ stdcall -private ZwDeviceIoControlFile(long long long long long long long long long long) ntdll.ZwDeviceIoControlFile +@ stdcall -private ZwDisplayString(ptr) ntdll.ZwDisplayString +@ stdcall -private ZwDuplicateObject(long long long ptr long long long) ntdll.ZwDuplicateObject +@ stdcall -private ZwDuplicateToken(long long long long long long) ntdll.ZwDuplicateToken @ stub ZwEnumerateBootEntries -@ stdcall ZwEnumerateKey(long long long ptr long ptr) ntdll.ZwEnumerateKey -@ stdcall ZwEnumerateValueKey(long long long ptr long ptr) ntdll.ZwEnumerateValueKey -@ stdcall ZwFlushInstructionCache(long ptr long) ntdll.ZwFlushInstructionCache -@ stdcall ZwFlushKey(long) ntdll.ZwFlushKey -@ stdcall ZwFlushVirtualMemory(long ptr ptr long) ntdll.ZwFlushVirtualMemory -@ stdcall ZwFreeVirtualMemory(long ptr ptr long) ntdll.ZwFreeVirtualMemory -@ stdcall ZwFsControlFile(long long long long long long long long long long) ntdll.ZwFsControlFile -@ stdcall ZwInitiatePowerAction(long long long long) ntdll.ZwInitiatePowerAction -@ stdcall ZwIsProcessInJob(long long) ntdll.ZwIsProcessInJob +@ stdcall -private ZwEnumerateKey(long long long ptr long ptr) ntdll.ZwEnumerateKey +@ stdcall -private ZwEnumerateValueKey(long long long ptr long ptr) ntdll.ZwEnumerateValueKey +@ stdcall -private ZwFlushInstructionCache(long ptr long) ntdll.ZwFlushInstructionCache +@ stdcall -private ZwFlushKey(long) ntdll.ZwFlushKey +@ stdcall -private ZwFlushVirtualMemory(long ptr ptr long) ntdll.ZwFlushVirtualMemory +@ stdcall -private ZwFreeVirtualMemory(long ptr ptr long) ntdll.ZwFreeVirtualMemory +@ stdcall -private ZwFsControlFile(long long long long long long long long long long) ntdll.ZwFsControlFile +@ stdcall -private ZwInitiatePowerAction(long long long long) ntdll.ZwInitiatePowerAction +@ stdcall -private ZwIsProcessInJob(long long) ntdll.ZwIsProcessInJob @ stdcall ZwLoadDriver(ptr) -@ stdcall ZwLoadKey(ptr ptr) ntdll.ZwLoadKey -@ stdcall ZwMakeTemporaryObject(long) ntdll.ZwMakeTemporaryObject -@ stdcall ZwMapViewOfSection(long long ptr long long ptr ptr long long long) ntdll.ZwMapViewOfSection -@ stdcall ZwNotifyChangeKey(long long ptr ptr ptr long long ptr long long) ntdll.ZwNotifyChangeKey -@ stdcall ZwOpenDirectoryObject(long long long) ntdll.ZwOpenDirectoryObject -@ stdcall ZwOpenEvent(long long long) ntdll.ZwOpenEvent -@ stdcall ZwOpenFile(ptr long ptr ptr long long) ntdll.ZwOpenFile -@ stdcall ZwOpenJobObject(ptr long ptr) ntdll.ZwOpenJobObject -@ stdcall ZwOpenKey(ptr long ptr) ntdll.ZwOpenKey -@ stdcall ZwOpenProcess(ptr long ptr ptr) ntdll.ZwOpenProcess -@ stdcall ZwOpenProcessToken(long long ptr) ntdll.ZwOpenProcessToken -@ stdcall ZwOpenProcessTokenEx(long long long ptr) ntdll.ZwOpenProcessTokenEx -@ stdcall ZwOpenSection(ptr long ptr) ntdll.ZwOpenSection -@ stdcall ZwOpenSymbolicLinkObject(ptr long ptr) ntdll.ZwOpenSymbolicLinkObject -@ stdcall ZwOpenThread(ptr long ptr ptr) ntdll.ZwOpenThread -@ stdcall ZwOpenThreadToken(long long long ptr) ntdll.ZwOpenThreadToken -@ stdcall ZwOpenThreadTokenEx(long long long long ptr) ntdll.ZwOpenThreadTokenEx -@ stdcall ZwOpenTimer(ptr long ptr) ntdll.ZwOpenTimer -@ stdcall ZwPowerInformation(long ptr long ptr long) ntdll.ZwPowerInformation -@ stdcall ZwPulseEvent(long ptr) ntdll.ZwPulseEvent +@ stdcall -private ZwLoadKey(ptr ptr) ntdll.ZwLoadKey +@ stdcall -private ZwMakeTemporaryObject(long) ntdll.ZwMakeTemporaryObject +@ stdcall -private ZwMapViewOfSection(long long ptr long long ptr ptr long long long) ntdll.ZwMapViewOfSection +@ stdcall -private ZwNotifyChangeKey(long long ptr ptr ptr long long ptr long long) ntdll.ZwNotifyChangeKey +@ stdcall -private ZwOpenDirectoryObject(long long long) ntdll.ZwOpenDirectoryObject +@ stdcall -private ZwOpenEvent(long long long) ntdll.ZwOpenEvent +@ stdcall -private ZwOpenFile(ptr long ptr ptr long long) ntdll.ZwOpenFile +@ stdcall -private ZwOpenJobObject(ptr long ptr) ntdll.ZwOpenJobObject +@ stdcall -private ZwOpenKey(ptr long ptr) ntdll.ZwOpenKey +@ stdcall -private ZwOpenProcess(ptr long ptr ptr) ntdll.ZwOpenProcess +@ stdcall -private ZwOpenProcessToken(long long ptr) ntdll.ZwOpenProcessToken +@ stdcall -private ZwOpenProcessTokenEx(long long long ptr) ntdll.ZwOpenProcessTokenEx +@ stdcall -private ZwOpenSection(ptr long ptr) ntdll.ZwOpenSection +@ stdcall -private ZwOpenSymbolicLinkObject(ptr long ptr) ntdll.ZwOpenSymbolicLinkObject +@ stdcall -private ZwOpenThread(ptr long ptr ptr) ntdll.ZwOpenThread +@ stdcall -private ZwOpenThreadToken(long long long ptr) ntdll.ZwOpenThreadToken +@ stdcall -private ZwOpenThreadTokenEx(long long long long ptr) ntdll.ZwOpenThreadTokenEx +@ stdcall -private ZwOpenTimer(ptr long ptr) ntdll.ZwOpenTimer +@ stdcall -private ZwPowerInformation(long ptr long ptr long) ntdll.ZwPowerInformation +@ stdcall -private ZwPulseEvent(long ptr) ntdll.ZwPulseEvent @ stub ZwQueryBootEntryOrder @ stub ZwQueryBootOptions -@ stdcall ZwQueryDefaultLocale(long ptr) ntdll.ZwQueryDefaultLocale -@ stdcall ZwQueryDefaultUILanguage(ptr) ntdll.ZwQueryDefaultUILanguage -@ stdcall ZwQueryDirectoryFile(long long ptr ptr ptr ptr long long long ptr long) ntdll.ZwQueryDirectoryFile -@ stdcall ZwQueryDirectoryObject(long ptr long long long ptr ptr) ntdll.ZwQueryDirectoryObject -@ stdcall ZwQueryEaFile(long ptr ptr long long ptr long ptr long) ntdll.ZwQueryEaFile -@ stdcall ZwQueryFullAttributesFile(ptr ptr) ntdll.ZwQueryFullAttributesFile -@ stdcall ZwQueryInformationFile(long ptr ptr long long) ntdll.ZwQueryInformationFile -@ stdcall ZwQueryInformationJobObject(long long ptr long ptr) ntdll.ZwQueryInformationJobObject -@ stdcall ZwQueryInformationProcess(long long ptr long ptr) ntdll.ZwQueryInformationProcess -@ stdcall ZwQueryInformationThread(long long ptr long ptr) ntdll.ZwQueryInformationThread -@ stdcall ZwQueryInformationToken(long long ptr long ptr) ntdll.ZwQueryInformationToken -@ stdcall ZwQueryInstallUILanguage(ptr) ntdll.ZwQueryInstallUILanguage -@ stdcall ZwQueryKey(long long ptr long ptr) ntdll.ZwQueryKey -@ stdcall ZwQueryObject(long long long long long) ntdll.ZwQueryObject -@ stdcall ZwQuerySection(long long ptr long ptr) ntdll.ZwQuerySection -@ stdcall ZwQuerySecurityObject(long long long long long) ntdll.ZwQuerySecurityObject -@ stdcall ZwQuerySymbolicLinkObject(long ptr ptr) ntdll.ZwQuerySymbolicLinkObject -@ stdcall ZwQuerySystemInformation(long long long long) ntdll.ZwQuerySystemInformation -@ stdcall ZwQueryValueKey(long ptr long ptr long ptr) ntdll.ZwQueryValueKey -@ stdcall ZwQueryVolumeInformationFile(long ptr ptr long long) ntdll.ZwQueryVolumeInformationFile -@ stdcall ZwReadFile(long long ptr ptr ptr ptr long ptr ptr) ntdll.ZwReadFile -@ stdcall ZwReplaceKey(ptr long ptr) ntdll.ZwReplaceKey -@ stdcall ZwRequestWaitReplyPort(ptr ptr ptr) ntdll.ZwRequestWaitReplyPort -@ stdcall ZwResetEvent(long ptr) ntdll.ZwResetEvent -@ stdcall ZwRestoreKey(long long long) ntdll.ZwRestoreKey -@ stdcall ZwSaveKey(long long) ntdll.ZwSaveKey +@ stdcall -private ZwQueryDefaultLocale(long ptr) ntdll.ZwQueryDefaultLocale +@ stdcall -private ZwQueryDefaultUILanguage(ptr) ntdll.ZwQueryDefaultUILanguage +@ stdcall -private ZwQueryDirectoryFile(long long ptr ptr ptr ptr long long long ptr long) ntdll.ZwQueryDirectoryFile +@ stdcall -private ZwQueryDirectoryObject(long ptr long long long ptr ptr) ntdll.ZwQueryDirectoryObject +@ stdcall -private ZwQueryEaFile(long ptr ptr long long ptr long ptr long) ntdll.ZwQueryEaFile +@ stdcall -private ZwQueryFullAttributesFile(ptr ptr) ntdll.ZwQueryFullAttributesFile +@ stdcall -private ZwQueryInformationFile(long ptr ptr long long) ntdll.ZwQueryInformationFile +@ stdcall -private ZwQueryInformationJobObject(long long ptr long ptr) ntdll.ZwQueryInformationJobObject +@ stdcall -private ZwQueryInformationProcess(long long ptr long ptr) ntdll.ZwQueryInformationProcess +@ stdcall -private ZwQueryInformationThread(long long ptr long ptr) ntdll.ZwQueryInformationThread +@ stdcall -private ZwQueryInformationToken(long long ptr long ptr) ntdll.ZwQueryInformationToken +@ stdcall -private ZwQueryInstallUILanguage(ptr) ntdll.ZwQueryInstallUILanguage +@ stdcall -private ZwQueryKey(long long ptr long ptr) ntdll.ZwQueryKey +@ stdcall -private ZwQueryObject(long long long long long) ntdll.ZwQueryObject +@ stdcall -private ZwQuerySection(long long ptr long ptr) ntdll.ZwQuerySection +@ stdcall -private ZwQuerySecurityObject(long long long long long) ntdll.ZwQuerySecurityObject +@ stdcall -private ZwQuerySymbolicLinkObject(long ptr ptr) ntdll.ZwQuerySymbolicLinkObject +@ stdcall -private ZwQuerySystemInformation(long long long long) ntdll.ZwQuerySystemInformation +@ stdcall -private ZwQueryValueKey(long ptr long ptr long ptr) ntdll.ZwQueryValueKey +@ stdcall -private ZwQueryVolumeInformationFile(long ptr ptr long long) ntdll.ZwQueryVolumeInformationFile +@ stdcall -private ZwReadFile(long long ptr ptr ptr ptr long ptr ptr) ntdll.ZwReadFile +@ stdcall -private ZwReplaceKey(ptr long ptr) ntdll.ZwReplaceKey +@ stdcall -private ZwRequestWaitReplyPort(ptr ptr ptr) ntdll.ZwRequestWaitReplyPort +@ stdcall -private ZwResetEvent(long ptr) ntdll.ZwResetEvent +@ stdcall -private ZwRestoreKey(long long long) ntdll.ZwRestoreKey +@ stdcall -private ZwSaveKey(long long) ntdll.ZwSaveKey @ stub ZwSaveKeyEx @ stub ZwSetBootEntryOrder @ stub ZwSetBootOptions -@ stdcall ZwSetDefaultLocale(long long) ntdll.ZwSetDefaultLocale -@ stdcall ZwSetDefaultUILanguage(long) ntdll.ZwSetDefaultUILanguage -@ stdcall ZwSetEaFile(long ptr ptr long) ntdll.ZwSetEaFile -@ stdcall ZwSetEvent(long long) ntdll.ZwSetEvent -@ stdcall ZwSetInformationFile(long long long long long) ntdll.ZwSetInformationFile -@ stdcall ZwSetInformationJobObject(long long ptr long) ntdll.ZwSetInformationJobObject -@ stdcall ZwSetInformationObject(long long ptr long) ntdll.ZwSetInformationObject -@ stdcall ZwSetInformationProcess(long long long long) ntdll.ZwSetInformationProcess -@ stdcall ZwSetInformationThread(long long ptr long) ntdll.ZwSetInformationThread -@ stdcall ZwSetSecurityObject(long long ptr) ntdll.ZwSetSecurityObject -@ stdcall ZwSetSystemInformation(long ptr long) ntdll.ZwSetSystemInformation -@ stdcall ZwSetSystemTime(ptr ptr) ntdll.ZwSetSystemTime -@ stdcall ZwSetTimer(long ptr ptr ptr long long ptr) ntdll.ZwSetTimer -@ stdcall ZwSetValueKey(long long long long long long) ntdll.ZwSetValueKey -@ stdcall ZwSetVolumeInformationFile(long ptr ptr long long) ntdll.ZwSetVolumeInformationFile -@ stdcall ZwTerminateJobObject(long long) ntdll.ZwTerminateJobObject -@ stdcall ZwTerminateProcess(long long) ntdll.ZwTerminateProcess +@ stdcall -private ZwSetDefaultLocale(long long) ntdll.ZwSetDefaultLocale +@ stdcall -private ZwSetDefaultUILanguage(long) ntdll.ZwSetDefaultUILanguage +@ stdcall -private ZwSetEaFile(long ptr ptr long) ntdll.ZwSetEaFile +@ stdcall -private ZwSetEvent(long long) ntdll.ZwSetEvent +@ stdcall -private ZwSetInformationFile(long long long long long) ntdll.ZwSetInformationFile +@ stdcall -private ZwSetInformationJobObject(long long ptr long) ntdll.ZwSetInformationJobObject +@ stdcall -private ZwSetInformationObject(long long ptr long) ntdll.ZwSetInformationObject +@ stdcall -private ZwSetInformationProcess(long long long long) ntdll.ZwSetInformationProcess +@ stdcall -private ZwSetInformationThread(long long ptr long) ntdll.ZwSetInformationThread +@ stdcall -private ZwSetSecurityObject(long long ptr) ntdll.ZwSetSecurityObject +@ stdcall -private ZwSetSystemInformation(long ptr long) ntdll.ZwSetSystemInformation +@ stdcall -private ZwSetSystemTime(ptr ptr) ntdll.ZwSetSystemTime +@ stdcall -private ZwSetTimer(long ptr ptr ptr long long ptr) ntdll.ZwSetTimer +@ stdcall -private ZwSetValueKey(long long long long long long) ntdll.ZwSetValueKey +@ stdcall -private ZwSetVolumeInformationFile(long ptr ptr long long) ntdll.ZwSetVolumeInformationFile +@ stdcall -private ZwTerminateJobObject(long long) ntdll.ZwTerminateJobObject +@ stdcall -private ZwTerminateProcess(long long) ntdll.ZwTerminateProcess @ stub ZwTranslateFilePath @ stdcall ZwUnloadDriver(ptr) -@ stdcall ZwUnloadKey(long) ntdll.ZwUnloadKey -@ stdcall ZwUnmapViewOfSection(long ptr) ntdll.ZwUnmapViewOfSection -@ stdcall ZwWaitForMultipleObjects(long ptr long long ptr) ntdll.ZwWaitForMultipleObjects -@ stdcall ZwWaitForSingleObject(long long long) ntdll.ZwWaitForSingleObject -@ stdcall ZwWriteFile(long long ptr ptr ptr ptr long ptr ptr) ntdll.ZwWriteFile -@ stdcall ZwYieldExecution() ntdll.ZwYieldExecution +@ stdcall -private ZwUnloadKey(long) ntdll.ZwUnloadKey +@ stdcall -private ZwUnmapViewOfSection(long ptr) ntdll.ZwUnmapViewOfSection +@ stdcall -private ZwWaitForMultipleObjects(long ptr long long ptr) ntdll.ZwWaitForMultipleObjects +@ stdcall -private ZwWaitForSingleObject(long long long) ntdll.ZwWaitForSingleObject +@ stdcall -private ZwWriteFile(long long ptr ptr ptr ptr long ptr ptr) ntdll.ZwWriteFile +@ stdcall -private ZwYieldExecution() ntdll.ZwYieldExecution @ cdecl -private -arch=i386 _CIcos() msvcrt._CIcos @ cdecl -private -arch=i386 _CIsin() msvcrt._CIsin @ cdecl -private -arch=i386 _CIsqrt() msvcrt._CIsqrt -- 2.11.4.GIT