4 #note that the Zw... functions are alternate names for the
5 #Nt... functions. (see www.sysinternals.com for details)
6 #if you change a Nt.. function DON'T FORGET to change the
9 @ stub CsrAllocateCaptureBuffer
10 @ stub CsrAllocateCapturePointer
11 @ stub CsrAllocateMessagePointer
12 @ stub CsrCaptureMessageBuffer
13 @ stub CsrCaptureMessageString
14 @ stub CsrCaptureTimeout
15 @ stub CsrClientCallServer
16 @ stub CsrClientConnectToServer
17 @ stub CsrClientMaxMessage
18 @ stub CsrClientSendMessage
19 @ stub CsrClientThreadConnect
20 @ stub CsrFreeCaptureBuffer
21 @ stub CsrIdentifyAlertableThread
23 @ stub CsrProbeForRead
24 @ stub CsrProbeForWrite
25 @ stub CsrSetPriorityClass
26 @ stub CsrpProcessCallbackRequest
28 @ varargs DbgPrint
(str
) DbgPrint
30 @ stub DbgSsHandleKmApiMsg
31 @ stub DbgSsInitialize
32 @ stub DbgUiConnectToDbg
34 @ stub DbgUiWaitStateChange
35 @ stub DbgUserBreakPoint
36 @ stub KiUserApcDispatcher
37 @ stub KiUserCallbackDispatcher
38 @ stub KiUserExceptionDispatcher
39 @ stub LdrAccessResource
40 @ stub LdrDisableThreadCalloutsForDll
41 @ stub LdrEnumResources
42 @ stub LdrFindEntryForAddress
43 @ stub LdrFindResourceDirectory_U
44 @ stub LdrFindResource_U
45 @ stub LdrGetDllHandle
46 @ stub LdrGetProcedureAddress
47 @ stub LdrInitializeThunk
49 @ stub LdrProcessRelocationBlock
50 @ stub LdrQueryImageFileExecutionOptions
51 @ stub LdrQueryProcessModuleInformation
52 @ stub LdrShutdownProcess
53 @ stub LdrShutdownThread
55 @ stub LdrVerifyImageMatchesChecksum
56 @ stub NPXEMULATORTABLE
57 @ stub NlsMbCodePageTag
58 @ stub NlsMbOemCodePageTag
59 @ stdcall NtAcceptConnectPort
(long long long long long long
) NtAcceptConnectPort
61 @ stub NtAccessCheckAndAuditAlarm
62 @ stub NtAdjustGroupsToken
63 @ stdcall NtAdjustPrivilegesToken
(long long long long long long
) NtAdjustPrivilegesToken
64 @ stub NtAlertResumeThread
66 @ stub NtAllocateLocallyUniqueId
67 @ stub NtAllocateUuids
68 @ stub NtAllocateVirtualMemory
69 @ stub NtCallbackReturn
73 @ stdcall NtClose
(long
) NtClose
74 @ stub NtCloseObjectAuditAlarm
75 @ stdcall NtCompleteConnectPort
(long
) NtCompleteConnectPort
76 @ stdcall NtConnectPort
(long long long long long long long long
) NtConnectPort
78 @ stdcall NtCreateDirectoryObject
(long long long
) NtCreateDirectoryObject
79 @ stdcall NtCreateEvent
(long long long long long
) NtCreateEvent
80 @ stub NtCreateEventPair
81 @ stdcall NtCreateFile
(ptr long ptr ptr long long long ptr long long ptr
) NtCreateFile
82 @ stub NtCreateIoCompletion
83 @ stdcall NtCreateKey
(long long long long long long long
) NtCreateKey
84 @ stdcall NtCreateMailslotFile
(long long long long long long long long
) NtCreateMailslotFile
86 @ stub NtCreateNamedPipeFile
87 @ stdcall NtCreatePagingFile
(long long long long
) NtCreatePagingFile
88 @ stdcall NtCreatePort
(long long long long long
) NtCreatePort
89 @ stub NtCreateProcess
90 @ stub NtCreateProfile
91 @ stdcall NtCreateSection
(long long long long long long long
) NtCreateSection
92 @ stdcall NtCreateSemaphore
(ptr long ptr long long
) NtCreateSemaphore
93 @ stdcall NtCreateSymbolicLinkObject
(ptr long ptr ptr
) NtCreateSymbolicLinkObject
95 @ stdcall NtCreateTimer
(ptr long ptr long
) NtCreateTimer
97 @ stdcall NtCurrentTeb
() NtCurrentTeb
98 @ stub NtDelayExecution
100 @ stdcall NtDeleteKey
(long
) NtDeleteKey
101 @ stdcall NtDeleteValueKey
(long ptr
) NtDeleteValueKey
102 @ stdcall NtDeviceIoControlFile
(long long long long long long long long long long
) NtDeviceIoControlFile
103 @ stdcall NtDisplayString
(ptr
)NtDisplayString
104 @ stdcall NtDuplicateObject
(long long long long long long long
) NtDuplicateObject
105 @ stdcall NtDuplicateToken
(long long long long long long
) NtDuplicateToken
106 @ stub NtEnumerateBus
107 @ stdcall NtEnumerateKey
(long long long long long long
) NtEnumerateKey
108 @ stdcall NtEnumerateValueKey
(long long long long long long
) NtEnumerateValueKey
109 @ stub NtExtendSection
110 @ stub NtFlushBuffersFile
111 @ stub NtFlushInstructionCache
112 @ stdcall NtFlushKey
(long
) NtFlushKey
113 @ stub NtFlushVirtualMemory
114 @ stub NtFlushWriteBuffer
115 @ stub NtFreeVirtualMemory
116 @ stdcall NtFsControlFile
(long long long long long long long long long long
) NtFsControlFile
117 @ stub NtGetContextThread
118 @ stub NtGetPlugPlayEvent
119 @ stub NtGetTickCount
120 @ stub NtImpersonateClientOfPort
121 @ stub NtImpersonateThread
122 @ stub NtInitializeRegistry
123 @ stdcall NtListenPort
(long long
) NtListenPort
125 @ stdcall NtLoadKey
(ptr ptr
) NtLoadKey
127 @ stub NtLockVirtualMemory
128 @ stub NtMakeTemporaryObject
129 @ stdcall NtMapViewOfSection
(long long long long long long long long long long
) NtMapViewOfSection
130 @ stub NtNotifyChangeDirectoryFile
131 @ stdcall NtNotifyChangeKey
(long long ptr ptr ptr long long ptr long long
) NtNotifyChangeKey
132 @ stdcall NtOpenDirectoryObject
(long long long
) NtOpenDirectoryObject
133 @ stdcall NtOpenEvent
(long long long
) NtOpenEvent
134 @ stub NtOpenEventPair
135 @ stdcall NtOpenFile
(ptr long ptr ptr long long
) NtOpenFile
136 @ stub NtOpenIoCompletion
137 @ stdcall NtOpenKey
(ptr long ptr
) NtOpenKey
139 @ stub NtOpenObjectAuditAlarm
141 @ stdcall NtOpenProcessToken
(long long long
) NtOpenProcessToken
142 @ stdcall NtOpenSection
(long long long
) NtOpenSection
143 @ stdcall NtOpenSemaphore
(long long ptr
) NtOpenSemaphore
144 @ stdcall NtOpenSymbolicLinkObject
(long long long
) NtOpenSymbolicLinkObject
146 @ stdcall NtOpenThreadToken
(long long long long
) NtOpenThreadToken
148 @ stub NtPlugPlayControl
149 @ stub NtPrivilegeCheck
150 @ stub NtPrivilegeObjectAuditAlarm
151 @ stub NtPrivilegedServiceAuditAlarm
152 @ stub NtProtectVirtualMemory
154 @ stub NtQueryAttributesFile
155 @ stub NtQueryDefaultLocale
156 @ stdcall NtQueryDirectoryFile
(long long ptr ptr ptr ptr long long long ptr long
)NtQueryDirectoryFile
157 @ stdcall NtQueryDirectoryObject
(long long long long long long long
) NtQueryDirectoryObject
160 @ stdcall NtQueryInformationFile
(long long long long long
) NtQueryInformationFile
161 @ stub NtQueryInformationPort
162 @ stdcall NtQueryInformationProcess
(long long long long long
) NtQueryInformationProcess
163 @ stdcall NtQueryInformationThread
(long long long long long
) NtQueryInformationThread
164 @ stdcall NtQueryInformationToken
(long long long long long
) NtQueryInformationToken
165 @ stub NtQueryIntervalProfile
166 @ stub NtQueryIoCompletion
167 @ stdcall NtQueryKey
(long long ptr long ptr
) NtQueryKey
169 @ stdcall NtQueryObject
(long long long long long
) NtQueryObject
170 @ stdcall NtQueryPerformanceCounter
(long long
) NtQueryPerformanceCounter
171 @ stdcall NtQuerySection
(long long long long long
) NtQuerySection
172 @ stdcall NtQuerySecurityObject
(long long long long long
) NtQuerySecurityObject
173 @ stdcall NtQuerySemaphore
(long long long long long
) NtQuerySemaphore
174 @ stdcall NtQuerySymbolicLinkObject
(long ptr ptr
) NtQuerySymbolicLinkObject
175 @ stub NtQuerySystemEnvironmentValue
176 @ stdcall NtQuerySystemInformation
(long long long long
) NtQuerySystemInformation
177 @ stdcall NtQuerySystemTime
(ptr
) GetSystemTimeAsFileTime
179 @ stdcall NtQueryTimerResolution
(long long long
) NtQueryTimerResolution
180 @ stdcall NtQueryValueKey
(long long long long long long
) NtQueryValueKey
181 @ stub NtQueryVirtualMemory
182 @ stub NtQueryVolumeInformationFile
183 @ stdcall NtRaiseException
(ptr ptr long
) NtRaiseException
184 @ stub NtRaiseHardError
185 @ stdcall NtReadFile
(long long long long long long long long long
) NtReadFile
186 @ stub NtReadRequestData
187 @ stub NtReadVirtualMemory
188 @ stub NtRegisterNewDevice
189 @ stdcall NtRegisterThreadTerminatePort
(long
) NtRegisterThreadTerminatePort
190 @ stub NtReleaseMutant
191 @ stub NtReleaseProcessMutant
192 @ stdcall NtReleaseSemaphore
(long long ptr
) NtReleaseSemaphore
193 @ stub NtRemoveIoCompletion
194 @ stdcall NtReplaceKey
(ptr long ptr
) NtReplaceKey
196 @ stdcall NtReplyWaitReceivePort
(long long long long
) NtReplyWaitReceivePort
197 @ stub NtReplyWaitReplyPort
199 @ stdcall NtRequestWaitReplyPort
(long long long
) NtRequestWaitReplyPort
201 @ stdcall NtRestoreKey
(long long long
) NtRestoreKey
202 @ stdcall NtResumeThread
(long long
) NtResumeThread
203 @ stdcall NtSaveKey
(long long
) NtSaveKey
204 @ stub NtSetContextThread
205 @ stub NtSetDefaultHardErrorPort
206 @ stub NtSetDefaultLocale
208 @ stdcall NtSetEvent
(long long
) NtSetEvent
209 @ stub NtSetHighEventPair
210 @ stub NtSetHighWaitLowEventPair
211 @ stub NtSetHighWaitLowThread
212 @ stdcall NtSetInformationFile
(long long long long long
) NtSetInformationFile
213 @ stdcall NtSetInformationKey
(long long ptr long
) NtSetInformationKey
214 @ stub NtSetInformationObject
215 @ stdcall NtSetInformationProcess
(long long long long
) NtSetInformationProcess
216 @ stdcall NtSetInformationThread
(long long long long
) NtSetInformationThread
217 @ stub NtSetInformationToken
218 @ stdcall NtSetIntervalProfile
(long long
) NtSetIntervalProfile
219 @ stub NtSetIoCompletion
220 @ stub NtSetLdtEntries
221 @ stub NtSetLowEventPair
222 @ stub NtSetLowWaitHighEventPair
223 @ stub NtSetLowWaitHighThread
224 @ stub NtSetSecurityObject
225 @ stub NtSetSystemEnvironmentValue
226 @ stub NtSetSystemInformation
227 @ stub NtSetSystemPowerState
228 @ stub NtSetSystemTime
229 @ stdcall NtSetTimer
(long ptr ptr ptr long long ptr
) NtSetTimer
230 @ stub NtSetTimerResolution
231 @ stdcall NtSetValueKey
(long long long long long long
) NtSetValueKey
232 @ stdcall NtSetVolumeInformationFile
(long ptr ptr long long
) NtSetVolumeInformationFile
233 @ stub NtShutdownSystem
234 @ stub NtStartProfile
236 @ stub NtSuspendThread
237 @ stub NtSystemDebugControl
238 @ stdcall NtTerminateProcess
(long long
)NtTerminateProcess
239 @ stdcall NtTerminateThread
(long long
) NtTerminateThread
241 @ stub NtUnloadDriver
242 @ stdcall NtUnloadKey
(long
) NtUnloadKey
244 @ stub NtUnlockVirtualMemory
245 @ stub NtUnmapViewOfSection
248 @ stub NtWaitForMultipleObjects
249 @ stub NtWaitForProcessMutant
250 @ stdcall NtWaitForSingleObject
(long long long
) NtWaitForSingleObject
251 @ stub NtWaitHighEventPair
252 @ stub NtWaitLowEventPair
254 @ stub NtWriteRequestData
255 @ stub NtWriteVirtualMemory
258 @ stub PfxInsertPrefix
259 @ stub PfxRemovePrefix
260 @ stub RestoreEm87Context
262 @ stub RtlAbsoluteToSelfRelativeSD
263 @ stdcall RtlAcquirePebLock
() RtlAcquirePebLock
264 @ stdcall RtlAcquireResourceExclusive
(ptr long
) RtlAcquireResourceExclusive
265 @ stdcall RtlAcquireResourceShared
(ptr long
) RtlAcquireResourceShared
266 @ stdcall RtlAddAccessAllowedAce
(long long long long
) RtlAddAccessAllowedAce
267 @ stub RtlAddAccessDeniedAce
268 @ stdcall RtlAddAce
(ptr long long ptr long
) RtlAddAce
269 @ stub RtlAddActionToRXact
270 @ stub RtlAddAttributeActionToRXact
271 @ stub RtlAddAuditAccessAce
272 @ stdcall RtlAdjustPrivilege
(long long long long
) RtlAdjustPrivilege
273 @ stdcall RtlAllocateAndInitializeSid
(ptr long long long long long long long long long ptr
) RtlAllocateAndInitializeSid
274 @ stdcall RtlAllocateHeap
(long long long
) RtlAllocateHeap
275 @ stub RtlAnsiCharToUnicodeChar
276 @ stub RtlAnsiStringToUnicodeSize
277 @ stdcall RtlAnsiStringToUnicodeString
(ptr ptr long
) RtlAnsiStringToUnicodeString
278 @ stub RtlAppendAsciizToString
279 @ stub RtlAppendStringToString
280 @ stub RtlAppendUnicodeStringToString
281 @ stub RtlAppendUnicodeToString
283 @ stub RtlApplyRXactNoFlush
284 @ stub RtlAreAllAccessesGranted
285 @ stub RtlAreAnyAccessesGranted
286 @ stub RtlAreBitsClear
289 @ stub RtlCaptureStackBackTrace
290 @ stub RtlCharToInteger
291 @ stub RtlCheckRegistryKey
292 @ stub RtlClearAllBits
294 @ stub RtlCompactHeap
295 @ stub RtlCompareMemory
296 @ stub RtlCompareMemoryUlong
297 @ stub RtlCompareString
298 @ stdcall RtlCompareUnicodeString
(ptr ptr long
) RtlCompareUnicodeString
299 @ stub RtlCompressBuffer
300 @ stub RtlConsoleMultiByteToUnicodeN
301 @ stub RtlConvertExclusiveToShared
302 @ stub RtlConvertLongToLargeInteger
303 @ stub RtlConvertSharedToExclusive
304 @ stub RtlConvertSidToUnicodeString
305 @ stub RtlConvertUiListToApiList
306 @ stub RtlConvertUlongToLargeInteger
308 @ stub RtlCopyLuidAndAttributesArray
309 @ stub RtlCopySecurityDescriptor
310 @ stdcall RtlCopySid
(long ptr ptr
) RtlCopySid
311 @ stub RtlCopySidAndAttributesArray
313 @ stub RtlCopyUnicodeString
314 @ stdcall RtlCreateAcl
(ptr long long
) RtlCreateAcl
315 @ stub RtlCreateAndSetSD
316 @ stdcall RtlCreateEnvironment
(long long
) RtlCreateEnvironment
317 @ stdcall RtlCreateHeap
(long ptr long long ptr ptr
) RtlCreateHeap
318 @ stub RtlCreateProcessParameters
319 @ stub RtlCreateQueryDebugBuffer
320 @ stub RtlCreateRegistryKey
321 @ stdcall RtlCreateSecurityDescriptor
(ptr long
) RtlCreateSecurityDescriptor
322 @ stub RtlCreateTagHeap
323 @ stub RtlCreateUnicodeString
324 @ stub RtlCreateUnicodeStringFromAsciiz
325 @ stub RtlCreateUserProcess
326 @ stub RtlCreateUserSecurityObject
327 @ stub RtlCreateUserThread
328 @ stub RtlCustomCPToUnicodeN
329 @ stub RtlCutoverTimeToSystemTime
330 @ stub RtlDeNormalizeProcessParams
331 @ stub RtlDecompressBuffer
332 @ stub RtlDecompressFragment
335 @ stdcall RtlDeleteCriticalSection
(ptr
) DeleteCriticalSection
336 @ stub RtlDeleteElementGenericTable
337 @ stub RtlDeleteRegistryValue
338 @ stdcall RtlDeleteResource
(ptr
) RtlDeleteResource
339 @ stdcall RtlDeleteSecurityObject
(long
) RtlDeleteSecurityObject
340 @ stdcall RtlDestroyEnvironment
(long
) RtlDestroyEnvironment
341 @ stdcall RtlDestroyHeap
(long
) RtlDestroyHeap
342 @ stub RtlDestroyProcessParameters
343 @ stub RtlDestroyQueryDebugBuffer
344 @ stub RtlDetermineDosPathNameType_U
345 @ stub RtlDoesFileExists_U
346 @ stdcall RtlDosPathNameToNtPathName_U
(ptr ptr long long
) RtlDosPathNameToNtPathName_U
347 @ stub RtlDosSearchPath_U
348 @ stdcall RtlDumpResource
(ptr
) RtlDumpResource
349 @ stub RtlEnlargedIntegerMultiply
350 @ stub RtlEnlargedUnsignedDivide
351 @ stub RtlEnlargedUnsignedMultiply
352 @ stdcall RtlEnterCriticalSection
(ptr
) EnterCriticalSection
353 @ stub RtlEnumProcessHeaps
354 @ stub RtlEnumerateGenericTable
355 @ stub RtlEnumerateGenericTableWithoutSplaying
356 @ stub RtlEqualComputerName
357 @ stub RtlEqualDomainName
359 @ stub RtlEqualPrefixSid
360 @ stdcall RtlEqualSid
(long long
) RtlEqualSid
361 @ stub RtlEqualString
362 @ stdcall RtlEqualUnicodeString
(long long long
) RtlEqualUnicodeString
363 @ stub RtlEraseUnicodeString
364 @ stub RtlExpandEnvironmentStrings_U
366 @ stdcall RtlExtendedIntegerMultiply
(long long long
) RtlExtendedIntegerMultiply
367 @ stdcall RtlExtendedLargeIntegerDivide
(long long long ptr
) RtlExtendedLargeIntegerDivide
368 @ stub RtlExtendedMagicDivide
369 @ stdcall RtlFillMemory
(ptr long long
) RtlFillMemory
370 @ stub RtlFillMemoryUlong
371 @ stub RtlFindClearBits
372 @ stub RtlFindClearBitsAndSet
373 @ stub RtlFindLongestRunClear
374 @ stub RtlFindLongestRunSet
375 @ stub RtlFindMessage
376 @ stub RtlFindSetBits
377 @ stub RtlFindSetBitsAndClear
378 @ stdcall RtlFirstFreeAce
(ptr ptr
) RtlFirstFreeAce
379 @ stdcall RtlFormatCurrentUserKeyPath
(wstr
) RtlFormatCurrentUserKeyPath
380 @ stub RtlFormatMessage
381 @ stdcall RtlFreeAnsiString
(long
) RtlFreeAnsiString
382 @ stdcall RtlFreeHeap
(long long long
) RtlFreeHeap
383 @ stub RtlFreeOemString
384 @ stdcall RtlFreeSid
(long
) RtlFreeSid
385 @ stdcall RtlFreeUnicodeString
(ptr
) RtlFreeUnicodeString
386 @ stub RtlGenerate8dot3Name
387 @ stdcall RtlGetAce
(ptr long ptr
) RtlGetAce
388 @ stub RtlGetCallersAddress
389 @ stub RtlGetCompressionWorkSpaceSize
390 @ stub RtlGetControlSecurityDescriptor
391 @ stub RtlGetCurrentDirectory_U
392 @ stdcall RtlGetDaclSecurityDescriptor
(ptr ptr ptr ptr
) RtlGetDaclSecurityDescriptor
393 @ stub RtlGetElementGenericTable
394 @ stub RtlGetFullPathName_U
395 @ stdcall RtlGetGroupSecurityDescriptor
(ptr ptr ptr
) RtlGetGroupSecurityDescriptor
396 @ stub RtlGetLongestNtPathLength
397 @ stub RtlGetNtGlobalFlags
398 @ stdcall RtlGetNtProductType
(ptr
) RtlGetNtProductType
399 @ stdcall RtlGetOwnerSecurityDescriptor
(ptr ptr ptr
) RtlGetOwnerSecurityDescriptor
400 @ stub RtlGetProcessHeaps
401 @ stdcall RtlGetSaclSecurityDescriptor
(ptr ptr ptr ptr
)RtlGetSaclSecurityDescriptor
402 @ stub RtlGetUserInfoHeap
403 @ stub RtlIdentifierAuthoritySid
404 @ stub RtlImageDirectoryEntryToData
405 @ stdcall RtlImageNtHeader
(long
) RtlImageNtHeader
406 @ stub RtlImpersonateSelf
407 @ stdcall RtlInitAnsiString
(ptr str
) RtlInitAnsiString
408 @ stub RtlInitCodePageTable
409 @ stub RtlInitNlsTables
410 @ stdcall RtlInitString
(ptr str
) RtlInitString
411 @ stdcall RtlInitUnicodeString
(ptr wstr
) RtlInitUnicodeString
412 @ stub RtlInitializeBitMap
413 @ stub RtlInitializeContext
414 @ stdcall RtlInitializeCriticalSection
(ptr
) InitializeCriticalSection
415 @ stub RtlInitializeGenericTable
416 @ stub RtlInitializeRXact
417 @ stdcall RtlInitializeResource
(ptr
) RtlInitializeResource
418 @ stdcall RtlInitializeSid
(ptr ptr long
) RtlInitializeSid
419 @ stub RtlInsertElementGenericTable
420 @ stdcall RtlIntegerToChar
(long long long long
) RtlIntegerToChar
421 @ stub RtlIntegerToUnicodeString
422 @ stub RtlIsDosDeviceName_U
423 @ stub RtlIsGenericTableEmpty
424 @ stub RtlIsNameLegalDOS8Dot3
425 @ stdcall RtlIsTextUnicode
(ptr long ptr
) RtlIsTextUnicode
426 @ stub RtlLargeIntegerAdd
427 @ stub RtlLargeIntegerArithmeticShift
428 @ stub RtlLargeIntegerDivide
429 @ stub RtlLargeIntegerNegate
430 @ stub RtlLargeIntegerShiftLeft
431 @ stub RtlLargeIntegerShiftRight
432 @ stub RtlLargeIntegerSubtract
433 @ stub RtlLargeIntegerToChar
434 @ stdcall RtlLeaveCriticalSection
(ptr
) LeaveCriticalSection
435 @ stdcall RtlLengthRequiredSid
(long
) RtlLengthRequiredSid
436 @ stdcall RtlLengthSecurityDescriptor
(ptr
) RtlLengthSecurityDescriptor
437 @ stdcall RtlLengthSid
(ptr
) RtlLengthSid
438 @ stub RtlLocalTimeToSystemTime
440 @ stub RtlLookupElementGenericTable
441 @ stub RtlMakeSelfRelativeSD
442 @ stub RtlMapGenericMask
443 @ stdcall RtlMoveMemory
(ptr ptr long
) RtlMoveMemory
444 @ stdcall RtlMultiByteToUnicodeN
(ptr long ptr ptr long
) RtlMultiByteToUnicodeN
445 @ stub RtlMultiByteToUnicodeSize
446 @ stub RtlNewInstanceSecurityObject
447 @ stub RtlNewSecurityGrantedAccess
448 @ stdcall RtlNewSecurityObject
(long long long long long long
) RtlNewSecurityObject
449 @ stdcall RtlNormalizeProcessParams
(ptr
) RtlNormalizeProcessParams
450 @ stdcall RtlNtStatusToDosError
(long
) RtlNtStatusToDosError
451 @ stub RtlNumberGenericTableElements
452 @ stub RtlNumberOfClearBits
453 @ stub RtlNumberOfSetBits
454 @ stub RtlOemStringToUnicodeSize
455 @ stdcall RtlOemStringToUnicodeString
(ptr ptr long
) RtlOemStringToUnicodeString
456 @ stdcall RtlOemToUnicodeN
(ptr long ptr ptr long
) RtlOemToUnicodeN
457 @ stdcall RtlOpenCurrentUser
(long ptr
) RtlOpenCurrentUser
458 @ stub RtlPcToFileHeader
459 @ stub RtlPrefixString
460 @ stub RtlPrefixUnicodeString
461 @ stub RtlProtectHeap
462 @ stdcall RtlQueryEnvironmentVariable_U
(long long long
) RtlQueryEnvironmentVariable_U
463 @ stub RtlQueryInformationAcl
464 @ stub RtlQueryProcessBackTraceInformation
465 @ stub RtlQueryProcessDebugInformation
466 @ stub RtlQueryProcessHeapInformation
467 @ stub RtlQueryProcessLockInformation
468 @ stub RtlQueryRegistryValues
469 @ stub RtlQuerySecurityObject
470 @ stub RtlQueryTagHeap
471 @ stub RtlQueryTimeZoneInformation
472 @ stdcall RtlRaiseException
(ptr
) RtlRaiseException
473 @ stdcall RtlRaiseStatus
(long
) RtlRaiseStatus
475 @ stub RtlReAllocateHeap
476 @ stub RtlRealPredecessor
477 @ stub RtlRealSuccessor
478 @ stdcall RtlReleasePebLock
() RtlReleasePebLock
479 @ stdcall RtlReleaseResource
(ptr
) RtlReleaseResource
481 @ stub RtlResetRtlTranslations
482 @ stub RtlRunDecodeUnicodeString
483 @ stub RtlRunEncodeUnicodeString
484 @ stub RtlSecondsSince1970ToTime
485 @ stub RtlSecondsSince1980ToTime
486 @ stub RtlSelfRelativeToAbsoluteSD
489 @ stub RtlSetCurrentDirectory_U
490 @ stub RtlSetCurrentEnvironment
491 @ stdcall RtlSetDaclSecurityDescriptor
(ptr long ptr long
) RtlSetDaclSecurityDescriptor
492 @ stdcall RtlSetEnvironmentVariable
(long long long
) RtlSetEnvironmentVariable
493 @ stdcall RtlSetGroupSecurityDescriptor
(ptr ptr long
) RtlSetGroupSecurityDescriptor
494 @ stub RtlSetInformationAcl
495 @ stdcall RtlSetOwnerSecurityDescriptor
(ptr ptr long
) RtlSetOwnerSecurityDescriptor
496 @ stdcall RtlSetSaclSecurityDescriptor
(ptr long ptr long
) RtlSetSaclSecurityDescriptor
497 @ stub RtlSetSecurityObject
498 @ stub RtlSetTimeZoneInformation
499 @ stub RtlSetUserFlagsHeap
500 @ stub RtlSetUserValueHeap
501 @ stdcall RtlSizeHeap
(long long long
) HeapSize
504 @ stdcall RtlSubAuthorityCountSid
(ptr
) RtlSubAuthorityCountSid
505 @ stdcall RtlSubAuthoritySid
(ptr long
) RtlSubAuthoritySid
506 @ stub RtlSubtreePredecessor
507 @ stub RtlSubtreeSuccessor
508 @ stdcall RtlSystemTimeToLocalTime
(long long
) RtlSystemTimeToLocalTime
509 @ stdcall RtlTimeFieldsToTime
(ptr ptr
) RtlTimeFieldsToTime
510 @ stdcall RtlTimeToElapsedTimeFields
(long long
) RtlTimeToElapsedTimeFields
511 @ stdcall RtlTimeToSecondsSince1970
(ptr ptr
) RtlTimeToSecondsSince1970
512 @ stdcall RtlTimeToSecondsSince1980
(ptr ptr
) RtlTimeToSecondsSince1980
513 @ stdcall RtlTimeToTimeFields
(long long
) RtlTimeToTimeFields
514 @ stub RtlUnicodeStringToAnsiSize
515 @ stdcall RtlUnicodeStringToAnsiString
(ptr ptr long
) RtlUnicodeStringToAnsiString
516 @ stub RtlUnicodeStringToCountedOemString
517 @ stub RtlUnicodeStringToInteger
518 @ stub RtlUnicodeStringToOemSize
519 @ stdcall RtlUnicodeStringToOemString
(ptr ptr long
) RtlUnicodeStringToOemString
520 @ stub RtlUnicodeToCustomCPN
521 @ stub RtlUnicodeToMultiByteN
522 @ stub RtlUnicodeToMultiByteSize
523 @ stdcall RtlUnicodeToOemN
(ptr long ptr ptr long
) RtlUnicodeToOemN
526 @ stdcall RtlUnwind
(ptr ptr ptr long
) RtlUnwind
527 @ stub RtlUpcaseUnicodeChar
528 @ stdcall RtlUpcaseUnicodeString
(ptr ptr long
) RtlUpcaseUnicodeString
529 @ stub RtlUpcaseUnicodeStringToAnsiString
530 @ stub RtlUpcaseUnicodeStringToCountedOemString
531 @ stub RtlUpcaseUnicodeStringToOemString
532 @ stub RtlUpcaseUnicodeToCustomCPN
533 @ stub RtlUpcaseUnicodeToMultiByteN
534 @ stub RtlUpcaseUnicodeToOemN
536 @ stub RtlUpperString
539 @ stdcall RtlValidSecurityDescriptor
(ptr
) RtlValidSecurityDescriptor
541 @ stub RtlValidateHeap
542 @ stub RtlValidateProcessHeaps
544 @ stub RtlWriteRegistryValue
546 @ stdcall RtlZeroMemory
(ptr long
) RtlZeroMemory
547 @ stub RtlpInitializeRtl
548 @ stub RtlpNtCreateKey
549 @ stub RtlpNtEnumerateSubKey
550 @ stub RtlpNtMakeTemporaryKey
552 @ stub RtlpNtQueryValueKey
553 @ stub RtlpNtSetValueKey
554 @ stub RtlpUnWaitCriticalSection
555 @ stub RtlpWaitForCriticalSection
556 @ stdcall RtlxAnsiStringToUnicodeSize
(ptr
) RtlxAnsiStringToUnicodeSize
557 @ stdcall RtlxOemStringToUnicodeSize
(ptr
) RtlxOemStringToUnicodeSize
558 @ stub RtlxUnicodeStringToAnsiSize
559 @ stub RtlxUnicodeStringToOemSize
560 @ stub SaveEm87Context
561 @ stdcall ZwAcceptConnectPort
(long long long long long long
) NtAcceptConnectPort
563 @ stub ZwAccessCheckAndAuditAlarm
564 @ stdcall ZwAdjustGroupsToken
(long long long long long long
) NtAdjustPrivilegesToken
565 @ stub ZwAdjustPrivilegesToken
566 @ stub ZwAlertResumeThread
568 @ stub ZwAllocateLocallyUniqueId
569 @ stub ZwAllocateUuids
570 @ stub ZwAllocateVirtualMemory
571 @ stub ZwCallbackReturn
572 @ stub ZwCancelIoFile
576 @ stub ZwCloseObjectAuditAlarm
577 @ stdcall ZwCompleteConnectPort
(long
) NtCompleteConnectPort
578 @ stdcall ZwConnectPort
(long long long long long long long long
) NtConnectPort
580 @ stdcall ZwCreateDirectoryObject
(long long long
) NtCreateDirectoryObject
581 @ stdcall ZwCreateEvent
(long long long long long
) NtCreateEvent
582 @ stub ZwCreateEventPair
583 @ stdcall ZwCreateFile
(ptr long ptr ptr long long long ptr long long ptr
) NtCreateFile
584 @ stub ZwCreateIoCompletion
585 @ stdcall ZwCreateKey
(long long long long long long long
) NtCreateKey
586 @ stdcall ZwCreateMailslotFile
(long long long long long long long long
) NtCreateMailslotFile
587 @ stub ZwCreateMutant
588 @ stub ZwCreateNamedPipeFile
589 @ stdcall ZwCreatePagingFile
(long long long long
) NtCreatePagingFile
590 @ stdcall ZwCreatePort
(long long long long long
) NtCreatePort
591 @ stub ZwCreateProcess
592 @ stub ZwCreateProfile
593 @ stdcall ZwCreateSection
(long long long long long long long
) NtCreateSection
594 @ stub ZwCreateSemaphore
595 @ stub ZwCreateSymbolicLinkObject
596 @ stub ZwCreateThread
597 @ stdcall ZwCreateTimer
(ptr long ptr long
) NtCreateTimer
599 @ stub ZwDelayExecution
602 @ stub ZwDeleteValueKey
603 @ stdcall ZwDeviceIoControlFile
(long long long long long long long long long long
) NtDeviceIoControlFile
604 @ stub ZwDisplayString
605 @ stdcall ZwDuplicateObject
(long long long long long long long
) NtDuplicateObject
606 @ stdcall ZwDuplicateToken
(long long long long long long
) NtDuplicateToken
607 @ stub ZwEnumerateBus
608 @ stub ZwEnumerateKey
609 @ stub ZwEnumerateValueKey
610 @ stub ZwExtendSection
611 @ stub ZwFlushBuffersFile
612 @ stub ZwFlushInstructionCache
614 @ stub ZwFlushVirtualMemory
615 @ stub ZwFlushWriteBuffer
616 @ stub ZwFreeVirtualMemory
617 @ stdcall ZwFsControlFile
(long long long long long long long long long long
) NtFsControlFile
618 @ stub ZwGetContextThread
619 @ stub ZwGetPlugPlayEvent
620 @ stub ZwGetTickCount
621 @ stub ZwImpersonateClientOfPort
622 @ stub ZwImpersonateThread
623 @ stub ZwInitializeRegistry
624 @ stdcall ZwListenPort
(long long
) NtListenPort
628 @ stub ZwLockVirtualMemory
629 @ stub ZwMakeTemporaryObject
630 @ stdcall ZwMapViewOfSection
(long long long long long long long long long long
) NtMapViewOfSection
631 @ stub ZwNotifyChangeDirectoryFile
632 @ stub ZwNotifyChangeKey
633 @ stdcall ZwOpenDirectoryObject
(long long long
) NtOpenDirectoryObject
634 @ stdcall ZwOpenEvent
(long long long
) NtOpenEvent
635 @ stub ZwOpenEventPair
636 @ stdcall ZwOpenFile
(ptr long ptr ptr long long
) NtOpenFile
637 @ stub ZwOpenIoCompletion
638 @ stdcall ZwOpenKey
(ptr long ptr
) NtOpenKey
640 @ stub ZwOpenObjectAuditAlarm
642 @ stdcall ZwOpenProcessToken
(long long long
) NtOpenProcessToken
643 @ stdcall ZwOpenSection
(long long long
) NtOpenSection
644 @ stub ZwOpenSemaphore
645 @ stub ZwOpenSymbolicLinkObject
647 @ stdcall ZwOpenThreadToken
(long long long long
) NtOpenThreadToken
649 @ stub ZwPlugPlayControl
650 @ stub ZwPrivilegeCheck
651 @ stub ZwPrivilegeObjectAuditAlarm
652 @ stub ZwPrivilegedServiceAuditAlarm
653 @ stub ZwProtectVirtualMemory
655 @ stub ZwQueryAttributesFile
656 @ stub ZwQueryDefaultLocale
657 @ stdcall ZwQueryDirectoryFile
(long long ptr ptr ptr ptr long long long ptr long
)NtQueryDirectoryFile
658 @ stdcall ZwQueryDirectoryObject
(long long long long long long long
) NtQueryDirectoryObject
661 @ stdcall ZwQueryInformationFile
(long long long long long
) NtQueryInformationFile
662 @ stub ZwQueryInformationPort
663 @ stdcall ZwQueryInformationProcess
(long long long long long
) NtQueryInformationProcess
664 @ stdcall ZwQueryInformationThread
(long long long long long
) NtQueryInformationThread
665 @ stdcall ZwQueryInformationToken
(long long long long long
) NtQueryInformationToken
666 @ stub ZwQueryIntervalProfile
667 @ stub ZwQueryIoCompletion
670 @ stdcall ZwQueryObject
(long long long long long
) NtQueryObject
671 @ stub ZwQueryPerformanceCounter
672 @ stub ZwQuerySection
673 @ stub ZwQuerySecurityObject
674 @ stub ZwQuerySemaphore
675 @ stub ZwQuerySymbolicLinkObject
676 @ stub ZwQuerySystemEnvironmentValue
677 @ stdcall ZwQuerySystemInformation
(long long long long
) NtQuerySystemInformation
678 @ stdcall ZwQuerySystemTime
(ptr
) GetSystemTimeAsFileTime
680 @ stub ZwQueryTimerResolution
681 @ stub ZwQueryValueKey
682 @ stub ZwQueryVirtualMemory
683 @ stub ZwQueryVolumeInformationFile
684 @ stub ZwRaiseException
685 @ stub ZwRaiseHardError
686 @ stdcall ZwReadFile
(long long long long long long long long long
) NtReadFile
687 @ stub ZwReadRequestData
688 @ stub ZwReadVirtualMemory
689 @ stub ZwRegisterNewDevice
690 @ stdcall ZwRegisterThreadTerminatePort
(long
) NtRegisterThreadTerminatePort
691 @ stub ZwReleaseMutant
692 @ stub ZwReleaseProcessMutant
693 @ stub ZwReleaseSemaphore
694 @ stub ZwRemoveIoCompletion
697 @ stdcall ZwReplyWaitReceivePort
(long long long long
) NtReplyWaitReceivePort
698 @ stub ZwReplyWaitReplyPort
700 @ stdcall ZwRequestWaitReplyPort
(long long long
) NtRequestWaitReplyPort
703 @ stdcall ZwResumeThread
(long long
) NtResumeThread
705 @ stub ZwSetContextThread
706 @ stub ZwSetDefaultHardErrorPort
707 @ stub ZwSetDefaultLocale
709 @ stdcall ZwSetEvent
(long long
) NtSetEvent
710 @ stub ZwSetHighEventPair
711 @ stub ZwSetHighWaitLowEventPair
712 @ stub ZwSetHighWaitLowThread
713 @ stdcall ZwSetInformationFile
(long long long long long
) NtSetInformationFile
714 @ stub ZwSetInformationKey
715 @ stub ZwSetInformationObject
716 @ stdcall ZwSetInformationProcess
(long long long long
) NtSetInformationProcess
717 @ stdcall ZwSetInformationThread
(long long long long
) NtSetInformationThread
718 @ stub ZwSetInformationToken
719 @ stdcall ZwSetIntervalProfile
(long long
) NtSetIntervalProfile
720 @ stub ZwSetIoCompletion
721 @ stub ZwSetLdtEntries
722 @ stub ZwSetLowEventPair
723 @ stub ZwSetLowWaitHighEventPair
724 @ stub ZwSetLowWaitHighThread
725 @ stub ZwSetSecurityObject
726 @ stub ZwSetSystemEnvironmentValue
727 @ stub ZwSetSystemInformation
728 @ stub ZwSetSystemPowerState
729 @ stub ZwSetSystemTime
730 @ stdcall ZwSetTimer
(long ptr ptr ptr long long ptr
) NtSetTimer
731 @ stub ZwSetTimerResolution
732 @ stdcall ZwSetValueKey
(long long long long long long
) NtSetValueKey
733 @ stdcall ZwSetVolumeInformationFile
(long ptr ptr long long
) NtSetVolumeInformationFile
734 @ stub ZwShutdownSystem
735 @ stub ZwStartProfile
737 @ stub ZwSuspendThread
738 @ stub ZwSystemDebugControl
739 @ stub ZwTerminateProcess
740 @ stdcall ZwTerminateThread
(long long
) NtTerminateThread
742 @ stub ZwUnloadDriver
745 @ stub ZwUnlockVirtualMemory
746 @ stub ZwUnmapViewOfSection
749 @ stub ZwWaitForMultipleObjects
750 @ stub ZwWaitForProcessMutant
751 @ stdcall ZwWaitForSingleObject
(long long long
) NtWaitForSingleObject
752 @ stub ZwWaitHighEventPair
753 @ stub ZwWaitLowEventPair
755 @ stub ZwWriteRequestData
756 @ stub ZwWriteVirtualMemory
758 @ stub __eCommonExceptions
759 @ stub __eEmulatorInit
868 @ stub __eGetStatusWord
869 @ register _alloca_probe
() NTDLL_alloca_probe
870 @ register _chkstk
() NTDLL_chkstk
872 @ cdecl _ftol
(double
) CRTDLL__ftol
873 @ cdecl _itoa
(long ptr long
) CRTDLL__itoa
876 @ cdecl _memicmp
(str str long
) CRTDLL__memicmp
880 @ cdecl _strcmpi
(str str
) CRTDLL__strcmpi
881 @ cdecl _stricmp
(str str
) CRTDLL__strcmpi
882 @ cdecl _strlwr
(str
) CRTDLL__strlwr
883 @ cdecl _strnicmp
(str str long
) CRTDLL__strnicmp
884 @ cdecl _strupr
(str
) CRTDLL__strupr
885 @ cdecl _ultoa
(long ptr long
) CRTDLL__ultoa
887 @ cdecl _wcsicmp
(wstr wstr
) CRTDLL__wcsicmp
888 @ cdecl _wcslwr
(wstr
) CRTDLL__wcslwr
889 @ cdecl _wcsnicmp
(wstr wstr long
) CRTDLL__wcsnicmp
890 @ cdecl _wcsupr
(wstr
) CRTDLL__wcsupr
893 @ cdecl atoi
(str
) atoi
894 @ cdecl atol
(str
) atol
899 @ cdecl isalpha
(long
) isalpha
900 @ cdecl isdigit
(long
) isdigit
901 @ cdecl islower
(long
) islower
902 @ cdecl isprint
(long
) isprint
903 @ cdecl isspace
(long
) isspace
904 @ cdecl isupper
(long
) isupper
907 @ cdecl isxdigit
(long
) isxdigit
910 @ cdecl mbstowcs
(ptr str long
) CRTDLL_mbstowcs
911 @ cdecl memchr
(ptr long long
) memchr
912 @ cdecl memcmp
(ptr ptr long
) memcmp
913 @ cdecl memcpy
(ptr ptr long
) memcpy
914 @ cdecl memmove
(ptr ptr long
) memmove
915 @ cdecl memset
(ptr long long
) memset
919 @ varargs sprintf
() wsprintfA
921 @ varargs sscanf
() sscanf
922 @ cdecl strcat
(str str
) strcat
923 @ cdecl strchr
(str long
) strchr
924 @ cdecl strcmp
(str str
) strcmp
925 @ cdecl strcpy
(ptr str
) strcpy
926 @ cdecl strcspn
(str str
) strcspn
927 @ cdecl strlen
(str
) strlen
928 @ cdecl strncat
(str str long
) strncat
929 @ cdecl strncmp
(str str long
) strncmp
930 @ cdecl strncpy
(ptr str long
) strncpy
931 @ cdecl strpbrk
(str str long
) strpbrk
932 @ cdecl strrchr
(str long
) strrchr
933 @ cdecl strspn
(str str
) strspn
934 @ cdecl strstr
(str str
) strstr
935 @ varargs swprintf
() wsprintfW
937 @ cdecl tolower
(long
) tolower
938 @ cdecl toupper
(long
) toupper
939 @ cdecl towlower
(long
) towlower
940 @ cdecl towupper
(long
) towupper
941 @ cdecl vsprintf
(ptr str ptr
) CRTDLL_vsprintf
942 @ cdecl wcscat
(wstr wstr
) CRTDLL_wcscat
943 @ cdecl wcschr
(wstr long
) CRTDLL_wcschr
944 @ cdecl wcscmp
(wstr wstr
) CRTDLL_wcscmp
945 @ cdecl wcscpy
(ptr wstr
) CRTDLL_wcscpy
946 @ cdecl wcscspn
(wstr wstr
) CRTDLL_wcscspn
947 @ cdecl wcslen
(wstr
) CRTDLL_wcslen
948 @ cdecl wcsncat
(wstr wstr long
) CRTDLL_wcsncat
949 @ cdecl wcsncmp
(wstr wstr long
) CRTDLL_wcsncmp
950 @ cdecl wcsncpy
(ptr wstr long
) CRTDLL_wcsncpy
951 @ cdecl wcspbrk
(wstr wstr
) CRTDLL_wcspbrk
952 @ cdecl wcsrchr
(wstr long
) CRTDLL_wcsrchr
953 @ cdecl wcsspn
(wstr wstr
) CRTDLL_wcsspn
954 @ cdecl wcsstr
(wstr wstr
) CRTDLL_wcsstr
955 @ cdecl wcstok
(wstr wstr
) CRTDLL_wcstok
956 @ cdecl wcstol
(wstr ptr long
) CRTDLL_wcstol
957 @ cdecl wcstombs
(ptr ptr long
) CRTDLL_wcstombs
964 @ stub NtQueryFullAttributesFile
965 @ stub NtQueueApcThread
966 @ stub NtReadFileScatter
967 @ stub NtSignalAndWaitForSingleObject
968 @ stub NtWriteFileGather
969 @ stub NtYieldExecution
970 @ stub RtlAddAtomToAtomTable
971 @ stub RtlAllocateHandle
972 @ stub RtlCreateAtomTable
973 @ stub RtlDeleteAtomFromAtomTable
975 @ stub RtlInitializeHandleTable
976 @ stub RtlIsValidHandle
977 @ stub RtlLookupAtomInAtomTable
978 @ stub RtlQueryAtomInAtomTable
979 @ stdcall RtlTryEnterCriticalSection
(ptr
) TryEnterCriticalSection
980 @ stub RtlEnumerateProperties
981 @ stub RtlSetPropertyClassId
982 @ stub RtlSetPropertyNames
983 @ stub RtlQueryPropertyNames
984 @ stub RtlFlushPropertySet
985 @ stub RtlSetProperties
986 @ stub RtlQueryProperties
987 @ stub RtlQueryPropertySet
988 @ stub RtlSetUnicodeCallouts
989 @ stub RtlPropertySetNameToGuid
990 @ stub RtlGuidToPropertySetName
991 @ stub RtlClosePropertySet
992 @ stub RtlCreatePropertySet
995 @ stub RtlSetPropertySetClassId
996 @ stdcall NtPowerInformation
(long long long long long
) NtPowerInformation