; -------------------------------------------------------------------------------------------------- ; ntdll.inc Copyright The MASM32 SDK 1998-2010 ; -------------------------------------------------------------------------------------------------- IFNDEF NTDLL_INC NTDLL_INC equ <1> CsrAllocateCaptureBuffer PROTO STDCALL :DWORD,:DWORD CsrAllocateMessagePointer PROTO STDCALL :DWORD,:DWORD,:DWORD CsrCaptureMessageBuffer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD CsrCaptureMessageMultiUnicodeStringsInPlace PROTO STDCALL :DWORD,:DWORD,:DWORD CsrCaptureMessageString PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD CsrCaptureTimeout PROTO STDCALL :DWORD,:DWORD CsrClientCallServer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD CsrClientConnectToServer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD CsrFreeCaptureBuffer PROTO STDCALL :DWORD CsrGetProcessId PROTO STDCALL CsrIdentifyAlertableThread PROTO STDCALL CsrNewThread PROTO STDCALL CsrProbeForRead PROTO STDCALL :DWORD,:DWORD,:DWORD CsrProbeForWrite PROTO STDCALL :DWORD,:DWORD,:DWORD CsrSetPriorityClass PROTO STDCALL :DWORD,:DWORD DbgBreakPoint PROTO STDCALL DbgPrint PROTO C :VARARG DbgPrintEx PROTO C :VARARG DbgPrintReturnControlC PROTO C :VARARG DbgPrompt PROTO STDCALL :DWORD,:DWORD,:DWORD DbgQueryDebugFilterState PROTO STDCALL :DWORD,:DWORD DbgSetDebugFilterState PROTO STDCALL :DWORD,:DWORD,:DWORD DbgUiConnectToDbg PROTO STDCALL DbgUiContinue PROTO STDCALL :DWORD,:DWORD DbgUiConvertStateChangeStructure PROTO STDCALL :DWORD,:DWORD DbgUiDebugActiveProcess PROTO STDCALL :DWORD DbgUiGetThreadDebugObject PROTO STDCALL DbgUiIssueRemoteBreakin PROTO STDCALL :DWORD DbgUiRemoteBreakin PROTO STDCALL :DWORD DbgUiSetThreadDebugObject PROTO STDCALL :DWORD DbgUiStopDebugging PROTO STDCALL :DWORD DbgUiWaitStateChange PROTO STDCALL :DWORD,:DWORD DbgUserBreakPoint PROTO STDCALL KiFastSystemCall PROTO STDCALL KiFastSystemCallRet PROTO STDCALL KiIntSystemCall PROTO STDCALL KiRaiseUserExceptionDispatcher PROTO STDCALL KiUserApcDispatcher PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD KiUserCallbackDispatcher PROTO STDCALL :DWORD,:DWORD,:DWORD KiUserExceptionDispatcher PROTO STDCALL :DWORD,:DWORD LdrAccessOutOfProcessResource PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD LdrAccessResource PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD LdrAddRefDll PROTO STDCALL :DWORD,:DWORD LdrAlternateResourcesEnabled PROTO STDCALL LdrCreateOutOfProcessImage PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD LdrDestroyOutOfProcessImage PROTO STDCALL :DWORD LdrDisableThreadCalloutsForDll PROTO STDCALL :DWORD LdrEnumResources PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD LdrEnumerateLoadedModules PROTO STDCALL :DWORD,:DWORD,:DWORD LdrFindCreateProcessManifest PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD LdrFindEntryForAddress PROTO STDCALL :DWORD,:DWORD LdrFindResourceDirectory_U PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD LdrFindResourceEx_U PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD LdrFindResource_U PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD LdrFlushAlternateResourceModules PROTO STDCALL LdrGetDllHandle PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD LdrGetDllHandleEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD LdrGetProcedureAddress PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD LdrHotPatchRoutine PROTO STDCALL :DWORD LdrInitShimEngineDynamic PROTO STDCALL :DWORD LdrInitializeThunk PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD LdrLoadAlternateResourceModule PROTO STDCALL :DWORD,:DWORD LdrLoadDll PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD LdrLockLoaderLock PROTO STDCALL :DWORD,:DWORD,:DWORD LdrProcessRelocationBlock PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD LdrQueryImageFileExecutionOptions PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD LdrQueryProcessModuleInformation PROTO STDCALL :DWORD,:DWORD,:DWORD LdrSetAppCompatDllRedirectionCallback PROTO STDCALL :DWORD,:DWORD,:DWORD LdrSetDllManifestProber PROTO STDCALL :DWORD LdrShutdownProcess PROTO STDCALL LdrShutdownThread PROTO STDCALL LdrUnloadAlternateResourceModule PROTO STDCALL :DWORD LdrUnloadDll PROTO STDCALL :DWORD LdrUnlockLoaderLock PROTO STDCALL :DWORD,:DWORD LdrVerifyImageMatchesChecksum PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NlsAnsiCodePage PROTO C :VARARG NlsMbCodePageTag PROTO C :VARARG NlsMbOemCodePageTag PROTO C :VARARG NtAcceptConnectPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtAccessCheck PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtAccessCheckAndAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtAccessCheckByType PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtAccessCheckByTypeAndAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtAccessCheckByTypeResultList PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtAccessCheckByTypeResultListAndAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtAccessCheckByTypeResultListAndAuditAlarmByHandle PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtAddAtom PROTO STDCALL :DWORD,:DWORD,:DWORD NtAddBootEntry PROTO STDCALL :DWORD,:DWORD NtAdjustGroupsToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtAdjustPrivilegesToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtAlertResumeThread PROTO STDCALL :DWORD,:DWORD NtAlertThread PROTO STDCALL :DWORD NtAllocateLocallyUniqueId PROTO STDCALL :DWORD NtAllocateUserPhysicalPages PROTO STDCALL :DWORD,:DWORD,:DWORD NtAllocateUuids PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtAllocateVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtAreMappedFilesTheSame PROTO STDCALL :DWORD,:DWORD NtAssignProcessToJobObject PROTO STDCALL :DWORD,:DWORD NtCallbackReturn PROTO STDCALL :DWORD,:DWORD,:DWORD NtCancelDeviceWakeupRequest PROTO STDCALL :DWORD NtCancelIoFile PROTO STDCALL :DWORD,:DWORD NtCancelTimer PROTO STDCALL :DWORD,:DWORD NtClearEvent PROTO STDCALL :DWORD NtClose PROTO STDCALL :DWORD NtCloseObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD NtCompactKeys PROTO STDCALL :DWORD,:DWORD NtCompareTokens PROTO STDCALL :DWORD,:DWORD,:DWORD NtCompleteConnectPort PROTO STDCALL :DWORD NtCompressKey PROTO STDCALL :DWORD NtConnectPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtContinue PROTO STDCALL :DWORD,:DWORD NtCreateDebugObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtCreateDirectoryObject PROTO STDCALL :DWORD,:DWORD,:DWORD NtCreateEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCreateEventPair PROTO STDCALL :DWORD,:DWORD,:DWORD NtCreateFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCreateIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtCreateJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD NtCreateJobSet PROTO STDCALL :DWORD,:DWORD,:DWORD NtCreateKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCreateKeyedEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtCreateMailslotFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCreateMutant PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtCreateNamedPipeFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCreatePagingFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtCreatePort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCreateProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCreateProcessEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCreateProfile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCreateSection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCreateSemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCreateSymbolicLinkObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtCreateThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCreateTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtCreateToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCreateWaitablePort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCurrentTeb PROTO STDCALL NtDebugActiveProcess PROTO STDCALL :DWORD,:DWORD NtDebugContinue PROTO STDCALL :DWORD,:DWORD,:DWORD NtDelayExecution PROTO STDCALL :DWORD,:DWORD NtDeleteAtom PROTO STDCALL :DWORD NtDeleteBootEntry PROTO STDCALL :DWORD NtDeleteFile PROTO STDCALL :DWORD NtDeleteKey PROTO STDCALL :DWORD NtDeleteObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD NtDeleteValueKey PROTO STDCALL :DWORD,:DWORD NtDeviceIoControlFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtDisplayString PROTO STDCALL :DWORD NtDuplicateObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtDuplicateToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtEnumerateBootEntries PROTO STDCALL :DWORD,:DWORD NtEnumerateKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtEnumerateSystemEnvironmentValuesEx PROTO STDCALL :DWORD,:DWORD,:DWORD NtEnumerateValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtExtendSection PROTO STDCALL :DWORD,:DWORD NtFilterToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtFindAtom PROTO STDCALL :DWORD,:DWORD,:DWORD NtFlushBuffersFile PROTO STDCALL :DWORD,:DWORD NtFlushInstructionCache PROTO STDCALL :DWORD,:DWORD,:DWORD NtFlushKey PROTO STDCALL :DWORD NtFlushVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtFlushWriteBuffer PROTO STDCALL NtFreeUserPhysicalPages PROTO STDCALL :DWORD,:DWORD,:DWORD NtFreeVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtFsControlFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtGetContextThread PROTO STDCALL :DWORD,:DWORD NtGetDevicePowerState PROTO STDCALL :DWORD,:DWORD NtGetPlugPlayEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtGetWriteWatch PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtImpersonateAnonymousToken PROTO STDCALL :DWORD NtImpersonateClientOfPort PROTO STDCALL :DWORD,:DWORD NtImpersonateThread PROTO STDCALL :DWORD,:DWORD,:DWORD NtInitializeRegistry PROTO STDCALL :DWORD NtInitiatePowerAction PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtIsProcessInJob PROTO STDCALL :DWORD,:DWORD NtIsSystemResumeAutomatic PROTO STDCALL NtListenPort PROTO STDCALL :DWORD,:DWORD NtLoadDriver PROTO STDCALL :DWORD NtLoadKey2 PROTO STDCALL :DWORD,:DWORD,:DWORD NtLoadKey PROTO STDCALL :DWORD,:DWORD NtLockFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtLockProductActivationKeys PROTO STDCALL :DWORD,:DWORD NtLockRegistryKey PROTO STDCALL :DWORD NtLockVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtMakePermanentObject PROTO STDCALL :DWORD NtMakeTemporaryObject PROTO STDCALL :DWORD NtMapUserPhysicalPages PROTO STDCALL :DWORD,:DWORD,:DWORD NtMapUserPhysicalPagesScatter PROTO STDCALL :DWORD,:DWORD,:DWORD NtMapViewOfSection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtModifyBootEntry PROTO STDCALL :DWORD NtNotifyChangeDirectoryFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtNotifyChangeKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtNotifyChangeMultipleKeys PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtOpenDirectoryObject PROTO STDCALL :DWORD,:DWORD,:DWORD NtOpenEvent PROTO STDCALL :DWORD,:DWORD,:DWORD NtOpenEventPair PROTO STDCALL :DWORD,:DWORD,:DWORD NtOpenFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtOpenIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD NtOpenJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD NtOpenKey PROTO STDCALL :DWORD,:DWORD,:DWORD NtOpenKeyedEvent PROTO STDCALL :DWORD,:DWORD,:DWORD NtOpenMutant PROTO STDCALL :DWORD,:DWORD,:DWORD NtOpenObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtOpenProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtOpenProcessToken PROTO STDCALL :DWORD,:DWORD,:DWORD NtOpenProcessTokenEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtOpenSection PROTO STDCALL :DWORD,:DWORD,:DWORD NtOpenSemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD NtOpenSymbolicLinkObject PROTO STDCALL :DWORD,:DWORD,:DWORD NtOpenThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtOpenThreadToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtOpenThreadTokenEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtOpenTimer PROTO STDCALL :DWORD,:DWORD,:DWORD NtPlugPlayControl PROTO STDCALL :DWORD,:DWORD,:DWORD NtPowerInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtPrivilegeCheck PROTO STDCALL :DWORD,:DWORD,:DWORD NtPrivilegeObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtPrivilegedServiceAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtProtectVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtPulseEvent PROTO STDCALL :DWORD,:DWORD NtQueryAttributesFile PROTO STDCALL :DWORD,:DWORD NtQueryBootEntryOrder PROTO STDCALL :DWORD,:DWORD NtQueryBootOptions PROTO STDCALL :DWORD,:DWORD NtQueryDebugFilterState PROTO STDCALL :DWORD,:DWORD NtQueryDefaultLocale PROTO STDCALL :DWORD,:DWORD NtQueryDefaultUILanguage PROTO STDCALL :DWORD NtQueryDirectoryFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryDirectoryObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryEaFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryFullAttributesFile PROTO STDCALL :DWORD,:DWORD NtQueryInformationAtom PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryInformationJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryInformationPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryInformationProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryInformationThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryInformationToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryInstallUILanguage PROTO STDCALL :DWORD NtQueryIntervalProfile PROTO STDCALL :DWORD,:DWORD NtQueryIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryMultipleValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryMutant PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryOpenSubKeys PROTO STDCALL :DWORD,:DWORD NtQueryPerformanceCounter PROTO STDCALL :DWORD,:DWORD NtQueryPortInformationProcess PROTO STDCALL NtQueryQuotaInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQuerySection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQuerySecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQuerySemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQuerySymbolicLinkObject PROTO STDCALL :DWORD,:DWORD,:DWORD NtQuerySystemEnvironmentValue PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtQuerySystemEnvironmentValueEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQuerySystemInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtQuerySystemTime PROTO STDCALL :DWORD NtQueryTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryTimerResolution PROTO STDCALL :DWORD,:DWORD,:DWORD NtQueryValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryVolumeInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueueApcThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtRaiseException PROTO STDCALL :DWORD,:DWORD,:DWORD NtRaiseHardError PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtReadFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtReadFileScatter PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtReadRequestData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtReadVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtRegisterThreadTerminatePort PROTO STDCALL :DWORD NtReleaseKeyedEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtReleaseMutant PROTO STDCALL :DWORD,:DWORD NtReleaseSemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD NtRemoveIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtRemoveProcessDebug PROTO STDCALL :DWORD,:DWORD NtRenameKey PROTO STDCALL :DWORD,:DWORD NtReplaceKey PROTO STDCALL :DWORD,:DWORD,:DWORD NtReplyPort PROTO STDCALL :DWORD,:DWORD NtReplyWaitReceivePort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtReplyWaitReceivePortEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtReplyWaitReplyPort PROTO STDCALL :DWORD,:DWORD NtRequestDeviceWakeup PROTO STDCALL :DWORD NtRequestPort PROTO STDCALL :DWORD,:DWORD NtRequestWaitReplyPort PROTO STDCALL :DWORD,:DWORD,:DWORD NtRequestWakeupLatency PROTO STDCALL :DWORD NtResetEvent PROTO STDCALL :DWORD,:DWORD NtResetWriteWatch PROTO STDCALL :DWORD,:DWORD,:DWORD NtRestoreKey PROTO STDCALL :DWORD,:DWORD,:DWORD NtResumeProcess PROTO STDCALL :DWORD NtResumeThread PROTO STDCALL :DWORD,:DWORD NtSaveKey PROTO STDCALL :DWORD,:DWORD NtSaveKeyEx PROTO STDCALL :DWORD,:DWORD,:DWORD NtSaveMergedKeys PROTO STDCALL :DWORD,:DWORD,:DWORD NtSecureConnectPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtSetBootEntryOrder PROTO STDCALL :DWORD,:DWORD NtSetBootOptions PROTO STDCALL :DWORD,:DWORD NtSetContextThread PROTO STDCALL :DWORD,:DWORD NtSetDebugFilterState PROTO STDCALL :DWORD,:DWORD,:DWORD NtSetDefaultHardErrorPort PROTO STDCALL :DWORD NtSetDefaultLocale PROTO STDCALL :DWORD,:DWORD NtSetDefaultUILanguage PROTO STDCALL :DWORD NtSetEaFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtSetEvent PROTO STDCALL :DWORD,:DWORD NtSetEventBoostPriority PROTO STDCALL :DWORD NtSetHighEventPair PROTO STDCALL :DWORD NtSetHighWaitLowEventPair PROTO STDCALL :DWORD NtSetInformationDebugObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtSetInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtSetInformationJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtSetInformationKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtSetInformationObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtSetInformationProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtSetInformationThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtSetInformationToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtSetIntervalProfile PROTO STDCALL :DWORD,:DWORD NtSetIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtSetLdtEntries PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtSetLowEventPair PROTO STDCALL :DWORD NtSetLowWaitHighEventPair PROTO STDCALL :DWORD NtSetQuotaInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtSetSecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD NtSetSystemEnvironmentValue PROTO STDCALL :DWORD,:DWORD NtSetSystemEnvironmentValueEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtSetSystemInformation PROTO STDCALL :DWORD,:DWORD,:DWORD NtSetSystemPowerState PROTO STDCALL :DWORD,:DWORD,:DWORD NtSetSystemTime PROTO STDCALL :DWORD,:DWORD NtSetThreadExecutionState PROTO STDCALL :DWORD,:DWORD NtSetTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtSetTimerResolution PROTO STDCALL :DWORD,:DWORD,:DWORD NtSetUuidSeed PROTO STDCALL :DWORD NtSetValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtSetVolumeInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtShutdownSystem PROTO STDCALL :DWORD NtSignalAndWaitForSingleObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtStartProfile PROTO STDCALL :DWORD NtStopProfile PROTO STDCALL :DWORD NtSuspendProcess PROTO STDCALL :DWORD NtSuspendThread PROTO STDCALL :DWORD,:DWORD NtSystemDebugControl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtTerminateJobObject PROTO STDCALL :DWORD,:DWORD NtTerminateProcess PROTO STDCALL :DWORD,:DWORD NtTerminateThread PROTO STDCALL :DWORD,:DWORD NtTestAlert PROTO STDCALL NtTraceEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtTranslateFilePath PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtUnloadDriver PROTO STDCALL :DWORD NtUnloadKey PROTO STDCALL :DWORD NtUnloadKeyEx PROTO STDCALL :DWORD,:DWORD NtUnlockFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtUnlockVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtUnmapViewOfSection PROTO STDCALL :DWORD,:DWORD NtVdmControl PROTO STDCALL :DWORD,:DWORD NtWaitForDebugEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtWaitForKeyedEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtWaitForMultipleObjects PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtWaitForSingleObject PROTO STDCALL :DWORD,:DWORD,:DWORD NtWaitHighEventPair PROTO STDCALL :DWORD NtWaitLowEventPair PROTO STDCALL :DWORD NtWriteFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtWriteFileGather PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtWriteRequestData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtWriteVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtYieldExecution PROTO STDCALL PfxFindPrefix PROTO STDCALL :DWORD,:DWORD PfxInitialize PROTO STDCALL :DWORD PfxInsertPrefix PROTO STDCALL :DWORD,:DWORD,:DWORD PfxRemovePrefix PROTO STDCALL :DWORD,:DWORD RtlAbortRXact PROTO STDCALL :DWORD RtlAbsoluteToSelfRelativeSD PROTO STDCALL :DWORD,:DWORD,:DWORD RtlAcquirePebLock PROTO STDCALL RtlAcquireResourceExclusive PROTO STDCALL :DWORD,:DWORD RtlAcquireResourceShared PROTO STDCALL :DWORD,:DWORD RtlActivateActivationContext PROTO STDCALL :DWORD,:DWORD,:DWORD RtlActivateActivationContextEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlActivateActivationContextUnsafeFast PROTO STDCALL :DWORD,:DWORD RtlAddAccessAllowedAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlAddAccessAllowedAceEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAddAccessAllowedObjectAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAddAccessDeniedAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlAddAccessDeniedAceEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAddAccessDeniedObjectAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAddAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAddActionToRXact PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAddAtomToAtomTable PROTO STDCALL :DWORD,:DWORD,:DWORD RtlAddAttributeActionToRXact PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAddAuditAccessAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAddAuditAccessAceEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAddAuditAccessObjectAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAddCompoundAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAddRange PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAddRefActivationContext PROTO STDCALL :DWORD RtlAddRefMemoryStream PROTO STDCALL :DWORD RtlAddVectoredExceptionHandler PROTO STDCALL :DWORD,:DWORD RtlAddressInSectionTable PROTO STDCALL :DWORD,:DWORD,:DWORD RtlAdjustPrivilege PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlAllocateAndInitializeSid PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAllocateHandle PROTO STDCALL :DWORD,:DWORD RtlAllocateHeap PROTO STDCALL :DWORD,:DWORD,:DWORD RtlAnsiCharToUnicodeChar PROTO STDCALL :DWORD RtlAnsiStringToUnicodeSize PROTO STDCALL :DWORD RtlAnsiStringToUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlAppendAsciizToString PROTO STDCALL :DWORD,:DWORD RtlAppendPathElement PROTO STDCALL :DWORD,:DWORD,:DWORD RtlAppendStringToString PROTO STDCALL :DWORD,:DWORD RtlAppendUnicodeStringToString PROTO STDCALL :DWORD,:DWORD RtlAppendUnicodeToString PROTO STDCALL :DWORD,:DWORD RtlApplicationVerifierStop PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlApplyRXact PROTO STDCALL :DWORD RtlApplyRXactNoFlush PROTO STDCALL :DWORD RtlAreAllAccessesGranted PROTO STDCALL :DWORD,:DWORD RtlAreAnyAccessesGranted PROTO STDCALL :DWORD,:DWORD RtlAreBitsClear PROTO STDCALL :DWORD,:DWORD,:DWORD RtlAreBitsSet PROTO STDCALL :DWORD,:DWORD,:DWORD RtlAssert2 PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAssert PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlCancelTimer PROTO STDCALL :DWORD,:DWORD RtlCaptureContext PROTO STDCALL :DWORD RtlCaptureStackBackTrace PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlCaptureStackContext PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCharToInteger PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCheckForOrphanedCriticalSections PROTO STDCALL :DWORD RtlCheckProcessParameters PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlCheckRegistryKey PROTO STDCALL :DWORD,:DWORD RtlClearAllBits PROTO STDCALL :DWORD RtlClearBits PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCloneMemoryStream PROTO STDCALL :DWORD,:DWORD RtlCommitMemoryStream PROTO STDCALL :DWORD,:DWORD RtlCompactHeap PROTO STDCALL :DWORD,:DWORD RtlCompareMemory PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCompareMemoryUlong PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCompareString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCompareUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCompressBuffer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlComputeCrc32 PROTO STDCALL :DWORD,:DWORD,:DWORD RtlComputeImportTableHash PROTO STDCALL :DWORD,:DWORD,:DWORD RtlComputePrivatizedDllName_U PROTO STDCALL :DWORD,:DWORD,:DWORD RtlConsoleMultiByteToUnicodeN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlConvertExclusiveToShared PROTO STDCALL :DWORD RtlConvertLongToLargeInteger PROTO STDCALL :DWORD RtlConvertSharedToExclusive PROTO STDCALL :DWORD RtlConvertSidToUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlConvertToAutoInheritSecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlConvertUiListToApiList PROTO STDCALL :DWORD,:DWORD,:DWORD RtlConvertUlongToLargeInteger PROTO STDCALL :DWORD RtlCopyLuid PROTO STDCALL :DWORD,:DWORD RtlCopyLuidAndAttributesArray PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCopyMemoryStreamTo PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlCopyOutOfProcessMemoryStreamTo PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlCopyRangeList PROTO STDCALL :DWORD,:DWORD RtlCopySecurityDescriptor PROTO STDCALL :DWORD,:DWORD RtlCopySid PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCopySidAndAttributesArray PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlCopyString PROTO STDCALL :DWORD,:DWORD RtlCopyUnicodeString PROTO STDCALL :DWORD,:DWORD RtlCreateAcl PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCreateActivationContext PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlCreateAndSetSD PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlCreateAtomTable PROTO STDCALL :DWORD,:DWORD RtlCreateBootStatusDataFile PROTO STDCALL RtlCreateEnvironment PROTO STDCALL :DWORD,:DWORD RtlCreateHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlCreateProcessParameters PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlCreateQueryDebugBuffer PROTO STDCALL :DWORD,:DWORD RtlCreateRegistryKey PROTO STDCALL :DWORD,:DWORD RtlCreateSecurityDescriptor PROTO STDCALL :DWORD,:DWORD RtlCreateSystemVolumeInformationFolder PROTO STDCALL :DWORD RtlCreateTagHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlCreateTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlCreateTimerQueue PROTO STDCALL :DWORD RtlCreateUnicodeString PROTO STDCALL :DWORD,:DWORD RtlCreateUnicodeStringFromAsciiz PROTO STDCALL :DWORD,:DWORD RtlCreateUserProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlCreateUserSecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlCreateUserThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlCustomCPToUnicodeN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlCutoverTimeToSystemTime PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlDeNormalizeProcessParams PROTO STDCALL :DWORD RtlDeactivateActivationContext PROTO STDCALL :DWORD,:DWORD RtlDeactivateActivationContextUnsafeFast PROTO STDCALL :DWORD RtlDebugPrintTimes PROTO STDCALL RtlDecodePointer PROTO STDCALL :DWORD RtlDecodeSystemPointer PROTO STDCALL :DWORD RtlDecompressBuffer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlDecompressFragment PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlDefaultNpAcl PROTO STDCALL :DWORD RtlDelete PROTO STDCALL :DWORD RtlDeleteAce PROTO STDCALL :DWORD,:DWORD RtlDeleteAtomFromAtomTable PROTO STDCALL :DWORD,:DWORD RtlDeleteCriticalSection PROTO STDCALL :DWORD RtlDeleteElementGenericTable PROTO STDCALL :DWORD,:DWORD RtlDeleteElementGenericTableAvl PROTO STDCALL :DWORD,:DWORD RtlDeleteNoSplay PROTO STDCALL :DWORD,:DWORD RtlDeleteOwnersRanges PROTO STDCALL :DWORD,:DWORD RtlDeleteRange PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlDeleteRegistryValue PROTO STDCALL :DWORD,:DWORD,:DWORD RtlDeleteResource PROTO STDCALL :DWORD RtlDeleteSecurityObject PROTO STDCALL :DWORD RtlDeleteTimer PROTO STDCALL :DWORD,:DWORD,:DWORD RtlDeleteTimerQueue PROTO STDCALL :DWORD RtlDeleteTimerQueueEx PROTO STDCALL :DWORD,:DWORD RtlDeregisterWait PROTO STDCALL :DWORD RtlDeregisterWaitEx PROTO STDCALL :DWORD,:DWORD RtlDestroyAtomTable PROTO STDCALL :DWORD RtlDestroyEnvironment PROTO STDCALL :DWORD RtlDestroyHandleTable PROTO STDCALL :DWORD RtlDestroyHeap PROTO STDCALL :DWORD RtlDestroyProcessParameters PROTO STDCALL :DWORD RtlDestroyQueryDebugBuffer PROTO STDCALL :DWORD RtlDetermineDosPathNameType_U PROTO STDCALL :DWORD RtlDllShutdownInProgress PROTO STDCALL RtlDnsHostNameToComputerName PROTO STDCALL :DWORD,:DWORD,:DWORD RtlDoesFileExists_U PROTO STDCALL :DWORD RtlDosApplyFileIsolationRedirection_Ustr PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlDosPathNameToNtPathName_U PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlDosSearchPath_U PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlDosSearchPath_Ustr PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlDowncaseUnicodeChar PROTO STDCALL :DWORD RtlDowncaseUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlDumpResource PROTO STDCALL :DWORD RtlDuplicateUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlEmptyAtomTable PROTO STDCALL :DWORD,:DWORD RtlEnableEarlyCriticalSectionEventCreation PROTO STDCALL RtlEncodePointer PROTO STDCALL :DWORD RtlEncodeSystemPointer PROTO STDCALL :DWORD RtlEnlargedIntegerMultiply PROTO STDCALL :DWORD,:DWORD RtlEnlargedUnsignedDivide PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlEnlargedUnsignedMultiply PROTO STDCALL :DWORD,:DWORD RtlEnterCriticalSection PROTO STDCALL :DWORD RtlEnumProcessHeaps PROTO STDCALL :DWORD,:DWORD RtlEnumerateGenericTable PROTO STDCALL :DWORD,:DWORD RtlEnumerateGenericTableAvl PROTO STDCALL :DWORD,:DWORD RtlEnumerateGenericTableLikeADirectory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlEnumerateGenericTableWithoutSplaying PROTO STDCALL :DWORD,:DWORD RtlEnumerateGenericTableWithoutSplayingAvl PROTO STDCALL :DWORD,:DWORD RtlEqualComputerName PROTO STDCALL :DWORD,:DWORD RtlEqualDomainName PROTO STDCALL :DWORD,:DWORD RtlEqualLuid PROTO STDCALL :DWORD,:DWORD RtlEqualPrefixSid PROTO STDCALL :DWORD,:DWORD RtlEqualSid PROTO STDCALL :DWORD,:DWORD RtlEqualString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlEqualUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlEraseUnicodeString PROTO STDCALL :DWORD RtlExitUserThread PROTO STDCALL :DWORD RtlExpandEnvironmentStrings_U PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlExtendHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlExtendedIntegerMultiply PROTO STDCALL :DWORD,:DWORD,:DWORD RtlExtendedLargeIntegerDivide PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlExtendedMagicDivide PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlFillMemory PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFillMemoryUlong PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFinalReleaseOutOfProcessMemoryStream PROTO STDCALL :DWORD RtlFindActivationContextSectionGuid PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlFindActivationContextSectionString PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlFindCharInUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlFindClearBits PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFindClearBitsAndSet PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFindClearRuns PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlFindLastBackwardRunClear PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFindLeastSignificantBit PROTO STDCALL :DWORD,:DWORD RtlFindLongestRunClear PROTO STDCALL :DWORD,:DWORD RtlFindMessage PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlFindMostSignificantBit PROTO STDCALL :DWORD,:DWORD RtlFindNextForwardRunClear PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFindRange PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlFindSetBits PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFindSetBitsAndClear PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFirstEntrySList PROTO STDCALL :DWORD RtlFirstFreeAce PROTO STDCALL :DWORD,:DWORD RtlFlushSecureMemoryCache PROTO STDCALL :DWORD,:DWORD RtlFormatCurrentUserKeyPath PROTO STDCALL :DWORD RtlFormatMessage PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlFreeAnsiString PROTO STDCALL :DWORD RtlFreeHandle PROTO STDCALL :DWORD,:DWORD RtlFreeHeap PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFreeOemString PROTO STDCALL :DWORD RtlFreeRangeList PROTO STDCALL :DWORD RtlFreeSid PROTO STDCALL :DWORD RtlFreeThreadActivationContextStack PROTO STDCALL RtlFreeUnicodeString PROTO STDCALL :DWORD RtlFreeUserThreadStack PROTO STDCALL :DWORD,:DWORD RtlGUIDFromString PROTO STDCALL :DWORD,:DWORD RtlGenerate8dot3Name PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlGetAce PROTO STDCALL :DWORD,:DWORD,:DWORD RtlGetActiveActivationContext PROTO STDCALL :DWORD RtlGetCallersAddress PROTO STDCALL :DWORD,:DWORD RtlGetCompressionWorkSpaceSize PROTO STDCALL :DWORD,:DWORD,:DWORD RtlGetControlSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD RtlGetCurrentDirectory_U PROTO STDCALL :DWORD,:DWORD RtlGetCurrentPeb PROTO STDCALL RtlGetDaclSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlGetElementGenericTable PROTO STDCALL :DWORD,:DWORD RtlGetElementGenericTableAvl PROTO STDCALL :DWORD,:DWORD RtlGetFirstRange PROTO STDCALL :DWORD,:DWORD,:DWORD RtlGetFrame PROTO STDCALL RtlGetFullPathName_U PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlGetGroupSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD RtlGetLastNtStatus PROTO STDCALL RtlGetLastWin32Error PROTO STDCALL RtlGetLengthWithoutLastFullDosOrNtPathElement PROTO STDCALL :DWORD,:DWORD,:DWORD RtlGetLengthWithoutTrailingPathSeperators PROTO STDCALL :DWORD,:DWORD,:DWORD RtlGetLongestNtPathLength PROTO STDCALL RtlGetNativeSystemInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlGetNextRange PROTO STDCALL :DWORD,:DWORD,:DWORD RtlGetNtGlobalFlags PROTO STDCALL RtlGetNtProductType PROTO STDCALL :DWORD RtlGetNtVersionNumbers PROTO STDCALL :DWORD,:DWORD,:DWORD RtlGetOwnerSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD RtlGetProcessHeaps PROTO STDCALL :DWORD,:DWORD RtlGetSaclSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlGetSecurityDescriptorRMControl PROTO STDCALL :DWORD,:DWORD RtlGetSetBootStatusData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlGetUnloadEventTrace PROTO STDCALL RtlGetUserInfoHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlGetVersion PROTO STDCALL :DWORD RtlHashUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlIdentifierAuthoritySid PROTO STDCALL :DWORD RtlImageDirectoryEntryToData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlImageNtHeader PROTO STDCALL :DWORD RtlImageRvaToSection PROTO STDCALL :DWORD,:DWORD,:DWORD RtlImageRvaToVa PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlImpersonateSelf PROTO STDCALL :DWORD RtlInitAnsiString PROTO STDCALL :DWORD,:DWORD RtlInitCodePageTable PROTO STDCALL :DWORD,:DWORD RtlInitMemoryStream PROTO STDCALL :DWORD RtlInitNlsTables PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlInitOutOfProcessMemoryStream PROTO STDCALL :DWORD RtlInitString PROTO STDCALL :DWORD,:DWORD RtlInitUnicodeString PROTO STDCALL :DWORD,:DWORD RtlInitUnicodeStringEx PROTO STDCALL :DWORD,:DWORD RtlInitializeAtomPackage PROTO STDCALL :DWORD RtlInitializeBitMap PROTO STDCALL :DWORD,:DWORD,:DWORD RtlInitializeContext PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlInitializeCriticalSection PROTO STDCALL :DWORD RtlInitializeCriticalSectionAndSpinCount PROTO STDCALL :DWORD,:DWORD RtlInitializeGenericTable PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlInitializeGenericTableAvl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlInitializeHandleTable PROTO STDCALL :DWORD,:DWORD,:DWORD RtlInitializeRXact PROTO STDCALL :DWORD,:DWORD,:DWORD RtlInitializeRangeList PROTO STDCALL :DWORD RtlInitializeResource PROTO STDCALL :DWORD RtlInitializeSListHead PROTO STDCALL :DWORD RtlInitializeSid PROTO STDCALL :DWORD,:DWORD,:DWORD RtlInitializeStackTraceDataBase PROTO STDCALL :DWORD,:DWORD,:DWORD RtlInsertElementGenericTable PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlInsertElementGenericTableAvl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlInt64ToUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlIntegerToChar PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlIntegerToUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlInterlockedFlushSList PROTO STDCALL :DWORD RtlInterlockedPopEntrySList PROTO STDCALL :DWORD RtlInterlockedPushEntrySList PROTO STDCALL :DWORD,:DWORD RtlInvertRangeList PROTO STDCALL :DWORD,:DWORD RtlIpv4AddressToStringA PROTO STDCALL :DWORD,:DWORD IFNDEF __UNICODE__ RtlIpv4AddressToString equ ENDIF RtlIpv4AddressToStringExA PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IFNDEF __UNICODE__ RtlIpv4AddressToStringEx equ ENDIF RtlIpv4AddressToStringExW PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IFDEF __UNICODE__ RtlIpv4AddressToStringEx equ ENDIF RtlIpv4AddressToStringW PROTO STDCALL :DWORD,:DWORD IFDEF __UNICODE__ RtlIpv4AddressToString equ ENDIF RtlIpv4StringToAddressA PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IFNDEF __UNICODE__ RtlIpv4StringToAddress equ ENDIF RtlIpv4StringToAddressExA PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IFNDEF __UNICODE__ RtlIpv4StringToAddressEx equ ENDIF RtlIpv4StringToAddressExW PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IFDEF __UNICODE__ RtlIpv4StringToAddressEx equ ENDIF RtlIpv4StringToAddressW PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IFDEF __UNICODE__ RtlIpv4StringToAddress equ ENDIF RtlIpv6AddressToStringA PROTO STDCALL :DWORD,:DWORD IFNDEF __UNICODE__ RtlIpv6AddressToString equ ENDIF RtlIpv6AddressToStringExA PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IFNDEF __UNICODE__ RtlIpv6AddressToStringEx equ ENDIF RtlIpv6AddressToStringExW PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IFDEF __UNICODE__ RtlIpv6AddressToStringEx equ ENDIF RtlIpv6AddressToStringW PROTO STDCALL :DWORD,:DWORD IFDEF __UNICODE__ RtlIpv6AddressToString equ ENDIF RtlIpv6StringToAddressA PROTO STDCALL :DWORD,:DWORD,:DWORD IFNDEF __UNICODE__ RtlIpv6StringToAddress equ ENDIF RtlIpv6StringToAddressExA PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IFNDEF __UNICODE__ RtlIpv6StringToAddressEx equ ENDIF RtlIpv6StringToAddressExW PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IFDEF __UNICODE__ RtlIpv6StringToAddressEx equ ENDIF RtlIpv6StringToAddressW PROTO STDCALL :DWORD,:DWORD,:DWORD IFDEF __UNICODE__ RtlIpv6StringToAddress equ ENDIF RtlIsActivationContextActive PROTO STDCALL :DWORD RtlIsDosDeviceName_U PROTO STDCALL :DWORD RtlIsGenericTableEmpty PROTO STDCALL :DWORD RtlIsGenericTableEmptyAvl PROTO STDCALL :DWORD RtlIsNameLegalDOS8Dot3 PROTO STDCALL :DWORD,:DWORD,:DWORD RtlIsRangeAvailable PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlIsTextUnicode PROTO STDCALL :DWORD,:DWORD,:DWORD RtlIsThreadWithinLoaderCallout PROTO STDCALL RtlIsValidHandle PROTO STDCALL :DWORD,:DWORD RtlIsValidIndexHandle PROTO STDCALL :DWORD,:DWORD,:DWORD RtlLargeIntegerAdd PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlLargeIntegerArithmeticShift PROTO STDCALL :DWORD,:DWORD,:DWORD RtlLargeIntegerDivide PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlLargeIntegerNegate PROTO STDCALL :DWORD,:DWORD RtlLargeIntegerShiftLeft PROTO STDCALL :DWORD,:DWORD,:DWORD RtlLargeIntegerShiftRight PROTO STDCALL :DWORD,:DWORD,:DWORD RtlLargeIntegerSubtract PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlLargeIntegerToChar PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlLeaveCriticalSection PROTO STDCALL :DWORD RtlLengthRequiredSid PROTO STDCALL :DWORD RtlLengthSecurityDescriptor PROTO STDCALL :DWORD RtlLengthSid PROTO STDCALL :DWORD RtlLocalTimeToSystemTime PROTO STDCALL :DWORD,:DWORD RtlLockBootStatusData PROTO STDCALL :DWORD RtlLockHeap PROTO STDCALL :DWORD RtlLockMemoryStreamRegion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlLogStackBackTrace PROTO STDCALL RtlLookupAtomInAtomTable PROTO STDCALL :DWORD,:DWORD,:DWORD RtlLookupElementGenericTable PROTO STDCALL :DWORD,:DWORD RtlLookupElementGenericTableAvl PROTO STDCALL :DWORD,:DWORD RtlMakeSelfRelativeSD PROTO STDCALL :DWORD,:DWORD,:DWORD RtlMapGenericMask PROTO STDCALL :DWORD,:DWORD RtlMapSecurityErrorToNtStatus PROTO STDCALL :DWORD RtlMergeRangeLists PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlMoveMemory PROTO STDCALL :DWORD,:DWORD,:DWORD RtlMultiAppendUnicodeStringBuffer PROTO STDCALL :DWORD,:DWORD,:DWORD RtlMultiByteToUnicodeN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlMultiByteToUnicodeSize PROTO STDCALL :DWORD,:DWORD,:DWORD RtlNewInstanceSecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlNewSecurityGrantedAccess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlNewSecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlNewSecurityObjectEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlNewSecurityObjectWithMultipleInheritance PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlNormalizeProcessParams PROTO STDCALL :DWORD RtlNtPathNameToDosPathName PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlNtStatusToDosError PROTO STDCALL :DWORD RtlNtStatusToDosErrorNoTeb PROTO STDCALL :DWORD RtlNumberGenericTableElements PROTO STDCALL :DWORD RtlNumberGenericTableElementsAvl PROTO STDCALL :DWORD RtlNumberOfClearBits PROTO STDCALL :DWORD RtlNumberOfSetBits PROTO STDCALL :DWORD RtlOemStringToUnicodeSize PROTO STDCALL :DWORD RtlOemStringToUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlOemToUnicodeN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlOpenCurrentUser PROTO STDCALL :DWORD,:DWORD RtlPcToFileHeader PROTO STDCALL :DWORD,:DWORD RtlPinAtomInAtomTable PROTO STDCALL :DWORD,:DWORD RtlPopFrame PROTO STDCALL :DWORD RtlPrefixString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlPrefixUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlProtectHeap PROTO STDCALL :DWORD,:DWORD RtlPushFrame PROTO STDCALL :DWORD RtlQueryAtomInAtomTable PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlQueryDepthSList PROTO STDCALL :DWORD RtlQueryEnvironmentVariable_U PROTO STDCALL :DWORD,:DWORD,:DWORD RtlQueryHeapInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlQueryInformationAcl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlQueryInformationActivationContext PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlQueryInformationActiveActivationContext PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlQueryInterfaceMemoryStream PROTO STDCALL :DWORD,:DWORD,:DWORD RtlQueryProcessBackTraceInformation PROTO STDCALL :DWORD RtlQueryProcessDebugInformation PROTO STDCALL :DWORD,:DWORD,:DWORD RtlQueryProcessHeapInformation PROTO STDCALL :DWORD RtlQueryProcessLockInformation PROTO STDCALL :DWORD RtlQueryRegistryValues PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlQuerySecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlQueryTagHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlQueryTimeZoneInformation PROTO STDCALL :DWORD RtlQueueApcWow64Thread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlQueueWorkItem PROTO STDCALL :DWORD,:DWORD,:DWORD RtlRaiseException PROTO STDCALL :DWORD RtlRaiseStatus PROTO STDCALL :DWORD RtlRandom PROTO STDCALL :DWORD RtlRandomEx PROTO STDCALL :DWORD RtlReAllocateHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlReadMemoryStream PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlReadOutOfProcessMemoryStream PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlRealPredecessor PROTO STDCALL :DWORD RtlRealSuccessor PROTO STDCALL :DWORD RtlRegisterSecureMemoryCacheCallback PROTO STDCALL :DWORD RtlRegisterWait PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlReleaseActivationContext PROTO STDCALL :DWORD RtlReleaseMemoryStream PROTO STDCALL :DWORD RtlReleasePebLock PROTO STDCALL RtlReleaseResource PROTO STDCALL :DWORD RtlRemoteCall PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlRemoveVectoredExceptionHandler PROTO STDCALL :DWORD RtlResetRtlTranslations PROTO STDCALL :DWORD RtlRestoreLastWin32Error PROTO STDCALL :DWORD RtlRevertMemoryStream PROTO STDCALL :DWORD RtlRunDecodeUnicodeString PROTO STDCALL :DWORD,:DWORD RtlRunEncodeUnicodeString PROTO STDCALL :DWORD,:DWORD RtlSecondsSince1970ToTime PROTO STDCALL :DWORD,:DWORD RtlSecondsSince1980ToTime PROTO STDCALL :DWORD,:DWORD RtlSeekMemoryStream PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlSelfRelativeToAbsoluteSD2 PROTO STDCALL :DWORD,:DWORD RtlSelfRelativeToAbsoluteSD PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlSetAllBits PROTO STDCALL :DWORD RtlSetAttributesSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD RtlSetBits PROTO STDCALL :DWORD,:DWORD,:DWORD RtlSetControlSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD RtlSetCriticalSectionSpinCount PROTO STDCALL :DWORD,:DWORD RtlSetCurrentDirectory_U PROTO STDCALL :DWORD RtlSetCurrentEnvironment PROTO STDCALL :DWORD,:DWORD RtlSetDaclSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlSetEnvironmentVariable PROTO STDCALL :DWORD,:DWORD,:DWORD RtlSetGroupSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD RtlSetHeapInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlSetInformationAcl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlSetIoCompletionCallback PROTO STDCALL :DWORD,:DWORD,:DWORD RtlSetLastWin32Error PROTO STDCALL :DWORD RtlSetLastWin32ErrorAndNtStatusFromNtStatus PROTO STDCALL :DWORD RtlSetMemoryStreamSize PROTO STDCALL :DWORD,:DWORD,:DWORD RtlSetOwnerSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD RtlSetProcessIsCritical PROTO C :VARARG RtlSetSaclSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlSetSecurityDescriptorRMControl PROTO STDCALL :DWORD,:DWORD RtlSetSecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlSetSecurityObjectEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlSetThreadIsCritical PROTO C :VARARG RtlSetThreadPoolStartFunc PROTO STDCALL :DWORD,:DWORD RtlSetTimeZoneInformation PROTO STDCALL :DWORD RtlSetTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlSetUnicodeCallouts PROTO STDCALL :DWORD RtlSetUserFlagsHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlSetUserValueHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlSizeHeap PROTO STDCALL :DWORD,:DWORD,:DWORD RtlSplay PROTO STDCALL :DWORD RtlStartRXact PROTO STDCALL :DWORD RtlStatMemoryStream PROTO STDCALL :DWORD,:DWORD,:DWORD RtlStringFromGUID PROTO STDCALL :DWORD,:DWORD RtlSubAuthorityCountSid PROTO STDCALL :DWORD RtlSubAuthoritySid PROTO STDCALL :DWORD,:DWORD RtlSubtreePredecessor PROTO STDCALL :DWORD RtlSubtreeSuccessor PROTO STDCALL :DWORD RtlSystemTimeToLocalTime PROTO STDCALL :DWORD,:DWORD RtlTimeFieldsToTime PROTO STDCALL :DWORD,:DWORD RtlTimeToElapsedTimeFields PROTO STDCALL :DWORD,:DWORD RtlTimeToSecondsSince1970 PROTO STDCALL :DWORD,:DWORD RtlTimeToSecondsSince1980 PROTO STDCALL :DWORD,:DWORD RtlTimeToTimeFields PROTO STDCALL :DWORD,:DWORD RtlTraceDatabaseAdd PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlTraceDatabaseCreate PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlTraceDatabaseDestroy PROTO STDCALL :DWORD RtlTraceDatabaseEnumerate PROTO STDCALL :DWORD,:DWORD,:DWORD RtlTraceDatabaseFind PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlTraceDatabaseLock PROTO STDCALL :DWORD RtlTraceDatabaseUnlock PROTO STDCALL :DWORD RtlTraceDatabaseValidate PROTO STDCALL :DWORD RtlTryEnterCriticalSection PROTO STDCALL :DWORD RtlUnhandledExceptionFilter2 PROTO STDCALL :DWORD,:DWORD RtlUnhandledExceptionFilter PROTO STDCALL :DWORD RtlUnicodeStringToAnsiSize PROTO STDCALL :DWORD RtlUnicodeStringToAnsiString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUnicodeStringToCountedOemString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUnicodeStringToInteger PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUnicodeStringToOemSize PROTO STDCALL :DWORD RtlUnicodeStringToOemString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUnicodeToCustomCPN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlUnicodeToMultiByteN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlUnicodeToMultiByteSize PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUnicodeToOemN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlUniform PROTO STDCALL :DWORD RtlUnlockBootStatusData PROTO STDCALL :DWORD RtlUnlockHeap PROTO STDCALL :DWORD RtlUnlockMemoryStreamRegion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlUnwind PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlUpcaseUnicodeChar PROTO STDCALL :DWORD RtlUpcaseUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUpcaseUnicodeStringToAnsiString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUpcaseUnicodeStringToCountedOemString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUpcaseUnicodeStringToOemString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUpcaseUnicodeToCustomCPN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlUpcaseUnicodeToMultiByteN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlUpcaseUnicodeToOemN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlUpdateTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlUpperChar PROTO STDCALL :DWORD RtlUpperString PROTO STDCALL :DWORD,:DWORD RtlUsageHeap PROTO STDCALL :DWORD,:DWORD,:DWORD RtlValidAcl PROTO STDCALL :DWORD RtlValidRelativeSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD RtlValidSecurityDescriptor PROTO STDCALL :DWORD RtlValidSid PROTO STDCALL :DWORD RtlValidateHeap PROTO STDCALL :DWORD,:DWORD,:DWORD RtlValidateProcessHeaps PROTO STDCALL RtlValidateUnicodeString PROTO STDCALL :DWORD,:DWORD RtlVerifyVersionInfo PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlWalkFrameChain PROTO STDCALL :DWORD,:DWORD,:DWORD RtlWalkHeap PROTO STDCALL :DWORD,:DWORD RtlWriteMemoryStream PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlWriteRegistryValue PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlZeroHeap PROTO STDCALL :DWORD,:DWORD RtlZeroMemory PROTO STDCALL :DWORD,:DWORD RtlZombifyActivationContext PROTO STDCALL :DWORD RtlpApplyLengthFunction PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlpEnsureBufferSize PROTO STDCALL :DWORD,:DWORD,:DWORD RtlpNotOwnerCriticalSection PROTO STDCALL :DWORD RtlpNtCreateKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlpNtEnumerateSubKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlpNtMakeTemporaryKey PROTO STDCALL :DWORD RtlpNtOpenKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlpNtQueryValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlpNtSetValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlpUnWaitCriticalSection PROTO STDCALL :DWORD RtlpWaitForCriticalSection PROTO STDCALL :DWORD RtlxAnsiStringToUnicodeSize PROTO STDCALL :DWORD RtlxOemStringToUnicodeSize PROTO STDCALL :DWORD RtlxUnicodeStringToAnsiSize PROTO STDCALL :DWORD RtlxUnicodeStringToOemSize PROTO STDCALL :DWORD VerSetConditionMask PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwAcceptConnectPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwAccessCheck PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwAccessCheckAndAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwAccessCheckByType PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwAccessCheckByTypeAndAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwAccessCheckByTypeResultList PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwAccessCheckByTypeResultListAndAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwAccessCheckByTypeResultListAndAuditAlarmByHandle PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwAddAtom PROTO STDCALL :DWORD,:DWORD,:DWORD ZwAddBootEntry PROTO STDCALL :DWORD,:DWORD ZwAdjustGroupsToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwAdjustPrivilegesToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwAlertResumeThread PROTO STDCALL :DWORD,:DWORD ZwAlertThread PROTO STDCALL :DWORD ZwAllocateLocallyUniqueId PROTO STDCALL :DWORD ZwAllocateUserPhysicalPages PROTO STDCALL :DWORD,:DWORD,:DWORD ZwAllocateUuids PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwAllocateVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwAreMappedFilesTheSame PROTO STDCALL :DWORD,:DWORD ZwAssignProcessToJobObject PROTO STDCALL :DWORD,:DWORD ZwCallbackReturn PROTO STDCALL :DWORD,:DWORD,:DWORD ZwCancelDeviceWakeupRequest PROTO STDCALL :DWORD ZwCancelIoFile PROTO STDCALL :DWORD,:DWORD ZwCancelTimer PROTO STDCALL :DWORD,:DWORD ZwClearEvent PROTO STDCALL :DWORD ZwClose PROTO STDCALL :DWORD ZwCloseObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD ZwCompactKeys PROTO STDCALL :DWORD,:DWORD ZwCompareTokens PROTO STDCALL :DWORD,:DWORD,:DWORD ZwCompleteConnectPort PROTO STDCALL :DWORD ZwCompressKey PROTO STDCALL :DWORD ZwConnectPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwContinue PROTO STDCALL :DWORD,:DWORD ZwCreateDebugObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwCreateDirectoryObject PROTO STDCALL :DWORD,:DWORD,:DWORD ZwCreateEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateEventPair PROTO STDCALL :DWORD,:DWORD,:DWORD ZwCreateFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwCreateJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD ZwCreateJobSet PROTO STDCALL :DWORD,:DWORD,:DWORD ZwCreateKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateKeyedEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwCreateMailslotFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateMutant PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwCreateNamedPipeFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreatePagingFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwCreatePort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateProcessEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateProfile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateSection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateSemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateSymbolicLinkObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwCreateThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwCreateToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateWaitablePort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwDebugActiveProcess PROTO STDCALL :DWORD,:DWORD ZwDebugContinue PROTO STDCALL :DWORD,:DWORD,:DWORD ZwDelayExecution PROTO STDCALL :DWORD,:DWORD ZwDeleteAtom PROTO STDCALL :DWORD ZwDeleteBootEntry PROTO STDCALL :DWORD ZwDeleteFile PROTO STDCALL :DWORD ZwDeleteKey PROTO STDCALL :DWORD ZwDeleteObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD ZwDeleteValueKey PROTO STDCALL :DWORD,:DWORD ZwDeviceIoControlFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwDisplayString PROTO STDCALL :DWORD ZwDuplicateObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwDuplicateToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwEnumerateBootEntries PROTO STDCALL :DWORD,:DWORD ZwEnumerateKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwEnumerateSystemEnvironmentValuesEx PROTO STDCALL :DWORD,:DWORD,:DWORD ZwEnumerateValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwExtendSection PROTO STDCALL :DWORD,:DWORD ZwFilterToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwFindAtom PROTO STDCALL :DWORD,:DWORD,:DWORD ZwFlushBuffersFile PROTO STDCALL :DWORD,:DWORD ZwFlushInstructionCache PROTO STDCALL :DWORD,:DWORD,:DWORD ZwFlushKey PROTO STDCALL :DWORD ZwFlushVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwFlushWriteBuffer PROTO STDCALL ZwFreeUserPhysicalPages PROTO STDCALL :DWORD,:DWORD,:DWORD ZwFreeVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwFsControlFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwGetContextThread PROTO STDCALL :DWORD,:DWORD ZwGetDevicePowerState PROTO STDCALL :DWORD,:DWORD ZwGetPlugPlayEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwGetWriteWatch PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwImpersonateAnonymousToken PROTO STDCALL :DWORD ZwImpersonateClientOfPort PROTO STDCALL :DWORD,:DWORD ZwImpersonateThread PROTO STDCALL :DWORD,:DWORD,:DWORD ZwInitializeRegistry PROTO STDCALL :DWORD ZwInitiatePowerAction PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwIsProcessInJob PROTO STDCALL :DWORD,:DWORD ZwIsSystemResumeAutomatic PROTO STDCALL ZwListenPort PROTO STDCALL :DWORD,:DWORD ZwLoadDriver PROTO STDCALL :DWORD ZwLoadKey2 PROTO STDCALL :DWORD,:DWORD,:DWORD ZwLoadKey PROTO STDCALL :DWORD,:DWORD ZwLockFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwLockProductActivationKeys PROTO STDCALL :DWORD,:DWORD ZwLockRegistryKey PROTO STDCALL :DWORD ZwLockVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwMakePermanentObject PROTO STDCALL :DWORD ZwMakeTemporaryObject PROTO STDCALL :DWORD ZwMapUserPhysicalPages PROTO STDCALL :DWORD,:DWORD,:DWORD ZwMapUserPhysicalPagesScatter PROTO STDCALL :DWORD,:DWORD,:DWORD ZwMapViewOfSection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwModifyBootEntry PROTO STDCALL :DWORD ZwNotifyChangeDirectoryFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwNotifyChangeKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwNotifyChangeMultipleKeys PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwOpenDirectoryObject PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenEvent PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenEventPair PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwOpenIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenKey PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenKeyedEvent PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenMutant PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwOpenProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwOpenProcessToken PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenProcessTokenEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwOpenSection PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenSemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenSymbolicLinkObject PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwOpenThreadToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwOpenThreadTokenEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwOpenTimer PROTO STDCALL :DWORD,:DWORD,:DWORD ZwPlugPlayControl PROTO STDCALL :DWORD,:DWORD,:DWORD ZwPowerInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwPrivilegeCheck PROTO STDCALL :DWORD,:DWORD,:DWORD ZwPrivilegeObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwPrivilegedServiceAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwProtectVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwPulseEvent PROTO STDCALL :DWORD,:DWORD ZwQueryAttributesFile PROTO STDCALL :DWORD,:DWORD ZwQueryBootEntryOrder PROTO STDCALL :DWORD,:DWORD ZwQueryBootOptions PROTO STDCALL :DWORD,:DWORD ZwQueryDebugFilterState PROTO STDCALL :DWORD,:DWORD ZwQueryDefaultLocale PROTO STDCALL :DWORD,:DWORD ZwQueryDefaultUILanguage PROTO STDCALL :DWORD ZwQueryDirectoryFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryDirectoryObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryEaFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryFullAttributesFile PROTO STDCALL :DWORD,:DWORD ZwQueryInformationAtom PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryInformationJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryInformationPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryInformationProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryInformationThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryInformationToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryInstallUILanguage PROTO STDCALL :DWORD ZwQueryIntervalProfile PROTO STDCALL :DWORD,:DWORD ZwQueryIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryMultipleValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryMutant PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryOpenSubKeys PROTO STDCALL :DWORD,:DWORD ZwQueryPerformanceCounter PROTO STDCALL :DWORD,:DWORD ZwQueryPortInformationProcess PROTO STDCALL ZwQueryQuotaInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQuerySection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQuerySecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQuerySemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQuerySymbolicLinkObject PROTO STDCALL :DWORD,:DWORD,:DWORD ZwQuerySystemEnvironmentValue PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwQuerySystemEnvironmentValueEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQuerySystemInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwQuerySystemTime PROTO STDCALL :DWORD ZwQueryTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryTimerResolution PROTO STDCALL :DWORD,:DWORD,:DWORD ZwQueryValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryVolumeInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueueApcThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwRaiseException PROTO STDCALL :DWORD,:DWORD,:DWORD ZwRaiseHardError PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwReadFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwReadFileScatter PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwReadRequestData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwReadVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwRegisterThreadTerminatePort PROTO STDCALL :DWORD ZwReleaseKeyedEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwReleaseMutant PROTO STDCALL :DWORD,:DWORD ZwReleaseSemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD ZwRemoveIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwRemoveProcessDebug PROTO STDCALL :DWORD,:DWORD ZwRenameKey PROTO STDCALL :DWORD,:DWORD ZwReplaceKey PROTO STDCALL :DWORD,:DWORD,:DWORD ZwReplyPort PROTO STDCALL :DWORD,:DWORD ZwReplyWaitReceivePort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwReplyWaitReceivePortEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwReplyWaitReplyPort PROTO STDCALL :DWORD,:DWORD ZwRequestDeviceWakeup PROTO STDCALL :DWORD ZwRequestPort PROTO STDCALL :DWORD,:DWORD ZwRequestWaitReplyPort PROTO STDCALL :DWORD,:DWORD,:DWORD ZwRequestWakeupLatency PROTO STDCALL :DWORD ZwResetEvent PROTO STDCALL :DWORD,:DWORD ZwResetWriteWatch PROTO STDCALL :DWORD,:DWORD,:DWORD ZwRestoreKey PROTO STDCALL :DWORD,:DWORD,:DWORD ZwResumeProcess PROTO STDCALL :DWORD ZwResumeThread PROTO STDCALL :DWORD,:DWORD ZwSaveKey PROTO STDCALL :DWORD,:DWORD ZwSaveKeyEx PROTO STDCALL :DWORD,:DWORD,:DWORD ZwSaveMergedKeys PROTO STDCALL :DWORD,:DWORD,:DWORD ZwSecureConnectPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwSetBootEntryOrder PROTO STDCALL :DWORD,:DWORD ZwSetBootOptions PROTO STDCALL :DWORD,:DWORD ZwSetContextThread PROTO STDCALL :DWORD,:DWORD ZwSetDebugFilterState PROTO STDCALL :DWORD,:DWORD,:DWORD ZwSetDefaultHardErrorPort PROTO STDCALL :DWORD ZwSetDefaultLocale PROTO STDCALL :DWORD,:DWORD ZwSetDefaultUILanguage PROTO STDCALL :DWORD ZwSetEaFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwSetEvent PROTO STDCALL :DWORD,:DWORD ZwSetEventBoostPriority PROTO STDCALL :DWORD ZwSetHighEventPair PROTO STDCALL :DWORD ZwSetHighWaitLowEventPair PROTO STDCALL :DWORD ZwSetInformationDebugObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwSetInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwSetInformationJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwSetInformationKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwSetInformationObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwSetInformationProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwSetInformationThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwSetInformationToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwSetIntervalProfile PROTO STDCALL :DWORD,:DWORD ZwSetIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwSetLdtEntries PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwSetLowEventPair PROTO STDCALL :DWORD ZwSetLowWaitHighEventPair PROTO STDCALL :DWORD ZwSetQuotaInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwSetSecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD ZwSetSystemEnvironmentValue PROTO STDCALL :DWORD,:DWORD ZwSetSystemEnvironmentValueEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwSetSystemInformation PROTO STDCALL :DWORD,:DWORD,:DWORD ZwSetSystemPowerState PROTO STDCALL :DWORD,:DWORD,:DWORD ZwSetSystemTime PROTO STDCALL :DWORD,:DWORD ZwSetThreadExecutionState PROTO STDCALL :DWORD,:DWORD ZwSetTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwSetTimerResolution PROTO STDCALL :DWORD,:DWORD,:DWORD ZwSetUuidSeed PROTO STDCALL :DWORD ZwSetValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwSetVolumeInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwShutdownSystem PROTO STDCALL :DWORD ZwSignalAndWaitForSingleObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwStartProfile PROTO STDCALL :DWORD ZwStopProfile PROTO STDCALL :DWORD ZwSuspendProcess PROTO STDCALL :DWORD ZwSuspendThread PROTO STDCALL :DWORD,:DWORD ZwSystemDebugControl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwTerminateJobObject PROTO STDCALL :DWORD,:DWORD ZwTerminateProcess PROTO STDCALL :DWORD,:DWORD ZwTerminateThread PROTO STDCALL :DWORD,:DWORD ZwTestAlert PROTO STDCALL ZwTraceEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwTranslateFilePath PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwUnloadDriver PROTO STDCALL :DWORD ZwUnloadKey PROTO STDCALL :DWORD ZwUnloadKeyEx PROTO STDCALL :DWORD,:DWORD ZwUnlockFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwUnlockVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwUnmapViewOfSection PROTO STDCALL :DWORD,:DWORD ZwVdmControl PROTO STDCALL :DWORD,:DWORD ZwWaitForDebugEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwWaitForKeyedEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwWaitForMultipleObjects PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwWaitForSingleObject PROTO STDCALL :DWORD,:DWORD,:DWORD ZwWaitHighEventPair PROTO STDCALL :DWORD ZwWaitLowEventPair PROTO STDCALL :DWORD ZwWriteFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwWriteFileGather PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwWriteRequestData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwWriteVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwYieldExecution PROTO STDCALL ELSE echo ---------------------------------------- echo WARNING duplicate include file ntdll.inc echo ---------------------------------------- ENDIF