; -------------------------------------------------------------------------------------------------- ; ntoskrnl.inc Copyright The MASM32 SDK 1998-2010 ; -------------------------------------------------------------------------------------------------- IFNDEF NTOSKRNL_INC NTOSKRNL_INC equ <1> CcCanIWrite PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD CcCopyRead PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD CcCopyWrite PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD CcDeferWrite PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD CcFastCopyRead PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD CcFastCopyWrite PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD CcFastMdlReadWait PROTO C :VARARG CcFastReadNotPossible PROTO C :VARARG CcFastReadWait PROTO C :VARARG CcFlushCache PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD CcGetDirtyPages PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD CcGetFileObjectFromBcb PROTO STDCALL :DWORD CcGetFileObjectFromSectionPtrs PROTO STDCALL :DWORD CcGetFlushedValidData PROTO STDCALL :DWORD,:DWORD CcGetLsnForFileObject PROTO STDCALL :DWORD,:DWORD CcInitializeCacheMap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD CcIsThereDirtyData PROTO STDCALL :DWORD CcMapData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD CcMdlRead PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD CcMdlReadComplete PROTO STDCALL :DWORD,:DWORD CcMdlWriteAbort PROTO STDCALL :DWORD,:DWORD CcMdlWriteComplete PROTO STDCALL :DWORD,:DWORD,:DWORD CcPinMappedData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD CcPinRead PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD CcPrepareMdlWrite PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD CcPreparePinWrite PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD CcPurgeCacheSection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD CcRemapBcb PROTO STDCALL :DWORD CcRepinBcb PROTO STDCALL :DWORD CcScheduleReadAhead PROTO STDCALL :DWORD,:DWORD,:DWORD CcSetAdditionalCacheAttributes PROTO STDCALL :DWORD,:DWORD,:DWORD CcSetBcbOwnerPointer PROTO STDCALL :DWORD,:DWORD CcSetDirtyPageThreshold PROTO STDCALL :DWORD,:DWORD CcSetDirtyPinnedData PROTO STDCALL :DWORD,:DWORD CcSetFileSizes PROTO STDCALL :DWORD,:DWORD CcSetLogHandleForFile PROTO STDCALL :DWORD,:DWORD,:DWORD CcSetReadAheadGranularity PROTO STDCALL :DWORD,:DWORD CcUninitializeCacheMap PROTO STDCALL :DWORD,:DWORD,:DWORD CcUnpinData PROTO STDCALL :DWORD CcUnpinDataForThread PROTO STDCALL :DWORD,:DWORD CcUnpinRepinnedBcb PROTO STDCALL :DWORD,:DWORD,:DWORD CcWaitForCurrentLazyWriterActivity PROTO STDCALL CcZeroData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD CmRegisterCallback PROTO STDCALL :DWORD,:DWORD,:DWORD CmUnRegisterCallback PROTO STDCALL :DWORD,:DWORD DbgBreakPoint PROTO STDCALL DbgBreakPointWithStatus PROTO STDCALL :DWORD DbgLoadImageSymbols PROTO STDCALL :DWORD,:DWORD,:DWORD DbgPrint PROTO C :VARARG DbgPrintEx PROTO C :VARARG DbgPrintReturnControlC PROTO C :VARARG DbgPrompt PROTO STDCALL :DWORD,:DWORD,:DWORD DbgQueryDebugFilterState PROTO STDCALL :DWORD,:DWORD DbgSetDebugFilterState PROTO STDCALL :DWORD,:DWORD,:DWORD ExAcquireResourceExclusiveLite PROTO STDCALL :DWORD,:DWORD ExAcquireResourceSharedLite PROTO STDCALL :DWORD,:DWORD ExAcquireSharedStarveExclusive PROTO STDCALL :DWORD,:DWORD ExAcquireSharedWaitForExclusive PROTO STDCALL :DWORD,:DWORD ExAllocateFromPagedLookasideList PROTO STDCALL :DWORD ExAllocatePool PROTO STDCALL :DWORD,:DWORD ExAllocatePoolWithQuota PROTO STDCALL :DWORD,:DWORD ExAllocatePoolWithQuotaTag PROTO STDCALL :DWORD,:DWORD,:DWORD ExAllocatePoolWithTag PROTO STDCALL :DWORD,:DWORD,:DWORD ExAllocatePoolWithTagPriority PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ExConvertExclusiveToSharedLite PROTO STDCALL :DWORD ExCreateCallback PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ExDeleteNPagedLookasideList PROTO STDCALL :DWORD ExDeletePagedLookasideList PROTO STDCALL :DWORD ExDeleteResourceLite PROTO STDCALL :DWORD ExDesktopObjectType PROTO C :VARARG ExDisableResourceBoostLite PROTO STDCALL :DWORD ExEnumHandleTable PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ExEventObjectType PROTO C :VARARG ExExtendZone PROTO STDCALL :DWORD,:DWORD,:DWORD ExFreePool PROTO STDCALL :DWORD ExFreePoolWithTag PROTO STDCALL :DWORD,:DWORD ExFreeToPagedLookasideList PROTO STDCALL :DWORD,:DWORD ExGetCurrentProcessorCounts PROTO STDCALL :DWORD,:DWORD,:DWORD ExGetCurrentProcessorCpuUsage PROTO STDCALL :DWORD ExGetExclusiveWaiterCount PROTO STDCALL :DWORD ExGetPreviousMode PROTO STDCALL ExGetSharedWaiterCount PROTO STDCALL :DWORD ExInitializeNPagedLookasideList PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ExInitializePagedLookasideList PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ExInitializeResourceLite PROTO STDCALL :DWORD ExInitializeZone PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ExInterlockedAddLargeInteger PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ExInterlockedAddUlong PROTO STDCALL :DWORD,:DWORD,:DWORD ExInterlockedDecrementLong PROTO STDCALL :DWORD,:DWORD ExInterlockedExchangeUlong PROTO STDCALL :DWORD,:DWORD,:DWORD ExInterlockedExtendZone PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ExInterlockedIncrementLong PROTO STDCALL :DWORD,:DWORD ExInterlockedInsertHeadList PROTO STDCALL :DWORD,:DWORD,:DWORD ExInterlockedInsertTailList PROTO STDCALL :DWORD,:DWORD,:DWORD ExInterlockedPopEntryList PROTO STDCALL :DWORD,:DWORD ExInterlockedPushEntryList PROTO STDCALL :DWORD,:DWORD,:DWORD ExInterlockedRemoveHeadList PROTO STDCALL :DWORD,:DWORD ExIsProcessorFeaturePresent PROTO STDCALL :DWORD ExIsResourceAcquiredExclusiveLite PROTO STDCALL :DWORD ExIsResourceAcquiredSharedLite PROTO STDCALL :DWORD ExLocalTimeToSystemTime PROTO STDCALL :DWORD,:DWORD ExNotifyCallback PROTO STDCALL :DWORD,:DWORD,:DWORD ExQueryPoolBlockSize PROTO STDCALL :DWORD,:DWORD ExQueueWorkItem PROTO STDCALL :DWORD,:DWORD ExRaiseAccessViolation PROTO STDCALL ExRaiseDatatypeMisalignment PROTO STDCALL ExRaiseException PROTO STDCALL :DWORD ExRaiseHardError PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ExRaiseStatus PROTO STDCALL :DWORD ExRegisterCallback PROTO STDCALL :DWORD,:DWORD,:DWORD ExReinitializeResourceLite PROTO STDCALL :DWORD ExReleaseResourceForThreadLite PROTO STDCALL :DWORD,:DWORD ExSemaphoreObjectType PROTO C :VARARG ExSetResourceOwnerPointer PROTO STDCALL :DWORD,:DWORD ExSetTimerResolution PROTO STDCALL :DWORD,:DWORD ExSystemExceptionFilter PROTO STDCALL ExSystemTimeToLocalTime PROTO STDCALL :DWORD,:DWORD ExUnregisterCallback PROTO STDCALL :DWORD ExUuidCreate PROTO STDCALL :DWORD ExVerifySuite PROTO STDCALL :DWORD ExWindowStationObjectType PROTO C :VARARG Exi386InterlockedDecrementLong PROTO STDCALL :DWORD Exi386InterlockedExchangeUlong PROTO STDCALL :DWORD,:DWORD Exi386InterlockedIncrementLong PROTO STDCALL :DWORD FsRtlAcquireFileExclusive PROTO STDCALL :DWORD FsRtlAddLargeMcbEntry PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlAddMcbEntry PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD FsRtlAddToTunnelCache PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlAllocateFileLock PROTO STDCALL :DWORD,:DWORD FsRtlAllocatePool PROTO STDCALL :DWORD,:DWORD FsRtlAllocatePoolWithQuota PROTO STDCALL :DWORD,:DWORD FsRtlAllocatePoolWithQuotaTag PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlAllocatePoolWithTag PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlAllocateResource PROTO STDCALL FsRtlAreNamesEqual PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD FsRtlBalanceReads PROTO STDCALL :DWORD FsRtlCheckLockForReadAccess PROTO STDCALL :DWORD,:DWORD FsRtlCheckLockForWriteAccess PROTO STDCALL :DWORD,:DWORD FsRtlCheckOplock PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlCopyRead PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlCopyWrite PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlCurrentBatchOplock PROTO STDCALL :DWORD FsRtlDeleteKeyFromTunnelCache PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlDeleteTunnelCache PROTO STDCALL :DWORD FsRtlDeregisterUncProvider PROTO STDCALL :DWORD FsRtlDissectDbcs PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD FsRtlDissectName PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD FsRtlDoesDbcsContainWildCards PROTO STDCALL :DWORD FsRtlDoesNameContainWildCards PROTO STDCALL :DWORD FsRtlFastCheckLockForRead PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlFastCheckLockForWrite PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlFastUnlockAll PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD FsRtlFastUnlockAllByKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlFastUnlockSingle PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlFindInTunnelCache PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlFreeFileLock PROTO STDCALL :DWORD FsRtlGetFileSize PROTO STDCALL :DWORD,:DWORD FsRtlGetNextFileLock PROTO STDCALL :DWORD,:DWORD FsRtlGetNextLargeMcbEntry PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlGetNextMcbEntry PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlIncrementCcFastReadNoWait PROTO STDCALL FsRtlIncrementCcFastReadNotPossible PROTO STDCALL FsRtlIncrementCcFastReadResourceMiss PROTO STDCALL FsRtlIncrementCcFastReadWait PROTO STDCALL FsRtlInitializeFileLock PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlInitializeLargeMcb PROTO STDCALL :DWORD,:DWORD FsRtlInitializeMcb PROTO STDCALL :DWORD,:DWORD FsRtlInitializeOplock PROTO STDCALL :DWORD FsRtlInitializeTunnelCache PROTO STDCALL :DWORD FsRtlInsertPerFileObjectContext PROTO STDCALL :DWORD,:DWORD FsRtlInsertPerStreamContext PROTO STDCALL :DWORD,:DWORD FsRtlIsDbcsInExpression PROTO STDCALL :DWORD,:DWORD FsRtlIsFatDbcsLegal PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlIsHpfsDbcsLegal PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlIsNameInExpression PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD FsRtlIsNtstatusExpected PROTO STDCALL :DWORD FsRtlIsPagingFile PROTO STDCALL :DWORD FsRtlIsTotalDeviceFailure PROTO STDCALL :DWORD FsRtlLegalAnsiCharacterArray PROTO C :VARARG FsRtlLookupLargeMcbEntry PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlLookupLastLargeMcbEntry PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlLookupLastLargeMcbEntryAndIndex PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD FsRtlLookupLastMcbEntry PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlLookupMcbEntry PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlLookupPerFileObjectContext PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlLookupPerStreamContextInternal PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlMdlRead PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlMdlReadComplete PROTO STDCALL :DWORD,:DWORD FsRtlMdlReadCompleteDev PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlMdlReadDev PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlMdlWriteComplete PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlMdlWriteCompleteDev PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD FsRtlNormalizeNtstatus PROTO STDCALL :DWORD,:DWORD FsRtlNotifyChangeDirectory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlNotifyCleanup PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlNotifyFilterChangeDirectory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlNotifyFilterReportChange PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlNotifyFullChangeDirectory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlNotifyFullReportChange PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlNotifyInitializeSync PROTO STDCALL :DWORD FsRtlNotifyReportChange PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlNotifyUninitializeSync PROTO STDCALL :DWORD FsRtlNotifyVolumeEvent PROTO STDCALL :DWORD,:DWORD FsRtlNumberOfRunsInLargeMcb PROTO STDCALL :DWORD FsRtlNumberOfRunsInMcb PROTO STDCALL :DWORD FsRtlOplockFsctrl PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlOplockIsFastIoPossible PROTO STDCALL :DWORD FsRtlPostPagingFileStackOverflow PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlPostStackOverflow PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlPrepareMdlWrite PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlPrepareMdlWriteDev PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlPrivateLock PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlProcessFileLock PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlRegisterFileSystemFilterCallbacks PROTO STDCALL :DWORD,:DWORD FsRtlRegisterUncProvider PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlReleaseFile PROTO STDCALL :DWORD FsRtlRemoveLargeMcbEntry PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlRemoveMcbEntry PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlRemovePerFileObjectContext PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlRemovePerStreamContext PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlResetLargeMcb PROTO STDCALL :DWORD,:DWORD FsRtlSplitLargeMcb PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD FsRtlSyncVolumes PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlTeardownPerStreamContexts PROTO STDCALL :DWORD FsRtlTruncateLargeMcb PROTO STDCALL :DWORD,:DWORD,:DWORD FsRtlTruncateMcb PROTO STDCALL :DWORD,:DWORD FsRtlUninitializeFileLock PROTO STDCALL :DWORD FsRtlUninitializeLargeMcb PROTO STDCALL :DWORD FsRtlUninitializeMcb PROTO STDCALL :DWORD FsRtlUninitializeOplock PROTO STDCALL :DWORD HalDispatchTable PROTO C :VARARG HalPrivateDispatchTable PROTO C :VARARG HeadlessDispatch PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD InbvAcquireDisplayOwnership PROTO STDCALL InbvCheckDisplayOwnership PROTO STDCALL InbvDisplayString PROTO STDCALL :DWORD InbvEnableBootDriver PROTO STDCALL :DWORD InbvEnableDisplayString PROTO STDCALL :DWORD InbvInstallDisplayStringFilter PROTO STDCALL :DWORD InbvIsBootDriverInstalled PROTO STDCALL InbvNotifyDisplayOwnershipLost PROTO STDCALL :DWORD InbvResetDisplay PROTO STDCALL InbvSetScrollRegion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD InbvSetTextColor PROTO STDCALL :DWORD InbvSolidColorFill PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD InitSafeBootMode PROTO C :VARARG IoAcquireCancelSpinLock PROTO STDCALL :DWORD IoAcquireRemoveLockEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoAcquireVpbSpinLock PROTO STDCALL :DWORD IoAdapterObjectType PROTO C :VARARG IoAllocateAdapterChannel PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoAllocateController PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoAllocateDriverObjectExtension PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoAllocateErrorLogEntry PROTO STDCALL :DWORD,:DWORD IoAllocateIrp PROTO STDCALL :DWORD,:DWORD IoAllocateMdl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoAllocateWorkItem PROTO STDCALL :DWORD IoAssignResources PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoAttachDevice PROTO STDCALL :DWORD,:DWORD,:DWORD IoAttachDeviceByPointer PROTO STDCALL :DWORD,:DWORD IoAttachDeviceToDeviceStack PROTO STDCALL :DWORD,:DWORD IoAttachDeviceToDeviceStackSafe PROTO STDCALL :DWORD,:DWORD,:DWORD IoBuildAsynchronousFsdRequest PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoBuildDeviceIoControlRequest PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoBuildPartialMdl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoBuildSynchronousFsdRequest PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoCallDriver PROTO STDCALL :DWORD,:DWORD IoCancelFileOpen PROTO STDCALL :DWORD,:DWORD IoCancelIrp PROTO STDCALL :DWORD IoCheckDesiredAccess PROTO STDCALL :DWORD,:DWORD IoCheckEaBufferValidity PROTO STDCALL :DWORD,:DWORD,:DWORD IoCheckFunctionAccess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoCheckQuerySetFileInformation PROTO STDCALL :DWORD,:DWORD,:DWORD IoCheckQuerySetVolumeInformation PROTO STDCALL :DWORD,:DWORD,:DWORD IoCheckQuotaBufferValidity PROTO STDCALL :DWORD,:DWORD,:DWORD IoCheckShareAccess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoCompleteRequest PROTO STDCALL :DWORD,:DWORD IoConnectInterrupt PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoCreateController PROTO STDCALL :DWORD IoCreateDevice PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoCreateDisk PROTO STDCALL :DWORD,:DWORD IoCreateDriver PROTO STDCALL :DWORD,:DWORD IoCreateFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoCreateFileSpecifyDeviceObjectHint PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoCreateNotificationEvent PROTO STDCALL :DWORD,:DWORD IoCreateStreamFileObject PROTO STDCALL :DWORD,:DWORD IoCreateStreamFileObjectEx PROTO STDCALL :DWORD,:DWORD,:DWORD IoCreateStreamFileObjectLite PROTO STDCALL :DWORD,:DWORD IoCreateSymbolicLink PROTO STDCALL :DWORD,:DWORD IoCreateSynchronizationEvent PROTO STDCALL :DWORD,:DWORD IoCreateUnprotectedSymbolicLink PROTO STDCALL :DWORD,:DWORD IoCsqInitialize PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoCsqInsertIrp PROTO STDCALL :DWORD,:DWORD,:DWORD IoCsqRemoveIrp PROTO STDCALL :DWORD,:DWORD IoCsqRemoveNextIrp PROTO STDCALL :DWORD,:DWORD IoDeleteController PROTO STDCALL :DWORD IoDeleteDevice PROTO STDCALL :DWORD IoDeleteDriver PROTO STDCALL :DWORD IoDeleteSymbolicLink PROTO STDCALL :DWORD IoDetachDevice PROTO STDCALL :DWORD IoDeviceHandlerObjectSize PROTO C :VARARG IoDeviceHandlerObjectType PROTO C :VARARG IoDeviceObjectType PROTO C :VARARG IoDisconnectInterrupt PROTO STDCALL :DWORD IoDriverObjectType PROTO C :VARARG IoEnqueueIrp PROTO STDCALL :DWORD IoEnumerateDeviceObjectList PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoFastQueryNetworkAttributes PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoFileObjectType PROTO C :VARARG IoForwardAndCatchIrp PROTO STDCALL :DWORD,:DWORD IoForwardIrpSynchronously PROTO STDCALL :DWORD,:DWORD IoFreeController PROTO STDCALL :DWORD IoFreeErrorLogEntry PROTO STDCALL :DWORD IoFreeIrp PROTO STDCALL :DWORD IoFreeMdl PROTO STDCALL :DWORD IoFreeWorkItem PROTO STDCALL :DWORD IoGetAttachedDevice PROTO STDCALL :DWORD IoGetAttachedDeviceReference PROTO STDCALL :DWORD IoGetBaseFileSystemDeviceObject PROTO STDCALL :DWORD IoGetBootDiskInformation PROTO STDCALL :DWORD,:DWORD IoGetConfigurationInformation PROTO STDCALL IoGetCurrentProcess PROTO STDCALL IoGetDeviceAttachmentBaseRef PROTO STDCALL :DWORD IoGetDeviceInterfaceAlias PROTO STDCALL :DWORD,:DWORD,:DWORD IoGetDeviceInterfaces PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoGetDeviceObjectPointer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoGetDeviceProperty PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoGetDeviceToVerify PROTO STDCALL :DWORD IoGetDiskDeviceObject PROTO STDCALL :DWORD,:DWORD IoGetDmaAdapter PROTO STDCALL :DWORD,:DWORD,:DWORD IoGetDriverObjectExtension PROTO STDCALL :DWORD,:DWORD IoGetFileObjectGenericMapping PROTO STDCALL IoGetInitialStack PROTO STDCALL IoGetLowerDeviceObject PROTO STDCALL :DWORD IoGetRelatedDeviceObject PROTO STDCALL :DWORD IoGetRequestorProcess PROTO STDCALL :DWORD IoGetRequestorProcessId PROTO STDCALL :DWORD IoGetRequestorSessionId PROTO STDCALL :DWORD,:DWORD IoGetStackLimits PROTO STDCALL :DWORD,:DWORD IoGetTopLevelIrp PROTO STDCALL IoInitializeIrp PROTO STDCALL :DWORD,:DWORD,:DWORD IoInitializeRemoveLockEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoInitializeTimer PROTO STDCALL :DWORD,:DWORD,:DWORD IoInvalidateDeviceRelations PROTO STDCALL :DWORD,:DWORD IoInvalidateDeviceState PROTO STDCALL :DWORD IoIsFileOriginRemote PROTO STDCALL :DWORD IoIsOperationSynchronous PROTO STDCALL :DWORD IoIsSystemThread PROTO STDCALL :DWORD IoIsValidNameGraftingBuffer PROTO STDCALL :DWORD,:DWORD IoIsWdmVersionAvailable PROTO STDCALL :DWORD,:DWORD IoMakeAssociatedIrp PROTO STDCALL :DWORD,:DWORD IoOpenDeviceInterfaceRegistryKey PROTO STDCALL :DWORD,:DWORD,:DWORD IoOpenDeviceRegistryKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoPageRead PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoPnPDeliverServicePowerNotification PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoQueryDeviceDescription PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoQueryFileDosDeviceName PROTO STDCALL :DWORD,:DWORD IoQueryFileInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoQueryVolumeInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoQueueThreadIrp PROTO STDCALL :DWORD IoQueueWorkItem PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoRaiseHardError PROTO STDCALL :DWORD,:DWORD,:DWORD IoRaiseInformationalHardError PROTO STDCALL :DWORD,:DWORD,:DWORD IoReadDiskSignature PROTO STDCALL :DWORD,:DWORD,:DWORD IoReadOperationCount PROTO C :VARARG IoReadPartitionTableEx PROTO STDCALL :DWORD,:DWORD IoReadTransferCount PROTO C :VARARG IoRegisterBootDriverReinitialization PROTO STDCALL :DWORD,:DWORD,:DWORD IoRegisterDeviceInterface PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoRegisterDriverReinitialization PROTO STDCALL :DWORD,:DWORD,:DWORD IoRegisterFileSystem PROTO STDCALL :DWORD IoRegisterFsRegistrationChange PROTO STDCALL :DWORD,:DWORD IoRegisterLastChanceShutdownNotification PROTO STDCALL :DWORD IoRegisterPlugPlayNotification PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoRegisterShutdownNotification PROTO STDCALL :DWORD IoReleaseCancelSpinLock PROTO STDCALL :DWORD IoReleaseRemoveLockAndWaitEx PROTO STDCALL :DWORD,:DWORD,:DWORD IoReleaseRemoveLockEx PROTO STDCALL :DWORD,:DWORD,:DWORD IoReleaseVpbSpinLock PROTO STDCALL :DWORD IoRemoveShareAccess PROTO STDCALL :DWORD,:DWORD IoReportDetectedDevice PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoReportHalResourceUsage PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoReportResourceForDetection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoReportResourceUsage PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoReportTargetDeviceChange PROTO STDCALL :DWORD,:DWORD IoReportTargetDeviceChangeAsynchronous PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoRequestDeviceEject PROTO STDCALL :DWORD IoReuseIrp PROTO STDCALL :DWORD,:DWORD IoSetCompletionRoutineEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoSetDeviceInterfaceState PROTO STDCALL :DWORD,:DWORD IoSetDeviceToVerify PROTO STDCALL :DWORD,:DWORD IoSetFileOrigin PROTO STDCALL :DWORD,:DWORD IoSetHardErrorOrVerifyDevice PROTO STDCALL :DWORD,:DWORD IoSetInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoSetIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoSetPartitionInformationEx PROTO STDCALL :DWORD,:DWORD,:DWORD IoSetShareAccess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoSetStartIoAttributes PROTO STDCALL :DWORD,:DWORD,:DWORD IoSetSystemPartition PROTO STDCALL :DWORD IoSetThreadHardErrorMode PROTO STDCALL :DWORD IoSetTopLevelIrp PROTO STDCALL :DWORD IoStartNextPacket PROTO STDCALL :DWORD,:DWORD IoStartNextPacketByKey PROTO STDCALL :DWORD,:DWORD,:DWORD IoStartPacket PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoStartTimer PROTO STDCALL :DWORD IoStatisticsLock PROTO C :VARARG IoStopTimer PROTO STDCALL :DWORD IoSynchronousInvalidateDeviceRelations PROTO STDCALL :DWORD,:DWORD IoSynchronousPageWrite PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoThreadToProcess PROTO STDCALL :DWORD IoUnregisterFileSystem PROTO STDCALL :DWORD IoUnregisterFsRegistrationChange PROTO STDCALL :DWORD,:DWORD IoUnregisterPlugPlayNotification PROTO STDCALL :DWORD IoUnregisterShutdownNotification PROTO STDCALL :DWORD IoUpdateShareAccess PROTO STDCALL :DWORD,:DWORD IoValidateDeviceIoControlAccess PROTO STDCALL :DWORD,:DWORD IoVerifyPartitionTable PROTO STDCALL :DWORD,:DWORD IoVerifyVolume PROTO STDCALL :DWORD,:DWORD IoVolumeDeviceToDosName PROTO STDCALL :DWORD,:DWORD IoWMIAllocateInstanceIds PROTO STDCALL :DWORD,:DWORD,:DWORD IoWMIDeviceObjectToInstanceName PROTO STDCALL :DWORD,:DWORD,:DWORD IoWMIExecuteMethod PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoWMIHandleToInstanceName PROTO STDCALL :DWORD,:DWORD,:DWORD IoWMIOpenBlock PROTO STDCALL :DWORD,:DWORD,:DWORD IoWMIQueryAllData PROTO STDCALL :DWORD,:DWORD,:DWORD IoWMIQueryAllDataMultiple PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoWMIQuerySingleInstance PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoWMIQuerySingleInstanceMultiple PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoWMIRegistrationControl PROTO STDCALL :DWORD,:DWORD IoWMISetNotificationCallback PROTO STDCALL :DWORD,:DWORD,:DWORD IoWMISetSingleInstance PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoWMISetSingleItem PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD IoWMISuggestInstanceName PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IoWMIWriteEvent PROTO STDCALL :DWORD IoWriteErrorLogEntry PROTO STDCALL :DWORD IoWriteOperationCount PROTO C :VARARG IoWritePartitionTableEx PROTO STDCALL :DWORD,:DWORD IoWriteTransferCount PROTO C :VARARG KdDebuggerEnabled PROTO C :VARARG KdDebuggerNotPresent PROTO C :VARARG KdDisableDebugger PROTO STDCALL KdEnableDebugger PROTO STDCALL KdEnteredDebugger PROTO C :VARARG KdPollBreakIn PROTO STDCALL KdPowerTransition PROTO STDCALL :DWORD Ke386CallBios PROTO STDCALL :DWORD,:DWORD Ke386IoSetAccessProcess PROTO STDCALL :DWORD,:DWORD Ke386QueryIoAccessMap PROTO STDCALL :DWORD,:DWORD Ke386SetIoAccessMap PROTO STDCALL :DWORD,:DWORD KeAcquireInterruptSpinLock PROTO STDCALL :DWORD KeAcquireSpinLockAtDpcLevel PROTO STDCALL :DWORD KeAddSystemServiceTable PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD KeAreApcsDisabled PROTO STDCALL KeAttachProcess PROTO STDCALL :DWORD KeBugCheck PROTO STDCALL :DWORD KeBugCheckEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD KeCancelTimer PROTO STDCALL :DWORD KeCapturePersistentThreadState PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD KeClearEvent PROTO STDCALL :DWORD KeConnectInterrupt PROTO STDCALL :DWORD KeDcacheFlushCount PROTO C :VARARG KeDelayExecutionThread PROTO STDCALL :DWORD,:DWORD,:DWORD KeDeregisterBugCheckCallback PROTO STDCALL :DWORD KeDeregisterBugCheckReasonCallback PROTO STDCALL :DWORD KeDetachProcess PROTO STDCALL KeDisconnectInterrupt PROTO STDCALL :DWORD KeEnterCriticalRegion PROTO STDCALL KeEnterKernelDebugger PROTO STDCALL KeFindConfigurationEntry PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD KeFindConfigurationNextEntry PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD KeFlushEntireTb PROTO STDCALL :DWORD,:DWORD KeFlushQueuedDpcs PROTO STDCALL KeGetCurrentThread PROTO STDCALL KeGetPreviousMode PROTO STDCALL KeGetRecommendedSharedDataAlignment PROTO STDCALL KeI386AbiosCall PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD KeI386AllocateGdtSelectors PROTO STDCALL :DWORD,:DWORD KeI386Call16BitCStyleFunction PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD KeI386Call16BitFunction PROTO STDCALL :DWORD KeI386FlatToGdtSelector PROTO STDCALL :DWORD,:DWORD,:DWORD KeI386GetLid PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD KeI386MachineType PROTO C :VARARG KeI386ReleaseGdtSelectors PROTO STDCALL :DWORD,:DWORD KeI386ReleaseLid PROTO STDCALL :DWORD,:DWORD KeI386SetGdtSelector PROTO STDCALL :DWORD,:DWORD KeIcacheFlushCount PROTO C :VARARG KeInitializeApc PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD KeInitializeDeviceQueue PROTO STDCALL :DWORD KeInitializeDpc PROTO STDCALL :DWORD,:DWORD,:DWORD KeInitializeEvent PROTO STDCALL :DWORD,:DWORD,:DWORD KeInitializeInterrupt PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD KeInitializeMutant PROTO STDCALL :DWORD,:DWORD KeInitializeMutex PROTO STDCALL :DWORD,:DWORD KeInitializeQueue PROTO STDCALL :DWORD,:DWORD KeInitializeSemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD KeInitializeSpinLock PROTO STDCALL :DWORD KeInitializeTimer PROTO STDCALL :DWORD KeInitializeTimerEx PROTO STDCALL :DWORD,:DWORD KeInsertByKeyDeviceQueue PROTO STDCALL :DWORD,:DWORD,:DWORD KeInsertDeviceQueue PROTO STDCALL :DWORD,:DWORD KeInsertHeadQueue PROTO STDCALL :DWORD,:DWORD KeInsertQueue PROTO STDCALL :DWORD,:DWORD KeInsertQueueApc PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD KeInsertQueueDpc PROTO STDCALL :DWORD,:DWORD,:DWORD KeIsAttachedProcess PROTO STDCALL KeIsExecutingDpc PROTO STDCALL KeLeaveCriticalRegion PROTO STDCALL KeLoaderBlock PROTO C :VARARG KeNumberProcessors PROTO C :VARARG KeProfileInterrupt PROTO STDCALL :DWORD KeProfileInterruptWithSource PROTO STDCALL :DWORD,:DWORD KePulseEvent PROTO STDCALL :DWORD,:DWORD,:DWORD KeQueryActiveProcessors PROTO STDCALL KeQueryInterruptTime PROTO STDCALL KeQueryPriorityThread PROTO STDCALL :DWORD KeQueryRuntimeThread PROTO STDCALL :DWORD,:DWORD KeQuerySystemTime PROTO STDCALL :DWORD KeQueryTickCount PROTO STDCALL :DWORD KeQueryTimeIncrement PROTO STDCALL KeRaiseUserException PROTO STDCALL :DWORD KeReadStateEvent PROTO STDCALL :DWORD KeReadStateMutant PROTO STDCALL :DWORD KeReadStateMutex PROTO STDCALL :DWORD KeReadStateQueue PROTO STDCALL :DWORD KeReadStateSemaphore PROTO STDCALL :DWORD KeReadStateTimer PROTO STDCALL :DWORD KeRegisterBugCheckCallback PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD KeRegisterBugCheckReasonCallback PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD KeReleaseInterruptSpinLock PROTO STDCALL :DWORD,:DWORD KeReleaseMutant PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD KeReleaseMutex PROTO STDCALL :DWORD,:DWORD KeReleaseSemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD KeReleaseSpinLockFromDpcLevel PROTO STDCALL :DWORD KeRemoveByKeyDeviceQueue PROTO STDCALL :DWORD,:DWORD KeRemoveByKeyDeviceQueueIfBusy PROTO STDCALL :DWORD,:DWORD KeRemoveDeviceQueue PROTO STDCALL :DWORD KeRemoveEntryDeviceQueue PROTO STDCALL :DWORD,:DWORD KeRemoveQueue PROTO STDCALL :DWORD,:DWORD,:DWORD KeRemoveQueueDpc PROTO STDCALL :DWORD KeRemoveSystemServiceTable PROTO STDCALL :DWORD KeResetEvent PROTO STDCALL :DWORD KeRestoreFloatingPointState PROTO STDCALL :DWORD KeRevertToUserAffinityThread PROTO STDCALL KeRundownQueue PROTO STDCALL :DWORD KeSaveFloatingPointState PROTO STDCALL :DWORD KeSaveStateForHibernate PROTO C :VARARG KeServiceDescriptorTable PROTO C :VARARG KeSetAffinityThread PROTO STDCALL :DWORD,:DWORD KeSetBasePriorityThread PROTO STDCALL :DWORD,:DWORD KeSetDmaIoCoherency PROTO STDCALL :DWORD KeSetEvent PROTO STDCALL :DWORD,:DWORD,:DWORD KeSetEventBoostPriority PROTO STDCALL :DWORD,:DWORD KeSetIdealProcessorThread PROTO STDCALL :DWORD,:DWORD KeSetImportanceDpc PROTO STDCALL :DWORD,:DWORD KeSetKernelStackSwapEnable PROTO STDCALL :DWORD KeSetPriorityThread PROTO STDCALL :DWORD,:DWORD KeSetProfileIrql PROTO STDCALL :DWORD KeSetSystemAffinityThread PROTO STDCALL :DWORD KeSetTargetProcessorDpc PROTO STDCALL :DWORD,:DWORD KeSetTimeIncrement PROTO STDCALL :DWORD,:DWORD KeSetTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD KeSetTimerEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD KeStackAttachProcess PROTO STDCALL :DWORD,:DWORD KeSynchronizeExecution PROTO STDCALL :DWORD,:DWORD,:DWORD KeTerminateThread PROTO STDCALL :DWORD KeTickCount PROTO C :VARARG KeUnstackDetachProcess PROTO STDCALL :DWORD KeUpdateRunTime PROTO STDCALL :DWORD KeUpdateSystemTime PROTO STDCALL KeUserModeCallback PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD KeWaitForMultipleObjects PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD KeWaitForMutexObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD KeWaitForSingleObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD KiBugCheckData PROTO C :VARARG KiCoprocessorError PROTO STDCALL KiDeliverApc PROTO STDCALL :DWORD,:DWORD,:DWORD KiDispatchInterrupt PROTO STDCALL KiEnableTimerWatchdog PROTO C :VARARG KiIpiServiceRoutine PROTO STDCALL :DWORD,:DWORD KiUnexpectedInterrupt PROTO C :VARARG LdrAccessResource PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD LdrEnumResources PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD LdrFindResourceDirectory_U PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD LdrFindResource_U PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD LpcPortObjectType PROTO C :VARARG LpcRequestPort PROTO STDCALL :DWORD,:DWORD LpcRequestWaitReplyPort PROTO STDCALL :DWORD,:DWORD,:DWORD LsaCallAuthenticationPackage PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD LsaDeregisterLogonProcess PROTO STDCALL :DWORD LsaFreeReturnBuffer PROTO STDCALL :DWORD LsaLogonUser PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD LsaLookupAuthenticationPackage PROTO STDCALL :DWORD,:DWORD,:DWORD LsaRegisterLogonProcess PROTO STDCALL :DWORD,:DWORD,:DWORD Mm64BitPhysicalAddress PROTO C :VARARG MmAddPhysicalMemory PROTO STDCALL :DWORD,:DWORD MmAddVerifierThunks PROTO STDCALL :DWORD,:DWORD MmAdjustWorkingSetSize PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD MmAdvanceMdl PROTO STDCALL :DWORD,:DWORD MmAllocateContiguousMemory PROTO STDCALL :DWORD,:DWORD,:DWORD MmAllocateContiguousMemorySpecifyCache PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD MmAllocateMappingAddress PROTO STDCALL :DWORD,:DWORD MmAllocateNonCachedMemory PROTO STDCALL :DWORD MmAllocatePagesForMdl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD MmBuildMdlForNonPagedPool PROTO STDCALL :DWORD MmCanFileBeTruncated PROTO STDCALL :DWORD,:DWORD MmCommitSessionMappedView PROTO STDCALL :DWORD,:DWORD MmCreateMdl PROTO STDCALL :DWORD,:DWORD,:DWORD MmCreateSection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD MmDisableModifiedWriteOfSection PROTO STDCALL :DWORD MmFlushImageSection PROTO STDCALL :DWORD,:DWORD MmForceSectionClosed PROTO STDCALL :DWORD,:DWORD MmFreeContiguousMemory PROTO STDCALL :DWORD MmFreeContiguousMemorySpecifyCache PROTO STDCALL :DWORD,:DWORD,:DWORD MmFreeMappingAddress PROTO STDCALL :DWORD,:DWORD MmFreeNonCachedMemory PROTO STDCALL :DWORD,:DWORD MmFreePagesFromMdl PROTO STDCALL :DWORD MmGetPhysicalAddress PROTO STDCALL :DWORD MmGetPhysicalMemoryRanges PROTO STDCALL MmGetSystemRoutineAddress PROTO STDCALL :DWORD MmGetVirtualForPhysical PROTO STDCALL :DWORD,:DWORD MmGrowKernelStack PROTO STDCALL :DWORD MmHighestUserAddress PROTO C :VARARG MmIsAddressValid PROTO STDCALL :DWORD MmIsDriverVerifying PROTO STDCALL :DWORD MmIsNonPagedSystemAddressValid PROTO STDCALL :DWORD MmIsRecursiveIoFault PROTO STDCALL MmIsThisAnNtAsSystem PROTO STDCALL MmIsVerifierEnabled PROTO STDCALL :DWORD MmLockPagableDataSection PROTO STDCALL :DWORD MmLockPagableImageSection PROTO STDCALL :DWORD MmLockPagableSectionByHandle PROTO STDCALL :DWORD MmMapIoSpace PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD MmMapLockedPages PROTO STDCALL :DWORD,:DWORD MmMapLockedPagesSpecifyCache PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD MmMapLockedPagesWithReservedMapping PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD MmMapMemoryDumpMdl PROTO STDCALL :DWORD MmMapUserAddressesToPage PROTO STDCALL :DWORD,:DWORD,:DWORD MmMapVideoDisplay PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD MmMapViewInSessionSpace PROTO STDCALL :DWORD,:DWORD,:DWORD MmMapViewInSystemSpace PROTO STDCALL :DWORD,:DWORD,:DWORD MmMapViewOfSection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD MmMarkPhysicalMemoryAsBad PROTO STDCALL :DWORD,:DWORD MmMarkPhysicalMemoryAsGood PROTO STDCALL :DWORD,:DWORD MmPageEntireDriver PROTO STDCALL :DWORD MmPrefetchPages PROTO STDCALL :DWORD,:DWORD MmProbeAndLockPages PROTO STDCALL :DWORD,:DWORD,:DWORD MmProbeAndLockProcessPages PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD MmProbeAndLockSelectedPages PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD MmProtectMdlSystemAddress PROTO STDCALL :DWORD,:DWORD MmQuerySystemSize PROTO STDCALL MmRemovePhysicalMemory PROTO STDCALL :DWORD,:DWORD MmResetDriverPaging PROTO STDCALL :DWORD MmSectionObjectType PROTO C :VARARG MmSecureVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD MmSetAddressRangeModified PROTO STDCALL :DWORD,:DWORD MmSetBankedSection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD MmSizeOfMdl PROTO STDCALL :DWORD,:DWORD MmSystemRangeStart PROTO C :VARARG MmTrimAllSystemPagableMemory PROTO STDCALL :DWORD MmUnlockPagableImageSection PROTO STDCALL :DWORD MmUnlockPages PROTO STDCALL :DWORD MmUnmapIoSpace PROTO STDCALL :DWORD,:DWORD MmUnmapLockedPages PROTO STDCALL :DWORD,:DWORD MmUnmapReservedMapping PROTO STDCALL :DWORD,:DWORD,:DWORD MmUnmapVideoDisplay PROTO STDCALL :DWORD,:DWORD MmUnmapViewInSessionSpace PROTO STDCALL :DWORD MmUnmapViewInSystemSpace PROTO STDCALL :DWORD MmUnmapViewOfSection PROTO STDCALL :DWORD,:DWORD MmUnsecureVirtualMemory PROTO STDCALL :DWORD MmUserProbeAddress PROTO C :VARARG NlsAnsiCodePage PROTO C :VARARG NlsLeadByteInfo PROTO C :VARARG NlsMbCodePageTag PROTO C :VARARG NlsMbOemCodePageTag PROTO C :VARARG NlsOemCodePage PROTO C :VARARG NlsOemLeadByteInfo PROTO C :VARARG NtAddAtom PROTO STDCALL :DWORD,:DWORD,:DWORD NtAdjustPrivilegesToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtAllocateLocallyUniqueId PROTO STDCALL :DWORD NtAllocateUuids PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtAllocateVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtBuildNumber PROTO C :VARARG NtClose PROTO STDCALL :DWORD NtConnectPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCreateEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCreateFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtCreateSection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtDeleteAtom PROTO STDCALL :DWORD NtDeleteFile PROTO STDCALL :DWORD NtDeviceIoControlFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtDuplicateObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtDuplicateToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtFindAtom PROTO STDCALL :DWORD,:DWORD,:DWORD NtFreeVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtFsControlFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtGlobalFlag PROTO C :VARARG NtLockFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtMakePermanentObject PROTO STDCALL :DWORD NtMapViewOfSection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtNotifyChangeDirectoryFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtOpenFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtOpenProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtOpenProcessToken PROTO STDCALL :DWORD,:DWORD,:DWORD NtOpenProcessTokenEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtOpenThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtOpenThreadToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtOpenThreadTokenEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryDirectoryFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryEaFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryInformationAtom PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryInformationProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryInformationThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryInformationToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQueryQuotaInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQuerySecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtQuerySystemInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtQueryVolumeInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtReadFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtRequestPort PROTO STDCALL :DWORD,:DWORD NtRequestWaitReplyPort PROTO STDCALL :DWORD,:DWORD,:DWORD NtSetEaFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtSetEvent PROTO STDCALL :DWORD,:DWORD NtSetInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtSetInformationProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtSetInformationThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtSetQuotaInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtSetSecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD NtSetVolumeInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtShutdownSystem PROTO STDCALL :DWORD NtTraceEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD NtUnlockFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD NtVdmControl PROTO STDCALL :DWORD,:DWORD NtWaitForSingleObject PROTO STDCALL :DWORD,:DWORD,:DWORD NtWriteFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ObAssignSecurity PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ObCheckCreateObjectAccess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ObCheckObjectAccess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ObCloseHandle PROTO STDCALL :DWORD,:DWORD ObCreateObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ObCreateObjectType PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ObDereferenceObject PROTO STDCALL :DWORD ObDereferenceSecurityDescriptor PROTO STDCALL :DWORD,:DWORD ObFindHandleForObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ObGetObjectSecurity PROTO STDCALL :DWORD,:DWORD,:DWORD ObInsertObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ObLogSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD ObMakeTemporaryObject PROTO STDCALL :DWORD ObOpenObjectByName PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ObOpenObjectByPointer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ObQueryNameString PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ObQueryObjectAuditingByHandle PROTO STDCALL :DWORD,:DWORD ObReferenceObjectByHandle PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ObReferenceObjectByName PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ObReferenceObjectByPointer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ObReferenceSecurityDescriptor PROTO STDCALL :DWORD,:DWORD ObReleaseObjectSecurity PROTO STDCALL :DWORD,:DWORD ObSetHandleAttributes PROTO STDCALL :DWORD,:DWORD,:DWORD ObSetSecurityDescriptorInfo PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ObSetSecurityObjectByPointer PROTO STDCALL :DWORD,:DWORD,:DWORD PfxFindPrefix PROTO STDCALL :DWORD,:DWORD PfxInitialize PROTO STDCALL :DWORD PfxInsertPrefix PROTO STDCALL :DWORD,:DWORD,:DWORD PfxRemovePrefix PROTO STDCALL :DWORD,:DWORD PoCallDriver PROTO STDCALL :DWORD,:DWORD PoCancelDeviceNotify PROTO STDCALL :DWORD PoQueueShutdownWorkItem PROTO STDCALL :DWORD PoRegisterDeviceForIdleDetection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD PoRegisterDeviceNotify PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD PoRegisterSystemState PROTO STDCALL :DWORD,:DWORD PoRequestPowerIrp PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD PoRequestShutdownEvent PROTO STDCALL :DWORD PoSetHiberRange PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD PoSetPowerState PROTO STDCALL :DWORD,:DWORD,:DWORD PoSetSystemState PROTO STDCALL :DWORD PoShutdownBugCheck PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD PoStartNextPowerIrp PROTO STDCALL :DWORD PoUnregisterSystemState PROTO STDCALL :DWORD ProbeForRead PROTO STDCALL :DWORD,:DWORD,:DWORD ProbeForWrite PROTO STDCALL :DWORD,:DWORD,:DWORD PsAssignImpersonationToken PROTO STDCALL :DWORD,:DWORD PsChargePoolQuota PROTO STDCALL :DWORD,:DWORD,:DWORD PsChargeProcessNonPagedPoolQuota PROTO STDCALL :DWORD,:DWORD PsChargeProcessPagedPoolQuota PROTO STDCALL :DWORD,:DWORD PsChargeProcessPoolQuota PROTO STDCALL :DWORD,:DWORD,:DWORD PsCreateSystemProcess PROTO STDCALL :DWORD,:DWORD,:DWORD PsCreateSystemThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD PsDereferenceImpersonationToken PROTO STDCALL :DWORD PsDereferencePrimaryToken PROTO STDCALL :DWORD PsDisableImpersonation PROTO STDCALL :DWORD,:DWORD PsEstablishWin32Callouts PROTO STDCALL :DWORD PsGetContextThread PROTO STDCALL :DWORD,:DWORD,:DWORD PsGetCurrentProcess PROTO STDCALL PsGetCurrentProcessId PROTO STDCALL PsGetCurrentProcessSessionId PROTO STDCALL PsGetCurrentThread PROTO STDCALL PsGetCurrentThreadId PROTO STDCALL PsGetCurrentThreadPreviousMode PROTO STDCALL PsGetCurrentThreadStackBase PROTO STDCALL PsGetCurrentThreadStackLimit PROTO STDCALL PsGetJobLock PROTO STDCALL :DWORD PsGetJobSessionId PROTO STDCALL :DWORD PsGetJobUIRestrictionsClass PROTO STDCALL :DWORD PsGetProcessCreateTimeQuadPart PROTO STDCALL :DWORD PsGetProcessDebugPort PROTO STDCALL :DWORD PsGetProcessExitProcessCalled PROTO STDCALL :DWORD PsGetProcessExitStatus PROTO STDCALL :DWORD PsGetProcessExitTime PROTO STDCALL PsGetProcessId PROTO STDCALL :DWORD PsGetProcessImageFileName PROTO STDCALL :DWORD PsGetProcessInheritedFromUniqueProcessId PROTO STDCALL :DWORD PsGetProcessJob PROTO STDCALL :DWORD PsGetProcessPeb PROTO STDCALL :DWORD PsGetProcessPriorityClass PROTO STDCALL :DWORD PsGetProcessSectionBaseAddress PROTO STDCALL :DWORD PsGetProcessSecurityPort PROTO STDCALL :DWORD PsGetProcessSessionId PROTO STDCALL :DWORD PsGetProcessWin32Process PROTO STDCALL :DWORD PsGetProcessWin32WindowStation PROTO STDCALL :DWORD PsGetThreadFreezeCount PROTO STDCALL :DWORD PsGetThreadHardErrorsAreDisabled PROTO STDCALL :DWORD PsGetThreadId PROTO STDCALL :DWORD PsGetThreadProcess PROTO STDCALL :DWORD PsGetThreadProcessId PROTO STDCALL :DWORD PsGetThreadSessionId PROTO STDCALL :DWORD PsGetThreadTeb PROTO STDCALL :DWORD PsGetThreadWin32Thread PROTO STDCALL :DWORD PsGetVersion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD PsImpersonateClient PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD PsInitialSystemProcess PROTO C :VARARG PsIsProcessBeingDebugged PROTO STDCALL :DWORD PsIsSystemThread PROTO STDCALL :DWORD PsIsThreadImpersonating PROTO STDCALL :DWORD PsIsThreadTerminating PROTO STDCALL :DWORD PsJobType PROTO C :VARARG PsLookupProcessByProcessId PROTO STDCALL :DWORD,:DWORD PsLookupProcessThreadByCid PROTO STDCALL :DWORD,:DWORD,:DWORD PsLookupThreadByThreadId PROTO STDCALL :DWORD,:DWORD PsProcessType PROTO C :VARARG PsReferenceImpersonationToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD PsReferencePrimaryToken PROTO STDCALL :DWORD PsRemoveCreateThreadNotifyRoutine PROTO STDCALL :DWORD PsRemoveLoadImageNotifyRoutine PROTO STDCALL :DWORD PsRestoreImpersonation PROTO STDCALL :DWORD,:DWORD PsReturnPoolQuota PROTO STDCALL :DWORD,:DWORD,:DWORD PsReturnProcessNonPagedPoolQuota PROTO STDCALL :DWORD,:DWORD PsReturnProcessPagedPoolQuota PROTO STDCALL :DWORD,:DWORD PsRevertThreadToSelf PROTO STDCALL :DWORD PsRevertToSelf PROTO STDCALL PsSetContextThread PROTO STDCALL :DWORD,:DWORD,:DWORD PsSetCreateProcessNotifyRoutine PROTO STDCALL :DWORD,:DWORD PsSetCreateThreadNotifyRoutine PROTO STDCALL :DWORD PsSetJobUIRestrictionsClass PROTO STDCALL :DWORD,:DWORD PsSetLegoNotifyRoutine PROTO STDCALL :DWORD PsSetLoadImageNotifyRoutine PROTO STDCALL :DWORD PsSetProcessPriorityByClass PROTO STDCALL :DWORD,:DWORD PsSetProcessPriorityClass PROTO STDCALL :DWORD,:DWORD PsSetProcessSecurityPort PROTO STDCALL :DWORD,:DWORD PsSetProcessWin32Process PROTO STDCALL :DWORD,:DWORD,:DWORD PsSetProcessWindowStation PROTO STDCALL :DWORD,:DWORD PsSetThreadHardErrorsAreDisabled PROTO STDCALL :DWORD,:DWORD PsSetThreadWin32Thread PROTO STDCALL :DWORD,:DWORD,:DWORD PsTerminateSystemThread PROTO STDCALL :DWORD PsThreadType PROTO C :VARARG READ_REGISTER_BUFFER_UCHAR PROTO STDCALL :DWORD,:DWORD,:DWORD READ_REGISTER_BUFFER_ULONG PROTO STDCALL :DWORD,:DWORD,:DWORD READ_REGISTER_BUFFER_USHORT PROTO STDCALL :DWORD,:DWORD,:DWORD READ_REGISTER_UCHAR PROTO STDCALL :DWORD READ_REGISTER_ULONG PROTO STDCALL :DWORD READ_REGISTER_USHORT PROTO STDCALL :DWORD RtlAbsoluteToSelfRelativeSD PROTO STDCALL :DWORD,:DWORD,:DWORD RtlAddAccessAllowedAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlAddAccessAllowedAceEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAddAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAddAtomToAtomTable PROTO STDCALL :DWORD,:DWORD,:DWORD RtlAddRange PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlAllocateHeap PROTO STDCALL :DWORD,:DWORD,:DWORD RtlAnsiCharToUnicodeChar PROTO STDCALL :DWORD RtlAnsiStringToUnicodeSize PROTO STDCALL :DWORD RtlAnsiStringToUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlAppendAsciizToString PROTO STDCALL :DWORD,:DWORD RtlAppendStringToString PROTO STDCALL :DWORD,:DWORD RtlAppendUnicodeStringToString PROTO STDCALL :DWORD,:DWORD RtlAppendUnicodeToString PROTO STDCALL :DWORD,:DWORD RtlAreAllAccessesGranted PROTO STDCALL :DWORD,:DWORD RtlAreAnyAccessesGranted PROTO STDCALL :DWORD,:DWORD RtlAreBitsClear PROTO STDCALL :DWORD,:DWORD,:DWORD RtlAreBitsSet PROTO STDCALL :DWORD,:DWORD,:DWORD RtlAssert PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlCaptureContext PROTO STDCALL :DWORD RtlCaptureStackBackTrace PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlCharToInteger PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCheckRegistryKey PROTO STDCALL :DWORD,:DWORD RtlClearAllBits PROTO STDCALL :DWORD RtlClearBit PROTO STDCALL :DWORD,:DWORD RtlClearBits PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCompareMemory PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCompareMemoryUlong PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCompareString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCompareUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCompressBuffer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlCompressChunks PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlConvertLongToLargeInteger PROTO STDCALL :DWORD RtlConvertSidToUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlConvertUlongToLargeInteger PROTO STDCALL :DWORD RtlCopyLuid PROTO STDCALL :DWORD,:DWORD RtlCopyRangeList PROTO STDCALL :DWORD,:DWORD RtlCopySid PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCopyString PROTO STDCALL :DWORD,:DWORD RtlCopyUnicodeString PROTO STDCALL :DWORD,:DWORD RtlCreateAcl PROTO STDCALL :DWORD,:DWORD,:DWORD RtlCreateAtomTable PROTO STDCALL :DWORD,:DWORD RtlCreateHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlCreateRegistryKey PROTO STDCALL :DWORD,:DWORD RtlCreateSecurityDescriptor PROTO STDCALL :DWORD,:DWORD RtlCreateSystemVolumeInformationFolder PROTO STDCALL :DWORD RtlCreateUnicodeString PROTO STDCALL :DWORD,:DWORD RtlCustomCPToUnicodeN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlDecompressBuffer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlDecompressChunks PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlDecompressFragment PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlDelete PROTO STDCALL :DWORD RtlDeleteAce PROTO STDCALL :DWORD,:DWORD RtlDeleteAtomFromAtomTable PROTO STDCALL :DWORD,:DWORD RtlDeleteElementGenericTable PROTO STDCALL :DWORD,:DWORD RtlDeleteElementGenericTableAvl PROTO STDCALL :DWORD,:DWORD RtlDeleteNoSplay PROTO STDCALL :DWORD,:DWORD RtlDeleteOwnersRanges PROTO STDCALL :DWORD,:DWORD RtlDeleteRange PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlDeleteRegistryValue PROTO STDCALL :DWORD,:DWORD,:DWORD RtlDescribeChunk PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlDestroyAtomTable PROTO STDCALL :DWORD RtlDestroyHeap PROTO STDCALL :DWORD RtlDowncaseUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlEmptyAtomTable PROTO STDCALL :DWORD,:DWORD RtlEnlargedIntegerMultiply PROTO STDCALL :DWORD,:DWORD RtlEnlargedUnsignedDivide PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlEnlargedUnsignedMultiply PROTO STDCALL :DWORD,:DWORD RtlEnumerateGenericTable PROTO STDCALL :DWORD,:DWORD RtlEnumerateGenericTableAvl PROTO STDCALL :DWORD,:DWORD RtlEnumerateGenericTableLikeADirectory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlEnumerateGenericTableWithoutSplaying PROTO STDCALL :DWORD,:DWORD RtlEnumerateGenericTableWithoutSplayingAvl PROTO STDCALL :DWORD,:DWORD RtlEqualLuid PROTO STDCALL :DWORD,:DWORD RtlEqualSid PROTO STDCALL :DWORD,:DWORD RtlEqualString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlEqualUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlExtendedIntegerMultiply PROTO STDCALL :DWORD,:DWORD,:DWORD RtlExtendedLargeIntegerDivide PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlExtendedMagicDivide PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlFillMemory PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFillMemoryUlong PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFindClearBits PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFindClearBitsAndSet PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFindClearRuns PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlFindFirstRunClear PROTO STDCALL :DWORD,:DWORD RtlFindLastBackwardRunClear PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFindLeastSignificantBit PROTO STDCALL :DWORD,:DWORD RtlFindLongestRunClear PROTO STDCALL :DWORD,:DWORD RtlFindMessage PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlFindMostSignificantBit PROTO STDCALL :DWORD,:DWORD RtlFindNextForwardRunClear PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFindRange PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlFindSetBits PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFindSetBitsAndClear PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFindUnicodePrefix PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFormatCurrentUserKeyPath PROTO STDCALL :DWORD RtlFreeAnsiString PROTO STDCALL :DWORD RtlFreeHeap PROTO STDCALL :DWORD,:DWORD,:DWORD RtlFreeOemString PROTO STDCALL :DWORD RtlFreeRangeList PROTO STDCALL :DWORD RtlFreeUnicodeString PROTO STDCALL :DWORD RtlGUIDFromString PROTO STDCALL :DWORD,:DWORD RtlGenerate8dot3Name PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlGetAce PROTO STDCALL :DWORD,:DWORD,:DWORD RtlGetCallersAddress PROTO STDCALL :DWORD,:DWORD RtlGetCompressionWorkSpaceSize PROTO STDCALL :DWORD,:DWORD,:DWORD RtlGetDaclSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlGetDefaultCodePage PROTO STDCALL :DWORD,:DWORD RtlGetElementGenericTable PROTO STDCALL :DWORD,:DWORD RtlGetElementGenericTableAvl PROTO STDCALL :DWORD,:DWORD RtlGetFirstRange PROTO STDCALL :DWORD,:DWORD,:DWORD RtlGetGroupSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD RtlGetNextRange PROTO STDCALL :DWORD,:DWORD,:DWORD RtlGetNtGlobalFlags PROTO STDCALL RtlGetOwnerSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD RtlGetSaclSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlGetSetBootStatusData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlGetVersion PROTO STDCALL :DWORD RtlHashUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlImageDirectoryEntryToData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlImageNtHeader PROTO STDCALL :DWORD RtlInitAnsiString PROTO STDCALL :DWORD,:DWORD RtlInitCodePageTable PROTO STDCALL :DWORD,:DWORD RtlInitString PROTO STDCALL :DWORD,:DWORD RtlInitUnicodeString PROTO STDCALL :DWORD,:DWORD RtlInitializeBitMap PROTO STDCALL :DWORD,:DWORD,:DWORD RtlInitializeGenericTable PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlInitializeGenericTableAvl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlInitializeRangeList PROTO STDCALL :DWORD RtlInitializeSid PROTO STDCALL :DWORD,:DWORD,:DWORD RtlInitializeUnicodePrefix PROTO STDCALL :DWORD RtlInsertElementGenericTable PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlInsertElementGenericTableAvl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlInsertElementGenericTableFull PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlInsertElementGenericTableFullAvl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlInsertUnicodePrefix PROTO STDCALL :DWORD,:DWORD,:DWORD RtlInt64ToUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlIntegerToChar PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlIntegerToUnicode PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlIntegerToUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlInvertRangeList PROTO STDCALL :DWORD,:DWORD RtlIpv4AddressToStringA PROTO STDCALL :DWORD,:DWORD IFNDEF __UNICODE__ RtlIpv4AddressToString equ ENDIF RtlIpv4AddressToStringExA PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IFNDEF __UNICODE__ RtlIpv4AddressToStringEx equ ENDIF RtlIpv4AddressToStringExW PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IFDEF __UNICODE__ RtlIpv4AddressToStringEx equ ENDIF RtlIpv4AddressToStringW PROTO STDCALL :DWORD,:DWORD IFDEF __UNICODE__ RtlIpv4AddressToString equ ENDIF RtlIpv4StringToAddressA PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IFNDEF __UNICODE__ RtlIpv4StringToAddress equ ENDIF RtlIpv4StringToAddressExA PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IFNDEF __UNICODE__ RtlIpv4StringToAddressEx equ ENDIF RtlIpv4StringToAddressExW PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IFDEF __UNICODE__ RtlIpv4StringToAddressEx equ ENDIF RtlIpv4StringToAddressW PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IFDEF __UNICODE__ RtlIpv4StringToAddress equ ENDIF RtlIpv6AddressToStringA PROTO STDCALL :DWORD,:DWORD IFNDEF __UNICODE__ RtlIpv6AddressToString equ ENDIF RtlIpv6AddressToStringExA PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IFNDEF __UNICODE__ RtlIpv6AddressToStringEx equ ENDIF RtlIpv6AddressToStringExW PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD IFDEF __UNICODE__ RtlIpv6AddressToStringEx equ ENDIF RtlIpv6AddressToStringW PROTO STDCALL :DWORD,:DWORD IFDEF __UNICODE__ RtlIpv6AddressToString equ ENDIF RtlIpv6StringToAddressA PROTO STDCALL :DWORD,:DWORD,:DWORD IFNDEF __UNICODE__ RtlIpv6StringToAddress equ ENDIF RtlIpv6StringToAddressExA PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IFNDEF __UNICODE__ RtlIpv6StringToAddressEx equ ENDIF RtlIpv6StringToAddressExW PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD IFDEF __UNICODE__ RtlIpv6StringToAddressEx equ ENDIF RtlIpv6StringToAddressW PROTO STDCALL :DWORD,:DWORD,:DWORD IFDEF __UNICODE__ RtlIpv6StringToAddress equ ENDIF RtlIsGenericTableEmpty PROTO STDCALL :DWORD RtlIsGenericTableEmptyAvl PROTO STDCALL :DWORD RtlIsNameLegalDOS8Dot3 PROTO STDCALL :DWORD,:DWORD,:DWORD RtlIsRangeAvailable PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlIsValidOemCharacter PROTO STDCALL :DWORD RtlLargeIntegerAdd PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlLargeIntegerArithmeticShift PROTO STDCALL :DWORD,:DWORD,:DWORD RtlLargeIntegerDivide PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlLargeIntegerNegate PROTO STDCALL :DWORD,:DWORD RtlLargeIntegerShiftLeft PROTO STDCALL :DWORD,:DWORD,:DWORD RtlLargeIntegerShiftRight PROTO STDCALL :DWORD,:DWORD,:DWORD RtlLargeIntegerSubtract PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlLengthRequiredSid PROTO STDCALL :DWORD RtlLengthSecurityDescriptor PROTO STDCALL :DWORD RtlLengthSid PROTO STDCALL :DWORD RtlLockBootStatusData PROTO STDCALL :DWORD RtlLookupAtomInAtomTable PROTO STDCALL :DWORD,:DWORD,:DWORD RtlLookupElementGenericTable PROTO STDCALL :DWORD,:DWORD RtlLookupElementGenericTableAvl PROTO STDCALL :DWORD,:DWORD RtlLookupElementGenericTableFull PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlLookupElementGenericTableFullAvl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlMapGenericMask PROTO STDCALL :DWORD,:DWORD RtlMapSecurityErrorToNtStatus PROTO STDCALL :DWORD RtlMergeRangeLists PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlMoveMemory PROTO STDCALL :DWORD,:DWORD,:DWORD RtlMultiByteToUnicodeN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlMultiByteToUnicodeSize PROTO STDCALL :DWORD,:DWORD,:DWORD RtlNextUnicodePrefix PROTO STDCALL :DWORD,:DWORD RtlNtStatusToDosError PROTO STDCALL :DWORD RtlNtStatusToDosErrorNoTeb PROTO STDCALL :DWORD RtlNumberGenericTableElements PROTO STDCALL :DWORD RtlNumberGenericTableElementsAvl PROTO STDCALL :DWORD RtlNumberOfClearBits PROTO STDCALL :DWORD RtlNumberOfSetBits PROTO STDCALL :DWORD RtlOemStringToCountedUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlOemStringToUnicodeSize PROTO STDCALL :DWORD RtlOemStringToUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlOemToUnicodeN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlPinAtomInAtomTable PROTO STDCALL :DWORD,:DWORD RtlPrefixString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlPrefixUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlQueryAtomInAtomTable PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlQueryRegistryValues PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlQueryTimeZoneInformation PROTO STDCALL :DWORD RtlRaiseException PROTO STDCALL :DWORD RtlRandom PROTO STDCALL :DWORD RtlRandomEx PROTO STDCALL :DWORD RtlRealPredecessor PROTO STDCALL :DWORD RtlRealSuccessor PROTO STDCALL :DWORD RtlRemoveUnicodePrefix PROTO STDCALL :DWORD,:DWORD RtlReserveChunk PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlSecondsSince1970ToTime PROTO STDCALL :DWORD,:DWORD RtlSecondsSince1980ToTime PROTO STDCALL :DWORD,:DWORD RtlSelfRelativeToAbsoluteSD2 PROTO STDCALL :DWORD,:DWORD RtlSelfRelativeToAbsoluteSD PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlSetAllBits PROTO STDCALL :DWORD RtlSetBit PROTO STDCALL :DWORD,:DWORD RtlSetBits PROTO STDCALL :DWORD,:DWORD,:DWORD RtlSetDaclSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlSetGroupSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD RtlSetOwnerSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD RtlSetSaclSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlSetTimeZoneInformation PROTO STDCALL :DWORD RtlSizeHeap PROTO STDCALL :DWORD,:DWORD,:DWORD RtlSplay PROTO STDCALL :DWORD RtlStringFromGUID PROTO STDCALL :DWORD,:DWORD RtlSubAuthorityCountSid PROTO STDCALL :DWORD RtlSubAuthoritySid PROTO STDCALL :DWORD,:DWORD RtlSubtreePredecessor PROTO STDCALL :DWORD RtlSubtreeSuccessor PROTO STDCALL :DWORD RtlTestBit PROTO STDCALL :DWORD,:DWORD RtlTimeFieldsToTime PROTO STDCALL :DWORD,:DWORD RtlTimeToElapsedTimeFields PROTO STDCALL :DWORD,:DWORD RtlTimeToSecondsSince1970 PROTO STDCALL :DWORD,:DWORD RtlTimeToSecondsSince1980 PROTO STDCALL :DWORD,:DWORD RtlTimeToTimeFields PROTO STDCALL :DWORD,:DWORD RtlTraceDatabaseAdd PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlTraceDatabaseCreate PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlTraceDatabaseDestroy PROTO STDCALL :DWORD RtlTraceDatabaseEnumerate PROTO STDCALL :DWORD,:DWORD,:DWORD RtlTraceDatabaseFind PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlTraceDatabaseLock PROTO STDCALL :DWORD RtlTraceDatabaseUnlock PROTO STDCALL :DWORD RtlTraceDatabaseValidate PROTO STDCALL :DWORD RtlUnicodeStringToAnsiSize PROTO STDCALL :DWORD RtlUnicodeStringToAnsiString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUnicodeStringToCountedOemString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUnicodeStringToInteger PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUnicodeStringToOemSize PROTO STDCALL :DWORD RtlUnicodeStringToOemString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUnicodeToCustomCPN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlUnicodeToMultiByteN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlUnicodeToMultiByteSize PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUnicodeToOemN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlUnlockBootStatusData PROTO STDCALL :DWORD RtlUnwind PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlUpcaseUnicodeChar PROTO STDCALL :DWORD RtlUpcaseUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUpcaseUnicodeStringToAnsiString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUpcaseUnicodeStringToCountedOemString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUpcaseUnicodeStringToOemString PROTO STDCALL :DWORD,:DWORD,:DWORD RtlUpcaseUnicodeToCustomCPN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlUpcaseUnicodeToMultiByteN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlUpcaseUnicodeToOemN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlUpperChar PROTO STDCALL :DWORD RtlUpperString PROTO STDCALL :DWORD,:DWORD RtlValidRelativeSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD RtlValidSecurityDescriptor PROTO STDCALL :DWORD RtlValidSid PROTO STDCALL :DWORD RtlVerifyVersionInfo PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD RtlVolumeDeviceToDosName PROTO STDCALL :DWORD,:DWORD RtlWalkFrameChain PROTO STDCALL :DWORD,:DWORD,:DWORD RtlWriteRegistryValue PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD RtlZeroHeap PROTO STDCALL :DWORD,:DWORD RtlZeroMemory PROTO STDCALL :DWORD,:DWORD RtlxAnsiStringToUnicodeSize PROTO STDCALL :DWORD RtlxOemStringToUnicodeSize PROTO STDCALL :DWORD RtlxUnicodeStringToAnsiSize PROTO STDCALL :DWORD RtlxUnicodeStringToOemSize PROTO STDCALL :DWORD SeAccessCheck PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD SeAppendPrivileges PROTO STDCALL :DWORD,:DWORD SeAssignSecurity PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD SeAssignSecurityEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD SeAuditHardLinkCreation PROTO STDCALL :DWORD,:DWORD,:DWORD SeAuditingFileEvents PROTO STDCALL :DWORD,:DWORD SeAuditingFileEventsWithContext PROTO STDCALL :DWORD,:DWORD,:DWORD SeAuditingFileOrGlobalEvents PROTO STDCALL :DWORD,:DWORD,:DWORD SeAuditingHardLinkEvents PROTO STDCALL :DWORD,:DWORD SeAuditingHardLinkEventsWithContext PROTO STDCALL :DWORD,:DWORD,:DWORD SeCaptureSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD SeCaptureSubjectContext PROTO STDCALL :DWORD SeCloseObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD SeCreateAccessState PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD SeCreateClientSecurity PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD SeCreateClientSecurityFromSubjectContext PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD SeDeassignSecurity PROTO STDCALL :DWORD SeDeleteAccessState PROTO STDCALL :DWORD SeDeleteObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD SeExports PROTO C :VARARG SeFilterToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD SeFreePrivileges PROTO STDCALL :DWORD SeImpersonateClient PROTO STDCALL :DWORD,:DWORD SeImpersonateClientEx PROTO STDCALL :DWORD,:DWORD SeLockSubjectContext PROTO STDCALL :DWORD SeMarkLogonSessionForTerminationNotification PROTO STDCALL :DWORD SeOpenObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD SeOpenObjectForDeleteAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD SePrivilegeCheck PROTO STDCALL :DWORD,:DWORD,:DWORD SePrivilegeObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD SePublicDefaultDacl PROTO C :VARARG SeQueryAuthenticationIdToken PROTO STDCALL :DWORD,:DWORD SeQueryInformationToken PROTO STDCALL :DWORD,:DWORD,:DWORD SeQuerySecurityDescriptorInfo PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD SeQuerySessionIdToken PROTO STDCALL :DWORD,:DWORD SeRegisterLogonSessionTerminatedRoutine PROTO STDCALL :DWORD SeReleaseSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD SeReleaseSubjectContext PROTO STDCALL :DWORD SeSetAccessStateGenericMapping PROTO STDCALL :DWORD,:DWORD SeSetSecurityDescriptorInfo PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD SeSetSecurityDescriptorInfoEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD SeSinglePrivilegeCheck PROTO STDCALL :DWORD,:DWORD,:DWORD SeSystemDefaultDacl PROTO C :VARARG SeTokenImpersonationLevel PROTO STDCALL :DWORD SeTokenIsAdmin PROTO STDCALL :DWORD SeTokenIsRestricted PROTO STDCALL :DWORD SeTokenIsWriteRestricted PROTO STDCALL :DWORD SeTokenObjectType PROTO C :VARARG SeTokenType PROTO STDCALL :DWORD SeUnlockSubjectContext PROTO STDCALL :DWORD SeUnregisterLogonSessionTerminatedRoutine PROTO STDCALL :DWORD SeValidSecurityDescriptor PROTO STDCALL :DWORD,:DWORD VerSetConditionMask PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD VfFailDeviceNode PROTO C :VARARG VfFailDriver PROTO C :VARARG VfFailSystemBIOS PROTO C :VARARG VfIsVerificationEnabled PROTO STDCALL :DWORD,:DWORD WRITE_REGISTER_BUFFER_UCHAR PROTO STDCALL :DWORD,:DWORD,:DWORD WRITE_REGISTER_BUFFER_ULONG PROTO STDCALL :DWORD,:DWORD,:DWORD WRITE_REGISTER_BUFFER_USHORT PROTO STDCALL :DWORD,:DWORD,:DWORD WRITE_REGISTER_UCHAR PROTO STDCALL :DWORD,:DWORD WRITE_REGISTER_ULONG PROTO STDCALL :DWORD,:DWORD WRITE_REGISTER_USHORT PROTO STDCALL :DWORD,:DWORD WmiFlushTrace PROTO STDCALL :DWORD WmiQueryTrace PROTO STDCALL :DWORD WmiQueryTraceInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD WmiStartTrace PROTO STDCALL :DWORD WmiStopTrace PROTO STDCALL :DWORD WmiTraceMessage PROTO C :VARARG WmiTraceMessageVa PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD WmiUpdateTrace PROTO STDCALL :DWORD XIPDispatch PROTO STDCALL :DWORD,:DWORD,:DWORD ZwAccessCheckAndAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwAddBootEntry PROTO STDCALL :DWORD,:DWORD ZwAdjustPrivilegesToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwAlertThread PROTO STDCALL :DWORD ZwAllocateVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwAssignProcessToJobObject PROTO STDCALL :DWORD,:DWORD ZwCancelIoFile PROTO STDCALL :DWORD,:DWORD ZwCancelTimer PROTO STDCALL :DWORD,:DWORD ZwClearEvent PROTO STDCALL :DWORD ZwClose PROTO STDCALL :DWORD ZwCloseObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD ZwConnectPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateDirectoryObject PROTO STDCALL :DWORD,:DWORD,:DWORD ZwCreateEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD ZwCreateKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateSection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwCreateSymbolicLinkObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwCreateTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwDeleteBootEntry PROTO STDCALL :DWORD ZwDeleteFile PROTO STDCALL :DWORD ZwDeleteKey PROTO STDCALL :DWORD ZwDeleteValueKey PROTO STDCALL :DWORD,:DWORD ZwDeviceIoControlFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwDisplayString PROTO STDCALL :DWORD ZwDuplicateObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwDuplicateToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwEnumerateBootEntries PROTO STDCALL :DWORD,:DWORD ZwEnumerateKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwEnumerateValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwFlushInstructionCache PROTO STDCALL :DWORD,:DWORD,:DWORD ZwFlushKey PROTO STDCALL :DWORD ZwFlushVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwFreeVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwFsControlFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwInitiatePowerAction PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwIsProcessInJob PROTO STDCALL :DWORD,:DWORD ZwLoadDriver PROTO STDCALL :DWORD ZwLoadKey PROTO STDCALL :DWORD,:DWORD ZwMakeTemporaryObject PROTO STDCALL :DWORD ZwMapViewOfSection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwNotifyChangeKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwOpenDirectoryObject PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenEvent PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwOpenJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenKey PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwOpenProcessToken PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenProcessTokenEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwOpenSection PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenSymbolicLinkObject PROTO STDCALL :DWORD,:DWORD,:DWORD ZwOpenThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwOpenThreadToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwOpenThreadTokenEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwOpenTimer PROTO STDCALL :DWORD,:DWORD,:DWORD ZwPowerInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwPulseEvent PROTO STDCALL :DWORD,:DWORD ZwQueryBootEntryOrder PROTO STDCALL :DWORD,:DWORD ZwQueryBootOptions PROTO STDCALL :DWORD,:DWORD ZwQueryDefaultLocale PROTO STDCALL :DWORD,:DWORD ZwQueryDefaultUILanguage PROTO STDCALL :DWORD ZwQueryDirectoryFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryDirectoryObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryEaFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryFullAttributesFile PROTO STDCALL :DWORD,:DWORD ZwQueryInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryInformationJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryInformationProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryInformationThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryInformationToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryInstallUILanguage PROTO STDCALL :DWORD ZwQueryKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQuerySection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQuerySecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQuerySymbolicLinkObject PROTO STDCALL :DWORD,:DWORD,:DWORD ZwQuerySystemInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwQueryValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwQueryVolumeInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwReadFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwReplaceKey PROTO STDCALL :DWORD,:DWORD,:DWORD ZwRequestWaitReplyPort PROTO STDCALL :DWORD,:DWORD,:DWORD ZwResetEvent PROTO STDCALL :DWORD,:DWORD ZwRestoreKey PROTO STDCALL :DWORD,:DWORD,:DWORD ZwSaveKey PROTO STDCALL :DWORD,:DWORD ZwSaveKeyEx PROTO STDCALL :DWORD,:DWORD,:DWORD ZwSetBootEntryOrder PROTO STDCALL :DWORD,:DWORD ZwSetBootOptions PROTO STDCALL :DWORD,:DWORD ZwSetDefaultLocale PROTO STDCALL :DWORD,:DWORD ZwSetDefaultUILanguage PROTO STDCALL :DWORD ZwSetEaFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwSetEvent PROTO STDCALL :DWORD,:DWORD ZwSetInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwSetInformationJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwSetInformationObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwSetInformationProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwSetInformationThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwSetSecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD ZwSetSystemInformation PROTO STDCALL :DWORD,:DWORD,:DWORD ZwSetSystemTime PROTO STDCALL :DWORD,:DWORD ZwSetTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwSetValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwSetVolumeInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwTerminateJobObject PROTO STDCALL :DWORD,:DWORD ZwTerminateProcess PROTO STDCALL :DWORD,:DWORD ZwTranslateFilePath PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD ZwUnloadDriver PROTO STDCALL :DWORD ZwUnloadKey PROTO STDCALL :DWORD ZwUnmapViewOfSection PROTO STDCALL :DWORD,:DWORD ZwWaitForMultipleObjects PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwWaitForSingleObject PROTO STDCALL :DWORD,:DWORD,:DWORD ZwWriteFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD ZwYieldExecution PROTO STDCALL ELSE echo ------------------------------------------- echo WARNING duplicate include file ntoskrnl.inc echo ------------------------------------------- ENDIF