Files
SHA256/include/ntdll.inc
T
Стас Михайлов WindowsDesktop 6d87d971b0 Подготовка среды x64
2021-01-02 18:29:33 +03:00

1251 lines
69 KiB
PHP

; --------------------------------------------------------------------------------------------------
; ntdll.inc Copyright The MASM32 SDK 1998-2010
; --------------------------------------------------------------------------------------------------
IFNDEF NTDLL_INC
NTDLL_INC equ <1>
CsrAllocateCaptureBuffer PROTO STDCALL :DWORD,:DWORD
CsrAllocateMessagePointer PROTO STDCALL :DWORD,:DWORD,:DWORD
CsrCaptureMessageBuffer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
CsrCaptureMessageMultiUnicodeStringsInPlace PROTO STDCALL :DWORD,:DWORD,:DWORD
CsrCaptureMessageString PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
CsrCaptureTimeout PROTO STDCALL :DWORD,:DWORD
CsrClientCallServer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
CsrClientConnectToServer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
CsrFreeCaptureBuffer PROTO STDCALL :DWORD
CsrGetProcessId PROTO STDCALL
CsrIdentifyAlertableThread PROTO STDCALL
CsrNewThread PROTO STDCALL
CsrProbeForRead PROTO STDCALL :DWORD,:DWORD,:DWORD
CsrProbeForWrite PROTO STDCALL :DWORD,:DWORD,:DWORD
CsrSetPriorityClass PROTO STDCALL :DWORD,:DWORD
DbgBreakPoint PROTO STDCALL
DbgPrint PROTO C :VARARG
DbgPrintEx PROTO C :VARARG
DbgPrintReturnControlC PROTO C :VARARG
DbgPrompt PROTO STDCALL :DWORD,:DWORD,:DWORD
DbgQueryDebugFilterState PROTO STDCALL :DWORD,:DWORD
DbgSetDebugFilterState PROTO STDCALL :DWORD,:DWORD,:DWORD
DbgUiConnectToDbg PROTO STDCALL
DbgUiContinue PROTO STDCALL :DWORD,:DWORD
DbgUiConvertStateChangeStructure PROTO STDCALL :DWORD,:DWORD
DbgUiDebugActiveProcess PROTO STDCALL :DWORD
DbgUiGetThreadDebugObject PROTO STDCALL
DbgUiIssueRemoteBreakin PROTO STDCALL :DWORD
DbgUiRemoteBreakin PROTO STDCALL :DWORD
DbgUiSetThreadDebugObject PROTO STDCALL :DWORD
DbgUiStopDebugging PROTO STDCALL :DWORD
DbgUiWaitStateChange PROTO STDCALL :DWORD,:DWORD
DbgUserBreakPoint PROTO STDCALL
KiFastSystemCall PROTO STDCALL
KiFastSystemCallRet PROTO STDCALL
KiIntSystemCall PROTO STDCALL
KiRaiseUserExceptionDispatcher PROTO STDCALL
KiUserApcDispatcher PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
KiUserCallbackDispatcher PROTO STDCALL :DWORD,:DWORD,:DWORD
KiUserExceptionDispatcher PROTO STDCALL :DWORD,:DWORD
LdrAccessOutOfProcessResource PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
LdrAccessResource PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
LdrAddRefDll PROTO STDCALL :DWORD,:DWORD
LdrAlternateResourcesEnabled PROTO STDCALL
LdrCreateOutOfProcessImage PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
LdrDestroyOutOfProcessImage PROTO STDCALL :DWORD
LdrDisableThreadCalloutsForDll PROTO STDCALL :DWORD
LdrEnumResources PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
LdrEnumerateLoadedModules PROTO STDCALL :DWORD,:DWORD,:DWORD
LdrFindCreateProcessManifest PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
LdrFindEntryForAddress PROTO STDCALL :DWORD,:DWORD
LdrFindResourceDirectory_U PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
LdrFindResourceEx_U PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
LdrFindResource_U PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
LdrFlushAlternateResourceModules PROTO STDCALL
LdrGetDllHandle PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
LdrGetDllHandleEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
LdrGetProcedureAddress PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
LdrHotPatchRoutine PROTO STDCALL :DWORD
LdrInitShimEngineDynamic PROTO STDCALL :DWORD
LdrInitializeThunk PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
LdrLoadAlternateResourceModule PROTO STDCALL :DWORD,:DWORD
LdrLoadDll PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
LdrLockLoaderLock PROTO STDCALL :DWORD,:DWORD,:DWORD
LdrProcessRelocationBlock PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
LdrQueryImageFileExecutionOptions PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
LdrQueryProcessModuleInformation PROTO STDCALL :DWORD,:DWORD,:DWORD
LdrSetAppCompatDllRedirectionCallback PROTO STDCALL :DWORD,:DWORD,:DWORD
LdrSetDllManifestProber PROTO STDCALL :DWORD
LdrShutdownProcess PROTO STDCALL
LdrShutdownThread PROTO STDCALL
LdrUnloadAlternateResourceModule PROTO STDCALL :DWORD
LdrUnloadDll PROTO STDCALL :DWORD
LdrUnlockLoaderLock PROTO STDCALL :DWORD,:DWORD
LdrVerifyImageMatchesChecksum PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NlsAnsiCodePage PROTO C :VARARG
NlsMbCodePageTag PROTO C :VARARG
NlsMbOemCodePageTag PROTO C :VARARG
NtAcceptConnectPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtAccessCheck PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtAccessCheckAndAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtAccessCheckByType PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtAccessCheckByTypeAndAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtAccessCheckByTypeResultList PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtAccessCheckByTypeResultListAndAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtAccessCheckByTypeResultListAndAuditAlarmByHandle PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtAddAtom PROTO STDCALL :DWORD,:DWORD,:DWORD
NtAddBootEntry PROTO STDCALL :DWORD,:DWORD
NtAdjustGroupsToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtAdjustPrivilegesToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtAlertResumeThread PROTO STDCALL :DWORD,:DWORD
NtAlertThread PROTO STDCALL :DWORD
NtAllocateLocallyUniqueId PROTO STDCALL :DWORD
NtAllocateUserPhysicalPages PROTO STDCALL :DWORD,:DWORD,:DWORD
NtAllocateUuids PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtAllocateVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtAreMappedFilesTheSame PROTO STDCALL :DWORD,:DWORD
NtAssignProcessToJobObject PROTO STDCALL :DWORD,:DWORD
NtCallbackReturn PROTO STDCALL :DWORD,:DWORD,:DWORD
NtCancelDeviceWakeupRequest PROTO STDCALL :DWORD
NtCancelIoFile PROTO STDCALL :DWORD,:DWORD
NtCancelTimer PROTO STDCALL :DWORD,:DWORD
NtClearEvent PROTO STDCALL :DWORD
NtClose PROTO STDCALL :DWORD
NtCloseObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD
NtCompactKeys PROTO STDCALL :DWORD,:DWORD
NtCompareTokens PROTO STDCALL :DWORD,:DWORD,:DWORD
NtCompleteConnectPort PROTO STDCALL :DWORD
NtCompressKey PROTO STDCALL :DWORD
NtConnectPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtContinue PROTO STDCALL :DWORD,:DWORD
NtCreateDebugObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtCreateDirectoryObject PROTO STDCALL :DWORD,:DWORD,:DWORD
NtCreateEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtCreateEventPair PROTO STDCALL :DWORD,:DWORD,:DWORD
NtCreateFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtCreateIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtCreateJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD
NtCreateJobSet PROTO STDCALL :DWORD,:DWORD,:DWORD
NtCreateKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtCreateKeyedEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtCreateMailslotFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtCreateMutant PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtCreateNamedPipeFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtCreatePagingFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtCreatePort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtCreateProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtCreateProcessEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtCreateProfile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtCreateSection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtCreateSemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtCreateSymbolicLinkObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtCreateThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtCreateTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtCreateToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtCreateWaitablePort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtCurrentTeb PROTO STDCALL
NtDebugActiveProcess PROTO STDCALL :DWORD,:DWORD
NtDebugContinue PROTO STDCALL :DWORD,:DWORD,:DWORD
NtDelayExecution PROTO STDCALL :DWORD,:DWORD
NtDeleteAtom PROTO STDCALL :DWORD
NtDeleteBootEntry PROTO STDCALL :DWORD
NtDeleteFile PROTO STDCALL :DWORD
NtDeleteKey PROTO STDCALL :DWORD
NtDeleteObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD
NtDeleteValueKey PROTO STDCALL :DWORD,:DWORD
NtDeviceIoControlFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtDisplayString PROTO STDCALL :DWORD
NtDuplicateObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtDuplicateToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtEnumerateBootEntries PROTO STDCALL :DWORD,:DWORD
NtEnumerateKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtEnumerateSystemEnvironmentValuesEx PROTO STDCALL :DWORD,:DWORD,:DWORD
NtEnumerateValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtExtendSection PROTO STDCALL :DWORD,:DWORD
NtFilterToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtFindAtom PROTO STDCALL :DWORD,:DWORD,:DWORD
NtFlushBuffersFile PROTO STDCALL :DWORD,:DWORD
NtFlushInstructionCache PROTO STDCALL :DWORD,:DWORD,:DWORD
NtFlushKey PROTO STDCALL :DWORD
NtFlushVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtFlushWriteBuffer PROTO STDCALL
NtFreeUserPhysicalPages PROTO STDCALL :DWORD,:DWORD,:DWORD
NtFreeVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtFsControlFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtGetContextThread PROTO STDCALL :DWORD,:DWORD
NtGetDevicePowerState PROTO STDCALL :DWORD,:DWORD
NtGetPlugPlayEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtGetWriteWatch PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtImpersonateAnonymousToken PROTO STDCALL :DWORD
NtImpersonateClientOfPort PROTO STDCALL :DWORD,:DWORD
NtImpersonateThread PROTO STDCALL :DWORD,:DWORD,:DWORD
NtInitializeRegistry PROTO STDCALL :DWORD
NtInitiatePowerAction PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtIsProcessInJob PROTO STDCALL :DWORD,:DWORD
NtIsSystemResumeAutomatic PROTO STDCALL
NtListenPort PROTO STDCALL :DWORD,:DWORD
NtLoadDriver PROTO STDCALL :DWORD
NtLoadKey2 PROTO STDCALL :DWORD,:DWORD,:DWORD
NtLoadKey PROTO STDCALL :DWORD,:DWORD
NtLockFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtLockProductActivationKeys PROTO STDCALL :DWORD,:DWORD
NtLockRegistryKey PROTO STDCALL :DWORD
NtLockVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtMakePermanentObject PROTO STDCALL :DWORD
NtMakeTemporaryObject PROTO STDCALL :DWORD
NtMapUserPhysicalPages PROTO STDCALL :DWORD,:DWORD,:DWORD
NtMapUserPhysicalPagesScatter PROTO STDCALL :DWORD,:DWORD,:DWORD
NtMapViewOfSection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtModifyBootEntry PROTO STDCALL :DWORD
NtNotifyChangeDirectoryFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtNotifyChangeKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtNotifyChangeMultipleKeys PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtOpenDirectoryObject PROTO STDCALL :DWORD,:DWORD,:DWORD
NtOpenEvent PROTO STDCALL :DWORD,:DWORD,:DWORD
NtOpenEventPair PROTO STDCALL :DWORD,:DWORD,:DWORD
NtOpenFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtOpenIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD
NtOpenJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD
NtOpenKey PROTO STDCALL :DWORD,:DWORD,:DWORD
NtOpenKeyedEvent PROTO STDCALL :DWORD,:DWORD,:DWORD
NtOpenMutant PROTO STDCALL :DWORD,:DWORD,:DWORD
NtOpenObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtOpenProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtOpenProcessToken PROTO STDCALL :DWORD,:DWORD,:DWORD
NtOpenProcessTokenEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtOpenSection PROTO STDCALL :DWORD,:DWORD,:DWORD
NtOpenSemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD
NtOpenSymbolicLinkObject PROTO STDCALL :DWORD,:DWORD,:DWORD
NtOpenThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtOpenThreadToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtOpenThreadTokenEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtOpenTimer PROTO STDCALL :DWORD,:DWORD,:DWORD
NtPlugPlayControl PROTO STDCALL :DWORD,:DWORD,:DWORD
NtPowerInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtPrivilegeCheck PROTO STDCALL :DWORD,:DWORD,:DWORD
NtPrivilegeObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtPrivilegedServiceAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtProtectVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtPulseEvent PROTO STDCALL :DWORD,:DWORD
NtQueryAttributesFile PROTO STDCALL :DWORD,:DWORD
NtQueryBootEntryOrder PROTO STDCALL :DWORD,:DWORD
NtQueryBootOptions PROTO STDCALL :DWORD,:DWORD
NtQueryDebugFilterState PROTO STDCALL :DWORD,:DWORD
NtQueryDefaultLocale PROTO STDCALL :DWORD,:DWORD
NtQueryDefaultUILanguage PROTO STDCALL :DWORD
NtQueryDirectoryFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryDirectoryObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryEaFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryFullAttributesFile PROTO STDCALL :DWORD,:DWORD
NtQueryInformationAtom PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryInformationJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryInformationPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryInformationProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryInformationThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryInformationToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryInstallUILanguage PROTO STDCALL :DWORD
NtQueryIntervalProfile PROTO STDCALL :DWORD,:DWORD
NtQueryIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryMultipleValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryMutant PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryOpenSubKeys PROTO STDCALL :DWORD,:DWORD
NtQueryPerformanceCounter PROTO STDCALL :DWORD,:DWORD
NtQueryPortInformationProcess PROTO STDCALL
NtQueryQuotaInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQuerySection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQuerySecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQuerySemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQuerySymbolicLinkObject PROTO STDCALL :DWORD,:DWORD,:DWORD
NtQuerySystemEnvironmentValue PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtQuerySystemEnvironmentValueEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQuerySystemInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtQuerySystemTime PROTO STDCALL :DWORD
NtQueryTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryTimerResolution PROTO STDCALL :DWORD,:DWORD,:DWORD
NtQueryValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueryVolumeInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtQueueApcThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtRaiseException PROTO STDCALL :DWORD,:DWORD,:DWORD
NtRaiseHardError PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtReadFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtReadFileScatter PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtReadRequestData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtReadVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtRegisterThreadTerminatePort PROTO STDCALL :DWORD
NtReleaseKeyedEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtReleaseMutant PROTO STDCALL :DWORD,:DWORD
NtReleaseSemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD
NtRemoveIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtRemoveProcessDebug PROTO STDCALL :DWORD,:DWORD
NtRenameKey PROTO STDCALL :DWORD,:DWORD
NtReplaceKey PROTO STDCALL :DWORD,:DWORD,:DWORD
NtReplyPort PROTO STDCALL :DWORD,:DWORD
NtReplyWaitReceivePort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtReplyWaitReceivePortEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtReplyWaitReplyPort PROTO STDCALL :DWORD,:DWORD
NtRequestDeviceWakeup PROTO STDCALL :DWORD
NtRequestPort PROTO STDCALL :DWORD,:DWORD
NtRequestWaitReplyPort PROTO STDCALL :DWORD,:DWORD,:DWORD
NtRequestWakeupLatency PROTO STDCALL :DWORD
NtResetEvent PROTO STDCALL :DWORD,:DWORD
NtResetWriteWatch PROTO STDCALL :DWORD,:DWORD,:DWORD
NtRestoreKey PROTO STDCALL :DWORD,:DWORD,:DWORD
NtResumeProcess PROTO STDCALL :DWORD
NtResumeThread PROTO STDCALL :DWORD,:DWORD
NtSaveKey PROTO STDCALL :DWORD,:DWORD
NtSaveKeyEx PROTO STDCALL :DWORD,:DWORD,:DWORD
NtSaveMergedKeys PROTO STDCALL :DWORD,:DWORD,:DWORD
NtSecureConnectPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtSetBootEntryOrder PROTO STDCALL :DWORD,:DWORD
NtSetBootOptions PROTO STDCALL :DWORD,:DWORD
NtSetContextThread PROTO STDCALL :DWORD,:DWORD
NtSetDebugFilterState PROTO STDCALL :DWORD,:DWORD,:DWORD
NtSetDefaultHardErrorPort PROTO STDCALL :DWORD
NtSetDefaultLocale PROTO STDCALL :DWORD,:DWORD
NtSetDefaultUILanguage PROTO STDCALL :DWORD
NtSetEaFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtSetEvent PROTO STDCALL :DWORD,:DWORD
NtSetEventBoostPriority PROTO STDCALL :DWORD
NtSetHighEventPair PROTO STDCALL :DWORD
NtSetHighWaitLowEventPair PROTO STDCALL :DWORD
NtSetInformationDebugObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtSetInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtSetInformationJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtSetInformationKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtSetInformationObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtSetInformationProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtSetInformationThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtSetInformationToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtSetIntervalProfile PROTO STDCALL :DWORD,:DWORD
NtSetIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtSetLdtEntries PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtSetLowEventPair PROTO STDCALL :DWORD
NtSetLowWaitHighEventPair PROTO STDCALL :DWORD
NtSetQuotaInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtSetSecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD
NtSetSystemEnvironmentValue PROTO STDCALL :DWORD,:DWORD
NtSetSystemEnvironmentValueEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtSetSystemInformation PROTO STDCALL :DWORD,:DWORD,:DWORD
NtSetSystemPowerState PROTO STDCALL :DWORD,:DWORD,:DWORD
NtSetSystemTime PROTO STDCALL :DWORD,:DWORD
NtSetThreadExecutionState PROTO STDCALL :DWORD,:DWORD
NtSetTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtSetTimerResolution PROTO STDCALL :DWORD,:DWORD,:DWORD
NtSetUuidSeed PROTO STDCALL :DWORD
NtSetValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtSetVolumeInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtShutdownSystem PROTO STDCALL :DWORD
NtSignalAndWaitForSingleObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtStartProfile PROTO STDCALL :DWORD
NtStopProfile PROTO STDCALL :DWORD
NtSuspendProcess PROTO STDCALL :DWORD
NtSuspendThread PROTO STDCALL :DWORD,:DWORD
NtSystemDebugControl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtTerminateJobObject PROTO STDCALL :DWORD,:DWORD
NtTerminateProcess PROTO STDCALL :DWORD,:DWORD
NtTerminateThread PROTO STDCALL :DWORD,:DWORD
NtTestAlert PROTO STDCALL
NtTraceEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtTranslateFilePath PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtUnloadDriver PROTO STDCALL :DWORD
NtUnloadKey PROTO STDCALL :DWORD
NtUnloadKeyEx PROTO STDCALL :DWORD,:DWORD
NtUnlockFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtUnlockVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtUnmapViewOfSection PROTO STDCALL :DWORD,:DWORD
NtVdmControl PROTO STDCALL :DWORD,:DWORD
NtWaitForDebugEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtWaitForKeyedEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
NtWaitForMultipleObjects PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtWaitForSingleObject PROTO STDCALL :DWORD,:DWORD,:DWORD
NtWaitHighEventPair PROTO STDCALL :DWORD
NtWaitLowEventPair PROTO STDCALL :DWORD
NtWriteFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtWriteFileGather PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtWriteRequestData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtWriteVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
NtYieldExecution PROTO STDCALL
PfxFindPrefix PROTO STDCALL :DWORD,:DWORD
PfxInitialize PROTO STDCALL :DWORD
PfxInsertPrefix PROTO STDCALL :DWORD,:DWORD,:DWORD
PfxRemovePrefix PROTO STDCALL :DWORD,:DWORD
RtlAbortRXact PROTO STDCALL :DWORD
RtlAbsoluteToSelfRelativeSD PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlAcquirePebLock PROTO STDCALL
RtlAcquireResourceExclusive PROTO STDCALL :DWORD,:DWORD
RtlAcquireResourceShared PROTO STDCALL :DWORD,:DWORD
RtlActivateActivationContext PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlActivateActivationContextEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlActivateActivationContextUnsafeFast PROTO STDCALL :DWORD,:DWORD
RtlAddAccessAllowedAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlAddAccessAllowedAceEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlAddAccessAllowedObjectAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlAddAccessDeniedAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlAddAccessDeniedAceEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlAddAccessDeniedObjectAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlAddAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlAddActionToRXact PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlAddAtomToAtomTable PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlAddAttributeActionToRXact PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlAddAuditAccessAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlAddAuditAccessAceEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlAddAuditAccessObjectAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlAddCompoundAce PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlAddRange PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlAddRefActivationContext PROTO STDCALL :DWORD
RtlAddRefMemoryStream PROTO STDCALL :DWORD
RtlAddVectoredExceptionHandler PROTO STDCALL :DWORD,:DWORD
RtlAddressInSectionTable PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlAdjustPrivilege PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlAllocateAndInitializeSid PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlAllocateHandle PROTO STDCALL :DWORD,:DWORD
RtlAllocateHeap PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlAnsiCharToUnicodeChar PROTO STDCALL :DWORD
RtlAnsiStringToUnicodeSize PROTO STDCALL :DWORD
RtlAnsiStringToUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlAppendAsciizToString PROTO STDCALL :DWORD,:DWORD
RtlAppendPathElement PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlAppendStringToString PROTO STDCALL :DWORD,:DWORD
RtlAppendUnicodeStringToString PROTO STDCALL :DWORD,:DWORD
RtlAppendUnicodeToString PROTO STDCALL :DWORD,:DWORD
RtlApplicationVerifierStop PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlApplyRXact PROTO STDCALL :DWORD
RtlApplyRXactNoFlush PROTO STDCALL :DWORD
RtlAreAllAccessesGranted PROTO STDCALL :DWORD,:DWORD
RtlAreAnyAccessesGranted PROTO STDCALL :DWORD,:DWORD
RtlAreBitsClear PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlAreBitsSet PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlAssert2 PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlAssert PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlCancelTimer PROTO STDCALL :DWORD,:DWORD
RtlCaptureContext PROTO STDCALL :DWORD
RtlCaptureStackBackTrace PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlCaptureStackContext PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlCharToInteger PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlCheckForOrphanedCriticalSections PROTO STDCALL :DWORD
RtlCheckProcessParameters PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlCheckRegistryKey PROTO STDCALL :DWORD,:DWORD
RtlClearAllBits PROTO STDCALL :DWORD
RtlClearBits PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlCloneMemoryStream PROTO STDCALL :DWORD,:DWORD
RtlCommitMemoryStream PROTO STDCALL :DWORD,:DWORD
RtlCompactHeap PROTO STDCALL :DWORD,:DWORD
RtlCompareMemory PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlCompareMemoryUlong PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlCompareString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlCompareUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlCompressBuffer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlComputeCrc32 PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlComputeImportTableHash PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlComputePrivatizedDllName_U PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlConsoleMultiByteToUnicodeN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlConvertExclusiveToShared PROTO STDCALL :DWORD
RtlConvertLongToLargeInteger PROTO STDCALL :DWORD
RtlConvertSharedToExclusive PROTO STDCALL :DWORD
RtlConvertSidToUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlConvertToAutoInheritSecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlConvertUiListToApiList PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlConvertUlongToLargeInteger PROTO STDCALL :DWORD
RtlCopyLuid PROTO STDCALL :DWORD,:DWORD
RtlCopyLuidAndAttributesArray PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlCopyMemoryStreamTo PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlCopyOutOfProcessMemoryStreamTo PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlCopyRangeList PROTO STDCALL :DWORD,:DWORD
RtlCopySecurityDescriptor PROTO STDCALL :DWORD,:DWORD
RtlCopySid PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlCopySidAndAttributesArray PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlCopyString PROTO STDCALL :DWORD,:DWORD
RtlCopyUnicodeString PROTO STDCALL :DWORD,:DWORD
RtlCreateAcl PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlCreateActivationContext PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlCreateAndSetSD PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlCreateAtomTable PROTO STDCALL :DWORD,:DWORD
RtlCreateBootStatusDataFile PROTO STDCALL
RtlCreateEnvironment PROTO STDCALL :DWORD,:DWORD
RtlCreateHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlCreateProcessParameters PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlCreateQueryDebugBuffer PROTO STDCALL :DWORD,:DWORD
RtlCreateRegistryKey PROTO STDCALL :DWORD,:DWORD
RtlCreateSecurityDescriptor PROTO STDCALL :DWORD,:DWORD
RtlCreateSystemVolumeInformationFolder PROTO STDCALL :DWORD
RtlCreateTagHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlCreateTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlCreateTimerQueue PROTO STDCALL :DWORD
RtlCreateUnicodeString PROTO STDCALL :DWORD,:DWORD
RtlCreateUnicodeStringFromAsciiz PROTO STDCALL :DWORD,:DWORD
RtlCreateUserProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlCreateUserSecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlCreateUserThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlCustomCPToUnicodeN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlCutoverTimeToSystemTime PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlDeNormalizeProcessParams PROTO STDCALL :DWORD
RtlDeactivateActivationContext PROTO STDCALL :DWORD,:DWORD
RtlDeactivateActivationContextUnsafeFast PROTO STDCALL :DWORD
RtlDebugPrintTimes PROTO STDCALL
RtlDecodePointer PROTO STDCALL :DWORD
RtlDecodeSystemPointer PROTO STDCALL :DWORD
RtlDecompressBuffer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlDecompressFragment PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlDefaultNpAcl PROTO STDCALL :DWORD
RtlDelete PROTO STDCALL :DWORD
RtlDeleteAce PROTO STDCALL :DWORD,:DWORD
RtlDeleteAtomFromAtomTable PROTO STDCALL :DWORD,:DWORD
RtlDeleteCriticalSection PROTO STDCALL :DWORD
RtlDeleteElementGenericTable PROTO STDCALL :DWORD,:DWORD
RtlDeleteElementGenericTableAvl PROTO STDCALL :DWORD,:DWORD
RtlDeleteNoSplay PROTO STDCALL :DWORD,:DWORD
RtlDeleteOwnersRanges PROTO STDCALL :DWORD,:DWORD
RtlDeleteRange PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlDeleteRegistryValue PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlDeleteResource PROTO STDCALL :DWORD
RtlDeleteSecurityObject PROTO STDCALL :DWORD
RtlDeleteTimer PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlDeleteTimerQueue PROTO STDCALL :DWORD
RtlDeleteTimerQueueEx PROTO STDCALL :DWORD,:DWORD
RtlDeregisterWait PROTO STDCALL :DWORD
RtlDeregisterWaitEx PROTO STDCALL :DWORD,:DWORD
RtlDestroyAtomTable PROTO STDCALL :DWORD
RtlDestroyEnvironment PROTO STDCALL :DWORD
RtlDestroyHandleTable PROTO STDCALL :DWORD
RtlDestroyHeap PROTO STDCALL :DWORD
RtlDestroyProcessParameters PROTO STDCALL :DWORD
RtlDestroyQueryDebugBuffer PROTO STDCALL :DWORD
RtlDetermineDosPathNameType_U PROTO STDCALL :DWORD
RtlDllShutdownInProgress PROTO STDCALL
RtlDnsHostNameToComputerName PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlDoesFileExists_U PROTO STDCALL :DWORD
RtlDosApplyFileIsolationRedirection_Ustr PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlDosPathNameToNtPathName_U PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlDosSearchPath_U PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlDosSearchPath_Ustr PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlDowncaseUnicodeChar PROTO STDCALL :DWORD
RtlDowncaseUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlDumpResource PROTO STDCALL :DWORD
RtlDuplicateUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlEmptyAtomTable PROTO STDCALL :DWORD,:DWORD
RtlEnableEarlyCriticalSectionEventCreation PROTO STDCALL
RtlEncodePointer PROTO STDCALL :DWORD
RtlEncodeSystemPointer PROTO STDCALL :DWORD
RtlEnlargedIntegerMultiply PROTO STDCALL :DWORD,:DWORD
RtlEnlargedUnsignedDivide PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlEnlargedUnsignedMultiply PROTO STDCALL :DWORD,:DWORD
RtlEnterCriticalSection PROTO STDCALL :DWORD
RtlEnumProcessHeaps PROTO STDCALL :DWORD,:DWORD
RtlEnumerateGenericTable PROTO STDCALL :DWORD,:DWORD
RtlEnumerateGenericTableAvl PROTO STDCALL :DWORD,:DWORD
RtlEnumerateGenericTableLikeADirectory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlEnumerateGenericTableWithoutSplaying PROTO STDCALL :DWORD,:DWORD
RtlEnumerateGenericTableWithoutSplayingAvl PROTO STDCALL :DWORD,:DWORD
RtlEqualComputerName PROTO STDCALL :DWORD,:DWORD
RtlEqualDomainName PROTO STDCALL :DWORD,:DWORD
RtlEqualLuid PROTO STDCALL :DWORD,:DWORD
RtlEqualPrefixSid PROTO STDCALL :DWORD,:DWORD
RtlEqualSid PROTO STDCALL :DWORD,:DWORD
RtlEqualString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlEqualUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlEraseUnicodeString PROTO STDCALL :DWORD
RtlExitUserThread PROTO STDCALL :DWORD
RtlExpandEnvironmentStrings_U PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlExtendHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlExtendedIntegerMultiply PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlExtendedLargeIntegerDivide PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlExtendedMagicDivide PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlFillMemory PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlFillMemoryUlong PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlFinalReleaseOutOfProcessMemoryStream PROTO STDCALL :DWORD
RtlFindActivationContextSectionGuid PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlFindActivationContextSectionString PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlFindCharInUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlFindClearBits PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlFindClearBitsAndSet PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlFindClearRuns PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlFindLastBackwardRunClear PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlFindLeastSignificantBit PROTO STDCALL :DWORD,:DWORD
RtlFindLongestRunClear PROTO STDCALL :DWORD,:DWORD
RtlFindMessage PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlFindMostSignificantBit PROTO STDCALL :DWORD,:DWORD
RtlFindNextForwardRunClear PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlFindRange PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlFindSetBits PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlFindSetBitsAndClear PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlFirstEntrySList PROTO STDCALL :DWORD
RtlFirstFreeAce PROTO STDCALL :DWORD,:DWORD
RtlFlushSecureMemoryCache PROTO STDCALL :DWORD,:DWORD
RtlFormatCurrentUserKeyPath PROTO STDCALL :DWORD
RtlFormatMessage PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlFreeAnsiString PROTO STDCALL :DWORD
RtlFreeHandle PROTO STDCALL :DWORD,:DWORD
RtlFreeHeap PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlFreeOemString PROTO STDCALL :DWORD
RtlFreeRangeList PROTO STDCALL :DWORD
RtlFreeSid PROTO STDCALL :DWORD
RtlFreeThreadActivationContextStack PROTO STDCALL
RtlFreeUnicodeString PROTO STDCALL :DWORD
RtlFreeUserThreadStack PROTO STDCALL :DWORD,:DWORD
RtlGUIDFromString PROTO STDCALL :DWORD,:DWORD
RtlGenerate8dot3Name PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlGetAce PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlGetActiveActivationContext PROTO STDCALL :DWORD
RtlGetCallersAddress PROTO STDCALL :DWORD,:DWORD
RtlGetCompressionWorkSpaceSize PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlGetControlSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlGetCurrentDirectory_U PROTO STDCALL :DWORD,:DWORD
RtlGetCurrentPeb PROTO STDCALL
RtlGetDaclSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlGetElementGenericTable PROTO STDCALL :DWORD,:DWORD
RtlGetElementGenericTableAvl PROTO STDCALL :DWORD,:DWORD
RtlGetFirstRange PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlGetFrame PROTO STDCALL
RtlGetFullPathName_U PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlGetGroupSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlGetLastNtStatus PROTO STDCALL
RtlGetLastWin32Error PROTO STDCALL
RtlGetLengthWithoutLastFullDosOrNtPathElement PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlGetLengthWithoutTrailingPathSeperators PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlGetLongestNtPathLength PROTO STDCALL
RtlGetNativeSystemInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlGetNextRange PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlGetNtGlobalFlags PROTO STDCALL
RtlGetNtProductType PROTO STDCALL :DWORD
RtlGetNtVersionNumbers PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlGetOwnerSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlGetProcessHeaps PROTO STDCALL :DWORD,:DWORD
RtlGetSaclSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlGetSecurityDescriptorRMControl PROTO STDCALL :DWORD,:DWORD
RtlGetSetBootStatusData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlGetUnloadEventTrace PROTO STDCALL
RtlGetUserInfoHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlGetVersion PROTO STDCALL :DWORD
RtlHashUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlIdentifierAuthoritySid PROTO STDCALL :DWORD
RtlImageDirectoryEntryToData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlImageNtHeader PROTO STDCALL :DWORD
RtlImageRvaToSection PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlImageRvaToVa PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlImpersonateSelf PROTO STDCALL :DWORD
RtlInitAnsiString PROTO STDCALL :DWORD,:DWORD
RtlInitCodePageTable PROTO STDCALL :DWORD,:DWORD
RtlInitMemoryStream PROTO STDCALL :DWORD
RtlInitNlsTables PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlInitOutOfProcessMemoryStream PROTO STDCALL :DWORD
RtlInitString PROTO STDCALL :DWORD,:DWORD
RtlInitUnicodeString PROTO STDCALL :DWORD,:DWORD
RtlInitUnicodeStringEx PROTO STDCALL :DWORD,:DWORD
RtlInitializeAtomPackage PROTO STDCALL :DWORD
RtlInitializeBitMap PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlInitializeContext PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlInitializeCriticalSection PROTO STDCALL :DWORD
RtlInitializeCriticalSectionAndSpinCount PROTO STDCALL :DWORD,:DWORD
RtlInitializeGenericTable PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlInitializeGenericTableAvl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlInitializeHandleTable PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlInitializeRXact PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlInitializeRangeList PROTO STDCALL :DWORD
RtlInitializeResource PROTO STDCALL :DWORD
RtlInitializeSListHead PROTO STDCALL :DWORD
RtlInitializeSid PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlInitializeStackTraceDataBase PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlInsertElementGenericTable PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlInsertElementGenericTableAvl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlInt64ToUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlIntegerToChar PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlIntegerToUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlInterlockedFlushSList PROTO STDCALL :DWORD
RtlInterlockedPopEntrySList PROTO STDCALL :DWORD
RtlInterlockedPushEntrySList PROTO STDCALL :DWORD,:DWORD
RtlInvertRangeList PROTO STDCALL :DWORD,:DWORD
RtlIpv4AddressToStringA PROTO STDCALL :DWORD,:DWORD
IFNDEF __UNICODE__
RtlIpv4AddressToString equ <RtlIpv4AddressToStringA>
ENDIF
RtlIpv4AddressToStringExA PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
IFNDEF __UNICODE__
RtlIpv4AddressToStringEx equ <RtlIpv4AddressToStringExA>
ENDIF
RtlIpv4AddressToStringExW PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
IFDEF __UNICODE__
RtlIpv4AddressToStringEx equ <RtlIpv4AddressToStringExW>
ENDIF
RtlIpv4AddressToStringW PROTO STDCALL :DWORD,:DWORD
IFDEF __UNICODE__
RtlIpv4AddressToString equ <RtlIpv4AddressToStringW>
ENDIF
RtlIpv4StringToAddressA PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
IFNDEF __UNICODE__
RtlIpv4StringToAddress equ <RtlIpv4StringToAddressA>
ENDIF
RtlIpv4StringToAddressExA PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
IFNDEF __UNICODE__
RtlIpv4StringToAddressEx equ <RtlIpv4StringToAddressExA>
ENDIF
RtlIpv4StringToAddressExW PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
IFDEF __UNICODE__
RtlIpv4StringToAddressEx equ <RtlIpv4StringToAddressExW>
ENDIF
RtlIpv4StringToAddressW PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
IFDEF __UNICODE__
RtlIpv4StringToAddress equ <RtlIpv4StringToAddressW>
ENDIF
RtlIpv6AddressToStringA PROTO STDCALL :DWORD,:DWORD
IFNDEF __UNICODE__
RtlIpv6AddressToString equ <RtlIpv6AddressToStringA>
ENDIF
RtlIpv6AddressToStringExA PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
IFNDEF __UNICODE__
RtlIpv6AddressToStringEx equ <RtlIpv6AddressToStringExA>
ENDIF
RtlIpv6AddressToStringExW PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
IFDEF __UNICODE__
RtlIpv6AddressToStringEx equ <RtlIpv6AddressToStringExW>
ENDIF
RtlIpv6AddressToStringW PROTO STDCALL :DWORD,:DWORD
IFDEF __UNICODE__
RtlIpv6AddressToString equ <RtlIpv6AddressToStringW>
ENDIF
RtlIpv6StringToAddressA PROTO STDCALL :DWORD,:DWORD,:DWORD
IFNDEF __UNICODE__
RtlIpv6StringToAddress equ <RtlIpv6StringToAddressA>
ENDIF
RtlIpv6StringToAddressExA PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
IFNDEF __UNICODE__
RtlIpv6StringToAddressEx equ <RtlIpv6StringToAddressExA>
ENDIF
RtlIpv6StringToAddressExW PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
IFDEF __UNICODE__
RtlIpv6StringToAddressEx equ <RtlIpv6StringToAddressExW>
ENDIF
RtlIpv6StringToAddressW PROTO STDCALL :DWORD,:DWORD,:DWORD
IFDEF __UNICODE__
RtlIpv6StringToAddress equ <RtlIpv6StringToAddressW>
ENDIF
RtlIsActivationContextActive PROTO STDCALL :DWORD
RtlIsDosDeviceName_U PROTO STDCALL :DWORD
RtlIsGenericTableEmpty PROTO STDCALL :DWORD
RtlIsGenericTableEmptyAvl PROTO STDCALL :DWORD
RtlIsNameLegalDOS8Dot3 PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlIsRangeAvailable PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlIsTextUnicode PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlIsThreadWithinLoaderCallout PROTO STDCALL
RtlIsValidHandle PROTO STDCALL :DWORD,:DWORD
RtlIsValidIndexHandle PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlLargeIntegerAdd PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlLargeIntegerArithmeticShift PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlLargeIntegerDivide PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlLargeIntegerNegate PROTO STDCALL :DWORD,:DWORD
RtlLargeIntegerShiftLeft PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlLargeIntegerShiftRight PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlLargeIntegerSubtract PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlLargeIntegerToChar PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlLeaveCriticalSection PROTO STDCALL :DWORD
RtlLengthRequiredSid PROTO STDCALL :DWORD
RtlLengthSecurityDescriptor PROTO STDCALL :DWORD
RtlLengthSid PROTO STDCALL :DWORD
RtlLocalTimeToSystemTime PROTO STDCALL :DWORD,:DWORD
RtlLockBootStatusData PROTO STDCALL :DWORD
RtlLockHeap PROTO STDCALL :DWORD
RtlLockMemoryStreamRegion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlLogStackBackTrace PROTO STDCALL
RtlLookupAtomInAtomTable PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlLookupElementGenericTable PROTO STDCALL :DWORD,:DWORD
RtlLookupElementGenericTableAvl PROTO STDCALL :DWORD,:DWORD
RtlMakeSelfRelativeSD PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlMapGenericMask PROTO STDCALL :DWORD,:DWORD
RtlMapSecurityErrorToNtStatus PROTO STDCALL :DWORD
RtlMergeRangeLists PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlMoveMemory PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlMultiAppendUnicodeStringBuffer PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlMultiByteToUnicodeN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlMultiByteToUnicodeSize PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlNewInstanceSecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlNewSecurityGrantedAccess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlNewSecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlNewSecurityObjectEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlNewSecurityObjectWithMultipleInheritance PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlNormalizeProcessParams PROTO STDCALL :DWORD
RtlNtPathNameToDosPathName PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlNtStatusToDosError PROTO STDCALL :DWORD
RtlNtStatusToDosErrorNoTeb PROTO STDCALL :DWORD
RtlNumberGenericTableElements PROTO STDCALL :DWORD
RtlNumberGenericTableElementsAvl PROTO STDCALL :DWORD
RtlNumberOfClearBits PROTO STDCALL :DWORD
RtlNumberOfSetBits PROTO STDCALL :DWORD
RtlOemStringToUnicodeSize PROTO STDCALL :DWORD
RtlOemStringToUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlOemToUnicodeN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlOpenCurrentUser PROTO STDCALL :DWORD,:DWORD
RtlPcToFileHeader PROTO STDCALL :DWORD,:DWORD
RtlPinAtomInAtomTable PROTO STDCALL :DWORD,:DWORD
RtlPopFrame PROTO STDCALL :DWORD
RtlPrefixString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlPrefixUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlProtectHeap PROTO STDCALL :DWORD,:DWORD
RtlPushFrame PROTO STDCALL :DWORD
RtlQueryAtomInAtomTable PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlQueryDepthSList PROTO STDCALL :DWORD
RtlQueryEnvironmentVariable_U PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlQueryHeapInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlQueryInformationAcl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlQueryInformationActivationContext PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlQueryInformationActiveActivationContext PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlQueryInterfaceMemoryStream PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlQueryProcessBackTraceInformation PROTO STDCALL :DWORD
RtlQueryProcessDebugInformation PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlQueryProcessHeapInformation PROTO STDCALL :DWORD
RtlQueryProcessLockInformation PROTO STDCALL :DWORD
RtlQueryRegistryValues PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlQuerySecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlQueryTagHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlQueryTimeZoneInformation PROTO STDCALL :DWORD
RtlQueueApcWow64Thread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlQueueWorkItem PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlRaiseException PROTO STDCALL :DWORD
RtlRaiseStatus PROTO STDCALL :DWORD
RtlRandom PROTO STDCALL :DWORD
RtlRandomEx PROTO STDCALL :DWORD
RtlReAllocateHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlReadMemoryStream PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlReadOutOfProcessMemoryStream PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlRealPredecessor PROTO STDCALL :DWORD
RtlRealSuccessor PROTO STDCALL :DWORD
RtlRegisterSecureMemoryCacheCallback PROTO STDCALL :DWORD
RtlRegisterWait PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlReleaseActivationContext PROTO STDCALL :DWORD
RtlReleaseMemoryStream PROTO STDCALL :DWORD
RtlReleasePebLock PROTO STDCALL
RtlReleaseResource PROTO STDCALL :DWORD
RtlRemoteCall PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlRemoveVectoredExceptionHandler PROTO STDCALL :DWORD
RtlResetRtlTranslations PROTO STDCALL :DWORD
RtlRestoreLastWin32Error PROTO STDCALL :DWORD
RtlRevertMemoryStream PROTO STDCALL :DWORD
RtlRunDecodeUnicodeString PROTO STDCALL :DWORD,:DWORD
RtlRunEncodeUnicodeString PROTO STDCALL :DWORD,:DWORD
RtlSecondsSince1970ToTime PROTO STDCALL :DWORD,:DWORD
RtlSecondsSince1980ToTime PROTO STDCALL :DWORD,:DWORD
RtlSeekMemoryStream PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlSelfRelativeToAbsoluteSD2 PROTO STDCALL :DWORD,:DWORD
RtlSelfRelativeToAbsoluteSD PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlSetAllBits PROTO STDCALL :DWORD
RtlSetAttributesSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlSetBits PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlSetControlSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlSetCriticalSectionSpinCount PROTO STDCALL :DWORD,:DWORD
RtlSetCurrentDirectory_U PROTO STDCALL :DWORD
RtlSetCurrentEnvironment PROTO STDCALL :DWORD,:DWORD
RtlSetDaclSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlSetEnvironmentVariable PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlSetGroupSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlSetHeapInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlSetInformationAcl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlSetIoCompletionCallback PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlSetLastWin32Error PROTO STDCALL :DWORD
RtlSetLastWin32ErrorAndNtStatusFromNtStatus PROTO STDCALL :DWORD
RtlSetMemoryStreamSize PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlSetOwnerSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlSetProcessIsCritical PROTO C :VARARG
RtlSetSaclSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlSetSecurityDescriptorRMControl PROTO STDCALL :DWORD,:DWORD
RtlSetSecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlSetSecurityObjectEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlSetThreadIsCritical PROTO C :VARARG
RtlSetThreadPoolStartFunc PROTO STDCALL :DWORD,:DWORD
RtlSetTimeZoneInformation PROTO STDCALL :DWORD
RtlSetTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlSetUnicodeCallouts PROTO STDCALL :DWORD
RtlSetUserFlagsHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlSetUserValueHeap PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlSizeHeap PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlSplay PROTO STDCALL :DWORD
RtlStartRXact PROTO STDCALL :DWORD
RtlStatMemoryStream PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlStringFromGUID PROTO STDCALL :DWORD,:DWORD
RtlSubAuthorityCountSid PROTO STDCALL :DWORD
RtlSubAuthoritySid PROTO STDCALL :DWORD,:DWORD
RtlSubtreePredecessor PROTO STDCALL :DWORD
RtlSubtreeSuccessor PROTO STDCALL :DWORD
RtlSystemTimeToLocalTime PROTO STDCALL :DWORD,:DWORD
RtlTimeFieldsToTime PROTO STDCALL :DWORD,:DWORD
RtlTimeToElapsedTimeFields PROTO STDCALL :DWORD,:DWORD
RtlTimeToSecondsSince1970 PROTO STDCALL :DWORD,:DWORD
RtlTimeToSecondsSince1980 PROTO STDCALL :DWORD,:DWORD
RtlTimeToTimeFields PROTO STDCALL :DWORD,:DWORD
RtlTraceDatabaseAdd PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlTraceDatabaseCreate PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlTraceDatabaseDestroy PROTO STDCALL :DWORD
RtlTraceDatabaseEnumerate PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlTraceDatabaseFind PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlTraceDatabaseLock PROTO STDCALL :DWORD
RtlTraceDatabaseUnlock PROTO STDCALL :DWORD
RtlTraceDatabaseValidate PROTO STDCALL :DWORD
RtlTryEnterCriticalSection PROTO STDCALL :DWORD
RtlUnhandledExceptionFilter2 PROTO STDCALL :DWORD,:DWORD
RtlUnhandledExceptionFilter PROTO STDCALL :DWORD
RtlUnicodeStringToAnsiSize PROTO STDCALL :DWORD
RtlUnicodeStringToAnsiString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlUnicodeStringToCountedOemString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlUnicodeStringToInteger PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlUnicodeStringToOemSize PROTO STDCALL :DWORD
RtlUnicodeStringToOemString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlUnicodeToCustomCPN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlUnicodeToMultiByteN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlUnicodeToMultiByteSize PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlUnicodeToOemN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlUniform PROTO STDCALL :DWORD
RtlUnlockBootStatusData PROTO STDCALL :DWORD
RtlUnlockHeap PROTO STDCALL :DWORD
RtlUnlockMemoryStreamRegion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlUnwind PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlUpcaseUnicodeChar PROTO STDCALL :DWORD
RtlUpcaseUnicodeString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlUpcaseUnicodeStringToAnsiString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlUpcaseUnicodeStringToCountedOemString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlUpcaseUnicodeStringToOemString PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlUpcaseUnicodeToCustomCPN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlUpcaseUnicodeToMultiByteN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlUpcaseUnicodeToOemN PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlUpdateTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlUpperChar PROTO STDCALL :DWORD
RtlUpperString PROTO STDCALL :DWORD,:DWORD
RtlUsageHeap PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlValidAcl PROTO STDCALL :DWORD
RtlValidRelativeSecurityDescriptor PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlValidSecurityDescriptor PROTO STDCALL :DWORD
RtlValidSid PROTO STDCALL :DWORD
RtlValidateHeap PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlValidateProcessHeaps PROTO STDCALL
RtlValidateUnicodeString PROTO STDCALL :DWORD,:DWORD
RtlVerifyVersionInfo PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlWalkFrameChain PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlWalkHeap PROTO STDCALL :DWORD,:DWORD
RtlWriteMemoryStream PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlWriteRegistryValue PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlZeroHeap PROTO STDCALL :DWORD,:DWORD
RtlZeroMemory PROTO STDCALL :DWORD,:DWORD
RtlZombifyActivationContext PROTO STDCALL :DWORD
RtlpApplyLengthFunction PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlpEnsureBufferSize PROTO STDCALL :DWORD,:DWORD,:DWORD
RtlpNotOwnerCriticalSection PROTO STDCALL :DWORD
RtlpNtCreateKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlpNtEnumerateSubKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlpNtMakeTemporaryKey PROTO STDCALL :DWORD
RtlpNtOpenKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlpNtQueryValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
RtlpNtSetValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
RtlpUnWaitCriticalSection PROTO STDCALL :DWORD
RtlpWaitForCriticalSection PROTO STDCALL :DWORD
RtlxAnsiStringToUnicodeSize PROTO STDCALL :DWORD
RtlxOemStringToUnicodeSize PROTO STDCALL :DWORD
RtlxUnicodeStringToAnsiSize PROTO STDCALL :DWORD
RtlxUnicodeStringToOemSize PROTO STDCALL :DWORD
VerSetConditionMask PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwAcceptConnectPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwAccessCheck PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwAccessCheckAndAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwAccessCheckByType PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwAccessCheckByTypeAndAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwAccessCheckByTypeResultList PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwAccessCheckByTypeResultListAndAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwAccessCheckByTypeResultListAndAuditAlarmByHandle PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwAddAtom PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwAddBootEntry PROTO STDCALL :DWORD,:DWORD
ZwAdjustGroupsToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwAdjustPrivilegesToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwAlertResumeThread PROTO STDCALL :DWORD,:DWORD
ZwAlertThread PROTO STDCALL :DWORD
ZwAllocateLocallyUniqueId PROTO STDCALL :DWORD
ZwAllocateUserPhysicalPages PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwAllocateUuids PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwAllocateVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwAreMappedFilesTheSame PROTO STDCALL :DWORD,:DWORD
ZwAssignProcessToJobObject PROTO STDCALL :DWORD,:DWORD
ZwCallbackReturn PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwCancelDeviceWakeupRequest PROTO STDCALL :DWORD
ZwCancelIoFile PROTO STDCALL :DWORD,:DWORD
ZwCancelTimer PROTO STDCALL :DWORD,:DWORD
ZwClearEvent PROTO STDCALL :DWORD
ZwClose PROTO STDCALL :DWORD
ZwCloseObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwCompactKeys PROTO STDCALL :DWORD,:DWORD
ZwCompareTokens PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwCompleteConnectPort PROTO STDCALL :DWORD
ZwCompressKey PROTO STDCALL :DWORD
ZwConnectPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwContinue PROTO STDCALL :DWORD,:DWORD
ZwCreateDebugObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwCreateDirectoryObject PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwCreateEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwCreateEventPair PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwCreateFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwCreateIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwCreateJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwCreateJobSet PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwCreateKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwCreateKeyedEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwCreateMailslotFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwCreateMutant PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwCreateNamedPipeFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwCreatePagingFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwCreatePort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwCreateProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwCreateProcessEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwCreateProfile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwCreateSection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwCreateSemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwCreateSymbolicLinkObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwCreateThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwCreateTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwCreateToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwCreateWaitablePort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwDebugActiveProcess PROTO STDCALL :DWORD,:DWORD
ZwDebugContinue PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwDelayExecution PROTO STDCALL :DWORD,:DWORD
ZwDeleteAtom PROTO STDCALL :DWORD
ZwDeleteBootEntry PROTO STDCALL :DWORD
ZwDeleteFile PROTO STDCALL :DWORD
ZwDeleteKey PROTO STDCALL :DWORD
ZwDeleteObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwDeleteValueKey PROTO STDCALL :DWORD,:DWORD
ZwDeviceIoControlFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwDisplayString PROTO STDCALL :DWORD
ZwDuplicateObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwDuplicateToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwEnumerateBootEntries PROTO STDCALL :DWORD,:DWORD
ZwEnumerateKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwEnumerateSystemEnvironmentValuesEx PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwEnumerateValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwExtendSection PROTO STDCALL :DWORD,:DWORD
ZwFilterToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwFindAtom PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwFlushBuffersFile PROTO STDCALL :DWORD,:DWORD
ZwFlushInstructionCache PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwFlushKey PROTO STDCALL :DWORD
ZwFlushVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwFlushWriteBuffer PROTO STDCALL
ZwFreeUserPhysicalPages PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwFreeVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwFsControlFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwGetContextThread PROTO STDCALL :DWORD,:DWORD
ZwGetDevicePowerState PROTO STDCALL :DWORD,:DWORD
ZwGetPlugPlayEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwGetWriteWatch PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwImpersonateAnonymousToken PROTO STDCALL :DWORD
ZwImpersonateClientOfPort PROTO STDCALL :DWORD,:DWORD
ZwImpersonateThread PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwInitializeRegistry PROTO STDCALL :DWORD
ZwInitiatePowerAction PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwIsProcessInJob PROTO STDCALL :DWORD,:DWORD
ZwIsSystemResumeAutomatic PROTO STDCALL
ZwListenPort PROTO STDCALL :DWORD,:DWORD
ZwLoadDriver PROTO STDCALL :DWORD
ZwLoadKey2 PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwLoadKey PROTO STDCALL :DWORD,:DWORD
ZwLockFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwLockProductActivationKeys PROTO STDCALL :DWORD,:DWORD
ZwLockRegistryKey PROTO STDCALL :DWORD
ZwLockVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwMakePermanentObject PROTO STDCALL :DWORD
ZwMakeTemporaryObject PROTO STDCALL :DWORD
ZwMapUserPhysicalPages PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwMapUserPhysicalPagesScatter PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwMapViewOfSection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwModifyBootEntry PROTO STDCALL :DWORD
ZwNotifyChangeDirectoryFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwNotifyChangeKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwNotifyChangeMultipleKeys PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwOpenDirectoryObject PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwOpenEvent PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwOpenEventPair PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwOpenFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwOpenIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwOpenJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwOpenKey PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwOpenKeyedEvent PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwOpenMutant PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwOpenObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwOpenProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwOpenProcessToken PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwOpenProcessTokenEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwOpenSection PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwOpenSemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwOpenSymbolicLinkObject PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwOpenThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwOpenThreadToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwOpenThreadTokenEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwOpenTimer PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwPlugPlayControl PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwPowerInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwPrivilegeCheck PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwPrivilegeObjectAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwPrivilegedServiceAuditAlarm PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwProtectVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwPulseEvent PROTO STDCALL :DWORD,:DWORD
ZwQueryAttributesFile PROTO STDCALL :DWORD,:DWORD
ZwQueryBootEntryOrder PROTO STDCALL :DWORD,:DWORD
ZwQueryBootOptions PROTO STDCALL :DWORD,:DWORD
ZwQueryDebugFilterState PROTO STDCALL :DWORD,:DWORD
ZwQueryDefaultLocale PROTO STDCALL :DWORD,:DWORD
ZwQueryDefaultUILanguage PROTO STDCALL :DWORD
ZwQueryDirectoryFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryDirectoryObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryEaFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryFullAttributesFile PROTO STDCALL :DWORD,:DWORD
ZwQueryInformationAtom PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryInformationJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryInformationPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryInformationProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryInformationThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryInformationToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryInstallUILanguage PROTO STDCALL :DWORD
ZwQueryIntervalProfile PROTO STDCALL :DWORD,:DWORD
ZwQueryIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryMultipleValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryMutant PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryOpenSubKeys PROTO STDCALL :DWORD,:DWORD
ZwQueryPerformanceCounter PROTO STDCALL :DWORD,:DWORD
ZwQueryPortInformationProcess PROTO STDCALL
ZwQueryQuotaInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQuerySection PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQuerySecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQuerySemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQuerySymbolicLinkObject PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwQuerySystemEnvironmentValue PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwQuerySystemEnvironmentValueEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQuerySystemInformation PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwQuerySystemTime PROTO STDCALL :DWORD
ZwQueryTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryTimerResolution PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwQueryValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueryVolumeInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwQueueApcThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwRaiseException PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwRaiseHardError PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwReadFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwReadFileScatter PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwReadRequestData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwReadVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwRegisterThreadTerminatePort PROTO STDCALL :DWORD
ZwReleaseKeyedEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwReleaseMutant PROTO STDCALL :DWORD,:DWORD
ZwReleaseSemaphore PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwRemoveIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwRemoveProcessDebug PROTO STDCALL :DWORD,:DWORD
ZwRenameKey PROTO STDCALL :DWORD,:DWORD
ZwReplaceKey PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwReplyPort PROTO STDCALL :DWORD,:DWORD
ZwReplyWaitReceivePort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwReplyWaitReceivePortEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwReplyWaitReplyPort PROTO STDCALL :DWORD,:DWORD
ZwRequestDeviceWakeup PROTO STDCALL :DWORD
ZwRequestPort PROTO STDCALL :DWORD,:DWORD
ZwRequestWaitReplyPort PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwRequestWakeupLatency PROTO STDCALL :DWORD
ZwResetEvent PROTO STDCALL :DWORD,:DWORD
ZwResetWriteWatch PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwRestoreKey PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwResumeProcess PROTO STDCALL :DWORD
ZwResumeThread PROTO STDCALL :DWORD,:DWORD
ZwSaveKey PROTO STDCALL :DWORD,:DWORD
ZwSaveKeyEx PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwSaveMergedKeys PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwSecureConnectPort PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwSetBootEntryOrder PROTO STDCALL :DWORD,:DWORD
ZwSetBootOptions PROTO STDCALL :DWORD,:DWORD
ZwSetContextThread PROTO STDCALL :DWORD,:DWORD
ZwSetDebugFilterState PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwSetDefaultHardErrorPort PROTO STDCALL :DWORD
ZwSetDefaultLocale PROTO STDCALL :DWORD,:DWORD
ZwSetDefaultUILanguage PROTO STDCALL :DWORD
ZwSetEaFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwSetEvent PROTO STDCALL :DWORD,:DWORD
ZwSetEventBoostPriority PROTO STDCALL :DWORD
ZwSetHighEventPair PROTO STDCALL :DWORD
ZwSetHighWaitLowEventPair PROTO STDCALL :DWORD
ZwSetInformationDebugObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwSetInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwSetInformationJobObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwSetInformationKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwSetInformationObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwSetInformationProcess PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwSetInformationThread PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwSetInformationToken PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwSetIntervalProfile PROTO STDCALL :DWORD,:DWORD
ZwSetIoCompletion PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwSetLdtEntries PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwSetLowEventPair PROTO STDCALL :DWORD
ZwSetLowWaitHighEventPair PROTO STDCALL :DWORD
ZwSetQuotaInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwSetSecurityObject PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwSetSystemEnvironmentValue PROTO STDCALL :DWORD,:DWORD
ZwSetSystemEnvironmentValueEx PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwSetSystemInformation PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwSetSystemPowerState PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwSetSystemTime PROTO STDCALL :DWORD,:DWORD
ZwSetThreadExecutionState PROTO STDCALL :DWORD,:DWORD
ZwSetTimer PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwSetTimerResolution PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwSetUuidSeed PROTO STDCALL :DWORD
ZwSetValueKey PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwSetVolumeInformationFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwShutdownSystem PROTO STDCALL :DWORD
ZwSignalAndWaitForSingleObject PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwStartProfile PROTO STDCALL :DWORD
ZwStopProfile PROTO STDCALL :DWORD
ZwSuspendProcess PROTO STDCALL :DWORD
ZwSuspendThread PROTO STDCALL :DWORD,:DWORD
ZwSystemDebugControl PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwTerminateJobObject PROTO STDCALL :DWORD,:DWORD
ZwTerminateProcess PROTO STDCALL :DWORD,:DWORD
ZwTerminateThread PROTO STDCALL :DWORD,:DWORD
ZwTestAlert PROTO STDCALL
ZwTraceEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwTranslateFilePath PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwUnloadDriver PROTO STDCALL :DWORD
ZwUnloadKey PROTO STDCALL :DWORD
ZwUnloadKeyEx PROTO STDCALL :DWORD,:DWORD
ZwUnlockFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwUnlockVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwUnmapViewOfSection PROTO STDCALL :DWORD,:DWORD
ZwVdmControl PROTO STDCALL :DWORD,:DWORD
ZwWaitForDebugEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwWaitForKeyedEvent PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD
ZwWaitForMultipleObjects PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwWaitForSingleObject PROTO STDCALL :DWORD,:DWORD,:DWORD
ZwWaitHighEventPair PROTO STDCALL :DWORD
ZwWaitLowEventPair PROTO STDCALL :DWORD
ZwWriteFile PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwWriteFileGather PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwWriteRequestData PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwWriteVirtualMemory PROTO STDCALL :DWORD,:DWORD,:DWORD,:DWORD,:DWORD
ZwYieldExecution PROTO STDCALL
ELSE
echo ----------------------------------------
echo WARNING duplicate include file ntdll.inc
echo ----------------------------------------
ENDIF