1 #note that the Zw... functions are alternate names for the
2 #Nt... functions. (see www.sysinternals.com for details)
3 #if you change a Nt.. function DON'T FORGET to change the
6 @ stdcall A_SHAFinal
(ptr ptr
)
7 @ stdcall A_SHAInit
(ptr
)
8 @ stdcall A_SHAUpdate
(ptr ptr long
)
9 @ stdcall ApiSetQueryApiSetPresence
(ptr ptr
)
10 @ stub CsrAllocateCaptureBuffer
11 @ stub CsrAllocateCapturePointer
12 @ stub CsrAllocateMessagePointer
13 @ stub CsrCaptureMessageBuffer
14 # @ stub CsrCaptureMessageMultiUnicodeStringsInPlace
15 @ stub CsrCaptureMessageString
16 @ stub CsrCaptureTimeout
17 @ stub CsrClientCallServer
18 @ stub CsrClientConnectToServer
19 @ stub CsrClientMaxMessage
20 @ stub CsrClientSendMessage
21 @ stub CsrClientThreadConnect
22 @ stub CsrFreeCaptureBuffer
23 # @ stub CsrGetProcessId
24 @ stub CsrIdentifyAlertableThread
26 @ stub CsrProbeForRead
27 @ stub CsrProbeForWrite
28 @ stub CsrSetPriorityClass
29 @ stub CsrpProcessCallbackRequest
30 @ stdcall DbgBreakPoint
()
31 @ varargs DbgPrint
(str
)
32 @ varargs DbgPrintEx
(long long str
)
33 # @ stub DbgPrintReturnControlC
35 # @ stub DbgQueryDebugFilterState
36 # @ stub DbgSetDebugFilterState
37 @ stub DbgUiConnectToDbg
39 @ stub DbgUiConvertStateChangeStructure
40 # @ stub DbgUiDebugActiveProcess
41 # @ stub DbgUiGetThreadDebugObject
42 @ stdcall DbgUiIssueRemoteBreakin
(long
)
43 @ stdcall DbgUiRemoteBreakin
(ptr
)
44 # @ stub DbgUiSetThreadDebugObject
45 # @ stub DbgUiStopDebugging
46 @ stub DbgUiWaitStateChange
47 @ stdcall DbgUserBreakPoint
()
48 @ stdcall EtwEventActivityIdControl
(long ptr
)
49 @ stdcall EtwEventEnabled
(int64 ptr
)
50 @ stdcall EtwEventProviderEnabled
(int64 long int64
)
51 @ stdcall EtwEventRegister
(ptr ptr ptr ptr
)
52 @ stdcall EtwEventSetInformation
(int64 long ptr long
)
53 @ stdcall EtwEventUnregister
(int64
)
54 @ stdcall EtwEventWrite
(int64 ptr long ptr
)
55 @ stdcall EtwEventWriteString
(int64 long int64 ptr
)
56 @ stdcall EtwEventWriteTransfer
(int64 ptr ptr ptr long ptr
)
57 @ stdcall EtwGetTraceEnableFlags
(int64
)
58 @ stdcall EtwGetTraceEnableLevel
(int64
)
59 @ stdcall
-ret64 EtwGetTraceLoggerHandle
(ptr
)
60 @ stdcall EtwLogTraceEvent
(int64 ptr
)
61 @ stdcall EtwRegisterTraceGuidsA
(ptr ptr ptr long ptr str str ptr
)
62 @ stdcall EtwRegisterTraceGuidsW
(ptr ptr ptr long ptr wstr wstr ptr
)
63 @ varargs EtwTraceMessage
(int64 long ptr long
)
64 @ stdcall EtwTraceMessageVa
(int64 long ptr long ptr
)
65 @ stdcall EtwUnregisterTraceGuids
(int64
)
66 # @ stub KiFastSystemCall
67 # @ stub KiFastSystemCallRet
68 # @ stub KiIntSystemCall
69 @ stdcall
-norelay KiRaiseUserExceptionDispatcher
()
70 @ stdcall
-norelay KiUserApcDispatcher
(ptr long long long ptr
)
71 @ stub KiUserCallbackDispatcher
72 @ stdcall
-norelay KiUserExceptionDispatcher
(ptr ptr
)
73 # @ stub LdrAccessOutOfProcessResource
74 @ stdcall LdrAccessResource
(long ptr ptr ptr
)
75 @ stdcall LdrAddDllDirectory
(ptr ptr
)
76 @ stdcall LdrAddRefDll
(long ptr
)
77 # @ stub LdrAlternateResourcesEnabled
78 # @ stub LdrCreateOutOfProcessImage
79 # @ stub LdrDestroyOutOfProcessImage
80 @ stdcall LdrDisableThreadCalloutsForDll
(long
)
81 @ stub LdrEnumResources
82 @ stdcall LdrEnumerateLoadedModules
(ptr ptr ptr
)
83 # @ stub LdrFindCreateProcessManifest
84 @ stdcall LdrFindEntryForAddress
(ptr ptr
)
85 @ stdcall LdrFindResourceDirectory_U
(long ptr long ptr
)
86 # @ stub LdrFindResourceEx_U
87 @ stdcall LdrFindResource_U
(long ptr long ptr
)
88 @ stub LdrFlushAlternateResourceModules
89 @ stdcall LdrGetDllDirectory
(ptr
)
90 @ stdcall LdrGetDllHandle
(wstr long ptr ptr
)
91 # @ stub LdrGetDllHandleEx
92 @ stdcall LdrGetDllPath
(wstr long ptr ptr
)
93 @ stdcall LdrGetProcedureAddress
(ptr ptr long ptr
)
94 # @ stub LdrHotPatchRoutine
95 @ stub LdrInitShimEngineDynamic
96 @ stdcall LdrInitializeThunk
(ptr long long long
)
97 @ stub LdrLoadAlternateResourceModule
98 @ stdcall LdrLoadDll
(wstr long ptr ptr
)
99 @ stdcall LdrLockLoaderLock
(long ptr ptr
)
100 @ stdcall LdrProcessRelocationBlock
(ptr long ptr long
)
101 @ stdcall LdrQueryImageFileExecutionOptions
(ptr wstr long ptr long ptr
)
102 @ stdcall LdrQueryProcessModuleInformation
(ptr long ptr
)
103 @ stdcall LdrRegisterDllNotification
(long ptr ptr ptr
)
104 @ stdcall LdrRemoveDllDirectory
(ptr
)
105 @ stdcall LdrResolveDelayLoadedAPI
(ptr ptr ptr ptr ptr long
)
106 @ stub LdrSetAppCompatDllRedirectionCallback
107 @ stdcall LdrSetDefaultDllDirectories
(long
)
108 @ stdcall LdrSetDllDirectory
(ptr
)
109 @ stub LdrSetDllManifestProber
110 @ stdcall LdrShutdownProcess
()
111 @ stdcall LdrShutdownThread
()
112 @ stub LdrUnloadAlternateResourceModule
113 @ stdcall LdrUnloadDll
(ptr
)
114 @ stdcall LdrUnlockLoaderLock
(long long
)
115 @ stdcall LdrUnregisterDllNotification
(ptr
)
116 @ stub LdrVerifyImageMatchesChecksum
117 @ stdcall MD4Final
(ptr
)
118 @ stdcall MD4Init
(ptr
)
119 @ stdcall MD4Update
(ptr ptr long
)
120 @ stdcall MD5Final
(ptr
)
121 @ stdcall MD5Init
(ptr
)
122 @ stdcall MD5Update
(ptr ptr long
)
123 @ extern NlsAnsiCodePage
124 @ extern NlsMbCodePageTag
125 @ extern NlsMbOemCodePageTag
126 @ stdcall
-syscall NtAcceptConnectPort
(ptr long ptr long ptr ptr
)
127 @ stdcall
-syscall NtAccessCheck
(ptr long long ptr ptr ptr ptr ptr
)
128 @ stdcall
-syscall NtAccessCheckAndAuditAlarm
(ptr long ptr ptr ptr long ptr long ptr ptr ptr
)
129 # @ stub NtAccessCheckByType
130 # @ stub NtAccessCheckByTypeAndAuditAlarm
131 # @ stub NtAccessCheckByTypeResultList
132 # @ stub NtAccessCheckByTypeResultListAndAuditAlarm
133 # @ stub NtAccessCheckByTypeResultListAndAuditAlarmByHandle
134 @ stdcall
-syscall NtAddAtom
(ptr long ptr
)
135 # @ stub NtAddBootEntry
136 @ stdcall
-syscall NtAdjustGroupsToken
(long long ptr long ptr ptr
)
137 @ stdcall
-syscall NtAdjustPrivilegesToken
(long long ptr long ptr ptr
)
138 @ stdcall
-syscall NtAlertResumeThread
(long ptr
)
139 @ stdcall
-syscall NtAlertThread
(long
)
140 @ stdcall
-syscall NtAllocateLocallyUniqueId
(ptr
)
141 # @ stub NtAllocateUserPhysicalPages
142 @ stdcall
-syscall NtAllocateUuids
(ptr ptr ptr ptr
)
143 @ stdcall
-syscall NtAllocateVirtualMemory
(long ptr long ptr long long
)
144 @ stdcall
-syscall NtAreMappedFilesTheSame
(ptr ptr
)
145 @ stdcall
-syscall NtAssignProcessToJobObject
(long long
)
146 @ stub NtCallbackReturn
147 # @ stub NtCancelDeviceWakeupRequest
148 @ stdcall
-syscall NtCancelIoFile
(long ptr
)
149 @ stdcall
-syscall NtCancelIoFileEx
(long ptr ptr
)
150 @ stdcall
-syscall NtCancelTimer
(long ptr
)
151 @ stdcall
-syscall NtClearEvent
(long
)
152 @ stdcall
-syscall NtClearPowerRequest
(long long
)
153 @ stdcall
-syscall NtClose
(long
)
154 @ stub NtCloseObjectAuditAlarm
155 # @ stub NtCompactKeys
156 # @ stub NtCompareTokens
157 @ stdcall
-syscall NtCompleteConnectPort
(ptr
)
158 # @ stub NtCompressKey
159 @ stdcall
-syscall NtConnectPort
(ptr ptr ptr ptr ptr ptr ptr ptr
)
160 @ stdcall
-syscall NtContinue
(ptr long
)
161 # @ stub NtCreateDebugObject
162 @ stdcall
-syscall NtCreateDirectoryObject
(ptr long ptr
)
163 @ stdcall
-syscall NtCreateEvent
(ptr long ptr long long
)
164 @ stub NtCreateEventPair
165 @ stdcall
-syscall NtCreateFile
(ptr long ptr ptr ptr long long long long ptr long
)
166 @ stdcall
-syscall NtCreateIoCompletion
(ptr long ptr long
)
167 @ stdcall
-syscall NtCreateJobObject
(ptr long ptr
)
168 # @ stub NtCreateJobSet
169 @ stdcall
-syscall NtCreateKey
(ptr long ptr long ptr long ptr
)
170 @ stdcall
-syscall NtCreateKeyTransacted
(ptr long ptr long ptr long long ptr
)
171 @ stdcall
-syscall NtCreateKeyedEvent
(ptr long ptr long
)
172 @ stdcall
-syscall NtCreateLowBoxToken
(ptr long long ptr ptr long ptr long ptr
)
173 @ stdcall
-syscall NtCreateMailslotFile
(ptr long ptr ptr long long long ptr
)
174 @ stdcall
-syscall NtCreateMutant
(ptr long ptr long
)
175 @ stdcall
-syscall NtCreateNamedPipeFile
(ptr long ptr ptr long long long long long long long long long ptr
)
176 @ stdcall
-syscall NtCreatePagingFile
(ptr ptr ptr ptr
)
177 @ stdcall
-syscall NtCreatePort
(ptr ptr long long ptr
)
178 @ stdcall
-syscall NtCreatePowerRequest
(ptr ptr
)
179 @ stub NtCreateProcess
180 # @ stub NtCreateProcessEx
181 @ stub NtCreateProfile
182 @ stdcall
-syscall NtCreateSection
(ptr long ptr ptr long long long
)
183 @ stdcall
-syscall NtCreateSemaphore
(ptr long ptr long long
)
184 @ stdcall
-syscall NtCreateSymbolicLinkObject
(ptr long ptr ptr
)
185 @ stub NtCreateThread
186 @ stdcall
-syscall NtCreateThreadEx
(ptr long ptr long ptr ptr long long long long ptr
)
187 @ stdcall
-syscall NtCreateTimer
(ptr long ptr long
)
189 @ stdcall
-syscall NtCreateUserProcess
(ptr ptr long long ptr ptr long long ptr ptr ptr
)
190 # @ stub NtCreateWaitablePort
191 @ stdcall
-arch
=win32
,arm64 NtCurrentTeb
()
192 # @ stub NtDebugActiveProcess
193 # @ stub NtDebugContinue
194 @ stdcall
-syscall NtDelayExecution
(long ptr
)
195 @ stdcall
-syscall NtDeleteAtom
(long
)
196 # @ stub NtDeleteBootEntry
197 @ stdcall
-syscall NtDeleteFile
(ptr
)
198 @ stdcall
-syscall NtDeleteKey
(long
)
199 # @ stub NtDeleteObjectAuditAlarm
200 @ stdcall
-syscall NtDeleteValueKey
(long ptr
)
201 @ stdcall
-syscall NtDeviceIoControlFile
(long long ptr ptr ptr long ptr long ptr long
)
202 @ stdcall
-syscall NtDisplayString
(ptr
)
203 @ stdcall
-syscall NtDuplicateObject
(long long long ptr long long long
)
204 @ stdcall
-syscall NtDuplicateToken
(long long ptr long long ptr
)
205 # @ stub NtEnumerateBootEntries
206 @ stub NtEnumerateBus
207 @ stdcall
-syscall NtEnumerateKey
(long long long ptr long ptr
)
208 # @ stub NtEnumerateSystemEnvironmentValuesEx
209 @ stdcall
-syscall NtEnumerateValueKey
(long long long ptr long ptr
)
210 @ stub NtExtendSection
211 @ stdcall
-syscall NtFilterToken
(long long ptr ptr ptr ptr
)
212 @ stdcall
-syscall NtFindAtom
(ptr long ptr
)
213 @ stdcall
-syscall NtFlushBuffersFile
(long ptr
)
214 @ stdcall
-syscall NtFlushInstructionCache
(long ptr long
)
215 @ stdcall
-syscall NtFlushKey
(long
)
216 @ stdcall
-syscall NtFlushProcessWriteBuffers
()
217 @ stdcall
-syscall NtFlushVirtualMemory
(long ptr ptr long
)
218 @ stub NtFlushWriteBuffer
219 # @ stub NtFreeUserPhysicalPages
220 @ stdcall
-syscall NtFreeVirtualMemory
(long ptr ptr long
)
221 @ stdcall
-syscall NtFsControlFile
(long long ptr ptr ptr long ptr long ptr long
)
222 @ stdcall
-norelay
-syscall NtGetContextThread
(long ptr
)
223 @ stdcall
-syscall NtGetCurrentProcessorNumber
()
224 # @ stub NtGetDevicePowerState
225 @ stdcall
-syscall NtGetNlsSectionPtr
(long long long ptr ptr
)
226 @ stub NtGetPlugPlayEvent
227 @ stdcall NtGetTickCount
()
228 @ stdcall
-syscall NtGetWriteWatch
(long long ptr long ptr ptr ptr
)
229 @ stdcall
-syscall NtImpersonateAnonymousToken
(long
)
230 @ stub NtImpersonateClientOfPort
231 @ stub NtImpersonateThread
232 @ stub NtInitializeRegistry
233 @ stdcall
-syscall NtInitiatePowerAction
(long long long long
)
234 @ stdcall
-syscall NtIsProcessInJob
(long long
)
235 # @ stub NtIsSystemResumeAutomatic
236 @ stdcall
-syscall NtListenPort
(ptr ptr
)
237 @ stdcall
-syscall NtLoadDriver
(ptr
)
238 @ stdcall
-syscall NtLoadKey2
(ptr ptr long
)
239 @ stdcall
-syscall NtLoadKey
(ptr ptr
)
240 @ stdcall
-syscall NtLockFile
(long long ptr ptr ptr ptr ptr ptr long long
)
241 # @ stub NtLockProductActivationKeys
242 # @ stub NtLockRegistryKey
243 @ stdcall
-syscall NtLockVirtualMemory
(long ptr ptr long
)
244 # @ stub NtMakePermanentObject
245 @ stdcall
-syscall NtMakeTemporaryObject
(long
)
246 # @ stub NtMapUserPhysicalPages
247 # @ stub NtMapUserPhysicalPagesScatter
248 @ stdcall
-syscall NtMapViewOfSection
(long long ptr long long ptr ptr long long long
)
249 # @ stub NtModifyBootEntry
250 @ stdcall
-syscall NtNotifyChangeDirectoryFile
(long long ptr ptr ptr ptr long long long
)
251 @ stdcall
-syscall NtNotifyChangeKey
(long long ptr ptr ptr long long ptr long long
)
252 @ stdcall
-syscall NtNotifyChangeMultipleKeys
(long long ptr long ptr ptr ptr long long ptr long long
)
253 @ stdcall
-syscall NtOpenDirectoryObject
(ptr long ptr
)
254 @ stdcall
-syscall NtOpenEvent
(ptr long ptr
)
255 @ stub NtOpenEventPair
256 @ stdcall
-syscall NtOpenFile
(ptr long ptr ptr long long
)
257 @ stdcall
-syscall NtOpenIoCompletion
(ptr long ptr
)
258 @ stdcall
-syscall NtOpenJobObject
(ptr long ptr
)
259 @ stdcall
-syscall NtOpenKey
(ptr long ptr
)
260 @ stdcall
-syscall NtOpenKeyEx
(ptr long ptr long
)
261 @ stdcall
-syscall NtOpenKeyTransacted
(ptr long ptr long
)
262 @ stdcall
-syscall NtOpenKeyTransactedEx
(ptr long ptr long long
)
263 @ stdcall
-syscall NtOpenKeyedEvent
(ptr long ptr
)
264 @ stdcall
-syscall NtOpenMutant
(ptr long ptr
)
265 @ stub NtOpenObjectAuditAlarm
266 @ stdcall
-syscall NtOpenProcess
(ptr long ptr ptr
)
267 @ stdcall
-syscall NtOpenProcessToken
(long long ptr
)
268 @ stdcall
-syscall NtOpenProcessTokenEx
(long long long ptr
)
269 @ stdcall
-syscall NtOpenSection
(ptr long ptr
)
270 @ stdcall
-syscall NtOpenSemaphore
(ptr long ptr
)
271 @ stdcall
-syscall NtOpenSymbolicLinkObject
(ptr long ptr
)
272 @ stdcall
-syscall NtOpenThread
(ptr long ptr ptr
)
273 @ stdcall
-syscall NtOpenThreadToken
(long long long ptr
)
274 @ stdcall
-syscall NtOpenThreadTokenEx
(long long long long ptr
)
275 @ stdcall
-syscall NtOpenTimer
(ptr long ptr
)
276 @ stub NtPlugPlayControl
277 @ stdcall
-syscall NtPowerInformation
(long ptr long ptr long
)
278 @ stdcall
-syscall NtPrivilegeCheck
(ptr ptr ptr
)
279 @ stub NtPrivilegeObjectAuditAlarm
280 @ stub NtPrivilegedServiceAuditAlarm
281 @ stdcall
-syscall NtProtectVirtualMemory
(long ptr ptr long ptr
)
282 @ stdcall
-syscall NtPulseEvent
(long ptr
)
283 @ stdcall
-syscall NtQueryAttributesFile
(ptr ptr
)
284 # @ stub NtQueryBootEntryOrder
285 # @ stub NtQueryBootOptions
286 # @ stub NtQueryDebugFilterState
287 @ stdcall
-syscall NtQueryDefaultLocale
(long ptr
)
288 @ stdcall
-syscall NtQueryDefaultUILanguage
(ptr
)
289 @ stdcall
-syscall NtQueryDirectoryFile
(long long ptr ptr ptr ptr long long long ptr long
)
290 @ stdcall
-syscall NtQueryDirectoryObject
(long ptr long long long ptr ptr
)
291 @ stdcall
-syscall NtQueryEaFile
(long ptr ptr long long ptr long ptr long
)
292 @ stdcall
-syscall NtQueryEvent
(long long ptr long ptr
)
293 @ stdcall
-syscall NtQueryFullAttributesFile
(ptr ptr
)
294 @ stdcall
-syscall NtQueryInformationAtom
(long long ptr long ptr
)
295 @ stdcall
-syscall NtQueryInformationFile
(long ptr ptr long long
)
296 @ stdcall
-syscall NtQueryInformationJobObject
(long long ptr long ptr
)
297 @ stub NtQueryInformationPort
298 @ stdcall
-syscall NtQueryInformationProcess
(long long ptr long ptr
)
299 @ stdcall
-syscall NtQueryInformationThread
(long long ptr long ptr
)
300 @ stdcall
-syscall NtQueryInformationToken
(long long ptr long ptr
)
301 @ stdcall
-syscall NtQueryInstallUILanguage
(ptr
)
302 @ stub NtQueryIntervalProfile
303 @ stdcall
-syscall NtQueryIoCompletion
(long long ptr long ptr
)
304 @ stdcall
-syscall NtQueryKey
(long long ptr long ptr
)
305 @ stdcall
-syscall NtQueryLicenseValue
(ptr ptr ptr long ptr
)
306 @ stdcall
-syscall NtQueryMultipleValueKey
(long ptr long ptr long ptr
)
307 @ stdcall
-syscall NtQueryMutant
(long long ptr long ptr
)
308 @ stdcall
-syscall NtQueryObject
(long long ptr long ptr
)
309 @ stub NtQueryOpenSubKeys
310 @ stdcall
-syscall NtQueryPerformanceCounter
(ptr ptr
)
311 # @ stub NtQueryPortInformationProcess
312 # @ stub NtQueryQuotaInformationFile
313 @ stdcall
-syscall NtQuerySection
(long long ptr long ptr
)
314 @ stdcall
-syscall NtQuerySecurityObject
(long long ptr long ptr
)
315 @ stdcall
-syscall NtQuerySemaphore
(long long ptr long ptr
)
316 @ stdcall
-syscall NtQuerySymbolicLinkObject
(long ptr ptr
)
317 @ stdcall
-syscall NtQuerySystemEnvironmentValue
(ptr ptr long ptr
)
318 @ stdcall
-syscall NtQuerySystemEnvironmentValueEx
(ptr ptr ptr ptr ptr
)
319 @ stdcall
-syscall NtQuerySystemInformation
(long ptr long ptr
)
320 @ stdcall
-syscall NtQuerySystemInformationEx
(long ptr long ptr long ptr
)
321 @ stdcall
-syscall NtQuerySystemTime
(ptr
)
322 @ stdcall
-syscall NtQueryTimer
(ptr long ptr long ptr
)
323 @ stdcall
-syscall NtQueryTimerResolution
(ptr ptr ptr
)
324 @ stdcall
-syscall NtQueryValueKey
(long ptr long ptr long ptr
)
325 @ stdcall
-syscall NtQueryVirtualMemory
(long ptr long ptr long ptr
)
326 @ stdcall
-syscall NtQueryVolumeInformationFile
(long ptr ptr long long
)
327 @ stdcall
-syscall NtQueueApcThread
(long ptr long long long
)
328 @ stdcall
-syscall NtRaiseException
(ptr ptr long
)
329 @ stdcall
-syscall NtRaiseHardError
(long long ptr ptr long ptr
)
330 @ stdcall
-syscall NtReadFile
(long long ptr ptr ptr ptr long ptr ptr
)
331 @ stdcall
-syscall NtReadFileScatter
(long long ptr ptr ptr ptr long ptr ptr
)
332 @ stub NtReadRequestData
333 @ stdcall
-syscall NtReadVirtualMemory
(long ptr ptr long ptr
)
334 @ stub NtRegisterNewDevice
335 @ stdcall
-syscall NtRegisterThreadTerminatePort
(ptr
)
336 @ stdcall
-syscall NtReleaseKeyedEvent
(long ptr long ptr
)
337 @ stdcall
-syscall NtReleaseMutant
(long ptr
)
338 @ stub NtReleaseProcessMutant
339 @ stdcall
-syscall NtReleaseSemaphore
(long long ptr
)
340 @ stdcall
-syscall NtRemoveIoCompletion
(ptr ptr ptr ptr ptr
)
341 @ stdcall
-syscall NtRemoveIoCompletionEx
(ptr ptr long ptr ptr long
)
342 # @ stub NtRemoveProcessDebug
343 @ stdcall
-syscall NtRenameKey
(long ptr
)
344 @ stdcall
-syscall NtReplaceKey
(ptr long ptr
)
346 @ stdcall
-syscall NtReplyWaitReceivePort
(ptr ptr ptr ptr
)
347 @ stub NtReplyWaitReceivePortEx
348 @ stub NtReplyWaitReplyPort
349 # @ stub NtRequestDeviceWakeup
351 @ stdcall
-syscall NtRequestWaitReplyPort
(ptr ptr ptr
)
352 # @ stub NtRequestWakeupLatency
353 @ stdcall
-syscall NtResetEvent
(long ptr
)
354 @ stdcall
-syscall NtResetWriteWatch
(long ptr long
)
355 @ stdcall
-syscall NtRestoreKey
(long long long
)
356 @ stdcall
-syscall NtResumeProcess
(long
)
357 @ stdcall
-syscall NtResumeThread
(long ptr
)
358 @ stdcall
-syscall NtSaveKey
(long long
)
360 # @ stub NtSaveMergedKeys
361 @ stdcall
-syscall NtSecureConnectPort
(ptr ptr ptr ptr ptr ptr ptr ptr ptr
)
362 # @ stub NtSetBootEntryOrder
363 # @ stub NtSetBootOptions
364 @ stdcall
-syscall NtSetContextThread
(long ptr
)
365 @ stub NtSetDebugFilterState
366 @ stub NtSetDefaultHardErrorPort
367 @ stdcall
-syscall NtSetDefaultLocale
(long long
)
368 @ stdcall
-syscall NtSetDefaultUILanguage
(long
)
369 @ stdcall
-syscall NtSetEaFile
(long ptr ptr long
)
370 @ stdcall
-syscall NtSetEvent
(long ptr
)
371 # @ stub NtSetEventBoostPriority
372 @ stub NtSetHighEventPair
373 @ stub NtSetHighWaitLowEventPair
374 @ stub NtSetHighWaitLowThread
375 # @ stub NtSetInformationDebugObject
376 @ stdcall
-syscall NtSetInformationFile
(long ptr ptr long long
)
377 @ stdcall
-syscall NtSetInformationJobObject
(long long ptr long
)
378 @ stdcall
-syscall NtSetInformationKey
(long long ptr long
)
379 @ stdcall
-syscall NtSetInformationObject
(long long ptr long
)
380 @ stdcall
-syscall NtSetInformationProcess
(long long ptr long
)
381 @ stdcall
-syscall NtSetInformationThread
(long long ptr long
)
382 @ stdcall
-syscall NtSetInformationToken
(long long ptr long
)
383 @ stdcall
-syscall NtSetIntervalProfile
(long long
)
384 @ stdcall
-syscall NtSetIoCompletion
(ptr long long long long
)
385 @ stdcall
-syscall NtSetLdtEntries
(long int64 long int64
)
386 @ stub NtSetLowEventPair
387 @ stub NtSetLowWaitHighEventPair
388 @ stub NtSetLowWaitHighThread
389 @ stdcall
-syscall NtSetPowerRequest
(long long
)
390 # @ stub NtSetQuotaInformationFile
391 @ stdcall
-syscall NtSetSecurityObject
(long long ptr
)
392 @ stub NtSetSystemEnvironmentValue
393 # @ stub NtSetSystemEnvironmentValueEx
394 @ stdcall
-syscall NtSetSystemInformation
(long ptr long
)
395 @ stub NtSetSystemPowerState
396 @ stdcall
-syscall NtSetSystemTime
(ptr ptr
)
397 @ stdcall
-syscall NtSetThreadExecutionState
(long ptr
)
398 @ stdcall
-syscall NtSetTimer
(long ptr ptr ptr long long ptr
)
399 @ stdcall
-syscall NtSetTimerResolution
(long long ptr
)
400 # @ stub NtSetUuidSeed
401 @ stdcall
-syscall NtSetValueKey
(long ptr long long ptr long
)
402 @ stdcall
-syscall NtSetVolumeInformationFile
(long ptr ptr long long
)
403 @ stdcall
-syscall NtShutdownSystem
(long
)
404 @ stdcall
-syscall NtSignalAndWaitForSingleObject
(long long long ptr
)
405 @ stub NtStartProfile
407 @ stdcall
-syscall NtSuspendProcess
(long
)
408 @ stdcall
-syscall NtSuspendThread
(long ptr
)
409 @ stdcall
-syscall NtSystemDebugControl
(long ptr long ptr long ptr
)
410 @ stdcall
-syscall NtTerminateJobObject
(long long
)
411 @ stdcall
-syscall NtTerminateProcess
(long long
)
412 @ stdcall
-syscall NtTerminateThread
(long long
)
414 # @ stub NtTraceEvent
415 # @ stub NtTranslateFilePath
416 @ stdcall
-syscall NtUnloadDriver
(ptr
)
417 @ stdcall
-syscall NtUnloadKey
(ptr
)
419 @ stdcall
-syscall NtUnlockFile
(long ptr ptr ptr ptr
)
420 @ stdcall
-syscall NtUnlockVirtualMemory
(long ptr ptr long
)
421 @ stdcall
-syscall NtUnmapViewOfSection
(long ptr
)
424 # @ stub NtWaitForDebugEvent
425 @ stdcall
-syscall NtWaitForKeyedEvent
(long ptr long ptr
)
426 @ stdcall
-syscall NtWaitForMultipleObjects
(long ptr long long ptr
)
427 @ stub NtWaitForProcessMutant
428 @ stdcall
-syscall NtWaitForSingleObject
(long long ptr
)
429 @ stub NtWaitHighEventPair
430 @ stub NtWaitLowEventPair
431 @ stdcall
-syscall NtWriteFile
(long long ptr ptr ptr ptr long ptr ptr
)
432 @ stdcall
-syscall NtWriteFileGather
(long long ptr ptr ptr ptr long ptr ptr
)
433 @ stub NtWriteRequestData
434 @ stdcall
-syscall NtWriteVirtualMemory
(long ptr ptr long ptr
)
435 @ stdcall
-syscall NtYieldExecution
()
438 @ stub PfxInsertPrefix
439 @ stub PfxRemovePrefix
440 # @ stub PropertyLengthAsVariant
442 @ stdcall RtlAbsoluteToSelfRelativeSD
(ptr ptr ptr
)
443 @ stdcall RtlAcquirePebLock
()
444 @ stdcall RtlAcquireResourceExclusive
(ptr long
)
445 @ stdcall RtlAcquireResourceShared
(ptr long
)
446 @ stdcall RtlAcquireSRWLockExclusive
(ptr
)
447 @ stdcall RtlAcquireSRWLockShared
(ptr
)
448 @ stdcall RtlActivateActivationContext
(long ptr ptr
)
449 @ stdcall RtlActivateActivationContextEx
(long ptr ptr ptr
)
450 @ stub RtlActivateActivationContextUnsafeFast
451 @ stdcall RtlAddAccessAllowedAce
(ptr long long ptr
)
452 @ stdcall RtlAddAccessAllowedAceEx
(ptr long long long ptr
)
453 @ stdcall RtlAddAccessAllowedObjectAce
(ptr long long long ptr ptr ptr
)
454 @ stdcall RtlAddAccessDeniedAce
(ptr long long ptr
)
455 @ stdcall RtlAddAccessDeniedAceEx
(ptr long long long ptr
)
456 @ stdcall RtlAddAccessDeniedObjectAce
(ptr long long long ptr ptr ptr
)
457 @ stdcall RtlAddAce
(ptr long long ptr long
)
458 @ stub RtlAddActionToRXact
459 @ stdcall RtlAddAtomToAtomTable
(ptr wstr ptr
)
460 @ stub RtlAddAttributeActionToRXact
461 @ stdcall RtlAddAuditAccessAce
(ptr long long ptr long long
)
462 @ stdcall RtlAddAuditAccessAceEx
(ptr long long long ptr long long
)
463 @ stdcall RtlAddAuditAccessObjectAce
(ptr long long long ptr ptr ptr long long
)
464 # @ stub RtlAddCompoundAce
465 @ stdcall RtlAddMandatoryAce
(ptr long long long long ptr
)
467 @ cdecl
-arch
=arm
,arm64
,x86_64 RtlAddFunctionTable
(ptr long long
)
468 @ stdcall
-arch
=arm
,arm64
,x86_64 RtlAddGrowableFunctionTable
(ptr ptr long long long long
)
469 @ stdcall RtlAddRefActivationContext
(ptr
)
470 # @ stub RtlAddRefMemoryStream
471 @ stdcall RtlAddVectoredContinueHandler
(long ptr
)
472 @ stdcall RtlAddVectoredExceptionHandler
(long ptr
)
473 # @ stub RtlAddressInSectionTable
474 @ stdcall RtlAdjustPrivilege
(long long long ptr
)
475 @ stdcall RtlAllocateAndInitializeSid
(ptr long long long long long long long long long ptr
)
476 @ stdcall RtlAllocateHandle
(ptr ptr
)
477 @ stdcall RtlAllocateHeap
(long long long
)
478 @ stdcall RtlAnsiCharToUnicodeChar
(ptr
)
479 @ stdcall RtlAnsiStringToUnicodeSize
(ptr
)
480 @ stdcall RtlAnsiStringToUnicodeString
(ptr ptr long
)
481 @ stdcall RtlAppendAsciizToString
(ptr str
)
482 # @ stub RtlAppendPathElement
483 @ stdcall RtlAppendStringToString
(ptr ptr
)
484 @ stdcall RtlAppendUnicodeStringToString
(ptr ptr
)
485 @ stdcall RtlAppendUnicodeToString
(ptr wstr
)
486 # @ stub RtlApplicationVerifierStop
488 @ stub RtlApplyRXactNoFlush
489 @ stdcall RtlAreAllAccessesGranted
(long long
)
490 @ stdcall RtlAreAnyAccessesGranted
(long long
)
491 @ stdcall RtlAreBitsClear
(ptr long long
)
492 @ stdcall RtlAreBitsSet
(ptr long long
)
494 @ stdcall RtlAssert
(ptr ptr long str
)
495 # @ stub RtlCancelTimer
496 @ stdcall
-norelay RtlCaptureContext
(ptr
)
497 @ stdcall RtlCaptureStackBackTrace
(long long ptr ptr
)
498 # @ stub RtlCaptureStackContext
499 @ stdcall RtlCharToInteger
(ptr long ptr
)
500 # @ stub RtlCheckForOrphanedCriticalSections
501 # @ stub RtlCheckProcessParameters
502 @ stdcall RtlCheckRegistryKey
(long ptr
)
503 @ stdcall RtlClearAllBits
(ptr
)
504 @ stdcall RtlClearBits
(ptr long long
)
505 # @ stub RtlCloneMemoryStream
506 @ stub RtlClosePropertySet
507 # @ stub RtlCommitMemoryStream
508 @ stdcall RtlCompactHeap
(long long
)
509 @ stdcall RtlCompareMemory
(ptr ptr long
)
510 @ stdcall RtlCompareMemoryUlong
(ptr long long
)
511 @ stdcall RtlCompareString
(ptr ptr long
)
512 @ stdcall RtlCompareUnicodeString
(ptr ptr long
)
513 @ stdcall RtlCompareUnicodeStrings
(ptr long ptr long long
)
514 @ stdcall RtlCompressBuffer
(long ptr long ptr long long ptr ptr
)
515 @ stdcall RtlComputeCrc32
(long ptr long
)
516 # @ stub RtlComputeImportTableHash
517 # @ stub RtlComputePrivatizedDllName_U
518 @ stub RtlConsoleMultiByteToUnicodeN
519 @ stub RtlConvertExclusiveToShared
520 @ stdcall
-arch
=win32
-ret64 RtlConvertLongToLargeInteger
(long
)
521 # @ stub RtlConvertPropertyToVariant
522 @ stub RtlConvertSharedToExclusive
523 @ stdcall RtlConvertSidToUnicodeString
(ptr ptr long
)
524 @ stdcall RtlConvertToAutoInheritSecurityObject
(ptr ptr ptr ptr long ptr
)
525 @ stub RtlConvertUiListToApiList
526 @ stdcall
-arch
=win32
-ret64 RtlConvertUlongToLargeInteger
(long
)
527 # @ stub RtlConvertVariantToProperty
528 @ stdcall RtlCopyExtendedContext
(ptr long ptr
)
529 @ stdcall RtlCopyLuid
(ptr ptr
)
530 @ stdcall RtlCopyLuidAndAttributesArray
(long ptr ptr
)
531 @ stdcall
-arch
=x86_64 RtlCopyMemory
(ptr ptr long
)
532 @ stdcall
-arch
=x86_64 RtlCopyMemoryNonTemporal
(ptr ptr long
) RtlCopyMemory
533 # @ stub RtlCopyMemoryStreamTo
534 # @ stub RtlCopyOutOfProcessMemoryStreamTo
535 # @ stub RtlCopyRangeList
536 @ stdcall RtlCopySecurityDescriptor
(ptr ptr
)
537 @ stdcall RtlCopySid
(long ptr ptr
)
538 @ stub RtlCopySidAndAttributesArray
539 @ stdcall RtlCopyString
(ptr ptr
)
540 @ stdcall RtlCopyUnicodeString
(ptr ptr
)
541 @ stdcall RtlCreateAcl
(ptr long long
)
542 @ stdcall RtlCreateActivationContext
(ptr ptr
)
543 @ stub RtlCreateAndSetSD
544 @ stdcall RtlCreateAtomTable
(long ptr
)
545 # @ stub RtlCreateBootStatusDataFile
546 @ stdcall RtlCreateEnvironment
(long ptr
)
547 @ stdcall RtlCreateHeap
(long ptr long long ptr ptr
)
548 @ stdcall RtlCreateProcessParameters
(ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr
)
549 @ stdcall RtlCreateProcessParametersEx
(ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr long
)
550 @ stub RtlCreatePropertySet
551 @ stdcall RtlCreateQueryDebugBuffer
(long long
)
552 @ stdcall RtlCreateRegistryKey
(long wstr
)
553 @ stdcall RtlCreateSecurityDescriptor
(ptr long
)
554 # @ stub RtlCreateSystemVolumeInformationFolder
555 @ stub RtlCreateTagHeap
556 @ stdcall RtlCreateTimer
(ptr ptr ptr ptr long long long
)
557 @ stdcall RtlCreateTimerQueue
(ptr
)
558 @ stdcall RtlCreateUnicodeString
(ptr wstr
)
559 @ stdcall RtlCreateUnicodeStringFromAsciiz
(ptr str
)
560 @ stdcall RtlCreateUserProcess
(ptr long ptr ptr ptr long long long long ptr
)
561 @ stub RtlCreateUserSecurityObject
562 @ stdcall RtlCreateUserStack
(long long long long long ptr
)
563 @ stdcall RtlCreateUserThread
(long ptr long ptr long long ptr ptr ptr ptr
)
564 @ stdcall RtlCustomCPToUnicodeN
(ptr ptr long ptr str long
)
565 @ stub RtlCutoverTimeToSystemTime
566 @ stdcall RtlDeNormalizeProcessParams
(ptr
)
567 @ stdcall RtlDeactivateActivationContext
(long long
)
568 @ stub RtlDeactivateActivationContextUnsafeFast
569 @ stub RtlDebugPrintTimes
570 @ stdcall RtlDecodePointer
(ptr
)
571 @ stdcall RtlDecodeSystemPointer
(ptr
) RtlDecodePointer
572 @ stdcall RtlDecompressBuffer
(long ptr long ptr long ptr
)
573 @ stdcall RtlDecompressFragment
(long ptr long ptr long long ptr ptr
)
574 @ stub RtlDefaultNpAcl
576 @ stdcall RtlDeleteAce
(ptr long
)
577 @ stdcall RtlDeleteAtomFromAtomTable
(ptr long
)
578 @ stdcall RtlDeleteCriticalSection
(ptr
)
579 @ stdcall
-arch
=arm
,arm64
,x86_64 RtlDeleteGrowableFunctionTable
(ptr
)
580 @ stub RtlDeleteElementGenericTable
581 @ stub RtlDeleteElementGenericTableAvl
582 @ cdecl
-arch
=arm
,arm64
,x86_64 RtlDeleteFunctionTable
(ptr
)
583 @ stub RtlDeleteNoSplay
584 @ stub RtlDeleteOwnersRanges
585 @ stub RtlDeleteRange
586 @ stdcall RtlDeleteRegistryValue
(long ptr ptr
)
587 @ stdcall RtlDeleteResource
(ptr
)
588 @ stdcall RtlDeleteSecurityObject
(ptr
)
589 @ stdcall RtlDeleteTimer
(ptr ptr ptr
)
590 # @ stub RtlDeleteTimerQueue
591 @ stdcall RtlDeleteTimerQueueEx
(ptr ptr
)
592 @ stdcall RtlDeregisterWait
(ptr
)
593 @ stdcall RtlDeregisterWaitEx
(ptr ptr
)
594 @ stdcall RtlDestroyAtomTable
(ptr
)
595 @ stdcall RtlDestroyEnvironment
(ptr
)
596 @ stdcall RtlDestroyHandleTable
(ptr
)
597 @ stdcall RtlDestroyHeap
(long
)
598 @ stdcall RtlDestroyProcessParameters
(ptr
)
599 @ stdcall RtlDestroyQueryDebugBuffer
(ptr
)
600 @ stdcall RtlDetermineDosPathNameType_U
(wstr
)
601 @ stdcall RtlDllShutdownInProgress
()
602 # @ stub RtlDnsHostNameToComputerName
603 @ stdcall RtlDoesFileExists_U
(wstr
)
604 # @ stub RtlDosApplyFileIsolationRedirection_Ustr
605 @ stdcall RtlDosPathNameToNtPathName_U
(wstr ptr ptr ptr
)
606 @ stdcall RtlDosPathNameToNtPathName_U_WithStatus
(wstr ptr ptr ptr
)
607 @ stdcall RtlDosPathNameToRelativeNtPathName_U_WithStatus
(wstr ptr ptr ptr
)
608 @ stdcall RtlDosSearchPath_U
(wstr wstr wstr long ptr ptr
)
609 # @ stub RtlDosSearchPath_Ustr
610 @ stdcall RtlDowncaseUnicodeChar
(long
)
611 @ stdcall RtlDowncaseUnicodeString
(ptr ptr long
)
612 @ stdcall RtlDumpResource
(ptr
)
613 @ stdcall RtlDuplicateUnicodeString
(long ptr ptr
)
614 @ stdcall RtlEmptyAtomTable
(ptr long
)
615 # @ stub RtlEnableEarlyCriticalSectionEventCreation
616 @ stdcall RtlEncodePointer
(ptr
)
617 @ stdcall RtlEncodeSystemPointer
(ptr
) RtlEncodePointer
618 @ stdcall
-arch
=win32
-ret64 RtlEnlargedIntegerMultiply
(long long
)
619 @ stdcall
-arch
=win32 RtlEnlargedUnsignedDivide
(int64 long ptr
)
620 @ stdcall
-arch
=win32
-ret64 RtlEnlargedUnsignedMultiply
(long long
)
621 @ stdcall RtlEnterCriticalSection
(ptr
)
622 @ stub RtlEnumProcessHeaps
623 @ stub RtlEnumerateGenericTable
624 # @ stub RtlEnumerateGenericTableAvl
625 # @ stub RtlEnumerateGenericTableLikeADirectory
626 @ stdcall RtlEnumerateGenericTableWithoutSplaying
(ptr ptr
)
627 # @ stub RtlEnumerateGenericTableWithoutSplayingAvl
628 @ stub RtlEnumerateProperties
629 @ stdcall RtlEqualComputerName
(ptr ptr
)
630 @ stdcall RtlEqualDomainName
(ptr ptr
)
631 @ stdcall RtlEqualLuid
(ptr ptr
)
632 @ stdcall RtlEqualPrefixSid
(ptr ptr
)
633 @ stdcall RtlEqualSid
(ptr ptr
)
634 @ stdcall RtlEqualString
(ptr ptr long
)
635 @ stdcall RtlEqualUnicodeString
(ptr ptr long
)
636 @ stdcall RtlEraseUnicodeString
(ptr
)
637 @ stdcall RtlExitUserProcess
(long
)
638 @ stdcall RtlExitUserThread
(long
)
639 @ stdcall RtlExpandEnvironmentStrings
(ptr wstr long ptr long ptr
)
640 @ stdcall RtlExpandEnvironmentStrings_U
(ptr ptr ptr ptr
)
642 @ stdcall
-arch
=win32
-ret64 RtlExtendedIntegerMultiply
(int64 long
)
643 @ stdcall
-arch
=win32
-ret64 RtlExtendedLargeIntegerDivide
(int64 long ptr
)
644 @ stdcall
-arch
=win32
-ret64 RtlExtendedMagicDivide
(int64 int64 long
)
645 @ stdcall RtlFillMemory
(ptr long long
)
646 @ stdcall RtlFillMemoryUlong
(ptr long long
)
647 @ stub RtlFinalReleaseOutOfProcessMemoryStream
648 @ stdcall RtlFindActivationContextSectionGuid
(long ptr long ptr ptr
)
649 @ stdcall RtlFindActivationContextSectionString
(long ptr long ptr ptr
)
650 @ stdcall RtlFindCharInUnicodeString
(long ptr ptr ptr
)
651 @ stdcall RtlFindClearBits
(ptr long long
)
652 @ stdcall RtlFindClearBitsAndSet
(ptr long long
)
653 @ stdcall RtlFindClearRuns
(ptr ptr long long
)
654 @ stdcall RtlFindLastBackwardRunClear
(ptr long ptr
)
655 @ stdcall RtlFindLastBackwardRunSet
(ptr long ptr
)
656 @ stdcall RtlFindLeastSignificantBit
(int64
)
657 @ stdcall RtlFindLongestRunClear
(ptr ptr
)
658 @ stdcall RtlFindLongestRunSet
(ptr ptr
)
659 @ stdcall RtlFindMessage
(long long long long ptr
)
660 @ stdcall RtlFindMostSignificantBit
(int64
)
661 @ stdcall RtlFindNextForwardRunClear
(ptr long ptr
)
662 @ stdcall RtlFindNextForwardRunSet
(ptr long ptr
)
664 @ stdcall RtlFindSetBits
(ptr long long
)
665 @ stdcall RtlFindSetBitsAndClear
(ptr long long
)
666 @ stdcall RtlFindSetRuns
(ptr ptr long long
)
667 @ stdcall RtlFirstEntrySList
(ptr
)
668 @ stdcall RtlFirstFreeAce
(ptr ptr
)
669 @ stdcall RtlFlsAlloc
(ptr ptr
)
670 @ stdcall RtlFlsFree
(long
)
671 @ stdcall RtlFlsGetValue
(long ptr
)
672 @ stdcall RtlFlsSetValue
(long ptr
)
673 @ stub RtlFlushPropertySet
674 # @ stub RtlFlushSecureMemoryCache
675 @ stdcall RtlFormatCurrentUserKeyPath
(ptr
)
676 @ stdcall RtlFormatMessage
(ptr long long long long ptr ptr long ptr
)
677 @ stdcall RtlFormatMessageEx
(ptr long long long long ptr ptr long ptr long
)
678 @ stdcall RtlFreeAnsiString
(ptr
)
679 @ stdcall RtlFreeHandle
(ptr ptr
)
680 @ stdcall RtlFreeHeap
(long long ptr
)
681 @ stdcall RtlFreeOemString
(ptr
)
682 # @ stub RtlFreeRangeList
683 @ stdcall RtlFreeSid
(ptr
)
684 @ stdcall RtlFreeThreadActivationContextStack
()
685 @ stdcall RtlFreeUnicodeString
(ptr
)
686 @ stdcall RtlFreeUserStack
(ptr
)
687 @ stdcall RtlGUIDFromString
(ptr ptr
)
688 @ stub RtlGenerate8dot3Name
689 @ stdcall RtlGetAce
(ptr long ptr
)
690 @ stdcall RtlGetActiveActivationContext
(ptr
)
691 @ stub RtlGetCallersAddress
692 @ stdcall RtlGetCompressionWorkSpaceSize
(long ptr ptr
)
693 @ stdcall RtlGetControlSecurityDescriptor
(ptr ptr ptr
)
694 @ stdcall RtlGetCurrentDirectory_U
(long ptr
)
695 @ stdcall RtlGetCurrentPeb
()
696 @ stdcall RtlGetCurrentProcessorNumberEx
(ptr
)
697 @ stdcall RtlGetCurrentTransaction
()
698 @ stdcall RtlGetDaclSecurityDescriptor
(ptr ptr ptr ptr
)
699 @ stub RtlGetElementGenericTable
700 # @ stub RtlGetElementGenericTableAvl
701 @ stdcall RtlGetEnabledExtendedFeatures
(int64
)
702 @ stdcall RtlGetExePath
(wstr ptr
)
703 @ stdcall RtlGetExtendedContextLength
(long ptr
)
704 @ stdcall RtlGetExtendedContextLength2
(long ptr int64
)
705 @ stdcall
-ret64 RtlGetExtendedFeaturesMask
(ptr
)
706 # @ stub RtlGetFirstRange
707 @ stdcall RtlGetFrame
()
708 @ stdcall RtlGetFullPathName_U
(wstr long ptr ptr
)
709 @ stdcall RtlGetGroupSecurityDescriptor
(ptr ptr ptr
)
710 @ stdcall RtlGetLastNtStatus
()
711 @ stdcall RtlGetLastWin32Error
()
712 # @ stub RtlGetLengthWithoutLastFullDosOrNtPathElement
713 # Yes, Microsoft really misspelled this one!
714 # @ stub RtlGetLengthWithoutTrailingPathSeperators
715 @ stdcall RtlGetLongestNtPathLength
()
716 @ stdcall RtlGetNativeSystemInformation
(long ptr long ptr
)
717 # @ stub RtlGetNextRange
718 @ stdcall RtlGetNtGlobalFlags
()
719 @ stdcall RtlGetNtProductType
(ptr
)
720 @ stdcall RtlGetNtVersionNumbers
(ptr ptr ptr
)
721 @ stdcall RtlGetOwnerSecurityDescriptor
(ptr ptr ptr
)
722 @ stdcall RtlGetProductInfo
(long long long long ptr
)
723 @ stdcall RtlGetProcessHeaps
(long ptr
)
724 @ stdcall RtlGetProcessPreferredUILanguages
(long ptr ptr ptr
)
725 @ stdcall RtlGetSaclSecurityDescriptor
(ptr ptr ptr ptr
)
726 @ stdcall RtlGetSearchPath
(ptr
)
727 # @ stub RtlGetSecurityDescriptorRMControl
728 # @ stub RtlGetSetBootStatusData
729 @ stdcall RtlGetSystemPreferredUILanguages
(long long ptr ptr ptr
)
730 @ stdcall
-ret64 RtlGetSystemTimePrecise
()
731 @ stdcall RtlGetThreadErrorMode
()
732 @ stdcall RtlGetThreadPreferredUILanguages
(long ptr ptr ptr
)
733 @ stdcall RtlGetUnloadEventTrace
()
734 @ stdcall RtlGetUnloadEventTraceEx
(ptr ptr ptr
)
735 @ stub RtlGetUserInfoHeap
736 @ stdcall RtlGetUserPreferredUILanguages
(long long ptr ptr ptr
)
737 @ stdcall RtlGetVersion
(ptr
)
738 @ stdcall
-arch
=arm
,arm64
,x86_64 RtlGrowFunctionTable
(ptr long
)
739 @ stub RtlGuidToPropertySetName
740 @ stdcall RtlHashUnicodeString
(ptr long long ptr
)
741 @ stdcall RtlIdentifierAuthoritySid
(ptr
)
742 @ stdcall RtlIdnToAscii
(long wstr long ptr ptr
)
743 @ stdcall RtlIdnToNameprepUnicode
(long wstr long ptr ptr
)
744 @ stdcall RtlIdnToUnicode
(long wstr long ptr ptr
)
745 @ stdcall RtlImageDirectoryEntryToData
(long long long ptr
)
746 @ stdcall RtlImageNtHeader
(long
)
747 @ stdcall RtlImageRvaToSection
(ptr long long
)
748 @ stdcall RtlImageRvaToVa
(ptr long long ptr
)
749 @ stdcall RtlImpersonateSelf
(long
)
750 @ stdcall RtlInitAnsiString
(ptr str
)
751 @ stdcall RtlInitAnsiStringEx
(ptr str
)
752 @ stdcall RtlInitCodePageTable
(ptr ptr
)
753 # @ stub RtlInitMemoryStream
754 @ stdcall RtlInitNlsTables
(ptr ptr ptr ptr
)
755 # @ stub RtlInitOutOfProcessMemoryStream
756 @ stdcall RtlInitString
(ptr str
)
757 @ stdcall RtlInitUnicodeString
(ptr wstr
)
758 @ stdcall RtlInitUnicodeStringEx
(ptr wstr
)
759 # @ stub RtlInitializeAtomPackage
760 @ stdcall RtlInitializeBitMap
(ptr ptr long
)
761 @ stdcall RtlInitializeConditionVariable
(ptr
)
762 @ stub RtlInitializeContext
763 @ stdcall RtlInitializeCriticalSection
(ptr
)
764 @ stdcall RtlInitializeCriticalSectionAndSpinCount
(ptr long
)
765 @ stdcall RtlInitializeCriticalSectionEx
(ptr long long
)
766 @ stdcall RtlInitializeExtendedContext
(ptr long ptr
)
767 @ stdcall RtlInitializeExtendedContext2
(ptr long ptr int64
)
768 @ stdcall RtlInitializeGenericTable
(ptr ptr ptr ptr ptr
)
769 @ stdcall RtlInitializeGenericTableAvl
(ptr ptr ptr ptr ptr
)
770 @ stdcall RtlInitializeHandleTable
(long long ptr
)
771 @ stub RtlInitializeRXact
772 # @ stub RtlInitializeRangeList
773 @ stdcall RtlInitializeResource
(ptr
)
774 @ stdcall RtlInitializeSListHead
(ptr
)
775 @ stdcall RtlInitializeSRWLock
(ptr
)
776 @ stdcall RtlInitializeSid
(ptr ptr long
)
777 # @ stub RtlInitializeStackTraceDataBase
778 @ stub RtlInsertElementGenericTable
779 @ stdcall RtlInsertElementGenericTableAvl
(ptr ptr long ptr
)
780 @ cdecl
-arch
=arm
,arm64
,x86_64 RtlInstallFunctionTableCallback
(long long long ptr ptr wstr
)
781 @ stdcall RtlInt64ToUnicodeString
(int64 long ptr
)
782 @ stdcall RtlIntegerToChar
(long long long ptr
)
783 @ stdcall RtlIntegerToUnicodeString
(long long ptr
)
784 @ stdcall
-arch
=win32
-ret64 RtlInterlockedCompareExchange64
(ptr int64 int64
)
785 @ stdcall RtlInterlockedFlushSList
(ptr
)
786 @ stdcall RtlInterlockedPopEntrySList
(ptr
)
787 @ stdcall RtlInterlockedPushEntrySList
(ptr ptr
)
788 @ stdcall
-fastcall RtlInterlockedPushListSList
(ptr ptr ptr long
)
789 @ stdcall RtlInterlockedPushListSListEx
(ptr ptr ptr long
)
790 # @ stub RtlInvertRangeList
791 @ stdcall RtlIpv4AddressToStringA
(ptr ptr
)
792 @ stdcall RtlIpv4AddressToStringExA
(ptr long ptr ptr
)
793 @ stdcall RtlIpv4AddressToStringExW
(ptr long ptr ptr
)
794 @ stdcall RtlIpv4AddressToStringW
(ptr ptr
)
795 @ stdcall RtlIpv4StringToAddressA
(str long ptr ptr
)
796 @ stdcall RtlIpv4StringToAddressExA
(str long ptr ptr
)
797 @ stdcall RtlIpv4StringToAddressExW
(wstr long ptr ptr
)
798 @ stdcall RtlIpv4StringToAddressW
(wstr long ptr ptr
)
799 @ stdcall RtlIpv6AddressToStringA
(ptr ptr
)
800 @ stdcall RtlIpv6AddressToStringExA
(ptr long long ptr ptr
)
801 @ stdcall RtlIpv6AddressToStringExW
(ptr long long ptr ptr
)
802 @ stdcall RtlIpv6AddressToStringW
(ptr ptr
)
803 @ stdcall RtlIpv6StringToAddressA
(str ptr ptr
)
804 @ stdcall RtlIpv6StringToAddressExA
(str ptr ptr ptr
)
805 @ stdcall RtlIpv6StringToAddressExW
(wstr ptr ptr ptr
)
806 @ stdcall RtlIpv6StringToAddressW
(wstr ptr ptr
)
807 @ stdcall RtlIsActivationContextActive
(ptr
)
808 @ stdcall RtlIsCriticalSectionLocked
(ptr
)
809 @ stdcall RtlIsCriticalSectionLockedByThread
(ptr
)
810 @ stdcall RtlIsDosDeviceName_U
(wstr
)
811 @ stub RtlIsGenericTableEmpty
812 # @ stub RtlIsGenericTableEmptyAvl
813 @ stdcall RtlIsNameLegalDOS8Dot3
(ptr ptr ptr
)
814 @ stdcall RtlIsNormalizedString
(long wstr long ptr
)
815 @ stdcall RtlIsProcessorFeaturePresent
(long
)
816 # @ stub RtlIsRangeAvailable
817 @ stdcall RtlIsTextUnicode
(ptr long ptr
)
818 # @ stub RtlIsThreadWithinLoaderCallout
819 @ stdcall RtlIsValidHandle
(ptr ptr
)
820 @ stdcall RtlIsValidIndexHandle
(ptr long ptr
)
821 @ stdcall
-arch
=win32
-ret64 RtlLargeIntegerAdd
(int64 int64
)
822 @ stdcall
-arch
=win32
-ret64 RtlLargeIntegerArithmeticShift
(int64 long
)
823 @ stdcall
-arch
=win32
-ret64 RtlLargeIntegerDivide
(int64 int64 ptr
)
824 @ stdcall
-arch
=win32
-ret64 RtlLargeIntegerNegate
(int64
)
825 @ stdcall
-arch
=win32
-ret64 RtlLargeIntegerShiftLeft
(int64 long
)
826 @ stdcall
-arch
=win32
-ret64 RtlLargeIntegerShiftRight
(int64 long
)
827 @ stdcall
-arch
=win32
-ret64 RtlLargeIntegerSubtract
(int64 int64
)
828 @ stdcall RtlLargeIntegerToChar
(ptr long long ptr
)
829 @ stdcall RtlLeaveCriticalSection
(ptr
)
830 @ stdcall RtlLengthRequiredSid
(long
)
831 @ stdcall RtlLengthSecurityDescriptor
(ptr
)
832 @ stdcall RtlLengthSid
(ptr
)
833 @ stdcall RtlLocalTimeToSystemTime
(ptr ptr
)
834 @ stdcall RtlLocaleNameToLcid
(wstr ptr long
)
835 @ stdcall RtlLocateExtendedFeature
(ptr long ptr
)
836 @ stdcall RtlLocateExtendedFeature2
(ptr long ptr ptr
)
837 @ stdcall RtlLocateLegacyContext
(ptr ptr
)
838 # @ stub RtlLockBootStatusData
839 @ stdcall RtlLockHeap
(long
)
840 # @ stub RtlLockMemoryStreamRegion
841 # @ stub RtlLogStackBackTrace
842 @ stdcall RtlLookupAtomInAtomTable
(ptr wstr ptr
)
843 @ stub RtlLookupElementGenericTable
844 # @ stub RtlLookupElementGenericTableAvl
845 @ stdcall
-arch
=arm
,arm64
,x86_64 RtlLookupFunctionEntry
(long ptr ptr
)
846 @ stdcall RtlMakeSelfRelativeSD
(ptr ptr ptr
)
847 @ stdcall RtlMapGenericMask
(ptr ptr
)
848 # @ stub RtlMapSecurityErrorToNtStatus
849 # @ stub RtlMergeRangeLists
850 @ stdcall RtlMoveMemory
(ptr ptr long
)
851 # @ stub RtlMultiAppendUnicodeStringBuffer
852 @ stdcall RtlMultiByteToUnicodeN
(ptr long ptr ptr long
)
853 @ stdcall RtlMultiByteToUnicodeSize
(ptr str long
)
854 @ stub RtlNewInstanceSecurityObject
855 @ stub RtlNewSecurityGrantedAccess
856 @ stdcall RtlNewSecurityObject
(ptr ptr ptr long ptr ptr
)
857 # @ stub RtlNewSecurityObjectEx
858 # @ stub RtlNewSecurityObjectWithMultipleInheritance
859 @ stdcall RtlNormalizeProcessParams
(ptr
)
860 @ stdcall RtlNormalizeString
(long wstr long ptr ptr
)
861 # @ stub RtlNtPathNameToDosPathName
862 @ stdcall RtlNtStatusToDosError
(long
)
863 @ stdcall RtlNtStatusToDosErrorNoTeb
(long
)
864 @ stdcall RtlNumberGenericTableElements
(ptr
)
865 # @ stub RtlNumberGenericTableElementsAvl
866 @ stdcall RtlNumberOfClearBits
(ptr
)
867 @ stdcall RtlNumberOfSetBits
(ptr
)
868 @ stdcall RtlOemStringToUnicodeSize
(ptr
)
869 @ stdcall RtlOemStringToUnicodeString
(ptr ptr long
)
870 @ stdcall RtlOemToUnicodeN
(ptr long ptr ptr long
)
871 @ stdcall RtlOpenCurrentUser
(long ptr
)
872 @ stdcall RtlPcToFileHeader
(ptr ptr
)
873 @ stdcall RtlPinAtomInAtomTable
(ptr long
)
874 @ stdcall RtlPopFrame
(ptr
)
875 @ stdcall RtlPrefixString
(ptr ptr long
)
876 @ stdcall RtlPrefixUnicodeString
(ptr ptr long
)
877 @ stdcall RtlProcessFlsData
(ptr long
)
878 @ stub RtlPropertySetNameToGuid
879 @ stub RtlProtectHeap
880 @ stdcall RtlPushFrame
(ptr
)
881 @ stdcall RtlQueryActivationContextApplicationSettings
(long ptr wstr wstr ptr long ptr
)
882 @ stdcall RtlQueryAtomInAtomTable
(ptr long ptr ptr ptr ptr
)
883 @ stdcall RtlQueryDepthSList
(ptr
)
884 @ stdcall RtlQueryDynamicTimeZoneInformation
(ptr
)
885 @ stdcall RtlQueryEnvironmentVariable_U
(ptr ptr ptr
)
886 @ stdcall RtlQueryEnvironmentVariable
(ptr ptr long ptr long ptr
)
887 @ stdcall RtlQueryHeapInformation
(long long ptr long ptr
)
888 @ stdcall RtlQueryInformationAcl
(ptr ptr long long
)
889 @ stdcall RtlQueryInformationActivationContext
(long long ptr long ptr long ptr
)
890 @ stub RtlQueryInformationActiveActivationContext
891 @ stub RtlQueryInterfaceMemoryStream
892 @ stdcall RtlQueryPackageIdentity
(long ptr ptr ptr ptr ptr
)
893 @ stdcall RtlQueryPerformanceCounter
(ptr
)
894 @ stdcall RtlQueryPerformanceFrequency
(ptr
)
895 @ stub RtlQueryProcessBackTraceInformation
896 @ stdcall RtlQueryProcessDebugInformation
(long long ptr
)
897 @ stub RtlQueryProcessHeapInformation
898 @ stub RtlQueryProcessLockInformation
899 @ stub RtlQueryProperties
900 @ stub RtlQueryPropertyNames
901 @ stub RtlQueryPropertySet
902 @ stdcall RtlQueryRegistryValues
(long ptr ptr ptr ptr
)
903 @ stub RtlQuerySecurityObject
904 @ stub RtlQueryTagHeap
905 @ stdcall RtlQueryTimeZoneInformation
(ptr
)
906 @ stdcall RtlQueryUnbiasedInterruptTime
(ptr
)
907 @ stub RtlQueueApcWow64Thread
908 @ stdcall RtlQueueWorkItem
(ptr ptr long
)
909 @ stdcall
-norelay RtlRaiseException
(ptr
)
910 @ stdcall RtlRaiseStatus
(long
)
911 @ stdcall RtlRandom
(ptr
)
912 @ stdcall RtlRandomEx
(ptr
)
913 @ stdcall RtlReAllocateHeap
(long long ptr long
)
914 @ stub RtlReadMemoryStream
915 @ stub RtlReadOutOfProcessMemoryStream
916 @ stub RtlRealPredecessor
917 @ stub RtlRealSuccessor
918 @ stub RtlRegisterSecureMemoryCacheCallback
919 @ stdcall RtlRegisterWait
(ptr ptr ptr ptr long long
)
920 @ stdcall RtlReleaseActivationContext
(ptr
)
921 @ stub RtlReleaseMemoryStream
922 @ stdcall RtlReleasePath
(ptr
)
923 @ stdcall RtlReleasePebLock
()
924 @ stdcall RtlReleaseRelativeName
(ptr
)
925 @ stdcall RtlReleaseResource
(ptr
)
926 @ stdcall RtlReleaseSRWLockExclusive
(ptr
)
927 @ stdcall RtlReleaseSRWLockShared
(ptr
)
929 @ stdcall RtlRemoveVectoredContinueHandler
(ptr
)
930 @ stdcall RtlRemoveVectoredExceptionHandler
(ptr
)
931 @ stdcall RtlResetRtlTranslations
(ptr
)
932 @ cdecl
-arch
=arm64
,x86_64 RtlRestoreContext
(ptr ptr
)
933 @ stdcall RtlRestoreLastWin32Error
(long
) RtlSetLastWin32Error
934 @ stub RtlRevertMemoryStream
935 @ stub RtlRunDecodeUnicodeString
936 @ stub RtlRunEncodeUnicodeString
937 @ stdcall RtlRunOnceBeginInitialize
(ptr long ptr
)
938 @ stdcall RtlRunOnceComplete
(ptr long ptr
)
939 @ stdcall RtlRunOnceExecuteOnce
(ptr ptr ptr ptr
)
940 @ stdcall RtlRunOnceInitialize
(ptr
)
941 @ stdcall RtlSecondsSince1970ToTime
(long ptr
)
942 @ stdcall RtlSecondsSince1980ToTime
(long ptr
)
943 # @ stub RtlSeekMemoryStream
944 # @ stub RtlSelfRelativeToAbsoluteSD2
945 @ stdcall RtlSelfRelativeToAbsoluteSD
(ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr
)
946 @ stdcall RtlSetAllBits
(ptr
)
947 # @ stub RtlSetAttributesSecurityDescriptor
948 @ stdcall RtlSetBits
(ptr long long
)
949 @ stdcall RtlSetControlSecurityDescriptor
(ptr long long
)
950 @ stdcall RtlSetCriticalSectionSpinCount
(ptr long
)
951 @ stdcall RtlSetCurrentDirectory_U
(ptr
)
952 @ stdcall RtlSetCurrentEnvironment
(wstr ptr
)
953 @ stdcall RtlSetCurrentTransaction
(ptr
)
954 @ stdcall RtlSetDaclSecurityDescriptor
(ptr long ptr long
)
955 @ stdcall RtlSetEnvironmentVariable
(ptr ptr ptr
)
956 @ stdcall RtlSetExtendedFeaturesMask
(ptr int64
)
957 @ stdcall RtlSetGroupSecurityDescriptor
(ptr ptr long
)
958 @ stdcall RtlSetHeapInformation
(long long ptr long
)
959 @ stub RtlSetInformationAcl
960 @ stdcall RtlSetIoCompletionCallback
(long ptr long
)
961 @ stdcall RtlSetLastWin32Error
(long
)
962 @ stdcall RtlSetLastWin32ErrorAndNtStatusFromNtStatus
(long
)
963 # @ stub RtlSetMemoryStreamSize
964 @ stdcall RtlSetOwnerSecurityDescriptor
(ptr ptr long
)
965 # @ stub RtlSetProcessIsCritical
966 @ stdcall RtlSetProcessPreferredUILanguages
(long ptr ptr
)
967 @ stub RtlSetProperties
968 @ stub RtlSetPropertyClassId
969 @ stub RtlSetPropertyNames
970 @ stub RtlSetPropertySetClassId
971 @ stdcall RtlSetSaclSecurityDescriptor
(ptr long ptr long
)
972 @ stdcall RtlSetSearchPathMode
(long
)
973 # @ stub RtlSetSecurityDescriptorRMControl
974 @ stub RtlSetSecurityObject
975 # @ stub RtlSetSecurityObjectEx
976 @ stdcall RtlSetThreadErrorMode
(long ptr
)
977 # @ stub RtlSetThreadIsCritical
978 @ stdcall RtlSetThreadPreferredUILanguages
(long ptr ptr
)
979 # @ stub RtlSetThreadPoolStartFunc
980 @ stdcall RtlSetTimeZoneInformation
(ptr
)
982 @ stdcall RtlSetUnhandledExceptionFilter
(ptr
)
983 @ stub RtlSetUnicodeCallouts
984 @ stub RtlSetUserFlagsHeap
985 @ stub RtlSetUserValueHeap
986 @ stdcall RtlSizeHeap
(long long ptr
)
987 @ stdcall RtlSleepConditionVariableCS
(ptr ptr ptr
)
988 @ stdcall RtlSleepConditionVariableSRW
(ptr ptr ptr long
)
991 # @ stub RtlStatMemoryStream
992 @ stdcall RtlStringFromGUID
(ptr ptr
)
993 @ stdcall RtlSubAuthorityCountSid
(ptr
)
994 @ stdcall RtlSubAuthoritySid
(ptr long
)
995 @ stub RtlSubtreePredecessor
996 @ stub RtlSubtreeSuccessor
997 @ stdcall RtlSystemTimeToLocalTime
(ptr ptr
)
998 @ stdcall RtlTimeFieldsToTime
(ptr ptr
)
999 @ stdcall RtlTimeToElapsedTimeFields
(ptr ptr
)
1000 @ stdcall RtlTimeToSecondsSince1970
(ptr ptr
)
1001 @ stdcall RtlTimeToSecondsSince1980
(ptr ptr
)
1002 @ stdcall RtlTimeToTimeFields
(ptr ptr
)
1003 # @ stub RtlTraceDatabaseAdd
1004 # @ stub RtlTraceDatabaseCreate
1005 # @ stub RtlTraceDatabaseDestroy
1006 # @ stub RtlTraceDatabaseEnumerate
1007 # @ stub RtlTraceDatabaseFind
1008 # @ stub RtlTraceDatabaseLock
1009 # @ stub RtlTraceDatabaseUnlock
1010 # @ stub RtlTraceDatabaseValidate
1011 @ stdcall RtlTryAcquireSRWLockExclusive
(ptr
)
1012 @ stdcall RtlTryAcquireSRWLockShared
(ptr
)
1013 @ stdcall RtlTryEnterCriticalSection
(ptr
)
1014 @ stdcall RtlUTF8ToUnicodeN
(ptr long ptr ptr long
)
1015 @ cdecl
-i386
-norelay RtlUlongByteSwap
() NTDLL_RtlUlongByteSwap
1016 @ cdecl
-ret64 RtlUlonglongByteSwap
(int64
)
1017 # @ stub RtlUnhandledExceptionFilter2
1018 # @ stub RtlUnhandledExceptionFilter
1019 @ stdcall RtlUnicodeStringToAnsiSize
(ptr
)
1020 @ stdcall RtlUnicodeStringToAnsiString
(ptr ptr long
)
1021 @ stub RtlUnicodeStringToCountedOemString
1022 @ stdcall RtlUnicodeStringToInteger
(ptr long ptr
)
1023 @ stdcall RtlUnicodeStringToOemSize
(ptr
)
1024 @ stdcall RtlUnicodeStringToOemString
(ptr ptr long
)
1025 @ stdcall RtlUnicodeToCustomCPN
(ptr ptr long ptr wstr long
)
1026 @ stdcall RtlUnicodeToMultiByteN
(ptr long ptr ptr long
)
1027 @ stdcall RtlUnicodeToMultiByteSize
(ptr ptr long
)
1028 @ stdcall RtlUnicodeToOemN
(ptr long ptr ptr long
)
1029 @ stdcall RtlUnicodeToUTF8N
(ptr long ptr ptr long
)
1030 @ stdcall RtlUniform
(ptr
)
1031 # @ stub RtlUnlockBootStatusData
1032 @ stdcall RtlUnlockHeap
(long
)
1033 # @ stub RtlUnlockMemoryStreamRegion
1034 @ stdcall
-norelay RtlUnwind
(ptr ptr ptr ptr
)
1035 @ stdcall
-arch
=arm64
,x86_64 RtlUnwindEx
(ptr ptr ptr ptr ptr ptr
)
1036 @ stdcall RtlUpcaseUnicodeChar
(long
)
1037 @ stdcall RtlUpcaseUnicodeString
(ptr ptr long
)
1038 @ stdcall RtlUpcaseUnicodeStringToAnsiString
(ptr ptr long
)
1039 @ stdcall RtlUpcaseUnicodeStringToCountedOemString
(ptr ptr long
)
1040 @ stdcall RtlUpcaseUnicodeStringToOemString
(ptr ptr long
)
1041 @ stdcall RtlUpcaseUnicodeToCustomCPN
(ptr ptr long ptr wstr long
)
1042 @ stdcall RtlUpcaseUnicodeToMultiByteN
(ptr long ptr ptr long
)
1043 @ stdcall RtlUpcaseUnicodeToOemN
(ptr long ptr ptr long
)
1044 @ stdcall RtlUpdateTimer
(ptr ptr long long
)
1045 @ stdcall RtlUpperChar
(long
)
1046 @ stdcall RtlUpperString
(ptr ptr
)
1048 @ stdcall
-norelay RtlUserThreadStart
(ptr ptr
)
1049 @ cdecl
-i386
-norelay RtlUshortByteSwap
() NTDLL_RtlUshortByteSwap
1050 @ stdcall RtlValidAcl
(ptr
)
1051 @ stdcall RtlValidRelativeSecurityDescriptor
(ptr long long
)
1052 @ stdcall RtlValidSecurityDescriptor
(ptr
)
1053 @ stdcall RtlValidSid
(ptr
)
1054 @ stdcall RtlValidateHeap
(long long ptr
)
1055 @ stub RtlValidateProcessHeaps
1056 # @ stub RtlValidateUnicodeString
1057 @ stdcall RtlVerifyVersionInfo
(ptr long int64
)
1058 @ stdcall
-arch
=arm64
,x86_64 RtlVirtualUnwind
(long long long ptr ptr ptr ptr ptr
)
1059 @ stdcall RtlWaitOnAddress
(ptr ptr long ptr
)
1060 @ stdcall RtlWakeAddressAll
(ptr
)
1061 @ stdcall RtlWakeAddressSingle
(ptr
)
1062 @ stdcall RtlWakeAllConditionVariable
(ptr
)
1063 @ stdcall RtlWakeConditionVariable
(ptr
)
1064 @ stub RtlWalkFrameChain
1065 @ stdcall RtlWalkHeap
(long ptr
)
1066 @ stdcall RtlWow64EnableFsRedirection
(long
)
1067 @ stdcall RtlWow64EnableFsRedirectionEx
(long ptr
)
1068 @ stdcall
-arch
=x86_64 RtlWow64GetThreadContext
(long ptr
)
1069 @ stdcall
-arch
=x86_64 RtlWow64SetThreadContext
(long ptr
)
1070 @ stub RtlWriteMemoryStream
1071 @ stdcall RtlWriteRegistryValue
(long ptr ptr long ptr long
)
1073 @ stdcall RtlZeroMemory
(ptr long
)
1074 @ stdcall RtlZombifyActivationContext
(ptr
)
1075 # @ stub RtlpApplyLengthFunction
1076 # @ stub RtlpEnsureBufferSize
1077 # @ stub RtlpNotOwnerCriticalSection
1078 @ stdcall RtlpNtCreateKey
(ptr long ptr long ptr long ptr
)
1079 @ stdcall RtlpNtEnumerateSubKey
(ptr ptr long
)
1080 @ stdcall RtlpNtMakeTemporaryKey
(ptr
)
1081 @ stdcall RtlpNtOpenKey
(ptr long ptr
)
1082 @ stdcall RtlpNtQueryValueKey
(long ptr ptr ptr ptr
)
1083 @ stdcall RtlpNtSetValueKey
(ptr long ptr long
)
1084 @ stdcall RtlpUnWaitCriticalSection
(ptr
)
1085 @ stdcall RtlpWaitForCriticalSection
(ptr
)
1086 @ stdcall RtlxAnsiStringToUnicodeSize
(ptr
) RtlAnsiStringToUnicodeSize
1087 @ stdcall RtlxOemStringToUnicodeSize
(ptr
) RtlOemStringToUnicodeSize
1088 @ stdcall RtlxUnicodeStringToAnsiSize
(ptr
) RtlUnicodeStringToAnsiSize
1089 @ stdcall RtlxUnicodeStringToOemSize
(ptr
) RtlUnicodeStringToOemSize
1090 @ stdcall TpAllocCleanupGroup
(ptr
)
1091 @ stdcall TpAllocIoCompletion
(ptr ptr ptr ptr ptr
)
1092 @ stdcall TpAllocPool
(ptr ptr
)
1093 @ stdcall TpAllocTimer
(ptr ptr ptr ptr
)
1094 @ stdcall TpAllocWait
(ptr ptr ptr ptr
)
1095 @ stdcall TpAllocWork
(ptr ptr ptr ptr
)
1096 @ stdcall TpCallbackLeaveCriticalSectionOnCompletion
(ptr ptr
)
1097 @ stdcall TpCallbackMayRunLong
(ptr
)
1098 @ stdcall TpCallbackReleaseMutexOnCompletion
(ptr long
)
1099 @ stdcall TpCallbackReleaseSemaphoreOnCompletion
(ptr long long
)
1100 @ stdcall TpCallbackSetEventOnCompletion
(ptr long
)
1101 @ stdcall TpCallbackUnloadDllOnCompletion
(ptr ptr
)
1102 @ stdcall TpCancelAsyncIoOperation
(ptr
)
1103 @ stdcall TpDisassociateCallback
(ptr
)
1104 @ stdcall TpIsTimerSet
(ptr
)
1105 @ stdcall TpPostWork
(ptr
)
1106 @ stdcall TpQueryPoolStackInformation
(ptr ptr
)
1107 @ stdcall TpReleaseCleanupGroup
(ptr
)
1108 @ stdcall TpReleaseCleanupGroupMembers
(ptr long ptr
)
1109 @ stdcall TpReleaseIoCompletion
(ptr
)
1110 @ stdcall TpReleasePool
(ptr
)
1111 @ stdcall TpReleaseTimer
(ptr
)
1112 @ stdcall TpReleaseWait
(ptr
)
1113 @ stdcall TpReleaseWork
(ptr
)
1114 @ stdcall TpSetPoolMaxThreads
(ptr long
)
1115 @ stdcall TpSetPoolMinThreads
(ptr long
)
1116 @ stdcall TpSetPoolStackInformation
(ptr ptr
)
1117 @ stdcall TpSetTimer
(ptr ptr long long
)
1118 @ stdcall TpSetWait
(ptr long ptr
)
1119 @ stdcall TpSimpleTryPost
(ptr ptr ptr
)
1120 @ stdcall TpStartAsyncIoOperation
(ptr
)
1121 @ stdcall TpWaitForIoCompletion
(ptr long
)
1122 @ stdcall TpWaitForTimer
(ptr long
)
1123 @ stdcall TpWaitForWait
(ptr long
)
1124 @ stdcall TpWaitForWork
(ptr long
)
1125 @ stdcall
-ret64 VerSetConditionMask
(int64 long long
)
1126 @ stdcall WinSqmEndSession
(long
)
1127 @ stdcall WinSqmIncrementDWORD
(long long long
)
1128 @ stdcall WinSqmIsOptedIn
()
1129 @ stdcall WinSqmSetDWORD
(ptr long long
)
1130 @ stdcall WinSqmStartSession
(ptr long long
)
1131 @ stdcall
-private
-syscall ZwAcceptConnectPort
(ptr long ptr long ptr ptr
) NtAcceptConnectPort
1132 @ stdcall
-private
-syscall ZwAccessCheck
(ptr long long ptr ptr ptr ptr ptr
) NtAccessCheck
1133 @ stdcall
-private
-syscall ZwAccessCheckAndAuditAlarm
(ptr long ptr ptr ptr long ptr long ptr ptr ptr
) NtAccessCheckAndAuditAlarm
1134 # @ stub ZwAccessCheckByType
1135 # @ stub ZwAccessCheckByTypeAndAuditAlarm
1136 # @ stub ZwAccessCheckByTypeResultList
1137 # @ stub ZwAccessCheckByTypeResultListAndAuditAlarm
1138 # @ stub ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
1139 @ stdcall
-private
-syscall ZwAddAtom
(ptr long ptr
) NtAddAtom
1140 # @ stub ZwAddBootEntry
1141 @ stdcall
-private
-syscall ZwAdjustGroupsToken
(long long ptr long ptr ptr
) NtAdjustGroupsToken
1142 @ stdcall
-private
-syscall ZwAdjustPrivilegesToken
(long long ptr long ptr ptr
) NtAdjustPrivilegesToken
1143 @ stdcall
-private
-syscall ZwAlertResumeThread
(long ptr
) NtAlertResumeThread
1144 @ stdcall
-private
-syscall ZwAlertThread
(long
) NtAlertThread
1145 @ stdcall
-private
-syscall ZwAllocateLocallyUniqueId
(ptr
) NtAllocateLocallyUniqueId
1146 # @ stub ZwAllocateUserPhysicalPages
1147 @ stdcall
-private
-syscall ZwAllocateUuids
(ptr ptr ptr ptr
) NtAllocateUuids
1148 @ stdcall
-private
-syscall ZwAllocateVirtualMemory
(long ptr long ptr long long
) NtAllocateVirtualMemory
1149 @ stdcall
-private
-syscall ZwAreMappedFilesTheSame
(ptr ptr
) NtAreMappedFilesTheSame
1150 @ stdcall
-private
-syscall ZwAssignProcessToJobObject
(long long
) NtAssignProcessToJobObject
1151 @ stub ZwCallbackReturn
1152 # @ stub ZwCancelDeviceWakeupRequest
1153 @ stdcall
-private
-syscall ZwCancelIoFile
(long ptr
) NtCancelIoFile
1154 @ stdcall
-private
-syscall ZwCancelIoFileEx
(long ptr ptr
) NtCancelIoFileEx
1155 @ stdcall
-private
-syscall ZwCancelTimer
(long ptr
) NtCancelTimer
1156 @ stdcall
-private
-syscall ZwClearEvent
(long
) NtClearEvent
1157 @ stdcall
-private
-syscall ZwClearPowerRequest
(long long
) NtClearPowerRequest
1158 @ stdcall
-private
-syscall ZwClose
(long
) NtClose
1159 @ stub ZwCloseObjectAuditAlarm
1160 # @ stub ZwCompactKeys
1161 # @ stub ZwCompareTokens
1162 @ stdcall
-private
-syscall ZwCompleteConnectPort
(ptr
) NtCompleteConnectPort
1163 # @ stub ZwCompressKey
1164 @ stdcall
-private
-syscall ZwConnectPort
(ptr ptr ptr ptr ptr ptr ptr ptr
) NtConnectPort
1165 @ stdcall
-private
-syscall ZwContinue
(ptr long
) NtContinue
1166 # @ stub ZwCreateDebugObject
1167 @ stdcall
-private
-syscall ZwCreateDirectoryObject
(ptr long ptr
) NtCreateDirectoryObject
1168 @ stdcall
-private
-syscall ZwCreateEvent
(ptr long ptr long long
) NtCreateEvent
1169 @ stub ZwCreateEventPair
1170 @ stdcall
-private
-syscall ZwCreateFile
(ptr long ptr ptr ptr long long long long ptr long
) NtCreateFile
1171 @ stdcall
-private
-syscall ZwCreateIoCompletion
(ptr long ptr long
) NtCreateIoCompletion
1172 @ stdcall
-private
-syscall ZwCreateJobObject
(ptr long ptr
) NtCreateJobObject
1173 # @ stub ZwCreateJobSet
1174 @ stdcall
-private
-syscall ZwCreateKey
(ptr long ptr long ptr long ptr
) NtCreateKey
1175 @ stdcall
-private
-syscall ZwCreateKeyTransacted
(ptr long ptr long ptr long long ptr
) NtCreateKeyTransacted
1176 @ stdcall
-private
-syscall ZwCreateKeyedEvent
(ptr long ptr long
) NtCreateKeyedEvent
1177 @ stdcall
-private
-syscall ZwCreateLowBoxToken
(ptr long long ptr ptr long ptr long ptr
) NtCreateLowBoxToken
1178 @ stdcall
-private
-syscall ZwCreateMailslotFile
(ptr long ptr ptr long long long ptr
) NtCreateMailslotFile
1179 @ stdcall
-private
-syscall ZwCreateMutant
(ptr long ptr long
) NtCreateMutant
1180 @ stdcall
-private
-syscall ZwCreateNamedPipeFile
(ptr long ptr ptr long long long long long long long long long ptr
) NtCreateNamedPipeFile
1181 @ stdcall
-private
-syscall ZwCreatePagingFile
(ptr ptr ptr ptr
) NtCreatePagingFile
1182 @ stdcall
-private
-syscall ZwCreatePort
(ptr ptr long long ptr
) NtCreatePort
1183 @ stdcall
-private
-syscall ZwCreatePowerRequest
(ptr ptr
) NtCreatePowerRequest
1184 @ stub ZwCreateProcess
1185 # @ stub ZwCreateProcessEx
1186 @ stub ZwCreateProfile
1187 @ stdcall
-private
-syscall ZwCreateSection
(ptr long ptr ptr long long long
) NtCreateSection
1188 @ stdcall
-private
-syscall ZwCreateSemaphore
(ptr long ptr long long
) NtCreateSemaphore
1189 @ stdcall
-private
-syscall ZwCreateSymbolicLinkObject
(ptr long ptr ptr
) NtCreateSymbolicLinkObject
1190 @ stub ZwCreateThread
1191 @ stdcall
-private
-syscall ZwCreateThreadEx
(ptr long ptr long ptr ptr long long long long ptr
) NtCreateThreadEx
1192 @ stdcall
-private
-syscall ZwCreateTimer
(ptr long ptr long
) NtCreateTimer
1193 @ stub ZwCreateToken
1194 @ stdcall
-private
-syscall ZwCreateUserProcess
(ptr ptr long long ptr ptr long long ptr ptr ptr
) NtCreateUserProcess
1195 # @ stub ZwCreateWaitablePort
1196 # @ stub ZwDebugActiveProcess
1197 # @ stub ZwDebugContinue
1198 @ stdcall
-private
-syscall ZwDelayExecution
(long ptr
) NtDelayExecution
1199 @ stdcall
-private
-syscall ZwDeleteAtom
(long
) NtDeleteAtom
1200 # @ stub ZwDeleteBootEntry
1201 @ stdcall
-private
-syscall ZwDeleteFile
(ptr
) NtDeleteFile
1202 @ stdcall
-private
-syscall ZwDeleteKey
(long
) NtDeleteKey
1203 # @ stub ZwDeleteObjectAuditAlarm
1204 @ stdcall
-private
-syscall ZwDeleteValueKey
(long ptr
) NtDeleteValueKey
1205 @ stdcall
-private
-syscall ZwDeviceIoControlFile
(long long ptr ptr ptr long ptr long ptr long
) NtDeviceIoControlFile
1206 @ stdcall
-private
-syscall ZwDisplayString
(ptr
) NtDisplayString
1207 @ stdcall
-private
-syscall ZwDuplicateObject
(long long long ptr long long long
) NtDuplicateObject
1208 @ stdcall
-private
-syscall ZwDuplicateToken
(long long ptr long long ptr
) NtDuplicateToken
1209 # @ stub ZwEnumerateBootEntries
1210 @ stub ZwEnumerateBus
1211 @ stdcall
-private
-syscall ZwEnumerateKey
(long long long ptr long ptr
) NtEnumerateKey
1212 # @ stub ZwEnumerateSystemEnvironmentValuesEx
1213 @ stdcall
-private
-syscall ZwEnumerateValueKey
(long long long ptr long ptr
) NtEnumerateValueKey
1214 @ stub ZwExtendSection
1215 # @ stub ZwFilterToken
1216 @ stdcall
-private
-syscall ZwFindAtom
(ptr long ptr
) NtFindAtom
1217 @ stdcall
-private
-syscall ZwFlushBuffersFile
(long ptr
) NtFlushBuffersFile
1218 @ stdcall
-private
-syscall ZwFlushInstructionCache
(long ptr long
) NtFlushInstructionCache
1219 @ stdcall
-private
-syscall ZwFlushKey
(long
) NtFlushKey
1220 @ stdcall
-private
-syscall ZwFlushProcessWriteBuffers
() NtFlushProcessWriteBuffers
1221 @ stdcall
-private
-syscall ZwFlushVirtualMemory
(long ptr ptr long
) NtFlushVirtualMemory
1222 @ stub ZwFlushWriteBuffer
1223 # @ stub ZwFreeUserPhysicalPages
1224 @ stdcall
-private
-syscall ZwFreeVirtualMemory
(long ptr ptr long
) NtFreeVirtualMemory
1225 @ stdcall
-private
-syscall ZwFsControlFile
(long long ptr ptr ptr long ptr long ptr long
) NtFsControlFile
1226 @ stdcall
-private
-norelay
-syscall ZwGetContextThread
(long ptr
) NtGetContextThread
1227 @ stdcall
-private
-syscall ZwGetCurrentProcessorNumber
() NtGetCurrentProcessorNumber
1228 # @ stub ZwGetDevicePowerState
1229 @ stdcall
-private
-syscall ZwGetNlsSectionPtr
(long long long ptr ptr
) NtGetNlsSectionPtr
1230 @ stub ZwGetPlugPlayEvent
1231 @ stdcall
-private ZwGetTickCount
() NtGetTickCount
1232 @ stdcall
-private
-syscall ZwGetWriteWatch
(long long ptr long ptr ptr ptr
) NtGetWriteWatch
1233 @ stdcall
-private
-syscall ZwImpersonateAnonymousToken
(long
) NtImpersonateAnonymousToken
1234 @ stub ZwImpersonateClientOfPort
1235 @ stub ZwImpersonateThread
1236 @ stub ZwInitializeRegistry
1237 @ stdcall
-private
-syscall ZwInitiatePowerAction
(long long long long
) NtInitiatePowerAction
1238 @ stdcall
-private
-syscall ZwIsProcessInJob
(long long
) NtIsProcessInJob
1239 # @ stub ZwIsSystemResumeAutomatic
1240 @ stdcall
-private
-syscall ZwListenPort
(ptr ptr
) NtListenPort
1241 @ stdcall
-private
-syscall ZwLoadDriver
(ptr
) NtLoadDriver
1242 @ stdcall
-private
-syscall ZwLoadKey2
(ptr ptr long
) NtLoadKey2
1243 @ stdcall
-private
-syscall ZwLoadKey
(ptr ptr
) NtLoadKey
1244 @ stdcall
-private
-syscall ZwLockFile
(long long ptr ptr ptr ptr ptr ptr long long
) NtLockFile
1245 # @ stub ZwLockProductActivationKeys
1246 # @ stub ZwLockRegistryKey
1247 @ stdcall
-private
-syscall ZwLockVirtualMemory
(long ptr ptr long
) NtLockVirtualMemory
1248 # @ stub ZwMakePermanentObject
1249 @ stdcall
-private
-syscall ZwMakeTemporaryObject
(long
) NtMakeTemporaryObject
1250 # @ stub ZwMapUserPhysicalPages
1251 # @ stub ZwMapUserPhysicalPagesScatter
1252 @ stdcall
-private
-syscall ZwMapViewOfSection
(long long ptr long long ptr ptr long long long
) NtMapViewOfSection
1253 # @ stub ZwModifyBootEntry
1254 @ stdcall
-private
-syscall ZwNotifyChangeDirectoryFile
(long long ptr ptr ptr ptr long long long
) NtNotifyChangeDirectoryFile
1255 @ stdcall
-private
-syscall ZwNotifyChangeKey
(long long ptr ptr ptr long long ptr long long
) NtNotifyChangeKey
1256 @ stdcall
-private
-syscall ZwNotifyChangeMultipleKeys
(long long ptr long ptr ptr ptr long long ptr long long
) NtNotifyChangeMultipleKeys
1257 @ stdcall
-private
-syscall ZwOpenDirectoryObject
(ptr long ptr
) NtOpenDirectoryObject
1258 @ stdcall
-private
-syscall ZwOpenEvent
(ptr long ptr
) NtOpenEvent
1259 @ stub ZwOpenEventPair
1260 @ stdcall
-private
-syscall ZwOpenFile
(ptr long ptr ptr long long
) NtOpenFile
1261 @ stdcall
-private
-syscall ZwOpenIoCompletion
(ptr long ptr
) NtOpenIoCompletion
1262 @ stdcall
-private
-syscall ZwOpenJobObject
(ptr long ptr
) NtOpenJobObject
1263 @ stdcall
-private
-syscall ZwOpenKey
(ptr long ptr
) NtOpenKey
1264 @ stdcall
-private
-syscall ZwOpenKeyEx
(ptr long ptr long
) NtOpenKeyEx
1265 @ stdcall
-private
-syscall ZwOpenKeyTransacted
(ptr long ptr long
) NtOpenKeyTransacted
1266 @ stdcall
-private
-syscall ZwOpenKeyTransactedEx
(ptr long ptr long long
) NtOpenKeyTransactedEx
1267 @ stdcall
-private
-syscall ZwOpenKeyedEvent
(ptr long ptr
) NtOpenKeyedEvent
1268 @ stdcall
-private
-syscall ZwOpenMutant
(ptr long ptr
) NtOpenMutant
1269 @ stub ZwOpenObjectAuditAlarm
1270 @ stdcall
-private
-syscall ZwOpenProcess
(ptr long ptr ptr
) NtOpenProcess
1271 @ stdcall
-private
-syscall ZwOpenProcessToken
(long long ptr
) NtOpenProcessToken
1272 @ stdcall
-private
-syscall ZwOpenProcessTokenEx
(long long long ptr
) NtOpenProcessTokenEx
1273 @ stdcall
-private
-syscall ZwOpenSection
(ptr long ptr
) NtOpenSection
1274 @ stdcall
-private
-syscall ZwOpenSemaphore
(ptr long ptr
) NtOpenSemaphore
1275 @ stdcall
-private
-syscall ZwOpenSymbolicLinkObject
(ptr long ptr
) NtOpenSymbolicLinkObject
1276 @ stdcall
-private
-syscall ZwOpenThread
(ptr long ptr ptr
) NtOpenThread
1277 @ stdcall
-private
-syscall ZwOpenThreadToken
(long long long ptr
) NtOpenThreadToken
1278 @ stdcall
-private
-syscall ZwOpenThreadTokenEx
(long long long long ptr
) NtOpenThreadTokenEx
1279 @ stdcall
-private
-syscall ZwOpenTimer
(ptr long ptr
) NtOpenTimer
1280 @ stub ZwPlugPlayControl
1281 @ stdcall
-private
-syscall ZwPowerInformation
(long ptr long ptr long
) NtPowerInformation
1282 @ stdcall
-private
-syscall ZwPrivilegeCheck
(ptr ptr ptr
) NtPrivilegeCheck
1283 @ stub ZwPrivilegeObjectAuditAlarm
1284 @ stub ZwPrivilegedServiceAuditAlarm
1285 @ stdcall
-private
-syscall ZwProtectVirtualMemory
(long ptr ptr long ptr
) NtProtectVirtualMemory
1286 @ stdcall
-private
-syscall ZwPulseEvent
(long ptr
) NtPulseEvent
1287 @ stdcall
-private
-syscall ZwQueryAttributesFile
(ptr ptr
) NtQueryAttributesFile
1288 # @ stub ZwQueryBootEntryOrder
1289 # @ stub ZwQueryBootOptions
1290 # @ stub ZwQueryDebugFilterState
1291 @ stdcall
-private
-syscall ZwQueryDefaultLocale
(long ptr
) NtQueryDefaultLocale
1292 @ stdcall
-private
-syscall ZwQueryDefaultUILanguage
(ptr
) NtQueryDefaultUILanguage
1293 @ stdcall
-private
-syscall ZwQueryDirectoryFile
(long long ptr ptr ptr ptr long long long ptr long
) NtQueryDirectoryFile
1294 @ stdcall
-private
-syscall ZwQueryDirectoryObject
(long ptr long long long ptr ptr
) NtQueryDirectoryObject
1295 @ stdcall
-private
-syscall ZwQueryEaFile
(long ptr ptr long long ptr long ptr long
) NtQueryEaFile
1296 @ stdcall
-private
-syscall ZwQueryEvent
(long long ptr long ptr
) NtQueryEvent
1297 @ stdcall
-private
-syscall ZwQueryFullAttributesFile
(ptr ptr
) NtQueryFullAttributesFile
1298 @ stdcall
-private
-syscall ZwQueryInformationAtom
(long long ptr long ptr
) NtQueryInformationAtom
1299 @ stdcall
-private
-syscall ZwQueryInformationFile
(long ptr ptr long long
) NtQueryInformationFile
1300 @ stdcall
-private
-syscall ZwQueryInformationJobObject
(long long ptr long ptr
) NtQueryInformationJobObject
1301 @ stub ZwQueryInformationPort
1302 @ stdcall
-private
-syscall ZwQueryInformationProcess
(long long ptr long ptr
) NtQueryInformationProcess
1303 @ stdcall
-private
-syscall ZwQueryInformationThread
(long long ptr long ptr
) NtQueryInformationThread
1304 @ stdcall
-private
-syscall ZwQueryInformationToken
(long long ptr long ptr
) NtQueryInformationToken
1305 @ stdcall
-private
-syscall ZwQueryInstallUILanguage
(ptr
) NtQueryInstallUILanguage
1306 @ stub ZwQueryIntervalProfile
1307 @ stdcall
-private
-syscall ZwQueryIoCompletion
(long long ptr long ptr
) NtQueryIoCompletion
1308 @ stdcall
-private
-syscall ZwQueryKey
(long long ptr long ptr
) NtQueryKey
1309 @ stdcall
-private
-syscall ZwQueryLicenseValue
(ptr ptr ptr long ptr
) NtQueryLicenseValue
1310 @ stdcall
-private
-syscall ZwQueryMultipleValueKey
(long ptr long ptr long ptr
) NtQueryMultipleValueKey
1311 @ stdcall
-private
-syscall ZwQueryMutant
(long long ptr long ptr
) NtQueryMutant
1312 @ stdcall
-private
-syscall ZwQueryObject
(long long ptr long ptr
) NtQueryObject
1313 @ stub ZwQueryOpenSubKeys
1314 @ stdcall
-private
-syscall ZwQueryPerformanceCounter
(ptr ptr
) NtQueryPerformanceCounter
1315 # @ stub ZwQueryPortInformationProcess
1316 # @ stub ZwQueryQuotaInformationFile
1317 @ stdcall
-private
-syscall ZwQuerySection
(long long ptr long ptr
) NtQuerySection
1318 @ stdcall
-private
-syscall ZwQuerySecurityObject
(long long ptr long ptr
) NtQuerySecurityObject
1319 @ stdcall
-private
-syscall ZwQuerySemaphore
(long long ptr long ptr
) NtQuerySemaphore
1320 @ stdcall
-private
-syscall ZwQuerySymbolicLinkObject
(long ptr ptr
) NtQuerySymbolicLinkObject
1321 @ stdcall
-private
-syscall ZwQuerySystemEnvironmentValue
(ptr ptr long ptr
) NtQuerySystemEnvironmentValue
1322 @ stdcall
-private
-syscall ZwQuerySystemEnvironmentValueEx
(ptr ptr ptr ptr ptr
) NtQuerySystemEnvironmentValueEx
1323 @ stdcall
-private
-syscall ZwQuerySystemInformation
(long ptr long ptr
) NtQuerySystemInformation
1324 @ stdcall
-private
-syscall ZwQuerySystemInformationEx
(long ptr long ptr long ptr
) NtQuerySystemInformationEx
1325 @ stdcall
-private
-syscall ZwQuerySystemTime
(ptr
) NtQuerySystemTime
1326 @ stdcall
-private
-syscall ZwQueryTimer
(ptr long ptr long ptr
) NtQueryTimer
1327 @ stdcall
-private
-syscall ZwQueryTimerResolution
(ptr ptr ptr
) NtQueryTimerResolution
1328 @ stdcall
-private
-syscall ZwQueryValueKey
(long ptr long ptr long ptr
) NtQueryValueKey
1329 @ stdcall
-private
-syscall ZwQueryVirtualMemory
(long ptr long ptr long ptr
) NtQueryVirtualMemory
1330 @ stdcall
-private
-syscall ZwQueryVolumeInformationFile
(long ptr ptr long long
) NtQueryVolumeInformationFile
1331 @ stdcall
-private
-syscall ZwQueueApcThread
(long ptr long long long
) NtQueueApcThread
1332 @ stdcall
-private
-syscall ZwRaiseException
(ptr ptr long
) NtRaiseException
1333 @ stdcall
-private
-syscall ZwRaiseHardError
(long long ptr ptr long ptr
) NtRaiseHardError
1334 @ stdcall
-private
-syscall ZwReadFile
(long long ptr ptr ptr ptr long ptr ptr
) NtReadFile
1335 @ stdcall
-private
-syscall ZwReadFileScatter
(long long ptr ptr ptr ptr long ptr ptr
) NtReadFileScatter
1336 @ stub ZwReadRequestData
1337 @ stdcall
-private
-syscall ZwReadVirtualMemory
(long ptr ptr long ptr
) NtReadVirtualMemory
1338 @ stub ZwRegisterNewDevice
1339 @ stdcall
-private
-syscall ZwRegisterThreadTerminatePort
(ptr
) NtRegisterThreadTerminatePort
1340 @ stdcall
-private
-syscall ZwReleaseKeyedEvent
(long ptr long ptr
) NtReleaseKeyedEvent
1341 @ stdcall
-private
-syscall ZwReleaseMutant
(long ptr
) NtReleaseMutant
1342 @ stub ZwReleaseProcessMutant
1343 @ stdcall
-private
-syscall ZwReleaseSemaphore
(long long ptr
) NtReleaseSemaphore
1344 @ stdcall
-private
-syscall ZwRemoveIoCompletion
(ptr ptr ptr ptr ptr
) NtRemoveIoCompletion
1345 @ stdcall
-private
-syscall ZwRemoveIoCompletionEx
(ptr ptr long ptr ptr long
) NtRemoveIoCompletionEx
1346 # @ stub ZwRemoveProcessDebug
1347 @ stdcall
-private
-syscall ZwRenameKey
(long ptr
) NtRenameKey
1348 @ stdcall
-private
-syscall ZwReplaceKey
(ptr long ptr
) NtReplaceKey
1350 @ stdcall
-private
-syscall ZwReplyWaitReceivePort
(ptr ptr ptr ptr
) NtReplyWaitReceivePort
1351 @ stub ZwReplyWaitReceivePortEx
1352 @ stub ZwReplyWaitReplyPort
1353 # @ stub ZwRequestDeviceWakeup
1354 @ stub ZwRequestPort
1355 @ stdcall
-private
-syscall ZwRequestWaitReplyPort
(ptr ptr ptr
) NtRequestWaitReplyPort
1356 # @ stub ZwRequestWakeupLatency
1357 @ stdcall
-private
-syscall ZwResetEvent
(long ptr
) NtResetEvent
1358 @ stdcall
-private
-syscall ZwResetWriteWatch
(long ptr long
) NtResetWriteWatch
1359 @ stdcall
-private
-syscall ZwRestoreKey
(long long long
) NtRestoreKey
1360 @ stdcall
-private
-syscall ZwResumeProcess
(long
) NtResumeProcess
1361 @ stdcall
-private
-syscall ZwResumeThread
(long ptr
) NtResumeThread
1362 @ stdcall
-private
-syscall ZwSaveKey
(long long
) NtSaveKey
1363 # @ stub ZwSaveKeyEx
1364 # @ stub ZwSaveMergedKeys
1365 @ stdcall
-private
-syscall ZwSecureConnectPort
(ptr ptr ptr ptr ptr ptr ptr ptr ptr
) NtSecureConnectPort
1366 # @ stub ZwSetBootEntryOrder
1367 # @ stub ZwSetBootOptions
1368 @ stdcall
-private
-syscall ZwSetContextThread
(long ptr
) NtSetContextThread
1369 @ stub ZwSetDebugFilterState
1370 @ stub ZwSetDefaultHardErrorPort
1371 @ stdcall
-private
-syscall ZwSetDefaultLocale
(long long
) NtSetDefaultLocale
1372 @ stdcall
-private
-syscall ZwSetDefaultUILanguage
(long
) NtSetDefaultUILanguage
1373 @ stdcall
-private
-syscall ZwSetEaFile
(long ptr ptr long
) NtSetEaFile
1374 @ stdcall
-private
-syscall ZwSetEvent
(long ptr
) NtSetEvent
1375 # @ stub ZwSetEventBoostPriority
1376 @ stub ZwSetHighEventPair
1377 @ stub ZwSetHighWaitLowEventPair
1378 @ stub ZwSetHighWaitLowThread
1379 # @ stub ZwSetInformationDebugObject
1380 @ stdcall
-private
-syscall ZwSetInformationFile
(long ptr ptr long long
) NtSetInformationFile
1381 @ stdcall
-private
-syscall ZwSetInformationJobObject
(long long ptr long
) NtSetInformationJobObject
1382 @ stdcall
-private
-syscall ZwSetInformationKey
(long long ptr long
) NtSetInformationKey
1383 @ stdcall
-private
-syscall ZwSetInformationObject
(long long ptr long
) NtSetInformationObject
1384 @ stdcall
-private
-syscall ZwSetInformationProcess
(long long ptr long
) NtSetInformationProcess
1385 @ stdcall
-private
-syscall ZwSetInformationThread
(long long ptr long
) NtSetInformationThread
1386 @ stdcall
-private
-syscall ZwSetInformationToken
(long long ptr long
) NtSetInformationToken
1387 @ stdcall
-private
-syscall ZwSetIntervalProfile
(long long
) NtSetIntervalProfile
1388 @ stdcall
-private
-syscall ZwSetIoCompletion
(ptr long long long long
) NtSetIoCompletion
1389 @ stdcall
-private
-syscall ZwSetLdtEntries
(long int64 long int64
) NtSetLdtEntries
1390 @ stub ZwSetLowEventPair
1391 @ stub ZwSetLowWaitHighEventPair
1392 @ stub ZwSetLowWaitHighThread
1393 @ stdcall
-private
-syscall ZwSetPowerRequest
(long long
) NtSetPowerRequest
1394 # @ stub ZwSetQuotaInformationFile
1395 @ stdcall
-private
-syscall ZwSetSecurityObject
(long long ptr
) NtSetSecurityObject
1396 @ stub ZwSetSystemEnvironmentValue
1397 # @ stub ZwSetSystemEnvironmentValueEx
1398 @ stdcall
-private
-syscall ZwSetSystemInformation
(long ptr long
) NtSetSystemInformation
1399 @ stub ZwSetSystemPowerState
1400 @ stdcall
-private
-syscall ZwSetSystemTime
(ptr ptr
) NtSetSystemTime
1401 @ stdcall
-private
-syscall ZwSetThreadExecutionState
(long ptr
) NtSetThreadExecutionState
1402 @ stdcall
-private
-syscall ZwSetTimer
(long ptr ptr ptr long long ptr
) NtSetTimer
1403 @ stdcall
-private
-syscall ZwSetTimerResolution
(long long ptr
) NtSetTimerResolution
1404 # @ stub ZwSetUuidSeed
1405 @ stdcall
-private
-syscall ZwSetValueKey
(long ptr long long ptr long
) NtSetValueKey
1406 @ stdcall
-private
-syscall ZwSetVolumeInformationFile
(long ptr ptr long long
) NtSetVolumeInformationFile
1407 @ stdcall
-private
-syscall ZwShutdownSystem
(long
) NtShutdownSystem
1408 @ stdcall
-private
-syscall ZwSignalAndWaitForSingleObject
(long long long ptr
) NtSignalAndWaitForSingleObject
1409 @ stub ZwStartProfile
1410 @ stub ZwStopProfile
1411 @ stdcall
-private
-syscall ZwSuspendProcess
(long
) NtSuspendProcess
1412 @ stdcall
-private
-syscall ZwSuspendThread
(long ptr
) NtSuspendThread
1413 @ stdcall
-private
-syscall ZwSystemDebugControl
(long ptr long ptr long ptr
) NtSystemDebugControl
1414 @ stdcall
-private
-syscall ZwTerminateJobObject
(long long
) NtTerminateJobObject
1415 @ stdcall
-private
-syscall ZwTerminateProcess
(long long
) NtTerminateProcess
1416 @ stdcall
-private
-syscall ZwTerminateThread
(long long
) NtTerminateThread
1418 # @ stub ZwTraceEvent
1419 # @ stub ZwTranslateFilePath
1420 @ stdcall
-private
-syscall ZwUnloadDriver
(ptr
) NtUnloadDriver
1421 @ stdcall
-private
-syscall ZwUnloadKey
(ptr
) NtUnloadKey
1422 @ stub ZwUnloadKeyEx
1423 @ stdcall
-private
-syscall ZwUnlockFile
(long ptr ptr ptr ptr
) NtUnlockFile
1424 @ stdcall
-private
-syscall ZwUnlockVirtualMemory
(long ptr ptr long
) NtUnlockVirtualMemory
1425 @ stdcall
-private
-syscall ZwUnmapViewOfSection
(long ptr
) NtUnmapViewOfSection
1428 # @ stub ZwWaitForDebugEvent
1429 @ stdcall
-private
-syscall ZwWaitForKeyedEvent
(long ptr long ptr
) NtWaitForKeyedEvent
1430 @ stdcall
-private
-syscall ZwWaitForMultipleObjects
(long ptr long long ptr
) NtWaitForMultipleObjects
1431 @ stub ZwWaitForProcessMutant
1432 @ stdcall
-private
-syscall ZwWaitForSingleObject
(long long ptr
) NtWaitForSingleObject
1433 @ stub ZwWaitHighEventPair
1434 @ stub ZwWaitLowEventPair
1435 @ stdcall
-private
-syscall ZwWriteFile
(long long ptr ptr ptr ptr long ptr ptr
) NtWriteFile
1436 @ stdcall
-private
-syscall ZwWriteFileGather
(long long ptr ptr ptr ptr long ptr ptr
) NtWriteFileGather
1437 @ stub ZwWriteRequestData
1438 @ stdcall
-private
-syscall ZwWriteVirtualMemory
(long ptr ptr long ptr
) NtWriteVirtualMemory
1439 @ stdcall
-private
-syscall ZwYieldExecution
() NtYieldExecution
1440 @ cdecl
-private
-arch
=i386 _CIcos
()
1441 @ cdecl
-private
-arch
=i386 _CIlog
()
1442 @ cdecl
-private
-arch
=i386 _CIpow
()
1443 @ cdecl
-private
-arch
=i386 _CIsin
()
1444 @ cdecl
-private
-arch
=i386 _CIsqrt
()
1445 @ stdcall
-arch
=x86_64
,arm64 __C_specific_handler
(ptr long ptr ptr
)
1446 @ cdecl
-arch
=arm
,x86_64
-norelay __chkstk
()
1447 @ cdecl __isascii
(long
)
1448 @ cdecl __iscsym
(long
)
1449 @ cdecl __iscsymf
(long
)
1450 @ cdecl __toascii
(long
)
1451 @ cdecl
-arch
=i386
-ret64 _alldiv
(int64 int64
)
1452 @ cdecl
-arch
=i386
-norelay _alldvrm
(int64 int64
)
1453 @ cdecl
-arch
=i386
-ret64 _allmul
(int64 int64
)
1454 @ cdecl
-arch
=i386
-norelay _alloca_probe
()
1455 @ cdecl
-arch
=i386
-ret64 _allrem
(int64 int64
)
1456 @ stdcall
-arch
=i386
-ret64 _allshl
(int64 long
)
1457 @ stdcall
-arch
=i386
-ret64 _allshr
(int64 long
)
1458 @ cdecl
-ret64 _atoi64
(str
)
1459 @ cdecl
-arch
=i386
-ret64 _aulldiv
(int64 int64
)
1460 @ cdecl
-arch
=i386
-norelay _aulldvrm
(int64 int64
)
1461 @ cdecl
-arch
=i386
-ret64 _aullrem
(int64 int64
)
1462 @ stdcall
-arch
=i386
-ret64 _aullshr
(int64 long
)
1463 @ cdecl
-arch
=i386
-norelay _chkstk
()
1465 @ cdecl
-arch
=i386
-ret64 _ftol
()
1466 @ cdecl _i64toa
(int64 ptr long
)
1467 @ cdecl _i64tow
(int64 ptr long
)
1468 @ cdecl _itoa
(long ptr long
)
1469 @ cdecl _itow
(long ptr long
)
1470 @ cdecl _lfind
(ptr ptr ptr long ptr
)
1471 @ stdcall
-arch
=x86_64
,arm64 _local_unwind
(ptr ptr
)
1472 @ cdecl _ltoa
(long ptr long
)
1473 @ cdecl _ltow
(long ptr long
)
1474 @ cdecl _memccpy
(ptr ptr long long
)
1475 @ cdecl _memicmp
(str str long
)
1476 @ varargs _snprintf
(ptr long str
) NTDLL__snprintf
1477 @ varargs _snprintf_s
(ptr long long str
)
1478 @ varargs _snwprintf
(ptr long wstr
)
1479 @ varargs _snwprintf_s
(ptr long long wstr
)
1480 @ varargs _swprintf
(ptr wstr
) NTDLL_swprintf
1481 @ cdecl _splitpath
(str ptr ptr ptr ptr
)
1482 @ cdecl _strcmpi
(str str
) _stricmp
1483 @ cdecl _stricmp
(str str
)
1484 @ cdecl _strlwr
(str
)
1485 @ cdecl _strnicmp
(str str long
)
1486 @ cdecl _strupr
(str
)
1487 @ cdecl _tolower
(long
)
1488 @ cdecl _toupper
(long
)
1489 @ cdecl _ui64toa
(int64 ptr long
)
1490 @ cdecl _ui64tow
(int64 ptr long
)
1491 @ cdecl _ultoa
(long ptr long
)
1492 @ cdecl _ultow
(long ptr long
)
1493 @ cdecl
-norelay _vsnprintf
(ptr long str ptr
)
1494 @ cdecl _vsnprintf_s
(ptr long str ptr
)
1495 @ cdecl _vsnwprintf
(ptr long wstr ptr
)
1496 @ cdecl _vsnwprintf_s
(ptr long long wstr ptr
)
1497 @ cdecl _vswprintf
(ptr wstr ptr
)
1498 @ cdecl _wcsicmp
(wstr wstr
)
1499 @ cdecl _wcslwr
(wstr
)
1500 @ cdecl _wcsnicmp
(wstr wstr long
)
1501 @ cdecl _wcsupr
(wstr
)
1503 @ cdecl
-ret64 _wtoi64
(wstr
)
1506 @ cdecl atan
(double
)
1509 @ cdecl bsearch
(ptr ptr long long ptr
)
1510 @ cdecl ceil
(double
)
1512 @ cdecl fabs
(double
)
1513 @ cdecl floor
(double
)
1514 @ cdecl isalnum
(long
)
1515 @ cdecl isalpha
(long
)
1516 @ cdecl iscntrl
(long
)
1517 @ cdecl isdigit
(long
)
1518 @ cdecl isgraph
(long
)
1519 @ cdecl islower
(long
)
1520 @ cdecl isprint
(long
)
1521 @ cdecl ispunct
(long
)
1522 @ cdecl isspace
(long
)
1523 @ cdecl isupper
(long
)
1524 @ cdecl iswalpha
(long
)
1525 @ cdecl iswctype
(long long
)
1526 @ cdecl iswdigit
(long
)
1527 @ cdecl iswlower
(long
)
1528 @ cdecl iswspace
(long
)
1529 @ cdecl iswxdigit
(long
)
1530 @ cdecl isxdigit
(long
)
1531 @ cdecl labs
(long
) abs
1533 @ cdecl mbstowcs
(ptr str long
)
1534 @ cdecl memchr
(ptr long long
)
1535 @ cdecl memcmp
(ptr ptr long
)
1536 @ cdecl memcpy
(ptr ptr long
)
1537 @ cdecl memmove
(ptr ptr long
)
1538 @ cdecl memset
(ptr long long
)
1539 @ cdecl pow
(double double
)
1540 @ cdecl qsort
(ptr long long ptr
)
1542 @ varargs sprintf
(ptr str
) NTDLL_sprintf
1543 @ varargs sprintf_s
(ptr long str
)
1544 @ cdecl sqrt
(double
)
1545 @ varargs sscanf
(str str
)
1546 @ cdecl strcat
(str str
)
1547 @ cdecl strchr
(str long
)
1548 @ cdecl strcmp
(str str
)
1549 @ cdecl strcpy
(ptr str
)
1550 @ cdecl strcspn
(str str
)
1552 @ cdecl strncat
(str str long
)
1553 @ cdecl strncmp
(str str long
)
1554 @ cdecl strncpy
(ptr str long
)
1555 @ cdecl strnlen
(ptr long
)
1556 @ cdecl strpbrk
(str str
)
1557 @ cdecl strrchr
(str long
)
1558 @ cdecl strspn
(str str
)
1559 @ cdecl strstr
(str str
)
1560 @ cdecl strtol
(str ptr long
)
1561 @ cdecl strtoul
(str ptr long
)
1562 @ varargs swprintf
(ptr wstr
) NTDLL_swprintf
1563 @ varargs swprintf_s
(ptr long wstr
)
1565 @ cdecl tolower
(long
)
1566 @ cdecl toupper
(long
)
1567 @ cdecl towlower
(long
)
1568 @ cdecl towupper
(long
)
1569 @ stdcall vDbgPrintEx
(long long str ptr
)
1570 @ stdcall vDbgPrintExWithPrefix
(str long long str ptr
)
1571 @ cdecl vsprintf
(ptr str ptr
)
1572 @ cdecl vsprintf_s
(ptr long str ptr
)
1573 @ cdecl vswprintf_s
(ptr long wstr ptr
)
1574 @ cdecl wcscat
(wstr wstr
)
1575 @ cdecl wcschr
(wstr long
)
1576 @ cdecl wcscmp
(wstr wstr
)
1577 @ cdecl wcscpy
(ptr wstr
)
1578 @ cdecl wcscspn
(wstr wstr
)
1579 @ cdecl wcslen
(wstr
)
1580 @ cdecl wcsncat
(wstr wstr long
)
1581 @ cdecl wcsncmp
(wstr wstr long
)
1582 @ cdecl wcsncpy
(ptr wstr long
)
1583 @ cdecl wcspbrk
(wstr wstr
)
1584 @ cdecl wcsrchr
(wstr long
)
1585 @ cdecl wcsspn
(wstr wstr
)
1586 @ cdecl wcsstr
(wstr wstr
)
1587 @ cdecl wcstok
(wstr wstr
)
1588 @ cdecl wcstol
(wstr ptr long
)
1589 @ cdecl wcstombs
(ptr ptr long
)
1590 @ cdecl wcstoul
(wstr ptr long
)
1595 # All functions must be prefixed with '__wine_' (for internal functions)
1596 # or 'wine_' (for user-visible functions) to avoid namespace conflicts.
1599 @ cdecl
-syscall
-norelay wine_server_call
(ptr
)
1600 @ cdecl
-syscall wine_server_fd_to_handle
(long long long ptr
)
1601 @ cdecl
-syscall wine_server_handle_to_fd
(long long ptr ptr
)
1602 @ cdecl
-syscall wine_server_release_fd
(long long
)
1603 @ cdecl
-syscall wine_server_send_fd
(long
)
1604 @ cdecl
-syscall __wine_make_process_system
()
1607 @ cdecl __wine_set_unix_funcs
(long ptr
)
1608 @ cdecl __wine_init_unix_lib
(long long ptr ptr
)
1609 @ extern __wine_syscall_dispatcher
1610 @ extern
-arch
=i386 __wine_ldt_copy
1613 @ cdecl
-norelay __wine_dbg_get_channel_flags
(ptr
)
1614 @ cdecl
-norelay __wine_dbg_header
(long long str
)
1615 @ cdecl
-norelay __wine_dbg_output
(str
)
1616 @ cdecl
-norelay __wine_dbg_strdup
(str
)
1619 @ cdecl
-syscall __wine_locked_recvmsg
(long ptr long
)
1622 @ cdecl
-syscall wine_get_version
()
1623 @ cdecl
-syscall wine_get_build_id
()
1624 @ cdecl
-syscall wine_get_host_version
(ptr ptr
)
1627 @ cdecl __wine_get_unix_codepage
()
1630 @ cdecl
-syscall wine_nt_to_unix_file_name
(ptr ptr ptr long
)
1631 @ cdecl
-syscall wine_unix_to_nt_file_name
(str ptr ptr
)
