ntdll.inc

用汇编语言编写Windows驱动程序的工具

ZwCallbackReturn PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwAssignProcessToJobObject PROTO STDCALL :DWORD, :DWORD
ZwAreMappedFilesTheSame PROTO STDCALL :DWORD, :DWORD
ZwAllocateVirtualMemory PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwAllocateUuids PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
ZwAllocateUserPhysicalPages PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwAllocateLocallyUniqueId PROTO STDCALL :DWORD
ZwAlertThread PROTO STDCALL :DWORD
ZwAlertResumeThread PROTO STDCALL :DWORD, :DWORD
ZwAdjustPrivilegesToken PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwAdjustGroupsToken PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwAddAtom PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwAccessCheckByTypeResultListAndAuditAlarmByHandle PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwAccessCheckByTypeResultListAndAuditAlarm PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwAccessCheckByTypeResultList PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwAccessCheckByTypeAndAuditAlarm PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwAccessCheckByType PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwAccessCheckAndAuditAlarm PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwAccessCheck PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwAcceptConnectPort PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
VerSetConditionMask PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlxUnicodeStringToOemSize PROTO STDCALL :DWORD
RtlxUnicodeStringToAnsiSize PROTO STDCALL :DWORD
RtlxOemStringToUnicodeSize PROTO STDCALL :DWORD
RtlxAnsiStringToUnicodeSize PROTO STDCALL :DWORD
RtlpWaitForCriticalSection PROTO STDCALL :DWORD
RtlpUnWaitCriticalSection PROTO STDCALL :DWORD
RtlpNtSetValueKey PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlpNtQueryValueKey PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlpNtOpenKey PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlpNtMakeTemporaryKey PROTO STDCALL :DWORD
RtlpNtEnumerateSubKey PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlpNtCreateKey PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlZeroMemory PROTO STDCALL :DWORD, :DWORD
RtlZeroHeap PROTO STDCALL :DWORD, :DWORD
RtlWriteRegistryValue PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlWalkHeap PROTO STDCALL :DWORD, :DWORD
RtlWalkFrameChain PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlVerifyVersionInfo PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlValidateProcessHeaps PROTO STDCALL
RtlValidateHeap PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlValidSid PROTO STDCALL :DWORD
RtlValidSecurityDescriptor PROTO STDCALL :DWORD
RtlValidRelativeSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlValidAcl PROTO STDCALL :DWORD
RtlUsageHeap PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUpperString PROTO STDCALL :DWORD, :DWORD
RtlUpperChar PROTO STDCALL :DWORD
RtlUpdateTimer PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlUpcaseUnicodeToOemN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlUpcaseUnicodeToMultiByteN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlUpcaseUnicodeToCustomCPN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlUpcaseUnicodeStringToOemString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUpcaseUnicodeStringToCountedOemString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUpcaseUnicodeStringToAnsiString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUpcaseUnicodeString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUpcaseUnicodeChar PROTO STDCALL :DWORD
RtlUnwind PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlUnlockHeap PROTO STDCALL :DWORD
RtlUniform PROTO STDCALL :DWORD
RtlUnicodeToOemN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlUnicodeToMultiByteSize PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUnicodeToMultiByteN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlUnicodeToCustomCPN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlUnicodeStringToOemString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUnicodeStringToOemSize PROTO STDCALL :DWORD
RtlUnicodeStringToInteger PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUnicodeStringToCountedOemString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUnicodeStringToAnsiString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUnicodeStringToAnsiSize PROTO STDCALL :DWORD
RtlTryEnterCriticalSection PROTO STDCALL :DWORD
RtlTraceDatabaseValidate PROTO STDCALL :DWORD
RtlTraceDatabaseUnlock PROTO STDCALL :DWORD
RtlTraceDatabaseLock PROTO STDCALL :DWORD
RtlTraceDatabaseFind PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlTraceDatabaseEnumerate PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlTraceDatabaseDestroy PROTO STDCALL :DWORD
RtlTraceDatabaseCreate PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlTraceDatabaseAdd PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlTimeToTimeFields PROTO STDCALL :DWORD, :DWORD
RtlTimeToSecondsSince1980 PROTO STDCALL :DWORD, :DWORD
RtlTimeToSecondsSince1970 PROTO STDCALL :DWORD, :DWORD
RtlTimeToElapsedTimeFields PROTO STDCALL :DWORD, :DWORD
RtlTimeFieldsToTime PROTO STDCALL :DWORD, :DWORD
RtlSystemTimeToLocalTime PROTO STDCALL :DWORD, :DWORD
RtlSubtreeSuccessor PROTO STDCALL :DWORD
RtlSubtreePredecessor PROTO STDCALL :DWORD
RtlSubAuthoritySid PROTO STDCALL :DWORD, :DWORD
RtlSubAuthorityCountSid PROTO STDCALL :DWORD
RtlStringFromGUID PROTO STDCALL :DWORD, :DWORD
RtlStartRXact PROTO STDCALL :DWORD
RtlSplay PROTO STDCALL :DWORD
RtlSizeHeap PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlShutdownLpcServer PROTO STDCALL :DWORD
RtlSetUserValueHeap PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlSetUserFlagsHeap PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlSetUnicodeCallouts PROTO STDCALL :DWORD
RtlSetTimer PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlSetTimeZoneInformation PROTO STDCALL :DWORD
RtlSetThreadPoolStartFunc PROTO STDCALL :DWORD, :DWORD
RtlSetSecurityObjectEx PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlSetSecurityObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlSetSecurityDescriptorRMControl PROTO STDCALL :DWORD, :DWORD
RtlSetSaclSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlSetOwnerSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlSetIoCompletionCallback PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlSetInformationAcl PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlSetGroupSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlSetEnvironmentVariable PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlSetDaclSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlSetCurrentEnvironment PROTO STDCALL :DWORD, :DWORD
RtlSetCurrentDirectory_U PROTO STDCALL :DWORD
RtlSetCriticalSectionSpinCount PROTO STDCALL :DWORD, :DWORD
RtlSetControlSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlSetBits PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlSetAttributesSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlSetAllBits PROTO STDCALL :DWORD
RtlSelfRelativeToAbsoluteSD PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlSelfRelativeToAbsoluteSD2 PROTO STDCALL :DWORD, :DWORD
RtlSecondsSince1980ToTime PROTO STDCALL :DWORD, :DWORD
RtlSecondsSince1970ToTime PROTO STDCALL :DWORD, :DWORD
RtlRunEncodeUnicodeString PROTO STDCALL :DWORD, :DWORD
RtlRunDecodeUnicodeString PROTO STDCALL :DWORD, :DWORD
RtlResetRtlTranslations PROTO STDCALL :DWORD
RtlRemoteCall PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlReleaseResource PROTO STDCALL :DWORD
RtlReleasePebLock PROTO STDCALL
RtlRegisterWait PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlRealSuccessor PROTO STDCALL :DWORD
RtlRealPredecessor PROTO STDCALL :DWORD
RtlReAllocateHeap PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlRandom PROTO STDCALL :DWORD
RtlRaiseStatus PROTO STDCALL :DWORD
RtlRaiseException PROTO STDCALL :DWORD
RtlQueueWorkItem PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlQueryTimeZoneInformation PROTO STDCALL :DWORD
RtlQueryTagHeap PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlQuerySecurityObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlQueryRegistryValues PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlQueryProcessLockInformation PROTO STDCALL :DWORD
RtlQueryProcessHeapInformation PROTO STDCALL :DWORD
RtlQueryProcessDebugInformation PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlQueryProcessBackTraceInformation PROTO STDCALL :DWORD
RtlQueryInformationAcl PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlQueryEnvironmentVariable_U PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlQueryAtomInAtomTable PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlProtectHeap PROTO STDCALL :DWORD, :DWORD
RtlPrefixUnicodeString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlPrefixString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlPinAtomInAtomTable PROTO STDCALL :DWORD, :DWORD
RtlPcToFileHeader PROTO STDCALL :DWORD, :DWORD
RtlOpenCurrentUser PROTO STDCALL :DWORD, :DWORD
RtlOemToUnicodeN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlOemStringToUnicodeString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlOemStringToUnicodeSize PROTO STDCALL :DWORD
RtlNumberOfSetBits PROTO STDCALL :DWORD
RtlNumberOfClearBits PROTO STDCALL :DWORD
RtlNumberGenericTableElements PROTO STDCALL :DWORD
RtlNtStatusToDosError PROTO STDCALL :DWORD
RtlNormalizeProcessParams PROTO STDCALL :DWORD
RtlNewSecurityObjectEx PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlNewSecurityObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlNewSecurityGrantedAccess PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlNewInstanceSecurityObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlMultiByteToUnicodeSize PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlMultiByteToUnicodeN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlMoveMemory PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlMergeRangeLists PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlMapGenericMask PROTO STDCALL :DWORD, :DWORD
RtlMakeSelfRelativeSD PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlLookupElementGenericTable PROTO STDCALL :DWORD, :DWORD
RtlLookupAtomInAtomTable PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlLockHeap PROTO STDCALL :DWORD
RtlLocalTimeToSystemTime PROTO STDCALL :DWORD, :DWORD
RtlLengthSid PROTO STDCALL :DWORD
RtlLengthSecurityDescriptor PROTO STDCALL :DWORD
RtlLengthRequiredSid PROTO STDCALL :DWORD
RtlLeaveCriticalSection PROTO STDCALL :DWORD
RtlLargeIntegerToChar PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlLargeIntegerSubtract PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlLargeIntegerShiftRight PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlLargeIntegerShiftLeft PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlLargeIntegerNegate PROTO STDCALL :DWORD, :DWORD
RtlLargeIntegerDivide PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlLargeIntegerArithmeticShift PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlLargeIntegerAdd PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlIsValidIndexHandle PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlIsValidHandle PROTO STDCALL :DWORD, :DWORD
RtlIsTextUnicode PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlIsRangeAvailable PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlIsNameLegalDOS8Dot3 PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlIsGenericTableEmpty PROTO STDCALL :DWORD
RtlIsDosDeviceName_U PROTO STDCALL :DWORD
RtlInvertRangeList PROTO STDCALL :DWORD, :DWORD
RtlIntegerToUnicodeString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlIntegerToChar PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlInt64ToUnicodeString PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlInsertElementGenericTable PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlInitializeSid PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlInitializeResource PROTO STDCALL :DWORD
RtlInitializeRangeList PROTO STDCALL :DWORD
RtlInitializeRXact PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlInitializeHandleTable PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlInitializeGenericTable PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlInitializeCriticalSectionAndSpinCount PROTO STDCALL :DWORD, :DWORD
RtlInitializeCriticalSection PROTO STDCALL :DWORD
RtlInitializeContext PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlInitializeBitMap PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlInitializeAtomPackage PROTO STDCALL :DWORD
RtlInitUnicodeString PROTO STDCALL :DWORD, :DWORD
RtlInitString PROTO STDCALL :DWORD, :DWORD
RtlInitNlsTables PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlInitCodePageTable PROTO STDCALL :DWORD, :DWORD
RtlInitAnsiString PROTO STDCALL :DWORD, :DWORD
RtlImpersonateSelf PROTO STDCALL :DWORD
RtlImpersonateLpcClient PROTO STDCALL :DWORD, :DWORD
RtlImageRvaToVa PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlImageRvaToSection PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlImageNtHeader PROTO STDCALL :DWORD
RtlImageDirectoryEntryToData PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlIdentifierAuthoritySid PROTO STDCALL :DWORD
RtlGetVersion PROTO STDCALL :DWORD
RtlGetUserInfoHeap PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlGetSecurityDescriptorRMControl PROTO STDCALL :DWORD, :DWORD
RtlGetSaclSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlGetProcessHeaps PROTO STDCALL :DWORD, :DWORD
RtlGetOwnerSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlGetNtProductType PROTO STDCALL :DWORD
RtlGetNtGlobalFlags PROTO STDCALL
RtlGetNextRange PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlGetLongestNtPathLength PROTO STDCALL
RtlGetGroupSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlGetFullPathName_U PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD