ntdll.inc

用汇编语言编写Windows驱动程序的工具

RtlGetFirstRange PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlGetElementGenericTable PROTO STDCALL :DWORD, :DWORD
RtlGetDaclSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlGetCurrentDirectory_U PROTO STDCALL :DWORD, :DWORD
RtlGetControlSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlGetCompressionWorkSpaceSize PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlGetCallersAddress PROTO STDCALL :DWORD, :DWORD
RtlGetAce PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlGenerate8dot3Name PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlGUIDFromString PROTO STDCALL :DWORD, :DWORD
RtlFreeUserThreadStack PROTO STDCALL :DWORD, :DWORD
RtlFreeUnicodeString PROTO STDCALL :DWORD
RtlFreeSid PROTO STDCALL :DWORD
RtlFreeRangeList PROTO STDCALL :DWORD
RtlFreeOemString PROTO STDCALL :DWORD
RtlFreeHeap PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlFreeHandle PROTO STDCALL :DWORD, :DWORD
RtlFreeAnsiString PROTO STDCALL :DWORD
RtlFormatMessage PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlFormatCurrentUserKeyPath PROTO STDCALL :DWORD
RtlFirstFreeAce PROTO STDCALL :DWORD, :DWORD
RtlFindSetBitsAndClear PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlFindSetBits PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlFindRange PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlFindNextForwardRunClear PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlFindMostSignificantBit PROTO STDCALL :DWORD, :DWORD
RtlFindMessage PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlFindLongestRunClear PROTO STDCALL :DWORD, :DWORD
RtlFindLeastSignificantBit PROTO STDCALL :DWORD, :DWORD
RtlFindLastBackwardRunClear PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlFindClearBitsAndSet PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlFindClearBits PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlFillMemoryUlong PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlFillMemory PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlExtendedMagicDivide PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlExtendedLargeIntegerDivide PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlExtendedIntegerMultiply PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlExtendHeap PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlExpandEnvironmentStrings_U PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlEraseUnicodeString PROTO STDCALL :DWORD
RtlEqualUnicodeString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlEqualString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlEqualSid PROTO STDCALL :DWORD, :DWORD
RtlEqualPrefixSid PROTO STDCALL :DWORD, :DWORD
RtlEqualLuid PROTO STDCALL :DWORD, :DWORD
RtlEqualDomainName PROTO STDCALL :DWORD, :DWORD
RtlEqualComputerName PROTO STDCALL :DWORD, :DWORD
RtlEnumerateGenericTableWithoutSplaying PROTO STDCALL :DWORD, :DWORD
RtlEnumerateGenericTable PROTO STDCALL :DWORD, :DWORD
RtlEnumProcessHeaps PROTO STDCALL :DWORD, :DWORD
RtlEnterCriticalSection PROTO STDCALL :DWORD
RtlEnlargedUnsignedMultiply PROTO STDCALL :DWORD, :DWORD
RtlEnlargedUnsignedDivide PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlEnlargedIntegerMultiply PROTO STDCALL :DWORD, :DWORD
RtlEnableEarlyCriticalSectionEventCreation PROTO STDCALL
RtlEmptyAtomTable PROTO STDCALL :DWORD, :DWORD
RtlDumpResource PROTO STDCALL :DWORD
RtlDowncaseUnicodeString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlDosSearchPath_U PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlDosPathNameToNtPathName_U PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlDoesFileExists_U PROTO STDCALL :DWORD
RtlDnsHostNameToComputerName PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlDetermineDosPathNameType_U PROTO STDCALL :DWORD
RtlDestroyQueryDebugBuffer PROTO STDCALL :DWORD
RtlDestroyProcessParameters PROTO STDCALL :DWORD
RtlDestroyHeap PROTO STDCALL :DWORD
RtlDestroyHandleTable PROTO STDCALL :DWORD
RtlDestroyEnvironment PROTO STDCALL :DWORD
RtlDestroyAtomTable PROTO STDCALL :DWORD
RtlDeregisterWaitEx PROTO STDCALL :DWORD, :DWORD
RtlDeregisterWait PROTO STDCALL :DWORD
RtlDeleteTimerQueueEx PROTO STDCALL :DWORD, :DWORD
RtlDeleteTimerQueue PROTO STDCALL :DWORD
RtlDeleteTimer PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlDeleteSecurityObject PROTO STDCALL :DWORD
RtlDeleteResource PROTO STDCALL :DWORD
RtlDeleteRegistryValue PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlDeleteRange PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlDeleteOwnersRanges PROTO STDCALL :DWORD, :DWORD
RtlDeleteNoSplay PROTO STDCALL :DWORD, :DWORD
RtlDeleteElementGenericTable PROTO STDCALL :DWORD, :DWORD
RtlDeleteCriticalSection PROTO STDCALL :DWORD
RtlDeleteAtomFromAtomTable PROTO STDCALL :DWORD, :DWORD
RtlDeleteAce PROTO STDCALL :DWORD, :DWORD
RtlDelete PROTO STDCALL :DWORD
RtlDefaultNpAcl PROTO STDCALL :DWORD
RtlDecompressFragment PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlDecompressBuffer PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlDebugPrintTimes PROTO STDCALL
RtlDeNormalizeProcessParams PROTO STDCALL :DWORD
RtlCutoverTimeToSystemTime PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlCustomCPToUnicodeN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlCreateUserThread PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlCreateUserSecurityObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlCreateUserProcess PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlCreateUnicodeStringFromAsciiz PROTO STDCALL :DWORD, :DWORD
RtlCreateUnicodeString PROTO STDCALL :DWORD, :DWORD
RtlCreateTimerQueue PROTO STDCALL :DWORD
RtlCreateTimer PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlCreateTagHeap PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlCreateSecurityDescriptor PROTO STDCALL :DWORD, :DWORD
RtlCreateRegistryKey PROTO STDCALL :DWORD, :DWORD
RtlCreateQueryDebugBuffer PROTO STDCALL :DWORD, :DWORD
RtlCreateProcessParameters PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlCreateLpcServer PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlCreateHeap PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlCreateEnvironment PROTO STDCALL :DWORD, :DWORD
RtlCreateAtomTable PROTO STDCALL :DWORD, :DWORD
RtlCreateAndSetSD PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlCreateAcl PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlCopyUnicodeString PROTO STDCALL :DWORD, :DWORD
RtlCopyString PROTO STDCALL :DWORD, :DWORD
RtlCopySidAndAttributesArray PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlCopySid PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlCopySecurityDescriptor PROTO STDCALL :DWORD, :DWORD
RtlCopyRangeList PROTO STDCALL :DWORD, :DWORD
RtlCopyLuidAndAttributesArray PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlCopyLuid PROTO STDCALL :DWORD, :DWORD
RtlConvertUlongToLargeInteger PROTO STDCALL :DWORD
RtlConvertUiListToApiList PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlConvertToAutoInheritSecurityObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlConvertSidToUnicodeString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlConvertSharedToExclusive PROTO STDCALL :DWORD
RtlConvertLongToLargeInteger PROTO STDCALL :DWORD
RtlConvertExclusiveToShared PROTO STDCALL :DWORD
RtlConsoleMultiByteToUnicodeN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlCompressBuffer PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlCompareUnicodeString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlCompareString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlCompareMemoryUlong PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlCompareMemory PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlCompactHeap PROTO STDCALL :DWORD, :DWORD
RtlClearBits PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlClearAllBits PROTO STDCALL :DWORD
RtlCheckRegistryKey PROTO STDCALL :DWORD, :DWORD
RtlCheckForOrphanedCriticalSections PROTO STDCALL :DWORD
RtlCharToInteger PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlCaptureStackBackTrace PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlCancelTimer PROTO STDCALL :DWORD, :DWORD
RtlCallbackLpcClient PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlAssert PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlAreBitsSet PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlAreBitsClear PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlAreAnyAccessesGranted PROTO STDCALL :DWORD, :DWORD
RtlAreAllAccessesGranted PROTO STDCALL :DWORD, :DWORD
RtlApplyRXactNoFlush PROTO STDCALL :DWORD
RtlApplyRXact PROTO STDCALL :DWORD
RtlAppendUnicodeToString PROTO STDCALL :DWORD, :DWORD
RtlAppendUnicodeStringToString PROTO STDCALL :DWORD, :DWORD
RtlAppendStringToString PROTO STDCALL :DWORD, :DWORD
RtlAppendAsciizToString PROTO STDCALL :DWORD, :DWORD
RtlAnsiStringToUnicodeString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlAnsiStringToUnicodeSize PROTO STDCALL :DWORD
RtlAnsiCharToUnicodeChar PROTO STDCALL :DWORD
RtlAllocateHeap PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlAllocateHandle PROTO STDCALL :DWORD, :DWORD
RtlAllocateAndInitializeSid PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlAdjustPrivilege PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlAddRange PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlAddCompoundAce PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlAddAuditAccessObjectAce PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlAddAuditAccessAceEx PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlAddAuditAccessAce PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlAddAttributeActionToRXact PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlAddAtomToAtomTable PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlAddActionToRXact PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlAddAce PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlAddAccessDeniedObjectAce PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlAddAccessDeniedAceEx PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlAddAccessDeniedAce PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlAddAccessAllowedObjectAce PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlAddAccessAllowedAceEx PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlAddAccessAllowedAce PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlAcquireResourceShared PROTO STDCALL :DWORD, :DWORD
RtlAcquireResourceExclusive PROTO STDCALL :DWORD, :DWORD
RtlAcquirePebLock PROTO STDCALL
RtlAbsoluteToSelfRelativeSD PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlAbortRXact PROTO STDCALL :DWORD
PfxRemovePrefix PROTO STDCALL :DWORD, :DWORD
PfxInsertPrefix PROTO STDCALL :DWORD, :DWORD, :DWORD
PfxInitialize PROTO STDCALL :DWORD
PfxFindPrefix PROTO STDCALL :DWORD, :DWORD
NtYieldExecution PROTO STDCALL
NtWriteVirtualMemory PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtWriteRequestData PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtWriteFileGather PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtWriteFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtWaitLowEventPair PROTO STDCALL :DWORD
NtWaitHighEventPair PROTO STDCALL :DWORD
NtWaitForSingleObject PROTO STDCALL :DWORD, :DWORD, :DWORD
NtWaitForMultipleObjects PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtVdmControl PROTO STDCALL :DWORD, :DWORD
NtUnmapViewOfSection PROTO STDCALL :DWORD, :DWORD
NtUnlockVirtualMemory PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
NtUnlockFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtUnloadKey PROTO STDCALL :DWORD
NtUnloadDriver PROTO STDCALL :DWORD
NtTestAlert PROTO STDCALL
NtTerminateThread PROTO STDCALL :DWORD, :DWORD
NtTerminateProcess PROTO STDCALL :DWORD, :DWORD
NtTerminateJobObject PROTO STDCALL :DWORD, :DWORD
NtSystemDebugControl PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtSuspendThread PROTO STDCALL :DWORD, :DWORD
NtStopProfile PROTO STDCALL :DWORD
NtStartProfile PROTO STDCALL :DWORD
NtSignalAndWaitForSingleObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
NtShutdownSystem PROTO STDCALL :DWORD
NtSetVolumeInformationFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtSetValueKey PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtSetUuidSeed PROTO STDCALL :DWORD
NtSetTimerResolution PROTO STDCALL :DWORD, :DWORD, :DWORD
NtSetTimer PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtSetThreadExecutionState PROTO STDCALL :DWORD, :DWORD
NtSetSystemTime PROTO STDCALL :DWORD, :DWORD
NtSetSystemPowerState PROTO STDCALL :DWORD, :DWORD, :DWORD
NtSetSystemInformation PROTO STDCALL :DWORD, :DWORD, :DWORD
NtSetSystemEnvironmentValue PROTO STDCALL :DWORD, :DWORD
NtSetSecurityObject PROTO STDCALL :DWORD, :DWORD, :DWORD
NtSetQuotaInformationFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
NtSetLowWaitHighEventPair PROTO STDCALL :DWORD
NtSetLowEventPair PROTO STDCALL :DWORD
NtSetLdtEntries PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtSetIoCompletion PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtSetIntervalProfile PROTO STDCALL :DWORD, :DWORD
NtSetInformationToken PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
NtSetInformationThread PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
NtSetInformationProcess PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
NtSetInformationObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
NtSetInformationKey PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
NtSetInformationJobObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
NtSetInformationFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtSetHighWaitLowEventPair PROTO STDCALL :DWORD
NtSetHighEventPair PROTO STDCALL :DWORD