ntoskrnl.inc

linux ip fiter source

; made with protoize by f0dder
; with many hand-made fixes (__cdecl)
; Four-F, [e-mail]
; last update 10-Dec-2002

ZwYieldExecution PROTO STDCALL
ZwWriteFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwWaitForSingleObject PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwWaitForMultipleObjects PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwUnmapViewOfSection PROTO STDCALL :DWORD, :DWORD
ZwUnloadKey PROTO STDCALL :DWORD
ZwUnloadDriver PROTO STDCALL :DWORD
ZwTerminateProcess PROTO STDCALL :DWORD, :DWORD
ZwSetVolumeInformationFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwSetValueKey PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwSetTimer PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwSetSystemTime PROTO STDCALL :DWORD, :DWORD
ZwSetSystemInformation PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwSetSecurityObject PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwSetInformationThread PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
ZwSetInformationProcess PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
ZwSetInformationObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
ZwSetInformationFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwSetEvent PROTO STDCALL :DWORD, :DWORD
ZwSetEaFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
ZwSetDefaultUILanguage PROTO STDCALL :DWORD
ZwSetDefaultLocale PROTO STDCALL :DWORD, :DWORD
ZwSaveKey PROTO STDCALL :DWORD, :DWORD
ZwRestoreKey PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwResetEvent PROTO STDCALL :DWORD, :DWORD
ZwRequestWaitReplyPort PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwReplaceKey PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwReadFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwQueryVolumeInformationFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwQueryValueKey PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwQuerySystemInformation PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
ZwQuerySymbolicLinkObject PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwQuerySecurityObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwQuerySection PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwQueryObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwQueryKey PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwQueryInstallUILanguage PROTO STDCALL :DWORD
ZwQueryInformationToken PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwQueryInformationProcess PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwQueryInformationFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwQueryEaFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwQueryDirectoryObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwQueryDirectoryFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwQueryDefaultUILanguage PROTO STDCALL :DWORD
ZwQueryDefaultLocale PROTO STDCALL :DWORD, :DWORD
ZwPulseEvent PROTO STDCALL :DWORD, :DWORD
ZwPowerInformation PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwOpenTimer PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwOpenThreadToken PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
ZwOpenThread PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
ZwOpenSymbolicLinkObject PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwOpenSection PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwOpenProcessToken PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwOpenProcess PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
ZwOpenKey PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwOpenFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwOpenEvent PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwOpenDirectoryObject PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwNotifyChangeKey PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwMapViewOfSection PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwMakeTemporaryObject PROTO STDCALL :DWORD
ZwLoadKey PROTO STDCALL :DWORD, :DWORD
ZwLoadDriver PROTO STDCALL :DWORD
ZwInitiatePowerAction PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
ZwFsControlFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwFreeVirtualMemory PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
ZwFlushVirtualMemory PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
ZwFlushKey PROTO STDCALL :DWORD
ZwFlushInstructionCache PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwEnumerateValueKey PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwEnumerateKey PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwDuplicateToken PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwDuplicateObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwDisplayString PROTO STDCALL :DWORD
ZwDeviceIoControlFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwDeleteValueKey PROTO STDCALL :DWORD, :DWORD
ZwDeleteKey PROTO STDCALL :DWORD
ZwDeleteFile PROTO STDCALL :DWORD
ZwCreateTimer PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
ZwCreateSymbolicLinkObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
ZwCreateSection PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwCreateKey PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwCreateFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwCreateEvent PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwCreateDirectoryObject PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwConnectPort PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwCloseObjectAuditAlarm PROTO STDCALL :DWORD, :DWORD, :DWORD
ZwClose PROTO STDCALL :DWORD
ZwClearEvent PROTO STDCALL :DWORD
ZwCancelTimer PROTO STDCALL :DWORD, :DWORD
ZwCancelIoFile PROTO STDCALL :DWORD, :DWORD
ZwAllocateVirtualMemory PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwAlertThread PROTO STDCALL :DWORD
ZwAdjustPrivilegesToken PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
ZwAccessCheckAndAuditAlarm PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
WRITE_REGISTER_USHORT PROTO STDCALL :DWORD, :DWORD
WRITE_REGISTER_ULONG PROTO STDCALL :DWORD, :DWORD
WRITE_REGISTER_UCHAR PROTO STDCALL :DWORD, :DWORD
WRITE_REGISTER_BUFFER_USHORT PROTO STDCALL :DWORD, :DWORD, :DWORD
WRITE_REGISTER_BUFFER_ULONG PROTO STDCALL :DWORD, :DWORD, :DWORD
WRITE_REGISTER_BUFFER_UCHAR PROTO STDCALL :DWORD, :DWORD, :DWORD
SeValidSecurityDescriptor PROTO STDCALL :DWORD, :DWORD
SeUnregisterLogonSessionTerminatedRoutine PROTO STDCALL :DWORD
SeUnlockSubjectContext PROTO STDCALL :DWORD
SeTokenType PROTO STDCALL :DWORD
SeTokenIsRestricted PROTO STDCALL :DWORD
SeTokenIsAdmin PROTO STDCALL :DWORD
SeTokenImpersonationLevel PROTO STDCALL :DWORD
SeSinglePrivilegeCheck PROTO STDCALL :DWORD, :DWORD, :DWORD
SeSetSecurityDescriptorInfoEx PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
SeSetSecurityDescriptorInfo PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
SeSetAccessStateGenericMapping PROTO STDCALL :DWORD, :DWORD
SeReleaseSubjectContext PROTO STDCALL :DWORD
SeReleaseSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD
SeRegisterLogonSessionTerminatedRoutine PROTO STDCALL :DWORD
SeQuerySessionIdToken PROTO STDCALL :DWORD, :DWORD
SeQuerySecurityDescriptorInfo PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
SeQueryInformationToken PROTO STDCALL :DWORD, :DWORD, :DWORD
SeQueryAuthenticationIdToken PROTO STDCALL :DWORD, :DWORD
SePrivilegeObjectAuditAlarm PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
SePrivilegeCheck PROTO STDCALL :DWORD, :DWORD, :DWORD
SeOpenObjectForDeleteAuditAlarm PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
SeOpenObjectAuditAlarm PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
SeMarkLogonSessionForTerminationNotification PROTO STDCALL :DWORD
SeLockSubjectContext PROTO STDCALL :DWORD
SeImpersonateClientEx PROTO STDCALL :DWORD, :DWORD
SeImpersonateClient PROTO STDCALL :DWORD, :DWORD
SeFreePrivileges PROTO STDCALL :DWORD
SeDeleteObjectAuditAlarm PROTO STDCALL :DWORD, :DWORD
SeDeleteAccessState PROTO STDCALL :DWORD
SeDeassignSecurity PROTO STDCALL :DWORD
SeCreateClientSecurityFromSubjectContext PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
SeCreateClientSecurity PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
SeCreateAccessState PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
SeCloseObjectAuditAlarm PROTO STDCALL :DWORD, :DWORD, :DWORD
SeCaptureSubjectContext PROTO STDCALL :DWORD
SeCaptureSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
SeAuditingFileOrGlobalEvents PROTO STDCALL :DWORD, :DWORD, :DWORD
SeAuditingFileEvents PROTO STDCALL :DWORD, :DWORD
SeAssignSecurityEx PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
SeAssignSecurity PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
SeAppendPrivileges PROTO STDCALL :DWORD, :DWORD
SeAccessCheck PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlxUnicodeStringToOemSize PROTO STDCALL :DWORD
RtlxUnicodeStringToAnsiSize PROTO STDCALL :DWORD
RtlxOemStringToUnicodeSize PROTO STDCALL :DWORD
RtlxAnsiStringToUnicodeSize PROTO STDCALL :DWORD
RtlZeroMemory PROTO STDCALL :DWORD, :DWORD
RtlZeroHeap PROTO STDCALL :DWORD, :DWORD
RtlWriteRegistryValue PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlWalkFrameChain PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlVolumeDeviceToDosName PROTO STDCALL :DWORD, :DWORD
RtlValidSid PROTO STDCALL :DWORD
RtlValidSecurityDescriptor PROTO STDCALL :DWORD
RtlValidRelativeSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUpperString PROTO STDCALL :DWORD, :DWORD
RtlUpperChar PROTO STDCALL :DWORD
RtlUpcaseUnicodeToOemN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlUpcaseUnicodeToMultiByteN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlUpcaseUnicodeToCustomCPN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlUpcaseUnicodeStringToOemString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUpcaseUnicodeStringToCountedOemString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUpcaseUnicodeStringToAnsiString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUpcaseUnicodeString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUpcaseUnicodeChar PROTO STDCALL :DWORD
RtlUnwind PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlUnicodeToOemN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlUnicodeToMultiByteSize PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUnicodeToMultiByteN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlUnicodeToCustomCPN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlUnicodeStringToOemString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUnicodeStringToOemSize PROTO STDCALL :DWORD
RtlUnicodeStringToInteger PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUnicodeStringToCountedOemString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUnicodeStringToAnsiString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlUnicodeStringToAnsiSize PROTO STDCALL :DWORD
RtlTraceDatabaseValidate PROTO STDCALL :DWORD
RtlTraceDatabaseUnlock PROTO STDCALL :DWORD
RtlTraceDatabaseLock PROTO STDCALL :DWORD
RtlTraceDatabaseFind PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlTraceDatabaseEnumerate PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlTraceDatabaseDestroy PROTO STDCALL :DWORD
RtlTraceDatabaseCreate PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlTraceDatabaseAdd PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlTimeToTimeFields PROTO STDCALL :DWORD, :DWORD
RtlTimeToSecondsSince1980 PROTO STDCALL :DWORD, :DWORD
RtlTimeToSecondsSince1970 PROTO STDCALL :DWORD, :DWORD
RtlTimeFieldsToTime PROTO STDCALL :DWORD, :DWORD
RtlSubtreeSuccessor PROTO STDCALL :DWORD
RtlSubtreePredecessor PROTO STDCALL :DWORD
RtlSubAuthoritySid PROTO STDCALL :DWORD, :DWORD
RtlSubAuthorityCountSid PROTO STDCALL :DWORD
RtlStringFromGUID PROTO STDCALL :DWORD, :DWORD
RtlSplay PROTO STDCALL :DWORD
RtlSizeHeap PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlSetTimeZoneInformation PROTO STDCALL :DWORD
RtlSetSaclSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlSetOwnerSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlSetGroupSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlSetDaclSecurityDescriptor PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
RtlSetBits PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlSetAllBits PROTO STDCALL :DWORD
RtlSelfRelativeToAbsoluteSD PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlSelfRelativeToAbsoluteSD2 PROTO STDCALL :DWORD, :DWORD
RtlSecondsSince1980ToTime PROTO STDCALL :DWORD, :DWORD
RtlSecondsSince1970ToTime PROTO STDCALL :DWORD, :DWORD
RtlReserveChunk PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlRemoveUnicodePrefix PROTO STDCALL :DWORD, :DWORD
RtlRealSuccessor PROTO STDCALL :DWORD
RtlRealPredecessor PROTO STDCALL :DWORD
RtlRandom PROTO STDCALL :DWORD
RtlRaiseException PROTO STDCALL :DWORD
RtlQueryTimeZoneInformation PROTO STDCALL :DWORD
RtlQueryRegistryValues PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlQueryAtomInAtomTable PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlPrefixUnicodeString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlPrefixString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlPinAtomInAtomTable PROTO STDCALL :DWORD, :DWORD
RtlOemToUnicodeN PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
RtlOemStringToUnicodeString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlOemStringToUnicodeSize PROTO STDCALL :DWORD
RtlOemStringToCountedUnicodeString PROTO STDCALL :DWORD, :DWORD, :DWORD
RtlNumberOfSetBits PROTO STDCALL :DWORD
RtlNumberOfClearBits PROTO STDCALL :DWORD
RtlNumberGenericTableElements PROTO STDCALL :DWORD
RtlNtStatusToDosErrorNoTeb PROTO STDCALL :DWORD
RtlNtStatusToDosError PROTO STDCALL :DWORD