ntdll.inc

这是asm驱动的开发包

NtListenChannel                                    proto stdcall :DWORD, :DWORD
NtListenPort                                       proto stdcall :DWORD, :DWORD
NtLoadDriver                                       proto stdcall :DWORD
NtLoadKey2                                         proto stdcall :DWORD, :DWORD, :DWORD
NtLoadKey                                          proto stdcall :DWORD, :DWORD
NtLockFile                                         proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtLockVirtualMemory                                proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtMakeTemporaryObject                              proto stdcall :DWORD
NtMapUserPhysicalPages                             proto stdcall :DWORD, :DWORD, :DWORD
NtMapUserPhysicalPagesScatter                      proto stdcall :DWORD, :DWORD, :DWORD
NtMapViewOfSection                                 proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtNotifyChangeDirectoryFile                        proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtNotifyChangeKey                                  proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtNotifyChangeMultipleKeys                         proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtOpenChannel                                      proto stdcall :DWORD, :DWORD
NtOpenDirectoryObject                              proto stdcall :DWORD, :DWORD, :DWORD
NtOpenEvent                                        proto stdcall :DWORD, :DWORD, :DWORD
NtOpenEventPair                                    proto stdcall :DWORD, :DWORD, :DWORD
NtOpenFile                                         proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtOpenIoCompletion                                 proto stdcall :DWORD, :DWORD, :DWORD
NtOpenJobObject                                    proto stdcall :DWORD, :DWORD, :DWORD
NtOpenKey                                          proto stdcall :DWORD, :DWORD, :DWORD
NtOpenMutant                                       proto stdcall :DWORD, :DWORD, :DWORD
NtOpenObjectAuditAlarm                             proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtOpenProcess                                      proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtOpenProcessToken                                 proto stdcall :DWORD, :DWORD, :DWORD
NtOpenSection                                      proto stdcall :DWORD, :DWORD, :DWORD
NtOpenSemaphore                                    proto stdcall :DWORD, :DWORD, :DWORD
NtOpenSymbolicLinkObject                           proto stdcall :DWORD, :DWORD, :DWORD
NtOpenThread                                       proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtOpenThreadToken                                  proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtOpenTimer                                        proto stdcall :DWORD, :DWORD, :DWORD
NtPlugPlayControl                                  proto stdcall :DWORD, :DWORD, :DWORD
NtPowerInformation                                 proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtPrivilegeCheck                                   proto stdcall :DWORD, :DWORD, :DWORD
NtPrivilegeObjectAuditAlarm                        proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtPrivilegedServiceAuditAlarm                      proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtProtectVirtualMemory                             proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtPulseEvent                                       proto stdcall :DWORD, :DWORD
NtQueryAttributesFile                              proto stdcall :DWORD, :DWORD
NtQueryDefaultLocale                               proto stdcall :DWORD, :DWORD
NtQueryDefaultUILanguage                           proto stdcall :DWORD
NtQueryDirectoryFile                               proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryDirectoryObject                             proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryEaFile                                      proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryEvent                                       proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryFullAttributesFile                          proto stdcall :DWORD, :DWORD
NtQueryInformationAtom                             proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryInformationFile                             proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryInformationJobObject                        proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryInformationPort                             proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryInformationProcess                          proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryInformationThread                           proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryInformationToken                            proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryInstallUILanguage                           proto stdcall :DWORD
NtQueryIntervalProfile                             proto stdcall :DWORD, :DWORD
NtQueryIoCompletion                                proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryKey                                         proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryMultipleValueKey                            proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryMutant                                      proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryObject                                      proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryOpenSubKeys                                 proto stdcall :DWORD, :DWORD
NtQueryPerformanceCounter                          proto stdcall :DWORD, :DWORD
NtQueryQuotaInformationFile                        proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQuerySection                                     proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQuerySecurityObject                              proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQuerySemaphore                                   proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQuerySymbolicLinkObject                          proto stdcall :DWORD, :DWORD, :DWORD
NtQuerySystemEnvironmentValue                      proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtQuerySystemInformation                           proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtQuerySystemTime                                  proto stdcall :DWORD
NtQueryTimer                                       proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryTimerResolution                             proto stdcall :DWORD, :DWORD, :DWORD
NtQueryValueKey                                    proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryVirtualMemory                               proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryVolumeInformationFile                       proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueueApcThread                                   proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtRaiseException                                   proto stdcall :DWORD, :DWORD, :DWORD
NtRaiseHardError                                   proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtReadFile                                         proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtReadFileScatter                                  proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtReadRequestData                                  proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtReadVirtualMemory                                proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtRegisterThreadTerminatePort                      proto stdcall :DWORD
NtReleaseMutant                                    proto stdcall :DWORD, :DWORD
NtReleaseSemaphore                                 proto stdcall :DWORD, :DWORD, :DWORD
NtRemoveIoCompletion                               proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtReplaceKey                                       proto stdcall :DWORD, :DWORD, :DWORD
NtReplyPort                                        proto stdcall :DWORD, :DWORD
NtReplyWaitReceivePort                             proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtReplyWaitReceivePortEx                           proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtReplyWaitReplyPort                               proto stdcall :DWORD, :DWORD
NtReplyWaitSendChannel                             proto stdcall :DWORD, :DWORD, :DWORD
NtRequestDeviceWakeup                              proto stdcall :DWORD
NtRequestPort                                      proto stdcall :DWORD, :DWORD
NtRequestWaitReplyPort                             proto stdcall :DWORD, :DWORD, :DWORD
NtRequestWakeupLatency                             proto stdcall :DWORD
NtResetEvent                                       proto stdcall :DWORD, :DWORD
NtResetWriteWatch                                  proto stdcall :DWORD, :DWORD, :DWORD
NtRestoreKey                                       proto stdcall :DWORD, :DWORD, :DWORD
NtResumeThread                                     proto stdcall :DWORD, :DWORD
NtSaveKey                                          proto stdcall :DWORD, :DWORD
NtSaveMergedKeys                                   proto stdcall :DWORD, :DWORD, :DWORD
NtSecureConnectPort                                proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtSendWaitReplyChannel                             proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtSetContextChannel                                proto stdcall :DWORD
NtSetContextThread                                 proto stdcall :DWORD, :DWORD
NtSetDefaultHardErrorPort                          proto stdcall :DWORD
NtSetDefaultLocale                                 proto stdcall :DWORD, :DWORD
NtSetDefaultUILanguage                             proto stdcall :DWORD
NtSetEaFile                                        proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtSetEvent                                         proto stdcall :DWORD, :DWORD
NtSetHighEventPair                                 proto stdcall :DWORD
NtSetHighWaitLowEventPair                          proto stdcall :DWORD
NtSetInformationFile                               proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtSetInformationJobObject                          proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtSetInformationKey                                proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtSetInformationObject                             proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtSetInformationProcess                            proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtSetInformationThread                             proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtSetInformationToken                              proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtSetIntervalProfile                               proto stdcall :DWORD, :DWORD
NtSetIoCompletion                                  proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtSetLdtEntries                                    proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtSetLowEventPair                                  proto stdcall :DWORD
NtSetLowWaitHighEventPair                          proto stdcall :DWORD
NtSetQuotaInformationFile                          proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtSetSecurityObject                                proto stdcall :DWORD, :DWORD, :DWORD
NtSetSystemEnvironmentValue                        proto stdcall :DWORD, :DWORD
NtSetSystemInformation                             proto stdcall :DWORD, :DWORD, :DWORD
NtSetSystemPowerState                              proto stdcall :DWORD, :DWORD, :DWORD
NtSetSystemTime                                    proto stdcall :DWORD, :DWORD
NtSetThreadExecutionState                          proto stdcall :DWORD, :DWORD
NtSetTimer                                         proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtSetTimerResolution                               proto stdcall :DWORD, :DWORD, :DWORD
NtSetUuidSeed                                      proto stdcall :DWORD
NtSetValueKey                                      proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtSetVolumeInformationFile                         proto stdcall :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtShutdownSystem                                   proto stdcall :DWORD
NtSignalAndWaitForSingleObject                     proto stdcall :DWORD, :DWORD, :DWORD, :DWORD
NtStartProfile                                     proto stdcall :DWORD
NtStopProfile                                      proto stdcall :DWORD
NtSuspendThread                                    proto stdcall :DWORD, :DWORD