Setup machine specific registers for kernel emulation

Begin emulation

Maps Windows permissions to emulator engine permissions

void AcquireSRWLockExclusive( [in, out] PSRWLOCK SRWLock );

void AcquireSRWLockShared( [in, out] PSRWLOCK SRWLock );

ATOM AddAtomW( LPCWSTR lpString );

PVOID AddVectoredContinueHandler( ULONG First, PVECTORED_EXCEPTION_HANDLER Handler );

PVOID AddVectoredExceptionHandler( ULONG First, PVECTORED_EXCEPTION_HANDLER Handler );

BOOL AdjustTokenPrivileges( HANDLE TokenHandle, BOOL DisableAllPrivileges, PTOKEN

BOOL WINAPI AllocConsole(void);

BOOL AllocateAndInitializeSid( PSID_IDENTIFIER_AUTHORITY pIdentifierAuthority, BYTE nSubAuthorit

BOOL AreFileApisANSI();

NTSTATUS BCryptCloseAlgorithmProvider( BCRYPT_ALG_HANDLE hAlgorithm, ULONG dwFlags );

NTSTATUS BCryptDestroyKey( BCRYPT_KEY_HANDLE hKey );

NTSTATUS BCryptGetProperty( BCRYPT_HANDLE hObject, LPCWSTR pszProperty, PUCHAR pbOutput,

NTSTATUS BCryptImportKeyPair( BCRYPT_ALG_HANDLE hAlgorithm, BCRYPT_KEY_HANDLE hImportKey, LPCWSTR psz

NTSTATUS BCryptOpenAlgorithmProvider( BCRYPT_ALG_HANDLE *phAlgorithm, LPCWSTR pszAlgId, LPCWSTR

HDC BeginPaint( HWND hWnd, LPPAINTSTRUCT lpPaint );

BOOL BitBlt( HDC hdc, int x, int y, int cx, int cy, HDC hdcSrc, int x1,

LRESULT CallNextHookEx( HHOOK hhk, int nCode, WPARAM wParam, LPARAM lParam );

BOOL CancelWaitableTimer( HANDLE hTimer );

BOOL ChangeServiceConfigA( SC_HANDLE hService, DWORD dwServiceType, DWORD dwStartType, DWORD

BOOL ChangeServiceConfig2( SC_HANDLE hService, DWORD dwInfoLevel, LPVOID lpInfo );

BOOL ChangeWindowMessageFilter( UINT message, DWORD dwFlag );

LPSTR CharLowerA( LPSTR lpsz );

DWORD CharLowerBuffA( LPSTR lpsz, DWORD cchLength );

LPSTR CharNext( LPCSTR lpsz );

LPSTR CharPrev( LPCSTR lpszStart, LPCSTR lpszCurrent );

LPWSTR CharPrevW( LPCWSTR lpszStart, LPCWSTR lpszCurrent );

LPSTR CharUpperA( LPSTR lpsz );

DWORD CharUpperBuffA( LPSTR lpsz, DWORD cchLength );

BOOL CheckRemoteDebuggerPresent( HANDLE hProcess, PBOOL pbDebuggerPresent );

BOOL CheckTokenMembership( HANDLE TokenHandle, PSID SidToCheck, PBOOL IsMember );

BOOL CloseDesktop( HDESK hDesktop );

BOOL CloseHandle( HANDLE hObject );

BOOL CloseServiceHandle( SC_HANDLE hSCObject );

BOOL CloseWindowStation( HWINSTA hWinSta );

NTKERNELAPI NTSTATUS CmRegisterCallback( PEX_CALLBACK_FUNCTION Function, PVOID Context, P

NTSTATUS CmRegisterCallbackEx( PEX_CALLBACK_FUNCTION Function, PCUNICODE_STRING Altitude, PVOID

NTKERNELAPI NTSTATUS CmUnRegisterCallback( LARGE_INTEGER Cookie );

HRESULT CoCreateInstance( REFCLSID rclsid, LPUNKNOWN pUnkOuter, DWORD dwClsContext, REFIID ri

HRESULT CoInitialize( LPVOID pvReserved );

HRESULT CoInitializeEx( LPVOID pvReserved, DWORD dwCoInit );

HRESULT CoInitializeSecurity( PSECURITY_DESCRIPTOR pSecDesc, LONG cAuthSvc, SOLE_

HRESULT CoSetProxyBlanket( IUnknown *pProxy, DWORD dwAuthnSvc, DWORD

void CoUninitialize();

LPWSTR * CommandLineToArgv( LPCWSTR lpCmdLine, int *pNumArgs );

LONG CompareFileTime( const FILETIME *lpFileTime1, const FILETIME *lpFileTime2 );

BOOL ConnectNamedPipe( HANDLE hNamedPipe, LPOVERLAPPED lpOverlapped );

BOOL ControlService( [in] SC_HANDLE hService, [in] DWORD dwControl, [out] LPSERVICE_STATUS

BOOL CopyFile( LPCTSTR lpExistingFileName, LPCTSTR lpNewFileName, BOOL bFailIfExists );

void STDMETHODCALLTYPE CorExitProcess ( int exitCode );

HBITMAP CreateBitmap( int nWidth, int nHeight, UINT nPlanes, UINT n

HBITMAP CreateCompatibleBitmap( HDC hdc, int cx, int cy );

HDC CreateCompatibleDC( HDC hdc );

HDC CreateDCA( LPCSTR pwszDriver, LPCSTR pwszDevice, LPCSTR pszPort, const DEVMODEA *

HBITMAP CreateDIBSection( [in] HDC hdc, [in] const BITMAPINFO *pbmi, [in] UINT usag

HWND CreateDialogIndirectParam( HINSTANCE hInstance, LPCDLGTEMPLATEA lpTemplate, HWND hWndParent,

BOOL CreateDirectory( LPCSTR lpPathName, LPSECURITY_ATTRIBUTES lpSecurityAttributes );

HANDLE CreateEvent( LPSECURITY_ATTRIBUTES lpEventAttributes, BOOL bManualReset, BOOL

HANDLE CreateFile( LPTSTR lpFileName, DWORD dwDesiredAccess, DWORD

HANDLE CreateFileMapping( HANDLE hFile, LPSECURITY_ATTRIBUTES lpFileMappingAttributes, DWORD

HFONT CreateFontIndirectA( const LOGFONTA *lplf );

HANDLE WINAPI CreateIoCompletionPort( _In_ HANDLE FileHandle, _In_opt_ HANDLE ExistingCompletionPort,

HANDLE CreateMutex( LPSECURITY_ATTRIBUTES lpMutexAttributes, BOOL bInitialOwner, LPCSTR

HANDLE CreateMutexExA( LPSECURITY_ATTRIBUTES lpMutexAttributes, LPCSTR lpName, DWORD

HANDLE CreateNamedPipe( LPCSTR lpName, DWORD dwOpenMode, DWORD

BOOL CreatePipe( PHANDLE hReadPipe, PHANDLE hWritePipe, LPSECURITY_ATTRIBUTES lpPipeAttri

BOOL CreateProcessAsUser( HANDLE hToken, LPCSTR lpApplicationName, LPSTR

BOOL CreateProcessInternal( PVOID Reserved1, LPTSTR lpApplicationName, LPTSTR lpC

HANDLE CreateRemoteThread( HANDLE hProcess, LPSECURITY_ATTRIBUTES lpThreadAttributes, SIZE_T

HANDLE CreateSemaphoreW( [in, optional] LPSECURITY_ATTRIBUTES lpSemaphoreAttributes, [in] LONG

SC_HANDLE CreateServiceA( SC_HANDLE hSCManager, LPCSTR lpServiceName, LPCSTR lpDisplayName, DWO

HANDLE CreateThread( LPSECURITY_ATTRIBUTES lpThreadAttributes, SIZE_T dwStackSize, LPT

HANDLE CreateToolhelp32Snapshot( DWORD dwFlags, DWORD th32ProcessID );

HANDLE CreateWaitableTimer( LPSECURITY_ATTRIBUTES lpTimerAttributes, BOOL bManualReset,

HANDLE CreateWaitableTimerEx( LPSECURITY_ATTRIBUTES lpTimerAttributes, LPCSTR lpTimerName,

HANDLE CreateWaitableTimerExW( LPSECURITY_ATTRIBUTES lpTimerAttributes, LPCWSTR lpTimerName,

HWND CreateWindowExA( DWORD dwExStyle, LPCSTR lpClassName, LPCSTR lpWindowName, DWO

HWINSTA CreateWindowStation( LPCSTR lpwinsta, DWORD dwFlags, ACCESS_MASK

BOOL CryptAcquireContext( HCRYPTPROV *phProv, LPCSTR szContainer, LPCSTR szProvider,

BOOL CryptCreateHash( HCRYPTPROV hProv, ALG_ID Algid, HCRYPTKEY hKey, DWORD dwFlags,

BOOL CryptDecrypt( HCRYPTKEY hKey, HCRYPTHASH hHash, BOOL Final, DWORD dwFlags,

BOOL CryptDeriveKey( HCRYPTPROV hProv, ALG_ID Algid, HCRYPTHASH hBaseData, DWORD dwFlags,

BOOL CryptDestroyHash( HCRYPTHASH hHash );

BOOL CryptGenRandom( HCRYPTPROV hProv, DWORD dwLen, BYTE *pbBuffer );

BOOL CryptGetHashParam( HCRYPTHASH hHash, DWORD dwParam, BYTE *pbData, DWORD *pdwData

BOOL CryptHashData( HCRYPTHASH hHash, const BYTE *pbData, DWORD dwDataLen, DWORD dwFlags

BOOL CryptReleaseContext( HCRYPTPROV hProv, DWORD dwFlags );