LIBRARY ntdll
EXPORTS
"__isascii"
"__iscsym"
"__iscsymf"
"__rt_probe_read4@4"
"__seh_longjmp_unwind@4"
"__toascii"
"_abnormal_termination"
"_alldiv"
"_allmul"
"_alloca_probe"
"_allrem"
"_allshl"
"_allshr"
"_atoi64"
"_aulldiv"
"_aullrem"
"_aullshr"
"_chkstk"
"_CIpow"
"_CsrAllocateCaptureBuffer@8"
"_CsrAllocateMessagePointer@12"
"_CsrCaptureMessageBuffer@16"
"_CsrCaptureMessageString@20"
"_CsrCaptureTimeout@8"
"_CsrClientCallServer@16"
"_CsrClientConnectToServer@24"
"_CsrFreeCaptureBuffer@4"
"_CsrIdentifyAlertableThread@0"
"_CsrNewThread@0"
"_CsrProbeForRead@12"
"_CsrProbeForWrite@12"
"_CsrSetPriorityClass@8"
"_DbgBreakPoint@0"
"_DbgPrompt@12"
"_DbgSsHandleKmApiMsg@8"
"_DbgSsInitialize@16"
"_DbgUiConnectToDbg@0"
"_DbgUiContinue@8"
"_DbgUiWaitStateChange@8"
"_DbgUserBreakPoint@0"
"_except_handler2"
"_except_handler3"
"_except_list"
"_fltused"
"_ftol"
"_global_unwind2"
"_i64toa"
"_i64tow"
"_itoa"
"_itow"
"_KiRaiseUserExceptionDispatcher@0"
"_KiUserApcDispatcher@20"
"_KiUserCallbackDispatcher@12"
"_KiUserExceptionDispatcher@8"
"_LdrAccessResource@16"
"_LdrAlternateResourcesEnabled@0"
"_LdrDisableThreadCalloutsForDll@4"
"_LdrEnumResources@20"
"_LdrFindEntryForAddress@8"
"_LdrFindResource_U@16"
"_LdrFindResourceDirectory_U@16"
"_LdrFlushAlternateResourceModules@0"
"_LdrGetDllHandle@16"
"_LdrGetProcedureAddress@16"
"_LdrInitializeThunk@16"
"_LdrLoadAlternateResourceModule@8"
"_LdrLoadDll@16"
"_LdrProcessRelocationBlock@16"
"_LdrQueryImageFileExecutionOptions@24"
"_LdrQueryProcessModuleInformation@12"
"_LdrShutdownProcess@0"
"_LdrShutdownThread@0"
"_LdrUnloadAlternateResourceModule@4"
"_LdrUnloadDll@4"
"_LdrVerifyImageMatchesChecksum@16"
"_local_unwind2"
"_longjmpex"
"_ltoa"
"_ltow"
"_memccpy"
"_memicmp"
"_NtAcceptConnectPort@24"
"_NtAccessCheck@32"
"_NtAccessCheckAndAuditAlarm@44"
"_NtAccessCheckByType@44"
"_NtAccessCheckByTypeAndAuditAlarm@64"
"_NtAccessCheckByTypeResultList@44"
"_NtAccessCheckByTypeResultListAndAuditAlarm@64"
"_NtAccessCheckByTypeResultListAndAuditAlarmByHandle@68"
"_NtAddAtom@12"
"_NtAdjustGroupsToken@24"
"_NtAdjustPrivilegesToken@24"
"_NtAlertResumeThread@8"
"_NtAlertThread@4"
"_NtAllocateLocallyUniqueId@4"
"_NtAllocateUserPhysicalPages@12"
"_NtAllocateUuids@16"
"_NtAllocateVirtualMemory@24"
"_NtAreMappedFilesTheSame@8"
"_NtAssignProcessToJobObject@8"
"_NtCallbackReturn@12"
"_NtCancelDeviceWakeupRequest@4"
"_NtCancelIoFile@8"
"_NtCancelTimer@8"
"_NtClearEvent@4"
"_NtClose@4"
"_NtCloseObjectAuditAlarm@12"
"_NtCompleteConnectPort@4"
"_NtConnectPort@32"
"_NtContinue@8"
"_NtCreateChannel@8"
"_NtCreateDirectoryObject@12"
"_NtCreateEvent@20"
"_NtCreateEventPair@12"
"_NtCreateFile@44"
"_NtCreateIoCompletion@16"
"_NtCreateJobObject@12"
"_NtCreateKey@28"
"_NtCreateMailslotFile@32"
"_NtCreateMutant@16"
"_NtCreateNamedPipeFile@56"
"_NtCreatePagingFile@16"
"_NtCreatePort@20"
"_NtCreateProcess@32"
"_NtCreateProfile@36"
"_NtCreateSection@28"
"_NtCreateSemaphore@20"
"_NtCreateSymbolicLinkObject@16"
"_NtCreateThread@32"
"_NtCreateTimer@16"
"_NtCreateToken@52"
"_NtCreateWaitablePort@20"
"_NtCurrentTeb@0"
"_NtDelayExecution@8"
"_NtDeleteAtom@4"
"_NtDeleteFile@4"
"_NtDeleteKey@4"
"_NtDeleteObjectAuditAlarm@12"
"_NtDeleteValueKey@8"
"_NtDeviceIoControlFile@40"
"_NtDisplayString@4"
"_NtDuplicateObject@28"
"_NtDuplicateToken@24"
"_NtEnumerateKey@24"
"_NtEnumerateValueKey@24"
"_NtExtendSection@8"
"_NtFilterToken@24"
"_NtFindAtom@12"
"_NtFlushBuffersFile@8"
"_NtFlushInstructionCache@12"
"_NtFlushKey@4"
"_NtFlushVirtualMemory@16"
"_NtFlushWriteBuffer@0"
"_NtFreeUserPhysicalPages@12"
"_NtFreeVirtualMemory@16"
"_NtFsControlFile@40"
"_NtGetContextThread@8"
"_NtGetDevicePowerState@8"
"_NtGetPlugPlayEvent@16"
"_NtGetTickCount@0"
"_NtGetWriteWatch@28"
"_NtImpersonateAnonymousToken@4"
"_NtImpersonateClientOfPort@8"
"_NtImpersonateThread@12"
"_NtInitializeRegistry@4"
"_NtInitiatePowerAction@16"
"_NtIsSystemResumeAutomatic@0"
"_NtListenChannel@8"
"_NtListenPort@8"
"_NtLoadDriver@4"
"_NtLoadKey2@12"
"_NtLoadKey@8"
"_NtLockFile@40"
"_NtLockVirtualMemory@16"
"_NtMakeTemporaryObject@4"
"_NtMapUserPhysicalPages@12"
"_NtMapUserPhysicalPagesScatter@12"
"_NtMapViewOfSection@40"
"_NtNotifyChangeDirectoryFile@36"
"_NtNotifyChangeKey@40"
"_NtNotifyChangeMultipleKeys@48"
"_NtOpenChannel@8"
"_NtOpenDirectoryObject@12"
"_NtOpenEvent@12"
"_NtOpenEventPair@12"
"_NtOpenFile@24"
"_NtOpenIoCompletion@12"
"_NtOpenJobObject@12"
"_NtOpenKey@12"
"_NtOpenMutant@12"
"_NtOpenObjectAuditAlarm@48"
"_NtOpenProcess@16"
"_NtOpenProcessToken@12"
"_NtOpenSection@12"
"_NtOpenSemaphore@12"
"_NtOpenSymbolicLinkObject@12"
"_NtOpenThread@16"
"_NtOpenThreadToken@16"
"_NtOpenTimer@12"
"_NtPlugPlayControl@12"
"_NtPowerInformation@20"
"_NtPrivilegeCheck@12"
"_NtPrivilegedServiceAuditAlarm@20"
"_NtPrivilegeObjectAuditAlarm@24"
"_NtProtectVirtualMemory@20"
"_NtPulseEvent@8"
"_NtQueryAttributesFile@8"
"_NtQueryDefaultLocale@8"
"_NtQueryDefaultUILanguage@4"
"_NtQueryDirectoryFile@44"
"_NtQueryDirectoryObject@28"
"_NtQueryEaFile@36"
"_NtQueryEvent@20"
"_NtQueryFullAttributesFile@8"
"_NtQueryInformationAtom@20"
"_NtQueryInformationFile@20"
"_NtQueryInformationJobObject@20"
"_NtQueryInformationPort@20"
"_NtQueryInformationProcess@20"
"_NtQueryInformationThread@20"
"_NtQueryInformationToken@20"
"_NtQueryInstallUILanguage@4"
"_NtQueryIntervalProfile@8"
"_NtQueryIoCompletion@20"
"_NtQueryKey@20"
"_NtQueryMultipleValueKey@24"
"_NtQueryMutant@20"
"_NtQueryObject@20"
"_NtQueryOpenSubKeys@8"
"_NtQueryPerformanceCounter@8"
"_NtQueryQuotaInformationFile@36"
"_NtQuerySection@20"
"_NtQuerySecurityObject@20"
"_NtQuerySemaphore@20"
"_NtQuerySymbolicLinkObject@12"
"_NtQuerySystemEnvironmentValue@16"
"_NtQuerySystemInformation@16"
"_NtQuerySystemTime@4"
"_NtQueryTimer@20"
"_NtQueryTimerResolution@12"
"_NtQueryValueKey@24"
"_NtQueryVirtualMemory@24"
"_NtQueryVolumeInformationFile@20"
"_NtQueueApcThread@20"
"_NtRaiseException@12"
"_NtRaiseHardError@24"
"_NtReadFile@36"
"_NtReadFileScatter@36"
"_NtReadRequestData@24"
"_NtReadVirtualMemory@20"
"_NtRegisterThreadTerminatePort@4"
"_NtReleaseMutant@8"
"_NtReleaseSemaphore@12"
"_NtRemoveIoCompletion@20"
"_NtReplaceKey@12"
"_NtReplyPort@8"
"_NtReplyWaitReceivePort@16"
"_NtReplyWaitReceivePortEx@20"
"_NtReplyWaitReplyPort@8"
"_NtReplyWaitSendChannel@12"
"_NtRequestDeviceWakeup@4"
"_NtRequestPort@8"
"_NtRequestWaitReplyPort@12"
"_NtRequestWakeupLatency@4"
"_NtResetEvent@8"
"_NtResetWriteWatch@12"
"_NtRestoreKey@12"
"_NtResumeThread@8"
"_NtSaveKey@8"
"_NtSaveMergedKeys@12"
"_NtSecureConnectPort@36"
"_NtSendWaitReplyChannel@16"
"_NtSetContextChannel@4"
"_NtSetContextThread@8"
"_NtSetDefaultHardErrorPort@4"
"_NtSetDefaultLocale@8"
"_NtSetDefaultUILanguage@4"
"_NtSetEaFile@16"
"_NtSetEvent@8"
"_NtSetHighEventPair@4"
"_NtSetHighWaitLowEventPair@4"
"_NtSetInformationFile@20"
"_NtSetInformationJobObject@16"
"_NtSetInformationKey@16"
"_NtSetInformationObject@16"
"_NtSetInformationProcess@16"
"_NtSetInformationThread@16"
"_NtSetInformationToken@16"
"_NtSetIntervalProfile@8"
"_NtSetIoCompletion@20"
"_NtSetLdtEntries@24"
"_NtSetLowEventPair@4"
"_NtSetLowWaitHighEventPair@4"
"_NtSetQuotaInformationFile@16"
"_NtSetSecurityObject@12"
"_NtSetSystemEnvironmentValue@8"
"_NtSetSystemInformation@12"
"_NtSetSystemPowerState@12"
"_NtSetSystemTime@8"
"_NtSetThreadExecutionState@8"
"_NtSetTimer@28"
"_NtSetTimerResolution@12"
"_NtSetUuidSeed@4"
"_NtSetValueKey@24"
"_NtSetVolumeInformationFile@20"
"_NtShutdownSystem@4"
"_NtSignalAndWaitForSingleObject@16"
"_NtStartProfile@4"
"_NtStopProfile@4"
"_NtSuspendThread@8"
"_NtSystemDebugControl@24"
"_NtTerminateJobObject@8"
"_NtTerminateProcess@8"
"_NtTerminateThread@8"
"_NtTestAlert@0"
"_NtUnloadDriver@4"
"_NtUnloadKey@4"
"_NtUnlockFile@20"
"_NtUnlockVirtualMemory@16"
"_NtUnmapViewOfSection@8"
"_NtVdmControl@8"
"_NtWaitForMultipleObjects@20"
"_NtWaitForSingleObject@12"
"_NtWaitHighEventPair@4"
"_NtWaitLowEventPair@4"
"_NtWriteFile@36"
"_NtWriteFileGather@36"
"_NtWriteRequestData@24"
"_NtWriteVirtualMemory@20"
"_NtYieldExecution@0"
"_PfxFindPrefix@8"
"_PfxInitialize@4"
"_PfxInsertPrefix@12"
"_PfxRemovePrefix@8"
"_RtlAbortRXact@4"
"_RtlAbsoluteToSelfRelativeSD@12"
"_RtlAcquirePebLock@0"
"_RtlAcquireResourceExclusive@8"
"_RtlAcquireResourceShared@8"
"_RtlAddAccessAllowedAce@16"
"_RtlAddAccessAllowedAceEx@20"
"_RtlAddAccessAllowedObjectAce@28"
"_RtlAddAccessDeniedAce@16"
"_RtlAddAccessDeniedAceEx@20"
"_RtlAddAccessDeniedObjectAce@28"
"_RtlAddAce@20"
"_RtlAddActionToRXact@24"
"_RtlAddAtomToAtomTable@12"
"_RtlAddAttributeActionToRXact@32"
"_RtlAddAuditAccessAce@24"
"_RtlAddAuditAccessAceEx@28"
"_RtlAddAuditAccessObjectAce@36"
"_RtlAddCompoundAce@24"
"_RtlAddRange@36"
"_RtlAdjustPrivilege@16"
"_RtlAllocateAndInitializeSid@44"
"_RtlAllocateHandle@8"
"_RtlAllocateHeap@12"
"_RtlAnsiCharToUnicodeChar@4"
"_RtlAnsiStringToUnicodeSize@4"
"_RtlAnsiStringToUnicodeString@12"
"_RtlAppendAsciizToString@8"
"_RtlAppendStringToString@8"
"_RtlAppendUnicodeStringToString@8"
"_RtlAppendUnicodeToString@8"
"_RtlApplyRXact@4"
"_RtlApplyRXactNoFlush@4"
"_RtlAreAllAccessesGranted@8"
"_RtlAreAnyAccessesGranted@8"
"_RtlAreBitsClear@12"
"_RtlAreBitsSet@12"
"_RtlAssert@16"
"_RtlCallbackLpcClient@12"
"_RtlCancelTimer@8"
"_RtlCaptureStackBackTrace@16"
"_RtlCharToInteger@12"
"_RtlCheckForOrphanedCriticalSections@4"
"_RtlCheckRegistryKey@8"
"_RtlClearAllBits@4"
"_RtlClearBits@12"
"_RtlCompactHeap@8"
"_RtlCompareMemory@12"
"_RtlCompareMemoryUlong@12"
"_RtlCompareString@12"
"_RtlCompareUnicodeString@12"
"_RtlCompressBuffer@32"
"_RtlConsoleMultiByteToUnicodeN@24"
"_RtlConvertExclusiveToShared@4"
"_RtlConvertLongToLargeInteger@4"
"_RtlConvertSharedToExclusive@4"
"_RtlConvertSidToUnicodeString@12"
"_RtlConvertToAutoInheritSecurityObject@24"
"_RtlConvertUiListToApiList@12"
"_RtlConvertUlongToLargeInteger@4"
"_RtlCopyLuid@8"
"_RtlCopyLuidAndAttributesArray@12"
"_RtlCopyRangeList@8"
"_RtlCopySecurityDescriptor@8"
"_RtlCopySid@12"
"_RtlCopySidAndAttributesArray@28"
"_RtlCopyString@8"
"_RtlCopyUnicodeString@8"
"_RtlCreateAcl@12"
"_RtlCreateAndSetSD@20"
"_RtlCreateAtomTable@8"
"_RtlCreateEnvironment@8"
"_RtlCreateHeap@24"
"_RtlCreateLpcServer@24"
"_RtlCreateProcessParameters@40"
"_RtlCreateQueryDebugBuffer@8"
"_RtlCreateRegistryKey@8"
"_RtlCreateSecurityDescriptor@8"
"_RtlCreateTagHeap@16"
"_RtlCreateTimer@28"
"_RtlCreateTimerQueue@4"
"_RtlCreateUnicodeString@8"
"_RtlCreateUnicodeStringFromAsciiz@8"
"_RtlCreateUserProcess@40"
"_RtlCreateUserSecurityObject@28"
"_RtlCreateUserThread@40"
"_RtlCustomCPToUnicodeN@24"
"_RtlCutoverTimeToSystemTime@16"
"_RtlDebugPrintTimes@0"
"_RtlDecompressBuffer@24"
"_RtlDecompressFragment@32"
"_RtlDefaultNpAcl@4"
"_RtlDelete@4"
"_RtlDeleteAce@8"
"_RtlDeleteAtomFromAtomTable@8"
"_RtlDeleteCriticalSection@4"
"_RtlDeleteElementGenericTable@8"
"_RtlDeleteNoSplay@8"
"_RtlDeleteOwnersRanges@8"
"_RtlDeleteRange@24"
"_RtlDeleteRegistryValue@12"
"_RtlDeleteResource@4"
"_RtlDeleteSecurityObject@4"
"_RtlDeleteTimer@12"
"_RtlDeleteTimerQueue@4"
"_RtlDeleteTimerQueueEx@8"
"_RtlDeNormalizeProcessParams@4"
"_RtlDeregisterWait@4"
"_RtlDeregisterWaitEx@8"
"_RtlDestroyAtomTable@4"
"_RtlDestroyEnvironment@4"
"_RtlDestroyHandleTable@4"
"_RtlDestroyHeap@4"
"_RtlDestroyProcessParameters@4"
"_RtlDestroyQueryDebugBuffer@4"
"_RtlDetermineDosPathNameType_U@4"
"_RtlDnsHostNameToComputerName@12"
"_RtlDoesFileExists_U@4"
"_RtlDosPathNameToNtPathName_U@16"
"_RtlDosSearchPath_U@24"
"_RtlDowncaseUnicodeString@12"
"_RtlDumpResource@4"
"_RtlEmptyAtomTable@8"
"_RtlEnableEarlyCriticalSectionEventCreation@0"
"_RtlEnlargedIntegerMultiply@8"
"_RtlEnlargedUnsignedDivide@16"
"_RtlEnlargedUnsignedMultiply@8"
"_RtlEnterCriticalSection@4"
"_RtlEnumerateGenericTable@8"
"_RtlEnumerateGenericTableWithoutSplaying@8"
"_RtlEnumProcessHeaps@8"
"_RtlEqualComputerName@8"
"_RtlEqualDomainName@8"
"_RtlEqualLuid@8"
"_RtlEqualPrefixSid@8"
"_RtlEqualSid@8"
"_RtlEqualString@12"
"_RtlEqualUnicodeString@12"
"_RtlEraseUnicodeString@4"
"_RtlExpandEnvironmentStrings_U@16"
"_RtlExtendedIntegerMultiply@12"
"_RtlExtendedLargeIntegerDivide@16"
"_RtlExtendedMagicDivide@20"
"_RtlExtendHeap@16"
"_RtlFillMemory@12"
"_RtlFillMemoryUlong@12"
"_RtlFindClearBits@12"
"_RtlFindClearBitsAndSet@12"
"_RtlFindLastBackwardRunClear@12"
"_RtlFindLeastSignificantBit@8"
"_RtlFindLongestRunClear@8"
"_RtlFindMessage@20"
"_RtlFindMostSignificantBit@8"
"_RtlFindNextForwardRunClear@12"
"_RtlFindRange@48"
"_RtlFindSetBits@12"
"_RtlFindSetBitsAndClear@12"
"_RtlFirstFreeAce@8"
"_RtlFormatCurrentUserKeyPath@4"
"_RtlFormatMessage@36"
"_RtlFreeAnsiString@4"
"_RtlFreeHandle@8"
"_RtlFreeHeap@12"
"_RtlFreeOemString@4"
"_RtlFreeRangeList@4"
"_RtlFreeSid@4"
"_RtlFreeUnicodeString@4"
"_RtlFreeUserThreadStack@8"
"_RtlGenerate8dot3Name@16"
"_RtlGetAce@12"
"_RtlGetCallersAddress@8"
"_RtlGetCompressionWorkSpaceSize@12"
"_RtlGetControlSecurityDescriptor@12"
"_RtlGetCurrentDirectory_U@8"
"_RtlGetDaclSecurityDescriptor@16"
"_RtlGetElementGenericTable@8"
"_RtlGetFirstRange@12"
"_RtlGetFullPathName_U@16"
"_RtlGetGroupSecurityDescriptor@12"
"_RtlGetLongestNtPathLength@0"
"_RtlGetNextRange@12"
"_RtlGetNtGlobalFlags@0"
"_RtlGetNtProductType@4"
"_RtlGetOwnerSecurityDescriptor@12"
"_RtlGetProcessHeaps@8"
"_RtlGetSaclSecurityDescriptor@16"
"_RtlGetSecurityDescriptorRMControl@8"
"_RtlGetUserInfoHeap@20"
"_RtlGetVersion@4"
"_RtlGUIDFromString@8"
"_RtlIdentifierAuthoritySid@4"
"_RtlImageDirectoryEntryToData@16"
"_RtlImageNtHeader@4"
"_RtlImageRvaToSection@12"
"_RtlImageRvaToVa@16"
"_RtlImpersonateLpcClient@8"
"_RtlImpersonateSelf@4"
"_RtlInitAnsiString@8"
"_RtlInitCodePageTable@8"
"_RtlInitializeAtomPackage@4"
"_RtlInitializeBitMap@12"
"_RtlInitializeContext@20"
"_RtlInitializeCriticalSection@4"
"_RtlInitializeCriticalSectionAndSpinCount@8"
"_RtlInitializeGenericTable@20"
"_RtlInitializeHandleTable@12"
"_RtlInitializeRangeList@4"
"_RtlInitializeResource@4"
"_RtlInitializeRXact@12"
"_RtlInitializeSid@12"
"_RtlInitNlsTables@16"
"_RtlInitString@8"
"_RtlInitUnicodeString@8"
"_RtlInsertElementGenericTable@16"
"_RtlInt64ToUnicodeString@16"
"_RtlIntegerToChar@16"
"_RtlIntegerToUnicodeString@12"
"_RtlInvertRangeList@8"
"_RtlIsDosDeviceName_U@4"
"_RtlIsGenericTableEmpty@4"
"_RtlIsNameLegalDOS8Dot3@12"
"_RtlIsRangeAvailable@40"
"_RtlIsTextUnicode@12"
"_RtlIsValidHandle@8"
"_RtlIsValidIndexHandle@12"
"_RtlLargeIntegerAdd@16"
"_RtlLargeIntegerArithmeticShift@12"
"_RtlLargeIntegerDivide@20"
"_RtlLargeIntegerNegate@8"
"_RtlLargeIntegerShiftLeft@12"
"_RtlLargeIntegerShiftRight@12"
"_RtlLargeIntegerSubtract@16"
"_RtlLargeIntegerToChar@16"
"_RtlLeaveCriticalSection@4"
"_RtlLengthRequiredSid@4"
"_RtlLengthSecurityDescriptor@4"
"_RtlLengthSid@4"
"_RtlLocalTimeToSystemTime@8"
"_RtlLockHeap@4"
"_RtlLookupAtomInAtomTable@12"
"_RtlLookupElementGenericTable@8"
"_RtlMakeSelfRelativeSD@12"
"_RtlMapGenericMask@8"
"_RtlMergeRangeLists@16"
"_RtlMoveMemory@12"
"_RtlMultiByteToUnicodeN@20"
"_RtlMultiByteToUnicodeSize@12"
"_RtlNewInstanceSecurityObject@40"
"_RtlNewSecurityGrantedAccess@24"
"_RtlNewSecurityObject@24"
"_RtlNewSecurityObjectEx@32"
"_RtlNormalizeProcessParams@4"
"_RtlNtStatusToDosError@4"
"_RtlNumberGenericTableElements@4"
"_RtlNumberOfClearBits@4"
"_RtlNumberOfSetBits@4"
"_RtlOemStringToUnicodeSize@4"
"_RtlOemStringToUnicodeString@12"
"_RtlOemToUnicodeN@20"
"_RtlOpenCurrentUser@8"
"_RtlPcToFileHeader@8"
"_RtlPinAtomInAtomTable@8"
"_RtlpNtCreateKey@24"
"_RtlpNtEnumerateSubKey@16"
"_RtlpNtMakeTemporaryKey@4"
"_RtlpNtOpenKey@16"
"_RtlpNtQueryValueKey@20"
"_RtlpNtSetValueKey@16"
"_RtlPrefixString@12"
"_RtlPrefixUnicodeString@12"
"_RtlProtectHeap@8"
"_RtlpUnWaitCriticalSection@4"
"_RtlpWaitForCriticalSection@4"
"_RtlQueryAtomInAtomTable@24"
"_RtlQueryEnvironmentVariable_U@12"
"_RtlQueryInformationAcl@16"
"_RtlQueryProcessBackTraceInformation@4"
"_RtlQueryProcessDebugInformation@12"
"_RtlQueryProcessHeapInformation@4"
"_RtlQueryProcessLockInformation@4"
"_RtlQueryRegistryValues@20"
"_RtlQuerySecurityObject@20"
"_RtlQueryTagHeap@20"
"_RtlQueryTimeZoneInformation@4"
"_RtlQueueWorkItem@12"
"_RtlRaiseException@4"
"_RtlRaiseStatus@4"
"_RtlRandom@4"
"_RtlReAllocateHeap@16"
"_RtlRealPredecessor@4"
"_RtlRealSuccessor@4"
"_RtlRegisterWait@24"
"_RtlReleasePebLock@0"
"_RtlReleaseResource@4"
"_RtlRemoteCall@28"
"_RtlResetRtlTranslations@4"
"_RtlRunDecodeUnicodeString@8"
"_RtlRunEncodeUnicodeString@8"
"_RtlSecondsSince1970ToTime@8"
"_RtlSecondsSince1980ToTime@8"
"_RtlSelfRelativeToAbsoluteSD2@8"
"_RtlSelfRelativeToAbsoluteSD@44"
"_RtlSetAllBits@4"
"_RtlSetAttributesSecurityDescriptor@12"
"_RtlSetBits@12"
"_RtlSetControlSecurityDescriptor@12"
"_RtlSetCriticalSectionSpinCount@8"
"_RtlSetCurrentDirectory_U@4"
"_RtlSetCurrentEnvironment@8"
"_RtlSetDaclSecurityDescriptor@16"
"_RtlSetEnvironmentVariable@12"
"_RtlSetGroupSecurityDescriptor@12"
"_RtlSetInformationAcl@16"
"_RtlSetIoCompletionCallback@12"
"_RtlSetOwnerSecurityDescriptor@12"
"_RtlSetSaclSecurityDescriptor@16"
"_RtlSetSecurityDescriptorRMControl@8"
"_RtlSetSecurityObject@20"
"_RtlSetSecurityObjectEx@24"
"_RtlSetThreadPoolStartFunc@8"
"_RtlSetTimer@28"
"_RtlSetTimeZoneInformation@4"
"_RtlSetUnicodeCallouts@4"
"_RtlSetUserFlagsHeap@20"
"_RtlSetUserValueHeap@16"
"_RtlShutdownLpcServer@4"
"_RtlSizeHeap@12"
"_RtlSplay@4"
"_RtlStartRXact@4"
"_RtlStringFromGUID@8"
"_RtlSubAuthorityCountSid@4"
"_RtlSubAuthoritySid@8"
"_RtlSubtreePredecessor@4"
"_RtlSubtreeSuccessor@4"
"_RtlSystemTimeToLocalTime@8"
"_RtlTimeFieldsToTime@8"
"_RtlTimeToElapsedTimeFields@8"
"_RtlTimeToSecondsSince1970@8"
"_RtlTimeToSecondsSince1980@8"
"_RtlTimeToTimeFields@8"
"_RtlTraceDatabaseAdd@16"
"_RtlTraceDatabaseCreate@20"
"_RtlTraceDatabaseDestroy@4"
"_RtlTraceDatabaseEnumerate@12"
"_RtlTraceDatabaseFind@16"
"_RtlTraceDatabaseLock@4"
"_RtlTraceDatabaseUnlock@4"
"_RtlTraceDatabaseValidate@4"
"_RtlTryEnterCriticalSection@4"
"_RtlUnicodeStringToAnsiSize@4"
"_RtlUnicodeStringToAnsiString@12"
"_RtlUnicodeStringToCountedOemString@12"
"_RtlUnicodeStringToInteger@12"
"_RtlUnicodeStringToOemSize@4"
"_RtlUnicodeStringToOemString@12"
"_RtlUnicodeToCustomCPN@24"
"_RtlUnicodeToMultiByteN@20"
"_RtlUnicodeToMultiByteSize@12"
"_RtlUnicodeToOemN@20"
"_RtlUniform@4"
"_RtlUnlockHeap@4"
"_RtlUnwind@16"
"_RtlUpcaseUnicodeChar@4"
"_RtlUpcaseUnicodeString@12"
"_RtlUpcaseUnicodeStringToAnsiString@12"
"_RtlUpcaseUnicodeStringToCountedOemString@12"
"_RtlUpcaseUnicodeStringToOemString@12"
"_RtlUpcaseUnicodeToCustomCPN@24"
"_RtlUpcaseUnicodeToMultiByteN@20"
"_RtlUpcaseUnicodeToOemN@20"
"_RtlUpdateTimer@16"
"_RtlUpperChar@4"
"_RtlUpperString@8"
"_RtlUsageHeap@12"
"_RtlValidAcl@4"
"_RtlValidateHeap@12"
"_RtlValidateProcessHeaps@0"
"_RtlValidRelativeSecurityDescriptor@12"
"_RtlValidSecurityDescriptor@4"
"_RtlValidSid@4"
"_RtlVerifyVersionInfo@16"
"_RtlWalkFrameChain@12"
"_RtlWalkHeap@8"
"_RtlWriteRegistryValue@24"
"_RtlxAnsiStringToUnicodeSize@4"
"_RtlxOemStringToUnicodeSize@4"
"_RtlxUnicodeStringToAnsiSize@4"
"_RtlxUnicodeStringToOemSize@4"
"_RtlZeroHeap@8"
"_RtlZeroMemory@8"
"_setjmp"
"_setjmp3"
"_setjmpexused"
"_snprintf"
"_snwprintf"
"_splitpath"
"_strcmpi"
"_stricmp"
"_strlwr"
"_strnicmp"
"_strupr"
"_tolower"
"_toupper"
"_ui64toa"
"_ultoa"
"_ultow"
"_VerSetConditionMask@16"
"_vsnprintf"
"_wcsicmp"
"_wcslwr"
"_wcsnicmp"
"_wcsupr"
"_wtoi"
"_wtoi64"
"_wtol"
"_ZwAcceptConnectPort@24"
"_ZwAccessCheck@32"
"_ZwAccessCheckAndAuditAlarm@44"
"_ZwAccessCheckByType@44"
"_ZwAccessCheckByTypeAndAuditAlarm@64"
"_ZwAccessCheckByTypeResultList@44"
"_ZwAccessCheckByTypeResultListAndAuditAlarm@64"
"_ZwAccessCheckByTypeResultListAndAuditAlarmByHandle@68"
"_ZwAddAtom@12"
"_ZwAdjustGroupsToken@24"
"_ZwAdjustPrivilegesToken@24"
"_ZwAlertResumeThread@8"
"_ZwAlertThread@4"
"_ZwAllocateLocallyUniqueId@4"
"_ZwAllocateUserPhysicalPages@12"
"_ZwAllocateUuids@16"
"_ZwAllocateVirtualMemory@24"
"_ZwAreMappedFilesTheSame@8"
"_ZwAssignProcessToJobObject@8"
"_ZwCallbackReturn@12"
"_ZwCancelDeviceWakeupRequest@4"
"_ZwCancelIoFile@8"
"_ZwCancelTimer@8"
"_ZwClearEvent@4"
"_ZwClose@4"
"_ZwCloseObjectAuditAlarm@12"
"_ZwCompleteConnectPort@4"
"_ZwConnectPort@32"
"_ZwContinue@8"
"_ZwCreateChannel@8"
"_ZwCreateDirectoryObject@12"
"_ZwCreateEvent@20"
"_ZwCreateEventPair@12"
"_ZwCreateFile@44"
"_ZwCreateIoCompletion@16"
"_ZwCreateJobObject@12"
"_ZwCreateKey@28"
"_ZwCreateMailslotFile@32"
"_ZwCreateMutant@16"
"_ZwCreateNamedPipeFile@56"
"_ZwCreatePagingFile@16"
"_ZwCreatePort@20"
"_ZwCreateProcess@32"
"_ZwCreateProfile@36"
"_ZwCreateSection@28"
"_ZwCreateSemaphore@20"
"_ZwCreateSymbolicLinkObject@16"
"_ZwCreateThread@32"
"_ZwCreateTimer@16"
"_ZwCreateToken@52"
"_ZwCreateWaitablePort@20"
"_ZwDelayExecution@8"
"_ZwDeleteAtom@4"
"_ZwDeleteFile@4"
"_ZwDeleteKey@4"
"_ZwDeleteObjectAuditAlarm@12"
"_ZwDeleteValueKey@8"
"_ZwDeviceIoControlFile@40"
"_ZwDisplayString@4"
"_ZwDuplicateObject@28"
"_ZwDuplicateToken@24"
"_ZwEnumerateKey@24"
"_ZwEnumerateValueKey@24"
"_ZwExtendSection@8"
"_ZwFilterToken@24"
"_ZwFindAtom@12"
"_ZwFlushBuffersFile@8"
"_ZwFlushInstructionCache@12"
"_ZwFlushKey@4"
"_ZwFlushVirtualMemory@16"
"_ZwFlushWriteBuffer@0"
"_ZwFreeUserPhysicalPages@12"
"_ZwFreeVirtualMemory@16"
"_ZwFsControlFile@40"
"_ZwGetContextThread@8"
"_ZwGetDevicePowerState@8"
"_ZwGetPlugPlayEvent@16"
"_ZwGetTickCount@0"
"_ZwGetWriteWatch@28"
"_ZwImpersonateAnonymousToken@4"
"_ZwImpersonateClientOfPort@8"
"_ZwImpersonateThread@12"
"_ZwInitializeRegistry@4"
"_ZwInitiatePowerAction@16"
"_ZwIsSystemResumeAutomatic@0"
"_ZwListenChannel@8"
"_ZwListenPort@8"
"_ZwLoadDriver@4"
"_ZwLoadKey2@12"
"_ZwLoadKey@8"
"_ZwLockFile@40"
"_ZwLockVirtualMemory@16"
"_ZwMakeTemporaryObject@4"
"_ZwMapUserPhysicalPages@12"
"_ZwMapUserPhysicalPagesScatter@12"
"_ZwMapViewOfSection@40"
"_ZwNotifyChangeDirectoryFile@36"
"_ZwNotifyChangeKey@40"
"_ZwNotifyChangeMultipleKeys@48"
"_ZwOpenChannel@8"
"_ZwOpenDirectoryObject@12"
"_ZwOpenEvent@12"
"_ZwOpenEventPair@12"
"_ZwOpenFile@24"
"_ZwOpenIoCompletion@12"
"_ZwOpenJobObject@12"
"_ZwOpenKey@12"
"_ZwOpenMutant@12"
"_ZwOpenObjectAuditAlarm@48"
"_ZwOpenProcess@16"
"_ZwOpenProcessToken@12"
"_ZwOpenSection@12"
"_ZwOpenSemaphore@12"
"_ZwOpenSymbolicLinkObject@12"
"_ZwOpenThread@16"
"_ZwOpenThreadToken@16"
"_ZwOpenTimer@12"
"_ZwPlugPlayControl@12"
"_ZwPowerInformation@20"
"_ZwPrivilegeCheck@12"
"_ZwPrivilegedServiceAuditAlarm@20"
"_ZwPrivilegeObjectAuditAlarm@24"
"_ZwProtectVirtualMemory@20"
"_ZwPulseEvent@8"
"_ZwQueryAttributesFile@8"
"_ZwQueryDefaultLocale@8"
"_ZwQueryDefaultUILanguage@4"
"_ZwQueryDirectoryFile@44"
"_ZwQueryDirectoryObject@28"
"_ZwQueryEaFile@36"
"_ZwQueryEvent@20"
"_ZwQueryFullAttributesFile@8"
"_ZwQueryInformationAtom@20"
"_ZwQueryInformationFile@20"
"_ZwQueryInformationJobObject@20"
"_ZwQueryInformationPort@20"
"_ZwQueryInformationProcess@20"
"_ZwQueryInformationThread@20"
"_ZwQueryInformationToken@20"
"_ZwQueryInstallUILanguage@4"
"_ZwQueryIntervalProfile@8"
"_ZwQueryIoCompletion@20"
"_ZwQueryKey@20"
"_ZwQueryMultipleValueKey@24"
"_ZwQueryMutant@20"
"_ZwQueryObject@20"
"_ZwQueryOpenSubKeys@8"
"_ZwQueryPerformanceCounter@8"
"_ZwQueryQuotaInformationFile@36"
"_ZwQuerySection@20"
"_ZwQuerySecurityObject@20"
"_ZwQuerySemaphore@20"
"_ZwQuerySymbolicLinkObject@12"
"_ZwQuerySystemEnvironmentValue@16"
"_ZwQuerySystemInformation@16"
"_ZwQuerySystemTime@4"
"_ZwQueryTimer@20"
"_ZwQueryTimerResolution@12"
"_ZwQueryValueKey@24"
"_ZwQueryVirtualMemory@24"
"_ZwQueryVolumeInformationFile@20"
"_ZwQueueApcThread@20"
"_ZwRaiseException@12"
"_ZwRaiseHardError@24"
"_ZwReadFile@36"
"_ZwReadFileScatter@36"
"_ZwReadRequestData@24"
"_ZwReadVirtualMemory@20"
"_ZwRegisterThreadTerminatePort@4"
"_ZwReleaseMutant@8"
"_ZwReleaseSemaphore@12"
"_ZwRemoveIoCompletion@20"
"_ZwReplaceKey@12"
"_ZwReplyPort@8"
"_ZwReplyWaitReceivePort@16"
"_ZwReplyWaitReceivePortEx@20"
"_ZwReplyWaitReplyPort@8"
"_ZwReplyWaitSendChannel@12"
"_ZwRequestDeviceWakeup@4"
"_ZwRequestPort@8"
"_ZwRequestWaitReplyPort@12"
"_ZwRequestWakeupLatency@4"
"_ZwResetEvent@8"
"_ZwResetWriteWatch@12"
"_ZwRestoreKey@12"
"_ZwResumeThread@8"
"_ZwSaveKey@8"
"_ZwSaveMergedKeys@12"
"_ZwSecureConnectPort@36"
"_ZwSendWaitReplyChannel@16"
"_ZwSetContextChannel@4"
"_ZwSetContextThread@8"
"_ZwSetDefaultHardErrorPort@4"
"_ZwSetDefaultLocale@8"
"_ZwSetDefaultUILanguage@4"
"_ZwSetEaFile@16"
"_ZwSetEvent@8"
"_ZwSetHighEventPair@4"
"_ZwSetHighWaitLowEventPair@4"
"_ZwSetInformationFile@20"
"_ZwSetInformationJobObject@16"
"_ZwSetInformationKey@16"
"_ZwSetInformationObject@16"
"_ZwSetInformationProcess@16"
"_ZwSetInformationThread@16"
"_ZwSetInformationToken@16"
"_ZwSetIntervalProfile@8"
"_ZwSetIoCompletion@20"
"_ZwSetLdtEntries@24"
"_ZwSetLowEventPair@4"
"_ZwSetLowWaitHighEventPair@4"
"_ZwSetQuotaInformationFile@16"
"_ZwSetSecurityObject@12"
"_ZwSetSystemEnvironmentValue@8"
"_ZwSetSystemInformation@12"
"_ZwSetSystemPowerState@12"
"_ZwSetSystemTime@8"
"_ZwSetThreadExecutionState@8"
"_ZwSetTimer@28"
"_ZwSetTimerResolution@12"
"_ZwSetUuidSeed@4"
"_ZwSetValueKey@24"
"_ZwSetVolumeInformationFile@20"
"_ZwShutdownSystem@4"
"_ZwSignalAndWaitForSingleObject@16"
"_ZwStartProfile@4"
"_ZwStopProfile@4"
"_ZwSuspendThread@8"
"_ZwSystemDebugControl@24"
"_ZwTerminateJobObject@8"
"_ZwTerminateProcess@8"
"_ZwTerminateThread@8"
"_ZwTestAlert@0"
"_ZwUnloadDriver@4"
"_ZwUnloadKey@4"
"_ZwUnlockFile@20"
"_ZwUnlockVirtualMemory@16"
"_ZwUnmapViewOfSection@8"
"_ZwVdmControl@8"
"_ZwWaitForMultipleObjects@20"
"_ZwWaitForSingleObject@12"
"_ZwWaitHighEventPair@4"
"_ZwWaitLowEventPair@4"
"_ZwWriteFile@36"
"_ZwWriteFileGather@36"
"_ZwWriteRequestData@24"
"_ZwWriteVirtualMemory@20"
"_ZwYieldExecution@0"
"abs"
"atan"
"atoi"
"atol"
"ceil"
"cos"
"DbgPrint"
"DbgPrintReturnControlC"
"fabs"
"floor"
"isalnum"
"isalpha"
"iscntrl"
"isdigit"
"isgraph"
"islower"
"isprint"
"ispunct"
"isspace"
"isupper"
"iswalpha"
"iswctype"
"iswdigit"
"iswlower"
"iswspace"
"iswxdigit"
"isxdigit"
"labs"
"log"
"longjmp"
"mbstowcs"
"memchr"
"memcmp"
"memcpy"
"memmove"
"memset"
"NlsAnsiCodePage"
"NlsMbCodePageTag"
"NlsMbOemCodePageTag"
"NPXEMULATORTABLE"
"pow"
"qsort"
"raisex"
"RestoreEm87Context"
"SaveEm87Context"
"sin"
"sprintf"
"sqrt"
"sscanf"
"strcat"
"strchr"
"strcmp"
"strcpy"
"strcspn"
"strlen"
"strncat"
"strncmp"
"strncpy"
"strpbrk"
"strrchr"
"strspn"
"strstr"
"strtol"
"strtoul"
"swprintf"
"tan"
"tolower"
"toupper"
"towlower"
"towupper"
"vsprintf"
"wcscat"
"wcschr"
"wcscmp"
"wcscpy"
"wcscspn"
"wcslen"
"wcsncat"
"wcsncmp"
"wcsncpy"
"wcspbrk"
"wcsrchr"
"wcsspn"
"wcsstr"
"wcstol"
"wcstombs"
"wcstoul"
