| Server IP : 209.209.40.120 / Your IP : 216.73.217.112 Web Server : Microsoft-IIS/10.0 System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586 User : NEWWWW$ ( 0) PHP Version : 8.3.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/Program Files (x86)/Windows Kits/10/Lib/10.0.19041.0/um/x86/ |
Upload File : |
!<arch>
/ -1 0 139493 `
R BX Dz E� Z. Z. ^� ^� Z� Z� ^T ^T \ \ \~ \~ ]� ]� ]l ]l \� \� [
[
[� [� W2 W2 W� W� X X �8 �8 �� �� Xh Xh X� X� _6 _6 Y� Y� YB YB qd qd u� u� uf uf vN vN v� v� x& x& w� w� w: w: y� y� zb zb z� z� {L {L r� r� y� y� |� |� } } }� }� �� �� �: �: �� �� �4 �4 �� �� �r �r � � �P �P �� �� � � �v �v �V �V �� �� t� t� ~ ~ �6 �6 q� q� � � �� �� y y {� {� ~� ~� �� �� �8 �8 �
�
�2 �2 � � � � �� �� �& �& �h �h �� �� �� �� i� i� j& j& j� j� k k o o ot ot o� o� p^ p^ qP qP q� q� F� F� t( t( t� t� u u u� u� v v v| v| v� v� wj wj w� w� xD xD x� x� y4 y4 y� y� z z { { {� {� |� |� }x }x ~� ~� ^ ^ � � �P �P �� �� �F �F �� �� �� �� �
�
�� �� �� �� �� �� �� �� �^ �^ �P �P �� �� �6 �6 �� �� � � �� �� � � �n �n �� �� �H �H �� �� � � �� �� �� �� �Z �Z �� �� �> �> �� �� �* �* � � �� �� �� �� �Z �Z �� �� � � �� �� �� �� �j �j �� �� �P �P �� �� �8 �8 �� �� �� �� � � �| �| �p �p �` �` �� �� �� �� �Z �Z �� �� �P �P �P �P �� �� �
�
�� �� �� �� �p �p �� �� �V �V �� �� �4 �4 �� �� �� �� � � � � �� �� �Z �Z �� �� �0 �0 �� �� �� �� �` �` �� �� �b �b �T �T �� �� �@ �@ �� �� �� �� �� �� �x �x �� �� �� �� �J �J �� �� �b �b �N �N � � �j �j � � � � �z �z �� �� �N �N u u G� G� �� �� �> �> �� �� �& �& �� �� ¶ ¶ �� �� �f �f �X �X �� �� �H �H �� �� �F �F �$ �$ Ú Ú �
�
� � �: �: Ǹ Ǹ �* �* Ȟ Ȟ � � �l �l �� �� �� �� ʹ ʹ � � �( �( �� �� ϲ ϲ �D �D �F �F kt kt �X �X �� �� �> �> Ӳ Ӳ �* �* Ԙ Ԙ � � ր ր �t �t �d �d �X �X �� �� �� �� �� �� �P �P �� �� Հ Հ � � �J �J �t �t �� �� �J �J �� �� �< �< �@ �@ %J %J - - Ep Ep E� E� D� D� Fh Fh F� F� G� G� I I O> O> ` ` Kj Kj MP MP M� M� NF NF I� I� R� R� �J �J � � ۜ ۜ � � ܌ ܌ � � ݘ ݘ �$ �$ ڲ ڲ � � ޒ ޒ �" �" � � �� �� � � �l �l �� �� �F �F � � � � �� �� � � � � � � �T �T �� �� � � � � �� �� �` �` �� �� �L �L �� �� �6 �6 � � � � � � � � �^ �^ �x �x �� �� �F �F � � �� �� � � �2 �2 �� �� �
�
�z �z �� �� �� �� �8 �8 �" �" �� �� �� �� �V �V � � � � �R �R �� �� �� �� �: �: �6 �6 �� �� � � v v � � l l N� N� �� �� ^ ^ T T � �
T T � � �v �v ( ( n n D D �r �r �, �, � � � � b b �t �t @ @ �� �� � � �T �T �� �� �� �� �� �� � � �� �� S� S� �: �: �� �� � � �0 �0 � � �( �( �� �� � � � � � � � � �� �� � � � � �� �� �� �� V V �v �v �h �h �� �� �� �� �: �: � �
v
v
�
� ` ` � � � �
<
<
�
� 2 2 � � � � � � , , � � � � �� �� �. �. �� �� � � � � : : $ $ � � l l � � N N � � L L � � � � �^ �^ ` ` "( "( "� "� # # #� #� #� #� $f $f $� $� %� %� &6 &6 ' ' )^ )^ )� )� +� +� , , ,� ,� �� �� �X �X � � �� �� -� -� . . .� .� �� �� �� �� �8 �8 0v 0v 0� 0� 1j 1j 2T 2T 1� 1� 3� 3� 4 4 2� 2� ( ( (p (p (� (� *@ *@ *� *� +& +& 6� 6� 4� 4� 5 5 5� 5� 6 6 7t 7t 7� 7� 9R 9R 9� 9� :B :B :� :� 8\ 8\ ;8 ;8 �& �& J J Jv Jv L� L� P� P� w� w� H H �2 �2 8� 8� 6� 6� ;� ;� <& <& <� <� > > = = =� =� >z >z ?� ?� >� >� ?h ?h @V @V A� A� @� @� AD AD B2 B2 C� C� B� B� C C � � � � � � � � GJ GJ H* H* H� H� J� J� D� D� Lf Lf Rl Rl Q Q Q� Q� Q� Q� SV SV T> T> T� T� U. U. U� U� V V V� V� W W W| W| W� W� Xb Xb X� X� YJ YJ Y� Y� Z� Z� ]` ]` _� _� ` ` `� `� a a a� a� b
b
b� b� c c c� c� c� c� dl dl � � eX eX e� e� fF fF f� f� g. g. g� g� h$ h$ h� h� i i i� i� j j k k k� k� lb lb l� l� mV mV m� m� nF nF n� n� o0 o0 o� o� p p p� p� q q q� q� q� q� rd rd r� r� �x �x �Z �Z �� �� �< �< �� �� � � �� �� sF sF s� s� t$ t$ t� t� u� u� v� v� wd wd x� x� y� y� y> y> z4 z4 z� z� {6 {6 {� {� |� |� ~8 ~8 ~� ~� " " � � � � �� �� � � �� �� �� �� � � �v �v �� �� �d �d �� �� �Z �Z �D �D �* �* �� �� � � �� �� �� �� �V �V �� �� �4 �4 � � �� �� �� �� �Z �Z �� �� �< �< �� �� � � �z �z �� �� �` �` �� �� � � �| �| �� �� �< �< �. �. �� �� � � �� �� �� �� �L �L �� �� �� �� �� �� � � �� �� �� �� �z �z �V �V �� �� �� �� �& �& �h �h �R �R �� �� �� �� �� �� � � �� �� �� �� �� �� �d �d �L �L �� �� �
�
�x �x �� �� �^ �^ �� �� �@ �@ �� �� � � �x �x �� �� �T �T �� �� �F �F �� �� �, �, �8 �8 �� �� �~ �~ �� �� �� �� �Z �Z � � �D �D ż ż �4 �4 T T � � ǎ ǎ �� �� Ʀ Ʀ �| �| � � �� �� �b �b �L �L �> �> � � ͢ ͢ Ζ Ζ � � � � Є Є � � ϊ ϊ �v �v �f �f �T �T �� �� �� �� �4 �4 Ն Ն �T �T �� �� � � �| �| �� �� �� �� �d �d �� �� �b �b �6 �6 ߠ ߠ ̶ ̶ �2 �2 j� j� K� K� � � !� !� !D !D � � � � �R �R � � �v �v �p �p �� �� �� �� �& �& �H �H � � �" �" �� �� < < � � . . � � �N �N Z. Z. T� T� T T Q< Q< T� T� Q� Q� R* R* S* S* R� R� S� S� U� U� VR VR Ul Ul V� V� � � �6 �6 � � �� �� �� �� � � �J �J �8 �8 �� �� �� �� � � �� �� �� �� � � �x �x �� �� �n �n �� �� �d �d �� �� �Z �Z �� �� � � � � � � � � � � �l �l �� �� O� O� �x �x _& _& �� �� � � �� �� �: �: �� �� |8 |8 �� �� �� �� �� �� �� �� � � � � �� �� �� �� '� '� �� �� �� �� �� �� �l �l &� &� �$ �$ �� �� �� �� �& �& � � }� }� �b �b ~j ~j �� �� H H � � �X �X �� �� �� �� � � �� �� �� �� Ā Ā �� �� �` �` �\ �\ �� �� � � �@ �@ �� �� �8 �8 s� s� t t t| t| �� �� ~� ~� t t � � �X �X �� �� x� x� rD rD �| �| |( |( �� �� �� �� �f �f �L �L �� �� � � �� �� I` I` H� H� H� H� � � �� �� �p �p |
|
�t �t � � s. s. s� s� �� �� Π Π �F �F �� �� �� �� �� �� D D }� }� }* }* vX vX z z � � �� �� d� d� �2 �2 �t �t � � �4 �4 \z \z Ԝ Ԝ �� �� �^ �^ � � � � t t � � �x �x �� �� � � P( P( i" i" mF mF m� m� n& n& o� o� i� i� j j l� l� lb lb j� j� `� `� o� o� _� _� kv kv k� k� n� n� h� h� h8 h8 g� g� ` ` b� b� c� c� cB cB j� j� a� a� b\ b\ d( d( gP gP f� f� e e ez ez o o av av `� `� fd fd d� d� e� e� p� p� pb pb �
�
3< 3< r@ r@ ʾ ʾ � � r� r� �: �: �� �� p� p� �� �� ˲ ˲ �T �T I� I� JV JV J� J� K\ K\ K� K� LP LP L� L� MD MD M� M� NL NL N� N� O@ O@ P< P< O� O� P� P� �N �N �� �� � � �4 �4 �� �� � � l l � � � � *� *� #� #� (t (t &< &< . . (� (� )X )X )� )� ( ( *< *< � � &� &� ' ' $` $` $� $� � � ! ! � � %@ %@ %� %� "x "x !� !� #t #t "� "� !� !� '� '� + + � � ux ux � � �L �L �� �� �� �� َ َ �( �( �� �� �� �� � � �p �p � � � � � � �� �� �� �� � � N N � � 2 2 � � ~ ~ � �
R
R
�
� � � N N � �
P
P \ \
�
� D D � � & & � � l l � � \ \ � � L L � � 6 6 � � z z � � X X � � D D � � < < � � z z � � R R � � 2 2 � � � � � � j j �R �R �� �� �� �� �l �l �� �� � � �� �� �t �t � � �4 �4 ^D ^D �n �n �$ �$ �� �� �~ �~ � � �P �P ]� ]� �" �" �� �� ^� ^� �� �� \� \� � � �D �D |� |� z� z� �� �� �* �* xJ xJ � � РР/ / �� �� �* �* F F � � . . /� /� /~ /~ \ \ [� [� [ [ $ $ �
�
�� s" s" kn kn k� k� l� l� lX lX m� m� n� n� m> m> n" n" �� �� �� �� ,
,
�� �� �� �� g g +� +� �D �D �� �� iL iL �V �V h� h� �� �� hf hf �t �t g� g� �
�
g� g� �" �" f� f� �� �� f2 f2 �4 �4 e� e� �� �� eB eB �� �� dP dP �H �H d� d� �\ �\ c� c� �� �� cl cl �t �t b� b� �
�
b� b� � � a� a� �� �� b b �4 �4 `� `� �� �� a( a( �� �� `B `B �T �T _� _� �� �� _j _j � � ^� ^� �~ �~ _ _ � � ^* ^* �: �: ]� ]� �� �� ]J ]J �\ �\ \� \� �� �� \p \p �~ �~ \ \ � � [� [� � � [* [* �8 �8 Z� Z� �� �� ZJ ZJ �V �V Y� Y� �� �� Yh Yh �r �r X� X� � � X� X� � � X X � � W� W� � � W4 W4 �F �F V� V� �� �� VV VV �V �V U� U� �� �� Ub Ub �r �r T� T� �� �� Tv Tv �z �z S� S� � � S� S� � � S$ S$ �. �. R� R� �� �� RD RD �X �X Q� Q� �v �v P� P� � � P� P� � � P P � � O� O� � � O$ O$ �( �( N� N� � � N8 N8 �> �> M� M� �� �� MH MH �V �V L� L� �� �� Lj Lj � � C� C� �� �� Qp Qp F� F� �� �� �v �v K� K� � � K� K� � � K K � � J� J� � � I� I� ޠ ޠ I" I" �, �, H� H� ݶ ݶ H8 H8 ܼ ܼ G> G> �F �F F� F� �� �� FR FR �^ �^ E� E� �� �� Eh Eh �r �r D� D� � � Dz Dz �~ �~ D D C C �, �, B� B� B8 B8 �N �N A� A� �� �� Af Af �p �p @� @� � � @~ @~ Ռ Ռ @ @ � � ?� ?� Ԡ Ԡ ?" ?" �0 �0 >� >� �B �B =� =� Ӻ Ӻ >< >< �� �� =V =V �b �b <� <� �� �� <v <v т т < < � � ;� ;� Ш Ш ;* ;* �@ �@ :� :� �� �� :D :D �N �N 9� 9� �` �` 8� 8� �� �� 8r 8r �t �t 7� 7� � � 7� 7� ̚ ̚ 7 7 �. �. 6� 6� ˾ ˾ 6@ 6@ �T �T 5� 5� �� �� 5` 5` �r �r 4� 4� � � 4� 4� Ɉ Ɉ 4
4
� � 3� 3� Ȩ Ȩ 3* 3* �2 �2 2� 2� �� �� 2H 2H �N �N 1� 1� �� �� 1f 1f �r �r 0� 0� � � 0~ 0~ ň ň 0
0
� � /� /� Ĝ Ĝ / / �. �. .� .� ü ü .> .> �@ �@ -� -� ¼ ¼ -> -> �B �B ,� ,� �� �� ,N ,N �Z �Z +� +� �� �� +j +j �x �x *� *� � � *� *� �� �� * * �, �, )� )� �� �� )> )> �L �L (� (� �� �� (\ (\ �j �j '� '� �0 �0
�
� �z �z &� &� �� �� 'n 'n �� �� &� &� �� �� & & � � %� %� �� �� %( %( �: �: $� $� �� �� $L $L �P �P #� #� �� �� #Z #Z �Z �Z "� "� �� �� "` "` �f �f !� !� �� �� !x !x �� �� ! ! � � � � �� �� �" �" � � �� �� * * �, �, � � �� �� 6 6 �@ �@ � � �� �� R R �d �d � � �� �� z z �� �� � � � � �� �� ( ( �4 �4 � � �� �� B B �J �J � � �� �� N N �H �H � � �� �� N N �V �V � � �� �� ` ` �^ �^ � � �� �� h h �p �p � � �� �� x x �� �� � � � � �� �� � � � � �� �� �2 �2 � � �� �� H H �P �P � � �� �� \ \ �� �� r r �d �d � � �z �z � � � � � � �� �� �" �" � � �� �� 0 0 �� ��
>
> �R �R � � �f �f � � �� �� v v �� �� �� ��
� �
�
� � � � � ߜ ߜ J J �� �� F F �R �R � � �� �� * * �8 �8 � � �� �� b b �p �p � � �� �� z z �� ��
� � � � �� �� . . �< �< � � �� �� R R �X �X � � �� �� n n �~ �~ � � � � �� �� �� �� �r �r �� �� 4 4 �@ �@ � � �� �� V V �^ �^ �� �� �z �z �� �� � � �� �� �* �* �� �� �� �� �: �: �N �N �� �� �� �� � � �� �� �h �h �x �x �� �� � � �� �� �� �� � � �. �. �� �� �� �� �F �F �T �T �� �� �� �� �b �b �l �l �� �� �� �� �t �t �� �� � � �� �� � � � � �� �� �� �� �v �v � � �� �� �� �� �, �, �� �� �F �F �H �H �� �� �� �� �T �T �d �d �� �� � � � � �� �� � � �* �* � � �� �� �< �< �@ �@ �� �� �� �� �X �X �l �l �� �� �0 �0 � � � � � � �� �� �B �B �V �V �� �� �� �� �n �n �x �x � � � � � � �� �� � � � � � � �� �� �. �. �8 �8 � � � � �H �H T T �� �� ~� ~� �^ �^ ~b ~b �� �� }� }� �v �v }t }t � � } } � � |� |� � � |$ |$ �: �: {� {� �� �� {< {< �R �R z� z� �� �� zF zF �\ �\ y� y� �� �� yV yV �l �l x� x� � � xr xr � � x x � � w� w� � � w w �6 �6 v� v� � � v: v: �P �P u� u� �� �� uN uN �d �d t� t� � � tp tp ކ ކ s� s� � � s s �, �, s� s� ݜ ݜ r� r� �� �� q� q� �� �� r> r> �T �T q` q` �v �v p� p� � � p� p� ږ ږ p p � � o� o� ٖ ٖ o o �( �( n� n� ز ز n( n( �> �> m� m� �� �� mD mD �Z �Z l� l� �� �� ll ll ւ ւ k� k� � � k� k� ՠ ՠ j� j� Ը Ը j0 j0 �F �F i� i� �� �� iP iP �f �f h� h� �� �� hb hb �x �x g� g� � � g� g� Ѥ Ѥ g g �2 �2 f� f� �� �� fB fB �X �X e� e� �� �� ef ef �| �| d� d� �
�
Yd Yd � � d� d� �, �, d d c c �� �� c� c� �D �D b� b� �V �V b0 b0 �� �� a� a� �j �j `� `� ʐ ʐ W* W* �� �� aP aP � � `x `x �$ �$ _� _� �F �F _, _, �� �� ^� ^� �^ �^ ^B ^B �� �� ]d ]d � � ]� ]� �~ �~ \� \� ƚ ƚ \ \ Ű Ű [� [� �B �B [& [& �� �� Z� Z� �d �d Z@ Z@ �� �� Y� Y� À À X� X� X~ X~ �* �* X X �� �� W� W� �H �H VD VD �� �� V� V� �d �d U� U� �� �� Ul Ul � � T� T� �� �� T T �� �� `
`
ɶ ɶ T� T� �4 �4 S� S� �Z �Z S> S> �� �� R� R� �~ �~ R` R` � � Q� Q� �� �� Qz Qz �& �& Q Q �� �� P� P� �> �> O O �� �� ND ND �� �� N� N� �X �X M� M� �� �� Ml Ml � � L� L� �� �� L� L� �6 �6 L L �� �� K� K� �T �T K< K< �� �� J� J� �v �v I� I� �� �� Ir Ir � � H� H� �� �� H� H� �B �B H, H, �� �� G� G� �^ �^ GF GF �� �� Fb Fb � � E� E� �� �� E� E� �2 �2 D� D� �V �V E E �� �� D, D, �� �� C� C� �` �` C> C> �� �� B� B� �v �v BV BV � � A� A� �� �� Ad Ad � � @� @� �� �� @r @r � � ?� ?� �� �� ?� ?� �2 �2 ?
?
�� �� >� >� �0 �0 > > �� �� =� =� �D �D =" =" �� �� <� <� �T �T <2 <2 �� �� ;� ;� �d �d ;B ;B �� �� :� :� �t �t :R :R �� �� 9� 9� �� �� 9 9 �� �� 9p 9p � � 8� 8� �: �: 8 8 �� �� 7* 7* �� �� 6� 6� �h �h 5� 5� �r �r 6@ 6@ �� �� 5P 5P �� �� 4� 4� �� �� 4b 4b � � 3� 3� �� �� 3� 3� �0 �0 2� 2� �8 �8 2 2 �� �� 3 3 �� �� 1� 1� �X �X 1@ 1@ �� �� 0n 0n � � 0� 0� �� �� /� /� �� �� .� .� �� �� .^ .^ �
�
-� -� �� �� -b -b � � ,� ,� �� �� ,v ,v �" �" �: �: G� G� \t \t � � �& �& � � JP JP �� �� �� �� 9T 9T 7� 7� �L �L �6 �6 �� �� �� �� � � O� O� �V �V P P �� �� /z /z �& �& �� �� ^ ^ k k �, �, �� �� � � __IMPORT_DESCRIPTOR_ntdll __NULL_IMPORT_DESCRIPTOR ntdll_NULL_THUNK_DATA _DbgUiConnectToDbg@0 __imp__DbgUiConnectToDbg@0 _DbgUiWaitStateChange@8 __imp__DbgUiWaitStateChange@8 _DbgUiContinue@8 __imp__DbgUiContinue@8 _DbgUiStopDebugging@4 __imp__DbgUiStopDebugging@4 _DbgUiDebugActiveProcess@4 __imp__DbgUiDebugActiveProcess@4 _DbgUiGetThreadDebugObject@0 __imp__DbgUiGetThreadDebugObject@0 _DbgUiSetThreadDebugObject@4 __imp__DbgUiSetThreadDebugObject@4 _DbgUiRemoteBreakin@4 __imp__DbgUiRemoteBreakin@4 _DbgUiIssueRemoteBreakin@4 __imp__DbgUiIssueRemoteBreakin@4 _DbgUiConvertStateChangeStructure@8 __imp__DbgUiConvertStateChangeStructure@8 _DbgUiConvertStateChangeStructureEx@8 __imp__DbgUiConvertStateChangeStructureEx@8 _DbgBreakPoint@0 __imp__DbgBreakPoint@0 _DbgPrint __imp__DbgPrint _DbgPrintEx __imp__DbgPrintEx __imp__vDbgPrintEx@16 _vDbgPrintEx@16 __imp__vDbgPrintExWithPrefix@20 _vDbgPrintExWithPrefix@20 _DbgPrintReturnControlC __imp__DbgPrintReturnControlC _DbgPrompt@12 __imp__DbgPrompt@12 _DbgUserBreakPoint@0 __imp__DbgUserBreakPoint@0 _DbgSetDebugFilterState@12 __imp__DbgSetDebugFilterState@12 _DbgQueryDebugFilterState@8 __imp__DbgQueryDebugFilterState@8 _LdrAccessResource@16 __imp__LdrAccessResource@16 _LdrEnumerateLoadedModules@12 __imp__LdrEnumerateLoadedModules@12 _LdrEnumResources@20 __imp__LdrEnumResources@20 _LdrFastFailInLoaderCallout@0 __imp__LdrFastFailInLoaderCallout@0 _LdrFindEntryForAddress@8 __imp__LdrFindEntryForAddress@8 _LdrFindResource_U@16 __imp__LdrFindResource_U@16 _LdrFindResourceEx_U@20 __imp__LdrFindResourceEx_U@20 _LdrFindResourceDirectory_U@16 __imp__LdrFindResourceDirectory_U@16 _LdrGetDllHandle@16 __imp__LdrGetDllHandle@16 _LdrGetDllHandleByMapping@8 __imp__LdrGetDllHandleByMapping@8 _LdrGetDllHandleByName@12 __imp__LdrGetDllHandleByName@12 _LdrGetDllHandleEx@20 __imp__LdrGetDllHandleEx@20 _LdrAddRefDll@8 __imp__LdrAddRefDll@8 _LdrGetDllFullName@8 __imp__LdrGetDllFullName@8 _LdrGetProcedureAddress@16 __imp__LdrGetProcedureAddress@16 _LdrGetProcedureAddressEx@20 __imp__LdrGetProcedureAddressEx@20 _LdrGetProcedureAddressForCaller@24 __imp__LdrGetProcedureAddressForCaller@24 _LdrpChildNtdll __imp__LdrpChildNtdll _LdrParentInterlockedPopEntrySList __imp__LdrParentInterlockedPopEntrySList _LdrParentRtlInitializeNtUserPfn __imp__LdrParentRtlInitializeNtUserPfn _LdrParentRtlResetNtUserPfn __imp__LdrParentRtlResetNtUserPfn _LdrParentRtlRetrieveNtUserPfn __imp__LdrParentRtlRetrieveNtUserPfn _LdrLoadDll@16 __imp__LdrLoadDll@16 _LdrSetDllManifestProber@12 __imp__LdrSetDllManifestProber@12 _LdrLockLoaderLock@12 __imp__LdrLockLoaderLock@12 _LdrSetAppCompatDllRedirectionCallback@12 __imp__LdrSetAppCompatDllRedirectionCallback@12 _LdrShutdownProcess@0 __imp__LdrShutdownProcess@0 _LdrShutdownThread@0 __imp__LdrShutdownThread@0 _LdrUnloadDll@4 __imp__LdrUnloadDll@4 _LdrUnlockLoaderLock@8 __imp__LdrUnlockLoaderLock@8 _LdrDisableThreadCalloutsForDll@4 __imp__LdrDisableThreadCalloutsForDll@4 _LdrInitShimEngineDynamic@8 __imp__LdrInitShimEngineDynamic@8 _LdrSetDefaultDllDirectories@4 __imp__LdrSetDefaultDllDirectories@4 _LdrAddDllDirectory@8 __imp__LdrAddDllDirectory@8 _LdrRemoveDllDirectory@4 __imp__LdrRemoveDllDirectory@4 _LdrSetDllDirectory@4 __imp__LdrSetDllDirectory@4 _LdrGetDllDirectory@4 __imp__LdrGetDllDirectory@4 _LdrGetDllPath@16 __imp__LdrGetDllPath@16 _LdrIsModuleSxsRedirected@4 __imp__LdrIsModuleSxsRedirected@4 _LdrResolveDelayLoadedAPI@24 __imp__LdrResolveDelayLoadedAPI@24 _LdrResolveDelayLoadsFromDll@12 __imp__LdrResolveDelayLoadsFromDll@12 _LdrQueryOptionalDelayLoadedAPI@16 __imp__LdrQueryOptionalDelayLoadedAPI@16 _LdrUpdatePackageSearchPath@4 __imp__LdrUpdatePackageSearchPath@4 _RtlGetExePath@8 __imp__RtlGetExePath@8 _RtlGetSearchPath@4 __imp__RtlGetSearchPath@4 _RtlReleasePath@4 __imp__RtlReleasePath@4 _RtlSetSearchPathMode@4 __imp__RtlSetSearchPathMode@4 _NlsMbCodePageTag __imp__NlsMbCodePageTag _NlsMbOemCodePageTag __imp__NlsMbOemCodePageTag _NlsAnsiCodePage __imp__NlsAnsiCodePage _PfxFindPrefix@8 __imp__PfxFindPrefix@8 _PfxInitialize@4 __imp__PfxInitialize@4 _PfxInsertPrefix@12 __imp__PfxInsertPrefix@12 _PfxRemovePrefix@8 __imp__PfxRemovePrefix@8 _RtlAbortRXact@4 __imp__RtlAbortRXact@4 _RtlAbsoluteToSelfRelativeSD@12 __imp__RtlAbsoluteToSelfRelativeSD@12 _RtlAcquirePebLock@0 __imp__RtlAcquirePebLock@0 _RtlAcquirePrivilege@16 __imp__RtlAcquirePrivilege@16 _RtlAcquireResourceExclusive@8 __imp__RtlAcquireResourceExclusive@8 _RtlAcquireResourceShared@8 __imp__RtlAcquireResourceShared@8 @RtlActivateActivationContextUnsafeFast@8 __imp_@RtlActivateActivationContextUnsafeFast@8 _RtlAddAccessAllowedAce@16 __imp__RtlAddAccessAllowedAce@16 _RtlAddAccessAllowedAceEx@20 __imp__RtlAddAccessAllowedAceEx@20 _RtlAddAccessAllowedObjectAce@28 __imp__RtlAddAccessAllowedObjectAce@28 _RtlAddAccessDeniedAce@16 __imp__RtlAddAccessDeniedAce@16 _RtlAddAccessDeniedAceEx@20 __imp__RtlAddAccessDeniedAceEx@20 _RtlAddAccessDeniedObjectAce@28 __imp__RtlAddAccessDeniedObjectAce@28 _RtlAddAccessFilterAce@32 __imp__RtlAddAccessFilterAce@32 _RtlAddAce@20 __imp__RtlAddAce@20 _RtlAddActionToRXact@24 __imp__RtlAddActionToRXact@24 _RtlAddAtomToAtomTable@12 __imp__RtlAddAtomToAtomTable@12 _RtlAddAttributeActionToRXact@32 __imp__RtlAddAttributeActionToRXact@32 _RtlAddAuditAccessAce@24 __imp__RtlAddAuditAccessAce@24 _RtlAddAuditAccessAceEx@28 __imp__RtlAddAuditAccessAceEx@28 _RtlAddAuditAccessObjectAce@36 __imp__RtlAddAuditAccessObjectAce@36 _RtlAddMandatoryAce@24 __imp__RtlAddMandatoryAce@24 _RtlAddProcessTrustLabelAce@24 __imp__RtlAddProcessTrustLabelAce@24 _RtlAddResourceAttributeAce@28 __imp__RtlAddResourceAttributeAce@28 _RtlAddScopedPolicyIDAce@20 __imp__RtlAddScopedPolicyIDAce@20 _RtlAddressInSectionTable@12 __imp__RtlAddressInSectionTable@12 _RtlAdjustPrivilege@16 __imp__RtlAdjustPrivilege@16 _RtlAllocateActivationContextStack@4 __imp__RtlAllocateActivationContextStack@4 _RtlAllocateAndInitializeSid@44 __imp__RtlAllocateAndInitializeSid@44 _RtlAllocateAndInitializeSidEx@16 __imp__RtlAllocateAndInitializeSidEx@16 _RtlAllocateHandle@8 __imp__RtlAllocateHandle@8 _RtlAllocateHeap@12 __imp__RtlAllocateHeap@12 _RtlAnsiCharToUnicodeChar@4 __imp__RtlAnsiCharToUnicodeChar@4 _RtlAnsiStringToUnicodeSize@4 __imp__RtlAnsiStringToUnicodeSize@4 _RtlAnsiStringToUnicodeString@12 __imp__RtlAnsiStringToUnicodeString@12 _RtlAppendAsciizToString@8 __imp__RtlAppendAsciizToString@8 _RtlAppendStringToString@8 __imp__RtlAppendStringToString@8 _RtlAppendUnicodeToString@8 __imp__RtlAppendUnicodeToString@8 _RtlAppendUnicodeStringToString@8 __imp__RtlAppendUnicodeStringToString@8 _RtlApplicationVerifierStop@40 __imp__RtlApplicationVerifierStop@40 _RtlApplyRXact@4 __imp__RtlApplyRXact@4 _RtlApplyRXactNoFlush@4 __imp__RtlApplyRXactNoFlush@4 _RtlAreAllAccessesGranted@8 __imp__RtlAreAllAccessesGranted@8 _RtlAreAnyAccessesGranted@8 __imp__RtlAreAnyAccessesGranted@8 _RtlAreBitsClear@12 __imp__RtlAreBitsClear@12 _RtlAreBitsSet@12 __imp__RtlAreBitsSet@12 _RtlAssert@16 __imp__RtlAssert@16 _RtlAvlInsertNodeEx@16 __imp__RtlAvlInsertNodeEx@16 _RtlAvlRemoveNode@8 __imp__RtlAvlRemoveNode@8 _RtlCapabilityCheck@12 __imp__RtlCapabilityCheck@12 _RtlCapabilityCheckForSingleSessionSku@12 __imp__RtlCapabilityCheckForSingleSessionSku@12 _RtlCharToInteger@12 __imp__RtlCharToInteger@12 _RtlCheckForOrphanedCriticalSections@4 __imp__RtlCheckForOrphanedCriticalSections@4 _RtlCheckPortableOperatingSystem@4 __imp__RtlCheckPortableOperatingSystem@4 _RtlCheckRegistryKey@8 __imp__RtlCheckRegistryKey@8 _RtlCheckTokenCapability@12 __imp__RtlCheckTokenCapability@12 _RtlCheckTokenMembership@12 __imp__RtlCheckTokenMembership@12 _RtlCheckTokenMembershipEx@16 __imp__RtlCheckTokenMembershipEx@16 _RtlClearAllBits@4 __imp__RtlClearAllBits@4 _RtlClearBit@8 __imp__RtlClearBit@8 _RtlClearBits@12 __imp__RtlClearBits@12 _RtlClearThreadWorkOnBehalfTicket@0 __imp__RtlClearThreadWorkOnBehalfTicket@0 _RtlCompactHeap@8 __imp__RtlCompactHeap@8 _RtlCompareAltitudes@8 __imp__RtlCompareAltitudes@8 _RtlCompareMemory@12 __imp__RtlCompareMemory@12 _RtlCompareMemoryUlong@12 __imp__RtlCompareMemoryUlong@12 _RtlCompareString@12 __imp__RtlCompareString@12 _RtlCompareUnicodeString@12 __imp__RtlCompareUnicodeString@12 _RtlCompareUnicodeStrings@20 __imp__RtlCompareUnicodeStrings@20 _RtlCompressBuffer@32 __imp__RtlCompressBuffer@32 _RtlComputeCrc32@12 __imp__RtlComputeCrc32@12 _RtlComputeImportTableHash@12 __imp__RtlComputeImportTableHash@12 _RtlConstructCrossVmEventPath@12 __imp__RtlConstructCrossVmEventPath@12 _RtlConstructCrossVmMutexPath@12 __imp__RtlConstructCrossVmMutexPath@12 _RtlContractHashTable@4 __imp__RtlContractHashTable@4 _RtlConvertExclusiveToShared@4 __imp__RtlConvertExclusiveToShared@4 _RtlConvertLongToLargeInteger@4 __imp__RtlConvertLongToLargeInteger@4 _RtlConvertUlongToLargeInteger@4 __imp__RtlConvertUlongToLargeInteger@4 _RtlConvertDeviceFamilyInfoToString@16 __imp__RtlConvertDeviceFamilyInfoToString@16 _RtlConvertSharedToExclusive@4 __imp__RtlConvertSharedToExclusive@4 _RtlConvertSidToUnicodeString@12 __imp__RtlConvertSidToUnicodeString@12 _RtlConvertToAutoInheritSecurityObject@24 __imp__RtlConvertToAutoInheritSecurityObject@24 _RtlCopyBitMap@12 __imp__RtlCopyBitMap@12 _RtlCopyLuid@8 __imp__RtlCopyLuid@8 _RtlCopyLuidAndAttributesArray@12 __imp__RtlCopyLuidAndAttributesArray@12 _RtlCopyMappedMemory@12 __imp__RtlCopyMappedMemory@12 _RtlCopySecurityDescriptor@8 __imp__RtlCopySecurityDescriptor@8 _RtlCopySid@12 __imp__RtlCopySid@12 _RtlCopySidAndAttributesArray@28 __imp__RtlCopySidAndAttributesArray@28 _RtlCopyString@8 __imp__RtlCopyString@8 _RtlCopyUnicodeString@8 __imp__RtlCopyUnicodeString@8 _RtlCrc32@12 __imp__RtlCrc32@12 _RtlCrc64@16 __imp__RtlCrc64@16 _RtlCreateHashTable@12 __imp__RtlCreateHashTable@12 _RtlCreateHashTableEx@16 __imp__RtlCreateHashTableEx@16 _RtlCreateAcl@12 __imp__RtlCreateAcl@12 _RtlCreateAndSetSD@20 __imp__RtlCreateAndSetSD@20 _RtlCreateAtomTable@8 __imp__RtlCreateAtomTable@8 _RtlCreateEnvironment@8 __imp__RtlCreateEnvironment@8 _RtlCreateEnvironmentEx@12 __imp__RtlCreateEnvironmentEx@12 _RtlCreateHeap@24 __imp__RtlCreateHeap@24 _RtlCreateProcessParameters@40 __imp__RtlCreateProcessParameters@40 _RtlCreateProcessParametersEx@44 __imp__RtlCreateProcessParametersEx@44 _RtlCreateProcessParametersWithTemplate@12 __imp__RtlCreateProcessParametersWithTemplate@12 _RtlCreateProcessReflection@24 __imp__RtlCreateProcessReflection@24 _RtlCreateRegistryKey@8 __imp__RtlCreateRegistryKey@8 _RtlCreateSecurityDescriptor@8 __imp__RtlCreateSecurityDescriptor@8 _RtlCreateServiceSid@12 __imp__RtlCreateServiceSid@12 _RtlCreateVirtualAccountSid@16 __imp__RtlCreateVirtualAccountSid@16 _RtlCreateUnicodeString@8 __imp__RtlCreateUnicodeString@8 _RtlCreateUnicodeStringFromAsciiz@8 __imp__RtlCreateUnicodeStringFromAsciiz@8 _RtlCreateUserProcess@40 __imp__RtlCreateUserProcess@40 _RtlCreateUserProcessEx@20 __imp__RtlCreateUserProcessEx@20 _RtlCloneUserProcess@20 __imp__RtlCloneUserProcess@20 _RtlCmDecodeMemIoResource@8 __imp__RtlCmDecodeMemIoResource@8 _RtlCmEncodeMemIoResource@24 __imp__RtlCmEncodeMemIoResource@24 _RtlCreateUserSecurityObject@28 __imp__RtlCreateUserSecurityObject@28 _RtlCreateUserThread@40 __imp__RtlCreateUserThread@40 _RtlExitUserProcess@4 __imp__RtlExitUserProcess@4 _RtlExitUserThread@4 __imp__RtlExitUserThread@4 _RtlFindExportedRoutineByName@8 __imp__RtlFindExportedRoutineByName@8 _RtlFlsAlloc@8 __imp__RtlFlsAlloc@8 _RtlFlsFree@4 __imp__RtlFlsFree@4 _RtlFlsGetValue@8 __imp__RtlFlsGetValue@8 _RtlFlsSetValue@8 __imp__RtlFlsSetValue@8 _RtlProcessFlsData@8 __imp__RtlProcessFlsData@8 @RtlDeactivateActivationContextUnsafeFast@4 __imp_@RtlDeactivateActivationContextUnsafeFast@4 _RtlDecompressBuffer@24 __imp__RtlDecompressBuffer@24 _RtlDecompressBufferEx@28 __imp__RtlDecompressBufferEx@28 _RtlDecompressFragment@32 __imp__RtlDecompressFragment@32 _RtlDefaultNpAcl@4 __imp__RtlDefaultNpAcl@4 _RtlDelete@4 __imp__RtlDelete@4 _RtlDeleteNoSplay@8 __imp__RtlDeleteNoSplay@8 _RtlDeleteAce@8 __imp__RtlDeleteAce@8 _RtlDeleteAtomFromAtomTable@8 __imp__RtlDeleteAtomFromAtomTable@8 _RtlDeleteCriticalSection@4 __imp__RtlDeleteCriticalSection@4 _RtlDeleteElementGenericTable@8 __imp__RtlDeleteElementGenericTable@8 _RtlDeleteElementGenericTableAvl@8 __imp__RtlDeleteElementGenericTableAvl@8 _RtlDeleteElementGenericTableAvlEx@8 __imp__RtlDeleteElementGenericTableAvlEx@8 _RtlDeleteHashTable@4 __imp__RtlDeleteHashTable@4 _RtlDeleteRegistryValue@12 __imp__RtlDeleteRegistryValue@12 _RtlDeleteResource@4 __imp__RtlDeleteResource@4 _RtlDeleteSecurityObject@4 __imp__RtlDeleteSecurityObject@4 _RtlDeNormalizeProcessParams@4 __imp__RtlDeNormalizeProcessParams@4 _RtlDeriveCapabilitySidsFromName@12 __imp__RtlDeriveCapabilitySidsFromName@12 _RtlDestroyAtomTable@4 __imp__RtlDestroyAtomTable@4 _RtlDestroyEnvironment@4 __imp__RtlDestroyEnvironment@4 _RtlDestroyHandleTable@4 __imp__RtlDestroyHandleTable@4 _RtlDestroyHeap@4 __imp__RtlDestroyHeap@4 _RtlDestroyProcessParameters@4 __imp__RtlDestroyProcessParameters@4 _RtlDetermineDosPathNameType_U@4 __imp__RtlDetermineDosPathNameType_U@4 _RtlDllShutdownInProgress@0 __imp__RtlDllShutdownInProgress@0 _RtlDoesFileExists_U@4 __imp__RtlDoesFileExists_U@4 _RtlDosPathNameToNtPathName_U_WithStatus@16 __imp__RtlDosPathNameToNtPathName_U_WithStatus@16 _RtlDosLongPathNameToNtPathName_U_WithStatus@16 __imp__RtlDosLongPathNameToNtPathName_U_WithStatus@16 _RtlDosPathNameToRelativeNtPathName_U_WithStatus@16 __imp__RtlDosPathNameToRelativeNtPathName_U_WithStatus@16 _RtlDosLongPathNameToRelativeNtPathName_U_WithStatus@16 __imp__RtlDosLongPathNameToRelativeNtPathName_U_WithStatus@16 _RtlDosPathNameToNtPathName_U@16 __imp__RtlDosPathNameToNtPathName_U@16 _RtlDosPathNameToRelativeNtPathName_U@16 __imp__RtlDosPathNameToRelativeNtPathName_U@16 _RtlNtPathNameToDosPathName@16 __imp__RtlNtPathNameToDosPathName@16 _RtlDosSearchPath_U@24 __imp__RtlDosSearchPath_U@24 _RtlDosSearchPath_Ustr@36 __imp__RtlDosSearchPath_Ustr@36 _RtlDowncaseUnicodeChar@4 __imp__RtlDowncaseUnicodeChar@4 _RtlDowncaseUnicodeString@12 __imp__RtlDowncaseUnicodeString@12 _RtlDumpResource@4 __imp__RtlDumpResource@4 _RtlDuplicateUnicodeString@12 __imp__RtlDuplicateUnicodeString@12 _RtlEmptyAtomTable@8 __imp__RtlEmptyAtomTable@8 _RtlEncodePointer@4 __imp__RtlEncodePointer@4 _RtlDecodePointer@4 __imp__RtlDecodePointer@4 _RtlEncodeSystemPointer@4 __imp__RtlEncodeSystemPointer@4 _RtlDecodeSystemPointer@4 __imp__RtlDecodeSystemPointer@4 _RtlEncodeRemotePointer@12 __imp__RtlEncodeRemotePointer@12 _RtlDecodeRemotePointer@12 __imp__RtlDecodeRemotePointer@12 _RtlEndEnumerationHashTable@8 __imp__RtlEndEnumerationHashTable@8 _RtlEndStrongEnumerationHashTable@8 __imp__RtlEndStrongEnumerationHashTable@8 _RtlEndWeakEnumerationHashTable@8 __imp__RtlEndWeakEnumerationHashTable@8 _RtlEnableEarlyCriticalSectionEventCreation@0 __imp__RtlEnableEarlyCriticalSectionEventCreation@0 _RtlEnableThreadProfiling@20 __imp__RtlEnableThreadProfiling@20 _RtlDisableThreadProfiling@4 __imp__RtlDisableThreadProfiling@4 _RtlQueryThreadProfiling@8 __imp__RtlQueryThreadProfiling@8 _RtlReadThreadProfilingData@12 __imp__RtlReadThreadProfilingData@12 _RtlEnlargedIntegerMultiply@8 __imp__RtlEnlargedIntegerMultiply@8 _RtlEnlargedUnsignedMultiply@8 __imp__RtlEnlargedUnsignedMultiply@8 _RtlEnterCriticalSection@4 __imp__RtlEnterCriticalSection@4 _RtlExtendCorrelationVector@4 __imp__RtlExtendCorrelationVector@4 _RtlIncrementCorrelationVector@4 __imp__RtlIncrementCorrelationVector@4 _RtlInitializeCorrelationVector@12 __imp__RtlInitializeCorrelationVector@12 _RtlIsCriticalSectionLocked@4 __imp__RtlIsCriticalSectionLocked@4 _RtlIsCriticalSectionLockedByThread@4 __imp__RtlIsCriticalSectionLockedByThread@4 _RtlGetCriticalSectionRecursionCount@4 __imp__RtlGetCriticalSectionRecursionCount@4 _RtlIsCloudFilesPlaceholder@8 __imp__RtlIsCloudFilesPlaceholder@8 _RtlIsCurrentProcess@4 __imp__RtlIsCurrentProcess@4 _RtlIsCurrentThread@4 __imp__RtlIsCurrentThread@4 _RtlIsElevatedRid@4 __imp__RtlIsElevatedRid@4 _RtlIsMultiSessionSku@0 __imp__RtlIsMultiSessionSku@0 _RtlIsStateSeparationEnabled@0 __imp__RtlIsStateSeparationEnabled@0 _RtlGetPersistedStateLocation@28 __imp__RtlGetPersistedStateLocation@28 _RtlIsNonEmptyDirectoryReparsePointAllowed@4 __imp__RtlIsNonEmptyDirectoryReparsePointAllowed@4 _RtlIsPartialPlaceholder@8 __imp__RtlIsPartialPlaceholder@8 _RtlIsPartialPlaceholderFileHandle@8 __imp__RtlIsPartialPlaceholderFileHandle@8 _RtlIsPartialPlaceholderFileInfo@12 __imp__RtlIsPartialPlaceholderFileInfo@12 _RtlIsMultiUsersInSessionSku@0 __imp__RtlIsMultiUsersInSessionSku@0 _RtlIsZeroMemory@8 __imp__RtlIsZeroMemory@8 _RtlCheckSandboxedToken@8 __imp__RtlCheckSandboxedToken@8 _RtlGetSessionProperties@8 __imp__RtlGetSessionProperties@8 _RtlEnumerateGenericTable@8 __imp__RtlEnumerateGenericTable@8 _RtlEnumerateGenericTableAvl@8 __imp__RtlEnumerateGenericTableAvl@8 _RtlEnumerateGenericTableLikeADirectory@28 __imp__RtlEnumerateGenericTableLikeADirectory@28 _RtlEnumerateGenericTableWithoutSplaying@8 __imp__RtlEnumerateGenericTableWithoutSplaying@8 _RtlEnumerateGenericTableWithoutSplayingAvl@8 __imp__RtlEnumerateGenericTableWithoutSplayingAvl@8 _RtlEnumerateEntryHashTable@8 __imp__RtlEnumerateEntryHashTable@8 _RtlEnumProcessHeaps@8 __imp__RtlEnumProcessHeaps@8 _RtlEqualComputerName@8 __imp__RtlEqualComputerName@8 _RtlEqualDomainName@8 __imp__RtlEqualDomainName@8 _RtlCanonicalizeDomainName@12 __imp__RtlCanonicalizeDomainName@12 _RtlFindUnicodeSubstring@12 __imp__RtlFindUnicodeSubstring@12 _RtlReplaceSystemDirectoryInPath@16 __imp__RtlReplaceSystemDirectoryInPath@16 _RtlEqualLuid@8 __imp__RtlEqualLuid@8 _RtlEqualPrefixSid@8 __imp__RtlEqualPrefixSid@8 _RtlEqualSid@8 __imp__RtlEqualSid@8 _RtlEqualString@12 __imp__RtlEqualString@12 _RtlEqualUnicodeString@12 __imp__RtlEqualUnicodeString@12 _RtlEraseUnicodeString@4 __imp__RtlEraseUnicodeString@4 _RtlExpandHashTable@4 __imp__RtlExpandHashTable@4 _RtlExtendedIntegerMultiply@12 __imp__RtlExtendedIntegerMultiply@12 _RtlExtendedLargeIntegerDivide@16 __imp__RtlExtendedLargeIntegerDivide@16 _RtlExtendedMagicDivide@20 __imp__RtlExtendedMagicDivide@20 _RtlExpandEnvironmentStrings_U@16 __imp__RtlExpandEnvironmentStrings_U@16 _RtlExpandEnvironmentStrings@24 __imp__RtlExpandEnvironmentStrings@24 _RtlExtractBitMap@16 __imp__RtlExtractBitMap@16 _RtlFillMemory@12 __imp__RtlFillMemory@12 _RtlFillMemoryUlong@12 __imp__RtlFillMemoryUlong@12 _RtlFillMemoryUlonglong@16 __imp__RtlFillMemoryUlonglong@16 _RtlFindAceByType@12 __imp__RtlFindAceByType@12 _RtlFindCharInUnicodeString@16 __imp__RtlFindCharInUnicodeString@16 _RtlFindClearBits@12 __imp__RtlFindClearBits@12 _RtlFindClearBitsAndSet@12 __imp__RtlFindClearBitsAndSet@12 _RtlFindClearRuns@16 __imp__RtlFindClearRuns@16 _RtlFindClosestEncodableLength@12 __imp__RtlFindClosestEncodableLength@12 _RtlFindLongestRunClear@8 __imp__RtlFindLongestRunClear@8 _RtlFindLastBackwardRunClear@12 __imp__RtlFindLastBackwardRunClear@12 _RtlFindNextForwardRunClear@12 __imp__RtlFindNextForwardRunClear@12 _RtlFindMessage@20 __imp__RtlFindMessage@20 _RtlFindSetBits@12 __imp__RtlFindSetBits@12 _RtlFindSetBitsAndClear@12 __imp__RtlFindSetBitsAndClear@12 _RtlFirstFreeAce@8 __imp__RtlFirstFreeAce@8 _RtlFormatMessage@36 __imp__RtlFormatMessage@36 _RtlFormatMessageEx@40 __imp__RtlFormatMessageEx@40 _RtlFormatCurrentUserKeyPath@4 __imp__RtlFormatCurrentUserKeyPath@4 _RtlFreeActivationContextStack@4 __imp__RtlFreeActivationContextStack@4 _RtlFreeAnsiString@4 __imp__RtlFreeAnsiString@4 _RtlFreeHandle@8 __imp__RtlFreeHandle@8 _RtlFreeHeap@12 __imp__RtlFreeHeap@12 _RtlFreeOemString@4 __imp__RtlFreeOemString@4 _RtlFreeSid@4 __imp__RtlFreeSid@4 _RtlFreeUTF8String@4 __imp__RtlFreeUTF8String@4 _RtlFreeUnicodeString@4 __imp__RtlFreeUnicodeString@4 _RtlGenerate8dot3Name@16 __imp__RtlGenerate8dot3Name@16 _RtlGetAce@12 __imp__RtlGetAce@12 _RtlGetCompressionWorkSpaceSize@12 __imp__RtlGetCompressionWorkSpaceSize@12 _RtlGetControlSecurityDescriptor@12 __imp__RtlGetControlSecurityDescriptor@12 _RtlSetControlSecurityDescriptor@12 __imp__RtlSetControlSecurityDescriptor@12 _RtlSetEnvironmentStrings@8 __imp__RtlSetEnvironmentStrings@8 _RtlSetThreadPlaceholderCompatibilityMode@4 __imp__RtlSetThreadPlaceholderCompatibilityMode@4 _RtlSetProcessPlaceholderCompatibilityMode@4 __imp__RtlSetProcessPlaceholderCompatibilityMode@4 _RtlSetProxiedProcessId@4 __imp__RtlSetProxiedProcessId@4 _RtlSetPortableOperatingSystem@4 __imp__RtlSetPortableOperatingSystem@4 _RtlGetCurrentDirectory_U@8 __imp__RtlGetCurrentDirectory_U@8 _RtlGetCurrentProcessorNumber@0 __imp__RtlGetCurrentProcessorNumber@0 _RtlGetCurrentProcessorNumberEx@4 __imp__RtlGetCurrentProcessorNumberEx@4 _RtlGetCurrentServiceSessionId@0 __imp__RtlGetCurrentServiceSessionId@0 _RtlIsProcessorFeaturePresent@4 __imp__RtlIsProcessorFeaturePresent@4 _RtlSetUnhandledExceptionFilter@4 __imp__RtlSetUnhandledExceptionFilter@4 _RtlGetDaclSecurityDescriptor@16 __imp__RtlGetDaclSecurityDescriptor@16 _RtlGetElementGenericTable@8 __imp__RtlGetElementGenericTable@8 _RtlGetElementGenericTableAvl@8 __imp__RtlGetElementGenericTableAvl@8 _RtlGetFrame@0 __imp__RtlGetFrame@0 _RtlGetIntegerAtom@8 __imp__RtlGetIntegerAtom@8 _RtlGetNextEntryHashTable@8 __imp__RtlGetNextEntryHashTable@8 _RtlpQueryProcessDebugInformationRemote@4 __imp__RtlpQueryProcessDebugInformationRemote@4 _RtlGetNativeSystemInformation@16 __imp__RtlGetNativeSystemInformation@16 _RtlGetNtVersionNumbers@12 __imp__RtlGetNtVersionNumbers@12 _RtlGetUILanguageInfo@20 __imp__RtlGetUILanguageInfo@20 _RtlGUIDFromString@8 __imp__RtlGUIDFromString@8 _RtlpCleanupRegistryKeys@0 __imp__RtlpCleanupRegistryKeys@0 _RtlGetDeviceFamilyInfoEnum@12 __imp__RtlGetDeviceFamilyInfoEnum@12 _RtlGetUserPreferredUILanguages@20 __imp__RtlGetUserPreferredUILanguages@20 _RtlGetSystemPreferredUILanguages@20 __imp__RtlGetSystemPreferredUILanguages@20 _RtlpSetUserPreferredUILanguages@12 __imp__RtlpSetUserPreferredUILanguages@12 _RtlpSetInstallLanguage@8 __imp__RtlpSetInstallLanguage@8 _RtlpVerifyAndCommitUILanguageSettings@4 __imp__RtlpVerifyAndCommitUILanguageSettings@4 _RtlpSetPreferredUILanguages@12 __imp__RtlpSetPreferredUILanguages@12 _RtlGetThreadPreferredUILanguages@16 __imp__RtlGetThreadPreferredUILanguages@16 _RtlSetThreadPreferredUILanguages@12 __imp__RtlSetThreadPreferredUILanguages@12 _RtlSetThreadPreferredUILanguages2@16 __imp__RtlSetThreadPreferredUILanguages2@16 _RtlRestoreThreadPreferredUILanguages@4 __imp__RtlRestoreThreadPreferredUILanguages@4 _RtlCleanUpTEBLangLists@0 __imp__RtlCleanUpTEBLangLists@0 _RtlGetFileMUIPath@28 __imp__RtlGetFileMUIPath@28 _RtlpQueryDefaultUILanguage@8 __imp__RtlpQueryDefaultUILanguage@8 _RtlLCIDToCultureName@8 __imp__RtlLCIDToCultureName@8 _RtlCultureNameToLCID@8 __imp__RtlCultureNameToLCID@8 _RtlConvertLCIDToString@20 __imp__RtlConvertLCIDToString@20 _RtlpConvertLCIDsToCultureNames@8 __imp__RtlpConvertLCIDsToCultureNames@8 _RtlpConvertCultureNamesToLCIDs@8 __imp__RtlpConvertCultureNamesToLCIDs@8 _RtlpConvertAbsoluteToRelativeSecurityAttribute@12 __imp__RtlpConvertAbsoluteToRelativeSecurityAttribute@12 _RtlpConvertRelativeToAbsoluteSecurityAttribute@16 __imp__RtlpConvertRelativeToAbsoluteSecurityAttribute@16 _RtlpRefreshCachedUILanguage@8 __imp__RtlpRefreshCachedUILanguage@8 _RtlpIsQualifiedLanguage@12 __imp__RtlpIsQualifiedLanguage@12 _RtlpGetUserOrMachineUILanguage4NLS@12 __imp__RtlpGetUserOrMachineUILanguage4NLS@12 _RtlpGetNameFromLangInfoNode@12 __imp__RtlpGetNameFromLangInfoNode@12 _RtlpGetLCIDFromLangInfoNode@12 __imp__RtlpGetLCIDFromLangInfoNode@12 _RtlpLoadMachineUIByPolicy@12 __imp__RtlpLoadMachineUIByPolicy@12 _RtlpLoadUserUIByPolicy@12 __imp__RtlpLoadUserUIByPolicy@12 _RtlpCreateProcessRegistryInfo@4 __imp__RtlpCreateProcessRegistryInfo@4 _RtlpInitializeLangRegistryInfo@4 __imp__RtlpInitializeLangRegistryInfo@4 _RtlpGetSystemDefaultUILanguage@8 __imp__RtlpGetSystemDefaultUILanguage@8 _RtlGetThreadLangIdByIndex@16 __imp__RtlGetThreadLangIdByIndex@16 _RtlpMuiRegCreateRegistryInfo@0 __imp__RtlpMuiRegCreateRegistryInfo@0 _RtlpMuiRegLoadRegistryInfo@8 __imp__RtlpMuiRegLoadRegistryInfo@8 _RtlpMuiRegFreeRegistryInfo@8 __imp__RtlpMuiRegFreeRegistryInfo@8 _RtlpMuiFreeLangRegistryInfo@4 __imp__RtlpMuiFreeLangRegistryInfo@4 _RtlGetActiveConsoleId@0 __imp__RtlGetActiveConsoleId@0 _RtlGetConsoleSessionForegroundProcessId@0 __imp__RtlGetConsoleSessionForegroundProcessId@0 _RtlGetCurrentTransaction@0 __imp__RtlGetCurrentTransaction@0 _RtlGetFullPathName_U@16 __imp__RtlGetFullPathName_U@16 _RtlGetFullPathName_UEx@20 __imp__RtlGetFullPathName_UEx@20 _RtlGetFullPathName_UstrEx@32 __imp__RtlGetFullPathName_UstrEx@32 _RtlGetGroupSecurityDescriptor@12 __imp__RtlGetGroupSecurityDescriptor@12 _RtlGetInterruptTimePrecise@4 __imp__RtlGetInterruptTimePrecise@4 _RtlGetLastNtStatus@0 __imp__RtlGetLastNtStatus@0 _RtlGetLastWin32Error@0 __imp__RtlGetLastWin32Error@0 _RtlGetLocaleFileMappingAddress@12 __imp__RtlGetLocaleFileMappingAddress@12 _RtlGetLongestNtPathLength@0 __imp__RtlGetLongestNtPathLength@0 _RtlGetUserInfoHeap@20 __imp__RtlGetUserInfoHeap@20 _RtlGetUnloadEventTrace@0 __imp__RtlGetUnloadEventTrace@0 _RtlGetUnloadEventTraceEx@12 __imp__RtlGetUnloadEventTraceEx@12 _RtlGetNtGlobalFlags@0 __imp__RtlGetNtGlobalFlags@0 _RtlGetNtProductType@4 __imp__RtlGetNtProductType@4 _RtlGetNtSystemRoot@0 __imp__RtlGetNtSystemRoot@0 _RtlGetAppContainerNamedObjectPath@16 __imp__RtlGetAppContainerNamedObjectPath@16 _RtlGetAppContainerParent@8 __imp__RtlGetAppContainerParent@8 _RtlGetAppContainerSidType@8 __imp__RtlGetAppContainerSidType@8 _RtlGetOwnerSecurityDescriptor@12 __imp__RtlGetOwnerSecurityDescriptor@12 _RtlGetReturnAddressHijackTarget@0 __imp__RtlGetReturnAddressHijackTarget@0 _RtlGetSaclSecurityDescriptor@16 __imp__RtlGetSaclSecurityDescriptor@16 _RtlGetSecurityDescriptorRMControl@8 __imp__RtlGetSecurityDescriptorRMControl@8 _RtlGetSuiteMask@0 __imp__RtlGetSuiteMask@0 _RtlGetSystemTimePrecise@0 __imp__RtlGetSystemTimePrecise@0 _RtlGetThreadErrorMode@0 __imp__RtlGetThreadErrorMode@0 _RtlGetThreadWorkOnBehalfTicket@8 __imp__RtlGetThreadWorkOnBehalfTicket@8 _RtlGetTokenNamedObjectPath@12 __imp__RtlGetTokenNamedObjectPath@12 _RtlGetProductInfo@20 __imp__RtlGetProductInfo@20 _RtlGetVersion@4 __imp__RtlGetVersion@4 _RtlHeapTrkInitialize@4 __imp__RtlHeapTrkInitialize@4 _RtlDetectHeapLeaks@0 __imp__RtlDetectHeapLeaks@0 _RtlIdentifierAuthoritySid@4 __imp__RtlIdentifierAuthoritySid@4 _RtlImageDirectoryEntryToData@16 __imp__RtlImageDirectoryEntryToData@16 _RtlImageNtHeader@4 __imp__RtlImageNtHeader@4 _RtlImageNtHeaderEx@20 __imp__RtlImageNtHeaderEx@20 _RtlImageRvaToSection@12 __imp__RtlImageRvaToSection@12 _RtlImageRvaToVa@16 __imp__RtlImageRvaToVa@16 _RtlImpersonateSelf@4 __imp__RtlImpersonateSelf@4 _RtlImpersonateSelfEx@12 __imp__RtlImpersonateSelfEx@12 _RtlInitAnsiString@8 __imp__RtlInitAnsiString@8 _RtlInitAnsiStringEx@8 __imp__RtlInitAnsiStringEx@8 _RtlInitEnumerationHashTable@8 __imp__RtlInitEnumerationHashTable@8 _RtlInitUTF8String@8 __imp__RtlInitUTF8String@8 _RtlInitUTF8StringEx@8 __imp__RtlInitUTF8StringEx@8 _RtlInitializeAtomPackage@4 __imp__RtlInitializeAtomPackage@4 _RtlInitializeBitMap@12 __imp__RtlInitializeBitMap@12 _RtlInitializeConditionVariable@4 __imp__RtlInitializeConditionVariable@4 _RtlWakeConditionVariable@4 __imp__RtlWakeConditionVariable@4 _RtlWakeAllConditionVariable@4 __imp__RtlWakeAllConditionVariable@4 _RtlSleepConditionVariableCS@12 __imp__RtlSleepConditionVariableCS@12 _RtlSleepConditionVariableSRW@16 __imp__RtlSleepConditionVariableSRW@16 _RtlInitializeCriticalSection@4 __imp__RtlInitializeCriticalSection@4 _RtlInitializeCriticalSectionAndSpinCount@8 __imp__RtlInitializeCriticalSectionAndSpinCount@8 _RtlInitializeCriticalSectionEx@12 __imp__RtlInitializeCriticalSectionEx@12 _RtlUpdateClonedCriticalSection@4 __imp__RtlUpdateClonedCriticalSection@4 _RtlSetCriticalSectionSpinCount@8 __imp__RtlSetCriticalSectionSpinCount@8 _RtlSetCurrentTransaction@4 __imp__RtlSetCurrentTransaction@4 _RtlInitializeGenericTable@20 __imp__RtlInitializeGenericTable@20 _RtlInitializeGenericTableAvl@20 __imp__RtlInitializeGenericTableAvl@20 _RtlInitializeHandleTable@12 __imp__RtlInitializeHandleTable@12 _RtlInitializeResource@4 __imp__RtlInitializeResource@4 _RtlInitializeRXact@12 __imp__RtlInitializeRXact@12 _RtlInitializeSid@12 __imp__RtlInitializeSid@12 _RtlInitializeSidEx __imp__RtlInitializeSidEx _RtlInitializeSListHead@4 __imp__RtlInitializeSListHead@4 _RtlInitString@8 __imp__RtlInitString@8 _RtlInitStringEx@8 __imp__RtlInitStringEx@8 _RtlInitStrongEnumerationHashTable@8 __imp__RtlInitStrongEnumerationHashTable@8 _RtlInitUnicodeString@8 __imp__RtlInitUnicodeString@8 _RtlInitUnicodeStringEx@8 __imp__RtlInitUnicodeStringEx@8 _RtlInitWeakEnumerationHashTable@8 __imp__RtlInitWeakEnumerationHashTable@8 _RtlInsertEntryHashTable@16 __imp__RtlInsertEntryHashTable@16 _RtlInsertElementGenericTable@16 __imp__RtlInsertElementGenericTable@16 _RtlInsertElementGenericTableAvl@16 __imp__RtlInsertElementGenericTableAvl@16 _RtlInsertElementGenericTableFull@24 __imp__RtlInsertElementGenericTableFull@24 _RtlInsertElementGenericTableFullAvl@24 __imp__RtlInsertElementGenericTableFullAvl@24 _RtlIntegerToChar@16 __imp__RtlIntegerToChar@16 _RtlIntegerToUnicodeString@12 __imp__RtlIntegerToUnicodeString@12 _RtlInterlockedFlushSList@4 __imp__RtlInterlockedFlushSList@4 _RtlInterlockedPopEntrySList@4 __imp__RtlInterlockedPopEntrySList@4 _RtlInterlockedPushEntrySList@8 __imp__RtlInterlockedPushEntrySList@8 _RtlInterlockedPushListSListEx@16 __imp__RtlInterlockedPushListSListEx@16 _RtlInterlockedClearBitRun@12 __imp__RtlInterlockedClearBitRun@12 _RtlInterlockedSetBitRun@12 __imp__RtlInterlockedSetBitRun@12 _RtlDoesNameContainWildCards@4 __imp__RtlDoesNameContainWildCards@4 _RtlIsNameInExpression@16 __imp__RtlIsNameInExpression@16 _RtlIsNameInUnUpcasedExpression@16 __imp__RtlIsNameInUnUpcasedExpression@16 _RtlIsParentOfChildAppContainer@8 __imp__RtlIsParentOfChildAppContainer@8 _RtlIsUntrustedObject@12 __imp__RtlIsUntrustedObject@12 _RtlQueryDepthSList@4 __imp__RtlQueryDepthSList@4 @RtlInterlockedPushListSList@16 __imp_@RtlInterlockedPushListSList@16 _RtlFirstEntrySList@4 __imp__RtlFirstEntrySList@4 _RtlInterlockedCompareExchange64@20 __imp__RtlInterlockedCompareExchange64@20 _RtlInt64ToUnicodeString@16 __imp__RtlInt64ToUnicodeString@16 _RtlIoDecodeMemIoResource@16 __imp__RtlIoDecodeMemIoResource@16 _RtlIoEncodeMemIoResource@40 __imp__RtlIoEncodeMemIoResource@40 _RtlIpv4AddressToStringA@8 __imp__RtlIpv4AddressToStringA@8 _RtlIpv4AddressToStringW@8 __imp__RtlIpv4AddressToStringW@8 _RtlIpv4AddressToStringExA@16 __imp__RtlIpv4AddressToStringExA@16 _RtlIpv4AddressToStringExW@16 __imp__RtlIpv4AddressToStringExW@16 _RtlIpv4StringToAddressA@16 __imp__RtlIpv4StringToAddressA@16 _RtlIpv4StringToAddressW@16 __imp__RtlIpv4StringToAddressW@16 _RtlIpv4StringToAddressExA@16 __imp__RtlIpv4StringToAddressExA@16 _RtlIpv4StringToAddressExW@16 __imp__RtlIpv4StringToAddressExW@16 _RtlIpv6AddressToStringA@8 __imp__RtlIpv6AddressToStringA@8 _RtlIpv6AddressToStringW@8 __imp__RtlIpv6AddressToStringW@8 _RtlIpv6AddressToStringExA@20 __imp__RtlIpv6AddressToStringExA@20 _RtlIpv6AddressToStringExW@20 __imp__RtlIpv6AddressToStringExW@20 _RtlIpv6StringToAddressA@12 __imp__RtlIpv6StringToAddressA@12 _RtlIpv6StringToAddressW@12 __imp__RtlIpv6StringToAddressW@12 _RtlIpv6StringToAddressExA@16 __imp__RtlIpv6StringToAddressExA@16 _RtlIpv6StringToAddressExW@16 __imp__RtlIpv6StringToAddressExW@16 _RtlEthernetAddressToStringA@8 __imp__RtlEthernetAddressToStringA@8 _RtlEthernetAddressToStringW@8 __imp__RtlEthernetAddressToStringW@8 _RtlEthernetStringToAddressA@12 __imp__RtlEthernetStringToAddressA@12 _RtlEthernetStringToAddressW@12 __imp__RtlEthernetStringToAddressW@12 _RtlIsDosDeviceName_U@4 __imp__RtlIsDosDeviceName_U@4 _RtlIsGenericTableEmpty@4 __imp__RtlIsGenericTableEmpty@4 _RtlIsGenericTableEmptyAvl@4 __imp__RtlIsGenericTableEmptyAvl@4 _RtlIsNameLegalDOS8Dot3@12 __imp__RtlIsNameLegalDOS8Dot3@12 _RtlIsCapabilitySid@4 __imp__RtlIsCapabilitySid@4 _RtlIsPackageSid@4 __imp__RtlIsPackageSid@4 _RtlIsValidProcessTrustLabelSid@4 __imp__RtlIsValidProcessTrustLabelSid@4 _RtlIsValidHandle@8 __imp__RtlIsValidHandle@8 _RtlIsValidIndexHandle@12 __imp__RtlIsValidIndexHandle@12 _RtlIsValidLocaleName@8 __imp__RtlIsValidLocaleName@8 _RtlKnownExceptionFilter@4 __imp__RtlKnownExceptionFilter@4 _RtlLargeIntegerAdd@16 __imp__RtlLargeIntegerAdd@16 _RtlLargeIntegerArithmeticShift@12 __imp__RtlLargeIntegerArithmeticShift@12 _RtlLargeIntegerDivide@20 __imp__RtlLargeIntegerDivide@20 _RtlLargeIntegerNegate@8 __imp__RtlLargeIntegerNegate@8 _RtlLargeIntegerShiftLeft@12 __imp__RtlLargeIntegerShiftLeft@12 _RtlLargeIntegerShiftRight@12 __imp__RtlLargeIntegerShiftRight@12 _RtlLargeIntegerSubtract@16 __imp__RtlLargeIntegerSubtract@16 _RtlLargeIntegerToChar@16 __imp__RtlLargeIntegerToChar@16 _RtlLcidToLocaleName@16 __imp__RtlLcidToLocaleName@16 _RtlLeaveCriticalSection@4 __imp__RtlLeaveCriticalSection@4 _RtlLengthRequiredSid@4 __imp__RtlLengthRequiredSid@4 _RtlLengthSecurityDescriptor@4 __imp__RtlLengthSecurityDescriptor@4 _RtlLengthSid@4 __imp__RtlLengthSid@4 _RtlLocaleNameToLcid@12 __imp__RtlLocaleNameToLcid@12 _RtlLockHeap@4 __imp__RtlLockHeap@4 _RtlLookupAtomInAtomTable@12 __imp__RtlLookupAtomInAtomTable@12 _RtlLookupElementGenericTable@8 __imp__RtlLookupElementGenericTable@8 _RtlLookupElementGenericTableAvl@8 __imp__RtlLookupElementGenericTableAvl@8 _RtlLookupElementGenericTableFull@16 __imp__RtlLookupElementGenericTableFull@16 _RtlLookupElementGenericTableFullAvl@16 __imp__RtlLookupElementGenericTableFullAvl@16 _RtlLookupEntryHashTable@12 __imp__RtlLookupEntryHashTable@12 _RtlLookupFirstMatchingElementGenericTableAvl@12 __imp__RtlLookupFirstMatchingElementGenericTableAvl@12 _RtlMakeSelfRelativeSD@12 __imp__RtlMakeSelfRelativeSD@12 _RtlMapGenericMask@8 __imp__RtlMapGenericMask@8 _RtlMapSecurityErrorToNtStatus@4 __imp__RtlMapSecurityErrorToNtStatus@4 _RtlMoveMemory@12 __imp__RtlMoveMemory@12 _RtlConsoleMultiByteToUnicodeN@24 __imp__RtlConsoleMultiByteToUnicodeN@24 _RtlMultiByteToUnicodeN@20 __imp__RtlMultiByteToUnicodeN@20 _RtlMultiByteToUnicodeSize@12 __imp__RtlMultiByteToUnicodeSize@12 _RtlMultipleAllocateHeap@20 __imp__RtlMultipleAllocateHeap@20 _RtlMultipleFreeHeap@16 __imp__RtlMultipleFreeHeap@16 _RtlNewInstanceSecurityObject@40 __imp__RtlNewInstanceSecurityObject@40 _RtlNewSecurityGrantedAccess@24 __imp__RtlNewSecurityGrantedAccess@24 _RtlNewSecurityObject@24 __imp__RtlNewSecurityObject@24 _RtlNewSecurityObjectEx@32 __imp__RtlNewSecurityObjectEx@32 _RtlNewSecurityObjectWithMultipleInheritance@36 __imp__RtlNewSecurityObjectWithMultipleInheritance@36 _RtlNormalizeProcessParams@4 __imp__RtlNormalizeProcessParams@4 _RtlNormalizeSecurityDescriptor@20 __imp__RtlNormalizeSecurityDescriptor@20 _RtlNotifyFeatureUsage@4 __imp__RtlNotifyFeatureUsage@4 _RtlNtStatusToDosError@4 __imp__RtlNtStatusToDosError@4 _RtlNtStatusToDosErrorNoTeb@4 __imp__RtlNtStatusToDosErrorNoTeb@4 _RtlNumberGenericTableElements@4 __imp__RtlNumberGenericTableElements@4 _RtlNumberGenericTableElementsAvl@4 __imp__RtlNumberGenericTableElementsAvl@4 _RtlNumberOfClearBits@4 __imp__RtlNumberOfClearBits@4 _RtlNumberOfClearBitsInRange@12 __imp__RtlNumberOfClearBitsInRange@12 _RtlNumberOfSetBits@4 __imp__RtlNumberOfSetBits@4 _RtlNumberOfSetBitsInRange@12 __imp__RtlNumberOfSetBitsInRange@12 _RtlNumberOfSetBitsUlongPtr@4 __imp__RtlNumberOfSetBitsUlongPtr@4 _RtlOemStringToUnicodeSize@4 __imp__RtlOemStringToUnicodeSize@4 _RtlOemStringToUnicodeString@12 __imp__RtlOemStringToUnicodeString@12 _RtlOemToUnicodeN@20 __imp__RtlOemToUnicodeN@20 _RtlOpenCurrentUser@8 __imp__RtlOpenCurrentUser@8 _RtlOsDeploymentState@4 __imp__RtlOsDeploymentState@4 _RtlOwnerAcesPresent@4 __imp__RtlOwnerAcesPresent@4 _RtlPcToFileHeader@8 __imp__RtlPcToFileHeader@8 _RtlpMergeSecurityAttributeInformation@16 __imp__RtlpMergeSecurityAttributeInformation@16 _RtlpNtCreateKey@24 __imp__RtlpNtCreateKey@24 _RtlpNtEnumerateSubKey@16 __imp__RtlpNtEnumerateSubKey@16 _RtlpNtMakeTemporaryKey@4 __imp__RtlpNtMakeTemporaryKey@4 _RtlpNtOpenKey@16 __imp__RtlpNtOpenKey@16 _RtlpNtQueryValueKey@20 __imp__RtlpNtQueryValueKey@20 _RtlpNtSetValueKey@16 __imp__RtlpNtSetValueKey@16 _RtlPinAtomInAtomTable@8 __imp__RtlPinAtomInAtomTable@8 _RtlPopFrame@4 __imp__RtlPopFrame@4 _RtlPrefixString@12 __imp__RtlPrefixString@12 _RtlPrefixUnicodeString@12 __imp__RtlPrefixUnicodeString@12 _RtlPushFrame@4 __imp__RtlPushFrame@4 _RtlQueryAllFeatureConfigurations@16 __imp__RtlQueryAllFeatureConfigurations@16 _RtlQueryAtomInAtomTable@24 __imp__RtlQueryAtomInAtomTable@24 _RtlQueryElevationFlags@4 __imp__RtlQueryElevationFlags@4 _RtlQueryEnvironmentVariable_U@12 __imp__RtlQueryEnvironmentVariable_U@12 _RtlQueryEnvironmentVariable@24 __imp__RtlQueryEnvironmentVariable@24 _RtlQueryFeatureConfiguration@16 __imp__RtlQueryFeatureConfiguration@16 _RtlQueryFeatureConfigurationChangeStamp@0 __imp__RtlQueryFeatureConfigurationChangeStamp@0 _RtlQueryFeatureUsageNotificationSubscriptions@8 __imp__RtlQueryFeatureUsageNotificationSubscriptions@8 _RtlQueryHeapInformation@20 __imp__RtlQueryHeapInformation@20 _RtlQueryInformationAcl@16 __imp__RtlQueryInformationAcl@16 _RtlQueryPackageClaims@32 __imp__RtlQueryPackageClaims@32 _RtlQueryPackageIdentity@24 __imp__RtlQueryPackageIdentity@24 _RtlQueryPackageIdentityEx@28 __imp__RtlQueryPackageIdentityEx@28 _RtlQueryPerformanceCounter@4 __imp__RtlQueryPerformanceCounter@4 _RtlQueryPerformanceFrequency@4 __imp__RtlQueryPerformanceFrequency@4 _RtlQueryThreadPlaceholderCompatibilityMode@0 __imp__RtlQueryThreadPlaceholderCompatibilityMode@0 _RtlQueryProcessPlaceholderCompatibilityMode@0 __imp__RtlQueryProcessPlaceholderCompatibilityMode@0 _RtlQueryRegistryValues@20 __imp__RtlQueryRegistryValues@20 _RtlQueryRegistryValuesEx@20 __imp__RtlQueryRegistryValuesEx@20 _RtlQueryRegistryValueWithFallback@28 __imp__RtlQueryRegistryValueWithFallback@28 _RtlQuerySecurityObject@20 __imp__RtlQuerySecurityObject@20 _RtlQueryTimeZoneInformation@4 __imp__RtlQueryTimeZoneInformation@4 _RtlQueryTokenHostIdAsUlong64@8 __imp__RtlQueryTokenHostIdAsUlong64@8 _RtlQueryUnbiasedInterruptTime@4 __imp__RtlQueryUnbiasedInterruptTime@4 _RtlQueryValidationRunlevel@4 __imp__RtlQueryValidationRunlevel@4 _RtlQueueApcWow64Thread@20 __imp__RtlQueueApcWow64Thread@20 _RtlRaiseCustomSystemEventTrigger@4 __imp__RtlRaiseCustomSystemEventTrigger@4 _RtlRaiseException@4 __imp__RtlRaiseException@4 _RtlRaiseStatus@4 __imp__RtlRaiseStatus@4 _RtlRandom@4 __imp__RtlRandom@4 _RtlRandomEx@4 __imp__RtlRandomEx@4 _RtlRbInsertNodeEx@16 __imp__RtlRbInsertNodeEx@16 _RtlRbRemoveNode@8 __imp__RtlRbRemoveNode@8 _RtlReAllocateHeap@16 __imp__RtlReAllocateHeap@16 _RtlRealPredecessor@4 __imp__RtlRealPredecessor@4 _RtlRealSuccessor@4 __imp__RtlRealSuccessor@4 _RtlRegisterFeatureConfigurationChangeNotification@16 __imp__RtlRegisterFeatureConfigurationChangeNotification@16 _RtlReleasePebLock@0 __imp__RtlReleasePebLock@0 _RtlReleasePrivilege@4 __imp__RtlReleasePrivilege@4 _RtlReleaseRelativeName@4 __imp__RtlReleaseRelativeName@4 _RtlReleaseResource@4 __imp__RtlReleaseResource@4 _RtlRemoteCall@28 __imp__RtlRemoteCall@28 _RtlRemoveEntryHashTable@12 __imp__RtlRemoveEntryHashTable@12 _RtlRemovePrivileges@12 __imp__RtlRemovePrivileges@12 _RtlReplaceSidInSd@16 __imp__RtlReplaceSidInSd@16 _RtlRestoreLastWin32Error@4 __imp__RtlRestoreLastWin32Error@4 _RtlRunDecodeUnicodeString@8 __imp__RtlRunDecodeUnicodeString@8 _RtlRunEncodeUnicodeString@8 __imp__RtlRunEncodeUnicodeString@8 _RtlSecondsSince1970ToTime@8 __imp__RtlSecondsSince1970ToTime@8 _RtlSecondsSince1980ToTime@8 __imp__RtlSecondsSince1980ToTime@8 _RtlSelfRelativeToAbsoluteSD@44 __imp__RtlSelfRelativeToAbsoluteSD@44 _RtlSelfRelativeToAbsoluteSD2@8 __imp__RtlSelfRelativeToAbsoluteSD2@8 _RtlSetAllBits@4 __imp__RtlSetAllBits@4 _RtlSetBit@8 __imp__RtlSetBit@8 _RtlSetBits@12 __imp__RtlSetBits@12 _RtlSetCurrentDirectory_U@4 __imp__RtlSetCurrentDirectory_U@4 _RtlSetCurrentEnvironment@8 __imp__RtlSetCurrentEnvironment@8 _RtlSetDaclSecurityDescriptor@16 __imp__RtlSetDaclSecurityDescriptor@16 _RtlSetEnvironmentVariable@12 __imp__RtlSetEnvironmentVariable@12 _RtlSetEnvironmentVar@20 __imp__RtlSetEnvironmentVar@20 _RtlSetFeatureConfigurations@16 __imp__RtlSetFeatureConfigurations@16 _RtlSetGroupSecurityDescriptor@12 __imp__RtlSetGroupSecurityDescriptor@12 _RtlSetHeapInformation@16 __imp__RtlSetHeapInformation@16 _RtlSetLastWin32Error@4 __imp__RtlSetLastWin32Error@4 _RtlSetLastWin32ErrorAndNtStatusFromNtStatus@4 __imp__RtlSetLastWin32ErrorAndNtStatusFromNtStatus@4 _RtlSetUserValueHeap@16 __imp__RtlSetUserValueHeap@16 _RtlSetUserFlagsHeap@20 __imp__RtlSetUserFlagsHeap@20 _RtlSetInformationAcl@16 __imp__RtlSetInformationAcl@16 _RtlSetOwnerSecurityDescriptor@12 __imp__RtlSetOwnerSecurityDescriptor@12 _RtlSetProcessIsCritical __imp__RtlSetProcessIsCritical _RtlSetSaclSecurityDescriptor@16 __imp__RtlSetSaclSecurityDescriptor@16 _RtlSetSecurityDescriptorRMControl@8 __imp__RtlSetSecurityDescriptorRMControl@8 _RtlSetSecurityObject@20 __imp__RtlSetSecurityObject@20 _RtlSetSecurityObjectEx@24 __imp__RtlSetSecurityObjectEx@24 _RtlSetThreadSubProcessTag@4 __imp__RtlSetThreadSubProcessTag@4 _RtlSetThreadErrorMode@8 __imp__RtlSetThreadErrorMode@8 _RtlSetThreadIsCritical __imp__RtlSetThreadIsCritical _RtlSetThreadWorkOnBehalfTicket@4 __imp__RtlSetThreadWorkOnBehalfTicket@4 _RtlSetTimeZoneInformation@4 __imp__RtlSetTimeZoneInformation@4 _RtlSidDominates@12 __imp__RtlSidDominates@12 _RtlSidDominatesForTrust@12 __imp__RtlSidDominatesForTrust@12 _RtlSidEqualLevel@12 __imp__RtlSidEqualLevel@12 _RtlSidHashInitialize@12 __imp__RtlSidHashInitialize@12 _RtlSidHashLookup@8 __imp__RtlSidHashLookup@8 _RtlSidIsHigherLevel@12 __imp__RtlSidIsHigherLevel@12 _RtlSizeHeap@12 __imp__RtlSizeHeap@12 _RtlSplay@4 __imp__RtlSplay@4 _RtlStartRXact@4 __imp__RtlStartRXact@4 _RtlStringFromGUID@8 __imp__RtlStringFromGUID@8 _RtlStringFromGUIDEx@12 __imp__RtlStringFromGUIDEx@12 _RtlStronglyEnumerateEntryHashTable@8 __imp__RtlStronglyEnumerateEntryHashTable@8 _RtlSubAuthorityCountSid@4 __imp__RtlSubAuthorityCountSid@4 _RtlSubAuthoritySid@8 __imp__RtlSubAuthoritySid@8 _RtlSubscribeForFeatureUsageNotification@8 __imp__RtlSubscribeForFeatureUsageNotification@8 _RtlSubtreePredecessor@4 __imp__RtlSubtreePredecessor@4 _RtlSubtreeSuccessor@4 __imp__RtlSubtreeSuccessor@4 _RtlTestBit@8 __imp__RtlTestBit@8 _RtlTestProtectedAccess@8 __imp__RtlTestProtectedAccess@8 _RtlTimeToElapsedTimeFields@8 __imp__RtlTimeToElapsedTimeFields@8 _RtlTimeFieldsToTime@8 __imp__RtlTimeFieldsToTime@8 _RtlpTimeFieldsToTime@12 __imp__RtlpTimeFieldsToTime@12 _RtlTimeToSecondsSince1970@8 __imp__RtlTimeToSecondsSince1970@8 _RtlTimeToSecondsSince1980@8 __imp__RtlTimeToSecondsSince1980@8 _RtlTimeToTimeFields@8 __imp__RtlTimeToTimeFields@8 _RtlpTimeToTimeFields@12 __imp__RtlpTimeToTimeFields@12 _RtlTraceDatabaseCreate@20 __imp__RtlTraceDatabaseCreate@20 _RtlTraceDatabaseDestroy@4 __imp__RtlTraceDatabaseDestroy@4 _RtlTraceDatabaseValidate@4 __imp__RtlTraceDatabaseValidate@4 _RtlTraceDatabaseAdd@16 __imp__RtlTraceDatabaseAdd@16 _RtlTraceDatabaseFind@16 __imp__RtlTraceDatabaseFind@16 _RtlTraceDatabaseEnumerate@12 __imp__RtlTraceDatabaseEnumerate@12 _RtlTraceDatabaseLock@4 __imp__RtlTraceDatabaseLock@4 _RtlTraceDatabaseUnlock@4 __imp__RtlTraceDatabaseUnlock@4 _RtlTryAcquirePebLock@0 __imp__RtlTryAcquirePebLock@0 _RtlTryEnterCriticalSection@4 __imp__RtlTryEnterCriticalSection@4 _RtlUnhandledExceptionFilter@4 __imp__RtlUnhandledExceptionFilter@4 _RtlUnhandledExceptionFilter2@8 __imp__RtlUnhandledExceptionFilter2@8 _RtlUnicodeStringToAnsiSize@4 __imp__RtlUnicodeStringToAnsiSize@4 _RtlUnicodeStringToAnsiString@12 __imp__RtlUnicodeStringToAnsiString@12 _RtlUnicodeStringToInteger@12 __imp__RtlUnicodeStringToInteger@12 _RtlUnicodeStringToOemSize@4 __imp__RtlUnicodeStringToOemSize@4 _RtlUnicodeStringToOemString@12 __imp__RtlUnicodeStringToOemString@12 _RtlUnicodeStringToCountedOemString@12 __imp__RtlUnicodeStringToCountedOemString@12 _RtlUnicodeStringToUTF8String@12 __imp__RtlUnicodeStringToUTF8String@12 _RtlUnicodeToMultiByteN@20 __imp__RtlUnicodeToMultiByteN@20 _RtlUnicodeToOemN@20 __imp__RtlUnicodeToOemN@20 _RtlUnicodeToMultiByteSize@12 __imp__RtlUnicodeToMultiByteSize@12 _RtlUnicodeToUTF8N@20 __imp__RtlUnicodeToUTF8N@20 _RtlUniform@4 __imp__RtlUniform@4 _RtlUnlockHeap@4 __imp__RtlUnlockHeap@4 _RtlUnregisterFeatureConfigurationChangeNotification@4 __imp__RtlUnregisterFeatureConfigurationChangeNotification@4 _RtlUnsubscribeFromFeatureUsageNotifications@8 __imp__RtlUnsubscribeFromFeatureUsageNotifications@8 _RtlUnwind@16 __imp__RtlUnwind@16 _RtlUpcaseUnicodeChar@4 __imp__RtlUpcaseUnicodeChar@4 _RtlUpcaseUnicodeString@12 __imp__RtlUpcaseUnicodeString@12 _RtlUpcaseUnicodeStringToOemString@12 __imp__RtlUpcaseUnicodeStringToOemString@12 _RtlUpcaseUnicodeStringToCountedOemString@12 __imp__RtlUpcaseUnicodeStringToCountedOemString@12 _RtlUpcaseUnicodeToMultiByteN@20 __imp__RtlUpcaseUnicodeToMultiByteN@20 _RtlUpcaseUnicodeToOemN@20 __imp__RtlUpcaseUnicodeToOemN@20 _RtlUpperChar@4 __imp__RtlUpperChar@4 _RtlUpperString@8 __imp__RtlUpperString@8 _RtlUTF8StringToUnicodeString@12 __imp__RtlUTF8StringToUnicodeString@12 _RtlUTF8ToUnicodeN@20 __imp__RtlUTF8ToUnicodeN@20 _RtlNormalizeString@20 __imp__RtlNormalizeString@20 _RtlIsNormalizedString@16 __imp__RtlIsNormalizedString@16 _RtlIdnToAscii@20 __imp__RtlIdnToAscii@20 _RtlIdnToUnicode@20 __imp__RtlIdnToUnicode@20 _RtlIdnToNameprepUnicode@20 __imp__RtlIdnToNameprepUnicode@20 _RtlSwitchedVVI@16 __imp__RtlSwitchedVVI@16 _RtlValidAcl@4 __imp__RtlValidAcl@4 _RtlValidateCorrelationVector@4 __imp__RtlValidateCorrelationVector@4 _RtlValidateUnicodeString@8 __imp__RtlValidateUnicodeString@8 _RtlValidProcessProtection@4 __imp__RtlValidProcessProtection@4 _RtlValidSecurityDescriptor@4 __imp__RtlValidSecurityDescriptor@4 _RtlValidRelativeSecurityDescriptor@12 __imp__RtlValidRelativeSecurityDescriptor@12 _RtlValidSid@4 __imp__RtlValidSid@4 _RtlVerifyVersionInfo@16 __imp__RtlVerifyVersionInfo@16 _RtlWalkFrameChain@12 __imp__RtlWalkFrameChain@12 _RtlWalkHeap@8 __imp__RtlWalkHeap@8 _RtlWeaklyEnumerateEntryHashTable@8 __imp__RtlWeaklyEnumerateEntryHashTable@8 _RtlWriteRegistryValue@24 __imp__RtlWriteRegistryValue@24 _RtlxAnsiStringToUnicodeSize@4 __imp__RtlxAnsiStringToUnicodeSize@4 _RtlxOemStringToUnicodeSize@4 __imp__RtlxOemStringToUnicodeSize@4 _RtlxUnicodeStringToAnsiSize@4 __imp__RtlxUnicodeStringToAnsiSize@4 _RtlxUnicodeStringToOemSize@4 __imp__RtlxUnicodeStringToOemSize@4 _RtlZeroMemory@8 __imp__RtlZeroMemory@8 _RtlSystemTimeToLocalTime@8 __imp__RtlSystemTimeToLocalTime@8 _RtlLocalTimeToSystemTime@8 __imp__RtlLocalTimeToSystemTime@8 _CsrClientConnectToServer@20 __imp__CsrClientConnectToServer@20 _CsrClientCallServer@16 __imp__CsrClientCallServer@16 _CsrAllocateCaptureBuffer@8 __imp__CsrAllocateCaptureBuffer@8 _CsrFreeCaptureBuffer@4 __imp__CsrFreeCaptureBuffer@4 _CsrAllocateMessagePointer@12 __imp__CsrAllocateMessagePointer@12 _CsrCaptureMessageBuffer@16 __imp__CsrCaptureMessageBuffer@16 _CsrCaptureMessageString@20 __imp__CsrCaptureMessageString@20 _CsrCaptureMessageMultiUnicodeStringsInPlace@12 __imp__CsrCaptureMessageMultiUnicodeStringsInPlace@12 _CsrCaptureTimeout@8 __imp__CsrCaptureTimeout@8 _CsrIdentifyAlertableThread@0 __imp__CsrIdentifyAlertableThread@0 _CsrSetPriorityClass@8 __imp__CsrSetPriorityClass@8 _CsrGetProcessId@0 __imp__CsrGetProcessId@0 _CsrVerifyRegion@8 __imp__CsrVerifyRegion@8 _RtlCutoverTimeToSystemTime@16 __imp__RtlCutoverTimeToSystemTime@16 _RtlCreateTagHeap@16 __imp__RtlCreateTagHeap@16 _RtlGetProcessHeaps@8 __imp__RtlGetProcessHeaps@8 _RtlCreateQueryDebugBuffer@8 __imp__RtlCreateQueryDebugBuffer@8 _RtlDestroyQueryDebugBuffer@4 __imp__RtlDestroyQueryDebugBuffer@4 _RtlQueryProcessDebugInformation@12 __imp__RtlQueryProcessDebugInformation@12 _RtlSetProcessDebugInformation@12 __imp__RtlSetProcessDebugInformation@12 _RtlCommitDebugInfo@8 __imp__RtlCommitDebugInfo@8 _RtlDeCommitDebugInfo@12 __imp__RtlDeCommitDebugInfo@12 _RtlFlushSecureMemoryCache@8 __imp__RtlFlushSecureMemoryCache@8 _RtlRegisterSecureMemoryCacheCallback@4 __imp__RtlRegisterSecureMemoryCacheCallback@4 _RtlDeregisterSecureMemoryCacheCallback@4 __imp__RtlDeregisterSecureMemoryCacheCallback@4 _RtlRegisterThreadWithCsrss@0 __imp__RtlRegisterThreadWithCsrss@0 _RtlWow64CallFunction64@28 __imp__RtlWow64CallFunction64@28 _RtlWow64EnableFsRedirection@4 __imp__RtlWow64EnableFsRedirection@4 _RtlWow64EnableFsRedirectionEx@8 __imp__RtlWow64EnableFsRedirectionEx@8 _RtlWow64GetCurrentMachine@0 __imp__RtlWow64GetCurrentMachine@0 _RtlWow64GetEquivalentMachineCHPE@4 __imp__RtlWow64GetEquivalentMachineCHPE@4 _RtlWow64GetProcessMachines@12 __imp__RtlWow64GetProcessMachines@12 _RtlWow64GetSharedInfoProcess@12 __imp__RtlWow64GetSharedInfoProcess@12 _RtlWow64IsWowGuestMachineSupported@8 __imp__RtlWow64IsWowGuestMachineSupported@8 _RtlpNotOwnerCriticalSection@4 __imp__RtlpNotOwnerCriticalSection@4 _RtlpWaitForCriticalSection@4 __imp__RtlpWaitForCriticalSection@4 _RtlpUnWaitCriticalSection@4 __imp__RtlpUnWaitCriticalSection@4 _RtlWaitOnAddress@16 __imp__RtlWaitOnAddress@16 _RtlWakeAddressAll@4 __imp__RtlWakeAddressAll@4 _RtlWakeAddressAllNoFence@4 __imp__RtlWakeAddressAllNoFence@4 _RtlWakeAddressSingle@4 __imp__RtlWakeAddressSingle@4 _RtlWakeAddressSingleNoFence@4 __imp__RtlWakeAddressSingleNoFence@4 _RtlIsTextUnicode@12 __imp__RtlIsTextUnicode@12 _RtlGetCallersAddress@8 __imp__RtlGetCallersAddress@8 _RtlCaptureStackContext@12 __imp__RtlCaptureStackContext@12 _RtlLogStackBackTrace@0 __imp__RtlLogStackBackTrace@0 _RtlCaptureContext@4 __imp__RtlCaptureContext@4 _RtlCaptureStackBackTrace@16 __imp__RtlCaptureStackBackTrace@16 _RtlValidateHeap@12 __imp__RtlValidateHeap@12 _RtlValidateProcessHeaps@0 __imp__RtlValidateProcessHeaps@0 _RtlSetImageMitigationPolicy@20 __imp__RtlSetImageMitigationPolicy@20 _RtlQueryImageMitigationPolicy@20 __imp__RtlQueryImageMitigationPolicy@20 _RtlQueryProcessLockInformation@4 __imp__RtlQueryProcessLockInformation@4 _RtlQueryProcessBackTraceInformation@4 __imp__RtlQueryProcessBackTraceInformation@4 _LdrQueryProcessModuleInformation@12 __imp__LdrQueryProcessModuleInformation@12 _LdrOpenImageFileOptionsKey@12 __imp__LdrOpenImageFileOptionsKey@12 _LdrQueryImageFileKeyOption@24 __imp__LdrQueryImageFileKeyOption@24 _LdrQueryImageFileExecutionOptions@24 __imp__LdrQueryImageFileExecutionOptions@24 _LdrQueryImageFileExecutionOptionsEx@28 __imp__LdrQueryImageFileExecutionOptionsEx@28 _LdrQueryModuleServiceTags@12 __imp__LdrQueryModuleServiceTags@12 _RtlInitNlsTables@16 __imp__RtlInitNlsTables@16 _RtlResetRtlTranslations@4 __imp__RtlResetRtlTranslations@4 _RtlCustomCPToUnicodeN@24 __imp__RtlCustomCPToUnicodeN@24 _RtlUnicodeToCustomCPN@24 __imp__RtlUnicodeToCustomCPN@24 _RtlUpcaseUnicodeToCustomCPN@24 __imp__RtlUpcaseUnicodeToCustomCPN@24 _RtlInitCodePageTable@8 __imp__RtlInitCodePageTable@8 _LdrProcessRelocationBlock@16 __imp__LdrProcessRelocationBlock@16 _LdrProcessRelocationBlockEx@20 __imp__LdrProcessRelocationBlockEx@20 _LdrVerifyImageMatchesChecksum@16 __imp__LdrVerifyImageMatchesChecksum@16 _LdrVerifyImageMatchesChecksumEx@8 __imp__LdrVerifyImageMatchesChecksumEx@8 _VerSetConditionMask@16 __imp__VerSetConditionMask@16 _RtlAddVectoredContinueHandler@8 __imp__RtlAddVectoredContinueHandler@8 _RtlRemoveVectoredContinueHandler@4 __imp__RtlRemoveVectoredContinueHandler@4 _RtlAddVectoredExceptionHandler@8 __imp__RtlAddVectoredExceptionHandler@8 _RtlRemoveVectoredExceptionHandler@4 __imp__RtlRemoveVectoredExceptionHandler@4 _WerReportExceptionWorker@4 __imp__WerReportExceptionWorker@4 _RtlRegisterWait@24 __imp__RtlRegisterWait@24 _RtlDeregisterWait@4 __imp__RtlDeregisterWait@4 _RtlDeregisterWaitEx@8 __imp__RtlDeregisterWaitEx@8 _RtlQueueWorkItem@12 __imp__RtlQueueWorkItem@12 _RtlCreateTimerQueue@4 __imp__RtlCreateTimerQueue@4 _RtlCreateTimer@28 __imp__RtlCreateTimer@28 _RtlUpdateTimer@16 __imp__RtlUpdateTimer@16 _RtlDeleteTimer@12 __imp__RtlDeleteTimer@12 _RtlDeleteTimerQueue@4 __imp__RtlDeleteTimerQueue@4 _RtlDeleteTimerQueueEx@8 __imp__RtlDeleteTimerQueueEx@8 _RtlSetThreadPoolStartFunc@8 __imp__RtlSetThreadPoolStartFunc@8 _RtlSetIoCompletionCallback@12 __imp__RtlSetIoCompletionCallback@12 _RtlDebugPrintTimes@0 __imp__RtlDebugPrintTimes@0 _RtlSetTimer@28 __imp__RtlSetTimer@28 _RtlCancelTimer@8 __imp__RtlCancelTimer@8 _RtlDnsHostNameToComputerName@12 __imp__RtlDnsHostNameToComputerName@12 _LdrCallEnclave@12 __imp__LdrCallEnclave@12 _LdrCreateEnclave@36 __imp__LdrCreateEnclave@36 _LdrDeleteEnclave@4 __imp__LdrDeleteEnclave@4 _LdrLoadEnclaveModule@12 __imp__LdrLoadEnclaveModule@12 _LdrInitializeEnclave@20 __imp__LdrInitializeEnclave@20 _LdrLoadAlternateResourceModule@16 __imp__LdrLoadAlternateResourceModule@16 _LdrLoadAlternateResourceModuleEx@20 __imp__LdrLoadAlternateResourceModuleEx@20 _LdrUnloadAlternateResourceModule@4 __imp__LdrUnloadAlternateResourceModule@4 _LdrUnloadAlternateResourceModuleEx@8 __imp__LdrUnloadAlternateResourceModuleEx@8 _LdrFlushAlternateResourceModules@0 __imp__LdrFlushAlternateResourceModules@0 _LdrAddLoadAsDataTable@20 __imp__LdrAddLoadAsDataTable@20 _LdrRemoveLoadAsDataTable@16 __imp__LdrRemoveLoadAsDataTable@16 _LdrGetFileNameFromLoadAsDataTable@8 __imp__LdrGetFileNameFromLoadAsDataTable@8 _LdrSetMUICacheType@4 __imp__LdrSetMUICacheType@4 _LdrResFindResource@36 __imp__LdrResFindResource@36 _LdrResFindResourceDirectory@28 __imp__LdrResFindResourceDirectory@28 _LdrResSearchResource@32 __imp__LdrResSearchResource@32 _LdrResRelease@12 __imp__LdrResRelease@12 _LdrpResGetMappingSize@16 __imp__LdrpResGetMappingSize@16 _LdrpResGetResourceDirectory@20 __imp__LdrpResGetResourceDirectory@20 @RtlUshortByteSwap@4 __imp_@RtlUshortByteSwap@4 @RtlUlongByteSwap@4 __imp_@RtlUlongByteSwap@4 @RtlUlonglongByteSwap@8 __imp_@RtlUlonglongByteSwap@8 _RtlFindLeastSignificantBit@8 __imp__RtlFindLeastSignificantBit@8 _RtlFindMostSignificantBit@8 __imp__RtlFindMostSignificantBit@8 _RtlCreateActivationContext@24 __imp__RtlCreateActivationContext@24 _RtlAddRefActivationContext@4 __imp__RtlAddRefActivationContext@4 _RtlReleaseActivationContext@4 __imp__RtlReleaseActivationContext@4 _RtlZombifyActivationContext@4 __imp__RtlZombifyActivationContext@4 _RtlActivateActivationContext@12 __imp__RtlActivateActivationContext@12 _RtlActivateActivationContextEx@16 __imp__RtlActivateActivationContextEx@16 _RtlDeactivateActivationContext@8 __imp__RtlDeactivateActivationContext@8 _RtlDosApplyFileIsolationRedirection_Ustr@36 __imp__RtlDosApplyFileIsolationRedirection_Ustr@36 _RtlFindActivationContextSectionGuid@20 __imp__RtlFindActivationContextSectionGuid@20 _RtlFindActivationContextSectionString@20 __imp__RtlFindActivationContextSectionString@20 _RtlFreeThreadActivationContextStack@0 __imp__RtlFreeThreadActivationContextStack@0 _RtlGetActiveActivationContext@4 __imp__RtlGetActiveActivationContext@4 _RtlIsActivationContextActive@4 __imp__RtlIsActivationContextActive@4 _RtlQueryInformationActiveActivationContext@16 __imp__RtlQueryInformationActiveActivationContext@16 _RtlQueryInformationActivationContext@28 __imp__RtlQueryInformationActivationContext@28 _RtlQueryActivationContextApplicationSettings@28 __imp__RtlQueryActivationContextApplicationSettings@28 _RtlHashUnicodeString@16 __imp__RtlHashUnicodeString@16 _RtlGetCurrentPeb@0 __imp__RtlGetCurrentPeb@0 _RtlComputePrivatizedDllName_U@12 __imp__RtlComputePrivatizedDllName_U@12 _RtlCreateSystemVolumeInformationFolder@4 __imp__RtlCreateSystemVolumeInformationFolder@4 _RtlMultiAppendUnicodeStringBuffer@12 __imp__RtlMultiAppendUnicodeStringBuffer@12 _RtlpEnsureBufferSize@12 __imp__RtlpEnsureBufferSize@12 _RtlAppendPathElement@12 __imp__RtlAppendPathElement@12 _RtlGetLengthWithoutLastFullDosOrNtPathElement@12 __imp__RtlGetLengthWithoutLastFullDosOrNtPathElement@12 _RtlGetLengthWithoutTrailingPathSeperators@12 __imp__RtlGetLengthWithoutTrailingPathSeperators@12 _RtlpApplyLengthFunction@16 __imp__RtlpApplyLengthFunction@16 _RtlLockBootStatusData@4 __imp__RtlLockBootStatusData@4 _RtlGetSetBootStatusData@24 __imp__RtlGetSetBootStatusData@24 _RtlUnlockBootStatusData@4 __imp__RtlUnlockBootStatusData@4 _RtlCreateBootStatusDataFile@4 __imp__RtlCreateBootStatusDataFile@4 _RtlCheckBootStatusIntegrity@8 __imp__RtlCheckBootStatusIntegrity@8 _RtlRestoreBootStatusDefaults@4 __imp__RtlRestoreBootStatusDefaults@4 _RtlGetSystemBootStatus@16 __imp__RtlGetSystemBootStatus@16 _RtlGetSystemBootStatusEx@12 __imp__RtlGetSystemBootStatusEx@12 _RtlSetSystemBootStatus@16 __imp__RtlSetSystemBootStatus@16 _RtlSetSystemBootStatusEx@12 __imp__RtlSetSystemBootStatusEx@12 _RtlCheckSystemBootStatusIntegrity@4 __imp__RtlCheckSystemBootStatusIntegrity@4 _RtlRestoreSystemBootStatusDefaults@0 __imp__RtlRestoreSystemBootStatusDefaults@0 _RtlIsThreadWithinLoaderCallout@0 __imp__RtlIsThreadWithinLoaderCallout@0 _EtwLogTraceEvent@12 __imp__EtwLogTraceEvent@12 _EtwTraceEventInstance@20 __imp__EtwTraceEventInstance@20 _EtwTraceMessage __imp__EtwTraceMessage _EtwTraceMessageVa@24 __imp__EtwTraceMessageVa@24 _EtwpGetCpuSpeed@4 __imp__EtwpGetCpuSpeed@4 _EtwNotificationRegister@20 __imp__EtwNotificationRegister@20 _EtwNotificationUnregister@12 __imp__EtwNotificationUnregister@12 _EtwSendNotification@20 __imp__EtwSendNotification@20 _EtwReplyNotification@4 __imp__EtwReplyNotification@4 _EtwProcessPrivateLoggerRequest@4 __imp__EtwProcessPrivateLoggerRequest@4 _EtwDeliverDataBlock@4 __imp__EtwDeliverDataBlock@4 _EtwpCreateEtwThread@8 __imp__EtwpCreateEtwThread@8 _EtwCheckCoverage@4 __imp__EtwCheckCoverage@4 _EtwRegisterTraceGuidsA@32 __imp__EtwRegisterTraceGuidsA@32 _EtwRegisterTraceGuidsW@32 __imp__EtwRegisterTraceGuidsW@32 _EtwUnregisterTraceGuids@8 __imp__EtwUnregisterTraceGuids@8 _EtwGetTraceLoggerHandle@4 __imp__EtwGetTraceLoggerHandle@4 _EtwGetTraceEnableLevel@8 __imp__EtwGetTraceEnableLevel@8 _EtwGetTraceEnableFlags@8 __imp__EtwGetTraceEnableFlags@8 _EtwCreateTraceInstanceId@8 __imp__EtwCreateTraceInstanceId@8 _EtwEventRegister@16 __imp__EtwEventRegister@16 _EtwEventUnregister@8 __imp__EtwEventUnregister@8 _EtwEventSetInformation@20 __imp__EtwEventSetInformation@20 _EtwRegisterSecurityProvider@0 __imp__EtwRegisterSecurityProvider@0 _EtwEventEnabled@12 __imp__EtwEventEnabled@12 _EtwEventProviderEnabled@20 __imp__EtwEventProviderEnabled@20 _EtwEventWrite@20 __imp__EtwEventWrite@20 _EtwEventWriteTransfer@28 __imp__EtwEventWriteTransfer@28 _EtwEventWriteString@24 __imp__EtwEventWriteString@24 _EtwEventWriteEx@40 __imp__EtwEventWriteEx@40 _EtwEventWriteFull@32 __imp__EtwEventWriteFull@32 _EtwWriteUMSecurityEvent@16 __imp__EtwWriteUMSecurityEvent@16 _EtwEventActivityIdControl@8 __imp__EtwEventActivityIdControl@8 _EtwEnumerateProcessRegGuids@12 __imp__EtwEnumerateProcessRegGuids@12 _EtwEventWriteStartScenario@20 __imp__EtwEventWriteStartScenario@20 _EtwEventWriteEndScenario@20 __imp__EtwEventWriteEndScenario@20 _EtwEventWriteNoRegistration@16 __imp__EtwEventWriteNoRegistration@16 _EvtIntReportEventAndSourceAsync@44 __imp__EvtIntReportEventAndSourceAsync@44 _EvtIntReportAuthzEventAndSourceAsync@44 __imp__EvtIntReportAuthzEventAndSourceAsync@44 _NtGetTickCount@0 __imp__NtGetTickCount@0 _RtlInitializeSRWLock@4 __imp__RtlInitializeSRWLock@4 _RtlAcquireSRWLockExclusive@4 __imp__RtlAcquireSRWLockExclusive@4 _RtlTryAcquireSRWLockExclusive@4 __imp__RtlTryAcquireSRWLockExclusive@4 _RtlReleaseSRWLockExclusive@4 __imp__RtlReleaseSRWLockExclusive@4 _RtlAcquireSRWLockShared@4 __imp__RtlAcquireSRWLockShared@4 _RtlTryAcquireSRWLockShared@4 __imp__RtlTryAcquireSRWLockShared@4 _RtlReleaseSRWLockShared@4 __imp__RtlReleaseSRWLockShared@4 _RtlAcquireReleaseSRWLockExclusive@4 __imp__RtlAcquireReleaseSRWLockExclusive@4 _RtlConvertSRWLockExclusiveToShared@4 __imp__RtlConvertSRWLockExclusiveToShared@4 _RtlTryConvertSRWLockSharedToExclusiveOrRelease@4 __imp__RtlTryConvertSRWLockSharedToExclusiveOrRelease@4 _RtlUpdateClonedSRWLock@8 __imp__RtlUpdateClonedSRWLock@8 _AlpcAdjustCompletionListConcurrencyCount@8 __imp__AlpcAdjustCompletionListConcurrencyCount@8 _AlpcFreeCompletionListMessage@8 __imp__AlpcFreeCompletionListMessage@8 _AlpcGetCompletionListLastMessageInformation@12 __imp__AlpcGetCompletionListLastMessageInformation@12 _AlpcGetCompletionListMessageAttributes@8 __imp__AlpcGetCompletionListMessageAttributes@8 _AlpcGetHeaderSize@4 __imp__AlpcGetHeaderSize@4 _AlpcGetMessageAttribute@8 __imp__AlpcGetMessageAttribute@8 _AlpcGetMessageFromCompletionList@8 __imp__AlpcGetMessageFromCompletionList@8 _AlpcGetOutstandingCompletionListMessageCount@4 __imp__AlpcGetOutstandingCompletionListMessageCount@4 _AlpcInitializeMessageAttribute@16 __imp__AlpcInitializeMessageAttribute@16 _AlpcMaxAllowedMessageLength@0 __imp__AlpcMaxAllowedMessageLength@0 _AlpcRegisterCompletionList@20 __imp__AlpcRegisterCompletionList@20 _AlpcRegisterCompletionListWorkerThread@4 __imp__AlpcRegisterCompletionListWorkerThread@4 _AlpcUnregisterCompletionList@4 __imp__AlpcUnregisterCompletionList@4 _AlpcRundownCompletionList@4 __imp__AlpcRundownCompletionList@4 _AlpcUnregisterCompletionListWorkerThread@4 __imp__AlpcUnregisterCompletionListWorkerThread@4 _RtlReportException@12 __imp__RtlReportException@12 _RtlReportExceptionEx@20 __imp__RtlReportExceptionEx@20 _RtlWerpReportException@24 __imp__RtlWerpReportException@24 _RtlReportSilentProcessExit@8 __imp__RtlReportSilentProcessExit@8 _RtlReportSqmEscalation@24 __imp__RtlReportSqmEscalation@24 _ShipAssert@8 __imp__ShipAssert@8 _ShipAssertMsgA@12 __imp__ShipAssertMsgA@12 _ShipAssertMsgW@12 __imp__ShipAssertMsgW@12 _ShipAssertGetBufferInfo@8 __imp__ShipAssertGetBufferInfo@8 _WerReportSQMEvent@16 __imp__WerReportSQMEvent@16 _WinSqmStartSession@12 __imp__WinSqmStartSession@12 _WinSqmEndSession@4 __imp__WinSqmEndSession@4 _WinSqmSetDWORD@12 __imp__WinSqmSetDWORD@12 _WinSqmIncrementDWORD@12 __imp__WinSqmIncrementDWORD@12 _WinSqmAddToAverageDWORD@12 __imp__WinSqmAddToAverageDWORD@12 _WinSqmSetEscalationInfo@16 __imp__WinSqmSetEscalationInfo@16 _WinSqmSetIfMaxDWORD@12 __imp__WinSqmSetIfMaxDWORD@12 _WinSqmSetIfMinDWORD@12 __imp__WinSqmSetIfMinDWORD@12 _WinSqmSetDWORD64@16 __imp__WinSqmSetDWORD64@16 _WinSqmSetString@12 __imp__WinSqmSetString@12 _WinSqmAddToStream@16 __imp__WinSqmAddToStream@16 _WinSqmAddToStreamEx@20 __imp__WinSqmAddToStreamEx@20 _WinSqmIsOptedIn@0 __imp__WinSqmIsOptedIn@0 _WinSqmIsOptedInEx@4 __imp__WinSqmIsOptedInEx@4 _WinSqmEventEnabled@8 __imp__WinSqmEventEnabled@8 _WinSqmEventWrite@12 __imp__WinSqmEventWrite@12 _WinSqmCheckEscalationSetDWORD@16 __imp__WinSqmCheckEscalationSetDWORD@16 _WinSqmCheckEscalationSetDWORD64@20 __imp__WinSqmCheckEscalationSetDWORD64@20 _WinSqmCheckEscalationSetString@16 __imp__WinSqmCheckEscalationSetString@16 _WinSqmCheckEscalationAddToStreamEx@20 __imp__WinSqmCheckEscalationAddToStreamEx@20 _WinSqmGetEscalationRuleStatus@8 __imp__WinSqmGetEscalationRuleStatus@8 _WinSqmGetInstrumentationProperty@16 __imp__WinSqmGetInstrumentationProperty@16 _WinSqmCommonDatapointSetDWORD@12 __imp__WinSqmCommonDatapointSetDWORD@12 _WinSqmCommonDatapointSetDWORD64@16 __imp__WinSqmCommonDatapointSetDWORD64@16 _WinSqmCommonDatapointSetString@12 __imp__WinSqmCommonDatapointSetString@12 _WinSqmCommonDatapointSetStreamEx@20 __imp__WinSqmCommonDatapointSetStreamEx@20 _WinSqmCommonDatapointDelete@4 __imp__WinSqmCommonDatapointDelete@4 _WinSqmIsSessionDisabled@4 __imp__WinSqmIsSessionDisabled@4 _WinSqmStartSessionForPartner@16 __imp__WinSqmStartSessionForPartner@16 _RtlAllocateWnfSerializationGroup@0 __imp__RtlAllocateWnfSerializationGroup@0 _RtlPublishWnfStateData@24 __imp__RtlPublishWnfStateData@24 _RtlTestAndPublishWnfStateData@28 __imp__RtlTestAndPublishWnfStateData@28 _RtlQueryWnfStateData@24 __imp__RtlQueryWnfStateData@24 _RtlQueryWnfStateDataWithExplicitScope@28 __imp__RtlQueryWnfStateDataWithExplicitScope@28 _RtlSubscribeWnfStateChangeNotification@36 __imp__RtlSubscribeWnfStateChangeNotification@36 _RtlUnsubscribeWnfStateChangeNotification@4 __imp__RtlUnsubscribeWnfStateChangeNotification@4 _RtlEqualWnfChangeStamps@8 __imp__RtlEqualWnfChangeStamps@8 _RtlQueryWnfMetaNotification@20 __imp__RtlQueryWnfMetaNotification@20 _RtlRegisterForWnfMetaNotification@24 __imp__RtlRegisterForWnfMetaNotification@24 _RtlWaitForWnfMetaNotification@24 __imp__RtlWaitForWnfMetaNotification@24 _RtlUnsubscribeWnfNotificationWaitForCompletion@4 __imp__RtlUnsubscribeWnfNotificationWaitForCompletion@4 _RtlUnsubscribeWnfNotificationWithCompletionCallback@12 __imp__RtlUnsubscribeWnfNotificationWithCompletionCallback@12 _RtlWnfDllUnloadCallback@4 __imp__RtlWnfDllUnloadCallback@4 _RtlWnfCompareChangeStamp@8 __imp__RtlWnfCompareChangeStamp@8 _RtlConnectToSm@16 __imp__RtlConnectToSm@16 _RtlSendMsgToSm@8 __imp__RtlSendMsgToSm@8 _TpAllocAlpcCompletion@20 __imp__TpAllocAlpcCompletion@20 _TpAllocCleanupGroup@4 __imp__TpAllocCleanupGroup@4 _TpAllocIoCompletion@20 __imp__TpAllocIoCompletion@20 _TpAllocJobNotification@20 __imp__TpAllocJobNotification@20 _TpAllocPool@8 __imp__TpAllocPool@8 _TpAllocTimer@16 __imp__TpAllocTimer@16 _TpAllocWait@16 __imp__TpAllocWait@16 _TpAllocWork@16 __imp__TpAllocWork@16 _TpCallbackDetectedUnrecoverableError@4 __imp__TpCallbackDetectedUnrecoverableError@4 _TpCallbackLeaveCriticalSectionOnCompletion@8 __imp__TpCallbackLeaveCriticalSectionOnCompletion@8 _TpCallbackReleaseMutexOnCompletion@8 __imp__TpCallbackReleaseMutexOnCompletion@8 _TpCallbackReleaseSemaphoreOnCompletion@12 __imp__TpCallbackReleaseSemaphoreOnCompletion@12 _TpCallbackSetEventOnCompletion@8 __imp__TpCallbackSetEventOnCompletion@8 _TpCallbackUnloadDllOnCompletion@8 __imp__TpCallbackUnloadDllOnCompletion@8 _TpCallbackMayRunLong@4 __imp__TpCallbackMayRunLong@4 _TpCancelAsyncIoOperation@4 __imp__TpCancelAsyncIoOperation@4 _TpCaptureCaller@4 __imp__TpCaptureCaller@4 _TpCheckTerminateWorker@4 __imp__TpCheckTerminateWorker@4 _TpDisassociateCallback@4 __imp__TpDisassociateCallback@4 _TpIsTimerSet@4 __imp__TpIsTimerSet@4 _TpPostWork@4 __imp__TpPostWork@4 _TpQueryPoolStackInformation@8 __imp__TpQueryPoolStackInformation@8 _TpReleaseAlpcCompletion@4 __imp__TpReleaseAlpcCompletion@4 _TpReleaseCleanupGroup@4 __imp__TpReleaseCleanupGroup@4 _TpReleaseCleanupGroupMembers@12 __imp__TpReleaseCleanupGroupMembers@12 _TpReleaseIoCompletion@4 __imp__TpReleaseIoCompletion@4 _TpReleaseJobNotification@4 __imp__TpReleaseJobNotification@4 _TpReleasePool@4 __imp__TpReleasePool@4 _TpReleaseTimer@4 __imp__TpReleaseTimer@4 _TpReleaseWait@4 __imp__TpReleaseWait@4 _TpReleaseWork@4 __imp__TpReleaseWork@4 _TpSetPoolMaxThreads@8 __imp__TpSetPoolMaxThreads@8 _TpSetPoolMaxThreadsSoftLimit@8 __imp__TpSetPoolMaxThreadsSoftLimit@8 _TpSetPoolMinThreads@8 __imp__TpSetPoolMinThreads@8 _TpSetPoolStackInformation@8 __imp__TpSetPoolStackInformation@8 _TpSetPoolWorkerThreadIdleTimeout@12 __imp__TpSetPoolWorkerThreadIdleTimeout@12 _TpSetTimer@16 __imp__TpSetTimer@16 _TpSetTimerEx@16 __imp__TpSetTimerEx@16 _TpSetWait@12 __imp__TpSetWait@12 _TpSetWaitEx@16 __imp__TpSetWaitEx@16 _TpSimpleTryPost@12 __imp__TpSimpleTryPost@12 _TpStartAsyncIoOperation@4 __imp__TpStartAsyncIoOperation@4 _TpTrimPools@0 __imp__TpTrimPools@0 _TpWaitForAlpcCompletion@4 __imp__TpWaitForAlpcCompletion@4 _TpWaitForIoCompletion@8 __imp__TpWaitForIoCompletion@8 _TpWaitForJobNotification@4 __imp__TpWaitForJobNotification@4 _TpWaitForTimer@8 __imp__TpWaitForTimer@8 _TpWaitForWait@8 __imp__TpWaitForWait@8 _TpWaitForWork@8 __imp__TpWaitForWork@8 _RtlRunOnceInitialize@4 __imp__RtlRunOnceInitialize@4 _RtlRunOnceExecuteOnce@16 __imp__RtlRunOnceExecuteOnce@16 _RtlRunOnceBeginInitialize@12 __imp__RtlRunOnceBeginInitialize@12 _RtlRunOnceComplete@12 __imp__RtlRunOnceComplete@12 _RtlCreateUserStack@24 __imp__RtlCreateUserStack@24 _RtlFreeUserStack@4 __imp__RtlFreeUserStack@4 _RtlAllocateMemoryZone@12 __imp__RtlAllocateMemoryZone@12 _RtlCreateMemoryZone@12 __imp__RtlCreateMemoryZone@12 _RtlDestroyMemoryZone@4 __imp__RtlDestroyMemoryZone@4 _RtlExtendMemoryZone@8 __imp__RtlExtendMemoryZone@8 _RtlLockMemoryZone@4 __imp__RtlLockMemoryZone@4 _RtlUnlockMemoryZone@4 __imp__RtlUnlockMemoryZone@4 _RtlAllocateMemoryBlockLookaside@12 __imp__RtlAllocateMemoryBlockLookaside@12 _RtlCreateMemoryBlockLookaside@20 __imp__RtlCreateMemoryBlockLookaside@20 _RtlDestroyMemoryBlockLookaside@4 __imp__RtlDestroyMemoryBlockLookaside@4 _RtlExtendMemoryBlockLookaside@8 __imp__RtlExtendMemoryBlockLookaside@8 _RtlFreeMemoryBlockLookaside@8 __imp__RtlFreeMemoryBlockLookaside@8 _RtlLockMemoryBlockLookaside@4 __imp__RtlLockMemoryBlockLookaside@4 _RtlResetMemoryBlockLookaside@4 __imp__RtlResetMemoryBlockLookaside@4 _RtlUnlockMemoryBlockLookaside@4 __imp__RtlUnlockMemoryBlockLookaside@4 _RtlLockModuleSection@4 __imp__RtlLockModuleSection@4 _RtlUnlockModuleSection@4 __imp__RtlUnlockModuleSection@4 _RtlLockCurrentThread@0 __imp__RtlLockCurrentThread@0 _RtlUnlockCurrentThread@0 __imp__RtlUnlockCurrentThread@0 _RtlCreateBoundaryDescriptor@8 __imp__RtlCreateBoundaryDescriptor@8 _RtlAddSIDToBoundaryDescriptor@8 __imp__RtlAddSIDToBoundaryDescriptor@8 _RtlAddIntegrityLabelToBoundaryDescriptor@8 __imp__RtlAddIntegrityLabelToBoundaryDescriptor@8 _RtlDeleteBoundaryDescriptor@4 __imp__RtlDeleteBoundaryDescriptor@4 _RtlSetDynamicTimeZoneInformation@4 __imp__RtlSetDynamicTimeZoneInformation@4 _RtlQueryDynamicTimeZoneInformation@4 __imp__RtlQueryDynamicTimeZoneInformation@4 _RtlpCheckDynamicTimeZoneInformation@8 __imp__RtlpCheckDynamicTimeZoneInformation@8 _NtCurrentTeb@0 __imp__NtCurrentTeb@0 _RtlInitializeExceptionChain@4 __imp__RtlInitializeExceptionChain@4 _RtlCopyContext@12 __imp__RtlCopyContext@12 _RtlCopyExtendedContext@12 __imp__RtlCopyExtendedContext@12 _RtlGetEnabledExtendedFeatures@8 __imp__RtlGetEnabledExtendedFeatures@8 _RtlGetExtendedContextLength@8 __imp__RtlGetExtendedContextLength@8 _RtlGetExtendedContextLength2@16 __imp__RtlGetExtendedContextLength2@16 _RtlInitializeExtendedContext@12 __imp__RtlInitializeExtendedContext@12 _RtlInitializeExtendedContext2@20 __imp__RtlInitializeExtendedContext2@20 _RtlLocateLegacyContext@8 __imp__RtlLocateLegacyContext@8 _RtlLocateExtendedFeature@12 __imp__RtlLocateExtendedFeature@12 _RtlLocateExtendedFeature2@16 __imp__RtlLocateExtendedFeature2@16 _RtlGetExtendedFeaturesMask@4 __imp__RtlGetExtendedFeaturesMask@4 _RtlSetExtendedFeaturesMask@12 __imp__RtlSetExtendedFeaturesMask@12 __imp__LdrSystemDllInitBlock _LdrAppxHandleIntegrityFailure@4 __imp__LdrAppxHandleIntegrityFailure@4 _PssNtCaptureSnapshot@16 __imp__PssNtCaptureSnapshot@16 _PssNtDuplicateSnapshot@20 __imp__PssNtDuplicateSnapshot@20 _PssNtFreeSnapshot@4 __imp__PssNtFreeSnapshot@4 _PssNtFreeRemoteSnapshot@8 __imp__PssNtFreeRemoteSnapshot@8 _PssNtQuerySnapshot@16 __imp__PssNtQuerySnapshot@16 _PssNtWalkSnapshot@20 __imp__PssNtWalkSnapshot@20 _PssNtFreeWalkMarker@4 __imp__PssNtFreeWalkMarker@4 _PssNtValidateDescriptor@8 __imp__PssNtValidateDescriptor@8 _RtlSetProtectedPolicy@12 __imp__RtlSetProtectedPolicy@12 _RtlQueryProtectedPolicy@8 __imp__RtlQueryProtectedPolicy@8 _RtlGuardCheckLongJumpTarget@12 __imp__RtlGuardCheckLongJumpTarget@12 _ZwAccessCheck@32 __imp__ZwAccessCheck@32 _NtAccessCheck@32 __imp__NtAccessCheck@32 _ZwWorkerFactoryWorkerReady@4 __imp__ZwWorkerFactoryWorkerReady@4 _NtWorkerFactoryWorkerReady@4 __imp__NtWorkerFactoryWorkerReady@4 _ZwAcceptConnectPort@24 __imp__ZwAcceptConnectPort@24 _NtAcceptConnectPort@24 __imp__NtAcceptConnectPort@24 _ZwYieldExecution@0 __imp__ZwYieldExecution@0 _NtYieldExecution@0 __imp__NtYieldExecution@0 _ZwWriteVirtualMemory@20 __imp__ZwWriteVirtualMemory@20 _NtWriteVirtualMemory@20 __imp__NtWriteVirtualMemory@20 _ZwWriteRequestData@24 __imp__ZwWriteRequestData@24 _NtWriteRequestData@24 __imp__NtWriteRequestData@24 _ZwWriteFileGather@36 __imp__ZwWriteFileGather@36 _NtWriteFileGather@36 __imp__NtWriteFileGather@36 _ZwWriteFile@36 __imp__ZwWriteFile@36 _NtWriteFile@36 __imp__NtWriteFile@36 _ZwWaitLowEventPair@4 __imp__ZwWaitLowEventPair@4 _NtWaitLowEventPair@4 __imp__NtWaitLowEventPair@4 _ZwWaitHighEventPair@4 __imp__ZwWaitHighEventPair@4 _NtWaitHighEventPair@4 __imp__NtWaitHighEventPair@4 _ZwWaitForWorkViaWorkerFactory@20 __imp__ZwWaitForWorkViaWorkerFactory@20 _NtWaitForWorkViaWorkerFactory@20 __imp__NtWaitForWorkViaWorkerFactory@20 _ZwWaitForSingleObject@12 __imp__ZwWaitForSingleObject@12 _NtWaitForSingleObject@12 __imp__NtWaitForSingleObject@12 _ZwWaitForMultipleObjects32@20 __imp__ZwWaitForMultipleObjects32@20 _NtWaitForMultipleObjects32@20 __imp__NtWaitForMultipleObjects32@20 _ZwWaitForMultipleObjects@20 __imp__ZwWaitForMultipleObjects@20 _NtWaitForMultipleObjects@20 __imp__NtWaitForMultipleObjects@20 _ZwWaitForKeyedEvent@16 __imp__ZwWaitForKeyedEvent@16 _NtWaitForKeyedEvent@16 __imp__NtWaitForKeyedEvent@16 _ZwWaitForDebugEvent@16 __imp__ZwWaitForDebugEvent@16 _NtWaitForDebugEvent@16 __imp__NtWaitForDebugEvent@16 _ZwWaitForAlertByThreadId@8 __imp__ZwWaitForAlertByThreadId@8 _NtWaitForAlertByThreadId@8 __imp__NtWaitForAlertByThreadId@8 _ZwVdmControl@8 __imp__ZwVdmControl@8 _NtVdmControl@8 __imp__NtVdmControl@8 _ZwUnsubscribeWnfStateChange@4 __imp__ZwUnsubscribeWnfStateChange@4 _NtUnsubscribeWnfStateChange@4 __imp__NtUnsubscribeWnfStateChange@4 _ZwUpdateWnfStateData@28 __imp__ZwUpdateWnfStateData@28 _NtUpdateWnfStateData@28 __imp__NtUpdateWnfStateData@28 _ZwUnmapViewOfSection@8 __imp__ZwUnmapViewOfSection@8 _NtUnmapViewOfSection@8 __imp__NtUnmapViewOfSection@8 _ZwUnmapViewOfSectionEx@12 __imp__ZwUnmapViewOfSectionEx@12 _NtUnmapViewOfSectionEx@12 __imp__NtUnmapViewOfSectionEx@12 _ZwUnlockVirtualMemory@16 __imp__ZwUnlockVirtualMemory@16 _NtUnlockVirtualMemory@16 __imp__NtUnlockVirtualMemory@16 _ZwUnlockFile@20 __imp__ZwUnlockFile@20 _NtUnlockFile@20 __imp__NtUnlockFile@20 _ZwUnloadKeyEx@8 __imp__ZwUnloadKeyEx@8 _NtUnloadKeyEx@8 __imp__NtUnloadKeyEx@8 _ZwUnloadKey2@8 __imp__ZwUnloadKey2@8 _NtUnloadKey2@8 __imp__NtUnloadKey2@8 _ZwUnloadKey@4 __imp__ZwUnloadKey@4 _NtUnloadKey@4 __imp__NtUnloadKey@4 _ZwUnloadDriver@4 __imp__ZwUnloadDriver@4 _NtUnloadDriver@4 __imp__NtUnloadDriver@4 _ZwUmsThreadYield@4 __imp__ZwUmsThreadYield@4 _NtUmsThreadYield@4 __imp__NtUmsThreadYield@4 _ZwTranslateFilePath@16 __imp__ZwTranslateFilePath@16 _NtTranslateFilePath@16 __imp__NtTranslateFilePath@16 _ZwTraceEvent@16 __imp__ZwTraceEvent@16 _NtTraceEvent@16 __imp__NtTraceEvent@16 _ZwTraceControl@24 __imp__ZwTraceControl@24 _NtTraceControl@24 __imp__NtTraceControl@24 _ZwThawTransactions@0 __imp__ZwThawTransactions@0 _NtThawTransactions@0 __imp__NtThawTransactions@0 _ZwThawRegistry@0 __imp__ZwThawRegistry@0 _NtThawRegistry@0 __imp__NtThawRegistry@0 _ZwTestAlert@0 __imp__ZwTestAlert@0 _NtTestAlert@0 __imp__NtTestAlert@0 _ZwTerminateThread@8 __imp__ZwTerminateThread@8 _NtTerminateThread@8 __imp__NtTerminateThread@8 _ZwTerminateProcess@8 __imp__ZwTerminateProcess@8 _NtTerminateProcess@8 __imp__NtTerminateProcess@8 _ZwTerminateJobObject@8 __imp__ZwTerminateJobObject@8 _NtTerminateJobObject@8 __imp__NtTerminateJobObject@8 _ZwTerminateEnclave@8 __imp__ZwTerminateEnclave@8 _NtTerminateEnclave@8 __imp__NtTerminateEnclave@8 _ZwSystemDebugControl@24 __imp__ZwSystemDebugControl@24 _NtSystemDebugControl@24 __imp__NtSystemDebugControl@24 _ZwSuspendThread@8 __imp__ZwSuspendThread@8 _NtSuspendThread@8 __imp__NtSuspendThread@8 _ZwSuspendProcess@4 __imp__ZwSuspendProcess@4 _NtSuspendProcess@4 __imp__NtSuspendProcess@4 _ZwSubscribeWnfStateChange@16 __imp__ZwSubscribeWnfStateChange@16 _NtSubscribeWnfStateChange@16 __imp__NtSubscribeWnfStateChange@16 _ZwStopProfile@4 __imp__ZwStopProfile@4 _NtStopProfile@4 __imp__NtStopProfile@4 _ZwStartProfile@4 __imp__ZwStartProfile@4 _NtStartProfile@4 __imp__NtStartProfile@4 _ZwSinglePhaseReject@8 __imp__ZwSinglePhaseReject@8 _NtSinglePhaseReject@8 __imp__NtSinglePhaseReject@8 _ZwSignalAndWaitForSingleObject@16 __imp__ZwSignalAndWaitForSingleObject@16 _NtSignalAndWaitForSingleObject@16 __imp__NtSignalAndWaitForSingleObject@16 _ZwShutdownWorkerFactory@8 __imp__ZwShutdownWorkerFactory@8 _NtShutdownWorkerFactory@8 __imp__NtShutdownWorkerFactory@8 _ZwShutdownSystem@4 __imp__ZwShutdownSystem@4 _NtShutdownSystem@4 __imp__NtShutdownSystem@4 _ZwSetWnfProcessNotificationEvent@4 __imp__ZwSetWnfProcessNotificationEvent@4 _NtSetWnfProcessNotificationEvent@4 __imp__NtSetWnfProcessNotificationEvent@4 _ZwSetVolumeInformationFile@20 __imp__ZwSetVolumeInformationFile@20 _NtSetVolumeInformationFile@20 __imp__NtSetVolumeInformationFile@20 _ZwSetValueKey@24 __imp__ZwSetValueKey@24 _NtSetValueKey@24 __imp__NtSetValueKey@24 _ZwSetUuidSeed@4 __imp__ZwSetUuidSeed@4 _NtSetUuidSeed@4 __imp__NtSetUuidSeed@4 _ZwSetTimerResolution@12 __imp__ZwSetTimerResolution@12 _NtSetTimerResolution@12 __imp__NtSetTimerResolution@12 _ZwSetTimerEx@16 __imp__ZwSetTimerEx@16 _NtSetTimerEx@16 __imp__NtSetTimerEx@16 _ZwSetTimer@28 __imp__ZwSetTimer@28 _NtSetTimer@28 __imp__NtSetTimer@28 _ZwSetThreadExecutionState@8 __imp__ZwSetThreadExecutionState@8 _NtSetThreadExecutionState@8 __imp__NtSetThreadExecutionState@8 _ZwSetSystemTime@8 __imp__ZwSetSystemTime@8 _NtSetSystemTime@8 __imp__NtSetSystemTime@8 _ZwSetSystemPowerState@12 __imp__ZwSetSystemPowerState@12 _NtSetSystemPowerState@12 __imp__NtSetSystemPowerState@12 _ZwSetSystemInformation@12 __imp__ZwSetSystemInformation@12 _NtSetSystemInformation@12 __imp__NtSetSystemInformation@12 _ZwSetSystemEnvironmentValueEx@20 __imp__ZwSetSystemEnvironmentValueEx@20 _NtSetSystemEnvironmentValueEx@20 __imp__NtSetSystemEnvironmentValueEx@20 _ZwSetSystemEnvironmentValue@8 __imp__ZwSetSystemEnvironmentValue@8 _NtSetSystemEnvironmentValue@8 __imp__NtSetSystemEnvironmentValue@8 _ZwSetSecurityObject@12 __imp__ZwSetSecurityObject@12 _NtSetSecurityObject@12 __imp__NtSetSecurityObject@12 _ZwSetQuotaInformationFile@16 __imp__ZwSetQuotaInformationFile@16 _NtSetQuotaInformationFile@16 __imp__NtSetQuotaInformationFile@16 _ZwSetLowWaitHighEventPair@4 __imp__ZwSetLowWaitHighEventPair@4 _NtSetLowWaitHighEventPair@4 __imp__NtSetLowWaitHighEventPair@4 _ZwSetLowEventPair@4 __imp__ZwSetLowEventPair@4 _NtSetLowEventPair@4 __imp__NtSetLowEventPair@4 _ZwSetLdtEntries@24 __imp__ZwSetLdtEntries@24 _NtSetLdtEntries@24 __imp__NtSetLdtEntries@24 _ZwSetIRTimer@8 __imp__ZwSetIRTimer@8 _NtSetIRTimer@8 __imp__NtSetIRTimer@8 _ZwSetTimer2@16 __imp__ZwSetTimer2@16 _NtSetTimer2@16 __imp__NtSetTimer2@16 _ZwCancelTimer2@8 __imp__ZwCancelTimer2@8 _NtCancelTimer2@8 __imp__NtCancelTimer2@8 _ZwSetIoCompletionEx@24 __imp__ZwSetIoCompletionEx@24 _NtSetIoCompletionEx@24 __imp__NtSetIoCompletionEx@24 _ZwSetIoCompletion@20 __imp__ZwSetIoCompletion@20 _NtSetIoCompletion@20 __imp__NtSetIoCompletion@20 _ZwSetIntervalProfile@8 __imp__ZwSetIntervalProfile@8 _NtSetIntervalProfile@8 __imp__NtSetIntervalProfile@8 _ZwSetInformationWorkerFactory@16 __imp__ZwSetInformationWorkerFactory@16 _NtSetInformationWorkerFactory@16 __imp__NtSetInformationWorkerFactory@16 _ZwSetInformationTransactionManager@16 __imp__ZwSetInformationTransactionManager@16 _NtSetInformationTransactionManager@16 __imp__NtSetInformationTransactionManager@16 _ZwSetInformationTransaction@16 __imp__ZwSetInformationTransaction@16 _NtSetInformationTransaction@16 __imp__NtSetInformationTransaction@16 _ZwSetInformationToken@16 __imp__ZwSetInformationToken@16 _NtSetInformationToken@16 __imp__NtSetInformationToken@16 _ZwSetInformationThread@16 __imp__ZwSetInformationThread@16 _NtSetInformationThread@16 __imp__NtSetInformationThread@16 _ZwSetInformationResourceManager@16 __imp__ZwSetInformationResourceManager@16 _NtSetInformationResourceManager@16 __imp__NtSetInformationResourceManager@16 _ZwSetInformationProcess@16 __imp__ZwSetInformationProcess@16 _NtSetInformationProcess@16 __imp__NtSetInformationProcess@16 _ZwSetInformationObject@16 __imp__ZwSetInformationObject@16 _NtSetInformationObject@16 __imp__NtSetInformationObject@16 _ZwSetInformationKey@16 __imp__ZwSetInformationKey@16 _NtSetInformationKey@16 __imp__NtSetInformationKey@16 _ZwSetInformationJobObject@16 __imp__ZwSetInformationJobObject@16 _NtSetInformationJobObject@16 __imp__NtSetInformationJobObject@16 _ZwSetInformationFile@20 __imp__ZwSetInformationFile@20 _NtSetInformationFile@20 __imp__NtSetInformationFile@20 _ZwSetInformationEnlistment@16 __imp__ZwSetInformationEnlistment@16 _NtSetInformationEnlistment@16 __imp__NtSetInformationEnlistment@16 _ZwSetInformationDebugObject@20 __imp__ZwSetInformationDebugObject@20 _NtSetInformationDebugObject@20 __imp__NtSetInformationDebugObject@20 _ZwSetHighWaitLowEventPair@4 __imp__ZwSetHighWaitLowEventPair@4 _NtSetHighWaitLowEventPair@4 __imp__NtSetHighWaitLowEventPair@4 _ZwSetHighEventPair@4 __imp__ZwSetHighEventPair@4 _NtSetHighEventPair@4 __imp__NtSetHighEventPair@4 _ZwSetEventBoostPriority@4 __imp__ZwSetEventBoostPriority@4 _NtSetEventBoostPriority@4 __imp__NtSetEventBoostPriority@4 _ZwSetEvent@8 __imp__ZwSetEvent@8 _NtSetEvent@8 __imp__NtSetEvent@8 _ZwSetEaFile@16 __imp__ZwSetEaFile@16 _NtSetEaFile@16 __imp__NtSetEaFile@16 _ZwSetDriverEntryOrder@8 __imp__ZwSetDriverEntryOrder@8 _NtSetDriverEntryOrder@8 __imp__NtSetDriverEntryOrder@8 _ZwSetDefaultUILanguage@4 __imp__ZwSetDefaultUILanguage@4 _NtSetDefaultUILanguage@4 __imp__NtSetDefaultUILanguage@4 _ZwSetDefaultLocale@8 __imp__ZwSetDefaultLocale@8 _NtSetDefaultLocale@8 __imp__NtSetDefaultLocale@8 _ZwSetDefaultHardErrorPort@4 __imp__ZwSetDefaultHardErrorPort@4 _NtSetDefaultHardErrorPort@4 __imp__NtSetDefaultHardErrorPort@4 _ZwSetDebugFilterState@12 __imp__ZwSetDebugFilterState@12 _NtSetDebugFilterState@12 __imp__NtSetDebugFilterState@12 _ZwSetContextThread@8 __imp__ZwSetContextThread@8 _NtSetContextThread@8 __imp__NtSetContextThread@8 _ZwSetCachedSigningLevel2@24 __imp__ZwSetCachedSigningLevel2@24 _NtSetCachedSigningLevel2@24 __imp__NtSetCachedSigningLevel2@24 _ZwSetCachedSigningLevel@20 __imp__ZwSetCachedSigningLevel@20 _NtSetCachedSigningLevel@20 __imp__NtSetCachedSigningLevel@20 _ZwSetBootOptions@8 __imp__ZwSetBootOptions@8 _NtSetBootOptions@8 __imp__NtSetBootOptions@8 _ZwSetBootEntryOrder@8 __imp__ZwSetBootEntryOrder@8 _NtSetBootEntryOrder@8 __imp__NtSetBootEntryOrder@8 _ZwSerializeBoot@0 __imp__ZwSerializeBoot@0 _NtSerializeBoot@0 __imp__NtSerializeBoot@0 _ZwSecureConnectPort@36 __imp__ZwSecureConnectPort@36 _NtSecureConnectPort@36 __imp__NtSecureConnectPort@36 _ZwSaveMergedKeys@12 __imp__ZwSaveMergedKeys@12 _NtSaveMergedKeys@12 __imp__NtSaveMergedKeys@12 _ZwSaveKeyEx@12 __imp__ZwSaveKeyEx@12 _NtSaveKeyEx@12 __imp__NtSaveKeyEx@12 _ZwSaveKey@8 __imp__ZwSaveKey@8 _NtSaveKey@8 __imp__NtSaveKey@8 _ZwRollforwardTransactionManager@8 __imp__ZwRollforwardTransactionManager@8 _NtRollforwardTransactionManager@8 __imp__NtRollforwardTransactionManager@8 _ZwRollbackTransaction@8 __imp__ZwRollbackTransaction@8 _NtRollbackTransaction@8 __imp__NtRollbackTransaction@8 _ZwRollbackEnlistment@8 __imp__ZwRollbackEnlistment@8 _NtRollbackEnlistment@8 __imp__NtRollbackEnlistment@8 _ZwRollbackComplete@8 __imp__ZwRollbackComplete@8 _NtRollbackComplete@8 __imp__NtRollbackComplete@8 _ZwRevertContainerImpersonation@0 __imp__ZwRevertContainerImpersonation@0 _NtRevertContainerImpersonation@0 __imp__NtRevertContainerImpersonation@0 _ZwResumeThread@8 __imp__ZwResumeThread@8 _NtResumeThread@8 __imp__NtResumeThread@8 _ZwResumeProcess@4 __imp__ZwResumeProcess@4 _NtResumeProcess@4 __imp__NtResumeProcess@4 _ZwRestoreKey@12 __imp__ZwRestoreKey@12 _NtRestoreKey@12 __imp__NtRestoreKey@12 _ZwResetWriteWatch@12 __imp__ZwResetWriteWatch@12 _NtResetWriteWatch@12 __imp__NtResetWriteWatch@12 _ZwResetEvent@8 __imp__ZwResetEvent@8 _NtResetEvent@8 __imp__NtResetEvent@8 _ZwRequestWaitReplyPort@12 __imp__ZwRequestWaitReplyPort@12 _NtRequestWaitReplyPort@12 __imp__NtRequestWaitReplyPort@12 _ZwRequestPort@8 __imp__ZwRequestPort@8 _NtRequestPort@8 __imp__NtRequestPort@8 _ZwReplyWaitReplyPort@8 __imp__ZwReplyWaitReplyPort@8 _NtReplyWaitReplyPort@8 __imp__NtReplyWaitReplyPort@8 _ZwReplyWaitReceivePortEx@20 __imp__ZwReplyWaitReceivePortEx@20 _NtReplyWaitReceivePortEx@20 __imp__NtReplyWaitReceivePortEx@20 _ZwReplyWaitReceivePort@16 __imp__ZwReplyWaitReceivePort@16 _NtReplyWaitReceivePort@16 __imp__NtReplyWaitReceivePort@16 _ZwReplyPort@8 __imp__ZwReplyPort@8 _NtReplyPort@8 __imp__NtReplyPort@8 _ZwReplacePartitionUnit@12 __imp__ZwReplacePartitionUnit@12 _NtReplacePartitionUnit@12 __imp__NtReplacePartitionUnit@12 _ZwReplaceKey@12 __imp__ZwReplaceKey@12 _NtReplaceKey@12 __imp__NtReplaceKey@12 _ZwRenameTransactionManager@8 __imp__ZwRenameTransactionManager@8 _NtRenameTransactionManager@8 __imp__NtRenameTransactionManager@8 _ZwRenameKey@8 __imp__ZwRenameKey@8 _NtRenameKey@8 __imp__NtRenameKey@8 _ZwRemoveProcessDebug@8 __imp__ZwRemoveProcessDebug@8 _NtRemoveProcessDebug@8 __imp__NtRemoveProcessDebug@8 _ZwRemoveIoCompletionEx@24 __imp__ZwRemoveIoCompletionEx@24 _NtRemoveIoCompletionEx@24 __imp__NtRemoveIoCompletionEx@24 _ZwRemoveIoCompletion@20 __imp__ZwRemoveIoCompletion@20 _NtRemoveIoCompletion@20 __imp__NtRemoveIoCompletion@20 _ZwReleaseWorkerFactoryWorker@4 __imp__ZwReleaseWorkerFactoryWorker@4 _NtReleaseWorkerFactoryWorker@4 __imp__NtReleaseWorkerFactoryWorker@4 _ZwReleaseSemaphore@12 __imp__ZwReleaseSemaphore@12 _NtReleaseSemaphore@12 __imp__NtReleaseSemaphore@12 _ZwReleaseMutant@8 __imp__ZwReleaseMutant@8 _NtReleaseMutant@8 __imp__NtReleaseMutant@8 _ZwReleaseKeyedEvent@16 __imp__ZwReleaseKeyedEvent@16 _NtReleaseKeyedEvent@16 __imp__NtReleaseKeyedEvent@16 _ZwRegisterThreadTerminatePort@4 __imp__ZwRegisterThreadTerminatePort@4 _NtRegisterThreadTerminatePort@4 __imp__NtRegisterThreadTerminatePort@4 _ZwRegisterProtocolAddressInformation@20 __imp__ZwRegisterProtocolAddressInformation@20 _NtRegisterProtocolAddressInformation@20 __imp__NtRegisterProtocolAddressInformation@20 _ZwRecoverTransactionManager@4 __imp__ZwRecoverTransactionManager@4 _NtRecoverTransactionManager@4 __imp__NtRecoverTransactionManager@4 _ZwRecoverResourceManager@4 __imp__ZwRecoverResourceManager@4 _NtRecoverResourceManager@4 __imp__NtRecoverResourceManager@4 _ZwRecoverEnlistment@8 __imp__ZwRecoverEnlistment@8 _NtRecoverEnlistment@8 __imp__NtRecoverEnlistment@8 _ZwReadVirtualMemory@20 __imp__ZwReadVirtualMemory@20 _NtReadVirtualMemory@20 __imp__NtReadVirtualMemory@20 _ZwReadRequestData@24 __imp__ZwReadRequestData@24 _NtReadRequestData@24 __imp__NtReadRequestData@24 _ZwReadOnlyEnlistment@8 __imp__ZwReadOnlyEnlistment@8 _NtReadOnlyEnlistment@8 __imp__NtReadOnlyEnlistment@8 _ZwReadFileScatter@36 __imp__ZwReadFileScatter@36 _NtReadFileScatter@36 __imp__NtReadFileScatter@36 _ZwReadFile@36 __imp__ZwReadFile@36 _NtReadFile@36 __imp__NtReadFile@36 _ZwRaiseHardError@24 __imp__ZwRaiseHardError@24 _NtRaiseHardError@24 __imp__NtRaiseHardError@24 _ZwRaiseException@12 __imp__ZwRaiseException@12 _NtRaiseException@12 __imp__NtRaiseException@12 _ZwQueueApcThreadEx@24 __imp__ZwQueueApcThreadEx@24 _NtQueueApcThreadEx@24 __imp__NtQueueApcThreadEx@24 _ZwQueueApcThread@20 __imp__ZwQueueApcThread@20 _NtQueueApcThread@20 __imp__NtQueueApcThread@20 _ZwQueryAuxiliaryCounterFrequency@4 __imp__ZwQueryAuxiliaryCounterFrequency@4 _NtQueryAuxiliaryCounterFrequency@4 __imp__NtQueryAuxiliaryCounterFrequency@4 _ZwQueryWnfStateData@24 __imp__ZwQueryWnfStateData@24 _NtQueryWnfStateData@24 __imp__NtQueryWnfStateData@24 _ZwQueryWnfStateNameInformation@20 __imp__ZwQueryWnfStateNameInformation@20 _NtQueryWnfStateNameInformation@20 __imp__NtQueryWnfStateNameInformation@20 _ZwQueryVolumeInformationFile@20 __imp__ZwQueryVolumeInformationFile@20 _NtQueryVolumeInformationFile@20 __imp__NtQueryVolumeInformationFile@20 _ZwQueryVirtualMemory@24 __imp__ZwQueryVirtualMemory@24 _NtQueryVirtualMemory@24 __imp__NtQueryVirtualMemory@24 _ZwQueryValueKey@24 __imp__ZwQueryValueKey@24 _NtQueryValueKey@24 __imp__NtQueryValueKey@24 _ZwQueryTimerResolution@12 __imp__ZwQueryTimerResolution@12 _NtQueryTimerResolution@12 __imp__NtQueryTimerResolution@12 _ZwQueryTimer@20 __imp__ZwQueryTimer@20 _NtQueryTimer@20 __imp__NtQueryTimer@20 _ZwQuerySystemTime@4 __imp__ZwQuerySystemTime@4 _NtQuerySystemTime@4 __imp__NtQuerySystemTime@4 _ZwQuerySystemInformationEx@24 __imp__ZwQuerySystemInformationEx@24 _NtQuerySystemInformationEx@24 __imp__NtQuerySystemInformationEx@24 _ZwQuerySystemInformation@16 __imp__ZwQuerySystemInformation@16 _NtQuerySystemInformation@16 __imp__NtQuerySystemInformation@16 _ZwQuerySystemEnvironmentValueEx@20 __imp__ZwQuerySystemEnvironmentValueEx@20 _NtQuerySystemEnvironmentValueEx@20 __imp__NtQuerySystemEnvironmentValueEx@20 _ZwQuerySystemEnvironmentValue@16 __imp__ZwQuerySystemEnvironmentValue@16 _NtQuerySystemEnvironmentValue@16 __imp__NtQuerySystemEnvironmentValue@16 _ZwQuerySymbolicLinkObject@12 __imp__ZwQuerySymbolicLinkObject@12 _NtQuerySymbolicLinkObject@12 __imp__NtQuerySymbolicLinkObject@12 _ZwQuerySemaphore@20 __imp__ZwQuerySemaphore@20 _NtQuerySemaphore@20 __imp__NtQuerySemaphore@20 _ZwQuerySecurityPolicy@24 __imp__ZwQuerySecurityPolicy@24 _NtQuerySecurityPolicy@24 __imp__NtQuerySecurityPolicy@24 _ZwQuerySecurityObject@20 __imp__ZwQuerySecurityObject@20 _NtQuerySecurityObject@20 __imp__NtQuerySecurityObject@20 _ZwQuerySecurityAttributesToken@24 __imp__ZwQuerySecurityAttributesToken@24 _NtQuerySecurityAttributesToken@24 __imp__NtQuerySecurityAttributesToken@24 _ZwQuerySection@20 __imp__ZwQuerySection@20 _NtQuerySection@20 __imp__NtQuerySection@20 _ZwQueryQuotaInformationFile@36 __imp__ZwQueryQuotaInformationFile@36 _NtQueryQuotaInformationFile@36 __imp__NtQueryQuotaInformationFile@36 _ZwQueryPortInformationProcess@0 __imp__ZwQueryPortInformationProcess@0 _NtQueryPortInformationProcess@0 __imp__NtQueryPortInformationProcess@0 _ZwQueryPerformanceCounter@8 __imp__ZwQueryPerformanceCounter@8 _NtQueryPerformanceCounter@8 __imp__NtQueryPerformanceCounter@8 _ZwQueryOpenSubKeysEx@16 __imp__ZwQueryOpenSubKeysEx@16 _NtQueryOpenSubKeysEx@16 __imp__NtQueryOpenSubKeysEx@16 _ZwQueryOpenSubKeys@8 __imp__ZwQueryOpenSubKeys@8 _NtQueryOpenSubKeys@8 __imp__NtQueryOpenSubKeys@8 _ZwQueryObject@20 __imp__ZwQueryObject@20 _NtQueryObject@20 __imp__NtQueryObject@20 _ZwQueryMutant@20 __imp__ZwQueryMutant@20 _NtQueryMutant@20 __imp__NtQueryMutant@20 _ZwQueryMultipleValueKey@24 __imp__ZwQueryMultipleValueKey@24 _NtQueryMultipleValueKey@24 __imp__NtQueryMultipleValueKey@24 _ZwQueryLicenseValue@20 __imp__ZwQueryLicenseValue@20 _NtQueryLicenseValue@20 __imp__NtQueryLicenseValue@20 _ZwQueryKey@20 __imp__ZwQueryKey@20 _NtQueryKey@20 __imp__NtQueryKey@20 _ZwQueryIoCompletion@20 __imp__ZwQueryIoCompletion@20 _NtQueryIoCompletion@20 __imp__NtQueryIoCompletion@20 _ZwQueryIntervalProfile@8 __imp__ZwQueryIntervalProfile@8 _NtQueryIntervalProfile@8 __imp__NtQueryIntervalProfile@8 _ZwQueryInstallUILanguage@4 __imp__ZwQueryInstallUILanguage@4 _NtQueryInstallUILanguage@4 __imp__NtQueryInstallUILanguage@4 _ZwQueryInformationWorkerFactory@20 __imp__ZwQueryInformationWorkerFactory@20 _NtQueryInformationWorkerFactory@20 __imp__NtQueryInformationWorkerFactory@20 _ZwQueryInformationTransactionManager@20 __imp__ZwQueryInformationTransactionManager@20 _NtQueryInformationTransactionManager@20 __imp__NtQueryInformationTransactionManager@20 _ZwQueryInformationTransaction@20 __imp__ZwQueryInformationTransaction@20 _NtQueryInformationTransaction@20 __imp__NtQueryInformationTransaction@20 _ZwQueryInformationToken@20 __imp__ZwQueryInformationToken@20 _NtQueryInformationToken@20 __imp__NtQueryInformationToken@20 _ZwQueryInformationThread@20 __imp__ZwQueryInformationThread@20 _NtQueryInformationThread@20 __imp__NtQueryInformationThread@20 _ZwQueryInformationResourceManager@20 __imp__ZwQueryInformationResourceManager@20 _NtQueryInformationResourceManager@20 __imp__NtQueryInformationResourceManager@20 _ZwQueryInformationProcess@20 __imp__ZwQueryInformationProcess@20 _NtQueryInformationProcess@20 __imp__NtQueryInformationProcess@20 _ZwQueryInformationPort@20 __imp__ZwQueryInformationPort@20 _NtQueryInformationPort@20 __imp__NtQueryInformationPort@20 _ZwQueryInformationJobObject@20 __imp__ZwQueryInformationJobObject@20 _NtQueryInformationJobObject@20 __imp__NtQueryInformationJobObject@20 _ZwQueryInformationFile@20 __imp__ZwQueryInformationFile@20 _NtQueryInformationFile@20 __imp__NtQueryInformationFile@20 _ZwQueryInformationEnlistment@20 __imp__ZwQueryInformationEnlistment@20 _NtQueryInformationEnlistment@20 __imp__NtQueryInformationEnlistment@20 _ZwQueryInformationByName@20 __imp__ZwQueryInformationByName@20 _NtQueryInformationByName@20 __imp__NtQueryInformationByName@20 _ZwQueryInformationAtom@20 __imp__ZwQueryInformationAtom@20 _NtQueryInformationAtom@20 __imp__NtQueryInformationAtom@20 _ZwQueryFullAttributesFile@8 __imp__ZwQueryFullAttributesFile@8 _NtQueryFullAttributesFile@8 __imp__NtQueryFullAttributesFile@8 _ZwQueryEvent@20 __imp__ZwQueryEvent@20 _NtQueryEvent@20 __imp__NtQueryEvent@20 _ZwQueryEaFile@36 __imp__ZwQueryEaFile@36 _NtQueryEaFile@36 __imp__NtQueryEaFile@36 _ZwQueryDriverEntryOrder@8 __imp__ZwQueryDriverEntryOrder@8 _NtQueryDriverEntryOrder@8 __imp__NtQueryDriverEntryOrder@8 _ZwQueryDirectoryObject@28 __imp__ZwQueryDirectoryObject@28 _NtQueryDirectoryObject@28 __imp__NtQueryDirectoryObject@28 _ZwQueryDirectoryFile@44 __imp__ZwQueryDirectoryFile@44 _NtQueryDirectoryFile@44 __imp__NtQueryDirectoryFile@44 _ZwQueryDirectoryFileEx@40 __imp__ZwQueryDirectoryFileEx@40 _NtQueryDirectoryFileEx@40 __imp__NtQueryDirectoryFileEx@40 _ZwQueryDefaultUILanguage@4 __imp__ZwQueryDefaultUILanguage@4 _NtQueryDefaultUILanguage@4 __imp__NtQueryDefaultUILanguage@4 _ZwQueryDefaultLocale@8 __imp__ZwQueryDefaultLocale@8 _NtQueryDefaultLocale@8 __imp__NtQueryDefaultLocale@8 _ZwQueryDebugFilterState@8 __imp__ZwQueryDebugFilterState@8 _NtQueryDebugFilterState@8 __imp__NtQueryDebugFilterState@8 _ZwQueryBootOptions@8 __imp__ZwQueryBootOptions@8 _NtQueryBootOptions@8 __imp__NtQueryBootOptions@8 _ZwQueryBootEntryOrder@8 __imp__ZwQueryBootEntryOrder@8 _NtQueryBootEntryOrder@8 __imp__NtQueryBootEntryOrder@8 _ZwQueryAttributesFile@8 __imp__ZwQueryAttributesFile@8 _NtQueryAttributesFile@8 __imp__NtQueryAttributesFile@8 _ZwPulseEvent@8 __imp__ZwPulseEvent@8 _NtPulseEvent@8 __imp__NtPulseEvent@8 _ZwProtectVirtualMemory@20 __imp__ZwProtectVirtualMemory@20 _NtProtectVirtualMemory@20 __imp__NtProtectVirtualMemory@20 _ZwPropagationFailed@12 __imp__ZwPropagationFailed@12 _NtPropagationFailed@12 __imp__NtPropagationFailed@12 _ZwPropagationComplete@16 __imp__ZwPropagationComplete@16 _NtPropagationComplete@16 __imp__NtPropagationComplete@16 _ZwPrivilegeObjectAuditAlarm@24 __imp__ZwPrivilegeObjectAuditAlarm@24 _NtPrivilegeObjectAuditAlarm@24 __imp__NtPrivilegeObjectAuditAlarm@24 _ZwPrivilegedServiceAuditAlarm@20 __imp__ZwPrivilegedServiceAuditAlarm@20 _NtPrivilegedServiceAuditAlarm@20 __imp__NtPrivilegedServiceAuditAlarm@20 _ZwPrivilegeCheck@12 __imp__ZwPrivilegeCheck@12 _NtPrivilegeCheck@12 __imp__NtPrivilegeCheck@12 _ZwSetInformationVirtualMemory@24 __imp__ZwSetInformationVirtualMemory@24 _NtSetInformationVirtualMemory@24 __imp__NtSetInformationVirtualMemory@24 _ZwPrePrepareEnlistment@8 __imp__ZwPrePrepareEnlistment@8 _NtPrePrepareEnlistment@8 __imp__NtPrePrepareEnlistment@8 _ZwPrePrepareComplete@8 __imp__ZwPrePrepareComplete@8 _NtPrePrepareComplete@8 __imp__NtPrePrepareComplete@8 _ZwPrepareEnlistment@8 __imp__ZwPrepareEnlistment@8 _NtPrepareEnlistment@8 __imp__NtPrepareEnlistment@8 _ZwPrepareComplete@8 __imp__ZwPrepareComplete@8 _NtPrepareComplete@8 __imp__NtPrepareComplete@8 _ZwPowerInformation@20 __imp__ZwPowerInformation@20 _NtPowerInformation@20 __imp__NtPowerInformation@20 _ZwPlugPlayControl@12 __imp__ZwPlugPlayControl@12 _NtPlugPlayControl@12 __imp__NtPlugPlayControl@12 _ZwOpenTransactionManager@24 __imp__ZwOpenTransactionManager@24 _NtOpenTransactionManager@24 __imp__NtOpenTransactionManager@24 _ZwOpenTransaction@20 __imp__ZwOpenTransaction@20 _NtOpenTransaction@20 __imp__NtOpenTransaction@20 _ZwOpenTimer@12 __imp__ZwOpenTimer@12 _NtOpenTimer@12 __imp__NtOpenTimer@12 _ZwOpenThreadTokenEx@20 __imp__ZwOpenThreadTokenEx@20 _NtOpenThreadTokenEx@20 __imp__NtOpenThreadTokenEx@20 _ZwOpenThreadToken@16 __imp__ZwOpenThreadToken@16 _NtOpenThreadToken@16 __imp__NtOpenThreadToken@16 _ZwOpenThread@16 __imp__ZwOpenThread@16 _NtOpenThread@16 __imp__NtOpenThread@16 _ZwOpenSymbolicLinkObject@12 __imp__ZwOpenSymbolicLinkObject@12 _NtOpenSymbolicLinkObject@12 __imp__NtOpenSymbolicLinkObject@12 _ZwOpenSession@12 __imp__ZwOpenSession@12 _NtOpenSession@12 __imp__NtOpenSession@12 _ZwOpenSemaphore@12 __imp__ZwOpenSemaphore@12 _NtOpenSemaphore@12 __imp__NtOpenSemaphore@12 _ZwOpenSection@12 __imp__ZwOpenSection@12 _NtOpenSection@12 __imp__NtOpenSection@12 _ZwOpenResourceManager@20 __imp__ZwOpenResourceManager@20 _NtOpenResourceManager@20 __imp__NtOpenResourceManager@20 _ZwOpenPartition@12 __imp__ZwOpenPartition@12 _NtOpenPartition@12 __imp__NtOpenPartition@12 _ZwOpenProcessTokenEx@16 __imp__ZwOpenProcessTokenEx@16 _NtOpenProcessTokenEx@16 __imp__NtOpenProcessTokenEx@16 _ZwOpenProcessToken@12 __imp__ZwOpenProcessToken@12 _NtOpenProcessToken@12 __imp__NtOpenProcessToken@12 _ZwOpenProcess@16 __imp__ZwOpenProcess@16 _NtOpenProcess@16 __imp__NtOpenProcess@16 _ZwOpenPrivateNamespace@16 __imp__ZwOpenPrivateNamespace@16 _NtOpenPrivateNamespace@16 __imp__NtOpenPrivateNamespace@16 _ZwOpenObjectAuditAlarm@48 __imp__ZwOpenObjectAuditAlarm@48 _NtOpenObjectAuditAlarm@48 __imp__NtOpenObjectAuditAlarm@48 _ZwOpenMutant@12 __imp__ZwOpenMutant@12 _NtOpenMutant@12 __imp__NtOpenMutant@12 _ZwOpenKeyTransactedEx@20 __imp__ZwOpenKeyTransactedEx@20 _NtOpenKeyTransactedEx@20 __imp__NtOpenKeyTransactedEx@20 _ZwOpenKeyTransacted@16 __imp__ZwOpenKeyTransacted@16 _NtOpenKeyTransacted@16 __imp__NtOpenKeyTransacted@16 _ZwOpenKeyEx@16 __imp__ZwOpenKeyEx@16 _NtOpenKeyEx@16 __imp__NtOpenKeyEx@16 _ZwOpenKeyedEvent@12 __imp__ZwOpenKeyedEvent@12 _NtOpenKeyedEvent@12 __imp__NtOpenKeyedEvent@12 _ZwOpenKey@12 __imp__ZwOpenKey@12 _NtOpenKey@12 __imp__NtOpenKey@12 _ZwOpenJobObject@12 __imp__ZwOpenJobObject@12 _NtOpenJobObject@12 __imp__NtOpenJobObject@12 _ZwOpenIoCompletion@12 __imp__ZwOpenIoCompletion@12 _NtOpenIoCompletion@12 __imp__NtOpenIoCompletion@12 _ZwOpenFile@24 __imp__ZwOpenFile@24 _NtOpenFile@24 __imp__NtOpenFile@24 _ZwOpenEventPair@12 __imp__ZwOpenEventPair@12 _NtOpenEventPair@12 __imp__NtOpenEventPair@12 _ZwOpenEvent@12 __imp__ZwOpenEvent@12 _NtOpenEvent@12 __imp__NtOpenEvent@12 _ZwOpenEnlistment@20 __imp__ZwOpenEnlistment@20 _NtOpenEnlistment@20 __imp__NtOpenEnlistment@20 _ZwOpenDirectoryObject@12 __imp__ZwOpenDirectoryObject@12 _NtOpenDirectoryObject@12 __imp__NtOpenDirectoryObject@12 _ZwNotifyChangeSession@32 __imp__ZwNotifyChangeSession@32 _NtNotifyChangeSession@32 __imp__NtNotifyChangeSession@32 _ZwNotifyChangeMultipleKeys@48 __imp__ZwNotifyChangeMultipleKeys@48 _NtNotifyChangeMultipleKeys@48 __imp__NtNotifyChangeMultipleKeys@48 _ZwNotifyChangeKey@40 __imp__ZwNotifyChangeKey@40 _NtNotifyChangeKey@40 __imp__NtNotifyChangeKey@40 _ZwNotifyChangeDirectoryFile@36 __imp__ZwNotifyChangeDirectoryFile@36 _NtNotifyChangeDirectoryFile@36 __imp__NtNotifyChangeDirectoryFile@36 _ZwNotifyChangeDirectoryFileEx@40 __imp__ZwNotifyChangeDirectoryFileEx@40 _NtNotifyChangeDirectoryFileEx@40 __imp__NtNotifyChangeDirectoryFileEx@40 _ZwManagePartition@20 __imp__ZwManagePartition@20 _NtManagePartition@20 __imp__NtManagePartition@20 _ZwModifyDriverEntry@4 __imp__ZwModifyDriverEntry@4 _NtModifyDriverEntry@4 __imp__NtModifyDriverEntry@4 _ZwModifyBootEntry@4 __imp__ZwModifyBootEntry@4 _NtModifyBootEntry@4 __imp__NtModifyBootEntry@4 _ZwMapViewOfSection@40 __imp__ZwMapViewOfSection@40 _NtMapViewOfSection@40 __imp__NtMapViewOfSection@40 _ZwMapUserPhysicalPagesScatter@12 __imp__ZwMapUserPhysicalPagesScatter@12 _NtMapUserPhysicalPagesScatter@12 __imp__NtMapUserPhysicalPagesScatter@12 _ZwMapUserPhysicalPages@12 __imp__ZwMapUserPhysicalPages@12 _NtMapUserPhysicalPages@12 __imp__NtMapUserPhysicalPages@12 _ZwMapCMFModule@24 __imp__ZwMapCMFModule@24 _NtMapCMFModule@24 __imp__NtMapCMFModule@24 _ZwMakeTemporaryObject@4 __imp__ZwMakeTemporaryObject@4 _NtMakeTemporaryObject@4 __imp__NtMakeTemporaryObject@4 _ZwMakePermanentObject@4 __imp__ZwMakePermanentObject@4 _NtMakePermanentObject@4 __imp__NtMakePermanentObject@4 _ZwLockVirtualMemory@16 __imp__ZwLockVirtualMemory@16 _NtLockVirtualMemory@16 __imp__NtLockVirtualMemory@16 _ZwLockRegistryKey@4 __imp__ZwLockRegistryKey@4 _NtLockRegistryKey@4 __imp__NtLockRegistryKey@4 _ZwLockProductActivationKeys@8 __imp__ZwLockProductActivationKeys@8 _NtLockProductActivationKeys@8 __imp__NtLockProductActivationKeys@8 _ZwLockFile@40 __imp__ZwLockFile@40 _NtLockFile@40 __imp__NtLockFile@40 _ZwLoadKeyEx@32 __imp__ZwLoadKeyEx@32 _NtLoadKeyEx@32 __imp__NtLoadKeyEx@32 _ZwLoadKey2@12 __imp__ZwLoadKey2@12 _NtLoadKey2@12 __imp__NtLoadKey2@12 _ZwLoadKey@8 __imp__ZwLoadKey@8 _NtLoadKey@8 __imp__NtLoadKey@8 _ZwLoadEnclaveData@36 __imp__ZwLoadEnclaveData@36 _NtLoadEnclaveData@36 __imp__NtLoadEnclaveData@36 _ZwLoadDriver@4 __imp__ZwLoadDriver@4 _NtLoadDriver@4 __imp__NtLoadDriver@4 _ZwListenPort@8 __imp__ZwListenPort@8 _NtListenPort@8 __imp__NtListenPort@8 _ZwIsUILanguageComitted@0 __imp__ZwIsUILanguageComitted@0 _NtIsUILanguageComitted@0 __imp__NtIsUILanguageComitted@0 _ZwIsSystemResumeAutomatic@0 __imp__ZwIsSystemResumeAutomatic@0 _NtIsSystemResumeAutomatic@0 __imp__NtIsSystemResumeAutomatic@0 _ZwIsProcessInJob@8 __imp__ZwIsProcessInJob@8 _NtIsProcessInJob@8 __imp__NtIsProcessInJob@8 _ZwInitiatePowerAction@16 __imp__ZwInitiatePowerAction@16 _NtInitiatePowerAction@16 __imp__NtInitiatePowerAction@16 _ZwInitializeRegistry@4 __imp__ZwInitializeRegistry@4 _NtInitializeRegistry@4 __imp__NtInitializeRegistry@4 _ZwInitializeNlsFiles@12 __imp__ZwInitializeNlsFiles@12 _NtInitializeNlsFiles@12 __imp__NtInitializeNlsFiles@12 _ZwInitializeEnclave@20 __imp__ZwInitializeEnclave@20 _NtInitializeEnclave@20 __imp__NtInitializeEnclave@20 _ZwImpersonateThread@12 __imp__ZwImpersonateThread@12 _NtImpersonateThread@12 __imp__NtImpersonateThread@12 _ZwImpersonateClientOfPort@8 __imp__ZwImpersonateClientOfPort@8 _NtImpersonateClientOfPort@8 __imp__NtImpersonateClientOfPort@8 _ZwImpersonateAnonymousToken@4 __imp__ZwImpersonateAnonymousToken@4 _NtImpersonateAnonymousToken@4 __imp__NtImpersonateAnonymousToken@4 _ZwGetWriteWatch@28 __imp__ZwGetWriteWatch@28 _NtGetWriteWatch@28 __imp__NtGetWriteWatch@28 _ZwGetNotificationResourceManager@28 __imp__ZwGetNotificationResourceManager@28 _NtGetNotificationResourceManager@28 __imp__NtGetNotificationResourceManager@28 _ZwGetNlsSectionPtr@20 __imp__ZwGetNlsSectionPtr@20 _NtGetNlsSectionPtr@20 __imp__NtGetNlsSectionPtr@20 _ZwGetNextThread@24 __imp__ZwGetNextThread@24 _NtGetNextThread@24 __imp__NtGetNextThread@24 _ZwGetNextProcess@20 __imp__ZwGetNextProcess@20 _NtGetNextProcess@20 __imp__NtGetNextProcess@20 _ZwGetMUIRegistryInfo@12 __imp__ZwGetMUIRegistryInfo@12 _NtGetMUIRegistryInfo@12 __imp__NtGetMUIRegistryInfo@12 _ZwGetDevicePowerState@8 __imp__ZwGetDevicePowerState@8 _NtGetDevicePowerState@8 __imp__NtGetDevicePowerState@8 _ZwGetCurrentProcessorNumberEx@4 __imp__ZwGetCurrentProcessorNumberEx@4 _NtGetCurrentProcessorNumberEx@4 __imp__NtGetCurrentProcessorNumberEx@4 _ZwGetCurrentProcessorNumber@0 __imp__ZwGetCurrentProcessorNumber@0 _NtGetCurrentProcessorNumber@0 __imp__NtGetCurrentProcessorNumber@0 _ZwGetContextThread@8 __imp__ZwGetContextThread@8 _NtGetContextThread@8 __imp__NtGetContextThread@8 _ZwGetCompleteWnfStateSubscription@24 __imp__ZwGetCompleteWnfStateSubscription@24 _NtGetCompleteWnfStateSubscription@24 __imp__NtGetCompleteWnfStateSubscription@24 _ZwGetCachedSigningLevel@24 __imp__ZwGetCachedSigningLevel@24 _NtGetCachedSigningLevel@24 __imp__NtGetCachedSigningLevel@24 _ZwFsControlFile@40 __imp__ZwFsControlFile@40 _NtFsControlFile@40 __imp__NtFsControlFile@40 _ZwFreezeTransactions@8 __imp__ZwFreezeTransactions@8 _NtFreezeTransactions@8 __imp__NtFreezeTransactions@8 _ZwFreezeRegistry@4 __imp__ZwFreezeRegistry@4 _NtFreezeRegistry@4 __imp__NtFreezeRegistry@4 _ZwFreeVirtualMemory@16 __imp__ZwFreeVirtualMemory@16 _NtFreeVirtualMemory@16 __imp__NtFreeVirtualMemory@16 _ZwFreeUserPhysicalPages@12 __imp__ZwFreeUserPhysicalPages@12 _NtFreeUserPhysicalPages@12 __imp__NtFreeUserPhysicalPages@12 _ZwFlushWriteBuffer@0 __imp__ZwFlushWriteBuffer@0 _NtFlushWriteBuffer@0 __imp__NtFlushWriteBuffer@0 _ZwFlushVirtualMemory@16 __imp__ZwFlushVirtualMemory@16 _NtFlushVirtualMemory@16 __imp__NtFlushVirtualMemory@16 _ZwFlushProcessWriteBuffers@0 __imp__ZwFlushProcessWriteBuffers@0 _NtFlushProcessWriteBuffers@0 __imp__NtFlushProcessWriteBuffers@0 _ZwFlushKey@4 __imp__ZwFlushKey@4 _NtFlushKey@4 __imp__NtFlushKey@4 _ZwFlushInstructionCache@12 __imp__ZwFlushInstructionCache@12 _NtFlushInstructionCache@12 __imp__NtFlushInstructionCache@12 _ZwFlushInstallUILanguage@8 __imp__ZwFlushInstallUILanguage@8 _NtFlushInstallUILanguage@8 __imp__NtFlushInstallUILanguage@8 _ZwFlushBuffersFile@8 __imp__ZwFlushBuffersFile@8 _NtFlushBuffersFile@8 __imp__NtFlushBuffersFile@8 _ZwFlushBuffersFileEx@20 __imp__ZwFlushBuffersFileEx@20 _NtFlushBuffersFileEx@20 __imp__NtFlushBuffersFileEx@20 _ZwFindAtom@12 __imp__ZwFindAtom@12 _NtFindAtom@12 __imp__NtFindAtom@12 _ZwFilterToken@24 __imp__ZwFilterToken@24 _NtFilterToken@24 __imp__NtFilterToken@24 _ZwFilterTokenEx@56 __imp__ZwFilterTokenEx@56 _NtFilterTokenEx@56 __imp__NtFilterTokenEx@56 _ZwFilterBootOption@20 __imp__ZwFilterBootOption@20 _NtFilterBootOption@20 __imp__NtFilterBootOption@20 _ZwExtendSection@8 __imp__ZwExtendSection@8 _NtExtendSection@8 __imp__NtExtendSection@8 _ZwEnumerateValueKey@24 __imp__ZwEnumerateValueKey@24 _NtEnumerateValueKey@24 __imp__NtEnumerateValueKey@24 _ZwEnumerateTransactionObject@20 __imp__ZwEnumerateTransactionObject@20 _NtEnumerateTransactionObject@20 __imp__NtEnumerateTransactionObject@20 _ZwEnumerateSystemEnvironmentValuesEx@12 __imp__ZwEnumerateSystemEnvironmentValuesEx@12 _NtEnumerateSystemEnvironmentValuesEx@12 __imp__NtEnumerateSystemEnvironmentValuesEx@12 _ZwEnumerateKey@24 __imp__ZwEnumerateKey@24 _NtEnumerateKey@24 __imp__NtEnumerateKey@24 _ZwEnumerateDriverEntries@8 __imp__ZwEnumerateDriverEntries@8 _NtEnumerateDriverEntries@8 __imp__NtEnumerateDriverEntries@8 _ZwEnumerateBootEntries@8 __imp__ZwEnumerateBootEntries@8 _NtEnumerateBootEntries@8 __imp__NtEnumerateBootEntries@8 _ZwEnableLastKnownGood@0 __imp__ZwEnableLastKnownGood@0 _NtEnableLastKnownGood@0 __imp__NtEnableLastKnownGood@0 _ZwDuplicateToken@24 __imp__ZwDuplicateToken@24 _NtDuplicateToken@24 __imp__NtDuplicateToken@24 _ZwDuplicateObject@28 __imp__ZwDuplicateObject@28 _NtDuplicateObject@28 __imp__NtDuplicateObject@28 _ZwDrawText@4 __imp__ZwDrawText@4 _NtDrawText@4 __imp__NtDrawText@4 _ZwDisplayString@4 __imp__ZwDisplayString@4 _NtDisplayString@4 __imp__NtDisplayString@4 _ZwDisableLastKnownGood@0 __imp__ZwDisableLastKnownGood@0 _NtDisableLastKnownGood@0 __imp__NtDisableLastKnownGood@0 _ZwDeviceIoControlFile@40 __imp__ZwDeviceIoControlFile@40 _NtDeviceIoControlFile@40 __imp__NtDeviceIoControlFile@40 _ZwDeleteWnfStateName@4 __imp__ZwDeleteWnfStateName@4 _NtDeleteWnfStateName@4 __imp__NtDeleteWnfStateName@4 _ZwDeleteWnfStateData@8 __imp__ZwDeleteWnfStateData@8 _NtDeleteWnfStateData@8 __imp__NtDeleteWnfStateData@8 _ZwDeleteValueKey@8 __imp__ZwDeleteValueKey@8 _NtDeleteValueKey@8 __imp__NtDeleteValueKey@8 _ZwDeletePrivateNamespace@4 __imp__ZwDeletePrivateNamespace@4 _NtDeletePrivateNamespace@4 __imp__NtDeletePrivateNamespace@4 _ZwDeleteObjectAuditAlarm@12 __imp__ZwDeleteObjectAuditAlarm@12 _NtDeleteObjectAuditAlarm@12 __imp__NtDeleteObjectAuditAlarm@12 _ZwDeleteKey@4 __imp__ZwDeleteKey@4 _NtDeleteKey@4 __imp__NtDeleteKey@4 _ZwDeleteFile@4 __imp__ZwDeleteFile@4 _NtDeleteFile@4 __imp__NtDeleteFile@4 _ZwDeleteDriverEntry@4 __imp__ZwDeleteDriverEntry@4 _NtDeleteDriverEntry@4 __imp__NtDeleteDriverEntry@4 _ZwDeleteBootEntry@4 __imp__ZwDeleteBootEntry@4 _NtDeleteBootEntry@4 __imp__NtDeleteBootEntry@4 _ZwDeleteAtom@4 __imp__ZwDeleteAtom@4 _NtDeleteAtom@4 __imp__NtDeleteAtom@4 _ZwDelayExecution@8 __imp__ZwDelayExecution@8 _NtDelayExecution@8 __imp__NtDelayExecution@8 _ZwDebugContinue@12 __imp__ZwDebugContinue@12 _NtDebugContinue@12 __imp__NtDebugContinue@12 _ZwDebugActiveProcess@8 __imp__ZwDebugActiveProcess@8 _NtDebugActiveProcess@8 __imp__NtDebugActiveProcess@8 _ZwCreatePartition@16 __imp__ZwCreatePartition@16 _NtCreatePartition@16 __imp__NtCreatePartition@16 _ZwCreateWorkerFactory@40 __imp__ZwCreateWorkerFactory@40 _NtCreateWorkerFactory@40 __imp__NtCreateWorkerFactory@40 _ZwCreateWnfStateName@28 __imp__ZwCreateWnfStateName@28 _NtCreateWnfStateName@28 __imp__NtCreateWnfStateName@28 _ZwCreateWaitCompletionPacket@12 __imp__ZwCreateWaitCompletionPacket@12 _NtCreateWaitCompletionPacket@12 __imp__NtCreateWaitCompletionPacket@12 _ZwCreateWaitablePort@20 __imp__ZwCreateWaitablePort@20 _NtCreateWaitablePort@20 __imp__NtCreateWaitablePort@20 _ZwCreateUserProcess@44 __imp__ZwCreateUserProcess@44 _NtCreateUserProcess@44 __imp__NtCreateUserProcess@44 _ZwCreateTransactionManager@24 __imp__ZwCreateTransactionManager@24 _NtCreateTransactionManager@24 __imp__NtCreateTransactionManager@24 _ZwCreateTransaction@40 __imp__ZwCreateTransaction@40 _NtCreateTransaction@40 __imp__NtCreateTransaction@40 _ZwCreateToken@52 __imp__ZwCreateToken@52 _NtCreateToken@52 __imp__NtCreateToken@52 _ZwCreateLowBoxToken@36 __imp__ZwCreateLowBoxToken@36 _NtCreateLowBoxToken@36 __imp__NtCreateLowBoxToken@36 _ZwCreateTokenEx@68 __imp__ZwCreateTokenEx@68 _NtCreateTokenEx@68 __imp__NtCreateTokenEx@68 _ZwCreateTimer@16 __imp__ZwCreateTimer@16 _NtCreateTimer@16 __imp__NtCreateTimer@16 _ZwCreateThreadEx@44 __imp__ZwCreateThreadEx@44 _NtCreateThreadEx@44 __imp__NtCreateThreadEx@44 _ZwCreateThread@32 __imp__ZwCreateThread@32 _NtCreateThread@32 __imp__NtCreateThread@32 _ZwCreateSymbolicLinkObject@16 __imp__ZwCreateSymbolicLinkObject@16 _NtCreateSymbolicLinkObject@16 __imp__NtCreateSymbolicLinkObject@16 _ZwCreateSemaphore@20 __imp__ZwCreateSemaphore@20 _NtCreateSemaphore@20 __imp__NtCreateSemaphore@20 _ZwCreateSection@28 __imp__ZwCreateSection@28 _NtCreateSection@28 __imp__NtCreateSection@28 _ZwCreateSectionEx@36 __imp__ZwCreateSectionEx@36 _NtCreateSectionEx@36 __imp__NtCreateSectionEx@36 _ZwCreateResourceManager@28 __imp__ZwCreateResourceManager@28 _NtCreateResourceManager@28 __imp__NtCreateResourceManager@28 _ZwCreateProfileEx@40 __imp__ZwCreateProfileEx@40 _NtCreateProfileEx@40 __imp__NtCreateProfileEx@40 _ZwCreateProfile@36 __imp__ZwCreateProfile@36 _NtCreateProfile@36 __imp__NtCreateProfile@36 _ZwCreateProcessEx@36 __imp__ZwCreateProcessEx@36 _NtCreateProcessEx@36 __imp__NtCreateProcessEx@36 _ZwCreateProcess@32 __imp__ZwCreateProcess@32 _NtCreateProcess@32 __imp__NtCreateProcess@32 _ZwCreatePrivateNamespace@16 __imp__ZwCreatePrivateNamespace@16 _NtCreatePrivateNamespace@16 __imp__NtCreatePrivateNamespace@16 _ZwCreatePort@20 __imp__ZwCreatePort@20 _NtCreatePort@20 __imp__NtCreatePort@20 _ZwCreatePagingFile@16 __imp__ZwCreatePagingFile@16 _NtCreatePagingFile@16 __imp__NtCreatePagingFile@16 _ZwCreateNamedPipeFile@56 __imp__ZwCreateNamedPipeFile@56 _NtCreateNamedPipeFile@56 __imp__NtCreateNamedPipeFile@56 _ZwCreateMutant@16 __imp__ZwCreateMutant@16 _NtCreateMutant@16 __imp__NtCreateMutant@16 _ZwCreateMailslotFile@32 __imp__ZwCreateMailslotFile@32 _NtCreateMailslotFile@32 __imp__NtCreateMailslotFile@32 _ZwCreateKeyTransacted@32 __imp__ZwCreateKeyTransacted@32 _NtCreateKeyTransacted@32 __imp__NtCreateKeyTransacted@32 _ZwCreateKeyedEvent@16 __imp__ZwCreateKeyedEvent@16 _NtCreateKeyedEvent@16 __imp__NtCreateKeyedEvent@16 _ZwCreateKey@28 __imp__ZwCreateKey@28 _NtCreateKey@28 __imp__NtCreateKey@28 _ZwCreateJobSet@12 __imp__ZwCreateJobSet@12 _NtCreateJobSet@12 __imp__NtCreateJobSet@12 _ZwCreateJobObject@12 __imp__ZwCreateJobObject@12 _NtCreateJobObject@12 __imp__NtCreateJobObject@12 _ZwCreateIRTimer@12 __imp__ZwCreateIRTimer@12 _NtCreateIRTimer@12 __imp__NtCreateIRTimer@12 _ZwCreateTimer2@20 __imp__ZwCreateTimer2@20 _NtCreateTimer2@20 __imp__NtCreateTimer2@20 _ZwCreateIoCompletion@16 __imp__ZwCreateIoCompletion@16 _NtCreateIoCompletion@16 __imp__NtCreateIoCompletion@16 _ZwCreateFile@44 __imp__ZwCreateFile@44 _NtCreateFile@44 __imp__NtCreateFile@44 _ZwCreateEventPair@12 __imp__ZwCreateEventPair@12 _NtCreateEventPair@12 __imp__NtCreateEventPair@12 _ZwCreateEvent@20 __imp__ZwCreateEvent@20 _NtCreateEvent@20 __imp__NtCreateEvent@20 _ZwCreateEnlistment@32 __imp__ZwCreateEnlistment@32 _NtCreateEnlistment@32 __imp__NtCreateEnlistment@32 _ZwCreateEnclave@36 __imp__ZwCreateEnclave@36 _NtCreateEnclave@36 __imp__NtCreateEnclave@36 _ZwCreateDirectoryObjectEx@20 __imp__ZwCreateDirectoryObjectEx@20 _NtCreateDirectoryObjectEx@20 __imp__NtCreateDirectoryObjectEx@20 _ZwCreateDirectoryObject@12 __imp__ZwCreateDirectoryObject@12 _NtCreateDirectoryObject@12 __imp__NtCreateDirectoryObject@12 _ZwCreateDebugObject@16 __imp__ZwCreateDebugObject@16 _NtCreateDebugObject@16 __imp__NtCreateDebugObject@16 _ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter@16 __imp__ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter@16 _NtConvertBetweenAuxiliaryCounterAndPerformanceCounter@16 __imp__NtConvertBetweenAuxiliaryCounterAndPerformanceCounter@16 _ZwContinue@8 __imp__ZwContinue@8 _NtContinue@8 __imp__NtContinue@8 _ZwContinueEx@8 __imp__ZwContinueEx@8 _NtContinueEx@8 __imp__NtContinueEx@8 _ZwConnectPort@32 __imp__ZwConnectPort@32 _NtConnectPort@32 __imp__NtConnectPort@32 _ZwCompressKey@4 __imp__ZwCompressKey@4 _NtCompressKey@4 __imp__NtCompressKey@4 _ZwCompleteConnectPort@4 __imp__ZwCompleteConnectPort@4 _NtCompleteConnectPort@4 __imp__NtCompleteConnectPort@4 _ZwCompareTokens@12 __imp__ZwCompareTokens@12 _NtCompareTokens@12 __imp__NtCompareTokens@12 _ZwCompareSigningLevels@8 __imp__ZwCompareSigningLevels@8 _NtCompareSigningLevels@8 __imp__NtCompareSigningLevels@8 _ZwCompareObjects@8 __imp__ZwCompareObjects@8 _NtCompareObjects@8 __imp__NtCompareObjects@8 _ZwCompactKeys@8 __imp__ZwCompactKeys@8 _NtCompactKeys@8 __imp__NtCompactKeys@8 _ZwCommitTransaction@8 __imp__ZwCommitTransaction@8 _NtCommitTransaction@8 __imp__NtCommitTransaction@8 _ZwCommitEnlistment@8 __imp__ZwCommitEnlistment@8 _NtCommitEnlistment@8 __imp__NtCommitEnlistment@8 _ZwCommitComplete@8 __imp__ZwCommitComplete@8 _NtCommitComplete@8 __imp__NtCommitComplete@8 _ZwCloseObjectAuditAlarm@12 __imp__ZwCloseObjectAuditAlarm@12 _NtCloseObjectAuditAlarm@12 __imp__NtCloseObjectAuditAlarm@12 _ZwClose@4 __imp__ZwClose@4 _NtClose@4 __imp__NtClose@4 _ZwClearEvent@4 __imp__ZwClearEvent@4 _NtClearEvent@4 __imp__NtClearEvent@4 _ZwCancelWaitCompletionPacket@8 __imp__ZwCancelWaitCompletionPacket@8 _NtCancelWaitCompletionPacket@8 __imp__NtCancelWaitCompletionPacket@8 _ZwCancelTimer@8 __imp__ZwCancelTimer@8 _NtCancelTimer@8 __imp__NtCancelTimer@8 _ZwCancelSynchronousIoFile@12 __imp__ZwCancelSynchronousIoFile@12 _NtCancelSynchronousIoFile@12 __imp__NtCancelSynchronousIoFile@12 _ZwCancelIoFileEx@12 __imp__ZwCancelIoFileEx@12 _NtCancelIoFileEx@12 __imp__NtCancelIoFileEx@12 _ZwCancelIoFile@8 __imp__ZwCancelIoFile@8 _NtCancelIoFile@8 __imp__NtCancelIoFile@8 _ZwCallEnclave@16 __imp__ZwCallEnclave@16 _NtCallEnclave@16 __imp__NtCallEnclave@16 _ZwCallbackReturn@12 __imp__ZwCallbackReturn@12 _NtCallbackReturn@12 __imp__NtCallbackReturn@12 _ZwAssociateWaitCompletionPacket@32 __imp__ZwAssociateWaitCompletionPacket@32 _NtAssociateWaitCompletionPacket@32 __imp__NtAssociateWaitCompletionPacket@32 _ZwAssignProcessToJobObject@8 __imp__ZwAssignProcessToJobObject@8 _NtAssignProcessToJobObject@8 __imp__NtAssignProcessToJobObject@8 _ZwAreMappedFilesTheSame@8 __imp__ZwAreMappedFilesTheSame@8 _NtAreMappedFilesTheSame@8 __imp__NtAreMappedFilesTheSame@8 _ZwApphelpCacheControl@8 __imp__ZwApphelpCacheControl@8 _NtApphelpCacheControl@8 __imp__NtApphelpCacheControl@8 _ZwAlpcSetInformation@16 __imp__ZwAlpcSetInformation@16 _NtAlpcSetInformation@16 __imp__NtAlpcSetInformation@16 _ZwAlpcSendWaitReceivePort@32 __imp__ZwAlpcSendWaitReceivePort@32 _NtAlpcSendWaitReceivePort@32 __imp__NtAlpcSendWaitReceivePort@32 _ZwAlpcRevokeSecurityContext@12 __imp__ZwAlpcRevokeSecurityContext@12 _NtAlpcRevokeSecurityContext@12 __imp__NtAlpcRevokeSecurityContext@12 _ZwAlpcQueryInformationMessage@24 __imp__ZwAlpcQueryInformationMessage@24 _NtAlpcQueryInformationMessage@24 __imp__NtAlpcQueryInformationMessage@24 _ZwAlpcQueryInformation@20 __imp__ZwAlpcQueryInformation@20 _NtAlpcQueryInformation@20 __imp__NtAlpcQueryInformation@20 _ZwAlpcOpenSenderThread@24 __imp__ZwAlpcOpenSenderThread@24 _NtAlpcOpenSenderThread@24 __imp__NtAlpcOpenSenderThread@24 _ZwAlpcOpenSenderProcess@24 __imp__ZwAlpcOpenSenderProcess@24 _NtAlpcOpenSenderProcess@24 __imp__NtAlpcOpenSenderProcess@24 _ZwAlpcImpersonateClientOfPort@12 __imp__ZwAlpcImpersonateClientOfPort@12 _NtAlpcImpersonateClientOfPort@12 __imp__NtAlpcImpersonateClientOfPort@12 _ZwAlpcImpersonateClientContainerOfPort@12 __imp__ZwAlpcImpersonateClientContainerOfPort@12 _NtAlpcImpersonateClientContainerOfPort@12 __imp__NtAlpcImpersonateClientContainerOfPort@12 _ZwAlpcDisconnectPort@8 __imp__ZwAlpcDisconnectPort@8 _NtAlpcDisconnectPort@8 __imp__NtAlpcDisconnectPort@8 _ZwAlpcDeleteSecurityContext@12 __imp__ZwAlpcDeleteSecurityContext@12 _NtAlpcDeleteSecurityContext@12 __imp__NtAlpcDeleteSecurityContext@12 _ZwAlpcDeleteSectionView@12 __imp__ZwAlpcDeleteSectionView@12 _NtAlpcDeleteSectionView@12 __imp__NtAlpcDeleteSectionView@12 _ZwAlpcDeleteResourceReserve@12 __imp__ZwAlpcDeleteResourceReserve@12 _NtAlpcDeleteResourceReserve@12 __imp__NtAlpcDeleteResourceReserve@12 _ZwAlpcDeletePortSection@12 __imp__ZwAlpcDeletePortSection@12 _NtAlpcDeletePortSection@12 __imp__NtAlpcDeletePortSection@12 _ZwAlpcCreateSecurityContext@12 __imp__ZwAlpcCreateSecurityContext@12 _NtAlpcCreateSecurityContext@12 __imp__NtAlpcCreateSecurityContext@12 _ZwAlpcCreateSectionView@12 __imp__ZwAlpcCreateSectionView@12 _NtAlpcCreateSectionView@12 __imp__NtAlpcCreateSectionView@12 _ZwAlpcCreateResourceReserve@16 __imp__ZwAlpcCreateResourceReserve@16 _NtAlpcCreateResourceReserve@16 __imp__NtAlpcCreateResourceReserve@16 _ZwAlpcCreatePortSection@24 __imp__ZwAlpcCreatePortSection@24 _NtAlpcCreatePortSection@24 __imp__NtAlpcCreatePortSection@24 _ZwAlpcCreatePort@12 __imp__ZwAlpcCreatePort@12 _NtAlpcCreatePort@12 __imp__NtAlpcCreatePort@12 _ZwAlpcConnectPort@44 __imp__ZwAlpcConnectPort@44 _NtAlpcConnectPort@44 __imp__NtAlpcConnectPort@44 _ZwAlpcConnectPortEx@44 __imp__ZwAlpcConnectPortEx@44 _NtAlpcConnectPortEx@44 __imp__NtAlpcConnectPortEx@44 _ZwAlpcCancelMessage@12 __imp__ZwAlpcCancelMessage@12 _NtAlpcCancelMessage@12 __imp__NtAlpcCancelMessage@12 _ZwAlpcAcceptConnectPort@36 __imp__ZwAlpcAcceptConnectPort@36 _NtAlpcAcceptConnectPort@36 __imp__NtAlpcAcceptConnectPort@36 _ZwAllocateVirtualMemory@24 __imp__ZwAllocateVirtualMemory@24 _NtAllocateVirtualMemory@24 __imp__NtAllocateVirtualMemory@24 _ZwAllocateUuids@16 __imp__ZwAllocateUuids@16 _NtAllocateUuids@16 __imp__NtAllocateUuids@16 _ZwAllocateUserPhysicalPages@12 __imp__ZwAllocateUserPhysicalPages@12 _NtAllocateUserPhysicalPages@12 __imp__NtAllocateUserPhysicalPages@12 _ZwAllocateUserPhysicalPagesEx@20 __imp__ZwAllocateUserPhysicalPagesEx@20 _NtAllocateUserPhysicalPagesEx@20 __imp__NtAllocateUserPhysicalPagesEx@20 _ZwAllocateReserveObject@12 __imp__ZwAllocateReserveObject@12 _NtAllocateReserveObject@12 __imp__NtAllocateReserveObject@12 _ZwAllocateLocallyUniqueId@4 __imp__ZwAllocateLocallyUniqueId@4 _NtAllocateLocallyUniqueId@4 __imp__NtAllocateLocallyUniqueId@4 _ZwAlertThreadByThreadId@4 __imp__ZwAlertThreadByThreadId@4 _NtAlertThreadByThreadId@4 __imp__NtAlertThreadByThreadId@4 _ZwAlertThread@4 __imp__ZwAlertThread@4 _NtAlertThread@4 __imp__NtAlertThread@4 _ZwAlertResumeThread@8 __imp__ZwAlertResumeThread@8 _NtAlertResumeThread@8 __imp__NtAlertResumeThread@8 _ZwAdjustPrivilegesToken@24 __imp__ZwAdjustPrivilegesToken@24 _NtAdjustPrivilegesToken@24 __imp__NtAdjustPrivilegesToken@24 _ZwAdjustGroupsToken@24 __imp__ZwAdjustGroupsToken@24 _NtAdjustGroupsToken@24 __imp__NtAdjustGroupsToken@24 _ZwAdjustTokenClaimsAndDeviceGroups@64 __imp__ZwAdjustTokenClaimsAndDeviceGroups@64 _NtAdjustTokenClaimsAndDeviceGroups@64 __imp__NtAdjustTokenClaimsAndDeviceGroups@64 _ZwAddDriverEntry@8 __imp__ZwAddDriverEntry@8 _NtAddDriverEntry@8 __imp__NtAddDriverEntry@8 _ZwAddBootEntry@8 __imp__ZwAddBootEntry@8 _NtAddBootEntry@8 __imp__NtAddBootEntry@8 _ZwAddAtom@12 __imp__ZwAddAtom@12 _NtAddAtom@12 __imp__NtAddAtom@12 _ZwAddAtomEx@16 __imp__ZwAddAtomEx@16 _NtAddAtomEx@16 __imp__NtAddAtomEx@16 _ZwAcquireProcessActivityReference@12 __imp__ZwAcquireProcessActivityReference@12 _NtAcquireProcessActivityReference@12 __imp__NtAcquireProcessActivityReference@12 _ZwAccessCheckByTypeResultListAndAuditAlarmByHandle@68 __imp__ZwAccessCheckByTypeResultListAndAuditAlarmByHandle@68 _NtAccessCheckByTypeResultListAndAuditAlarmByHandle@68 __imp__NtAccessCheckByTypeResultListAndAuditAlarmByHandle@68 _ZwAccessCheckByTypeResultListAndAuditAlarm@64 __imp__ZwAccessCheckByTypeResultListAndAuditAlarm@64 _NtAccessCheckByTypeResultListAndAuditAlarm@64 __imp__NtAccessCheckByTypeResultListAndAuditAlarm@64 _ZwAccessCheckByTypeResultList@44 __imp__ZwAccessCheckByTypeResultList@44 _NtAccessCheckByTypeResultList@44 __imp__NtAccessCheckByTypeResultList@44 _ZwAccessCheckByTypeAndAuditAlarm@64 __imp__ZwAccessCheckByTypeAndAuditAlarm@64 _NtAccessCheckByTypeAndAuditAlarm@64 __imp__NtAccessCheckByTypeAndAuditAlarm@64 _ZwAccessCheckByType@44 __imp__ZwAccessCheckByType@44 _NtAccessCheckByType@44 __imp__NtAccessCheckByType@44 _ZwAccessCheckAndAuditAlarm@44 __imp__ZwAccessCheckAndAuditAlarm@44 _NtAccessCheckAndAuditAlarm@44 __imp__NtAccessCheckAndAuditAlarm@44 _ZwSetInformationSymbolicLink@16 __imp__ZwSetInformationSymbolicLink@16 _NtSetInformationSymbolicLink@16 __imp__NtSetInformationSymbolicLink@16 _ZwCreateRegistryTransaction@16 __imp__ZwCreateRegistryTransaction@16 _NtCreateRegistryTransaction@16 __imp__NtCreateRegistryTransaction@16 _ZwOpenRegistryTransaction@12 __imp__ZwOpenRegistryTransaction@12 _NtOpenRegistryTransaction@12 __imp__NtOpenRegistryTransaction@12 _ZwCommitRegistryTransaction@8 __imp__ZwCommitRegistryTransaction@8 _NtCommitRegistryTransaction@8 __imp__NtCommitRegistryTransaction@8 _ZwRollbackRegistryTransaction@8 __imp__ZwRollbackRegistryTransaction@8 _NtRollbackRegistryTransaction@8 __imp__NtRollbackRegistryTransaction@8 _ZwAllocateVirtualMemoryEx@28 __imp__ZwAllocateVirtualMemoryEx@28 _NtAllocateVirtualMemoryEx@28 __imp__NtAllocateVirtualMemoryEx@28 _ZwMapViewOfSectionEx@36 __imp__ZwMapViewOfSectionEx@36 _NtMapViewOfSectionEx@36 __imp__NtMapViewOfSectionEx@36 _ZwManageHotPatch@16 __imp__ZwManageHotPatch@16 _NtManageHotPatch@16 __imp__NtManageHotPatch@16 _ZwCreateCrossVmEvent@24 __imp__ZwCreateCrossVmEvent@24 _NtCreateCrossVmEvent@24 __imp__NtCreateCrossVmEvent@24 _ZwCreateCrossVmMutant@24 __imp__ZwCreateCrossVmMutant@24 _NtCreateCrossVmMutant@24 __imp__NtCreateCrossVmMutant@24 _ZwAcquireCrossVmMutant@8 __imp__ZwAcquireCrossVmMutant@8 _NtAcquireCrossVmMutant@8 __imp__NtAcquireCrossVmMutant@8 _ZwPssCaptureVaSpaceBulk@20 __imp__ZwPssCaptureVaSpaceBulk@20 _NtPssCaptureVaSpaceBulk@20 __imp__NtPssCaptureVaSpaceBulk@20 _ZwDirectGraphicsCall@20 __imp__ZwDirectGraphicsCall@20 _NtDirectGraphicsCall@20 __imp__NtDirectGraphicsCall@20 _ZwLoadKey3@32 __imp__ZwLoadKey3@32 _NtLoadKey3@32 __imp__NtLoadKey3@32
/ -1 0 139505 `
+ XB zD �E .Z �^ �Z T^ \ ~\ �] l] �\
[ �[ 2W �W X 8� �� hX �X 6_ �Y BY dq �u fu Nv �v &x �w :w �y bz �z L{ �r �y �| } �} �� :� �� 4� �� r� � P� �� � v� V� �� �t ~ 6� �q � �� y �{ �~ �� 8�
� 2� � � � &� h� Ԕ �� �i &j �j k o to �o ^p Pq �q �F (t �t u �u v |v �v jw �w Dx �x 4y �y z { �{ �| x} �~ ^ � P� ʀ F� �� ��
� �� �� � چ ^� P� ʇ 6� �� � �� � n� ֊ H� �� � � ؏ Z� ؐ >� �� *� � �� � Z� �� � �� �� j� ڙ P� Ț 8� �� �� � |� p� `� Ԣ � Z� ԡ P� P� ��
� �� �� p� ڦ V� § 4� �� �� � � � Z� �� 0� �� � `� ܯ b� T� Ʊ @� �� �� �� x� � ؕ J� �� b� N� �� j� �� � z� �� N� u �G ̼ >� �� &� �� �� �� f� X� � H� � F� $� ��
� � :� �� *� �� � l� �� �� �� �� (� �� �� D� F� tk X� �� >� �� *� �� � �� t� d� X� �� � �� P� �� �� � J� t� �� J� �� <� @� J% - pE �E �D hF �F �G I >O ` jK PM �M FN �I �R J� � �� � �� � �� $� �� � �� "� �� З � l� �� F� �� �� �� �� � �� T� �� � �� �� `� �� L� �� 6� �� � � � ^� x� �� F� �� �� � 2� ��
� z� � � 8� "� �� � V� � � R� �� ֳ :� 6� ά � v � l �N �� ^ T �
T � v� ( n D r� ,� � � b t� @ � � T� Դ �� �� � �� �S :� � �� 0� �� (� �� � � � �� �� � �� �� �� V v� h� � �� :� � v
�
` � � <
�
2 � � � , � � �� .� �� � � : $ � l � N � L � � ^� ` (" �" # �# �# f$ �$ �% 6& ' ^) �) �+ , �, �� X� � �� �- . �. �� У 8� v0 �0 j1 T2 �1 �3 4 �2 ( p( �( @* �* &+ �6 �4 5 �5 6 t7 �7 R9 �9 B: �: \8 8; &� J vJ �L �P �w H 2� �8 �6 �; &< �< > = �= z> �? �> h? V@ �A �@ DA 2B �C �B C � �� � �� JG *H �H �J �D fL lR Q �Q �Q VS >T �T .U �U V �V W |W �W bX �X JY �Y �Z `] �_ ` �` a �a
b �b c �c �c ld � Xe �e Ff �f .g �g $h �h i �i j k �k bl �l Vm �m Fn �n 0o �o p �p q �q �q dr �r x� Z� � <� �� � �� Fs �s $t �t �u �v dw �x �y >y 4z �z 6{ �{ �| 8~ �~ " � � � � �� �� � v� � d� ކ Z� D� *� �� � �� � V� ƌ 4� � �� �� Z� ʒ <� �� � z� � `� �� � |� ğ <� .� �� � �� � L� ¤ �� �� � �� �� z� V� ȫ �� &� h� R� ƭ �� �� � �� Ե � d� L� ȶ
� x� � ^� Һ @� �� � x� � T� ƾ F� �� ,� 8� �� ~� �� �� Z� � D� �� 4� T � �� �� �� |� � �� b� L� >� � �� �� � � �� �� �� v� f� T� �� �� 4� �� T� �� � |� �� �� d� �� b� 6� �� �� 2� �j �K � �! D! � � R� �� v� p� �� �� &� H� �� "� �� < � . � N� �� .Z �T T <Q �T �Q *R *S �R �S �U RV lU �V � 6� � ܰ �� � J� 8� �� �� � �� �� � x� �� n� �� d� �� Z� � � � � �� �� l� �� �O x� &_ �� � �� :� � 8| �� �� �� �� � � �� �� �' �� �� �� l� �& $� �� �� &� � �} b� j~ � H � X� �� �� � �� �� �� �� `� \� ܪ � @� �� 8� �s t |t ܀ �~ t � X� ֏ �x Dr |� (| �� � f� L� � � �� `I �H �H �� �� p�
| t� �� .s �s �� �� F� �� �� �� D �} *} Xv z � �� �d 2� t� � 4� z\ �� ʪ ^� � � t � x� �� � (P "i Fm �m &n �o �i j �l bl �j �` �o �_ vk �k �n �h 8h �g ` �b �c Bc �j �a \b (d Pg �f e ze o va �` df �d �e �p bp
� <3 @r �� � �r :� �� �p ڠ �� T� �I VJ �J \K �K PL �L DM �M LN �N @O <P �O �P N� �� �� 4� �� � l � � �* �# t( <& . �( X) �) ( <* � �& ' `$ �$ � ! � @% �% x" �! t# �" �! �' + � xu � L� �� �� �� (� ҇ �� �� p� �� �� � �� �� � N � 2 � ~ � R
�
� N � P
\ �
D � & � l � \ � L � 6 � z � X � D � < � z � R � 2 � � � j R� ޞ � l� ܶ � �� t� �� 4� D^ n� $� �� ~� �� P� �] "� �� �^ �� �\ � D� �| �z *� Jx �� �� / �� *� F � . �/ ~/ \ �[ [ $
� � "s nk �k �l Xl �m �n >m "n ® ��
, �� �� g �+ D� � Li V� �h � fh t� �g
� �g "� �f �� 2f 4� �e �� Be � Pd H� �d \� �c � lc t� �b
� �b � �a �� b 4� �` �� (a �� B` T� �_ �� j_ � �^ ~� _ �� *^ :� �] �� J] \� �\ �� p\ ~� \ � �[ �� *[ 8� �Z �� JZ V� �Y �� hY r� �X � �X �� X � �W �� 4W F� �V �� VV V� �U �� bU r� �T �� vT z� �S � �S �� $S .� �R �� DR X� �Q v� �P � �P �� P � �O �� $O (� �N �� 8N >� �M �� HM V� �L �� jL � �C �� pQ �F �� v� �K � �K �� K � �J � �I �� "I ,� �H �� 8H �� >G F� �F �� RF ^� �E �� hE r� �D �� zD ~� D �� C ,� �B �� 8B N� �A �� fA p� �@ �� ~@ �� @ � �? �� "? 0� �> B� �= �� <> �� V= b� �< �� v< �� < � �; �� *; @� �: �� D: N� �9 `� �8 �� r8 t� �7 � �7 �� 7 .� �6 �� @6 T� �5 �� `5 r� �4 � �4 ��
4 � �3 �� *3 2� �2 �� H2 N� �1 �� f1 r� �0 �� ~0 ��
0 � �/ �� / .� �. �� >. @� �- �� >- B� �, � N, Z� �+ � j+ x� �* � �* �� * ,� �) �� >) L� �( ڽ \( j� �' 0� �
z� �& � n' �� �& �� & � �% �� (% :� �$ ʹ L$ P� �# ظ Z# Z� �" `" f� �! �� x! �� ! � � �� "� � �� * ,� � �� 6 @� � в R d� � �� z �� � � �� ( 4� � �� B J� � ̮ N H� � ̭ N V� � ެ ` ^� � � h p� � �� x �� � � �� � � �� 2� � Ƨ H P� � ڦ \ � r d� � z� � � � �� "� � �� 0 �� >
R� � f� � � v �� ��
� �
� � �� J ĝ F R� � �� * 8� � � b p� � �� z ��
� � �� . <� � Й R X� � � n ~� � � �� � r� �� 4 @� � ԕ V ^� � z� �� � �� *� �� �� :� N� � �� � � h� x� �� � �� �� � .� �� ď F� T� � � b� l� � � t� �� � �� � � �� � v� � �� �� ,� Ċ F� H� �� ҉ T� d� �� � �� �� � *� �� �� <� @� �� օ X� l� �� 0� �� � �� �� B� V� �� � n� x� �� � �� �� � � �� �� .� 8� �� � H� T �� �~ ^� b~ �� �} v� t} �� } � �| �� $| :� �{ �� <{ R� �z �� Fz \� �y �� Vy l� �x �� rx �� x � �w �� w 6� �v �� :v P� �u �� Nu d� �t �� pt �� �s � s ,� �s �� �r �� �q �� >r T� `q v� �p � �p �� p � �o �� o (� �n �� (n >� �m �� Dm Z� �l �� ll �� �k � �k �� �j �� 0j F� �i �� Pi f� �h �� bh x� �g � �g �� g 2� �f �� Bf X� �e �� fe |� �d
� dY � �d ,� d �� c �� �c D� �b V� 0b �� �a j� �` �� *W � Pa �� x` $� �_ F� ,_ �� �^ ^� B^ �� d] � �] ~� �\ �� \ �� �[ B� &[ �� �Z d� @Z �� �Y �� �X �� ~X *� X �� �W H� DV � �V d� �U �� lU � �T �� T ƽ
` �� �T 4� �S Z� >S � �R ~� `R � �Q �� zQ &� Q �� �P >� O ¸ DN � �N X� �M �� lM � �L �� �L 6� L µ �K T� <K � �J v� �I �� rI � �H �� �H B� ,H ر �G ^� FG � bF � �E �� �E 2� �D V� E ® ,D ح �C `� >C � �B v� VB � �A �� dA � �@ �� r@ � �? �� �? 2�
? �� �> 0� > �� �= D� "= Φ �< T� 2< ޥ �; d� B; � �: t� R: �� �9 �� 9 �� p9 � �8 :� 8 ġ *7 ֠ �6 h� �5 r� @6 � P5 �� �4 �� b4 � �3 �� �3 0� �2 8� 2 ƛ 3 �� �1 X� @1 � n0 � �0 �� �/ �� �. �� ^.
� �- �� b- � �, �� v, "� :� �G t\ � &� � PJ �� �� T9 �7 L� 6� �� �� � �O V� P ʹ z/ &� ܡ ^ k ,� �� � R U � �nom������������������
��������������������������������������� : c% rYZ[7 b= & ! " # $ > e' ( ) 8 ]? ^_/ \1 4+ , - . ?@6758B 3; dghji@ A 2 9 < 0 f3 4 `a5 6 C AB* klJ H I �
%����������������������������������������������� �����������������!#}{ywusqoimgec_a7][YW%USQOMKIEGCA?=k;5931/+-)'c#!
)�����������������������������������������������������+�������� {���� }wyusqomkigeca][Y_WUKSQOMIGECA?=;97531+)/-%!# '�
���������������������������������������������������������������}{ywusqomkigeca_][YWUSQOMKIGEAC?=;97531/-+)'%#! '
���������������������������������������������������������������K L M N stvuywzxO P Q R �S T ��vwV W X Y Z [ \ ] ^ _ ` a b c ^d e sf ]g DFh i j k l m n PJo p q r �s u t v w x y z { | } ~ W%� � +,)� �� � � �� � � w� � � � � � � � � � � � � � � � � �,� � � � � |� �� � � � � ef� � � � � � � � � � � r� � �\� � � � � QK� � � �
� � � � NM� � � � � H� � {;
� xU� � � � � � � � � � _� � � � � � � � � PQRJK� � � � � RL� �� � X� �y� � � � � � � � � � � � � � � � � � � � "! #$()*+, -� � 32.SM/0145678z{9:;<=� ?p>Aq@BC&�D� � � � GEFHIJKTLM|NOIjPQ}����(R�S Z�[\]�`labgD ihoxc����d�������ge���h� ���E �����n���s��i���m�}���������������>�9����������� ���dkj��������������������������������������� ~
��
� �^'��
z � nml�Z UNX*!"#$%&'()*+�-./01234567�8� 9:;<=>?@ABCDEFGHPQRS� T�UV�aWYXZ[\]0^�_`abc21e|hfgidjklm
nLopqrstuvwxy ItF z{|}��~�EG�'����V:���v��FGED�������T�����`U��p���/�T���Y�W{X�G �������VSut���V_������������������������������������������������������<������[�WOY��
�����=����O��������-.�� "#$%&������ ��u�bk~}�����������I���� JKLMNOyf�pro��!q �������� ! "#$%&'()*+,-./0123456789:;<=>?@ABCCH��������������������� ��������~
$� ���������������������������������������������������������������~ "|zxvtrpnhlfdb^`6\ZXV$TRPNLJHDFB@><j:4820.*,(&"
( ����������������������������������������������������*�������� z���� ~|vxtrpnljhfdb`\ZX^VTJRPNLHFDB@><:86420*(.,$ " &�
���������������������������������������������������������������~|zxvtrpnljhfdb`^\ZXVTRPNLJHFD@B><:86420.,*(&$" &
��������������������������������������������������������������� U � �nom������������������
��������������������������������������� : c% rYZ[7 b= & ! " # $ > e' ( ) 8 ]? ^_/ \1 4+ , - . ?@6758B 3; dghji@ A 2 9 < 0 f3 4 q`a5 6 C AB* klJ H I �
%����������������������������������������������� �����������������!#}{ywusqoimgec_a7][YW%USQOMKIEGCA?=k;5931/+-)'c#!
)�����������������������������������������������������+�������� {���� }wyusqomkigeca][Y_WUKSQOMIGECA?=;97531+)/-%!# '�
���������������������������������������������������������������}{ywusqomkigeca_][YWUSQOMKIGEAC?=;97531/-+)'%#! '
���������������������������������������������������������������K L M N stvuywzxO P Q R �S T ��vwV W X Y Z [ \ ] ^ _ ` a b c ^d e sf ]g DFh i j k l m n PJo p q r �s u t v w x y z { | } ~ W%� � +,)� �� � � �� � � w� � � � � � � � � � � � � � � � � �,� � � � � |� �� � � � � ef� � � � � � � � � � � r� � �\� � � � � QK� � � �
� � � � NM� � � � � H� � {;
� xU� � � � � � � � � � _� � � � � � � � � PQRJK� � � � � RL� �� � X� �y� � � � � � � � � � � � � � � � � � � � "! #$()*+, -� � 32.SM/0145678z{9:;<=� ?p>Aq@BC&�D� � � � GEFHIJKTLM|NOIjPQ}����(R�S Z�[\]�`labgD ihoxc����d�������ge���h� ���E �����n���s��i���m�}���������������>�9����������� ���dkj��������������������������������������� ~
��
� �^'��
z � nml�Z UNX*!"#$%&'()*+�-./01234567�8� 9:;<=>?@ABCDEFGHPQRS� T�UV�aWYXZ[\]0^�_`abc21e|hfgidjklm
nLopqrstuvwxy ItF z{|}��~�EG�'����V:���v��FGED�������T�����`U��p���/�T���Y�W{X�G �������VSut���V_������������������������������������������������������<������[�WOY��
�����=����O��������-.�� "#$%&������ ��u�bk~}�����������I���� JKLMNOyf�pro��!q �������� ! "#$%&'()*+,-./0123456789:;<=>?@ABCCH��������������������� ��������~
$� ���������������������������������������������������������������~ "|zxvtrpnhlfdb^`6\ZXV$TRPNLJHDFB@><j:4820.*,(&"
( ����������������������������������������������������*�������� z���� ~|vxtrpnljhfdb`\ZX^VTJRPNLHFDB@><:86420*(.,$ " &�
���������������������������������������������������������������~|zxvtrpnljhfdb`^\ZXVTRPNLJHFD@B><:86420.,*(&$" &
��������������������������������������������������������������� @RtlActivateActivationContextUnsafeFast@8 @RtlDeactivateActivationContextUnsafeFast@4 @RtlInterlockedPushListSList@16 @RtlUlongByteSwap@4 @RtlUlonglongByteSwap@8 @RtlUshortByteSwap@4 _AlpcAdjustCompletionListConcurrencyCount@8 _AlpcFreeCompletionListMessage@8 _AlpcGetCompletionListLastMessageInformation@12 _AlpcGetCompletionListMessageAttributes@8 _AlpcGetHeaderSize@4 _AlpcGetMessageAttribute@8 _AlpcGetMessageFromCompletionList@8 _AlpcGetOutstandingCompletionListMessageCount@4 _AlpcInitializeMessageAttribute@16 _AlpcMaxAllowedMessageLength@0 _AlpcRegisterCompletionList@20 _AlpcRegisterCompletionListWorkerThread@4 _AlpcRundownCompletionList@4 _AlpcUnregisterCompletionList@4 _AlpcUnregisterCompletionListWorkerThread@4 _CsrAllocateCaptureBuffer@8 _CsrAllocateMessagePointer@12 _CsrCaptureMessageBuffer@16 _CsrCaptureMessageMultiUnicodeStringsInPlace@12 _CsrCaptureMessageString@20 _CsrCaptureTimeout@8 _CsrClientCallServer@16 _CsrClientConnectToServer@20 _CsrFreeCaptureBuffer@4 _CsrGetProcessId@0 _CsrIdentifyAlertableThread@0 _CsrSetPriorityClass@8 _CsrVerifyRegion@8 _DbgBreakPoint@0 _DbgPrint _DbgPrintEx _DbgPrintReturnControlC _DbgPrompt@12 _DbgQueryDebugFilterState@8 _DbgSetDebugFilterState@12 _DbgUiConnectToDbg@0 _DbgUiContinue@8 _DbgUiConvertStateChangeStructure@8 _DbgUiConvertStateChangeStructureEx@8 _DbgUiDebugActiveProcess@4 _DbgUiGetThreadDebugObject@0 _DbgUiIssueRemoteBreakin@4 _DbgUiRemoteBreakin@4 _DbgUiSetThreadDebugObject@4 _DbgUiStopDebugging@4 _DbgUiWaitStateChange@8 _DbgUserBreakPoint@0 _EtwCheckCoverage@4 _EtwCreateTraceInstanceId@8 _EtwDeliverDataBlock@4 _EtwEnumerateProcessRegGuids@12 _EtwEventActivityIdControl@8 _EtwEventEnabled@12 _EtwEventProviderEnabled@20 _EtwEventRegister@16 _EtwEventSetInformation@20 _EtwEventUnregister@8 _EtwEventWrite@20 _EtwEventWriteEndScenario@20 _EtwEventWriteEx@40 _EtwEventWriteFull@32 _EtwEventWriteNoRegistration@16 _EtwEventWriteStartScenario@20 _EtwEventWriteString@24 _EtwEventWriteTransfer@28 _EtwGetTraceEnableFlags@8 _EtwGetTraceEnableLevel@8 _EtwGetTraceLoggerHandle@4 _EtwLogTraceEvent@12 _EtwNotificationRegister@20 _EtwNotificationUnregister@12 _EtwProcessPrivateLoggerRequest@4 _EtwRegisterSecurityProvider@0 _EtwRegisterTraceGuidsA@32 _EtwRegisterTraceGuidsW@32 _EtwReplyNotification@4 _EtwSendNotification@20 _EtwTraceEventInstance@20 _EtwTraceMessage _EtwTraceMessageVa@24 _EtwUnregisterTraceGuids@8 _EtwWriteUMSecurityEvent@16 _EtwpCreateEtwThread@8 _EtwpGetCpuSpeed@4 _EvtIntReportAuthzEventAndSourceAsync@44 _EvtIntReportEventAndSourceAsync@44 _LdrAccessResource@16 _LdrAddDllDirectory@8 _LdrAddLoadAsDataTable@20 _LdrAddRefDll@8 _LdrAppxHandleIntegrityFailure@4 _LdrCallEnclave@12 _LdrCreateEnclave@36 _LdrDeleteEnclave@4 _LdrDisableThreadCalloutsForDll@4 _LdrEnumResources@20 _LdrEnumerateLoadedModules@12 _LdrFastFailInLoaderCallout@0 _LdrFindEntryForAddress@8 _LdrFindResourceDirectory_U@16 _LdrFindResourceEx_U@20 _LdrFindResource_U@16 _LdrFlushAlternateResourceModules@0 _LdrGetDllDirectory@4 _LdrGetDllFullName@8 _LdrGetDllHandle@16 _LdrGetDllHandleByMapping@8 _LdrGetDllHandleByName@12 _LdrGetDllHandleEx@20 _LdrGetDllPath@16 _LdrGetFileNameFromLoadAsDataTable@8 _LdrGetProcedureAddress@16 _LdrGetProcedureAddressEx@20 _LdrGetProcedureAddressForCaller@24 _LdrInitShimEngineDynamic@8 _LdrInitializeEnclave@20 _LdrIsModuleSxsRedirected@4 _LdrLoadAlternateResourceModule@16 _LdrLoadAlternateResourceModuleEx@20 _LdrLoadDll@16 _LdrLoadEnclaveModule@12 _LdrLockLoaderLock@12 _LdrOpenImageFileOptionsKey@12 _LdrParentInterlockedPopEntrySList _LdrParentRtlInitializeNtUserPfn _LdrParentRtlResetNtUserPfn _LdrParentRtlRetrieveNtUserPfn _LdrProcessRelocationBlock@16 _LdrProcessRelocationBlockEx@20 _LdrQueryImageFileExecutionOptions@24 _LdrQueryImageFileExecutionOptionsEx@28 _LdrQueryImageFileKeyOption@24 _LdrQueryModuleServiceTags@12 _LdrQueryOptionalDelayLoadedAPI@16 _LdrQueryProcessModuleInformation@12 _LdrRemoveDllDirectory@4 _LdrRemoveLoadAsDataTable@16 _LdrResFindResource@36 _LdrResFindResourceDirectory@28 _LdrResRelease@12 _LdrResSearchResource@32 _LdrResolveDelayLoadedAPI@24 _LdrResolveDelayLoadsFromDll@12 _LdrSetAppCompatDllRedirectionCallback@12 _LdrSetDefaultDllDirectories@4 _LdrSetDllDirectory@4 _LdrSetDllManifestProber@12 _LdrSetMUICacheType@4 _LdrShutdownProcess@0 _LdrShutdownThread@0 _LdrUnloadAlternateResourceModule@4 _LdrUnloadAlternateResourceModuleEx@8 _LdrUnloadDll@4 _LdrUnlockLoaderLock@8 _LdrUpdatePackageSearchPath@4 _LdrVerifyImageMatchesChecksum@16 _LdrVerifyImageMatchesChecksumEx@8 _LdrpChildNtdll _LdrpResGetMappingSize@16 _LdrpResGetResourceDirectory@20 _NlsAnsiCodePage _NlsMbCodePageTag _NlsMbOemCodePageTag _NtAcceptConnectPort@24 _NtAccessCheck@32 _NtAccessCheckAndAuditAlarm@44 _NtAccessCheckByType@44 _NtAccessCheckByTypeAndAuditAlarm@64 _NtAccessCheckByTypeResultList@44 _NtAccessCheckByTypeResultListAndAuditAlarm@64 _NtAccessCheckByTypeResultListAndAuditAlarmByHandle@68 _NtAcquireCrossVmMutant@8 _NtAcquireProcessActivityReference@12 _NtAddAtom@12 _NtAddAtomEx@16 _NtAddBootEntry@8 _NtAddDriverEntry@8 _NtAdjustGroupsToken@24 _NtAdjustPrivilegesToken@24 _NtAdjustTokenClaimsAndDeviceGroups@64 _NtAlertResumeThread@8 _NtAlertThread@4 _NtAlertThreadByThreadId@4 _NtAllocateLocallyUniqueId@4 _NtAllocateReserveObject@12 _NtAllocateUserPhysicalPages@12 _NtAllocateUserPhysicalPagesEx@20 _NtAllocateUuids@16 _NtAllocateVirtualMemory@24 _NtAllocateVirtualMemoryEx@28 _NtAlpcAcceptConnectPort@36 _NtAlpcCancelMessage@12 _NtAlpcConnectPort@44 _NtAlpcConnectPortEx@44 _NtAlpcCreatePort@12 _NtAlpcCreatePortSection@24 _NtAlpcCreateResourceReserve@16 _NtAlpcCreateSectionView@12 _NtAlpcCreateSecurityContext@12 _NtAlpcDeletePortSection@12 _NtAlpcDeleteResourceReserve@12 _NtAlpcDeleteSectionView@12 _NtAlpcDeleteSecurityContext@12 _NtAlpcDisconnectPort@8 _NtAlpcImpersonateClientContainerOfPort@12 _NtAlpcImpersonateClientOfPort@12 _NtAlpcOpenSenderProcess@24 _NtAlpcOpenSenderThread@24 _NtAlpcQueryInformation@20 _NtAlpcQueryInformationMessage@24 _NtAlpcRevokeSecurityContext@12 _NtAlpcSendWaitReceivePort@32 _NtAlpcSetInformation@16 _NtApphelpCacheControl@8 _NtAreMappedFilesTheSame@8 _NtAssignProcessToJobObject@8 _NtAssociateWaitCompletionPacket@32 _NtCallEnclave@16 _NtCallbackReturn@12 _NtCancelIoFile@8 _NtCancelIoFileEx@12 _NtCancelSynchronousIoFile@12 _NtCancelTimer2@8 _NtCancelTimer@8 _NtCancelWaitCompletionPacket@8 _NtClearEvent@4 _NtClose@4 _NtCloseObjectAuditAlarm@12 _NtCommitComplete@8 _NtCommitEnlistment@8 _NtCommitRegistryTransaction@8 _NtCommitTransaction@8 _NtCompactKeys@8 _NtCompareObjects@8 _NtCompareSigningLevels@8 _NtCompareTokens@12 _NtCompleteConnectPort@4 _NtCompressKey@4 _NtConnectPort@32 _NtContinue@8 _NtContinueEx@8 _NtConvertBetweenAuxiliaryCounterAndPerformanceCounter@16 _NtCreateCrossVmEvent@24 _NtCreateCrossVmMutant@24 _NtCreateDebugObject@16 _NtCreateDirectoryObject@12 _NtCreateDirectoryObjectEx@20 _NtCreateEnclave@36 _NtCreateEnlistment@32 _NtCreateEvent@20 _NtCreateEventPair@12 _NtCreateFile@44 _NtCreateIRTimer@12 _NtCreateIoCompletion@16 _NtCreateJobObject@12 _NtCreateJobSet@12 _NtCreateKey@28 _NtCreateKeyTransacted@32 _NtCreateKeyedEvent@16 _NtCreateLowBoxToken@36 _NtCreateMailslotFile@32 _NtCreateMutant@16 _NtCreateNamedPipeFile@56 _NtCreatePagingFile@16 _NtCreatePartition@16 _NtCreatePort@20 _NtCreatePrivateNamespace@16 _NtCreateProcess@32 _NtCreateProcessEx@36 _NtCreateProfile@36 _NtCreateProfileEx@40 _NtCreateRegistryTransaction@16 _NtCreateResourceManager@28 _NtCreateSection@28 _NtCreateSectionEx@36 _NtCreateSemaphore@20 _NtCreateSymbolicLinkObject@16 _NtCreateThread@32 _NtCreateThreadEx@44 _NtCreateTimer2@20 _NtCreateTimer@16 _NtCreateToken@52 _NtCreateTokenEx@68 _NtCreateTransaction@40 _NtCreateTransactionManager@24 _NtCreateUserProcess@44 _NtCreateWaitCompletionPacket@12 _NtCreateWaitablePort@20 _NtCreateWnfStateName@28 _NtCreateWorkerFactory@40 _NtCurrentTeb@0 _NtDebugActiveProcess@8 _NtDebugContinue@12 _NtDelayExecution@8 _NtDeleteAtom@4 _NtDeleteBootEntry@4 _NtDeleteDriverEntry@4 _NtDeleteFile@4 _NtDeleteKey@4 _NtDeleteObjectAuditAlarm@12 _NtDeletePrivateNamespace@4 _NtDeleteValueKey@8 _NtDeleteWnfStateData@8 _NtDeleteWnfStateName@4 _NtDeviceIoControlFile@40 _NtDirectGraphicsCall@20 _NtDisableLastKnownGood@0 _NtDisplayString@4 _NtDrawText@4 _NtDuplicateObject@28 _NtDuplicateToken@24 _NtEnableLastKnownGood@0 _NtEnumerateBootEntries@8 _NtEnumerateDriverEntries@8 _NtEnumerateKey@24 _NtEnumerateSystemEnvironmentValuesEx@12 _NtEnumerateTransactionObject@20 _NtEnumerateValueKey@24 _NtExtendSection@8 _NtFilterBootOption@20 _NtFilterToken@24 _NtFilterTokenEx@56 _NtFindAtom@12 _NtFlushBuffersFile@8 _NtFlushBuffersFileEx@20 _NtFlushInstallUILanguage@8 _NtFlushInstructionCache@12 _NtFlushKey@4 _NtFlushProcessWriteBuffers@0 _NtFlushVirtualMemory@16 _NtFlushWriteBuffer@0 _NtFreeUserPhysicalPages@12 _NtFreeVirtualMemory@16 _NtFreezeRegistry@4 _NtFreezeTransactions@8 _NtFsControlFile@40 _NtGetCachedSigningLevel@24 _NtGetCompleteWnfStateSubscription@24 _NtGetContextThread@8 _NtGetCurrentProcessorNumber@0 _NtGetCurrentProcessorNumberEx@4 _NtGetDevicePowerState@8 _NtGetMUIRegistryInfo@12 _NtGetNextProcess@20 _NtGetNextThread@24 _NtGetNlsSectionPtr@20 _NtGetNotificationResourceManager@28 _NtGetTickCount@0 _NtGetWriteWatch@28 _NtImpersonateAnonymousToken@4 _NtImpersonateClientOfPort@8 _NtImpersonateThread@12 _NtInitializeEnclave@20 _NtInitializeNlsFiles@12 _NtInitializeRegistry@4 _NtInitiatePowerAction@16 _NtIsProcessInJob@8 _NtIsSystemResumeAutomatic@0 _NtIsUILanguageComitted@0 _NtListenPort@8 _NtLoadDriver@4 _NtLoadEnclaveData@36 _NtLoadKey2@12 _NtLoadKey3@32 _NtLoadKey@8 _NtLoadKeyEx@32 _NtLockFile@40 _NtLockProductActivationKeys@8 _NtLockRegistryKey@4 _NtLockVirtualMemory@16 _NtMakePermanentObject@4 _NtMakeTemporaryObject@4 _NtManageHotPatch@16 _NtManagePartition@20 _NtMapCMFModule@24 _NtMapUserPhysicalPages@12 _NtMapUserPhysicalPagesScatter@12 _NtMapViewOfSection@40 _NtMapViewOfSectionEx@36 _NtModifyBootEntry@4 _NtModifyDriverEntry@4 _NtNotifyChangeDirectoryFile@36 _NtNotifyChangeDirectoryFileEx@40 _NtNotifyChangeKey@40 _NtNotifyChangeMultipleKeys@48 _NtNotifyChangeSession@32 _NtOpenDirectoryObject@12 _NtOpenEnlistment@20 _NtOpenEvent@12 _NtOpenEventPair@12 _NtOpenFile@24 _NtOpenIoCompletion@12 _NtOpenJobObject@12 _NtOpenKey@12 _NtOpenKeyEx@16 _NtOpenKeyTransacted@16 _NtOpenKeyTransactedEx@20 _NtOpenKeyedEvent@12 _NtOpenMutant@12 _NtOpenObjectAuditAlarm@48 _NtOpenPartition@12 _NtOpenPrivateNamespace@16 _NtOpenProcess@16 _NtOpenProcessToken@12 _NtOpenProcessTokenEx@16 _NtOpenRegistryTransaction@12 _NtOpenResourceManager@20 _NtOpenSection@12 _NtOpenSemaphore@12 _NtOpenSession@12 _NtOpenSymbolicLinkObject@12 _NtOpenThread@16 _NtOpenThreadToken@16 _NtOpenThreadTokenEx@20 _NtOpenTimer@12 _NtOpenTransaction@20 _NtOpenTransactionManager@24 _NtPlugPlayControl@12 _NtPowerInformation@20 _NtPrePrepareComplete@8 _NtPrePrepareEnlistment@8 _NtPrepareComplete@8 _NtPrepareEnlistment@8 _NtPrivilegeCheck@12 _NtPrivilegeObjectAuditAlarm@24 _NtPrivilegedServiceAuditAlarm@20 _NtPropagationComplete@16 _NtPropagationFailed@12 _NtProtectVirtualMemory@20 _NtPssCaptureVaSpaceBulk@20 _NtPulseEvent@8 _NtQueryAttributesFile@8 _NtQueryAuxiliaryCounterFrequency@4 _NtQueryBootEntryOrder@8 _NtQueryBootOptions@8 _NtQueryDebugFilterState@8 _NtQueryDefaultLocale@8 _NtQueryDefaultUILanguage@4 _NtQueryDirectoryFile@44 _NtQueryDirectoryFileEx@40 _NtQueryDirectoryObject@28 _NtQueryDriverEntryOrder@8 _NtQueryEaFile@36 _NtQueryEvent@20 _NtQueryFullAttributesFile@8 _NtQueryInformationAtom@20 _NtQueryInformationByName@20 _NtQueryInformationEnlistment@20 _NtQueryInformationFile@20 _NtQueryInformationJobObject@20 _NtQueryInformationPort@20 _NtQueryInformationProcess@20 _NtQueryInformationResourceManager@20 _NtQueryInformationThread@20 _NtQueryInformationToken@20 _NtQueryInformationTransaction@20 _NtQueryInformationTransactionManager@20 _NtQueryInformationWorkerFactory@20 _NtQueryInstallUILanguage@4 _NtQueryIntervalProfile@8 _NtQueryIoCompletion@20 _NtQueryKey@20 _NtQueryLicenseValue@20 _NtQueryMultipleValueKey@24 _NtQueryMutant@20 _NtQueryObject@20 _NtQueryOpenSubKeys@8 _NtQueryOpenSubKeysEx@16 _NtQueryPerformanceCounter@8 _NtQueryPortInformationProcess@0 _NtQueryQuotaInformationFile@36 _NtQuerySection@20 _NtQuerySecurityAttributesToken@24 _NtQuerySecurityObject@20 _NtQuerySecurityPolicy@24 _NtQuerySemaphore@20 _NtQuerySymbolicLinkObject@12 _NtQuerySystemEnvironmentValue@16 _NtQuerySystemEnvironmentValueEx@20 _NtQuerySystemInformation@16 _NtQuerySystemInformationEx@24 _NtQuerySystemTime@4 _NtQueryTimer@20 _NtQueryTimerResolution@12 _NtQueryValueKey@24 _NtQueryVirtualMemory@24 _NtQueryVolumeInformationFile@20 _NtQueryWnfStateData@24 _NtQueryWnfStateNameInformation@20 _NtQueueApcThread@20 _NtQueueApcThreadEx@24 _NtRaiseException@12 _NtRaiseHardError@24 _NtReadFile@36 _NtReadFileScatter@36 _NtReadOnlyEnlistment@8 _NtReadRequestData@24 _NtReadVirtualMemory@20 _NtRecoverEnlistment@8 _NtRecoverResourceManager@4 _NtRecoverTransactionManager@4 _NtRegisterProtocolAddressInformation@20 _NtRegisterThreadTerminatePort@4 _NtReleaseKeyedEvent@16 _NtReleaseMutant@8 _NtReleaseSemaphore@12 _NtReleaseWorkerFactoryWorker@4 _NtRemoveIoCompletion@20 _NtRemoveIoCompletionEx@24 _NtRemoveProcessDebug@8 _NtRenameKey@8 _NtRenameTransactionManager@8 _NtReplaceKey@12 _NtReplacePartitionUnit@12 _NtReplyPort@8 _NtReplyWaitReceivePort@16 _NtReplyWaitReceivePortEx@20 _NtReplyWaitReplyPort@8 _NtRequestPort@8 _NtRequestWaitReplyPort@12 _NtResetEvent@8 _NtResetWriteWatch@12 _NtRestoreKey@12 _NtResumeProcess@4 _NtResumeThread@8 _NtRevertContainerImpersonation@0 _NtRollbackComplete@8 _NtRollbackEnlistment@8 _NtRollbackRegistryTransaction@8 _NtRollbackTransaction@8 _NtRollforwardTransactionManager@8 _NtSaveKey@8 _NtSaveKeyEx@12 _NtSaveMergedKeys@12 _NtSecureConnectPort@36 _NtSerializeBoot@0 _NtSetBootEntryOrder@8 _NtSetBootOptions@8 _NtSetCachedSigningLevel2@24 _NtSetCachedSigningLevel@20 _NtSetContextThread@8 _NtSetDebugFilterState@12 _NtSetDefaultHardErrorPort@4 _NtSetDefaultLocale@8 _NtSetDefaultUILanguage@4 _NtSetDriverEntryOrder@8 _NtSetEaFile@16 _NtSetEvent@8 _NtSetEventBoostPriority@4 _NtSetHighEventPair@4 _NtSetHighWaitLowEventPair@4 _NtSetIRTimer@8 _NtSetInformationDebugObject@20 _NtSetInformationEnlistment@16 _NtSetInformationFile@20 _NtSetInformationJobObject@16 _NtSetInformationKey@16 _NtSetInformationObject@16 _NtSetInformationProcess@16 _NtSetInformationResourceManager@16 _NtSetInformationSymbolicLink@16 _NtSetInformationThread@16 _NtSetInformationToken@16 _NtSetInformationTransaction@16 _NtSetInformationTransactionManager@16 _NtSetInformationVirtualMemory@24 _NtSetInformationWorkerFactory@16 _NtSetIntervalProfile@8 _NtSetIoCompletion@20 _NtSetIoCompletionEx@24 _NtSetLdtEntries@24 _NtSetLowEventPair@4 _NtSetLowWaitHighEventPair@4 _NtSetQuotaInformationFile@16 _NtSetSecurityObject@12 _NtSetSystemEnvironmentValue@8 _NtSetSystemEnvironmentValueEx@20 _NtSetSystemInformation@12 _NtSetSystemPowerState@12 _NtSetSystemTime@8 _NtSetThreadExecutionState@8 _NtSetTimer2@16 _NtSetTimer@28 _NtSetTimerEx@16 _NtSetTimerResolution@12 _NtSetUuidSeed@4 _NtSetValueKey@24 _NtSetVolumeInformationFile@20 _NtSetWnfProcessNotificationEvent@4 _NtShutdownSystem@4 _NtShutdownWorkerFactory@8 _NtSignalAndWaitForSingleObject@16 _NtSinglePhaseReject@8 _NtStartProfile@4 _NtStopProfile@4 _NtSubscribeWnfStateChange@16 _NtSuspendProcess@4 _NtSuspendThread@8 _NtSystemDebugControl@24 _NtTerminateEnclave@8 _NtTerminateJobObject@8 _NtTerminateProcess@8 _NtTerminateThread@8 _NtTestAlert@0 _NtThawRegistry@0 _NtThawTransactions@0 _NtTraceControl@24 _NtTraceEvent@16 _NtTranslateFilePath@16 _NtUmsThreadYield@4 _NtUnloadDriver@4 _NtUnloadKey2@8 _NtUnloadKey@4 _NtUnloadKeyEx@8 _NtUnlockFile@20 _NtUnlockVirtualMemory@16 _NtUnmapViewOfSection@8 _NtUnmapViewOfSectionEx@12 _NtUnsubscribeWnfStateChange@4 _NtUpdateWnfStateData@28 _NtVdmControl@8 _NtWaitForAlertByThreadId@8 _NtWaitForDebugEvent@16 _NtWaitForKeyedEvent@16 _NtWaitForMultipleObjects32@20 _NtWaitForMultipleObjects@20 _NtWaitForSingleObject@12 _NtWaitForWorkViaWorkerFactory@20 _NtWaitHighEventPair@4 _NtWaitLowEventPair@4 _NtWorkerFactoryWorkerReady@4 _NtWriteFile@36 _NtWriteFileGather@36 _NtWriteRequestData@24 _NtWriteVirtualMemory@20 _NtYieldExecution@0 _PfxFindPrefix@8 _PfxInitialize@4 _PfxInsertPrefix@12 _PfxRemovePrefix@8 _PssNtCaptureSnapshot@16 _PssNtDuplicateSnapshot@20 _PssNtFreeRemoteSnapshot@8 _PssNtFreeSnapshot@4 _PssNtFreeWalkMarker@4 _PssNtQuerySnapshot@16 _PssNtValidateDescriptor@8 _PssNtWalkSnapshot@20 _RtlAbortRXact@4 _RtlAbsoluteToSelfRelativeSD@12 _RtlAcquirePebLock@0 _RtlAcquirePrivilege@16 _RtlAcquireReleaseSRWLockExclusive@4 _RtlAcquireResourceExclusive@8 _RtlAcquireResourceShared@8 _RtlAcquireSRWLockExclusive@4 _RtlAcquireSRWLockShared@4 _RtlActivateActivationContext@12 _RtlActivateActivationContextEx@16 _RtlAddAccessAllowedAce@16 _RtlAddAccessAllowedAceEx@20 _RtlAddAccessAllowedObjectAce@28 _RtlAddAccessDeniedAce@16 _RtlAddAccessDeniedAceEx@20 _RtlAddAccessDeniedObjectAce@28 _RtlAddAccessFilterAce@32 _RtlAddAce@20 _RtlAddActionToRXact@24 _RtlAddAtomToAtomTable@12 _RtlAddAttributeActionToRXact@32 _RtlAddAuditAccessAce@24 _RtlAddAuditAccessAceEx@28 _RtlAddAuditAccessObjectAce@36 _RtlAddIntegrityLabelToBoundaryDescriptor@8 _RtlAddMandatoryAce@24 _RtlAddProcessTrustLabelAce@24 _RtlAddRefActivationContext@4 _RtlAddResourceAttributeAce@28 _RtlAddSIDToBoundaryDescriptor@8 _RtlAddScopedPolicyIDAce@20 _RtlAddVectoredContinueHandler@8 _RtlAddVectoredExceptionHandler@8 _RtlAddressInSectionTable@12 _RtlAdjustPrivilege@16 _RtlAllocateActivationContextStack@4 _RtlAllocateAndInitializeSid@44 _RtlAllocateAndInitializeSidEx@16 _RtlAllocateHandle@8 _RtlAllocateHeap@12 _RtlAllocateMemoryBlockLookaside@12 _RtlAllocateMemoryZone@12 _RtlAllocateWnfSerializationGroup@0 _RtlAnsiCharToUnicodeChar@4 _RtlAnsiStringToUnicodeSize@4 _RtlAnsiStringToUnicodeString@12 _RtlAppendAsciizToString@8 _RtlAppendPathElement@12 _RtlAppendStringToString@8 _RtlAppendUnicodeStringToString@8 _RtlAppendUnicodeToString@8 _RtlApplicationVerifierStop@40 _RtlApplyRXact@4 _RtlApplyRXactNoFlush@4 _RtlAreAllAccessesGranted@8 _RtlAreAnyAccessesGranted@8 _RtlAreBitsClear@12 _RtlAreBitsSet@12 _RtlAssert@16 _RtlAvlInsertNodeEx@16 _RtlAvlRemoveNode@8 _RtlCancelTimer@8 _RtlCanonicalizeDomainName@12 _RtlCapabilityCheck@12 _RtlCapabilityCheckForSingleSessionSku@12 _RtlCaptureContext@4 _RtlCaptureStackBackTrace@16 _RtlCaptureStackContext@12 _RtlCharToInteger@12 _RtlCheckBootStatusIntegrity@8 _RtlCheckForOrphanedCriticalSections@4 _RtlCheckPortableOperatingSystem@4 _RtlCheckRegistryKey@8 _RtlCheckSandboxedToken@8 _RtlCheckSystemBootStatusIntegrity@4 _RtlCheckTokenCapability@12 _RtlCheckTokenMembership@12 _RtlCheckTokenMembershipEx@16 _RtlCleanUpTEBLangLists@0 _RtlClearAllBits@4 _RtlClearBit@8 _RtlClearBits@12 _RtlClearThreadWorkOnBehalfTicket@0 _RtlCloneUserProcess@20 _RtlCmDecodeMemIoResource@8 _RtlCmEncodeMemIoResource@24 _RtlCommitDebugInfo@8 _RtlCompactHeap@8 _RtlCompareAltitudes@8 _RtlCompareMemory@12 _RtlCompareMemoryUlong@12 _RtlCompareString@12 _RtlCompareUnicodeString@12 _RtlCompareUnicodeStrings@20 _RtlCompressBuffer@32 _RtlComputeCrc32@12 _RtlComputeImportTableHash@12 _RtlComputePrivatizedDllName_U@12 _RtlConnectToSm@16 _RtlConsoleMultiByteToUnicodeN@24 _RtlConstructCrossVmEventPath@12 _RtlConstructCrossVmMutexPath@12 _RtlContractHashTable@4 _RtlConvertDeviceFamilyInfoToString@16 _RtlConvertExclusiveToShared@4 _RtlConvertLCIDToString@20 _RtlConvertLongToLargeInteger@4 _RtlConvertSRWLockExclusiveToShared@4 _RtlConvertSharedToExclusive@4 _RtlConvertSidToUnicodeString@12 _RtlConvertToAutoInheritSecurityObject@24 _RtlConvertUlongToLargeInteger@4 _RtlCopyBitMap@12 _RtlCopyContext@12 _RtlCopyExtendedContext@12 _RtlCopyLuid@8 _RtlCopyLuidAndAttributesArray@12 _RtlCopyMappedMemory@12 _RtlCopySecurityDescriptor@8 _RtlCopySid@12 _RtlCopySidAndAttributesArray@28 _RtlCopyString@8 _RtlCopyUnicodeString@8 _RtlCrc32@12 _RtlCrc64@16 _RtlCreateAcl@12 _RtlCreateActivationContext@24 _RtlCreateAndSetSD@20 _RtlCreateAtomTable@8 _RtlCreateBootStatusDataFile@4 _RtlCreateBoundaryDescriptor@8 _RtlCreateEnvironment@8 _RtlCreateEnvironmentEx@12 _RtlCreateHashTable@12 _RtlCreateHashTableEx@16 _RtlCreateHeap@24 _RtlCreateMemoryBlockLookaside@20 _RtlCreateMemoryZone@12 _RtlCreateProcessParameters@40 _RtlCreateProcessParametersEx@44 _RtlCreateProcessParametersWithTemplate@12 _RtlCreateProcessReflection@24 _RtlCreateQueryDebugBuffer@8 _RtlCreateRegistryKey@8 _RtlCreateSecurityDescriptor@8 _RtlCreateServiceSid@12 _RtlCreateSystemVolumeInformationFolder@4 _RtlCreateTagHeap@16 _RtlCreateTimer@28 _RtlCreateTimerQueue@4 _RtlCreateUnicodeString@8 _RtlCreateUnicodeStringFromAsciiz@8 _RtlCreateUserProcess@40 _RtlCreateUserProcessEx@20 _RtlCreateUserSecurityObject@28 _RtlCreateUserStack@24 _RtlCreateUserThread@40 _RtlCreateVirtualAccountSid@16 _RtlCultureNameToLCID@8 _RtlCustomCPToUnicodeN@24 _RtlCutoverTimeToSystemTime@16 _RtlDeCommitDebugInfo@12 _RtlDeNormalizeProcessParams@4 _RtlDeactivateActivationContext@8 _RtlDebugPrintTimes@0 _RtlDecodePointer@4 _RtlDecodeRemotePointer@12 _RtlDecodeSystemPointer@4 _RtlDecompressBuffer@24 _RtlDecompressBufferEx@28 _RtlDecompressFragment@32 _RtlDefaultNpAcl@4 _RtlDelete@4 _RtlDeleteAce@8 _RtlDeleteAtomFromAtomTable@8 _RtlDeleteBoundaryDescriptor@4 _RtlDeleteCriticalSection@4 _RtlDeleteElementGenericTable@8 _RtlDeleteElementGenericTableAvl@8 _RtlDeleteElementGenericTableAvlEx@8 _RtlDeleteHashTable@4 _RtlDeleteNoSplay@8 _RtlDeleteRegistryValue@12 _RtlDeleteResource@4 _RtlDeleteSecurityObject@4 _RtlDeleteTimer@12 _RtlDeleteTimerQueue@4 _RtlDeleteTimerQueueEx@8 _RtlDeregisterSecureMemoryCacheCallback@4 _RtlDeregisterWait@4 _RtlDeregisterWaitEx@8 _RtlDeriveCapabilitySidsFromName@12 _RtlDestroyAtomTable@4 _RtlDestroyEnvironment@4 _RtlDestroyHandleTable@4 _RtlDestroyHeap@4 _RtlDestroyMemoryBlockLookaside@4 _RtlDestroyMemoryZone@4 _RtlDestroyProcessParameters@4 _RtlDestroyQueryDebugBuffer@4 _RtlDetectHeapLeaks@0 _RtlDetermineDosPathNameType_U@4 _RtlDisableThreadProfiling@4 _RtlDllShutdownInProgress@0 _RtlDnsHostNameToComputerName@12 _RtlDoesFileExists_U@4 _RtlDoesNameContainWildCards@4 _RtlDosApplyFileIsolationRedirection_Ustr@36 _RtlDosLongPathNameToNtPathName_U_WithStatus@16 _RtlDosLongPathNameToRelativeNtPathName_U_WithStatus@16 _RtlDosPathNameToNtPathName_U@16 _RtlDosPathNameToNtPathName_U_WithStatus@16 _RtlDosPathNameToRelativeNtPathName_U@16 _RtlDosPathNameToRelativeNtPathName_U_WithStatus@16 _RtlDosSearchPath_U@24 _RtlDosSearchPath_Ustr@36 _RtlDowncaseUnicodeChar@4 _RtlDowncaseUnicodeString@12 _RtlDumpResource@4 _RtlDuplicateUnicodeString@12 _RtlEmptyAtomTable@8 _RtlEnableEarlyCriticalSectionEventCreation@0 _RtlEnableThreadProfiling@20 _RtlEncodePointer@4 _RtlEncodeRemotePointer@12 _RtlEncodeSystemPointer@4 _RtlEndEnumerationHashTable@8 _RtlEndStrongEnumerationHashTable@8 _RtlEndWeakEnumerationHashTable@8 _RtlEnlargedIntegerMultiply@8 _RtlEnlargedUnsignedMultiply@8 _RtlEnterCriticalSection@4 _RtlEnumProcessHeaps@8 _RtlEnumerateEntryHashTable@8 _RtlEnumerateGenericTable@8 _RtlEnumerateGenericTableAvl@8 _RtlEnumerateGenericTableLikeADirectory@28 _RtlEnumerateGenericTableWithoutSplaying@8 _RtlEnumerateGenericTableWithoutSplayingAvl@8 _RtlEqualComputerName@8 _RtlEqualDomainName@8 _RtlEqualLuid@8 _RtlEqualPrefixSid@8 _RtlEqualSid@8 _RtlEqualString@12 _RtlEqualUnicodeString@12 _RtlEqualWnfChangeStamps@8 _RtlEraseUnicodeString@4 _RtlEthernetAddressToStringA@8 _RtlEthernetAddressToStringW@8 _RtlEthernetStringToAddressA@12 _RtlEthernetStringToAddressW@12 _RtlExitUserProcess@4 _RtlExitUserThread@4 _RtlExpandEnvironmentStrings@24 _RtlExpandEnvironmentStrings_U@16 _RtlExpandHashTable@4 _RtlExtendCorrelationVector@4 _RtlExtendMemoryBlockLookaside@8 _RtlExtendMemoryZone@8 _RtlExtendedIntegerMultiply@12 _RtlExtendedLargeIntegerDivide@16 _RtlExtendedMagicDivide@20 _RtlExtractBitMap@16 _RtlFillMemory@12 _RtlFillMemoryUlong@12 _RtlFillMemoryUlonglong@16 _RtlFindAceByType@12 _RtlFindActivationContextSectionGuid@20 _RtlFindActivationContextSectionString@20 _RtlFindCharInUnicodeString@16 _RtlFindClearBits@12 _RtlFindClearBitsAndSet@12 _RtlFindClearRuns@16 _RtlFindClosestEncodableLength@12 _RtlFindExportedRoutineByName@8 _RtlFindLastBackwardRunClear@12 _RtlFindLeastSignificantBit@8 _RtlFindLongestRunClear@8 _RtlFindMessage@20 _RtlFindMostSignificantBit@8 _RtlFindNextForwardRunClear@12 _RtlFindSetBits@12 _RtlFindSetBitsAndClear@12 _RtlFindUnicodeSubstring@12 _RtlFirstEntrySList@4 _RtlFirstFreeAce@8 _RtlFlsAlloc@8 _RtlFlsFree@4 _RtlFlsGetValue@8 _RtlFlsSetValue@8 _RtlFlushSecureMemoryCache@8 _RtlFormatCurrentUserKeyPath@4 _RtlFormatMessage@36 _RtlFormatMessageEx@40 _RtlFreeActivationContextStack@4 _RtlFreeAnsiString@4 _RtlFreeHandle@8 _RtlFreeHeap@12 _RtlFreeMemoryBlockLookaside@8 _RtlFreeOemString@4 _RtlFreeSid@4 _RtlFreeThreadActivationContextStack@0 _RtlFreeUTF8String@4 _RtlFreeUnicodeString@4 _RtlFreeUserStack@4 _RtlGUIDFromString@8 _RtlGenerate8dot3Name@16 _RtlGetAce@12 _RtlGetActiveActivationContext@4 _RtlGetActiveConsoleId@0 _RtlGetAppContainerNamedObjectPath@16 _RtlGetAppContainerParent@8 _RtlGetAppContainerSidType@8 _RtlGetCallersAddress@8 _RtlGetCompressionWorkSpaceSize@12 _RtlGetConsoleSessionForegroundProcessId@0 _RtlGetControlSecurityDescriptor@12 _RtlGetCriticalSectionRecursionCount@4 _RtlGetCurrentDirectory_U@8 _RtlGetCurrentPeb@0 _RtlGetCurrentProcessorNumber@0 _RtlGetCurrentProcessorNumberEx@4 _RtlGetCurrentServiceSessionId@0 _RtlGetCurrentTransaction@0 _RtlGetDaclSecurityDescriptor@16 _RtlGetDeviceFamilyInfoEnum@12 _RtlGetElementGenericTable@8 _RtlGetElementGenericTableAvl@8 _RtlGetEnabledExtendedFeatures@8 _RtlGetExePath@8 _RtlGetExtendedContextLength2@16 _RtlGetExtendedContextLength@8 _RtlGetExtendedFeaturesMask@4 _RtlGetFileMUIPath@28 _RtlGetFrame@0 _RtlGetFullPathName_U@16 _RtlGetFullPathName_UEx@20 _RtlGetFullPathName_UstrEx@32 _RtlGetGroupSecurityDescriptor@12 _RtlGetIntegerAtom@8 _RtlGetInterruptTimePrecise@4 _RtlGetLastNtStatus@0 _RtlGetLastWin32Error@0 _RtlGetLengthWithoutLastFullDosOrNtPathElement@12 _RtlGetLengthWithoutTrailingPathSeperators@12 _RtlGetLocaleFileMappingAddress@12 _RtlGetLongestNtPathLength@0 _RtlGetNativeSystemInformation@16 _RtlGetNextEntryHashTable@8 _RtlGetNtGlobalFlags@0 _RtlGetNtProductType@4 _RtlGetNtSystemRoot@0 _RtlGetNtVersionNumbers@12 _RtlGetOwnerSecurityDescriptor@12 _RtlGetPersistedStateLocation@28 _RtlGetProcessHeaps@8 _RtlGetProductInfo@20 _RtlGetReturnAddressHijackTarget@0 _RtlGetSaclSecurityDescriptor@16 _RtlGetSearchPath@4 _RtlGetSecurityDescriptorRMControl@8 _RtlGetSessionProperties@8 _RtlGetSetBootStatusData@24 _RtlGetSuiteMask@0 _RtlGetSystemBootStatus@16 _RtlGetSystemBootStatusEx@12 _RtlGetSystemPreferredUILanguages@20 _RtlGetSystemTimePrecise@0 _RtlGetThreadErrorMode@0 _RtlGetThreadLangIdByIndex@16 _RtlGetThreadPreferredUILanguages@16 _RtlGetThreadWorkOnBehalfTicket@8 _RtlGetTokenNamedObjectPath@12 _RtlGetUILanguageInfo@20 _RtlGetUnloadEventTrace@0 _RtlGetUnloadEventTraceEx@12 _RtlGetUserInfoHeap@20 _RtlGetUserPreferredUILanguages@20 _RtlGetVersion@4 _RtlGuardCheckLongJumpTarget@12 _RtlHashUnicodeString@16 _RtlHeapTrkInitialize@4 _RtlIdentifierAuthoritySid@4 _RtlIdnToAscii@20 _RtlIdnToNameprepUnicode@20 _RtlIdnToUnicode@20 _RtlImageDirectoryEntryToData@16 _RtlImageNtHeader@4 _RtlImageNtHeaderEx@20 _RtlImageRvaToSection@12 _RtlImageRvaToVa@16 _RtlImpersonateSelf@4 _RtlImpersonateSelfEx@12 _RtlIncrementCorrelationVector@4 _RtlInitAnsiString@8 _RtlInitAnsiStringEx@8 _RtlInitCodePageTable@8 _RtlInitEnumerationHashTable@8 _RtlInitNlsTables@16 _RtlInitString@8 _RtlInitStringEx@8 _RtlInitStrongEnumerationHashTable@8 _RtlInitUTF8String@8 _RtlInitUTF8StringEx@8 _RtlInitUnicodeString@8 _RtlInitUnicodeStringEx@8 _RtlInitWeakEnumerationHashTable@8 _RtlInitializeAtomPackage@4 _RtlInitializeBitMap@12 _RtlInitializeConditionVariable@4 _RtlInitializeCorrelationVector@12 _RtlInitializeCriticalSection@4 _RtlInitializeCriticalSectionAndSpinCount@8 _RtlInitializeCriticalSectionEx@12 _RtlInitializeExceptionChain@4 _RtlInitializeExtendedContext2@20 _RtlInitializeExtendedContext@12 _RtlInitializeGenericTable@20 _RtlInitializeGenericTableAvl@20 _RtlInitializeHandleTable@12 _RtlInitializeRXact@12 _RtlInitializeResource@4 _RtlInitializeSListHead@4 _RtlInitializeSRWLock@4 _RtlInitializeSid@12 _RtlInitializeSidEx _RtlInsertElementGenericTable@16 _RtlInsertElementGenericTableAvl@16 _RtlInsertElementGenericTableFull@24 _RtlInsertElementGenericTableFullAvl@24 _RtlInsertEntryHashTable@16 _RtlInt64ToUnicodeString@16 _RtlIntegerToChar@16 _RtlIntegerToUnicodeString@12 _RtlInterlockedClearBitRun@12 _RtlInterlockedCompareExchange64@20 _RtlInterlockedFlushSList@4 _RtlInterlockedPopEntrySList@4 _RtlInterlockedPushEntrySList@8 _RtlInterlockedPushListSListEx@16 _RtlInterlockedSetBitRun@12 _RtlIoDecodeMemIoResource@16 _RtlIoEncodeMemIoResource@40 _RtlIpv4AddressToStringA@8 _RtlIpv4AddressToStringExA@16 _RtlIpv4AddressToStringExW@16 _RtlIpv4AddressToStringW@8 _RtlIpv4StringToAddressA@16 _RtlIpv4StringToAddressExA@16 _RtlIpv4StringToAddressExW@16 _RtlIpv4StringToAddressW@16 _RtlIpv6AddressToStringA@8 _RtlIpv6AddressToStringExA@20 _RtlIpv6AddressToStringExW@20 _RtlIpv6AddressToStringW@8 _RtlIpv6StringToAddressA@12 _RtlIpv6StringToAddressExA@16 _RtlIpv6StringToAddressExW@16 _RtlIpv6StringToAddressW@12 _RtlIsActivationContextActive@4 _RtlIsCapabilitySid@4 _RtlIsCloudFilesPlaceholder@8 _RtlIsCriticalSectionLocked@4 _RtlIsCriticalSectionLockedByThread@4 _RtlIsCurrentProcess@4 _RtlIsCurrentThread@4 _RtlIsDosDeviceName_U@4 _RtlIsElevatedRid@4 _RtlIsGenericTableEmpty@4 _RtlIsGenericTableEmptyAvl@4 _RtlIsMultiSessionSku@0 _RtlIsMultiUsersInSessionSku@0 _RtlIsNameInExpression@16 _RtlIsNameInUnUpcasedExpression@16 _RtlIsNameLegalDOS8Dot3@12 _RtlIsNonEmptyDirectoryReparsePointAllowed@4 _RtlIsNormalizedString@16 _RtlIsPackageSid@4 _RtlIsParentOfChildAppContainer@8 _RtlIsPartialPlaceholder@8 _RtlIsPartialPlaceholderFileHandle@8 _RtlIsPartialPlaceholderFileInfo@12 _RtlIsProcessorFeaturePresent@4 _RtlIsStateSeparationEnabled@0 _RtlIsTextUnicode@12 _RtlIsThreadWithinLoaderCallout@0 _RtlIsUntrustedObject@12 _RtlIsValidHandle@8 _RtlIsValidIndexHandle@12 _RtlIsValidLocaleName@8 _RtlIsValidProcessTrustLabelSid@4 _RtlIsZeroMemory@8 _RtlKnownExceptionFilter@4 _RtlLCIDToCultureName@8 _RtlLargeIntegerAdd@16 _RtlLargeIntegerArithmeticShift@12 _RtlLargeIntegerDivide@20 _RtlLargeIntegerNegate@8 _RtlLargeIntegerShiftLeft@12 _RtlLargeIntegerShiftRight@12 _RtlLargeIntegerSubtract@16 _RtlLargeIntegerToChar@16 _RtlLcidToLocaleName@16 _RtlLeaveCriticalSection@4 _RtlLengthRequiredSid@4 _RtlLengthSecurityDescriptor@4 _RtlLengthSid@4 _RtlLocalTimeToSystemTime@8 _RtlLocaleNameToLcid@12 _RtlLocateExtendedFeature2@16 _RtlLocateExtendedFeature@12 _RtlLocateLegacyContext@8 _RtlLockBootStatusData@4 _RtlLockCurrentThread@0 _RtlLockHeap@4 _RtlLockMemoryBlockLookaside@4 _RtlLockMemoryZone@4 _RtlLockModuleSection@4 _RtlLogStackBackTrace@0 _RtlLookupAtomInAtomTable@12 _RtlLookupElementGenericTable@8 _RtlLookupElementGenericTableAvl@8 _RtlLookupElementGenericTableFull@16 _RtlLookupElementGenericTableFullAvl@16 _RtlLookupEntryHashTable@12 _RtlLookupFirstMatchingElementGenericTableAvl@12 _RtlMakeSelfRelativeSD@12 _RtlMapGenericMask@8 _RtlMapSecurityErrorToNtStatus@4 _RtlMoveMemory@12 _RtlMultiAppendUnicodeStringBuffer@12 _RtlMultiByteToUnicodeN@20 _RtlMultiByteToUnicodeSize@12 _RtlMultipleAllocateHeap@20 _RtlMultipleFreeHeap@16 _RtlNewInstanceSecurityObject@40 _RtlNewSecurityGrantedAccess@24 _RtlNewSecurityObject@24 _RtlNewSecurityObjectEx@32 _RtlNewSecurityObjectWithMultipleInheritance@36 _RtlNormalizeProcessParams@4 _RtlNormalizeSecurityDescriptor@20 _RtlNormalizeString@20 _RtlNotifyFeatureUsage@4 _RtlNtPathNameToDosPathName@16 _RtlNtStatusToDosError@4 _RtlNtStatusToDosErrorNoTeb@4 _RtlNumberGenericTableElements@4 _RtlNumberGenericTableElementsAvl@4 _RtlNumberOfClearBits@4 _RtlNumberOfClearBitsInRange@12 _RtlNumberOfSetBits@4 _RtlNumberOfSetBitsInRange@12 _RtlNumberOfSetBitsUlongPtr@4 _RtlOemStringToUnicodeSize@4 _RtlOemStringToUnicodeString@12 _RtlOemToUnicodeN@20 _RtlOpenCurrentUser@8 _RtlOsDeploymentState@4 _RtlOwnerAcesPresent@4 _RtlPcToFileHeader@8 _RtlPinAtomInAtomTable@8 _RtlPopFrame@4 _RtlPrefixString@12 _RtlPrefixUnicodeString@12 _RtlProcessFlsData@8 _RtlPublishWnfStateData@24 _RtlPushFrame@4 _RtlQueryActivationContextApplicationSettings@28 _RtlQueryAllFeatureConfigurations@16 _RtlQueryAtomInAtomTable@24 _RtlQueryDepthSList@4 _RtlQueryDynamicTimeZoneInformation@4 _RtlQueryElevationFlags@4 _RtlQueryEnvironmentVariable@24 _RtlQueryEnvironmentVariable_U@12 _RtlQueryFeatureConfiguration@16 _RtlQueryFeatureConfigurationChangeStamp@0 _RtlQueryFeatureUsageNotificationSubscriptions@8 _RtlQueryHeapInformation@20 _RtlQueryImageMitigationPolicy@20 _RtlQueryInformationAcl@16 _RtlQueryInformationActivationContext@28 _RtlQueryInformationActiveActivationContext@16 _RtlQueryPackageClaims@32 _RtlQueryPackageIdentity@24 _RtlQueryPackageIdentityEx@28 _RtlQueryPerformanceCounter@4 _RtlQueryPerformanceFrequency@4 _RtlQueryProcessBackTraceInformation@4 _RtlQueryProcessDebugInformation@12 _RtlQueryProcessLockInformation@4 _RtlQueryProcessPlaceholderCompatibilityMode@0 _RtlQueryProtectedPolicy@8 _RtlQueryRegistryValueWithFallback@28 _RtlQueryRegistryValues@20 _RtlQueryRegistryValuesEx@20 _RtlQuerySecurityObject@20 _RtlQueryThreadPlaceholderCompatibilityMode@0 _RtlQueryThreadProfiling@8 _RtlQueryTimeZoneInformation@4 _RtlQueryTokenHostIdAsUlong64@8 _RtlQueryUnbiasedInterruptTime@4 _RtlQueryValidationRunlevel@4 _RtlQueryWnfMetaNotification@20 _RtlQueryWnfStateData@24 _RtlQueryWnfStateDataWithExplicitScope@28 _RtlQueueApcWow64Thread@20 _RtlQueueWorkItem@12 _RtlRaiseCustomSystemEventTrigger@4 _RtlRaiseException@4 _RtlRaiseStatus@4 _RtlRandom@4 _RtlRandomEx@4 _RtlRbInsertNodeEx@16 _RtlRbRemoveNode@8 _RtlReAllocateHeap@16 _RtlReadThreadProfilingData@12 _RtlRealPredecessor@4 _RtlRealSuccessor@4 _RtlRegisterFeatureConfigurationChangeNotification@16 _RtlRegisterForWnfMetaNotification@24 _RtlRegisterSecureMemoryCacheCallback@4 _RtlRegisterThreadWithCsrss@0 _RtlRegisterWait@24 _RtlReleaseActivationContext@4 _RtlReleasePath@4 _RtlReleasePebLock@0 _RtlReleasePrivilege@4 _RtlReleaseRelativeName@4 _RtlReleaseResource@4 _RtlReleaseSRWLockExclusive@4 _RtlReleaseSRWLockShared@4 _RtlRemoteCall@28 _RtlRemoveEntryHashTable@12 _RtlRemovePrivileges@12 _RtlRemoveVectoredContinueHandler@4 _RtlRemoveVectoredExceptionHandler@4 _RtlReplaceSidInSd@16 _RtlReplaceSystemDirectoryInPath@16 _RtlReportException@12 _RtlReportExceptionEx@20 _RtlReportSilentProcessExit@8 _RtlReportSqmEscalation@24 _RtlResetMemoryBlockLookaside@4 _RtlResetRtlTranslations@4 _RtlRestoreBootStatusDefaults@4 _RtlRestoreLastWin32Error@4 _RtlRestoreSystemBootStatusDefaults@0 _RtlRestoreThreadPreferredUILanguages@4 _RtlRunDecodeUnicodeString@8 _RtlRunEncodeUnicodeString@8 _RtlRunOnceBeginInitialize@12 _RtlRunOnceComplete@12 _RtlRunOnceExecuteOnce@16 _RtlRunOnceInitialize@4 _RtlSecondsSince1970ToTime@8 _RtlSecondsSince1980ToTime@8 _RtlSelfRelativeToAbsoluteSD2@8 _RtlSelfRelativeToAbsoluteSD@44 _RtlSendMsgToSm@8 _RtlSetAllBits@4 _RtlSetBit@8 _RtlSetBits@12 _RtlSetControlSecurityDescriptor@12 _RtlSetCriticalSectionSpinCount@8 _RtlSetCurrentDirectory_U@4 _RtlSetCurrentEnvironment@8 _RtlSetCurrentTransaction@4 _RtlSetDaclSecurityDescriptor@16 _RtlSetDynamicTimeZoneInformation@4 _RtlSetEnvironmentStrings@8 _RtlSetEnvironmentVar@20 _RtlSetEnvironmentVariable@12 _RtlSetExtendedFeaturesMask@12 _RtlSetFeatureConfigurations@16 _RtlSetGroupSecurityDescriptor@12 _RtlSetHeapInformation@16 _RtlSetImageMitigationPolicy@20 _RtlSetInformationAcl@16 _RtlSetIoCompletionCallback@12 _RtlSetLastWin32Error@4 _RtlSetLastWin32ErrorAndNtStatusFromNtStatus@4 _RtlSetOwnerSecurityDescriptor@12 _RtlSetPortableOperatingSystem@4 _RtlSetProcessDebugInformation@12 _RtlSetProcessIsCritical _RtlSetProcessPlaceholderCompatibilityMode@4 _RtlSetProtectedPolicy@12 _RtlSetProxiedProcessId@4 _RtlSetSaclSecurityDescriptor@16 _RtlSetSearchPathMode@4 _RtlSetSecurityDescriptorRMControl@8 _RtlSetSecurityObject@20 _RtlSetSecurityObjectEx@24 _RtlSetSystemBootStatus@16 _RtlSetSystemBootStatusEx@12 _RtlSetThreadErrorMode@8 _RtlSetThreadIsCritical _RtlSetThreadPlaceholderCompatibilityMode@4 _RtlSetThreadPoolStartFunc@8 _RtlSetThreadPreferredUILanguages2@16 _RtlSetThreadPreferredUILanguages@12 _RtlSetThreadSubProcessTag@4 _RtlSetThreadWorkOnBehalfTicket@4 _RtlSetTimeZoneInformation@4 _RtlSetTimer@28 _RtlSetUnhandledExceptionFilter@4 _RtlSetUserFlagsHeap@20 _RtlSetUserValueHeap@16 _RtlSidDominates@12 _RtlSidDominatesForTrust@12 _RtlSidEqualLevel@12 _RtlSidHashInitialize@12 _RtlSidHashLookup@8 _RtlSidIsHigherLevel@12 _RtlSizeHeap@12 _RtlSleepConditionVariableCS@12 _RtlSleepConditionVariableSRW@16 _RtlSplay@4 _RtlStartRXact@4 _RtlStringFromGUID@8 _RtlStringFromGUIDEx@12 _RtlStronglyEnumerateEntryHashTable@8 _RtlSubAuthorityCountSid@4 _RtlSubAuthoritySid@8 _RtlSubscribeForFeatureUsageNotification@8 _RtlSubscribeWnfStateChangeNotification@36 _RtlSubtreePredecessor@4 _RtlSubtreeSuccessor@4 _RtlSwitchedVVI@16 _RtlSystemTimeToLocalTime@8 _RtlTestAndPublishWnfStateData@28 _RtlTestBit@8 _RtlTestProtectedAccess@8 _RtlTimeFieldsToTime@8 _RtlTimeToElapsedTimeFields@8 _RtlTimeToSecondsSince1970@8 _RtlTimeToSecondsSince1980@8 _RtlTimeToTimeFields@8 _RtlTraceDatabaseAdd@16 _RtlTraceDatabaseCreate@20 _RtlTraceDatabaseDestroy@4 _RtlTraceDatabaseEnumerate@12 _RtlTraceDatabaseFind@16 _RtlTraceDatabaseLock@4 _RtlTraceDatabaseUnlock@4 _RtlTraceDatabaseValidate@4 _RtlTryAcquirePebLock@0 _RtlTryAcquireSRWLockExclusive@4 _RtlTryAcquireSRWLockShared@4 _RtlTryConvertSRWLockSharedToExclusiveOrRelease@4 _RtlTryEnterCriticalSection@4 _RtlUTF8StringToUnicodeString@12 _RtlUTF8ToUnicodeN@20 _RtlUnhandledExceptionFilter2@8 _RtlUnhandledExceptionFilter@4 _RtlUnicodeStringToAnsiSize@4 _RtlUnicodeStringToAnsiString@12 _RtlUnicodeStringToCountedOemString@12 _RtlUnicodeStringToInteger@12 _RtlUnicodeStringToOemSize@4 _RtlUnicodeStringToOemString@12 _RtlUnicodeStringToUTF8String@12 _RtlUnicodeToCustomCPN@24 _RtlUnicodeToMultiByteN@20 _RtlUnicodeToMultiByteSize@12 _RtlUnicodeToOemN@20 _RtlUnicodeToUTF8N@20 _RtlUniform@4 _RtlUnlockBootStatusData@4 _RtlUnlockCurrentThread@0 _RtlUnlockHeap@4 _RtlUnlockMemoryBlockLookaside@4 _RtlUnlockMemoryZone@4 _RtlUnlockModuleSection@4 _RtlUnregisterFeatureConfigurationChangeNotification@4 _RtlUnsubscribeFromFeatureUsageNotifications@8 _RtlUnsubscribeWnfNotificationWaitForCompletion@4 _RtlUnsubscribeWnfNotificationWithCompletionCallback@12 _RtlUnsubscribeWnfStateChangeNotification@4 _RtlUnwind@16 _RtlUpcaseUnicodeChar@4 _RtlUpcaseUnicodeString@12 _RtlUpcaseUnicodeStringToCountedOemString@12 _RtlUpcaseUnicodeStringToOemString@12 _RtlUpcaseUnicodeToCustomCPN@24 _RtlUpcaseUnicodeToMultiByteN@20 _RtlUpcaseUnicodeToOemN@20 _RtlUpdateClonedCriticalSection@4 _RtlUpdateClonedSRWLock@8 _RtlUpdateTimer@16 _RtlUpperChar@4 _RtlUpperString@8 _RtlValidAcl@4 _RtlValidProcessProtection@4 _RtlValidRelativeSecurityDescriptor@12 _RtlValidSecurityDescriptor@4 _RtlValidSid@4 _RtlValidateCorrelationVector@4 _RtlValidateHeap@12 _RtlValidateProcessHeaps@0 _RtlValidateUnicodeString@8 _RtlVerifyVersionInfo@16 _RtlWaitForWnfMetaNotification@24 _RtlWaitOnAddress@16 _RtlWakeAddressAll@4 _RtlWakeAddressAllNoFence@4 _RtlWakeAddressSingle@4 _RtlWakeAddressSingleNoFence@4 _RtlWakeAllConditionVariable@4 _RtlWakeConditionVariable@4 _RtlWalkFrameChain@12 _RtlWalkHeap@8 _RtlWeaklyEnumerateEntryHashTable@8 _RtlWerpReportException@24 _RtlWnfCompareChangeStamp@8 _RtlWnfDllUnloadCallback@4 _RtlWow64CallFunction64@28 _RtlWow64EnableFsRedirection@4 _RtlWow64EnableFsRedirectionEx@8 _RtlWow64GetCurrentMachine@0 _RtlWow64GetEquivalentMachineCHPE@4 _RtlWow64GetProcessMachines@12 _RtlWow64GetSharedInfoProcess@12 _RtlWow64IsWowGuestMachineSupported@8 _RtlWriteRegistryValue@24 _RtlZeroMemory@8 _RtlZombifyActivationContext@4 _RtlpApplyLengthFunction@16 _RtlpCheckDynamicTimeZoneInformation@8 _RtlpCleanupRegistryKeys@0 _RtlpConvertAbsoluteToRelativeSecurityAttribute@12 _RtlpConvertCultureNamesToLCIDs@8 _RtlpConvertLCIDsToCultureNames@8 _RtlpConvertRelativeToAbsoluteSecurityAttribute@16 _RtlpCreateProcessRegistryInfo@4 _RtlpEnsureBufferSize@12 _RtlpGetLCIDFromLangInfoNode@12 _RtlpGetNameFromLangInfoNode@12 _RtlpGetSystemDefaultUILanguage@8 _RtlpGetUserOrMachineUILanguage4NLS@12 _RtlpInitializeLangRegistryInfo@4 _RtlpIsQualifiedLanguage@12 _RtlpLoadMachineUIByPolicy@12 _RtlpLoadUserUIByPolicy@12 _RtlpMergeSecurityAttributeInformation@16 _RtlpMuiFreeLangRegistryInfo@4 _RtlpMuiRegCreateRegistryInfo@0 _RtlpMuiRegFreeRegistryInfo@8 _RtlpMuiRegLoadRegistryInfo@8 _RtlpNotOwnerCriticalSection@4 _RtlpNtCreateKey@24 _RtlpNtEnumerateSubKey@16 _RtlpNtMakeTemporaryKey@4 _RtlpNtOpenKey@16 _RtlpNtQueryValueKey@20 _RtlpNtSetValueKey@16 _RtlpQueryDefaultUILanguage@8 _RtlpQueryProcessDebugInformationRemote@4 _RtlpRefreshCachedUILanguage@8 _RtlpSetInstallLanguage@8 _RtlpSetPreferredUILanguages@12 _RtlpSetUserPreferredUILanguages@12 _RtlpTimeFieldsToTime@12 _RtlpTimeToTimeFields@12 _RtlpUnWaitCriticalSection@4 _RtlpVerifyAndCommitUILanguageSettings@4 _RtlpWaitForCriticalSection@4 _RtlxAnsiStringToUnicodeSize@4 _RtlxOemStringToUnicodeSize@4 _RtlxUnicodeStringToAnsiSize@4 _RtlxUnicodeStringToOemSize@4 _ShipAssert@8 _ShipAssertGetBufferInfo@8 _ShipAssertMsgA@12 _ShipAssertMsgW@12 _TpAllocAlpcCompletion@20 _TpAllocCleanupGroup@4 _TpAllocIoCompletion@20 _TpAllocJobNotification@20 _TpAllocPool@8 _TpAllocTimer@16 _TpAllocWait@16 _TpAllocWork@16 _TpCallbackDetectedUnrecoverableError@4 _TpCallbackLeaveCriticalSectionOnCompletion@8 _TpCallbackMayRunLong@4 _TpCallbackReleaseMutexOnCompletion@8 _TpCallbackReleaseSemaphoreOnCompletion@12 _TpCallbackSetEventOnCompletion@8 _TpCallbackUnloadDllOnCompletion@8 _TpCancelAsyncIoOperation@4 _TpCaptureCaller@4 _TpCheckTerminateWorker@4 _TpDisassociateCallback@4 _TpIsTimerSet@4 _TpPostWork@4 _TpQueryPoolStackInformation@8 _TpReleaseAlpcCompletion@4 _TpReleaseCleanupGroup@4 _TpReleaseCleanupGroupMembers@12 _TpReleaseIoCompletion@4 _TpReleaseJobNotification@4 _TpReleasePool@4 _TpReleaseTimer@4 _TpReleaseWait@4 _TpReleaseWork@4 _TpSetPoolMaxThreads@8 _TpSetPoolMaxThreadsSoftLimit@8 _TpSetPoolMinThreads@8 _TpSetPoolStackInformation@8 _TpSetPoolWorkerThreadIdleTimeout@12 _TpSetTimer@16 _TpSetTimerEx@16 _TpSetWait@12 _TpSetWaitEx@16 _TpSimpleTryPost@12 _TpStartAsyncIoOperation@4 _TpTrimPools@0 _TpWaitForAlpcCompletion@4 _TpWaitForIoCompletion@8 _TpWaitForJobNotification@4 _TpWaitForTimer@8 _TpWaitForWait@8 _TpWaitForWork@8 _VerSetConditionMask@16 _WerReportExceptionWorker@4 _WerReportSQMEvent@16 _WinSqmAddToAverageDWORD@12 _WinSqmAddToStream@16 _WinSqmAddToStreamEx@20 _WinSqmCheckEscalationAddToStreamEx@20 _WinSqmCheckEscalationSetDWORD64@20 _WinSqmCheckEscalationSetDWORD@16 _WinSqmCheckEscalationSetString@16 _WinSqmCommonDatapointDelete@4 _WinSqmCommonDatapointSetDWORD64@16 _WinSqmCommonDatapointSetDWORD@12 _WinSqmCommonDatapointSetStreamEx@20 _WinSqmCommonDatapointSetString@12 _WinSqmEndSession@4 _WinSqmEventEnabled@8 _WinSqmEventWrite@12 _WinSqmGetEscalationRuleStatus@8 _WinSqmGetInstrumentationProperty@16 _WinSqmIncrementDWORD@12 _WinSqmIsOptedIn@0 _WinSqmIsOptedInEx@4 _WinSqmIsSessionDisabled@4 _WinSqmSetDWORD64@16 _WinSqmSetDWORD@12 _WinSqmSetEscalationInfo@16 _WinSqmSetIfMaxDWORD@12 _WinSqmSetIfMinDWORD@12 _WinSqmSetString@12 _WinSqmStartSession@12 _WinSqmStartSessionForPartner@16 _ZwAcceptConnectPort@24 _ZwAccessCheck@32 _ZwAccessCheckAndAuditAlarm@44 _ZwAccessCheckByType@44 _ZwAccessCheckByTypeAndAuditAlarm@64 _ZwAccessCheckByTypeResultList@44 _ZwAccessCheckByTypeResultListAndAuditAlarm@64 _ZwAccessCheckByTypeResultListAndAuditAlarmByHandle@68 _ZwAcquireCrossVmMutant@8 _ZwAcquireProcessActivityReference@12 _ZwAddAtom@12 _ZwAddAtomEx@16 _ZwAddBootEntry@8 _ZwAddDriverEntry@8 _ZwAdjustGroupsToken@24 _ZwAdjustPrivilegesToken@24 _ZwAdjustTokenClaimsAndDeviceGroups@64 _ZwAlertResumeThread@8 _ZwAlertThread@4 _ZwAlertThreadByThreadId@4 _ZwAllocateLocallyUniqueId@4 _ZwAllocateReserveObject@12 _ZwAllocateUserPhysicalPages@12 _ZwAllocateUserPhysicalPagesEx@20 _ZwAllocateUuids@16 _ZwAllocateVirtualMemory@24 _ZwAllocateVirtualMemoryEx@28 _ZwAlpcAcceptConnectPort@36 _ZwAlpcCancelMessage@12 _ZwAlpcConnectPort@44 _ZwAlpcConnectPortEx@44 _ZwAlpcCreatePort@12 _ZwAlpcCreatePortSection@24 _ZwAlpcCreateResourceReserve@16 _ZwAlpcCreateSectionView@12 _ZwAlpcCreateSecurityContext@12 _ZwAlpcDeletePortSection@12 _ZwAlpcDeleteResourceReserve@12 _ZwAlpcDeleteSectionView@12 _ZwAlpcDeleteSecurityContext@12 _ZwAlpcDisconnectPort@8 _ZwAlpcImpersonateClientContainerOfPort@12 _ZwAlpcImpersonateClientOfPort@12 _ZwAlpcOpenSenderProcess@24 _ZwAlpcOpenSenderThread@24 _ZwAlpcQueryInformation@20 _ZwAlpcQueryInformationMessage@24 _ZwAlpcRevokeSecurityContext@12 _ZwAlpcSendWaitReceivePort@32 _ZwAlpcSetInformation@16 _ZwApphelpCacheControl@8 _ZwAreMappedFilesTheSame@8 _ZwAssignProcessToJobObject@8 _ZwAssociateWaitCompletionPacket@32 _ZwCallEnclave@16 _ZwCallbackReturn@12 _ZwCancelIoFile@8 _ZwCancelIoFileEx@12 _ZwCancelSynchronousIoFile@12 _ZwCancelTimer2@8 _ZwCancelTimer@8 _ZwCancelWaitCompletionPacket@8 _ZwClearEvent@4 _ZwClose@4 _ZwCloseObjectAuditAlarm@12 _ZwCommitComplete@8 _ZwCommitEnlistment@8 _ZwCommitRegistryTransaction@8 _ZwCommitTransaction@8 _ZwCompactKeys@8 _ZwCompareObjects@8 _ZwCompareSigningLevels@8 _ZwCompareTokens@12 _ZwCompleteConnectPort@4 _ZwCompressKey@4 _ZwConnectPort@32 _ZwContinue@8 _ZwContinueEx@8 _ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter@16 _ZwCreateCrossVmEvent@24 _ZwCreateCrossVmMutant@24 _ZwCreateDebugObject@16 _ZwCreateDirectoryObject@12 _ZwCreateDirectoryObjectEx@20 _ZwCreateEnclave@36 _ZwCreateEnlistment@32 _ZwCreateEvent@20 _ZwCreateEventPair@12 _ZwCreateFile@44 _ZwCreateIRTimer@12 _ZwCreateIoCompletion@16 _ZwCreateJobObject@12 _ZwCreateJobSet@12 _ZwCreateKey@28 _ZwCreateKeyTransacted@32 _ZwCreateKeyedEvent@16 _ZwCreateLowBoxToken@36 _ZwCreateMailslotFile@32 _ZwCreateMutant@16 _ZwCreateNamedPipeFile@56 _ZwCreatePagingFile@16 _ZwCreatePartition@16 _ZwCreatePort@20 _ZwCreatePrivateNamespace@16 _ZwCreateProcess@32 _ZwCreateProcessEx@36 _ZwCreateProfile@36 _ZwCreateProfileEx@40 _ZwCreateRegistryTransaction@16 _ZwCreateResourceManager@28 _ZwCreateSection@28 _ZwCreateSectionEx@36 _ZwCreateSemaphore@20 _ZwCreateSymbolicLinkObject@16 _ZwCreateThread@32 _ZwCreateThreadEx@44 _ZwCreateTimer2@20 _ZwCreateTimer@16 _ZwCreateToken@52 _ZwCreateTokenEx@68 _ZwCreateTransaction@40 _ZwCreateTransactionManager@24 _ZwCreateUserProcess@44 _ZwCreateWaitCompletionPacket@12 _ZwCreateWaitablePort@20 _ZwCreateWnfStateName@28 _ZwCreateWorkerFactory@40 _ZwDebugActiveProcess@8 _ZwDebugContinue@12 _ZwDelayExecution@8 _ZwDeleteAtom@4 _ZwDeleteBootEntry@4 _ZwDeleteDriverEntry@4 _ZwDeleteFile@4 _ZwDeleteKey@4 _ZwDeleteObjectAuditAlarm@12 _ZwDeletePrivateNamespace@4 _ZwDeleteValueKey@8 _ZwDeleteWnfStateData@8 _ZwDeleteWnfStateName@4 _ZwDeviceIoControlFile@40 _ZwDirectGraphicsCall@20 _ZwDisableLastKnownGood@0 _ZwDisplayString@4 _ZwDrawText@4 _ZwDuplicateObject@28 _ZwDuplicateToken@24 _ZwEnableLastKnownGood@0 _ZwEnumerateBootEntries@8 _ZwEnumerateDriverEntries@8 _ZwEnumerateKey@24 _ZwEnumerateSystemEnvironmentValuesEx@12 _ZwEnumerateTransactionObject@20 _ZwEnumerateValueKey@24 _ZwExtendSection@8 _ZwFilterBootOption@20 _ZwFilterToken@24 _ZwFilterTokenEx@56 _ZwFindAtom@12 _ZwFlushBuffersFile@8 _ZwFlushBuffersFileEx@20 _ZwFlushInstallUILanguage@8 _ZwFlushInstructionCache@12 _ZwFlushKey@4 _ZwFlushProcessWriteBuffers@0 _ZwFlushVirtualMemory@16 _ZwFlushWriteBuffer@0 _ZwFreeUserPhysicalPages@12 _ZwFreeVirtualMemory@16 _ZwFreezeRegistry@4 _ZwFreezeTransactions@8 _ZwFsControlFile@40 _ZwGetCachedSigningLevel@24 _ZwGetCompleteWnfStateSubscription@24 _ZwGetContextThread@8 _ZwGetCurrentProcessorNumber@0 _ZwGetCurrentProcessorNumberEx@4 _ZwGetDevicePowerState@8 _ZwGetMUIRegistryInfo@12 _ZwGetNextProcess@20 _ZwGetNextThread@24 _ZwGetNlsSectionPtr@20 _ZwGetNotificationResourceManager@28 _ZwGetWriteWatch@28 _ZwImpersonateAnonymousToken@4 _ZwImpersonateClientOfPort@8 _ZwImpersonateThread@12 _ZwInitializeEnclave@20 _ZwInitializeNlsFiles@12 _ZwInitializeRegistry@4 _ZwInitiatePowerAction@16 _ZwIsProcessInJob@8 _ZwIsSystemResumeAutomatic@0 _ZwIsUILanguageComitted@0 _ZwListenPort@8 _ZwLoadDriver@4 _ZwLoadEnclaveData@36 _ZwLoadKey2@12 _ZwLoadKey3@32 _ZwLoadKey@8 _ZwLoadKeyEx@32 _ZwLockFile@40 _ZwLockProductActivationKeys@8 _ZwLockRegistryKey@4 _ZwLockVirtualMemory@16 _ZwMakePermanentObject@4 _ZwMakeTemporaryObject@4 _ZwManageHotPatch@16 _ZwManagePartition@20 _ZwMapCMFModule@24 _ZwMapUserPhysicalPages@12 _ZwMapUserPhysicalPagesScatter@12 _ZwMapViewOfSection@40 _ZwMapViewOfSectionEx@36 _ZwModifyBootEntry@4 _ZwModifyDriverEntry@4 _ZwNotifyChangeDirectoryFile@36 _ZwNotifyChangeDirectoryFileEx@40 _ZwNotifyChangeKey@40 _ZwNotifyChangeMultipleKeys@48 _ZwNotifyChangeSession@32 _ZwOpenDirectoryObject@12 _ZwOpenEnlistment@20 _ZwOpenEvent@12 _ZwOpenEventPair@12 _ZwOpenFile@24 _ZwOpenIoCompletion@12 _ZwOpenJobObject@12 _ZwOpenKey@12 _ZwOpenKeyEx@16 _ZwOpenKeyTransacted@16 _ZwOpenKeyTransactedEx@20 _ZwOpenKeyedEvent@12 _ZwOpenMutant@12 _ZwOpenObjectAuditAlarm@48 _ZwOpenPartition@12 _ZwOpenPrivateNamespace@16 _ZwOpenProcess@16 _ZwOpenProcessToken@12 _ZwOpenProcessTokenEx@16 _ZwOpenRegistryTransaction@12 _ZwOpenResourceManager@20 _ZwOpenSection@12 _ZwOpenSemaphore@12 _ZwOpenSession@12 _ZwOpenSymbolicLinkObject@12 _ZwOpenThread@16 _ZwOpenThreadToken@16 _ZwOpenThreadTokenEx@20 _ZwOpenTimer@12 _ZwOpenTransaction@20 _ZwOpenTransactionManager@24 _ZwPlugPlayControl@12 _ZwPowerInformation@20 _ZwPrePrepareComplete@8 _ZwPrePrepareEnlistment@8 _ZwPrepareComplete@8 _ZwPrepareEnlistment@8 _ZwPrivilegeCheck@12 _ZwPrivilegeObjectAuditAlarm@24 _ZwPrivilegedServiceAuditAlarm@20 _ZwPropagationComplete@16 _ZwPropagationFailed@12 _ZwProtectVirtualMemory@20 _ZwPssCaptureVaSpaceBulk@20 _ZwPulseEvent@8 _ZwQueryAttributesFile@8 _ZwQueryAuxiliaryCounterFrequency@4 _ZwQueryBootEntryOrder@8 _ZwQueryBootOptions@8 _ZwQueryDebugFilterState@8 _ZwQueryDefaultLocale@8 _ZwQueryDefaultUILanguage@4 _ZwQueryDirectoryFile@44 _ZwQueryDirectoryFileEx@40 _ZwQueryDirectoryObject@28 _ZwQueryDriverEntryOrder@8 _ZwQueryEaFile@36 _ZwQueryEvent@20 _ZwQueryFullAttributesFile@8 _ZwQueryInformationAtom@20 _ZwQueryInformationByName@20 _ZwQueryInformationEnlistment@20 _ZwQueryInformationFile@20 _ZwQueryInformationJobObject@20 _ZwQueryInformationPort@20 _ZwQueryInformationProcess@20 _ZwQueryInformationResourceManager@20 _ZwQueryInformationThread@20 _ZwQueryInformationToken@20 _ZwQueryInformationTransaction@20 _ZwQueryInformationTransactionManager@20 _ZwQueryInformationWorkerFactory@20 _ZwQueryInstallUILanguage@4 _ZwQueryIntervalProfile@8 _ZwQueryIoCompletion@20 _ZwQueryKey@20 _ZwQueryLicenseValue@20 _ZwQueryMultipleValueKey@24 _ZwQueryMutant@20 _ZwQueryObject@20 _ZwQueryOpenSubKeys@8 _ZwQueryOpenSubKeysEx@16 _ZwQueryPerformanceCounter@8 _ZwQueryPortInformationProcess@0 _ZwQueryQuotaInformationFile@36 _ZwQuerySection@20 _ZwQuerySecurityAttributesToken@24 _ZwQuerySecurityObject@20 _ZwQuerySecurityPolicy@24 _ZwQuerySemaphore@20 _ZwQuerySymbolicLinkObject@12 _ZwQuerySystemEnvironmentValue@16 _ZwQuerySystemEnvironmentValueEx@20 _ZwQuerySystemInformation@16 _ZwQuerySystemInformationEx@24 _ZwQuerySystemTime@4 _ZwQueryTimer@20 _ZwQueryTimerResolution@12 _ZwQueryValueKey@24 _ZwQueryVirtualMemory@24 _ZwQueryVolumeInformationFile@20 _ZwQueryWnfStateData@24 _ZwQueryWnfStateNameInformation@20 _ZwQueueApcThread@20 _ZwQueueApcThreadEx@24 _ZwRaiseException@12 _ZwRaiseHardError@24 _ZwReadFile@36 _ZwReadFileScatter@36 _ZwReadOnlyEnlistment@8 _ZwReadRequestData@24 _ZwReadVirtualMemory@20 _ZwRecoverEnlistment@8 _ZwRecoverResourceManager@4 _ZwRecoverTransactionManager@4 _ZwRegisterProtocolAddressInformation@20 _ZwRegisterThreadTerminatePort@4 _ZwReleaseKeyedEvent@16 _ZwReleaseMutant@8 _ZwReleaseSemaphore@12 _ZwReleaseWorkerFactoryWorker@4 _ZwRemoveIoCompletion@20 _ZwRemoveIoCompletionEx@24 _ZwRemoveProcessDebug@8 _ZwRenameKey@8 _ZwRenameTransactionManager@8 _ZwReplaceKey@12 _ZwReplacePartitionUnit@12 _ZwReplyPort@8 _ZwReplyWaitReceivePort@16 _ZwReplyWaitReceivePortEx@20 _ZwReplyWaitReplyPort@8 _ZwRequestPort@8 _ZwRequestWaitReplyPort@12 _ZwResetEvent@8 _ZwResetWriteWatch@12 _ZwRestoreKey@12 _ZwResumeProcess@4 _ZwResumeThread@8 _ZwRevertContainerImpersonation@0 _ZwRollbackComplete@8 _ZwRollbackEnlistment@8 _ZwRollbackRegistryTransaction@8 _ZwRollbackTransaction@8 _ZwRollforwardTransactionManager@8 _ZwSaveKey@8 _ZwSaveKeyEx@12 _ZwSaveMergedKeys@12 _ZwSecureConnectPort@36 _ZwSerializeBoot@0 _ZwSetBootEntryOrder@8 _ZwSetBootOptions@8 _ZwSetCachedSigningLevel2@24 _ZwSetCachedSigningLevel@20 _ZwSetContextThread@8 _ZwSetDebugFilterState@12 _ZwSetDefaultHardErrorPort@4 _ZwSetDefaultLocale@8 _ZwSetDefaultUILanguage@4 _ZwSetDriverEntryOrder@8 _ZwSetEaFile@16 _ZwSetEvent@8 _ZwSetEventBoostPriority@4 _ZwSetHighEventPair@4 _ZwSetHighWaitLowEventPair@4 _ZwSetIRTimer@8 _ZwSetInformationDebugObject@20 _ZwSetInformationEnlistment@16 _ZwSetInformationFile@20 _ZwSetInformationJobObject@16 _ZwSetInformationKey@16 _ZwSetInformationObject@16 _ZwSetInformationProcess@16 _ZwSetInformationResourceManager@16 _ZwSetInformationSymbolicLink@16 _ZwSetInformationThread@16 _ZwSetInformationToken@16 _ZwSetInformationTransaction@16 _ZwSetInformationTransactionManager@16 _ZwSetInformationVirtualMemory@24 _ZwSetInformationWorkerFactory@16 _ZwSetIntervalProfile@8 _ZwSetIoCompletion@20 _ZwSetIoCompletionEx@24 _ZwSetLdtEntries@24 _ZwSetLowEventPair@4 _ZwSetLowWaitHighEventPair@4 _ZwSetQuotaInformationFile@16 _ZwSetSecurityObject@12 _ZwSetSystemEnvironmentValue@8 _ZwSetSystemEnvironmentValueEx@20 _ZwSetSystemInformation@12 _ZwSetSystemPowerState@12 _ZwSetSystemTime@8 _ZwSetThreadExecutionState@8 _ZwSetTimer2@16 _ZwSetTimer@28 _ZwSetTimerEx@16 _ZwSetTimerResolution@12 _ZwSetUuidSeed@4 _ZwSetValueKey@24 _ZwSetVolumeInformationFile@20 _ZwSetWnfProcessNotificationEvent@4 _ZwShutdownSystem@4 _ZwShutdownWorkerFactory@8 _ZwSignalAndWaitForSingleObject@16 _ZwSinglePhaseReject@8 _ZwStartProfile@4 _ZwStopProfile@4 _ZwSubscribeWnfStateChange@16 _ZwSuspendProcess@4 _ZwSuspendThread@8 _ZwSystemDebugControl@24 _ZwTerminateEnclave@8 _ZwTerminateJobObject@8 _ZwTerminateProcess@8 _ZwTerminateThread@8 _ZwTestAlert@0 _ZwThawRegistry@0 _ZwThawTransactions@0 _ZwTraceControl@24 _ZwTraceEvent@16 _ZwTranslateFilePath@16 _ZwUmsThreadYield@4 _ZwUnloadDriver@4 _ZwUnloadKey2@8 _ZwUnloadKey@4 _ZwUnloadKeyEx@8 _ZwUnlockFile@20 _ZwUnlockVirtualMemory@16 _ZwUnmapViewOfSection@8 _ZwUnmapViewOfSectionEx@12 _ZwUnsubscribeWnfStateChange@4 _ZwUpdateWnfStateData@28 _ZwVdmControl@8 _ZwWaitForAlertByThreadId@8 _ZwWaitForDebugEvent@16 _ZwWaitForKeyedEvent@16 _ZwWaitForMultipleObjects32@20 _ZwWaitForMultipleObjects@20 _ZwWaitForSingleObject@12 _ZwWaitForWorkViaWorkerFactory@20 _ZwWaitHighEventPair@4 _ZwWaitLowEventPair@4 _ZwWorkerFactoryWorkerReady@4 _ZwWriteFile@36 _ZwWriteFileGather@36 _ZwWriteRequestData@24 _ZwWriteVirtualMemory@20 _ZwYieldExecution@0 __IMPORT_DESCRIPTOR_ntdll __NULL_IMPORT_DESCRIPTOR __imp_@RtlActivateActivationContextUnsafeFast@8 __imp_@RtlDeactivateActivationContextUnsafeFast@4 __imp_@RtlInterlockedPushListSList@16 __imp_@RtlUlongByteSwap@4 __imp_@RtlUlonglongByteSwap@8 __imp_@RtlUshortByteSwap@4 __imp__AlpcAdjustCompletionListConcurrencyCount@8 __imp__AlpcFreeCompletionListMessage@8 __imp__AlpcGetCompletionListLastMessageInformation@12 __imp__AlpcGetCompletionListMessageAttributes@8 __imp__AlpcGetHeaderSize@4 __imp__AlpcGetMessageAttribute@8 __imp__AlpcGetMessageFromCompletionList@8 __imp__AlpcGetOutstandingCompletionListMessageCount@4 __imp__AlpcInitializeMessageAttribute@16 __imp__AlpcMaxAllowedMessageLength@0 __imp__AlpcRegisterCompletionList@20 __imp__AlpcRegisterCompletionListWorkerThread@4 __imp__AlpcRundownCompletionList@4 __imp__AlpcUnregisterCompletionList@4 __imp__AlpcUnregisterCompletionListWorkerThread@4 __imp__CsrAllocateCaptureBuffer@8 __imp__CsrAllocateMessagePointer@12 __imp__CsrCaptureMessageBuffer@16 __imp__CsrCaptureMessageMultiUnicodeStringsInPlace@12 __imp__CsrCaptureMessageString@20 __imp__CsrCaptureTimeout@8 __imp__CsrClientCallServer@16 __imp__CsrClientConnectToServer@20 __imp__CsrFreeCaptureBuffer@4 __imp__CsrGetProcessId@0 __imp__CsrIdentifyAlertableThread@0 __imp__CsrSetPriorityClass@8 __imp__CsrVerifyRegion@8 __imp__DbgBreakPoint@0 __imp__DbgPrint __imp__DbgPrintEx __imp__DbgPrintReturnControlC __imp__DbgPrompt@12 __imp__DbgQueryDebugFilterState@8 __imp__DbgSetDebugFilterState@12 __imp__DbgUiConnectToDbg@0 __imp__DbgUiContinue@8 __imp__DbgUiConvertStateChangeStructure@8 __imp__DbgUiConvertStateChangeStructureEx@8 __imp__DbgUiDebugActiveProcess@4 __imp__DbgUiGetThreadDebugObject@0 __imp__DbgUiIssueRemoteBreakin@4 __imp__DbgUiRemoteBreakin@4 __imp__DbgUiSetThreadDebugObject@4 __imp__DbgUiStopDebugging@4 __imp__DbgUiWaitStateChange@8 __imp__DbgUserBreakPoint@0 __imp__EtwCheckCoverage@4 __imp__EtwCreateTraceInstanceId@8 __imp__EtwDeliverDataBlock@4 __imp__EtwEnumerateProcessRegGuids@12 __imp__EtwEventActivityIdControl@8 __imp__EtwEventEnabled@12 __imp__EtwEventProviderEnabled@20 __imp__EtwEventRegister@16 __imp__EtwEventSetInformation@20 __imp__EtwEventUnregister@8 __imp__EtwEventWrite@20 __imp__EtwEventWriteEndScenario@20 __imp__EtwEventWriteEx@40 __imp__EtwEventWriteFull@32 __imp__EtwEventWriteNoRegistration@16 __imp__EtwEventWriteStartScenario@20 __imp__EtwEventWriteString@24 __imp__EtwEventWriteTransfer@28 __imp__EtwGetTraceEnableFlags@8 __imp__EtwGetTraceEnableLevel@8 __imp__EtwGetTraceLoggerHandle@4 __imp__EtwLogTraceEvent@12 __imp__EtwNotificationRegister@20 __imp__EtwNotificationUnregister@12 __imp__EtwProcessPrivateLoggerRequest@4 __imp__EtwRegisterSecurityProvider@0 __imp__EtwRegisterTraceGuidsA@32 __imp__EtwRegisterTraceGuidsW@32 __imp__EtwReplyNotification@4 __imp__EtwSendNotification@20 __imp__EtwTraceEventInstance@20 __imp__EtwTraceMessage __imp__EtwTraceMessageVa@24 __imp__EtwUnregisterTraceGuids@8 __imp__EtwWriteUMSecurityEvent@16 __imp__EtwpCreateEtwThread@8 __imp__EtwpGetCpuSpeed@4 __imp__EvtIntReportAuthzEventAndSourceAsync@44 __imp__EvtIntReportEventAndSourceAsync@44 __imp__LdrAccessResource@16 __imp__LdrAddDllDirectory@8 __imp__LdrAddLoadAsDataTable@20 __imp__LdrAddRefDll@8 __imp__LdrAppxHandleIntegrityFailure@4 __imp__LdrCallEnclave@12 __imp__LdrCreateEnclave@36 __imp__LdrDeleteEnclave@4 __imp__LdrDisableThreadCalloutsForDll@4 __imp__LdrEnumResources@20 __imp__LdrEnumerateLoadedModules@12 __imp__LdrFastFailInLoaderCallout@0 __imp__LdrFindEntryForAddress@8 __imp__LdrFindResourceDirectory_U@16 __imp__LdrFindResourceEx_U@20 __imp__LdrFindResource_U@16 __imp__LdrFlushAlternateResourceModules@0 __imp__LdrGetDllDirectory@4 __imp__LdrGetDllFullName@8 __imp__LdrGetDllHandle@16 __imp__LdrGetDllHandleByMapping@8 __imp__LdrGetDllHandleByName@12 __imp__LdrGetDllHandleEx@20 __imp__LdrGetDllPath@16 __imp__LdrGetFileNameFromLoadAsDataTable@8 __imp__LdrGetProcedureAddress@16 __imp__LdrGetProcedureAddressEx@20 __imp__LdrGetProcedureAddressForCaller@24 __imp__LdrInitShimEngineDynamic@8 __imp__LdrInitializeEnclave@20 __imp__LdrIsModuleSxsRedirected@4 __imp__LdrLoadAlternateResourceModule@16 __imp__LdrLoadAlternateResourceModuleEx@20 __imp__LdrLoadDll@16 __imp__LdrLoadEnclaveModule@12 __imp__LdrLockLoaderLock@12 __imp__LdrOpenImageFileOptionsKey@12 __imp__LdrParentInterlockedPopEntrySList __imp__LdrParentRtlInitializeNtUserPfn __imp__LdrParentRtlResetNtUserPfn __imp__LdrParentRtlRetrieveNtUserPfn __imp__LdrProcessRelocationBlock@16 __imp__LdrProcessRelocationBlockEx@20 __imp__LdrQueryImageFileExecutionOptions@24 __imp__LdrQueryImageFileExecutionOptionsEx@28 __imp__LdrQueryImageFileKeyOption@24 __imp__LdrQueryModuleServiceTags@12 __imp__LdrQueryOptionalDelayLoadedAPI@16 __imp__LdrQueryProcessModuleInformation@12 __imp__LdrRemoveDllDirectory@4 __imp__LdrRemoveLoadAsDataTable@16 __imp__LdrResFindResource@36 __imp__LdrResFindResourceDirectory@28 __imp__LdrResRelease@12 __imp__LdrResSearchResource@32 __imp__LdrResolveDelayLoadedAPI@24 __imp__LdrResolveDelayLoadsFromDll@12 __imp__LdrSetAppCompatDllRedirectionCallback@12 __imp__LdrSetDefaultDllDirectories@4 __imp__LdrSetDllDirectory@4 __imp__LdrSetDllManifestProber@12 __imp__LdrSetMUICacheType@4 __imp__LdrShutdownProcess@0 __imp__LdrShutdownThread@0 __imp__LdrSystemDllInitBlock __imp__LdrUnloadAlternateResourceModule@4 __imp__LdrUnloadAlternateResourceModuleEx@8 __imp__LdrUnloadDll@4 __imp__LdrUnlockLoaderLock@8 __imp__LdrUpdatePackageSearchPath@4 __imp__LdrVerifyImageMatchesChecksum@16 __imp__LdrVerifyImageMatchesChecksumEx@8 __imp__LdrpChildNtdll __imp__LdrpResGetMappingSize@16 __imp__LdrpResGetResourceDirectory@20 __imp__NlsAnsiCodePage __imp__NlsMbCodePageTag __imp__NlsMbOemCodePageTag __imp__NtAcceptConnectPort@24 __imp__NtAccessCheck@32 __imp__NtAccessCheckAndAuditAlarm@44 __imp__NtAccessCheckByType@44 __imp__NtAccessCheckByTypeAndAuditAlarm@64 __imp__NtAccessCheckByTypeResultList@44 __imp__NtAccessCheckByTypeResultListAndAuditAlarm@64 __imp__NtAccessCheckByTypeResultListAndAuditAlarmByHandle@68 __imp__NtAcquireCrossVmMutant@8 __imp__NtAcquireProcessActivityReference@12 __imp__NtAddAtom@12 __imp__NtAddAtomEx@16 __imp__NtAddBootEntry@8 __imp__NtAddDriverEntry@8 __imp__NtAdjustGroupsToken@24 __imp__NtAdjustPrivilegesToken@24 __imp__NtAdjustTokenClaimsAndDeviceGroups@64 __imp__NtAlertResumeThread@8 __imp__NtAlertThread@4 __imp__NtAlertThreadByThreadId@4 __imp__NtAllocateLocallyUniqueId@4 __imp__NtAllocateReserveObject@12 __imp__NtAllocateUserPhysicalPages@12 __imp__NtAllocateUserPhysicalPagesEx@20 __imp__NtAllocateUuids@16 __imp__NtAllocateVirtualMemory@24 __imp__NtAllocateVirtualMemoryEx@28 __imp__NtAlpcAcceptConnectPort@36 __imp__NtAlpcCancelMessage@12 __imp__NtAlpcConnectPort@44 __imp__NtAlpcConnectPortEx@44 __imp__NtAlpcCreatePort@12 __imp__NtAlpcCreatePortSection@24 __imp__NtAlpcCreateResourceReserve@16 __imp__NtAlpcCreateSectionView@12 __imp__NtAlpcCreateSecurityContext@12 __imp__NtAlpcDeletePortSection@12 __imp__NtAlpcDeleteResourceReserve@12 __imp__NtAlpcDeleteSectionView@12 __imp__NtAlpcDeleteSecurityContext@12 __imp__NtAlpcDisconnectPort@8 __imp__NtAlpcImpersonateClientContainerOfPort@12 __imp__NtAlpcImpersonateClientOfPort@12 __imp__NtAlpcOpenSenderProcess@24 __imp__NtAlpcOpenSenderThread@24 __imp__NtAlpcQueryInformation@20 __imp__NtAlpcQueryInformationMessage@24 __imp__NtAlpcRevokeSecurityContext@12 __imp__NtAlpcSendWaitReceivePort@32 __imp__NtAlpcSetInformation@16 __imp__NtApphelpCacheControl@8 __imp__NtAreMappedFilesTheSame@8 __imp__NtAssignProcessToJobObject@8 __imp__NtAssociateWaitCompletionPacket@32 __imp__NtCallEnclave@16 __imp__NtCallbackReturn@12 __imp__NtCancelIoFile@8 __imp__NtCancelIoFileEx@12 __imp__NtCancelSynchronousIoFile@12 __imp__NtCancelTimer2@8 __imp__NtCancelTimer@8 __imp__NtCancelWaitCompletionPacket@8 __imp__NtClearEvent@4 __imp__NtClose@4 __imp__NtCloseObjectAuditAlarm@12 __imp__NtCommitComplete@8 __imp__NtCommitEnlistment@8 __imp__NtCommitRegistryTransaction@8 __imp__NtCommitTransaction@8 __imp__NtCompactKeys@8 __imp__NtCompareObjects@8 __imp__NtCompareSigningLevels@8 __imp__NtCompareTokens@12 __imp__NtCompleteConnectPort@4 __imp__NtCompressKey@4 __imp__NtConnectPort@32 __imp__NtContinue@8 __imp__NtContinueEx@8 __imp__NtConvertBetweenAuxiliaryCounterAndPerformanceCounter@16 __imp__NtCreateCrossVmEvent@24 __imp__NtCreateCrossVmMutant@24 __imp__NtCreateDebugObject@16 __imp__NtCreateDirectoryObject@12 __imp__NtCreateDirectoryObjectEx@20 __imp__NtCreateEnclave@36 __imp__NtCreateEnlistment@32 __imp__NtCreateEvent@20 __imp__NtCreateEventPair@12 __imp__NtCreateFile@44 __imp__NtCreateIRTimer@12 __imp__NtCreateIoCompletion@16 __imp__NtCreateJobObject@12 __imp__NtCreateJobSet@12 __imp__NtCreateKey@28 __imp__NtCreateKeyTransacted@32 __imp__NtCreateKeyedEvent@16 __imp__NtCreateLowBoxToken@36 __imp__NtCreateMailslotFile@32 __imp__NtCreateMutant@16 __imp__NtCreateNamedPipeFile@56 __imp__NtCreatePagingFile@16 __imp__NtCreatePartition@16 __imp__NtCreatePort@20 __imp__NtCreatePrivateNamespace@16 __imp__NtCreateProcess@32 __imp__NtCreateProcessEx@36 __imp__NtCreateProfile@36 __imp__NtCreateProfileEx@40 __imp__NtCreateRegistryTransaction@16 __imp__NtCreateResourceManager@28 __imp__NtCreateSection@28 __imp__NtCreateSectionEx@36 __imp__NtCreateSemaphore@20 __imp__NtCreateSymbolicLinkObject@16 __imp__NtCreateThread@32 __imp__NtCreateThreadEx@44 __imp__NtCreateTimer2@20 __imp__NtCreateTimer@16 __imp__NtCreateToken@52 __imp__NtCreateTokenEx@68 __imp__NtCreateTransaction@40 __imp__NtCreateTransactionManager@24 __imp__NtCreateUserProcess@44 __imp__NtCreateWaitCompletionPacket@12 __imp__NtCreateWaitablePort@20 __imp__NtCreateWnfStateName@28 __imp__NtCreateWorkerFactory@40 __imp__NtCurrentTeb@0 __imp__NtDebugActiveProcess@8 __imp__NtDebugContinue@12 __imp__NtDelayExecution@8 __imp__NtDeleteAtom@4 __imp__NtDeleteBootEntry@4 __imp__NtDeleteDriverEntry@4 __imp__NtDeleteFile@4 __imp__NtDeleteKey@4 __imp__NtDeleteObjectAuditAlarm@12 __imp__NtDeletePrivateNamespace@4 __imp__NtDeleteValueKey@8 __imp__NtDeleteWnfStateData@8 __imp__NtDeleteWnfStateName@4 __imp__NtDeviceIoControlFile@40 __imp__NtDirectGraphicsCall@20 __imp__NtDisableLastKnownGood@0 __imp__NtDisplayString@4 __imp__NtDrawText@4 __imp__NtDuplicateObject@28 __imp__NtDuplicateToken@24 __imp__NtEnableLastKnownGood@0 __imp__NtEnumerateBootEntries@8 __imp__NtEnumerateDriverEntries@8 __imp__NtEnumerateKey@24 __imp__NtEnumerateSystemEnvironmentValuesEx@12 __imp__NtEnumerateTransactionObject@20 __imp__NtEnumerateValueKey@24 __imp__NtExtendSection@8 __imp__NtFilterBootOption@20 __imp__NtFilterToken@24 __imp__NtFilterTokenEx@56 __imp__NtFindAtom@12 __imp__NtFlushBuffersFile@8 __imp__NtFlushBuffersFileEx@20 __imp__NtFlushInstallUILanguage@8 __imp__NtFlushInstructionCache@12 __imp__NtFlushKey@4 __imp__NtFlushProcessWriteBuffers@0 __imp__NtFlushVirtualMemory@16 __imp__NtFlushWriteBuffer@0 __imp__NtFreeUserPhysicalPages@12 __imp__NtFreeVirtualMemory@16 __imp__NtFreezeRegistry@4 __imp__NtFreezeTransactions@8 __imp__NtFsControlFile@40 __imp__NtGetCachedSigningLevel@24 __imp__NtGetCompleteWnfStateSubscription@24 __imp__NtGetContextThread@8 __imp__NtGetCurrentProcessorNumber@0 __imp__NtGetCurrentProcessorNumberEx@4 __imp__NtGetDevicePowerState@8 __imp__NtGetMUIRegistryInfo@12 __imp__NtGetNextProcess@20 __imp__NtGetNextThread@24 __imp__NtGetNlsSectionPtr@20 __imp__NtGetNotificationResourceManager@28 __imp__NtGetTickCount@0 __imp__NtGetWriteWatch@28 __imp__NtImpersonateAnonymousToken@4 __imp__NtImpersonateClientOfPort@8 __imp__NtImpersonateThread@12 __imp__NtInitializeEnclave@20 __imp__NtInitializeNlsFiles@12 __imp__NtInitializeRegistry@4 __imp__NtInitiatePowerAction@16 __imp__NtIsProcessInJob@8 __imp__NtIsSystemResumeAutomatic@0 __imp__NtIsUILanguageComitted@0 __imp__NtListenPort@8 __imp__NtLoadDriver@4 __imp__NtLoadEnclaveData@36 __imp__NtLoadKey2@12 __imp__NtLoadKey3@32 __imp__NtLoadKey@8 __imp__NtLoadKeyEx@32 __imp__NtLockFile@40 __imp__NtLockProductActivationKeys@8 __imp__NtLockRegistryKey@4 __imp__NtLockVirtualMemory@16 __imp__NtMakePermanentObject@4 __imp__NtMakeTemporaryObject@4 __imp__NtManageHotPatch@16 __imp__NtManagePartition@20 __imp__NtMapCMFModule@24 __imp__NtMapUserPhysicalPages@12 __imp__NtMapUserPhysicalPagesScatter@12 __imp__NtMapViewOfSection@40 __imp__NtMapViewOfSectionEx@36 __imp__NtModifyBootEntry@4 __imp__NtModifyDriverEntry@4 __imp__NtNotifyChangeDirectoryFile@36 __imp__NtNotifyChangeDirectoryFileEx@40 __imp__NtNotifyChangeKey@40 __imp__NtNotifyChangeMultipleKeys@48 __imp__NtNotifyChangeSession@32 __imp__NtOpenDirectoryObject@12 __imp__NtOpenEnlistment@20 __imp__NtOpenEvent@12 __imp__NtOpenEventPair@12 __imp__NtOpenFile@24 __imp__NtOpenIoCompletion@12 __imp__NtOpenJobObject@12 __imp__NtOpenKey@12 __imp__NtOpenKeyEx@16 __imp__NtOpenKeyTransacted@16 __imp__NtOpenKeyTransactedEx@20 __imp__NtOpenKeyedEvent@12 __imp__NtOpenMutant@12 __imp__NtOpenObjectAuditAlarm@48 __imp__NtOpenPartition@12 __imp__NtOpenPrivateNamespace@16 __imp__NtOpenProcess@16 __imp__NtOpenProcessToken@12 __imp__NtOpenProcessTokenEx@16 __imp__NtOpenRegistryTransaction@12 __imp__NtOpenResourceManager@20 __imp__NtOpenSection@12 __imp__NtOpenSemaphore@12 __imp__NtOpenSession@12 __imp__NtOpenSymbolicLinkObject@12 __imp__NtOpenThread@16 __imp__NtOpenThreadToken@16 __imp__NtOpenThreadTokenEx@20 __imp__NtOpenTimer@12 __imp__NtOpenTransaction@20 __imp__NtOpenTransactionManager@24 __imp__NtPlugPlayControl@12 __imp__NtPowerInformation@20 __imp__NtPrePrepareComplete@8 __imp__NtPrePrepareEnlistment@8 __imp__NtPrepareComplete@8 __imp__NtPrepareEnlistment@8 __imp__NtPrivilegeCheck@12 __imp__NtPrivilegeObjectAuditAlarm@24 __imp__NtPrivilegedServiceAuditAlarm@20 __imp__NtPropagationComplete@16 __imp__NtPropagationFailed@12 __imp__NtProtectVirtualMemory@20 __imp__NtPssCaptureVaSpaceBulk@20 __imp__NtPulseEvent@8 __imp__NtQueryAttributesFile@8 __imp__NtQueryAuxiliaryCounterFrequency@4 __imp__NtQueryBootEntryOrder@8 __imp__NtQueryBootOptions@8 __imp__NtQueryDebugFilterState@8 __imp__NtQueryDefaultLocale@8 __imp__NtQueryDefaultUILanguage@4 __imp__NtQueryDirectoryFile@44 __imp__NtQueryDirectoryFileEx@40 __imp__NtQueryDirectoryObject@28 __imp__NtQueryDriverEntryOrder@8 __imp__NtQueryEaFile@36 __imp__NtQueryEvent@20 __imp__NtQueryFullAttributesFile@8 __imp__NtQueryInformationAtom@20 __imp__NtQueryInformationByName@20 __imp__NtQueryInformationEnlistment@20 __imp__NtQueryInformationFile@20 __imp__NtQueryInformationJobObject@20 __imp__NtQueryInformationPort@20 __imp__NtQueryInformationProcess@20 __imp__NtQueryInformationResourceManager@20 __imp__NtQueryInformationThread@20 __imp__NtQueryInformationToken@20 __imp__NtQueryInformationTransaction@20 __imp__NtQueryInformationTransactionManager@20 __imp__NtQueryInformationWorkerFactory@20 __imp__NtQueryInstallUILanguage@4 __imp__NtQueryIntervalProfile@8 __imp__NtQueryIoCompletion@20 __imp__NtQueryKey@20 __imp__NtQueryLicenseValue@20 __imp__NtQueryMultipleValueKey@24 __imp__NtQueryMutant@20 __imp__NtQueryObject@20 __imp__NtQueryOpenSubKeys@8 __imp__NtQueryOpenSubKeysEx@16 __imp__NtQueryPerformanceCounter@8 __imp__NtQueryPortInformationProcess@0 __imp__NtQueryQuotaInformationFile@36 __imp__NtQuerySection@20 __imp__NtQuerySecurityAttributesToken@24 __imp__NtQuerySecurityObject@20 __imp__NtQuerySecurityPolicy@24 __imp__NtQuerySemaphore@20 __imp__NtQuerySymbolicLinkObject@12 __imp__NtQuerySystemEnvironmentValue@16 __imp__NtQuerySystemEnvironmentValueEx@20 __imp__NtQuerySystemInformation@16 __imp__NtQuerySystemInformationEx@24 __imp__NtQuerySystemTime@4 __imp__NtQueryTimer@20 __imp__NtQueryTimerResolution@12 __imp__NtQueryValueKey@24 __imp__NtQueryVirtualMemory@24 __imp__NtQueryVolumeInformationFile@20 __imp__NtQueryWnfStateData@24 __imp__NtQueryWnfStateNameInformation@20 __imp__NtQueueApcThread@20 __imp__NtQueueApcThreadEx@24 __imp__NtRaiseException@12 __imp__NtRaiseHardError@24 __imp__NtReadFile@36 __imp__NtReadFileScatter@36 __imp__NtReadOnlyEnlistment@8 __imp__NtReadRequestData@24 __imp__NtReadVirtualMemory@20 __imp__NtRecoverEnlistment@8 __imp__NtRecoverResourceManager@4 __imp__NtRecoverTransactionManager@4 __imp__NtRegisterProtocolAddressInformation@20 __imp__NtRegisterThreadTerminatePort@4 __imp__NtReleaseKeyedEvent@16 __imp__NtReleaseMutant@8 __imp__NtReleaseSemaphore@12 __imp__NtReleaseWorkerFactoryWorker@4 __imp__NtRemoveIoCompletion@20 __imp__NtRemoveIoCompletionEx@24 __imp__NtRemoveProcessDebug@8 __imp__NtRenameKey@8 __imp__NtRenameTransactionManager@8 __imp__NtReplaceKey@12 __imp__NtReplacePartitionUnit@12 __imp__NtReplyPort@8 __imp__NtReplyWaitReceivePort@16 __imp__NtReplyWaitReceivePortEx@20 __imp__NtReplyWaitReplyPort@8 __imp__NtRequestPort@8 __imp__NtRequestWaitReplyPort@12 __imp__NtResetEvent@8 __imp__NtResetWriteWatch@12 __imp__NtRestoreKey@12 __imp__NtResumeProcess@4 __imp__NtResumeThread@8 __imp__NtRevertContainerImpersonation@0 __imp__NtRollbackComplete@8 __imp__NtRollbackEnlistment@8 __imp__NtRollbackRegistryTransaction@8 __imp__NtRollbackTransaction@8 __imp__NtRollforwardTransactionManager@8 __imp__NtSaveKey@8 __imp__NtSaveKeyEx@12 __imp__NtSaveMergedKeys@12 __imp__NtSecureConnectPort@36 __imp__NtSerializeBoot@0 __imp__NtSetBootEntryOrder@8 __imp__NtSetBootOptions@8 __imp__NtSetCachedSigningLevel2@24 __imp__NtSetCachedSigningLevel@20 __imp__NtSetContextThread@8 __imp__NtSetDebugFilterState@12 __imp__NtSetDefaultHardErrorPort@4 __imp__NtSetDefaultLocale@8 __imp__NtSetDefaultUILanguage@4 __imp__NtSetDriverEntryOrder@8 __imp__NtSetEaFile@16 __imp__NtSetEvent@8 __imp__NtSetEventBoostPriority@4 __imp__NtSetHighEventPair@4 __imp__NtSetHighWaitLowEventPair@4 __imp__NtSetIRTimer@8 __imp__NtSetInformationDebugObject@20 __imp__NtSetInformationEnlistment@16 __imp__NtSetInformationFile@20 __imp__NtSetInformationJobObject@16 __imp__NtSetInformationKey@16 __imp__NtSetInformationObject@16 __imp__NtSetInformationProcess@16 __imp__NtSetInformationResourceManager@16 __imp__NtSetInformationSymbolicLink@16 __imp__NtSetInformationThread@16 __imp__NtSetInformationToken@16 __imp__NtSetInformationTransaction@16 __imp__NtSetInformationTransactionManager@16 __imp__NtSetInformationVirtualMemory@24 __imp__NtSetInformationWorkerFactory@16 __imp__NtSetIntervalProfile@8 __imp__NtSetIoCompletion@20 __imp__NtSetIoCompletionEx@24 __imp__NtSetLdtEntries@24 __imp__NtSetLowEventPair@4 __imp__NtSetLowWaitHighEventPair@4 __imp__NtSetQuotaInformationFile@16 __imp__NtSetSecurityObject@12 __imp__NtSetSystemEnvironmentValue@8 __imp__NtSetSystemEnvironmentValueEx@20 __imp__NtSetSystemInformation@12 __imp__NtSetSystemPowerState@12 __imp__NtSetSystemTime@8 __imp__NtSetThreadExecutionState@8 __imp__NtSetTimer2@16 __imp__NtSetTimer@28 __imp__NtSetTimerEx@16 __imp__NtSetTimerResolution@12 __imp__NtSetUuidSeed@4 __imp__NtSetValueKey@24 __imp__NtSetVolumeInformationFile@20 __imp__NtSetWnfProcessNotificationEvent@4 __imp__NtShutdownSystem@4 __imp__NtShutdownWorkerFactory@8 __imp__NtSignalAndWaitForSingleObject@16 __imp__NtSinglePhaseReject@8 __imp__NtStartProfile@4 __imp__NtStopProfile@4 __imp__NtSubscribeWnfStateChange@16 __imp__NtSuspendProcess@4 __imp__NtSuspendThread@8 __imp__NtSystemDebugControl@24 __imp__NtTerminateEnclave@8 __imp__NtTerminateJobObject@8 __imp__NtTerminateProcess@8 __imp__NtTerminateThread@8 __imp__NtTestAlert@0 __imp__NtThawRegistry@0 __imp__NtThawTransactions@0 __imp__NtTraceControl@24 __imp__NtTraceEvent@16 __imp__NtTranslateFilePath@16 __imp__NtUmsThreadYield@4 __imp__NtUnloadDriver@4 __imp__NtUnloadKey2@8 __imp__NtUnloadKey@4 __imp__NtUnloadKeyEx@8 __imp__NtUnlockFile@20 __imp__NtUnlockVirtualMemory@16 __imp__NtUnmapViewOfSection@8 __imp__NtUnmapViewOfSectionEx@12 __imp__NtUnsubscribeWnfStateChange@4 __imp__NtUpdateWnfStateData@28 __imp__NtVdmControl@8 __imp__NtWaitForAlertByThreadId@8 __imp__NtWaitForDebugEvent@16 __imp__NtWaitForKeyedEvent@16 __imp__NtWaitForMultipleObjects32@20 __imp__NtWaitForMultipleObjects@20 __imp__NtWaitForSingleObject@12 __imp__NtWaitForWorkViaWorkerFactory@20 __imp__NtWaitHighEventPair@4 __imp__NtWaitLowEventPair@4 __imp__NtWorkerFactoryWorkerReady@4 __imp__NtWriteFile@36 __imp__NtWriteFileGather@36 __imp__NtWriteRequestData@24 __imp__NtWriteVirtualMemory@20 __imp__NtYieldExecution@0 __imp__PfxFindPrefix@8 __imp__PfxInitialize@4 __imp__PfxInsertPrefix@12 __imp__PfxRemovePrefix@8 __imp__PssNtCaptureSnapshot@16 __imp__PssNtDuplicateSnapshot@20 __imp__PssNtFreeRemoteSnapshot@8 __imp__PssNtFreeSnapshot@4 __imp__PssNtFreeWalkMarker@4 __imp__PssNtQuerySnapshot@16 __imp__PssNtValidateDescriptor@8 __imp__PssNtWalkSnapshot@20 __imp__RtlAbortRXact@4 __imp__RtlAbsoluteToSelfRelativeSD@12 __imp__RtlAcquirePebLock@0 __imp__RtlAcquirePrivilege@16 __imp__RtlAcquireReleaseSRWLockExclusive@4 __imp__RtlAcquireResourceExclusive@8 __imp__RtlAcquireResourceShared@8 __imp__RtlAcquireSRWLockExclusive@4 __imp__RtlAcquireSRWLockShared@4 __imp__RtlActivateActivationContext@12 __imp__RtlActivateActivationContextEx@16 __imp__RtlAddAccessAllowedAce@16 __imp__RtlAddAccessAllowedAceEx@20 __imp__RtlAddAccessAllowedObjectAce@28 __imp__RtlAddAccessDeniedAce@16 __imp__RtlAddAccessDeniedAceEx@20 __imp__RtlAddAccessDeniedObjectAce@28 __imp__RtlAddAccessFilterAce@32 __imp__RtlAddAce@20 __imp__RtlAddActionToRXact@24 __imp__RtlAddAtomToAtomTable@12 __imp__RtlAddAttributeActionToRXact@32 __imp__RtlAddAuditAccessAce@24 __imp__RtlAddAuditAccessAceEx@28 __imp__RtlAddAuditAccessObjectAce@36 __imp__RtlAddIntegrityLabelToBoundaryDescriptor@8 __imp__RtlAddMandatoryAce@24 __imp__RtlAddProcessTrustLabelAce@24 __imp__RtlAddRefActivationContext@4 __imp__RtlAddResourceAttributeAce@28 __imp__RtlAddSIDToBoundaryDescriptor@8 __imp__RtlAddScopedPolicyIDAce@20 __imp__RtlAddVectoredContinueHandler@8 __imp__RtlAddVectoredExceptionHandler@8 __imp__RtlAddressInSectionTable@12 __imp__RtlAdjustPrivilege@16 __imp__RtlAllocateActivationContextStack@4 __imp__RtlAllocateAndInitializeSid@44 __imp__RtlAllocateAndInitializeSidEx@16 __imp__RtlAllocateHandle@8 __imp__RtlAllocateHeap@12 __imp__RtlAllocateMemoryBlockLookaside@12 __imp__RtlAllocateMemoryZone@12 __imp__RtlAllocateWnfSerializationGroup@0 __imp__RtlAnsiCharToUnicodeChar@4 __imp__RtlAnsiStringToUnicodeSize@4 __imp__RtlAnsiStringToUnicodeString@12 __imp__RtlAppendAsciizToString@8 __imp__RtlAppendPathElement@12 __imp__RtlAppendStringToString@8 __imp__RtlAppendUnicodeStringToString@8 __imp__RtlAppendUnicodeToString@8 __imp__RtlApplicationVerifierStop@40 __imp__RtlApplyRXact@4 __imp__RtlApplyRXactNoFlush@4 __imp__RtlAreAllAccessesGranted@8 __imp__RtlAreAnyAccessesGranted@8 __imp__RtlAreBitsClear@12 __imp__RtlAreBitsSet@12 __imp__RtlAssert@16 __imp__RtlAvlInsertNodeEx@16 __imp__RtlAvlRemoveNode@8 __imp__RtlCancelTimer@8 __imp__RtlCanonicalizeDomainName@12 __imp__RtlCapabilityCheck@12 __imp__RtlCapabilityCheckForSingleSessionSku@12 __imp__RtlCaptureContext@4 __imp__RtlCaptureStackBackTrace@16 __imp__RtlCaptureStackContext@12 __imp__RtlCharToInteger@12 __imp__RtlCheckBootStatusIntegrity@8 __imp__RtlCheckForOrphanedCriticalSections@4 __imp__RtlCheckPortableOperatingSystem@4 __imp__RtlCheckRegistryKey@8 __imp__RtlCheckSandboxedToken@8 __imp__RtlCheckSystemBootStatusIntegrity@4 __imp__RtlCheckTokenCapability@12 __imp__RtlCheckTokenMembership@12 __imp__RtlCheckTokenMembershipEx@16 __imp__RtlCleanUpTEBLangLists@0 __imp__RtlClearAllBits@4 __imp__RtlClearBit@8 __imp__RtlClearBits@12 __imp__RtlClearThreadWorkOnBehalfTicket@0 __imp__RtlCloneUserProcess@20 __imp__RtlCmDecodeMemIoResource@8 __imp__RtlCmEncodeMemIoResource@24 __imp__RtlCommitDebugInfo@8 __imp__RtlCompactHeap@8 __imp__RtlCompareAltitudes@8 __imp__RtlCompareMemory@12 __imp__RtlCompareMemoryUlong@12 __imp__RtlCompareString@12 __imp__RtlCompareUnicodeString@12 __imp__RtlCompareUnicodeStrings@20 __imp__RtlCompressBuffer@32 __imp__RtlComputeCrc32@12 __imp__RtlComputeImportTableHash@12 __imp__RtlComputePrivatizedDllName_U@12 __imp__RtlConnectToSm@16 __imp__RtlConsoleMultiByteToUnicodeN@24 __imp__RtlConstructCrossVmEventPath@12 __imp__RtlConstructCrossVmMutexPath@12 __imp__RtlContractHashTable@4 __imp__RtlConvertDeviceFamilyInfoToString@16 __imp__RtlConvertExclusiveToShared@4 __imp__RtlConvertLCIDToString@20 __imp__RtlConvertLongToLargeInteger@4 __imp__RtlConvertSRWLockExclusiveToShared@4 __imp__RtlConvertSharedToExclusive@4 __imp__RtlConvertSidToUnicodeString@12 __imp__RtlConvertToAutoInheritSecurityObject@24 __imp__RtlConvertUlongToLargeInteger@4 __imp__RtlCopyBitMap@12 __imp__RtlCopyContext@12 __imp__RtlCopyExtendedContext@12 __imp__RtlCopyLuid@8 __imp__RtlCopyLuidAndAttributesArray@12 __imp__RtlCopyMappedMemory@12 __imp__RtlCopySecurityDescriptor@8 __imp__RtlCopySid@12 __imp__RtlCopySidAndAttributesArray@28 __imp__RtlCopyString@8 __imp__RtlCopyUnicodeString@8 __imp__RtlCrc32@12 __imp__RtlCrc64@16 __imp__RtlCreateAcl@12 __imp__RtlCreateActivationContext@24 __imp__RtlCreateAndSetSD@20 __imp__RtlCreateAtomTable@8 __imp__RtlCreateBootStatusDataFile@4 __imp__RtlCreateBoundaryDescriptor@8 __imp__RtlCreateEnvironment@8 __imp__RtlCreateEnvironmentEx@12 __imp__RtlCreateHashTable@12 __imp__RtlCreateHashTableEx@16 __imp__RtlCreateHeap@24 __imp__RtlCreateMemoryBlockLookaside@20 __imp__RtlCreateMemoryZone@12 __imp__RtlCreateProcessParameters@40 __imp__RtlCreateProcessParametersEx@44 __imp__RtlCreateProcessParametersWithTemplate@12 __imp__RtlCreateProcessReflection@24 __imp__RtlCreateQueryDebugBuffer@8 __imp__RtlCreateRegistryKey@8 __imp__RtlCreateSecurityDescriptor@8 __imp__RtlCreateServiceSid@12 __imp__RtlCreateSystemVolumeInformationFolder@4 __imp__RtlCreateTagHeap@16 __imp__RtlCreateTimer@28 __imp__RtlCreateTimerQueue@4 __imp__RtlCreateUnicodeString@8 __imp__RtlCreateUnicodeStringFromAsciiz@8 __imp__RtlCreateUserProcess@40 __imp__RtlCreateUserProcessEx@20 __imp__RtlCreateUserSecurityObject@28 __imp__RtlCreateUserStack@24 __imp__RtlCreateUserThread@40 __imp__RtlCreateVirtualAccountSid@16 __imp__RtlCultureNameToLCID@8 __imp__RtlCustomCPToUnicodeN@24 __imp__RtlCutoverTimeToSystemTime@16 __imp__RtlDeCommitDebugInfo@12 __imp__RtlDeNormalizeProcessParams@4 __imp__RtlDeactivateActivationContext@8 __imp__RtlDebugPrintTimes@0 __imp__RtlDecodePointer@4 __imp__RtlDecodeRemotePointer@12 __imp__RtlDecodeSystemPointer@4 __imp__RtlDecompressBuffer@24 __imp__RtlDecompressBufferEx@28 __imp__RtlDecompressFragment@32 __imp__RtlDefaultNpAcl@4 __imp__RtlDelete@4 __imp__RtlDeleteAce@8 __imp__RtlDeleteAtomFromAtomTable@8 __imp__RtlDeleteBoundaryDescriptor@4 __imp__RtlDeleteCriticalSection@4 __imp__RtlDeleteElementGenericTable@8 __imp__RtlDeleteElementGenericTableAvl@8 __imp__RtlDeleteElementGenericTableAvlEx@8 __imp__RtlDeleteHashTable@4 __imp__RtlDeleteNoSplay@8 __imp__RtlDeleteRegistryValue@12 __imp__RtlDeleteResource@4 __imp__RtlDeleteSecurityObject@4 __imp__RtlDeleteTimer@12 __imp__RtlDeleteTimerQueue@4 __imp__RtlDeleteTimerQueueEx@8 __imp__RtlDeregisterSecureMemoryCacheCallback@4 __imp__RtlDeregisterWait@4 __imp__RtlDeregisterWaitEx@8 __imp__RtlDeriveCapabilitySidsFromName@12 __imp__RtlDestroyAtomTable@4 __imp__RtlDestroyEnvironment@4 __imp__RtlDestroyHandleTable@4 __imp__RtlDestroyHeap@4 __imp__RtlDestroyMemoryBlockLookaside@4 __imp__RtlDestroyMemoryZone@4 __imp__RtlDestroyProcessParameters@4 __imp__RtlDestroyQueryDebugBuffer@4 __imp__RtlDetectHeapLeaks@0 __imp__RtlDetermineDosPathNameType_U@4 __imp__RtlDisableThreadProfiling@4 __imp__RtlDllShutdownInProgress@0 __imp__RtlDnsHostNameToComputerName@12 __imp__RtlDoesFileExists_U@4 __imp__RtlDoesNameContainWildCards@4 __imp__RtlDosApplyFileIsolationRedirection_Ustr@36 __imp__RtlDosLongPathNameToNtPathName_U_WithStatus@16 __imp__RtlDosLongPathNameToRelativeNtPathName_U_WithStatus@16 __imp__RtlDosPathNameToNtPathName_U@16 __imp__RtlDosPathNameToNtPathName_U_WithStatus@16 __imp__RtlDosPathNameToRelativeNtPathName_U@16 __imp__RtlDosPathNameToRelativeNtPathName_U_WithStatus@16 __imp__RtlDosSearchPath_U@24 __imp__RtlDosSearchPath_Ustr@36 __imp__RtlDowncaseUnicodeChar@4 __imp__RtlDowncaseUnicodeString@12 __imp__RtlDumpResource@4 __imp__RtlDuplicateUnicodeString@12 __imp__RtlEmptyAtomTable@8 __imp__RtlEnableEarlyCriticalSectionEventCreation@0 __imp__RtlEnableThreadProfiling@20 __imp__RtlEncodePointer@4 __imp__RtlEncodeRemotePointer@12 __imp__RtlEncodeSystemPointer@4 __imp__RtlEndEnumerationHashTable@8 __imp__RtlEndStrongEnumerationHashTable@8 __imp__RtlEndWeakEnumerationHashTable@8 __imp__RtlEnlargedIntegerMultiply@8 __imp__RtlEnlargedUnsignedMultiply@8 __imp__RtlEnterCriticalSection@4 __imp__RtlEnumProcessHeaps@8 __imp__RtlEnumerateEntryHashTable@8 __imp__RtlEnumerateGenericTable@8 __imp__RtlEnumerateGenericTableAvl@8 __imp__RtlEnumerateGenericTableLikeADirectory@28 __imp__RtlEnumerateGenericTableWithoutSplaying@8 __imp__RtlEnumerateGenericTableWithoutSplayingAvl@8 __imp__RtlEqualComputerName@8 __imp__RtlEqualDomainName@8 __imp__RtlEqualLuid@8 __imp__RtlEqualPrefixSid@8 __imp__RtlEqualSid@8 __imp__RtlEqualString@12 __imp__RtlEqualUnicodeString@12 __imp__RtlEqualWnfChangeStamps@8 __imp__RtlEraseUnicodeString@4 __imp__RtlEthernetAddressToStringA@8 __imp__RtlEthernetAddressToStringW@8 __imp__RtlEthernetStringToAddressA@12 __imp__RtlEthernetStringToAddressW@12 __imp__RtlExitUserProcess@4 __imp__RtlExitUserThread@4 __imp__RtlExpandEnvironmentStrings@24 __imp__RtlExpandEnvironmentStrings_U@16 __imp__RtlExpandHashTable@4 __imp__RtlExtendCorrelationVector@4 __imp__RtlExtendMemoryBlockLookaside@8 __imp__RtlExtendMemoryZone@8 __imp__RtlExtendedIntegerMultiply@12 __imp__RtlExtendedLargeIntegerDivide@16 __imp__RtlExtendedMagicDivide@20 __imp__RtlExtractBitMap@16 __imp__RtlFillMemory@12 __imp__RtlFillMemoryUlong@12 __imp__RtlFillMemoryUlonglong@16 __imp__RtlFindAceByType@12 __imp__RtlFindActivationContextSectionGuid@20 __imp__RtlFindActivationContextSectionString@20 __imp__RtlFindCharInUnicodeString@16 __imp__RtlFindClearBits@12 __imp__RtlFindClearBitsAndSet@12 __imp__RtlFindClearRuns@16 __imp__RtlFindClosestEncodableLength@12 __imp__RtlFindExportedRoutineByName@8 __imp__RtlFindLastBackwardRunClear@12 __imp__RtlFindLeastSignificantBit@8 __imp__RtlFindLongestRunClear@8 __imp__RtlFindMessage@20 __imp__RtlFindMostSignificantBit@8 __imp__RtlFindNextForwardRunClear@12 __imp__RtlFindSetBits@12 __imp__RtlFindSetBitsAndClear@12 __imp__RtlFindUnicodeSubstring@12 __imp__RtlFirstEntrySList@4 __imp__RtlFirstFreeAce@8 __imp__RtlFlsAlloc@8 __imp__RtlFlsFree@4 __imp__RtlFlsGetValue@8 __imp__RtlFlsSetValue@8 __imp__RtlFlushSecureMemoryCache@8 __imp__RtlFormatCurrentUserKeyPath@4 __imp__RtlFormatMessage@36 __imp__RtlFormatMessageEx@40 __imp__RtlFreeActivationContextStack@4 __imp__RtlFreeAnsiString@4 __imp__RtlFreeHandle@8 __imp__RtlFreeHeap@12 __imp__RtlFreeMemoryBlockLookaside@8 __imp__RtlFreeOemString@4 __imp__RtlFreeSid@4 __imp__RtlFreeThreadActivationContextStack@0 __imp__RtlFreeUTF8String@4 __imp__RtlFreeUnicodeString@4 __imp__RtlFreeUserStack@4 __imp__RtlGUIDFromString@8 __imp__RtlGenerate8dot3Name@16 __imp__RtlGetAce@12 __imp__RtlGetActiveActivationContext@4 __imp__RtlGetActiveConsoleId@0 __imp__RtlGetAppContainerNamedObjectPath@16 __imp__RtlGetAppContainerParent@8 __imp__RtlGetAppContainerSidType@8 __imp__RtlGetCallersAddress@8 __imp__RtlGetCompressionWorkSpaceSize@12 __imp__RtlGetConsoleSessionForegroundProcessId@0 __imp__RtlGetControlSecurityDescriptor@12 __imp__RtlGetCriticalSectionRecursionCount@4 __imp__RtlGetCurrentDirectory_U@8 __imp__RtlGetCurrentPeb@0 __imp__RtlGetCurrentProcessorNumber@0 __imp__RtlGetCurrentProcessorNumberEx@4 __imp__RtlGetCurrentServiceSessionId@0 __imp__RtlGetCurrentTransaction@0 __imp__RtlGetDaclSecurityDescriptor@16 __imp__RtlGetDeviceFamilyInfoEnum@12 __imp__RtlGetElementGenericTable@8 __imp__RtlGetElementGenericTableAvl@8 __imp__RtlGetEnabledExtendedFeatures@8 __imp__RtlGetExePath@8 __imp__RtlGetExtendedContextLength2@16 __imp__RtlGetExtendedContextLength@8 __imp__RtlGetExtendedFeaturesMask@4 __imp__RtlGetFileMUIPath@28 __imp__RtlGetFrame@0 __imp__RtlGetFullPathName_U@16 __imp__RtlGetFullPathName_UEx@20 __imp__RtlGetFullPathName_UstrEx@32 __imp__RtlGetGroupSecurityDescriptor@12 __imp__RtlGetIntegerAtom@8 __imp__RtlGetInterruptTimePrecise@4 __imp__RtlGetLastNtStatus@0 __imp__RtlGetLastWin32Error@0 __imp__RtlGetLengthWithoutLastFullDosOrNtPathElement@12 __imp__RtlGetLengthWithoutTrailingPathSeperators@12 __imp__RtlGetLocaleFileMappingAddress@12 __imp__RtlGetLongestNtPathLength@0 __imp__RtlGetNativeSystemInformation@16 __imp__RtlGetNextEntryHashTable@8 __imp__RtlGetNtGlobalFlags@0 __imp__RtlGetNtProductType@4 __imp__RtlGetNtSystemRoot@0 __imp__RtlGetNtVersionNumbers@12 __imp__RtlGetOwnerSecurityDescriptor@12 __imp__RtlGetPersistedStateLocation@28 __imp__RtlGetProcessHeaps@8 __imp__RtlGetProductInfo@20 __imp__RtlGetReturnAddressHijackTarget@0 __imp__RtlGetSaclSecurityDescriptor@16 __imp__RtlGetSearchPath@4 __imp__RtlGetSecurityDescriptorRMControl@8 __imp__RtlGetSessionProperties@8 __imp__RtlGetSetBootStatusData@24 __imp__RtlGetSuiteMask@0 __imp__RtlGetSystemBootStatus@16 __imp__RtlGetSystemBootStatusEx@12 __imp__RtlGetSystemPreferredUILanguages@20 __imp__RtlGetSystemTimePrecise@0 __imp__RtlGetThreadErrorMode@0 __imp__RtlGetThreadLangIdByIndex@16 __imp__RtlGetThreadPreferredUILanguages@16 __imp__RtlGetThreadWorkOnBehalfTicket@8 __imp__RtlGetTokenNamedObjectPath@12 __imp__RtlGetUILanguageInfo@20 __imp__RtlGetUnloadEventTrace@0 __imp__RtlGetUnloadEventTraceEx@12 __imp__RtlGetUserInfoHeap@20 __imp__RtlGetUserPreferredUILanguages@20 __imp__RtlGetVersion@4 __imp__RtlGuardCheckLongJumpTarget@12 __imp__RtlHashUnicodeString@16 __imp__RtlHeapTrkInitialize@4 __imp__RtlIdentifierAuthoritySid@4 __imp__RtlIdnToAscii@20 __imp__RtlIdnToNameprepUnicode@20 __imp__RtlIdnToUnicode@20 __imp__RtlImageDirectoryEntryToData@16 __imp__RtlImageNtHeader@4 __imp__RtlImageNtHeaderEx@20 __imp__RtlImageRvaToSection@12 __imp__RtlImageRvaToVa@16 __imp__RtlImpersonateSelf@4 __imp__RtlImpersonateSelfEx@12 __imp__RtlIncrementCorrelationVector@4 __imp__RtlInitAnsiString@8 __imp__RtlInitAnsiStringEx@8 __imp__RtlInitCodePageTable@8 __imp__RtlInitEnumerationHashTable@8 __imp__RtlInitNlsTables@16 __imp__RtlInitString@8 __imp__RtlInitStringEx@8 __imp__RtlInitStrongEnumerationHashTable@8 __imp__RtlInitUTF8String@8 __imp__RtlInitUTF8StringEx@8 __imp__RtlInitUnicodeString@8 __imp__RtlInitUnicodeStringEx@8 __imp__RtlInitWeakEnumerationHashTable@8 __imp__RtlInitializeAtomPackage@4 __imp__RtlInitializeBitMap@12 __imp__RtlInitializeConditionVariable@4 __imp__RtlInitializeCorrelationVector@12 __imp__RtlInitializeCriticalSection@4 __imp__RtlInitializeCriticalSectionAndSpinCount@8 __imp__RtlInitializeCriticalSectionEx@12 __imp__RtlInitializeExceptionChain@4 __imp__RtlInitializeExtendedContext2@20 __imp__RtlInitializeExtendedContext@12 __imp__RtlInitializeGenericTable@20 __imp__RtlInitializeGenericTableAvl@20 __imp__RtlInitializeHandleTable@12 __imp__RtlInitializeRXact@12 __imp__RtlInitializeResource@4 __imp__RtlInitializeSListHead@4 __imp__RtlInitializeSRWLock@4 __imp__RtlInitializeSid@12 __imp__RtlInitializeSidEx __imp__RtlInsertElementGenericTable@16 __imp__RtlInsertElementGenericTableAvl@16 __imp__RtlInsertElementGenericTableFull@24 __imp__RtlInsertElementGenericTableFullAvl@24 __imp__RtlInsertEntryHashTable@16 __imp__RtlInt64ToUnicodeString@16 __imp__RtlIntegerToChar@16 __imp__RtlIntegerToUnicodeString@12 __imp__RtlInterlockedClearBitRun@12 __imp__RtlInterlockedCompareExchange64@20 __imp__RtlInterlockedFlushSList@4 __imp__RtlInterlockedPopEntrySList@4 __imp__RtlInterlockedPushEntrySList@8 __imp__RtlInterlockedPushListSListEx@16 __imp__RtlInterlockedSetBitRun@12 __imp__RtlIoDecodeMemIoResource@16 __imp__RtlIoEncodeMemIoResource@40 __imp__RtlIpv4AddressToStringA@8 __imp__RtlIpv4AddressToStringExA@16 __imp__RtlIpv4AddressToStringExW@16 __imp__RtlIpv4AddressToStringW@8 __imp__RtlIpv4StringToAddressA@16 __imp__RtlIpv4StringToAddressExA@16 __imp__RtlIpv4StringToAddressExW@16 __imp__RtlIpv4StringToAddressW@16 __imp__RtlIpv6AddressToStringA@8 __imp__RtlIpv6AddressToStringExA@20 __imp__RtlIpv6AddressToStringExW@20 __imp__RtlIpv6AddressToStringW@8 __imp__RtlIpv6StringToAddressA@12 __imp__RtlIpv6StringToAddressExA@16 __imp__RtlIpv6StringToAddressExW@16 __imp__RtlIpv6StringToAddressW@12 __imp__RtlIsActivationContextActive@4 __imp__RtlIsCapabilitySid@4 __imp__RtlIsCloudFilesPlaceholder@8 __imp__RtlIsCriticalSectionLocked@4 __imp__RtlIsCriticalSectionLockedByThread@4 __imp__RtlIsCurrentProcess@4 __imp__RtlIsCurrentThread@4 __imp__RtlIsDosDeviceName_U@4 __imp__RtlIsElevatedRid@4 __imp__RtlIsGenericTableEmpty@4 __imp__RtlIsGenericTableEmptyAvl@4 __imp__RtlIsMultiSessionSku@0 __imp__RtlIsMultiUsersInSessionSku@0 __imp__RtlIsNameInExpression@16 __imp__RtlIsNameInUnUpcasedExpression@16 __imp__RtlIsNameLegalDOS8Dot3@12 __imp__RtlIsNonEmptyDirectoryReparsePointAllowed@4 __imp__RtlIsNormalizedString@16 __imp__RtlIsPackageSid@4 __imp__RtlIsParentOfChildAppContainer@8 __imp__RtlIsPartialPlaceholder@8 __imp__RtlIsPartialPlaceholderFileHandle@8 __imp__RtlIsPartialPlaceholderFileInfo@12 __imp__RtlIsProcessorFeaturePresent@4 __imp__RtlIsStateSeparationEnabled@0 __imp__RtlIsTextUnicode@12 __imp__RtlIsThreadWithinLoaderCallout@0 __imp__RtlIsUntrustedObject@12 __imp__RtlIsValidHandle@8 __imp__RtlIsValidIndexHandle@12 __imp__RtlIsValidLocaleName@8 __imp__RtlIsValidProcessTrustLabelSid@4 __imp__RtlIsZeroMemory@8 __imp__RtlKnownExceptionFilter@4 __imp__RtlLCIDToCultureName@8 __imp__RtlLargeIntegerAdd@16 __imp__RtlLargeIntegerArithmeticShift@12 __imp__RtlLargeIntegerDivide@20 __imp__RtlLargeIntegerNegate@8 __imp__RtlLargeIntegerShiftLeft@12 __imp__RtlLargeIntegerShiftRight@12 __imp__RtlLargeIntegerSubtract@16 __imp__RtlLargeIntegerToChar@16 __imp__RtlLcidToLocaleName@16 __imp__RtlLeaveCriticalSection@4 __imp__RtlLengthRequiredSid@4 __imp__RtlLengthSecurityDescriptor@4 __imp__RtlLengthSid@4 __imp__RtlLocalTimeToSystemTime@8 __imp__RtlLocaleNameToLcid@12 __imp__RtlLocateExtendedFeature2@16 __imp__RtlLocateExtendedFeature@12 __imp__RtlLocateLegacyContext@8 __imp__RtlLockBootStatusData@4 __imp__RtlLockCurrentThread@0 __imp__RtlLockHeap@4 __imp__RtlLockMemoryBlockLookaside@4 __imp__RtlLockMemoryZone@4 __imp__RtlLockModuleSection@4 __imp__RtlLogStackBackTrace@0 __imp__RtlLookupAtomInAtomTable@12 __imp__RtlLookupElementGenericTable@8 __imp__RtlLookupElementGenericTableAvl@8 __imp__RtlLookupElementGenericTableFull@16 __imp__RtlLookupElementGenericTableFullAvl@16 __imp__RtlLookupEntryHashTable@12 __imp__RtlLookupFirstMatchingElementGenericTableAvl@12 __imp__RtlMakeSelfRelativeSD@12 __imp__RtlMapGenericMask@8 __imp__RtlMapSecurityErrorToNtStatus@4 __imp__RtlMoveMemory@12 __imp__RtlMultiAppendUnicodeStringBuffer@12 __imp__RtlMultiByteToUnicodeN@20 __imp__RtlMultiByteToUnicodeSize@12 __imp__RtlMultipleAllocateHeap@20 __imp__RtlMultipleFreeHeap@16 __imp__RtlNewInstanceSecurityObject@40 __imp__RtlNewSecurityGrantedAccess@24 __imp__RtlNewSecurityObject@24 __imp__RtlNewSecurityObjectEx@32 __imp__RtlNewSecurityObjectWithMultipleInheritance@36 __imp__RtlNormalizeProcessParams@4 __imp__RtlNormalizeSecurityDescriptor@20 __imp__RtlNormalizeString@20 __imp__RtlNotifyFeatureUsage@4 __imp__RtlNtPathNameToDosPathName@16 __imp__RtlNtStatusToDosError@4 __imp__RtlNtStatusToDosErrorNoTeb@4 __imp__RtlNumberGenericTableElements@4 __imp__RtlNumberGenericTableElementsAvl@4 __imp__RtlNumberOfClearBits@4 __imp__RtlNumberOfClearBitsInRange@12 __imp__RtlNumberOfSetBits@4 __imp__RtlNumberOfSetBitsInRange@12 __imp__RtlNumberOfSetBitsUlongPtr@4 __imp__RtlOemStringToUnicodeSize@4 __imp__RtlOemStringToUnicodeString@12 __imp__RtlOemToUnicodeN@20 __imp__RtlOpenCurrentUser@8 __imp__RtlOsDeploymentState@4 __imp__RtlOwnerAcesPresent@4 __imp__RtlPcToFileHeader@8 __imp__RtlPinAtomInAtomTable@8 __imp__RtlPopFrame@4 __imp__RtlPrefixString@12 __imp__RtlPrefixUnicodeString@12 __imp__RtlProcessFlsData@8 __imp__RtlPublishWnfStateData@24 __imp__RtlPushFrame@4 __imp__RtlQueryActivationContextApplicationSettings@28 __imp__RtlQueryAllFeatureConfigurations@16 __imp__RtlQueryAtomInAtomTable@24 __imp__RtlQueryDepthSList@4 __imp__RtlQueryDynamicTimeZoneInformation@4 __imp__RtlQueryElevationFlags@4 __imp__RtlQueryEnvironmentVariable@24 __imp__RtlQueryEnvironmentVariable_U@12 __imp__RtlQueryFeatureConfiguration@16 __imp__RtlQueryFeatureConfigurationChangeStamp@0 __imp__RtlQueryFeatureUsageNotificationSubscriptions@8 __imp__RtlQueryHeapInformation@20 __imp__RtlQueryImageMitigationPolicy@20 __imp__RtlQueryInformationAcl@16 __imp__RtlQueryInformationActivationContext@28 __imp__RtlQueryInformationActiveActivationContext@16 __imp__RtlQueryPackageClaims@32 __imp__RtlQueryPackageIdentity@24 __imp__RtlQueryPackageIdentityEx@28 __imp__RtlQueryPerformanceCounter@4 __imp__RtlQueryPerformanceFrequency@4 __imp__RtlQueryProcessBackTraceInformation@4 __imp__RtlQueryProcessDebugInformation@12 __imp__RtlQueryProcessLockInformation@4 __imp__RtlQueryProcessPlaceholderCompatibilityMode@0 __imp__RtlQueryProtectedPolicy@8 __imp__RtlQueryRegistryValueWithFallback@28 __imp__RtlQueryRegistryValues@20 __imp__RtlQueryRegistryValuesEx@20 __imp__RtlQuerySecurityObject@20 __imp__RtlQueryThreadPlaceholderCompatibilityMode@0 __imp__RtlQueryThreadProfiling@8 __imp__RtlQueryTimeZoneInformation@4 __imp__RtlQueryTokenHostIdAsUlong64@8 __imp__RtlQueryUnbiasedInterruptTime@4 __imp__RtlQueryValidationRunlevel@4 __imp__RtlQueryWnfMetaNotification@20 __imp__RtlQueryWnfStateData@24 __imp__RtlQueryWnfStateDataWithExplicitScope@28 __imp__RtlQueueApcWow64Thread@20 __imp__RtlQueueWorkItem@12 __imp__RtlRaiseCustomSystemEventTrigger@4 __imp__RtlRaiseException@4 __imp__RtlRaiseStatus@4 __imp__RtlRandom@4 __imp__RtlRandomEx@4 __imp__RtlRbInsertNodeEx@16 __imp__RtlRbRemoveNode@8 __imp__RtlReAllocateHeap@16 __imp__RtlReadThreadProfilingData@12 __imp__RtlRealPredecessor@4 __imp__RtlRealSuccessor@4 __imp__RtlRegisterFeatureConfigurationChangeNotification@16 __imp__RtlRegisterForWnfMetaNotification@24 __imp__RtlRegisterSecureMemoryCacheCallback@4 __imp__RtlRegisterThreadWithCsrss@0 __imp__RtlRegisterWait@24 __imp__RtlReleaseActivationContext@4 __imp__RtlReleasePath@4 __imp__RtlReleasePebLock@0 __imp__RtlReleasePrivilege@4 __imp__RtlReleaseRelativeName@4 __imp__RtlReleaseResource@4 __imp__RtlReleaseSRWLockExclusive@4 __imp__RtlReleaseSRWLockShared@4 __imp__RtlRemoteCall@28 __imp__RtlRemoveEntryHashTable@12 __imp__RtlRemovePrivileges@12 __imp__RtlRemoveVectoredContinueHandler@4 __imp__RtlRemoveVectoredExceptionHandler@4 __imp__RtlReplaceSidInSd@16 __imp__RtlReplaceSystemDirectoryInPath@16 __imp__RtlReportException@12 __imp__RtlReportExceptionEx@20 __imp__RtlReportSilentProcessExit@8 __imp__RtlReportSqmEscalation@24 __imp__RtlResetMemoryBlockLookaside@4 __imp__RtlResetRtlTranslations@4 __imp__RtlRestoreBootStatusDefaults@4 __imp__RtlRestoreLastWin32Error@4 __imp__RtlRestoreSystemBootStatusDefaults@0 __imp__RtlRestoreThreadPreferredUILanguages@4 __imp__RtlRunDecodeUnicodeString@8 __imp__RtlRunEncodeUnicodeString@8 __imp__RtlRunOnceBeginInitialize@12 __imp__RtlRunOnceComplete@12 __imp__RtlRunOnceExecuteOnce@16 __imp__RtlRunOnceInitialize@4 __imp__RtlSecondsSince1970ToTime@8 __imp__RtlSecondsSince1980ToTime@8 __imp__RtlSelfRelativeToAbsoluteSD2@8 __imp__RtlSelfRelativeToAbsoluteSD@44 __imp__RtlSendMsgToSm@8 __imp__RtlSetAllBits@4 __imp__RtlSetBit@8 __imp__RtlSetBits@12 __imp__RtlSetControlSecurityDescriptor@12 __imp__RtlSetCriticalSectionSpinCount@8 __imp__RtlSetCurrentDirectory_U@4 __imp__RtlSetCurrentEnvironment@8 __imp__RtlSetCurrentTransaction@4 __imp__RtlSetDaclSecurityDescriptor@16 __imp__RtlSetDynamicTimeZoneInformation@4 __imp__RtlSetEnvironmentStrings@8 __imp__RtlSetEnvironmentVar@20 __imp__RtlSetEnvironmentVariable@12 __imp__RtlSetExtendedFeaturesMask@12 __imp__RtlSetFeatureConfigurations@16 __imp__RtlSetGroupSecurityDescriptor@12 __imp__RtlSetHeapInformation@16 __imp__RtlSetImageMitigationPolicy@20 __imp__RtlSetInformationAcl@16 __imp__RtlSetIoCompletionCallback@12 __imp__RtlSetLastWin32Error@4 __imp__RtlSetLastWin32ErrorAndNtStatusFromNtStatus@4 __imp__RtlSetOwnerSecurityDescriptor@12 __imp__RtlSetPortableOperatingSystem@4 __imp__RtlSetProcessDebugInformation@12 __imp__RtlSetProcessIsCritical __imp__RtlSetProcessPlaceholderCompatibilityMode@4 __imp__RtlSetProtectedPolicy@12 __imp__RtlSetProxiedProcessId@4 __imp__RtlSetSaclSecurityDescriptor@16 __imp__RtlSetSearchPathMode@4 __imp__RtlSetSecurityDescriptorRMControl@8 __imp__RtlSetSecurityObject@20 __imp__RtlSetSecurityObjectEx@24 __imp__RtlSetSystemBootStatus@16 __imp__RtlSetSystemBootStatusEx@12 __imp__RtlSetThreadErrorMode@8 __imp__RtlSetThreadIsCritical __imp__RtlSetThreadPlaceholderCompatibilityMode@4 __imp__RtlSetThreadPoolStartFunc@8 __imp__RtlSetThreadPreferredUILanguages2@16 __imp__RtlSetThreadPreferredUILanguages@12 __imp__RtlSetThreadSubProcessTag@4 __imp__RtlSetThreadWorkOnBehalfTicket@4 __imp__RtlSetTimeZoneInformation@4 __imp__RtlSetTimer@28 __imp__RtlSetUnhandledExceptionFilter@4 __imp__RtlSetUserFlagsHeap@20 __imp__RtlSetUserValueHeap@16 __imp__RtlSidDominates@12 __imp__RtlSidDominatesForTrust@12 __imp__RtlSidEqualLevel@12 __imp__RtlSidHashInitialize@12 __imp__RtlSidHashLookup@8 __imp__RtlSidIsHigherLevel@12 __imp__RtlSizeHeap@12 __imp__RtlSleepConditionVariableCS@12 __imp__RtlSleepConditionVariableSRW@16 __imp__RtlSplay@4 __imp__RtlStartRXact@4 __imp__RtlStringFromGUID@8 __imp__RtlStringFromGUIDEx@12 __imp__RtlStronglyEnumerateEntryHashTable@8 __imp__RtlSubAuthorityCountSid@4 __imp__RtlSubAuthoritySid@8 __imp__RtlSubscribeForFeatureUsageNotification@8 __imp__RtlSubscribeWnfStateChangeNotification@36 __imp__RtlSubtreePredecessor@4 __imp__RtlSubtreeSuccessor@4 __imp__RtlSwitchedVVI@16 __imp__RtlSystemTimeToLocalTime@8 __imp__RtlTestAndPublishWnfStateData@28 __imp__RtlTestBit@8 __imp__RtlTestProtectedAccess@8 __imp__RtlTimeFieldsToTime@8 __imp__RtlTimeToElapsedTimeFields@8 __imp__RtlTimeToSecondsSince1970@8 __imp__RtlTimeToSecondsSince1980@8 __imp__RtlTimeToTimeFields@8 __imp__RtlTraceDatabaseAdd@16 __imp__RtlTraceDatabaseCreate@20 __imp__RtlTraceDatabaseDestroy@4 __imp__RtlTraceDatabaseEnumerate@12 __imp__RtlTraceDatabaseFind@16 __imp__RtlTraceDatabaseLock@4 __imp__RtlTraceDatabaseUnlock@4 __imp__RtlTraceDatabaseValidate@4 __imp__RtlTryAcquirePebLock@0 __imp__RtlTryAcquireSRWLockExclusive@4 __imp__RtlTryAcquireSRWLockShared@4 __imp__RtlTryConvertSRWLockSharedToExclusiveOrRelease@4 __imp__RtlTryEnterCriticalSection@4 __imp__RtlUTF8StringToUnicodeString@12 __imp__RtlUTF8ToUnicodeN@20 __imp__RtlUnhandledExceptionFilter2@8 __imp__RtlUnhandledExceptionFilter@4 __imp__RtlUnicodeStringToAnsiSize@4 __imp__RtlUnicodeStringToAnsiString@12 __imp__RtlUnicodeStringToCountedOemString@12 __imp__RtlUnicodeStringToInteger@12 __imp__RtlUnicodeStringToOemSize@4 __imp__RtlUnicodeStringToOemString@12 __imp__RtlUnicodeStringToUTF8String@12 __imp__RtlUnicodeToCustomCPN@24 __imp__RtlUnicodeToMultiByteN@20 __imp__RtlUnicodeToMultiByteSize@12 __imp__RtlUnicodeToOemN@20 __imp__RtlUnicodeToUTF8N@20 __imp__RtlUniform@4 __imp__RtlUnlockBootStatusData@4 __imp__RtlUnlockCurrentThread@0 __imp__RtlUnlockHeap@4 __imp__RtlUnlockMemoryBlockLookaside@4 __imp__RtlUnlockMemoryZone@4 __imp__RtlUnlockModuleSection@4 __imp__RtlUnregisterFeatureConfigurationChangeNotification@4 __imp__RtlUnsubscribeFromFeatureUsageNotifications@8 __imp__RtlUnsubscribeWnfNotificationWaitForCompletion@4 __imp__RtlUnsubscribeWnfNotificationWithCompletionCallback@12 __imp__RtlUnsubscribeWnfStateChangeNotification@4 __imp__RtlUnwind@16 __imp__RtlUpcaseUnicodeChar@4 __imp__RtlUpcaseUnicodeString@12 __imp__RtlUpcaseUnicodeStringToCountedOemString@12 __imp__RtlUpcaseUnicodeStringToOemString@12 __imp__RtlUpcaseUnicodeToCustomCPN@24 __imp__RtlUpcaseUnicodeToMultiByteN@20 __imp__RtlUpcaseUnicodeToOemN@20 __imp__RtlUpdateClonedCriticalSection@4 __imp__RtlUpdateClonedSRWLock@8 __imp__RtlUpdateTimer@16 __imp__RtlUpperChar@4 __imp__RtlUpperString@8 __imp__RtlValidAcl@4 __imp__RtlValidProcessProtection@4 __imp__RtlValidRelativeSecurityDescriptor@12 __imp__RtlValidSecurityDescriptor@4 __imp__RtlValidSid@4 __imp__RtlValidateCorrelationVector@4 __imp__RtlValidateHeap@12 __imp__RtlValidateProcessHeaps@0 __imp__RtlValidateUnicodeString@8 __imp__RtlVerifyVersionInfo@16 __imp__RtlWaitForWnfMetaNotification@24 __imp__RtlWaitOnAddress@16 __imp__RtlWakeAddressAll@4 __imp__RtlWakeAddressAllNoFence@4 __imp__RtlWakeAddressSingle@4 __imp__RtlWakeAddressSingleNoFence@4 __imp__RtlWakeAllConditionVariable@4 __imp__RtlWakeConditionVariable@4 __imp__RtlWalkFrameChain@12 __imp__RtlWalkHeap@8 __imp__RtlWeaklyEnumerateEntryHashTable@8 __imp__RtlWerpReportException@24 __imp__RtlWnfCompareChangeStamp@8 __imp__RtlWnfDllUnloadCallback@4 __imp__RtlWow64CallFunction64@28 __imp__RtlWow64EnableFsRedirection@4 __imp__RtlWow64EnableFsRedirectionEx@8 __imp__RtlWow64GetCurrentMachine@0 __imp__RtlWow64GetEquivalentMachineCHPE@4 __imp__RtlWow64GetProcessMachines@12 __imp__RtlWow64GetSharedInfoProcess@12 __imp__RtlWow64IsWowGuestMachineSupported@8 __imp__RtlWriteRegistryValue@24 __imp__RtlZeroMemory@8 __imp__RtlZombifyActivationContext@4 __imp__RtlpApplyLengthFunction@16 __imp__RtlpCheckDynamicTimeZoneInformation@8 __imp__RtlpCleanupRegistryKeys@0 __imp__RtlpConvertAbsoluteToRelativeSecurityAttribute@12 __imp__RtlpConvertCultureNamesToLCIDs@8 __imp__RtlpConvertLCIDsToCultureNames@8 __imp__RtlpConvertRelativeToAbsoluteSecurityAttribute@16 __imp__RtlpCreateProcessRegistryInfo@4 __imp__RtlpEnsureBufferSize@12 __imp__RtlpGetLCIDFromLangInfoNode@12 __imp__RtlpGetNameFromLangInfoNode@12 __imp__RtlpGetSystemDefaultUILanguage@8 __imp__RtlpGetUserOrMachineUILanguage4NLS@12 __imp__RtlpInitializeLangRegistryInfo@4 __imp__RtlpIsQualifiedLanguage@12 __imp__RtlpLoadMachineUIByPolicy@12 __imp__RtlpLoadUserUIByPolicy@12 __imp__RtlpMergeSecurityAttributeInformation@16 __imp__RtlpMuiFreeLangRegistryInfo@4 __imp__RtlpMuiRegCreateRegistryInfo@0 __imp__RtlpMuiRegFreeRegistryInfo@8 __imp__RtlpMuiRegLoadRegistryInfo@8 __imp__RtlpNotOwnerCriticalSection@4 __imp__RtlpNtCreateKey@24 __imp__RtlpNtEnumerateSubKey@16 __imp__RtlpNtMakeTemporaryKey@4 __imp__RtlpNtOpenKey@16 __imp__RtlpNtQueryValueKey@20 __imp__RtlpNtSetValueKey@16 __imp__RtlpQueryDefaultUILanguage@8 __imp__RtlpQueryProcessDebugInformationRemote@4 __imp__RtlpRefreshCachedUILanguage@8 __imp__RtlpSetInstallLanguage@8 __imp__RtlpSetPreferredUILanguages@12 __imp__RtlpSetUserPreferredUILanguages@12 __imp__RtlpTimeFieldsToTime@12 __imp__RtlpTimeToTimeFields@12 __imp__RtlpUnWaitCriticalSection@4 __imp__RtlpVerifyAndCommitUILanguageSettings@4 __imp__RtlpWaitForCriticalSection@4 __imp__RtlxAnsiStringToUnicodeSize@4 __imp__RtlxOemStringToUnicodeSize@4 __imp__RtlxUnicodeStringToAnsiSize@4 __imp__RtlxUnicodeStringToOemSize@4 __imp__ShipAssert@8 __imp__ShipAssertGetBufferInfo@8 __imp__ShipAssertMsgA@12 __imp__ShipAssertMsgW@12 __imp__TpAllocAlpcCompletion@20 __imp__TpAllocCleanupGroup@4 __imp__TpAllocIoCompletion@20 __imp__TpAllocJobNotification@20 __imp__TpAllocPool@8 __imp__TpAllocTimer@16 __imp__TpAllocWait@16 __imp__TpAllocWork@16 __imp__TpCallbackDetectedUnrecoverableError@4 __imp__TpCallbackLeaveCriticalSectionOnCompletion@8 __imp__TpCallbackMayRunLong@4 __imp__TpCallbackReleaseMutexOnCompletion@8 __imp__TpCallbackReleaseSemaphoreOnCompletion@12 __imp__TpCallbackSetEventOnCompletion@8 __imp__TpCallbackUnloadDllOnCompletion@8 __imp__TpCancelAsyncIoOperation@4 __imp__TpCaptureCaller@4 __imp__TpCheckTerminateWorker@4 __imp__TpDisassociateCallback@4 __imp__TpIsTimerSet@4 __imp__TpPostWork@4 __imp__TpQueryPoolStackInformation@8 __imp__TpReleaseAlpcCompletion@4 __imp__TpReleaseCleanupGroup@4 __imp__TpReleaseCleanupGroupMembers@12 __imp__TpReleaseIoCompletion@4 __imp__TpReleaseJobNotification@4 __imp__TpReleasePool@4 __imp__TpReleaseTimer@4 __imp__TpReleaseWait@4 __imp__TpReleaseWork@4 __imp__TpSetPoolMaxThreads@8 __imp__TpSetPoolMaxThreadsSoftLimit@8 __imp__TpSetPoolMinThreads@8 __imp__TpSetPoolStackInformation@8 __imp__TpSetPoolWorkerThreadIdleTimeout@12 __imp__TpSetTimer@16 __imp__TpSetTimerEx@16 __imp__TpSetWait@12 __imp__TpSetWaitEx@16 __imp__TpSimpleTryPost@12 __imp__TpStartAsyncIoOperation@4 __imp__TpTrimPools@0 __imp__TpWaitForAlpcCompletion@4 __imp__TpWaitForIoCompletion@8 __imp__TpWaitForJobNotification@4 __imp__TpWaitForTimer@8 __imp__TpWaitForWait@8 __imp__TpWaitForWork@8 __imp__VerSetConditionMask@16 __imp__WerReportExceptionWorker@4 __imp__WerReportSQMEvent@16 __imp__WinSqmAddToAverageDWORD@12 __imp__WinSqmAddToStream@16 __imp__WinSqmAddToStreamEx@20 __imp__WinSqmCheckEscalationAddToStreamEx@20 __imp__WinSqmCheckEscalationSetDWORD64@20 __imp__WinSqmCheckEscalationSetDWORD@16 __imp__WinSqmCheckEscalationSetString@16 __imp__WinSqmCommonDatapointDelete@4 __imp__WinSqmCommonDatapointSetDWORD64@16 __imp__WinSqmCommonDatapointSetDWORD@12 __imp__WinSqmCommonDatapointSetStreamEx@20 __imp__WinSqmCommonDatapointSetString@12 __imp__WinSqmEndSession@4 __imp__WinSqmEventEnabled@8 __imp__WinSqmEventWrite@12 __imp__WinSqmGetEscalationRuleStatus@8 __imp__WinSqmGetInstrumentationProperty@16 __imp__WinSqmIncrementDWORD@12 __imp__WinSqmIsOptedIn@0 __imp__WinSqmIsOptedInEx@4 __imp__WinSqmIsSessionDisabled@4 __imp__WinSqmSetDWORD64@16 __imp__WinSqmSetDWORD@12 __imp__WinSqmSetEscalationInfo@16 __imp__WinSqmSetIfMaxDWORD@12 __imp__WinSqmSetIfMinDWORD@12 __imp__WinSqmSetString@12 __imp__WinSqmStartSession@12 __imp__WinSqmStartSessionForPartner@16 __imp__ZwAcceptConnectPort@24 __imp__ZwAccessCheck@32 __imp__ZwAccessCheckAndAuditAlarm@44 __imp__ZwAccessCheckByType@44 __imp__ZwAccessCheckByTypeAndAuditAlarm@64 __imp__ZwAccessCheckByTypeResultList@44 __imp__ZwAccessCheckByTypeResultListAndAuditAlarm@64 __imp__ZwAccessCheckByTypeResultListAndAuditAlarmByHandle@68 __imp__ZwAcquireCrossVmMutant@8 __imp__ZwAcquireProcessActivityReference@12 __imp__ZwAddAtom@12 __imp__ZwAddAtomEx@16 __imp__ZwAddBootEntry@8 __imp__ZwAddDriverEntry@8 __imp__ZwAdjustGroupsToken@24 __imp__ZwAdjustPrivilegesToken@24 __imp__ZwAdjustTokenClaimsAndDeviceGroups@64 __imp__ZwAlertResumeThread@8 __imp__ZwAlertThread@4 __imp__ZwAlertThreadByThreadId@4 __imp__ZwAllocateLocallyUniqueId@4 __imp__ZwAllocateReserveObject@12 __imp__ZwAllocateUserPhysicalPages@12 __imp__ZwAllocateUserPhysicalPagesEx@20 __imp__ZwAllocateUuids@16 __imp__ZwAllocateVirtualMemory@24 __imp__ZwAllocateVirtualMemoryEx@28 __imp__ZwAlpcAcceptConnectPort@36 __imp__ZwAlpcCancelMessage@12 __imp__ZwAlpcConnectPort@44 __imp__ZwAlpcConnectPortEx@44 __imp__ZwAlpcCreatePort@12 __imp__ZwAlpcCreatePortSection@24 __imp__ZwAlpcCreateResourceReserve@16 __imp__ZwAlpcCreateSectionView@12 __imp__ZwAlpcCreateSecurityContext@12 __imp__ZwAlpcDeletePortSection@12 __imp__ZwAlpcDeleteResourceReserve@12 __imp__ZwAlpcDeleteSectionView@12 __imp__ZwAlpcDeleteSecurityContext@12 __imp__ZwAlpcDisconnectPort@8 __imp__ZwAlpcImpersonateClientContainerOfPort@12 __imp__ZwAlpcImpersonateClientOfPort@12 __imp__ZwAlpcOpenSenderProcess@24 __imp__ZwAlpcOpenSenderThread@24 __imp__ZwAlpcQueryInformation@20 __imp__ZwAlpcQueryInformationMessage@24 __imp__ZwAlpcRevokeSecurityContext@12 __imp__ZwAlpcSendWaitReceivePort@32 __imp__ZwAlpcSetInformation@16 __imp__ZwApphelpCacheControl@8 __imp__ZwAreMappedFilesTheSame@8 __imp__ZwAssignProcessToJobObject@8 __imp__ZwAssociateWaitCompletionPacket@32 __imp__ZwCallEnclave@16 __imp__ZwCallbackReturn@12 __imp__ZwCancelIoFile@8 __imp__ZwCancelIoFileEx@12 __imp__ZwCancelSynchronousIoFile@12 __imp__ZwCancelTimer2@8 __imp__ZwCancelTimer@8 __imp__ZwCancelWaitCompletionPacket@8 __imp__ZwClearEvent@4 __imp__ZwClose@4 __imp__ZwCloseObjectAuditAlarm@12 __imp__ZwCommitComplete@8 __imp__ZwCommitEnlistment@8 __imp__ZwCommitRegistryTransaction@8 __imp__ZwCommitTransaction@8 __imp__ZwCompactKeys@8 __imp__ZwCompareObjects@8 __imp__ZwCompareSigningLevels@8 __imp__ZwCompareTokens@12 __imp__ZwCompleteConnectPort@4 __imp__ZwCompressKey@4 __imp__ZwConnectPort@32 __imp__ZwContinue@8 __imp__ZwContinueEx@8 __imp__ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter@16 __imp__ZwCreateCrossVmEvent@24 __imp__ZwCreateCrossVmMutant@24 __imp__ZwCreateDebugObject@16 __imp__ZwCreateDirectoryObject@12 __imp__ZwCreateDirectoryObjectEx@20 __imp__ZwCreateEnclave@36 __imp__ZwCreateEnlistment@32 __imp__ZwCreateEvent@20 __imp__ZwCreateEventPair@12 __imp__ZwCreateFile@44 __imp__ZwCreateIRTimer@12 __imp__ZwCreateIoCompletion@16 __imp__ZwCreateJobObject@12 __imp__ZwCreateJobSet@12 __imp__ZwCreateKey@28 __imp__ZwCreateKeyTransacted@32 __imp__ZwCreateKeyedEvent@16 __imp__ZwCreateLowBoxToken@36 __imp__ZwCreateMailslotFile@32 __imp__ZwCreateMutant@16 __imp__ZwCreateNamedPipeFile@56 __imp__ZwCreatePagingFile@16 __imp__ZwCreatePartition@16 __imp__ZwCreatePort@20 __imp__ZwCreatePrivateNamespace@16 __imp__ZwCreateProcess@32 __imp__ZwCreateProcessEx@36 __imp__ZwCreateProfile@36 __imp__ZwCreateProfileEx@40 __imp__ZwCreateRegistryTransaction@16 __imp__ZwCreateResourceManager@28 __imp__ZwCreateSection@28 __imp__ZwCreateSectionEx@36 __imp__ZwCreateSemaphore@20 __imp__ZwCreateSymbolicLinkObject@16 __imp__ZwCreateThread@32 __imp__ZwCreateThreadEx@44 __imp__ZwCreateTimer2@20 __imp__ZwCreateTimer@16 __imp__ZwCreateToken@52 __imp__ZwCreateTokenEx@68 __imp__ZwCreateTransaction@40 __imp__ZwCreateTransactionManager@24 __imp__ZwCreateUserProcess@44 __imp__ZwCreateWaitCompletionPacket@12 __imp__ZwCreateWaitablePort@20 __imp__ZwCreateWnfStateName@28 __imp__ZwCreateWorkerFactory@40 __imp__ZwDebugActiveProcess@8 __imp__ZwDebugContinue@12 __imp__ZwDelayExecution@8 __imp__ZwDeleteAtom@4 __imp__ZwDeleteBootEntry@4 __imp__ZwDeleteDriverEntry@4 __imp__ZwDeleteFile@4 __imp__ZwDeleteKey@4 __imp__ZwDeleteObjectAuditAlarm@12 __imp__ZwDeletePrivateNamespace@4 __imp__ZwDeleteValueKey@8 __imp__ZwDeleteWnfStateData@8 __imp__ZwDeleteWnfStateName@4 __imp__ZwDeviceIoControlFile@40 __imp__ZwDirectGraphicsCall@20 __imp__ZwDisableLastKnownGood@0 __imp__ZwDisplayString@4 __imp__ZwDrawText@4 __imp__ZwDuplicateObject@28 __imp__ZwDuplicateToken@24 __imp__ZwEnableLastKnownGood@0 __imp__ZwEnumerateBootEntries@8 __imp__ZwEnumerateDriverEntries@8 __imp__ZwEnumerateKey@24 __imp__ZwEnumerateSystemEnvironmentValuesEx@12 __imp__ZwEnumerateTransactionObject@20 __imp__ZwEnumerateValueKey@24 __imp__ZwExtendSection@8 __imp__ZwFilterBootOption@20 __imp__ZwFilterToken@24 __imp__ZwFilterTokenEx@56 __imp__ZwFindAtom@12 __imp__ZwFlushBuffersFile@8 __imp__ZwFlushBuffersFileEx@20 __imp__ZwFlushInstallUILanguage@8 __imp__ZwFlushInstructionCache@12 __imp__ZwFlushKey@4 __imp__ZwFlushProcessWriteBuffers@0 __imp__ZwFlushVirtualMemory@16 __imp__ZwFlushWriteBuffer@0 __imp__ZwFreeUserPhysicalPages@12 __imp__ZwFreeVirtualMemory@16 __imp__ZwFreezeRegistry@4 __imp__ZwFreezeTransactions@8 __imp__ZwFsControlFile@40 __imp__ZwGetCachedSigningLevel@24 __imp__ZwGetCompleteWnfStateSubscription@24 __imp__ZwGetContextThread@8 __imp__ZwGetCurrentProcessorNumber@0 __imp__ZwGetCurrentProcessorNumberEx@4 __imp__ZwGetDevicePowerState@8 __imp__ZwGetMUIRegistryInfo@12 __imp__ZwGetNextProcess@20 __imp__ZwGetNextThread@24 __imp__ZwGetNlsSectionPtr@20 __imp__ZwGetNotificationResourceManager@28 __imp__ZwGetWriteWatch@28 __imp__ZwImpersonateAnonymousToken@4 __imp__ZwImpersonateClientOfPort@8 __imp__ZwImpersonateThread@12 __imp__ZwInitializeEnclave@20 __imp__ZwInitializeNlsFiles@12 __imp__ZwInitializeRegistry@4 __imp__ZwInitiatePowerAction@16 __imp__ZwIsProcessInJob@8 __imp__ZwIsSystemResumeAutomatic@0 __imp__ZwIsUILanguageComitted@0 __imp__ZwListenPort@8 __imp__ZwLoadDriver@4 __imp__ZwLoadEnclaveData@36 __imp__ZwLoadKey2@12 __imp__ZwLoadKey3@32 __imp__ZwLoadKey@8 __imp__ZwLoadKeyEx@32 __imp__ZwLockFile@40 __imp__ZwLockProductActivationKeys@8 __imp__ZwLockRegistryKey@4 __imp__ZwLockVirtualMemory@16 __imp__ZwMakePermanentObject@4 __imp__ZwMakeTemporaryObject@4 __imp__ZwManageHotPatch@16 __imp__ZwManagePartition@20 __imp__ZwMapCMFModule@24 __imp__ZwMapUserPhysicalPages@12 __imp__ZwMapUserPhysicalPagesScatter@12 __imp__ZwMapViewOfSection@40 __imp__ZwMapViewOfSectionEx@36 __imp__ZwModifyBootEntry@4 __imp__ZwModifyDriverEntry@4 __imp__ZwNotifyChangeDirectoryFile@36 __imp__ZwNotifyChangeDirectoryFileEx@40 __imp__ZwNotifyChangeKey@40 __imp__ZwNotifyChangeMultipleKeys@48 __imp__ZwNotifyChangeSession@32 __imp__ZwOpenDirectoryObject@12 __imp__ZwOpenEnlistment@20 __imp__ZwOpenEvent@12 __imp__ZwOpenEventPair@12 __imp__ZwOpenFile@24 __imp__ZwOpenIoCompletion@12 __imp__ZwOpenJobObject@12 __imp__ZwOpenKey@12 __imp__ZwOpenKeyEx@16 __imp__ZwOpenKeyTransacted@16 __imp__ZwOpenKeyTransactedEx@20 __imp__ZwOpenKeyedEvent@12 __imp__ZwOpenMutant@12 __imp__ZwOpenObjectAuditAlarm@48 __imp__ZwOpenPartition@12 __imp__ZwOpenPrivateNamespace@16 __imp__ZwOpenProcess@16 __imp__ZwOpenProcessToken@12 __imp__ZwOpenProcessTokenEx@16 __imp__ZwOpenRegistryTransaction@12 __imp__ZwOpenResourceManager@20 __imp__ZwOpenSection@12 __imp__ZwOpenSemaphore@12 __imp__ZwOpenSession@12 __imp__ZwOpenSymbolicLinkObject@12 __imp__ZwOpenThread@16 __imp__ZwOpenThreadToken@16 __imp__ZwOpenThreadTokenEx@20 __imp__ZwOpenTimer@12 __imp__ZwOpenTransaction@20 __imp__ZwOpenTransactionManager@24 __imp__ZwPlugPlayControl@12 __imp__ZwPowerInformation@20 __imp__ZwPrePrepareComplete@8 __imp__ZwPrePrepareEnlistment@8 __imp__ZwPrepareComplete@8 __imp__ZwPrepareEnlistment@8 __imp__ZwPrivilegeCheck@12 __imp__ZwPrivilegeObjectAuditAlarm@24 __imp__ZwPrivilegedServiceAuditAlarm@20 __imp__ZwPropagationComplete@16 __imp__ZwPropagationFailed@12 __imp__ZwProtectVirtualMemory@20 __imp__ZwPssCaptureVaSpaceBulk@20 __imp__ZwPulseEvent@8 __imp__ZwQueryAttributesFile@8 __imp__ZwQueryAuxiliaryCounterFrequency@4 __imp__ZwQueryBootEntryOrder@8 __imp__ZwQueryBootOptions@8 __imp__ZwQueryDebugFilterState@8 __imp__ZwQueryDefaultLocale@8 __imp__ZwQueryDefaultUILanguage@4 __imp__ZwQueryDirectoryFile@44 __imp__ZwQueryDirectoryFileEx@40 __imp__ZwQueryDirectoryObject@28 __imp__ZwQueryDriverEntryOrder@8 __imp__ZwQueryEaFile@36 __imp__ZwQueryEvent@20 __imp__ZwQueryFullAttributesFile@8 __imp__ZwQueryInformationAtom@20 __imp__ZwQueryInformationByName@20 __imp__ZwQueryInformationEnlistment@20 __imp__ZwQueryInformationFile@20 __imp__ZwQueryInformationJobObject@20 __imp__ZwQueryInformationPort@20 __imp__ZwQueryInformationProcess@20 __imp__ZwQueryInformationResourceManager@20 __imp__ZwQueryInformationThread@20 __imp__ZwQueryInformationToken@20 __imp__ZwQueryInformationTransaction@20 __imp__ZwQueryInformationTransactionManager@20 __imp__ZwQueryInformationWorkerFactory@20 __imp__ZwQueryInstallUILanguage@4 __imp__ZwQueryIntervalProfile@8 __imp__ZwQueryIoCompletion@20 __imp__ZwQueryKey@20 __imp__ZwQueryLicenseValue@20 __imp__ZwQueryMultipleValueKey@24 __imp__ZwQueryMutant@20 __imp__ZwQueryObject@20 __imp__ZwQueryOpenSubKeys@8 __imp__ZwQueryOpenSubKeysEx@16 __imp__ZwQueryPerformanceCounter@8 __imp__ZwQueryPortInformationProcess@0 __imp__ZwQueryQuotaInformationFile@36 __imp__ZwQuerySection@20 __imp__ZwQuerySecurityAttributesToken@24 __imp__ZwQuerySecurityObject@20 __imp__ZwQuerySecurityPolicy@24 __imp__ZwQuerySemaphore@20 __imp__ZwQuerySymbolicLinkObject@12 __imp__ZwQuerySystemEnvironmentValue@16 __imp__ZwQuerySystemEnvironmentValueEx@20 __imp__ZwQuerySystemInformation@16 __imp__ZwQuerySystemInformationEx@24 __imp__ZwQuerySystemTime@4 __imp__ZwQueryTimer@20 __imp__ZwQueryTimerResolution@12 __imp__ZwQueryValueKey@24 __imp__ZwQueryVirtualMemory@24 __imp__ZwQueryVolumeInformationFile@20 __imp__ZwQueryWnfStateData@24 __imp__ZwQueryWnfStateNameInformation@20 __imp__ZwQueueApcThread@20 __imp__ZwQueueApcThreadEx@24 __imp__ZwRaiseException@12 __imp__ZwRaiseHardError@24 __imp__ZwReadFile@36 __imp__ZwReadFileScatter@36 __imp__ZwReadOnlyEnlistment@8 __imp__ZwReadRequestData@24 __imp__ZwReadVirtualMemory@20 __imp__ZwRecoverEnlistment@8 __imp__ZwRecoverResourceManager@4 __imp__ZwRecoverTransactionManager@4 __imp__ZwRegisterProtocolAddressInformation@20 __imp__ZwRegisterThreadTerminatePort@4 __imp__ZwReleaseKeyedEvent@16 __imp__ZwReleaseMutant@8 __imp__ZwReleaseSemaphore@12 __imp__ZwReleaseWorkerFactoryWorker@4 __imp__ZwRemoveIoCompletion@20 __imp__ZwRemoveIoCompletionEx@24 __imp__ZwRemoveProcessDebug@8 __imp__ZwRenameKey@8 __imp__ZwRenameTransactionManager@8 __imp__ZwReplaceKey@12 __imp__ZwReplacePartitionUnit@12 __imp__ZwReplyPort@8 __imp__ZwReplyWaitReceivePort@16 __imp__ZwReplyWaitReceivePortEx@20 __imp__ZwReplyWaitReplyPort@8 __imp__ZwRequestPort@8 __imp__ZwRequestWaitReplyPort@12 __imp__ZwResetEvent@8 __imp__ZwResetWriteWatch@12 __imp__ZwRestoreKey@12 __imp__ZwResumeProcess@4 __imp__ZwResumeThread@8 __imp__ZwRevertContainerImpersonation@0 __imp__ZwRollbackComplete@8 __imp__ZwRollbackEnlistment@8 __imp__ZwRollbackRegistryTransaction@8 __imp__ZwRollbackTransaction@8 __imp__ZwRollforwardTransactionManager@8 __imp__ZwSaveKey@8 __imp__ZwSaveKeyEx@12 __imp__ZwSaveMergedKeys@12 __imp__ZwSecureConnectPort@36 __imp__ZwSerializeBoot@0 __imp__ZwSetBootEntryOrder@8 __imp__ZwSetBootOptions@8 __imp__ZwSetCachedSigningLevel2@24 __imp__ZwSetCachedSigningLevel@20 __imp__ZwSetContextThread@8 __imp__ZwSetDebugFilterState@12 __imp__ZwSetDefaultHardErrorPort@4 __imp__ZwSetDefaultLocale@8 __imp__ZwSetDefaultUILanguage@4 __imp__ZwSetDriverEntryOrder@8 __imp__ZwSetEaFile@16 __imp__ZwSetEvent@8 __imp__ZwSetEventBoostPriority@4 __imp__ZwSetHighEventPair@4 __imp__ZwSetHighWaitLowEventPair@4 __imp__ZwSetIRTimer@8 __imp__ZwSetInformationDebugObject@20 __imp__ZwSetInformationEnlistment@16 __imp__ZwSetInformationFile@20 __imp__ZwSetInformationJobObject@16 __imp__ZwSetInformationKey@16 __imp__ZwSetInformationObject@16 __imp__ZwSetInformationProcess@16 __imp__ZwSetInformationResourceManager@16 __imp__ZwSetInformationSymbolicLink@16 __imp__ZwSetInformationThread@16 __imp__ZwSetInformationToken@16 __imp__ZwSetInformationTransaction@16 __imp__ZwSetInformationTransactionManager@16 __imp__ZwSetInformationVirtualMemory@24 __imp__ZwSetInformationWorkerFactory@16 __imp__ZwSetIntervalProfile@8 __imp__ZwSetIoCompletion@20 __imp__ZwSetIoCompletionEx@24 __imp__ZwSetLdtEntries@24 __imp__ZwSetLowEventPair@4 __imp__ZwSetLowWaitHighEventPair@4 __imp__ZwSetQuotaInformationFile@16 __imp__ZwSetSecurityObject@12 __imp__ZwSetSystemEnvironmentValue@8 __imp__ZwSetSystemEnvironmentValueEx@20 __imp__ZwSetSystemInformation@12 __imp__ZwSetSystemPowerState@12 __imp__ZwSetSystemTime@8 __imp__ZwSetThreadExecutionState@8 __imp__ZwSetTimer2@16 __imp__ZwSetTimer@28 __imp__ZwSetTimerEx@16 __imp__ZwSetTimerResolution@12 __imp__ZwSetUuidSeed@4 __imp__ZwSetValueKey@24 __imp__ZwSetVolumeInformationFile@20 __imp__ZwSetWnfProcessNotificationEvent@4 __imp__ZwShutdownSystem@4 __imp__ZwShutdownWorkerFactory@8 __imp__ZwSignalAndWaitForSingleObject@16 __imp__ZwSinglePhaseReject@8 __imp__ZwStartProfile@4 __imp__ZwStopProfile@4 __imp__ZwSubscribeWnfStateChange@16 __imp__ZwSuspendProcess@4 __imp__ZwSuspendThread@8 __imp__ZwSystemDebugControl@24 __imp__ZwTerminateEnclave@8 __imp__ZwTerminateJobObject@8 __imp__ZwTerminateProcess@8 __imp__ZwTerminateThread@8 __imp__ZwTestAlert@0 __imp__ZwThawRegistry@0 __imp__ZwThawTransactions@0 __imp__ZwTraceControl@24 __imp__ZwTraceEvent@16 __imp__ZwTranslateFilePath@16 __imp__ZwUmsThreadYield@4 __imp__ZwUnloadDriver@4 __imp__ZwUnloadKey2@8 __imp__ZwUnloadKey@4 __imp__ZwUnloadKeyEx@8 __imp__ZwUnlockFile@20 __imp__ZwUnlockVirtualMemory@16 __imp__ZwUnmapViewOfSection@8 __imp__ZwUnmapViewOfSectionEx@12 __imp__ZwUnsubscribeWnfStateChange@4 __imp__ZwUpdateWnfStateData@28 __imp__ZwVdmControl@8 __imp__ZwWaitForAlertByThreadId@8 __imp__ZwWaitForDebugEvent@16 __imp__ZwWaitForKeyedEvent@16 __imp__ZwWaitForMultipleObjects32@20 __imp__ZwWaitForMultipleObjects@20 __imp__ZwWaitForSingleObject@12 __imp__ZwWaitForWorkViaWorkerFactory@20 __imp__ZwWaitHighEventPair@4 __imp__ZwWaitLowEventPair@4 __imp__ZwWorkerFactoryWorkerReady@4 __imp__ZwWriteFile@36 __imp__ZwWriteFileGather@36 __imp__ZwWriteRequestData@24 __imp__ZwWriteVirtualMemory@20 __imp__ZwYieldExecution@0 __imp__vDbgPrintEx@16 __imp__vDbgPrintExWithPrefix@20 _vDbgPrintEx@16 _vDbgPrintExWithPrefix@20 ntdll_NULL_THUNK_DATA
ntdll.dll/ -1 0 485 `
L g�k� .debug$S ? � @ B.idata$2 � � @ 0�.idata$6
� � @ � ntdll.dll' kMicrosoft (R) LINK ntdll.dll @comp.idk�� .idata$2@ � h .idata$6 .idata$4@ � h .idata$5@ � h 7 N __IMPORT_DESCRIPTOR_ntdll __NULL_IMPORT_DESCRIPTOR ntdll_NULL_THUNK_DATA
ntdll.dll/ -1 0 248 `
L �E�ķ .debug$S ? d @ B.idata$3 � @ 0� ntdll.dll' kMicrosoft (R) LINK @comp.idk�� __NULL_IMPORT_DESCRIPTOR ntdll.dll/ -1 0 274 `
L F��� .debug$S ? � @ B.idata$5 � @ 0�.idata$4 � @ 0� ntdll.dll' kMicrosoft (R) LINK @comp.idk�� ntdll_NULL_THUNK_DATA ntdll.dll/ -1 0 72 `
�� L�1�4 � @RtlActivateActivationContextUnsafeFast@8 ntdll.dll ntdll.dll/ -1 0 74 `
�� L���6 \ @RtlDeactivateActivationContextUnsafeFast@4 ntdll.dll ntdll.dll/ -1 0 62 `
�� LVD�* ~ @RtlInterlockedPushListSList@16 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�� � @RtlUlongByteSwap@4 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�S�" � @RtlUlonglongByteSwap@8 ntdll.dll ntdll.dll/ -1 0 51 `
�� L���� @RtlUshortByteSwap@4 ntdll.dll
ntdll.dll/ -1 0 74 `
�� LF���6 _AlpcAdjustCompletionListConcurrencyCount@8 ntdll.dll ntdll.dll/ -1 0 63 `
�� Lp�1�+ _AlpcFreeCompletionListMessage@8 ntdll.dll
ntdll.dll/ -1 0 78 `
�� L � �: _AlpcGetCompletionListLastMessageInformation@12 ntdll.dll ntdll.dll/ -1 0 72 `
�� L�we�4 _AlpcGetCompletionListMessageAttributes@8 ntdll.dll ntdll.dll/ -1 0 51 `
�� L��-� _AlpcGetHeaderSize@4 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L\A�% _AlpcGetMessageAttribute@8 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L���. _AlpcGetMessageFromCompletionList@8 ntdll.dll ntdll.dll/ -1 0 78 `
�� Lgv=�:
_AlpcGetOutstandingCompletionListMessageCount@4 ntdll.dll ntdll.dll/ -1 0 65 `
�� L7���- _AlpcInitializeMessageAttribute@16 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L}�:�) _AlpcMaxAllowedMessageLength@0 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L����)
_AlpcRegisterCompletionList@20 ntdll.dll
ntdll.dll/ -1 0 72 `
�� L�{�4 _AlpcRegisterCompletionListWorkerThread@4 ntdll.dll ntdll.dll/ -1 0 59 `
�� Ln~$�' _AlpcRundownCompletionList@4 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L
�M�* _AlpcUnregisterCompletionList@4 ntdll.dll ntdll.dll/ -1 0 74 `
�� LR�'�6 _AlpcUnregisterCompletionListWorkerThread@4 ntdll.dll ntdll.dll/ -1 0 58 `
�� L��C�& _CsrAllocateCaptureBuffer@8 ntdll.dll ntdll.dll/ -1 0 60 `
�� L�F��( _CsrAllocateMessagePointer@12 ntdll.dll ntdll.dll/ -1 0 58 `
�� LϷ^�& _CsrCaptureMessageBuffer@16 ntdll.dll ntdll.dll/ -1 0 78 `
�� L0��: _CsrCaptureMessageMultiUnicodeStringsInPlace@12 ntdll.dll ntdll.dll/ -1 0 58 `
�� L;�Z�& _CsrCaptureMessageString@20 ntdll.dll ntdll.dll/ -1 0 51 `
�� L��)� _CsrCaptureTimeout@8 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L��4�" _CsrClientCallServer@16 ntdll.dll ntdll.dll/ -1 0 59 `
�� L7J�' _CsrClientConnectToServer@20 ntdll.dll
ntdll.dll/ -1 0 54 `
�� LJ��" _CsrFreeCaptureBuffer@4 ntdll.dll ntdll.dll/ -1 0 49 `
�� L���� _CsrGetProcessId@0 ntdll.dll
ntdll.dll/ -1 0 60 `
�� LvN�( _CsrIdentifyAlertableThread@0 ntdll.dll ntdll.dll/ -1 0 53 `
�� LSH.�! _CsrSetPriorityClass@8 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L1�� _CsrVerifyRegion@8 ntdll.dll
ntdll.dll/ -1 0 47 `
�� Lt/l� ! _DbgBreakPoint@0 ntdll.dll
ntdll.dll/ -1 0 40 `
�� LQ�:� " _DbgPrint ntdll.dll ntdll.dll/ -1 0 42 `
�� L�-�� # _DbgPrintEx ntdll.dll ntdll.dll/ -1 0 54 `
�� L.s��" $ _DbgPrintReturnControlC ntdll.dll ntdll.dll/ -1 0 44 `
�� LŲ� % _DbgPrompt@12 ntdll.dll ntdll.dll/ -1 0 58 `
�� L#�M�& & _DbgQueryDebugFilterState@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� LLx��% ' _DbgSetDebugFilterState@12 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L�I-� ( _DbgUiConnectToDbg@0 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L��� ) _DbgUiContinue@8 ntdll.dll
ntdll.dll/ -1 0 66 `
�� LP)��. * _DbgUiConvertStateChangeStructure@8 ntdll.dll ntdll.dll/ -1 0 68 `
�� L����0 + _DbgUiConvertStateChangeStructureEx@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�G��% , _DbgUiDebugActiveProcess@4 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L6���' - _DbgUiGetThreadDebugObject@0 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L0��% . _DbgUiIssueRemoteBreakin@4 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L *� / _DbgUiRemoteBreakin@4 ntdll.dll ntdll.dll/ -1 0 59 `
�� L*�' 0 _DbgUiSetThreadDebugObject@4 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L�\� 1 _DbgUiStopDebugging@4 ntdll.dll ntdll.dll/ -1 0 54 `
�� L��(�" 2 _DbgUiWaitStateChange@8 ntdll.dll ntdll.dll/ -1 0 51 `
�� L�� 3 _DbgUserBreakPoint@0 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L8�� 4 _EtwCheckCoverage@4 ntdll.dll ntdll.dll/ -1 0 58 `
�� L �0�& 5 _EtwCreateTraceInstanceId@8 ntdll.dll ntdll.dll/ -1 0 53 `
�� LBI �! 6 _EtwDeliverDataBlock@4 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L� ��* 7 _EtwEnumerateProcessRegGuids@12 ntdll.dll ntdll.dll/ -1 0 59 `
�� Le�l�' 8 _EtwEventActivityIdControl@8 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L�٥� 9 _EtwEventEnabled@12 ntdll.dll ntdll.dll/ -1 0 58 `
�� LU9_�& : _EtwEventProviderEnabled@20 ntdll.dll ntdll.dll/ -1 0 51 `
�� L��6� ; _EtwEventRegister@16 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�O5�% < _EtwEventSetInformation@20 ntdll.dll
ntdll.dll/ -1 0 52 `
�� LӇ�� = _EtwEventUnregister@8 ntdll.dll ntdll.dll/ -1 0 48 `
�� L�C�� > _EtwEventWrite@20 ntdll.dll ntdll.dll/ -1 0 59 `
�� L��{�' ? _EtwEventWriteEndScenario@20 ntdll.dll
ntdll.dll/ -1 0 50 `
�� Lf�h� @ _EtwEventWriteEx@40 ntdll.dll ntdll.dll/ -1 0 52 `
�� L��� A _EtwEventWriteFull@32 ntdll.dll ntdll.dll/ -1 0 62 `
�� L�=-�* B _EtwEventWriteNoRegistration@16 ntdll.dll ntdll.dll/ -1 0 61 `
�� L��#�) C _EtwEventWriteStartScenario@20 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�R�" D _EtwEventWriteString@24 ntdll.dll ntdll.dll/ -1 0 56 `
�� L
ڌ�$ E _EtwEventWriteTransfer@28 ntdll.dll ntdll.dll/ -1 0 56 `
�� L��$ F _EtwGetTraceEnableFlags@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� L9��$ G _EtwGetTraceEnableLevel@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� Lm0�% H _EtwGetTraceLoggerHandle@4 ntdll.dll
ntdll.dll/ -1 0 51 `
�� Lv�d� I _EtwLogTraceEvent@12 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L�4��& J _EtwNotificationRegister@20 ntdll.dll ntdll.dll/ -1 0 60 `
�� L�+�( K _EtwNotificationUnregister@12 ntdll.dll ntdll.dll/ -1 0 64 `
�� L����, L _EtwProcessPrivateLoggerRequest@4 ntdll.dll ntdll.dll/ -1 0 61 `
�� L5�3�) M _EtwRegisterSecurityProvider@0 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�d��% N _EtwRegisterTraceGuidsA@32 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L5i�% O _EtwRegisterTraceGuidsW@32 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L �,�" P _EtwReplyNotification@4 ntdll.dll ntdll.dll/ -1 0 54 `
�� L}���" Q _EtwSendNotification@20 ntdll.dll ntdll.dll/ -1 0 56 `
�� L ��$ S _EtwTraceEventInstance@20 ntdll.dll ntdll.dll/ -1 0 47 `
�� L�� T _EtwTraceMessage ntdll.dll
ntdll.dll/ -1 0 52 `
�� L�i� U _EtwTraceMessageVa@24 ntdll.dll ntdll.dll/ -1 0 57 `
�� Lܽ�% V _EtwUnregisterTraceGuids@8 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L�D��& W _EtwWriteUMSecurityEvent@16 ntdll.dll ntdll.dll/ -1 0 53 `
�� L�. �! X _EtwpCreateEtwThread@8 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L��� Y _EtwpGetCpuSpeed@4 ntdll.dll
ntdll.dll/ -1 0 71 `
�� L�.�3 Z _EvtIntReportAuthzEventAndSourceAsync@44 ntdll.dll
ntdll.dll/ -1 0 66 `
�� LNR��. [ _EvtIntReportEventAndSourceAsync@44 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�ha� f _LdrAccessResource@16 ntdll.dll ntdll.dll/ -1 0 52 `
�� LB#� g _LdrAddDllDirectory@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� L$=�$ h _LdrAddLoadAsDataTable@20 ntdll.dll ntdll.dll/ -1 0 46 `
�� Ls�)� i _LdrAddRefDll@8 ntdll.dll ntdll.dll/ -1 0 63 `
�� L�w�+ j _LdrAppxHandleIntegrityFailure@4 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L�l�� k _LdrCallEnclave@12 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L���� m _LdrCreateEnclave@36 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L��� n _LdrDeleteEnclave@4 ntdll.dll ntdll.dll/ -1 0 64 `
�� L?V;�, o _LdrDisableThreadCalloutsForDll@4 ntdll.dll ntdll.dll/ -1 0 51 `
�� Lݦ�� p _LdrEnumResources@20 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L.g��( q _LdrEnumerateLoadedModules@12 ntdll.dll ntdll.dll/ -1 0 60 `
�� L$���( r _LdrFastFailInLoaderCallout@0 ntdll.dll ntdll.dll/ -1 0 56 `
�� L��E�$ s _LdrFindEntryForAddress@8 ntdll.dll ntdll.dll/ -1 0 61 `
�� LJ�*�) t _LdrFindResourceDirectory_U@16 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�q��" u _LdrFindResourceEx_U@20 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�0�� v _LdrFindResource_U@16 ntdll.dll ntdll.dll/ -1 0 66 `
�� L��1�. w _LdrFlushAlternateResourceModules@0 ntdll.dll ntdll.dll/ -1 0 52 `
�� L��� x _LdrGetDllDirectory@4 ntdll.dll ntdll.dll/ -1 0 51 `
�� L �� y _LdrGetDllFullName@8 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L�m�� z _LdrGetDllHandle@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� L@�& { _LdrGetDllHandleByMapping@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� L �~�$ | _LdrGetDllHandleByName@12 ntdll.dll ntdll.dll/ -1 0 52 `
�� L���� } _LdrGetDllHandleEx@20 ntdll.dll ntdll.dll/ -1 0 48 `
�� Lv`�� ~ _LdrGetDllPath@16 ntdll.dll ntdll.dll/ -1 0 67 `
�� L�W/�/ � _LdrGetFileNameFromLoadAsDataTable@8 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L]� �% � _LdrGetProcedureAddress@16 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L��w�' � _LdrGetProcedureAddressEx@20 ntdll.dll
ntdll.dll/ -1 0 66 `
�� LB8��. � _LdrGetProcedureAddressForCaller@24 ntdll.dll ntdll.dll/ -1 0 58 `
�� LO ,�& � _LdrInitShimEngineDynamic@8 ntdll.dll ntdll.dll/ -1 0 55 `
�� L�i��# � _LdrInitializeEnclave@20 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L����& � _LdrIsModuleSxsRedirected@4 ntdll.dll ntdll.dll/ -1 0 65 `
�� L�ُ�- � _LdrLoadAlternateResourceModule@16 ntdll.dll
ntdll.dll/ -1 0 67 `
�� Lf ~�/ � _LdrLoadAlternateResourceModuleEx@20 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L�a�� � _LdrLoadDll@16 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L+>�# � _LdrLoadEnclaveModule@12 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L��
� � _LdrLockLoaderLock@12 ntdll.dll ntdll.dll/ -1 0 61 `
�� L6���) � _LdrOpenImageFileOptionsKey@12 ntdll.dll
ntdll.dll/ -1 0 65 `
�� LT���- �
_LdrParentInterlockedPopEntrySList ntdll.dll
ntdll.dll/ -1 0 63 `
�� LFz��+ �
_LdrParentRtlInitializeNtUserPfn ntdll.dll
ntdll.dll/ -1 0 58 `
�� L{H��& �
_LdrParentRtlResetNtUserPfn ntdll.dll ntdll.dll/ -1 0 61 `
�� LЃy�) �
_LdrParentRtlRetrieveNtUserPfn ntdll.dll
ntdll.dll/ -1 0 60 `
�� L37J�( � _LdrProcessRelocationBlock@16 ntdll.dll ntdll.dll/ -1 0 62 `
�� L��U�* � _LdrProcessRelocationBlockEx@20 ntdll.dll ntdll.dll/ -1 0 68 `
�� LXCe�0 � _LdrQueryImageFileExecutionOptions@24 ntdll.dll ntdll.dll/ -1 0 70 `
�� Ll� �2 � _LdrQueryImageFileExecutionOptionsEx@28 ntdll.dll ntdll.dll/ -1 0 61 `
�� Ln>�) � _LdrQueryImageFileKeyOption@24 ntdll.dll
ntdll.dll/ -1 0 60 `
�� LW�=�( � _LdrQueryModuleServiceTags@12 ntdll.dll ntdll.dll/ -1 0 65 `
�� L���- � _LdrQueryOptionalDelayLoadedAPI@16 ntdll.dll
ntdll.dll/ -1 0 67 `
�� L�0��/ � _LdrQueryProcessModuleInformation@12 ntdll.dll
ntdll.dll/ -1 0 55 `
�� Lg�6�# � _LdrRemoveDllDirectory@4 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L*��' � _LdrRemoveLoadAsDataTable@16 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L,�! � _LdrResFindResource@36 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L?ɺ�* � _LdrResFindResourceDirectory@28 ntdll.dll ntdll.dll/ -1 0 48 `
�� L��T� � _LdrResRelease@12 ntdll.dll ntdll.dll/ -1 0 55 `
�� L���# � _LdrResSearchResource@32 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L�,�' � _LdrResolveDelayLoadedAPI@24 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L���* � _LdrResolveDelayLoadsFromDll@12 ntdll.dll ntdll.dll/ -1 0 72 `
�� L�5�4 � _LdrSetAppCompatDllRedirectionCallback@12 ntdll.dll ntdll.dll/ -1 0 61 `
�� L����) � _LdrSetDefaultDllDirectories@4 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L��� � _LdrSetDllDirectory@4 ntdll.dll ntdll.dll/ -1 0 58 `
�� L���& � _LdrSetDllManifestProber@12 ntdll.dll ntdll.dll/ -1 0 52 `
�� L��� � _LdrSetMUICacheType@4 ntdll.dll ntdll.dll/ -1 0 52 `
�� L$��� � _LdrShutdownProcess@0 ntdll.dll ntdll.dll/ -1 0 51 `
�� Lzy�� � _LdrShutdownThread@0 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L#�! � _LdrSystemDllInitBlock ntdll.dll
ntdll.dll/ -1 0 66 `
�� L5^��. � _LdrUnloadAlternateResourceModule@4 ntdll.dll ntdll.dll/ -1 0 68 `
�� L����0 � _LdrUnloadAlternateResourceModuleEx@8 ntdll.dll ntdll.dll/ -1 0 46 `
�� L(��� � _LdrUnloadDll@4 ntdll.dll ntdll.dll/ -1 0 53 `
�� L9L�! � _LdrUnlockLoaderLock@8 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L {0�( � _LdrUpdatePackageSearchPath@4 ntdll.dll ntdll.dll/ -1 0 64 `
�� Lԕ��, � _LdrVerifyImageMatchesChecksum@16 ntdll.dll ntdll.dll/ -1 0 65 `
�� L��Z�- � _LdrVerifyImageMatchesChecksumEx@8 ntdll.dll
ntdll.dll/ -1 0 46 `
�� LU�� �
_LdrpChildNtdll ntdll.dll ntdll.dll/ -1 0 56 `
�� Lb��$ � _LdrpResGetMappingSize@16 ntdll.dll ntdll.dll/ -1 0 62 `
�� Lw���* � _LdrpResGetResourceDirectory@20 ntdll.dll ntdll.dll/ -1 0 47 `
�� L��K� �
_NlsAnsiCodePage ntdll.dll
ntdll.dll/ -1 0 48 `
�� L��2� �
_NlsMbCodePageTag ntdll.dll ntdll.dll/ -1 0 51 `
�� L��� �
_NlsMbOemCodePageTag ntdll.dll
ntdll.dll/ -1 0 54 `
�� Lv���" � _NtAcceptConnectPort@24 ntdll.dll ntdll.dll/ -1 0 48 `
�� L~GZ� � _NtAccessCheck@32 ntdll.dll ntdll.dll/ -1 0 61 `
�� L╹�) � _NtAccessCheckAndAuditAlarm@44 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L��" � _NtAccessCheckByType@44 ntdll.dll ntdll.dll/ -1 0 67 `
�� L����/ � _NtAccessCheckByTypeAndAuditAlarm@64 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L�V��, � _NtAccessCheckByTypeResultList@44 ntdll.dll ntdll.dll/ -1 0 77 `
�� Liz<�9 � _NtAccessCheckByTypeResultListAndAuditAlarm@64 ntdll.dll
ntdll.dll/ -1 0 85 `
�� L$tl�A � _NtAccessCheckByTypeResultListAndAuditAlarmByHandle@68 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L�1��$ � _NtAcquireCrossVmMutant@8 ntdll.dll ntdll.dll/ -1 0 68 `
�� L�[��0 � _NtAcquireProcessActivityReference@12 ntdll.dll ntdll.dll/ -1 0 44 `
�� L=ٞ� � _NtAddAtom@12 ntdll.dll ntdll.dll/ -1 0 46 `
�� Ls�� � _NtAddAtomEx@16 ntdll.dll ntdll.dll/ -1 0 48 `
�� L-Y�� � _NtAddBootEntry@8 ntdll.dll ntdll.dll/ -1 0 50 `
�� L �\� � _NtAddDriverEntry@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�p�" � _NtAdjustGroupsToken@24 ntdll.dll ntdll.dll/ -1 0 58 `
�� Ldp�& � _NtAdjustPrivilegesToken@24 ntdll.dll ntdll.dll/ -1 0 69 `
�� L�M�1 � _NtAdjustTokenClaimsAndDeviceGroups@64 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L�7)�! � _NtAlertResumeThread@8 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L��T� � _NtAlertThread@4 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L+4x�% � _NtAlertThreadByThreadId@4 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L����' � _NtAllocateLocallyUniqueId@4 ntdll.dll
ntdll.dll/ -1 0 58 `
�� Lf�w�& � _NtAllocateReserveObject@12 ntdll.dll ntdll.dll/ -1 0 62 `
�� L�q��* � _NtAllocateUserPhysicalPages@12 ntdll.dll ntdll.dll/ -1 0 64 `
�� Ld���, � _NtAllocateUserPhysicalPagesEx@20 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�� � _NtAllocateUuids@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� L��& � _NtAllocateVirtualMemory@24 ntdll.dll ntdll.dll/ -1 0 60 `
�� Ln���( � _NtAllocateVirtualMemoryEx@28 ntdll.dll ntdll.dll/ -1 0 58 `
�� Lɖ8�& � _NtAlpcAcceptConnectPort@36 ntdll.dll ntdll.dll/ -1 0 54 `
�� LT���" � _NtAlpcCancelMessage@12 ntdll.dll ntdll.dll/ -1 0 52 `
�� L��N� � _NtAlpcConnectPort@44 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�
�" � _NtAlpcConnectPortEx@44 ntdll.dll ntdll.dll/ -1 0 51 `
�� L�� � _NtAlpcCreatePort@12 ntdll.dll
ntdll.dll/ -1 0 58 `
�� Lt!]�& � _NtAlpcCreatePortSection@24 ntdll.dll ntdll.dll/ -1 0 62 `
�� Ly��* � _NtAlpcCreateResourceReserve@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� L���& � _NtAlpcCreateSectionView@12 ntdll.dll ntdll.dll/ -1 0 62 `
�� L�BR�* � _NtAlpcCreateSecurityContext@12 ntdll.dll ntdll.dll/ -1 0 58 `
�� L��9�& � _NtAlpcDeletePortSection@12 ntdll.dll ntdll.dll/ -1 0 62 `
�� L�9��* � _NtAlpcDeleteResourceReserve@12 ntdll.dll ntdll.dll/ -1 0 58 `
�� Lq���& � _NtAlpcDeleteSectionView@12 ntdll.dll ntdll.dll/ -1 0 62 `
�� L�Zo�* � _NtAlpcDeleteSecurityContext@12 ntdll.dll ntdll.dll/ -1 0 54 `
�� LF-��" � _NtAlpcDisconnectPort@8 ntdll.dll ntdll.dll/ -1 0 73 `
�� LezB�5 � _NtAlpcImpersonateClientContainerOfPort@12 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L7�-�, � _NtAlpcImpersonateClientOfPort@12 ntdll.dll ntdll.dll/ -1 0 58 `
�� L [+�& � _NtAlpcOpenSenderProcess@24 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�A+�% � _NtAlpcOpenSenderThread@24 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�t�% � _NtAlpcQueryInformation@20 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L�
��, � _NtAlpcQueryInformationMessage@24 ntdll.dll ntdll.dll/ -1 0 62 `
�� L�a/�* � _NtAlpcRevokeSecurityContext@12 ntdll.dll ntdll.dll/ -1 0 60 `
�� L����( � _NtAlpcSendWaitReceivePort@32 ntdll.dll ntdll.dll/ -1 0 55 `
�� L`���# � _NtAlpcSetInformation@16 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L��R�# � _NtApphelpCacheControl@8 ntdll.dll
ntdll.dll/ -1 0 57 `
�� LC��% � _NtAreMappedFilesTheSame@8 ntdll.dll
ntdll.dll/ -1 0 60 `
�� LZ��( � _NtAssignProcessToJobObject@8 ntdll.dll ntdll.dll/ -1 0 66 `
�� LjO��. � _NtAssociateWaitCompletionPacket@32 ntdll.dll ntdll.dll/ -1 0 48 `
�� L� � � _NtCallEnclave@16 ntdll.dll ntdll.dll/ -1 0 51 `
�� L[��� � _NtCallbackReturn@12 ntdll.dll
ntdll.dll/ -1 0 48 `
�� LF�|� � _NtCancelIoFile@8 ntdll.dll ntdll.dll/ -1 0 51 `
�� L��� � _NtCancelIoFileEx@12 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L�ߏ�( � _NtCancelSynchronousIoFile@12 ntdll.dll ntdll.dll/ -1 0 48 `
�� L ��� � _NtCancelTimer2@8 ntdll.dll ntdll.dll/ -1 0 47 `
�� L���� � _NtCancelTimer@8 ntdll.dll
ntdll.dll/ -1 0 62 `
�� Lp 1�* _NtCancelWaitCompletionPacket@8 ntdll.dll ntdll.dll/ -1 0 46 `
�� L�� _NtClearEvent@4 ntdll.dll ntdll.dll/ -1 0 41 `
�� L��� _NtClose@4 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L��& _NtCloseObjectAuditAlarm@12 ntdll.dll ntdll.dll/ -1 0 50 `
�� L3ƍ� _NtCommitComplete@8 ntdll.dll ntdll.dll/ -1 0 52 `
�� Lmp� _NtCommitEnlistment@8 ntdll.dll ntdll.dll/ -1 0 61 `
�� L�>��) _NtCommitRegistryTransaction@8 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L�O�! _NtCommitTransaction@8 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L�� _NtCompactKeys@8 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L d� _NtCompareObjects@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� L��(�$
_NtCompareSigningLevels@8 ntdll.dll ntdll.dll/ -1 0 50 `
�� L �<� _NtCompareTokens@12 ntdll.dll ntdll.dll/ -1 0 55 `
�� LLl��# _NtCompleteConnectPort@4 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L��J�
_NtCompressKey@4 ntdll.dll
ntdll.dll/ -1 0 48 `
�� LW��� _NtConnectPort@32 ntdll.dll ntdll.dll/ -1 0 44 `
�� LE| � _NtContinue@8 ntdll.dll ntdll.dll/ -1 0 46 `
�� L�)�� _NtContinueEx@8 ntdll.dll ntdll.dll/ -1 0 88 `
�� L�r��D _NtConvertBetweenAuxiliaryCounterAndPerformanceCounter@16 ntdll.dll ntdll.dll/ -1 0 55 `
�� L�.��# _NtCreateCrossVmEvent@24 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L���$ _NtCreateCrossVmMutant@24 ntdll.dll ntdll.dll/ -1 0 54 `
�� L���" _NtCreateDebugObject@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�Q��& _NtCreateDirectoryObject@12 ntdll.dll ntdll.dll/ -1 0 60 `
�� L���( _NtCreateDirectoryObjectEx@20 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�r~� _NtCreateEnclave@36 ntdll.dll ntdll.dll/ -1 0 53 `
�� L*�>�! _NtCreateEnlistment@32 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L�S'� _NtCreateEvent@20 ntdll.dll ntdll.dll/ -1 0 52 `
�� L��� _NtCreateEventPair@12 ntdll.dll ntdll.dll/ -1 0 47 `
�� L':5� _NtCreateFile@44 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L'�� _NtCreateIRTimer@12 ntdll.dll ntdll.dll/ -1 0 55 `
�� L���# _NtCreateIoCompletion@16 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L�'�� _NtCreateJobObject@12 ntdll.dll ntdll.dll/ -1 0 49 `
�� La}�� _NtCreateJobSet@12 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L;~� _NtCreateKey@28 ntdll.dll ntdll.dll/ -1 0 56 `
�� LW��$ ! _NtCreateKeyTransacted@32 ntdll.dll ntdll.dll/ -1 0 53 `
�� L�[,�! " _NtCreateKeyedEvent@16 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�"��" # _NtCreateLowBoxToken@36 ntdll.dll ntdll.dll/ -1 0 55 `
�� LE�`�# $ _NtCreateMailslotFile@32 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L�+�� % _NtCreateMutant@16 ntdll.dll
ntdll.dll/ -1 0 56 `
�� LL��$ & _NtCreateNamedPipeFile@56 ntdll.dll ntdll.dll/ -1 0 53 `
�� L�.;�! ' _NtCreatePagingFile@16 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L�T� ( _NtCreatePartition@16 ntdll.dll ntdll.dll/ -1 0 47 `
�� Lr,+� ) _NtCreatePort@20 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L����' * _NtCreatePrivateNamespace@16 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L���� + _NtCreateProcess@32 ntdll.dll ntdll.dll/ -1 0 52 `
�� L6Z�� , _NtCreateProcessEx@36 ntdll.dll ntdll.dll/ -1 0 50 `
�� L��� - _NtCreateProfile@36 ntdll.dll ntdll.dll/ -1 0 52 `
�� L��� . _NtCreateProfileEx@40 ntdll.dll ntdll.dll/ -1 0 62 `
�� LC@J�* / _NtCreateRegistryTransaction@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�(��& 0 _NtCreateResourceManager@28 ntdll.dll ntdll.dll/ -1 0 50 `
�� LI�T� 1 _NtCreateSection@28 ntdll.dll ntdll.dll/ -1 0 52 `
�� L" � 2 _NtCreateSectionEx@36 ntdll.dll ntdll.dll/ -1 0 52 `
�� L ��� 3 _NtCreateSemaphore@20 ntdll.dll ntdll.dll/ -1 0 61 `
�� LyE��) 4 _NtCreateSymbolicLinkObject@16 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L� �� 5 _NtCreateThread@32 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L q� 6 _NtCreateThreadEx@44 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L߯� 8 _NtCreateTimer2@20 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L� h� 7 _NtCreateTimer@16 ntdll.dll ntdll.dll/ -1 0 48 `
�� Lz�� 9 _NtCreateToken@52 ntdll.dll ntdll.dll/ -1 0 50 `
�� L?+X� : _NtCreateTokenEx@68 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�&�" ; _NtCreateTransaction@40 ntdll.dll ntdll.dll/ -1 0 61 `
�� L����) < _NtCreateTransactionManager@24 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L����" = _NtCreateUserProcess@44 ntdll.dll ntdll.dll/ -1 0 63 `
�� L���+ > _NtCreateWaitCompletionPacket@12 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L���# ? _NtCreateWaitablePort@20 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L�,��# @ _NtCreateWnfStateName@28 ntdll.dll
ntdll.dll/ -1 0 56 `
�� LOc��$ A _NtCreateWorkerFactory@40 ntdll.dll ntdll.dll/ -1 0 46 `
�� L���� B _NtCurrentTeb@0 ntdll.dll ntdll.dll/ -1 0 54 `
�� L
=n�" C _NtDebugActiveProcess@8 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�S[� D _NtDebugContinue@12 ntdll.dll ntdll.dll/ -1 0 50 `
�� L1�� E _NtDelayExecution@8 ntdll.dll ntdll.dll/ -1 0 46 `
�� L�5� F _NtDeleteAtom@4 ntdll.dll ntdll.dll/ -1 0 51 `
�� L��7� G _NtDeleteBootEntry@4 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L����! H _NtDeleteDriverEntry@4 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L)�b� I _NtDeleteFile@4 ntdll.dll ntdll.dll/ -1 0 45 `
�� Lv��� J _NtDeleteKey@4 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L�υ�' K _NtDeleteObjectAuditAlarm@12 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L�!��& L _NtDeletePrivateNamespace@4 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�;/� M _NtDeleteValueKey@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� L8�6�" N _NtDeleteWnfStateData@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� L��S�" O _NtDeleteWnfStateName@4 ntdll.dll ntdll.dll/ -1 0 56 `
�� L '�$ P _NtDeviceIoControlFile@40 ntdll.dll ntdll.dll/ -1 0 55 `
�� L5��# Q _NtDirectGraphicsCall@20 ntdll.dll
ntdll.dll/ -1 0 56 `
�� LJ���$ R _NtDisableLastKnownGood@0 ntdll.dll ntdll.dll/ -1 0 49 `
�� LK�B� S _NtDisplayString@4 ntdll.dll
ntdll.dll/ -1 0 44 `
�� L�J� T _NtDrawText@4 ntdll.dll ntdll.dll/ -1 0 52 `
�� L��� U _NtDuplicateObject@28 ntdll.dll ntdll.dll/ -1 0 51 `
�� Lx�q� V _NtDuplicateToken@24 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L���# W _NtEnableLastKnownGood@0 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L����$ X _NtEnumerateBootEntries@8 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�;}�& Y _NtEnumerateDriverEntries@8 ntdll.dll ntdll.dll/ -1 0 49 `
�� L��� Z _NtEnumerateKey@24 ntdll.dll
ntdll.dll/ -1 0 71 `
�� L�n��3 [ _NtEnumerateSystemEnvironmentValuesEx@12 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L���+ \ _NtEnumerateTransactionObject@20 ntdll.dll
ntdll.dll/ -1 0 54 `
�� LN3F�" ] _NtEnumerateValueKey@24 ntdll.dll ntdll.dll/ -1 0 49 `
�� Lwp�� ^ _NtExtendSection@8 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L� F�! _ _NtFilterBootOption@20 ntdll.dll
ntdll.dll/ -1 0 48 `
�� Lڗ1� ` _NtFilterToken@24 ntdll.dll ntdll.dll/ -1 0 50 `
�� Lt�+� a _NtFilterTokenEx@56 ntdll.dll ntdll.dll/ -1 0 45 `
�� L|��� b _NtFindAtom@12 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L��� c _NtFlushBuffersFile@8 ntdll.dll ntdll.dll/ -1 0 55 `
�� L#{\�# d _NtFlushBuffersFileEx@20 ntdll.dll
ntdll.dll/ -1 0 58 `
�� Llu�& e _NtFlushInstallUILanguage@8 ntdll.dll ntdll.dll/ -1 0 58 `
�� L���& f _NtFlushInstructionCache@12 ntdll.dll ntdll.dll/ -1 0 44 `
�� Lijv� g _NtFlushKey@4 ntdll.dll ntdll.dll/ -1 0 60 `
�� Lu�Q�( h _NtFlushProcessWriteBuffers@0 ntdll.dll ntdll.dll/ -1 0 55 `
�� L����# i _NtFlushVirtualMemory@16 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L�$.� j _NtFlushWriteBuffer@0 ntdll.dll ntdll.dll/ -1 0 58 `
�� L2���& k _NtFreeUserPhysicalPages@12 ntdll.dll ntdll.dll/ -1 0 54 `
�� L��V�" l _NtFreeVirtualMemory@16 ntdll.dll ntdll.dll/ -1 0 50 `
�� L��� m _NtFreezeRegistry@4 ntdll.dll ntdll.dll/ -1 0 54 `
�� L �K�" n _NtFreezeTransactions@8 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�l� o _NtFsControlFile@40 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�"��& p _NtGetCachedSigningLevel@24 ntdll.dll ntdll.dll/ -1 0 68 `
�� L)�0 q _NtGetCompleteWnfStateSubscription@24 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�w[� r _NtGetContextThread@8 ntdll.dll ntdll.dll/ -1 0 61 `
�� L�jT�) s _NtGetCurrentProcessorNumber@0 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L:�s�+ t _NtGetCurrentProcessorNumberEx@4 ntdll.dll
ntdll.dll/ -1 0 55 `
�� Lm��# u _NtGetDevicePowerState@8 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L���# v _NtGetMUIRegistryInfo@12 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L8({� w _NtGetNextProcess@20 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L�8�� x _NtGetNextThread@24 ntdll.dll ntdll.dll/ -1 0 53 `
�� L�E1�! y _NtGetNlsSectionPtr@20 ntdll.dll
ntdll.dll/ -1 0 67 `
�� L��(�/ z _NtGetNotificationResourceManager@28 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L��?� { _NtGetTickCount@0 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�-%� | _NtGetWriteWatch@28 ntdll.dll ntdll.dll/ -1 0 61 `
�� L�t�) } _NtImpersonateAnonymousToken@4 ntdll.dll
ntdll.dll/ -1 0 59 `
�� LE>�' ~ _NtImpersonateClientOfPort@8 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L ���" _NtImpersonateThread@12 ntdll.dll ntdll.dll/ -1 0 54 `
�� L L��" � _NtInitializeEnclave@20 ntdll.dll ntdll.dll/ -1 0 55 `
�� L4OQ�# � _NtInitializeNlsFiles@12 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L���" � _NtInitializeRegistry@4 ntdll.dll ntdll.dll/ -1 0 56 `
�� L�#��$ � _NtInitiatePowerAction@16 ntdll.dll ntdll.dll/ -1 0 50 `
�� Lit�� � _NtIsProcessInJob@8 ntdll.dll ntdll.dll/ -1 0 59 `
�� Lqi�' � _NtIsSystemResumeAutomatic@0 ntdll.dll
ntdll.dll/ -1 0 56 `
�� LmM�$ � _NtIsUILanguageComitted@0 ntdll.dll ntdll.dll/ -1 0 46 `
�� L�� � _NtListenPort@8 ntdll.dll ntdll.dll/ -1 0 46 `
�� LP<� � _NtLoadDriver@4 ntdll.dll ntdll.dll/ -1 0 52 `
�� Laƪ� � _NtLoadEnclaveData@36 ntdll.dll ntdll.dll/ -1 0 45 `
�� L,�P� � _NtLoadKey2@12 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L)%A� � _NtLoadKey3@32 ntdll.dll
ntdll.dll/ -1 0 43 `
�� L�k� � _NtLoadKey@8 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L���� � _NtLoadKeyEx@32 ntdll.dll ntdll.dll/ -1 0 45 `
�� L���� � _NtLockFile@40 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L� 4�) � _NtLockProductActivationKeys@8 ntdll.dll
ntdll.dll/ -1 0 51 `
�� Lӭ�� � _NtLockRegistryKey@4 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L8���" � _NtLockVirtualMemory@16 ntdll.dll ntdll.dll/ -1 0 55 `
�� L v�# � _NtMakePermanentObject@4 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L����# � _NtMakeTemporaryObject@4 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L���� � _NtManageHotPatch@16 ntdll.dll
ntdll.dll/ -1 0 52 `
�� LW�>� � _NtManagePartition@20 ntdll.dll ntdll.dll/ -1 0 49 `
�� L!/� � _NtMapCMFModule@24 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�E�% � _NtMapUserPhysicalPages@12 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L!�*�, � _NtMapUserPhysicalPagesScatter@12 ntdll.dll ntdll.dll/ -1 0 53 `
�� Lo��! � _NtMapViewOfSection@40 ntdll.dll
ntdll.dll/ -1 0 55 `
�� LU�F�# � _NtMapViewOfSectionEx@36 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L��*� � _NtModifyBootEntry@4 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L�k�! � _NtModifyDriverEntry@4 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L����* � _NtNotifyChangeDirectoryFile@36 ntdll.dll ntdll.dll/ -1 0 64 `
�� L���, � _NtNotifyChangeDirectoryFileEx@40 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�"�� � _NtNotifyChangeKey@40 ntdll.dll ntdll.dll/ -1 0 61 `
�� L �q�) � _NtNotifyChangeMultipleKeys@48 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L����$ � _NtNotifyChangeSession@32 ntdll.dll ntdll.dll/ -1 0 56 `
�� LX�(�$ � _NtOpenDirectoryObject@12 ntdll.dll ntdll.dll/ -1 0 51 `
�� L;7V� � _NtOpenEnlistment@20 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L� � � _NtOpenEvent@12 ntdll.dll ntdll.dll/ -1 0 50 `
�� L��� � _NtOpenEventPair@12 ntdll.dll ntdll.dll/ -1 0 45 `
�� Ln�Y� � _NtOpenFile@24 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L?���! � _NtOpenIoCompletion@12 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L��� � _NtOpenJobObject@12 ntdll.dll ntdll.dll/ -1 0 44 `
�� LMO� � _NtOpenKey@12 ntdll.dll ntdll.dll/ -1 0 46 `
�� LU�/� � _NtOpenKeyEx@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� L��" � _NtOpenKeyTransacted@16 ntdll.dll ntdll.dll/ -1 0 56 `
�� L۱��$ � _NtOpenKeyTransactedEx@20 ntdll.dll ntdll.dll/ -1 0 51 `
�� L��o� � _NtOpenKeyedEvent@12 ntdll.dll
ntdll.dll/ -1 0 47 `
�� Ljm�� � _NtOpenMutant@12 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L��m�% � _NtOpenObjectAuditAlarm@48 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L�]�� � _NtOpenPartition@12 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�[��% � _NtOpenPrivateNamespace@16 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L���� � _NtOpenProcess@16 ntdll.dll ntdll.dll/ -1 0 53 `
�� LM�`�! � _NtOpenProcessToken@12 ntdll.dll
ntdll.dll/ -1 0 55 `
�� LG���# � _NtOpenProcessTokenEx@16 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L��)�( � _NtOpenRegistryTransaction@12 ntdll.dll ntdll.dll/ -1 0 56 `
�� L���$ � _NtOpenResourceManager@20 ntdll.dll ntdll.dll/ -1 0 48 `
�� Lt0� � _NtOpenSection@12 ntdll.dll ntdll.dll/ -1 0 50 `
�� LmUs� � _NtOpenSemaphore@12 ntdll.dll ntdll.dll/ -1 0 48 `
�� Ll��� � _NtOpenSession@12 ntdll.dll ntdll.dll/ -1 0 59 `
�� L�i�' � _NtOpenSymbolicLinkObject@12 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L� k� � _NtOpenThread@16 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L+]s� � _NtOpenThreadToken@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� L���" � _NtOpenThreadTokenEx@20 ntdll.dll ntdll.dll/ -1 0 46 `
�� L�8;� � _NtOpenTimer@12 ntdll.dll ntdll.dll/ -1 0 52 `
�� L?��� � _NtOpenTransaction@20 ntdll.dll ntdll.dll/ -1 0 59 `
�� L�H��' � _NtOpenTransactionManager@24 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L��� � _NtPlugPlayControl@12 ntdll.dll ntdll.dll/ -1 0 53 `
�� L/�! � _NtPowerInformation@20 ntdll.dll
ntdll.dll/ -1 0 54 `
�� LU,��" � _NtPrePrepareComplete@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� LF��$ � _NtPrePrepareEnlistment@8 ntdll.dll ntdll.dll/ -1 0 51 `
�� L��� � _NtPrepareComplete@8 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L �Z�! � _NtPrepareEnlistment@8 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L�]T� � _NtPrivilegeCheck@12 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L�D��* � _NtPrivilegeObjectAuditAlarm@24 ntdll.dll ntdll.dll/ -1 0 64 `
�� Lk��, � _NtPrivilegedServiceAuditAlarm@20 ntdll.dll ntdll.dll/ -1 0 56 `
�� LԤ%�$ � _NtPropagationComplete@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� L��4�" � _NtPropagationFailed@12 ntdll.dll ntdll.dll/ -1 0 57 `
�� L��% � _NtProtectVirtualMemory@20 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L����& � _NtPssCaptureVaSpaceBulk@20 ntdll.dll ntdll.dll/ -1 0 46 `
�� L�L�� � _NtPulseEvent@8 ntdll.dll ntdll.dll/ -1 0 55 `
�� LW�~�# � _NtQueryAttributesFile@8 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L@�;�. � _NtQueryAuxiliaryCounterFrequency@4 ntdll.dll ntdll.dll/ -1 0 55 `
�� L��/�# � _NtQueryBootEntryOrder@8 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L�pF� � _NtQueryBootOptions@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� L-�% � _NtQueryDebugFilterState@8 ntdll.dll
ntdll.dll/ -1 0 54 `
�� LM}��" � _NtQueryDefaultLocale@8 ntdll.dll ntdll.dll/ -1 0 58 `
�� L ��& � _NtQueryDefaultUILanguage@4 ntdll.dll ntdll.dll/ -1 0 55 `
�� L����# � _NtQueryDirectoryFile@44 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L��p�% � _NtQueryDirectoryFileEx@40 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L �j�% � _NtQueryDirectoryObject@28 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�2�% � _NtQueryDriverEntryOrder@8 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L y�� � _NtQueryEaFile@36 ntdll.dll ntdll.dll/ -1 0 47 `
�� L��� � _NtQueryEvent@20 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L+��' � _NtQueryFullAttributesFile@8 ntdll.dll
ntdll.dll/ -1 0 57 `
�� LQ3��% � _NtQueryInformationAtom@20 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L
,��' � _NtQueryInformationByName@20 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L7N5�+ � _NtQueryInformationEnlistment@20 ntdll.dll
ntdll.dll/ -1 0 57 `
�� Lk���% � _NtQueryInformationFile@20 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L�;)�* � _NtQueryInformationJobObject@20 ntdll.dll ntdll.dll/ -1 0 57 `
�� LA���% � _NtQueryInformationPort@20 ntdll.dll
ntdll.dll/ -1 0 60 `
�� LYQ+�( � _NtQueryInformationProcess@20 ntdll.dll ntdll.dll/ -1 0 68 `
�� L�� �0 � _NtQueryInformationResourceManager@20 ntdll.dll ntdll.dll/ -1 0 59 `
�� L[�:�' � _NtQueryInformationThread@20 ntdll.dll
ntdll.dll/ -1 0 58 `
�� Lq�m�& � _NtQueryInformationToken@20 ntdll.dll ntdll.dll/ -1 0 64 `
�� LG��, � _NtQueryInformationTransaction@20 ntdll.dll ntdll.dll/ -1 0 71 `
�� LJ���3 � _NtQueryInformationTransactionManager@20 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L�/��. � _NtQueryInformationWorkerFactory@20 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�&��& � _NtQueryInstallUILanguage@4 ntdll.dll ntdll.dll/ -1 0 56 `
�� L �h�$ � _NtQueryIntervalProfile@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� Lku�" � _NtQueryIoCompletion@20 ntdll.dll ntdll.dll/ -1 0 45 `
�� L1�f� � _NtQueryKey@20 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L��#�" � _NtQueryLicenseValue@20 ntdll.dll ntdll.dll/ -1 0 58 `
�� LXk_�& � _NtQueryMultipleValueKey@24 ntdll.dll ntdll.dll/ -1 0 48 `
�� L]�>� � _NtQueryMutant@20 ntdll.dll ntdll.dll/ -1 0 48 `
�� L� 4� � _NtQueryObject@20 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�5� � _NtQueryOpenSubKeys@8 ntdll.dll ntdll.dll/ -1 0 55 `
�� Lӆ��# � _NtQueryOpenSubKeysEx@16 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L���' � _NtQueryPerformanceCounter@8 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L|4Q�+ � _NtQueryPortInformationProcess@0 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L'Մ�* � _NtQueryQuotaInformationFile@36 ntdll.dll ntdll.dll/ -1 0 49 `
�� L'��� � _NtQuerySection@20 ntdll.dll
ntdll.dll/ -1 0 65 `
�� Lf7�- � _NtQuerySecurityAttributesToken@24 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L����$ � _NtQuerySecurityObject@20 ntdll.dll ntdll.dll/ -1 0 56 `
�� L�g��$ � _NtQuerySecurityPolicy@24 ntdll.dll ntdll.dll/ -1 0 51 `
�� LD��� � _NtQuerySemaphore@20 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L�k��( � _NtQuerySymbolicLinkObject@12 ntdll.dll ntdll.dll/ -1 0 64 `
�� Ls�T�, � _NtQuerySystemEnvironmentValue@16 ntdll.dll ntdll.dll/ -1 0 66 `
�� L�T&�. � _NtQuerySystemEnvironmentValueEx@20 ntdll.dll ntdll.dll/ -1 0 59 `
�� L=n��' � _NtQuerySystemInformation@16 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L�{"�) _NtQuerySystemInformationEx@24 ntdll.dll
ntdll.dll/ -1 0 51 `
�� LJ�� _NtQuerySystemTime@4 ntdll.dll
ntdll.dll/ -1 0 47 `
�� Ljm.� _NtQueryTimer@20 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L���% _NtQueryTimerResolution@12 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L2��� _NtQueryValueKey@24 ntdll.dll ntdll.dll/ -1 0 55 `
�� L����# _NtQueryVirtualMemory@24 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L(={�+ _NtQueryVolumeInformationFile@20 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L���" _NtQueryWnfStateData@24 ntdll.dll ntdll.dll/ -1 0 65 `
�� L�G�- _NtQueryWnfStateNameInformation@20 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L���� _NtQueueApcThread@20 ntdll.dll
ntdll.dll/ -1 0 53 `
�� Lӊ��!
_NtQueueApcThreadEx@24 ntdll.dll
ntdll.dll/ -1 0 51 `
�� LF�� _NtRaiseException@12 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L��� _NtRaiseHardError@24 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L�4�
_NtReadFile@36 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L��� _NtReadFileScatter@36 ntdll.dll ntdll.dll/ -1 0 54 `
�� L ��" _NtReadOnlyEnlistment@8 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�8�� _NtReadRequestData@24 ntdll.dll ntdll.dll/ -1 0 54 `
�� L͑5�" _NtReadVirtualMemory@20 ntdll.dll ntdll.dll/ -1 0 53 `
�� L�QE�! _NtRecoverEnlistment@8 ntdll.dll
ntdll.dll/ -1 0 58 `
�� Lx��& _NtRecoverResourceManager@4 ntdll.dll ntdll.dll/ -1 0 61 `
�� Li���) _NtRecoverTransactionManager@4 ntdll.dll
ntdll.dll/ -1 0 71 `
�� LWYt�3 _NtRegisterProtocolAddressInformation@20 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L�h5�+ _NtRegisterThreadTerminatePort@4 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�XO�" _NtReleaseKeyedEvent@16 ntdll.dll ntdll.dll/ -1 0 49 `
�� L�Tj� _NtReleaseMutant@8 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L��! _NtReleaseSemaphore@12 ntdll.dll
ntdll.dll/ -1 0 62 `
�� Lh
��* _NtReleaseWorkerFactoryWorker@4 ntdll.dll ntdll.dll/ -1 0 55 `
�� L��L�# _NtRemoveIoCompletion@20 ntdll.dll
ntdll.dll/ -1 0 57 `
�� LyQr�% _NtRemoveIoCompletionEx@24 ntdll.dll
ntdll.dll/ -1 0 54 `
�� LI!D�" _NtRemoveProcessDebug@8 ntdll.dll ntdll.dll/ -1 0 45 `
�� L@��� _NtRenameKey@8 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L���( _NtRenameTransactionManager@8 ntdll.dll ntdll.dll/ -1 0 47 `
�� Lz��� _NtReplaceKey@12 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�F�% ! _NtReplacePartitionUnit@12 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L|�:� " _NtReplyPort@8 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L#�%�% # _NtReplyWaitReceivePort@16 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L;*w�' $ _NtReplyWaitReceivePortEx@20 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�_��" % _NtReplyWaitReplyPort@8 ntdll.dll ntdll.dll/ -1 0 47 `
�� L1 .� & _NtRequestPort@8 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�}��% ' _NtRequestWaitReplyPort@12 ntdll.dll
ntdll.dll/ -1 0 46 `
�� Lq/� ( _NtResetEvent@8 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�X�� ) _NtResetWriteWatch@12 ntdll.dll ntdll.dll/ -1 0 47 `
�� L�J� * _NtRestoreKey@12 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L5��� + _NtResumeProcess@4 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L�� � , _NtResumeThread@8 ntdll.dll ntdll.dll/ -1 0 64 `
�� Lh��, - _NtRevertContainerImpersonation@0 ntdll.dll ntdll.dll/ -1 0 52 `
�� L>��� . _NtRollbackComplete@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� L���" / _NtRollbackEnlistment@8 ntdll.dll ntdll.dll/ -1 0 63 `
�� LX�L�+ 0 _NtRollbackRegistryTransaction@8 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L\4J�# 1 _NtRollbackTransaction@8 ntdll.dll
ntdll.dll/ -1 0 65 `
�� L J�- 2 _NtRollforwardTransactionManager@8 ntdll.dll
ntdll.dll/ -1 0 43 `
�� Lb�� 3 _NtSaveKey@8 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L��
� 4 _NtSaveKeyEx@12 ntdll.dll ntdll.dll/ -1 0 51 `
�� LI�k� 5 _NtSaveMergedKeys@12 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L\�~�" 6 _NtSecureConnectPort@36 ntdll.dll ntdll.dll/ -1 0 49 `
�� L���� 7 _NtSerializeBoot@0 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L��1�! 8 _NtSetBootEntryOrder@8 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L���� 9 _NtSetBootOptions@8 ntdll.dll ntdll.dll/ -1 0 59 `
�� LΆC�' ; _NtSetCachedSigningLevel2@24 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L�(f�& : _NtSetCachedSigningLevel@20 ntdll.dll ntdll.dll/ -1 0 52 `
�� Ls E� < _NtSetContextThread@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� L#���$ = _NtSetDebugFilterState@12 ntdll.dll ntdll.dll/ -1 0 59 `
�� LAr��' > _NtSetDefaultHardErrorPort@4 ntdll.dll
ntdll.dll/ -1 0 52 `
�� Lrf� ? _NtSetDefaultLocale@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� L|!F�$ @ _NtSetDefaultUILanguage@4 ntdll.dll ntdll.dll/ -1 0 55 `
�� L1���# A _NtSetDriverEntryOrder@8 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L��� B _NtSetEaFile@16 ntdll.dll ntdll.dll/ -1 0 44 `
�� L��� C _NtSetEvent@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� L� c�% D _NtSetEventBoostPriority@4 ntdll.dll
ntdll.dll/ -1 0 52 `
�� Lk/q� E _NtSetHighEventPair@4 ntdll.dll ntdll.dll/ -1 0 59 `
�� L��' F _NtSetHighWaitLowEventPair@4 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L1�
� G _NtSetIRTimer@8 ntdll.dll ntdll.dll/ -1 0 62 `
�� L�I��* H _NtSetInformationDebugObject@20 ntdll.dll ntdll.dll/ -1 0 61 `
�� L�) I _NtSetInformationEnlistment@16 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L�`L�# J _NtSetInformationFile@20 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L˅��( K _NtSetInformationJobObject@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�4�" L _NtSetInformationKey@16 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�jJ�% M _NtSetInformationObject@16 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L ��& N _NtSetInformationProcess@16 ntdll.dll ntdll.dll/ -1 0 66 `
�� Lp��. O _NtSetInformationResourceManager@16 ntdll.dll ntdll.dll/ -1 0 63 `
�� L�f<�+ P _NtSetInformationSymbolicLink@16 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L^4O�% Q _NtSetInformationThread@16 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L&��$ R _NtSetInformationToken@16 ntdll.dll ntdll.dll/ -1 0 62 `
�� Lχa�* S _NtSetInformationTransaction@16 ntdll.dll ntdll.dll/ -1 0 69 `
�� Lj��1 T _NtSetInformationTransactionManager@16 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L��d�, U _NtSetInformationVirtualMemory@24 ntdll.dll ntdll.dll/ -1 0 64 `
�� L�9F�, V _NtSetInformationWorkerFactory@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� LD%��" W _NtSetIntervalProfile@8 ntdll.dll ntdll.dll/ -1 0 52 `
�� Ld � X _NtSetIoCompletion@20 ntdll.dll ntdll.dll/ -1 0 54 `
�� L13��" Y _NtSetIoCompletionEx@24 ntdll.dll ntdll.dll/ -1 0 50 `
�� LŹ � Z _NtSetLdtEntries@24 ntdll.dll ntdll.dll/ -1 0 51 `
�� LJ!\� [ _NtSetLowEventPair@4 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L��i�' \ _NtSetLowWaitHighEventPair@4 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L�HZ�( ] _NtSetQuotaInformationFile@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�[�" ^ _NtSetSecurityObject@12 ntdll.dll ntdll.dll/ -1 0 61 `
�� L����) _ _NtSetSystemEnvironmentValue@8 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L�A�, ` _NtSetSystemEnvironmentValueEx@20 ntdll.dll ntdll.dll/ -1 0 57 `
�� L͊A�% a _NtSetSystemInformation@12 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L9�B�$ b _NtSetSystemPowerState@12 ntdll.dll ntdll.dll/ -1 0 49 `
�� L�� c _NtSetSystemTime@8 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L�HJ�' d _NtSetThreadExecutionState@8 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L3��� f _NtSetTimer2@16 ntdll.dll ntdll.dll/ -1 0 45 `
�� L��� e _NtSetTimer@28 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L�� g _NtSetTimerEx@16 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L��# h _NtSetTimerResolution@12 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L+F� i _NtSetUuidSeed@4 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L;D� j _NtSetValueKey@24 ntdll.dll ntdll.dll/ -1 0 61 `
�� L�M�) k _NtSetVolumeInformationFile@20 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L���. l _NtSetWnfProcessNotificationEvent@4 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�p� m _NtShutdownSystem@4 ntdll.dll ntdll.dll/ -1 0 57 `
�� L&y��% n _NtShutdownWorkerFactory@8 ntdll.dll
ntdll.dll/ -1 0 65 `
�� LOB �- o _NtSignalAndWaitForSingleObject@16 ntdll.dll
ntdll.dll/ -1 0 53 `
�� LWM��! p _NtSinglePhaseReject@8 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L�?4� q _NtStartProfile@4 ntdll.dll ntdll.dll/ -1 0 47 `
�� L���� r _NtStopProfile@4 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L�x9�( s _NtSubscribeWnfStateChange@16 ntdll.dll ntdll.dll/ -1 0 50 `
�� L4:A� t _NtSuspendProcess@4 ntdll.dll ntdll.dll/ -1 0 49 `
�� LN��� u _NtSuspendThread@8 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L ��# v _NtSystemDebugControl@24 ntdll.dll
ntdll.dll/ -1 0 52 `
�� Lq�� w _NtTerminateEnclave@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� LJ ��" x _NtTerminateJobObject@8 ntdll.dll ntdll.dll/ -1 0 52 `
�� L �%� y _NtTerminateProcess@8 ntdll.dll ntdll.dll/ -1 0 51 `
�� Ll�� z _NtTerminateThread@8 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L�` � { _NtTestAlert@0 ntdll.dll
ntdll.dll/ -1 0 48 `
�� Lp-�� | _NtThawRegistry@0 ntdll.dll ntdll.dll/ -1 0 52 `
�� L ��� } _NtThawTransactions@0 ntdll.dll ntdll.dll/ -1 0 49 `
�� LW˶� ~ _NtTraceControl@24 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L[�9� _NtTraceEvent@16 ntdll.dll
ntdll.dll/ -1 0 54 `
�� Ll9�" � _NtTranslateFilePath@16 ntdll.dll ntdll.dll/ -1 0 50 `
�� Ly�� � _NtUmsThreadYield@4 ntdll.dll ntdll.dll/ -1 0 48 `
�� L�� � � _NtUnloadDriver@4 ntdll.dll ntdll.dll/ -1 0 46 `
�� L�E� � _NtUnloadKey2@8 ntdll.dll ntdll.dll/ -1 0 45 `
�� L��H� � _NtUnloadKey@4 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L�L� � _NtUnloadKeyEx@8 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L �d� � _NtUnlockFile@20 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L���$ � _NtUnlockVirtualMemory@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� L롈�" � _NtUnmapViewOfSection@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� L<�{�% � _NtUnmapViewOfSectionEx@12 ntdll.dll
ntdll.dll/ -1 0 61 `
�� Ll���) � _NtUnsubscribeWnfStateChange@4 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L���# � _NtUpdateWnfStateData@28 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L�"8� � _NtVdmControl@8 ntdll.dll ntdll.dll/ -1 0 58 `
�� LL+�& � _NtWaitForAlertByThreadId@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� L|���" � _NtWaitForDebugEvent@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� L��_�" � _NtWaitForKeyedEvent@16 ntdll.dll ntdll.dll/ -1 0 61 `
�� Lg ��) � _NtWaitForMultipleObjects32@20 ntdll.dll
ntdll.dll/ -1 0 59 `
�� Lv�@�' � _NtWaitForMultipleObjects@20 ntdll.dll
ntdll.dll/ -1 0 56 `
�� LU���$ � _NtWaitForSingleObject@12 ntdll.dll ntdll.dll/ -1 0 64 `
�� L�w�, � _NtWaitForWorkViaWorkerFactory@20 ntdll.dll ntdll.dll/ -1 0 53 `
�� L*�Q�! � _NtWaitHighEventPair@4 ntdll.dll
ntdll.dll/ -1 0 52 `
�� LE˟� � _NtWaitLowEventPair@4 ntdll.dll ntdll.dll/ -1 0 60 `
�� LK�;�( � _NtWorkerFactoryWorkerReady@4 ntdll.dll ntdll.dll/ -1 0 46 `
�� L�N� � _NtWriteFile@36 ntdll.dll ntdll.dll/ -1 0 52 `
�� LN}�� � _NtWriteFileGather@36 ntdll.dll ntdll.dll/ -1 0 53 `
�� L�)�! � _NtWriteRequestData@24 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L�ü�# � _NtWriteVirtualMemory@20 ntdll.dll
ntdll.dll/ -1 0 50 `
�� LwS� � _NtYieldExecution@0 ntdll.dll ntdll.dll/ -1 0 47 `
�� L媸� � _PfxFindPrefix@8 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L|
�� � _PfxInitialize@4 ntdll.dll
ntdll.dll/ -1 0 50 `
�� LW7�� � _PfxInsertPrefix@12 ntdll.dll ntdll.dll/ -1 0 49 `
�� Lۮ� � _PfxRemovePrefix@8 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L�r�# � _PssNtCaptureSnapshot@16 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L6Ŀ�% � _PssNtDuplicateSnapshot@20 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�y�% � _PssNtFreeRemoteSnapshot@8 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L�� � � _PssNtFreeSnapshot@4 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L6m��! � _PssNtFreeWalkMarker@4 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L�׀�! � _PssNtQuerySnapshot@16 ntdll.dll
ntdll.dll/ -1 0 57 `
�� Luj �% � _PssNtValidateDescriptor@8 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L�i\� � _PssNtWalkSnapshot@20 ntdll.dll ntdll.dll/ -1 0 47 `
�� LB:�� � _RtlAbortRXact@4 ntdll.dll
ntdll.dll/ -1 0 62 `
�� Lmc�* � _RtlAbsoluteToSelfRelativeSD@12 ntdll.dll ntdll.dll/ -1 0 51 `
�� Li�� � _RtlAcquirePebLock@0 ntdll.dll
ntdll.dll/ -1 0 54 `
�� LA��" � _RtlAcquirePrivilege@16 ntdll.dll ntdll.dll/ -1 0 67 `
�� L% �/ � _RtlAcquireReleaseSRWLockExclusive@4 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L��) � _RtlAcquireResourceExclusive@8 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L����& � _RtlAcquireResourceShared@8 ntdll.dll ntdll.dll/ -1 0 60 `
�� L�
$�( � _RtlAcquireSRWLockExclusive@4 ntdll.dll ntdll.dll/ -1 0 57 `
�� L.H�% � _RtlAcquireSRWLockShared@4 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L�#n�+ � _RtlActivateActivationContext@12 ntdll.dll
ntdll.dll/ -1 0 65 `
�� L Ja�- � _RtlActivateActivationContextEx@16 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L 5��% � _RtlAddAccessAllowedAce@16 ntdll.dll
ntdll.dll/ -1 0 59 `
�� Li��' � _RtlAddAccessAllowedAceEx@20 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L��+ � _RtlAddAccessAllowedObjectAce@28 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L֜��$ � _RtlAddAccessDeniedAce@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� LR,��& � _RtlAddAccessDeniedAceEx@20 ntdll.dll ntdll.dll/ -1 0 62 `
�� L��* � _RtlAddAccessDeniedObjectAce@28 ntdll.dll ntdll.dll/ -1 0 56 `
�� L{Sc�$ � _RtlAddAccessFilterAce@32 ntdll.dll ntdll.dll/ -1 0 44 `
�� L��a� � _RtlAddAce@20 ntdll.dll ntdll.dll/ -1 0 54 `
�� L
�k�" � _RtlAddActionToRXact@24 ntdll.dll ntdll.dll/ -1 0 56 `
�� L�wi�$ � _RtlAddAtomToAtomTable@12 ntdll.dll ntdll.dll/ -1 0 63 `
�� L����+ � _RtlAddAttributeActionToRXact@32 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L�ʴ�# � _RtlAddAuditAccessAce@24 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L@}�% � _RtlAddAuditAccessAceEx@28 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L�+�) � _RtlAddAuditAccessObjectAce@36 ntdll.dll
ntdll.dll/ -1 0 74 `
�� L�r(�6 � _RtlAddIntegrityLabelToBoundaryDescriptor@8 ntdll.dll ntdll.dll/ -1 0 53 `
�� L�:�! � _RtlAddMandatoryAce@24 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L� �) � _RtlAddProcessTrustLabelAce@24 ntdll.dll
ntdll.dll/ -1 0 60 `
�� LI���( � _RtlAddRefActivationContext@4 ntdll.dll ntdll.dll/ -1 0 61 `
�� LO���) � _RtlAddResourceAttributeAce@28 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L���+ � _RtlAddSIDToBoundaryDescriptor@8 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L���& � _RtlAddScopedPolicyIDAce@20 ntdll.dll ntdll.dll/ -1 0 63 `
�� L�a��+ � _RtlAddVectoredContinueHandler@8 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L�d�, � _RtlAddVectoredExceptionHandler@8 ntdll.dll ntdll.dll/ -1 0 59 `
�� LOf��' � _RtlAddressInSectionTable@12 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L����! � _RtlAdjustPrivilege@16 ntdll.dll
ntdll.dll/ -1 0 67 `
�� L*v�/ � _RtlAllocateActivationContextStack@4 ntdll.dll
ntdll.dll/ -1 0 62 `
�� Le5��* � _RtlAllocateAndInitializeSid@44 ntdll.dll ntdll.dll/ -1 0 64 `
�� L�<�, � _RtlAllocateAndInitializeSidEx@16 ntdll.dll ntdll.dll/ -1 0 51 `
�� L���� � _RtlAllocateHandle@8 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L� � _RtlAllocateHeap@12 ntdll.dll ntdll.dll/ -1 0 66 `
�� L�_��. � _RtlAllocateMemoryBlockLookaside@12 ntdll.dll ntdll.dll/ -1 0 56 `
�� L\�Z�$ � _RtlAllocateMemoryZone@12 ntdll.dll ntdll.dll/ -1 0 66 `
�� L��1�. � _RtlAllocateWnfSerializationGroup@0 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�5��& � _RtlAnsiCharToUnicodeChar@4 ntdll.dll ntdll.dll/ -1 0 60 `
�� L����( � _RtlAnsiStringToUnicodeSize@4 ntdll.dll ntdll.dll/ -1 0 63 `
�� L��+ � _RtlAnsiStringToUnicodeString@12 ntdll.dll
ntdll.dll/ -1 0 57 `
�� Ls��% � _RtlAppendAsciizToString@8 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L2v��# � _RtlAppendPathElement@12 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L{ۗ�% � _RtlAppendStringToString@8 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L�R��, � _RtlAppendUnicodeStringToString@8 ntdll.dll ntdll.dll/ -1 0 58 `
�� Ll�& � _RtlAppendUnicodeToString@8 ntdll.dll ntdll.dll/ -1 0 61 `
�� Lu���) � _RtlApplicationVerifierStop@40 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L���� � _RtlApplyRXact@4 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L_��" � _RtlApplyRXactNoFlush@4 ntdll.dll ntdll.dll/ -1 0 58 `
�� Ld.S�& � _RtlAreAllAccessesGranted@8 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�V��& � _RtlAreAnyAccessesGranted@8 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�*�� � _RtlAreBitsClear@12 ntdll.dll ntdll.dll/ -1 0 48 `
�� L+� � _RtlAreBitsSet@12 ntdll.dll ntdll.dll/ -1 0 44 `
�� L��%� � _RtlAssert@16 ntdll.dll ntdll.dll/ -1 0 53 `
�� L%��! � _RtlAvlInsertNodeEx@16 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L��� � _RtlAvlRemoveNode@8 ntdll.dll ntdll.dll/ -1 0 48 `
�� L �� � _RtlCancelTimer@8 ntdll.dll ntdll.dll/ -1 0 60 `
�� L�p.�( � _RtlCanonicalizeDomainName@12 ntdll.dll ntdll.dll/ -1 0 53 `
�� Lnk�! � _RtlCapabilityCheck@12 ntdll.dll
ntdll.dll/ -1 0 72 `
�� L
?�4 � _RtlCapabilityCheckForSingleSessionSku@12 ntdll.dll ntdll.dll/ -1 0 51 `
�� L� �� � _RtlCaptureContext@4 ntdll.dll
ntdll.dll/ -1 0 59 `
�� LM@+�' � _RtlCaptureStackBackTrace@16 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�ə�% � _RtlCaptureStackContext@12 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L`q'� � _RtlCharToInteger@12 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L*�?�) � _RtlCheckBootStatusIntegrity@8 ntdll.dll
ntdll.dll/ -1 0 69 `
�� L�KJ�1 � _RtlCheckForOrphanedCriticalSections@4 ntdll.dll
ntdll.dll/ -1 0 65 `
�� L��- � _RtlCheckPortableOperatingSystem@4 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L��&�! � _RtlCheckRegistryKey@8 ntdll.dll
ntdll.dll/ -1 0 56 `
�� LX���$ � _RtlCheckSandboxedToken@8 ntdll.dll ntdll.dll/ -1 0 67 `
�� L ��/ � _RtlCheckSystemBootStatusIntegrity@4 ntdll.dll
ntdll.dll/ -1 0 58 `
�� Lyc�& � _RtlCheckTokenCapability@12 ntdll.dll ntdll.dll/ -1 0 58 `
�� L���& _RtlCheckTokenMembership@12 ntdll.dll ntdll.dll/ -1 0 60 `
�� Lж�( _RtlCheckTokenMembershipEx@16 ntdll.dll ntdll.dll/ -1 0 56 `
�� L���$ _RtlCleanUpTEBLangLists@0 ntdll.dll ntdll.dll/ -1 0 49 `
�� L�i� _RtlClearAllBits@4 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L͖0� _RtlClearBit@8 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L�ߺ� _RtlClearBits@12 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L�A��. _RtlClearThreadWorkOnBehalfTicket@0 ntdll.dll ntdll.dll/ -1 0 54 `
�� Lr-�" _RtlCloneUserProcess@20 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�Wu�& _RtlCmDecodeMemIoResource@8 ntdll.dll ntdll.dll/ -1 0 59 `
�� L� ��'
_RtlCmEncodeMemIoResource@24 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L�Z�� _RtlCommitDebugInfo@8 ntdll.dll ntdll.dll/ -1 0 48 `
�� L���
_RtlCompactHeap@8 ntdll.dll ntdll.dll/ -1 0 53 `
�� L� f�! _RtlCompareAltitudes@8 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L�!� _RtlCompareMemory@12 ntdll.dll
ntdll.dll/ -1 0 56 `
�� Lv}�$ _RtlCompareMemoryUlong@12 ntdll.dll ntdll.dll/ -1 0 51 `
�� L ��� _RtlCompareString@12 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L��o�& _RtlCompareUnicodeString@12 ntdll.dll ntdll.dll/ -1 0 59 `
�� L��' _RtlCompareUnicodeStrings@20 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L5�� _RtlCompressBuffer@32 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�K�� _RtlComputeCrc32@12 ntdll.dll ntdll.dll/ -1 0 60 `
�� L����( _RtlComputeImportTableHash@12 ntdll.dll ntdll.dll/ -1 0 64 `
�� L:Q��, _RtlComputePrivatizedDllName_U@12 ntdll.dll ntdll.dll/ -1 0 49 `
�� L\�� _RtlConnectToSm@16 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L�ip�, _RtlConsoleMultiByteToUnicodeN@24 ntdll.dll ntdll.dll/ -1 0 63 `
�� LYj��+ _RtlConstructCrossVmEventPath@12 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L��+ _RtlConstructCrossVmMutexPath@12 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�{~�" _RtlContractHashTable@4 ntdll.dll ntdll.dll/ -1 0 69 `
�� L|�X�1 _RtlConvertDeviceFamilyInfoToString@16 ntdll.dll
ntdll.dll/ -1 0 61 `
�� Ll>�) _RtlConvertExclusiveToShared@4 ntdll.dll
ntdll.dll/ -1 0 57 `
�� LtvM�% _RtlConvertLCIDToString@20 ntdll.dll
ntdll.dll/ -1 0 62 `
�� LP6��* _RtlConvertLongToLargeInteger@4 ntdll.dll ntdll.dll/ -1 0 68 `
�� L?Co�0 ! _RtlConvertSRWLockExclusiveToShared@4 ntdll.dll ntdll.dll/ -1 0 61 `
�� L�h6�) " _RtlConvertSharedToExclusive@4 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L��;�+ # _RtlConvertSidToUnicodeString@12 ntdll.dll
ntdll.dll/ -1 0 72 `
�� L�Av�4 $ _RtlConvertToAutoInheritSecurityObject@24 ntdll.dll ntdll.dll/ -1 0 63 `
�� L g7�+ % _RtlConvertUlongToLargeInteger@4 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L���� & _RtlCopyBitMap@12 ntdll.dll ntdll.dll/ -1 0 49 `
�� L<` � ' _RtlCopyContext@12 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L����% ( _RtlCopyExtendedContext@12 ntdll.dll
ntdll.dll/ -1 0 45 `
�� Ld��� ) _RtlCopyLuid@8 ntdll.dll
ntdll.dll/ -1 0 64 `
�� LR���, * _RtlCopyLuidAndAttributesArray@12 ntdll.dll ntdll.dll/ -1 0 54 `
�� Ld�O�" + _RtlCopyMappedMemory@12 ntdll.dll ntdll.dll/ -1 0 59 `
�� LWi��' . _RtlCopySecurityDescriptor@8 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L�h� / _RtlCopySid@12 ntdll.dll
ntdll.dll/ -1 0 63 `
�� LCL�+ 0 _RtlCopySidAndAttributesArray@28 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L �U� 1 _RtlCopyString@8 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�a�" 2 _RtlCopyUnicodeString@8 ntdll.dll ntdll.dll/ -1 0 43 `
�� L#�h� 3 _RtlCrc32@12 ntdll.dll
ntdll.dll/ -1 0 43 `
�� L�� 4 _RtlCrc64@16 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L��� 5 _RtlCreateAcl@12 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L�U�) 6 _RtlCreateActivationContext@24 ntdll.dll
ntdll.dll/ -1 0 52 `
�� LH�@� 7 _RtlCreateAndSetSD@20 ntdll.dll ntdll.dll/ -1 0 52 `
�� L� �� 8 _RtlCreateAtomTable@8 ntdll.dll ntdll.dll/ -1 0 61 `
�� L\I �) 9 _RtlCreateBootStatusDataFile@4 ntdll.dll
ntdll.dll/ -1 0 61 `
�� LA&��) : _RtlCreateBoundaryDescriptor@8 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L���" ; _RtlCreateEnvironment@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�+W�% < _RtlCreateEnvironmentEx@12 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L��{�! = _RtlCreateHashTable@12 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L��# > _RtlCreateHashTableEx@16 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L�-�� ? _RtlCreateHeap@24 ntdll.dll ntdll.dll/ -1 0 64 `
�� Lu��, @ _RtlCreateMemoryBlockLookaside@20 ntdll.dll ntdll.dll/ -1 0 54 `
�� LY�<�" A _RtlCreateMemoryZone@12 ntdll.dll ntdll.dll/ -1 0 61 `
�� L|�4�) B _RtlCreateProcessParameters@40 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L w9�+ C _RtlCreateProcessParametersEx@44 ntdll.dll
ntdll.dll/ -1 0 73 `
�� LHhO�5 D _RtlCreateProcessParametersWithTemplate@12 ntdll.dll
ntdll.dll/ -1 0 61 `
�� Lu���) E _RtlCreateProcessReflection@24 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L
��' F _RtlCreateQueryDebugBuffer@8 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L~�]�" G _RtlCreateRegistryKey@8 ntdll.dll ntdll.dll/ -1 0 61 `
�� L�c �) H _RtlCreateSecurityDescriptor@8 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L%ǡ�" I _RtlCreateServiceSid@12 ntdll.dll ntdll.dll/ -1 0 72 `
�� L2�5�4 J _RtlCreateSystemVolumeInformationFolder@4 ntdll.dll ntdll.dll/ -1 0 51 `
�� Le��� K _RtlCreateTagHeap@16 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L9��� L _RtlCreateTimer@28 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L/���! M _RtlCreateTimerQueue@4 ntdll.dll
ntdll.dll/ -1 0 56 `
�� LZ�,�$ N _RtlCreateUnicodeString@8 ntdll.dll ntdll.dll/ -1 0 66 `
�� L�B��. O _RtlCreateUnicodeStringFromAsciiz@8 ntdll.dll ntdll.dll/ -1 0 55 `
�� LF��# P _RtlCreateUserProcess@40 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L|U�% Q _RtlCreateUserProcessEx@20 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L�>��* R _RtlCreateUserSecurityObject@28 ntdll.dll ntdll.dll/ -1 0 53 `
�� L&�! S _RtlCreateUserStack@24 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L� Z�" T _RtlCreateUserThread@40 ntdll.dll ntdll.dll/ -1 0 61 `
�� L����) U _RtlCreateVirtualAccountSid@16 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�c�" V _RtlCultureNameToLCID@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� L��$ W _RtlCustomCPToUnicodeN@24 ntdll.dll ntdll.dll/ -1 0 61 `
�� L�i�) X _RtlCutoverTimeToSystemTime@16 ntdll.dll
ntdll.dll/ -1 0 55 `
�� LЗ;�# Y _RtlDeCommitDebugInfo@12 ntdll.dll
ntdll.dll/ -1 0 61 `
�� LH)`�) Z _RtlDeNormalizeProcessParams@4 ntdll.dll
ntdll.dll/ -1 0 64 `
�� LS(K�, [ _RtlDeactivateActivationContext@8 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�� ] _RtlDebugPrintTimes@0 ntdll.dll ntdll.dll/ -1 0 50 `
�� L��x� ^ _RtlDecodePointer@4 ntdll.dll ntdll.dll/ -1 0 57 `
�� Lk�\�% _ _RtlDecodeRemotePointer@12 ntdll.dll
ntdll.dll/ -1 0 56 `
�� LD��$ ` _RtlDecodeSystemPointer@4 ntdll.dll ntdll.dll/ -1 0 54 `
�� LŤS�" a _RtlDecompressBuffer@24 ntdll.dll ntdll.dll/ -1 0 56 `
�� L3�r�$ b _RtlDecompressBufferEx@28 ntdll.dll ntdll.dll/ -1 0 56 `
�� LBH�$ c _RtlDecompressFragment@32 ntdll.dll ntdll.dll/ -1 0 49 `
�� LE� d _RtlDefaultNpAcl@4 ntdll.dll
ntdll.dll/ -1 0 43 `
�� L(]R� e _RtlDelete@4 ntdll.dll
ntdll.dll/ -1 0 46 `
�� Lё�� f _RtlDeleteAce@8 ntdll.dll ntdll.dll/ -1 0 60 `
�� LX`��( g _RtlDeleteAtomFromAtomTable@8 ntdll.dll ntdll.dll/ -1 0 61 `
�� LA��) i _RtlDeleteBoundaryDescriptor@4 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L��U�& j _RtlDeleteCriticalSection@4 ntdll.dll ntdll.dll/ -1 0 62 `
�� Lm
��* k _RtlDeleteElementGenericTable@8 ntdll.dll ntdll.dll/ -1 0 65 `
�� L��- l _RtlDeleteElementGenericTableAvl@8 ntdll.dll
ntdll.dll/ -1 0 67 `
�� LE���/ m _RtlDeleteElementGenericTableAvlEx@8 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L[�� n _RtlDeleteHashTable@4 ntdll.dll ntdll.dll/ -1 0 50 `
�� L��� o _RtlDeleteNoSplay@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�b��% p _RtlDeleteRegistryValue@12 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L�^� q _RtlDeleteResource@4 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�1��% r _RtlDeleteSecurityObject@4 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L>X
� s _RtlDeleteTimer@12 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L�d��! t _RtlDeleteTimerQueue@4 ntdll.dll
ntdll.dll/ -1 0 55 `
�� Lϰ��# u _RtlDeleteTimerQueueEx@8 ntdll.dll
ntdll.dll/ -1 0 72 `
�� Lϟ��4 v _RtlDeregisterSecureMemoryCacheCallback@4 ntdll.dll ntdll.dll/ -1 0 51 `
�� Lu�~� w _RtlDeregisterWait@4 ntdll.dll
ntdll.dll/ -1 0 53 `
�� Lfu�! x _RtlDeregisterWaitEx@8 ntdll.dll
ntdll.dll/ -1 0 66 `
�� Lo�N�. y _RtlDeriveCapabilitySidsFromName@12 ntdll.dll ntdll.dll/ -1 0 53 `
�� L ��! z _RtlDestroyAtomTable@4 ntdll.dll
ntdll.dll/ -1 0 55 `
�� Lo���# { _RtlDestroyEnvironment@4 ntdll.dll
ntdll.dll/ -1 0 55 `
�� Lw&�# | _RtlDestroyHandleTable@4 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L� 7� } _RtlDestroyHeap@4 ntdll.dll ntdll.dll/ -1 0 64 `
�� L�'��, ~ _RtlDestroyMemoryBlockLookaside@4 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�%�" _RtlDestroyMemoryZone@4 ntdll.dll ntdll.dll/ -1 0 61 `
�� L��c�) � _RtlDestroyProcessParameters@4 ntdll.dll
ntdll.dll/ -1 0 60 `
�� Ln+F�( � _RtlDestroyQueryDebugBuffer@4 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�� � _RtlDetectHeapLeaks@0 ntdll.dll ntdll.dll/ -1 0 63 `
�� L1���+ � _RtlDetermineDosPathNameType_U@4 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L���' � _RtlDisableThreadProfiling@4 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L�1��& � _RtlDllShutdownInProgress@0 ntdll.dll ntdll.dll/ -1 0 63 `
�� LD���+ � _RtlDnsHostNameToComputerName@12 ntdll.dll
ntdll.dll/ -1 0 53 `
�� Lej��! � _RtlDoesFileExists_U@4 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L�'��) � _RtlDoesNameContainWildCards@4 ntdll.dll
ntdll.dll/ -1 0 75 `
�� L!�)�7 � _RtlDosApplyFileIsolationRedirection_Ustr@36 ntdll.dll
ntdll.dll/ -1 0 78 `
�� Lk���: � _RtlDosLongPathNameToNtPathName_U_WithStatus@16 ntdll.dll ntdll.dll/ -1 0 86 `
�� Lzk�B � _RtlDosLongPathNameToRelativeNtPathName_U_WithStatus@16 ntdll.dll ntdll.dll/ -1 0 63 `
�� L_V��+ � _RtlDosPathNameToNtPathName_U@16 ntdll.dll
ntdll.dll/ -1 0 74 `
�� L� =�6 � _RtlDosPathNameToNtPathName_U_WithStatus@16 ntdll.dll ntdll.dll/ -1 0 71 `
�� L�h�3 � _RtlDosPathNameToRelativeNtPathName_U@16 ntdll.dll
ntdll.dll/ -1 0 82 `
�� L��{�> � _RtlDosPathNameToRelativeNtPathName_U_WithStatus@16 ntdll.dll ntdll.dll/ -1 0 53 `
�� L��T�! � _RtlDosSearchPath_U@24 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L��$ � _RtlDosSearchPath_Ustr@36 ntdll.dll ntdll.dll/ -1 0 56 `
�� L�w�$ � _RtlDowncaseUnicodeChar@4 ntdll.dll ntdll.dll/ -1 0 59 `
�� L�� �' � _RtlDowncaseUnicodeString@12 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L ~V� � _RtlDumpResource@4 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L� c�( � _RtlDuplicateUnicodeString@12 ntdll.dll ntdll.dll/ -1 0 51 `
�� LU
P� � _RtlEmptyAtomTable@8 ntdll.dll
ntdll.dll/ -1 0 76 `
�� L���8 � _RtlEnableEarlyCriticalSectionEventCreation@0 ntdll.dll ntdll.dll/ -1 0 59 `
�� L�p�' � _RtlEnableThreadProfiling@20 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L��� � _RtlEncodePointer@4 ntdll.dll ntdll.dll/ -1 0 57 `
�� L��% � _RtlEncodeRemotePointer@12 ntdll.dll
ntdll.dll/ -1 0 56 `
�� LC�B�$ � _RtlEncodeSystemPointer@4 ntdll.dll ntdll.dll/ -1 0 60 `
�� L�4�( � _RtlEndEnumerationHashTable@8 ntdll.dll ntdll.dll/ -1 0 66 `
�� L��?�. � _RtlEndStrongEnumerationHashTable@8 ntdll.dll ntdll.dll/ -1 0 64 `
�� L�'�, � _RtlEndWeakEnumerationHashTable@8 ntdll.dll ntdll.dll/ -1 0 60 `
�� L��f�( � _RtlEnlargedIntegerMultiply@8 ntdll.dll ntdll.dll/ -1 0 61 `
�� L#��) � _RtlEnlargedUnsignedMultiply@8 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L'�3�% � _RtlEnterCriticalSection@4 ntdll.dll
ntdll.dll/ -1 0 53 `
�� LL���! � _RtlEnumProcessHeaps@8 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L⁶�( � _RtlEnumerateEntryHashTable@8 ntdll.dll ntdll.dll/ -1 0 58 `
�� L0���& � _RtlEnumerateGenericTable@8 ntdll.dll ntdll.dll/ -1 0 61 `
�� Lg^�) � _RtlEnumerateGenericTableAvl@8 ntdll.dll
ntdll.dll/ -1 0 73 `
�� L��h�5 � _RtlEnumerateGenericTableLikeADirectory@28 ntdll.dll
ntdll.dll/ -1 0 73 `
�� L��5 � _RtlEnumerateGenericTableWithoutSplaying@8 ntdll.dll
ntdll.dll/ -1 0 76 `
�� L˂<�8 � _RtlEnumerateGenericTableWithoutSplayingAvl@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� L8S�" � _RtlEqualComputerName@8 ntdll.dll ntdll.dll/ -1 0 52 `
�� L��j� � _RtlEqualDomainName@8 ntdll.dll ntdll.dll/ -1 0 46 `
�� L]y�� � _RtlEqualLuid@8 ntdll.dll ntdll.dll/ -1 0 51 `
�� L9� � _RtlEqualPrefixSid@8 ntdll.dll
ntdll.dll/ -1 0 45 `
�� LJy�� � _RtlEqualSid@8 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L�js� � _RtlEqualString@12 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L�+��$ � _RtlEqualUnicodeString@12 ntdll.dll ntdll.dll/ -1 0 57 `
�� LT���% � _RtlEqualWnfChangeStamps@8 ntdll.dll
ntdll.dll/ -1 0 55 `
�� Lt
u�# � _RtlEraseUnicodeString@4 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L�Q�) � _RtlEthernetAddressToStringA@8 ntdll.dll
ntdll.dll/ -1 0 61 `
�� LUH�) � _RtlEthernetAddressToStringW@8 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L�Ay�* � _RtlEthernetStringToAddressA@12 ntdll.dll ntdll.dll/ -1 0 62 `
�� Lޞw�* � _RtlEthernetStringToAddressW@12 ntdll.dll ntdll.dll/ -1 0 52 `
�� L1�d� � _RtlExitUserProcess@4 ntdll.dll ntdll.dll/ -1 0 51 `
�� L.��� � _RtlExitUserThread@4 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L#��* � _RtlExpandEnvironmentStrings@24 ntdll.dll ntdll.dll/ -1 0 64 `
�� L���, � _RtlExpandEnvironmentStrings_U@16 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�D�� � _RtlExpandHashTable@4 ntdll.dll ntdll.dll/ -1 0 60 `
�� L��G�( � _RtlExtendCorrelationVector@4 ntdll.dll ntdll.dll/ -1 0 63 `
�� LvB�+ � _RtlExtendMemoryBlockLookaside@8 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L�y��! � _RtlExtendMemoryZone@8 ntdll.dll
ntdll.dll/ -1 0 61 `
�� LP5��) � _RtlExtendedIntegerMultiply@12 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L {A�, � _RtlExtendedLargeIntegerDivide@16 ntdll.dll ntdll.dll/ -1 0 57 `
�� Lt�~�% � _RtlExtendedMagicDivide@20 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L2�� � _RtlExtractBitMap@16 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L�&�� � _RtlFillMemory@12 ntdll.dll ntdll.dll/ -1 0 53 `
�� Lq��! � _RtlFillMemoryUlong@12 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L����% � _RtlFillMemoryUlonglong@16 ntdll.dll
ntdll.dll/ -1 0 51 `
�� LG�� � _RtlFindAceByType@12 ntdll.dll
ntdll.dll/ -1 0 70 `
�� L����2 � _RtlFindActivationContextSectionGuid@20 ntdll.dll ntdll.dll/ -1 0 72 `
�� L��$�4 � _RtlFindActivationContextSectionString@20 ntdll.dll ntdll.dll/ -1 0 61 `
�� LV ��) � _RtlFindCharInUnicodeString@16 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L���� � _RtlFindClearBits@12 ntdll.dll
ntdll.dll/ -1 0 57 `
�� LMo �% � _RtlFindClearBitsAndSet@12 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L��� � _RtlFindClearRuns@16 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L�P[�, � _RtlFindClosestEncodableLength@12 ntdll.dll ntdll.dll/ -1 0 62 `
�� L>���* � _RtlFindExportedRoutineByName@8 ntdll.dll ntdll.dll/ -1 0 62 `
�� L���* � _RtlFindLastBackwardRunClear@12 ntdll.dll ntdll.dll/ -1 0 60 `
�� LB��( � _RtlFindLeastSignificantBit@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� L�N��$ � _RtlFindLongestRunClear@8 ntdll.dll ntdll.dll/ -1 0 49 `
�� L'M� � _RtlFindMessage@20 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L�!��' � _RtlFindMostSignificantBit@8 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L�) � _RtlFindNextForwardRunClear@12 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L��l� � _RtlFindSetBits@12 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�:��% � _RtlFindSetBitsAndClear@12 ntdll.dll
ntdll.dll/ -1 0 58 `
�� LL��& � _RtlFindUnicodeSubstring@12 ntdll.dll ntdll.dll/ -1 0 52 `
�� L0�� � _RtlFirstEntrySList@4 ntdll.dll ntdll.dll/ -1 0 49 `
�� L)CR� � _RtlFirstFreeAce@8 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L�-�� � _RtlFlsAlloc@8 ntdll.dll
ntdll.dll/ -1 0 44 `
�� L�4@� � _RtlFlsFree@4 ntdll.dll ntdll.dll/ -1 0 48 `
�� L'�*� � _RtlFlsGetValue@8 ntdll.dll ntdll.dll/ -1 0 48 `
�� L��� � _RtlFlsSetValue@8 ntdll.dll ntdll.dll/ -1 0 59 `
�� L�6��' � _RtlFlushSecureMemoryCache@8 ntdll.dll
ntdll.dll/ -1 0 61 `
�� Lc�) � _RtlFormatCurrentUserKeyPath@4 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L�-� � _RtlFormatMessage@36 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L}a�! � _RtlFormatMessageEx@40 ntdll.dll
ntdll.dll/ -1 0 63 `
�� LB*��+ � _RtlFreeActivationContextStack@4 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L|�h� � _RtlFreeAnsiString@4 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L`�� � _RtlFreeHandle@8 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L��&� � _RtlFreeHeap@12 ntdll.dll ntdll.dll/ -1 0 61 `
�� LQL��) � _RtlFreeMemoryBlockLookaside@8 ntdll.dll
ntdll.dll/ -1 0 50 `
�� LΛP� � _RtlFreeOemString@4 ntdll.dll ntdll.dll/ -1 0 44 `
�� L LK� � _RtlFreeSid@4 ntdll.dll ntdll.dll/ -1 0 69 `
�� LF�Z�1 � _RtlFreeThreadActivationContextStack@0 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L�G/� � _RtlFreeUTF8String@4 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L���" � _RtlFreeUnicodeString@4 ntdll.dll ntdll.dll/ -1 0 50 `
�� Ln$4� � _RtlFreeUserStack@4 ntdll.dll ntdll.dll/ -1 0 51 `
�� LKg�� � _RtlGUIDFromString@8 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L}�W�# � _RtlGenerate8dot3Name@16 ntdll.dll
ntdll.dll/ -1 0 44 `
�� L>0�� � _RtlGetAce@12 ntdll.dll ntdll.dll/ -1 0 63 `
�� LF��+ � _RtlGetActiveActivationContext@4 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L�;|�# � _RtlGetActiveConsoleId@0 ntdll.dll
ntdll.dll/ -1 0 68 `
�� L�7+�0 � _RtlGetAppContainerNamedObjectPath@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�d��& � _RtlGetAppContainerParent@8 ntdll.dll ntdll.dll/ -1 0 59 `
�� Lumt�' � _RtlGetAppContainerSidType@8 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L_V~�" � _RtlGetCallersAddress@8 ntdll.dll ntdll.dll/ -1 0 65 `
�� L�ga�- � _RtlGetCompressionWorkSpaceSize@12 ntdll.dll
ntdll.dll/ -1 0 73 `
�� L\���5 � _RtlGetConsoleSessionForegroundProcessId@0 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L�S��. � _RtlGetControlSecurityDescriptor@12 ntdll.dll ntdll.dll/ -1 0 69 `
�� L����1 � _RtlGetCriticalSectionRecursionCount@4 ntdll.dll
ntdll.dll/ -1 0 58 `
�� LS�$�& � _RtlGetCurrentDirectory_U@8 ntdll.dll ntdll.dll/ -1 0 50 `
�� L5 � � _RtlGetCurrentPeb@0 ntdll.dll ntdll.dll/ -1 0 62 `
�� L�~ �* � _RtlGetCurrentProcessorNumber@0 ntdll.dll ntdll.dll/ -1 0 64 `
�� L4��, _RtlGetCurrentProcessorNumberEx@4 ntdll.dll ntdll.dll/ -1 0 63 `
�� L���+ _RtlGetCurrentServiceSessionId@0 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L;���& _RtlGetCurrentTransaction@0 ntdll.dll ntdll.dll/ -1 0 63 `
�� L�
�+ _RtlGetDaclSecurityDescriptor@16 ntdll.dll
ntdll.dll/ -1 0 61 `
�� LB���) _RtlGetDeviceFamilyInfoEnum@12 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L����' _RtlGetElementGenericTable@8 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L�v�* _RtlGetElementGenericTableAvl@8 ntdll.dll ntdll.dll/ -1 0 63 `
�� L �@�+ _RtlGetEnabledExtendedFeatures@8 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L��6� _RtlGetExePath@8 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L1���+
_RtlGetExtendedContextLength2@16 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L:�W�) _RtlGetExtendedContextLength@8 ntdll.dll
ntdll.dll/ -1 0 60 `
�� LhE��( _RtlGetExtendedFeaturesMask@4 ntdll.dll ntdll.dll/ -1 0 52 `
�� L��~� _RtlGetFileMUIPath@28 ntdll.dll ntdll.dll/ -1 0 45 `
�� Lp���
_RtlGetFrame@0 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L����# _RtlGetFullPathName_U@16 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L���% _RtlGetFullPathName_UEx@20 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L���( _RtlGetFullPathName_UstrEx@32 ntdll.dll ntdll.dll/ -1 0 64 `
�� Lbg��, _RtlGetGroupSecurityDescriptor@12 ntdll.dll ntdll.dll/ -1 0 51 `
�� LA�� _RtlGetIntegerAtom@8 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L�^b�( _RtlGetInterruptTimePrecise@4 ntdll.dll ntdll.dll/ -1 0 52 `
�� L'��� _RtlGetLastNtStatus@0 ntdll.dll ntdll.dll/ -1 0 54 `
�� L��" _RtlGetLastWin32Error@0 ntdll.dll ntdll.dll/ -1 0 80 `
�� L5~r�< _RtlGetLengthWithoutLastFullDosOrNtPathElement@12 ntdll.dll ntdll.dll/ -1 0 76 `
�� L߲e�8 _RtlGetLengthWithoutTrailingPathSeperators@12 ntdll.dll ntdll.dll/ -1 0 65 `
�� L�L��- _RtlGetLocaleFileMappingAddress@12 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L����' _RtlGetLongestNtPathLength@0 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L�N:�, _RtlGetNativeSystemInformation@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� L� o�& _RtlGetNextEntryHashTable@8 ntdll.dll ntdll.dll/ -1 0 53 `
�� L5��! _RtlGetNtGlobalFlags@0 ntdll.dll
ntdll.dll/ -1 0 53 `
�� LO���! _RtlGetNtProductType@4 ntdll.dll
ntdll.dll/ -1 0 52 `
�� Le!j� _RtlGetNtSystemRoot@0 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�,�% _RtlGetNtVersionNumbers@12 ntdll.dll
ntdll.dll/ -1 0 64 `
�� Lf�t�, ! _RtlGetOwnerSecurityDescriptor@12 ntdll.dll ntdll.dll/ -1 0 63 `
�� L���+ # _RtlGetPersistedStateLocation@28 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L@3=� $ _RtlGetProcessHeaps@8 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�a�� & _RtlGetProductInfo@20 ntdll.dll ntdll.dll/ -1 0 65 `
�� L� ��- ' _RtlGetReturnAddressHijackTarget@0 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L�>'�+ ( _RtlGetSaclSecurityDescriptor@16 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L�8F� ) _RtlGetSearchPath@4 ntdll.dll ntdll.dll/ -1 0 67 `
�� Lb�}�/ * _RtlGetSecurityDescriptorRMControl@8 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L��% + _RtlGetSessionProperties@8 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L�V�& , _RtlGetSetBootStatusData@24 ntdll.dll ntdll.dll/ -1 0 49 `
�� L�� - _RtlGetSuiteMask@0 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�"�% . _RtlGetSystemBootStatus@16 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L�� �' / _RtlGetSystemBootStatusEx@12 ntdll.dll
ntdll.dll/ -1 0 67 `
�� L�k�/ 0 _RtlGetSystemPreferredUILanguages@20 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L a7�% 1 _RtlGetSystemTimePrecise@0 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L�A%�# 2 _RtlGetThreadErrorMode@0 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L}��( 3 _RtlGetThreadLangIdByIndex@16 ntdll.dll ntdll.dll/ -1 0 67 `
�� LW���/ 4 _RtlGetThreadPreferredUILanguages@16 ntdll.dll
ntdll.dll/ -1 0 64 `
�� Lņ��, 5 _RtlGetThreadWorkOnBehalfTicket@8 ntdll.dll ntdll.dll/ -1 0 61 `
�� L�P��) 6 _RtlGetTokenNamedObjectPath@12 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L�p�# 7 _RtlGetUILanguageInfo@20 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L�(�$ 8 _RtlGetUnloadEventTrace@0 ntdll.dll ntdll.dll/ -1 0 59 `
�� L���' 9 _RtlGetUnloadEventTraceEx@12 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L�
��! : _RtlGetUserInfoHeap@20 ntdll.dll
ntdll.dll/ -1 0 65 `
�� L
l�- ; _RtlGetUserPreferredUILanguages@20 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L(ur� < _RtlGetVersion@4 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L����* = _RtlGuardCheckLongJumpTarget@12 ntdll.dll ntdll.dll/ -1 0 55 `
�� Lv�X�# > _RtlHashUnicodeString@16 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L^�3�" ? _RtlHeapTrkInitialize@4 ntdll.dll ntdll.dll/ -1 0 59 `
�� L�&��' @ _RtlIdentifierAuthoritySid@4 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L��� A _RtlIdnToAscii@20 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�3�& B _RtlIdnToNameprepUnicode@20 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�"�� C _RtlIdnToUnicode@20 ntdll.dll ntdll.dll/ -1 0 63 `
�� L�/�+ D _RtlImageDirectoryEntryToData@16 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L�>R� E _RtlImageNtHeader@4 ntdll.dll ntdll.dll/ -1 0 53 `
�� L�`�! F _RtlImageNtHeaderEx@20 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L�2=�# G _RtlImageRvaToSection@12 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L�X}� H _RtlImageRvaToVa@16 ntdll.dll ntdll.dll/ -1 0 52 `
�� Leƌ� I _RtlImpersonateSelf@4 ntdll.dll ntdll.dll/ -1 0 55 `
�� LD��# J _RtlImpersonateSelfEx@12 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L� �+ K _RtlIncrementCorrelationVector@4 ntdll.dll
ntdll.dll/ -1 0 51 `
�� La�M� L _RtlInitAnsiString@8 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L����! M _RtlInitAnsiStringEx@8 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L
Ԭ�" O _RtlInitCodePageTable@8 ntdll.dll ntdll.dll/ -1 0 61 `
�� L���) P _RtlInitEnumerationHashTable@8 ntdll.dll
ntdll.dll/ -1 0 51 `
�� Lp��� R _RtlInitNlsTables@16 ntdll.dll
ntdll.dll/ -1 0 47 `
�� Lˊ�� T _RtlInitString@8 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L�/A� U _RtlInitStringEx@8 ntdll.dll
ntdll.dll/ -1 0 67 `
�� L}?�/ V _RtlInitStrongEnumerationHashTable@8 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L¼I� W _RtlInitUTF8String@8 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L��v�! X _RtlInitUTF8StringEx@8 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L:�a�" Y _RtlInitUnicodeString@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� L��T�$ Z _RtlInitUnicodeStringEx@8 ntdll.dll ntdll.dll/ -1 0 65 `
�� LRMl�- [ _RtlInitWeakEnumerationHashTable@8 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L��i�& \ _RtlInitializeAtomPackage@4 ntdll.dll ntdll.dll/ -1 0 54 `
�� L*�1�" ] _RtlInitializeBitMap@12 ntdll.dll ntdll.dll/ -1 0 64 `
�� L�b�, ^ _RtlInitializeConditionVariable@4 ntdll.dll ntdll.dll/ -1 0 65 `
�� LO���- ` _RtlInitializeCorrelationVector@12 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L�'��* a _RtlInitializeCriticalSection@4 ntdll.dll ntdll.dll/ -1 0 74 `
�� L��&�6 b _RtlInitializeCriticalSectionAndSpinCount@8 ntdll.dll ntdll.dll/ -1 0 65 `
�� Leہ�- c _RtlInitializeCriticalSectionEx@12 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L���) d _RtlInitializeExceptionChain@4 ntdll.dll
ntdll.dll/ -1 0 64 `
�� Lq��, f _RtlInitializeExtendedContext2@20 ntdll.dll ntdll.dll/ -1 0 63 `
�� L���+ e _RtlInitializeExtendedContext@12 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L����( g _RtlInitializeGenericTable@20 ntdll.dll ntdll.dll/ -1 0 63 `
�� L%*��+ h _RtlInitializeGenericTableAvl@20 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L�>�' i _RtlInitializeHandleTable@12 ntdll.dll
ntdll.dll/ -1 0 53 `
�� Lf��! k _RtlInitializeRXact@12 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L��# l _RtlInitializeResource@4 ntdll.dll
ntdll.dll/ -1 0 56 `
�� LX��$ m _RtlInitializeSListHead@4 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�*��" n _RtlInitializeSRWLock@4 ntdll.dll ntdll.dll/ -1 0 51 `
�� L�ae� o _RtlInitializeSid@12 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L��� p _RtlInitializeSidEx ntdll.dll ntdll.dll/ -1 0 63 `
�� L!�j�+ q _RtlInsertElementGenericTable@16 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L"���. r _RtlInsertElementGenericTableAvl@16 ntdll.dll ntdll.dll/ -1 0 67 `
�� L_ ��/ s _RtlInsertElementGenericTableFull@24 ntdll.dll
ntdll.dll/ -1 0 70 `
�� LTZ0�2 t _RtlInsertElementGenericTableFullAvl@24 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�P]�& u _RtlInsertEntryHashTable@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�4��& v _RtlInt64ToUnicodeString@16 ntdll.dll ntdll.dll/ -1 0 51 `
�� L7c�� w _RtlIntegerToChar@16 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L�9��( x _RtlIntegerToUnicodeString@12 ntdll.dll ntdll.dll/ -1 0 60 `
�� L����( y _RtlInterlockedClearBitRun@12 ntdll.dll ntdll.dll/ -1 0 66 `
�� L}��. z _RtlInterlockedCompareExchange64@20 ntdll.dll ntdll.dll/ -1 0 58 `
�� L0/W�& { _RtlInterlockedFlushSList@4 ntdll.dll ntdll.dll/ -1 0 61 `
�� L� t�) | _RtlInterlockedPopEntrySList@4 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L��w�* } _RtlInterlockedPushEntrySList@8 ntdll.dll ntdll.dll/ -1 0 64 `
�� L ��, _RtlInterlockedPushListSListEx@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� Lk�P�& � _RtlInterlockedSetBitRun@12 ntdll.dll ntdll.dll/ -1 0 59 `
�� LW���' � _RtlIoDecodeMemIoResource@16 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L�[d�' � _RtlIoEncodeMemIoResource@40 ntdll.dll
ntdll.dll/ -1 0 57 `
�� LD�]�% � _RtlIpv4AddressToStringA@8 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L�o�( � _RtlIpv4AddressToStringExA@16 ntdll.dll ntdll.dll/ -1 0 60 `
�� L(d�( � _RtlIpv4AddressToStringExW@16 ntdll.dll ntdll.dll/ -1 0 57 `
�� Lvd �% � _RtlIpv4AddressToStringW@8 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L�y�& � _RtlIpv4StringToAddressA@16 ntdll.dll ntdll.dll/ -1 0 60 `
�� L� �( � _RtlIpv4StringToAddressExA@16 ntdll.dll ntdll.dll/ -1 0 60 `
�� L�0�( � _RtlIpv4StringToAddressExW@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� L��& � _RtlIpv4StringToAddressW@16 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�UY�% � _RtlIpv6AddressToStringA@8 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L��Z�( � _RtlIpv6AddressToStringExA@20 ntdll.dll ntdll.dll/ -1 0 60 `
�� L���( � _RtlIpv6AddressToStringExW@20 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�#��% � _RtlIpv6AddressToStringW@8 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L���& � _RtlIpv6StringToAddressA@12 ntdll.dll ntdll.dll/ -1 0 60 `
�� L��8�( � _RtlIpv6StringToAddressExA@16 ntdll.dll ntdll.dll/ -1 0 60 `
�� LL�
�( � _RtlIpv6StringToAddressExW@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� L=���& � _RtlIpv6StringToAddressW@12 ntdll.dll ntdll.dll/ -1 0 62 `
�� Lv��* � _RtlIsActivationContextActive@4 ntdll.dll ntdll.dll/ -1 0 52 `
�� L��� � _RtlIsCapabilitySid@4 ntdll.dll ntdll.dll/ -1 0 60 `
�� L���( � _RtlIsCloudFilesPlaceholder@8 ntdll.dll ntdll.dll/ -1 0 60 `
�� Lv D�( � _RtlIsCriticalSectionLocked@4 ntdll.dll ntdll.dll/ -1 0 68 `
�� LdC<�0 � _RtlIsCriticalSectionLockedByThread@4 ntdll.dll ntdll.dll/ -1 0 53 `
�� L�"��! � _RtlIsCurrentProcess@4 ntdll.dll
ntdll.dll/ -1 0 52 `
�� Lc�z� � _RtlIsCurrentThread@4 ntdll.dll ntdll.dll/ -1 0 54 `
�� L��" � _RtlIsDosDeviceName_U@4 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�B{� � _RtlIsElevatedRid@4 ntdll.dll ntdll.dll/ -1 0 56 `
�� L�a��$ � _RtlIsGenericTableEmpty@4 ntdll.dll ntdll.dll/ -1 0 59 `
�� L�l��' � _RtlIsGenericTableEmptyAvl@4 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L[J(�" � _RtlIsMultiSessionSku@0 ntdll.dll ntdll.dll/ -1 0 61 `
�� L% ��) � _RtlIsMultiUsersInSessionSku@0 ntdll.dll
ntdll.dll/ -1 0 56 `
�� LpKC�$ � _RtlIsNameInExpression@16 ntdll.dll ntdll.dll/ -1 0 65 `
�� LV!�- � _RtlIsNameInUnUpcasedExpression@16 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�Ϩ�% � _RtlIsNameLegalDOS8Dot3@12 ntdll.dll
ntdll.dll/ -1 0 75 `
�� L����7 � _RtlIsNonEmptyDirectoryReparsePointAllowed@4 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L���$ � _RtlIsNormalizedString@16 ntdll.dll ntdll.dll/ -1 0 49 `
�� L���� � _RtlIsPackageSid@4 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L�Q��, � _RtlIsParentOfChildAppContainer@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� LVJ�% � _RtlIsPartialPlaceholder@8 ntdll.dll
ntdll.dll/ -1 0 67 `
�� Lrx�/ � _RtlIsPartialPlaceholderFileHandle@8 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L ��. � _RtlIsPartialPlaceholderFileInfo@12 ntdll.dll ntdll.dll/ -1 0 62 `
�� LU��* � _RtlIsProcessorFeaturePresent@4 ntdll.dll ntdll.dll/ -1 0 61 `
�� L��h�) � _RtlIsStateSeparationEnabled@0 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L���� � _RtlIsTextUnicode@12 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L�
��, � _RtlIsThreadWithinLoaderCallout@0 ntdll.dll ntdll.dll/ -1 0 55 `
�� L�O.�# � _RtlIsUntrustedObject@12 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L،E� � _RtlIsValidHandle@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� L�Y�$ � _RtlIsValidIndexHandle@12 ntdll.dll ntdll.dll/ -1 0 54 `
�� L �;�" � _RtlIsValidLocaleName@8 ntdll.dll ntdll.dll/ -1 0 64 `
�� L�g��, � _RtlIsValidProcessTrustLabelSid@4 ntdll.dll ntdll.dll/ -1 0 49 `
�� LJ��� � _RtlIsZeroMemory@8 ntdll.dll
ntdll.dll/ -1 0 57 `
�� LQݔ�% � _RtlKnownExceptionFilter@4 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L��" � _RtlLCIDToCultureName@8 ntdll.dll ntdll.dll/ -1 0 53 `
�� L�_k�! � _RtlLargeIntegerAdd@16 ntdll.dll
ntdll.dll/ -1 0 65 `
�� L�3 �- � _RtlLargeIntegerArithmeticShift@12 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L|��$ � _RtlLargeIntegerDivide@20 ntdll.dll ntdll.dll/ -1 0 55 `
�� L<$��# � _RtlLargeIntegerNegate@8 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L�ؙ�' � _RtlLargeIntegerShiftLeft@12 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L0="�( � _RtlLargeIntegerShiftRight@12 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�}��& � _RtlLargeIntegerSubtract@16 ntdll.dll ntdll.dll/ -1 0 56 `
�� L=< �$ � _RtlLargeIntegerToChar@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� L �`�" � _RtlLcidToLocaleName@16 ntdll.dll ntdll.dll/ -1 0 57 `
�� L���% � _RtlLeaveCriticalSection@4 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L��" � _RtlLengthRequiredSid@4 ntdll.dll ntdll.dll/ -1 0 61 `
�� L�Z��) � _RtlLengthSecurityDescriptor@4 ntdll.dll
ntdll.dll/ -1 0 46 `
�� LJ&F� � _RtlLengthSid@4 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�$�& � _RtlLocalTimeToSystemTime@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�%�" � _RtlLocaleNameToLcid@12 ntdll.dll ntdll.dll/ -1 0 60 `
�� L����( � _RtlLocateExtendedFeature2@16 ntdll.dll ntdll.dll/ -1 0 59 `
�� L�bl�' � _RtlLocateExtendedFeature@12 ntdll.dll
ntdll.dll/ -1 0 56 `
�� LV >�$ � _RtlLocateLegacyContext@8 ntdll.dll ntdll.dll/ -1 0 55 `
�� L�y��# � _RtlLockBootStatusData@4 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L :�" � _RtlLockCurrentThread@0 ntdll.dll ntdll.dll/ -1 0 45 `
�� L3Cl� � _RtlLockHeap@4 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L�|��) � _RtlLockMemoryBlockLookaside@4 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L�d�� � _RtlLockMemoryZone@4 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L���" � _RtlLockModuleSection@4 ntdll.dll ntdll.dll/ -1 0 54 `
�� Lr��" � _RtlLogStackBackTrace@0 ntdll.dll ntdll.dll/ -1 0 59 `
�� LY�d�' � _RtlLookupAtomInAtomTable@12 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L�h��* � _RtlLookupElementGenericTable@8 ntdll.dll ntdll.dll/ -1 0 65 `
�� L\Ŏ�- � _RtlLookupElementGenericTableAvl@8 ntdll.dll
ntdll.dll/ -1 0 67 `
�� L?'�/ � _RtlLookupElementGenericTableFull@16 ntdll.dll
ntdll.dll/ -1 0 70 `
�� L�2 � _RtlLookupElementGenericTableFullAvl@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� L8���& � _RtlLookupEntryHashTable@12 ntdll.dll ntdll.dll/ -1 0 79 `
�� L���; � _RtlLookupFirstMatchingElementGenericTableAvl@12 ntdll.dll
ntdll.dll/ -1 0 56 `
�� LtiC�$ � _RtlMakeSelfRelativeSD@12 ntdll.dll ntdll.dll/ -1 0 51 `
�� L��� � _RtlMapGenericMask@8 ntdll.dll
ntdll.dll/ -1 0 63 `
�� LC(c�+ � _RtlMapSecurityErrorToNtStatus@4 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L��p� � _RtlMoveMemory@12 ntdll.dll ntdll.dll/ -1 0 68 `
�� L ���0 � _RtlMultiAppendUnicodeStringBuffer@12 ntdll.dll ntdll.dll/ -1 0 57 `
�� L?��% � _RtlMultiByteToUnicodeN@20 ntdll.dll
ntdll.dll/ -1 0 60 `
�� Le��( � _RtlMultiByteToUnicodeSize@12 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�qh�& � _RtlMultipleAllocateHeap@20 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�P��" � _RtlMultipleFreeHeap@16 ntdll.dll ntdll.dll/ -1 0 63 `
�� LBǕ�+ � _RtlNewInstanceSecurityObject@40 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L�#�* � _RtlNewSecurityGrantedAccess@24 ntdll.dll ntdll.dll/ -1 0 55 `
�� L���# � _RtlNewSecurityObject@24 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L��% � _RtlNewSecurityObjectEx@32 ntdll.dll
ntdll.dll/ -1 0 78 `
�� L<�:�: � _RtlNewSecurityObjectWithMultipleInheritance@36 ntdll.dll ntdll.dll/ -1 0 59 `
�� LӞy�' � _RtlNormalizeProcessParams@4 ntdll.dll
ntdll.dll/ -1 0 65 `
�� L���- � _RtlNormalizeSecurityDescriptor@20 ntdll.dll
ntdll.dll/ -1 0 53 `
�� LZ�8�! � _RtlNormalizeString@20 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L���# � _RtlNotifyFeatureUsage@4 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L���) � _RtlNtPathNameToDosPathName@16 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L����# � _RtlNtStatusToDosError@4 ntdll.dll
ntdll.dll/ -1 0 60 `
�� Lh��( � _RtlNtStatusToDosErrorNoTeb@4 ntdll.dll ntdll.dll/ -1 0 63 `
�� Lf���+ � _RtlNumberGenericTableElements@4 ntdll.dll
ntdll.dll/ -1 0 66 `
�� Lt���. � _RtlNumberGenericTableElementsAvl@4 ntdll.dll ntdll.dll/ -1 0 54 `
�� Lt
��" � _RtlNumberOfClearBits@4 ntdll.dll ntdll.dll/ -1 0 62 `
�� L�?
�* � _RtlNumberOfClearBitsInRange@12 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�d� � _RtlNumberOfSetBits@4 ntdll.dll ntdll.dll/ -1 0 60 `
�� L�p��( � _RtlNumberOfSetBitsInRange@12 ntdll.dll ntdll.dll/ -1 0 60 `
�� L@��( � _RtlNumberOfSetBitsUlongPtr@4 ntdll.dll ntdll.dll/ -1 0 59 `
�� L��J�' � _RtlOemStringToUnicodeSize@4 ntdll.dll
ntdll.dll/ -1 0 62 `
�� LfH<�* � _RtlOemStringToUnicodeString@12 ntdll.dll ntdll.dll/ -1 0 51 `
�� L۩g� � _RtlOemToUnicodeN@20 ntdll.dll
ntdll.dll/ -1 0 52 `
�� Lf)� � _RtlOpenCurrentUser@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�}��" � _RtlOsDeploymentState@4 ntdll.dll ntdll.dll/ -1 0 53 `
�� L����! � _RtlOwnerAcesPresent@4 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L1�� � _RtlPcToFileHeader@8 ntdll.dll
ntdll.dll/ -1 0 55 `
�� LS]��# � _RtlPinAtomInAtomTable@8 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L��� � _RtlPopFrame@4 ntdll.dll
ntdll.dll/ -1 0 50 `
�� Lh{g� � _RtlPrefixString@12 ntdll.dll ntdll.dll/ -1 0 57 `
�� L+���% _RtlPrefixUnicodeString@12 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L��� _RtlProcessFlsData@8 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L��b�% _RtlPublishWnfStateData@24 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L�&� _RtlPushFrame@4 ntdll.dll ntdll.dll/ -1 0 79 `
�� L~G��; _RtlQueryActivationContextApplicationSettings@28 ntdll.dll
ntdll.dll/ -1 0 67 `
�� L��/ _RtlQueryAllFeatureConfigurations@16 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L� �& _RtlQueryAtomInAtomTable@24 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�8�� _RtlQueryDepthSList@4 ntdll.dll ntdll.dll/ -1 0 68 `
�� L�I��0
_RtlQueryDynamicTimeZoneInformation@4 ntdll.dll ntdll.dll/ -1 0 56 `
�� Lr F�$ _RtlQueryElevationFlags@4 ntdll.dll ntdll.dll/ -1 0 62 `
�� LJ���* _RtlQueryEnvironmentVariable@24 ntdll.dll ntdll.dll/ -1 0 64 `
�� L��,
_RtlQueryEnvironmentVariable_U@12 ntdll.dll ntdll.dll/ -1 0 63 `
�� L���+ _RtlQueryFeatureConfiguration@16 ntdll.dll
ntdll.dll/ -1 0 73 `
�� L�E�5 _RtlQueryFeatureConfigurationChangeStamp@0 ntdll.dll
ntdll.dll/ -1 0 79 `
�� LȎ��; _RtlQueryFeatureUsageNotificationSubscriptions@8 ntdll.dll
ntdll.dll/ -1 0 58 `
�� LNܠ�& _RtlQueryHeapInformation@20 ntdll.dll ntdll.dll/ -1 0 64 `
�� L�o��, _RtlQueryImageMitigationPolicy@20 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�Ǜ�% _RtlQueryInformationAcl@16 ntdll.dll
ntdll.dll/ -1 0 71 `
�� Lb�k�3 _RtlQueryInformationActivationContext@28 ntdll.dll
ntdll.dll/ -1 0 77 `
�� L��r�9 _RtlQueryInformationActiveActivationContext@16 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L�C%�$ _RtlQueryPackageClaims@32 ntdll.dll ntdll.dll/ -1 0 58 `
�� L���& _RtlQueryPackageIdentity@24 ntdll.dll ntdll.dll/ -1 0 60 `
�� L�le�( _RtlQueryPackageIdentityEx@28 ntdll.dll ntdll.dll/ -1 0 60 `
�� Lz��( _RtlQueryPerformanceCounter@4 ntdll.dll ntdll.dll/ -1 0 62 `
�� L<��* _RtlQueryPerformanceFrequency@4 ntdll.dll ntdll.dll/ -1 0 69 `
�� L����1 _RtlQueryProcessBackTraceInformation@4 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L�Ly�. _RtlQueryProcessDebugInformation@12 ntdll.dll ntdll.dll/ -1 0 64 `
�� L�ė�, _RtlQueryProcessLockInformation@4 ntdll.dll ntdll.dll/ -1 0 77 `
�� L|���9 ! _RtlQueryProcessPlaceholderCompatibilityMode@0 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�j��% " _RtlQueryProtectedPolicy@8 ntdll.dll
ntdll.dll/ -1 0 68 `
�� L�%��0 # _RtlQueryRegistryValueWithFallback@28 ntdll.dll ntdll.dll/ -1 0 57 `
�� LEb�% $ _RtlQueryRegistryValues@20 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L}���' % _RtlQueryRegistryValuesEx@20 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L��*�% ' _RtlQuerySecurityObject@20 ntdll.dll
ntdll.dll/ -1 0 76 `
�� L"��8 ) _RtlQueryThreadPlaceholderCompatibilityMode@0 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�' �% * _RtlQueryThreadProfiling@8 ntdll.dll
ntdll.dll/ -1 0 61 `
�� LK��) + _RtlQueryTimeZoneInformation@4 ntdll.dll
ntdll.dll/ -1 0 62 `
�� Lj�A�* , _RtlQueryTokenHostIdAsUlong64@8 ntdll.dll ntdll.dll/ -1 0 63 `
�� LH��+ - _RtlQueryUnbiasedInterruptTime@4 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L��( . _RtlQueryValidationRunlevel@4 ntdll.dll ntdll.dll/ -1 0 62 `
�� L�h�* / _RtlQueryWnfMetaNotification@20 ntdll.dll ntdll.dll/ -1 0 55 `
�� L~ �# 0 _RtlQueryWnfStateData@24 ntdll.dll
ntdll.dll/ -1 0 72 `
�� L� S�4 1 _RtlQueryWnfStateDataWithExplicitScope@28 ntdll.dll ntdll.dll/ -1 0 57 `
�� L㵩�% 2 _RtlQueueApcWow64Thread@20 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L퓒� 3 _RtlQueueWorkItem@12 ntdll.dll
ntdll.dll/ -1 0 66 `
�� Lc4Z�. 4 _RtlRaiseCustomSystemEventTrigger@4 ntdll.dll ntdll.dll/ -1 0 51 `
�� L(;�� 5 _RtlRaiseException@4 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L%
� 6 _RtlRaiseStatus@4 ntdll.dll ntdll.dll/ -1 0 43 `
�� L�� 7 _RtlRandom@4 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L���� 8 _RtlRandomEx@4 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L8Z�� 9 _RtlRbInsertNodeEx@16 ntdll.dll ntdll.dll/ -1 0 49 `
�� LS�]� : _RtlRbRemoveNode@8 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L�/(� ; _RtlReAllocateHeap@16 ntdll.dll ntdll.dll/ -1 0 61 `
�� L�p�) > _RtlReadThreadProfilingData@12 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L��� ? _RtlRealPredecessor@4 ntdll.dll ntdll.dll/ -1 0 50 `
�� L���� @ _RtlRealSuccessor@4 ntdll.dll ntdll.dll/ -1 0 84 `
�� L
�r�@ A _RtlRegisterFeatureConfigurationChangeNotification@16 ntdll.dll ntdll.dll/ -1 0 68 `
�� L�M�0 B _RtlRegisterForWnfMetaNotification@24 ntdll.dll ntdll.dll/ -1 0 70 `
�� Lj=_�2 C _RtlRegisterSecureMemoryCacheCallback@4 ntdll.dll ntdll.dll/ -1 0 60 `
�� L�7��( D _RtlRegisterThreadWithCsrss@0 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�lO� E _RtlRegisterWait@24 ntdll.dll ntdll.dll/ -1 0 61 `
�� L��) F _RtlReleaseActivationContext@4 ntdll.dll
ntdll.dll/ -1 0 48 `
�� LY P� H _RtlReleasePath@4 ntdll.dll ntdll.dll/ -1 0 51 `
�� L]�(� I _RtlReleasePebLock@0 ntdll.dll
ntdll.dll/ -1 0 53 `
�� LV���! J _RtlReleasePrivilege@4 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L�g��$ K _RtlReleaseRelativeName@4 ntdll.dll ntdll.dll/ -1 0 52 `
�� L � L _RtlReleaseResource@4 ntdll.dll ntdll.dll/ -1 0 60 `
�� LD���( M _RtlReleaseSRWLockExclusive@4 ntdll.dll ntdll.dll/ -1 0 57 `
�� L_߇�% N _RtlReleaseSRWLockShared@4 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L�Y� O _RtlRemoteCall@28 ntdll.dll ntdll.dll/ -1 0 58 `
�� Le:��& P _RtlRemoveEntryHashTable@12 ntdll.dll ntdll.dll/ -1 0 54 `
�� L{p��" Q _RtlRemovePrivileges@12 ntdll.dll ntdll.dll/ -1 0 66 `
�� L�Wc�. R _RtlRemoveVectoredContinueHandler@4 ntdll.dll ntdll.dll/ -1 0 67 `
�� LE�~�/ S _RtlRemoveVectoredExceptionHandler@4 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L�]u� T _RtlReplaceSidInSd@16 ntdll.dll ntdll.dll/ -1 0 66 `
�� L��r�. U _RtlReplaceSystemDirectoryInPath@16 ntdll.dll ntdll.dll/ -1 0 53 `
�� LD�! V _RtlReportException@12 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L��t�# W _RtlReportExceptionEx@20 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L���( X _RtlReportSilentProcessExit@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�2��% Y _RtlReportSqmEscalation@24 ntdll.dll
ntdll.dll/ -1 0 62 `
�� LF�"�* Z _RtlResetMemoryBlockLookaside@4 ntdll.dll ntdll.dll/ -1 0 57 `
�� L ��% ] _RtlResetRtlTranslations@4 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L��(�* ^ _RtlRestoreBootStatusDefaults@4 ntdll.dll ntdll.dll/ -1 0 58 `
�� L;�& _ _RtlRestoreLastWin32Error@4 ntdll.dll ntdll.dll/ -1 0 68 `
�� L�i�0 ` _RtlRestoreSystemBootStatusDefaults@0 ntdll.dll ntdll.dll/ -1 0 70 `
�� L] (�2 a _RtlRestoreThreadPreferredUILanguages@4 ntdll.dll ntdll.dll/ -1 0 59 `
�� L+�4�' d _RtlRunDecodeUnicodeString@8 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L� ��' e _RtlRunEncodeUnicodeString@8 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L��( f _RtlRunOnceBeginInitialize@12 ntdll.dll ntdll.dll/ -1 0 53 `
�� L�xE�! g _RtlRunOnceComplete@12 ntdll.dll
ntdll.dll/ -1 0 56 `
�� Lq���$ h _RtlRunOnceExecuteOnce@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� L �+�" i _RtlRunOnceInitialize@4 ntdll.dll ntdll.dll/ -1 0 59 `
�� LM�C�' j _RtlSecondsSince1970ToTime@8 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L���' k _RtlSecondsSince1980ToTime@8 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L��U�* n _RtlSelfRelativeToAbsoluteSD2@8 ntdll.dll ntdll.dll/ -1 0 62 `
�� LY�k�* m _RtlSelfRelativeToAbsoluteSD@44 ntdll.dll ntdll.dll/ -1 0 48 `
�� L+`�� o _RtlSendMsgToSm@8 ntdll.dll ntdll.dll/ -1 0 47 `
�� L[��� p _RtlSetAllBits@4 ntdll.dll
ntdll.dll/ -1 0 43 `
�� L}��� r _RtlSetBit@8 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L���� s _RtlSetBits@12 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L�vi�. t _RtlSetControlSecurityDescriptor@12 ntdll.dll ntdll.dll/ -1 0 64 `
�� Lۺ�, u _RtlSetCriticalSectionSpinCount@8 ntdll.dll ntdll.dll/ -1 0 58 `
�� L��K�& v _RtlSetCurrentDirectory_U@4 ntdll.dll ntdll.dll/ -1 0 58 `
�� Lz�G�& w _RtlSetCurrentEnvironment@8 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�A�& x _RtlSetCurrentTransaction@4 ntdll.dll ntdll.dll/ -1 0 63 `
�� L��D�+ y _RtlSetDaclSecurityDescriptor@16 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L�11�. z _RtlSetDynamicTimeZoneInformation@4 ntdll.dll ntdll.dll/ -1 0 58 `
�� L���& { _RtlSetEnvironmentStrings@8 ntdll.dll ntdll.dll/ -1 0 55 `
�� L����# | _RtlSetEnvironmentVar@20 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L�Iz�( } _RtlSetEnvironmentVariable@12 ntdll.dll ntdll.dll/ -1 0 61 `
�� L=Q5�) ~ _RtlSetExtendedFeaturesMask@12 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L�� �* _RtlSetFeatureConfigurations@16 ntdll.dll ntdll.dll/ -1 0 64 `
�� L;J��, � _RtlSetGroupSecurityDescriptor@12 ntdll.dll ntdll.dll/ -1 0 56 `
�� L��Y�$ � _RtlSetHeapInformation@16 ntdll.dll ntdll.dll/ -1 0 62 `
�� L�Z��* � _RtlSetImageMitigationPolicy@20 ntdll.dll ntdll.dll/ -1 0 55 `
�� L����# � _RtlSetInformationAcl@16 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L����) � _RtlSetIoCompletionCallback@12 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L����" � _RtlSetLastWin32Error@4 ntdll.dll ntdll.dll/ -1 0 77 `
�� L���9 � _RtlSetLastWin32ErrorAndNtStatusFromNtStatus@4 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L]�w�, � _RtlSetOwnerSecurityDescriptor@12 ntdll.dll ntdll.dll/ -1 0 63 `
�� L��+ � _RtlSetPortableOperatingSystem@4 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L#_�, � _RtlSetProcessDebugInformation@12 ntdll.dll ntdll.dll/ -1 0 55 `
�� L��R�# � _RtlSetProcessIsCritical ntdll.dll
ntdll.dll/ -1 0 75 `
�� L|�{�7 � _RtlSetProcessPlaceholderCompatibilityMode@4 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L��]�$ � _RtlSetProtectedPolicy@12 ntdll.dll ntdll.dll/ -1 0 56 `
�� L�=A�$ � _RtlSetProxiedProcessId@4 ntdll.dll ntdll.dll/ -1 0 63 `
�� L\<I�+ � _RtlSetSaclSecurityDescriptor@16 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�� �" � _RtlSetSearchPathMode@4 ntdll.dll ntdll.dll/ -1 0 67 `
�� Lu��/ � _RtlSetSecurityDescriptorRMControl@8 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L����# � _RtlSetSecurityObject@20 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�:s�% � _RtlSetSecurityObjectEx@24 ntdll.dll
ntdll.dll/ -1 0 57 `
�� LLR��% � _RtlSetSystemBootStatus@16 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L����' � _RtlSetSystemBootStatusEx@12 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L'
?�# � _RtlSetThreadErrorMode@8 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�g��" � _RtlSetThreadIsCritical ntdll.dll ntdll.dll/ -1 0 74 `
�� L���6 � _RtlSetThreadPlaceholderCompatibilityMode@4 ntdll.dll ntdll.dll/ -1 0 59 `
�� L# �' � _RtlSetThreadPoolStartFunc@8 ntdll.dll
ntdll.dll/ -1 0 68 `
�� L�i��0 � _RtlSetThreadPreferredUILanguages2@16 ntdll.dll ntdll.dll/ -1 0 67 `
�� LD���/ � _RtlSetThreadPreferredUILanguages@12 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L�o�' � _RtlSetThreadSubProcessTag@4 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L�U=�, � _RtlSetThreadWorkOnBehalfTicket@4 ntdll.dll ntdll.dll/ -1 0 59 `
�� Li�Z�' � _RtlSetTimeZoneInformation@4 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L�8�� � _RtlSetTimer@28 ntdll.dll ntdll.dll/ -1 0 64 `
�� LJ*��, � _RtlSetUnhandledExceptionFilter@4 ntdll.dll ntdll.dll/ -1 0 54 `
�� L7#��" � _RtlSetUserFlagsHeap@20 ntdll.dll ntdll.dll/ -1 0 54 `
�� L��z�" � _RtlSetUserValueHeap@16 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�e�� � _RtlSidDominates@12 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�$a�& � _RtlSidDominatesForTrust@12 ntdll.dll ntdll.dll/ -1 0 51 `
�� L�bN� � _RtlSidEqualLevel@12 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L�5��# � _RtlSidHashInitialize@12 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L@U�� � _RtlSidHashLookup@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� L#�F�" � _RtlSidIsHigherLevel@12 ntdll.dll ntdll.dll/ -1 0 46 `
�� L�� � _RtlSizeHeap@12 ntdll.dll ntdll.dll/ -1 0 62 `
�� Lc��* � _RtlSleepConditionVariableCS@12 ntdll.dll ntdll.dll/ -1 0 63 `
�� L��+ � _RtlSleepConditionVariableSRW@16 ntdll.dll
ntdll.dll/ -1 0 42 `
�� L`}e� � _RtlSplay@4 ntdll.dll ntdll.dll/ -1 0 47 `
�� L�q� � _RtlStartRXact@4 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L] �� � _RtlStringFromGUID@8 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L��" � _RtlStringFromGUIDEx@12 ntdll.dll ntdll.dll/ -1 0 68 `
�� L����0 � _RtlStronglyEnumerateEntryHashTable@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� L8B��% � _RtlSubAuthorityCountSid@4 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L� � � _RtlSubAuthoritySid@8 ntdll.dll ntdll.dll/ -1 0 73 `
�� L`L�5 � _RtlSubscribeForFeatureUsageNotification@8 ntdll.dll
ntdll.dll/ -1 0 73 `
�� L{�5 � _RtlSubscribeWnfStateChangeNotification@36 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L2��# � _RtlSubtreePredecessor@4 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L̝��! � _RtlSubtreeSuccessor@4 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L�M� � _RtlSwitchedVVI@16 ntdll.dll
ntdll.dll/ -1 0 58 `
�� LP���& � _RtlSystemTimeToLocalTime@8 ntdll.dll ntdll.dll/ -1 0 64 `
�� L�� �, � _RtlTestAndPublishWnfStateData@28 ntdll.dll ntdll.dll/ -1 0 44 `
�� L�Y� � _RtlTestBit@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� L��$ � _RtlTestProtectedAccess@8 ntdll.dll ntdll.dll/ -1 0 53 `
�� L��#�! � _RtlTimeFieldsToTime@8 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L�( � _RtlTimeToElapsedTimeFields@8 ntdll.dll ntdll.dll/ -1 0 59 `
�� L��' � _RtlTimeToSecondsSince1970@8 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L('�' � _RtlTimeToSecondsSince1980@8 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L�)��! � _RtlTimeToTimeFields@8 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�W��" � _RtlTraceDatabaseAdd@16 ntdll.dll ntdll.dll/ -1 0 57 `
�� LD��% � _RtlTraceDatabaseCreate@20 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L����% � _RtlTraceDatabaseDestroy@4 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L�{��( � _RtlTraceDatabaseEnumerate@12 ntdll.dll ntdll.dll/ -1 0 55 `
�� L�u��# � _RtlTraceDatabaseFind@16 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L\� �" � _RtlTraceDatabaseLock@4 ntdll.dll ntdll.dll/ -1 0 56 `
�� L�?��$ � _RtlTraceDatabaseUnlock@4 ntdll.dll ntdll.dll/ -1 0 58 `
�� L 8k�& � _RtlTraceDatabaseValidate@4 ntdll.dll ntdll.dll/ -1 0 54 `
�� Lƚ��" � _RtlTryAcquirePebLock@0 ntdll.dll ntdll.dll/ -1 0 63 `
�� L7 ��+ � _RtlTryAcquireSRWLockExclusive@4 ntdll.dll
ntdll.dll/ -1 0 60 `
�� LSU��( � _RtlTryAcquireSRWLockShared@4 ntdll.dll ntdll.dll/ -1 0 80 `
�� L�tp�< � _RtlTryConvertSRWLockSharedToExclusiveOrRelease@4 ntdll.dll ntdll.dll/ -1 0 60 `
�� L"� �( � _RtlTryEnterCriticalSection@4 ntdll.dll ntdll.dll/ -1 0 63 `
�� L�G��+ � _RtlUTF8StringToUnicodeString@12 ntdll.dll
ntdll.dll/ -1 0 52 `
�� Lg�&� � _RtlUTF8ToUnicodeN@20 ntdll.dll ntdll.dll/ -1 0 62 `
�� Lh��* � _RtlUnhandledExceptionFilter2@8 ntdll.dll ntdll.dll/ -1 0 61 `
�� L�h2�) � _RtlUnhandledExceptionFilter@4 ntdll.dll
ntdll.dll/ -1 0 60 `
�� Lv�5�( � _RtlUnicodeStringToAnsiSize@4 ntdll.dll ntdll.dll/ -1 0 63 `
�� L,���+ � _RtlUnicodeStringToAnsiString@12 ntdll.dll
ntdll.dll/ -1 0 69 `
�� L���1 � _RtlUnicodeStringToCountedOemString@12 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L�}o�( � _RtlUnicodeStringToInteger@12 ntdll.dll ntdll.dll/ -1 0 59 `
�� L���' � _RtlUnicodeStringToOemSize@4 ntdll.dll
ntdll.dll/ -1 0 62 `
�� Lbf�* � _RtlUnicodeStringToOemString@12 ntdll.dll ntdll.dll/ -1 0 63 `
�� L�ύ�+ � _RtlUnicodeStringToUTF8String@12 ntdll.dll
ntdll.dll/ -1 0 56 `
�� Lu<��$ � _RtlUnicodeToCustomCPN@24 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�R�% � _RtlUnicodeToMultiByteN@20 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L��;�( � _RtlUnicodeToMultiByteSize@12 ntdll.dll ntdll.dll/ -1 0 51 `
�� LΊ� � _RtlUnicodeToOemN@20 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L&�a� � _RtlUnicodeToUTF8N@20 ntdll.dll ntdll.dll/ -1 0 44 `
�� L=+� � _RtlUniform@4 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�Dz�% � _RtlUnlockBootStatusData@4 ntdll.dll
ntdll.dll/ -1 0 56 `
�� Lq~
�$ � _RtlUnlockCurrentThread@0 ntdll.dll ntdll.dll/ -1 0 47 `
�� Lt��� � _RtlUnlockHeap@4 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L���+ � _RtlUnlockMemoryBlockLookaside@4 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L^���! � _RtlUnlockMemoryZone@4 ntdll.dll
ntdll.dll/ -1 0 56 `
�� LU�Q�$ � _RtlUnlockModuleSection@4 ntdll.dll ntdll.dll/ -1 0 85 `
�� Lt��A � _RtlUnregisterFeatureConfigurationChangeNotification@4 ntdll.dll
ntdll.dll/ -1 0 77 `
�� L�@�9 � _RtlUnsubscribeFromFeatureUsageNotifications@8 ntdll.dll
ntdll.dll/ -1 0 80 `
�� L?���< � _RtlUnsubscribeWnfNotificationWaitForCompletion@4 ntdll.dll ntdll.dll/ -1 0 86 `
�� L��B � _RtlUnsubscribeWnfNotificationWithCompletionCallback@12 ntdll.dll ntdll.dll/ -1 0 74 `
�� Lퟜ�6 � _RtlUnsubscribeWnfStateChangeNotification@4 ntdll.dll ntdll.dll/ -1 0 44 `
�� L2P� � _RtlUnwind@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� L1��" � _RtlUpcaseUnicodeChar@4 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�� �% � _RtlUpcaseUnicodeString@12 ntdll.dll
ntdll.dll/ -1 0 75 `
�� L�7 � _RtlUpcaseUnicodeStringToCountedOemString@12 ntdll.dll
ntdll.dll/ -1 0 68 `
�� L�% �0 � _RtlUpcaseUnicodeStringToOemString@12 ntdll.dll ntdll.dll/ -1 0 62 `
�� L� ��* � _RtlUpcaseUnicodeToCustomCPN@24 ntdll.dll ntdll.dll/ -1 0 63 `
�� L���+ � _RtlUpcaseUnicodeToMultiByteN@20 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L*h��% � _RtlUpcaseUnicodeToOemN@20 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L�c�, � _RtlUpdateClonedCriticalSection@4 ntdll.dll ntdll.dll/ -1 0 56 `
�� LeJ�$ � _RtlUpdateClonedSRWLock@8 ntdll.dll ntdll.dll/ -1 0 49 `
�� L~�� � _RtlUpdateTimer@16 ntdll.dll
ntdll.dll/ -1 0 46 `
�� LD~�� � _RtlUpperChar@4 ntdll.dll ntdll.dll/ -1 0 48 `
�� L8ɫ� � _RtlUpperString@8 ntdll.dll ntdll.dll/ -1 0 45 `
�� L:z
� _RtlValidAcl@4 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L��-�' _RtlValidProcessProtection@4 ntdll.dll
ntdll.dll/ -1 0 69 `
�� L�\n�1 _RtlValidRelativeSecurityDescriptor@12 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L� P�( _RtlValidSecurityDescriptor@4 ntdll.dll ntdll.dll/ -1 0 45 `
�� L��� _RtlValidSid@4 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L��7�* _RtlValidateCorrelationVector@4 ntdll.dll ntdll.dll/ -1 0 50 `
�� L �� _RtlValidateHeap@12 ntdll.dll ntdll.dll/ -1 0 57 `
�� L8r0�% _RtlValidateProcessHeaps@0 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L#��& _RtlValidateUnicodeString@8 ntdll.dll ntdll.dll/ -1 0 55 `
�� L2�d�#
_RtlVerifyVersionInfo@16 ntdll.dll
ntdll.dll/ -1 0 64 `
�� LSN`�, _RtlWaitForWnfMetaNotification@24 ntdll.dll ntdll.dll/ -1 0 51 `
�� L5�v� _RtlWaitOnAddress@16 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L}�
_RtlWakeAddressAll@4 ntdll.dll
ntdll.dll/ -1 0 58 `
�� Ls�& _RtlWakeAddressAllNoFence@4 ntdll.dll ntdll.dll/ -1 0 54 `
�� Lm1�" _RtlWakeAddressSingle@4 ntdll.dll ntdll.dll/ -1 0 61 `
�� LGW��) _RtlWakeAddressSingleNoFence@4 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L ���) _RtlWakeAllConditionVariable@4 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L�\ �& _RtlWakeConditionVariable@4 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�f�� _RtlWalkFrameChain@12 ntdll.dll ntdll.dll/ -1 0 45 `
�� L�t�� _RtlWalkHeap@8 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L�0�. _RtlWeaklyEnumerateEntryHashTable@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� L���% _RtlWerpReportException@24 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L/�>�& _RtlWnfCompareChangeStamp@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� L���% _RtlWnfDllUnloadCallback@4 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L!���% _RtlWow64CallFunction64@28 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L�,�) _RtlWow64EnableFsRedirection@4 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L3��+ _RtlWow64EnableFsRedirectionEx@8 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L�'0�' _RtlWow64GetCurrentMachine@0 ntdll.dll
ntdll.dll/ -1 0 66 `
�� LM@n�. _RtlWow64GetEquivalentMachineCHPE@4 ntdll.dll ntdll.dll/ -1 0 61 `
�� L ݃�) _RtlWow64GetProcessMachines@12 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L�p(�+ _RtlWow64GetSharedInfoProcess@12 ntdll.dll
ntdll.dll/ -1 0 68 `
�� Lx��0 _RtlWow64IsWowGuestMachineSupported@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� Lw��$ " _RtlWriteRegistryValue@24 ntdll.dll ntdll.dll/ -1 0 47 `
�� L�� � $ _RtlZeroMemory@8 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L����) % _RtlZombifyActivationContext@4 ntdll.dll
ntdll.dll/ -1 0 58 `
�� LDO�& & _RtlpApplyLengthFunction@16 ntdll.dll ntdll.dll/ -1 0 69 `
�� L����1 ' _RtlpCheckDynamicTimeZoneInformation@8 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�QY�% ( _RtlpCleanupRegistryKeys@0 ntdll.dll
ntdll.dll/ -1 0 81 `
�� L�r�= ) _RtlpConvertAbsoluteToRelativeSecurityAttribute@12 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L ���, * _RtlpConvertCultureNamesToLCIDs@8 ntdll.dll ntdll.dll/ -1 0 64 `
�� L�j��, + _RtlpConvertLCIDsToCultureNames@8 ntdll.dll ntdll.dll/ -1 0 81 `
�� L`�g�= , _RtlpConvertRelativeToAbsoluteSecurityAttribute@16 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L04�+ - _RtlpCreateProcessRegistryInfo@4 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L{ r�# . _RtlpEnsureBufferSize@12 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L9��* 1 _RtlpGetLCIDFromLangInfoNode@12 ntdll.dll ntdll.dll/ -1 0 62 `
�� L3%��* 2 _RtlpGetNameFromLangInfoNode@12 ntdll.dll ntdll.dll/ -1 0 64 `
�� L/xX�, 3 _RtlpGetSystemDefaultUILanguage@8 ntdll.dll ntdll.dll/ -1 0 69 `
�� L��1 4 _RtlpGetUserOrMachineUILanguage4NLS@12 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L��, 5 _RtlpInitializeLangRegistryInfo@4 ntdll.dll ntdll.dll/ -1 0 58 `
�� L&~<�& 6 _RtlpIsQualifiedLanguage@12 ntdll.dll ntdll.dll/ -1 0 60 `
�� L=ZG�( 7 _RtlpLoadMachineUIByPolicy@12 ntdll.dll ntdll.dll/ -1 0 57 `
�� L���% 8 _RtlpLoadUserUIByPolicy@12 ntdll.dll
ntdll.dll/ -1 0 72 `
�� L���4 9 _RtlpMergeSecurityAttributeInformation@16 ntdll.dll ntdll.dll/ -1 0 61 `
�� L��_�) : _RtlpMuiFreeLangRegistryInfo@4 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L�a*�* ; _RtlpMuiRegCreateRegistryInfo@0 ntdll.dll ntdll.dll/ -1 0 60 `
�� Li�.�( < _RtlpMuiRegFreeRegistryInfo@8 ntdll.dll ntdll.dll/ -1 0 60 `
�� L���( = _RtlpMuiRegLoadRegistryInfo@8 ntdll.dll ntdll.dll/ -1 0 61 `
�� L�`=�) > _RtlpNotOwnerCriticalSection@4 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L� � ? _RtlpNtCreateKey@24 ntdll.dll ntdll.dll/ -1 0 56 `
�� L����$ @ _RtlpNtEnumerateSubKey@16 ntdll.dll ntdll.dll/ -1 0 56 `
�� L��$ A _RtlpNtMakeTemporaryKey@4 ntdll.dll ntdll.dll/ -1 0 48 `
�� Lѳ� B _RtlpNtOpenKey@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� LGP��" C _RtlpNtQueryValueKey@20 ntdll.dll ntdll.dll/ -1 0 52 `
�� L��j� D _RtlpNtSetValueKey@16 ntdll.dll ntdll.dll/ -1 0 60 `
�� L���( E _RtlpQueryDefaultUILanguage@8 ntdll.dll ntdll.dll/ -1 0 72 `
�� LR��4 F _RtlpQueryProcessDebugInformationRemote@4 ntdll.dll ntdll.dll/ -1 0 61 `
�� L��~�) G _RtlpRefreshCachedUILanguage@8 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L��y�$ H _RtlpSetInstallLanguage@8 ntdll.dll ntdll.dll/ -1 0 62 `
�� L1V��* I _RtlpSetPreferredUILanguages@12 ntdll.dll ntdll.dll/ -1 0 66 `
�� L�>�. J _RtlpSetUserPreferredUILanguages@12 ntdll.dll ntdll.dll/ -1 0 55 `
�� L >��# K _RtlpTimeFieldsToTime@12 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L�s�# L _RtlpTimeToTimeFields@12 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L�K�' M _RtlpUnWaitCriticalSection@4 ntdll.dll
ntdll.dll/ -1 0 71 `
�� LG���3 N _RtlpVerifyAndCommitUILanguageSettings@4 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L���( O _RtlpWaitForCriticalSection@4 ntdll.dll ntdll.dll/ -1 0 61 `
�� Ls�D�) P _RtlxAnsiStringToUnicodeSize@4 ntdll.dll
ntdll.dll/ -1 0 60 `
�� LإT�( Q _RtlxOemStringToUnicodeSize@4 ntdll.dll ntdll.dll/ -1 0 61 `
�� L�8��) R _RtlxUnicodeStringToAnsiSize@4 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L���( S _RtlxUnicodeStringToOemSize@4 ntdll.dll ntdll.dll/ -1 0 44 `
�� L�i�� V _ShipAssert@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� L���% W _ShipAssertGetBufferInfo@8 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L��� X _ShipAssertMsgA@12 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L���� Y _ShipAssertMsgW@12 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L}|k�$ Z _TpAllocAlpcCompletion@20 ntdll.dll ntdll.dll/ -1 0 53 `
�� L C�! \ _TpAllocCleanupGroup@4 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�:�" ] _TpAllocIoCompletion@20 ntdll.dll ntdll.dll/ -1 0 57 `
�� L���% ^ _TpAllocJobNotification@20 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L_��� _ _TpAllocPool@8 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L�m� ` _TpAllocTimer@16 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L�y�� a _TpAllocWait@16 ntdll.dll ntdll.dll/ -1 0 46 `
�� L��x� b _TpAllocWork@16 ntdll.dll ntdll.dll/ -1 0 70 `
�� L���2 e _TpCallbackDetectedUnrecoverableError@4 ntdll.dll ntdll.dll/ -1 0 76 `
�� L�sV�8 g _TpCallbackLeaveCriticalSectionOnCompletion@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� L
���" h _TpCallbackMayRunLong@4 ntdll.dll ntdll.dll/ -1 0 68 `
�� LZZ��0 i _TpCallbackReleaseMutexOnCompletion@8 ntdll.dll ntdll.dll/ -1 0 73 `
�� L��a�5 j _TpCallbackReleaseSemaphoreOnCompletion@12 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L>¾�, m _TpCallbackSetEventOnCompletion@8 ntdll.dll ntdll.dll/ -1 0 65 `
�� Lj���- n _TpCallbackUnloadDllOnCompletion@8 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L[t~�& o _TpCancelAsyncIoOperation@4 ntdll.dll ntdll.dll/ -1 0 49 `
�� L�@�� p _TpCaptureCaller@4 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L��$ q _TpCheckTerminateWorker@4 ntdll.dll ntdll.dll/ -1 0 56 `
�� L�Q��$ u _TpDisassociateCallback@4 ntdll.dll ntdll.dll/ -1 0 46 `
�� L�w�� v _TpIsTimerSet@4 ntdll.dll ntdll.dll/ -1 0 44 `
�� Ld �� w _TpPostWork@4 ntdll.dll ntdll.dll/ -1 0 61 `
�� L?���) x _TpQueryPoolStackInformation@8 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L� (�% y _TpReleaseAlpcCompletion@4 ntdll.dll
ntdll.dll/ -1 0 55 `
�� Lzl��# z _TpReleaseCleanupGroup@4 ntdll.dll
ntdll.dll/ -1 0 63 `
�� LH���+ { _TpReleaseCleanupGroupMembers@12 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L�ց�# | _TpReleaseIoCompletion@4 ntdll.dll
ntdll.dll/ -1 0 58 `
�� LO#!�& } _TpReleaseJobNotification@4 ntdll.dll ntdll.dll/ -1 0 47 `
�� LZ�1� ~ _TpReleasePool@4 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L:�#� _TpReleaseTimer@4 ntdll.dll ntdll.dll/ -1 0 47 `
�� L��S� � _TpReleaseWait@4 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L8�� � _TpReleaseWork@4 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L��p�! � _TpSetPoolMaxThreads@8 ntdll.dll
ntdll.dll/ -1 0 62 `
�� Lb���* � _TpSetPoolMaxThreadsSoftLimit@8 ntdll.dll ntdll.dll/ -1 0 53 `
�� LCЋ�! � _TpSetPoolMinThreads@8 ntdll.dll
ntdll.dll/ -1 0 59 `
�� LҰ?�' � _TpSetPoolStackInformation@8 ntdll.dll
ntdll.dll/ -1 0 67 `
�� L�� �/ � _TpSetPoolWorkerThreadIdleTimeout@12 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L�T� � _TpSetTimer@16 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L� G� � _TpSetTimerEx@16 ntdll.dll
ntdll.dll/ -1 0 44 `
�� Lr<� � _TpSetWait@12 ntdll.dll ntdll.dll/ -1 0 46 `
�� Lz8�� � _TpSetWaitEx@16 ntdll.dll ntdll.dll/ -1 0 50 `
�� L �� � _TpSimpleTryPost@12 ntdll.dll ntdll.dll/ -1 0 57 `
�� L����% � _TpStartAsyncIoOperation@4 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L�N�� � _TpTrimPools@0 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�)��% � _TpWaitForAlpcCompletion@4 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L]q��# � _TpWaitForIoCompletion@8 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L� ��& � _TpWaitForJobNotification@4 ntdll.dll ntdll.dll/ -1 0 48 `
�� L�� � � _TpWaitForTimer@8 ntdll.dll ntdll.dll/ -1 0 47 `
�� L%�2� � _TpWaitForWait@8 ntdll.dll
ntdll.dll/ -1 0 47 `
�� Lrn� � _TpWaitForWork@8 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L9i�" � _VerSetConditionMask@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� Lf#V�& � _WerReportExceptionWorker@4 ntdll.dll ntdll.dll/ -1 0 52 `
�� L��� � _WerReportSQMEvent@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�
�& � _WinSqmAddToAverageDWORD@12 ntdll.dll ntdll.dll/ -1 0 52 `
�� L� o� � _WinSqmAddToStream@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�Y�" � _WinSqmAddToStreamEx@20 ntdll.dll ntdll.dll/ -1 0 69 `
�� L��t�1 � _WinSqmCheckEscalationAddToStreamEx@20 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L ��. � _WinSqmCheckEscalationSetDWORD64@20 ntdll.dll ntdll.dll/ -1 0 64 `
�� L�0G�, � _WinSqmCheckEscalationSetDWORD@16 ntdll.dll ntdll.dll/ -1 0 65 `
�� LW I�- � _WinSqmCheckEscalationSetString@16 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L�xK�) � _WinSqmCommonDatapointDelete@4 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L����. � _WinSqmCommonDatapointSetDWORD64@16 ntdll.dll ntdll.dll/ -1 0 64 `
�� L^�,�, � _WinSqmCommonDatapointSetDWORD@12 ntdll.dll ntdll.dll/ -1 0 67 `
�� L=�v�/ � _WinSqmCommonDatapointSetStreamEx@20 ntdll.dll
ntdll.dll/ -1 0 65 `
�� Lyh��- � _WinSqmCommonDatapointSetString@12 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L!K�� � _WinSqmEndSession@4 ntdll.dll ntdll.dll/ -1 0 52 `
�� Lwo�� � _WinSqmEventEnabled@8 ntdll.dll ntdll.dll/ -1 0 51 `
�� Lt�,� � _WinSqmEventWrite@12 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L���+ � _WinSqmGetEscalationRuleStatus@8 ntdll.dll
ntdll.dll/ -1 0 67 `
�� L���/ � _WinSqmGetInstrumentationProperty@16 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L��# � _WinSqmIncrementDWORD@12 ntdll.dll
ntdll.dll/ -1 0 49 `
�� Lw*0� � _WinSqmIsOptedIn@0 ntdll.dll
ntdll.dll/ -1 0 51 `
�� Lj��� � _WinSqmIsOptedInEx@4 ntdll.dll
ntdll.dll/ -1 0 57 `
�� Lì�% � _WinSqmIsSessionDisabled@4 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L�k� � _WinSqmSetDWORD64@16 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L�V� � _WinSqmSetDWORD@12 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L�$o�& � _WinSqmSetEscalationInfo@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� L'0&�" � _WinSqmSetIfMaxDWORD@12 ntdll.dll ntdll.dll/ -1 0 54 `
�� L��8�" � _WinSqmSetIfMinDWORD@12 ntdll.dll ntdll.dll/ -1 0 50 `
�� LB� � _WinSqmSetString@12 ntdll.dll ntdll.dll/ -1 0 53 `
�� L��w�! � _WinSqmStartSession@12 ntdll.dll
ntdll.dll/ -1 0 63 `
�� Lr�g�+ � _WinSqmStartSessionForPartner@16 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L���" � _ZwAcceptConnectPort@24 ntdll.dll ntdll.dll/ -1 0 48 `
�� Lq�� � _ZwAccessCheck@32 ntdll.dll ntdll.dll/ -1 0 61 `
�� L= ��) � _ZwAccessCheckAndAuditAlarm@44 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L���" � _ZwAccessCheckByType@44 ntdll.dll ntdll.dll/ -1 0 67 `
�� L��8�/ � _ZwAccessCheckByTypeAndAuditAlarm@64 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L��, � _ZwAccessCheckByTypeResultList@44 ntdll.dll ntdll.dll/ -1 0 77 `
�� Li A�9 � _ZwAccessCheckByTypeResultListAndAuditAlarm@64 ntdll.dll
ntdll.dll/ -1 0 85 `
�� L� z�A � _ZwAccessCheckByTypeResultListAndAuditAlarmByHandle@68 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L`�`�$ � _ZwAcquireCrossVmMutant@8 ntdll.dll ntdll.dll/ -1 0 68 `
�� L�~s�0 � _ZwAcquireProcessActivityReference@12 ntdll.dll ntdll.dll/ -1 0 44 `
�� L�{�� � _ZwAddAtom@12 ntdll.dll ntdll.dll/ -1 0 46 `
�� Li7� � _ZwAddAtomEx@16 ntdll.dll ntdll.dll/ -1 0 48 `
�� L��� � _ZwAddBootEntry@8 ntdll.dll ntdll.dll/ -1 0 50 `
�� Lh��� � _ZwAddDriverEntry@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� L��&�" � _ZwAdjustGroupsToken@24 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�N�& � _ZwAdjustPrivilegesToken@24 ntdll.dll ntdll.dll/ -1 0 69 `
�� L^��1 � _ZwAdjustTokenClaimsAndDeviceGroups@64 ntdll.dll
ntdll.dll/ -1 0 53 `
�� Lr
��! � _ZwAlertResumeThread@8 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L!7�� � _ZwAlertThread@4 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L����% � _ZwAlertThreadByThreadId@4 ntdll.dll
ntdll.dll/ -1 0 59 `
�� Lg[�' � _ZwAllocateLocallyUniqueId@4 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L�=�& � _ZwAllocateReserveObject@12 ntdll.dll ntdll.dll/ -1 0 62 `
�� L(C�* � _ZwAllocateUserPhysicalPages@12 ntdll.dll ntdll.dll/ -1 0 64 `
�� L8��, � _ZwAllocateUserPhysicalPagesEx@20 ntdll.dll ntdll.dll/ -1 0 50 `
�� LP�� � _ZwAllocateUuids@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� L��D�& � _ZwAllocateVirtualMemory@24 ntdll.dll ntdll.dll/ -1 0 60 `
�� L�I+�( � _ZwAllocateVirtualMemoryEx@28 ntdll.dll ntdll.dll/ -1 0 58 `
�� LS�P�& � _ZwAlpcAcceptConnectPort@36 ntdll.dll ntdll.dll/ -1 0 54 `
�� L���" � _ZwAlpcCancelMessage@12 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�@� � _ZwAlpcConnectPort@44 ntdll.dll ntdll.dll/ -1 0 54 `
�� La��" � _ZwAlpcConnectPortEx@44 ntdll.dll ntdll.dll/ -1 0 51 `
�� L4�!� � _ZwAlpcCreatePort@12 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L$��& � _ZwAlpcCreatePortSection@24 ntdll.dll ntdll.dll/ -1 0 62 `
�� L�$�* � _ZwAlpcCreateResourceReserve@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�vy�& � _ZwAlpcCreateSectionView@12 ntdll.dll ntdll.dll/ -1 0 62 `
�� L� ��* � _ZwAlpcCreateSecurityContext@12 ntdll.dll ntdll.dll/ -1 0 58 `
�� L��-�& � _ZwAlpcDeletePortSection@12 ntdll.dll ntdll.dll/ -1 0 62 `
�� LGY��* � _ZwAlpcDeleteResourceReserve@12 ntdll.dll ntdll.dll/ -1 0 58 `
�� L���& � _ZwAlpcDeleteSectionView@12 ntdll.dll ntdll.dll/ -1 0 62 `
�� L2�* � _ZwAlpcDeleteSecurityContext@12 ntdll.dll ntdll.dll/ -1 0 54 `
�� L- ��" � _ZwAlpcDisconnectPort@8 ntdll.dll ntdll.dll/ -1 0 73 `
�� L�Y��5 � _ZwAlpcImpersonateClientContainerOfPort@12 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L|ַ�, � _ZwAlpcImpersonateClientOfPort@12 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�P��& � _ZwAlpcOpenSenderProcess@24 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�@��% � _ZwAlpcOpenSenderThread@24 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L��^�% � _ZwAlpcQueryInformation@20 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L4 �, � _ZwAlpcQueryInformationMessage@24 ntdll.dll ntdll.dll/ -1 0 62 `
�� L�8y�* � _ZwAlpcRevokeSecurityContext@12 ntdll.dll ntdll.dll/ -1 0 60 `
�� L�W��( � _ZwAlpcSendWaitReceivePort@32 ntdll.dll ntdll.dll/ -1 0 55 `
�� L\K�# � _ZwAlpcSetInformation@16 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L Jo�# � _ZwApphelpCacheControl@8 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L��a�% � _ZwAreMappedFilesTheSame@8 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L@ω�( � _ZwAssignProcessToJobObject@8 ntdll.dll ntdll.dll/ -1 0 66 `
�� L{�<�. � _ZwAssociateWaitCompletionPacket@32 ntdll.dll ntdll.dll/ -1 0 48 `
�� LoD� � _ZwCallEnclave@16 ntdll.dll ntdll.dll/ -1 0 51 `
�� L��T� � _ZwCallbackReturn@12 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L�f!� � _ZwCancelIoFile@8 ntdll.dll ntdll.dll/ -1 0 51 `
�� L.�� � _ZwCancelIoFileEx@12 ntdll.dll
ntdll.dll/ -1 0 60 `
�� LH��( � _ZwCancelSynchronousIoFile@12 ntdll.dll ntdll.dll/ -1 0 48 `
�� L��� � _ZwCancelTimer2@8 ntdll.dll ntdll.dll/ -1 0 47 `
�� L�� � _ZwCancelTimer@8 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L����* � _ZwCancelWaitCompletionPacket@8 ntdll.dll ntdll.dll/ -1 0 46 `
�� L�-N� � _ZwClearEvent@4 ntdll.dll ntdll.dll/ -1 0 41 `
�� L*��� � _ZwClose@4 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L�-��& � _ZwCloseObjectAuditAlarm@12 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�:�� � _ZwCommitComplete@8 ntdll.dll ntdll.dll/ -1 0 52 `
�� L \�� � _ZwCommitEnlistment@8 ntdll.dll ntdll.dll/ -1 0 61 `
�� L$���) � _ZwCommitRegistryTransaction@8 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L)\m�! � _ZwCommitTransaction@8 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L��� � _ZwCompactKeys@8 ntdll.dll
ntdll.dll/ -1 0 50 `
�� LG 1� _ZwCompareObjects@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� Lit��$ _ZwCompareSigningLevels@8 ntdll.dll ntdll.dll/ -1 0 50 `
�� LZ �� _ZwCompareTokens@12 ntdll.dll ntdll.dll/ -1 0 55 `
�� Ld��# _ZwCompleteConnectPort@4 ntdll.dll
ntdll.dll/ -1 0 47 `
�� LSQ�� _ZwCompressKey@4 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L��a� _ZwConnectPort@32 ntdll.dll ntdll.dll/ -1 0 44 `
�� L��8� _ZwContinue@8 ntdll.dll ntdll.dll/ -1 0 46 `
�� L=�� _ZwContinueEx@8 ntdll.dll ntdll.dll/ -1 0 88 `
�� Ly�u�D _ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter@16 ntdll.dll ntdll.dll/ -1 0 55 `
�� L� Q�# _ZwCreateCrossVmEvent@24 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L���$
_ZwCreateCrossVmMutant@24 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�>r�" _ZwCreateDebugObject@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� L:��& _ZwCreateDirectoryObject@12 ntdll.dll ntdll.dll/ -1 0 60 `
�� L��}�(
_ZwCreateDirectoryObjectEx@20 ntdll.dll ntdll.dll/ -1 0 50 `
�� L7+ � _ZwCreateEnclave@36 ntdll.dll ntdll.dll/ -1 0 53 `
�� L:���! _ZwCreateEnlistment@32 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L��<� _ZwCreateEvent@20 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�"�� _ZwCreateEventPair@12 ntdll.dll ntdll.dll/ -1 0 47 `
�� L}j�� _ZwCreateFile@44 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L��� _ZwCreateIRTimer@12 ntdll.dll ntdll.dll/ -1 0 55 `
�� L
��# _ZwCreateIoCompletion@16 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L2x� _ZwCreateJobObject@12 ntdll.dll ntdll.dll/ -1 0 49 `
�� L.�{� _ZwCreateJobSet@12 ntdll.dll
ntdll.dll/ -1 0 46 `
�� LV�� _ZwCreateKey@28 ntdll.dll ntdll.dll/ -1 0 56 `
�� L���$ _ZwCreateKeyTransacted@32 ntdll.dll ntdll.dll/ -1 0 53 `
�� Ls�W�! _ZwCreateKeyedEvent@16 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L���" _ZwCreateLowBoxToken@36 ntdll.dll ntdll.dll/ -1 0 55 `
�� L�z��# _ZwCreateMailslotFile@32 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L�[0� _ZwCreateMutant@16 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L����$ _ZwCreateNamedPipeFile@56 ntdll.dll ntdll.dll/ -1 0 53 `
�� L����! _ZwCreatePagingFile@16 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L]�b� _ZwCreatePartition@16 ntdll.dll ntdll.dll/ -1 0 47 `
�� L�� _ZwCreatePort@20 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L�{�' ! _ZwCreatePrivateNamespace@16 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L ��� " _ZwCreateProcess@32 ntdll.dll ntdll.dll/ -1 0 52 `
�� L���� # _ZwCreateProcessEx@36 ntdll.dll ntdll.dll/ -1 0 50 `
�� L��� $ _ZwCreateProfile@36 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�K�� % _ZwCreateProfileEx@40 ntdll.dll ntdll.dll/ -1 0 62 `
�� L1�H�* & _ZwCreateRegistryTransaction@16 ntdll.dll ntdll.dll/ -1 0 58 `
�� Ly"4�& ' _ZwCreateResourceManager@28 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�3�� ( _ZwCreateSection@28 ntdll.dll ntdll.dll/ -1 0 52 `
�� L
�� ) _ZwCreateSectionEx@36 ntdll.dll ntdll.dll/ -1 0 52 `
�� L���� * _ZwCreateSemaphore@20 ntdll.dll ntdll.dll/ -1 0 61 `
�� Lƃ�) + _ZwCreateSymbolicLinkObject@16 ntdll.dll
ntdll.dll/ -1 0 49 `
�� LA�� , _ZwCreateThread@32 ntdll.dll
ntdll.dll/ -1 0 51 `
�� LG� - _ZwCreateThreadEx@44 ntdll.dll
ntdll.dll/ -1 0 49 `
�� L���� / _ZwCreateTimer2@20 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L�(Q� . _ZwCreateTimer@16 ntdll.dll ntdll.dll/ -1 0 48 `
�� L �� 0 _ZwCreateToken@52 ntdll.dll ntdll.dll/ -1 0 50 `
�� L:~�� 1 _ZwCreateTokenEx@68 ntdll.dll ntdll.dll/ -1 0 54 `
�� L����" 2 _ZwCreateTransaction@40 ntdll.dll ntdll.dll/ -1 0 61 `
�� L �|�) 3 _ZwCreateTransactionManager@24 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�ˑ�" 4 _ZwCreateUserProcess@44 ntdll.dll ntdll.dll/ -1 0 63 `
�� Lc ��+ 5 _ZwCreateWaitCompletionPacket@12 ntdll.dll
ntdll.dll/ -1 0 55 `
�� Ln =�# 6 _ZwCreateWaitablePort@20 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L����# 7 _ZwCreateWnfStateName@28 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L��x�$ 8 _ZwCreateWorkerFactory@40 ntdll.dll ntdll.dll/ -1 0 54 `
�� Lh��" 9 _ZwDebugActiveProcess@8 ntdll.dll ntdll.dll/ -1 0 50 `
�� Lx{�� : _ZwDebugContinue@12 ntdll.dll ntdll.dll/ -1 0 50 `
�� L9�� ; _ZwDelayExecution@8 ntdll.dll ntdll.dll/ -1 0 46 `
�� L+�O� < _ZwDeleteAtom@4 ntdll.dll ntdll.dll/ -1 0 51 `
�� Lz��� = _ZwDeleteBootEntry@4 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L���! > _ZwDeleteDriverEntry@4 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L��� ? _ZwDeleteFile@4 ntdll.dll ntdll.dll/ -1 0 45 `
�� L�>�� @ _ZwDeleteKey@4 ntdll.dll
ntdll.dll/ -1 0 59 `
�� LSA�' A _ZwDeleteObjectAuditAlarm@12 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L��F�& B _ZwDeletePrivateNamespace@4 ntdll.dll ntdll.dll/ -1 0 50 `
�� L��� C _ZwDeleteValueKey@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� L����" D _ZwDeleteWnfStateData@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� Lg6b�" E _ZwDeleteWnfStateName@4 ntdll.dll ntdll.dll/ -1 0 56 `
�� L�#�$ F _ZwDeviceIoControlFile@40 ntdll.dll ntdll.dll/ -1 0 55 `
�� LJ���# G _ZwDirectGraphicsCall@20 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L��r�$ H _ZwDisableLastKnownGood@0 ntdll.dll ntdll.dll/ -1 0 49 `
�� L\/{� I _ZwDisplayString@4 ntdll.dll
ntdll.dll/ -1 0 44 `
�� L�{�� J _ZwDrawText@4 ntdll.dll ntdll.dll/ -1 0 52 `
�� LR@N� K _ZwDuplicateObject@28 ntdll.dll ntdll.dll/ -1 0 51 `
�� L&� � L _ZwDuplicateToken@24 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L,m�# M _ZwEnableLastKnownGood@0 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L��$ N _ZwEnumerateBootEntries@8 ntdll.dll ntdll.dll/ -1 0 58 `
�� L����& O _ZwEnumerateDriverEntries@8 ntdll.dll ntdll.dll/ -1 0 49 `
�� L��6� P _ZwEnumerateKey@24 ntdll.dll
ntdll.dll/ -1 0 71 `
�� LW�^�3 Q _ZwEnumerateSystemEnvironmentValuesEx@12 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L� ��+ R _ZwEnumerateTransactionObject@20 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L����" S _ZwEnumerateValueKey@24 ntdll.dll ntdll.dll/ -1 0 49 `
�� L`�e� T _ZwExtendSection@8 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L.���! U _ZwFilterBootOption@20 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L��� V _ZwFilterToken@24 ntdll.dll ntdll.dll/ -1 0 50 `
�� LH� W _ZwFilterTokenEx@56 ntdll.dll ntdll.dll/ -1 0 45 `
�� L� � X _ZwFindAtom@12 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L�d� Y _ZwFlushBuffersFile@8 ntdll.dll ntdll.dll/ -1 0 55 `
�� L)�e�# Z _ZwFlushBuffersFileEx@20 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L2y��& [ _ZwFlushInstallUILanguage@8 ntdll.dll ntdll.dll/ -1 0 58 `
�� Lj �& \ _ZwFlushInstructionCache@12 ntdll.dll ntdll.dll/ -1 0 44 `
�� L�b�� ] _ZwFlushKey@4 ntdll.dll ntdll.dll/ -1 0 60 `
�� L��( ^ _ZwFlushProcessWriteBuffers@0 ntdll.dll ntdll.dll/ -1 0 55 `
�� L�U�# _ _ZwFlushVirtualMemory@16 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L���� ` _ZwFlushWriteBuffer@0 ntdll.dll ntdll.dll/ -1 0 58 `
�� L����& a _ZwFreeUserPhysicalPages@12 ntdll.dll ntdll.dll/ -1 0 54 `
�� L����" b _ZwFreeVirtualMemory@16 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�l�� c _ZwFreezeRegistry@4 ntdll.dll ntdll.dll/ -1 0 54 `
�� LP@��" d _ZwFreezeTransactions@8 ntdll.dll ntdll.dll/ -1 0 50 `
�� L��� e _ZwFsControlFile@40 ntdll.dll ntdll.dll/ -1 0 58 `
�� L����& f _ZwGetCachedSigningLevel@24 ntdll.dll ntdll.dll/ -1 0 68 `
�� Lqx�0 g _ZwGetCompleteWnfStateSubscription@24 ntdll.dll ntdll.dll/ -1 0 52 `
�� L���� h _ZwGetContextThread@8 ntdll.dll ntdll.dll/ -1 0 61 `
�� L ��) i _ZwGetCurrentProcessorNumber@0 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L�.��+ j _ZwGetCurrentProcessorNumberEx@4 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L t_�# k _ZwGetDevicePowerState@8 ntdll.dll
ntdll.dll/ -1 0 55 `
�� LH e�# l _ZwGetMUIRegistryInfo@12 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L7��� m _ZwGetNextProcess@20 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L�� n _ZwGetNextThread@24 ntdll.dll ntdll.dll/ -1 0 53 `
�� L[�! o _ZwGetNlsSectionPtr@20 ntdll.dll
ntdll.dll/ -1 0 67 `
�� L�7��/ p _ZwGetNotificationResourceManager@28 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L���� q _ZwGetWriteWatch@28 ntdll.dll ntdll.dll/ -1 0 61 `
�� L=d��) r _ZwImpersonateAnonymousToken@4 ntdll.dll
ntdll.dll/ -1 0 59 `
�� LΈ)�' s _ZwImpersonateClientOfPort@8 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L/�E�" t _ZwImpersonateThread@12 ntdll.dll ntdll.dll/ -1 0 54 `
�� L��B�" u _ZwInitializeEnclave@20 ntdll.dll ntdll.dll/ -1 0 55 `
�� L���# v _ZwInitializeNlsFiles@12 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�'�" w _ZwInitializeRegistry@4 ntdll.dll ntdll.dll/ -1 0 56 `
�� L���$ x _ZwInitiatePowerAction@16 ntdll.dll ntdll.dll/ -1 0 50 `
�� LM��� y _ZwIsProcessInJob@8 ntdll.dll ntdll.dll/ -1 0 59 `
�� LI��' z _ZwIsSystemResumeAutomatic@0 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L��$ { _ZwIsUILanguageComitted@0 ntdll.dll ntdll.dll/ -1 0 46 `
�� L ,8� | _ZwListenPort@8 ntdll.dll ntdll.dll/ -1 0 46 `
�� L��� } _ZwLoadDriver@4 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�N�� ~ _ZwLoadEnclaveData@36 ntdll.dll ntdll.dll/ -1 0 45 `
�� L��� � _ZwLoadKey2@12 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L��� � _ZwLoadKey3@32 ntdll.dll
ntdll.dll/ -1 0 43 `
�� L���� _ZwLoadKey@8 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L�G� � _ZwLoadKeyEx@32 ntdll.dll ntdll.dll/ -1 0 45 `
�� L(�x� � _ZwLockFile@40 ntdll.dll
ntdll.dll/ -1 0 61 `
�� L���) � _ZwLockProductActivationKeys@8 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L���� � _ZwLockRegistryKey@4 ntdll.dll
ntdll.dll/ -1 0 54 `
�� LS���" � _ZwLockVirtualMemory@16 ntdll.dll ntdll.dll/ -1 0 55 `
�� L���# � _ZwMakePermanentObject@4 ntdll.dll
ntdll.dll/ -1 0 55 `
�� LW�g�# � _ZwMakeTemporaryObject@4 ntdll.dll
ntdll.dll/ -1 0 51 `
�� Lu�� � _ZwManageHotPatch@16 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L�%� � _ZwManagePartition@20 ntdll.dll ntdll.dll/ -1 0 49 `
�� L`'_� � _ZwMapCMFModule@24 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L����% � _ZwMapUserPhysicalPages@12 ntdll.dll
ntdll.dll/ -1 0 64 `
�� Lڀ�, � _ZwMapUserPhysicalPagesScatter@12 ntdll.dll ntdll.dll/ -1 0 53 `
�� L*��! � _ZwMapViewOfSection@40 ntdll.dll
ntdll.dll/ -1 0 55 `
�� Li�J�# � _ZwMapViewOfSectionEx@36 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L̉� � _ZwModifyBootEntry@4 ntdll.dll
ntdll.dll/ -1 0 53 `
�� LYӼ�! � _ZwModifyDriverEntry@4 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L��c�* � _ZwNotifyChangeDirectoryFile@36 ntdll.dll ntdll.dll/ -1 0 64 `
�� L|
��, � _ZwNotifyChangeDirectoryFileEx@40 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�X�� � _ZwNotifyChangeKey@40 ntdll.dll ntdll.dll/ -1 0 61 `
�� L0#��) � _ZwNotifyChangeMultipleKeys@48 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L;�$ � _ZwNotifyChangeSession@32 ntdll.dll ntdll.dll/ -1 0 56 `
�� L�|��$ � _ZwOpenDirectoryObject@12 ntdll.dll ntdll.dll/ -1 0 51 `
�� Lr�5� � _ZwOpenEnlistment@20 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L"-L� � _ZwOpenEvent@12 ntdll.dll ntdll.dll/ -1 0 50 `
�� L��<� � _ZwOpenEventPair@12 ntdll.dll ntdll.dll/ -1 0 45 `
�� L( �� � _ZwOpenFile@24 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L��T�! � _ZwOpenIoCompletion@12 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L\-� � _ZwOpenJobObject@12 ntdll.dll ntdll.dll/ -1 0 44 `
�� L74�� � _ZwOpenKey@12 ntdll.dll ntdll.dll/ -1 0 46 `
�� L`�� � _ZwOpenKeyEx@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� Lp=�" � _ZwOpenKeyTransacted@16 ntdll.dll ntdll.dll/ -1 0 56 `
�� L�� �$ � _ZwOpenKeyTransactedEx@20 ntdll.dll ntdll.dll/ -1 0 51 `
�� L�zq� � _ZwOpenKeyedEvent@12 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L(�� � _ZwOpenMutant@12 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L:�!�% � _ZwOpenObjectAuditAlarm@48 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L�W'� � _ZwOpenPartition@12 ntdll.dll ntdll.dll/ -1 0 57 `
�� L��% � _ZwOpenPrivateNamespace@16 ntdll.dll
ntdll.dll/ -1 0 48 `
�� LY X� � _ZwOpenProcess@16 ntdll.dll ntdll.dll/ -1 0 53 `
�� L�F�! � _ZwOpenProcessToken@12 ntdll.dll
ntdll.dll/ -1 0 55 `
�� Lm��# � _ZwOpenProcessTokenEx@16 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L����( � _ZwOpenRegistryTransaction@12 ntdll.dll ntdll.dll/ -1 0 56 `
�� L���$ � _ZwOpenResourceManager@20 ntdll.dll ntdll.dll/ -1 0 48 `
�� L��4� � _ZwOpenSection@12 ntdll.dll ntdll.dll/ -1 0 50 `
�� L ��� � _ZwOpenSemaphore@12 ntdll.dll ntdll.dll/ -1 0 48 `
�� Lؔ� � _ZwOpenSession@12 ntdll.dll ntdll.dll/ -1 0 59 `
�� L�E��' � _ZwOpenSymbolicLinkObject@12 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L\�� � _ZwOpenThread@16 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L�5�� � _ZwOpenThreadToken@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� Le��" � _ZwOpenThreadTokenEx@20 ntdll.dll ntdll.dll/ -1 0 46 `
�� L�R� � _ZwOpenTimer@12 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�Y�� � _ZwOpenTransaction@20 ntdll.dll ntdll.dll/ -1 0 59 `
�� L�@�' � _ZwOpenTransactionManager@24 ntdll.dll
ntdll.dll/ -1 0 52 `
�� LU��� � _ZwPlugPlayControl@12 ntdll.dll ntdll.dll/ -1 0 53 `
�� L���! � _ZwPowerInformation@20 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�c�" � _ZwPrePrepareComplete@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� L: r�$ � _ZwPrePrepareEnlistment@8 ntdll.dll ntdll.dll/ -1 0 51 `
�� LB�� � _ZwPrepareComplete@8 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L Sy�! � _ZwPrepareEnlistment@8 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L�EF� � _ZwPrivilegeCheck@12 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L��_�* � _ZwPrivilegeObjectAuditAlarm@24 ntdll.dll ntdll.dll/ -1 0 64 `
�� L��p�, � _ZwPrivilegedServiceAuditAlarm@20 ntdll.dll ntdll.dll/ -1 0 56 `
�� LH��$ � _ZwPropagationComplete@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� L(���" � _ZwPropagationFailed@12 ntdll.dll ntdll.dll/ -1 0 57 `
�� LT) �% � _ZwProtectVirtualMemory@20 ntdll.dll
ntdll.dll/ -1 0 58 `
�� Lu�]�& � _ZwPssCaptureVaSpaceBulk@20 ntdll.dll ntdll.dll/ -1 0 46 `
�� LE� � _ZwPulseEvent@8 ntdll.dll ntdll.dll/ -1 0 55 `
�� L�2�# � _ZwQueryAttributesFile@8 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L��5�. � _ZwQueryAuxiliaryCounterFrequency@4 ntdll.dll ntdll.dll/ -1 0 55 `
�� LcKG�# � _ZwQueryBootEntryOrder@8 ntdll.dll
ntdll.dll/ -1 0 52 `
�� Lx�� � _ZwQueryBootOptions@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� L�.��% � _ZwQueryDebugFilterState@8 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�ҽ�" � _ZwQueryDefaultLocale@8 ntdll.dll ntdll.dll/ -1 0 58 `
�� L1Z��& � _ZwQueryDefaultUILanguage@4 ntdll.dll ntdll.dll/ -1 0 55 `
�� L:�p�# � _ZwQueryDirectoryFile@44 ntdll.dll
ntdll.dll/ -1 0 57 `
�� LK�% � _ZwQueryDirectoryFileEx@40 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L� �% � _ZwQueryDirectoryObject@28 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L'��% � _ZwQueryDriverEntryOrder@8 ntdll.dll
ntdll.dll/ -1 0 48 `
�� LT��� � _ZwQueryEaFile@36 ntdll.dll ntdll.dll/ -1 0 47 `
�� LHw%� � _ZwQueryEvent@20 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L
�Y�' � _ZwQueryFullAttributesFile@8 ntdll.dll
ntdll.dll/ -1 0 57 `
�� LI�@�% � _ZwQueryInformationAtom@20 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L>k�' � _ZwQueryInformationByName@20 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L^)��+ � _ZwQueryInformationEnlistment@20 ntdll.dll
ntdll.dll/ -1 0 57 `
�� LJL��% � _ZwQueryInformationFile@20 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L?��* � _ZwQueryInformationJobObject@20 ntdll.dll ntdll.dll/ -1 0 57 `
�� L��q�% � _ZwQueryInformationPort@20 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L��8�( � _ZwQueryInformationProcess@20 ntdll.dll ntdll.dll/ -1 0 68 `
�� LN�0 � _ZwQueryInformationResourceManager@20 ntdll.dll ntdll.dll/ -1 0 59 `
�� L���' � _ZwQueryInformationThread@20 ntdll.dll
ntdll.dll/ -1 0 58 `
�� Lb��& � _ZwQueryInformationToken@20 ntdll.dll ntdll.dll/ -1 0 64 `
�� L�'�, � _ZwQueryInformationTransaction@20 ntdll.dll ntdll.dll/ -1 0 71 `
�� L���3 � _ZwQueryInformationTransactionManager@20 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L�^�. � _ZwQueryInformationWorkerFactory@20 ntdll.dll ntdll.dll/ -1 0 58 `
�� LX��& � _ZwQueryInstallUILanguage@4 ntdll.dll ntdll.dll/ -1 0 56 `
�� L>�$ � _ZwQueryIntervalProfile@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�n�" � _ZwQueryIoCompletion@20 ntdll.dll ntdll.dll/ -1 0 45 `
�� L��n� � _ZwQueryKey@20 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�&��" � _ZwQueryLicenseValue@20 ntdll.dll ntdll.dll/ -1 0 58 `
�� Lt��& � _ZwQueryMultipleValueKey@24 ntdll.dll ntdll.dll/ -1 0 48 `
�� Laf�� � _ZwQueryMutant@20 ntdll.dll ntdll.dll/ -1 0 48 `
�� Lϐ�� � _ZwQueryObject@20 ntdll.dll ntdll.dll/ -1 0 52 `
�� LZ,C� � _ZwQueryOpenSubKeys@8 ntdll.dll ntdll.dll/ -1 0 55 `
�� L���# � _ZwQueryOpenSubKeysEx@16 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L���' � _ZwQueryPerformanceCounter@8 ntdll.dll
ntdll.dll/ -1 0 63 `
�� LG�o�+ � _ZwQueryPortInformationProcess@0 ntdll.dll
ntdll.dll/ -1 0 62 `
�� Lxz��* � _ZwQueryQuotaInformationFile@36 ntdll.dll ntdll.dll/ -1 0 49 `
�� L��x� � _ZwQuerySection@20 ntdll.dll
ntdll.dll/ -1 0 65 `
�� L�4��- � _ZwQuerySecurityAttributesToken@24 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L-8��$ � _ZwQuerySecurityObject@20 ntdll.dll ntdll.dll/ -1 0 56 `
�� L���$ � _ZwQuerySecurityPolicy@24 ntdll.dll ntdll.dll/ -1 0 51 `
�� L��)� � _ZwQuerySemaphore@20 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L��( � _ZwQuerySymbolicLinkObject@12 ntdll.dll ntdll.dll/ -1 0 64 `
�� L�MT�, � _ZwQuerySystemEnvironmentValue@16 ntdll.dll ntdll.dll/ -1 0 66 `
�� L���. � _ZwQuerySystemEnvironmentValueEx@20 ntdll.dll ntdll.dll/ -1 0 59 `
�� L�P��' � _ZwQuerySystemInformation@16 ntdll.dll
ntdll.dll/ -1 0 61 `
�� Ln�n�) � _ZwQuerySystemInformationEx@24 ntdll.dll
ntdll.dll/ -1 0 51 `
�� LaU�� � _ZwQuerySystemTime@4 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L� y� � _ZwQueryTimer@20 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L���% � _ZwQueryTimerResolution@12 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L�D{� � _ZwQueryValueKey@24 ntdll.dll ntdll.dll/ -1 0 55 `
�� LF�,�# � _ZwQueryVirtualMemory@24 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L< ��+ � _ZwQueryVolumeInformationFile@20 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�\��" � _ZwQueryWnfStateData@24 ntdll.dll ntdll.dll/ -1 0 65 `
�� L�r]�- � _ZwQueryWnfStateNameInformation@20 ntdll.dll
ntdll.dll/ -1 0 51 `
�� Lt�>� � _ZwQueueApcThread@20 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L�LP�! � _ZwQueueApcThreadEx@24 ntdll.dll
ntdll.dll/ -1 0 51 `
�� L � _ZwRaiseException@12 ntdll.dll
ntdll.dll/ -1 0 51 `
�� LKh� _ZwRaiseHardError@24 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L�O � _ZwReadFile@36 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L�o�� _ZwReadFileScatter@36 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�A�" _ZwReadOnlyEnlistment@8 ntdll.dll ntdll.dll/ -1 0 52 `
�� L��� _ZwReadRequestData@24 ntdll.dll ntdll.dll/ -1 0 54 `
�� LC�" _ZwReadVirtualMemory@20 ntdll.dll ntdll.dll/ -1 0 53 `
�� LSR��! _ZwRecoverEnlistment@8 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L��E�& _ZwRecoverResourceManager@4 ntdll.dll ntdll.dll/ -1 0 61 `
�� L��) _ZwRecoverTransactionManager@4 ntdll.dll
ntdll.dll/ -1 0 71 `
�� L7���3
_ZwRegisterProtocolAddressInformation@20 ntdll.dll
ntdll.dll/ -1 0 63 `
�� L�]5�+ _ZwRegisterThreadTerminatePort@4 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�`�" _ZwReleaseKeyedEvent@16 ntdll.dll ntdll.dll/ -1 0 49 `
�� L6"��
_ZwReleaseMutant@8 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L�;�! _ZwReleaseSemaphore@12 ntdll.dll
ntdll.dll/ -1 0 62 `
�� L�� �* _ZwReleaseWorkerFactoryWorker@4 ntdll.dll ntdll.dll/ -1 0 55 `
�� L��i�# _ZwRemoveIoCompletion@20 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L�ާ�% _ZwRemoveIoCompletionEx@24 ntdll.dll
ntdll.dll/ -1 0 54 `
�� Lh���" _ZwRemoveProcessDebug@8 ntdll.dll ntdll.dll/ -1 0 45 `
�� Lvہ� _ZwRenameKey@8 ntdll.dll
ntdll.dll/ -1 0 60 `
�� Li��( _ZwRenameTransactionManager@8 ntdll.dll ntdll.dll/ -1 0 47 `
�� L�O�� _ZwReplaceKey@12 ntdll.dll
ntdll.dll/ -1 0 57 `
�� Lw�3�% _ZwReplacePartitionUnit@12 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L��8� _ZwReplyPort@8 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L��% _ZwReplyWaitReceivePort@16 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L�' _ZwReplyWaitReceivePortEx@20 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L*�" _ZwReplyWaitReplyPort@8 ntdll.dll ntdll.dll/ -1 0 47 `
�� LM��� _ZwRequestPort@8 ntdll.dll
ntdll.dll/ -1 0 57 `
�� L���% _ZwRequestWaitReplyPort@12 ntdll.dll
ntdll.dll/ -1 0 46 `
�� LMd�� _ZwResetEvent@8 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�� � _ZwResetWriteWatch@12 ntdll.dll ntdll.dll/ -1 0 47 `
�� Lz��� _ZwRestoreKey@12 ntdll.dll
ntdll.dll/ -1 0 49 `
�� Lh� _ZwResumeProcess@4 ntdll.dll
ntdll.dll/ -1 0 48 `
�� Lgk�� ! _ZwResumeThread@8 ntdll.dll ntdll.dll/ -1 0 64 `
�� Lۆ��, " _ZwRevertContainerImpersonation@0 ntdll.dll ntdll.dll/ -1 0 52 `
�� L��� # _ZwRollbackComplete@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� L���" $ _ZwRollbackEnlistment@8 ntdll.dll ntdll.dll/ -1 0 63 `
�� L�+ % _ZwRollbackRegistryTransaction@8 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L>��# & _ZwRollbackTransaction@8 ntdll.dll
ntdll.dll/ -1 0 65 `
�� Lh��- ' _ZwRollforwardTransactionManager@8 ntdll.dll
ntdll.dll/ -1 0 43 `
�� L��-� ( _ZwSaveKey@8 ntdll.dll
ntdll.dll/ -1 0 46 `
�� LGv� ) _ZwSaveKeyEx@12 ntdll.dll ntdll.dll/ -1 0 51 `
�� Lg�w� * _ZwSaveMergedKeys@12 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L�i-�" + _ZwSecureConnectPort@36 ntdll.dll ntdll.dll/ -1 0 49 `
�� L#@�� , _ZwSerializeBoot@0 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L_���! - _ZwSetBootEntryOrder@8 ntdll.dll
ntdll.dll/ -1 0 50 `
�� LwC/� . _ZwSetBootOptions@8 ntdll.dll ntdll.dll/ -1 0 59 `
�� L���' 0 _ZwSetCachedSigningLevel2@24 ntdll.dll
ntdll.dll/ -1 0 58 `
�� LMɕ�& / _ZwSetCachedSigningLevel@20 ntdll.dll ntdll.dll/ -1 0 52 `
�� L���� 1 _ZwSetContextThread@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� Lي��$ 2 _ZwSetDebugFilterState@12 ntdll.dll ntdll.dll/ -1 0 59 `
�� L���' 3 _ZwSetDefaultHardErrorPort@4 ntdll.dll
ntdll.dll/ -1 0 52 `
�� Lr��� 4 _ZwSetDefaultLocale@8 ntdll.dll ntdll.dll/ -1 0 56 `
�� L ���$ 5 _ZwSetDefaultUILanguage@4 ntdll.dll ntdll.dll/ -1 0 55 `
�� L�`P�# 6 _ZwSetDriverEntryOrder@8 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L�S� 7 _ZwSetEaFile@16 ntdll.dll ntdll.dll/ -1 0 44 `
�� LVA� 8 _ZwSetEvent@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� L`��% 9 _ZwSetEventBoostPriority@4 ntdll.dll
ntdll.dll/ -1 0 52 `
�� LA�� : _ZwSetHighEventPair@4 ntdll.dll ntdll.dll/ -1 0 59 `
�� L>R4�' ; _ZwSetHighWaitLowEventPair@4 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L���� < _ZwSetIRTimer@8 ntdll.dll ntdll.dll/ -1 0 62 `
�� L�I�* = _ZwSetInformationDebugObject@20 ntdll.dll ntdll.dll/ -1 0 61 `
�� LU5�) > _ZwSetInformationEnlistment@16 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L��# ? _ZwSetInformationFile@20 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L�&t�( @ _ZwSetInformationJobObject@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� L����" A _ZwSetInformationKey@16 ntdll.dll ntdll.dll/ -1 0 57 `
�� LB��% B _ZwSetInformationObject@16 ntdll.dll
ntdll.dll/ -1 0 58 `
�� L����& C _ZwSetInformationProcess@16 ntdll.dll ntdll.dll/ -1 0 66 `
�� LS�^�. D _ZwSetInformationResourceManager@16 ntdll.dll ntdll.dll/ -1 0 63 `
�� L�*2�+ E _ZwSetInformationSymbolicLink@16 ntdll.dll
ntdll.dll/ -1 0 57 `
�� Li
�% F _ZwSetInformationThread@16 ntdll.dll
ntdll.dll/ -1 0 56 `
�� Lq���$ G _ZwSetInformationToken@16 ntdll.dll ntdll.dll/ -1 0 62 `
�� L�e%�* H _ZwSetInformationTransaction@16 ntdll.dll ntdll.dll/ -1 0 69 `
�� L�PO�1 I _ZwSetInformationTransactionManager@16 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L�Mo�, J _ZwSetInformationVirtualMemory@24 ntdll.dll ntdll.dll/ -1 0 64 `
�� L�_��, K _ZwSetInformationWorkerFactory@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� LKk�" L _ZwSetIntervalProfile@8 ntdll.dll ntdll.dll/ -1 0 52 `
�� Li� M _ZwSetIoCompletion@20 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�p�" N _ZwSetIoCompletionEx@24 ntdll.dll ntdll.dll/ -1 0 50 `
�� LT&�� O _ZwSetLdtEntries@24 ntdll.dll ntdll.dll/ -1 0 51 `
�� L�D� P _ZwSetLowEventPair@4 ntdll.dll
ntdll.dll/ -1 0 59 `
�� LS�' Q _ZwSetLowWaitHighEventPair@4 ntdll.dll
ntdll.dll/ -1 0 60 `
�� L,���( R _ZwSetQuotaInformationFile@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� L���" S _ZwSetSecurityObject@12 ntdll.dll ntdll.dll/ -1 0 61 `
�� L,ϥ�) T _ZwSetSystemEnvironmentValue@8 ntdll.dll
ntdll.dll/ -1 0 64 `
�� L ��, U _ZwSetSystemEnvironmentValueEx@20 ntdll.dll ntdll.dll/ -1 0 57 `
�� L� �% V _ZwSetSystemInformation@12 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L���$ W _ZwSetSystemPowerState@12 ntdll.dll ntdll.dll/ -1 0 49 `
�� L��R� X _ZwSetSystemTime@8 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L ��' Y _ZwSetThreadExecutionState@8 ntdll.dll
ntdll.dll/ -1 0 46 `
�� L�{�� [ _ZwSetTimer2@16 ntdll.dll ntdll.dll/ -1 0 45 `
�� L�)� Z _ZwSetTimer@28 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L��X� \ _ZwSetTimerEx@16 ntdll.dll
ntdll.dll/ -1 0 55 `
�� LiRQ�# ] _ZwSetTimerResolution@12 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L��J� ^ _ZwSetUuidSeed@4 ntdll.dll
ntdll.dll/ -1 0 48 `
�� LF�?� _ _ZwSetValueKey@24 ntdll.dll ntdll.dll/ -1 0 61 `
�� L�#��) ` _ZwSetVolumeInformationFile@20 ntdll.dll
ntdll.dll/ -1 0 66 `
�� L��1�. a _ZwSetWnfProcessNotificationEvent@4 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�8�� b _ZwShutdownSystem@4 ntdll.dll ntdll.dll/ -1 0 57 `
�� LJ��% c _ZwShutdownWorkerFactory@8 ntdll.dll
ntdll.dll/ -1 0 65 `
�� L�(�- d _ZwSignalAndWaitForSingleObject@16 ntdll.dll
ntdll.dll/ -1 0 53 `
�� L���! e _ZwSinglePhaseReject@8 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L�{N� f _ZwStartProfile@4 ntdll.dll ntdll.dll/ -1 0 47 `
�� L�-� g _ZwStopProfile@4 ntdll.dll
ntdll.dll/ -1 0 60 `
�� LZ6��( h _ZwSubscribeWnfStateChange@16 ntdll.dll ntdll.dll/ -1 0 50 `
�� L���� i _ZwSuspendProcess@4 ntdll.dll ntdll.dll/ -1 0 49 `
�� L�F)� j _ZwSuspendThread@8 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L�d]�# k _ZwSystemDebugControl@24 ntdll.dll
ntdll.dll/ -1 0 52 `
�� LR��� l _ZwTerminateEnclave@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� L �B�" m _ZwTerminateJobObject@8 ntdll.dll ntdll.dll/ -1 0 52 `
�� LS;� n _ZwTerminateProcess@8 ntdll.dll ntdll.dll/ -1 0 51 `
�� L#_� o _ZwTerminateThread@8 ntdll.dll
ntdll.dll/ -1 0 45 `
�� L�!�� p _ZwTestAlert@0 ntdll.dll
ntdll.dll/ -1 0 48 `
�� L ~m� q _ZwThawRegistry@0 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�s�� r _ZwThawTransactions@0 ntdll.dll ntdll.dll/ -1 0 49 `
�� Lr�� s _ZwTraceControl@24 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L9}� t _ZwTraceEvent@16 ntdll.dll
ntdll.dll/ -1 0 54 `
�� L��d�" u _ZwTranslateFilePath@16 ntdll.dll ntdll.dll/ -1 0 50 `
�� L�w7� v _ZwUmsThreadYield@4 ntdll.dll ntdll.dll/ -1 0 48 `
�� L��7� w _ZwUnloadDriver@4 ntdll.dll ntdll.dll/ -1 0 46 `
�� L�'�� y _ZwUnloadKey2@8 ntdll.dll ntdll.dll/ -1 0 45 `
�� L}X� x _ZwUnloadKey@4 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L��� z _ZwUnloadKeyEx@8 ntdll.dll
ntdll.dll/ -1 0 47 `
�� L��� { _ZwUnlockFile@20 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L �<�$ | _ZwUnlockVirtualMemory@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�kt�" } _ZwUnmapViewOfSection@8 ntdll.dll ntdll.dll/ -1 0 57 `
�� Ln��% ~ _ZwUnmapViewOfSectionEx@12 ntdll.dll
ntdll.dll/ -1 0 61 `
�� Lv�^�) _ZwUnsubscribeWnfStateChange@4 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L ���# � _ZwUpdateWnfStateData@28 ntdll.dll
ntdll.dll/ -1 0 46 `
�� Lh#D� � _ZwVdmControl@8 ntdll.dll ntdll.dll/ -1 0 58 `
�� L�y�& � _ZwWaitForAlertByThreadId@8 ntdll.dll ntdll.dll/ -1 0 54 `
�� L�ep�" � _ZwWaitForDebugEvent@16 ntdll.dll ntdll.dll/ -1 0 54 `
�� LR ��" � _ZwWaitForKeyedEvent@16 ntdll.dll ntdll.dll/ -1 0 61 `
�� L�y�) � _ZwWaitForMultipleObjects32@20 ntdll.dll
ntdll.dll/ -1 0 59 `
�� L���' � _ZwWaitForMultipleObjects@20 ntdll.dll
ntdll.dll/ -1 0 56 `
�� L?��$ � _ZwWaitForSingleObject@12 ntdll.dll ntdll.dll/ -1 0 64 `
�� L]�, � _ZwWaitForWorkViaWorkerFactory@20 ntdll.dll ntdll.dll/ -1 0 53 `
�� L��! � _ZwWaitHighEventPair@4 ntdll.dll
ntdll.dll/ -1 0 52 `
�� L��� � _ZwWaitLowEventPair@4 ntdll.dll ntdll.dll/ -1 0 60 `
�� Lt��( � _ZwWorkerFactoryWorkerReady@4 ntdll.dll ntdll.dll/ -1 0 46 `
�� L���� � _ZwWriteFile@36 ntdll.dll ntdll.dll/ -1 0 52 `
�� L�7�� � _ZwWriteFileGather@36 ntdll.dll ntdll.dll/ -1 0 53 `
�� L<��! � _ZwWriteRequestData@24 ntdll.dll
ntdll.dll/ -1 0 55 `
�� L:���# � _ZwWriteVirtualMemory@20 ntdll.dll
ntdll.dll/ -1 0 50 `
�� L�78� � _ZwYieldExecution@0 ntdll.dll ntdll.dll/ -1 0 46 `
�� L�� � @ _vDbgPrintEx@16 ntdll.dll ntdll.dll/ -1 0 56 `
�� L���$ A _vDbgPrintExWithPrefix@20 ntdll.dll