| Server IP : 209.209.40.120 / Your IP : 216.73.217.112 Web Server : Microsoft-IIS/10.0 System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586 User : NEWWWW$ ( 0) PHP Version : 8.3.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/Program Files (x86)/Windows Kits/10/Lib/10.0.19041.0/um/arm/ |
Upload File : |
!<arch>
/ -1 0 124154 `
D ʀ ̢ �� � � � � ߄ ߄ � � �� �� �X �X � � �> �> �� �� �� �� �h �h �* �* ܒ ܒ � � gH gH g� g� �\ �\ �� �� � � ަ ަ �2 �2 �� �� � � �d �d �� �� �� �� �N �N �� �� �6 �6 �� �� �f �f �� �� �D �D �� �� �\ �\ �� �� v v � � � � � �
�
� � � j j @ @ � � �~ �~ d d 8 8 �~ �~
.
. � � �� �� H H � �
B
B 8 8 }� }� �� �� � � ^ ^ � � : : d d � � �l �l �� �� �> �> � � � � �p �p �� �� �� �� �< �< � � � � �~ �~ �� �� �j �j �� �� �L �L �� �� �2 �2 � � � � �t �t �� �� �\ �\ �� �� �� �� � � � � �� �� �X �X �� �� �: �: �� �� �, �, �� �� � � �� �� �T �T �� �� B B $ $ � � � � � � b b � � F F � � $ $ � � � � ^ ^ � � v v
X
X
�
� P P � �
�
� v v � � F F � � � � X X � � 2 2 � � � � � � ` ` � � � � � � v v � � � � R R � � J J � � � � l l B B � � � � � � !l !l !� !� %� %� &( &( "4 "4 # # #~ #~ $� $� %H %H &� &� '� '� (\ (\ (� (� )V )V *@ *@ *� *� +& +& 0| 0| -Z -Z -� -� .H .H .� .� * * � � /* /* 0 0 [� [� \l \l eX eX j� j� k k kt kt k� k� �~ �~ 3� 3� 5� 5� 6X 6X 6� 6� 78 78 7� 7� <� <� 8 8 8n 8n 9Z 9Z 9� 9� :F :F :� :� <( <( = = =t =t =� =� 2� 2� @� @� Ap Ap A� A� BN BN B� B� D D El El FX FX GD GD J8 J8 H� H� K: K: I2 I2 I� I� J� J� �0 �0 K� K� L2 L2 L� L� M M M� M� M� M� Nf Nf O� O� 4� 4� P� P� 5x 5x P8 P8 5 5 Q Q Q� Q� R R N� N� OX OX E� E� �r �r �b �b R� R� ^4 ^4 �T �T �� �� �� �� �� �� x> x> � � �z �z �� �� �� �� � � � � �� �� �Z �Z �2 �2 ¤ ¤ � � �� �� Ǥ Ǥ � � �� �� S� S� TR TR T� T� UJ UJ U� U� Sh Sh R� R� VR VR V� V� 4 4 i^ i^ H H W0 W0 W� W� X X Xj Xj X� X� Y� Y� ]� ]� _� _� ]N ]N \� \� ` ` `n `n `� `� aD aD a� a� c c c� c� d d dt dt d� d� f� f� e� e� h h g. g. h� h� h� h� j> j> m2 m2 m� m� l� l� n n n� n� n� n� oX oX p4 p4 p� p� q� q� q� q� s8 s8 s� s� v� v� w� w� � � ( ( #� #� � � t t x� x� y� y� z z z� z� Ú Ú '� '� {z {z |h |h |� |� � � �� �� �� �� n� n� �h �h �� �� �& �& r� r� a� a� {� {� �� �� �� �� pp pp o� o� r> r> o� o� �� �� $� $� %h %h
H
H � � n n Ȁ Ȁ 0� 0� � � c c b� b� b b c� c� o o gd gd fl fl e| e| e e g� g� hJ hJ d d f� f� e� e� �F �F i� i� j� j� j* j* i< i< t� t� wB wB { { �j �j �� �� �L �L �6 �6 � � �� �� �� �� �z �z �� �� �| �| �� �� � � �T �T �� �� �0 �0 t� t� up up u� u� � � �� �� �T �T �8 �8 �� �� �d �d �� �� �6 �6 �� �� �n �n �d �d �" �" D� D� �� �� �J �J �� �� �. �. �� �� � � �v �v �� �� �� �� �8 �8 � � �F �F �� �� �| �| �� �� �^ �^ X� X� X X +� +� ,p ,p �R �R �� �� �N �N N N ^ ^ � � �� �� �, �, �� �� �� �� � � �� �� �D �D �� �� �� �� �` �` �� �� � � �� �� � � �� �� �� �� �* �* �� �� � � �� �� �h �h �P �P �� �� �: �: �( �( �� �� �� �� G� G� �� �� �n �n �� �� �n �n �: �: �� �� i� i� �� �� � � �� �� �� �� �T �T �l �l �� �� �� �� � � �8 �8 �� �� �� �� �� �� � � �x �x �^ �^ �� �� �� �� �D �D Z& Z& Z� Z� [ [ [� [� �V �V �2 �2 �� �� �� �� �� �� �N �N �* �* �� �� �J �J ƺ ƺ � � �� �� �` �` �� �� �@ �@ ʰ ʰ �& �& � � Ϊ Ϊ �� �� �F �F Ѿ Ѿ �8 �8 Ҵ Ҵ �2 �2 Ӥ Ӥ � � Հ Հ �� �� �d �d �H �H �. �. ؠ ؠ � � ن ن � � �l �l �� �� �d �d �� �� � � ݦ ݦ � � ތ ތ � � ߀ ߀ �� �� �f �f �� �� �H �H � � �2 �2 � � � � � � �� �� �` �` h� h� k� k� k� k� lf lf l� l� m@ m@ m� m� �� �� �< �< � � � � �\ �\ �L �L �� �� �& �& � � � � � � � � � � � � �� �� �j �j �� �� �L �L � � �6 �6 �� �� � � � � � � � � �z �z �� �� �Z �Z �� �� �J �J �& �& � � �� �� �� �� �V �V �� �� � � �� �� �� �� �� �� �F �F �� �� � � f f � � F F � � v v � � V V
�
� < < r r � � Z Z � � � � ~ ~ � � L L 4 4 � � � � l l � � � � (� (� (& (& � � � � � � � � !J !J !� !� %� %� # # #� #� &X &X &� &� ) ) )l )l )� )� *J *J *� *� +& +& +� +� ,� ,� -L -L -� -� . . .� .� / / /~ /~ /� /� 0� 0� 1` 1` 3$ 3$ 3� 3� 4j 4j 3� 3� p� p� 4� 4� 5T 5T 5� 5� qZ qZ 6� 6� 7 7 9N 9N 66 66 7� 7� 7� 7� 8l 8l 8� 8� 9� 9� ;� ;� =� =� >V >V >� >� ?D ?D @: @: @� @� A" A" ?� ?� A� A� B� B� Cf Cf B� B� C� C� D> D> E� E� GH GH G� G� I� I� J� J� K2 K2 L( L( K� K� M M M� M� OZ OZ O� O� < < <� <� �R �R �� �� � � �� �� �n �n 1� 1� P� P� R� R� T T P� P� Q� Q� Qr Qr Rf Rf T� T� Y Y Yp Yp Y� Y� _f _f s4 s4 s� s� t t t� t� _� _� 28 28 ˎ ˎ َ َ � � �b �b � � �� �� �J �J �B �B ش ش �� �� �R �R �r �r � � 1� 1� , , � � )� )� D� D� �, �, � � � � 2H 2H lH lH � � ?� ?� : : [� [� \ \ \� \� ]
]
]~ ]~ ]� ]� ^p ^p ^� ^� k k r� r� q� q� U� U� VT VT V� V� W4 W4 W� W� Ĉ Ĉ vX vX �b �b � � SD SD S� S� T T �z �z � � � � � � � � N N T T � � � � �� �� 1b 1b B B L� L� �� �� j j � � � � � � �f �f � � �� �� ` ` �| �| � � @ @ @� @� �� �� ,� ,� ,� ,� N� N� >R >R >� >� ?* ?* $x $x : : 4, 4, 'F 'F � � F� F� �< �< �� �� � � � � � � 6 6 F F � � � � �� ��
�
� � � � � � � ^ ^ � � ~ ~ � � P, P, = = =p =p fF fF g� g� "� "� �� �� `> `> � � � � 3. 3. H( H( b" b" b� b� q q t t �* �* �� �� �d �d �� �� �� �� y0 y0 > > +� +� �� �� d� d� � � �n �n �� �� `� `� �� �� �& �& D� D� #� #� � � r r � � �t �t ", ", "� "� 0 0 � � �� �� � � � � � � �z �z �8 �8 � � �z �z �2 �2 �� �� �� �� �J �J �� �� �j �j �� �� �P �P �� �� �* �* � � �F �F �� �� �~ �~ �\ �\ �� �� �h �h � � � � �� �� �� �� �h �h � � � � �X �X �. �. � � �� �� �2 �2 �| �| �" �" � � fn fn �h �h � � :2 :2 � � �& �& :� :� * * �J �J ^ ^ ; ; N~ N~ �$ �$ Ϩ Ϩ � � Ц Ц �( �( є є � � ҂ ҂ �
�
ӄ ӄ � � �p �p �f �f �� �� �� �� � � 0 0 ZR ZR � �
u u u� u� vN vN ur ur �� �� �p �p �� �� �� �� �* �* �\ �\ �� �� �* �* �� �� �L �L � � �� �� �: �: �� �� � � �\ �\ �� �� �& �& �� �� � � �� �� �6 �6 �� �� � � �� �� �v �v �� �� �� �� �p �p �� �� �d �d �� �� 2� 2� �6 �6 �� �� 0n 0n It It YD YD �� �� > > Up Up H\ H\ H� H� [8 [8 Z� Z� � � H H v� v� w( w( w� w� x x xv xv x� x� yD yD y� y� z z z� z� {� {� | | |� |� } } { { }z }z }� }� ~X ~X ~� ~� < < � � �
�
�� �� �� �� �b �b �� �� �J �J �� �� �& �& �� �� �� �� �` �` �� �� �F �F �� �� �( �( �� �� �
�
�r �r �� �� �< �< �� �� � � �~ �~ �� �� �` �` �� �� �> �> �� �� � � � � $ $ /� /� r` r` �� �� 'x 'x C� C� _" _" φ φ Fh Fh �z �z ' ' C( C( ^� ^� o� o� � �
�
� E� E� �� �� F� F� �: �: E E $b $b �| �| �( �( 8� 8� � � � � a& a& � � �, �, U U J\ J\ �D �D � � ;< ;< �� �� Ԟ Ԟ �" �" �� �� �� �� ;� ;� � � � � }T }T ~4 ~4 ~� ~� �� �� �@ �@ �X �X �p �p �� �� " " � � � �� �� � � � � � � � � �� �� � � �h �h �D �D � � �< �< �� �� d� d� �r �r �V �V � � �
�
r� r� b� b� ߮ ߮ � � /T /T ). ). �� �� �^ �^ S� S� e, e, �� �� /X /X � � .r .r �. �. 2� 2� �� �� 2` 2` � � F� F� È È @� @� �R �R �j �j 2� 2� � � �� �� 0 0 �� �� �d �d z z � � Yb Yb �( �( [z [z � � �� �� & & �� �� %B %B �� �� �� �� !� !� � � �F �F b| b| �8 �8 e� e� �N �N Eh Eh �$ �$ �B �B ?� ?� �~ �~ _� _� � � g� g� . . �� �� � � �� �� 4� 4� �@ �@ %� %� �h �h n n �* �* z z �6 �6 . . }� }� C� C� �` �` �� �� s> s> �, �, ~ ~ ^� ^� �D �D 38 38 �� �� XL XL � � @� @� �� �� )� )� �P �P � � �� �� ~� ~� �� �� ۮ ۮ X X �& �& x� x� Ү Ү O O � � �� �� # # �� �� X X � � $h $h �$ �$ �� �� a a fl fl �( �( �� �� 3 3 ـ ـ U� U�
�
� �d �d � � 2T 2T *� *� �� �� �V �V x x � � f f �� �� V> V> �� �� 8> 8> T T � � '| '| �8 �8 f� f� � � � � X X �V �V <� <� & & �� �� ʈ ʈ F� F� ߎ ߎ [� [� �� �� - - �^ �^ D� D� �@ �@ H� H� � � jX jX \ \ � � | | �8 �8 6� 6� �X �X X� X� �v �v *p *p �, �, �* �* =| =| � � �� �� e� e� � � �z �z w6 w6 � � b b #� #� �� �� b b �� �� D� D� �� �� �n �n /� /� Z� Z� � � �� �� Q� Q� �~ �~ �� �� 1
1
O� O� �r �r �� �� � � �� �� � � � � V V �� �� � � � � j j �� �� � � �j �j � � �� �� " " �: �: � � �� �� � � �� �� � � � � V V �r �r � � �� �� , , �L �L � � �� �� �2 �2 � � �� �� � � � � !r !r �� �� "N "N �p �p "� "� �� �� #4 #4 �P �P #� #� �� �� $ $ �* �* $| $| �� �� $� $� � � %Z %Z �~ �~ %� %� �� �� &B &B �f �f &� &� �� �� '* '* �N �N '� '� �� �� ( ( �6 �6 (� (� �� �� (� (� �( �( )z )z �� �� )� )� � � *d *d �� �� *� *� �� �� +H +H �n �n +� +� �� �� ,6 ,6 �X �X ,� ,� �8 �8 -� -� �� �� -� -� � � .r .r �� �� .� .� �� �� 0* 0* �D �D 0� 0� � � 1r 1r �� �� 1� 1� �> �> 3� 3� �� �� 3� 3� � � 4j 4j �� �� 4� 4� �� �� 5N 5N �d �d 5� 5� �� �� 6" 6" �B �B 6� 6� �� �� 6� 6� � � 7n 7n �� �� 7� 7� �R �R 8� 8� �� �� 9 9 �J �J 9� 9� �� �� : : �* �* :| :| �� �� :� :� �
�
;\ ;\ �~ �~ ;� ;� �� �� <: <: �� �� = = �� �� =� =� �� �� >N >N �l �l >� >� �� �� ?* ?* è è ?� ?� � � @j @j Ć Ć @� @� �� �� AF AF �d �d A� A� �� �� B B �> �> B� B� Ƭ Ƭ B� B� � � Cj Cj ǀ ǀ C� C� �� �� DF DF �� �� E E �4 �4 E� E� ɠ ɠ E� E� � � Fh Fh �� �� GD GD �^ �^ G� G� �� �� H H ̪ ̪ H� H� � � Ih Ih �~ �~ I� I� �� �� J: J: �P �P J� J� κ κ K K �( �( Kz Kz Ϟ Ϟ K� K� � � L^ L^ Є Є L� L� �� �� MF MF �d �d M� M� �� �� N& N& �D �D N� N� � � Ol Ol ӂ ӂ O� O� �� �� P@ P@ �\ �\ P� P� �� �� Q Q �* �* Q| Q| ՞ ՞ Q� Q� � � Rd Rd �~ �~ R� R� �� �� S@ S@ �� �� T T �> �> T� T� ذ ذ U U � � Ul Ul �X �X V� V� �� �� W W �: �: W� W� � � Xj Xj ܘ ܘ X� X� �~ �~ Y� Y� �� �� Z: Z: �V �V Z� Z� [ [ � � \N \N �l �l \� \� �� �� ]2 ]2 �R �R ]� ]� � � ^
^
�. �. ^� ^� � � ^� ^� � � _^ _^ �� �� `> `> �X �X `� `� �2 �2 a� a� � � a� a� � � br br � � b� b� � � cV cV �| �| c� c� �� �� d> d> �\ �\ d� d� �� �� e e �2 �2 e� e� � � e� e� � � f� f� � � gB gB �p �p h, h, �� �� h� h� �L �L i i � � ix ix �, �, i� i� � � j� j� �| �| k8 k8 �� �� k� k� �V �V l l � � lz lz �* �* l� l� � � mJ mJ �Z �Z n n � � n| n| �& �& n� n� � � oX oX � � o� o� �v �v p2 p2 �� �� p� p� �V �V q q �� �� q~ q~ �. �. q� q� �� �� rT rT �� �� s� s� �` �` t t �� �� t� t� �: �: t� t� �� �� ul ul �( �( u� u� �� �� vP vP �
�
v� v� �� �� w� w� �� �� xx xx �� �� yH yH �� �� y� y� �� �� z� z� �. �. z� z� �� �� {X {X � � {� {� �x �x |4 |4 �� �� |� |� R R } } � � }x }x � � ~R ~R t t 0 0 � � � � � � �| �| * * �� �� � � �N �N �� �� H H � � � � �j �j �� �� � � �J �J h h �$ �$ � � �� �� J J � � � � �r �r
$
$ �� ��
�
� �L �L �� �� ~ ~ �: �: � � �� �� � � �� ��
@
@ �� �� �� �� � � �P �P �� �� r r �. �. 8 8 �� �� � � �f �f �� �� � � �J �J ^ ^ � � � � �� �� D D � � � � �t �t � � �^ �^ �� �� � � �� �� ` ` � � � � �� �� X X � � � � �� �� F F � � � � �t �t � � �H �H � � �� �� l l �( �( < < �� �� � � �f �f � � �J �J �� �� � � �� �� ` ` � � � � �� �� !@ !@ �� �� !� !� �h �h " " �� �� "� "� �T �T #� #� �B �B $� $� �� �� &� &� �P �P ' ' �� �� '� '� �� �� (V (V � � (� (� �~ �~ * * �� �� +J +J � � +� +� �t �t ,, ,, �� �� ,� ,� �^ �^ -" -" �� �� -� -� �V �V .� .� �� �� /� /� �� �� 0: 0: �� �� 0� 0� �f �f 1 1 �� �� 1� 1� �B �B 1� 1� �� �� 3� 3� �h �h 4 4 �� �� 4� 4� �� �� 5^ 5^ � � 5� 5� �� �� 62 62 �� �� 7 7 �� �� 7� 7� �< �< 7� 7� �� �� 8^ 8^ � � 8� 8� �� �� 9F 9F � � 9� 9� �| �| :$ :$ �� �� :� :� �F �F :� :� �� �� ;d ;d � � ;� ;� �� �� << << �� �� <� <� �d �d = = �� �� =� =� �J �J =� =� �� �� >l >l �( �( >� >� �� �� ?N ?N �
�
?� ?� �| �| @0 @0 �� �� An An �* �* A� A� �� �� BP BP � � B� B� �t �t C. C. �� �� D D �� �� D� D� �D �D E� E� FT FT � � G> G> � � G� G� �j �j H$ H$ �� �� H� H� �^ �^ I I �� �� I� I� �N �N J J ƾ ƾ Jn Jn �* �* J� J� ǘ ǘ KF KF � � K� K� �n �n L& L& �� �� L� L� �V �V M M �� �� M~ M~ �: �: M� M� ʲ ʲ Nh Nh �$ �$ N� N� ˔ ˔ OB OB � � P P �� �� P� P� �> �> P� P� ͦ ͦ QZ QZ � � R* R* �� �� R� R� �\ �\ S S �� �� S� S� �D �D S� S� ж ж Tt Tt �0 �0 T� T� ў ў UL UL � � U� U� �p �p V( V( �� �� V� V� �P �P V� V� Ӻ Ӻ Wn Wn �* �* W� W� Ԙ Ԙ Y& Y& �� �� Y� Y� �H �H Y� Y� ֲ ֲ Zd Zd � � [6 [6 �� �� [� [� �` �` \ \ �� �� \z \z �6 �6 \� \� ٜ ٜ ]H ]H � � ]� ]� �l �l ^ ^ �� �� ^� ^� ۴ ۴ _j _j �& �& _� _� ܜ ܜ `P `P � � `� `� �t �t a, a, �� �� a� a� �V �V cb cb � � c� c� � � dH dH � � �� �� m� m�__IMPORT_DESCRIPTOR_ntdll __NULL_IMPORT_DESCRIPTOR ntdll_NULL_THUNK_DATA DbgUiConnectToDbg __imp_DbgUiConnectToDbg DbgUiWaitStateChange __imp_DbgUiWaitStateChange DbgUiContinue __imp_DbgUiContinue DbgUiStopDebugging __imp_DbgUiStopDebugging DbgUiDebugActiveProcess __imp_DbgUiDebugActiveProcess DbgUiGetThreadDebugObject __imp_DbgUiGetThreadDebugObject DbgUiSetThreadDebugObject __imp_DbgUiSetThreadDebugObject DbgUiRemoteBreakin __imp_DbgUiRemoteBreakin DbgUiIssueRemoteBreakin __imp_DbgUiIssueRemoteBreakin DbgUiConvertStateChangeStructure __imp_DbgUiConvertStateChangeStructure DbgUiConvertStateChangeStructureEx __imp_DbgUiConvertStateChangeStructureEx DbgBreakPoint __imp_DbgBreakPoint DbgPrint __imp_DbgPrint DbgPrintEx __imp_DbgPrintEx __imp_vDbgPrintEx vDbgPrintEx __imp_vDbgPrintExWithPrefix vDbgPrintExWithPrefix DbgPrintReturnControlC __imp_DbgPrintReturnControlC DbgPrompt __imp_DbgPrompt DbgUserBreakPoint __imp_DbgUserBreakPoint DbgSetDebugFilterState __imp_DbgSetDebugFilterState DbgQueryDebugFilterState __imp_DbgQueryDebugFilterState KiUserInvertedFunctionTable __imp_KiUserInvertedFunctionTable LdrAccessResource __imp_LdrAccessResource LdrEnumerateLoadedModules __imp_LdrEnumerateLoadedModules LdrEnumResources __imp_LdrEnumResources LdrFastFailInLoaderCallout __imp_LdrFastFailInLoaderCallout LdrFindEntryForAddress __imp_LdrFindEntryForAddress LdrFindResource_U __imp_LdrFindResource_U LdrFindResourceEx_U __imp_LdrFindResourceEx_U LdrFindResourceDirectory_U __imp_LdrFindResourceDirectory_U LdrGetDllHandle __imp_LdrGetDllHandle LdrGetDllHandleByMapping __imp_LdrGetDllHandleByMapping LdrGetDllHandleByName __imp_LdrGetDllHandleByName LdrGetDllHandleEx __imp_LdrGetDllHandleEx LdrAddRefDll __imp_LdrAddRefDll LdrGetDllFullName __imp_LdrGetDllFullName LdrGetProcedureAddress __imp_LdrGetProcedureAddress LdrGetProcedureAddressEx __imp_LdrGetProcedureAddressEx LdrGetProcedureAddressForCaller __imp_LdrGetProcedureAddressForCaller LdrLoadDll __imp_LdrLoadDll LdrSetDllManifestProber __imp_LdrSetDllManifestProber LdrLockLoaderLock __imp_LdrLockLoaderLock LdrSetAppCompatDllRedirectionCallback __imp_LdrSetAppCompatDllRedirectionCallback LdrShutdownProcess __imp_LdrShutdownProcess LdrShutdownThread __imp_LdrShutdownThread LdrUnloadDll __imp_LdrUnloadDll LdrUnlockLoaderLock __imp_LdrUnlockLoaderLock LdrDisableThreadCalloutsForDll __imp_LdrDisableThreadCalloutsForDll LdrInitShimEngineDynamic __imp_LdrInitShimEngineDynamic LdrSetDefaultDllDirectories __imp_LdrSetDefaultDllDirectories LdrAddDllDirectory __imp_LdrAddDllDirectory LdrRemoveDllDirectory __imp_LdrRemoveDllDirectory LdrSetDllDirectory __imp_LdrSetDllDirectory LdrGetDllDirectory __imp_LdrGetDllDirectory LdrGetDllPath __imp_LdrGetDllPath LdrIsModuleSxsRedirected __imp_LdrIsModuleSxsRedirected LdrResolveDelayLoadedAPI __imp_LdrResolveDelayLoadedAPI LdrResolveDelayLoadsFromDll __imp_LdrResolveDelayLoadsFromDll LdrQueryOptionalDelayLoadedAPI __imp_LdrQueryOptionalDelayLoadedAPI LdrUpdatePackageSearchPath __imp_LdrUpdatePackageSearchPath RtlGetExePath __imp_RtlGetExePath RtlGetSearchPath __imp_RtlGetSearchPath RtlReleasePath __imp_RtlReleasePath RtlSetSearchPathMode __imp_RtlSetSearchPathMode NlsMbCodePageTag __imp_NlsMbCodePageTag NlsMbOemCodePageTag __imp_NlsMbOemCodePageTag NlsAnsiCodePage __imp_NlsAnsiCodePage PfxFindPrefix __imp_PfxFindPrefix PfxInitialize __imp_PfxInitialize PfxInsertPrefix __imp_PfxInsertPrefix PfxRemovePrefix __imp_PfxRemovePrefix RtlAbortRXact __imp_RtlAbortRXact RtlAbsoluteToSelfRelativeSD __imp_RtlAbsoluteToSelfRelativeSD RtlAcquirePebLock __imp_RtlAcquirePebLock RtlAcquirePrivilege __imp_RtlAcquirePrivilege RtlAcquireResourceExclusive __imp_RtlAcquireResourceExclusive RtlAcquireResourceShared __imp_RtlAcquireResourceShared RtlActivateActivationContextUnsafeFast __imp_RtlActivateActivationContextUnsafeFast RtlAddAccessAllowedAce __imp_RtlAddAccessAllowedAce RtlAddAccessAllowedAceEx __imp_RtlAddAccessAllowedAceEx RtlAddAccessAllowedObjectAce __imp_RtlAddAccessAllowedObjectAce RtlAddAccessDeniedAce __imp_RtlAddAccessDeniedAce RtlAddAccessDeniedAceEx __imp_RtlAddAccessDeniedAceEx RtlAddAccessDeniedObjectAce __imp_RtlAddAccessDeniedObjectAce RtlAddAccessFilterAce __imp_RtlAddAccessFilterAce RtlAddAce __imp_RtlAddAce RtlAddActionToRXact __imp_RtlAddActionToRXact RtlAddAtomToAtomTable __imp_RtlAddAtomToAtomTable RtlAddAttributeActionToRXact __imp_RtlAddAttributeActionToRXact RtlAddAuditAccessAce __imp_RtlAddAuditAccessAce RtlAddAuditAccessAceEx __imp_RtlAddAuditAccessAceEx RtlAddAuditAccessObjectAce __imp_RtlAddAuditAccessObjectAce RtlAddMandatoryAce __imp_RtlAddMandatoryAce RtlAddProcessTrustLabelAce __imp_RtlAddProcessTrustLabelAce RtlAddResourceAttributeAce __imp_RtlAddResourceAttributeAce RtlAddScopedPolicyIDAce __imp_RtlAddScopedPolicyIDAce RtlAddressInSectionTable __imp_RtlAddressInSectionTable RtlAdjustPrivilege __imp_RtlAdjustPrivilege RtlAllocateActivationContextStack __imp_RtlAllocateActivationContextStack RtlAllocateAndInitializeSid __imp_RtlAllocateAndInitializeSid RtlAllocateAndInitializeSidEx __imp_RtlAllocateAndInitializeSidEx RtlAllocateHandle __imp_RtlAllocateHandle RtlAllocateHeap __imp_RtlAllocateHeap RtlAnsiCharToUnicodeChar __imp_RtlAnsiCharToUnicodeChar RtlAnsiStringToUnicodeSize __imp_RtlAnsiStringToUnicodeSize RtlAnsiStringToUnicodeString __imp_RtlAnsiStringToUnicodeString RtlAppendAsciizToString __imp_RtlAppendAsciizToString RtlAppendStringToString __imp_RtlAppendStringToString RtlAppendUnicodeToString __imp_RtlAppendUnicodeToString RtlAppendUnicodeStringToString __imp_RtlAppendUnicodeStringToString RtlApplicationVerifierStop __imp_RtlApplicationVerifierStop RtlApplyRXact __imp_RtlApplyRXact RtlApplyRXactNoFlush __imp_RtlApplyRXactNoFlush RtlAreAllAccessesGranted __imp_RtlAreAllAccessesGranted RtlAreAnyAccessesGranted __imp_RtlAreAnyAccessesGranted RtlAreBitsClear __imp_RtlAreBitsClear RtlAreBitsSet __imp_RtlAreBitsSet RtlAssert __imp_RtlAssert RtlAvlInsertNodeEx __imp_RtlAvlInsertNodeEx RtlAvlRemoveNode __imp_RtlAvlRemoveNode RtlCapabilityCheck __imp_RtlCapabilityCheck RtlCapabilityCheckForSingleSessionSku __imp_RtlCapabilityCheckForSingleSessionSku RtlCharToInteger __imp_RtlCharToInteger RtlCheckForOrphanedCriticalSections __imp_RtlCheckForOrphanedCriticalSections RtlCheckPortableOperatingSystem __imp_RtlCheckPortableOperatingSystem RtlCheckRegistryKey __imp_RtlCheckRegistryKey RtlCheckTokenCapability __imp_RtlCheckTokenCapability RtlCheckTokenMembership __imp_RtlCheckTokenMembership RtlCheckTokenMembershipEx __imp_RtlCheckTokenMembershipEx RtlClearAllBits __imp_RtlClearAllBits RtlClearBit __imp_RtlClearBit RtlClearBits __imp_RtlClearBits RtlClearThreadWorkOnBehalfTicket __imp_RtlClearThreadWorkOnBehalfTicket RtlCompactHeap __imp_RtlCompactHeap RtlCompareAltitudes __imp_RtlCompareAltitudes RtlCompareMemory __imp_RtlCompareMemory RtlCompareMemoryUlong __imp_RtlCompareMemoryUlong RtlCompareString __imp_RtlCompareString RtlCompareUnicodeString __imp_RtlCompareUnicodeString RtlCompareUnicodeStrings __imp_RtlCompareUnicodeStrings RtlCompressBuffer __imp_RtlCompressBuffer RtlComputeCrc32 __imp_RtlComputeCrc32 RtlComputeImportTableHash __imp_RtlComputeImportTableHash RtlConstructCrossVmEventPath __imp_RtlConstructCrossVmEventPath RtlConstructCrossVmMutexPath __imp_RtlConstructCrossVmMutexPath RtlContractHashTable __imp_RtlContractHashTable RtlConvertExclusiveToShared __imp_RtlConvertExclusiveToShared RtlConvertDeviceFamilyInfoToString __imp_RtlConvertDeviceFamilyInfoToString RtlConvertSharedToExclusive __imp_RtlConvertSharedToExclusive RtlConvertSidToUnicodeString __imp_RtlConvertSidToUnicodeString RtlConvertToAutoInheritSecurityObject __imp_RtlConvertToAutoInheritSecurityObject RtlCopyBitMap __imp_RtlCopyBitMap RtlCopyLuid __imp_RtlCopyLuid RtlCopyLuidAndAttributesArray __imp_RtlCopyLuidAndAttributesArray RtlCopyMappedMemory __imp_RtlCopyMappedMemory RtlCopySecurityDescriptor __imp_RtlCopySecurityDescriptor RtlCopySid __imp_RtlCopySid RtlCopySidAndAttributesArray __imp_RtlCopySidAndAttributesArray RtlCopyString __imp_RtlCopyString RtlCopyUnicodeString __imp_RtlCopyUnicodeString RtlCrc32 __imp_RtlCrc32 RtlCrc64 __imp_RtlCrc64 RtlCreateHashTable __imp_RtlCreateHashTable RtlCreateHashTableEx __imp_RtlCreateHashTableEx RtlCreateAcl __imp_RtlCreateAcl RtlCreateAndSetSD __imp_RtlCreateAndSetSD RtlCreateAtomTable __imp_RtlCreateAtomTable RtlCreateEnvironment __imp_RtlCreateEnvironment RtlCreateEnvironmentEx __imp_RtlCreateEnvironmentEx RtlCreateHeap __imp_RtlCreateHeap RtlCreateProcessParameters __imp_RtlCreateProcessParameters RtlCreateProcessParametersEx __imp_RtlCreateProcessParametersEx RtlCreateProcessParametersWithTemplate __imp_RtlCreateProcessParametersWithTemplate RtlCreateProcessReflection __imp_RtlCreateProcessReflection RtlCreateRegistryKey __imp_RtlCreateRegistryKey RtlCreateSecurityDescriptor __imp_RtlCreateSecurityDescriptor RtlCreateServiceSid __imp_RtlCreateServiceSid RtlCreateVirtualAccountSid __imp_RtlCreateVirtualAccountSid RtlCreateUnicodeString __imp_RtlCreateUnicodeString RtlCreateUnicodeStringFromAsciiz __imp_RtlCreateUnicodeStringFromAsciiz RtlCreateUserProcess __imp_RtlCreateUserProcess RtlCreateUserProcessEx __imp_RtlCreateUserProcessEx RtlCloneUserProcess __imp_RtlCloneUserProcess RtlCmDecodeMemIoResource __imp_RtlCmDecodeMemIoResource RtlCmEncodeMemIoResource __imp_RtlCmEncodeMemIoResource RtlCreateUserSecurityObject __imp_RtlCreateUserSecurityObject RtlCreateUserThread __imp_RtlCreateUserThread RtlExitUserProcess __imp_RtlExitUserProcess RtlExitUserThread __imp_RtlExitUserThread RtlFindExportedRoutineByName __imp_RtlFindExportedRoutineByName RtlFlsAlloc __imp_RtlFlsAlloc RtlFlsFree __imp_RtlFlsFree RtlFlsGetValue __imp_RtlFlsGetValue RtlFlsSetValue __imp_RtlFlsSetValue RtlProcessFlsData __imp_RtlProcessFlsData RtlDeactivateActivationContextUnsafeFast __imp_RtlDeactivateActivationContextUnsafeFast RtlDecompressBuffer __imp_RtlDecompressBuffer RtlDecompressBufferEx __imp_RtlDecompressBufferEx RtlDecompressFragment __imp_RtlDecompressFragment RtlDefaultNpAcl __imp_RtlDefaultNpAcl RtlDelete __imp_RtlDelete RtlDeleteNoSplay __imp_RtlDeleteNoSplay RtlDeleteAce __imp_RtlDeleteAce RtlDeleteAtomFromAtomTable __imp_RtlDeleteAtomFromAtomTable RtlDeleteCriticalSection __imp_RtlDeleteCriticalSection RtlDeleteElementGenericTable __imp_RtlDeleteElementGenericTable RtlDeleteElementGenericTableAvl __imp_RtlDeleteElementGenericTableAvl RtlDeleteElementGenericTableAvlEx __imp_RtlDeleteElementGenericTableAvlEx RtlDeleteHashTable __imp_RtlDeleteHashTable RtlDeleteRegistryValue __imp_RtlDeleteRegistryValue RtlDeleteResource __imp_RtlDeleteResource RtlDeleteSecurityObject __imp_RtlDeleteSecurityObject RtlDeNormalizeProcessParams __imp_RtlDeNormalizeProcessParams RtlDeriveCapabilitySidsFromName __imp_RtlDeriveCapabilitySidsFromName RtlDestroyAtomTable __imp_RtlDestroyAtomTable RtlDestroyEnvironment __imp_RtlDestroyEnvironment RtlDestroyHandleTable __imp_RtlDestroyHandleTable RtlDestroyHeap __imp_RtlDestroyHeap RtlDestroyProcessParameters __imp_RtlDestroyProcessParameters RtlDetermineDosPathNameType_U __imp_RtlDetermineDosPathNameType_U RtlDllShutdownInProgress __imp_RtlDllShutdownInProgress RtlDoesFileExists_U __imp_RtlDoesFileExists_U RtlDosPathNameToNtPathName_U_WithStatus __imp_RtlDosPathNameToNtPathName_U_WithStatus RtlDosLongPathNameToNtPathName_U_WithStatus __imp_RtlDosLongPathNameToNtPathName_U_WithStatus RtlDosPathNameToRelativeNtPathName_U_WithStatus __imp_RtlDosPathNameToRelativeNtPathName_U_WithStatus RtlDosLongPathNameToRelativeNtPathName_U_WithStatus __imp_RtlDosLongPathNameToRelativeNtPathName_U_WithStatus RtlDosPathNameToNtPathName_U __imp_RtlDosPathNameToNtPathName_U RtlDosPathNameToRelativeNtPathName_U __imp_RtlDosPathNameToRelativeNtPathName_U RtlNtPathNameToDosPathName __imp_RtlNtPathNameToDosPathName RtlDosSearchPath_U __imp_RtlDosSearchPath_U RtlDosSearchPath_Ustr __imp_RtlDosSearchPath_Ustr RtlDowncaseUnicodeChar __imp_RtlDowncaseUnicodeChar RtlDowncaseUnicodeString __imp_RtlDowncaseUnicodeString RtlDumpResource __imp_RtlDumpResource RtlDuplicateUnicodeString __imp_RtlDuplicateUnicodeString RtlEmptyAtomTable __imp_RtlEmptyAtomTable RtlEncodePointer __imp_RtlEncodePointer RtlDecodePointer __imp_RtlDecodePointer RtlEncodeSystemPointer __imp_RtlEncodeSystemPointer RtlDecodeSystemPointer __imp_RtlDecodeSystemPointer RtlEncodeRemotePointer __imp_RtlEncodeRemotePointer RtlDecodeRemotePointer __imp_RtlDecodeRemotePointer RtlEndEnumerationHashTable __imp_RtlEndEnumerationHashTable RtlEndStrongEnumerationHashTable __imp_RtlEndStrongEnumerationHashTable RtlEndWeakEnumerationHashTable __imp_RtlEndWeakEnumerationHashTable RtlEnableEarlyCriticalSectionEventCreation __imp_RtlEnableEarlyCriticalSectionEventCreation RtlEnableThreadProfiling __imp_RtlEnableThreadProfiling RtlDisableThreadProfiling __imp_RtlDisableThreadProfiling RtlQueryThreadProfiling __imp_RtlQueryThreadProfiling RtlReadThreadProfilingData __imp_RtlReadThreadProfilingData RtlEnterCriticalSection __imp_RtlEnterCriticalSection RtlExtendCorrelationVector __imp_RtlExtendCorrelationVector RtlIncrementCorrelationVector __imp_RtlIncrementCorrelationVector RtlInitializeCorrelationVector __imp_RtlInitializeCorrelationVector RtlIsCriticalSectionLocked __imp_RtlIsCriticalSectionLocked RtlIsCriticalSectionLockedByThread __imp_RtlIsCriticalSectionLockedByThread RtlGetCriticalSectionRecursionCount __imp_RtlGetCriticalSectionRecursionCount RtlIsCloudFilesPlaceholder __imp_RtlIsCloudFilesPlaceholder RtlIsCurrentProcess __imp_RtlIsCurrentProcess RtlIsCurrentThread __imp_RtlIsCurrentThread RtlIsElevatedRid __imp_RtlIsElevatedRid RtlIsMultiSessionSku __imp_RtlIsMultiSessionSku RtlIsStateSeparationEnabled __imp_RtlIsStateSeparationEnabled RtlGetPersistedStateLocation __imp_RtlGetPersistedStateLocation RtlIsNonEmptyDirectoryReparsePointAllowed __imp_RtlIsNonEmptyDirectoryReparsePointAllowed RtlIsPartialPlaceholder __imp_RtlIsPartialPlaceholder RtlIsPartialPlaceholderFileHandle __imp_RtlIsPartialPlaceholderFileHandle RtlIsPartialPlaceholderFileInfo __imp_RtlIsPartialPlaceholderFileInfo RtlIsMultiUsersInSessionSku __imp_RtlIsMultiUsersInSessionSku RtlIsZeroMemory __imp_RtlIsZeroMemory RtlCheckSandboxedToken __imp_RtlCheckSandboxedToken RtlGetSessionProperties __imp_RtlGetSessionProperties RtlEnumerateGenericTable __imp_RtlEnumerateGenericTable RtlEnumerateGenericTableAvl __imp_RtlEnumerateGenericTableAvl RtlEnumerateGenericTableLikeADirectory __imp_RtlEnumerateGenericTableLikeADirectory RtlEnumerateGenericTableWithoutSplaying __imp_RtlEnumerateGenericTableWithoutSplaying RtlEnumerateGenericTableWithoutSplayingAvl __imp_RtlEnumerateGenericTableWithoutSplayingAvl RtlEnumerateEntryHashTable __imp_RtlEnumerateEntryHashTable RtlEnumProcessHeaps __imp_RtlEnumProcessHeaps RtlEqualComputerName __imp_RtlEqualComputerName RtlEqualDomainName __imp_RtlEqualDomainName RtlCanonicalizeDomainName __imp_RtlCanonicalizeDomainName RtlFindUnicodeSubstring __imp_RtlFindUnicodeSubstring RtlReplaceSystemDirectoryInPath __imp_RtlReplaceSystemDirectoryInPath RtlEqualLuid __imp_RtlEqualLuid RtlEqualPrefixSid __imp_RtlEqualPrefixSid RtlEqualSid __imp_RtlEqualSid RtlEqualString __imp_RtlEqualString RtlEqualUnicodeString __imp_RtlEqualUnicodeString RtlEraseUnicodeString __imp_RtlEraseUnicodeString RtlExpandHashTable __imp_RtlExpandHashTable RtlExtendedMagicDivide __imp_RtlExtendedMagicDivide RtlExpandEnvironmentStrings_U __imp_RtlExpandEnvironmentStrings_U RtlExpandEnvironmentStrings __imp_RtlExpandEnvironmentStrings RtlExtractBitMap __imp_RtlExtractBitMap RtlFillMemory __imp_RtlFillMemory RtlFillMemoryUlong __imp_RtlFillMemoryUlong RtlFillMemoryUlonglong __imp_RtlFillMemoryUlonglong RtlFindAceByType __imp_RtlFindAceByType RtlFindCharInUnicodeString __imp_RtlFindCharInUnicodeString RtlFindClearBits __imp_RtlFindClearBits RtlFindClearBitsAndSet __imp_RtlFindClearBitsAndSet RtlFindClearRuns __imp_RtlFindClearRuns RtlFindClosestEncodableLength __imp_RtlFindClosestEncodableLength RtlFindLongestRunClear __imp_RtlFindLongestRunClear RtlFindLastBackwardRunClear __imp_RtlFindLastBackwardRunClear RtlFindNextForwardRunClear __imp_RtlFindNextForwardRunClear RtlFindMessage __imp_RtlFindMessage RtlFindSetBits __imp_RtlFindSetBits RtlFindSetBitsAndClear __imp_RtlFindSetBitsAndClear RtlFirstFreeAce __imp_RtlFirstFreeAce RtlFormatMessage __imp_RtlFormatMessage RtlFormatMessageEx __imp_RtlFormatMessageEx RtlFormatCurrentUserKeyPath __imp_RtlFormatCurrentUserKeyPath RtlFreeActivationContextStack __imp_RtlFreeActivationContextStack RtlFreeAnsiString __imp_RtlFreeAnsiString RtlFreeHandle __imp_RtlFreeHandle RtlFreeHeap __imp_RtlFreeHeap RtlFreeOemString __imp_RtlFreeOemString RtlFreeSid __imp_RtlFreeSid RtlFreeUTF8String __imp_RtlFreeUTF8String RtlFreeUnicodeString __imp_RtlFreeUnicodeString RtlGenerate8dot3Name __imp_RtlGenerate8dot3Name RtlGetAce __imp_RtlGetAce RtlGetCompressionWorkSpaceSize __imp_RtlGetCompressionWorkSpaceSize RtlGetControlSecurityDescriptor __imp_RtlGetControlSecurityDescriptor RtlSetControlSecurityDescriptor __imp_RtlSetControlSecurityDescriptor RtlSetEnvironmentStrings __imp_RtlSetEnvironmentStrings RtlSetThreadPlaceholderCompatibilityMode __imp_RtlSetThreadPlaceholderCompatibilityMode RtlSetProcessPlaceholderCompatibilityMode __imp_RtlSetProcessPlaceholderCompatibilityMode RtlSetProxiedProcessId __imp_RtlSetProxiedProcessId RtlSetPortableOperatingSystem __imp_RtlSetPortableOperatingSystem RtlGetCurrentDirectory_U __imp_RtlGetCurrentDirectory_U RtlGetCurrentProcessorNumber __imp_RtlGetCurrentProcessorNumber RtlGetCurrentProcessorNumberEx __imp_RtlGetCurrentProcessorNumberEx RtlGetCurrentServiceSessionId __imp_RtlGetCurrentServiceSessionId RtlIsProcessorFeaturePresent __imp_RtlIsProcessorFeaturePresent RtlSetUnhandledExceptionFilter __imp_RtlSetUnhandledExceptionFilter RtlGetDaclSecurityDescriptor __imp_RtlGetDaclSecurityDescriptor RtlGetElementGenericTable __imp_RtlGetElementGenericTable RtlGetElementGenericTableAvl __imp_RtlGetElementGenericTableAvl RtlGetFrame __imp_RtlGetFrame RtlGetIntegerAtom __imp_RtlGetIntegerAtom RtlGetNextEntryHashTable __imp_RtlGetNextEntryHashTable RtlpQueryProcessDebugInformationRemote __imp_RtlpQueryProcessDebugInformationRemote RtlGetNativeSystemInformation __imp_RtlGetNativeSystemInformation RtlGetNtVersionNumbers __imp_RtlGetNtVersionNumbers RtlGetUILanguageInfo __imp_RtlGetUILanguageInfo RtlGUIDFromString __imp_RtlGUIDFromString RtlpCleanupRegistryKeys __imp_RtlpCleanupRegistryKeys RtlGetDeviceFamilyInfoEnum __imp_RtlGetDeviceFamilyInfoEnum RtlGetUserPreferredUILanguages __imp_RtlGetUserPreferredUILanguages RtlGetSystemPreferredUILanguages __imp_RtlGetSystemPreferredUILanguages RtlpSetUserPreferredUILanguages __imp_RtlpSetUserPreferredUILanguages RtlpSetInstallLanguage __imp_RtlpSetInstallLanguage RtlpVerifyAndCommitUILanguageSettings __imp_RtlpVerifyAndCommitUILanguageSettings RtlpSetPreferredUILanguages __imp_RtlpSetPreferredUILanguages RtlGetThreadPreferredUILanguages __imp_RtlGetThreadPreferredUILanguages RtlSetThreadPreferredUILanguages __imp_RtlSetThreadPreferredUILanguages RtlSetThreadPreferredUILanguages2 __imp_RtlSetThreadPreferredUILanguages2 RtlRestoreThreadPreferredUILanguages __imp_RtlRestoreThreadPreferredUILanguages RtlCleanUpTEBLangLists __imp_RtlCleanUpTEBLangLists RtlGetFileMUIPath __imp_RtlGetFileMUIPath RtlpQueryDefaultUILanguage __imp_RtlpQueryDefaultUILanguage RtlLCIDToCultureName __imp_RtlLCIDToCultureName RtlCultureNameToLCID __imp_RtlCultureNameToLCID RtlConvertLCIDToString __imp_RtlConvertLCIDToString RtlpConvertLCIDsToCultureNames __imp_RtlpConvertLCIDsToCultureNames RtlpConvertCultureNamesToLCIDs __imp_RtlpConvertCultureNamesToLCIDs RtlpConvertAbsoluteToRelativeSecurityAttribute __imp_RtlpConvertAbsoluteToRelativeSecurityAttribute RtlpConvertRelativeToAbsoluteSecurityAttribute __imp_RtlpConvertRelativeToAbsoluteSecurityAttribute RtlpRefreshCachedUILanguage __imp_RtlpRefreshCachedUILanguage RtlpIsQualifiedLanguage __imp_RtlpIsQualifiedLanguage RtlpGetUserOrMachineUILanguage4NLS __imp_RtlpGetUserOrMachineUILanguage4NLS RtlpGetNameFromLangInfoNode __imp_RtlpGetNameFromLangInfoNode RtlpGetLCIDFromLangInfoNode __imp_RtlpGetLCIDFromLangInfoNode RtlpLoadMachineUIByPolicy __imp_RtlpLoadMachineUIByPolicy RtlpLoadUserUIByPolicy __imp_RtlpLoadUserUIByPolicy RtlpCreateProcessRegistryInfo __imp_RtlpCreateProcessRegistryInfo RtlpInitializeLangRegistryInfo __imp_RtlpInitializeLangRegistryInfo RtlpGetSystemDefaultUILanguage __imp_RtlpGetSystemDefaultUILanguage RtlGetThreadLangIdByIndex __imp_RtlGetThreadLangIdByIndex RtlpMuiRegCreateRegistryInfo __imp_RtlpMuiRegCreateRegistryInfo RtlpMuiRegLoadRegistryInfo __imp_RtlpMuiRegLoadRegistryInfo RtlpMuiRegFreeRegistryInfo __imp_RtlpMuiRegFreeRegistryInfo RtlpMuiFreeLangRegistryInfo __imp_RtlpMuiFreeLangRegistryInfo RtlGetActiveConsoleId __imp_RtlGetActiveConsoleId RtlGetConsoleSessionForegroundProcessId __imp_RtlGetConsoleSessionForegroundProcessId RtlGetCurrentTransaction __imp_RtlGetCurrentTransaction RtlGetFullPathName_U __imp_RtlGetFullPathName_U RtlGetFullPathName_UEx __imp_RtlGetFullPathName_UEx RtlGetFullPathName_UstrEx __imp_RtlGetFullPathName_UstrEx RtlGetGroupSecurityDescriptor __imp_RtlGetGroupSecurityDescriptor RtlGetInterruptTimePrecise __imp_RtlGetInterruptTimePrecise RtlGetLastNtStatus __imp_RtlGetLastNtStatus RtlGetLastWin32Error __imp_RtlGetLastWin32Error RtlGetLocaleFileMappingAddress __imp_RtlGetLocaleFileMappingAddress RtlGetLongestNtPathLength __imp_RtlGetLongestNtPathLength RtlGetUserInfoHeap __imp_RtlGetUserInfoHeap RtlGetUnloadEventTrace __imp_RtlGetUnloadEventTrace RtlGetUnloadEventTraceEx __imp_RtlGetUnloadEventTraceEx RtlGetNtGlobalFlags __imp_RtlGetNtGlobalFlags RtlGetNtProductType __imp_RtlGetNtProductType RtlGetNtSystemRoot __imp_RtlGetNtSystemRoot RtlGetAppContainerNamedObjectPath __imp_RtlGetAppContainerNamedObjectPath RtlGetAppContainerParent __imp_RtlGetAppContainerParent RtlGetAppContainerSidType __imp_RtlGetAppContainerSidType RtlGetOwnerSecurityDescriptor __imp_RtlGetOwnerSecurityDescriptor RtlGetReturnAddressHijackTarget __imp_RtlGetReturnAddressHijackTarget RtlGetSaclSecurityDescriptor __imp_RtlGetSaclSecurityDescriptor RtlGetSecurityDescriptorRMControl __imp_RtlGetSecurityDescriptorRMControl RtlGetSuiteMask __imp_RtlGetSuiteMask RtlGetSystemTimePrecise __imp_RtlGetSystemTimePrecise RtlGetThreadErrorMode __imp_RtlGetThreadErrorMode RtlGetThreadWorkOnBehalfTicket __imp_RtlGetThreadWorkOnBehalfTicket RtlGetTokenNamedObjectPath __imp_RtlGetTokenNamedObjectPath RtlGetProductInfo __imp_RtlGetProductInfo RtlGetVersion __imp_RtlGetVersion RtlHeapTrkInitialize __imp_RtlHeapTrkInitialize RtlDetectHeapLeaks __imp_RtlDetectHeapLeaks RtlIdentifierAuthoritySid __imp_RtlIdentifierAuthoritySid RtlImageDirectoryEntryToData __imp_RtlImageDirectoryEntryToData RtlImageNtHeader __imp_RtlImageNtHeader RtlImageNtHeaderEx __imp_RtlImageNtHeaderEx RtlImageRvaToSection __imp_RtlImageRvaToSection RtlImageRvaToVa __imp_RtlImageRvaToVa RtlImpersonateSelf __imp_RtlImpersonateSelf RtlImpersonateSelfEx __imp_RtlImpersonateSelfEx RtlInitAnsiString __imp_RtlInitAnsiString RtlInitAnsiStringEx __imp_RtlInitAnsiStringEx RtlInitEnumerationHashTable __imp_RtlInitEnumerationHashTable RtlInitUTF8String __imp_RtlInitUTF8String RtlInitUTF8StringEx __imp_RtlInitUTF8StringEx RtlInitializeAtomPackage __imp_RtlInitializeAtomPackage RtlInitializeBitMap __imp_RtlInitializeBitMap RtlInitializeConditionVariable __imp_RtlInitializeConditionVariable RtlWakeConditionVariable __imp_RtlWakeConditionVariable RtlWakeAllConditionVariable __imp_RtlWakeAllConditionVariable RtlSleepConditionVariableCS __imp_RtlSleepConditionVariableCS RtlSleepConditionVariableSRW __imp_RtlSleepConditionVariableSRW RtlInitializeCriticalSection __imp_RtlInitializeCriticalSection RtlInitializeCriticalSectionAndSpinCount __imp_RtlInitializeCriticalSectionAndSpinCount RtlInitializeCriticalSectionEx __imp_RtlInitializeCriticalSectionEx RtlUpdateClonedCriticalSection __imp_RtlUpdateClonedCriticalSection RtlSetCriticalSectionSpinCount __imp_RtlSetCriticalSectionSpinCount RtlSetCurrentTransaction __imp_RtlSetCurrentTransaction RtlInitializeGenericTable __imp_RtlInitializeGenericTable RtlInitializeGenericTableAvl __imp_RtlInitializeGenericTableAvl RtlInitializeHandleTable __imp_RtlInitializeHandleTable RtlInitializeResource __imp_RtlInitializeResource RtlInitializeRXact __imp_RtlInitializeRXact RtlInitializeSid __imp_RtlInitializeSid RtlInitializeSidEx __imp_RtlInitializeSidEx RtlInitializeSListHead __imp_RtlInitializeSListHead RtlInitString __imp_RtlInitString RtlInitStringEx __imp_RtlInitStringEx RtlInitStrongEnumerationHashTable __imp_RtlInitStrongEnumerationHashTable RtlInitUnicodeString __imp_RtlInitUnicodeString RtlInitUnicodeStringEx __imp_RtlInitUnicodeStringEx RtlInitWeakEnumerationHashTable __imp_RtlInitWeakEnumerationHashTable RtlInsertEntryHashTable __imp_RtlInsertEntryHashTable RtlInsertElementGenericTable __imp_RtlInsertElementGenericTable RtlInsertElementGenericTableAvl __imp_RtlInsertElementGenericTableAvl RtlInsertElementGenericTableFull __imp_RtlInsertElementGenericTableFull RtlInsertElementGenericTableFullAvl __imp_RtlInsertElementGenericTableFullAvl RtlIntegerToChar __imp_RtlIntegerToChar RtlIntegerToUnicodeString __imp_RtlIntegerToUnicodeString RtlInterlockedFlushSList __imp_RtlInterlockedFlushSList RtlInterlockedPopEntrySList __imp_RtlInterlockedPopEntrySList RtlInterlockedPushEntrySList __imp_RtlInterlockedPushEntrySList RtlInterlockedPushListSListEx __imp_RtlInterlockedPushListSListEx RtlInterlockedClearBitRun __imp_RtlInterlockedClearBitRun RtlInterlockedSetBitRun __imp_RtlInterlockedSetBitRun RtlDoesNameContainWildCards __imp_RtlDoesNameContainWildCards RtlIsNameInExpression __imp_RtlIsNameInExpression RtlIsNameInUnUpcasedExpression __imp_RtlIsNameInUnUpcasedExpression RtlIsParentOfChildAppContainer __imp_RtlIsParentOfChildAppContainer RtlIsUntrustedObject __imp_RtlIsUntrustedObject RtlQueryDepthSList __imp_RtlQueryDepthSList RtlInterlockedPushListSList __imp_RtlInterlockedPushListSList RtlFirstEntrySList __imp_RtlFirstEntrySList RtlInt64ToUnicodeString __imp_RtlInt64ToUnicodeString RtlIoDecodeMemIoResource __imp_RtlIoDecodeMemIoResource RtlIoEncodeMemIoResource __imp_RtlIoEncodeMemIoResource RtlIpv4AddressToStringA __imp_RtlIpv4AddressToStringA RtlIpv4AddressToStringW __imp_RtlIpv4AddressToStringW RtlIpv4AddressToStringExA __imp_RtlIpv4AddressToStringExA RtlIpv4AddressToStringExW __imp_RtlIpv4AddressToStringExW RtlIpv4StringToAddressA __imp_RtlIpv4StringToAddressA RtlIpv4StringToAddressW __imp_RtlIpv4StringToAddressW RtlIpv4StringToAddressExA __imp_RtlIpv4StringToAddressExA RtlIpv4StringToAddressExW __imp_RtlIpv4StringToAddressExW RtlIpv6AddressToStringA __imp_RtlIpv6AddressToStringA RtlIpv6AddressToStringW __imp_RtlIpv6AddressToStringW RtlIpv6AddressToStringExA __imp_RtlIpv6AddressToStringExA RtlIpv6AddressToStringExW __imp_RtlIpv6AddressToStringExW RtlIpv6StringToAddressA __imp_RtlIpv6StringToAddressA RtlIpv6StringToAddressW __imp_RtlIpv6StringToAddressW RtlIpv6StringToAddressExA __imp_RtlIpv6StringToAddressExA RtlIpv6StringToAddressExW __imp_RtlIpv6StringToAddressExW RtlEthernetAddressToStringA __imp_RtlEthernetAddressToStringA RtlEthernetAddressToStringW __imp_RtlEthernetAddressToStringW RtlEthernetStringToAddressA __imp_RtlEthernetStringToAddressA RtlEthernetStringToAddressW __imp_RtlEthernetStringToAddressW RtlIsDosDeviceName_U __imp_RtlIsDosDeviceName_U RtlIsGenericTableEmpty __imp_RtlIsGenericTableEmpty RtlIsGenericTableEmptyAvl __imp_RtlIsGenericTableEmptyAvl RtlIsNameLegalDOS8Dot3 __imp_RtlIsNameLegalDOS8Dot3 RtlIsCapabilitySid __imp_RtlIsCapabilitySid RtlIsPackageSid __imp_RtlIsPackageSid RtlIsValidProcessTrustLabelSid __imp_RtlIsValidProcessTrustLabelSid RtlIsValidHandle __imp_RtlIsValidHandle RtlIsValidIndexHandle __imp_RtlIsValidIndexHandle RtlIsValidLocaleName __imp_RtlIsValidLocaleName RtlKnownExceptionFilter __imp_RtlKnownExceptionFilter RtlLargeIntegerToChar __imp_RtlLargeIntegerToChar RtlLcidToLocaleName __imp_RtlLcidToLocaleName RtlLeaveCriticalSection __imp_RtlLeaveCriticalSection RtlLengthRequiredSid __imp_RtlLengthRequiredSid RtlLengthSecurityDescriptor __imp_RtlLengthSecurityDescriptor RtlLengthSid __imp_RtlLengthSid RtlLocaleNameToLcid __imp_RtlLocaleNameToLcid RtlLockHeap __imp_RtlLockHeap RtlLookupAtomInAtomTable __imp_RtlLookupAtomInAtomTable RtlLookupElementGenericTable __imp_RtlLookupElementGenericTable RtlLookupElementGenericTableAvl __imp_RtlLookupElementGenericTableAvl RtlLookupElementGenericTableFull __imp_RtlLookupElementGenericTableFull RtlLookupElementGenericTableFullAvl __imp_RtlLookupElementGenericTableFullAvl RtlLookupEntryHashTable __imp_RtlLookupEntryHashTable RtlLookupFirstMatchingElementGenericTableAvl __imp_RtlLookupFirstMatchingElementGenericTableAvl RtlMakeSelfRelativeSD __imp_RtlMakeSelfRelativeSD RtlMapGenericMask __imp_RtlMapGenericMask RtlMapSecurityErrorToNtStatus __imp_RtlMapSecurityErrorToNtStatus RtlMoveMemory __imp_RtlMoveMemory RtlConsoleMultiByteToUnicodeN __imp_RtlConsoleMultiByteToUnicodeN RtlMultiByteToUnicodeN __imp_RtlMultiByteToUnicodeN RtlMultiByteToUnicodeSize __imp_RtlMultiByteToUnicodeSize RtlMultipleAllocateHeap __imp_RtlMultipleAllocateHeap RtlMultipleFreeHeap __imp_RtlMultipleFreeHeap RtlNewInstanceSecurityObject __imp_RtlNewInstanceSecurityObject RtlNewSecurityGrantedAccess __imp_RtlNewSecurityGrantedAccess RtlNewSecurityObject __imp_RtlNewSecurityObject RtlNewSecurityObjectEx __imp_RtlNewSecurityObjectEx RtlNewSecurityObjectWithMultipleInheritance __imp_RtlNewSecurityObjectWithMultipleInheritance RtlNormalizeProcessParams __imp_RtlNormalizeProcessParams RtlNormalizeSecurityDescriptor __imp_RtlNormalizeSecurityDescriptor RtlNotifyFeatureUsage __imp_RtlNotifyFeatureUsage RtlNtStatusToDosError __imp_RtlNtStatusToDosError RtlNtStatusToDosErrorNoTeb __imp_RtlNtStatusToDosErrorNoTeb RtlNumberGenericTableElements __imp_RtlNumberGenericTableElements RtlNumberGenericTableElementsAvl __imp_RtlNumberGenericTableElementsAvl RtlNumberOfClearBits __imp_RtlNumberOfClearBits RtlNumberOfClearBitsInRange __imp_RtlNumberOfClearBitsInRange RtlNumberOfSetBits __imp_RtlNumberOfSetBits RtlNumberOfSetBitsInRange __imp_RtlNumberOfSetBitsInRange RtlNumberOfSetBitsUlongPtr __imp_RtlNumberOfSetBitsUlongPtr RtlOemStringToUnicodeSize __imp_RtlOemStringToUnicodeSize RtlOemStringToUnicodeString __imp_RtlOemStringToUnicodeString RtlOemToUnicodeN __imp_RtlOemToUnicodeN RtlOpenCurrentUser __imp_RtlOpenCurrentUser RtlOsDeploymentState __imp_RtlOsDeploymentState RtlOwnerAcesPresent __imp_RtlOwnerAcesPresent RtlPcToFileHeader __imp_RtlPcToFileHeader RtlpMergeSecurityAttributeInformation __imp_RtlpMergeSecurityAttributeInformation RtlpNtCreateKey __imp_RtlpNtCreateKey RtlpNtEnumerateSubKey __imp_RtlpNtEnumerateSubKey RtlpNtMakeTemporaryKey __imp_RtlpNtMakeTemporaryKey RtlpNtOpenKey __imp_RtlpNtOpenKey RtlpNtQueryValueKey __imp_RtlpNtQueryValueKey RtlpNtSetValueKey __imp_RtlpNtSetValueKey RtlPinAtomInAtomTable __imp_RtlPinAtomInAtomTable RtlPopFrame __imp_RtlPopFrame RtlPrefixString __imp_RtlPrefixString RtlPrefixUnicodeString __imp_RtlPrefixUnicodeString RtlPushFrame __imp_RtlPushFrame RtlQueryAllFeatureConfigurations __imp_RtlQueryAllFeatureConfigurations RtlQueryAtomInAtomTable __imp_RtlQueryAtomInAtomTable RtlQueryElevationFlags __imp_RtlQueryElevationFlags RtlQueryEnvironmentVariable_U __imp_RtlQueryEnvironmentVariable_U RtlQueryEnvironmentVariable __imp_RtlQueryEnvironmentVariable RtlQueryFeatureConfiguration __imp_RtlQueryFeatureConfiguration RtlQueryFeatureConfigurationChangeStamp __imp_RtlQueryFeatureConfigurationChangeStamp RtlQueryFeatureUsageNotificationSubscriptions __imp_RtlQueryFeatureUsageNotificationSubscriptions RtlQueryHeapInformation __imp_RtlQueryHeapInformation RtlQueryInformationAcl __imp_RtlQueryInformationAcl RtlQueryPackageClaims __imp_RtlQueryPackageClaims RtlQueryPackageIdentity __imp_RtlQueryPackageIdentity RtlQueryPackageIdentityEx __imp_RtlQueryPackageIdentityEx RtlQueryPerformanceCounter __imp_RtlQueryPerformanceCounter RtlQueryPerformanceFrequency __imp_RtlQueryPerformanceFrequency RtlQueryThreadPlaceholderCompatibilityMode __imp_RtlQueryThreadPlaceholderCompatibilityMode RtlQueryProcessPlaceholderCompatibilityMode __imp_RtlQueryProcessPlaceholderCompatibilityMode RtlQueryRegistryValues __imp_RtlQueryRegistryValues RtlQueryRegistryValuesEx __imp_RtlQueryRegistryValuesEx RtlQueryRegistryValueWithFallback __imp_RtlQueryRegistryValueWithFallback RtlQuerySecurityObject __imp_RtlQuerySecurityObject RtlQueryTimeZoneInformation __imp_RtlQueryTimeZoneInformation RtlQueryTokenHostIdAsUlong64 __imp_RtlQueryTokenHostIdAsUlong64 RtlQueryUnbiasedInterruptTime __imp_RtlQueryUnbiasedInterruptTime RtlQueryValidationRunlevel __imp_RtlQueryValidationRunlevel RtlQueueApcWow64Thread __imp_RtlQueueApcWow64Thread RtlRaiseCustomSystemEventTrigger __imp_RtlRaiseCustomSystemEventTrigger RtlRaiseException __imp_RtlRaiseException RtlRaiseStatus __imp_RtlRaiseStatus RtlRandom __imp_RtlRandom RtlRandomEx __imp_RtlRandomEx RtlRbInsertNodeEx __imp_RtlRbInsertNodeEx RtlRbRemoveNode __imp_RtlRbRemoveNode RtlReAllocateHeap __imp_RtlReAllocateHeap RtlRealPredecessor __imp_RtlRealPredecessor RtlRealSuccessor __imp_RtlRealSuccessor RtlRegisterFeatureConfigurationChangeNotification __imp_RtlRegisterFeatureConfigurationChangeNotification RtlReleasePebLock __imp_RtlReleasePebLock RtlReleasePrivilege __imp_RtlReleasePrivilege RtlReleaseRelativeName __imp_RtlReleaseRelativeName RtlReleaseResource __imp_RtlReleaseResource RtlRemoteCall __imp_RtlRemoteCall RtlRemoveEntryHashTable __imp_RtlRemoveEntryHashTable RtlRemovePrivileges __imp_RtlRemovePrivileges RtlReplaceSidInSd __imp_RtlReplaceSidInSd RtlRestoreLastWin32Error __imp_RtlRestoreLastWin32Error RtlRunDecodeUnicodeString __imp_RtlRunDecodeUnicodeString RtlRunEncodeUnicodeString __imp_RtlRunEncodeUnicodeString RtlSecondsSince1970ToTime __imp_RtlSecondsSince1970ToTime RtlSecondsSince1980ToTime __imp_RtlSecondsSince1980ToTime RtlSelfRelativeToAbsoluteSD __imp_RtlSelfRelativeToAbsoluteSD RtlSelfRelativeToAbsoluteSD2 __imp_RtlSelfRelativeToAbsoluteSD2 RtlSetAllBits __imp_RtlSetAllBits RtlSetBit __imp_RtlSetBit RtlSetBits __imp_RtlSetBits RtlSetCurrentDirectory_U __imp_RtlSetCurrentDirectory_U RtlSetCurrentEnvironment __imp_RtlSetCurrentEnvironment RtlSetDaclSecurityDescriptor __imp_RtlSetDaclSecurityDescriptor RtlSetEnvironmentVariable __imp_RtlSetEnvironmentVariable RtlSetEnvironmentVar __imp_RtlSetEnvironmentVar RtlSetFeatureConfigurations __imp_RtlSetFeatureConfigurations RtlSetGroupSecurityDescriptor __imp_RtlSetGroupSecurityDescriptor RtlSetHeapInformation __imp_RtlSetHeapInformation RtlSetLastWin32Error __imp_RtlSetLastWin32Error RtlSetLastWin32ErrorAndNtStatusFromNtStatus __imp_RtlSetLastWin32ErrorAndNtStatusFromNtStatus RtlSetUserValueHeap __imp_RtlSetUserValueHeap RtlSetUserFlagsHeap __imp_RtlSetUserFlagsHeap RtlSetInformationAcl __imp_RtlSetInformationAcl RtlSetOwnerSecurityDescriptor __imp_RtlSetOwnerSecurityDescriptor RtlSetProcessIsCritical __imp_RtlSetProcessIsCritical RtlSetSaclSecurityDescriptor __imp_RtlSetSaclSecurityDescriptor RtlSetSecurityDescriptorRMControl __imp_RtlSetSecurityDescriptorRMControl RtlSetSecurityObject __imp_RtlSetSecurityObject RtlSetSecurityObjectEx __imp_RtlSetSecurityObjectEx RtlSetThreadSubProcessTag __imp_RtlSetThreadSubProcessTag RtlSetThreadErrorMode __imp_RtlSetThreadErrorMode RtlSetThreadIsCritical __imp_RtlSetThreadIsCritical RtlSetThreadWorkOnBehalfTicket __imp_RtlSetThreadWorkOnBehalfTicket RtlSetTimeZoneInformation __imp_RtlSetTimeZoneInformation RtlSidDominates __imp_RtlSidDominates RtlSidDominatesForTrust __imp_RtlSidDominatesForTrust RtlSidEqualLevel __imp_RtlSidEqualLevel RtlSidHashInitialize __imp_RtlSidHashInitialize RtlSidHashLookup __imp_RtlSidHashLookup RtlSidIsHigherLevel __imp_RtlSidIsHigherLevel RtlSizeHeap __imp_RtlSizeHeap RtlSplay __imp_RtlSplay RtlStartRXact __imp_RtlStartRXact RtlStringFromGUID __imp_RtlStringFromGUID RtlStringFromGUIDEx __imp_RtlStringFromGUIDEx RtlStronglyEnumerateEntryHashTable __imp_RtlStronglyEnumerateEntryHashTable RtlSubAuthorityCountSid __imp_RtlSubAuthorityCountSid RtlSubAuthoritySid __imp_RtlSubAuthoritySid RtlSubscribeForFeatureUsageNotification __imp_RtlSubscribeForFeatureUsageNotification RtlSubtreePredecessor __imp_RtlSubtreePredecessor RtlSubtreeSuccessor __imp_RtlSubtreeSuccessor RtlTestBit __imp_RtlTestBit RtlTestProtectedAccess __imp_RtlTestProtectedAccess RtlTimeToElapsedTimeFields __imp_RtlTimeToElapsedTimeFields RtlTimeFieldsToTime __imp_RtlTimeFieldsToTime RtlpTimeFieldsToTime __imp_RtlpTimeFieldsToTime RtlTimeToSecondsSince1970 __imp_RtlTimeToSecondsSince1970 RtlTimeToSecondsSince1980 __imp_RtlTimeToSecondsSince1980 RtlTimeToTimeFields __imp_RtlTimeToTimeFields RtlpTimeToTimeFields __imp_RtlpTimeToTimeFields RtlTraceDatabaseCreate __imp_RtlTraceDatabaseCreate RtlTraceDatabaseDestroy __imp_RtlTraceDatabaseDestroy RtlTraceDatabaseValidate __imp_RtlTraceDatabaseValidate RtlTraceDatabaseAdd __imp_RtlTraceDatabaseAdd RtlTraceDatabaseFind __imp_RtlTraceDatabaseFind RtlTraceDatabaseEnumerate __imp_RtlTraceDatabaseEnumerate RtlTraceDatabaseLock __imp_RtlTraceDatabaseLock RtlTraceDatabaseUnlock __imp_RtlTraceDatabaseUnlock RtlTryAcquirePebLock __imp_RtlTryAcquirePebLock RtlTryEnterCriticalSection __imp_RtlTryEnterCriticalSection RtlUnhandledExceptionFilter __imp_RtlUnhandledExceptionFilter RtlUnhandledExceptionFilter2 __imp_RtlUnhandledExceptionFilter2 RtlUnicodeStringToAnsiSize __imp_RtlUnicodeStringToAnsiSize RtlUnicodeStringToAnsiString __imp_RtlUnicodeStringToAnsiString RtlUnicodeStringToInteger __imp_RtlUnicodeStringToInteger RtlUnicodeStringToOemSize __imp_RtlUnicodeStringToOemSize RtlUnicodeStringToOemString __imp_RtlUnicodeStringToOemString RtlUnicodeStringToCountedOemString __imp_RtlUnicodeStringToCountedOemString RtlUnicodeStringToUTF8String __imp_RtlUnicodeStringToUTF8String RtlUnicodeToMultiByteN __imp_RtlUnicodeToMultiByteN RtlUnicodeToOemN __imp_RtlUnicodeToOemN RtlUnicodeToMultiByteSize __imp_RtlUnicodeToMultiByteSize RtlUnicodeToUTF8N __imp_RtlUnicodeToUTF8N RtlUniform __imp_RtlUniform RtlUnlockHeap __imp_RtlUnlockHeap RtlUnregisterFeatureConfigurationChangeNotification __imp_RtlUnregisterFeatureConfigurationChangeNotification RtlUnsubscribeFromFeatureUsageNotifications __imp_RtlUnsubscribeFromFeatureUsageNotifications RtlUnwind __imp_RtlUnwind RtlUpcaseUnicodeChar __imp_RtlUpcaseUnicodeChar RtlUpcaseUnicodeString __imp_RtlUpcaseUnicodeString RtlUpcaseUnicodeStringToOemString __imp_RtlUpcaseUnicodeStringToOemString RtlUpcaseUnicodeStringToCountedOemString __imp_RtlUpcaseUnicodeStringToCountedOemString RtlUpcaseUnicodeToMultiByteN __imp_RtlUpcaseUnicodeToMultiByteN RtlUpcaseUnicodeToOemN __imp_RtlUpcaseUnicodeToOemN RtlUpperChar __imp_RtlUpperChar RtlUpperString __imp_RtlUpperString RtlUTF8StringToUnicodeString __imp_RtlUTF8StringToUnicodeString RtlUTF8ToUnicodeN __imp_RtlUTF8ToUnicodeN RtlNormalizeString __imp_RtlNormalizeString RtlIsNormalizedString __imp_RtlIsNormalizedString RtlIdnToAscii __imp_RtlIdnToAscii RtlIdnToUnicode __imp_RtlIdnToUnicode RtlIdnToNameprepUnicode __imp_RtlIdnToNameprepUnicode RtlSwitchedVVI __imp_RtlSwitchedVVI RtlValidAcl __imp_RtlValidAcl RtlValidateCorrelationVector __imp_RtlValidateCorrelationVector RtlValidateUnicodeString __imp_RtlValidateUnicodeString RtlValidProcessProtection __imp_RtlValidProcessProtection RtlValidSecurityDescriptor __imp_RtlValidSecurityDescriptor RtlValidRelativeSecurityDescriptor __imp_RtlValidRelativeSecurityDescriptor RtlValidSid __imp_RtlValidSid RtlVerifyVersionInfo __imp_RtlVerifyVersionInfo RtlWalkFrameChain __imp_RtlWalkFrameChain RtlWalkHeap __imp_RtlWalkHeap RtlWeaklyEnumerateEntryHashTable __imp_RtlWeaklyEnumerateEntryHashTable RtlWriteRegistryValue __imp_RtlWriteRegistryValue RtlxAnsiStringToUnicodeSize __imp_RtlxAnsiStringToUnicodeSize RtlxOemStringToUnicodeSize __imp_RtlxOemStringToUnicodeSize RtlxUnicodeStringToAnsiSize __imp_RtlxUnicodeStringToAnsiSize RtlxUnicodeStringToOemSize __imp_RtlxUnicodeStringToOemSize RtlZeroMemory __imp_RtlZeroMemory RtlSystemTimeToLocalTime __imp_RtlSystemTimeToLocalTime RtlLocalTimeToSystemTime __imp_RtlLocalTimeToSystemTime CsrClientConnectToServer __imp_CsrClientConnectToServer CsrClientCallServer __imp_CsrClientCallServer CsrAllocateCaptureBuffer __imp_CsrAllocateCaptureBuffer CsrFreeCaptureBuffer __imp_CsrFreeCaptureBuffer CsrAllocateMessagePointer __imp_CsrAllocateMessagePointer CsrCaptureMessageBuffer __imp_CsrCaptureMessageBuffer CsrCaptureMessageString __imp_CsrCaptureMessageString CsrCaptureMessageMultiUnicodeStringsInPlace __imp_CsrCaptureMessageMultiUnicodeStringsInPlace CsrCaptureTimeout __imp_CsrCaptureTimeout CsrIdentifyAlertableThread __imp_CsrIdentifyAlertableThread CsrSetPriorityClass __imp_CsrSetPriorityClass CsrGetProcessId __imp_CsrGetProcessId CsrVerifyRegion __imp_CsrVerifyRegion RtlCutoverTimeToSystemTime __imp_RtlCutoverTimeToSystemTime RtlCreateTagHeap __imp_RtlCreateTagHeap RtlGetProcessHeaps __imp_RtlGetProcessHeaps RtlCreateQueryDebugBuffer __imp_RtlCreateQueryDebugBuffer RtlDestroyQueryDebugBuffer __imp_RtlDestroyQueryDebugBuffer RtlQueryProcessDebugInformation __imp_RtlQueryProcessDebugInformation RtlSetProcessDebugInformation __imp_RtlSetProcessDebugInformation RtlCommitDebugInfo __imp_RtlCommitDebugInfo RtlDeCommitDebugInfo __imp_RtlDeCommitDebugInfo RtlFlushSecureMemoryCache __imp_RtlFlushSecureMemoryCache RtlRegisterSecureMemoryCacheCallback __imp_RtlRegisterSecureMemoryCacheCallback RtlDeregisterSecureMemoryCacheCallback __imp_RtlDeregisterSecureMemoryCacheCallback RtlRegisterThreadWithCsrss __imp_RtlRegisterThreadWithCsrss RtlWow64CallFunction64 __imp_RtlWow64CallFunction64 RtlWow64EnableFsRedirection __imp_RtlWow64EnableFsRedirection RtlWow64EnableFsRedirectionEx __imp_RtlWow64EnableFsRedirectionEx RtlWow64GetCurrentMachine __imp_RtlWow64GetCurrentMachine RtlWow64GetEquivalentMachineCHPE __imp_RtlWow64GetEquivalentMachineCHPE RtlWow64GetProcessMachines __imp_RtlWow64GetProcessMachines RtlWow64GetSharedInfoProcess __imp_RtlWow64GetSharedInfoProcess RtlWow64IsWowGuestMachineSupported __imp_RtlWow64IsWowGuestMachineSupported RtlpNotOwnerCriticalSection __imp_RtlpNotOwnerCriticalSection RtlpWaitForCriticalSection __imp_RtlpWaitForCriticalSection RtlpUnWaitCriticalSection __imp_RtlpUnWaitCriticalSection RtlWaitOnAddress __imp_RtlWaitOnAddress RtlWakeAddressAll __imp_RtlWakeAddressAll RtlWakeAddressAllNoFence __imp_RtlWakeAddressAllNoFence RtlWakeAddressSingle __imp_RtlWakeAddressSingle RtlWakeAddressSingleNoFence __imp_RtlWakeAddressSingleNoFence RtlIsTextUnicode __imp_RtlIsTextUnicode RtlGetCallersAddress __imp_RtlGetCallersAddress RtlLogStackBackTrace __imp_RtlLogStackBackTrace RtlCaptureContext __imp_RtlCaptureContext RtlCaptureStackBackTrace __imp_RtlCaptureStackBackTrace RtlValidateHeap __imp_RtlValidateHeap RtlValidateProcessHeaps __imp_RtlValidateProcessHeaps RtlSetImageMitigationPolicy __imp_RtlSetImageMitigationPolicy RtlQueryImageMitigationPolicy __imp_RtlQueryImageMitigationPolicy RtlQueryProcessLockInformation __imp_RtlQueryProcessLockInformation RtlQueryProcessBackTraceInformation __imp_RtlQueryProcessBackTraceInformation LdrQueryProcessModuleInformation __imp_LdrQueryProcessModuleInformation LdrOpenImageFileOptionsKey __imp_LdrOpenImageFileOptionsKey LdrQueryImageFileKeyOption __imp_LdrQueryImageFileKeyOption LdrQueryImageFileExecutionOptions __imp_LdrQueryImageFileExecutionOptions LdrQueryImageFileExecutionOptionsEx __imp_LdrQueryImageFileExecutionOptionsEx LdrQueryModuleServiceTags __imp_LdrQueryModuleServiceTags RtlInitNlsTables __imp_RtlInitNlsTables RtlResetRtlTranslations __imp_RtlResetRtlTranslations RtlCustomCPToUnicodeN __imp_RtlCustomCPToUnicodeN RtlUnicodeToCustomCPN __imp_RtlUnicodeToCustomCPN RtlUpcaseUnicodeToCustomCPN __imp_RtlUpcaseUnicodeToCustomCPN RtlInitCodePageTable __imp_RtlInitCodePageTable LdrProcessRelocationBlock __imp_LdrProcessRelocationBlock LdrProcessRelocationBlockEx __imp_LdrProcessRelocationBlockEx LdrVerifyImageMatchesChecksum __imp_LdrVerifyImageMatchesChecksum LdrVerifyImageMatchesChecksumEx __imp_LdrVerifyImageMatchesChecksumEx VerSetConditionMask __imp_VerSetConditionMask RtlAddVectoredContinueHandler __imp_RtlAddVectoredContinueHandler RtlRemoveVectoredContinueHandler __imp_RtlRemoveVectoredContinueHandler RtlAddVectoredExceptionHandler __imp_RtlAddVectoredExceptionHandler RtlRemoveVectoredExceptionHandler __imp_RtlRemoveVectoredExceptionHandler WerReportExceptionWorker __imp_WerReportExceptionWorker RtlRegisterWait __imp_RtlRegisterWait RtlDeregisterWait __imp_RtlDeregisterWait RtlDeregisterWaitEx __imp_RtlDeregisterWaitEx RtlQueueWorkItem __imp_RtlQueueWorkItem RtlCreateTimerQueue __imp_RtlCreateTimerQueue RtlCreateTimer __imp_RtlCreateTimer RtlUpdateTimer __imp_RtlUpdateTimer RtlDeleteTimer __imp_RtlDeleteTimer RtlDeleteTimerQueue __imp_RtlDeleteTimerQueue RtlDeleteTimerQueueEx __imp_RtlDeleteTimerQueueEx RtlSetThreadPoolStartFunc __imp_RtlSetThreadPoolStartFunc RtlSetIoCompletionCallback __imp_RtlSetIoCompletionCallback RtlDebugPrintTimes __imp_RtlDebugPrintTimes RtlSetTimer __imp_RtlSetTimer RtlCancelTimer __imp_RtlCancelTimer RtlDnsHostNameToComputerName __imp_RtlDnsHostNameToComputerName LdrCallEnclave __imp_LdrCallEnclave LdrCreateEnclave __imp_LdrCreateEnclave LdrDeleteEnclave __imp_LdrDeleteEnclave LdrLoadEnclaveModule __imp_LdrLoadEnclaveModule LdrInitializeEnclave __imp_LdrInitializeEnclave LdrLoadAlternateResourceModule __imp_LdrLoadAlternateResourceModule LdrLoadAlternateResourceModuleEx __imp_LdrLoadAlternateResourceModuleEx LdrUnloadAlternateResourceModule __imp_LdrUnloadAlternateResourceModule LdrUnloadAlternateResourceModuleEx __imp_LdrUnloadAlternateResourceModuleEx LdrFlushAlternateResourceModules __imp_LdrFlushAlternateResourceModules LdrAddLoadAsDataTable __imp_LdrAddLoadAsDataTable LdrRemoveLoadAsDataTable __imp_LdrRemoveLoadAsDataTable LdrGetFileNameFromLoadAsDataTable __imp_LdrGetFileNameFromLoadAsDataTable LdrSetMUICacheType __imp_LdrSetMUICacheType LdrResFindResource __imp_LdrResFindResource LdrResFindResourceDirectory __imp_LdrResFindResourceDirectory LdrResSearchResource __imp_LdrResSearchResource LdrResRelease __imp_LdrResRelease LdrpResGetMappingSize __imp_LdrpResGetMappingSize LdrpResGetResourceDirectory __imp_LdrpResGetResourceDirectory RtlUshortByteSwap __imp_RtlUshortByteSwap RtlUlongByteSwap __imp_RtlUlongByteSwap RtlUlonglongByteSwap __imp_RtlUlonglongByteSwap RtlFindLeastSignificantBit __imp_RtlFindLeastSignificantBit RtlFindMostSignificantBit __imp_RtlFindMostSignificantBit RtlCreateActivationContext __imp_RtlCreateActivationContext RtlAddRefActivationContext __imp_RtlAddRefActivationContext RtlReleaseActivationContext __imp_RtlReleaseActivationContext RtlZombifyActivationContext __imp_RtlZombifyActivationContext RtlActivateActivationContext __imp_RtlActivateActivationContext RtlActivateActivationContextEx __imp_RtlActivateActivationContextEx RtlDeactivateActivationContext __imp_RtlDeactivateActivationContext RtlDosApplyFileIsolationRedirection_Ustr __imp_RtlDosApplyFileIsolationRedirection_Ustr RtlFindActivationContextSectionGuid __imp_RtlFindActivationContextSectionGuid RtlFindActivationContextSectionString __imp_RtlFindActivationContextSectionString RtlFreeThreadActivationContextStack __imp_RtlFreeThreadActivationContextStack RtlGetActiveActivationContext __imp_RtlGetActiveActivationContext RtlIsActivationContextActive __imp_RtlIsActivationContextActive RtlQueryInformationActiveActivationContext __imp_RtlQueryInformationActiveActivationContext RtlQueryInformationActivationContext __imp_RtlQueryInformationActivationContext RtlQueryActivationContextApplicationSettings __imp_RtlQueryActivationContextApplicationSettings RtlHashUnicodeString __imp_RtlHashUnicodeString RtlGetCurrentPeb __imp_RtlGetCurrentPeb RtlComputePrivatizedDllName_U __imp_RtlComputePrivatizedDllName_U RtlCreateSystemVolumeInformationFolder __imp_RtlCreateSystemVolumeInformationFolder RtlMultiAppendUnicodeStringBuffer __imp_RtlMultiAppendUnicodeStringBuffer RtlpEnsureBufferSize __imp_RtlpEnsureBufferSize RtlAppendPathElement __imp_RtlAppendPathElement RtlGetLengthWithoutLastFullDosOrNtPathElement __imp_RtlGetLengthWithoutLastFullDosOrNtPathElement RtlGetLengthWithoutTrailingPathSeperators __imp_RtlGetLengthWithoutTrailingPathSeperators RtlpApplyLengthFunction __imp_RtlpApplyLengthFunction RtlLockBootStatusData __imp_RtlLockBootStatusData RtlGetSetBootStatusData __imp_RtlGetSetBootStatusData RtlUnlockBootStatusData __imp_RtlUnlockBootStatusData RtlCreateBootStatusDataFile __imp_RtlCreateBootStatusDataFile RtlCheckBootStatusIntegrity __imp_RtlCheckBootStatusIntegrity RtlRestoreBootStatusDefaults __imp_RtlRestoreBootStatusDefaults RtlGetSystemBootStatus __imp_RtlGetSystemBootStatus RtlGetSystemBootStatusEx __imp_RtlGetSystemBootStatusEx RtlSetSystemBootStatus __imp_RtlSetSystemBootStatus RtlSetSystemBootStatusEx __imp_RtlSetSystemBootStatusEx RtlCheckSystemBootStatusIntegrity __imp_RtlCheckSystemBootStatusIntegrity RtlRestoreSystemBootStatusDefaults __imp_RtlRestoreSystemBootStatusDefaults RtlIsThreadWithinLoaderCallout __imp_RtlIsThreadWithinLoaderCallout EtwLogTraceEvent __imp_EtwLogTraceEvent EtwTraceEventInstance __imp_EtwTraceEventInstance EtwTraceMessage __imp_EtwTraceMessage EtwTraceMessageVa __imp_EtwTraceMessageVa EtwpGetCpuSpeed __imp_EtwpGetCpuSpeed EtwNotificationRegister __imp_EtwNotificationRegister EtwNotificationUnregister __imp_EtwNotificationUnregister EtwSendNotification __imp_EtwSendNotification EtwReplyNotification __imp_EtwReplyNotification EtwProcessPrivateLoggerRequest __imp_EtwProcessPrivateLoggerRequest EtwDeliverDataBlock __imp_EtwDeliverDataBlock EtwpCreateEtwThread __imp_EtwpCreateEtwThread EtwCheckCoverage __imp_EtwCheckCoverage EtwRegisterTraceGuidsA __imp_EtwRegisterTraceGuidsA EtwRegisterTraceGuidsW __imp_EtwRegisterTraceGuidsW EtwUnregisterTraceGuids __imp_EtwUnregisterTraceGuids EtwGetTraceLoggerHandle __imp_EtwGetTraceLoggerHandle EtwGetTraceEnableLevel __imp_EtwGetTraceEnableLevel EtwGetTraceEnableFlags __imp_EtwGetTraceEnableFlags EtwCreateTraceInstanceId __imp_EtwCreateTraceInstanceId EtwEventRegister __imp_EtwEventRegister EtwEventUnregister __imp_EtwEventUnregister EtwEventSetInformation __imp_EtwEventSetInformation EtwRegisterSecurityProvider __imp_EtwRegisterSecurityProvider EtwEventEnabled __imp_EtwEventEnabled EtwEventProviderEnabled __imp_EtwEventProviderEnabled EtwEventWrite __imp_EtwEventWrite EtwEventWriteTransfer __imp_EtwEventWriteTransfer EtwEventWriteString __imp_EtwEventWriteString EtwEventWriteEx __imp_EtwEventWriteEx EtwEventWriteFull __imp_EtwEventWriteFull EtwWriteUMSecurityEvent __imp_EtwWriteUMSecurityEvent EtwEventActivityIdControl __imp_EtwEventActivityIdControl EtwEnumerateProcessRegGuids __imp_EtwEnumerateProcessRegGuids EtwEventWriteStartScenario __imp_EtwEventWriteStartScenario EtwEventWriteEndScenario __imp_EtwEventWriteEndScenario EtwEventWriteNoRegistration __imp_EtwEventWriteNoRegistration EvtIntReportEventAndSourceAsync __imp_EvtIntReportEventAndSourceAsync EvtIntReportAuthzEventAndSourceAsync __imp_EvtIntReportAuthzEventAndSourceAsync NtGetTickCount __imp_NtGetTickCount RtlInitializeSRWLock __imp_RtlInitializeSRWLock RtlAcquireSRWLockExclusive __imp_RtlAcquireSRWLockExclusive RtlTryAcquireSRWLockExclusive __imp_RtlTryAcquireSRWLockExclusive RtlReleaseSRWLockExclusive __imp_RtlReleaseSRWLockExclusive RtlAcquireSRWLockShared __imp_RtlAcquireSRWLockShared RtlTryAcquireSRWLockShared __imp_RtlTryAcquireSRWLockShared RtlReleaseSRWLockShared __imp_RtlReleaseSRWLockShared RtlAcquireReleaseSRWLockExclusive __imp_RtlAcquireReleaseSRWLockExclusive RtlConvertSRWLockExclusiveToShared __imp_RtlConvertSRWLockExclusiveToShared RtlTryConvertSRWLockSharedToExclusiveOrRelease __imp_RtlTryConvertSRWLockSharedToExclusiveOrRelease RtlUpdateClonedSRWLock __imp_RtlUpdateClonedSRWLock AlpcAdjustCompletionListConcurrencyCount __imp_AlpcAdjustCompletionListConcurrencyCount AlpcFreeCompletionListMessage __imp_AlpcFreeCompletionListMessage AlpcGetCompletionListLastMessageInformation __imp_AlpcGetCompletionListLastMessageInformation AlpcGetCompletionListMessageAttributes __imp_AlpcGetCompletionListMessageAttributes AlpcGetHeaderSize __imp_AlpcGetHeaderSize AlpcGetMessageAttribute __imp_AlpcGetMessageAttribute AlpcGetMessageFromCompletionList __imp_AlpcGetMessageFromCompletionList AlpcGetOutstandingCompletionListMessageCount __imp_AlpcGetOutstandingCompletionListMessageCount AlpcInitializeMessageAttribute __imp_AlpcInitializeMessageAttribute AlpcMaxAllowedMessageLength __imp_AlpcMaxAllowedMessageLength AlpcRegisterCompletionList __imp_AlpcRegisterCompletionList AlpcRegisterCompletionListWorkerThread __imp_AlpcRegisterCompletionListWorkerThread AlpcUnregisterCompletionList __imp_AlpcUnregisterCompletionList AlpcRundownCompletionList __imp_AlpcRundownCompletionList AlpcUnregisterCompletionListWorkerThread __imp_AlpcUnregisterCompletionListWorkerThread RtlReportException __imp_RtlReportException RtlReportExceptionEx __imp_RtlReportExceptionEx RtlWerpReportException __imp_RtlWerpReportException RtlReportSilentProcessExit __imp_RtlReportSilentProcessExit RtlReportSqmEscalation __imp_RtlReportSqmEscalation ShipAssert __imp_ShipAssert ShipAssertMsgA __imp_ShipAssertMsgA ShipAssertMsgW __imp_ShipAssertMsgW ShipAssertGetBufferInfo __imp_ShipAssertGetBufferInfo WerReportSQMEvent __imp_WerReportSQMEvent WinSqmStartSession __imp_WinSqmStartSession WinSqmEndSession __imp_WinSqmEndSession WinSqmSetDWORD __imp_WinSqmSetDWORD WinSqmIncrementDWORD __imp_WinSqmIncrementDWORD WinSqmAddToAverageDWORD __imp_WinSqmAddToAverageDWORD WinSqmSetEscalationInfo __imp_WinSqmSetEscalationInfo WinSqmSetIfMaxDWORD __imp_WinSqmSetIfMaxDWORD WinSqmSetIfMinDWORD __imp_WinSqmSetIfMinDWORD WinSqmSetDWORD64 __imp_WinSqmSetDWORD64 WinSqmSetString __imp_WinSqmSetString WinSqmAddToStream __imp_WinSqmAddToStream WinSqmAddToStreamEx __imp_WinSqmAddToStreamEx WinSqmIsOptedIn __imp_WinSqmIsOptedIn WinSqmIsOptedInEx __imp_WinSqmIsOptedInEx WinSqmEventEnabled __imp_WinSqmEventEnabled WinSqmEventWrite __imp_WinSqmEventWrite WinSqmCheckEscalationSetDWORD __imp_WinSqmCheckEscalationSetDWORD WinSqmCheckEscalationSetDWORD64 __imp_WinSqmCheckEscalationSetDWORD64 WinSqmCheckEscalationSetString __imp_WinSqmCheckEscalationSetString WinSqmCheckEscalationAddToStreamEx __imp_WinSqmCheckEscalationAddToStreamEx WinSqmGetEscalationRuleStatus __imp_WinSqmGetEscalationRuleStatus WinSqmGetInstrumentationProperty __imp_WinSqmGetInstrumentationProperty WinSqmCommonDatapointSetDWORD __imp_WinSqmCommonDatapointSetDWORD WinSqmCommonDatapointSetDWORD64 __imp_WinSqmCommonDatapointSetDWORD64 WinSqmCommonDatapointSetString __imp_WinSqmCommonDatapointSetString WinSqmCommonDatapointSetStreamEx __imp_WinSqmCommonDatapointSetStreamEx WinSqmCommonDatapointDelete __imp_WinSqmCommonDatapointDelete WinSqmIsSessionDisabled __imp_WinSqmIsSessionDisabled WinSqmStartSessionForPartner __imp_WinSqmStartSessionForPartner RtlAllocateWnfSerializationGroup __imp_RtlAllocateWnfSerializationGroup RtlPublishWnfStateData __imp_RtlPublishWnfStateData RtlTestAndPublishWnfStateData __imp_RtlTestAndPublishWnfStateData RtlQueryWnfStateData __imp_RtlQueryWnfStateData RtlQueryWnfStateDataWithExplicitScope __imp_RtlQueryWnfStateDataWithExplicitScope RtlSubscribeWnfStateChangeNotification __imp_RtlSubscribeWnfStateChangeNotification RtlUnsubscribeWnfStateChangeNotification __imp_RtlUnsubscribeWnfStateChangeNotification RtlEqualWnfChangeStamps __imp_RtlEqualWnfChangeStamps RtlQueryWnfMetaNotification __imp_RtlQueryWnfMetaNotification RtlRegisterForWnfMetaNotification __imp_RtlRegisterForWnfMetaNotification RtlWaitForWnfMetaNotification __imp_RtlWaitForWnfMetaNotification RtlUnsubscribeWnfNotificationWaitForCompletion __imp_RtlUnsubscribeWnfNotificationWaitForCompletion RtlUnsubscribeWnfNotificationWithCompletionCallback __imp_RtlUnsubscribeWnfNotificationWithCompletionCallback RtlWnfDllUnloadCallback __imp_RtlWnfDllUnloadCallback RtlWnfCompareChangeStamp __imp_RtlWnfCompareChangeStamp RtlConnectToSm __imp_RtlConnectToSm RtlSendMsgToSm __imp_RtlSendMsgToSm TpAllocAlpcCompletion __imp_TpAllocAlpcCompletion TpAllocCleanupGroup __imp_TpAllocCleanupGroup TpAllocIoCompletion __imp_TpAllocIoCompletion TpAllocJobNotification __imp_TpAllocJobNotification TpAllocPool __imp_TpAllocPool TpAllocTimer __imp_TpAllocTimer TpAllocWait __imp_TpAllocWait TpAllocWork __imp_TpAllocWork TpCallbackDetectedUnrecoverableError __imp_TpCallbackDetectedUnrecoverableError TpCallbackLeaveCriticalSectionOnCompletion __imp_TpCallbackLeaveCriticalSectionOnCompletion TpCallbackReleaseMutexOnCompletion __imp_TpCallbackReleaseMutexOnCompletion TpCallbackReleaseSemaphoreOnCompletion __imp_TpCallbackReleaseSemaphoreOnCompletion TpCallbackSetEventOnCompletion __imp_TpCallbackSetEventOnCompletion TpCallbackUnloadDllOnCompletion __imp_TpCallbackUnloadDllOnCompletion TpCallbackMayRunLong __imp_TpCallbackMayRunLong TpCancelAsyncIoOperation __imp_TpCancelAsyncIoOperation TpCaptureCaller __imp_TpCaptureCaller TpCheckTerminateWorker __imp_TpCheckTerminateWorker TpDisassociateCallback __imp_TpDisassociateCallback TpIsTimerSet __imp_TpIsTimerSet TpPostWork __imp_TpPostWork TpQueryPoolStackInformation __imp_TpQueryPoolStackInformation TpReleaseAlpcCompletion __imp_TpReleaseAlpcCompletion TpReleaseCleanupGroup __imp_TpReleaseCleanupGroup TpReleaseCleanupGroupMembers __imp_TpReleaseCleanupGroupMembers TpReleaseIoCompletion __imp_TpReleaseIoCompletion TpReleaseJobNotification __imp_TpReleaseJobNotification TpReleasePool __imp_TpReleasePool TpReleaseTimer __imp_TpReleaseTimer TpReleaseWait __imp_TpReleaseWait TpReleaseWork __imp_TpReleaseWork TpSetPoolMaxThreads __imp_TpSetPoolMaxThreads TpSetPoolMaxThreadsSoftLimit __imp_TpSetPoolMaxThreadsSoftLimit TpSetPoolMinThreads __imp_TpSetPoolMinThreads TpSetPoolStackInformation __imp_TpSetPoolStackInformation TpSetPoolWorkerThreadIdleTimeout __imp_TpSetPoolWorkerThreadIdleTimeout TpSetTimer __imp_TpSetTimer TpSetTimerEx __imp_TpSetTimerEx TpSetWait __imp_TpSetWait TpSetWaitEx __imp_TpSetWaitEx TpSimpleTryPost __imp_TpSimpleTryPost TpStartAsyncIoOperation __imp_TpStartAsyncIoOperation TpTrimPools __imp_TpTrimPools TpWaitForAlpcCompletion __imp_TpWaitForAlpcCompletion TpWaitForIoCompletion __imp_TpWaitForIoCompletion TpWaitForJobNotification __imp_TpWaitForJobNotification TpWaitForTimer __imp_TpWaitForTimer TpWaitForWait __imp_TpWaitForWait TpWaitForWork __imp_TpWaitForWork RtlRunOnceInitialize __imp_RtlRunOnceInitialize RtlRunOnceExecuteOnce __imp_RtlRunOnceExecuteOnce RtlRunOnceBeginInitialize __imp_RtlRunOnceBeginInitialize RtlRunOnceComplete __imp_RtlRunOnceComplete RtlCreateUserStack __imp_RtlCreateUserStack RtlFreeUserStack __imp_RtlFreeUserStack RtlAllocateMemoryZone __imp_RtlAllocateMemoryZone RtlCreateMemoryZone __imp_RtlCreateMemoryZone RtlDestroyMemoryZone __imp_RtlDestroyMemoryZone RtlExtendMemoryZone __imp_RtlExtendMemoryZone RtlLockMemoryZone __imp_RtlLockMemoryZone RtlUnlockMemoryZone __imp_RtlUnlockMemoryZone RtlAllocateMemoryBlockLookaside __imp_RtlAllocateMemoryBlockLookaside RtlCreateMemoryBlockLookaside __imp_RtlCreateMemoryBlockLookaside RtlDestroyMemoryBlockLookaside __imp_RtlDestroyMemoryBlockLookaside RtlExtendMemoryBlockLookaside __imp_RtlExtendMemoryBlockLookaside RtlFreeMemoryBlockLookaside __imp_RtlFreeMemoryBlockLookaside RtlLockMemoryBlockLookaside __imp_RtlLockMemoryBlockLookaside RtlResetMemoryBlockLookaside __imp_RtlResetMemoryBlockLookaside RtlUnlockMemoryBlockLookaside __imp_RtlUnlockMemoryBlockLookaside RtlLockModuleSection __imp_RtlLockModuleSection RtlUnlockModuleSection __imp_RtlUnlockModuleSection RtlLockCurrentThread __imp_RtlLockCurrentThread RtlUnlockCurrentThread __imp_RtlUnlockCurrentThread RtlCreateBoundaryDescriptor __imp_RtlCreateBoundaryDescriptor RtlAddSIDToBoundaryDescriptor __imp_RtlAddSIDToBoundaryDescriptor RtlAddIntegrityLabelToBoundaryDescriptor __imp_RtlAddIntegrityLabelToBoundaryDescriptor RtlDeleteBoundaryDescriptor __imp_RtlDeleteBoundaryDescriptor RtlSetDynamicTimeZoneInformation __imp_RtlSetDynamicTimeZoneInformation RtlQueryDynamicTimeZoneInformation __imp_RtlQueryDynamicTimeZoneInformation RtlpCheckDynamicTimeZoneInformation __imp_RtlpCheckDynamicTimeZoneInformation RtlCopyMemory __imp_RtlCopyMemory RtlLookupFunctionEntry __imp_RtlLookupFunctionEntry RtlVirtualUnwind __imp_RtlVirtualUnwind RtlUnwindEx __imp_RtlUnwindEx RtlAddFunctionTable __imp_RtlAddFunctionTable RtlInstallFunctionTableCallback __imp_RtlInstallFunctionTableCallback RtlDeleteFunctionTable __imp_RtlDeleteFunctionTable RtlGetFunctionTableListHead __imp_RtlGetFunctionTableListHead RtlLookupFunctionTable __imp_RtlLookupFunctionTable ReadTimeStampCounter __imp_ReadTimeStampCounter RtlAddGrowableFunctionTable __imp_RtlAddGrowableFunctionTable RtlGrowFunctionTable __imp_RtlGrowFunctionTable RtlDeleteGrowableFunctionTable __imp_RtlDeleteGrowableFunctionTable RtlRestoreContext __imp_RtlRestoreContext RtlCopyContext __imp_RtlCopyContext RtlCopyExtendedContext __imp_RtlCopyExtendedContext RtlGetEnabledExtendedFeatures __imp_RtlGetEnabledExtendedFeatures RtlGetExtendedContextLength __imp_RtlGetExtendedContextLength RtlGetExtendedContextLength2 __imp_RtlGetExtendedContextLength2 RtlInitializeExtendedContext __imp_RtlInitializeExtendedContext RtlInitializeExtendedContext2 __imp_RtlInitializeExtendedContext2 RtlLocateLegacyContext __imp_RtlLocateLegacyContext RtlLocateExtendedFeature __imp_RtlLocateExtendedFeature RtlLocateExtendedFeature2 __imp_RtlLocateExtendedFeature2 RtlGetExtendedFeaturesMask __imp_RtlGetExtendedFeaturesMask RtlSetExtendedFeaturesMask __imp_RtlSetExtendedFeaturesMask __imp_LdrSystemDllInitBlock LdrAppxHandleIntegrityFailure __imp_LdrAppxHandleIntegrityFailure PssNtCaptureSnapshot __imp_PssNtCaptureSnapshot PssNtDuplicateSnapshot __imp_PssNtDuplicateSnapshot PssNtFreeSnapshot __imp_PssNtFreeSnapshot PssNtFreeRemoteSnapshot __imp_PssNtFreeRemoteSnapshot PssNtQuerySnapshot __imp_PssNtQuerySnapshot PssNtWalkSnapshot __imp_PssNtWalkSnapshot PssNtFreeWalkMarker __imp_PssNtFreeWalkMarker PssNtValidateDescriptor __imp_PssNtValidateDescriptor RtlSetProtectedPolicy __imp_RtlSetProtectedPolicy RtlQueryProtectedPolicy __imp_RtlQueryProtectedPolicy RtlGuardCheckLongJumpTarget __imp_RtlGuardCheckLongJumpTarget ZwAccessCheck __imp_ZwAccessCheck NtAccessCheck __imp_NtAccessCheck ZwWorkerFactoryWorkerReady __imp_ZwWorkerFactoryWorkerReady NtWorkerFactoryWorkerReady __imp_NtWorkerFactoryWorkerReady ZwAcceptConnectPort __imp_ZwAcceptConnectPort NtAcceptConnectPort __imp_NtAcceptConnectPort ZwMapUserPhysicalPagesScatter __imp_ZwMapUserPhysicalPagesScatter NtMapUserPhysicalPagesScatter __imp_NtMapUserPhysicalPagesScatter ZwWaitForSingleObject __imp_ZwWaitForSingleObject NtWaitForSingleObject __imp_NtWaitForSingleObject ZwCallbackReturn __imp_ZwCallbackReturn NtCallbackReturn __imp_NtCallbackReturn ZwReadFile __imp_ZwReadFile NtReadFile __imp_NtReadFile ZwDeviceIoControlFile __imp_ZwDeviceIoControlFile NtDeviceIoControlFile __imp_NtDeviceIoControlFile ZwWriteFile __imp_ZwWriteFile NtWriteFile __imp_NtWriteFile ZwRemoveIoCompletion __imp_ZwRemoveIoCompletion NtRemoveIoCompletion __imp_NtRemoveIoCompletion ZwReleaseSemaphore __imp_ZwReleaseSemaphore NtReleaseSemaphore __imp_NtReleaseSemaphore ZwReplyWaitReceivePort __imp_ZwReplyWaitReceivePort NtReplyWaitReceivePort __imp_NtReplyWaitReceivePort ZwReplyPort __imp_ZwReplyPort NtReplyPort __imp_NtReplyPort ZwSetInformationThread __imp_ZwSetInformationThread NtSetInformationThread __imp_NtSetInformationThread ZwSetEvent __imp_ZwSetEvent NtSetEvent __imp_NtSetEvent ZwClose __imp_ZwClose NtClose __imp_NtClose ZwQueryObject __imp_ZwQueryObject NtQueryObject __imp_NtQueryObject ZwQueryInformationFile __imp_ZwQueryInformationFile NtQueryInformationFile __imp_NtQueryInformationFile ZwOpenKey __imp_ZwOpenKey NtOpenKey __imp_NtOpenKey ZwEnumerateValueKey __imp_ZwEnumerateValueKey NtEnumerateValueKey __imp_NtEnumerateValueKey ZwFindAtom __imp_ZwFindAtom NtFindAtom __imp_NtFindAtom ZwQueryDefaultLocale __imp_ZwQueryDefaultLocale NtQueryDefaultLocale __imp_NtQueryDefaultLocale ZwQueryKey __imp_ZwQueryKey NtQueryKey __imp_NtQueryKey ZwQueryValueKey __imp_ZwQueryValueKey NtQueryValueKey __imp_NtQueryValueKey ZwAllocateVirtualMemory __imp_ZwAllocateVirtualMemory NtAllocateVirtualMemory __imp_NtAllocateVirtualMemory ZwQueryInformationProcess __imp_ZwQueryInformationProcess NtQueryInformationProcess __imp_NtQueryInformationProcess ZwWaitForMultipleObjects32 __imp_ZwWaitForMultipleObjects32 NtWaitForMultipleObjects32 __imp_NtWaitForMultipleObjects32 ZwWriteFileGather __imp_ZwWriteFileGather NtWriteFileGather __imp_NtWriteFileGather ZwSetInformationProcess __imp_ZwSetInformationProcess NtSetInformationProcess __imp_NtSetInformationProcess ZwCreateKey __imp_ZwCreateKey NtCreateKey __imp_NtCreateKey ZwFreeVirtualMemory __imp_ZwFreeVirtualMemory NtFreeVirtualMemory __imp_NtFreeVirtualMemory ZwImpersonateClientOfPort __imp_ZwImpersonateClientOfPort NtImpersonateClientOfPort __imp_NtImpersonateClientOfPort ZwReleaseMutant __imp_ZwReleaseMutant NtReleaseMutant __imp_NtReleaseMutant ZwQueryInformationToken __imp_ZwQueryInformationToken NtQueryInformationToken __imp_NtQueryInformationToken ZwRequestWaitReplyPort __imp_ZwRequestWaitReplyPort NtRequestWaitReplyPort __imp_NtRequestWaitReplyPort ZwQueryVirtualMemory __imp_ZwQueryVirtualMemory NtQueryVirtualMemory __imp_NtQueryVirtualMemory ZwOpenThreadToken __imp_ZwOpenThreadToken NtOpenThreadToken __imp_NtOpenThreadToken ZwQueryInformationThread __imp_ZwQueryInformationThread NtQueryInformationThread __imp_NtQueryInformationThread ZwOpenProcess __imp_ZwOpenProcess NtOpenProcess __imp_NtOpenProcess ZwSetInformationFile __imp_ZwSetInformationFile NtSetInformationFile __imp_NtSetInformationFile ZwMapViewOfSection __imp_ZwMapViewOfSection NtMapViewOfSection __imp_NtMapViewOfSection ZwAccessCheckAndAuditAlarm __imp_ZwAccessCheckAndAuditAlarm NtAccessCheckAndAuditAlarm __imp_NtAccessCheckAndAuditAlarm ZwUnmapViewOfSection __imp_ZwUnmapViewOfSection NtUnmapViewOfSection __imp_NtUnmapViewOfSection ZwReplyWaitReceivePortEx __imp_ZwReplyWaitReceivePortEx NtReplyWaitReceivePortEx __imp_NtReplyWaitReceivePortEx ZwTerminateProcess __imp_ZwTerminateProcess NtTerminateProcess __imp_NtTerminateProcess ZwSetEventBoostPriority __imp_ZwSetEventBoostPriority NtSetEventBoostPriority __imp_NtSetEventBoostPriority ZwReadFileScatter __imp_ZwReadFileScatter NtReadFileScatter __imp_NtReadFileScatter ZwOpenThreadTokenEx __imp_ZwOpenThreadTokenEx NtOpenThreadTokenEx __imp_NtOpenThreadTokenEx ZwOpenProcessTokenEx __imp_ZwOpenProcessTokenEx NtOpenProcessTokenEx __imp_NtOpenProcessTokenEx ZwQueryPerformanceCounter __imp_ZwQueryPerformanceCounter NtQueryPerformanceCounter __imp_NtQueryPerformanceCounter ZwEnumerateKey __imp_ZwEnumerateKey NtEnumerateKey __imp_NtEnumerateKey ZwOpenFile __imp_ZwOpenFile NtOpenFile __imp_NtOpenFile ZwDelayExecution __imp_ZwDelayExecution NtDelayExecution __imp_NtDelayExecution ZwQueryDirectoryFile __imp_ZwQueryDirectoryFile NtQueryDirectoryFile __imp_NtQueryDirectoryFile ZwQuerySystemInformation __imp_ZwQuerySystemInformation NtQuerySystemInformation __imp_NtQuerySystemInformation ZwOpenSection __imp_ZwOpenSection NtOpenSection __imp_NtOpenSection ZwQueryTimer __imp_ZwQueryTimer NtQueryTimer __imp_NtQueryTimer ZwFsControlFile __imp_ZwFsControlFile NtFsControlFile __imp_NtFsControlFile ZwWriteVirtualMemory __imp_ZwWriteVirtualMemory NtWriteVirtualMemory __imp_NtWriteVirtualMemory ZwCloseObjectAuditAlarm __imp_ZwCloseObjectAuditAlarm NtCloseObjectAuditAlarm __imp_NtCloseObjectAuditAlarm ZwDuplicateObject __imp_ZwDuplicateObject NtDuplicateObject __imp_NtDuplicateObject ZwQueryAttributesFile __imp_ZwQueryAttributesFile NtQueryAttributesFile __imp_NtQueryAttributesFile ZwClearEvent __imp_ZwClearEvent NtClearEvent __imp_NtClearEvent ZwReadVirtualMemory __imp_ZwReadVirtualMemory NtReadVirtualMemory __imp_NtReadVirtualMemory ZwOpenEvent __imp_ZwOpenEvent NtOpenEvent __imp_NtOpenEvent ZwAdjustPrivilegesToken __imp_ZwAdjustPrivilegesToken NtAdjustPrivilegesToken __imp_NtAdjustPrivilegesToken ZwDuplicateToken __imp_ZwDuplicateToken NtDuplicateToken __imp_NtDuplicateToken ZwContinue __imp_ZwContinue NtContinue __imp_NtContinue ZwQueryDefaultUILanguage __imp_ZwQueryDefaultUILanguage NtQueryDefaultUILanguage __imp_NtQueryDefaultUILanguage ZwQueueApcThread __imp_ZwQueueApcThread NtQueueApcThread __imp_NtQueueApcThread ZwYieldExecution __imp_ZwYieldExecution NtYieldExecution __imp_NtYieldExecution ZwAddAtom __imp_ZwAddAtom NtAddAtom __imp_NtAddAtom ZwCreateEvent __imp_ZwCreateEvent NtCreateEvent __imp_NtCreateEvent ZwQueryVolumeInformationFile __imp_ZwQueryVolumeInformationFile NtQueryVolumeInformationFile __imp_NtQueryVolumeInformationFile ZwCreateSection __imp_ZwCreateSection NtCreateSection __imp_NtCreateSection ZwFlushBuffersFile __imp_ZwFlushBuffersFile NtFlushBuffersFile __imp_NtFlushBuffersFile ZwApphelpCacheControl __imp_ZwApphelpCacheControl NtApphelpCacheControl __imp_NtApphelpCacheControl ZwCreateProcessEx __imp_ZwCreateProcessEx NtCreateProcessEx __imp_NtCreateProcessEx ZwCreateThread __imp_ZwCreateThread NtCreateThread __imp_NtCreateThread ZwIsProcessInJob __imp_ZwIsProcessInJob NtIsProcessInJob __imp_NtIsProcessInJob ZwProtectVirtualMemory __imp_ZwProtectVirtualMemory NtProtectVirtualMemory __imp_NtProtectVirtualMemory ZwQuerySection __imp_ZwQuerySection NtQuerySection __imp_NtQuerySection ZwResumeThread __imp_ZwResumeThread NtResumeThread __imp_NtResumeThread ZwTerminateThread __imp_ZwTerminateThread NtTerminateThread __imp_NtTerminateThread ZwReadRequestData __imp_ZwReadRequestData NtReadRequestData __imp_NtReadRequestData ZwCreateFile __imp_ZwCreateFile NtCreateFile __imp_NtCreateFile ZwQueryEvent __imp_ZwQueryEvent NtQueryEvent __imp_NtQueryEvent ZwWriteRequestData __imp_ZwWriteRequestData NtWriteRequestData __imp_NtWriteRequestData ZwOpenDirectoryObject __imp_ZwOpenDirectoryObject NtOpenDirectoryObject __imp_NtOpenDirectoryObject ZwAccessCheckByTypeAndAuditAlarm __imp_ZwAccessCheckByTypeAndAuditAlarm NtAccessCheckByTypeAndAuditAlarm __imp_NtAccessCheckByTypeAndAuditAlarm ZwQuerySystemTime __imp_ZwQuerySystemTime NtQuerySystemTime __imp_NtQuerySystemTime ZwWaitForMultipleObjects __imp_ZwWaitForMultipleObjects NtWaitForMultipleObjects __imp_NtWaitForMultipleObjects ZwSetInformationObject __imp_ZwSetInformationObject NtSetInformationObject __imp_NtSetInformationObject ZwCancelIoFile __imp_ZwCancelIoFile NtCancelIoFile __imp_NtCancelIoFile ZwTraceEvent __imp_ZwTraceEvent NtTraceEvent __imp_NtTraceEvent ZwPowerInformation __imp_ZwPowerInformation NtPowerInformation __imp_NtPowerInformation ZwSetValueKey __imp_ZwSetValueKey NtSetValueKey __imp_NtSetValueKey ZwCancelTimer __imp_ZwCancelTimer NtCancelTimer __imp_NtCancelTimer ZwSetTimer __imp_ZwSetTimer NtSetTimer __imp_NtSetTimer ZwAccessCheckByType __imp_ZwAccessCheckByType NtAccessCheckByType __imp_NtAccessCheckByType ZwAccessCheckByTypeResultList __imp_ZwAccessCheckByTypeResultList NtAccessCheckByTypeResultList __imp_NtAccessCheckByTypeResultList ZwAccessCheckByTypeResultListAndAuditAlarm __imp_ZwAccessCheckByTypeResultListAndAuditAlarm NtAccessCheckByTypeResultListAndAuditAlarm __imp_NtAccessCheckByTypeResultListAndAuditAlarm ZwAccessCheckByTypeResultListAndAuditAlarmByHandle __imp_ZwAccessCheckByTypeResultListAndAuditAlarmByHandle NtAccessCheckByTypeResultListAndAuditAlarmByHandle __imp_NtAccessCheckByTypeResultListAndAuditAlarmByHandle ZwAcquireCrossVmMutant __imp_ZwAcquireCrossVmMutant NtAcquireCrossVmMutant __imp_NtAcquireCrossVmMutant ZwAcquireProcessActivityReference __imp_ZwAcquireProcessActivityReference NtAcquireProcessActivityReference __imp_NtAcquireProcessActivityReference ZwAddAtomEx __imp_ZwAddAtomEx NtAddAtomEx __imp_NtAddAtomEx ZwAddBootEntry __imp_ZwAddBootEntry NtAddBootEntry __imp_NtAddBootEntry ZwAddDriverEntry __imp_ZwAddDriverEntry NtAddDriverEntry __imp_NtAddDriverEntry ZwAdjustGroupsToken __imp_ZwAdjustGroupsToken NtAdjustGroupsToken __imp_NtAdjustGroupsToken ZwAdjustTokenClaimsAndDeviceGroups __imp_ZwAdjustTokenClaimsAndDeviceGroups NtAdjustTokenClaimsAndDeviceGroups __imp_NtAdjustTokenClaimsAndDeviceGroups ZwAlertResumeThread __imp_ZwAlertResumeThread NtAlertResumeThread __imp_NtAlertResumeThread ZwAlertThread __imp_ZwAlertThread NtAlertThread __imp_NtAlertThread ZwAlertThreadByThreadId __imp_ZwAlertThreadByThreadId NtAlertThreadByThreadId __imp_NtAlertThreadByThreadId ZwAllocateLocallyUniqueId __imp_ZwAllocateLocallyUniqueId NtAllocateLocallyUniqueId __imp_NtAllocateLocallyUniqueId ZwAllocateReserveObject __imp_ZwAllocateReserveObject NtAllocateReserveObject __imp_NtAllocateReserveObject ZwAllocateUserPhysicalPages __imp_ZwAllocateUserPhysicalPages NtAllocateUserPhysicalPages __imp_NtAllocateUserPhysicalPages ZwAllocateUserPhysicalPagesEx __imp_ZwAllocateUserPhysicalPagesEx NtAllocateUserPhysicalPagesEx __imp_NtAllocateUserPhysicalPagesEx ZwAllocateUuids __imp_ZwAllocateUuids NtAllocateUuids __imp_NtAllocateUuids ZwAllocateVirtualMemoryEx __imp_ZwAllocateVirtualMemoryEx NtAllocateVirtualMemoryEx __imp_NtAllocateVirtualMemoryEx ZwAlpcAcceptConnectPort __imp_ZwAlpcAcceptConnectPort NtAlpcAcceptConnectPort __imp_NtAlpcAcceptConnectPort ZwAlpcCancelMessage __imp_ZwAlpcCancelMessage NtAlpcCancelMessage __imp_NtAlpcCancelMessage ZwAlpcConnectPort __imp_ZwAlpcConnectPort NtAlpcConnectPort __imp_NtAlpcConnectPort ZwAlpcConnectPortEx __imp_ZwAlpcConnectPortEx NtAlpcConnectPortEx __imp_NtAlpcConnectPortEx ZwAlpcCreatePort __imp_ZwAlpcCreatePort NtAlpcCreatePort __imp_NtAlpcCreatePort ZwAlpcCreatePortSection __imp_ZwAlpcCreatePortSection NtAlpcCreatePortSection __imp_NtAlpcCreatePortSection ZwAlpcCreateResourceReserve __imp_ZwAlpcCreateResourceReserve NtAlpcCreateResourceReserve __imp_NtAlpcCreateResourceReserve ZwAlpcCreateSectionView __imp_ZwAlpcCreateSectionView NtAlpcCreateSectionView __imp_NtAlpcCreateSectionView ZwAlpcCreateSecurityContext __imp_ZwAlpcCreateSecurityContext NtAlpcCreateSecurityContext __imp_NtAlpcCreateSecurityContext ZwAlpcDeletePortSection __imp_ZwAlpcDeletePortSection NtAlpcDeletePortSection __imp_NtAlpcDeletePortSection ZwAlpcDeleteResourceReserve __imp_ZwAlpcDeleteResourceReserve NtAlpcDeleteResourceReserve __imp_NtAlpcDeleteResourceReserve ZwAlpcDeleteSectionView __imp_ZwAlpcDeleteSectionView NtAlpcDeleteSectionView __imp_NtAlpcDeleteSectionView ZwAlpcDeleteSecurityContext __imp_ZwAlpcDeleteSecurityContext NtAlpcDeleteSecurityContext __imp_NtAlpcDeleteSecurityContext ZwAlpcDisconnectPort __imp_ZwAlpcDisconnectPort NtAlpcDisconnectPort __imp_NtAlpcDisconnectPort ZwAlpcImpersonateClientContainerOfPort __imp_ZwAlpcImpersonateClientContainerOfPort NtAlpcImpersonateClientContainerOfPort __imp_NtAlpcImpersonateClientContainerOfPort ZwAlpcImpersonateClientOfPort __imp_ZwAlpcImpersonateClientOfPort NtAlpcImpersonateClientOfPort __imp_NtAlpcImpersonateClientOfPort ZwAlpcOpenSenderProcess __imp_ZwAlpcOpenSenderProcess NtAlpcOpenSenderProcess __imp_NtAlpcOpenSenderProcess ZwAlpcOpenSenderThread __imp_ZwAlpcOpenSenderThread NtAlpcOpenSenderThread __imp_NtAlpcOpenSenderThread ZwAlpcQueryInformation __imp_ZwAlpcQueryInformation NtAlpcQueryInformation __imp_NtAlpcQueryInformation ZwAlpcQueryInformationMessage __imp_ZwAlpcQueryInformationMessage NtAlpcQueryInformationMessage __imp_NtAlpcQueryInformationMessage ZwAlpcRevokeSecurityContext __imp_ZwAlpcRevokeSecurityContext NtAlpcRevokeSecurityContext __imp_NtAlpcRevokeSecurityContext ZwAlpcSendWaitReceivePort __imp_ZwAlpcSendWaitReceivePort NtAlpcSendWaitReceivePort __imp_NtAlpcSendWaitReceivePort ZwAlpcSetInformation __imp_ZwAlpcSetInformation NtAlpcSetInformation __imp_NtAlpcSetInformation ZwAreMappedFilesTheSame __imp_ZwAreMappedFilesTheSame NtAreMappedFilesTheSame __imp_NtAreMappedFilesTheSame ZwAssignProcessToJobObject __imp_ZwAssignProcessToJobObject NtAssignProcessToJobObject __imp_NtAssignProcessToJobObject ZwAssociateWaitCompletionPacket __imp_ZwAssociateWaitCompletionPacket NtAssociateWaitCompletionPacket __imp_NtAssociateWaitCompletionPacket ZwCallEnclave __imp_ZwCallEnclave NtCallEnclave __imp_NtCallEnclave ZwCancelIoFileEx __imp_ZwCancelIoFileEx NtCancelIoFileEx __imp_NtCancelIoFileEx ZwCancelSynchronousIoFile __imp_ZwCancelSynchronousIoFile NtCancelSynchronousIoFile __imp_NtCancelSynchronousIoFile ZwCancelTimer2 __imp_ZwCancelTimer2 NtCancelTimer2 __imp_NtCancelTimer2 ZwCancelWaitCompletionPacket __imp_ZwCancelWaitCompletionPacket NtCancelWaitCompletionPacket __imp_NtCancelWaitCompletionPacket ZwCommitComplete __imp_ZwCommitComplete NtCommitComplete __imp_NtCommitComplete ZwCommitEnlistment __imp_ZwCommitEnlistment NtCommitEnlistment __imp_NtCommitEnlistment ZwCommitRegistryTransaction __imp_ZwCommitRegistryTransaction NtCommitRegistryTransaction __imp_NtCommitRegistryTransaction ZwCommitTransaction __imp_ZwCommitTransaction NtCommitTransaction __imp_NtCommitTransaction ZwCompactKeys __imp_ZwCompactKeys NtCompactKeys __imp_NtCompactKeys ZwCompareObjects __imp_ZwCompareObjects NtCompareObjects __imp_NtCompareObjects ZwCompareSigningLevels __imp_ZwCompareSigningLevels NtCompareSigningLevels __imp_NtCompareSigningLevels ZwCompareTokens __imp_ZwCompareTokens NtCompareTokens __imp_NtCompareTokens ZwCompleteConnectPort __imp_ZwCompleteConnectPort NtCompleteConnectPort __imp_NtCompleteConnectPort ZwCompressKey __imp_ZwCompressKey NtCompressKey __imp_NtCompressKey ZwConnectPort __imp_ZwConnectPort NtConnectPort __imp_NtConnectPort ZwContinueEx __imp_ZwContinueEx NtContinueEx __imp_NtContinueEx ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter __imp_ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter NtConvertBetweenAuxiliaryCounterAndPerformanceCounter __imp_NtConvertBetweenAuxiliaryCounterAndPerformanceCounter ZwCreateCrossVmEvent __imp_ZwCreateCrossVmEvent NtCreateCrossVmEvent __imp_NtCreateCrossVmEvent ZwCreateCrossVmMutant __imp_ZwCreateCrossVmMutant NtCreateCrossVmMutant __imp_NtCreateCrossVmMutant ZwCreateDebugObject __imp_ZwCreateDebugObject NtCreateDebugObject __imp_NtCreateDebugObject ZwCreateDirectoryObject __imp_ZwCreateDirectoryObject NtCreateDirectoryObject __imp_NtCreateDirectoryObject ZwCreateDirectoryObjectEx __imp_ZwCreateDirectoryObjectEx NtCreateDirectoryObjectEx __imp_NtCreateDirectoryObjectEx ZwCreateEnclave __imp_ZwCreateEnclave NtCreateEnclave __imp_NtCreateEnclave ZwCreateEnlistment __imp_ZwCreateEnlistment NtCreateEnlistment __imp_NtCreateEnlistment ZwCreateEventPair __imp_ZwCreateEventPair NtCreateEventPair __imp_NtCreateEventPair ZwCreateIRTimer __imp_ZwCreateIRTimer NtCreateIRTimer __imp_NtCreateIRTimer ZwCreateIoCompletion __imp_ZwCreateIoCompletion NtCreateIoCompletion __imp_NtCreateIoCompletion ZwCreateJobObject __imp_ZwCreateJobObject NtCreateJobObject __imp_NtCreateJobObject ZwCreateJobSet __imp_ZwCreateJobSet NtCreateJobSet __imp_NtCreateJobSet ZwCreateKeyTransacted __imp_ZwCreateKeyTransacted NtCreateKeyTransacted __imp_NtCreateKeyTransacted ZwCreateKeyedEvent __imp_ZwCreateKeyedEvent NtCreateKeyedEvent __imp_NtCreateKeyedEvent ZwCreateLowBoxToken __imp_ZwCreateLowBoxToken NtCreateLowBoxToken __imp_NtCreateLowBoxToken ZwCreateMailslotFile __imp_ZwCreateMailslotFile NtCreateMailslotFile __imp_NtCreateMailslotFile ZwCreateMutant __imp_ZwCreateMutant NtCreateMutant __imp_NtCreateMutant ZwCreateNamedPipeFile __imp_ZwCreateNamedPipeFile NtCreateNamedPipeFile __imp_NtCreateNamedPipeFile ZwCreatePagingFile __imp_ZwCreatePagingFile NtCreatePagingFile __imp_NtCreatePagingFile ZwCreatePartition __imp_ZwCreatePartition NtCreatePartition __imp_NtCreatePartition ZwCreatePort __imp_ZwCreatePort NtCreatePort __imp_NtCreatePort ZwCreatePrivateNamespace __imp_ZwCreatePrivateNamespace NtCreatePrivateNamespace __imp_NtCreatePrivateNamespace ZwCreateProcess __imp_ZwCreateProcess NtCreateProcess __imp_NtCreateProcess ZwCreateProfile __imp_ZwCreateProfile NtCreateProfile __imp_NtCreateProfile ZwCreateProfileEx __imp_ZwCreateProfileEx NtCreateProfileEx __imp_NtCreateProfileEx ZwCreateRegistryTransaction __imp_ZwCreateRegistryTransaction NtCreateRegistryTransaction __imp_NtCreateRegistryTransaction ZwCreateResourceManager __imp_ZwCreateResourceManager NtCreateResourceManager __imp_NtCreateResourceManager ZwCreateSectionEx __imp_ZwCreateSectionEx NtCreateSectionEx __imp_NtCreateSectionEx ZwCreateSemaphore __imp_ZwCreateSemaphore NtCreateSemaphore __imp_NtCreateSemaphore ZwCreateSymbolicLinkObject __imp_ZwCreateSymbolicLinkObject NtCreateSymbolicLinkObject __imp_NtCreateSymbolicLinkObject ZwCreateThreadEx __imp_ZwCreateThreadEx NtCreateThreadEx __imp_NtCreateThreadEx ZwCreateTimer __imp_ZwCreateTimer NtCreateTimer __imp_NtCreateTimer ZwCreateTimer2 __imp_ZwCreateTimer2 NtCreateTimer2 __imp_NtCreateTimer2 ZwCreateToken __imp_ZwCreateToken NtCreateToken __imp_NtCreateToken ZwCreateTokenEx __imp_ZwCreateTokenEx NtCreateTokenEx __imp_NtCreateTokenEx ZwCreateTransaction __imp_ZwCreateTransaction NtCreateTransaction __imp_NtCreateTransaction ZwCreateTransactionManager __imp_ZwCreateTransactionManager NtCreateTransactionManager __imp_NtCreateTransactionManager ZwCreateUserProcess __imp_ZwCreateUserProcess NtCreateUserProcess __imp_NtCreateUserProcess ZwCreateWaitCompletionPacket __imp_ZwCreateWaitCompletionPacket NtCreateWaitCompletionPacket __imp_NtCreateWaitCompletionPacket ZwCreateWaitablePort __imp_ZwCreateWaitablePort NtCreateWaitablePort __imp_NtCreateWaitablePort ZwCreateWnfStateName __imp_ZwCreateWnfStateName NtCreateWnfStateName __imp_NtCreateWnfStateName ZwCreateWorkerFactory __imp_ZwCreateWorkerFactory NtCreateWorkerFactory __imp_NtCreateWorkerFactory ZwDebugActiveProcess __imp_ZwDebugActiveProcess NtDebugActiveProcess __imp_NtDebugActiveProcess ZwDebugContinue __imp_ZwDebugContinue NtDebugContinue __imp_NtDebugContinue ZwDeleteAtom __imp_ZwDeleteAtom NtDeleteAtom __imp_NtDeleteAtom ZwDeleteBootEntry __imp_ZwDeleteBootEntry NtDeleteBootEntry __imp_NtDeleteBootEntry ZwDeleteDriverEntry __imp_ZwDeleteDriverEntry NtDeleteDriverEntry __imp_NtDeleteDriverEntry ZwDeleteFile __imp_ZwDeleteFile NtDeleteFile __imp_NtDeleteFile ZwDeleteKey __imp_ZwDeleteKey NtDeleteKey __imp_NtDeleteKey ZwDeleteObjectAuditAlarm __imp_ZwDeleteObjectAuditAlarm NtDeleteObjectAuditAlarm __imp_NtDeleteObjectAuditAlarm ZwDeletePrivateNamespace __imp_ZwDeletePrivateNamespace NtDeletePrivateNamespace __imp_NtDeletePrivateNamespace ZwDeleteValueKey __imp_ZwDeleteValueKey NtDeleteValueKey __imp_NtDeleteValueKey ZwDeleteWnfStateData __imp_ZwDeleteWnfStateData NtDeleteWnfStateData __imp_NtDeleteWnfStateData ZwDeleteWnfStateName __imp_ZwDeleteWnfStateName NtDeleteWnfStateName __imp_NtDeleteWnfStateName ZwDirectGraphicsCall __imp_ZwDirectGraphicsCall NtDirectGraphicsCall __imp_NtDirectGraphicsCall ZwDisableLastKnownGood __imp_ZwDisableLastKnownGood NtDisableLastKnownGood __imp_NtDisableLastKnownGood ZwDisplayString __imp_ZwDisplayString NtDisplayString __imp_NtDisplayString ZwDrawText __imp_ZwDrawText NtDrawText __imp_NtDrawText ZwEnableLastKnownGood __imp_ZwEnableLastKnownGood NtEnableLastKnownGood __imp_NtEnableLastKnownGood ZwEnumerateBootEntries __imp_ZwEnumerateBootEntries NtEnumerateBootEntries __imp_NtEnumerateBootEntries ZwEnumerateDriverEntries __imp_ZwEnumerateDriverEntries NtEnumerateDriverEntries __imp_NtEnumerateDriverEntries ZwEnumerateSystemEnvironmentValuesEx __imp_ZwEnumerateSystemEnvironmentValuesEx NtEnumerateSystemEnvironmentValuesEx __imp_NtEnumerateSystemEnvironmentValuesEx ZwEnumerateTransactionObject __imp_ZwEnumerateTransactionObject NtEnumerateTransactionObject __imp_NtEnumerateTransactionObject ZwExtendSection __imp_ZwExtendSection NtExtendSection __imp_NtExtendSection ZwFilterBootOption __imp_ZwFilterBootOption NtFilterBootOption __imp_NtFilterBootOption ZwFilterToken __imp_ZwFilterToken NtFilterToken __imp_NtFilterToken ZwFilterTokenEx __imp_ZwFilterTokenEx NtFilterTokenEx __imp_NtFilterTokenEx ZwFlushBuffersFileEx __imp_ZwFlushBuffersFileEx NtFlushBuffersFileEx __imp_NtFlushBuffersFileEx ZwFlushInstallUILanguage __imp_ZwFlushInstallUILanguage NtFlushInstallUILanguage __imp_NtFlushInstallUILanguage ZwFlushInstructionCache __imp_ZwFlushInstructionCache NtFlushInstructionCache __imp_NtFlushInstructionCache ZwFlushKey __imp_ZwFlushKey NtFlushKey __imp_NtFlushKey ZwFlushProcessWriteBuffers __imp_ZwFlushProcessWriteBuffers NtFlushProcessWriteBuffers __imp_NtFlushProcessWriteBuffers ZwFlushVirtualMemory __imp_ZwFlushVirtualMemory NtFlushVirtualMemory __imp_NtFlushVirtualMemory ZwFlushWriteBuffer __imp_ZwFlushWriteBuffer NtFlushWriteBuffer __imp_NtFlushWriteBuffer ZwFreeUserPhysicalPages __imp_ZwFreeUserPhysicalPages NtFreeUserPhysicalPages __imp_NtFreeUserPhysicalPages ZwFreezeRegistry __imp_ZwFreezeRegistry NtFreezeRegistry __imp_NtFreezeRegistry ZwFreezeTransactions __imp_ZwFreezeTransactions NtFreezeTransactions __imp_NtFreezeTransactions ZwGetCachedSigningLevel __imp_ZwGetCachedSigningLevel NtGetCachedSigningLevel __imp_NtGetCachedSigningLevel ZwGetCompleteWnfStateSubscription __imp_ZwGetCompleteWnfStateSubscription NtGetCompleteWnfStateSubscription __imp_NtGetCompleteWnfStateSubscription ZwGetContextThread __imp_ZwGetContextThread NtGetContextThread __imp_NtGetContextThread ZwGetCurrentProcessorNumber __imp_ZwGetCurrentProcessorNumber NtGetCurrentProcessorNumber __imp_NtGetCurrentProcessorNumber ZwGetCurrentProcessorNumberEx __imp_ZwGetCurrentProcessorNumberEx NtGetCurrentProcessorNumberEx __imp_NtGetCurrentProcessorNumberEx ZwGetDevicePowerState __imp_ZwGetDevicePowerState NtGetDevicePowerState __imp_NtGetDevicePowerState ZwGetMUIRegistryInfo __imp_ZwGetMUIRegistryInfo NtGetMUIRegistryInfo __imp_NtGetMUIRegistryInfo ZwGetNextProcess __imp_ZwGetNextProcess NtGetNextProcess __imp_NtGetNextProcess ZwGetNextThread __imp_ZwGetNextThread NtGetNextThread __imp_NtGetNextThread ZwGetNlsSectionPtr __imp_ZwGetNlsSectionPtr NtGetNlsSectionPtr __imp_NtGetNlsSectionPtr ZwGetNotificationResourceManager __imp_ZwGetNotificationResourceManager NtGetNotificationResourceManager __imp_NtGetNotificationResourceManager ZwGetWriteWatch __imp_ZwGetWriteWatch NtGetWriteWatch __imp_NtGetWriteWatch ZwImpersonateAnonymousToken __imp_ZwImpersonateAnonymousToken NtImpersonateAnonymousToken __imp_NtImpersonateAnonymousToken ZwImpersonateThread __imp_ZwImpersonateThread NtImpersonateThread __imp_NtImpersonateThread ZwInitializeEnclave __imp_ZwInitializeEnclave NtInitializeEnclave __imp_NtInitializeEnclave ZwInitializeNlsFiles __imp_ZwInitializeNlsFiles NtInitializeNlsFiles __imp_NtInitializeNlsFiles ZwInitializeRegistry __imp_ZwInitializeRegistry NtInitializeRegistry __imp_NtInitializeRegistry ZwInitiatePowerAction __imp_ZwInitiatePowerAction NtInitiatePowerAction __imp_NtInitiatePowerAction ZwIsSystemResumeAutomatic __imp_ZwIsSystemResumeAutomatic NtIsSystemResumeAutomatic __imp_NtIsSystemResumeAutomatic ZwIsUILanguageComitted __imp_ZwIsUILanguageComitted NtIsUILanguageComitted __imp_NtIsUILanguageComitted ZwListenPort __imp_ZwListenPort NtListenPort __imp_NtListenPort ZwLoadDriver __imp_ZwLoadDriver NtLoadDriver __imp_NtLoadDriver ZwLoadEnclaveData __imp_ZwLoadEnclaveData NtLoadEnclaveData __imp_NtLoadEnclaveData ZwLoadKey __imp_ZwLoadKey NtLoadKey __imp_NtLoadKey ZwLoadKey2 __imp_ZwLoadKey2 NtLoadKey2 __imp_NtLoadKey2 ZwLoadKeyEx __imp_ZwLoadKeyEx NtLoadKeyEx __imp_NtLoadKeyEx ZwLockFile __imp_ZwLockFile NtLockFile __imp_NtLockFile ZwLockProductActivationKeys __imp_ZwLockProductActivationKeys NtLockProductActivationKeys __imp_NtLockProductActivationKeys ZwLockRegistryKey __imp_ZwLockRegistryKey NtLockRegistryKey __imp_NtLockRegistryKey ZwLockVirtualMemory __imp_ZwLockVirtualMemory NtLockVirtualMemory __imp_NtLockVirtualMemory ZwMakePermanentObject __imp_ZwMakePermanentObject NtMakePermanentObject __imp_NtMakePermanentObject ZwMakeTemporaryObject __imp_ZwMakeTemporaryObject NtMakeTemporaryObject __imp_NtMakeTemporaryObject ZwManageHotPatch __imp_ZwManageHotPatch NtManageHotPatch __imp_NtManageHotPatch ZwManagePartition __imp_ZwManagePartition NtManagePartition __imp_NtManagePartition ZwMapCMFModule __imp_ZwMapCMFModule NtMapCMFModule __imp_NtMapCMFModule ZwMapUserPhysicalPages __imp_ZwMapUserPhysicalPages NtMapUserPhysicalPages __imp_NtMapUserPhysicalPages ZwMapViewOfSectionEx __imp_ZwMapViewOfSectionEx NtMapViewOfSectionEx __imp_NtMapViewOfSectionEx ZwModifyBootEntry __imp_ZwModifyBootEntry NtModifyBootEntry __imp_NtModifyBootEntry ZwModifyDriverEntry __imp_ZwModifyDriverEntry NtModifyDriverEntry __imp_NtModifyDriverEntry ZwNotifyChangeDirectoryFile __imp_ZwNotifyChangeDirectoryFile NtNotifyChangeDirectoryFile __imp_NtNotifyChangeDirectoryFile ZwNotifyChangeDirectoryFileEx __imp_ZwNotifyChangeDirectoryFileEx NtNotifyChangeDirectoryFileEx __imp_NtNotifyChangeDirectoryFileEx ZwNotifyChangeKey __imp_ZwNotifyChangeKey NtNotifyChangeKey __imp_NtNotifyChangeKey ZwNotifyChangeMultipleKeys __imp_ZwNotifyChangeMultipleKeys NtNotifyChangeMultipleKeys __imp_NtNotifyChangeMultipleKeys ZwNotifyChangeSession __imp_ZwNotifyChangeSession NtNotifyChangeSession __imp_NtNotifyChangeSession ZwOpenEnlistment __imp_ZwOpenEnlistment NtOpenEnlistment __imp_NtOpenEnlistment ZwOpenEventPair __imp_ZwOpenEventPair NtOpenEventPair __imp_NtOpenEventPair ZwOpenIoCompletion __imp_ZwOpenIoCompletion NtOpenIoCompletion __imp_NtOpenIoCompletion ZwOpenJobObject __imp_ZwOpenJobObject NtOpenJobObject __imp_NtOpenJobObject ZwOpenKeyEx __imp_ZwOpenKeyEx NtOpenKeyEx __imp_NtOpenKeyEx ZwOpenKeyTransacted __imp_ZwOpenKeyTransacted NtOpenKeyTransacted __imp_NtOpenKeyTransacted ZwOpenKeyTransactedEx __imp_ZwOpenKeyTransactedEx NtOpenKeyTransactedEx __imp_NtOpenKeyTransactedEx ZwOpenKeyedEvent __imp_ZwOpenKeyedEvent NtOpenKeyedEvent __imp_NtOpenKeyedEvent ZwOpenMutant __imp_ZwOpenMutant NtOpenMutant __imp_NtOpenMutant ZwOpenObjectAuditAlarm __imp_ZwOpenObjectAuditAlarm NtOpenObjectAuditAlarm __imp_NtOpenObjectAuditAlarm ZwOpenPartition __imp_ZwOpenPartition NtOpenPartition __imp_NtOpenPartition ZwOpenPrivateNamespace __imp_ZwOpenPrivateNamespace NtOpenPrivateNamespace __imp_NtOpenPrivateNamespace ZwOpenProcessToken __imp_ZwOpenProcessToken NtOpenProcessToken __imp_NtOpenProcessToken ZwOpenRegistryTransaction __imp_ZwOpenRegistryTransaction NtOpenRegistryTransaction __imp_NtOpenRegistryTransaction ZwOpenResourceManager __imp_ZwOpenResourceManager NtOpenResourceManager __imp_NtOpenResourceManager ZwOpenSemaphore __imp_ZwOpenSemaphore NtOpenSemaphore __imp_NtOpenSemaphore ZwOpenSession __imp_ZwOpenSession NtOpenSession __imp_NtOpenSession ZwOpenSymbolicLinkObject __imp_ZwOpenSymbolicLinkObject NtOpenSymbolicLinkObject __imp_NtOpenSymbolicLinkObject ZwOpenThread __imp_ZwOpenThread NtOpenThread __imp_NtOpenThread ZwOpenTimer __imp_ZwOpenTimer NtOpenTimer __imp_NtOpenTimer ZwOpenTransaction __imp_ZwOpenTransaction NtOpenTransaction __imp_NtOpenTransaction ZwOpenTransactionManager __imp_ZwOpenTransactionManager NtOpenTransactionManager __imp_NtOpenTransactionManager ZwPlugPlayControl __imp_ZwPlugPlayControl NtPlugPlayControl __imp_NtPlugPlayControl ZwPrePrepareComplete __imp_ZwPrePrepareComplete NtPrePrepareComplete __imp_NtPrePrepareComplete ZwPrePrepareEnlistment __imp_ZwPrePrepareEnlistment NtPrePrepareEnlistment __imp_NtPrePrepareEnlistment ZwPrepareComplete __imp_ZwPrepareComplete NtPrepareComplete __imp_NtPrepareComplete ZwPrepareEnlistment __imp_ZwPrepareEnlistment NtPrepareEnlistment __imp_NtPrepareEnlistment ZwPrivilegeCheck __imp_ZwPrivilegeCheck NtPrivilegeCheck __imp_NtPrivilegeCheck ZwPrivilegeObjectAuditAlarm __imp_ZwPrivilegeObjectAuditAlarm NtPrivilegeObjectAuditAlarm __imp_NtPrivilegeObjectAuditAlarm ZwPrivilegedServiceAuditAlarm __imp_ZwPrivilegedServiceAuditAlarm NtPrivilegedServiceAuditAlarm __imp_NtPrivilegedServiceAuditAlarm ZwPropagationComplete __imp_ZwPropagationComplete NtPropagationComplete __imp_NtPropagationComplete ZwPropagationFailed __imp_ZwPropagationFailed NtPropagationFailed __imp_NtPropagationFailed ZwPssCaptureVaSpaceBulk __imp_ZwPssCaptureVaSpaceBulk NtPssCaptureVaSpaceBulk __imp_NtPssCaptureVaSpaceBulk ZwPulseEvent __imp_ZwPulseEvent NtPulseEvent __imp_NtPulseEvent ZwQueryAuxiliaryCounterFrequency __imp_ZwQueryAuxiliaryCounterFrequency NtQueryAuxiliaryCounterFrequency __imp_NtQueryAuxiliaryCounterFrequency ZwQueryBootEntryOrder __imp_ZwQueryBootEntryOrder NtQueryBootEntryOrder __imp_NtQueryBootEntryOrder ZwQueryBootOptions __imp_ZwQueryBootOptions NtQueryBootOptions __imp_NtQueryBootOptions ZwQueryDebugFilterState __imp_ZwQueryDebugFilterState NtQueryDebugFilterState __imp_NtQueryDebugFilterState ZwQueryDirectoryFileEx __imp_ZwQueryDirectoryFileEx NtQueryDirectoryFileEx __imp_NtQueryDirectoryFileEx ZwQueryDirectoryObject __imp_ZwQueryDirectoryObject NtQueryDirectoryObject __imp_NtQueryDirectoryObject ZwQueryDriverEntryOrder __imp_ZwQueryDriverEntryOrder NtQueryDriverEntryOrder __imp_NtQueryDriverEntryOrder ZwQueryEaFile __imp_ZwQueryEaFile NtQueryEaFile __imp_NtQueryEaFile ZwQueryFullAttributesFile __imp_ZwQueryFullAttributesFile NtQueryFullAttributesFile __imp_NtQueryFullAttributesFile ZwQueryInformationAtom __imp_ZwQueryInformationAtom NtQueryInformationAtom __imp_NtQueryInformationAtom ZwQueryInformationByName __imp_ZwQueryInformationByName NtQueryInformationByName __imp_NtQueryInformationByName ZwQueryInformationEnlistment __imp_ZwQueryInformationEnlistment NtQueryInformationEnlistment __imp_NtQueryInformationEnlistment ZwQueryInformationJobObject __imp_ZwQueryInformationJobObject NtQueryInformationJobObject __imp_NtQueryInformationJobObject ZwQueryInformationPort __imp_ZwQueryInformationPort NtQueryInformationPort __imp_NtQueryInformationPort ZwQueryInformationResourceManager __imp_ZwQueryInformationResourceManager NtQueryInformationResourceManager __imp_NtQueryInformationResourceManager ZwQueryInformationTransaction __imp_ZwQueryInformationTransaction NtQueryInformationTransaction __imp_NtQueryInformationTransaction ZwQueryInformationTransactionManager __imp_ZwQueryInformationTransactionManager NtQueryInformationTransactionManager __imp_NtQueryInformationTransactionManager ZwQueryInformationWorkerFactory __imp_ZwQueryInformationWorkerFactory NtQueryInformationWorkerFactory __imp_NtQueryInformationWorkerFactory ZwQueryInstallUILanguage __imp_ZwQueryInstallUILanguage NtQueryInstallUILanguage __imp_NtQueryInstallUILanguage ZwQueryIntervalProfile __imp_ZwQueryIntervalProfile NtQueryIntervalProfile __imp_NtQueryIntervalProfile ZwQueryIoCompletion __imp_ZwQueryIoCompletion NtQueryIoCompletion __imp_NtQueryIoCompletion ZwQueryLicenseValue __imp_ZwQueryLicenseValue NtQueryLicenseValue __imp_NtQueryLicenseValue ZwQueryMultipleValueKey __imp_ZwQueryMultipleValueKey NtQueryMultipleValueKey __imp_NtQueryMultipleValueKey ZwQueryMutant __imp_ZwQueryMutant NtQueryMutant __imp_NtQueryMutant ZwQueryOpenSubKeys __imp_ZwQueryOpenSubKeys NtQueryOpenSubKeys __imp_NtQueryOpenSubKeys ZwQueryOpenSubKeysEx __imp_ZwQueryOpenSubKeysEx NtQueryOpenSubKeysEx __imp_NtQueryOpenSubKeysEx ZwQueryPortInformationProcess __imp_ZwQueryPortInformationProcess NtQueryPortInformationProcess __imp_NtQueryPortInformationProcess ZwQueryQuotaInformationFile __imp_ZwQueryQuotaInformationFile NtQueryQuotaInformationFile __imp_NtQueryQuotaInformationFile ZwQuerySecurityAttributesToken __imp_ZwQuerySecurityAttributesToken NtQuerySecurityAttributesToken __imp_NtQuerySecurityAttributesToken ZwQuerySecurityObject __imp_ZwQuerySecurityObject NtQuerySecurityObject __imp_NtQuerySecurityObject ZwQuerySecurityPolicy __imp_ZwQuerySecurityPolicy NtQuerySecurityPolicy __imp_NtQuerySecurityPolicy ZwQuerySemaphore __imp_ZwQuerySemaphore NtQuerySemaphore __imp_NtQuerySemaphore ZwQuerySymbolicLinkObject __imp_ZwQuerySymbolicLinkObject NtQuerySymbolicLinkObject __imp_NtQuerySymbolicLinkObject ZwQuerySystemEnvironmentValue __imp_ZwQuerySystemEnvironmentValue NtQuerySystemEnvironmentValue __imp_NtQuerySystemEnvironmentValue ZwQuerySystemEnvironmentValueEx __imp_ZwQuerySystemEnvironmentValueEx NtQuerySystemEnvironmentValueEx __imp_NtQuerySystemEnvironmentValueEx ZwQuerySystemInformationEx __imp_ZwQuerySystemInformationEx NtQuerySystemInformationEx __imp_NtQuerySystemInformationEx ZwQueryTimerResolution __imp_ZwQueryTimerResolution NtQueryTimerResolution __imp_NtQueryTimerResolution ZwQueryWnfStateData __imp_ZwQueryWnfStateData NtQueryWnfStateData __imp_NtQueryWnfStateData ZwQueryWnfStateNameInformation __imp_ZwQueryWnfStateNameInformation NtQueryWnfStateNameInformation __imp_NtQueryWnfStateNameInformation ZwQueueApcThreadEx __imp_ZwQueueApcThreadEx NtQueueApcThreadEx __imp_NtQueueApcThreadEx ZwRaiseException __imp_ZwRaiseException NtRaiseException __imp_NtRaiseException ZwRaiseHardError __imp_ZwRaiseHardError NtRaiseHardError __imp_NtRaiseHardError ZwReadOnlyEnlistment __imp_ZwReadOnlyEnlistment NtReadOnlyEnlistment __imp_NtReadOnlyEnlistment ZwRecoverEnlistment __imp_ZwRecoverEnlistment NtRecoverEnlistment __imp_NtRecoverEnlistment ZwRecoverResourceManager __imp_ZwRecoverResourceManager NtRecoverResourceManager __imp_NtRecoverResourceManager ZwRecoverTransactionManager __imp_ZwRecoverTransactionManager NtRecoverTransactionManager __imp_NtRecoverTransactionManager ZwRegisterProtocolAddressInformation __imp_ZwRegisterProtocolAddressInformation NtRegisterProtocolAddressInformation __imp_NtRegisterProtocolAddressInformation ZwRegisterThreadTerminatePort __imp_ZwRegisterThreadTerminatePort NtRegisterThreadTerminatePort __imp_NtRegisterThreadTerminatePort ZwReleaseKeyedEvent __imp_ZwReleaseKeyedEvent NtReleaseKeyedEvent __imp_NtReleaseKeyedEvent ZwReleaseWorkerFactoryWorker __imp_ZwReleaseWorkerFactoryWorker NtReleaseWorkerFactoryWorker __imp_NtReleaseWorkerFactoryWorker ZwRemoveIoCompletionEx __imp_ZwRemoveIoCompletionEx NtRemoveIoCompletionEx __imp_NtRemoveIoCompletionEx ZwRemoveProcessDebug __imp_ZwRemoveProcessDebug NtRemoveProcessDebug __imp_NtRemoveProcessDebug ZwRenameKey __imp_ZwRenameKey NtRenameKey __imp_NtRenameKey ZwRenameTransactionManager __imp_ZwRenameTransactionManager NtRenameTransactionManager __imp_NtRenameTransactionManager ZwReplaceKey __imp_ZwReplaceKey NtReplaceKey __imp_NtReplaceKey ZwReplacePartitionUnit __imp_ZwReplacePartitionUnit NtReplacePartitionUnit __imp_NtReplacePartitionUnit ZwReplyWaitReplyPort __imp_ZwReplyWaitReplyPort NtReplyWaitReplyPort __imp_NtReplyWaitReplyPort ZwRequestPort __imp_ZwRequestPort NtRequestPort __imp_NtRequestPort ZwResetEvent __imp_ZwResetEvent NtResetEvent __imp_NtResetEvent ZwResetWriteWatch __imp_ZwResetWriteWatch NtResetWriteWatch __imp_NtResetWriteWatch ZwRestoreKey __imp_ZwRestoreKey NtRestoreKey __imp_NtRestoreKey ZwResumeProcess __imp_ZwResumeProcess NtResumeProcess __imp_NtResumeProcess ZwRevertContainerImpersonation __imp_ZwRevertContainerImpersonation NtRevertContainerImpersonation __imp_NtRevertContainerImpersonation ZwRollbackComplete __imp_ZwRollbackComplete NtRollbackComplete __imp_NtRollbackComplete ZwRollbackEnlistment __imp_ZwRollbackEnlistment NtRollbackEnlistment __imp_NtRollbackEnlistment ZwRollbackRegistryTransaction __imp_ZwRollbackRegistryTransaction NtRollbackRegistryTransaction __imp_NtRollbackRegistryTransaction ZwRollbackTransaction __imp_ZwRollbackTransaction NtRollbackTransaction __imp_NtRollbackTransaction ZwRollforwardTransactionManager __imp_ZwRollforwardTransactionManager NtRollforwardTransactionManager __imp_NtRollforwardTransactionManager ZwSaveKey __imp_ZwSaveKey NtSaveKey __imp_NtSaveKey ZwSaveKeyEx __imp_ZwSaveKeyEx NtSaveKeyEx __imp_NtSaveKeyEx ZwSaveMergedKeys __imp_ZwSaveMergedKeys NtSaveMergedKeys __imp_NtSaveMergedKeys ZwSecureConnectPort __imp_ZwSecureConnectPort NtSecureConnectPort __imp_NtSecureConnectPort ZwSerializeBoot __imp_ZwSerializeBoot NtSerializeBoot __imp_NtSerializeBoot ZwSetBootEntryOrder __imp_ZwSetBootEntryOrder NtSetBootEntryOrder __imp_NtSetBootEntryOrder ZwSetBootOptions __imp_ZwSetBootOptions NtSetBootOptions __imp_NtSetBootOptions ZwSetCachedSigningLevel __imp_ZwSetCachedSigningLevel NtSetCachedSigningLevel __imp_NtSetCachedSigningLevel ZwSetCachedSigningLevel2 __imp_ZwSetCachedSigningLevel2 NtSetCachedSigningLevel2 __imp_NtSetCachedSigningLevel2 ZwSetContextThread __imp_ZwSetContextThread NtSetContextThread __imp_NtSetContextThread ZwSetDebugFilterState __imp_ZwSetDebugFilterState NtSetDebugFilterState __imp_NtSetDebugFilterState ZwSetDefaultHardErrorPort __imp_ZwSetDefaultHardErrorPort NtSetDefaultHardErrorPort __imp_NtSetDefaultHardErrorPort ZwSetDefaultLocale __imp_ZwSetDefaultLocale NtSetDefaultLocale __imp_NtSetDefaultLocale ZwSetDefaultUILanguage __imp_ZwSetDefaultUILanguage NtSetDefaultUILanguage __imp_NtSetDefaultUILanguage ZwSetDriverEntryOrder __imp_ZwSetDriverEntryOrder NtSetDriverEntryOrder __imp_NtSetDriverEntryOrder ZwSetEaFile __imp_ZwSetEaFile NtSetEaFile __imp_NtSetEaFile ZwSetHighEventPair __imp_ZwSetHighEventPair NtSetHighEventPair __imp_NtSetHighEventPair ZwSetHighWaitLowEventPair __imp_ZwSetHighWaitLowEventPair NtSetHighWaitLowEventPair __imp_NtSetHighWaitLowEventPair ZwSetIRTimer __imp_ZwSetIRTimer NtSetIRTimer __imp_NtSetIRTimer ZwSetInformationDebugObject __imp_ZwSetInformationDebugObject NtSetInformationDebugObject __imp_NtSetInformationDebugObject ZwSetInformationEnlistment __imp_ZwSetInformationEnlistment NtSetInformationEnlistment __imp_NtSetInformationEnlistment ZwSetInformationJobObject __imp_ZwSetInformationJobObject NtSetInformationJobObject __imp_NtSetInformationJobObject ZwSetInformationKey __imp_ZwSetInformationKey NtSetInformationKey __imp_NtSetInformationKey ZwSetInformationResourceManager __imp_ZwSetInformationResourceManager NtSetInformationResourceManager __imp_NtSetInformationResourceManager ZwSetInformationSymbolicLink __imp_ZwSetInformationSymbolicLink NtSetInformationSymbolicLink __imp_NtSetInformationSymbolicLink ZwSetInformationToken __imp_ZwSetInformationToken NtSetInformationToken __imp_NtSetInformationToken ZwSetInformationTransaction __imp_ZwSetInformationTransaction NtSetInformationTransaction __imp_NtSetInformationTransaction ZwSetInformationTransactionManager __imp_ZwSetInformationTransactionManager NtSetInformationTransactionManager __imp_NtSetInformationTransactionManager ZwSetInformationVirtualMemory __imp_ZwSetInformationVirtualMemory NtSetInformationVirtualMemory __imp_NtSetInformationVirtualMemory ZwSetInformationWorkerFactory __imp_ZwSetInformationWorkerFactory NtSetInformationWorkerFactory __imp_NtSetInformationWorkerFactory ZwSetIntervalProfile __imp_ZwSetIntervalProfile NtSetIntervalProfile __imp_NtSetIntervalProfile ZwSetIoCompletion __imp_ZwSetIoCompletion NtSetIoCompletion __imp_NtSetIoCompletion ZwSetIoCompletionEx __imp_ZwSetIoCompletionEx NtSetIoCompletionEx __imp_NtSetIoCompletionEx ZwSetLdtEntries __imp_ZwSetLdtEntries NtSetLdtEntries __imp_NtSetLdtEntries ZwSetLowEventPair __imp_ZwSetLowEventPair NtSetLowEventPair __imp_NtSetLowEventPair ZwSetLowWaitHighEventPair __imp_ZwSetLowWaitHighEventPair NtSetLowWaitHighEventPair __imp_NtSetLowWaitHighEventPair ZwSetQuotaInformationFile __imp_ZwSetQuotaInformationFile NtSetQuotaInformationFile __imp_NtSetQuotaInformationFile ZwSetSecurityObject __imp_ZwSetSecurityObject NtSetSecurityObject __imp_NtSetSecurityObject ZwSetSystemEnvironmentValue __imp_ZwSetSystemEnvironmentValue NtSetSystemEnvironmentValue __imp_NtSetSystemEnvironmentValue ZwSetSystemEnvironmentValueEx __imp_ZwSetSystemEnvironmentValueEx NtSetSystemEnvironmentValueEx __imp_NtSetSystemEnvironmentValueEx ZwSetSystemInformation __imp_ZwSetSystemInformation NtSetSystemInformation __imp_NtSetSystemInformation ZwSetSystemPowerState __imp_ZwSetSystemPowerState NtSetSystemPowerState __imp_NtSetSystemPowerState ZwSetSystemTime __imp_ZwSetSystemTime NtSetSystemTime __imp_NtSetSystemTime ZwSetThreadExecutionState __imp_ZwSetThreadExecutionState NtSetThreadExecutionState __imp_NtSetThreadExecutionState ZwSetTimer2 __imp_ZwSetTimer2 NtSetTimer2 __imp_NtSetTimer2 ZwSetTimerEx __imp_ZwSetTimerEx NtSetTimerEx __imp_NtSetTimerEx ZwSetTimerResolution __imp_ZwSetTimerResolution NtSetTimerResolution __imp_NtSetTimerResolution ZwSetUuidSeed __imp_ZwSetUuidSeed NtSetUuidSeed __imp_NtSetUuidSeed ZwSetVolumeInformationFile __imp_ZwSetVolumeInformationFile NtSetVolumeInformationFile __imp_NtSetVolumeInformationFile ZwSetWnfProcessNotificationEvent __imp_ZwSetWnfProcessNotificationEvent NtSetWnfProcessNotificationEvent __imp_NtSetWnfProcessNotificationEvent ZwShutdownSystem __imp_ZwShutdownSystem NtShutdownSystem __imp_NtShutdownSystem ZwShutdownWorkerFactory __imp_ZwShutdownWorkerFactory NtShutdownWorkerFactory __imp_NtShutdownWorkerFactory ZwSignalAndWaitForSingleObject __imp_ZwSignalAndWaitForSingleObject NtSignalAndWaitForSingleObject __imp_NtSignalAndWaitForSingleObject ZwSinglePhaseReject __imp_ZwSinglePhaseReject NtSinglePhaseReject __imp_NtSinglePhaseReject ZwStartProfile __imp_ZwStartProfile NtStartProfile __imp_NtStartProfile ZwStopProfile __imp_ZwStopProfile NtStopProfile __imp_NtStopProfile ZwSubscribeWnfStateChange __imp_ZwSubscribeWnfStateChange NtSubscribeWnfStateChange __imp_NtSubscribeWnfStateChange ZwSuspendProcess __imp_ZwSuspendProcess NtSuspendProcess __imp_NtSuspendProcess ZwSuspendThread __imp_ZwSuspendThread NtSuspendThread __imp_NtSuspendThread ZwSystemDebugControl __imp_ZwSystemDebugControl NtSystemDebugControl __imp_NtSystemDebugControl ZwTerminateEnclave __imp_ZwTerminateEnclave NtTerminateEnclave __imp_NtTerminateEnclave ZwTerminateJobObject __imp_ZwTerminateJobObject NtTerminateJobObject __imp_NtTerminateJobObject ZwTestAlert __imp_ZwTestAlert NtTestAlert __imp_NtTestAlert ZwThawRegistry __imp_ZwThawRegistry NtThawRegistry __imp_NtThawRegistry ZwThawTransactions __imp_ZwThawTransactions NtThawTransactions __imp_NtThawTransactions ZwTraceControl __imp_ZwTraceControl NtTraceControl __imp_NtTraceControl ZwTranslateFilePath __imp_ZwTranslateFilePath NtTranslateFilePath __imp_NtTranslateFilePath ZwUmsThreadYield __imp_ZwUmsThreadYield NtUmsThreadYield __imp_NtUmsThreadYield ZwUnloadDriver __imp_ZwUnloadDriver NtUnloadDriver __imp_NtUnloadDriver ZwUnloadKey __imp_ZwUnloadKey NtUnloadKey __imp_NtUnloadKey ZwUnloadKey2 __imp_ZwUnloadKey2 NtUnloadKey2 __imp_NtUnloadKey2 ZwUnloadKeyEx __imp_ZwUnloadKeyEx NtUnloadKeyEx __imp_NtUnloadKeyEx ZwUnlockFile __imp_ZwUnlockFile NtUnlockFile __imp_NtUnlockFile ZwUnlockVirtualMemory __imp_ZwUnlockVirtualMemory NtUnlockVirtualMemory __imp_NtUnlockVirtualMemory ZwUnmapViewOfSectionEx __imp_ZwUnmapViewOfSectionEx NtUnmapViewOfSectionEx __imp_NtUnmapViewOfSectionEx ZwUnsubscribeWnfStateChange __imp_ZwUnsubscribeWnfStateChange NtUnsubscribeWnfStateChange __imp_NtUnsubscribeWnfStateChange ZwUpdateWnfStateData __imp_ZwUpdateWnfStateData NtUpdateWnfStateData __imp_NtUpdateWnfStateData ZwVdmControl __imp_ZwVdmControl NtVdmControl __imp_NtVdmControl ZwWaitForAlertByThreadId __imp_ZwWaitForAlertByThreadId NtWaitForAlertByThreadId __imp_NtWaitForAlertByThreadId ZwWaitForDebugEvent __imp_ZwWaitForDebugEvent NtWaitForDebugEvent __imp_NtWaitForDebugEvent ZwWaitForKeyedEvent __imp_ZwWaitForKeyedEvent NtWaitForKeyedEvent __imp_NtWaitForKeyedEvent ZwWaitForWorkViaWorkerFactory __imp_ZwWaitForWorkViaWorkerFactory NtWaitForWorkViaWorkerFactory __imp_NtWaitForWorkViaWorkerFactory ZwWaitHighEventPair __imp_ZwWaitHighEventPair NtWaitHighEventPair __imp_NtWaitHighEventPair ZwWaitLowEventPair __imp_ZwWaitLowEventPair NtWaitLowEventPair __imp_NtWaitLowEventPair ZwLoadKey3 __imp_ZwLoadKey3 NtLoadKey3 __imp_NtLoadKey3 / -1 0 124166 `
$ �� �� �� � �� �� � �� X� �� >� �� �� h� *� �� �� Hg �g \� �� �� �� 2� �� � d� �� � N� �� 6� �� f� � D� �� \� �� v � � � �
� j @ � ~� d 8 ~� .
� �� H � B
8 �} ̋ � ^ � : d � l� �� >� �� �� p� �� �� <� �� � ~� �� j� �� L� �� 2� �� � t� �� \� �� �� � � � X� � :� �� ,� �� � � T� � B $ � � � b � F � $ � � ^ � v X
�
P �
�
v � F � � X � 2 � � � ` � � � v � � R � J � � l B � � � l! �! �% (& 4" # ~# �$ H% �& �' \( �( V) @* �* &+ |0 Z- �- H. �. * � */ 0 �[ l\ Xe �j k tk �k ~� �3 �5 X6 �6 87 �7 �< 8 n8 Z9 �9 F: �: (< = t= �= �2 �@ pA �A NB �B D lE XF DG 8J �H :K 2I �I �J 0� �K 2L �L M �M �M fN �O �4 �P x5 8P 5 Q �Q R �N XO �E r� b� �R 4^ T� آ �� �� >x � z� � Ƽ � � �� Z� 2� �� � �� �� � �� �S RT �T JU �U hS �R RV �V 4 ^i H 0W �W X jX �X �Y �] �_ N] �\ ` n` �` Da �a c �c d td �d �f �e h .g �h �h >j 2m �m �l n �n �n Xo 4p �p �q �q 8s �s �v �w � ( �# � t �x �y z �z �� �' z{ h| �| � �� � �n h� �� &� �r �a �{ � � pp �o >r �o �� �$ h% H
� n �� �0 � c �b b �c o dg lf |e e �g Jh d �f �e F� �i �j *j <i �t Bw { j� ڀ L� 6� � �� �� z� � |� �� � T� 0� �t pu �u � ڊ T� 8� �� d� ֏ 6� �� n� d� "� �D �� J� .� �� � v� � ̛ 8� � F� �� |� � ^� �X X �+ p, R� ʣ N� N ^ � �� ,� �� �� � ب D� �� �� `� ʞ � �� � �� �� *� �� � �� h� P� Į :� (� ܭ �� �G �� n� �� n� :� �� �i �� � �� �� T� l� � Ƴ � 8� �� �� � � x� ^� �� з D� &Z �Z [ �[ V� 2� �� � �� N� *� �� J� �� � �� `� �� @� �� &� � �� �� F� �� 8� �� 2� �� � �� �� d� H� �� .� �� � �� �� l� �� d� �� �� �� � �� � �� �� f� �� H� �� 2� �� � �� �� `� �h �k �k fl �l @m �m �� <� �� � \� L� �� &� � �� �� �� �� � �� j� �� L� �� 6� � � �� � � z� � Z� � J� &� � �� � V� �� � �� �� � F� �� � f � F � v � V �
< r � Z � � ~ � L 4 � � l � � �( &( � � � � J! �! �% # �# X& �& ) l) �) J* �* &+ �+ �, L- �- . �. / ~/ �/ �0 `1 $3 �3 j4 �3 �p �4 T5 �5 Zq �6 7 N9 66 �7 �7 l8 �8 �9 �; �= V> �> D? :@ �@ "A �? �A �B fC �B �C >D �E HG �G �I �J 2K (L �K M �M ZO �O < �< R� � � � n� �1 �P �R T �P �Q rQ fR �T Y pY �Y f_ 4s �s t �t �_ 82 �� �� � b� � �� J� B� �� �� �� R� r� �� �1 , � �) �D ,� � � H2 Hl � �? : �[ \ �\
] ~] �] p^ �^ k �r �q �U TV �V 4W �W �� Xv b� � DS �S T z� �� �� � � N T � � �� b1 B �L �� j � � � f� � � ` |� � @ �@ �� �, �, �N R> �> *? x$ : ,4 F' � �F <� �� � � � 6 F � � � �
� � � ^ � ~ � ,P = p= Ff �g �" �� >` �� � .3 (H "b �b q t *� �� d� �� �� 0y > �+ �� �d � n� �� �` �� &� �D �# � r � t� ," �" 0 � �� �� �� � z� 8� � z� 2� �� �� J� �� j� �� P� �� *� �� F� �� ~� \� �� h� �� � �� �� h� �� � X� .� �� �� 2� |� "� �� nf h� �� 2: � &� �: * J� ^ ; ~N $� �� � �� (� �� � ��
� �� �� p� f� �� �� � 0 RZ �
u �u Nv ru � p� � � *� \� �� *� �� L� � :� �� � \� ʓ &� �� � �� 6� �� � �� v� �� �� p� ޙ d� �� �2 6� �� n0 tI DY �� > pU \H �H 8[ �Z � H �v (w �w x vx �x Dy �y z �z �{ | �| } { z} �} X~ �~ < �
� �� � b� ځ J� �� &� �� �� `� ΄ F� �� (� ��
� r� և <� �� � ~� � `� Ԋ >� �� � � $ �/ `r � x' �C "_ �� hF z� ' (C �^ �o � �
�E �� �F :� E b$ |� (� �8 � �� &a � ,� U \J D� � <; �� �� "� �� ̔ �; � � T} 4~ �~ Ȥ @� X� p� �� " � � � �� � �� �� �� �� h� D� �� <� Ě �d r� V� �
� �r �b �� � T/ .) � ^� �S ,e �� X/ � r. .� �2 �� `2 � �F �� �@ R� j� �2 � �� 0 � d� z � bY (� z[ � �� & � B% �� �� �! � F� |b 8� �e N� hE $� B� �? ~� �_ �� �g . Ī � �� �4 @� �% h� n *� z 6� . �} �C `� �� >s ,� ~ �^ D� 83 � LX � �@ �� �) P� � �� �~ ֚ �� X &� �x �� O � �� # Ο X � h$ $� �� a lf (� ̶ 3 �� �U �
d� � T2 �* �� V� x � f �� >V � >8 T � |' 8� �f �� � X V� �< & آ �� �F �� �[ Ȱ - ^� �D @� �H �� Xj \ � | 8� �6 X� �X v� p* ,� *� |= � �� �e �� z� 6w � b �# �� b �� �D �� n� �/ �Z �� � �� �Q ~� ��
1 �O r� �� � �� � � V �� � � j �� � j� � П " :� � �� � �� � � V r� � ڢ , L� � �� 2� � �� � � r! �� N" p� �" � 4# P� �# �� $ *� |$ �� �$ � Z% ~� �% � B& f� �& ت *' N� �' �� ( 6� �( �� �( (� z) �� �) � d* �� �* �� H+ n� �+ � 6, X� �, 8� �- �� �- � r. �� �. س *0 D� �0 � r1 �� �1 >� �3 �� �3 � j4 �� �4 �� N5 d� �5 й "6 B� �6 �� �6 � n7 �� �7 R� �8 �� 9 J� �9 �� : *� |: �� �:
� \; ~� �; � :< �� = �� �= �� N> l� �> �� *? �� �? � j@ �� �@ �� FA d� �A �� B >� �B �� �B � jC �� �C �� FD �� E 4� �E �� �E � hF �� DG ^� �G �� H �� �H � hI ~� �I �� :J P� �J �� K (� zK �� �K � ^L �� �L �� FM d� �M �� &N D� �N � lO �� �O �� @P \� �P �� Q *� |Q �� �Q � dR ~� �R �� @S �� T >� �T �� U � lU X� �V �� W :� �W � jX �� �X ~� �Y �� :Z V� �Z �� [ �� N\ l� �\ �� 2] R� �] ��
^ .� �^ �� �^ � ^_ �� >` X� �` 2� �a �� �a � rb �� �b � Vc |� �c �� >d \� �d �� e 2� �e �� �e � �f �� Bg p� ,h �� �h L� i �� xi ,� �i � �j |� 8k �� �k V� l �� zl *� �l �� Jm Z� n �� |n &� �n �� Xo � �o v� 2p �� �p V� q �� ~q .� �q �� Tr � �s `� t � �t :� �t �� lu (� �u �� Pv
� �v � �w �� xx �� Hy �� �y � �z .� �z �� X{ � �{ x� 4| � �| R } � x} � R~ t 0 � � � |� * � � N� H � � j� փ � J� h $� � �� J � � r� $
� �
L� ~ :� � �� � �� @
�� Ԋ � P� �� r .� 8 � � f� ؎ � J� ^ � � �� D � � t� � ^� Ԓ � �� ` � � �� X � � �� F � � t� � H� � �� l (� < �� � f� � J� � �� ` � � �� @! �� �! h� " ܞ �" T� �# B� �$ �� �& P� ' �� �' �� V( � �( ~� * �� J+ � �+ t� ,, � �, ^� "- ީ �- V� �. �� �/ �� :0 �� �0 f� 1 ̭ �1 B� �1 �� �3 h� 4 ذ �4 �� ^5 � �5 �� 26 � 7 ³ �7 <� �7 �� ^8 � �8 �� F9 � �9 |� $: � �: F� �: �� d; � �; �� << �� �< d� = ֹ �= J� �= �� l> (� �> �� N?
� �? |� 0@ � nA *� �A �� PB � �B t� .C � D � �D D� �E �� TF � >G �� �G j� $H �� �H ^� I �� �I N� J �� nJ *� �J �� FK � �K n� &L �� �L V� M �� ~M :� �M �� hN $� �N �� BO �� P �� �P >� �P �� ZQ � *R �� �R \� S �� �S D� �S �� tT 0� �T �� LU � �U p� (V �� �V P� �V �� nW *� �W �� &Y �� �Y H� �Y �� dZ � 6[ �� �[ `� \ �� z\ 6� �\ �� H] � �] l� ^ �� �^ �� j_ &� �_ �� P` � �` t� ,a �� �a V� bc � �c �� Hd � �� �m D ����������������������������
��������������������������������������� 6 P& kFGH3 ! O9 ' " # $ % : R( ) * 4 J; KL+ I- !,-#$"%> 7 QTUWV< = . 5 8 , S/ 0 MN1 2 ? ./XYF D E |x�>*@BDFHJLNP�RTVXZ\^`b�dfhjlnprtvxz|~���������������2��:���������������������������"�������������������� ������
� "$&(�*,.0��246�8:�<>@B�DFHJLNPR�TV�XZ\^`bdfhjl�np�rtvxz|~�����$�����������~���������(�������������������������������6����������������� ��� $
� ��� � "�$&�(*,.02468�:,�<��
>@BDF��H �JLNPRT��V�XZ\^`b���df�hjln prtvxz|~������������������������0�����������������������<����8��������������� ����4
� .�� "z��&�G H I J lmonrpsqYK L M N �O P ��cdQ R S T U V W X Y Z [ \ ] ^ _ TZK` a `b Jc 13d e f g h i j =7�k l m n uo q p r s t u v w x y z { D | } ~ } � � �� � � m� � � � � � � �� � � � � � � � � � q�� � � � � r�� � � � ^_� � � P� � � � � � � � _� � |I� � � � � >8� � � � �� � � r�;:� � � � � 5� � q(� � e� B� � � � � � � � � � L� � � � V\� � � � � =>?78� � � � � ?9� ��� � � E� �f� � � � � � � � � � � � � � � � � � � � � � !"#$�%����� � )(&� @:'*+,-.gh/0123� 5]47^689 �:� � � � =;<>?@AABCiDE6`FGj����H�IPpQRS�VbWX`@ abhnY���W�Z���vw��][���^� ����A �z��d���i��_���c�[vo������������ ��+�&��������������cd��������������U����������������������������k ��� ��� ��
T
��p
�
fgeyGB;EQXs !"#$%�&� '()*+,-./0123456>?@A� �BnCD�NEGFHIJK LmlMNOPQ � SuVTUWR� XYZ[���\9]^_`abcd� efg�6aB hijk��lmn24o ����C'~]p�lqr3421stuv�wxyJ�z{�|MK~}i�� �A���O��MtN�C �������L@jk���CU�����������������������������������������������[\���������)�����{H�D<F������S����*����<��Z��������R���������
��bxOautsv~t{z�yx|}7����
89:;<=o\wfhe��g��������
!"#$%&'()*+,-./005������������������������������{w�=)?ACEGIKMO�QSUWY[]_a�cegikmoqsuwy{}��������������1��9���������������������������!�������������������� �������
� !#%'�)+-/��135�79�;=?A�
CEGIKMOQ�SU�WY[]_acegikmo�qsuwy{}����#�����������}���������'�������������������������������5����������������������# �
���� !�#%�')+-/1357�9+�;�� =?ACE��G �IKMOQS��U�WY[]_a���ce�gikmoqsuwy{}�����������������������/�����������������������;����7��������������� ����3�
�-� !y��%� ����������������������������
��������������������������������������� 6 P& kFGH3 ! O9 ' " # $ % : R( ) * 4 J; KL+ I- !,-#$"%> 7 QTUWV< = . 5 8 , S/ 0 jMN1 2 ? ./XYF D E |x�>*@BDFHJLNP�RTVXZ\^`b�dfhjlnprtvxz|~���������������2��:���������������������������"�������������������� ������
� "$&(�*,.0��246�8:�<>@B�DFHJLNPR�TV�XZ\^`bdfhjl�np�rtvxz|~�����$�����������~���������(�������������������������������6����������������� ��� $
� ��� � "�$&�(*,.02468�:,�<��
>@BDF��H �JLNPRT��V�XZ\^`b���df�hjln prtvxz|~������������������������0�����������������������<����8��������������� ����4
� .�� "z��&�G H I J lmonrpsqYK L M N �O P ��cdQ R S T U V W X Y Z [ \ ] ^ _ TZK` a `b Jc 13d e f g h i j =7�k l m n uo q p r s t u v w x y z { D | } ~ } � � �� � � m� � � � � � � �� � � � � � � � � � q�� � � � � r�� � � � ^_� � � P� � � � � � � � _� � |I� � � � � >8� � � � �� � � r�;:� � � � � 5� � q(� � e� B� � � � � � � � � � L� � � � V\� � � � � =>?78� � � � � ?9� ��� � � E� �f� � � � � � � � � � � � � � � � � � � � � � !"#$�%����� � )(&� @:'*+,-.gh/0123� 5]47^689 �:� � � � =;<>?@AABCiDE6`FGj����H�IPpQRS�VbWX`@ abhnY���W�Z���vw��][���^� ����A �z��d���i��_���c�[vo������������ ��+�&��������������cd��������������U����������������������������k ��� ��� ��
T
��p
�
fgeyGB;EQXs !"#$%�&� '()*+,-./0123456>?@A� �BnCD�NEGFHIJK LmlMNOPQ � SuVTUWR� XYZ[���\9]^_`abcd� efg�6aB hijk��lmn24o ����C'~]p�lqr3421stuv�wxyJ�z{�|MK~}i�� �A���O��MtN�C �������L@jk���CU�����������������������������������������������[\���������)�����{H�D<F������S����*����<��Z��������R���������
��bxOautsv~t{z�yx|}7����
89:;<=o\wfhe��g��������
!"#$%&'()*+,-./005������������������������������{w�=)?ACEGIKMO�QSUWY[]_a�cegikmoqsuwy{}��������������1��9���������������������������!�������������������� �������
� !#%'�)+-/��135�79�;=?A�
CEGIKMOQ�SU�WY[]_acegikmo�qsuwy{}����#�����������}���������'�������������������������������5����������������������# �
���� !�#%�')+-/1357�9+�;�� =?ACE��G �IKMOQS��U�WY[]_a���ce�gikmoqsuwy{}�����������������������/�����������������������;����7��������������� ����3�
�-� !y��%� AlpcAdjustCompletionListConcurrencyCount AlpcFreeCompletionListMessage AlpcGetCompletionListLastMessageInformation AlpcGetCompletionListMessageAttributes AlpcGetHeaderSize AlpcGetMessageAttribute AlpcGetMessageFromCompletionList AlpcGetOutstandingCompletionListMessageCount AlpcInitializeMessageAttribute AlpcMaxAllowedMessageLength AlpcRegisterCompletionList AlpcRegisterCompletionListWorkerThread AlpcRundownCompletionList AlpcUnregisterCompletionList AlpcUnregisterCompletionListWorkerThread CsrAllocateCaptureBuffer CsrAllocateMessagePointer CsrCaptureMessageBuffer CsrCaptureMessageMultiUnicodeStringsInPlace CsrCaptureMessageString CsrCaptureTimeout CsrClientCallServer CsrClientConnectToServer CsrFreeCaptureBuffer CsrGetProcessId CsrIdentifyAlertableThread CsrSetPriorityClass CsrVerifyRegion DbgBreakPoint DbgPrint DbgPrintEx DbgPrintReturnControlC DbgPrompt DbgQueryDebugFilterState DbgSetDebugFilterState DbgUiConnectToDbg DbgUiContinue DbgUiConvertStateChangeStructure DbgUiConvertStateChangeStructureEx DbgUiDebugActiveProcess DbgUiGetThreadDebugObject DbgUiIssueRemoteBreakin DbgUiRemoteBreakin DbgUiSetThreadDebugObject DbgUiStopDebugging DbgUiWaitStateChange DbgUserBreakPoint EtwCheckCoverage EtwCreateTraceInstanceId EtwDeliverDataBlock EtwEnumerateProcessRegGuids EtwEventActivityIdControl EtwEventEnabled EtwEventProviderEnabled EtwEventRegister EtwEventSetInformation EtwEventUnregister EtwEventWrite EtwEventWriteEndScenario EtwEventWriteEx EtwEventWriteFull EtwEventWriteNoRegistration EtwEventWriteStartScenario EtwEventWriteString EtwEventWriteTransfer EtwGetTraceEnableFlags EtwGetTraceEnableLevel EtwGetTraceLoggerHandle EtwLogTraceEvent EtwNotificationRegister EtwNotificationUnregister EtwProcessPrivateLoggerRequest EtwRegisterSecurityProvider EtwRegisterTraceGuidsA EtwRegisterTraceGuidsW EtwReplyNotification EtwSendNotification EtwTraceEventInstance EtwTraceMessage EtwTraceMessageVa EtwUnregisterTraceGuids EtwWriteUMSecurityEvent EtwpCreateEtwThread EtwpGetCpuSpeed EvtIntReportAuthzEventAndSourceAsync EvtIntReportEventAndSourceAsync KiUserInvertedFunctionTable LdrAccessResource LdrAddDllDirectory LdrAddLoadAsDataTable LdrAddRefDll LdrAppxHandleIntegrityFailure LdrCallEnclave LdrCreateEnclave LdrDeleteEnclave LdrDisableThreadCalloutsForDll LdrEnumResources LdrEnumerateLoadedModules LdrFastFailInLoaderCallout LdrFindEntryForAddress LdrFindResourceDirectory_U LdrFindResourceEx_U LdrFindResource_U LdrFlushAlternateResourceModules LdrGetDllDirectory LdrGetDllFullName LdrGetDllHandle LdrGetDllHandleByMapping LdrGetDllHandleByName LdrGetDllHandleEx LdrGetDllPath LdrGetFileNameFromLoadAsDataTable LdrGetProcedureAddress LdrGetProcedureAddressEx LdrGetProcedureAddressForCaller LdrInitShimEngineDynamic LdrInitializeEnclave LdrIsModuleSxsRedirected LdrLoadAlternateResourceModule LdrLoadAlternateResourceModuleEx LdrLoadDll LdrLoadEnclaveModule LdrLockLoaderLock LdrOpenImageFileOptionsKey LdrProcessRelocationBlock LdrProcessRelocationBlockEx LdrQueryImageFileExecutionOptions LdrQueryImageFileExecutionOptionsEx LdrQueryImageFileKeyOption LdrQueryModuleServiceTags LdrQueryOptionalDelayLoadedAPI LdrQueryProcessModuleInformation LdrRemoveDllDirectory LdrRemoveLoadAsDataTable LdrResFindResource LdrResFindResourceDirectory LdrResRelease LdrResSearchResource LdrResolveDelayLoadedAPI LdrResolveDelayLoadsFromDll LdrSetAppCompatDllRedirectionCallback LdrSetDefaultDllDirectories LdrSetDllDirectory LdrSetDllManifestProber LdrSetMUICacheType LdrShutdownProcess LdrShutdownThread LdrUnloadAlternateResourceModule LdrUnloadAlternateResourceModuleEx LdrUnloadDll LdrUnlockLoaderLock LdrUpdatePackageSearchPath LdrVerifyImageMatchesChecksum LdrVerifyImageMatchesChecksumEx LdrpResGetMappingSize LdrpResGetResourceDirectory NlsAnsiCodePage NlsMbCodePageTag NlsMbOemCodePageTag NtAcceptConnectPort NtAccessCheck NtAccessCheckAndAuditAlarm NtAccessCheckByType NtAccessCheckByTypeAndAuditAlarm NtAccessCheckByTypeResultList NtAccessCheckByTypeResultListAndAuditAlarm NtAccessCheckByTypeResultListAndAuditAlarmByHandle NtAcquireCrossVmMutant NtAcquireProcessActivityReference NtAddAtom NtAddAtomEx NtAddBootEntry NtAddDriverEntry NtAdjustGroupsToken NtAdjustPrivilegesToken NtAdjustTokenClaimsAndDeviceGroups NtAlertResumeThread NtAlertThread NtAlertThreadByThreadId NtAllocateLocallyUniqueId NtAllocateReserveObject NtAllocateUserPhysicalPages NtAllocateUserPhysicalPagesEx NtAllocateUuids NtAllocateVirtualMemory NtAllocateVirtualMemoryEx NtAlpcAcceptConnectPort NtAlpcCancelMessage NtAlpcConnectPort NtAlpcConnectPortEx NtAlpcCreatePort NtAlpcCreatePortSection NtAlpcCreateResourceReserve NtAlpcCreateSectionView NtAlpcCreateSecurityContext NtAlpcDeletePortSection NtAlpcDeleteResourceReserve NtAlpcDeleteSectionView NtAlpcDeleteSecurityContext NtAlpcDisconnectPort NtAlpcImpersonateClientContainerOfPort NtAlpcImpersonateClientOfPort NtAlpcOpenSenderProcess NtAlpcOpenSenderThread NtAlpcQueryInformation NtAlpcQueryInformationMessage NtAlpcRevokeSecurityContext NtAlpcSendWaitReceivePort NtAlpcSetInformation NtApphelpCacheControl NtAreMappedFilesTheSame NtAssignProcessToJobObject NtAssociateWaitCompletionPacket NtCallEnclave NtCallbackReturn NtCancelIoFile NtCancelIoFileEx NtCancelSynchronousIoFile NtCancelTimer NtCancelTimer2 NtCancelWaitCompletionPacket NtClearEvent NtClose NtCloseObjectAuditAlarm NtCommitComplete NtCommitEnlistment NtCommitRegistryTransaction NtCommitTransaction NtCompactKeys NtCompareObjects NtCompareSigningLevels NtCompareTokens NtCompleteConnectPort NtCompressKey NtConnectPort NtContinue NtContinueEx NtConvertBetweenAuxiliaryCounterAndPerformanceCounter NtCreateCrossVmEvent NtCreateCrossVmMutant NtCreateDebugObject NtCreateDirectoryObject NtCreateDirectoryObjectEx NtCreateEnclave NtCreateEnlistment NtCreateEvent NtCreateEventPair NtCreateFile NtCreateIRTimer NtCreateIoCompletion NtCreateJobObject NtCreateJobSet NtCreateKey NtCreateKeyTransacted NtCreateKeyedEvent NtCreateLowBoxToken NtCreateMailslotFile NtCreateMutant NtCreateNamedPipeFile NtCreatePagingFile NtCreatePartition NtCreatePort NtCreatePrivateNamespace NtCreateProcess NtCreateProcessEx NtCreateProfile NtCreateProfileEx NtCreateRegistryTransaction NtCreateResourceManager NtCreateSection NtCreateSectionEx NtCreateSemaphore NtCreateSymbolicLinkObject NtCreateThread NtCreateThreadEx NtCreateTimer NtCreateTimer2 NtCreateToken NtCreateTokenEx NtCreateTransaction NtCreateTransactionManager NtCreateUserProcess NtCreateWaitCompletionPacket NtCreateWaitablePort NtCreateWnfStateName NtCreateWorkerFactory NtDebugActiveProcess NtDebugContinue NtDelayExecution NtDeleteAtom NtDeleteBootEntry NtDeleteDriverEntry NtDeleteFile NtDeleteKey NtDeleteObjectAuditAlarm NtDeletePrivateNamespace NtDeleteValueKey NtDeleteWnfStateData NtDeleteWnfStateName NtDeviceIoControlFile NtDirectGraphicsCall NtDisableLastKnownGood NtDisplayString NtDrawText NtDuplicateObject NtDuplicateToken NtEnableLastKnownGood NtEnumerateBootEntries NtEnumerateDriverEntries NtEnumerateKey NtEnumerateSystemEnvironmentValuesEx NtEnumerateTransactionObject NtEnumerateValueKey NtExtendSection NtFilterBootOption NtFilterToken NtFilterTokenEx NtFindAtom NtFlushBuffersFile NtFlushBuffersFileEx NtFlushInstallUILanguage NtFlushInstructionCache NtFlushKey NtFlushProcessWriteBuffers NtFlushVirtualMemory NtFlushWriteBuffer NtFreeUserPhysicalPages NtFreeVirtualMemory NtFreezeRegistry NtFreezeTransactions NtFsControlFile NtGetCachedSigningLevel NtGetCompleteWnfStateSubscription NtGetContextThread NtGetCurrentProcessorNumber NtGetCurrentProcessorNumberEx NtGetDevicePowerState NtGetMUIRegistryInfo NtGetNextProcess NtGetNextThread NtGetNlsSectionPtr NtGetNotificationResourceManager NtGetTickCount NtGetWriteWatch NtImpersonateAnonymousToken NtImpersonateClientOfPort NtImpersonateThread NtInitializeEnclave NtInitializeNlsFiles NtInitializeRegistry NtInitiatePowerAction NtIsProcessInJob NtIsSystemResumeAutomatic NtIsUILanguageComitted NtListenPort NtLoadDriver NtLoadEnclaveData NtLoadKey NtLoadKey2 NtLoadKey3 NtLoadKeyEx NtLockFile NtLockProductActivationKeys NtLockRegistryKey NtLockVirtualMemory NtMakePermanentObject NtMakeTemporaryObject NtManageHotPatch NtManagePartition NtMapCMFModule NtMapUserPhysicalPages NtMapUserPhysicalPagesScatter NtMapViewOfSection NtMapViewOfSectionEx NtModifyBootEntry NtModifyDriverEntry NtNotifyChangeDirectoryFile NtNotifyChangeDirectoryFileEx NtNotifyChangeKey NtNotifyChangeMultipleKeys NtNotifyChangeSession NtOpenDirectoryObject NtOpenEnlistment NtOpenEvent NtOpenEventPair NtOpenFile NtOpenIoCompletion NtOpenJobObject NtOpenKey NtOpenKeyEx NtOpenKeyTransacted NtOpenKeyTransactedEx NtOpenKeyedEvent NtOpenMutant NtOpenObjectAuditAlarm NtOpenPartition NtOpenPrivateNamespace NtOpenProcess NtOpenProcessToken NtOpenProcessTokenEx NtOpenRegistryTransaction NtOpenResourceManager NtOpenSection NtOpenSemaphore NtOpenSession NtOpenSymbolicLinkObject NtOpenThread NtOpenThreadToken NtOpenThreadTokenEx NtOpenTimer NtOpenTransaction NtOpenTransactionManager NtPlugPlayControl NtPowerInformation NtPrePrepareComplete NtPrePrepareEnlistment NtPrepareComplete NtPrepareEnlistment NtPrivilegeCheck NtPrivilegeObjectAuditAlarm NtPrivilegedServiceAuditAlarm NtPropagationComplete NtPropagationFailed NtProtectVirtualMemory NtPssCaptureVaSpaceBulk NtPulseEvent NtQueryAttributesFile NtQueryAuxiliaryCounterFrequency NtQueryBootEntryOrder NtQueryBootOptions NtQueryDebugFilterState NtQueryDefaultLocale NtQueryDefaultUILanguage NtQueryDirectoryFile NtQueryDirectoryFileEx NtQueryDirectoryObject NtQueryDriverEntryOrder NtQueryEaFile NtQueryEvent NtQueryFullAttributesFile NtQueryInformationAtom NtQueryInformationByName NtQueryInformationEnlistment NtQueryInformationFile NtQueryInformationJobObject NtQueryInformationPort NtQueryInformationProcess NtQueryInformationResourceManager NtQueryInformationThread NtQueryInformationToken NtQueryInformationTransaction NtQueryInformationTransactionManager NtQueryInformationWorkerFactory NtQueryInstallUILanguage NtQueryIntervalProfile NtQueryIoCompletion NtQueryKey NtQueryLicenseValue NtQueryMultipleValueKey NtQueryMutant NtQueryObject NtQueryOpenSubKeys NtQueryOpenSubKeysEx NtQueryPerformanceCounter NtQueryPortInformationProcess NtQueryQuotaInformationFile NtQuerySection NtQuerySecurityAttributesToken NtQuerySecurityObject NtQuerySecurityPolicy NtQuerySemaphore NtQuerySymbolicLinkObject NtQuerySystemEnvironmentValue NtQuerySystemEnvironmentValueEx NtQuerySystemInformation NtQuerySystemInformationEx NtQuerySystemTime NtQueryTimer NtQueryTimerResolution NtQueryValueKey NtQueryVirtualMemory NtQueryVolumeInformationFile NtQueryWnfStateData NtQueryWnfStateNameInformation NtQueueApcThread NtQueueApcThreadEx NtRaiseException NtRaiseHardError NtReadFile NtReadFileScatter NtReadOnlyEnlistment NtReadRequestData NtReadVirtualMemory NtRecoverEnlistment NtRecoverResourceManager NtRecoverTransactionManager NtRegisterProtocolAddressInformation NtRegisterThreadTerminatePort NtReleaseKeyedEvent NtReleaseMutant NtReleaseSemaphore NtReleaseWorkerFactoryWorker NtRemoveIoCompletion NtRemoveIoCompletionEx NtRemoveProcessDebug NtRenameKey NtRenameTransactionManager NtReplaceKey NtReplacePartitionUnit NtReplyPort NtReplyWaitReceivePort NtReplyWaitReceivePortEx NtReplyWaitReplyPort NtRequestPort NtRequestWaitReplyPort NtResetEvent NtResetWriteWatch NtRestoreKey NtResumeProcess NtResumeThread NtRevertContainerImpersonation NtRollbackComplete NtRollbackEnlistment NtRollbackRegistryTransaction NtRollbackTransaction NtRollforwardTransactionManager NtSaveKey NtSaveKeyEx NtSaveMergedKeys NtSecureConnectPort NtSerializeBoot NtSetBootEntryOrder NtSetBootOptions NtSetCachedSigningLevel NtSetCachedSigningLevel2 NtSetContextThread NtSetDebugFilterState NtSetDefaultHardErrorPort NtSetDefaultLocale NtSetDefaultUILanguage NtSetDriverEntryOrder NtSetEaFile NtSetEvent NtSetEventBoostPriority NtSetHighEventPair NtSetHighWaitLowEventPair NtSetIRTimer NtSetInformationDebugObject NtSetInformationEnlistment NtSetInformationFile NtSetInformationJobObject NtSetInformationKey NtSetInformationObject NtSetInformationProcess NtSetInformationResourceManager NtSetInformationSymbolicLink NtSetInformationThread NtSetInformationToken NtSetInformationTransaction NtSetInformationTransactionManager NtSetInformationVirtualMemory NtSetInformationWorkerFactory NtSetIntervalProfile NtSetIoCompletion NtSetIoCompletionEx NtSetLdtEntries NtSetLowEventPair NtSetLowWaitHighEventPair NtSetQuotaInformationFile NtSetSecurityObject NtSetSystemEnvironmentValue NtSetSystemEnvironmentValueEx NtSetSystemInformation NtSetSystemPowerState NtSetSystemTime NtSetThreadExecutionState NtSetTimer NtSetTimer2 NtSetTimerEx NtSetTimerResolution NtSetUuidSeed NtSetValueKey NtSetVolumeInformationFile NtSetWnfProcessNotificationEvent NtShutdownSystem NtShutdownWorkerFactory NtSignalAndWaitForSingleObject NtSinglePhaseReject NtStartProfile NtStopProfile NtSubscribeWnfStateChange NtSuspendProcess NtSuspendThread NtSystemDebugControl NtTerminateEnclave NtTerminateJobObject NtTerminateProcess NtTerminateThread NtTestAlert NtThawRegistry NtThawTransactions NtTraceControl NtTraceEvent NtTranslateFilePath NtUmsThreadYield NtUnloadDriver NtUnloadKey NtUnloadKey2 NtUnloadKeyEx NtUnlockFile NtUnlockVirtualMemory NtUnmapViewOfSection NtUnmapViewOfSectionEx NtUnsubscribeWnfStateChange NtUpdateWnfStateData NtVdmControl NtWaitForAlertByThreadId NtWaitForDebugEvent NtWaitForKeyedEvent NtWaitForMultipleObjects NtWaitForMultipleObjects32 NtWaitForSingleObject NtWaitForWorkViaWorkerFactory NtWaitHighEventPair NtWaitLowEventPair NtWorkerFactoryWorkerReady NtWriteFile NtWriteFileGather NtWriteRequestData NtWriteVirtualMemory NtYieldExecution PfxFindPrefix PfxInitialize PfxInsertPrefix PfxRemovePrefix PssNtCaptureSnapshot PssNtDuplicateSnapshot PssNtFreeRemoteSnapshot PssNtFreeSnapshot PssNtFreeWalkMarker PssNtQuerySnapshot PssNtValidateDescriptor PssNtWalkSnapshot ReadTimeStampCounter RtlAbortRXact RtlAbsoluteToSelfRelativeSD RtlAcquirePebLock RtlAcquirePrivilege RtlAcquireReleaseSRWLockExclusive RtlAcquireResourceExclusive RtlAcquireResourceShared RtlAcquireSRWLockExclusive RtlAcquireSRWLockShared RtlActivateActivationContext RtlActivateActivationContextEx RtlActivateActivationContextUnsafeFast RtlAddAccessAllowedAce RtlAddAccessAllowedAceEx RtlAddAccessAllowedObjectAce RtlAddAccessDeniedAce RtlAddAccessDeniedAceEx RtlAddAccessDeniedObjectAce RtlAddAccessFilterAce RtlAddAce RtlAddActionToRXact RtlAddAtomToAtomTable RtlAddAttributeActionToRXact RtlAddAuditAccessAce RtlAddAuditAccessAceEx RtlAddAuditAccessObjectAce RtlAddFunctionTable RtlAddGrowableFunctionTable RtlAddIntegrityLabelToBoundaryDescriptor RtlAddMandatoryAce RtlAddProcessTrustLabelAce RtlAddRefActivationContext RtlAddResourceAttributeAce RtlAddSIDToBoundaryDescriptor RtlAddScopedPolicyIDAce RtlAddVectoredContinueHandler RtlAddVectoredExceptionHandler RtlAddressInSectionTable RtlAdjustPrivilege RtlAllocateActivationContextStack RtlAllocateAndInitializeSid RtlAllocateAndInitializeSidEx RtlAllocateHandle RtlAllocateHeap RtlAllocateMemoryBlockLookaside RtlAllocateMemoryZone RtlAllocateWnfSerializationGroup RtlAnsiCharToUnicodeChar RtlAnsiStringToUnicodeSize RtlAnsiStringToUnicodeString RtlAppendAsciizToString RtlAppendPathElement RtlAppendStringToString RtlAppendUnicodeStringToString RtlAppendUnicodeToString RtlApplicationVerifierStop RtlApplyRXact RtlApplyRXactNoFlush RtlAreAllAccessesGranted RtlAreAnyAccessesGranted RtlAreBitsClear RtlAreBitsSet RtlAssert RtlAvlInsertNodeEx RtlAvlRemoveNode RtlCancelTimer RtlCanonicalizeDomainName RtlCapabilityCheck RtlCapabilityCheckForSingleSessionSku RtlCaptureContext RtlCaptureStackBackTrace RtlCharToInteger RtlCheckBootStatusIntegrity RtlCheckForOrphanedCriticalSections RtlCheckPortableOperatingSystem RtlCheckRegistryKey RtlCheckSandboxedToken RtlCheckSystemBootStatusIntegrity RtlCheckTokenCapability RtlCheckTokenMembership RtlCheckTokenMembershipEx RtlCleanUpTEBLangLists RtlClearAllBits RtlClearBit RtlClearBits RtlClearThreadWorkOnBehalfTicket RtlCloneUserProcess RtlCmDecodeMemIoResource RtlCmEncodeMemIoResource RtlCommitDebugInfo RtlCompactHeap RtlCompareAltitudes RtlCompareMemory RtlCompareMemoryUlong RtlCompareString RtlCompareUnicodeString RtlCompareUnicodeStrings RtlCompressBuffer RtlComputeCrc32 RtlComputeImportTableHash RtlComputePrivatizedDllName_U RtlConnectToSm RtlConsoleMultiByteToUnicodeN RtlConstructCrossVmEventPath RtlConstructCrossVmMutexPath RtlContractHashTable RtlConvertDeviceFamilyInfoToString RtlConvertExclusiveToShared RtlConvertLCIDToString RtlConvertSRWLockExclusiveToShared RtlConvertSharedToExclusive RtlConvertSidToUnicodeString RtlConvertToAutoInheritSecurityObject RtlCopyBitMap RtlCopyContext RtlCopyExtendedContext RtlCopyLuid RtlCopyLuidAndAttributesArray RtlCopyMappedMemory RtlCopyMemory RtlCopySecurityDescriptor RtlCopySid RtlCopySidAndAttributesArray RtlCopyString RtlCopyUnicodeString RtlCrc32 RtlCrc64 RtlCreateAcl RtlCreateActivationContext RtlCreateAndSetSD RtlCreateAtomTable RtlCreateBootStatusDataFile RtlCreateBoundaryDescriptor RtlCreateEnvironment RtlCreateEnvironmentEx RtlCreateHashTable RtlCreateHashTableEx RtlCreateHeap RtlCreateMemoryBlockLookaside RtlCreateMemoryZone RtlCreateProcessParameters RtlCreateProcessParametersEx RtlCreateProcessParametersWithTemplate RtlCreateProcessReflection RtlCreateQueryDebugBuffer RtlCreateRegistryKey RtlCreateSecurityDescriptor RtlCreateServiceSid RtlCreateSystemVolumeInformationFolder RtlCreateTagHeap RtlCreateTimer RtlCreateTimerQueue RtlCreateUnicodeString RtlCreateUnicodeStringFromAsciiz RtlCreateUserProcess RtlCreateUserProcessEx RtlCreateUserSecurityObject RtlCreateUserStack RtlCreateUserThread RtlCreateVirtualAccountSid RtlCultureNameToLCID RtlCustomCPToUnicodeN RtlCutoverTimeToSystemTime RtlDeCommitDebugInfo RtlDeNormalizeProcessParams RtlDeactivateActivationContext RtlDeactivateActivationContextUnsafeFast RtlDebugPrintTimes RtlDecodePointer RtlDecodeRemotePointer RtlDecodeSystemPointer RtlDecompressBuffer RtlDecompressBufferEx RtlDecompressFragment RtlDefaultNpAcl RtlDelete RtlDeleteAce RtlDeleteAtomFromAtomTable RtlDeleteBoundaryDescriptor RtlDeleteCriticalSection RtlDeleteElementGenericTable RtlDeleteElementGenericTableAvl RtlDeleteElementGenericTableAvlEx RtlDeleteFunctionTable RtlDeleteGrowableFunctionTable RtlDeleteHashTable RtlDeleteNoSplay RtlDeleteRegistryValue RtlDeleteResource RtlDeleteSecurityObject RtlDeleteTimer RtlDeleteTimerQueue RtlDeleteTimerQueueEx RtlDeregisterSecureMemoryCacheCallback RtlDeregisterWait RtlDeregisterWaitEx RtlDeriveCapabilitySidsFromName RtlDestroyAtomTable RtlDestroyEnvironment RtlDestroyHandleTable RtlDestroyHeap RtlDestroyMemoryBlockLookaside RtlDestroyMemoryZone RtlDestroyProcessParameters RtlDestroyQueryDebugBuffer RtlDetectHeapLeaks RtlDetermineDosPathNameType_U RtlDisableThreadProfiling RtlDllShutdownInProgress RtlDnsHostNameToComputerName RtlDoesFileExists_U RtlDoesNameContainWildCards RtlDosApplyFileIsolationRedirection_Ustr RtlDosLongPathNameToNtPathName_U_WithStatus RtlDosLongPathNameToRelativeNtPathName_U_WithStatus RtlDosPathNameToNtPathName_U RtlDosPathNameToNtPathName_U_WithStatus RtlDosPathNameToRelativeNtPathName_U RtlDosPathNameToRelativeNtPathName_U_WithStatus RtlDosSearchPath_U RtlDosSearchPath_Ustr RtlDowncaseUnicodeChar RtlDowncaseUnicodeString RtlDumpResource RtlDuplicateUnicodeString RtlEmptyAtomTable RtlEnableEarlyCriticalSectionEventCreation RtlEnableThreadProfiling RtlEncodePointer RtlEncodeRemotePointer RtlEncodeSystemPointer RtlEndEnumerationHashTable RtlEndStrongEnumerationHashTable RtlEndWeakEnumerationHashTable RtlEnterCriticalSection RtlEnumProcessHeaps RtlEnumerateEntryHashTable RtlEnumerateGenericTable RtlEnumerateGenericTableAvl RtlEnumerateGenericTableLikeADirectory RtlEnumerateGenericTableWithoutSplaying RtlEnumerateGenericTableWithoutSplayingAvl RtlEqualComputerName RtlEqualDomainName RtlEqualLuid RtlEqualPrefixSid RtlEqualSid RtlEqualString RtlEqualUnicodeString RtlEqualWnfChangeStamps RtlEraseUnicodeString RtlEthernetAddressToStringA RtlEthernetAddressToStringW RtlEthernetStringToAddressA RtlEthernetStringToAddressW RtlExitUserProcess RtlExitUserThread RtlExpandEnvironmentStrings RtlExpandEnvironmentStrings_U RtlExpandHashTable RtlExtendCorrelationVector RtlExtendMemoryBlockLookaside RtlExtendMemoryZone RtlExtendedMagicDivide RtlExtractBitMap RtlFillMemory RtlFillMemoryUlong RtlFillMemoryUlonglong RtlFindAceByType RtlFindActivationContextSectionGuid RtlFindActivationContextSectionString RtlFindCharInUnicodeString RtlFindClearBits RtlFindClearBitsAndSet RtlFindClearRuns RtlFindClosestEncodableLength RtlFindExportedRoutineByName RtlFindLastBackwardRunClear RtlFindLeastSignificantBit RtlFindLongestRunClear RtlFindMessage RtlFindMostSignificantBit RtlFindNextForwardRunClear RtlFindSetBits RtlFindSetBitsAndClear RtlFindUnicodeSubstring RtlFirstEntrySList RtlFirstFreeAce RtlFlsAlloc RtlFlsFree RtlFlsGetValue RtlFlsSetValue RtlFlushSecureMemoryCache RtlFormatCurrentUserKeyPath RtlFormatMessage RtlFormatMessageEx RtlFreeActivationContextStack RtlFreeAnsiString RtlFreeHandle RtlFreeHeap RtlFreeMemoryBlockLookaside RtlFreeOemString RtlFreeSid RtlFreeThreadActivationContextStack RtlFreeUTF8String RtlFreeUnicodeString RtlFreeUserStack RtlGUIDFromString RtlGenerate8dot3Name RtlGetAce RtlGetActiveActivationContext RtlGetActiveConsoleId RtlGetAppContainerNamedObjectPath RtlGetAppContainerParent RtlGetAppContainerSidType RtlGetCallersAddress RtlGetCompressionWorkSpaceSize RtlGetConsoleSessionForegroundProcessId RtlGetControlSecurityDescriptor RtlGetCriticalSectionRecursionCount RtlGetCurrentDirectory_U RtlGetCurrentPeb RtlGetCurrentProcessorNumber RtlGetCurrentProcessorNumberEx RtlGetCurrentServiceSessionId RtlGetCurrentTransaction RtlGetDaclSecurityDescriptor RtlGetDeviceFamilyInfoEnum RtlGetElementGenericTable RtlGetElementGenericTableAvl RtlGetEnabledExtendedFeatures RtlGetExePath RtlGetExtendedContextLength RtlGetExtendedContextLength2 RtlGetExtendedFeaturesMask RtlGetFileMUIPath RtlGetFrame RtlGetFullPathName_U RtlGetFullPathName_UEx RtlGetFullPathName_UstrEx RtlGetFunctionTableListHead RtlGetGroupSecurityDescriptor RtlGetIntegerAtom RtlGetInterruptTimePrecise RtlGetLastNtStatus RtlGetLastWin32Error RtlGetLengthWithoutLastFullDosOrNtPathElement RtlGetLengthWithoutTrailingPathSeperators RtlGetLocaleFileMappingAddress RtlGetLongestNtPathLength RtlGetNativeSystemInformation RtlGetNextEntryHashTable RtlGetNtGlobalFlags RtlGetNtProductType RtlGetNtSystemRoot RtlGetNtVersionNumbers RtlGetOwnerSecurityDescriptor RtlGetPersistedStateLocation RtlGetProcessHeaps RtlGetProductInfo RtlGetReturnAddressHijackTarget RtlGetSaclSecurityDescriptor RtlGetSearchPath RtlGetSecurityDescriptorRMControl RtlGetSessionProperties RtlGetSetBootStatusData RtlGetSuiteMask RtlGetSystemBootStatus RtlGetSystemBootStatusEx RtlGetSystemPreferredUILanguages RtlGetSystemTimePrecise RtlGetThreadErrorMode RtlGetThreadLangIdByIndex RtlGetThreadPreferredUILanguages RtlGetThreadWorkOnBehalfTicket RtlGetTokenNamedObjectPath RtlGetUILanguageInfo RtlGetUnloadEventTrace RtlGetUnloadEventTraceEx RtlGetUserInfoHeap RtlGetUserPreferredUILanguages RtlGetVersion RtlGrowFunctionTable RtlGuardCheckLongJumpTarget RtlHashUnicodeString RtlHeapTrkInitialize RtlIdentifierAuthoritySid RtlIdnToAscii RtlIdnToNameprepUnicode RtlIdnToUnicode RtlImageDirectoryEntryToData RtlImageNtHeader RtlImageNtHeaderEx RtlImageRvaToSection RtlImageRvaToVa RtlImpersonateSelf RtlImpersonateSelfEx RtlIncrementCorrelationVector RtlInitAnsiString RtlInitAnsiStringEx RtlInitCodePageTable RtlInitEnumerationHashTable RtlInitNlsTables RtlInitString RtlInitStringEx RtlInitStrongEnumerationHashTable RtlInitUTF8String RtlInitUTF8StringEx RtlInitUnicodeString RtlInitUnicodeStringEx RtlInitWeakEnumerationHashTable RtlInitializeAtomPackage RtlInitializeBitMap RtlInitializeConditionVariable RtlInitializeCorrelationVector RtlInitializeCriticalSection RtlInitializeCriticalSectionAndSpinCount RtlInitializeCriticalSectionEx RtlInitializeExtendedContext RtlInitializeExtendedContext2 RtlInitializeGenericTable RtlInitializeGenericTableAvl RtlInitializeHandleTable RtlInitializeRXact RtlInitializeResource RtlInitializeSListHead RtlInitializeSRWLock RtlInitializeSid RtlInitializeSidEx RtlInsertElementGenericTable RtlInsertElementGenericTableAvl RtlInsertElementGenericTableFull RtlInsertElementGenericTableFullAvl RtlInsertEntryHashTable RtlInstallFunctionTableCallback RtlInt64ToUnicodeString RtlIntegerToChar RtlIntegerToUnicodeString RtlInterlockedClearBitRun RtlInterlockedFlushSList RtlInterlockedPopEntrySList RtlInterlockedPushEntrySList RtlInterlockedPushListSList RtlInterlockedPushListSListEx RtlInterlockedSetBitRun RtlIoDecodeMemIoResource RtlIoEncodeMemIoResource RtlIpv4AddressToStringA RtlIpv4AddressToStringExA RtlIpv4AddressToStringExW RtlIpv4AddressToStringW RtlIpv4StringToAddressA RtlIpv4StringToAddressExA RtlIpv4StringToAddressExW RtlIpv4StringToAddressW RtlIpv6AddressToStringA RtlIpv6AddressToStringExA RtlIpv6AddressToStringExW RtlIpv6AddressToStringW RtlIpv6StringToAddressA RtlIpv6StringToAddressExA RtlIpv6StringToAddressExW RtlIpv6StringToAddressW RtlIsActivationContextActive RtlIsCapabilitySid RtlIsCloudFilesPlaceholder RtlIsCriticalSectionLocked RtlIsCriticalSectionLockedByThread RtlIsCurrentProcess RtlIsCurrentThread RtlIsDosDeviceName_U RtlIsElevatedRid RtlIsGenericTableEmpty RtlIsGenericTableEmptyAvl RtlIsMultiSessionSku RtlIsMultiUsersInSessionSku RtlIsNameInExpression RtlIsNameInUnUpcasedExpression RtlIsNameLegalDOS8Dot3 RtlIsNonEmptyDirectoryReparsePointAllowed RtlIsNormalizedString RtlIsPackageSid RtlIsParentOfChildAppContainer RtlIsPartialPlaceholder RtlIsPartialPlaceholderFileHandle RtlIsPartialPlaceholderFileInfo RtlIsProcessorFeaturePresent RtlIsStateSeparationEnabled RtlIsTextUnicode RtlIsThreadWithinLoaderCallout RtlIsUntrustedObject RtlIsValidHandle RtlIsValidIndexHandle RtlIsValidLocaleName RtlIsValidProcessTrustLabelSid RtlIsZeroMemory RtlKnownExceptionFilter RtlLCIDToCultureName RtlLargeIntegerToChar RtlLcidToLocaleName RtlLeaveCriticalSection RtlLengthRequiredSid RtlLengthSecurityDescriptor RtlLengthSid RtlLocalTimeToSystemTime RtlLocaleNameToLcid RtlLocateExtendedFeature RtlLocateExtendedFeature2 RtlLocateLegacyContext RtlLockBootStatusData RtlLockCurrentThread RtlLockHeap RtlLockMemoryBlockLookaside RtlLockMemoryZone RtlLockModuleSection RtlLogStackBackTrace RtlLookupAtomInAtomTable RtlLookupElementGenericTable RtlLookupElementGenericTableAvl RtlLookupElementGenericTableFull RtlLookupElementGenericTableFullAvl RtlLookupEntryHashTable RtlLookupFirstMatchingElementGenericTableAvl RtlLookupFunctionEntry RtlLookupFunctionTable RtlMakeSelfRelativeSD RtlMapGenericMask RtlMapSecurityErrorToNtStatus RtlMoveMemory RtlMultiAppendUnicodeStringBuffer RtlMultiByteToUnicodeN RtlMultiByteToUnicodeSize RtlMultipleAllocateHeap RtlMultipleFreeHeap RtlNewInstanceSecurityObject RtlNewSecurityGrantedAccess RtlNewSecurityObject RtlNewSecurityObjectEx RtlNewSecurityObjectWithMultipleInheritance RtlNormalizeProcessParams RtlNormalizeSecurityDescriptor RtlNormalizeString RtlNotifyFeatureUsage RtlNtPathNameToDosPathName RtlNtStatusToDosError RtlNtStatusToDosErrorNoTeb RtlNumberGenericTableElements RtlNumberGenericTableElementsAvl RtlNumberOfClearBits RtlNumberOfClearBitsInRange RtlNumberOfSetBits RtlNumberOfSetBitsInRange RtlNumberOfSetBitsUlongPtr RtlOemStringToUnicodeSize RtlOemStringToUnicodeString RtlOemToUnicodeN RtlOpenCurrentUser RtlOsDeploymentState RtlOwnerAcesPresent RtlPcToFileHeader RtlPinAtomInAtomTable RtlPopFrame RtlPrefixString RtlPrefixUnicodeString RtlProcessFlsData RtlPublishWnfStateData RtlPushFrame RtlQueryActivationContextApplicationSettings RtlQueryAllFeatureConfigurations RtlQueryAtomInAtomTable RtlQueryDepthSList RtlQueryDynamicTimeZoneInformation RtlQueryElevationFlags RtlQueryEnvironmentVariable RtlQueryEnvironmentVariable_U RtlQueryFeatureConfiguration RtlQueryFeatureConfigurationChangeStamp RtlQueryFeatureUsageNotificationSubscriptions RtlQueryHeapInformation RtlQueryImageMitigationPolicy RtlQueryInformationAcl RtlQueryInformationActivationContext RtlQueryInformationActiveActivationContext RtlQueryPackageClaims RtlQueryPackageIdentity RtlQueryPackageIdentityEx RtlQueryPerformanceCounter RtlQueryPerformanceFrequency RtlQueryProcessBackTraceInformation RtlQueryProcessDebugInformation RtlQueryProcessLockInformation RtlQueryProcessPlaceholderCompatibilityMode RtlQueryProtectedPolicy RtlQueryRegistryValueWithFallback RtlQueryRegistryValues RtlQueryRegistryValuesEx RtlQuerySecurityObject RtlQueryThreadPlaceholderCompatibilityMode RtlQueryThreadProfiling RtlQueryTimeZoneInformation RtlQueryTokenHostIdAsUlong64 RtlQueryUnbiasedInterruptTime RtlQueryValidationRunlevel RtlQueryWnfMetaNotification RtlQueryWnfStateData RtlQueryWnfStateDataWithExplicitScope RtlQueueApcWow64Thread RtlQueueWorkItem RtlRaiseCustomSystemEventTrigger RtlRaiseException RtlRaiseStatus RtlRandom RtlRandomEx RtlRbInsertNodeEx RtlRbRemoveNode RtlReAllocateHeap RtlReadThreadProfilingData RtlRealPredecessor RtlRealSuccessor RtlRegisterFeatureConfigurationChangeNotification RtlRegisterForWnfMetaNotification RtlRegisterSecureMemoryCacheCallback RtlRegisterThreadWithCsrss RtlRegisterWait RtlReleaseActivationContext RtlReleasePath RtlReleasePebLock RtlReleasePrivilege RtlReleaseRelativeName RtlReleaseResource RtlReleaseSRWLockExclusive RtlReleaseSRWLockShared RtlRemoteCall RtlRemoveEntryHashTable RtlRemovePrivileges RtlRemoveVectoredContinueHandler RtlRemoveVectoredExceptionHandler RtlReplaceSidInSd RtlReplaceSystemDirectoryInPath RtlReportException RtlReportExceptionEx RtlReportSilentProcessExit RtlReportSqmEscalation RtlResetMemoryBlockLookaside RtlResetRtlTranslations RtlRestoreBootStatusDefaults RtlRestoreContext RtlRestoreLastWin32Error RtlRestoreSystemBootStatusDefaults RtlRestoreThreadPreferredUILanguages RtlRunDecodeUnicodeString RtlRunEncodeUnicodeString RtlRunOnceBeginInitialize RtlRunOnceComplete RtlRunOnceExecuteOnce RtlRunOnceInitialize RtlSecondsSince1970ToTime RtlSecondsSince1980ToTime RtlSelfRelativeToAbsoluteSD RtlSelfRelativeToAbsoluteSD2 RtlSendMsgToSm RtlSetAllBits RtlSetBit RtlSetBits RtlSetControlSecurityDescriptor RtlSetCriticalSectionSpinCount RtlSetCurrentDirectory_U RtlSetCurrentEnvironment RtlSetCurrentTransaction RtlSetDaclSecurityDescriptor RtlSetDynamicTimeZoneInformation RtlSetEnvironmentStrings RtlSetEnvironmentVar RtlSetEnvironmentVariable RtlSetExtendedFeaturesMask RtlSetFeatureConfigurations RtlSetGroupSecurityDescriptor RtlSetHeapInformation RtlSetImageMitigationPolicy RtlSetInformationAcl RtlSetIoCompletionCallback RtlSetLastWin32Error RtlSetLastWin32ErrorAndNtStatusFromNtStatus RtlSetOwnerSecurityDescriptor RtlSetPortableOperatingSystem RtlSetProcessDebugInformation RtlSetProcessIsCritical RtlSetProcessPlaceholderCompatibilityMode RtlSetProtectedPolicy RtlSetProxiedProcessId RtlSetSaclSecurityDescriptor RtlSetSearchPathMode RtlSetSecurityDescriptorRMControl RtlSetSecurityObject RtlSetSecurityObjectEx RtlSetSystemBootStatus RtlSetSystemBootStatusEx RtlSetThreadErrorMode RtlSetThreadIsCritical RtlSetThreadPlaceholderCompatibilityMode RtlSetThreadPoolStartFunc RtlSetThreadPreferredUILanguages RtlSetThreadPreferredUILanguages2 RtlSetThreadSubProcessTag RtlSetThreadWorkOnBehalfTicket RtlSetTimeZoneInformation RtlSetTimer RtlSetUnhandledExceptionFilter RtlSetUserFlagsHeap RtlSetUserValueHeap RtlSidDominates RtlSidDominatesForTrust RtlSidEqualLevel RtlSidHashInitialize RtlSidHashLookup RtlSidIsHigherLevel RtlSizeHeap RtlSleepConditionVariableCS RtlSleepConditionVariableSRW RtlSplay RtlStartRXact RtlStringFromGUID RtlStringFromGUIDEx RtlStronglyEnumerateEntryHashTable RtlSubAuthorityCountSid RtlSubAuthoritySid RtlSubscribeForFeatureUsageNotification RtlSubscribeWnfStateChangeNotification RtlSubtreePredecessor RtlSubtreeSuccessor RtlSwitchedVVI RtlSystemTimeToLocalTime RtlTestAndPublishWnfStateData RtlTestBit RtlTestProtectedAccess RtlTimeFieldsToTime RtlTimeToElapsedTimeFields RtlTimeToSecondsSince1970 RtlTimeToSecondsSince1980 RtlTimeToTimeFields RtlTraceDatabaseAdd RtlTraceDatabaseCreate RtlTraceDatabaseDestroy RtlTraceDatabaseEnumerate RtlTraceDatabaseFind RtlTraceDatabaseLock RtlTraceDatabaseUnlock RtlTraceDatabaseValidate RtlTryAcquirePebLock RtlTryAcquireSRWLockExclusive RtlTryAcquireSRWLockShared RtlTryConvertSRWLockSharedToExclusiveOrRelease RtlTryEnterCriticalSection RtlUTF8StringToUnicodeString RtlUTF8ToUnicodeN RtlUlongByteSwap RtlUlonglongByteSwap RtlUnhandledExceptionFilter RtlUnhandledExceptionFilter2 RtlUnicodeStringToAnsiSize RtlUnicodeStringToAnsiString RtlUnicodeStringToCountedOemString RtlUnicodeStringToInteger RtlUnicodeStringToOemSize RtlUnicodeStringToOemString RtlUnicodeStringToUTF8String RtlUnicodeToCustomCPN RtlUnicodeToMultiByteN RtlUnicodeToMultiByteSize RtlUnicodeToOemN RtlUnicodeToUTF8N RtlUniform RtlUnlockBootStatusData RtlUnlockCurrentThread RtlUnlockHeap RtlUnlockMemoryBlockLookaside RtlUnlockMemoryZone RtlUnlockModuleSection RtlUnregisterFeatureConfigurationChangeNotification RtlUnsubscribeFromFeatureUsageNotifications RtlUnsubscribeWnfNotificationWaitForCompletion RtlUnsubscribeWnfNotificationWithCompletionCallback RtlUnsubscribeWnfStateChangeNotification RtlUnwind RtlUnwindEx RtlUpcaseUnicodeChar RtlUpcaseUnicodeString RtlUpcaseUnicodeStringToCountedOemString RtlUpcaseUnicodeStringToOemString RtlUpcaseUnicodeToCustomCPN RtlUpcaseUnicodeToMultiByteN RtlUpcaseUnicodeToOemN RtlUpdateClonedCriticalSection RtlUpdateClonedSRWLock RtlUpdateTimer RtlUpperChar RtlUpperString RtlUshortByteSwap RtlValidAcl RtlValidProcessProtection RtlValidRelativeSecurityDescriptor RtlValidSecurityDescriptor RtlValidSid RtlValidateCorrelationVector RtlValidateHeap RtlValidateProcessHeaps RtlValidateUnicodeString RtlVerifyVersionInfo RtlVirtualUnwind RtlWaitForWnfMetaNotification RtlWaitOnAddress RtlWakeAddressAll RtlWakeAddressAllNoFence RtlWakeAddressSingle RtlWakeAddressSingleNoFence RtlWakeAllConditionVariable RtlWakeConditionVariable RtlWalkFrameChain RtlWalkHeap RtlWeaklyEnumerateEntryHashTable RtlWerpReportException RtlWnfCompareChangeStamp RtlWnfDllUnloadCallback RtlWow64CallFunction64 RtlWow64EnableFsRedirection RtlWow64EnableFsRedirectionEx RtlWow64GetCurrentMachine RtlWow64GetEquivalentMachineCHPE RtlWow64GetProcessMachines RtlWow64GetSharedInfoProcess RtlWow64IsWowGuestMachineSupported RtlWriteRegistryValue RtlZeroMemory RtlZombifyActivationContext RtlpApplyLengthFunction RtlpCheckDynamicTimeZoneInformation RtlpCleanupRegistryKeys RtlpConvertAbsoluteToRelativeSecurityAttribute RtlpConvertCultureNamesToLCIDs RtlpConvertLCIDsToCultureNames RtlpConvertRelativeToAbsoluteSecurityAttribute RtlpCreateProcessRegistryInfo RtlpEnsureBufferSize RtlpGetLCIDFromLangInfoNode RtlpGetNameFromLangInfoNode RtlpGetSystemDefaultUILanguage RtlpGetUserOrMachineUILanguage4NLS RtlpInitializeLangRegistryInfo RtlpIsQualifiedLanguage RtlpLoadMachineUIByPolicy RtlpLoadUserUIByPolicy RtlpMergeSecurityAttributeInformation RtlpMuiFreeLangRegistryInfo RtlpMuiRegCreateRegistryInfo RtlpMuiRegFreeRegistryInfo RtlpMuiRegLoadRegistryInfo RtlpNotOwnerCriticalSection RtlpNtCreateKey RtlpNtEnumerateSubKey RtlpNtMakeTemporaryKey RtlpNtOpenKey RtlpNtQueryValueKey RtlpNtSetValueKey RtlpQueryDefaultUILanguage RtlpQueryProcessDebugInformationRemote RtlpRefreshCachedUILanguage RtlpSetInstallLanguage RtlpSetPreferredUILanguages RtlpSetUserPreferredUILanguages RtlpTimeFieldsToTime RtlpTimeToTimeFields RtlpUnWaitCriticalSection RtlpVerifyAndCommitUILanguageSettings RtlpWaitForCriticalSection RtlxAnsiStringToUnicodeSize RtlxOemStringToUnicodeSize RtlxUnicodeStringToAnsiSize RtlxUnicodeStringToOemSize ShipAssert ShipAssertGetBufferInfo ShipAssertMsgA ShipAssertMsgW TpAllocAlpcCompletion TpAllocCleanupGroup TpAllocIoCompletion TpAllocJobNotification TpAllocPool TpAllocTimer TpAllocWait TpAllocWork TpCallbackDetectedUnrecoverableError TpCallbackLeaveCriticalSectionOnCompletion TpCallbackMayRunLong TpCallbackReleaseMutexOnCompletion TpCallbackReleaseSemaphoreOnCompletion TpCallbackSetEventOnCompletion TpCallbackUnloadDllOnCompletion TpCancelAsyncIoOperation TpCaptureCaller TpCheckTerminateWorker TpDisassociateCallback TpIsTimerSet TpPostWork TpQueryPoolStackInformation TpReleaseAlpcCompletion TpReleaseCleanupGroup TpReleaseCleanupGroupMembers TpReleaseIoCompletion TpReleaseJobNotification TpReleasePool TpReleaseTimer TpReleaseWait TpReleaseWork TpSetPoolMaxThreads TpSetPoolMaxThreadsSoftLimit TpSetPoolMinThreads TpSetPoolStackInformation TpSetPoolWorkerThreadIdleTimeout TpSetTimer TpSetTimerEx TpSetWait TpSetWaitEx TpSimpleTryPost TpStartAsyncIoOperation TpTrimPools TpWaitForAlpcCompletion TpWaitForIoCompletion TpWaitForJobNotification TpWaitForTimer TpWaitForWait TpWaitForWork VerSetConditionMask WerReportExceptionWorker WerReportSQMEvent WinSqmAddToAverageDWORD WinSqmAddToStream WinSqmAddToStreamEx WinSqmCheckEscalationAddToStreamEx WinSqmCheckEscalationSetDWORD WinSqmCheckEscalationSetDWORD64 WinSqmCheckEscalationSetString WinSqmCommonDatapointDelete WinSqmCommonDatapointSetDWORD WinSqmCommonDatapointSetDWORD64 WinSqmCommonDatapointSetStreamEx WinSqmCommonDatapointSetString WinSqmEndSession WinSqmEventEnabled WinSqmEventWrite WinSqmGetEscalationRuleStatus WinSqmGetInstrumentationProperty WinSqmIncrementDWORD WinSqmIsOptedIn WinSqmIsOptedInEx WinSqmIsSessionDisabled WinSqmSetDWORD WinSqmSetDWORD64 WinSqmSetEscalationInfo WinSqmSetIfMaxDWORD WinSqmSetIfMinDWORD WinSqmSetString WinSqmStartSession WinSqmStartSessionForPartner ZwAcceptConnectPort ZwAccessCheck ZwAccessCheckAndAuditAlarm ZwAccessCheckByType ZwAccessCheckByTypeAndAuditAlarm ZwAccessCheckByTypeResultList ZwAccessCheckByTypeResultListAndAuditAlarm ZwAccessCheckByTypeResultListAndAuditAlarmByHandle ZwAcquireCrossVmMutant ZwAcquireProcessActivityReference ZwAddAtom ZwAddAtomEx ZwAddBootEntry ZwAddDriverEntry ZwAdjustGroupsToken ZwAdjustPrivilegesToken ZwAdjustTokenClaimsAndDeviceGroups ZwAlertResumeThread ZwAlertThread ZwAlertThreadByThreadId ZwAllocateLocallyUniqueId ZwAllocateReserveObject ZwAllocateUserPhysicalPages ZwAllocateUserPhysicalPagesEx ZwAllocateUuids ZwAllocateVirtualMemory ZwAllocateVirtualMemoryEx ZwAlpcAcceptConnectPort ZwAlpcCancelMessage ZwAlpcConnectPort ZwAlpcConnectPortEx ZwAlpcCreatePort ZwAlpcCreatePortSection ZwAlpcCreateResourceReserve ZwAlpcCreateSectionView ZwAlpcCreateSecurityContext ZwAlpcDeletePortSection ZwAlpcDeleteResourceReserve ZwAlpcDeleteSectionView ZwAlpcDeleteSecurityContext ZwAlpcDisconnectPort ZwAlpcImpersonateClientContainerOfPort ZwAlpcImpersonateClientOfPort ZwAlpcOpenSenderProcess ZwAlpcOpenSenderThread ZwAlpcQueryInformation ZwAlpcQueryInformationMessage ZwAlpcRevokeSecurityContext ZwAlpcSendWaitReceivePort ZwAlpcSetInformation ZwApphelpCacheControl ZwAreMappedFilesTheSame ZwAssignProcessToJobObject ZwAssociateWaitCompletionPacket ZwCallEnclave ZwCallbackReturn ZwCancelIoFile ZwCancelIoFileEx ZwCancelSynchronousIoFile ZwCancelTimer ZwCancelTimer2 ZwCancelWaitCompletionPacket ZwClearEvent ZwClose ZwCloseObjectAuditAlarm ZwCommitComplete ZwCommitEnlistment ZwCommitRegistryTransaction ZwCommitTransaction ZwCompactKeys ZwCompareObjects ZwCompareSigningLevels ZwCompareTokens ZwCompleteConnectPort ZwCompressKey ZwConnectPort ZwContinue ZwContinueEx ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter ZwCreateCrossVmEvent ZwCreateCrossVmMutant ZwCreateDebugObject ZwCreateDirectoryObject ZwCreateDirectoryObjectEx ZwCreateEnclave ZwCreateEnlistment ZwCreateEvent ZwCreateEventPair ZwCreateFile ZwCreateIRTimer ZwCreateIoCompletion ZwCreateJobObject ZwCreateJobSet ZwCreateKey ZwCreateKeyTransacted ZwCreateKeyedEvent ZwCreateLowBoxToken ZwCreateMailslotFile ZwCreateMutant ZwCreateNamedPipeFile ZwCreatePagingFile ZwCreatePartition ZwCreatePort ZwCreatePrivateNamespace ZwCreateProcess ZwCreateProcessEx ZwCreateProfile ZwCreateProfileEx ZwCreateRegistryTransaction ZwCreateResourceManager ZwCreateSection ZwCreateSectionEx ZwCreateSemaphore ZwCreateSymbolicLinkObject ZwCreateThread ZwCreateThreadEx ZwCreateTimer ZwCreateTimer2 ZwCreateToken ZwCreateTokenEx ZwCreateTransaction ZwCreateTransactionManager ZwCreateUserProcess ZwCreateWaitCompletionPacket ZwCreateWaitablePort ZwCreateWnfStateName ZwCreateWorkerFactory ZwDebugActiveProcess ZwDebugContinue ZwDelayExecution ZwDeleteAtom ZwDeleteBootEntry ZwDeleteDriverEntry ZwDeleteFile ZwDeleteKey ZwDeleteObjectAuditAlarm ZwDeletePrivateNamespace ZwDeleteValueKey ZwDeleteWnfStateData ZwDeleteWnfStateName ZwDeviceIoControlFile ZwDirectGraphicsCall ZwDisableLastKnownGood ZwDisplayString ZwDrawText ZwDuplicateObject ZwDuplicateToken ZwEnableLastKnownGood ZwEnumerateBootEntries ZwEnumerateDriverEntries ZwEnumerateKey ZwEnumerateSystemEnvironmentValuesEx ZwEnumerateTransactionObject ZwEnumerateValueKey ZwExtendSection ZwFilterBootOption ZwFilterToken ZwFilterTokenEx ZwFindAtom ZwFlushBuffersFile ZwFlushBuffersFileEx ZwFlushInstallUILanguage ZwFlushInstructionCache ZwFlushKey ZwFlushProcessWriteBuffers ZwFlushVirtualMemory ZwFlushWriteBuffer ZwFreeUserPhysicalPages ZwFreeVirtualMemory ZwFreezeRegistry ZwFreezeTransactions ZwFsControlFile ZwGetCachedSigningLevel ZwGetCompleteWnfStateSubscription ZwGetContextThread ZwGetCurrentProcessorNumber ZwGetCurrentProcessorNumberEx ZwGetDevicePowerState ZwGetMUIRegistryInfo ZwGetNextProcess ZwGetNextThread ZwGetNlsSectionPtr ZwGetNotificationResourceManager ZwGetWriteWatch ZwImpersonateAnonymousToken ZwImpersonateClientOfPort ZwImpersonateThread ZwInitializeEnclave ZwInitializeNlsFiles ZwInitializeRegistry ZwInitiatePowerAction ZwIsProcessInJob ZwIsSystemResumeAutomatic ZwIsUILanguageComitted ZwListenPort ZwLoadDriver ZwLoadEnclaveData ZwLoadKey ZwLoadKey2 ZwLoadKey3 ZwLoadKeyEx ZwLockFile ZwLockProductActivationKeys ZwLockRegistryKey ZwLockVirtualMemory ZwMakePermanentObject ZwMakeTemporaryObject ZwManageHotPatch ZwManagePartition ZwMapCMFModule ZwMapUserPhysicalPages ZwMapUserPhysicalPagesScatter ZwMapViewOfSection ZwMapViewOfSectionEx ZwModifyBootEntry ZwModifyDriverEntry ZwNotifyChangeDirectoryFile ZwNotifyChangeDirectoryFileEx ZwNotifyChangeKey ZwNotifyChangeMultipleKeys ZwNotifyChangeSession ZwOpenDirectoryObject ZwOpenEnlistment ZwOpenEvent ZwOpenEventPair ZwOpenFile ZwOpenIoCompletion ZwOpenJobObject ZwOpenKey ZwOpenKeyEx ZwOpenKeyTransacted ZwOpenKeyTransactedEx ZwOpenKeyedEvent ZwOpenMutant ZwOpenObjectAuditAlarm ZwOpenPartition ZwOpenPrivateNamespace ZwOpenProcess ZwOpenProcessToken ZwOpenProcessTokenEx ZwOpenRegistryTransaction ZwOpenResourceManager ZwOpenSection ZwOpenSemaphore ZwOpenSession ZwOpenSymbolicLinkObject ZwOpenThread ZwOpenThreadToken ZwOpenThreadTokenEx ZwOpenTimer ZwOpenTransaction ZwOpenTransactionManager ZwPlugPlayControl ZwPowerInformation ZwPrePrepareComplete ZwPrePrepareEnlistment ZwPrepareComplete ZwPrepareEnlistment ZwPrivilegeCheck ZwPrivilegeObjectAuditAlarm ZwPrivilegedServiceAuditAlarm ZwPropagationComplete ZwPropagationFailed ZwProtectVirtualMemory ZwPssCaptureVaSpaceBulk ZwPulseEvent ZwQueryAttributesFile ZwQueryAuxiliaryCounterFrequency ZwQueryBootEntryOrder ZwQueryBootOptions ZwQueryDebugFilterState ZwQueryDefaultLocale ZwQueryDefaultUILanguage ZwQueryDirectoryFile ZwQueryDirectoryFileEx ZwQueryDirectoryObject ZwQueryDriverEntryOrder ZwQueryEaFile ZwQueryEvent ZwQueryFullAttributesFile ZwQueryInformationAtom ZwQueryInformationByName ZwQueryInformationEnlistment ZwQueryInformationFile ZwQueryInformationJobObject ZwQueryInformationPort ZwQueryInformationProcess ZwQueryInformationResourceManager ZwQueryInformationThread ZwQueryInformationToken ZwQueryInformationTransaction ZwQueryInformationTransactionManager ZwQueryInformationWorkerFactory ZwQueryInstallUILanguage ZwQueryIntervalProfile ZwQueryIoCompletion ZwQueryKey ZwQueryLicenseValue ZwQueryMultipleValueKey ZwQueryMutant ZwQueryObject ZwQueryOpenSubKeys ZwQueryOpenSubKeysEx ZwQueryPerformanceCounter ZwQueryPortInformationProcess ZwQueryQuotaInformationFile ZwQuerySection ZwQuerySecurityAttributesToken ZwQuerySecurityObject ZwQuerySecurityPolicy ZwQuerySemaphore ZwQuerySymbolicLinkObject ZwQuerySystemEnvironmentValue ZwQuerySystemEnvironmentValueEx ZwQuerySystemInformation ZwQuerySystemInformationEx ZwQuerySystemTime ZwQueryTimer ZwQueryTimerResolution ZwQueryValueKey ZwQueryVirtualMemory ZwQueryVolumeInformationFile ZwQueryWnfStateData ZwQueryWnfStateNameInformation ZwQueueApcThread ZwQueueApcThreadEx ZwRaiseException ZwRaiseHardError ZwReadFile ZwReadFileScatter ZwReadOnlyEnlistment ZwReadRequestData ZwReadVirtualMemory ZwRecoverEnlistment ZwRecoverResourceManager ZwRecoverTransactionManager ZwRegisterProtocolAddressInformation ZwRegisterThreadTerminatePort ZwReleaseKeyedEvent ZwReleaseMutant ZwReleaseSemaphore ZwReleaseWorkerFactoryWorker ZwRemoveIoCompletion ZwRemoveIoCompletionEx ZwRemoveProcessDebug ZwRenameKey ZwRenameTransactionManager ZwReplaceKey ZwReplacePartitionUnit ZwReplyPort ZwReplyWaitReceivePort ZwReplyWaitReceivePortEx ZwReplyWaitReplyPort ZwRequestPort ZwRequestWaitReplyPort ZwResetEvent ZwResetWriteWatch ZwRestoreKey ZwResumeProcess ZwResumeThread ZwRevertContainerImpersonation ZwRollbackComplete ZwRollbackEnlistment ZwRollbackRegistryTransaction ZwRollbackTransaction ZwRollforwardTransactionManager ZwSaveKey ZwSaveKeyEx ZwSaveMergedKeys ZwSecureConnectPort ZwSerializeBoot ZwSetBootEntryOrder ZwSetBootOptions ZwSetCachedSigningLevel ZwSetCachedSigningLevel2 ZwSetContextThread ZwSetDebugFilterState ZwSetDefaultHardErrorPort ZwSetDefaultLocale ZwSetDefaultUILanguage ZwSetDriverEntryOrder ZwSetEaFile ZwSetEvent ZwSetEventBoostPriority ZwSetHighEventPair ZwSetHighWaitLowEventPair ZwSetIRTimer ZwSetInformationDebugObject ZwSetInformationEnlistment ZwSetInformationFile ZwSetInformationJobObject ZwSetInformationKey ZwSetInformationObject ZwSetInformationProcess ZwSetInformationResourceManager ZwSetInformationSymbolicLink ZwSetInformationThread ZwSetInformationToken ZwSetInformationTransaction ZwSetInformationTransactionManager ZwSetInformationVirtualMemory ZwSetInformationWorkerFactory ZwSetIntervalProfile ZwSetIoCompletion ZwSetIoCompletionEx ZwSetLdtEntries ZwSetLowEventPair ZwSetLowWaitHighEventPair ZwSetQuotaInformationFile ZwSetSecurityObject ZwSetSystemEnvironmentValue ZwSetSystemEnvironmentValueEx ZwSetSystemInformation ZwSetSystemPowerState ZwSetSystemTime ZwSetThreadExecutionState ZwSetTimer ZwSetTimer2 ZwSetTimerEx ZwSetTimerResolution ZwSetUuidSeed ZwSetValueKey ZwSetVolumeInformationFile ZwSetWnfProcessNotificationEvent ZwShutdownSystem ZwShutdownWorkerFactory ZwSignalAndWaitForSingleObject ZwSinglePhaseReject ZwStartProfile ZwStopProfile ZwSubscribeWnfStateChange ZwSuspendProcess ZwSuspendThread ZwSystemDebugControl ZwTerminateEnclave ZwTerminateJobObject ZwTerminateProcess ZwTerminateThread ZwTestAlert ZwThawRegistry ZwThawTransactions ZwTraceControl ZwTraceEvent ZwTranslateFilePath ZwUmsThreadYield ZwUnloadDriver ZwUnloadKey ZwUnloadKey2 ZwUnloadKeyEx ZwUnlockFile ZwUnlockVirtualMemory ZwUnmapViewOfSection ZwUnmapViewOfSectionEx ZwUnsubscribeWnfStateChange ZwUpdateWnfStateData ZwVdmControl ZwWaitForAlertByThreadId ZwWaitForDebugEvent ZwWaitForKeyedEvent ZwWaitForMultipleObjects ZwWaitForMultipleObjects32 ZwWaitForSingleObject ZwWaitForWorkViaWorkerFactory ZwWaitHighEventPair ZwWaitLowEventPair ZwWorkerFactoryWorkerReady ZwWriteFile ZwWriteFileGather ZwWriteRequestData ZwWriteVirtualMemory ZwYieldExecution __IMPORT_DESCRIPTOR_ntdll __NULL_IMPORT_DESCRIPTOR __imp_AlpcAdjustCompletionListConcurrencyCount __imp_AlpcFreeCompletionListMessage __imp_AlpcGetCompletionListLastMessageInformation __imp_AlpcGetCompletionListMessageAttributes __imp_AlpcGetHeaderSize __imp_AlpcGetMessageAttribute __imp_AlpcGetMessageFromCompletionList __imp_AlpcGetOutstandingCompletionListMessageCount __imp_AlpcInitializeMessageAttribute __imp_AlpcMaxAllowedMessageLength __imp_AlpcRegisterCompletionList __imp_AlpcRegisterCompletionListWorkerThread __imp_AlpcRundownCompletionList __imp_AlpcUnregisterCompletionList __imp_AlpcUnregisterCompletionListWorkerThread __imp_CsrAllocateCaptureBuffer __imp_CsrAllocateMessagePointer __imp_CsrCaptureMessageBuffer __imp_CsrCaptureMessageMultiUnicodeStringsInPlace __imp_CsrCaptureMessageString __imp_CsrCaptureTimeout __imp_CsrClientCallServer __imp_CsrClientConnectToServer __imp_CsrFreeCaptureBuffer __imp_CsrGetProcessId __imp_CsrIdentifyAlertableThread __imp_CsrSetPriorityClass __imp_CsrVerifyRegion __imp_DbgBreakPoint __imp_DbgPrint __imp_DbgPrintEx __imp_DbgPrintReturnControlC __imp_DbgPrompt __imp_DbgQueryDebugFilterState __imp_DbgSetDebugFilterState __imp_DbgUiConnectToDbg __imp_DbgUiContinue __imp_DbgUiConvertStateChangeStructure __imp_DbgUiConvertStateChangeStructureEx __imp_DbgUiDebugActiveProcess __imp_DbgUiGetThreadDebugObject __imp_DbgUiIssueRemoteBreakin __imp_DbgUiRemoteBreakin __imp_DbgUiSetThreadDebugObject __imp_DbgUiStopDebugging __imp_DbgUiWaitStateChange __imp_DbgUserBreakPoint __imp_EtwCheckCoverage __imp_EtwCreateTraceInstanceId __imp_EtwDeliverDataBlock __imp_EtwEnumerateProcessRegGuids __imp_EtwEventActivityIdControl __imp_EtwEventEnabled __imp_EtwEventProviderEnabled __imp_EtwEventRegister __imp_EtwEventSetInformation __imp_EtwEventUnregister __imp_EtwEventWrite __imp_EtwEventWriteEndScenario __imp_EtwEventWriteEx __imp_EtwEventWriteFull __imp_EtwEventWriteNoRegistration __imp_EtwEventWriteStartScenario __imp_EtwEventWriteString __imp_EtwEventWriteTransfer __imp_EtwGetTraceEnableFlags __imp_EtwGetTraceEnableLevel __imp_EtwGetTraceLoggerHandle __imp_EtwLogTraceEvent __imp_EtwNotificationRegister __imp_EtwNotificationUnregister __imp_EtwProcessPrivateLoggerRequest __imp_EtwRegisterSecurityProvider __imp_EtwRegisterTraceGuidsA __imp_EtwRegisterTraceGuidsW __imp_EtwReplyNotification __imp_EtwSendNotification __imp_EtwTraceEventInstance __imp_EtwTraceMessage __imp_EtwTraceMessageVa __imp_EtwUnregisterTraceGuids __imp_EtwWriteUMSecurityEvent __imp_EtwpCreateEtwThread __imp_EtwpGetCpuSpeed __imp_EvtIntReportAuthzEventAndSourceAsync __imp_EvtIntReportEventAndSourceAsync __imp_KiUserInvertedFunctionTable __imp_LdrAccessResource __imp_LdrAddDllDirectory __imp_LdrAddLoadAsDataTable __imp_LdrAddRefDll __imp_LdrAppxHandleIntegrityFailure __imp_LdrCallEnclave __imp_LdrCreateEnclave __imp_LdrDeleteEnclave __imp_LdrDisableThreadCalloutsForDll __imp_LdrEnumResources __imp_LdrEnumerateLoadedModules __imp_LdrFastFailInLoaderCallout __imp_LdrFindEntryForAddress __imp_LdrFindResourceDirectory_U __imp_LdrFindResourceEx_U __imp_LdrFindResource_U __imp_LdrFlushAlternateResourceModules __imp_LdrGetDllDirectory __imp_LdrGetDllFullName __imp_LdrGetDllHandle __imp_LdrGetDllHandleByMapping __imp_LdrGetDllHandleByName __imp_LdrGetDllHandleEx __imp_LdrGetDllPath __imp_LdrGetFileNameFromLoadAsDataTable __imp_LdrGetProcedureAddress __imp_LdrGetProcedureAddressEx __imp_LdrGetProcedureAddressForCaller __imp_LdrInitShimEngineDynamic __imp_LdrInitializeEnclave __imp_LdrIsModuleSxsRedirected __imp_LdrLoadAlternateResourceModule __imp_LdrLoadAlternateResourceModuleEx __imp_LdrLoadDll __imp_LdrLoadEnclaveModule __imp_LdrLockLoaderLock __imp_LdrOpenImageFileOptionsKey __imp_LdrProcessRelocationBlock __imp_LdrProcessRelocationBlockEx __imp_LdrQueryImageFileExecutionOptions __imp_LdrQueryImageFileExecutionOptionsEx __imp_LdrQueryImageFileKeyOption __imp_LdrQueryModuleServiceTags __imp_LdrQueryOptionalDelayLoadedAPI __imp_LdrQueryProcessModuleInformation __imp_LdrRemoveDllDirectory __imp_LdrRemoveLoadAsDataTable __imp_LdrResFindResource __imp_LdrResFindResourceDirectory __imp_LdrResRelease __imp_LdrResSearchResource __imp_LdrResolveDelayLoadedAPI __imp_LdrResolveDelayLoadsFromDll __imp_LdrSetAppCompatDllRedirectionCallback __imp_LdrSetDefaultDllDirectories __imp_LdrSetDllDirectory __imp_LdrSetDllManifestProber __imp_LdrSetMUICacheType __imp_LdrShutdownProcess __imp_LdrShutdownThread __imp_LdrSystemDllInitBlock __imp_LdrUnloadAlternateResourceModule __imp_LdrUnloadAlternateResourceModuleEx __imp_LdrUnloadDll __imp_LdrUnlockLoaderLock __imp_LdrUpdatePackageSearchPath __imp_LdrVerifyImageMatchesChecksum __imp_LdrVerifyImageMatchesChecksumEx __imp_LdrpResGetMappingSize __imp_LdrpResGetResourceDirectory __imp_NlsAnsiCodePage __imp_NlsMbCodePageTag __imp_NlsMbOemCodePageTag __imp_NtAcceptConnectPort __imp_NtAccessCheck __imp_NtAccessCheckAndAuditAlarm __imp_NtAccessCheckByType __imp_NtAccessCheckByTypeAndAuditAlarm __imp_NtAccessCheckByTypeResultList __imp_NtAccessCheckByTypeResultListAndAuditAlarm __imp_NtAccessCheckByTypeResultListAndAuditAlarmByHandle __imp_NtAcquireCrossVmMutant __imp_NtAcquireProcessActivityReference __imp_NtAddAtom __imp_NtAddAtomEx __imp_NtAddBootEntry __imp_NtAddDriverEntry __imp_NtAdjustGroupsToken __imp_NtAdjustPrivilegesToken __imp_NtAdjustTokenClaimsAndDeviceGroups __imp_NtAlertResumeThread __imp_NtAlertThread __imp_NtAlertThreadByThreadId __imp_NtAllocateLocallyUniqueId __imp_NtAllocateReserveObject __imp_NtAllocateUserPhysicalPages __imp_NtAllocateUserPhysicalPagesEx __imp_NtAllocateUuids __imp_NtAllocateVirtualMemory __imp_NtAllocateVirtualMemoryEx __imp_NtAlpcAcceptConnectPort __imp_NtAlpcCancelMessage __imp_NtAlpcConnectPort __imp_NtAlpcConnectPortEx __imp_NtAlpcCreatePort __imp_NtAlpcCreatePortSection __imp_NtAlpcCreateResourceReserve __imp_NtAlpcCreateSectionView __imp_NtAlpcCreateSecurityContext __imp_NtAlpcDeletePortSection __imp_NtAlpcDeleteResourceReserve __imp_NtAlpcDeleteSectionView __imp_NtAlpcDeleteSecurityContext __imp_NtAlpcDisconnectPort __imp_NtAlpcImpersonateClientContainerOfPort __imp_NtAlpcImpersonateClientOfPort __imp_NtAlpcOpenSenderProcess __imp_NtAlpcOpenSenderThread __imp_NtAlpcQueryInformation __imp_NtAlpcQueryInformationMessage __imp_NtAlpcRevokeSecurityContext __imp_NtAlpcSendWaitReceivePort __imp_NtAlpcSetInformation __imp_NtApphelpCacheControl __imp_NtAreMappedFilesTheSame __imp_NtAssignProcessToJobObject __imp_NtAssociateWaitCompletionPacket __imp_NtCallEnclave __imp_NtCallbackReturn __imp_NtCancelIoFile __imp_NtCancelIoFileEx __imp_NtCancelSynchronousIoFile __imp_NtCancelTimer __imp_NtCancelTimer2 __imp_NtCancelWaitCompletionPacket __imp_NtClearEvent __imp_NtClose __imp_NtCloseObjectAuditAlarm __imp_NtCommitComplete __imp_NtCommitEnlistment __imp_NtCommitRegistryTransaction __imp_NtCommitTransaction __imp_NtCompactKeys __imp_NtCompareObjects __imp_NtCompareSigningLevels __imp_NtCompareTokens __imp_NtCompleteConnectPort __imp_NtCompressKey __imp_NtConnectPort __imp_NtContinue __imp_NtContinueEx __imp_NtConvertBetweenAuxiliaryCounterAndPerformanceCounter __imp_NtCreateCrossVmEvent __imp_NtCreateCrossVmMutant __imp_NtCreateDebugObject __imp_NtCreateDirectoryObject __imp_NtCreateDirectoryObjectEx __imp_NtCreateEnclave __imp_NtCreateEnlistment __imp_NtCreateEvent __imp_NtCreateEventPair __imp_NtCreateFile __imp_NtCreateIRTimer __imp_NtCreateIoCompletion __imp_NtCreateJobObject __imp_NtCreateJobSet __imp_NtCreateKey __imp_NtCreateKeyTransacted __imp_NtCreateKeyedEvent __imp_NtCreateLowBoxToken __imp_NtCreateMailslotFile __imp_NtCreateMutant __imp_NtCreateNamedPipeFile __imp_NtCreatePagingFile __imp_NtCreatePartition __imp_NtCreatePort __imp_NtCreatePrivateNamespace __imp_NtCreateProcess __imp_NtCreateProcessEx __imp_NtCreateProfile __imp_NtCreateProfileEx __imp_NtCreateRegistryTransaction __imp_NtCreateResourceManager __imp_NtCreateSection __imp_NtCreateSectionEx __imp_NtCreateSemaphore __imp_NtCreateSymbolicLinkObject __imp_NtCreateThread __imp_NtCreateThreadEx __imp_NtCreateTimer __imp_NtCreateTimer2 __imp_NtCreateToken __imp_NtCreateTokenEx __imp_NtCreateTransaction __imp_NtCreateTransactionManager __imp_NtCreateUserProcess __imp_NtCreateWaitCompletionPacket __imp_NtCreateWaitablePort __imp_NtCreateWnfStateName __imp_NtCreateWorkerFactory __imp_NtDebugActiveProcess __imp_NtDebugContinue __imp_NtDelayExecution __imp_NtDeleteAtom __imp_NtDeleteBootEntry __imp_NtDeleteDriverEntry __imp_NtDeleteFile __imp_NtDeleteKey __imp_NtDeleteObjectAuditAlarm __imp_NtDeletePrivateNamespace __imp_NtDeleteValueKey __imp_NtDeleteWnfStateData __imp_NtDeleteWnfStateName __imp_NtDeviceIoControlFile __imp_NtDirectGraphicsCall __imp_NtDisableLastKnownGood __imp_NtDisplayString __imp_NtDrawText __imp_NtDuplicateObject __imp_NtDuplicateToken __imp_NtEnableLastKnownGood __imp_NtEnumerateBootEntries __imp_NtEnumerateDriverEntries __imp_NtEnumerateKey __imp_NtEnumerateSystemEnvironmentValuesEx __imp_NtEnumerateTransactionObject __imp_NtEnumerateValueKey __imp_NtExtendSection __imp_NtFilterBootOption __imp_NtFilterToken __imp_NtFilterTokenEx __imp_NtFindAtom __imp_NtFlushBuffersFile __imp_NtFlushBuffersFileEx __imp_NtFlushInstallUILanguage __imp_NtFlushInstructionCache __imp_NtFlushKey __imp_NtFlushProcessWriteBuffers __imp_NtFlushVirtualMemory __imp_NtFlushWriteBuffer __imp_NtFreeUserPhysicalPages __imp_NtFreeVirtualMemory __imp_NtFreezeRegistry __imp_NtFreezeTransactions __imp_NtFsControlFile __imp_NtGetCachedSigningLevel __imp_NtGetCompleteWnfStateSubscription __imp_NtGetContextThread __imp_NtGetCurrentProcessorNumber __imp_NtGetCurrentProcessorNumberEx __imp_NtGetDevicePowerState __imp_NtGetMUIRegistryInfo __imp_NtGetNextProcess __imp_NtGetNextThread __imp_NtGetNlsSectionPtr __imp_NtGetNotificationResourceManager __imp_NtGetTickCount __imp_NtGetWriteWatch __imp_NtImpersonateAnonymousToken __imp_NtImpersonateClientOfPort __imp_NtImpersonateThread __imp_NtInitializeEnclave __imp_NtInitializeNlsFiles __imp_NtInitializeRegistry __imp_NtInitiatePowerAction __imp_NtIsProcessInJob __imp_NtIsSystemResumeAutomatic __imp_NtIsUILanguageComitted __imp_NtListenPort __imp_NtLoadDriver __imp_NtLoadEnclaveData __imp_NtLoadKey __imp_NtLoadKey2 __imp_NtLoadKey3 __imp_NtLoadKeyEx __imp_NtLockFile __imp_NtLockProductActivationKeys __imp_NtLockRegistryKey __imp_NtLockVirtualMemory __imp_NtMakePermanentObject __imp_NtMakeTemporaryObject __imp_NtManageHotPatch __imp_NtManagePartition __imp_NtMapCMFModule __imp_NtMapUserPhysicalPages __imp_NtMapUserPhysicalPagesScatter __imp_NtMapViewOfSection __imp_NtMapViewOfSectionEx __imp_NtModifyBootEntry __imp_NtModifyDriverEntry __imp_NtNotifyChangeDirectoryFile __imp_NtNotifyChangeDirectoryFileEx __imp_NtNotifyChangeKey __imp_NtNotifyChangeMultipleKeys __imp_NtNotifyChangeSession __imp_NtOpenDirectoryObject __imp_NtOpenEnlistment __imp_NtOpenEvent __imp_NtOpenEventPair __imp_NtOpenFile __imp_NtOpenIoCompletion __imp_NtOpenJobObject __imp_NtOpenKey __imp_NtOpenKeyEx __imp_NtOpenKeyTransacted __imp_NtOpenKeyTransactedEx __imp_NtOpenKeyedEvent __imp_NtOpenMutant __imp_NtOpenObjectAuditAlarm __imp_NtOpenPartition __imp_NtOpenPrivateNamespace __imp_NtOpenProcess __imp_NtOpenProcessToken __imp_NtOpenProcessTokenEx __imp_NtOpenRegistryTransaction __imp_NtOpenResourceManager __imp_NtOpenSection __imp_NtOpenSemaphore __imp_NtOpenSession __imp_NtOpenSymbolicLinkObject __imp_NtOpenThread __imp_NtOpenThreadToken __imp_NtOpenThreadTokenEx __imp_NtOpenTimer __imp_NtOpenTransaction __imp_NtOpenTransactionManager __imp_NtPlugPlayControl __imp_NtPowerInformation __imp_NtPrePrepareComplete __imp_NtPrePrepareEnlistment __imp_NtPrepareComplete __imp_NtPrepareEnlistment __imp_NtPrivilegeCheck __imp_NtPrivilegeObjectAuditAlarm __imp_NtPrivilegedServiceAuditAlarm __imp_NtPropagationComplete __imp_NtPropagationFailed __imp_NtProtectVirtualMemory __imp_NtPssCaptureVaSpaceBulk __imp_NtPulseEvent __imp_NtQueryAttributesFile __imp_NtQueryAuxiliaryCounterFrequency __imp_NtQueryBootEntryOrder __imp_NtQueryBootOptions __imp_NtQueryDebugFilterState __imp_NtQueryDefaultLocale __imp_NtQueryDefaultUILanguage __imp_NtQueryDirectoryFile __imp_NtQueryDirectoryFileEx __imp_NtQueryDirectoryObject __imp_NtQueryDriverEntryOrder __imp_NtQueryEaFile __imp_NtQueryEvent __imp_NtQueryFullAttributesFile __imp_NtQueryInformationAtom __imp_NtQueryInformationByName __imp_NtQueryInformationEnlistment __imp_NtQueryInformationFile __imp_NtQueryInformationJobObject __imp_NtQueryInformationPort __imp_NtQueryInformationProcess __imp_NtQueryInformationResourceManager __imp_NtQueryInformationThread __imp_NtQueryInformationToken __imp_NtQueryInformationTransaction __imp_NtQueryInformationTransactionManager __imp_NtQueryInformationWorkerFactory __imp_NtQueryInstallUILanguage __imp_NtQueryIntervalProfile __imp_NtQueryIoCompletion __imp_NtQueryKey __imp_NtQueryLicenseValue __imp_NtQueryMultipleValueKey __imp_NtQueryMutant __imp_NtQueryObject __imp_NtQueryOpenSubKeys __imp_NtQueryOpenSubKeysEx __imp_NtQueryPerformanceCounter __imp_NtQueryPortInformationProcess __imp_NtQueryQuotaInformationFile __imp_NtQuerySection __imp_NtQuerySecurityAttributesToken __imp_NtQuerySecurityObject __imp_NtQuerySecurityPolicy __imp_NtQuerySemaphore __imp_NtQuerySymbolicLinkObject __imp_NtQuerySystemEnvironmentValue __imp_NtQuerySystemEnvironmentValueEx __imp_NtQuerySystemInformation __imp_NtQuerySystemInformationEx __imp_NtQuerySystemTime __imp_NtQueryTimer __imp_NtQueryTimerResolution __imp_NtQueryValueKey __imp_NtQueryVirtualMemory __imp_NtQueryVolumeInformationFile __imp_NtQueryWnfStateData __imp_NtQueryWnfStateNameInformation __imp_NtQueueApcThread __imp_NtQueueApcThreadEx __imp_NtRaiseException __imp_NtRaiseHardError __imp_NtReadFile __imp_NtReadFileScatter __imp_NtReadOnlyEnlistment __imp_NtReadRequestData __imp_NtReadVirtualMemory __imp_NtRecoverEnlistment __imp_NtRecoverResourceManager __imp_NtRecoverTransactionManager __imp_NtRegisterProtocolAddressInformation __imp_NtRegisterThreadTerminatePort __imp_NtReleaseKeyedEvent __imp_NtReleaseMutant __imp_NtReleaseSemaphore __imp_NtReleaseWorkerFactoryWorker __imp_NtRemoveIoCompletion __imp_NtRemoveIoCompletionEx __imp_NtRemoveProcessDebug __imp_NtRenameKey __imp_NtRenameTransactionManager __imp_NtReplaceKey __imp_NtReplacePartitionUnit __imp_NtReplyPort __imp_NtReplyWaitReceivePort __imp_NtReplyWaitReceivePortEx __imp_NtReplyWaitReplyPort __imp_NtRequestPort __imp_NtRequestWaitReplyPort __imp_NtResetEvent __imp_NtResetWriteWatch __imp_NtRestoreKey __imp_NtResumeProcess __imp_NtResumeThread __imp_NtRevertContainerImpersonation __imp_NtRollbackComplete __imp_NtRollbackEnlistment __imp_NtRollbackRegistryTransaction __imp_NtRollbackTransaction __imp_NtRollforwardTransactionManager __imp_NtSaveKey __imp_NtSaveKeyEx __imp_NtSaveMergedKeys __imp_NtSecureConnectPort __imp_NtSerializeBoot __imp_NtSetBootEntryOrder __imp_NtSetBootOptions __imp_NtSetCachedSigningLevel __imp_NtSetCachedSigningLevel2 __imp_NtSetContextThread __imp_NtSetDebugFilterState __imp_NtSetDefaultHardErrorPort __imp_NtSetDefaultLocale __imp_NtSetDefaultUILanguage __imp_NtSetDriverEntryOrder __imp_NtSetEaFile __imp_NtSetEvent __imp_NtSetEventBoostPriority __imp_NtSetHighEventPair __imp_NtSetHighWaitLowEventPair __imp_NtSetIRTimer __imp_NtSetInformationDebugObject __imp_NtSetInformationEnlistment __imp_NtSetInformationFile __imp_NtSetInformationJobObject __imp_NtSetInformationKey __imp_NtSetInformationObject __imp_NtSetInformationProcess __imp_NtSetInformationResourceManager __imp_NtSetInformationSymbolicLink __imp_NtSetInformationThread __imp_NtSetInformationToken __imp_NtSetInformationTransaction __imp_NtSetInformationTransactionManager __imp_NtSetInformationVirtualMemory __imp_NtSetInformationWorkerFactory __imp_NtSetIntervalProfile __imp_NtSetIoCompletion __imp_NtSetIoCompletionEx __imp_NtSetLdtEntries __imp_NtSetLowEventPair __imp_NtSetLowWaitHighEventPair __imp_NtSetQuotaInformationFile __imp_NtSetSecurityObject __imp_NtSetSystemEnvironmentValue __imp_NtSetSystemEnvironmentValueEx __imp_NtSetSystemInformation __imp_NtSetSystemPowerState __imp_NtSetSystemTime __imp_NtSetThreadExecutionState __imp_NtSetTimer __imp_NtSetTimer2 __imp_NtSetTimerEx __imp_NtSetTimerResolution __imp_NtSetUuidSeed __imp_NtSetValueKey __imp_NtSetVolumeInformationFile __imp_NtSetWnfProcessNotificationEvent __imp_NtShutdownSystem __imp_NtShutdownWorkerFactory __imp_NtSignalAndWaitForSingleObject __imp_NtSinglePhaseReject __imp_NtStartProfile __imp_NtStopProfile __imp_NtSubscribeWnfStateChange __imp_NtSuspendProcess __imp_NtSuspendThread __imp_NtSystemDebugControl __imp_NtTerminateEnclave __imp_NtTerminateJobObject __imp_NtTerminateProcess __imp_NtTerminateThread __imp_NtTestAlert __imp_NtThawRegistry __imp_NtThawTransactions __imp_NtTraceControl __imp_NtTraceEvent __imp_NtTranslateFilePath __imp_NtUmsThreadYield __imp_NtUnloadDriver __imp_NtUnloadKey __imp_NtUnloadKey2 __imp_NtUnloadKeyEx __imp_NtUnlockFile __imp_NtUnlockVirtualMemory __imp_NtUnmapViewOfSection __imp_NtUnmapViewOfSectionEx __imp_NtUnsubscribeWnfStateChange __imp_NtUpdateWnfStateData __imp_NtVdmControl __imp_NtWaitForAlertByThreadId __imp_NtWaitForDebugEvent __imp_NtWaitForKeyedEvent __imp_NtWaitForMultipleObjects __imp_NtWaitForMultipleObjects32 __imp_NtWaitForSingleObject __imp_NtWaitForWorkViaWorkerFactory __imp_NtWaitHighEventPair __imp_NtWaitLowEventPair __imp_NtWorkerFactoryWorkerReady __imp_NtWriteFile __imp_NtWriteFileGather __imp_NtWriteRequestData __imp_NtWriteVirtualMemory __imp_NtYieldExecution __imp_PfxFindPrefix __imp_PfxInitialize __imp_PfxInsertPrefix __imp_PfxRemovePrefix __imp_PssNtCaptureSnapshot __imp_PssNtDuplicateSnapshot __imp_PssNtFreeRemoteSnapshot __imp_PssNtFreeSnapshot __imp_PssNtFreeWalkMarker __imp_PssNtQuerySnapshot __imp_PssNtValidateDescriptor __imp_PssNtWalkSnapshot __imp_ReadTimeStampCounter __imp_RtlAbortRXact __imp_RtlAbsoluteToSelfRelativeSD __imp_RtlAcquirePebLock __imp_RtlAcquirePrivilege __imp_RtlAcquireReleaseSRWLockExclusive __imp_RtlAcquireResourceExclusive __imp_RtlAcquireResourceShared __imp_RtlAcquireSRWLockExclusive __imp_RtlAcquireSRWLockShared __imp_RtlActivateActivationContext __imp_RtlActivateActivationContextEx __imp_RtlActivateActivationContextUnsafeFast __imp_RtlAddAccessAllowedAce __imp_RtlAddAccessAllowedAceEx __imp_RtlAddAccessAllowedObjectAce __imp_RtlAddAccessDeniedAce __imp_RtlAddAccessDeniedAceEx __imp_RtlAddAccessDeniedObjectAce __imp_RtlAddAccessFilterAce __imp_RtlAddAce __imp_RtlAddActionToRXact __imp_RtlAddAtomToAtomTable __imp_RtlAddAttributeActionToRXact __imp_RtlAddAuditAccessAce __imp_RtlAddAuditAccessAceEx __imp_RtlAddAuditAccessObjectAce __imp_RtlAddFunctionTable __imp_RtlAddGrowableFunctionTable __imp_RtlAddIntegrityLabelToBoundaryDescriptor __imp_RtlAddMandatoryAce __imp_RtlAddProcessTrustLabelAce __imp_RtlAddRefActivationContext __imp_RtlAddResourceAttributeAce __imp_RtlAddSIDToBoundaryDescriptor __imp_RtlAddScopedPolicyIDAce __imp_RtlAddVectoredContinueHandler __imp_RtlAddVectoredExceptionHandler __imp_RtlAddressInSectionTable __imp_RtlAdjustPrivilege __imp_RtlAllocateActivationContextStack __imp_RtlAllocateAndInitializeSid __imp_RtlAllocateAndInitializeSidEx __imp_RtlAllocateHandle __imp_RtlAllocateHeap __imp_RtlAllocateMemoryBlockLookaside __imp_RtlAllocateMemoryZone __imp_RtlAllocateWnfSerializationGroup __imp_RtlAnsiCharToUnicodeChar __imp_RtlAnsiStringToUnicodeSize __imp_RtlAnsiStringToUnicodeString __imp_RtlAppendAsciizToString __imp_RtlAppendPathElement __imp_RtlAppendStringToString __imp_RtlAppendUnicodeStringToString __imp_RtlAppendUnicodeToString __imp_RtlApplicationVerifierStop __imp_RtlApplyRXact __imp_RtlApplyRXactNoFlush __imp_RtlAreAllAccessesGranted __imp_RtlAreAnyAccessesGranted __imp_RtlAreBitsClear __imp_RtlAreBitsSet __imp_RtlAssert __imp_RtlAvlInsertNodeEx __imp_RtlAvlRemoveNode __imp_RtlCancelTimer __imp_RtlCanonicalizeDomainName __imp_RtlCapabilityCheck __imp_RtlCapabilityCheckForSingleSessionSku __imp_RtlCaptureContext __imp_RtlCaptureStackBackTrace __imp_RtlCharToInteger __imp_RtlCheckBootStatusIntegrity __imp_RtlCheckForOrphanedCriticalSections __imp_RtlCheckPortableOperatingSystem __imp_RtlCheckRegistryKey __imp_RtlCheckSandboxedToken __imp_RtlCheckSystemBootStatusIntegrity __imp_RtlCheckTokenCapability __imp_RtlCheckTokenMembership __imp_RtlCheckTokenMembershipEx __imp_RtlCleanUpTEBLangLists __imp_RtlClearAllBits __imp_RtlClearBit __imp_RtlClearBits __imp_RtlClearThreadWorkOnBehalfTicket __imp_RtlCloneUserProcess __imp_RtlCmDecodeMemIoResource __imp_RtlCmEncodeMemIoResource __imp_RtlCommitDebugInfo __imp_RtlCompactHeap __imp_RtlCompareAltitudes __imp_RtlCompareMemory __imp_RtlCompareMemoryUlong __imp_RtlCompareString __imp_RtlCompareUnicodeString __imp_RtlCompareUnicodeStrings __imp_RtlCompressBuffer __imp_RtlComputeCrc32 __imp_RtlComputeImportTableHash __imp_RtlComputePrivatizedDllName_U __imp_RtlConnectToSm __imp_RtlConsoleMultiByteToUnicodeN __imp_RtlConstructCrossVmEventPath __imp_RtlConstructCrossVmMutexPath __imp_RtlContractHashTable __imp_RtlConvertDeviceFamilyInfoToString __imp_RtlConvertExclusiveToShared __imp_RtlConvertLCIDToString __imp_RtlConvertSRWLockExclusiveToShared __imp_RtlConvertSharedToExclusive __imp_RtlConvertSidToUnicodeString __imp_RtlConvertToAutoInheritSecurityObject __imp_RtlCopyBitMap __imp_RtlCopyContext __imp_RtlCopyExtendedContext __imp_RtlCopyLuid __imp_RtlCopyLuidAndAttributesArray __imp_RtlCopyMappedMemory __imp_RtlCopyMemory __imp_RtlCopySecurityDescriptor __imp_RtlCopySid __imp_RtlCopySidAndAttributesArray __imp_RtlCopyString __imp_RtlCopyUnicodeString __imp_RtlCrc32 __imp_RtlCrc64 __imp_RtlCreateAcl __imp_RtlCreateActivationContext __imp_RtlCreateAndSetSD __imp_RtlCreateAtomTable __imp_RtlCreateBootStatusDataFile __imp_RtlCreateBoundaryDescriptor __imp_RtlCreateEnvironment __imp_RtlCreateEnvironmentEx __imp_RtlCreateHashTable __imp_RtlCreateHashTableEx __imp_RtlCreateHeap __imp_RtlCreateMemoryBlockLookaside __imp_RtlCreateMemoryZone __imp_RtlCreateProcessParameters __imp_RtlCreateProcessParametersEx __imp_RtlCreateProcessParametersWithTemplate __imp_RtlCreateProcessReflection __imp_RtlCreateQueryDebugBuffer __imp_RtlCreateRegistryKey __imp_RtlCreateSecurityDescriptor __imp_RtlCreateServiceSid __imp_RtlCreateSystemVolumeInformationFolder __imp_RtlCreateTagHeap __imp_RtlCreateTimer __imp_RtlCreateTimerQueue __imp_RtlCreateUnicodeString __imp_RtlCreateUnicodeStringFromAsciiz __imp_RtlCreateUserProcess __imp_RtlCreateUserProcessEx __imp_RtlCreateUserSecurityObject __imp_RtlCreateUserStack __imp_RtlCreateUserThread __imp_RtlCreateVirtualAccountSid __imp_RtlCultureNameToLCID __imp_RtlCustomCPToUnicodeN __imp_RtlCutoverTimeToSystemTime __imp_RtlDeCommitDebugInfo __imp_RtlDeNormalizeProcessParams __imp_RtlDeactivateActivationContext __imp_RtlDeactivateActivationContextUnsafeFast __imp_RtlDebugPrintTimes __imp_RtlDecodePointer __imp_RtlDecodeRemotePointer __imp_RtlDecodeSystemPointer __imp_RtlDecompressBuffer __imp_RtlDecompressBufferEx __imp_RtlDecompressFragment __imp_RtlDefaultNpAcl __imp_RtlDelete __imp_RtlDeleteAce __imp_RtlDeleteAtomFromAtomTable __imp_RtlDeleteBoundaryDescriptor __imp_RtlDeleteCriticalSection __imp_RtlDeleteElementGenericTable __imp_RtlDeleteElementGenericTableAvl __imp_RtlDeleteElementGenericTableAvlEx __imp_RtlDeleteFunctionTable __imp_RtlDeleteGrowableFunctionTable __imp_RtlDeleteHashTable __imp_RtlDeleteNoSplay __imp_RtlDeleteRegistryValue __imp_RtlDeleteResource __imp_RtlDeleteSecurityObject __imp_RtlDeleteTimer __imp_RtlDeleteTimerQueue __imp_RtlDeleteTimerQueueEx __imp_RtlDeregisterSecureMemoryCacheCallback __imp_RtlDeregisterWait __imp_RtlDeregisterWaitEx __imp_RtlDeriveCapabilitySidsFromName __imp_RtlDestroyAtomTable __imp_RtlDestroyEnvironment __imp_RtlDestroyHandleTable __imp_RtlDestroyHeap __imp_RtlDestroyMemoryBlockLookaside __imp_RtlDestroyMemoryZone __imp_RtlDestroyProcessParameters __imp_RtlDestroyQueryDebugBuffer __imp_RtlDetectHeapLeaks __imp_RtlDetermineDosPathNameType_U __imp_RtlDisableThreadProfiling __imp_RtlDllShutdownInProgress __imp_RtlDnsHostNameToComputerName __imp_RtlDoesFileExists_U __imp_RtlDoesNameContainWildCards __imp_RtlDosApplyFileIsolationRedirection_Ustr __imp_RtlDosLongPathNameToNtPathName_U_WithStatus __imp_RtlDosLongPathNameToRelativeNtPathName_U_WithStatus __imp_RtlDosPathNameToNtPathName_U __imp_RtlDosPathNameToNtPathName_U_WithStatus __imp_RtlDosPathNameToRelativeNtPathName_U __imp_RtlDosPathNameToRelativeNtPathName_U_WithStatus __imp_RtlDosSearchPath_U __imp_RtlDosSearchPath_Ustr __imp_RtlDowncaseUnicodeChar __imp_RtlDowncaseUnicodeString __imp_RtlDumpResource __imp_RtlDuplicateUnicodeString __imp_RtlEmptyAtomTable __imp_RtlEnableEarlyCriticalSectionEventCreation __imp_RtlEnableThreadProfiling __imp_RtlEncodePointer __imp_RtlEncodeRemotePointer __imp_RtlEncodeSystemPointer __imp_RtlEndEnumerationHashTable __imp_RtlEndStrongEnumerationHashTable __imp_RtlEndWeakEnumerationHashTable __imp_RtlEnterCriticalSection __imp_RtlEnumProcessHeaps __imp_RtlEnumerateEntryHashTable __imp_RtlEnumerateGenericTable __imp_RtlEnumerateGenericTableAvl __imp_RtlEnumerateGenericTableLikeADirectory __imp_RtlEnumerateGenericTableWithoutSplaying __imp_RtlEnumerateGenericTableWithoutSplayingAvl __imp_RtlEqualComputerName __imp_RtlEqualDomainName __imp_RtlEqualLuid __imp_RtlEqualPrefixSid __imp_RtlEqualSid __imp_RtlEqualString __imp_RtlEqualUnicodeString __imp_RtlEqualWnfChangeStamps __imp_RtlEraseUnicodeString __imp_RtlEthernetAddressToStringA __imp_RtlEthernetAddressToStringW __imp_RtlEthernetStringToAddressA __imp_RtlEthernetStringToAddressW __imp_RtlExitUserProcess __imp_RtlExitUserThread __imp_RtlExpandEnvironmentStrings __imp_RtlExpandEnvironmentStrings_U __imp_RtlExpandHashTable __imp_RtlExtendCorrelationVector __imp_RtlExtendMemoryBlockLookaside __imp_RtlExtendMemoryZone __imp_RtlExtendedMagicDivide __imp_RtlExtractBitMap __imp_RtlFillMemory __imp_RtlFillMemoryUlong __imp_RtlFillMemoryUlonglong __imp_RtlFindAceByType __imp_RtlFindActivationContextSectionGuid __imp_RtlFindActivationContextSectionString __imp_RtlFindCharInUnicodeString __imp_RtlFindClearBits __imp_RtlFindClearBitsAndSet __imp_RtlFindClearRuns __imp_RtlFindClosestEncodableLength __imp_RtlFindExportedRoutineByName __imp_RtlFindLastBackwardRunClear __imp_RtlFindLeastSignificantBit __imp_RtlFindLongestRunClear __imp_RtlFindMessage __imp_RtlFindMostSignificantBit __imp_RtlFindNextForwardRunClear __imp_RtlFindSetBits __imp_RtlFindSetBitsAndClear __imp_RtlFindUnicodeSubstring __imp_RtlFirstEntrySList __imp_RtlFirstFreeAce __imp_RtlFlsAlloc __imp_RtlFlsFree __imp_RtlFlsGetValue __imp_RtlFlsSetValue __imp_RtlFlushSecureMemoryCache __imp_RtlFormatCurrentUserKeyPath __imp_RtlFormatMessage __imp_RtlFormatMessageEx __imp_RtlFreeActivationContextStack __imp_RtlFreeAnsiString __imp_RtlFreeHandle __imp_RtlFreeHeap __imp_RtlFreeMemoryBlockLookaside __imp_RtlFreeOemString __imp_RtlFreeSid __imp_RtlFreeThreadActivationContextStack __imp_RtlFreeUTF8String __imp_RtlFreeUnicodeString __imp_RtlFreeUserStack __imp_RtlGUIDFromString __imp_RtlGenerate8dot3Name __imp_RtlGetAce __imp_RtlGetActiveActivationContext __imp_RtlGetActiveConsoleId __imp_RtlGetAppContainerNamedObjectPath __imp_RtlGetAppContainerParent __imp_RtlGetAppContainerSidType __imp_RtlGetCallersAddress __imp_RtlGetCompressionWorkSpaceSize __imp_RtlGetConsoleSessionForegroundProcessId __imp_RtlGetControlSecurityDescriptor __imp_RtlGetCriticalSectionRecursionCount __imp_RtlGetCurrentDirectory_U __imp_RtlGetCurrentPeb __imp_RtlGetCurrentProcessorNumber __imp_RtlGetCurrentProcessorNumberEx __imp_RtlGetCurrentServiceSessionId __imp_RtlGetCurrentTransaction __imp_RtlGetDaclSecurityDescriptor __imp_RtlGetDeviceFamilyInfoEnum __imp_RtlGetElementGenericTable __imp_RtlGetElementGenericTableAvl __imp_RtlGetEnabledExtendedFeatures __imp_RtlGetExePath __imp_RtlGetExtendedContextLength __imp_RtlGetExtendedContextLength2 __imp_RtlGetExtendedFeaturesMask __imp_RtlGetFileMUIPath __imp_RtlGetFrame __imp_RtlGetFullPathName_U __imp_RtlGetFullPathName_UEx __imp_RtlGetFullPathName_UstrEx __imp_RtlGetFunctionTableListHead __imp_RtlGetGroupSecurityDescriptor __imp_RtlGetIntegerAtom __imp_RtlGetInterruptTimePrecise __imp_RtlGetLastNtStatus __imp_RtlGetLastWin32Error __imp_RtlGetLengthWithoutLastFullDosOrNtPathElement __imp_RtlGetLengthWithoutTrailingPathSeperators __imp_RtlGetLocaleFileMappingAddress __imp_RtlGetLongestNtPathLength __imp_RtlGetNativeSystemInformation __imp_RtlGetNextEntryHashTable __imp_RtlGetNtGlobalFlags __imp_RtlGetNtProductType __imp_RtlGetNtSystemRoot __imp_RtlGetNtVersionNumbers __imp_RtlGetOwnerSecurityDescriptor __imp_RtlGetPersistedStateLocation __imp_RtlGetProcessHeaps __imp_RtlGetProductInfo __imp_RtlGetReturnAddressHijackTarget __imp_RtlGetSaclSecurityDescriptor __imp_RtlGetSearchPath __imp_RtlGetSecurityDescriptorRMControl __imp_RtlGetSessionProperties __imp_RtlGetSetBootStatusData __imp_RtlGetSuiteMask __imp_RtlGetSystemBootStatus __imp_RtlGetSystemBootStatusEx __imp_RtlGetSystemPreferredUILanguages __imp_RtlGetSystemTimePrecise __imp_RtlGetThreadErrorMode __imp_RtlGetThreadLangIdByIndex __imp_RtlGetThreadPreferredUILanguages __imp_RtlGetThreadWorkOnBehalfTicket __imp_RtlGetTokenNamedObjectPath __imp_RtlGetUILanguageInfo __imp_RtlGetUnloadEventTrace __imp_RtlGetUnloadEventTraceEx __imp_RtlGetUserInfoHeap __imp_RtlGetUserPreferredUILanguages __imp_RtlGetVersion __imp_RtlGrowFunctionTable __imp_RtlGuardCheckLongJumpTarget __imp_RtlHashUnicodeString __imp_RtlHeapTrkInitialize __imp_RtlIdentifierAuthoritySid __imp_RtlIdnToAscii __imp_RtlIdnToNameprepUnicode __imp_RtlIdnToUnicode __imp_RtlImageDirectoryEntryToData __imp_RtlImageNtHeader __imp_RtlImageNtHeaderEx __imp_RtlImageRvaToSection __imp_RtlImageRvaToVa __imp_RtlImpersonateSelf __imp_RtlImpersonateSelfEx __imp_RtlIncrementCorrelationVector __imp_RtlInitAnsiString __imp_RtlInitAnsiStringEx __imp_RtlInitCodePageTable __imp_RtlInitEnumerationHashTable __imp_RtlInitNlsTables __imp_RtlInitString __imp_RtlInitStringEx __imp_RtlInitStrongEnumerationHashTable __imp_RtlInitUTF8String __imp_RtlInitUTF8StringEx __imp_RtlInitUnicodeString __imp_RtlInitUnicodeStringEx __imp_RtlInitWeakEnumerationHashTable __imp_RtlInitializeAtomPackage __imp_RtlInitializeBitMap __imp_RtlInitializeConditionVariable __imp_RtlInitializeCorrelationVector __imp_RtlInitializeCriticalSection __imp_RtlInitializeCriticalSectionAndSpinCount __imp_RtlInitializeCriticalSectionEx __imp_RtlInitializeExtendedContext __imp_RtlInitializeExtendedContext2 __imp_RtlInitializeGenericTable __imp_RtlInitializeGenericTableAvl __imp_RtlInitializeHandleTable __imp_RtlInitializeRXact __imp_RtlInitializeResource __imp_RtlInitializeSListHead __imp_RtlInitializeSRWLock __imp_RtlInitializeSid __imp_RtlInitializeSidEx __imp_RtlInsertElementGenericTable __imp_RtlInsertElementGenericTableAvl __imp_RtlInsertElementGenericTableFull __imp_RtlInsertElementGenericTableFullAvl __imp_RtlInsertEntryHashTable __imp_RtlInstallFunctionTableCallback __imp_RtlInt64ToUnicodeString __imp_RtlIntegerToChar __imp_RtlIntegerToUnicodeString __imp_RtlInterlockedClearBitRun __imp_RtlInterlockedFlushSList __imp_RtlInterlockedPopEntrySList __imp_RtlInterlockedPushEntrySList __imp_RtlInterlockedPushListSList __imp_RtlInterlockedPushListSListEx __imp_RtlInterlockedSetBitRun __imp_RtlIoDecodeMemIoResource __imp_RtlIoEncodeMemIoResource __imp_RtlIpv4AddressToStringA __imp_RtlIpv4AddressToStringExA __imp_RtlIpv4AddressToStringExW __imp_RtlIpv4AddressToStringW __imp_RtlIpv4StringToAddressA __imp_RtlIpv4StringToAddressExA __imp_RtlIpv4StringToAddressExW __imp_RtlIpv4StringToAddressW __imp_RtlIpv6AddressToStringA __imp_RtlIpv6AddressToStringExA __imp_RtlIpv6AddressToStringExW __imp_RtlIpv6AddressToStringW __imp_RtlIpv6StringToAddressA __imp_RtlIpv6StringToAddressExA __imp_RtlIpv6StringToAddressExW __imp_RtlIpv6StringToAddressW __imp_RtlIsActivationContextActive __imp_RtlIsCapabilitySid __imp_RtlIsCloudFilesPlaceholder __imp_RtlIsCriticalSectionLocked __imp_RtlIsCriticalSectionLockedByThread __imp_RtlIsCurrentProcess __imp_RtlIsCurrentThread __imp_RtlIsDosDeviceName_U __imp_RtlIsElevatedRid __imp_RtlIsGenericTableEmpty __imp_RtlIsGenericTableEmptyAvl __imp_RtlIsMultiSessionSku __imp_RtlIsMultiUsersInSessionSku __imp_RtlIsNameInExpression __imp_RtlIsNameInUnUpcasedExpression __imp_RtlIsNameLegalDOS8Dot3 __imp_RtlIsNonEmptyDirectoryReparsePointAllowed __imp_RtlIsNormalizedString __imp_RtlIsPackageSid __imp_RtlIsParentOfChildAppContainer __imp_RtlIsPartialPlaceholder __imp_RtlIsPartialPlaceholderFileHandle __imp_RtlIsPartialPlaceholderFileInfo __imp_RtlIsProcessorFeaturePresent __imp_RtlIsStateSeparationEnabled __imp_RtlIsTextUnicode __imp_RtlIsThreadWithinLoaderCallout __imp_RtlIsUntrustedObject __imp_RtlIsValidHandle __imp_RtlIsValidIndexHandle __imp_RtlIsValidLocaleName __imp_RtlIsValidProcessTrustLabelSid __imp_RtlIsZeroMemory __imp_RtlKnownExceptionFilter __imp_RtlLCIDToCultureName __imp_RtlLargeIntegerToChar __imp_RtlLcidToLocaleName __imp_RtlLeaveCriticalSection __imp_RtlLengthRequiredSid __imp_RtlLengthSecurityDescriptor __imp_RtlLengthSid __imp_RtlLocalTimeToSystemTime __imp_RtlLocaleNameToLcid __imp_RtlLocateExtendedFeature __imp_RtlLocateExtendedFeature2 __imp_RtlLocateLegacyContext __imp_RtlLockBootStatusData __imp_RtlLockCurrentThread __imp_RtlLockHeap __imp_RtlLockMemoryBlockLookaside __imp_RtlLockMemoryZone __imp_RtlLockModuleSection __imp_RtlLogStackBackTrace __imp_RtlLookupAtomInAtomTable __imp_RtlLookupElementGenericTable __imp_RtlLookupElementGenericTableAvl __imp_RtlLookupElementGenericTableFull __imp_RtlLookupElementGenericTableFullAvl __imp_RtlLookupEntryHashTable __imp_RtlLookupFirstMatchingElementGenericTableAvl __imp_RtlLookupFunctionEntry __imp_RtlLookupFunctionTable __imp_RtlMakeSelfRelativeSD __imp_RtlMapGenericMask __imp_RtlMapSecurityErrorToNtStatus __imp_RtlMoveMemory __imp_RtlMultiAppendUnicodeStringBuffer __imp_RtlMultiByteToUnicodeN __imp_RtlMultiByteToUnicodeSize __imp_RtlMultipleAllocateHeap __imp_RtlMultipleFreeHeap __imp_RtlNewInstanceSecurityObject __imp_RtlNewSecurityGrantedAccess __imp_RtlNewSecurityObject __imp_RtlNewSecurityObjectEx __imp_RtlNewSecurityObjectWithMultipleInheritance __imp_RtlNormalizeProcessParams __imp_RtlNormalizeSecurityDescriptor __imp_RtlNormalizeString __imp_RtlNotifyFeatureUsage __imp_RtlNtPathNameToDosPathName __imp_RtlNtStatusToDosError __imp_RtlNtStatusToDosErrorNoTeb __imp_RtlNumberGenericTableElements __imp_RtlNumberGenericTableElementsAvl __imp_RtlNumberOfClearBits __imp_RtlNumberOfClearBitsInRange __imp_RtlNumberOfSetBits __imp_RtlNumberOfSetBitsInRange __imp_RtlNumberOfSetBitsUlongPtr __imp_RtlOemStringToUnicodeSize __imp_RtlOemStringToUnicodeString __imp_RtlOemToUnicodeN __imp_RtlOpenCurrentUser __imp_RtlOsDeploymentState __imp_RtlOwnerAcesPresent __imp_RtlPcToFileHeader __imp_RtlPinAtomInAtomTable __imp_RtlPopFrame __imp_RtlPrefixString __imp_RtlPrefixUnicodeString __imp_RtlProcessFlsData __imp_RtlPublishWnfStateData __imp_RtlPushFrame __imp_RtlQueryActivationContextApplicationSettings __imp_RtlQueryAllFeatureConfigurations __imp_RtlQueryAtomInAtomTable __imp_RtlQueryDepthSList __imp_RtlQueryDynamicTimeZoneInformation __imp_RtlQueryElevationFlags __imp_RtlQueryEnvironmentVariable __imp_RtlQueryEnvironmentVariable_U __imp_RtlQueryFeatureConfiguration __imp_RtlQueryFeatureConfigurationChangeStamp __imp_RtlQueryFeatureUsageNotificationSubscriptions __imp_RtlQueryHeapInformation __imp_RtlQueryImageMitigationPolicy __imp_RtlQueryInformationAcl __imp_RtlQueryInformationActivationContext __imp_RtlQueryInformationActiveActivationContext __imp_RtlQueryPackageClaims __imp_RtlQueryPackageIdentity __imp_RtlQueryPackageIdentityEx __imp_RtlQueryPerformanceCounter __imp_RtlQueryPerformanceFrequency __imp_RtlQueryProcessBackTraceInformation __imp_RtlQueryProcessDebugInformation __imp_RtlQueryProcessLockInformation __imp_RtlQueryProcessPlaceholderCompatibilityMode __imp_RtlQueryProtectedPolicy __imp_RtlQueryRegistryValueWithFallback __imp_RtlQueryRegistryValues __imp_RtlQueryRegistryValuesEx __imp_RtlQuerySecurityObject __imp_RtlQueryThreadPlaceholderCompatibilityMode __imp_RtlQueryThreadProfiling __imp_RtlQueryTimeZoneInformation __imp_RtlQueryTokenHostIdAsUlong64 __imp_RtlQueryUnbiasedInterruptTime __imp_RtlQueryValidationRunlevel __imp_RtlQueryWnfMetaNotification __imp_RtlQueryWnfStateData __imp_RtlQueryWnfStateDataWithExplicitScope __imp_RtlQueueApcWow64Thread __imp_RtlQueueWorkItem __imp_RtlRaiseCustomSystemEventTrigger __imp_RtlRaiseException __imp_RtlRaiseStatus __imp_RtlRandom __imp_RtlRandomEx __imp_RtlRbInsertNodeEx __imp_RtlRbRemoveNode __imp_RtlReAllocateHeap __imp_RtlReadThreadProfilingData __imp_RtlRealPredecessor __imp_RtlRealSuccessor __imp_RtlRegisterFeatureConfigurationChangeNotification __imp_RtlRegisterForWnfMetaNotification __imp_RtlRegisterSecureMemoryCacheCallback __imp_RtlRegisterThreadWithCsrss __imp_RtlRegisterWait __imp_RtlReleaseActivationContext __imp_RtlReleasePath __imp_RtlReleasePebLock __imp_RtlReleasePrivilege __imp_RtlReleaseRelativeName __imp_RtlReleaseResource __imp_RtlReleaseSRWLockExclusive __imp_RtlReleaseSRWLockShared __imp_RtlRemoteCall __imp_RtlRemoveEntryHashTable __imp_RtlRemovePrivileges __imp_RtlRemoveVectoredContinueHandler __imp_RtlRemoveVectoredExceptionHandler __imp_RtlReplaceSidInSd __imp_RtlReplaceSystemDirectoryInPath __imp_RtlReportException __imp_RtlReportExceptionEx __imp_RtlReportSilentProcessExit __imp_RtlReportSqmEscalation __imp_RtlResetMemoryBlockLookaside __imp_RtlResetRtlTranslations __imp_RtlRestoreBootStatusDefaults __imp_RtlRestoreContext __imp_RtlRestoreLastWin32Error __imp_RtlRestoreSystemBootStatusDefaults __imp_RtlRestoreThreadPreferredUILanguages __imp_RtlRunDecodeUnicodeString __imp_RtlRunEncodeUnicodeString __imp_RtlRunOnceBeginInitialize __imp_RtlRunOnceComplete __imp_RtlRunOnceExecuteOnce __imp_RtlRunOnceInitialize __imp_RtlSecondsSince1970ToTime __imp_RtlSecondsSince1980ToTime __imp_RtlSelfRelativeToAbsoluteSD __imp_RtlSelfRelativeToAbsoluteSD2 __imp_RtlSendMsgToSm __imp_RtlSetAllBits __imp_RtlSetBit __imp_RtlSetBits __imp_RtlSetControlSecurityDescriptor __imp_RtlSetCriticalSectionSpinCount __imp_RtlSetCurrentDirectory_U __imp_RtlSetCurrentEnvironment __imp_RtlSetCurrentTransaction __imp_RtlSetDaclSecurityDescriptor __imp_RtlSetDynamicTimeZoneInformation __imp_RtlSetEnvironmentStrings __imp_RtlSetEnvironmentVar __imp_RtlSetEnvironmentVariable __imp_RtlSetExtendedFeaturesMask __imp_RtlSetFeatureConfigurations __imp_RtlSetGroupSecurityDescriptor __imp_RtlSetHeapInformation __imp_RtlSetImageMitigationPolicy __imp_RtlSetInformationAcl __imp_RtlSetIoCompletionCallback __imp_RtlSetLastWin32Error __imp_RtlSetLastWin32ErrorAndNtStatusFromNtStatus __imp_RtlSetOwnerSecurityDescriptor __imp_RtlSetPortableOperatingSystem __imp_RtlSetProcessDebugInformation __imp_RtlSetProcessIsCritical __imp_RtlSetProcessPlaceholderCompatibilityMode __imp_RtlSetProtectedPolicy __imp_RtlSetProxiedProcessId __imp_RtlSetSaclSecurityDescriptor __imp_RtlSetSearchPathMode __imp_RtlSetSecurityDescriptorRMControl __imp_RtlSetSecurityObject __imp_RtlSetSecurityObjectEx __imp_RtlSetSystemBootStatus __imp_RtlSetSystemBootStatusEx __imp_RtlSetThreadErrorMode __imp_RtlSetThreadIsCritical __imp_RtlSetThreadPlaceholderCompatibilityMode __imp_RtlSetThreadPoolStartFunc __imp_RtlSetThreadPreferredUILanguages __imp_RtlSetThreadPreferredUILanguages2 __imp_RtlSetThreadSubProcessTag __imp_RtlSetThreadWorkOnBehalfTicket __imp_RtlSetTimeZoneInformation __imp_RtlSetTimer __imp_RtlSetUnhandledExceptionFilter __imp_RtlSetUserFlagsHeap __imp_RtlSetUserValueHeap __imp_RtlSidDominates __imp_RtlSidDominatesForTrust __imp_RtlSidEqualLevel __imp_RtlSidHashInitialize __imp_RtlSidHashLookup __imp_RtlSidIsHigherLevel __imp_RtlSizeHeap __imp_RtlSleepConditionVariableCS __imp_RtlSleepConditionVariableSRW __imp_RtlSplay __imp_RtlStartRXact __imp_RtlStringFromGUID __imp_RtlStringFromGUIDEx __imp_RtlStronglyEnumerateEntryHashTable __imp_RtlSubAuthorityCountSid __imp_RtlSubAuthoritySid __imp_RtlSubscribeForFeatureUsageNotification __imp_RtlSubscribeWnfStateChangeNotification __imp_RtlSubtreePredecessor __imp_RtlSubtreeSuccessor __imp_RtlSwitchedVVI __imp_RtlSystemTimeToLocalTime __imp_RtlTestAndPublishWnfStateData __imp_RtlTestBit __imp_RtlTestProtectedAccess __imp_RtlTimeFieldsToTime __imp_RtlTimeToElapsedTimeFields __imp_RtlTimeToSecondsSince1970 __imp_RtlTimeToSecondsSince1980 __imp_RtlTimeToTimeFields __imp_RtlTraceDatabaseAdd __imp_RtlTraceDatabaseCreate __imp_RtlTraceDatabaseDestroy __imp_RtlTraceDatabaseEnumerate __imp_RtlTraceDatabaseFind __imp_RtlTraceDatabaseLock __imp_RtlTraceDatabaseUnlock __imp_RtlTraceDatabaseValidate __imp_RtlTryAcquirePebLock __imp_RtlTryAcquireSRWLockExclusive __imp_RtlTryAcquireSRWLockShared __imp_RtlTryConvertSRWLockSharedToExclusiveOrRelease __imp_RtlTryEnterCriticalSection __imp_RtlUTF8StringToUnicodeString __imp_RtlUTF8ToUnicodeN __imp_RtlUlongByteSwap __imp_RtlUlonglongByteSwap __imp_RtlUnhandledExceptionFilter __imp_RtlUnhandledExceptionFilter2 __imp_RtlUnicodeStringToAnsiSize __imp_RtlUnicodeStringToAnsiString __imp_RtlUnicodeStringToCountedOemString __imp_RtlUnicodeStringToInteger __imp_RtlUnicodeStringToOemSize __imp_RtlUnicodeStringToOemString __imp_RtlUnicodeStringToUTF8String __imp_RtlUnicodeToCustomCPN __imp_RtlUnicodeToMultiByteN __imp_RtlUnicodeToMultiByteSize __imp_RtlUnicodeToOemN __imp_RtlUnicodeToUTF8N __imp_RtlUniform __imp_RtlUnlockBootStatusData __imp_RtlUnlockCurrentThread __imp_RtlUnlockHeap __imp_RtlUnlockMemoryBlockLookaside __imp_RtlUnlockMemoryZone __imp_RtlUnlockModuleSection __imp_RtlUnregisterFeatureConfigurationChangeNotification __imp_RtlUnsubscribeFromFeatureUsageNotifications __imp_RtlUnsubscribeWnfNotificationWaitForCompletion __imp_RtlUnsubscribeWnfNotificationWithCompletionCallback __imp_RtlUnsubscribeWnfStateChangeNotification __imp_RtlUnwind __imp_RtlUnwindEx __imp_RtlUpcaseUnicodeChar __imp_RtlUpcaseUnicodeString __imp_RtlUpcaseUnicodeStringToCountedOemString __imp_RtlUpcaseUnicodeStringToOemString __imp_RtlUpcaseUnicodeToCustomCPN __imp_RtlUpcaseUnicodeToMultiByteN __imp_RtlUpcaseUnicodeToOemN __imp_RtlUpdateClonedCriticalSection __imp_RtlUpdateClonedSRWLock __imp_RtlUpdateTimer __imp_RtlUpperChar __imp_RtlUpperString __imp_RtlUshortByteSwap __imp_RtlValidAcl __imp_RtlValidProcessProtection __imp_RtlValidRelativeSecurityDescriptor __imp_RtlValidSecurityDescriptor __imp_RtlValidSid __imp_RtlValidateCorrelationVector __imp_RtlValidateHeap __imp_RtlValidateProcessHeaps __imp_RtlValidateUnicodeString __imp_RtlVerifyVersionInfo __imp_RtlVirtualUnwind __imp_RtlWaitForWnfMetaNotification __imp_RtlWaitOnAddress __imp_RtlWakeAddressAll __imp_RtlWakeAddressAllNoFence __imp_RtlWakeAddressSingle __imp_RtlWakeAddressSingleNoFence __imp_RtlWakeAllConditionVariable __imp_RtlWakeConditionVariable __imp_RtlWalkFrameChain __imp_RtlWalkHeap __imp_RtlWeaklyEnumerateEntryHashTable __imp_RtlWerpReportException __imp_RtlWnfCompareChangeStamp __imp_RtlWnfDllUnloadCallback __imp_RtlWow64CallFunction64 __imp_RtlWow64EnableFsRedirection __imp_RtlWow64EnableFsRedirectionEx __imp_RtlWow64GetCurrentMachine __imp_RtlWow64GetEquivalentMachineCHPE __imp_RtlWow64GetProcessMachines __imp_RtlWow64GetSharedInfoProcess __imp_RtlWow64IsWowGuestMachineSupported __imp_RtlWriteRegistryValue __imp_RtlZeroMemory __imp_RtlZombifyActivationContext __imp_RtlpApplyLengthFunction __imp_RtlpCheckDynamicTimeZoneInformation __imp_RtlpCleanupRegistryKeys __imp_RtlpConvertAbsoluteToRelativeSecurityAttribute __imp_RtlpConvertCultureNamesToLCIDs __imp_RtlpConvertLCIDsToCultureNames __imp_RtlpConvertRelativeToAbsoluteSecurityAttribute __imp_RtlpCreateProcessRegistryInfo __imp_RtlpEnsureBufferSize __imp_RtlpGetLCIDFromLangInfoNode __imp_RtlpGetNameFromLangInfoNode __imp_RtlpGetSystemDefaultUILanguage __imp_RtlpGetUserOrMachineUILanguage4NLS __imp_RtlpInitializeLangRegistryInfo __imp_RtlpIsQualifiedLanguage __imp_RtlpLoadMachineUIByPolicy __imp_RtlpLoadUserUIByPolicy __imp_RtlpMergeSecurityAttributeInformation __imp_RtlpMuiFreeLangRegistryInfo __imp_RtlpMuiRegCreateRegistryInfo __imp_RtlpMuiRegFreeRegistryInfo __imp_RtlpMuiRegLoadRegistryInfo __imp_RtlpNotOwnerCriticalSection __imp_RtlpNtCreateKey __imp_RtlpNtEnumerateSubKey __imp_RtlpNtMakeTemporaryKey __imp_RtlpNtOpenKey __imp_RtlpNtQueryValueKey __imp_RtlpNtSetValueKey __imp_RtlpQueryDefaultUILanguage __imp_RtlpQueryProcessDebugInformationRemote __imp_RtlpRefreshCachedUILanguage __imp_RtlpSetInstallLanguage __imp_RtlpSetPreferredUILanguages __imp_RtlpSetUserPreferredUILanguages __imp_RtlpTimeFieldsToTime __imp_RtlpTimeToTimeFields __imp_RtlpUnWaitCriticalSection __imp_RtlpVerifyAndCommitUILanguageSettings __imp_RtlpWaitForCriticalSection __imp_RtlxAnsiStringToUnicodeSize __imp_RtlxOemStringToUnicodeSize __imp_RtlxUnicodeStringToAnsiSize __imp_RtlxUnicodeStringToOemSize __imp_ShipAssert __imp_ShipAssertGetBufferInfo __imp_ShipAssertMsgA __imp_ShipAssertMsgW __imp_TpAllocAlpcCompletion __imp_TpAllocCleanupGroup __imp_TpAllocIoCompletion __imp_TpAllocJobNotification __imp_TpAllocPool __imp_TpAllocTimer __imp_TpAllocWait __imp_TpAllocWork __imp_TpCallbackDetectedUnrecoverableError __imp_TpCallbackLeaveCriticalSectionOnCompletion __imp_TpCallbackMayRunLong __imp_TpCallbackReleaseMutexOnCompletion __imp_TpCallbackReleaseSemaphoreOnCompletion __imp_TpCallbackSetEventOnCompletion __imp_TpCallbackUnloadDllOnCompletion __imp_TpCancelAsyncIoOperation __imp_TpCaptureCaller __imp_TpCheckTerminateWorker __imp_TpDisassociateCallback __imp_TpIsTimerSet __imp_TpPostWork __imp_TpQueryPoolStackInformation __imp_TpReleaseAlpcCompletion __imp_TpReleaseCleanupGroup __imp_TpReleaseCleanupGroupMembers __imp_TpReleaseIoCompletion __imp_TpReleaseJobNotification __imp_TpReleasePool __imp_TpReleaseTimer __imp_TpReleaseWait __imp_TpReleaseWork __imp_TpSetPoolMaxThreads __imp_TpSetPoolMaxThreadsSoftLimit __imp_TpSetPoolMinThreads __imp_TpSetPoolStackInformation __imp_TpSetPoolWorkerThreadIdleTimeout __imp_TpSetTimer __imp_TpSetTimerEx __imp_TpSetWait __imp_TpSetWaitEx __imp_TpSimpleTryPost __imp_TpStartAsyncIoOperation __imp_TpTrimPools __imp_TpWaitForAlpcCompletion __imp_TpWaitForIoCompletion __imp_TpWaitForJobNotification __imp_TpWaitForTimer __imp_TpWaitForWait __imp_TpWaitForWork __imp_VerSetConditionMask __imp_WerReportExceptionWorker __imp_WerReportSQMEvent __imp_WinSqmAddToAverageDWORD __imp_WinSqmAddToStream __imp_WinSqmAddToStreamEx __imp_WinSqmCheckEscalationAddToStreamEx __imp_WinSqmCheckEscalationSetDWORD __imp_WinSqmCheckEscalationSetDWORD64 __imp_WinSqmCheckEscalationSetString __imp_WinSqmCommonDatapointDelete __imp_WinSqmCommonDatapointSetDWORD __imp_WinSqmCommonDatapointSetDWORD64 __imp_WinSqmCommonDatapointSetStreamEx __imp_WinSqmCommonDatapointSetString __imp_WinSqmEndSession __imp_WinSqmEventEnabled __imp_WinSqmEventWrite __imp_WinSqmGetEscalationRuleStatus __imp_WinSqmGetInstrumentationProperty __imp_WinSqmIncrementDWORD __imp_WinSqmIsOptedIn __imp_WinSqmIsOptedInEx __imp_WinSqmIsSessionDisabled __imp_WinSqmSetDWORD __imp_WinSqmSetDWORD64 __imp_WinSqmSetEscalationInfo __imp_WinSqmSetIfMaxDWORD __imp_WinSqmSetIfMinDWORD __imp_WinSqmSetString __imp_WinSqmStartSession __imp_WinSqmStartSessionForPartner __imp_ZwAcceptConnectPort __imp_ZwAccessCheck __imp_ZwAccessCheckAndAuditAlarm __imp_ZwAccessCheckByType __imp_ZwAccessCheckByTypeAndAuditAlarm __imp_ZwAccessCheckByTypeResultList __imp_ZwAccessCheckByTypeResultListAndAuditAlarm __imp_ZwAccessCheckByTypeResultListAndAuditAlarmByHandle __imp_ZwAcquireCrossVmMutant __imp_ZwAcquireProcessActivityReference __imp_ZwAddAtom __imp_ZwAddAtomEx __imp_ZwAddBootEntry __imp_ZwAddDriverEntry __imp_ZwAdjustGroupsToken __imp_ZwAdjustPrivilegesToken __imp_ZwAdjustTokenClaimsAndDeviceGroups __imp_ZwAlertResumeThread __imp_ZwAlertThread __imp_ZwAlertThreadByThreadId __imp_ZwAllocateLocallyUniqueId __imp_ZwAllocateReserveObject __imp_ZwAllocateUserPhysicalPages __imp_ZwAllocateUserPhysicalPagesEx __imp_ZwAllocateUuids __imp_ZwAllocateVirtualMemory __imp_ZwAllocateVirtualMemoryEx __imp_ZwAlpcAcceptConnectPort __imp_ZwAlpcCancelMessage __imp_ZwAlpcConnectPort __imp_ZwAlpcConnectPortEx __imp_ZwAlpcCreatePort __imp_ZwAlpcCreatePortSection __imp_ZwAlpcCreateResourceReserve __imp_ZwAlpcCreateSectionView __imp_ZwAlpcCreateSecurityContext __imp_ZwAlpcDeletePortSection __imp_ZwAlpcDeleteResourceReserve __imp_ZwAlpcDeleteSectionView __imp_ZwAlpcDeleteSecurityContext __imp_ZwAlpcDisconnectPort __imp_ZwAlpcImpersonateClientContainerOfPort __imp_ZwAlpcImpersonateClientOfPort __imp_ZwAlpcOpenSenderProcess __imp_ZwAlpcOpenSenderThread __imp_ZwAlpcQueryInformation __imp_ZwAlpcQueryInformationMessage __imp_ZwAlpcRevokeSecurityContext __imp_ZwAlpcSendWaitReceivePort __imp_ZwAlpcSetInformation __imp_ZwApphelpCacheControl __imp_ZwAreMappedFilesTheSame __imp_ZwAssignProcessToJobObject __imp_ZwAssociateWaitCompletionPacket __imp_ZwCallEnclave __imp_ZwCallbackReturn __imp_ZwCancelIoFile __imp_ZwCancelIoFileEx __imp_ZwCancelSynchronousIoFile __imp_ZwCancelTimer __imp_ZwCancelTimer2 __imp_ZwCancelWaitCompletionPacket __imp_ZwClearEvent __imp_ZwClose __imp_ZwCloseObjectAuditAlarm __imp_ZwCommitComplete __imp_ZwCommitEnlistment __imp_ZwCommitRegistryTransaction __imp_ZwCommitTransaction __imp_ZwCompactKeys __imp_ZwCompareObjects __imp_ZwCompareSigningLevels __imp_ZwCompareTokens __imp_ZwCompleteConnectPort __imp_ZwCompressKey __imp_ZwConnectPort __imp_ZwContinue __imp_ZwContinueEx __imp_ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter __imp_ZwCreateCrossVmEvent __imp_ZwCreateCrossVmMutant __imp_ZwCreateDebugObject __imp_ZwCreateDirectoryObject __imp_ZwCreateDirectoryObjectEx __imp_ZwCreateEnclave __imp_ZwCreateEnlistment __imp_ZwCreateEvent __imp_ZwCreateEventPair __imp_ZwCreateFile __imp_ZwCreateIRTimer __imp_ZwCreateIoCompletion __imp_ZwCreateJobObject __imp_ZwCreateJobSet __imp_ZwCreateKey __imp_ZwCreateKeyTransacted __imp_ZwCreateKeyedEvent __imp_ZwCreateLowBoxToken __imp_ZwCreateMailslotFile __imp_ZwCreateMutant __imp_ZwCreateNamedPipeFile __imp_ZwCreatePagingFile __imp_ZwCreatePartition __imp_ZwCreatePort __imp_ZwCreatePrivateNamespace __imp_ZwCreateProcess __imp_ZwCreateProcessEx __imp_ZwCreateProfile __imp_ZwCreateProfileEx __imp_ZwCreateRegistryTransaction __imp_ZwCreateResourceManager __imp_ZwCreateSection __imp_ZwCreateSectionEx __imp_ZwCreateSemaphore __imp_ZwCreateSymbolicLinkObject __imp_ZwCreateThread __imp_ZwCreateThreadEx __imp_ZwCreateTimer __imp_ZwCreateTimer2 __imp_ZwCreateToken __imp_ZwCreateTokenEx __imp_ZwCreateTransaction __imp_ZwCreateTransactionManager __imp_ZwCreateUserProcess __imp_ZwCreateWaitCompletionPacket __imp_ZwCreateWaitablePort __imp_ZwCreateWnfStateName __imp_ZwCreateWorkerFactory __imp_ZwDebugActiveProcess __imp_ZwDebugContinue __imp_ZwDelayExecution __imp_ZwDeleteAtom __imp_ZwDeleteBootEntry __imp_ZwDeleteDriverEntry __imp_ZwDeleteFile __imp_ZwDeleteKey __imp_ZwDeleteObjectAuditAlarm __imp_ZwDeletePrivateNamespace __imp_ZwDeleteValueKey __imp_ZwDeleteWnfStateData __imp_ZwDeleteWnfStateName __imp_ZwDeviceIoControlFile __imp_ZwDirectGraphicsCall __imp_ZwDisableLastKnownGood __imp_ZwDisplayString __imp_ZwDrawText __imp_ZwDuplicateObject __imp_ZwDuplicateToken __imp_ZwEnableLastKnownGood __imp_ZwEnumerateBootEntries __imp_ZwEnumerateDriverEntries __imp_ZwEnumerateKey __imp_ZwEnumerateSystemEnvironmentValuesEx __imp_ZwEnumerateTransactionObject __imp_ZwEnumerateValueKey __imp_ZwExtendSection __imp_ZwFilterBootOption __imp_ZwFilterToken __imp_ZwFilterTokenEx __imp_ZwFindAtom __imp_ZwFlushBuffersFile __imp_ZwFlushBuffersFileEx __imp_ZwFlushInstallUILanguage __imp_ZwFlushInstructionCache __imp_ZwFlushKey __imp_ZwFlushProcessWriteBuffers __imp_ZwFlushVirtualMemory __imp_ZwFlushWriteBuffer __imp_ZwFreeUserPhysicalPages __imp_ZwFreeVirtualMemory __imp_ZwFreezeRegistry __imp_ZwFreezeTransactions __imp_ZwFsControlFile __imp_ZwGetCachedSigningLevel __imp_ZwGetCompleteWnfStateSubscription __imp_ZwGetContextThread __imp_ZwGetCurrentProcessorNumber __imp_ZwGetCurrentProcessorNumberEx __imp_ZwGetDevicePowerState __imp_ZwGetMUIRegistryInfo __imp_ZwGetNextProcess __imp_ZwGetNextThread __imp_ZwGetNlsSectionPtr __imp_ZwGetNotificationResourceManager __imp_ZwGetWriteWatch __imp_ZwImpersonateAnonymousToken __imp_ZwImpersonateClientOfPort __imp_ZwImpersonateThread __imp_ZwInitializeEnclave __imp_ZwInitializeNlsFiles __imp_ZwInitializeRegistry __imp_ZwInitiatePowerAction __imp_ZwIsProcessInJob __imp_ZwIsSystemResumeAutomatic __imp_ZwIsUILanguageComitted __imp_ZwListenPort __imp_ZwLoadDriver __imp_ZwLoadEnclaveData __imp_ZwLoadKey __imp_ZwLoadKey2 __imp_ZwLoadKey3 __imp_ZwLoadKeyEx __imp_ZwLockFile __imp_ZwLockProductActivationKeys __imp_ZwLockRegistryKey __imp_ZwLockVirtualMemory __imp_ZwMakePermanentObject __imp_ZwMakeTemporaryObject __imp_ZwManageHotPatch __imp_ZwManagePartition __imp_ZwMapCMFModule __imp_ZwMapUserPhysicalPages __imp_ZwMapUserPhysicalPagesScatter __imp_ZwMapViewOfSection __imp_ZwMapViewOfSectionEx __imp_ZwModifyBootEntry __imp_ZwModifyDriverEntry __imp_ZwNotifyChangeDirectoryFile __imp_ZwNotifyChangeDirectoryFileEx __imp_ZwNotifyChangeKey __imp_ZwNotifyChangeMultipleKeys __imp_ZwNotifyChangeSession __imp_ZwOpenDirectoryObject __imp_ZwOpenEnlistment __imp_ZwOpenEvent __imp_ZwOpenEventPair __imp_ZwOpenFile __imp_ZwOpenIoCompletion __imp_ZwOpenJobObject __imp_ZwOpenKey __imp_ZwOpenKeyEx __imp_ZwOpenKeyTransacted __imp_ZwOpenKeyTransactedEx __imp_ZwOpenKeyedEvent __imp_ZwOpenMutant __imp_ZwOpenObjectAuditAlarm __imp_ZwOpenPartition __imp_ZwOpenPrivateNamespace __imp_ZwOpenProcess __imp_ZwOpenProcessToken __imp_ZwOpenProcessTokenEx __imp_ZwOpenRegistryTransaction __imp_ZwOpenResourceManager __imp_ZwOpenSection __imp_ZwOpenSemaphore __imp_ZwOpenSession __imp_ZwOpenSymbolicLinkObject __imp_ZwOpenThread __imp_ZwOpenThreadToken __imp_ZwOpenThreadTokenEx __imp_ZwOpenTimer __imp_ZwOpenTransaction __imp_ZwOpenTransactionManager __imp_ZwPlugPlayControl __imp_ZwPowerInformation __imp_ZwPrePrepareComplete __imp_ZwPrePrepareEnlistment __imp_ZwPrepareComplete __imp_ZwPrepareEnlistment __imp_ZwPrivilegeCheck __imp_ZwPrivilegeObjectAuditAlarm __imp_ZwPrivilegedServiceAuditAlarm __imp_ZwPropagationComplete __imp_ZwPropagationFailed __imp_ZwProtectVirtualMemory __imp_ZwPssCaptureVaSpaceBulk __imp_ZwPulseEvent __imp_ZwQueryAttributesFile __imp_ZwQueryAuxiliaryCounterFrequency __imp_ZwQueryBootEntryOrder __imp_ZwQueryBootOptions __imp_ZwQueryDebugFilterState __imp_ZwQueryDefaultLocale __imp_ZwQueryDefaultUILanguage __imp_ZwQueryDirectoryFile __imp_ZwQueryDirectoryFileEx __imp_ZwQueryDirectoryObject __imp_ZwQueryDriverEntryOrder __imp_ZwQueryEaFile __imp_ZwQueryEvent __imp_ZwQueryFullAttributesFile __imp_ZwQueryInformationAtom __imp_ZwQueryInformationByName __imp_ZwQueryInformationEnlistment __imp_ZwQueryInformationFile __imp_ZwQueryInformationJobObject __imp_ZwQueryInformationPort __imp_ZwQueryInformationProcess __imp_ZwQueryInformationResourceManager __imp_ZwQueryInformationThread __imp_ZwQueryInformationToken __imp_ZwQueryInformationTransaction __imp_ZwQueryInformationTransactionManager __imp_ZwQueryInformationWorkerFactory __imp_ZwQueryInstallUILanguage __imp_ZwQueryIntervalProfile __imp_ZwQueryIoCompletion __imp_ZwQueryKey __imp_ZwQueryLicenseValue __imp_ZwQueryMultipleValueKey __imp_ZwQueryMutant __imp_ZwQueryObject __imp_ZwQueryOpenSubKeys __imp_ZwQueryOpenSubKeysEx __imp_ZwQueryPerformanceCounter __imp_ZwQueryPortInformationProcess __imp_ZwQueryQuotaInformationFile __imp_ZwQuerySection __imp_ZwQuerySecurityAttributesToken __imp_ZwQuerySecurityObject __imp_ZwQuerySecurityPolicy __imp_ZwQuerySemaphore __imp_ZwQuerySymbolicLinkObject __imp_ZwQuerySystemEnvironmentValue __imp_ZwQuerySystemEnvironmentValueEx __imp_ZwQuerySystemInformation __imp_ZwQuerySystemInformationEx __imp_ZwQuerySystemTime __imp_ZwQueryTimer __imp_ZwQueryTimerResolution __imp_ZwQueryValueKey __imp_ZwQueryVirtualMemory __imp_ZwQueryVolumeInformationFile __imp_ZwQueryWnfStateData __imp_ZwQueryWnfStateNameInformation __imp_ZwQueueApcThread __imp_ZwQueueApcThreadEx __imp_ZwRaiseException __imp_ZwRaiseHardError __imp_ZwReadFile __imp_ZwReadFileScatter __imp_ZwReadOnlyEnlistment __imp_ZwReadRequestData __imp_ZwReadVirtualMemory __imp_ZwRecoverEnlistment __imp_ZwRecoverResourceManager __imp_ZwRecoverTransactionManager __imp_ZwRegisterProtocolAddressInformation __imp_ZwRegisterThreadTerminatePort __imp_ZwReleaseKeyedEvent __imp_ZwReleaseMutant __imp_ZwReleaseSemaphore __imp_ZwReleaseWorkerFactoryWorker __imp_ZwRemoveIoCompletion __imp_ZwRemoveIoCompletionEx __imp_ZwRemoveProcessDebug __imp_ZwRenameKey __imp_ZwRenameTransactionManager __imp_ZwReplaceKey __imp_ZwReplacePartitionUnit __imp_ZwReplyPort __imp_ZwReplyWaitReceivePort __imp_ZwReplyWaitReceivePortEx __imp_ZwReplyWaitReplyPort __imp_ZwRequestPort __imp_ZwRequestWaitReplyPort __imp_ZwResetEvent __imp_ZwResetWriteWatch __imp_ZwRestoreKey __imp_ZwResumeProcess __imp_ZwResumeThread __imp_ZwRevertContainerImpersonation __imp_ZwRollbackComplete __imp_ZwRollbackEnlistment __imp_ZwRollbackRegistryTransaction __imp_ZwRollbackTransaction __imp_ZwRollforwardTransactionManager __imp_ZwSaveKey __imp_ZwSaveKeyEx __imp_ZwSaveMergedKeys __imp_ZwSecureConnectPort __imp_ZwSerializeBoot __imp_ZwSetBootEntryOrder __imp_ZwSetBootOptions __imp_ZwSetCachedSigningLevel __imp_ZwSetCachedSigningLevel2 __imp_ZwSetContextThread __imp_ZwSetDebugFilterState __imp_ZwSetDefaultHardErrorPort __imp_ZwSetDefaultLocale __imp_ZwSetDefaultUILanguage __imp_ZwSetDriverEntryOrder __imp_ZwSetEaFile __imp_ZwSetEvent __imp_ZwSetEventBoostPriority __imp_ZwSetHighEventPair __imp_ZwSetHighWaitLowEventPair __imp_ZwSetIRTimer __imp_ZwSetInformationDebugObject __imp_ZwSetInformationEnlistment __imp_ZwSetInformationFile __imp_ZwSetInformationJobObject __imp_ZwSetInformationKey __imp_ZwSetInformationObject __imp_ZwSetInformationProcess __imp_ZwSetInformationResourceManager __imp_ZwSetInformationSymbolicLink __imp_ZwSetInformationThread __imp_ZwSetInformationToken __imp_ZwSetInformationTransaction __imp_ZwSetInformationTransactionManager __imp_ZwSetInformationVirtualMemory __imp_ZwSetInformationWorkerFactory __imp_ZwSetIntervalProfile __imp_ZwSetIoCompletion __imp_ZwSetIoCompletionEx __imp_ZwSetLdtEntries __imp_ZwSetLowEventPair __imp_ZwSetLowWaitHighEventPair __imp_ZwSetQuotaInformationFile __imp_ZwSetSecurityObject __imp_ZwSetSystemEnvironmentValue __imp_ZwSetSystemEnvironmentValueEx __imp_ZwSetSystemInformation __imp_ZwSetSystemPowerState __imp_ZwSetSystemTime __imp_ZwSetThreadExecutionState __imp_ZwSetTimer __imp_ZwSetTimer2 __imp_ZwSetTimerEx __imp_ZwSetTimerResolution __imp_ZwSetUuidSeed __imp_ZwSetValueKey __imp_ZwSetVolumeInformationFile __imp_ZwSetWnfProcessNotificationEvent __imp_ZwShutdownSystem __imp_ZwShutdownWorkerFactory __imp_ZwSignalAndWaitForSingleObject __imp_ZwSinglePhaseReject __imp_ZwStartProfile __imp_ZwStopProfile __imp_ZwSubscribeWnfStateChange __imp_ZwSuspendProcess __imp_ZwSuspendThread __imp_ZwSystemDebugControl __imp_ZwTerminateEnclave __imp_ZwTerminateJobObject __imp_ZwTerminateProcess __imp_ZwTerminateThread __imp_ZwTestAlert __imp_ZwThawRegistry __imp_ZwThawTransactions __imp_ZwTraceControl __imp_ZwTraceEvent __imp_ZwTranslateFilePath __imp_ZwUmsThreadYield __imp_ZwUnloadDriver __imp_ZwUnloadKey __imp_ZwUnloadKey2 __imp_ZwUnloadKeyEx __imp_ZwUnlockFile __imp_ZwUnlockVirtualMemory __imp_ZwUnmapViewOfSection __imp_ZwUnmapViewOfSectionEx __imp_ZwUnsubscribeWnfStateChange __imp_ZwUpdateWnfStateData __imp_ZwVdmControl __imp_ZwWaitForAlertByThreadId __imp_ZwWaitForDebugEvent __imp_ZwWaitForKeyedEvent __imp_ZwWaitForMultipleObjects __imp_ZwWaitForMultipleObjects32 __imp_ZwWaitForSingleObject __imp_ZwWaitForWorkViaWorkerFactory __imp_ZwWaitHighEventPair __imp_ZwWaitLowEventPair __imp_ZwWorkerFactoryWorkerReady __imp_ZwWriteFile __imp_ZwWriteFileGather __imp_ZwWriteRequestData __imp_ZwWriteVirtualMemory __imp_ZwYieldExecution __imp_vDbgPrintEx __imp_vDbgPrintExWithPrefix vDbgPrintEx vDbgPrintExWithPrefix ntdll_NULL_THUNK_DATA ntdll.dll/ -1 0 485 `
� 6�� .debug$S ? � @ B.idata$2 � � @ 0�.idata$6
� � @ � ntdll.dll' � kMicrosoft (R) LINK ntdll.dll @comp.idk�� .idata$2@ � h .idata$6 .idata$4@ � h .idata$5@ � h 7 N __IMPORT_DESCRIPTOR_ntdll __NULL_IMPORT_DESCRIPTOR ntdll_NULL_THUNK_DATA
ntdll.dll/ -1 0 248 `
� ;ޅ� .debug$S ? d @ B.idata$3 � @ 0� ntdll.dll' � kMicrosoft (R) LINK @comp.idk�� __NULL_IMPORT_DESCRIPTOR ntdll.dll/ -1 0 274 `
� J��� .debug$S ? � @ B.idata$5 � @ 0�.idata$4 � @ 0� ntdll.dll' � kMicrosoft (R) LINK @comp.idk�� ntdll_NULL_THUNK_DATA ntdll.dll/ -1 0 71 `
�� �A9�3 AlpcAdjustCompletionListConcurrencyCount ntdll.dll
ntdll.dll/ -1 0 60 `
�� ����( AlpcFreeCompletionListMessage ntdll.dll ntdll.dll/ -1 0 74 `
�� �V�`�6 AlpcGetCompletionListLastMessageInformation ntdll.dll ntdll.dll/ -1 0 69 `
�� ��N��1 AlpcGetCompletionListMessageAttributes ntdll.dll
ntdll.dll/ -1 0 48 `
�� ���e� AlpcGetHeaderSize ntdll.dll ntdll.dll/ -1 0 54 `
�� ���,�" AlpcGetMessageAttribute ntdll.dll ntdll.dll/ -1 0 63 `
�� ��~+�+ AlpcGetMessageFromCompletionList ntdll.dll
ntdll.dll/ -1 0 75 `
�� ���7
AlpcGetOutstandingCompletionListMessageCount ntdll.dll
ntdll.dll/ -1 0 61 `
�� �9b�) AlpcInitializeMessageAttribute ntdll.dll
ntdll.dll/ -1 0 58 `
�� �o� �& AlpcMaxAllowedMessageLength ntdll.dll ntdll.dll/ -1 0 57 `
�� ����%
AlpcRegisterCompletionList ntdll.dll
ntdll.dll/ -1 0 69 `
�� �MI�1 AlpcRegisterCompletionListWorkerThread ntdll.dll
ntdll.dll/ -1 0 56 `
�� �5M��$ AlpcRundownCompletionList ntdll.dll ntdll.dll/ -1 0 59 `
�� ��@��' AlpcUnregisterCompletionList ntdll.dll
ntdll.dll/ -1 0 71 `
�� �Z���3 AlpcUnregisterCompletionListWorkerThread ntdll.dll
ntdll.dll/ -1 0 55 `
�� �d��# CsrAllocateCaptureBuffer ntdll.dll
ntdll.dll/ -1 0 56 `
�� � ��$ CsrAllocateMessagePointer ntdll.dll ntdll.dll/ -1 0 54 `
�� ���.�" CsrCaptureMessageBuffer ntdll.dll ntdll.dll/ -1 0 74 `
�� ��S��6 CsrCaptureMessageMultiUnicodeStringsInPlace ntdll.dll ntdll.dll/ -1 0 54 `
�� �����" CsrCaptureMessageString ntdll.dll ntdll.dll/ -1 0 48 `
�� ��p�� CsrCaptureTimeout ntdll.dll ntdll.dll/ -1 0 50 `
�� �r��� CsrClientCallServer ntdll.dll ntdll.dll/ -1 0 55 `
�� ��x}�# CsrClientConnectToServer ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��� CsrFreeCaptureBuffer ntdll.dll
ntdll.dll/ -1 0 46 `
�� �Q��� CsrGetProcessId ntdll.dll ntdll.dll/ -1 0 57 `
�� ��r��% CsrIdentifyAlertableThread ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��vj� CsrSetPriorityClass ntdll.dll ntdll.dll/ -1 0 46 `
�� �/P�� CsrVerifyRegion ntdll.dll ntdll.dll/ -1 0 44 `
�� ���{� ! DbgBreakPoint ntdll.dll ntdll.dll/ -1 0 39 `
�� �C�B� " DbgPrint ntdll.dll
ntdll.dll/ -1 0 41 `
�� �aH8� # DbgPrintEx ntdll.dll
ntdll.dll/ -1 0 53 `
�� �a0��! $ DbgPrintReturnControlC ntdll.dll
ntdll.dll/ -1 0 40 `
�� ��h:� % DbgPrompt ntdll.dll ntdll.dll/ -1 0 55 `
�� ���$�# & DbgQueryDebugFilterState ntdll.dll
ntdll.dll/ -1 0 53 `
�� �Ua!�! ' DbgSetDebugFilterState ntdll.dll
ntdll.dll/ -1 0 48 `
�� ���� ( DbgUiConnectToDbg ntdll.dll ntdll.dll/ -1 0 44 `
�� �� � ) DbgUiContinue ntdll.dll ntdll.dll/ -1 0 63 `
�� ���e�+ * DbgUiConvertStateChangeStructure ntdll.dll
ntdll.dll/ -1 0 65 `
�� ����- + DbgUiConvertStateChangeStructureEx ntdll.dll
ntdll.dll/ -1 0 54 `
�� �]=,�" , DbgUiDebugActiveProcess ntdll.dll ntdll.dll/ -1 0 56 `
�� ����$ - DbgUiGetThreadDebugObject ntdll.dll ntdll.dll/ -1 0 54 `
�� �Ԍ3�" . DbgUiIssueRemoteBreakin ntdll.dll ntdll.dll/ -1 0 49 `
�� ��W5� / DbgUiRemoteBreakin ntdll.dll
ntdll.dll/ -1 0 56 `
�� �����$ 0 DbgUiSetThreadDebugObject ntdll.dll ntdll.dll/ -1 0 49 `
�� �Dp�� 1 DbgUiStopDebugging ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��T$� 2 DbgUiWaitStateChange ntdll.dll
ntdll.dll/ -1 0 48 `
�� �MKY� 3 DbgUserBreakPoint ntdll.dll ntdll.dll/ -1 0 47 `
�� �� �� 4 EtwCheckCoverage ntdll.dll
ntdll.dll/ -1 0 55 `
�� �@L��# 5 EtwCreateTraceInstanceId ntdll.dll
ntdll.dll/ -1 0 50 `
�� � �2� 6 EtwDeliverDataBlock ntdll.dll ntdll.dll/ -1 0 58 `
�� �W%��& 7 EtwEnumerateProcessRegGuids ntdll.dll ntdll.dll/ -1 0 56 `
�� ��`��$ 8 EtwEventActivityIdControl ntdll.dll ntdll.dll/ -1 0 46 `
�� ���� 9 EtwEventEnabled ntdll.dll ntdll.dll/ -1 0 54 `
�� ��]��" : EtwEventProviderEnabled ntdll.dll ntdll.dll/ -1 0 47 `
�� �e ~� ; EtwEventRegister ntdll.dll
ntdll.dll/ -1 0 53 `
�� ���n�! < EtwEventSetInformation ntdll.dll
ntdll.dll/ -1 0 49 `
�� ��Q� = EtwEventUnregister ntdll.dll
ntdll.dll/ -1 0 44 `
�� �;��� > EtwEventWrite ntdll.dll ntdll.dll/ -1 0 55 `
�� �)���# ? EtwEventWriteEndScenario ntdll.dll
ntdll.dll/ -1 0 46 `
�� �
��� @ EtwEventWriteEx ntdll.dll ntdll.dll/ -1 0 48 `
�� �Xh� A EtwEventWriteFull ntdll.dll ntdll.dll/ -1 0 58 `
�� �xȿ�& B EtwEventWriteNoRegistration ntdll.dll ntdll.dll/ -1 0 57 `
�� ��q�% C EtwEventWriteStartScenario ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��ٵ� D EtwEventWriteString ntdll.dll ntdll.dll/ -1 0 52 `
�� �8i�� E EtwEventWriteTransfer ntdll.dll ntdll.dll/ -1 0 53 `
�� �I�n�! F EtwGetTraceEnableFlags ntdll.dll
ntdll.dll/ -1 0 53 `
�� ����! G EtwGetTraceEnableLevel ntdll.dll
ntdll.dll/ -1 0 54 `
�� �,o��" H EtwGetTraceLoggerHandle ntdll.dll ntdll.dll/ -1 0 47 `
�� ��n� I EtwLogTraceEvent ntdll.dll
ntdll.dll/ -1 0 54 `
�� ��v��" J EtwNotificationRegister ntdll.dll ntdll.dll/ -1 0 56 `
�� �|�U�$ K EtwNotificationUnregister ntdll.dll ntdll.dll/ -1 0 61 `
�� ��?�) L EtwProcessPrivateLoggerRequest ntdll.dll
ntdll.dll/ -1 0 58 `
�� �H!��& M EtwRegisterSecurityProvider ntdll.dll ntdll.dll/ -1 0 53 `
�� �����! N EtwRegisterTraceGuidsA ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��"2�! O EtwRegisterTraceGuidsW ntdll.dll
ntdll.dll/ -1 0 51 `
�� �� 1� P EtwReplyNotification ntdll.dll
ntdll.dll/ -1 0 50 `
�� ���� Q EtwSendNotification ntdll.dll ntdll.dll/ -1 0 52 `
�� �k,�� S EtwTraceEventInstance ntdll.dll ntdll.dll/ -1 0 46 `
�� �>7�� T EtwTraceMessage ntdll.dll ntdll.dll/ -1 0 48 `
�� ��9 � U EtwTraceMessageVa ntdll.dll ntdll.dll/ -1 0 54 `
�� �k},�" V EtwUnregisterTraceGuids ntdll.dll ntdll.dll/ -1 0 54 `
�� � Y��" W EtwWriteUMSecurityEvent ntdll.dll ntdll.dll/ -1 0 50 `
�� ����� X EtwpCreateEtwThread ntdll.dll ntdll.dll/ -1 0 46 `
�� �;�� Y EtwpGetCpuSpeed ntdll.dll ntdll.dll/ -1 0 67 `
�� ����/ Z EvtIntReportAuthzEventAndSourceAsync ntdll.dll
ntdll.dll/ -1 0 62 `
�� �FǨ�* [ EvtIntReportEventAndSourceAsync ntdll.dll ntdll.dll/ -1 0 58 `
�� �f��& d KiUserInvertedFunctionTable ntdll.dll ntdll.dll/ -1 0 48 `
�� ��a�� e LdrAccessResource ntdll.dll ntdll.dll/ -1 0 49 `
�� ���q� f LdrAddDllDirectory ntdll.dll
ntdll.dll/ -1 0 52 `
�� ���� g LdrAddLoadAsDataTable ntdll.dll ntdll.dll/ -1 0 43 `
�� �p�� h LdrAddRefDll ntdll.dll
ntdll.dll/ -1 0 60 `
�� ��L�( i LdrAppxHandleIntegrityFailure ntdll.dll ntdll.dll/ -1 0 45 `
�� �E��� j LdrCallEnclave ntdll.dll
ntdll.dll/ -1 0 47 `
�� ��2� l LdrCreateEnclave ntdll.dll
ntdll.dll/ -1 0 47 `
�� ���h� m LdrDeleteEnclave ntdll.dll
ntdll.dll/ -1 0 61 `
�� �/��) n LdrDisableThreadCalloutsForDll ntdll.dll
ntdll.dll/ -1 0 47 `
�� ��
�� o LdrEnumResources ntdll.dll
ntdll.dll/ -1 0 56 `
�� �۬D�$ p LdrEnumerateLoadedModules ntdll.dll ntdll.dll/ -1 0 57 `
�� �����% q LdrFastFailInLoaderCallout ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��w�! r LdrFindEntryForAddress ntdll.dll
ntdll.dll/ -1 0 57 `
�� ���6�% s LdrFindResourceDirectory_U ntdll.dll
ntdll.dll/ -1 0 50 `
�� ���%� t LdrFindResourceEx_U ntdll.dll ntdll.dll/ -1 0 48 `
�� ��}� u LdrFindResource_U ntdll.dll ntdll.dll/ -1 0 63 `
�� ��W��+ v LdrFlushAlternateResourceModules ntdll.dll
ntdll.dll/ -1 0 49 `
�� ���V� w LdrGetDllDirectory ntdll.dll
ntdll.dll/ -1 0 48 `
�� �<K�� x LdrGetDllFullName ntdll.dll ntdll.dll/ -1 0 46 `
�� ����� y LdrGetDllHandle ntdll.dll ntdll.dll/ -1 0 55 `
�� ���M�# z LdrGetDllHandleByMapping ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��� { LdrGetDllHandleByName ntdll.dll ntdll.dll/ -1 0 48 `
�� �ŷ�� | LdrGetDllHandleEx ntdll.dll ntdll.dll/ -1 0 44 `
�� � � } LdrGetDllPath ntdll.dll ntdll.dll/ -1 0 64 `
�� ���`�, LdrGetFileNameFromLoadAsDataTable ntdll.dll ntdll.dll/ -1 0 53 `
�� �B�! � LdrGetProcedureAddress ntdll.dll
ntdll.dll/ -1 0 55 `
�� �X��# � LdrGetProcedureAddressEx ntdll.dll
ntdll.dll/ -1 0 62 `
�� � �F�* � LdrGetProcedureAddressForCaller ntdll.dll ntdll.dll/ -1 0 55 `
�� ��o��# � LdrInitShimEngineDynamic ntdll.dll
ntdll.dll/ -1 0 51 `
�� �t��� � LdrInitializeEnclave ntdll.dll
ntdll.dll/ -1 0 55 `
�� ���# � LdrIsModuleSxsRedirected ntdll.dll
ntdll.dll/ -1 0 61 `
�� �|���) � LdrLoadAlternateResourceModule ntdll.dll
ntdll.dll/ -1 0 63 `
�� �䄱�+ � LdrLoadAlternateResourceModuleEx ntdll.dll
ntdll.dll/ -1 0 41 `
�� �x�� � LdrLoadDll ntdll.dll
ntdll.dll/ -1 0 51 `
�� �� �� � LdrLoadEnclaveModule ntdll.dll
ntdll.dll/ -1 0 48 `
�� ��� � LdrLockLoaderLock ntdll.dll ntdll.dll/ -1 0 57 `
�� �s�H�% � LdrOpenImageFileOptionsKey ntdll.dll
ntdll.dll/ -1 0 56 `
�� �|.�$ � LdrProcessRelocationBlock ntdll.dll ntdll.dll/ -1 0 58 `
�� �0���& � LdrProcessRelocationBlockEx ntdll.dll ntdll.dll/ -1 0 64 `
�� �8*��, � LdrQueryImageFileExecutionOptions ntdll.dll ntdll.dll/ -1 0 66 `
�� ����. � LdrQueryImageFileExecutionOptionsEx ntdll.dll ntdll.dll/ -1 0 57 `
�� �6�D�% � LdrQueryImageFileKeyOption ntdll.dll
ntdll.dll/ -1 0 56 `
�� ��
��$ � LdrQueryModuleServiceTags ntdll.dll ntdll.dll/ -1 0 61 `
�� � ���) � LdrQueryOptionalDelayLoadedAPI ntdll.dll
ntdll.dll/ -1 0 63 `
�� ����+ � LdrQueryProcessModuleInformation ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��2 � � LdrRemoveDllDirectory ntdll.dll ntdll.dll/ -1 0 55 `
�� ��]��# � LdrRemoveLoadAsDataTable ntdll.dll
ntdll.dll/ -1 0 49 `
�� ���� � LdrResFindResource ntdll.dll
ntdll.dll/ -1 0 58 `
�� �MlC�& � LdrResFindResourceDirectory ntdll.dll ntdll.dll/ -1 0 44 `
�� ��(� � LdrResRelease ntdll.dll ntdll.dll/ -1 0 51 `
�� �j�
� � LdrResSearchResource ntdll.dll
ntdll.dll/ -1 0 55 `
�� ����# � LdrResolveDelayLoadedAPI ntdll.dll
ntdll.dll/ -1 0 58 `
�� � ��& � LdrResolveDelayLoadsFromDll ntdll.dll ntdll.dll/ -1 0 68 `
�� ���Z�0 � LdrSetAppCompatDllRedirectionCallback ntdll.dll ntdll.dll/ -1 0 58 `
�� ��1�& � LdrSetDefaultDllDirectories ntdll.dll ntdll.dll/ -1 0 49 `
�� ��� � LdrSetDllDirectory ntdll.dll
ntdll.dll/ -1 0 54 `
�� �9t��" � LdrSetDllManifestProber ntdll.dll ntdll.dll/ -1 0 49 `
�� ��я� � LdrSetMUICacheType ntdll.dll
ntdll.dll/ -1 0 49 `
�� �p ^� � LdrShutdownProcess ntdll.dll
ntdll.dll/ -1 0 48 `
�� �86� � LdrShutdownThread ntdll.dll ntdll.dll/ -1 0 52 `
�� ���� � LdrSystemDllInitBlock ntdll.dll ntdll.dll/ -1 0 63 `
�� �H]�+ � LdrUnloadAlternateResourceModule ntdll.dll
ntdll.dll/ -1 0 65 `
�� �,���- � LdrUnloadAlternateResourceModuleEx ntdll.dll
ntdll.dll/ -1 0 43 `
�� ��� � LdrUnloadDll ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��W�� � LdrUnlockLoaderLock ntdll.dll ntdll.dll/ -1 0 57 `
�� �V8c�% � LdrUpdatePackageSearchPath ntdll.dll
ntdll.dll/ -1 0 60 `
�� �˨;�( � LdrVerifyImageMatchesChecksum ntdll.dll ntdll.dll/ -1 0 62 `
�� �a��* � LdrVerifyImageMatchesChecksumEx ntdll.dll ntdll.dll/ -1 0 52 `
�� ��d�� � LdrpResGetMappingSize ntdll.dll ntdll.dll/ -1 0 58 `
�� ��(��& � LdrpResGetResourceDirectory ntdll.dll ntdll.dll/ -1 0 46 `
�� �]m� � NlsAnsiCodePage ntdll.dll ntdll.dll/ -1 0 47 `
�� ��'� � NlsMbCodePageTag ntdll.dll
ntdll.dll/ -1 0 50 `
�� ���� � NlsMbOemCodePageTag ntdll.dll ntdll.dll/ -1 0 50 `
�� �I� � � NtAcceptConnectPort ntdll.dll ntdll.dll/ -1 0 44 `
�� ��{� � NtAccessCheck ntdll.dll ntdll.dll/ -1 0 57 `
�� �Cr�% � NtAccessCheckAndAuditAlarm ntdll.dll
ntdll.dll/ -1 0 50 `
�� ����� � NtAccessCheckByType ntdll.dll ntdll.dll/ -1 0 63 `
�� ����+ � NtAccessCheckByTypeAndAuditAlarm ntdll.dll
ntdll.dll/ -1 0 60 `
�� �e���( � NtAccessCheckByTypeResultList ntdll.dll ntdll.dll/ -1 0 73 `
�� �W��5 � NtAccessCheckByTypeResultListAndAuditAlarm ntdll.dll
ntdll.dll/ -1 0 81 `
�� �%���= � NtAccessCheckByTypeResultListAndAuditAlarmByHandle ntdll.dll
ntdll.dll/ -1 0 53 `
�� �;
�! � NtAcquireCrossVmMutant ntdll.dll
ntdll.dll/ -1 0 64 `
�� ����, � NtAcquireProcessActivityReference ntdll.dll ntdll.dll/ -1 0 40 `
�� �^�J� � NtAddAtom ntdll.dll ntdll.dll/ -1 0 42 `
�� �5��� � NtAddAtomEx ntdll.dll ntdll.dll/ -1 0 45 `
�� �W�� � NtAddBootEntry ntdll.dll
ntdll.dll/ -1 0 47 `
�� ����� � NtAddDriverEntry ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��@� � NtAdjustGroupsToken ntdll.dll ntdll.dll/ -1 0 54 `
�� �Z<�" � NtAdjustPrivilegesToken ntdll.dll ntdll.dll/ -1 0 65 `
�� ���8�- � NtAdjustTokenClaimsAndDeviceGroups ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��h9� � NtAlertResumeThread ntdll.dll ntdll.dll/ -1 0 44 `
�� ��^� � NtAlertThread ntdll.dll ntdll.dll/ -1 0 54 `
�� ��~n�" � NtAlertThreadByThreadId ntdll.dll ntdll.dll/ -1 0 56 `
�� � ��$ � NtAllocateLocallyUniqueId ntdll.dll ntdll.dll/ -1 0 54 `
�� ����" � NtAllocateReserveObject ntdll.dll ntdll.dll/ -1 0 58 `
�� ��C��& � NtAllocateUserPhysicalPages ntdll.dll ntdll.dll/ -1 0 60 `
�� �G^�( � NtAllocateUserPhysicalPagesEx ntdll.dll ntdll.dll/ -1 0 46 `
�� �R��� � NtAllocateUuids ntdll.dll ntdll.dll/ -1 0 54 `
�� � ��" � NtAllocateVirtualMemory ntdll.dll ntdll.dll/ -1 0 56 `
�� ����$ � NtAllocateVirtualMemoryEx ntdll.dll ntdll.dll/ -1 0 54 `
�� � !��" � NtAlpcAcceptConnectPort ntdll.dll ntdll.dll/ -1 0 50 `
�� �b� � � NtAlpcCancelMessage ntdll.dll ntdll.dll/ -1 0 48 `
�� �n=�� � NtAlpcConnectPort ntdll.dll ntdll.dll/ -1 0 50 `
�� �<�� � NtAlpcConnectPortEx ntdll.dll ntdll.dll/ -1 0 47 `
�� �L$�� � NtAlpcCreatePort ntdll.dll
ntdll.dll/ -1 0 54 `
�� �����" � NtAlpcCreatePortSection ntdll.dll ntdll.dll/ -1 0 58 `
�� �z� �& � NtAlpcCreateResourceReserve ntdll.dll ntdll.dll/ -1 0 54 `
�� ��`6�" � NtAlpcCreateSectionView ntdll.dll ntdll.dll/ -1 0 58 `
�� ��X��& � NtAlpcCreateSecurityContext ntdll.dll ntdll.dll/ -1 0 54 `
�� �� �" � NtAlpcDeletePortSection ntdll.dll ntdll.dll/ -1 0 58 `
�� ���#�& � NtAlpcDeleteResourceReserve ntdll.dll ntdll.dll/ -1 0 54 `
�� ���" � NtAlpcDeleteSectionView ntdll.dll ntdll.dll/ -1 0 58 `
�� ��<�& � NtAlpcDeleteSecurityContext ntdll.dll ntdll.dll/ -1 0 51 `
�� �~ !� � NtAlpcDisconnectPort ntdll.dll
ntdll.dll/ -1 0 69 `
�� ���S�1 � NtAlpcImpersonateClientContainerOfPort ntdll.dll
ntdll.dll/ -1 0 60 `
�� ��k�( � NtAlpcImpersonateClientOfPort ntdll.dll ntdll.dll/ -1 0 54 `
�� ��+�" � NtAlpcOpenSenderProcess ntdll.dll ntdll.dll/ -1 0 53 `
�� �R��! � NtAlpcOpenSenderThread ntdll.dll
ntdll.dll/ -1 0 53 `
�� �6#��! � NtAlpcQueryInformation ntdll.dll
ntdll.dll/ -1 0 60 `
�� �) �( � NtAlpcQueryInformationMessage ntdll.dll ntdll.dll/ -1 0 58 `
�� �B���& � NtAlpcRevokeSecurityContext ntdll.dll ntdll.dll/ -1 0 56 `
�� �O���$ � NtAlpcSendWaitReceivePort ntdll.dll ntdll.dll/ -1 0 51 `
�� �o1� � NtAlpcSetInformation ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��{�� � NtApphelpCacheControl ntdll.dll ntdll.dll/ -1 0 54 `
�� ���" � NtAreMappedFilesTheSame ntdll.dll ntdll.dll/ -1 0 57 `
�� �x���% � NtAssignProcessToJobObject ntdll.dll
ntdll.dll/ -1 0 62 `
�� �U�* � NtAssociateWaitCompletionPacket ntdll.dll ntdll.dll/ -1 0 44 `
�� �W �� � NtCallEnclave ntdll.dll ntdll.dll/ -1 0 47 `
�� ��4�� � NtCallbackReturn ntdll.dll
ntdll.dll/ -1 0 45 `
�� �( �� � NtCancelIoFile ntdll.dll
ntdll.dll/ -1 0 47 `
�� �X�� � NtCancelIoFileEx ntdll.dll
ntdll.dll/ -1 0 56 `
�� �Î[�$ � NtCancelSynchronousIoFile ntdll.dll ntdll.dll/ -1 0 44 `
�� �&�� � NtCancelTimer ntdll.dll ntdll.dll/ -1 0 45 `
�� ��D�� � NtCancelTimer2 ntdll.dll
ntdll.dll/ -1 0 59 `
�� �l��' � NtCancelWaitCompletionPacket ntdll.dll
ntdll.dll/ -1 0 43 `
�� �r��� � NtClearEvent ntdll.dll
ntdll.dll/ -1 0 38 `
�� �M�� � NtClose ntdll.dll ntdll.dll/ -1 0 54 `
�� ��j��" � NtCloseObjectAuditAlarm ntdll.dll ntdll.dll/ -1 0 47 `
�� �T4�� � NtCommitComplete ntdll.dll
ntdll.dll/ -1 0 49 `
�� �hti� � NtCommitEnlistment ntdll.dll
ntdll.dll/ -1 0 58 `
�� �����& NtCommitRegistryTransaction ntdll.dll ntdll.dll/ -1 0 50 `
�� ��� NtCommitTransaction ntdll.dll ntdll.dll/ -1 0 44 `
�� ����� NtCompactKeys ntdll.dll ntdll.dll/ -1 0 47 `
�� ��n�� NtCompareObjects ntdll.dll
ntdll.dll/ -1 0 53 `
�� �2��! NtCompareSigningLevels ntdll.dll
ntdll.dll/ -1 0 46 `
�� �&� NtCompareTokens ntdll.dll ntdll.dll/ -1 0 52 `
�� �Z�� NtCompleteConnectPort ntdll.dll ntdll.dll/ -1 0 44 `
�� ����� NtCompressKey ntdll.dll ntdll.dll/ -1 0 44 `
�� ��(� NtConnectPort ntdll.dll ntdll.dll/ -1 0 41 `
�� �T<� NtContinue ntdll.dll
ntdll.dll/ -1 0 43 `
�� �&q��
NtContinueEx ntdll.dll
ntdll.dll/ -1 0 84 `
�� �mZ��@ NtConvertBetweenAuxiliaryCounterAndPerformanceCounter ntdll.dll ntdll.dll/ -1 0 51 `
�� �E#
� NtCreateCrossVmEvent ntdll.dll
ntdll.dll/ -1 0 52 `
�� ���(�
NtCreateCrossVmMutant ntdll.dll ntdll.dll/ -1 0 50 `
�� ���:� NtCreateDebugObject ntdll.dll ntdll.dll/ -1 0 54 `
�� � ա�" NtCreateDirectoryObject ntdll.dll ntdll.dll/ -1 0 56 `
�� �j��$ NtCreateDirectoryObjectEx ntdll.dll ntdll.dll/ -1 0 46 `
�� ����� NtCreateEnclave ntdll.dll ntdll.dll/ -1 0 49 `
�� �'�� NtCreateEnlistment ntdll.dll
ntdll.dll/ -1 0 44 `
�� ��v� NtCreateEvent ntdll.dll ntdll.dll/ -1 0 48 `
�� ���?� NtCreateEventPair ntdll.dll ntdll.dll/ -1 0 43 `
�� ��4�� NtCreateFile ntdll.dll
ntdll.dll/ -1 0 46 `
�� �=�)� NtCreateIRTimer ntdll.dll ntdll.dll/ -1 0 51 `
�� ��ai� NtCreateIoCompletion ntdll.dll
ntdll.dll/ -1 0 48 `
�� �b$�� NtCreateJobObject ntdll.dll ntdll.dll/ -1 0 45 `
�� �!�?� NtCreateJobSet ntdll.dll
ntdll.dll/ -1 0 42 `
�� ��� NtCreateKey ntdll.dll ntdll.dll/ -1 0 52 `
�� ��,�� NtCreateKeyTransacted ntdll.dll ntdll.dll/ -1 0 49 `
�� ��� NtCreateKeyedEvent ntdll.dll
ntdll.dll/ -1 0 50 `
�� ���� NtCreateLowBoxToken ntdll.dll ntdll.dll/ -1 0 51 `
�� �-��� NtCreateMailslotFile ntdll.dll
ntdll.dll/ -1 0 45 `
�� ��_/� NtCreateMutant ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��z;� NtCreateNamedPipeFile ntdll.dll ntdll.dll/ -1 0 49 `
�� �I��� ! NtCreatePagingFile ntdll.dll
ntdll.dll/ -1 0 48 `
�� � �� " NtCreatePartition ntdll.dll ntdll.dll/ -1 0 43 `
�� �92E� # NtCreatePort ntdll.dll
ntdll.dll/ -1 0 55 `
�� ���# $ NtCreatePrivateNamespace ntdll.dll
ntdll.dll/ -1 0 46 `
�� �/ � % NtCreateProcess ntdll.dll ntdll.dll/ -1 0 48 `
�� ����� & NtCreateProcessEx ntdll.dll ntdll.dll/ -1 0 46 `
�� �� �� ' NtCreateProfile ntdll.dll ntdll.dll/ -1 0 48 `
�� ��r5� ( NtCreateProfileEx ntdll.dll ntdll.dll/ -1 0 58 `
�� ����& ) NtCreateRegistryTransaction ntdll.dll ntdll.dll/ -1 0 54 `
�� �����" * NtCreateResourceManager ntdll.dll ntdll.dll/ -1 0 46 `
�� �H�*� + NtCreateSection ntdll.dll ntdll.dll/ -1 0 48 `
�� ��Pr� , NtCreateSectionEx ntdll.dll ntdll.dll/ -1 0 48 `
�� ��+� - NtCreateSemaphore ntdll.dll ntdll.dll/ -1 0 57 `
�� �o ��% . NtCreateSymbolicLinkObject ntdll.dll
ntdll.dll/ -1 0 45 `
�� ��*/� / NtCreateThread ntdll.dll
ntdll.dll/ -1 0 47 `
�� ���h� 0 NtCreateThreadEx ntdll.dll
ntdll.dll/ -1 0 44 `
�� �A�^� 1 NtCreateTimer ntdll.dll ntdll.dll/ -1 0 45 `
�� �\'� 2 NtCreateTimer2 ntdll.dll
ntdll.dll/ -1 0 44 `
�� �#S�� 3 NtCreateToken ntdll.dll ntdll.dll/ -1 0 46 `
�� ���D� 4 NtCreateTokenEx ntdll.dll ntdll.dll/ -1 0 50 `
�� ��|� 5 NtCreateTransaction ntdll.dll ntdll.dll/ -1 0 57 `
�� �km�% 6 NtCreateTransactionManager ntdll.dll
ntdll.dll/ -1 0 50 `
�� ���� 7 NtCreateUserProcess ntdll.dll ntdll.dll/ -1 0 59 `
�� �Jy��' 8 NtCreateWaitCompletionPacket ntdll.dll
ntdll.dll/ -1 0 51 `
�� �kSn� 9 NtCreateWaitablePort ntdll.dll
ntdll.dll/ -1 0 51 `
�� ����� : NtCreateWnfStateName ntdll.dll
ntdll.dll/ -1 0 52 `
�� �4l� ; NtCreateWorkerFactory ntdll.dll ntdll.dll/ -1 0 51 `
�� ���6� < NtDebugActiveProcess ntdll.dll
ntdll.dll/ -1 0 46 `
�� �1.�� = NtDebugContinue ntdll.dll ntdll.dll/ -1 0 47 `
�� �{�,� > NtDelayExecution ntdll.dll
ntdll.dll/ -1 0 43 `
�� �1.� ? NtDeleteAtom ntdll.dll
ntdll.dll/ -1 0 48 `
�� ��^� @ NtDeleteBootEntry ntdll.dll ntdll.dll/ -1 0 50 `
�� �}��� A NtDeleteDriverEntry ntdll.dll ntdll.dll/ -1 0 43 `
�� �Z�� B NtDeleteFile ntdll.dll
ntdll.dll/ -1 0 42 `
�� �<�Z� C NtDeleteKey ntdll.dll ntdll.dll/ -1 0 55 `
�� �~���# D NtDeleteObjectAuditAlarm ntdll.dll
ntdll.dll/ -1 0 55 `
�� ����# E NtDeletePrivateNamespace ntdll.dll
ntdll.dll/ -1 0 47 `
�� ���� F NtDeleteValueKey ntdll.dll
ntdll.dll/ -1 0 51 `
�� ���c� G NtDeleteWnfStateData ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��)�� H NtDeleteWnfStateName ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��e�� I NtDeviceIoControlFile ntdll.dll ntdll.dll/ -1 0 51 `
�� ��a�� J NtDirectGraphicsCall ntdll.dll
ntdll.dll/ -1 0 53 `
�� �r���! K NtDisableLastKnownGood ntdll.dll
ntdll.dll/ -1 0 46 `
�� ��f� L NtDisplayString ntdll.dll ntdll.dll/ -1 0 41 `
�� ��� M NtDrawText ntdll.dll
ntdll.dll/ -1 0 48 `
�� �vI+� N NtDuplicateObject ntdll.dll ntdll.dll/ -1 0 47 `
�� ��do� O NtDuplicateToken ntdll.dll
ntdll.dll/ -1 0 52 `
�� ���3� P NtEnableLastKnownGood ntdll.dll ntdll.dll/ -1 0 53 `
�� ��g��! Q NtEnumerateBootEntries ntdll.dll
ntdll.dll/ -1 0 55 `
�� �9���# R NtEnumerateDriverEntries ntdll.dll
ntdll.dll/ -1 0 45 `
�� ��U�� S NtEnumerateKey ntdll.dll
ntdll.dll/ -1 0 67 `
�� ��~�/ T NtEnumerateSystemEnvironmentValuesEx ntdll.dll
ntdll.dll/ -1 0 59 `
�� ��M�' U NtEnumerateTransactionObject ntdll.dll
ntdll.dll/ -1 0 50 `
�� �Īr� V NtEnumerateValueKey ntdll.dll ntdll.dll/ -1 0 46 `
�� �9� W NtExtendSection ntdll.dll ntdll.dll/ -1 0 49 `
�� �H�� X NtFilterBootOption ntdll.dll
ntdll.dll/ -1 0 44 `
�� ���� Y NtFilterToken ntdll.dll ntdll.dll/ -1 0 46 `
�� ��Ni� Z NtFilterTokenEx ntdll.dll ntdll.dll/ -1 0 41 `
�� ��T� [ NtFindAtom ntdll.dll
ntdll.dll/ -1 0 49 `
�� ��Ŏ� \ NtFlushBuffersFile ntdll.dll
ntdll.dll/ -1 0 51 `
�� ����� ] NtFlushBuffersFileEx ntdll.dll
ntdll.dll/ -1 0 55 `
�� �4�M�# ^ NtFlushInstallUILanguage ntdll.dll
ntdll.dll/ -1 0 54 `
�� �^jg�" _ NtFlushInstructionCache ntdll.dll ntdll.dll/ -1 0 41 `
�� �C�J� ` NtFlushKey ntdll.dll
ntdll.dll/ -1 0 57 `
�� �(v��% a NtFlushProcessWriteBuffers ntdll.dll
ntdll.dll/ -1 0 51 `
�� �v�� b NtFlushVirtualMemory ntdll.dll
ntdll.dll/ -1 0 49 `
�� ��l� c NtFlushWriteBuffer ntdll.dll
ntdll.dll/ -1 0 54 `
�� �o�" d NtFreeUserPhysicalPages ntdll.dll ntdll.dll/ -1 0 50 `
�� ��C�� e NtFreeVirtualMemory ntdll.dll ntdll.dll/ -1 0 47 `
�� ��� f NtFreezeRegistry ntdll.dll
ntdll.dll/ -1 0 51 `
�� ���,� g NtFreezeTransactions ntdll.dll
ntdll.dll/ -1 0 46 `
�� �^�z� h NtFsControlFile ntdll.dll ntdll.dll/ -1 0 54 `
�� ��m�" i NtGetCachedSigningLevel ntdll.dll ntdll.dll/ -1 0 64 `
�� ����, j NtGetCompleteWnfStateSubscription ntdll.dll ntdll.dll/ -1 0 49 `
�� �3��� k NtGetContextThread ntdll.dll
ntdll.dll/ -1 0 58 `
�� ���L�& l NtGetCurrentProcessorNumber ntdll.dll ntdll.dll/ -1 0 60 `
�� ��[j�( m NtGetCurrentProcessorNumberEx ntdll.dll ntdll.dll/ -1 0 52 `
�� �W�� n NtGetDevicePowerState ntdll.dll ntdll.dll/ -1 0 51 `
�� �Ha@� o NtGetMUIRegistryInfo ntdll.dll
ntdll.dll/ -1 0 47 `
�� �Q;�� p NtGetNextProcess ntdll.dll
ntdll.dll/ -1 0 46 `
�� ����� q NtGetNextThread ntdll.dll ntdll.dll/ -1 0 49 `
�� � �� r NtGetNlsSectionPtr ntdll.dll
ntdll.dll/ -1 0 63 `
�� �?x��+ s NtGetNotificationResourceManager ntdll.dll
ntdll.dll/ -1 0 45 `
�� ���*� t NtGetTickCount ntdll.dll
ntdll.dll/ -1 0 46 `
�� ��� u NtGetWriteWatch ntdll.dll ntdll.dll/ -1 0 58 `
�� ��P��& v NtImpersonateAnonymousToken ntdll.dll ntdll.dll/ -1 0 56 `
�� �rѝ�$ w NtImpersonateClientOfPort ntdll.dll ntdll.dll/ -1 0 50 `
�� ��� � x NtImpersonateThread ntdll.dll ntdll.dll/ -1 0 50 `
�� ����� y NtInitializeEnclave ntdll.dll ntdll.dll/ -1 0 51 `
�� ���� z NtInitializeNlsFiles ntdll.dll
ntdll.dll/ -1 0 51 `
�� �]�C� { NtInitializeRegistry ntdll.dll
ntdll.dll/ -1 0 52 `
�� � ��� | NtInitiatePowerAction ntdll.dll ntdll.dll/ -1 0 47 `
�� ���� } NtIsProcessInJob ntdll.dll
ntdll.dll/ -1 0 56 `
�� ���\�$ ~ NtIsSystemResumeAutomatic ntdll.dll ntdll.dll/ -1 0 53 `
�� ����! NtIsUILanguageComitted ntdll.dll
ntdll.dll/ -1 0 43 `
�� �� �� � NtListenPort ntdll.dll
ntdll.dll/ -1 0 43 `
�� ���3� � NtLoadDriver ntdll.dll
ntdll.dll/ -1 0 48 `
�� �$[� � NtLoadEnclaveData ntdll.dll ntdll.dll/ -1 0 40 `
�� �u��� � NtLoadKey ntdll.dll ntdll.dll/ -1 0 41 `
�� �}��� � NtLoadKey2 ntdll.dll
ntdll.dll/ -1 0 41 `
�� ��C�� � NtLoadKey3 ntdll.dll
ntdll.dll/ -1 0 42 `
�� ��Z� � NtLoadKeyEx ntdll.dll ntdll.dll/ -1 0 41 `
�� ��.�� � NtLockFile ntdll.dll
ntdll.dll/ -1 0 58 `
�� ��Y�& � NtLockProductActivationKeys ntdll.dll ntdll.dll/ -1 0 48 `
�� ��p� � NtLockRegistryKey ntdll.dll ntdll.dll/ -1 0 50 `
�� � ��� � NtLockVirtualMemory ntdll.dll ntdll.dll/ -1 0 52 `
�� ���S� � NtMakePermanentObject ntdll.dll ntdll.dll/ -1 0 52 `
�� �x� � � NtMakeTemporaryObject ntdll.dll ntdll.dll/ -1 0 47 `
�� ��+� � NtManageHotPatch ntdll.dll
ntdll.dll/ -1 0 48 `
�� �#�K� � NtManagePartition ntdll.dll ntdll.dll/ -1 0 45 `
�� �Þ~� � NtMapCMFModule ntdll.dll
ntdll.dll/ -1 0 53 `
�� �����! � NtMapUserPhysicalPages ntdll.dll
ntdll.dll/ -1 0 60 `
�� �]�c�( � NtMapUserPhysicalPagesScatter ntdll.dll ntdll.dll/ -1 0 49 `
�� �T� � NtMapViewOfSection ntdll.dll
ntdll.dll/ -1 0 51 `
�� ����� � NtMapViewOfSectionEx ntdll.dll
ntdll.dll/ -1 0 48 `
�� ��@)� � NtModifyBootEntry ntdll.dll ntdll.dll/ -1 0 50 `
�� ���� � NtModifyDriverEntry ntdll.dll ntdll.dll/ -1 0 58 `
�� ��-��& � NtNotifyChangeDirectoryFile ntdll.dll ntdll.dll/ -1 0 60 `
�� ��(d�( � NtNotifyChangeDirectoryFileEx ntdll.dll ntdll.dll/ -1 0 48 `
�� �S]�� � NtNotifyChangeKey ntdll.dll ntdll.dll/ -1 0 57 `
�� �(X��% � NtNotifyChangeMultipleKeys ntdll.dll
ntdll.dll/ -1 0 52 `
�� ����� � NtNotifyChangeSession ntdll.dll ntdll.dll/ -1 0 52 `
�� � `3� � NtOpenDirectoryObject ntdll.dll ntdll.dll/ -1 0 47 `
�� �}y�� � NtOpenEnlistment ntdll.dll
ntdll.dll/ -1 0 42 `
�� ��F�� � NtOpenEvent ntdll.dll ntdll.dll/ -1 0 46 `
�� �鮅� � NtOpenEventPair ntdll.dll ntdll.dll/ -1 0 41 `
�� �ׁ�� � NtOpenFile ntdll.dll
ntdll.dll/ -1 0 49 `
�� �u�k� � NtOpenIoCompletion ntdll.dll
ntdll.dll/ -1 0 46 `
�� �p�� � NtOpenJobObject ntdll.dll ntdll.dll/ -1 0 40 `
�� �0��� � NtOpenKey ntdll.dll ntdll.dll/ -1 0 42 `
�� �q�� � NtOpenKeyEx ntdll.dll ntdll.dll/ -1 0 50 `
�� ��� � NtOpenKeyTransacted ntdll.dll ntdll.dll/ -1 0 52 `
�� � � � � NtOpenKeyTransactedEx ntdll.dll ntdll.dll/ -1 0 47 `
�� �u�� � NtOpenKeyedEvent ntdll.dll
ntdll.dll/ -1 0 43 `
�� ���� � NtOpenMutant ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��y��! � NtOpenObjectAuditAlarm ntdll.dll
ntdll.dll/ -1 0 46 `
�� �ж!� � NtOpenPartition ntdll.dll ntdll.dll/ -1 0 53 `
�� ����! � NtOpenPrivateNamespace ntdll.dll
ntdll.dll/ -1 0 44 `
�� � �� � NtOpenProcess ntdll.dll ntdll.dll/ -1 0 49 `
�� �"$g� � NtOpenProcessToken ntdll.dll
ntdll.dll/ -1 0 51 `
�� �'�� � NtOpenProcessTokenEx ntdll.dll
ntdll.dll/ -1 0 56 `
�� ���]�$ � NtOpenRegistryTransaction ntdll.dll ntdll.dll/ -1 0 52 `
�� �_ר� � NtOpenResourceManager ntdll.dll ntdll.dll/ -1 0 44 `
�� ��v=� � NtOpenSection ntdll.dll ntdll.dll/ -1 0 46 `
�� �� � NtOpenSemaphore ntdll.dll ntdll.dll/ -1 0 44 `
�� ���.� � NtOpenSession ntdll.dll ntdll.dll/ -1 0 55 `
�� �4���# � NtOpenSymbolicLinkObject ntdll.dll
ntdll.dll/ -1 0 43 `
�� ���N� � NtOpenThread ntdll.dll
ntdll.dll/ -1 0 48 `
�� ���f� � NtOpenThreadToken ntdll.dll ntdll.dll/ -1 0 50 `
�� ��W� � NtOpenThreadTokenEx ntdll.dll ntdll.dll/ -1 0 42 `
�� ��Y�� � NtOpenTimer ntdll.dll ntdll.dll/ -1 0 48 `
�� �� .� � NtOpenTransaction ntdll.dll ntdll.dll/ -1 0 55 `
�� �2F�# � NtOpenTransactionManager ntdll.dll
ntdll.dll/ -1 0 48 `
�� �.g� � NtPlugPlayControl ntdll.dll ntdll.dll/ -1 0 49 `
�� �a�� � NtPowerInformation ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��{ � � NtPrePrepareComplete ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��V�! � NtPrePrepareEnlistment ntdll.dll
ntdll.dll/ -1 0 48 `
�� ���� � NtPrepareComplete ntdll.dll ntdll.dll/ -1 0 50 `
�� �D
@� � NtPrepareEnlistment ntdll.dll ntdll.dll/ -1 0 47 `
�� �p��� � NtPrivilegeCheck ntdll.dll
ntdll.dll/ -1 0 58 `
�� ���[�& � NtPrivilegeObjectAuditAlarm ntdll.dll ntdll.dll/ -1 0 60 `
�� ��l��( � NtPrivilegedServiceAuditAlarm ntdll.dll ntdll.dll/ -1 0 52 `
�� ��O�� � NtPropagationComplete ntdll.dll ntdll.dll/ -1 0 50 `
�� � 6�� � NtPropagationFailed ntdll.dll ntdll.dll/ -1 0 53 `
�� �� ��! � NtProtectVirtualMemory ntdll.dll
ntdll.dll/ -1 0 54 `
�� �ϊ��" � NtPssCaptureVaSpaceBulk ntdll.dll ntdll.dll/ -1 0 43 `
�� �d�� � NtPulseEvent ntdll.dll
ntdll.dll/ -1 0 52 `
�� �"�� � NtQueryAttributesFile ntdll.dll ntdll.dll/ -1 0 63 `
�� ��|a�+ � NtQueryAuxiliaryCounterFrequency ntdll.dll
ntdll.dll/ -1 0 52 `
�� �#>� � NtQueryBootEntryOrder ntdll.dll ntdll.dll/ -1 0 49 `
�� � m � � NtQueryBootOptions ntdll.dll
ntdll.dll/ -1 0 54 `
�� ��Q��" � NtQueryDebugFilterState ntdll.dll ntdll.dll/ -1 0 51 `
�� �~a(� � NtQueryDefaultLocale ntdll.dll
ntdll.dll/ -1 0 55 `
�� ��Y�# � NtQueryDefaultUILanguage ntdll.dll
ntdll.dll/ -1 0 51 `
�� �)>�� � NtQueryDirectoryFile ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��kn�! � NtQueryDirectoryFileEx ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��8�! � NtQueryDirectoryObject ntdll.dll
ntdll.dll/ -1 0 54 `
�� ����" � NtQueryDriverEntryOrder ntdll.dll ntdll.dll/ -1 0 44 `
�� �:T�� � NtQueryEaFile ntdll.dll ntdll.dll/ -1 0 43 `
�� ��$�� � NtQueryEvent ntdll.dll
ntdll.dll/ -1 0 56 `
�� �]� �$ � NtQueryFullAttributesFile ntdll.dll ntdll.dll/ -1 0 53 `
�� �˃�! � NtQueryInformationAtom ntdll.dll
ntdll.dll/ -1 0 55 `
�� �H�?�# � NtQueryInformationByName ntdll.dll
ntdll.dll/ -1 0 59 `
�� �GE��' � NtQueryInformationEnlistment ntdll.dll
ntdll.dll/ -1 0 53 `
�� �L�I�! � NtQueryInformationFile ntdll.dll
ntdll.dll/ -1 0 58 `
�� �����& � NtQueryInformationJobObject ntdll.dll ntdll.dll/ -1 0 53 `
�� �hE�! � NtQueryInformationPort ntdll.dll
ntdll.dll/ -1 0 56 `
�� ����$ � NtQueryInformationProcess ntdll.dll ntdll.dll/ -1 0 64 `
�� �X�-�, � NtQueryInformationResourceManager ntdll.dll ntdll.dll/ -1 0 55 `
�� ��Nf�# � NtQueryInformationThread ntdll.dll
ntdll.dll/ -1 0 54 `
�� � ��" � NtQueryInformationToken ntdll.dll ntdll.dll/ -1 0 60 `
�� ���`�( � NtQueryInformationTransaction ntdll.dll ntdll.dll/ -1 0 67 `
�� ��<�/ � NtQueryInformationTransactionManager ntdll.dll
ntdll.dll/ -1 0 62 `
�� �����* � NtQueryInformationWorkerFactory ntdll.dll ntdll.dll/ -1 0 55 `
�� �� ��# � NtQueryInstallUILanguage ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��[�! � NtQueryIntervalProfile ntdll.dll
ntdll.dll/ -1 0 50 `
�� �P��� � NtQueryIoCompletion ntdll.dll ntdll.dll/ -1 0 41 `
�� �{�C� � NtQueryKey ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��
0� � NtQueryLicenseValue ntdll.dll ntdll.dll/ -1 0 54 `
�� �n.��" � NtQueryMultipleValueKey ntdll.dll ntdll.dll/ -1 0 44 `
�� ��� � NtQueryMutant ntdll.dll ntdll.dll/ -1 0 44 `
�� ��A*� � NtQueryObject ntdll.dll ntdll.dll/ -1 0 49 `
�� �>
� � NtQueryOpenSubKeys ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��� � NtQueryOpenSubKeysEx ntdll.dll
ntdll.dll/ -1 0 56 `
�� �ps�$ � NtQueryPerformanceCounter ntdll.dll ntdll.dll/ -1 0 60 `
�� �i&��( � NtQueryPortInformationProcess ntdll.dll ntdll.dll/ -1 0 58 `
�� �a��& � NtQueryQuotaInformationFile ntdll.dll ntdll.dll/ -1 0 45 `
�� ���� � NtQuerySection ntdll.dll
ntdll.dll/ -1 0 61 `
�� �!�) � NtQuerySecurityAttributesToken ntdll.dll
ntdll.dll/ -1 0 52 `
�� �J� � NtQuerySecurityObject ntdll.dll ntdll.dll/ -1 0 52 `
�� �/ �� � NtQuerySecurityPolicy ntdll.dll ntdll.dll/ -1 0 47 `
�� ��Zd� � NtQuerySemaphore ntdll.dll
ntdll.dll/ -1 0 56 `
�� ��9�$ � NtQuerySymbolicLinkObject ntdll.dll ntdll.dll/ -1 0 60 `
�� ��#��( � NtQuerySystemEnvironmentValue ntdll.dll ntdll.dll/ -1 0 62 `
�� �)H�* � NtQuerySystemEnvironmentValueEx ntdll.dll ntdll.dll/ -1 0 55 `
�� � Go�# � NtQuerySystemInformation ntdll.dll
ntdll.dll/ -1 0 57 `
�� �B/�% � NtQuerySystemInformationEx ntdll.dll
ntdll.dll/ -1 0 48 `
�� ���s� � NtQuerySystemTime ntdll.dll ntdll.dll/ -1 0 43 `
�� ��y�� � NtQueryTimer ntdll.dll
ntdll.dll/ -1 0 53 `
�� ����! � NtQueryTimerResolution ntdll.dll
ntdll.dll/ -1 0 46 `
�� �XK� � NtQueryValueKey ntdll.dll ntdll.dll/ -1 0 51 `
�� �Z� � NtQueryVirtualMemory ntdll.dll
ntdll.dll/ -1 0 59 `
�� ���[�' � NtQueryVolumeInformationFile ntdll.dll
ntdll.dll/ -1 0 50 `
�� ���U� NtQueryWnfStateData ntdll.dll ntdll.dll/ -1 0 61 `
�� ���) NtQueryWnfStateNameInformation ntdll.dll
ntdll.dll/ -1 0 47 `
�� � =�� NtQueueApcThread ntdll.dll
ntdll.dll/ -1 0 49 `
�� �� � NtQueueApcThreadEx ntdll.dll
ntdll.dll/ -1 0 47 `
�� �I�� NtRaiseException ntdll.dll
ntdll.dll/ -1 0 47 `
�� ��)�� NtRaiseHardError ntdll.dll
ntdll.dll/ -1 0 41 `
�� � !�� NtReadFile ntdll.dll
ntdll.dll/ -1 0 48 `
�� ���y� NtReadFileScatter ntdll.dll ntdll.dll/ -1 0 51 `
�� ���� NtReadOnlyEnlistment ntdll.dll
ntdll.dll/ -1 0 48 `
�� ���� NtReadRequestData ntdll.dll ntdll.dll/ -1 0 50 `
�� ��5��
NtReadVirtualMemory ntdll.dll ntdll.dll/ -1 0 50 `
�� ��^c� NtRecoverEnlistment ntdll.dll ntdll.dll/ -1 0 55 `
�� ��)M�# NtRecoverResourceManager ntdll.dll
ntdll.dll/ -1 0 58 `
�� ��/>�&
NtRecoverTransactionManager ntdll.dll ntdll.dll/ -1 0 67 `
�� ��{t�/ NtRegisterProtocolAddressInformation ntdll.dll
ntdll.dll/ -1 0 60 `
�� �tO/�( NtRegisterThreadTerminatePort ntdll.dll ntdll.dll/ -1 0 50 `
�� ��� NtReleaseKeyedEvent ntdll.dll ntdll.dll/ -1 0 46 `
�� �*�� NtReleaseMutant ntdll.dll ntdll.dll/ -1 0 49 `
�� ��� NtReleaseSemaphore ntdll.dll
ntdll.dll/ -1 0 59 `
�� �YQ�' NtReleaseWorkerFactoryWorker ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��� NtRemoveIoCompletion ntdll.dll
ntdll.dll/ -1 0 53 `
�� �h�F�! NtRemoveIoCompletionEx ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��W� NtRemoveProcessDebug ntdll.dll
ntdll.dll/ -1 0 42 `
�� �*� NtRenameKey ntdll.dll ntdll.dll/ -1 0 57 `
�� ��M�% NtRenameTransactionManager ntdll.dll
ntdll.dll/ -1 0 43 `
�� �ˠ� NtReplaceKey ntdll.dll
ntdll.dll/ -1 0 53 `
�� �F��! NtReplacePartitionUnit ntdll.dll
ntdll.dll/ -1 0 42 `
�� ��t� NtReplyPort ntdll.dll ntdll.dll/ -1 0 53 `
�� ��W�! NtReplyWaitReceivePort ntdll.dll
ntdll.dll/ -1 0 55 `
�� ��7�# NtReplyWaitReceivePortEx ntdll.dll
ntdll.dll/ -1 0 51 `
�� �.y'� NtReplyWaitReplyPort ntdll.dll
ntdll.dll/ -1 0 44 `
�� ��<� NtRequestPort ntdll.dll ntdll.dll/ -1 0 53 `
�� ��h�! NtRequestWaitReplyPort ntdll.dll
ntdll.dll/ -1 0 43 `
�� �#' � ! NtResetEvent ntdll.dll
ntdll.dll/ -1 0 48 `
�� ���a� " NtResetWriteWatch ntdll.dll ntdll.dll/ -1 0 43 `
�� ���� # NtRestoreKey ntdll.dll
ntdll.dll/ -1 0 46 `
�� �x4�� $ NtResumeProcess ntdll.dll ntdll.dll/ -1 0 45 `
�� ��W� % NtResumeThread ntdll.dll
ntdll.dll/ -1 0 61 `
�� �z���) & NtRevertContainerImpersonation ntdll.dll
ntdll.dll/ -1 0 49 `
�� ���*� ' NtRollbackComplete ntdll.dll
ntdll.dll/ -1 0 51 `
�� �T�� ( NtRollbackEnlistment ntdll.dll
ntdll.dll/ -1 0 60 `
�� �� ��( ) NtRollbackRegistryTransaction ntdll.dll ntdll.dll/ -1 0 52 `
�� ��e�� * NtRollbackTransaction ntdll.dll ntdll.dll/ -1 0 62 `
�� �����* + NtRollforwardTransactionManager ntdll.dll ntdll.dll/ -1 0 40 `
�� �zH � , NtSaveKey ntdll.dll ntdll.dll/ -1 0 42 `
�� ���� - NtSaveKeyEx ntdll.dll ntdll.dll/ -1 0 47 `
�� ���� . NtSaveMergedKeys ntdll.dll
ntdll.dll/ -1 0 50 `
�� � �G� / NtSecureConnectPort ntdll.dll ntdll.dll/ -1 0 46 `
�� �ߚ�� 0 NtSerializeBoot ntdll.dll ntdll.dll/ -1 0 50 `
�� �
@,� 1 NtSetBootEntryOrder ntdll.dll ntdll.dll/ -1 0 47 `
�� �`)�� 2 NtSetBootOptions ntdll.dll
ntdll.dll/ -1 0 54 `
�� �zLT�" 3 NtSetCachedSigningLevel ntdll.dll ntdll.dll/ -1 0 55 `
�� �R ��# 4 NtSetCachedSigningLevel2 ntdll.dll
ntdll.dll/ -1 0 49 `
�� ��-� 5 NtSetContextThread ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��K:� 6 NtSetDebugFilterState ntdll.dll ntdll.dll/ -1 0 56 `
�� ��\��$ 7 NtSetDefaultHardErrorPort ntdll.dll ntdll.dll/ -1 0 49 `
�� �x�3� 8 NtSetDefaultLocale ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��~�! 9 NtSetDefaultUILanguage ntdll.dll
ntdll.dll/ -1 0 52 `
�� �9I�� : NtSetDriverEntryOrder ntdll.dll ntdll.dll/ -1 0 42 `
�� �=� � ; NtSetEaFile ntdll.dll ntdll.dll/ -1 0 41 `
�� ���� < NtSetEvent ntdll.dll
ntdll.dll/ -1 0 54 `
�� ��7��" = NtSetEventBoostPriority ntdll.dll ntdll.dll/ -1 0 49 `
�� �ӷ � > NtSetHighEventPair ntdll.dll
ntdll.dll/ -1 0 56 `
�� �Y�!�$ ? NtSetHighWaitLowEventPair ntdll.dll ntdll.dll/ -1 0 43 `
�� �K��� @ NtSetIRTimer ntdll.dll
ntdll.dll/ -1 0 58 `
�� ����& A NtSetInformationDebugObject ntdll.dll ntdll.dll/ -1 0 57 `
�� �XW�% B NtSetInformationEnlistment ntdll.dll
ntdll.dll/ -1 0 51 `
�� �1�|� C NtSetInformationFile ntdll.dll
ntdll.dll/ -1 0 56 `
�� ��u��$ D NtSetInformationJobObject ntdll.dll ntdll.dll/ -1 0 50 `
�� �� �� E NtSetInformationKey ntdll.dll ntdll.dll/ -1 0 53 `
�� ��y��! F NtSetInformationObject ntdll.dll
ntdll.dll/ -1 0 54 `
�� �\���" G NtSetInformationProcess ntdll.dll ntdll.dll/ -1 0 62 `
�� �y�* H NtSetInformationResourceManager ntdll.dll ntdll.dll/ -1 0 59 `
�� �D
��' I NtSetInformationSymbolicLink ntdll.dll
ntdll.dll/ -1 0 53 `
�� �`w�! J NtSetInformationThread ntdll.dll
ntdll.dll/ -1 0 52 `
�� ����� K NtSetInformationToken ntdll.dll ntdll.dll/ -1 0 58 `
�� ����& L NtSetInformationTransaction ntdll.dll ntdll.dll/ -1 0 65 `
�� ��*��- M NtSetInformationTransactionManager ntdll.dll
ntdll.dll/ -1 0 60 `
�� ��+��( N NtSetInformationVirtualMemory ntdll.dll ntdll.dll/ -1 0 60 `
�� ��H��( O NtSetInformationWorkerFactory ntdll.dll ntdll.dll/ -1 0 51 `
�� �z� � P NtSetIntervalProfile ntdll.dll
ntdll.dll/ -1 0 48 `
�� ���i� Q NtSetIoCompletion ntdll.dll ntdll.dll/ -1 0 50 `
�� �2�7� R NtSetIoCompletionEx ntdll.dll ntdll.dll/ -1 0 46 `
�� �\� S NtSetLdtEntries ntdll.dll ntdll.dll/ -1 0 48 `
�� ��܊� T NtSetLowEventPair ntdll.dll ntdll.dll/ -1 0 56 `
�� ��M2�$ U NtSetLowWaitHighEventPair ntdll.dll ntdll.dll/ -1 0 56 `
�� �`���$ V NtSetQuotaInformationFile ntdll.dll ntdll.dll/ -1 0 50 `
�� ���F� W NtSetSecurityObject ntdll.dll ntdll.dll/ -1 0 58 `
�� �6���& X NtSetSystemEnvironmentValue ntdll.dll ntdll.dll/ -1 0 60 `
�� �`�L�( Y NtSetSystemEnvironmentValueEx ntdll.dll ntdll.dll/ -1 0 53 `
�� �8�5�! Z NtSetSystemInformation ntdll.dll
ntdll.dll/ -1 0 52 `
�� �ܔ� [ NtSetSystemPowerState ntdll.dll ntdll.dll/ -1 0 46 `
�� �|Z�� \ NtSetSystemTime ntdll.dll ntdll.dll/ -1 0 56 `
�� ���j�$ ] NtSetThreadExecutionState ntdll.dll ntdll.dll/ -1 0 41 `
�� ���5� ^ NtSetTimer ntdll.dll
ntdll.dll/ -1 0 42 `
�� �I�m� _ NtSetTimer2 ntdll.dll ntdll.dll/ -1 0 43 `
�� ��3�� ` NtSetTimerEx ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��\� a NtSetTimerResolution ntdll.dll
ntdll.dll/ -1 0 44 `
�� ���{� b NtSetUuidSeed ntdll.dll ntdll.dll/ -1 0 44 `
�� ��y� c NtSetValueKey ntdll.dll ntdll.dll/ -1 0 57 `
�� �{���% d NtSetVolumeInformationFile ntdll.dll
ntdll.dll/ -1 0 63 `
�� ���+ e NtSetWnfProcessNotificationEvent ntdll.dll
ntdll.dll/ -1 0 47 `
�� �^�� f NtShutdownSystem ntdll.dll
ntdll.dll/ -1 0 54 `
�� ���t�" g NtShutdownWorkerFactory ntdll.dll ntdll.dll/ -1 0 61 `
�� �&�|�) h NtSignalAndWaitForSingleObject ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��N� i NtSinglePhaseReject ntdll.dll ntdll.dll/ -1 0 45 `
�� ���� j NtStartProfile ntdll.dll
ntdll.dll/ -1 0 44 `
�� ��*�� k NtStopProfile ntdll.dll ntdll.dll/ -1 0 56 `
�� ���;�$ l NtSubscribeWnfStateChange ntdll.dll ntdll.dll/ -1 0 47 `
�� ���� m NtSuspendProcess ntdll.dll
ntdll.dll/ -1 0 46 `
�� ���� n NtSuspendThread ntdll.dll ntdll.dll/ -1 0 51 `
�� �*N�� o NtSystemDebugControl ntdll.dll
ntdll.dll/ -1 0 49 `
�� ��R�� p NtTerminateEnclave ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��M8� q NtTerminateJobObject ntdll.dll
ntdll.dll/ -1 0 49 `
�� � �7� r NtTerminateProcess ntdll.dll
ntdll.dll/ -1 0 48 `
�� �71�� s NtTerminateThread ntdll.dll ntdll.dll/ -1 0 42 `
�� �R�<� t NtTestAlert ntdll.dll ntdll.dll/ -1 0 45 `
�� �5SQ� u NtThawRegistry ntdll.dll
ntdll.dll/ -1 0 49 `
�� ��U� v NtThawTransactions ntdll.dll
ntdll.dll/ -1 0 45 `
�� � |�� w NtTraceControl ntdll.dll
ntdll.dll/ -1 0 43 `
�� ��� x NtTraceEvent ntdll.dll
ntdll.dll/ -1 0 50 `
�� ���� y NtTranslateFilePath ntdll.dll ntdll.dll/ -1 0 47 `
�� ���� z NtUmsThreadYield ntdll.dll
ntdll.dll/ -1 0 45 `
�� ��� { NtUnloadDriver ntdll.dll
ntdll.dll/ -1 0 42 `
�� �M�� | NtUnloadKey ntdll.dll ntdll.dll/ -1 0 43 `
�� ��J?� } NtUnloadKey2 ntdll.dll
ntdll.dll/ -1 0 44 `
�� �r�� ~ NtUnloadKeyEx ntdll.dll ntdll.dll/ -1 0 43 `
�� ��~� NtUnlockFile ntdll.dll
ntdll.dll/ -1 0 52 `
�� �Şh� � NtUnlockVirtualMemory ntdll.dll ntdll.dll/ -1 0 51 `
�� �+�� � NtUnmapViewOfSection ntdll.dll
ntdll.dll/ -1 0 53 `
�� �Iܫ�! � NtUnmapViewOfSectionEx ntdll.dll
ntdll.dll/ -1 0 58 `
�� �yɖ�& � NtUnsubscribeWnfStateChange ntdll.dll ntdll.dll/ -1 0 51 `
�� ��A�� � NtUpdateWnfStateData ntdll.dll
ntdll.dll/ -1 0 43 `
�� ���|� � NtVdmControl ntdll.dll
ntdll.dll/ -1 0 55 `
�� � ���# � NtWaitForAlertByThreadId ntdll.dll
ntdll.dll/ -1 0 50 `
�� ���� � NtWaitForDebugEvent ntdll.dll ntdll.dll/ -1 0 50 `
�� ���a� � NtWaitForKeyedEvent ntdll.dll ntdll.dll/ -1 0 55 `
�� �Cn��# � NtWaitForMultipleObjects ntdll.dll
ntdll.dll/ -1 0 57 `
�� ����% � NtWaitForMultipleObjects32 ntdll.dll
ntdll.dll/ -1 0 52 `
�� �q�t� � NtWaitForSingleObject ntdll.dll ntdll.dll/ -1 0 60 `
�� ����( � NtWaitForWorkViaWorkerFactory ntdll.dll ntdll.dll/ -1 0 50 `
�� ��x�� � NtWaitHighEventPair ntdll.dll ntdll.dll/ -1 0 49 `
�� �%p� � NtWaitLowEventPair ntdll.dll
ntdll.dll/ -1 0 57 `
�� ��c�% � NtWorkerFactoryWorkerReady ntdll.dll
ntdll.dll/ -1 0 42 `
�� �~� � NtWriteFile ntdll.dll ntdll.dll/ -1 0 48 `
�� �ź\� � NtWriteFileGather ntdll.dll ntdll.dll/ -1 0 49 `
�� �ݺ� � NtWriteRequestData ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��� � NtWriteVirtualMemory ntdll.dll
ntdll.dll/ -1 0 47 `
�� ��� � NtYieldExecution ntdll.dll
ntdll.dll/ -1 0 44 `
�� ��� � PfxFindPrefix ntdll.dll ntdll.dll/ -1 0 44 `
�� ���p� � PfxInitialize ntdll.dll ntdll.dll/ -1 0 46 `
�� �5��� � PfxInsertPrefix ntdll.dll ntdll.dll/ -1 0 46 `
�� ���� � PfxRemovePrefix ntdll.dll ntdll.dll/ -1 0 51 `
�� �E5~� � PssNtCaptureSnapshot ntdll.dll
ntdll.dll/ -1 0 53 `
�� ���! � PssNtDuplicateSnapshot ntdll.dll
ntdll.dll/ -1 0 54 `
�� �U~�" � PssNtFreeRemoteSnapshot ntdll.dll ntdll.dll/ -1 0 48 `
�� �KPE� � PssNtFreeSnapshot ntdll.dll ntdll.dll/ -1 0 50 `
�� �ǖ� � PssNtFreeWalkMarker ntdll.dll ntdll.dll/ -1 0 49 `
�� ���L� � PssNtQuerySnapshot ntdll.dll
ntdll.dll/ -1 0 54 `
�� ����" � PssNtValidateDescriptor ntdll.dll ntdll.dll/ -1 0 48 `
�� ���
� � PssNtWalkSnapshot ntdll.dll ntdll.dll/ -1 0 51 `
�� ���Z� � ReadTimeStampCounter ntdll.dll
ntdll.dll/ -1 0 44 `
�� �h�p� � RtlAbortRXact ntdll.dll ntdll.dll/ -1 0 58 `
�� �����& � RtlAbsoluteToSelfRelativeSD ntdll.dll ntdll.dll/ -1 0 48 `
�� �g"� � RtlAcquirePebLock ntdll.dll ntdll.dll/ -1 0 50 `
�� ��Wl� � RtlAcquirePrivilege ntdll.dll ntdll.dll/ -1 0 64 `
�� � �B�, � RtlAcquireReleaseSRWLockExclusive ntdll.dll ntdll.dll/ -1 0 58 `
�� ��6��& � RtlAcquireResourceExclusive ntdll.dll ntdll.dll/ -1 0 55 `
�� �ݍ��# � RtlAcquireResourceShared ntdll.dll
ntdll.dll/ -1 0 57 `
�� �)%��% � RtlAcquireSRWLockExclusive ntdll.dll
ntdll.dll/ -1 0 54 `
�� ���" � RtlAcquireSRWLockShared ntdll.dll ntdll.dll/ -1 0 59 `
�� ���' � RtlActivateActivationContext ntdll.dll
ntdll.dll/ -1 0 61 `
�� �b�n�) � RtlActivateActivationContextEx ntdll.dll
ntdll.dll/ -1 0 69 `
�� �!a�1 � RtlActivateActivationContextUnsafeFast ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��Q��! � RtlAddAccessAllowedAce ntdll.dll
ntdll.dll/ -1 0 55 `
�� ��
F�# � RtlAddAccessAllowedAceEx ntdll.dll
ntdll.dll/ -1 0 59 `
�� �����' � RtlAddAccessAllowedObjectAce ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��7�� � RtlAddAccessDeniedAce ntdll.dll ntdll.dll/ -1 0 54 `
�� ��1]�" � RtlAddAccessDeniedAceEx ntdll.dll ntdll.dll/ -1 0 58 `
�� ���2�& � RtlAddAccessDeniedObjectAce ntdll.dll ntdll.dll/ -1 0 52 `
�� ���^� � RtlAddAccessFilterAce ntdll.dll ntdll.dll/ -1 0 40 `
�� � �� � RtlAddAce ntdll.dll ntdll.dll/ -1 0 50 `
�� �i" � � RtlAddActionToRXact ntdll.dll ntdll.dll/ -1 0 52 `
�� �i�� � RtlAddAtomToAtomTable ntdll.dll ntdll.dll/ -1 0 59 `
�� �����' � RtlAddAttributeActionToRXact ntdll.dll
ntdll.dll/ -1 0 51 `
�� �0�� � RtlAddAuditAccessAce ntdll.dll
ntdll.dll/ -1 0 53 `
�� �#7>�! � RtlAddAuditAccessAceEx ntdll.dll
ntdll.dll/ -1 0 57 `
�� �==��% � RtlAddAuditAccessObjectAce ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��h�� � RtlAddFunctionTable ntdll.dll ntdll.dll/ -1 0 58 `
�� �����& � RtlAddGrowableFunctionTable ntdll.dll ntdll.dll/ -1 0 71 `
�� ��3 � RtlAddIntegrityLabelToBoundaryDescriptor ntdll.dll
ntdll.dll/ -1 0 49 `
�� � 0E� � RtlAddMandatoryAce ntdll.dll
ntdll.dll/ -1 0 57 `
�� �E���% � RtlAddProcessTrustLabelAce ntdll.dll
ntdll.dll/ -1 0 57 `
�� ��
�% � RtlAddRefActivationContext ntdll.dll
ntdll.dll/ -1 0 57 `
�� �(Bd�% � RtlAddResourceAttributeAce ntdll.dll
ntdll.dll/ -1 0 60 `
�� ���5�( � RtlAddSIDToBoundaryDescriptor ntdll.dll ntdll.dll/ -1 0 54 `
�� ��Է�" � RtlAddScopedPolicyIDAce ntdll.dll ntdll.dll/ -1 0 60 `
�� ��0��( � RtlAddVectoredContinueHandler ntdll.dll ntdll.dll/ -1 0 61 `
�� �����) � RtlAddVectoredExceptionHandler ntdll.dll
ntdll.dll/ -1 0 55 `
�� �u���# � RtlAddressInSectionTable ntdll.dll
ntdll.dll/ -1 0 49 `
�� ��\� � RtlAdjustPrivilege ntdll.dll
ntdll.dll/ -1 0 64 `
�� �_z��, � RtlAllocateActivationContextStack ntdll.dll ntdll.dll/ -1 0 58 `
�� ��F�& � RtlAllocateAndInitializeSid ntdll.dll ntdll.dll/ -1 0 60 `
�� � v.�( � RtlAllocateAndInitializeSidEx ntdll.dll ntdll.dll/ -1 0 48 `
�� ��e�� � RtlAllocateHandle ntdll.dll ntdll.dll/ -1 0 46 `
�� ��4^� � RtlAllocateHeap ntdll.dll ntdll.dll/ -1 0 62 `
�� �7"��* � RtlAllocateMemoryBlockLookaside ntdll.dll ntdll.dll/ -1 0 52 `
�� �S�=� � RtlAllocateMemoryZone ntdll.dll ntdll.dll/ -1 0 63 `
�� �1���+ � RtlAllocateWnfSerializationGroup ntdll.dll
ntdll.dll/ -1 0 55 `
�� �2���# � RtlAnsiCharToUnicodeChar ntdll.dll
ntdll.dll/ -1 0 57 `
�� �ʶ��% � RtlAnsiStringToUnicodeSize ntdll.dll
ntdll.dll/ -1 0 59 `
�� �r�/�' � RtlAnsiStringToUnicodeString ntdll.dll
ntdll.dll/ -1 0 54 `
�� �9���" � RtlAppendAsciizToString ntdll.dll ntdll.dll/ -1 0 51 `
�� �@�o� � RtlAppendPathElement ntdll.dll
ntdll.dll/ -1 0 54 `
�� � ��" � RtlAppendStringToString ntdll.dll ntdll.dll/ -1 0 61 `
�� �4>L�) � RtlAppendUnicodeStringToString ntdll.dll
ntdll.dll/ -1 0 55 `
�� �� ��# � RtlAppendUnicodeToString ntdll.dll
ntdll.dll/ -1 0 57 `
�� �$bX�% � RtlApplicationVerifierStop ntdll.dll
ntdll.dll/ -1 0 44 `
�� �Ѧ� � RtlApplyRXact ntdll.dll ntdll.dll/ -1 0 51 `
�� �&�� � RtlApplyRXactNoFlush ntdll.dll
ntdll.dll/ -1 0 55 `
�� �R�;�# � RtlAreAllAccessesGranted ntdll.dll
ntdll.dll/ -1 0 55 `
�� �j*F�# � RtlAreAnyAccessesGranted ntdll.dll
ntdll.dll/ -1 0 46 `
�� �y3� � RtlAreBitsClear ntdll.dll ntdll.dll/ -1 0 44 `
�� ����� � RtlAreBitsSet ntdll.dll ntdll.dll/ -1 0 40 `
�� ��_� � RtlAssert ntdll.dll ntdll.dll/ -1 0 49 `
�� ��^~� � RtlAvlInsertNodeEx ntdll.dll
ntdll.dll/ -1 0 47 `
�� ��}�� � RtlAvlRemoveNode ntdll.dll
ntdll.dll/ -1 0 45 `
�� ��8�� � RtlCancelTimer ntdll.dll
ntdll.dll/ -1 0 56 `
�� ��t�$ � RtlCanonicalizeDomainName ntdll.dll ntdll.dll/ -1 0 49 `
�� ��0U� � RtlCapabilityCheck ntdll.dll
ntdll.dll/ -1 0 68 `
�� ���V�0 � RtlCapabilityCheckForSingleSessionSku ntdll.dll ntdll.dll/ -1 0 48 `
�� �R�u� � RtlCaptureContext ntdll.dll ntdll.dll/ -1 0 55 `
�� ���# � RtlCaptureStackBackTrace ntdll.dll
ntdll.dll/ -1 0 47 `
�� ��-;� � RtlCharToInteger ntdll.dll
ntdll.dll/ -1 0 58 `
�� �EE�& � RtlCheckBootStatusIntegrity ntdll.dll ntdll.dll/ -1 0 66 `
�� �3�
�. � RtlCheckForOrphanedCriticalSections ntdll.dll ntdll.dll/ -1 0 62 `
�� �}��* � RtlCheckPortableOperatingSystem ntdll.dll ntdll.dll/ -1 0 50 `
�� �&�� � RtlCheckRegistryKey ntdll.dll ntdll.dll/ -1 0 53 `
�� ��.�! � RtlCheckSandboxedToken ntdll.dll
ntdll.dll/ -1 0 64 `
�� �T[ �, � RtlCheckSystemBootStatusIntegrity ntdll.dll ntdll.dll/ -1 0 54 `
�� ��D��" � RtlCheckTokenCapability ntdll.dll ntdll.dll/ -1 0 54 `
�� �D��" � RtlCheckTokenMembership ntdll.dll ntdll.dll/ -1 0 56 `
�� ���;�$ � RtlCheckTokenMembershipEx ntdll.dll ntdll.dll/ -1 0 53 `
�� ����! � RtlCleanUpTEBLangLists ntdll.dll
ntdll.dll/ -1 0 46 `
�� �y��� � RtlClearAllBits ntdll.dll ntdll.dll/ -1 0 42 `
�� ����� � RtlClearBit ntdll.dll ntdll.dll/ -1 0 43 `
�� ��FW� RtlClearBits ntdll.dll
ntdll.dll/ -1 0 63 `
�� �h�)�+ RtlClearThreadWorkOnBehalfTicket ntdll.dll
ntdll.dll/ -1 0 50 `
�� �ř� RtlCloneUserProcess ntdll.dll ntdll.dll/ -1 0 55 `
�� ��cl�# RtlCmDecodeMemIoResource ntdll.dll
ntdll.dll/ -1 0 55 `
�� ��s��# RtlCmEncodeMemIoResource ntdll.dll
ntdll.dll/ -1 0 49 `
�� �°�� RtlCommitDebugInfo ntdll.dll
ntdll.dll/ -1 0 45 `
�� ���6� RtlCompactHeap ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��^A� RtlCompareAltitudes ntdll.dll ntdll.dll/ -1 0 47 `
�� ���Y�
RtlCompareMemory ntdll.dll
ntdll.dll/ -1 0 52 `
�� � d� RtlCompareMemoryUlong ntdll.dll ntdll.dll/ -1 0 47 `
�� ��� RtlCompareString ntdll.dll
ntdll.dll/ -1 0 54 `
�� �����"
RtlCompareUnicodeString ntdll.dll ntdll.dll/ -1 0 55 `
�� ��S��# RtlCompareUnicodeStrings ntdll.dll
ntdll.dll/ -1 0 48 `
�� ��u� RtlCompressBuffer ntdll.dll ntdll.dll/ -1 0 46 `
�� �3�� RtlComputeCrc32 ntdll.dll ntdll.dll/ -1 0 56 `
�� �,��$ RtlComputeImportTableHash ntdll.dll ntdll.dll/ -1 0 60 `
�� �X�V�( RtlComputePrivatizedDllName_U ntdll.dll ntdll.dll/ -1 0 45 `
�� ��ߪ� RtlConnectToSm ntdll.dll
ntdll.dll/ -1 0 60 `
�� �� �( RtlConsoleMultiByteToUnicodeN ntdll.dll ntdll.dll/ -1 0 59 `
�� ����' RtlConstructCrossVmEventPath ntdll.dll
ntdll.dll/ -1 0 59 `
�� ��<��' RtlConstructCrossVmMutexPath ntdll.dll
ntdll.dll/ -1 0 51 `
�� ���� RtlContractHashTable ntdll.dll
ntdll.dll/ -1 0 65 `
�� ��S��- RtlConvertDeviceFamilyInfoToString ntdll.dll
ntdll.dll/ -1 0 58 `
�� �E��& RtlConvertExclusiveToShared ntdll.dll ntdll.dll/ -1 0 53 `
�� ��/��! RtlConvertLCIDToString ntdll.dll
ntdll.dll/ -1 0 65 `
�� � �- RtlConvertSRWLockExclusiveToShared ntdll.dll
ntdll.dll/ -1 0 58 `
�� ���p�& RtlConvertSharedToExclusive ntdll.dll ntdll.dll/ -1 0 59 `
�� ��p"�' RtlConvertSidToUnicodeString ntdll.dll
ntdll.dll/ -1 0 68 `
�� �Et�0 RtlConvertToAutoInheritSecurityObject ntdll.dll ntdll.dll/ -1 0 44 `
�� �R�� RtlCopyBitMap ntdll.dll ntdll.dll/ -1 0 45 `
�� �,Q�� RtlCopyContext ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��5��! ! RtlCopyExtendedContext ntdll.dll
ntdll.dll/ -1 0 42 `
�� ���� " RtlCopyLuid ntdll.dll ntdll.dll/ -1 0 60 `
�� �&i��( # RtlCopyLuidAndAttributesArray ntdll.dll ntdll.dll/ -1 0 50 `
�� �S٫� $ RtlCopyMappedMemory ntdll.dll ntdll.dll/ -1 0 44 `
�� �Z�h� % RtlCopyMemory ntdll.dll ntdll.dll/ -1 0 56 `
�� ���I�$ ( RtlCopySecurityDescriptor ntdll.dll ntdll.dll/ -1 0 41 `
�� ��+
� ) RtlCopySid ntdll.dll
ntdll.dll/ -1 0 59 `
�� ���a�' * RtlCopySidAndAttributesArray ntdll.dll
ntdll.dll/ -1 0 44 `
�� �ͣ�� + RtlCopyString ntdll.dll ntdll.dll/ -1 0 51 `
�� ��[� , RtlCopyUnicodeString ntdll.dll
ntdll.dll/ -1 0 39 `
�� �?�!� - RtlCrc32 ntdll.dll
ntdll.dll/ -1 0 39 `
�� � �(� . RtlCrc64 ntdll.dll
ntdll.dll/ -1 0 43 `
�� �Rc'� / RtlCreateAcl ntdll.dll
ntdll.dll/ -1 0 57 `
�� �|�L�% 0 RtlCreateActivationContext ntdll.dll
ntdll.dll/ -1 0 48 `
�� �#� � 1 RtlCreateAndSetSD ntdll.dll ntdll.dll/ -1 0 49 `
�� � ��� 2 RtlCreateAtomTable ntdll.dll
ntdll.dll/ -1 0 58 `
�� �2���& 3 RtlCreateBootStatusDataFile ntdll.dll ntdll.dll/ -1 0 58 `
�� ��N�& 4 RtlCreateBoundaryDescriptor ntdll.dll ntdll.dll/ -1 0 51 `
�� �1M� 5 RtlCreateEnvironment ntdll.dll
ntdll.dll/ -1 0 53 `
�� �����! 6 RtlCreateEnvironmentEx ntdll.dll
ntdll.dll/ -1 0 49 `
�� �Z�p� 7 RtlCreateHashTable ntdll.dll
ntdll.dll/ -1 0 51 `
�� �;B�� 8 RtlCreateHashTableEx ntdll.dll
ntdll.dll/ -1 0 44 `
�� �?Re� 9 RtlCreateHeap ntdll.dll ntdll.dll/ -1 0 60 `
�� �& ��( : RtlCreateMemoryBlockLookaside ntdll.dll ntdll.dll/ -1 0 50 `
�� �'-�� ; RtlCreateMemoryZone ntdll.dll ntdll.dll/ -1 0 57 `
�� �����% < RtlCreateProcessParameters ntdll.dll
ntdll.dll/ -1 0 59 `
�� ����' = RtlCreateProcessParametersEx ntdll.dll
ntdll.dll/ -1 0 69 `
�� ��O��1 > RtlCreateProcessParametersWithTemplate ntdll.dll
ntdll.dll/ -1 0 57 `
�� ��;�% ? RtlCreateProcessReflection ntdll.dll
ntdll.dll/ -1 0 56 `
�� ����$ @ RtlCreateQueryDebugBuffer ntdll.dll ntdll.dll/ -1 0 51 `
�� ���E� A RtlCreateRegistryKey ntdll.dll
ntdll.dll/ -1 0 58 `
�� �X8a�& B RtlCreateSecurityDescriptor ntdll.dll ntdll.dll/ -1 0 50 `
�� �wiJ� C RtlCreateServiceSid ntdll.dll ntdll.dll/ -1 0 69 `
�� ���b�1 D RtlCreateSystemVolumeInformationFolder ntdll.dll
ntdll.dll/ -1 0 47 `
�� � �� E RtlCreateTagHeap ntdll.dll
ntdll.dll/ -1 0 45 `
�� ��z�� F RtlCreateTimer ntdll.dll
ntdll.dll/ -1 0 50 `
�� � �:� G RtlCreateTimerQueue ntdll.dll ntdll.dll/ -1 0 53 `
�� �BF��! H RtlCreateUnicodeString ntdll.dll
ntdll.dll/ -1 0 63 `
�� �����+ I RtlCreateUnicodeStringFromAsciiz ntdll.dll
ntdll.dll/ -1 0 51 `
�� �Z�� J RtlCreateUserProcess ntdll.dll
ntdll.dll/ -1 0 53 `
�� ���"�! K RtlCreateUserProcessEx ntdll.dll
ntdll.dll/ -1 0 58 `
�� ����& L RtlCreateUserSecurityObject ntdll.dll ntdll.dll/ -1 0 49 `
�� ��݃� M RtlCreateUserStack ntdll.dll
ntdll.dll/ -1 0 50 `
�� ���2� N RtlCreateUserThread ntdll.dll ntdll.dll/ -1 0 57 `
�� ���% O RtlCreateVirtualAccountSid ntdll.dll
ntdll.dll/ -1 0 51 `
�� �M�A� P RtlCultureNameToLCID ntdll.dll
ntdll.dll/ -1 0 52 `
�� �c�6� Q RtlCustomCPToUnicodeN ntdll.dll ntdll.dll/ -1 0 57 `
�� ����% R RtlCutoverTimeToSystemTime ntdll.dll
ntdll.dll/ -1 0 51 `
�� �IZF� S RtlDeCommitDebugInfo ntdll.dll
ntdll.dll/ -1 0 58 `
�� ���& T RtlDeNormalizeProcessParams ntdll.dll ntdll.dll/ -1 0 61 `
�� ���s�) U RtlDeactivateActivationContext ntdll.dll
ntdll.dll/ -1 0 71 `
�� ��3 V RtlDeactivateActivationContextUnsafeFast ntdll.dll
ntdll.dll/ -1 0 49 `
�� �\Ӏ� W RtlDebugPrintTimes ntdll.dll
ntdll.dll/ -1 0 47 `
�� �,x�� X RtlDecodePointer ntdll.dll
ntdll.dll/ -1 0 53 `
�� �XF�! Y RtlDecodeRemotePointer ntdll.dll
ntdll.dll/ -1 0 53 `
�� �(��! Z RtlDecodeSystemPointer ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��C�� [ RtlDecompressBuffer ntdll.dll ntdll.dll/ -1 0 52 `
�� ��l�� \ RtlDecompressBufferEx ntdll.dll ntdll.dll/ -1 0 52 `
�� ��;C� ] RtlDecompressFragment ntdll.dll ntdll.dll/ -1 0 46 `
�� �v��� ^ RtlDefaultNpAcl ntdll.dll ntdll.dll/ -1 0 40 `
�� �L� � _ RtlDelete ntdll.dll ntdll.dll/ -1 0 43 `
�� ��dW� ` RtlDeleteAce ntdll.dll
ntdll.dll/ -1 0 57 `
�� ���b�% a RtlDeleteAtomFromAtomTable ntdll.dll
ntdll.dll/ -1 0 58 `
�� �6��& c RtlDeleteBoundaryDescriptor ntdll.dll ntdll.dll/ -1 0 55 `
�� �nio�# d RtlDeleteCriticalSection ntdll.dll
ntdll.dll/ -1 0 59 `
�� �����' e RtlDeleteElementGenericTable ntdll.dll
ntdll.dll/ -1 0 62 `
�� �3���* f RtlDeleteElementGenericTableAvl ntdll.dll ntdll.dll/ -1 0 64 `
�� �&���, g RtlDeleteElementGenericTableAvlEx ntdll.dll ntdll.dll/ -1 0 53 `
�� �^��! h RtlDeleteFunctionTable ntdll.dll
ntdll.dll/ -1 0 61 `
�� ��T�) i RtlDeleteGrowableFunctionTable ntdll.dll
ntdll.dll/ -1 0 49 `
�� �U��� j RtlDeleteHashTable ntdll.dll
ntdll.dll/ -1 0 47 `
�� ��� k RtlDeleteNoSplay ntdll.dll
ntdll.dll/ -1 0 53 `
�� �� )�! l RtlDeleteRegistryValue ntdll.dll
ntdll.dll/ -1 0 48 `
�� �X��� m RtlDeleteResource ntdll.dll ntdll.dll/ -1 0 54 `
�� �W���" n RtlDeleteSecurityObject ntdll.dll ntdll.dll/ -1 0 45 `
�� �a7K� o RtlDeleteTimer ntdll.dll
ntdll.dll/ -1 0 50 `
�� �Wc.� p RtlDeleteTimerQueue ntdll.dll ntdll.dll/ -1 0 52 `
�� �Y��� q RtlDeleteTimerQueueEx ntdll.dll ntdll.dll/ -1 0 69 `
�� ��U��1 r RtlDeregisterSecureMemoryCacheCallback ntdll.dll
ntdll.dll/ -1 0 48 `
�� ��ő� s RtlDeregisterWait ntdll.dll ntdll.dll/ -1 0 50 `
�� �S��� t RtlDeregisterWaitEx ntdll.dll ntdll.dll/ -1 0 62 `
�� ��fv�* u RtlDeriveCapabilitySidsFromName ntdll.dll ntdll.dll/ -1 0 50 `
�� �2�E� v RtlDestroyAtomTable ntdll.dll ntdll.dll/ -1 0 52 `
�� �>� � w RtlDestroyEnvironment ntdll.dll ntdll.dll/ -1 0 52 `
�� �� � x RtlDestroyHandleTable ntdll.dll ntdll.dll/ -1 0 45 `
�� �I83� y RtlDestroyHeap ntdll.dll
ntdll.dll/ -1 0 61 `
�� ��&��) z RtlDestroyMemoryBlockLookaside ntdll.dll
ntdll.dll/ -1 0 51 `
�� � A� { RtlDestroyMemoryZone ntdll.dll
ntdll.dll/ -1 0 58 `
�� �Kڎ�& | RtlDestroyProcessParameters ntdll.dll ntdll.dll/ -1 0 57 `
�� ���&�% } RtlDestroyQueryDebugBuffer ntdll.dll
ntdll.dll/ -1 0 49 `
�� ��c`� ~ RtlDetectHeapLeaks ntdll.dll
ntdll.dll/ -1 0 60 `
�� ��>i�( RtlDetermineDosPathNameType_U ntdll.dll ntdll.dll/ -1 0 56 `
�� ��G�$ � RtlDisableThreadProfiling ntdll.dll ntdll.dll/ -1 0 55 `
�� ��O�# � RtlDllShutdownInProgress ntdll.dll
ntdll.dll/ -1 0 59 `
�� ����' � RtlDnsHostNameToComputerName ntdll.dll
ntdll.dll/ -1 0 50 `
�� ���.� � RtlDoesFileExists_U ntdll.dll ntdll.dll/ -1 0 58 `
�� ��:�& � RtlDoesNameContainWildCards ntdll.dll ntdll.dll/ -1 0 71 `
�� �����3 � RtlDosApplyFileIsolationRedirection_Ustr ntdll.dll
ntdll.dll/ -1 0 74 `
�� ��Z��6 � RtlDosLongPathNameToNtPathName_U_WithStatus ntdll.dll ntdll.dll/ -1 0 82 `
�� � �
�> � RtlDosLongPathNameToRelativeNtPathName_U_WithStatus ntdll.dll ntdll.dll/ -1 0 59 `
�� �ܥ��' � RtlDosPathNameToNtPathName_U ntdll.dll
ntdll.dll/ -1 0 70 `
�� �lw5�2 � RtlDosPathNameToNtPathName_U_WithStatus ntdll.dll ntdll.dll/ -1 0 67 `
�� �U��/ � RtlDosPathNameToRelativeNtPathName_U ntdll.dll
ntdll.dll/ -1 0 78 `
�� ����: � RtlDosPathNameToRelativeNtPathName_U_WithStatus ntdll.dll ntdll.dll/ -1 0 49 `
�� �[��� � RtlDosSearchPath_U ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��@A� � RtlDosSearchPath_Ustr ntdll.dll ntdll.dll/ -1 0 53 `
�� �_���! � RtlDowncaseUnicodeChar ntdll.dll
ntdll.dll/ -1 0 55 `
�� �?UY�# � RtlDowncaseUnicodeString ntdll.dll
ntdll.dll/ -1 0 46 `
�� ���H� � RtlDumpResource ntdll.dll ntdll.dll/ -1 0 56 `
�� �%۪�$ � RtlDuplicateUnicodeString ntdll.dll ntdll.dll/ -1 0 48 `
�� � p� � RtlEmptyAtomTable ntdll.dll ntdll.dll/ -1 0 73 `
�� ����5 � RtlEnableEarlyCriticalSectionEventCreation ntdll.dll
ntdll.dll/ -1 0 55 `
�� �P�o�# � RtlEnableThreadProfiling ntdll.dll
ntdll.dll/ -1 0 47 `
�� �\~t� � RtlEncodePointer ntdll.dll
ntdll.dll/ -1 0 53 `
�� �v�t�! � RtlEncodeRemotePointer ntdll.dll
ntdll.dll/ -1 0 53 `
�� �����! � RtlEncodeSystemPointer ntdll.dll
ntdll.dll/ -1 0 57 `
�� ��7d�% � RtlEndEnumerationHashTable ntdll.dll
ntdll.dll/ -1 0 63 `
�� �l=�+ � RtlEndStrongEnumerationHashTable ntdll.dll
ntdll.dll/ -1 0 61 `
�� ��(�) � RtlEndWeakEnumerationHashTable ntdll.dll
ntdll.dll/ -1 0 54 `
�� ��v��" � RtlEnterCriticalSection ntdll.dll ntdll.dll/ -1 0 50 `
�� ��m� � RtlEnumProcessHeaps ntdll.dll ntdll.dll/ -1 0 57 `
�� �da�% � RtlEnumerateEntryHashTable ntdll.dll
ntdll.dll/ -1 0 55 `
�� �(���# � RtlEnumerateGenericTable ntdll.dll
ntdll.dll/ -1 0 58 `
�� �ə�& � RtlEnumerateGenericTableAvl ntdll.dll ntdll.dll/ -1 0 69 `
�� �� �1 � RtlEnumerateGenericTableLikeADirectory ntdll.dll
ntdll.dll/ -1 0 70 `
�� �v3��2 � RtlEnumerateGenericTableWithoutSplaying ntdll.dll ntdll.dll/ -1 0 73 `
�� �w�
�5 � RtlEnumerateGenericTableWithoutSplayingAvl ntdll.dll
ntdll.dll/ -1 0 51 `
�� �P/�� � RtlEqualComputerName ntdll.dll
ntdll.dll/ -1 0 49 `
�� �Xc�� � RtlEqualDomainName ntdll.dll
ntdll.dll/ -1 0 43 `
�� �L�� � RtlEqualLuid ntdll.dll
ntdll.dll/ -1 0 48 `
�� �d�B� � RtlEqualPrefixSid ntdll.dll ntdll.dll/ -1 0 42 `
�� �b� � RtlEqualSid ntdll.dll ntdll.dll/ -1 0 45 `
�� ��� � RtlEqualString ntdll.dll
ntdll.dll/ -1 0 52 `
�� �"L+� � RtlEqualUnicodeString ntdll.dll ntdll.dll/ -1 0 54 `
�� ��f�" � RtlEqualWnfChangeStamps ntdll.dll ntdll.dll/ -1 0 52 `
�� �
�^� � RtlEraseUnicodeString ntdll.dll ntdll.dll/ -1 0 58 `
�� ���3�& � RtlEthernetAddressToStringA ntdll.dll ntdll.dll/ -1 0 58 `
�� �Y���& � RtlEthernetAddressToStringW ntdll.dll ntdll.dll/ -1 0 58 `
�� �G {�& � RtlEthernetStringToAddressA ntdll.dll ntdll.dll/ -1 0 58 `
�� �=~��& � RtlEthernetStringToAddressW ntdll.dll ntdll.dll/ -1 0 49 `
�� ��Y� � RtlExitUserProcess ntdll.dll
ntdll.dll/ -1 0 48 `
�� �M�� � RtlExitUserThread ntdll.dll ntdll.dll/ -1 0 58 `
�� �r���& � RtlExpandEnvironmentStrings ntdll.dll ntdll.dll/ -1 0 60 `
�� ���( � RtlExpandEnvironmentStrings_U ntdll.dll ntdll.dll/ -1 0 49 `
�� ��p� � RtlExpandHashTable ntdll.dll
ntdll.dll/ -1 0 57 `
�� � ���% � RtlExtendCorrelationVector ntdll.dll
ntdll.dll/ -1 0 60 `
�� ��.D�( � RtlExtendMemoryBlockLookaside ntdll.dll ntdll.dll/ -1 0 50 `
�� �9� � RtlExtendMemoryZone ntdll.dll ntdll.dll/ -1 0 53 `
�� �H��! � RtlExtendedMagicDivide ntdll.dll
ntdll.dll/ -1 0 47 `
�� ����� � RtlExtractBitMap ntdll.dll
ntdll.dll/ -1 0 44 `
�� ���;� � RtlFillMemory ntdll.dll ntdll.dll/ -1 0 49 `
�� �au�� � RtlFillMemoryUlong ntdll.dll
ntdll.dll/ -1 0 53 `
�� �\c��! � RtlFillMemoryUlonglong ntdll.dll
ntdll.dll/ -1 0 47 `
�� �u�� � RtlFindAceByType ntdll.dll
ntdll.dll/ -1 0 66 `
�� ��E�. � RtlFindActivationContextSectionGuid ntdll.dll ntdll.dll/ -1 0 68 `
�� ��{e�0 � RtlFindActivationContextSectionString ntdll.dll ntdll.dll/ -1 0 57 `
�� ��fW�% � RtlFindCharInUnicodeString ntdll.dll
ntdll.dll/ -1 0 47 `
�� �픨� � RtlFindClearBits ntdll.dll
ntdll.dll/ -1 0 53 `
�� �v �! � RtlFindClearBitsAndSet ntdll.dll
ntdll.dll/ -1 0 47 `
�� �w�x� � RtlFindClearRuns ntdll.dll
ntdll.dll/ -1 0 60 `
�� � = �( � RtlFindClosestEncodableLength ntdll.dll ntdll.dll/ -1 0 59 `
�� ��P�' � RtlFindExportedRoutineByName ntdll.dll
ntdll.dll/ -1 0 58 `
�� ��9��& � RtlFindLastBackwardRunClear ntdll.dll ntdll.dll/ -1 0 57 `
�� �a;�% � RtlFindLeastSignificantBit ntdll.dll
ntdll.dll/ -1 0 53 `
�� �G�O�! � RtlFindLongestRunClear ntdll.dll
ntdll.dll/ -1 0 45 `
�� �/�� � RtlFindMessage ntdll.dll
ntdll.dll/ -1 0 56 `
�� �/B��$ � RtlFindMostSignificantBit ntdll.dll ntdll.dll/ -1 0 57 `
�� �G-��% � RtlFindNextForwardRunClear ntdll.dll
ntdll.dll/ -1 0 45 `
�� ��o@� � RtlFindSetBits ntdll.dll
ntdll.dll/ -1 0 53 `
�� �3>,�! � RtlFindSetBitsAndClear ntdll.dll
ntdll.dll/ -1 0 54 `
�� �7�
�" � RtlFindUnicodeSubstring ntdll.dll ntdll.dll/ -1 0 49 `
�� ���:� � RtlFirstEntrySList ntdll.dll
ntdll.dll/ -1 0 46 `
�� ���%� � RtlFirstFreeAce ntdll.dll ntdll.dll/ -1 0 42 `
�� �9��� � RtlFlsAlloc ntdll.dll ntdll.dll/ -1 0 41 `
�� ��< � � RtlFlsFree ntdll.dll
ntdll.dll/ -1 0 45 `
�� ��>�� � RtlFlsGetValue ntdll.dll
ntdll.dll/ -1 0 45 `
�� �CD#� � RtlFlsSetValue ntdll.dll
ntdll.dll/ -1 0 56 `
�� �����$ � RtlFlushSecureMemoryCache ntdll.dll ntdll.dll/ -1 0 58 `
�� ��a�& � RtlFormatCurrentUserKeyPath ntdll.dll ntdll.dll/ -1 0 47 `
�� �� ;� � RtlFormatMessage ntdll.dll
ntdll.dll/ -1 0 49 `
�� ��� � RtlFormatMessageEx ntdll.dll
ntdll.dll/ -1 0 60 `
�� �|�!�( � RtlFreeActivationContextStack ntdll.dll ntdll.dll/ -1 0 48 `
�� ��x�� � RtlFreeAnsiString ntdll.dll ntdll.dll/ -1 0 44 `
�� ��� � RtlFreeHandle ntdll.dll ntdll.dll/ -1 0 42 `
�� ����� � RtlFreeHeap ntdll.dll ntdll.dll/ -1 0 58 `
�� �H
�& � RtlFreeMemoryBlockLookaside ntdll.dll ntdll.dll/ -1 0 47 `
�� �.o[� � RtlFreeOemString ntdll.dll
ntdll.dll/ -1 0 41 `
�� ����� � RtlFreeSid ntdll.dll
ntdll.dll/ -1 0 66 `
�� ���. � RtlFreeThreadActivationContextStack ntdll.dll ntdll.dll/ -1 0 48 `
�� �j\�� � RtlFreeUTF8String ntdll.dll ntdll.dll/ -1 0 51 `
�� ����� � RtlFreeUnicodeString ntdll.dll
ntdll.dll/ -1 0 47 `
�� ��4�� � RtlFreeUserStack ntdll.dll
ntdll.dll/ -1 0 48 `
�� � 4� � RtlGUIDFromString ntdll.dll ntdll.dll/ -1 0 51 `
�� �� �� � RtlGenerate8dot3Name ntdll.dll
ntdll.dll/ -1 0 40 `
�� �u,`� � RtlGetAce ntdll.dll ntdll.dll/ -1 0 60 `
�� �30�( � RtlGetActiveActivationContext ntdll.dll ntdll.dll/ -1 0 52 `
�� ��,� � RtlGetActiveConsoleId ntdll.dll ntdll.dll/ -1 0 64 `
�� ��� �, � RtlGetAppContainerNamedObjectPath ntdll.dll ntdll.dll/ -1 0 55 `
�� �Hb��# � RtlGetAppContainerParent ntdll.dll
ntdll.dll/ -1 0 56 `
�� �� ��$ � RtlGetAppContainerSidType ntdll.dll ntdll.dll/ -1 0 51 `
�� ���Z� � RtlGetCallersAddress ntdll.dll
ntdll.dll/ -1 0 61 `
�� �ܒ-�) � RtlGetCompressionWorkSpaceSize ntdll.dll
ntdll.dll/ -1 0 70 `
�� �#�(�2 � RtlGetConsoleSessionForegroundProcessId ntdll.dll ntdll.dll/ -1 0 62 `
�� �Q{�* � RtlGetControlSecurityDescriptor ntdll.dll ntdll.dll/ -1 0 66 `
�� ����. � RtlGetCriticalSectionRecursionCount ntdll.dll ntdll.dll/ -1 0 55 `
�� ��Z��# � RtlGetCurrentDirectory_U ntdll.dll
ntdll.dll/ -1 0 47 `
�� ��}� � RtlGetCurrentPeb ntdll.dll
ntdll.dll/ -1 0 59 `
�� ����' � RtlGetCurrentProcessorNumber ntdll.dll
ntdll.dll/ -1 0 61 `
�� ��(�) � RtlGetCurrentProcessorNumberEx ntdll.dll
ntdll.dll/ -1 0 60 `
�� ��A�( � RtlGetCurrentServiceSessionId ntdll.dll ntdll.dll/ -1 0 55 `
�� �!��# � RtlGetCurrentTransaction ntdll.dll
ntdll.dll/ -1 0 59 `
�� ���' � RtlGetDaclSecurityDescriptor ntdll.dll
ntdll.dll/ -1 0 57 `
�� �E�=�% � RtlGetDeviceFamilyInfoEnum ntdll.dll
ntdll.dll/ -1 0 56 `
�� �`d��$ � RtlGetElementGenericTable ntdll.dll ntdll.dll/ -1 0 59 `
�� ����' � RtlGetElementGenericTableAvl ntdll.dll
ntdll.dll/ -1 0 60 `
�� �6�'�( � RtlGetEnabledExtendedFeatures ntdll.dll ntdll.dll/ -1 0 44 `
�� �3�� � RtlGetExePath ntdll.dll ntdll.dll/ -1 0 58 `
�� ��4E�& RtlGetExtendedContextLength ntdll.dll ntdll.dll/ -1 0 59 `
�� ����' RtlGetExtendedContextLength2 ntdll.dll
ntdll.dll/ -1 0 57 `
�� �-�}�% RtlGetExtendedFeaturesMask ntdll.dll
ntdll.dll/ -1 0 48 `
�� ��ɼ� RtlGetFileMUIPath ntdll.dll ntdll.dll/ -1 0 42 `
�� ���7� RtlGetFrame ntdll.dll ntdll.dll/ -1 0 51 `
�� ���M� RtlGetFullPathName_U ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��]��! RtlGetFullPathName_UEx ntdll.dll
ntdll.dll/ -1 0 56 `
�� ���$ RtlGetFullPathName_UstrEx ntdll.dll ntdll.dll/ -1 0 58 `
�� ��:��& RtlGetFunctionTableListHead ntdll.dll ntdll.dll/ -1 0 60 `
�� ���h�( RtlGetGroupSecurityDescriptor ntdll.dll ntdll.dll/ -1 0 48 `
�� �o�!�
RtlGetIntegerAtom ntdll.dll ntdll.dll/ -1 0 57 `
�� �)���% RtlGetInterruptTimePrecise ntdll.dll
ntdll.dll/ -1 0 49 `
�� �o�O� RtlGetLastNtStatus ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��^��
RtlGetLastWin32Error ntdll.dll
ntdll.dll/ -1 0 76 `
�� ���8 RtlGetLengthWithoutLastFullDosOrNtPathElement ntdll.dll ntdll.dll/ -1 0 72 `
�� � ���4 RtlGetLengthWithoutTrailingPathSeperators ntdll.dll ntdll.dll/ -1 0 61 `
�� � Y �) RtlGetLocaleFileMappingAddress ntdll.dll
ntdll.dll/ -1 0 56 `
�� ��^ �$ RtlGetLongestNtPathLength ntdll.dll ntdll.dll/ -1 0 60 `
�� �To?�( RtlGetNativeSystemInformation ntdll.dll ntdll.dll/ -1 0 55 `
�� �� ��# RtlGetNextEntryHashTable ntdll.dll
ntdll.dll/ -1 0 50 `
�� �5�� RtlGetNtGlobalFlags ntdll.dll ntdll.dll/ -1 0 50 `
�� ��ʣ� RtlGetNtProductType ntdll.dll ntdll.dll/ -1 0 49 `
�� ��p� RtlGetNtSystemRoot ntdll.dll
ntdll.dll/ -1 0 53 `
�� �L��! RtlGetNtVersionNumbers ntdll.dll
ntdll.dll/ -1 0 60 `
�� �p K�( RtlGetOwnerSecurityDescriptor ntdll.dll ntdll.dll/ -1 0 59 `
�� �a;��' RtlGetPersistedStateLocation ntdll.dll
ntdll.dll/ -1 0 49 `
�� ��p� RtlGetProcessHeaps ntdll.dll
ntdll.dll/ -1 0 48 `
�� �J��� RtlGetProductInfo ntdll.dll ntdll.dll/ -1 0 62 `
�� ��o�* RtlGetReturnAddressHijackTarget ntdll.dll ntdll.dll/ -1 0 59 `
�� ��o��' RtlGetSaclSecurityDescriptor ntdll.dll
ntdll.dll/ -1 0 47 `
�� �. �� ! RtlGetSearchPath ntdll.dll
ntdll.dll/ -1 0 64 `
�� ����, " RtlGetSecurityDescriptorRMControl ntdll.dll ntdll.dll/ -1 0 54 `
�� ��)�" # RtlGetSessionProperties ntdll.dll ntdll.dll/ -1 0 54 `
�� �T;�" $ RtlGetSetBootStatusData ntdll.dll ntdll.dll/ -1 0 46 `
�� �+4�� % RtlGetSuiteMask ntdll.dll ntdll.dll/ -1 0 53 `
�� �-#�! & RtlGetSystemBootStatus ntdll.dll
ntdll.dll/ -1 0 55 `
�� ���'�# ' RtlGetSystemBootStatusEx ntdll.dll
ntdll.dll/ -1 0 63 `
�� ��ߴ�+ ( RtlGetSystemPreferredUILanguages ntdll.dll
ntdll.dll/ -1 0 54 `
�� �:��" ) RtlGetSystemTimePrecise ntdll.dll ntdll.dll/ -1 0 52 `
�� ���� * RtlGetThreadErrorMode ntdll.dll ntdll.dll/ -1 0 56 `
�� ��C]�$ + RtlGetThreadLangIdByIndex ntdll.dll ntdll.dll/ -1 0 63 `
�� �) 7�+ , RtlGetThreadPreferredUILanguages ntdll.dll
ntdll.dll/ -1 0 61 `
�� �,�b�) - RtlGetThreadWorkOnBehalfTicket ntdll.dll
ntdll.dll/ -1 0 57 `
�� �վ*�% . RtlGetTokenNamedObjectPath ntdll.dll
ntdll.dll/ -1 0 51 `
�� ���=� / RtlGetUILanguageInfo ntdll.dll
ntdll.dll/ -1 0 53 `
�� ���{�! 0 RtlGetUnloadEventTrace ntdll.dll
ntdll.dll/ -1 0 55 `
�� ����# 1 RtlGetUnloadEventTraceEx ntdll.dll
ntdll.dll/ -1 0 49 `
�� �r�x� 2 RtlGetUserInfoHeap ntdll.dll
ntdll.dll/ -1 0 61 `
�� �#���) 3 RtlGetUserPreferredUILanguages ntdll.dll
ntdll.dll/ -1 0 44 `
�� �%I�� 4 RtlGetVersion ntdll.dll ntdll.dll/ -1 0 51 `
�� �� �� 5 RtlGrowFunctionTable ntdll.dll
ntdll.dll/ -1 0 58 `
�� �� �& 6 RtlGuardCheckLongJumpTarget ntdll.dll ntdll.dll/ -1 0 51 `
�� ��
k� 7 RtlHashUnicodeString ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��J� 8 RtlHeapTrkInitialize ntdll.dll
ntdll.dll/ -1 0 56 `
�� ����$ 9 RtlIdentifierAuthoritySid ntdll.dll ntdll.dll/ -1 0 44 `
�� � �� : RtlIdnToAscii ntdll.dll ntdll.dll/ -1 0 54 `
�� �Ā �" ; RtlIdnToNameprepUnicode ntdll.dll ntdll.dll/ -1 0 46 `
�� �֣� < RtlIdnToUnicode ntdll.dll ntdll.dll/ -1 0 59 `
�� �j��' = RtlImageDirectoryEntryToData ntdll.dll
ntdll.dll/ -1 0 47 `
�� ��W�� > RtlImageNtHeader ntdll.dll
ntdll.dll/ -1 0 49 `
�� �Zh� ? RtlImageNtHeaderEx ntdll.dll
ntdll.dll/ -1 0 51 `
�� �#9�� @ RtlImageRvaToSection ntdll.dll
ntdll.dll/ -1 0 46 `
�� � 4�� A RtlImageRvaToVa ntdll.dll ntdll.dll/ -1 0 49 `
�� ��b�� B RtlImpersonateSelf ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��b<� C RtlImpersonateSelfEx ntdll.dll
ntdll.dll/ -1 0 60 `
�� ���Q�( D RtlIncrementCorrelationVector ntdll.dll ntdll.dll/ -1 0 48 `
�� ��U� E RtlInitAnsiString ntdll.dll ntdll.dll/ -1 0 50 `
�� ���!� F RtlInitAnsiStringEx ntdll.dll ntdll.dll/ -1 0 51 `
�� ��� H RtlInitCodePageTable ntdll.dll
ntdll.dll/ -1 0 58 `
�� �"d;�& I RtlInitEnumerationHashTable ntdll.dll ntdll.dll/ -1 0 47 `
�� � �d� K RtlInitNlsTables ntdll.dll
ntdll.dll/ -1 0 44 `
�� �b�h� M RtlInitString ntdll.dll ntdll.dll/ -1 0 46 `
�� ����� N RtlInitStringEx ntdll.dll ntdll.dll/ -1 0 64 `
�� ��M
�, O RtlInitStrongEnumerationHashTable ntdll.dll ntdll.dll/ -1 0 48 `
�� �U��� P RtlInitUTF8String ntdll.dll ntdll.dll/ -1 0 50 `
�� �,J�� Q RtlInitUTF8StringEx ntdll.dll ntdll.dll/ -1 0 51 `
�� ��3� R RtlInitUnicodeString ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��`��! S RtlInitUnicodeStringEx ntdll.dll
ntdll.dll/ -1 0 62 `
�� ����* T RtlInitWeakEnumerationHashTable ntdll.dll ntdll.dll/ -1 0 55 `
�� �>���# U RtlInitializeAtomPackage ntdll.dll
ntdll.dll/ -1 0 50 `
�� �*�� V RtlInitializeBitMap ntdll.dll ntdll.dll/ -1 0 61 `
�� ���) W RtlInitializeConditionVariable ntdll.dll
ntdll.dll/ -1 0 61 `
�� �����) Y RtlInitializeCorrelationVector ntdll.dll
ntdll.dll/ -1 0 59 `
�� ��V��' Z RtlInitializeCriticalSection ntdll.dll
ntdll.dll/ -1 0 71 `
�� ���y�3 [ RtlInitializeCriticalSectionAndSpinCount ntdll.dll
ntdll.dll/ -1 0 61 `
�� �����) \ RtlInitializeCriticalSectionEx ntdll.dll
ntdll.dll/ -1 0 59 `
�� ��q�' ] RtlInitializeExtendedContext ntdll.dll
ntdll.dll/ -1 0 60 `
�� ��F��( ^ RtlInitializeExtendedContext2 ntdll.dll ntdll.dll/ -1 0 56 `
�� �X���$ _ RtlInitializeGenericTable ntdll.dll ntdll.dll/ -1 0 59 `
�� ��y��' ` RtlInitializeGenericTableAvl ntdll.dll
ntdll.dll/ -1 0 55 `
�� ��D�# a RtlInitializeHandleTable ntdll.dll
ntdll.dll/ -1 0 49 `
�� �apJ� c RtlInitializeRXact ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��d!� d RtlInitializeResource ntdll.dll ntdll.dll/ -1 0 53 `
�� �sԯ�! e RtlInitializeSListHead ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��)� f RtlInitializeSRWLock ntdll.dll
ntdll.dll/ -1 0 47 `
�� ��M`� g RtlInitializeSid ntdll.dll
ntdll.dll/ -1 0 49 `
�� ��"{� h RtlInitializeSidEx ntdll.dll
ntdll.dll/ -1 0 59 `
�� �+_��' i RtlInsertElementGenericTable ntdll.dll
ntdll.dll/ -1 0 62 `
�� �O� �* j RtlInsertElementGenericTableAvl ntdll.dll ntdll.dll/ -1 0 63 `
�� �����+ k RtlInsertElementGenericTableFull ntdll.dll
ntdll.dll/ -1 0 66 `
�� ���. l RtlInsertElementGenericTableFullAvl ntdll.dll ntdll.dll/ -1 0 54 `
�� �U�f�" m RtlInsertEntryHashTable ntdll.dll ntdll.dll/ -1 0 62 `
�� � �m�* n RtlInstallFunctionTableCallback ntdll.dll ntdll.dll/ -1 0 54 `
�� �b�o�" o RtlInt64ToUnicodeString ntdll.dll ntdll.dll/ -1 0 47 `
�� �� � p RtlIntegerToChar ntdll.dll
ntdll.dll/ -1 0 56 `
�� �Vz��$ q RtlIntegerToUnicodeString ntdll.dll ntdll.dll/ -1 0 56 `
�� �����$ r RtlInterlockedClearBitRun ntdll.dll ntdll.dll/ -1 0 55 `
�� �>���# s RtlInterlockedFlushSList ntdll.dll
ntdll.dll/ -1 0 58 `
�� �Q1�& t RtlInterlockedPopEntrySList ntdll.dll ntdll.dll/ -1 0 59 `
�� �w��' u RtlInterlockedPushEntrySList ntdll.dll
ntdll.dll/ -1 0 58 `
�� ��6�& v RtlInterlockedPushListSList ntdll.dll ntdll.dll/ -1 0 60 `
�� � {Y�( w RtlInterlockedPushListSListEx ntdll.dll ntdll.dll/ -1 0 54 `
�� �E�" x RtlInterlockedSetBitRun ntdll.dll ntdll.dll/ -1 0 55 `
�� ��$�# y RtlIoDecodeMemIoResource ntdll.dll
ntdll.dll/ -1 0 55 `
�� �u�f�# z RtlIoEncodeMemIoResource ntdll.dll
ntdll.dll/ -1 0 54 `
�� ��" { RtlIpv4AddressToStringA ntdll.dll ntdll.dll/ -1 0 56 `
�� ��N��$ | RtlIpv4AddressToStringExA ntdll.dll ntdll.dll/ -1 0 56 `
�� ��k��$ } RtlIpv4AddressToStringExW ntdll.dll ntdll.dll/ -1 0 54 `
�� ����" ~ RtlIpv4AddressToStringW ntdll.dll ntdll.dll/ -1 0 54 `
�� ��e �" RtlIpv4StringToAddressA ntdll.dll ntdll.dll/ -1 0 56 `
�� �=���$ � RtlIpv4StringToAddressExA ntdll.dll ntdll.dll/ -1 0 56 `
�� ��A��$ � RtlIpv4StringToAddressExW ntdll.dll ntdll.dll/ -1 0 54 `
�� �����" � RtlIpv4StringToAddressW ntdll.dll ntdll.dll/ -1 0 54 `
�� �~���" � RtlIpv6AddressToStringA ntdll.dll ntdll.dll/ -1 0 56 `
�� �p^6�$ � RtlIpv6AddressToStringExA ntdll.dll ntdll.dll/ -1 0 56 `
�� �YkO�$ � RtlIpv6AddressToStringExW ntdll.dll ntdll.dll/ -1 0 54 `
�� �����" � RtlIpv6AddressToStringW ntdll.dll ntdll.dll/ -1 0 54 `
�� ��" � RtlIpv6StringToAddressA ntdll.dll ntdll.dll/ -1 0 56 `
�� �j��$ � RtlIpv6StringToAddressExA ntdll.dll ntdll.dll/ -1 0 56 `
�� ���$ � RtlIpv6StringToAddressExW ntdll.dll ntdll.dll/ -1 0 54 `
�� �v���" � RtlIpv6StringToAddressW ntdll.dll ntdll.dll/ -1 0 59 `
�� �g�h�' � RtlIsActivationContextActive ntdll.dll
ntdll.dll/ -1 0 49 `
�� ��s�� � RtlIsCapabilitySid ntdll.dll
ntdll.dll/ -1 0 57 `
�� �w1�% � RtlIsCloudFilesPlaceholder ntdll.dll
ntdll.dll/ -1 0 57 `
�� �1���% � RtlIsCriticalSectionLocked ntdll.dll
ntdll.dll/ -1 0 65 `
�� �ƙ8�- � RtlIsCriticalSectionLockedByThread ntdll.dll
ntdll.dll/ -1 0 50 `
�� ���� � RtlIsCurrentProcess ntdll.dll ntdll.dll/ -1 0 49 `
�� ��+�� � RtlIsCurrentThread ntdll.dll
ntdll.dll/ -1 0 51 `
�� �'�� � RtlIsDosDeviceName_U ntdll.dll
ntdll.dll/ -1 0 47 `
�� ��}~� � RtlIsElevatedRid ntdll.dll
ntdll.dll/ -1 0 53 `
�� �la��! � RtlIsGenericTableEmpty ntdll.dll
ntdll.dll/ -1 0 56 `
�� ���y�$ � RtlIsGenericTableEmptyAvl ntdll.dll ntdll.dll/ -1 0 51 `
�� ����� � RtlIsMultiSessionSku ntdll.dll
ntdll.dll/ -1 0 58 `
�� �պ�& � RtlIsMultiUsersInSessionSku ntdll.dll ntdll.dll/ -1 0 52 `
�� �
j=� � RtlIsNameInExpression ntdll.dll ntdll.dll/ -1 0 61 `
�� ��9��) � RtlIsNameInUnUpcasedExpression ntdll.dll
ntdll.dll/ -1 0 53 `
�� �>��! � RtlIsNameLegalDOS8Dot3 ntdll.dll
ntdll.dll/ -1 0 72 `
�� �����4 � RtlIsNonEmptyDirectoryReparsePointAllowed ntdll.dll ntdll.dll/ -1 0 52 `
�� ��g�� � RtlIsNormalizedString ntdll.dll ntdll.dll/ -1 0 46 `
�� �x&� � RtlIsPackageSid ntdll.dll ntdll.dll/ -1 0 61 `
�� � �) � RtlIsParentOfChildAppContainer ntdll.dll
ntdll.dll/ -1 0 54 `
�� �0ʌ�" � RtlIsPartialPlaceholder ntdll.dll ntdll.dll/ -1 0 64 `
�� ��04�, � RtlIsPartialPlaceholderFileHandle ntdll.dll ntdll.dll/ -1 0 62 `
�� ���* � RtlIsPartialPlaceholderFileInfo ntdll.dll ntdll.dll/ -1 0 59 `
�� �R}O�' � RtlIsProcessorFeaturePresent ntdll.dll
ntdll.dll/ -1 0 58 `
�� ���u�& � RtlIsStateSeparationEnabled ntdll.dll ntdll.dll/ -1 0 47 `
�� �Oe�� � RtlIsTextUnicode ntdll.dll
ntdll.dll/ -1 0 61 `
�� �tq0�) � RtlIsThreadWithinLoaderCallout ntdll.dll
ntdll.dll/ -1 0 51 `
�� �?� � � RtlIsUntrustedObject ntdll.dll
ntdll.dll/ -1 0 47 `
�� ��>� � RtlIsValidHandle ntdll.dll
ntdll.dll/ -1 0 52 `
�� �g0*� � RtlIsValidIndexHandle ntdll.dll ntdll.dll/ -1 0 51 `
�� �� �� � RtlIsValidLocaleName ntdll.dll
ntdll.dll/ -1 0 61 `
�� ����) � RtlIsValidProcessTrustLabelSid ntdll.dll
ntdll.dll/ -1 0 46 `
�� �x�� � RtlIsZeroMemory ntdll.dll ntdll.dll/ -1 0 54 `
�� ��nj�" � RtlKnownExceptionFilter ntdll.dll ntdll.dll/ -1 0 51 `
�� �oE�� � RtlLCIDToCultureName ntdll.dll
ntdll.dll/ -1 0 52 `
�� �K.�� � RtlLargeIntegerToChar ntdll.dll ntdll.dll/ -1 0 50 `
�� ��.c� � RtlLcidToLocaleName ntdll.dll ntdll.dll/ -1 0 54 `
�� �h)��" � RtlLeaveCriticalSection ntdll.dll ntdll.dll/ -1 0 51 `
�� ��S�� � RtlLengthRequiredSid ntdll.dll
ntdll.dll/ -1 0 58 `
�� �c�2�& � RtlLengthSecurityDescriptor ntdll.dll ntdll.dll/ -1 0 43 `
�� �\�� � RtlLengthSid ntdll.dll
ntdll.dll/ -1 0 55 `
�� ��XM�# � RtlLocalTimeToSystemTime ntdll.dll
ntdll.dll/ -1 0 50 `
�� ���� � RtlLocaleNameToLcid ntdll.dll ntdll.dll/ -1 0 55 `
�� �?���# � RtlLocateExtendedFeature ntdll.dll
ntdll.dll/ -1 0 56 `
�� �2n��$ � RtlLocateExtendedFeature2 ntdll.dll ntdll.dll/ -1 0 53 `
�� ��D�! � RtlLocateLegacyContext ntdll.dll
ntdll.dll/ -1 0 52 `
�� �5o� � RtlLockBootStatusData ntdll.dll ntdll.dll/ -1 0 51 `
�� �P�� � RtlLockCurrentThread ntdll.dll
ntdll.dll/ -1 0 42 `
�� ����� � RtlLockHeap ntdll.dll ntdll.dll/ -1 0 58 `
�� �w��& � RtlLockMemoryBlockLookaside ntdll.dll ntdll.dll/ -1 0 48 `
�� �%�P� � RtlLockMemoryZone ntdll.dll ntdll.dll/ -1 0 51 `
�� ��5� � RtlLockModuleSection ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��� � RtlLogStackBackTrace ntdll.dll
ntdll.dll/ -1 0 55 `
�� �1l��# � RtlLookupAtomInAtomTable ntdll.dll
ntdll.dll/ -1 0 59 `
�� �G���' � RtlLookupElementGenericTable ntdll.dll
ntdll.dll/ -1 0 62 `
�� �~���* � RtlLookupElementGenericTableAvl ntdll.dll ntdll.dll/ -1 0 63 `
�� ��'��+ � RtlLookupElementGenericTableFull ntdll.dll
ntdll.dll/ -1 0 66 `
�� ��g�. � RtlLookupElementGenericTableFullAvl ntdll.dll ntdll.dll/ -1 0 54 `
�� ���4�" � RtlLookupEntryHashTable ntdll.dll ntdll.dll/ -1 0 75 `
�� �� d�7 � RtlLookupFirstMatchingElementGenericTableAvl ntdll.dll
ntdll.dll/ -1 0 53 `
�� ���r�! � RtlLookupFunctionEntry ntdll.dll
ntdll.dll/ -1 0 53 `
�� ����! � RtlLookupFunctionTable ntdll.dll
ntdll.dll/ -1 0 52 `
�� � �� � RtlMakeSelfRelativeSD ntdll.dll ntdll.dll/ -1 0 48 `
�� ��%�� � RtlMapGenericMask ntdll.dll ntdll.dll/ -1 0 60 `
�� �*���( � RtlMapSecurityErrorToNtStatus ntdll.dll ntdll.dll/ -1 0 44 `
�� �o�� � RtlMoveMemory ntdll.dll ntdll.dll/ -1 0 64 `
�� ��� �, � RtlMultiAppendUnicodeStringBuffer ntdll.dll ntdll.dll/ -1 0 53 `
�� �����! � RtlMultiByteToUnicodeN ntdll.dll
ntdll.dll/ -1 0 56 `
�� �����$ � RtlMultiByteToUnicodeSize ntdll.dll ntdll.dll/ -1 0 54 `
�� ���" � RtlMultipleAllocateHeap ntdll.dll ntdll.dll/ -1 0 50 `
�� �0�� � RtlMultipleFreeHeap ntdll.dll ntdll.dll/ -1 0 59 `
�� �����' � RtlNewInstanceSecurityObject ntdll.dll
ntdll.dll/ -1 0 58 `
�� �i�b�& � RtlNewSecurityGrantedAccess ntdll.dll ntdll.dll/ -1 0 51 `
�� ��$�� � RtlNewSecurityObject ntdll.dll
ntdll.dll/ -1 0 53 `
�� ���D�! � RtlNewSecurityObjectEx ntdll.dll
ntdll.dll/ -1 0 74 `
�� � ]�6 � RtlNewSecurityObjectWithMultipleInheritance ntdll.dll ntdll.dll/ -1 0 56 `
�� ��fG�$ � RtlNormalizeProcessParams ntdll.dll ntdll.dll/ -1 0 61 `
�� �C���) � RtlNormalizeSecurityDescriptor ntdll.dll
ntdll.dll/ -1 0 49 `
�� �r�S� � RtlNormalizeString ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��R�� � RtlNotifyFeatureUsage ntdll.dll ntdll.dll/ -1 0 57 `
�� ��h��% � RtlNtPathNameToDosPathName ntdll.dll
ntdll.dll/ -1 0 52 `
�� �)|� � RtlNtStatusToDosError ntdll.dll ntdll.dll/ -1 0 57 `
�� ��|�% � RtlNtStatusToDosErrorNoTeb ntdll.dll
ntdll.dll/ -1 0 60 `
�� �� ��( � RtlNumberGenericTableElements ntdll.dll ntdll.dll/ -1 0 63 `
�� �b_=�+ � RtlNumberGenericTableElementsAvl ntdll.dll
ntdll.dll/ -1 0 51 `
�� �kN� � RtlNumberOfClearBits ntdll.dll
ntdll.dll/ -1 0 58 `
�� �4��& � RtlNumberOfClearBitsInRange ntdll.dll ntdll.dll/ -1 0 49 `
�� �1�� � RtlNumberOfSetBits ntdll.dll
ntdll.dll/ -1 0 56 `
�� �x�J�$ � RtlNumberOfSetBitsInRange ntdll.dll ntdll.dll/ -1 0 57 `
�� ���% � RtlNumberOfSetBitsUlongPtr ntdll.dll
ntdll.dll/ -1 0 56 `
�� �{g��$ � RtlOemStringToUnicodeSize ntdll.dll ntdll.dll/ -1 0 58 `
�� ��h�& � RtlOemStringToUnicodeString ntdll.dll ntdll.dll/ -1 0 47 `
�� �g�J� � RtlOemToUnicodeN ntdll.dll
ntdll.dll/ -1 0 49 `
�� ��� � RtlOpenCurrentUser ntdll.dll
ntdll.dll/ -1 0 51 `
�� �BE�� � RtlOsDeploymentState ntdll.dll
ntdll.dll/ -1 0 50 `
�� �v � � RtlOwnerAcesPresent ntdll.dll ntdll.dll/ -1 0 48 `
�� ��8�� � RtlPcToFileHeader ntdll.dll ntdll.dll/ -1 0 52 `
�� �6��� � RtlPinAtomInAtomTable ntdll.dll ntdll.dll/ -1 0 42 `
�� ���*� � RtlPopFrame ntdll.dll ntdll.dll/ -1 0 46 `
�� ����� � RtlPrefixString ntdll.dll ntdll.dll/ -1 0 53 `
�� �*+`�! � RtlPrefixUnicodeString ntdll.dll
ntdll.dll/ -1 0 48 `
�� ����� � RtlProcessFlsData ntdll.dll ntdll.dll/ -1 0 53 `
�� �I?��! � RtlPublishWnfStateData ntdll.dll
ntdll.dll/ -1 0 43 `
�� �@�~� � RtlPushFrame ntdll.dll
ntdll.dll/ -1 0 75 `
�� �u� �7 � RtlQueryActivationContextApplicationSettings ntdll.dll
ntdll.dll/ -1 0 63 `
�� �<�f�+ � RtlQueryAllFeatureConfigurations ntdll.dll
ntdll.dll/ -1 0 54 `
�� � �y�" � RtlQueryAtomInAtomTable ntdll.dll ntdll.dll/ -1 0 49 `
�� ��� � RtlQueryDepthSList ntdll.dll
ntdll.dll/ -1 0 65 `
�� �� H�- � RtlQueryDynamicTimeZoneInformation ntdll.dll
ntdll.dll/ -1 0 53 `
�� �� ��! � RtlQueryElevationFlags ntdll.dll
ntdll.dll/ -1 0 58 `
�� �9��& � RtlQueryEnvironmentVariable ntdll.dll ntdll.dll/ -1 0 60 `
�� �H��( RtlQueryEnvironmentVariable_U ntdll.dll ntdll.dll/ -1 0 59 `
�� ����' RtlQueryFeatureConfiguration ntdll.dll
ntdll.dll/ -1 0 70 `
�� �S�!�2 RtlQueryFeatureConfigurationChangeStamp ntdll.dll ntdll.dll/ -1 0 76 `
�� �I���8 RtlQueryFeatureUsageNotificationSubscriptions ntdll.dll ntdll.dll/ -1 0 54 `
�� ��۹�" RtlQueryHeapInformation ntdll.dll ntdll.dll/ -1 0 60 `
�� �x ��( RtlQueryImageMitigationPolicy ntdll.dll ntdll.dll/ -1 0 53 `
�� �l���! RtlQueryInformationAcl ntdll.dll
ntdll.dll/ -1 0 67 `
�� ��.S�/ RtlQueryInformationActivationContext ntdll.dll
ntdll.dll/ -1 0 73 `
�� ��n�5 RtlQueryInformationActiveActivationContext ntdll.dll
ntdll.dll/ -1 0 52 `
�� �6�� RtlQueryPackageClaims ntdll.dll ntdll.dll/ -1 0 54 `
�� �T66�" RtlQueryPackageIdentity ntdll.dll ntdll.dll/ -1 0 56 `
�� �����$
RtlQueryPackageIdentityEx ntdll.dll ntdll.dll/ -1 0 57 `
�� ���`�% RtlQueryPerformanceCounter ntdll.dll
ntdll.dll/ -1 0 59 `
�� � ��' RtlQueryPerformanceFrequency ntdll.dll
ntdll.dll/ -1 0 66 `
�� ����. RtlQueryProcessBackTraceInformation ntdll.dll ntdll.dll/ -1 0 62 `
�� ��4P�* RtlQueryProcessDebugInformation ntdll.dll ntdll.dll/ -1 0 61 `
�� �3��) RtlQueryProcessLockInformation ntdll.dll
ntdll.dll/ -1 0 74 `
�� ���/�6 RtlQueryProcessPlaceholderCompatibilityMode ntdll.dll ntdll.dll/ -1 0 54 `
�� �Ƅ�" RtlQueryProtectedPolicy ntdll.dll ntdll.dll/ -1 0 64 `
�� �S�"�, RtlQueryRegistryValueWithFallback ntdll.dll ntdll.dll/ -1 0 53 `
�� ��R��! RtlQueryRegistryValues ntdll.dll
ntdll.dll/ -1 0 55 `
�� �!���# RtlQueryRegistryValuesEx ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��!}�! RtlQuerySecurityObject ntdll.dll
ntdll.dll/ -1 0 73 `
�� �G<�5 RtlQueryThreadPlaceholderCompatibilityMode ntdll.dll
ntdll.dll/ -1 0 54 `
�� �Q+��" RtlQueryThreadProfiling ntdll.dll ntdll.dll/ -1 0 58 `
�� � $��& RtlQueryTimeZoneInformation ntdll.dll ntdll.dll/ -1 0 59 `
�� ��s
�' RtlQueryTokenHostIdAsUlong64 ntdll.dll
ntdll.dll/ -1 0 60 `
�� �)I��( RtlQueryUnbiasedInterruptTime ntdll.dll ntdll.dll/ -1 0 57 `
�� ���z�% ! RtlQueryValidationRunlevel ntdll.dll
ntdll.dll/ -1 0 58 `
�� ����& " RtlQueryWnfMetaNotification ntdll.dll ntdll.dll/ -1 0 51 `
�� �Jxb� # RtlQueryWnfStateData ntdll.dll
ntdll.dll/ -1 0 68 `
�� � � �0 $ RtlQueryWnfStateDataWithExplicitScope ntdll.dll ntdll.dll/ -1 0 53 `
�� �.���! % RtlQueueApcWow64Thread ntdll.dll
ntdll.dll/ -1 0 47 `
�� �h�� & RtlQueueWorkItem ntdll.dll
ntdll.dll/ -1 0 63 `
�� �|@�+ ' RtlRaiseCustomSystemEventTrigger ntdll.dll
ntdll.dll/ -1 0 48 `
�� �\�w� ( RtlRaiseException ntdll.dll ntdll.dll/ -1 0 45 `
�� ���� ) RtlRaiseStatus ntdll.dll
ntdll.dll/ -1 0 40 `
�� ��J�� * RtlRandom ntdll.dll ntdll.dll/ -1 0 42 `
�� ��S_� + RtlRandomEx ntdll.dll ntdll.dll/ -1 0 48 `
�� ��� , RtlRbInsertNodeEx ntdll.dll ntdll.dll/ -1 0 46 `
�� ���
� - RtlRbRemoveNode ntdll.dll ntdll.dll/ -1 0 48 `
�� �n��� . RtlReAllocateHeap ntdll.dll ntdll.dll/ -1 0 57 `
�� �̱��% 1 RtlReadThreadProfilingData ntdll.dll
ntdll.dll/ -1 0 49 `
�� ��V�� 2 RtlRealPredecessor ntdll.dll
ntdll.dll/ -1 0 47 `
�� ��$�� 3 RtlRealSuccessor ntdll.dll
ntdll.dll/ -1 0 80 `
�� ��{G�< 4 RtlRegisterFeatureConfigurationChangeNotification ntdll.dll ntdll.dll/ -1 0 64 `
�� �_�o�, 5 RtlRegisterForWnfMetaNotification ntdll.dll ntdll.dll/ -1 0 67 `
�� �y�L�/ 6 RtlRegisterSecureMemoryCacheCallback ntdll.dll
ntdll.dll/ -1 0 57 `
�� �7y�% 7 RtlRegisterThreadWithCsrss ntdll.dll
ntdll.dll/ -1 0 46 `
�� �U$]� 8 RtlRegisterWait ntdll.dll ntdll.dll/ -1 0 58 `
�� ��"��& 9 RtlReleaseActivationContext ntdll.dll ntdll.dll/ -1 0 45 `
�� �xJm� ; RtlReleasePath ntdll.dll
ntdll.dll/ -1 0 48 `
�� �ԑ�� < RtlReleasePebLock ntdll.dll ntdll.dll/ -1 0 50 `
�� � �3� = RtlReleasePrivilege ntdll.dll ntdll.dll/ -1 0 53 `
�� ���! > RtlReleaseRelativeName ntdll.dll
ntdll.dll/ -1 0 49 `
�� �B-� ? RtlReleaseResource ntdll.dll
ntdll.dll/ -1 0 57 `
�� ��T��% @ RtlReleaseSRWLockExclusive ntdll.dll
ntdll.dll/ -1 0 54 `
�� �d���" A RtlReleaseSRWLockShared ntdll.dll ntdll.dll/ -1 0 44 `
�� ��6� B RtlRemoteCall ntdll.dll ntdll.dll/ -1 0 54 `
�� �(<��" C RtlRemoveEntryHashTable ntdll.dll ntdll.dll/ -1 0 50 `
�� ���7� D RtlRemovePrivileges ntdll.dll ntdll.dll/ -1 0 63 `
�� �G��+ E RtlRemoveVectoredContinueHandler ntdll.dll
ntdll.dll/ -1 0 64 `
�� �Ē�, F RtlRemoveVectoredExceptionHandler ntdll.dll ntdll.dll/ -1 0 48 `
�� ��� � G RtlReplaceSidInSd ntdll.dll ntdll.dll/ -1 0 62 `
�� �x>!�* H RtlReplaceSystemDirectoryInPath ntdll.dll ntdll.dll/ -1 0 49 `
�� ��W�� I RtlReportException ntdll.dll
ntdll.dll/ -1 0 51 `
�� � � J RtlReportExceptionEx ntdll.dll
ntdll.dll/ -1 0 57 `
�� ����% K RtlReportSilentProcessExit ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��2��! L RtlReportSqmEscalation ntdll.dll
ntdll.dll/ -1 0 59 `
�� �{{ �' M RtlResetMemoryBlockLookaside ntdll.dll
ntdll.dll/ -1 0 54 `
�� �� �" P RtlResetRtlTranslations ntdll.dll ntdll.dll/ -1 0 59 `
�� �$�' Q RtlRestoreBootStatusDefaults ntdll.dll
ntdll.dll/ -1 0 48 `
�� �-��� R RtlRestoreContext ntdll.dll ntdll.dll/ -1 0 55 `
�� �Y>��# S RtlRestoreLastWin32Error ntdll.dll
ntdll.dll/ -1 0 65 `
�� ���- T RtlRestoreSystemBootStatusDefaults ntdll.dll
ntdll.dll/ -1 0 67 `
�� ���S�/ U RtlRestoreThreadPreferredUILanguages ntdll.dll
ntdll.dll/ -1 0 56 `
�� ��(��$ X RtlRunDecodeUnicodeString ntdll.dll ntdll.dll/ -1 0 56 `
�� ��k<�$ Y RtlRunEncodeUnicodeString ntdll.dll ntdll.dll/ -1 0 56 `
�� ��] �$ Z RtlRunOnceBeginInitialize ntdll.dll ntdll.dll/ -1 0 49 `
�� ��e�� [ RtlRunOnceComplete ntdll.dll
ntdll.dll/ -1 0 52 `
�� �@��� \ RtlRunOnceExecuteOnce ntdll.dll ntdll.dll/ -1 0 51 `
�� ��Ŀ� ] RtlRunOnceInitialize ntdll.dll
ntdll.dll/ -1 0 56 `
�� ��vg�$ ^ RtlSecondsSince1970ToTime ntdll.dll ntdll.dll/ -1 0 56 `
�� �e���$ _ RtlSecondsSince1980ToTime ntdll.dll ntdll.dll/ -1 0 58 `
�� �Xb{�& a RtlSelfRelativeToAbsoluteSD ntdll.dll ntdll.dll/ -1 0 59 `
�� �X#�' b RtlSelfRelativeToAbsoluteSD2 ntdll.dll
ntdll.dll/ -1 0 45 `
�� ���� c RtlSendMsgToSm ntdll.dll
ntdll.dll/ -1 0 44 `
�� �ER)� d RtlSetAllBits ntdll.dll ntdll.dll/ -1 0 40 `
�� ����� f RtlSetBit ntdll.dll ntdll.dll/ -1 0 41 `
�� �1�� g RtlSetBits ntdll.dll
ntdll.dll/ -1 0 62 `
�� � ��* h RtlSetControlSecurityDescriptor ntdll.dll ntdll.dll/ -1 0 61 `
�� �/�) i RtlSetCriticalSectionSpinCount ntdll.dll
ntdll.dll/ -1 0 55 `
�� �a�D�# j RtlSetCurrentDirectory_U ntdll.dll
ntdll.dll/ -1 0 55 `
�� �G��# k RtlSetCurrentEnvironment ntdll.dll
ntdll.dll/ -1 0 55 `
�� ���# l RtlSetCurrentTransaction ntdll.dll
ntdll.dll/ -1 0 59 `
�� �Q���' m RtlSetDaclSecurityDescriptor ntdll.dll
ntdll.dll/ -1 0 63 `
�� ��S �+ n RtlSetDynamicTimeZoneInformation ntdll.dll
ntdll.dll/ -1 0 55 `
�� ��ek�# o RtlSetEnvironmentStrings ntdll.dll
ntdll.dll/ -1 0 51 `
�� �,�4� p RtlSetEnvironmentVar ntdll.dll
ntdll.dll/ -1 0 56 `
�� �����$ q RtlSetEnvironmentVariable ntdll.dll ntdll.dll/ -1 0 57 `
�� ���h�% r RtlSetExtendedFeaturesMask ntdll.dll
ntdll.dll/ -1 0 58 `
�� ����& s RtlSetFeatureConfigurations ntdll.dll ntdll.dll/ -1 0 60 `
�� �i��( t RtlSetGroupSecurityDescriptor ntdll.dll ntdll.dll/ -1 0 52 `
�� �f�� u RtlSetHeapInformation ntdll.dll ntdll.dll/ -1 0 58 `
�� ��
<�& v RtlSetImageMitigationPolicy ntdll.dll ntdll.dll/ -1 0 51 `
�� �� �� w RtlSetInformationAcl ntdll.dll
ntdll.dll/ -1 0 57 `
�� �6��% x RtlSetIoCompletionCallback ntdll.dll
ntdll.dll/ -1 0 51 `
�� �4�� y RtlSetLastWin32Error ntdll.dll
ntdll.dll/ -1 0 74 `
�� �����6 z RtlSetLastWin32ErrorAndNtStatusFromNtStatus ntdll.dll ntdll.dll/ -1 0 60 `
�� ��L�( | RtlSetOwnerSecurityDescriptor ntdll.dll ntdll.dll/ -1 0 60 `
�� ��o�( } RtlSetPortableOperatingSystem ntdll.dll ntdll.dll/ -1 0 60 `
�� �P9��( ~ RtlSetProcessDebugInformation ntdll.dll ntdll.dll/ -1 0 54 `
�� ���>�" RtlSetProcessIsCritical ntdll.dll ntdll.dll/ -1 0 72 `
�� �qI9�4 � RtlSetProcessPlaceholderCompatibilityMode ntdll.dll ntdll.dll/ -1 0 52 `
�� ��?�� � RtlSetProtectedPolicy ntdll.dll ntdll.dll/ -1 0 53 `
�� ��"�! � RtlSetProxiedProcessId ntdll.dll
ntdll.dll/ -1 0 59 `
�� �y���' � RtlSetSaclSecurityDescriptor ntdll.dll
ntdll.dll/ -1 0 51 `
�� �l�q� � RtlSetSearchPathMode ntdll.dll
ntdll.dll/ -1 0 64 `
�� ��?H�, � RtlSetSecurityDescriptorRMControl ntdll.dll ntdll.dll/ -1 0 51 `
�� �B|�� � RtlSetSecurityObject ntdll.dll
ntdll.dll/ -1 0 53 `
�� �C#.�! � RtlSetSecurityObjectEx ntdll.dll
ntdll.dll/ -1 0 53 `
�� �4�\�! � RtlSetSystemBootStatus ntdll.dll
ntdll.dll/ -1 0 55 `
�� ��E�# � RtlSetSystemBootStatusEx ntdll.dll
ntdll.dll/ -1 0 52 `
�� �L��� � RtlSetThreadErrorMode ntdll.dll ntdll.dll/ -1 0 53 `
�� �î�! � RtlSetThreadIsCritical ntdll.dll
ntdll.dll/ -1 0 71 `
�� � 4�3 � RtlSetThreadPlaceholderCompatibilityMode ntdll.dll
ntdll.dll/ -1 0 56 `
�� ��6`�$ � RtlSetThreadPoolStartFunc ntdll.dll ntdll.dll/ -1 0 63 `
�� �t<��+ � RtlSetThreadPreferredUILanguages ntdll.dll
ntdll.dll/ -1 0 64 `
�� �5(�, � RtlSetThreadPreferredUILanguages2 ntdll.dll ntdll.dll/ -1 0 56 `
�� �z\��$ � RtlSetThreadSubProcessTag ntdll.dll ntdll.dll/ -1 0 61 `
�� ��ۊ�) � RtlSetThreadWorkOnBehalfTicket ntdll.dll
ntdll.dll/ -1 0 56 `
�� ���p�$ � RtlSetTimeZoneInformation ntdll.dll ntdll.dll/ -1 0 42 `
�� ��l9� � RtlSetTimer ntdll.dll ntdll.dll/ -1 0 61 `
�� ����) � RtlSetUnhandledExceptionFilter ntdll.dll
ntdll.dll/ -1 0 50 `
�� �5ּ� � RtlSetUserFlagsHeap ntdll.dll ntdll.dll/ -1 0 50 `
�� �m=�� � RtlSetUserValueHeap ntdll.dll ntdll.dll/ -1 0 46 `
�� ��K?� � RtlSidDominates ntdll.dll ntdll.dll/ -1 0 54 `
�� ���,�" � RtlSidDominatesForTrust ntdll.dll ntdll.dll/ -1 0 47 `
�� �*��� � RtlSidEqualLevel ntdll.dll
ntdll.dll/ -1 0 51 `
�� �ۯ�� � RtlSidHashInitialize ntdll.dll
ntdll.dll/ -1 0 47 `
�� �R�� � RtlSidHashLookup ntdll.dll
ntdll.dll/ -1 0 50 `
�� ���� � RtlSidIsHigherLevel ntdll.dll ntdll.dll/ -1 0 42 `
�� �v��� � RtlSizeHeap ntdll.dll ntdll.dll/ -1 0 58 `
�� �����& � RtlSleepConditionVariableCS ntdll.dll ntdll.dll/ -1 0 59 `
�� ����' � RtlSleepConditionVariableSRW ntdll.dll
ntdll.dll/ -1 0 39 `
�� � ,� � RtlSplay ntdll.dll
ntdll.dll/ -1 0 44 `
�� ���w� � RtlStartRXact ntdll.dll ntdll.dll/ -1 0 48 `
�� ��7� � RtlStringFromGUID ntdll.dll ntdll.dll/ -1 0 50 `
�� �}5�� � RtlStringFromGUIDEx ntdll.dll ntdll.dll/ -1 0 65 `
�� �X_��- � RtlStronglyEnumerateEntryHashTable ntdll.dll
ntdll.dll/ -1 0 54 `
�� �� �" � RtlSubAuthorityCountSid ntdll.dll ntdll.dll/ -1 0 49 `
�� �n=J� � RtlSubAuthoritySid ntdll.dll
ntdll.dll/ -1 0 70 `
�� ��p��2 � RtlSubscribeForFeatureUsageNotification ntdll.dll ntdll.dll/ -1 0 69 `
�� �j��1 � RtlSubscribeWnfStateChangeNotification ntdll.dll
ntdll.dll/ -1 0 52 `
�� �;)�� � RtlSubtreePredecessor ntdll.dll ntdll.dll/ -1 0 50 `
�� �C�V� � RtlSubtreeSuccessor ntdll.dll ntdll.dll/ -1 0 45 `
�� ���� � RtlSwitchedVVI ntdll.dll
ntdll.dll/ -1 0 55 `
�� �KM �# � RtlSystemTimeToLocalTime ntdll.dll
ntdll.dll/ -1 0 60 `
�� ��@��( � RtlTestAndPublishWnfStateData ntdll.dll ntdll.dll/ -1 0 41 `
�� ���� � RtlTestBit ntdll.dll
ntdll.dll/ -1 0 53 `
�� �~+��! � RtlTestProtectedAccess ntdll.dll
ntdll.dll/ -1 0 50 `
�� ���� � RtlTimeFieldsToTime ntdll.dll ntdll.dll/ -1 0 57 `
�� �~��% � RtlTimeToElapsedTimeFields ntdll.dll
ntdll.dll/ -1 0 56 `
�� �:ɰ�$ � RtlTimeToSecondsSince1970 ntdll.dll ntdll.dll/ -1 0 56 `
�� ����$ � RtlTimeToSecondsSince1980 ntdll.dll ntdll.dll/ -1 0 50 `
�� �� � � RtlTimeToTimeFields ntdll.dll ntdll.dll/ -1 0 50 `
�� �O�� � RtlTraceDatabaseAdd ntdll.dll ntdll.dll/ -1 0 53 `
�� �� �! � RtlTraceDatabaseCreate ntdll.dll
ntdll.dll/ -1 0 54 `
�� ��d��" � RtlTraceDatabaseDestroy ntdll.dll ntdll.dll/ -1 0 56 `
�� ���$ � RtlTraceDatabaseEnumerate ntdll.dll ntdll.dll/ -1 0 51 `
�� �&%�� � RtlTraceDatabaseFind ntdll.dll
ntdll.dll/ -1 0 51 `
�� � -�� � RtlTraceDatabaseLock ntdll.dll
ntdll.dll/ -1 0 53 `
�� �?���! � RtlTraceDatabaseUnlock ntdll.dll
ntdll.dll/ -1 0 55 `
�� �W���# � RtlTraceDatabaseValidate ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��JK� � RtlTryAcquirePebLock ntdll.dll
ntdll.dll/ -1 0 60 `
�� �3���( � RtlTryAcquireSRWLockExclusive ntdll.dll ntdll.dll/ -1 0 57 `
�� �s~�% � RtlTryAcquireSRWLockShared ntdll.dll
ntdll.dll/ -1 0 77 `
�� �A��9 � RtlTryConvertSRWLockSharedToExclusiveOrRelease ntdll.dll
ntdll.dll/ -1 0 57 `
�� �c���% � RtlTryEnterCriticalSection ntdll.dll
ntdll.dll/ -1 0 59 `
�� �6zI�' � RtlUTF8StringToUnicodeString ntdll.dll
ntdll.dll/ -1 0 48 `
�� ���� � RtlUTF8ToUnicodeN ntdll.dll ntdll.dll/ -1 0 47 `
�� �8�L� � RtlUlongByteSwap ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��"� � RtlUlonglongByteSwap ntdll.dll
ntdll.dll/ -1 0 58 `
�� � ��& � RtlUnhandledExceptionFilter ntdll.dll ntdll.dll/ -1 0 59 `
�� � 5C�' � RtlUnhandledExceptionFilter2 ntdll.dll
ntdll.dll/ -1 0 57 `
�� �
��% � RtlUnicodeStringToAnsiSize ntdll.dll
ntdll.dll/ -1 0 59 `
�� �mC�' � RtlUnicodeStringToAnsiString ntdll.dll
ntdll.dll/ -1 0 65 `
�� ����- � RtlUnicodeStringToCountedOemString ntdll.dll
ntdll.dll/ -1 0 56 `
�� �qg��$ � RtlUnicodeStringToInteger ntdll.dll ntdll.dll/ -1 0 56 `
�� ����$ � RtlUnicodeStringToOemSize ntdll.dll ntdll.dll/ -1 0 58 `
�� ��w'�& � RtlUnicodeStringToOemString ntdll.dll ntdll.dll/ -1 0 59 `
�� ��' � RtlUnicodeStringToUTF8String ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��{<� � RtlUnicodeToCustomCPN ntdll.dll ntdll.dll/ -1 0 53 `
�� �9�v�! � RtlUnicodeToMultiByteN ntdll.dll
ntdll.dll/ -1 0 56 `
�� ����$ � RtlUnicodeToMultiByteSize ntdll.dll ntdll.dll/ -1 0 47 `
�� ��s�� � RtlUnicodeToOemN ntdll.dll
ntdll.dll/ -1 0 48 `
�� �j��� � RtlUnicodeToUTF8N ntdll.dll ntdll.dll/ -1 0 41 `
�� ��ң� � RtlUniform ntdll.dll
ntdll.dll/ -1 0 54 `
�� �U�-�" � RtlUnlockBootStatusData ntdll.dll ntdll.dll/ -1 0 53 `
�� ��f/�! � RtlUnlockCurrentThread ntdll.dll
ntdll.dll/ -1 0 44 `
�� ��"$� � RtlUnlockHeap ntdll.dll ntdll.dll/ -1 0 60 `
�� �mW�( � RtlUnlockMemoryBlockLookaside ntdll.dll ntdll.dll/ -1 0 50 `
�� ����� � RtlUnlockMemoryZone ntdll.dll ntdll.dll/ -1 0 53 `
�� �.%��! � RtlUnlockModuleSection ntdll.dll
ntdll.dll/ -1 0 82 `
�� ����> � RtlUnregisterFeatureConfigurationChangeNotification ntdll.dll ntdll.dll/ -1 0 74 `
�� �Z��6 � RtlUnsubscribeFromFeatureUsageNotifications ntdll.dll ntdll.dll/ -1 0 77 `
�� ��[��9 � RtlUnsubscribeWnfNotificationWaitForCompletion ntdll.dll
ntdll.dll/ -1 0 82 `
�� �D4s�> � RtlUnsubscribeWnfNotificationWithCompletionCallback ntdll.dll ntdll.dll/ -1 0 71 `
�� ���l�3 � RtlUnsubscribeWnfStateChangeNotification ntdll.dll
ntdll.dll/ -1 0 40 `
�� �� � RtlUnwind ntdll.dll ntdll.dll/ -1 0 42 `
�� ��um� � RtlUnwindEx ntdll.dll ntdll.dll/ -1 0 51 `
�� �s�� � RtlUpcaseUnicodeChar ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��Ҟ�! � RtlUpcaseUnicodeString ntdll.dll
ntdll.dll/ -1 0 71 `
�� �1���3 � RtlUpcaseUnicodeStringToCountedOemString ntdll.dll
ntdll.dll/ -1 0 64 `
�� �����, � RtlUpcaseUnicodeStringToOemString ntdll.dll ntdll.dll/ -1 0 58 `
�� �-�k�& � RtlUpcaseUnicodeToCustomCPN ntdll.dll ntdll.dll/ -1 0 59 `
�� ����' � RtlUpcaseUnicodeToMultiByteN ntdll.dll
ntdll.dll/ -1 0 53 `
�� �;*��! � RtlUpcaseUnicodeToOemN ntdll.dll
ntdll.dll/ -1 0 61 `
�� ��=��) � RtlUpdateClonedCriticalSection ntdll.dll
ntdll.dll/ -1 0 53 `
�� �����! � RtlUpdateClonedSRWLock ntdll.dll
ntdll.dll/ -1 0 45 `
�� ���� � RtlUpdateTimer ntdll.dll
ntdll.dll/ -1 0 43 `
�� ��I�� � RtlUpperChar ntdll.dll
ntdll.dll/ -1 0 45 `
�� ��Tl� � RtlUpperString ntdll.dll
ntdll.dll/ -1 0 48 `
�� �Ϸi� � RtlUshortByteSwap ntdll.dll ntdll.dll/ -1 0 42 `
�� ���z� � RtlValidAcl ntdll.dll ntdll.dll/ -1 0 56 `
�� ��>�$ � RtlValidProcessProtection ntdll.dll ntdll.dll/ -1 0 65 `
�� �VK��- � RtlValidRelativeSecurityDescriptor ntdll.dll
ntdll.dll/ -1 0 57 `
�� �{Ƅ�% � RtlValidSecurityDescriptor ntdll.dll
ntdll.dll/ -1 0 42 `
�� � � � RtlValidSid ntdll.dll ntdll.dll/ -1 0 59 `
�� �����' � RtlValidateCorrelationVector ntdll.dll
ntdll.dll/ -1 0 46 `
�� �}� � RtlValidateHeap ntdll.dll ntdll.dll/ -1 0 54 `
�� ��� �" � RtlValidateProcessHeaps ntdll.dll ntdll.dll/ -1 0 55 `
�� � ��# � RtlValidateUnicodeString ntdll.dll
ntdll.dll/ -1 0 51 `
�� �G\� � RtlVerifyVersionInfo ntdll.dll
ntdll.dll/ -1 0 47 `
�� ����� RtlVirtualUnwind ntdll.dll
ntdll.dll/ -1 0 60 `
�� ����( RtlWaitForWnfMetaNotification ntdll.dll ntdll.dll/ -1 0 47 `
�� � �c� RtlWaitOnAddress ntdll.dll
ntdll.dll/ -1 0 48 `
�� �=��� RtlWakeAddressAll ntdll.dll ntdll.dll/ -1 0 55 `
�� �c��# RtlWakeAddressAllNoFence ntdll.dll
ntdll.dll/ -1 0 51 `
�� ���� RtlWakeAddressSingle ntdll.dll
ntdll.dll/ -1 0 58 `
�� �D���& RtlWakeAddressSingleNoFence ntdll.dll ntdll.dll/ -1 0 58 `
�� ���K�& RtlWakeAllConditionVariable ntdll.dll ntdll.dll/ -1 0 55 `
�� �nI�# RtlWakeConditionVariable ntdll.dll
ntdll.dll/ -1 0 48 `
�� ��*e� RtlWalkFrameChain ntdll.dll ntdll.dll/ -1 0 42 `
�� �P>��
RtlWalkHeap ntdll.dll ntdll.dll/ -1 0 63 `
�� ��Z$�+ RtlWeaklyEnumerateEntryHashTable ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��D��! RtlWerpReportException ntdll.dll
ntdll.dll/ -1 0 55 `
�� �J�N�#
RtlWnfCompareChangeStamp ntdll.dll
ntdll.dll/ -1 0 54 `
�� �!���" RtlWnfDllUnloadCallback ntdll.dll ntdll.dll/ -1 0 53 `
�� ���! RtlWow64CallFunction64 ntdll.dll
ntdll.dll/ -1 0 58 `
�� ����& RtlWow64EnableFsRedirection ntdll.dll ntdll.dll/ -1 0 60 `
�� ���l�( RtlWow64EnableFsRedirectionEx ntdll.dll ntdll.dll/ -1 0 56 `
�� �JqA�$ RtlWow64GetCurrentMachine ntdll.dll ntdll.dll/ -1 0 63 `
�� �2%\�+ RtlWow64GetEquivalentMachineCHPE ntdll.dll
ntdll.dll/ -1 0 57 `
�� �5 R�% RtlWow64GetProcessMachines ntdll.dll
ntdll.dll/ -1 0 59 `
�� �
w��' RtlWow64GetSharedInfoProcess ntdll.dll
ntdll.dll/ -1 0 65 `
�� �E��- RtlWow64IsWowGuestMachineSupported ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��7 � RtlWriteRegistryValue ntdll.dll ntdll.dll/ -1 0 44 `
�� �:� RtlZeroMemory ntdll.dll ntdll.dll/ -1 0 58 `
�� ��>�& RtlZombifyActivationContext ntdll.dll ntdll.dll/ -1 0 54 `
�� ����" RtlpApplyLengthFunction ntdll.dll ntdll.dll/ -1 0 66 `
�� �K���. RtlpCheckDynamicTimeZoneInformation ntdll.dll ntdll.dll/ -1 0 54 `
�� ��iy�" RtlpCleanupRegistryKeys ntdll.dll ntdll.dll/ -1 0 77 `
�� �#���9 RtlpConvertAbsoluteToRelativeSecurityAttribute ntdll.dll
ntdll.dll/ -1 0 61 `
�� ���) RtlpConvertCultureNamesToLCIDs ntdll.dll
ntdll.dll/ -1 0 61 `
�� �8Sq�) ! RtlpConvertLCIDsToCultureNames ntdll.dll
ntdll.dll/ -1 0 77 `
�� �4�y�9 " RtlpConvertRelativeToAbsoluteSecurityAttribute ntdll.dll
ntdll.dll/ -1 0 60 `
�� �!��( # RtlpCreateProcessRegistryInfo ntdll.dll ntdll.dll/ -1 0 51 `
�� �D�=� $ RtlpEnsureBufferSize ntdll.dll
ntdll.dll/ -1 0 58 `
�� ����& ' RtlpGetLCIDFromLangInfoNode ntdll.dll ntdll.dll/ -1 0 58 `
�� ����& ( RtlpGetNameFromLangInfoNode ntdll.dll ntdll.dll/ -1 0 61 `
�� �%p��) ) RtlpGetSystemDefaultUILanguage ntdll.dll
ntdll.dll/ -1 0 65 `
�� �����- * RtlpGetUserOrMachineUILanguage4NLS ntdll.dll
ntdll.dll/ -1 0 61 `
�� �m�D�) + RtlpInitializeLangRegistryInfo ntdll.dll
ntdll.dll/ -1 0 54 `
�� �8���" , RtlpIsQualifiedLanguage ntdll.dll ntdll.dll/ -1 0 56 `
�� ����$ - RtlpLoadMachineUIByPolicy ntdll.dll ntdll.dll/ -1 0 53 `
�� �<� �! . RtlpLoadUserUIByPolicy ntdll.dll
ntdll.dll/ -1 0 68 `
�� ��}T�0 / RtlpMergeSecurityAttributeInformation ntdll.dll ntdll.dll/ -1 0 58 `
�� �[O�& 0 RtlpMuiFreeLangRegistryInfo ntdll.dll ntdll.dll/ -1 0 59 `
�� ��1�' 1 RtlpMuiRegCreateRegistryInfo ntdll.dll
ntdll.dll/ -1 0 57 `
�� ��D��% 2 RtlpMuiRegFreeRegistryInfo ntdll.dll
ntdll.dll/ -1 0 57 `
�� �E"��% 3 RtlpMuiRegLoadRegistryInfo ntdll.dll
ntdll.dll/ -1 0 58 `
�� �;݁�& 4 RtlpNotOwnerCriticalSection ntdll.dll ntdll.dll/ -1 0 46 `
�� ����� 5 RtlpNtCreateKey ntdll.dll ntdll.dll/ -1 0 52 `
�� ���.� 6 RtlpNtEnumerateSubKey ntdll.dll ntdll.dll/ -1 0 53 `
�� �����! 7 RtlpNtMakeTemporaryKey ntdll.dll
ntdll.dll/ -1 0 44 `
�� ��ґ� 8 RtlpNtOpenKey ntdll.dll ntdll.dll/ -1 0 50 `
�� ���D� 9 RtlpNtQueryValueKey ntdll.dll ntdll.dll/ -1 0 48 `
�� ��{V� : RtlpNtSetValueKey ntdll.dll ntdll.dll/ -1 0 57 `
�� ��ݘ�% ; RtlpQueryDefaultUILanguage ntdll.dll
ntdll.dll/ -1 0 69 `
�� �N��1 < RtlpQueryProcessDebugInformationRemote ntdll.dll
ntdll.dll/ -1 0 58 `
�� �o���& = RtlpRefreshCachedUILanguage ntdll.dll ntdll.dll/ -1 0 53 `
�� �p���! > RtlpSetInstallLanguage ntdll.dll
ntdll.dll/ -1 0 58 `
�� �fFt�& ? RtlpSetPreferredUILanguages ntdll.dll ntdll.dll/ -1 0 62 `
�� ��
Q�* @ RtlpSetUserPreferredUILanguages ntdll.dll ntdll.dll/ -1 0 51 `
�� �1�� A RtlpTimeFieldsToTime ntdll.dll
ntdll.dll/ -1 0 51 `
�� �{�� B RtlpTimeToTimeFields ntdll.dll
ntdll.dll/ -1 0 56 `
�� �
��$ C RtlpUnWaitCriticalSection ntdll.dll ntdll.dll/ -1 0 68 `
�� �Ha��0 D RtlpVerifyAndCommitUILanguageSettings ntdll.dll ntdll.dll/ -1 0 57 `
�� �+Dn�% E RtlpWaitForCriticalSection ntdll.dll
ntdll.dll/ -1 0 58 `
�� �
��& F RtlxAnsiStringToUnicodeSize ntdll.dll ntdll.dll/ -1 0 57 `
�� �Ry�% G RtlxOemStringToUnicodeSize ntdll.dll
ntdll.dll/ -1 0 58 `
�� �`�Y�& H RtlxUnicodeStringToAnsiSize ntdll.dll ntdll.dll/ -1 0 57 `
�� ��w�% I RtlxUnicodeStringToOemSize ntdll.dll
ntdll.dll/ -1 0 41 `
�� ��_� L ShipAssert ntdll.dll
ntdll.dll/ -1 0 54 `
�� �LJ~�" M ShipAssertGetBufferInfo ntdll.dll ntdll.dll/ -1 0 45 `
�� ��;�� N ShipAssertMsgA ntdll.dll
ntdll.dll/ -1 0 45 `
�� �N�� O ShipAssertMsgW ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��?�� P TpAllocAlpcCompletion ntdll.dll ntdll.dll/ -1 0 50 `
�� ��D@� R TpAllocCleanupGroup ntdll.dll ntdll.dll/ -1 0 50 `
�� �h��� S TpAllocIoCompletion ntdll.dll ntdll.dll/ -1 0 53 `
�� ���! T TpAllocJobNotification ntdll.dll
ntdll.dll/ -1 0 42 `
�� �Qd&� U TpAllocPool ntdll.dll ntdll.dll/ -1 0 43 `
�� � &� V TpAllocTimer ntdll.dll
ntdll.dll/ -1 0 42 `
�� ��� W TpAllocWait ntdll.dll ntdll.dll/ -1 0 42 `
�� �yq�� X TpAllocWork ntdll.dll ntdll.dll/ -1 0 67 `
�� ����/ [ TpCallbackDetectedUnrecoverableError ntdll.dll
ntdll.dll/ -1 0 73 `
�� �O6��5 ] TpCallbackLeaveCriticalSectionOnCompletion ntdll.dll
ntdll.dll/ -1 0 51 `
�� ����� ^ TpCallbackMayRunLong ntdll.dll
ntdll.dll/ -1 0 65 `
�� ����- _ TpCallbackReleaseMutexOnCompletion ntdll.dll
ntdll.dll/ -1 0 69 `
�� �4y#�1 ` TpCallbackReleaseSemaphoreOnCompletion ntdll.dll
ntdll.dll/ -1 0 61 `
�� �[�7�) c TpCallbackSetEventOnCompletion ntdll.dll
ntdll.dll/ -1 0 62 `
�� �����* d TpCallbackUnloadDllOnCompletion ntdll.dll ntdll.dll/ -1 0 55 `
�� ��H'�# e TpCancelAsyncIoOperation ntdll.dll
ntdll.dll/ -1 0 46 `
�� ����� f TpCaptureCaller ntdll.dll ntdll.dll/ -1 0 53 `
�� ��0/�! g TpCheckTerminateWorker ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��n�! k TpDisassociateCallback ntdll.dll
ntdll.dll/ -1 0 43 `
�� �u�)� l TpIsTimerSet ntdll.dll
ntdll.dll/ -1 0 41 `
�� �@��� m TpPostWork ntdll.dll
ntdll.dll/ -1 0 58 `
�� � ~=�& n TpQueryPoolStackInformation ntdll.dll ntdll.dll/ -1 0 54 `
�� �N��" o TpReleaseAlpcCompletion ntdll.dll ntdll.dll/ -1 0 52 `
�� �A�� p TpReleaseCleanupGroup ntdll.dll ntdll.dll/ -1 0 59 `
�� �,��' q TpReleaseCleanupGroupMembers ntdll.dll
ntdll.dll/ -1 0 52 `
�� �7]�� r TpReleaseIoCompletion ntdll.dll ntdll.dll/ -1 0 55 `
�� ���# s TpReleaseJobNotification ntdll.dll
ntdll.dll/ -1 0 44 `
�� ��� t TpReleasePool ntdll.dll ntdll.dll/ -1 0 45 `
�� ���7� u TpReleaseTimer ntdll.dll
ntdll.dll/ -1 0 44 `
�� �~J&� v TpReleaseWait ntdll.dll ntdll.dll/ -1 0 44 `
�� �>,�� w TpReleaseWork ntdll.dll ntdll.dll/ -1 0 50 `
�� �ٿ�� z TpSetPoolMaxThreads ntdll.dll ntdll.dll/ -1 0 59 `
�� ����' { TpSetPoolMaxThreadsSoftLimit ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��n5� | TpSetPoolMinThreads ntdll.dll ntdll.dll/ -1 0 56 `
�� �C��$ } TpSetPoolStackInformation ntdll.dll ntdll.dll/ -1 0 63 `
�� �����+ � TpSetPoolWorkerThreadIdleTimeout ntdll.dll
ntdll.dll/ -1 0 41 `
�� ���� � TpSetTimer ntdll.dll
ntdll.dll/ -1 0 43 `
�� ��C"� � TpSetTimerEx ntdll.dll
ntdll.dll/ -1 0 40 `
�� �$��� � TpSetWait ntdll.dll ntdll.dll/ -1 0 42 `
�� �6��� � TpSetWaitEx ntdll.dll ntdll.dll/ -1 0 46 `
�� �Pf� � TpSimpleTryPost ntdll.dll ntdll.dll/ -1 0 54 `
�� ���" � TpStartAsyncIoOperation ntdll.dll ntdll.dll/ -1 0 42 `
�� �1�r� � TpTrimPools ntdll.dll ntdll.dll/ -1 0 54 `
�� ��c�" � TpWaitForAlpcCompletion ntdll.dll ntdll.dll/ -1 0 52 `
�� ����� � TpWaitForIoCompletion ntdll.dll ntdll.dll/ -1 0 55 `
�� � ��# � TpWaitForJobNotification ntdll.dll
ntdll.dll/ -1 0 45 `
�� �L��� � TpWaitForTimer ntdll.dll
ntdll.dll/ -1 0 44 `
�� ��u�� � TpWaitForWait ntdll.dll ntdll.dll/ -1 0 44 `
�� ��� � TpWaitForWork ntdll.dll ntdll.dll/ -1 0 50 `
�� ��"�� � VerSetConditionMask ntdll.dll ntdll.dll/ -1 0 55 `
�� �;�[�# � WerReportExceptionWorker ntdll.dll
ntdll.dll/ -1 0 48 `
�� ���� � WerReportSQMEvent ntdll.dll ntdll.dll/ -1 0 54 `
�� �����" � WinSqmAddToAverageDWORD ntdll.dll ntdll.dll/ -1 0 48 `
�� �a·� � WinSqmAddToStream ntdll.dll ntdll.dll/ -1 0 50 `
�� ��΅� � WinSqmAddToStreamEx ntdll.dll ntdll.dll/ -1 0 65 `
�� �B̿�- � WinSqmCheckEscalationAddToStreamEx ntdll.dll
ntdll.dll/ -1 0 60 `
�� �p �( � WinSqmCheckEscalationSetDWORD ntdll.dll ntdll.dll/ -1 0 62 `
�� �ͧO�* � WinSqmCheckEscalationSetDWORD64 ntdll.dll ntdll.dll/ -1 0 61 `
�� ��cO�) � WinSqmCheckEscalationSetString ntdll.dll
ntdll.dll/ -1 0 58 `
�� ��ܘ�& � WinSqmCommonDatapointDelete ntdll.dll ntdll.dll/ -1 0 60 `
�� ���( � WinSqmCommonDatapointSetDWORD ntdll.dll ntdll.dll/ -1 0 62 `
�� �
���* � WinSqmCommonDatapointSetDWORD64 ntdll.dll ntdll.dll/ -1 0 63 `
�� �JM��+ � WinSqmCommonDatapointSetStreamEx ntdll.dll
ntdll.dll/ -1 0 61 `
�� ���) � WinSqmCommonDatapointSetString ntdll.dll
ntdll.dll/ -1 0 47 `
�� �Q �� � WinSqmEndSession ntdll.dll
ntdll.dll/ -1 0 49 `
�� �
X� � WinSqmEventEnabled ntdll.dll
ntdll.dll/ -1 0 47 `
�� �}Le� � WinSqmEventWrite ntdll.dll
ntdll.dll/ -1 0 60 `
�� �[���( � WinSqmGetEscalationRuleStatus ntdll.dll ntdll.dll/ -1 0 63 `
�� � ���+ � WinSqmGetInstrumentationProperty ntdll.dll
ntdll.dll/ -1 0 51 `
�� �Vl�� � WinSqmIncrementDWORD ntdll.dll
ntdll.dll/ -1 0 46 `
�� ��7+� � WinSqmIsOptedIn ntdll.dll ntdll.dll/ -1 0 48 `
�� ���0� � WinSqmIsOptedInEx ntdll.dll ntdll.dll/ -1 0 54 `
�� ��Z�" � WinSqmIsSessionDisabled ntdll.dll ntdll.dll/ -1 0 45 `
�� �T
�� � WinSqmSetDWORD ntdll.dll
ntdll.dll/ -1 0 47 `
�� �?��� � WinSqmSetDWORD64 ntdll.dll
ntdll.dll/ -1 0 54 `
�� ����" � WinSqmSetEscalationInfo ntdll.dll ntdll.dll/ -1 0 50 `
�� �3y�� � WinSqmSetIfMaxDWORD ntdll.dll ntdll.dll/ -1 0 50 `
�� �8��� � WinSqmSetIfMinDWORD ntdll.dll ntdll.dll/ -1 0 46 `
�� ��״� � WinSqmSetString ntdll.dll ntdll.dll/ -1 0 49 `
�� ��� � WinSqmStartSession ntdll.dll
ntdll.dll/ -1 0 59 `
�� �A���' � WinSqmStartSessionForPartner ntdll.dll
ntdll.dll/ -1 0 50 `
�� ���� � ZwAcceptConnectPort ntdll.dll ntdll.dll/ -1 0 44 `
�� �䕏� � ZwAccessCheck ntdll.dll ntdll.dll/ -1 0 57 `
�� �IX#�% � ZwAccessCheckAndAuditAlarm ntdll.dll
ntdll.dll/ -1 0 50 `
�� �}��� � ZwAccessCheckByType ntdll.dll ntdll.dll/ -1 0 63 `
�� ���G�+ � ZwAccessCheckByTypeAndAuditAlarm ntdll.dll
ntdll.dll/ -1 0 60 `
�� ��$�( � ZwAccessCheckByTypeResultList ntdll.dll ntdll.dll/ -1 0 73 `
�� �#��5 � ZwAccessCheckByTypeResultListAndAuditAlarm ntdll.dll
ntdll.dll/ -1 0 81 `
�� �f$q�= � ZwAccessCheckByTypeResultListAndAuditAlarmByHandle ntdll.dll
ntdll.dll/ -1 0 53 `
�� �%M��! � ZwAcquireCrossVmMutant ntdll.dll
ntdll.dll/ -1 0 64 `
�� �p �, � ZwAcquireProcessActivityReference ntdll.dll ntdll.dll/ -1 0 40 `
�� �uɧ� � ZwAddAtom ntdll.dll ntdll.dll/ -1 0 42 `
�� ���1� � ZwAddAtomEx ntdll.dll ntdll.dll/ -1 0 45 `
�� �?�� � ZwAddBootEntry ntdll.dll
ntdll.dll/ -1 0 47 `
�� ���� � ZwAddDriverEntry ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��A*� � ZwAdjustGroupsToken ntdll.dll ntdll.dll/ -1 0 54 `
�� �`4�" � ZwAdjustPrivilegesToken ntdll.dll ntdll.dll/ -1 0 65 `
�� �� ��- � ZwAdjustTokenClaimsAndDeviceGroups ntdll.dll
ntdll.dll/ -1 0 50 `
�� �5KH� � ZwAlertResumeThread ntdll.dll ntdll.dll/ -1 0 44 `
�� ��U� � ZwAlertThread ntdll.dll ntdll.dll/ -1 0 54 `
�� ���C�" � ZwAlertThreadByThreadId ntdll.dll ntdll.dll/ -1 0 56 `
�� ���>�$ � ZwAllocateLocallyUniqueId ntdll.dll ntdll.dll/ -1 0 54 `
�� �v�B�" � ZwAllocateReserveObject ntdll.dll ntdll.dll/ -1 0 58 `
�� �j�@�& � ZwAllocateUserPhysicalPages ntdll.dll ntdll.dll/ -1 0 60 `
�� �y9 �( � ZwAllocateUserPhysicalPagesEx ntdll.dll ntdll.dll/ -1 0 46 `
�� �_ �� � ZwAllocateUuids ntdll.dll ntdll.dll/ -1 0 54 `
�� ����" � ZwAllocateVirtualMemory ntdll.dll ntdll.dll/ -1 0 56 `
�� ����$ � ZwAllocateVirtualMemoryEx ntdll.dll ntdll.dll/ -1 0 54 `
�� ���z�" � ZwAlpcAcceptConnectPort ntdll.dll ntdll.dll/ -1 0 50 `
�� ���� � ZwAlpcCancelMessage ntdll.dll ntdll.dll/ -1 0 48 `
�� ��]� � ZwAlpcConnectPort ntdll.dll ntdll.dll/ -1 0 50 `
�� ��3h� � ZwAlpcConnectPortEx ntdll.dll ntdll.dll/ -1 0 47 `
�� �;L�� � ZwAlpcCreatePort ntdll.dll
ntdll.dll/ -1 0 54 `
�� �V��" � ZwAlpcCreatePortSection ntdll.dll ntdll.dll/ -1 0 58 `
�� ����& � ZwAlpcCreateResourceReserve ntdll.dll ntdll.dll/ -1 0 54 `
�� �灱�" � ZwAlpcCreateSectionView ntdll.dll ntdll.dll/ -1 0 58 `
�� ����& � ZwAlpcCreateSecurityContext ntdll.dll ntdll.dll/ -1 0 54 `
�� �դ`�" � ZwAlpcDeletePortSection ntdll.dll ntdll.dll/ -1 0 58 `
�� �� ��& � ZwAlpcDeleteResourceReserve ntdll.dll ntdll.dll/ -1 0 54 `
�� � � �" � ZwAlpcDeleteSectionView ntdll.dll ntdll.dll/ -1 0 58 `
�� �[K`�& � ZwAlpcDeleteSecurityContext ntdll.dll ntdll.dll/ -1 0 51 `
�� ����� � ZwAlpcDisconnectPort ntdll.dll
ntdll.dll/ -1 0 69 `
�� ����1 � ZwAlpcImpersonateClientContainerOfPort ntdll.dll
ntdll.dll/ -1 0 60 `
�� ��km�( � ZwAlpcImpersonateClientOfPort ntdll.dll ntdll.dll/ -1 0 54 `
�� �~ �" � ZwAlpcOpenSenderProcess ntdll.dll ntdll.dll/ -1 0 53 `
�� �?h �! � ZwAlpcOpenSenderThread ntdll.dll
ntdll.dll/ -1 0 53 `
�� �m��! � ZwAlpcQueryInformation ntdll.dll
ntdll.dll/ -1 0 60 `
�� ���&�( � ZwAlpcQueryInformationMessage ntdll.dll ntdll.dll/ -1 0 58 `
�� �uˎ�& � ZwAlpcRevokeSecurityContext ntdll.dll ntdll.dll/ -1 0 56 `
�� ����$ � ZwAlpcSendWaitReceivePort ntdll.dll ntdll.dll/ -1 0 51 `
�� �~ 0� � ZwAlpcSetInformation ntdll.dll
ntdll.dll/ -1 0 52 `
�� �Q��� � ZwApphelpCacheControl ntdll.dll ntdll.dll/ -1 0 54 `
�� ��":�" � ZwAreMappedFilesTheSame ntdll.dll ntdll.dll/ -1 0 57 `
�� ��4M�% � ZwAssignProcessToJobObject ntdll.dll
ntdll.dll/ -1 0 62 `
�� �����* � ZwAssociateWaitCompletionPacket ntdll.dll ntdll.dll/ -1 0 44 `
�� �d� � ZwCallEnclave ntdll.dll ntdll.dll/ -1 0 47 `
�� ���~� � ZwCallbackReturn ntdll.dll
ntdll.dll/ -1 0 45 `
�� �K,� � ZwCancelIoFile ntdll.dll
ntdll.dll/ -1 0 47 `
�� �Vi� � ZwCancelIoFileEx ntdll.dll
ntdll.dll/ -1 0 56 `
�� �QU��$ � ZwCancelSynchronousIoFile ntdll.dll ntdll.dll/ -1 0 44 `
�� ���6� � ZwCancelTimer ntdll.dll ntdll.dll/ -1 0 45 `
�� �_��� � ZwCancelTimer2 ntdll.dll
ntdll.dll/ -1 0 59 `
�� �
���' � ZwCancelWaitCompletionPacket ntdll.dll
ntdll.dll/ -1 0 43 `
�� �肔� � ZwClearEvent ntdll.dll
ntdll.dll/ -1 0 38 `
�� �ֆ&� � ZwClose ntdll.dll ntdll.dll/ -1 0 54 `
�� �����" � ZwCloseObjectAuditAlarm ntdll.dll ntdll.dll/ -1 0 47 `
�� �;{� � ZwCommitComplete ntdll.dll
ntdll.dll/ -1 0 49 `
�� ��j�� � ZwCommitEnlistment ntdll.dll
ntdll.dll/ -1 0 58 `
�� �Jo��& � ZwCommitRegistryTransaction ntdll.dll ntdll.dll/ -1 0 50 `
�� ���� � ZwCommitTransaction ntdll.dll ntdll.dll/ -1 0 44 `
�� �x�� � ZwCompactKeys ntdll.dll ntdll.dll/ -1 0 47 `
�� �� �� � ZwCompareObjects ntdll.dll
ntdll.dll/ -1 0 53 `
�� �>
+�! � ZwCompareSigningLevels ntdll.dll
ntdll.dll/ -1 0 46 `
�� �C�K� � ZwCompareTokens ntdll.dll ntdll.dll/ -1 0 52 `
�� �B`�� � ZwCompleteConnectPort ntdll.dll ntdll.dll/ -1 0 44 `
�� �;��� � ZwCompressKey ntdll.dll ntdll.dll/ -1 0 44 `
�� ��/(� � ZwConnectPort ntdll.dll ntdll.dll/ -1 0 41 `
�� �o�� � ZwContinue ntdll.dll
ntdll.dll/ -1 0 43 `
�� ��V�� � ZwContinueEx ntdll.dll
ntdll.dll/ -1 0 84 `
�� �(I�@ � ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter ntdll.dll ntdll.dll/ -1 0 51 `
�� �G� � � ZwCreateCrossVmEvent ntdll.dll
ntdll.dll/ -1 0 52 `
�� �rʨ� ZwCreateCrossVmMutant ntdll.dll ntdll.dll/ -1 0 50 `
�� �[
}� ZwCreateDebugObject ntdll.dll ntdll.dll/ -1 0 54 `
�� �ssD�" ZwCreateDirectoryObject ntdll.dll ntdll.dll/ -1 0 56 `
�� ����$ ZwCreateDirectoryObjectEx ntdll.dll ntdll.dll/ -1 0 46 `
�� � �� ZwCreateEnclave ntdll.dll ntdll.dll/ -1 0 49 `
�� ����� ZwCreateEnlistment ntdll.dll
ntdll.dll/ -1 0 44 `
�� �
�M� ZwCreateEvent ntdll.dll ntdll.dll/ -1 0 48 `
�� �i��� ZwCreateEventPair ntdll.dll ntdll.dll/ -1 0 43 `
�� ���� ZwCreateFile ntdll.dll
ntdll.dll/ -1 0 46 `
�� ��<� ZwCreateIRTimer ntdll.dll ntdll.dll/ -1 0 51 `
�� �V+��
ZwCreateIoCompletion ntdll.dll
ntdll.dll/ -1 0 48 `
�� ���~� ZwCreateJobObject ntdll.dll ntdll.dll/ -1 0 45 `
�� �u��� ZwCreateJobSet ntdll.dll
ntdll.dll/ -1 0 42 `
�� �?(�
ZwCreateKey ntdll.dll ntdll.dll/ -1 0 52 `
�� �gE�� ZwCreateKeyTransacted ntdll.dll ntdll.dll/ -1 0 49 `
�� �n^� ZwCreateKeyedEvent ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��*�� ZwCreateLowBoxToken ntdll.dll ntdll.dll/ -1 0 51 `
�� ��!�� ZwCreateMailslotFile ntdll.dll
ntdll.dll/ -1 0 45 `
�� �up� ZwCreateMutant ntdll.dll
ntdll.dll/ -1 0 52 `
�� ���� ZwCreateNamedPipeFile ntdll.dll ntdll.dll/ -1 0 49 `
�� �
h�� ZwCreatePagingFile ntdll.dll
ntdll.dll/ -1 0 48 `
�� �g�� ZwCreatePartition ntdll.dll ntdll.dll/ -1 0 43 `
�� ��)� ZwCreatePort ntdll.dll
ntdll.dll/ -1 0 55 `
�� ��LD�# ZwCreatePrivateNamespace ntdll.dll
ntdll.dll/ -1 0 46 `
�� ��z�� ZwCreateProcess ntdll.dll ntdll.dll/ -1 0 48 `
�� �8W� ZwCreateProcessEx ntdll.dll ntdll.dll/ -1 0 46 `
�� ��Jx� ZwCreateProfile ntdll.dll ntdll.dll/ -1 0 48 `
�� ���� ZwCreateProfileEx ntdll.dll ntdll.dll/ -1 0 58 `
�� ����& ZwCreateRegistryTransaction ntdll.dll ntdll.dll/ -1 0 54 `
�� ��[��" ZwCreateResourceManager ntdll.dll ntdll.dll/ -1 0 46 `
�� ���� ZwCreateSection ntdll.dll ntdll.dll/ -1 0 48 `
�� �k � ZwCreateSectionEx ntdll.dll ntdll.dll/ -1 0 48 `
�� ��5� ZwCreateSemaphore ntdll.dll ntdll.dll/ -1 0 57 `
�� ��0�% ! ZwCreateSymbolicLinkObject ntdll.dll
ntdll.dll/ -1 0 45 `
�� �N�� " ZwCreateThread ntdll.dll
ntdll.dll/ -1 0 47 `
�� �˕~� # ZwCreateThreadEx ntdll.dll
ntdll.dll/ -1 0 44 `
�� �E� $ ZwCreateTimer ntdll.dll ntdll.dll/ -1 0 45 `
�� ��� % ZwCreateTimer2 ntdll.dll
ntdll.dll/ -1 0 44 `
�� �w��� & ZwCreateToken ntdll.dll ntdll.dll/ -1 0 46 `
�� �+o�� ' ZwCreateTokenEx ntdll.dll ntdll.dll/ -1 0 50 `
�� �)('� ( ZwCreateTransaction ntdll.dll ntdll.dll/ -1 0 57 `
�� ����% ) ZwCreateTransactionManager ntdll.dll
ntdll.dll/ -1 0 50 `
�� �v��� * ZwCreateUserProcess ntdll.dll ntdll.dll/ -1 0 59 `
�� ����' + ZwCreateWaitCompletionPacket ntdll.dll
ntdll.dll/ -1 0 51 `
�� ����� , ZwCreateWaitablePort ntdll.dll
ntdll.dll/ -1 0 51 `
�� �ql� - ZwCreateWnfStateName ntdll.dll
ntdll.dll/ -1 0 52 `
�� �n� � . ZwCreateWorkerFactory ntdll.dll ntdll.dll/ -1 0 51 `
�� ���� / ZwDebugActiveProcess ntdll.dll
ntdll.dll/ -1 0 46 `
�� �z5U� 0 ZwDebugContinue ntdll.dll ntdll.dll/ -1 0 47 `
�� �Q �� 1 ZwDelayExecution ntdll.dll
ntdll.dll/ -1 0 43 `
�� �O
�� 2 ZwDeleteAtom ntdll.dll
ntdll.dll/ -1 0 48 `
�� � �1� 3 ZwDeleteBootEntry ntdll.dll ntdll.dll/ -1 0 50 `
�� �y�]� 4 ZwDeleteDriverEntry ntdll.dll ntdll.dll/ -1 0 43 `
�� �k�� 5 ZwDeleteFile ntdll.dll
ntdll.dll/ -1 0 42 `
�� ����� 6 ZwDeleteKey ntdll.dll ntdll.dll/ -1 0 55 `
�� ��j��# 7 ZwDeleteObjectAuditAlarm ntdll.dll
ntdll.dll/ -1 0 55 `
�� �d3��# 8 ZwDeletePrivateNamespace ntdll.dll
ntdll.dll/ -1 0 47 `
�� �7�>� 9 ZwDeleteValueKey ntdll.dll
ntdll.dll/ -1 0 51 `
�� �TRq� : ZwDeleteWnfStateData ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��(b� ; ZwDeleteWnfStateName ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��f�� < ZwDeviceIoControlFile ntdll.dll ntdll.dll/ -1 0 51 `
�� �t�� = ZwDirectGraphicsCall ntdll.dll
ntdll.dll/ -1 0 53 `
�� �" ��! > ZwDisableLastKnownGood ntdll.dll
ntdll.dll/ -1 0 46 `
�� ���w� ? ZwDisplayString ntdll.dll ntdll.dll/ -1 0 41 `
�� �g�1� @ ZwDrawText ntdll.dll
ntdll.dll/ -1 0 48 `
�� �Y��� A ZwDuplicateObject ntdll.dll ntdll.dll/ -1 0 47 `
�� �'�D� B ZwDuplicateToken ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��� C ZwEnableLastKnownGood ntdll.dll ntdll.dll/ -1 0 53 `
�� �o}�! D ZwEnumerateBootEntries ntdll.dll
ntdll.dll/ -1 0 55 `
�� ����# E ZwEnumerateDriverEntries ntdll.dll
ntdll.dll/ -1 0 45 `
�� ���H� F ZwEnumerateKey ntdll.dll
ntdll.dll/ -1 0 67 `
�� �X� �/ G ZwEnumerateSystemEnvironmentValuesEx ntdll.dll
ntdll.dll/ -1 0 59 `
�� ��n��' H ZwEnumerateTransactionObject ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��"� I ZwEnumerateValueKey ntdll.dll ntdll.dll/ -1 0 46 `
�� ��9�� J ZwExtendSection ntdll.dll ntdll.dll/ -1 0 49 `
�� �0�-� K ZwFilterBootOption ntdll.dll
ntdll.dll/ -1 0 44 `
�� �i3y� L ZwFilterToken ntdll.dll ntdll.dll/ -1 0 46 `
�� ��`?� M ZwFilterTokenEx ntdll.dll ntdll.dll/ -1 0 41 `
�� ��� N ZwFindAtom ntdll.dll
ntdll.dll/ -1 0 49 `
�� ����� O ZwFlushBuffersFile ntdll.dll
ntdll.dll/ -1 0 51 `
�� �b"�� P ZwFlushBuffersFileEx ntdll.dll
ntdll.dll/ -1 0 55 `
�� ��q`�# Q ZwFlushInstallUILanguage ntdll.dll
ntdll.dll/ -1 0 54 `
�� ����" R ZwFlushInstructionCache ntdll.dll ntdll.dll/ -1 0 41 `
�� � ��� S ZwFlushKey ntdll.dll
ntdll.dll/ -1 0 57 `
�� ���@�% T ZwFlushProcessWriteBuffers ntdll.dll
ntdll.dll/ -1 0 51 `
�� �5SE� U ZwFlushVirtualMemory ntdll.dll
ntdll.dll/ -1 0 49 `
�� �c��� V ZwFlushWriteBuffer ntdll.dll
ntdll.dll/ -1 0 54 `
�� �L3P�" W ZwFreeUserPhysicalPages ntdll.dll ntdll.dll/ -1 0 50 `
�� ��JK� X ZwFreeVirtualMemory ntdll.dll ntdll.dll/ -1 0 47 `
�� ��?�� Y ZwFreezeRegistry ntdll.dll
ntdll.dll/ -1 0 51 `
�� �4p�� Z ZwFreezeTransactions ntdll.dll
ntdll.dll/ -1 0 46 `
�� ���;� [ ZwFsControlFile ntdll.dll ntdll.dll/ -1 0 54 `
�� �Z�" \ ZwGetCachedSigningLevel ntdll.dll ntdll.dll/ -1 0 64 `
�� �� c�, ] ZwGetCompleteWnfStateSubscription ntdll.dll ntdll.dll/ -1 0 49 `
�� ���� ^ ZwGetContextThread ntdll.dll
ntdll.dll/ -1 0 58 `
�� ��=��& _ ZwGetCurrentProcessorNumber ntdll.dll ntdll.dll/ -1 0 60 `
�� �_��( ` ZwGetCurrentProcessorNumberEx ntdll.dll ntdll.dll/ -1 0 52 `
�� ��"�� a ZwGetDevicePowerState ntdll.dll ntdll.dll/ -1 0 51 `
�� ��� b ZwGetMUIRegistryInfo ntdll.dll
ntdll.dll/ -1 0 47 `
�� ��r}� c ZwGetNextProcess ntdll.dll
ntdll.dll/ -1 0 46 `
�� �0�n� d ZwGetNextThread ntdll.dll ntdll.dll/ -1 0 49 `
�� �
��� e ZwGetNlsSectionPtr ntdll.dll
ntdll.dll/ -1 0 63 `
�� �,���+ f ZwGetNotificationResourceManager ntdll.dll
ntdll.dll/ -1 0 46 `
�� �M�
� g ZwGetWriteWatch ntdll.dll ntdll.dll/ -1 0 58 `
�� �����& h ZwImpersonateAnonymousToken ntdll.dll ntdll.dll/ -1 0 56 `
�� �� �$ i ZwImpersonateClientOfPort ntdll.dll ntdll.dll/ -1 0 50 `
�� �㵮� j ZwImpersonateThread ntdll.dll ntdll.dll/ -1 0 50 `
�� � j�� k ZwInitializeEnclave ntdll.dll ntdll.dll/ -1 0 51 `
�� ��� l ZwInitializeNlsFiles ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��^� m ZwInitializeRegistry ntdll.dll
ntdll.dll/ -1 0 52 `
�� �7] � n ZwInitiatePowerAction ntdll.dll ntdll.dll/ -1 0 47 `
�� �`$�� o ZwIsProcessInJob ntdll.dll
ntdll.dll/ -1 0 56 `
�� �� ��$ p ZwIsSystemResumeAutomatic ntdll.dll ntdll.dll/ -1 0 53 `
�� ��o �! q ZwIsUILanguageComitted ntdll.dll
ntdll.dll/ -1 0 43 `
�� ���� r ZwListenPort ntdll.dll
ntdll.dll/ -1 0 43 `
�� ��$�� s ZwLoadDriver ntdll.dll
ntdll.dll/ -1 0 48 `
�� �� 7� t ZwLoadEnclaveData ntdll.dll ntdll.dll/ -1 0 40 `
�� �d�� u ZwLoadKey ntdll.dll ntdll.dll/ -1 0 41 `
�� ��� � v ZwLoadKey2 ntdll.dll
ntdll.dll/ -1 0 41 `
�� ��k�� w ZwLoadKey3 ntdll.dll
ntdll.dll/ -1 0 42 `
�� �r�^� x ZwLoadKeyEx ntdll.dll ntdll.dll/ -1 0 41 `
�� �Jz� y ZwLockFile ntdll.dll
ntdll.dll/ -1 0 58 `
�� ���& z ZwLockProductActivationKeys ntdll.dll ntdll.dll/ -1 0 48 `
�� ��|� { ZwLockRegistryKey ntdll.dll ntdll.dll/ -1 0 50 `
�� �隫� | ZwLockVirtualMemory ntdll.dll ntdll.dll/ -1 0 52 `
�� ����� } ZwMakePermanentObject ntdll.dll ntdll.dll/ -1 0 52 `
�� ��R� ~ ZwMakeTemporaryObject ntdll.dll ntdll.dll/ -1 0 47 `
�� �MB� ZwManageHotPatch ntdll.dll
ntdll.dll/ -1 0 48 `
�� �>8�� � ZwManagePartition ntdll.dll ntdll.dll/ -1 0 45 `
�� �b�� � ZwMapCMFModule ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��_j�! � ZwMapUserPhysicalPages ntdll.dll
ntdll.dll/ -1 0 60 `
�� ��M��( � ZwMapUserPhysicalPagesScatter ntdll.dll ntdll.dll/ -1 0 49 `
�� �dyH� � ZwMapViewOfSection ntdll.dll
ntdll.dll/ -1 0 51 `
�� �Q�X� � ZwMapViewOfSectionEx ntdll.dll
ntdll.dll/ -1 0 48 `
�� �Eg� � ZwModifyBootEntry ntdll.dll ntdll.dll/ -1 0 50 `
�� ���l� � ZwModifyDriverEntry ntdll.dll ntdll.dll/ -1 0 58 `
�� ��;��& � ZwNotifyChangeDirectoryFile ntdll.dll ntdll.dll/ -1 0 60 `
�� � oK�( � ZwNotifyChangeDirectoryFileEx ntdll.dll ntdll.dll/ -1 0 48 `
�� ��lU� � ZwNotifyChangeKey ntdll.dll ntdll.dll/ -1 0 57 `
�� ���P�% � ZwNotifyChangeMultipleKeys ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��p� � ZwNotifyChangeSession ntdll.dll ntdll.dll/ -1 0 52 `
�� ��y�� � ZwOpenDirectoryObject ntdll.dll ntdll.dll/ -1 0 47 `
�� ���� � ZwOpenEnlistment ntdll.dll
ntdll.dll/ -1 0 42 `
�� �ly� � ZwOpenEvent ntdll.dll ntdll.dll/ -1 0 46 `
�� �v0�� � ZwOpenEventPair ntdll.dll ntdll.dll/ -1 0 41 `
�� � �� � ZwOpenFile ntdll.dll
ntdll.dll/ -1 0 49 `
�� �wy<� � ZwOpenIoCompletion ntdll.dll
ntdll.dll/ -1 0 46 `
�� ��:�� � ZwOpenJobObject ntdll.dll ntdll.dll/ -1 0 40 `
�� �"n� � ZwOpenKey ntdll.dll ntdll.dll/ -1 0 42 `
�� �(��� � ZwOpenKeyEx ntdll.dll ntdll.dll/ -1 0 50 `
�� ��B� � ZwOpenKeyTransacted ntdll.dll ntdll.dll/ -1 0 52 `
�� �a�r� � ZwOpenKeyTransactedEx ntdll.dll ntdll.dll/ -1 0 47 `
�� �̕� � ZwOpenKeyedEvent ntdll.dll
ntdll.dll/ -1 0 43 `
�� ��}Y� � ZwOpenMutant ntdll.dll
ntdll.dll/ -1 0 53 `
�� ���O�! � ZwOpenObjectAuditAlarm ntdll.dll
ntdll.dll/ -1 0 46 `
�� ��2� � ZwOpenPartition ntdll.dll ntdll.dll/ -1 0 53 `
�� ��W��! � ZwOpenPrivateNamespace ntdll.dll
ntdll.dll/ -1 0 44 `
�� �ǽ�� � ZwOpenProcess ntdll.dll ntdll.dll/ -1 0 49 `
�� ��Tk� � ZwOpenProcessToken ntdll.dll
ntdll.dll/ -1 0 51 `
�� �� :� � ZwOpenProcessTokenEx ntdll.dll
ntdll.dll/ -1 0 56 `
�� ��(�$ � ZwOpenRegistryTransaction ntdll.dll ntdll.dll/ -1 0 52 `
�� �͙"� � ZwOpenResourceManager ntdll.dll ntdll.dll/ -1 0 44 `
�� ��wk� � ZwOpenSection ntdll.dll ntdll.dll/ -1 0 46 `
�� ��:� � ZwOpenSemaphore ntdll.dll ntdll.dll/ -1 0 44 `
�� �ez�� � ZwOpenSession ntdll.dll ntdll.dll/ -1 0 55 `
�� �'CB�# � ZwOpenSymbolicLinkObject ntdll.dll
ntdll.dll/ -1 0 43 `
�� ��a� � ZwOpenThread ntdll.dll
ntdll.dll/ -1 0 48 `
�� �y��� � ZwOpenThreadToken ntdll.dll ntdll.dll/ -1 0 50 `
�� ���\� � ZwOpenThreadTokenEx ntdll.dll ntdll.dll/ -1 0 42 `
�� �P�[� � ZwOpenTimer ntdll.dll ntdll.dll/ -1 0 48 `
�� ��o� � ZwOpenTransaction ntdll.dll ntdll.dll/ -1 0 55 `
�� �A��# � ZwOpenTransactionManager ntdll.dll
ntdll.dll/ -1 0 48 `
�� ���� � ZwPlugPlayControl ntdll.dll ntdll.dll/ -1 0 49 `
�� ��V� � ZwPowerInformation ntdll.dll
ntdll.dll/ -1 0 51 `
�� �暏� � ZwPrePrepareComplete ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��<5�! � ZwPrePrepareEnlistment ntdll.dll
ntdll.dll/ -1 0 48 `
�� ���� � ZwPrepareComplete ntdll.dll ntdll.dll/ -1 0 50 `
�� ���� � ZwPrepareEnlistment ntdll.dll ntdll.dll/ -1 0 47 `
�� ��e�� � ZwPrivilegeCheck ntdll.dll
ntdll.dll/ -1 0 58 `
�� ����& � ZwPrivilegeObjectAuditAlarm ntdll.dll ntdll.dll/ -1 0 60 `
�� ��G��( � ZwPrivilegedServiceAuditAlarm ntdll.dll ntdll.dll/ -1 0 52 `
�� �d>�� � ZwPropagationComplete ntdll.dll ntdll.dll/ -1 0 50 `
�� �Q�� � ZwPropagationFailed ntdll.dll ntdll.dll/ -1 0 53 `
�� �� ��! � ZwProtectVirtualMemory ntdll.dll
ntdll.dll/ -1 0 54 `
�� �Z�/�" � ZwPssCaptureVaSpaceBulk ntdll.dll ntdll.dll/ -1 0 43 `
�� �`^ � � ZwPulseEvent ntdll.dll
ntdll.dll/ -1 0 52 `
�� �� �� � ZwQueryAttributesFile ntdll.dll ntdll.dll/ -1 0 63 `
�� ���A�+ � ZwQueryAuxiliaryCounterFrequency ntdll.dll
ntdll.dll/ -1 0 52 `
�� �SfB� � ZwQueryBootEntryOrder ntdll.dll ntdll.dll/ -1 0 49 `
�� ���>� � ZwQueryBootOptions ntdll.dll
ntdll.dll/ -1 0 54 `
�� ��L�" � ZwQueryDebugFilterState ntdll.dll ntdll.dll/ -1 0 51 `
�� ��$M� � ZwQueryDefaultLocale ntdll.dll
ntdll.dll/ -1 0 55 `
�� �}�# � ZwQueryDefaultUILanguage ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��ф� � ZwQueryDirectoryFile ntdll.dll
ntdll.dll/ -1 0 53 `
�� �oz�! � ZwQueryDirectoryFileEx ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��&p�! � ZwQueryDirectoryObject ntdll.dll
ntdll.dll/ -1 0 54 `
�� ��@�" � ZwQueryDriverEntryOrder ntdll.dll ntdll.dll/ -1 0 44 `
�� �#�� � ZwQueryEaFile ntdll.dll ntdll.dll/ -1 0 43 `
�� �~�<� � ZwQueryEvent ntdll.dll
ntdll.dll/ -1 0 56 `
�� ��A��$ � ZwQueryFullAttributesFile ntdll.dll ntdll.dll/ -1 0 53 `
�� ��-�! � ZwQueryInformationAtom ntdll.dll
ntdll.dll/ -1 0 55 `
�� ��U��# � ZwQueryInformationByName ntdll.dll
ntdll.dll/ -1 0 59 `
�� ��6��' � ZwQueryInformationEnlistment ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��v�! � ZwQueryInformationFile ntdll.dll
ntdll.dll/ -1 0 58 `
�� �� �& � ZwQueryInformationJobObject ntdll.dll ntdll.dll/ -1 0 53 `
�� �>ʒ�! � ZwQueryInformationPort ntdll.dll
ntdll.dll/ -1 0 56 `
�� �?�r�$ � ZwQueryInformationProcess ntdll.dll ntdll.dll/ -1 0 64 `
�� ��P��, � ZwQueryInformationResourceManager ntdll.dll ntdll.dll/ -1 0 55 `
�� ��'��# � ZwQueryInformationThread ntdll.dll
ntdll.dll/ -1 0 54 `
�� ��2��" � ZwQueryInformationToken ntdll.dll ntdll.dll/ -1 0 60 `
�� ��i[�( � ZwQueryInformationTransaction ntdll.dll ntdll.dll/ -1 0 67 `
�� �~ӽ�/ � ZwQueryInformationTransactionManager ntdll.dll
ntdll.dll/ -1 0 62 `
�� �� �* � ZwQueryInformationWorkerFactory ntdll.dll ntdll.dll/ -1 0 55 `
�� �<�5�# � ZwQueryInstallUILanguage ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��jA�! � ZwQueryIntervalProfile ntdll.dll
ntdll.dll/ -1 0 50 `
�� �F^� � ZwQueryIoCompletion ntdll.dll ntdll.dll/ -1 0 41 `
�� ��w�� � ZwQueryKey ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��$�� � ZwQueryLicenseValue ntdll.dll ntdll.dll/ -1 0 54 `
�� ����" � ZwQueryMultipleValueKey ntdll.dll ntdll.dll/ -1 0 44 `
�� �J�x� � ZwQueryMutant ntdll.dll ntdll.dll/ -1 0 44 `
�� �~p � � ZwQueryObject ntdll.dll ntdll.dll/ -1 0 49 `
�� ��
/� � ZwQueryOpenSubKeys ntdll.dll
ntdll.dll/ -1 0 51 `
�� ���[� � ZwQueryOpenSubKeysEx ntdll.dll
ntdll.dll/ -1 0 56 `
�� ���|�$ � ZwQueryPerformanceCounter ntdll.dll ntdll.dll/ -1 0 60 `
�� ��k�( � ZwQueryPortInformationProcess ntdll.dll ntdll.dll/ -1 0 58 `
�� �_ ��& � ZwQueryQuotaInformationFile ntdll.dll ntdll.dll/ -1 0 45 `
�� �)_?� � ZwQuerySection ntdll.dll
ntdll.dll/ -1 0 61 `
�� �� ��) � ZwQuerySecurityAttributesToken ntdll.dll
ntdll.dll/ -1 0 52 `
�� ��3H� � ZwQuerySecurityObject ntdll.dll ntdll.dll/ -1 0 52 `
�� �8�� � ZwQuerySecurityPolicy ntdll.dll ntdll.dll/ -1 0 47 `
�� �j�� � ZwQuerySemaphore ntdll.dll
ntdll.dll/ -1 0 56 `
�� �N���$ � ZwQuerySymbolicLinkObject ntdll.dll ntdll.dll/ -1 0 60 `
�� ���( � ZwQuerySystemEnvironmentValue ntdll.dll ntdll.dll/ -1 0 62 `
�� �]H��* � ZwQuerySystemEnvironmentValueEx ntdll.dll ntdll.dll/ -1 0 55 `
�� �b'�# � ZwQuerySystemInformation ntdll.dll
ntdll.dll/ -1 0 57 `
�� �^��% � ZwQuerySystemInformationEx ntdll.dll
ntdll.dll/ -1 0 48 `
�� �e�� � ZwQuerySystemTime ntdll.dll ntdll.dll/ -1 0 43 `
�� �x� � ZwQueryTimer ntdll.dll
ntdll.dll/ -1 0 53 `
�� �
�[�! � ZwQueryTimerResolution ntdll.dll
ntdll.dll/ -1 0 46 `
�� �?�[� � ZwQueryValueKey ntdll.dll ntdll.dll/ -1 0 51 `
�� �Ÿ� � ZwQueryVirtualMemory ntdll.dll
ntdll.dll/ -1 0 59 `
�� �ٍ�' � ZwQueryVolumeInformationFile ntdll.dll
ntdll.dll/ -1 0 50 `
�� �b��� � ZwQueryWnfStateData ntdll.dll ntdll.dll/ -1 0 61 `
�� �$��) � ZwQueryWnfStateNameInformation ntdll.dll
ntdll.dll/ -1 0 47 `
�� �.�#� � ZwQueueApcThread ntdll.dll
ntdll.dll/ -1 0 49 `
�� ���U� � ZwQueueApcThreadEx ntdll.dll
ntdll.dll/ -1 0 47 `
�� ����� � ZwRaiseException ntdll.dll
ntdll.dll/ -1 0 47 `
�� �`8�� � ZwRaiseHardError ntdll.dll
ntdll.dll/ -1 0 41 `
�� �.2� � ZwReadFile ntdll.dll
ntdll.dll/ -1 0 48 `
�� �Ga�� � ZwReadFileScatter ntdll.dll ntdll.dll/ -1 0 51 `
�� �#��� � ZwReadOnlyEnlistment ntdll.dll
ntdll.dll/ -1 0 48 `
�� �M
�� � ZwReadRequestData ntdll.dll ntdll.dll/ -1 0 50 `
�� �f��� � ZwReadVirtualMemory ntdll.dll ntdll.dll/ -1 0 50 `
�� �( �� � ZwRecoverEnlistment ntdll.dll ntdll.dll/ -1 0 55 `
�� �*L�# � ZwRecoverResourceManager ntdll.dll
ntdll.dll/ -1 0 58 `
�� �է��& � ZwRecoverTransactionManager ntdll.dll ntdll.dll/ -1 0 67 `
�� ��e��/ ZwRegisterProtocolAddressInformation ntdll.dll
ntdll.dll/ -1 0 60 `
�� ��[�( ZwRegisterThreadTerminatePort ntdll.dll ntdll.dll/ -1 0 50 `
�� ���� ZwReleaseKeyedEvent ntdll.dll ntdll.dll/ -1 0 46 `
�� ��V� ZwReleaseMutant ntdll.dll ntdll.dll/ -1 0 49 `
�� �y�m� ZwReleaseSemaphore ntdll.dll
ntdll.dll/ -1 0 59 `
�� �r���' ZwReleaseWorkerFactoryWorker ntdll.dll
ntdll.dll/ -1 0 51 `
�� �Q1b� ZwRemoveIoCompletion ntdll.dll
ntdll.dll/ -1 0 53 `
�� �u��! ZwRemoveIoCompletionEx ntdll.dll
ntdll.dll/ -1 0 51 `
�� �Z�J� ZwRemoveProcessDebug ntdll.dll
ntdll.dll/ -1 0 42 `
�� ���l� ZwRenameKey ntdll.dll ntdll.dll/ -1 0 57 `
�� �����%
ZwRenameTransactionManager ntdll.dll
ntdll.dll/ -1 0 43 `
�� ��ɠ� ZwReplaceKey ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��}�! ZwReplacePartitionUnit ntdll.dll
ntdll.dll/ -1 0 42 `
�� �<]��
ZwReplyPort ntdll.dll ntdll.dll/ -1 0 53 `
�� �]��! ZwReplyWaitReceivePort ntdll.dll
ntdll.dll/ -1 0 55 `
�� ��9R�# ZwReplyWaitReceivePortEx ntdll.dll
ntdll.dll/ -1 0 51 `
�� � ?�� ZwReplyWaitReplyPort ntdll.dll
ntdll.dll/ -1 0 44 `
�� ����� ZwRequestPort ntdll.dll ntdll.dll/ -1 0 53 `
�� � ��! ZwRequestWaitReplyPort ntdll.dll
ntdll.dll/ -1 0 43 `
�� �%M�� ZwResetEvent ntdll.dll
ntdll.dll/ -1 0 48 `
�� �磪� ZwResetWriteWatch ntdll.dll ntdll.dll/ -1 0 43 `
�� �� �� ZwRestoreKey ntdll.dll
ntdll.dll/ -1 0 46 `
�� �;� � ZwResumeProcess ntdll.dll ntdll.dll/ -1 0 45 `
�� � c-� ZwResumeThread ntdll.dll
ntdll.dll/ -1 0 61 `
�� ��s��) ZwRevertContainerImpersonation ntdll.dll
ntdll.dll/ -1 0 49 `
�� �� E� ZwRollbackComplete ntdll.dll
ntdll.dll/ -1 0 51 `
�� �S �� ZwRollbackEnlistment ntdll.dll
ntdll.dll/ -1 0 60 `
�� ����( ZwRollbackRegistryTransaction ntdll.dll ntdll.dll/ -1 0 52 `
�� �<� ZwRollbackTransaction ntdll.dll ntdll.dll/ -1 0 62 `
�� ��ց�* ZwRollforwardTransactionManager ntdll.dll ntdll.dll/ -1 0 40 `
�� ����� ZwSaveKey ntdll.dll ntdll.dll/ -1 0 42 `
�� ��5 � ZwSaveKeyEx ntdll.dll ntdll.dll/ -1 0 47 `
�� ��z�� ZwSaveMergedKeys ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��k�� ! ZwSecureConnectPort ntdll.dll ntdll.dll/ -1 0 46 `
�� �){+� " ZwSerializeBoot ntdll.dll ntdll.dll/ -1 0 50 `
�� ��� # ZwSetBootEntryOrder ntdll.dll ntdll.dll/ -1 0 47 `
�� ��&�� $ ZwSetBootOptions ntdll.dll
ntdll.dll/ -1 0 54 `
�� ����" % ZwSetCachedSigningLevel ntdll.dll ntdll.dll/ -1 0 55 `
�� ��K|�# & ZwSetCachedSigningLevel2 ntdll.dll
ntdll.dll/ -1 0 49 `
�� �� �� ' ZwSetContextThread ntdll.dll
ntdll.dll/ -1 0 52 `
�� �X� ( ZwSetDebugFilterState ntdll.dll ntdll.dll/ -1 0 56 `
�� �(���$ ) ZwSetDefaultHardErrorPort ntdll.dll ntdll.dll/ -1 0 49 `
�� ���� * ZwSetDefaultLocale ntdll.dll
ntdll.dll/ -1 0 53 `
�� �����! + ZwSetDefaultUILanguage ntdll.dll
ntdll.dll/ -1 0 52 `
�� �8(x� , ZwSetDriverEntryOrder ntdll.dll ntdll.dll/ -1 0 42 `
�� ��� - ZwSetEaFile ntdll.dll ntdll.dll/ -1 0 41 `
�� �.�� . ZwSetEvent ntdll.dll
ntdll.dll/ -1 0 54 `
�� � �a�" / ZwSetEventBoostPriority ntdll.dll ntdll.dll/ -1 0 49 `
�� �M��� 0 ZwSetHighEventPair ntdll.dll
ntdll.dll/ -1 0 56 `
�� ��O4�$ 1 ZwSetHighWaitLowEventPair ntdll.dll ntdll.dll/ -1 0 43 `
�� �� H� 2 ZwSetIRTimer ntdll.dll
ntdll.dll/ -1 0 58 `
�� ���|�& 3 ZwSetInformationDebugObject ntdll.dll ntdll.dll/ -1 0 57 `
�� �N �% 4 ZwSetInformationEnlistment ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��� 5 ZwSetInformationFile ntdll.dll
ntdll.dll/ -1 0 56 `
�� �RAm�$ 6 ZwSetInformationJobObject ntdll.dll ntdll.dll/ -1 0 50 `
�� ����� 7 ZwSetInformationKey ntdll.dll ntdll.dll/ -1 0 53 `
�� ��=�! 8 ZwSetInformationObject ntdll.dll
ntdll.dll/ -1 0 54 `
�� ����" 9 ZwSetInformationProcess ntdll.dll ntdll.dll/ -1 0 62 `
�� �4���* : ZwSetInformationResourceManager ntdll.dll ntdll.dll/ -1 0 59 `
�� ���' ; ZwSetInformationSymbolicLink ntdll.dll
ntdll.dll/ -1 0 53 `
�� ��ء�! < ZwSetInformationThread ntdll.dll
ntdll.dll/ -1 0 52 `
�� �en
� = ZwSetInformationToken ntdll.dll ntdll.dll/ -1 0 58 `
�� ���y�& > ZwSetInformationTransaction ntdll.dll ntdll.dll/ -1 0 65 `
�� ��ű�- ? ZwSetInformationTransactionManager ntdll.dll
ntdll.dll/ -1 0 60 `
�� ��&��( @ ZwSetInformationVirtualMemory ntdll.dll ntdll.dll/ -1 0 60 `
�� �9���( A ZwSetInformationWorkerFactory ntdll.dll ntdll.dll/ -1 0 51 `
�� ��@=� B ZwSetIntervalProfile ntdll.dll
ntdll.dll/ -1 0 48 `
�� �� �� C ZwSetIoCompletion ntdll.dll ntdll.dll/ -1 0 50 `
�� ��.:� D ZwSetIoCompletionEx ntdll.dll ntdll.dll/ -1 0 46 `
�� �7�m� E ZwSetLdtEntries ntdll.dll ntdll.dll/ -1 0 48 `
�� �a� F ZwSetLowEventPair ntdll.dll ntdll.dll/ -1 0 56 `
�� �����$ G ZwSetLowWaitHighEventPair ntdll.dll ntdll.dll/ -1 0 56 `
�� �-S �$ H ZwSetQuotaInformationFile ntdll.dll ntdll.dll/ -1 0 50 `
�� ��W"� I ZwSetSecurityObject ntdll.dll ntdll.dll/ -1 0 58 `
�� ��& J ZwSetSystemEnvironmentValue ntdll.dll ntdll.dll/ -1 0 60 `
�� ���[�( K ZwSetSystemEnvironmentValueEx ntdll.dll ntdll.dll/ -1 0 53 `
�� �=���! L ZwSetSystemInformation ntdll.dll
ntdll.dll/ -1 0 52 `
�� ����� M ZwSetSystemPowerState ntdll.dll ntdll.dll/ -1 0 46 `
�� �v>/� N ZwSetSystemTime ntdll.dll ntdll.dll/ -1 0 56 `
�� �n&N�$ O ZwSetThreadExecutionState ntdll.dll ntdll.dll/ -1 0 41 `
�� �� � P ZwSetTimer ntdll.dll
ntdll.dll/ -1 0 42 `
�� ���w� Q ZwSetTimer2 ntdll.dll ntdll.dll/ -1 0 43 `
�� �l1_� R ZwSetTimerEx ntdll.dll
ntdll.dll/ -1 0 51 `
�� ��]v� S ZwSetTimerResolution ntdll.dll
ntdll.dll/ -1 0 44 `
�� ��}F� T ZwSetUuidSeed ntdll.dll ntdll.dll/ -1 0 44 `
�� �5�� U ZwSetValueKey ntdll.dll ntdll.dll/ -1 0 57 `
�� �s���% V ZwSetVolumeInformationFile ntdll.dll
ntdll.dll/ -1 0 63 `
�� �����+ W ZwSetWnfProcessNotificationEvent ntdll.dll
ntdll.dll/ -1 0 47 `
�� ��]� X ZwShutdownSystem ntdll.dll
ntdll.dll/ -1 0 54 `
�� �aͫ�" Y ZwShutdownWorkerFactory ntdll.dll ntdll.dll/ -1 0 61 `
�� �ƞE�) Z ZwSignalAndWaitForSingleObject ntdll.dll
ntdll.dll/ -1 0 50 `
�� �E�� [ ZwSinglePhaseReject ntdll.dll ntdll.dll/ -1 0 45 `
�� ��Qx� \ ZwStartProfile ntdll.dll
ntdll.dll/ -1 0 44 `
�� �{��� ] ZwStopProfile ntdll.dll ntdll.dll/ -1 0 56 `
�� ��a�$ ^ ZwSubscribeWnfStateChange ntdll.dll ntdll.dll/ -1 0 47 `
�� �$)�� _ ZwSuspendProcess ntdll.dll
ntdll.dll/ -1 0 46 `
�� �R�� ` ZwSuspendThread ntdll.dll ntdll.dll/ -1 0 51 `
�� �eP� a ZwSystemDebugControl ntdll.dll
ntdll.dll/ -1 0 49 `
�� �P$�� b ZwTerminateEnclave ntdll.dll
ntdll.dll/ -1 0 51 `
�� �Ƴ� c ZwTerminateJobObject ntdll.dll
ntdll.dll/ -1 0 49 `
�� ��� d ZwTerminateProcess ntdll.dll
ntdll.dll/ -1 0 48 `
�� �� e ZwTerminateThread ntdll.dll ntdll.dll/ -1 0 42 `
�� ��(� f ZwTestAlert ntdll.dll ntdll.dll/ -1 0 45 `
�� ����� g ZwThawRegistry ntdll.dll
ntdll.dll/ -1 0 49 `
�� ���� h ZwThawTransactions ntdll.dll
ntdll.dll/ -1 0 45 `
�� ���� i ZwTraceControl ntdll.dll
ntdll.dll/ -1 0 43 `
�� ��P�� j ZwTraceEvent ntdll.dll
ntdll.dll/ -1 0 50 `
�� ��]�� k ZwTranslateFilePath ntdll.dll ntdll.dll/ -1 0 47 `
�� �̫� l ZwUmsThreadYield ntdll.dll
ntdll.dll/ -1 0 45 `
�� � *�� m ZwUnloadDriver ntdll.dll
ntdll.dll/ -1 0 42 `
�� �W��� n ZwUnloadKey ntdll.dll ntdll.dll/ -1 0 43 `
�� �E�� o ZwUnloadKey2 ntdll.dll
ntdll.dll/ -1 0 44 `
�� ��3� p ZwUnloadKeyEx ntdll.dll ntdll.dll/ -1 0 43 `
�� �8�� q ZwUnlockFile ntdll.dll
ntdll.dll/ -1 0 52 `
�� �2@#� r ZwUnlockVirtualMemory ntdll.dll ntdll.dll/ -1 0 51 `
�� �[gI� s ZwUnmapViewOfSection ntdll.dll
ntdll.dll/ -1 0 53 `
�� �����! t ZwUnmapViewOfSectionEx ntdll.dll
ntdll.dll/ -1 0 58 `
�� ��a=�& u ZwUnsubscribeWnfStateChange ntdll.dll ntdll.dll/ -1 0 51 `
�� �ZW,� v ZwUpdateWnfStateData ntdll.dll
ntdll.dll/ -1 0 43 `
�� �,�� w ZwVdmControl ntdll.dll
ntdll.dll/ -1 0 55 `
�� �+ǖ�# x ZwWaitForAlertByThreadId ntdll.dll
ntdll.dll/ -1 0 50 `
�� �:�H� y ZwWaitForDebugEvent ntdll.dll ntdll.dll/ -1 0 50 `
�� �/�P� z ZwWaitForKeyedEvent ntdll.dll ntdll.dll/ -1 0 55 `
�� ��<��# { ZwWaitForMultipleObjects ntdll.dll
ntdll.dll/ -1 0 57 `
�� ��!��% | ZwWaitForMultipleObjects32 ntdll.dll
ntdll.dll/ -1 0 52 `
�� �M��� } ZwWaitForSingleObject ntdll.dll ntdll.dll/ -1 0 60 `
�� ����( ~ ZwWaitForWorkViaWorkerFactory ntdll.dll ntdll.dll/ -1 0 50 `
�� �3��� ZwWaitHighEventPair ntdll.dll ntdll.dll/ -1 0 49 `
�� �Dtd� � ZwWaitLowEventPair ntdll.dll
ntdll.dll/ -1 0 57 `
�� ��-�% � ZwWorkerFactoryWorkerReady ntdll.dll
ntdll.dll/ -1 0 42 `
�� �M�(� � ZwWriteFile ntdll.dll ntdll.dll/ -1 0 48 `
�� � |3� � ZwWriteFileGather ntdll.dll ntdll.dll/ -1 0 49 `
�� ��D � � ZwWriteRequestData ntdll.dll
ntdll.dll/ -1 0 51 `
�� ���� � ZwWriteVirtualMemory ntdll.dll
ntdll.dll/ -1 0 47 `
�� �U��� � ZwYieldExecution ntdll.dll
ntdll.dll/ -1 0 42 `
�� �� t� $ vDbgPrintEx ntdll.dll ntdll.dll/ -1 0 52 `
�� ��d8� % vDbgPrintExWithPrefix ntdll.dll