->Export Table
   Characteristics:        0x00000000
   TimeDateStamp:          0x48A3E7FF  (GMT: Thu Aug 14 08:08:31 2008)
   MajorVersion:           0x0000
   MinorVersion:           0x0000  -> 0.00
   Name:                   0x0019CA3E  ("ntoskrnl.exe")
   Base:                   0x00000001
   NumberOfFunctions:      0x000005CF
   NumberOfNames:          0x000005CF
   AddressOfFunctions:     0x00199028
   AddressOfNames:         0x0019A764
   AddressOfNameOrdinals:  0x0019BEA0

   Ordinal RVA        Symbol Name
   ------- ---------- ----------------------------------
   0x0001  0x0006F924 "ExAcquireFastMutexUnsafe"
   0x0002  0x001353DA "ExAcquireRundownProtection"
   0x0003  0x00135404 "ExAcquireRundownProtectionEx"
   0x0004  0x001353BA "ExInitializeRundownProtection"
   0x0005  0x0006F960 "ExInterlockedAddLargeStatistic"
   0x0006  0x0006FB00 "ExInterlockedCompareExchange64"
   0x0007  0x0006F108 "ExInterlockedFlushSList"
   0x0008  0x0006F128 "ExInterlockedPopEntrySList"
   0x0009  0x0006F148 "ExInterlockedPushEntrySList"
   0x000A  0x001353C4 "ExReInitializeRundownProtection"
   0x000B  0x0006F944 "ExReleaseFastMutexUnsafe"
   0x000C  0x0005E780 "ExReleaseResourceLite"
   0x000D  0x00135434 "ExReleaseRundownProtection"
   0x000E  0x00135470 "ExReleaseRundownProtectionEx"
   0x000F  0x001353CE "ExRundownCompleted"
   0x0010  0x001354B8 "ExWaitForRundownProtectionRelease"
   0x0011  0x001356B6 "ExfAcquirePushLockExclusive"
   0x0012  0x00135734 "ExfAcquirePushLockShared"
   0x0013  0x0006F96C "ExfInterlockedAddUlong"
   0x0014  0x0006FAE4 "ExfInterlockedCompareExchange64"
   0x0015  0x0006F998 "ExfInterlockedInsertHeadList"
   0x0016  0x0006F9D0 "ExfInterlockedInsertTailList"
   0x0017  0x0006FA3C "ExfInterlockedPopEntryList"
   0x0018  0x0006FA6C "ExfInterlockedPushEntryList"
   0x0019  0x0006FA08 "ExfInterlockedRemoveHeadList"
   0x001A  0x00135538 "ExfReleasePushLock"
   0x001B  0x0006FAAC "Exfi386InterlockedDecrementLong"
   0x001C  0x0006FAB8 "Exfi386InterlockedExchangeUlong"
   0x001D  0x0006FAA0 "Exfi386InterlockedIncrementLong"
   0x001E  0x00016F4C "HalExamineMBR"
   0x001F  0x0006FAD8 "InterlockedCompareExchange"
   0x0020  0x0006FACC "InterlockedDecrement"
   0x0021  0x0006FAB8 "InterlockedExchange"
   0x0022  0x0006FB1C "InterlockedExchangeAdd"
   0x0023  0x0006FAC0 "InterlockedIncrement"
   0x0024  0x0006F128 "InterlockedPopEntrySList"
   0x0025  0x0006F14C "InterlockedPushEntrySList"
   0x0026  0x0009A596 "IoAssignDriveLetters"
   0x0027  0x00099C58 "IoReadPartitionTable"
   0x0028  0x000992D6 "IoSetPartitionInformation"
   0x0029  0x0009953E "IoWritePartitionTable"
   0x002A  0x000181A6 "IofCallDriver"
   0x002B  0x00018236 "IofCompleteRequest"
   0x002C  0x00069A80 "KeAcquireInStackQueuedSpinLockAtDpcLevel"
   0x002D  0x00069AB8 "KeReleaseInStackQueuedSpinLockFromDpcLevel"
   0x002E  0x000CA40A "KeSetTimeUpdateNotifyRoutine"
   0x002F  0x00069990 "KefAcquireSpinLockAtDpcLevel"
   0x0030  0x000699D0 "KefReleaseSpinLockFromDpcLevel"
   0x0031  0x000699E0 "KiAcquireSpinLock"
   0x0032  0x00069A00 "KiReleaseSpinLock"
   0x0033  0x0004F68E "ObfDereferenceObject"
   0x0034  0x0004F4BE "ObfReferenceObject"
   0x0035  0x0006F684 "RtlPrefetchMemoryNonTemporal"
   0x0036  0x0006F6B0 "RtlUlongByteSwap"
   0x0037  0x0006F6C0 "RtlUlonglongByteSwap"
   0x0038  0x0006F6A0 "RtlUshortByteSwap"
   0x0039  0x0005D816 "WmiGetClock"
   0x003A  0x0006AEBC "Kei386EoiHelper"
   0x003B  0x0006DF3C "Kii386SpinOnSpinLock"
   0x003C  0x0000A0A8 "CcCanIWrite"
   0x003D  0x00092006 "CcCopyRead"
   0x003E  0x0000A30A "CcCopyWrite"
   0x003F  0x0000A7FC "CcDeferWrite"
   0x0040  0x0009258A "CcFastCopyRead"
   0x0041  0x0000A5BE "CcFastCopyWrite"
   0x0042  0x000825C4 "CcFastMdlReadWait"
   0x0043  0x000825CC "CcFastReadNotPossible"
   0x0044  0x000825D4 "CcFastReadWait"
   0x0045  0x0000D1B4 "CcFlushCache"
   0x0046  0x0000DCB4 "CcGetDirtyPages"
   0x0047  0x0000E424 "CcGetFileObjectFromBcb"
   0x0048  0x0000E3EE "CcGetFileObjectFromSectionPtrs"
   0x0049  0x0000B040 "CcGetFlushedValidData"
   0x004A  0x0000DF3C "CcGetLsnForFileObject"
   0x004B  0x0000E5A8 "CcInitializeCacheMap"
   0x004C  0x0000DE98 "CcIsThereDirtyData"
   0x004D  0x0009311A "CcMapData"
   0x004E  0x0009367C "CcMdlRead"
   0x004F  0x00093920 "CcMdlReadComplete"
   0x0050  0x0000F5C4 "CcMdlWriteAbort"
   0x0051  0x00093960 "CcMdlWriteComplete"
   0x0052  0x00093278 "CcPinMappedData"
   0x0053  0x000933CE "CcPinRead"
   0x0054  0x0000F672 "CcPrepareMdlWrite"
   0x0055  0x00093518 "CcPreparePinWrite"
   0x0056  0x0000ED6E "CcPurgeCacheSection"
   0x0057  0x0000B1A6 "CcRemapBcb"
   0x0058  0x0000B1F4 "CcRepinBcb"
   0x0059  0x0000B7BE "CcScheduleReadAhead"
   0x005A  0x0000DB44 "CcSetAdditionalCacheAttributes"
   0x005B  0x00092FE4 "CcSetBcbOwnerPointer"
   0x005C  0x0000E3BA "CcSetDirtyPageThreshold"
   0x005D  0x0000AD78 "CcSetDirtyPinnedData"
   0x005E  0x0000F1A6 "CcSetFileSizes"
   0x005F  0x00092A0E "CcSetLogHandleForFile"
   0x0060  0x0000A8B2 "CcSetReadAheadGranularity"
   0x0061  0x0000EB34 "CcUninitializeCacheMap"
   0x0062  0x00092F92 "CcUnpinData"
   0x0063  0x00093026 "CcUnpinDataForThread"
   0x0064  0x0000C68C "CcUnpinRepinnedBcb"
   0x0065  0x0000FAA2 "CcWaitForCurrentLazyWriterActivity"
   0x0066  0x00092A38 "CcZeroData"
   0x0067  0x00093C1E "CmRegisterCallback"
   0x0068  0x00093B4A "CmUnRegisterCallback"
   0x0069  0x000545E0 "DbgBreakPoint"
   0x006A  0x000545E8 "DbgBreakPointWithStatus"
   0x006B  0x000547D0 "DbgLoadImageSymbols"
   0x006C  0x00054872 "DbgPrint"
   0x006D  0x00054894 "DbgPrintEx"
   0x006E  0x0005471C "DbgPrintReturnControlC"
   0x006F  0x0005478A "DbgPrompt"
   0x0070  0x00054850 "DbgQueryDebugFilterState"
   0x0071  0x00054860 "DbgSetDebugFilterState"
   0x0072  0x0005F126 "ExAcquireResourceExclusiveLite"
   0x0073  0x0005F22C "ExAcquireResourceSharedLite"
   0x0074  0x0005F304 "ExAcquireSharedStarveExclusive"
   0x0075  0x0005F3D4 "ExAcquireSharedWaitForExclusive"
   0x0076  0x00011A0A "ExAllocateFromPagedLookasideList"
   0x0077  0x00060008 "ExAllocatePool"
   0x0078  0x000601CE "ExAllocatePoolWithQuota"
   0x0079  0x0006008A "ExAllocatePoolWithQuotaTag"
   0x007A  0x00074968 "ExAllocatePoolWithTag"
   0x007B  0x00060026 "ExAllocatePoolWithTagPriority"
   0x007C  0x0005EA90 "ExConvertExclusiveToSharedLite"
   0x007D  0x001359CC "ExCreateCallback"
   0x007E  0x000608DC "ExDeleteNPagedLookasideList"
   0x007F  0x0006092C "ExDeletePagedLookasideList"
   0x0080  0x0005EAEC "ExDeleteResourceLite"
   0x0081  0x0008DC1C "ExDesktopObjectType"
   0x0082  0x0005E750 "ExDisableResourceBoostLite"
   0x0083  0x00136A5E "ExEnumHandleTable"
   0x0084  0x0008DBA0 "ExEventObjectType"
   0x0085  0x00060A30 "ExExtendZone"
   0x0086  0x00074950 "ExFreePool"
   0x0087  0x000742E0 "ExFreePoolWithTag"
   0x0088  0x0001208A "ExFreeToPagedLookasideList"
   0x0089  0x00060F40 "ExGetCurrentProcessorCounts"
   0x008A  0x00060EFE "ExGetCurrentProcessorCpuUsage"
   0x008B  0x0005EB52 "ExGetExclusiveWaiterCount"
   0x008C  0x00054334 "ExGetPreviousMode"
   0x008D  0x0005EB68 "ExGetSharedWaiterCount"
   0x008E  0x0006085C "ExInitializeNPagedLookasideList"
   0x008F  0x00135CDC "ExInitializePagedLookasideList"
   0x0090  0x0005E6FC "ExInitializeResourceLite"
   0x0091  0x000609CA "ExInitializeZone"
   0x0092  0x0006FB28 "ExInterlockedAddLargeInteger"
   0x0093  0x0006FB78 "ExInterlockedAddUlong"
   0x0094  0x0006FD04 "ExInterlockedDecrementLong"
   0x0095  0x0006FD18 "ExInterlockedExchangeUlong"
   0x0096  0x00060A94 "ExInterlockedExtendZone"
   0x0097  0x0006FCF0 "ExInterlockedIncrementLong"
   0x0098  0x0006FBAC "ExInterlockedInsertHeadList"
   0x0099  0x0006FBF0 "ExInterlockedInsertTailList"
   0x009A  0x0006FC80 "ExInterlockedPopEntryList"
   0x009B  0x0006FCB8 "ExInterlockedPushEntryList"
   0x009C  0x0006FC34 "ExInterlockedRemoveHeadList"
   0x009D  0x00060EDE "ExIsProcessorFeaturePresent"
   0x009E  0x0005EB7E "ExIsResourceAcquiredExclusiveLite"
   0x009F  0x0005EBC6 "ExIsResourceAcquiredSharedLite"
   0x00A0  0x000615B0 "ExLocalTimeToSystemTime"
   0x00A1  0x000601EC "ExNotifyCallback"
   0x00A2  0x0005F70C "ExQueryPoolBlockSize"
   0x00A3  0x000615DA "ExQueueWorkItem"
   0x00A4  0x0013D062 "ExRaiseAccessViolation"
   0x00A5  0x0013D072 "ExRaiseDatatypeMisalignment"
   0x00A6  0x0006FF64 "ExRaiseException"
   0x00A7  0x0013D262 "ExRaiseHardError"
   0x00A8  0x0007001C "ExRaiseStatus"
   0x00A9  0x000602A0 "ExRegisterCallback"
   0x00AA  0x0005F09C "ExReinitializeResourceLite"
   0x00AB  0x0005E8B2 "ExReleaseResourceForThreadLite"
   0x00AC  0x0008D780 "ExSemaphoreObjectType"
   0x00AD  0x0005E9F8 "ExSetResourceOwnerPointer"
   0x00AE  0x0013C190 "ExSetTimerResolution"
   0x00AF  0x0013B81C "ExSystemExceptionFilter"
   0x00B0  0x00061586 "ExSystemTimeToLocalTime"
   0x00B1  0x00060340 "ExUnregisterCallback"
   0x00B2  0x0013E1A2 "ExUuidCreate"
   0x00B3  0x000614DE "ExVerifySuite"
   0x00B4  0x0008DC20 "ExWindowStationObjectType"
   0x00B5  0x0006FD3C "Exi386InterlockedDecrementLong"
   0x00B6  0x0006FD50 "Exi386InterlockedExchangeUlong"
   0x00B7  0x0006FD28 "Exi386InterlockedIncrementLong"
   0x00B8  0x00096062 "FsRtlAcquireFileExclusive"
   0x00B9  0x00012746 "FsRtlAddLargeMcbEntry"
   0x00BA  0x00013180 "FsRtlAddMcbEntry"
   0x00BB  0x000941AE "FsRtlAddToTunnelCache"
   0x00BC  0x00013F34 "FsRtlAllocateFileLock"
   0x00BD  0x000151AA "FsRtlAllocatePool"
   0x00BE  0x000151DC "FsRtlAllocatePoolWithQuota"
   0x00BF  0x0001523E "FsRtlAllocatePoolWithQuotaTag"
   0x00C0  0x0001520E "FsRtlAllocatePoolWithTag"
   0x00C1  0x000960B8 "FsRtlAllocateResource"
   0x00C2  0x000961B6 "FsRtlAreNamesEqual"
   0x00C3  0x000966BE "FsRtlBalanceReads"
   0x00C4  0x00013F84 "FsRtlCheckLockForReadAccess"
   0x00C5  0x00014004 "FsRtlCheckLockForWriteAccess"
   0x00C6  0x00015F70 "FsRtlCheckOplock"
   0x00C7  0x000955F6 "FsRtlCopyRead"
   0x00C8  0x000958EA "FsRtlCopyWrite"
   0x00C9  0x000165A0 "FsRtlCreateSectionForDataScan"
   0x00CA  0x00096750 "FsRtlCurrentBatchOplock"
   0x00CB  0x0009401A "FsRtlDeleteKeyFromTunnelCache"
   0x00CC  0x000940CE "FsRtlDeleteTunnelCache"
   0x00CD  0x00096C8A "FsRtlDeregisterUncProvider"
   0x00CE  0x0009712C "FsRtlDissectDbcs"
   0x00CF  0x000960D6 "FsRtlDissectName"
   0x00D0  0x000971D0 "FsRtlDoesDbcsContainWildCards"
   0x00D1  0x0009615C "FsRtlDoesNameContainWildCards"
   0x00D2  0x000138A0 "FsRtlFastCheckLockForRead"
   0x00D3  0x00013978 "FsRtlFastCheckLockForWrite"
   0x00D4  0x00014DFA "FsRtlFastUnlockAll"
   0x00D5  0x00014E1E "FsRtlFastUnlockAllByKey"
   0x00D6  0x00014858 "FsRtlFastUnlockSingle"
   0x00D7  0x000943F8 "FsRtlFindInTunnelCache"
   0x00D8  0x00013F60 "FsRtlFreeFileLock"
   0x00D9  0x000953CA "FsRtlGetFileSize"
   0x00DA  0x0001357E "FsRtlGetNextFileLock"
   0x00DB  0x0001223E "FsRtlGetNextLargeMcbEntry"
   0x00DC  0x000124B4 "FsRtlGetNextMcbEntry"
   0x00DD  0x00011FCC "FsRtlIncrementCcFastReadNoWait"
   0x00DE  0x000955D2 "FsRtlIncrementCcFastReadNotPossible"
   0x00DF  0x00011FDE "FsRtlIncrementCcFastReadResourceMiss"
   0x00E0  0x000955E4 "FsRtlIncrementCcFastReadWait"
   0x00E1  0x000132E2 "FsRtlInitializeFileLock"
   0x00E2  0x00012500 "FsRtlInitializeLargeMcb"
   0x00E3  0x00096098 "FsRtlInitializeMcb"
   0x00E4  0x0013599A "FsRtlInitializeOplock"
   0x00E5  0x00093FD8 "FsRtlInitializeTunnelCache"
   0x00E6  0x000169F0 "FsRtlInsertPerFileObjectContext"
   0x00E7  0x00016910 "FsRtlInsertPerStreamContext"
   0x00E8  0x0009723C "FsRtlIsDbcsInExpression"
   0x00E9  0x00097690 "FsRtlIsFatDbcsLegal"
   0x00EA  0x00097898 "FsRtlIsHpfsDbcsLegal"
   0x00EB  0x00096636 "FsRtlIsNameInExpression"
   0x00EC  0x00015176 "FsRtlIsNtstatusExpected"
   0x00ED  0x00016900 "FsRtlIsPagingFile"
   0x00EE  0x0001526E "FsRtlIsTotalDeviceFailure"
   0x00EF  0x000014B0 "FsRtlLegalAnsiCharacterArray"
   0x00F0  0x00012BE6 "FsRtlLookupLargeMcbEntry"
   0x00F1  0x000120BC "FsRtlLookupLastLargeMcbEntry"
   0x00F2  0x00012158 "FsRtlLookupLastLargeMcbEntryAndIndex"
   0x00F3  0x00012466 "FsRtlLookupLastMcbEntry"
   0x00F4  0x000131F0 "FsRtlLookupMcbEntry"
   0x00F5  0x000167CE "FsRtlLookupPerFileObjectContext"
   0x00F6  0x00016754 "FsRtlLookupPerStreamContextInternal"
   0x00F7  0x000946F8 "FsRtlMdlRead"
   0x00F8  0x00011FEA "FsRtlMdlReadComplete"
   0x00F9  0x00011B0A "FsRtlMdlReadCompleteDev"
   0x00FA  0x00094514 "FsRtlMdlReadDev"
   0x00FB  0x00095FF2 "FsRtlMdlWriteComplete"
   0x00FC  0x00094BEC "FsRtlMdlWriteCompleteDev"
   0x00FD  0x0001529A "FsRtlNormalizeNtstatus"
   0x00FE  0x000987A6 "FsRtlNotifyChangeDirectory"
   0x00FF  0x000986B2 "FsRtlNotifyCleanup"
   0x0100  0x00097E64 "FsRtlNotifyFilterChangeDirectory"
   0x0101  0x000980DE "FsRtlNotifyFilterReportChange"
   0x0102  0x000987D6 "FsRtlNotifyFullChangeDirectory"
   0x0103  0x0009883E "FsRtlNotifyFullReportChange"
   0x0104  0x00097C52 "FsRtlNotifyInitializeSync"
   0x0105  0x0009880A "FsRtlNotifyReportChange"
   0x0106  0x00097A8C "FsRtlNotifyUninitializeSync"
   0x0107  0x0009886E "FsRtlNotifyVolumeEvent"
   0x0108  0x00012214 "FsRtlNumberOfRunsInLargeMcb"
   0x0109  0x000124A4 "FsRtlNumberOfRunsInMcb"
   0x010A  0x000969C8 "FsRtlOplockFsctrl"
   0x010B  0x0009672C "FsRtlOplockIsFastIoPossible"
   0x010C  0x00016F2E "FsRtlPostPagingFileStackOverflow"
   0x010D  0x00016F10 "FsRtlPostStackOverflow"
   0x010E  0x00094B6A "FsRtlPrepareMdlWrite"
   0x010F  0x0009477A "FsRtlPrepareMdlWriteDev"
   0x0110  0x00014E42 "FsRtlPrivateLock"
   0x0111  0x00015064 "FsRtlProcessFileLock"
   0x0112  0x00011B26 "FsRtlRegisterFileSystemFilterCallbacks"
   0x0113  0x00096F42 "FsRtlRegisterUncProvider"
   0x0114  0x00095210 "FsRtlReleaseFile"
   0x0115  0x00013248 "FsRtlRemoveLargeMcbEntry"
   0x0116  0x000131A4 "FsRtlRemoveMcbEntry"
   0x0117  0x0001685E "FsRtlRemovePerFileObjectContext"
   0x0118  0x0001695A "FsRtlRemovePerStreamContext"
   0x0119  0x00012054 "FsRtlResetLargeMcb"
   0x011A  0x00012CDC "FsRtlSplitLargeMcb"
   0x011B  0x000966B4 "FsRtlSyncVolumes"
   0x011C  0x00097A06 "FsRtlTeardownPerStreamContexts"
   0x011D  0x0001260A "FsRtlTruncateLargeMcb"
   0x011E  0x00013164 "FsRtlTruncateMcb"
   0x011F  0x00013DDA "FsRtlUninitializeFileLock"
   0x0120  0x000125BE "FsRtlUninitializeLargeMcb"
   0x0121  0x000960A8 "FsRtlUninitializeMcb"
   0x0122  0x0001541C "FsRtlUninitializeOplock"
   0x0123  0x00076038 "HalDispatchTable"
   0x0124  0x00076090 "HalPrivateDispatchTable"
   0x0125  0x000618A8 "HeadlessDispatch"
   0x0126  0x00017728 "InbvAcquireDisplayOwnership"
   0x0127  0x0001776E "InbvCheckDisplayOwnership"
   0x0128  0x0001756A "InbvDisplayString"
   0x0129  0x00017344 "InbvEnableBootDriver"
   0x012A  0x00017398 "InbvEnableDisplayString"
   0x012B  0x00017554 "InbvInstallDisplayStringFilter"
   0x012C  0x000173B4 "InbvIsBootDriverInstalled"
   0x012D  0x000176D2 "InbvNotifyDisplayOwnershipLost"
   0x012E  0x000173C0 "InbvResetDisplay"
   0x012F  0x0001778C "InbvSetScrollRegion"
   0x0130  0x000174EE "InbvSetTextColor"
   0x0131  0x00017468 "InbvSolidColorFill"
   0x0132  0x00083880 "InitSafeBootMode"
   0x0133  0x00017E90 "IoAcquireCancelSpinLock"
   0x0134  0x0001E932 "IoAcquireRemoveLockEx"
   0x0135  0x00017EAC "IoAcquireVpbSpinLock"
   0x0136  0x00083D70 "IoAdapterObjectType"
   0x0137  0x00017EC8 "IoAllocateAdapterChannel"
   0x0138  0x00019CC6 "IoAllocateController"
   0x0139  0x00017EFC "IoAllocateDriverObjectExtension"
   0x013A  0x00019D14 "IoAllocateErrorLogEntry"
   0x013B  0x000180A0 "IoAllocateIrp"
   0x013C  0x00019F4C "IoAllocateMdl"
   0x013D  0x0001AB2C "IoAllocateWorkItem"
   0x013E  0x000AD3B2 "IoAssignResources"
   0x013F  0x0009FA2A "IoAttachDevice"
   0x0140  0x0001AABC "IoAttachDeviceByPointer"
   0x0141  0x0001AA76 "IoAttachDeviceToDeviceStack"
   0x0142  0x0001AA92 "IoAttachDeviceToDeviceStackSafe"
   0x0143  0x0001A1FE "IoBuildAsynchronousFsdRequest"
   0x0144  0x0001A33E "IoBuildDeviceIoControlRequest"
   0x0145  0x000180B2 "IoBuildPartialMdl"
   0x0146  0x0001A53E "IoBuildSynchronousFsdRequest"
   0x0147  0x000195D0 "IoCallDriver"
   0x0148  0x0009E194 "IoCancelFileOpen"
   0x0149  0x0001A5A0 "IoCancelIrp"
   0x014A  0x0009C5DE "IoCheckDesiredAccess"
   0x014B  0x0009C610 "IoCheckEaBufferValidity"
   0x014C  0x0009C678 "IoCheckFunctionAccess"
   0x014D  0x000181B2 "IoCheckQuerySetFileInformation"
   0x014E  0x000181F4 "IoCheckQuerySetVolumeInformation"
   0x014F  0x0009C7D2 "IoCheckQuotaBufferValidity"
   0x0150  0x0009C852 "IoCheckShareAccess"
   0x0151  0x000195EA "IoCompleteRequest"
   0x0152  0x0009E778 "IoConnectInterrupt"
   0x0153  0x0009C95A "IoCreateController"
   0x0154  0x0009E8EE "IoCreateDevice"
   0x0155  0x0009C350 "IoCreateDisk"
   0x0156  0x0009E32A "IoCreateDriver"
   0x0157  0x0009F91C "IoCreateFile"
   0x0158  0x0009F9CE "IoCreateFileSpecifyDeviceObjectHint"
   0x0159  0x0009CA64 "IoCreateNotificationEvent"
   0x015A  0x0009F186 "IoCreateStreamFileObject"
   0x015B  0x00018294 "IoCreateStreamFileObjectEx"
   0x015C  0x0009CADC "IoCreateStreamFileObjectLite"
   0x015D  0x0009CBB4 "IoCreateSymbolicLink"
   0x015E  0x0009CC10 "IoCreateSynchronizationEvent"
   0x015F  0x0009CC88 "IoCreateUnprotectedSymbolicLink"
   0x0160  0x0001AB60 "IoCsqInitialize"
   0x0161  0x0001ACC4 "IoCsqInsertIrp"
   0x0162  0x0001AC04 "IoCsqRemoveIrp"
   0x0163  0x0001ABA2 "IoCsqRemoveNextIrp"
   0x0164  0x001008F4 "IoDeleteController"
   0x0165  0x0001A8F2 "IoDeleteDevice"
   0x0166  0x001008F4 "IoDeleteDriver"
   0x0167  0x0009CF12 "IoDeleteSymbolicLink"
   0x0168  0x00018400 "IoDetachDevice"
   0x0169  0x00083D54 "IoDeviceHandlerObjectSize"
   0x016A  0x00083D5C "IoDeviceHandlerObjectType"
   0x016B  0x00083D64 "IoDeviceObjectType"
   0x016C  0x0009CF92 "IoDisconnectInterrupt"
   0x016D  0x00083D60 "IoDriverObjectType"
   0x016E  0x0009CFD2 "IoEnqueueIrp"
   0x016F  0x000198F6 "IoEnumerateDeviceObjectList"
   0x0170  0x0009E598 "IoEnumerateRegisteredFiltersList"
   0x0171  0x0009D010 "IoFastQueryNetworkAttributes"
   0x0172  0x00083D58 "IoFileObjectType"
   0x0173  0x000AE19E "IoForwardAndCatchIrp"
   0x0174  0x000AE19E "IoForwardIrpSynchronously"
   0x0175  0x0001846A "IoFreeController"
   0x0176  0x0001805A "IoFreeErrorLogEntry"
   0x0177  0x000184A0 "IoFreeIrp"
   0x0178  0x000185AC "IoFreeMdl"
   0x0179  0x0001AAE4 "IoFreeWorkItem"
   0x017A  0x00018624 "IoGetAttachedDevice"
   0x017B  0x00018640 "IoGetAttachedDeviceReference"
   0x017C  0x0001867C "IoGetBaseFileSystemDeviceObject"
   0x017D  0x0009F2A8 "IoGetBootDiskInformation"
   0x017E  0x0009D0FE "IoGetConfigurationInformation"
   0x017F  0x000542E2 "IoGetCurrentProcess"
   0x0180  0x00019972 "IoGetDeviceAttachmentBaseRef"
   0x0181  0x000B12E8 "IoGetDeviceInterfaceAlias"
   0x0182  0x000B0E6E "IoGetDeviceInterfaces"
   0x0183  0x0009F1A2 "IoGetDeviceObjectPointer"
   0x0184  0x000AF622 "IoGetDeviceProperty"
   0x0185  0x000186B6 "IoGetDeviceToVerify"
   0x0186  0x000199AE "IoGetDiskDeviceObject"
   0x0187  0x000AFCBC "IoGetDmaAdapter"
   0x0188  0x000186CE "IoGetDriverObjectExtension"
   0x0189  0x0009D10A "IoGetFileObjectGenericMapping"
   0x018A  0x00018716 "IoGetInitialStack"
   0x018B  0x000198AA "IoGetLowerDeviceObject"
   0x018C  0x00018762 "IoGetRelatedDeviceObject"
   0x018D  0x000187D2 "IoGetRequestorProcess"
   0x018E  0x0001A97E "IoGetRequestorProcessId"
   0x018F  0x00019604 "IoGetRequestorSessionId"
   0x0190  0x0006FF3C "IoGetStackLimits"
   0x0191  0x000187F2 "IoGetTopLevelIrp"
   0x0192  0x000A117A "IoInitializeCrashDump"
   0x0193  0x00018804 "IoInitializeIrp"
   0x0194  0x000AD332 "IoInitializeRemoveLockEx"
   0x0195  0x0009D116 "IoInitializeTimer"
   0x0196  0x0001EA9E "IoInvalidateDeviceRelations"
   0x0197  0x0001EB04 "IoInvalidateDeviceState"
   0x0198  0x00019B80 "IoIsFileOriginRemote"
   0x0199  0x00018912 "IoIsOperationSynchronous"
   0x019A  0x0005429A "IoIsSystemThread"
   0x019B  0x0009D192 "IoIsValidNameGraftingBuffer"
   0x019C  0x000AD8C4 "IoIsWdmVersionAvailable"
   0x019D  0x00018946 "IoMakeAssociatedIrp"
   0x019E  0x000B1B0A "IoOpenDeviceInterfaceRegistryKey"
   0x019F  0x000AFAE4 "IoOpenDeviceRegistryKey"
   0x01A0  0x00018B94 "IoPageRead"
   0x01A1  0x000B287A "IoPnPDeliverServicePowerNotification"
   0x01A2  0x000A197E "IoQueryDeviceDescription"
   0x01A3  0x0009E29E "IoQueryFileDosDeviceName"
   0x01A4  0x0009D680 "IoQueryFileInformation"
   0x01A5  0x0009D6A4 "IoQueryVolumeInformation"
   0x01A6  0x00018BB8 "IoQueueThreadIrp"
   0x01A7  0x0001AAFC "IoQueueWorkItem"
   0x01A8  0x00018C8A "IoRaiseHardError"
   0x01A9  0x00018D78 "IoRaiseInformationalHardError"
   0x01AA  0x000171E8 "IoReadDiskSignature"
   0x01AB  0x00083D50 "IoReadOperationCount"
   0x01AC  0x0009C0F6 "IoReadPartitionTableEx"
   0x01AD  0x00083D40 "IoReadTransferCount"
   0x01AE  0x0009D6C8 "IoRegisterBootDriverReinitialization"
   0x01AF  0x000B1BB0 "IoRegisterDeviceInterface"
   0x01B0  0x0009D70A "IoRegisterDriverReinitialization"
   0x01B1  0x0009D74C "IoRegisterFileSystem"
   0x01B2  0x0009D83C "IoRegisterFsRegistrationChange"
   0x01B3  0x0009D94E "IoRegisterLastChanceShutdownNotification"
   0x01B4  0x000B315A "IoRegisterPlugPlayNotification"
   0x01B5  0x0009D99A "IoRegisterShutdownNotification"
   0x01B6  0x00018FE4 "IoReleaseCancelSpinLock"
   0x01B7  0x000AD2E6 "IoReleaseRemoveLockAndWaitEx"
   0x01B8  0x0001E9DA "IoReleaseRemoveLockEx"
   0x01B9  0x00018FFE "IoReleaseVpbSpinLock"
   0x01BA  0x0009D9E6 "IoRemoveShareAccess"
   0x01BB  0x000AE552 "IoReportDetectedDevice"
   0x01BC  0x001C4570 "IoReportHalResourceUsage"
   0x01BD  0x000B3AF6 "IoReportResourceForDetection"
   0x01BE  0x000B3C9E "IoReportResourceUsage"
   0x01BF  0x000B2B96 "IoReportTargetDeviceChange"
   0x01C0  0x0001ED18 "IoReportTargetDeviceChangeAsynchronous"
   0x01C1  0x0001EC1A "IoRequestDeviceEject"
   0x01C2  0x00018882 "IoReuseIrp"
   0x01C3  0x0001983C "IoSetCompletionRoutineEx"
   0x01C4  0x000B1A74 "IoSetDeviceInterfaceState"
   0x01C5  0x00019018 "IoSetDeviceToVerify"
   0x01C6  0x00019B9A "IoSetFileOrigin"
   0x01C7  0x00019032 "IoSetHardErrorOrVerifyDevice"
   0x01C8  0x0009DA4A "IoSetInformation"
   0x01C9  0x000A1CF0 "IoSetIoCompletion"
   0x01CA  0x0009C3A2 "IoSetPartitionInformationEx"
   0x01CB  0x0009DCEE "IoSetShareAccess"
   0x01CC  0x00019378 "IoSetStartIoAttributes"
   0x01CD  0x00019A4C "IoSetSystemPartition"
   0x01CE  0x00019054 "IoSetThreadHardErrorMode"
   0x01CF  0x0001908C "IoSetTopLevelIrp"
   0x01D0  0x000192F0 "IoStartNextPacket"
   0x01D1  0x00019332 "IoStartNextPacketByKey"
   0x01D2  0x00019190 "IoStartPacket"
   0x01D3  0x000193AA "IoStartTimer"
   0x01D4  0x0007C700 "IoStatisticsLock"
   0x01D5  0x000193F8 "IoStopTimer"
   0x01D6  0x000AD566 "IoSynchronousInvalidateDeviceRelations"
   0x01D7  0x0001943A "IoSynchronousPageWrite"
   0x01D8  0x000194F6 "IoThreadToProcess"
   0x01D9  0x0009DDB6 "IoUnregisterFileSystem"
   0x01DA  0x0009DE20 "IoUnregisterFsRegistrationChange"
   0x01DB  0x000B2A2C "IoUnregisterPlugPlayNotification"
   0x01DC  0x00172016 "IoUnregisterShutdownNotification"
   0x01DD  0x0009DE84 "IoUpdateShareAccess"
   0x01DE  0x00019C70 "IoValidateDeviceIoControlAccess"
   0x01DF  0x0009C16C "IoVerifyPartitionTable"
   0x01E0  0x0009DEE8 "IoVerifyVolume"
   0x01E1  0x0001CE86 "IoVolumeDeviceToDosName"
   0x01E2  0x00127CBC "IoWMIAllocateInstanceIds"
   0x01E3  0x0005E44A "IoWMIDeviceObjectToInstanceName"
   0x01E4  0x00128582 "IoWMIExecuteMethod"
   0x01E5  0x0005E428 "IoWMIHandleToInstanceName"
   0x01E6  0x0012805A "IoWMIOpenBlock"
   0x01E7  0x00128164 "IoWMIQueryAllData"
   0x01E8  0x001281F8 "IoWMIQueryAllDataMultiple"
   0x01E9  0x00128270 "IoWMIQuerySingleInstance"
   0x01EA  0x00128358 "IoWMIQuerySingleInstanceMultiple"
   0x01EB  0x00127BC2 "IoWMIRegistrationControl"
   0x01EC  0x001286B0 "IoWMISetNotificationCallback"
   0x01ED  0x001283D6 "IoWMISetSingleInstance"
   0x01EE  0x001284A8 "IoWMISetSingleItem"
   0x01EF  0x00127DA8 "IoWMISuggestInstanceName"
   0x01F0  0x0005E28A "IoWMIWriteEvent"
   0x01F1  0x0001950E "IoWriteErrorLogEntry"
   0x01F2  0x00083D4C "IoWriteOperationCount"
   0x01F3  0x0009BFE8 "IoWritePartitionTableEx"
   0x01F4  0x00083D38 "IoWriteTransferCount"
   0x01F5  0x0007EA41 "KdDebuggerEnabled"
   0x01F6  0x0007EA40 "KdDebuggerNotPresent"
   0x01F7  0x00020886 "KdDisableDebugger"
   0x01F8  0x000208FA "KdEnableDebugger"
   0x01F9  0x0007EA44 "KdEnteredDebugger"
   0x01FA  0x000209D8 "KdPollBreakIn"
   0x01FB  0x00020952 "KdPowerTransition"
   0x01FC  0x000CA690 "Ke386CallBios"
   0x01FD  0x00021486 "Ke386IoSetAccessProcess"
   0x01FE  0x000212C4 "Ke386QueryIoAccessMap"
   0x01FF  0x000213D6 "Ke386SetIoAccessMap"
   0x0200  0x00021518 "KeAcquireInterruptSpinLock"
   0x0201  0x000699A4 "KeAcquireSpinLockAtDpcLevel"
   0x0202  0x000CA32C "KeAddSystemServiceTable"
   0x0203  0x00020FE4 "KeAreApcsDisabled"
   0x0204  0x00021B32 "KeAttachProcess"
   0x0205  0x00022F0A "KeBugCheck"
   0x0206  0x00022F28 "KeBugCheckEx"
   0x0207  0x0002303C "KeCancelTimer"
   0x0208  0x0001B824 "KeCapturePersistentThreadState"
   0x0209  0x00023176 "KeClearEvent"
   0x020A  0x00023684 "KeConnectInterrupt"
   0x020B  0x0007EA54 "KeDcacheFlushCount"
   0x020C  0x0002387A "KeDelayExecutionThread"
   0x020D  0x00022098 "KeDeregisterBugCheckCallback"
   0x020E  0x00022222 "KeDeregisterBugCheckReasonCallback"
   0x020F  0x0002160C "KeDetachProcess"
   0x0210  0x000235D8 "KeDisconnectInterrupt"
   0x0211  0x00021032 "KeEnterCriticalRegion"
   0x0212  0x00022054 "KeEnterKernelDebugger"
   0x0213  0x001CB808 "KeFindConfigurationEntry"
   0x0214  0x001CB73A "KeFindConfigurationNextEntry"
   0x0215  0x000242C4 "KeFlushEntireTb"
   0x0216  0x000CA9C6 "KeFlushQueuedDpcs"
   0x0217  0x0006DF44 "KeGetCurrentThread"
   0x0218  0x0006DF4C "KeGetPreviousMode"
   0x0219  0x00020FFE "KeGetRecommendedSharedDataAlignment"
   0x021A  0x00024C7C "KeI386AbiosCall"
   0x021B  0x00024D10 "KeI386AllocateGdtSelectors"
   0x021C  0x0002528C "KeI386Call16BitCStyleFunction"
   0x021D  0x000250E8 "KeI386Call16BitFunction"
   0x021E  0x00024DE8 "KeI386FlatToGdtSelector"
   0x021F  0x00024A8C "KeI386GetLid"
   0x0220  0x0007EA84 "KeI386MachineType"
   0x0221  0x00024D82 "KeI386ReleaseGdtSelectors"
   0x0222  0x00024C00 "KeI386ReleaseLid"
   0x0223  0x00172C82 "KeI386SetGdtSelector"
   0x0224  0x0007EA58 "KeIcacheFlushCount"
   0x0225  0x0002539E "KeInitializeApc"
   0x0226  0x0002559C "KeInitializeDeviceQueue"
   0x0227  0x000246D8 "KeInitializeDpc"
   0x0228  0x000231B8 "KeInitializeEvent"
   0x0229  0x00023384 "KeInitializeInterrupt"
   0x022A  0x000257F8 "KeInitializeMutant"
   0x022B  0x00025868 "KeInitializeMutex"
   0x022C  0x00025A22 "KeInitializeQueue"
   0x022D  0x00025EDE "KeInitializeSemaphore"
   0x022E  0x00069980 "KeInitializeSpinLock"
   0x022F  0x0002313C "KeInitializeTimer"
   0x0230  0x00023006 "KeInitializeTimerEx"
   0x0231  0x00025622 "KeInsertByKeyDeviceQueue"
   0x0232  0x000255D0 "KeInsertDeviceQueue"
   0x0233  0x00025E96 "KeInsertHeadQueue"
   0x0234  0x00025E62 "KeInsertQueue"
   0x0235  0x0002548A "KeInsertQueueApc"
   0x0236  0x000247B0 "KeInsertQueueDpc"
   0x0237  0x00020FCA "KeIsAttachedProcess"
   0x0238  0x0006DF5C "KeIsExecutingDpc"
   0x0239  0x00021044 "KeLeaveCriticalRegion"
   0x023A  0x0007EA5C "KeLoaderBlock"
   0x023B  0x0007EA60 "KeNumberProcessors"
   0x023C  0x0006E29C "KeProfileInterrupt"
   0x023D  0x0006E2A4 "KeProfileInterruptWithSource"
   0x023E  0x000231E2 "KePulseEvent"
   0x023F  0x000CA416 "KeQueryActiveProcessors"
   0x0240  0x00020E74 "KeQueryInterruptTime"
   0x0241  0x000260AE "KeQueryPriorityThread"
   0x0242  0x000260C4 "KeQueryRuntimeThread"
   0x0243  0x00020E92 "KeQuerySystemTime"
   0x0244  0x00020EDA "KeQueryTickCount"
   0x0245  0x00020F22 "KeQueryTimeIncrement"
   0x0246  0x00026BFE "KeRaiseUserException"
   0x0247  0x00025ECA "KeReadStateEvent"
   0x0248  0x00025ECA "KeReadStateMutant"
   0x0249  0x00025ECA "KeReadStateMutex"
   0x024A  0x00025ECA "KeReadStateQueue"
   0x024B  0x00025ECA "KeReadStateSemaphore"
   0x024C  0x00022F4C "KeReadStateTimer"
   0x024D  0x000220EE "KeRegisterBugCheckCallback"
   0x024E  0x00022278 "KeRegisterBugCheckReasonCallback"
   0x024F  0x00021542 "KeReleaseInterruptSpinLock"
   0x0250  0x0002589C "KeReleaseMutant"
   0x0251  0x00025968 "KeReleaseMutex"
   0x0252  0x00025F0A "KeReleaseSemaphore"
   0x0253  0x000699D4 "KeReleaseSpinLockFromDpcLevel"
   0x0254  0x000256D6 "KeRemoveByKeyDeviceQueue"
   0x0255  0x00025742 "KeRemoveByKeyDeviceQueueIfBusy"
   0x0256  0x0002568C "KeRemoveDeviceQueue"
   0x0257  0x000257B2 "KeRemoveEntryDeviceQueue"
   0x0258  0x00025A6C "KeRemoveQueue"
   0x0259  0x000248F4 "KeRemoveQueueDpc"
   0x025A  0x000CA3A2 "KeRemoveSystemServiceTable"
   0x025B  0x0002318C "KeResetEvent"
   0x025C  0x00027DFA "KeRestoreFloatingPointState"
   0x025D  0x0002616A "KeRevertToUserAffinityThread"
   0x025E  0x00025986 "KeRundownQueue"
   0x025F  0x00027BF4 "KeSaveFloatingPointState"
   0x0260  0x000278B4 "KeSaveStateForHibernate"
   0x0261  0x00085700 "KeServiceDescriptorTable"
   0x0262  0x0002624C "KeSetAffinityThread"
   0x0263  0x000262E6 "KeSetBasePriorityThread"
   0x0264  0x00020F44 "KeSetDmaIoCoherency"
   0x0265  0x00023244 "KeSetEvent"
   0x0266  0x000232C8 "KeSetEventBoostPriority"
   0x0267  0x00026400 "KeSetIdealProcessorThread"
   0x0268  0x00024706 "KeSetImportanceDpc"
   0x0269  0x00026486 "KeSetKernelStackSwapEnable"
   0x026A  0x000264A8 "KeSetPriorityThread"
   0x026B  0x001CAF1C "KeSetProfileIrql"
   0x026C  0x0002627E "KeSetSystemAffinityThread"
   0x026D  0x0002471E "KeSetTargetProcessorDpc"
   0x026E  0x00020F8C "KeSetTimeIncrement"
   0x026F  0x00023154 "KeSetTimer"
   0x0270  0x00023078 "KeSetTimerEx"
   0x0271  0x00021C32 "KeStackAttachProcess"
   0x0272  0x0006E420 "KeSynchronizeExecution"
   0x0273  0x000269D0 "KeTerminateThread"
   0x0274  0x0007D000 "KeTickCount"
   0x0275  0x000216E4 "KeUnstackDetachProcess"
   0x0276  0x0006E140 "KeUpdateRunTime"
   0x0277  0x0006DFB4 "KeUpdateSystemTime"
   0x0278  0x000CACB2 "KeUserModeCallback"
   0x0279  0x00023B14 "KeWaitForMultipleObjects"
   0x027A  0x00023EB6 "KeWaitForMutexObject"
   0x027B  0x00023EB6 "KeWaitForSingleObject"
   0x027C  0x000860A0 "KiBugCheckData"
   0x027D  0x0006DD88 "KiCoprocessorError"
   0x027E  0x000287A0 "KiDeliverApc"
   0x027F  0x0006E9C0 "KiDispatchInterrupt"
   0x0280  0x0007EA78 "KiEnableTimerWatchdog"
   0x0281  0x00028B10 "KiIpiServiceRoutine"
   0x0282  0x0006E88A "KiUnexpectedInterrupt"
   0x0283  0x001017DC "LdrAccessResource"
   0x0284  0x00101B7C "LdrEnumResources"
   0x0285  0x00101DE8 "LdrFindResourceDirectory_U"
   0x0286  0x00101DC6 "LdrFindResource_U"
   0x0287  0x000860E8 "LpcPortObjectType"
   0x0288  0x000CC4F8 "LpcRequestPort"
   0x0289  0x000CCC5C "LpcRequestWaitReplyPort"
   0x028A  0x001415DC "LsaCallAuthenticationPackage"
   0x028B  0x0014167A "LsaDeregisterLogonProcess"
   0x028C  0x00141285 "LsaFreeReturnBuffer"
   0x028D  0x001414E7 "LsaLogonUser"
   0x028E  0x0014143F "LsaLookupAuthenticationPackage"
   0x028F  0x001412AC "LsaRegisterLogonProcess"
   0x0290  0x0008ABA4 "Mm64BitPhysicalAddress"
   0x0291  0x001750F0 "MmAddPhysicalMemory"
   0x0292  0x000CFC3C "MmAddVerifierThunks"
   0x0293  0x00175A86 "MmAdjustWorkingSetSize"
   0x0294  0x000300C8 "MmAdvanceMdl"
   0x0295  0x00031BA2 "MmAllocateContiguousMemory"
   0x0296  0x00031B1C "MmAllocateContiguousMemorySpecifyCache"
   0x0297  0x000D0C08 "MmAllocateMappingAddress"
   0x0298  0x000D156E "MmAllocateNonCachedMemory"
   0x0299  0x001760AA "MmAllocatePagesForMdl"
   0x029A  0x0002F82A "MmBuildMdlForNonPagedPool"
   0x029B  0x000345CA "MmCanFileBeTruncated"
   0x029C  0x00035164 "MmCommitSessionMappedView"
   0x029D  0x00030E22 "MmCreateMdl"
   0x029E  0x00035880 "MmCreateSection"
   0x029F  0x0003658A "MmDisableModifiedWriteOfSection"
   0x02A0  0x00037976 "MmFlushImageSection"
   0x02A1  0x00035112 "MmForceSectionClosed"
   0x02A2  0x00030B70 "MmFreeContiguousMemory"
   0x02A3  0x00030CBC "MmFreeContiguousMemorySpecifyCache"
   0x02A4  0x000D0CDC "MmFreeMappingAddress"
   0x02A5  0x000D16FC "MmFreeNonCachedMemory"
   0x02A6  0x00176874 "MmFreePagesFromMdl"
   0x02A7  0x00030CD2 "MmGetPhysicalAddress"
   0x02A8  0x00174170 "MmGetPhysicalMemoryRanges"
   0x02A9  0x000D71BC "MmGetSystemRoutineAddress"
   0x02AA  0x00030D80 "MmGetVirtualForPhysical"
   0x02AB  0x0003A09E "MmGrowKernelStack"
   0x02AC  0x0008B13C "MmHighestUserAddress"
   0x02AD  0x0003C938 "MmIsAddressValid"
   0x02AE  0x0002DC20 "MmIsDriverVerifying"
   0x02AF  0x0003FF26 "MmIsNonPagedSystemAddressValid"
   0x02B0  0x00031910 "MmIsRecursiveIoFault"
   0x02B1  0x000403F6 "MmIsThisAnNtAsSystem"
   0x02B2  0x000CFE1C "MmIsVerifierEnabled"
   0x02B3  0x000D1460 "MmLockPagableDataSection"
   0x02B4  0x000D1460 "MmLockPagableImageSection"
   0x02B5  0x000D127E "MmLockPagableSectionByHandle"
   0x02B6  0x00030808 "MmMapIoSpace"
   0x02B7  0x0003240C "MmMapLockedPages"
   0x02B8  0x00032036 "MmMapLockedPagesSpecifyCache"
   0x02B9  0x0002FBDA "MmMapLockedPagesWithReservedMapping"
   0x02BA  0x00031930 "MmMapMemoryDumpMdl"
   0x02BB  0x00176994 "MmMapUserAddressesToPage"
   0x02BC  0x000D1212 "MmMapVideoDisplay"
   0x02BD  0x000DAF70 "MmMapViewInSessionSpace"
   0x02BE  0x000DAF4E "MmMapViewInSystemSpace"
   0x02BF  0x000DADC2 "MmMapViewOfSection"
   0x02C0  0x000CFB04 "MmMarkPhysicalMemoryAsBad"
   0x02C1  0x00173FF0 "MmMarkPhysicalMemoryAsGood"
   0x02C2  0x000D5884 "MmPageEntireDriver"
   0x02C3  0x000DB976 "MmPrefetchPages"
   0x02C4  0x00032860 "MmProbeAndLockPages"
   0x02C5  0x000D1752 "MmProbeAndLockProcessPages"
   0x02C6  0x00032F28 "MmProbeAndLockSelectedPages"
   0x02C7  0x00030306 "MmProtectMdlSystemAddress"
   0x02C8  0x000403EA "MmQuerySystemSize"
   0x02C9  0x000CFB22 "MmRemovePhysicalMemory"
   0x02CA  0x000D5912 "MmResetDriverPaging"
   0x02CB  0x0008AEA0 "MmSectionObjectType"
   0x02CC  0x000DAD8C "MmSecureVirtualMemory"
   0x02CD  0x00030E8E "MmSetAddressRangeModified"
   0x02CE  0x000D0F9C "MmSetBankedSection"
   0x02CF  0x00030DF8 "MmSizeOfMdl"
   0x02D0  0x0008B138 "MmSystemRangeStart"
   0x02D1  0x000426FC "MmTrimAllSystemPagableMemory"
   0x02D2  0x000317B6 "MmUnlockPagableImageSection"
   0x02D3  0x000324B4 "MmUnlockPages"
   0x02D4  0x00030B1C "MmUnmapIoSpace"
   0x02D5  0x0003242E "MmUnmapLockedPages"
   0x02D6  0x0002FF48 "MmUnmapReservedMapping"
   0x02D7  0x000D1232 "MmUnmapVideoDisplay"
   0x02D8  0x000DAFCC "MmUnmapViewInSessionSpace"
   0x02D9  0x000DAFB0 "MmUnmapViewInSystemSpace"
   0x02DA  0x000DBDF8 "MmUnmapViewOfSection"
   0x02DB  0x000DADAA "MmUnsecureVirtualMemory"
   0x02DC  0x0008B134 "MmUserProbeAddress"
   0x02DD  0x001A54F8 "NlsAnsiCodePage"
   0x02DE  0x001A811C "NlsLeadByteInfo"
   0x02DF  0x001A5510 "NlsMbCodePageTag"
   0x02E0  0x001A5728 "NlsMbOemCodePageTag"
   0x02E1  0x001A54FC "NlsOemCodePage"
   0x02E2  0x001A8120 "NlsOemLeadByteInfo"
   0x02E3  0x0013E3AE "NtAddAtom"
   0x02E4  0x00114B3E "NtAdjustPrivilegesToken"
   0x02E5  0x0013E9D4 "NtAllocateLocallyUniqueId"
   0x02E6  0x0013DFF0 "NtAllocateUuids"
   0x02E7  0x000D1A9E "NtAllocateVirtualMemory"
   0x02E8  0x000760E8 "NtBuildNumber"
   0x02E9  0x000E54F8 "NtClose"
   0x02EA  0x000CD5B4 "NtConnectPort"
   0x02EB  0x0013760E "NtCreateEvent"
   0x02EC  0x000A2084 "NtCreateFile"
   0x02ED  0x000D43AE "NtCreateSection"
   0x02EE  0x0013E864 "NtDeleteAtom"
   0x02EF  0x0009FC2C "NtDeleteFile"
   0x02F0  0x000A224A "NtDeviceIoControlFile"
   0x02F1  0x000E6FD0 "NtDuplicateObject"
   0x02F2  0x00115D94 "NtDuplicateToken"
   0x02F3  0x0013E618 "NtFindAtom"
   0x02F4  0x000DBF7E "NtFreeVirtualMemory"
   0x02F5  0x000A227E "NtFsControlFile"
   0x02F6  0x000837EC "NtGlobalFlag"
   0x02F7  0x000A22B2 "NtLockFile"
   0x02F8  0x000E729E "NtMakePermanentObject"
   0x02F9  0x000DB006 "NtMapViewOfSection"
   0x02FA  0x000A2ECA "NtNotifyChangeDirectoryFile"
   0x02FB  0x000A3182 "NtOpenFile"
   0x02FC  0x000F4408 "NtOpenProcess"
   0x02FD  0x0011672E "NtOpenProcessToken"
   0x02FE  0x00116392 "NtOpenProcessTokenEx"
   0x02FF  0x000F4694 "NtOpenThread"
   0x0300  0x0011674C "NtOpenThreadToken"
   0x0301  0x00116502 "NtOpenThreadTokenEx"
   0x0302  0x000A2E64 "NtQueryDirectoryFile"
   0x0303  0x000A31B2 "NtQueryEaFile"
   0x0304  0x0013E88C "NtQueryInformationAtom"
   0x0305  0x000A3A1E "NtQueryInformationFile"
   0x0306  0x000F5F5C "NtQueryInformationProcess"
   0x0307  0x000F4B8A "NtQueryInformationThread"
   0x0308  0x0011682C "NtQueryInformationToken"
   0x0309  0x000A4800 "NtQueryQuotaInformationFile"
   0x030A  0x000E9062 "NtQuerySecurityObject"
   0x030B  0x0013A098 "NtQuerySystemInformation"
   0x030C  0x000A4CEA "NtQueryVolumeInformationFile"
   0x030D  0x000A548A "NtReadFile"
   0x030E  0x000CBA2E "NtRequestPort"
   0x030F  0x000CBD5A "NtRequestWaitReplyPort"
   0x0310  0x000A36C6 "NtSetEaFile"
   0x0311  0x00137A60 "NtSetEvent"
   0x0312  0x000A4010 "NtSetInformationFile"
   0x0313  0x000F6E52 "NtSetInformationProcess"
   0x0314  0x000F50D6 "NtSetInformationThread"
   0x0315  0x000A47DE "NtSetQuotaInformationFile"
   0x0316  0x000E95F6 "NtSetSecurityObject"
   0x0317  0x000A50F4 "NtSetVolumeInformationFile"
   0x0318  0x0013B650 "NtShutdownSystem"
   0x0319  0x0005E108 "NtTraceEvent"
   0x031A  0x000A2656 "NtUnlockFile"
   0x031B  0x00124224 "NtVdmControl"
   0x031C  0x000E96C2 "NtWaitForSingleObject"
   0x031D  0x000A5EF2 "NtWriteFile"
   0x031E  0x000E8F2C "ObAssignSecurity"
   0x031F  0x000E93BE "ObCheckCreateObjectAccess"
   0x0320  0x000E9164 "ObCheckObjectAccess"
   0x0321  0x000E54DC "ObCloseHandle"
   0x0322  0x000EA37C "ObCreateObject"
   0x0323  0x000EA5B6 "ObCreateObjectType"
   0x0324  0x0004F6F0 "ObDereferenceObject"
   0x0325  0x000EB724 "ObDereferenceSecurityDescriptor"
   0x0326  0x000EBBA6 "ObFindHandleForObject"
   0x0327  0x000E94B4 "ObGetObjectSecurity"
   0x0328  0x000EBFA2 "ObInsertObject"
   0x0329  0x0004F934 "ObIsDosDeviceLocallyMapped"
   0x032A  0x000EB470 "ObLogSecurityDescriptor"
   0x032B  0x000E551E "ObMakeTemporaryObject"
   0x032C  0x000E48F2 "ObOpenObjectByName"
   0x032D  0x000E4C78 "ObOpenObjectByPointer"
   0x032E  0x000ED9B8 "ObQueryNameString"
   0x032F  0x000ED666 "ObQueryObjectAuditingByHandle"
   0x0330  0x000E449E "ObReferenceObjectByHandle"
   0x0331  0x000E4D5A "ObReferenceObjectByName"
   0x0332  0x0004F432 "ObReferenceObjectByPointer"
   0x0333  0x000EB3DE "ObReferenceSecurityDescriptor"
   0x0334  0x000E8EA8 "ObReleaseObjectSecurity"
   0x0335  0x000ED75A "ObSetHandleAttributes"
   0x0336  0x000E94D2 "ObSetSecurityDescriptorInfo"
   0x0337  0x000E901A "ObSetSecurityObjectByPointer"
   0x0338  0x00104DA8 "PfxFindPrefix"
   0x0339  0x0010469C "PfxInitialize"
   0x033A  0x00104CC4 "PfxInsertPrefix"
   0x033B  0x001046BA "PfxRemovePrefix"
   0x033C  0x0004FE90 "PoCallDriver"
   0x033D  0x000501A6 "PoCancelDeviceNotify"
   0x033E  0x000EEFEE "PoQueueShutdownWorkItem"
   0x033F  0x00050A56 "PoRegisterDeviceForIdleDetection"
   0x0340  0x00050790 "PoRegisterDeviceNotify"
   0x0341  0x00050CCA "PoRegisterSystemState"
   0x0342  0x0005006C "PoRequestPowerIrp"
   0x0343  0x000EEFB8 "PoRequestShutdownEvent"
   0x0344  0x0017AC2E "PoSetHiberRange"
   0x0345  0x00050F54 "PoSetPowerState"
   0x0346  0x00050C98 "PoSetSystemState"
   0x0347  0x000F0142 "PoShutdownBugCheck"
   0x0348  0x0004FB9E "PoStartNextPowerIrp"
   0x0349  0x00050D34 "PoUnregisterSystemState"
   0x034A  0x0013EAB4 "ProbeForRead"
   0x034B  0x0013EA56 "ProbeForWrite"
   0x034C  0x000F871E "PsAssignImpersonationToken"
   0x034D  0x00053FF8 "PsChargePoolQuota"
   0x034E  0x00053DCE "PsChargeProcessNonPagedPoolQuota"
   0x034F  0x00053E96 "PsChargeProcessPagedPoolQuota"
   0x0350  0x00053CE2 "PsChargeProcessPoolQuota"
   0x0351  0x000FA1CE "PsCreateSystemProcess"
   0x0352  0x000FA106 "PsCreateSystemThread"
   0x0353  0x000F7CD6 "PsDereferenceImpersonationToken"
   0x0354  0x001008F4 "PsDereferencePrimaryToken"
   0x0355  0x000F837A "PsDisableImpersonation"
   0x0356  0x000F595C "PsEstablishWin32Callouts"
   0x0357  0x000FA2F2 "PsGetContextThread"
   0x0358  0x000542E2 "PsGetCurrentProcess"
   0x0359  0x0005401E "PsGetCurrentProcessId"
   0x035A  0x000542F2 "PsGetCurrentProcessSessionId"
   0x035B  0x00054306 "PsGetCurrentThread"
   0x035C  0x00054030 "PsGetCurrentThreadId"
   0x035D  0x00054334 "PsGetCurrentThreadPreviousMode"
   0x035E  0x00054312 "PsGetCurrentThreadStackBase"
   0x035F  0x00054324 "PsGetCurrentThreadStackLimit"
   0x0360  0x000540AE "PsGetJobLock"
   0x0361  0x000540C2 "PsGetJobSessionId"
   0x0362  0x000540DA "PsGetJobUIRestrictionsClass"
   0x0363  0x000540F2 "PsGetProcessCreateTimeQuadPart"
   0x0364  0x0005410A "PsGetProcessDebugPort"
   0x0365  0x000FA78A "PsGetProcessExitProcessCalled"
   0x0366  0x00054122 "PsGetProcessExitStatus"
   0x0367  0x000FAF42 "PsGetProcessExitTime"
   0x0368  0x0005413A "PsGetProcessId"
   0x0369  0x00054152 "PsGetProcessImageFileName"
   0x036A  0x00054168 "PsGetProcessInheritedFromUniqueProcessId"
   0x036B  0x00054180 "PsGetProcessJob"
   0x036C  0x000541C0 "PsGetProcessPeb"
   0x036D  0x000541D8 "PsGetProcessPriorityClass"
   0x036E  0x000541A8 "PsGetProcessSectionBaseAddress"
   0x036F  0x000FA844 "PsGetProcessSecurityPort"
   0x0370  0x00054198 "PsGetProcessSessionId"
   0x0371  0x00054208 "PsGetProcessWin32Process"
   0x0372  0x000541F0 "PsGetProcessWin32WindowStation"
   0x0373  0x00054238 "PsGetThreadFreezeCount"
   0x0374  0x00054250 "PsGetThreadHardErrorsAreDisabled"
   0x0375  0x00054220 "PsGetThreadId"
   0x0376  0x000194F6 "PsGetThreadProcess"
   0x0377  0x0005426E "PsGetThreadProcessId"
   0x0378  0x000FA7A6 "PsGetThreadSessionId"
   0x0379  0x00054286 "PsGetThreadTeb"
   0x037A  0x00054208 "PsGetThreadWin32Thread"
   0x037B  0x00054042 "PsGetVersion"
   0x037C  0x000F80B8 "PsImpersonateClient"
   0x037D  0x0008C9B4 "PsInitialSystemProcess"
   0x037E  0x000FA76E "PsIsProcessBeingDebugged"
   0x037F  0x0005429A "PsIsSystemThread"
   0x0380  0x000FA878 "PsIsThreadImpersonating"
   0x0381  0x000543D6 "PsIsThreadTerminating"
   0x0382  0x0008C940 "PsJobType"
   0x0383  0x000FC0EA "PsLookupProcessByProcessId"
   0x0384  0x000FC02E "PsLookupProcessThreadByCid"
   0x0385  0x000FC176 "PsLookupThreadByThreadId"
   0x0386  0x0008C9B8 "PsProcessType"
   0x0387  0x000F7E0C "PsReferenceImpersonationToken"
   0x0388  0x000F7D76 "PsReferencePrimaryToken"
   0x0389  0x000F8D5C "PsRemoveCreateThreadNotifyRoutine"
   0x038A  0x000F9008 "PsRemoveLoadImageNotifyRoutine"
   0x038B  0x000F8452 "PsRestoreImpersonation"
   0x038C  0x000538CE "PsReturnPoolQuota"
   0x038D  0x000539DC "PsReturnProcessNonPagedPoolQuota"
   0x038E  0x00053AC2 "PsReturnProcessPagedPoolQuota"
   0x038F  0x000F8516 "PsRevertThreadToSelf"
   0x0390  0x000F8486 "PsRevertToSelf"
   0x0391  0x000FA55E "PsSetContextThread"
   0x0392  0x000F8C28 "PsSetCreateProcessNotifyRoutine"
   0x0393  0x000F8CF8 "PsSetCreateThreadNotifyRoutine"
   0x0394  0x000FA7C2 "PsSetJobUIRestrictionsClass"
   0x0395  0x000FA9A6 "PsSetLegoNotifyRoutine"
   0x0396  0x000F8F9C "PsSetLoadImageNotifyRoutine"
   0x0397  0x000F59FC "PsSetProcessPriorityByClass"
   0x0398  0x000FA7DC "PsSetProcessPriorityClass"
   0x0399  0x000FA85C "PsSetProcessSecurityPort"
   0x039A  0x000FA8F0 "PsSetProcessWin32Process"
   0x039B  0x000FA7F6 "PsSetProcessWindowStation"
   0x039C  0x000542B6 "PsSetThreadHardErrorsAreDisabled"
   0x039D  0x000FA810 "PsSetThreadWin32Thread"
   0x039E  0x000FBC36 "PsTerminateSystemThread"
   0x039F  0x0008C9BC "PsThreadType"
   0x03A0  0x00054900 "READ_REGISTER_BUFFER_UCHAR"
   0x03A1  0x00054938 "READ_REGISTER_BUFFER_ULONG"
   0x03A2  0x0005491C "READ_REGISTER_BUFFER_USHORT"
   0x03A3  0x000548DC "READ_REGISTER_UCHAR"
   0x03A4  0x000548F4 "READ_REGISTER_ULONG"
   0x03A5  0x000548E8 "READ_REGISTER_USHORT"
   0x03A6  0x00105452 "RtlAbsoluteToSelfRelativeSD"
   0x03A7  0x00105B08 "RtlAddAccessAllowedAce"
   0x03A8  0x00105B2C "RtlAddAccessAllowedAceEx"
   0x03A9  0x001058CA "RtlAddAce"
   0x03AA  0x001060AA "RtlAddAtomToAtomTable"
   0x03AB  0x0010732C "RtlAddRange"
   0x03AC  0x00109CC4 "RtlAllocateHeap"
   0x03AD  0x0010A7CE "RtlAnsiCharToUnicodeChar"
   0x03AE  0x0010AAEE "RtlAnsiStringToUnicodeSize"
   0x03AF  0x0010B2AA "RtlAnsiStringToUnicodeString"
   0x03B0  0x0010BCD6 "RtlAppendAsciizToString"
   0x03B1  0x0010BD32 "RtlAppendStringToString"
   0x03B2  0x00054AD2 "RtlAppendUnicodeStringToString"
   0x03B3  0x00054A5A "RtlAppendUnicodeToString"
   0x03B4  0x0010C6D8 "RtlAreAllAccessesGranted"
   0x03B5  0x0010C6F4 "RtlAreAnyAccessesGranted"
   0x03B6  0x0005576C "RtlAreBitsClear"
   0x03B7  0x000557F0 "RtlAreBitsSet"
   0x03B8  0x00055E28 "RtlAssert"
   0x03B9  0x0006FE80 "RtlCaptureContext"
   0x03BA  0x00055F7C "RtlCaptureStackBackTrace"
   0x03BB  0x0010F074 "RtlCharToInteger"
   0x03BC  0x00110802 "RtlCheckRegistryKey"
   0x03BD  0x00054DCE "RtlClearAllBits"
   0x03BE  0x00054D58 "RtlClearBit"
   0x03BF  0x0005533C "RtlClearBits"
   0x03C0  0x0006F1D0 "RtlCompareMemory"
   0x03C1  0x0006F220 "RtlCompareMemoryUlong"
   0x03C2  0x0010BB3A "RtlCompareString"
   0x03C3  0x0010AB16 "RtlCompareUnicodeString"
   0x03C4  0x0017DEE2 "RtlCompressBuffer"
   0x03C5  0x00110EF8 "RtlCompressChunks"
   0x03C6  0x0006F90C "RtlConvertLongToLargeInteger"
   0x03C7  0x0010C006 "RtlConvertSidToUnicodeString"
   0x03C8  0x0006F914 "RtlConvertUlongToLargeInteger"
   0x03C9  0x0010C202 "RtlCopyLuid"
   0x03CA  0x00106B5C "RtlCopyRangeList"
   0x03CB  0x0010BEE4 "RtlCopySid"
   0x03CC  0x00054BA8 "RtlCopyString"
   0x03CD  0x000549F4 "RtlCopyUnicodeString"
   0x03CE  0x0010547C "RtlCreateAcl"
   0x03CF  0x00105D34 "RtlCreateAtomTable"
   0x03D0  0x00108994 "RtlCreateHeap"
   0x03D1  0x00110830 "RtlCreateRegistryKey"
   0x03D2  0x0010C250 "RtlCreateSecurityDescriptor"
   0x03D3  0x001113F2 "RtlCreateSystemVolumeInformationFolder"
   0x03D4  0x0010AE94 "RtlCreateUnicodeString"
   0x03D5  0x00103864 "RtlCustomCPToUnicodeN"
   0x03D6  0x00110C06 "RtlDecompressBuffer"
   0x03D7  0x00110D34 "RtlDecompressChunks"
   0x03D8  0x00110C52 "RtlDecompressFragment"
   0x03D9  0x0005643E "RtlDelete"
   0x03DA  0x001059AC "RtlDeleteAce"
   0x03DB  0x0010632E "RtlDeleteAtomFromAtomTable"
   0x03DC  0x000567A8 "RtlDeleteElementGenericTable"
   0x03DD  0x00056DC4 "RtlDeleteElementGenericTableAvl"
   0x03DE  0x000564BC "RtlDeleteNoSplay"
   0x03DF  0x001074E0 "RtlDeleteOwnersRanges"
   0x03E0  0x001073AE "RtlDeleteRange"
   0x03E1  0x00110864 "RtlDeleteRegistryValue"
   0x03E2  0x00110CA4 "RtlDescribeChunk"
   0x03E3  0x00105DC6 "RtlDestroyAtomTable"
   0x03E4  0x001081B4 "RtlDestroyHeap"
   0x03E5  0x0010A8F2 "RtlDowncaseUnicodeString"
   0x03E6  0x00105E76 "RtlEmptyAtomTable"
   0x03E7  0x0006F6EC "RtlEnlargedIntegerMultiply"
   0x03E8  0x0006F704 "RtlEnlargedUnsignedDivide"
   0x03E9  0x0006F6F8 "RtlEnlargedUnsignedMultiply"
   0x03EA  0x00056842 "RtlEnumerateGenericTable"
   0x03EB  0x00056E4E "RtlEnumerateGenericTableAvl"
   0x03EC  0x00056E74 "RtlEnumerateGenericTableLikeADirectory"
   0x03ED  0x000566E2 "RtlEnumerateGenericTableWithoutSplaying"
   0x03EE  0x00056CEA "RtlEnumerateGenericTableWithoutSplayingAvl"
   0x03EF  0x0010C1D8 "RtlEqualLuid"
   0x03F0  0x0010CB86 "RtlEqualSid"
   0x03F1  0x00054BF2 "RtlEqualString"
   0x03F2  0x0010AC62 "RtlEqualUnicodeString"
   0x03F3  0x0006F810 "RtlExtendedIntegerMultiply"
   0x03F4  0x0006F724 "RtlExtendedLargeIntegerDivide"
   0x03F5  0x0006F780 "RtlExtendedMagicDivide"
   0x03F6  0x0006F250 "RtlFillMemory"
   0x03F7  0x0006F2C0 "RtlFillMemoryUlong"
   0x03F8  0x00054E28 "RtlFindClearBits"
   0x03F9  0x00055B9C "RtlFindClearBitsAndSet"
   0x03FA  0x00055444 "RtlFindClearRuns"
   0x03FB  0x00055C04 "RtlFindFirstRunClear"
   0x03FC  0x00055976 "RtlFindLastBackwardRunClear"
   0x03FD  0x00055AF2 "RtlFindLeastSignificantBit"
   0x03FE  0x0005568C "RtlFindLongestRunClear"
   0x03FF  0x001115B2 "RtlFindMessage"
   0x0400  0x00055A46 "RtlFindMostSignificantBit"
   0x0401  0x0005587C "RtlFindNextForwardRunClear"
   0x0402  0x00106CB0 "RtlFindRange"
   0x0403  0x0005508A "RtlFindSetBits"
   0x0404  0x00055BD0 "RtlFindSetBitsAndClear"
   0x0405  0x00104F88 "RtlFindUnicodePrefix"
   0x0406  0x0010FB50 "RtlFormatCurrentUserKeyPath"
   0x0407  0x0010AA82 "RtlFreeAnsiString"
   0x0408  0x0010A598 "RtlFreeHeap"
   0x0409  0x0010AAA8 "RtlFreeOemString"
   0x040A  0x0010690E "RtlFreeRangeList"
   0x040B  0x0010AA82 "RtlFreeUnicodeString"
   0x040C  0x001117F4 "RtlGUIDFromString"
   0x040D  0x00111C56 "RtlGenerate8dot3Name"
   0x040E  0x001056F2 "RtlGetAce"
   0x040F  0x00056F68 "RtlGetCallersAddress"
   0x0410  0x0017DE96 "RtlGetCompressionWorkSpaceSize"
   0x0411  0x0010C47C "RtlGetDaclSecurityDescriptor"
   0x0412  0x00104674 "RtlGetDefaultCodePage"
   0x0413  0x00056644 "RtlGetElementGenericTable"
   0x0414  0x00056C00 "RtlGetElementGenericTableAvl"
   0x0415  0x00106954 "RtlGetFirstRange"
   0x0416  0x0010C696 "RtlGetGroupSecurityDescriptor"
   0x0417  0x00106A0E "RtlGetNextRange"
   0x0418  0x0010FB24 "RtlGetNtGlobalFlags"
   0x0419  0x0010C5FC "RtlGetOwnerSecurityDescriptor"
   0x041A  0x0010C546 "RtlGetSaclSecurityDescriptor"
   0x041B  0x001121A6 "RtlGetSetBootStatusData"
   0x041C  0x0011229E "RtlGetVersion"
   0x041D  0x0010AEEA "RtlHashUnicodeString"
   0x041E  0x000576A8 "RtlImageDirectoryEntryToData"
   0x041F  0x00057516 "RtlImageNtHeader"
   0x0420  0x00057744 "RtlInitAnsiString"
   0x0421  0x00104468 "RtlInitCodePageTable"
   0x0422  0x0005770C "RtlInitString"
   0x0423  0x0005777C "RtlInitUnicodeString"
   0x0424  0x0010EF44 "RtlInitializeBitMap"
   0x0425  0x0005653C "RtlInitializeGenericTable"
   0x0426  0x00056AD2 "RtlInitializeGenericTableAvl"
   0x0427  0x0010670A "RtlInitializeRangeList"
   0x0428  0x0010BE68 "RtlInitializeSid"
   0x0429  0x00104902 "RtlInitializeUnicodePrefix"
   0x042A  0x00056776 "RtlInsertElementGenericTable"
   0x042B  0x00056D90 "RtlInsertElementGenericTableAvl"
   0x042C  0x0005657A "RtlInsertElementGenericTableFull"
   0x042D  0x00056B08 "RtlInsertElementGenericTableFullAvl"
   0x042E  0x00104E48 "RtlInsertUnicodePrefix"
   0x042F  0x0010F848 "RtlInt64ToUnicodeString"
   0x0430  0x0010EF60 "RtlIntegerToChar"
   0x0431  0x0010F322 "RtlIntegerToUnicode"
   0x0432  0x0010F448 "RtlIntegerToUnicodeString"
   0x0433  0x00107588 "RtlInvertRangeList"
   0x0434  0x00057AD2 "RtlIpv4AddressToStringA"
   0x0435  0x00057B12 "RtlIpv4AddressToStringExA"
   0x0436  0x00057F64 "RtlIpv4AddressToStringExW"
   0x0437  0x00057F1C "RtlIpv4AddressToStringW"
   0x0438  0x00058556 "RtlIpv4StringToAddressA"
   0x0439  0x00058764 "RtlIpv4StringToAddressExA"
   0x043A  0x0005906E "RtlIpv4StringToAddressExW"
   0x043B  0x00058E60 "RtlIpv4StringToAddressW"
   0x043C  0x0005780E "RtlIpv6AddressToStringA"
   0x043D  0x000579F6 "RtlIpv6AddressToStringExA"
   0x043E  0x00057E2E "RtlIpv6AddressToStringExW"
   0x043F  0x00057C3A "RtlIpv6AddressToStringW"
   0x0440  0x00057FF8 "RtlIpv6StringToAddressA"
   0x0441  0x00058318 "RtlIpv6StringToAddressExA"
   0x0442  0x00058BFC "RtlIpv6StringToAddressExW"
   0x0443  0x000588FE "RtlIpv6StringToAddressW"
   0x0444  0x0005662C "RtlIsGenericTableEmpty"
   0x0445  0x00056BE6 "RtlIsGenericTableEmptyAvl"
   0x0446  0x00111AD4 "RtlIsNameLegalDOS8Dot3"
   0x0447  0x0010702C "RtlIsRangeAvailable"
   0x0448  0x0011187A "RtlIsValidOemCharacter"
   0x0449  0x0006F6D8 "RtlLargeIntegerAdd"
   0x044A  0x0006F8B8 "RtlLargeIntegerArithmeticShift"
   0x044B  0x000591EC "RtlLargeIntegerDivide"
   0x044C  0x0006F8E4 "RtlLargeIntegerNegate"
   0x044D  0x0006F868 "RtlLargeIntegerShiftLeft"
   0x044E  0x0006F890 "RtlLargeIntegerShiftRight"
   0x044F  0x0006F8F8 "RtlLargeIntegerSubtract"
   0x0450  0x0010BE50 "RtlLengthRequiredSid"
   0x0451  0x0010C360 "RtlLengthSecurityDescriptor"
   0x0452  0x0010BEC8 "RtlLengthSid"
   0x0453  0x00112082 "RtlLockBootStatusData"
   0x0454  0x00106246 "RtlLookupAtomInAtomTable"
   0x0455  0x00056892 "RtlLookupElementGenericTable"
   0x0456  0x00056F44 "RtlLookupElementGenericTableAvl"
   0x0457  0x00056800 "RtlLookupElementGenericTableFull"
   0x0458  0x00056E1C "RtlLookupElementGenericTableFullAvl"
   0x0459  0x0010C70C "RtlMapGenericMask"
   0x045A  0x00054C6C "RtlMapSecurityErrorToNtStatus"
   0x045B  0x0010724C "RtlMergeRangeLists"
   0x045C  0x0006F310 "RtlMoveMemory"
   0x045D  0x00101E0A "RtlMultiByteToUnicodeN"
   0x045E  0x001022E6 "RtlMultiByteToUnicodeSize"
   0x045F  0x00104A44 "RtlNextUnicodePrefix"
   0x0460  0x00112328 "RtlNtStatusToDosError"
   0x0461  0x0005926C "RtlNtStatusToDosErrorNoTeb"
   0x0462  0x000566CE "RtlNumberGenericTableElements"
   0x0463  0x00056CD6 "RtlNumberGenericTableElementsAvl"
   0x0464  0x000556C4 "RtlNumberOfClearBits"
   0x0465  0x00055714 "RtlNumberOfSetBits"
   0x0466  0x0010B702 "RtlOemStringToCountedUnicodeString"
   0x0467  0x0010AAEE "RtlOemStringToUnicodeSize"
   0x0468  0x0010B4D6 "RtlOemStringToUnicodeString"
   0x0469  0x001020F8 "RtlOemToUnicodeN"
   0x046A  0x0010640E "RtlPinAtomInAtomTable"
   0x046B  0x0010BBCE "RtlPrefixString"
   0x046C  0x0010AD7A "RtlPrefixUnicodeString"
   0x046D  0x001064B4 "RtlQueryAtomInAtomTable"
   0x046E  0x001103CC "RtlQueryRegistryValues"
   0x046F  0x001108FE "RtlQueryTimeZoneInformation"
   0x0470  0x00059350 "RtlRaiseException"
   0x0471  0x0011236E "RtlRandom"
   0x0472  0x0005940E "RtlRandomEx"
   0x0473  0x0005631A "RtlRealPredecessor"
   0x0474  0x000562DC "RtlRealSuccessor"
   0x0475  0x00104924 "RtlRemoveUnicodePrefix"
   0x0476  0x00110CEC "RtlReserveChunk"
   0x0477  0x000598D0 "RtlSecondsSince1970ToTime"
   0x0478  0x00059852 "RtlSecondsSince1980ToTime"
   0x0479  0x00105158 "RtlSelfRelativeToAbsoluteSD2"
   0x047A  0x001051D8 "RtlSelfRelativeToAbsoluteSD"
   0x047B  0x00054E00 "RtlSetAllBits"
   0x047C  0x00054D80 "RtlSetBit"
   0x047D  0x000553C0 "RtlSetBits"
   0x047E  0x0010C414 "RtlSetDaclSecurityDescriptor"
   0x047F  0x0010C642 "RtlSetGroupSecurityDescriptor"
   0x0480  0x0010C5A8 "RtlSetOwnerSecurityDescriptor"
   0x0481  0x0010C4DE "RtlSetSaclSecurityDescriptor"
   0x0482  0x00110A26 "RtlSetTimeZoneInformation"
   0x0483  0x0010826C "RtlSizeHeap"
   0x0484  0x00056128 "RtlSplay"
   0x0485  0x00111644 "RtlStringFromGUID"
   0x0486  0x0010BEB6 "RtlSubAuthorityCountSid"
   0x0487  0x0010BE9E "RtlSubAuthoritySid"
   0x0488  0x000562B8 "RtlSubtreePredecessor"
   0x0489  0x00056294 "RtlSubtreeSuccessor"
   0x048A  0x00054DA6 "RtlTestBit"
   0x048B  0x0005966A "RtlTimeFieldsToTime"
   0x048C  0x001123C0 "RtlTimeToElapsedTimeFields"
   0x048D  0x0005988A "RtlTimeToSecondsSince1970"
   0x048E  0x0005980C "RtlTimeToSecondsSince1980"
   0x048F  0x0005956A "RtlTimeToTimeFields"
   0x0490  0x00059EF0 "RtlTraceDatabaseAdd"
   0x0491  0x00059B36 "RtlTraceDatabaseCreate"
   0x0492  0x00059C56 "RtlTraceDatabaseDestroy"
   0x0493  0x00059AAE "RtlTraceDatabaseEnumerate"
   0x0494  0x00059D00 "RtlTraceDatabaseFind"
   0x0495  0x00059ED0 "RtlTraceDatabaseLock"
   0x0496  0x00059EE0 "RtlTraceDatabaseUnlock"
   0x0497  0x00059CB6 "RtlTraceDatabaseValidate"
   0x0498  0x0010AAC8 "RtlUnicodeStringToAnsiSize"
   0x0499  0x0010B35C "RtlUnicodeStringToAnsiString"
   0x049A  0x0010B7BE "RtlUnicodeStringToCountedOemString"
   0x049B  0x0010F19C "RtlUnicodeStringToInteger"
   0x049C  0x0010AAC8 "RtlUnicodeStringToOemSize"
   0x049D  0x0010B588 "RtlUnicodeStringToOemString"
   0x049E  0x00103A48 "RtlUnicodeToCustomCPN"
   0x049F  0x0010238A "RtlUnicodeToMultiByteN"
   0x04A0  0x0010233A "RtlUnicodeToMultiByteSize"
   0x04A1  0x00102D78 "RtlUnicodeToOemN"
   0x04A2  0x00112160 "RtlUnlockBootStatusData"
   0x04A3  0x0005A102 "RtlUnwind"
   0x04A4  0x0010A9C6 "RtlUpcaseUnicodeChar"
   0x04A5  0x0010A81E "RtlUpcaseUnicodeString"
   0x04A6  0x0010B426 "RtlUpcaseUnicodeStringToAnsiString"
   0x04A7  0x0010B892 "RtlUpcaseUnicodeStringToCountedOemString"
   0x04A8  0x0010B638 "RtlUpcaseUnicodeStringToOemString"
   0x04A9  0x00103BF8 "RtlUpcaseUnicodeToCustomCPN"
   0x04AA  0x0010252C "RtlUpcaseUnicodeToMultiByteN"
   0x04AB  0x00102F2A "RtlUpcaseUnicodeToOemN"
   0x04AC  0x0010BA1C "RtlUpperChar"
   0x04AD  0x0010BC8C "RtlUpperString"
   0x04AE  0x0010CA04 "RtlValidRelativeSecurityDescriptor"
   0x04AF  0x0010C27E "RtlValidSecurityDescriptor"
   0x04B0  0x0010BD86 "RtlValidSid"
   0x04B1  0x00057154 "RtlVerifyVersionInfo"
   0x04B2  0x0001CE86 "RtlVolumeDeviceToDosName"
   0x04B3  0x00055E4A "RtlWalkFrameChain"
   0x04B4  0x001107A6 "RtlWriteRegistryValue"
   0x04B5  0x00107624 "RtlZeroHeap"
   0x04B6  0x0006F2E0 "RtlZeroMemory"
   0x04B7  0x0010AAEE "RtlxAnsiStringToUnicodeSize"
   0x04B8  0x0010AAEE "RtlxOemStringToUnicodeSize"
   0x04B9  0x0010AAC8 "RtlxUnicodeStringToAnsiSize"
   0x04BA  0x0010AAC8 "RtlxUnicodeStringToOemSize"
   0x04BB  0x00119990 "SeAccessCheck"
   0x04BC  0x00119CDE "SeAppendPrivileges"
   0x04BD  0x00119DF6 "SeAssignSecurity"
   0x04BE  0x00119E4E "SeAssignSecurityEx"
   0x04BF  0x0011AD38 "SeAuditHardLinkCreation"
   0x04C0  0x0011C58C "SeAuditingFileEvents"
   0x04C1  0x0011C5DA "SeAuditingFileEventsWithContext"
   0x04C2  0x0011C50C "SeAuditingFileOrGlobalEvents"
   0x04C3  0x0011C61C "SeAuditingHardLinkEvents"
   0x04C4  0x0011C680 "SeAuditingHardLinkEventsWithContext"
   0x04C5  0x0011E07A "SeCaptureSecurityDescriptor"
   0x04C6  0x0011F6EC "SeCaptureSubjectContext"
   0x04C7  0x0011BFE0 "SeCloseObjectAuditAlarm"
   0x04C8  0x00119DC4 "SeCreateAccessState"
   0x04C9  0x0011FA28 "SeCreateClientSecurity"
   0x04CA  0x0011FA82 "SeCreateClientSecurityFromSubjectContext"
   0x04CB  0x00119E8C "SeDeassignSecurity"
   0x04CC  0x00119B86 "SeDeleteAccessState"
   0x04CD  0x0011C026 "SeDeleteObjectAuditAlarm"
   0x04CE  0x001A5D74 "SeExports"
   0x04CF  0x00116198 "SeFilterToken"
   0x04D0  0x000FAA1E "SeFreePrivileges"
   0x04D1  0x0011FB1C "SeImpersonateClient"
   0x04D2  0x0011FADC "SeImpersonateClientEx"
   0x04D3  0x0011F714 "SeLockSubjectContext"
   0x04D4  0x001200C8 "SeMarkLogonSessionForTerminationNotification"
   0x04D5  0x0011DA8C "SeOpenObjectAuditAlarm"
   0x04D6  0x0011DD52 "SeOpenObjectForDeleteAuditAlarm"
   0x04D7  0x00120AB6 "SePrivilegeCheck"
   0x04D8  0x0011BEE8 "SePrivilegeObjectAuditAlarm"
   0x04D9  0x001A5C6C "SePublicDefaultDacl"
   0x04DA  0x0011676E "SeQueryAuthenticationIdToken"
   0x04DB  0x00117D1E "SeQueryInformationToken"
   0x04DC  0x00120E6C "SeQuerySecurityDescriptorInfo"
   0x04DD  0x001167D0 "SeQuerySessionIdToken"
   0x04DE  0x0011FF74 "SeRegisterLogonSessionTerminatedRoutine"
   0x04DF  0x0011EE7C "SeReleaseSecurityDescriptor"
   0x04E0  0x0011F66A "SeReleaseSubjectContext"
   0x04E1  0x00119BD2 "SeSetAccessStateGenericMapping"
   0x04E2  0x00120DFA "SeSetSecurityDescriptorInfo"
   0x04E3  0x00120E32 "SeSetSecurityDescriptorInfoEx"
   0x04E4  0x00120CC0 "SeSinglePrivilegeCheck"
   0x04E5  0x001A5C7C "SeSystemDefaultDacl"
   0x04E6  0x0012121C "SeTokenImpersonationLevel"
   0x04E7  0x001211E0 "SeTokenIsAdmin"
   0x04E8  0x001211FE "SeTokenIsRestricted"
   0x04E9  0x00121F7C "SeTokenIsWriteRestricted"
   0x04EA  0x001A5F04 "SeTokenObjectType"
   0x04EB  0x001211C8 "SeTokenType"
   0x04EC  0x0011F75E "SeUnlockSubjectContext"
   0x04ED  0x00120006 "SeUnregisterLogonSessionTerminatedRoutine"
   0x04EE  0x0011F4D4 "SeValidSecurityDescriptor"
   0x04EF  0x00057116 "VerSetConditionMask"
   0x04F0  0x0005C246 "VfFailDeviceNode"
   0x04F1  0x0005C2BE "VfFailDriver"
   0x04F2  0x0005C282 "VfFailSystemBIOS"
   0x04F3  0x0005C1F0 "VfIsVerificationEnabled"
   0x04F4  0x00054990 "WRITE_REGISTER_BUFFER_UCHAR"
   0x04F5  0x000549D0 "WRITE_REGISTER_BUFFER_ULONG"
   0x04F6  0x000549B0 "WRITE_REGISTER_BUFFER_USHORT"
   0x04F7  0x00054954 "WRITE_REGISTER_UCHAR"
   0x04F8  0x0005497C "WRITE_REGISTER_ULONG"
   0x04F9  0x00054968 "WRITE_REGISTER_USHORT"
   0x04FA  0x0012762E "WmiFlushTrace"
   0x04FB  0x00126D80 "WmiQueryTrace"
   0x04FC  0x001276B6 "WmiQueryTraceInformation"
   0x04FD  0x00127B36 "WmiStartTrace"
   0x04FE  0x00126DA6 "WmiStopTrace"
   0x04FF  0x0005E0E4 "WmiTraceMessage"
   0x0500  0x0005DE26 "WmiTraceMessageVa"
   0x0501  0x00126FBE "WmiUpdateTrace"
   0x0502  0x00061942 "XIPDispatch"
   0x0503  0x00028D64 "ZwAccessCheckAndAuditAlarm"
   0x0504  0x00028DF0 "ZwAddBootEntry"
   0x0505  0x00028E18 "ZwAdjustPrivilegesToken"
   0x0506  0x00028E40 "ZwAlertThread"
   0x0507  0x00028E90 "ZwAllocateVirtualMemory"
   0x0508  0x00028EB8 "ZwAssignProcessToJobObject"
   0x0509  0x00028EF4 "ZwCancelIoFile"
   0x050A  0x00028F08 "ZwCancelTimer"
   0x050B  0x00028F1C "ZwClearEvent"
   0x050C  0x00028F30 "ZwClose"
   0x050D  0x00028F44 "ZwCloseObjectAuditAlarm"
   0x050E  0x00028FA8 "ZwConnectPort"
   0x050F  0x00028FE4 "ZwCreateDirectoryObject"
   0x0510  0x00028FF8 "ZwCreateEvent"
   0x0511  0x00029020 "ZwCreateFile"
   0x0512  0x00029048 "ZwCreateJobObject"
   0x0513  0x00029070 "ZwCreateKey"
   0x0514  0x00029124 "ZwCreateSection"
   0x0515  0x0002914C "ZwCreateSymbolicLinkObject"
   0x0516  0x00029174 "ZwCreateTimer"
   0x0517  0x00029200 "ZwDeleteBootEntry"
   0x0518  0x00029214 "ZwDeleteFile"
   0x0519  0x00029228 "ZwDeleteKey"
   0x051A  0x00029250 "ZwDeleteValueKey"
   0x051B  0x00029264 "ZwDeviceIoControlFile"
   0x051C  0x00029278 "ZwDisplayString"
   0x051D  0x0002928C "ZwDuplicateObject"
   0x051E  0x000292A0 "ZwDuplicateToken"
   0x051F  0x000292B4 "ZwEnumerateBootEntries"
   0x0520  0x000292C8 "ZwEnumerateKey"
   0x0521  0x000292F0 "ZwEnumerateValueKey"
   0x0522  0x00029354 "ZwFlushInstructionCache"
   0x0523  0x00029368 "ZwFlushKey"
   0x0524  0x0002937C "ZwFlushVirtualMemory"
   0x0525  0x000293B8 "ZwFreeVirtualMemory"
   0x0526  0x000293CC "ZwFsControlFile"
   0x0527  0x00029480 "ZwInitiatePowerAction"
   0x0528  0x00029494 "ZwIsProcessInJob"
   0x0529  0x000294D0 "ZwLoadDriver"
   0x052A  0x000294E4 "ZwLoadKey"
   0x052B  0x00029570 "ZwMakeTemporaryObject"
   0x052C  0x000295AC "ZwMapViewOfSection"
   0x052D  0x000295E8 "ZwNotifyChangeKey"
   0x052E  0x00029610 "ZwOpenDirectoryObject"
   0x052F  0x00029624 "ZwOpenEvent"
   0x0530  0x0002964C "ZwOpenFile"
   0x0531  0x00029674 "ZwOpenJobObject"
   0x0532  0x00029688 "ZwOpenKey"
   0x0533  0x000296C4 "ZwOpenProcess"
   0x0534  0x000296D8 "ZwOpenProcessToken"
   0x0535  0x000296EC "ZwOpenProcessTokenEx"
   0x0536  0x00029700 "ZwOpenSection"
   0x0537  0x00029728 "ZwOpenSymbolicLinkObject"
   0x0538  0x0002973C "ZwOpenThread"
   0x0539  0x00029750 "ZwOpenThreadToken"
   0x053A  0x00029764 "ZwOpenThreadTokenEx"
   0x053B  0x00029778 "ZwOpenTimer"
   0x053C  0x000297A0 "ZwPowerInformation"
   0x053D  0x00029804 "ZwPulseEvent"
   0x053E  0x0002982C "ZwQueryBootEntryOrder"
   0x053F  0x00029840 "ZwQueryBootOptions"
   0x0540  0x00029868 "ZwQueryDefaultLocale"
   0x0541  0x0002987C "ZwQueryDefaultUILanguage"
   0x0542  0x00029890 "ZwQueryDirectoryFile"
   0x0543  0x000298A4 "ZwQueryDirectoryObject"
   0x0544  0x000298B8 "ZwQueryEaFile"
   0x0545  0x000298E0 "ZwQueryFullAttributesFile"
   0x0546  0x00029908 "ZwQueryInformationFile"
   0x0547  0x0002991C "ZwQueryInformationJobObject"
   0x0548  0x00029944 "ZwQueryInformationProcess"
   0x0549  0x00029958 "ZwQueryInformationThread"
   0x054A  0x0002996C "ZwQueryInformationToken"
   0x054B  0x00029980 "ZwQueryInstallUILanguage"
   0x054C  0x000299BC "ZwQueryKey"
   0x054D  0x000299F8 "ZwQueryObject"
   0x054E  0x00029A48 "ZwQuerySection"
   0x054F  0x00029A5C "ZwQuerySecurityObject"
   0x0550  0x00029A84 "ZwQuerySymbolicLinkObject"
   0x0551  0x00029AC0 "ZwQuerySystemInformation"
   0x0552  0x00029B10 "ZwQueryValueKey"
   0x0553  0x00029B38 "ZwQueryVolumeInformationFile"
   0x0554  0x00029B88 "ZwReadFile"
   0x0555  0x00029C50 "ZwReplaceKey"
   0x0556  0x00029CDC "ZwRequestWaitReplyPort"
   0x0557  0x00029D04 "ZwResetEvent"
   0x0558  0x00029D2C "ZwRestoreKey"
   0x0559  0x00029D68 "ZwSaveKey"
   0x055A  0x00029D7C "ZwSaveKeyEx"
   0x055B  0x00029DB8 "ZwSetBootEntryOrder"
   0x055C  0x00029DCC "ZwSetBootOptions"
   0x055D  0x00029E1C "ZwSetDefaultLocale"
   0x055E  0x00029E30 "ZwSetDefaultUILanguage"
   0x055F  0x00029E44 "ZwSetEaFile"
   0x0560  0x00029E58 "ZwSetEvent"
   0x0561  0x00029EBC "ZwSetInformationFile"
   0x0562  0x00029ED0 "ZwSetInformationJobObject"
   0x0563  0x00029EF8 "ZwSetInformationObject"
   0x0564  0x00029F0C "ZwSetInformationProcess"
   0x0565  0x00029F20 "ZwSetInformationThread"
   0x0566  0x00029FC0 "ZwSetSecurityObject"
   0x0567  0x00029FFC "ZwSetSystemInformation"
   0x0568  0x0002A024 "ZwSetSystemTime"
   0x0569  0x0002A04C "ZwSetTimer"
   0x056A  0x0002A088 "ZwSetValueKey"
   0x056B  0x0002A09C "ZwSetVolumeInformationFile"
   0x056C  0x0002A13C "ZwTerminateJobObject"
   0x056D  0x0002A150 "ZwTerminateProcess"
   0x056E  0x0002A1A0 "ZwTranslateFilePath"
   0x056F  0x0002A1B4 "ZwUnloadDriver"
   0x0570  0x0002A1C8 "ZwUnloadKey"
   0x0571  0x0002A218 "ZwUnmapViewOfSection"
   0x0572  0x0002A254 "ZwWaitForMultipleObjects"
   0x0573  0x0002A268 "ZwWaitForSingleObject"
   0x0574  0x0002A2A4 "ZwWriteFile"
   0x0575  0x0002A2F4 "ZwYieldExecution"
   0x0576  0x000621B0 "_CIcos"
   0x0577  0x00062270 "_CIsin"
   0x0578  0x00062330 "_CIsqrt"
   0x0579  0x000624BB "_abnormal_termination"
   0x057A  0x00062510 "_alldiv"
   0x057B  0x000625C0 "_alldvrm"
   0x057C  0x000626B0 "_allmul"
   0x057D  0x000626EC "_alloca_probe"
   0x057E  0x00062730 "_allrem"
   0x057F  0x000627F0 "_allshl"
   0x0580  0x00062820 "_allshr"
   0x0581  0x00062850 "_aulldiv"
   0x0582  0x000628C0 "_aulldvrm"
   0x0583  0x00062960 "_aullrem"
   0x0584  0x000629E0 "_aullshr"
   0x0585  0x00062A08 "_except_handler2"
   0x0586  0x00062AC0 "_except_handler3"
   0x0587  0x000623F0 "_global_unwind2"
   0x0588  0x00062C0F "_itoa"
   0x0589  0x00062C95 "_itow"
   0x058A  0x0006244B "_local_unwind2"
   0x058B  0x00061846 "_purecall"
   0x058C  0x00062CC4 "_snprintf"
   0x058D  0x00062D22 "_snwprintf"
   0x058E  0x00062D99 "_stricmp"
   0x058F  0x00062DA9 "_strlwr"
   0x0590  0x00062DD6 "_strnicmp"
   0x0591  0x00062DF0 "_strnset"
   0x0592  0x00062E20 "_strrev"
   0x0593  0x00062E60 "_strset"
   0x0594  0x00062E85 "_strupr"
   0x0595  0x00062EB2 "_vsnprintf"
   0x0596  0x00062F0F "_vsnwprintf"
   0x0597  0x00062F85 "_wcsicmp"
   0x0598  0x00062FD9 "_wcslwr"
   0x0599  0x0006300F "_wcsnicmp"
   0x059A  0x0006306F "_wcsnset"
   0x059B  0x0006309F "_wcsrev"
   0x059C  0x000630DB "_wcsupr"
   0x059D  0x00063196 "atoi"
   0x059E  0x00063111 "atol"
   0x059F  0x000632F9 "isdigit"
   0x05A0  0x000632C6 "islower"
   0x05A1  0x00063397 "isprint"
   0x05A2  0x00063364 "isspace"
   0x05A3  0x00063293 "isupper"
   0x05A4  0x0006332C "isxdigit"
   0x05A5  0x000633E6 "mbstowcs"
   0x05A6  0x0006345C "mbtowc"
   0x05A7  0x000634B0 "memchr"
   0x05A8  0x00063560 "memcpy"
   0x05A9  0x000638A0 "memmove"
   0x05AA  0x00063BE0 "memset"
   0x05AB  0x00063CD0 "qsort"
   0x05AC  0x00063F50 "rand"
   0x05AD  0x00063F78 "sprintf"
   0x05AE  0x00063F3C "srand"
   0x05AF  0x00063FF0 "strcat"
   0x05B0  0x000640F0 "strchr"
   0x05B1  0x000641C0 "strcmp"
   0x05B2  0x00063FE0 "strcpy"
   0x05B3  0x00064250 "strlen"
   0x05B4  0x000642D0 "strncat"
   0x05B5  0x00064400 "strncmp"
   0x05B6  0x00064440 "strncpy"
   0x05B7  0x00064550 "strrchr"
   0x05B8  0x00064580 "strspn"
   0x05B9  0x000645D0 "strstr"
   0x05BA  0x00064655 "swprintf"
   0x05BB  0x000646CB "tolower"
   0x05BC  0x00064706 "toupper"
   0x05BD  0x0006475C "towlower"
   0x05BE  0x0006477F "towupper"
   0x05BF  0x000548B8 "vDbgPrintEx"
   0x05C0  0x000545F6 "vDbgPrintExWithPrefix"
   0x05C1  0x00064793 "vsprintf"
   0x05C2  0x000647F1 "wcscat"
   0x05C3  0x00064848 "wcschr"
   0x05C4  0x00064873 "wcscmp"
   0x05C5  0x00064824 "wcscpy"
   0x05C6  0x000648AF "wcscspn"
   0x05C7  0x000648FA "wcslen"
   0x05C8  0x00064919 "wcsncat"
   0x05C9  0x0006495D "wcsncmp"
   0x05CA  0x00064999 "wcsncpy"
   0x05CB  0x000649DE "wcsrchr"
   0x05CC  0x00064A17 "wcsspn"
   0x05CD  0x00064A65 "wcsstr"
   0x05CE  0x00064ACB "wcstombs"
   0x05CF  0x00064B4B "wctomb"