+_NtCurrentTeb@0
+;RtlIpv4StringToAddressW
+;?Allocate@CBufferAllocator@@UAEPAXK@Z
+;CsrCaptureMessageMultiUnicodeStringsInPlace
+;CsrGetProcessId
+DbgPrintEx
+DbgPrintReturnControlC
+DbgQueryDebugFilterState@8
+DbgSetDebugFilterState@12
+;DbgUiConvertStateChangeStructure
+DbgUiDebugActiveProcess@4
+;DbgUiGetThreadDebugObject
+;DbgUiSetThreadDebugObject
+DbgUiStopDebugging@4
+;LdrAccessOutOfProcessResource
+;LdrAddRefDll
+LdrAlternateResourcesEnabled@0
+;LdrCreateOutOfProcessImage
+;LdrDestroyOutOfProcessImage
+;LdrEnumerateLoadedModules
+;LdrFindCreateProcessManifest
+;LdrFindResourceEx_U
+LdrFlushAlternateResourceModules@0
+;LdrGetDllHandleEx
+;LdrInitShimEngineDynamic
+;LdrLoadAlternateResourceModule
+LdrLockLoaderLock@12
+;LdrSetAppCompatDllRedirectionCallback
+;LdrSetDllManifestProber
+;LdrUnloadAlternateResourceModule
+LdrUnlockLoaderLock@8
+;NPXEMULATORTABLE
+NtAccessCheckByType@44
+NtAccessCheckByTypeAndAuditAlarm@64
+NtAccessCheckByTypeResultList@44
+NtAccessCheckByTypeResultListAndAuditAlarm@64
+NtAccessCheckByTypeResultListAndAuditAlarmByHandle@68
+;NtAddBootEntry
+NtAllocateUserPhysicalPages@12
+NtAreMappedFilesTheSame@8
+;NtAssignProcessToJobObject
+NtCancelDeviceWakeupRequest@4
+NtCompactKeys@8
+;NtCompareTokens
+NtCompressKey@4
+;NtCreateDebugObject
+NtCreateJobObject@12
+NtCreateJobSet@12
+NtCreateKeyedEvent@16
+;NtCreateProcessEx
+;NtDebugActiveProcess
+;NtDebugContinue
+;NtDeleteBootEntry
+;NtEnumerateBootEntries
+;NtEnumerateSystemEnvironmentValuesEx
+NtFilterToken@24
+NtFreeUserPhysicalPages@12
+NtGetDevicePowerState@8
+NtGetWriteWatch@28
+NtImpersonateAnonymousToken@4
+NtInitiatePowerAction@16
+NtIsProcessInJob@8
+NtIsSystemResumeAutomatic@0
+NtLockProductActivationKeys@8
+NtLockRegistryKey@4
+NtMakePermanentObject@4
+NtMapUserPhysicalPages@12
+NtMapUserPhysicalPagesScatter@12
+;NtModifyBootEntry
+NtNotifyChangeMultipleKeys@48
+NtOpenJobObject@12
+NtOpenKeyedEvent@12
+NtOpenProcessTokenEx@16
+NtOpenThreadTokenEx@20
+NtPowerInformation@20
+;NtQueryBootEntryOrder
+;NtQueryBootOptions
+;NtQueryDebugFilterState
+NtQueryDefaultUILanguage@4
+NtQueryInformationJobObject@20
+NtQueryInstallUILanguage@4
+NtQueryOpenSubKeys@8
+NtQueryPortInformationProcess@0
+;NtQuerySystemEnvironmentValueEx
+NtReleaseKeyedEvent@16
+;NtRemoveProcessDebug
+NtRenameKey@8
+NtReplyWaitReceivePortEx@20
+NtRequestDeviceWakeup@4
+NtRequestWakeupLatency@4
+NtResetWriteWatch@12
+NtResumeProcess@4
+NtSaveKeyEx@12
+NtSaveMergedKeys@12
+NtSecureConnectPort@36
+;NtSetBootEntryOrder
+;NtSetBootOptions
+;NtSetDebugFilterState
+NtSetDefaultUILanguage@4
+;NtSetEventBoostPriority
+NtSetHighWaitLowThread@0
+;NtSetInformationDebugObject
+NtSetInformationJobObject@16
+NtSetLowWaitHighThread@0
+NtSetQuotaInformationFile@16
+;NtSetSystemEnvironmentValueEx
+NtSetThreadExecutionState@8
+NtSetUuidSeed@4
+NtSuspendProcess@4
+NtTerminateJobObject@8
+;NtTraceEvent
+;NtTranslateFilePath
+NtUnloadKeyEx@8
+;NtWaitForDebugEvent
+NtWaitForKeyedEvent@16
+;RtlActivateActivationContext
+;RtlActivateActivationContextEx
+;RtlActivateActivationContextUnsafeFast
+RtlAddAccessAllowedAceEx@20
+;RtlAddAccessAllowedObjectAce
+RtlAddAccessDeniedAceEx@20
+;RtlAddAccessDeniedObjectAce
+;RtlAddAuditAccessAceEx
+;RtlAddAuditAccessObjectAce
+RtlAddRange@36
+RtlAddRefActivationContext@4
+;RtlAddRefMemoryStream
+;RtlAddVectoredExceptionHandler
+;RtlAddressInSectionTable
+;RtlAppendPathElement
+;RtlApplicationVerifierStop
+;RtlAssert2
+;RtlCancelTimer
+RtlCaptureContext@4
+;RtlCaptureStackContext
+;RtlCheckForOrphanedCriticalSections
+;RtlCheckProcessParameters
+;RtlCloneMemoryStream
+;RtlCommitMemoryStream
+;RtlCompareVariants
+RtlComputeCrc32@12
+;RtlComputeImportTableHash
+;RtlComputePrivatizedDllName_U
+;RtlConvertPropertyToVariant
+;RtlConvertToAutoInheritSecurityObject
+;RtlConvertVariantToProperty
+;RtlCopyMemoryStreamTo
+;RtlCopyOutOfProcessMemoryStreamTo
+RtlCopyRangeList@8
+;RtlCreateActivationContext
+;RtlCreateBootStatusDataFile
+;RtlCreateSystemVolumeInformationFolder
+RtlCreateTimer@28
+RtlCreateTimerQueue@4
+RtlDeactivateActivationContext@8
+;RtlDeactivateActivationContextUnsafeFast
+;RtlDebugPrintTimes
+;RtlDefaultNpAcl
+;RtlDeleteElementGenericTableAvl
+RtlDeleteOwnersRanges@8
+RtlDeleteRange@24
+RtlDeleteTimer@12
+RtlDeleteTimerQueue@4
+RtlDeleteTimerQueueEx@8
+RtlDeregisterWait@4
+RtlDeregisterWaitEx@8
+RtlDllShutdownInProgress@0
+;RtlDnsHostNameToComputerName
+;RtlDosApplyFileIsolationRedirection_Ustr
+;RtlDosSearchPath_Ustr
+RtlDowncaseUnicodeChar@4
+RtlDuplicateUnicodeString@12
+;RtlEnableEarlyCriticalSectionEventCreation
+;RtlEnumerateGenericTableAvl
+;RtlEnumerateGenericTableLikeADirectory
+;RtlEnumerateGenericTableWithoutSplayingAvl
+;RtlFinalReleaseOutOfProcessMemoryStream
+;RtlFindActivationContextSectionGuid
+;RtlFindActivationContextSectionString
+RtlFindCharInUnicodeString@16
+RtlFindClearRuns@16
+RtlFindLastBackwardRunClear@12
+RtlFindLeastSignificantBit@8
+RtlFindMostSignificantBit@8
+RtlFindNextForwardRunClear@12
+RtlFindRange@48
+;RtlFirstEntrySList
+;RtlFlushSecureMemoryCache
+RtlFreeOemString@4
+RtlFreeRangeList@4
+;RtlFreeThreadActivationContextStack
+RtlGUIDFromString@8
+RtlGetActiveActivationContext@4
+RtlGetCurrentPeb@0
+;RtlGetElementGenericTableAvl
+RtlGetFirstRange@12
+;RtlGetFrame
+RtlGetLastNtStatus@0
+RtlGetLastWin32Error@0
+;RtlGetLengthWithoutLastFullDosOrNtPathElement
+;RtlGetLengthWithoutTrailingPathSeperators
+RtlGetNativeSystemInformation@16
+RtlGetNextRange@12
+;RtlGetSecurityDescriptorRMControl
+;RtlGetSetBootStatusData
+RtlGetVersion@4
+RtlHashUnicodeString@16
+;RtlInitMemoryStream
+;RtlInitOutOfProcessMemoryStream
+RtlInitUnicodeStringEx@8
+RtlInitializeCriticalSectionAndSpinCount@8
+;RtlInitializeGenericTableAvl
+RtlInitializeRangeList@4
+RtlInitializeSListHead@4
+;RtlInsertElementGenericTableAvl
+RtlInt64ToUnicodeString@16
+RtlInterlockedFlushSList@4
+RtlInterlockedPopEntrySList@4
+RtlInterlockedPushEntrySList@8
+;RtlInterlockedPushListSList
+RtlInvertRangeList@8
+;RtlIpv4AddressToStringA
+;RtlIpv4AddressToStringW
+;RtlIpv4StringToAddressA
+;RtlIpv6AddressToStringA
+;RtlIpv6AddressToStringW
+;RtlIpv6StringToAddressA
+;RtlIpv6StringToAddressW
+;RtlIsActivationContextActive
+;RtlIsGenericTableEmptyAvl
+RtlIsRangeAvailable@40
+;RtlIsThreadWithinLoaderCallout
+;RtlLockBootStatusData
+;RtlLockMemoryStreamRegion
+RtlLogStackBackTrace@0
+;RtlLookupElementGenericTableAvl
+;RtlMapSecurityErrorToNtStatus
+RtlMergeRangeLists@16
+;RtlMultiAppendUnicodeStringBuffer
+;RtlNewSecurityObjectEx
+;RtlNewSecurityObjectWithMultipleInheritance
+;RtlNtPathNameToDosPathName
+RtlNtStatusToDosErrorNoTeb@4
+;RtlNumberGenericTableElementsAvl
+;RtlOnMappedStreamEvent
+;RtlPopFrame
+;RtlPushFrame
+RtlQueryDepthSList@4
+RtlQueryHeapInformation@20
+RtlQueryInformationActivationContext@28
+;RtlQueryInformationActiveActivationContext
+;RtlQueryInterfaceMemoryStream
+;RtlQueueApcWow64Thread
+RtlQueueWorkItem@12
+;RtlRandomEx
+;RtlReadMemoryStream
+;RtlReadOutOfProcessMemoryStream
+;RtlRegisterSecureMemoryCacheCallback
+RtlRegisterWait@24
+RtlReleaseActivationContext@4
+;RtlReleaseMemoryStream
+;RtlRemoveVectoredExceptionHandler
+RtlRestoreLastWin32Error@4
+;RtlRevertMemoryStream
+;RtlSeekMemoryStream
+;RtlSelfRelativeToAbsoluteSD2
+;RtlSetControlSecurityDescriptor
+RtlSetCriticalSectionSpinCount@4
+RtlSetHeapInformation@16
+RtlSetIoCompletionCallback@12
+RtlSetLastWin32Error@4
+RtlSetLastWin32ErrorAndNtStatusFromNtStatus@4
+;RtlSetMemoryStreamSize
+;RtlSetProcessIsCritical
+;RtlSetSecurityDescriptorRMControl
+;RtlSetSecurityObjectEx
+;RtlSetThreadIsCritical
+;RtlSetThreadPoolStartFunc
+;RtlSetTimer
+;RtlStatMemoryStream
+RtlStringFromGUID@8
+;RtlTraceDatabaseAdd
+;RtlTraceDatabaseCreate
+;RtlTraceDatabaseDestroy
+;RtlTraceDatabaseEnumerate
+;RtlTraceDatabaseFind
+;RtlTraceDatabaseLock
+;RtlTraceDatabaseUnlock
+;RtlTraceDatabaseValidate
+@RtlUlongByteSwap@4
+@RtlUlonglongByteSwap@8
+;RtlUnhandledExceptionFilter
+;RtlUnhandledExceptionFilter2
+;RtlUnlockBootStatusData
+;RtlUnlockMemoryStreamRegion
+RtlUpdateTimer@16
+@RtlUshortByteSwap@4
+RtlValidRelativeSecurityDescriptor@12
+;RtlValidateUnicodeString
+RtlVerifyVersionInfo@16
+RtlWalkFrameChain@12
+;RtlWriteMemoryStream
+RtlZombifyActivationContext@4
+;RtlpApplyLengthFunction
+;RtlpEnsureBufferSize
+;RtlpNotOwnerCriticalSection
+VerSetConditionMask@16
+ZwAccessCheckByType@44
+ZwAccessCheckByTypeAndAuditAlarm@64
+ZwAccessCheckByTypeResultList@44
+ZwAccessCheckByTypeResultListAndAuditAlarm@64
+ZwAccessCheckByTypeResultListAndAuditAlarmByHandle@68
+;ZwAddBootEntry
+ZwAllocateUserPhysicalPages@12
+ZwAreMappedFilesTheSame@8
+ZwAssignProcessToJobObject@8
+ZwCancelDeviceWakeupRequest@4
+ZwCompactKeys@8
+;ZwCompareTokens
+ZwCompressKey@4
+;ZwCreateDebugObject
+ZwCreateJobObject@12
+ZwCreateJobSet@12
+ZwCreateKeyedEvent@16
+;ZwCreateProcessEx
+ZwCreateWaitablePort@20
+;ZwDebugActiveProcess
+;ZwDebugContinue
+;ZwDeleteBootEntry
+;ZwEnumerateBootEntries
+;ZwEnumerateSystemEnvironmentValuesEx
+ZwFilterToken@24
+ZwFreeUserPhysicalPages@12
+ZwGetDevicePowerState@8
+ZwGetWriteWatch@28
+ZwImpersonateAnonymousToken@4
+ZwInitiatePowerAction@16
+ZwIsProcessInJob@8
+ZwIsSystemResumeAutomatic@0
+ZwLockProductActivationKeys@8
+ZwLockRegistryKey@4
+ZwMakePermanentObject@4
+ZwMapUserPhysicalPages@12
+ZwMapUserPhysicalPagesScatter@12
+;ZwModifyBootEntry
+ZwNotifyChangeMultipleKeys@48
+ZwOpenJobObject@12
+ZwOpenKeyedEvent@12
+ZwOpenProcessTokenEx@16
+ZwOpenThreadTokenEx@20
+ZwPowerInformation@20
+;ZwQueryBootEntryOrder
+;ZwQueryBootOptions
+;ZwQueryDebugFilterState
+ZwQueryDefaultUILanguage@4
+ZwQueryInformationJobObject@20
+ZwQueryInstallUILanguage@4
+ZwQueryOpenSubKeys@8
+ZwQueryPortInformationProcess@0
+ZwQueryQuotaInformationFile@36
+;ZwQuerySystemEnvironmentValueEx
+ZwReleaseKeyedEvent@16
+;ZwRemoveProcessDebug
+ZwRenameKey@8
+ZwReplyWaitReceivePortEx@20
+ZwRequestDeviceWakeup@4
+ZwRequestWakeupLatency@4
+ZwResetWriteWatch@12
+ZwResumeProcess@4
+ZwSaveKeyEx@12
+ZwSaveMergedKeys@12
+ZwSecureConnectPort@36
+;ZwSetBootEntryOrder
+;ZwSetBootOptions
+;ZwSetDebugFilterState
+ZwSetDefaultUILanguage@4
+;ZwSetEventBoostPriority
+ZwSetHighWaitLowThread@0
+;ZwSetInformationDebugObject
+ZwSetInformationJobObject@16
+ZwSetLowWaitHighThread@0
+ZwSetQuotaInformationFile@16
+;ZwSetSystemEnvironmentValueEx
+ZwSetThreadExecutionState@8
+ZwSetUuidSeed@4
+ZwSuspendProcess@4
+ZwTerminateJobObject@8
+;ZwTraceEvent
+;ZwTranslateFilePath
+ZwUnloadKeyEx@8
+;ZwWaitForDebugEvent
+ZwWaitForKeyedEvent@16
+;_CIcos
+;_CIlog
+_CIpow
+;_CIsin
+;_CIsqrt
+;__eCommonExceptions
+;__eEmulatorInit
+;__eF2XM1
+;__eFABS
+;__eFADD32
+;__eFADD64
+;__eFADDPreg
+;__eFADDreg
+;__eFADDtop
+;__eFCHS
+;__eFCOM
+;__eFCOM32
+;__eFCOM64
+;__eFCOMP
+;__eFCOMP32
+;__eFCOMP64
+;__eFCOMPP
+;__eFCOS
+;__eFDECSTP
+;__eFDIV32
+;__eFDIV64
+;__eFDIVPreg
+;__eFDIVR32
+;__eFDIVR64
+;__eFDIVRPreg
+;__eFDIVRreg
+;__eFDIVRtop
+;__eFDIVreg
+;__eFDIVtop
+;__eFFREE
+;__eFIADD16
+;__eFIADD32
+;__eFICOM16
+;__eFICOM32
+;__eFICOMP16
+;__eFICOMP32
+;__eFIDIV16
+;__eFIDIV32
+;__eFIDIVR16
+;__eFIDIVR32
+;__eFILD16
+;__eFILD32
+;__eFILD64
+;__eFIMUL16
+;__eFIMUL32
+;__eFINCSTP
+;__eFINIT
+;__eFIST16
+;__eFIST32
+;__eFISTP16
+;__eFISTP32
+;__eFISTP64
+;__eFISUB16
+;__eFISUB32
+;__eFISUBR16
+;__eFISUBR32
+;__eFLD1
+;__eFLD32
+;__eFLD64
+;__eFLD80
+;__eFLDCW
+;__eFLDENV
+;__eFLDL2E
+;__eFLDLN2
+;__eFLDPI
+;__eFLDZ
+;__eFMUL32
+;__eFMUL64
+;__eFMULPreg
+;__eFMULreg
+;__eFMULtop
+;__eFPATAN
+;__eFPREM
+;__eFPREM1
+;__eFPTAN
+;__eFRNDINT
+;__eFRSTOR
+;__eFSAVE
+;__eFSCALE
+;__eFSIN
+;__eFSQRT
+;__eFST
+;__eFST32
+;__eFST64
+;__eFSTCW
+;__eFSTENV
+;__eFSTP
+;__eFSTP32
+;__eFSTP64
+;__eFSTP80
+;__eFSTSW
+;__eFSUB32
+;__eFSUB64
+;__eFSUBPreg
+;__eFSUBR32
+;__eFSUBR64
+;__eFSUBRPreg
+;__eFSUBRreg
+;__eFSUBRtop
+;__eFSUBreg
+;__eFSUBtop
+;__eFTST
+;__eFUCOM
+;__eFUCOMP
+;__eFUCOMPP
+;__eFXAM
+;__eFXCH
+;__eFXTRACT
+;__eFYL2X
+;__eFYL2XP1
+;__eGetStatusWord
+;_alldvrm
+;_aulldvrm
+_lfind
+_ui64toa
+_ui64tow
+_vsnwprintf
+bsearch
+iswdigit
+iswlower
+iswxdigit
+vDbgPrintEx
+vDbgPrintExWithPrefix