          3    0          AcquireSRWLockExclusive (forwarded to NTDLL.RtlAcquireSRWLockExclusive)
          4    1          AcquireSRWLockShared (forwarded to NTDLL.RtlAcquireSRWLockShared)
          5    2 0001C691 ActivateActCtx
          6    3 00018086 AddAtomA
          7    4 0001BAD0 AddAtomW
          8    5 000A5CF6 AddConsoleAliasA
          9    6 000A5CB5 AddConsoleAliasW
         10    7 00088FED AddLocalAlternateComputerNameA
         11    8 00088F06 AddLocalAlternateComputerNameW
         12    9 00017FFA AddRefActCtx
         13    A 00051424 AddSIDToBoundaryDescriptor
         14    B 00091EFD AddSecureMemoryCacheCallback
         15    C          AddVectoredContinueHandler (forwarded to NTDLL.RtlAddVectoredContinueHandler)
         16    D          AddVectoredExceptionHandler (forwarded to NTDLL.RtlAddVectoredExceptionHandler)
         17    E 000ABB5A AdjustCalendarDate
         18    F 000A7121 AllocConsole
         19   10 0009F8C2 AllocateUserPhysicalPages
         20   11 0009F8F0 AllocateUserPhysicalPagesNuma
         21   12 0009F57B ApplicationRecoveryFinished
         22   13 0009F58B ApplicationRecoveryInProgress
         23   14 00052622 AreFileApisANSI
         24   15 000050C2 AssignProcessToJobObject
         25   16 000A703A AttachConsole
         26   17 000865E8 BackupRead
         27   18 00085521 BackupSeek
         28   19 00086C94 BackupWrite
         29   1A 000266E6 BaseCheckAppcompatCache
         30   1B 0001AFEE BaseCheckRunApp
         31   1C 0009F392 BaseCleanupAppcompatCacheSupport
         32   1D 0009F3B5 BaseDumpAppcompatCache
         33   1E 0009F3C5 BaseFlushAppcompatCache
         34   1F 00026CBB BaseGenerateAppCompatData
         35   20 00002DB1 BaseInitAppcompatCacheSupport
         36   21 000266B1 BaseIsAppcompatInfrastructureDisabled
         37   22 00052738 BaseQueryModuleData
          1   23 0004D0D7 BaseThreadInitThunk
         38   24 0001BA63 BaseUpdateAppcompatCache
         39   25 00026B82 BasepCheckBadapp
         40   26 0002724A BasepCheckWinSaferRestrictions
         41   27 00026A71 BasepFreeAppCompatData
         42   28 00086F47 Beep
         43   29 000A59FF BeginUpdateResourceA
         44   2A 000A59E2 BeginUpdateResourceW
         45   2B 0000247D BindIoCompletionCallback
         46   2C 0009E9C9 BuildCommDCBA
         47   2D 0009E99B BuildCommDCBAndTimeoutsA
         48   2E 0009E9FB BuildCommDCBAndTimeoutsW
         49   2F 0009EA55 BuildCommDCBW
         50   30 00017E5C CallNamedPipeA
         51   31 00017EB7 CallNamedPipeW
         52   32          CallbackMayRunLong (forwarded to NTDLL.TpCallbackMayRunLong)
         53   33 00095372 CancelDeviceWakeupRequest
         54   34 0000BAE4 CancelIo
         55   35 0004E4EF CancelIoEx
         56   36 0008D6D9 CancelSynchronousIo
         57   37          CancelThreadpoolIo (forwarded to NTDLL.TpCancelAsyncIoOperation)
         58   38 0009FAA2 CancelTimerQueueTimer
         59   39 00020420 CancelWaitableTimer
         60   3A 0000556B ChangeTimerQueueTimer
         61   3B 000065FD CheckElevation
         62   3C 00025150 CheckElevationEnabled
         63   3D 0009FBA1 CheckForReadOnlyResource
         64   3E 00095227 CheckNameLegalDOS8Dot3A
         65   3F 000950E1 CheckNameLegalDOS8Dot3W
         66   40 0004ED9D CheckRemoteDebuggerPresent
         67   41 0009A321 ClearCommBreak
         68   42 00098B5E ClearCommError
         69   43 00028E08 CloseConsoleHandle
         70   44 0004AE8D CloseHandle
         71   45 000508CB ClosePrivateNamespace
         72   46 000851AD CloseProfileUserMapping
         73   47          CloseThreadpool (forwarded to NTDLL.TpReleasePool)
         74   48          CloseThreadpoolCleanupGroup (forwarded to NTDLL.TpReleaseCleanupGroup)
         75   49          CloseThreadpoolCleanupGroupMembers (forwarded to NTDLL.TpReleaseCleanupGroupMembers)
         76   4A          CloseThreadpoolIo (forwarded to NTDLL.TpReleaseIoCompletion)
         77   4B          CloseThreadpoolTimer (forwarded to NTDLL.TpReleaseTimer)
         78   4C          CloseThreadpoolWait (forwarded to NTDLL.TpReleaseWait)
         79   4D          CloseThreadpoolWork (forwarded to NTDLL.TpReleaseWork)
         80   4E 00020483 CmdBatNotification
         81   4F 00099F29 CommConfigDialogA
         82   50 00099E15 CommConfigDialogW
         83   51 000AB65B CompareCalendarDates
         84   52 00027CC2 CompareFileTime
         85   53 000476CB CompareStringA
         86   54 000501D3 CompareStringEx
         87   55 00047C30 CompareStringOrdinal
         88   56 00049BEB CompareStringW
         89   57 00017C2E ConnectNamedPipe
         90   58 000A78D0 ConsoleMenuControl
         91   59 00089E52 ContinueDebugEvent
         92   5A 000AB595 ConvertCalDateTimeToSystemTime
         93   5B 0001AFBB ConvertDefaultLocale
         94   5C 000051EF ConvertFiberToThread
         95   5D 000AB62D ConvertNLSDayOfWeekToWin32DayOfWeek
         96   5E 0004F928 ConvertSystemTimeToCalDateTime
         97   5F 0000E94B ConvertThreadToFiber
         98   60 0000E963 ConvertThreadToFiberEx
         99   61 00052433 CopyFileA
        100   62 000919F9 CopyFileExA
        101   63 00010211 CopyFileExW
        102   64 00091A52 CopyFileTransactedA
        103   65 0009194E CopyFileTransactedW
        104   66 00010299 CopyFileW
        105   67 000894E3 CopyLZFile
        106   68 000079BB CreateActCtxA
        107   69 0001C721 CreateActCtxW
        108   6A 000964FB CreateBoundaryDescriptorA
        109   6B 000513F2 CreateBoundaryDescriptorW
        110   6C 000A83CA CreateConsoleScreenBuffer
        111   6D 000570F4 CreateDirectoryA
        112   6E 0008ADF9 CreateDirectoryExA
        113   6F 00089EE1 CreateDirectoryExW
        114   70 0008AE6E CreateDirectoryTransactedA
        115   71 0008AD4B CreateDirectoryTransactedW
        116   72 0004D166 CreateDirectoryW
        117   73 000444C0 CreateEventA
        118   74 000444F4 CreateEventExA
        119   75 0004B5DB CreateEventExW
        120   76 0004B65E CreateEventW
        121   77 0000F244 CreateFiber
        122   78 0000F264 CreateFiberEx
        123   79 0004CE5F CreateFileA
        124   7A 000222BE CreateFileMappingA
        125   7B 0008E029 CreateFileMappingNumaA
        126   7C 0008DE43 CreateFileMappingNumaW
        127   7D 000210E8 CreateFileMappingW
        128   7E 0009081D CreateFileTransactedA
        129   7F 0004DD72 CreateFileTransactedW
        130   80 0004AECB CreateFileW
        131   81 0009F189 CreateHardLinkA
        132   82 0009F1E5 CreateHardLinkTransactedA
        133   83 0009F0E1 CreateHardLinkTransactedW
        134   84 0009EEF7 CreateHardLinkW
        135   85 00029CB4 CreateIoCompletionPort
        136   86 0009EE15 CreateJobObjectA
        137   87 00004907 CreateJobObjectW
        138   88 0009EDE7 CreateJobSet
        139   89 000043CE CreateMailslotA
        140   8A 000042E6 CreateMailslotW
        141   8B 0000DB16 CreateMemoryResourceNotification
        142   8C 00029431 CreateMutexA
        143   8D 00029457 CreateMutexExA
        144   8E 0004B769 CreateMutexExW
        145   8F 0004D555 CreateMutexW
        146   90 00002EF5 CreateNamedPipeA
        147   91 00005C0C CreateNamedPipeW
        148   92 00028E6E CreatePipe
        149   93 00096570 CreatePrivateNamespaceA
        150   94 00005864 CreatePrivateNamespaceW
        151   95 00001C28 CreateProcessA
        152   96 00028B8D CreateProcessInternalA
        153   97 000253DF CreateProcessInternalW
        154   98 00001BF3 CreateProcessW
        155   99 0004C935 CreateRemoteThread
        156   9A 0001EDD7 CreateSemaphoreA
        157   9B 0001EDFD CreateSemaphoreExA
        158   9C 0001C059 CreateSemaphoreExW
        159   9D 00012817 CreateSemaphoreW
        160   9E 0009F255 CreateSocketHandle
        161   9F 0008F389 CreateSymbolicLinkA
        162   A0 0008F493 CreateSymbolicLinkTransactedA
        163   A1 0008F2E3 CreateSymbolicLinkTransactedW
        164   A2 0008EA39 CreateSymbolicLinkW
        165   A3 0009EC2A CreateTapePartition
        166   A4 0004C90E CreateThread
        167   A5 00002CF8 CreateThreadpool
        168   A6 0001A226 CreateThreadpoolCleanupGroup
        169   A7 00002B9C CreateThreadpoolIo
        170   A8 000024F7 CreateThreadpoolTimer
        171   A9 00005E13 CreateThreadpoolWait
        172   AA 00004B76 CreateThreadpoolWork
        173   AB 00003EB4 CreateTimerQueue
        174   AC 0001A250 CreateTimerQueueTimer
        175   AD 000566A7 CreateToolhelp32Snapshot
        176   AE 00004E56 CreateWaitableTimerA
        177   AF 00004E80 CreateWaitableTimerExA
        178   B0 0000A10C CreateWaitableTimerExW
        179   B1 0000A185 CreateWaitableTimerW
        180   B2 0001C6E5 DeactivateActCtx
        181   B3 00089A61 DebugActiveProcess
        182   B4 00089E96 DebugActiveProcessStop
        183   B5 000899F1 DebugBreak
        184   B6 00089AB4 DebugBreakProcess
        185   B7 00089ADB DebugSetProcessKillOnExit
        186   B8          DecodePointer (forwarded to NTDLL.RtlDecodePointer)
        187   B9          DecodeSystemPointer (forwarded to NTDLL.RtlDecodeSystemPointer)
        188   BA 00002AFA DefineDosDeviceA
        189   BB 000184AC DefineDosDeviceW
        190   BC 000B93BD DelayLoadFailureHook
        191   BD 0001F2FF DeleteAtom
        192   BE          DeleteBoundaryDescriptor (forwarded to NTDLL.RtlDeleteBoundaryDescriptor)
        193   BF          DeleteCriticalSection (forwarded to NTDLL.RtlDeleteCriticalSection)
        194   C0 00009EC0 DeleteFiber
        195   C1 0001F5D2 DeleteFileA
        196   C2 0008F441 DeleteFileTransactedA
        197   C3 0004DE3A DeleteFileTransactedW
        198   C4 0001F4B6 DeleteFileW
        199   C5 0003D305 DeleteProcThreadAttributeList
        200   C6 0009FA75 DeleteTimerQueue
        201   C7 0000407D DeleteTimerQueueEx
        202   C8 0001AC59 DeleteTimerQueueTimer
        203   C9 0009CFA1 DeleteVolumeMountPointA
        204   CA 0009C437 DeleteVolumeMountPointW
        205   CB 00025077 DeviceIoControl
        206   CC 0002952A DisableThreadLibraryCalls
        207   CD          DisassociateCurrentThreadFromCallback (forwarded to NTDLL.TpDisassociateCallback)
        208   CE 00017D8E DisconnectNamedPipe
        209   CF 00088239 DnsHostnameToComputerNameA
        210   D0 00005236 DnsHostnameToComputerNameW
        211   D1 00048C89 DosDateTimeToFileTime
        212   D2 000961F2 DosPathToSessionPathA
        213   D3 0004EE0F DosPathToSessionPathW
        214   D4 00028F6E DuplicateConsoleHandle
        215   D5 00043B3F DuplicateHandle
        216   D6          EncodePointer (forwarded to NTDLL.RtlEncodePointer)
        217   D7          EncodeSystemPointer (forwarded to NTDLL.RtlEncodeSystemPointer)
        218   D8 000A5660 EndUpdateResourceA
        219   D9 000A5660 EndUpdateResourceW
        220   DA          EnterCriticalSection (forwarded to NTDLL.RtlEnterCriticalSection)
        221   DB 00053880 EnumCalendarInfoA
        222   DC 000ABE29 EnumCalendarInfoExA
        223   DD 0004F23E EnumCalendarInfoExEx
        224   DE 000AEE85 EnumCalendarInfoExW
        225   DF 000AEE54 EnumCalendarInfoW
        226   E0 000ABE86 EnumDateFormatsA
        227   E1 000ABEB3 EnumDateFormatsExA
        228   E2 0004F2CB EnumDateFormatsExEx
        229   E3 000AEEB7 EnumDateFormatsExW
        230   E4 00053905 EnumDateFormatsW
        231   E5 000ABEFF EnumLanguageGroupLocalesA
        232   E6 000AEDF8 EnumLanguageGroupLocalesW
        233   E7 00093C45 EnumResourceLanguagesA
        234   E8 000935DB EnumResourceLanguagesExA
        235   E9 00093C6B EnumResourceLanguagesExW
        236   EA 000942DD EnumResourceLanguagesW
        237   EB 00052F4A EnumResourceNamesA
        238   EC 00052FAE EnumResourceNamesExA
        239   ED 0001FC06 EnumResourceNamesExW
        240   EE 0000BC4D EnumResourceNamesW
        241   EF 00092FAD EnumResourceTypesA
        242   F0 000926A5 EnumResourceTypesExA
        243   F1 0005478A EnumResourceTypesExW
        244   F2 0005476A EnumResourceTypesW
        245   F3 000ABF3E EnumSystemCodePagesA
        246   F4 000AEE39 EnumSystemCodePagesW
        247   F5 00091DB0 EnumSystemFirmwareTables
        248   F6 0004DF74 EnumSystemGeoID
        249   F7 000ABEE1 EnumSystemLanguageGroupsA
        250   F8 0000252E EnumSystemLanguageGroupsW
        251   F9 00007477 EnumSystemLocalesA
        252   FA 000502BD EnumSystemLocalesEx
        253   FB 000AEE19 EnumSystemLocalesW
        254   FC 000ABE5A EnumTimeFormatsA
        255   FD 0004F29E EnumTimeFormatsEx
        256   FE 000538D8 EnumTimeFormatsW
        257   FF 000ABF20 EnumUILanguagesA
        258  100 0000378C EnumUILanguagesW
        259  101 0008818D EnumerateLocalComputerNamesA
        260  102 00087FE2 EnumerateLocalComputerNamesW
        261  103 0009EBF7 EraseTape
        262  104 00098D73 EscapeCommFunction
        263  105 000441D8 ExitProcess
        264  106          ExitThread (forwarded to NTDLL.RtlExitUserThread)
        265  107 0009ADC1 ExitVDM
        266  108 0001C357 ExpandEnvironmentStringsA
        267  109 00046B51 ExpandEnvironmentStringsW
        268  10A 000A644B ExpungeConsoleCommandHistoryA
        269  10B 000A6433 ExpungeConsoleCommandHistoryW
        270  10C 000954D8 FatalAppExitA
        271  10D 0009547E FatalAppExitW
        272  10E 00095533 FatalExit
        273  10F 00048B5A FileTimeToDosDateTime
        274  110 00028D72 FileTimeToLocalFileTime
        275  111 00040AB8 FileTimeToSystemTime
        276  112 000543C6 FillConsoleOutputAttribute
        277  113 000A837F FillConsoleOutputCharacterA
        278  114 000A83A6 FillConsoleOutputCharacterW
        279  115 00047F28 FindActCtxSectionGuid
        280  116 0009F2CA FindActCtxSectionStringA
        281  117 00048AAC FindActCtxSectionStringW
        282  118 00048195 FindAtomA
        283  119 0001AD9F FindAtomW
        284  11A 0003F255 FindClose
        285  11B 00007916 FindCloseChangeNotification
        286  11C 0008CD5C FindFirstChangeNotificationA
        287  11D 000191A5 FindFirstChangeNotificationW
        288  11E 0002895D FindFirstFileA
        289  11F 0008D311 FindFirstFileExA
        290  120 0003ECA2 FindFirstFileExW
        291  121 0008D4D1 FindFirstFileNameTransactedW
        292  122 0008D019 FindFirstFileNameW
        293  123 0008D571 FindFirstFileTransactedA
        294  124 0008D269 FindFirstFileTransactedW
        295  125 0003F00C FindFirstFileW
        296  126 0008D42E FindFirstStreamTransactedW
        297  127 0008CDC4 FindFirstStreamW
        298  128 0009D3FA FindFirstVolumeA
        299  129 0009D519 FindFirstVolumeMountPointA
        300  12A 0009CCC2 FindFirstVolumeMountPointW
        301  12B 00006490 FindFirstVolumeW
        302  12C 0004FB9B FindNLSString
        303  12D 00050233 FindNLSStringEx
        304  12E 00006DBE FindNextChangeNotification
        305  12F 00022FF9 FindNextFileA
        306  130 0008CCC8 FindNextFileNameW
        307  131 0002B79E FindNextFileW
        308  132 0008CA69 FindNextStreamW
        309  133 0009C823 FindNextVolumeA
        310  134 0009D651 FindNextVolumeMountPointA
        311  135 0009CE49 FindNextVolumeMountPointW
        312  136 000061EC FindNextVolumeW
        313  137 00022653 FindResourceA
        314  138 00022575 FindResourceExA
        315  139 000469FD FindResourceExW
        316  13A 00047FA1 FindResourceW
        317  13B 000061B6 FindVolumeClose
        318  13C 00007916 FindVolumeMountPointClose
        319  13D 0002A04D FlsAlloc
        320  13E 00044184 FlsFree
        321  13F 0004A708 FlsGetValue
        322  140 0004B382 FlsSetValue
        323  141 000A9A81 FlushConsoleInputBuffer
        324  142 00017CA5 FlushFileBuffers
        325  143 0001A43F FlushInstructionCache
        326  144          FlushProcessWriteBuffers (forwarded to NTDLL.NtFlushProcessWriteBuffers)
        327  145 00017BF2 FlushViewOfFile
        328  146 000AC68C FoldStringA
        329  147 0005280E FoldStringW
        330  148 00007B9A FormatMessageA
        331  149 000213D4 FormatMessageW
        332  14A 000A6DB1 FreeConsole
        333  14B 000235B1 FreeEnvironmentStringsA
        334  14C 000235B1 FreeEnvironmentStringsW
        335  14D 00043DB4 FreeLibrary
        336  14E 00044642 FreeLibraryAndExitThread
        337  14F          FreeLibraryWhenCallbackReturns (forwarded to NTDLL.TpCallbackUnloadDllOnCompletion)
        338  150 0001797E FreeResource
        339  151 0009F966 FreeUserPhysicalPages
        340  152 000A997D GenerateConsoleCtrlEvent
        341  153 00029E62 GetACP
        342  154 0009F4EF GetApplicationRecoveryCallback
        343  155 0009F56B GetApplicationRestartSettings
        344  156 0008AEE7 GetAtomNameA
        345  157 0001BB67 GetAtomNameW
        346  158 0009B583 GetBinaryType
        347  159 0009B583 GetBinaryTypeA
        348  15A 000521D7 GetBinaryTypeW
        349  15B 00056F05 GetCPFileNameFromRegistry
        350  15C 0002A0F5 GetCPInfo
        351  15D 000AC85C GetCPInfoExA
        352  15E 000B03B9 GetCPInfoExW
        353  15F 000ABAF7 GetCalendarDateFormat
        354  160 0004F494 GetCalendarDateFormatEx
        355  161 000AB337 GetCalendarDaysInMonth
        356  162 000AB6F2 GetCalendarDifferenceInDays
        357  163 00052078 GetCalendarInfoA
        358  164 0004F172 GetCalendarInfoEx
        359  165 0000C634 GetCalendarInfoW
        360  166 000AB975 GetCalendarMonthsInYear
        361  167 0004F852 GetCalendarSupportedDateRange
        362  168 000ABD89 GetCalendarWeekNumber
        363  169 0009F35D GetComPlusPackageInstallStatus
        364  16A 0009A339 GetCommConfig
        365  16B 00098E6F GetCommMask
        366  16C 00098EF8 GetCommModemStatus
        367  16D 00098F81 GetCommProperties
        368  16E 0009902E GetCommState
        369  16F 000992F5 GetCommTimeouts
        370  170 00043C9B GetCommandLineA
        371  171 00029C80 GetCommandLineW
        372  172 0008F2B9 GetCompressedFileSizeA
        373  173 0008F466 GetCompressedFileSizeTransactedA
        374  174 0008F21B GetCompressedFileSizeTransactedW
        375  175 0008E881 GetCompressedFileSizeW
        376  176 0001ECD5 GetComputerNameA
        377  177 00003344 GetComputerNameExA
        378  178 0000CEEC GetComputerNameExW
        379  179 00029940 GetComputerNameW
        380  17A 000A5EA7 GetConsoleAliasA
        381  17B 000A636C GetConsoleAliasExesA
        382  17C 000A6051 GetConsoleAliasExesLengthA
        383  17D 000A6044 GetConsoleAliasExesLengthW
        384  17E 000A6351 GetConsoleAliasExesW
        385  17F 000A5E7B GetConsoleAliasW
        386  180 000A6207 GetConsoleAliasesA
        387  181 000A5FB4 GetConsoleAliasesLengthA
        388  182 000A5F9C GetConsoleAliasesLengthW
        389  183 000A61E9 GetConsoleAliasesW
        390  184 0003EA16 GetConsoleCP
        391  185 000AA6B7 GetConsoleCharType
        392  186 000A67FF GetConsoleCommandHistoryA
        393  187 000A6644 GetConsoleCommandHistoryLengthA
        394  188 000A662C GetConsoleCommandHistoryLengthW
        395  189 000A67E1 GetConsoleCommandHistoryW
        396  18A 000A9548 GetConsoleCursorInfo
        397  18B 000AA80D GetConsoleCursorMode
        398  18C 000A7DA5 GetConsoleDisplayMode
        399  18D 000A9799 GetConsoleFontInfo
        400  18E 000A98F9 GetConsoleFontSize
        401  18F 000A7C51 GetConsoleHardwareState
        402  190 000AA0E1 GetConsoleHistoryInfo
        403  191 000A69F0 GetConsoleInputExeNameA
        404  192 000A68A1 GetConsoleInputExeNameW
        405  193 000A72D1 GetConsoleInputWaitHandle
        406  194 000AA400 GetConsoleKeyboardLayoutNameA
        407  195 000AA41A GetConsoleKeyboardLayoutNameW
        408  196 0004AB0B GetConsoleMode
        409  197 000AA48B GetConsoleNlsMode
        410  198 000A6996 GetConsoleOriginalTitleA
        411  199 000A69B3 GetConsoleOriginalTitleW
        412  19A 0002C014 GetConsoleOutputCP
        413  19B 000A9F94 GetConsoleProcessList
        414  19C 0002273B GetConsoleScreenBufferInfo
        415  19D 00022792 GetConsoleScreenBufferInfoEx
        416  19E 000A9619 GetConsoleSelectionInfo
        417  19F 000A69D3 GetConsoleTitleA
        418  1A0 0002E071 GetConsoleTitleW
        419  1A1 0005798C GetConsoleWindow
        420  1A2 000AC340 GetCurrencyFormatA
        421  1A3 000B1648 GetCurrencyFormatEx
        422  1A4 000B15EE GetCurrencyFormatW
        423  1A5 0001800B GetCurrentActCtx
        424  1A6 000AA434 GetCurrentConsoleFont
        425  1A7 000AA204 GetCurrentConsoleFontEx
        426  1A8 0001F1D1 GetCurrentDirectoryA
        427  1A9 0002DC12 GetCurrentDirectoryW
        428  1AA 0004C905 GetCurrentProcess
        429  1AB 0004A651 GetCurrentProcessId
        430  1AC          GetCurrentProcessorNumber (forwarded to NTDLL.RtlGetCurrentProcessorNumber)
        431  1AD 0004D006 GetCurrentThread
        432  1AE 000499F0 GetCurrentThreadId
        433  1AF 00052C85 GetDateFormatA
        434  1B0 000B2122 GetDateFormatEx
        435  1B1 00042DD8 GetDateFormatW
        436  1B2 0009A0D1 GetDefaultCommConfigA
        437  1B3 00099FC1 GetDefaultCommConfigW
        438  1B4 000952F2 GetDevicePowerState
        439  1B5 00054513 GetDiskFreeSpaceA
        440  1B6 00057805 GetDiskFreeSpaceExA
        441  1B7 00044337 GetDiskFreeSpaceExW
        442  1B8 0000A1AF GetDiskFreeSpaceW
        443  1B9 00092620 GetDllDirectoryA
        444  1BA 000925AD GetDllDirectoryW
        445  1BB 00019AFA GetDriveTypeA
        446  1BC 0004700F GetDriveTypeW
        447  1BD 000B1D58 GetDurationFormat
        448  1BE 000B1DD9 GetDurationFormatEx
        449  1BF 00089809 GetDynamicTimeZoneInformation
        450  1C0 00028A6B GetEnvironmentStrings
        451  1C1 00028A6B GetEnvironmentStringsA
        452  1C2 0002A073 GetEnvironmentStringsW
        453  1C3 00043F4D GetEnvironmentVariableA
        454  1C4 000298CE GetEnvironmentVariableW
        455  1C5 0004D342 GetErrorMode
        456  1C6 00028B52 GetExitCodeProcess
        457  1C7 0001F47F GetExitCodeThread
        458  1C8 0009836D GetExpandedNameA
        459  1C9 00098429 GetExpandedNameW
        460  1CA 00028937 GetFileAttributesA
        461  1CB 00017BCA GetFileAttributesExA
        462  1CC 00019B95 GetFileAttributesExW
        463  1CD 0008F416 GetFileAttributesTransactedA
        464  1CE 0004DEC6 GetFileAttributesTransactedW
        465  1CF 0004D281 GetFileAttributesW
        466  1D0 0008D969 GetFileBandwidthReservation
        467  1D1 000223F5 GetFileInformationByHandle
        468  1D2 00056A8E GetFileInformationByHandleEx
        469  1D3 000B2273 GetFileMUIInfo
        470  1D4 00007973 GetFileMUIPath
        471  1D5 00047148 GetFileSize
        472  1D6 00047109 GetFileSizeEx
        473  1D7 0001A38C GetFileTime
        474  1D8 0004D377 GetFileType
        475  1D9 0008DD2C GetFinalPathNameByHandleA
        476  1DA 00050AF0 GetFinalPathNameByHandleW
        477  1DB 00091C20 GetFirmwareEnvironmentVariableA
        478  1DC 00091B01 GetFirmwareEnvironmentVariableW
        479  1DD 0004CED9 GetFullPathNameA
        480  1DE 00089599 GetFullPathNameTransactedA
        481  1DF 000894F3 GetFullPathNameTransactedW
        482  1E0 0003EC5F GetFullPathNameW
        483  1E1 000ABF59 GetGeoInfoA
        484  1E2 000AF1A3 GetGeoInfoW
        485  1E3 0009F244 GetHandleContext
        486  1E4 000081DD GetHandleInformation
        487  1E5 0009FA56 GetLargePageMinimum
        488  1E6 000A93F9 GetLargestConsoleWindowSize
        489  1E7 0004A6F9 GetLastError
        490  1E8 0004D5F4 GetLocalTime
        491  1E9 0002BBE3 GetLocaleInfoA
        492  1EA 00050650 GetLocaleInfoEx
        493  1EB 0002A6E3 GetLocaleInfoW
        494  1EC 0002085B GetLogicalDriveStringsA
        495  1ED 00003B66 GetLogicalDriveStringsW
        496  1EE 00047DDD GetLogicalDrives
        497  1EF 00003CD5 GetLogicalProcessorInformation
        498  1F0 0009BBD9 GetLongPathNameA
        499  1F1 0009BDE9 GetLongPathNameTransactedA
        500  1F2 0009BB32 GetLongPathNameTransactedW
        501  1F3 0003F333 GetLongPathNameW
        502  1F4 0000204A GetMailslotInfo
        503  1F5 0004B6BD GetModuleFileNameA
        504  1F6 0004B27E GetModuleFileNameW
        505  1F7 000492A5 GetModuleHandleA
        506  1F8 000445E0 GetModuleHandleExA
        507  1F9 0001C29A GetModuleHandleExW
        508  1FA 0004A804 GetModuleHandleW
        509  1FB 00003ED6 GetNLSVersion
        510  1FC 000AD6A9 GetNLSVersionEx
        511  1FD 0000517C GetNamedPipeAttribute
        512  1FE 00094599 GetNamedPipeClientComputerNameA
        513  1FF 0000511F GetNamedPipeClientComputerNameW
        514  200 000946B1 GetNamedPipeClientProcessId
        515  201 000946ED GetNamedPipeClientSessionId
        516  202 00094A98 GetNamedPipeHandleStateA
        517  203 000947A1 GetNamedPipeHandleStateW
        518  204 00094422 GetNamedPipeInfo
        519  205 00094729 GetNamedPipeServerProcessId
        520  206 00094765 GetNamedPipeServerSessionId
        521  207 0001A6FF GetNativeSystemInfo
        522  208 0009A582 GetNextVDMCommand
        523  209 00094CDE GetNumaAvailableMemoryNode
        524  20A 00094B8A GetNumaHighestNodeNumber
        525  20B 00094C79 GetNumaNodeProcessorMask
        526  20C 00094BD5 GetNumaProcessorNode
        527  20D 00094D43 GetNumaProximityNode
        528  20E 000230DE GetNumberFormatA
        529  20F 00050697 GetNumberFormatEx
        530  210 00022F2C GetNumberFormatW
        531  211 000A92C3 GetNumberOfConsoleFonts
        532  212 000A9333 GetNumberOfConsoleInputEvents
        533  213 000A96D9 GetNumberOfConsoleMouseButtons
        534  214 0001F8BF GetOEMCP
        535  215 00010373 GetOverlappedResult
        536  216 00055718 GetPhysicallyInstalledSystemMemory
        537  217 0000AF31 GetPriorityClass
        538  218 000125E7 GetPrivateProfileIntA
        539  219 00009D8A GetPrivateProfileIntW
        540  21A 0008BB6F GetPrivateProfileSectionA
        541  21B 0008BC7F GetPrivateProfileSectionNamesA
        542  21C 0004EDEE GetPrivateProfileSectionNamesW
        543  21D 00056966 GetPrivateProfileSectionW
        544  21E 00011F81 GetPrivateProfileStringA
        545  21F 00018B0C GetPrivateProfileStringW
        546  220 0008BCA0 GetPrivateProfileStructA
        547  221 0008BE18 GetPrivateProfileStructW
        548  222 0004903B GetProcAddress
        549  223 0000D9FB GetProcessAffinityMask
        550  224 000959E9 GetProcessDEPPolicy
        551  225 00095946 GetProcessHandleCount
        552  226 0004B68F GetProcessHeap
        553  227 00006FDB GetProcessHeaps
        554  228 00046D9B GetProcessId
        555  229 00097915 GetProcessIdOfThread
        556  22A 00095915 GetProcessIoCounters
        557  22B 000958DB GetProcessPriorityBoost
        558  22C 000956C7 GetProcessShutdownParameters
        559  22D 0000BBCE GetProcessTimes
        560  22E 0002978D GetProcessVersion
        561  22F 00006E06 GetProcessWorkingSetSize
        562  230 00006E26 GetProcessWorkingSetSizeEx
        563  231 00008599 GetProductInfo
        564  232 0001264C GetProfileIntA
        565  233 00006FEC GetProfileIntW
        566  234 0008C243 GetProfileSectionA
        567  235 00051721 GetProfileSectionW
        568  236 000120A6 GetProfileStringA
        569  237 0005322C GetProfileStringW
        570  238 0004D0F5 GetQueuedCompletionStatus
        571  239 0008C6AB GetQueuedCompletionStatusEx
        572  23A 00055CBD GetShortPathNameA
        573  23B 0000F855 GetShortPathNameW
        574  23C 000019C9 GetStartupInfoA
        575  23D 00001929 GetStartupInfoW
        576  23E 000235D9 GetStdHandle
        577  23F 000B4BD8 GetStringScripts
        578  240 00051956 GetStringTypeA
        579  241 0005194B GetStringTypeExA
        580  242 0001A6CB GetStringTypeExW
        581  243 00044823 GetStringTypeW
        582  244 00095547 GetSystemDEPPolicy
        583  245 0001B93F GetSystemDefaultLCID
        584  246 000077B9 GetSystemDefaultLangID
        585  247 00005619 GetSystemDefaultLocaleName
        586  248 0000701F GetSystemDefaultUILanguage
        587  249 0002155A GetSystemDirectoryA
        588  24A 0003FAF9 GetSystemDirectoryW
        589  24B 0009F7DF GetSystemFileCacheSize
        590  24C 0005597F GetSystemFirmwareTable
        591  24D 00029885 GetSystemInfo
        592  24E 0000A6C3 GetSystemPowerStatus
        593  24F 000B26BA GetSystemPreferredUILanguages
        594  250 00095ACC GetSystemRegistryQuota
        595  251 00001840 GetSystemTime
        596  252 0000BB43 GetSystemTimeAdjustment
        597  253 000018C0 GetSystemTimeAsFileTime
        598  254 00095772 GetSystemTimes
        599  255 0000E26C GetSystemWindowsDirectoryA
        600  256 00044455 GetSystemWindowsDirectoryW
        601  257 00019141 GetSystemWow64DirectoryA
        602  258 00019141 GetSystemWow64DirectoryW
        603  259 0009EC9E GetTapeParameters
        604  25A 0009EB68 GetTapePosition
        605  25B 0009ED3B GetTapeStatus
        606  25C 00053E9A GetTempFileNameA
        607  25D 00011741 GetTempFileNameW
        608  25E 00053CF1 GetTempPathA
        609  25F 0001042C GetTempPathW
        610  260 00005B49 GetThreadContext
        611  261 0009798A GetThreadIOPendingFlag
        612  262 000204D0 GetThreadId
        613  263 00047F8F GetThreadLocale
        614  264 0000D9AD GetThreadPreferredUILanguages
        615  265 000203DF GetThreadPriority
        616  266 000978DB GetThreadPriorityBoost
        617  267 00089B26 GetThreadSelectorEntry
        618  268 00005504 GetThreadTimes
        619  269 0002D716 GetThreadUILanguage
        621  26A 00049706 GetTickCount
        620  26B 00005E3F GetTickCount64
        622  26C 00052E09 GetTimeFormatA
        623  26D 000B209C GetTimeFormatEx
        624  26E 0004324A GetTimeFormatW
        625  26F 000407B7 GetTimeZoneInformation
        626  270 00089821 GetTimeZoneInformationForYear
        627  271 000B2657 GetUILanguageInfo
        628  272 00049EC5 GetUserDefaultLCID
        629  273 000205E2 GetUserDefaultLangID
        630  274 0004A241 GetUserDefaultLocaleName
        631  275 00040723 GetUserDefaultUILanguage
        632  276 00056BC3 GetUserGeoID
        633  277 00057A65 GetUserPreferredUILanguages
        634  278 0009AFA5 GetVDMCurrentDirectories
        635  279 0002C5AC GetVersion
        636  27A 00029D76 GetVersionExA
        637  27B 00023458 GetVersionExW
        638  27C 00051297 GetVolumeInformationA
        639  27D 0002D945 GetVolumeInformationByHandleW
        640  27E 0002D7FE GetVolumeInformationW
        641  27F 0009CE67 GetVolumeNameForVolumeMountPointA
        642  280 000192DA GetVolumeNameForVolumeMountPointW
        643  281 0009CFC3 GetVolumePathNameA
        644  282 00028583 GetVolumePathNameW
        645  283 0009D101 GetVolumePathNamesForVolumeNameA
        646  284 00019419 GetVolumePathNamesForVolumeNameW
        647  285 00056DB0 GetWindowsDirectoryA
        648  286 000444A6 GetWindowsDirectoryW
        649  287 0009F9F0 GetWriteWatch
        650  288 0000BE06 GlobalAddAtomA
        651  289 0001E854 GlobalAddAtomW
        652  28A 00047D34 GlobalAlloc
        653  28B 00092151 GlobalCompact
        654  28C 0001AD87 GlobalDeleteAtom
        655  28D 00053BCE GlobalFindAtomA
        656  28E 0001A690 GlobalFindAtomW
        657  28F 00091D5C GlobalFix
        658  290 00054563 GlobalFlags
        659  291 00047E13 GlobalFree
        660  292 0008AEC7 GlobalGetAtomNameA
        661  293 0001AD4E GlobalGetAtomNameW
        662  294 00022922 GlobalHandle
        663  295 000486C5 GlobalLock
        664  296 0001EFA5 GlobalMemoryStatus
        665  297 00029E6D GlobalMemoryStatusEx
        666  298 00048927 GlobalReAlloc
        667  299 0001A748 GlobalSize
        668  29A 00091DA0 GlobalUnWire
        669  29B 00091D76 GlobalUnfix
        670  29C 00048612 GlobalUnlock
        671  29D 00091D90 GlobalWire
        672  29E 00097B3D Heap32First
        673  29F 000979FD Heap32ListFirst
        674  2A0 00097AA6 Heap32ListNext
        675  2A1 00097CF1 Heap32Next
        676  2A2          HeapAlloc (forwarded to NTDLL.RtlAllocateHeap)
        677  2A3 0000B9CE HeapCompact
        678  2A4 00029D0B HeapCreate
        679  2A5 0001F67A HeapDestroy
        680  2A6 00049A12 HeapFree
        681  2A7 0009224E HeapLock
        682  2A8 0000201C HeapQueryInformation
        683  2A9          HeapReAlloc (forwarded to NTDLL.RtlReAllocateHeap)
        684  2AA 0002A824 HeapSetInformation
        685  2AB          HeapSize (forwarded to NTDLL.RtlSizeHeap)
        686  2AC 000921CE HeapSummary
        687  2AD 00092268 HeapUnlock
        688  2AE 0000D5FA HeapValidate
        689  2AF 00092282 HeapWalk
        690  2B0 00017F55 IdnToAscii
        691  2B1 000B4B34 IdnToNameprepUnicode
        692  2B2 000B4B86 IdnToUnicode
        693  2B3 00001FB2 InitAtomTable
        694  2B4 00096869 InitOnceBeginInitialize
        695  2B5 000968A6 InitOnceComplete
        696  2B6 00096840 InitOnceExecuteOnce
        697  2B7          InitOnceInitialize (forwarded to NTDLL.RtlRunOnceInitialize)
        698  2B8          InitializeConditionVariable (forwarded to NTDLL.RtlInitializeConditionVariable)
        699  2B9          InitializeCriticalSection (forwarded to NTDLL.RtlInitializeCriticalSection)
        700  2BA 0003FADC InitializeCriticalSectionAndSpinCount
        701  2BB 0002366B InitializeCriticalSectionEx
        702  2BC 0002DCEE InitializeProcThreadAttributeList
        703  2BD          InitializeSListHead (forwarded to NTDLL.RtlInitializeSListHead)
        704  2BE          InitializeSRWLock (forwarded to NTDLL.RtlInitializeSRWLock)
        706  2BF 0004943C InterlockedCompareExchange
        705  2C0          InterlockedCompareExchange64 (forwarded to NTDLL.RtlInterlockedCompareExchange64)
        707  2C1 00049414 InterlockedDecrement
        708  2C2 00049428 InterlockedExchange
        709  2C3 00049450 InterlockedExchangeAdd
        710  2C4          InterlockedFlushSList (forwarded to NTDLL.RtlInterlockedFlushSList)
        711  2C5 00049400 InterlockedIncrement
        712  2C6          InterlockedPopEntrySList (forwarded to NTDLL.RtlInterlockedPopEntrySList)
        713  2C7          InterlockedPushEntrySList (forwarded to NTDLL.RtlInterlockedPushEntrySList)
          2  2C8          InterlockedPushListSList (forwarded to NTDLL.RtlInterlockedPushListSList)
        714  2C9 000A858D InvalidateConsoleDIBits
        715  2CA 0001283D IsBadCodePtr
        716  2CB 000956A7 IsBadHugeReadPtr
        717  2CC 000956B7 IsBadHugeWritePtr
        718  2CD 00048BFB IsBadReadPtr
        719  2CE 0000B214 IsBadStringPtrA
        720  2CF 000525AE IsBadStringPtrW
        721  2D0 000492D1 IsBadWritePtr
        722  2D1 000AB4F0 IsCalendarLeapDay
        723  2D2 000AB45A IsCalendarLeapMonth
        724  2D3 000AB3D3 IsCalendarLeapYear
        725  2D4 00047184 IsDBCSLeadByte
        726  2D5 000127B8 IsDBCSLeadByteEx
        727  2D6 0001EF5F IsDebuggerPresent
        728  2D7 00004A0A IsNLSDefinedString
        729  2D8 000B4AE4 IsNormalizedString
        730  2D9 000264B1 IsProcessInJob
        731  2DA 0002019A IsProcessorFeaturePresent
        732  2DB 0009533B IsSystemResumeAutomatic
        733  2DC 00044629 IsThreadAFiber
        734  2DD          IsThreadpoolTimerSet (forwarded to NTDLL.TpIsTimerSet)
        735  2DE 0004D5D9 IsTimeZoneRedirectionEnabled
        736  2DF 0004F65D IsValidCalDateTime
        737  2E0 0002B62C IsValidCodePage
        738  2E1 000AD002 IsValidLanguageGroup
        739  2E2 0002AFE2 IsValidLocale
        740  2E3 00050358 IsValidLocaleName
        741  2E4 0004D719 IsWow64Process
        742  2E5 000055F1 LCIDToLocaleName
        743  2E6 00050750 LCMapStringA
        744  2E7 000AFA3E LCMapStringEx
        745  2E8 0004B3D8 LCMapStringW
        746  2E9 00098A9C LZClose
        747  2EA 00098A24 LZCloseFile
        748  2EB 0008942D LZCopy
        749  2EC 00098549 LZCreateFileW
        750  2ED 000BC371 LZDone
        751  2EE 00098223 LZInit
        752  2EF 0009861E LZOpenFileA
        753  2F0 000986EA LZOpenFileW
        754  2F1 00098815 LZRead
        755  2F2 0009878E LZSeek
        756  2F3 000851AD LZStart
        757  2F4          LeaveCriticalSection (forwarded to NTDLL.RtlLeaveCriticalSection)
        758  2F5          LeaveCriticalSectionWhenCallbackReturns (forwarded to NTDLL.TpCallbackLeaveCriticalSectionOnCompletion)
        759  2F6 000294DC LoadLibraryA
        760  2F7 000294B4 LoadLibraryExA
        761  2F8 00029109 LoadLibraryExW
        762  2F9 00029362 LoadLibraryW
        763  2FA 00095E4F LoadModule
        764  2FB 00046ADB LoadResource
        765  2FC 00046BAC LoadStringBaseExW
        766  2FD 00092397 LoadStringBaseW
        767  2FE 0004ADF9 LocalAlloc
        768  2FF 00092151 LocalCompact
        769  300 0000FAF3 LocalFileTimeToFileTime
        770  301 00084F89 LocalFlags
        771  302 0004AD76 LocalFree
        772  303 000850C5 LocalHandle
        773  304 00020317 LocalLock
        774  305 0001C0CB LocalReAlloc
        775  306 00092167 LocalShrink
        776  307 000180C8 LocalSize
        777  308 0002024B LocalUnlock
        778  309 0000D8C4 LocaleNameToLCID
        779  30A 0000FC28 LockFile
        780  30B 00053AF9 LockFileEx
        781  30C 000468DF LockResource
        782  30D 0009F994 MapUserPhysicalPages
        783  30E 0009F9C2 MapUserPhysicalPagesScatter
        784  30F 000468F0 MapViewOfFile
        785  310 0004A881 MapViewOfFileEx
        786  311 0008DF6F MapViewOfFileExNuma
        787  312 00097F16 Module32First
        788  313 000560EB Module32FirstW
        789  314 00097FFE Module32Next
        790  315 0005639E Module32NextW
        791  316 0008F641 MoveFileA
        792  317 00050F0A MoveFileExA
        793  318 000210C8 MoveFileExW
        794  319 0008F4FB MoveFileTransactedA
        795  31A 0008F5A1 MoveFileTransactedW
        796  31B 0000A2F2 MoveFileW
        797  31C 00050F2A MoveFileWithProgressA
        798  31D 000210A4 MoveFileWithProgressW
        799  31E 00049460 MulDiv
        800  31F 0004CCDB MultiByteToWideChar
        801  320 00095C51 NeedCurrentDirectoryForExePathA
        802  321 0002B6A2 NeedCurrentDirectoryForExePathW
        803  322 0005046F NlsCheckPolicy
        804  323 0002AECA NlsConvertIntegerToString
        805  324 000B4DE0 NlsEventDataDescCreate
        806  325 000429FC NlsGetCacheUpdateCount
        807  326 000AD72A NlsUpdateLocale
        808  327 000AE655 NlsUpdateSystemLocale
        809  328 0004EC76 NlsWriteEtwEvent
        810  329 0004E8C9 NormalizeString
        811  32A 000B4755 NotifyUILanguageChange
        812  32B 00044725 OpenConsoleW
        813  32C 0001C2FE OpenEventA
        814  32D 0001BF97 OpenEventW
        815  32E 0000355A OpenFile
        816  32F 0008C7B9 OpenFileById
        817  330 0003FBB7 OpenFileMappingA
        818  331 0004A8FD OpenFileMappingW
        819  332 0009EE82 OpenJobObjectA
        820  333 0009ED5C OpenJobObjectW
        821  334 000233F7 OpenMutexA
        822  335 0004AA85 OpenMutexW
        823  336 00096485 OpenPrivateNamespaceA
        824  337 0009641D OpenPrivateNamespaceW
        825  338 00047267 OpenProcess
        826  339 000851AD OpenProfileUserMapping
        827  33A 000968D4 OpenSemaphoreA
        828  33B 00008397 OpenSemaphoreW
        829  33C 0002C874 OpenThread
        830  33D 00096949 OpenWaitableTimerA
        831  33E 00096691 OpenWaitableTimerW
        832  33F 00040264 OutputDebugStringA
        833  340 0000BE4B OutputDebugStringW
        834  341 000A880D PeekConsoleInputA
        835  342 000A8830 PeekConsoleInputW
        836  343 0009489E PeekNamedPipe
        837  344 000471B4 PostQueuedCompletionStatus
        838  345 0009EBC4 PrepareTape
        839  346 000553EC PrivCopyFileExW
        840  347 0008E589 PrivMoveFileIdentityW
        841  348 0005158B Process32First
        842  349 00055ED8 Process32FirstW
        843  34A 00051653 Process32Next
        844  34B 00055F6D Process32NextW
        845  34C 00049361 ProcessIdToSessionId
        846  34D 00057B01 PulseEvent
        847  34E 00099398 PurgeComm
        848  34F 000442AD QueryActCtxSettingsW
        849  350 0000E175 QueryActCtxW
        850  351          QueryDepthSList (forwarded to NTDLL.RtlQueryDepthSList)
        851  352 0008C459 QueryDosDeviceA
        852  353 0003F892 QueryDosDeviceW
        853  354 000965E5 QueryFullProcessImageNameA
        854  355 000204FF QueryFullProcessImageNameW
        855  356 0009F68A QueryIdleProcessorCycleTime
        856  357 000032A8 QueryInformationJobObject
        857  358 0000B065 QueryMemoryResourceNotification
        858  359 0004A660 QueryPerformanceCounter
        859  35A 0001EECB QueryPerformanceFrequency
        860  35B 00095A88 QueryProcessAffinityUpdateMode
        861  35C 0009F647 QueryProcessCycleTime
        862  35D 0009F604 QueryThreadCycleTime
        863  35E 0001A86C QueueUserAPC
        864  35F 00019054 QueueUserWorkItem
        865  360 0003FB56 RaiseException
        866  361 0008F819 ReOpenFile
        867  362 000A75AD ReadConsoleA
        868  363 000A8853 ReadConsoleInputA
        869  364 000A8899 ReadConsoleInputExA
        870  365 000A88BD ReadConsoleInputExW
        871  366 000A8876 ReadConsoleInputW
        872  367 000A8D55 ReadConsoleOutputA
        873  368 000A929D ReadConsoleOutputAttribute
        874  369 000A9251 ReadConsoleOutputCharacterA
        875  36A 000A9277 ReadConsoleOutputCharacterW
        876  36B 000A8D31 ReadConsoleOutputW
        877  36C 000A7603 ReadConsoleW
        878  36D 000103A7 ReadDirectoryChangesW
        879  36E 0003F02B ReadFile
        880  36F 00004BD3 ReadFileEx
        881  370 00003C37 ReadFileScatter
        882  371 00001C75 ReadProcessMemory
        883  372 0009F492 RegisterApplicationRecoveryCallback
        884  373 0001BD66 RegisterApplicationRestart
        885  374 000AAAA1 RegisterConsoleIME
        886  375 000AA8E1 RegisterConsoleOS2
        887  376 000A7AF1 RegisterConsoleVDM
        888  377 0002A4E2 RegisterWaitForInputIdle
        889  378 0001C1E7 RegisterWaitForSingleObject
        890  379 00001EFF RegisterWaitForSingleObjectEx
        891  37A 00091D46 RegisterWowBaseHandlers
        892  37B 0009B13D RegisterWowExec
        893  37C 00044163 ReleaseActCtx
        894  37D 00049782 ReleaseMutex
        895  37E          ReleaseMutexWhenCallbackReturns (forwarded to NTDLL.TpCallbackReleaseMutexOnCompletion)
        896  37F          ReleaseSRWLockExclusive (forwarded to NTDLL.RtlReleaseSRWLockExclusive)
        897  380          ReleaseSRWLockShared (forwarded to NTDLL.RtlReleaseSRWLockShared)
        898  381 0001C1BF ReleaseSemaphore
        899  382          ReleaseSemaphoreWhenCallbackReturns (forwarded to NTDLL.TpCallbackReleaseSemaphoreOnCompletion)
        900  383 0008AD29 RemoveDirectoryA
        901  384 0008AE49 RemoveDirectoryTransactedA
        902  385 0008AC88 RemoveDirectoryTransactedW
        903  386 00007CDC RemoveDirectoryW
        904  387 00089119 RemoveLocalAlternateComputerNameA
        905  388 00089036 RemoveLocalAlternateComputerNameW
        906  389 00091F25 RemoveSecureMemoryCacheCallback
        907  38A          RemoveVectoredContinueHandler (forwarded to NTDLL.RtlRemoveVectoredContinueHandler)
        908  38B          RemoveVectoredExceptionHandler (forwarded to NTDLL.RtlRemoveVectoredExceptionHandler)
        909  38C 0009085F ReplaceFile
        910  38D 00091891 ReplaceFileA
        911  38E 0009085F ReplaceFileW
        912  38F 000961A5 ReplacePartitionUnit
        913  390 0009534A RequestDeviceWakeup
        914  391 000952CA RequestWakeupLatency
        915  392 0004A692 ResetEvent
        916  393 0009FA29 ResetWriteWatch
        917  394          RestoreLastError (forwarded to NTDLL.RtlRestoreLastWin32Error)
        918  395 0001C2D8 ResumeThread
        919  396          RtlCaptureContext (forwarded to NTDLL.RtlCaptureContext)
        920  397          RtlCaptureStackBackTrace (forwarded to NTDLL.RtlCaptureStackBackTrace)
        921  398          RtlFillMemory (forwarded to NTDLL.RtlFillMemory)
        922  399          RtlMoveMemory (forwarded to NTDLL.RtlMoveMemory)
        923  39A          RtlUnwind (forwarded to NTDLL.RtlUnwind)
        924  39B          RtlZeroMemory (forwarded to NTDLL.RtlZeroMemory)
        925  39C 000A9D21 ScrollConsoleScreenBufferA
        926  39D 00003011 ScrollConsoleScreenBufferW
        927  39E 0000569B SearchPathA
        928  39F 00043CA6 SearchPathW
        929  3A0 000AC292 SetCalendarInfoA
        930  3A1 000AE477 SetCalendarInfoW
        931  3A2 00005F37 SetClientTimeZoneInformation
        932  3A3 0009F320 SetComPlusPackageInstallStatus
        933  3A4 00099422 SetCommBreak
        934  3A5 0009A4E8 SetCommConfig
        935  3A6 0009943A SetCommMask
        936  3A7 000994D9 SetCommState
        937  3A8 000997EF SetCommTimeouts
        938  3A9 00087F6F SetComputerNameA
        939  3AA 00088EAF SetComputerNameExA
        940  3AB 00088E07 SetComputerNameExW
        941  3AC 00087E2E SetComputerNameW
        942  3AD 000A9A09 SetConsoleActiveScreenBuffer
        943  3AE 000A9E3B SetConsoleCP
        944  3AF 0002C5E2 SetConsoleCtrlHandler
        945  3B0 000A77F3 SetConsoleCursor
        946  3B1 000A9B77 SetConsoleCursorInfo
        947  3B2 000AA789 SetConsoleCursorMode
        948  3B3 00002FA5 SetConsoleCursorPosition
        949  3B4 000A79B9 SetConsoleDisplayMode
        950  3B5 000A9D45 SetConsoleFont
        951  3B6 000A7D21 SetConsoleHardwareState
        952  3B7 000AA173 SetConsoleHistoryInfo
        953  3B8 000A9DC3 SetConsoleIcon
        954  3B9 000A6AA0 SetConsoleInputExeNameA
        955  3BA 0002E191 SetConsoleInputExeNameW
        956  3BB 000A7E61 SetConsoleKeyShortcuts
        957  3BC 000AADCD SetConsoleLocalEUDC
        958  3BD 000BB068 SetConsoleMaximumWindowSize
        959  3BE 000A7F2C SetConsoleMenuClose
        960  3BF 0002DF7D SetConsoleMode
        961  3C0 000AA5E9 SetConsoleNlsMode
        962  3C1 000A655E SetConsoleNumberOfCommandsA
        963  3C2 000A6543 SetConsoleNumberOfCommandsW
        964  3C3 000AA959 SetConsoleOS2OemFormat
        965  3C4 000A9F61 SetConsoleOutputCP
        966  3C5 000A7FA4 SetConsolePalette
        967  3C6 000A9477 SetConsoleScreenBufferInfoEx
        968  3C7 000A9AF9 SetConsoleScreenBufferSize
        969  3C8 00054358 SetConsoleTextAttribute
        970  3C9 000A681D SetConsoleTitleA
        971  3CA 0000CC8A SetConsoleTitleW
        972  3CB 000A9C49 SetConsoleWindowInfo
        973  3CC          SetCriticalSectionSpinCount (forwarded to NTDLL.RtlSetCriticalSectionSpinCount)
        974  3CD 000AA2B7 SetCurrentConsoleFontEx
        975  3CE 0003EB97 SetCurrentDirectoryA
        976  3CF 0002DB96 SetCurrentDirectoryW
        977  3D0 0009A281 SetDefaultCommConfigA
        978  3D1 0009A169 SetDefaultCommConfigW
        979  3D2 000924FD SetDllDirectoryA
        980  3D3 00092467 SetDllDirectoryW
        981  3D4 00089978 SetDynamicTimeZoneInformation
        982  3D5 000183A9 SetEndOfFile
        983  3D6 0009F6C0 SetEnvironmentStringsA
        984  3D7 0001F69A SetEnvironmentStringsW
        985  3D8 0002220E SetEnvironmentVariableA
        986  3D9 0002B291 SetEnvironmentVariableW
        987  3DA 0004D300 SetErrorMode
        988  3DB 0004A6B4 SetEvent
        989  3DC          SetEventWhenCallbackReturns (forwarded to NTDLL.TpCallbackSetEventOnCompletion)
        990  3DD 00091F3F SetFileApisToANSI
        991  3DE 0000CDEB SetFileApisToOEM
        992  3DF 0000F038 SetFileAttributesA
        993  3E0 0008F3EE SetFileAttributesTransactedA
        994  3E1 0008ED47 SetFileAttributesTransactedW
        995  3E2 0000EF2E SetFileAttributesW
        996  3E3 0008D894 SetFileBandwidthReservation
        997  3E4 0008C657 SetFileCompletionNotificationModes
        998  3E5 00017B7F SetFileInformationByHandle
        999  3E6 0008C605 SetFileIoOverlappedRange
       1000  3E7 0003FC1D SetFilePointer
       1001  3E8 0001E86E SetFilePointerEx
       1002  3E9 0008D7F2 SetFileShortNameA
       1003  3EA 0008D709 SetFileShortNameW
       1004  3EB 00012703 SetFileTime
       1005  3EC 0000289B SetFileValidData
       1006  3ED 00091CB3 SetFirmwareEnvironmentVariableA
       1007  3EE 00091B94 SetFirmwareEnvironmentVariableW
       1008  3EF 00019141 SetHandleContext
       1009  3F0 000468DF SetHandleCount
       1010  3F1 0001A2A2 SetHandleInformation
       1011  3F2 00004874 SetInformationJobObject
       1012  3F3 000AB23D SetLastConsoleEventActive
       1013  3F4 0004A640 SetLastError
       1014  3F5 000893E4 SetLocalPrimaryComputerNameA
       1015  3F6 00089162 SetLocalPrimaryComputerNameW
       1016  3F7 00084E9D SetLocalTime
       1017  3F8 000AC1E7 SetLocaleInfoA
       1018  3F9 000AD9BD SetLocaleInfoW
       1019  3FA 00004420 SetMailslotInfo
       1020  3FB 0009539A SetMessageWaitingIndicator
       1021  3FC 000944A7 SetNamedPipeAttribute
       1022  3FD 0002C805 SetNamedPipeHandleState
       1023  3FE 00018FC9 SetPriorityClass
       1024  3FF 000958AB SetProcessAffinityMask
       1025  400 00095A3C SetProcessAffinityUpdateMode
       1026  401 00095980 SetProcessDEPPolicy
       1027  402 00056D7B SetProcessPriorityBoost
       1028  403 0000E8B1 SetProcessShutdownParameters
       1029  404 00007DEB SetProcessWorkingSetSize
       1030  405 00007E09 SetProcessWorkingSetSizeEx
       1031  406 000923D6 SetSearchPathMode
       1032  407 00024F23 SetStdHandle
       1033  408 0008D9CC SetStdHandleEx
       1034  409 0009F76C SetSystemFileCacheSize
       1035  40A 00095281 SetSystemPowerState
       1036  40B 00089755 SetSystemTime
       1037  40C 00004B3D SetSystemTimeAdjustment
       1038  40D 0009ECFA SetTapeParameters
       1039  40E 0009EB22 SetTapePosition
       1040  40F 00096B17 SetTermsrvAppInstallMode
       1041  410 00003AFE SetThreadAffinityMask
       1042  411 0009794A SetThreadContext
       1043  412 0000BE20 SetThreadExecutionState
       1044  413 000979C9 SetThreadIdealProcessor
       1045  414 0000F183 SetThreadLocale
       1046  415 0001A404 SetThreadPreferredUILanguages
       1047  416 0001F8CA SetThreadPriority
       1048  417 000978A0 SetThreadPriorityBoost
       1049  418 0002DFE9 SetThreadStackGuarantee
       1050  419 0002DE29 SetThreadUILanguage
       1051  41A          SetThreadpoolThreadMaximum (forwarded to NTDLL.TpSetPoolMaxThreads)
       1052  41B 00002444 SetThreadpoolThreadMinimum
       1053  41C          SetThreadpoolTimer (forwarded to NTDLL.TpSetTimer)
       1054  41D          SetThreadpoolWait (forwarded to NTDLL.TpSetWait)
       1055  41E 0008983F SetTimeZoneInformation
       1056  41F 00002D2D SetTimerQueueTimer
       1057  420 0002A84F SetUnhandledExceptionFilter
       1058  421 000AEF52 SetUserGeoID
       1059  422 0009AE30 SetVDMCurrentDirectories
       1060  423 000951C1 SetVolumeLabelA
       1061  424 00094D88 SetVolumeLabelW
       1062  425 0009DDE8 SetVolumeMountPointA
       1063  426 0009D771 SetVolumeMountPointW
       1064  427 000201EF SetWaitableTimer
       1065  428 00098CAB SetupComm
       1066  429 000A7871 ShowConsoleCursor
       1067  42A 0005394A SignalObjectAndWait
       1068  42B 00047FBF SizeofResource
       1069  42C 00001C5D Sleep
       1070  42D 000967B9 SleepConditionVariableCS
       1071  42E 000967FB SleepConditionVariableSRW
       1072  42F 0004993E SleepEx
       1073  430          StartThreadpoolIo (forwarded to NTDLL.TpStartAsyncIoOperation)
       1074  431          SubmitThreadpoolWork (forwarded to NTDLL.TpPostWork)
       1075  432 0000793B SuspendThread
       1076  433 00049580 SwitchToFiber
       1077  434 0000BEA6 SwitchToThread
       1078  435 0004CB31 SystemTimeToFileTime
       1079  436 0004151F SystemTimeToTzSpecificLocalTime
       1080  437 000050F6 TerminateJobObject
       1081  438 000018EF TerminateProcess
       1082  439 000441F7 TerminateThread
       1083  43A 0001198D TermsrvAppInstallMode
       1084  43B 00056804 Thread32First
       1085  43C 00056894 Thread32Next
       1086  43D 0002B2FA TlsAlloc
       1087  43E 000440C8 TlsFree
       1088  43F 00049E3B TlsGetValue
       1089  440 0004D24F TlsSetValue
       1090  441 00097ED6 Toolhelp32ReadProcessMemory
       1091  442 0002C752 TransactNamedPipe
       1092  443 0009989A TransmitCommChar
       1093  444          TryEnterCriticalSection (forwarded to NTDLL.RtlTryEnterCriticalSection)
       1094  445 000180A0 TrySubmitThreadpoolCallback
       1095  446 00004479 TzSpecificLocalTimeToSystemTime
       1096  447 0009349C UTRegister
       1097  448 0003D305 UTUnRegister
       1098  449 0009FD89 UnhandledExceptionFilter
       1099  44A 00018692 UnlockFile
       1100  44B 0001862C UnlockFileEx
       1101  44C 0004A995 UnmapViewOfFile
       1102  44D 0009F4CF UnregisterApplicationRecoveryCallback
       1103  44E 0009F4E0 UnregisterApplicationRestart
       1104  44F 000AAB89 UnregisterConsoleIME
       1105  450 00003E63 UnregisterWait
       1106  451 00019786 UnregisterWaitEx
       1107  452 0004F7CC UpdateCalendarDayOfWeek
       1108  453 0002E236 UpdateProcThreadAttribute
       1109  454 000A5380 UpdateResourceA
       1110  455 000A5359 UpdateResourceW
       1111  456 000AB24E VDMConsoleOperation
       1112  457 0009B3F8 VDMOperationStarted
       1113  458 000232D5 VerLanguageNameA
       1114  459 00022894 VerLanguageNameW
       1115  45A          VerSetConditionMask (forwarded to NTDLL.VerSetConditionMask)
       1116  45B 0002B9B6 VerifyConsoleIoHandle
       1117  45C 000B4895 VerifyScripts
       1118  45D 0001A9E3 VerifyVersionInfoA
       1119  45E 000208CD VerifyVersionInfoW
       1120  45F 0004AD55 VirtualAlloc
       1121  460 0004ACFC VirtualAllocEx
       1122  461 0009F852 VirtualAllocExNuma
       1123  462 000440AA VirtualFree
       1124  463 00044063 VirtualFreeEx
       1125  464 000201BB VirtualLock
       1126  465 00001DC3 VirtualProtect
       1127  466 0002DBDA VirtualProtectEx
       1128  467 00046D7D VirtualQuery
       1129  468 00046D4C VirtualQueryEx
       1130  469 00019B61 VirtualUnlock
       1131  46A 0002152D WTSGetActiveConsoleSessionId
       1132  46B 00099924 WaitCommEvent
       1133  46C 00089D6D WaitForDebugEvent
       1134  46D 0004A6D8 WaitForMultipleObjects
       1135  46E 0004A4E2 WaitForMultipleObjectsEx
       1136  46F 000497E0 WaitForSingleObject
       1137  470 00049800 WaitForSingleObjectEx
       1138  471          WaitForThreadpoolIoCallbacks (forwarded to NTDLL.TpWaitForIoCompletion)
       1139  472          WaitForThreadpoolTimerCallbacks (forwarded to NTDLL.TpWaitForTimer)
       1140  473          WaitForThreadpoolWaitCallbacks (forwarded to NTDLL.TpWaitForWait)
       1141  474          WaitForThreadpoolWorkCallbacks (forwarded to NTDLL.TpWaitForWork)
       1142  475 00094A5D WaitNamedPipeA
       1143  476 0000B54D WaitNamedPipeW
       1144  477          WakeAllConditionVariable (forwarded to NTDLL.RtlWakeAllConditionVariable)
       1145  478          WakeConditionVariable (forwarded to NTDLL.RtlWakeConditionVariable)
       1146  479 0009F5CA WerGetFlags
       1147  47A 00002219 WerRegisterFile
       1148  47B 0000AC2D WerRegisterMemoryBlock
       1149  47C 00008123 WerSetFlags
       1150  47D 0009F5AA WerUnregisterFile
       1151  47E 0009F5BA WerUnregisterMemoryBlock
       1152  47F 0009F5DA WerpCleanupMessageMapping
       1153  480 0009F59B WerpInitiateRemoteRecovery
       1154  481 00046C10 WerpNotifyLoadStringResource
       1155  482 0009F5E4 WerpNotifyLoadStringResourceEx
       1156  483 00054C18 WerpNotifyUseStringResource
       1157  484 0009F5F4 WerpStringLookup
       1158  485 0004CBF8 WideCharToMultiByte
       1159  486 00095CF7 WinExec
       1160  487 0008D83E Wow64DisableWow64FsRedirection
       1161  488 0008D817 Wow64EnableWow64FsRedirection
       1162  489 0009539A Wow64GetThreadContext
       1163  48A 0008D868 Wow64RevertWow64FsRedirection
       1164  48B 0009539A Wow64SetThreadContext
       1165  48C 00097975 Wow64SuspendThread
       1166  48D 0004ACDB WriteConsoleA
       1167  48E 000A8A3D WriteConsoleInputA
       1168  48F 000A77AD WriteConsoleInputVDMA
       1169  490 000A77D0 WriteConsoleInputVDMW
       1170  491 000A8A60 WriteConsoleInputW
       1171  492 000A90A5 WriteConsoleOutputA
       1172  493 000A8359 WriteConsoleOutputAttribute
       1173  494 000A830D WriteConsoleOutputCharacterA
       1174  495 000A8333 WriteConsoleOutputCharacterW
       1175  496 000A9081 WriteConsoleOutputW
       1176  497 000206C9 WriteConsoleW
       1177  498 0004A9C1 WriteFile
       1178  499 00003FDC WriteFileEx
       1179  49A 0004F081 WriteFileGather
       1180  49B 0008BBF1 WritePrivateProfileSectionA
       1181  49C 0008BC38 WritePrivateProfileSectionW
       1182  49D 00056E3E WritePrivateProfileStringA
       1183  49E 000182EF WritePrivateProfileStringW
       1184  49F 0008BF94 WritePrivateProfileStructA
       1185  4A0 0008C0D6 WritePrivateProfileStructW
       1186  4A1 00001CB8 WriteProcessMemory
       1187  4A2 0008C261 WriteProfileSectionA
       1188  4A3 0008C27C WriteProfileSectionW
       1189  4A4 0008C225 WriteProfileStringA
       1190  4A5 000578FA WriteProfileStringW
       1191  4A6 0009EC64 WriteTapemark
       1192  4A7 0009F264 ZombifyActCtx
       1193  4A8 0001EEFF _hread
       1194  4A9 0009210F _hwrite
       1195  4AA 0001F5F4 _lclose
       1196  4AB 000920DC _lcreat
       1197  4AC 0001EF2D _llseek
       1198  4AD 0009208A _lopen
       1199  4AE 0001EEFF _lread
       1200  4AF 0009210F _lwrite
       1201  4B0 00022F86 lstrcat
       1202  4B1 00022F86 lstrcatA
       1203  4B2 00051A7C lstrcatW
       1204  4B3 0004784B lstrcmp
       1205  4B4 0004784B lstrcmpA
       1206  4B5 0004A411 lstrcmpW
       1207  4B6 000481F7 lstrcmpi
       1208  4B7 000481F7 lstrcmpiA
       1209  4B8 00046FDA lstrcmpiW
       1210  4B9 000229E7 lstrcpy
       1211  4BA 000229E7 lstrcpyA
       1212  4BB 0000AFEF lstrcpyW
       1213  4BC 0000785A lstrcpyn
       1214  4BD 0000785A lstrcpynA
       1215  4BE 00053A4A lstrcpynW
       1216  4BF 0004D57F lstrlen
       1217  4C0 0004D57F lstrlenA
       1218  4C1 00049A32 lstrlenW