;-- C:\WINDOWS\KERNELEX\ZIPS\KU211221\KERNEL~2.25U\KEXBASES.DLL --;

Exports
 SetWindowUnicode=kexbases.dll.SetWindowUnicode @1 ; 0x00018F19
 get_api_table=kexbases.dll.get_api_table @2 ; 0x0001BE7F

[ADVAPI32.DLL]
 A_SHAFinal
 A_SHAInit
 A_SHAUpdate
 AccessCheck
 AccessCheckByType
 AddAccessAllowedAce
 AddAccessAllowedAceEx
 AddAccessDeniedAceEx
 AddMandatoryAce
 AdjustTokenPrivileges
 AllocateAndInitializeSid
 ChangeServiceConfig2A
 ChangeServiceConfig2W
 CheckTokenMembership
 CloseTrace
 ControlTraceA
 ControlTraceW
 ConvertSecurityDescriptorToStringSecurityDescriptorA
 ConvertSecurityDescriptorToStringSecurityDescriptorW
 ConvertSidToStringSidA
 ConvertSidToStringSidA
 ConvertSidToStringSidW
 ConvertSidToStringSidW
 ConvertStringSecurityDescriptorToSecurityDescriptorA
 ConvertStringSecurityDescriptorToSecurityDescriptorW
 ConvertStringSidToSidA
 ConvertStringSidToSidW
 CopySid
 CreateProcessWithLogonW
 CreateRestrictedToken
 CreateWellKnownSid
 CredDeleteW
 CredEnumerateW
 CredFree
 CredGetTargetInfoW
 CredIsMarshaledCredentialW
 CredProfileLoaded
 CredReadDomainCredentialsW
 CredReadW
 CredWriteW
 CredpConvertCredential
 CredpConvertTargetInfo
 CredpDecodeCredential
 CredpEncodeCredential
 CryptAcquireContextW
 CryptEnumProviderTypesW
 CryptEnumProvidersW
 CryptGetDefaultProviderW
 CryptGetLocalKeyLimits
 CryptSetProviderExW
 CryptSetProviderW
 CryptSignHashW
 CryptVerifySignatureW
 DecryptFileA
 DecryptFileW
 DeleteAce
 DuplicateToken
 DuplicateTokenEx
 EnableTrace
 EncryptFileA
 EncryptFileW
 EnumServicesStatusExA
 EnumServicesStatusExW
 EqualPrefixSid
 EqualSid
 EventRegister
 EventUnregister
 EventWrite
 FileEncryptionStatusA
 FileEncryptionStatusW
 FlushTraceA
 FlushTraceW
 FreeSid
 GetAce
 GetExplicitEntriesFromAclA
 GetExplicitEntriesFromAclW
 GetFileSecurityA
 GetFileSecurityW
 GetLengthSid
 GetNamedSecurityInfoA
 GetNamedSecurityInfoW
 GetSecurityDescriptorControl
 GetSecurityDescriptorDacl
 GetSecurityDescriptorGroup
 GetSecurityDescriptorLength
 GetSecurityDescriptorOwner
 GetSecurityDescriptorSacl
 GetSidIdentifierAuthority
 GetSidLengthRequired
 GetSidSubAuthority
 GetSidSubAuthorityCount
 GetTokenInformation
 GetTraceEnableFlags
 GetTraceEnableLevel
 GetTraceLoggerHandle
 ImpersonateSelf
 InitializeAcl
 InitializeSecurityDescriptor
 InitializeSid
 InitiateSystemShutdownExA
 InitiateSystemShutdownExW
 IsTokenRestricted
 IsValidSecurityDescriptor
 IsValidSid
 IsWellKnownSid
 LookupAccountSidA
 LookupAccountSidW
 LookupPrivilegeValueA
 LookupPrivilegeValueW
 LsaAddAccountRights
 LsaClose
 LsaEnumerateAccountRights
 LsaFreeMemory
 LsaLookupNames
 LsaLookupNames2
 LsaLookupPrivilegeValue
 LsaLookupSids
 LsaNtStatusToWinError
 LsaOpenPolicy
 LsaQueryInformationPolicy
 LsaRemoveAccountRights
 LsaRetrievePrivateData
 LsaStorePrivateData
 MD4Final
 MD4Init
 MD4Update
 MD5Final
 MD5Init
 MD5Update
 MakeSelfRelativeSD
 OpenProcessToken
 OpenSCManagerA
 OpenSCManagerW
 OpenThreadToken
 OpenTraceA
 OpenTraceW
 PrivilegeCheck
 ProcessTrace
 QueryAllTracesA
 QueryAllTracesW
 QueryServiceStatusEx
 QueryTraceA
 QueryTraceW
 QueryUsersOnEncryptedFile
 QueryWindows31FilesMigration
 RegCreateKeyExW
 RegCreateKeyW
 RegDeleteKeyExA
 RegDeleteKeyExW
 RegDeleteKeyW
 RegDeleteTreeA
 RegDeleteTreeW
 RegDisablePredefinedCache
 RegEnumValueW
 RegGetKeySecurity
 RegGetValueA
 RegGetValueW
 RegOpenCurrentUser
 RegOpenKeyExW
 RegOpenKeyW
 RegOpenUserClassesRoot
 RegOverridePredefKey
 RegQueryValueExW
 RegSetValueExA
 RegSetValueExW
 RegisterServiceCtrlHandlerExW
 RegisterTraceGuidsA
 RegisterTraceGuidsW
 RevertToSelf
 SetFileSecurityA
 SetFileSecurityW
 SetKernelObjectSecurity
 SetSecurityDescriptorControl
 SetSecurityDescriptorDacl
 SetSecurityDescriptorGroup
 SetSecurityDescriptorOwner
 SetSecurityDescriptorSacl
 SetThreadToken
 StartTraceA
 StartTraceW
 StopTraceA
 StopTraceW
 SynchronizeWindows31FilesAndWindowsNTRegistry
 SystemFunction029
 SystemFunction033
 SystemFunction034
 SystemFunction035
 SystemFunction036
 SystemFunction040
 SystemFunction041
 TraceEvent
 TraceMessage
 TraceMessageVa
 TreeResetNamedSecurityInfoW
 UnregisterTraceGuids
 UpdateTraceA
 UpdateTraceW

[COMCTL32.DLL]
 InitCommonControlsEx

[COMDLG32.DLL]
 Ssync_ANSI_UNICODE_Struct_For_WOW

[CRYPT32.DLL]
 CryptBinaryToStringA
 CryptBinaryToStringW
 CryptStringToBinaryA
 CryptStringToBinaryW

[GDI32.DLL]
 AddFontMemResourceEx
 AddFontResourceExA
 AddFontResourceExW
 AddFontResourceW
 ClearBitmapAttributes
 CreateDIBSection
 CreateFontIndirectA
 D3DKMT_CreateDCFromMemory
 D3DKMT_DestroyDCFromMemory
 DeleteObject
 EnumFontFamiliesExA
 EnumFontFamiliesExW
 EnumFontFamiliesW
 EnumFontsW
 ExtCreatePen
 ExtTextOutA
 ExtTextOutW
 FontIsLinked
 GdiDrawStream
 GdiEntry13
 GetCharWidth32A
 GetCharWidth32W
 GetDCBrushColor
 GetDCPenColor
 GetFontUnicodeRanges
 GetGlyphOutlineA
 GetObjectType
 GetObjectW
 GetRandomRgn
 GetTextExtentPoint32A
 GetTextExtentPoint32W
 GetTextMetricsA
 GetWorldTransform
 MaskBlt
 ModifyWorldTransform
 PolyTextOutA
 PolyTextOutW
 RemoveFontMemResourceEx
 RemoveFontResourceExA
 RemoveFontResourceExW
 RemoveFontResourceW
 SelectObject
 SetDCBrushColor
 SetDCPenColor
 SetGraphicsMode
 SetMapMode
 SetWorldTransform
 SetWorldTransform

[IMAGEHLP.DLL]
 EnumerateLoadedModules64
 StackWalk64
 SymGetLineFromAddr
 SymGetSymFromAddr64

[IMM32.DLL]
 ImmDisableTextFrameService

[IPHLPAPI.DLL]
 CancelIPChangeNotify
 ConvertInterfaceLuidToGuid
 EnableRouter
 FlushIpNetTable
 GetAdaptersAddresses
 GetBestInterfaceEx
 GetExtendedTcpTable
 GetExtendedUdpTable
 GetIpStatisticsEx
 GetPerAdapterInfo
 GetTcpStatisticsEx
 GetTcpTable2
 GetUdpStatisticsEx
 IcmpParseReplies
 IcmpSendEcho2
 UnenableRouter

[KERNEL32.DLL]
 17
 AcquireSRWLockExclusive
 AcquireSRWLockShared
 ActivateActCtx
 AddAtomW
 AddRefActCtx
 AddVectoredExceptionHandler
 AssignProcessToJobObject
 AttachConsole
 CheckNameLegalDOS8Dot3
 CheckRemoteDebuggerPresent
 CompareStringW
 ConvertFiberToThread
 CopyFileExA
 CopyFileExW
 CopyFileW
 CreateActCtxA
 CreateActCtxW
 CreateDirectoryExW
 CreateDirectoryW
 CreateEventExA
 CreateFiberEx
 CreateFileA
 CreateFileW
 CreateHardLinkA
 CreateHardLinkW
 CreateIoCompletionPort
 CreateJobObjectA
 CreateJobObjectW
 CreateMemoryResourceNotification
 CreateProcessA
 CreateProcessAsUserA
 CreateProcessW
 CreateRemoteThread
 CreateThread
 DeactivateActCtx
 DebugActiveProcessStop
 DebugBreak
 DebugBreak
 DebugBreakProcess
 DebugSetProcessKillOnExit
 DecodePointer
 DecodeSystemPointer
 DefineDosDeviceW
 DeleteCriticalSection
 DeleteFileW
 DnsHostnameToComputerNameW
 EncodePointer
 EncodeSystemPointer
 EnterCriticalSection
 EnumUILanguagesA
 EnumUILanguagesW
 ExitProcess
 FindActCtxSectionGuid
 FindActCtxSectionStringA
 FindActCtxSectionStringW
 FindAtomW
 FindFirstChangeNotificationW
 FindFirstFileExA
 FindFirstFileExW
 FindFirstFileW
 FindFirstVolumeA
 FindFirstVolumeMountPointA
 FindFirstVolumeMountPointW
 FindFirstVolumeW
 FindNextFileW
 FindNextVolumeA
 FindNextVolumeMountPointA
 FindNextVolumeMountPointW
 FindNextVolumeW
 FindResourceExW
 FindResourceW
 FindVolumeClose
 FindVolumeMountPointClose
 FlsAlloc
 FlsFree
 FlsGetValue
 FlsSetValue
 FoldStringA
 FoldStringW
 FreeEnvironmentStringsW
 GetAtomNameW
 GetComputerNameExA
 GetComputerNameExW
 GetConsoleDisplayMode
 GetConsoleWindow
 GetCurrentActCtx
 GetCurrentDirectoryW
 GetDefaultCommConfigW
 GetDiskFreeSpaceA
 GetDiskFreeSpaceExA
 GetDiskFreeSpaceExW
 GetDiskFreeSpaceW
 GetDllDirectoryA
 GetDllDirectoryW
 GetEnvironmentStringsW
 GetFileAttributesExW
 GetFileAttributesW
 GetFileSizeEx
 GetFullPathNameW
 GetGeoInfoA
 GetGeoInfoW
 GetLocaleInfoW
 GetLogicalProcessorInformation
 GetLongPathNameW
 GetModuleFileNameW
 GetModuleHandleExA
 GetModuleHandleExW
 GetModuleHandleW
 GetNativeSystemInfo
 GetNumaHighestNodeNumber
 GetProcessHandleCount
 GetProcessId
 GetProcessIoCounters
 GetQueuedCompletionStatus
 GetShortPathNameW
 GetStartupInfoW
 GetStringTypeExW
 GetStringTypeW
 GetSystemDefaultUILanguage
 GetSystemDirectoryW
 GetSystemRegistryQuota
 GetSystemTimes
 GetSystemWindowsDirectoryA
 GetSystemWindowsDirectoryW
 GetSystemWow64DirectoryA
 GetSystemWow64DirectoryW
 GetTempFileNameA
 GetTempFileNameW
 GetTempPathW
 GetThreadId
 GetTickCount64
 GetUserDefaultUILanguage
 GetUserGeoID
 GetVersion
 GetVersion
 GetVersion
 GetVersion
 GetVersion
 GetVersion
 GetVersion
 GetVersion
 GetVersion
 GetVersion
 GetVersion
 GetVersion
 GetVersion
 GetVersion
 GetVersion
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExA
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVersionExW
 GetVolumeNameForVolumeMountPointA
 GetVolumeNameForVolumeMountPointW
 GetVolumePathNameA
 GetVolumePathNameW
 GetVolumePathNamesForVolumeNameA
 GetVolumePathNamesForVolumeNameW
 GetWindowsDirectoryW
 GlobalAddAtomW
 GlobalFindAtomW
 GlobalGetAtomNameW
 GlobalLock
 GlobalMemoryStatusEx
 GlobalMemoryStatusEx
 GlobalUnlock
 HeapLock
 HeapQueryInformation
 HeapSetInformation
 HeapUnlock
 InitializeCriticalSectionAndSpinCount
 InitializeCriticalSectionEx
 InitializeSListHead
 InitializeSRWLock
 InterlockedCompareExchange64
 InterlockedFlushSList
 InterlockedPopEntrySList
 InterlockedPushEntrySList
 InterlockedPushListSList
 InterlockedPushListSListEx
 IsDebuggerPresent
 IsDebuggerPresent
 IsProcessInJob
 IsProcessorFeaturePresent
 IsValidLanguageGroup
 IsWow64Process
 IsolationAwareCleanup
 KEXVersion
 LCMapStringW
 LeaveCriticalSection
 LoadLibraryA
 LoadLibraryA
 LoadLibraryExA
 LoadLibraryExW
 LoadLibraryW
 LockFileEx
 MapViewOfFile
 MapViewOfFileEx
 Module32FirstW
 Module32NextW
 MoveFileExA
 MoveFileExW
 MoveFileW
 MoveFileWithProgressA
 MoveFileWithProgressW
 MultiByteToWideChar
 OpenJobObjectA
 OpenJobObjectW
 OpenThread
 OutputDebugStringA
 OutputDebugStringA
 OutputDebugStringW
 OutputDebugStringW
 PostQueuedCompletionStatus
 PowerClearRequest
 PowerCreateRequest
 PowerSetRequest
 PrivCopyFileExW
 Process32FirstW
 Process32NextW
 ProcessIdToSessionId
 QueryActCtxSettingsW
 QueryActCtxW
 QueryDepthSList
 QueryFullProcessImageNameA
 QueryFullProcessImageNameW
 QueryInformationJobObject
 QueryMemoryResourceNotification
 QueryThreadCycleTime
 ReOpenFile
 ReadConsoleInputW
 ReadFile
 ReleaseActCtx
 ReleaseSRWLockExclusive
 ReleaseSRWLockShared
 RemoveDirectoryW
 RemoveVectoredExceptionHandler
 ReplaceFileA
 ReplaceFileW
 ResolveLocaleName
 RestoreLastError
 RtlCaptureContext
 RtlCaptureStackBackTrace
 SearchPathW
 SetConsoleDisplayMode
 SetConsoleTitleW
 SetCriticalSectionSpinCount
 SetCurrentDirectoryW
 SetDllDirectoryA
 SetDllDirectoryW
 SetEnvironmentVariableW
 SetFileAttributesW
 SetFileCompletionNotificationModes
 SetFilePointer
 SetFilePointerEx
 SetFileValidData
 SetInformationJobObject
 SetProcessDEPPolicy
 SetThreadUILanguage
 SignalObjectAndWait
 SystemTimeToTzSpecificLocalTime
 TerminateJobObject
 TryAcquireSRWLockExclusive
 TryAcquireSRWLockShared
 TryEnterCriticalSection
 TzSpecificLocalTimeToSystemTime
 UnlockFileEx
 VerLanguageNameW
 VerSetConditionMask
 VerifyVersionInfoA
 VerifyVersionInfoA
 VerifyVersionInfoA
 VerifyVersionInfoA
 VerifyVersionInfoA
 VerifyVersionInfoA
 VerifyVersionInfoA
 VerifyVersionInfoA
 VerifyVersionInfoA
 VerifyVersionInfoA
 VerifyVersionInfoA
 VerifyVersionInfoA
 VerifyVersionInfoA
 VerifyVersionInfoW
 VerifyVersionInfoW
 VerifyVersionInfoW
 VerifyVersionInfoW
 VerifyVersionInfoW
 VerifyVersionInfoW
 VerifyVersionInfoW
 VerifyVersionInfoW
 VerifyVersionInfoW
 VerifyVersionInfoW
 VerifyVersionInfoW
 VerifyVersionInfoW
 VerifyVersionInfoW
 VirtualAllocEx
 VirtualFreeEx
 VirtualProtect
 WTSGetActiveConsoleSessionId
 WerRegisterMemoryBlock
 WideCharToMultiByte
 Wow64DisableWow64FsRedirection
 Wow64EnableWow64FsRedirection
 Wow64RevertWow64FsRedirection
 WriteFile
 ZombifyActCtx
 _llseek
 lstrcmpW
 lstrcmpiW
 lstrcpynW

[LZ32.DLL]
 ApphelpCheckShellObject
 ApphelpCheckShellObject
 CredUIPromptForCredentialsA
 CredUIPromptForCredentialsA
 CredUIPromptForCredentialsW
 CredUIPromptForCredentialsW
 DnsFree
 DnsQuery_A
 DnsQuery_W
 DnsRecordListFree
 MiniDumpWriteDump
 RasDialDlgA
 RasDialDlgW
 RasEntryDlgA
 RasEntryDlgW
 RasPhonebookDlgA
 RasPhonebookDlgW
 SfcIsFileProtected
 SymFromAddr
 SymFunctionTableAccess64
 SymGetLineFromAddr64
 SymGetModuleBase64
 SymGetSearchPathW
 SymSetSearchPathW
 WICConvertBitmapSource
 WinHttpCloseHandle

[NETAPI32.DLL]
 DsEnumerateDomainTrustsW
 DsGetDcNameA
 DsGetDcNameW
 DsGetDcNameWithAccountW
 I_NetNameCanonicalize
 I_NetNameValidate
 NetAlertRaise
 NetAlertRaiseEx
 NetApiBufferAllocate
 NetApiBufferFree
 NetApiBufferReallocate
 NetApiBufferSize
 NetFileGetInfo
 NetGetAnyDCName
 NetGetDCName
 NetGetJoinInformation
 NetGroupEnum
 NetGroupGetInfo
 NetGroupGetUsers
 NetLocalGroupAddMembers
 NetLocalGroupGetMembers
 NetMessageBufferSend
 NetMessageNameAdd
 NetMessageNameDel
 NetMessageNameEnum
 NetRemoteTOD
 NetServerEnum
 NetServerGetInfo
 NetSessionDel
 NetSessionEnum
 NetSessionGetInfo
 NetShareAdd
 NetShareDel
 NetShareEnum
 NetShareGetInfo
 NetShareSetInfo
 NetUseAdd
 NetUseDel
 NetUseEnum
 NetUseGetInfo
 NetUserDel
 NetUserEnum
 NetUserGetGroups
 NetUserGetInfo
 NetUserGetLocalGroups
 NetWkstaGetInfo
 NetWkstaTransportEnum

[NTDLL.DLL]
 CsrGetProcessId
 DbgBreakPoint
 DbgBreakPoint
 DbgPrint
 DbgPrint
 DbgPrintEx
 DbgPrintEx
 DbgPrompt
 DbgPrompt
 KiUserApcDispatcher
 LdrAccessResource
 LdrFindResource_U
 LdrGetDllHandle
 LdrGetProcedureAddress
 LdrLoadDll
 LdrQueryProcessModuleInformation
 LdrShutdownProcess
 LdrShutdownThread
 LdrUnloadDll
 NlsMbCodePageTag
 NlsMbOemCodePageTag
 NtAcceptConnectPort
 NtAccessCheck
 NtAccessCheckAndAuditAlarm
 NtAddAtom
 NtAdjustGroupsToken
 NtAdjustPrivilegesToken
 NtAlertResumeThread
 NtAlertThread
 NtAllocateLocallyUniqueId
 NtAllocateUuids
 NtAllocateVirtualMemory
 NtCancelIoFile
 NtCancelTimer
 NtClearEvent
 NtClose
 NtClose
 NtClose
 NtCloseObjectAuditAlarm
 NtCompactKeys
 NtCompleteConnectPort
 NtCompressKey
 NtConnectPort
 NtContinue
 NtCreateDirectoryObject
 NtCreateEvent
 NtCreateEventPair
 NtCreateIoCompletion
 NtCreateKey
 NtCreateMailslotFile
 NtCreateMutant
 NtCreateNamedPipeFile
 NtCreatePagingFile
 NtCreatePort
 NtCreateProcess
 NtCreateProfile
 NtCreateProfileEx
 NtCreateSection
 NtCreateSemaphore
 NtCreateSymbolicLinkObject
 NtCreateThread
 NtCreateTimer
 NtCreateToken
 NtDelayExecution
 NtDeleteAtom
 NtDeleteFile
 NtDeleteKey
 NtDeleteObjectAuditAlarm
 NtDeleteValueKey
 NtDeviceIoControlFile
 NtDisplayString
 NtDuplicateObject
 NtDuplicateToken
 NtEnumerateKey
 NtEnumerateValueKey
 NtExtendSection
 NtFindAtom
 NtFlushBuffersFile
 NtFlushInstructionCache
 NtFlushKey
 NtFlushVirtualMemory
 NtFreeVirtualMemory
 NtFsControlFile
 NtGetContextThread
 NtGetTickCount
 NtImpersonateClientOfPort
 NtImpersonateThread
 NtListenPort
 NtLoadDriver
 NtLoadKey
 NtLockFile
 NtLockVirtualMemory
 NtMakeTemporaryObject
 NtMapViewOfSection
 NtNotifyChangeDirectoryFile
 NtNotifyChangeKey
 NtOpenDirectoryObject
 NtOpenEvent
 NtOpenEventPair
 NtOpenFile
 NtOpenIoCompletion
 NtOpenKey
 NtOpenMutant
 NtOpenObjectAuditAlarm
 NtOpenProcess
 NtOpenProcessToken
 NtOpenSection
 NtOpenSemaphore
 NtOpenSymbolicLinkObject
 NtOpenThread
 NtOpenThreadToken
 NtOpenTimer
 NtPrivilegeCheck
 NtPrivilegeObjectAuditAlarm
 NtPrivilegedServiceAuditAlarm
 NtProtectVirtualMemory
 NtPulseEvent
 NtQueryAttributesFile
 NtQueryDefaultLocale
 NtQueryDirectoryFile
 NtQueryDirectoryObject
 NtQueryEaFile
 NtQueryEvent
 NtQueryFullAttributesFile
 NtQueryInformationAtom
 NtQueryInformationFile
 NtQueryInformationPort
 NtQueryInformationProcess
 NtQueryInformationThread
 NtQueryInformationToken
 NtQueryIntervalProfile
 NtQueryIoCompletion
 NtQueryKey
 NtQueryMultipleValueKey
 NtQueryMutant
 NtQueryObject
 NtQueryOleDirectoryFile
 NtQueryOpenSubKeys
 NtQueryPerformanceCounter
 NtQuerySection
 NtQuerySecurityObject
 NtQuerySemaphore
 NtQuerySymbolicLinkObject
 NtQuerySystemEnvironmentValue
 NtQuerySystemInformation
 NtQuerySystemTime
 NtQueryTimer
 NtQueryTimerResolution
 NtQueryValueKey
 NtQueryVirtualMemory
 NtQueryVolumeInformationFile
 NtQueueApcThread
 NtRaiseException
 NtRaiseHardError
 NtReadFile
 NtReadFileScatter
 NtReadRequestData
 NtReadVirtualMemory
 NtRegisterThreadTerminatePort
 NtReleaseMutant
 NtReleaseSemaphore
 NtRemoveIoCompletion
 NtReplaceKey
 NtReplyPort
 NtReplyWaitReceivePort
 NtReplyWaitReplyPort
 NtRequestPort
 NtRequestWaitReplyPort
 NtResetEvent
 NtRestoreKey
 NtResumeThread
 NtSaveKey
 NtSetContextThread
 NtSetDefaultHardErrorPort
 NtSetDefaultLocale
 NtSetEaFile
 NtSetEvent
 NtSetHighEventPair
 NtSetHighWaitLowEventPair
 NtSetHighWaitLowThread
 NtSetInformationFile
 NtSetInformationKey
 NtSetInformationObject
 NtSetInformationProcess
 NtSetInformationThread
 NtSetInformationToken
 NtSetIntervalProfile
 NtSetIoCompletion
 NtSetLowEventPair
 NtSetLowWaitHighEventPair
 NtSetLowWaitHighThread
 NtSetSecurityObject
 NtSetSystemEnvironmentValue
 NtSetSystemInformation
 NtSetSystemTime
 NtSetTimer
 NtSetTimerResolution
 NtSetValueKey
 NtSetVolumeInformationFile
 NtShutdownSystem
 NtSignalAndWaitForSingleObject
 NtStartProfile
 NtStopProfile
 NtSuspendThread
 NtTerminateProcess
 NtTerminateThread
 NtTestAlert
 NtUnloadDriver
 NtUnloadKey
 NtUnloadKeyEx
 NtUnlockFile
 NtUnlockVirtualMemory
 NtUnmapViewOfSection
 NtWaitForMultipleObjects
 NtWaitForSingleObject
 NtWaitHighEventPair
 NtWaitLowEventPair
 NtWriteFile
 NtWriteFileGather
 NtWriteRequestData
 NtWriteVirtualMemory
 NtYieldExecution
 RtlAcquireResourceExclusive
 RtlAcquireResourceShared
 RtlAddAccessAllowedAce
 RtlAddAccessAllowedAceEx
 RtlAddAccessDeniedAce
 RtlAddAccessDeniedAceEx
 RtlAddAce
 RtlAddAuditAccessAce
 RtlAdjustPrivilege
 RtlAllocateAndInitializeSid
 RtlAllocateHeap
 RtlAnsiStringToUnicodeSize
 RtlAnsiStringToUnicodeString
 RtlAppendUnicodeStringToString
 RtlAppendUnicodeToString
 RtlAssert
 RtlCaptureStackBackTrace
 RtlCharToInteger
 RtlCompactHeap
 RtlCompareMemory
 RtlCompareUnicodeString
 RtlCompressBuffer
 RtlConvertSidToUnicodeString
 RtlCopyLuid
 RtlCopySid
 RtlCopyUnicodeString
 RtlCreateEnvironment
 RtlCreateHeap
 RtlCreateSecurityDescriptor
 RtlCreateTagHeap
 RtlCreateUnicodeString
 RtlCreateUnicodeStringFromAsciiz
 RtlCreateUserProcess
 RtlCreateUserThread
 RtlDecompressBuffer
 RtlDeleteAce
 RtlDeleteCriticalSection
 RtlDeleteResource
 RtlDeleteSecurityObject
 RtlDestroyEnvironment
 RtlDestroyHeap
 RtlDosPathNameToNtPathName_U
 RtlDuplicateUnicodeString
 RtlEnterCriticalSection
 RtlEnumProcessHeaps
 RtlEqualPrefixSid
 RtlEqualSid
 RtlEqualUnicodeString
 RtlExpandEnvironmentStrings_U
 RtlFirstEntrySList
 RtlFirstFreeAce
 RtlFormatCurrentUserKeyPath
 RtlFreeAnsiString
 RtlFreeHeap
 RtlFreeOemString
 RtlFreeSid
 RtlFreeUnicodeString
 RtlGUIDFromString
 RtlGetAce
 RtlGetCompressionWorkSpaceSize
 RtlGetControlSecurityDescriptor
 RtlGetCurrentDirectory_U
 RtlGetDaclSecurityDescriptor
 RtlGetGroupSecurityDescriptor
 RtlGetHandleValueHeap
 RtlGetNtProductType
 RtlGetNtProductType
 RtlGetNtProductType
 RtlGetNtVersionNumbers
 RtlGetOwnerSecurityDescriptor
 RtlGetProcessHeaps
 RtlGetSaclSecurityDescriptor
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGetVersion
 RtlGrowHeap
 RtlIdentifierAuthoritySid
 RtlInitAnsiString
 RtlInitAnsiStringEx
 RtlInitOemString
 RtlInitOemStringEx
 RtlInitString
 RtlInitUnicodeString
 RtlInitUnicodeStringEx
 RtlInitializeBitMap
 RtlInitializeCriticalSection
 RtlInitializeCriticalSectionAndSpinCount
 RtlInitializeCriticalSectionEx
 RtlInitializeResource
 RtlInitializeSListHead
 RtlInitializeSid
 RtlInterlockedCompareExchange64
 RtlInterlockedFlushSList
 RtlInterlockedPopEntrySList
 RtlInterlockedPushEntrySList
 RtlInterlockedPushListSList
 RtlInterlockedPushListSListEx
 RtlIpv4StringToAddressA
 RtlIpv4StringToAddressW
 RtlIpv6AddressToStringA
 RtlIpv6AddressToStringW
 RtlIpv6StringToAddressA
 RtlIpv6StringToAddressExW
 RtlIpv6StringToAddressW
 RtlIsCriticalSectionLocked
 RtlIsCriticalSectionLockedByThread
 RtlLeaveCriticalSection
 RtlLengthRequiredSid
 RtlLengthSid
 RtlLockHeap
 RtlMultiByteToUnicodeN
 RtlMultiByteToUnicodeSize
 RtlNewSecurityObject
 RtlOemStringToUnicodeSize
 RtlOemStringToUnicodeString
 RtlOemToUnicodeN
 RtlPrefixUnicodeString
 RtlProtectHeap
 RtlQueryDepthSList
 RtlQueryEnvironmentVariable_U
 RtlQueryInformationAcl
 RtlQuerySecurityObject
 RtlRaiseStatus
 RtlReAllocateHeap
 RtlReleaseResource
 RtlRunDecodeUnicodeString
 RtlRunEncodeUnicodeString
 RtlSecondsSince1970ToTime
 RtlSecondsSince1980ToTime
 RtlSetControlSecurityDescriptor
 RtlSetCriticalSectionSpinCount
 RtlSetCurrentEnvironment
 RtlSetDaclSecurityDescriptor
 RtlSetEnvironmentVariable
 RtlSetGroupSecurityDescriptor
 RtlSetHandleValueHeap
 RtlSetInformationAcl
 RtlSetOwnerSecurityDescriptor
 RtlSetSaclSecurityDescriptor
 RtlSetSecurityObject
 RtlSizeHeap
 RtlSubAuthorityCountSid
 RtlSubAuthoritySid
 RtlSystemTimeToLocalTime
 RtlTimeFieldsToTime
 RtlTimeToSecondsSince1970
 RtlTimeToSecondsSince1980
 RtlTimeToTimeFields
 RtlTryEnterCriticalSection
 RtlUnhandledExceptionFilter
 RtlUnicodeStringToAnsiSize
 RtlUnicodeStringToAnsiString
 RtlUnicodeStringToInteger
 RtlUnicodeStringToOemSize
 RtlUnicodeStringToOemString
 RtlUnicodeToMultiByteN
 RtlUnicodeToMultiByteSize
 RtlUniform
 RtlUnlockHeap
 RtlUpcaseUnicodeChar
 RtlUpcaseUnicodeString
 RtlUpcaseUnicodeToMultiByteN
 RtlValidAcl
 RtlValidSecurityDescriptor
 RtlValidSid
 RtlValidateHeap
 RtlValidateProcessHeaps
 RtlVerifyVersionInfo
 RtlVerifyVersionInfo
 RtlVerifyVersionInfo
 RtlVerifyVersionInfo
 RtlVerifyVersionInfo
 RtlVerifyVersionInfo
 RtlVerifyVersionInfo
 RtlVerifyVersionInfo
 RtlVerifyVersionInfo
 RtlVerifyVersionInfo
 RtlVerifyVersionInfo
 RtlVerifyVersionInfo
 RtlVerifyVersionInfo
 RtlWalkHeap
 RtlpAllocateMemory
 RtlpEnsureBufferSize
 RtlxAnsiStringToUnicodeSize
 RtlxOemStringToUnicodeSize
 RtlxUnicodeStringToAnsiSize
 RtlxUnicodeStringToOemSize
 VerSetConditionMask
 ZwClose
 ZwClose
 ZwClose
 ZwConnectPort
 vDbgPrintEx
 vDbgPrintEx
 vDbgPrintExWithPrefix
 vDbgPrintExWithPrefix

[OLE32.DLL]
 CLSIDFromProgIDEx
 CoAllowSetForegroundWindow
 CoGetObjectContext
 CoGetStdMarshalEx
 CoRegisterInitializeSpy
 CoRevokeInitializeSpy

[OPENGL32.DLL]
 wglSwapMultipleBuffers

[POWRPROF.DLL]
 CanUserWritePwrScheme

[RASAPI32.DLL]
 DwEnumEntryDetails
 RasGetAutodialAddressW
 RasGetAutodialEnableW
 RasGetAutodialParamW
 RasSetAutodialAddressW

[RPCRT4.DLL]
 I_RpcAsyncAbortCall
 I_RpcAsyncSetHandle
 I_RpcBindingInqLocalClientPID
 I_RpcExceptionFilter
 I_RpcGetBufferWithObject
 NdrAsyncClientCall
 NdrAsyncServerCall
 NdrDcomAsyncClientCall
 NdrGetUserMarshalInfo
 NdrMesTypeAlignSize2
 NdrMesTypeDecode2
 NdrMesTypeEncode2
 RpcAsyncCancelCall
 RpcAsyncCompleteCall
 RpcAsyncGetCallStatus
 RpcAsyncInitializeHandle
 RpcCancelThreadEx
 RpcCertGeneratePrincipalNameW
 RpcServerInqCallAttributesW
 RpcServerRegisterIf2
 RpcServerTestCancel
 RpcServerUnregisterIfEx
 RpcTestCancel

[SECUR32.DLL]
 DecryptMessage
 EncryptMessage
 GetComputerObjectNameW
 GetUserNameExA
 GetUserNameExW
 LsaCallAuthenticationPackage
 LsaConnectUntrusted
 LsaEnumerateLogonSessions
 LsaFreeReturnBuffer
 LsaGetLogonSessionData
 LsaLookupAuthenticationPackage

[SHELL32.DLL]
 680
 685
 688
 689
 727
 747
 CommandLineToArgvW
 ILAppendID
 ILClone
 ILCloneFirst
 ILCombine
 ILCreateFromPathW
 ILFindChild
 ILFindLastID
 ILFree
 ILGetNext
 ILGetSize
 ILIsEqual
 ILIsParent
 ILLoadFromStream
 ILRemoveLastID
 ILSaveToStream
 IsUserAnAdmin
 PathCleanupSpec
 SHCloneSpecialIDList
 SHCoCreateInstance
 SHCreateItemFromParsingName
 SHCreateQueryCancelAutoPlayMoniker
 SHCreateShellItem
 SHDefExtractIconW
 SHEnumerateUnreadMailAccountsW
 SHExtractIconsW
 SHFindFiles
 SHGetDiskFreeSpaceA
 SHGetDiskFreeSpaceExA
 SHGetDiskFreeSpaceExW
 SHGetIconOverlayIndexW
 SHGetImageList
 SHGetKnownFolderPath
 SHLimitInputEdit
 SHOpenFolderAndSelectItems
 SHOpenWithDialog
 SHPathPrepareForWriteW
 SHPropStgCreate
 SHPropStgReadMultiple
 SHPropStgWriteMultiple
 SHQueryUserNotificationState
 SHRestricted
 SHSetLocalizedName
 SHSetUnreadMailCountW
 Shell_NotifyIconGetRect

[SHLWAPI.DLL]
 467
 AssocGetPerceivedType
 AssocGetUrlAction
 AssocIsDangerous
 ParseURLW
 PathUnExpandEnvStringsA
 PathUnExpandEnvStringsW
 SHCreateStreamOnFileEx
 SHRegGetPathW
 SHRegGetValueA
 SHRegGetValueW
 SHRegSetPathW
 SHReleaseThreadRef
 StrToInt64ExA
 StrToInt64ExW

[T2EMBED.DLL]
 TTEmbedFontEx
 TTGetNewFontName
 TTRunValidationTestsEx

[USER32.DLL]
 AllowSetForegroundWindow
 AppendMenuW
 CalcMenuBar
 CallMsgFilterW
 CallWindowProcA
 CallWindowProcW
 ChangeMenuW
 ChangeWindowMessageFilter
 CharLowerBuffW
 CharLowerW
 CharNextExW
 CharNextW
 CharPrevExW
 CharPrevW
 CharToOemBuffW
 CharToOemW
 CharUpperBuffW
 CharUpperW
 CliImmSetHotKey
 CopyAcceleratorTableW
 CreateAcceleratorTableW
 CreateDialogIndirectParamW
 CreateDialogParamW
 CreateMDIWindowW
 CreateWindowExW
 CreateWindowW
 DefDlgProcW
 DefFrameProcW
 DefMDIChildProcW
 DefRawInputProc
 DefWindowProcW
 DeregisterShellHookWindow
 DialogBoxIndirectParamW
 DialogBoxParamW
 DisableProcessWindowsGhosting
 DispatchMessageW
 DrawCaptionTempW
 EnableWindow
 EnterCriticalPolicySection
 GetAltTabInfoA
 GetAncestor
 GetAppCompatFlags
 GetAppCompatFlags2
 GetClassInfoExW
 GetClassInfoW
 GetClassLongW
 GetCursorFrameInfo
 GetDlgItemTextW
 GetLastInputInfo
 GetLayeredWindowAttributes
 GetMessageA
 GetMessageW
 GetMouseMovePointsEx
 GetNextDlgTabItem
 GetRawInputBuffer
 GetRawInputData
 GetRawInputDeviceInfoA
 GetRawInputDeviceInfoW
 GetRawInputDeviceList
 GetRegisteredRawInputDevices
 GetWindowLongA
 GetWindowLongW
 GetWindowRgnBox
 GetWindowTextLengthW
 GetWindowTextW
 InitSharedTable
 InitializeLpkHooks
 InsertMenuW
 IsCharAlphaNumericW
 IsCharAlphaW
 IsCharLowerW
 IsCharUpperW
 IsDialogMessageW
 IsHungAppWindow
 IsServerSideWindow
 IsWinEventHookInstalled
 IsWindowInDestroy
 IsWindowUnicode
 KillSystemTimer
 LeaveCriticalPolicySection
 LoadMenuA
 LoadMenuIndirectW
 LoadMenuW
 LoadStringW
 LockSetForegroundWindow
 LockWorkStation
 MBToWCSEx
 MapVirtualKeyA
 MapVirtualKeyExA
 ModifyMenuW
 OemToCharBuffW
 OemToCharW
 PaintMenuBar
 PeekMessageA
 PeekMessageW
 PostMessageW
 PostThreadMessageW
 PrintWindow
 RealGetWindowClassA
 RealGetWindowClassW
 RegisterClassExW
 RegisterClassW
 RegisterPowerSettingNotification
 RegisterRawInputDevices
 RegisterServicesProcess
 RegisterShellHookWindow
 RegisterUserApiHook
 SendDlgItemMessageW
 SendMessageA
 SendMessageCallbackW
 SendMessageTimeoutW
 SendMessageW
 SendNotifyMessageW
 SetClassLongW
 SetDlgItemTextW
 SetLayeredWindowAttributes
 SetParent
 SetProcessDPIAware
 SetProcessDPIAware1
 SetSystemTimer
 SetWindowLongA
 SetWindowLongW
 SetWindowTextW
 SetWindowsHookExW
 SetWindowsHookW
 SystemParametersInfoA
 ToUnicode
 ToUnicodeEx
 TranslateAcceleratorW
 UnregisterClassW
 UnregisterPowerSettingNotification
 UnregisterUserApiHook
 UpdateLayeredWindow
 UpdatePerUserSystemParameters
 User32InitializeImmEntryTable
 UserHandleGrantAccess
 UserRealizePalette
 WCSToMBEx

[VERSION.DLL]
 GetFileVersionInfoExW
 GetFileVersionInfoSizeExW
 GetFileVersionInfoSizeW
 GetFileVersionInfoW
 VerFindFileW
 VerInstallFileW
 VerLanguageNameW
 VerQueryValueW

[WINSPOOL.DRV]
 GetPrinterDataExA
 GetPrinterDataExW
 IsValidDevmodeW
 SetPrinterDataExA
 SetPrinterDataExW
 XcvDataW
