var szApi =

//advapi32.dll

"AbortSystemShutdown,AbortSystemShutdown,AccessCheck,AccessCheckAndAuditAlarm,AddAccessAllowedAce,AddAccessAllowedAceEx,AddAccessAllowedObjectAce,AddAccessDeniedAce,AddAccessDeniedAceEx,AddAccessDeniedObjectAce,AddAce,AddAuditAccessAce,AddAuditAccessAceEx,AddAuditAccessObjectAce,AddUsersToEncryptedFile,AdjustTokenGroups,AdjustTokenPrivileges,AllocateAndInitializeSid,AllocateLocallyUniqueId,AreAllAccessesGranted,AreAnyAccessesGranted,BackupEventLog,BuildExplicitAccessWithName,BuildImpersonateExplicitAccessWithName,BuildImpersonateTrustee,BuildSecurityDescriptor,BuildTrusteeWithName,BuildTrusteeWithObjectsAndName,BuildTrusteeWithObjectsAndSid,BuildTrusteeWithSid,CancelOverlappedAccess,ChangeServiceConfig2,ChangeServiceConfig,CheckTokenMembership,ClearEventLog,CloseCodeAuthzLevel,CloseEncryptedFileRaw,CloseEventLog,CloseServiceHandle,CloseTrace,CommandLineFromMsiDescriptor,ComputeAccessTokenFromCodeAuthzLevel,ControlService,ControlTrace,ConvertAccessToSecurityDescriptor,ConvertSDToStringSDRootDomain,ConvertSecurityDescriptorToAccess,ConvertSecurityDescriptorToAccessNamed,ConvertSecurityDescriptorToAccess,ConvertSecurityDescriptorToStringSecurityDescriptor,ConvertSidToStringSid,ConvertStringSDToSDDomain,ConvertStringSDToSDRootDomain,ConvertStringSecurityDescriptorToSecurityDescriptor,ConvertStringSidToSid,ConvertToAutoInheritPrivateObjectSecurity,CopySid,CreateCodeAuthzLevel,CreatePrivateObjectSecurity,CreatePrivateObjectSecurityEx,CreatePrivateObjectSecurityWithMultipleInheritance,CreateProcessAsUser,CreateProcessAsUserSecure,CreateProcessAsUser,CreateProcessWithLogon,CreateRestrictedToken,CreateService,CreateTraceInstanceId,CreateWellKnownSid,CredDelete,CredEnumerate,CredFree,CredGetSessionTypes,CredGetTargetInfo,CredIsMarshaledCredential,CredMarshalCredential,CredProfileLoaded,CredRead,CredReadDomainCredentials,CredRead,CredRename,CredUnmarshalCredential,CredWrite,CredWriteDomainCredentials,CredWrite,CredpConvertCredential,CredpConvertTargetInfo,CredpDecodeCredential,CredpEncodeCredential,CryptAcquireContext,CryptContextAddRef,CryptCreateHash,CryptDecrypt,CryptDeriveKey,CryptDestroyHash,CryptDestroyKey,CryptDuplicateHash,CryptDuplicateKey,CryptEncrypt,CryptEnumProviderTypes,CryptEnumProviders,CryptExportKey,CryptGenKey,CryptGenRandom,CryptGetDefaultProvider,CryptGetHashParam,CryptGetKeyParam,CryptGetProvParam,CryptGetUserKey,CryptHashDat,CryptHashSessionKey,CryptImportKey,CryptReleaseContext,CryptSetHashParam,CryptSetKeyParam,CryptSetProvParam,CryptSetProvider,CryptSetProviderEx,CryptSetProvider,CryptSignHash,CryptVerifySignature,DecryptFile,DeleteAce,DeleteService,DeregisterEventSource,DestroyPrivateObjectSecurity,DuplicateEncryptionInfoFile,DuplicateToken,DuplicateTokenEx,ElfBackupEventLogFile,ElfChangeNotify,ElfClearEventLogFile,ElfCloseEventLog,ElfDeregisterEventSource,ElfFlushEventLog,ElfNumberOfRecords,ElfOldestRecord,ElfOpenBackupEventLog,ElfOpenEventLog,ElfReadEventLog,ElfRegisterEventSource,ElfReportEvent,EnableTrace,EncryptFile,EncryptedFileKeyInfo,EncryptionDisable,EnumDependentServices,EnumServiceGroup,EnumServicesStatus,EnumServicesStatusEx,EnumServicesStatus,EnumerateTraceGuids,EqualDomainSid,EqualPrefixSid,EqualSid,FileEncryptionStatus,FindFirstFreeAce,FlushTrace,FreeEncryptedFileKeyInfo,FreeEncryptionCertificateHashList,FreeInheritedFromArray,FreeSid,GetAccessPermissionsForObject,GetAce,GetAclInformation,GetAuditedPermissionsFromAcl,GetCurrentHwProfile,GetEffectiveRightsFromAcl,GetEventLogInformation,GetExplicitEntriesFromAcl,GetFileSecurity,GetInformationCodeAuthzLevel,GetInformationCodeAuthzPolicy,GetInheritanceSource,GetKernelObjectSecurity,GetLengthSid,GetLocalManagedApplicationDat,GetLocalManagedApplications,GetManagedApplicationCategories,GetManagedApplications,GetMultipleTrustee,GetMultipleTrusteeOperation,GetMultipleTrustee,GetNamedSecurityInfo,GetNamedSecurityInfoEx,GetNamedSecurityInfo,GetNumberOfEventLogRecords,GetOldestEventLogRecord,GetOverlappedAccessResults,GetPrivateObjectSecurity,GetSecurityDescriptorControl,GetSecurityDescriptorDacl,GetSecurityDescriptorGroup,GetSecurityDescriptorLength,GetSecurityDescriptorOwner,GetSecurityDescriptorRMControl,GetSecurityDescriptorSacl,GetSecurityInfo,GetSecurityInfoEx,GetServiceDisplayName,GetServiceKeyName,GetSidIdentifierAuthority,GetSidLengthRequired,GetSidSubAuthority,GetSidSubAuthorityCount,GetTokenInformation,GetTraceEnableFlags,GetTraceEnableLevel,GetTraceLoggerHandle,GetTrusteeForm,GetTrusteeName,GetTrusteeType,GetUserName,GetWindowsAccountDomainSid,I_ScGetCurrentGroupState,I_ScIsSecurityProcess,I_ScPnPGetServiceName,I_ScSendTSMessage,I_ScSetServiceBits,I_ScSetServiceBits,IdentifyCodeAuthzLevel,ImpersonateAnonymousToken,ImpersonateLoggedOnUser,ImpersonateNamedPipeClient,ImpersonateSelf,InitializeAcl,InitializeSecurityDescriptor,InitializeSid,InitiateSystemShutdown,InitiateSystemShutdownEx,InitiateSystemShutdown,InstallApplication,IsTextUnicode,IsTokenRestricted,IsTokenUntrusted,IsValidAcl,IsValidSecurityDescriptor,IsValidSid,IsWellKnownSid,LockServiceDatabase,LogonUser,LogonUserEx,LogonUserExEx,LogonUserEx,LogonUser,LookupAccountName,LookupAccountSid,LookupPrivilegeDisplayName,LookupPrivilegeName,LookupPrivilegeValue,LookupSecurityDescriptorParts,LsaAddAccountRights,LsaAddPrivilegesToAccount,LsaClearAuditLog,LsaClose,LsaCreateAccount,LsaCreateSecret,LsaCreateTrustedDomain,LsaCreateTrustedDomainEx,LsaDelete,LsaDeleteTrustedDomain,LsaEnumerateAccountRights,LsaEnumerateAccounts,LsaEnumerateAccountsWithUserRight,LsaEnumeratePrivileges,LsaEnumeratePrivilegesOfAccount,LsaEnumerateTrustedDomains,LsaEnumerateTrustedDomainsEx,LsaFreeMemory,LsaGetQuotasForAccount,LsaGetRemoteUserName,LsaGetSystemAccessAccount,LsaGetUserName,LsaICLookupNames,LsaICLookupNamesWithCreds,LsaICLookupSids,LsaICLookupSidsWithCreds,LsaLookupNames,LsaLookupNames2,LsaLookupPrivilegeDisplayName,LsaLookupPrivilegeName,LsaLookupPrivilegeValue,LsaLookupSids,LsaNtStatusToWinError,LsaOpenAccount,LsaOpenPolicy,LsaOpenPolicySce,LsaOpenSecret,LsaOpenTrustedDomain,LsaOpenTrustedDomainByName,LsaQueryDomainInformationPolicy,LsaQueryForestTrustInformation,LsaQueryInfoTrustedDomain,LsaQueryInformationPolicy,LsaQuerySecret,LsaQuerySecurityObject,LsaQueryTrustedDomainInfo,LsaQueryTrustedDomainInfoByName,LsaRemoveAccountRights,LsaRemovePrivilegesFromAccount,LsaRetrievePrivateDat,LsaSetDomainInformationPolicy,LsaSetForestTrustInformation,LsaSetInformationPolicy,LsaSetInformationTrustedDomain,LsaSetQuotasForAccount,LsaSetSecret,LsaSetSecurityObject,LsaSetSystemAccessAccount,LsaSetTrustedDomainInfoByName,LsaSetTrustedDomainInformation,LsaStorePrivateDat,MD4Final,MD4Init,MD4Update,MD5Final,MD5Init,MD5Update,MSChapSrvChangePassword,MSChapSrvChangePassword2,MakeAbsoluteSD,MakeAbsoluteSD2,MakeSelfRelativeSD,MapGenericMask,NotifyBootConfigStatus,NotifyChangeEventLog,ObjectCloseAuditAlarm,ObjectDeleteAuditAlarm,ObjectOpenAuditAlarm,ObjectPrivilegeAuditAlarm,OpenBackupEventLog,OpenEncryptedFileRaw,OpenEventLog,OpenProcessToken,OpenSCManager,OpenService,OpenThreadToken,OpenTrace,PrivilegeCheck,PrivilegedServiceAuditAlarm,ProcessIdleTasks,ProcessTrace,QueryAllTraces,QueryRecoveryAgentsOnEncryptedFile,QueryServiceConfig2,QueryServiceConfig,QueryServiceLockStatus,QueryServiceObjectSecurity,QueryServiceStatus,QueryServiceStatusEx,QueryTrace,QueryUsersOnEncryptedFile,QueryWindows31FilesMigration,ReadEncryptedFileRaw,ReadEventLog,RegCloseKey,RegConnectRegistry,RegCreateKey,RegCreateKeyEx,RegCreateKey,RegDeleteKey,RegDeleteValue,RegDisablePredefinedCache,RegEnumKey,RegEnumKeyEx,RegEnumKey,RegEnumValue,RegFlushKey,RegGetKeySecurity,RegLoadKey,RegNotifyChangeKeyValue,RegOpenCurrentUser,RegOpenKey,RegOpenKeyEx,RegOpenKey,RegOpenUserClassesRoot,RegOverridePredefKey,RegQueryInfoKey,RegQueryMultipleValues,RegQueryValue,RegQueryValueEx,RegQueryValue,RegReplaceKey,RegRestoreKey,RegSaveKey,RegSaveKeyEx,RegSaveKey,RegSetKeySecurity,RegSetValue,RegSetValueEx,RegSetValue,RegUnLoadKey,RegisterEventSource,RegisterIdleTask,RegisterServiceCtrlHandler,RegisterServiceCtrlHandlerEx,RegisterServiceCtrlHandler,RegisterTraceGuids,RemoveTraceCallback,RemoveUsersFromEncryptedFile,ReportEvent,RevertToSelf,SaferCloseLevel,SaferComputeTokenFromLevel,SaferCreateLevel,SaferGetLevelInformation,SaferGetPolicyInformation,SaferIdentifyLevel,SaferRecordEventLogEntry,SaferSetLevelInformation,SaferSetPolicyInformation,SaferiChangeRegistryScope,SaferiCompareTokenLevels,SaferiIsExecutableFileType,SaferiPopulateDefaultsInRegistry,SaferiRecordEventLogEntry,SaferiReplaceProcessThreadTokens,SaferiSearchMatchingHashRules,SetAclInformation,SetEntriesInAccessList,SetEntriesInAcl,SetEntriesInAuditList,SetFileSecurity,SetInformationCodeAuthzLevel,SetInformationCodeAuthzPolicy,SetKernelObjectSecurity,SetNamedSecurityInfo,SetNamedSecurityInfoEx,SetNamedSecurityInfo,SetPrivateObjectSecurity,SetPrivateObjectSecurityEx,SetSecurityDescriptorControl,SetSecurityDescriptorDacl,SetSecurityDescriptorGroup,SetSecurityDescriptorOwner,SetSecurityDescriptorRMControl,SetSecurityDescriptorSacl,SetSecurityInfo,SetSecurityInfoEx,SetServiceBits,SetServiceObjectSecurity,SetServiceStatus,SetThreadToken,SetTokenInformation,SetTraceCallback,SetUserFileEncryptionKey,StartService,StartServiceCtrlDispatcher,StartService,StartTrace,StopTrace,SynchronizeWindows31FilesAndWindowsNTRegistry,SystemFunction,TraceEvent,TraceEventInstance,TraceMessage,TraceMessageV,TreeResetNamedSecurityInfo,TrusteeAccessToObject,UninstallApplication,UnlockServiceDatabase,UnregisterIdleTask,UnregisterTraceGuids,UpdateTrace,WdmWmiServiceMain,WmiCloseBlock,WmiCloseTraceWithCursor,WmiConvertTimestamp,WmiDevInstToInstanceName,WmiEnumerateGuids,WmiExecuteMethod,WmiFileHandleToInstanceName,WmiFreeBuffer,WmiGetFirstTraceOffset,WmiGetNextEvent,WmiGetTraceHeader,WmiMofEnumerateResources,WmiNotificationRegistration,WmiOpenBlock,WmiOpenTraceWithCursor,WmiParseTraceEvent,WmiQueryAllData,WmiQueryAllDataMultiple,WmiQueryAllData,WmiQueryGuidInformation,WmiQuerySingleInstance,WmiQuerySingleInstanceMultiple,WmiQuerySingleInstance,WmiReceiveNotifications,WmiSetSingleInstance,WmiSetSingleItem,Wow64Win32ApiEntry,WriteEncryptedFileRaw," +

//gdi32.dll

"AbortDoc,AbortPath,AddFontMemResourceEx,AddFontResource,AddFontResourceEx,AddFontResourceTracking,AddFontResource,AngleArc,AnimatePalette,AnyLinkedFonts,Arc,ArcTo,BeginPath,BitBlt,CancelDC,CheckColorsInGamut,ChoosePixelFormat,Chord,ClearBitmapAttributes,ClearBrushAttributes,CloseEnhMetaFile,CloseFigure,CloseMetaFile,ColorCorrectPalette,ColorMatchToTarget,CombineRgn,CombineTransform,CopyEnhMetaFile,CopyMetaFile,CreateBitmap,CreateBitmapIndirect,CreateBrushIndirect,CreateColorSpace,CreateCompatibleBitmap,CreateCompatibleDC,CreateDC,CreateDIBPatternBrush,CreateDIBPatternBrushPt,CreateDIBSection,CreateDIBitmap,CreateDiscardableBitmap,CreateEllipticRgn,CreateEllipticRgnIndirect,CreateEnhMetaFile,CreateFont,CreateFontIndirect,CreateFontIndirectEx,CreateFontIndirect,CreateFont,CreateHalftonePalette,CreateHatchBrush,CreateIC,CreateMetaFile,CreatePalette,CreatePatternBrush,CreatePen,CreatePenIndirect,CreatePolyPolygonRgn,CreatePolygonRgn,CreateRectRgn,CreateRectRgnIndirect,CreateRoundRectRgn,CreateScalableFontResource,CreateSolidBrush,DPtoLP,DeleteColorSpace,DeleteDC,DeleteEnhMetaFile,DeleteMetaFile,DeleteObject,DescribePixelFormat,DeviceCapabilitiesEx,DrawEscape,Ellipse,EnableEUDC,EndDoc,EndFormPage,EndPage,EndPath,EngAcquireSemaphore,EngAlphaBlend,EngAssociateSurface,EngBitBlt,EngCheckAbort,EngComputeGlyphSet,EngCopyBits,EngCreateBitmap,EngCreateClip,EngCreateDeviceBitmap,EngCreateDeviceSurface,EngCreatePalette,EngCreateSemaphore,EngDeleteClip,EngDeletePalette,EngDeletePath,EngDeleteSemaphore,EngDeleteSurface,EngEraseSurface,EngFillPath,EngFindResource,EngFreeModule,EngGetCurrentCodePage,EngGetDriverName,EngGetPrinterDataFileName,EngGradientFill,EngLineTo,EngLoadModule,EngLockSurface,EngMarkBandingSurface,EngMultiByteToUnicodeN,EngMultiByteToWideChar,EngPaint,EngPlgBlt,EngQueryEMFInfo,EngQueryLocalTime,EngReleaseSemaphore,EngStretchBlt,EngStretchBltROP,EngStrokeAndFillPath,EngStrokePath,EngTextOut,EngTransparentBlt,EngUnicodeToMultiByteN,EngUnlockSurface,EngWideCharToMultiByte,EnumEnhMetaFile,EnumFontFamilies,EnumFontFamiliesEx,EnumFontFamilies,EnumFonts,EnumICMProfiles,EnumMetaFile,EnumObjects,EqualRgn,Escape,EudcLoadLink,EudcUnloadLink,ExcludeClipRect,ExtCreatePen,ExtCreateRegion,ExtEscape,ExtFloodFill,ExtSelectClipRgn,ExtTextOut,FillPath,FillRgn,FixBrushOrgEx,FlattenPath,FloodFill,FontIsLinked,FrameRgn,GdiAddFontResource,GdiAddGlsBounds,GdiAddGlsRecord,GdiAlphaBlend,GdiArtificialDecrementDriver,GdiCleanCacheDC,GdiComment,GdiConsoleTextOut,GdiConvertAndCheckDC,GdiConvertBitmap,GdiConvertBitmapV5,GdiConvertBrush,GdiConvertDC,GdiConvertEnhMetaFile,GdiConvertFont,GdiConvertMetaFilePict,GdiConvertPalette,GdiConvertRegion,GdiConvertToDevmode,GdiCreateLocalEnhMetaFile,GdiCreateLocalMetaFilePict,GdiDeleteLocalDC,GdiDeleteSpoolFileHandle,GdiDescribePixelFormat,GdiDllInitialize,GdiDrawStream,GdiEndDocEMF,GdiEndPageEMF,GdiFixUpHandle,GdiFlush,GdiFullscreenControl,GdiGetBatchLimit,GdiGetCharDimensions,GdiGetCodePage,GdiGetDC,GdiGetDevmodeForPage,GdiGetLocalBrush,GdiGetLocalDC,GdiGetLocalFont,GdiGetPageCount,GdiGetPageHandle,GdiGetSpoolFileHandle,GdiGetSpoolMessage,GdiGradientFill,GdiInitSpool,GdiInitializeLanguagePack,GdiIsMetaFileDC,GdiIsMetaPrintDC,GdiIsPlayMetafileDC,GdiPlayDCScript,GdiPlayEMF,GdiPlayJournal,GdiPlayPageEMF,GdiPlayPrivatePageEMF,GdiPlayScript,GdiPrinterThunk,GdiProcessSetup,GdiQueryFonts,GdiQueryTable,GdiRealizationInfo,GdiReleaseDC,GdiReleaseLocalDC,GdiResetDCEMF,GdiSetAttrs,GdiSetBatchLimit,GdiSetLastError,GdiSetPixelFormat,GdiSetServerAttr,GdiStartDocEMF,GdiStartPageEMF,GdiSwapBuffers,GdiTransparentBlt,GdiValidateHandle,GetArcDirection,GetAspectRatioFilterEx,GetBitmapAttributes,GetBitmapBits,GetBitmapDimensionEx,GetBkColor,GetBkMode,GetBoundsRect,GetBrushAttributes,GetBrushOrgEx,GetCharABCWidths,GetCharABCWidthsFloat,GetCharABCWidthsI,GetCharABCWidths,GetCharWidth32,GetCharWidth,GetCharWidthFloat,GetCharWidthI,GetCharWidthInfo,GetCharWidth,GetCharacterPlacement,GetClipBox,GetClipRgn,GetColorAdjustment,GetColorSpace,GetCurrentObject,GetCurrentPositionEx,GetDCBrushColor,GetDCOrgEx,GetDCPenColor,GetDIBColorTable,GetDIBits,GetDeviceCaps,GetDeviceGammaRamp,GetETM,GetEUDCTimeStamp,GetEUDCTimeStampEx,GetEnhMetaFile,GetEnhMetaFileBits,GetEnhMetaFileDescription,GetEnhMetaFileHeader,GetEnhMetaFilePaletteEntries,GetEnhMetaFilePixelFormat,GetEnhMetaFile,GetFontAssocStatus,GetFontDat,GetFontLanguageInfo,GetFontResourceInfo,GetFontUnicodeRanges,GetGlyphIndices,GetGlyphOutline,GetGlyphOutline,GetGlyphOutlineWow,GetGraphicsMode,GetHFONT,GetICMProfile,GetKerningPairs,GetKerningPairs,GetLayout,GetLogColorSpace,GetMapMode,GetMetaFile,GetMetaFileBitsEx,GetMetaFile,GetMetaRgn,GetMiterLimit,GetNearestColor,GetNearestPaletteIndex,GetObject,GetObjectType,GetObject,GetOutlineTextMetrics,GetPaletteEntries,GetPath,GetPixel,GetPixelFormat,GetPolyFillMode,GetROP2,GetRandomRgn,GetRasterizerCaps,GetRegionDat,GetRelAbs,GetRgnBox,GetStockObject,GetStretchBltMode,GetStringBitmap,GetSystemPaletteEntries,GetSystemPaletteUse,GetTextAlign,GetTextCharacterExtr,GetTextCharset,GetTextCharsetInfo,GetTextColor,GetTextExtentExPoint,GetTextExtentExPointI,GetTextExtentExPoint,GetTextExtentExPointWPri,GetTextExtentPoint32,GetTextExtentPoint,GetTextExtentPointI,GetTextExtentPoint,GetTextFace,GetTextFaceAlias,GetTextFace,GetTextMetrics,GetTransform,GetViewportExtEx,GetViewportOrgEx,GetWinMetaFileBits,GetWindowExtEx,GetWindowOrgEx,GetWorldTransform,IntersectClipRect,InvertRgn,IsValidEnhMetaRecord,IsValidEnhMetaRecordOffExt,LPtoDP,LineDD,LineTo,MaskBlt,MirrorRgn,ModifyWorldTransform,MoveToEx,NamedEscape,OffsetClipRgn,OffsetRgn,OffsetViewportOrgEx,OffsetWindowOrgEx,PaintRgn,PatBlt,PathToRegion,Pie,PlayEnhMetaFile,PlayEnhMetaFileRecord,PlayMetaFile,PlayMetaFileRecord,PlgBlt,PolyBezier,PolyBezierTo,PolyDraw,PolyPatBlt,PolyPolygon,PolyPolyline,PolyTextOut,Polygon,Polyline,PolylineTo,PtInRegion,PtVisible,QueryFontAssocStatus,RealizePalette,RectInRegion,RectVisible,Rectangle,RemoveFontMemResourceEx,RemoveFontResource,RemoveFontResourceEx,RemoveFontResourceTracking,RemoveFontResource,ResetDC,ResizePalette,RestoreDC,RoundRect,SaveDC,ScaleViewportExtEx,ScaleWindowExtEx,SelectBrushLocal,SelectClipPath,SelectClipRgn,SelectFontLocal,SelectObject,SelectPalette,SetAbortProc,SetArcDirection,SetBitmapAttributes,SetBitmapBits,SetBitmapDimensionEx,SetBkColor,SetBkMode,SetBoundsRect,SetBrushAttributes,SetBrushOrgEx,SetColorAdjustment,SetColorSpace,SetDCBrushColor,SetDCPenColor,SetDIBColorTable,SetDIBits,SetDIBitsToDevice,SetDeviceGammaRamp,SetEnhMetaFileBits,SetFontEnumeration,SetGraphicsMode,SetICMMode,SetICMProfile,SetLayout,SetLayoutWidth,SetMagicColors,SetMapMode,SetMapperFlags,SetMetaFileBitsEx,SetMetaRgn,SetMiterLimit,SetPaletteEntries,SetPixel,SetPixelFormat,SetPixelV,SetPolyFillMode,SetROP2,SetRectRgn,SetRelAbs,SetStretchBltMode,SetSystemPaletteUse,SetTextAlign,SetTextCharacterExtr,SetTextColor,SetTextJustification,SetViewportExtEx,SetViewportOrgEx,SetVirtualResolution,SetWinMetaFileBits,SetWindowExtEx,SetWindowOrgEx,SetWorldTransform,StartDoc,StartFormPage,StartPage,StretchBlt,StretchDIBits,StrokeAndFillPath,StrokePath,SwapBuffers,TextOut,TranslateCharsetInfo,UnloadNetworkFonts,UnrealizeObject,UpdateColors,UpdateICMRegKey,WidenPath,bInitSystemAndFontsDirectories,bMakePathName,cGetTTFFromFOT,gdiPlaySpoolStream," +

//hal.dll

"ExAcquireFastMutex,ExReleaseFastMutex,ExTryToAcquireFastMutex,HalAcquireDisplayOwnership,HalAdjustResourceList,HalAllProcessorsStarted,HalAllocateAdapterChannel,HalAllocateCommonBuffer,HalAllocateCrashDumpRegisters,HalAssignSlotResources,HalBeginSystemInterrupt,HalCalibratePerformanceCounter,HalClearSoftwareInterrupt,HalDisableSystemInterrupt,HalDisplayString,HalEnableSystemInterrupt,HalEndSystemInterrupt,HalFlushCommonBuffer,HalFreeCommonBuffer,HalGetAdapter,HalGetBusDat,HalGetBusDataByOffset,HalGetEnvironmentVariable,HalGetInterruptVector,HalHandleNMI,HalInitSystem,HalInitializeProcessor,HalMakeBeep,HalProcessorIdle,HalQueryDisplayParameters,HalQueryRealTimeClock,HalReadDmaCounter,HalReportResourceUsage,HalRequestIpi,HalRequestSoftwareInterrupt,HalReturnToFirmware,HalSetBusDat,HalSetBusDataByOffset,HalSetDisplayParameters,HalSetEnvironmentVariable,HalSetProfileInterval,HalSetRealTimeClock,HalSetTimeIncrement,HalStartNextProcessor,HalStartProfileInterrupt,HalStopProfileInterrupt,HalSystemVectorDispatchEntry,HalTranslateBusAddress,IoAssignDriveLetters,IoFlushAdapterBuffers,IoFreeAdapterChannel,IoFreeMapRegisters,IoMapTransfer,IoReadPartitionTable,IoSetPartitionInformation,IoWritePartitionTable,KdComPortInUse,KeAcquireInStackQueuedSpinLock,KeAcquireInStackQueuedSpinLockRaiseToSynch,KeAcquireQueuedSpinLock,KeAcquireQueuedSpinLockRaiseToSynch,KeAcquireSpinLock,KeAcquireSpinLockRaiseToSynch,KeFlushWriteBuffer,KeGetCurrentIrql,KeLowerIrql,KeQueryPerformanceCounter,KeRaiseIrql,KeRaiseIrqlToDpcLevel,KeRaiseIrqlToSynchLevel,KeReleaseInStackQueuedSpinLock,KeReleaseQueuedSpinLock,KeReleaseSpinLock,KeStallExecutionProcessor,KeTryToAcquireQueuedSpinLock,KeTryToAcquireQueuedSpinLockRaiseToSynch,KfAcquireSpinLock,KfLowerIrql,KfRaiseIrql,KfReleaseSpinLock," +

//kernel32.dll

"ActivateActCtx,AddAtom,AddConsoleAlias,AddLocalAlternateComputerName,AddRefActCtx,AddVectoredExceptionHandler,AllocConsole,AllocateUserPhysicalPages,AreFileApisANSI,AssignProcessToJobObject,AttachConsole,BackupRead,BackupSeek,BackupWrite,BaseCheckAppcompatCache,BaseCleanupAppcompatCache,BaseCleanupAppcompatCacheSupport,BaseDumpAppcompatCache,BaseFlushAppcompatCache,BaseInitAppcompatCache,BaseInitAppcompatCacheSupport,BaseProcessInitPostImport,BaseQueryModuleDat,BaseUpdateAppcompatCache,BasepCheckWinSaferRestrictions,Beep,BeginUpdateResource,BindIoCompletionCallback,BuildCommDCB,BuildCommDCBAndTimeouts,BuildCommDCB,CallNamedPipe,CancelDeviceWakeupRequest,CancelIo,CancelTimerQueueTimer,CancelWaitableTimer,ChangeTimerQueueTimer,CheckNameLegalDOS8Dot3,CheckRemoteDebuggerPresent,ClearCommBreak,ClearCommError,CloseConsoleHandle,CloseHandle,CloseProfileUserMapping,CmdBatNotification,CommConfigDialog,CompareFileTime,CompareString,ConnectNamedPipe,ConsoleMenuControl,ContinueDebugEvent,ConvertDefaultLocale,ConvertFiberToThread,ConvertThreadToFiber,CopyFile,CopyFileEx,CopyFile,CopyLZFile,CreateActCtx,CreateConsoleScreenBuffer,CreateDirectory,CreateDirectoryEx,CreateDirectory,CreateEvent,CreateFiber,CreateFiberEx,CreateFile,CreateFileMapping,CreateFile,CreateHardLink,CreateIoCompletionPort,CreateJobObject,CreateJobSet,CreateMailslot,CreateMemoryResourceNotification,CreateMutex,CreateNamedPipe,CreateNlsSecurityDescriptor,CreatePipe,CreateProcess,CreateProcessInternal,CreateProcessInternalWSecure,CreateProcess,CreateRemoteThread,CreateSemaphore,CreateSocketHandle,CreateTapePartition,CreateThread,CreateTimerQueue,CreateTimerQueueTimer,CreateToolhelp32Snapshot,CreateVirtualBuffer,CreateWaitableTimer,DeactivateActCtx,DebugActiveProcess,DebugActiveProcessStop,DebugBreak,DebugBreakProcess,DebugSetProcessKillOnExit,DecodePointer,DecodeSystemPointer,DefineDosDevice,DelayLoadFailureHook,DeleteAtom,DeleteCriticalSection,DeleteFiber,DeleteFile,DeleteTimerQueue,DeleteTimerQueueEx,DeleteTimerQueueTimer,DeleteVolumeMountPoint,DeviceIoControl,DisableThreadLibraryCalls,DisconnectNamedPipe,DnsHostnameToComputerName,DosDateTimeToFileTime,DosPathToSessionPath,DuplicateConsoleHandle,DuplicateHandle,EncodePointer,EncodeSystemPointer,EndUpdateResource,EnterCriticalSection,EnumCalendarInfo,EnumCalendarInfoEx,EnumCalendarInfo,EnumDateFormats,EnumDateFormatsEx,EnumDateFormats,EnumLanguageGroupLocales,EnumResourceLanguages,EnumResourceNames,EnumResourceTypes,EnumSystemCodePages,EnumSystemGeoID,EnumSystemLanguageGroups,EnumSystemLocales,EnumTimeFormats,EnumUILanguages,EnumerateLocalComputerNames,EraseTape,EscapeCommFunction,ExitProcess,ExitThread,ExitVDM,ExpandEnvironmentStrings,ExpungeConsoleCommandHistory,ExtendVirtualBuffer,FatalAppExit,FatalExit,FileTimeToDosDateTime,FileTimeToLocalFileTime,FileTimeToSystemTime,FillConsoleOutputAttribute,FillConsoleOutputCharacter,FindActCtxSectionGuid,FindActCtxSectionString,FindAtom,FindClose,FindCloseChangeNotification,FindFirstChangeNotification,FindFirstFile,FindFirstFileEx,FindFirstFile,FindFirstVolume,FindFirstVolumeMountPoint,FindFirstVolume,FindNextChangeNotification,FindNextFile,FindNextVolume,FindNextVolumeMountPoint,FindNextVolume,FindResource,FindResourceEx,FindResource,FindVolumeClose,FindVolumeMountPointClose,FlushConsoleInputBuffer,FlushFileBuffers,FlushInstructionCache,FlushViewOfFile,FoldString,FormatMessage,FreeConsole,FreeEnvironmentStrings,FreeLibrary,FreeLibraryAndExitThread,FreeResource,FreeUserPhysicalPages,FreeVirtualBuffer,GenerateConsoleCtrlEvent,GetACP,GetAtomName,GetBinaryType,GetBinaryType,GetCPFileNameFromRegistry,GetCPInfo,GetCPInfoEx,GetCalendarInfo,GetComPlusPackageInstallStatus,GetCommConfig,GetCommMask,GetCommModemStatus,GetCommProperties,GetCommState,GetCommTimeouts,GetCommandLine,GetCompressedFileSize,GetComputerName,GetComputerNameEx,GetComputerName,GetConsoleAlias,GetConsoleAliasExes,GetConsoleAliasExesLength,GetConsoleAliasExes,GetConsoleAlias,GetConsoleAliases,GetConsoleAliasesLength,GetConsoleAliases,GetConsoleCP,GetConsoleCharType,GetConsoleCommandHistory,GetConsoleCommandHistoryLength,GetConsoleCommandHistory,GetConsoleCursorInfo,GetConsoleCursorMode,GetConsoleDisplayMode,GetConsoleFontInfo,GetConsoleFontSize,GetConsoleHardwareState,GetConsoleInputExeName,GetConsoleInputWaitHandle,GetConsoleKeyboardLayoutName,GetConsoleMode,GetConsoleNlsMode,GetConsoleOutputCP,GetConsoleProcessList,GetConsoleScreenBufferInfo,GetConsoleSelectionInfo,GetConsoleTitle,GetConsoleWindow,GetCurrencyFormat,GetCurrentActCtx,GetCurrentConsoleFont,GetCurrentDirectory,GetCurrentProcess,GetCurrentProcessId,GetCurrentThread,GetCurrentThreadId,GetDateFormat,GetDefaultCommConfig,GetDefaultSortkeySize,GetDevicePowerState,GetDiskFreeSpace,GetDiskFreeSpaceEx,GetDiskFreeSpace,GetDllDirectory,GetDriveType,GetEnvironmentStrings,GetEnvironmentStrings,GetEnvironmentVariable,GetExitCodeProcess,GetExitCodeThread,GetExpandedName,GetFileAttributes,GetFileAttributesEx,GetFileAttributes,GetFileInformationByHandle,GetFileSize,GetFileSizeEx,GetFileTime,GetFileType,GetFirmwareEnvironmentVariable,GetFullPathName,GetGeoInfo,GetHandleContext,GetHandleInformation,GetLargestConsoleWindowSize,GetLastError,GetLinguistLangSize,GetLocalTime,GetLocaleInfo,GetLogicalDriveStrings,GetLogicalDrives,GetLongPathName,GetMailslotInfo,GetModuleFileName,GetModuleHandle,GetModuleHandleEx,GetModuleHandle,GetNamedPipeHandleState,GetNamedPipeInfo,GetNativeSystemInfo,GetNextVDMCommand,GetNlsSectionName,GetNumaAvailableMemory,GetNumaAvailableMemoryNode,GetNumaHighestNodeNumber,GetNumaNodeProcessorMask,GetNumaProcessorMap,GetNumaProcessorNode,GetNumberFormat,GetNumberOfConsoleFonts,GetNumberOfConsoleInputEvents,GetNumberOfConsoleMouseButtons,GetOEMCP,GetOverlappedResult,GetPriorityClass,GetPrivateProfileInt,GetPrivateProfileSection,GetPrivateProfileSectionNames,GetPrivateProfileSection,GetPrivateProfileString,GetPrivateProfileStruct,GetProcAddress,GetProcessAffinityMask,GetProcessHandleCount,GetProcessHeap,GetProcessHeaps,GetProcessId,GetProcessIoCounters,GetProcessPriorityBoost,GetProcessShutdownParameters,GetProcessTimes,GetProcessVersion,GetProcessWorkingSetSize,GetProfileInt,GetProfileSection,GetProfileString,GetQueuedCompletionStatus,GetShortPathName,GetStartupInfo,GetStdHandle,GetStringType,GetStringTypeEx,GetStringType,GetSystemDefaultLCID,GetSystemDefaultLangID,GetSystemDefaultUILanguage,GetSystemDirectory,GetSystemInfo,GetSystemPowerStatus,GetSystemRegistryQuot,GetSystemTime,GetSystemTimeAdjustment,GetSystemTimeAsFileTime,GetSystemTimes,GetSystemWindowsDirectory,GetSystemWow64Directory,GetSystemWow64Directory,GetTapeParameters,GetTapePosition,GetTapeStatus,GetTempFileName,GetTempPath,GetThreadContext,GetThreadIOPendingFlag,GetThreadLocale,GetThreadPriority,GetThreadPriorityBoost,GetThreadSelectorEntry,GetThreadTimes,GetTickCount,GetTimeFormat,GetTimeZoneInformation,GetUserDefaultLCID,GetUserDefaultLangID,GetUserDefaultUILanguage,GetUserGeoID,GetVDMCurrentDirectories,GetVersion,GetVersionEx,GetVolumeInformation,GetVolumeNameForVolumeMountPoint,GetVolumePathName,GetVolumePathNamesForVolumeName,GetWindowsDirectory,GetWriteWatch,GlobalAddAtom,GlobalAlloc,GlobalCompact,GlobalDeleteAtom,GlobalFindAtom,GlobalFix,GlobalFlags,GlobalFree,GlobalGetAtomName,GlobalGetetomName,GlobalHandle,GlobalLock,GlobalMemoryStatus,GlobalMemoryStatusEx,GlobalReAlloc,GlobalSize,GlobalUnWire,GlobalUnfix,GlobalUnlock,GlobalWire,Heap32First,Heap32ListFirst,Heap32ListNext,Heap32Next,HeapAlloc,HeapCompact,HeapCreate,HeapCreateTags,HeapDestroy,HeapExtend,HeapFree,HeapLock,HeapQueryInformation,HeapQueryTag,HeapReAlloc,HeapSetInformation,HeapSize,HeapSummary,HeapUnlock,HeapUsage,HeapValidate,HeapWalk,InitAtomTable,InitializeCriticalSection,InitializeCriticalSectionAndSpinCount,InitializeSListHead,InterlockedCompareExchange,InterlockedDecrement,InterlockedExchange,InterlockedExchangeAdd,InterlockedFlushSList,InterlockedIncrement,InterlockedPopEntrySList,InterlockedPushEntrySList,InvalidateConsoleDIBits,IsBadCodePtr,IsBadHugeReadPtr,IsBadHugeWritePtr,IsBadReadPtr,IsBadStringPtr,IsBadWritePtr,IsDBCSLeadByte,IsDBCSLeadByteEx,IsDebuggerPresent,IsProcessInJob,IsProcessorFeaturePresent,IsSystemResumeAutomatic,IsValidCodePage,IsValidLanguageGroup,IsValidLocale,IsValidUILanguage,IsWow64Process,LCMapString,LZClose,LZCloseFile,LZCopy,LZCreateFile,LZDone,LZInit,LZOpenFile,LZRead,LZSeek,LZStart,LeaveCriticalSection,LoadLibrary,LoadLibraryEx,LoadLibrary,LoadModule,LoadResource,LocalAlloc,LocalCompact,LocalFileTimeToFileTime,LocalFlags,LocalFree,LocalHandle,LocalLock,LocalReAlloc,LocalShrink,LocalSize,LocalUnlock,LockFile,LockFileEx,LockResource,MapUserPhysicalPages,MapUserPhysicalPagesScatter,MapViewOfFile,MapViewOfFileEx,Module32First,Module32First,Module32Next,Module32Next,MoveFile,MoveFileEx,MoveFile,MoveFileWithProgress,MulDiv,MultiByteToWideChar,NlsConvertIntegerToString,NlsGetCacheUpdateCount,NlsResetProcessLocale,NumaVirtualQueryNode,OpenConsole,OpenDataFile,OpenEvent,OpenFile,OpenFileMapping,OpenJobObject,OpenMutex,OpenProcess,OpenProfileUserMapping,OpenSemaphore,OpenThread,OpenWaitableTimer,OutputDebugString,PeekConsoleInput,PeekNamedPipe,PostQueuedCompletionStatus,PrepareTape,PrivCopyFileEx,PrivMoveFileIdentity,Process32First,Process32First,Process32Next,Process32Next,ProcessIdToSessionId,PulseEvent,PurgeComm,QueryActCtx,QueryDepthSList,QueryDosDevice,QueryInformationJobObject,QueryMemoryResourceNotification,QueryPerformanceCounter,QueryPerformanceFrequency,QueryWin31IniFilesMappedToRegistry,QueueUserAPC,QueueUserWorkItem,RaiseException,ReadConsole,ReadConsoleInput,ReadConsoleInputEx,ReadConsoleInput,ReadConsoleOutput,ReadConsoleOutputAttribute,ReadConsoleOutputCharacter,ReadConsoleOutput,ReadConsole,ReadDirectoryChanges,ReadFile,ReadFileEx,ReadFileScatter,ReadProcessMemory,RegisterConsoleIME,RegisterConsoleOS2,RegisterConsoleVDM,RegisterWaitForInputIdle,RegisterWaitForSingleObject,RegisterWaitForSingleObjectEx,RegisterWowBaseHandlers,RegisterWowExec,ReleaseActCtx,ReleaseMutex,ReleaseSemaphore,RemoveDirectory,RemoveLocalAlternateComputerName,RemoveVectoredExceptionHandler,ReplaceFile,ReplaceFile,RequestDeviceWakeup,RequestWakeupLatency,ResetEvent,ResetWriteWatch,RestoreLastError,ResumeThread,RtlCaptureContext,RtlCaptureStackBackTrace,RtlFillMemory,RtlMoveMemory,RtlUnwind,RtlZeroMemory,ScrollConsoleScreenBuffer,SearchPath,SetCPGlobal,SetCalendarInfo,SetClientTimeZoneInformation,SetComPlusPackageInstallStatus,SetCommBreak,SetCommConfig,SetCommMask,SetCommState,SetCommTimeouts,SetComputerName,SetComputerNameEx,SetComputerName,SetConsoleActiveScreenBuffer,SetConsoleCP,SetConsoleCommandHistoryMode,SetConsoleCtrlHandler,SetConsoleCursor,SetConsoleCursorInfo,SetConsoleCursorMode,SetConsoleCursorPosition,SetConsoleDisplayMode,SetConsoleFont,SetConsoleHardwareState,SetConsoleIcon,SetConsoleInputExeName,SetConsoleKeyShortcuts,SetConsoleLocalEUDC,SetConsoleMaximumWindowSize,SetConsoleMenuClose,SetConsoleMode,SetConsoleNlsMode,SetConsoleNumberOfCommands,SetConsoleOS2OemFormat,SetConsoleOutputCP,SetConsolePalette,SetConsoleScreenBufferSize,SetConsoleTextAttribute,SetConsoleTitle,SetConsoleWindowInfo,SetCriticalSectionSpinCount,SetCurrentDirectory,SetDefaultCommConfig,SetDllDirectory,SetEndOfFile,SetEnvironmentVariable,SetErrorMode,SetEvent,SetFileApisToANSI,SetFileApisToOEM,SetFileAttributes,SetFilePointer,SetFilePointerEx,SetFileShortName,SetFileTime,SetFileValidDat,SetFirmwareEnvironmentVariable,SetHandleContext,SetHandleCount,SetHandleInformation,SetInformationJobObject,SetLastConsoleEventActive,SetLastError,SetLocalPrimaryComputerName,SetLocalTime,SetLocaleInfo,SetMailslotInfo,SetMessageWaitingIndicator,SetNamedPipeHandleState,SetPriorityClass,SetProcessAffinityMask,SetProcessPriorityBoost,SetProcessShutdownParameters,SetProcessWorkingSetSize,SetSearchPathMode,SetStdHandle,SetSystemPowerState,SetSystemTime,SetSystemTimeAdjustment,SetTapeParameters,SetTapePosition,SetTermsrvAppInstallMode,SetThreadAffinityMask,SetThreadContext,SetThreadExecutionState,SetThreadIdealProcessor,SetThreadLocale,SetThreadPriority,SetThreadPriorityBoost,SetThreadUILanguage,SetTimeZoneInformation,SetTimerQueueTimer,SetUnhandledExceptionFilter,SetUserGeoID,SetVDMCurrentDirectories,SetVolumeLabel,SetVolumeMountPoint,SetWaitableTimer,SetupComm,ShowConsoleCursor,SignalObjectAndWait,SizeofResource,Sleep,SleepEx,SuspendThread,SwitchToFiber,SwitchToThread,SystemTimeToFileTime,SystemTimeToTzSpecificLocalTime,TerminateJobObject,TerminateProcess,TerminateThread,TermsrvAppInstallMode,Thread32First,Thread32Next,TlsAlloc,TlsFree,TlsGetValue,TlsSetValue,Toolhelp32ReadProcessMemory,TransactNamedPipe,TransmitCommChar,TrimVirtualBuffer,TryEnterCriticalSection,TzSpecificLocalTimeToSystemTime,UTRegister,UTUnRegister,UnhandledExceptionFilter,UnlockFile,UnlockFileEx,UnmapViewOfFile,UnregisterConsoleIME,UnregisterWait,UnregisterWaitEx,UpdateResource,VDMConsoleOperation,VDMOperationStarted,ValidateLCType,ValidateLocale,VerLanguageName,VerSetConditionMask,VerifyConsoleIoHandle,VerifyVersionInfo,VirtualAlloc,VirtualAllocEx,VirtualBufferExceptionHandler,VirtualFree,VirtualFreeEx,VirtualLock,VirtualProtect,VirtualProtectEx,VirtualQuery,VirtualQueryEx,VirtualUnlock,WTSGetActiveConsoleSessionId,WaitCommEvent,WaitForDebugEvent,WaitForMultipleObjects,WaitForMultipleObjectsEx,WaitForSingleObject,WaitForSingleObjectEx,WaitNamedPipe,WideCharToMultiByte,WinExec,WriteConsole,WriteConsoleInput,WriteConsoleInputVDM,WriteConsoleInput,WriteConsoleOutput,WriteConsoleOutputAttribute,WriteConsoleOutputCharacter,WriteConsoleOutput,WriteConsole,WriteFile,WriteFileEx,WriteFileGather,WritePrivateProfileSection,WritePrivateProfileString,WritePrivateProfileStruct,WriteProcessMemory,WriteProfileSection,WriteProfileString,WriteTapemark," +

//ntoskrnl.exe

"CcCanIWrite,CcCopyRead,CcCopyWrite,CcDeferWrite,CcFastCopyRead,CcFastCopyWrite,CcFastMdlReadWait,CcFastReadNotPossible,CcFastReadWait,CcFlushCache,CcGetDirtyPages,CcGetFileObjectFromBcb,CcGetFileObjectFromSectionPtrs,CcGetFlushedValidDat,CcGetLsnForFileObject,CcInitializeCacheMap,CcIsThereDirtyDat,CcMapDat,CcMdlRead,CcMdlReadComplete,CcMdlWriteAbort,CcMdlWriteComplete,CcPinMappedDat,CcPinRead,CcPrepareMdlWrite,CcPreparePinWrite,CcPurgeCacheSection,CcRemapBcb,CcRepinBcb,CcScheduleReadAhead,CcSetAdditionalCacheAttributes,CcSetBcbOwnerPointer,CcSetDirtyPageThreshold,CcSetDirtyPinnedDat,CcSetFileSizes,CcSetLogHandleForFile,CcSetReadAheadGranularity,CcUninitializeCacheMap,CcUnpinDat,CcUnpinDataForThread,CcUnpinRepinnedBcb,CcWaitForCurrentLazyWriterActivity,CcZeroDat,CmRegisterCallback,CmUnRegisterCallback,DbgBreakPoint,DbgBreakPointWithStatus,DbgLoadImageSymbols,DbgPrint,DbgPrintEx,DbgPrintReturnControlC,DbgPrompt,DbgQueryDebugFilterState,DbgSetDebugFilterState,ExAcquireFastMutexUnsafe,ExAcquireResourceExclusiveLite,ExAcquireResourceSharedLite,ExAcquireRundownProtection,ExAcquireRundownProtectionEx,ExAcquireSharedStarveExclusive,ExAcquireSharedWaitForExclusive,ExAllocateFromPagedLookasideList,ExAllocatePool,ExAllocatePoolWithQuot,ExAllocatePoolWithQuotaTag,ExAllocatePoolWithTag,ExAllocatePoolWithTagPriority,ExConvertExclusiveToSharedLite,ExCreateCallback,ExDeleteNPagedLookasideList,ExDeletePagedLookasideList,ExDeleteResourceLite,ExDesktopObjectType,ExDisableResourceBoostLite,ExEnumHandleTable,ExEventObjectType,ExExtendZone,ExFreePool,ExFreePoolWithTag,ExFreeToPagedLookasideList,ExGetCurrentProcessorCounts,ExGetCurrentProcessorCpuUsage,ExGetExclusiveWaiterCount,ExGetPreviousMode,ExGetSharedWaiterCount,ExInitializeNPagedLookasideList,ExInitializePagedLookasideList,ExInitializeResourceLite,ExInitializeRundownProtection,ExInitializeZone,ExInterlockedAddLargeInteger,ExInterlockedAddLargeStatistic,ExInterlockedAddUlong,ExInterlockedCompareExchange64,ExInterlockedDecrementLong,ExInterlockedExchangeUlong,ExInterlockedExtendZone,ExInterlockedFlushSList,ExInterlockedIncrementLong,ExInterlockedInsertHeadList,ExInterlockedInsertTailList,ExInterlockedPopEntryList,ExInterlockedPopEntrySList,ExInterlockedPushEntryList,ExInterlockedPushEntrySList,ExInterlockedRemoveHeadList,ExIsProcessorFeaturePresent,ExIsResourceAcquiredExclusiveLite,ExIsResourceAcquiredSharedLite,ExLocalTimeToSystemTime,ExNotifyCallback,ExQueryPoolBlockSize,ExQueueWorkItem,ExRaiseAccessViolation,ExRaiseDatatypeMisalignment,ExRaiseException,ExRaiseHardError,ExRaiseStatus,ExReInitializeRundownProtection,ExRegisterCallback,ExReinitializeResourceLite,ExReleaseFastMutexUnsafe,ExReleaseResourceForThreadLite,ExReleaseResourceLite,ExReleaseRundownProtection,ExReleaseRundownProtectionEx,ExRundownCompleted,ExSemaphoreObjectType,ExSetResourceOwnerPointer,ExSetTimerResolution,ExSystemExceptionFilter,ExSystemTimeToLocalTime,ExUnregisterCallback,ExUuidCreate,ExVerifySuite,ExWaitForRundownProtectionRelease,ExWindowStationObjectType,ExfAcquirePushLockExclusive,ExfAcquirePushLockShared,ExfInterlockedAddUlong,ExfInterlockedCompareExchange64,ExfInterlockedInsertHeadList,ExfInterlockedInsertTailList,ExfInterlockedPopEntryList,ExfInterlockedPushEntryList,ExfInterlockedRemoveHeadList,ExfReleasePushLock,Exfi386InterlockedDecrementLong,Exfi386InterlockedExchangeUlong,Exfi386InterlockedIncrementLong,Exi386InterlockedDecrementLong,Exi386InterlockedExchangeUlong,Exi386InterlockedIncrementLong,FsRtlAcquireFileExclusive,FsRtlAddLargeMcbEntry,FsRtlAddMcbEntry,FsRtlAddToTunnelCache,FsRtlAllocateFileLock,FsRtlAllocatePool,FsRtlAllocatePoolWithQuot,FsRtlAllocatePoolWithQuotaTag,FsRtlAllocatePoolWithTag,FsRtlAllocateResource,FsRtlAreNamesEqual,FsRtlBalanceReads,FsRtlCheckLockForReadAccess,FsRtlCheckLockForWriteAccess,FsRtlCheckOplock,FsRtlCopyRead,FsRtlCopyWrite,FsRtlCreateSectionForDataScan,FsRtlCurrentBatchOplock,FsRtlDeleteKeyFromTunnelCache,FsRtlDeleteTunnelCache,FsRtlDeregisterUncProvider,FsRtlDissectDbcs,FsRtlDissectName,FsRtlDoesDbcsContainWildCards,FsRtlDoesNameContainWildCards,FsRtlFastCheckLockForRead,FsRtlFastCheckLockForWrite,FsRtlFastUnlockAll,FsRtlFastUnlockAllByKey,FsRtlFastUnlockSingle,FsRtlFindInTunnelCache,FsRtlFreeFileLock,FsRtlGetFileSize,FsRtlGetNextFileLock,FsRtlGetNextLargeMcbEntry,FsRtlGetNextMcbEntry,FsRtlIncrementCcFastReadNoWait,FsRtlIncrementCcFastReadNotPossible,FsRtlIncrementCcFastReadResourceMiss,FsRtlIncrementCcFastReadWait,FsRtlInitializeFileLock,FsRtlInitializeLargeMcb,FsRtlInitializeMcb,FsRtlInitializeOplock,FsRtlInitializeTunnelCache,FsRtlInsertPerFileObjectContext,FsRtlInsertPerStreamContext,FsRtlIsDbcsInExpression,FsRtlIsFatDbcsLegal,FsRtlIsHpfsDbcsLegal,FsRtlIsNameInExpression,FsRtlIsNtstatusExpected,FsRtlIsPagingFile,FsRtlIsTotalDeviceFailure,FsRtlLegalAnsiCharacterArray,FsRtlLookupLargeMcbEntry,FsRtlLookupLastLargeMcbEntry,FsRtlLookupLastLargeMcbEntryAndIndex,FsRtlLookupLastMcbEntry,FsRtlLookupMcbEntry,FsRtlLookupPerFileObjectContext,FsRtlLookupPerStreamContextInternal,FsRtlMdlRead,FsRtlMdlReadComplete,FsRtlMdlReadCompleteDev,FsRtlMdlReadDev,FsRtlMdlWriteComplete,FsRtlMdlWriteCompleteDev,FsRtlNormalizeNtstatus,FsRtlNotifyChangeDirectory,FsRtlNotifyCleanup,FsRtlNotifyFilterChangeDirectory,FsRtlNotifyFilterReportChange,FsRtlNotifyFullChangeDirectory,FsRtlNotifyFullReportChange,FsRtlNotifyInitializeSync,FsRtlNotifyReportChange,FsRtlNotifyUninitializeSync,FsRtlNotifyVolumeEvent,FsRtlNumberOfRunsInLargeMcb,FsRtlNumberOfRunsInMcb,FsRtlOplockFsctrl,FsRtlOplockIsFastIoPossible,FsRtlPostPagingFileStackOverflow,FsRtlPostStackOverflow,FsRtlPrepareMdlWrite,FsRtlPrepareMdlWriteDev,FsRtlPrivateLock,FsRtlProcessFileLock,FsRtlRegisterFileSystemFilterCallbacks,FsRtlRegisterUncProvider,FsRtlReleaseFile,FsRtlRemoveLargeMcbEntry,FsRtlRemoveMcbEntry,FsRtlRemovePerFileObjectContext,FsRtlRemovePerStreamContext,FsRtlResetLargeMcb,FsRtlSplitLargeMcb,FsRtlSyncVolumes,FsRtlTeardownPerStreamContexts,FsRtlTruncateLargeMcb,FsRtlTruncateMcb,FsRtlUninitializeFileLock,FsRtlUninitializeLargeMcb,FsRtlUninitializeMcb,FsRtlUninitializeOplock,HalDispatchTable,HalExamineMBR,HalPrivateDispatchTable,HeadlessDispatch,InbvAcquireDisplayOwnership,InbvCheckDisplayOwnership,InbvDisplayString,InbvEnableBootDriver,InbvEnableDisplayString,InbvInstallDisplayStringFilter,InbvIsBootDriverInstalled,InbvNotifyDisplayOwnershipLost,InbvResetDisplay,InbvSetScrollRegion,InbvSetTextColor,InbvSolidColorFill,InitSafeBootMode,InterlockedCompareExchange,InterlockedDecrement,InterlockedExchange,InterlockedExchangeAdd,InterlockedIncrement,InterlockedPopEntrySList,InterlockedPushEntrySList,IoAcquireCancelSpinLock,IoAcquireRemoveLockEx,IoAcquireVpbSpinLock,IoAdapterObjectType,IoAllocateAdapterChannel,IoAllocateController,IoAllocateDriverObjectExtension,IoAllocateErrorLogEntry,IoAllocateIrp,IoAllocateMdl,IoAllocateWorkItem,IoAssignDriveLetters,IoAssignResources,IoAttachDevice,IoAttachDeviceByPointer,IoAttachDeviceToDeviceStack,IoAttachDeviceToDeviceStackSafe,IoBuildAsynchronousFsdRequest,IoBuildDeviceIoControlRequest,IoBuildPartialMdl,IoBuildSynchronousFsdRequest,IoCallDriver,IoCancelFileOpen,IoCancelIrp,IoCheckDesiredAccess,IoCheckEaBufferValidity,IoCheckFunctionAccess,IoCheckQuerySetFileInformation,IoCheckQuerySetVolumeInformation,IoCheckQuotaBufferValidity,IoCheckShareAccess,IoCompleteRequest,IoConnectInterrupt,IoCreateController,IoCreateDevice,IoCreateDisk,IoCreateDriver,IoCreateFile,IoCreateFileSpecifyDeviceObjectHint,IoCreateNotificationEvent,IoCreateStreamFileObject,IoCreateStreamFileObjectEx,IoCreateStreamFileObjectLite,IoCreateSymbolicLink,IoCreateSynchronizationEvent,IoCreateUnprotectedSymbolicLink,IoCsqInitialize,IoCsqInsertIrp,IoCsqRemoveIrp,IoCsqRemoveNextIrp,IoDeleteController,IoDeleteDevice,IoDeleteDriver,IoDeleteSymbolicLink,IoDetachDevice,IoDeviceHandlerObjectSize,IoDeviceHandlerObjectType,IoDeviceObjectType,IoDisconnectInterrupt,IoDriverObjectType,IoEnqueueIrp,IoEnumerateDeviceObjectList,IoEnumerateRegisteredFiltersList,IoFastQueryNetworkAttributes,IoFileObjectType,IoForwardAndCatchIrp,IoForwardIrpSynchronously,IoFreeController,IoFreeErrorLogEntry,IoFreeIrp,IoFreeMdl,IoFreeWorkItem,IoGetAttachedDevice,IoGetAttachedDeviceReference,IoGetBaseFileSystemDeviceObject,IoGetBootDiskInformation,IoGetConfigurationInformation,IoGetCurrentProcess,IoGetDeviceAttachmentBaseRef,IoGetDeviceInterfaceAlias,IoGetDeviceInterfaces,IoGetDeviceObjectPointer,IoGetDeviceProperty,IoGetDeviceToVerify,IoGetDiskDeviceObject,IoGetDmaAdapter,IoGetDriverObjectExtension,IoGetFileObjectGenericMapping,IoGetInitialStack,IoGetLowerDeviceObject,IoGetRelatedDeviceObject,IoGetRequestorProcess,IoGetRequestorProcessId,IoGetRequestorSessionId,IoGetStackLimits,IoGetTopLevelIrp,IoInitializeIrp,IoInitializeRemoveLockEx,IoInitializeTimer,IoInvalidateDeviceRelations,IoInvalidateDeviceState,IoIsFileOriginRemote,IoIsOperationSynchronous,IoIsSystemThread,IoIsValidNameGraftingBuffer,IoIsWdmVersionAvailable,IoMakeAssociatedIrp,IoOpenDeviceInterfaceRegistryKey,IoOpenDeviceRegistryKey,IoPageRead,IoPnPDeliverServicePowerNotification,IoQueryDeviceDescription,IoQueryFileDosDeviceName,IoQueryFileInformation,IoQueryVolumeInformation,IoQueueThreadIrp,IoQueueWorkItem,IoRaiseHardError,IoRaiseInformationalHardError,IoReadDiskSignature,IoReadOperationCount,IoReadPartitionTable,IoReadPartitionTableEx,IoReadTransferCount,IoRegisterBootDriverReinitialization,IoRegisterDeviceInterface,IoRegisterDriverReinitialization,IoRegisterFileSystem,IoRegisterFsRegistrationChange,IoRegisterLastChanceShutdownNotification,IoRegisterPlugPlayNotification,IoRegisterShutdownNotification,IoReleaseCancelSpinLock,IoReleaseRemoveLockAndWaitEx,IoReleaseRemoveLockEx,IoReleaseVpbSpinLock,IoRemoveShareAccess,IoReportDetectedDevice,IoReportHalResourceUsage,IoReportResourceForDetection,IoReportResourceUsage,IoReportTargetDeviceChange,IoReportTargetDeviceChangeAsynchronous,IoRequestDeviceEject,IoReuseIrp,IoSetCompletionRoutineEx,IoSetDeviceInterfaceState,IoSetDeviceToVerify,IoSetFileOrigin,IoSetHardErrorOrVerifyDevice,IoSetInformation,IoSetIoCompletion,IoSetPartitionInformation,IoSetPartitionInformationEx,IoSetShareAccess,IoSetStartIoAttributes,IoSetSystemPartition,IoSetThreadHardErrorMode,IoSetTopLevelIrp,IoStartNextPacket,IoStartNextPacketByKey,IoStartPacket,IoStartTimer,IoStatisticsLock,IoStopTimer,IoSynchronousInvalidateDeviceRelations,IoSynchronousPageWrite,IoThreadToProcess,IoUnregisterFileSystem,IoUnregisterFsRegistrationChange,IoUnregisterPlugPlayNotification,IoUnregisterShutdownNotification,IoUpdateShareAccess,IoValidateDeviceIoControlAccess,IoVerifyPartitionTable,IoVerifyVolume,IoVolumeDeviceToDosName,IoWMIAllocateInstanceIds,IoWMIDeviceObjectToInstanceName,IoWMIExecuteMethod,IoWMIHandleToInstanceName,IoWMIOpenBlock,IoWMIQueryAllDat,IoWMIQueryAllDataMultiple,IoWMIQuerySingleInstance,IoWMIQuerySingleInstanceMultiple,IoWMIRegistrationControl,IoWMISetNotificationCallback,IoWMISetSingleInstance,IoWMISetSingleItem,IoWMISuggestInstanceName,IoWMIWriteEvent,IoWriteErrorLogEntry,IoWriteOperationCount,IoWritePartitionTable,IoWritePartitionTableEx,IoWriteTransferCount,IofCallDriver,IofCompleteRequest,KdDebuggerEnabled,KdDebuggerNotPresent,KdDisableDebugger,KdEnableDebugger,KdEnteredDebugger,KdPollBreakIn,KdPowerTransition,Ke386CallBios,Ke386IoSetAccessProcess,Ke386QueryIoAccessMap,Ke386SetIoAccessMap,KeAcquireInStackQueuedSpinLockAtDpcLevel,KeAcquireInterruptSpinLock,KeAcquireSpinLockAtDpcLevel,KeAddSystemServiceTable,KeAreApcsDisabled,KeAttachProcess,KeBugCheck,KeBugCheckEx,KeCancelTimer,KeCapturePersistentThreadState,KeClearEvent,KeConnectInterrupt,KeDcacheFlushCount,KeDelayExecutionThread,KeDeregisterBugCheckCallback,KeDeregisterBugCheckReasonCallback,KeDetachProcess,KeDisconnectInterrupt,KeEnterCriticalRegion,KeEnterKernelDebugger,KeFindConfigurationEntry,KeFindConfigurationNextEntry,KeFlushEntireTb,KeFlushQueuedDpcs,KeGetCurrentThread,KeGetPreviousMode,KeGetRecommendedSharedDataAlignment,KeI386AbiosCall,KeI386AllocateGdtSelectors,KeI386Call16BitCStyleFunction,KeI386Call16BitFunction,KeI386FlatToGdtSelector,KeI386GetLid,KeI386MachineType,KeI386ReleaseGdtSelectors,KeI386ReleaseLid,KeI386SetGdtSelector,KeIcacheFlushCount,KeInitializeApc,KeInitializeDeviceQueue,KeInitializeDpc,KeInitializeEvent,KeInitializeInterrupt,KeInitializeMutant,KeInitializeMutex,KeInitializeQueue,KeInitializeSemaphore,KeInitializeSpinLock,KeInitializeTimer,KeInitializeTimerEx,KeInsertByKeyDeviceQueue,KeInsertDeviceQueue,KeInsertHeadQueue,KeInsertQueue,KeInsertQueueApc,KeInsertQueueDpc,KeIsAttachedProcess,KeIsExecutingDpc,KeLeaveCriticalRegion,KeLoaderBlock,KeNumberProcessors,KeProfileInterrupt,KeProfileInterruptWithSource,KePulseEvent,KeQueryActiveProcessors,KeQueryInterruptTime,KeQueryPriorityThread,KeQueryRuntimeThread,KeQuerySystemTime,KeQueryTickCount,KeQueryTimeIncrement,KeRaiseUserException,KeReadStateEvent,KeReadStateMutant,KeReadStateMutex,KeReadStateQueue,KeReadStateSemaphore,KeReadStateTimer,KeRegisterBugCheckCallback,KeRegisterBugCheckReasonCallback,KeReleaseInStackQueuedSpinLockFromDpcLevel,KeReleaseInterruptSpinLock,KeReleaseMutant,KeReleaseMutex,KeReleaseSemaphore,KeReleaseSpinLockFromDpcLevel,KeRemoveByKeyDeviceQueue,KeRemoveByKeyDeviceQueueIfBusy,KeRemoveDeviceQueue,KeRemoveEntryDeviceQueue,KeRemoveQueue,KeRemoveQueueDpc,KeRemoveSystemServiceTable,KeResetEvent,KeRestoreFloatingPointState,KeRevertToUserAffinityThread,KeRundownQueue,KeSaveFloatingPointState,KeSaveStateForHibernate,KeServiceDescriptorTable,KeSetAffinityThread,KeSetBasePriorityThread,KeSetDmaIoCoherency,KeSetEvent,KeSetEventBoostPriority,KeSetIdealProcessorThread,KeSetImportanceDpc,KeSetKernelStackSwapEnable,KeSetPriorityThread,KeSetProfileIrql,KeSetSystemAffinityThread,KeSetTargetProcessorDpc,KeSetTimeIncrement,KeSetTimeUpdateNotifyRoutine,KeSetTimer,KeSetTimerEx,KeStackAttachProcess,KeSynchronizeExecution,KeTerminateThread,KeTickCount,KeUnstackDetachProcess,KeUpdateRunTime,KeUpdateSystemTime,KeUserModeCallback,KeWaitForMultipleObjects,KeWaitForMutexObject,KeWaitForSingleObject,KefAcquireSpinLockAtDpcLevel,KefReleaseSpinLockFromDpcLevel,Kei386EoiHelper,KiAcquireSpinLock,KiBugCheckDat,KiCoprocessorError,KiDeliverApc,KiDispatchInterrupt,KiEnableTimerWatchdog,KiIpiServiceRoutine,KiReleaseSpinLock,KiUnexpectedInterrupt,Kii386SpinOnSpinLock,LdrAccessResource,LdrEnumResources,LdrFindResourceDirectory_U,LdrFindResource_U,LpcPortObjectType,LpcRequestPort,LpcRequestWaitReplyPort,LsaCallAuthenticationPackage,LsaDeregisterLogonProcess,LsaFreeReturnBuffer,LsaLogonUser,LsaLookupAuthenticationPackage,LsaRegisterLogonProcess,Mm64BitPhysicalAddress,MmAddPhysicalMemory,MmAddVerifierThunks,MmAdjustWorkingSetSize,MmAdvanceMdl,MmAllocateContiguousMemory,MmAllocateContiguousMemorySpecifyCache,MmAllocateMappingAddress,MmAllocateNonCachedMemory,MmAllocatePagesForMdl,MmBuildMdlForNonPagedPool,MmCanFileBeTruncated,MmCommitSessionMappedView,MmCreateMdl,MmCreateSection,MmDisableModifiedWriteOfSection,MmFlushImageSection,MmForceSectionClosed,MmFreeContiguousMemory,MmFreeContiguousMemorySpecifyCache,MmFreeMappingAddress,MmFreeNonCachedMemory,MmFreePagesFromMdl,MmGetPhysicalAddress,MmGetPhysicalMemoryRanges,MmGetSystemRoutineAddress,MmGetVirtualForPhysical,MmGrowKernelStack,MmHighestUserAddress,MmIsAddressValid,MmIsDriverVerifying,MmIsNonPagedSystemAddressValid,MmIsRecursiveIoFault,MmIsThisAnNtAsSystem,MmIsVerifierEnabled,MmLockPagableDataSection,MmLockPagableImageSection,MmLockPagableSectionByHandle,MmMapIoSpace,MmMapLockedPages,MmMapLockedPagesSpecifyCache,MmMapLockedPagesWithReservedMapping,MmMapMemoryDumpMdl,MmMapUserAddressesToPage,MmMapVideoDisplay,MmMapViewInSessionSpace,MmMapViewInSystemSpace,MmMapViewOfSection,MmMarkPhysicalMemoryAsBad,MmMarkPhysicalMemoryAsGood,MmPageEntireDriver,MmPrefetchPages,MmProbeAndLockPages,MmProbeAndLockProcessPages,MmProbeAndLockSelectedPages,MmProtectMdlSystemAddress,MmQuerySystemSize,MmRemovePhysicalMemory,MmResetDriverPaging,MmSectionObjectType,MmSecureVirtualMemory,MmSetAddressRangeModified,MmSetBankedSection,MmSizeOfMdl,MmSystemRangeStart,MmTrimAllSystemPagableMemory,MmUnlockPagableImageSection,MmUnlockPages,MmUnmapIoSpace,MmUnmapLockedPages,MmUnmapReservedMapping,MmUnmapVideoDisplay,MmUnmapViewInSessionSpace,MmUnmapViewInSystemSpace,MmUnmapViewOfSection,MmUnsecureVirtualMemory,MmUserProbeAddress,NlsAnsiCodePage,NlsLeadByteInfo,NlsMbCodePageTag,NlsMbOemCodePageTag,NlsOemCodePage,NlsOemLeadByteInfo,NtAddAtom,NtAdjustPrivilegesToken,NtAllocateLocallyUniqueId,NtAllocateUuids,NtAllocateVirtualMemory,NtBuildNumber,NtClose,NtConnectPort,NtCreateEvent,NtCreateFile,NtCreateSection,NtDeleteAtom,NtDeleteFile,NtDeviceIoControlFile,NtDuplicateObject,NtDuplicateToken,NtFindAtom,NtFreeVirtualMemory,NtFsControlFile,NtGlobalFlag,NtLockFile,NtMakePermanentObject,NtMapViewOfSection,NtNotifyChangeDirectoryFile,NtOpenFile,NtOpenProcess,NtOpenProcessToken,NtOpenProcessTokenEx,NtOpenThread,NtOpenThreadToken,NtOpenThreadTokenEx,NtQueryDirectoryFile,NtQueryEaFile,NtQueryInformationAtom,NtQueryInformationFile,NtQueryInformationProcess,NtQueryInformationThread,NtQueryInformationToken,NtQueryQuotaInformationFile,NtQuerySecurityObject,NtQuerySystemInformation,NtQueryVolumeInformationFile,NtReadFile,NtRequestPort,NtRequestWaitReplyPort,NtSetEaFile,NtSetEvent,NtSetInformationFile,NtSetInformationProcess,NtSetInformationThread,NtSetQuotaInformationFile,NtSetSecurityObject,NtSetVolumeInformationFile,NtShutdownSystem,NtTraceEvent,NtUnlockFile,NtVdmControl,NtWaitForSingleObject,NtWriteFile,ObAssignSecurity,ObCheckCreateObjectAccess,ObCheckObjectAccess,ObCloseHandle,ObCreateObject,ObCreateObjectType,ObDereferenceObject,ObDereferenceSecurityDescriptor,ObFindHandleForObject,ObGetObjectSecurity,ObInsertObject,ObLogSecurityDescriptor,ObMakeTemporaryObject,ObOpenObjectByName,ObOpenObjectByPointer,ObQueryNameString,ObQueryObjectAuditingByHandle,ObReferenceObjectByHandle,ObReferenceObjectByName,ObReferenceObjectByPointer,ObReferenceSecurityDescriptor,ObReleaseObjectSecurity,ObSetHandleAttributes,ObSetSecurityDescriptorInfo,ObSetSecurityObjectByPointer,ObfDereferenceObject,ObfReferenceObject,PfxFindPrefix,PfxInitialize,PfxInsertPrefix,PfxRemovePrefix,PoCallDriver,PoCancelDeviceNotify,PoQueueShutdownWorkItem,PoRegisterDeviceForIdleDetection,PoRegisterDeviceNotify,PoRegisterSystemState,PoRequestPowerIrp,PoRequestShutdownEvent,PoSetHiberRange,PoSetPowerState,PoSetSystemState,PoShutdownBugCheck,PoStartNextPowerIrp,PoUnregisterSystemState,ProbeForRead,ProbeForWrite,PsAssignImpersonationToken,PsChargePoolQuot,PsChargeProcessNonPagedPoolQuot,PsChargeProcessPagedPoolQuot,PsChargeProcessPoolQuot,PsCreateSystemProcess,PsCreateSystemThread,PsDereferenceImpersonationToken,PsDereferencePrimaryToken,PsDisableImpersonation,PsEstablishWin32Callouts,PsGetContextThread,PsGetCurrentProcess,PsGetCurrentProcessId,PsGetCurrentProcessSessionId,PsGetCurrentThread,PsGetCurrentThreadId,PsGetCurrentThreadPreviousMode,PsGetCurrentThreadStackBase,PsGetCurrentThreadStackLimit,PsGetJobLock,PsGetJobSessionId,PsGetJobUIRestrictionsClass,PsGetProcessCreateTimeQuadPart,PsGetProcessDebugPort,PsGetProcessExitProcessCalled,PsGetProcessExitStatus,PsGetProcessExitTime,PsGetProcessId,PsGetProcessImageFileName,PsGetProcessInheritedFromUniqueProcessId,PsGetProcessJob,PsGetProcessPeb,PsGetProcessPriorityClass,PsGetProcessSectionBaseAddress,PsGetProcessSecurityPort,PsGetProcessSessionId,PsGetProcessWin32Process,PsGetProcessWin32WindowStation,PsGetThreadFreezeCount,PsGetThreadHardErrorsAreDisabled,PsGetThreadId,PsGetThreadProcess,PsGetThreadProcessId,PsGetThreadSessionId,PsGetThreadTeb,PsGetThreadWin32Thread,PsGetVersion,PsImpersonateClient,PsInitialSystemProcess,PsIsProcessBeingDebugged,PsIsSystemThread,PsIsThreadImpersonating,PsIsThreadTerminating,PsJobType,PsLookupProcessByProcessId,PsLookupProcessThreadByCid,PsLookupThreadByThreadId,PsProcessType,PsReferenceImpersonationToken,PsReferencePrimaryToken,PsRemoveCreateThreadNotifyRoutine,PsRemoveLoadImageNotifyRoutine,PsRestoreImpersonation,PsReturnPoolQuot,PsReturnProcessNonPagedPoolQuot,PsReturnProcessPagedPoolQuot,PsRevertThreadToSelf,PsRevertToSelf,PsSetContextThread,PsSetCreateProcessNotifyRoutine,PsSetCreateThreadNotifyRoutine,PsSetJobUIRestrictionsClass,PsSetLegoNotifyRoutine,PsSetLoadImageNotifyRoutine,PsSetProcessPriorityByClass,PsSetProcessPriorityClass,PsSetProcessSecurityPort,PsSetProcessWin32Process,PsSetProcessWindowStation,PsSetThreadHardErrorsAreDisabled,PsSetThreadWin32Thread,PsTerminateSystemThread,PsThreadType,RtlAbsoluteToSelfRelativeSD,RtlAddAccessAllowedAce,RtlAddAccessAllowedAceEx,RtlAddAce,RtlAddAtomToAtomTable,RtlAddRange,RtlAllocateHeap,RtlAnsiCharToUnicodeChar,RtlAnsiStringToUnicodeSize,RtlAnsiStringToUnicodeString,RtlAppendAsciizToString,RtlAppendStringToString,RtlAppendUnicodeStringToString,RtlAppendUnicodeToString,RtlAreAllAccessesGranted,RtlAreAnyAccessesGranted,RtlAreBitsClear,RtlAreBitsSet,RtlAssert,RtlCaptureContext,RtlCaptureStackBackTrace,RtlCharToInteger,RtlCheckRegstryKey,RtlClearAllBits,RtlClearBit,RtlClearBits,RtlCompareMemory,RtlCompareMemoryUlong,RtlCompareString,RtlCompareUnicodeString,RtlCompressBuffer,RtlCompressChunks,RtlConvertLongToLargeInteger,RtlConvertSidToUnicodeString,RtlConvertUlongToLargeInteger,RtlCopyLuid,RtlCopyRangeList,RtlCopySid,RtlCopyString,RtlCopyUnicodeString,RtlCreateAcl,RtlCreateAtomTable,RtlCreateHeap,RtlCreateRegistryKey,RtlCreateSecurityDescriptor,RtlCreateSystemVolumeInformationFolder,RtlCreateUnicodeString,RtlCustomCPToUnicodeN,RtlDecompressBuffer,RtlDecompressChunks,RtlDecompressFragment,RtlDelete,RtlDeleteAce,RtlDeleteAtomFromAtomTable,RtlDeleteElementGenericTable,RtlDeleteElementGenericTableAvl,RtlDeleteNoSplay,RtlDeleteOwnersRanges,RtlDeleteRange,RtlDeleteRegistryValue,RtlDescribeChunk,RtlDestroyAtomTable,RtlDestroyHeap,RtlDowncaseUnicodeString,RtlEmptyAtomTable,RtlEnlargedIntegerMultiply,RtlEnlargedUnsignedDivide,RtlEnlargedUnsignedMultiply,RtlEnumerateGenericTable,RtlEnumerateGenericTableAvl,RtlEnumerateGenericTableLikeADirectory,RtlEnumerateGenericTableWithoutSplaying,RtlEnumerateGenericTableWithoutSplayingAvl,RtlEqualLuid,RtlEqualSid,RtlEqualString,RtlEqualUnicodeString,RtlExtendedIntegerMultiply,RtlExtendedLargeIntegerDivide,RtlExtendedMagicDivide,RtlFillMemory,RtlFillMemoryUlong,RtlFindClearBits,RtlFindClearBitsAndSet,RtlFindClearRuns,RtlFindFirstRunClear,RtlFindLastBackwardRunClear,RtlFindLeastSignificantBit,RtlFindLongestRunClear,RtlFindMessage,RtlFindMostSignificantBit,RtlFindNextForwardRunClear,RtlFindRange,RtlFindSetBits,RtlFindSetBitsAndClear,RtlFindUnicodePrefix,RtlFormatCurrentUserKeyPath,RtlFreeAnsiString,RtlFreeHeap,RtlFreeOemString,RtlFreeRangeList,RtlFreeUnicodeString,RtlGUIDFromString,RtlGenerate8dot3Name,RtlGetAce,RtlGetCallersAddress,RtlGetCompressionWorkSpaceSize,RtlGetDaclSecurityDescriptor,RtlGetDefaultCodePage,RtlGetElementGenericTable,RtlGetElementGenericTableAvl,RtlGetFirstRange,RtlGetGroupSecurityDescriptor,RtlGetNextRange,RtlGetNtGlobalFlags,RtlGetOwnerSecurityDescriptor,RtlGetSaclSecurityDescriptor,RtlGetSetBootStatusDat,RtlGetVersion,RtlHashUnicodeString,RtlImageDirectoryEntryToDat,RtlImageNtHeader,RtlInitAnsiString,RtlInitCodePageTable,RtlInitString,RtlInitUnicodeString,RtlInitializeBitMap,RtlInitializeGenericTable,RtlInitializeGenericTableAvl,RtlInitializeRangeList,RtlInitializeSid,RtlInitializeUnicodePrefix,RtlInsertElementGenericTable,RtlInsertElementGenericTableAvl,RtlInsertElementGenericTableFull,RtlInsertElementGenericTableFullAvl,RtlInsertUnicodePrefix,RtlInt64ToUnicodeString,RtlIntegerToChar,RtlIntegerToUnicode,RtlIntegerToUnicodeString,RtlInvertRangeList,RtlIpv4AddressToString,RtlIpv4AddressToStringEx,RtlIpv4AddressToStringEx,RtlIpv4AddressToString,RtlIpv4StringToAddress,RtlIpv4StringToAddressEx,RtlIpv4StringToAddressEx,RtlIpv4StringToAddress,RtlIpv6AddressToString,RtlIpv6AddressToStringEx,RtlIpv6AddressToStringEx,RtlIpv6AddressToString,RtlIpv6StringToAddress,RtlIpv6StringToAddressEx,RtlIpv6StringToAddressEx,RtlIpv6StringToAddress,RtlIsGenericTableEmpty,RtlIsGenericTableEmptyAvl,RtlIsNameLegalDOS8Dot3,RtlIsRangeAvailable,RtlIsValidOemCharacter,RtlLargeIntegerAdd,RtlLargeIntegerArithmeticShift,RtlLargeIntegerDivide,RtlLargeIntegerNegate,RtlLargeIntegerShiftLeft,RtlLargeIntegerShiftRight,RtlLargeIntegerSubtract,RtlLengthRequiredSid,RtlLengthSecurityDescriptor,RtlLengthSid,RtlLockBootStatusDat,RtlLookupAtomInAtomTable,RtlLookupElementGenericTable,RtlLookupElementGenericTableAvl,RtlLookupElementGenericTableFull,RtlLookupElementGenericTableFullAvl,RtlMapGenericMask,RtlMapSecurityErrorToNtStatus,RtlMergeRangeLists,RtlMoveMemory,RtlMultiByteToUnicodeN,RtlMultiByteToUnicodeSize,RtlNextUnicodePrefix,RtlNtStatusToDosError,RtlNtStatusToDosErrorNoTeb,RtlNumberGenericTableElements,RtlNumberGenericTableElementsAvl,RtlNumberOfClearBits,RtlNumberOfSetBits,RtlOemStringToCountedUnicodeString,RtlOemStringToUnicodeSize,RtlOemStringToUnicodeString,RtlOemToUnicodeN,RtlPinAtomInAtomTable,RtlPrefetchMemoryNonTemporal,RtlPrefixString,RtlPrefixUnicodeString,RtlQueryAtomInAtomTable,RtlQueryRegistryValues,RtlQueryTimeZoneInformation,RtlRaiseException,RtlRandom,RtlRandomEx,RtlRealPredecessor,RtlRealSuccessor,RtlRemoveUnicodePrefix,RtlReserveChunk,RtlSecondsSince1970ToTime,RtlSecondsSince1980ToTime,RtlSelfRelativeToAbsoluteSD,RtlSelfRelativeToAbsoluteSD2,RtlSetAllBits,RtlSetBit,RtlSetBits,RtlSetDaclSecurityDescriptor,RtlSetGroupSecurityDescriptor,RtlSetOwnerSecurityDescriptor,RtlSetSaclSecurityDescriptor,RtlSetTimeZoneInformation,RtlSizeHeap,RtlSplay,RtlStringFromGUID,RtlSubAuthorityCountSid,RtlSubAuthoritySid,RtlSubtreePredecessor,RtlSubtreeSuccessor,RtlTestBit,RtlTimeFieldsToTime,RtlTimeToElapsedTimeFields,RtlTimeToSecondsSince1970,RtlTimeToSecondsSince1980,RtlTimeToTimeFields,RtlTraceDatabaseAdd,RtlTraceDatabaseCreate,RtlTraceDatabaseDestroy,RtlTraceDatabaseEnumerate,RtlTraceDatabaseFind,RtlTraceDatabaseLock,RtlTraceDatabaseUnlock,RtlTraceDatabaseValidate,RtlUlongByteSwap,RtlUlonglongByteSwap,RtlUnicodeStringToAnsiSize,RtlUnicodeStringToAnsiString,RtlUnicodeStringToCountedOemString,RtlUnicodeStringToInteger,RtlUnicodeStringToOemSize,RtlUnicodeStringToOemString,RtlUnicodeToCustomCPN,RtlUnicodeToMultiByteN,RtlUnicodeToMultiByteSize,RtlUnicodeToOemN,RtlUnlockBootStatusDat,RtlUnwind,RtlUpcaseUnicodeChar,RtlUpcaseUnicodeString,RtlUpcaseUnicodeStringToAnsiString,RtlUpcaseUnicodeStringToCountedOemString,RtlUpcaseUnicodeStringToOemString,RtlUpcaseUnicodeToCustomCPN,RtlUpcaseUnicodeToMultiByteN,RtlUpcaseUnicodeToOemN,RtlUpperChar,RtlUpperString,RtlUshortByteSwap,RtlValidRelativeSecurityDescriptor,RtlValidSecurityDescriptor,RtlValidSid,RtlVerifyVersionInfo,RtlVolumeDeviceToDosName,RtlWalkFrameChain,RtlWriteRegistryValue,RtlZeroHeap,RtlZeroMemory,RtlxAnsiStringToUnicodeSize,RtlxOemStringToUnicodeSize,RtlxUnicodeStringToAnsiSize,RtlxUnicodeStringToOemSize,SeAccessCheck,SeAppendPrivileges,SeAssignSecurity,SeAssignSecurityEx,SeAuditHardLinkCreation,SeAuditingFileEvents,SeAuditingFileEventsWithContext,SeAuditingFileOrGlobalEvents,SeAuditingHardLinkEvents,SeAuditingHardLinkEventsWithContext,SeCaptureSecurityDescriptor,SeCaptureSubjectContext,SeCloseObjectAuditAlarm,SeCreateAccessState,SeCreateClientSecurity,SeCreateClientSecurityFromSubjectContext,SeDeassignSecurity,SeDeleteAccessState,SeDeleteObjectAuditAlarm,SeExports,SeFilterToken,SeFreePrivileges,SeImpersonateClient,SeImpersonateClientEx,SeLockSubjectContext,SeMarkLogonSessionForTerminationNotification,SeOpenObjectAuditAlarm,SeOpenObjectForDeleteAuditAlarm,SePrivilegeCheck,SePrivilegeObjectAuditAlarm,SePublicDefaultDacl,SeQueryAuthenticationIdToken,SeQueryInformationToken,SeQuerySecurityDescriptorInfo,SeQuerySessionIdToken,SeRegisterLogonSessionTerminatedRoutine,SeReleaseSecurityDescriptor,SeReleaseSubjectContext,SeSetAccessStateGenericMapping,SeSetSecurityDescriptorInfo,SeSetSecurityDescriptorInfoEx,SeSinglePrivilegeCheck,SeSystemDefaultDacl,SeTokenImpersonationLevel,SeTokenIsAdmin,SeTokenIsRestricted,SeTokenIsWriteRestricted,SeTokenObjectType,SeTokenType,SeUnlockSubjectContext,SeUnregisterLogonSessionTerminatedRoutine,SeValidSecurityDescriptor,VerSetConditionMask,VfFailDeviceNode,VfFailDriver,VfFailSystemBIOS,VfIsVerificationEnabled,WmiFlushTrace,WmiGetClock,WmiQueryTrace,WmiQueryTraceInformation,WmiStartTrace,WmiStopTrace,WmiTraceMessage,WmiTraceMessageV,WmiUpdateTrace,XIPDispatch,ZwAccessCheckAndAuditAlarm,ZwAddBootEntry,ZwAdjustPrivilegesToken,ZwAlertThread,ZwAllocateVirtualMemory,ZwAssignProcessToJobObject,ZwCancelIoFile,ZwCancelTimer,ZwClearEvent,ZwClose,ZwCloseObjectAuditAlarm,ZwConnectPort,ZwCreateDirectoryObject,ZwCreateEvent,ZwCreateFile,ZwCreateJobObject,ZwCreateKey,ZwCreateSection,ZwCreateSymbolicLinkObject,ZwCreateTimer,ZwDeleteBootEntry,ZwDeleteFile,ZwDeleteKey,ZwDeleteValueKey,ZwDeviceIoControlFile,ZwDisplayString,ZwDuplicateObject,ZwDuplicateToken,ZwEnumerateBootEntries,ZwEnumerateKey,ZwEnumerateValueKey,ZwFlushInstructionCache,ZwFlushKey,ZwFlushVirtualMemory,ZwFreeVirtualMemory,ZwFsControlFile,ZwInitiatePowerAction,ZwIsProcessInJob,ZwLoadDriver,ZwLoadKey,ZwMakeTemporaryObject,ZwMapViewOfSection,ZwNotifyChangeKey,ZwOpenDirectoryObject,ZwOpenEvent,ZwOpenFile,ZwOpenJobObject,ZwOpenKey,ZwOpenProcess,ZwOpenProcessToken,ZwOpenProcessTokenEx,ZwOpenSection,ZwOpenSymbolicLinkObject,ZwOpenThread,ZwOpenThreadToken,ZwOpenThreadTokenEx,ZwOpenTimer,ZwPowerInformation,ZwPulseEvent,ZwQueryBootEntryOrder,ZwQueryBootOptions,ZwQueryDefaultLocale,ZwQueryDefaultUILanguage,ZwQueryDirectoryFile,ZwQueryDirectoryObject,ZwQueryEaFile,ZwQueryFullAttributesFile,ZwQueryInformationFile,ZwQueryInformationJobObject,ZwQueryInformationProcess,ZwQueryInformationThread,ZwQueryInformationToken,ZwQueryInstallUILanguage,ZwQueryKey,ZwQueryObject,ZwQuerySection,ZwQuerySecurityObject,ZwQuerySymbolicLinkObject,ZwQuerySystemInformation,ZwQueryValueKey,ZwQueryVolumeInformationFile,ZwReadFile,ZwReplaceKey,ZwRequestWaitReplyPort,ZwResetEvent,ZwRestoreKey,ZwSaveKey,ZwSaveKeyEx,ZwSetBootEntryOrder,ZwSetBootOptions,ZwSetDefaultLocale,ZwSetDefaultUILanguage,ZwSetEaFile,ZwSetEvent,ZwSetInformationFile,ZwSetInformationJobObject,ZwSetInformationObject,ZwSetInformationProcess,ZwSetInformationThread,ZwSetSecurityObject,ZwSetSystemInformation,ZwSetSystemTime,ZwSetTimer,ZwSetValueKey,ZwSetVolumeInformationFile,ZwTerminateJobObject,ZwTerminateProcess,ZwTranslateFilePath,ZwUnloadDriver,ZwUnloadKey,ZwUnmapViewOfSection,ZwWaitForMultipleObjects,ZwWaitForSingleObject,ZwWriteFile,ZwYieldExecution," +

//user32.dll

"ActivateKeyboardLayout,AdjustWindowRect,AdjustWindowRectEx,AlignRects,AllowForegroundActivation,AllowSetForegroundWindow,AnimateWindow,AnyPopup,AppendMenu,ArrangeIconicWindows,AttachThreadInput,BeginDeferWindowPos,BeginPaint,BlockInput,BringWindowToTop,BroadcastSystemMessage,BroadcastSystemMessage,BroadcastSystemMessageEx,BroadcastSystemMessage,BuildReasonArray,CalcMenuBar,CallMsgFilter,CallMsgFilter,CallNextHookEx,CallWindowProc,CascadeChildWindows,CascadeWindows,ChangeClipboardChain,ChangeDisplaySettings,ChangeDisplaySettingsEx,ChangeDisplaySettings,ChangeMenu,CharLower,CharLowerBuff,CharLower,CharNext,CharNextEx,CharNext,CharPrev,CharPrevEx,CharPrev,CharToOem,CharToOemBuff,CharToOem,CharUpper,CharUpperBuff,CharUpper,CheckDlgButton,CheckMenuItem,CheckMenuRadioItem,CheckRadioButton,ChildWindowFromPoint,ChildWindowFromPointEx,CliImmSetHotKey,ClientThreadSetup,ClientToScreen,ClipCursor,CloseClipboard,CloseDesktop,CloseWindow,CloseWindowStation,CopyAcceleratorTable,CopyIcon,CopyImage,CopyRect,CountClipboardFormats,CreateAcceleratorTable,CreateCaret,CreateCursor,CreateDesktop,CreateDialogIndirectParam,CreateDialogIndirectParamAor,CreateDialogIndirectParam,CreateDialogParam,CreateIcon,CreateIconFromResource,CreateIconFromResourceEx,CreateIconIndirect,CreateMDIWindow,CreateMenu,CreatePopupMenu,CreateSystemThreads,CreateWindowEx,CreateWindowStation,CsrBroadcastSystemMessageEx,CtxInitUser32,DdeAbandonTransaction,DdeAccessDat,DdeAddDat,DdeClientTransaction,DdeCmpStringHandles,DdeConnect,DdeConnectList,DdeCreateDataHandle,DdeCreateStringHandle,DdeDisconnect,DdeDisconnectList,DdeEnableCallback,DdeFreeDataHandle,DdeFreeStringHandle,DdeGetDat,DdeGetLastError,DdeGetQualityOfService,DdeImpersonateClient,DdeInitialize,DdeKeepStringHandle,DdeNameService,DdePostAdvise,DdeQueryConvInfo,DdeQueryNextServer,DdeQueryString,DdeReconnect,DdeSetQualityOfService,DdeSetUserHandle,DdeUnaccessDat,DdeUninitialize,DefDlgProc,DefFrameProc,DefMDIChildProc,DefRawInputProc,DefWindowProc,DeferWindowPos,DeleteMenu,DeregisterShellHookWindow,DestroyAcceleratorTable,DestroyCaret,DestroyCursor,DestroyIcon,DestroyMenu,DestroyReasons,DestroyWindow,DeviceEventWorker,DialogBoxIndirectParam,DialogBoxIndirectParamAor,DialogBoxIndirectParam,DialogBoxParam,DisableProcessWindowsGhosting,DispatchMessage,DisplayExitWindowsWarnings,DlgDirList,DlgDirListComboBox,DlgDirList,DlgDirSelectComboBoxEx,DlgDirSelectEx,DragDetect,DragObject,DrawAnimatedRects,DrawCaption,DrawCaptionTemp,DrawEdge,DrawFocusRect,DrawFrame,DrawFrameControl,DrawIcon,DrawIconEx,DrawMenuBar,DrawMenuBarTemp,DrawState,DrawText,DrawTextEx,DrawText,EditWndProc,EmptyClipboard,EnableMenuItem,EnableScrollBar,EnableWindow,EndDeferWindowPos,EndDialog,EndMenu,EndPaint,EndTask,EnterReaderModeHelper,EnumChildWindows,EnumClipboardFormats,EnumDesktopWindows,EnumDesktops,EnumDisplayDevices,EnumDisplayMonitors,EnumDisplaySettings,EnumDisplaySettingsEx,EnumDisplaySettings,EnumProps,EnumPropsEx,EnumProps,EnumThreadWindows,EnumWindowStations,EnumWindows,EqualRect,ExcludeUpdateRgn,ExitWindowsEx,FillRect,FindWindow,FindWindowEx,FindWindow,FlashWindow,FlashWindowEx,FrameRect,FreeDDElParam,GetActiveWindo,GetAltTabInfo,GetAltTabInfo,GetAncestor,GetAppCompatFlags,GetAppCompatFlags2,GetAsyncKeyState,GetCapture,GetCaretBlinkTime,GetCaretPos,GetClassInfo,GetClassInfoEx,GetClassInfo,GetClassLong,GetClassName,GetClassWord,GetClientRect,GetClipCursor,GetClipboardDat,GetClipboardFormatName,GetClipboardOwner,GetClipboardSequenceNumber,GetClipboardViewer,GetComboBoxInfo,GetCursor,GetCursorFrameInfo,GetCursorInfo,GetCursorPos,GetDC,GetDCEx,GetDesktopWindow,GetDialogBaseUnits,GetDlgCtrlID,GetDlgItem,GetDlgItemInt,GetDlgItemText,GetDoubleClickTime,GetFocus,GetForegroundWindow,GetGUIThreadInfo,GetGuiResources,GetIconInfo,GetInputDesktop,GetInputState,GetInternalWindowPos,GetKBCodePage,GetKeyNameText,GetKeyState,GetKeyboardLayout,GetKeyboardLayoutList,GetKeyboardLayoutName,GetKeyboardState,GetKeyboardType,GetLastActivePopup,GetLastInputInfo,GetLayeredWindowAttributes,GetListBoxInfo,GetMenu,GetMenuBarInfo,GetMenuCheckMarkDimensions,GetMenuContextHelpId,GetMenuDefaultItem,GetMenuInfo,GetMenuItemCount,GetMenuItemID,GetMenuItemInfo,GetMenuItemRect,GetMenuState,GetMenuString,GetMessage,GetMessageExtraInfo,GetMessagePos,GetMessageTime,GetMessage,GetMonitorInfo,GetMouseMovePointsEx,GetNextDlgGroupItem,GetNextDlgTabItem,GetOpenClipboardWindow,GetParent,GetPriorityClipboardFormat,GetProcessDefaultLayout,GetProcessWindowStation,GetProgmanWindow,GetProp,GetQueueStatus,GetRawInputBuffer,GetRawInputDat,GetRawInputDeviceInfo,GetRawInputDeviceList,GetReasonTitleFromReasonCode,GetRegisteredRawInputDevices,GetScrollBarInfo,GetScrollInfo,GetScrollPos,GetScrollRange,GetShellWindow,GetSubMenu,GetSysColor,GetSysColorBrush,GetSystemMenu,GetSystemMetrics,GetTabbedTextExtent,GetTaskmanWindow,GetThreadDesktop,GetTitleBarInfo,GetTopWindow,GetUpdateRect,GetUpdateRgn,GetUserObjectInformation,GetUserObjectSecurity,GetWinStationInfo,GetWindow,GetWindowContextHelpId,GetWindowDC,GetWindowInfo,GetWindowLong,GetWindowModuleFileName,GetWindowModuleFileName,GetWindowPlacement,GetWindowRect,GetWindowRgn,GetWindowRgnBox,GetWindowText,GetWindowTextLength,GetWindowText,GetWindowThreadProcessId,GetWindowWord,GrayString,HideCaret,HiliteMenuItem,IMPGetIME,IMPQueryIME,IMPSetIME,ImpersonateDdeClientWindow,InSendMessage,InSendMessageEx,InflateRect,InitializeLpkHooks,InitializeWin32EntryTable,InsertMenu,InsertMenuItem,InsertMenu,InternalGetWindowText,IntersectRect,InvalidateRect,InvalidateRgn,InvertRect,IsCharAlpha,IsCharAlphaNumeric,IsCharAlpha,IsCharLower,IsCharUpper,IsChild,IsClipboardFormatAvailable,IsDialogMessage,IsDialogMessage,IsDialogMessage,IsDlgButtonChecked,IsGUIThread,IsHungAppWindow,IsIconic,IsMenu,IsRectEmpty,IsServerSideWindow,IsWinEventHookInstalled,IsWindow,IsWindowEnabled,IsWindowInDestroy,IsWindowUnicode,IsWindowVisible,IsZoomed,KillSystemTimer,KillTimer,LoadAccelerators,LoadBitmap,LoadCursor,LoadCursorFromFile,LoadCursor,LoadIcon,LoadImage,LoadKeyboardLayout,LoadKeyboardLayoutEx,LoadKeyboardLayout,LoadLocalFonts,LoadMenu,LoadMenuIndirect,LoadMenu,LoadRemoteFonts,LoadString,LockSetForegroundWindow,LockWindowStation,LockWindowUpdate,LockWorkStation,LookupIconIdFromDirectory,LookupIconIdFromDirectoryEx,MBToWCSEx,MB_GetString,MapDialogRect,MapVirtualKey,MapVirtualKeyEx,MapVirtualKey,MapWindowPoints,MenuItemFromPoint,MenuWindowProc,MessageBeep,MessageBox,MessageBoxEx,MessageBoxIndirect,MessageBoxTimeout,MessageBox,ModifyMenu,MonitorFromPoint,MonitorFromRect,MonitorFromWindow,MoveWindow,MsgWaitForMultipleObjects,MsgWaitForMultipleObjectsEx,NotifyWinEvent,OemKeyScan,OemToChar,OemToCharBuff,OemToChar,OffsetRect,OpenClipboard,OpenDesktop,OpenIcon,OpenInputDesktop,OpenWindowStation,PackDDElParam,PaintDesktop,PaintMenuBar,PeekMessage,PostMessage,PostQuitMessage,PostThreadMessage,PrintWindow,PrivateExtractIconEx,PrivateExtractIcons,PrivateSetDbgTag,PrivateSetRipFlags,PtInRect,QuerySendMessage,QueryUserCounters,RealChildWindowFromPoint,RealGetWindowClass,RealGetWindowClass,ReasonCodeNeedsBugID,ReasonCodeNeedsComment,RecordShutdownReason,RedrawWindow,RegisterClass,RegisterClassEx,RegisterClass,RegisterClipboardFormat,RegisterDeviceNotification,RegisterHotKey,RegisterLogonProcess,RegisterMessagePumpHook,RegisterRawInputDevices,RegisterServicesProcess,RegisterShellHookWindo,RegisterSystemThread,RegisterTasklist,RegisterUserApiHook,RegisterWindowMessage,ReleaseCapture,ReleaseDC,RemoveMenu,RemoveProp,ReplyMessage,ResolveDesktopForWO,ReuseDDElParam,ScreenToClient,ScrollChildren,ScrollDC,ScrollWindow,ScrollWindowEx,SendDlgItemMessage,SendIMEMessageEx,SendInput,SendMessage,SendMessageCallback,SendMessageTimeout,SendMessage,SendNotifyMessage,SetActiveWindow,SetCapture,SetCaretBlinkTime,SetCaretPos,SetClassLong,SetClassWord,SetClipboardDat,SetClipboardViewer,SetConsoleReserveKeys,SetCursor,SetCursorContents,SetCursorPos,SetDebugErrorLevel,SetDeskWallpaper,SetDlgItemInt,SetDlgItemText,SetDoubleClickTime,SetFocus,SetForegroundWindow,SetInternalWindowPos,SetKeyboardState,SetLastErrorEx,SetLayeredWindowAttributes,SetLogonNotifyWindow,SetMenu,SetMenuContextHelpId,SetMenuDefaultItem,SetMenuInfo,SetMenuItemBitmaps,SetMenuItemInfo,SetMessageExtraInfo,SetMessageQueue,SetParent,SetProcessDefaultLayout,SetProcessWindowStation,SetProgmanWindow,SetProp,SetRect,SetRectEmpty,SetScrollInfo,SetScrollPos,SetScrollRange,SetShellWindow,SetShellWindowEx,SetSysColors,SetSysColorsTemp,SetSystemCursor,SetSystemMenu,SetSystemTimer,SetTaskmanWindow,SetThreadDesktop,SetTimer,SetUserObjectInformation,SetUserObjectSecurity,SetWinEventHook,SetWindowContextHelpId,SetWindowLong,SetWindowPlacement,SetWindowPos,SetWindowRgn,SetWindowStationUser,SetWindowText,SetWindowWord,SetWindowsHook,SetWindowsHookEx,SetWindowsHook,ShowCaret,ShowCursor,ShowOwnedPopups,ShowScrollBar,ShowStartGlass,ShowWindow,ShowWindowAsync,SoftModalMessageBox,SubtractRect,SwapMouseButton,SwitchDesktop,SwitchToThisWindow,SystemParametersInfo,TabbedTextOut,TileChildWindows,TileWindows,ToAscii,ToAsciiEx,ToUnicode,ToUnicodeEx,TrackMouseEvent,TrackPopupMenu,TrackPopupMenuEx,TranslateAccelerator,TranslateAccelerator,TranslateMDISysAccel,TranslateMessage,TranslateMessageEx,UnhookWinEvent,UnhookWindowsHook,UnhookWindowsHookEx,UnionRect,UnloadKeyboardLayout,UnlockWindowStation,UnpackDDElParam,UnregisterClass,UnregisterDeviceNotification,UnregisterHotKey,UnregisterMessagePumpHook,UnregisterUserApiHook,UpdateLayeredWindow,UpdatePerUserSystemParameters,UpdateWindow,User32InitializeImmEntryTable,UserClientDllInitialize,UserHandleGrantAccess,UserLpkPSMTextOut,UserLpkTabbedTextOut,UserRealizePalette,UserRegisterWowHandlers,VRipOutput,VTagOutput,ValidateRect,ValidateRgn,VkKeyScan,VkKeyScanEx,VkKeyScan,WCSToMBEx,WINNLSEnableIME,WINNLSGetEnableStatus,WINNLSGetIMEHotkey,WaitForInputIdle,WaitMessage,Win32PoolAllocationStats,WinHelp,WindowFromDC,WindowFromPoint,keybd_event,mouse_event,wsprintf,wvsprintf,wvsprintf," +

//csrsrv.dll
"CsrAddStaticServerThread,CsrCallServerFromServer,CsrConnectToUser,CsrCreateProcess,CsrCreateRemoteThread,CsrCreateThread,CsrCreateWait,CsrDebugProcess,CsrDebugProcessStop,CsrDereferenceProcess,CsrDereferenceThread,CsrDereferenceWait,CsrDestroyProcess,CsrDestroyThread,CsrExecServerThread,CsrGetProcessLuid,CsrImpersonateClient,CsrLockProcessByClientId,CsrLockThreadByClientId,CsrMoveSatisfiedWait,CsrNotifyWait,CsrPopulateDosDevices,CsrQueryApiPort,CsrReferenceThread,CsrRevertToSelf,CsrServerInitialization,CsrSetBackgroundPriority,CsrSetCallingSpooler,CsrSetForegroundPriority,CsrShutdownProcesses,CsrUnhandledExceptionFilter,CsrUnlockProcess,CsrUnlockThread,CsrValidateMessageBuffer,CsrValidateMessageString"