Import table
ntdll.dll
RtlNtStatusToDosError, ZwQuerySystemInformation, memcpy, ZwAllocateUuids, memmove, RtlDowncaseUnicodeString, RtlUpcaseUnicodeString, iswdigit, iswxdigit, islower, iswspace, RtlUpcaseUnicodeChar, RtlxAnsiStringToUnicodeSize, RtlxOemStringToUnicodeSize, NlsMbOemCodePageTag, RtlAnsiStringToUnicodeString, RtlOemStringToUnicodeString, RtlxUnicodeStringToAnsiSize, RtlxUnicodeStringToOemSize, RtlUnicodeStringToAnsiString, RtlUnicodeStringToOemString, _aullshr, memset, _allshl, _allmul, ZwQueryVirtualMemory, LdrGetProcedureAddress, LdrGetDllHandle, RtlInitUnicodeString, LdrUnloadDll, RtlDosPathNameToNtPathName_U, RtlGetFullPathName_U, RtlCreateUnicodeString, RtlFreeUnicodeString, LdrLoadDll, RtlExpandEnvironmentStrings_U, RtlAllocateHeap, RtlFreeHeap, ZwClose, ZwQuerySymbolicLinkObject, ZwOpenSymbolicLinkObject, ZwQueryInformationProcess, ZwCreateFile, ZwOpenFile, ZwQueryObject, ZwDuplicateToken, ZwQueryVolumeInformationFile, ZwWaitForSingleObject, ZwFsControlFile, ZwCreateEvent, _allrem, RtlQueryEnvironmentVariable_U, ZwReadVirtualMemory, RtlDestroyEnvironment, RtlSetEnvironmentVariable, RtlEqualSid, ZwQueryInformationToken, RtlCreateEnvironment, DbgPrint, ZwDisplayString, ZwWriteFile, RtlInitAnsiString, ZwOpenProcess, ZwSetInformationProcess, ZwTerminateProcess, RtlGetCurrentDirectory_U, RtlSetCurrentDirectory_U, RtlSubAuthoritySid, ZwAdjustPrivilegesToken, RtlLeaveCriticalSection, RtlEnterCriticalSection, _aulldiv, RtlTimeFieldsToTime, RtlSystemTimeToLocalTime, RtlLocalTimeToSystemTime, RtlInitializeCriticalSection, RtlDeleteCriticalSection, ZwSetEvent, ZwReleaseMutant, ZwCreateSemaphore, ZwReleaseSemaphore, ZwSetInformationThread, ZwDelayExecution, ZwDuplicateObject, RtlReleasePebLock, RtlClearBits, RtlFindClearBitsAndSet, RtlAcquirePebLock, RtlAreBitsSet, ZwQueryInformationFile, ZwQueryDirectoryFile, RtlIsDosDeviceName_U, ZwSetInformationFile, ZwReadFile, ZwQuerySecurityObject, RtlCopySid, RtlAddAccessDeniedAceEx, RtlAddAccessAllowedAceEx, RtlValidSecurityDescriptor, RtlSetDaclSecurityDescriptor, RtlSetSaclSecurityDescriptor, RtlSetGroupSecurityDescriptor, RtlSetOwnerSecurityDescriptor, RtlCreateSecurityDescriptor, RtlCreateAcl, ZwOpenKey, RtlGetSaclSecurityDescriptor, RtlGetDaclSecurityDescriptor, ZwSetSecurityObject, RtlGetAce, RtlGetGroupSecurityDescriptor, RtlGetOwnerSecurityDescriptor, ZwUnmapViewOfSection, ZwMapViewOfSection, ZwCreateSection, _chkstk, RtlReAllocateHeap, _aullrem, _stricmp, _strnicmp, _ftol, RtlTimeToTimeFields, ZwOpenSection, ZwOpenMutant, ZwCancelIoFile, NtLockFile, NtUnlockFile, RtlUnwind
