Import table
ntdll.dll
RtlNtStatusToDosError, ZwCancelIoFile, ZwWriteFile, _aulldiv, ZwReadFile, memcpy, memmove, memset, ZwClose, ZwCreateEvent, RtlRemoveVectoredExceptionHandler, RtlAddVectoredExceptionHandler, ZwWaitForMultipleObjects, ZwResumeThread, RtlCreateUserProcess, ZwDuplicateObject, RtlInitUnicodeString, _chkstk, ZwCreateFile, ZwDeviceIoControlFile, RtlFreeUnicodeString, ZwFsControlFile, ZwWaitForSingleObject, ZwSetInformationThread, ZwSetInformationFile, RtlFreeHeap, RtlAllocateHeap, ZwOpenFile, RtlCreateUnicodeString, _allmul, RtlReAllocateHeap, LdrUnloadDll, LdrGetProcedureAddress, RtlInitAnsiString, LdrLoadDll, LdrGetDllHandle, NtClose, RtlOpenCurrentUser, ZwQueryInformationProcess, ZwOpenProcess, ZwQueryInformationToken, ZwQueryVirtualMemory, ZwReadVirtualMemory, ZwCreateKey, RtlCreateSecurityDescriptor, RtlValidSecurityDescriptor, RtlSetDaclSecurityDescriptor, RtlSetGroupSecurityDescriptor, RtlSetOwnerSecurityDescriptor, RtlSetSaclSecurityDescriptor, RtlCreateAcl, RtlAddAccessAllowedAceEx, ZwQueryValueKey, ZwOpenKey, ZwQueryKey, RtlTimeFieldsToTime, RtlLeaveCriticalSection, RtlEnterCriticalSection, ZwSetEvent, ZwResetEvent, DbgPrint, _allrem, _aulldvrm, _stricmp, _strnicmp, _ftol, _strcmpi, towupper, ZwQueryInformationThread, ZwDelayExecution, ZwTerminateThread, ZwFreeVirtualMemory, RtlRaiseException, LdrShutdownThread, ZwTerminateProcess, CsrClientCallServer, RtlCreateUserThread, ZwReleaseMutant, RtlUpcaseUnicodeString, ZwQueryInformationFile, ZwQuerySystemInformation, RtlQueryEnvironmentVariable_U, RtlUnwind, ZwAllocateVirtualMemory, RtlReleasePebLock, RtlAcquirePebLock, RtlAddAccessDeniedAceEx, RtlDosPathNameToNtPathName_U, RtlGetFullPathName_U, RtlExpandEnvironmentStrings_U, RtlxAnsiStringToUnicodeSize, RtlxOemStringToUnicodeSize, NlsMbOemCodePageTag, RtlAnsiStringToUnicodeString, RtlOemStringToUnicodeString, RtlxUnicodeStringToAnsiSize, RtlxUnicodeStringToOemSize, RtlUnicodeStringToAnsiString, RtlUnicodeStringToOemString, _aullshr, ZwQuerySymbolicLinkObject, ZwOpenSymbolicLinkObject, RtlGetCurrentDirectory_U, RtlInitializeCriticalSection, RtlDeleteCriticalSection, ZwDisplayString, RtlClearBits, RtlFindClearBitsAndSet, RtlAreBitsSet, _allshl, ZwFlushVirtualMemory, ZwUnmapViewOfSection, ZwMapViewOfSection, ZwCreateSection, NtRaiseException, _aullrem, LdrShutdownProcess