2:	DllBase(0x0000000077ac0000)	C:\Windows\system32\ntdll.dll
  0:0000000077bb71f5 ==> ZwAcceptConnectPort
  1:0000000077bb7209 ==> ZwAccessCheck
  2:0000000077bb7217 ==> ZwAccessCheckAndAuditAlarm
  3:0000000077bb7232 ==> ZwAccessCheckByType
  4:0000000077bb7246 ==> ZwAccessCheckByTypeAndAuditAlarm
  5:0000000077bb7267 ==> ZwAccessCheckByTypeResultList
  6:0000000077bb7285 ==> ZwAccessCheckByTypeResultListAndAuditAlarm
  7:0000000077bb72b0 ==> ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
  8:0000000077bb72e3 ==> ZwAcquireCMFViewOwnership
  9:0000000077bb72fd ==> ZwAddAtom
 10:0000000077bb7307 ==> ZwAddBootEntry

[---]

380:0000000077bb9074 ==> ZwWaitForMultipleObjects32
381:0000000077bb908f ==> ZwWaitForSingleObject
382:0000000077bb90a5 ==> ZwWaitForWorkViaWorkerFactory
383:0000000077bb90c3 ==> ZwWaitHighEventPair
384:0000000077bb90d7 ==> ZwWaitLowEventPair
385:0000000077bb90ea ==> ZwWorkerFactoryWorkerReady
386:0000000077bb9105 ==> ZwWriteFile
387:0000000077bb9111 ==> ZwWriteFileGather
388:0000000077bb9123 ==> ZwWriteRequestData
389:0000000077bb9136 ==> ZwWriteVirtualMemory
390:0000000077bb914b ==> ZwYieldExecution