more forward exports to NTDLL