Revision: 6735 Date 7:10:2008. Time 4:15 //===================================================== *** Hardware *** Processor: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz Number Of Processors: 4 Physical Memory: 4192440 KB (Available: 1079356 KB) Commit Charge Limit: 8572576 KB *** Operation System *** Windows Vista or Windows Server 2008 Professional Service Pack 1 (Version 6.0, Build 6001) //===================================================== Exception code: C0000005 ACCESS_VIOLATION Fault address: 0000000077B77960 01:0000000000046960 C:\Windows\system32\ntdll.dll Registers: RAX:0000006C18B92981 RBX:000000001E5970E0 RCX:000000FFFFFFFFFF RDX:0000000013B6B490 RSI:000000000FC80000 RDI:0000000013B6B4A0 R8: 0000000000000000 R9: 0000000000000000 R10:0000000140F32D50 R11:0000000000000000 R12:0000000000000000 R13:0000000000000000 R14:0000000000000000 R15:CCCCCCCCCCCCCCCC CS:RIP:0033:0000000077B77960 SS:RSP:002B:0000000000128810 RBP:00000000 DS:002B ES:002B FS:0053 GS:002B Flags:00010202 Call stack: Address Frame Function SourceFile 0000000077B77960 0000000000128880 RtlFreeHeap+D0 000000007795CEAA 00000000001288B0 HeapFree+A 000000000F909F40 00000000001288F0 _free_base+30 f:\dd\vctools\crt_bld\self_64_amd64\crt\src\free.c line 109 000000000F8EAA99 0000000000128960 _free_dbg_nolock+649 f:\dd\vctools\crt_bld\self_64_amd64\crt\src\dbgheap.c line 1428 000000000F8EA436 0000000000128990 _free_dbg+26 f:\dd\vctools\crt_bld\self_64_amd64\crt\src\dbgheap.c line 1258 000000000F8E2849 00000000001289E0 operator delete+A9 f:\dd\vctools\crt_bld\self_64_amd64\crt\src\dbgdel.cpp line 54 000000000F66DF37 0000000000128A10 std::allocator::deallocate+37 c:\program files (x86)\microsoft visual studio 9.0\vc\include\xmemory line 141 000000000F66D6D6 0000000000128A50 std::basic_string,std::allocator >::_Tidy+96 c:\program files (x86)\microsoft visual studio 9.0\vc\include\xstring line 2158 000000000F67CFEB 0000000000128A90 std::basic_string,std::allocator >::~basic_string,std::allocator >+3B c:\program files (x86)\microsoft visual studio 9.0\vc\include\xstring line 906 000000000F89F6EC 0000000000129240 LoadDatabase+1BEC c:\compil\mangos x64\src\bindings\scriptdev2\scriptmgr.cpp line 1166 000000000F89FA6D 00000000001292B0 ScriptsInit+1FD c:\compil\mangos x64\src\bindings\scriptdev2\scriptmgr.cpp line 1253 000000014038A9FB 0000000000129380 LoadScriptingModule+63B c:\compil\mangos x64\src\game\scriptcalls.cpp line 94 00000001403586AD 0000000000129570 World::SetInitialWorldSettings+C1D c:\compil\mangos x64\src\game\world.cpp line 1070 0000000140081EF1 000000000012FE80 Master::Run+271 c:\compil\mangos x64\src\mangosd\master.cpp line 160 0000000140081B68 000000000012FED0 main+288 c:\compil\mangos x64\src\mangosd\main.cpp line 144 0000000140763807 000000000012FF20 __tmainCRTStartup+E7 f:\dd\vctools\crt_bld\self_64_amd64\crt\src\crt0.c line 266 000000014076370E 000000000012FF50 mainCRTStartup+E f:\dd\vctools\crt_bld\self_64_amd64\crt\src\crt0.c line 182 000000007795495D 000000000012FF80 BaseThreadInitThunk+D 0000000077B58791 000000000012FFD0 RtlUserThreadStart+21 ======================== Local Variables And Parameters Call stack: Address Frame Function SourceFile 0000000077B77960 0000000000128880 RtlFreeHeap+D0 000000007795CEAA 00000000001288B0 HeapFree+A 000000000F909F40 00000000001288F0 _free_base+30 f:\dd\vctools\crt_bld\self_64_amd64\crt\src\free.c line 109 Parameter void 'pBlock' = 0 Local int 'retval' = FFFFFFFF 000000000F8EAA99 0000000000128960 _free_dbg_nolock+649 f:\dd\vctools\crt_bld\self_64_amd64\crt\src\dbgheap.c line 1428 Parameter void 'pUserData' = 13B6B4A0 Parameter int 'nBlockUse' = CCCCCCCC Local 'pHead' = CCCCCCCCCCCCCCCC 000000000F8EA436 0000000000128990 _free_dbg+26 f:\dd\vctools\crt_bld\self_64_amd64\crt\src\dbgheap.c line 1258 Parameter void 'pUserData' = CCCCCCCCCCCCCCCC Parameter int 'nBlockUse' = CCCCCCCC 000000000F8E2849 00000000001289E0 operator delete+A9 f:\dd\vctools\crt_bld\self_64_amd64\crt\src\dbgdel.cpp line 54 Parameter void 'pUserData' = 30 Local 'pHead' = 128A50 000000000F66DF37 0000000000128A10 std::allocator::deallocate+37 c:\program files (x86)\microsoft visual studio 9.0\vc\include\xmemory line 141 Local 'this' = 13B6B4D0 Parameter char* '_Ptr' = CCCCCCCCCCCCCCCC Parameter unsigned int '__formal' = 128A90 000000000F66D6D6 0000000000128A50 std::basic_string,std::allocator >::_Tidy+96 c:\program files (x86)\microsoft visual studio 9.0\vc\include\xstring line 2158 Local 'this' = 0 Parameter bool '_Built' = EC Parameter unsigned int '_Newsize' = 128AC8 000000000F67CFEB 0000000000128A90 std::basic_string,std::allocator >::~basic_string,std::allocator >+3B c:\program files (x86)\microsoft visual studio 9.0\vc\include\xstring line 906 Local 'this' = CCCCCCCCCCCCCCCC 000000000F89F6EC 0000000000129240 LoadDatabase+1BEC c:\compil\mangos x64\src\bindings\scriptdev2\scriptmgr.cpp line 1166 punting on symbol sd2dbstring Local 'result' = CCCCCCCC00000002 000000000F89FA6D 00000000001292B0 ScriptsInit+1FD c:\compil\mangos x64\src\bindings\scriptdev2\scriptmgr.cpp line 1253 Local barGoLink empty = CCCCCCCCCCCCCCCC full = CCCCCCCCCCCCCCCC int rec_no = CCCCCCCC int rec_pos = CCCCCCCC int num_rec = CCCCCCCC int indic_len = CCCCCCCC step barGoLink ~barGoLink __vecDelDtor Local bool 'CanLoadDB' = 3A 000000014038A9FB 0000000000129380 LoadScriptingModule+63B c:\compil\mangos x64\src\game\scriptcalls.cpp line 94 Parameter char* 'libName' = CCCCCCCCCCCCCCCC punting on symbol name Local 'testScript' = 47504E204D5 00000001403586AD 0000000000129570 World::SetInitialWorldSettings+C1D c:\compil\mangos x64\src\game\world.cpp line 1070 Local 'this' = CCCCCCCCCCCCCCCC Local tm int tm_sec = 0 int tm_min = 0 int tm_hour = F int tm_mday = 0 int tm_mon = CCCCCCCC int tm_year = CCCCCCCC int tm_wday = CCCCCCCC int tm_yday = CCCCCCCC int tm_isdst = CCCCCCCC Local char* 'isoDate' Local int 'curr' = CCCCCCCCCCCCCCCC Local unsigned int 'nextGameEvent' = CCCCCCCC Local unsigned int 'realm_zone' = CCCCCCCC Local unsigned int 'server_type' = CCCCCCCC 0000000140081EF1 000000000012FE80 Master::Run+271 c:\compil\mangos x64\src\mangosd\master.cpp line 160 punting on symbol this punting on symbol bind_ip punting on symbol t punting on symbol pidfile punting on symbol numLoops punting on symbol loopCounter punting on symbol realCurrTime punting on symbol realPrevTime Local unsigned int 'wsport' = 5C70 punting on symbol worldListenSocket punting on symbol freeze_delay punting on symbol h punting on symbol RAListenSocket punting on symbol socketSelecttime 0000000140081B68 000000000012FED0 main+288 c:\compil\mangos x64\src\mangosd\main.cpp line 144 Parameter int 'argc' = 0 Parameter 'argv' = 14076370E Local int 'c' = 0 Local char* 'cfg_file' = 0 0000000140763807 000000000012FF20 __tmainCRTStartup+E7 f:\dd\vctools\crt_bld\self_64_amd64\crt\src\crt0.c line 266 Local int 'mainret' = 0 Local int 'managedapp' = 0 Local int 'initret' = 0 000000014076370E 000000000012FF50 mainCRTStartup+E f:\dd\vctools\crt_bld\self_64_amd64\crt\src\crt0.c line 182 000000007795495D 000000000012FF80 BaseThreadInitThunk+D 0000000077B58791 000000000012FFD0 RtlUserThreadStart+21 ======================== Global Variables 'RtlCreateBoundaryDescriptor' 'RtlAddSIDToBoundaryDescriptor' 'RtlDeleteBoundaryDescriptor' 'RtlCreateAtomTable' 'RtlAddAccessDeniedAce' 'atoi' = 90909090909006EB 'atol' 'RtlDeleteTimerQueueEx' 'AlpcGetHeaderSize' 'AlpcInitializeMessageAttribute' 'RtlSetControlSecurityDescriptor' 'AlpcRegisterCompletionList' 'AlpcAdjustCompletionListConcurrencyCount' 'EtwEventActivityIdControl' 'AlpcRegisterCompletionListWorkerThread' 'AlpcUnregisterCompletionListWorkerThread' 'AlpcGetMessageFromCompletionList' 'AlpcFreeCompletionListMessage' 'RtlValidateHeap' 'TpIsTimerSet' 'RtlWalkHeap' 'RtlpEnsureBufferSize' 'wcscspn' 'TpCallbackLeaveCriticalSectionOnCompletion' 'RtlCreateServiceSid' 'RtlPrefixString' '_itow' 'RtlOwnerAcesPresent' 'RtlSecondsSince1970ToTime' 'RtlGetLongestNtPathLength' 'RtlMultiByteToUnicodeSize' 'RtlUpperChar' 'RtlDeleteFunctionTable' 'RtlInstallFunctionTableCallback' 'RtlCutoverTimeToSystemTime' 'RtlQueryRegistryValues' 'RtlpCheckDynamicTimeZoneInformation' 'RtlQueueWorkItem' 'RtlGetFileMUIPath' 'TpSimpleTryPost' 'RtlGUIDFromString' 'RtlAddAtomToAtomTable' 'RtlDeleteAtomFromAtomTable' 'RtlDeleteTimer' 'TpReleaseTimer' 'RtlCreateTimer' 'TpAllocTimer' 'TpWaitForTimer' 'RtlDeregisterWait' 'RtlpGetNameFromLangInfoNode' 'RtlpGetLCIDFromLangInfoNode' 'RtlpIsQualifiedLanguage' 'RtlValidRelativeSecurityDescriptor' 'RtlUpdateTimer' 'RtlCreateUserStack' 'RtlFreeUserStack' 'RtlQueryInformationAcl' 'RtlSelfRelativeToAbsoluteSD' 'RtlAbortRXact' 'RtlStartRXact' 'RtlSidHashInitialize' 'RtlSidHashLookup' 'RtlFreeOemString' 'TpSetTimer' 'RtlComputeCrc32' 'EtwWriteUMSecurityEvent' 'RtlDeleteElementGenericTableAvl' 'RtlInsertElementGenericTableAvl' 'RtlCopyString' 'RtlSystemTimeToLocalTime' 'RtlIpv4StringToAddressExW' 'RtlDnsHostNameToComputerName' 'RtlGetElementGenericTableAvl' 'RtlUpcaseUnicodeToOemN' 'RtlUpcaseUnicodeStringToOemString' 'RtlAdjustPrivilege' 'RtlEnumerateGenericTable' 'RtlCreateEnvironment' 'RtlCreateEnvironmentEx' 'wcstol' 'RtlEqualString' 'RtlEqualDomainName' 'RtlNtPathNameToDosPathName' 'AlpcMaxAllowedMessageLength' 'RtlGetGroupSecurityDescriptor' 'RtlGetOwnerSecurityDescriptor' 'RtlImpersonateSelf' 'RtlImpersonateSelfEx' 'RtlSidDominates' 'RtlDeleteSecurityObject' 'RtlNewSecurityObjectEx' 'RtlFindAceByType' 'RtlDestroyEnvironment' 'RtlAddAce' 'RtlClearAllBits' 'RtlSetAllBits' 'RtlCopySecurityDescriptor' 'RtlSetSecurityObject' 'RtlCopyLuid' 'RtlMapGenericMask' 'RtlAreAllAccessesGranted' 'RtlpNtQueryValueKey' 'RtlpNtOpenKey' 'RtlUpcaseUnicodeString' 'RtlDoesFileExists_U' 'RtlDowncaseUnicodeString' 'RtlInsertElementGenericTableFullAvl' 'qsort' 'RtlNumberGenericTableElementsAvl' 'RtlLookupElementGenericTableFullAvl' 'RtlAddRefMemoryStream' 'RtlQueryInterfaceMemoryStream' 'RtlStatMemoryStream' 'RtlReadOutOfProcessMemoryStream' 'RtlReleaseMemoryStream' 'RtlInitOutOfProcessMemoryStream' 'RtlFinalReleaseOutOfProcessMemoryStream' 'RtlUnicodeStringToOemString' 'RtlUnicodeToOemN' 'RtlOemStringToUnicodeString' 'RtlOemToUnicodeN' 'RtlIpv6AddressToStringExW' 'RtlIpv6AddressToStringW' 'RtlConvertSharedToExclusive' 'RtlAddMandatoryAce' 'RtlIpv6StringToAddressExW' 'RtlIpv6StringToAddressW' '_itoa' 'RtlSetUserValueHeap' 'RtlIpv4AddressToStringExW' 'RtlIpv4AddressToStringW' 'RtlCharToInteger' 'RtlQueryDepthSList' 'RtlAcquireResourceShared' 'RtlpQueryDefaultUILanguage' 'RtlAppendStringToString' 'EtwEventWrite' '_wcstoui64' 'TpDisassociateCallback' 'EtwGetTraceEnableLevel' 'EtwGetTraceEnableFlags' 'EtwGetTraceLoggerHandle' 'wcstoul' 'RtlReleaseResource' 'RtlAcquireResourceExclusive' 'RtlGetDaclSecurityDescriptor' 'toupper' 'RtlUpcaseUnicodeToMultiByteN' 'RtlGetSaclSecurityDescriptor' 'RtlCreateUnicodeString' 'RtlSetSaclSecurityDescriptor' 'RtlIsGenericTableEmpty' 'RtlIdentifierAuthoritySid' 'RtlSplay' 'RtlPopFrame' 'RtlPushFrame' 'RtlInitializeBitMap' 'RtlValidSecurityDescriptor' 'RtlGetAce' 'RtlInterlockedPushEntrySList' 'RtlLengthSecurityDescriptor' 'RtlIpv4StringToAddressW' 'MD5Init' 'MD5Final' 'MD5Update' 'A_SHAInit' 'A_SHAFinal' 'A_SHAUpdate' 'RtlInitializeResource' 'RtlLookupElementGenericTable' 'RtlLookupElementGenericTableFull' 'EtwRegisterTraceGuidsW' 'RtlAllocateHandle' 'EtwRegisterTraceGuidsA' 'RtlAddRefActivationContext' 'RtlMakeSelfRelativeSD' 'RtlAbsoluteToSelfRelativeSD' 'RtlGetControlSecurityDescriptor' '_ultow' 'RtlAddAccessAllowedAceEx' 'RtlFreeHandle' 'RtlCreateActivationContext' 'RtlDuplicateUnicodeString' 'RtlIsValidIndexHandle' 'RtlInsertElementGenericTable' 'RtlInsertElementGenericTableFull' 'TpAllocPool' 'TpSetPoolMaxThreads' 'TpSetPoolMinThreads' 'NtdllDefWindowProc_A' 'RtlIsThreadWithinLoaderCallout' 'EtwTraceMessage' 'EtwTraceMessageVa' 'RtlCaptureStackBackTrace' 'RtlWalkFrameChain' 'RtlDeleteResource' 'RtlIsTextUnicode' 'RtlDestroyHeap' 'RtlClearBits' 'RtlAreBitsSet' 'RtlFlsFree' 'RtlRealSuccessor' 'RtlDeleteElementGenericTable' 'RtlDelete' 'RtlSetEnvironmentStrings' 'LdrShutdownThread' 'RtlFreeActivationContextStack' 'RtlExitUserThread' 'RtlCleanUpTEBLangLists' 'RtlCheckForOrphanedCriticalSections' 'isdigit' '__isascii' 'RtlIpv4StringToAddressA' 'RtlTimeToSecondsSince1970' 'RtlStringFromGUID' 'RtlIpv6StringToAddressA' 'isxdigit' 'strtol' 'RtlIpv4AddressToStringA' 'RtlDosPathNameToNtPathName_U' 'RtlSetThreadErrorMode' 'RtlDosSearchPath_Ustr' 'LdrAddLoadAsDataTable' 'RtlUnicodeStringToInteger' 'EtwEventEnabled' 'TpCheckTerminateWorker' 'RtlGetProductInfo' 'LdrUnloadAlternateResourceModuleEx' 'LdrUnloadAlternateResourceModule' 'LdrRemoveLoadAsDataTable' 'LdrGetFileNameFromLoadAsDataTable' 'wcspbrk' 'RtlExpandEnvironmentStrings_U' 'RtlDecodeSystemPointer' 'RtlQueryElevationFlags' 'wcsstr' 'RtlpUnWaitCriticalSection' 'RtlVerifyVersionInfo' 'VerSetConditionMask' 'RtlDosPathNameToNtPathName_U_WithStatus' 'RtlLockHeap' 'RtlUnlockHeap' 'RtlFormatMessageEx' 'RtlAddressInSectionTable' 'iswdigit' 'RtlIsValidHandle' 'LdrFindEntryForAddress' 'RtlQueryInformationActiveActivationContext' 'LdrAddRefDll' 'RtlIntegerToUnicodeString' 'RtlIntegerToChar' 'RtlEnumerateGenericTableWithoutSplaying' 'RtlNumberGenericTableElements' 'RtlDestroyHandleTable' 'RtlExitUserProcess' 'LdrShutdownProcess' 'RtlActivateActivationContextEx' 'RtlActivateActivationContext' 'RtlDeactivateActivationContext' 'RtlSetThreadPreferredUILanguages' 'RtlGetCurrentDirectory_U' 'TpCaptureCaller' 'RtlSetCurrentDirectory_U' 'RtlDosSearchPath_U' 'LdrLoadAlternateResourceModule' 'LdrFindResourceDirectory_U' 'RtlEncodeSystemPointer' 'LdrQueryImageFileExecutionOptions' 'LdrQueryImageFileExecutionOptionsEx' 'LdrQueryImageFileKeyOption' 'RtlReleasePebLock' 'RtlAcquirePebLock' 'wcschr' 'wcsrchr' '_wcsnicmp' 'RtlAnsiCharToUnicodeChar' 'RtlCreateUnicodeStringFromAsciiz' 'LdrLoadDll' 'RtlGetVersion' 'RtlGetNtProductType' 'RtlUpcaseUnicodeChar' 'RtlImageNtHeader' 'RtlGetFullPathName_UstrEx' 'wcsncmp' 'LdrAccessResource' 'LdrFindResource_U' 'RtlLengthSid' 'RtlValidSid' 'RtlEqualSid' 'RtlLookupElementGenericTableAvl' 'RtlProcessFlsData' 'RtlInitializeCriticalSection' 'RtlFindActivationContextSectionGuid' 'RtlAllocateActivationContextStack' 'LdrInitializeThunk' 'RtlUserThreadStart' 'LdrUnloadDll' 'RtlAppendUnicodeStringToString' 'RtlCopyUnicodeString' 'RtlAppendUnicodeToString' 'RtlConvertSidToUnicodeString' 'RtlFormatCurrentUserKeyPath' 'RtlLocaleNameToLcid' 'RtlQueryEnvironmentVariable_U' 'RtlPrefixUnicodeString' 'LdrpResGetResourceDirectory' 'LdrpResGetMappingSize' 'LdrResSearchResource' '_vsnwprintf' 'LdrLoadAlternateResourceModuleEx' 'RtlImageDirectoryEntryToData' 'RtlSubAuthoritySid' 'RtlCopySid' 'RtlLengthRequiredSid' 'RtlSubAuthorityCountSid' 'RtlValidAcl' 'RtlCreateSecurityDescriptor' 'RtlSetDaclSecurityDescriptor' 'RtlFirstFreeAce' 'RtlCreateAcl' 'RtlAddAccessAllowedAce' 'RtlInitializeSid' 'EtwEventWriteFull' 'iswctype' 'RtlOpenCurrentUser' 'towlower' 'RtlCultureNameToLCID' 'RtlFreeSid' 'RtlAllocateAndInitializeSid' 'RtlpCreateProcessRegistryInfo' 'RtlLCIDToCultureName' 'RtlLcidToLocaleName' 'RtlGetThreadPreferredUILanguages' 'RtlpGetSystemDefaultUILanguage' 'RtlCreateProcessParametersEx' 'CsrAllocateCaptureBuffer' 'CsrAllocateMessagePointer' 'RtlCompareUnicodeString' 'CsrFreeCaptureBuffer' 'CsrCaptureMessageMultiUnicodeStringsInPlace' 'CsrCaptureMessageString' 'RtlpApplyLengthFunction' 'RtlGetLengthWithoutLastFullDosOrNtPathElement' 'RtlDestroyProcessParameters' 'RtlSetEnvironmentVar' 'RtlSetEnvironmentVariable' '_strcmpi' '_stricmp' 'strchr' 'RtlGetActiveActivationContext' 'LdrResFindResourceDirectory' 'LdrDisableThreadCalloutsForDll' 'RtlReAllocateHeap' 'RtlInitializeCriticalSectionEx' 'EtwUnregisterTraceGuids' 'EtwEventUnregister' 'EtwNotificationUnregister' 'RtlInitializeSRWLock' 'RtlRandomEx' 'RtlRunOnceBeginInitialize' 'RtlCreateHeap' 'RtlSetBits' 'EtwNotificationRegister' 'EtwEventRegister' '_wcsupr' 'RtlMultiAppendUnicodeStringBuffer' 'RtlFlsAlloc' 'RtlEncodePointer' 'CsrClientConnectToServer' 'RtlInitializeHandleTable' 'RtlGetNtGlobalFlags' 'RtlSetUnhandledExceptionFilter' 'RtlNormalizeProcessParams' 'RtlResetRtlTranslations' 'RtlInitNlsTables' 'RtlInitCodePageTable' 'CsrIdentifyAlertableThread' 'RtlInitializeAtomPackage' 'RtlCreateTagHeap' 'RtlRunOnceComplete' 'RtlUniform' 'LdrSetDllManifestProber' 'RtlSetThreadPoolStartFunc' 'WinSqmIsOptedIn' 'LdrEnumerateLoadedModules' 'RtlInitializeGenericTable' 'RtlTimeToSecondsSince1980' 'RtlSetHeapInformation' 'RtlGetNtVersionNumbers' 'RtlpMuiRegFreeRegistryInfo' 'RtlpInitializeLangRegistryInfo' 'RtlpMuiRegLoadRegistryInfo' 'RtlGetParentLocaleName' 'RtlpLoadUserUIByPolicy' 'CsrCaptureMessageBuffer' 'RtlCreateProcessParameters' 'RtlDeNormalizeProcessParams' 'LdrProcessInitializationComplete' 'LdrGetKnownDllSectionHandle' 'DbgPrintEx' '_vsnprintf' 'RtlFindMessage' 'RtlRegisterThreadWithCsrss' 'LdrpResGetRCConfig' 'RtlSetGroupSecurityDescriptor' 'RtlSetOwnerSecurityDescriptor' 'RtlFindClearBitsAndSet' 'LdrFindResourceEx_U' 'RtlInitializeNtUserPfn' 'RtlRetrieveNtUserPfn' 'RtlNtStatusToDosError' 'RtlNtStatusToDosErrorNoTeb' 'RtlAcquireSRWLockExclusive' 'RtlReleaseSRWLockExclusive' 'RtlGetCurrentTransaction' 'RtlSetCurrentTransaction' 'RtlQueryEnvironmentVariable' 'RtlCompareUnicodeStrings' 'RtlInitializeCriticalSectionAndSpinCount' 'RtlDeleteCriticalSection' 'RtlDosPathNameToRelativeNtPathName_U' 'RtlDllShutdownInProgress' 'RtlInterlockedFlushSList' 'RtlInitializeSListHead' 'RtlSetCriticalSectionSpinCount' 'RtlUnwindEx' '__C_specific_handler' 'RtlRaiseException' 'RtlDecodePointer' 'DbgPrint' 'RtlQueryInformationActivationContext' 'RtlExpandEnvironmentStrings' 'RtlReleaseActivationContext' 'RtlSizeHeap' 'TpSetWait' 'TpReleaseWait' 'RtlDeregisterWaitEx' 'TpCallbackMayRunLong' 'TpWaitForWait' 'RtlRegisterWait' 'TpAllocWait' 'RtlPcToFileHeader' 'RtlMoveMemory' 'memmove' 'memcpy' 'RtlCopyMemory' '_local_unwind' 'memcmp' 'pow' 'strcat' 'strcpy' 'strcmp' 'strlen' 'strncat' 'strncmp' 'strncpy' 'RtlGetCurrentProcessorNumber' 'DbgBreakPoint' 'DbgUserBreakPoint' 'RtlFirstEntrySList' 'RtlInterlockedPopEntrySList' 'ExpInterlockedPopEntrySListResume' 'ExpInterlockedPopEntrySListFault' 'ExpInterlockedPopEntrySListEnd' 'RtlInterlockedPushListSList' 'RtlCaptureContext' 'RtlRestoreContext' '__chkstk' '_setjmp' '_setjmpex' 'longjmp' 'KiUserApcDispatcher' 'KiUserCallbackDispatcher' 'KiUserExceptionDispatcher' 'KiRaiseUserExceptionDispatcher' 'ZwMapUserPhysicalPagesScatter' 'NtMapUserPhysicalPagesScatter' 'ZwWaitForSingleObject' 'NtWaitForSingleObject' 'ZwCallbackReturn' 'NtCallbackReturn' 'ZwReadFile' 'NtReadFile' 'NtDeviceIoControlFile' 'ZwDeviceIoControlFile' 'ZwWriteFile' 'NtWriteFile' 'ZwRemoveIoCompletion' 'NtRemoveIoCompletion' 'ZwReleaseSemaphore' 'NtReleaseSemaphore' 'NtReplyWaitReceivePort' 'ZwReplyWaitReceivePort' 'ZwReplyPort' 'NtReplyPort' 'ZwSetInformationThread' 'NtSetInformationThread' 'NtSetEvent' 'ZwSetEvent' 'ZwClose' 'NtClose' 'ZwQueryObject' 'NtQueryObject' 'NtQueryInformationFile' 'ZwQueryInformationFile' 'ZwOpenKey' 'NtOpenKey' 'ZwEnumerateValueKey' 'NtEnumerateValueKey' 'ZwFindAtom' 'NtFindAtom' 'ZwQueryDefaultLocale' 'NtQueryDefaultLocale' 'NtQueryKey' 'ZwQueryKey' 'NtQueryValueKey' 'ZwQueryValueKey' 'NtAllocateVirtualMemory' 'ZwAllocateVirtualMemory' 'ZwQueryInformationProcess' 'NtQueryInformationProcess' 'NtWaitForMultipleObjects32' 'ZwWaitForMultipleObjects32' 'NtWriteFileGather' 'ZwWriteFileGather' 'NtSetInformationProcess' 'ZwSetInformationProcess' 'NtCreateKey' 'ZwCreateKey' 'NtFreeVirtualMemory' 'ZwFreeVirtualMemory' 'ZwImpersonateClientOfPort' 'NtImpersonateClientOfPort' 'NtReleaseMutant' 'ZwReleaseMutant' 'NtQueryInformationToken' 'ZwQueryInformationToken' 'ZwRequestWaitReplyPort' 'NtRequestWaitReplyPort' 'NtQueryVirtualMemory' 'ZwQueryVirtualMemory' 'ZwOpenThreadToken' 'NtOpenThreadToken' 'ZwQueryInformationThread' 'NtQueryInformationThread' 'NtOpenProcess' 'ZwOpenProcess' 'ZwSetInformationFile' 'NtSetInformationFile' 'NtMapViewOfSection' 'ZwMapViewOfSection' 'ZwAccessCheckAndAuditAlarm' 'NtAccessCheckAndAuditAlarm' 'NtUnmapViewOfSection' 'ZwUnmapViewOfSection' 'NtReplyWaitReceivePortEx' 'ZwReplyWaitReceivePortEx' 'ZwTerminateProcess' 'NtTerminateProcess' 'ZwSetEventBoostPriority' 'NtSetEventBoostPriority' 'ZwReadFileScatter' 'NtReadFileScatter' 'NtOpenThreadTokenEx' 'ZwOpenThreadTokenEx' 'ZwOpenProcessTokenEx' 'NtOpenProcessTokenEx' 'ZwQueryPerformanceCounter' 'NtQueryPerformanceCounter' 'NtEnumerateKey' 'ZwEnumerateKey' 'NtOpenFile' 'ZwOpenFile' 'NtDelayExecution' 'ZwDelayExecution' 'NtQueryDirectoryFile' 'ZwQueryDirectoryFile' 'RtlGetNativeSystemInformation' 'NtQuerySystemInformation' 'ZwQuerySystemInformation' 'ZwOpenSection' 'NtOpenSection' 'ZwQueryTimer' 'NtQueryTimer' 'ZwFsControlFile' 'NtFsControlFile' 'ZwWriteVirtualMemory' 'NtWriteVirtualMemory' 'ZwCloseObjectAuditAlarm' 'NtCloseObjectAuditAlarm' 'ZwDuplicateObject' 'NtDuplicateObject' 'ZwQueryAttributesFile' 'NtQueryAttributesFile' 'NtClearEvent' 'ZwClearEvent' 'NtReadVirtualMemory' 'ZwReadVirtualMemory' 'NtOpenEvent' 'ZwOpenEvent' 'ZwAdjustPrivilegesToken' 'NtAdjustPrivilegesToken' 'ZwDuplicateToken' 'NtDuplicateToken' 'NtContinue' 'ZwContinue' 'ZwQueryDefaultUILanguage' 'NtQueryDefaultUILanguage' 'NtQueueApcThread' 'ZwQueueApcThread' 'ZwYieldExecution' 'NtYieldExecution' 'NtAddAtom' 'ZwAddAtom' 'NtCreateEvent' 'ZwCreateEvent' 'NtQueryVolumeInformationFile' 'ZwQueryVolumeInformationFile' 'NtCreateSection' 'ZwCreateSection' 'NtFlushBuffersFile' 'ZwFlushBuffersFile' 'NtApphelpCacheControl' 'ZwApphelpCacheControl' 'NtCreateProcessEx' 'ZwCreateProcessEx' 'ZwCreateThread' 'NtCreateThread' 'NtIsProcessInJob' 'ZwIsProcessInJob' 'ZwProtectVirtualMemory' 'NtProtectVirtualMemory' 'NtQuerySection' 'ZwQuerySection' 'NtResumeThread' 'ZwResumeThread' 'NtTerminateThread' 'ZwTerminateThread' 'NtReadRequestData' 'ZwReadRequestData' 'ZwCreateFile' 'NtCreateFile' 'ZwQueryEvent' 'NtQueryEvent' 'ZwWriteRequestData' 'NtWriteRequestData' 'ZwOpenDirectoryObject' 'NtOpenDirectoryObject' 'ZwAccessCheckByTypeAndAuditAlarm' 'NtAccessCheckByTypeAndAuditAlarm' 'ZwQuerySystemTime' 'NtQuerySystemTime' 'NtWaitForMultipleObjects' 'ZwWaitForMultipleObjects' 'NtSetInformationObject' 'ZwSetInformationObject' 'ZwCancelIoFile' 'NtCancelIoFile' 'NtTraceEvent' 'ZwTraceEvent' 'ZwPowerInformation' 'NtPowerInformation' 'ZwSetValueKey' 'NtSetValueKey' 'ZwCancelTimer' 'NtCancelTimer' 'ZwSetTimer' 'NtSetTimer' 'NtAcceptConnectPort' 'ZwAcceptConnectPort' 'ZwAccessCheck' 'NtAccessCheck' 'ZwAccessCheckByType' 'NtAccessCheckByType' 'ZwAccessCheckByTypeResultList' 'NtAccessCheckByTypeResultList' 'NtAccessCheckByTypeResultListAndAuditAlarm' 'ZwAccessCheckByTypeResultListAndAuditAlarm' 'ZwAccessCheckByTypeResultListAndAuditAlarmByHandle' 'NtAccessCheckByTypeResultListAndAuditAlarmByHandle' 'ZwAcquireCMFViewOwnership' 'NtAcquireCMFViewOwnership' 'NtAddBootEntry' 'ZwAddBootEntry' 'NtAddDriverEntry' 'ZwAddDriverEntry' 'NtAdjustGroupsToken' 'ZwAdjustGroupsToken' 'NtAlertResumeThread' 'ZwAlertResumeThread' 'NtAlertThread' 'ZwAlertThread' 'NtAllocateLocallyUniqueId' 'ZwAllocateLocallyUniqueId' 'NtAllocateUserPhysicalPages' 'ZwAllocateUserPhysicalPages' 'ZwAllocateUuids' 'NtAllocateUuids' 'ZwAlpcAcceptConnectPort' 'NtAlpcAcceptConnectPort' 'NtAlpcCancelMessage' 'ZwAlpcCancelMessage' 'ZwAlpcConnectPort' 'NtAlpcConnectPort' 'NtAlpcCreatePort' 'ZwAlpcCreatePort' 'ZwAlpcCreatePortSection' 'NtAlpcCreatePortSection' 'ZwAlpcCreateResourceReserve' 'NtAlpcCreateResourceReserve' 'NtAlpcCreateSectionView' 'ZwAlpcCreateSectionView' 'NtAlpcCreateSecurityContext' 'ZwAlpcCreateSecurityContext' 'NtAlpcDeletePortSection' 'ZwAlpcDeletePortSection' 'NtAlpcDeleteResourceReserve' 'ZwAlpcDeleteResourceReserve' 'NtAlpcDeleteSectionView' 'ZwAlpcDeleteSectionView' 'NtAlpcDeleteSecurityContext' 'ZwAlpcDeleteSecurityContext' 'NtAlpcDisconnectPort' 'ZwAlpcDisconnectPort' 'ZwAlpcImpersonateClientOfPort' 'NtAlpcImpersonateClientOfPort' 'ZwAlpcOpenSenderProcess' 'NtAlpcOpenSenderProcess' 'ZwAlpcOpenSenderThread' 'NtAlpcOpenSenderThread' 'NtAlpcQueryInformation' 'ZwAlpcQueryInformation' 'NtAlpcQueryInformationMessage' 'ZwAlpcQueryInformationMessage' 'ZwAlpcRevokeSecurityContext' 'NtAlpcRevokeSecurityContext' 'NtAlpcSendWaitReceivePort' 'ZwAlpcSendWaitReceivePort' 'ZwAlpcSetInformation' 'NtAlpcSetInformation' 'NtAreMappedFilesTheSame' 'ZwAreMappedFilesTheSame' 'NtAssignProcessToJobObject' 'ZwAssignProcessToJobObject' 'ZwCancelDeviceWakeupRequest' 'NtCancelDeviceWakeupRequest' 'ZwCancelIoFileEx' 'NtCancelIoFileEx' 'NtCancelSynchronousIoFile' 'ZwCancelSynchronousIoFile' 'NtCommitComplete' 'ZwCommitComplete' 'ZwCommitEnlistment' 'NtCommitEnlistment' 'ZwCommitTransaction' 'NtCommitTransaction' 'ZwCompactKeys' 'NtCompactKeys' 'NtCompareTokens' 'ZwCompareTokens' 'ZwCompleteConnectPort' 'NtCompleteConnectPort' 'NtCompressKey' 'ZwCompressKey' 'NtConnectPort' 'ZwConnectPort' 'NtCreateDebugObject' 'ZwCreateDebugObject' 'NtCreateDirectoryObject' 'ZwCreateDirectoryObject' 'NtCreateEnlistment' 'ZwCreateEnlistment' 'NtCreateEventPair' 'ZwCreateEventPair' 'NtCreateIoCompletion' 'ZwCreateIoCompletion' 'NtCreateJobObject' 'ZwCreateJobObject' 'ZwCreateJobSet' 'NtCreateJobSet' 'NtCreateKeyTransacted' 'ZwCreateKeyTransacted' 'ZwCreateKeyedEvent' 'NtCreateKeyedEvent' 'ZwCreateMailslotFile' 'NtCreateMailslotFile' 'ZwCreateMutant' 'NtCreateMutant' 'ZwCreateNamedPipeFile' 'NtCreateNamedPipeFile' 'ZwCreatePagingFile' 'NtCreatePagingFile' 'NtCreatePort' 'ZwCreatePort' 'NtCreatePrivateNamespace' 'ZwCreatePrivateNamespace' 'ZwCreateProcess' 'NtCreateProcess' 'NtCreateProfile' 'ZwCreateProfile' 'NtCreateResourceManager' 'ZwCreateResourceManager' 'NtCreateSemaphore' 'ZwCreateSemaphore' 'NtCreateSymbolicLinkObject' 'ZwCreateSymbolicLinkObject' 'NtCreateThreadEx' 'ZwCreateThreadEx' 'ZwCreateTimer' 'NtCreateTimer' 'ZwCreateToken' 'NtCreateToken' 'NtCreateTransaction' 'ZwCreateTransaction' 'ZwCreateTransactionManager' 'NtCreateTransactionManager' 'ZwCreateUserProcess' 'NtCreateUserProcess' 'ZwCreateWaitablePort' 'NtCreateWaitablePort' 'ZwCreateWorkerFactory' 'NtCreateWorkerFactory' 'NtDebugActiveProcess' 'ZwDebugActiveProcess' 'NtDebugContinue' 'ZwDebugContinue' 'NtDeleteAtom' 'ZwDeleteAtom' 'NtDeleteBootEntry' 'ZwDeleteBootEntry' 'ZwDeleteDriverEntry' 'NtDeleteDriverEntry' 'NtDeleteFile' 'ZwDeleteFile' 'NtDeleteKey' 'ZwDeleteKey' 'NtDeleteObjectAuditAlarm' 'ZwDeleteObjectAuditAlarm' 'NtDeletePrivateNamespace' 'ZwDeletePrivateNamespace' 'ZwDeleteValueKey' 'NtDeleteValueKey' 'ZwDisplayString' 'NtDisplayString' 'NtEnumerateBootEntries' 'ZwEnumerateBootEntries' 'NtEnumerateDriverEntries' 'ZwEnumerateDriverEntries' 'NtEnumerateSystemEnvironmentValuesEx' 'ZwEnumerateSystemEnvironmentValuesEx' 'ZwEnumerateTransactionObject' 'NtEnumerateTransactionObject' 'NtExtendSection' 'ZwExtendSection' 'ZwFilterToken' 'NtFilterToken' 'ZwFlushInstallUILanguage' 'NtFlushInstallUILanguage' 'ZwFlushInstructionCache' 'NtFlushInstructionCache' 'NtFlushKey' 'ZwFlushKey' 'ZwFlushProcessWriteBuffers' 'NtFlushProcessWriteBuffers' 'ZwFlushVirtualMemory' 'NtFlushVirtualMemory' 'NtFlushWriteBuffer' 'ZwFlushWriteBuffer' 'NtFreeUserPhysicalPages' 'ZwFreeUserPhysicalPages' 'NtFreezeRegistry' 'ZwFreezeRegistry' 'ZwFreezeTransactions' 'NtFreezeTransactions' 'ZwGetContextThread' 'NtGetContextThread' 'NtGetCurrentProcessorNumber' 'ZwGetCurrentProcessorNumber' 'ZwGetDevicePowerState' 'NtGetDevicePowerState' 'ZwGetMUIRegistryInfo' 'NtGetMUIRegistryInfo' 'ZwGetNextProcess' 'NtGetNextProcess' 'NtGetNextThread' 'ZwGetNextThread' 'ZwGetNlsSectionPtr' 'NtGetNlsSectionPtr' 'NtGetNotificationResourceManager' 'ZwGetNotificationResourceManager' 'ZwGetPlugPlayEvent' 'NtGetPlugPlayEvent' 'ZwGetWriteWatch' 'NtGetWriteWatch' 'ZwImpersonateAnonymousToken' 'NtImpersonateAnonymousToken' 'NtImpersonateThread' 'ZwImpersonateThread' 'NtInitializeNlsFiles' 'ZwInitializeNlsFiles' 'NtInitializeRegistry' 'ZwInitializeRegistry' 'NtInitiatePowerAction' 'ZwInitiatePowerAction' 'NtIsSystemResumeAutomatic' 'ZwIsSystemResumeAutomatic' 'NtIsUILanguageComitted' 'ZwIsUILanguageComitted' 'ZwListenPort' 'NtListenPort' 'NtLoadDriver' 'ZwLoadDriver' 'ZwLoadKey' 'NtLoadKey' 'NtLoadKey2' 'ZwLoadKey2' 'NtLoadKeyEx' 'ZwLoadKeyEx' 'ZwLockFile' 'NtLockFile' 'ZwLockProductActivationKeys' 'NtLockProductActivationKeys' 'ZwLockRegistryKey' 'NtLockRegistryKey' 'NtLockVirtualMemory' 'ZwLockVirtualMemory' 'NtMakePermanentObject' 'ZwMakePermanentObject' 'NtMakeTemporaryObject' 'ZwMakeTemporaryObject' 'ZwMapCMFModule' 'NtMapCMFModule' 'ZwMapUserPhysicalPages' 'NtMapUserPhysicalPages' 'NtModifyBootEntry' 'ZwModifyBootEntry' 'NtModifyDriverEntry' 'ZwModifyDriverEntry' 'ZwNotifyChangeDirectoryFile' 'NtNotifyChangeDirectoryFile' 'ZwNotifyChangeKey' 'NtNotifyChangeKey' 'ZwNotifyChangeMultipleKeys' 'NtNotifyChangeMultipleKeys' 'ZwOpenEnlistment' 'NtOpenEnlistment' 'NtOpenEventPair' 'ZwOpenEventPair' 'NtOpenIoCompletion' 'ZwOpenIoCompletion' 'NtOpenJobObject' 'ZwOpenJobObject' 'ZwOpenKeyTransacted' 'NtOpenKeyTransacted' 'NtOpenKeyedEvent' 'ZwOpenKeyedEvent' 'ZwOpenMutant' 'NtOpenMutant' 'NtOpenObjectAuditAlarm' 'ZwOpenObjectAuditAlarm' 'NtOpenPrivateNamespace' 'ZwOpenPrivateNamespace' 'NtOpenProcessToken' 'ZwOpenProcessToken' 'ZwOpenResourceManager' 'NtOpenResourceManager' 'NtOpenSemaphore' 'ZwOpenSemaphore' 'NtOpenSession' 'ZwOpenSession' 'ZwOpenSymbolicLinkObject' 'NtOpenSymbolicLinkObject' 'ZwOpenThread' 'NtOpenThread' 'ZwOpenTimer' 'NtOpenTimer' 'ZwOpenTransaction' 'NtOpenTransaction' 'ZwOpenTransactionManager' 'NtOpenTransactionManager' 'ZwPlugPlayControl' 'NtPlugPlayControl' 'ZwPrePrepareComplete' 'NtPrePrepareComplete' 'NtPrePrepareEnlistment' 'ZwPrePrepareEnlistment' 'ZwPrepareComplete' 'NtPrepareComplete' 'ZwPrepareEnlistment' 'NtPrepareEnlistment' 'NtPrivilegeCheck' 'ZwPrivilegeCheck' 'NtPrivilegeObjectAuditAlarm' 'ZwPrivilegeObjectAuditAlarm' 'NtPrivilegedServiceAuditAlarm' 'ZwPrivilegedServiceAuditAlarm' 'NtPropagationComplete' 'ZwPropagationComplete' 'NtPropagationFailed' 'ZwPropagationFailed' 'ZwPulseEvent' 'NtPulseEvent' 'NtQueryBootEntryOrder' 'ZwQueryBootEntryOrder' 'ZwQueryBootOptions' 'NtQueryBootOptions' 'NtQueryDebugFilterState' 'ZwQueryDebugFilterState' 'NtQueryDirectoryObject' 'ZwQueryDirectoryObject' 'ZwQueryDriverEntryOrder' 'NtQueryDriverEntryOrder' 'ZwQueryEaFile' 'NtQueryEaFile' 'NtQueryFullAttributesFile' 'ZwQueryFullAttributesFile' 'NtQueryInformationAtom' 'ZwQueryInformationAtom' 'NtQueryInformationEnlistment' 'ZwQueryInformationEnlistment' 'NtQueryInformationJobObject' 'ZwQueryInformationJobObject' 'ZwQueryInformationPort' 'NtQueryInformationPort' 'ZwQueryInformationResourceManager' 'NtQueryInformationResourceManager' 'NtQueryInformationTransaction' 'ZwQueryInformationTransaction' 'NtQueryInformationTransactionManager' 'ZwQueryInformationTransactionManager' 'ZwQueryInformationWorkerFactory' 'NtQueryInformationWorkerFactory' 'ZwQueryInstallUILanguage' 'NtQueryInstallUILanguage' 'ZwQueryIntervalProfile' 'NtQueryIntervalProfile' 'NtQueryIoCompletion' 'ZwQueryIoCompletion' 'ZwQueryLicenseValue' 'NtQueryLicenseValue' 'ZwQueryMultipleValueKey' 'NtQueryMultipleValueKey' 'NtQueryMutant' 'ZwQueryMutant' 'NtQueryOpenSubKeys' 'ZwQueryOpenSubKeys' 'ZwQueryOpenSubKeysEx' 'NtQueryOpenSubKeysEx' 'NtQueryPortInformationProcess' 'ZwQueryPortInformationProcess' 'NtQueryQuotaInformationFile' 'ZwQueryQuotaInformationFile' 'ZwQuerySecurityObject' 'NtQuerySecurityObject' 'ZwQuerySemaphore' 'NtQuerySemaphore' 'ZwQuerySymbolicLinkObject' 'NtQuerySymbolicLinkObject' 'NtQuerySystemEnvironmentValue' 'ZwQuerySystemEnvironmentValue' 'ZwQuerySystemEnvironmentValueEx' 'NtQuerySystemEnvironmentValueEx' 'ZwQueryTimerResolution' 'NtQueryTimerResolution' 'NtRaiseException' 'ZwRaiseException' 'NtRaiseHardError' 'ZwRaiseHardError' 'NtReadOnlyEnlistment' 'ZwReadOnlyEnlistment' 'ZwRecoverEnlistment' 'NtRecoverEnlistment' 'NtRecoverResourceManager' 'ZwRecoverResourceManager' 'NtRecoverTransactionManager' 'ZwRecoverTransactionManager' 'ZwRegisterProtocolAddressInformation' 'NtRegisterProtocolAddressInformation' 'ZwRegisterThreadTerminatePort' 'NtRegisterThreadTerminatePort' 'ZwReleaseCMFViewOwnership' 'NtReleaseCMFViewOwnership' 'ZwReleaseKeyedEvent' 'NtReleaseKeyedEvent' 'NtReleaseWorkerFactoryWorker' 'ZwReleaseWorkerFactoryWorker' 'ZwRemoveIoCompletionEx' 'NtRemoveIoCompletionEx' 'ZwRemoveProcessDebug' 'NtRemoveProcessDebug' 'NtRenameKey' 'ZwRenameKey' 'ZwRenameTransactionManager' 'NtRenameTransactionManager' 'ZwReplaceKey' 'NtReplaceKey' 'ZwReplacePartitionUnit' 'NtReplacePartitionUnit' 'ZwReplyWaitReplyPort' 'NtReplyWaitReplyPort' 'ZwRequestDeviceWakeup' 'NtRequestDeviceWakeup' 'NtRequestPort' 'ZwRequestPort' 'NtRequestWakeupLatency' 'ZwRequestWakeupLatency' 'ZwResetEvent' 'NtResetEvent' 'NtResetWriteWatch' 'ZwResetWriteWatch' 'ZwRestoreKey' 'NtRestoreKey' 'ZwResumeProcess' 'NtResumeProcess' 'NtRollbackComplete' 'ZwRollbackComplete' 'ZwRollbackEnlistment' 'NtRollbackEnlistment' 'ZwRollbackTransaction' 'NtRollbackTransaction' 'ZwRollforwardTransactionManager' 'NtRollforwardTransactionManager' 'NtSaveKey' 'ZwSaveKey' 'ZwSaveKeyEx' 'NtSaveKeyEx' 'NtSaveMergedKeys' 'ZwSaveMergedKeys' 'NtSecureConnectPort' 'ZwSecureConnectPort' 'NtSetBootEntryOrder' 'ZwSetBootEntryOrder' 'NtSetBootOptions' 'ZwSetBootOptions' 'ZwSetContextThread' 'NtSetContextThread' 'ZwSetDebugFilterState' 'NtSetDebugFilterState' 'ZwSetDefaultHardErrorPort' 'NtSetDefaultHardErrorPort' 'ZwSetDefaultLocale' 'NtSetDefaultLocale' 'NtSetDefaultUILanguage' 'ZwSetDefaultUILanguage' 'NtSetDriverEntryOrder' 'ZwSetDriverEntryOrder' 'NtSetEaFile' 'ZwSetEaFile' 'NtSetHighEventPair' 'ZwSetHighEventPair' 'NtSetHighWaitLowEventPair' 'ZwSetHighWaitLowEventPair' 'ZwSetInformationDebugObject' 'NtSetInformationDebugObject' 'NtSetInformationEnlistment' 'ZwSetInformationEnlistment' 'NtSetInformationJobObject' 'ZwSetInformationJobObject' 'ZwSetInformationKey' 'NtSetInformationKey' 'ZwSetInformationResourceManager' 'NtSetInformationResourceManager' 'NtSetInformationToken' 'ZwSetInformationToken' 'NtSetInformationTransaction' 'ZwSetInformationTransaction' 'NtSetInformationTransactionManager' 'ZwSetInformationTransactionManager' 'NtSetInformationWorkerFactory' 'ZwSetInformationWorkerFactory' 'NtSetIntervalProfile' 'ZwSetIntervalProfile' 'NtSetIoCompletion' 'ZwSetIoCompletion' 'NtSetLdtEntries' 'ZwSetLdtEntries' 'NtSetLowEventPair' 'ZwSetLowEventPair' 'ZwSetLowWaitHighEventPair' 'NtSetLowWaitHighEventPair' 'ZwSetQuotaInformationFile' 'NtSetQuotaInformationFile' 'ZwSetSecurityObject' 'NtSetSecurityObject' 'ZwSetSystemEnvironmentValue' 'NtSetSystemEnvironmentValue' 'NtSetSystemEnvironmentValueEx' 'ZwSetSystemEnvironmentValueEx' 'NtSetSystemInformation' 'ZwSetSystemInformation' 'NtSetSystemPowerState' 'ZwSetSystemPowerState' 'ZwSetSystemTime' 'NtSetSystemTime' 'ZwSetThreadExecutionState' 'NtSetThreadExecutionState' 'ZwSetTimerResolution' 'NtSetTimerResolution' 'ZwSetUuidSeed' 'NtSetUuidSeed' 'ZwSetVolumeInformationFile' 'NtSetVolumeInformationFile' 'ZwShutdownSystem' 'NtShutdownSystem' 'NtShutdownWorkerFactory' 'ZwShutdownWorkerFactory' 'ZwSignalAndWaitForSingleObject' 'NtSignalAndWaitForSingleObject' 'ZwSinglePhaseReject' 'NtSinglePhaseReject' 'ZwStartProfile' 'NtStartProfile' 'NtStopProfile' 'ZwStopProfile' 'NtSuspendProcess' 'ZwSuspendProcess' 'ZwSuspendThread' 'NtSuspendThread' 'ZwSystemDebugControl' 'NtSystemDebugControl' 'ZwTerminateJobObject' 'NtTerminateJobObject' 'NtTestAlert' 'ZwTestAlert' 'NtThawRegistry' 'ZwThawRegistry' 'ZwThawTransactions' 'NtThawTransactions' 'NtTraceControl' 'ZwTraceControl' 'NtTranslateFilePath' 'ZwTranslateFilePath' 'ZwUnloadDriver' 'NtUnloadDriver' 'NtUnloadKey' 'ZwUnloadKey' 'ZwUnloadKey2' 'NtUnloadKey2' 'NtUnloadKeyEx' 'ZwUnloadKeyEx' 'NtUnlockFile' 'ZwUnlockFile' 'NtUnlockVirtualMemory' 'ZwUnlockVirtualMemory' 'ZwVdmControl' 'NtVdmControl' 'ZwWaitForDebugEvent' 'NtWaitForDebugEvent' 'ZwWaitForKeyedEvent' 'NtWaitForKeyedEvent' 'ZwWaitForWorkViaWorkerFactory' 'NtWaitForWorkViaWorkerFactory' 'NtWaitHighEventPair' 'ZwWaitHighEventPair' 'ZwWaitLowEventPair' 'NtWaitLowEventPair' 'ZwWorkerFactoryWorkerReady' 'NtWorkerFactoryWorkerReady' 'RtlCompareMemory' 'RtlCompareMemoryUlong' 'RtlCopyMemoryNonTemporal' 'RtlFillMemory' 'RtlZeroMemory' 'memset' 'RtlActivateActivationContextUnsafeFast' 'RtlDeactivateActivationContextUnsafeFast' 'RtlLeaveCriticalSection' 'RtlEnterCriticalSection' 'RtlFreeHeap' 'RtlAllocateHeap' 'LdrUnlockLoaderLock' 'LdrLockLoaderLock' 'RtlInitUnicodeString' 'RtlImageNtHeaderEx' 'RtlTryEnterCriticalSection' 'RtlSetLastWin32Error' 'RtlRestoreLastWin32Error' 'RtlReleaseSRWLockShared' 'RtlAcquireSRWLockShared' 'RtlFreeUnicodeString' 'RtlFreeAnsiString' 'RtlInitUnicodeStringEx' 'RtlEqualUnicodeString' 'RtlDetermineDosPathNameType_U' 'RtlReleaseRelativeName' 'RtlDosPathNameToRelativeNtPathName_U_WithStatus' '_wcsicmp' 'RtlInitString' 'RtlInitAnsiString' 'RtlUnicodeToMultiByteN' 'RtlUnicodeStringToAnsiString' 'RtlGetFullPathName_U' 'RtlMultiByteToUnicodeN' 'RtlAnsiStringToUnicodeString' 'RtlInitAnsiStringEx' 'RtlLookupFunctionTable' 'RtlLookupFunctionEntry' 'RtlVirtualUnwind' 'AlpcGetMessageAttribute' 'RtlIsDosDeviceName_U' 'CsrClientCallServer' 'RtlGetIntegerAtom' 'RtlLookupAtomInAtomTable' 'RtlGetCriticalSectionRecursionCount' 'RtlConsoleMultiByteToUnicodeN' 'RtlTimeToTimeFields' 'RtlTimeFieldsToTime' 'RtlUnicodeToMultiByteSize' 'NtdllDefWindowProc_W' 'bsearch' 'RtlFindCharInUnicodeString' 'RtlHashUnicodeString' 'RtlFindActivationContextSectionString' 'RtlDosApplyFileIsolationRedirection_Ustr' 'LdrGetDllHandleEx' 'LdrGetDllHandle' 'LdrGetProcedureAddressEx' 'LdrGetProcedureAddress' 'EtwpNotificationThread' 'TpPostWork' 'RtlpMuiFreeLangRegistryInfo' 'RtlCreateUserThread' 'RtlGetUserInfoHeap' 'NtdllDialogWndProc_A' 'NtdllDialogWndProc_W' 'isalpha' 'isupper' 'islower' 'isspace' 'ispunct' 'isalnum' 'isprint' 'isgraph' 'iscntrl' '__toascii' '__iscsym' '__iscsymf' '_atoi64' '_ltoa' '_ultoa' '_i64toa' '_ui64toa' '_ltow' '_i64tow' '_ui64tow' '_lfind' '_memccpy' '_memicmp' = 9090909090909AEB '_snprintf' '_snwprintf' '_splitpath' '_strlwr' '_strnicmp' = 909090909090AEEB '_strupr' '_vswprintf' '_vscwprintf' '_wcslwr' '_wtol' '_wtoi' = 909090909090CAEB '_wtoi64' 'labs' 'abs' 'atan' 'ceil' 'sin' 'cos' 'fabs' 'floor' 'iswalpha' 'iswlower' 'iswxdigit' 'iswspace' 'log' 'mbstowcs' 'memchr' 'sprintf' 'sqrt' 'sscanf' 'strcspn' 'strpbrk' 'strrchr' 'strspn' 'strstr' 'strtoul' 'swprintf' '_swprintf' 'tan' 'tolower' 'towupper' 'vsprintf' 'wcscat' 'wcscpy' 'wcscmp' 'wcslen' 'wcsncat' 'wcsncpy' 'wcsspn' 'wcstombs' 'MD4Init' 'MD4Update' 'MD4Final' 'CsrSetPriorityClass' 'TpDbgSetLogRoutine' 'RtlpNtMakeTemporaryKey' 'RtlpNtSetValueKey' 'RtlpNtCreateKey' 'RtlRandom' 'RtlIpv6AddressToStringA' 'RtlRemoteCall' 'RtlIsGenericTableEmptyAvl' 'RtlInitializeGenericTableAvl' 'RtlGetElementGenericTable' 'RtlRealPredecessor' 'RtlSubtreePredecessor' 'RtlSubtreeSuccessor' 'RtlDeleteNoSplay' 'RtlGetSetBootStatusData' 'RtlUnlockBootStatusData' 'RtlSendMsgToSm' 'RtlDecompressFragment' 'RtlDecompressBuffer' 'RtlCompressBuffer' 'RtlGetCompressionWorkSpaceSize' 'RtlCompareAltitudes' 'RtlFindClosestEncodableLength' 'RtlCmDecodeMemIoResource' 'RtlIoDecodeMemIoResource' 'RtlCmEncodeMemIoResource' 'RtlIoEncodeMemIoResource' 'RtlDeleteBarrier' 'RtlBarrier' 'RtlFindLeastSignificantBit' 'RtlFindMostSignificantBit' 'RtlAreBitsClear' 'RtlNumberOfSetBitsUlongPtr' 'RtlFindClearRuns' 'RtlTestBit' 'RtlAppendAsciizToString' 'RtlDowncaseUnicodeChar' 'RtlImageRvaToSection' 'RtlGetFunctionTableListHead' 'RtlSetInformationAcl' 'RtlSidEqualLevel' 'RtlSidIsHigherLevel' 'RtlMapSecurityErrorToNtStatus' 'RtlSetSecurityDescriptorRMControl' 'RtlGetSecurityDescriptorRMControl' 'RtlAreAnyAccessesGranted' 'RtlSetAttributesSecurityDescriptor' 'RtlCopyLuidAndAttributesArray' 'RtlEqualLuid' 'RtlRemovePrivileges' 'RtlEqualPrefixSid' 'RtlEraseUnicodeString' 'RtlRunDecodeUnicodeString' 'RtlRunEncodeUnicodeString' 'PfxFindPrefix' 'PfxInsertPrefix' 'PfxInitialize' 'RtlLocalTimeToSystemTime' 'RtlUpcaseUnicodeToCustomCPN' 'RtlUnicodeToCustomCPN' 'RtlCustomCPToUnicodeN' 'LdrProcessRelocationBlock' 'DbgSetDebugFilterState' 'DbgQueryDebugFilterState' 'DbgPrompt' 'AlpcUnregisterCompletionList' 'AlpcGetOutstandingCompletionListMessageCount' 'AlpcGetCompletionListLastMessageInformation' 'RtlZombifyActivationContext' 'ShipAssertGetBufferInfo' 'RtlUpdateClonedSRWLock' 'RtlWakeAllConditionVariable' 'RtlRunOnceInitialize' 'RtlInitializeConditionVariable' 'RtlWow64SuspendThread' 'RtlWow64CallFunction64' 'RtlWow64EnableFsRedirectionEx' 'RtlWow64EnableFsRedirection' 'RtlCreateQueryDebugBuffer' 'RtlQuerySecurityObject' 'RtlDebugPrintTimes' '__misaligned_access' 'RtlpWaitForCriticalSection' 'RtlIsCriticalSectionLocked' 'RtlWriteMemoryStream' 'RtlRevertMemoryStream' 'RtlCommitMemoryStream' 'RtlLockMemoryStreamRegion' 'RtlCopyOutOfProcessMemoryStreamTo' 'RtlUnlockMemoryStreamRegion' 'RtlSetMemoryStreamSize' 'RtlCloneMemoryStream' 'RtlCopyMemoryStreamTo' 'RtlSeekMemoryStream' 'RtlInitMemoryStream' 'LdrGetFailureData' 'RtlGetUnloadEventTraceEx' 'RtlGetUnloadEventTrace' 'RtlGetLengthWithoutTrailingPathSeperators' 'CsrCaptureTimeout' 'CsrGetProcessId' 'EtwpCreateEtwThread' 'EtwEventProviderEnabled' 'RtlIpv4StringToAddressExA' 'RtlIpv6StringToAddressExA' 'RtlIpv4AddressToStringExA' 'RtlIpv6AddressToStringExA' 'RtlGetLastWin32Error' 'RtlGetLastNtStatus' 'RtlGetCurrentPeb' 'RtlGenerate8dot3Name' 'RtlEnumerateGenericTableLikeADirectory' 'RtlEnumerateGenericTableWithoutSplayingAvl' 'RtlEnumerateGenericTableAvl' 'RtlLockBootStatusData' 'RtlConnectToSm' 'RtlLargeIntegerToChar' 'RtlInitBarrier' 'RtlBarrierForDelete' 'RtlFindLastBackwardRunClear' 'RtlFindNextForwardRunClear' 'RtlNumberOfSetBits' 'RtlFindLongestRunClear' 'RtlUpperString' 'RtlCompareString' 'RtlValidateUnicodeString' 'RtlxAnsiStringToUnicodeSize' 'RtlxOemStringToUnicodeSize' 'RtlOemStringToUnicodeSize' 'RtlAnsiStringToUnicodeSize' 'RtlUnicodeStringToAnsiSize' 'RtlUnicodeStringToOemSize' 'RtlxUnicodeStringToAnsiSize' 'RtlxUnicodeStringToOemSize' 'RtlUpcaseUnicodeStringToCountedOemString' 'RtlUnicodeStringToCountedOemString' 'RtlUpcaseUnicodeStringToAnsiString' 'RtlCreateMemoryZone' 'RtlImageRvaToVa' 'RtlAddCompoundAce' 'RtlDeleteAce' 'RtlCopySidAndAttributesArray' 'RtlSelfRelativeToAbsoluteSD2' 'PfxRemovePrefix' 'NtGetTickCount' 'RtlSecondsSince1980ToTime' 'RtlCreateUserProcess' 'LdrOpenImageFileOptionsKey' 'RtlIsCurrentThreadAttachExempt' 'RtlIsActivationContextActive' 'RtlQueueApcWow64Thread' 'RtlDeCommitDebugInfo' 'RtlCommitDebugInfo' 'RtlNewSecurityGrantedAccess' 'RtlEnableEarlyCriticalSectionEventCreation' 'RtlUpdateClonedCriticalSection' 'RtlIsCriticalSectionLockedByThread' 'RtlComputePrivatizedDllName_U' 'LdrQueryProcessModuleInformation' 'RtlGetFrame' 'RtlGetThreadErrorMode' 'DbgUiConvertStateChangeStructure' 'DbgUiStopDebugging' 'DbgUiContinue' 'DbgUiWaitStateChange' 'DbgUiSetThreadDebugObject' 'DbgUiGetThreadDebugObject' 'DbgUiConnectToDbg' 'CsrVerifyRegion' 'RtlSetThreadIsCritical' 'RtlSetProcessIsCritical' 'RtlIsNameLegalDOS8Dot3' 'RtlCopyMappedMemory' 'RtlNumberOfClearBits' 'RtlAddAuditAccessObjectAce' 'RtlAddAccessDeniedObjectAce' 'RtlAddAccessAllowedObjectAce' 'RtlAddAuditAccessAceEx' 'RtlAddAuditAccessAce' 'RtlAddAccessDeniedAceEx' 'RtlTryAcquirePebLock' 'RtlTimeToElapsedTimeFields' 'AlpcGetCompletionListMessageAttributes' 'RtlWakeConditionVariable' 'RtlDestroyQueryDebugBuffer' 'RtlpNotOwnerCriticalSection' 'RtlAppendPathElement' 'RtlTraceDatabaseUnlock' 'RtlUnlockCurrentThread' 'RtlLockCurrentThread' 'RtlFlushSecureMemoryCache' 'RtlAssert' 'RtlFindSetBits' 'RtlFindClearBits' 'RtlResetMemoryZone' 'RtlExtendMemoryZone' 'RtlExtendMemoryBlockLookaside' 'RtlQueryCriticalSectionOwner' 'RtlFormatMessage' 'RtlFindSetBitsAndClear' 'LdrEnumResources' 'RtlQueryActivationContextApplicationSettings' 'RtlWerpReportException' 'RtlReportException' 'RtlUnhandledExceptionFilter2' 'RtlUnhandledExceptionFilter' 'RtlRunOnceExecuteOnce' 'EtwEnumerateProcessRegGuids' 'RtlTraceDatabaseLock' 'RtlTraceDatabaseFind' 'RtlTraceDatabaseValidate' 'RtlEnumProcessHeaps' 'RtlGetProcessHeaps' 'RtlSleepConditionVariableCS' 'RtlQueryProcessBackTraceInformation' 'RtlTraceDatabaseEnumerate' 'RtlQueryAtomInAtomTable' 'RtlPinAtomInAtomTable' 'RtlPrepareForProcessCloning' 'RtlQueryTagHeap' 'TpDbgDumpHeapUsage' 'RtlSleepConditionVariableSRW' 'DbgUiIssueRemoteBreakin' 'DbgUiDebugActiveProcess' 'RtlGetCallersAddress' 'RtlLogStackBackTrace' 'RtlTraceDatabaseCreate' 'RtlSetProcessDebugInformation' 'RtlZeroHeap' 'RtlUnlockModuleSection' 'RtlDeregisterSecureMemoryCacheCallback' 'RtlMultipleFreeHeap' 'RtlEmptyAtomTable' 'RtlReleasePrivilege' 'RtlApplyRXactNoFlush' 'RtlApplyRXact' 'RtlCompleteProcessCloning' 'RtlRemoveVectoredExceptionHandler' 'RtlRemoveVectoredContinueHandler' 'RtlUnlockMemoryZone' 'RtlDestroyMemoryZone' 'RtlUnlockMemoryBlockLookaside' 'RtlDestroyMemoryBlockLookaside' 'RtlCloneUserProcess' 'RtlRaiseStatus' 'RtlInitializeContext' 'RtlDestroyAtomTable' 'RtlConvertExclusiveToShared' 'RtlResetMemoryBlockLookaside' 'RtlCreateMemoryBlockLookaside' 'RtlUnwind' 'RtlFreeThreadActivationContextStack' 'TpCallbackUnloadDllOnCompletion' 'TpCallbackReleaseMutexOnCompletion' 'TpCallbackReleaseSemaphoreOnCompletion' 'TpCallbackSetEventOnCompletion' 'TpReleaseCleanupGroup' 'TpWaitForAlpcCompletion' 'TpReleaseWork' 'TpWaitForWork' 'TpStartAsyncIoOperation' 'TpWaitForIoCompletion' 'RtlCancelTimer' 'RtlDeleteTimerQueue' 'vDbgPrintExWithPrefix' 'vDbgPrintEx' 'DbgPrintReturnControlC' 'RtlApplicationVerifierStop' 'RtlDumpResource' 'RtlProtectHeap' 'RtlReadMemoryStream' 'EtwReplyNotification' 'EtwSetMark' 'EtwRegisterSecurityProvider' 'EtwCreateTraceInstanceId' 'RtlSetLastWin32ErrorAndNtStatusFromNtStatus' 'RtlWow64SetThreadContext' 'RtlWow64GetThreadContext' 'LdrVerifyImageMatchesChecksumEx' 'LdrVerifyImageMatchesChecksum' 'EtwSendNotification' 'RtlTraceDatabaseAdd' 'RtlQueryProcessLockInformation' 'EtwEventWriteString' 'EtwEventWriteTransfer' 'EtwEventWriteEndScenario' 'EtwEventWriteStartScenario' 'EtwTraceEventInstance' 'EtwLogTraceEvent' 'RtlValidateProcessHeaps' 'RtlTraceDatabaseDestroy' 'LdrFlushAlternateResourceModules' 'RtlSetCurrentEnvironment' 'RtlQueryHeapInformation' 'RtlQueryProcessHeapInformation' 'LdrUnregisterDllNotification' 'LdrQueryModuleServiceTags' 'LdrSetAppCompatDllRedirectionCallback' 'RtlAddFunctionTable' 'RtlAddAttributeActionToRXact' 'RtlConvertUiListToApiList' 'RtlDefaultNpAcl' 'RtlCreateAndSetSD' 'LdrRegisterDllNotification' 'RtlCreateTimerQueue' 'EtwpGetCpuSpeed' 'RtlpNtEnumerateSubKey' 'RtlpMuiRegCreateRegistryInfo' 'RtlLockModuleSection' 'RtlRegisterSecureMemoryCacheCallback' 'RtlCreateBootStatusDataFile' 'RtlMultipleAllocateHeap' 'RtlAcquirePrivilege' 'RtlAddActionToRXact' 'RtlInitializeRXact' 'RtlQueryModuleInformation' 'RtlAddVectoredExceptionHandler' 'RtlAddVectoredContinueHandler' 'RtlConvertToAutoInheritSecurityObject' 'RtlSetSecurityObjectEx' 'RtlNewSecurityObject' 'RtlNewSecurityObjectWithMultipleInheritance' 'TpReleasePool' 'TpAllocCleanupGroup' 'RtlIsNormalizedString' 'RtlNormalizeString' 'RtlLockMemoryZone' 'RtlLockMemoryBlockLookaside' 'RtlCreateUserSecurityObject' 'RtlNewInstanceSecurityObject' 'RtlIdnToNameprepUnicode' 'RtlIdnToAscii' 'RtlCreateSystemVolumeInformationFolder' 'LdrSetMUICacheType' 'RtlIdnToUnicode' 'RtlHeapTrkInitialize' 'DbgUiRemoteBreakin' 'RtlQueryProcessDebugInformation' 'TpAllocIoCompletion' 'TpAllocAlpcCompletion' 'RtlpQueryProcessDebugInformationFromWow64' 'TpAllocWork' 'RtlSetIoCompletionCallback' 'LdrInitShimEngineDynamic' 'RtlSetTimer' 'RtlSetUserFlagsHeap' 'RtlCompactHeap' 'RtlInt64ToUnicodeString' 'RtlConvertLCIDToString' 'RtlDeleteRegistryValue' 'RtlCreateRegistryKey' 'RtlCheckRegistryKey' 'RtlWriteRegistryValue' 'RtlEqualComputerName' 'RtlSetDynamicTimeZoneInformation' 'RtlSetTimeZoneInformation' 'TpReleaseCleanupGroupMembers' 'TpReleaseAlpcCompletion' 'TpCancelAsyncIoOperation' 'TpReleaseIoCompletion' 'RtlQueryDynamicTimeZoneInformation' 'RtlQueryTimeZoneInformation' 'RtlpGetUserOrMachineUILanguage4NLS' 'RtlIsValidLocaleName' 'LdrResRelease' 'WinSqmEventWrite' 'WinSqmEventEnabled' 'WinSqmAddToStream' 'WinSqmSetString' 'WinSqmEndSession' 'WinSqmStartSession' 'RtlpConvertCultureNamesToLCIDs' 'WerCheckEventEscalation' 'WerReportWatsonEvent' 'WerReportSQMEvent' 'ShipAssert' 'ShipAssertMsgW' 'ShipAssertMsgA' 'RtlpConvertLCIDsToCultureNames' 'EtwProcessPrivateLoggerRequest' 'EtwDeliverDataBlock' 'LdrHotPatchRoutine' 'RtlWow64LogMessageInEventLogger' 'RtlComputeImportTableHash' 'RtlpLoadMachineUIByPolicy' 'RtlGetThreadLangIdByIndex' 'RtlpRefreshCachedUILanguage' 'RtlGetUILanguageInfo' 'RtlpSetInstallLanguage' 'RtlpCleanupRegistryKeys' 'RtlpVerifyAndCommitUILanguageSettings' 'RtlGetSystemPreferredUILanguages' 'RtlGetUserPreferredUILanguages' 'RtlpSetUserPreferredUILanguages' 'RtlpSetPreferredUILanguages' 'LdrResFindResource' 'RtlAllocateMemoryZone' 'RtlFreeMemoryBlockLookaside' 'RtlAllocateMemoryBlockLookaside' 'RtlNtdllName' 'NlsMbCodePageTag' = 0 'NlsMbOemCodePageTag' 'NlsAnsiCodePage' '_fltused'