Revision: 6735 Date 18:11:2008. Time 18:27 //===================================================== *** Hardware *** Processor: AMD Turion(tm) 64 X2 Mobile Technology TL-58 Number Of Processors: 2 Physical Memory: 2095512 KB (Available: 728176 KB) Commit Charge Limit: 4194303 KB *** Operation System *** Windows Vista or Windows Server 2008 Home Edition Service Pack 1 (Version 6.0, Build 6001) //===================================================== Exception code: C0000005 ACCESS_VIOLATION Fault address: 7707F8F4 01:0001F8F4 C:\Windows\SysWOW64\ntdll.dll Registers: EAX:021AD505 EBX:85475505 ECX:DD3BDEDF EDX:0000DD3B ESI:00E5F0B8 EDI:85470000 CS:EIP:0023:7707F8F4 SS:ESP:002B:0017C25C EBP:0017C290 DS:002B ES:002B FS:0053 GS:002B Flags:00010282 Call stack: Address Frame Function SourceFile 7707F8F4 00000000 RtlTryEnterCriticalSection+35E 7707F26C 00000000 RtlDeactivateActivationContextUnsafeFast+BBD0 769C3593 00000000 HeapFree+14 0FDC9B11 00000000 ?push@?$stack@PAVMovementGenerator@@V?$deque@PAVMovementGenerator@@V?$allocator@PAVMovementGenerator@@@std@@@std@@@std@@QAEXABQAVMovementGenerator@@@Z+AB91 0FD11E50 00000000 ?empty@?$stack@PAVMovementGenerator@@V?$deque@PAVMovementGenerator@@V?$allocator@PAVMovementGenerator@@@std@@@std@@@std@@QBE_NXZ+B260 0FCC189A 00000000 ?DamageTaken@CreatureAI@@UAEXPAVUnit@@AAI@Z+16A 0FCC7703 00000000 ?IsHeroic@Map@@QBE_NXZ+B3 0FDB7128 00000000 ??4LanguageDesc@@QAEAAU0@ABU0@@Z+1888 0FDB742B 00000000 ScriptsInit+1DB 005F3F54 00000000 ?LoadMangosStrings@@YA_NAAVDatabaseMysql@@PBDHH@Z+86C94 005DA204 00000000 ?LoadMangosStrings@@YA_NAAVDatabaseMysql@@PBDHH@Z+6CF44 004324BB 00000000 ?getSource@?$Reference@V?$GridRefManager@V?$NGrid@$07VPlayer@@U?$TypeList@VPlayer@@U?$TypeList@VCreature@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@U?$TypeList@VGameObject@@U?$TypeList@VCreature@@U?$TypeList@VDynamicObject@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@@@V?$SingleThreaded@VPlayer@@@MaNGOS@@@@@@V?$NGrid@$07VPlayer@@U?$TypeList@VPlayer@@U?$TypeList@VCreature@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@U?$TypeList@VGameObject@@U?$TypeList@VCreature@@U?$TypeList@VDynamicObject@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@@@V?$SingleThreaded@VPlayer@@@MaNGOS@@@@@@QBEPAV?$NGrid@$07VPlayer@@U?$TypeList@VPlayer@@U?$TypeList@VCreature@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@U?$TypeList@VGameObject@@U?$TypeList@VCreature@@U?$TypeList@VDynamicObject@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@@@V?$SingleThreaded@VPlayer@@@MaNGOS@@@@XZ+1869B 004321FE 00000000 ?getSource@?$Reference@V?$GridRefManager@V?$NGrid@$07VPlayer@@U?$TypeList@VPlayer@@U?$TypeList@VCreature@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@U?$TypeList@VGameObject@@U?$TypeList@VCreature@@U?$TypeList@VDynamicObject@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@@@V?$SingleThreaded@VPlayer@@@MaNGOS@@@@@@V?$NGrid@$07VPlayer@@U?$TypeList@VPlayer@@U?$TypeList@VCreature@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@U?$TypeList@VGameObject@@U?$TypeList@VCreature@@U?$TypeList@VDynamicObject@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@@@V?$SingleThreaded@VPlayer@@@MaNGOS@@@@@@QBEPAV?$NGrid@$07VPlayer@@U?$TypeList@VPlayer@@U?$TypeList@VCreature@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@U?$TypeList@VGameObject@@U?$TypeList@VCreature@@U?$TypeList@VDynamicObject@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@@@V?$SingleThreaded@VPlayer@@@MaNGOS@@@@XZ+183DE 0089BEA8 00000000 ?at_exit@MaNGOS@@YAXP6AXXZ@Z+31798 769CE3F3 00000000 BaseThreadInitThunk+E 770CCFED 00000000 RtlCreateUserProcess+8C 770CD1FF 00000000 RtlCreateProcessParameters+4E ======================== Local Variables And Parameters Call stack: Address Frame Function SourceFile 7707F8F4 00000000 RtlTryEnterCriticalSection+35E 7707F26C 00000000 RtlDeactivateActivationContextUnsafeFast+BBD0 769C3593 00000000 HeapFree+14 0FDC9B11 00000000 ?push@?$stack@PAVMovementGenerator@@V?$deque@PAVMovementGenerator@@V?$allocator@PAVMovementGenerator@@@std@@@std@@@std@@QAEXABQAVMovementGenerator@@@Z+AB91 0FD11E50 00000000 ?empty@?$stack@PAVMovementGenerator@@V?$deque@PAVMovementGenerator@@V?$allocator@PAVMovementGenerator@@@std@@@std@@@std@@QBE_NXZ+B260 0FCC189A 00000000 ?DamageTaken@CreatureAI@@UAEXPAVUnit@@AAI@Z+16A 0FCC7703 00000000 ?IsHeroic@Map@@QBE_NXZ+B3 0FDB7128 00000000 ??4LanguageDesc@@QAEAAU0@ABU0@@Z+1888 0FDB742B 00000000 ScriptsInit+1DB 005F3F54 00000000 ?LoadMangosStrings@@YA_NAAVDatabaseMysql@@PBDHH@Z+86C94 005DA204 00000000 ?LoadMangosStrings@@YA_NAAVDatabaseMysql@@PBDHH@Z+6CF44 004324BB 00000000 ?getSource@?$Reference@V?$GridRefManager@V?$NGrid@$07VPlayer@@U?$TypeList@VPlayer@@U?$TypeList@VCreature@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@U?$TypeList@VGameObject@@U?$TypeList@VCreature@@U?$TypeList@VDynamicObject@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@@@V?$SingleThreaded@VPlayer@@@MaNGOS@@@@@@V?$NGrid@$07VPlayer@@U?$TypeList@VPlayer@@U?$TypeList@VCreature@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@U?$TypeList@VGameObject@@U?$TypeList@VCreature@@U?$TypeList@VDynamicObject@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@@@V?$SingleThreaded@VPlayer@@@MaNGOS@@@@@@QBEPAV?$NGrid@$07VPlayer@@U?$TypeList@VPlayer@@U?$TypeList@VCreature@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@U?$TypeList@VGameObject@@U?$TypeList@VCreature@@U?$TypeList@VDynamicObject@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@@@V?$SingleThreaded@VPlayer@@@MaNGOS@@@@XZ+1869B 004321FE 00000000 ?getSource@?$Reference@V?$GridRefManager@V?$NGrid@$07VPlayer@@U?$TypeList@VPlayer@@U?$TypeList@VCreature@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@U?$TypeList@VGameObject@@U?$TypeList@VCreature@@U?$TypeList@VDynamicObject@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@@@V?$SingleThreaded@VPlayer@@@MaNGOS@@@@@@V?$NGrid@$07VPlayer@@U?$TypeList@VPlayer@@U?$TypeList@VCreature@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@U?$TypeList@VGameObject@@U?$TypeList@VCreature@@U?$TypeList@VDynamicObject@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@@@V?$SingleThreaded@VPlayer@@@MaNGOS@@@@@@QBEPAV?$NGrid@$07VPlayer@@U?$TypeList@VPlayer@@U?$TypeList@VCreature@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@U?$TypeList@VGameObject@@U?$TypeList@VCreature@@U?$TypeList@VDynamicObject@@U?$TypeList@VCorpse@@VTypeNull@@@@@@@@@@V?$SingleThreaded@VPlayer@@@MaNGOS@@@@XZ+183DE 0089BEA8 00000000 ?at_exit@MaNGOS@@YAXP6AXXZ@Z+31798 769CE3F3 00000000 BaseThreadInitThunk+E 770CCFED 00000000 RtlCreateUserProcess+8C 770CD1FF 00000000 RtlCreateProcessParameters+4E ======================== Global Variables 'DbgUserBreakPoint' = 90C390CC 'DbgBreakPoint' = 9090C3CC 'RtlInitString' 'RtlInitAnsiString' 'RtlInitUnicodeString' 'sin' = FF8B18EB '_CIsin' '_CIsqrt' 'sqrt' '_alldiv' '_alldvrm' '_allmul' '_allrem' '_allshl' '_allshr' '_aulldiv' '_aulldvrm' '_aullrem' '_aullshr' '_ftol' '_memccpy' 'atan' 'ceil' 'floor' 'memchr' 'memcpy' 'memmove' 'memset' 'strcpy' 'strcat' 'strcmp' 'strcspn' 'strlen' 'strncat' 'strncpy' 'strpbrk' 'strrchr' 'strspn' 'tan' 'ExpInterlockedPopEntrySListResume' 'ExpInterlockedPopEntrySListFault' = 188B 'ExpInterlockedPopEntrySListEnd' 'RtlInterlockedPushListSList' 'RtlFirstEntrySList' 'RtlInterlockedCompareExchange64' 'RtlUshortByteSwap' 'RtlUlongByteSwap' 'RtlUlonglongByteSwap' 'RtlCompareMemory' 'RtlCompareMemoryUlong' 'RtlFillMemory' 'RtlFillMemoryUlong' 'RtlZeroMemory' 'RtlMoveMemory' 'RtlLargeIntegerAdd' 'RtlEnlargedIntegerMultiply' 'RtlEnlargedUnsignedMultiply' 'RtlEnlargedUnsignedDivide' 'RtlExtendedLargeIntegerDivide' 'RtlExtendedMagicDivide' 'RtlExtendedIntegerMultiply' 'RtlLargeIntegerShiftLeft' 'RtlLargeIntegerShiftRight' 'RtlLargeIntegerArithmeticShift' 'RtlLargeIntegerNegate' 'RtlLargeIntegerSubtract' 'RtlConvertLongToLargeInteger' = 4C2990424448B 'RtlConvertUlongToLargeInteger' 'ZwMapUserPhysicalPagesScatter' 'NtMapUserPhysicalPagesScatter' 'NtWaitForSingleObject' 'ZwWaitForSingleObject' 'ZwCallbackReturn' 'NtCallbackReturn' 'NtReadFile' 'ZwReadFile' 'ZwDeviceIoControlFile' 'NtDeviceIoControlFile' 'NtWriteFile' 'ZwWriteFile' 'ZwRemoveIoCompletion' 'NtRemoveIoCompletion' 'ZwReleaseSemaphore' 'NtReleaseSemaphore' 'NtReplyWaitReceivePort' 'ZwReplyWaitReceivePort' 'ZwReplyPort' 'NtReplyPort' 'NtSetInformationThread' 'ZwSetInformationThread' 'ZwSetEvent' 'NtSetEvent' 'ZwClose' 'NtClose' 'NtQueryObject' 'ZwQueryObject' 'ZwQueryInformationFile' 'NtQueryInformationFile' 'ZwOpenKey' 'NtOpenKey' 'ZwEnumerateValueKey' 'NtEnumerateValueKey' 'ZwFindAtom' 'NtFindAtom' 'NtQueryDefaultLocale' 'ZwQueryDefaultLocale' 'ZwQueryKey' 'NtQueryKey' 'NtQueryValueKey' 'ZwQueryValueKey' 'ZwAllocateVirtualMemory' 'NtAllocateVirtualMemory' 'ZwQueryInformationProcess' 'NtQueryInformationProcess' 'NtWaitForMultipleObjects32' 'ZwWaitForMultipleObjects32' 'NtWriteFileGather' 'ZwWriteFileGather' 'NtSetInformationProcess' 'ZwSetInformationProcess' 'NtCreateKey' 'ZwCreateKey' 'ZwFreeVirtualMemory' 'NtFreeVirtualMemory' 'ZwImpersonateClientOfPort' 'NtImpersonateClientOfPort' 'NtReleaseMutant' 'ZwReleaseMutant' 'ZwQueryInformationToken' 'NtQueryInformationToken' 'ZwRequestWaitReplyPort' 'NtRequestWaitReplyPort' 'ZwQueryVirtualMemory' 'NtQueryVirtualMemory' 'NtOpenThreadToken' 'ZwOpenThreadToken' 'NtQueryInformationThread' 'ZwQueryInformationThread' 'ZwOpenProcess' 'NtOpenProcess' 'ZwSetInformationFile' 'NtSetInformationFile' 'NtMapViewOfSection' 'ZwMapViewOfSection' 'NtAccessCheckAndAuditAlarm' 'ZwAccessCheckAndAuditAlarm' 'NtUnmapViewOfSection' 'ZwUnmapViewOfSection' 'NtReplyWaitReceivePortEx' 'ZwReplyWaitReceivePortEx' 'ZwTerminateProcess' 'NtTerminateProcess' 'NtSetEventBoostPriority' 'ZwSetEventBoostPriority' 'NtReadFileScatter' 'ZwReadFileScatter' 'ZwOpenThreadTokenEx' 'NtOpenThreadTokenEx' 'NtOpenProcessTokenEx' 'ZwOpenProcessTokenEx' 'ZwQueryPerformanceCounter' 'NtQueryPerformanceCounter' 'NtEnumerateKey' 'ZwEnumerateKey' 'ZwOpenFile' 'NtOpenFile' 'ZwDelayExecution' 'NtDelayExecution' 'NtQueryDirectoryFile' 'ZwQueryDirectoryFile' 'ZwQuerySystemInformation' 'NtQuerySystemInformation' 'NtOpenSection' 'ZwOpenSection' 'NtQueryTimer' 'ZwQueryTimer' 'ZwFsControlFile' 'NtFsControlFile' 'ZwWriteVirtualMemory' 'NtWriteVirtualMemory' 'NtCloseObjectAuditAlarm' 'ZwCloseObjectAuditAlarm' 'NtDuplicateObject' 'ZwDuplicateObject' 'ZwQueryAttributesFile' 'NtQueryAttributesFile' 'ZwClearEvent' 'NtClearEvent' 'ZwReadVirtualMemory' 'NtReadVirtualMemory' 'NtOpenEvent' 'ZwOpenEvent' 'ZwAdjustPrivilegesToken' 'NtAdjustPrivilegesToken' 'NtDuplicateToken' 'ZwDuplicateToken' 'NtContinue' 'ZwContinue' 'ZwQueryDefaultUILanguage' 'NtQueryDefaultUILanguage' 'ZwQueueApcThread' 'NtQueueApcThread' 'ZwYieldExecution' 'NtYieldExecution' 'ZwAddAtom' 'NtAddAtom' 'NtCreateEvent' 'ZwCreateEvent' 'NtQueryVolumeInformationFile' 'ZwQueryVolumeInformationFile' 'ZwCreateSection' 'NtCreateSection' 'NtFlushBuffersFile' 'ZwFlushBuffersFile' 'ZwApphelpCacheControl' 'NtApphelpCacheControl' 'NtCreateProcessEx' 'ZwCreateProcessEx' 'NtCreateThread' 'ZwCreateThread' 'NtIsProcessInJob' 'ZwIsProcessInJob' 'ZwProtectVirtualMemory' 'NtProtectVirtualMemory' 'NtQuerySection' 'ZwQuerySection' 'NtResumeThread' 'ZwResumeThread' 'ZwTerminateThread' 'NtTerminateThread' 'ZwReadRequestData' 'NtReadRequestData' 'ZwCreateFile' 'NtCreateFile' 'NtQueryEvent' 'ZwQueryEvent' 'NtWriteRequestData' 'ZwWriteRequestData' 'NtOpenDirectoryObject' 'ZwOpenDirectoryObject' 'ZwAccessCheckByTypeAndAuditAlarm' 'NtAccessCheckByTypeAndAuditAlarm' 'ZwQuerySystemTime' 'NtQuerySystemTime' 'ZwWaitForMultipleObjects' 'NtWaitForMultipleObjects' 'ZwSetInformationObject' 'NtSetInformationObject' 'ZwCancelIoFile' 'NtCancelIoFile' 'NtTraceEvent' 'ZwTraceEvent' 'ZwPowerInformation' 'NtPowerInformation' 'ZwSetValueKey' 'NtSetValueKey' 'ZwCancelTimer' 'NtCancelTimer' 'NtSetTimer' 'ZwSetTimer' 'NtAcceptConnectPort' 'ZwAcceptConnectPort' 'NtAccessCheck' 'ZwAccessCheck' 'NtAccessCheckByType' 'ZwAccessCheckByType' 'NtAccessCheckByTypeResultList' 'ZwAccessCheckByTypeResultList' 'NtAccessCheckByTypeResultListAndAuditAlarm' 'ZwAccessCheckByTypeResultListAndAuditAlarm' 'NtAccessCheckByTypeResultListAndAuditAlarmByHandle' 'ZwAccessCheckByTypeResultListAndAuditAlarmByHandle' 'NtAcquireCMFViewOwnership' 'ZwAcquireCMFViewOwnership' 'ZwAddBootEntry' 'NtAddBootEntry' 'NtAddDriverEntry' 'ZwAddDriverEntry' 'NtAdjustGroupsToken' 'ZwAdjustGroupsToken' 'ZwAlertResumeThread' 'NtAlertResumeThread' 'ZwAlertThread' 'NtAlertThread' 'ZwAllocateLocallyUniqueId' 'NtAllocateLocallyUniqueId' 'ZwAllocateUserPhysicalPages' 'NtAllocateUserPhysicalPages' 'ZwAllocateUuids' 'NtAllocateUuids' 'ZwAlpcAcceptConnectPort' 'NtAlpcAcceptConnectPort' 'NtAlpcCancelMessage' 'ZwAlpcCancelMessage' 'NtAlpcConnectPort' 'ZwAlpcConnectPort' 'ZwAlpcCreatePort' 'NtAlpcCreatePort' 'ZwAlpcCreatePortSection' 'NtAlpcCreatePortSection' 'NtAlpcCreateResourceReserve' 'ZwAlpcCreateResourceReserve' 'ZwAlpcCreateSectionView' 'NtAlpcCreateSectionView' 'NtAlpcCreateSecurityContext' 'ZwAlpcCreateSecurityContext' 'ZwAlpcDeletePortSection' 'NtAlpcDeletePortSection' 'ZwAlpcDeleteResourceReserve' 'NtAlpcDeleteResourceReserve' 'ZwAlpcDeleteSectionView' 'NtAlpcDeleteSectionView' 'NtAlpcDeleteSecurityContext' 'ZwAlpcDeleteSecurityContext' 'ZwAlpcDisconnectPort' 'NtAlpcDisconnectPort' 'NtAlpcImpersonateClientOfPort' 'ZwAlpcImpersonateClientOfPort' 'NtAlpcOpenSenderProcess' 'ZwAlpcOpenSenderProcess' 'NtAlpcOpenSenderThread' 'ZwAlpcOpenSenderThread' 'NtAlpcQueryInformation' 'ZwAlpcQueryInformation' 'NtAlpcQueryInformationMessage' 'ZwAlpcQueryInformationMessage' 'ZwAlpcRevokeSecurityContext' 'NtAlpcRevokeSecurityContext' 'ZwAlpcSendWaitReceivePort' 'NtAlpcSendWaitReceivePort' 'NtAlpcSetInformation' 'ZwAlpcSetInformation' 'ZwAreMappedFilesTheSame' 'NtAreMappedFilesTheSame' 'ZwAssignProcessToJobObject' 'NtAssignProcessToJobObject' 'NtCancelDeviceWakeupRequest' 'ZwCancelDeviceWakeupRequest' 'ZwCancelIoFileEx' 'NtCancelIoFileEx' 'ZwCancelSynchronousIoFile' 'NtCancelSynchronousIoFile' 'NtCommitComplete' 'ZwCommitComplete' 'ZwCommitEnlistment' 'NtCommitEnlistment' 'NtCommitTransaction' 'ZwCommitTransaction' 'ZwCompactKeys' 'NtCompactKeys' 'NtCompareTokens' 'ZwCompareTokens' 'ZwCompleteConnectPort' 'NtCompleteConnectPort' 'NtCompressKey' 'ZwCompressKey' 'NtConnectPort' 'ZwConnectPort' 'ZwCreateDebugObject' 'NtCreateDebugObject' 'ZwCreateDirectoryObject' 'NtCreateDirectoryObject' 'ZwCreateEnlistment' 'NtCreateEnlistment' 'NtCreateEventPair' 'ZwCreateEventPair' 'NtCreateIoCompletion' 'ZwCreateIoCompletion' 'ZwCreateJobObject' 'NtCreateJobObject' 'NtCreateJobSet' 'ZwCreateJobSet' 'NtCreateKeyTransacted' 'ZwCreateKeyTransacted' 'ZwCreateKeyedEvent' 'NtCreateKeyedEvent' 'ZwCreateMailslotFile' 'NtCreateMailslotFile' 'ZwCreateMutant' 'NtCreateMutant' 'NtCreateNamedPipeFile' 'ZwCreateNamedPipeFile' 'ZwCreatePagingFile' 'NtCreatePagingFile' 'ZwCreatePort' 'NtCreatePort' 'ZwCreatePrivateNamespace' 'NtCreatePrivateNamespace' 'ZwCreateProcess' 'NtCreateProcess' 'ZwCreateProfile' 'NtCreateProfile' 'NtCreateResourceManager' 'ZwCreateResourceManager' 'NtCreateSemaphore' 'ZwCreateSemaphore' 'ZwCreateSymbolicLinkObject' 'NtCreateSymbolicLinkObject' 'ZwCreateThreadEx' 'NtCreateThreadEx' 'NtCreateTimer' 'ZwCreateTimer' 'NtCreateToken' 'ZwCreateToken' 'ZwCreateTransaction' 'NtCreateTransaction' 'NtCreateTransactionManager' 'ZwCreateTransactionManager' 'ZwCreateUserProcess' 'NtCreateUserProcess' 'NtCreateWaitablePort' 'ZwCreateWaitablePort' 'NtCreateWorkerFactory' 'ZwCreateWorkerFactory' 'NtDebugActiveProcess' 'ZwDebugActiveProcess' 'ZwDebugContinue' 'NtDebugContinue' 'NtDeleteAtom' 'ZwDeleteAtom' 'ZwDeleteBootEntry' 'NtDeleteBootEntry' 'ZwDeleteDriverEntry' 'NtDeleteDriverEntry' 'NtDeleteFile' 'ZwDeleteFile' 'ZwDeleteKey' 'NtDeleteKey' 'NtDeleteObjectAuditAlarm' 'ZwDeleteObjectAuditAlarm' 'ZwDeletePrivateNamespace' 'NtDeletePrivateNamespace' 'NtDeleteValueKey' 'ZwDeleteValueKey' 'ZwDisplayString' 'NtDisplayString' 'ZwEnumerateBootEntries' 'NtEnumerateBootEntries' 'NtEnumerateDriverEntries' 'ZwEnumerateDriverEntries' 'ZwEnumerateSystemEnvironmentValuesEx' 'NtEnumerateSystemEnvironmentValuesEx' 'ZwEnumerateTransactionObject' 'NtEnumerateTransactionObject' 'NtExtendSection' 'ZwExtendSection' 'NtFilterToken' 'ZwFilterToken' 'NtFlushInstallUILanguage' 'ZwFlushInstallUILanguage' 'NtFlushInstructionCache' 'ZwFlushInstructionCache' 'NtFlushKey' 'ZwFlushKey' 'ZwFlushProcessWriteBuffers' 'NtFlushProcessWriteBuffers' 'ZwFlushVirtualMemory' 'NtFlushVirtualMemory' 'NtFlushWriteBuffer' 'ZwFlushWriteBuffer' 'ZwFreeUserPhysicalPages' 'NtFreeUserPhysicalPages' 'NtFreezeRegistry' 'ZwFreezeRegistry' 'NtFreezeTransactions' 'ZwFreezeTransactions' 'ZwGetContextThread' 'NtGetContextThread' 'ZwGetCurrentProcessorNumber' 'RtlGetCurrentProcessorNumber' 'NtGetCurrentProcessorNumber' 'NtGetDevicePowerState' 'ZwGetDevicePowerState' 'ZwGetMUIRegistryInfo' 'NtGetMUIRegistryInfo' 'ZwGetNextProcess' 'NtGetNextProcess' 'NtGetNextThread' 'ZwGetNextThread' 'ZwGetNlsSectionPtr' 'NtGetNlsSectionPtr' 'NtGetNotificationResourceManager' 'ZwGetNotificationResourceManager' 'NtGetPlugPlayEvent' 'ZwGetPlugPlayEvent' 'ZwGetWriteWatch' 'NtGetWriteWatch' 'ZwImpersonateAnonymousToken' 'NtImpersonateAnonymousToken' 'ZwImpersonateThread' 'NtImpersonateThread' 'ZwInitializeNlsFiles' 'NtInitializeNlsFiles' 'ZwInitializeRegistry' 'NtInitializeRegistry' 'ZwInitiatePowerAction' 'NtInitiatePowerAction' 'NtIsSystemResumeAutomatic' 'ZwIsSystemResumeAutomatic' 'NtIsUILanguageComitted' 'ZwIsUILanguageComitted' 'NtListenPort' 'ZwListenPort' 'ZwLoadDriver' 'NtLoadDriver' 'NtLoadKey' 'ZwLoadKey' 'ZwLoadKey2' 'NtLoadKey2' 'ZwLoadKeyEx' 'NtLoadKeyEx' 'NtLockFile' 'ZwLockFile' 'NtLockProductActivationKeys' 'ZwLockProductActivationKeys' 'NtLockRegistryKey' 'ZwLockRegistryKey' 'ZwLockVirtualMemory' 'NtLockVirtualMemory' 'ZwMakePermanentObject' 'NtMakePermanentObject' 'NtMakeTemporaryObject' 'ZwMakeTemporaryObject' 'ZwMapCMFModule' 'NtMapCMFModule' 'ZwMapUserPhysicalPages' 'NtMapUserPhysicalPages' 'NtModifyBootEntry' 'ZwModifyBootEntry' 'ZwModifyDriverEntry' 'NtModifyDriverEntry' 'NtNotifyChangeDirectoryFile' 'ZwNotifyChangeDirectoryFile' 'NtNotifyChangeKey' 'ZwNotifyChangeKey' 'NtNotifyChangeMultipleKeys' 'ZwNotifyChangeMultipleKeys' 'ZwOpenEnlistment' 'NtOpenEnlistment' 'ZwOpenEventPair' 'NtOpenEventPair' 'ZwOpenIoCompletion' 'NtOpenIoCompletion' 'ZwOpenJobObject' 'NtOpenJobObject' 'NtOpenKeyTransacted' 'ZwOpenKeyTransacted' 'ZwOpenKeyedEvent' 'NtOpenKeyedEvent' 'NtOpenMutant' 'ZwOpenMutant' 'ZwOpenObjectAuditAlarm' 'NtOpenObjectAuditAlarm' 'NtOpenPrivateNamespace' 'ZwOpenPrivateNamespace' 'NtOpenProcessToken' 'ZwOpenProcessToken' 'NtOpenResourceManager' 'ZwOpenResourceManager' 'NtOpenSemaphore' 'ZwOpenSemaphore' 'NtOpenSession' 'ZwOpenSession' 'ZwOpenSymbolicLinkObject' 'NtOpenSymbolicLinkObject' 'ZwOpenThread' 'NtOpenThread' 'NtOpenTimer' 'ZwOpenTimer' 'NtOpenTransaction' 'ZwOpenTransaction' 'ZwOpenTransactionManager' 'NtOpenTransactionManager' 'NtPlugPlayControl' 'ZwPlugPlayControl' 'NtPrePrepareComplete' 'ZwPrePrepareComplete' 'ZwPrePrepareEnlistment' 'NtPrePrepareEnlistment' 'NtPrepareComplete' 'ZwPrepareComplete' 'NtPrepareEnlistment' 'ZwPrepareEnlistment' 'NtPrivilegeCheck' 'ZwPrivilegeCheck' 'NtPrivilegeObjectAuditAlarm' 'ZwPrivilegeObjectAuditAlarm' 'ZwPrivilegedServiceAuditAlarm' 'NtPrivilegedServiceAuditAlarm' 'ZwPropagationComplete' 'NtPropagationComplete' 'NtPropagationFailed' 'ZwPropagationFailed' 'NtPulseEvent' 'ZwPulseEvent' 'ZwQueryBootEntryOrder' 'NtQueryBootEntryOrder' 'NtQueryBootOptions' 'ZwQueryBootOptions' 'NtQueryDebugFilterState' 'ZwQueryDebugFilterState' 'ZwQueryDirectoryObject' 'NtQueryDirectoryObject' 'NtQueryDriverEntryOrder' 'ZwQueryDriverEntryOrder' 'NtQueryEaFile' 'ZwQueryEaFile' 'NtQueryFullAttributesFile' 'ZwQueryFullAttributesFile' 'ZwQueryInformationAtom' 'NtQueryInformationAtom' 'ZwQueryInformationEnlistment' 'NtQueryInformationEnlistment' 'NtQueryInformationJobObject' 'ZwQueryInformationJobObject' 'ZwQueryInformationPort' 'NtQueryInformationPort' 'NtQueryInformationResourceManager' 'ZwQueryInformationResourceManager' 'NtQueryInformationTransaction' 'ZwQueryInformationTransaction' 'ZwQueryInformationTransactionManager' 'NtQueryInformationTransactionManager' 'NtQueryInformationWorkerFactory' 'ZwQueryInformationWorkerFactory' 'ZwQueryInstallUILanguage' 'NtQueryInstallUILanguage' 'NtQueryIntervalProfile' 'ZwQueryIntervalProfile' 'NtQueryIoCompletion' 'ZwQueryIoCompletion' 'NtQueryLicenseValue' 'ZwQueryLicenseValue' 'NtQueryMultipleValueKey' 'ZwQueryMultipleValueKey' 'NtQueryMutant' 'ZwQueryMutant' 'ZwQueryOpenSubKeys' 'NtQueryOpenSubKeys' 'ZwQueryOpenSubKeysEx' 'NtQueryOpenSubKeysEx' 'NtQueryPortInformationProcess' 'ZwQueryPortInformationProcess' 'ZwQueryQuotaInformationFile' 'NtQueryQuotaInformationFile' 'NtQuerySecurityObject' 'ZwQuerySecurityObject' 'NtQuerySemaphore' 'ZwQuerySemaphore' 'ZwQuerySymbolicLinkObject' 'NtQuerySymbolicLinkObject' 'NtQuerySystemEnvironmentValue' 'ZwQuerySystemEnvironmentValue' 'ZwQuerySystemEnvironmentValueEx' 'NtQuerySystemEnvironmentValueEx' 'NtQueryTimerResolution' 'ZwQueryTimerResolution' 'NtRaiseException' 'ZwRaiseException' 'NtRaiseHardError' 'ZwRaiseHardError' 'NtReadOnlyEnlistment' 'ZwReadOnlyEnlistment' 'ZwRecoverEnlistment' 'NtRecoverEnlistment' 'ZwRecoverResourceManager' 'NtRecoverResourceManager' 'ZwRecoverTransactionManager' 'NtRecoverTransactionManager' 'ZwRegisterProtocolAddressInformation' 'NtRegisterProtocolAddressInformation' 'ZwRegisterThreadTerminatePort' 'NtRegisterThreadTerminatePort' 'ZwReleaseCMFViewOwnership' 'NtReleaseCMFViewOwnership' 'NtReleaseKeyedEvent' 'ZwReleaseKeyedEvent' 'ZwReleaseWorkerFactoryWorker' 'NtReleaseWorkerFactoryWorker' 'ZwRemoveIoCompletionEx' 'NtRemoveIoCompletionEx' 'NtRemoveProcessDebug' 'ZwRemoveProcessDebug' 'NtRenameKey' 'ZwRenameKey' 'NtRenameTransactionManager' 'ZwRenameTransactionManager' 'NtReplaceKey' 'ZwReplaceKey' 'ZwReplacePartitionUnit' 'NtReplacePartitionUnit' 'NtReplyWaitReplyPort' 'ZwReplyWaitReplyPort' 'ZwRequestDeviceWakeup' 'NtRequestDeviceWakeup' 'NtRequestPort' 'ZwRequestPort' 'NtRequestWakeupLatency' 'ZwRequestWakeupLatency' 'ZwResetEvent' 'NtResetEvent' 'NtResetWriteWatch' 'ZwResetWriteWatch' 'ZwRestoreKey' 'NtRestoreKey' 'NtResumeProcess' 'ZwResumeProcess' 'ZwRollbackComplete' 'NtRollbackComplete' 'NtRollbackEnlistment' 'ZwRollbackEnlistment' 'NtRollbackTransaction' 'ZwRollbackTransaction' 'NtRollforwardTransactionManager' 'ZwRollforwardTransactionManager' 'ZwSaveKey' 'NtSaveKey' 'NtSaveKeyEx' 'ZwSaveKeyEx' 'NtSaveMergedKeys' 'ZwSaveMergedKeys' 'NtSecureConnectPort' 'ZwSecureConnectPort' 'ZwSetBootEntryOrder' 'NtSetBootEntryOrder' 'NtSetBootOptions' 'ZwSetBootOptions' 'NtSetContextThread' 'ZwSetContextThread' 'NtSetDebugFilterState' 'ZwSetDebugFilterState' 'NtSetDefaultHardErrorPort' 'ZwSetDefaultHardErrorPort' 'ZwSetDefaultLocale' 'NtSetDefaultLocale' 'ZwSetDefaultUILanguage' 'NtSetDefaultUILanguage' 'NtSetDriverEntryOrder' 'ZwSetDriverEntryOrder' 'NtSetEaFile' 'ZwSetEaFile' 'NtSetHighEventPair' 'ZwSetHighEventPair' 'ZwSetHighWaitLowEventPair' 'NtSetHighWaitLowEventPair' 'ZwSetInformationDebugObject' 'NtSetInformationDebugObject' 'NtSetInformationEnlistment' 'ZwSetInformationEnlistment' 'ZwSetInformationJobObject' 'NtSetInformationJobObject' 'ZwSetInformationKey' 'NtSetInformationKey' 'NtSetInformationResourceManager' 'ZwSetInformationResourceManager' 'NtSetInformationToken' 'ZwSetInformationToken' 'NtSetInformationTransaction' 'ZwSetInformationTransaction' 'ZwSetInformationTransactionManager' 'NtSetInformationTransactionManager' 'ZwSetInformationWorkerFactory' 'NtSetInformationWorkerFactory' 'ZwSetIntervalProfile' 'NtSetIntervalProfile' 'NtSetIoCompletion' 'ZwSetIoCompletion' 'ZwSetLdtEntries' 'NtSetLdtEntries' 'NtSetLowEventPair' 'ZwSetLowEventPair' 'ZwSetLowWaitHighEventPair' 'NtSetLowWaitHighEventPair' 'NtSetQuotaInformationFile' 'ZwSetQuotaInformationFile' 'ZwSetSecurityObject' 'NtSetSecurityObject' 'NtSetSystemEnvironmentValue' 'ZwSetSystemEnvironmentValue' 'ZwSetSystemEnvironmentValueEx' 'NtSetSystemEnvironmentValueEx' 'ZwSetSystemInformation' 'NtSetSystemInformation' 'NtSetSystemPowerState' 'ZwSetSystemPowerState' 'NtSetSystemTime' 'ZwSetSystemTime' 'ZwSetThreadExecutionState' 'NtSetThreadExecutionState' 'NtSetTimerResolution' 'ZwSetTimerResolution' 'ZwSetUuidSeed' 'NtSetUuidSeed' 'NtSetVolumeInformationFile' 'ZwSetVolumeInformationFile' 'ZwShutdownSystem' 'NtShutdownSystem' 'NtShutdownWorkerFactory' 'ZwShutdownWorkerFactory' 'ZwSignalAndWaitForSingleObject' 'NtSignalAndWaitForSingleObject' 'ZwSinglePhaseReject' 'NtSinglePhaseReject' 'NtStartProfile' 'ZwStartProfile' 'ZwStopProfile' 'NtStopProfile' 'NtSuspendProcess' 'ZwSuspendProcess' 'ZwSuspendThread' 'NtSuspendThread' 'NtSystemDebugControl' 'ZwSystemDebugControl' 'ZwTerminateJobObject' 'NtTerminateJobObject' 'NtTestAlert' 'ZwTestAlert' 'NtThawRegistry' 'ZwThawRegistry' 'NtThawTransactions' 'ZwThawTransactions' 'ZwTraceControl' 'NtTraceControl' 'NtTranslateFilePath' 'ZwTranslateFilePath' 'NtUnloadDriver' 'ZwUnloadDriver' 'ZwUnloadKey' 'NtUnloadKey' 'NtUnloadKey2' 'ZwUnloadKey2' 'NtUnloadKeyEx' 'ZwUnloadKeyEx' 'NtUnlockFile' 'ZwUnlockFile' 'NtUnlockVirtualMemory' 'ZwUnlockVirtualMemory' 'NtVdmControl' 'ZwVdmControl' 'NtWaitForDebugEvent' 'ZwWaitForDebugEvent' 'NtWaitForKeyedEvent' 'ZwWaitForKeyedEvent' 'ZwWaitForWorkViaWorkerFactory' 'NtWaitForWorkViaWorkerFactory' 'NtWaitHighEventPair' 'ZwWaitHighEventPair' 'NtWaitLowEventPair' 'ZwWaitLowEventPair' 'ZwWorkerFactoryWorkerReady' 'NtWorkerFactoryWorkerReady' 'ZwWow64CsrClientConnectToServer' 'NtWow64CsrClientConnectToServer' 'NtWow64CsrIdentifyAlertableThread' 'ZwWow64CsrIdentifyAlertableThread' 'ZwWow64CsrClientCallServer' 'NtWow64CsrClientCallServer' 'NtWow64CsrAllocateCaptureBuffer' 'ZwWow64CsrAllocateCaptureBuffer' 'NtWow64CsrFreeCaptureBuffer' 'ZwWow64CsrFreeCaptureBuffer' 'NtWow64CsrAllocateMessagePointer' 'ZwWow64CsrAllocateMessagePointer' 'ZwWow64CsrCaptureMessageBuffer' 'NtWow64CsrCaptureMessageBuffer' 'NtWow64CsrCaptureMessageString' 'ZwWow64CsrCaptureMessageString' 'ZwWow64CsrGetProcessId' 'NtWow64CsrGetProcessId' 'NtWow64CsrVerifyRegion' 'ZwWow64CsrVerifyRegion' 'ZwWow64DebuggerCall' 'NtWow64DebuggerCall' 'NtWow64GetNativeSystemInformation' 'ZwWow64GetNativeSystemInformation' 'RtlGetNativeSystemInformation' 'ZwWow64QueryInformationProcess64' 'NtWow64QueryInformationProcess64' 'ZwWow64ReadVirtualMemory64' 'NtWow64ReadVirtualMemory64' 'NtWow64WriteVirtualMemory64' 'ZwWow64WriteVirtualMemory64' 'ZwWow64QueryVirtualMemory64' 'NtWow64QueryVirtualMemory64' 'ZwWow64CallFunction64' 'NtWow64CallFunction64' 'pow' = FF8B1DEB '_CIpow' 'KiUserApcDispatcher' 'KiUserCallbackDispatcher' 'KiUserExceptionDispatcher' 'KiRaiseUserExceptionDispatcher' 'RtlUserThreadStart' 'KiFastSystemCall' = 340FD48B 'KiFastSystemCallRet' 'KiIntSystemCall' = 90C32ECD0824548D 'RtlRaiseException' 'RtlRaiseStatus' 'RtlCaptureContext' '_alloca_probe_16' '_alloca_probe_8' '_chkstk' '_alloca_probe' 'cos' = FF8B18EB '_CIcos' 'log' = FF8B18EB '_CIlog' 'strstr' 'strchr' 'RtlEnterCriticalSection' 'RtlLeaveCriticalSection' 'RtlFreeHeap' 'RtlGetLastWin32Error' 'RtlActivateActivationContextUnsafeFast' 'RtlDeactivateActivationContextUnsafeFast' 'RtlTryEnterCriticalSection' 'RtlFreeUnicodeString' 'RtlFreeAnsiString' 'RtlDeleteBoundaryDescriptor' 'LdrUnlockLoaderLock' 'LdrLockLoaderLock' 'RtlAcquirePebLock' 'RtlReleasePebLock' 'RtlImageNtHeader' 'RtlImageNtHeaderEx' 'wcsrchr' 'wcschr' 'RtlUnicodeToMultiByteN' 'RtlUnicodeStringToAnsiString' 'RtlNtStatusToDosErrorNoTeb' 'RtlNtStatusToDosError' 'RtlMultiByteToUnicodeN' 'RtlAnsiStringToUnicodeString' 'RtlInitAnsiStringEx' 'RtlInitUnicodeStringEx' 'RtlInterlockedPopEntrySList' 'RtlLogStackBackTrace' 'RtlInitializeCriticalSection' 'RtlGetNtGlobalFlags' 'RtlUnicodeToMultiByteSize' 'RtlEqualUnicodeString' 'RtlUpcaseUnicodeChar' 'RtlQueryEnvironmentVariable_U' 'RtlDeleteCriticalSection' 'RtlQueryDepthSList' 'RtlInterlockedPushEntrySList' 'RtlAddRefActivationContext' 'RtlInitializeSListHead' 'RtlSizeHeap' 'RtlAcquireSRWLockExclusive' 'RtlReleaseSRWLockExclusive' '_wcsicmp' 'LdrGetProcedureAddress' 'LdrGetProcedureAddressEx' 'LdrAccessResource' 'RtlAddressInSectionTable' 'RtlImageRvaToSection' 'LdrFindResource_U' 'LdrLoadAlternateResourceModuleEx' 'RtlTimeToTimeFields' 'RtlReleaseRelativeName' 'RtlDetermineDosPathNameType_U' 'RtlDosPathNameToNtPathName_U' 'RtlDosPathNameToRelativeNtPathName_U' 'RtlGetFullPathName_U' 'RtlIsDosDeviceName_U' 'RtlDosPathNameToRelativeNtPathName_U_WithStatus' 'RtlAppendUnicodeToString' '_strcmpi' '_stricmp' 'LdrLoadDll' 'RtlGetFullPathName_UstrEx' 'RtlValidSid' 'RtlAppendUnicodeStringToString' 'RtlCopyUnicodeString' 'RtlConvertSidToUnicodeString' 'RtlFormatCurrentUserKeyPath' 'RtlCopyLuid' 'RtlQueryInformationActivationContext' 'RtlGetCurrentDirectory_U' 'wcsncmp' 'RtlInitializeSid' 'RtlSubAuthoritySid' 'RtlEqualSid' 'RtlSetThreadErrorMode' 'RtlTimeFieldsToTime' 'LdrInitializeThunk' 'RtlAllocateActivationContextStack' 'bsearch' 'RtlHashUnicodeString' 'RtlFindActivationContextSectionString' 'RtlDosApplyFileIsolationRedirection_Ustr' 'RtlFindCharInUnicodeString' 'RtlValidateUnicodeString' 'LdrGetDllHandle' 'LdrGetDllHandleEx' 'LdrUnloadDll' 'LdrUnloadAlternateResourceModule' 'LdrUnloadAlternateResourceModuleEx' 'RtlMultiAppendUnicodeStringBuffer' 'RtlEncodePointer' 'RtlDecodePointer' 'RtlInitializeBitMap' 'RtlSetEnvironmentVariable' 'RtlDoesFileExists_U' 'RtlGetActiveActivationContext' 'RtlInitializeSRWLock' 'RtlInitializeConditionVariable' 'RtlRunOnceInitialize' 'RtlOpenCurrentUser' 'RtlLCIDToCultureName' 'RtlLcidToLocaleName' 'RtlGetNtProductType' 'RtlGetVersion' 'RtlFindClearBitsAndSet' 'RtlSetBits' 'RtlRandomEx' 'RtlCreateHeap' 'LdrFindResourceDirectory_U' '_strnicmp' 'strncmp' 'LdrOpenImageFileOptionsKey' 'RtlAppendPathElement' 'LdrDisableThreadCalloutsForDll' 'RtlGetThreadPreferredUILanguages' 'LdrFindEntryForAddress' 'RtlInitializeHandleTable' 'LdrFindResourceEx_U' 'LdrEnumerateLoadedModules' 'RtlInitializeResource' 'RtlIntegerToChar' 'RtlIntegerToUnicodeString' 'RtlUnicodeStringToInteger' 'wcsncpy' 'RtlUnwind' 'RtlpEnsureBufferSize' 'RtlSetCurrentDirectory_U' 'RtlUnicodeToOemN' 'RtlInterlockedFlushSList' 'RtlDllShutdownInProgress' 'RtlCreateUnicodeStringFromAsciiz' 'RtlGetLongestNtPathLength' 'RtlDeleteAtomFromAtomTable' 'RtlpUnWaitCriticalSection' 'RtlReleaseActivationContext' 'RtlActivateActivationContext' 'RtlActivateActivationContextEx' 'RtlDeactivateActivationContext' 'RtlDosSearchPath_Ustr' 'RtlPcToFileHeader' '_snwprintf' 'RtlpQueryDefaultUILanguage' 'DbgPrintEx' 'RtlReleaseResource' 'RtlAcquireResourceShared' 'RtlIsTextUnicode' 'RtlEqualString' 'RtlCopySid' 'RtlLengthSid' 'RtlSetCriticalSectionSpinCount' '_wcsnicmp' 'RtlIsThreadWithinLoaderCallout' 'RtlPrefixUnicodeString' 'RtlExpandEnvironmentStrings' 'RtlAnsiCharToUnicodeChar' 'RtlFirstFreeAce' 'RtlCreateSecurityDescriptor' 'RtlSetDaclSecurityDescriptor' 'RtlValidAcl' 'RtlCreateAcl' 'RtlAddAccessAllowedAce' 'RtlFreeSid' 'RtlAllocateAndInitializeSid' 'RtlSetOwnerSecurityDescriptor' 'RtlSetGroupSecurityDescriptor' 'RtlLockHeap' 'RtlUnlockHeap' 'RtlIsValidHandle' 'RtlAllocateHandle' 'RtlQueryInformationActiveActivationContext' 'RtlGetIntegerAtom' 'RtlIsValidIndexHandle' 'RtlLookupAtomInAtomTable' 'RtlSetUserValueHeap' 'RtlGetUserInfoHeap' 'LdrAddRefDll' 'RtlFindActivationContextSectionGuid' 'RtlGetDaclSecurityDescriptor' 'RtlExpandEnvironmentStrings_U' 'RtlStringFromGUID' 'RtlQueryAtomInAtomTable' 'RtlAddAtomToAtomTable' 'RtlExitUserThread' 'LdrShutdownThread' 'RtlFreeThreadActivationContextStack' 'RtlFreeActivationContextStack' 'swprintf' '_swprintf' 'RtlpApplyLengthFunction' 'RtlGetLengthWithoutLastFullDosOrNtPathElement' 'RtlCreateActivationContext' 'EtwpCreateEtwThread' 'RtlCreateUserThread' 'RtlAcquireResourceExclusive' 'VerSetConditionMask' 'RtlVerifyVersionInfo' 'RtlLengthSecurityDescriptor' 'RtlValidSecurityDescriptor' 'RtlCreateAtomTable' 'RtlGetAce' 'RtlGetControlSecurityDescriptor' 'RtlGetSaclSecurityDescriptor' 'RtlGetOwnerSecurityDescriptor' 'RtlGetGroupSecurityDescriptor' 'RtlCharToInteger' 'RtlValidRelativeSecurityDescriptor' 'RtlTimeToSecondsSince1980' 'wcsncat' 'RtlAbsoluteToSelfRelativeSD' 'RtlMakeSelfRelativeSD' 'RtlSubAuthorityCountSid' 'RtlAddAccessAllowedAceEx' 'RtlUpperChar' 'RtlMultiByteToUnicodeSize' 'iswctype' 'iswdigit' 'RtlClearBits' 'RtlAreBitsSet' 'RtlDeleteResource' 'RtlDestroyHeap' 'RtlFormatMessageEx' 'RtlFindMessage' 'wcscspn' 'RtlReleaseSRWLockShared' 'RtlQueueWorkItem' 'TpCallbackMayRunLong' 'TpAllocPool' 'TpReleasePool' 'RtlOemStringToUnicodeString' 'RtlOemToUnicodeN' 'RtlUnicodeStringToOemString' 'RtlDowncaseUnicodeString' 'toupper' 'RtlUpcaseUnicodeToMultiByteN' 'RtlUpcaseUnicodeString' 'RtlCompactHeap' 'wcstoul' 'RtlDosPathNameToNtPathName_U_WithStatus' '_wtol' 'wcstol' 'RtlQueryInformationAcl' 'RtlTimeToSecondsSince1970' 'RtlCheckForOrphanedCriticalSections' 'WerCheckEventEscalation' 'WerReportSQMEvent' 'RtlAcquirePrivilege' 'RtlReleasePrivilege' '_vsnwprintf' '_wcstoui64' 'LdrShutdownProcess' 'RtlExitUserProcess' 'RtlDestroyHandleTable' 'RtlNumberGenericTableElements' 'RtlEnumerateGenericTableWithoutSplaying' 'RtlGetNtVersionNumbers' 'RtlInitializeGenericTable' 'RtlIsValidLocaleName' 'RtlNormalizeProcessParams' 'LdrSetDllManifestProber' 'RtlSetUnhandledExceptionFilter' 'CsrClientConnectToServer' 'RtlInitializeAtomPackage' 'RtlSetThreadPoolStartFunc' 'RtlInitNlsTables' 'RtlInitCodePageTable' 'RtlResetRtlTranslations' 'RtlCreateTagHeap' 'wcsstr' 'RtlDecodeSystemPointer' '_wcslwr' 'RtlFreeUserStack' 'RtlDestroyEnvironment' 'RtlCreateEnvironmentEx' 'RtlDestroyProcessParameters' 'RtlCreateProcessParametersEx' 'LdrQueryImageFileExecutionOptions' 'LdrQueryImageFileExecutionOptionsEx' 'LdrQueryImageFileKeyOption' 'EtwLogTraceEvent' 'RtlCreateUserStack' 'RtlCreateEnvironment' 'RtlAddAce' 'RtlDeleteAce' 'DbgPrint' '_vsnprintf' 'atol' '_strupr' 'strtol' 'RtlCreateQueryDebugBuffer' 'RtlQueryProcessDebugInformation' 'RtlDestroyQueryDebugBuffer' 'RtlAllocateHeap' 'RtlInitializeCriticalSectionAndSpinCount' 'RtlAcquireSRWLockShared' 'RtlLengthRequiredSid' 'RtlImageDirectoryEntryToData' 'RtlFreeHandle' 'RtlCreateUnicodeString' 'RtlFindClearBits' 'RtlCultureNameToLCID' 'RtlReAllocateHeap' 'RtlLocaleNameToLcid' 'RtlFreeOemString' 'NtCurrentTeb' 'RtlGetLengthWithoutTrailingPathSeperators' 'RtlNtPathNameToDosPathName' 'RtlDosSearchPath_U' 'RtlGetCurrentTransaction' 'RtlSetCurrentTransaction' 'DbgUiConnectToDbg' 'DbgUiGetThreadDebugObject' 'DbgUiSetThreadDebugObject' 'DbgUiWaitStateChange' 'DbgUiContinue' 'DbgUiStopDebugging' 'DbgUiRemoteBreakin' 'DbgUiIssueRemoteBreakin' 'DbgUiDebugActiveProcess' 'DbgUiConvertStateChangeStructure' 'RtlGetThreadErrorMode' 'RtlPushFrame' 'RtlPopFrame' 'RtlGetFrame' 'LdrHotPatchRoutine' 'RtlGetUnloadEventTrace' 'RtlGetUnloadEventTraceEx' 'LdrVerifyImageMatchesChecksumEx' 'LdrQueryProcessModuleInformation' 'LdrSetAppCompatDllRedirectionCallback' 'LdrQueryModuleServiceTags' 'LdrGetFailureData' 'LdrVerifyImageMatchesChecksum' 'LdrRegisterDllNotification' 'LdrUnregisterDllNotification' 'RtlSetUserCallbackExceptionFilter' 'LdrInitShimEngineDynamic' 'RtlComputePrivatizedDllName_U' 'RtlRegisterThreadWithCsrss' 'CsrSetPriorityClass' 'RtlFinalReleaseOutOfProcessMemoryStream' 'RtlInitMemoryStream' 'RtlAddRefMemoryStream' 'RtlReleaseMemoryStream' 'RtlQueryInterfaceMemoryStream' 'RtlReadOutOfProcessMemoryStream' 'RtlReadMemoryStream' 'RtlWriteMemoryStream' 'RtlSeekMemoryStream' 'RtlSetMemoryStreamSize' 'RtlCopyMemoryStreamTo' 'RtlCommitMemoryStream' 'RtlCloneMemoryStream' 'RtlRevertMemoryStream' 'RtlUnlockMemoryStreamRegion' 'RtlCopyOutOfProcessMemoryStreamTo' 'RtlLockMemoryStreamRegion' 'RtlStatMemoryStream' 'RtlInitOutOfProcessMemoryStream' 'RtlIsCriticalSectionLocked' 'RtlIsCriticalSectionLockedByThread' 'RtlGetCriticalSectionRecursionCount' 'RtlpWaitForCriticalSection' 'RtlConvertSharedToExclusive' 'RtlConvertExclusiveToShared' 'RtlDumpResource' 'RtlUpdateClonedCriticalSection' 'RtlEnableEarlyCriticalSectionEventCreation' 'RtlpNotOwnerCriticalSection' 'RtlQueryCriticalSectionOwner' 'RtlInitializeCriticalSectionEx' 'RtlNewSecurityObjectWithMultipleInheritance' 'RtlNewSecurityObjectEx' 'RtlNewSecurityObject' 'RtlSetSecurityObject' 'RtlSetSecurityObjectEx' 'RtlQuerySecurityObject' 'RtlDeleteSecurityObject' 'RtlNewInstanceSecurityObject' 'RtlNewSecurityGrantedAccess' 'RtlCopySecurityDescriptor' 'RtlCreateAndSetSD' 'RtlCreateUserSecurityObject' 'RtlConvertToAutoInheritSecurityObject' 'RtlDefaultNpAcl' 'RtlConvertUiListToApiList' 'RtlpQueryProcessDebugInformationRemote' 'RtlCommitDebugInfo' 'RtlDeCommitDebugInfo' 'RtlSetProcessDebugInformation' 'RtlQueryProcessBackTraceInformation' 'RtlQueryProcessLockInformation' 'RtlQueryProcessHeapInformation' 'LdrWx86FormatVirtualImage' 'NtdllDefWindowProc_A' 'NtdllDefWindowProc_W' 'NtdllDialogWndProc_A' 'NtdllDialogWndProc_W' 'RtlInitializeNtUserPfn' 'RtlRetrieveNtUserPfn' 'RtlAddVectoredContinueHandler' 'RtlAddVectoredExceptionHandler' 'RtlRemoveVectoredContinueHandler' 'RtlRemoveVectoredExceptionHandler' 'RtlApplicationVerifierStop' 'RtlQueueApcWow64Thread' 'RtlWow64CallFunction64' 'RtlWow64EnableFsRedirectionEx' 'RtlWow64EnableFsRedirection' 'RtlEncodeSystemPointer' 'RtlWakeConditionVariable' 'RtlWakeAllConditionVariable' 'RtlSleepConditionVariableCS' 'RtlSleepConditionVariableSRW' 'RtlUpdateClonedSRWLock' 'RtlWerpReportException' 'RtlReportException' 'ShipAssertGetBufferInfo' 'ShipAssert' 'ShipAssertMsgW' 'ShipAssertMsgA' 'WerReportWatsonEvent' 'WinSqmEventEnabled' 'WinSqmEventWrite' 'WinSqmStartSession' 'WinSqmEndSession' 'WinSqmIsOptedIn' 'WinSqmSetString' 'WinSqmAddToStream' 'RtlZombifyActivationContext' 'RtlIsActivationContextActive' 'RtlQueryActivationContextApplicationSettings' 'RtlComputeImportTableHash' 'CsrIdentifyAlertableThread' 'CsrClientCallServer' 'CsrAllocateCaptureBuffer' 'CsrFreeCaptureBuffer' 'CsrAllocateMessagePointer' 'CsrCaptureMessageBuffer' 'CsrCaptureMessageString' 'CsrCaptureTimeout' 'CsrGetProcessId' 'CsrCaptureMessageMultiUnicodeStringsInPlace' 'CsrVerifyRegion' 'AlpcGetHeaderSize' 'AlpcInitializeMessageAttribute' 'AlpcGetMessageAttribute' 'AlpcGetMessageFromCompletionList' 'AlpcFreeCompletionListMessage' 'AlpcGetCompletionListMessageAttributes' 'AlpcGetCompletionListLastMessageInformation' 'AlpcGetOutstandingCompletionListMessageCount' 'AlpcRegisterCompletionListWorkerThread' 'AlpcUnregisterCompletionListWorkerThread' 'AlpcRegisterCompletionList' 'AlpcUnregisterCompletionList' 'AlpcAdjustCompletionListConcurrencyCount' 'AlpcMaxAllowedMessageLength' 'DbgPrompt' 'DbgQueryDebugFilterState' 'DbgSetDebugFilterState' 'DbgPrintReturnControlC' 'vDbgPrintEx' 'vDbgPrintExWithPrefix' 'LdrRemoveLoadAsDataTable' 'LdrAddLoadAsDataTable' 'LdrGetFileNameFromLoadAsDataTable' 'LdrSetMUICacheType' 'LdrEnumResources' 'LdrFlushAlternateResourceModules' 'LdrLoadAlternateResourceModule' 'RtlDeNormalizeProcessParams' 'RtlIsCurrentThreadAttachExempt' 'RtlQueryElevationFlags' 'RtlFlsAlloc' 'RtlFlsFree' 'RtlProcessFlsData' 'RtlWow64LogMessageInEventLogger' 'RtlCreateUserProcess' 'RtlCloneUserProcess' 'RtlCreateProcessParameters' 'RtlQueryModuleInformation' 'LdrProcessRelocationBlock' 'LdrResRelease' 'LdrpResGetMappingSize' 'LdrpResGetRCConfig' 'LdrpResGetResourceDirectory' 'LdrResSearchResource' 'LdrResFindResource' 'LdrResFindResourceDirectory' 'RtlUpcaseUnicodeToOemN' 'RtlCustomCPToUnicodeN' 'RtlUnicodeToCustomCPN' 'RtlUpcaseUnicodeToCustomCPN' 'RtlConsoleMultiByteToUnicodeN' 'RtlTimeToElapsedTimeFields' 'RtlSecondsSince1980ToTime' 'RtlSecondsSince1970ToTime' 'RtlSystemTimeToLocalTime' 'RtlLocalTimeToSystemTime' 'NtGetTickCount' 'RtlCutoverTimeToSystemTime' 'PfxInitialize' 'PfxRemovePrefix' 'PfxInsertPrefix' 'PfxFindPrefix' 'RtlStartRXact' 'RtlAbortRXact' 'RtlAddAttributeActionToRXact' 'RtlAddActionToRXact' 'RtlInitializeRXact' 'RtlApplyRXact' 'RtlApplyRXactNoFlush' 'RtlSelfRelativeToAbsoluteSD2' 'RtlSelfRelativeToAbsoluteSD' 'RtlTryAcquirePebLock' 'RtlRunEncodeUnicodeString' 'RtlRunDecodeUnicodeString' 'RtlEraseUnicodeString' 'RtlAdjustPrivilege' 'RtlEqualPrefixSid' 'RtlIdentifierAuthoritySid' 'RtlCopySidAndAttributesArray' 'RtlCreateServiceSid' 'RtlRemovePrivileges' 'RtlEqualLuid' 'RtlCopyLuidAndAttributesArray' 'RtlSetControlSecurityDescriptor' 'RtlSetSaclSecurityDescriptor' 'RtlAreAllAccessesGranted' 'RtlAreAnyAccessesGranted' 'RtlMapGenericMask' 'RtlImpersonateSelfEx' 'RtlImpersonateSelf' 'RtlOwnerAcesPresent' 'RtlGetSecurityDescriptorRMControl' 'RtlSetSecurityDescriptorRMControl' 'RtlMapSecurityErrorToNtStatus' 'RtlSidHashInitialize' 'RtlSidHashLookup' 'RtlSidIsHigherLevel' 'RtlSidEqualLevel' 'RtlSidDominates' 'RtlSetAttributesSecurityDescriptor' 'RtlSetInformationAcl' 'RtlFindAceByType' 'RtlAddCompoundAce' 'RtlAddMandatoryAce' 'RtlAddAccessDeniedAce' 'RtlAddAccessDeniedAceEx' 'RtlAddAuditAccessAce' 'RtlAddAuditAccessAceEx' 'RtlAddAccessAllowedObjectAce' 'RtlAddAccessDeniedObjectAce' 'RtlAddAuditAccessObjectAce' 'RtlDestroyAtomTable' 'RtlEmptyAtomTable' 'RtlPinAtomInAtomTable' 'RtlCreateBoundaryDescriptor' 'RtlAddSIDToBoundaryDescriptor' 'RtlImageRvaToVa' 'RtlZeroHeap' 'RtlCreateMemoryBlockLookaside' 'RtlDestroyMemoryBlockLookaside' 'RtlExtendMemoryBlockLookaside' 'RtlLockMemoryBlockLookaside' 'RtlResetMemoryBlockLookaside' 'RtlUnlockMemoryBlockLookaside' 'RtlCreateMemoryZone' 'RtlDestroyMemoryZone' 'RtlExtendMemoryZone' 'RtlLockMemoryZone' 'RtlResetMemoryZone' 'RtlUnlockMemoryZone' 'RtlDowncaseUnicodeChar' 'RtlUnicodeStringToAnsiSize' 'RtlUnicodeStringToOemSize' 'RtlxUnicodeStringToOemSize' 'RtlxUnicodeStringToAnsiSize' 'RtlAnsiStringToUnicodeSize' 'RtlxAnsiStringToUnicodeSize' 'RtlxOemStringToUnicodeSize' 'RtlOemStringToUnicodeSize' 'RtlCompareUnicodeStrings' 'RtlCompareUnicodeString' 'RtlUpcaseUnicodeStringToAnsiString' 'RtlUpcaseUnicodeStringToOemString' 'RtlUnicodeStringToCountedOemString' 'RtlUpcaseUnicodeStringToCountedOemString' 'RtlEqualDomainName' 'RtlEqualComputerName' 'RtlDnsHostNameToComputerName' 'RtlDuplicateUnicodeString' 'RtlCopyString' 'RtlCompareString' 'RtlPrefixString' 'RtlUpperString' 'RtlAppendAsciizToString' 'RtlAppendStringToString' 'RtlTestBit' 'RtlClearAllBits' 'RtlSetAllBits' 'RtlFindSetBits' 'RtlFindClearRuns' 'RtlFindLongestRunClear' 'RtlNumberOfSetBitsUlongPtr' 'RtlNumberOfSetBits' 'RtlNumberOfClearBits' 'RtlAreBitsClear' 'RtlFindNextForwardRunClear' 'RtlFindLastBackwardRunClear' 'RtlFindMostSignificantBit' 'RtlFindLeastSignificantBit' 'RtlFindSetBitsAndClear' 'RtlAssert' 'RtlBarrier' 'RtlBarrierForDelete' 'RtlInitBarrier' 'RtlDeleteBarrier' 'RtlWalkFrameChain' 'RtlCaptureStackContext' 'RtlCaptureStackBackTrace' 'RtlGetCallersAddress' 'RtlLargeIntegerToChar' 'RtlInt64ToUnicodeString' 'RtlWriteRegistryValue' 'RtlCheckRegistryKey' 'RtlCreateRegistryKey' 'RtlDeleteRegistryValue' 'RtlSetTimeZoneInformation' 'RtlSetDynamicTimeZoneInformation' 'RtlQueryRegistryValues' 'RtlpCheckDynamicTimeZoneInformation' 'RtlQueryTimeZoneInformation' 'RtlQueryDynamicTimeZoneInformation' 'RtlpInitializeLangRegistryInfo' 'RtlpCreateProcessRegistryInfo' 'RtlCleanUpTEBLangLists' 'RtlGetThreadLangIdByIndex' 'RtlpGetSystemDefaultUILanguage' 'RtlpGetLCIDFromLangInfoNode' 'RtlpIsQualifiedLanguage' 'RtlpGetNameFromLangInfoNode' 'RtlConvertLCIDToString' 'RtlpConvertLCIDsToCultureNames' 'RtlpConvertCultureNamesToLCIDs' 'RtlpVerifyAndCommitUILanguageSettings' 'RtlpCleanupRegistryKeys' 'RtlGetSystemPreferredUILanguages' 'RtlpSetPreferredUILanguages' 'RtlpSetUserPreferredUILanguages' 'RtlGetUILanguageInfo' 'RtlGetUserPreferredUILanguages' 'RtlpSetInstallLanguage' 'RtlSetThreadPreferredUILanguages' 'RtlGetFileMUIPath' 'RtlIoEncodeMemIoResource' 'RtlCmEncodeMemIoResource' 'RtlIoDecodeMemIoResource' 'RtlCmDecodeMemIoResource' 'RtlFindClosestEncodableLength' 'RtlProtectHeap' 'RtlSetUserFlagsHeap' 'RtlQueryTagHeap' 'RtlGetProcessHeaps' 'RtlEnumProcessHeaps' 'RtlWalkHeap' 'RtlMultipleAllocateHeap' 'RtlMultipleFreeHeap' 'RtlValidateHeap' 'RtlValidateProcessHeaps' 'RtlSetHeapInformation' 'RtlQueryHeapInformation' 'RtlCompareAltitudes' 'RtlGetCompressionWorkSpaceSize' 'RtlCompressBuffer' 'RtlDecompressBuffer' 'RtlDecompressFragment' 'RtlComputeCrc32' 'RtlConnectToSm' 'RtlSendMsgToSm' 'RtlCopyMappedMemory' 'RtlLockBootStatusData' 'RtlUnlockBootStatusData' 'RtlGetSetBootStatusData' 'RtlCreateBootStatusDataFile' 'RtlSetCurrentEnvironment' 'RtlSetEnvironmentVar' 'RtlSetEnvironmentStrings' 'RtlQueryEnvironmentVariable' 'RtlCreateSystemVolumeInformationFolder' 'RtlSplay' 'RtlSubtreeSuccessor' 'RtlSubtreePredecessor' 'RtlRealSuccessor' 'RtlRealPredecessor' 'RtlDelete' 'RtlDeleteNoSplay' 'RtlInsertElementGenericTableFull' 'RtlIsGenericTableEmpty' 'RtlGetElementGenericTable' 'RtlInsertElementGenericTable' 'RtlDeleteElementGenericTable' 'RtlLookupElementGenericTableFull' 'RtlEnumerateGenericTable' 'RtlLookupElementGenericTable' 'RtlInitializeGenericTableAvl' 'RtlInsertElementGenericTableFullAvl' 'RtlIsGenericTableEmptyAvl' 'RtlGetElementGenericTableAvl' 'RtlNumberGenericTableElementsAvl' 'RtlEnumerateGenericTableWithoutSplayingAvl' 'RtlInsertElementGenericTableAvl' 'RtlDeleteElementGenericTableAvl' 'RtlLookupElementGenericTableFullAvl' 'RtlEnumerateGenericTableAvl' 'RtlEnumerateGenericTableLikeADirectory' 'RtlLookupElementGenericTableAvl' 'RtlRegisterSecureMemoryCacheCallback' 'RtlDeregisterSecureMemoryCacheCallback' 'RtlFlushSecureMemoryCache' 'RtlFormatMessage' 'RtlGUIDFromString' 'RtlIsNameLegalDOS8Dot3' 'RtlGenerate8dot3Name' 'RtlGetCurrentPeb' 'RtlSetProcessIsCritical' 'RtlSetThreadIsCritical' 'RtlRestoreLastWin32Error' 'RtlSetLastWin32Error' 'RtlGetLastNtStatus' 'RtlSetLastWin32ErrorAndNtStatusFromNtStatus' 'RtlGetParentLocaleName' 'RtlGetProductInfo' 'RtlHeapTrkInitialize' 'RtlIdnToAscii' 'RtlIdnToNameprepUnicode' 'RtlIdnToUnicode' 'RtlInitializeContext' 'RtlRemoteCall' 'RtlInitializeExceptionChain' 'RtlIpv6AddressToStringA' 'RtlIpv6AddressToStringExA' 'RtlIpv4AddressToStringA' 'RtlIpv4AddressToStringExA' 'RtlIpv6AddressToStringW' 'RtlIpv6AddressToStringExW' 'RtlIpv4AddressToStringW' 'RtlIpv4AddressToStringExW' 'RtlIpv6StringToAddressA' 'RtlIpv6StringToAddressExA' 'RtlIpv4StringToAddressA' 'RtlIpv4StringToAddressExA' 'RtlIpv6StringToAddressW' 'RtlIpv6StringToAddressExW' 'RtlIpv4StringToAddressW' 'RtlIpv4StringToAddressExW' 'RtlNormalizeString' 'RtlIsNormalizedString' 'RtlLargeIntegerDivide' 'RtlLockCurrentThread' 'RtlUnlockCurrentThread' 'RtlLockModuleSection' 'RtlUnlockModuleSection' 'RtlUniform' 'RtlRandom' 'RtlRunOnceBeginInitialize' 'RtlRunOnceComplete' 'RtlRunOnceExecuteOnce' 'RtlTraceDatabaseEnumerate' 'RtlTraceDatabaseCreate' 'RtlTraceDatabaseDestroy' 'RtlTraceDatabaseValidate' 'RtlTraceDatabaseFind' 'RtlTraceDatabaseLock' 'RtlTraceDatabaseUnlock' 'RtlTraceDatabaseAdd' 'RtlUnhandledExceptionFilter2' 'RtlUnhandledExceptionFilter' 'RtlpGetUserOrMachineUILanguage4NLS' 'RtlpMuiRegFreeRegistryInfo' 'RtlpRefreshCachedUILanguage' 'RtlpMuiRegCreateRegistryInfo' 'RtlpMuiFreeLangRegistryInfo' 'RtlpLoadMachineUIByPolicy' 'RtlpLoadUserUIByPolicy' 'RtlpMuiRegLoadRegistryInfo' 'RtlpNtOpenKey' 'RtlpNtCreateKey' 'RtlpNtQueryValueKey' 'RtlpNtSetValueKey' 'RtlpNtMakeTemporaryKey' 'RtlpNtEnumerateSubKey' 'isalpha' 'isupper' 'islower' 'isdigit' 'isxdigit' 'isspace' 'ispunct' 'isalnum' 'isprint' 'isgraph' 'iscntrl' '__isascii' '__toascii' '__iscsym' '__iscsymf' 'atoi' '_atoi64' '_itoa' '_ltoa' '_ultoa' '_i64toa' '_ui64toa' '_itow' '_ltow' '_ultow' '_i64tow' '_ui64tow' '_lfind' '_memicmp' '_snprintf' '_splitpath' '_strlwr' '_vswprintf' '_vscwprintf' '_wcsupr' '_wtoi' '_wtoi64' 'fabs' 'iswalpha' 'iswlower' 'iswxdigit' 'iswspace' 'abs' 'labs' 'mbstowcs' 'memcmp' 'qsort' 'sprintf' 'sscanf' 'strtoul' 'tolower' 'towlower' 'towupper' 'vsprintf' 'wcscat' 'wcscpy' 'wcscmp' 'wcslen' 'wcspbrk' 'wcsspn' 'wcstombs' 'EtwGetTraceLoggerHandle' 'EtwGetTraceEnableLevel' 'EtwGetTraceEnableFlags' 'EtwUnregisterTraceGuids' 'EtwCreateTraceInstanceId' 'EtwRegisterTraceGuidsW' 'EtwRegisterTraceGuidsA' 'EtwDeliverDataBlock' 'EtwRegisterSecurityProvider' 'EtwNotificationRegister' 'EtwNotificationUnregister' 'EtwEventEnabled' 'EtwEventProviderEnabled' 'EtwEventActivityIdControl' 'EtwEventWriteFull' 'EtwEventWriteString' 'EtwWriteUMSecurityEvent' 'EtwEnumerateProcessRegGuids' 'EtwEventRegister' 'EtwEventUnregister' 'EtwEventWrite' 'EtwEventWriteTransfer' 'EtwEventWriteStartScenario' 'EtwEventWriteEndScenario' 'EtwTraceEventInstance' 'EtwTraceMessageVa' 'EtwTraceMessage' 'EtwSetMark' 'EtwProcessPrivateLoggerRequest' 'EtwpNotificationThread' 'EtwReplyNotification' 'EtwSendNotification' 'EtwpGetCpuSpeed' 'A_SHAInit' 'A_SHAUpdate' 'A_SHAFinal' 'MD4Init' 'MD4Update' 'MD4Final' 'MD5Init' 'MD5Update' 'MD5Final' 'TpAllocAlpcCompletion' 'TpWaitForAlpcCompletion' 'TpReleaseAlpcCompletion' 'TpAllocCleanupGroup' 'TpReleaseCleanupGroupMembers' 'TpReleaseCleanupGroup' 'TpAllocIoCompletion' 'TpWaitForIoCompletion' 'TpReleaseIoCompletion' 'TpStartAsyncIoOperation' 'TpCancelAsyncIoOperation' 'TpSetPoolMinThreads' 'TpSetPoolMaxThreads' 'TpAllocTimer' 'TpIsTimerSet' 'TpSetTimer' 'TpWaitForTimer' 'TpReleaseTimer' 'TpAllocWait' 'TpSetWait' 'TpWaitForWait' 'TpReleaseWait' 'TpAllocWork' 'TpWaitForWork' 'TpReleaseWork' 'TpPostWork' 'TpCallbackSetEventOnCompletion' 'TpCallbackReleaseSemaphoreOnCompletion' 'TpCallbackReleaseMutexOnCompletion' 'TpCallbackLeaveCriticalSectionOnCompletion' 'TpCallbackUnloadDllOnCompletion' 'TpDisassociateCallback' 'TpDbgSetLogRoutine' 'TpCaptureCaller' 'TpDbgDumpHeapUsage' 'TpCheckTerminateWorker' 'TpSimpleTryPost' 'RtlDebugPrintTimes' = 9090909090C3C08B 'RtlCreateTimerQueue' 'RtlDeleteTimerQueueEx' 'RtlDeleteTimerQueue' 'RtlCreateTimer' 'RtlUpdateTimer' 'RtlDeleteTimer' 'RtlCancelTimer' 'RtlSetTimer' 'RtlRegisterWait' 'RtlDeregisterWaitEx' 'RtlDeregisterWait' 'RtlSetIoCompletionCallback' 'RtlAllocateMemoryBlockLookaside' 'RtlFreeMemoryBlockLookaside' 'RtlAllocateMemoryZone' '_fltused' 'NlsAnsiCodePage' = 4E4 'NlsMbCodePageTag' = 0 'NlsMbOemCodePageTag'