rendered paste bodyRevision: 6735
Date 7:10:2008. Time 3:44
//=====================================================
*** Hardware ***
Processor: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
Number Of Processors: 4
Physical Memory: 1048575 KB (Available: 1048575 KB)
Commit Charge Limit: 2097151 KB
*** Operation System ***
Microsoft Windows XP Professional Service Pack 2 (Version 5.1, Build 2600)
//=====================================================
Exception code: C0000005 ACCESS_VIOLATION
Fault address: 77CFF8F4 01:0001F8F4 C:\Windows\SysWOW64\ntdll.dll
Registers:
EAX:00000000
EBX:E9E80001
ECX:000001BF
EDX:00000000
ESI:0D0F9868
EDI:E9E80000
CS:EIP:0023:77CFF8F4
SS:ESP:002B:0017C25C EBP:0017C290
DS:002B ES:002B FS:0053 GS:002B
Flags:00010202
Call stack:
Address Frame Function SourceFile
77CFF8F4 00000000 RtlTryEnterCriticalSection+35E
77CFF26C 00000000 RtlDeactivateActivationContextUnsafeFast+BBD0
77033593 00000000 HeapFree+14
0EA5A851 00000000 ?push@?$stack@PAVMovementGenerator@@V?$deque@PAVMovementGenerator@@V?$allocator@PAVMovementGenerator@@@std@@@std@@@std@@QAEXABQAVMovementGenerator@@@Z+AAF1
0EA21AC0 00000000 ?IsMounted@Unit@@QBE_NXZ+A5E0
0E9518BA 00000000 ?SpellHit@CreatureAI@@UAEXPAVUnit@@PBUSpellEntry@@@Z+15A
0E957613 00000000 ?IsHeroic@Map@@QBE_NXZ+B3
0EA47E75 00000000 ??4ThreatRefStatusChangeEvent@@QAEAAV0@ABV0@@Z+1895
0EA4817B 00000000 ScriptsInit+1DB
00606714 00000000 LoadScriptingModule+4D4
005EB714 00000000 World::SetInitialWorldSettings+CD4
00432C3B 00000000 Master::Run+28B
0043297E 00000000 main+22E
008B8BE8 00000000 __tmainCRTStartup+FB
7703E3F3 00000000 BaseThreadInitThunk+E
77D4CFED 00000000 RtlCreateUserProcess+8C
77D4D1FF 00000000 RtlCreateProcessParameters+4E
========================
Local Variables And Parameters
Call stack:
Address Frame Function SourceFile
77CFF8F4 00000000 RtlTryEnterCriticalSection+35E
77CFF26C 00000000 RtlDeactivateActivationContextUnsafeFast+BBD0
77033593 00000000 HeapFree+14
0EA5A851 00000000 ?push@?$stack@PAVMovementGenerator@@V?$deque@PAVMovementGenerator@@V?$allocator@PAVMovementGenerator@@@std@@@std@@@std@@QAEXABQAVMovementGenerator@@@Z+AAF1
0EA21AC0 00000000 ?IsMounted@Unit@@QBE_NXZ+A5E0
0E9518BA 00000000 ?SpellHit@CreatureAI@@UAEXPAVUnit@@PBUSpellEntry@@@Z+15A
0E957613 00000000 ?IsHeroic@Map@@QBE_NXZ+B3
0EA47E75 00000000 ??4ThreatRefStatusChangeEvent@@QAEAAV0@ABV0@@Z+1895
0EA4817B 00000000 ScriptsInit+1DB
00606714 00000000 LoadScriptingModule+4D4
Local <user defined> 'libName'
Local <user defined> 'name'
Local <user defined> 'testScript'
005EB714 00000000 World::SetInitialWorldSettings+CD4
Local <user defined> 'this'
Local <user defined> 'local'
Local <user defined> 'isoDate'
punting on symbol curr
punting on symbol nextGameEvent
punting on symbol realm_zone
punting on symbol server_type
00432C3B 00000000 Master::Run+28B
Local <user defined> 'this'
Local <user defined> 'bind_ip'
Local <user defined> 't'
Local <user defined> 'pidfile'
punting on symbol numLoops
punting on symbol loopCounter
punting on symbol realCurrTime
punting on symbol realPrevTime
punting on symbol wsport
Local <user defined> 'worldListenSocket'
punting on symbol freeze_delay
Local <user defined> 'h'
Local <user defined> 'RAListenSocket'
punting on symbol socketSelecttime
0043297E 00000000 main+22E
punting on symbol argc
Local <user defined> 'argv'
punting on symbol c
Local <user defined> 'cfg_file'
008B8BE8 00000000 __tmainCRTStartup+FB
punting on symbol mainret
punting on symbol managedapp
7703E3F3 00000000 BaseThreadInitThunk+E
77D4CFED 00000000 RtlCreateUserProcess+8C
77D4D1FF 00000000 RtlCreateProcessParameters+4E
========================
Global Variables
<user defined> 'DbgUserBreakPoint' = 90C390CC
<user defined> 'DbgBreakPoint' = 9090C3CC
<user defined> 'RtlInitString'
<user defined> 'RtlInitAnsiString'
<user defined> 'RtlInitUnicodeString'
<user defined> 'sin' = FF8B18EB
<user defined> '_CIsin'
<user defined> '_CIsqrt'
<user defined> 'sqrt'
<user defined> '_alldiv'
<user defined> '_alldvrm'
<user defined> '_allmul'
<user defined> '_allrem'
<user defined> '_allshl'
<user defined> '_allshr'
<user defined> '_aulldiv'
<user defined> '_aulldvrm'
<user defined> '_aullrem'
<user defined> '_aullshr'
<user defined> '_ftol'
<user defined> '_memccpy'
<user defined> 'atan'
<user defined> 'ceil'
<user defined> 'floor'
<user defined> 'memchr'
<user defined> 'memcpy'
<user defined> 'memmove'
<user defined> 'memset'
<user defined> 'strcpy'
<user defined> 'strcat'
<user defined> 'strcmp'
<user defined> 'strcspn'
<user defined> 'strlen'
<user defined> 'strncat'
<user defined> 'strncpy'
<user defined> 'strpbrk'
<user defined> 'strrchr'
<user defined> 'strspn'
<user defined> 'tan'
<user defined> 'ExpInterlockedPopEntrySListResume'
<user defined> 'ExpInterlockedPopEntrySListFault' = 188B
<user defined> 'ExpInterlockedPopEntrySListEnd'
<user defined> 'RtlInterlockedPushListSList'
<user defined> 'RtlFirstEntrySList'
<user defined> 'RtlInterlockedCompareExchange64'
<user defined> 'RtlUshortByteSwap'
<user defined> 'RtlUlongByteSwap'
<user defined> 'RtlUlonglongByteSwap'
<user defined> 'RtlCompareMemory'
<user defined> 'RtlCompareMemoryUlong'
<user defined> 'RtlFillMemory'
<user defined> 'RtlFillMemoryUlong'
<user defined> 'RtlZeroMemory'
<user defined> 'RtlMoveMemory'
<user defined> 'RtlLargeIntegerAdd'
<user defined> 'RtlEnlargedIntegerMultiply'
<user defined> 'RtlEnlargedUnsignedMultiply'
<user defined> 'RtlEnlargedUnsignedDivide'
<user defined> 'RtlExtendedLargeIntegerDivide'
<user defined> 'RtlExtendedMagicDivide'
<user defined> 'RtlExtendedIntegerMultiply'
<user defined> 'RtlLargeIntegerShiftLeft'
<user defined> 'RtlLargeIntegerShiftRight'
<user defined> 'RtlLargeIntegerArithmeticShift'
<user defined> 'RtlLargeIntegerNegate'
<user defined> 'RtlLargeIntegerSubtract'
<user defined> 'RtlConvertLongToLargeInteger' = 4C2990424448B
<user defined> 'RtlConvertUlongToLargeInteger'
<user defined> 'ZwMapUserPhysicalPagesScatter'
<user defined> 'NtMapUserPhysicalPagesScatter'
<user defined> 'NtWaitForSingleObject'
<user defined> 'ZwWaitForSingleObject'
<user defined> 'ZwCallbackReturn'
<user defined> 'NtCallbackReturn'
<user defined> 'NtReadFile'
<user defined> 'ZwReadFile'
<user defined> 'ZwDeviceIoControlFile'
<user defined> 'NtDeviceIoControlFile'
<user defined> 'NtWriteFile'
<user defined> 'ZwWriteFile'
<user defined> 'ZwRemoveIoCompletion'
<user defined> 'NtRemoveIoCompletion'
<user defined> 'ZwReleaseSemaphore'
<user defined> 'NtReleaseSemaphore'
<user defined> 'NtReplyWaitReceivePort'
<user defined> 'ZwReplyWaitReceivePort'
<user defined> 'ZwReplyPort'
<user defined> 'NtReplyPort'
<user defined> 'NtSetInformationThread'
<user defined> 'ZwSetInformationThread'
<user defined> 'ZwSetEvent'
<user defined> 'NtSetEvent'
<user defined> 'ZwClose'
<user defined> 'NtClose'
<user defined> 'NtQueryObject'
<user defined> 'ZwQueryObject'
<user defined> 'ZwQueryInformationFile'
<user defined> 'NtQueryInformationFile'
<user defined> 'ZwOpenKey'
<user defined> 'NtOpenKey'
<user defined> 'ZwEnumerateValueKey'
<user defined> 'NtEnumerateValueKey'
<user defined> 'ZwFindAtom'
<user defined> 'NtFindAtom'
<user defined> 'NtQueryDefaultLocale'
<user defined> 'ZwQueryDefaultLocale'
<user defined> 'ZwQueryKey'
<user defined> 'NtQueryKey'
<user defined> 'NtQueryValueKey'
<user defined> 'ZwQueryValueKey'
<user defined> 'ZwAllocateVirtualMemory'
<user defined> 'NtAllocateVirtualMemory'
<user defined> 'ZwQueryInformationProcess'
<user defined> 'NtQueryInformationProcess'
<user defined> 'NtWaitForMultipleObjects32'
<user defined> 'ZwWaitForMultipleObjects32'
<user defined> 'NtWriteFileGather'
<user defined> 'ZwWriteFileGather'
<user defined> 'NtSetInformationProcess'
<user defined> 'ZwSetInformationProcess'
<user defined> 'NtCreateKey'
<user defined> 'ZwCreateKey'
<user defined> 'ZwFreeVirtualMemory'
<user defined> 'NtFreeVirtualMemory'
<user defined> 'ZwImpersonateClientOfPort'
<user defined> 'NtImpersonateClientOfPort'
<user defined> 'NtReleaseMutant'
<user defined> 'ZwReleaseMutant'
<user defined> 'ZwQueryInformationToken'
<user defined> 'NtQueryInformationToken'
<user defined> 'ZwRequestWaitReplyPort'
<user defined> 'NtRequestWaitReplyPort'
<user defined> 'ZwQueryVirtualMemory'
<user defined> 'NtQueryVirtualMemory'
<user defined> 'NtOpenThreadToken'
<user defined> 'ZwOpenThreadToken'
<user defined> 'NtQueryInformationThread'
<user defined> 'ZwQueryInformationThread'
<user defined> 'ZwOpenProcess'
<user defined> 'NtOpenProcess'
<user defined> 'ZwSetInformationFile'
<user defined> 'NtSetInformationFile'
<user defined> 'NtMapViewOfSection'
<user defined> 'ZwMapViewOfSection'
<user defined> 'NtAccessCheckAndAuditAlarm'
<user defined> 'ZwAccessCheckAndAuditAlarm'
<user defined> 'NtUnmapViewOfSection'
<user defined> 'ZwUnmapViewOfSection'
<user defined> 'NtReplyWaitReceivePortEx'
<user defined> 'ZwReplyWaitReceivePortEx'
<user defined> 'ZwTerminateProcess'
<user defined> 'NtTerminateProcess'
<user defined> 'NtSetEventBoostPriority'
<user defined> 'ZwSetEventBoostPriority'
<user defined> 'NtReadFileScatter'
<user defined> 'ZwReadFileScatter'
<user defined> 'ZwOpenThreadTokenEx'
<user defined> 'NtOpenThreadTokenEx'
<user defined> 'NtOpenProcessTokenEx'
<user defined> 'ZwOpenProcessTokenEx'
<user defined> 'ZwQueryPerformanceCounter'
<user defined> 'NtQueryPerformanceCounter'
<user defined> 'NtEnumerateKey'
<user defined> 'ZwEnumerateKey'
<user defined> 'ZwOpenFile'
<user defined> 'NtOpenFile'
<user defined> 'ZwDelayExecution'
<user defined> 'NtDelayExecution'
<user defined> 'NtQueryDirectoryFile'
<user defined> 'ZwQueryDirectoryFile'
<user defined> 'ZwQuerySystemInformation'
<user defined> 'NtQuerySystemInformation'
<user defined> 'NtOpenSection'
<user defined> 'ZwOpenSection'
<user defined> 'NtQueryTimer'
<user defined> 'ZwQueryTimer'
<user defined> 'ZwFsControlFile'
<user defined> 'NtFsControlFile'
<user defined> 'ZwWriteVirtualMemory'
<user defined> 'NtWriteVirtualMemory'
<user defined> 'NtCloseObjectAuditAlarm'
<user defined> 'ZwCloseObjectAuditAlarm'
<user defined> 'NtDuplicateObject'
<user defined> 'ZwDuplicateObject'
<user defined> 'ZwQueryAttributesFile'
<user defined> 'NtQueryAttributesFile'
<user defined> 'ZwClearEvent'
<user defined> 'NtClearEvent'
<user defined> 'ZwReadVirtualMemory'
<user defined> 'NtReadVirtualMemory'
<user defined> 'NtOpenEvent'
<user defined> 'ZwOpenEvent'
<user defined> 'ZwAdjustPrivilegesToken'
<user defined> 'NtAdjustPrivilegesToken'
<user defined> 'NtDuplicateToken'
<user defined> 'ZwDuplicateToken'
<user defined> 'NtContinue'
<user defined> 'ZwContinue'
<user defined> 'ZwQueryDefaultUILanguage'
<user defined> 'NtQueryDefaultUILanguage'
<user defined> 'ZwQueueApcThread'
<user defined> 'NtQueueApcThread'
<user defined> 'ZwYieldExecution'
<user defined> 'NtYieldExecution'
<user defined> 'ZwAddAtom'
<user defined> 'NtAddAtom'
<user defined> 'NtCreateEvent'
<user defined> 'ZwCreateEvent'
<user defined> 'NtQueryVolumeInformationFile'
<user defined> 'ZwQueryVolumeInformationFile'
<user defined> 'ZwCreateSection'
<user defined> 'NtCreateSection'
<user defined> 'NtFlushBuffersFile'
<user defined> 'ZwFlushBuffersFile'
<user defined> 'ZwApphelpCacheControl'
<user defined> 'NtApphelpCacheControl'
<user defined> 'NtCreateProcessEx'
<user defined> 'ZwCreateProcessEx'
<user defined> 'NtCreateThread'
<user defined> 'ZwCreateThread'
<user defined> 'NtIsProcessInJob'
<user defined> 'ZwIsProcessInJob'
<user defined> 'ZwProtectVirtualMemory'
<user defined> 'NtProtectVirtualMemory'
<user defined> 'NtQuerySection'
<user defined> 'ZwQuerySection'
<user defined> 'NtResumeThread'
<user defined> 'ZwResumeThread'
<user defined> 'ZwTerminateThread'
<user defined> 'NtTerminateThread'
<user defined> 'ZwReadRequestData'
<user defined> 'NtReadRequestData'
<user defined> 'ZwCreateFile'
<user defined> 'NtCreateFile'
<user defined> 'NtQueryEvent'
<user defined> 'ZwQueryEvent'
<user defined> 'NtWriteRequestData'
<user defined> 'ZwWriteRequestData'
<user defined> 'NtOpenDirectoryObject'
<user defined> 'ZwOpenDirectoryObject'
<user defined> 'ZwAccessCheckByTypeAndAuditAlarm'
<user defined> 'NtAccessCheckByTypeAndAuditAlarm'
<user defined> 'ZwQuerySystemTime'
<user defined> 'NtQuerySystemTime'
<user defined> 'ZwWaitForMultipleObjects'
<user defined> 'NtWaitForMultipleObjects'
<user defined> 'ZwSetInformationObject'
<user defined> 'NtSetInformationObject'
<user defined> 'ZwCancelIoFile'
<user defined> 'NtCancelIoFile'
<user defined> 'NtTraceEvent'
<user defined> 'ZwTraceEvent'
<user defined> 'ZwPowerInformation'
<user defined> 'NtPowerInformation'
<user defined> 'ZwSetValueKey'
<user defined> 'NtSetValueKey'
<user defined> 'ZwCancelTimer'
<user defined> 'NtCancelTimer'
<user defined> 'NtSetTimer'
<user defined> 'ZwSetTimer'
<user defined> 'NtAcceptConnectPort'
<user defined> 'ZwAcceptConnectPort'
<user defined> 'NtAccessCheck'
<user defined> 'ZwAccessCheck'
<user defined> 'NtAccessCheckByType'
<user defined> 'ZwAccessCheckByType'
<user defined> 'NtAccessCheckByTypeResultList'
<user defined> 'ZwAccessCheckByTypeResultList'
<user defined> 'NtAccessCheckByTypeResultListAndAuditAlarm'
<user defined> 'ZwAccessCheckByTypeResultListAndAuditAlarm'
<user defined> 'NtAccessCheckByTypeResultListAndAuditAlarmByHandle'
<user defined> 'ZwAccessCheckByTypeResultListAndAuditAlarmByHandle'
<user defined> 'NtAcquireCMFViewOwnership'
<user defined> 'ZwAcquireCMFViewOwnership'
<user defined> 'ZwAddBootEntry'
<user defined> 'NtAddBootEntry'
<user defined> 'NtAddDriverEntry'
<user defined> 'ZwAddDriverEntry'
<user defined> 'NtAdjustGroupsToken'
<user defined> 'ZwAdjustGroupsToken'
<user defined> 'ZwAlertResumeThread'
<user defined> 'NtAlertResumeThread'
<user defined> 'ZwAlertThread'
<user defined> 'NtAlertThread'
<user defined> 'ZwAllocateLocallyUniqueId'
<user defined> 'NtAllocateLocallyUniqueId'
<user defined> 'ZwAllocateUserPhysicalPages'
<user defined> 'NtAllocateUserPhysicalPages'
<user defined> 'ZwAllocateUuids'
<user defined> 'NtAllocateUuids'
<user defined> 'ZwAlpcAcceptConnectPort'
<user defined> 'NtAlpcAcceptConnectPort'
<user defined> 'NtAlpcCancelMessage'
<user defined> 'ZwAlpcCancelMessage'
<user defined> 'NtAlpcConnectPort'
<user defined> 'ZwAlpcConnectPort'
<user defined> 'ZwAlpcCreatePort'
<user defined> 'NtAlpcCreatePort'
<user defined> 'ZwAlpcCreatePortSection'
<user defined> 'NtAlpcCreatePortSection'
<user defined> 'NtAlpcCreateResourceReserve'
<user defined> 'ZwAlpcCreateResourceReserve'
<user defined> 'ZwAlpcCreateSectionView'
<user defined> 'NtAlpcCreateSectionView'
<user defined> 'NtAlpcCreateSecurityContext'
<user defined> 'ZwAlpcCreateSecurityContext'
<user defined> 'ZwAlpcDeletePortSection'
<user defined> 'NtAlpcDeletePortSection'
<user defined> 'ZwAlpcDeleteResourceReserve'
<user defined> 'NtAlpcDeleteResourceReserve'
<user defined> 'ZwAlpcDeleteSectionView'
<user defined> 'NtAlpcDeleteSectionView'
<user defined> 'NtAlpcDeleteSecurityContext'
<user defined> 'ZwAlpcDeleteSecurityContext'
<user defined> 'ZwAlpcDisconnectPort'
<user defined> 'NtAlpcDisconnectPort'
<user defined> 'NtAlpcImpersonateClientOfPort'
<user defined> 'ZwAlpcImpersonateClientOfPort'
<user defined> 'NtAlpcOpenSenderProcess'
<user defined> 'ZwAlpcOpenSenderProcess'
<user defined> 'NtAlpcOpenSenderThread'
<user defined> 'ZwAlpcOpenSenderThread'
<user defined> 'NtAlpcQueryInformation'
<user defined> 'ZwAlpcQueryInformation'
<user defined> 'NtAlpcQueryInformationMessage'
<user defined> 'ZwAlpcQueryInformationMessage'
<user defined> 'ZwAlpcRevokeSecurityContext'
<user defined> 'NtAlpcRevokeSecurityContext'
<user defined> 'ZwAlpcSendWaitReceivePort'
<user defined> 'NtAlpcSendWaitReceivePort'
<user defined> 'NtAlpcSetInformation'
<user defined> 'ZwAlpcSetInformation'
<user defined> 'ZwAreMappedFilesTheSame'
<user defined> 'NtAreMappedFilesTheSame'
<user defined> 'ZwAssignProcessToJobObject'
<user defined> 'NtAssignProcessToJobObject'
<user defined> 'NtCancelDeviceWakeupRequest'
<user defined> 'ZwCancelDeviceWakeupRequest'
<user defined> 'ZwCancelIoFileEx'
<user defined> 'NtCancelIoFileEx'
<user defined> 'ZwCancelSynchronousIoFile'
<user defined> 'NtCancelSynchronousIoFile'
<user defined> 'NtCommitComplete'
<user defined> 'ZwCommitComplete'
<user defined> 'ZwCommitEnlistment'
<user defined> 'NtCommitEnlistment'
<user defined> 'NtCommitTransaction'
<user defined> 'ZwCommitTransaction'
<user defined> 'ZwCompactKeys'
<user defined> 'NtCompactKeys'
<user defined> 'NtCompareTokens'
<user defined> 'ZwCompareTokens'
<user defined> 'ZwCompleteConnectPort'
<user defined> 'NtCompleteConnectPort'
<user defined> 'NtCompressKey'
<user defined> 'ZwCompressKey'
<user defined> 'NtConnectPort'
<user defined> 'ZwConnectPort'
<user defined> 'ZwCreateDebugObject'
<user defined> 'NtCreateDebugObject'
<user defined> 'ZwCreateDirectoryObject'
<user defined> 'NtCreateDirectoryObject'
<user defined> 'ZwCreateEnlistment'
<user defined> 'NtCreateEnlistment'
<user defined> 'NtCreateEventPair'
<user defined> 'ZwCreateEventPair'
<user defined> 'NtCreateIoCompletion'
<user defined> 'ZwCreateIoCompletion'
<user defined> 'ZwCreateJobObject'
<user defined> 'NtCreateJobObject'
<user defined> 'NtCreateJobSet'
<user defined> 'ZwCreateJobSet'
<user defined> 'NtCreateKeyTransacted'
<user defined> 'ZwCreateKeyTransacted'
<user defined> 'ZwCreateKeyedEvent'
<user defined> 'NtCreateKeyedEvent'
<user defined> 'ZwCreateMailslotFile'
<user defined> 'NtCreateMailslotFile'
<user defined> 'ZwCreateMutant'
<user defined> 'NtCreateMutant'
<user defined> 'NtCreateNamedPipeFile'
<user defined> 'ZwCreateNamedPipeFile'
<user defined> 'ZwCreatePagingFile'
<user defined> 'NtCreatePagingFile'
<user defined> 'ZwCreatePort'
<user defined> 'NtCreatePort'
<user defined> 'ZwCreatePrivateNamespace'
<user defined> 'NtCreatePrivateNamespace'
<user defined> 'ZwCreateProcess'
<user defined> 'NtCreateProcess'
<user defined> 'ZwCreateProfile'
<user defined> 'NtCreateProfile'
<user defined> 'NtCreateResourceManager'
<user defined> 'ZwCreateResourceManager'
<user defined> 'NtCreateSemaphore'
<user defined> 'ZwCreateSemaphore'
<user defined> 'ZwCreateSymbolicLinkObject'
<user defined> 'NtCreateSymbolicLinkObject'
<user defined> 'ZwCreateThreadEx'
<user defined> 'NtCreateThreadEx'
<user defined> 'NtCreateTimer'
<user defined> 'ZwCreateTimer'
<user defined> 'NtCreateToken'
<user defined> 'ZwCreateToken'
<user defined> 'ZwCreateTransaction'
<user defined> 'NtCreateTransaction'
<user defined> 'NtCreateTransactionManager'
<user defined> 'ZwCreateTransactionManager'
<user defined> 'ZwCreateUserProcess'
<user defined> 'NtCreateUserProcess'
<user defined> 'NtCreateWaitablePort'
<user defined> 'ZwCreateWaitablePort'
<user defined> 'NtCreateWorkerFactory'
<user defined> 'ZwCreateWorkerFactory'
<user defined> 'NtDebugActiveProcess'
<user defined> 'ZwDebugActiveProcess'
<user defined> 'ZwDebugContinue'
<user defined> 'NtDebugContinue'
<user defined> 'NtDeleteAtom'
<user defined> 'ZwDeleteAtom'
<user defined> 'ZwDeleteBootEntry'
<user defined> 'NtDeleteBootEntry'
<user defined> 'ZwDeleteDriverEntry'
<user defined> 'NtDeleteDriverEntry'
<user defined> 'NtDeleteFile'
<user defined> 'ZwDeleteFile'
<user defined> 'ZwDeleteKey'
<user defined> 'NtDeleteKey'
<user defined> 'NtDeleteObjectAuditAlarm'
<user defined> 'ZwDeleteObjectAuditAlarm'
<user defined> 'ZwDeletePrivateNamespace'
<user defined> 'NtDeletePrivateNamespace'
<user defined> 'NtDeleteValueKey'
<user defined> 'ZwDeleteValueKey'
<user defined> 'ZwDisplayString'
<user defined> 'NtDisplayString'
<user defined> 'ZwEnumerateBootEntries'
<user defined> 'NtEnumerateBootEntries'
<user defined> 'NtEnumerateDriverEntries'
<user defined> 'ZwEnumerateDriverEntries'
<user defined> 'ZwEnumerateSystemEnvironmentValuesEx'
<user defined> 'NtEnumerateSystemEnvironmentValuesEx'
<user defined> 'ZwEnumerateTransactionObject'
<user defined> 'NtEnumerateTransactionObject'
<user defined> 'NtExtendSection'
<user defined> 'ZwExtendSection'
<user defined> 'NtFilterToken'
<user defined> 'ZwFilterToken'
<user defined> 'NtFlushInstallUILanguage'
<user defined> 'ZwFlushInstallUILanguage'
<user defined> 'NtFlushInstructionCache'
<user defined> 'ZwFlushInstructionCache'
<user defined> 'NtFlushKey'
<user defined> 'ZwFlushKey'
<user defined> 'ZwFlushProcessWriteBuffers'
<user defined> 'NtFlushProcessWriteBuffers'
<user defined> 'ZwFlushVirtualMemory'
<user defined> 'NtFlushVirtualMemory'
<user defined> 'NtFlushWriteBuffer'
<user defined> 'ZwFlushWriteBuffer'
<user defined> 'ZwFreeUserPhysicalPages'
<user defined> 'NtFreeUserPhysicalPages'
<user defined> 'NtFreezeRegistry'
<user defined> 'ZwFreezeRegistry'
<user defined> 'NtFreezeTransactions'
<user defined> 'ZwFreezeTransactions'
<user defined> 'ZwGetContextThread'
<user defined> 'NtGetContextThread'
<user defined> 'ZwGetCurrentProcessorNumber'
<user defined> 'RtlGetCurrentProcessorNumber'
<user defined> 'NtGetCurrentProcessorNumber'
<user defined> 'NtGetDevicePowerState'
<user defined> 'ZwGetDevicePowerState'
<user defined> 'ZwGetMUIRegistryInfo'
<user defined> 'NtGetMUIRegistryInfo'
<user defined> 'ZwGetNextProcess'
<user defined> 'NtGetNextProcess'
<user defined> 'NtGetNextThread'
<user defined> 'ZwGetNextThread'
<user defined> 'ZwGetNlsSectionPtr'
<user defined> 'NtGetNlsSectionPtr'
<user defined> 'NtGetNotificationResourceManager'
<user defined> 'ZwGetNotificationResourceManager'
<user defined> 'NtGetPlugPlayEvent'
<user defined> 'ZwGetPlugPlayEvent'
<user defined> 'ZwGetWriteWatch'
<user defined> 'NtGetWriteWatch'
<user defined> 'ZwImpersonateAnonymousToken'
<user defined> 'NtImpersonateAnonymousToken'
<user defined> 'ZwImpersonateThread'
<user defined> 'NtImpersonateThread'
<user defined> 'ZwInitializeNlsFiles'
<user defined> 'NtInitializeNlsFiles'
<user defined> 'ZwInitializeRegistry'
<user defined> 'NtInitializeRegistry'
<user defined> 'ZwInitiatePowerAction'
<user defined> 'NtInitiatePowerAction'
<user defined> 'NtIsSystemResumeAutomatic'
<user defined> 'ZwIsSystemResumeAutomatic'
<user defined> 'NtIsUILanguageComitted'
<user defined> 'ZwIsUILanguageComitted'
<user defined> 'NtListenPort'
<user defined> 'ZwListenPort'
<user defined> 'ZwLoadDriver'
<user defined> 'NtLoadDriver'
<user defined> 'NtLoadKey'
<user defined> 'ZwLoadKey'
<user defined> 'ZwLoadKey2'
<user defined> 'NtLoadKey2'
<user defined> 'ZwLoadKeyEx'
<user defined> 'NtLoadKeyEx'
<user defined> 'NtLockFile'
<user defined> 'ZwLockFile'
<user defined> 'NtLockProductActivationKeys'
<user defined> 'ZwLockProductActivationKeys'
<user defined> 'NtLockRegistryKey'
<user defined> 'ZwLockRegistryKey'
<user defined> 'ZwLockVirtualMemory'
<user defined> 'NtLockVirtualMemory'
<user defined> 'ZwMakePermanentObject'
<user defined> 'NtMakePermanentObject'
<user defined> 'NtMakeTemporaryObject'
<user defined> 'ZwMakeTemporaryObject'
<user defined> 'ZwMapCMFModule'
<user defined> 'NtMapCMFModule'
<user defined> 'ZwMapUserPhysicalPages'
<user defined> 'NtMapUserPhysicalPages'
<user defined> 'NtModifyBootEntry'
<user defined> 'ZwModifyBootEntry'
<user defined> 'ZwModifyDriverEntry'
<user defined> 'NtModifyDriverEntry'
<user defined> 'NtNotifyChangeDirectoryFile'
<user defined> 'ZwNotifyChangeDirectoryFile'
<user defined> 'NtNotifyChangeKey'
<user defined> 'ZwNotifyChangeKey'
<user defined> 'NtNotifyChangeMultipleKeys'
<user defined> 'ZwNotifyChangeMultipleKeys'
<user defined> 'ZwOpenEnlistment'
<user defined> 'NtOpenEnlistment'
<user defined> 'ZwOpenEventPair'
<user defined> 'NtOpenEventPair'
<user defined> 'ZwOpenIoCompletion'
<user defined> 'NtOpenIoCompletion'
<user defined> 'ZwOpenJobObject'
<user defined> 'NtOpenJobObject'
<user defined> 'NtOpenKeyTransacted'
<user defined> 'ZwOpenKeyTransacted'
<user defined> 'ZwOpenKeyedEvent'
<user defined> 'NtOpenKeyedEvent'
<user defined> 'NtOpenMutant'
<user defined> 'ZwOpenMutant'
<user defined> 'ZwOpenObjectAuditAlarm'
<user defined> 'NtOpenObjectAuditAlarm'
<user defined> 'NtOpenPrivateNamespace'
<user defined> 'ZwOpenPrivateNamespace'
<user defined> 'NtOpenProcessToken'
<user defined> 'ZwOpenProcessToken'
<user defined> 'NtOpenResourceManager'
<user defined> 'ZwOpenResourceManager'
<user defined> 'NtOpenSemaphore'
<user defined> 'ZwOpenSemaphore'
<user defined> 'NtOpenSession'
<user defined> 'ZwOpenSession'
<user defined> 'ZwOpenSymbolicLinkObject'
<user defined> 'NtOpenSymbolicLinkObject'
<user defined> 'ZwOpenThread'
<user defined> 'NtOpenThread'
<user defined> 'NtOpenTimer'
<user defined> 'ZwOpenTimer'
<user defined> 'NtOpenTransaction'
<user defined> 'ZwOpenTransaction'
<user defined> 'ZwOpenTransactionManager'
<user defined> 'NtOpenTransactionManager'
<user defined> 'NtPlugPlayControl'
<user defined> 'ZwPlugPlayControl'
<user defined> 'NtPrePrepareComplete'
<user defined> 'ZwPrePrepareComplete'
<user defined> 'ZwPrePrepareEnlistment'
<user defined> 'NtPrePrepareEnlistment'
<user defined> 'NtPrepareComplete'
<user defined> 'ZwPrepareComplete'
<user defined> 'NtPrepareEnlistment'
<user defined> 'ZwPrepareEnlistment'
<user defined> 'NtPrivilegeCheck'
<user defined> 'ZwPrivilegeCheck'
<user defined> 'NtPrivilegeObjectAuditAlarm'
<user defined> 'ZwPrivilegeObjectAuditAlarm'
<user defined> 'ZwPrivilegedServiceAuditAlarm'
<user defined> 'NtPrivilegedServiceAuditAlarm'
<user defined> 'ZwPropagationComplete'
<user defined> 'NtPropagationComplete'
<user defined> 'NtPropagationFailed'
<user defined> 'ZwPropagationFailed'
<user defined> 'NtPulseEvent'
<user defined> 'ZwPulseEvent'
<user defined> 'ZwQueryBootEntryOrder'
<user defined> 'NtQueryBootEntryOrder'
<user defined> 'NtQueryBootOptions'
<user defined> 'ZwQueryBootOptions'
<user defined> 'NtQueryDebugFilterState'
<user defined> 'ZwQueryDebugFilterState'
<user defined> 'ZwQueryDirectoryObject'
<user defined> 'NtQueryDirectoryObject'
<user defined> 'NtQueryDriverEntryOrder'
<user defined> 'ZwQueryDriverEntryOrder'
<user defined> 'NtQueryEaFile'
<user defined> 'ZwQueryEaFile'
<user defined> 'NtQueryFullAttributesFile'
<user defined> 'ZwQueryFullAttributesFile'
<user defined> 'ZwQueryInformationAtom'
<user defined> 'NtQueryInformationAtom'
<user defined> 'ZwQueryInformationEnlistment'
<user defined> 'NtQueryInformationEnlistment'
<user defined> 'NtQueryInformationJobObject'
<user defined> 'ZwQueryInformationJobObject'
<user defined> 'ZwQueryInformationPort'
<user defined> 'NtQueryInformationPort'
<user defined> 'NtQueryInformationResourceManager'
<user defined> 'ZwQueryInformationResourceManager'
<user defined> 'NtQueryInformationTransaction'
<user defined> 'ZwQueryInformationTransaction'
<user defined> 'ZwQueryInformationTransactionManager'
<user defined> 'NtQueryInformationTransactionManager'
<user defined> 'NtQueryInformationWorkerFactory'
<user defined> 'ZwQueryInformationWorkerFactory'
<user defined> 'ZwQueryInstallUILanguage'
<user defined> 'NtQueryInstallUILanguage'
<user defined> 'NtQueryIntervalProfile'
<user defined> 'ZwQueryIntervalProfile'
<user defined> 'NtQueryIoCompletion'
<user defined> 'ZwQueryIoCompletion'
<user defined> 'NtQueryLicenseValue'
<user defined> 'ZwQueryLicenseValue'
<user defined> 'NtQueryMultipleValueKey'
<user defined> 'ZwQueryMultipleValueKey'
<user defined> 'NtQueryMutant'
<user defined> 'ZwQueryMutant'
<user defined> 'ZwQueryOpenSubKeys'
<user defined> 'NtQueryOpenSubKeys'
<user defined> 'ZwQueryOpenSubKeysEx'
<user defined> 'NtQueryOpenSubKeysEx'
<user defined> 'NtQueryPortInformationProcess'
<user defined> 'ZwQueryPortInformationProcess'
<user defined> 'ZwQueryQuotaInformationFile'
<user defined> 'NtQueryQuotaInformationFile'
<user defined> 'NtQuerySecurityObject'
<user defined> 'ZwQuerySecurityObject'
<user defined> 'NtQuerySemaphore'
<user defined> 'ZwQuerySemaphore'
<user defined> 'ZwQuerySymbolicLinkObject'
<user defined> 'NtQuerySymbolicLinkObject'
<user defined> 'NtQuerySystemEnvironmentValue'
<user defined> 'ZwQuerySystemEnvironmentValue'
<user defined> 'ZwQuerySystemEnvironmentValueEx'
<user defined> 'NtQuerySystemEnvironmentValueEx'
<user defined> 'NtQueryTimerResolution'
<user defined> 'ZwQueryTimerResolution'
<user defined> 'NtRaiseException'
<user defined> 'ZwRaiseException'
<user defined> 'NtRaiseHardError'
<user defined> 'ZwRaiseHardError'
<user defined> 'NtReadOnlyEnlistment'
<user defined> 'ZwReadOnlyEnlistment'
<user defined> 'ZwRecoverEnlistment'
<user defined> 'NtRecoverEnlistment'
<user defined> 'ZwRecoverResourceManager'
<user defined> 'NtRecoverResourceManager'
<user defined> 'ZwRecoverTransactionManager'
<user defined> 'NtRecoverTransactionManager'
<user defined> 'ZwRegisterProtocolAddressInformation'
<user defined> 'NtRegisterProtocolAddressInformation'
<user defined> 'ZwRegisterThreadTerminatePort'
<user defined> 'NtRegisterThreadTerminatePort'
<user defined> 'ZwReleaseCMFViewOwnership'
<user defined> 'NtReleaseCMFViewOwnership'
<user defined> 'NtReleaseKeyedEvent'
<user defined> 'ZwReleaseKeyedEvent'
<user defined> 'ZwReleaseWorkerFactoryWorker'
<user defined> 'NtReleaseWorkerFactoryWorker'
<user defined> 'ZwRemoveIoCompletionEx'
<user defined> 'NtRemoveIoCompletionEx'
<user defined> 'NtRemoveProcessDebug'
<user defined> 'ZwRemoveProcessDebug'
<user defined> 'NtRenameKey'
<user defined> 'ZwRenameKey'
<user defined> 'NtRenameTransactionManager'
<user defined> 'ZwRenameTransactionManager'
<user defined> 'NtReplaceKey'
<user defined> 'ZwReplaceKey'
<user defined> 'ZwReplacePartitionUnit'
<user defined> 'NtReplacePartitionUnit'
<user defined> 'NtReplyWaitReplyPort'
<user defined> 'ZwReplyWaitReplyPort'
<user defined> 'ZwRequestDeviceWakeup'
<user defined> 'NtRequestDeviceWakeup'
<user defined> 'NtRequestPort'
<user defined> 'ZwRequestPort'
<user defined> 'NtRequestWakeupLatency'
<user defined> 'ZwRequestWakeupLatency'
<user defined> 'ZwResetEvent'
<user defined> 'NtResetEvent'
<user defined> 'NtResetWriteWatch'
<user defined> 'ZwResetWriteWatch'
<user defined> 'ZwRestoreKey'
<user defined> 'NtRestoreKey'
<user defined> 'NtResumeProcess'
<user defined> 'ZwResumeProcess'
<user defined> 'ZwRollbackComplete'
<user defined> 'NtRollbackComplete'
<user defined> 'NtRollbackEnlistment'
<user defined> 'ZwRollbackEnlistment'
<user defined> 'NtRollbackTransaction'
<user defined> 'ZwRollbackTransaction'
<user defined> 'NtRollforwardTransactionManager'
<user defined> 'ZwRollforwardTransactionManager'
<user defined> 'ZwSaveKey'
<user defined> 'NtSaveKey'
<user defined> 'NtSaveKeyEx'
<user defined> 'ZwSaveKeyEx'
<user defined> 'NtSaveMergedKeys'
<user defined> 'ZwSaveMergedKeys'
<user defined> 'NtSecureConnectPort'
<user defined> 'ZwSecureConnectPort'
<user defined> 'ZwSetBootEntryOrder'
<user defined> 'NtSetBootEntryOrder'
<user defined> 'NtSetBootOptions'
<user defined> 'ZwSetBootOptions'
<user defined> 'NtSetContextThread'
<user defined> 'ZwSetContextThread'
<user defined> 'NtSetDebugFilterState'
<user defined> 'ZwSetDebugFilterState'
<user defined> 'NtSetDefaultHardErrorPort'
<user defined> 'ZwSetDefaultHardErrorPort'
<user defined> 'ZwSetDefaultLocale'
<user defined> 'NtSetDefaultLocale'
<user defined> 'ZwSetDefaultUILanguage'
<user defined> 'NtSetDefaultUILanguage'
<user defined> 'NtSetDriverEntryOrder'
<user defined> 'ZwSetDriverEntryOrder'
<user defined> 'NtSetEaFile'
<user defined> 'ZwSetEaFile'
<user defined> 'NtSetHighEventPair'
<user defined> 'ZwSetHighEventPair'
<user defined> 'ZwSetHighWaitLowEventPair'
<user defined> 'NtSetHighWaitLowEventPair'
<user defined> 'ZwSetInformationDebugObject'
<user defined> 'NtSetInformationDebugObject'
<user defined> 'NtSetInformationEnlistment'
<user defined> 'ZwSetInformationEnlistment'
<user defined> 'ZwSetInformationJobObject'
<user defined> 'NtSetInformationJobObject'
<user defined> 'ZwSetInformationKey'
<user defined> 'NtSetInformationKey'
<user defined> 'NtSetInformationResourceManager'
<user defined> 'ZwSetInformationResourceManager'
<user defined> 'NtSetInformationToken'
<user defined> 'ZwSetInformationToken'
<user defined> 'NtSetInformationTransaction'
<user defined> 'ZwSetInformationTransaction'
<user defined> 'ZwSetInformationTransactionManager'
<user defined> 'NtSetInformationTransactionManager'
<user defined> 'ZwSetInformationWorkerFactory'
<user defined> 'NtSetInformationWorkerFactory'
<user defined> 'ZwSetIntervalProfile'
<user defined> 'NtSetIntervalProfile'
<user defined> 'NtSetIoCompletion'
<user defined> 'ZwSetIoCompletion'
<user defined> 'ZwSetLdtEntries'
<user defined> 'NtSetLdtEntries'
<user defined> 'NtSetLowEventPair'
<user defined> 'ZwSetLowEventPair'
<user defined> 'ZwSetLowWaitHighEventPair'
<user defined> 'NtSetLowWaitHighEventPair'
<user defined> 'NtSetQuotaInformationFile'
<user defined> 'ZwSetQuotaInformationFile'
<user defined> 'ZwSetSecurityObject'
<user defined> 'NtSetSecurityObject'
<user defined> 'NtSetSystemEnvironmentValue'
<user defined> 'ZwSetSystemEnvironmentValue'
<user defined> 'ZwSetSystemEnvironmentValueEx'
<user defined> 'NtSetSystemEnvironmentValueEx'
<user defined> 'ZwSetSystemInformation'
<user defined> 'NtSetSystemInformation'
<user defined> 'NtSetSystemPowerState'
<user defined> 'ZwSetSystemPowerState'
<user defined> 'NtSetSystemTime'
<user defined> 'ZwSetSystemTime'
<user defined> 'ZwSetThreadExecutionState'
<user defined> 'NtSetThreadExecutionState'
<user defined> 'NtSetTimerResolution'
<user defined> 'ZwSetTimerResolution'
<user defined> 'ZwSetUuidSeed'
<user defined> 'NtSetUuidSeed'
<user defined> 'NtSetVolumeInformationFile'
<user defined> 'ZwSetVolumeInformationFile'
<user defined> 'ZwShutdownSystem'
<user defined> 'NtShutdownSystem'
<user defined> 'NtShutdownWorkerFactory'
<user defined> 'ZwShutdownWorkerFactory'
<user defined> 'ZwSignalAndWaitForSingleObject'
<user defined> 'NtSignalAndWaitForSingleObject'
<user defined> 'ZwSinglePhaseReject'
<user defined> 'NtSinglePhaseReject'
<user defined> 'NtStartProfile'
<user defined> 'ZwStartProfile'
<user defined> 'ZwStopProfile'
<user defined> 'NtStopProfile'
<user defined> 'NtSuspendProcess'
<user defined> 'ZwSuspendProcess'
<user defined> 'ZwSuspendThread'
<user defined> 'NtSuspendThread'
<user defined> 'NtSystemDebugControl'
<user defined> 'ZwSystemDebugControl'
<user defined> 'ZwTerminateJobObject'
<user defined> 'NtTerminateJobObject'
<user defined> 'NtTestAlert'
<user defined> 'ZwTestAlert'
<user defined> 'NtThawRegistry'
<user defined> 'ZwThawRegistry'
<user defined> 'NtThawTransactions'
<user defined> 'ZwThawTransactions'
<user defined> 'ZwTraceControl'
<user defined> 'NtTraceControl'
<user defined> 'NtTranslateFilePath'
<user defined> 'ZwTranslateFilePath'
<user defined> 'NtUnloadDriver'
<user defined> 'ZwUnloadDriver'
<user defined> 'ZwUnloadKey'
<user defined> 'NtUnloadKey'
<user defined> 'NtUnloadKey2'
<user defined> 'ZwUnloadKey2'
<user defined> 'NtUnloadKeyEx'
<user defined> 'ZwUnloadKeyEx'
<user defined> 'NtUnlockFile'
<user defined> 'ZwUnlockFile'
<user defined> 'NtUnlockVirtualMemory'
<user defined> 'ZwUnlockVirtualMemory'
<user defined> 'NtVdmControl'
<user defined> 'ZwVdmControl'
<user defined> 'NtWaitForDebugEvent'
<user defined> 'ZwWaitForDebugEvent'
<user defined> 'NtWaitForKeyedEvent'
<user defined> 'ZwWaitForKeyedEvent'
<user defined> 'ZwWaitForWorkViaWorkerFactory'
<user defined> 'NtWaitForWorkViaWorkerFactory'
<user defined> 'NtWaitHighEventPair'
<user defined> 'ZwWaitHighEventPair'
<user defined> 'NtWaitLowEventPair'
<user defined> 'ZwWaitLowEventPair'
<user defined> 'ZwWorkerFactoryWorkerReady'
<user defined> 'NtWorkerFactoryWorkerReady'
<user defined> 'ZwWow64CsrClientConnectToServer'
<user defined> 'NtWow64CsrClientConnectToServer'
<user defined> 'NtWow64CsrIdentifyAlertableThread'
<user defined> 'ZwWow64CsrIdentifyAlertableThread'
<user defined> 'ZwWow64CsrClientCallServer'
<user defined> 'NtWow64CsrClientCallServer'
<user defined> 'NtWow64CsrAllocateCaptureBuffer'
<user defined> 'ZwWow64CsrAllocateCaptureBuffer'
<user defined> 'NtWow64CsrFreeCaptureBuffer'
<user defined> 'ZwWow64CsrFreeCaptureBuffer'
<user defined> 'NtWow64CsrAllocateMessagePointer'
<user defined> 'ZwWow64CsrAllocateMessagePointer'
<user defined> 'ZwWow64CsrCaptureMessageBuffer'
<user defined> 'NtWow64CsrCaptureMessageBuffer'
<user defined> 'NtWow64CsrCaptureMessageString'
<user defined> 'ZwWow64CsrCaptureMessageString'
<user defined> 'ZwWow64CsrGetProcessId'
<user defined> 'NtWow64CsrGetProcessId'
<user defined> 'NtWow64CsrVerifyRegion'
<user defined> 'ZwWow64CsrVerifyRegion'
<user defined> 'ZwWow64DebuggerCall'
<user defined> 'NtWow64DebuggerCall'
<user defined> 'NtWow64GetNativeSystemInformation'
<user defined> 'ZwWow64GetNativeSystemInformation'
<user defined> 'RtlGetNativeSystemInformation'
<user defined> 'ZwWow64QueryInformationProcess64'
<user defined> 'NtWow64QueryInformationProcess64'
<user defined> 'ZwWow64ReadVirtualMemory64'
<user defined> 'NtWow64ReadVirtualMemory64'
<user defined> 'NtWow64WriteVirtualMemory64'
<user defined> 'ZwWow64WriteVirtualMemory64'
<user defined> 'ZwWow64QueryVirtualMemory64'
<user defined> 'NtWow64QueryVirtualMemory64'
<user defined> 'ZwWow64CallFunction64'
<user defined> 'NtWow64CallFunction64'
<user defined> 'pow' = FF8B1DEB
<user defined> '_CIpow'
<user defined> 'KiUserApcDispatcher'
<user defined> 'KiUserCallbackDispatcher'
<user defined> 'KiUserExceptionDispatcher'
<user defined> 'KiRaiseUserExceptionDispatcher'
<user defined> 'RtlUserThreadStart'
<user defined> 'KiFastSystemCall' = 340FD48B
<user defined> 'KiFastSystemCallRet'
<user defined> 'KiIntSystemCall' = 90C32ECD0824548D
<user defined> 'RtlRaiseException'
<user defined> 'RtlRaiseStatus'
<user defined> 'RtlCaptureContext'
<user defined> '_alloca_probe_16'
<user defined> '_alloca_probe_8'
<user defined> '_chkstk'
<user defined> '_alloca_probe'
<user defined> 'cos' = FF8B18EB
<user defined> '_CIcos'
<user defined> 'log' = FF8B18EB
<user defined> '_CIlog'
<user defined> 'strstr'
<user defined> 'strchr'
<user defined> 'RtlEnterCriticalSection'
<user defined> 'RtlLeaveCriticalSection'
<user defined> 'RtlFreeHeap'
<user defined> 'RtlGetLastWin32Error'
<user defined> 'RtlActivateActivationContextUnsafeFast'
<user defined> 'RtlDeactivateActivationContextUnsafeFast'
<user defined> 'RtlTryEnterCriticalSection'
<user defined> 'RtlFreeUnicodeString'
<user defined> 'RtlFreeAnsiString'
<user defined> 'RtlDeleteBoundaryDescriptor'
<user defined> 'LdrUnlockLoaderLock'
<user defined> 'LdrLockLoaderLock'
<user defined> 'RtlAcquirePebLock'
<user defined> 'RtlReleasePebLock'
<user defined> 'RtlImageNtHeader'
<user defined> 'RtlImageNtHeaderEx'
<user defined> 'wcsrchr'
<user defined> 'wcschr'
<user defined> 'RtlUnicodeToMultiByteN'
<user defined> 'RtlUnicodeStringToAnsiString'
<user defined> 'RtlNtStatusToDosErrorNoTeb'
<user defined> 'RtlNtStatusToDosError'
<user defined> 'RtlMultiByteToUnicodeN'
<user defined> 'RtlAnsiStringToUnicodeString'
<user defined> 'RtlInitAnsiStringEx'
<user defined> 'RtlInitUnicodeStringEx'
<user defined> 'RtlInterlockedPopEntrySList'
<user defined> 'RtlLogStackBackTrace'
<user defined> 'RtlInitializeCriticalSection'
<user defined> 'RtlGetNtGlobalFlags'
<user defined> 'RtlUnicodeToMultiByteSize'
<user defined> 'RtlEqualUnicodeString'
<user defined> 'RtlUpcaseUnicodeChar'
<user defined> 'RtlQueryEnvironmentVariable_U'
<user defined> 'RtlDeleteCriticalSection'
<user defined> 'RtlQueryDepthSList'
<user defined> 'RtlInterlockedPushEntrySList'
<user defined> 'RtlAddRefActivationContext'
<user defined> 'RtlInitializeSListHead'
<user defined> 'RtlSizeHeap'
<user defined> 'RtlAcquireSRWLockExclusive'
<user defined> 'RtlReleaseSRWLockExclusive'
<user defined> '_wcsicmp'
<user defined> 'LdrGetProcedureAddress'
<user defined> 'LdrGetProcedureAddressEx'
<user defined> 'LdrAccessResource'
<user defined> 'RtlAddressInSectionTable'
<user defined> 'RtlImageRvaToSection'
<user defined> 'LdrFindResource_U'
<user defined> 'LdrLoadAlternateResourceModuleEx'
<user defined> 'RtlTimeToTimeFields'
<user defined> 'RtlReleaseRelativeName'
<user defined> 'RtlDetermineDosPathNameType_U'
<user defined> 'RtlDosPathNameToNtPathName_U'
<user defined> 'RtlDosPathNameToRelativeNtPathName_U'
<user defined> 'RtlGetFullPathName_U'
<user defined> 'RtlIsDosDeviceName_U'
<user defined> 'RtlDosPathNameToRelativeNtPathName_U_WithStatus'
<user defined> 'RtlAppendUnicodeToString'
<user defined> '_strcmpi'
<user defined> '_stricmp'
<user defined> 'LdrLoadDll'
<user defined> 'RtlGetFullPathName_UstrEx'
<user defined> 'RtlValidSid'
<user defined> 'RtlAppendUnicodeStringToString'
<user defined> 'RtlCopyUnicodeString'
<user defined> 'RtlConvertSidToUnicodeString'
<user defined> 'RtlFormatCurrentUserKeyPath'
<user defined> 'RtlCopyLuid'
<user defined> 'RtlQueryInformationActivationContext'
<user defined> 'RtlGetCurrentDirectory_U'
<user defined> 'wcsncmp'
<user defined> 'RtlInitializeSid'
<user defined> 'RtlSubAuthoritySid'
<user defined> 'RtlEqualSid'
<user defined> 'RtlSetThreadErrorMode'
<user defined> 'RtlTimeFieldsToTime'
<user defined> 'LdrInitializeThunk'
<user defined> 'RtlAllocateActivationContextStack'
<user defined> 'bsearch'
<user defined> 'RtlHashUnicodeString'
<user defined> 'RtlFindActivationContextSectionString'
<user defined> 'RtlDosApplyFileIsolationRedirection_Ustr'
<user defined> 'RtlFindCharInUnicodeString'
<user defined> 'RtlValidateUnicodeString'
<user defined> 'LdrGetDllHandle'
<user defined> 'LdrGetDllHandleEx'
<user defined> 'LdrUnloadDll'
<user defined> 'LdrUnloadAlternateResourceModule'
<user defined> 'LdrUnloadAlternateResourceModuleEx'
<user defined> 'RtlMultiAppendUnicodeStringBuffer'
<user defined> 'RtlEncodePointer'
<user defined> 'RtlDecodePointer'
<user defined> 'RtlInitializeBitMap'
<user defined> 'RtlSetEnvironmentVariable'
<user defined> 'RtlDoesFileExists_U'
<user defined> 'RtlGetActiveActivationContext'
<user defined> 'RtlInitializeSRWLock'
<user defined> 'RtlInitializeConditionVariable'
<user defined> 'RtlRunOnceInitialize'
<user defined> 'RtlOpenCurrentUser'
<user defined> 'RtlLCIDToCultureName'
<user defined> 'RtlLcidToLocaleName'
<user defined> 'RtlGetNtProductType'
<user defined> 'RtlGetVersion'
<user defined> 'RtlFindClearBitsAndSet'
<user defined> 'RtlSetBits'
<user defined> 'RtlRandomEx'
<user defined> 'RtlCreateHeap'
<user defined> 'LdrFindResourceDirectory_U'
<user defined> '_strnicmp'
<user defined> 'strncmp'
<user defined> 'LdrOpenImageFileOptionsKey'
<user defined> 'RtlAppendPathElement'
<user defined> 'LdrDisableThreadCalloutsForDll'
<user defined> 'RtlGetThreadPreferredUILanguages'
<user defined> 'LdrFindEntryForAddress'
<user defined> 'RtlInitializeHandleTable'
<user defined> 'LdrFindResourceEx_U'
<user defined> 'LdrEnumerateLoadedModules'
<user defined> 'RtlInitializeResource'
<user defined> 'RtlIntegerToChar'
<user defined> 'RtlIntegerToUnicodeString'
<user defined> 'RtlUnicodeStringToInteger'
<user defined> 'wcsncpy'
<user defined> 'RtlUnwind'
<user defined> 'RtlpEnsureBufferSize'
<user defined> 'RtlSetCurrentDirectory_U'
<user defined> 'RtlUnicodeToOemN'
<user defined> 'RtlInterlockedFlushSList'
<user defined> 'RtlDllShutdownInProgress'
<user defined> 'RtlCreateUnicodeStringFromAsciiz'
<user defined> 'RtlGetLongestNtPathLength'
<user defined> 'RtlDeleteAtomFromAtomTable'
<user defined> 'RtlpUnWaitCriticalSection'
<user defined> 'RtlReleaseActivationContext'
<user defined> 'RtlActivateActivationContext'
<user defined> 'RtlActivateActivationContextEx'
<user defined> 'RtlDeactivateActivationContext'
<user defined> 'RtlDosSearchPath_Ustr'
<user defined> 'RtlPcToFileHeader'
<user defined> '_snwprintf'
<user defined> 'RtlpQueryDefaultUILanguage'
<user defined> 'DbgPrintEx'
<user defined> 'RtlReleaseResource'
<user defined> 'RtlAcquireResourceShared'
<user defined> 'RtlIsTextUnicode'
<user defined> 'RtlEqualString'
<user defined> 'RtlCopySid'
<user defined> 'RtlLengthSid'
<user defined> 'RtlSetCriticalSectionSpinCount'
<user defined> '_wcsnicmp'
<user defined> 'RtlIsThreadWithinLoaderCallout'
<user defined> 'RtlPrefixUnicodeString'
<user defined> 'RtlExpandEnvironmentStrings'
<user defined> 'RtlAnsiCharToUnicodeChar'
<user defined> 'RtlFirstFreeAce'
<user defined> 'RtlCreateSecurityDescriptor'
<user defined> 'RtlSetDaclSecurityDescriptor'
<user defined> 'RtlValidAcl'
<user defined> 'RtlCreateAcl'
<user defined> 'RtlAddAccessAllowedAce'
<user defined> 'RtlFreeSid'
<user defined> 'RtlAllocateAndInitializeSid'
<user defined> 'RtlSetOwnerSecurityDescriptor'
<user defined> 'RtlSetGroupSecurityDescriptor'
<user defined> 'RtlLockHeap'
<user defined> 'RtlUnlockHeap'
<user defined> 'RtlIsValidHandle'
<user defined> 'RtlAllocateHandle'
<user defined> 'RtlQueryInformationActiveActivationContext'
<user defined> 'RtlGetIntegerAtom'
<user defined> 'RtlIsValidIndexHandle'
<user defined> 'RtlLookupAtomInAtomTable'
<user defined> 'RtlSetUserValueHeap'
<user defined> 'RtlGetUserInfoHeap'
<user defined> 'LdrAddRefDll'
<user defined> 'RtlFindActivationContextSectionGuid'
<user defined> 'RtlGetDaclSecurityDescriptor'
<user defined> 'RtlExpandEnvironmentStrings_U'
<user defined> 'RtlStringFromGUID'
<user defined> 'RtlQueryAtomInAtomTable'
<user defined> 'RtlAddAtomToAtomTable'
<user defined> 'RtlExitUserThread'
<user defined> 'LdrShutdownThread'
<user defined> 'RtlFreeThreadActivationContextStack'
<user defined> 'RtlFreeActivationContextStack'
<user defined> 'swprintf'
<user defined> '_swprintf'
<user defined> 'RtlpApplyLengthFunction'
<user defined> 'RtlGetLengthWithoutLastFullDosOrNtPathElement'
<user defined> 'RtlCreateActivationContext'
<user defined> 'EtwpCreateEtwThread'
<user defined> 'RtlCreateUserThread'
<user defined> 'RtlAcquireResourceExclusive'
<user defined> 'VerSetConditionMask'
<user defined> 'RtlVerifyVersionInfo'
<user defined> 'RtlLengthSecurityDescriptor'
<user defined> 'RtlValidSecurityDescriptor'
<user defined> 'RtlCreateAtomTable'
<user defined> 'RtlGetAce'
<user defined> 'RtlGetControlSecurityDescriptor'
<user defined> 'RtlGetSaclSecurityDescriptor'
<user defined> 'RtlGetOwnerSecurityDescriptor'
<user defined> 'RtlGetGroupSecurityDescriptor'
<user defined> 'RtlCharToInteger'
<user defined> 'RtlValidRelativeSecurityDescriptor'
<user defined> 'RtlTimeToSecondsSince1980'
<user defined> 'wcsncat'
<user defined> 'RtlAbsoluteToSelfRelativeSD'
<user defined> 'RtlMakeSelfRelativeSD'
<user defined> 'RtlSubAuthorityCountSid'
<user defined> 'RtlAddAccessAllowedAceEx'
<user defined> 'RtlUpperChar'
<user defined> 'RtlMultiByteToUnicodeSize'
<user defined> 'iswctype'
<user defined> 'iswdigit'
<user defined> 'RtlClearBits'
<user defined> 'RtlAreBitsSet'
<user defined> 'RtlDeleteResource'
<user defined> 'RtlDestroyHeap'
<user defined> 'RtlFormatMessageEx'
<user defined> 'RtlFindMessage'
<user defined> 'wcscspn'
<user defined> 'RtlReleaseSRWLockShared'
<user defined> 'RtlQueueWorkItem'
<user defined> 'TpCallbackMayRunLong'
<user defined> 'TpAllocPool'
<user defined> 'TpReleasePool'
<user defined> 'RtlOemStringToUnicodeString'
<user defined> 'RtlOemToUnicodeN'
<user defined> 'RtlUnicodeStringToOemString'
<user defined> 'RtlDowncaseUnicodeString'
<user defined> 'toupper'
<user defined> 'RtlUpcaseUnicodeToMultiByteN'
<user defined> 'RtlUpcaseUnicodeString'
<user defined> 'RtlCompactHeap'
<user defined> 'wcstoul'
<user defined> 'RtlDosPathNameToNtPathName_U_WithStatus'
<user defined> '_wtol'
<user defined> 'wcstol'
<user defined> 'RtlQueryInformationAcl'
<user defined> 'RtlTimeToSecondsSince1970'
<user defined> 'RtlCheckForOrphanedCriticalSections'
<user defined> 'WerCheckEventEscalation'
<user defined> 'WerReportSQMEvent'
<user defined> 'RtlAcquirePrivilege'
<user defined> 'RtlReleasePrivilege'
<user defined> '_vsnwprintf'
<user defined> '_wcstoui64'
<user defined> 'LdrShutdownProcess'
<user defined> 'RtlExitUserProcess'
<user defined> 'RtlDestroyHandleTable'
<user defined> 'RtlNumberGenericTableElements'
<user defined> 'RtlEnumerateGenericTableWithoutSplaying'
<user defined> 'RtlGetNtVersionNumbers'
<user defined> 'RtlInitializeGenericTable'
<user defined> 'RtlIsValidLocaleName'
<user defined> 'RtlNormalizeProcessParams'
<user defined> 'LdrSetDllManifestProber'
<user defined> 'RtlSetUnhandledExceptionFilter'
<user defined> 'CsrClientConnectToServer'
<user defined> 'RtlInitializeAtomPackage'
<user defined> 'RtlSetThreadPoolStartFunc'
<user defined> 'RtlInitNlsTables'
<user defined> 'RtlInitCodePageTable'
<user defined> 'RtlResetRtlTranslations'
<user defined> 'RtlCreateTagHeap'
<user defined> 'wcsstr'
<user defined> 'RtlDecodeSystemPointer'
<user defined> '_wcslwr'
<user defined> 'RtlFreeUserStack'
<user defined> 'RtlDestroyEnvironment'
<user defined> 'RtlCreateEnvironmentEx'
<user defined> 'RtlDestroyProcessParameters'
<user defined> 'RtlCreateProcessParametersEx'
<user defined> 'LdrQueryImageFileExecutionOptions'
<user defined> 'LdrQueryImageFileExecutionOptionsEx'
<user defined> 'LdrQueryImageFileKeyOption'
<user defined> 'EtwLogTraceEvent'
<user defined> 'RtlCreateUserStack'
<user defined> 'RtlCreateEnvironment'
<user defined> 'RtlAddAce'
<user defined> 'RtlDeleteAce'
<user defined> 'DbgPrint'
<user defined> '_vsnprintf'
<user defined> 'atol'
<user defined> '_strupr'
<user defined> 'strtol'
<user defined> 'RtlCreateQueryDebugBuffer'
<user defined> 'RtlQueryProcessDebugInformation'
<user defined> 'RtlDestroyQueryDebugBuffer'
<user defined> 'RtlAllocateHeap'
<user defined> 'RtlInitializeCriticalSectionAndSpinCount'
<user defined> 'RtlAcquireSRWLockShared'
<user defined> 'RtlLengthRequiredSid'
<user defined> 'RtlImageDirectoryEntryToData'
<user defined> 'RtlFreeHandle'
<user defined> 'RtlCreateUnicodeString'
<user defined> 'RtlFindClearBits'
<user defined> 'RtlCultureNameToLCID'
<user defined> 'RtlReAllocateHeap'
<user defined> 'RtlLocaleNameToLcid'
<user defined> 'RtlFreeOemString'
<user defined> 'NtCurrentTeb'
<user defined> 'RtlGetLengthWithoutTrailingPathSeperators'
<user defined> 'RtlNtPathNameToDosPathName'
<user defined> 'RtlDosSearchPath_U'
<user defined> 'RtlGetCurrentTransaction'
<user defined> 'RtlSetCurrentTransaction'
<user defined> 'DbgUiConnectToDbg'
<user defined> 'DbgUiGetThreadDebugObject'
<user defined> 'DbgUiSetThreadDebugObject'
<user defined> 'DbgUiWaitStateChange'
<user defined> 'DbgUiContinue'
<user defined> 'DbgUiStopDebugging'
<user defined> 'DbgUiRemoteBreakin'
<user defined> 'DbgUiIssueRemoteBreakin'
<user defined> 'DbgUiDebugActiveProcess'
<user defined> 'DbgUiConvertStateChangeStructure'
<user defined> 'RtlGetThreadErrorMode'
<user defined> 'RtlPushFrame'
<user defined> 'RtlPopFrame'
<user defined> 'RtlGetFrame'
<user defined> 'LdrHotPatchRoutine'
<user defined> 'RtlGetUnloadEventTrace'
<user defined> 'RtlGetUnloadEventTraceEx'
<user defined> 'LdrVerifyImageMatchesChecksumEx'
<user defined> 'LdrQueryProcessModuleInformation'
<user defined> 'LdrSetAppCompatDllRedirectionCallback'
<user defined> 'LdrQueryModuleServiceTags'
<user defined> 'LdrGetFailureData'
<user defined> 'LdrVerifyImageMatchesChecksum'
<user defined> 'LdrRegisterDllNotification'
<user defined> 'LdrUnregisterDllNotification'
<user defined> 'RtlSetUserCallbackExceptionFilter'
<user defined> 'LdrInitShimEngineDynamic'
<user defined> 'RtlComputePrivatizedDllName_U'
<user defined> 'RtlRegisterThreadWithCsrss'
<user defined> 'CsrSetPriorityClass'
<user defined> 'RtlFinalReleaseOutOfProcessMemoryStream'
<user defined> 'RtlInitMemoryStream'
<user defined> 'RtlAddRefMemoryStream'
<user defined> 'RtlReleaseMemoryStream'
<user defined> 'RtlQueryInterfaceMemoryStream'
<user defined> 'RtlReadOutOfProcessMemoryStream'
<user defined> 'RtlReadMemoryStream'
<user defined> 'RtlWriteMemoryStream'
<user defined> 'RtlSeekMemoryStream'
<user defined> 'RtlSetMemoryStreamSize'
<user defined> 'RtlCopyMemoryStreamTo'
<user defined> 'RtlCommitMemoryStream'
<user defined> 'RtlCloneMemoryStream'
<user defined> 'RtlRevertMemoryStream'
<user defined> 'RtlUnlockMemoryStreamRegion'
<user defined> 'RtlCopyOutOfProcessMemoryStreamTo'
<user defined> 'RtlLockMemoryStreamRegion'
<user defined> 'RtlStatMemoryStream'
<user defined> 'RtlInitOutOfProcessMemoryStream'
<user defined> 'RtlIsCriticalSectionLocked'
<user defined> 'RtlIsCriticalSectionLockedByThread'
<user defined> 'RtlGetCriticalSectionRecursionCount'
<user defined> 'RtlpWaitForCriticalSection'
<user defined> 'RtlConvertSharedToExclusive'
<user defined> 'RtlConvertExclusiveToShared'
<user defined> 'RtlDumpResource'
<user defined> 'RtlUpdateClonedCriticalSection'
<user defined> 'RtlEnableEarlyCriticalSectionEventCreation'
<user defined> 'RtlpNotOwnerCriticalSection'
<user defined> 'RtlQueryCriticalSectionOwner'
<user defined> 'RtlInitializeCriticalSectionEx'
<user defined> 'RtlNewSecurityObjectWithMultipleInheritance'
<user defined> 'RtlNewSecurityObjectEx'
<user defined> 'RtlNewSecurityObject'
<user defined> 'RtlSetSecurityObject'
<user defined> 'RtlSetSecurityObjectEx'
<user defined> 'RtlQuerySecurityObject'
<user defined> 'RtlDeleteSecurityObject'
<user defined> 'RtlNewInstanceSecurityObject'
<user defined> 'RtlNewSecurityGrantedAccess'
<user defined> 'RtlCopySecurityDescriptor'
<user defined> 'RtlCreateAndSetSD'
<user defined> 'RtlCreateUserSecurityObject'
<user defined> 'RtlConvertToAutoInheritSecurityObject'
<user defined> 'RtlDefaultNpAcl'
<user defined> 'RtlConvertUiListToApiList'
<user defined> 'RtlpQueryProcessDebugInformationRemote'
<user defined> 'RtlCommitDebugInfo'
<user defined> 'RtlDeCommitDebugInfo'
<user defined> 'RtlSetProcessDebugInformation'
<user defined> 'RtlQueryProcessBackTraceInformation'
<user defined> 'RtlQueryProcessLockInformation'
<user defined> 'RtlQueryProcessHeapInformation'
<user defined> 'LdrWx86FormatVirtualImage'
<user defined> 'NtdllDefWindowProc_A'
<user defined> 'NtdllDefWindowProc_W'
<user defined> 'NtdllDialogWndProc_A'
<user defined> 'NtdllDialogWndProc_W'
<user defined> 'RtlInitializeNtUserPfn'
<user defined> 'RtlRetrieveNtUserPfn'
<user defined> 'RtlAddVectoredContinueHandler'
<user defined> 'RtlAddVectoredExceptionHandler'
<user defined> 'RtlRemoveVectoredContinueHandler'
<user defined> 'RtlRemoveVectoredExceptionHandler'
<user defined> 'RtlApplicationVerifierStop'
<user defined> 'RtlQueueApcWow64Thread'
<user defined> 'RtlWow64CallFunction64'
<user defined> 'RtlWow64EnableFsRedirectionEx'
<user defined> 'RtlWow64EnableFsRedirection'
<user defined> 'RtlEncodeSystemPointer'
<user defined> 'RtlWakeConditionVariable'
<user defined> 'RtlWakeAllConditionVariable'
<user defined> 'RtlSleepConditionVariableCS'
<user defined> 'RtlSleepConditionVariableSRW'
<user defined> 'RtlUpdateClonedSRWLock'
<user defined> 'RtlWerpReportException'
<user defined> 'RtlReportException'
<user defined> 'ShipAssertGetBufferInfo'
<user defined> 'ShipAssert'
<user defined> 'ShipAssertMsgW'
<user defined> 'ShipAssertMsgA'
<user defined> 'WerReportWatsonEvent'
<user defined> 'WinSqmEventEnabled'
<user defined> 'WinSqmEventWrite'
<user defined> 'WinSqmStartSession'
<user defined> 'WinSqmEndSession'
<user defined> 'WinSqmIsOptedIn'
<user defined> 'WinSqmSetString'
<user defined> 'WinSqmAddToStream'
<user defined> 'RtlZombifyActivationContext'
<user defined> 'RtlIsActivationContextActive'
<user defined> 'RtlQueryActivationContextApplicationSettings'
<user defined> 'RtlComputeImportTableHash'
<user defined> 'CsrIdentifyAlertableThread'
<user defined> 'CsrClientCallServer'
<user defined> 'CsrAllocateCaptureBuffer'
<user defined> 'CsrFreeCaptureBuffer'
<user defined> 'CsrAllocateMessagePointer'
<user defined> 'CsrCaptureMessageBuffer'
<user defined> 'CsrCaptureMessageString'
<user defined> 'CsrCaptureTimeout'
<user defined> 'CsrGetProcessId'
<user defined> 'CsrCaptureMessageMultiUnicodeStringsInPlace'
<user defined> 'CsrVerifyRegion'
<user defined> 'AlpcGetHeaderSize'
<user defined> 'AlpcInitializeMessageAttribute'
<user defined> 'AlpcGetMessageAttribute'
<user defined> 'AlpcGetMessageFromCompletionList'
<user defined> 'AlpcFreeCompletionListMessage'
<user defined> 'AlpcGetCompletionListMessageAttributes'
<user defined> 'AlpcGetCompletionListLastMessageInformation'
<user defined> 'AlpcGetOutstandingCompletionListMessageCount'
<user defined> 'AlpcRegisterCompletionListWorkerThread'
<user defined> 'AlpcUnregisterCompletionListWorkerThread'
<user defined> 'AlpcRegisterCompletionList'
<user defined> 'AlpcUnregisterCompletionList'
<user defined> 'AlpcAdjustCompletionListConcurrencyCount'
<user defined> 'AlpcMaxAllowedMessageLength'
<user defined> 'DbgPrompt'
<user defined> 'DbgQueryDebugFilterState'
<user defined> 'DbgSetDebugFilterState'
<user defined> 'DbgPrintReturnControlC'
<user defined> 'vDbgPrintEx'
<user defined> 'vDbgPrintExWithPrefix'
<user defined> 'LdrRemoveLoadAsDataTable'
<user defined> 'LdrAddLoadAsDataTable'
<user defined> 'LdrGetFileNameFromLoadAsDataTable'
<user defined> 'LdrSetMUICacheType'
<user defined> 'LdrEnumResources'
<user defined> 'LdrFlushAlternateResourceModules'
<user defined> 'LdrLoadAlternateResourceModule'
<user defined> 'RtlDeNormalizeProcessParams'
<user defined> 'RtlIsCurrentThreadAttachExempt'
<user defined> 'RtlQueryElevationFlags'
<user defined> 'RtlFlsAlloc'
<user defined> 'RtlFlsFree'
<user defined> 'RtlProcessFlsData'
<user defined> 'RtlWow64LogMessageInEventLogger'
<user defined> 'RtlCreateUserProcess'
<user defined> 'RtlCloneUserProcess'
<user defined> 'RtlCreateProcessParameters'
<user defined> 'RtlQueryModuleInformation'
<user defined> 'LdrProcessRelocationBlock'
<user defined> 'LdrResRelease'
<user defined> 'LdrpResGetMappingSize'
<user defined> 'LdrpResGetRCConfig'
<user defined> 'LdrpResGetResourceDirectory'
<user defined> 'LdrResSearchResource'
<user defined> 'LdrResFindResource'
<user defined> 'LdrResFindResourceDirectory'
<user defined> 'RtlUpcaseUnicodeToOemN'
<user defined> 'RtlCustomCPToUnicodeN'
<user defined> 'RtlUnicodeToCustomCPN'
<user defined> 'RtlUpcaseUnicodeToCustomCPN'
<user defined> 'RtlConsoleMultiByteToUnicodeN'
<user defined> 'RtlTimeToElapsedTimeFields'
<user defined> 'RtlSecondsSince1980ToTime'
<user defined> 'RtlSecondsSince1970ToTime'
<user defined> 'RtlSystemTimeToLocalTime'
<user defined> 'RtlLocalTimeToSystemTime'
<user defined> 'NtGetTickCount'
<user defined> 'RtlCutoverTimeToSystemTime'
<user defined> 'PfxInitialize'
<user defined> 'PfxRemovePrefix'
<user defined> 'PfxInsertPrefix'
<user defined> 'PfxFindPrefix'
<user defined> 'RtlStartRXact'
<user defined> 'RtlAbortRXact'
<user defined> 'RtlAddAttributeActionToRXact'
<user defined> 'RtlAddActionToRXact'
<user defined> 'RtlInitializeRXact'
<user defined> 'RtlApplyRXact'
<user defined> 'RtlApplyRXactNoFlush'
<user defined> 'RtlSelfRelativeToAbsoluteSD2'
<user defined> 'RtlSelfRelativeToAbsoluteSD'
<user defined> 'RtlTryAcquirePebLock'
<user defined> 'RtlRunEncodeUnicodeString'
<user defined> 'RtlRunDecodeUnicodeString'
<user defined> 'RtlEraseUnicodeString'
<user defined> 'RtlAdjustPrivilege'
<user defined> 'RtlEqualPrefixSid'
<user defined> 'RtlIdentifierAuthoritySid'
<user defined> 'RtlCopySidAndAttributesArray'
<user defined> 'RtlCreateServiceSid'
<user defined> 'RtlRemovePrivileges'
<user defined> 'RtlEqualLuid'
<user defined> 'RtlCopyLuidAndAttributesArray'
<user defined> 'RtlSetControlSecurityDescriptor'
<user defined> 'RtlSetSaclSecurityDescriptor'
<user defined> 'RtlAreAllAccessesGranted'
<user defined> 'RtlAreAnyAccessesGranted'
<user defined> 'RtlMapGenericMask'
<user defined> 'RtlImpersonateSelfEx'
<user defined> 'RtlImpersonateSelf'
<user defined> 'RtlOwnerAcesPresent'
<user defined> 'RtlGetSecurityDescriptorRMControl'
<user defined> 'RtlSetSecurityDescriptorRMControl'
<user defined> 'RtlMapSecurityErrorToNtStatus'
<user defined> 'RtlSidHashInitialize'
<user defined> 'RtlSidHashLookup'
<user defined> 'RtlSidIsHigherLevel'
<user defined> 'RtlSidEqualLevel'
<user defined> 'RtlSidDominates'
<user defined> 'RtlSetAttributesSecurityDescriptor'
<user defined> 'RtlSetInformationAcl'
<user defined> 'RtlFindAceByType'
<user defined> 'RtlAddCompoundAce'
<user defined> 'RtlAddMandatoryAce'
<user defined> 'RtlAddAccessDeniedAce'
<user defined> 'RtlAddAccessDeniedAceEx'
<user defined> 'RtlAddAuditAccessAce'
<user defined> 'RtlAddAuditAccessAceEx'
<user defined> 'RtlAddAccessAllowedObjectAce'
<user defined> 'RtlAddAccessDeniedObjectAce'
<user defined> 'RtlAddAuditAccessObjectAce'
<user defined> 'RtlDestroyAtomTable'
<user defined> 'RtlEmptyAtomTable'
<user defined> 'RtlPinAtomInAtomTable'
<user defined> 'RtlCreateBoundaryDescriptor'
<user defined> 'RtlAddSIDToBoundaryDescriptor'
<user defined> 'RtlImageRvaToVa'
<user defined> 'RtlZeroHeap'
<user defined> 'RtlCreateMemoryBlockLookaside'
<user defined> 'RtlDestroyMemoryBlockLookaside'
<user defined> 'RtlExtendMemoryBlockLookaside'
<user defined> 'RtlLockMemoryBlockLookaside'
<user defined> 'RtlResetMemoryBlockLookaside'
<user defined> 'RtlUnlockMemoryBlockLookaside'
<user defined> 'RtlCreateMemoryZone'
<user defined> 'RtlDestroyMemoryZone'
<user defined> 'RtlExtendMemoryZone'
<user defined> 'RtlLockMemoryZone'
<user defined> 'RtlResetMemoryZone'
<user defined> 'RtlUnlockMemoryZone'
<user defined> 'RtlDowncaseUnicodeChar'
<user defined> 'RtlUnicodeStringToAnsiSize'
<user defined> 'RtlUnicodeStringToOemSize'
<user defined> 'RtlxUnicodeStringToOemSize'
<user defined> 'RtlxUnicodeStringToAnsiSize'
<user defined> 'RtlAnsiStringToUnicodeSize'
<user defined> 'RtlxAnsiStringToUnicodeSize'
<user defined> 'RtlxOemStringToUnicodeSize'
<user defined> 'RtlOemStringToUnicodeSize'
<user defined> 'RtlCompareUnicodeStrings'
<user defined> 'RtlCompareUnicodeString'
<user defined> 'RtlUpcaseUnicodeStringToAnsiString'
<user defined> 'RtlUpcaseUnicodeStringToOemString'
<user defined> 'RtlUnicodeStringToCountedOemString'
<user defined> 'RtlUpcaseUnicodeStringToCountedOemString'
<user defined> 'RtlEqualDomainName'
<user defined> 'RtlEqualComputerName'
<user defined> 'RtlDnsHostNameToComputerName'
<user defined> 'RtlDuplicateUnicodeString'
<user defined> 'RtlCopyString'
<user defined> 'RtlCompareString'
<user defined> 'RtlPrefixString'
<user defined> 'RtlUpperString'
<user defined> 'RtlAppendAsciizToString'
<user defined> 'RtlAppendStringToString'
<user defined> 'RtlTestBit'
<user defined> 'RtlClearAllBits'
<user defined> 'RtlSetAllBits'
<user defined> 'RtlFindSetBits'
<user defined> 'RtlFindClearRuns'
<user defined> 'RtlFindLongestRunClear'
<user defined> 'RtlNumberOfSetBitsUlongPtr'
<user defined> 'RtlNumberOfSetBits'
<user defined> 'RtlNumberOfClearBits'
<user defined> 'RtlAreBitsClear'
<user defined> 'RtlFindNextForwardRunClear'
<user defined> 'RtlFindLastBackwardRunClear'
<user defined> 'RtlFindMostSignificantBit'
<user defined> 'RtlFindLeastSignificantBit'
<user defined> 'RtlFindSetBitsAndClear'
<user defined> 'RtlAssert'
<user defined> 'RtlBarrier'
<user defined> 'RtlBarrierForDelete'
<user defined> 'RtlInitBarrier'
<user defined> 'RtlDeleteBarrier'
<user defined> 'RtlWalkFrameChain'
<user defined> 'RtlCaptureStackContext'
<user defined> 'RtlCaptureStackBackTrace'
<user defined> 'RtlGetCallersAddress'
<user defined> 'RtlLargeIntegerToChar'
<user defined> 'RtlInt64ToUnicodeString'
<user defined> 'RtlWriteRegistryValue'
<user defined> 'RtlCheckRegistryKey'
<user defined> 'RtlCreateRegistryKey'
<user defined> 'RtlDeleteRegistryValue'
<user defined> 'RtlSetTimeZoneInformation'
<user defined> 'RtlSetDynamicTimeZoneInformation'
<user defined> 'RtlQueryRegistryValues'
<user defined> 'RtlpCheckDynamicTimeZoneInformation'
<user defined> 'RtlQueryTimeZoneInformation'
<user defined> 'RtlQueryDynamicTimeZoneInformation'
<user defined> 'RtlpInitializeLangRegistryInfo'
<user defined> 'RtlpCreateProcessRegistryInfo'
<user defined> 'RtlCleanUpTEBLangLists'
<user defined> 'RtlGetThreadLangIdByIndex'
<user defined> 'RtlpGetSystemDefaultUILanguage'
<user defined> 'RtlpGetLCIDFromLangInfoNode'
<user defined> 'RtlpIsQualifiedLanguage'
<user defined> 'RtlpGetNameFromLangInfoNode'
<user defined> 'RtlConvertLCIDToString'
<user defined> 'RtlpConvertLCIDsToCultureNames'
<user defined> 'RtlpConvertCultureNamesToLCIDs'
<user defined> 'RtlpVerifyAndCommitUILanguageSettings'
<user defined> 'RtlpCleanupRegistryKeys'
<user defined> 'RtlGetSystemPreferredUILanguages'
<user defined> 'RtlpSetPreferredUILanguages'
<user defined> 'RtlpSetUserPreferredUILanguages'
<user defined> 'RtlGetUILanguageInfo'
<user defined> 'RtlGetUserPreferredUILanguages'
<user defined> 'RtlpSetInstallLanguage'
<user defined> 'RtlSetThreadPreferredUILanguages'
<user defined> 'RtlGetFileMUIPath'
<user defined> 'RtlIoEncodeMemIoResource'
<user defined> 'RtlCmEncodeMemIoResource'
<user defined> 'RtlIoDecodeMemIoResource'
<user defined> 'RtlCmDecodeMemIoResource'
<user defined> 'RtlFindClosestEncodableLength'
<user defined> 'RtlProtectHeap'
<user defined> 'RtlSetUserFlagsHeap'
<user defined> 'RtlQueryTagHeap'
<user defined> 'RtlGetProcessHeaps'
<user defined> 'RtlEnumProcessHeaps'
<user defined> 'RtlWalkHeap'
<user defined> 'RtlMultipleAllocateHeap'
<user defined> 'RtlMultipleFreeHeap'
<user defined> 'RtlValidateHeap'
<user defined> 'RtlValidateProcessHeaps'
<user defined> 'RtlSetHeapInformation'
<user defined> 'RtlQueryHeapInformation'
<user defined> 'RtlCompareAltitudes'
<user defined> 'RtlGetCompressionWorkSpaceSize'
<user defined> 'RtlCompressBuffer'
<user defined> 'RtlDecompressBuffer'
<user defined> 'RtlDecompressFragment'
<user defined> 'RtlComputeCrc32'
<user defined> 'RtlConnectToSm'
<user defined> 'RtlSendMsgToSm'
<user defined> 'RtlCopyMappedMemory'
<user defined> 'RtlLockBootStatusData'
<user defined> 'RtlUnlockBootStatusData'
<user defined> 'RtlGetSetBootStatusData'
<user defined> 'RtlCreateBootStatusDataFile'
<user defined> 'RtlSetCurrentEnvironment'
<user defined> 'RtlSetEnvironmentVar'
<user defined> 'RtlSetEnvironmentStrings'
<user defined> 'RtlQueryEnvironmentVariable'
<user defined> 'RtlCreateSystemVolumeInformationFolder'
<user defined> 'RtlSplay'
<user defined> 'RtlSubtreeSuccessor'
<user defined> 'RtlSubtreePredecessor'
<user defined> 'RtlRealSuccessor'
<user defined> 'RtlRealPredecessor'
<user defined> 'RtlDelete'
<user defined> 'RtlDeleteNoSplay'
<user defined> 'RtlInsertElementGenericTableFull'
<user defined> 'RtlIsGenericTableEmpty'
<user defined> 'RtlGetElementGenericTable'
<user defined> 'RtlInsertElementGenericTable'
<user defined> 'RtlDeleteElementGenericTable'
<user defined> 'RtlLookupElementGenericTableFull'
<user defined> 'RtlEnumerateGenericTable'
<user defined> 'RtlLookupElementGenericTable'
<user defined> 'RtlInitializeGenericTableAvl'
<user defined> 'RtlInsertElementGenericTableFullAvl'
<user defined> 'RtlIsGenericTableEmptyAvl'
<user defined> 'RtlGetElementGenericTableAvl'
<user defined> 'RtlNumberGenericTableElementsAvl'
<user defined> 'RtlEnumerateGenericTableWithoutSplayingAvl'
<user defined> 'RtlInsertElementGenericTableAvl'
<user defined> 'RtlDeleteElementGenericTableAvl'
<user defined> 'RtlLookupElementGenericTableFullAvl'
<user defined> 'RtlEnumerateGenericTableAvl'
<user defined> 'RtlEnumerateGenericTableLikeADirectory'
<user defined> 'RtlLookupElementGenericTableAvl'
<user defined> 'RtlRegisterSecureMemoryCacheCallback'
<user defined> 'RtlDeregisterSecureMemoryCacheCallback'
<user defined> 'RtlFlushSecureMemoryCache'
<user defined> 'RtlFormatMessage'
<user defined> 'RtlGUIDFromString'
<user defined> 'RtlIsNameLegalDOS8Dot3'
<user defined> 'RtlGenerate8dot3Name'
<user defined> 'RtlGetCurrentPeb'
<user defined> 'RtlSetProcessIsCritical'
<user defined> 'RtlSetThreadIsCritical'
<user defined> 'RtlRestoreLastWin32Error'
<user defined> 'RtlSetLastWin32Error'
<user defined> 'RtlGetLastNtStatus'
<user defined> 'RtlSetLastWin32ErrorAndNtStatusFromNtStatus'
<user defined> 'RtlGetParentLocaleName'
<user defined> 'RtlGetProductInfo'
<user defined> 'RtlHeapTrkInitialize'
<user defined> 'RtlIdnToAscii'
<user defined> 'RtlIdnToNameprepUnicode'
<user defined> 'RtlIdnToUnicode'
<user defined> 'RtlInitializeContext'
<user defined> 'RtlRemoteCall'
<user defined> 'RtlInitializeExceptionChain'
<user defined> 'RtlIpv6AddressToStringA'
<user defined> 'RtlIpv6AddressToStringExA'
<user defined> 'RtlIpv4AddressToStringA'
<user defined> 'RtlIpv4AddressToStringExA'
<user defined> 'RtlIpv6AddressToStringW'
<user defined> 'RtlIpv6AddressToStringExW'
<user defined> 'RtlIpv4AddressToStringW'
<user defined> 'RtlIpv4AddressToStringExW'
<user defined> 'RtlIpv6StringToAddressA'
<user defined> 'RtlIpv6StringToAddressExA'
<user defined> 'RtlIpv4StringToAddressA'
<user defined> 'RtlIpv4StringToAddressExA'
<user defined> 'RtlIpv6StringToAddressW'
<user defined> 'RtlIpv6StringToAddressExW'
<user defined> 'RtlIpv4StringToAddressW'
<user defined> 'RtlIpv4StringToAddressExW'
<user defined> 'RtlNormalizeString'
<user defined> 'RtlIsNormalizedString'
<user defined> 'RtlLargeIntegerDivide'
<user defined> 'RtlLockCurrentThread'
<user defined> 'RtlUnlockCurrentThread'
<user defined> 'RtlLockModuleSection'
<user defined> 'RtlUnlockModuleSection'
<user defined> 'RtlUniform'
<user defined> 'RtlRandom'
<user defined> 'RtlRunOnceBeginInitialize'
<user defined> 'RtlRunOnceComplete'
<user defined> 'RtlRunOnceExecuteOnce'
<user defined> 'RtlTraceDatabaseEnumerate'
<user defined> 'RtlTraceDatabaseCreate'
<user defined> 'RtlTraceDatabaseDestroy'
<user defined> 'RtlTraceDatabaseValidate'
<user defined> 'RtlTraceDatabaseFind'
<user defined> 'RtlTraceDatabaseLock'
<user defined> 'RtlTraceDatabaseUnlock'
<user defined> 'RtlTraceDatabaseAdd'
<user defined> 'RtlUnhandledExceptionFilter2'
<user defined> 'RtlUnhandledExceptionFilter'
<user defined> 'RtlpGetUserOrMachineUILanguage4NLS'
<user defined> 'RtlpMuiRegFreeRegistryInfo'
<user defined> 'RtlpRefreshCachedUILanguage'
<user defined> 'RtlpMuiRegCreateRegistryInfo'
<user defined> 'RtlpMuiFreeLangRegistryInfo'
<user defined> 'RtlpLoadMachineUIByPolicy'
<user defined> 'RtlpLoadUserUIByPolicy'
<user defined> 'RtlpMuiRegLoadRegistryInfo'
<user defined> 'RtlpNtOpenKey'
<user defined> 'RtlpNtCreateKey'
<user defined> 'RtlpNtQueryValueKey'
<user defined> 'RtlpNtSetValueKey'
<user defined> 'RtlpNtMakeTemporaryKey'
<user defined> 'RtlpNtEnumerateSubKey'
<user defined> 'isalpha'
<user defined> 'isupper'
<user defined> 'islower'
<user defined> 'isdigit'
<user defined> 'isxdigit'
<user defined> 'isspace'
<user defined> 'ispunct'
<user defined> 'isalnum'
<user defined> 'isprint'
<user defined> 'isgraph'
<user defined> 'iscntrl'
<user defined> '__isascii'
<user defined> '__toascii'
<user defined> '__iscsym'
<user defined> '__iscsymf'
<user defined> 'atoi'
<user defined> '_atoi64'
<user defined> '_itoa'
<user defined> '_ltoa'
<user defined> '_ultoa'
<user defined> '_i64toa'
<user defined> '_ui64toa'
<user defined> '_itow'
<user defined> '_ltow'
<user defined> '_ultow'
<user defined> '_i64tow'
<user defined> '_ui64tow'
<user defined> '_lfind'
<user defined> '_memicmp'
<user defined> '_snprintf'
<user defined> '_splitpath'
<user defined> '_strlwr'
<user defined> '_vswprintf'
<user defined> '_vscwprintf'
<user defined> '_wcsupr'
<user defined> '_wtoi'
<user defined> '_wtoi64'
<user defined> 'fabs'
<user defined> 'iswalpha'
<user defined> 'iswlower'
<user defined> 'iswxdigit'
<user defined> 'iswspace'
<user defined> 'abs'
<user defined> 'labs'
<user defined> 'mbstowcs'
<user defined> 'memcmp'
<user defined> 'qsort'
<user defined> 'sprintf'
<user defined> 'sscanf'
<user defined> 'strtoul'
<user defined> 'tolower'
<user defined> 'towlower'
<user defined> 'towupper'
<user defined> 'vsprintf'
<user defined> 'wcscat'
<user defined> 'wcscpy'
<user defined> 'wcscmp'
<user defined> 'wcslen'
<user defined> 'wcspbrk'
<user defined> 'wcsspn'
<user defined> 'wcstombs'
<user defined> 'EtwGetTraceLoggerHandle'
<user defined> 'EtwGetTraceEnableLevel'
<user defined> 'EtwGetTraceEnableFlags'
<user defined> 'EtwUnregisterTraceGuids'
<user defined> 'EtwCreateTraceInstanceId'
<user defined> 'EtwRegisterTraceGuidsW'
<user defined> 'EtwRegisterTraceGuidsA'
<user defined> 'EtwDeliverDataBlock'
<user defined> 'EtwRegisterSecurityProvider'
<user defined> 'EtwNotificationRegister'
<user defined> 'EtwNotificationUnregister'
<user defined> 'EtwEventEnabled'
<user defined> 'EtwEventProviderEnabled'
<user defined> 'EtwEventActivityIdControl'
<user defined> 'EtwEventWriteFull'
<user defined> 'EtwEventWriteString'
<user defined> 'EtwWriteUMSecurityEvent'
<user defined> 'EtwEnumerateProcessRegGuids'
<user defined> 'EtwEventRegister'
<user defined> 'EtwEventUnregister'
<user defined> 'EtwEventWrite'
<user defined> 'EtwEventWriteTransfer'
<user defined> 'EtwEventWriteStartScenario'
<user defined> 'EtwEventWriteEndScenario'
<user defined> 'EtwTraceEventInstance'
<user defined> 'EtwTraceMessageVa'
<user defined> 'EtwTraceMessage'
<user defined> 'EtwSetMark'
<user defined> 'EtwProcessPrivateLoggerRequest'
<user defined> 'EtwpNotificationThread'
<user defined> 'EtwReplyNotification'
<user defined> 'EtwSendNotification'
<user defined> 'EtwpGetCpuSpeed'
<user defined> 'A_SHAInit'
<user defined> 'A_SHAUpdate'
<user defined> 'A_SHAFinal'
<user defined> 'MD4Init'
<user defined> 'MD4Update'
<user defined> 'MD4Final'
<user defined> 'MD5Init'
<user defined> 'MD5Update'
<user defined> 'MD5Final'
<user defined> 'TpAllocAlpcCompletion'
<user defined> 'TpWaitForAlpcCompletion'
<user defined> 'TpReleaseAlpcCompletion'
<user defined> 'TpAllocCleanupGroup'
<user defined> 'TpReleaseCleanupGroupMembers'
<user defined> 'TpReleaseCleanupGroup'
<user defined> 'TpAllocIoCompletion'
<user defined> 'TpWaitForIoCompletion'
<user defined> 'TpReleaseIoCompletion'
<user defined> 'TpStartAsyncIoOperation'
<user defined> 'TpCancelAsyncIoOperation'
<user defined> 'TpSetPoolMinThreads'
<user defined> 'TpSetPoolMaxThreads'
<user defined> 'TpAllocTimer'
<user defined> 'TpIsTimerSet'
<user defined> 'TpSetTimer'
<user defined> 'TpWaitForTimer'
<user defined> 'TpReleaseTimer'
<user defined> 'TpAllocWait'
<user defined> 'TpSetWait'
<user defined> 'TpWaitForWait'
<user defined> 'TpReleaseWait'
<user defined> 'TpAllocWork'
<user defined> 'TpWaitForWork'
<user defined> 'TpReleaseWork'
<user defined> 'TpPostWork'
<user defined> 'TpCallbackSetEventOnCompletion'
<user defined> 'TpCallbackReleaseSemaphoreOnCompletion'
<user defined> 'TpCallbackReleaseMutexOnCompletion'
<user defined> 'TpCallbackLeaveCriticalSectionOnCompletion'
<user defined> 'TpCallbackUnloadDllOnCompletion'
<user defined> 'TpDisassociateCallback'
<user defined> 'TpDbgSetLogRoutine'
<user defined> 'TpCaptureCaller'
<user defined> 'TpDbgDumpHeapUsage'
<user defined> 'TpCheckTerminateWorker'
<user defined> 'TpSimpleTryPost'
<user defined> 'RtlDebugPrintTimes' = 9090909090C3C08B
<user defined> 'RtlCreateTimerQueue'
<user defined> 'RtlDeleteTimerQueueEx'
<user defined> 'RtlDeleteTimerQueue'
<user defined> 'RtlCreateTimer'
<user defined> 'RtlUpdateTimer'
<user defined> 'RtlDeleteTimer'
<user defined> 'RtlCancelTimer'
<user defined> 'RtlSetTimer'
<user defined> 'RtlRegisterWait'
<user defined> 'RtlDeregisterWaitEx'
<user defined> 'RtlDeregisterWait'
<user defined> 'RtlSetIoCompletionCallback'
<user defined> 'RtlAllocateMemoryBlockLookaside'
<user defined> 'RtlFreeMemoryBlockLookaside'
<user defined> 'RtlAllocateMemoryZone'
<user defined> '_fltused'
<user defined> 'NlsAnsiCodePage' = 4E4
<user defined> 'NlsMbCodePageTag' = 0
<user defined> 'NlsMbOemCodePageTag'