[+] Ran on Wed Aug 1 23:10:07 2012 [+] Scanning module 'kernel32.dll' in directory '/tmp/'... [+] 0xFD8452C6 = kernel32.dll!AcquireSRWLockExclusive [+] 0x74FE289C = kernel32.dll!AcquireSRWLockShared [+] 0xC3D0940A = kernel32.dll!ActivateActCtx [+] 0x354E7EBB = kernel32.dll!AddAtomA [+] 0x35FE7EBB = kernel32.dll!AddAtomW [+] 0x2663DF8A = kernel32.dll!AddConsoleAliasA [+] 0x2713DF8A = kernel32.dll!AddConsoleAliasW [+] 0xB1EE3630 = kernel32.dll!AddDllDirectory [+] 0x1022AF41 = kernel32.dll!AddIntegrityLabelToBoundaryDescriptor [+] 0x13D8B214 = kernel32.dll!AddLocalAlternateComputerNameA [+] 0x1488B214 = kernel32.dll!AddLocalAlternateComputerNameW [+] 0x034514F5 = kernel32.dll!AddRefActCtx [+] 0xE00D8513 = kernel32.dll!AddSIDToBoundaryDescriptor [+] 0x117A7336 = kernel32.dll!AddSecureMemoryCacheCallback [+] 0x7487EB7C = kernel32.dll!AddVectoredContinueHandler [+] 0x87AFC3B3 = kernel32.dll!AddVectoredExceptionHandler [+] 0xB2D07C0E = kernel32.dll!AdjustCalendarDate [+] 0xD975E69D = kernel32.dll!AllocConsole [+] 0x915A3B78 = kernel32.dll!AllocateUserPhysicalPages [+] 0x32060205 = kernel32.dll!AllocateUserPhysicalPagesNuma [+] 0x6F5D8C81 = kernel32.dll!ApplicationRecoveryFinished [+] 0xE5D596B1 = kernel32.dll!ApplicationRecoveryInProgress [+] 0x46F63E57 = kernel32.dll!AreFileApisANSI [+] 0xBDC269C7 = kernel32.dll!AssignProcessToJobObject [+] 0x3F0589CA = kernel32.dll!AttachConsole [+] 0x44AB64C3 = kernel32.dll!BackupRead [+] 0x44E375C3 = kernel32.dll!BackupSeek [+] 0x95257ABF = kernel32.dll!BackupWrite [+] 0x1954CAF8 = kernel32.dll!BaseCheckAppcompatCache [+] 0x3FDC2FBB = kernel32.dll!BaseCheckAppcompatCacheEx [+] 0x7688D2E7 = kernel32.dll!BaseCheckRunApp [+] 0xD6356D28 = kernel32.dll!BaseCleanupAppcompatCacheSupport [+] 0xD548D1B1 = kernel32.dll!BaseDllReadWriteIniFile [+] 0x88160EFD = kernel32.dll!BaseDumpAppcompatCache [+] 0xBA64D178 = kernel32.dll!BaseFlushAppcompatCache [+] 0xF4D82E9B = kernel32.dll!BaseFormatObjectAttributes [+] 0xEE4333FB = kernel32.dll!BaseFormatTimeOut [+] 0xAFCA5761 = kernel32.dll!BaseGenerateAppCompatData [+] 0x11B39C8C = kernel32.dll!BaseGetNamedObjectDirectory [+] 0x4A893B81 = kernel32.dll!BaseInitAppcompatCacheSupport [+] 0xDC1E6D51 = kernel32.dll!BaseIsAppcompatInfrastructureDisabled [+] 0xE9885D83 = kernel32.dll!BaseQueryModuleData [+] 0x93A64AEB = kernel32.dll!BaseSetLastNTError [+] 0xC24935B1 = kernel32.dll!BaseThreadInitThunk [+] 0x5C3F671E = kernel32.dll!BaseUpdateAppcompatCache [+] 0xEAB4F355 = kernel32.dll!BaseVerifyUnicodeString [+] 0x1C72731E = kernel32.dll!Basep8BitStringToDynamicUnicodeString [+] 0x8AB58289 = kernel32.dll!BasepAllocateActivationContextActivationBlock [+] 0x4477EDA7 = kernel32.dll!BasepAnsiStringToDynamicUnicodeString [+] 0x74D0AF63 = kernel32.dll!BasepCheckAppCompat [+] 0x8F8A7B91 = kernel32.dll!BasepCheckBadapp [+] 0x61ACF875 = kernel32.dll!BasepCheckWinSaferRestrictions [+] 0xEAB03981 = kernel32.dll!BasepFreeActivationContextActivationBlock [+] 0x9447E272 = kernel32.dll!BasepFreeAppCompatData [+] 0x611214CA = kernel32.dll!BasepMapModuleHandle [+] 0x6033501A = kernel32.dll!Beep [+] 0x8E958235 = kernel32.dll!BeginUpdateResourceA [+] 0x8F458235 = kernel32.dll!BeginUpdateResourceW [+] 0x3E94A88F = kernel32.dll!BindIoCompletionCallback [+] 0x01449CDC = kernel32.dll!BuildCommDCBA [+] 0x74360EB6 = kernel32.dll!BuildCommDCBAndTimeoutsA [+] 0x74E60EB6 = kernel32.dll!BuildCommDCBAndTimeoutsW [+] 0x01F49CDC = kernel32.dll!BuildCommDCBW [+] 0x94A9E7B7 = kernel32.dll!CallNamedPipeA [+] 0x9559E7B7 = kernel32.dll!CallNamedPipeW [+] 0xF146962B = kernel32.dll!CallbackMayRunLong [+] 0x1DE23E8E = kernel32.dll!CancelDeviceWakeupRequest [+] 0x32E5856C = kernel32.dll!CancelIo [+] 0xA40ACCC2 = kernel32.dll!CancelIoEx [+] 0x12EB0858 = kernel32.dll!CancelSynchronousIo [+] 0x78F0EA43 = kernel32.dll!CancelThreadpoolIo [+] 0xF7918082 = kernel32.dll!CancelTimerQueueTimer [+] 0xB8D4156F = kernel32.dll!CancelWaitableTimer [+] 0x6A4A6692 = kernel32.dll!ChangeTimerQueueTimer [+] 0x4AC7B9D6 = kernel32.dll!CheckElevation [+] 0xF2A1B882 = kernel32.dll!CheckElevationEnabled [+] 0xF9D031B5 = kernel32.dll!CheckForReadOnlyResource [+] 0xEC63CF63 = kernel32.dll!CheckNameLegalDOS8Dot3A [+] 0xED13CF63 = kernel32.dll!CheckNameLegalDOS8Dot3W [+] 0x7EB13455 = kernel32.dll!CheckRemoteDebuggerPresent [+] 0x87878748 = kernel32.dll!ClearCommBreak [+] 0x21BF8ACA = kernel32.dll!ClearCommError [+] 0x9E8E3527 = kernel32.dll!CloseConsoleHandle [+] 0x528796C6 = kernel32.dll!CloseHandle [+] 0xD390B8DB = kernel32.dll!ClosePrivateNamespace [+] 0xDF285DF4 = kernel32.dll!CloseProfileUserMapping [+] 0x7FE936BA = kernel32.dll!CloseThreadpool [+] 0x78736D36 = kernel32.dll!CloseThreadpoolCleanupGroup [+] 0x9A6C28CE = kernel32.dll!CloseThreadpoolCleanupGroupMembers [+] 0xE4AF2155 = kernel32.dll!CloseThreadpoolIo [+] 0xE6E2D035 = kernel32.dll!CloseThreadpoolTimer [+] 0xFA52AFEE = kernel32.dll!CloseThreadpoolWait [+] 0x160AB22E = kernel32.dll!CloseThreadpoolWork [+] 0xDBB95459 = kernel32.dll!CmdBatNotification [+] 0x9E31FE7B = kernel32.dll!CommConfigDialogA [+] 0x9EE1FE7B = kernel32.dll!CommConfigDialogW [+] 0xD2143819 = kernel32.dll!CompareCalendarDates [+] 0x46D36A92 = kernel32.dll!CompareFileTime [+] 0x4FF26E1C = kernel32.dll!CompareStringA [+] 0x508501F4 = kernel32.dll!CompareStringEx [+] 0xD0E8B61A = kernel32.dll!CompareStringOrdinal [+] 0x50A26E1C = kernel32.dll!CompareStringW [+] 0xE27D6F28 = kernel32.dll!ConnectNamedPipe [+] 0xD89FB122 = kernel32.dll!ConsoleMenuControl [+] 0x0CEF7805 = kernel32.dll!ContinueDebugEvent [+] 0x78B8B554 = kernel32.dll!ConvertCalDateTimeToSystemTime [+] 0x33C4D0BD = kernel32.dll!ConvertDefaultLocale [+] 0xA4D5A59B = kernel32.dll!ConvertFiberToThread [+] 0x668C18D4 = kernel32.dll!ConvertNLSDayOfWeekToWin32DayOfWeek [+] 0x4174B47F = kernel32.dll!ConvertSystemTimeToCalDateTime [+] 0xB6D08B1A = kernel32.dll!ConvertThreadToFiber [+] 0x9ECC3823 = kernel32.dll!ConvertThreadToFiberEx [+] 0xBD2D1564 = kernel32.dll!CopyExtendedContext [+] 0xDDA3E63E = kernel32.dll!CopyFileA [+] 0x59EB0DEC = kernel32.dll!CopyFileExA [+] 0x5A9B0DEC = kernel32.dll!CopyFileExW [+] 0xE128BA62 = kernel32.dll!CopyFileTransactedA [+] 0xE1D8BA62 = kernel32.dll!CopyFileTransactedW [+] 0xDE53E63E = kernel32.dll!CopyFileW [+] 0x990F1939 = kernel32.dll!CopyLZFile [+] 0x4595146D = kernel32.dll!CreateActCtxA [+] 0x4645146D = kernel32.dll!CreateActCtxW [+] 0x61F8A0BD = kernel32.dll!CreateBoundaryDescriptorA [+] 0x62A8A0BD = kernel32.dll!CreateBoundaryDescriptorW [+] 0x6CA6786C = kernel32.dll!CreateConsoleScreenBuffer [+] 0x5DDC1554 = kernel32.dll!CreateDirectoryA [+] 0x67F6D38C = kernel32.dll!CreateDirectoryExA [+] 0x68A6D38C = kernel32.dll!CreateDirectoryExW [+] 0x8136C627 = kernel32.dll!CreateDirectoryTransactedA [+] 0x81E6C627 = kernel32.dll!CreateDirectoryTransactedW [+] 0x5E8C1554 = kernel32.dll!CreateDirectoryW [+] 0x26B89CFF = kernel32.dll!CreateEventA [+] 0x9F18BE3F = kernel32.dll!CreateEventExA [+] 0x9FC8BE3F = kernel32.dll!CreateEventExW [+] 0x27689CFF = kernel32.dll!CreateEventW [+] 0x3D62F6DA = kernel32.dll!CreateFiber [+] 0x43672844 = kernel32.dll!CreateFiberEx [+] 0x4FDAF6DA = kernel32.dll!CreateFileA [+] 0x23F9CD0A = kernel32.dll!CreateFileMappingA [+] 0x9A218836 = kernel32.dll!CreateFileMappingNumaA [+] 0x9AD18836 = kernel32.dll!CreateFileMappingNumaW [+] 0x24A9CD0A = kernel32.dll!CreateFileMappingW [+] 0xFDB67E89 = kernel32.dll!CreateFileTransactedA [+] 0xFE667E89 = kernel32.dll!CreateFileTransactedW [+] 0x508AF6DA = kernel32.dll!CreateFileW [+] 0xA6B9DE33 = kernel32.dll!CreateHardLinkA [+] 0x136E385F = kernel32.dll!CreateHardLinkTransactedA [+] 0x141E385F = kernel32.dll!CreateHardLinkTransactedW [+] 0xA769DE33 = kernel32.dll!CreateHardLinkW [+] 0x6FF741E5 = kernel32.dll!CreateIoCompletionPort [+] 0xAFD7A151 = kernel32.dll!CreateJobObjectA [+] 0xB087A151 = kernel32.dll!CreateJobObjectW [+] 0x7264693B = kernel32.dll!CreateJobSet [+] 0x28DA3766 = kernel32.dll!CreateMailslotA [+] 0x298A3766 = kernel32.dll!CreateMailslotW [+] 0xD1C9C6CE = kernel32.dll!CreateMemoryResourceNotification [+] 0x94D98DFF = kernel32.dll!CreateMutexA [+] 0x2754FE1A = kernel32.dll!CreateMutexExA [+] 0x2804FE1A = kernel32.dll!CreateMutexExW [+] 0x95898DFF = kernel32.dll!CreateMutexW [+] 0xD4DF7045 = kernel32.dll!CreateNamedPipeA [+] 0xD58F7045 = kernel32.dll!CreateNamedPipeW [+] 0x0EAFCF3E = kernel32.dll!CreatePipe [+] 0xCD1DA0A2 = kernel32.dll!CreatePrivateNamespaceA [+] 0xCDCDA0A2 = kernel32.dll!CreatePrivateNamespaceW [+] 0x863FCC79 = kernel32.dll!CreateProcessA [+] 0xB7BA31C8 = kernel32.dll!CreateProcessAsUserW [+] 0x6645F149 = kernel32.dll!CreateProcessInternalA [+] 0x66F5F149 = kernel32.dll!CreateProcessInternalW [+] 0x86EFCC79 = kernel32.dll!CreateProcessW [+] 0x799AACC6 = kernel32.dll!CreateRemoteThread [+] 0x5154A353 = kernel32.dll!CreateRemoteThreadEx [+] 0x190FEFD2 = kernel32.dll!CreateSemaphoreA [+] 0x34ED72FB = kernel32.dll!CreateSemaphoreExA [+] 0x359D72FB = kernel32.dll!CreateSemaphoreExW [+] 0x19BFEFD2 = kernel32.dll!CreateSemaphoreW [+] 0x68865170 = kernel32.dll!CreateSocketHandle [+] 0x258A6BC0 = kernel32.dll!CreateSymbolicLinkA [+] 0x73225BC2 = kernel32.dll!CreateSymbolicLinkTransactedA [+] 0x73D25BC2 = kernel32.dll!CreateSymbolicLinkTransactedW [+] 0x263A6BC0 = kernel32.dll!CreateSymbolicLinkW [+] 0x52BC246F = kernel32.dll!CreateTapePartition [+] 0x160D6838 = kernel32.dll!CreateThread [+] 0x592C1AD0 = kernel32.dll!CreateThreadpool [+] 0x0CA1AE94 = kernel32.dll!CreateThreadpoolCleanupGroup [+] 0x356826CB = kernel32.dll!CreateThreadpoolIo [+] 0xD3844240 = kernel32.dll!CreateThreadpoolTimer [+] 0x28940D82 = kernel32.dll!CreateThreadpoolWait [+] 0x444C0FC2 = kernel32.dll!CreateThreadpoolWork [+] 0xC0387447 = kernel32.dll!CreateTimerQueue [+] 0x070A6EFB = kernel32.dll!CreateTimerQueueTimer [+] 0x921E3980 = kernel32.dll!CreateToolhelp32Snapshot [+] 0xA72F69F1 = kernel32.dll!CreateWaitableTimerA [+] 0xBCCBFA9F = kernel32.dll!CreateWaitableTimerExA [+] 0xBD7BFA9F = kernel32.dll!CreateWaitableTimerExW [+] 0xA7DF69F1 = kernel32.dll!CreateWaitableTimerW [+] 0x56240CF2 = kernel32.dll!CtrlRoutine [+] 0x64151416 = kernel32.dll!DeactivateActCtx [+] 0x59E4C353 = kernel32.dll!DebugActiveProcess [+] 0xD8FBFF0E = kernel32.dll!DebugActiveProcessStop [+] 0xC3AD85ED = kernel32.dll!DebugBreak [+] 0x01E35038 = kernel32.dll!DebugBreakProcess [+] 0x40E11D7E = kernel32.dll!DebugSetProcessKillOnExit [+] 0x47CB40BB = kernel32.dll!DecodePointer [+] 0x311C6921 = kernel32.dll!DecodeSystemPointer [+] 0xA4E4DFD4 = kernel32.dll!DefineDosDeviceA [+] 0xA594DFD4 = kernel32.dll!DefineDosDeviceW [+] 0xAE5E98DC = kernel32.dll!DelayLoadFailureHook [+] 0x6BEE777E = kernel32.dll!DeleteAtom [+] 0xC24D919E = kernel32.dll!DeleteBoundaryDescriptor [+] 0x14D93034 = kernel32.dll!DeleteCriticalSection [+] 0x01652ED7 = kernel32.dll!DeleteFiber [+] 0x13DD2ED7 = kernel32.dll!DeleteFileA [+] 0x2EB70C88 = kernel32.dll!DeleteFileTransactedA [+] 0x2F670C88 = kernel32.dll!DeleteFileTransactedW [+] 0x148D2ED7 = kernel32.dll!DeleteFileW [+] 0x0897D710 = kernel32.dll!DeleteProcThreadAttributeList [+] 0x22399045 = kernel32.dll!DeleteTimerQueue [+] 0x790D82FD = kernel32.dll!DeleteTimerQueueEx [+] 0x380AFCFA = kernel32.dll!DeleteTimerQueueTimer [+] 0x49834156 = kernel32.dll!DeleteVolumeMountPointA [+] 0x4A334156 = kernel32.dll!DeleteVolumeMountPointW [+] 0xE69C5DE4 = kernel32.dll!DeviceIoControl [+] 0xA80CA0EF = kernel32.dll!DisableThreadLibraryCalls [+] 0x5E666D5A = kernel32.dll!DisableThreadProfiling [+] 0xC7622CCA = kernel32.dll!DisassociateCurrentThreadFromCallback [+] 0xFCDDFAC0 = kernel32.dll!DisconnectNamedPipe [+] 0x58D58C27 = kernel32.dll!DnsHostnameToComputerNameA [+] 0x59858C27 = kernel32.dll!DnsHostnameToComputerNameW [+] 0x0672376E = kernel32.dll!DosDateTimeToFileTime [+] 0xE45B254C = kernel32.dll!DosPathToSessionPathA [+] 0xE50B254C = kernel32.dll!DosPathToSessionPathW [+] 0xC83B8DF6 = kernel32.dll!DuplicateConsoleHandle [+] 0xCBD5018D = kernel32.dll!DuplicateHandle [+] 0x0E546C4A = kernel32.dll!EnableThreadProfiling [+] 0x484B414B = kernel32.dll!EncodePointer [+] 0x335C6B21 = kernel32.dll!EncodeSystemPointer [+] 0x660AB859 = kernel32.dll!EndUpdateResourceA [+] 0x66BAB859 = kernel32.dll!EndUpdateResourceW [+] 0x188433BA = kernel32.dll!EnterCriticalSection [+] 0x49514B3F = kernel32.dll!EnumCalendarInfoA [+] 0x45444E47 = kernel32.dll!EnumCalendarInfoExA [+] 0x51DCAC83 = kernel32.dll!EnumCalendarInfoExEx [+] 0x45F44E47 = kernel32.dll!EnumCalendarInfoExW [+] 0x4A014B3F = kernel32.dll!EnumCalendarInfoW [+] 0x3C11521C = kernel32.dll!EnumDateFormatsA [+] 0xF5460584 = kernel32.dll!EnumDateFormatsExA [+] 0x0BC22C91 = kernel32.dll!EnumDateFormatsExEx [+] 0xF5F60584 = kernel32.dll!EnumDateFormatsExW [+] 0x3CC1521C = kernel32.dll!EnumDateFormatsW [+] 0xD1956C5A = kernel32.dll!EnumLanguageGroupLocalesA [+] 0xD2456C5A = kernel32.dll!EnumLanguageGroupLocalesW [+] 0xCD8B7140 = kernel32.dll!EnumResourceLanguagesA [+] 0x53CDCE68 = kernel32.dll!EnumResourceLanguagesExA [+] 0x547DCE68 = kernel32.dll!EnumResourceLanguagesExW [+] 0xCE3B7140 = kernel32.dll!EnumResourceLanguagesW [+] 0x680DF336 = kernel32.dll!EnumResourceNamesA [+] 0xF46E4C0F = kernel32.dll!EnumResourceNamesExA [+] 0xF51E4C0F = kernel32.dll!EnumResourceNamesExW [+] 0x68BDF336 = kernel32.dll!EnumResourceNamesW [+] 0x68262342 = kernel32.dll!EnumResourceTypesA [+] 0xFA7A4F0F = kernel32.dll!EnumResourceTypesExA [+] 0xFB2A4F0F = kernel32.dll!EnumResourceTypesExW [+] 0x68D62342 = kernel32.dll!EnumResourceTypesW [+] 0xCC70DA48 = kernel32.dll!EnumSystemCodePagesA [+] 0xCD20DA48 = kernel32.dll!EnumSystemCodePagesW [+] 0x521840B0 = kernel32.dll!EnumSystemFirmwareTables [+] 0x83B4DCD5 = kernel32.dll!EnumSystemGeoID [+] 0x37AD282A = kernel32.dll!EnumSystemLanguageGroupsA [+] 0x385D282A = kernel32.dll!EnumSystemLanguageGroupsW [+] 0x5B6BC072 = kernel32.dll!EnumSystemLocalesA [+] 0xE3355DBF = kernel32.dll!EnumSystemLocalesEx [+] 0x5C1BC072 = kernel32.dll!EnumSystemLocalesW [+] 0x7C21531A = kernel32.dll!EnumTimeFormatsA [+] 0x7876636B = kernel32.dll!EnumTimeFormatsEx [+] 0x7CD1531A = kernel32.dll!EnumTimeFormatsW [+] 0x45ED921C = kernel32.dll!EnumUILanguagesA [+] 0x469D921C = kernel32.dll!EnumUILanguagesW [+] 0x24640788 = kernel32.dll!EnumerateLocalComputerNamesA [+] 0x25140788 = kernel32.dll!EnumerateLocalComputerNamesW [+] 0x4BAAA72D = kernel32.dll!EraseTape [+] 0xD4E4B15C = kernel32.dll!EscapeCommFunction [+] 0x56A2B5F0 = kernel32.dll!ExitProcess [+] 0x0A2A1DE0 = kernel32.dll!ExitThread [+] 0xC2FE70AF = kernel32.dll!ExitVDM [+] 0xC1768C86 = kernel32.dll!ExpandEnvironmentStringsA [+] 0xC2268C86 = kernel32.dll!ExpandEnvironmentStringsW [+] 0x5A6C4A3F = kernel32.dll!ExpungeConsoleCommandHistoryA [+] 0x5B1C4A3F = kernel32.dll!ExpungeConsoleCommandHistoryW [+] 0x8D6A2825 = kernel32.dll!FatalAppExitA [+] 0x8E1A2825 = kernel32.dll!FatalAppExitW [+] 0xE8D9BFD1 = kernel32.dll!FatalExit [+] 0x62068C2D = kernel32.dll!FileTimeToDosDateTime [+] 0x89F34F92 = kernel32.dll!FileTimeToLocalFileTime [+] 0xEB28D760 = kernel32.dll!FileTimeToSystemTime [+] 0xE2829C2D = kernel32.dll!FillConsoleOutputAttribute [+] 0x8E3128B6 = kernel32.dll!FillConsoleOutputCharacterA [+] 0x8EE128B6 = kernel32.dll!FillConsoleOutputCharacterW [+] 0x99C0B829 = kernel32.dll!FindActCtxSectionGuid [+] 0x8EC1A561 = kernel32.dll!FindActCtxSectionStringA [+] 0x8F71A561 = kernel32.dll!FindActCtxSectionStringW [+] 0x5D50AFFB = kernel32.dll!FindAtomA [+] 0x5E00AFFB = kernel32.dll!FindAtomW [+] 0x5E70317C = kernel32.dll!FindClose [+] 0xFCE95C7D = kernel32.dll!FindCloseChangeNotification [+] 0xB1726BB9 = kernel32.dll!FindFirstChangeNotificationA [+] 0xB2226BB9 = kernel32.dll!FindFirstChangeNotificationW [+] 0x95DA3590 = kernel32.dll!FindFirstFileA [+] 0x677EE25A = kernel32.dll!FindFirstFileExA [+] 0x682EE25A = kernel32.dll!FindFirstFileExW [+] 0x5299E8E7 = kernel32.dll!FindFirstFileNameTransactedW [+] 0xA158A054 = kernel32.dll!FindFirstFileNameW [+] 0x4F364E36 = kernel32.dll!FindFirstFileTransactedA [+] 0x4FE64E36 = kernel32.dll!FindFirstFileTransactedW [+] 0x968A3590 = kernel32.dll!FindFirstFileW [+] 0xD25A7922 = kernel32.dll!FindFirstStreamTransactedW [+] 0xA05AE13E = kernel32.dll!FindFirstStreamW [+] 0xB797DF9B = kernel32.dll!FindFirstVolumeA [+] 0x6953ACDE = kernel32.dll!FindFirstVolumeMountPointA [+] 0x6A03ACDE = kernel32.dll!FindFirstVolumeMountPointW [+] 0xB847DF9B = kernel32.dll!FindFirstVolumeW [+] 0xD918D39E = kernel32.dll!FindNLSString [+] 0x30DE592B = kernel32.dll!FindNLSStringEx [+] 0x28FBC379 = kernel32.dll!FindNextChangeNotification [+] 0xF76C45E7 = kernel32.dll!FindNextFileA [+] 0xC25E166D = kernel32.dll!FindNextFileNameW [+] 0xF81C45E7 = kernel32.dll!FindNextFileW [+] 0x04DEF716 = kernel32.dll!FindNextStreamW [+] 0x1C1BF573 = kernel32.dll!FindNextVolumeA [+] 0x8274B254 = kernel32.dll!FindNextVolumeMountPointA [+] 0x8324B254 = kernel32.dll!FindNextVolumeMountPointW [+] 0x1CCBF573 = kernel32.dll!FindNextVolumeW [+] 0x6558F55E = kernel32.dll!FindResourceA [+] 0x472ED60E = kernel32.dll!FindResourceExA [+] 0x47DED60E = kernel32.dll!FindResourceExW [+] 0x6608F55E = kernel32.dll!FindResourceW [+] 0x05AFD2C5 = kernel32.dll!FindStringOrdinal [+] 0x22230BC1 = kernel32.dll!FindVolumeClose [+] 0x85AC827B = kernel32.dll!FindVolumeMountPointClose [+] 0x359A003B = kernel32.dll!FlsAlloc [+] 0xFB8B9914 = kernel32.dll!FlsFree [+] 0xB73CE901 = kernel32.dll!FlsGetValue [+] 0xC33CE901 = kernel32.dll!FlsSetValue [+] 0xB90E367F = kernel32.dll!FlushConsoleInputBuffer [+] 0xC178D676 = kernel32.dll!FlushFileBuffers [+] 0xDEB1AF6A = kernel32.dll!FlushInstructionCache [+] 0x8C2878B7 = kernel32.dll!FlushProcessWriteBuffers [+] 0x496CA03C = kernel32.dll!FlushViewOfFile [+] 0x971D2B50 = kernel32.dll!FoldStringA [+] 0x97CD2B50 = kernel32.dll!FoldStringW [+] 0xA9E80C2D = kernel32.dll!FormatMessageA [+] 0xAA980C2D = kernel32.dll!FormatMessageW [+] 0x5B29928E = kernel32.dll!FreeConsole [+] 0xA43194C8 = kernel32.dll!FreeEnvironmentStringsA [+] 0xA4E194C8 = kernel32.dll!FreeEnvironmentStringsW [+] 0x3FB18528 = kernel32.dll!FreeLibrary [+] 0x52C8A5F7 = kernel32.dll!FreeLibraryAndExitThread [+] 0xDCF67E38 = kernel32.dll!FreeLibraryWhenCallbackReturns [+] 0x8E91B8EB = kernel32.dll!FreeResource [+] 0x8BCB2FBB = kernel32.dll!FreeUserPhysicalPages [+] 0xFA7905BC = kernel32.dll!GenerateConsoleCtrlEvent [+] 0x985267CD = kernel32.dll!GetACP [+] 0xC579DA53 = kernel32.dll!GetActiveProcessorCount [+] 0x93AB9D1A = kernel32.dll!GetActiveProcessorGroupCount [+] 0x01CCAD84 = kernel32.dll!GetApplicationRecoveryCallback [+] 0x80264A69 = kernel32.dll!GetApplicationRestartSettings [+] 0xE53D5AAF = kernel32.dll!GetAtomNameA [+] 0xE5ED5AAF = kernel32.dll!GetAtomNameW [+] 0x1C0FCD98 = kernel32.dll!GetBinaryType [+] 0x4AAB61DF = kernel32.dll!GetBinaryTypeA [+] 0x4B5B61DF = kernel32.dll!GetBinaryTypeW [+] 0xD83A0703 = kernel32.dll!GetCPInfo [+] 0x71424ABA = kernel32.dll!GetCPInfoExA [+] 0x71F24ABA = kernel32.dll!GetCPInfoExW [+] 0x99A78D2F = kernel32.dll!GetCalendarDateFormat [+] 0x548CBD5B = kernel32.dll!GetCalendarDateFormatEx [+] 0xF09396EB = kernel32.dll!GetCalendarDaysInMonth [+] 0xF5496141 = kernel32.dll!GetCalendarDifferenceInDays [+] 0x492A6515 = kernel32.dll!GetCalendarInfoA [+] 0x084CCBB4 = kernel32.dll!GetCalendarInfoEx [+] 0x49DA6515 = kernel32.dll!GetCalendarInfoW [+] 0x57D4BD6A = kernel32.dll!GetCalendarMonthsInYear [+] 0x4EA36C7C = kernel32.dll!GetCalendarSupportedDateRange [+] 0x34B75EF6 = kernel32.dll!GetCalendarWeekNumber [+] 0xA33B7F1B = kernel32.dll!GetComPlusPackageInstallStatus [+] 0x34659D53 = kernel32.dll!GetCommConfig [+] 0x5D51B1CA = kernel32.dll!GetCommMask [+] 0x4DEC3811 = kernel32.dll!GetCommModemStatus [+] 0x91A6237E = kernel32.dll!GetCommProperties [+] 0x495E9E31 = kernel32.dll!GetCommState [+] 0xB0E53182 = kernel32.dll!GetCommTimeouts [+] 0x2E30CE55 = kernel32.dll!GetCommandLineA [+] 0x2EE0CE55 = kernel32.dll!GetCommandLineW [+] 0x4A02A3A7 = kernel32.dll!GetCompressedFileSizeA [+] 0x3C4069BC = kernel32.dll!GetCompressedFileSizeTransactedA [+] 0x3CF069BC = kernel32.dll!GetCompressedFileSizeTransactedW [+] 0x4AB2A3A7 = kernel32.dll!GetCompressedFileSizeW [+] 0xA72BCBFB = kernel32.dll!GetComputerNameA [+] 0xBBE47D1F = kernel32.dll!GetComputerNameExA [+] 0xBC947D1F = kernel32.dll!GetComputerNameExW [+] 0xA7DBCBFB = kernel32.dll!GetComputerNameW [+] 0x466A1F8A = kernel32.dll!GetConsoleAliasA [+] 0x0F49BED8 = kernel32.dll!GetConsoleAliasExesA [+] 0x1E4B94DC = kernel32.dll!GetConsoleAliasExesLengthA [+] 0x1EFB94DC = kernel32.dll!GetConsoleAliasExesLengthW [+] 0x0FF9BED8 = kernel32.dll!GetConsoleAliasExesW [+] 0x471A1F8A = kernel32.dll!GetConsoleAliasW [+] 0xCB795FC7 = kernel32.dll!GetConsoleAliasesA [+] 0xA206859B = kernel32.dll!GetConsoleAliasesLengthA [+] 0xA2B6859B = kernel32.dll!GetConsoleAliasesLengthW [+] 0xCC295FC7 = kernel32.dll!GetConsoleAliasesW [+] 0x50CE121F = kernel32.dll!GetConsoleCP [+] 0x76776E8F = kernel32.dll!GetConsoleCharType [+] 0x1CAEE4DE = kernel32.dll!GetConsoleCommandHistoryA [+] 0xB663CA71 = kernel32.dll!GetConsoleCommandHistoryLengthA [+] 0xB713CA71 = kernel32.dll!GetConsoleCommandHistoryLengthW [+] 0x1D5EE4DE = kernel32.dll!GetConsoleCommandHistoryW [+] 0x2BA715EF = kernel32.dll!GetConsoleCursorInfo [+] 0x2D57556F = kernel32.dll!GetConsoleCursorMode [+] 0x9D3FD38F = kernel32.dll!GetConsoleDisplayMode [+] 0x63FABCF0 = kernel32.dll!GetConsoleFontInfo [+] 0x59AB61F0 = kernel32.dll!GetConsoleFontSize [+] 0x3465B7AB = kernel32.dll!GetConsoleHardwareState [+] 0x9FDB946F = kernel32.dll!GetConsoleHistoryInfo [+] 0xEFC06D7D = kernel32.dll!GetConsoleInputExeNameA [+] 0xF0706D7D = kernel32.dll!GetConsoleInputExeNameW [+] 0xA3C8B770 = kernel32.dll!GetConsoleInputWaitHandle [+] 0x2FC48F3E = kernel32.dll!GetConsoleKeyboardLayoutNameA [+] 0x30748F3E = kernel32.dll!GetConsoleKeyboardLayoutNameW [+] 0x5B96A149 = kernel32.dll!GetConsoleMode [+] 0xD35B7F17 = kernel32.dll!GetConsoleNlsMode [+] 0x82CFD8D5 = kernel32.dll!GetConsoleOriginalTitleA [+] 0x837FD8D5 = kernel32.dll!GetConsoleOriginalTitleW [+] 0x781D74EE = kernel32.dll!GetConsoleOutputCP [+] 0xC517A66E = kernel32.dll!GetConsoleProcessList [+] 0x691E5AAF = kernel32.dll!GetConsoleScreenBufferInfo [+] 0x32401D8F = kernel32.dll!GetConsoleScreenBufferInfoEx [+] 0x274E6359 = kernel32.dll!GetConsoleSelectionInfo [+] 0xDCB6CC09 = kernel32.dll!GetConsoleTitleA [+] 0xDD66CC09 = kernel32.dll!GetConsoleTitleW [+] 0xCE726E89 = kernel32.dll!GetConsoleWindow [+] 0xFD7D0340 = kernel32.dll!GetCurrencyFormatA [+] 0xF9A26E49 = kernel32.dll!GetCurrencyFormatEx [+] 0xFE2D0340 = kernel32.dll!GetCurrencyFormatW [+] 0x4E2A8205 = kernel32.dll!GetCurrentActCtx [+] 0x01E51786 = kernel32.dll!GetCurrentConsoleFont [+] 0x63EF5335 = kernel32.dll!GetCurrentConsoleFontEx [+] 0xED2D1511 = kernel32.dll!GetCurrentDirectoryA [+] 0xEDDD1511 = kernel32.dll!GetCurrentDirectoryW [+] 0x51E2F352 = kernel32.dll!GetCurrentProcess [+] 0x62C64749 = kernel32.dll!GetCurrentProcessId [+] 0xC33D4272 = kernel32.dll!GetCurrentProcessorNumber [+] 0xB9FA0E26 = kernel32.dll!GetCurrentProcessorNumberEx [+] 0x11D65D48 = kernel32.dll!GetCurrentThread [+] 0x5FA0C4B9 = kernel32.dll!GetCurrentThreadId [+] 0x3086D02C = kernel32.dll!GetDateFormatA [+] 0x61040697 = kernel32.dll!GetDateFormatEx [+] 0x3136D02C = kernel32.dll!GetDateFormatW [+] 0x4D8F47C8 = kernel32.dll!GetDefaultCommConfigA [+] 0x4E3F47C8 = kernel32.dll!GetDefaultCommConfigW [+] 0x3F7A6895 = kernel32.dll!GetDevicePowerState [+] 0xF6C8F67B = kernel32.dll!GetDiskFreeSpaceA [+] 0xA32F1D33 = kernel32.dll!GetDiskFreeSpaceExA [+] 0xA3DF1D33 = kernel32.dll!GetDiskFreeSpaceExW [+] 0xF778F67B = kernel32.dll!GetDiskFreeSpaceW [+] 0xAF6E50D3 = kernel32.dll!GetDllDirectoryA [+] 0xB01E50D3 = kernel32.dll!GetDllDirectoryW [+] 0x03BE6566 = kernel32.dll!GetDriveTypeA [+] 0x046E6566 = kernel32.dll!GetDriveTypeW [+] 0x1C19BE96 = kernel32.dll!GetDurationFormat [+] 0xF119173C = kernel32.dll!GetDurationFormatEx [+] 0x75CD3310 = kernel32.dll!GetDynamicTimeZoneInformation [+] 0x9F8814DF = kernel32.dll!GetEnabledExtendedFeatures [+] 0xE25775B1 = kernel32.dll!GetEnvironmentStrings [+] 0x8B71941C = kernel32.dll!GetEnvironmentStringsA [+] 0x8C21941C = kernel32.dll!GetEnvironmentStringsW [+] 0xDDCEADE7 = kernel32.dll!GetEnvironmentVariableA [+] 0xDE7EADE7 = kernel32.dll!GetEnvironmentVariableW [+] 0x82658236 = kernel32.dll!GetEraNameCountedString [+] 0xE8643AE1 = kernel32.dll!GetErrorMode [+] 0xEE54785F = kernel32.dll!GetExitCodeProcess [+] 0x4277F0D6 = kernel32.dll!GetExitCodeThread [+] 0xD7F99487 = kernel32.dll!GetExpandedNameA [+] 0xD8A99487 = kernel32.dll!GetExpandedNameW [+] 0xC5EE95EF = kernel32.dll!GetExtendedContextLength [+] 0xB7F83F5A = kernel32.dll!GetExtendedFeaturesMask [+] 0x5B01CE93 = kernel32.dll!GetFileAttributesA [+] 0xB165234C = kernel32.dll!GetFileAttributesExA [+] 0xB215234C = kernel32.dll!GetFileAttributesExW [+] 0x40803477 = kernel32.dll!GetFileAttributesTransactedA [+] 0x41303477 = kernel32.dll!GetFileAttributesTransactedW [+] 0x5BB1CE93 = kernel32.dll!GetFileAttributesW [+] 0xD30B7D18 = kernel32.dll!GetFileBandwidthReservation [+] 0xEF4D1773 = kernel32.dll!GetFileInformationByHandle [+] 0xBDEF4E71 = kernel32.dll!GetFileInformationByHandleEx [+] 0xCB904D7A = kernel32.dll!GetFileMUIInfo [+] 0xB158C0FA = kernel32.dll!GetFileMUIPath [+] 0x701E12C6 = kernel32.dll!GetFileSize [+] 0xF22E2351 = kernel32.dll!GetFileSizeEx [+] 0x701E1F86 = kernel32.dll!GetFileTime [+] 0x901E2046 = kernel32.dll!GetFileType [+] 0x1135DA2B = kernel32.dll!GetFinalPathNameByHandleA [+] 0x11E5DA2B = kernel32.dll!GetFinalPathNameByHandleW [+] 0xE18D3FF2 = kernel32.dll!GetFirmwareEnvironmentVariableA [+] 0xE23D3FF2 = kernel32.dll!GetFirmwareEnvironmentVariableW [+] 0x9580A63A = kernel32.dll!GetFullPathNameA [+] 0xCF1FEA61 = kernel32.dll!GetFullPathNameTransactedA [+] 0xCFCFEA61 = kernel32.dll!GetFullPathNameTransactedW [+] 0x9630A63A = kernel32.dll!GetFullPathNameW [+] 0x6A0BBF78 = kernel32.dll!GetGeoInfoA [+] 0x6ABBBF78 = kernel32.dll!GetGeoInfoW [+] 0x8C3AB3A7 = kernel32.dll!GetHandleContext [+] 0x5CD313C9 = kernel32.dll!GetHandleInformation [+] 0x84736606 = kernel32.dll!GetLargePageMinimum [+] 0x29C48372 = kernel32.dll!GetLargestConsoleWindowSize [+] 0x5DE2C5AA = kernel32.dll!GetLastError [+] 0xD92CE33E = kernel32.dll!GetLocalTime [+] 0x366E5B9B = kernel32.dll!GetLocaleInfoA [+] 0xBC7C35D4 = kernel32.dll!GetLocaleInfoEx [+] 0x371E5B9B = kernel32.dll!GetLocaleInfoW [+] 0xDD9AE47A = kernel32.dll!GetLogicalDriveStringsA [+] 0xDE4AE47A = kernel32.dll!GetLogicalDriveStringsW [+] 0xEB77BCEB = kernel32.dll!GetLogicalDrives [+] 0xF509C913 = kernel32.dll!GetLogicalProcessorInformation [+] 0x2D1BB672 = kernel32.dll!GetLogicalProcessorInformationEx [+] 0x5884A5D8 = kernel32.dll!GetLongPathNameA [+] 0x7FE0EA48 = kernel32.dll!GetLongPathNameTransactedA [+] 0x8090EA48 = kernel32.dll!GetLongPathNameTransactedW [+] 0x5934A5D8 = kernel32.dll!GetLongPathNameW [+] 0x41AEC708 = kernel32.dll!GetMailslotInfo [+] 0xC665CBB2 = kernel32.dll!GetMaximumProcessorCount [+] 0x142195C9 = kernel32.dll!GetMaximumProcessorGroupCount [+] 0xFE61445D = kernel32.dll!GetModuleFileNameA [+] 0xFF11445D = kernel32.dll!GetModuleFileNameW [+] 0xDAD5B06C = kernel32.dll!GetModuleHandleA [+] 0xA65D996C = kernel32.dll!GetModuleHandleExA [+] 0xA70D996C = kernel32.dll!GetModuleHandleExW [+] 0xDB85B06C = kernel32.dll!GetModuleHandleW [+] 0x6124D3F7 = kernel32.dll!GetNLSVersion [+] 0x33DE6F8D = kernel32.dll!GetNLSVersionEx [+] 0xE29A6C54 = kernel32.dll!GetNamedPipeAttribute [+] 0xFD8715B5 = kernel32.dll!GetNamedPipeClientComputerNameA [+] 0xFE3715B5 = kernel32.dll!GetNamedPipeClientComputerNameW [+] 0x0BD4516F = kernel32.dll!GetNamedPipeClientProcessId [+] 0xF51429F1 = kernel32.dll!GetNamedPipeClientSessionId [+] 0xF3A85794 = kernel32.dll!GetNamedPipeHandleStateA [+] 0xF4585794 = kernel32.dll!GetNamedPipeHandleStateW [+] 0x4C11C3E3 = kernel32.dll!GetNamedPipeInfo [+] 0x90423680 = kernel32.dll!GetNamedPipeServerProcessId [+] 0x79820F02 = kernel32.dll!GetNamedPipeServerSessionId [+] 0x959E0033 = kernel32.dll!GetNativeSystemInfo [+] 0x5A626CCD = kernel32.dll!GetNextVDMCommand [+] 0xB4650BBE = kernel32.dll!GetNumaAvailableMemoryNode [+] 0x03EC6122 = kernel32.dll!GetNumaAvailableMemoryNodeEx [+] 0x485C515D = kernel32.dll!GetNumaHighestNodeNumber [+] 0x48205B8E = kernel32.dll!GetNumaNodeNumberFromHandle [+] 0xAB21FAC1 = kernel32.dll!GetNumaNodeProcessorMask [+] 0xB32821E0 = kernel32.dll!GetNumaNodeProcessorMaskEx [+] 0xFEF09E2F = kernel32.dll!GetNumaProcessorNode [+] 0xA6D0FD75 = kernel32.dll!GetNumaProcessorNodeEx [+] 0xB904BCF8 = kernel32.dll!GetNumaProximityNode [+] 0x2BD8AFA3 = kernel32.dll!GetNumaProximityNodeEx [+] 0x12A00C49 = kernel32.dll!GetNumberFormatA [+] 0x41EB1761 = kernel32.dll!GetNumberFormatEx [+] 0x13500C49 = kernel32.dll!GetNumberFormatW [+] 0xDB84F881 = kernel32.dll!GetNumberOfConsoleFonts [+] 0xBB04B78D = kernel32.dll!GetNumberOfConsoleInputEvents [+] 0x42DEA82F = kernel32.dll!GetNumberOfConsoleMouseButtons [+] 0xF8038462 = kernel32.dll!GetOEMCP [+] 0x79F51B18 = kernel32.dll!GetOverlappedResult [+] 0x8B363105 = kernel32.dll!GetPhysicallyInstalledSystemMemory [+] 0xCC506985 = kernel32.dll!GetPriorityClass [+] 0x379E3F3F = kernel32.dll!GetPrivateProfileIntA [+] 0x384E3F3F = kernel32.dll!GetPrivateProfileIntW [+] 0xEF001BA3 = kernel32.dll!GetPrivateProfileSectionA [+] 0x8D1A862F = kernel32.dll!GetPrivateProfileSectionNamesA [+] 0x8DCA862F = kernel32.dll!GetPrivateProfileSectionNamesW [+] 0xEFB01BA3 = kernel32.dll!GetPrivateProfileSectionW [+] 0x3C1B902A = kernel32.dll!GetPrivateProfileStringA [+] 0x3CCB902A = kernel32.dll!GetPrivateProfileStringW [+] 0x261C536A = kernel32.dll!GetPrivateProfileStructA [+] 0x26CC536A = kernel32.dll!GetPrivateProfileStructW [+] 0x7802F749 = kernel32.dll!GetProcAddress [+] 0xFF434DC9 = kernel32.dll!GetProcessAffinityMask [+] 0x7AB86DED = kernel32.dll!GetProcessDEPPolicy [+] 0x14B95CCC = kernel32.dll!GetProcessGroupAffinity [+] 0xA492A6E8 = kernel32.dll!GetProcessHandleCount [+] 0xF8245751 = kernel32.dll!GetProcessHeap [+] 0x9A024284 = kernel32.dll!GetProcessHeaps [+] 0x702EEBBA = kernel32.dll!GetProcessId [+] 0x9103DBE3 = kernel32.dll!GetProcessIdOfThread [+] 0x86005946 = kernel32.dll!GetProcessIoCounters [+] 0xBBF3FB9C = kernel32.dll!GetProcessPreferredUILanguages [+] 0x4D517E37 = kernel32.dll!GetProcessPriorityBoost [+] 0xE438FCE0 = kernel32.dll!GetProcessShutdownParameters [+] 0xB2027FCA = kernel32.dll!GetProcessTimes [+] 0xD6EA4EE4 = kernel32.dll!GetProcessVersion [+] 0xEEC76D3D = kernel32.dll!GetProcessWorkingSetSize [+] 0x9C84C0F1 = kernel32.dll!GetProcessWorkingSetSizeEx [+] 0x58987DDF = kernel32.dll!GetProcessorSystemCycleTime [+] 0x8ADC6A91 = kernel32.dll!GetProductInfo [+] 0x0B906C8A = kernel32.dll!GetProfileIntA [+] 0x0C406C8A = kernel32.dll!GetProfileIntW [+] 0x11D4C8E2 = kernel32.dll!GetProfileSectionA [+] 0x1284C8E2 = kernel32.dll!GetProfileSectionW [+] 0xD1C37485 = kernel32.dll!GetProfileStringA [+] 0xD2737485 = kernel32.dll!GetProfileStringW [+] 0xB7A7286D = kernel32.dll!GetQueuedCompletionStatus [+] 0xD4738CE3 = kernel32.dll!GetQueuedCompletionStatusEx [+] 0x86AA2415 = kernel32.dll!GetShortPathNameA [+] 0x875A2415 = kernel32.dll!GetShortPathNameW [+] 0xB16B4AB1 = kernel32.dll!GetStartupInfoA [+] 0xB21B4AB1 = kernel32.dll!GetStartupInfoW [+] 0x53CABB18 = kernel32.dll!GetStdHandle [+] 0xE98A15DB = kernel32.dll!GetStringScripts [+] 0x12858162 = kernel32.dll!GetStringTypeA [+] 0x9251D6F9 = kernel32.dll!GetStringTypeExA [+] 0x9301D6FA = kernel32.dll!GetStringTypeExW [+] 0x13358162 = kernel32.dll!GetStringTypeW [+] 0x1B400860 = kernel32.dll!GetSystemDEPPolicy [+] 0xDE0ACB89 = kernel32.dll!GetSystemDefaultLCID [+] 0xB1BEA4FC = kernel32.dll!GetSystemDefaultLangID [+] 0xC64AA35C = kernel32.dll!GetSystemDefaultLocaleName [+] 0xEF53E1DF = kernel32.dll!GetSystemDefaultUILanguage [+] 0x60BCDE05 = kernel32.dll!GetSystemDirectoryA [+] 0x616CDE05 = kernel32.dll!GetSystemDirectoryW [+] 0xAD3F6F5F = kernel32.dll!GetSystemFileCacheSize [+] 0x1F41EDB8 = kernel32.dll!GetSystemFirmwareTable [+] 0x4B2B9D76 = kernel32.dll!GetSystemInfo [+] 0xC538AE2C = kernel32.dll!GetSystemPowerStatus [+] 0xF0D93CAB = kernel32.dll!GetSystemPreferredUILanguages [+] 0xD25D0F76 = kernel32.dll!GetSystemRegistryQuota [+] 0x40DC4F36 = kernel32.dll!GetSystemTime [+] 0x37B07F5C = kernel32.dll!GetSystemTimeAdjustment [+] 0x9B1B6595 = kernel32.dll!GetSystemTimeAsFileTime [+] 0x592C8843 = kernel32.dll!GetSystemTimes [+] 0x730A942A = kernel32.dll!GetSystemWindowsDirectoryA [+] 0x73BA942A = kernel32.dll!GetSystemWindowsDirectoryW [+] 0xC26EEB71 = kernel32.dll!GetSystemWow64DirectoryA [+] 0xC31EEB71 = kernel32.dll!GetSystemWow64DirectoryW [+] 0x05B5E108 = kernel32.dll!GetTapeParameters [+] 0x54B94214 = kernel32.dll!GetTapePosition [+] 0x14045F5A = kernel32.dll!GetTapeStatus [+] 0xA476543B = kernel32.dll!GetTempFileNameA [+] 0xA526543B = kernel32.dll!GetTempFileNameW [+] 0xE449F330 = kernel32.dll!GetTempPathA [+] 0xE4F9F330 = kernel32.dll!GetTempPathW [+] 0xD1425C18 = kernel32.dll!GetThreadContext [+] 0xB391DFF0 = kernel32.dll!GetThreadErrorMode [+] 0x0A1164CC = kernel32.dll!GetThreadGroupAffinity [+] 0x3360CE37 = kernel32.dll!GetThreadIOPendingFlag [+] 0x742EE666 = kernel32.dll!GetThreadId [+] 0x0FA56B57 = kernel32.dll!GetThreadIdealProcessorEx [+] 0xD4E22FF8 = kernel32.dll!GetThreadLocale [+] 0x66F4FB9A = kernel32.dll!GetThreadPreferredUILanguages [+] 0x2F55DBD1 = kernel32.dll!GetThreadPriority [+] 0x42A98637 = kernel32.dll!GetThreadPriorityBoost [+] 0x593AFC86 = kernel32.dll!GetThreadSelectorEntry [+] 0x0A0A7FBF = kernel32.dll!GetThreadTimes [+] 0xB27734C1 = kernel32.dll!GetThreadUILanguage [+] 0x6BCED369 = kernel32.dll!GetTickCount [+] 0xDC3E4850 = kernel32.dll!GetTickCount64 [+] 0x30A6982E = kernel32.dll!GetTimeFormatA [+] 0xA1140796 = kernel32.dll!GetTimeFormatEx [+] 0x3156982E = kernel32.dll!GetTimeFormatW [+] 0xAB49A00E = kernel32.dll!GetTimeZoneInformation [+] 0x7551EE96 = kernel32.dll!GetTimeZoneInformationForYear [+] 0x8E735FCF = kernel32.dll!GetUILanguageInfo [+] 0xA2C4FE61 = kernel32.dll!GetUserDefaultLCID [+] 0xE04B5AED = kernel32.dll!GetUserDefaultLangID [+] 0x91A9B644 = kernel32.dll!GetUserDefaultLocaleName [+] 0xBAB2F4C8 = kernel32.dll!GetUserDefaultUILanguage [+] 0x686A326B = kernel32.dll!GetUserGeoID [+] 0xC26FFAD1 = kernel32.dll!GetUserPreferredUILanguages [+] 0x64A96E97 = kernel32.dll!GetVDMCurrentDirectories [+] 0x9DBD95A6 = kernel32.dll!GetVersion [+] 0xB6CD51D8 = kernel32.dll!GetVersionExA [+] 0xB77D51D8 = kernel32.dll!GetVersionExW [+] 0x9FB36C6C = kernel32.dll!GetVolumeInformationA [+] 0x79FE85A7 = kernel32.dll!GetVolumeInformationByHandleW [+] 0xA0636C6C = kernel32.dll!GetVolumeInformationW [+] 0xE981FE48 = kernel32.dll!GetVolumeNameForVolumeMountPointA [+] 0xEA31FE48 = kernel32.dll!GetVolumeNameForVolumeMountPointW [+] 0x1A6F955E = kernel32.dll!GetVolumePathNameA [+] 0x1B1F955E = kernel32.dll!GetVolumePathNameW [+] 0x1F7BDF43 = kernel32.dll!GetVolumePathNamesForVolumeNameA [+] 0x202BDF43 = kernel32.dll!GetVolumePathNamesForVolumeNameW [+] 0x721EDE40 = kernel32.dll!GetWindowsDirectoryA [+] 0x72CEDE40 = kernel32.dll!GetWindowsDirectoryW [+] 0x4CF4E4AC = kernel32.dll!GetWriteWatch [+] 0xAC1701C4 = kernel32.dll!GlobalAddAtomA [+] 0xACC701C4 = kernel32.dll!GlobalAddAtomW [+] 0x520F76F6 = kernel32.dll!GlobalAlloc [+] 0xEA73470A = kernel32.dll!GlobalCompact [+] 0x1E0F399C = kernel32.dll!GlobalDeleteAtom [+] 0x7594663F = kernel32.dll!GlobalFindAtomA [+] 0x7644663F = kernel32.dll!GlobalFindAtomW [+] 0x1000372B = kernel32.dll!GlobalFix [+] 0xBC8F74F9 = kernel32.dll!GlobalFlags [+] 0xAA62FCA3 = kernel32.dll!GlobalFree [+] 0x6D6DE21B = kernel32.dll!GlobalGetAtomNameA [+] 0x6E1DE21B = kernel32.dll!GlobalGetAtomNameW [+] 0x00D93417 = kernel32.dll!GlobalHandle [+] 0xA4935C23 = kernel32.dll!GlobalLock [+] 0xBA9757CD = kernel32.dll!GlobalMemoryStatus [+] 0x907F64E3 = kernel32.dll!GlobalMemoryStatusEx [+] 0xFFC30BD4 = kernel32.dll!GlobalReAlloc [+] 0x9863D1E3 = kernel32.dll!GlobalSize [+] 0x8B0BC59D = kernel32.dll!GlobalUnWire [+] 0x46B79580 = kernel32.dll!GlobalUnfix [+] 0x973D11DE = kernel32.dll!GlobalUnlock [+] 0x98640FE3 = kernel32.dll!GlobalWire [+] 0x2BB0D237 = kernel32.dll!Heap32First [+] 0x960FCD34 = kernel32.dll!Heap32ListFirst [+] 0xA182D852 = kernel32.dll!Heap32ListNext [+] 0xC2234B06 = kernel32.dll!Heap32Next [+] 0x54903EDB = kernel32.dll!HeapAlloc [+] 0x8AA5404A = kernel32.dll!HeapCompact [+] 0xB9ECBA26 = kernel32.dll!HeapCreate [+] 0xACA5836E = kernel32.dll!HeapDestroy [+] 0xC35F9CF3 = kernel32.dll!HeapFree [+] 0xBD8FFC73 = kernel32.dll!HeapLock [+] 0x4B031A4A = kernel32.dll!HeapQueryInformation [+] 0x9FF50515 = kernel32.dll!HeapReAlloc [+] 0x1E52079D = kernel32.dll!HeapSetInformation [+] 0xB1607233 = kernel32.dll!HeapSize [+] 0x8AE5160A = kernel32.dll!HeapSummary [+] 0xD66525E4 = kernel32.dll!HeapUnlock [+] 0x705B04C7 = kernel32.dll!HeapValidate [+] 0xA190AEB3 = kernel32.dll!HeapWalk [+] 0x8BBD8BCD = kernel32.dll!IdnToAscii [+] 0x88E9E7CA = kernel32.dll!IdnToNameprepUnicode [+] 0xE5600F5B = kernel32.dll!IdnToUnicode [+] 0xF4E55EE2 = kernel32.dll!InitAtomTable [+] 0x6C1D318D = kernel32.dll!InitOnceBeginInitialize [+] 0x5FBBD309 = kernel32.dll!InitOnceComplete [+] 0x84AFAA2D = kernel32.dll!InitOnceExecuteOnce [+] 0x5CF9B9CC = kernel32.dll!InitOnceInitialize [+] 0xE61E41D1 = kernel32.dll!InitializeConditionVariable [+] 0x2B0C2036 = kernel32.dll!InitializeCriticalSection [+] 0xF8BD618F = kernel32.dll!InitializeCriticalSectionAndSpinCount [+] 0xADB17F40 = kernel32.dll!InitializeCriticalSectionEx [+] 0x20EE578C = kernel32.dll!InitializeExtendedContext [+] 0x0AAE0A00 = kernel32.dll!InitializeProcThreadAttributeList [+] 0x608C7473 = kernel32.dll!InitializeSListHead [+] 0xF01FA2A6 = kernel32.dll!InitializeSRWLock [+] 0x57BDB9EE = kernel32.dll!InterlockedCompareExchange [+] 0xD7F7E98B = kernel32.dll!InterlockedCompareExchange64 [+] 0xA6DED0F1 = kernel32.dll!InterlockedDecrement [+] 0x8CA9BBC6 = kernel32.dll!InterlockedExchange [+] 0xF1C32524 = kernel32.dll!InterlockedExchangeAdd [+] 0xEF12602B = kernel32.dll!InterlockedFlushSList [+] 0xAFDEF8F1 = kernel32.dll!InterlockedIncrement [+] 0xB13BAF02 = kernel32.dll!InterlockedPopEntrySList [+] 0x896C0A47 = kernel32.dll!InterlockedPushEntrySList [+] 0x662C9F8A = kernel32.dll!InterlockedPushListSList [+] 0xEBB95099 = kernel32.dll!InvalidateConsoleDIBits [+] 0x1CEA990D = kernel32.dll!IsBadCodePtr [+] 0xEE36C4B7 = kernel32.dll!IsBadHugeReadPtr [+] 0xC24B453F = kernel32.dll!IsBadHugeWritePtr [+] 0x9CC28AEC = kernel32.dll!IsBadReadPtr [+] 0x7241B2DC = kernel32.dll!IsBadStringPtrA [+] 0x72F1B2DC = kernel32.dll!IsBadStringPtrW [+] 0xF3F0B99D = kernel32.dll!IsBadWritePtr [+] 0xA965CD85 = kernel32.dll!IsCalendarLeapDay [+] 0xAD9DBEA4 = kernel32.dll!IsCalendarLeapMonth [+] 0x5399168F = kernel32.dll!IsCalendarLeapYear [+] 0xCF6720FE = kernel32.dll!IsDBCSLeadByte [+] 0xC471B129 = kernel32.dll!IsDBCSLeadByteEx [+] 0xC6643248 = kernel32.dll!IsDebuggerPresent [+] 0xC3992521 = kernel32.dll!IsNLSDefinedString [+] 0x382600E5 = kernel32.dll!IsNormalizedString [+] 0x0AFA623B = kernel32.dll!IsProcessInJob [+] 0x99F2DD32 = kernel32.dll!IsProcessorFeaturePresent [+] 0xE59E5E41 = kernel32.dll!IsSystemResumeAutomatic [+] 0x769E1E1A = kernel32.dll!IsThreadAFiber [+] 0x4A6031DA = kernel32.dll!IsThreadpoolTimerSet [+] 0x3F5C5BC3 = kernel32.dll!IsTimeZoneRedirectionEnabled [+] 0xD54D986A = kernel32.dll!IsValidCalDateTime [+] 0xA84930E1 = kernel32.dll!IsValidCodePage [+] 0x03988862 = kernel32.dll!IsValidLanguageGroup [+] 0xA73CD5DB = kernel32.dll!IsValidLocale [+] 0x33CC2363 = kernel32.dll!IsValidLocaleName [+] 0x10764760 = kernel32.dll!IsWow64Process [+] 0x5BE2E2A8 = kernel32.dll!K32EmptyWorkingSet [+] 0x06F5D6B5 = kernel32.dll!K32EnumDeviceDrivers [+] 0xBEE72632 = kernel32.dll!K32EnumPageFilesA [+] 0xBF972632 = kernel32.dll!K32EnumPageFilesW [+] 0x3EB05077 = kernel32.dll!K32EnumProcessModules [+] 0x96BD8F85 = kernel32.dll!K32EnumProcessModulesEx [+] 0x3392BD2F = kernel32.dll!K32EnumProcesses [+] 0x0E1426AD = kernel32.dll!K32GetDeviceDriverBaseNameA [+] 0x0EC426AD = kernel32.dll!K32GetDeviceDriverBaseNameW [+] 0x161445CD = kernel32.dll!K32GetDeviceDriverFileNameA [+] 0x16C445CD = kernel32.dll!K32GetDeviceDriverFileNameW [+] 0xF478F010 = kernel32.dll!K32GetMappedFileNameA [+] 0xF528F010 = kernel32.dll!K32GetMappedFileNameW [+] 0x26870940 = kernel32.dll!K32GetModuleBaseNameA [+] 0x27370940 = kernel32.dll!K32GetModuleBaseNameW [+] 0x92BB9681 = kernel32.dll!K32GetModuleFileNameExA [+] 0x936B9681 = kernel32.dll!K32GetModuleFileNameExW [+] 0x265A58BC = kernel32.dll!K32GetModuleInformation [+] 0x50F4B7FF = kernel32.dll!K32GetPerformanceInfo [+] 0x86AB9290 = kernel32.dll!K32GetProcessImageFileNameA [+] 0x875B9290 = kernel32.dll!K32GetProcessImageFileNameW [+] 0x4B4A5719 = kernel32.dll!K32GetProcessMemoryInfo [+] 0xD2BBA142 = kernel32.dll!K32GetWsChanges [+] 0x9991C22A = kernel32.dll!K32GetWsChangesEx [+] 0x33715C17 = kernel32.dll!K32InitializeProcessForWsWatch [+] 0xD663028A = kernel32.dll!K32QueryWorkingSet [+] 0x836A142A = kernel32.dll!K32QueryWorkingSetEx [+] 0xBFBABFC9 = kernel32.dll!LCIDToLocaleName [+] 0x2316D807 = kernel32.dll!LCMapStringA [+] 0x9FDB9B18 = kernel32.dll!LCMapStringEx [+] 0x23C6D807 = kernel32.dll!LCMapStringW [+] 0xF545FD3C = kernel32.dll!LZClose [+] 0xD641B804 = kernel32.dll!LZCloseFile [+] 0x75AB6307 = kernel32.dll!LZCopy [+] 0x768AFC7A = kernel32.dll!LZCreateFileW [+] 0x750B7287 = kernel32.dll!LZDone [+] 0x7383C147 = kernel32.dll!LZInit [+] 0x5F1044F4 = kernel32.dll!LZOpenFileA [+] 0x5FC044F4 = kernel32.dll!LZOpenFileW [+] 0x61044F47 = kernel32.dll!LZRead [+] 0x613C6047 = kernel32.dll!LZSeek [+] 0xD9BE7D04 = kernel32.dll!LZStart [+] 0x83B72242 = kernel32.dll!LeaveCriticalSection [+] 0xE830B2C0 = kernel32.dll!LeaveCriticalSectionWhenCallbackReturns [+] 0x69F6C23A = kernel32.dll!LoadAppInitDlls [+] 0x0726774C = kernel32.dll!LoadLibraryA [+] 0xBA8F5177 = kernel32.dll!LoadLibraryExA [+] 0xBB3F5177 = kernel32.dll!LoadLibraryExW [+] 0x07D6774C = kernel32.dll!LoadLibraryW [+] 0x6214F6A5 = kernel32.dll!LoadModule [+] 0x8E8BB14A = kernel32.dll!LoadResource [+] 0x92C9971B = kernel32.dll!LoadStringBaseExW [+] 0x9734A063 = kernel32.dll!LoadStringBaseW [+] 0x528176EE = kernel32.dll!LocalAlloc [+] 0x06F3450A = kernel32.dll!LocalCompact [+] 0x3079AB69 = kernel32.dll!LocalFileTimeToFileTime [+] 0xBD0174F1 = kernel32.dll!LocalFlags [+] 0xEA61FCB1 = kernel32.dll!LocalFree [+] 0x009937A7 = kernel32.dll!LocalHandle [+] 0xE4925C31 = kernel32.dll!LocalLock [+] 0x1C4309D4 = kernel32.dll!LocalReAlloc [+] 0x8AF5782A = kernel32.dll!LocalShrink [+] 0xD862D1F1 = kernel32.dll!LocalSize [+] 0x96FD156E = kernel32.dll!LocalUnlock [+] 0x9ABE90D4 = kernel32.dll!LocaleNameToLCID [+] 0x491F5464 = kernel32.dll!LocateExtendedFeature [+] 0xDE06CB01 = kernel32.dll!LocateLegacyContext [+] 0x35679FF0 = kernel32.dll!LockFile [+] 0x44916DC2 = kernel32.dll!LockFileEx [+] 0x0E8BE94B = kernel32.dll!LockResource [+] 0x3E6827B9 = kernel32.dll!MapUserPhysicalPages [+] 0x76F496A0 = kernel32.dll!MapUserPhysicalPagesScatter [+] 0x757AEF13 = kernel32.dll!MapViewOfFile [+] 0x49653692 = kernel32.dll!MapViewOfFileEx [+] 0xE1B79D86 = kernel32.dll!MapViewOfFileExNuma [+] 0x4769312B = kernel32.dll!Module32First [+] 0x67F4BCAA = kernel32.dll!Module32FirstW [+] 0xCE01CE7D = kernel32.dll!Module32Next [+] 0x5280F16F = kernel32.dll!Module32NextW [+] 0xDD5436FE = kernel32.dll!MoveFileA [+] 0x45FF3DEC = kernel32.dll!MoveFileExA [+] 0x46AF3DEC = kernel32.dll!MoveFileExW [+] 0xE114CE92 = kernel32.dll!MoveFileTransactedA [+] 0xE1C4CE92 = kernel32.dll!MoveFileTransactedW [+] 0xDE0436FE = kernel32.dll!MoveFileW [+] 0xA4961AA3 = kernel32.dll!MoveFileWithProgressA [+] 0xA5461AA3 = kernel32.dll!MoveFileWithProgressW [+] 0x9F99F155 = kernel32.dll!MulDiv [+] 0xB9D69130 = kernel32.dll!MultiByteToWideChar [+] 0xD1081FAD = kernel32.dll!NeedCurrentDirectoryForExePathA [+] 0xD1B81FAD = kernel32.dll!NeedCurrentDirectoryForExePathW [+] 0x8348647C = kernel32.dll!NlsCheckPolicy [+] 0xCB545E3B = kernel32.dll!NlsEventDataDescCreate [+] 0x01527654 = kernel32.dll!NlsGetCacheUpdateCount [+] 0x47722C25 = kernel32.dll!NlsUpdateLocale [+] 0x2750CE92 = kernel32.dll!NlsUpdateSystemLocale [+] 0xD3D79C48 = kernel32.dll!NlsWriteEtwEvent [+] 0xDD016A2A = kernel32.dll!NormalizeString [+] 0x3771860B = kernel32.dll!NotifyMountMgr [+] 0xC548E37D = kernel32.dll!NotifyUILanguageChange [+] 0x7309A33D = kernel32.dll!OpenConsoleW [+] 0x96D511EA = kernel32.dll!OpenEventA [+] 0x978511EA = kernel32.dll!OpenEventW [+] 0xB86FA012 = kernel32.dll!OpenFile [+] 0x9066CB76 = kernel32.dll!OpenFileById [+] 0xF7A38D7C = kernel32.dll!OpenFileMappingA [+] 0xF8538D7C = kernel32.dll!OpenFileMappingW [+] 0x77264852 = kernel32.dll!OpenJobObjectA [+] 0x77D64852 = kernel32.dll!OpenJobObjectW [+] 0x04F602E9 = kernel32.dll!OpenMutexA [+] 0x05A602E9 = kernel32.dll!OpenMutexW [+] 0xB6F280DB = kernel32.dll!OpenPrivateNamespaceA [+] 0xB7A280DB = kernel32.dll!OpenPrivateNamespaceW [+] 0x50B695EE = kernel32.dll!OpenProcess [+] 0xCB29DFCF = kernel32.dll!OpenProcessToken [+] 0xF6C8EF7F = kernel32.dll!OpenProfileUserMapping [+] 0xE05E96D4 = kernel32.dll!OpenSemaphoreA [+] 0xE10E96D4 = kernel32.dll!OpenSemaphoreW [+] 0x8629DD22 = kernel32.dll!OpenThread [+] 0xE5E38369 = kernel32.dll!OpenThreadToken [+] 0x919F8665 = kernel32.dll!OpenWaitableTimerA [+] 0x924F8665 = kernel32.dll!OpenWaitableTimerW [+] 0xA8914F43 = kernel32.dll!OutputDebugStringA [+] 0xA9414F43 = kernel32.dll!OutputDebugStringW [+] 0x6EA86E4B = kernel32.dll!PeekConsoleInputA [+] 0x6F586E4B = kernel32.dll!PeekConsoleInputW [+] 0xB33CB718 = kernel32.dll!PeekNamedPipe [+] 0xF7BB366E = kernel32.dll!PostQueuedCompletionStatus [+] 0xAE3630EC = kernel32.dll!PowerClearRequest [+] 0x5DB100D0 = kernel32.dll!PowerCreateRequest [+] 0x52537882 = kernel32.dll!PowerSetRequest [+] 0xCA47A74A = kernel32.dll!PrepareTape [+] 0x8F1CDD56 = kernel32.dll!PrivCopyFileExW [+] 0x4519891C = kernel32.dll!PrivMoveFileIdentityW [+] 0x67E8A927 = kernel32.dll!Process32First [+] 0x27D5C0A6 = kernel32.dll!Process32FirstW [+] 0xBD01528D = kernel32.dll!Process32Next [+] 0x7300696B = kernel32.dll!Process32NextW [+] 0xB9F47937 = kernel32.dll!ProcessIdToSessionId [+] 0x4DEE48F1 = kernel32.dll!PulseEvent [+] 0x6AB9F08D = kernel32.dll!PurgeComm [+] 0xCEE4383B = kernel32.dll!QueryActCtxSettingsW [+] 0x38E5025E = kernel32.dll!QueryActCtxW [+] 0xAD6B0580 = kernel32.dll!QueryDepthSList [+] 0x22C91C11 = kernel32.dll!QueryDosDeviceA [+] 0x23791C11 = kernel32.dll!QueryDosDeviceW [+] 0x46A6C9E1 = kernel32.dll!QueryFullProcessImageNameA [+] 0x4756C9E1 = kernel32.dll!QueryFullProcessImageNameW [+] 0x88CDB366 = kernel32.dll!QueryIdleProcessorCycleTime [+] 0x1E164B57 = kernel32.dll!QueryIdleProcessorCycleTimeEx [+] 0x6A438D0C = kernel32.dll!QueryInformationJobObject [+] 0x11A5A8B3 = kernel32.dll!QueryMemoryResourceNotification [+] 0x1D8E6AB1 = kernel32.dll!QueryPerformanceCounter [+] 0xC9583B7D = kernel32.dll!QueryPerformanceFrequency [+] 0x084BA3BB = kernel32.dll!QueryProcessAffinityUpdateMode [+] 0x01EFA6F8 = kernel32.dll!QueryProcessCycleTime [+] 0x460C2AB6 = kernel32.dll!QueryThreadCycleTime [+] 0x3F061478 = kernel32.dll!QueryThreadProfiling [+] 0xCF16E448 = kernel32.dll!QueryThreadpoolStackInformation [+] 0x923C95F1 = kernel32.dll!QueryUnbiasedInterruptTime [+] 0x3E8802D6 = kernel32.dll!QueueUserAPC [+] 0x6AC43A2E = kernel32.dll!QueueUserWorkItem [+] 0x5323F5DC = kernel32.dll!RaiseException [+] 0xCF76C6EC = kernel32.dll!RaiseFailFastException [+] 0x3872C826 = kernel32.dll!ReOpenFile [+] 0x7243536C = kernel32.dll!ReadConsoleA [+] 0xEEA8525B = kernel32.dll!ReadConsoleInputA [+] 0x9B061531 = kernel32.dll!ReadConsoleInputExA [+] 0x9BB61531 = kernel32.dll!ReadConsoleInputExW [+] 0xEF58525B = kernel32.dll!ReadConsoleInputW [+] 0x72DDB425 = kernel32.dll!ReadConsoleOutputA [+] 0xC185912D = kernel32.dll!ReadConsoleOutputAttribute [+] 0x363020CE = kernel32.dll!ReadConsoleOutputCharacterA [+] 0x36E020CE = kernel32.dll!ReadConsoleOutputCharacterW [+] 0x738DB425 = kernel32.dll!ReadConsoleOutputW [+] 0x72F3536C = kernel32.dll!ReadConsoleW [+] 0xFFE7D863 = kernel32.dll!ReadDirectoryChangesW [+] 0xBB5F9EAD = kernel32.dll!ReadFile [+] 0xC2911CE4 = kernel32.dll!ReadFileEx [+] 0x15E37510 = kernel32.dll!ReadFileScatter [+] 0x71F9D3C2 = kernel32.dll!ReadProcessMemory [+] 0x732C8D9E = kernel32.dll!ReadThreadProfilingData [+] 0x31E0C5ED = kernel32.dll!RegCloseKey [+] 0xC8537201 = kernel32.dll!RegCreateKeyExA [+] 0xC9037201 = kernel32.dll!RegCreateKeyExW [+] 0x88399212 = kernel32.dll!RegDeleteKeyExA [+] 0x88E99212 = kernel32.dll!RegDeleteKeyExW [+] 0x385F0D4E = kernel32.dll!RegDeleteTreeA [+] 0x390F0D4E = kernel32.dll!RegDeleteTreeW [+] 0xE864BD51 = kernel32.dll!RegDeleteValueA [+] 0xE914BD51 = kernel32.dll!RegDeleteValueW [+] 0x186D502E = kernel32.dll!RegDisablePredefinedCacheEx [+] 0x7EBC490E = kernel32.dll!RegEnumKeyExA [+] 0x7F6C490E = kernel32.dll!RegEnumKeyExW [+] 0xDEE7744D = kernel32.dll!RegEnumValueA [+] 0xDF97744D = kernel32.dll!RegEnumValueW [+] 0x34F8F5ED = kernel32.dll!RegFlushKey [+] 0x908A4EAB = kernel32.dll!RegGetKeySecurity [+] 0x25E23C05 = kernel32.dll!RegGetValueA [+] 0x26923C05 = kernel32.dll!RegGetValueW [+] 0x68D3E7EA = kernel32.dll!RegKrnGetGlobalState [+] 0x5935174A = kernel32.dll!RegKrnInitialize [+] 0xECE72B46 = kernel32.dll!RegLoadKeyA [+] 0xED972B46 = kernel32.dll!RegLoadKeyW [+] 0x143EABF4 = kernel32.dll!RegLoadMUIStringA [+] 0x14EEABF4 = kernel32.dll!RegLoadMUIStringW [+] 0xD77BEE00 = kernel32.dll!RegNotifyChangeKeyValue [+] 0x57EEE724 = kernel32.dll!RegOpenCurrentUser [+] 0xEEBC5931 = kernel32.dll!RegOpenKeyExA [+] 0xEF6C5931 = kernel32.dll!RegOpenKeyExW [+] 0xC8945EF1 = kernel32.dll!RegOpenUserClassesRoot [+] 0x72F55E8B = kernel32.dll!RegQueryInfoKeyA [+] 0x73A55E8B = kernel32.dll!RegQueryInfoKeyW [+] 0x400EFCAE = kernel32.dll!RegQueryValueExA [+] 0x40BEFCAE = kernel32.dll!RegQueryValueExW [+] 0xC7ACD9B7 = kernel32.dll!RegRestoreKeyA [+] 0xC85CD9B7 = kernel32.dll!RegRestoreKeyW [+] 0xFFBBE012 = kernel32.dll!RegSaveKeyExA [+] 0x006BE012 = kernel32.dll!RegSaveKeyExW [+] 0x908A7EAB = kernel32.dll!RegSetKeySecurity [+] 0x69987FBE = kernel32.dll!RegSetValueExA [+] 0x6A487FBE = kernel32.dll!RegSetValueExW [+] 0x16116992 = kernel32.dll!RegUnLoadKeyA [+] 0x16C16992 = kernel32.dll!RegUnLoadKeyW [+] 0x5CF3272E = kernel32.dll!RegisterApplicationRecoveryCallback [+] 0xD0777062 = kernel32.dll!RegisterApplicationRestart [+] 0xC669D647 = kernel32.dll!RegisterConsoleIME [+] 0xD1D1D7C7 = kernel32.dll!RegisterConsoleOS2 [+] 0xE0A9D407 = kernel32.dll!RegisterConsoleVDM [+] 0xFEFE7FD1 = kernel32.dll!RegisterWaitForInputIdle [+] 0xC6C9B287 = kernel32.dll!RegisterWaitForSingleObject [+] 0x9D161367 = kernel32.dll!RegisterWaitForSingleObjectEx [+] 0x3E3352B7 = kernel32.dll!RegisterWowBaseHandlers [+] 0xEDF24DEE = kernel32.dll!RegisterWowExec [+] 0x7A558F15 = kernel32.dll!ReleaseActCtx [+] 0x61D7BBDC = kernel32.dll!ReleaseMutex [+] 0x2963E67C = kernel32.dll!ReleaseMutexWhenCallbackReturns [+] 0xFFE1C2CD = kernel32.dll!ReleaseSRWLockExclusive [+] 0xA3B62C1E = kernel32.dll!ReleaseSRWLockShared [+] 0xEE1E0F69 = kernel32.dll!ReleaseSemaphore [+] 0xB60AFF95 = kernel32.dll!ReleaseSemaphoreWhenCallbackReturns [+] 0xC4EB3573 = kernel32.dll!RemoveDirectoryA [+] 0x1AFA8E2F = kernel32.dll!RemoveDirectoryTransactedA [+] 0x1BAA8E2F = kernel32.dll!RemoveDirectoryTransactedW [+] 0xC59B3573 = kernel32.dll!RemoveDirectoryW [+] 0x875B815D = kernel32.dll!RemoveDllDirectory [+] 0xCE865B7A = kernel32.dll!RemoveLocalAlternateComputerNameA [+] 0xCF365B7A = kernel32.dll!RemoveLocalAlternateComputerNameW [+] 0xA86529DC = kernel32.dll!RemoveSecureMemoryCacheCallback [+] 0x0AE39657 = kernel32.dll!RemoveVectoredContinueHandler [+] 0xDE847691 = kernel32.dll!RemoveVectoredExceptionHandler [+] 0x960F1E47 = kernel32.dll!ReplaceFile [+] 0xD01F31DA = kernel32.dll!ReplaceFileA [+] 0xD0CF31DA = kernel32.dll!ReplaceFileW [+] 0xAD5B3E11 = kernel32.dll!ReplacePartitionUnit [+] 0xB916B0DE = kernel32.dll!RequestDeviceWakeup [+] 0xED02D53A = kernel32.dll!RequestWakeupLatency [+] 0xD529C732 = kernel32.dll!ResetEvent [+] 0xA2F678B7 = kernel32.dll!ResetWriteWatch [+] 0xD3C05C7F = kernel32.dll!ResolveLocaleName [+] 0x78509433 = kernel32.dll!RestoreLastError [+] 0x8EF4092B = kernel32.dll!ResumeThread [+] 0xB8F3232D = kernel32.dll!RtlCaptureContext [+] 0x916875BA = kernel32.dll!RtlCaptureStackBackTrace [+] 0x0B8D605F = kernel32.dll!RtlFillMemory [+] 0xD58D8F81 = kernel32.dll!RtlMoveMemory [+] 0xDD2D4012 = kernel32.dll!RtlUnwind [+] 0x118D40C4 = kernel32.dll!RtlZeroMemory [+] 0x2B157374 = kernel32.dll!ScrollConsoleScreenBufferA [+] 0x2BC57374 = kernel32.dll!ScrollConsoleScreenBufferW [+] 0x3106557C = kernel32.dll!SearchPathA [+] 0x31B6557C = kernel32.dll!SearchPathW [+] 0x49366515 = kernel32.dll!SetCalendarInfoA [+] 0x49E66515 = kernel32.dll!SetCalendarInfoW [+] 0xD5BB8D52 = kernel32.dll!SetClientTimeZoneInformation [+] 0xD33B7F1B = kernel32.dll!SetComPlusPackageInstallStatus [+] 0xD18E7A29 = kernel32.dll!SetCommBreak [+] 0x3A659D53 = kernel32.dll!SetCommConfig [+] 0x5D69B1CA = kernel32.dll!SetCommMask [+] 0x495E9EF1 = kernel32.dll!SetCommState [+] 0x30E53183 = kernel32.dll!SetCommTimeouts [+] 0xA737CBFB = kernel32.dll!SetComputerNameA [+] 0xBEE47D1F = kernel32.dll!SetComputerNameExA [+] 0xBF947D1F = kernel32.dll!SetComputerNameExW [+] 0xA7E7CBFB = kernel32.dll!SetComputerNameW [+] 0x17926226 = kernel32.dll!SetConsoleActiveScreenBuffer [+] 0x50CE12DF = kernel32.dll!SetConsoleCP [+] 0xD3AD374C = kernel32.dll!SetConsoleCtrlHandler [+] 0xEC06AE8F = kernel32.dll!SetConsoleCursor [+] 0xEBA715F0 = kernel32.dll!SetConsoleCursorInfo [+] 0xED575570 = kernel32.dll!SetConsoleCursorMode [+] 0xEF4BD847 = kernel32.dll!SetConsoleCursorPosition [+] 0x9D45D38F = kernel32.dll!SetConsoleDisplayMode [+] 0x5C0E63C9 = kernel32.dll!SetConsoleFont [+] 0x35E5B7AB = kernel32.dll!SetConsoleHardwareState [+] 0x9FE1946F = kernel32.dll!SetConsoleHistoryInfo [+] 0x43DE9409 = kernel32.dll!SetConsoleIcon [+] 0xF1406D7D = kernel32.dll!SetConsoleInputExeNameA [+] 0xF1F06D7D = kernel32.dll!SetConsoleInputExeNameW [+] 0x99C9C995 = kernel32.dll!SetConsoleKeyShortcuts [+] 0x232F4D28 = kernel32.dll!SetConsoleLocalEUDC [+] 0x06CC455C = kernel32.dll!SetConsoleMaximumWindowSize [+] 0xCE91D234 = kernel32.dll!SetConsoleMenuClose [+] 0x5B96D149 = kernel32.dll!SetConsoleMode [+] 0xD35B7F77 = kernel32.dll!SetConsoleNlsMode [+] 0x587CA88B = kernel32.dll!SetConsoleNumberOfCommandsA [+] 0x592CA88B = kernel32.dll!SetConsoleNumberOfCommandsW [+] 0x45FE94C0 = kernel32.dll!SetConsoleOS2OemFormat [+] 0x7B1D74EE = kernel32.dll!SetConsoleOutputCP [+] 0x5D3103B3 = kernel32.dll!SetConsolePalette [+] 0x33001D8F = kernel32.dll!SetConsoleScreenBufferInfoEx [+] 0x5ED1FFAF = kernel32.dll!SetConsoleScreenBufferSize [+] 0x7722E83A = kernel32.dll!SetConsoleTextAttribute [+] 0xDCC2CC09 = kernel32.dll!SetConsoleTitleA [+] 0xDD72CC09 = kernel32.dll!SetConsoleTitleW [+] 0x67A6B417 = kernel32.dll!SetConsoleWindowInfo [+] 0x2417A909 = kernel32.dll!SetCriticalSectionSpinCount [+] 0x656F5335 = kernel32.dll!SetCurrentConsoleFontEx [+] 0xAD2D1512 = kernel32.dll!SetCurrentDirectoryA [+] 0xADDD1512 = kernel32.dll!SetCurrentDirectoryW [+] 0x4D9547C8 = kernel32.dll!SetDefaultCommConfigA [+] 0x4E4547C8 = kernel32.dll!SetDefaultCommConfigW [+] 0xBB1A281A = kernel32.dll!SetDefaultDllDirectories [+] 0xAF7A50D3 = kernel32.dll!SetDllDirectoryA [+] 0xB02A50D3 = kernel32.dll!SetDllDirectoryW [+] 0x75CD3910 = kernel32.dll!SetDynamicTimeZoneInformation [+] 0xD7E3CBDB = kernel32.dll!SetEndOfFile [+] 0x8B71944C = kernel32.dll!SetEnvironmentStringsA [+] 0x8C21944C = kernel32.dll!SetEnvironmentStringsW [+] 0xDF4EADE7 = kernel32.dll!SetEnvironmentVariableA [+] 0xDFFEADE7 = kernel32.dll!SetEnvironmentVariableW [+] 0xE8643BA1 = kernel32.dll!SetErrorMode [+] 0x35269F1D = kernel32.dll!SetEvent [+] 0xC72A6823 = kernel32.dll!SetEventWhenCallbackReturns [+] 0xB9783F5A = kernel32.dll!SetExtendedFeaturesMask [+] 0x10FEEBA9 = kernel32.dll!SetFileApisToANSI [+] 0xA919041B = kernel32.dll!SetFileApisToOEM [+] 0x5E01CE93 = kernel32.dll!SetFileAttributesA [+] 0x41403477 = kernel32.dll!SetFileAttributesTransactedA [+] 0x41F03477 = kernel32.dll!SetFileAttributesTransactedW [+] 0x5EB1CE93 = kernel32.dll!SetFileAttributesW [+] 0xD30B7D30 = kernel32.dll!SetFileBandwidthReservation [+] 0x0C1896A2 = kernel32.dll!SetFileCompletionNotificationModes [+] 0xEF501773 = kernel32.dll!SetFileInformationByHandle [+] 0xED3DDBC5 = kernel32.dll!SetFileIoOverlappedRange [+] 0xD812CDAA = kernel32.dll!SetFilePointer [+] 0xEF5CDC2B = kernel32.dll!SetFilePointerEx [+] 0x5540AFFD = kernel32.dll!SetFileShortNameA [+] 0x55F0AFFD = kernel32.dll!SetFileShortNameW [+] 0x70361F86 = kernel32.dll!SetFileTime [+] 0xBE8F0843 = kernel32.dll!SetFileValidData [+] 0xE18EBFF2 = kernel32.dll!SetFirmwareEnvironmentVariableA [+] 0xE23EBFF2 = kernel32.dll!SetFirmwareEnvironmentVariableW [+] 0x8C46B3A7 = kernel32.dll!SetHandleContext [+] 0xD8FEF355 = kernel32.dll!SetHandleCount [+] 0x1CD313CA = kernel32.dll!SetHandleInformation [+] 0xE00097D6 = kernel32.dll!SetInformationJobObject [+] 0x55513F3A = kernel32.dll!SetLastConsoleEventActive [+] 0x5DE2C66A = kernel32.dll!SetLastError [+] 0xD36A38BA = kernel32.dll!SetLocalPrimaryComputerNameA [+] 0xD41A38BA = kernel32.dll!SetLocalPrimaryComputerNameW [+] 0xD92CE3FE = kernel32.dll!SetLocalTime [+] 0x366E8B9B = kernel32.dll!SetLocaleInfoA [+] 0x371E8B9B = kernel32.dll!SetLocaleInfoW [+] 0xC1AEC70A = kernel32.dll!SetMailslotInfo [+] 0x04CFBCC9 = kernel32.dll!SetMessageWaitingIndicator [+] 0xE2A06C54 = kernel32.dll!SetNamedPipeAttribute [+] 0xBC4662B8 = kernel32.dll!SetNamedPipeHandleState [+] 0xCC5C6985 = kernel32.dll!SetPriorityClass [+] 0xFF434DF9 = kernel32.dll!SetProcessAffinityMask [+] 0xC32A2920 = kernel32.dll!SetProcessAffinityUpdateMode [+] 0x7AB885ED = kernel32.dll!SetProcessDEPPolicy [+] 0xEBF3FB9C = kernel32.dll!SetProcessPreferredUILanguages [+] 0x4ED17E37 = kernel32.dll!SetProcessPriorityBoost [+] 0xE4F8FCE0 = kernel32.dll!SetProcessShutdownParameters [+] 0xEEC7793D = kernel32.dll!SetProcessWorkingSetSize [+] 0x9C87C0F1 = kernel32.dll!SetProcessWorkingSetSizeEx [+] 0x3979A0FE = kernel32.dll!SetSearchPathMode [+] 0x53CABBD8 = kernel32.dll!SetStdHandle [+] 0xDD5867CA = kernel32.dll!SetStdHandleEx [+] 0xAD3F6F8F = kernel32.dll!SetSystemFileCacheSize [+] 0xC51974B8 = kernel32.dll!SetSystemPowerState [+] 0x46DC4F36 = kernel32.dll!SetSystemTime [+] 0x39307F5C = kernel32.dll!SetSystemTimeAdjustment [+] 0x05B5E168 = kernel32.dll!SetTapeParameters [+] 0xD4B94216 = kernel32.dll!SetTapePosition [+] 0xDA9FEBCA = kernel32.dll!SetTermsrvAppInstallMode [+] 0x00494C74 = kernel32.dll!SetThreadAffinityMask [+] 0xD14E5C18 = kernel32.dll!SetThreadContext [+] 0xB691DFF0 = kernel32.dll!SetThreadErrorMode [+] 0xA6DD1120 = kernel32.dll!SetThreadExecutionState [+] 0x0A1164FC = kernel32.dll!SetThreadGroupAffinity [+] 0x8A13EFE6 = kernel32.dll!SetThreadIdealProcessor [+] 0x6FA56B57 = kernel32.dll!SetThreadIdealProcessorEx [+] 0x54E22FF9 = kernel32.dll!SetThreadLocale [+] 0x66F5019A = kernel32.dll!SetThreadPreferredUILanguages [+] 0x2F55DC31 = kernel32.dll!SetThreadPriority [+] 0x42A98667 = kernel32.dll!SetThreadPriorityBoost [+] 0x56EB7B64 = kernel32.dll!SetThreadStackGuarantee [+] 0x05E30FBF = kernel32.dll!SetThreadToken [+] 0xB2774CC1 = kernel32.dll!SetThreadUILanguage [+] 0xFA3CBB3C = kernel32.dll!SetThreadpoolStackInformation [+] 0xBCC887C8 = kernel32.dll!SetThreadpoolThreadMaximum [+] 0xBCE887C3 = kernel32.dll!SetThreadpoolThreadMinimum [+] 0xAFF0F7C1 = kernel32.dll!SetThreadpoolTimer [+] 0xBF442910 = kernel32.dll!SetThreadpoolWait [+] 0xAB49A03E = kernel32.dll!SetTimeZoneInformation [+] 0xE377247C = kernel32.dll!SetTimerQueueTimer [+] 0xEA320EFE = kernel32.dll!SetUnhandledExceptionFilter [+] 0x686A332B = kernel32.dll!SetUserGeoID [+] 0x64A97A97 = kernel32.dll!SetVDMCurrentDirectories [+] 0xE7D0A031 = kernel32.dll!SetVolumeLabelA [+] 0xE880A031 = kernel32.dll!SetVolumeLabelW [+] 0x248D21C1 = kernel32.dll!SetVolumeMountPointA [+] 0x253D21C1 = kernel32.dll!SetVolumeMountPointW [+] 0xA083ABFF = kernel32.dll!SetWaitableTimer [+] 0x0B94715D = kernel32.dll!SetWaitableTimerEx [+] 0xDAF208D3 = kernel32.dll!SetupComm [+] 0x2C1BBD28 = kernel32.dll!ShowConsoleCursor [+] 0x711420EA = kernel32.dll!SignalObjectAndWait [+] 0x42F9102E = kernel32.dll!SizeofResource [+] 0xE035F044 = kernel32.dll!Sleep [+] 0xD20A320A = kernel32.dll!SleepConditionVariableCS [+] 0x8EE91172 = kernel32.dll!SleepConditionVariableSRW [+] 0xF82582AD = kernel32.dll!SleepEx [+] 0xEB895A11 = kernel32.dll!SortCloseHandle [+] 0x6E645F98 = kernel32.dll!SortGetHandle [+] 0x2C371DD3 = kernel32.dll!StartThreadpoolIo [+] 0x23811625 = kernel32.dll!SubmitThreadpoolWork [+] 0xF98F8B3B = kernel32.dll!SuspendThread [+] 0xEE56EA4B = kernel32.dll!SwitchToFiber [+] 0xB192EFD8 = kernel32.dll!SwitchToThread [+] 0x52014405 = kernel32.dll!SystemTimeToFileTime [+] 0x15D760B8 = kernel32.dll!SystemTimeToTzSpecificLocalTime [+] 0xFDEFD96B = kernel32.dll!TerminateJobObject [+] 0x5ECADC87 = kernel32.dll!TerminateProcess [+] 0x0EFCFEE5 = kernel32.dll!TerminateThread [+] 0xCDFF96FA = kernel32.dll!TermsrvAppInstallMode [+] 0x4A04D8B7 = kernel32.dll!Thread32First [+] 0x42F34ED0 = kernel32.dll!Thread32Next [+] 0x439A003B = kernel32.dll!TlsAlloc [+] 0xFB8B9AD4 = kernel32.dll!TlsFree [+] 0xB758E901 = kernel32.dll!TlsGetValue [+] 0xC358E901 = kernel32.dll!TlsSetValue [+] 0x03CC6809 = kernel32.dll!Toolhelp32ReadProcessMemory [+] 0x252C7186 = kernel32.dll!TransactNamedPipe [+] 0xE32A988A = kernel32.dll!TransmitCommChar [+] 0x8D99CBC9 = kernel32.dll!TryAcquireSRWLockExclusive [+] 0x7FBAAA64 = kernel32.dll!TryAcquireSRWLockShared [+] 0x2340B582 = kernel32.dll!TryEnterCriticalSection [+] 0xAC068794 = kernel32.dll!TrySubmitThreadpoolCallback [+] 0xBCD29D76 = kernel32.dll!TzSpecificLocalTimeToSystemTime [+] 0x91E50D04 = kernel32.dll!UTRegister [+] 0x928DE254 = kernel32.dll!UTUnRegister [+] 0x4A18CE54 = kernel32.dll!UnhandledExceptionFilter [+] 0x956B1006 = kernel32.dll!UnlockFile [+] 0x456D731A = kernel32.dll!UnlockFileEx [+] 0x257CA71E = kernel32.dll!UnmapViewOfFile [+] 0x1CFA0759 = kernel32.dll!UnregisterApplicationRecoveryCallback [+] 0xD5CF713E = kernel32.dll!UnregisterApplicationRestart [+] 0x1E6AB24C = kernel32.dll!UnregisterConsoleIME [+] 0xC4B7530E = kernel32.dll!UnregisterWait [+] 0x187E3526 = kernel32.dll!UnregisterWaitEx [+] 0x2E8255B6 = kernel32.dll!UpdateCalendarDayOfWeek [+] 0x51092608 = kernel32.dll!UpdateProcThreadAttribute [+] 0x5466B4E9 = kernel32.dll!UpdateResourceA [+] 0x5516B4E9 = kernel32.dll!UpdateResourceW [+] 0xC58E64EB = kernel32.dll!VDMConsoleOperation [+] 0xF8E31B4C = kernel32.dll!VDMOperationStarted [+] 0x5888C358 = kernel32.dll!VerLanguageNameA [+] 0x5938C358 = kernel32.dll!VerLanguageNameW [+] 0xA9BCDF98 = kernel32.dll!VerSetConditionMask [+] 0x2AC5F275 = kernel32.dll!VerifyConsoleIoHandle [+] 0x5CC104DE = kernel32.dll!VerifyScripts [+] 0x3EB75951 = kernel32.dll!VerifyVersionInfoA [+] 0x3F675951 = kernel32.dll!VerifyVersionInfoW [+] 0xE553A458 = kernel32.dll!VirtualAlloc [+] 0x3F9287AE = kernel32.dll!VirtualAllocEx [+] 0xB6C95CE9 = kernel32.dll!VirtualAllocExNuma [+] 0x300F2F0B = kernel32.dll!VirtualFree [+] 0xEE753481 = kernel32.dll!VirtualFreeEx [+] 0x2A3F8E8B = kernel32.dll!VirtualLock [+] 0xC38AE110 = kernel32.dll!VirtualProtect [+] 0xCD61B5A6 = kernel32.dll!VirtualProtectEx [+] 0xD8043520 = kernel32.dll!VirtualQuery [+] 0xEBB6B9AB = kernel32.dll!VirtualQueryEx [+] 0x0249ABFF = kernel32.dll!VirtualUnlock [+] 0x5CF8FAA4 = kernel32.dll!WTSGetActiveConsoleSessionId [+] 0x7D5EBE4A = kernel32.dll!WaitCommEvent [+] 0x883CA2E3 = kernel32.dll!WaitForDebugEvent [+] 0x3BD03630 = kernel32.dll!WaitForMultipleObjects [+] 0xDEB6FDC4 = kernel32.dll!WaitForMultipleObjectsEx [+] 0x601D8708 = kernel32.dll!WaitForSingleObject [+] 0xF20B33CD = kernel32.dll!WaitForSingleObjectEx [+] 0x044C99D2 = kernel32.dll!WaitForThreadpoolIoCallbacks [+] 0x4954349D = kernel32.dll!WaitForThreadpoolTimerCallbacks [+] 0x1A1E081A = kernel32.dll!WaitForThreadpoolWaitCallbacks [+] 0xDA3008F8 = kernel32.dll!WaitForThreadpoolWorkCallbacks [+] 0x94BA3787 = kernel32.dll!WaitNamedPipeA [+] 0x956A3787 = kernel32.dll!WaitNamedPipeW [+] 0x1EBF0861 = kernel32.dll!WakeAllConditionVariable [+] 0x10D7ADB7 = kernel32.dll!WakeConditionVariable [+] 0xE1CF8D77 = kernel32.dll!WerGetFlags [+] 0xB63E81D9 = kernel32.dll!WerRegisterFile [+] 0xF1ED65DF = kernel32.dll!WerRegisterMemoryBlock [+] 0x3CEAB3BB = kernel32.dll!WerRegisterRuntimeExceptionModule [+] 0xEDCF8D77 = kernel32.dll!WerSetFlags [+] 0x14A34694 = kernel32.dll!WerUnregisterFile [+] 0xBE85FD4B = kernel32.dll!WerUnregisterMemoryBlock [+] 0x6BC24CEC = kernel32.dll!WerUnregisterRuntimeExceptionModule [+] 0xE0F463C3 = kernel32.dll!WerpCleanupMessageMapping [+] 0xE86F3562 = kernel32.dll!WerpInitiateRemoteRecovery [+] 0x8F845DD6 = kernel32.dll!WerpNotifyLoadStringResource [+] 0xCBC0E759 = kernel32.dll!WerpNotifyLoadStringResourceEx [+] 0xF14898D7 = kernel32.dll!WerpNotifyUseStringResource [+] 0xB4AA468C = kernel32.dll!WerpStringLookup [+] 0xEA7D21F4 = kernel32.dll!WideCharToMultiByte [+] 0x876F8B31 = kernel32.dll!WinExec [+] 0xDEA8E84F = kernel32.dll!Wow64DisableWow64FsRedirection [+] 0x018938CF = kernel32.dll!Wow64EnableWow64FsRedirection [+] 0xCEEECBBF = kernel32.dll!Wow64GetThreadContext [+] 0x17D6F338 = kernel32.dll!Wow64GetThreadSelectorEntry [+] 0x606AE423 = kernel32.dll!Wow64RevertWow64FsRedirection [+] 0xCEFACBBF = kernel32.dll!Wow64SetThreadContext [+] 0xCFC75EBA = kernel32.dll!Wow64SuspendThread [+] 0x5DCB5D71 = kernel32.dll!WriteConsoleA [+] 0x646C575D = kernel32.dll!WriteConsoleInputA [+] 0x245BF49B = kernel32.dll!WriteConsoleInputVDMA [+] 0x250BF49B = kernel32.dll!WriteConsoleInputVDMW [+] 0x651C575D = kernel32.dll!WriteConsoleInputW [+] 0x9AF16246 = kernel32.dll!WriteConsoleOutputA [+] 0xE1ADA4DB = kernel32.dll!WriteConsoleOutputAttribute [+] 0xD3A1220F = kernel32.dll!WriteConsoleOutputCharacterA [+] 0xD451220F = kernel32.dll!WriteConsoleOutputCharacterW [+] 0x9BA16246 = kernel32.dll!WriteConsoleOutputW [+] 0x5E7B5D71 = kernel32.dll!WriteConsoleW [+] 0x5BAE572D = kernel32.dll!WriteFile [+] 0xD63F3D0C = kernel32.dll!WriteFileEx [+] 0xE8B19448 = kernel32.dll!WriteFileGather [+] 0xFD3CAB52 = kernel32.dll!WritePrivateProfileSectionA [+] 0xFDECAB52 = kernel32.dll!WritePrivateProfileSectionW [+] 0xCE1171F2 = kernel32.dll!WritePrivateProfileStringA [+] 0xCEC171F2 = kernel32.dll!WritePrivateProfileStringW [+] 0xB8123532 = kernel32.dll!WritePrivateProfileStructA [+] 0xB8C23532 = kernel32.dll!WritePrivateProfileStructW [+] 0xE7BDD8C5 = kernel32.dll!WriteProcessMemory [+] 0x8A46AD5F = kernel32.dll!WriteProfileSectionA [+] 0x8AF6AD5F = kernel32.dll!WriteProfileSectionW [+] 0x0E532393 = kernel32.dll!WriteProfileStringA [+] 0x0F032393 = kernel32.dll!WriteProfileStringW [+] 0x5A233EEA = kernel32.dll!WriteTapemark [+] 0xB157D235 = kernel32.dll!ZombifyActCtx [+] 0x61524F4E = kernel32.dll!_hread [+] 0xE97E5FF6 = kernel32.dll!_hwrite [+] 0xF58DFFAC = kernel32.dll!_lclose [+] 0xE2065B2C = kernel32.dll!_lcreat [+] 0x61BE6C30 = kernel32.dll!_llseek [+] 0x77A22050 = kernel32.dll!_lopen [+] 0x61524F50 = kernel32.dll!_lread [+] 0xE98E5FF6 = kernel32.dll!_lwrite [+] 0x5E225CD4 = kernel32.dll!lstrcat [+] 0xC48D7274 = kernel32.dll!lstrcatA [+] 0xC53D7274 = kernel32.dll!lstrcatW [+] 0x5E025FD4 = kernel32.dll!lstrcmp [+] 0xDC8D7174 = kernel32.dll!lstrcmpA [+] 0xDD3D7174 = kernel32.dll!lstrcmpW [+] 0xDDCD7174 = kernel32.dll!lstrcmpi [+] 0x69896FCC = kernel32.dll!lstrcmpiA [+] 0x6A396FCC = kernel32.dll!lstrcmpiW [+] 0x5E4A6094 = kernel32.dll!lstrcpy [+] 0xE28D73B4 = kernel32.dll!lstrcpyA [+] 0xE33D73B4 = kernel32.dll!lstrcpyW [+] 0xE3F573B4 = kernel32.dll!lstrcpyn [+] 0x7B89A10C = kernel32.dll!lstrcpynA [+] 0x7C39A10C = kernel32.dll!lstrcpynW [+] 0x6FF25DD4 = kernel32.dll!lstrlen [+] 0xCC8E00F4 = kernel32.dll!lstrlenA [+] 0xCD3E00F4 = kernel32.dll!lstrlenW