[+] Ran on Wed Aug  1 23:11:38 2012

[+] Scanning module 'ntdll.dll' in directory '/tmp/'...
[+] 0xB207C0C3 = ntdll.dll!A_SHAFinal
[+] 0xFE60D410 = ntdll.dll!A_SHAInit
[+] 0x0DA114BF = ntdll.dll!A_SHAUpdate
[+] 0x624F5337 = ntdll.dll!AlpcAdjustCompletionListConcurrencyCount
[+] 0x417B6050 = ntdll.dll!AlpcFreeCompletionListMessage
[+] 0xD0EEC59D = ntdll.dll!AlpcGetCompletionListLastMessageInformation
[+] 0x59EE3E7F = ntdll.dll!AlpcGetCompletionListMessageAttributes
[+] 0x9B342F01 = ntdll.dll!AlpcGetHeaderSize
[+] 0x8DC7D091 = ntdll.dll!AlpcGetMessageAttribute
[+] 0x1F7AA351 = ntdll.dll!AlpcGetMessageFromCompletionList
[+] 0x5835A85C = ntdll.dll!AlpcGetOutstandingCompletionListMessageCount
[+] 0xA47373D8 = ntdll.dll!AlpcInitializeMessageAttribute
[+] 0x34EB0021 = ntdll.dll!AlpcMaxAllowedMessageLength
[+] 0xFC284352 = ntdll.dll!AlpcRegisterCompletionList
[+] 0xCBD57BCC = ntdll.dll!AlpcRegisterCompletionListWorkerThread
[+] 0x0200896D = ntdll.dll!AlpcRundownCompletionList
[+] 0xB9A3E9AA = ntdll.dll!AlpcUnregisterCompletionList
[+] 0xA38FE148 = ntdll.dll!AlpcUnregisterCompletionListWorkerThread
[+] 0x8E407F8D = ntdll.dll!CsrAllocateCaptureBuffer
[+] 0x2402E32E = ntdll.dll!CsrAllocateMessagePointer
[+] 0x72B20756 = ntdll.dll!CsrCaptureMessageBuffer
[+] 0x41721F30 = ntdll.dll!CsrCaptureMessageMultiUnicodeStringsInPlace
[+] 0xF89EC995 = ntdll.dll!CsrCaptureMessageString
[+] 0xB8C4348A = ntdll.dll!CsrCaptureTimeout
[+] 0xABED9AD1 = ntdll.dll!CsrClientCallServer
[+] 0x43835BE3 = ntdll.dll!CsrClientConnectToServer
[+] 0x1090C7D8 = ntdll.dll!CsrFreeCaptureBuffer
[+] 0xB51BB838 = ntdll.dll!CsrGetProcessId
[+] 0xA89BC26F = ntdll.dll!CsrIdentifyAlertableThread
[+] 0x9507F38A = ntdll.dll!CsrSetPriorityClass
[+] 0x1527CBE7 = ntdll.dll!CsrVerifyRegion
[+] 0x1DBEC548 = ntdll.dll!DbgBreakPoint
[+] 0x59DD5F38 = ntdll.dll!DbgPrint
[+] 0x132C22D5 = ntdll.dll!DbgPrintEx
[+] 0x23FFC433 = ntdll.dll!DbgPrintReturnControlC
[+] 0x7F835069 = ntdll.dll!DbgPrompt
[+] 0x8DD0031C = ntdll.dll!DbgQueryDebugFilterState
[+] 0x9E581A67 = ntdll.dll!DbgSetDebugFilterState
[+] 0xC66DF6D2 = ntdll.dll!DbgUiConnectToDbg
[+] 0xC55220DF = ntdll.dll!DbgUiContinue
[+] 0x5B285000 = ntdll.dll!DbgUiConvertStateChangeStructure
[+] 0x5E841756 = ntdll.dll!DbgUiDebugActiveProcess
[+] 0xEE073783 = ntdll.dll!DbgUiGetThreadDebugObject
[+] 0xF41EDBA2 = ntdll.dll!DbgUiIssueRemoteBreakin
[+] 0x9A1E9789 = ntdll.dll!DbgUiRemoteBreakin
[+] 0xAE073784 = ntdll.dll!DbgUiSetThreadDebugObject
[+] 0xD6757DBA = ntdll.dll!DbgUiStopDebugging
[+] 0x0228A7F8 = ntdll.dll!DbgUiWaitStateChange
[+] 0x15B81BA5 = ntdll.dll!DbgUserBreakPoint
[+] 0xB8DB3B17 = ntdll.dll!EtwCreateTraceInstanceId
[+] 0xF50F63F2 = ntdll.dll!EtwDeliverDataBlock
[+] 0x0EDEA272 = ntdll.dll!EtwEnumerateProcessRegGuids
[+] 0x2C28C188 = ntdll.dll!EtwEventActivityIdControl
[+] 0x2BE99DD2 = ntdll.dll!EtwEventEnabled
[+] 0xB85FC228 = ntdll.dll!EtwEventProviderEnabled
[+] 0x2161F0EE = ntdll.dll!EtwEventRegister
[+] 0x42F1C003 = ntdll.dll!EtwEventUnregister
[+] 0x5E0B198D = ntdll.dll!EtwEventWrite
[+] 0xFFB5AD24 = ntdll.dll!EtwEventWriteEndScenario
[+] 0x1E9AB816 = ntdll.dll!EtwEventWriteEx
[+] 0x3C227446 = ntdll.dll!EtwEventWriteFull
[+] 0xC530FF78 = ntdll.dll!EtwEventWriteNoRegistration
[+] 0x4401AE05 = ntdll.dll!EtwEventWriteStartScenario
[+] 0x1E1DD0CD = ntdll.dll!EtwEventWriteString
[+] 0xA1D4E009 = ntdll.dll!EtwEventWriteTransfer
[+] 0xE3AA23E8 = ntdll.dll!EtwGetTraceEnableFlags
[+] 0x0D71B36B = ntdll.dll!EtwGetTraceEnableLevel
[+] 0x999A381B = ntdll.dll!EtwGetTraceLoggerHandle
[+] 0x95EE1266 = ntdll.dll!EtwLogTraceEvent
[+] 0x1566D3EA = ntdll.dll!EtwNotificationRegister
[+] 0x442A7F00 = ntdll.dll!EtwNotificationUnregister
[+] 0x21B0D8C6 = ntdll.dll!EtwProcessPrivateLoggerRequest
[+] 0x45C9EA16 = ntdll.dll!EtwRegisterSecurityProvider
[+] 0x89D55889 = ntdll.dll!EtwRegisterTraceGuidsA
[+] 0x8A855889 = ntdll.dll!EtwRegisterTraceGuidsW
[+] 0xA7266800 = ntdll.dll!EtwReplyNotification
[+] 0xEBD41322 = ntdll.dll!EtwSendNotification
[+] 0xBC8EAE7B = ntdll.dll!EtwSetMark
[+] 0xC167FB29 = ntdll.dll!EtwTraceEventInstance
[+] 0x06C6584A = ntdll.dll!EtwTraceMessage
[+] 0x4CB26BC1 = ntdll.dll!EtwTraceMessageVa
[+] 0xC77A5043 = ntdll.dll!EtwUnregisterTraceGuids
[+] 0x94F1D560 = ntdll.dll!EtwWriteUMSecurityEvent
[+] 0x71EDE28E = ntdll.dll!EtwpCreateEtwThread
[+] 0xECA8B5DB = ntdll.dll!EtwpGetCpuSpeed
[+] 0x55872872 = ntdll.dll!EtwpNotificationThread
[+] 0x4932928D = ntdll.dll!EvtIntReportAuthzEventAndSourceAsync
[+] 0x77D5F087 = ntdll.dll!EvtIntReportEventAndSourceAsync
[+] 0x36F78800 = ntdll.dll!ExpInterlockedPopEntrySListEnd
[+] 0xFB958ECD = ntdll.dll!ExpInterlockedPopEntrySListFault
[+] 0x0FE7DD6C = ntdll.dll!ExpInterlockedPopEntrySListResume
[+] 0x0A4A5858 = ntdll.dll!KiFastSystemCall
[+] 0xF9D19111 = ntdll.dll!KiFastSystemCallRet
[+] 0x3DFFE404 = ntdll.dll!KiIntSystemCall
[+] 0xCE88770B = ntdll.dll!KiRaiseUserExceptionDispatcher
[+] 0x62B31E90 = ntdll.dll!KiUserApcDispatcher
[+] 0xA695F87B = ntdll.dll!KiUserCallbackDispatcher
[+] 0x5D4E05C7 = ntdll.dll!KiUserExceptionDispatcher
[+] 0x2C4831A2 = ntdll.dll!LdrAccessResource
[+] 0x2A1D1A86 = ntdll.dll!LdrAddLoadAsDataTable
[+] 0x3012ABDE = ntdll.dll!LdrAddRefDll
[+] 0x6905443A = ntdll.dll!LdrDisableThreadCalloutsForDll
[+] 0xD2AFBE32 = ntdll.dll!LdrEnumResources
[+] 0xFED59027 = ntdll.dll!LdrEnumerateLoadedModules
[+] 0x15972443 = ntdll.dll!LdrFindEntryForAddress
[+] 0xAEE0D566 = ntdll.dll!LdrFindResourceDirectory_U
[+] 0x53E85E5D = ntdll.dll!LdrFindResourceEx_U
[+] 0x75CCB68C = ntdll.dll!LdrFindResource_U
[+] 0xD0A6442B = ntdll.dll!LdrFlushAlternateResourceModules
[+] 0xB0B6D497 = ntdll.dll!LdrGetDllHandle
[+] 0x74499039 = ntdll.dll!LdrGetDllHandleByMapping
[+] 0x79F0DB3F = ntdll.dll!LdrGetDllHandleByName
[+] 0xC9897AAB = ntdll.dll!LdrGetDllHandleEx
[+] 0xA4E2F0E9 = ntdll.dll!LdrGetFailureData
[+] 0xD5FF5CD7 = ntdll.dll!LdrGetFileNameFromLoadAsDataTable
[+] 0x5ED941B5 = ntdll.dll!LdrGetProcedureAddress
[+] 0x5224C217 = ntdll.dll!LdrGetProcedureAddressEx
[+] 0x4BBE5991 = ntdll.dll!LdrHotPatchRoutine
[+] 0x0FFD17B5 = ntdll.dll!LdrInitShimEngineDynamic
[+] 0x3F55E4BC = ntdll.dll!LdrInitializeThunk
[+] 0xD6EA9DDC = ntdll.dll!LdrLoadAlternateResourceModule
[+] 0x567BCBF5 = ntdll.dll!LdrLoadAlternateResourceModuleEx
[+] 0xBDBF9C13 = ntdll.dll!LdrLoadDll
[+] 0xFB49AD7A = ntdll.dll!LdrLockLoaderLock
[+] 0x09419599 = ntdll.dll!LdrOpenImageFileOptionsKey
[+] 0xB9A96805 = ntdll.dll!LdrProcessRelocationBlock
[+] 0x1EDB5FF7 = ntdll.dll!LdrQueryImageFileExecutionOptions
[+] 0x52AC52C7 = ntdll.dll!LdrQueryImageFileExecutionOptionsEx
[+] 0x1B315E64 = ntdll.dll!LdrQueryImageFileKeyOption
[+] 0xCF99B48D = ntdll.dll!LdrQueryModuleServiceTags
[+] 0x4E776FBF = ntdll.dll!LdrQueryProcessModuleInformation
[+] 0x8A7A5A2C = ntdll.dll!LdrRegisterDllNotification
[+] 0x52215EDF = ntdll.dll!LdrRemoveLoadAsDataTable
[+] 0x075E488D = ntdll.dll!LdrResFindResource
[+] 0x2C899887 = ntdll.dll!LdrResFindResourceDirectory
[+] 0x945C0BDF = ntdll.dll!LdrResGetRCConfig
[+] 0x1F43BCDA = ntdll.dll!LdrResRelease
[+] 0x29E3E9B3 = ntdll.dll!LdrResSearchResource
[+] 0x494FB2EE = ntdll.dll!LdrRscIsTypeExist
[+] 0x8EE15F45 = ntdll.dll!LdrSetAppCompatDllRedirectionCallback
[+] 0x02ED6005 = ntdll.dll!LdrSetDllManifestProber
[+] 0x048733EF = ntdll.dll!LdrSetMUICacheType
[+] 0x6ABFD0CE = ntdll.dll!LdrShutdownProcess
[+] 0xF9622B5B = ntdll.dll!LdrShutdownThread
[+] 0x6EB716E9 = ntdll.dll!LdrUnloadAlternateResourceModule
[+] 0x499A0F1B = ntdll.dll!LdrUnloadAlternateResourceModuleEx
[+] 0x3A872CDC = ntdll.dll!LdrUnloadDll
[+] 0x943BC6AA = ntdll.dll!LdrUnlockLoaderLock
[+] 0x1B43D6F3 = ntdll.dll!LdrUnregisterDllNotification
[+] 0xEBCA8BD0 = ntdll.dll!LdrVerifyImageMatchesChecksum
[+] 0x8E7748FA = ntdll.dll!LdrVerifyImageMatchesChecksumEx
[+] 0x55BF0BB9 = ntdll.dll!LdrWx86FormatVirtualImage
[+] 0x3529FD20 = ntdll.dll!LdrpResGetMappingSize
[+] 0x0E40244D = ntdll.dll!LdrpResGetResourceDirectory
[+] 0x6BD0C833 = ntdll.dll!MD4Final
[+] 0x1F4ECB49 = ntdll.dll!MD4Init
[+] 0x491EE308 = ntdll.dll!MD4Update
[+] 0x6BD4C833 = ntdll.dll!MD5Final
[+] 0x9F4ECB4A = ntdll.dll!MD5Init
[+] 0x491EE328 = ntdll.dll!MD5Update
[+] 0x82B83B59 = ntdll.dll!NlsAnsiCodePage
[+] 0x37B57C0C = ntdll.dll!NlsMbCodePageTag
[+] 0x1EB48C53 = ntdll.dll!NlsMbOemCodePageTag
[+] 0x05B9EA1A = ntdll.dll!NtAcceptConnectPort
[+] 0xDA49DDEA = ntdll.dll!NtAccessCheck
[+] 0x98F287E4 = ntdll.dll!NtAccessCheckAndAuditAlarm
[+] 0xCF3DE24B = ntdll.dll!NtAccessCheckByType
[+] 0xC96D01E6 = ntdll.dll!NtAccessCheckByTypeAndAuditAlarm
[+] 0x2D1B1DBD = ntdll.dll!NtAccessCheckByTypeResultList
[+] 0x829BF084 = ntdll.dll!NtAccessCheckByTypeResultListAndAuditAlarm
[+] 0x022D2379 = ntdll.dll!NtAccessCheckByTypeResultListAndAuditAlarmByHandle
[+] 0x9F98BB62 = ntdll.dll!NtAddAtom
[+] 0x56046DFC = ntdll.dll!NtAddBootEntry
[+] 0x550B72FE = ntdll.dll!NtAddDriverEntry
[+] 0xA655202C = ntdll.dll!NtAdjustGroupsToken
[+] 0x1DC97E4D = ntdll.dll!NtAdjustPrivilegesToken
[+] 0x324D6FB5 = ntdll.dll!NtAlertResumeThread
[+] 0xA6968D9F = ntdll.dll!NtAlertThread
[+] 0x15BF5116 = ntdll.dll!NtAllocateLocallyUniqueId
[+] 0x536A6448 = ntdll.dll!NtAllocateReserveObject
[+] 0x3D623C89 = ntdll.dll!NtAllocateUserPhysicalPages
[+] 0x982A7DE0 = ntdll.dll!NtAllocateUuids
[+] 0x9488B12D = ntdll.dll!NtAllocateVirtualMemory
[+] 0xCB5AAFF1 = ntdll.dll!NtAlpcAcceptConnectPort
[+] 0xF12AC328 = ntdll.dll!NtAlpcCancelMessage
[+] 0xA8CA696E = ntdll.dll!NtAlpcConnectPort
[+] 0x7E27DB42 = ntdll.dll!NtAlpcCreatePort
[+] 0x875DFC09 = ntdll.dll!NtAlpcCreatePortSection
[+] 0x55AFFE32 = ntdll.dll!NtAlpcCreateResourceReserve
[+] 0x87D1A44C = ntdll.dll!NtAlpcCreateSectionView
[+] 0xA84B752D = ntdll.dll!NtAlpcCreateSecurityContext
[+] 0x67510C12 = ntdll.dll!NtAlpcDeletePortSection
[+] 0x86B08C31 = ntdll.dll!NtAlpcDeleteResourceReserve
[+] 0x67C4B455 = ntdll.dll!NtAlpcDeleteSectionView
[+] 0xD94C032C = ntdll.dll!NtAlpcDeleteSecurityContext
[+] 0xD5C6B367 = ntdll.dll!NtAlpcDisconnectPort
[+] 0x20BAB291 = ntdll.dll!NtAlpcImpersonateClientOfPort
[+] 0xAD72B90C = ntdll.dll!NtAlpcOpenSenderProcess
[+] 0x5669F3B2 = ntdll.dll!NtAlpcOpenSenderThread
[+] 0x8AE8298F = ntdll.dll!NtAlpcQueryInformation
[+] 0x0F1FB2F2 = ntdll.dll!NtAlpcQueryInformationMessage
[+] 0xDBD316E4 = ntdll.dll!NtAlpcRevokeSecurityContext
[+] 0x1E3D03AF = ntdll.dll!NtAlpcSendWaitReceivePort
[+] 0x088CF04D = ntdll.dll!NtAlpcSetInformation
[+] 0x8213F584 = ntdll.dll!NtApphelpCacheControl
[+] 0x68CF7CAB = ntdll.dll!NtAreMappedFilesTheSame
[+] 0x09C0EA3F = ntdll.dll!NtAssignProcessToJobObject
[+] 0x42039C4A = ntdll.dll!NtCallbackReturn
[+] 0xB4B0F453 = ntdll.dll!NtCancelIoFile
[+] 0xC81169AC = ntdll.dll!NtCancelIoFileEx
[+] 0x42DEEE56 = ntdll.dll!NtCancelSynchronousIoFile
[+] 0xE86A44B2 = ntdll.dll!NtCancelTimer
[+] 0xB3F50403 = ntdll.dll!NtClearEvent
[+] 0xA198FDF1 = ntdll.dll!NtClose
[+] 0x8437BA5C = ntdll.dll!NtCloseObjectAuditAlarm
[+] 0x4929B561 = ntdll.dll!NtCommitComplete
[+] 0xE53D3E79 = ntdll.dll!NtCommitEnlistment
[+] 0x7631E324 = ntdll.dll!NtCommitTransaction
[+] 0x654C6146 = ntdll.dll!NtCompactKeys
[+] 0xE1E7CEBD = ntdll.dll!NtCompareTokens
[+] 0x66ADD493 = ntdll.dll!NtCompleteConnectPort
[+] 0xB186DE65 = ntdll.dll!NtCompressKey
[+] 0x7754B806 = ntdll.dll!NtConnectPort
[+] 0xE28472BD = ntdll.dll!NtContinue
[+] 0xBA7C15AF = ntdll.dll!NtCreateDebugObject
[+] 0x7BCF514E = ntdll.dll!NtCreateDirectoryObject
[+] 0x3F1F1F2A = ntdll.dll!NtCreateEnlistment
[+] 0x965ED0CF = ntdll.dll!NtCreateEvent
[+] 0x4FC7370C = ntdll.dll!NtCreateEventPair
[+] 0xBB823393 = ntdll.dll!NtCreateFile
[+] 0x074AB984 = ntdll.dll!NtCreateIoCompletion
[+] 0x505CFD23 = ntdll.dll!NtCreateJobObject
[+] 0x5850A1B1 = ntdll.dll!NtCreateJobSet
[+] 0x4C8AA587 = ntdll.dll!NtCreateKey
[+] 0x100C2223 = ntdll.dll!NtCreateKeyTransacted
[+] 0x4BE36694 = ntdll.dll!NtCreateKeyedEvent
[+] 0x0CEFC095 = ntdll.dll!NtCreateMailslotFile
[+] 0x745DC3F4 = ntdll.dll!NtCreateMutant
[+] 0x2A6DE309 = ntdll.dll!NtCreateNamedPipeFile
[+] 0x819046A6 = ntdll.dll!NtCreatePagingFile
[+] 0xC7FAD513 = ntdll.dll!NtCreatePort
[+] 0x1E536C5B = ntdll.dll!NtCreatePrivateNamespace
[+] 0x154FE589 = ntdll.dll!NtCreateProcess
[+] 0xEFCDB744 = ntdll.dll!NtCreateProcessEx
[+] 0x1CE013C9 = ntdll.dll!NtCreateProfile
[+] 0xD3D94746 = ntdll.dll!NtCreateProfileEx
[+] 0xB3AA4CF5 = ntdll.dll!NtCreateResourceManager
[+] 0x1CF4F4E3 = ntdll.dll!NtCreateSection
[+] 0x5A2D2A4A = ntdll.dll!NtCreateSemaphore
[+] 0xF5F9FAB7 = ntdll.dll!NtCreateSymbolicLinkObject
[+] 0xFBF9A0AD = ntdll.dll!NtCreateThread
[+] 0x9A3C803E = ntdll.dll!NtCreateThreadEx
[+] 0x264DFE96 = ntdll.dll!NtCreateTimer
[+] 0x222E5E96 = ntdll.dll!NtCreateToken
[+] 0x7BB4B233 = ntdll.dll!NtCreateTransaction
[+] 0xB507A6EE = ntdll.dll!NtCreateTransactionManager
[+] 0xB821BED9 = ntdll.dll!NtCreateUserProcess
[+] 0x875CA16E = ntdll.dll!NtCreateWaitablePort
[+] 0xDD5EC90A = ntdll.dll!NtCreateWorkerFactory
[+] 0x1E312BF7 = ntdll.dll!NtCurrentTeb
[+] 0xE5D0ABCD = ntdll.dll!NtDebugActiveProcess
[+] 0x8549E121 = ntdll.dll!NtDebugContinue
[+] 0x0130BED7 = ntdll.dll!NtDelayExecution
[+] 0x18C17CD3 = ntdll.dll!NtDeleteAtom
[+] 0x1298CEB4 = ntdll.dll!NtDeleteBootEntry
[+] 0x7A23A12D = ntdll.dll!NtDeleteDriverEntry
[+] 0x0281CC13 = ntdll.dll!NtDeleteFile
[+] 0x3F9AAE67 = ntdll.dll!NtDeleteKey
[+] 0x8948F39C = ntdll.dll!NtDeleteObjectAuditAlarm
[+] 0x8E4CF460 = ntdll.dll!NtDeletePrivateNamespace
[+] 0x63B4CBD6 = ntdll.dll!NtDeleteValueKey
[+] 0x285E3795 = ntdll.dll!NtDeviceIoControlFile
[+] 0x93E179A6 = ntdll.dll!NtDisableLastKnownGood
[+] 0x591098E0 = ntdll.dll!NtDisplayString
[+] 0x51C723DF = ntdll.dll!NtDrawText
[+] 0xFAC7C232 = ntdll.dll!NtDuplicateObject
[+] 0x764F5E63 = ntdll.dll!NtDuplicateToken
[+] 0x928E3071 = ntdll.dll!NtEnableLastKnownGood
[+] 0x325A3C88 = ntdll.dll!NtEnumerateBootEntries
[+] 0x23214961 = ntdll.dll!NtEnumerateDriverEntries
[+] 0xB9CD3377 = ntdll.dll!NtEnumerateKey
[+] 0x10087C0D = ntdll.dll!NtEnumerateSystemEnvironmentValuesEx
[+] 0x83458660 = ntdll.dll!NtEnumerateTransactionObject
[+] 0xA0CE0E5E = ntdll.dll!NtEnumerateValueKey
[+] 0x1D12C544 = ntdll.dll!NtExtendSection
[+] 0xF56894B4 = ntdll.dll!NtFilterToken
[+] 0xF1C1F075 = ntdll.dll!NtFindAtom
[+] 0x095DAD74 = ntdll.dll!NtFlushBuffersFile
[+] 0x1C02E3AE = ntdll.dll!NtFlushInstallUILanguage
[+] 0x945CB1AF = ntdll.dll!NtFlushInstructionCache
[+] 0x20405E5C = ntdll.dll!NtFlushKey
[+] 0xD826F930 = ntdll.dll!NtFlushProcessWriteBuffers
[+] 0x807C4BA3 = ntdll.dll!NtFlushVirtualMemory
[+] 0x5131C3B5 = ntdll.dll!NtFlushWriteBuffer
[+] 0x41763201 = ntdll.dll!NtFreeUserPhysicalPages
[+] 0xEBF8F26C = ntdll.dll!NtFreeVirtualMemory
[+] 0x3821B721 = ntdll.dll!NtFreezeRegistry
[+] 0x9A141824 = ntdll.dll!NtFreezeTransactions
[+] 0x2D0DE81B = ntdll.dll!NtFsControlFile
[+] 0x5B3960FE = ntdll.dll!NtGetContextThread
[+] 0x6F454383 = ntdll.dll!NtGetCurrentProcessorNumber
[+] 0x2B8C6911 = ntdll.dll!NtGetDevicePowerState
[+] 0x8A625BFD = ntdll.dll!NtGetMUIRegistryInfo
[+] 0xF56F51AF = ntdll.dll!NtGetNextProcess
[+] 0xE97E5CB1 = ntdll.dll!NtGetNextThread
[+] 0x62872589 = ntdll.dll!NtGetNlsSectionPtr
[+] 0x6C2E470F = ntdll.dll!NtGetNotificationResourceManager
[+] 0x96DAF999 = ntdll.dll!NtGetPlugPlayEvent
[+] 0x51BB0BDF = ntdll.dll!NtGetTickCount
[+] 0xB8E1B52B = ntdll.dll!NtGetWriteWatch
[+] 0x4308F2B7 = ntdll.dll!NtImpersonateAnonymousToken
[+] 0x095F9C0E = ntdll.dll!NtImpersonateClientOfPort
[+] 0x58619E06 = ntdll.dll!NtImpersonateThread
[+] 0x8E058C95 = ntdll.dll!NtInitializeNlsFiles
[+] 0x22062F06 = ntdll.dll!NtInitializeRegistry
[+] 0x70D6594A = ntdll.dll!NtInitiatePowerAction
[+] 0x373362BE = ntdll.dll!NtIsProcessInJob
[+] 0x0189D2B8 = ntdll.dll!NtIsSystemResumeAutomatic
[+] 0xA8834F9F = ntdll.dll!NtIsUILanguageComitted
[+] 0x95BE8F7A = ntdll.dll!NtListenPort
[+] 0x912C4A3C = ntdll.dll!NtLoadDriver
[+] 0xCE26EA40 = ntdll.dll!NtLoadKey
[+] 0xD7B693B5 = ntdll.dll!NtLoadKey2
[+] 0x258EE4F2 = ntdll.dll!NtLoadKeyEx
[+] 0x61564079 = ntdll.dll!NtLockFile
[+] 0x5A52594D = ntdll.dll!NtLockProductActivationKeys
[+] 0x35D6CC6B = ntdll.dll!NtLockRegistryKey
[+] 0xABF60A9C = ntdll.dll!NtLockVirtualMemory
[+] 0x8E103F16 = ntdll.dll!NtMakePermanentObject
[+] 0x0FAC1FE7 = ntdll.dll!NtMakeTemporaryObject
[+] 0x34C1D033 = ntdll.dll!NtMapCMFModule
[+] 0xEA8D2966 = ntdll.dll!NtMapUserPhysicalPages
[+] 0x2A1FBE15 = ntdll.dll!NtMapUserPhysicalPagesScatter
[+] 0x1B40BFFB = ntdll.dll!NtMapViewOfSection
[+] 0x2E7CF6FA = ntdll.dll!NtModifyBootEntry
[+] 0x732DB2B4 = ntdll.dll!NtModifyDriverEntry
[+] 0x75B64D75 = ntdll.dll!NtNotifyChangeDirectoryFile
[+] 0xFD646A0B = ntdll.dll!NtNotifyChangeKey
[+] 0x09A079D5 = ntdll.dll!NtNotifyChangeMultipleKeys
[+] 0xB93D2FF9 = ntdll.dll!NtNotifyChangeSession
[+] 0x95DDA306 = ntdll.dll!NtOpenDirectoryObject
[+] 0x733BC29A = ntdll.dll!NtOpenEnlistment
[+] 0xFE9817AF = ntdll.dll!NtOpenEvent
[+] 0xE4353D8F = ntdll.dll!NtOpenEventPair
[+] 0xE45E409A = ntdll.dll!NtOpenFile
[+] 0x0E739591 = ntdll.dll!NtOpenIoCompletion
[+] 0xE4CB03A6 = ntdll.dll!NtOpenJobObject
[+] 0xCE2B8AA2 = ntdll.dll!NtOpenKey
[+] 0x26B6FD72 = ntdll.dll!NtOpenKeyEx
[+] 0xF0745B6A = ntdll.dll!NtOpenKeyTransacted
[+] 0xB8EB2F7B = ntdll.dll!NtOpenKeyTransactedEx
[+] 0x80000A04 = ntdll.dll!NtOpenKeyedEvent
[+] 0xAB6105BE = ntdll.dll!NtOpenMutant
[+] 0xA7103C0A = ntdll.dll!NtOpenObjectAuditAlarm
[+] 0xAC143CCE = ntdll.dll!NtOpenPrivateNamespace
[+] 0x23A19DA3 = ntdll.dll!NtOpenProcess
[+] 0x8A94E3E4 = ntdll.dll!NtOpenProcessToken
[+] 0x410D4DE2 = ntdll.dll!NtOpenProcessTokenEx
[+] 0xCDB89EAD = ntdll.dll!NtOpenResourceManager
[+] 0x2B46ACFD = ntdll.dll!NtOpenSection
[+] 0xEE9B30CD = ntdll.dll!NtOpenSemaphore
[+] 0x2B469D05 = ntdll.dll!NtOpenSession
[+] 0x662E175B = ntdll.dll!NtOpenSymbolicLinkObject
[+] 0x32FCE277 = ntdll.dll!NtOpenThread
[+] 0x9242864E = ntdll.dll!NtOpenThreadToken
[+] 0x2C75E863 = ntdll.dll!NtOpenThreadTokenEx
[+] 0x8E874577 = ntdll.dll!NtOpenTimer
[+] 0x97365318 = ntdll.dll!NtOpenTransaction
[+] 0x253BC391 = ntdll.dll!NtOpenTransactionManager
[+] 0xDC563CAC = ntdll.dll!NtPlugPlayControl
[+] 0xABAC986A = ntdll.dll!NtPowerInformation
[+] 0xF829E523 = ntdll.dll!NtPrePrepareComplete
[+] 0xA5492F25 = ntdll.dll!NtPrePrepareEnlistment
[+] 0x0437FBFE = ntdll.dll!NtPrepareComplete
[+] 0xA8CEE5E8 = ntdll.dll!NtPrepareEnlistment
[+] 0xECCB63CA = ntdll.dll!NtPrivilegeCheck
[+] 0x04C81902 = ntdll.dll!NtPrivilegeObjectAuditAlarm
[+] 0x853DF351 = ntdll.dll!NtPrivilegedServiceAuditAlarm
[+] 0xBEEBB94F = ntdll.dll!NtPropagationComplete
[+] 0x38927B9B = ntdll.dll!NtPropagationFailed
[+] 0xAAE67919 = ntdll.dll!NtProtectVirtualMemory
[+] 0xFAC14E46 = ntdll.dll!NtPulseEvent
[+] 0x031C61A2 = ntdll.dll!NtQueryAttributesFile
[+] 0xF65B8337 = ntdll.dll!NtQueryBootEntryOrder
[+] 0x4352E445 = ntdll.dll!NtQueryBootOptions
[+] 0x8B4FBF50 = ntdll.dll!NtQueryDebugFilterState
[+] 0x886FEF2B = ntdll.dll!NtQueryDefaultLocale
[+] 0x8A4E15B0 = ntdll.dll!NtQueryDefaultUILanguage
[+] 0xA11D8ED1 = ntdll.dll!NtQueryDirectoryFile
[+] 0x633BF0A4 = ntdll.dll!NtQueryDirectoryObject
[+] 0x32ABC906 = ntdll.dll!NtQueryDriverEntryOrder
[+] 0x6E7FD0FE = ntdll.dll!NtQueryEaFile
[+] 0x34114E26 = ntdll.dll!NtQueryEvent
[+] 0xB182A7F7 = ntdll.dll!NtQueryFullAttributesFile
[+] 0x5D9F0649 = ntdll.dll!NtQueryInformationAtom
[+] 0xC6F54E9E = ntdll.dll!NtQueryInformationEnlistment
[+] 0x475F5589 = ntdll.dll!NtQueryInformationFile
[+] 0x164B8E1D = ntdll.dll!NtQueryInformationJobObject
[+] 0x53D7F709 = ntdll.dll!NtQueryInformationPort
[+] 0x00679FCD = ntdll.dll!NtQueryInformationProcess
[+] 0xF79564AF = ntdll.dll!NtQueryInformationResourceManager
[+] 0xF3421E10 = ntdll.dll!NtQueryInformationThread
[+] 0x31DABD7F = ntdll.dll!NtQueryInformationToken
[+] 0xF758F0E4 = ntdll.dll!NtQueryInformationTransaction
[+] 0x298F7D1D = ntdll.dll!NtQueryInformationTransactionManager
[+] 0xC66E7569 = ntdll.dll!NtQueryInformationWorkerFactory
[+] 0x204761D9 = ntdll.dll!NtQueryInstallUILanguage
[+] 0x066D51CB = ntdll.dll!NtQueryIntervalProfile
[+] 0xBD9A6478 = ntdll.dll!NtQueryIoCompletion
[+] 0xAB016F7C = ntdll.dll!NtQueryKey
[+] 0x4428E689 = ntdll.dll!NtQueryLicenseValue
[+] 0x01B3BB43 = ntdll.dll!NtQueryMultipleValueKey
[+] 0x5F1AB188 = ntdll.dll!NtQueryMutant
[+] 0xE7220EBE = ntdll.dll!NtQueryObject
[+] 0x697EB77C = ntdll.dll!NtQueryOpenSubKeys
[+] 0xFB8233D9 = ntdll.dll!NtQueryOpenSubKeysEx
[+] 0x3979DF28 = ntdll.dll!NtQueryPerformanceCounter
[+] 0xC4C9FADC = ntdll.dll!NtQueryPortInformationProcess
[+] 0xDE874BC7 = ntdll.dll!NtQueryQuotaInformationFile
[+] 0x89944ACB = ntdll.dll!NtQuerySection
[+] 0xAB2A09C5 = ntdll.dll!NtQuerySecurityAttributesToken
[+] 0xB2C51EEC = ntdll.dll!NtQuerySecurityObject
[+] 0x8202A425 = ntdll.dll!NtQuerySemaphore
[+] 0xA1C8D3F6 = ntdll.dll!NtQuerySymbolicLinkObject
[+] 0x7E3BE025 = ntdll.dll!NtQuerySystemEnvironmentValue
[+] 0x2ACC5E1E = ntdll.dll!NtQuerySystemEnvironmentValueEx
[+] 0x95513E5D = ntdll.dll!NtQuerySystemInformation
[+] 0xF023EC24 = ntdll.dll!NtQuerySystemInformationEx
[+] 0x1C4726F5 = ntdll.dll!NtQuerySystemTime
[+] 0xC4007BEE = ntdll.dll!NtQueryTimer
[+] 0x6A1E4267 = ntdll.dll!NtQueryTimerResolution
[+] 0x19682C60 = ntdll.dll!NtQueryValueKey
[+] 0x632C8FEB = ntdll.dll!NtQueryVirtualMemory
[+] 0xE670E9FA = ntdll.dll!NtQueryVolumeInformationFile
[+] 0x78CCAE9C = ntdll.dll!NtQueueApcThread
[+] 0xCEFFFBDD = ntdll.dll!NtQueueApcThreadEx
[+] 0x7F5CF660 = ntdll.dll!NtRaiseException
[+] 0xFA78F02A = ntdll.dll!NtRaiseHardError
[+] 0xE74E3F35 = ntdll.dll!NtReadFile
[+] 0xC24277F5 = ntdll.dll!NtReadFileScatter
[+] 0x66E5AE35 = ntdll.dll!NtReadOnlyEnlistment
[+] 0x2C0FA5FD = ntdll.dll!NtReadRequestData
[+] 0x6BEBEECC = ntdll.dll!NtReadVirtualMemory
[+] 0x735BE128 = ntdll.dll!NtRecoverEnlistment
[+] 0xCDC8ADF4 = ntdll.dll!NtRecoverResourceManager
[+] 0xB33BE3B0 = ntdll.dll!NtRecoverTransactionManager
[+] 0x5BD1688F = ntdll.dll!NtRegisterProtocolAddressInformation
[+] 0x234A1CA8 = ntdll.dll!NtRegisterThreadTerminatePort
[+] 0x95860173 = ntdll.dll!NtReleaseKeyedEvent
[+] 0x22525E1D = ntdll.dll!NtReleaseMutant
[+] 0xAD89137E = ntdll.dll!NtReleaseSemaphore
[+] 0x7552C627 = ntdll.dll!NtReleaseWorkerFactoryWorker
[+] 0xCB12C11E = ntdll.dll!NtRemoveIoCompletion
[+] 0x60849C72 = ntdll.dll!NtRemoveIoCompletionEx
[+] 0x34FB7368 = ntdll.dll!NtRemoveProcessDebug
[+] 0xBF8B1EA3 = ntdll.dll!NtRenameKey
[+] 0x4367B612 = ntdll.dll!NtRenameTransactionManager
[+] 0x4AD7BB36 = ntdll.dll!NtReplaceKey
[+] 0x59803FBE = ntdll.dll!NtReplacePartitionUnit
[+] 0x078DD229 = ntdll.dll!NtReplyPort
[+] 0x98F3B324 = ntdll.dll!NtReplyWaitReceivePort
[+] 0xD8C11DE5 = ntdll.dll!NtReplyWaitReceivePortEx
[+] 0xA836A774 = ntdll.dll!NtReplyWaitReplyPort
[+] 0xFEB2D003 = ntdll.dll!NtRequestPort
[+] 0xD025772D = ntdll.dll!NtRequestWaitReplyPort
[+] 0x81FCCC87 = ntdll.dll!NtResetEvent
[+] 0x4F557B9C = ntdll.dll!NtResetWriteWatch
[+] 0xCE0FBC3D = ntdll.dll!NtRestoreKey
[+] 0x1CEBACBE = ntdll.dll!NtResumeProcess
[+] 0x74E041A1 = ntdll.dll!NtResumeThread
[+] 0x3B16144E = ntdll.dll!NtRollbackComplete
[+] 0x6054F9F6 = ntdll.dll!NtRollbackEnlistment
[+] 0x5215BBE2 = ntdll.dll!NtRollbackTransaction
[+] 0xFC093B0F = ntdll.dll!NtRollforwardTransactionManager
[+] 0x4DEEFB2B = ntdll.dll!NtSaveKey
[+] 0x17931F92 = ntdll.dll!NtSaveKeyEx
[+] 0x71676E24 = ntdll.dll!NtSaveMergedKeys
[+] 0x06BC29BA = ntdll.dll!NtSecureConnectPort
[+] 0x388F3ED6 = ntdll.dll!NtSerializeBoot
[+] 0x15E77C9F = ntdll.dll!NtSetBootEntryOrder
[+] 0x094F9854 = ntdll.dll!NtSetBootOptions
[+] 0x5B4560FE = ntdll.dll!NtSetContextThread
[+] 0x6E4E1958 = ntdll.dll!NtSetDebugFilterState
[+] 0x0D738322 = ntdll.dll!NtSetDefaultHardErrorPort
[+] 0x079CF31C = ntdll.dll!NtSetDefaultLocale
[+] 0x5A8D2DA3 = ntdll.dll!NtSetDefaultUILanguage
[+] 0x15AA230E = ntdll.dll!NtSetDriverEntryOrder
[+] 0xFA79391D = ntdll.dll!NtSetEaFile
[+] 0x61153FA6 = ntdll.dll!NtSetEvent
[+] 0xF3804768 = ntdll.dll!NtSetEventBoostPriority
[+] 0x548C40C1 = ntdll.dll!NtSetHighEventPair
[+] 0xAB7B5A2F = ntdll.dll!NtSetHighWaitLowEventPair
[+] 0x9E3FE05A = ntdll.dll!NtSetInformationDebugObject
[+] 0xB8747BA2 = ntdll.dll!NtSetInformationEnlistment
[+] 0x12A051E8 = ntdll.dll!NtSetInformationFile
[+] 0xFBEC0C4D = ntdll.dll!NtSetInformationJobObject
[+] 0x1055506A = ntdll.dll!NtSetInformationKey
[+] 0xC3ECB680 = ntdll.dll!NtSetInformationObject
[+] 0xBFFE21C6 = ntdll.dll!NtSetInformationProcess
[+] 0xF054FB31 = ntdll.dll!NtSetInformationResourceManager
[+] 0xC3813603 = ntdll.dll!NtSetInformationThread
[+] 0x14D91787 = ntdll.dll!NtSetInformationToken
[+] 0x5F787CDE = ntdll.dll!NtSetInformationTransaction
[+] 0x2D80FC4A = ntdll.dll!NtSetInformationTransactionManager
[+] 0xCE5173C3 = ntdll.dll!NtSetInformationWorkerFactory
[+] 0xD1AE4E2B = ntdll.dll!NtSetIntervalProfile
[+] 0x5E18945E = ntdll.dll!NtSetIoCompletion
[+] 0x21F96C56 = ntdll.dll!NtSetIoCompletionEx
[+] 0x745E4FD7 = ntdll.dll!NtSetLdtEntries
[+] 0xD73D01C2 = ntdll.dll!NtSetLowEventPair
[+] 0x19759374 = ntdll.dll!NtSetLowWaitHighEventPair
[+] 0xC427C9F7 = ntdll.dll!NtSetQuotaInformationFile
[+] 0xD2511854 = ntdll.dll!NtSetSecurityObject
[+] 0xE65B6C1E = ntdll.dll!NtSetSystemEnvironmentValue
[+] 0x32AF5C78 = ntdll.dll!NtSetSystemEnvironmentValueEx
[+] 0x65905650 = ntdll.dll!NtSetSystemInformation
[+] 0xB12B7534 = ntdll.dll!NtSetSystemPowerState
[+] 0xB2C91FB5 = ntdll.dll!NtSetSystemTime
[+] 0xC2C88597 = ntdll.dll!NtSetThreadExecutionState
[+] 0xF1046D6D = ntdll.dll!NtSetTimer
[+] 0xDCEFB03B = ntdll.dll!NtSetTimerEx
[+] 0x355F3EC6 = ntdll.dll!NtSetTimerResolution
[+] 0xCA0D16BB = ntdll.dll!NtSetUuidSeed
[+] 0x17C23443 = ntdll.dll!NtSetValueKey
[+] 0xD7F016FE = ntdll.dll!NtSetVolumeInformationFile
[+] 0xD7903A04 = ntdll.dll!NtShutdownSystem
[+] 0x87AFD2D2 = ntdll.dll!NtShutdownWorkerFactory
[+] 0x0709E45E = ntdll.dll!NtSignalAndWaitForSingleObject
[+] 0x149725F2 = ntdll.dll!NtSinglePhaseReject
[+] 0x847D69D0 = ntdll.dll!NtStartProfile
[+] 0x2D3A1BE4 = ntdll.dll!NtStopProfile
[+] 0xEDB3319F = ntdll.dll!NtSuspendProcess
[+] 0x657C5BBA = ntdll.dll!NtSuspendThread
[+] 0xBB40A7DB = ntdll.dll!NtSystemDebugControl
[+] 0x89DBC1E5 = ntdll.dll!NtTerminateJobObject
[+] 0x1E35E09C = ntdll.dll!NtTerminateProcess
[+] 0xBB5C01CA = ntdll.dll!NtTerminateThread
[+] 0xF3AFA26D = ntdll.dll!NtTestAlert
[+] 0x78DA65FD = ntdll.dll!NtThawRegistry
[+] 0x2501CC2F = ntdll.dll!NtThawTransactions
[+] 0x07A5D0FF = ntdll.dll!NtTraceControl
[+] 0xEFC13447 = ntdll.dll!NtTraceEvent
[+] 0x4348C72C = ntdll.dll!NtTranslateFilePath
[+] 0xA9CBB9F5 = ntdll.dll!NtUmsThreadYield
[+] 0xCB2182B4 = ntdll.dll!NtUnloadDriver
[+] 0xC8C3265D = ntdll.dll!NtUnloadKey
[+] 0xB89E6897 = ntdll.dll!NtUnloadKey2
[+] 0xCC9DEC31 = ntdll.dll!NtUnloadKeyEx
[+] 0x423E155B = ntdll.dll!NtUnlockFile
[+] 0xEA9D19A3 = ntdll.dll!NtUnlockVirtualMemory
[+] 0xFD21A7D0 = ntdll.dll!NtUnmapViewOfSection
[+] 0x15A8A09C = ntdll.dll!NtVdmControl
[+] 0x51283F59 = ntdll.dll!NtWaitForDebugEvent
[+] 0x281C3D5A = ntdll.dll!NtWaitForKeyedEvent
[+] 0xF63B84A5 = ntdll.dll!NtWaitForMultipleObjects
[+] 0x288579BC = ntdll.dll!NtWaitForMultipleObjects32
[+] 0x4C2F8785 = ntdll.dll!NtWaitForSingleObject
[+] 0x057EEEA4 = ntdll.dll!NtWaitForWorkViaWorkerFactory
[+] 0xDE1ADBD9 = ntdll.dll!NtWaitHighEventPair
[+] 0xAAA012F4 = ntdll.dll!NtWaitLowEventPair
[+] 0xFAF120AD = ntdll.dll!NtWorkerFactoryWorkerReady
[+] 0x998B8DFC = ntdll.dll!NtWow64CallFunction64
[+] 0x0547EBFE = ntdll.dll!NtWow64CsrAllocateCaptureBuffer
[+] 0x878E9B6A = ntdll.dll!NtWow64CsrAllocateMessagePointer
[+] 0x60403637 = ntdll.dll!NtWow64CsrCaptureMessageBuffer
[+] 0xE62CF876 = ntdll.dll!NtWow64CsrCaptureMessageString
[+] 0x99FC73B4 = ntdll.dll!NtWow64CsrClientCallServer
[+] 0xBA8AC854 = ntdll.dll!NtWow64CsrClientConnectToServer
[+] 0xD7A8384F = ntdll.dll!NtWow64CsrFreeCaptureBuffer
[+] 0x434A9926 = ntdll.dll!NtWow64CsrGetProcessId
[+] 0x6A76DECD = ntdll.dll!NtWow64CsrIdentifyAlertableThread
[+] 0xA356ACD5 = ntdll.dll!NtWow64CsrVerifyRegion
[+] 0x04D09288 = ntdll.dll!NtWow64DebuggerCall
[+] 0x48D31D74 = ntdll.dll!NtWow64GetCurrentProcessorNumberEx
[+] 0xB57DC8FE = ntdll.dll!NtWow64GetNativeSystemInformation
[+] 0xD42E1BE8 = ntdll.dll!NtWow64InterlockedPopEntrySList
[+] 0x170AFC1E = ntdll.dll!NtWow64QueryInformationProcess64
[+] 0x2BB5BB16 = ntdll.dll!NtWow64QueryVirtualMemory64
[+] 0x4297DCF6 = ntdll.dll!NtWow64ReadVirtualMemory64
[+] 0x8CA1B527 = ntdll.dll!NtWow64WriteVirtualMemory64
[+] 0x083557BF = ntdll.dll!NtWriteFile
[+] 0x9510972D = ntdll.dll!NtWriteFileGather
[+] 0x48F2B742 = ntdll.dll!NtWriteRequestData
[+] 0xA4B03FD3 = ntdll.dll!NtWriteVirtualMemory
[+] 0xC3471262 = ntdll.dll!NtYieldExecution
[+] 0xA42CD322 = ntdll.dll!NtdllDefWindowProc_A
[+] 0xA4DCD322 = ntdll.dll!NtdllDefWindowProc_W
[+] 0xE0B87A10 = ntdll.dll!NtdllDialogWndProc_A
[+] 0xE1687A10 = ntdll.dll!NtdllDialogWndProc_W
[+] 0x2693DCBA = ntdll.dll!PfxFindPrefix
[+] 0x67607AF3 = ntdll.dll!PfxInitialize
[+] 0x7E815500 = ntdll.dll!PfxInsertPrefix
[+] 0x026FA3AE = ntdll.dll!PfxRemovePrefix
[+] 0xDEEAD5C9 = ntdll.dll!RtlAbortRXact
[+] 0xD5CBC3E9 = ntdll.dll!RtlAbsoluteToSelfRelativeSD
[+] 0x796D9809 = ntdll.dll!RtlAcquirePebLock
[+] 0xF84AF07A = ntdll.dll!RtlAcquirePrivilege
[+] 0x49951B25 = ntdll.dll!RtlAcquireReleaseSRWLockExclusive
[+] 0xFF2106B4 = ntdll.dll!RtlAcquireResourceExclusive
[+] 0xF9C2E5BC = ntdll.dll!RtlAcquireResourceShared
[+] 0x49843F3F = ntdll.dll!RtlAcquireSRWLockExclusive
[+] 0x2B5F2AE1 = ntdll.dll!RtlAcquireSRWLockShared
[+] 0xBD84EFBC = ntdll.dll!RtlActivateActivationContext
[+] 0xFD1043EE = ntdll.dll!RtlActivateActivationContextEx
[+] 0x9894C693 = ntdll.dll!RtlActivateActivationContextUnsafeFast
[+] 0x5E8AF7DE = ntdll.dll!RtlAddAccessAllowedAce
[+] 0x3E924C56 = ntdll.dll!RtlAddAccessAllowedAceEx
[+] 0xC69A60A4 = ntdll.dll!RtlAddAccessAllowedObjectAce
[+] 0x0DA40B9E = ntdll.dll!RtlAddAccessDeniedAce
[+] 0x04D73C82 = ntdll.dll!RtlAddAccessDeniedAceEx
[+] 0x159D1D08 = ntdll.dll!RtlAddAccessDeniedObjectAce
[+] 0x38CF0DC1 = ntdll.dll!RtlAddAce
[+] 0x72AA7070 = ntdll.dll!RtlAddActionToRXact
[+] 0xE4760A75 = ntdll.dll!RtlAddAtomToAtomTable
[+] 0xCA141A17 = ntdll.dll!RtlAddAttributeActionToRXact
[+] 0x9F176920 = ntdll.dll!RtlAddAuditAccessAce
[+] 0x61AE9CE7 = ntdll.dll!RtlAddAuditAccessAceEx
[+] 0x8BA362D6 = ntdll.dll!RtlAddAuditAccessObjectAce
[+] 0xA89AF320 = ntdll.dll!RtlAddCompoundAce
[+] 0x0FBDBE36 = ntdll.dll!RtlAddIntegrityLabelToBoundaryDescriptor
[+] 0x0E38875C = ntdll.dll!RtlAddMandatoryAce
[+] 0x5A3559C1 = ntdll.dll!RtlAddRefActivationContext
[+] 0x83F24B07 = ntdll.dll!RtlAddRefMemoryStream
[+] 0x9338AF60 = ntdll.dll!RtlAddSIDToBoundaryDescriptor
[+] 0x27B315C9 = ntdll.dll!RtlAddVectoredContinueHandler
[+] 0x825AFE2A = ntdll.dll!RtlAddVectoredExceptionHandler
[+] 0x33E3B88F = ntdll.dll!RtlAddressInSectionTable
[+] 0x6A77197A = ntdll.dll!RtlAdjustPrivilege
[+] 0x42EA20FC = ntdll.dll!RtlAllocateActivationContextStack
[+] 0xEAD1F6DD = ntdll.dll!RtlAllocateAndInitializeSid
[+] 0x763F3497 = ntdll.dll!RtlAllocateHandle
[+] 0x67CC0818 = ntdll.dll!RtlAllocateHeap
[+] 0x5F7A06A5 = ntdll.dll!RtlAllocateMemoryBlockLookaside
[+] 0xB0B477B5 = ntdll.dll!RtlAllocateMemoryZone
[+] 0xCAB74089 = ntdll.dll!RtlAnsiCharToUnicodeChar
[+] 0xB8DE764E = ntdll.dll!RtlAnsiStringToUnicodeSize
[+] 0x5AE972B3 = ntdll.dll!RtlAnsiStringToUnicodeString
[+] 0x9A61203D = ntdll.dll!RtlAppendAsciizToString
[+] 0xA9073016 = ntdll.dll!RtlAppendPathElement
[+] 0xDAE0D12E = ntdll.dll!RtlAppendStringToString
[+] 0x99E7E2C8 = ntdll.dll!RtlAppendUnicodeStringToString
[+] 0x66CDFE65 = ntdll.dll!RtlAppendUnicodeToString
[+] 0xEB243CC5 = ntdll.dll!RtlApplicationVerifierStop
[+] 0xDFFF4509 = ntdll.dll!RtlApplyRXact
[+] 0x5A42B547 = ntdll.dll!RtlApplyRXactNoFlush
[+] 0x7041752D = ntdll.dll!RtlAreAllAccessesGranted
[+] 0x704E753D = ntdll.dll!RtlAreAnyAccessesGranted
[+] 0xADE4E265 = ntdll.dll!RtlAreBitsClear
[+] 0xB8C1005A = ntdll.dll!RtlAreBitsSet
[+] 0x01480189 = ntdll.dll!RtlAssert
[+] 0x01B8F91D = ntdll.dll!RtlBarrier
[+] 0xF2E9A8DB = ntdll.dll!RtlBarrierForDelete
[+] 0xFB6B8C32 = ntdll.dll!RtlCancelTimer
[+] 0x64DE23A2 = ntdll.dll!RtlCaptureContext
[+] 0x3D53762F = ntdll.dll!RtlCaptureStackBackTrace
[+] 0x6558EE0D = ntdll.dll!RtlCaptureStackContext
[+] 0xA380E095 = ntdll.dll!RtlCharToInteger
[+] 0x39C1199B = ntdll.dll!RtlCheckForOrphanedCriticalSections
[+] 0xD2A6495F = ntdll.dll!RtlCheckRegistryKey
[+] 0xDEFE160B = ntdll.dll!RtlCleanUpTEBLangLists
[+] 0x3EC338FA = ntdll.dll!RtlClearAllBits
[+] 0x82A47E64 = ntdll.dll!RtlClearBits
[+] 0x0E117E00 = ntdll.dll!RtlCloneMemoryStream
[+] 0x94F30022 = ntdll.dll!RtlCloneUserProcess
[+] 0xD945FE25 = ntdll.dll!RtlCmDecodeMemIoResource
[+] 0xDB860025 = ntdll.dll!RtlCmEncodeMemIoResource
[+] 0xB12CB3D9 = ntdll.dll!RtlCommitDebugInfo
[+] 0xEB7B5B62 = ntdll.dll!RtlCommitMemoryStream
[+] 0x783572C6 = ntdll.dll!RtlCompactHeap
[+] 0xEE08F8E1 = ntdll.dll!RtlCompareAltitudes
[+] 0xB64DCFBD = ntdll.dll!RtlCompareMemory
[+] 0xDBB2CF31 = ntdll.dll!RtlCompareMemoryUlong
[+] 0x29D61EC4 = ntdll.dll!RtlCompareString
[+] 0xFA945605 = ntdll.dll!RtlCompareUnicodeString
[+] 0x37E7F720 = ntdll.dll!RtlCompareUnicodeStrings
[+] 0x3B10DCB4 = ntdll.dll!RtlCompressBuffer
[+] 0xB3A8A707 = ntdll.dll!RtlComputeCrc32
[+] 0xCAD4F44E = ntdll.dll!RtlComputeImportTableHash
[+] 0x48510084 = ntdll.dll!RtlComputePrivatizedDllName_U
[+] 0x8A1E37C6 = ntdll.dll!RtlConnectToSm
[+] 0x389FACE1 = ntdll.dll!RtlConsoleMultiByteToUnicodeN
[+] 0x9DA25132 = ntdll.dll!RtlContractHashTable
[+] 0x7214598C = ntdll.dll!RtlConvertExclusiveToShared
[+] 0x601FD888 = ntdll.dll!RtlConvertLCIDToString
[+] 0x6DCBF415 = ntdll.dll!RtlConvertLongToLargeInteger
[+] 0xFC4693D0 = ntdll.dll!RtlConvertSharedToExclusive
[+] 0x44CF77BF = ntdll.dll!RtlConvertSidToUnicodeString
[+] 0x3C244F12 = ntdll.dll!RtlConvertToAutoInheritSecurityObject
[+] 0x63562BC2 = ntdll.dll!RtlConvertUiListToApiList
[+] 0xF8E81DC2 = ntdll.dll!RtlConvertUlongToLargeInteger
[+] 0x29521727 = ntdll.dll!RtlCopyExtendedContext
[+] 0xF1265FC9 = ntdll.dll!RtlCopyLuid
[+] 0x265D8213 = ntdll.dll!RtlCopyLuidAndAttributesArray
[+] 0x4127FCDD = ntdll.dll!RtlCopyMappedMemory
[+] 0x159D297D = ntdll.dll!RtlCopyMemoryStreamTo
[+] 0x05311DAF = ntdll.dll!RtlCopyOutOfProcessMemoryStreamTo
[+] 0xA74C2142 = ntdll.dll!RtlCopySecurityDescriptor
[+] 0xD5816A3C = ntdll.dll!RtlCopySid
[+] 0xC31698D6 = ntdll.dll!RtlCopySidAndAttributesArray
[+] 0x6F00E17B = ntdll.dll!RtlCopyString
[+] 0x9FECACCE = ntdll.dll!RtlCopyUnicodeString
[+] 0x386EAA24 = ntdll.dll!RtlCreateAcl
[+] 0x4A35F7FA = ntdll.dll!RtlCreateActivationContext
[+] 0xA58AC704 = ntdll.dll!RtlCreateAndSetSD
[+] 0x63D42A2C = ntdll.dll!RtlCreateAtomTable
[+] 0x94011B97 = ntdll.dll!RtlCreateBootStatusDataFile
[+] 0xCFF3919E = ntdll.dll!RtlCreateBoundaryDescriptor
[+] 0x0CFF35DC = ntdll.dll!RtlCreateEnvironment
[+] 0xDBA1CC02 = ntdll.dll!RtlCreateEnvironmentEx
[+] 0x50C062AC = ntdll.dll!RtlCreateHashTable
[+] 0xDCCA5333 = ntdll.dll!RtlCreateHeap
[+] 0xAA957BA3 = ntdll.dll!RtlCreateMemoryBlockLookaside
[+] 0xDD224BAE = ntdll.dll!RtlCreateMemoryZone
[+] 0xE5B273C6 = ntdll.dll!RtlCreateProcessParameters
[+] 0x08714678 = ntdll.dll!RtlCreateProcessParametersEx
[+] 0x616A9466 = ntdll.dll!RtlCreateProcessReflection
[+] 0x28D0839F = ntdll.dll!RtlCreateQueryDebugBuffer
[+] 0x99557BBC = ntdll.dll!RtlCreateRegistryKey
[+] 0xB821C96F = ntdll.dll!RtlCreateSecurityDescriptor
[+] 0x29F6FB44 = ntdll.dll!RtlCreateServiceSid
[+] 0xB6E7DC13 = ntdll.dll!RtlCreateSystemVolumeInformationFolder
[+] 0xD544118A = ntdll.dll!RtlCreateTagHeap
[+] 0x394F4616 = ntdll.dll!RtlCreateTimer
[+] 0x89241C1C = ntdll.dll!RtlCreateTimerQueue
[+] 0xC197FD28 = ntdll.dll!RtlCreateUnicodeString
[+] 0xE53778F1 = ntdll.dll!RtlCreateUnicodeStringFromAsciiz
[+] 0xD6220ADE = ntdll.dll!RtlCreateUserProcess
[+] 0x391F0C96 = ntdll.dll!RtlCreateUserSecurityObject
[+] 0xE119F6AB = ntdll.dll!RtlCreateUserStack
[+] 0x40A438C8 = ntdll.dll!RtlCreateUserThread
[+] 0xDA43C657 = ntdll.dll!RtlCreateVirtualAccountSid
[+] 0x2BD3BFC5 = ntdll.dll!RtlCultureNameToLCID
[+] 0xE8374284 = ntdll.dll!RtlCustomCPToUnicodeN
[+] 0xCE02E017 = ntdll.dll!RtlCutoverTimeToSystemTime
[+] 0xD7A69A5E = ntdll.dll!RtlDeCommitDebugInfo
[+] 0xC6FAC7AF = ntdll.dll!RtlDeNormalizeProcessParams
[+] 0x0723695E = ntdll.dll!RtlDeactivateActivationContext
[+] 0x2AFC64FB = ntdll.dll!RtlDeactivateActivationContextUnsafeFast
[+] 0x4DC7FD87 = ntdll.dll!RtlDebugPrintTimes
[+] 0x7409F13F = ntdll.dll!RtlDecodePointer
[+] 0x9D416AE5 = ntdll.dll!RtlDecodeSystemPointer
[+] 0x77E20184 = ntdll.dll!RtlDecompressBuffer
[+] 0xFE213FBD = ntdll.dll!RtlDecompressFragment
[+] 0x31A01A1A = ntdll.dll!RtlDefaultNpAcl
[+] 0x00DB9202 = ntdll.dll!RtlDelete
[+] 0x2B46B304 = ntdll.dll!RtlDeleteAce
[+] 0xD1DDEB49 = ntdll.dll!RtlDeleteAtomFromAtomTable
[+] 0x5DE4AF81 = ntdll.dll!RtlDeleteBarrier
[+] 0xCE5592BA = ntdll.dll!RtlDeleteBoundaryDescriptor
[+] 0xCF448459 = ntdll.dll!RtlDeleteCriticalSection
[+] 0x728628DF = ntdll.dll!RtlDeleteElementGenericTable
[+] 0xE4620CF2 = ntdll.dll!RtlDeleteElementGenericTableAvl
[+] 0x74402EEC = ntdll.dll!RtlDeleteHashTable
[+] 0xE4548FF1 = ntdll.dll!RtlDeleteNoSplay
[+] 0x535F1223 = ntdll.dll!RtlDeleteRegistryValue
[+] 0xAD57CE62 = ntdll.dll!RtlDeleteResource
[+] 0x3AD648B6 = ntdll.dll!RtlDeleteSecurityObject
[+] 0xFD517E13 = ntdll.dll!RtlDeleteTimer
[+] 0xEB25381A = ntdll.dll!RtlDeleteTimerQueue
[+] 0x65225B7A = ntdll.dll!RtlDeleteTimerQueueEx
[+] 0xF184E70E = ntdll.dll!RtlDeregisterSecureMemoryCacheCallback
[+] 0xEC961220 = ntdll.dll!RtlDeregisterWait
[+] 0xC158DCFA = ntdll.dll!RtlDeregisterWaitEx
[+] 0xB3A2D305 = ntdll.dll!RtlDestroyAtomTable
[+] 0x00A96C30 = ntdll.dll!RtlDestroyEnvironment
[+] 0xB50E6AE0 = ntdll.dll!RtlDestroyHandleTable
[+] 0x7C67A4E6 = ntdll.dll!RtlDestroyHeap
[+] 0xFC481B40 = ntdll.dll!RtlDestroyMemoryBlockLookaside
[+] 0x23ECCA23 = ntdll.dll!RtlDestroyMemoryZone
[+] 0xBF02426F = ntdll.dll!RtlDestroyProcessParameters
[+] 0x22A59EC9 = ntdll.dll!RtlDestroyQueryDebugBuffer
[+] 0x3AAE6C6B = ntdll.dll!RtlDetectHeapLeaks
[+] 0xF0C58918 = ntdll.dll!RtlDetermineDosPathNameType_U
[+] 0xA7D1E1D2 = ntdll.dll!RtlDisableThreadProfiling
[+] 0xBA2E990B = ntdll.dll!RtlDllShutdownInProgress
[+] 0x0A7ED0BA = ntdll.dll!RtlDnsHostNameToComputerName
[+] 0x2588E632 = ntdll.dll!RtlDoesFileExists_U
[+] 0x824886FC = ntdll.dll!RtlDosApplyFileIsolationRedirection_Ustr
[+] 0x60A72D7B = ntdll.dll!RtlDosPathNameToNtPathName_U
[+] 0x8C9DDDFA = ntdll.dll!RtlDosPathNameToNtPathName_U_WithStatus
[+] 0xD5C1F963 = ntdll.dll!RtlDosPathNameToRelativeNtPathName_U
[+] 0x246EC82F = ntdll.dll!RtlDosPathNameToRelativeNtPathName_U_WithStatus
[+] 0x04C4D131 = ntdll.dll!RtlDosSearchPath_U
[+] 0xEDB689C3 = ntdll.dll!RtlDosSearchPath_Ustr
[+] 0xED55CD21 = ntdll.dll!RtlDowncaseUnicodeChar
[+] 0xDF00B780 = ntdll.dll!RtlDowncaseUnicodeString
[+] 0xB084E14D = ntdll.dll!RtlDumpResource
[+] 0x9CD942E3 = ntdll.dll!RtlDuplicateUnicodeString
[+] 0x735B7616 = ntdll.dll!RtlEmptyAtomTable
[+] 0x4DF7B924 = ntdll.dll!RtlEnableEarlyCriticalSectionEventCreation
[+] 0xC8BFC06F = ntdll.dll!RtlEnableThreadProfiling
[+] 0x7489F1CF = ntdll.dll!RtlEncodePointer
[+] 0x9F816CE5 = ntdll.dll!RtlEncodeSystemPointer
[+] 0x79D6E8BC = ntdll.dll!RtlEndEnumerationHashTable
[+] 0x4CA18E13 = ntdll.dll!RtlEndWeakEnumerationHashTable
[+] 0xDEFBF486 = ntdll.dll!RtlEnlargedIntegerMultiply
[+] 0xEC4DA2B0 = ntdll.dll!RtlEnlargedUnsignedDivide
[+] 0x4E1D5C40 = ntdll.dll!RtlEnlargedUnsignedMultiply
[+] 0xCEE535FF = ntdll.dll!RtlEnterCriticalSection
[+] 0x3FB32A5E = ntdll.dll!RtlEnumProcessHeaps
[+] 0x1633E70F = ntdll.dll!RtlEnumerateEntryHashTable
[+] 0x56F90D11 = ntdll.dll!RtlEnumerateGenericTable
[+] 0x482AF2BB = ntdll.dll!RtlEnumerateGenericTableAvl
[+] 0xFC21E163 = ntdll.dll!RtlEnumerateGenericTableLikeADirectory
[+] 0x8678FA61 = ntdll.dll!RtlEnumerateGenericTableWithoutSplaying
[+] 0xE889F295 = ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl
[+] 0xCCB013D0 = ntdll.dll!RtlEqualComputerName
[+] 0x62B464B1 = ntdll.dll!RtlEqualDomainName
[+] 0x9F2D2DA1 = ntdll.dll!RtlEqualLuid
[+] 0x95135C6D = ntdll.dll!RtlEqualPrefixSid
[+] 0xAF3C5FFD = ntdll.dll!RtlEqualSid
[+] 0xF0B45766 = ntdll.dll!RtlEqualString
[+] 0xD65B6A3E = ntdll.dll!RtlEqualUnicodeString
[+] 0x16474E48 = ntdll.dll!RtlEraseUnicodeString
[+] 0xAFB4A911 = ntdll.dll!RtlEthernetAddressToStringA
[+] 0xB064A911 = ntdll.dll!RtlEthernetAddressToStringW
[+] 0xC6EF7EBB = ntdll.dll!RtlEthernetStringToAddressA
[+] 0xC79F7EBB = ntdll.dll!RtlEthernetStringToAddressW
[+] 0xAA1B814D = ntdll.dll!RtlExitUserProcess
[+] 0x6F721347 = ntdll.dll!RtlExitUserThread
[+] 0x8D6C9D8E = ntdll.dll!RtlExpandEnvironmentStrings
[+] 0xF5E3BEE2 = ntdll.dll!RtlExpandEnvironmentStrings_U
[+] 0x56347AAC = ntdll.dll!RtlExpandHashTable
[+] 0xDB158A8B = ntdll.dll!RtlExtendMemoryBlockLookaside
[+] 0x9F22874F = ntdll.dll!RtlExtendMemoryZone
[+] 0x1E3FECAE = ntdll.dll!RtlExtendedIntegerMultiply
[+] 0x76DD1C6D = ntdll.dll!RtlExtendedLargeIntegerDivide
[+] 0x0F97FA39 = ntdll.dll!RtlExtendedMagicDivide
[+] 0xB77860D4 = ntdll.dll!RtlFillMemory
[+] 0x5C4817BD = ntdll.dll!RtlFillMemoryUlong
[+] 0xFFDFD4AA = ntdll.dll!RtlFillMemoryUlonglong
[+] 0xBEA3D95A = ntdll.dll!RtlFinalReleaseOutOfProcessMemoryStream
[+] 0xBC013EE4 = ntdll.dll!RtlFindAceByType
[+] 0x5743A9B0 = ntdll.dll!RtlFindActivationContextSectionGuid
[+] 0xF6675B14 = ntdll.dll!RtlFindActivationContextSectionString
[+] 0x87FB0D62 = ntdll.dll!RtlFindCharInUnicodeString
[+] 0x25EC2FE0 = ntdll.dll!RtlFindClearBits
[+] 0x4B8C0E0F = ntdll.dll!RtlFindClearBitsAndSet
[+] 0x3DED2E60 = ntdll.dll!RtlFindClearRuns
[+] 0x751AF2BA = ntdll.dll!RtlFindClosestEncodableLength
[+] 0x00A1BFEE = ntdll.dll!RtlFindLastBackwardRunClear
[+] 0x28E58975 = ntdll.dll!RtlFindLeastSignificantBit
[+] 0x3296F1A6 = ntdll.dll!RtlFindLongestRunClear
[+] 0x63EE29C4 = ntdll.dll!RtlFindMessage
[+] 0xB78EC159 = ntdll.dll!RtlFindMostSignificantBit
[+] 0x5C706F55 = ntdll.dll!RtlFindNextForwardRunClear
[+] 0xF45B1DC4 = ntdll.dll!RtlFindSetBits
[+] 0x4476BE78 = ntdll.dll!RtlFindSetBitsAndClear
[+] 0x58FC2164 = ntdll.dll!RtlFirstEntrySList
[+] 0xB067F589 = ntdll.dll!RtlFirstFreeAce
[+] 0xE22C60CD = ntdll.dll!RtlFlsAlloc
[+] 0x937A399E = ntdll.dll!RtlFlsFree
[+] 0xDA67EFE1 = ntdll.dll!RtlFlushSecureMemoryCache
[+] 0xBE88B575 = ntdll.dll!RtlFormatCurrentUserKeyPath
[+] 0xDD982A03 = ntdll.dll!RtlFormatMessage
[+] 0x01DED5B6 = ntdll.dll!RtlFormatMessageEx
[+] 0xC4C54481 = ntdll.dll!RtlFreeActivationContextStack
[+] 0x8267F128 = ntdll.dll!RtlFreeAnsiString
[+] 0x99C4B672 = ntdll.dll!RtlFreeHandle
[+] 0xD45A1E1F = ntdll.dll!RtlFreeHeap
[+] 0x75817333 = ntdll.dll!RtlFreeMemoryBlockLookaside
[+] 0x5E458FF2 = ntdll.dll!RtlFreeOemString
[+] 0x558C2A97 = ntdll.dll!RtlFreeSid
[+] 0x961EA741 = ntdll.dll!RtlFreeThreadActivationContextStack
[+] 0x3FEF5CE5 = ntdll.dll!RtlFreeUnicodeString
[+] 0xDCE1DC21 = ntdll.dll!RtlFreeUserStack
[+] 0xAFA613E9 = ntdll.dll!RtlGUIDFromString
[+] 0x5EE864FE = ntdll.dll!RtlGenerate8dot3Name
[+] 0xB8E80DC2 = ntdll.dll!RtlGetAce
[+] 0x593AED96 = ntdll.dll!RtlGetActiveActivationContext
[+] 0xAD8BE987 = ntdll.dll!RtlGetCallersAddress
[+] 0x0BD75621 = ntdll.dll!RtlGetCompressionWorkSpaceSize
[+] 0xF424F9D1 = ntdll.dll!RtlGetControlSecurityDescriptor
[+] 0xCACBA4C9 = ntdll.dll!RtlGetCriticalSectionRecursionCount
[+] 0x417D466F = ntdll.dll!RtlGetCurrentDirectory_U
[+] 0xBA04DD76 = ntdll.dll!RtlGetCurrentPeb
[+] 0x746343CF = ntdll.dll!RtlGetCurrentProcessorNumber
[+] 0xB4A5489C = ntdll.dll!RtlGetCurrentProcessorNumberEx
[+] 0x6B18E46B = ntdll.dll!RtlGetCurrentTransaction
[+] 0x857FF92D = ntdll.dll!RtlGetDaclSecurityDescriptor
[+] 0xCD43B680 = ntdll.dll!RtlGetElementGenericTable
[+] 0x2717880D = ntdll.dll!RtlGetElementGenericTableAvl
[+] 0x52B33F2C = ntdll.dll!RtlGetEnabledExtendedFeatures
[+] 0xD1F6970B = ntdll.dll!RtlGetExtendedContextLength
[+] 0x03F82BD2 = ntdll.dll!RtlGetExtendedFeaturesMask
[+] 0xDDB7C40C = ntdll.dll!RtlGetFileMUIPath
[+] 0x4D40BF70 = ntdll.dll!RtlGetFrame
[+] 0xF7431D60 = ntdll.dll!RtlGetFullPathName_U
[+] 0x6C9BACFD = ntdll.dll!RtlGetFullPathName_UEx
[+] 0x82B5EBD2 = ntdll.dll!RtlGetFullPathName_UstrEx
[+] 0x91FDF9D7 = ntdll.dll!RtlGetGroupSecurityDescriptor
[+] 0xC4251622 = ntdll.dll!RtlGetIntegerAtom
[+] 0x69378FD0 = ntdll.dll!RtlGetLastNtStatus
[+] 0xC1CBC324 = ntdll.dll!RtlGetLastWin32Error
[+] 0x1764C67B = ntdll.dll!RtlGetLengthWithoutLastFullDosOrNtPathElement
[+] 0xCCCCDF68 = ntdll.dll!RtlGetLengthWithoutTrailingPathSeperators
[+] 0x55051CF7 = ntdll.dll!RtlGetLocaleFileMappingAddress
[+] 0xD9D88B19 = ntdll.dll!RtlGetLongestNtPathLength
[+] 0xFAE2D678 = ntdll.dll!RtlGetNativeSystemInformation
[+] 0xD2EC6B25 = ntdll.dll!RtlGetNextEntryHashTable
[+] 0x4CC3F41B = ntdll.dll!RtlGetNtGlobalFlags
[+] 0xFE4078F3 = ntdll.dll!RtlGetNtProductType
[+] 0xC93FC7FE = ntdll.dll!RtlGetNtVersionNumbers
[+] 0x92FD7DEA = ntdll.dll!RtlGetOwnerSecurityDescriptor
[+] 0x15AEF8D0 = ntdll.dll!RtlGetParentLocaleName
[+] 0x5AD94699 = ntdll.dll!RtlGetProcessHeaps
[+] 0x6A7C7C85 = ntdll.dll!RtlGetProcessPreferredUILanguages
[+] 0xB73B6DA4 = ntdll.dll!RtlGetProductInfo
[+] 0x857FF969 = ntdll.dll!RtlGetSaclSecurityDescriptor
[+] 0x63B4ACF4 = ntdll.dll!RtlGetSecurityDescriptorRMControl
[+] 0xF6C30089 = ntdll.dll!RtlGetSetBootStatusData
[+] 0x4CD2BD74 = ntdll.dll!RtlGetSystemPreferredUILanguages
[+] 0x9FA6B86C = ntdll.dll!RtlGetThreadErrorMode
[+] 0xEF3D97E0 = ntdll.dll!RtlGetThreadLangIdByIndex
[+] 0xC2EE7C63 = ntdll.dll!RtlGetThreadPreferredUILanguages
[+] 0x755F484A = ntdll.dll!RtlGetUILanguageInfo
[+] 0x7CB65718 = ntdll.dll!RtlGetUnloadEventTrace
[+] 0xC96A1ADE = ntdll.dll!RtlGetUnloadEventTraceEx
[+] 0x468DEA9A = ntdll.dll!RtlGetUserInfoHeap
[+] 0xBD1B3547 = ntdll.dll!RtlGetUserPreferredUILanguages
[+] 0x73809D5B = ntdll.dll!RtlGetVersion
[+] 0xFFDE68F6 = ntdll.dll!RtlHashUnicodeString
[+] 0xC4AE2604 = ntdll.dll!RtlHeapTrkInitialize
[+] 0xBD6DFCB9 = ntdll.dll!RtlIdentifierAuthoritySid
[+] 0x61809383 = ntdll.dll!RtlIdnToAscii
[+] 0x3F4AEA10 = ntdll.dll!RtlIdnToNameprepUnicode
[+] 0x074CDFDA = ntdll.dll!RtlIdnToUnicode
[+] 0xE6F7AC14 = ntdll.dll!RtlImageDirectoryEntryToData
[+] 0x3EE92E3B = ntdll.dll!RtlImageNtHeader
[+] 0x561FE38F = ntdll.dll!RtlImageNtHeaderEx
[+] 0xD383A933 = ntdll.dll!RtlImageRvaToSection
[+] 0xBD5E83F3 = ntdll.dll!RtlImageRvaToVa
[+] 0x2974A4B8 = ntdll.dll!RtlImpersonateSelf
[+] 0xF8FD8309 = ntdll.dll!RtlImpersonateSelfEx
[+] 0x8085FD68 = ntdll.dll!RtlInitAnsiString
[+] 0xBD53AEDF = ntdll.dll!RtlInitAnsiStringEx
[+] 0x444BEFE5 = ntdll.dll!RtlInitBarrier
[+] 0x261790BD = ntdll.dll!RtlInitCodePageTable
[+] 0x3F07464C = ntdll.dll!RtlInitEnumerationHashTable
[+] 0xD76E2743 = ntdll.dll!RtlInitMemoryStream
[+] 0xAD30862C = ntdll.dll!RtlInitNlsTables
[+] 0x9A04D312 = ntdll.dll!RtlInitOutOfProcessMemoryStream
[+] 0xE800D8DC = ntdll.dll!RtlInitString
[+] 0xBFEB98FD = ntdll.dll!RtlInitUnicodeString
[+] 0x96BA942F = ntdll.dll!RtlInitUnicodeStringEx
[+] 0x527A8A66 = ntdll.dll!RtlInitWeakEnumerationHashTable
[+] 0xBBDAB6BB = ntdll.dll!RtlInitializeAtomPackage
[+] 0xEF3A167D = ntdll.dll!RtlInitializeBitMap
[+] 0xE0C97C47 = ntdll.dll!RtlInitializeConditionVariable
[+] 0x43CA0E6C = ntdll.dll!RtlInitializeContext
[+] 0xDC322193 = ntdll.dll!RtlInitializeCriticalSection
[+] 0xF8587084 = ntdll.dll!RtlInitializeCriticalSectionAndSpinCount
[+] 0xA85CB9B6 = ntdll.dll!RtlInitializeCriticalSectionEx
[+] 0xE5298A84 = ntdll.dll!RtlInitializeExceptionChain
[+] 0xD21458E9 = ntdll.dll!RtlInitializeExtendedContext
[+] 0x9507C468 = ntdll.dll!RtlInitializeGenericTable
[+] 0xF6A71029 = ntdll.dll!RtlInitializeGenericTableAvl
[+] 0x74F8136F = ntdll.dll!RtlInitializeHandleTable
[+] 0x4B03ECF0 = ntdll.dll!RtlInitializeNtUserPfn
[+] 0x1916E27A = ntdll.dll!RtlInitializeRXact
[+] 0x7DBF3B4C = ntdll.dll!RtlInitializeResource
[+] 0xCCB17637 = ntdll.dll!RtlInitializeSListHead
[+] 0xD70B8B20 = ntdll.dll!RtlInitializeSRWLock
[+] 0xF00D8E58 = ntdll.dll!RtlInitializeSid
[+] 0x8B6531E0 = ntdll.dll!RtlInsertElementGenericTable
[+] 0xE693CB04 = ntdll.dll!RtlInsertElementGenericTableAvl
[+] 0xDDA7A71C = ntdll.dll!RtlInsertElementGenericTableFull
[+] 0x5F384FEF = ntdll.dll!RtlInsertElementGenericTableFullAvl
[+] 0x17F88D43 = ntdll.dll!RtlInsertEntryHashTable
[+] 0x9C277A32 = ntdll.dll!RtlInt64ToUnicodeString
[+] 0xDE3D5D0F = ntdll.dll!RtlIntegerToChar
[+] 0xDC66DD03 = ntdll.dll!RtlIntegerToUnicodeString
[+] 0x55CB9FFA = ntdll.dll!RtlInterlockedClearBitRun
[+] 0x53ED6002 = ntdll.dll!RtlInterlockedCompareExchange64
[+] 0xA97DB450 = ntdll.dll!RtlInterlockedFlushSList
[+] 0xBD43B01E = ntdll.dll!RtlInterlockedPopEntrySList
[+] 0x3A920BA4 = ntdll.dll!RtlInterlockedPushEntrySList
[+] 0x7234A0A7 = ntdll.dll!RtlInterlockedPushListSList
[+] 0x3650BF17 = ntdll.dll!RtlInterlockedSetBitRun
[+] 0xF948FE25 = ntdll.dll!RtlIoDecodeMemIoResource
[+] 0xFB890025 = ntdll.dll!RtlIoEncodeMemIoResource
[+] 0xBF9AE597 = ntdll.dll!RtlIpv4AddressToStringA
[+] 0x88D5C76F = ntdll.dll!RtlIpv4AddressToStringExA
[+] 0x8985C76F = ntdll.dll!RtlIpv4AddressToStringExW
[+] 0xC04AE597 = ntdll.dll!RtlIpv4AddressToStringW
[+] 0xD6D5BB41 = ntdll.dll!RtlIpv4StringToAddressA
[+] 0x578B31F5 = ntdll.dll!RtlIpv4StringToAddressExA
[+] 0x583B31F5 = ntdll.dll!RtlIpv4StringToAddressExW
[+] 0xD785BB41 = ntdll.dll!RtlIpv4StringToAddressW
[+] 0xBF9AE5A7 = ntdll.dll!RtlIpv6AddressToStringA
[+] 0x88D5CB6F = ntdll.dll!RtlIpv6AddressToStringExA
[+] 0x8985CB6F = ntdll.dll!RtlIpv6AddressToStringExW
[+] 0xC04AE5A7 = ntdll.dll!RtlIpv6AddressToStringW
[+] 0xD6D5BB51 = ntdll.dll!RtlIpv6StringToAddressA
[+] 0x578B35F5 = ntdll.dll!RtlIpv6StringToAddressExA
[+] 0x583B35F5 = ntdll.dll!RtlIpv6StringToAddressExW
[+] 0xD785BB51 = ntdll.dll!RtlIpv6StringToAddressW
[+] 0x0D6DCFB9 = ntdll.dll!RtlIsActivationContextActive
[+] 0x38F5B01F = ntdll.dll!RtlIsCriticalSectionLocked
[+] 0x200BBA7C = ntdll.dll!RtlIsCriticalSectionLockedByThread
[+] 0xBE03FD6A = ntdll.dll!RtlIsCurrentThreadAttachExempt
[+] 0x6543FE94 = ntdll.dll!RtlIsDosDeviceName_U
[+] 0xDD274A2C = ntdll.dll!RtlIsGenericTableEmpty
[+] 0x7F374F35 = ntdll.dll!RtlIsGenericTableEmptyAvl
[+] 0xEBBEC5D6 = ntdll.dll!RtlIsNameInExpression
[+] 0x47B10E81 = ntdll.dll!RtlIsNameLegalDOS8Dot3
[+] 0x243AD961 = ntdll.dll!RtlIsNormalizedString
[+] 0xFAFFE27C = ntdll.dll!RtlIsTextUnicode
[+] 0x32827A0C = ntdll.dll!RtlIsThreadWithinLoaderCallout
[+] 0xD96C3657 = ntdll.dll!RtlIsValidHandle
[+] 0x17BFD387 = ntdll.dll!RtlIsValidIndexHandle
[+] 0x1AB80BDD = ntdll.dll!RtlIsValidLocaleName
[+] 0xC3530E87 = ntdll.dll!RtlKnownExceptionFilter
[+] 0xBF5D82DE = ntdll.dll!RtlLCIDToCultureName
[+] 0xC8185B4E = ntdll.dll!RtlLargeIntegerAdd
[+] 0xE504656D = ntdll.dll!RtlLargeIntegerArithmeticShift
[+] 0x92E24CDA = ntdll.dll!RtlLargeIntegerDivide
[+] 0x830960D8 = ntdll.dll!RtlLargeIntegerNegate
[+] 0x21D5A7A2 = ntdll.dll!RtlLargeIntegerShiftLeft
[+] 0xC6D96E2E = ntdll.dll!RtlLargeIntegerShiftRight
[+] 0xDAF87469 = ntdll.dll!RtlLargeIntegerSubtract
[+] 0x91871C1D = ntdll.dll!RtlLargeIntegerToChar
[+] 0x98A6E7A2 = ntdll.dll!RtlLcidToLocaleName
[+] 0x3A182487 = ntdll.dll!RtlLeaveCriticalSection
[+] 0x549793EF = ntdll.dll!RtlLengthRequiredSid
[+] 0xB684D893 = ntdll.dll!RtlLengthSecurityDescriptor
[+] 0x4F4724C5 = ntdll.dll!RtlLengthSid
[+] 0xA000DEDD = ntdll.dll!RtlLoadString
[+] 0x32FA1FBF = ntdll.dll!RtlLocalTimeToSystemTime
[+] 0xA4AA40A9 = ntdll.dll!RtlLocaleNameToLcid
[+] 0x038AA889 = ntdll.dll!RtlLocateExtendedFeature
[+] 0x4A2BCCC5 = ntdll.dll!RtlLocateLegacyContext
[+] 0x92740D9B = ntdll.dll!RtlLockBootStatusData
[+] 0xB8EA2422 = ntdll.dll!RtlLockCurrentThread
[+] 0xDA521DC2 = ntdll.dll!RtlLockHeap
[+] 0x7524792B = ntdll.dll!RtlLockMemoryBlockLookaside
[+] 0x752B749E = ntdll.dll!RtlLockMemoryStreamRegion
[+] 0x075E41CD = ntdll.dll!RtlLockMemoryZone
[+] 0xFD627B20 = ntdll.dll!RtlLockModuleSection
[+] 0x7CAEA937 = ntdll.dll!RtlLogStackBackTrace
[+] 0x6D6964AD = ntdll.dll!RtlLookupAtomInAtomTable
[+] 0x62E6B2F8 = ntdll.dll!RtlLookupElementGenericTable
[+] 0x1642CE06 = ntdll.dll!RtlLookupElementGenericTableAvl
[+] 0xF5B92494 = ntdll.dll!RtlLookupElementGenericTableFull
[+] 0x4F6872EA = ntdll.dll!RtlLookupElementGenericTableFullAvl
[+] 0xC6FB8F73 = ntdll.dll!RtlLookupEntryHashTable
[+] 0x9FB6EE55 = ntdll.dll!RtlMakeSelfRelativeSD
[+] 0xDC21C038 = ntdll.dll!RtlMapGenericMask
[+] 0xD80CDD6E = ntdll.dll!RtlMapSecurityErrorToNtStatus
[+] 0x81788FF6 = ntdll.dll!RtlMoveMemory
[+] 0x403895C7 = ntdll.dll!RtlMultiAppendUnicodeStringBuffer
[+] 0x1AF25492 = ntdll.dll!RtlMultiByteToUnicodeN
[+] 0x9B7B364A = ntdll.dll!RtlMultiByteToUnicodeSize
[+] 0x1A2BD790 = ntdll.dll!RtlMultipleAllocateHeap
[+] 0xCBE5441C = ntdll.dll!RtlMultipleFreeHeap
[+] 0xA1E1CC40 = ntdll.dll!RtlNewInstanceSecurityObject
[+] 0xF1149625 = ntdll.dll!RtlNewSecurityGrantedAccess
[+] 0x50516432 = ntdll.dll!RtlNewSecurityObject
[+] 0xB02D6153 = ntdll.dll!RtlNewSecurityObjectEx
[+] 0xA0342AF7 = ntdll.dll!RtlNewSecurityObjectWithMultipleInheritance
[+] 0xF7BDF70A = ntdll.dll!RtlNormalizeProcessParams
[+] 0x9DD86E3F = ntdll.dll!RtlNormalizeString
[+] 0xB4832A47 = ntdll.dll!RtlNtPathNameToDosPathName
[+] 0xFAE5402D = ntdll.dll!RtlNtStatusToDosError
[+] 0x47D6B526 = ntdll.dll!RtlNtStatusToDosErrorNoTeb
[+] 0x775531DB = ntdll.dll!RtlNumberGenericTableElements
[+] 0xDC6BAB04 = ntdll.dll!RtlNumberGenericTableElementsAvl
[+] 0x1051F2E5 = ntdll.dll!RtlNumberOfClearBits
[+] 0x0804B4D0 = ntdll.dll!RtlNumberOfSetBits
[+] 0xBAB61CA4 = ntdll.dll!RtlNumberOfSetBitsUlongPtr
[+] 0xEE22FDD1 = ntdll.dll!RtlOemStringToUnicodeSize
[+] 0xAC0B5380 = ntdll.dll!RtlOemStringToUnicodeString
[+] 0x88665CF5 = ntdll.dll!RtlOemToUnicodeN
[+] 0x03DEE811 = ntdll.dll!RtlOpenCurrentUser
[+] 0xF15FFBAA = ntdll.dll!RtlOwnerAcesPresent
[+] 0x2A26DD51 = ntdll.dll!RtlPcToFileHeader
[+] 0xA82A0A9D = ntdll.dll!RtlPinAtomInAtomTable
[+] 0x5630C0B0 = ntdll.dll!RtlPopFrame
[+] 0x350E672D = ntdll.dll!RtlPrefixString
[+] 0x619D6327 = ntdll.dll!RtlPrefixUnicodeString
[+] 0xF2955EF0 = ntdll.dll!RtlProcessFlsData
[+] 0x3C4F8346 = ntdll.dll!RtlProtectHeap
[+] 0x7B53E64E = ntdll.dll!RtlPushFrame
[+] 0xFF94A35E = ntdll.dll!RtlQueryActivationContextApplicationSettings
[+] 0x87C21EB3 = ntdll.dll!RtlQueryAtomInAtomTable
[+] 0x447AB744 = ntdll.dll!RtlQueryCriticalSectionOwner
[+] 0x6E420995 = ntdll.dll!RtlQueryDepthSList
[+] 0xFA32777D = ntdll.dll!RtlQueryDynamicTimeZoneInformation
[+] 0xE3CE6001 = ntdll.dll!RtlQueryElevationFlags
[+] 0xF03F9291 = ntdll.dll!RtlQueryEnvironmentVariable
[+] 0xAAA0FFBB = ntdll.dll!RtlQueryEnvironmentVariable_U
[+] 0xEA0C3C0A = ntdll.dll!RtlQueryHeapInformation
[+] 0x5C7457CA = ntdll.dll!RtlQueryInformationAcl
[+] 0x60EC8C8A = ntdll.dll!RtlQueryInformationActivationContext
[+] 0xD3703236 = ntdll.dll!RtlQueryInformationActiveActivationContext
[+] 0xCA04A438 = ntdll.dll!RtlQueryInterfaceMemoryStream
[+] 0x47C767AE = ntdll.dll!RtlQueryModuleInformation
[+] 0x698E572A = ntdll.dll!RtlQueryPerformanceCounter
[+] 0x7A7E3CDA = ntdll.dll!RtlQueryPerformanceFrequency
[+] 0xF7E65D19 = ntdll.dll!RtlQueryProcessBackTraceInformation
[+] 0x1C4CBF6E = ntdll.dll!RtlQueryProcessDebugInformation
[+] 0x45C7042B = ntdll.dll!RtlQueryProcessHeapInformation
[+] 0xC6C72BDB = ntdll.dll!RtlQueryProcessLockInformation
[+] 0x10D494F3 = ntdll.dll!RtlQueryRegistryValues
[+] 0x32D82033 = ntdll.dll!RtlQuerySecurityObject
[+] 0xBD921F77 = ntdll.dll!RtlQueryTagHeap
[+] 0xF56716BD = ntdll.dll!RtlQueryThreadProfiling
[+] 0x15F872A2 = ntdll.dll!RtlQueryTimeZoneInformation
[+] 0xB9B3BF13 = ntdll.dll!RtlQueueApcWow64Thread
[+] 0xEC6FAE21 = ntdll.dll!RtlQueueWorkItem
[+] 0x7F82F8EF = ntdll.dll!RtlRaiseException
[+] 0x192CE842 = ntdll.dll!RtlRaiseStatus
[+] 0xFF53B0C0 = ntdll.dll!RtlRandom
[+] 0x70C084FF = ntdll.dll!RtlRandomEx
[+] 0xA4BF82AB = ntdll.dll!RtlReAllocateHeap
[+] 0xAF770742 = ntdll.dll!RtlReadMemoryStream
[+] 0x1A92D2FF = ntdll.dll!RtlReadOutOfProcessMemoryStream
[+] 0xBF2C7A17 = ntdll.dll!RtlReadThreadProfilingData
[+] 0x13CE3669 = ntdll.dll!RtlRealPredecessor
[+] 0xC8D5BE1C = ntdll.dll!RtlRealSuccessor
[+] 0x4F3B4895 = ntdll.dll!RtlRegisterSecureMemoryCacheCallback
[+] 0x229B27EB = ntdll.dll!RtlRegisterThreadWithCsrss
[+] 0xAFA2CD8D = ntdll.dll!RtlRegisterWait
[+] 0x0E7E5C85 = ntdll.dll!RtlReleaseActivationContext
[+] 0xEC845090 = ntdll.dll!RtlReleaseMemoryStream
[+] 0x7A4DE3B7 = ntdll.dll!RtlReleasePebLock
[+] 0x305DDBFA = ntdll.dll!RtlReleasePrivilege
[+] 0x26CDA1D8 = ntdll.dll!RtlReleaseRelativeName
[+] 0x454852FF = ntdll.dll!RtlReleaseResource
[+] 0x4BE1AF46 = ntdll.dll!RtlReleaseSRWLockExclusive
[+] 0x5A172E63 = ntdll.dll!RtlReleaseSRWLockShared
[+] 0x9CA99FB7 = ntdll.dll!RtlRemoteCall
[+] 0xC67C7B92 = ntdll.dll!RtlRemoveEntryHashTable
[+] 0x707E8267 = ntdll.dll!RtlRemovePrivileges
[+] 0x66DD1720 = ntdll.dll!RtlRemoveVectoredContinueHandler
[+] 0x8D0CF77A = ntdll.dll!RtlRemoveVectoredExceptionHandler
[+] 0x78333058 = ntdll.dll!RtlReplaceSidInSd
[+] 0x1B79465F = ntdll.dll!RtlReportException
[+] 0x06A6760A = ntdll.dll!RtlReportSilentProcessExit
[+] 0x7D0A975F = ntdll.dll!RtlReportSqmEscalation
[+] 0xAAC71276 = ntdll.dll!RtlResetMemoryBlockLookaside
[+] 0xDDE8A6FA = ntdll.dll!RtlResetMemoryZone
[+] 0x9350E4EA = ntdll.dll!RtlResetRtlTranslations
[+] 0x22821613 = ntdll.dll!RtlRestoreLastWin32Error
[+] 0x08B384AF = ntdll.dll!RtlRetrieveNtUserPfn
[+] 0xEF447F11 = ntdll.dll!RtlRevertMemoryStream
[+] 0x7BE6F319 = ntdll.dll!RtlRunDecodeUnicodeString
[+] 0x7E26F519 = ntdll.dll!RtlRunEncodeUnicodeString
[+] 0x4C6EA595 = ntdll.dll!RtlRunOnceBeginInitialize
[+] 0x9D4A071B = ntdll.dll!RtlRunOnceComplete
[+] 0x69BDF10A = ntdll.dll!RtlRunOnceExecuteOnce
[+] 0x71B1A166 = ntdll.dll!RtlRunOnceInitialize
[+] 0x8D8BC183 = ntdll.dll!RtlSecondsSince1970ToTime
[+] 0x8E8BC183 = ntdll.dll!RtlSecondsSince1980ToTime
[+] 0xB2F81742 = ntdll.dll!RtlSeekMemoryStream
[+] 0x3B3989EC = ntdll.dll!RtlSelfRelativeToAbsoluteSD
[+] 0xD519FC4A = ntdll.dll!RtlSelfRelativeToAbsoluteSD2
[+] 0x807E34BD = ntdll.dll!RtlSendMsgToSm
[+] 0x73C18BFB = ntdll.dll!RtlSetAllBits
[+] 0x91E63AE0 = ntdll.dll!RtlSetAttributesSecurityDescriptor
[+] 0x01CDFEFE = ntdll.dll!RtlSetBits
[+] 0xF4E4F9D1 = ntdll.dll!RtlSetControlSecurityDescriptor
[+] 0x1EC2E37F = ntdll.dll!RtlSetCriticalSectionSpinCount
[+] 0x4183466F = ntdll.dll!RtlSetCurrentDirectory_U
[+] 0xDE691C0F = ntdll.dll!RtlSetCurrentEnvironment
[+] 0x6B1EE46B = ntdll.dll!RtlSetCurrentTransaction
[+] 0xE57FF92D = ntdll.dll!RtlSetDaclSecurityDescriptor
[+] 0xD1C6B9D9 = ntdll.dll!RtlSetDynamicTimeZoneInformation
[+] 0x9CC8C9D6 = ntdll.dll!RtlSetEnvironmentStrings
[+] 0xD101FB8F = ntdll.dll!RtlSetEnvironmentVar
[+] 0xCEFC34A4 = ntdll.dll!RtlSetEnvironmentVariable
[+] 0x05782BD2 = ntdll.dll!RtlSetExtendedFeaturesMask
[+] 0x9200F9D7 = ntdll.dll!RtlSetGroupSecurityDescriptor
[+] 0x0B3A27D4 = ntdll.dll!RtlSetHeapInformation
[+] 0x19ED9BEF = ntdll.dll!RtlSetInformationAcl
[+] 0x87DC52E4 = ntdll.dll!RtlSetIoCompletionCallback
[+] 0xC1CBC384 = ntdll.dll!RtlSetLastWin32Error
[+] 0x7811E767 = ntdll.dll!RtlSetLastWin32ErrorAndNtStatusFromNtStatus
[+] 0x798A78D7 = ntdll.dll!RtlSetMemoryStreamSize
[+] 0x93007DEA = ntdll.dll!RtlSetOwnerSecurityDescriptor
[+] 0xE66DED5A = ntdll.dll!RtlSetProcessDebugInformation
[+] 0xF7F8C7AF = ntdll.dll!RtlSetProcessIsCritical
[+] 0x9A7C7C85 = ntdll.dll!RtlSetProcessPreferredUILanguages
[+] 0xE57FF969 = ntdll.dll!RtlSetSaclSecurityDescriptor
[+] 0x93B4ACF4 = ntdll.dll!RtlSetSecurityDescriptorRMControl
[+] 0xF0516459 = ntdll.dll!RtlSetSecurityObject
[+] 0xB02D6B3B = ntdll.dll!RtlSetSecurityObjectEx
[+] 0xA2A6B86C = ntdll.dll!RtlSetThreadErrorMode
[+] 0x99C0DF28 = ntdll.dll!RtlSetThreadIsCritical
[+] 0xE2796F27 = ntdll.dll!RtlSetThreadPoolStartFunc
[+] 0xC2EE8263 = ntdll.dll!RtlSetThreadPreferredUILanguages
[+] 0xF4B514B5 = ntdll.dll!RtlSetTimeZoneInformation
[+] 0x71A82D77 = ntdll.dll!RtlSetTimer
[+] 0xE4DD4974 = ntdll.dll!RtlSetUnhandledExceptionFilter
[+] 0x4BEADB40 = ntdll.dll!RtlSetUserCallbackExceptionFilter
[+] 0x625C6AA3 = ntdll.dll!RtlSetUserFlagsHeap
[+] 0x5794EBFC = ntdll.dll!RtlSetUserValueHeap
[+] 0x11B243BA = ntdll.dll!RtlSidDominates
[+] 0x8F4FCB86 = ntdll.dll!RtlSidEqualLevel
[+] 0x2B2B866C = ntdll.dll!RtlSidHashInitialize
[+] 0xB6EFF078 = ntdll.dll!RtlSidHashLookup
[+] 0x3A31040D = ntdll.dll!RtlSidIsHigherLevel
[+] 0xE1AE1CFF = ntdll.dll!RtlSizeHeap
[+] 0xDE123326 = ntdll.dll!RtlSleepConditionVariableCS
[+] 0x400F12D0 = ntdll.dll!RtlSleepConditionVariableSRW
[+] 0xEE193E39 = ntdll.dll!RtlSplay
[+] 0x50EB65CE = ntdll.dll!RtlStartRXact
[+] 0x97780744 = ntdll.dll!RtlStatMemoryStream
[+] 0xEDC535DF = ntdll.dll!RtlStringFromGUID
[+] 0x3858DCCF = ntdll.dll!RtlSubAuthorityCountSid
[+] 0xFF40EBE1 = ntdll.dll!RtlSubAuthoritySid
[+] 0x962E420D = ntdll.dll!RtlSubtreePredecessor
[+] 0x56DF3E4B = ntdll.dll!RtlSubtreeSuccessor
[+] 0xB78F467C = ntdll.dll!RtlSystemTimeToLocalTime
[+] 0x33D91C5D = ntdll.dll!RtlTestBit
[+] 0xA9C3410E = ntdll.dll!RtlTimeFieldsToTime
[+] 0x7995B36C = ntdll.dll!RtlTimeToElapsedTimeFields
[+] 0xB7FE30DD = ntdll.dll!RtlTimeToSecondsSince1970
[+] 0xB7FE311D = ntdll.dll!RtlTimeToSecondsSince1980
[+] 0x790835E7 = ntdll.dll!RtlTimeToTimeFields
[+] 0x75A65EA0 = ntdll.dll!RtlTraceDatabaseAdd
[+] 0xA6385CE5 = ntdll.dll!RtlTraceDatabaseCreate
[+] 0x6AE286E8 = ntdll.dll!RtlTraceDatabaseDestroy
[+] 0xACC252D3 = ntdll.dll!RtlTraceDatabaseEnumerate
[+] 0x86442231 = ntdll.dll!RtlTraceDatabaseFind
[+] 0x927C7F71 = ntdll.dll!RtlTraceDatabaseLock
[+] 0xC2B0C8A3 = ntdll.dll!RtlTraceDatabaseUnlock
[+] 0x346E97CC = ntdll.dll!RtlTraceDatabaseValidate
[+] 0x546C8020 = ntdll.dll!RtlTryAcquirePebLock
[+] 0x40C4F617 = ntdll.dll!RtlTryAcquireSRWLockExclusive
[+] 0xCBBA96DD = ntdll.dll!RtlTryAcquireSRWLockShared
[+] 0x6F40A1FB = ntdll.dll!RtlTryEnterCriticalSection
[+] 0x8A9E0194 = ntdll.dll!RtlUTF8ToUnicodeN
[+] 0x1FA45DCC = ntdll.dll!RtlUlongByteSwap
[+] 0xC3BF5079 = ntdll.dll!RtlUlonglongByteSwap
[+] 0x5620CF71 = ntdll.dll!RtlUnhandledExceptionFilter
[+] 0x013AD384 = ntdll.dll!RtlUnhandledExceptionFilter2
[+] 0x802409B2 = ntdll.dll!RtlUnicodeStringToAnsiSize
[+] 0x2C4E4BA4 = ntdll.dll!RtlUnicodeStringToAnsiString
[+] 0x7FE044A7 = ntdll.dll!RtlUnicodeStringToCountedOemString
[+] 0x24A63F1B = ntdll.dll!RtlUnicodeStringToInteger
[+] 0xA8192518 = ntdll.dll!RtlUnicodeStringToOemSize
[+] 0x2995252E = ntdll.dll!RtlUnicodeStringToOemString
[+] 0x665FBFD7 = ntdll.dll!RtlUnicodeToCustomCPN
[+] 0xC636BB29 = ntdll.dll!RtlUnicodeToMultiByteN
[+] 0xC8D1BF17 = ntdll.dll!RtlUnicodeToMultiByteSize
[+] 0x5C085E6F = ntdll.dll!RtlUnicodeToOemN
[+] 0x2C09ED43 = ntdll.dll!RtlUnicodeToUTF8N
[+] 0x8DC43EB9 = ntdll.dll!RtlUniform
[+] 0xB4C11369 = ntdll.dll!RtlUnlockBootStatusData
[+] 0x59A3E86C = ntdll.dll!RtlUnlockCurrentThread
[+] 0x638634FB = ntdll.dll!RtlUnlockHeap
[+] 0x8C5D025F = ntdll.dll!RtlUnlockMemoryBlockLookaside
[+] 0x458856C3 = ntdll.dll!RtlUnlockMemoryStreamRegion
[+] 0x6440669E = ntdll.dll!RtlUnlockMemoryZone
[+] 0x9E1C3F6A = ntdll.dll!RtlUnlockModuleSection
[+] 0x89184087 = ntdll.dll!RtlUnwind
[+] 0x4C5E2AC8 = ntdll.dll!RtlUpcaseUnicodeChar
[+] 0xA1182118 = ntdll.dll!RtlUpcaseUnicodeString
[+] 0xF0E77210 = ntdll.dll!RtlUpcaseUnicodeStringToAnsiString
[+] 0x198F570B = ntdll.dll!RtlUpcaseUnicodeStringToCountedOemString
[+] 0x4E629DC2 = ntdll.dll!RtlUpcaseUnicodeStringToOemString
[+] 0xC484890A = ntdll.dll!RtlUpcaseUnicodeToCustomCPN
[+] 0x0FD1AC4F = ntdll.dll!RtlUpcaseUnicodeToMultiByteN
[+] 0x1851F0D5 = ntdll.dll!RtlUpcaseUnicodeToOemN
[+] 0xB05F5374 = ntdll.dll!RtlUpdateClonedCriticalSection
[+] 0x043D6BF4 = ntdll.dll!RtlUpdateClonedSRWLock
[+] 0xB9733E16 = ntdll.dll!RtlUpdateTimer
[+] 0x84AD1B04 = ntdll.dll!RtlUpperChar
[+] 0xB4D43026 = ntdll.dll!RtlUpperString
[+] 0xD2EAE6FE = ntdll.dll!RtlUserThreadStart
[+] 0x2EC66C1C = ntdll.dll!RtlUshortByteSwap
[+] 0x9C57DC81 = ntdll.dll!RtlValidAcl
[+] 0x2C387DBC = ntdll.dll!RtlValidRelativeSecurityDescriptor
[+] 0x449EEFBB = ntdll.dll!RtlValidSecurityDescriptor
[+] 0xC017DE01 = ntdll.dll!RtlValidSid
[+] 0x68B5D968 = ntdll.dll!RtlValidateHeap
[+] 0x04484619 = ntdll.dll!RtlValidateProcessHeaps
[+] 0x1DC9A187 = ntdll.dll!RtlValidateUnicodeString
[+] 0x81E9F494 = ntdll.dll!RtlVerifyVersionInfo
[+] 0x2AC7097D = ntdll.dll!RtlWakeAllConditionVariable
[+] 0xCB4301DC = ntdll.dll!RtlWakeConditionVariable
[+] 0x1873B4C0 = ntdll.dll!RtlWalkFrameChain
[+] 0xE5761C02 = ntdll.dll!RtlWalkHeap
[+] 0x8C98E0A5 = ntdll.dll!RtlWeaklyEnumerateEntryHashTable
[+] 0xE077F59E = ntdll.dll!RtlWerpReportException
[+] 0x199E8F43 = ntdll.dll!RtlWow64CallFunction64
[+] 0xAC492367 = ntdll.dll!RtlWow64EnableFsRedirection
[+] 0xAE1D2EAA = ntdll.dll!RtlWow64EnableFsRedirectionEx
[+] 0x00DD2C8C = ntdll.dll!RtlWow64LogMessageInEventLogger
[+] 0x4E1796A0 = ntdll.dll!RtlWriteMemoryStream
[+] 0xCFD2610B = ntdll.dll!RtlWriteRegistryValue
[+] 0xE88E1C84 = ntdll.dll!RtlZeroHeap
[+] 0xBD784139 = ntdll.dll!RtlZeroMemory
[+] 0x94BCCA8A = ntdll.dll!RtlZombifyActivationContext
[+] 0x55FE8045 = ntdll.dll!RtlpApplyLengthFunction
[+] 0x6900BFE6 = ntdll.dll!RtlpCheckDynamicTimeZoneInformation
[+] 0xDFA5A093 = ntdll.dll!RtlpCleanupRegistryKeys
[+] 0x8FB84BE0 = ntdll.dll!RtlpConvertCultureNamesToLCIDs
[+] 0x520A4819 = ntdll.dll!RtlpConvertLCIDsToCultureNames
[+] 0x464829B0 = ntdll.dll!RtlpCreateProcessRegistryInfo
[+] 0x31F0D98C = ntdll.dll!RtlpEnsureBufferSize
[+] 0x1D641191 = ntdll.dll!RtlpGetLCIDFromLangInfoNode
[+] 0x46644E9A = ntdll.dll!RtlpGetNameFromLangInfoNode
[+] 0xE9FF1D35 = ntdll.dll!RtlpGetSystemDefaultUILanguage
[+] 0x9C98CCBB = ntdll.dll!RtlpGetUserOrMachineUILanguage4NLS
[+] 0xD37E0F8A = ntdll.dll!RtlpInitializeLangRegistryInfo
[+] 0x8E83FA48 = ntdll.dll!RtlpIsQualifiedLanguage
[+] 0x53FF289B = ntdll.dll!RtlpLoadMachineUIByPolicy
[+] 0xA5AC86A0 = ntdll.dll!RtlpLoadUserUIByPolicy
[+] 0x0AACAE7A = ntdll.dll!RtlpMuiFreeLangRegistryInfo
[+] 0x1B580DF8 = ntdll.dll!RtlpMuiRegCreateRegistryInfo
[+] 0x9E03C54B = ntdll.dll!RtlpMuiRegFreeRegistryInfo
[+] 0x3D89B54A = ntdll.dll!RtlpMuiRegLoadRegistryInfo
[+] 0xCD06B893 = ntdll.dll!RtlpNotOwnerCriticalSection
[+] 0xC28C7C91 = ntdll.dll!RtlpNtCreateKey
[+] 0x85A0FED7 = ntdll.dll!RtlpNtEnumerateSubKey
[+] 0xB044E55F = ntdll.dll!RtlpNtMakeTemporaryKey
[+] 0xF80391FE = ntdll.dll!RtlpNtOpenKey
[+] 0x36D8D3C0 = ntdll.dll!RtlpNtQueryValueKey
[+] 0x9837F6E1 = ntdll.dll!RtlpNtSetValueKey
[+] 0x29E2B3B3 = ntdll.dll!RtlpQueryDefaultUILanguage
[+] 0x4AD7FB5E = ntdll.dll!RtlpQueryProcessDebugInformationRemote
[+] 0x0DE1A757 = ntdll.dll!RtlpRefreshCachedUILanguage
[+] 0x0137913E = ntdll.dll!RtlpSetInstallLanguage
[+] 0x2A5FD65B = ntdll.dll!RtlpSetPreferredUILanguages
[+] 0x45657160 = ntdll.dll!RtlpSetUserPreferredUILanguages
[+] 0xED5BFC14 = ntdll.dll!RtlpUnWaitCriticalSection
[+] 0xE164B478 = ntdll.dll!RtlpVerifyAndCommitUILanguageSettings
[+] 0xA734ADE1 = ntdll.dll!RtlpWaitForCriticalSection
[+] 0x78E702F2 = ntdll.dll!RtlxAnsiStringToUnicodeSize
[+] 0xFFB775D2 = ntdll.dll!RtlxOemStringToUnicodeSize
[+] 0x402C9656 = ntdll.dll!RtlxUnicodeStringToAnsiSize
[+] 0xB9AD9D19 = ntdll.dll!RtlxUnicodeStringToOemSize
[+] 0xA6C5A06B = ntdll.dll!SbExecuteProcedure
[+] 0xB6809EF2 = ntdll.dll!SbSelectProcedure
[+] 0xB648B21E = ntdll.dll!ShipAssert
[+] 0x91D25377 = ntdll.dll!ShipAssertGetBufferInfo
[+] 0x1053F88A = ntdll.dll!ShipAssertMsgA
[+] 0x1103F88A = ntdll.dll!ShipAssertMsgW
[+] 0x752589C7 = ntdll.dll!TpAllocAlpcCompletion
[+] 0xE536C69C = ntdll.dll!TpAllocAlpcCompletionEx
[+] 0x1EAAD5B2 = ntdll.dll!TpAllocCleanupGroup
[+] 0x919163F9 = ntdll.dll!TpAllocIoCompletion
[+] 0x0E6548DD = ntdll.dll!TpAllocPool
[+] 0xCAA033EA = ntdll.dll!TpAllocTimer
[+] 0xF2A5B75D = ntdll.dll!TpAllocWait
[+] 0x0E5DB99D = ntdll.dll!TpAllocWork
[+] 0x01684432 = ntdll.dll!TpAlpcRegisterCompletionList
[+] 0x09A421AB = ntdll.dll!TpAlpcUnregisterCompletionList
[+] 0x7DC1B546 = ntdll.dll!TpCallbackIndependent
[+] 0xDE3379FE = ntdll.dll!TpCallbackLeaveCriticalSectionOnCompletion
[+] 0xDD3276A5 = ntdll.dll!TpCallbackMayRunLong
[+] 0xC7F07A7A = ntdll.dll!TpCallbackReleaseMutexOnCompletion
[+] 0xCD512855 = ntdll.dll!TpCallbackReleaseSemaphoreOnCompletion
[+] 0xABBA9ED0 = ntdll.dll!TpCallbackSetEventOnCompletion
[+] 0x58880E64 = ntdll.dll!TpCallbackUnloadDllOnCompletion
[+] 0x652280AE = ntdll.dll!TpCancelAsyncIoOperation
[+] 0xAFA26B98 = ntdll.dll!TpCaptureCaller
[+] 0x9147D4CA = ntdll.dll!TpCheckTerminateWorker
[+] 0x62AB5453 = ntdll.dll!TpDbgDumpHeapUsage
[+] 0x579185DA = ntdll.dll!TpDbgGetFreeInfo
[+] 0x7C369B3A = ntdll.dll!TpDbgSetLogRoutine
[+] 0xA0BDE337 = ntdll.dll!TpDisablePoolCallbackChecks
[+] 0x385B1D7D = ntdll.dll!TpDisassociateCallback
[+] 0xFED8FB34 = ntdll.dll!TpIsTimerSet
[+] 0x0E4F474A = ntdll.dll!TpPoolFreeUnusedNodes
[+] 0x71C731FF = ntdll.dll!TpPostWork
[+] 0xE7E91532 = ntdll.dll!TpQueryPoolStackInformation
[+] 0x0DE8E12E = ntdll.dll!TpReleaseAlpcCompletion
[+] 0xBD0DE310 = ntdll.dll!TpReleaseCleanupGroup
[+] 0x5C45D5D6 = ntdll.dll!TpReleaseCleanupGroupMembers
[+] 0x2FF47156 = ntdll.dll!TpReleaseIoCompletion
[+] 0x7172A67C = ntdll.dll!TpReleasePool
[+] 0xB7934C55 = ntdll.dll!TpReleaseTimer
[+] 0x55B314FC = ntdll.dll!TpReleaseWait
[+] 0x716B173C = ntdll.dll!TpReleaseWork
[+] 0x6BB8FE9D = ntdll.dll!TpSetDefaultPoolMaxThreads
[+] 0xE531F3D0 = ntdll.dll!TpSetDefaultPoolStackInformation
[+] 0x929A84B3 = ntdll.dll!TpSetPoolMaxThreads
[+] 0x889AC4B3 = ntdll.dll!TpSetPoolMinThreads
[+] 0xFD8A8F56 = ntdll.dll!TpSetPoolStackInformation
[+] 0x71044D6F = ntdll.dll!TpSetTimer
[+] 0x75D64C2A = ntdll.dll!TpSetWait
[+] 0xB1666583 = ntdll.dll!TpSimpleTryPost
[+] 0xC4DB29A2 = ntdll.dll!TpStartAsyncIoOperation
[+] 0x71A75A58 = ntdll.dll!TpWaitForAlpcCompletion
[+] 0xD5836B3B = ntdll.dll!TpWaitForIoCompletion
[+] 0xDCBFC424 = ntdll.dll!TpWaitForTimer
[+] 0xE4ACF9A1 = ntdll.dll!TpWaitForWait
[+] 0x0064FBE1 = ntdll.dll!TpWaitForWork
[+] 0x55A7E00D = ntdll.dll!VerSetConditionMask
[+] 0xD43D8EF5 = ntdll.dll!WerReportSQMEvent
[+] 0x908072B9 = ntdll.dll!WinSqmAddToAverageDWORD
[+] 0x5AC4D359 = ntdll.dll!WinSqmAddToStream
[+] 0x4D092B16 = ntdll.dll!WinSqmAddToStreamEx
[+] 0x078D339A = ntdll.dll!WinSqmCheckEscalationAddToStreamEx
[+] 0x1DC28497 = ntdll.dll!WinSqmCheckEscalationSetDWORD
[+] 0x0A557706 = ntdll.dll!WinSqmCheckEscalationSetDWORD64
[+] 0x5A574B21 = ntdll.dll!WinSqmCheckEscalationSetString
[+] 0xFFC8C81B = ntdll.dll!WinSqmCommonDatapointDelete
[+] 0xEF848EEE = ntdll.dll!WinSqmCommonDatapointSetDWORD
[+] 0x7AD80CBB = ntdll.dll!WinSqmCommonDatapointSetDWORD64
[+] 0xEB49D128 = ntdll.dll!WinSqmCommonDatapointSetStreamEx
[+] 0xAD0DD931 = ntdll.dll!WinSqmCommonDatapointSetString
[+] 0x845B9CD8 = ntdll.dll!WinSqmEndSession
[+] 0xFD17951C = ntdll.dll!WinSqmEventEnabled
[+] 0x854FD16A = ntdll.dll!WinSqmEventWrite
[+] 0x6DD2147B = ntdll.dll!WinSqmGetEscalationRuleStatus
[+] 0x77AAC20F = ntdll.dll!WinSqmGetInstrumentationProperty
[+] 0xE96A10A6 = ntdll.dll!WinSqmIncrementDWORD
[+] 0xD6B67500 = ntdll.dll!WinSqmIsOptedIn
[+] 0x497194F5 = ntdll.dll!WinSqmIsOptedInEx
[+] 0xA8BA738E = ntdll.dll!WinSqmSetDWORD
[+] 0xC85134A9 = ntdll.dll!WinSqmSetDWORD64
[+] 0xA4D5D6C2 = ntdll.dll!WinSqmSetEscalationInfo
[+] 0xD2A043F2 = ntdll.dll!WinSqmSetIfMaxDWORD
[+] 0xD27844F2 = ntdll.dll!WinSqmSetIfMinDWORD
[+] 0xD20BA2E0 = ntdll.dll!WinSqmSetString
[+] 0xF740CA44 = ntdll.dll!WinSqmStartSession
[+] 0x067A021A = ntdll.dll!ZwAcceptConnectPort
[+] 0xE049DE1A = ntdll.dll!ZwAccessCheck
[+] 0xB0F587E4 = ntdll.dll!ZwAccessCheckAndAuditAlarm
[+] 0xCFFDFA4B = ntdll.dll!ZwAccessCheckByType
[+] 0xC96D61F2 = ntdll.dll!ZwAccessCheckByTypeAndAuditAlarm
[+] 0x2D4B23BD = ntdll.dll!ZwAccessCheckByTypeResultList
[+] 0x829C0887 = ntdll.dll!ZwAccessCheckByTypeResultListAndAuditAlarm
[+] 0x052D2391 = ntdll.dll!ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
[+] 0xA2991B62 = ntdll.dll!ZwAddAtom
[+] 0x57849DFC = ntdll.dll!ZwAddBootEntry
[+] 0xB51772FE = ntdll.dll!ZwAddDriverEntry
[+] 0xA715382C = ntdll.dll!ZwAdjustGroupsToken
[+] 0x1F497E59 = ntdll.dll!ZwAdjustPrivilegesToken
[+] 0x330D87B5 = ntdll.dll!ZwAlertResumeThread
[+] 0xAC968DCF = ntdll.dll!ZwAlertThread
[+] 0x75BF5417 = ntdll.dll!ZwAllocateLocallyUniqueId
[+] 0x54EA6454 = ntdll.dll!ZwAllocateReserveObject
[+] 0x3D62FCA1 = ntdll.dll!ZwAllocateUserPhysicalPages
[+] 0x182A89E1 = ntdll.dll!ZwAllocateUuids
[+] 0x9608B139 = ntdll.dll!ZwAllocateVirtualMemory
[+] 0xCCDAAFFD = ntdll.dll!ZwAlpcAcceptConnectPort
[+] 0xF1EADB28 = ntdll.dll!ZwAlpcCancelMessage
[+] 0xA8CD69CE = ntdll.dll!ZwAlpcConnectPort
[+] 0xDE33DB42 = ntdll.dll!ZwAlpcCreatePort
[+] 0x88DDFC15 = ntdll.dll!ZwAlpcCreatePortSection
[+] 0x55B0BE4A = ntdll.dll!ZwAlpcCreateResourceReserve
[+] 0x8951A458 = ntdll.dll!ZwAlpcCreateSectionView
[+] 0xA84C3545 = ntdll.dll!ZwAlpcCreateSecurityContext
[+] 0x68D10C1E = ntdll.dll!ZwAlpcDeletePortSection
[+] 0x86B14C49 = ntdll.dll!ZwAlpcDeleteResourceReserve
[+] 0x6944B461 = ntdll.dll!ZwAlpcDeleteSectionView
[+] 0xD94CC344 = ntdll.dll!ZwAlpcDeleteSecurityContext
[+] 0x95C6B968 = ntdll.dll!ZwAlpcDisconnectPort
[+] 0x20EAB891 = ntdll.dll!ZwAlpcImpersonateClientOfPort
[+] 0xAEF2B918 = ntdll.dll!ZwAlpcOpenSenderProcess
[+] 0x566B73E2 = ntdll.dll!ZwAlpcOpenSenderThread
[+] 0x8AE9A9BF = ntdll.dll!ZwAlpcQueryInformation
[+] 0x0F4FB8F2 = ntdll.dll!ZwAlpcQueryInformationMessage
[+] 0xDBD3D6FC = ntdll.dll!ZwAlpcRevokeSecurityContext
[+] 0x7E3D06B0 = ntdll.dll!ZwAlpcSendWaitReceivePort
[+] 0xC88CF64E = ntdll.dll!ZwAlpcSetInformation
[+] 0xB219F584 = ntdll.dll!ZwApphelpCacheControl
[+] 0x6A4F7CB7 = ntdll.dll!ZwAreMappedFilesTheSame
[+] 0x21C3EA3F = ntdll.dll!ZwAssignProcessToJobObject
[+] 0xA20F9C4A = ntdll.dll!ZwCallbackReturn
[+] 0xB6312453 = ntdll.dll!ZwCancelIoFile
[+] 0x281D69AC = ntdll.dll!ZwCancelIoFileEx
[+] 0xA2DEF156 = ntdll.dll!ZwCancelSynchronousIoFile
[+] 0xEE6A44E2 = ntdll.dll!ZwCancelTimer
[+] 0xB3FB04C3 = ntdll.dll!ZwClearEvent
[+] 0xA1A4FF71 = ntdll.dll!ZwClose
[+] 0x85B7BA68 = ntdll.dll!ZwCloseObjectAuditAlarm
[+] 0xA935B561 = ntdll.dll!ZwCommitComplete
[+] 0xE83D3E91 = ntdll.dll!ZwCommitEnlistment
[+] 0x76F1FB24 = ntdll.dll!ZwCommitTransaction
[+] 0x6B4C6176 = ntdll.dll!ZwCompactKeys
[+] 0x61E7DABF = ntdll.dll!ZwCompareTokens
[+] 0x96B3D493 = ntdll.dll!ZwCompleteConnectPort
[+] 0xB786DE95 = ntdll.dll!ZwCompressKey
[+] 0x7D54B836 = ntdll.dll!ZwConnectPort
[+] 0xE2848AC0 = ntdll.dll!ZwContinue
[+] 0xBB3C2DAF = ntdll.dll!ZwCreateDebugObject
[+] 0x7D4F515A = ntdll.dll!ZwCreateDirectoryObject
[+] 0x421F1F42 = ntdll.dll!ZwCreateEnlistment
[+] 0x9C5ED0FF = ntdll.dll!ZwCreateEvent
[+] 0x4FCA376C = ntdll.dll!ZwCreateEventPair
[+] 0xBB883453 = ntdll.dll!ZwCreateFile
[+] 0xC74ABF85 = ntdll.dll!ZwCreateIoCompletion
[+] 0x505FFD83 = ntdll.dll!ZwCreateJobObject
[+] 0x59D0D1B1 = ntdll.dll!ZwCreateJobSet
[+] 0x0CA2A587 = ntdll.dll!ZwCreateKey
[+] 0x40122224 = ntdll.dll!ZwCreateKeyTransacted
[+] 0x4EE366AC = ntdll.dll!ZwCreateKeyedEvent
[+] 0xCCEFC696 = ntdll.dll!ZwCreateMailslotFile
[+] 0x75DDF3F4 = ntdll.dll!ZwCreateMutant
[+] 0x5A73E30A = ntdll.dll!ZwCreateNamedPipeFile
[+] 0x849046BE = ntdll.dll!ZwCreatePagingFile
[+] 0xC800D5D3 = ntdll.dll!ZwCreatePort
[+] 0x1EB3785B = ntdll.dll!ZwCreatePrivateNamespace
[+] 0x954FF18B = ntdll.dll!ZwCreateProcess
[+] 0xEFD0B7A4 = ntdll.dll!ZwCreateProcessEx
[+] 0x9CE01FCB = ntdll.dll!ZwCreateProfile
[+] 0xD3DC47A6 = ntdll.dll!ZwCreateProfileEx
[+] 0xB52A4D01 = ntdll.dll!ZwCreateResourceManager
[+] 0x9CF500E5 = ntdll.dll!ZwCreateSection
[+] 0x5A302AAA = ntdll.dll!ZwCreateSemaphore
[+] 0x0DFCFAB7 = ntdll.dll!ZwCreateSymbolicLinkObject
[+] 0xFD79D0AD = ntdll.dll!ZwCreateThread
[+] 0xFA48803E = ntdll.dll!ZwCreateThreadEx
[+] 0x2C4DFEC6 = ntdll.dll!ZwCreateTimer
[+] 0x282E5EC6 = ntdll.dll!ZwCreateToken
[+] 0x7C74CA33 = ntdll.dll!ZwCreateTransaction
[+] 0xCD0AA6EE = ntdll.dll!ZwCreateTransactionManager
[+] 0xB8E1D6D9 = ntdll.dll!ZwCreateUserProcess
[+] 0x475CA76F = ntdll.dll!ZwCreateWaitablePort
[+] 0x0D64C90A = ntdll.dll!ZwCreateWorkerFactory
[+] 0xA5D0B1CE = ntdll.dll!ZwDebugActiveProcess
[+] 0x0549ED22 = ntdll.dll!ZwDebugContinue
[+] 0x613CBED8 = ntdll.dll!ZwDelayExecution
[+] 0x18C77D93 = ntdll.dll!ZwDeleteAtom
[+] 0x129BCF14 = ntdll.dll!ZwDeleteBootEntry
[+] 0x7AE3B92D = ntdll.dll!ZwDeleteDriverEntry
[+] 0x0287CCD3 = ntdll.dll!ZwDeleteFile
[+] 0xFFB2AE67 = ntdll.dll!ZwDeleteKey
[+] 0x89A8FF9C = ntdll.dll!ZwDeleteObjectAuditAlarm
[+] 0x8EAD0060 = ntdll.dll!ZwDeletePrivateNamespace
[+] 0xC3C0CBD6 = ntdll.dll!ZwDeleteValueKey
[+] 0x58643796 = ntdll.dll!ZwDeviceIoControlFile
[+] 0x93E2F9D6 = ntdll.dll!ZwDisableLastKnownGood
[+] 0xD910A4E1 = ntdll.dll!ZwDisplayString
[+] 0x51C73BE2 = ntdll.dll!ZwDrawText
[+] 0xFACAC292 = ntdll.dll!ZwDuplicateObject
[+] 0xD65B5E63 = ntdll.dll!ZwDuplicateToken
[+] 0xC2943071 = ntdll.dll!ZwEnableLastKnownGood
[+] 0x325BBCB8 = ntdll.dll!ZwEnumerateBootEntries
[+] 0x23815561 = ntdll.dll!ZwEnumerateDriverEntries
[+] 0xBB4D6377 = ntdll.dll!ZwEnumerateKey
[+] 0x16093C0D = ntdll.dll!ZwEnumerateSystemEnvironmentValuesEx
[+] 0x84058666 = ntdll.dll!ZwEnumerateTransactionObject
[+] 0xA18E265E = ntdll.dll!ZwEnumerateValueKey
[+] 0x9D12D146 = ntdll.dll!ZwExtendSection
[+] 0xFB6894E4 = ntdll.dll!ZwFilterToken
[+] 0xF1C20878 = ntdll.dll!ZwFindAtom
[+] 0x0C5DAD8C = ntdll.dll!ZwFlushBuffersFile
[+] 0x1C62EFAE = ntdll.dll!ZwFlushInstallUILanguage
[+] 0x95DCB1BB = ntdll.dll!ZwFlushInstructionCache
[+] 0x2040765F = ntdll.dll!ZwFlushKey
[+] 0xF029F930 = ntdll.dll!ZwFlushProcessWriteBuffers
[+] 0x407C51A4 = ntdll.dll!ZwFlushVirtualMemory
[+] 0x5431C3CD = ntdll.dll!ZwFlushWriteBuffer
[+] 0x42F6320D = ntdll.dll!ZwFreeUserPhysicalPages
[+] 0xECB90A6C = ntdll.dll!ZwFreeVirtualMemory
[+] 0x982DB722 = ntdll.dll!ZwFreezeRegistry
[+] 0x5A141E25 = ntdll.dll!ZwFreezeTransactions
[+] 0xAD0DF41D = ntdll.dll!ZwFsControlFile
[+] 0x5E396116 = ntdll.dll!ZwGetContextThread
[+] 0x6F46039B = ntdll.dll!ZwGetCurrentProcessorNumber
[+] 0x5B926912 = ntdll.dll!ZwGetDevicePowerState
[+] 0x4A6261FE = ntdll.dll!ZwGetMUIRegistryInfo
[+] 0x557B51B0 = ntdll.dll!ZwGetNextProcess
[+] 0x697E68B3 = ntdll.dll!ZwGetNextThread
[+] 0x658725A1 = ntdll.dll!ZwGetNlsSectionPtr
[+] 0x6C2EA71B = ntdll.dll!ZwGetNotificationResourceManager
[+] 0x99DAF9B1 = ntdll.dll!ZwGetPlugPlayEvent
[+] 0x38E1C12C = ntdll.dll!ZwGetWriteWatch
[+] 0x4309B2CF = ntdll.dll!ZwImpersonateAnonymousToken
[+] 0x695F9F0F = ntdll.dll!ZwImpersonateClientOfPort
[+] 0x5921B606 = ntdll.dll!ZwImpersonateThread
[+] 0x4E059296 = ntdll.dll!ZwInitializeNlsFiles
[+] 0xE2063507 = ntdll.dll!ZwInitializeRegistry
[+] 0xA0DC594A = ntdll.dll!ZwInitiatePowerAction
[+] 0x973F62BF = ntdll.dll!ZwIsProcessInJob
[+] 0x6189D5B9 = ntdll.dll!ZwIsSystemResumeAutomatic
[+] 0xA884CFCF = ntdll.dll!ZwIsUILanguageComitted
[+] 0x95C4903A = ntdll.dll!ZwListenPort
[+] 0x91324AFC = ntdll.dll!ZwLoadDriver
[+] 0xD1274A40 = ntdll.dll!ZwLoadKey
[+] 0xD7B6ABB8 = ntdll.dll!ZwLoadKey2
[+] 0xE5A6E4F3 = ntdll.dll!ZwLoadKeyEx
[+] 0x6156587C = ntdll.dll!ZwLockFile
[+] 0x5A531965 = ntdll.dll!ZwLockProductActivationKeys
[+] 0x35D9CCCB = ntdll.dll!ZwLockRegistryKey
[+] 0xACB6229C = ntdll.dll!ZwLockVirtualMemory
[+] 0xBE163F16 = ntdll.dll!ZwMakePermanentObject
[+] 0x3FB21FE8 = ntdll.dll!ZwMakeTemporaryObject
[+] 0x36420033 = ntdll.dll!ZwMapCMFModule
[+] 0xEA8EA996 = ntdll.dll!ZwMapUserPhysicalPages
[+] 0x2A4FC415 = ntdll.dll!ZwMapUserPhysicalPagesScatter
[+] 0x1E40C013 = ntdll.dll!ZwMapViewOfSection
[+] 0x2E7FF75A = ntdll.dll!ZwModifyBootEntry
[+] 0x73EDCAB4 = ntdll.dll!ZwModifyDriverEntry
[+] 0x75B70D8D = ntdll.dll!ZwNotifyChangeDirectoryFile
[+] 0xFD676A6B = ntdll.dll!ZwNotifyChangeKey
[+] 0x21A379D5 = ntdll.dll!ZwNotifyChangeMultipleKeys
[+] 0xE9432FF9 = ntdll.dll!ZwNotifyChangeSession
[+] 0xC5E3A306 = ntdll.dll!ZwOpenDirectoryObject
[+] 0xD347C29A = ntdll.dll!ZwOpenEnlistment
[+] 0xBEB017B0 = ntdll.dll!ZwOpenEvent
[+] 0x64354991 = ntdll.dll!ZwOpenEventPair
[+] 0xE45E589D = ntdll.dll!ZwOpenFile
[+] 0x117395A9 = ntdll.dll!ZwOpenIoCompletion
[+] 0x64CB0FA8 = ntdll.dll!ZwOpenJobObject
[+] 0xD12BEAA2 = ntdll.dll!ZwOpenKey
[+] 0xE6CEFD73 = ntdll.dll!ZwOpenKeyEx
[+] 0xF134736A = ntdll.dll!ZwOpenKeyTransacted
[+] 0xE8F12F7B = ntdll.dll!ZwOpenKeyTransactedEx
[+] 0xE00C0A04 = ntdll.dll!ZwOpenKeyedEvent
[+] 0xAB67067E = ntdll.dll!ZwOpenMutant
[+] 0xA711BC3A = ntdll.dll!ZwOpenObjectAuditAlarm
[+] 0xAC15BCFE = ntdll.dll!ZwOpenPrivateNamespace
[+] 0x29A19DD3 = ntdll.dll!ZwOpenProcess
[+] 0x8D94E3FC = ntdll.dll!ZwOpenProcessToken
[+] 0x010D53E2 = ntdll.dll!ZwOpenProcessTokenEx
[+] 0xFDBE9EAD = ntdll.dll!ZwOpenResourceManager
[+] 0x3146AD2D = ntdll.dll!ZwOpenSection
[+] 0x6E9B3CCF = ntdll.dll!ZwOpenSemaphore
[+] 0x31469D35 = ntdll.dll!ZwOpenSession
[+] 0x668E235B = ntdll.dll!ZwOpenSymbolicLinkObject
[+] 0x3302E337 = ntdll.dll!ZwOpenThread
[+] 0x924586AE = ntdll.dll!ZwOpenThreadToken
[+] 0x2D360063 = ntdll.dll!ZwOpenThreadTokenEx
[+] 0x4E9F4578 = ntdll.dll!ZwOpenTimer
[+] 0x97395378 = ntdll.dll!ZwOpenTransaction
[+] 0x259BCF91 = ntdll.dll!ZwOpenTransactionManager
[+] 0xDC593D0C = ntdll.dll!ZwPlugPlayControl
[+] 0xAEAC9882 = ntdll.dll!ZwPowerInformation
[+] 0xB829EB24 = ntdll.dll!ZwPrePrepareComplete
[+] 0xA54AAF55 = ntdll.dll!ZwPrePrepareEnlistment
[+] 0x043AFC5E = ntdll.dll!ZwPrepareComplete
[+] 0xA98EFDE8 = ntdll.dll!ZwPrepareEnlistment
[+] 0x4CD763CB = ntdll.dll!ZwPrivilegeCheck
[+] 0x04C8D91A = ntdll.dll!ZwPrivilegeObjectAuditAlarm
[+] 0x856DF951 = ntdll.dll!ZwPrivilegedServiceAuditAlarm
[+] 0xEEF1B94F = ntdll.dll!ZwPropagationComplete
[+] 0x3952939B = ntdll.dll!ZwPropagationFailed
[+] 0xAAE7F949 = ntdll.dll!ZwProtectVirtualMemory
[+] 0xFAC74F06 = ntdll.dll!ZwPulseEvent
[+] 0x332261A2 = ntdll.dll!ZwQueryAttributesFile
[+] 0x26618337 = ntdll.dll!ZwQueryBootEntryOrder
[+] 0x4652E45D = ntdll.dll!ZwQueryBootOptions
[+] 0x8CCFBF5C = ntdll.dll!ZwQueryDebugFilterState
[+] 0x486FF52C = ntdll.dll!ZwQueryDefaultLocale
[+] 0x8AAE21B0 = ntdll.dll!ZwQueryDefaultUILanguage
[+] 0x611D94D2 = ntdll.dll!ZwQueryDirectoryFile
[+] 0x633D70D4 = ntdll.dll!ZwQueryDirectoryObject
[+] 0x342BC912 = ntdll.dll!ZwQueryDriverEntryOrder
[+] 0x747FD12E = ntdll.dll!ZwQueryEaFile
[+] 0x34174EE6 = ntdll.dll!ZwQueryEvent
[+] 0x1182AAF7 = ntdll.dll!ZwQueryFullAttributesFile
[+] 0x5DA08679 = ntdll.dll!ZwQueryInformationAtom
[+] 0xC7B54EA4 = ntdll.dll!ZwQueryInformationEnlistment
[+] 0x4760D5B9 = ntdll.dll!ZwQueryInformationFile
[+] 0x164C4E35 = ntdll.dll!ZwQueryInformationJobObject
[+] 0x53D97739 = ntdll.dll!ZwQueryInformationPort
[+] 0x6067A2CE = ntdll.dll!ZwQueryInformationProcess
[+] 0xF7F564B2 = ntdll.dll!ZwQueryInformationResourceManager
[+] 0xF3A22A10 = ntdll.dll!ZwQueryInformationThread
[+] 0x335ABD8B = ntdll.dll!ZwQueryInformationToken
[+] 0xF788F6E4 = ntdll.dll!ZwQueryInformationTransaction
[+] 0x2F903D1D = ntdll.dll!ZwQueryInformationTransactionManager
[+] 0xD26FF569 = ntdll.dll!ZwQueryInformationWorkerFactory
[+] 0x20A76DD9 = ntdll.dll!ZwQueryInstallUILanguage
[+] 0x066ED1FB = ntdll.dll!ZwQueryIntervalProfile
[+] 0xBE5A7C78 = ntdll.dll!ZwQueryIoCompletion
[+] 0xAB01877F = ntdll.dll!ZwQueryKey
[+] 0x44E8FE89 = ntdll.dll!ZwQueryLicenseValue
[+] 0x0333BB4F = ntdll.dll!ZwQueryMultipleValueKey
[+] 0x651AB1B8 = ntdll.dll!ZwQueryMutant
[+] 0xED220EEE = ntdll.dll!ZwQueryObject
[+] 0x6C7EB794 = ntdll.dll!ZwQueryOpenSubKeys
[+] 0xBB8239DA = ntdll.dll!ZwQueryOpenSubKeysEx
[+] 0x9979E229 = ntdll.dll!ZwQueryPerformanceCounter
[+] 0xC4FA00DC = ntdll.dll!ZwQueryPortInformationProcess
[+] 0xDE880BDF = ntdll.dll!ZwQueryQuotaInformationFile
[+] 0x8B147ACB = ntdll.dll!ZwQuerySection
[+] 0xDB2A0B45 = ntdll.dll!ZwQuerySecurityAttributesToken
[+] 0xE2CB1EEC = ntdll.dll!ZwQuerySecurityObject
[+] 0xE20EA425 = ntdll.dll!ZwQuerySemaphore
[+] 0x01C8D6F6 = ntdll.dll!ZwQuerySymbolicLinkObject
[+] 0x7E6BE625 = ntdll.dll!ZwQuerySystemEnvironmentValue
[+] 0x36CDDE1E = ntdll.dll!ZwQuerySystemEnvironmentValueEx
[+] 0x95B14A5D = ntdll.dll!ZwQuerySystemInformation
[+] 0x0826EC24 = ntdll.dll!ZwQuerySystemInformationEx
[+] 0x1C4A2755 = ntdll.dll!ZwQuerySystemTime
[+] 0xC4067CAE = ntdll.dll!ZwQueryTimer
[+] 0x6A1FC297 = ntdll.dll!ZwQueryTimerResolution
[+] 0x99683862 = ntdll.dll!ZwQueryValueKey
[+] 0x232C95EB = ntdll.dll!ZwQueryVirtualMemory
[+] 0xE730EA00 = ntdll.dll!ZwQueryVolumeInformationFile
[+] 0xD8D8AE9C = ntdll.dll!ZwQueueApcThread
[+] 0xD1FFFBF5 = ntdll.dll!ZwQueueApcThreadEx
[+] 0xDF68F660 = ntdll.dll!ZwRaiseException
[+] 0x5A84F02B = ntdll.dll!ZwRaiseHardError
[+] 0xE74E5738 = ntdll.dll!ZwReadFile
[+] 0xC2457855 = ntdll.dll!ZwReadFileScatter
[+] 0x26E5B435 = ntdll.dll!ZwReadOnlyEnlistment
[+] 0x2C12A65D = ntdll.dll!ZwReadRequestData
[+] 0x6CAC06CC = ntdll.dll!ZwReadVirtualMemory
[+] 0x741BF928 = ntdll.dll!ZwRecoverEnlistment
[+] 0xCE28B9F4 = ntdll.dll!ZwRecoverResourceManager
[+] 0xB33CA3C8 = ntdll.dll!ZwRecoverTransactionManager
[+] 0x61D2288F = ntdll.dll!ZwRegisterProtocolAddressInformation
[+] 0x237A22A8 = ntdll.dll!ZwRegisterThreadTerminatePort
[+] 0x96461973 = ntdll.dll!ZwReleaseKeyedEvent
[+] 0xA2526A1F = ntdll.dll!ZwReleaseMutant
[+] 0xB0891396 = ntdll.dll!ZwReleaseSemaphore
[+] 0x7612C62D = ntdll.dll!ZwReleaseWorkerFactoryWorker
[+] 0x8B12C71F = ntdll.dll!ZwRemoveIoCompletion
[+] 0x60861CA2 = ntdll.dll!ZwRemoveIoCompletionEx
[+] 0xF4FB7969 = ntdll.dll!ZwRemoveProcessDebug
[+] 0x7FA31EA4 = ntdll.dll!ZwRenameKey
[+] 0x5B6AB612 = ntdll.dll!ZwRenameTransactionManager
[+] 0x4ADDBBF6 = ntdll.dll!ZwReplaceKey
[+] 0x5981BFEE = ntdll.dll!ZwReplacePartitionUnit
[+] 0xC7A5D22A = ntdll.dll!ZwReplyPort
[+] 0x98F53354 = ntdll.dll!ZwReplyWaitReceivePort
[+] 0xD92129E5 = ntdll.dll!ZwReplyWaitReceivePortEx
[+] 0x6836AD75 = ntdll.dll!ZwReplyWaitReplyPort
[+] 0x04B2D033 = ntdll.dll!ZwRequestPort
[+] 0xD026F75D = ntdll.dll!ZwRequestWaitReplyPort
[+] 0x8202CD47 = ntdll.dll!ZwResetEvent
[+] 0x4F587BFC = ntdll.dll!ZwResetWriteWatch
[+] 0xCE15BCFD = ntdll.dll!ZwRestoreKey
[+] 0x9CEBB8C0 = ntdll.dll!ZwResumeProcess
[+] 0x766071A1 = ntdll.dll!ZwResumeThread
[+] 0x3E161466 = ntdll.dll!ZwRollbackComplete
[+] 0x2054FFF6 = ntdll.dll!ZwRollbackEnlistment
[+] 0x821BBBE2 = ntdll.dll!ZwRollbackTransaction
[+] 0x080ABB0F = ntdll.dll!ZwRollforwardTransactionManager
[+] 0x50EF5B2B = ntdll.dll!ZwSaveKey
[+] 0xD7AB1F93 = ntdll.dll!ZwSaveKeyEx
[+] 0xD1736E24 = ntdll.dll!ZwSaveMergedKeys
[+] 0x077C41BA = ntdll.dll!ZwSecureConnectPort
[+] 0xB88F4AD8 = ntdll.dll!ZwSerializeBoot
[+] 0x16A7949F = ntdll.dll!ZwSetBootEntryOrder
[+] 0x695B9855 = ntdll.dll!ZwSetBootOptions
[+] 0x5E456116 = ntdll.dll!ZwSetContextThread
[+] 0x9E541958 = ntdll.dll!ZwSetDebugFilterState
[+] 0x6D738623 = ntdll.dll!ZwSetDefaultHardErrorPort
[+] 0x0A9CF334 = ntdll.dll!ZwSetDefaultLocale
[+] 0x5A8EADD3 = ntdll.dll!ZwSetDefaultUILanguage
[+] 0x45B0230F = ntdll.dll!ZwSetDriverEntryOrder
[+] 0xBA91391E = ntdll.dll!ZwSetEaFile
[+] 0x611557A9 = ntdll.dll!ZwSetEvent
[+] 0xF5004774 = ntdll.dll!ZwSetEventBoostPriority
[+] 0x578C40D9 = ntdll.dll!ZwSetHighEventPair
[+] 0x0B7B5D2F = ntdll.dll!ZwSetHighWaitLowEventPair
[+] 0x9E40A072 = ntdll.dll!ZwSetInformationDebugObject
[+] 0xD0777BA2 = ntdll.dll!ZwSetInformationEnlistment
[+] 0xD2A057E9 = ntdll.dll!ZwSetInformationFile
[+] 0x5BEC0F4E = ntdll.dll!ZwSetInformationJobObject
[+] 0x1115686A = ntdll.dll!ZwSetInformationKey
[+] 0xC3EE36B0 = ntdll.dll!ZwSetInformationObject
[+] 0xC17E21D2 = ntdll.dll!ZwSetInformationProcess
[+] 0xFC567B31 = ntdll.dll!ZwSetInformationResourceManager
[+] 0xC382B633 = ntdll.dll!ZwSetInformationThread
[+] 0x44DF1788 = ntdll.dll!ZwSetInformationToken
[+] 0x5F793CF6 = ntdll.dll!ZwSetInformationTransaction
[+] 0x2D98FF4A = ntdll.dll!ZwSetInformationTransactionManager
[+] 0xCE8179C3 = ntdll.dll!ZwSetInformationWorkerFactory
[+] 0x91AE542C = ntdll.dll!ZwSetIntervalProfile
[+] 0x5E1B94BE = ntdll.dll!ZwSetIoCompletion
[+] 0x22B98456 = ntdll.dll!ZwSetIoCompletionEx
[+] 0xF45E5BD8 = ntdll.dll!ZwSetLdtEntries
[+] 0xD7400222 = ntdll.dll!ZwSetLowEventPair
[+] 0x79759675 = ntdll.dll!ZwSetLowWaitHighEventPair
[+] 0x2427CCF7 = ntdll.dll!ZwSetQuotaInformationFile
[+] 0xD3113054 = ntdll.dll!ZwSetSecurityObject
[+] 0xE65C2C36 = ntdll.dll!ZwSetSystemEnvironmentValue
[+] 0x32DF6278 = ntdll.dll!ZwSetSystemEnvironmentValueEx
[+] 0x6591D680 = ntdll.dll!ZwSetSystemInformation
[+] 0xE1317534 = ntdll.dll!ZwSetSystemPowerState
[+] 0x32C92BB6 = ntdll.dll!ZwSetSystemTime
[+] 0x22C88897 = ntdll.dll!ZwSetThreadExecutionState
[+] 0xF1048570 = ntdll.dll!ZwSetTimer
[+] 0xDCF5B0FB = ntdll.dll!ZwSetTimerEx
[+] 0xF55F44C7 = ntdll.dll!ZwSetTimerResolution
[+] 0xD00D16EB = ntdll.dll!ZwSetUuidSeed
[+] 0x1DC23473 = ntdll.dll!ZwSetValueKey
[+] 0xEFF316FE = ntdll.dll!ZwSetVolumeInformationFile
[+] 0x379C3A04 = ntdll.dll!ZwShutdownSystem
[+] 0x892FD2DE = ntdll.dll!ZwShutdownWorkerFactory
[+] 0x3709E5DE = ntdll.dll!ZwSignalAndWaitForSingleObject
[+] 0x15573DF2 = ntdll.dll!ZwSinglePhaseReject
[+] 0x85FD99D0 = ntdll.dll!ZwStartProfile
[+] 0x333A1C14 = ntdll.dll!ZwStopProfile
[+] 0x4DBF31A0 = ntdll.dll!ZwSuspendProcess
[+] 0xE57C67BB = ntdll.dll!ZwSuspendThread
[+] 0x7B40ADDC = ntdll.dll!ZwSystemDebugControl
[+] 0x49DBC7E6 = ntdll.dll!ZwTerminateJobObject
[+] 0x2135E0B4 = ntdll.dll!ZwTerminateProcess
[+] 0xBB5F022A = ntdll.dll!ZwTerminateThread
[+] 0xB3C7A26E = ntdll.dll!ZwTestAlert
[+] 0x7A5A95FD = ntdll.dll!ZwThawRegistry
[+] 0x2801CC47 = ntdll.dll!ZwThawTransactions
[+] 0x092600FF = ntdll.dll!ZwTraceControl
[+] 0xEFC73507 = ntdll.dll!ZwTraceEvent
[+] 0x4408DF2C = ntdll.dll!ZwTranslateFilePath
[+] 0x09D7B9F5 = ntdll.dll!ZwUmsThreadYield
[+] 0xCCA1B2B4 = ntdll.dll!ZwUnloadDriver
[+] 0x88DB265E = ntdll.dll!ZwUnloadKey
[+] 0xB8A46957 = ntdll.dll!ZwUnloadKey2
[+] 0xD29DEC61 = ntdll.dll!ZwUnloadKeyEx
[+] 0x4244161B = ntdll.dll!ZwUnlockFile
[+] 0x1AA319A3 = ntdll.dll!ZwUnlockVirtualMemory
[+] 0xBD21ADD1 = ntdll.dll!ZwUnmapViewOfSection
[+] 0x15AEA15C = ntdll.dll!ZwVdmControl
[+] 0x51E85759 = ntdll.dll!ZwWaitForDebugEvent
[+] 0x28DC555A = ntdll.dll!ZwWaitForKeyedEvent
[+] 0xF69B90A5 = ntdll.dll!ZwWaitForMultipleObjects
[+] 0x408879BD = ntdll.dll!ZwWaitForMultipleObjects32
[+] 0x7C358785 = ntdll.dll!ZwWaitForSingleObject
[+] 0x05AEF4A4 = ntdll.dll!ZwWaitForWorkViaWorkerFactory
[+] 0xDEDAF3D9 = ntdll.dll!ZwWaitHighEventPair
[+] 0xADA0130C = ntdll.dll!ZwWaitLowEventPair
[+] 0x12F420AD = ntdll.dll!ZwWorkerFactoryWorkerReady
[+] 0xC9918DFC = ntdll.dll!ZwWow64CallFunction64
[+] 0x11496BFE = ntdll.dll!ZwWow64CsrAllocateCaptureBuffer
[+] 0x878EFB76 = ntdll.dll!ZwWow64CsrAllocateMessagePointer
[+] 0x904037B7 = ntdll.dll!ZwWow64CsrCaptureMessageBuffer
[+] 0x162CF9F6 = ntdll.dll!ZwWow64CsrCaptureMessageString
[+] 0xB1FF73B4 = ntdll.dll!ZwWow64CsrClientCallServer
[+] 0xC68C4854 = ntdll.dll!ZwWow64CsrClientConnectToServer
[+] 0xD7A8F867 = ntdll.dll!ZwWow64CsrFreeCaptureBuffer
[+] 0x434C1956 = ntdll.dll!ZwWow64CsrGetProcessId
[+] 0x6AD6DED0 = ntdll.dll!ZwWow64CsrIdentifyAlertableThread
[+] 0xA3582D05 = ntdll.dll!ZwWow64CsrVerifyRegion
[+] 0x0590AA88 = ntdll.dll!ZwWow64DebuggerCall
[+] 0x48EB2074 = ntdll.dll!ZwWow64GetCurrentProcessorNumberEx
[+] 0xB5DDC901 = ntdll.dll!ZwWow64GetNativeSystemInformation
[+] 0xE02F9BE8 = ntdll.dll!ZwWow64InterlockedPopEntrySList
[+] 0x170B5C2A = ntdll.dll!ZwWow64QueryInformationProcess64
[+] 0x2BB67B2E = ntdll.dll!ZwWow64QueryVirtualMemory64
[+] 0x5A9ADCF6 = ntdll.dll!ZwWow64ReadVirtualMemory64
[+] 0x8CA2753F = ntdll.dll!ZwWow64WriteVirtualMemory64
[+] 0xC84D57C0 = ntdll.dll!ZwWriteFile
[+] 0x9513978D = ntdll.dll!ZwWriteFileGather
[+] 0x4BF2B75A = ntdll.dll!ZwWriteRequestData
[+] 0x64B045D4 = ntdll.dll!ZwWriteVirtualMemory
[+] 0x23531262 = ntdll.dll!ZwYieldExecution
[+] 0x89B2C331 = ntdll.dll!_CIcos
[+] 0x9B52C331 = ntdll.dll!_CIlog
[+] 0xA3D2C331 = ntdll.dll!_CIpow
[+] 0xA98AC1B1 = ntdll.dll!_CIsin
[+] 0xA54D6FD4 = ntdll.dll!_CIsqrt
[+] 0xE8B866E0 = ntdll.dll!__isascii
[+] 0x08AC71A9 = ntdll.dll!__iscsym
[+] 0x14A067E1 = ntdll.dll!__iscsymf
[+] 0xE8A86840 = ntdll.dll!__toascii
[+] 0x0BD4FDA5 = ntdll.dll!_alldiv
[+] 0x8EB88026 = ntdll.dll!_alldvrm
[+] 0x1D8500A5 = ntdll.dll!_allmul
[+] 0xB4A0DA53 = ntdll.dll!_alloca_probe
[+] 0x07363115 = ntdll.dll!_alloca_probe_16
[+] 0xC20AF02C = ntdll.dll!_alloca_probe_8
[+] 0x278CFCA5 = ntdll.dll!_allrem
[+] 0x2984FD65 = ntdll.dll!_allshl
[+] 0x29B4FD65 = ntdll.dll!_allshr
[+] 0x13C520E9 = ntdll.dll!_atoi64
[+] 0x6B24FDE6 = ntdll.dll!_aulldiv
[+] 0x90BB7AA6 = ntdll.dll!_aulldvrm
[+] 0x86DCFCE6 = ntdll.dll!_aullrem
[+] 0x8904FDA6 = ntdll.dll!_aullshr
[+] 0x2984F063 = ntdll.dll!_chkstk
[+] 0x88718D8A = ntdll.dll!_fltused
[+] 0xAA00933F = ntdll.dll!_ftol
[+] 0x2B497F0A = ntdll.dll!_i64toa
[+] 0x6E0C1E0A = ntdll.dll!_i64toa_s
[+] 0x2BF97F0A = ntdll.dll!_i64tow
[+] 0x9A0C1E0A = ntdll.dll!_i64tow_s
[+] 0xA9A8C33F = ntdll.dll!_itoa
[+] 0x05DD2B29 = ntdll.dll!_itoa_s
[+] 0xAA58C33F = ntdll.dll!_itow
[+] 0x31DD2B29 = ntdll.dll!_itow_s
[+] 0x153C9305 = ntdll.dll!_lfind
[+] 0xA9A8F33F = ntdll.dll!_ltoa
[+] 0x05E92B29 = ntdll.dll!_ltoa_s
[+] 0xAA58F33F = ntdll.dll!_ltow
[+] 0x31E92B29 = ntdll.dll!_ltow_s
[+] 0x3FBA83FC = ntdll.dll!_makepath_s
[+] 0xE8FC7126 = ntdll.dll!_memccpy
[+] 0xE8B4D066 = ntdll.dll!_memicmp
[+] 0x9293CA49 = ntdll.dll!_snprintf
[+] 0x409EEDA4 = ntdll.dll!_snprintf_s
[+] 0xBDC8B5B8 = ntdll.dll!_snscanf_s
[+] 0x4D946B81 = ntdll.dll!_snwprintf
[+] 0x00C73B92 = ntdll.dll!_snwprintf_s
[+] 0xC7868DBD = ntdll.dll!_snwscanf_s
[+] 0x3588DA21 = ntdll.dll!_splitpath
[+] 0xFDE2E3CC = ntdll.dll!_splitpath_s
[+] 0x7CB871E9 = ntdll.dll!_strcmpi
[+] 0x68F0D129 = ntdll.dll!_stricmp
[+] 0x1BFD6129 = ntdll.dll!_strlwr
[+] 0x7CEBC947 = ntdll.dll!_strnicmp
[+] 0xDFF425A1 = ntdll.dll!_strnset_s
[+] 0x1F0385C9 = ntdll.dll!_strset_s
[+] 0x2DFD5F69 = ntdll.dll!_strupr
[+] 0x9293CB69 = ntdll.dll!_swprintf
[+] 0x8A4981CB = ntdll.dll!_ui64toa
[+] 0x2E0CCE21 = ntdll.dll!_ui64toa_s
[+] 0x8AF981CB = ntdll.dll!_ui64tow
[+] 0x5A0CCE22 = ntdll.dll!_ui64tow_s
[+] 0xAB24F34A = ntdll.dll!_ultoa
[+] 0x64E92DEA = ntdll.dll!_ultoa_s
[+] 0xABD4F34A = ntdll.dll!_ultow
[+] 0x90E92DEA = ntdll.dll!_ultow_s
[+] 0x03526B86 = ntdll.dll!_vscwprintf
[+] 0x52948261 = ntdll.dll!_vsnprintf
[+] 0x40CCF394 = ntdll.dll!_vsnprintf_s
[+] 0x0E526B86 = ntdll.dll!_vsnwprintf
[+] 0x30473D02 = ntdll.dll!_vsnwprintf_s
[+] 0x52948381 = ntdll.dll!_vswprintf
[+] 0xE8ACD1A9 = ntdll.dll!_wcsicmp
[+] 0x9C0D7121 = ntdll.dll!_wcslwr
[+] 0x80EFC727 = ntdll.dll!_wcsnicmp
[+] 0xCEF445C1 = ntdll.dll!_wcsnset_s
[+] 0x230783A9 = ntdll.dll!_wcsset_s
[+] 0xB7153B7F = ntdll.dll!_wcstoui64
[+] 0xAE0D6F61 = ntdll.dll!_wcsupr
[+] 0x3FEA89EC = ntdll.dll!_wmakepath_s
[+] 0x2D62E54C = ntdll.dll!_wsplitpath_s
[+] 0xA9E9A33F = ntdll.dll!_wtoi
[+] 0x141D20E9 = ntdll.dll!_wtoi64
[+] 0xAA01A33F = ntdll.dll!_wtol
[+] 0x04322FCF = ntdll.dll!abs
[+] 0x2A103F8F = ntdll.dll!atan
[+] 0x29E8430F = ntdll.dll!atoi
[+] 0x2A00430F = ntdll.dll!atol
[+] 0xA7AC4C82 = ntdll.dll!bsearch
[+] 0x0C00618F = ntdll.dll!ceil
[+] 0x0832330F = ntdll.dll!cos
[+] 0x04388FCF = ntdll.dll!fabs
[+] 0x2030F342 = ntdll.dll!floor
[+] 0x9FD501E0 = ntdll.dll!isalnum
[+] 0xA374FEA0 = ntdll.dll!isalpha
[+] 0xABCD2121 = ntdll.dll!iscntrl
[+] 0x120CCEE1 = ntdll.dll!isdigit
[+] 0x85AD60A3 = ntdll.dll!isgraph
[+] 0x31FD2DE5 = ntdll.dll!islower
[+] 0x160D6027 = ntdll.dll!isprint
[+] 0x200D8D67 = ntdll.dll!ispunct
[+] 0x85953D69 = ntdll.dll!isspace
[+] 0xA3FD3DEA = ntdll.dll!isupper
[+] 0x0C84FFE0 = ntdll.dll!iswalpha
[+] 0x1EA581E1 = ntdll.dll!iswctype
[+] 0x7B1CD022 = ntdll.dll!iswdigit
[+] 0x9B0D2F26 = ntdll.dll!iswlower
[+] 0xEEA53EA9 = ntdll.dll!iswspace
[+] 0x852418A2 = ntdll.dll!iswxdigit
[+] 0x7B20D022 = ntdll.dll!isxdigit
[+] 0x0438EFCF = ntdll.dll!labs
[+] 0x19D2330F = ntdll.dll!log
[+] 0x9F052C8A = ntdll.dll!mbstowcs
[+] 0x89E50182 = ntdll.dll!memchr
[+] 0x89D502C2 = ntdll.dll!memcmp
[+] 0x8A1D0382 = ntdll.dll!memcpy
[+] 0x22ED3BE1 = ntdll.dll!memcpy_s
[+] 0xA15D12A6 = ntdll.dll!memmove
[+] 0xF2F104E7 = ntdll.dll!memmove_s
[+] 0xA9F500C2 = ntdll.dll!memset
[+] 0x2252330F = ntdll.dll!pow
[+] 0xA0416408 = ntdll.dll!qsort
[+] 0x280A318F = ntdll.dll!sin
[+] 0x1F90D2E8 = ntdll.dll!sprintf
[+] 0x7FE11587 = ntdll.dll!sprintf_s
[+] 0x244163CF = ntdll.dll!sqrt
[+] 0x859C6309 = ntdll.dll!sscanf
[+] 0x02C51DA0 = ntdll.dll!sscanf_s
[+] 0x0A0D4FC9 = ntdll.dll!strcat
[+] 0x1F004DC1 = ntdll.dll!strcat_s
[+] 0x09FD5189 = ntdll.dll!strchr
[+] 0x09ED52C9 = ntdll.dll!strcmp
[+] 0x0A355389 = ntdll.dll!strcpy
[+] 0x29013DC1 = ntdll.dll!strcpy_s
[+] 0x29E071E8 = ntdll.dll!strcspn
[+] 0x1BDD50C9 = ntdll.dll!strlen
[+] 0x0A111E28 = ntdll.dll!strncat
[+] 0x1FF3E581 = ntdll.dll!strncat_s
[+] 0x09F12128 = ntdll.dll!strncmp
[+] 0x0A3921E8 = ntdll.dll!strncpy
[+] 0x29F4D581 = ntdll.dll!strncpy_s
[+] 0x1BE11F28 = ntdll.dll!strnlen
[+] 0x07C94268 = ntdll.dll!strpbrk
[+] 0x0A015FE8 = ntdll.dll!strrchr
[+] 0x29DD5389 = ntdll.dll!strspn
[+] 0x29FD5489 = ntdll.dll!strstr
[+] 0x8D012DCA = ntdll.dll!strtok_s
[+] 0x2BCD5349 = ntdll.dll!strtol
[+] 0x21D18328 = ntdll.dll!strtoul
[+] 0x9290D369 = ntdll.dll!swprintf
[+] 0x3FE135A4 = ntdll.dll!swprintf_s
[+] 0x06C8B5A0 = ntdll.dll!swscanf_s
[+] 0x2A0A2F8F = ntdll.dll!tan
[+] 0x31ED2F45 = ntdll.dll!tolower
[+] 0xA3ED3F4A = ntdll.dll!toupper
[+] 0xA60D2EA6 = ntdll.dll!towlower
[+] 0x180D3EAA = ntdll.dll!towupper
[+] 0x141822D5 = ntdll.dll!vDbgPrintEx
[+] 0xF90359C0 = ntdll.dll!vDbgPrintExWithPrefix
[+] 0x9590D2E9 = ntdll.dll!vsprintf
[+] 0xFFE115A4 = ntdll.dll!vsprintf_s
[+] 0x40CD35A4 = ntdll.dll!vswprintf_s
[+] 0x8A1D5FC1 = ntdll.dll!wcscat
[+] 0x23044BA1 = ntdll.dll!wcscat_s
[+] 0x8A0D6181 = ntdll.dll!wcschr
[+] 0x89FD62C1 = ntdll.dll!wcscmp
[+] 0x8A456381 = ntdll.dll!wcscpy
[+] 0x2D053BA1 = ntdll.dll!wcscpy_s
[+] 0xA99C7269 = ntdll.dll!wcscspn
[+] 0x9BED60C1 = ntdll.dll!wcslen
[+] 0x89CD1EA9 = ntdll.dll!wcsncat
[+] 0x0EF405A1 = ntdll.dll!wcsncat_s
[+] 0x89AD21A9 = ntdll.dll!wcsncmp
[+] 0x89F52269 = ntdll.dll!wcsncpy
[+] 0x18F4F5A1 = ntdll.dll!wcsncpy_s
[+] 0x9B9D1FA9 = ntdll.dll!wcsnlen
[+] 0x878542E9 = ntdll.dll!wcspbrk
[+] 0x89BD6069 = ntdll.dll!wcsrchr
[+] 0xA9ED6381 = ntdll.dll!wcsspn
[+] 0xAA0D6481 = ntdll.dll!wcsstr
[+] 0xABDD6341 = ntdll.dll!wcstol
[+] 0x95052C6A = ntdll.dll!wcstombs
[+] 0xA18D83A9 = ntdll.dll!wcstoul