//=====================================================
Exception time: Tue Feb 16 18:05:28 2010
Exception code: C0000005 ACCESS_VIOLATION
Fault address:  77086592 01:00065592 C:\Windows\system32\ntdll.dll

Modules:
Game: none
ntdll: exported
kernel32: exported
USER32: exported
GDI32: exported
ADVAPI32: exported
RPCRT4: exported
SHELL32: exported
msvcrt: exported
SHLWAPI: exported
dbghelp: exported
protect: exported
ShimEng: exported
apphelp: exported
AcGenral: exported
UxTheme: exported
WINMM: exported
ole32: exported
OLEAUT32: exported
OLEACC: exported
NETAPI32: exported
PSAPI: exported
MSACM32: exported
VERSION: exported
sfc: exported
sfc_os: exported
SETUPAPI: exported
USERENV: exported
Secur32: exported
dwmapi: exported
urlmon: exported
iertutil: exported
MPR: exported
IMM32: exported
MSCTF: exported
LPK: exported
USP10: exported
comctl32: exported
IPHLPAPI: exported
dhcpcsvc: exported
DNSAPI: exported
WS2_32: exported
NSI: exported
WINNSI: exported
dhcpcsvc6: exported
wbload: exported
WBLIND: exported
msimg32: exported
wbhelp: exported
GameModule: exported

Registers:
EAX:00000000
EBX:00000000
ECX:0012F1B4
EDX:000000FE
ESI:00000000
EDI:00000000
CS:EIP:001B:77086592
SS:ESP:0023:0012F124  EBP:0012F188
DS:0023  ES:0023  FS:003B  GS:0000
Flags:00010297

Call stack:
Address   Frame     Function            SourceFile
77086592  0012F188  0001:00065592 C:\Windows\system32\ntdll.dll1E7
75B27DB4  0012F1B8  0001:00056DB4 C:\Windows\system32\ole32.dll1E7
757A4035  0012F1D8  0001:00003035 C:\Windows\system32\IMM32.DLL1E7
757A3D42  0012F1F0  0001:00002D42 C:\Windows\system32\IMM32.DLL1E7
757A2DA1  0012F200  0001:00001DA1 C:\Windows\system32\IMM32.DLL1E7
757A3136  0012F224  0001:00002136 C:\Windows\system32\IMM32.DLL1E7
759D36D8  0012F240  0001:000126D8 C:\Windows\system32\USER32.dll1E7
759D258F  0012F494  0001:0001158F C:\Windows\system32\USER32.dll1E7
759D2539  0012F4B8  0001:00011539 C:\Windows\system32\USER32.dll1E7
759D23FB  0012F4D4  0001:000113FB C:\Windows\system32\USER32.dll1E7
759DFD72  0012F500  0001:0001ED72 C:\Windows\system32\USER32.dll1E7
759DFE4A  0012F578  0001:0001EE4A C:\Windows\system32\USER32.dll1E7
759D9D6A  0012F5D4  0001:00018D6A C:\Windows\system32\USER32.dll1E7
759D9F8D  0012F5FC  0001:00018F8D C:\Windows\system32\USER32.dll1E7
77085DAE  0012FC60  0001:00064DAE C:\Windows\system32\ntdll.dll1E7
759CDA52  0012FC7C  0001:0000CA52 C:\Windows\system32\USER32.dll1E7
========================
Local Variables And Parameters

Call stack:
Address   Frame     Function            SourceFile
77086592  0012F188  0001:00065592 C:\Windows\system32\ntdll.dll1E7

75B27DB4  0012F1B8  0001:00056DB4 C:\Windows\system32\ole32.dll1E7

757A4035  0012F1D8  0001:00003035 C:\Windows\system32\IMM32.DLL1E7

757A3D42  0012F1F0  0001:00002D42 C:\Windows\system32\IMM32.DLL1E7

757A2DA1  0012F200  0001:00001DA1 C:\Windows\system32\IMM32.DLL1E7

757A3136  0012F224  0001:00002136 C:\Windows\system32\IMM32.DLL1E7

759D36D8  0012F240  0001:000126D8 C:\Windows\system32\USER32.dll1E7

759D258F  0012F494  0001:0001158F C:\Windows\system32\USER32.dll1E7

759D2539  0012F4B8  0001:00011539 C:\Windows\system32\USER32.dll1E7

759D23FB  0012F4D4  0001:000113FB C:\Windows\system32\USER32.dll1E7

759DFD72  0012F500  0001:0001ED72 C:\Windows\system32\USER32.dll1E7

759DFE4A  0012F578  0001:0001EE4A C:\Windows\system32\USER32.dll1E7

759D9D6A  0012F5D4  0001:00018D6A C:\Windows\system32\USER32.dll1E7

759D9F8D  0012F5FC  0001:00018F8D C:\Windows\system32\USER32.dll1E7

77085DAE  0012FC60  0001:00064DAE C:\Windows\system32\ntdll.dll1E7

759CDA52  0012FC7C  0001:0000CA52 C:\Windows\system32\USER32.dll1E7

========================
Global Variables
	'RtlSetThreadIsCritical'@66
	'RtlSetProcessIsCritical'@60
	'RtlConvertExclusiveToShared'@51
	'EtwRegisterSecurityProvider'@46
	'RtlInitializeRXact'@441
	'RtlAddAuditAccessAce'@98
	'RtlLockBootStatusData'@193
	'RtlGetSetBootStatusData'@244
	'RtlpNtEnumerateSubKey'@190
	'RtlCompareString'@144
	'RtlUnlockBootStatusData'@630
	'RtlQueryHeapInformation'@622
	'RtlIpv6StringToAddressExA'@718
	'RtlEqualComputerName'@102
	'wcscpy'@208
	'LdrRegisterDllNotification'@263
	'RtlSetIoCompletionCallback'@765
	'RtlAppendPathElement'@756
	'TpAllocIoCompletion'@423
	'TpStartAsyncIoOperation'@622
	'WinSqmSetString'@341
	'RtlInitializeGenericTableAvl'@282
	'isspace'@264
	'RtlConnectToSm'@278
	'iswspace'@24
	'RtlCreateUserProcess'@628
	'RtlCheckRegistryKey'@773
	'RtlpVerifyAndCommitUILanguageSettings'@219
	'RtlpRefreshCachedUILanguage'@994
	'EtwEventWriteEndScenario'@297
	'EtwEventWriteStartScenario'@323
	'LdrFlushAlternateResourceModules'@242
	'RtlGetLengthWithoutTrailingPathSeperators'@1611
	'RtlInitMemoryStream'@94
	'RtlReadMemoryStream'@70
	'RtlCopyMappedMemory'@871
	'TpWaitForWork'@218
	'AlpcAdjustCompletionListConcurrencyCount'@233
	'RtlpGetLCIDFromLangInfoNode'@69
	'RtlpGetNameFromLangInfoNode'@137
	'RtlpIsQualifiedLanguage'@432
	'RtlDefaultNpAcl'@604
	'RtlAddAccessDeniedAce'@222
	'RtlCreateAndSetSD'@611
	'RtlCreateUserSecurityObject'@533
	'RtlEraseUnicodeString'@2731
	'RtlDecompressBuffer'@318
	'RtlSendMsgToSm'@275
	'RtlAddAccessDeniedAceEx'@201
	'RtlCopySecurityDescriptor'@184
	'RtlSetSecurityObject'@1121
	'RtlGetElementGenericTable'@197
	'RtlDeleteTimerQueueEx'@514
	'RtlEnumerateGenericTableAvl'@37
	'RtlEnumerateGenericTableWithoutSplayingAvl'@376
	'RtlSetAllBits'@39
	'TpCallbackLeaveCriticalSectionOnCompletion'@234
	'RtlDeregisterWait'@24
	'itow'@45
	'wcsspn'@77
	'AlpcRegisterCompletionList'@196
	'AlpcGetMessageFromCompletionList'@374
	'AlpcUnregisterCompletionList'@246
	'AlpcRegisterCompletionListWorkerThread'@179
	'AlpcUnregisterCompletionListWorkerThread'@197
	'AlpcFreeCompletionListMessage'@170
	'AlpcGetOutstandingCompletionListMessageCount'@31
	'RtlClearAllBits'@611
	'atoi'@11
	'atol'@73
	'RtlSecondsSince1970ToTime'@55
	'TpAllocWork'@622
	'RtlOwnerAcesPresent'@48
	'TpIsTimerSet'@175
	'RtlRemovePrivileges'@233
	'RtlLockMemoryBlockLookaside'@187
	'RtlLockCurrentThread'@265
	'RtlUnlockMemoryBlockLookaside'@114
	'RtlUnlockCurrentThread'@491
	'AlpcMaxAllowedMessageLength'@238
	'RtlEnumerateGenericTable'@324
	'TpReleaseWork'@218
	'RtlStartRXact'@83
	'RtlAbortRXact'@161
	'RtlUpcaseUnicodeStringToOemString'@218
	'RtlEqualDomainName'@93
	'RtlFreeOemString'@31
	'RtlInsertElementGenericTableAvl'@492
	'RtlSystemTimeToLocalTime'@91
	'RtlSidHashInitialize'@131
	'RtlSidHashLookup'@482
	'RtlDnsHostNameToComputerName'@190
	'RtlpNtOpenKey'@50
	'RtlpNtQueryValueKey'@188
	'RtlAreAllAccessesGranted'@108
	'EtwWriteUMSecurityEvent'@168
	'RtlDeleteElementGenericTableAvl'@335
	'RtlUpdateTimer'@655
	'RtlIpv6AddressToStringA'@597
	'RtlComputeCrc32'@2007
	'WinSqmEventWrite'@127
	'WinSqmStartSession'@2225
	'RtlRunEncodeUnicodeString'@78
	'RtlRunDecodeUnicodeString'@841
	'EtwEventActivityIdControl'@222
	'RtlNewSecurityObject'@233
	'RtlAddVectoredExceptionHandler'@1381
	'RtlGetProcessHeaps'@1372
	'RtlUpcaseUnicodeToOemN'@905
	'RtlGetFileMUIPath'@1812
	'RtlAcquirePrivilege'@431
	'RtlReleasePrivilege'@633
	'RtlConvertSharedToExclusive'@79
	'RtlFreeUserStack'@145
	'RtlAddAce'@321
	'RtlSetControlSecurityDescriptor'@659
	'TpReleaseCleanupGroup'@313
	'TpReleaseCleanupGroupMembers'@4083
	'RtlIpv4AddressToStringA'@1131
	'RtlPrefixString'@1041
	'RtlEqualPrefixSid'@743
	'RtlQueryInformationAcl'@719
	'EtwpGetCpuSpeed'@909
	'RtlCaptureStackBackTrace'@123
	'RtlWalkFrameChain'@368
	'RtlCompactHeap'@202
	'EtwDeliverDataBlock'@398
	'RtlValidRelativeSecurityDescriptor'@339
	'ultow'@102
	'RtlCreateServiceSid'@274
	'RtlCopyString'@63
	'RtlCreateBoundaryDescriptor'@178
	'RtlAddSIDToBoundaryDescriptor'@1993
	'EtwpNotificationThread'@3355
	'vsnprintf'@248
	'TpReleasePool'@538
	'TpWaitForTimer'@874
	'wtol'@73
	'wtoi'@67
	'RtlUnicodeStringToOemString'@415
	'RtlOemToUnicodeN'@238
	'RtlOemStringToUnicodeString'@1272
	'RtlValidateHeap'@1543
	'RtlAddVectoredContinueHandler'@127
	'RtlInsertElementGenericTableFullAvl'@364
	'qsort'@288
	'RtlReleaseMemoryStream'@64
	'RtlNumberGenericTableElementsAvl'@20
	'RtlFinalReleaseOutOfProcessMemoryStream'@431
	'RtlAddRefMemoryStream'@28
	'RtlReadOutOfProcessMemoryStream'@93
	'RtlStatMemoryStream'@128
	'RtlInitOutOfProcessMemoryStream'@100
	'RtlQueryInterfaceMemoryStream'@144
	'RtlMapGenericMask'@137
	'RtlFindAceByType'@5448
	'RtlDeleteSecurityObject'@73
	'RtlNewSecurityObjectEx'@647
	'RtlSidDominates'@618
	'RtlCharToInteger'@222
	'itoa'@2151
	'RtlTimeToSecondsSince1970'@113
	'isdigit'@37
	'_isascii'@175
	'RtlIpv4StringToAddressA'@265
	'isxdigit'@367
	'RtlIpv6StringToAddressA'@369
	'strtol'@186
	'RtlpEnsureBufferSize'@691
	'RtlAppendStringToString'@711
	'RtlCreateTimerQueue'@493
	'RtlDeleteAce'@266
	'RtlCreateUserStack'@488
	'RtlCreateEnvironment'@367
	'RtlIpv4StringToAddressExW'@127
	'wcstol'@86
	'RtlIpv6AddressToStringW'@247
	'RtlIpv6AddressToStringExW'@390
	'wcscspn'@74
	'RtlEqualString'@92
	'RtlUpperChar'@84
	'RtlIpv4AddressToStringW'@60
	'RtlIpv4AddressToStringExW'@136
	'RtlIpv6StringToAddressExW'@91
	'RtlIpv6StringToAddressW'@337
	'RtlIpv4StringToAddressW'@1349
	'RtlIdnToAscii'@1054
	'TpSimpleTryPost'@781
	'RtlCreateUserThread'@82
	'RtlCopyLuid'@1556
	'wcstoul'@71
	'RtlAddAccessAllowedAceEx'@36
	'RtlGetLongestNtPathLength'@11
	'EtwGetTraceLoggerHandle'@99
	'EtwGetTraceEnableLevel'@48
	'EtwGetTraceEnableFlags'@310
	'TpSetWait'@450
	'RtlQueueWorkItem'@1785
	'wcstoui64'@792
	'TpReleaseWait'@191
	'RtlDeregisterWaitEx'@919
	'TpWaitForWait'@159
	'RtlSelfRelativeToAbsoluteSD'@1087
	'TpAllocTimer'@568
	'RtlCreateTimer'@461
	'TpAllocCleanupGroup'@721
	'RtlMultiByteToUnicodeSize'@135
	'RtlUnlockMemoryZone'@102
	'RtlUnlockModuleSection'@115
	'RtlCreateMemoryZone'@126
	'RtlCreateMemoryBlockLookaside'@370
	'RtlLockMemoryZone'@205
	'RtlLockModuleSection'@981
	'RtlDestroyMemoryZone'@81
	'EtwTraceMessage'@36
	'EtwTraceMessageVa'@295
	'AlpcInitializeMessageAttribute'@93
	'TpSetTimer'@992
	'EtwEventWrite'@39
	'EtwEventWriteFull'@2932
	'TpPostWork'@941
	'RtlImpersonateSelfEx'@190
	'RtlImpersonateSelf'@26
	'RtlAdjustPrivilege'@189
	'RtlGetOwnerSecurityDescriptor'@68
	'RtlGetGroupSecurityDescriptor'@647
	'TpReleaseTimer'@537
	'RtlDeleteTimer'@1049
	'RtlDestroyMemoryBlockLookaside'@432
	'WinSqmEventEnabled'@101
	'WinSqmAddToStream'@508
	'RtlUpcaseUnicodeString'@170
	'RtlDowncaseUnicodeString'@969
	'RtlNtPathNameToDosPathName'@3397
	'RtlAddAtomToAtomTable'@503
	'RtlCreateAtomTable'@149
	'RtlStringFromGUID'@497
	'RtlTryAcquirePebLock'@1041
	'RtlQueryAtomInAtomTable'@274
	'RtlGetDaclSecurityDescriptor'@2106
	'RtlNumberOfSetBitsUlongPtr'@393
	'TpAllocPool'@1686
	'TpAllocWait'@175
	'RtlRegisterWait'@465
	'RtlIdentifierAuthoritySid'@20
	'RtlDoesFileExists_U'@35
	'RtlValidSecurityDescriptor'@173
	'EtwRegisterTraceGuidsA'@285
	'RtlMakeSelfRelativeSD'@227
	'RtlAbsoluteToSelfRelativeSD'@70
	'RtlIsTextUnicode'@920
	'TpSetPoolMaxThreads'@153
	'TpSetPoolMinThreads'@244
	'DbgPrintEx'@84
	'A_SHAInit'@165
	'A_SHAUpdate'@103
	'A_SHAFinal'@208
	'RtlLengthSecurityDescriptor'@8043
	'RtlGetControlSecurityDescriptor'@46
	'MD5Init'@58
	'MD5Final'@141
	'MD5Update'@1953
	'RtlActivateActivationContextEx'@373
	'RtlActivateActivationContext'@436
	'RtlDeactivateActivationContext'@220
	'RtlDosPathNameToNtPathName_U_WithStatus'@117
	'RtlCreateActivationContext'@5553
	'LdrpResGetRCConfig'@2890
	'RtlIsThreadWithinLoaderCallout'@772
	'RtlDeleteAtomFromAtomTable'@736
	'RtlDestroyHeap'@352
	'RtlSetEnvironmentStrings'@159
	'RtlDosSearchPath_U'@359
	'TpCaptureCaller'@117
	'RtlQueryInformationActiveActivationContext'@37
	'LdrFindResourceDirectory_U'@53
	'LdrLoadAlternateResourceModule'@1722
	'LdrOpenImageFileOptionsKey'@245
	'strnicmp'@827
	'LdrGetFileNameFromLoadAsDataTable'@269
	'RtlFindMessage'@1106
	'RtlInitializeResource'@179
	'EtwRegisterTraceGuidsW'@325
	'VerSetConditionMask'@65
	'RtlVerifyVersionInfo'@464
	'RtlReleaseResource'@96
	'RtlAcquireResourceExclusive'@361
	'RtlSetEnvironmentVariable'@184
	'RtlAcquireResourceShared'@80
	'RtlFormatMessageEx'@1723
	'wcsncmp'@2564
	'LdrFindEntryForAddress'@4203
	'RtlGetUserInfoHeap'@700
	'RtlLcidToLocaleName'@1803
	'RtlGetActiveActivationContext'@60
	'RtlEncodeSystemPointer'@2168
	'LdrLoadDll'@2182
	'RtlRunOnceInitialize'@0
	'RtlInitializeConditionVariable'@0
	'RtlInitializeSRWLock'@300
	'RtlInitializeBitMap'@2475
	'RtlGetNtProductType'@42
	'RtlGetVersion'@284
	'RtlLocaleNameToLcid'@230
	'RtlLCIDToCultureName'@420
	'RtlGetThreadPreferredUILanguages'@1246
	'RtlRandomEx'@102
	'RtlRunOnceExecuteOnce'@56
	'RtlRunOnceBeginInitialize'@85
	'RtlCreateHeap'@1905
	'RtlCultureNameToLCID'@3756
	'RtlEncodePointer'@53
	'CsrClientConnectToServer'@346
	'RtlInitializeHandleTable'@166
	'RtlInitializeSListHead'@34
	'RtlUniform'@611
	'RtlNormalizeProcessParams'@475
	'RtlSetUnhandledExceptionFilter'@394
	'RtlResetRtlTranslations'@241
	'RtlInitializeAtomPackage'@938
	'RtlInitNlsTables'@49
	'RtlInitCodePageTable'@407
	'RtlRunOnceComplete'@392
	'RtlCreateTagHeap'@89
	'LdrSetDllManifestProber'@31
	'RtlSetThreadPoolStartFunc'@82
	'RtlGetFullPathName_UstrEx'@906
	'vsnwprintf'@459
	'RtlRealSuccessor'@46
	'RtlIsGenericTableEmpty'@54
	'RtlSetCurrentDirectory_U'@739
	'RtlCreateProcessParametersEx'@836
	'RtlDestroyProcessParameters'@38
	'RtlSetOwnerSecurityDescriptor'@75
	'RtlSetGroupSecurityDescriptor'@105
	'RtlQueryElevationFlags'@102
	'RtlGetProductInfo'@234
	'CsrCaptureMessageString'@96
	'CsrCaptureMessageMultiUnicodeStringsInPlace'@193
	'wcspbrk'@1287
	'RtlUpcaseUnicodeToMultiByteN'@170
	'toupper'@79
	'RtlDuplicateUnicodeString'@445
	'RtlUnicodeToOemN'@518
	'RtlLookupElementGenericTableAvl'@33
	'RtlLookupElementGenericTableFullAvl'@59
	'RtlpApplyLengthFunction'@116
	'RtlGetLengthWithoutLastFullDosOrNtPathElement'@637
	'RtlCreateEnvironmentEx'@229
	'RtlDestroyEnvironment'@1536
	'LdrResSearchResource'@1118
	'LdrpResGetResourceDirectory'@398
	'LdrpResGetMappingSize'@2477
	'LdrResFindResourceDirectory'@1879
	'RtlEqualSid'@38
	'RtlInitializeSid'@1728
	'RtlSubAuthoritySid'@507
	'EtwNotificationRegister'@309
	'LdrDisableThreadCalloutsForDll'@143
	'RtlSetBits'@66
	'RtlFindClearBitsAndSet'@51
	'RtlFindClearBits'@212
	'RtlCreateUnicodeStringFromAsciiz'@55
	'RtlInitializeGenericTable'@62
	'RtlSetCriticalSectionSpinCount'@52
	'EtwEventRegister'@721
	'RtlFlsAlloc'@214
	'WinSqmIsOptedIn'@357
	'RtlTimeToSecondsSince1980'@297
	'LdrEnumerateLoadedModules'@190
	'RtlGetNtVersionNumbers'@48
	'RtlSetHeapInformation'@236
	'RtlExpandEnvironmentStrings_U'@95
	'LdrFindResourceEx_U'@998
	'RtlpLoadUserUIByPolicy'@1233
	'RtlpMuiRegFreeRegistryInfo'@244
	'RtlpInitializeLangRegistryInfo'@235
	'RtlpMuiRegLoadRegistryInfo'@603
	'RtlGetParentLocaleName'@3388
	'RtlSetEnvironmentVar'@629
	'LdrAddLoadAsDataTable'@503
	'RtlSubAuthorityCountSid'@670
	'strncmp'@582
	'RtlSetThreadErrorMode'@71
	'RtlSetThreadPreferredUILanguages'@442
	'RtlGetCurrentDirectory_U'@1590
	'RtlCreateUnicodeString'@309
	'LdrQueryImageFileExecutionOptions'@39
	'LdrQueryImageFileExecutionOptionsEx'@494
	'LdrQueryImageFileKeyOption'@223
	'RtlInsertElementGenericTable'@50
	'RtlInsertElementGenericTableFull'@274
	'RtlGUIDFromString'@921
	'wcsnicmp'@99
	'strcmpi'@0
	'stricmp'@98
	'RtlGetSaclSecurityDescriptor'@53
	'RtlGetAce'@1225
	'RtlInitializeCriticalSectionAndSpinCount'@906
	'TpCallbackMayRunLong'@1930
	'iswctype'@152
	'iswdigit'@96
	'RtlGetCurrentPeb'@15
	'RtlRegisterThreadWithCsrss'@1019
	'RtlLengthSid'@28
	'RtlSetSaclSecurityDescriptor'@59
	'RtlLengthRequiredSid'@35
	'RtlAllocateAndInitializeSid'@170
	'RtlFreeSid'@102
	'RtlAddMandatoryAce'@442
	'DbgPrint'@214
	'RtlpCreateProcessRegistryInfo'@281
	'RtlpGetSystemDefaultUILanguage'@1011
	'RtlQueryRegistryValues'@873
	'RtlpQueryDefaultUILanguage'@474
	'RtlCutoverTimeToSystemTime'@401
	'RtlpCheckDynamicTimeZoneInformation'@1172
	'RtlUnicodeStringToInteger'@277
	'RtlIntegerToChar'@183
	'RtlIntegerToUnicodeString'@194
	'RtlReleasePebLock'@23
	'RtlAcquirePebLock'@1672
	'RtlOpenCurrentUser'@1319
	'RtlCompareUnicodeString'@46
	'RtlMultiAppendUnicodeStringBuffer'@1378
	'RtlUnwind'@441
	'RtlQueryEnvironmentVariable_U'@84
	'RtlDecodeSystemPointer'@35
	'RtlDosSearchPath_Ustr'@367
	'LdrUnloadAlternateResourceModule'@24
	'LdrUnloadAlternateResourceModuleEx'@1327
	'RtlDecodePointer'@1675
	'LdrRemoveLoadAsDataTable'@525
	'RtlClearBits'@84
	'RtlReleaseActivationContext'@622
	'EtwNotificationUnregister'@150
	'EtwUnregisterTraceGuids'@71
	'RtlAreBitsSet'@126
	'EtwEventUnregister'@183
	'RtlDeleteResource'@309
	'RtlCheckForOrphanedCriticalSections'@189
	'RtlDeleteElementGenericTable'@92
	'RtlDelete'@305
	'RtlFlsFree'@316
	'RtlExitUserProcess'@283
	'LdrShutdownProcess'@565
	'RtlNumberGenericTableElements'@20
	'RtlDestroyHandleTable'@182
	'RtlSubtreePredecessor'@84
	'RtlQueryActivationContextApplicationSettings'@121
	'RtlDllShutdownInProgress'@195
	'LdrUnloadDll'@529
	'LdrAddRefDll'@245
	'RtlPcToFileHeader'@412
	'RtlCompareUnicodeStrings'@500
	'RtlValidSid'@85
	'wcschr'@43
	'RtlGetCurrentTransaction'@18
	'RtlSetCurrentTransaction'@42
	'RtlCopySid'@52
	'RtlCreateSecurityDescriptor'@46
	'RtlFirstFreeAce'@84
	'RtlValidAcl'@560
	'RtlConvertSidToUnicodeString'@418
	'RtlGetNtGlobalFlags'@18
	'RtlCopyUnicodeString'@90
	'RtlAppendUnicodeToString'@249
	'RtlQueryEnvironmentVariable'@270
	'wcsicmp'@86
	'RtlUpcaseUnicodeChar'@720
	'RtlAppendUnicodeStringToString'@1974
	'LdrAccessResource'@110
	'RtlSetDaclSecurityDescriptor'@164
	'RtlFormatCurrentUserKeyPath'@246
	'RtlExpandEnvironmentStrings'@245
	'RtlCreateAcl'@80
	'RtlAddressInSectionTable'@50
	'RtlImageRvaToSection'@128
	'LdrLoadAlternateResourceModuleEx'@1364
	'RtlReAllocateHeap'@793
	'RtlAddAccessAllowedAce'@554
	'RtlpUnWaitCriticalSection'@64
	'LdrFindResource_U'@234
	'RtlGetIntegerAtom'@870
	'RtlLockHeap'@89
	'RtlUnlockHeap'@572
	'RtlFindActivationContextSectionGuid'@458
	'RtlIsValidHandle'@69
	'RtlAllocateHandle'@75
	'RtlIsValidIndexHandle'@301
	'RtlLookupAtomInAtomTable'@335
	'RtlSetUserValueHeap'@259
	'RtlFreeHandle'@6944
	'RtlNtStatusToDosError'@63
	'RtlNtStatusToDosErrorNoTeb'@1676
	'RtlReleaseSRWLockExclusive'@42
	'RtlAcquireSRWLockExclusive'@198
	'RtlDosPathNameToNtPathName_U'@38
	'RtlDosPathNameToRelativeNtPathName_U'@38
	'RtlIsDosDeviceName_U'@45
	'RtlImageNtHeader'@129
	'RtlInitializeCriticalSectionEx'@297
	'RtlInitializeCriticalSection'@258
	'RtlQueryInformationActivationContext'@429
	'RtlAllocateActivationContextStack'@318
	'LdrInitializeThunk'@67
	'RtlProcessFlsData'@139
	'RtlIsCurrentThreadAttachExempt'@146
	'RtlInitializeExceptionChain'@350
	'RtlQueryDepthSList'@139
	'RtlDeleteCriticalSection'@295
	'EtwEventEnabled'@421
	'RtlReleaseSRWLockShared'@41
	'RtlAcquireSRWLockShared'@97
	'RtlPrefixUnicodeString'@544
	'RtlExitUserThread'@71
	'LdrShutdownThread'@278
	'RtlFreeActivationContextStack'@73
	'TpCheckTerminateWorker'@195
	'RtlFreeThreadActivationContextStack'@248
	'RtlCleanUpTEBLangLists'@720
	'RtlInterlockedPopEntrySList'@22
	'RtlSizeHeap'@3908
	'RtlIsCriticalSectionLockedByThread'@2597
	'TpDisassociateCallback'@2194
	'LdrUnlockLoaderLock'@101
	'LdrLockLoaderLock'@167
	'RtlImageNtHeaderEx'@165
	'wcsrchr'@157
	'RtlImageDirectoryEntryToData'@256
	'RtlValidateUnicodeString'@169
	'RtlFindCharInUnicodeString'@280
	'RtlFindActivationContextSectionString'@567
	'RtlDosApplyFileIsolationRedirection_Ustr'@1082
	'LdrGetDllHandleEx'@831
	'LdrGetProcedureAddressEx'@720
	'LdrGetProcedureAddress'@55
	'LdrGetDllHandle'@1336
	'RtlAddRefActivationContext'@70
	'RtlAnsiCharToUnicodeChar'@2790
	'bsearch'@1160
	'RtlHashUnicodeString'@398
	'wcsstr'@277
	'wcslen'@5622
	'memcmp'@244
	'wcscmp'@60
	'wcsncpy'@152
	'snwprintf'@134
	'RtlInterlockedPushEntrySList'@30
	'RtlLeaveCriticalSection'@64
	'RtlEnterCriticalSection'@58
	'DbgUserBreakPoint'@4 = 90C390CC
	'DbgBreakPoint'@2 = C3CC
	'RtlInitString'@56
	'RtlInitAnsiString'@56
	'RtlInitUnicodeString'@64
	'sin'@4 = FF8B18EB
	'CIsin'@188
	'CIsqrt'@20
	'sqrt'@172
	'alldiv'@224
	'alldvrm'@224
	'allmul'@64
	'allrem'@192
	'allshl'@32
	'allshr'@48
	'aulldiv'@144
	'aulldvrm'@160
	'aullrem'@128
	'aullshr'@32
	'ftol'@64
	'memccpy'@96
	'atan'@224
	'ceil'@320
	'floor'@352
	'memchr'@192
	'memcpy'@832
	'memmove'@864
	'memset'@96
	'strcpy'@16
	'strcat'@240
	'strcmp'@160
	'strcspn'@80
	'strlen'@144
	'strncat'@320
	'strncpy'@304
	'strpbrk'@80
	'strrchr'@64
	'strspn'@96
	'tan'@319
	'ExpInterlockedPopEntrySListResume'@46
	'ExpInterlockedPopEntrySListFault'@2 = 188B
	'ExpInterlockedPopEntrySListEnd'@61
	'RtlInterlockedPushListSList'@40
	'RtlFirstEntrySList'@40
	'RtlInterlockedCompareExchange64'@36
	'RtlUshortByteSwap'@16
	'RtlUlongByteSwap'@16
	'RtlUlonglongByteSwap'@32
	'RtlCompareMemory'@80
	'RtlCompareMemoryUlong'@48
	'RtlFillMemory'@112
	'RtlFillMemoryUlong'@32
	'RtlZeroMemory'@48
	'RtlMoveMemory'@648
	'RtlLargeIntegerAdd'@20
	'RtlEnlargedIntegerMultiply'@12
	'RtlEnlargedUnsignedMultiply'@12
	'RtlEnlargedUnsignedDivide'@32
	'RtlExtendedLargeIntegerDivide'@94
	'RtlExtendedMagicDivide'@144
	'RtlExtendedIntegerMultiply'@88
	'RtlLargeIntegerShiftLeft'@40
	'RtlLargeIntegerShiftRight'@40
	'RtlLargeIntegerArithmeticShift'@44
	'RtlLargeIntegerNegate'@20
	'RtlLargeIntegerSubtract'@20
	'RtlConvertLongToLargeInteger'@8 = 4C2990424448B
	'RtlConvertUlongToLargeInteger'@103342
	'NtAcceptConnectPort'@0
	'ZwAcceptConnectPort'@16
	'NtAccessCheck'@0
	'ZwAccessCheck'@16
	'NtAccessCheckAndAuditAlarm'@0
	'ZwAccessCheckAndAuditAlarm'@16
	'NtAccessCheckByType'@0
	'ZwAccessCheckByType'@16
	'NtAccessCheckByTypeAndAuditAlarm'@0
	'ZwAccessCheckByTypeAndAuditAlarm'@16
	'ZwAccessCheckByTypeResultList'@0
	'NtAccessCheckByTypeResultList'@16
	'NtAccessCheckByTypeResultListAndAuditAlarm'@0
	'ZwAccessCheckByTypeResultListAndAuditAlarm'@16
	'NtAccessCheckByTypeResultListAndAuditAlarmByHandle'@0
	'ZwAccessCheckByTypeResultListAndAuditAlarmByHandle'@16
	'ZwAddAtom'@0
	'NtAddAtom'@16
	'NtAddBootEntry'@0
	'ZwAddBootEntry'@16
	'NtAddDriverEntry'@0
	'ZwAddDriverEntry'@16
	'ZwAdjustGroupsToken'@0
	'NtAdjustGroupsToken'@16
	'NtAdjustPrivilegesToken'@0
	'ZwAdjustPrivilegesToken'@16
	'ZwAlertResumeThread'@0
	'NtAlertResumeThread'@16
	'NtAlertThread'@0
	'ZwAlertThread'@16
	'NtAllocateLocallyUniqueId'@0
	'ZwAllocateLocallyUniqueId'@16
	'NtAllocateUserPhysicalPages'@0
	'ZwAllocateUserPhysicalPages'@16
	'NtAllocateUuids'@0
	'ZwAllocateUuids'@16
	'ZwAllocateVirtualMemory'@0
	'NtAllocateVirtualMemory'@16
	'NtAlpcAcceptConnectPort'@0
	'ZwAlpcAcceptConnectPort'@16
	'ZwAlpcCancelMessage'@0
	'NtAlpcCancelMessage'@16
	'ZwAlpcConnectPort'@0
	'NtAlpcConnectPort'@16
	'ZwAlpcCreatePort'@0
	'NtAlpcCreatePort'@16
	'ZwAlpcCreatePortSection'@0
	'NtAlpcCreatePortSection'@16
	'NtAlpcCreateResourceReserve'@0
	'ZwAlpcCreateResourceReserve'@16
	'NtAlpcCreateSectionView'@0
	'ZwAlpcCreateSectionView'@16
	'ZwAlpcCreateSecurityContext'@0
	'NtAlpcCreateSecurityContext'@16
	'ZwAlpcDeletePortSection'@0
	'NtAlpcDeletePortSection'@16
	'ZwAlpcDeleteResourceReserve'@0
	'NtAlpcDeleteResourceReserve'@16
	'ZwAlpcDeleteSectionView'@0
	'NtAlpcDeleteSectionView'@16
	'ZwAlpcDeleteSecurityContext'@0
	'NtAlpcDeleteSecurityContext'@16
	'NtAlpcDisconnectPort'@0
	'ZwAlpcDisconnectPort'@16
	'NtAlpcImpersonateClientOfPort'@0
	'ZwAlpcImpersonateClientOfPort'@16
	'ZwAlpcOpenSenderProcess'@0
	'NtAlpcOpenSenderProcess'@16
	'ZwAlpcOpenSenderThread'@0
	'NtAlpcOpenSenderThread'@16
	'NtAlpcQueryInformation'@0
	'ZwAlpcQueryInformation'@16
	'NtAlpcQueryInformationMessage'@0
	'ZwAlpcQueryInformationMessage'@16
	'NtAlpcRevokeSecurityContext'@0
	'ZwAlpcRevokeSecurityContext'@16
	'NtAlpcSendWaitReceivePort'@0
	'ZwAlpcSendWaitReceivePort'@16
	'NtAlpcSetInformation'@0
	'ZwAlpcSetInformation'@16
	'NtApphelpCacheControl'@0
	'ZwApphelpCacheControl'@16
	'ZwAreMappedFilesTheSame'@0
	'NtAreMappedFilesTheSame'@16
	'NtAssignProcessToJobObject'@0
	'ZwAssignProcessToJobObject'@16
	'ZwCallbackReturn'@0
	'NtCallbackReturn'@16
	'NtCancelDeviceWakeupRequest'@0
	'ZwCancelDeviceWakeupRequest'@16
	'ZwCancelIoFile'@0
	'NtCancelIoFile'@16
	'ZwCancelTimer'@0
	'NtCancelTimer'@16
	'NtClearEvent'@0
	'ZwClearEvent'@16
	'ZwClose'@0
	'NtClose'@16
	'NtCloseObjectAuditAlarm'@0
	'ZwCloseObjectAuditAlarm'@16
	'ZwCompactKeys'@0
	'NtCompactKeys'@16
	'ZwCompareTokens'@0
	'NtCompareTokens'@16
	'NtCompleteConnectPort'@0
	'ZwCompleteConnectPort'@16
	'NtCompressKey'@0
	'ZwCompressKey'@16
	'ZwConnectPort'@0
	'NtConnectPort'@16
	'ZwContinue'@0
	'NtContinue'@16
	'NtCreateDebugObject'@0
	'ZwCreateDebugObject'@16
	'ZwCreateDirectoryObject'@0
	'NtCreateDirectoryObject'@16
	'NtCreateEvent'@0
	'ZwCreateEvent'@16
	'ZwCreateEventPair'@0
	'NtCreateEventPair'@16
	'ZwCreateFile'@0
	'NtCreateFile'@16
	'ZwCreateIoCompletion'@0
	'NtCreateIoCompletion'@16
	'NtCreateJobObject'@0
	'ZwCreateJobObject'@16
	'NtCreateJobSet'@0
	'ZwCreateJobSet'@16
	'NtCreateKey'@0
	'ZwCreateKey'@16
	'NtCreateKeyTransacted'@0
	'ZwCreateKeyTransacted'@16
	'ZwCreateMailslotFile'@0
	'NtCreateMailslotFile'@16
	'NtCreateMutant'@0
	'ZwCreateMutant'@16
	'ZwCreateNamedPipeFile'@0
	'NtCreateNamedPipeFile'@16
	'NtCreatePrivateNamespace'@0
	'ZwCreatePrivateNamespace'@16
	'ZwCreatePagingFile'@0
	'NtCreatePagingFile'@16
	'ZwCreatePort'@0
	'NtCreatePort'@16
	'NtCreateProcess'@0
	'ZwCreateProcess'@16
	'ZwCreateProcessEx'@0
	'NtCreateProcessEx'@16
	'NtCreateProfile'@0
	'ZwCreateProfile'@16
	'NtCreateSection'@0
	'ZwCreateSection'@16
	'NtCreateSemaphore'@0
	'ZwCreateSemaphore'@16
	'ZwCreateSymbolicLinkObject'@0
	'NtCreateSymbolicLinkObject'@16
	'ZwCreateThread'@0
	'NtCreateThread'@16
	'ZwCreateTimer'@0
	'NtCreateTimer'@16
	'ZwCreateToken'@0
	'NtCreateToken'@16
	'ZwCreateTransaction'@0
	'NtCreateTransaction'@16
	'ZwOpenTransaction'@0
	'NtOpenTransaction'@16
	'ZwQueryInformationTransaction'@0
	'NtQueryInformationTransaction'@16
	'ZwQueryInformationTransactionManager'@0
	'NtQueryInformationTransactionManager'@16
	'ZwPrePrepareEnlistment'@0
	'NtPrePrepareEnlistment'@16
	'NtPrepareEnlistment'@0
	'ZwPrepareEnlistment'@16
	'NtCommitEnlistment'@0
	'ZwCommitEnlistment'@16
	'ZwReadOnlyEnlistment'@0
	'NtReadOnlyEnlistment'@16
	'NtRollbackComplete'@0
	'ZwRollbackComplete'@16
	'NtRollbackEnlistment'@0
	'ZwRollbackEnlistment'@16
	'ZwCommitTransaction'@0
	'NtCommitTransaction'@16
	'ZwRollbackTransaction'@0
	'NtRollbackTransaction'@16
	'NtPrePrepareComplete'@0
	'ZwPrePrepareComplete'@16
	'NtPrepareComplete'@0
	'ZwPrepareComplete'@16
	'ZwCommitComplete'@0
	'NtCommitComplete'@16
	'NtSinglePhaseReject'@0
	'ZwSinglePhaseReject'@16
	'NtSetInformationTransaction'@0
	'ZwSetInformationTransaction'@16
	'NtSetInformationTransactionManager'@0
	'ZwSetInformationTransactionManager'@16
	'ZwSetInformationResourceManager'@0
	'NtSetInformationResourceManager'@16
	'NtCreateTransactionManager'@0
	'ZwCreateTransactionManager'@16
	'NtOpenTransactionManager'@0
	'ZwOpenTransactionManager'@16
	'NtRenameTransactionManager'@0
	'ZwRenameTransactionManager'@16
	'ZwRollforwardTransactionManager'@0
	'NtRollforwardTransactionManager'@16
	'ZwRecoverEnlistment'@0
	'NtRecoverEnlistment'@16
	'ZwRecoverResourceManager'@0
	'NtRecoverResourceManager'@16
	'ZwRecoverTransactionManager'@0
	'NtRecoverTransactionManager'@16
	'NtCreateResourceManager'@0
	'ZwCreateResourceManager'@16
	'NtOpenResourceManager'@0
	'ZwOpenResourceManager'@16
	'ZwGetNotificationResourceManager'@0
	'NtGetNotificationResourceManager'@16
	'NtQueryInformationResourceManager'@0
	'ZwQueryInformationResourceManager'@16
	'NtCreateEnlistment'@0
	'ZwCreateEnlistment'@16
	'ZwOpenEnlistment'@0
	'NtOpenEnlistment'@16
	'NtSetInformationEnlistment'@0
	'ZwSetInformationEnlistment'@16
	'NtQueryInformationEnlistment'@0
	'ZwQueryInformationEnlistment'@16
	'NtCreateWaitablePort'@0
	'ZwCreateWaitablePort'@16
	'ZwDebugActiveProcess'@0
	'NtDebugActiveProcess'@16
	'ZwDebugContinue'@0
	'NtDebugContinue'@16
	'ZwDelayExecution'@0
	'NtDelayExecution'@16
	'NtDeleteAtom'@0
	'ZwDeleteAtom'@16
	'NtDeleteBootEntry'@0
	'ZwDeleteBootEntry'@16
	'ZwDeleteDriverEntry'@0
	'NtDeleteDriverEntry'@16
	'NtDeleteFile'@0
	'ZwDeleteFile'@16
	'NtDeleteKey'@0
	'ZwDeleteKey'@16
	'ZwDeletePrivateNamespace'@0
	'NtDeletePrivateNamespace'@16
	'ZwDeleteObjectAuditAlarm'@0
	'NtDeleteObjectAuditAlarm'@16
	'ZwDeleteValueKey'@0
	'NtDeleteValueKey'@16
	'ZwDeviceIoControlFile'@0
	'NtDeviceIoControlFile'@16
	'NtDisplayString'@0
	'ZwDisplayString'@16
	'ZwDuplicateObject'@0
	'NtDuplicateObject'@16
	'NtDuplicateToken'@0
	'ZwDuplicateToken'@16
	'ZwEnumerateBootEntries'@0
	'NtEnumerateBootEntries'@16
	'ZwEnumerateDriverEntries'@0
	'NtEnumerateDriverEntries'@16
	'ZwEnumerateKey'@0
	'NtEnumerateKey'@16
	'ZwEnumerateSystemEnvironmentValuesEx'@0
	'NtEnumerateSystemEnvironmentValuesEx'@16
	'NtEnumerateTransactionObject'@0
	'ZwEnumerateTransactionObject'@16
	'NtEnumerateValueKey'@0
	'ZwEnumerateValueKey'@16
	'NtExtendSection'@0
	'ZwExtendSection'@16
	'NtFilterToken'@0
	'ZwFilterToken'@16
	'NtFindAtom'@0
	'ZwFindAtom'@16
	'ZwFlushBuffersFile'@0
	'NtFlushBuffersFile'@16
	'ZwFlushInstructionCache'@0
	'NtFlushInstructionCache'@16
	'ZwFlushKey'@0
	'NtFlushKey'@16
	'ZwFlushProcessWriteBuffers'@0
	'NtFlushProcessWriteBuffers'@16
	'ZwFlushVirtualMemory'@0
	'NtFlushVirtualMemory'@16
	'ZwFlushWriteBuffer'@0
	'NtFlushWriteBuffer'@16
	'NtFreeUserPhysicalPages'@0
	'ZwFreeUserPhysicalPages'@16
	'ZwFreeVirtualMemory'@0
	'NtFreeVirtualMemory'@16
	'ZwFreezeRegistry'@0
	'NtFreezeRegistry'@16
	'ZwFreezeTransactions'@0
	'NtFreezeTransactions'@16
	'ZwFsControlFile'@0
	'NtFsControlFile'@16
	'ZwGetContextThread'@0
	'NtGetContextThread'@16
	'NtGetDevicePowerState'@0
	'ZwGetDevicePowerState'@16
	'ZwGetNlsSectionPtr'@0
	'NtGetNlsSectionPtr'@16
	'NtGetPlugPlayEvent'@0
	'ZwGetPlugPlayEvent'@16
	'ZwGetWriteWatch'@0
	'NtGetWriteWatch'@16
	'ZwImpersonateAnonymousToken'@0
	'NtImpersonateAnonymousToken'@16
	'NtImpersonateClientOfPort'@0
	'ZwImpersonateClientOfPort'@16
	'NtImpersonateThread'@0
	'ZwImpersonateThread'@16
	'ZwInitializeNlsFiles'@0
	'NtInitializeNlsFiles'@16
	'ZwInitializeRegistry'@0
	'NtInitializeRegistry'@16
	'NtInitiatePowerAction'@0
	'ZwInitiatePowerAction'@16
	'NtIsProcessInJob'@0
	'ZwIsProcessInJob'@16
	'ZwIsSystemResumeAutomatic'@0
	'NtIsSystemResumeAutomatic'@16
	'ZwListenPort'@0
	'NtListenPort'@16
	'NtLoadDriver'@0
	'ZwLoadDriver'@16
	'NtLoadKey'@0
	'ZwLoadKey'@16
	'NtLoadKey2'@0
	'ZwLoadKey2'@16
	'ZwLoadKeyEx'@0
	'NtLoadKeyEx'@16
	'NtLockFile'@0
	'ZwLockFile'@16
	'NtLockProductActivationKeys'@0
	'ZwLockProductActivationKeys'@16
	'ZwLockRegistryKey'@0
	'NtLockRegistryKey'@16
	'NtLockVirtualMemory'@0
	'ZwLockVirtualMemory'@16
	'NtMakePermanentObject'@0
	'ZwMakePermanentObject'@16
	'NtMakeTemporaryObject'@0
	'ZwMakeTemporaryObject'@16
	'ZwMapUserPhysicalPages'@0
	'NtMapUserPhysicalPages'@16
	'NtMapUserPhysicalPagesScatter'@0
	'ZwMapUserPhysicalPagesScatter'@16
	'NtMapViewOfSection'@0
	'ZwMapViewOfSection'@16
	'NtModifyBootEntry'@0
	'ZwModifyBootEntry'@16
	'ZwModifyDriverEntry'@0
	'NtModifyDriverEntry'@16
	'ZwNotifyChangeDirectoryFile'@0
	'NtNotifyChangeDirectoryFile'@16
	'NtNotifyChangeKey'@0
	'ZwNotifyChangeKey'@16
	'ZwNotifyChangeMultipleKeys'@0
	'NtNotifyChangeMultipleKeys'@16
	'NtOpenDirectoryObject'@0
	'ZwOpenDirectoryObject'@16
	'ZwOpenEvent'@0
	'NtOpenEvent'@16
	'ZwOpenEventPair'@0
	'NtOpenEventPair'@16
	'NtOpenFile'@0
	'ZwOpenFile'@16
	'ZwOpenIoCompletion'@0
	'NtOpenIoCompletion'@16
	'ZwOpenJobObject'@0
	'NtOpenJobObject'@16
	'ZwOpenKey'@0
	'NtOpenKey'@16
	'NtOpenKeyTransacted'@0
	'ZwOpenKeyTransacted'@16
	'NtOpenMutant'@0
	'ZwOpenMutant'@16
	'ZwOpenPrivateNamespace'@0
	'NtOpenPrivateNamespace'@16
	'NtOpenObjectAuditAlarm'@0
	'ZwOpenObjectAuditAlarm'@16
	'NtOpenProcess'@0
	'ZwOpenProcess'@16
	'NtOpenProcessToken'@0
	'ZwOpenProcessToken'@16
	'ZwOpenProcessTokenEx'@0
	'NtOpenProcessTokenEx'@16
	'NtOpenSection'@0
	'ZwOpenSection'@16
	'NtOpenSemaphore'@0
	'ZwOpenSemaphore'@16
	'NtOpenSession'@0
	'ZwOpenSession'@16
	'NtOpenSymbolicLinkObject'@0
	'ZwOpenSymbolicLinkObject'@16
	'NtOpenThread'@0
	'ZwOpenThread'@16
	'NtOpenThreadToken'@0
	'ZwOpenThreadToken'@16
	'ZwOpenThreadTokenEx'@0
	'NtOpenThreadTokenEx'@16
	'NtOpenTimer'@0
	'ZwOpenTimer'@16
	'ZwPlugPlayControl'@0
	'NtPlugPlayControl'@16
	'ZwPowerInformation'@0
	'NtPowerInformation'@16
	'ZwPrivilegeCheck'@0
	'NtPrivilegeCheck'@16
	'ZwPrivilegeObjectAuditAlarm'@0
	'NtPrivilegeObjectAuditAlarm'@16
	'NtPrivilegedServiceAuditAlarm'@0
	'ZwPrivilegedServiceAuditAlarm'@16
	'ZwProtectVirtualMemory'@0
	'NtProtectVirtualMemory'@16
	'NtPulseEvent'@0
	'ZwPulseEvent'@16
	'ZwQueryAttributesFile'@0
	'NtQueryAttributesFile'@16
	'NtQueryBootEntryOrder'@0
	'ZwQueryBootEntryOrder'@16
	'ZwQueryBootOptions'@0
	'NtQueryBootOptions'@16
	'NtQueryDebugFilterState'@0
	'ZwQueryDebugFilterState'@16
	'NtQueryDefaultLocale'@0
	'ZwQueryDefaultLocale'@16
	'ZwQueryDefaultUILanguage'@0
	'NtQueryDefaultUILanguage'@16
	'NtQueryDirectoryFile'@0
	'ZwQueryDirectoryFile'@16
	'ZwQueryDirectoryObject'@0
	'NtQueryDirectoryObject'@16
	'NtQueryDriverEntryOrder'@0
	'ZwQueryDriverEntryOrder'@16
	'ZwQueryEaFile'@0
	'NtQueryEaFile'@16
	'ZwQueryEvent'@0
	'NtQueryEvent'@16
	'NtQueryFullAttributesFile'@0
	'ZwQueryFullAttributesFile'@16
	'ZwQueryInformationAtom'@0
	'NtQueryInformationAtom'@16
	'NtQueryInformationFile'@0
	'ZwQueryInformationFile'@16
	'NtQueryInformationJobObject'@0
	'ZwQueryInformationJobObject'@16
	'NtQueryInformationPort'@0
	'ZwQueryInformationPort'@16
	'ZwQueryInformationProcess'@0
	'NtQueryInformationProcess'@16
	'NtQueryInformationThread'@0
	'ZwQueryInformationThread'@16
	'NtQueryInformationToken'@0
	'ZwQueryInformationToken'@16
	'NtQueryInstallUILanguage'@0
	'ZwQueryInstallUILanguage'@16
	'NtQueryIntervalProfile'@0
	'ZwQueryIntervalProfile'@16
	'ZwQueryIoCompletion'@0
	'NtQueryIoCompletion'@16
	'ZwQueryKey'@0
	'NtQueryKey'@16
	'ZwQueryMultipleValueKey'@0
	'NtQueryMultipleValueKey'@16
	'ZwQueryMutant'@0
	'NtQueryMutant'@16
	'ZwQueryObject'@0
	'NtQueryObject'@16
	'NtQueryOpenSubKeys'@0
	'ZwQueryOpenSubKeys'@16
	'NtQueryOpenSubKeysEx'@0
	'ZwQueryOpenSubKeysEx'@16
	'ZwQueryPerformanceCounter'@0
	'NtQueryPerformanceCounter'@16
	'NtQueryQuotaInformationFile'@0
	'ZwQueryQuotaInformationFile'@16
	'ZwQuerySection'@0
	'NtQuerySection'@16
	'ZwQuerySecurityObject'@0
	'NtQuerySecurityObject'@16
	'ZwQuerySemaphore'@0
	'NtQuerySemaphore'@16
	'NtQuerySymbolicLinkObject'@0
	'ZwQuerySymbolicLinkObject'@16
	'ZwQuerySystemEnvironmentValue'@0
	'NtQuerySystemEnvironmentValue'@16
	'ZwQuerySystemEnvironmentValueEx'@0
	'NtQuerySystemEnvironmentValueEx'@16
	'NtQuerySystemInformation'@0
	'ZwQuerySystemInformation'@0
	'RtlGetNativeSystemInformation'@16
	'NtQuerySystemTime'@0
	'ZwQuerySystemTime'@16
	'ZwQueryTimer'@0
	'NtQueryTimer'@16
	'NtQueryTimerResolution'@0
	'ZwQueryTimerResolution'@16
	'NtQueryValueKey'@0
	'ZwQueryValueKey'@16
	'NtQueryVirtualMemory'@0
	'ZwQueryVirtualMemory'@16
	'NtQueryVolumeInformationFile'@0
	'ZwQueryVolumeInformationFile'@16
	'NtQueueApcThread'@0
	'ZwQueueApcThread'@16
	'NtRaiseException'@0
	'ZwRaiseException'@16
	'ZwRaiseHardError'@0
	'NtRaiseHardError'@16
	'NtReadFile'@0
	'ZwReadFile'@16
	'ZwReadFileScatter'@0
	'NtReadFileScatter'@16
	'NtReadRequestData'@0
	'ZwReadRequestData'@16
	'NtReadVirtualMemory'@0
	'ZwReadVirtualMemory'@16
	'ZwRegisterThreadTerminatePort'@0
	'NtRegisterThreadTerminatePort'@16
	'ZwReleaseMutant'@0
	'NtReleaseMutant'@16
	'NtReleaseSemaphore'@0
	'ZwReleaseSemaphore'@16
	'ZwRemoveIoCompletion'@0
	'NtRemoveIoCompletion'@16
	'NtRemoveProcessDebug'@0
	'ZwRemoveProcessDebug'@16
	'NtRenameKey'@0
	'ZwRenameKey'@16
	'NtReplaceKey'@0
	'ZwReplaceKey'@16
	'ZwReplacePartitionUnit'@0
	'NtReplacePartitionUnit'@16
	'NtReplyPort'@0
	'ZwReplyPort'@16
	'ZwReplyWaitReceivePort'@0
	'NtReplyWaitReceivePort'@16
	'ZwReplyWaitReceivePortEx'@0
	'NtReplyWaitReceivePortEx'@16
	'ZwReplyWaitReplyPort'@0
	'NtReplyWaitReplyPort'@16
	'NtRequestDeviceWakeup'@0
	'ZwRequestDeviceWakeup'@16
	'NtRequestPort'@0
	'ZwRequestPort'@16
	'ZwRequestWaitReplyPort'@0
	'NtRequestWaitReplyPort'@16
	'ZwRequestWakeupLatency'@0
	'NtRequestWakeupLatency'@16
	'NtResetEvent'@0
	'ZwResetEvent'@16
	'ZwResetWriteWatch'@0
	'NtResetWriteWatch'@16
	'ZwRestoreKey'@0
	'NtRestoreKey'@16
	'NtResumeProcess'@0
	'ZwResumeProcess'@16
	'ZwResumeThread'@0
	'NtResumeThread'@16
	'NtSaveKey'@0
	'ZwSaveKey'@16
	'NtSaveKeyEx'@0
	'ZwSaveKeyEx'@16
	'ZwSaveMergedKeys'@0
	'NtSaveMergedKeys'@16
	'ZwSecureConnectPort'@0
	'NtSecureConnectPort'@16
	'ZwSetBootEntryOrder'@0
	'NtSetBootEntryOrder'@16
	'NtSetBootOptions'@0
	'ZwSetBootOptions'@16
	'NtSetContextThread'@0
	'ZwSetContextThread'@16
	'ZwSetDebugFilterState'@0
	'NtSetDebugFilterState'@16
	'NtSetDefaultHardErrorPort'@0
	'ZwSetDefaultHardErrorPort'@16
	'NtSetDefaultLocale'@0
	'ZwSetDefaultLocale'@16
	'ZwSetDefaultUILanguage'@0
	'NtSetDefaultUILanguage'@16
	'NtSetDriverEntryOrder'@0
	'ZwSetDriverEntryOrder'@16
	'NtSetEaFile'@0
	'ZwSetEaFile'@16
	'ZwSetEvent'@0
	'NtSetEvent'@16
	'ZwSetEventBoostPriority'@0
	'NtSetEventBoostPriority'@16
	'NtSetHighEventPair'@0
	'ZwSetHighEventPair'@16
	'NtSetHighWaitLowEventPair'@0
	'ZwSetHighWaitLowEventPair'@16
	'ZwSetInformationDebugObject'@0
	'NtSetInformationDebugObject'@16
	'ZwSetInformationFile'@0
	'NtSetInformationFile'@16
	'NtSetInformationJobObject'@0
	'ZwSetInformationJobObject'@16
	'NtSetInformationKey'@0
	'ZwSetInformationKey'@16
	'NtSetInformationObject'@0
	'ZwSetInformationObject'@16
	'NtSetInformationProcess'@0
	'ZwSetInformationProcess'@16
	'ZwSetInformationThread'@0
	'NtSetInformationThread'@16
	'ZwSetInformationToken'@0
	'NtSetInformationToken'@16
	'ZwSetIntervalProfile'@0
	'NtSetIntervalProfile'@16
	'ZwSetIoCompletion'@0
	'NtSetIoCompletion'@16
	'ZwSetLdtEntries'@0
	'NtSetLdtEntries'@16
	'NtSetLowEventPair'@0
	'ZwSetLowEventPair'@16
	'NtSetLowWaitHighEventPair'@0
	'ZwSetLowWaitHighEventPair'@16
	'NtSetQuotaInformationFile'@0
	'ZwSetQuotaInformationFile'@16
	'NtSetSecurityObject'@0
	'ZwSetSecurityObject'@16
	'ZwSetSystemEnvironmentValue'@0
	'NtSetSystemEnvironmentValue'@16
	'NtSetSystemEnvironmentValueEx'@0
	'ZwSetSystemEnvironmentValueEx'@16
	'NtSetSystemInformation'@0
	'ZwSetSystemInformation'@16
	'ZwSetSystemPowerState'@0
	'NtSetSystemPowerState'@16
	'ZwSetSystemTime'@0
	'NtSetSystemTime'@16
	'ZwSetThreadExecutionState'@0
	'NtSetThreadExecutionState'@16
	'NtSetTimer'@0
	'ZwSetTimer'@16
	'NtSetTimerResolution'@0
	'ZwSetTimerResolution'@16
	'NtSetUuidSeed'@0
	'ZwSetUuidSeed'@16
	'NtSetValueKey'@0
	'ZwSetValueKey'@16
	'NtSetVolumeInformationFile'@0
	'ZwSetVolumeInformationFile'@16
	'NtShutdownSystem'@0
	'ZwShutdownSystem'@16
	'ZwSignalAndWaitForSingleObject'@0
	'NtSignalAndWaitForSingleObject'@16
	'NtStartProfile'@0
	'ZwStartProfile'@16
	'NtStopProfile'@0
	'ZwStopProfile'@16
	'NtSuspendProcess'@0
	'ZwSuspendProcess'@16
	'NtSuspendThread'@0
	'ZwSuspendThread'@16
	'ZwSystemDebugControl'@0
	'NtSystemDebugControl'@16
	'ZwTerminateJobObject'@0
	'NtTerminateJobObject'@16
	'ZwTerminateProcess'@0
	'NtTerminateProcess'@16
	'ZwTerminateThread'@0
	'NtTerminateThread'@16
	'NtTestAlert'@0
	'ZwTestAlert'@16
	'NtThawRegistry'@0
	'ZwThawRegistry'@16
	'NtThawTransactions'@0
	'ZwThawTransactions'@16
	'NtTraceEvent'@0
	'ZwTraceEvent'@16
	'NtTraceControl'@0
	'ZwTraceControl'@16
	'ZwTranslateFilePath'@0
	'NtTranslateFilePath'@16
	'ZwUnloadDriver'@0
	'NtUnloadDriver'@16
	'NtUnloadKey'@0
	'ZwUnloadKey'@16
	'NtUnloadKey2'@0
	'ZwUnloadKey2'@16
	'NtUnloadKeyEx'@0
	'ZwUnloadKeyEx'@16
	'NtUnlockFile'@0
	'ZwUnlockFile'@16
	'NtUnlockVirtualMemory'@0
	'ZwUnlockVirtualMemory'@16
	'ZwUnmapViewOfSection'@0
	'NtUnmapViewOfSection'@16
	'NtVdmControl'@0
	'ZwVdmControl'@16
	'ZwWaitForDebugEvent'@0
	'NtWaitForDebugEvent'@16
	'NtWaitForMultipleObjects'@0
	'ZwWaitForMultipleObjects'@16
	'NtWaitForSingleObject'@0
	'ZwWaitForSingleObject'@16
	'ZwWaitHighEventPair'@0
	'NtWaitHighEventPair'@16
	'ZwWaitLowEventPair'@0
	'NtWaitLowEventPair'@16
	'ZwWriteFile'@0
	'NtWriteFile'@16
	'NtWriteFileGather'@0
	'ZwWriteFileGather'@16
	'ZwWriteRequestData'@0
	'NtWriteRequestData'@16
	'ZwWriteVirtualMemory'@0
	'NtWriteVirtualMemory'@16
	'ZwYieldExecution'@0
	'NtYieldExecution'@16
	'NtCreateKeyedEvent'@0
	'ZwCreateKeyedEvent'@16
	'ZwOpenKeyedEvent'@0
	'NtOpenKeyedEvent'@16
	'NtReleaseKeyedEvent'@0
	'ZwReleaseKeyedEvent'@16
	'ZwWaitForKeyedEvent'@0
	'NtWaitForKeyedEvent'@16
	'NtQueryPortInformationProcess'@0
	'ZwQueryPortInformationProcess'@16
	'NtGetCurrentProcessorNumber'@0
	'ZwGetCurrentProcessorNumber'@16
	'NtWaitForMultipleObjects32'@0
	'ZwWaitForMultipleObjects32'@16
	'ZwGetNextProcess'@0
	'NtGetNextProcess'@16
	'NtGetNextThread'@0
	'ZwGetNextThread'@16
	'NtCancelIoFileEx'@0
	'ZwCancelIoFileEx'@16
	'ZwCancelSynchronousIoFile'@0
	'NtCancelSynchronousIoFile'@16
	'ZwRemoveIoCompletionEx'@0
	'NtRemoveIoCompletionEx'@16
	'NtRegisterProtocolAddressInformation'@0
	'ZwRegisterProtocolAddressInformation'@16
	'NtPropagationComplete'@0
	'ZwPropagationComplete'@16
	'ZwPropagationFailed'@0
	'NtPropagationFailed'@16
	'ZwCreateWorkerFactory'@0
	'NtCreateWorkerFactory'@16
	'NtReleaseWorkerFactoryWorker'@0
	'ZwReleaseWorkerFactoryWorker'@16
	'NtWaitForWorkViaWorkerFactory'@0
	'ZwWaitForWorkViaWorkerFactory'@16
	'ZwSetInformationWorkerFactory'@0
	'NtSetInformationWorkerFactory'@16
	'NtQueryInformationWorkerFactory'@0
	'ZwQueryInformationWorkerFactory'@16
	'NtWorkerFactoryWorkerReady'@0
	'ZwWorkerFactoryWorkerReady'@16
	'NtShutdownWorkerFactory'@0
	'ZwShutdownWorkerFactory'@16
	'NtCreateThreadEx'@0
	'ZwCreateThreadEx'@16
	'NtCreateUserProcess'@0
	'ZwCreateUserProcess'@16
	'NtQueryLicenseValue'@0
	'ZwQueryLicenseValue'@16
	'NtMapCMFModule'@0
	'ZwMapCMFModule'@16
	'ZwIsUILanguageComitted'@0
	'NtIsUILanguageComitted'@16
	'NtFlushInstallUILanguage'@0
	'ZwFlushInstallUILanguage'@16
	'ZwGetMUIRegistryInfo'@0
	'NtGetMUIRegistryInfo'@16
	'NtAcquireCMFViewOwnership'@0
	'ZwAcquireCMFViewOwnership'@16
	'ZwReleaseCMFViewOwnership'@0
	'NtReleaseCMFViewOwnership'@28
	'pow'@4 = FF8B1DEB
	'CIpow'@1156
	'KiUserApcDispatcher'@104
	'KiUserCallbackDispatcher'@72
	'KiUserExceptionDispatcher'@80
	'KiRaiseUserExceptionDispatcher'@64
	'RtlUserThreadStart'@24
	'KiFastSystemCall'@4 = 340FD48B
	'KiFastSystemCallRet'@12
	'KiIntSystemCall'@8 = 90C32ECD0824548D
	'RtlRaiseException'@61
	'RtlRaiseStatus'@294
	'RtlCaptureContext'@233
	'alloca_probe_16'@19
	'alloca_probe_8'@17
	'chkstk'@0
	'alloca_probe'@56
	'cos'@4 = FF8B18EB
	'CIcos'@188
	'log'@4 = FF8B18EB
	'CIlog'@220
	'strstr'@160
	'strchr'@197
	'RtlActivateActivationContextUnsafeFast'@108
	'RtlDeactivateActivationContextUnsafeFast'@140
	'RtlTryEnterCriticalSection'@67
	'RtlAllocateHeap'@256
	'RtlFreeHeap'@704
	'RtlSetLastWin32Error'@0
	'RtlRestoreLastWin32Error'@814
	'RtlInterlockedFlushSList'@22
	'RtlGetCriticalSectionRecursionCount'@130
	'RtlSplay'@87
	'RtlLookupElementGenericTable'@33
	'RtlLookupElementGenericTableFull'@84
	'RtlEnumerateGenericTableWithoutSplaying'@3791
	'RtlMultiByteToUnicodeN'@280
	'RtlAnsiStringToUnicodeString'@785
	'RtlEqualUnicodeString'@76
	'RtlFreeAnsiString'@0
	'RtlFreeUnicodeString'@493
	'RtlInitAnsiStringEx'@79
	'CsrClientCallServer'@152
	'CsrAllocateCaptureBuffer'@147
	'CsrAllocateMessagePointer'@70
	'CsrFreeCaptureBuffer'@30
	'CsrCaptureMessageBuffer'@41
	'AlpcGetMessageAttribute'@55
	'AlpcGetHeaderSize'@195
	'RtlConsoleMultiByteToUnicodeN'@1199
	'RtlInitUnicodeStringEx'@950
	'RtlReleaseRelativeName'@158
	'RtlDosPathNameToRelativeNtPathName_U_WithStatus'@38
	'RtlDeleteBoundaryDescriptor'@781
	'RtlDetermineDosPathNameType_U'@276
	'RtlUnicodeToMultiByteN'@464
	'RtlUnicodeToMultiByteSize'@149
	'RtlUnicodeStringToAnsiString'@205
	'RtlGetFullPathName_U'@197
	'RtlTimeToTimeFields'@738
	'RtlTimeFieldsToTime'@2725
	'RtlCompressBuffer'@281
	'RtlGetCompressionWorkSpaceSize'@256
	'RtlAddAttributeActionToRXact'@363
	'RtlApplyRXactNoFlush'@538
	'TpCallbackUnloadDllOnCompletion'@1417
	'RtlNormalizeString'@1605
	'RtlGetElementGenericTableAvl'@664
	'LdrInitShimEngineDynamic'@273
	'WinSqmEndSession'@297
	'RtlSetCurrentEnvironment'@650
	'vscwprintf'@1762
	'RtlRemoveVectoredExceptionHandler'@1549
	'mbstowcs'@712
	'WerReportSQMEvent'@1476
	'WerCheckEventEscalation'@459
	'ShipAssert'@443
	'RtlCreateQueryDebugBuffer'@904
	'RtlDestroyQueryDebugBuffer'@268
	'RtlQueryProcessDebugInformation'@649
	'EtwSetMark'@259
	'RtlTimeToElapsedTimeFields'@297
	'EtwLogTraceEvent'@593
	'RtlGetUserPreferredUILanguages'@761
	'EtwSendNotification'@122703
	'RtlGetCurrentProcessorNumber'@43
	'NtCurrentTeb'@101
	'CsrIdentifyAlertableThread'@8 = 9090909090C3C033
	'CsrGetProcessId'@11
	'CsrCaptureTimeout'@51
	'CsrVerifyRegion'@824
	'DbgUiConnectToDbg'@82
	'DbgUiGetThreadDebugObject'@18
	'DbgUiSetThreadDebugObject'@29
	'DbgUiWaitStateChange'@39
	'DbgUiContinue'@37
	'DbgUiStopDebugging'@34
	'DbgUiRemoteBreakin'@99
	'DbgUiIssueRemoteBreakin'@70
	'DbgUiDebugActiveProcess'@66
	'DbgUiConvertStateChangeStructure'@424
	'RtlGetThreadErrorMode'@18
	'RtlPushFrame'@35
	'RtlPopFrame'@32
	'RtlGetFrame'@250
	'LdrHotPatchRoutine'@1163
	'RtlGetUnloadEventTrace'@11
	'RtlGetUnloadEventTraceEx'@41
	'LdrVerifyImageMatchesChecksumEx'@1194
	'LdrQueryProcessModuleInformation'@32
	'LdrSetAppCompatDllRedirectionCallback'@103
	'LdrQueryModuleServiceTags'@183
	'LdrGetFailureData'@11
	'LdrVerifyImageMatchesChecksum'@142
	'LdrUnregisterDllNotification'@2210
	'RtlComputePrivatizedDllName_U'@628
	'CsrSetPriorityClass'@13
	'RtlWriteMemoryStream'@13
	'RtlSeekMemoryStream'@98
	'RtlSetMemoryStreamSize'@13
	'RtlLockMemoryStreamRegion'@0
	'RtlUnlockMemoryStreamRegion'@0
	'RtlCopyOutOfProcessMemoryStreamTo'@13
	'RtlCopyMemoryStreamTo'@116
	'RtlRevertMemoryStream'@13
	'RtlCommitMemoryStream'@0
	'RtlCloneMemoryStream'@13
	'RtlIsCriticalSectionLocked'@28
	'RtlpWaitForCriticalSection'@188
	'RtlDumpResource'@75
	'RtlUpdateClonedCriticalSection'@50
	'RtlEnableEarlyCriticalSectionEventCreation'@22
	'RtlpNotOwnerCriticalSection'@287
	'RtlQueryCriticalSectionOwner'@268
	'RtlNewSecurityObjectWithMultipleInheritance'@16
	'RtlSetSecurityObjectEx'@41
	'RtlQuerySecurityObject'@531
	'RtlNewInstanceSecurityObject'@118
	'RtlNewSecurityGrantedAccess'@288
	'RtlConvertToAutoInheritSecurityObject'@171
	'RtlConvertUiListToApiList'@960
	'RtlCommitDebugInfo'@63
	'RtlDeCommitDebugInfo'@88
	'RtlSetProcessDebugInformation'@297
	'RtlQueryProcessBackTraceInformation'@849
	'RtlQueryProcessLockInformation'@563
	'RtlQueryProcessHeapInformation'@3608
	'NtdllDefWindowProc_A'@11
	'NtdllDefWindowProc_W'@99
	'NtdllDialogWndProc_A'@11
	'NtdllDialogWndProc_W'@438
	'RtlInitializeNtUserPfn'@152
	'RtlRetrieveNtUserPfn'@291
	'RtlRemoveVectoredContinueHandler'@7531
	'RtlApplicationVerifierStop'@2269
	'RtlQueueApcWow64Thread'@16
	'RtlWow64CallFunction64'@13
	'RtlWow64EnableFsRedirectionEx'@13
	'RtlWow64EnableFsRedirection'@396
	'RtlWakeConditionVariable'@94
	'RtlWakeAllConditionVariable'@352
	'RtlSleepConditionVariableCS'@253
	'RtlSleepConditionVariableSRW'@468
	'RtlUpdateClonedSRWLock'@1169
	'RtlWerpReportException'@520
	'RtlReportException'@135
	'ShipAssertGetBufferInfo'@136
	'ShipAssertMsgA'@0
	'ShipAssertMsgW'@1334
	'WerReportWatsonEvent'@2194
	'RtlZombifyActivationContext'@443
	'RtlIsActivationContextActive'@1935
	'RtlComputeImportTableHash'@909
	'AlpcGetCompletionListMessageAttributes'@52
	'AlpcGetCompletionListLastMessageInformation'@165
	'DbgPrompt'@70
	'DbgQueryDebugFilterState'@16
	'DbgSetDebugFilterState'@111
	'DbgPrintReturnControlC'@35
	'vDbgPrintEx'@38
	'vDbgPrintExWithPrefix'@986
	'LdrEnumResources'@724
	'LdrSetMUICacheType'@389
	'RtlDeNormalizeProcessParams'@314
	'RtlCloneUserProcess'@339
	'RtlCreateProcessParameters'@51
	'RtlQueryModuleInformation'@497
	'LdrProcessRelocationBlock'@1388
	'LdrResRelease'@1985
	'LdrResFindResource'@79
	'RtlCustomCPToUnicodeN'@487
	'RtlUnicodeToCustomCPN'@432
	'RtlUpcaseUnicodeToCustomCPN'@2200
	'RtlSecondsSince1980ToTime'@55
	'RtlLocalTimeToSystemTime'@60
	'NtGetTickCount'@57
	'PfxInitialize'@30
	'PfxRemovePrefix'@578
	'PfxInsertPrefix'@227
	'PfxFindPrefix'@159
	'RtlAddActionToRXact'@203
	'RtlApplyRXact'@125
	'RtlSelfRelativeToAbsoluteSD2'@144
	'RtlCopySidAndAttributesArray'@148
	'RtlEqualLuid'@41
	'RtlCopyLuidAndAttributesArray'@47
	'RtlAreAnyAccessesGranted'@1017
	'RtlGetSecurityDescriptorRMControl'@100
	'RtlSetSecurityDescriptorRMControl'@104
	'RtlMapSecurityErrorToNtStatus'@249
	'RtlSidIsHigherLevel'@128
	'RtlSidEqualLevel'@128
	'RtlSetAttributesSecurityDescriptor'@3742
	'RtlSetInformationAcl'@229
	'RtlAddCompoundAce'@581
	'RtlAddAuditAccessAceEx'@59
	'RtlAddAccessAllowedObjectAce'@77
	'RtlAddAccessDeniedObjectAce'@78
	'RtlAddAuditAccessObjectAce'@151
	'RtlDestroyAtomTable'@193
	'RtlEmptyAtomTable'@186
	'RtlPinAtomInAtomTable'@289
	'RtlImageRvaToVa'@2211
	'RtlZeroHeap'@1744
	'RtlExtendMemoryBlockLookaside'@28
	'RtlResetMemoryBlockLookaside'@70
	'RtlExtendMemoryZone'@188
	'RtlResetMemoryZone'@65
	'RtlDowncaseUnicodeChar'@93
	'RtlUnicodeStringToOemSize'@0
	'RtlxUnicodeStringToOemSize'@0
	'RtlUnicodeStringToAnsiSize'@0
	'RtlxUnicodeStringToAnsiSize'@37
	'RtlOemStringToUnicodeSize'@0
	'RtlxOemStringToUnicodeSize'@0
	'RtlAnsiStringToUnicodeSize'@0
	'RtlxAnsiStringToUnicodeSize'@39
	'RtlUpcaseUnicodeStringToAnsiString'@236
	'RtlUnicodeStringToCountedOemString'@275
	'RtlUpcaseUnicodeStringToCountedOemString'@275
	'RtlUpperString'@70
	'RtlAppendAsciizToString'@96
	'RtlTestBit'@40
	'RtlFindSetBits'@731
	'RtlFindClearRuns'@843
	'RtlFindLongestRunClear'@55
	'RtlNumberOfSetBits'@219
	'RtlNumberOfClearBits'@31
	'RtlAreBitsClear'@133
	'RtlFindNextForwardRunClear'@250
	'RtlFindLastBackwardRunClear'@212
	'RtlFindMostSignificantBit'@171
	'RtlFindLeastSignificantBit'@153
	'RtlFindSetBitsAndClear'@51
	'RtlAssert'@282
	'RtlBarrier'@274
	'RtlBarrierForDelete'@352
	'RtlInitBarrier'@121
	'RtlDeleteBarrier'@243
	'RtlCaptureStackContext'@261
	'RtlGetCallersAddress'@74
	'RtlLargeIntegerToChar'@713
	'RtlInt64ToUnicodeString'@116
	'RtlWriteRegistryValue'@95
	'RtlCreateRegistryKey'@54
	'RtlDeleteRegistryValue'@544
	'RtlSetTimeZoneInformation'@27
	'RtlSetDynamicTimeZoneInformation'@448
	'RtlQueryTimeZoneInformation'@27
	'RtlQueryDynamicTimeZoneInformation'@1031
	'RtlGetThreadLangIdByIndex'@3032
	'RtlConvertLCIDToString'@453
	'RtlpConvertLCIDsToCultureNames'@578
	'RtlpConvertCultureNamesToLCIDs'@416
	'RtlpCleanupRegistryKeys'@1079
	'RtlGetSystemPreferredUILanguages'@954
	'RtlpSetPreferredUILanguages'@0
	'RtlpSetUserPreferredUILanguages'@2605
	'RtlGetUILanguageInfo'@1688
	'RtlpSetInstallLanguage'@1173
	'RtlIoEncodeMemIoResource'@684
	'RtlCmEncodeMemIoResource'@304
	'RtlIoDecodeMemIoResource'@187
	'RtlCmDecodeMemIoResource'@120
	'RtlFindClosestEncodableLength'@248
	'RtlProtectHeap'@354
	'RtlSetUserFlagsHeap'@594
	'RtlQueryTagHeap'@332
	'RtlEnumProcessHeaps'@1748
	'RtlWalkHeap'@3769
	'RtlMultipleAllocateHeap'@125
	'RtlMultipleFreeHeap'@411
	'RtlValidateProcessHeaps'@1935
	'RtlCompareAltitudes'@472
	'RtlDecompressFragment'@519
	'RtlCreateBootStatusDataFile'@1711
	'RtlCreateSystemVolumeInformationFolder'@501
	'RtlSubtreeSuccessor'@35
	'RtlRealPredecessor'@61
	'RtlDeleteNoSplay'@185
	'RtlIsGenericTableEmptyAvl'@25
	'RtlEnumerateGenericTableLikeADirectory'@207
	'RtlRegisterSecureMemoryCacheCallback'@126
	'RtlDeregisterSecureMemoryCacheCallback'@316
	'RtlFlushSecureMemoryCache'@188
	'RtlFormatMessage'@654
	'RtlIsNameLegalDOS8Dot3'@376
	'RtlGenerate8dot3Name'@1031
	'RtlGetLastNtStatus'@18
	'RtlGetLastWin32Error'@15
	'RtlSetLastWin32ErrorAndNtStatusFromNtStatus'@1839
	'RtlIsValidLocaleName'@3180
	'RtlHeapTrkInitialize'@3396
	'RtlIdnToNameprepUnicode'@36
	'RtlIdnToUnicode'@416
	'RtlInitializeContext'@188
	'RtlRemoteCall'@648
	'RtlIpv6AddressToStringExA'@223
	'RtlIpv4AddressToStringExA'@158
	'RtlIpv4StringToAddressExA'@6334
	'RtlIsNormalizedString'@108
	'RtlLargeIntegerDivide'@2077
	'RtlLogStackBackTrace'@13
	'RtlRandom'@591
	'RtlTraceDatabaseEnumerate'@141
	'RtlTraceDatabaseCreate'@261
	'RtlTraceDatabaseDestroy'@105
	'RtlTraceDatabaseValidate'@74
	'RtlTraceDatabaseFind'@406
	'RtlTraceDatabaseLock'@16
	'RtlTraceDatabaseUnlock'@16
	'RtlTraceDatabaseAdd'@53
	'RtlUnhandledExceptionFilter2'@767
	'RtlUnhandledExceptionFilter'@1830
	'RtlpGetUserOrMachineUILanguage4NLS'@6561
	'RtlpMuiRegCreateRegistryInfo'@1248
	'RtlpMuiFreeLangRegistryInfo'@824
	'RtlpLoadMachineUIByPolicy'@4568
	'RtlpNtCreateKey'@45
	'RtlpNtSetValueKey'@44
	'RtlpNtMakeTemporaryKey'@30639
	'isalpha'@39
	'isupper'@37
	'islower'@37
	'ispunct'@37
	'isalnum'@39
	'isprint'@39
	'isgraph'@39
	'iscntrl'@37
	'_toascii'@18
	'_iscsym'@53
	'_iscsymf'@52
	'atoi64'@39
	'ltoa'@44
	'ultoa'@147
	'i64toa'@56
	'ui64toa'@34
	'ltow'@169
	'i64tow'@56
	'ui64tow'@34
	'lfind'@135
	'memicmp'@16
	'snprintf'@663
	'splitpath'@81
	'strlwr'@45
	'strupr'@215
	'vswprintf'@31
	'wcslwr'@106
	'wcsupr'@52
	'wtoi64'@39
	'fabs'@220
	'iswalpha'@27
	'iswlower'@24
	'iswxdigit'@27
	'abs'@0
	'labs'@21
	'sprintf'@228
	'sscanf'@37
	'strtoul'@31
	'swprintf'@0
	'swprintf'@146
	'tolower'@45
	'towlower'@35
	'towupper'@140
	'vsprintf'@31
	'wcscat'@51
	'wcsncat'@68
	'wcstombs'@8662
	'EtwCreateTraceInstanceId'@204
	'EtwEventProviderEnabled'@222
	'EtwEventWriteString'@626
	'EtwEnumerateProcessRegGuids'@253
	'EtwEventWriteTransfer'@53
	'EtwTraceEventInstance'@9387
	'EtwProcessPrivateLoggerRequest'@313
	'EtwReplyNotification'@1936
	'EtwpCreateEtwThread'@2749
	'MD4Init'@52
	'MD4Update'@281
	'MD4Final'@715
	'TpAllocAlpcCompletion'@843
	'TpWaitForAlpcCompletion'@369
	'TpReleaseAlpcCompletion'@1867
	'TpWaitForIoCompletion'@476
	'TpReleaseIoCompletion'@407
	'TpCancelAsyncIoOperation'@2314
	'TpCallbackSetEventOnCompletion'@283
	'TpCallbackReleaseSemaphoreOnCompletion'@304
	'TpCallbackReleaseMutexOnCompletion'@824
	'TpDbgSetLogRoutine'@68
	'TpDbgDumpHeapUsage'@978
	'RtlDebugPrintTimes'@8 = 9090909090C3C08B
	'RtlDeleteTimerQueue'@24
	'RtlCancelTimer'@27
	'RtlSetTimer'@19875
	'RtlAllocateMemoryBlockLookaside'@144
	'RtlFreeMemoryBlockLookaside'@30
	'RtlAllocateMemoryZone'@4402
	'NlsAnsiCodePage'@20497
	'NlsMbCodePageTag'@1 = 0
	'NlsMbOemCodePageTag'@250
	'fltused'@0

