Generated by JEB on 2019/08/01

PE: C:\Windows\System32\ntdll.dll Base=0x180000000 SHA-256=5ED10938D3C83E63F86945B5971FF0DB7C649A2CEF32659BAF3085B1AEA22EF8
PDB: ntdll.pdb GUID={C85A720B-BD22-5B9A-E3336D09875094DF} Age=1

7518 located named symbols:
0x1801652F0: LdrpSystem32
0x1800A0F00: ZwCreateTimer2
0x180058814: RtlpHpVaMgrRangeCreate
0x18003A4B0: RtlSetOwnerSecurityDescriptor
0x180083BD0: WinSqmSetDWORD
0x18011EE00: "sin" ??_C@_03BLEJJJBH@sin?$AA@
0x1801382D8: "an invalid address, %p " ??_C@_0BJ@DDAKPLMO@an?5invalid?5address?0?5?$CFp?6?6?$AA@
0x1800740C8: LdrpUnmapModule
0x1800D7204: LdrpCheckRedirection
0x18005FAB0: RtlFindLastBackwardRunClear
0x18011F8B0: "__cdecl _newclmap" __newclmap
0x1800313C0: RtlpMuiRegCreateLanguageList
0x1800F8B40: RtlIsValidLocaleName
0x1800A24C0: ZwRenameTransactionManager
0x180137A20: "Conflicting descriptors %p " ??_C@_0BM@OHMMGEEE@Conflicting?5descriptors?5?$CFp?6?$AA@
0x180077FEC: RtlpLocateActivationContextSectionForQuery
0x18006B7A0: EtwDeliverDataBlock
0x180002870: EtwpInitializeCompression
0x180086060: RtlpInitializeStaticCriticalSection
0x1800E1BF0: DbgQueryDebugFilterState
0x18012EE78: "AVRF: chain: dll: %ws " ??_C@_0BH@HPOEHLGK@AVRF?3?5chain?3?5dll?3?5?$CFws?6?$AA@
0x180072060: RtlpTpWorkCallback
0x180163438: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUkilxhmzkUmgwooUlyquivUznwGEUkivxlnkOlyq@pssntlib" __@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUkilxhmzkUmgwooUlyquivUznwGEUkivxlnkOlyq@pssntlib
0x180178228: Wow64ApcRoutine
0x180026E18: RtlpLockAtomTable
0x1800FD750: RtlStdLogStackTrace
0x1800A0D20: ZwCreateNamedPipeFile
0x180131F20: " NumberOfWaitingExclusive = %lx " ??_C@_0CB@ECNGEMGO@?5NumberOfWaitingExclusive?5?$DN?5?$CFlx?6@
0x180023910: RtlWakeAddressAll
0x1800A14C0: NtGetContextThread
0x180110A6C: TppETWTimerCancelled
0x1800A0B60: ZwCreateDirectoryObject
0x18012EF40: "AVRF: pid 0x%X: found dll descri" ??_C@_0EH@PGGHMMNF@AVRF?3?5pid?50x?$CFX?3?5found?5dll?5descri@
0x1801217C0: "`AppModelPolicy_GetPolicy_Internal'::`2'::AppModelPolicy_PolicyValue_Table" ?AppModelPolicy_PolicyValue_Table@?1??AppModelPolicy_GetPolicy_Internal@@9@9
0x1800D8AA0: RtlCreateUserSecurityObject
0x18007A1F0: RtlpQueryExtendedInformationHeap
0x18011CB58: "PATH" ??_C@_19IJOJOJIB@?$AAP?$AAA?$AAT?$AAH?$AA?$AA@
0x180097384: "__cdecl control87" _control87
0x180166098: RtlpTpIoTree
0x18012C1A0: "LdrLoadDll" ??_C@_0L@HOFGLFDL@LdrLoadDll?$AA@
0x1800A1980: ZwNotifyChangeDirectoryFileEx
0x180089530: PsspWalkInfoClass_PSS_WALK_AUXILIARY_PAGES
0x18010DC90: RtlpHpVsChunkAlignSplit
0x1801664BA: RtlpCriticalSectionVerifier
0x180030130: RtlImageRvaToSection
0x18010C200: RtlpHpAppCompatEnablePaddingAndLFHSubsegmentCommit
0x180094180: strcpy
0x180026F80: RtlAllocateHandle
0x1800DE8DC: WerpCreateCompletionEvent
0x18010605C: RtlpLogHeapUnlockEvent
0x18012DE28: "MaxDeadActivationContexts" ??_C@_1DE@CNNBJKNJ@?$AAM?$AAa?$AAx?$AAD?$AAe?$AAa?$AAd?$AAA?$AAc?$AAt?$AAi?$AAv?$AAa?$AAt?$AAi?$AAo?$AAn?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAs?$AA?$AA@
0x18010D4F0: RtlpHpSegMgrCommitComplete
0x180131F48: " NumberOfActive = %lx " ??_C@_0BH@LPGHPBGB@?5NumberOfActive?5?$DN?5?$CFlx?6?$AA@
0x180122D10: "\??\UNC\" ??_C@_1BC@MAMPPFNN@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AAU?$AAN?$AAC?$AA?2?$AA?$AA@
0x1801660C0: LdrpThunkSignature
0x1800563D8: EtwpFreeRegistration
0x180041978: SbpDetermineDllContext
0x180123160: "\\?\UNC" ??_C@_1BA@BFGBFLGI@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AAU?$AAN?$AAC?$AA?$AA@
0x1800A10A0: ZwDeleteBootEntry
0x18008F854: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18011FE00: "Found circular dependent DLL: "%" ??_C@_0FF@BNJIFIDH@Found?5circular?5dependent?5DLL?3?5?$CC?$CF@
0x180139460: "TagEntries" ??_C@_0L@PPENPPKI@TagEntries?$AA@
0x180139810: "About to reallocate block at %p " ??_C@_0CO@CCGGHLHH@About?5to?5reallocate?5block?5at?5?$CFp?5@
0x18015FAC0: "__cdecl fltused" _fltused
0x180046248: LdrpAppendAnsiStringToFilenameBuffer
0x1801627D0: RtlpOptimalFlushMethod
0x1800A0860: ZwAlpcRevokeSecurityContext
0x1800768E0: LdrEnumerateLoadedModules
0x180050EBC: TppCallbackCheckThreadAfterCallback
0x1800997DA: "__cdecl fclrf" _fclrf
0x18011EE10: "__cdecl _real@397b839a252049c1" __real@397b839a252049c1
0x180100C34: RtlpMuiRegLoadLicInformation
0x18009AE50: strncpy_s
0x1800A1160: NtDeleteValueKey
0x1800E9140: RtlGetCriticalSectionRecursionCount
0x180024650: IsProgramFilesPath
0x18009FE90: ZwWriteVirtualMemory
0x1800EBDB0: RtlInitStringEx
0x1800A00F0: NtCreateProcessEx
0x180083EA4: TppCritResetThread
0x18003DABC: LdrpVerifyAlternateResourceModuleEx
0x180163800: RtlpValidateHeapTagsEnable
0x180137BE8: "%02X-%02X-%02X-%02X-%02X-%02X" ??_C@_0BO@GHBLPFMO@?$CF02X?9?$CF02X?9?$CF02X?9?$CF02X?9?$CF02X?9?$CF02X?$AA@
0x18011D210: GuidFormat
0x180088E50: WinSqmSetEscalationInfo
0x18012EA28: "AVrfAPILookupCallback" ??_C@_0BG@OEKPHNHP@AVrfAPILookupCallback?$AA@
0x18012FE10: "SXS/RTL: TOC entry array (offset" ??_C@_0HP@KCPGIIJM@SXS?1RTL?3?5TOC?5entry?5array?5?$CIoffset@
0x18004E4D8: LdrpLogDllStateEx2
0x180101EE8: "__cdecl RtlpMuiRegInitAnyLanguage" _RtlpMuiRegInitAnyLanguage
0x1800FB994: ComposeHangulLVT
0x1801393D8: "MaximumAllocationSize" ??_C@_0BG@HJCIICPN@MaximumAllocationSize?$AA@
0x1800A1640: NtInitializeEnclave
0x180076BF8: RtlpHpTagMappingComparison
0x1800ECD14: RtlpCopyBitMapTailToHead
0x180074D00: RtlSetCriticalSectionSpinCount
0x1800417F0: RtlGetVersion
0x180139530: "FrontHeapLockCount" ??_C@_0BD@CCCOPIHC@FrontHeapLockCount?$AA@
0x180064A68: RebalanceNode
0x18008CDA0: RtlCompareString
0x180178248: g_pfnSE_InstallBeforeInit
0x180083BD0: WinSqmSetString
0x1800A4383: RtlpUmsThreadYield
0x180118EE0: LdrpCriticalLoaderFunctions
0x180024148: RtlpCreateWnfUserSubscription
0x180095630: wcsspn
0x1801069B0: RtlpHpTagContextGetTag
0x180139E10: "Enabling heap debug options " ??_C@_0BN@KLOBBEB@Enabling?5heap?5debug?5options?6?$AA@
0x18007FAB0: RtlImageRvaToVa
0x1800A0500: ZwAlertThread
0x1800DDA40: RtlReportExceptionEx
0x180034918: LdrpConvertLangFallbackListToMultiSz
0x1800D29D0: "__cdecl TlgDefineProvider_annotation__Tlgg_LibLoaderProviderProv" _TlgDefineProvider_annotation__Tlgg_LibLoaderProviderProv
0x1801181B0: LdrpLogLevelStateTable
0x18011CA80: M_strAceIdnPrefix
0x180083880: RtlGetCompressionWorkSpaceSize
0x18002C3E0: LdrResGetRCConfig
0x18012BEB0: UserDiagnosticGuid
0x180123240: "\Registry\Machine\Software\Micro" ??_C@_1LI@FFKDHKIH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x180095300: towlower
0x18009A110: "__cdecl snscanf_s" _snscanf_s
0x18012B190: "\Device\IPT" ??_C@_1BI@JCJLLHAP@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAI?$AAP?$AAT?$AA?$AA@
0x18012D0B0: "KnownDllPath" ??_C@_1BK@HNONDBBL@?$AAK?$AAn?$AAo?$AAw?$AAn?$AAD?$AAl?$AAl?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x1800E142C: ??$InsertModuleFunctions@U_IMAGE_THUNK_DATA64@@_K$0?IAAAAAAAAAAAAAAA@@@YAJPEAU_IMPORTTABLEP_IMPORTTABLEP_SORTED_LIST_ENTRY@@PEAXPEAU_IMAGE_NT_HEADERS64@@PEFAU_IMAGE_IMPORT_DESCRIPTOR@@@Z
0x18007D9E0: RtlGetGroupSecurityDescriptor
0x180059820: RtlSetLastWin32ErrorAndNtStatusFromNtStatus
0x18011EDF0: "__cdecl _real@c010000000000000" __real@c010000000000000
0x18012C090: "BinaryName" ??_C@_1BG@JLPNDPHA@?$AAB?$AAi?$AAn?$AAa?$AAr?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180166140: LdrpThreadPool
0x18006E274: RtlpRegTziFormatToTzi
0x1800A2280: ZwQuerySystemInformationEx
0x1800EEC40: RtlStringCchCatW
0x1800D2A60: LdrInitShimEngineDynamic
0x1800D2958: "__cdecl TlgCreateSz" _TlgCreateSz
0x1800A12E0: NtFilterBootOption
0x180164350: LdrpAppPackagesPath
0x1800DF850: WinSqmGetInstrumentationProperty
0x18008381C: Normalization__LoadClassMapExceptions
0x1801166EC: RtlpStackDbStackComparitor
0x1800FC364: Normalization__CanCombineWithStartBase
0x18012E3E0: "Import '%s' of DLL '%wZ' is redi" ??_C@_0CP@FKLACBBI@Import?5?8?$CFs?8?5of?5DLL?5?8?$CFwZ?8?5is?5redi@
0x1800931A0: "__cdecl iswctype_l" _iswctype_l
0x180138498: " *** Unhandled exception 0x%08" ??_C@_0DE@HMPOKDEK@?6?6?5?$CK?$CK?$CK?5Unhandled?5exception?50x?$CF08@
0x180094970: strrchr
0x180138AA0: "heap_failure_buffer_underrun" ??_C@_0BN@KBHNCJCM@heap_failure_buffer_underrun?$AA@
0x18012FAA0: "SXS: %s() passed the empty activ" ??_C@_0DE@MPACHFEL@SXS?3?5?$CFs?$CI?$CJ?5passed?5the?5empty?5activ@
0x180111D74: PsspCaptureHandleTrace
0x18006DC94: EtwpGetTimeZoneInformation
0x1800A0130: ZwIsProcessInJob
0x18012E0A8: "!!! Detour detected, disable par" ??_C@_0CP@HMJKNAEI@?$CB?$CB?$CB?5Detour?5detected?0?5disable?5par@
0x180035B30: RtlpNlsGetLcidIndex
0x1800A0720: ZwAlpcDeleteResourceReserve
0x18008FB70: LdrpValidateUserCallTarget
0x1801381A0: "This means the data could not be" ??_C@_0GN@CEMLJLGA@This?5means?5the?5data?5could?5not?5be@
0x1800A1700: ZwListenPort
0x18002910C: LdrpComputeTlsSizeAndAlignment
0x1800F4AF4: RtlpCopyExtendedContext
0x18005BFF0: EvtIntReportEventAndSourceAsync
0x180132510: " *** Assertion failed: %s%s *** " ??_C@_0DO@CDJIIIPD@?6?$CK?$CK?$CK?5Assertion?5failed?3?5?$CFs?$CFs?6?$CK?$CK?$CK?5@
0x180082174: RXactpCommit
0x180166148: LdrpRedirectionTree
0x18010F02C: EtwpGetStackExtendedHeaderItem
0x180120050: "LdrpInitializeDllPath" ??_C@_0BG@LHCPLDFO@LdrpInitializeDllPath?$AA@
0x18009F790: ZwAcceptConnectPort
0x180137798: "((PHEAP_ENTRY)LastKnownEntry <= " ??_C@_0CH@GBCCOPIC@?$CI?$CIPHEAP_ENTRY?$CJLastKnownEntry?5?$DM?$DN?5@
0x18011FEA0: "LdrpInitializeImportRedirection" ??_C@_0CA@BIAHBCHB@LdrpInitializeImportRedirection?$AA@
0x1800CDA20: CsrpLocalSetupForSecureProcess
0x1801782B8: RtlpProtectedPolicies
0x1800DE950: WerpCreateCrashDataSection
0x180139960: "RtlSetUserValueHeap" ??_C@_0BE@HNLMHCKB@RtlSetUserValueHeap?$AA@
0x1800905F0: "__cdecl local_unwind" _local_unwind
0x18008BDD0: TpCallbackReleaseMutexOnCompletion
0x1800A1F00: NtQueryEaFile
0x1800EDA0C: RtlpGetBootStatusPath
0x1800529D4: TppPHExtractMin
0x18011F348: "__cdecl _real@3f2d5daf289c385a" __real@3f2d5daf289c385a
0x1801386C0: "Trace database: failing attempt " ??_C@_0EC@DNEJJGPP@Trace?5database?3?5failing?5attempt?5@
0x1800EC4D0: RtlFindLongestRunClear
0x1800A2300: ZwQueueApcThreadEx
0x1800D0D40: LdrResolveDelayLoadsFromDll
0x18009FDB0: ZwOpenFile
0x1800D7500: CsrSetPriorityClass
0x180008F90: LdrpGetProcedureAddress
0x18004B9C0: RtlGetFullPathName_UstrEx
0x180066F50: RtlUpdateClonedCriticalSection
0x180165330: g_pShimmedModuleListLength
0x18012C308: "Merging a cycle rooted at %wZ. " ??_C@_0CA@MDBLHFGL@Merging?5a?5cycle?5rooted?5at?5?$CFwZ?4?6?$AA@
0x18012CD88: "Finding the shim engine entry fa" ??_C@_0DK@PGGGOCMM@Finding?5the?5shim?5engine?5entry?5fa@
0x1800A0C00: NtCreateIRTimer
0x18012BEA0: LoaderFatalErrorProc
0x18004B1FC: RtlpLocateActivationContextSection
0x1800A09A0: NtCancelWaitCompletionPacket
0x1800A1040: ZwDebugActiveProcess
0x18012F330: "\WindowsErrorReportingServicePor" ??_C@_1EE@NIHCKLHD@?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAE?$AAr?$AAr?$AAo?$AAr?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAP?$AAo?$AAr@
0x180110378: TppRaiseHandleStatus
0x180009CF8: RtlpAllocateUserBlockFromHeap
0x18011D1F8: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x1800A1340: NtFlushBuffersFileEx
0x1800A15C0: ZwGetNotificationResourceManager
0x18012E298: "Init routine %p of DLL "%wZ" rai" ??_C@_0DF@POFIHGBG@Init?5routine?5?$CFp?5of?5DLL?5?$CC?$CFwZ?$CC?5rai@
0x1800D7760: RtlStatMemoryStream
0x1800320C8: LdrpLoadResourceFromAlternativeModule
0x18007665C: RtlpRegisterLockedMemoryBlockLookaside
0x18007B8D0: RtlInterlockedClearBitRun
0x18005710C: WerEscalationReadImageVersionInfoForModuleBaseSafe
0x1800EFBA8: RtlpGetCompleteLanguageFallback
0x1800A2200: NtQuerySemaphore
0x18009ABB0: sscanf_s
0x1800E25AC: LdrpGetMappingFromCacheEntry
0x180001838: RtlStringCchCopyW
0x1800F5118: RtlpLocateXStateChunk
0x180137808: "((LONG)FreeEntry->Size > 1)" ??_C@_0BM@PABNNLLD@?$CI?$CILONG?$CJFreeEntry?9?$DOSize?5?$DO?51?$CJ?$AA@
0x18009AD40: strncat_s
0x1800A1800: NtLockRegistryKey
0x180080410: EtwpRegisterTpNotificationOnce
0x1800A11C0: ZwDisableLastKnownGood
0x1800D308C: LdrpInitializeApplicationVerifierPackage
0x180166810: RtlpTempBlocks
0x18012BDB0: AppModelLibraryLoadFailureSystemBinary
0x180108F1C: RtlpValidateHeapHeaders
0x1801668C0: RtlpHpStackTraceLogInstance
0x180009A04: LdrpObtainLockedEnclave
0x18006D86C: StringToGuidNoBrackets
0x18012DE78: "GlobalFlag2" ??_C@_1BI@CLFLIEOH@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAF?$AAl?$AAa?$AAg?$AA2?$AA?$AA@
0x18003DBF0: RtlpTpTimerRundown
0x180164270: NlsAnsiToUnicodeData
0x18012F6C0: "(This->PrivateDynamicallyAllocat" ??_C@_0GP@CKEDAPEP@?$CIThis?9?$DOPrivateDynamicallyAllocat@
0x180073720: EtwEventSetInformation
0x1801382A0: "read from" ??_C@_09NILFLICP@read?5from?$AA@
0x180139EF8: "runtimebroker.exe" ??_C@_1CE@DBBJFFBK@?$AAr?$AAu?$AAn?$AAt?$AAi?$AAm?$AAe?$AAb?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18011DE10: "__cdecl _real@3ff699c644c48d2e" __real@3ff699c644c48d2e
0x1800A2780: NtSetCachedSigningLevel
0x18011DB60: "InstallLanguageFallback" ??_C@_1DA@LMPHJKLA@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AAF?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x1800A00B0: NtFlushBuffersFile
0x180118560: RtlpTheEmptyActivationContextWrapped
0x1800FC570: Normalization__GetSecondAndThirdDecomposedCharPlane0
0x180075F78: RtlpProcessIFEOKeyFilter
0x1800F9450: RtlpHandleInvalidUserCallTarget
0x18003F668: RtlpTpRevertCapture
0x18004D110: RtlInitializeResource
0x18017B4E8: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180003638: RtlpPopUserShadowStack
0x1800A20E0: NtQueryMultipleValueKey
0x180078470: TpWaitForWork
0x1800A2E40: ZwTerminateJobObject
0x180003320: RtlGetExtendedContextLength2
0x18011CA70: RtlpCheckTokenCapabilityGenericMapping
0x180082B08: LdrpInitializePolicy
0x1800211E8: RtlpHpSegReportBusyBlock
0x180115E08: RtlpStackDbRefCountIncrement
0x18012011C: "HEAP: " ??_C@_06FIAELKPP@HEAP?3?5?$AA@
0x1800A2240: ZwQuerySystemEnvironmentValue
0x1800DBDDC: AVrfpLoadAndInitializeProvider
0x180178298: AvrfpAPILookupCallbackRoutine
0x1800A2F00: NtUmsThreadYield
0x1800A06A0: NtAlpcCreateResourceReserve
0x1800732B0: AlpcUnregisterCompletionListWorkerThread
0x180033D3C: LdrpGetFromMUIMemCache
0x1800A1500: ZwGetCurrentProcessorNumberEx
0x1801076CC: RtlDebugFreeHeap
0x18007B970: RtlGetLastNtStatus
0x1800F15C0: RtlCmDecodeMemIoResource
0x1800D9FF0: RtlpSetProcessDebugInformationRemote
0x180087320: RtlTestAndPublishWnfStateData
0x180019694: RtlpCreateSplitBlock
0x1800A4790: RtlpUnwindHandler
0x1800431D0: LdrpAllocateUnicodeString
0x18007D4A0: RtlGetControlSecurityDescriptor
0x18005D33C: SHA256Final
0x1800A2AA0: NtSetIoCompletionEx
0x1800DD970: RtlReportException
0x1800D9EE0: RtlpQueryProcessEnumHeapsRoutine
0x18012F088: "AVRF: failed to enable handle ch" ??_C@_0DF@OPMKFJMM@AVRF?3?5failed?5to?5enable?5handle?5ch@
0x1800DC648: AVrfpVerifierStopInitialize
0x1800A03C0: NtAccessCheckByTypeResultList
0x1800749D8: RtlpCreateHashTable
0x18000F860: RtlpAllocateHeap
0x18008E980: RtlSetCurrentEnvironment
0x180024594: RtlpResetDriveEnvironment
0x1800A1B60: ZwOpenPrivateNamespace
0x180164EF0: LdrpKnownDllDirectoryHandle
0x1800A2320: NtRaiseException
0x18011CDE8: "RtlUnlockHeap" ??_C@_0O@BAFDFOCI@RtlUnlockHeap?$AA@
0x180068B10: RtlLookupEntryHashTable
0x18006A250: RtlUserThreadStart
0x1800A1380: ZwFlushInstructionCache
0x18012E0D8: LdrpLockMemoryPrivilege
0x1800DEF70: ShipAssertMsgW
0x1800139A0: RtlpFreeHeapInternal
0x18009F830: ZwDeviceIoControlFile
0x180137780: "(HeapHandle != NULL)" ??_C@_0BF@JMLBIMHL@?$CIHeapHandle?5?$CB?$DN?5NULL?$CJ?$AA@
0x180128430: "Xbox One X DevKit" ??_C@_1CE@OIJJDGME@?$AAX?$AAb?$AAo?$AAx?$AA?5?$AAO?$AAn?$AAe?$AA?5?$AAX?$AA?5?$AAD?$AAe?$AAv?$AAK?$AAi?$AAt?$AA?$AA@
0x18001DCB0: CsrClientConnectToServer
0x18006D3F0: EtwpGetPrivateLoggerContextByName
0x18011C0E0: "RTL: RtlNtStatusToDosError(0x%lx" ??_C@_0EB@CMBCAIKC@RTL?3?5RtlNtStatusToDosError?$CI0x?$CFlx@
0x18011EE88: "__cdecl _real@3fa5555555555555" __real@3fa5555555555555
0x1800725D4: TpPoolReferenceExistingGlobalPool
0x18006CCBC: EtwpCreateFile
0x180063470: RtlUnicodeToOemN
0x1801627A8: RtlpHpLfhContentionLimit
0x18002E8E8: LdrpGetLoadAsEntry
0x1800A18C0: ZwMapCMFModule
0x180099778: mbtowc
0x18007FED0: RtlCheckHeldCriticalSections
0x1800688B0: RtlClearThreadWorkOnBehalfTicket
0x180091520: "__cdecl wcstoui64" _wcstoui64
0x1801393C8: "TotalFreeSize" ??_C@_0O@POJGLEGF@TotalFreeSize?$AA@
0x1800F1630: RtlCmEncodeMemIoResource
0x180131DB4: "DO" ??_C@_15BJIDFOEN@?$AAD?$AAO?$AA?$AA@
0x1800A14A0: ZwGetCompleteWnfStateSubscription
0x18011C8D0: "Software\Policies\Microsoft\Cont" ??_C@_1GE@FKCMPCCE@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt@
0x18012E410: "Unmapping DLL "%wZ" " ??_C@_0BF@EPJGNFBO@Unmapping?5DLL?5?$CC?$CFwZ?$CC?6?$AA@
0x1800A1360: ZwFlushInstallUILanguage
0x1800E0BA0: ARRAY_FITS
0x1800D9D50: RtlpQueryProcessDebugInformationFromWow64
0x180023CFC: RtlpSubscribeWnfStateChangeNotificationInternal
0x180087C20: RtlpComputeExePath
0x1801180B0: g_SbModuleTable_RTL
0x1801280A0: "Windows.8828080" ??_C@_1CA@GMIGOPOJ@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AA8?$AA8?$AA2?$AA8?$AA0?$AA8?$AA0?$AA?$AA@
0x180071568: RtlpInsertAssemblyStorageMapEntry
0x1800918A0: "__cdecl wtoi64" _wtoi64
0x18004CB7C: TppInitializeTimer
0x1800A2BA0: NtSetSystemInformation
0x180067F44: LdrpHandleReplacedModule
0x1800D6CB0: RtlGetNtVersionNumbers
0x180081AC0: SbObtainTraceHandle
0x18008F720: RtlRetrieveNtUserPfn
0x1800A30C0: NtWaitForWorkViaWorkerFactory
0x18004DD8C: EtwpFindGuidEntry
0x18012EEB0: "AVRF: Found duplicate for (%ws: " ??_C@_0CM@JIGKAILN@AVRF?3?5Found?5duplicate?5for?5?$CI?$CFws?3?5@
0x18006D5B4: EtwpGetRegDwordValue
0x180118168: RtlpTpWorkTaskCallbacks
0x1801071D4: RtlDebugCreateHeap
0x1800DF938: RtlpWnfETWEventCallback
0x180166068: TppNumberNodes
0x18011F358: "__cdecl _real@3f977c24c7569abb" __real@3f977c24c7569abb
0x18009CE4C: "__cdecl sinput_s" _sinput_s
0x1800F7D00: RtlValidateCorrelationVector
0x18010340C: GetUCBytes
0x180001074: RtlpHpVsChunkComputeCost
0x18002E350: OpenGlobalizationUserSettingsKey
0x1800EF120: RtlpAutoCompleteLanguageFallback
0x1800A61D0: "__cdecl get_fpsr" _get_fpsr
0x1801662A0: RtlpFlsLock
0x1800E2A40: RtlCreateUserProcess
0x18004F980: RtlSleepConditionVariableSRW
0x1800247F0: RtlCreateProcessParametersWithTemplate
0x1800FAF30: RtlIsCurrentThread
0x180025E60: RtlFreeHandle
0x18011DE00: "__cdecl _real@3fef730bd281f69b" __real@3fef730bd281f69b
0x18005E050: A_SHAInit
0x180088E50: WinSqmCommonDatapointSetDWORD64
0x180090170: atoi
0x1800846E0: TpReleaseCleanupGroup
0x18007E720: RtlGetLocaleFileMappingAddress
0x180075100: TppWaitCompletion
0x1800A2DC0: NtSuspendProcess
0x1801663B8: RtlpHpNullGUID
0x180087790: LdrRegisterDllNotification
0x18010D590: RtlpHpSegMgrCommitInitiate
0x18011D970: "\Registry\Machine\System\Current" ??_C@_1IE@CPEFALAA@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1800A3130: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800A31D0: FirstEntrySList
0x1800FE4B0: RtlpInitRandomExVector
0x18007C920: RtlAreBitsSet
0x1800A2DA0: ZwSubscribeWnfStateChange
0x1800A1840: ZwMakePermanentObject
0x1800F7FA0: RtlFreeNonVolatileToken
0x180063510: RtlxUnicodeStringToAnsiSize
0x18012C830: "#%u" ??_C@_03PCCJIL@?$CD?$CFu?$AA@
0x180044008: RtlpQueryEnvironmentCache
0x1800A0E20: NtCreateRegistryTransaction
0x1800A0A20: NtCommitTransaction
0x1800FE5E0: RtlTraceDatabaseAdd
0x1800A2C00: ZwSetThreadExecutionState
0x18011DA18: "%x" ??_C@_02NJNOFBBI@?$CFx?$AA@
0x1801782A8: RtlpDynamicFunctionTable
0x180029B84: LdrpQueueDeferredTlsData
0x1800210A8: RtlpHpVsSubsegmentWalk
0x18010BC64: RtlSetLowFragHeapGlobalFlags
0x18012C970: "NtWaitForSingleObject failed wit" ??_C@_0EK@IHLLLFIO@NtWaitForSingleObject?5failed?5wit@
0x1800D9640: RtlQueryProcessLockInformation
0x1800E7920: RtlSidEqualLevel
0x180090060: isprint
0x180060DE0: CountUnicodeToUTF8
0x18007BF74: RtlpHpLfhBucketUpdateAffinityMapping
0x1800D7400: LdrpUnlockTlsDelayedReclaimTable
0x180137DE8: "Critical error detected %lx " ??_C@_0BN@DNAIKFFE@Critical?5error?5detected?5?$CFlx?6?$AA@
0x180132A00: "*** ASSERT FAILED: Input paramet" ??_C@_0IA@BOEDKCPN@?$CK?$CK?$CK?5ASSERT?5FAILED?3?5Input?5paramet@
0x180042828: LdrpResolveDllName
0x1800782E0: RtlpTpWaitCallback
0x1800A1480: ZwGetCachedSigningLevel
0x180063538: LdrpGetModuleName
0x180166110: RtlCriticalSectionDebugSList
0x18004B79C: LdrpBuildForwarderLink
0x1800A0800: ZwAlpcOpenSenderThread
0x1800A4770: RtlpExecuteHandlerForException
0x1800A0EE0: NtCreateTimer
0x18009FFB0: NtContinue
0x18008EA50: RtlTestProtectedAccess
0x1800F91A0: RtlpOpenAndMapCustomCultureFile
0x18011C0D0: LoadFailure
0x180130EC0: "SXS: Unable to open storage root" ??_C@_0DP@JEMNHIAA@SXS?3?5Unable?5to?5open?5storage?5root@
0x180165B10: CsrProcessId
0x1800A1000: ZwCreateWnfStateName
0x18005393C: RtlpHpSegFreeRangeRemove
0x180128038: "Windows.XBoxSRA" ??_C@_1CA@HFHJBLGP@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAX?$AAB?$AAo?$AAx?$AAS?$AAR?$AAA?$AA?$AA@
0x18007B4C0: TpAllocAlpcCompletionEx
0x1800DB58C: AVrfpAppendCurrentUserSid
0x180088D20: WinSqmStartSession
0x18002D260: RtlpMuiRegGetLanguageSpec
0x18011C1E0: "SharedSection" ??_C@_1BM@MFJNAPBB@?$AAS?$AAh?$AAa?$AAr?$AAe?$AAd?$AAS?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800A1100: ZwDeleteKey
0x1800A1DC0: ZwPropagationComplete
0x1800A2620: ZwRollbackEnlistment
0x180166408: EtwpRegisterTpInitOnce
0x1800D67DC: LdrpPayloadRestrictionMitigationsEnabled
0x180079310: RtlImpersonateSelfEx
0x1801627A4: RtlpHpAppCompatFlags
0x18002A700: LdrpResGetResourceDirectory
0x180138C00: "Parameter1: %p " ??_C@_0BA@DLCHMMHB@Parameter1?3?5?$CFp?6?$AA@
0x180132880: "*** ASSERT FAILED: Input paramet" ??_C@_0HK@JCCLBMIE@?$CK?$CK?$CK?5ASSERT?5FAILED?3?5Input?5paramet@
0x18011CE00: "\Registry\Machine\Software\Micro" ??_C@_1LK@EFMJHDBH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x1801662C0: RtlpSystemDirs
0x1800EBC4C: RtlpWow64SelectSystem32PathInternal
0x180053534: RtlpHpSegAlloc
0x1800A3080: NtWaitForDebugEvent
0x18000912C: LdrpResolveProcedureAddress
0x180091150: "__cdecl vsnwprintf" _vsnwprintf
0x18011FC98: "fmod" ??_C@_04KEPJIHGP@fmod?$AA@
0x18012B360: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x180011F10: RtlSizeHeap
0x180099BE0: "__cdecl i64tow_s" _i64tow_s
0x18011EE20: "__cdecl _real@3ba3198a2e037073" __real@3ba3198a2e037073
0x1800F70C0: RtlpReadProcessHeaps
0x1800DEBC0: WerpWaitForCrashReporting
0x180071B4C: RtlpValidateActivationContextData
0x1800ED820: RtlGetSystemBootStatusEx
0x180166418: TppPoolpSerializedPoolLock
0x18011FCB0: "_yn" ??_C@_03ONILCKOB@_yn?$AA@
0x180086B9C: RtlpTpTimerQueueRundown
0x18012D1F8: "Creating the process heap failed" ??_C@_0CC@GBBOBHCD@Creating?5the?5process?5heap?5failed@
0x1800FA010: RtlpHeapTrkInterceptor
0x18009F710: NtdllStaticWndProcWorker
0x18012D3E0: "Querying the known DLL directory" ??_C@_0EJ@NDHFJHMH@Querying?5the?5known?5DLL?5directory@
0x18006A38C: EtwpStopUmLogger
0x1800A1440: ZwFreezeRegistry
0x18012E7F0: "LdrpComputeLazyDllPath" ??_C@_0BH@MDCCNKEN@LdrpComputeLazyDllPath?$AA@
0x180118930: NtDllUserStubs
0x180163C00: RtlpDefaultHeapDebuggingOptions
0x180131DC4: "0x" ??_C@_15OEMMNBIC@?$AA0?$AAx?$AA?$AA@
0x1800A1E80: NtQueryDebugFilterState
0x1800D8480: RtlCompleteProcessCloning
0x1800625A0: EtwEventWriteEndScenario
0x180034BE8: RtlpMuiRegTryToAppendLangId
0x1800A0150: NtProtectVirtualMemory
0x1800648CC: DeleteNodeFromTree
0x18011EDE0: "__stdcall _real" __real@4070000000000000
0x18002F58C: RtlpInitializeUserList
0x1800948A0: strnlen
0x18012D3B0: "Failed to open %wZ with status 0" ??_C@_0CI@GODKKFBD@Failed?5to?5open?5?$CFwZ?5with?5status?50@
0x180082894: LdrpLogError
0x18010BFB8: RtlHpHeapManagerInitialize
0x18012BF80: "\Registry\Machine\Software\Micro" ??_C@_1KC@OALGIEOE@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x18011FC30: "__cdecl _real@c000000000000000" __real@c000000000000000
0x180053328: RtlpHpSegPageRangeShrink
0x1800A1140: ZwDeletePrivateNamespace
0x1800A26A0: ZwSaveKey
0x18007689C: RtlpLocateModuleSectionInLockedSectionList
0x180035950: RtlLcidToLocaleName
0x18011EE18: "__cdecl _real@3ba3198a2e000000" __real@3ba3198a2e000000
0x18012F8A0: "SXS: Warning: Activation context" ??_C@_0ED@JKGCNHJG@SXS?3?5Warning?3?5Activation?5context@
0x18012E028: "LdrpProcessWork" ??_C@_0BA@MMKPAIAM@LdrpProcessWork?$AA@
0x18012DB40: "LdrpIsVerifierActivationFilterMa" ??_C@_0CG@MFFLEJPO@LdrpIsVerifierActivationFilterMa@
0x18012F6B0: "This != NULL" ??_C@_0N@GGGICEJA@This?5?$CB?$DN?5NULL?$AA@
0x1800870DC: LdrpLogDllRelocationEtwEvent
0x1800A0CA0: NtCreateKeyedEvent
0x180078CA0: RtlDeleteAce
0x180021860: RtlpHpVaMgrRangeFree
0x180088E50: WinSqmCommonDatapointDelete
0x18001A6F0: RtlProtectHeap
0x180131B08: "Type:" ??_C@_1M@NKPEOBAN@?$AAT?$AAy?$AAp?$AAe?$AA?3?$AA?$AA@
0x18004C6A0: LdrpFetchAddressOfSecurityCookie
0x18012DF20: "CWDIllegalInDLLSearch" ??_C@_1CM@OODOIMLG@?$AAC?$AAW?$AAD?$AAI?$AAl?$AAl?$AAe?$AAg?$AAa?$AAl?$AAI?$AAn?$AAD?$AAL?$AAL?$AAS?$AAe?$AAa?$AAr?$AAc?$AAh?$AA?$AA@
0x180063020: RtlDnsHostNameToComputerName
0x18008ECF0: RtlAddAccessDeniedAce
0x18012D370: "KnownDLL directory does not yet " ??_C@_0DO@OEBJCGHG@KnownDLL?5directory?5does?5not?5yet?5@
0x1800A1C60: NtOpenTimer
0x180069C20: RtlAddMandatoryAce
0x1800A13C0: NtFlushProcessWriteBuffers
0x18012D590: "Beginning execution of %wZ (%wZ)" ??_C@_0FE@CBBCFNBD@Beginning?5execution?5of?5?$CFwZ?5?$CI?$CFwZ?$CJ@
0x180164FC8: LdrpAllocationGranularity
0x180087A54: LdrpCorValidateImage
0x1800A0420: NtAcquireProcessActivityReference
0x180122800: "KERNELBASE.dll" ??_C@_1BO@GOMBKADA@?$AAK?$AAE?$AAR?$AAN?$AAE?$AAL?$AAB?$AAA?$AAS?$AAE?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800F51F0: RtlZeroHeap
0x18007D744: LdrpIsModuleUnderSystem32
0x1800D21E8: LdrpLogVerifyAlternateResourceModuleWithServiceChecksumFailure
0x18011CBEA: "" ??_C@_00CNPNBAHC@?$AA@
0x180098260: "__cdecl raise_exc_ex" _raise_exc_ex
0x18009FBB0: NtQueryVirtualMemory
0x18011F300: "__cdecl _real@3f6249423bd94741" __real@3f6249423bd94741
0x1800DB698: AVrfpChainDuplicateVerificationLayers
0x18001EA10: RtlpHpHeapCreate
0x180051D7C: LdrpChangeMrdataProtection
0x1800E6560: RtlUpcaseUnicodeToCustomCPN
0x1800A0320: ZwPowerInformation
0x18004FC2C: TppWorkPost
0x180036560: RtlLocaleNameToLcid
0x18006BE3C: EtwpDereferenceUmGuidEntry
0x18016347C: RtlpHpLfhPerfFlags
0x18010BE74: RtlpLfhBlockBitmapAllocate
0x180091554: wcstoxq
0x18001D450: RtlpExtendFrontEndUsageArray
0x180019B24: RtlpCommitBlock
0x18009FDF0: ZwQueryDirectoryFile
0x18012C8A8: "LdrpResolveDllName" ??_C@_0BD@GNGEMOED@LdrpResolveDllName?$AA@
0x18012D640: "Allocating a data table entry fo" ??_C@_0EH@EKJPBJHH@Allocating?5a?5data?5table?5entry?5fo@
0x18012E258: "Calling init routine %p for DLL " ??_C@_0CH@BDJJPJGD@Calling?5init?5routine?5?$CFp?5for?5DLL?5@
0x180082688: RtlStringCbPrintfA
0x180131E20: "RTL: Pid.Tid %p.%p, owner tid %p" ??_C@_0EO@HEAMCGFP@RTL?3?5Pid?4Tid?5?$CFp?4?$CFp?0?5owner?5tid?5?$CFp@
0x1800A01F0: NtCreateFile
0x180106B40: RtlpHpTagQueryHeapsRemote
0x18012CFC8: "LdrpInitializePerUserWindowsDire" ??_C@_0CG@DINOMLPC@LdrpInitializePerUserWindowsDire@
0x180002A50: WinSqmEventWrite
0x180095AC0: "__cdecl NLG_Notify" _NLG_Notify
0x1800FE7A0: RtlTraceDatabaseDestroy
0x180023FC0: RtlpCreateWnfNameSubscription
0x1800FBD30: NormBuffer__RecheckStartCombinations
0x180076C20: RtlAreLongPathsEnabled
0x180132B90: "\Registry\Machine\SOFTWARE\Micro" ??_C@_1LK@IMJLNIPI@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x18011EDA0: "__cdecl _real@3fbc718839b8c4eb" __real@3fbc718839b8c4eb
0x1801652E0: TlsExpansionBitMap
0x1800ECEE0: RtlAssert
0x1800CF0B0: LdrCreateEnclave
0x18011FC58: "tanh" ??_C@_04FJHINJAO@tanh?$AA@
0x1800282A0: RtlGuardIsExportSuppressedAddress
0x18004C080: LdrpAllocatePlaceHolder
0x18003A550: LdrAddRefDll
0x1800A1F60: ZwQueryInformationByName
0x1800A38A0: RtlCaptureContext2
0x1800A0F40: ZwCreateTokenEx
0x1801668D0: RtlpHpHeapManager
0x18012EE58: "AVRF: chain: searching in %ws " ??_C@_0BP@FKNKCHFE@AVRF?3?5chain?3?5searching?5in?5?$CFws?6?$AA@
0x180165AB0: LdrpEnclaveList
0x180026DE0: RtlGetIntegerAtom
0x180075EB0: RtlpOpenBaseImageFileOptionsKey
0x180075D54: RtlpOpenImageFileOptionsKeyEx
0x180104A7C: RtlpHpStackTraceHeapGetContext
0x1800E7A34: RtlpCompareAces
0x1800A10E0: ZwDeleteFile
0x1801664E0: RtlpHeapErrorHandlerThreshold
0x1800D00F0: LdrpTryAcquireLoaderLock
0x1800A27C0: ZwSetContextThread
0x1800A0600: ZwAlpcCancelMessage
0x18009FA50: NtAllocateVirtualMemory
0x18012EF88: "AVRF: AVrfDllUnloadNotification " ??_C@_0DN@HKLMHMBB@AVRF?3?5AVrfDllUnloadNotification?5@
0x18001A9FC: RtlpAddHeapToUnprotectedList
0x1800A0090: ZwCreateSection
0x1800EDE30: RtlQueryRegistryValueWithFallback
0x1800FDD1C: RtlpStdLockRelease
0x18007C9A0: TppPoolRemoveWorker
0x18001D754: RtlpGetLFHContext
0x180130BE0: "SXS: %s() - Caller asked to use " ??_C@_0FJ@FMMKKICE@SXS?3?5?$CFs?$CI?$CJ?5?9?5Caller?5asked?5to?5use?5@
0x1800A0660: ZwAlpcCreatePort
0x180139420: "HeaderValidateCopy" ??_C@_0BD@OHIKCJLG@HeaderValidateCopy?$AA@
0x1800A2F40: ZwUnloadKey
0x180163E00: RtlpForceCSDebugInfoCreation
0x180138BC0: "heap_failure_lfh_bitmap_mismatch" ??_C@_0CB@GLGOFBN@heap_failure_lfh_bitmap_mismatch@
0x18012E388: "LdrpProcessDetachNode" ??_C@_0BG@IFMIJMKA@LdrpProcessDetachNode?$AA@
0x1800A0920: NtCallEnclave
0x1800A0F60: ZwCreateTransaction
0x18012FB60: "SXS: %s() called with invalid co" ??_C@_0EE@EBOBBOGH@SXS?3?5?$CFs?$CI?$CJ?5called?5with?5invalid?5co@
0x180164280: OemDefaultChar
0x1800A0A00: ZwCommitRegistryTransaction
0x180130B90: "SXS: %s() - caller asked to use " ??_C@_0EJ@LKKLPFHJ@SXS?3?5?$CFs?$CI?$CJ?5?9?5caller?5asked?5to?5use?5@
0x180105E3C: RtlpLogHeapSubSegmentFree
0x180019580: RtlpHpExtrasSetPresent
0x1800A0EA0: NtCreateSymbolicLinkObject
0x1800F7E60: RtlFillMemory
0x180130778: "RtlpQueryInformationActivationCo" ??_C@_0DJ@LPKMJAOP@RtlpQueryInformationActivationCo@
0x180137F08: "The resource is owned shared by " ??_C@_0CM@NFELFFEH@The?5resource?5is?5owned?5shared?5by?5@
0x18007D798: LdrpCodeAuthzInitialize
0x18001D0EC: RtlpQueryPhysicalMemoryPolicy
0x1800F6BA8: RtlpGetBlockInfo
0x1800A1600: NtImpersonateAnonymousToken
0x18003024C: LdrpGetFileSizeFromLoadAsDataTable
0x1801667F8: RtlpHeapKey
0x180166090: RtlpTpIoRegistered
0x1800EFCFC: RtlpGetDefaultLanguageBaseOrParent
0x180062FE0: RtlTryEnterCriticalSection
0x1800778CC: RtlpEnumProcessHeaps
0x180070EA0: RtlActivateActivationContextEx
0x180169998: TppCleanupGroupMemberpNoPoolListLock
0x18012F648: "Status != STATUS_SXS_SECTION_NOT" ??_C@_0CH@JMENHKGE@Status?5?$CB?$DN?5STATUS_SXS_SECTION_NOT@
0x1800D77A0: LdrInitializeMrdata
0x18005C380: RtlGetAppContainerParent
0x180166528: LdrpShouldCreateStackTraceDb
0x1800A29A0: ZwSetInformationSymbolicLink
0x180137A00: "Not enough memory to complete " ??_C@_0BP@DOCEBJGL@Not?5enough?5memory?5to?5complete?6?$AA@
0x180055D24: RtlpHpSegPageRangeCountCommittedPages
0x180132068: "Address of the debug info found " ??_C@_0DE@PJMAILDJ@Address?5of?5the?5debug?5info?5found?5@
0x18012E358: "Uninitializing DLL "%wZ" (Init r" ??_C@_0CN@PDBONKOL@Uninitializing?5DLL?5?$CC?$CFwZ?$CC?5?$CIInit?5r@
0x1800A2A60: ZwSetIntervalProfile
0x180002904: EtwpWriteRemainingCompressedData
0x1800A0DA0: NtCreatePrivateNamespace
0x1800E21A0: LdrGetFileNameFromLoadAsDataTable
0x18000EA80: RtlpHpAllocWithExceptionProtection
0x1800A2080: ZwQueryIntervalProfile
0x18011C768: "MUI" ??_C@_17JCBKHJFJ@?$AAM?$AAU?$AAI?$AA?$AA@
0x18004E260: LdrGetDllPath
0x180165240: LdrpStatistics
0x1800F74E8: RtlpSetBlockInfo
0x180084698: RtlInitializeHeapLogging
0x180002A20: LdrQueryProcessModuleInformation
0x180118320: LdrpKernel32DllName
0x18011FC20: "__cdecl _real@3e5110b460000000" __real@3e5110b460000000
0x180088C30: AlpcRegisterCompletionList
0x1800D7194: LdrpBuildImportRedirection
0x1801012D0: RtlpMuiRegResizeStringPool
0x180085900: RtlSetEnvironmentStrings
0x1800499F8: LdrpAppendUnicodeStringToFilenameBuffer
0x1800A5440: setjmp
0x1800E1C00: DbgSetDebugFilterState
0x1800DD3C0: RtlWow64SetThreadContext
0x180043AA0: RtlUpcaseUnicodeChar
0x1800A27E0: NtSetDebugFilterState
0x18011DA78: "Log" ??_C@_17LLLMIFAB@?$AAL?$AAo?$AAg?$AA?$AA@
0x1801394A8: "SegmentList" ??_C@_0M@GFKDEDGG@SegmentList?$AA@
0x18012D9C8: "SPPsvc.exe" ??_C@_1BG@NFNOPJFD@?$AAS?$AAP?$AAP?$AAs?$AAv?$AAc?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180121110: SHA256Magic
0x1800FE8F0: RtlTraceDatabaseFind
0x1801635C0: NormalizationListLock
0x180079300: RtlImpersonateSelf
0x18000A060: RtlReAllocateHeap
0x18001ADF4: RtlpRemoveHeapFromProtectedList
0x1800590B0: RtlDeleteGrowableFunctionTable
0x18003E9B0: RtlCreateTimer
0x1800A2E20: ZwTerminateEnclave
0x180128120: "Desktop" ??_C@_1BA@CBCBMBGJ@?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?$AA@
0x1800232FC: RtlpWnfWalkUserSubscriptionList
0x180099940: "__cdecl ui64toa_s" _ui64toa_s
0x1800680BC: RtlpValidOwnerSubjectContext
0x18002E824: InitializeUserOrMachineLangList
0x18003E400: LdrpIsSecurityEtwLoggingEnabled
0x1801667DC: RtlpCaptureActivationContextActivationStacks
0x180139C38: "Non-Dedicated free list element " ??_C@_0DE@MMBFEMDH@Non?9Dedicated?5free?5list?5element?5@
0x1800DD1F0: RtlWow64GetThreadContext
0x18010FA64: EtwpTrackBinaryForSession
0x1800ED860: RtlRestoreBootStatusDefaults
0x1801782D0: LdrSystemDllInitBlock
0x1800A24E0: ZwReplaceKey
0x1800783FC: RtlpTpWaitCheckReset
0x180067B90: RtlAcquireResourceExclusive
0x180064F10: TpSimpleTryPost
0x1800A01D0: ZwReadRequestData
0x18012F510: "\Software\Microsoft\Windows" ??_C@_1DI@PHIIKFEJ@?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?$AA@
0x18012BE20: AppModelLibraryLoadFailureApplicationBinary
0x180111590: PssNtCaptureSnapshot
0x18015F570: RtlCriticalSectionList
0x18008E950: RtlGetSystemBootStatus
0x1801306C0: "SXS: %s() found assembly informa" ??_C@_0LC@EBKEJMEM@SXS?3?5?$CFs?$CI?$CJ?5found?5assembly?5informa@
0x180163B08: RtlpHpGCInterval
0x18001E250: CsrCaptureMessageString
0x18012F2E0: "\KernelObjects\SystemErrorPortRe" ??_C@_1EI@MEPMEHFB@?$AA?2?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAE?$AAr?$AAr?$AAo?$AAr?$AAP?$AAo?$AAr?$AAt?$AAR?$AAe@
0x180178200: g_pfnSE_ProcessDying
0x1800A11A0: NtDeleteWnfStateName
0x180085E20: RtlWow64GetEquivalentMachineCHPE
0x1801627E0: RtlpIsFlushRequired
0x180164FD8: LdrpPageSize
0x18009FAF0: NtCreateKey
0x1801382F8: "a NULL pointer " ??_C@_0BB@FDBPIHBI@a?5NULL?5pointer?6?6?$AA@
0x180086870: EtwEventWriteNoRegistration
0x180070A64: RtlGetAssemblyStorageRoot
0x18005F840: "__cdecl TlgWrite" _TlgWrite
0x1800A2BE0: NtSetSystemTime
0x180127E2C: LdrpThunkVariableBytes
0x1800EDFC0: RtlSetDynamicTimeZoneInformation
0x180083BD0: "__cdecl _misaligned_access" __misaligned_access
0x18008B600: RtlSetIoCompletionCallback
0x1801627C8: g_SxsMaxDeadActivationContexts
0x18017C000: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800A0B40: ZwCreateDebugObject
0x180122F68: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x1800D7760: RtlUnlockMemoryStreamRegion
0x18007F534: LdrpSendShimEngineInitialNotifications
0x18008BB34: RtlpCoalesceHeap
0x180139470: "AlignRound" ??_C@_0L@PMBPJEGA@AlignRound?$AA@
0x18003DCD0: RtlDosPathNameToNtPathName_U
0x180114CA4: RtlpQueryDiskSpacePolicyByHandle
0x18011C870: "Control Panel\Desktop\LanguageCo" ??_C@_1FI@DIKMNOCP@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAP?$AAa?$AAn?$AAe?$AAl?$AA?2?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?2?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AAC?$AAo@
0x1800DFD40: RtlpWnfRetryTimerCallback
0x18009FF10: ZwClearEvent
0x1800A1D60: NtPrivilegeCheck
0x1800A2000: NtQueryInformationTransaction
0x180104AF0: RtlpHpStackTraceHeapSerialize
0x18009F910: NtSetEvent
0x180022C60: RtlWaitForWnfMetaNotification
0x1800E9E50: RtlAddScopedPolicyIDAce
0x1800E21E8: LdrpCnvrtShortToLongFileName
0x180164260: NlsAnsiCodePage
0x18009EC48: RtlpHpReleaseQueuedLockExclusive
0x180074850: RtlGetAce
0x18011D118: szStandardBias
0x180110874: TppETWPoolCreate
0x1800F4EC4: RtlpCopyLegacyContextArm64
0x1800CF7BC: LdrpDeleteEnclave
0x1800A0800: NtAlpcOpenSenderThread
0x18009F740: NtdllCtfHookProcWorker
0x18009A150: "__cdecl snwprintf_s" _snwprintf_s
0x1800A0EE0: ZwCreateTimer
0x18009FFB0: ZwContinue
0x18002FCCC: LdrpAccessResourceData
0x18009CFD4: "__cdecl woutput_s" _woutput_s
0x180136F50: crc64Map1_
0x18012F770: "sxsisol_SearchActCtxForDllName" ??_C@_0BP@KOOLJGCC@sxsisol_SearchActCtxForDllName?$AA@
0x1800A1480: NtGetCachedSigningLevel
0x18007BB64: RtlpSetRequestedFrontEndHeap
0x1800E8EBC: RtlpValidLabelSubjectContext
0x180094D10: strtol
0x1800F36F0: RtlpHpRemoteStackSerializeWriter
0x1800459C0: LdrGetDllHandleEx
0x180138CE8: szDynamicDaylightDisabled
0x18011F3A0: "__cdecl _newctype" __newctype
0x1800A1100: NtDeleteKey
0x1800A1DC0: NtPropagationComplete
0x180166494: SecurityCookieInitialized
0x1800A2620: NtRollbackEnlistment
0x180114E60: RtlStackDbContextCleanup
0x1800452DC: LdrpGetDelayloadExportDll
0x1800EFEF0: RtlpGetInstalledLanguageType
0x180131FF0: "Critical section debug info addr" ??_C@_0CE@CGPKDFJK@Critical?5section?5debug?5info?5addr@
0x1800A1000: NtCreateWnfStateName
0x180164FE8: LdrpSaferIsDllAllowedRoutine
0x1800748B0: RtlPcToFileHeader
0x18011DAC0: "\Registry\Machine\System\Current" ??_C@_1JK@FKEAKDJE@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x180071C30: RtlQueryDepthSList
0x180106850: RtlpDebugPageHeapDestroy
0x180103B30: RtlpHpHeapHandleError
0x1800A0E20: ZwCreateRegistryTransaction
0x180166338: RtlpProtectedPoliciesSRWLock
0x180137B78: "%ld leaks detected. " ??_C@_0BF@OAIKOAAM@?$CFld?5leaks?5detected?4?6?$AA@
0x180138990: "Heap error detected at %p (heap " ??_C@_0CM@CAABBOAD@Heap?5error?5detected?5at?5?$CFp?5?$CIheap?5@
0x180119488: VerifierDllString
0x1800A0A20: ZwCommitTransaction
0x1800A2C00: NtSetThreadExecutionState
0x18003E348: LdrpAppCompatRedirect
0x1800ED060: RtlInitBarrier
0x180122EE0: "\Registry\MACHINE\System\Current" ??_C@_1IG@EBKJHDAD@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1800867AC: RtlpRunOnceWaitForInit
0x180065240: TpBindFileToDirect
0x1800F1B44: RtlInitializeHeapManager
0x18008B750: RtlpTpIoLookup
0x180039790: RtlpGenerateInheritAcl
0x180138938: "*** RtlpMuiRegLoadLicInformation" ??_C@_0DH@CLALMMLF@?$CK?$CK?$CK?5RtlpMuiRegLoadLicInformation@
0x18010FDD0: TpQueryPoolStackInformation
0x18011DDB0: "__cdecl _real@3f22a75ce41b9f87" __real@3f22a75ce41b9f87
0x180042250: TppCritSetThread
0x18001A4FC: RtlpHeapRemoveListEntry
0x18011C830: "Control Panel\Desktop\MuiCached" ??_C@_1EA@FMIONCIH@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAP?$AAa?$AAn?$AAe?$AAl?$AA?2?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?2?$AAM?$AAu?$AAi?$AAC?$AAa?$AAc?$AAh?$AAe?$AAd?$AA?$AA@
0x1800F80E0: GetNextWchar
0x1800A1440: NtFreezeRegistry
0x1800FE590: RtlStackTraceHashFunction
0x1800DD170: RtlWow64GetSharedInfoProcess
0x1800FEA98: RtlpTraceDatabaseInternalAdd
0x180057AF0: RtlAvlInsertNodeEx
0x180012AA0: RtlpHpFreeWithExceptionProtection
0x180087C9C: LdrpCheckPagesForTampering
0x1801210E0: RtlpIntegerWChars
0x180118D98: RtlWorkSpaceProcs
0x18008A4C0: RtlNewSecurityObject
0x180058C7C: RtlpCSparseBitmapLock
0x180084C6C: EtwpUpdatePrivateEnableInfo
0x180087890: RtlpCopyMappedMemoryEx
0x1800E5B20: LdrpResSetFilePointer
0x180139A30: "Heap entry %p has incorrect Prev" ??_C@_0EH@FLBJEHCL@Heap?5entry?5?$CFp?5has?5incorrect?5Prev@
0x180122B70: "SafeProcessSearchMode" ??_C@_1CM@ECKKBMJ@?$AAS?$AAa?$AAf?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAe?$AAa?$AAr?$AAc?$AAh?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x180062C70: RtlTimeToTimeFields
0x1801231D0: "CON" ??_C@_17LIAKHCCP@?$AAC?$AAO?$AAN?$AA?$AA@
0x18012DAB8: "LdrpIsSubstringFound" ??_C@_0BF@MFEKEJDA@LdrpIsSubstringFound?$AA@
0x1801321B8: "double initialized or corrupted " ??_C@_0DB@JMDCMHNA@double?5initialized?5or?5corrupted?5@
0x18012D4A8: "forwarders;" ??_C@_1BI@EDFDBMAD@?$AAf?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AAe?$AAr?$AAs?$AA?$DL?$AA?$AA@
0x180090120: isxdigit
0x18009BE48: "__cdecl safecrt_mbtowc" _safecrt_mbtowc
0x1800D8B40: RtlNewInstanceSecurityObject
0x18012C120: "bcryptprimitives.dll" ??_C@_1CK@GBKKCJGO@?$AAb?$AAc?$AAr?$AAy?$AAp?$AAt?$AAp?$AAr?$AAi?$AAm?$AAi?$AAt?$AAi?$AAv?$AAe?$AAs?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180166450: RtlpCachedPathLock
0x1800997F4: "__cdecl filbuf" _filbuf
0x1800E61A0: RtlInitNlsTables
0x1800E8D6C: RtlpIsAppContainer
0x18012BF58: "TrustedInstaller" ??_C@_1CC@EGMNKOEC@?$AAT?$AAr?$AAu?$AAs?$AAt?$AAe?$AAd?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
0x1800A3080: ZwWaitForDebugEvent
0x18012EE40: "AVRF: provider %ws " ??_C@_0BF@IKIIJIDM@AVRF?3?5provider?5?$CFws?5?6?$AA@
0x1801627D8: RtlpClFlushSize
0x180008350: RtlInitializeExtendedContext2
0x180035110: RtlLCIDToCultureName
0x180166314: RtlpHpGCTimerScheduled
0x18011EE08: "__stdcall _real" __real@0000000000000000
0x180028F6C: LdrpAllocateTls
0x1800D776C: LdrForkMrdata
0x18007AC2C: RtlpCommitQueryDebugInfo
0x1800686D0: RtlUnicodeStringCopy
0x180045740: RtlIntegerToUnicodeString
0x18011CBB0: "]:%u" ??_C@_19EPBCBBOP@?$AA?$FN?$AA?3?$AA?$CF?$AAu?$AA?$AA@
0x18003548C: LdrpLangFallbackListFindNode
0x18000C6EC: RtlpHeapGenerateRandomValue64
0x18012CC88: "LdrpInitializeShimDllDependencie" ??_C@_0CC@KEOGGFBA@LdrpInitializeShimDllDependencie@
0x1800A0CA0: ZwCreateKeyedEvent
0x18011D910: "%d" ??_C@_02DPKJAMEF@?$CFd?$AA@
0x1800FE450: RtlpRtlpCtSelfSubscribeCallback
0x1800F5E80: RtlDeleteUmsThreadContext
0x180002690: RtlTestBit
0x1800CEAF8: RtlUnicodeStringCopyString
0x180062950: RtlTimeFieldsToTime
0x1800CFD4C: LdrpLoadEnclaveModule
0x180048E98: LdrpCallInitRoutine
0x180166458: LdrpDllDirectoryLock
0x1800F6CF4: RtlpInitializeLeakDetection
0x180052D44: TppUpdateSubQueueTimer
0x1800A0150: ZwProtectVirtualMemory
0x1801220B0: "SwitchedRtlGetVersion_Current" ??_C@_1DM@PBJCPGDO@?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AAe?$AAd?$AAR?$AAt?$AAl?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA_?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AA?$AA@
0x1800653C0: TpAllocWork
0x1800A1E80: ZwQueryDebugFilterState
0x1800EB4A0: RtlExtendMemoryBlockLookaside
0x180082724: LdrpGetParentLangId
0x18004326C: LdrpGetFullPath
0x180078F20: RtlInitializeExtendedContext
0x1800376DC: RtlpLangNameInMultiSzString_Size
0x1801398F0: "RtlFreeHeap" ??_C@_0M@BBFBOFBP@RtlFreeHeap?$AA@
0x18013A420: "\??\%s" ??_C@_1O@PAJNNBDG@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x18012D890: "Calling KernelbasePostInit faile" ??_C@_0DH@IDGIBBJA@Calling?5KernelbasePostInit?5faile@
0x180083BD0: LdrStandardizeSystemPath
0x1800A1140: NtDeletePrivateNamespace
0x180127E30: "\Registry\Machine\System\Current" ??_C@_1HM@FADMAHML@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1800A26A0: NtSaveKey
0x1801667E0: RtlpCsVerifyDoNotBreak
0x180110E74: TppWorkerpOuterExceptionFilter
0x18001B200: RtlCreateHeap
0x180083BE0: LdrpProcessInitializationComplete
0x18011D058: "PortableOperatingSystem" ??_C@_1DA@IFMDNCPF@?$AAP?$AAo?$AAr?$AAt?$AAa?$AAb?$AAl?$AAe?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAn?$AAg?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x1801222A0: "Return correct version from Veri" ??_C@_1IO@JJHFBHII@?$AAR?$AAe?$AAt?$AAu?$AAr?$AAn?$AA?5?$AAc?$AAo?$AAr?$AAr?$AAe?$AAc?$AAt?$AA?5?$AAv?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAf?$AAr?$AAo?$AAm?$AA?5?$AAV?$AAe?$AAr?$AAi@
0x180094D40: strtolX
0x1800562D0: EtwNotificationUnregister
0x18009FDF0: NtQueryDirectoryFile
0x1800E7270: RtlCheckTokenMembership
0x18012E928: "advapi32.dll" ??_C@_1BK@JHLNAEJL@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180166400: EtwpPrivSessionLock
0x1800A01F0: ZwCreateFile
0x180083BD0: RtlInitMemoryStream
0x1801191A0: "`RtlpGetCustomCultureRegKey'::`2'::KeyName" ?KeyName@?1??RtlpGetCustomCultureRegKey@@9@9
0x1800A0320: NtPowerInformation
0x1800029B8: EtwpShutdownCompression
0x180162768: CachedLanguageOverlayGroupPolicyState
0x180122EC8: "\SYSTEM32\" ??_C@_1BG@BIKONGDH@?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA3?$AA2?$AA?2?$AA?$AA@
0x18011D2A8: "UseFilter" ??_C@_1BE@BICGMBFB@?$AAU?$AAs?$AAe?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x18005F424: "__cdecl TlgKeywordOn" _TlgKeywordOn
0x1800E6750: UpcaseUnicodeToMultiByteNHelper
0x1800FDFD0: RtlQueryValidationRunlevel
0x18011D278: ".Local" ??_C@_1O@NBACDNPA@?$AA?4?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?$AA@
0x18012E498: "LdrpAllocateTls" ??_C@_0BA@OJNCDIPI@LdrpAllocateTls?$AA@
0x1801107F8: TppETWPoolClose
0x180074270: RtlpWow64SetContextOnAmd64
0x180046320: RtlCreateUnicodeStringFromAsciiz
0x180131DBC: "IU" ??_C@_15JKLJPKGI@?$AAI?$AAU?$AA?$AA@
0x1801393F0: "ProcessHeapsListIndex" ??_C@_0BG@GBCAKBDD@ProcessHeapsListIndex?$AA@
0x180078C40: RtlQuerySystemTime
0x180088E50: WinSqmIsSessionDisabled
0x180088B60: DbgPrintEx
0x180071E14: LdrpCheckKnownDllFullPath
0x18010C2C4: RtlpHpHeapProtect
0x180020C5C: RtlpHpTagDestroyHeap
0x1801046DC: RtlpHpStackTraceConfig
0x1800A1C60: ZwOpenTimer
0x1800D7334: LdrpMapCleanModuleView
0x1800A13C0: ZwFlushProcessWriteBuffers
0x180163B00: RtlSecureMemorySystemRangeStart
0x180122D28: "NUMBER_OF_PROCESSORS" ??_C@_1CK@OLLBFPKD@?$AAN?$AAU?$AAM?$AAB?$AAE?$AAR?$AA_?$AAO?$AAF?$AA_?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AAO?$AAR?$AAS?$AA?$AA@
0x1800215C8: RtlSparseArrayElementAllocated
0x18012D0D0: "Secure processes must be large a" ??_C@_0CO@JPNHBIGP@Secure?5processes?5must?5be?5large?5a@
0x180056BC0: LdrUnloadAlternateResourceModuleEx
0x180070B84: RtlpGetActivationContextDataStorageMapAndRosterHeader
0x180082660: RtlpComputeBackupIndex
0x18007A85C: RtlQueryProcessModuleInformation
0x18015F948: LdrpDllNotificationLock_DEBUG
0x18010F7E0: EvtIntReportAuthzEventAndSourceAsync
0x180128208: "Industry Handheld" ??_C@_1CE@KPCCEMAN@?$AAI?$AAn?$AAd?$AAu?$AAs?$AAt?$AAr?$AAy?$AA?5?$AAH?$AAa?$AAn?$AAd?$AAh?$AAe?$AAl?$AAd?$AA?$AA@
0x180095490: wcsncat
0x18007ECA8: TppFreeThreadData
0x18007744C: TppAllocThreadData
0x18009FBB0: ZwQueryVirtualMemory
0x1800FADF0: RtlIsPartialPlaceholderFileHandle
0x18012E910: "DeregisterEventSource" ??_C@_0BG@LPHFFLAA@DeregisterEventSource?$AA@
0x180085C10: RtlDecodeSystemPointer
0x1800892AC: PsspWalkInfoClass_PSS_WALK_VA_SPACE
0x1800A0420: ZwAcquireProcessActivityReference
0x1800CF050: DbgUiStopDebugging
0x1800D8A08: RtlpUnlockFlsCallbackVector
0x1800CEC20: DbgUiConvertStateChangeStructureEx
0x1800A0090: NtCreateSection
0x180009304: LdrpNameToOrdinal
0x1800E9110: RtlEnableEarlyCriticalSectionEventCreation
0x18011C2E0: "AutoDownload" ??_C@_1BK@CFDJOJIA@?$AAA?$AAu?$AAt?$AAo?$AAD?$AAo?$AAw?$AAn?$AAl?$AAo?$AAa?$AAd?$AA?$AA@
0x180128318: "Maker Board" ??_C@_1BI@IMILOLDB@?$AAM?$AAa?$AAk?$AAe?$AAr?$AA?5?$AAB?$AAo?$AAa?$AAr?$AAd?$AA?$AA@
0x180099C10: "__cdecl ltow_s" _ltow_s
0x1800A27C0: NtSetContextThread
0x1800A0600: NtAlpcCancelMessage
0x18009FA50: ZwAllocateVirtualMemory
0x1800F2D80: RtlpExtendedHeapInformationWorkerCallback
0x1800027B0: RtlSetSearchPathMode
0x18007B4E4: TppAllocAlpcCompletion
0x1800ED560: RtlCreateBootStatusDataFile
0x180090230: "__cdecl ui64toa" _ui64toa
0x180109A9C: RtlpHpTlLogMemStats
0x18010BD4C: RtlpHpApplySegmentHeapConfigurations
0x1800274C8: RtlpTraverseParents
0x180163AAC: RtlpCtPublishInProgress
0x180053CF8: RtlpHpVsFreeChunkInsert
0x18010DC38: RtlSparseArrayElementFindCapped
0x18012DC80: "MaxLoaderThreads" ??_C@_1CC@OLECMBJN@?$AAM?$AAa?$AAx?$AAL?$AAo?$AAa?$AAd?$AAe?$AAr?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAs?$AA?$AA@
0x18012F448: "DisableEscalation" ??_C@_1CE@OGDJKNMF@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAE?$AAs?$AAc?$AAa?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180044C70: LdrpCompleteMapModule
0x180088014: LdrpCompareModuleName
0x18009F540: NtdllMDIClientWndProc_A
0x180093180: iswspace
0x1800A4720: RtlFailFast2
0x1800A0660: NtAlpcCreatePort
0x1800201B8: RtlpHpAllocateHeap
0x18001F098: RtlpHpHeapAllocate
0x1800A2F40: NtUnloadKey
0x18000199C: EtwpReceiveReplyDataBlock
0x1800DBDA4: AVrfpIsVerifierProviderDll
0x180099910: "__cdecl ltoa_s" _ltoa_s
0x18000C8F0: RtlpAllocateUserBlock
0x18012B260: RtlpSmMessageInfo
0x18011F340: "tan" ??_C@_03IIINPABG@tan?$AA@
0x1800695F0: RtlAllocateAndInitializeSid
0x180018F80: RtlpHpHeapValidateProtection
0x1800A1F60: NtQueryInformationByName
0x18010D828: RtlpHpSegMgrVaCtxInitialize
0x180163AD0: RtlpLeakHeap
0x1800DEFE0: StringCchCopyW
0x18009B1A0: wcscat_s
0x18009F550: NtdllMDIClientWndProc_W
0x180065C68: TppPoolUpdateNodeRelation
0x18006D724: EtwpQueryPartitionRegistryInformationUm
0x1800A10E0: NtDeleteFile
0x180078C60: RtlReleasePebLock
0x180007AB0: RtlImageNtHeaderEx
0x1800A3590: RtlEnclaveCallDispatch
0x18011FD70: AeSbImplEvent
0x1800A0F40: NtCreateTokenEx
0x180097E60: "__cdecl except1" _except1
0x180128250: "Banking" ??_C@_1BA@BIIHFDPN@?$AAB?$AAa?$AAn?$AAk?$AAi?$AAn?$AAg?$AA?$AA@
0x180163E04: SRWLockSpinCount
0x18012CA60: "Process initialization failed wi" ??_C@_0DD@IDDMDDOL@Process?5initialization?5failed?5wi@
0x180132C50: "GCInterval" ??_C@_1BG@FALENDFF@?$AAG?$AAC?$AAI?$AAn?$AAt?$AAe?$AAr?$AAv?$AAa?$AAl?$AA?$AA@
0x1800ECD00: RtlTestBitEx
0x1800A2A60: NtSetIntervalProfile
0x1800D0490: LdrQueryModuleServiceTags
0x1800D8A90: RtlConvertToAutoInheritSecurityObject
0x1800A0DA0: ZwCreatePrivateNamespace
0x1800A2080: NtQueryIntervalProfile
0x18008E190: RtlpDiskSpeedInitialize
0x1800D8C70: RtlNewSecurityGrantedAccess
0x180131DE8: "RTL: Enter CriticalSection Timeo" ??_C@_0DE@OKDMMNAI@RTL?3?5Enter?5CriticalSection?5Timeo@
0x180072F24: LdrpMergeNodes
0x1800A29A0: NtSetInformationSymbolicLink
0x18001F3AC: RtlpHpRegisterEnvironment
0x1800A3530: KiRaiseUserExceptionDispatcher
0x180062960: RtlpTimeFieldsToTime
0x18011EDC0: "__cdecl _real@3fd5555555550877" __real@3fd5555555550877
0x180132980: "*** ASSERT FAILED: Input paramet" ??_C@_0HP@IHMEMGDO@?$CK?$CK?$CK?5ASSERT?5FAILED?3?5Input?5paramet@
0x18005AE88: EtwpTraceUmEvent
0x18010C6A8: RtlpHpUnlockHeapForCloning
0x1800E938C: RtlpInitDeferredCriticalSection
0x180138858: "Kernel-MUI-Number-Allowed" ??_C@_1DE@JIOMGOFI@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?9?$AAM?$AAU?$AAI?$AA?9?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?9?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AA?$AA@
0x1800A0920: ZwCallEnclave
0x1800A0F60: NtCreateTransaction
0x1800A0A00: NtCommitRegistryTransaction
0x1800A1600: ZwImpersonateAnonymousToken
0x18009F6A0: NtdllButtonWndProcWorker
0x18001E300: CsrAllocateMessagePointer
0x1800A3150: DbgBreakPoint
0x1800A0EA0: ZwCreateSymbolicLinkObject
0x18007F100: RtlPublishWnfStateData
0x180139D60: "Tag %04x (%ws) size incorrect (%" ??_C@_0CP@NMPFABLH@Tag?5?$CF04x?5?$CI?$CFws?$CJ?5size?5incorrect?5?$CI?$CF@
0x18009109C: "__cdecl vsnprintf_l" _vsnprintf_l
0x18011EE90: "__cdecl _real@3fc5555555555555" __real@3fc5555555555555
0x18013A238: ".sb_data" ??_C@_08FANNBIHM@?4sb_data?$AA@
0x1800F2EA0: RtlpExtendedHeapInformationWorkerThread
0x18011D928: "ServerNt" ??_C@_1BC@GNJGMHML@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAN?$AAt?$AA?$AA@
0x18011C200: "\Program Files" ??_C@_1BO@GEKCLFLB@?$AA?2?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AA?5?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x180002358: RtlpHpLfhSubsegmentWalk
0x18005AA54: EvtIntReportEventWorker
0x1800D13EC: LdrpIsCODServiceEnabled
0x1800DA7A0: AVrfCallAPILookupCallback
0x18004F0D8: TppCleanupGroupMemberCallbackProlog
0x18012E090: "LdrpDetectDetour" ??_C@_0BB@GGNGOJOC@LdrpDetectDetour?$AA@
0x18012DF68: "LdrpMinimalMapModule" ??_C@_0BF@GGGOKJKP@LdrpMinimalMapModule?$AA@
0x18002FC90: RtlAddressInSectionTable
0x18013A430: "\Registry\Machine\System\Current" ??_C@_1JG@EEECFNPB@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x18012DD00: "CFGOptions" ??_C@_1BG@EMGCODKE@?$AAC?$AAF?$AAG?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x18010DE90: MD4Init
0x1800EBD50: RtlAppendStringToString
0x18011C630: "LdrResFallbackLangList Enter" ??_C@_1DK@FDOJIHLD@?$AAL?$AAd?$AAr?$AAR?$AAe?$AAs?$AAF?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AAL?$AAa?$AAn?$AAg?$AAL?$AAi?$AAs?$AAt?$AA?5?$AAE?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x1800A24E0: NtReplaceKey
0x180165210: LdrpTlsBitmap
0x18004CAA0: RtlpTpTimerCallback
0x18011D848: LdrpComPlusInstallRootName
0x1800E7BC0: RtlpConvertAclToAutoInherit
0x1801642C0: LoadAsDataCrits
0x1800A01D0: NtReadRequestData
0x18006F09C: RtlpGetRegistryHandle
0x180082E40: RtlSetProtectedPolicy
0x1800CFA7C: LdrpEnclaveAddForwarderModules
0x180079F30: RtlSidHashInitialize
0x180032D90: LdrpSearchResourceSection_U
0x18005CB50: RtlpGetTokenNamedObjectPath
0x18010D2D8: RtlpHpSegLargeRangeAllocate
0x180166020: g_RegInfo
0x180088B50: RtlWnfDllUnloadCallback
0x180024530: RtlSetThreadErrorMode
0x180106154: RtlpLogHeapWalkEvent
0x1800750A0: TppExecuteWaitTimerCallback
0x180138970: ulInvalidTypes
0x180138890: "Kernel-MUI-Language-Allowed" ??_C@_1DI@OBLKKNGH@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?9?$AAM?$AAU?$AAI?$AA?9?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AA?9?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AA?$AA@
0x18006BF2C: EtwpInsertGuidEntry
0x1800A27E0: ZwSetDebugFilterState
0x18012FC30: "SXS/RTL: Activation context data" ??_C@_0FF@CJICNIOA@SXS?1RTL?3?5Activation?5context?5data@
0x18011C938: "Control Panel\Desktop" ??_C@_1CM@FDDKAFMM@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAP?$AAa?$AAn?$AAe?$AAl?$AA?2?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?$AA@
0x18007A4DC: RtlpSetSegmentInfo
0x180027FB0: RtlDoesFileExists_UEx
0x180087C90: AlpcMaxAllowedMessageLength
0x1800A2E20: NtTerminateEnclave
0x180016824: RtlpDeCommitFreeBlock
0x1800FECF0: RtlWakeAddressAllNoFence
0x1800DEB48: WerpSetProcessFaultInformation
0x180012404: RtlpHpConvertFlagsToSegmentFlags
0x180091250: "__cdecl wcsicmp" _wcsicmp
0x1800ED1D0: RtlInt64ToUnicodeString
0x180051AC0: RtlSetThreadSubProcessTag
0x1801781F8: g_pfnSE_DllUnloaded
0x1800A3F30: RtlCompareMemoryUlong
0x180069FD0: EtwpSynchronizeWithLogger
0x1800E9180: RtlQueryCriticalSectionOwner
0x180138BE8: "Error code: %d - %s " ??_C@_0BF@BIFIJEKN@Error?5code?3?5?$CFd?5?9?5?$CFs?6?$AA@
0x18008F480: LdrRemoveDllDirectory
0x1800FE820: RtlTraceDatabaseEnumerate
0x180109EE4: RtlpInitializeLowFragHeapManager
0x180163A60: RtlpRandomExAuxVarY
0x18011FCC0: "_nextafter" ??_C@_0L@KDOEJCKC@_nextafter?$AA@
0x1800DEDA8: SetAssertBufferPtrinPeb
0x18009FF10: NtClearEvent
0x1800A1D60: ZwPrivilegeCheck
0x180109B78: RtlpHpTlLogVAChange
0x1800A2000: ZwQueryInformationTransaction
0x1800A0B40: NtCreateDebugObject
0x1800445C8: LdrpInitializeGraphRecurse
0x180063120: RtlOemStringToUnicodeString
0x18011D3B8: "DeviceForm" ??_C@_1BG@LDBNICEA@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAF?$AAo?$AAr?$AAm?$AA?$AA@
0x1800F2820: RtlWalkHeap
0x180002A50: RtlReportSqmEscalation
0x1800D1B64: LdrpLogImportRedirectionTelemetry
0x18007EE40: MD5Init
0x18009F910: ZwSetEvent
0x180137B38: "%p %-16Ix %Id" ??_C@_0BA@NHOKOPHO@?$CFp?5?5?$CF?916Ix?5?5?$CFId?$AA@
0x18004BC50: LdrpRecordModuleDependency
0x18012D048: "TermsrvGetWindowsDirectoryW" ??_C@_0BM@LNANPNJB@TermsrvGetWindowsDirectoryW?$AA@
0x18008BF40: RtlExpandHashTable
0x18011CF80: "\Registry\Machine\System\Current" ??_C@_1GG@KMAKALDL@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x18009FAF0: ZwCreateKey
0x180123150: "\\?\" ??_C@_19MJCDBCKE@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AA?$AA@
0x18012CC40: "Initializing a shim dependency "" ??_C@_0EB@LPFJLIAB@Initializing?5a?5shim?5dependency?5?$CC@
0x18002FAF4: RtlpLangNameInMultiSzString
0x180105D8C: RtlpLogHeapSubSegmentAllocCached
0x1800A11A0: ZwDeleteWnfStateName
0x1800355F8: RtlpMuiRegGetOrAddStringToPool
0x18012B1A8: RtlBaseAceType
0x180008F20: RtlpMergeContextXState
0x180104130: RtlpHpStackTraceAllocAdd
0x18003DF40: LdrpWorkCallback
0x1800A2BE0: ZwSetSystemTime
0x180164028: NlsOemCodePageIsUTF8
0x1800539A0: RtlpHpSegFreeRangeInsert
0x18011FC68: "acos" ??_C@_04PDIFKINK@acos?$AA@
0x180001008: RtlpHpVsFreeChunkRemove
0x1800A6200: memcpy
0x180089210: PssNtValidateDescriptor
0x1800EAE1C: RtlpValidAccessFilterAce
0x18012DD18: "LargePageDLLs" ??_C@_1BM@FKNDABPG@?$AAL?$AAa?$AAr?$AAg?$AAe?$AAP?$AAa?$AAg?$AAe?$AAD?$AAL?$AAL?$AAs?$AA?$AA@
0x180122670: "ERROR" ??_C@_05MBDEGLCK@ERROR?$AA@
0x180122278: "Win32AppCompat" ??_C@_1BO@MHOCFOI@?$AAW?$AAi?$AAn?$AA3?$AA2?$AAA?$AAp?$AAp?$AAC?$AAo?$AAm?$AAp?$AAa?$AAt?$AA?$AA@
0x1800A1980: NtNotifyChangeDirectoryFileEx
0x1800790A0: RtlAcquirePrivilege
0x180053AE0: RtlpHpVsContextFree
0x18009F6C0: NtdllComboListBoxProcWorker
0x1800A14C0: ZwGetContextThread
0x1800A0B60: NtCreateDirectoryObject
0x1800EC8C0: RtlInterlockedSetBitRun
0x1800D109C: LdrpResolveDelayloadAddress
0x180115D60: RtlpStackDbEntryIsEqual
0x18004D200: RtlpWakeSRWLock
0x1800864B0: RtlIsCloudFilesPlaceholder
0x1800FAED0: RtlSetProcessPlaceholderCompatibilityMode
0x1800FAEFC: RtlIsAnyDebuggerPresent
0x180131590: "SXS: Storage resolution failed t" ??_C@_0FB@ECDIMNE@SXS?3?5Storage?5resolution?5failed?5t@
0x180127D80: "\Registry\Machine\SYSTEM\Current" ??_C@_1IG@EPMAHCPK@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1800A24C0: NtRenameTransactionManager
0x1800FE090: RtlRaiseCustomSystemEventTrigger
0x180002A50: RtlSetThreadPoolStartFunc
0x180163B20: RtlpProcessHeapsListLock
0x18007A620: RtlQueryProcessDebugInformation
0x180165350: g_LdrBreakOnLdrpInitializeProcessFailure
0x180083D30: TppJobpExecuteCallback
0x1800A0F00: NtCreateTimer2
0x180164060: NlsOemLeadByteInfoTable
0x18009F6D0: NtdllDialogWndProcWorker
0x18011C240: "\Registry\Machine\SOFTWARE\Polic" ??_C@_1HG@LDHOILNO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc@
0x180122DA0: "Security-System-Capability-" ??_C@_1DI@KIKALOEO@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?9?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?9?$AAC?$AAa?$AAp?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?9?$AA?$AA@
0x1800803E0: RtlUserFiberStart
0x180165208: LdrpStaticTlsBitmapVector
0x180110180: TpCallbackDetectedUnrecoverableError
0x18003E460: TpReleaseWait
0x1801113D0: SbpParseFuncName
0x180003274: RtlpFunctionAddressTableEntry
0x180049870: ApiSetResolveToHost
0x180036610: RtlpNlsGetNameIndex
0x1800A0D20: NtCreateNamedPipeFile
0x18011ED90: "__cdecl _real@3fb0000000000000" __real@3fb0000000000000
0x18002C990: RtlFlsFree
0x180166018: RtlpLockedMemoryBlockLookasideCount
0x180072030: TpSetPoolStackInformation
0x18011DB90: "\Registry\Machine\System\Current" ??_C@_1IA@LECPAJIF@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x18008FE90: "__cdecl _isascii" __isascii
0x180068DE0: RtlLookupElementGenericTableFullAvl
0x18012C560: "LdrResolveDelayLoadedAPI:Unable " ??_C@_0EL@GICBJNHB@LdrResolveDelayLoadedAPI?3Unable?5@
0x180102598: "__cdecl RtlpMuiRegPopulateBaseLanguages" _RtlpMuiRegPopulateBaseLanguages
0x18011C5F8: "LdrResFallbackLangList Exit" ??_C@_1DI@OBGMOLJJ@?$AAL?$AAd?$AAr?$AAR?$AAe?$AAs?$AAF?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AAL?$AAa?$AAn?$AAg?$AAL?$AAi?$AAs?$AAt?$AA?5?$AAE?$AAx?$AAi?$AAt?$AA?$AA@
0x180085D04: LdrpReleaseDllPath
0x180122668: "WARNING" ??_C@_07KCOHIFOP@WARNING?$AA@
0x18002CAE0: RtlpFileIsWin32WithRCManifest
0x1800D9DF0: RtlpQueryProcessDebugInformationRemote
0x1801280E0: "Windows.Core" ??_C@_1BK@OHIBJBEF@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAC?$AAo?$AAr?$AAe?$AA?$AA@
0x18011EE38: "__cdecl _real@3dd0b4611a626331" __real@3dd0b4611a626331
0x1800F5EE0: RtlDequeueUmsCompletionListItems
0x180028020: RtlGetFullPathName_UEx
0x18011D918: "WinNt" ??_C@_1M@PFFFELPH@?$AAW?$AAi?$AAn?$AAN?$AAt?$AA?$AA@
0x180178291: AVrfpEnabled
0x1801653F8: LdrpProcessInitialized
0x18015F520: LdrpTlsList
0x1800F7A80: RtlEthernetStringToAddressA
0x1800A1640: ZwInitializeEnclave
0x1801191B8: RtlDecompressFragmentProcs
0x1800E4E00: LdrResFindResource
0x18004D488: TppWorkpValidateWork
0x18000C2F0: RtlpIsDosDeviceName_Ustr
0x180078C80: RtlpSearchProtectedPolicyEntry
0x1800A0860: NtAlpcRevokeSecurityContext
0x180131530: "SXS: Unable to open assembly dir" ??_C@_0FC@JNGLGJPK@SXS?3?5Unable?5to?5open?5assembly?5dir@
0x180109A40: RtlpHpTlLogGCTimerFinished
0x18012BD40: "PreferredUILanguagesPending" ??_C@_1DI@FJENBGDK@?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAr?$AAe?$AAd?$AAU?$AAI?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AAs?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AA?$AA@
0x180020418: RtlpHpMetadataFree
0x1801112CC: SbpLookup
0x1800A10A0: NtDeleteBootEntry
0x180166158: LdrpTlsLock
0x1800F6C90: RtlpGetMemoryFlag
0x18009FE90: NtWriteVirtualMemory
0x1800A00F0: ZwCreateProcessEx
0x180132630: "\REGISTRY\MACHINE\SYSTEM\Current" ??_C@_1GG@IBGAEKLO@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x18011FA30: "__cdecl _newcumap" __newcumap
0x1800F7BC0: RtlEthernetStringToAddressW
0x1801013AC: RtlpMuiRegValidateConfigNode
0x180088060: RtlAddProcessTrustLabelAce
0x180114208: PsspDuplicateSnapshotRemoteToRemote
0x1800A1160: ZwDeleteValueKey
0x180130B30: "SXS: %s() - caller supplied no b" ??_C@_0FO@JNIDBKAC@SXS?3?5?$CFs?$CI?$CJ?5?9?5caller?5supplied?5no?5b@
0x180163460: EtwpLoggerArray
0x180093E70: sprintf
0x180002664: InsertChar
0x18001C480: RtlDestroyHeap
0x180122A90: "CommonProgramFiles" ??_C@_1CG@HMNDLOFD@?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x18004B5F0: RtlEqualUnicodeString
0x1800E1D40: RtlGrowFunctionTable
0x1800A12E0: ZwFilterBootOption
0x18011EE28: "__cdecl _real@3da907db46cc5e42" __real@3da907db46cc5e42
0x180080760: RtlpApplyLengthFunction
0x18004D3E0: RtlpAllocateDebugInfo
0x1800A0720: NtAlpcDeleteResourceReserve
0x1800CE850: RtlAppendPathElement
0x18003E518: RtlpGetDirPath
0x1800DA560: RtlpWalkCallbackRoutine
0x18006AEB0: EtwpGetPrivateLoggerContext
0x18005C7E0: RtlInitializeSidEx
0x18012C618: "LoadResource API entry" ??_C@_1CO@FEOAEHKM@?$AAL?$AAo?$AAa?$AAd?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?5?$AAA?$AAP?$AAI?$AA?5?$AAe?$AAn?$AAt?$AAr?$AAy?$AA?$AA@
0x18012DC30: "ShutdownFlags" ??_C@_1BM@JMKJILKC@?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x1800A0130: NtIsProcessInJob
0x180056DA8: LdrpProcessDetachNode
0x1800EDFE0: RtlpQueryTimeZoneKeyNameRoutine
0x18012CDE8: "Failed to allocated memory for s" ??_C@_0DE@PKMNOJFL@Failed?5to?5allocated?5memory?5for?5s@
0x18012C2B8: "LdrLockLoaderLock" ??_C@_0BC@JHLIPNEA@LdrLockLoaderLock?$AA@
0x180056420: EtwEventUnregister
0x18008FAB0: LdrpHandleInvalidUserCallTarget
0x18008E1FC: RtlQueryVolumeDiskSpeedPolicy
0x1800A0500: NtAlertThread
0x180130FD0: "SXS: Assembly storage root locat" ??_C@_0EO@HNPDHLBL@SXS?3?5Assembly?5storage?5root?5locat@
0x18006E7B0: RtlQueryRegistryValuesEx
0x180178292: RtlGuardAllowSuppressedCalls
0x1800A2280: NtQuerySystemInformationEx
0x180109D98: RtlSetLFHDebuggingInformation
0x180009F70: TpCallbackSendAlpcMessageOnCompletion
0x18007BE60: RtlpVerGetConditionMask
0x180064BC0: RtlInitializeCriticalSection
0x1800F941C: RtlpGuardIsSuppressedAddress
0x18012D198: "StackTraceDatabaseSizeInMb" ??_C@_1DG@HCPBKMAB@?$AAS?$AAt?$AAa?$AAc?$AAk?$AAT?$AAr?$AAa?$AAc?$AAe?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AAS?$AAi?$AAz?$AAe?$AAI?$AAn?$AAM?$AAb?$AA?$AA@
0x1800A0C00: ZwCreateIRTimer
0x18012BD78: M_strAceEmailPrefix
0x1800F4AC0: RtlSetExtendedFeaturesMask
0x1800A09A0: ZwCancelWaitCompletionPacket
0x1800E10F4: RtlpQueryInformationActivationContextManifestResourceName
0x180099C60: "__cdecl ultow_s" _ultow_s
0x1800A1040: NtDebugActiveProcess
0x18007EE70: RtlIsThreadWithinLoaderCallout
0x18010F2C8: EtwpUpdateUmLogger
0x180138B70: "heap_failure_freelists_corruptio" ??_C@_0CC@DPOECGOA@heap_failure_freelists_corruptio@
0x1800A2300: NtQueueApcThreadEx
0x18012F380: "`SignalStartWerSvc'::`2'::WerSvcTriggerGuid" ?WerSvcTriggerGuid@?1??SignalStartWerSvc@@9@9
0x18009FDB0: NtOpenFile
0x1800FCC48: RtlInitializeExceptionLog
0x1800FCCB0: RtlUnhandledExceptionFilter
0x180139E30: "\Registry\Machine\SYSTEM\Current" ??_C@_1KA@LCEEGHG@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x18002491C: RtlCreateProcessParametersInternal
0x1800A2200: ZwQuerySemaphore
0x1801634C0: RtlpLowFragHeapRandomData
0x18011FD80: "Status: 0x%08lx " ??_C@_0BB@NFIMEJKA@Status?3?50x?$CF08lx?6?$AA@
0x1800A1340: ZwFlushBuffersFileEx
0x1800A15C0: NtGetNotificationResourceManager
0x1800A3260: ExpInterlockedFlushSList
0x1800786EC: RtlpCheckForSameCurdir
0x180113BE0: PsspQueryInfoClass_PSS_QUERY_PROCESS_INFORMATION
0x1800191CC: RtlpHpEnvAllocVA
0x18009F500: NtdllEditWndProc_A
0x18009F790: NtAcceptConnectPort
0x18012EBE8: "AVRF: skipped resnapping provide" ??_C@_0CM@DJDFJEIG@AVRF?3?5skipped?5resnapping?5provide@
0x18008FCC0: "__cdecl _C_specific_handler" __C_specific_handler
0x180095520: wcsncpy
0x18009A510: "__cdecl strnset_s" _strnset_s
0x1800A1700: NtListenPort
0x1800605F0: RtlIsTextUnicode
0x18012C220: "LdrGetDllHandleEx" ??_C@_0BC@BHGIGKLK@LdrGetDllHandleEx?$AA@
0x180138818: "Type" ??_C@_19BIEPDBPA@?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180087AA0: RtlEncodeSystemPointer
0x1800A1F00: ZwQueryEaFile
0x1800D7760: RtlReadMemoryStream
0x18008FFA0: iscntrl
0x18007CA60: RtlpCompareActivationContextStringSectionEntryByPseudoKey
0x180045BFC: LdrpFindLoadedDllInternal
0x18005250C: TppGetCurrentThreadNumaNode
0x1800F383C: RtlpQueryMemoryUsageHeap
0x1800DBAAC: AVrfpEnableHandleVerifier
0x1800A00B0: ZwFlushBuffersFile
0x1800CF538: LdrpCleanupEnclaveLoadState
0x1800647D8: FindNodeOrParent
0x180121FC0: "windows blue" ??_C@_1BK@LCHAKNFP@?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAb?$AAl?$AAu?$AAe?$AA?$AA@
0x18007D1E0: RtlWakeConditionVariable
0x18012E700: "Locating export "%wZ" for DLL "%" ??_C@_0EC@CAEPNDN@Locating?5export?5?$CC?$CFwZ?$CC?5for?5DLL?5?$CC?$CF@
0x180139AB0: "Heap block at %p has incorrect s" ??_C@_0DE@NAFKCGNN@Heap?5block?5at?5?$CFp?5has?5incorrect?5s@
0x1800A2780: ZwSetCachedSigningLevel
0x1800A3760: RtlCaptureContext
0x18001FFA8: RtlpLfhFindClearBitAndSet
0x18012C6A8: "LoadResource API exit" ??_C@_1CM@KAPIJJGN@?$AAL?$AAo?$AAa?$AAd?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?5?$AAA?$AAP?$AAI?$AA?5?$AAe?$AAx?$AAi?$AAt?$AA?$AA@
0x180072628: RtlpTpImpersonate
0x180072D50: LdrpCondenseGraph
0x18007B808: RtlpTpWaitRundown
0x180077F28: RtlpQueryInformationActivationContextCompatibilityInformation
0x180069DDC: EtwpShutdownPrivateLoggers
0x18006783C: WerpProcessId
0x1801320D8: "corrupted critical section" ??_C@_0BL@JCIOMEBJ@corrupted?5critical?5section?$AA@
0x18014BBC0: "__cdecl setjmpexused" _setjmpexused
0x1801112A0: SbExecuteProcedure
0x1800A20E0: ZwQueryMultipleValueKey
0x1800ED358: RtlBootStatusItemInfo
0x180139F88: RtlpHpDefaultBrowserPackageName
0x1800A2E40: NtTerminateJobObject
0x18012E4A8: "TlsVector %p Index %d : %d bytes" ??_C@_0DH@COKBCNAP@TlsVector?5?$CFp?5Index?5?$CFd?5?3?5?$CFd?5bytes@
0x1800A1800: ZwLockRegistryKey
0x18008FC60: LdrpDispatchUserCallTargetES
0x1800A11C0: NtDisableLastKnownGood
0x1800E4A10: LdrpThumbProcessRelocation
0x18012EB40: "AVRF: %ws: pid 0x%X: application" ??_C@_0FM@FCDMDOLE@AVRF?3?5?$CFws?3?5pid?50x?$CFX?3?5application@
0x1801056B4: RtlpLogHeapCommit
0x1800EE344: LdrpGetMUILangConfigNode
0x18012DB68: "not " ??_C@_04LKOGMCLF@not?5?$AA@
0x180065EE0: RtlLookupElementGenericTableAvl
0x1801662B0: RtlpSystem32Dirs
0x180166410: TppPoolpListLock
0x180081284: RtlInitializeHeapGC
0x1800F25B0: RtlUnlockHeapManagerForCloning
0x1800F6450: RtlpAttachThreadToUmsCompletionList
0x18012C288: "DLL name: %ws " ??_C@_0P@GNGPJENG@DLL?5name?3?5?$CFws?6?$AA@
0x180083BD0: RtlFinalReleaseOutOfProcessMemoryStream
0x180086540: LdrpResReportResourceAccessInternalInitOnce
0x18012D990: "Process 0x%p (%wZ) exiting " ??_C@_0BM@JKFLKHPE@Process?50x?$CFp?5?$CI?$CFwZ?$CJ?5exiting?6?$AA@
0x180118500: RtlpWin32NtRoot
0x180084330: RtlQueryElevationFlags
0x1801191B0: LdrpSuppressedExportOverrideList
0x18013876C: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x1800EC040: RtlExtractBitMap
0x1800A2320: ZwRaiseException
0x1800285C0: LdrpUnsuppressAddressTakenIat
0x1800A6200: memmove
0x1800A3200: ExpInterlockedPopEntrySListEnd
0x18008A9DC: TppAreNodeWorkersSteadyState
0x180139548: "FrontEndHeapType" ??_C@_0BB@IBAKONCK@FrontEndHeapType?$AA@
0x18011D0B8: szDaylightBias
0x180069700: RtlCreateAndSetSD
0x1800A1B60: NtOpenPrivateNamespace
0x18009F830: NtDeviceIoControlFile
0x1801664BC: RtlpDisableHeapLookaside
0x18012E310: "Failed to load for appcompat rea" ??_C@_0CG@BKCGPJOG@Failed?5to?5load?5for?5appcompat?5rea@
0x180063B34: UpcaseUnicodeToSingleByteNHelper
0x18001AE68: RtlpPopulateListIndex
0x1800A1380: NtFlushInstructionCache
0x1800FDD3C: RtlpStdLogCapturedStackTrace
0x18010FFF0: TppDirectUnposted
0x18012FA30: "SXS: Activation context data at " ??_C@_0EP@JCEOKMJK@SXS?3?5Activation?5context?5data?5at?5@
0x18011C078: "\Registry\Machine\" ??_C@_1CG@ECHCOIBH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AA?$AA@
0x1800A2F00: ZwUmsThreadYield
0x18008088C: RtlpLookupCurDirSetting
0x1800A06A0: ZwAlpcCreateResourceReserve
0x18007B860: TpCancelAsyncIoOperation
0x1800A1500: NtGetCurrentProcessorNumberEx
0x180090F00: "__cdecl vsprintf_l" _vsprintf_l
0x18011EDC8: "__cdecl _real@3fd5555555555538" __real@3fd5555555555538
0x180178258: g_LdrpWow64PrepareForDebuggerAttach
0x18012C0C0: "\\" ??_C@_15LEKKCGMK@?$AA?2?$AA?2?$AA?$AA@
0x18002FE60: LdrpAccessResourceDataNoMultipleLanguage
0x1800878E0: RtlTryAcquireSRWLockExclusive
0x1800A2240: NtQuerySystemEnvironmentValue
0x18011EEB0: "__cdecl _real@bfc5555555555555" __real@bfc5555555555555
0x18002CF1C: "__cdecl RtlpMuiRegDeserializeRegistryInfo" _RtlpMuiRegDeserializeRegistryInfo
0x180090CF0: "__cdecl strnicmp" _strnicmp
0x18001CAB4: RtlpHpLfhSubsegmentCreate
0x180007BB0: LdrpHandleProtectedDelayload
0x18011F320: "__cdecl _real@3fb55555555554e6" __real@3fb55555555554e6
0x1800E0068: RtlUnicodeStringCatString
0x180088BA0: TppStopWaitCallbackGeneration
0x1800FDB80: RtlpStdGetRecordedStackTraceIndex
0x1800CFCB0: LdrpIssueEnclaveCall
0x1800EDF90: RtlQueryRegistryValues
0x1800A03C0: ZwAccessCheckByTypeResultList
0x18005E160: SHATransform
0x1800889E0: EtwCheckCoverage
0x18012BDC0: ComponentOnDemand
0x180178230: Wow64PrepareForException
0x18011F328: "__cdecl _real@3fb5555555555557" __real@3fb5555555555557
0x18001CFF4: RtlpHpLfhOwnerInitialize
0x180012100: RtlpHpSizeHeap
0x1800CEB70: DbgUiConnectToDbg
0x1800A2AA0: ZwSetIoCompletionEx
0x18008404C: LdrpRedirectDelayloadFailure
0x1800A3170: RtlpBreakWithStatusInstruction
0x180076FB0: RtlConvertDeviceFamilyInfoToString
0x18011FBB0: "__cdecl _clocalestr" __clocalestr
0x180121E20: SidHashByteToIndexLookupTable
0x18012C190: "DLL name: %wZ " ??_C@_0P@FKPDOJLJ@DLL?5name?3?5?$CFwZ?6?$AA@
0x18012CB50: "Could not locate procedure "%s" " ??_C@_0DI@LIDEEFAH@Could?5not?5locate?5procedure?5?$CC?$CFs?$CC?5@
0x180123128: "INTERNETCLIENT" ??_C@_1BO@FFALCFOG@?$AAI?$AAN?$AAT?$AAE?$AAR?$AAN?$AAE?$AAT?$AAC?$AAL?$AAI?$AAE?$AAN?$AAT?$AA?$AA@
0x1800A2BA0: ZwSetSystemInformation
0x1800A1360: NtFlushInstallUILanguage
0x18011EE04: "cos" ??_C@_03LALBNOCG@cos?$AA@
0x18008A4B0: RtlZeroMemory
0x18003B630: RtlpGetSystemDefaultUILanguage
0x18012E3A0: "DLL "%wZ" does not contain an ex" ??_C@_0CM@MFBACBPE@DLL?5?$CC?$CFwZ?$CC?5does?5not?5contain?5an?5ex@
0x180089408: PsspWalkInfoClass_PSS_WALK_HANDLES
0x18009F600: NtdllDispatchHook_A
0x180081C60: TpReleasePool
0x1800A30C0: ZwWaitForWorkViaWorkerFactory
0x1801378D0: "ROUND_UP_TO_POWER2(FreeBlock, PA" ??_C@_0EB@EODAOBJI@ROUND_UP_TO_POWER2?$CIFreeBlock?0?5PA@
0x1800EE7C0: RtlGetUILanguageInfo
0x180139ED0: "Enabled" ??_C@_1BA@NPJPKIM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18002E5E0: GetLCIDFromLangListNode
0x1800A18C0: NtMapCMFModule
0x18011D1B0: szTimeZonesSlash
0x180137CE0: "Control Panel\International" ??_C@_1DI@HFDNKLGP@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAP?$AAa?$AAn?$AAe?$AAl?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAa?$AAt?$AAi?$AAo?$AAn?$AAa?$AAl?$AA?$AA@
0x18001F714: RtlpLowFragHeapFlushCaches
0x1800CF070: DbgUiWaitStateChange
0x180137CC4: "hs" ??_C@_15NDBANMBJ@?$AAh?$AAs?$AA?$AA@
0x18009F610: NtdllDispatchHook_W
0x180002A50: WinSqmCheckEscalationSetDWORD
0x1800D19D0: LdrpLogFatalUserCallbackException
0x1800A14A0: NtGetCompleteWnfStateSubscription
0x180031100: LdrFindResource_U
0x180093140: iswdigit
0x1800A4080: RtlPrefetchMemoryNonTemporal
0x18011F338: "sqrt" ??_C@_04EIAKFFMI@sqrt?$AA@
0x180086650: RtlAllocateWnfSerializationGroup
0x18004DAF4: EtwpRegisterProvider
0x180128398: "Thin Client" ??_C@_1BI@NKKGCOGG@?$AAT?$AAh?$AAi?$AAn?$AA?5?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?$AA@
0x1800881F0: RtlWaitOnAddress
0x18012E0E0: "__RedirectionInformation__" ??_C@_0BL@HLBPBBPA@__RedirectionInformation__?$AA@
0x18012F7D0: "!(askd.Flags & ACTIVATION_CONTEX" ??_C@_0FD@FEKMFNNA@?$CB?$CIaskd?4Flags?5?$CG?5ACTIVATION_CONTEX@
0x180128078: "Windows.ServerNano" ??_C@_1CG@NLECOABM@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAN?$AAa?$AAn?$AAo?$AA?$AA@
0x180122E60: "\Registry\Machine\System\Current" ??_C@_1GI@HGIHOLK@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x180076B40: TpCaptureCaller
0x180095A50: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180138828: "WindowsExcludedProcs" ??_C@_1CK@MPIDPHBP@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAE?$AAx?$AAc?$AAl?$AAu?$AAd?$AAe?$AAd?$AAP?$AAr?$AAo?$AAc?$AAs?$AA?$AA@
0x1800998E0: "__cdecl i64toa_s" _i64toa_s
0x1801195C0: Crc64Ctrl
0x18007A3D8: RtlpEstimateAllocatedSize
0x18001D7B8: RtlpInitializeSegmentInfoForBucket
0x180127F30: "Windows.Desktop" ??_C@_1CA@FKJOFOEP@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?$AA@
0x180025340: RtlSetEnvironmentVar
0x1800436E0: RtlUpcaseUnicodeString
0x1801283C8: "Industry Other" ??_C@_1BO@OJMGJFKJ@?$AAI?$AAn?$AAd?$AAu?$AAs?$AAt?$AAr?$AAy?$AA?5?$AAO?$AAt?$AAh?$AAe?$AAr?$AA?$AA@
0x180046470: LdrShutdownThread
0x1800A2DA0: NtSubscribeWnfStateChange
0x1800A1840: NtMakePermanentObject
0x1800273B0: RtlpIsQualifiedLanguage
0x180080554: RtlEnumerateBoundaryDescriptorEntries
0x1801377C0: "(UCRBlock->Size >= *Size)" ??_C@_0BK@FMFPHHEG@?$CIUCRBlock?9?$DOSize?5?$DO?$DN?5?$CKSize?$CJ?$AA@
0x180166498: g_pShimmedModuleList
0x1801305A0: "SXS: %s() found assembly informa" ??_C@_0JL@PNANFKHK@SXS?3?5?$CFs?$CI?$CJ?5found?5assembly?5informa@
0x1801184E0: TppWorkpTaskVFuncs
0x1800842D0: RtlEndEnumerationHashTable
0x180062C80: RtlpTimeToTimeFields
0x1800CEF60: DbgUiIssueRemoteBreakin
0x180065570: TpSetPoolMaxThreads
0x18006FF30: TppAlpcpCallbackEpilog
0x180053E34: RtlpHpVsContextAllocate
0x180178240: g_pfnSE_LdrResolveDllName
0x1800FF69C: RtlpMuiRegAddAlternateCodePage
0x180093AA0: qsort_s
0x180139CD0: "Total size of free blocks in are" ??_C@_0FL@JPHINBBC@Total?5size?5of?5free?5blocks?5in?5are@
0x18009B140: swscanf_s
0x180086040: RtlGetSecurityDescriptorRMControl
0x1800859DC: LdrpCorInitialize
0x18008A0D8: RtlpCopyLegacyContext
0x180053124: RtlpHpLfhOwnerCompact
0x18006E4A8: RtlStringCbCatW
0x18002CABC: CheckOneBitValidFlag
0x180139520: "FrontEndHeap" ??_C@_0N@KPBPFGKB@FrontEndHeap?$AA@
0x1800FB1B0: RtlIsNameInUnUpcasedExpression
0x1800A2DC0: ZwSuspendProcess
0x180131060: "SXS: %s() bad parameters: SXS: " ??_C@_0FA@LMJFIBBC@SXS?3?5?$CFs?$CI?$CJ?5bad?5parameters?3?6SXS?3?5?5@
0x18009A230: "__cdecl snwscanf_s" _snwscanf_s
0x18012D550: "Allocating a data table entry fo" ??_C@_0DJ@JGDKIEJC@Allocating?5a?5data?5table?5entry?5fo@
0x180083BD0: WinSqmAddToStream
0x1800766F0: RtlUnlockModuleSection
0x1800775D0: RtlQueryHeapInformation
0x180046970: RtlActivateActivationContextUnsafeFast
0x18007B760: RtlGetOwnerSecurityDescriptor
0x180117010: RtlAllocateMemoryBlockLookaside
0x1800A0AE0: ZwCompressKey
0x180139748: "RtlAllocateHeap" ??_C@_0BA@HKDEHBAO@RtlAllocateHeap?$AA@
0x1801282A8: "Gaming" ??_C@_1O@MGHFGOKO@?$AAG?$AAa?$AAm?$AAi?$AAn?$AAg?$AA?$AA@
0x18008B0CC: RtlpComputeMergedAcl
0x180065B5C: TppInitializeTimerSubQueue
0x1800413B0: SbSelectProcedure
0x1800E1918: ApiSetQuerySchemaInfo
0x180166820: RtlpLeaksCount
0x1800A0EC0: ZwCreateThreadEx
0x180107080: RtlDebugCompactHeap
0x180123198: "CONIN$" ??_C@_1O@PNMIMBDD@?$AAC?$AAO?$AAN?$AAI?$AAN?$AA$?$AA?$AA@
0x1800A0700: ZwAlpcDeletePortSection
0x180139920: "About to free block at %p with t" ??_C@_0CI@CCIOGCGI@About?5to?5free?5block?5at?5?$CFp?5with?5t@
0x180071D60: RtlUpperChar
0x1800A04E0: NtAlertResumeThread
0x1800A0050: NtCreateEvent
0x180086810: RtlGetSearchPath
0x1800D86E0: RtlIsCurrentThreadAttachExempt
0x18008FEB0: "__cdecl _iscsym" __iscsym
0x18011D1E0: szFirstEntry
0x180165AC0: LdrpEnclaveListLock
0x180017CFC: RtlpHpSegDescriptorValidate
0x180120110: "HEAP[%wZ]: " ??_C@_0M@GCCCOAPI@HEAP?$FL?$CFwZ?$FN?3?5?$AA@
0x180093510: mbstowcs
0x18005D230: A_SHAFinal
0x1800A47F0: RtlpExecuteHandlerForUnwind
0x18002626C: IsLanguageOverlayBlockedByPolicy
0x1800A31E7: ExpInterlockedPopEntrySListResume
0x18008B1EC: RtlpComputeMergedAcl2
0x180104930: RtlpHpStackTraceEventWriter
0x180130150: "SXS: String hash table entry at " ??_C@_0HI@DJGEPBCL@SXS?3?5String?5hash?5table?5entry?5at?5@
0x1800FDAA4: RtlpStdExtendUpperWatermark
0x18011D738: "SE_DllUnloaded" ??_C@_0P@OJNDNBGK@SE_DllUnloaded?$AA@
0x18012C920: "Changing the protection of the e" ??_C@_0EM@ILAKKAHE@Changing?5the?5protection?5of?5the?5e@
0x18009FC10: ZwOpenProcess
0x1800A0FE0: ZwCreateWaitablePort
0x18001C7C4: RtlpInitializeLowFragHeap
0x180078898: RtlpReferenceCurrentDirectory
0x180080190: LdrpMapDllRetry
0x180003690: RtlCaptureStackBackTrace
0x18011EDD0: "__cdecl _real@3fe0000000000000" __real@3fe0000000000000
0x1800FFFC8: RtlpMuiRegGetFallbackLanguageInfoByIndex
0x180088CE0: TpCallbackLeaveCriticalSectionOnCompletion
0x18012BE50: AppModelRuntimeProviderId
0x180043188: RtlDosPathNameToRelativeNtPathName
0x1800F59A8: RtlpHpConvertSegmentFlagsToFlags
0x1800A26C0: ZwSaveKeyEx
0x18001D80C: RtlpExtendLowFragHeapSegment
0x180089E4C: RtlpIsCustomLocale
0x1801283E8: "Xbox One" ??_C@_1BC@NMJDGMHN@?$AAX?$AAb?$AAo?$AAx?$AA?5?$AAO?$AAn?$AAe?$AA?$AA@
0x18006A024: EtwpFreeLoggerContext
0x1800A1AC0: NtOpenKeyTransactedEx
0x1800A0E40: ZwCreateResourceManager
0x1800FF4D4: RtlpLoadPolicyLanguageSpec
0x1800A1DE0: ZwPropagationFailed
0x1800A2020: ZwQueryInformationTransactionManager
0x1801325F8: "\SystemRoot\bootstat.dat" ??_C@_1DC@MEBGDNBI@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAb?$AAo?$AAo?$AAt?$AAs?$AAt?$AAa?$AAt?$AA?4?$AAd?$AAa?$AAt?$AA?$AA@
0x18015F9B0: RtlpDebugPageHeapTable
0x1800A2CC0: ZwSetWnfProcessNotificationEvent
0x18012E478: "minkernel\ntdll\ldrtls.c" ??_C@_0BJ@EIFJOLID@minkernel?2ntdll?2ldrtls?4c?$AA@
0x1800924B0: ceil
0x1800A2C80: ZwSetUuidSeed
0x1800A0230: NtWriteRequestData
0x180130360: "SXS: %s() passed string section " ??_C@_0HF@PFIFHENE@SXS?3?5?$CFs?$CI?$CJ?5passed?5string?5section?5@
0x18007CE90: RtlpComputeDllPathWithOptions
0x180101FB4: "__cdecl RtlpMuiRegInitLIPLanguage" _RtlpMuiRegInitLIPLanguage
0x1800E95A0: RtlpPossibleDeadlock
0x180088A60: RtlAddAccessDeniedAceEx
0x18004E970: TpIsTimerSet
0x18012DCE0: "TracingFlags" ??_C@_1BK@DEKFNMIF@?$AAT?$AAr?$AAa?$AAc?$AAi?$AAn?$AAg?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x1801660A8: LibLoaderTelemetryInitRunOnce
0x1800A16A0: ZwInitiatePowerAction
0x18007C444: RtlQueryApplicationKeyOption
0x18000CA90: RtlpSubSegmentInitialize
0x1800422F0: RtlGetPersistedStateLocation
0x180095AE0: "__cdecl _NLG_Dispatch2" __NLG_Dispatch2
0x180132250: "\SysWOW64\" ??_C@_1BG@GKLECEJI@?$AA?2?$AAS?$AAy?$AAs?$AAW?$AAO?$AAW?$AA6?$AA4?$AA?2?$AA?$AA@
0x18012ED88: "AVRF: initialized provider %ws (" ??_C@_0DD@HFCKPFDL@AVRF?3?5initialized?5provider?5?$CFws?5?$CI@
0x1800200CC: RtlpHpSegHeapAddSegment
0x18009FDD0: NtDelayExecution
0x1801399C0: "RtlCreateTagHeap" ??_C@_0BB@GACHJAEO@RtlCreateTagHeap?$AA@
0x1800247D0: RtlCreateEnvironment
0x1800EE5F0: RtlConvertLCIDToString
0x18001BF30: RtlpCreateHeapEncoding
0x1800DD730: RtlpWow64SuspendWorker
0x180067D74: RtlpNonNegativeDecrement
0x180091390: "__cdecl wcsnicmp" _wcsnicmp
0x18005D488: SHA256Update
0x1800FBB48: NormBuffer__Insert
0x18011CDA0: "BaseNamedObjects" ??_C@_1CC@GOIMJBIF@?$AAB?$AAa?$AAs?$AAe?$AAN?$AAa?$AAm?$AAe?$AAd?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?$AA@
0x1800A26E0: NtSaveMergedKeys
0x1800A05E0: NtAlpcAcceptConnectPort
0x180115040: RtlStackDbContextSerialize
0x180130978: "RtlpQueryRunLevel" ??_C@_0BC@EHEIAKE@RtlpQueryRunLevel?$AA@
0x18003D250: FindLabelEnd
0x180118188: TppDirectTaskVFuncs
0x1800A2940: NtSetInformationJobObject
0x1800E4B90: RtlQueryModuleInformation
0x18011C708: "LdrResGetRCConfig Exit" ??_C@_1CO@CCNEFJGB@?$AAL?$AAd?$AAr?$AAR?$AAe?$AAs?$AAG?$AAe?$AAt?$AAR?$AAC?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?5?$AAE?$AAx?$AAi?$AAt?$AA?$AA@
0x1800A4700: XRestoreSHelper
0x1800EC8B0: RtlInitializeBitMapEx
0x1800207B0: RtlpHpMetadataHeapCreate
0x18001C240: RtlpHpVsChunkSetExtraPresent
0x180021620: RtlCSparseBitmapFindBitSetCapped
0x18012CE90: "Getting ApphelpCheckModule faile" ??_C@_0DH@IHOJLDHE@Getting?5ApphelpCheckModule?5faile@
0x18008FEF0: "__cdecl _iscsymf" __iscsymf
0x18010593C: RtlpLogHeapExtendEvent
0x18011CBC8: "::%hs%u.%u.%u.%u" ??_C@_1CC@CLPLLKPB@?$AA?3?$AA?3?$AA?$CF?$AAh?$AAs?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?$AA@
0x180030560: RtlProcessFlsData
0x18003A450: RtlSetGroupSecurityDescriptor
0x18010D26C: RtlpHpSegGetDescriptorValidateSafe
0x18007B3C0: TpAllocAlpcCompletion
0x1800DF670: WerpEscalationReadUlongFromKey
0x1801627CC: PossibleDeadlockReportThreshold
0x180006D00: RtlpxLookupFunctionTable
0x180002A50: WinSqmCheckEscalationAddToStreamEx
0x18012EA10: "vrfcore.dll" ??_C@_1BI@CPNGMKLH@?$AAv?$AAr?$AAf?$AAc?$AAo?$AAr?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800A1620: NtImpersonateThread
0x1800A20A0: ZwQueryIoCompletion
0x1800EDFD0: RtlSetTimeZoneInformation
0x18009FA10: NtQueryKey
0x18009FF50: ZwOpenEvent
0x180165B40: CsrHeap
0x18010BB50: RtlpLoadUmsDebugRegisterState
0x1800E1AD0: AlpcAdjustCompletionListConcurrencyCount
0x180094730: strncpy
0x1800F1720: RtlFindClosestEncodableLength
0x1800F6910: RtlFlushSecureMemoryCache
0x1800D7760: RtlLockMemoryStreamRegion
0x18007EFE0: RtlRegisterThreadWithCsrss
0x180064B24: PromoteNode
0x180137B90: "No leaks detected. " ??_C@_0BE@MOHFKBFM@No?5leaks?5detected?4?6?$AA@
0x1800A2FE0: ZwUnmapViewOfSectionEx
0x180088660: TpSetPoolThreadBasePriority
0x18009AAD0: memmove_s
0x1800A15E0: NtGetWriteWatch
0x1800FB100: RtlIsNameInExpression
0x18016652C: SecurityCookieInitCount
0x18006F4C0: TpReleaseCleanupGroupMembers
0x1800CEED0: DbgUiDebugActiveProcess
0x180163470: EtwpRegistrationCount
0x1800A40E0: RtlGetCurrentProcessorNumberEx
0x1800531E4: LdrpInsertModuleToIndexLockHeld
0x1800FBF24: NormBuffer__ReplaceLastStartBasePair
0x18004ECF0: TppIopExecuteCallback
0x1800DE638: WaitForWerSvc
0x180164EE0: LdrpLargePageDllKeyHandle
0x180166160: LdrpDelayedTlsReclaimTable
0x1800A3260: RtlpInterlockedFlushSList
0x18011EDF8: "ceil" ??_C@_04GFPJNGEK@ceil?$AA@
0x1800086A4: RtlpGetEntireXStateAreaLength
0x180130F00: "SXS: Unabel to query location fr" ??_C@_0EO@FKIBMMJ@SXS?3?5Unabel?5to?5query?5location?5fr@
0x180029490: RtlFindClearBitsAndSet
0x180088720: RtlRunDecodeUnicodeString
0x18008BD60: RtlSetSecurityObjectEx
0x18011DA80: "RXACT" ??_C@_1M@NGDNBJPL@?$AAR?$AAX?$AAA?$AAC?$AAT?$AA?$AA@
0x180083BD0: RtlDebugPrintTimes
0x180084B00: EtwGetTraceEnableLevel
0x1800D75E8: LdrpGenericExceptionFilter
0x18015F780: "struct _SWITCHBRANCH_MODULE_TABLE_ENTRY g_SbTableEntry_VerifyVersionInfoSwitch_RTL" ?g_SbTableEntry_VerifyVersionInfoSwitch_RTL@@3U_SWITCHBRANCH_MODULE_TABLE_ENTRY@@A
0x180131C88: "LdrpResValidateFilePath Exit" ??_C@_1DK@OAOJKMPL@?$AAL?$AAd?$AAr?$AAp?$AAR?$AAe?$AAs?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?5?$AAE?$AAx?$AAi?$AAt?$AA?$AA@
0x1800A3470: KiUserCallbackDispatch
0x180138B00: "heap_failure_invalid_allocation_" ??_C@_0CF@MMNKPCPL@heap_failure_invalid_allocation_@
0x1800A20C0: NtQueryLicenseValue
0x180002A50: LdrSetAppCompatDllRedirectionCallback
0x1800EB3D0: RtlPinAtomInAtomTable
0x1800A0340: NtSetValueKey
0x18002D8C0: RtlpMuiRegCreateLanguageConfigList
0x1800E90C0: RtlDumpResource
0x18010760C: RtlDebugDestroyHeap
0x1800A0540: NtAllocateLocallyUniqueId
0x1801054E4: RtlpLogHeapAffinityManagerEnable
0x1801314E0: "SXS: Attempt to translate DOS pa" ??_C@_0EC@MBGDCKJD@SXS?3?5Attempt?5to?5translate?5DOS?5pa@
0x180127D60: "WIN://PKGHOSTID" ??_C@_1CA@KNFPKGEL@?$AAW?$AAI?$AAN?$AA?3?$AA?1?$AA?1?$AAP?$AAK?$AAG?$AAH?$AAO?$AAS?$AAT?$AAI?$AAD?$AA?$AA@
0x180132948: "LanguageConfiguration" ??_C@_1CM@NLNEHECD@?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18012DF50: "LdrpRelocateImage" ??_C@_0BC@EEALMMAA@LdrpRelocateImage?$AA@
0x180094183: "__cdecl __entry_from_strcat_in_strcpy" ___entry_from_strcat_in_strcpy
0x18009F700: NtdllMDIClientWndProcWorker
0x1800A1F80: ZwQueryInformationEnlistment
0x180066D20: RtlExitUserProcess
0x18009F930: ZwClose
0x18002FB5C: RtlpCheckMuiMultiStringSafe
0x180016E90: RtlpInsertFreeBlock
0x1800D9260: RtlQueryProcessHeapInformation
0x18001EEB0: RtlpHpSegContextReserve
0x180067F08: LdrpHandlePendingModuleReplaced
0x18012CD10: "Loading the shim engine DLL fail" ??_C@_0DI@JOMMGJCA@Loading?5the?5shim?5engine?5DLL?5fail@
0x1800DB7B4: AVrfpDetectVerifiedExports
0x1800F62E0: RtlQueryUmsThreadInformation
0x180117100: RtlAllocateMemoryZone
0x180122FA8: "REMOVABLESTORAGE" ??_C@_1CC@OJNEDPCA@?$AAR?$AAE?$AAM?$AAO?$AAV?$AAA?$AAB?$AAL?$AAE?$AAS?$AAT?$AAO?$AAR?$AAA?$AAG?$AAE?$AA?$AA@
0x180091400: "__cdecl wcsnset_s" _wcsnset_s
0x18009F890: NtReleaseSemaphore
0x1800A1FE0: ZwQueryInformationResourceManager
0x1800903D0: "__cdecl ui64tow" _ui64tow
0x1800A1B00: ZwOpenMutant
0x1800828F0: RtlAddAttributeActionToRXact
0x180090360: "__cdecl i64tow" _i64tow
0x18011DD88: "atan" ??_C@_04MLLJIGOK@atan?$AA@
0x180132D40: "Crc64 ReFS-v1" ??_C@_0O@BJIIKNLL@Crc64?5ReFS?9v1?$AA@
0x180101870: RtlpRefreshCachedUILanguage
0x1800A0AC0: ZwCompleteConnectPort
0x1800D7E30: RtlpProcessReflectionStartup
0x180090030: islower
0x1800524D0: RtlAddRefActivationContext
0x1800667A0: RtlSubtreePredecessor
0x180035AB8: RtlpInitUnicodeStringUsingBuffer
0x180128828: SecondsToStartOf1970
0x180164560: AVrfpPageHeapPreviousStopData
0x1800A2660: NtRollbackTransaction
0x18008DDF0: RtlConnectToSm
0x180044DD0: LdrpLogNewDllLoad
0x1800A0D40: ZwCreatePagingFile
0x18006DE00: RtlCheckPortableOperatingSystem
0x180064870: RtlDeleteElementGenericTableAvlEx
0x1801311F0: "RtlpResolveAssemblyStorageMapEnt" ??_C@_0CD@OIEIHMKG@RtlpResolveAssemblyStorageMapEnt@
0x180138310: " *** A stack buffer overrun oc" ??_C@_0DD@LAOICNHE@?6?6?5?$CK?$CK?$CK?5A?5stack?5buffer?5overrun?5oc@
0x180074804: RtlpOptimizeConditionVariableWaitList
0x1800A15A0: NtGetNlsSectionPtr
0x1800A4820: LZNT1DecompressChunk
0x180130870: "SXS: %s() received invalid sub-i" ??_C@_0GD@HNPBCIKP@SXS?3?5?$CFs?$CI?$CJ?5received?5invalid?5sub?9i@
0x1800F713C: RtlpScanHeapAllocBlocks
0x18015FAB0: ShowSnaps
0x180077890: RtlpHpGCCallback
0x1801047A4: RtlpHpStackTraceEnable
0x1800901C0: "__cdecl i64toa" _i64toa
0x18013A1B0: "ThreadPool: attempt to terminate" ??_C@_0IB@FCPILMLF@ThreadPool?3?5attempt?5to?5terminate@
0x18009F9D0: NtFindAtom
0x180088E90: PssNtFreeSnapshot
0x18001AB9C: RtlpLfhBucketUsageUpdate
0x18011FCB4: "_logb" ??_C@_05JGDBENOH@_logb?$AA@
0x1800A1D80: ZwPrivilegeObjectAuditAlarm
0x1801394D0: "NonDedicatedListLength" ??_C@_0BH@OEGGJOF@NonDedicatedListLength?$AA@
0x18012C400: "LdrpWriteBackProtectedDelayLoad:" ??_C@_0IO@HGOOPNEA@LdrpWriteBackProtectedDelayLoad?3@
0x1800841F0: TpDisassociateCallback
0x1801322F8: "System32" ??_C@_1BC@PBPPGPAN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?$AA@
0x18005FCC0: RtlComputeCrc32
0x1800ED170: RtlGetCallersAddress
0x18011FCD0: "__cdecl d_inf" _d_inf
0x18011EE50: "__cdecl _real@3e5ae600b42fdfa7" __real@3e5ae600b42fdfa7
0x180095290: toupper
0x18002198C: RtlCSparseBitmapBitsClear
0x1800858B0: RtlSetControlSecurityDescriptor
0x18012CF28: "LdrpLoadWow64" ??_C@_0O@LODIFGBP@LdrpLoadWow64?$AA@
0x18001D8E8: CsrpConnectToServer
0x18011D940: "LanmanNt" ??_C@_1BC@HCEJBDJB@?$AAL?$AAa?$AAn?$AAm?$AAa?$AAn?$AAN?$AAt?$AA?$AA@
0x1800A1720: NtLoadDriver
0x18016430C: gMUICacheType
0x1800E2420: LdrpGetAlternateResourceModuleHandleEx
0x1800A2180: ZwQueryQuotaInformationFile
0x180078270: TppTimerpFree
0x1800A0CE0: NtCreateMailslotFile
0x1800689D0: RtlInitEnumerationHashTable
0x1800D25DC: LdrpLogVsmEnclaveLdrLoadEnclaveModuleTelemetry
0x180130C90: "SXS: %s() - Caller asked to use " ??_C@_0FB@PHECDDLC@SXS?3?5?$CFs?$CI?$CJ?5?9?5Caller?5asked?5to?5use?5@
0x18007A020: RtlCopyLuid
0x180068360: RtlEqualSid
0x18012D820: "LdrpCodeAuthzInitialize failed w" ??_C@_0DE@BFJECGNH@LdrpCodeAuthzInitialize?5failed?5w@
0x18009F750: NtAccessCheck
0x180058AC4: RtlCSparseBitmapBitmaskWrite
0x180085540: RtlCompressWorkSpaceSizeXpressHuff
0x18012F990: "SXS: Activation context data at " ??_C@_0EH@JKOBCPIE@SXS?3?5Activation?5context?5data?5at?5@
0x180080800: RtlpComputeSearchPath
0x180122330: "VerifyVersionInfoSwitch" ??_C@_1DA@JFDAHIML@?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAI?$AAn?$AAf?$AAo?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AA?$AA@
0x180036818: RtlpMuiRegGetOrAddString
0x180079FE0: RtlLengthRequiredSid
0x180068CC0: RtlStronglyEnumerateEntryHashTable
0x1800A1120: NtDeleteObjectAuditAlarm
0x1801030C4: "__cdecl RtlpMuiRegValidatePartialLanguage" _RtlpMuiRegValidatePartialLanguage
0x1800442C0: RtlpScanEnvironment
0x1801120C8: PsspCaptureProcessInformation
0x18013A370: "File" ??_C@_19DDLLJDOO@?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x1800E5368: LdrpResReadFile
0x180139578: "Heap %p - headers modified (%p i" ??_C@_0DH@MPPCDLBE@Heap?5?$CFp?5?9?5headers?5modified?5?$CI?$CFp?5i@
0x180118010: RtlpDosCONOUTDevice
0x180118070: LdrpKernelbaseDllName
0x18009F234: RtlpHpVsContextFreeList
0x1801051FC: RtlpLocateRelatedBlocks
0x1800A2740: NtSetBootEntryOrder
0x18008BA00: RtlCompactHeap
0x18008ED90: EtwRegisterSecurityProvider
0x180137850: "((FreeBlock->Flags & HEAP_ENTRY_" ??_C@_0HE@LDFLNCMG@?$CI?$CIFreeBlock?9?$DOFlags?5?$CG?5HEAP_ENTRY_@
0x1800358A0: RtlInitUnicodeString
0x1801034A4: RtlpAnalyzeHeapFailure
0x18015F3D8: LdrpUserDllDirectories
0x18007C9FC: LdrpPinNodeRecurse
0x18008AB4C: RtlpAddKnownObjectAce
0x1800A2D00: NtShutdownWorkerFactory
0x1800A23E0: ZwRegisterProtocolAddressInformation
0x1800A34C0: KiUserExceptionDispatch
0x18001AB0C: RtlpHpLfhBucketUpdateStats
0x180122D00: "\??\" ??_C@_19JHEHLFPM@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AA?$AA@
0x180164F00: LdrpFailureData
0x1800A1A20: NtOpenEventPair
0x180084F40: RtlRemoveVectoredExceptionHandler
0x180071AC8: RtlpInitializeAssemblyStorageMap
0x1800A3600: RtlCallEnclave
0x18000365C: RtlGuardIsValidStackPointer
0x180087990: RtlDestroyMemoryBlockLookaside
0x18012DA98: "Searching for "%wZ" in "%wZ" " ??_C@_0BO@CKOHJDLG@Searching?5for?5?$CC?$CFwZ?$CC?5in?5?$CC?$CFwZ?$CC?6?$AA@
0x18004CA3C: TppPoolpDereferenceGlobalPool
0x1800CDC80: CsrVerifyRegion
0x18006FFA0: AlpcFreeCompletionListMessage
0x180127F00: "Windows.WindowsPhone8x" ??_C@_1CO@JHKHLIPP@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAP?$AAh?$AAo?$AAn?$AAe?$AA8?$AAx?$AA?$AA@
0x1800A30E0: NtWaitHighEventPair
0x180164EE8: LdrpFatalHardErrorCount
0x1801664E8: RtlpLFHKey
0x18002D460: LdrFindEntryForAddress
0x1800FBA5C: NormBuffer__GetCurrentOutputChar
0x18009AB30: sprintf_s
0x1800A0F20: ZwCreateToken
0x1800A2DE0: ZwSuspendThread
0x180077CD0: RtlpQueryInformationActivationContextDetailedInformation
0x1800DFF70: LdrUpdatePackageSearchPath
0x1800A2A40: ZwSetInformationWorkerFactory
0x1801660B8: CentennialIssueTracker_InitializedState
0x18012DCA8: "UseImpersonatedDeviceMap" ??_C@_1DC@OGGBPDH@?$AAU?$AAs?$AAe?$AAI?$AAm?$AAp?$AAe?$AAr?$AAs?$AAo?$AAn?$AAa?$AAt?$AAe?$AAd?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAM?$AAa?$AAp?$AA?$AA@
0x18011D770: "SE_InstallBeforeInit" ??_C@_0BF@OFJMAJLA@SE_InstallBeforeInit?$AA@
0x18007CD90: TppDirectExecuteCallback
0x1800A16C0: NtIsSystemResumeAutomatic
0x1800D241C: LdrpLogVsmEnclaveLdrDeleteEnclaveTelemetry
0x18008246C: RtlpFindActivationContextSection_FillOutReturnedData
0x18011D458: "UBR" ??_C@_17KEIPLBHK@?$AAU?$AAB?$AAR?$AA?$AA@
0x18009DE24: "__cdecl winput_s" _winput_s
0x18006A934: EtwpFlushBuffer
0x18007D6B0: RtlDeleteSecurityObject
0x180059E28: vDbgPrintExWithPrefixInternal
0x1800997D0: "__cdecl set_fpsr" _set_fpsr
0x180065FF0: RtlDeleteNoSplay
0x180084D30: TpSetPoolMinThreads
0x180139738: "RtlDestroyHeap" ??_C@_0P@HGJJNGEH@RtlDestroyHeap?$AA@
0x1800A2E80: NtThawRegistry
0x1800A0110: ZwCreateThread
0x1800F6280: RtlGetUmsCompletionListEvent
0x180037C80: RtlCreateUnicodeString
0x180051090: TppPrepareDirectParams
0x1800A02C0: ZwSetInformationObject
0x180166034: RtlpDisableBreakOnFailureCookie
0x18011DC10: "LdrResRelease Exit" ??_C@_1CG@HPCBJOKO@?$AAL?$AAd?$AAr?$AAR?$AAe?$AAs?$AAR?$AAe?$AAl?$AAe?$AAa?$AAs?$AAe?$AA?5?$AAE?$AAx?$AAi?$AAt?$AA?$AA@
0x1800A1080: ZwDeleteAtom
0x180115E6C: RtlpStackDbSegmentComparitor
0x180001B80: RtlNtPathNameToDosPathName
0x1800A21E0: ZwQuerySecurityPolicy
0x18012BE60: HeapSnapshotEnd
0x1800A0400: NtAccessCheckByTypeResultListAndAuditAlarmByHandle
0x18012F000: "AVRF: Snapped (%ws: %s) with (%w" ??_C@_0CK@LBPEBLAA@AVRF?3?5Snapped?5?$CI?$CFws?3?5?$CFs?$CJ?5with?5?$CI?$CFw@
0x18012DBF8: "FrontEndHeapDebugOptions" ??_C@_1DC@BNEJKDGJ@?$AAF?$AAr?$AAo?$AAn?$AAt?$AAE?$AAn?$AAd?$AAH?$AAe?$AAa?$AAp?$AAD?$AAe?$AAb?$AAu?$AAg?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x180071960: RtlCreateActivationContext
0x1800A0680: NtAlpcCreatePortSection
0x180117160: RtlFreeMemoryBlockLookaside
0x180066FF0: RtlpLockUlockAllHeapsCallback
0x1800A24A0: ZwRenameKey
0x180131B50: "SR - " ??_C@_1M@JAFIDMJJ@?$AAS?$AAR?$AA?5?$AA?9?$AA?5?$AA?$AA@
0x18003E8B0: TpAllocTimer
0x18003B9D0: RtlIsCapabilitySid
0x18003E1C4: LdrpUpdateStatistics
0x1800A0C60: NtCreateJobSet
0x180165FD0: LdrpUnloadIndex
0x1801783F0: RtlpUnwindHistoryTable
0x180093110: iswalpha
0x1800A38DC: CcSaveNVContext2
0x18010A014: RtlpSubSegmentDebugInitialize
0x180002A50: WinSqmEventEnabled
0x1800A2B20: NtSetQuotaInformationFile
0x180131420: "SXS: Attempt to probe assembly s" ??_C@_0GJ@OHFCGOCL@SXS?3?5Attempt?5to?5probe?5assembly?5s@
0x180123000: "ENTERPRISEAUTHENTICATION" ??_C@_1DC@DGDLMKCJ@?$AAE?$AAN?$AAT?$AAE?$AAR?$AAP?$AAR?$AAI?$AAS?$AAE?$AAA?$AAU?$AAT?$AAH?$AAE?$AAN?$AAT?$AAI?$AAC?$AAA?$AAT?$AAI?$AAO?$AAN?$AA?$AA@
0x180020340: RtlpHpTagRunOnceInit
0x1800A2D80: NtStopProfile
0x180045968: LdrpInitializeDllPath
0x180165340: LdrpUseImpersonatedDeviceMap
0x180139438: "NextAvailableTagIndex" ??_C@_0BG@PMIEMADE@NextAvailableTagIndex?$AA@
0x180026650: RtlDeleteAtomFromAtomTable
0x1800A0DE0: NtCreateProfile
0x18012C9C0: "_LdrpInitialize" ??_C@_0BA@INBNLPDA@_LdrpInitialize?$AA@
0x180023C50: RtlRegisterForWnfMetaNotification
0x180084C20: EtwpPopulatePrivateEnableInfoFromGuidEntry
0x180080000: RtlNumberOfSetBits
0x18009F6B0: NtdllComboBoxWndProcWorker
0x18013A080: "ThreadPool: callback %p(%p) retu" ??_C@_0EA@IBEMPMJI@ThreadPool?3?5callback?5?$CFp?$CI?$CFp?$CJ?5retu@
0x180139FE8: "BuildLabEx" ??_C@_1BG@CLMGIAOK@?$AAB?$AAu?$AAi?$AAl?$AAd?$AAL?$AAa?$AAb?$AAE?$AAx?$AA?$AA@
0x180091080: "__cdecl vsnprintf" _vsnprintf
0x18009BE9C: "__cdecl safecrt_wctomb_s" _safecrt_wctomb_s
0x18011075C: TppETWCallbackStop
0x18009FAD0: ZwSetInformationProcess
0x1800F6250: RtlGetNextUmsListItem
0x1800A1220: ZwEnableLastKnownGood
0x18009A040: "__cdecl snprintf_s" _snprintf_s
0x1800EDA64: RtlpGetBootStatusPathFromRegistry
0x18012E830: "Packaged DLL search path compute" ??_C@_0EE@IDDLJONK@Packaged?5DLL?5search?5path?5compute@
0x180002E70: RtlpSameFunction
0x1800A0F80: NtCreateTransactionManager
0x180094DB0: tan
0x1800A3290: InterlockedPushListSList
0x1800A1260: NtEnumerateDriverEntries
0x1800A2160: ZwQueryPortInformationProcess
0x18002AB18: LdrpResSearchResourceInsideDirectory
0x180055EC0: RtlpHpLfhSubsegmentDecommitPages
0x18012F850: "SXS: Warning: Activation context" ??_C@_0EB@KBDMMBIN@SXS?3?5Warning?3?5Activation?5context@
0x180164EA8: AVrfpVerifierFlags
0x1800F65B0: RtlLookupElementGenericTableFull
0x1800410D4: SbUpdateSwitchContextBasedOnDll
0x180034140: LdrRscIsTypeExist
0x180139758: "Invalid allocation size - %Ix (e" ??_C@_0CO@DOLLCJPN@Invalid?5allocation?5size?5?9?5?$CFIx?5?$CIe@
0x1800034D8: RtlpGetContextFlagsLocation
0x18002D158: "__cdecl RtlpMuiRegAddNeutralLanguage" _RtlpMuiRegAddNeutralLanguage
0x18001BF8C: RtlpHpExtrasGet
0x18002BB58: LdrpResCompareResourceNames
0x180083900: RtlAddVectoredExceptionHandler
0x180058CC8: RtlpHpSegMgrAllocate
0x18003BC84: RtlpNameprepAsciiWorker
0x180095910: wcstol
0x180128160: "Detachable" ??_C@_1BG@JBJJDBBO@?$AAD?$AAe?$AAt?$AAa?$AAc?$AAh?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x1801288C0: RtlpStatusTable
0x1801627F0: RtlpHeapFailureInfo
0x1800D0D84: LdrpFindDelayloadedMethod
0x180068E90: RtlGetLengthWithoutLastFullDosOrNtPathElement
0x18012BDE0: AppModelGenericLibraryLoadFailureNoTermination
0x1800A1D20: NtPrepareComplete
0x18011EE40: "__cdecl _real@3de5e0b2f9a43bb8" __real@3de5e0b2f9a43bb8
0x1800A3220: ExpInterlockedPushEntrySList
0x1800D1F74: LdrpLogMapAndVerifyResourceFileFailure
0x1800A1B20: NtOpenObjectAuditAlarm
0x18008CC64: EtwpTrackProviderBinary
0x180139618: "Invalid CommitSize parameter - %" ??_C@_0CE@LICJEAIN@Invalid?5CommitSize?5parameter?5?9?5?$CF@
0x18006C5A0: EtwpAddLogHeaderToLogFile
0x18002C8F0: RtlClearBits
0x180111B00: PssNtFreeRemoteSnapshot
0x180082610: RtlInitializeHandleTable
0x1800A2500: ZwReplacePartitionUnit
0x180102E74: "__cdecl RtlpMuiRegValidateLIPLanguage" _RtlpMuiRegValidateLIPLanguage
0x18011CD38: "Global\Session\%ld%s" ??_C@_1CK@LDAJCDKF@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?2?$AA?$CF?$AAl?$AAd?$AA?$CF?$AAs?$AA?$AA@
0x1800DEB8C: WerpThreadId
0x180090EAC: "__cdecl vscwprintf_helper" _vscwprintf_helper
0x18011DC78: "Invalid parameter passed to C ru" ??_C@_0DB@OPDBMGNG@Invalid?5parameter?5passed?5to?5C?5ru@
0x180046020: LdrpLoadForwardedDll
0x180164030: NlsUnicodeToOemData
0x18009FB90: NtRequestWaitReplyPort
0x1800A30A0: ZwWaitForKeyedEvent
0x180090BD0: "__cdecl stricmp" _stricmp
0x180020D24: RtlpHpHeapWalk
0x180163E20: NlsLeadByteInfoTable
0x180110EE0: RtlDeleteTimerQueue
0x18012C7B0: "Failed to retrieve service check" ??_C@_1EK@ONFECCIN@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAr?$AAe?$AAt?$AAr?$AAi?$AAe?$AAv?$AAe?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAc?$AAh?$AAe?$AAc?$AAk@
0x1800A2840: NtSetDefaultUILanguage
0x1800E2960: LdrpTraceLoadMUIDll
0x180011D90: RtlLeaveCriticalSection
0x180118090: RtlpDosDevicesUncPrefix
0x1800ED9A0: RtlSetSystemBootStatusEx
0x180164E68: AVrfpVerifierStopMessageFunction
0x180137C98: "2147483647" ??_C@_0L@KLDLBCKA@2147483647?$AA@
0x18004C328: LdrpProcessMappedModule
0x1801325B0: "\OSDataRoot\Windows\bootstat.dat" ??_C@_1EC@POCPCOCD@?$AA?2?$AAO?$AAS?$AAD?$AAa?$AAt?$AAa?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAb?$AAo?$AAo?$AAt?$AAs?$AAt?$AAa?$AAt?$AA?4?$AAd?$AAa?$AAt@
0x1800A0010: NtYieldExecution
0x18010ED28: EtwpCheckForEnoughStackSpace
0x18001CD9C: RtlpHpLfhSubsegmentInitialize
0x18012E560: "Function %s raised exception 0x%" ??_C@_0FK@DNJHCCOK@Function?5?$CFs?5raised?5exception?50x?$CF@
0x18007D4E0: RtlWow64GetProcessMachines
0x1801308E0: "RtlpQueryFilesInAssemblyInformat" ??_C@_0EI@BBBOKDNG@RtlpQueryFilesInAssemblyInformat@
0x180086E24: LdrpRelocateImage
0x1800A09E0: NtCommitEnlistment
0x18001CD34: RtlpGetSubSegmentBlockCount
0x1800A0BE0: NtCreateEventPair
0x1800EB490: RtlAddIntegrityLabelToBoundaryDescriptor
0x1800A1CE0: NtPrePrepareComplete
0x180120070: "API set" ??_C@_07MJGMMFLJ@API?5set?$AA@
0x180127ED8: "Windows.Windows8x" ??_C@_1CE@KKJIIBMF@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA8?$AAx?$AA?$AA@
0x180056638: RtlpHpLfhSubsegmentSetOwner
0x180098854: "__cdecl set_statfp" _set_statfp
0x18012BE70: UserLoaderGuid
0x1800789A4: RtlpInitCurrentDir
0x18003F240: RtlGetNtProductType
0x18009F9F0: ZwQueryDefaultLocale
0x18010FF34: TppAdjustRunningThreadGoal
0x18010FDC0: TppJobpStopCallbackGeneration
0x18011D710: "SE_ProcessDying" ??_C@_0BA@OFEKHGBP@SE_ProcessDying?$AA@
0x18011C190: MS_Windows_AeSwitchBack_Provider
0x180120000: "minkernel\ntdll\ldrutil.c" ??_C@_0BK@BANEDJFB@minkernel?2ntdll?2ldrutil?4c?$AA@
0x18003937C: RtlpInheritAcl2
0x180085BA0: RtlGetNextEntryHashTable
0x18012E1E8: "LdrpFindDllActivationContext" ??_C@_0BN@KOLBCFLF@LdrpFindDllActivationContext?$AA@
0x18009A600: "__cdecl wmakepath_s" _wmakepath_s
0x180093100: iswalnum
0x180056930: RtlpHpVsSubsegmentCreate
0x1800A3170: DbgBreakPointWithStatus
0x1800A2B80: NtSetSystemEnvironmentValueEx
0x18005665C: LdrpUnloadNode
0x18001E470: RtlGetUserInfoHeap
0x18007F090: RtlSystemTimeToLocalTime
0x1800FC63C: Normalization__GetSecondDecomposedCharPlane0
0x18000301C: RtlpLookupDynamicFunctionEntry
0x1800DB89C: AVrfpDllLoadNotificationInternal
0x18009F7D0: ZwWaitForSingleObject
0x1800E9FD4: RtlFindAceBySid
0x1800A2040: NtQueryInformationWorkerFactory
0x180139678: "Specified HeapBase (%p) invalid," ??_C@_0DA@DLAAMBNJ@Specified?5HeapBase?5?$CI?$CFp?$CJ?5invalid?0@
0x180075520: TppSimplepExecuteCallback
0x18011CCE8: "%s\%ld\%s" ??_C@_1BE@BNDIFIKI@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAl?$AAd?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x1800A02E0: NtCancelIoFile
0x18011F2D8: "log" ??_C@_03MGHMBJCF@log?$AA@
0x1800FB804: RtlpUpcaseUnicodeStringPrivate
0x180090B80: "__cdecl _ascii_stricmp" __ascii_stricmp
0x1800DF510: WerpEscalationIsDisabled
0x1800E43CC: RtlpCreateIFEOKeyFilterKey
0x18007CB20: RtlTimeToElapsedTimeFields
0x18010FE40: TpSetDefaultPoolMaxThreads
0x1801282B8: "Home Automation" ??_C@_1CA@PLFMBJBN@?$AAH?$AAo?$AAm?$AAe?$AA?5?$AAA?$AAu?$AAt?$AAo?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18010DEBC: MD4Transform
0x1800F5A34: RtlpSetupExtendedBlock
0x180039188: RtlpInheritAcl
0x18008D4A0: RtlDosSearchPath_U
0x1801090D8: RtlpValidateHeapSegment
0x180058B98: RtlpCSparseBitmapPageCommit
0x18006E330: RtlpGetDynamicTimeZoneInfoHandle
0x180163478: EtwpMaxLoggers
0x180118050: RtlpDosCONINDevice
0x1800CF888: LdrpEnclaveAddDelayloadModules
0x1800A22E0: ZwQueryWnfStateNameInformation
0x180132840: "MachineLanguageConfiguration" ??_C@_1DK@EOBOFKDB@?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18012DDE8: "TrackActivationContextReleases" ??_C@_1DO@MFJFCHAG@?$AAT?$AAr?$AAa?$AAc?$AAk?$AAA?$AAc?$AAt?$AAi?$AAv?$AAa?$AAt?$AAi?$AAo?$AAn?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAR?$AAe?$AAl?$AAe?$AAa?$AAs?$AAe?$AAs?$AA?$AA@
0x18001AC1C: RtlpRemoveHeapFromUnprotectedList
0x1800738D0: InitializeSListHead
0x18010F764: EtwpAddEventToBuffer
0x180137F40: "The resource is unowned. This u" ??_C@_0FO@HODLHPII@The?5resource?5is?5unowned?4?5?5This?5u@
0x18006F8E8: TppItePush
0x1800A1200: ZwDrawText
0x1800944B0: strncat
0x18010EF00: EtwpFlushUmLogger
0x180074200: EtwEventProviderEnabled
0x180095E00: "__cdecl output_l" _output_l
0x180128520: SecondsToStartOf1980
0x180099960: "__cdecl ultoa_s" _ultoa_s
0x1800EAC34: RtlpIsAttributeAceInSacl
0x180127FB0: "Windows.IoT" ??_C@_1BI@LDOCLPCL@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAI?$AAo?$AAT?$AA?$AA@
0x180103208: "__cdecl RtlpRemovePendingDeleteLanguages" _RtlpRemovePendingDeleteLanguages
0x18012DFB8: "LdrpCompleteMapModule" ??_C@_0BG@CNAOBOAP@LdrpCompleteMapModule?$AA@
0x18005C0E0: RtlGetTokenNamedObjectPath
0x180166050: gDefaultCasingTableSize
0x1800695B0: RtlFreeSid
0x18012D6C0: "DllMain of MSCOREE (or its depen" ??_C@_0ED@FEOEIEEN@DllMain?5of?5MSCOREE?5?$CIor?5its?5depen@
0x18005F344: RtlpLogCapabilityCheckLatency
0x1801662E8: LdrpInvertedFunctionTableSRWLock
0x180127FC8: "Windows.IoTHeadless" ??_C@_1CI@BMPLEPEO@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAI?$AAo?$AAT?$AAH?$AAe?$AAa?$AAd?$AAl?$AAe?$AAs?$AAs?$AA?$AA@
0x18006DED0: RtlpQueryTimeZoneInformationWorker
0x18011FCE8: "__cdecl _lconv_static_W_null" __lconv_static_W_null
0x180110624: TppETWCallbackEnqueue
0x180130450: "SXS: %s() found assembly informa" ??_C@_0JP@IPHGCGDE@SXS?3?5?$CFs?$CI?$CJ?5found?5assembly?5informa@
0x180028774: RtlValidateUserCallTarget
0x18012CFF0: ";" ??_C@_13PJJBFPED@?$AA?$DL?$AA?$AA@
0x18007C11C: RtlpHpLfhBucketAllocateSlot
0x18008B89C: RtlpTpIoAlloc
0x1800E83FC: RtlpConvertToAutoInheritSecurityObject
0x18009F510: NtdllEditWndProc_W
0x1800780A0: RtlpCrackActivationContextStringSectionHeader
0x180046360: LdrpLoadDll
0x1800DB3F0: AVrfInternalHeapFreeNotification
0x180166848: RtlpIsDrainRequired
0x1800362F0: RtlValidSecurityDescriptor
0x180020114: RtlpHpSegSegmentInitialize
0x1800A1FA0: ZwQueryInformationJobObject
0x180086C80: RtlIncrementCorrelationVector
0x1801664B9: g_SxsKeepActivationContextsAlive
0x1800F48A0: RtlDecompressFragment
0x1801660A0: LdrpModuleDatatableLock
0x18012D430: "Allocating a buffer to hold the " ??_C@_0EC@NBKEJDEG@Allocating?5a?5buffer?5to?5hold?5the?5@
0x1800A0480: ZwAddDriverEntry
0x18007CFD0: RtlDeleteHashTable
0x1800A2700: ZwSecureConnectPort
0x180095940: wcstolX
0x18012EBC8: "AVRF: resnapping %ws ... " ??_C@_0BL@CGOCPDPF@AVRF?3?5resnapping?5?$CFws?5?4?4?4?5?6?$AA@
0x180122C50: "\Registry\Machine\System\Current" ??_C@_1KO@ILBBOJJH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x180131BD8: "EAFModules" ??_C@_1BG@FCMBHPBF@?$AAE?$AAA?$AAF?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AAs?$AA?$AA@
0x1800E90A0: RtlUpdateClonedSRWLock
0x180084810: RtlDetectHeapLeaks
0x180070270: RtlQueryPackageClaims
0x180088CA0: RtlCompressWorkSpaceSizeLZNT1
0x180138210: "This means that the I/O device r" ??_C@_0EM@LNMNDAG@This?5means?5that?5the?5I?1O?5device?5r@
0x18003D280: LdrpPinModule
0x18010D700: RtlpHpSegMgrVaCtxFree
0x180043B90: RtlInitString
0x180068C00: RtlEnumerateEntryHashTable
0x18013A4C8: "RedirectedKey" ??_C@_1BM@GGIHPLEN@?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAe?$AAd?$AAK?$AAe?$AAy?$AA?$AA@
0x18009B600: "__cdecl output_s" _output_s
0x1800F2200: RtlSetUserFlagsHeap
0x18004C518: LdrpValidateEntrySection
0x1800FDCFC: RtlpStdLockAcquire
0x1800F8D08: RtlpGetCustomCultureDataFromFile
0x1800FE470: RtlpRtlpCtWaitForWnfQuiescentWorker
0x180131FB0: "Initialization stack trace. Use " ??_C@_0DM@CFEIILEE@Initialization?5stack?5trace?4?5Use?5@
0x18011D838: "_CorExeMain" ??_C@_0M@CJEEBJJ@_CorExeMain?$AA@
0x18004E1C8: RtlpWaitOnAddressWithTimeout
0x180138560: " *** Restarting wait on critsec " ??_C@_0EA@FDEEKDFG@?5?$CK?$CK?$CK?5Restarting?5wait?5on?5critsec?5@
0x1800E7380: RtlEqualLuid
0x1800D7890: RtlCreateProcessReflection
0x18012E188: "LdrpDoPostSnapWork" ??_C@_0BD@MKAMLHIL@LdrpDoPostSnapWork?$AA@
0x180020E14: RtlpHpSegWalk
0x180163E08: RtlpHypervisorSharedUserVa
0x18012C800: "ResIdCount less than 2." ??_C@_1DA@CGMLEGBJ@?$AAR?$AAe?$AAs?$AAI?$AAd?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?5?$AAl?$AAe?$AAs?$AAs?$AA?5?$AAt?$AAh?$AAa?$AAn?$AA?5?$AA2?$AA?4?$AA?$AA@
0x18011D190: szSlashDynamicDst
0x18013A338: "Process" ??_C@_1BA@NMDNJJOO@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x1801627A0: RtlpWaitOnAddressSpinCount
0x180166318: RtlpHpGCTimerInitialized
0x180087420: RtlpMergeSecurityAttributeInformation
0x180164029: NlsMbCodePageTag
0x1800EBCE0: RtlAppendAsciizToString
0x1800662A0: RtlLookupElementGenericTable
0x180088450: RtlInitializeCorrelationVector
0x18006F214: EtwpGenerateFileName
0x180164318: RtlpDllSearchPathWithOptions
0x18009F870: NtRemoveIoCompletion
0x18010059C: RtlpMuiRegGetInstalledLanguageInfoByIndex
0x1800775B0: RtlFlushHeaps
0x1800348C0: RtlLengthSidAsUnicodeString
0x1800A0BC0: ZwCreateEnlistment
0x18009EBE4: RtlpHpAcquireQueuedLockExclusive
0x18012FA80: "RtlCreateActivationContext" ??_C@_0BL@KNFPEMBH@RtlCreateActivationContext?$AA@
0x180083BD0: LdrQueryModuleInfoLocalLoaderUnlock32
0x18010BE20: RtlpInitializeLfhBitmapData
0x18009FE70: NtFsControlFile
0x18003FB08: TppSetupNextWait
0x1800D6510: LdrpIsSubstringFound
0x180132A80: "*** ASSERT FAILED: Input paramet" ??_C@_0HB@PAHCEONM@?$CK?$CK?$CK?5ASSERT?5FAILED?3?5Input?5paramet@
0x18006BE94: EtwpReferenceUmGuidEntry
0x1800A0940: NtCancelIoFileEx
0x18007EDD0: RtlCreateTagHeap
0x1800E7450: RtlIsUntrustedObject
0x1800997F4: "__cdecl filbuf_s" _filbuf_s
0x1800D2B6C: LdrpCheckAppDirType
0x18006232C: CountUTF8ToUnicode
0x1800A16E0: ZwIsUILanguageComitted
0x1801318D0: "SXS: RtlGetAssemblyStorageRoot()" ??_C@_0ID@MAGGMDJA@SXS?3?5RtlGetAssemblyStorageRoot?$CI?$CJ@
0x1800A2640: NtRollbackRegistryTransaction
0x180075660: LdrInitializeThunk
0x1800D9CCC: RtlpDeCommitQueryDebugInfo
0x1800A2B40: ZwSetSecurityObject
0x18002748C: RtlpFreeTraverseNodes
0x1800D1180: LdrpCheckComponentOnDemandEtwEvent
0x1801377F8: "(!TrailingUCR)" ??_C@_0P@GLEGKAEG@?$CI?$CBTrailingUCR?$CJ?$AA@
0x180128820: Magic10000000
0x1800297D0: RtlFindClearBits
0x1800F8240: RtlGenerate8dot3Name
0x180022894: RtlpHpLargeAllocSizeInternal
0x180138290: "write to" ??_C@_08KNKBHFKG@write?5to?$AA@
0x18011C770: "MachinePreferredUILanguages" ??_C@_1DI@CNCPGFIN@?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAr?$AAe?$AAd?$AAU?$AAI?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
0x1800D0540: LdrQueryNextListEntry32
0x18009FE50: NtQueryTimer
0x1800CF948: LdrpEnclaveAddDependentModule
0x18010E590: EtwEnumerateProcessRegGuids
0x180102200: "__cdecl RtlpMuiRegInitPartialLanguage" _RtlpMuiRegInitPartialLanguage
0x1800A2600: NtRollbackComplete
0x18003BAA0: RtlCanonicalizeDomainName
0x180069F50: EtwpStopLoggerInstance
0x18009F2D8: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x180165230: LdrpLoadCompleteEvent
0x18008463C: SbCleanupTrace
0x18008F580: RtlInitializeNtUserPfn
0x18007EE90: RtlpInitParameterBlock
0x180034B28: RtlpMuiRegTryToAppendLanguageToMuiszFromLangList
0x180139D30: "Pseudo Tag %04x size incorrect (" ??_C@_0DA@JDDKCBFL@Pseudo?5Tag?5?$CF04x?5size?5incorrect?5?$CI@
0x1800A0A40: ZwCompactKeys
0x1800A0AA0: NtCompareTokens
0x180001B30: RtlRealPredecessor
0x180026EEC: RtlpInsertStringAtom
0x1800243A8: RtlpCheckRelativeDrive
0x180166130: LdrpRetryingModuleIndex
0x180087FC0: TppTimerpStopCallbackGeneration
0x18007B3F0: TpReleaseAlpcCompletion
0x180166260: LdrpPathLock
0x1800A1880: NtManageHotPatch
0x180027C5C: RtlpGetMUIRedirectedFilePath
0x18009FA30: ZwQueryValueKey
0x180130820: "RtlpQueryAssemblyInformationActi" ??_C@_0EB@FHMHAEKL@RtlpQueryAssemblyInformationActi@
0x1800A0FA0: ZwCreateUserProcess
0x18009AC10: strcat_s
0x1800A0D80: NtCreatePort
0x1800A2480: NtRemoveProcessDebug
0x180165338: LdrpInitCompleteEvent
0x1800DD064: RtlpPageHeapStop
0x18011F368: "__cdecl _real@3fd5555555555555" __real@3fd5555555555555
0x180165FF5: g_ShimsLoading
0x180088DB0: RtlSecondsSince1970ToTime
0x1800A2CA0: NtSetVolumeInformationFile
0x18012B1B8: RtlIsSystemAceType
0x18010C0E8: RtlpHeapExceptionFilter
0x1800347B0: RtlFormatCurrentUserKeyPath
0x180166448: RtlpDiskSpeedInit
0x18008E8D0: RtlSetProcessIsCritical
0x18005C450: RtlCapabilityCheck
0x1800A1180: ZwDeleteWnfStateData
0x18007359C: SbpFindMatchingContext
0x1800A0580: NtAllocateUserPhysicalPages
0x18010AE94: RtlCompressBufferXpressHuffMax
0x1800A1400: ZwFlushWriteBuffer
0x1800F9024: RtlpMatchUILanguage
0x18008F170: RtlpSysVolTakeOwnership
0x180002A50: WinSqmCheckEscalationSetDWORD64
0x18007CA80: RtlSetAllBits
0x180122B48: "SafeDllSearchMode" ??_C@_1CE@PJKAPEDB@?$AAS?$AAa?$AAf?$AAe?$AAD?$AAl?$AAl?$AAS?$AAe?$AAa?$AAr?$AAc?$AAh?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x180138708: "MachineUILock" ??_C@_1BM@EEIHICMO@?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AAU?$AAI?$AAL?$AAo?$AAc?$AAk?$AA?$AA@
0x180003440: RtlWow64GetCpuAreaInfo
0x1800271A0: RtlpAssemblyStorageMapResolutionDefaultCallback
0x1800A22C0: NtQueryWnfStateData
0x18000C8D0: NtdllpAllocateStringRoutine
0x1800E4568: RtlpIsEmptyImageFileOptionsKey
0x1800A2380: NtRecoverEnlistment
0x1800781B0: RtlTryAcquireSRWLockShared
0x18004FB2C: TppTimerpValidateTimer
0x18009FBF0: NtQueryInformationThread
0x18011CB80: "VS_VERSION_INFO" ??_C@_1CA@FOECMPGO@?$AAV?$AAS?$AA_?$AAV?$AAE?$AAR?$AAS?$AAI?$AAO?$AAN?$AA_?$AAI?$AAN?$AAF?$AAO?$AA?$AA@
0x18007FD5C: LdrpCompareServiceChecksum
0x180122AE0: "ProgramW6432" ??_C@_1BK@IEDNHAFM@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAW?$AA6?$AA4?$AA3?$AA2?$AA?$AA@
0x18007B000: RtlValidateUnicodeString
0x1800740B0: RtlQueryPerformanceFrequency
0x18004FD74: TpPostTask
0x1800084F4: RtlpSanitizeContext
0x180021350: RtlpHpLargeWalkHeap
0x1800E01E8: RtlpAllocateDirPrefixBlock
0x1800882B0: TppWorkCancelPendingCallbacks
0x1800885A0: RtlSetSystemBootStatus
0x18002757C: RtlpCreateTraverseNodes
0x18005C220: RtlGetAppContainerNamedObjectPath
0x18009F4D0: NtdllComboListBoxProc_W
0x1800A21A0: NtQuerySecurityAttributesToken
0x1800A4500: RtlpLoadPrimaryDbgRegWrap
0x1800EDCF8: RtlpRecordBootStatusData
0x1800CE1B4: LdrpAppxGetRemediationRegistryKey
0x1800A1940: NtModifyDriverEntry
0x1800A3020: NtUpdateWnfStateData
0x18007FDD0: RtlSetThreadPlaceholderCompatibilityMode
0x1800550D0: RtlpHpVsChunkFree
0x18011FCE0: "__cdecl _lconv_static_decimal" __lconv_static_decimal
0x1800F4D70: RtlpCopyLegacyContextArm
0x1800A0190: NtResumeThread
0x180043240: RtlFreeUnicodeString
0x1800901A0: atol
0x180137C08: "::ffff:0:%u.%u.%u.%u" ??_C@_1CK@LFMCBOGA@?$AA?3?$AA?3?$AAf?$AAf?$AAf?$AAf?$AA?3?$AA0?$AA?3?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?$AA@
0x1800A2680: ZwRollforwardTransactionManager
0x18012DBC8: "DisableHeapLookaside" ??_C@_1CK@CEGAPBHI@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAH?$AAe?$AAa?$AAp?$AAL?$AAo?$AAo?$AAk?$AAa?$AAs?$AAi?$AAd?$AAe?$AA?$AA@
0x1800A2260: ZwQuerySystemEnvironmentValueEx
0x180034D04: GetNameFromLangListNode
0x180090C88: "__cdecl _ascii_strnicmp" __ascii_strnicmp
0x180100468: RtlpMuiRegGetFallbackLanguagesAsMultiSZ
0x18008ADEC: RXactpOpenTargetKey
0x1800E0BE0: RtlpQueryAssemblyInformationActivationContextDetailedInformation
0x1801104E0: TppETWCallbackCancel
0x18009F4C0: NtdllComboListBoxProc_A
0x1800A01B0: ZwTerminateThread
0x180139880: "Just reallocated block at %p to " ??_C@_0CL@IGFDCMGE@Just?5reallocated?5block?5at?5?$CFp?5to?5@
0x18008FB50: LdrpICallHandler
0x1800F3308: RtlpHeapPerformCrossProcessQuery
0x1800A2A80: NtSetIoCompletion
0x1800E7050: PfxInitialize
0x1801135C8: PsspCaptureThreadInformation
0x18011C1D0: "ApiPort" ??_C@_1BA@NOKOJJED@?$AAA?$AAp?$AAi?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
0x18011D168: "TimeZoneInformation" ??_C@_1CI@GMLPCOJB@?$AAT?$AAi?$AAm?$AAe?$AAZ?$AAo?$AAn?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1801188E0: LdrpMscoreeDllName
0x180065050: TpAllocIoCompletion
0x1801642A8: LoadAsDataTableBlockCount
0x180113C94: PsspDuplicateSnapshotLocalToRemote
0x18009BF74: "__cdecl soutput_s" _soutput_s
0x1800A0F80: ZwCreateTransactionManager
0x180088DE0: RtlMapSecurityErrorToNtStatus
0x1800A1260: ZwEnumerateDriverEntries
0x1800FB9C8: NormBuffer__AppendAndSortDecomposed
0x18012E280: "LdrpInitializeNode" ??_C@_0BD@PNOCAGJO@LdrpInitializeNode?$AA@
0x1800A2160: NtQueryPortInformationProcess
0x180076320: RtlUnlockMemoryBlockLookaside
0x18009F370: "__cdecl frnd" _frnd
0x180087EC0: "__cdecl errno" _errno
0x180035B90: RtlConvertSidToUnicodeString
0x18011CA60: RtlpCheckTokenMembershipGenericMapping
0x18012ED50: "AVRF: provider %ws passed an inv" ??_C@_0DH@BHMCPING@AVRF?3?5provider?5?$CFws?5passed?5an?5inv@
0x180131D20: "LdrpResSearchResourceHandle Ente" ??_C@_1EE@MNODNGBA@?$AAL?$AAd?$AAr?$AAp?$AAR?$AAe?$AAs?$AAS?$AAe?$AAa?$AAr?$AAc?$AAh?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AA?5?$AAE?$AAn?$AAt?$AAe@
0x18009F3C0: NtdllTitleWndProc_A
0x1800D7760: RtlReadOutOfProcessMemoryStream
0x180095A2C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800E5F40: RtlCustomCPToUnicodeN
0x180034700: LdrGetDllFullName
0x180051DF0: RtlQueryInformationActivationContext
0x180128130: "Notebook" ??_C@_1BC@GIBDEHH@?$AAN?$AAo?$AAt?$AAe?$AAb?$AAo?$AAo?$AAk?$AA?$AA@
0x18006A6D0: EtwpFlushActiveBuffers
0x1800626D0: EtwEventEnabled
0x180081070: RtlpModuleEnumeratorCallback
0x1800A0DE0: ZwCreateProfile
0x1801326C0: RtlpBootStatusFields
0x18011ED88: "__cdecl _real@3f70000000000000" __real@3f70000000000000
0x18011DE40: "__cdecl _real@bff0000000000000" __real@bff0000000000000
0x18011DDF8: "__cdecl _real@3fe9c1b08fda1eec" __real@3fe9c1b08fda1eec
0x18011DE18: "__cdecl _real@3ff8000000000000" __real@3ff8000000000000
0x1800A2D80: ZwStopProfile
0x18011DE38: "__cdecl _real@43d0dc0000000000" __real@43d0dc0000000000
0x180118460: TppTimerpCleanupGroupMemberVFuncs
0x180130030: "RtlFindActivationContextSectionS" ??_C@_0GI@PNODLECP@RtlFindActivationContextSectionS@
0x1800E72C0: RtlCopySidAndAttributesArray
0x1800CE3E0: RtlAppxIsFileOwnedByTrustedInstaller
0x1800A32E0: KiUserApcHandler
0x180048FB4: LdrpCallTlsInitializers
0x18000C800: RtlRunOnceBeginInitialize
0x1800918E0: abs
0x1800767A0: RtlLockModuleSection
0x180078C80: RtlpCompareActivationContextGuidSectionEntryByGuid
0x1800A1220: NtEnableLastKnownGood
0x180001DA8: RtlpHpLfhOwnerCleanup
0x1800906C0: "__cdecl memicmp" _memicmp
0x18009F3D0: NtdllTitleWndProc_W
0x180070FC8: RtlpAllocateActivationContextStackFrame
0x18009FAD0: NtSetInformationProcess
0x1801312C0: "SXS: Assembly directory name sto" ??_C@_0HC@NOEIDEDC@SXS?3?5Assembly?5directory?5name?5sto@
0x18009B0E0: vswprintf_s
0x1800E267C: LdrpMUIEtwOutput
0x1800D8DA0: RtlQuerySecurityObject
0x1800E9770: RtlAddAccessFilterAce
0x180123038: "DOCUMENTSLIBRARY" ??_C@_1CC@NKOFCMFO@?$AAD?$AAO?$AAC?$AAU?$AAM?$AAE?$AAN?$AAT?$AAS?$AAL?$AAI?$AAB?$AAR?$AAA?$AAR?$AAY?$AA?$AA@
0x18008FF40: isalnum
0x1800A0010: ZwYieldExecution
0x1800918F0: atan
0x18010EBB4: EtwpBufferingModeFlush
0x180139640: "May not specify Lock parameter w" ??_C@_0DH@GBJBLKHF@May?5not?5specify?5Lock?5parameter?5w@
0x18015FF34: "__cdecl _mb_cur_max" __mb_cur_max
0x180052EB0: TppEnqueueTimer
0x1800A1CE0: ZwPrePrepareComplete
0x1801652D0: LdrpEnforceIntegrityContinuity
0x18010825C: RtlDebugSetUserFlagsHeap
0x1801310E0: "SXS: %s() bad parameters SXS: M" ??_C@_0BBA@EGKDJPEG@SXS?3?5?$CFs?$CI?$CJ?5bad?5parameters?6SXS?3?5?5M@
0x18009F9F0: NtQueryDefaultLocale
0x18011D4E0: "%u.%u.%u.%u" ??_C@_1BI@IEJCOLMP@?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?$AA@
0x1800A09E0: ZwCommitEnlistment
0x18007DE90: RtlIpv4StringToAddressExA
0x18002DB10: RtlpMuiRegFreeRegistryInfo
0x18011D1C8: szLastEntry
0x180120FC0: RtlpBucketSizeIndexReuseThreshold
0x1800EBDC0: RtlUpperString
0x1800757F0: RtlClearAllBits
0x180026EC0: RtlIsValidHandle
0x1800A0BE0: ZwCreateEventPair
0x18011CA48: "S-1-" ??_C@_19LBFLHOKO@?$AAS?$AA?9?$AA1?$AA?9?$AA?$AA@
0x1800A1B20: ZwOpenObjectAuditAlarm
0x180086F04: LdrpProtectAndRelocateImage
0x18004A860: RtlFindActivationContextSectionString
0x180091B50: atan2
0x1800761B0: LZNT1FindMatchStandard
0x180039980: RtlpGenerateInheritedAce
0x180043054: RtlDoesFileExists_UstrEx
0x1800838D0: RtlDestroyProcessParameters
0x1800998A8: "__cdecl flswbuf" _flswbuf
0x1800A2500: NtReplacePartitionUnit
0x18010CD0C: RtlpHpLargeAllocationDestroy
0x1800A1D20: ZwPrepareComplete
0x1800A30A0: NtWaitForKeyedEvent
0x1800F7FC0: RtlGetNonVolatileToken
0x18007C880: RtlCreateMemoryZone
0x1800FF43C: RtlpHasMachineUILock
0x18007B0CC: LdrpComputeLazyDllPath
0x1800D29D0: "__cdecl TlgDefineProvider_annotation__TlgRtlpCapChkTraceLoggingProviderProv" _TlgDefineProvider_annotation__TlgRtlpCapChkTraceLoggingProviderProv
0x1800A2840: ZwSetDefaultUILanguage
0x18003C150: RtlIpv4StringToAddressExW
0x180163ABC: ConditionVariableSpinCount
0x1800CEC30: DbgUiConvertStateChangeStructureWorker
0x18011D720: "SE_LdrEntryRemoved" ??_C@_0BD@KBMMGEKH@SE_LdrEntryRemoved?$AA@
0x1800573C8: ValidatePointer
0x180022068: RtlCSparseBitmapBitmaskRead
0x18006E5FC: RtlpFindRegTziForCurrentYear
0x1800F6A30: RtlpCallSecureMemoryCallbacks
0x18007FB20: LdrLoadAlternateResourceModule
0x180128830: NormalYearDaysPrecedingMonth
0x18009FB90: ZwRequestWaitReplyPort
0x180118D70: RtlDecompressBufferProcs
0x180018400: RtlpExtendHeap
0x18007F5C4: LdrpInitializeShimDllDependencies
0x180115C4C: RtlpStackDbEntryCreate
0x1800A22E0: NtQueryWnfStateNameInformation
0x1800DDF10: RtlReportExceptionHelper
0x18011DE30: "__stdcall _real" __real@4000000000000000
0x18004673C: LdrpInitializeThread
0x180120968: "__cdecl _imp_NtDeviceIoControlFile" __imp_NtDeviceIoControlFile
0x18002FA7C: RtlpIsALicensedRegularLanguage
0x180138908: "Kernel-MUI-Language-SKU" ??_C@_1DA@HOOFFHMM@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?9?$AAM?$AAU?$AAI?$AA?9?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AA?9?$AAS?$AAK?$AAU?$AA?$AA@
0x1800CE5C0: RtlEnableThreadProfiling
0x18007FFE0: RtlpNtOpenKey
0x180090870: "__cdecl splitpath" _splitpath
0x180127EB0: "Windows.Universal" ??_C@_1CE@DLJEHEL@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAU?$AAn?$AAi?$AAv?$AAe?$AAr?$AAs?$AAa?$AAl?$AA?$AA@
0x1800A4740: RtlpExceptionHandler
0x180018D0C: RtlpFindUCREntry
0x180024EEC: RtlpInitEnvironmentBlock
0x180105F9C: RtlpLogHeapSubSegmentInitialize
0x1800A1200: NtDrawText
0x18011F2E0: "__cdecl _real@03d0000000000000" __real@03d0000000000000
0x18003DD00: RtlDosPathNameToNtPathName_U_WithStatus
0x1800854C0: RtlGetExePath
0x1800314DC: LdrpMergeLangFallbackLists
0x1800A2B80: ZwSetSystemEnvironmentValueEx
0x180044160: RtlCompareUnicodeString
0x1800684BC: RtlUnicodeStringCbCatStringN
0x18012BF48: "(null)" ??_C@_1O@CEDCILHN@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA@
0x18002FCC0: LdrAccessResource
0x180165FE8: LdrpReleaseActCtxW
0x180139C70: "Number of free blocks in arena (" ??_C@_0FE@NGCGCHAC@Number?5of?5free?5blocks?5in?5arena?5?$CI@
0x18011FC88: "_cabs" ??_C@_05KBKMEMPO@_cabs?$AA@
0x1800A2040: ZwQueryInformationWorkerFactory
0x180132CE8: "GlobalTags" ??_C@_1BG@FHGJKDOD@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAT?$AAa?$AAg?$AAs?$AA?$AA@
0x180083218: Normalization__Normalize
0x180162770: "struct _SWITCHBRANCH_CACHED_MODULE_TABLE g_SbCachedModuleTable_RTL" ?g_SbCachedModuleTable_RTL@@3U_SWITCHBRANCH_CACHED_MODULE_TABLE@@A
0x1800A02E0: ZwCancelIoFile
0x180164340: LdrpOriginalAppPackagesPath
0x18009F7D0: NtWaitForSingleObject
0x180070A40: TppWorkCallbackEpilog
0x18008A31C: RtlpCopyXStateChunk
0x180166460: MuiCacheSWRLock
0x180118200: SbSupportedOsList
0x180071D80: RtlDeleteBoundaryDescriptor
0x180074B48: RtlpInitializeSecondLevelDir
0x18011FD00: "__cdecl _lookuptable_s" __lookuptable_s
0x1800A0480: NtAddDriverEntry
0x1800A2700: NtSecureConnectPort
0x1800CDCD0: LdrAppxHandleIntegrityFailure
0x18011EE30: "__cdecl _real@3dd0b4611a600000" __real@3dd0b4611a600000
0x18012E7B0: "Lazy DLL search path computation" ??_C@_0DP@PDJEDKDO@Lazy?5DLL?5search?5path?5computation@
0x18004B698: RtlpFindGuidInSection
0x1800A1FA0: NtQueryInformationJobObject
0x18004E538: RtlpGetCachedPath
0x18001F6D4: RtlpHpTaggableHeap
0x18003C004: RtlpValidateAsciiStd3AndLength
0x1800743E0: RtlpWow64GetContextOnAmd64
0x1800F7F10: RtlFlushNonVolatileMemoryRanges
0x18005E090: A_SHAUpdate
0x180095570: wcsnlen
0x180036430: RtlCopyUnicodeString
0x18007DA20: RtlIpv6StringToAddressExA
0x18008E0F0: RtlWriteRegistryValue
0x180082860: TpCallbackUnloadDllOnCompletion
0x180002A50: CsrIdentifyAlertableThread
0x180087DA8: RtlpMuiRegFreeLanguageConfigList
0x180068398: RtlpHpLfhSubsegmentIncBlockCounts
0x18003C4D0: RtlIpv6StringToAddressExW
0x180051B90: RtlpWakeSingle
0x180002A50: WinSqmIsOptedIn
0x180138C88: "QueryDebugInformation request" ??_C@_1DM@IGILJILI@?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAD?$AAe?$AAb?$AAu?$AAg?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAr?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AA?$AA@
0x1800DF460: WerReportSQMEvent
0x18011F380: "__cdecl _real@3fe5c28f5c28f5c3" __real@3fe5c28f5c28f5c3
0x180058904: RtlSparseArrayElementAllocate
0x1801380C8: " *** Inpage error in %ws:%s " ??_C@_0CA@MDOGOMPE@?6?6?5?$CK?$CK?$CK?5Inpage?5error?5in?5?$CFws?3?$CFs?6?6?$AA@
0x180002A50: RtlInitializeAtomPackage
0x1800DE6F0: WerReportExceptionWorker
0x18016540C: NtdllBaseTag
0x18009EB60: RtlRaiseStatus
0x180165B60: RtlpEnvironLookupTable
0x18007DAF0: RtlIpv6StringToAddressA
0x180132D38: " " ??_C@_01EEMJAFIK@?6?$AA@
0x18011C670: "RtlpResUltimateFallbackInfo Exit" ??_C@_1EC@PPAOAPLC@?$AAR?$AAt?$AAl?$AAp?$AAR?$AAe?$AAs?$AAU?$AAl?$AAt?$AAi?$AAm?$AAa?$AAt?$AAe?$AAF?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AAI?$AAn?$AAf?$AAo?$AA?5?$AAE?$AAx?$AAi?$AAt@
0x18009F870: ZwRemoveIoCompletion
0x180025CF0: RtlMultiByteToUnicodeN
0x18008EAA0: EtwEventWriteStartScenario
0x18003AA8C: RtlpCombineAcls
0x180081350: TpReleaseJobNotification
0x18009FE70: ZwFsControlFile
0x180026750: RtlQueryAtomInAtomTable
0x18011DA1C: ":" ??_C@_01JLIPDDHJ@?3?$AA@
0x18012E540: "LdrpHandleTlsData" ??_C@_0BC@CMBIMFCN@LdrpHandleTlsData?$AA@
0x180083FB0: LdrFindResourceEx_U
0x18011DA40: "System Volume Information" ??_C@_1DE@LIBHJBEH@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?5?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18007BEA0: RtlAcquirePebLock
0x1800A0BC0: NtCreateEnlistment
0x18015F600: NormalizationListHead
0x1800E09A8: RtlpMoveActCtxToFreeList
0x180067CA0: RtlReleaseResource
0x1800FD480: RtlLogStackBackTrace
0x180132298: "SysARM32" ??_C@_1BC@OCMNFAO@?$AAS?$AAy?$AAs?$AAA?$AAR?$AAM?$AA3?$AA2?$AA?$AA@
0x180088FA0: PssNtQuerySnapshot
0x18002061C: RtlpHpTagContextFindFreeTag
0x180076B94: TppCleanupGroupRemoveMember
0x180132CA8: "Unable to release memory at %p f" ??_C@_0DN@IPLNIIDL@Unable?5to?5release?5memory?5at?5?$CFp?5f@
0x18003C6E0: RtlIpv6StringToAddressW
0x1800EAE80: RtlpValidAttribute
0x18004D604: EtwpUpdateEnableInfoAndCallback
0x18012C1B0: "minkernel\ntdll\ldrapi.c" ??_C@_0BJ@IBPGLFND@minkernel?2ntdll?2ldrapi?4c?$AA@
0x18011C390: "LdrpResGetResourceDirectory Exit" ??_C@_1EC@EEAGLMFE@?$AAL?$AAd?$AAr?$AAp?$AAR?$AAe?$AAs?$AAG?$AAe?$AAt?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?5?$AAE?$AAx?$AAi?$AAt@
0x180131960: "SXS: %s() bad parameters Assembl" ??_C@_0FP@HCNMCLFE@SXS?3?5?$CFs?$CI?$CJ?5bad?5parameters?5Assembl@
0x180097784: "__cdecl handle_error" _handle_error
0x1800E14F0: ImportTablepHashCanonicalLists
0x180131490: "SXS: Unable to resolve storage r" ??_C@_0EN@LOBAANOH@SXS?3?5Unable?5to?5resolve?5storage?5r@
0x180058990: RtlpHpSegSegmentAllocate
0x180162740: SbDynamicContextDllCount
0x180115EA4: RtlpStackDbSegmentFindOrCreate
0x18012DE90: "Initializing the application ver" ??_C@_0EK@PGMPGCEN@Initializing?5the?5application?5ver@
0x18003EF78: RtlpVerCompare
0x1800667D0: RtlRealSuccessor
0x18007E894: RtlpWnfRegisterTpNotification
0x1800A0A40: NtCompactKeys
0x1800A0AA0: ZwCompareTokens
0x1800E1EE0: LdrEnumResources
0x1800A1880: ZwManageHotPatch
0x1800EA0D0: RtlSetInformationAcl
0x180041B20: LdrpDynamicShimModule
0x18002E328: CloseGlobalizationUserSettingsKey
0x180132D28: ", passed to %s" ??_C@_0P@MHFKLIEN@?0?5passed?5to?5?$CFs?$AA@
0x180165B20: CsrPortMemoryRemoteDelta
0x1800A53A0: "__cdecl setjmp" _setjmp
0x1800A0D80: ZwCreatePort
0x1800A2480: ZwRemoveProcessDebug
0x180023828: RtlpDecRefWnfNameSubscription
0x1800D0350: LdrIsModuleSxsRedirected
0x1800FD8E0: RtlpInitializeStackTraceDatabase
0x180138728: "DefaultFallback" ??_C@_1CA@EOGMNDBN@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAF?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x1801101F0: TpCallbackSendPendingAlpcMessage
0x1800985F0: "__cdecl decomp" _decomp
0x18009116C: "__cdecl vsnwprintf_l" _vsnwprintf_l
0x18009FA30: NtQueryValueKey
0x18001A8B8: RtlpMoveHeapBetweenLists
0x1800ED030: RtlDeleteBarrier
0x1800A0FA0: NtCreateUserProcess
0x18001AFF4: RtlpInitializeHeapSegment
0x1800DBC38: AVrfpFindClosestThunkDuplicate
0x180083BD0: WinSqmAddToStreamEx
0x1800873B0: TpWaitForIoCompletion
0x180139334: "Flags" ??_C@_05BOOEKJH@Flags?$AA@
0x180104A20: RtlpHpStackTraceHeapDisable
0x1800FF854: RtlpMuiRegAddLanguageByName
0x18015F4F8: LdrpLoaderLock
0x1800A2640: ZwRollbackRegistryTransaction
0x18015FF30: "__cdecl matherr_flag" _matherr_flag
0x1800A2B40: NtSetSecurityObject
0x18009A180: "__cdecl vsnwprintf_s" _vsnwprintf_s
0x1800A0940: ZwCancelIoFileEx
0x180120020: "DLL search path passed in extern" ??_C@_0CL@KNADOGFE@DLL?5search?5path?5passed?5in?5extern@
0x1800A16E0: NtIsUILanguageComitted
0x18012CBA8: "Loading the shim DLL "%wZ" faile" ??_C@_0DH@JLKAGLIO@Loading?5the?5shim?5DLL?5?$CC?$CFwZ?$CC?5faile@
0x18015F978: LdrpLoaderLock_DEBUG
0x18009FE50: ZwQueryTimer
0x180073250: AlpcRegisterCompletionListWorkerThread
0x180130270: "SXS: %s() passed string section " ??_C@_0IC@FONCJIND@SXS?3?5?$CFs?$CI?$CJ?5passed?5string?5section?5@
0x180138770: "\Registry\Machine\System\Current" ??_C@_1KC@FOBDNNHK@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1800DEF70: ShipAssertMsgA
0x180018DA0: RtlpHpSegLfhVsFree
0x1800A2600: ZwRollbackComplete
0x180063870: LdrQueryNextListEntry
0x18009EBFC: RtlpHpEnvQueryProcessorCount
0x1801300A0: "RtlpFindUnicodeStringInSection: " ??_C@_0FJ@JIHIAEPP@RtlpFindUnicodeStringInSection?3?5@
0x180084170: RtlStartRXact
0x18012F580: "\Registry\MACHINE\System\Current" ??_C@_1KM@DAAALKCE@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x180130990: "SXS: %s() found activation conte" ??_C@_0EB@LBMIFKFE@SXS?3?5?$CFs?$CI?$CJ?5found?5activation?5conte@
0x180091870: "__cdecl wtoi" _wtoi
0x18007DF20: RtlIpv4StringToAddressA
0x1800918C0: "__cdecl wtol" _wtol
0x180165B00: CsrPortName
0x1800A22C0: ZwQueryWnfStateData
0x180163AD8: RtlpProcessMemoryMap
0x1800A2380: ZwRecoverEnlistment
0x180044510: LdrpGetImportDescriptorForSnap
0x18001D260: RtlpActivateLowFragmentationHeap
0x1800FFE94: RtlpMuiRegGetFallbackInstalledLanguageInfoByLangId
0x18009FBF0: ZwQueryInformationThread
0x18010AA10: LZNT1FindMatchMaximum
0x180039750: RtlCreateAcl
0x1800E79B0: RtlSidIsHigherLevel
0x180138430: "The stack trace should show the " ??_C@_0GD@NFJCCKFC@The?5stack?5trace?5should?5show?5the?5@
0x1800F4AA0: RtlLocateExtendedFeature
0x1800843F0: RtlUpdateTimer
0x18009F3A0: NtdllScrollBarWndProc_A
0x180103950: RtlpHeapLogRangeDestroy
0x1800373E0: LdrpFindLoadedDllByHandle
0x1800D2318: LdrpLogVsmEnclaveLdrCreateEnclaveTelemetry
0x18012D688: "Initializing TLS slots failed wi" ??_C@_0DD@LANBOHJM@Initializing?5TLS?5slots?5failed?5wi@
0x180130AE0: "SXS: %s() - caller passed nonzer" ??_C@_0EJ@DLPKGGLO@SXS?3?5?$CFs?$CI?$CJ?5?9?5caller?5passed?5nonzer@
0x180058EE0: RtlDeleteFunctionTable
0x180132C88: "VirtualProtect Failed 0x%p %x " ??_C@_0BP@BNDLCAHI@VirtualProtect?5Failed?50x?$CFp?5?$CFx?6?$AA@
0x18007B050: RtlDetermineDosPathNameType_U
0x180002A50: WinSqmGetEscalationRuleStatus
0x180081220: RtlGetThreadErrorMode
0x1801226B0: "\Registry\MACHINE\System\Current" ??_C@_1IG@HDHPCFON@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x18002E3D0: RtlGetSystemPreferredUILanguages
0x18012E808: "DLL search path computed: %ws " ??_C@_0BP@MPACGAKH@DLL?5search?5path?5computed?3?5?$CFws?6?$AA@
0x1800A1180: NtDeleteWnfStateData
0x1800325D0: LdrLoadAlternateResourceModuleEx
0x180131EF0: "Resource @ %p " ??_C@_0P@ODEPNAEE@Resource?5?$EA?5?$CFp?6?$AA@
0x180016174: RtlpCoalesceFreeBlocks
0x180090150: "__cdecl atoi64" _atoi64
0x180083BD0: WinSqmSetDWORD64
0x18003C2A0: RtlIpv4StringToAddressW
0x1800A2CA0: ZwSetVolumeInformationFile
0x18010E8C0: EtwpUseDescriptorType
0x1800A1400: NtFlushWriteBuffer
0x180003140: RtlGuardRestoreContext
0x1800082F0: RtlLocateExtendedFeature2
0x180119468: VrfcoreDllString
0x18009F3B0: NtdllScrollBarWndProc_W
0x1800302CC: LdrpInitMuiCrits
0x1800FE9A0: RtlTraceDatabaseUnlock
0x1800A0580: ZwAllocateUserPhysicalPages
0x1800F6D9C: RtlpInitializeMap
0x180105A6C: RtlpLogHeapLockEvent
0x1800701B0: RtlQueryPackageIdentity
0x180118870: Crc32Ctrl
0x180049984: LdrpBuildSystem32FileName
0x180052660: RtlReleaseActivationContext
0x18009CEB4: "__cdecl swoutput_s" _swoutput_s
0x1800F8C90: RtlpGetCustomCultureData
0x180095B80: "__cdecl _pctype_func" __pctype_func
0x180178278: LdrpMrdataSize
0x18011D2C0: LZNT1Formats
0x1800A2260: NtQuerySystemEnvironmentValueEx
0x180067330: RtlLockHeap
0x18007AD08: RtlpChangeQueryDebugBufferTarget
0x180037508: GetOverlayRootFolder
0x1800E34F0: RtlSetImageMitigationPolicy
0x180078E70: EtwWriteUMSecurityEvent
0x1800252F0: RtlSetEnvironmentVariable
0x1800E75E0: RtlReplaceSidInSd
0x180035FE0: RtlCopySid
0x1800FF320: RtlpGetWindowsPolicy
0x1800F5BF0: RtlCreateUmsCompletionList
0x18001A7D0: RtlpProtectHeap
0x1800A01B0: NtTerminateThread
0x18012E960: "ReportEventW" ??_C@_0N@OGEMJOHI@ReportEventW?$AA@
0x180035E94: RtlpAddKnownAce
0x1800A2A80: ZwSetIoCompletion
0x18003B2A8: RtlpGetDefaultTrustSubjectContext
0x1801303E0: "SXS: %s() passed string section " ??_C@_0GG@EFMLCHKL@SXS?3?5?$CFs?$CI?$CJ?5passed?5string?5section?5@
0x1801309D8: "RtlQueryInformationActivationCon" ??_C@_0CF@GAIJJEPM@RtlQueryInformationActivationCon@
0x18011D570: "DriverStore" ??_C@_1BI@HJLJMFFP@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAt?$AAo?$AAr?$AAe?$AA?$AA@
0x18011FDD8: "minkernel\ntdll\ldrmap.c" ??_C@_0BJ@IGKFNDIP@minkernel?2ntdll?2ldrmap?4c?$AA@
0x18013A328: "Section" ??_C@_1BA@LHDKDEEN@?$AAS?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18006C0D0: EtwpCreateEtwThread
0x1800722D0: RtlpTpWorkUnposted
0x180163B80: RtlpProcessHeapsListBuffer
0x18011DDB8: "__cdecl _real@3f9f2d2116f053f2" __real@3f9f2d2116f053f2
0x1800A21A0: ZwQuerySecurityAttributesToken
0x1801388C8: "Kernel-MUI-Language-Disallowed" ??_C@_1DO@NJNPPJHL@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?9?$AAM?$AAU?$AAI?$AA?9?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AA?9?$AAD?$AAi?$AAs?$AAa?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AA?$AA@
0x180060AB0: RtlUnicodeToUTF8N
0x1800D0EC4: LdrpGetDelayloadDescriptor
0x1800A0190: ZwResumeThread
0x180178260: g_pfnSE_DllLoaded
0x1800A3CC0: RcConsolidateFrames
0x18016346C: EtwpRegistrationSequence
0x180131700: "SXS: Assembly storage resolution" ??_C@_0HA@HINCHDLK@SXS?3?5Assembly?5storage?5resolution@
0x1800A2680: NtRollforwardTransactionManager
0x1801074C8: RtlDebugCreateTagHeap
0x180063510: RtlxUnicodeStringToOemSize
0x18012BE10: DeprecatedDll
0x180106554: RtlpRegisterStackTrace
0x18011CB64: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x18012C2D0: "LdrUnlockLoaderLock" ??_C@_0BE@IGAAOGAO@LdrUnlockLoaderLock?$AA@
0x1800D90B0: RtlCommitDebugInfo
0x1800A1940: ZwModifyDriverEntry
0x1800A3020: ZwUpdateWnfStateData
0x1800F6DE0: RtlpLeakCallbackRoutine
0x180088E50: WinSqmCommonDatapointSetDWORD
0x18004C760: LdrImageDirectoryEntryToLoadConfig
0x180132150: "First initialization stack trace" ??_C@_0EC@JDDELLDE@First?5initialization?5stack?5trace@
0x1800ED6C0: RtlGetSetBootStatusData
0x180041328: SbGetContextDetailsById
0x18011DDD0: "__cdecl _real@3fd12bcb0a9169f3" __real@3fd12bcb0a9169f3
0x180049CA0: LdrpFindLoadedDllByName
0x18005CB20: RtlIsMultiSessionSku
0x18007CC80: RtlFindExportedRoutineByName
0x180127310: crc32Map1_
0x18012DE60: "GlobalFlag" ??_C@_1BG@OGBFMEDC@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAF?$AAl?$AAa?$AAg?$AA?$AA@
0x1801642F8: AlternateResourceModules
0x18011D6C0: "ApphelpCheckModule" ??_C@_0BD@PCNHNCIN@ApphelpCheckModule?$AA@
0x180163480: RtlpHpHeapGlobals
0x1801284F8: LeapYearDaysPrecedingMonth
0x18012C838: "LdrCreateEnclave" ??_C@_0BB@DBFDAGDJ@LdrCreateEnclave?$AA@
0x18007A130: RtlRandomEx
0x180083BD0: TpDbgSetLogRoutine
0x180028234: RtlGuardGrantSuppressedCallAccess
0x18011CDD8: "RtlLockHeap" ??_C@_0M@DKBLBPDB@RtlLockHeap?$AA@
0x180088B30: RtlWow64EnableFsRedirection
0x180165B28: CsrPortHandle
0x18002F270: LdrLogNewDataDllLoad
0x180072D84: LdrpCondenseGraphRecurse
0x1800A26C0: NtSaveKeyEx
0x18003E600: TpReleaseTimer
0x18012FFB0: "SXS: %s() flags contains return_" ??_C@_0HB@FCFPPCJK@SXS?3?5?$CFs?$CI?$CJ?5flags?5contains?5return_@
0x18009FC10: NtOpenProcess
0x1800A0FE0: NtCreateWaitablePort
0x180122858: "Wow64PrepareForException" ??_C@_0BJ@MOOIFPKM@Wow64PrepareForException?$AA@
0x180139FC8: "%s_%d" ??_C@_1M@HGOFLOFI@?$AA?$CF?$AAs?$AA_?$AA?$CF?$AAd?$AA?$AA@
0x18009B3F0: wcsncpy_s
0x180118030: RtlpDosNULDevice
0x1800282CC: RtlpGetTargetRvaFlag
0x180164FE0: LdrpMaximumUserModeAddress
0x1800FF0E0: RtlpGetUserOrMachineUILanguage4NLS
0x1800CF0A0: LdrCallEnclave
0x18011CBEC: "ffff:" ??_C@_05PBFMPBMC@ffff?3?$AA@
0x180163820: RtlpHeapStopOn
0x18011D010: "ContainerCorrelationId" ??_C@_1CO@GMOLDGFF@?$AAC?$AAo?$AAn?$AAt?$AAa?$AAi?$AAn?$AAe?$AAr?$AAC?$AAo?$AAr?$AAr?$AAe?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?$AA@
0x1800A0AE0: NtCompressKey
0x1800F76A0: RtlFlushNonVolatileMemory
0x180137C38: ":%u.%u.%u.%u" ??_C@_1BK@ONFLBCMH@?$AA?3?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?$AA@
0x180106820: RtlpDebugPageHeapCreate
0x180083BD0: RtlInitOutOfProcessMemoryStream
0x180023CB0: RtlSubscribeWnfStateChangeNotification
0x180051B40: RtlpWaitCouldDeadlock
0x1801784D0: LdrpInvertedFunctionTable
0x180084590: RtlReleasePrivilege
0x180071C20: RtlInitializeSRWLock
0x1801668B8: RtlpHeapStackTraceLog
0x1800949B0: strspn
0x180059620: EtwTraceMessageVa
0x18011D6F8: "SE_LdrResolveDllName" ??_C@_0BF@OBMHMPNJ@SE_LdrResolveDllName?$AA@
0x18001D060: RtlQueryResourcePolicy
0x18011DE08: "__cdecl _real@3ff0000000000000" __real@3ff0000000000000
0x180120068: "SxS" ??_C@_03MMHHLHNA@SxS?$AA@
0x1800F4A30: RtlEndWeakEnumerationHashTable
0x180131220: "SXS: %s() bad parameters SXS: " ??_C@_0JM@GFEOADIB@SXS?3?5?$CFs?$CI?$CJ?5bad?5parameters?6SXS?3?5?5?5@
0x18008B050: RtlAddActionToRXact
0x1800A0EC0: NtCreateThreadEx
0x1801653A0: PebLdr
0x1800A0700: NtAlpcDeletePortSection
0x1800A04E0: ZwAlertResumeThread
0x18013A308: "Thread" ??_C@_1O@CDOGJPJJ@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AA?$AA@
0x1800A0050: ZwCreateEvent
0x1800A16A0: NtInitiatePowerAction
0x18011CA54: RtlpAppPackageAuthority
0x180166558: g_SxsFreeActivationContexts
0x180034550: RtlpCreateProcessRegistryInfo
0x18010156C: RtlpPopulateLanguageConfigList
0x180081E7C: TppPoolpFree
0x180024238: RtlpCreateSerializationGroup
0x18007D608: LdrpGetFileDriverStoreRoot
0x180162720: LdrpThunkTemplate
0x180034360: LdrpSetThreadPreferredLangList
0x180071690: RtlpProbeAssemblyStorageRootForAssembly
0x1800EE068: RtlpSetTimeZoneInformationWorker
0x18012E610: "Break repeatedly, break Once, Ig" ??_C@_0FG@HMDLMKJA@Break?5repeatedly?0?5break?5Once?0?5Ig@
0x1800CDEE0: LdrpAppxEtwGenericIntegrityFailure
0x18009FDD0: ZwDelayExecution
0x1800351F4: RtlpMuiRegGetInstalledLanguageIndexByLangId
0x1800FFD60: RtlpMuiRegCreateLanguages
0x1800F3D70: RtlpWalkHeap
0x180076410: RtlpUnregisterLockedMemoryZone
0x1800A2020: NtQueryInformationTransactionManager
0x18011D958: "ProductType" ??_C@_1BI@JPCMFPH@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180055360: RtlRbInsertNodeEx
0x18005A1F0: RtlFormatMessageEx
0x1800A1AC0: ZwOpenKeyTransactedEx
0x1800A0E40: NtCreateResourceManager
0x180131BF0: "MitigationOptions" ??_C@_1CE@NNPBFBMJ@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x1800A1DE0: NtPropagationFailed
0x1800229B0: RtlpHpHeapExtendContext
0x180086FE0: LdrpSetProtection
0x180025C68: RtlpAllocateEnvBlock
0x180076C40: RtlCompressBufferLZNT1
0x1800A2C80: NtSetUuidSeed
0x1800A0230: ZwWriteRequestData
0x1800EF270: RtlpCleanupRegistryKeys
0x180098D60: "__cdecl input_l" _input_l
0x18006E7D4: RtlpQueryRegistryValues
0x18012C270: "LdrpProtectedCopyMemory" ??_C@_0BI@NFANAMKK@LdrpProtectedCopyMemory?$AA@
0x1800D72C8: LdrpCompareRedirectedFunction
0x1800A2CC0: NtSetWnfProcessNotificationEvent
0x1800863E0: RtlpLoadMachineUIByPolicy
0x18007B230: TpAlpcUnregisterCompletionList
0x180095380: wcscpy
0x180088D70: AlpcUnregisterCompletionList
0x1801313A0: "SXS: Attempt to insert well know" ??_C@_0HN@OBHGAAOP@SXS?3?5Attempt?5to?5insert?5well?5know@
0x1800D0AC0: RtlGetUnloadEventTraceEx
0x18012BE30: CurDirDllLoadFailureError
0x18010D45C: RtlpHpSegMgrApplyLargePagePolicy
0x180165420: RtlpUnloadEventTrace
0x180166438: SbpContextLock
0x1800FD4B0: RtlReleaseStackTrace
0x180097648: "__cdecl controlfp" _controlfp
0x18003F2B0: RtlGetSuiteMask
0x18011EDD8: "__stdcall _real" __real@4010000000000000
0x18012C0A8: "BinaryHash" ??_C@_1BG@FNFFPEAB@?$AAB?$AAi?$AAn?$AAa?$AAr?$AAy?$AAH?$AAa?$AAs?$AAh?$AA?$AA@
0x18008A5C8: RtlpCompareKnownObjectAces
0x180138748: "AlternateCodePage" ??_C@_1CE@GCKIPCGP@?$AAA?$AAl?$AAt?$AAe?$AAr?$AAn?$AAa?$AAt?$AAe?$AAC?$AAo?$AAd?$AAe?$AAP?$AAa?$AAg?$AAe?$AA?$AA@
0x1800D29D0: "__cdecl TlgDefineProvider_annotation__TlgRtlpHpTraceLoggingProviderProv" _TlgDefineProvider_annotation__TlgRtlpHpTraceLoggingProviderProv
0x1800A4476: RtlpUmsExecuteYieldThreadEnd
0x180139788: "Just allocated block at %p for %" ??_C@_0CK@PEJIGGFF@Just?5allocated?5block?5at?5?$CFp?5for?5?$CF@
0x180084B40: EtwGetTraceEnableFlags
0x1800A2FE0: NtUnmapViewOfSectionEx
0x18010C7FC: RtlpHpLfhContextLockUnlock
0x18010CDFC: RtlpHpLargeAllocationProtect
0x1801664F0: TppPoolpGlobalPoolMaxThreads
0x1800E2BB0: RtlQueryImageMitigationPolicy
0x1800A15E0: ZwGetWriteWatch
0x180058B7C: RtlpCSparseBitmapUnlock
0x18000C714: RtlpHeapGenerateRandomValue32
0x1801231B0: "COM" ??_C@_17KKLPNNMB@?$AAC?$AAO?$AAM?$AA?$AA@
0x180024360: RtlUnsubscribeWnfNotificationWithCompletionCallback
0x18007D07C: RtlpUpdateHeapRates
0x180055820: RtlNumberOfSetBitsUlongPtr
0x18005653C: RtlpHpLfhOwnerMoveSubsegment
0x1801106C0: TppETWCallbackStart
0x18011EDA8: "__cdecl _real@3fc2492482bd6be1" __real@3fc2492482bd6be1
0x1800A2940: ZwSetInformationJobObject
0x18011CC0C: RtlpNtAuthority
0x18006B4E4: EtwpDisableTraceProviders
0x1800F1D20: RtlLockHeapManagerForCloning
0x1800FE2F8: RtlpCtContextFree
0x1800E493C: LdrpArmProcessRelocation
0x1800A33E0: KiUserCallbackDispatcherHandler
0x1800A26E0: ZwSaveMergedKeys
0x18005C9B0: RtlGetSystemTimePrecise
0x1800A05E0: ZwAlpcAcceptConnectPort
0x1800A20A0: NtQueryIoCompletion
0x1800A1620: ZwImpersonateThread
0x18009FA10: ZwQueryKey
0x18009FF50: NtOpenEvent
0x180166850: gLocaleDataRegKey
0x180062FC0: RtlTryAcquirePebLock
0x180089AF4: RtlpMUIEnumerateFolder
0x1800E2B18: RtlOpenModernAppOptionsKey
0x180066DF0: RtlReportSilentProcessExit
0x1801663B0: RtlpCapChkTelemetryRunOnceCtx
0x1801783B0: LdrpMrdataUnprotected
0x180089F80: RtlCopyContext
0x1800F4A80: RtlGetExtendedFeaturesMask
0x180083BD0: RtlpHpAppCompatDontChangePolicy
0x180088AE0: RtlpValidTrustSubjectContext
0x18012CBF8: "Initializing the shim DLL "%wZ" " ??_C@_0DM@PIJMEOHP@Initializing?5the?5shim?5DLL?5?$CC?$CFwZ?$CC?5@
0x1800D18C8: LdrpLogFatalLdrEtwEvent
0x18006F38C: EtwpFillProcessorStreamIndexMap
0x180102258: "__cdecl RtlpMuiRegLoadInstalled" _RtlpMuiRegLoadInstalled
0x180166120: EtwpFreeRegistrationList
0x18007B2C4: TppFastAlpcAdjustConcurrencyCount
0x180025C94: RtlpGetBlockSizeEx
0x180079CD0: RtlpApplyAclToObject
0x1800A0540: ZwAllocateLocallyUniqueId
0x180132198: "Critical section address." ??_C@_0BK@FJIJAMGM@Critical?5section?5address?4?$AA@
0x18005C100: RtlCreateServiceSid
0x18005FD10: RtlDecompressBufferXpressHuff
0x180095AF8: "__cdecl _except_validate_context_record" __except_validate_context_record
0x18011C2B8: "DisableStoreApps" ??_C@_1CC@FPPHGIPD@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAS?$AAt?$AAo?$AAr?$AAe?$AAA?$AAp?$AAp?$AAs?$AA?$AA@
0x180081BD0: RtlDecompressBufferEx
0x18001F384: RtlpHpMetadataHeapCtxGet
0x18010B508: RtlCompressBufferXpressLzMax
0x18012C1D0: "Nonpackaged process attempted to" ??_C@_0DH@GNHBPCPJ@Nonpackaged?5process?5attempted?5to@
0x18001A3B0: RtlpHeapListCompare
0x180068D80: RtlQueryUnbiasedInterruptTime
0x180030174: LdrpGetImageSize
0x180166070: TppPoolpGlobalPoolStackSize
0x1800A1F80: NtQueryInformationEnlistment
0x180023B84: RtlpWaitOnAddressWakeEntireList
0x18009F930: NtClose
0x18006A20C: EtwpFreeStreamIndexMap
0x180178238: g_pfnSE_InitializeEngine
0x18008A510: RtlLookupFirstMatchingElementGenericTableAvl
0x180127D28: "WIN://SYSAPPID" ??_C@_1BO@BOGEHPME@?$AAW?$AAI?$AAN?$AA?3?$AA?1?$AA?1?$AAS?$AAY?$AAS?$AAA?$AAP?$AAP?$AAI?$AAD?$AA?$AA@
0x180120EB0: RtlpBucketBlockSizes
0x1800D9A90: RtlStringCbPrintfW
0x1800FC6B0: Normalization__GuessCharCountBySize
0x1800F2830: RtlpAllocateTags
0x180089A9C: RtlpUnlockStack
0x180165400: LdrpHeap
0x18011F390: "__cdecl _real@bfe5c28f5c28f5c3" __real@bfe5c28f5c28f5c3
0x18008A820: RtlpGetNtProductTypeFromRegistry
0x18012DEE0: "LdrpInitializeExecutionOptions" ??_C@_0BP@PEIBIJMO@LdrpInitializeExecutionOptions?$AA@
0x180065684: TpAllocPoolInternal
0x180139320: "Entry" ??_C@_05HKHPEFOF@Entry?$AA@
0x1800A0340: ZwSetValueKey
0x1801320A0: "Invalid debug info address of th" ??_C@_0DE@MBNECAOK@Invalid?5debug?5info?5address?5of?5th@
0x1800955F0: wcsrchr
0x18012C2E8: LdrpComPlusVersionName
0x1800A20C0: ZwQueryLicenseValue
0x1801191E0: RtlpInterceptorRoutines
0x180040494: RtlpComputePath
0x1800876A0: LdrGetKnownDllSectionHandle
0x180002860: RtlIsGenericTableEmptyAvl
0x180139378: "SegmentCommit" ??_C@_0O@CPHFHPH@SegmentCommit?$AA@
0x180099C10: "__cdecl itow_s" _itow_s
0x1800A2660: ZwRollbackTransaction
0x18002ED10: LdrRemoveLoadAsDataTable
0x18001934C: RtlpHpSegPageRangeHandleCommit
0x18012DA00: "Per-DLL page heap is disabled si" ??_C@_0DP@BBOGONIA@Per?9DLL?5page?5heap?5is?5disabled?5si@
0x18002BED0: LdrResFallbackLangList
0x180040EDC: LdrpSendPostSnapNotifications
0x180138A58: "heap_failure_virtual_block_corru" ??_C@_0CG@MGBGEMDE@heap_failure_virtual_block_corru@
0x1800A0D40: NtCreatePagingFile
0x1801668C4: RtlpValidateHeapHdrsEnable
0x18011CCB0: "AppContainerNamedObjects" ??_C@_1DC@JGKFLOCH@?$AAA?$AAp?$AAp?$AAC?$AAo?$AAn?$AAt?$AAa?$AAi?$AAn?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AAd?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?$AA@
0x180118420: TppWaitpCleanupGroupMemberVFuncs
0x1800F6380: RtlSetUmsThreadInformation
0x1800A15A0: ZwGetNlsSectionPtr
0x1801283B0: "Toy" ??_C@_17KECEIPDD@?$AAT?$AAo?$AAy?$AA?$AA@
0x1801109F0: TppETWTimerCancelNtTimer
0x180081A20: LdrpLogRelativePathWithAlteredSearchError
0x1800735D8: SbAtomicCaptureContextGuid
0x18008DAF4: RtlpQueryPseudoEnvironmentVariable
0x1800457D0: LdrLoadDll
0x1801642A0: RtlpModernAppKey
0x180164EB0: Kernel32ThreadInitThunkFunction
0x18012C850: "LdrLoadEnclaveModule" ??_C@_0BF@PIAKJMOE@LdrLoadEnclaveModule?$AA@
0x180099910: "__cdecl itoa_s" _itoa_s
0x1800A1B00: NtOpenMutant
0x18002E7A4: TpReserveTaskPost
0x18000A350: RtlpReAllocateHeap
0x1800D7760: RtlSeekMemoryStream
0x18009F890: ZwReleaseSemaphore
0x180165410: LdrpIsSecureProcess
0x18003B740: RtlCheckTokenCapability
0x1801652C8: LdrpAppHeaders
0x180110C08: TppETWTimerSet
0x1800DA884: AVrfDllUnloadNotification
0x1800A1FE0: NtQueryInformationResourceManager
0x180165320: LdrpSuppressedExportOverrideListPtr
0x180166028: RtlpHpGCTimer
0x180118C50: Wow64EnvironmentThunkTable
0x18001F5B0: RtlpHpMetadataAlloc
0x180105890: RtlpLogHeapDecommit
0x1800A0AC0: NtCompleteConnectPort
0x18012DB70: "VerifierActivationFilter match %" ??_C@_0CJ@HBDOFKNO@VerifierActivationFilter?5match?5?$CF@
0x18011C000: "Software\Microsoft\LanguageOverl" ??_C@_1EG@EMFHK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AAO?$AAv?$AAe?$AAr?$AAl@
0x180165AA8: LdrpCurrentDllInitializer
0x180087860: RtlGetLongestNtPathLength
0x1800CE060: LdrpAppxGetBinaryNameKeyInformation
0x180110428: TppRaiseInvalidParameter
0x18007CC10: RtlTimeToSecondsSince1970
0x1801231B8: "PRN" ??_C@_17PFHGFFKC@?$AAP?$AAR?$AAN?$AA?$AA@
0x18009B2D0: wcsncat_s
0x180166048: RtlpHpHeapFeatures
0x180110970: TppETWPoolThreadMin
0x1800EC510: RtlFindSetBitsAndClear
0x1801645E0: AvrfpLoaderEntry
0x18010E9B0: EtwCreateTraceInstanceId
0x18009F750: ZwAccessCheck
0x18012EC18: "AVRF: verifier dll `%ws' " ??_C@_0BL@OJELNHIK@AVRF?3?5verifier?5dll?5?$GA?$CFws?8?5?6?$AA@
0x1800363F0: RtlValidSid
0x180128518: Magic10000
0x18008D320: RtlSelfRelativeToAbsoluteSD2
0x1800A2740: ZwSetBootEntryOrder
0x180090650: "__cdecl _ascii_memicmp" __ascii_memicmp
0x1800D26BC: LdrpMakeUnicodeStringFromPathElement
0x180066320: RtlSplay
0x1800A1120: ZwDeleteObjectAuditAlarm
0x18002F924: RtlpMUIRegPatchLicenseInfortmation
0x1800371D4: LdrpResolveDelayLoadDescriptor
0x180037BE4: LdrpDecrementNodeLoadCountLockHeld
0x1800D0AB0: RtlGetUnloadEventTrace
0x1800D6E70: LdrpAddRedirectedFunction
0x18009F9D0: ZwFindAtom
0x180028840: RtlFlsAlloc
0x180086120: RtlIsMultiUsersInSessionSku
0x1801662F8: RtlpFreezeTimeBias
0x180166428: TppPoolpGlobalPoolLock
0x180075C20: LdrGetDllHandleByMapping
0x1800A1D80: NtPrivilegeObjectAuditAlarm
0x180114D54: RtlpQueryDiskWriteConstraintPolicy
0x18011CD68: "\AppContainerNamedObjects" ??_C@_1DE@ECFPHGNH@?$AA?2?$AAA?$AAp?$AAp?$AAC?$AAo?$AAn?$AAt?$AAa?$AAi?$AAn?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AAd?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?$AA@
0x180137CA8: "%%%u!%s!" ??_C@_1BC@DNCBBMLH@?$AA?$CF?$AA?$CF?$AA?$CF?$AAu?$AA?$CB?$AA?$CF?$AAs?$AA?$CB?$AA?$AA@
0x180085574: LdrpInitializePerUserWindowsDirectory
0x18012CA20: "LDR:MRDATA: Process initializati" ??_C@_0DP@NBPADFJL@LDR?3MRDATA?3?5Process?5initializati@
0x180166534: AVrfpDebug
0x1800A0CE0: ZwCreateMailslotFile
0x180063830: RtlUnicodeToMultiByteSize
0x180131A20: "RtlpGetActivationContextDataStor" ??_C@_0DG@LIFCGBKB@RtlpGetActivationContextDataStor@
0x180110230: TpDbgDumpHeapUsage
0x1800EB660: RtlDowncaseUnicodeChar
0x18003B510: RtlGetParentLocaleName
0x18011EE68: "__cdecl _real@3efa01a019f4ec90" __real@3efa01a019f4ec90
0x18011CBA0: "%x" ??_C@_15LHNHECKK@?$AA?$CF?$AAx?$AA?$AA@
0x18011FF40: "Locating procedure "%s" by name " ??_C@_0CB@PDNCFBGN@Locating?5procedure?5?$CC?$CFs?$CC?5by?5name?6@
0x180137DB0: " Leaked Block 0x%p size 0x%p (st" ??_C@_0DC@EBFNFNIL@?5Leaked?5Block?50x?$CFp?5size?50x?$CFp?5?$CIst@
0x1800A1720: ZwLoadDriver
0x1800DF068: StringCchPrintfW
0x1800A2180: NtQueryQuotaInformationFile
0x1801783B8: LdrpVectorHandlerList
0x18011F330: "__cdecl _real@3fe62e42e0000000" __real@3fe62e42e0000000
0x180137CBC: "hc" ??_C@_15IDAJILIG@?$AAh?$AAc?$AA?$AA@
0x180023E48: RtlpAddWnfUserSubToNameSub
0x180163AB8: RtlpExceptionLogCount
0x1800A30E0: ZwWaitHighEventPair
0x18006F054: RtlpValidateKeyTrust
0x18005A078: LdrpRemoveAlternateModuleCacheItem
0x18012DBA0: "\VerifierCounter" ??_C@_1CC@JMFODPIB@?$AA?2?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x18006C140: RtlCreateUserThread
0x18004B888: LdrpHashUnicodeString
0x1800A0F20: NtCreateToken
0x1801385F0: "Compact" ??_C@_1BA@PIHDMPBJ@?$AAC?$AAo?$AAm?$AAp?$AAa?$AAc?$AAt?$AA?$AA@
0x1800A2DE0: NtSuspendThread
0x1800D1C70: LdrpLogIntegrityContinuityTelemetry
0x1800A2A40: NtSetInformationWorkerFactory
0x180099C40: "__cdecl ui64tow_s" _ui64tow_s
0x180063650: RtlUnicodeStringToAnsiString
0x180122020: "windows vista" ??_C@_1BM@PBAMHJKG@?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAv?$AAi?$AAs?$AAt?$AAa?$AA?$AA@
0x1800FEF14: RtlpWow64CtxToAmd64
0x180060224: XpressBuildHuffmanDecodingTable
0x1800454E4: LdrpPrepareImportAddressTableForSnap
0x18012E8F8: "SaferiIsDllAllowed" ??_C@_0BD@MBCLHCBP@SaferiIsDllAllowed?$AA@
0x180088310: RtlCopyString
0x1800CEAA0: RtlDosLongPathNameToNtPathName_U_WithStatus
0x18011EDB8: "__cdecl _real@3fc99999999643a3" __real@3fc99999999643a3
0x1800A2D00: ZwShutdownWorkerFactory
0x1800A23E0: NtRegisterProtocolAddressInformation
0x180120958: "__cdecl _imp_NtCreateFile" __imp_NtCreateFile
0x180058774: RtlpHpVaMgrRegionAllocate
0x1800FE354: RtlpCtContextInit
0x180045DDC: LdrpSnapKernelBaseExtensions
0x180139900: "About to free block at %p " ??_C@_0BL@GOLAHMJN@About?5to?5free?5block?5at?5?$CFp?6?$AA@
0x18003F360: LdrpMapDllSearchPath
0x180019E60: RtlpGetFreeBlockInsidePageBoundaries
0x18008F6A0: RtlResetNtUserPfn
0x1800A1A20: ZwOpenEventPair
0x18008A410: RtlLocateLegacyContext
0x1800FD24C: RtlpLogExceptionHandler
0x18004EF60: TpStartAsyncIoOperation
0x180178000: NtUserPfn
0x18004CFC0: RtlpGetStackTraceAddressEx
0x18007A000: RtlIsStateSeparationEnabled
0x180139AE8: "Heap block at %p is not last blo" ??_C@_0DE@GLPAAFC@Heap?5block?5at?5?$CFp?5is?5not?5last?5blo@
0x18006BB40: EtwpGetNextRegistration
0x1800A0680: ZwAlpcCreatePortSection
0x1800A31E0: RtlInterlockedPopEntrySList
0x1801781E0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800A24A0: NtRenameKey
0x18010F924: EtwpProviderArrivalCallback
0x180076450: RtlpUnregisterLockedMemoryBlockLookaside
0x18003FC30: RtlRegisterWait
0x1800FD4E0: RtlStdDeleteStackDatabase
0x1800A2B20: ZwSetQuotaInformationFile
0x1800F8030: RtlWriteNonVolatileMemory
0x1800A0C60: ZwCreateJobSet
0x180006990: RtlLookupFunctionEntry
0x18002375C: RtlpDecRefWnfUserSubscription
0x1800E896C: RtlpCreateServerAcl
0x1800CDC60: CsrGetProcessId
0x1801106C0: RtlpTpETWCallbackStart
0x180088210: RtlUpdateProcessRegistryInfo
0x1800A0110: NtCreateThread
0x1800A2E80: ZwThawRegistry
0x18011D460: "\Registry\Machine\Software\Micro" ??_C@_1HO@PKFMCJEM@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x1800A02C0: NtSetInformationObject
0x180022324: RtlpHpLargeAllocGetMetadata
0x1801398B0: "Just reallocated block at %p to " ??_C@_0DK@GIBJEKFG@Just?5reallocated?5block?5at?5?$CFp?5to?5@
0x1800E0910: RtlpEnsureLiveDeadListsInitialized
0x18010F61C: EtwpAddDebugInfoEvents
0x1800A16C0: ZwIsSystemResumeAutomatic
0x1800ED270: RtlLargeIntegerToUnicode
0x1800FEE90: RtlWow64PushCrossProcessWork
0x1800886C0: RtlSetSecurityDescriptorRMControl
0x18011D7A0: "SE_InitializeEngine" ??_C@_0BE@NKMLFNDG@SE_InitializeEngine?$AA@
0x180103BE0: RtlpHpPerHeapStackTraceCleanup
0x18005B1BC: EtwpRelogEvent
0x1800ED084: RtlPosixBarrier
0x1800A0400: ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
0x18001A384: RtlpGetHeapProtection
0x1801781F0: g_pfnSE_GetProcAddressForCaller
0x18011D590: "\Software\Policies\Microsoft\Win" ??_C@_1HG@MHMMLEKG@?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn@
0x180069A50: RtlAddAce
0x1801663C8: RtlpHpTagInitVar
0x1800FD7B0: RtlStdReleaseStackTrace
0x1800A1080: NtDeleteAtom
0x18012D4D8: "Allocating a data table entry fo" ??_C@_0DJ@HCAICHGM@Allocating?5a?5data?5table?5entry?5fo@
0x180131B18: " Name:" ??_C@_1O@IIBGMGAG@?$AA?5?$AAN?$AAa?$AAm?$AAe?$AA?3?$AA?$AA@
0x1800CF230: LdrInitializeEnclave
0x18008E050: RtlAddAuditAccessAce
0x18010A2F0: RtlpValidateLFHBlock
0x180073B40: RtlFreeThreadActivationContextStack
0x1800A21E0: NtQuerySecurityPolicy
0x1801079D0: RtlDebugGetUserInfoHeap
0x18009FE10: ZwQuerySystemInformation
0x1800DC448: AVrfpSnapDllImports
0x1800A0760: NtAlpcDeleteSecurityContext
0x180120168: "SbFilterProcedure_RTL" ??_C@_0BG@PMPAHNCC@SbFilterProcedure_RTL?$AA@
0x1800A27A0: ZwSetCachedSigningLevel2
0x180012A50: RtlpHpStackLoggingEnabled
0x1800A2060: ZwQueryInstallUILanguage
0x18007E5A0: RtlIsCurrentProcess
0x180090E90: "__cdecl vscprintf" _vscprintf
0x1800D0C80: LdrQueryOptionalDelayLoadedAPI
0x1800E1BB0: DbgPrompt
0x18006F798: TppBarrierAdjust
0x1800707C0: RtlStringFromGUID
0x180115BC8: RtlpStackDbEntryCleanup
0x1801184B0: TppSimplepCleanupGroupMemberVFuncs
0x1800A2140: ZwQueryOpenSubKeysEx
0x1800A25E0: NtRevertContainerImpersonation
0x18010400C: RtlpHpStackTraceAddStack
0x1800943F0: strlen
0x18012DA88: "%s!%s" ??_C@_1M@CPBFCNM@?$AA?$CF?$AAs?$AA?$CB?$AA?$CF?$AAs?$AA?$AA@
0x1801667F0: RtlpGlobalTagHeap
0x1801104A8: TppReportExceptionFilter
0x18008B9F0: RtlEqualComputerName
0x18011D288: RtlpTheEmptyActivationContextData
0x18012FBE0: "SXS: %s() Active frame is not th" ??_C@_0EE@LFILKAKA@SXS?3?5?$CFs?$CI?$CJ?5Active?5frame?5is?5not?5th@
0x180132790: "\Registry\Machine\System\Current" ??_C@_1KM@IAIDLDJP@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x180036E18: LdrpCfgProcessLoadConfig
0x1800FCC90: RtlKnownExceptionFilter
0x180088D20: WinSqmStartSessionForPartner
0x180132698: "OsBootstatPath" ??_C@_1BO@IJHFMHE@?$AAO?$AAs?$AAB?$AAo?$AAo?$AAt?$AAs?$AAt?$AAa?$AAt?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x18004BF54: LdrpLoadKnownDll
0x18004D8DC: EtwpCheckForPrivatePreEnable
0x180118060: RtlpDosCONDevice
0x180068920: RtlEnumerateGenericTableWithoutSplayingAvl
0x1800E1B00: AlpcGetCompletionListLastMessageInformation
0x18011EE48: "__cdecl _real@3e21eeb69037ab78" __real@3e21eeb69037ab78
0x18005F5E0: RtlCreateVirtualAccountSid
0x18001FBE0: RtlpLocalInfoAllocFromCache
0x1800D7810: LdrpLocateMrdata
0x180077090: RtlGetDeviceFamilyInfoEnum
0x180139490: "VirtualAllocdBlocks" ??_C@_0BE@OPMHDBHD@VirtualAllocdBlocks?$AA@
0x180009CC4: LdrControlFlowGuardEnforcedWithExportSuppression
0x180110EF0: RtlSetTimer
0x18008BDB0: RtlGetLastWin32Error
0x18008FA90: RtlpEnclaveCallDispatchFilter
0x180002A50: MatchAll
0x18009F8B0: NtReplyWaitReceivePort
0x1800E5BC0: LdrpResValidateFilePath
0x1800FC4A4: Normalization__GetLastChar
0x18011CDC8: "RtlValidateHeap" ??_C@_0BA@EEJAMNOM@RtlValidateHeap?$AA@
0x18003FA20: TppCancelWait
0x1800A0640: ZwAlpcConnectPortEx
0x1800DF9E8: RtlpWnfETWEventNameSubRundown
0x18008D9F0: LdrFlushAlternateResourceModules
0x18011CEF0: "\Registry\Machine\HARDWARE\DESCR" ??_C@_1IC@DEDEABDL@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAH?$AAA?$AAR?$AAD?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAD?$AAE?$AAS?$AAC?$AAR@
0x1800F7830: RtlIpv4AddressToStringExA
0x1800287F8: CfgAddressToBitState
0x180163C40: RegistryInfoCritSect
0x1800A1240: ZwEnumerateBootEntries
0x180040B50: RtlExpandEnvironmentStrings_U
0x180139B60: "Heap Segment at %p contains inva" ??_C@_0EJ@PPLJAKMP@Heap?5Segment?5at?5?$CFp?5contains?5inva@
0x1800DE588: SignalStartWerSvc
0x180070A40: TppJobpCallbackEpilog
0x1801782C0: RtlpProtectedPoliciesActiveCount
0x180103EB0: RtlpHpStackDbAllocRoutine
0x180011E34: RtlpIsSubSegmentReuseable
0x18003B410: RtlSidDominatesForTrust
0x1801384D0: " *** enter .exr %p for the excep" ??_C@_0CN@HKDICBKD@?5?$CK?$CK?$CK?5enter?5?4exr?5?$CFp?5for?5the?5excep@
0x1800E8BA8: RtlpFilterSacl
0x1801039E0: RtlpHeapLogRangeRelease
0x1801395B0: " This is located in the %s fi" ??_C@_0DJ@DHGOHFOK@?5?5?5?5This?5is?5located?5in?5the?5?$CFs?5fi@
0x1800EB0F4: RtlpValidCompoundAce
0x18009FCD0: NtTerminateProcess
0x180023968: RtlpWakeByAddress
0x18011DAB0: "\??\%C:" ??_C@_1BA@ODCEJMMC@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AA?$CF?$AAC?$AA?3?$AA?$AA@
0x180031378: LdrpCreateLangFallbackList
0x180021FA0: RtlpHpSegReportSegment
0x1800E2180: LdrFindResourceDirectory_U
0x180068EA4: RtlpGetLengthWithoutLastPathElement
0x18012D1D0: "Stack trace database size is %Id" ??_C@_0CF@LFMLKFBJ@Stack?5trace?5database?5size?5is?5?$CFId@
0x18009EB10: RtlpUnwindOpSlots
0x180094010: sscanf
0x180079D80: RtlIpv4AddressToStringExW
0x18008AD38: RtlpCheckDeviceName
0x18015FA78: RtlpSecMemListHead
0x180138118: "This failed because of error %Ix" ??_C@_0CE@HMNCBJMG@This?5failed?5because?5of?5error?5?$CFIx@
0x18002F44C: LdrpFindMessageInAlternateModule
0x1800866FC: RtlpUninitializeAssemblyStorageMap
0x18009C4DC: "__cdecl input_s" _input_s
0x180022EDC: RtlpRemoveUserSubFromNameSub
0x180139990: "RtlSizeHeap" ??_C@_0M@EHEBCDHL@RtlSizeHeap?$AA@
0x18012CE20: "LdrpCheckModule" ??_C@_0BA@CEIOODAC@LdrpCheckModule?$AA@
0x1800A0360: ZwCancelTimer
0x18012C648: "FindResource API exit" ??_C@_1CM@IOKBEILG@?$AAF?$AAi?$AAn?$AAd?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?5?$AAA?$AAP?$AAI?$AA?5?$AAe?$AAx?$AAi?$AAt?$AA?$AA@
0x18006F9C0: RtlPushFrame
0x1801231A8: "LPT" ??_C@_17KMAOGHDG@?$AAL?$AAP?$AAT?$AA?$AA@
0x18009FFF0: ZwQueueApcThread
0x1800633B0: RtlUnicodeStringToOemString
0x180139328: "Signature" ??_C@_09GDNFOKKF@Signature?$AA@
0x1800948C0: strpbrk
0x180020B30: RtlpHpLfhContextCleanup
0x18010F4C0: EtwpAddBinaryInfoEvents
0x1800F0890: RtlpSetPreferredUILanguages
0x180064600: RtlDeleteElementGenericTableAvl
0x18002F774: RtlpConsoleFallbackNameFromLocaleName
0x18012C3E0: "minkernel\ntdll\ldrdload.c" ??_C@_0BL@BEKOOPEF@minkernel?2ntdll?2ldrdload?4c?$AA@
0x1800A4150: RtlpUmsSwitchSequence
0x1800610D0: RtlCompressBufferXpressHuff
0x1801642F0: LoadAsDataTableCount
0x1800D35E0: LdrpInitializeExecutionOptions
0x1800FDC48: RtlpStdGetSpaceForTrace
0x180056AB8: RtlpHpVsSubsegmentCleanup
0x1800A2880: NtSetEaFile
0x1801085BC: RtlDebugSizeHeap
0x18010C744: RtlpHpLfhBucketSubsegmentStatsUpdate
0x180065640: TpAllocPool
0x1800A1820: ZwLockVirtualMemory
0x18005B2F0: EtwEventWrite
0x18004BD3C: LdrpDependencyExist
0x180057D00: RtlAddFunctionTable
0x18012FCF0: "SXS/RTL: Extended TOC entry arra" ??_C@_0JD@NOBJGCGI@SXS?1RTL?3?5Extended?5TOC?5entry?5arra@
0x1800A02A0: ZwWaitForMultipleObjects
0x18009F4A0: NtdllComboBoxWndProc_A
0x18012CCB0: "Building shim engine DLL system3" ??_C@_0EH@KJIIAHGN@Building?5shim?5engine?5DLL?5system3@
0x18006A4F0: EtwpLogger
0x18003F900: TpSetWaitEx
0x1800F6050: RtlExecuteUmsThread
0x180020058: RtlpHpTagAllocateHeap
0x18009FD70: ZwQueryPerformanceCounter
0x180067494: RtlpHpHeapLock
0x18012BDD0: LdrFatalInitError
0x1800D7760: RtlCopyOutOfProcessMemoryStreamTo
0x18015FB20: "`_control87'::`2'::dazSupported" ?dazSupported@?1??_control87@@9@9
0x180120180: CheckHeapFillPattern
0x18011DDE8: "__cdecl _real@3fddac670561bb4f" __real@3fddac670561bb4f
0x1800914F0: "__cdecl wcstoi64" _wcstoi64
0x180080180: RtlIsPartialPlaceholder
0x1800F78F0: RtlIpv6AddressToStringExA
0x1800DA174: RtlpValidateRemoteDebugInformation
0x18004E900: RtlReleasePath
0x1801319C0: "SXS: RtlGetAssemblyStorageRoot()" ??_C@_0FJ@DAEEJIJM@SXS?3?5RtlGetAssemblyStorageRoot?$CI?$CJ@
0x1800EE6F0: RtlGetThreadLangIdByIndex
0x18016604C: gDefaultLocaleId
0x18010D1B0: RtlpHpVaMgrCtxStart
0x18009F400: NtdllDesktopWndProc_A
0x180002A50: SwitchedRtlGetVersion_Current
0x18012CBE0: "LdrpLoadShimEngine" ??_C@_0BD@CNLNKGBC@LdrpLoadShimEngine?$AA@
0x18012E9F0: "verifier.dll" ??_C@_1BK@GKAGNDBG@?$AAv?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180002A50: "__cdecl matherr" _matherr
0x18012D4C0: "\system;" ??_C@_1BC@FJJJFDD@?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$DL?$AA?$AA@
0x1800A1C80: NtOpenTransaction
0x180178208: g_pfnApphelpCheckModuleProc
0x180163E01: RtlpRaiseExceptionOnPossibleDeadlock
0x1800A09C0: ZwCommitComplete
0x1800A0B20: NtConvertBetweenAuxiliaryCounterAndPerformanceCounter
0x18015F000: "__cdecl pctype" _pctype
0x1800A1CC0: NtPlugPlayControl
0x180166468: gCustomCultureRegKey
0x180122878: "Wow64ApcRoutine" ??_C@_0BA@KKIPAJJE@Wow64ApcRoutine?$AA@
0x1800A1D00: ZwPrePrepareEnlistment
0x1800FBCE4: NormBuffer__LastStartBasePair
0x18004EA38: TppCleanupGroupMemberInitialize
0x1800037B0: RtlpWalkFrameChain
0x1800F1AE0: RtlHpQuerySegmentHeapRoutine
0x1801286A0: Magic86400000
0x18000EE30: RtlpHpLfhSlotAllocate
0x1800A31E0: ExpInterlockedPopEntrySList
0x1800A1900: NtMapViewOfSectionEx
0x18007A090: LdrpAddNodeServiceTag
0x18007BF50: RtlAddAccessAllowedAceEx
0x1800917C0: "__cdecl wcsupr" _wcsupr
0x18002392C: RtlpUnWaitCriticalSectionEx
0x1800CFB58: LdrpFindOrPrepareEnclaveModule
0x18009970C: wctomb_s
0x1800E9990: RtlAddCompoundAce
0x18009F410: NtdllDesktopWndProc_W
0x180118900: "`RtlpGetCustomCultureRegKey'::`2'::ObjAttribute" ?ObjAttribute@?1??RtlpGetCustomCultureRegKey@@9@9
0x1800A2D40: NtSinglePhaseReject
0x18009FC30: NtSetInformationFile
0x1800A3590: RtlEnclaveCallDispatcher
0x1800022F4: adapt
0x1800A1D40: NtPrepareEnlistment
0x180059A50: RtlIpv6AddressToStringExW
0x180139978: "RtlSetUserFlagsHeap" ??_C@_0BE@BFJGGNKO@RtlSetUserFlagsHeap?$AA@
0x180122740: "\Registry\Machine\Software\Polic" ??_C@_1JI@JGOADMNK@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc@
0x1800F4820: RtlDecompressBuffer
0x18009FC70: NtAccessCheckAndAuditAlarm
0x1800F5E20: RtlDeleteUmsCompletionList
0x180002B20: RtlComputePrivatizedDllName_U
0x1801393A8: "DeCommitTotalFreeThreshold" ??_C@_0BL@NFIJLEAJ@DeCommitTotalFreeThreshold?$AA@
0x1800E15D8: ImportTablepInsertModuleSorted
0x180082A68: RtlpCreateDeferredCriticalSectionEvent
0x1801396D8: "Specified HeapBase (%p) is free " ??_C@_0DB@CMBFOAGN@Specified?5HeapBase?5?$CI?$CFp?$CJ?5is?5free?5@
0x180128288: "Digital Signage" ??_C@_1CA@NGLLFDHA@?$AAD?$AAi?$AAg?$AAi?$AAt?$AAa?$AAl?$AA?5?$AAS?$AAi?$AAg?$AAn?$AAa?$AAg?$AAe?$AA?$AA@
0x180002040: RtlDefaultNpAcl
0x1800A3360: KiUserApcDispatch
0x180114B48: RtlpQueryDiskSpacePolicy
0x18008FC10: LdrpDispatchUserCallTarget
0x180163AB0: RtlpStackTraceDatabase
0x180166840: RtlpLDCrtPage
0x18010EE98: EtwpFindAndLockBufferForFlushing
0x1800ED010: RtlBarrier
0x180082410: TppIopFree
0x1800DECA4: GetShipAssertBuffer
0x1800FD418: RtlControlStackTraceDataBase
0x18001E408: RtlpHpGetUserInfo
0x1801102E4: TppExceptionFilter
0x1801011A0: RtlpMuiRegResizeLanguageConfigList
0x1800F3210: RtlpGetTagName
0x18004CE30: RtlDeleteResource
0x180016660: RtlpHpSegSizeInternal
0x1800A0CC0: ZwCreateLowBoxToken
0x180132D00: "Invalid heap signature for heap " ??_C@_0CG@IEIDBOHE@Invalid?5heap?5signature?5for?5heap?5@
0x18012D100: "LdrpInitializeProcess" ??_C@_0BG@DLDBJBKM@LdrpInitializeProcess?$AA@
0x180130D20: "SXS: %s() - internal coding erro" ??_C@_0FJ@BLBPFMFK@SXS?3?5?$CFs?$CI?$CJ?5?9?5internal?5coding?5erro@
0x180085168: punycode_encode
0x18004F910: RtlSetThreadWorkOnBehalfTicket
0x18005D5AC: SHA256Transform
0x1800A31E0: RtlpInterlockedPopEntrySList
0x180081700: TpTrimPools
0x180139EE0: "svchost.exe" ??_C@_1BI@GOFOEOMC@?$AAs?$AAv?$AAc?$AAh?$AAo?$AAs?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18008C450: RtlIpv6AddressToStringA
0x1800F3510: RtlpHeapQueryTotalReserveSize
0x18002695C: RtlAddAtomToAtomTableEx
0x1800546E0: RtlRbRemoveNode
0x18006A8B0: RtlWakeAllConditionVariable
0x180105588: RtlpLogHeapAffinitySlotAssign
0x180163AE0: RtlpBusyList
0x180080AE0: TpAllocCleanupGroup
0x18006C438: EtwpAllocateFreeBuffers
0x1800765CC: RtlpRegisterLockedMemoryZone
0x1800A0BA0: NtCreateEnclave
0x180163468: EtwpGlobalSequence
0x180072424: TpDereferenceGlobalPool
0x18012D068: "BaseThreadInitThunk" ??_C@_0BE@EKFOMHKK@BaseThreadInitThunk?$AA@
0x180122AB8: "ProgramFiles(Arm)" ??_C@_1CE@KAFOGPL@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$CI?$AAA?$AAr?$AAm?$AA?$CJ?$AA?$AA@
0x180095250: tolower
0x18011C6C0: "RtlpResUltimateFallbackInfo Ente" ??_C@_1EE@ICPOECNJ@?$AAR?$AAt?$AAl?$AAp?$AAR?$AAe?$AAs?$AAU?$AAl?$AAt?$AAi?$AAm?$AAa?$AAt?$AAe?$AAF?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AAI?$AAn?$AAf?$AAo?$AA?5?$AAE?$AAn?$AAt?$AAe@
0x1800A1660: ZwInitializeNlsFiles
0x18009F770: ZwWorkerFactoryWorkerReady
0x180059B90: RtlIpv6AddressToStringW
0x180130238: "RtlpCrackActivationContextString" ??_C@_0CO@GAOBBLME@RtlpCrackActivationContextString@
0x1801100A0: TppWorkUnposted
0x18002FBD4: LdrpMultiSZCchLength
0x180166268: LdrpModuleBaseAddressIndex
0x180063210: RtlOemToUnicodeN
0x18012F790: "[%x.%x] SXS: %s - Relative redir" ??_C@_0EA@OEHGPMAN@?$FL?$CFx?4?$CFx?$FN?5SXS?3?5?$CFs?5?9?5Relative?5redir@
0x180122238: "SwitchedRtlGetVersion_WinBLUE" ??_C@_1DM@CODBBKPE@?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AAe?$AAd?$AAR?$AAt?$AAl?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA_?$AAW?$AAi?$AAn?$AAB?$AAL?$AAU?$AAE?$AA?$AA@
0x18009FC50: NtMapViewOfSection
0x18011FCE2: "__cdecl _lconv_static_null" __lconv_static_null
0x180037D10: RtlAddAccessAllowedAce
0x1800A34C0: KiUserExceptionDispatcher
0x180090BF0: "__cdecl strlwr" _strlwr
0x180138C30: "Last known valid blocks: before " ??_C@_0DC@LNNEIMKJ@Last?5known?5valid?5blocks?3?5before?5@
0x18006CE58: EtwpInitLoggerContext
0x18007CAE0: RtlTimeToSecondsSince1980
0x18011FF20: "minkernel\ntdll\ldrsnap.c" ??_C@_0BK@PLPGIOHA@minkernel?2ntdll?2ldrsnap?4c?$AA@
0x1800A29E0: ZwSetInformationTransaction
0x18007C5C0: RtlQueryImageFileKeyOption
0x1800EA520: RtlpConvertRelativeToAbsoluteSecurityAttribute
0x1800777DC: RtlpQueryExtendedInformationAllHeaps
0x1800CDF68: LdrpAppxEtwIntegrityFailure
0x18012C8F8: "LdrpProtectAndRelocateImage" ??_C@_0BM@PGJKCBEM@LdrpProtectAndRelocateImage?$AA@
0x18011D620: "`string'" ??_C@_1IG@IDLMENCF@?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AA?5?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?$AA?$AAI?$AAO?$AA?$AA?$AAA?$AAl?$AAp?$AAc?$AA?$AA?$AAP?$AAo?$AAo?$AAl?$AA?$AA?$AAT?$AAi?$AAm?$AAe?$AAr@
0x180105B94: RtlpLogHeapReuseThresholdActivate
0x18008CE70: RtlCreateUserProcessEx
0x18001A958: RtlpZeroBlockFromOffset
0x180046210: RtlMultiByteToUnicodeSize
0x1800461E0: RtlxAnsiStringToUnicodeSize
0x180056274: EtwpRemoveRegistrationFromTable
0x18012FC90: "SXS/RTL: Extended TOC offset (%l" ??_C@_0FN@CJKFOBLG@SXS?1RTL?3?5Extended?5TOC?5offset?5?$CI?$CFl@
0x180110D40: TppETWWorkerNodeSwitch
0x180138C20: "Parameter3: %p " ??_C@_0BA@KMLINNFI@Parameter3?3?5?$CFp?6?$AA@
0x180091490: "__cdecl wcsset_s" _wcsset_s
0x18009A770: "__cdecl wsplitpath_s" _wsplitpath_s
0x1800739B0: AlpcInitializeMessageAttribute
0x18009ACB0: strcpy_s
0x1800CE6C0: RtlQueryThreadProfiling
0x180086920: RtlIsElevatedRid
0x180070200: RtlQueryPackageIdentityEx
0x180128380: "Printing" ??_C@_1BC@BDONHKCN@?$AAP?$AAr?$AAi?$AAn?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
0x180137E90: "<unknown>" ??_C@_1BE@ELICABCK@?$AA?$DM?$AAu?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$DO?$AA?$AA@
0x180163440: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUgsivzwklloUxlnkzgUwzbglmzUlyquivUznwGEUgkxlnkzgOlyq@tpcompat" __@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUgsivzwklloUxlnkzgUwzbglmzUlyquivUznwGEUgkxlnkzgOlyq@tpcompat
0x1800CFFF8: LdrpLogDbgPrint
0x180020AD0: RtlpHpSegContextCleanup
0x1800A2220: ZwQuerySymbolicLinkObject
0x18010095C: RtlpMuiRegGrowLanguageList
0x18010CB68: RtlpHpLfhSubsegmentCommitBlock
0x1800900F0: isupper
0x1800A2B60: NtSetSystemEnvironmentValue
0x1801231C8: "NUL" ??_C@_17CLELIOII@?$AAN?$AAU?$AAL?$AA?$AA@
0x180137750: "!(CheckedFlags & ~HEAP_CREATE_VA" ??_C@_0CK@BNECCOKI@?$CB?$CICheckedFlags?5?$CG?5?$HOHEAP_CREATE_VA@
0x1800A2F60: ZwUnloadKey2
0x1800A17E0: ZwLockProductActivationKeys
0x1800525D0: RtlBackoff
0x180087E04: EtwpPreEnableEventApiCallback
0x1800D90D0: RtlQueryProcessBackTraceInformation
0x1800FAA68: GetUTF32
0x180137B08: "--------------------------------" ??_C@_0CJ@NAGLDNBO@?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9@
0x180164ED0: LdrpKnownDllPath
0x18006BE64: EtwpAcquireGuidEntryExclusive
0x18011CBF4: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x1800DC708: AvrfMiniLoadDll
0x18007B990: RtlAdjustPrivilege
0x1800FEA60: RtlpTraceDatabaseFree
0x180083360: Normalization__NormalizeCharacter
0x180071C40: RtlPrefixString
0x1800A0170: ZwQuerySection
0x18003D850: RtlpComputeDllPath
0x18009F990: ZwOpenKey
0x180041040: LdrpSendDllNotifications
0x18001DECC: CsrpClientConnectToServer
0x18012CE30: "Loading the shim engine DLL "%wZ" ??_C@_0DO@CNLHHAHI@Loading?5the?5shim?5engine?5DLL?5?$CC?$CFwZ@
0x18012DB08: "VerifierActivationFilter found, " ??_C@_0DC@DFDBKLK@VerifierActivationFilter?5found?0?5@
0x1800864D0: TppAlpcpFree
0x1800887A4: RtlpUpdateHeapWatermarks
0x1801399D8: "RtlQueryTagHeap" ??_C@_0BA@HKHCLDPA@RtlQueryTagHeap?$AA@
0x180130100: "SXS: String hash collision chain" ??_C@_0EF@BKMLODDA@SXS?3?5String?5hash?5collision?5chain@
0x180090200: "__cdecl itoa" _itoa
0x18002EB20: LdrpQuerySxSMUIFile
0x1800F1A40: RtlGetProcessHeaps
0x180084EF0: RtlIpv4AddressToStringA
0x18003EC30: RtlSwitchedVVI
0x180165AF0: CsrClientProcess
0x1800D27D4: RtlStringCchCopyExW
0x180163AF0: RtlpLeakList
0x180040E58: LdrpNotifyLoadOfGraph
0x180166298: RtlCriticalSectionLock
0x18011DA20: "::" ??_C@_02MOLJINC@?3?3?$AA@
0x1800A0210: ZwQueryEvent
0x1800934E0: longjmp
0x18010388C: RtlpHeapHandleError
0x18012D080: "KernelbasePostInit" ??_C@_0BD@IGFABMDG@KernelbasePostInit?$AA@
0x1800E5DD0: RtlConsoleMultiByteToUnicodeN
0x18004499C: LdrpFindLoadedDllByMappingLockHeld
0x1800283F0: RtlpGuardGrantSuppressedCallAccess
0x1800A0250: NtOpenDirectoryObject
0x180083910: RtlpAddVectoredHandler
0x180112B4C: PsspCaptureHandleInformation
0x18011FBB4: "(null)" ??_C@_06OJHGLDPL@?$CInull?$CJ?$AA@
0x1801228C0: "MSCOREE.DLL" ??_C@_1BI@LLJGJDCD@?$AAM?$AAS?$AAC?$AAO?$AAR?$AAE?$AAE?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x180120980: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1800E1C64: RtlCreateInvertedFunctionTableCacheEntry
0x18012FD90: "SXS/RTL: Extended TOC section TO" ??_C@_0HE@FMALJPDA@SXS?1RTL?3?5Extended?5TOC?5section?5TO@
0x18010C08C: RtlHpHeapManagerStart
0x180138C68: "Stack trace available at %p " ??_C@_0BN@JKLCHGJG@Stack?5trace?5available?5at?5?$CFp?6?$AA@
0x180079E60: RtlIpv4AddressToStringW
0x18011CD9C: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1801328FC: "" ??_C@_15EODNFOFM@?$AA?$AA?$AA?$AA?$AA?$AA@
0x180165260: LdrpWorkCompleteEvent
0x1800903A0: "__cdecl itow" _itow
0x1800A1AE0: ZwOpenKeyedEvent
0x1800F30C4: RtlpGetContainingRange
0x180086140: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x180086A30: RtlDeleteTimerQueueEx
0x18007C4E0: LdrQueryImageFileExecutionOptions
0x1801008E8: RtlpMuiRegGetString
0x18003CCF8: punycode_decode
0x1800A1060: ZwDebugContinue
0x1800D7724: LdrpHashAsciizString
0x18001823C: RtlpHpAllocateHeapInternal
0x18012C0E0: "api-" ??_C@_19PDKDEACG@?$AAa?$AAp?$AAi?$AA?9?$AA?$AA@
0x180088840: RtlSetProcessPreferredUILanguages
0x1800A2120: ZwQueryOpenSubKeys
0x1800A2960: NtSetInformationKey
0x180130F50: "SXS: Assembly storage root locat" ??_C@_0DO@GMJKBOLI@SXS?3?5Assembly?5storage?5root?5locat@
0x180166838: RtlpLDPreviousPage
0x18002915C: LdrpGetNewTlsVector
0x18004B8BC: ApiSetpSearchForApiSet
0x180088400: EtwEventWriteFull
0x18007E930: RtlpTestHookInitialize
0x180069250: RtlpCompareActivationContextDataTOCEntryById
0x180163AC0: gSystemLocale
0x1800A1EE0: ZwQueryDriverEntryOrder
0x1800E0600: RtlpSignalSystemDirsModification
0x18008F9D0: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x180165310: RtlpUnhandledExceptionFilter
0x180122DD8: "\Registry\User\.Default" ??_C@_1DA@PDHFOJA@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAU?$AAs?$AAe?$AAr?$AA?2?$AA?4?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x1800A0030: NtAddAtom
0x18009F950: NtQueryObject
0x18009FCB0: NtReplyWaitReceivePortEx
0x180087F40: RtlpInitializeLangRegistryInfo
0x18012CF40: "Locating procedure "%Z" in WOW64" ??_C@_0FI@CLBHLNJA@Locating?5procedure?5?$CC?$CFZ?$CC?5in?5WOW64@
0x180084A20: RtlCreateBoundaryDescriptor
0x1800A2900: ZwSetInformationDebugObject
0x1800ED4F0: RtlCheckSystemBootStatusIntegrity
0x1800A0E00: NtCreateProfileEx
0x1800F7728: RtlpInitializeNonVolatileFlush
0x18012CF98: "Failed to reallocate the system " ??_C@_0CP@NLJGIEGK@Failed?5to?5reallocate?5the?5system?5@
0x1800A17A0: ZwLoadKeyEx
0x1800A2F20: NtUnloadDriver
0x180106964: RtlpDestroyExecutionRequiredRequest
0x1800093D0: LdrGetProcedureAddressForCaller
0x18012C070: "\PackageList\" ??_C@_1BM@LMNMHOPK@?$AA?2?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAL?$AAi?$AAs?$AAt?$AA?2?$AA?$AA@
0x180090EAC: "__cdecl vscprintf_helper" _vscprintf_helper
0x180071C20: RtlInitializeConditionVariable
0x1800A1280: ZwEnumerateSystemEnvironmentValuesEx
0x180178290: AvrfpAPILookupCallbacksEnabled
0x18012F030: "AVRF: warning: did not find `%s'" ??_C@_0DD@MHGHFDKB@AVRF?3?5warning?3?5did?5not?5find?5?$GA?$CFs?8@
0x1800A06E0: ZwAlpcCreateSecurityContext
0x180106790: RtlpStackTraceDatabaseLogPrefix
0x1800931D0: iswctype
0x1800D8850: RtlWow64LogMessageInEventLogger
0x18004CE74: RtlpFreeDebugInfo
0x18006D8AC: EtwpQueryRegString
0x180118128: RtlpDosDevicesPrefix
0x180077380: RtlGetActiveActivationContext
0x180057448: FindDirectoryEntry
0x18008BC64: IsHangulLV
0x1800583D8: RtlpHpVaMgrAlloc
0x1800A3160: DbgUserBreakPoint
0x1800D68C0: LdrpQueryAndUpdateVerifierLaunchCounter
0x180131B88: "'LDR: %s(), invalid image format" ??_C@_0CP@LBPMLGDA@?8LDR?3?5?$CFs?$CI?$CJ?0?5invalid?5image?5format@
0x1800A17C0: NtLockFile
0x18002084C: RtlpHpHeapDestroy
0x180039E2C: RtlpCopyEffectiveAce
0x18012CDC8: "LdrInitShimEngineDynamic" ??_C@_0BJ@BOHBJMIK@LdrInitShimEngineDynamic?$AA@
0x1800A31A0: DebugPrompt
0x1800D0390: LdrQueryModuleInfoFromLdrEntry32
0x1800A1320: NtFilterTokenEx
0x180132908: "LanguageConfigurationPending" ??_C@_1DK@DKGPACEB@?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AA?$AA@
0x1800D9CFC: RtlpQueryCriticalSectionOwnerInformation
0x180122D78: "__APPDIR__" ??_C@_1BG@NDKGHADL@?$AA_?$AA_?$AAA?$AAP?$AAP?$AAD?$AAI?$AAR?$AA_?$AA_?$AA?$AA@
0x180094280: strcmp
0x1800A19A0: NtNotifyChangeKey
0x18009DD64: "__cdecl swinput_s" _swinput_s
0x180089DDC: LdrpProcessMachineMismatch
0x180128460: "\Registry\Machine\System\Current" ??_C@_1JE@LLECADPK@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1800DD3E0: RtlWow64SuspendThread
0x1800D2CAC: LdrpConstructModernAppKeyName
0x1801652A8: LdrpWorkInProgress
0x180087870: RtlCopyMappedMemory
0x180026E44: RtlpAtomMapAtomToHandleEntry
0x1800D8590: RtlCreateProcessParameters
0x1800FBC10: NormBuffer__IsBlocked
0x1800186EC: RtlpFindAndCommitPages
0x18008EEC4: LdrpGetModuleInfoFromVirtualMemory
0x18011CB48: "Unknown" ??_C@_1BA@LEPJIIOK@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$AA@
0x180099F00: "__cdecl makepath_s" _makepath_s
0x18009FB10: NtFreeVirtualMemory
0x18003D924: TpWaitOutstandingCallbackCount
0x180074530: RtlpMuiRegTryToAppendLanguageName
0x18011D4F8: ":%u" ??_C@_17IFFAKLAI@?$AA?3?$AA?$CF?$AAu?$AA?$AA@
0x1800DA068: RtlpValidateRange
0x1800A0820: NtAlpcQueryInformation
0x18007F704: LdrpGetShimEngineInterface
0x18012BD90: AppModelLibraryLoadFailureNgenBinary
0x1800723C0: TpUnreserveTaskPost
0x180078550: RtlSetCurrentDirectory_U
0x180088D90: AlpcGetOutstandingCompletionListMessageCount
0x18011F308: "__cdecl _real@3f80000000000000" __real@3f80000000000000
0x1800A2EA0: NtThawTransactions
0x180037D40: RtlSetDaclSecurityDescriptor
0x180166320: pTblPtrs
0x18007E520: RtlGetElementGenericTable
0x18004EF50: TpSetTimer
0x1800A25A0: ZwRestoreKey
0x180164EB9: LdrpForkInProgress
0x18006D4CC: EtwpGetCpuSpeedFromRegistry
0x180122A38: "CommonProgramW6432" ??_C@_1CG@NMMNPOME@?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAW?$AA6?$AA4?$AA3?$AA2?$AA?$AA@
0x180098730: "__cdecl sptype" _sptype
0x18012B000: RtlpBitsClearTotal
0x180178250: g_pfnSE_LdrEntryRemoved
0x180118440: TppIopCleanupGroupMemberVFuncs
0x180109EB4: RtlpGetReservedBlockSize
0x180118148: RtlpNullString
0x18007FA70: RtlFreeUserStack
0x180128230: "Industry Tablet" ??_C@_1CA@LAHCJKMK@?$AAI?$AAn?$AAd?$AAu?$AAs?$AAt?$AAr?$AAy?$AA?5?$AAT?$AAa?$AAb?$AAl?$AAe?$AAt?$AA?$AA@
0x1800F81CC: RtlComputeLfnChecksum
0x1800A3F60: RtlCopyMemoryNonTemporal
0x180093170: iswprint
0x180165408: UseWOW64
0x1800A04A0: ZwAdjustGroupsToken
0x1800A1F20: ZwQueryFullAttributesFile
0x18011DDD8: "__cdecl _real@3fdb2cb05bf9beff" __real@3fdb2cb05bf9beff
0x1800764B0: RtlLockMemoryBlockLookaside
0x180070548: RtlStringCbPrintfExW
0x18003BC60: RtlIdnToAscii
0x1800FD0A8: RtlpLogExceptionDispatch
0x180103490: HeapCommitFailAvoidTriageRules
0x180122B00: "ProgramFiles(x86)" ??_C@_1CE@EAPHGJBI@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$CI?$AAx?$AA8?$AA6?$AA?$CJ?$AA?$AA@
0x180122A08: "CommonProgramFiles(Arm)" ??_C@_1DA@JJLPEGKB@?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$CI?$AAA?$AAr?$AAm?$AA?$CJ?$AA?$AA@
0x180003730: RtlWalkFrameChain
0x180137D80: "en-US" ??_C@_1M@BMHNFIME@?$AAe?$AAn?$AA?9?$AAU?$AAS?$AA?$AA@
0x18009F640: NtdllDispatchMessage_A
0x180164FA0: FastPebLock
0x18001D4EC: RtlpFreeUserBlock
0x1800FFA74: RtlpMuiRegConfigMatchesInstalled
0x18002F4D0: RtlFindMessage
0x18005BDE8: EtwpSwitchBuffer
0x1800A1520: NtGetDevicePowerState
0x180137BA8: "::ffff:0:%u.%u.%u.%u" ??_C@_0BF@DFCHPNNC@?3?3ffff?30?3?$CFu?4?$CFu?4?$CFu?4?$CFu?$AA@
0x180166800: RtlpSecMemLock
0x1800DA770: RtlAddVectoredContinueHandler
0x180029FF4: LdrpResSearchResourceMappedFile
0x1800A0980: NtCancelTimer2
0x180118DC0: RtlCompressBufferProcs
0x18012E210: "Querying the active activation c" ??_C@_0ED@FIHNAPML@Querying?5the?5active?5activation?5c@
0x18011EEA0: "__cdecl _real@3ff921fb54400000" __real@3ff921fb54400000
0x18012C868: "LdrInitializeEnclave" ??_C@_0BF@KLFNBBJL@LdrInitializeEnclave?$AA@
0x1801389C0: "heap_failure_internal" ??_C@_0BG@GIBBAKDF@heap_failure_internal?$AA@
0x1800220EC: RtlpHpVaMgrCtxQuery
0x180082CB0: LdrSetDllDirectory
0x1800A1540: NtGetMUIRegistryInfo
0x180085FBC: EtwpIsPrivateLoggerOn
0x180106864: RtlpCreateExecutionRequiredRequest
0x18016601C: RtlpLockedMemoryZoneCount
0x18006C32C: EtwpAllocateTraceBufferPool
0x18009F7F0: NtCallbackReturn
0x18005150C: TppWorkerFindTask
0x180178294: AvrfAppVerifierMode
0x18012F068: "AVRF: (%ws) %s export found. " ??_C@_0BP@JECDKHLN@AVRF?3?5?$CI?$CFws?$CJ?5?$CFs?5export?5found?4?5?6?$AA@
0x180164EC0: RtlpTimeout
0x180137CD0: RtlFatIllegalTable
0x18009FD30: ZwOpenThreadTokenEx
0x1800E9020: RtlTryConvertSRWLockSharedToExclusiveOrRelease
0x18011FBC0: "__cdecl _lookuptable" __lookuptable
0x18004500C: LdrpMinimalMapModule
0x1800A1EA0: ZwQueryDirectoryFileEx
0x18001C6EC: RtlpDestroyHeapSegment
0x18001DE84: RtlpInitializeLfhRandomDataArray
0x180033AD4: LdrIsResItemExist
0x18007BC30: RtlVerifyVersionInfo
0x180123148: "\\?" ??_C@_17ELFAOGGE@?$AA?2?$AA?2?$AA?$DP?$AA?$AA@
0x18012DF00: "_NO_DEBUG_HEAP" ??_C@_1BO@IADKKJID@?$AA_?$AAN?$AAO?$AA_?$AAD?$AAE?$AAB?$AAU?$AAG?$AA_?$AAH?$AAE?$AAA?$AAP?$AA?$AA@
0x18016402A: OemTransUniDefaultChar
0x1801389D8: "heap_failure_unknown" ??_C@_0BF@BAOFEOOI@heap_failure_unknown?$AA@
0x180120990: "__cdecl _imp_NtQueryValueKey" __imp_NtQueryValueKey
0x1800202CC: RtlpHpCalculateAllocSize
0x180164298: Nls844UnicodeUpcaseTable
0x18003F760: TpAllocWait
0x1800A0460: NtAddBootEntry
0x1800D2FE4: LdrpInitializationFailure
0x1800E7260: RtlAreAnyAccessesGranted
0x18008F830: "__cdecl _security_check_cookie" __security_check_cookie
0x18009FF70: ZwAdjustPrivilegesToken
0x180022384: RtlpHpLargeAlloc
0x180053494: RtlpHpSegSubAllocate
0x180110F00: RtlpTpIoCallback
0x18003A390: RtlMapGenericMask
0x1800A2400: ZwRegisterThreadTerminatePort
0x18003AA10: RtlpValidFilterAclSubjectContext
0x1801664B0: LdrpVehLock
0x1800F8BEC: RtlpGetAlternateCodePage
0x18007E5F8: TppFreeDirectParamsCache
0x180081FD0: RtlAddSIDToBoundaryDescriptor
0x1800A2540: ZwRequestPort
0x1800A1920: ZwModifyBootEntry
0x18009FA90: NtWaitForMultipleObjects32
0x1800260E0: GetOverlayFilePath
0x1800A1BA0: NtOpenRegistryTransaction
0x180139500: "FreeLists" ??_C@_09NCNJPMEA@FreeLists?$AA@
0x18000B3B0: RtlpDosPathNameToRelativeNtPathName
0x180094340: strcspn
0x1800D0A50: LdrVerifyImageMatchesChecksum
0x1800F06BC: RtlpSetMachineUILanguagesImmediate
0x1800809F4: RtlpRemoveUCRBlock
0x180094660: strncmp
0x1801111C8: SbpTraceContextUpdate
0x1800A0FC0: ZwCreateWaitCompletionPacket
0x18012E338: "LdrpPrepareModuleForExecution" ??_C@_0BO@EEABNODO@LdrpPrepareModuleForExecution?$AA@
0x18012B100: RtlpSearchWidth
0x180118330: LdrpDefaultExtension
0x1800FBCB8: NormBuffer__LastStartBase
0x180103F08: RtlpHpStackDbLogStackDbEnd
0x180029C80: LdrResSearchResource
0x180131D70: "LdrpResSearchResourceHandle Exit" ??_C@_1EC@EOGKALAO@?$AAL?$AAd?$AAr?$AAp?$AAR?$AAe?$AAs?$AAS?$AAe?$AAa?$AAr?$AAc?$AAh?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AA?5?$AAE?$AAx?$AAi?$AAt@
0x180069230: RtlLengthSid
0x18011C1B8: "CSRPORT!" ??_C@_1BC@CEEDJODG@?$AAC?$AAS?$AAR?$AAP?$AAO?$AAR?$AAT?$AA?$CB?$AA?$AA@
0x180165AF1: CsrInitOnceDone
0x1800A3EB0: RtlCompareMemory
0x1800FE970: RtlTraceDatabaseLock
0x1800A2100: NtQueryMutant
0x18002F2F0: RtlCleanUpTEBLangLists
0x18011DE28: "__cdecl _real@3ffd372a17cdf5a0" __real@3ffd372a17cdf5a0
0x1801627B0: RtlpUnloadEventTraceExSize
0x180102AA0: "__cdecl RtlpMuiRegValidateInstalled" _RtlpMuiRegValidateInstalled
0x180122D90: "__CD__" ??_C@_1O@KHNIOJEM@?$AA_?$AA_?$AAC?$AAD?$AA_?$AA_?$AA?$AA@
0x1800A18A0: NtManagePartition
0x1800F5F70: RtlEnterUmsSchedulingMode
0x1800A0900: NtAssociateWaitCompletionPacket
0x18011C968: "PreferredUILanguages" ??_C@_1CK@CDBMDBEP@?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAr?$AAe?$AAd?$AAU?$AAI?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
0x1800F6514: RtlpDetachThreadFromUmsCompletionList
0x18011D378: "Kernel-OneCore-DeviceFamilyID" ??_C@_1DM@KIMGBAPO@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?9?$AAO?$AAn?$AAe?$AAC?$AAo?$AAr?$AAe?$AA?9?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAF?$AAa?$AAm?$AAi?$AAl?$AAy?$AAI?$AAD?$AA?$AA@
0x1800A0B00: NtConnectPort
0x1801229A8: "PROCESSOR_ARCHITEW6432" ??_C@_1CO@FMLBDJLB@?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AAO?$AAR?$AA_?$AAA?$AAR?$AAC?$AAH?$AAI?$AAT?$AAE?$AAW?$AA6?$AA4?$AA3?$AA2?$AA?$AA@
0x18005FB80: RtlFindNextForwardRunClearCapped
0x1800A1E00: NtPulseEvent
0x1801184F0: RtlpWin32NtRootSlash
0x180063890: LdrQueryModuleInfoFromLdrEntry
0x18011D500: "http://schemas.microsoft.com/SMI" ??_C@_1GM@KMBKPNGP@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAs?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAS?$AAM?$AAI@
0x180090DD0: "__cdecl swprintf" _swprintf
0x18009F8D0: ZwReplyPort
0x18004FF80: TppWorkerThread
0x18011D608: "Threadpool!" ??_C@_1BI@PJKNEKEP@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAp?$AAo?$AAo?$AAl?$AA?$CB?$AA?$AA@
0x1800FBAB4: NormBuffer__GetLastChar
0x1800ED9C0: RtlUnlockBootStatusData
0x18002F050: LdrAddLoadAsDataTable
0x1800A1C20: NtOpenSymbolicLinkObject
0x1800A1560: ZwGetNextProcess
0x18008D710: RtlInitializeRXact
0x180080BE0: RtlpHpSegVsAllocate
0x1800A0780: ZwAlpcDisconnectPort
0x180080280: LdrpLoadContextReplaceModule
0x18009F6F0: NtdllListBoxWndProcWorker
0x18008CE50: RtlFreeOemString
0x1800A0A60: ZwCompareObjects
0x180031198: TppPoolpReferenceGlobalPool
0x1800D137C: LdrpEventAddUnicodeString
0x18003BA20: RtlEqualDomainName
0x18011F350: "__cdecl _real@3f2e7517ef6d98f8" __real@3f2e7517ef6d98f8
0x180110DF0: TppWorkerpInnerExceptionFilter
0x18002BEA8: RtlULongLongSub
0x1800E60A0: RtlInitCodePageTable
0x1800577B4: RtlpHpHeapCompact
0x180165318: LdrpAuditIntegrityContinuity
0x18002D060: "__cdecl RtlpMuiRegAddNeutralToInstalled" _RtlpMuiRegAddNeutralToInstalled
0x18011D748: "SE_DllLoaded" ??_C@_0N@IIJNFABN@SE_DllLoaded?$AA@
0x180059250: RtlAvlRemoveNode
0x1800A4520: RtlpUmsPrimaryContextWrap
0x18009F570: NtdllStaticWndProc_W
0x1800A1BE0: NtOpenSemaphore
0x18005D464: DWORDToBigEndian
0x1801286B0: NormalYearDayToMonth
0x180029BF0: LdrResFindResourceDirectory
0x18004C9AC: RtlInsertInvertedFunctionTable
0x180057CA0: RtlpHpGCFlushCallback
0x18009FCF0: NtSetEventBoostPriority
0x180065F80: RtlEnumerateGenericTable
0x1800D2990: "__cdecl TlgCreateWsz" _TlgCreateWsz
0x180131E70: "RTL: Acquire Shared Sem Timeout " ??_C@_0DA@GALAENKK@RTL?3?5Acquire?5Shared?5Sem?5Timeout?5@
0x180097F58: "__cdecl handle_exc" _handle_exc
0x1800A2A20: NtSetInformationVirtualMemory
0x180118520: RtlpWin32NtUncRoot
0x180138528: " *** then kb to get the faulting" ??_C@_0CJ@OOBDAJAB@?5?$CK?$CK?$CK?5then?5kb?5to?5get?5the?5faulting@
0x180075AAC: LdrpFindLoadedDllByMappingFile
0x18007B7A0: TppSimplepFree
0x1800A2B00: NtSetLowWaitHighEventPair
0x1801037E4: RtlpGetHeapInterceptorIndex
0x1800D8720: RtlPrepareForProcessCloning
0x180069270: RtlCheckSandboxedToken
0x18012E438: "DLL "%wZ" has TLS information at" ??_C@_0CF@HIIINONN@DLL?5?$CC?$CFwZ?$CC?5has?5TLS?5information?5at@
0x1800A2580: NtResetWriteWatch
0x180076D30: LZNT1CompressChunk
0x18012ECB8: "AVRF: provider %ws is not a DLL " ??_C@_0CI@GIEGGAKA@AVRF?3?5provider?5?$CFws?5is?5not?5a?5DLL?5@
0x18008E2C0: RtlpGetVolumeHandle
0x18012D7A8: "Finding "%wZ" failed with status" ??_C@_0CK@DJMLHBEG@Finding?5?$CC?$CFwZ?$CC?5failed?5with?5status@
0x18011F360: "__cdecl _real@3f9ab0f4f80a0acf" __real@3f9ab0f4f80a0acf
0x18011DA8C: "%u" ??_C@_15EFLNJKHH@?$AA?$CF?$AAu?$AA?$AA@
0x1800CF030: DbgUiSetThreadDebugObject
0x1800A2E00: NtSystemDebugControl
0x180073B78: RtlpInitializeThreadActivationContextStack
0x180128340: "Networking" ??_C@_1BG@NCGPPIEL@?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAi?$AAn?$AAg?$AA?$AA@
0x1800987D0: "__cdecl ctrlfp" _ctrlfp
0x180068000: RtlUnicodeToMultiByteN
0x1800A0840: NtAlpcQueryInformationMessage
0x180083BD0: LdrQueryModuleInfoLocalLoaderLock32
0x18012CEC8: "LdrpDynamicShimModule" ??_C@_0BG@OCOMFJJM@LdrpDynamicShimModule?$AA@
0x180090DD0: swprintf
0x1800A04C0: NtAdjustTokenClaimsAndDeviceGroups
0x180076520: RtlLockMemoryZone
0x1801782C8: LdrpUnalignedUserCallTargetBitMap
0x18012BD31: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x18009FAB0: NtWriteFileGather
0x18011CB68: "EXT-" ??_C@_04OMOICEBF@EXT?9?$AA@
0x18004D420: TppWaitpValidateWait
0x18007BE90: RtlIsGenericTableEmpty
0x18012F0C0: "AVRF: Failed to find verifier.dl" ??_C@_0DM@IOOLJHPN@AVRF?3?5Failed?5to?5find?5verifier?4dl@
0x180085730: RtlGetProductInfo
0x18011EE60: "__cdecl _real@3ec71de3796cde01" __real@3ec71de3796cde01
0x18012C048: "AppxStateChange" ??_C@_1CA@JDAKIDNM@?$AAA?$AAp?$AAp?$AAx?$AAS?$AAt?$AAa?$AAt?$AAe?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AA?$AA@
0x1801664C0: RtlpShutdownProcessFlags
0x1800A08E0: ZwAssignProcessToJobObject
0x18001D148: RtlpExtendListLookup
0x1800D6C8C: NtdllpReallocateStringRoutine
0x18008E3E0: RtlpVerifyAndCommitUILanguageSettings
0x1801229D8: "PROCESSOR_ARCHITECTURE" ??_C@_1CO@KPLMNPIA@?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AAO?$AAR?$AA_?$AAA?$AAR?$AAC?$AAH?$AAI?$AAT?$AAE?$AAC?$AAT?$AAU?$AAR?$AAE?$AA?$AA@
0x180163E10: NlsActiveCodePageIsUTF8
0x1800F00F4: RtlpMuiRegGetLanginfoTypeNSpec
0x1800026A4: EtwpFinalizeRelogFileHeaderStats
0x18012FAD8: "RtlDeactivateActivationContext" ??_C@_0BP@IKHEMMOB@RtlDeactivateActivationContext?$AA@
0x180005AF0: RtlUnwindEx
0x18009FEF0: NtQueryAttributesFile
0x180027134: RtlpAllocateAtomTableEntry
0x18005C838: RtlpOwnerAcesPresent
0x18007E5C0: RtlInitializeGenericTable
0x18009F5D0: NtdllHkINLPCWPSTRUCT_W
0x180128110: "Tablet" ??_C@_1O@ENCGCKEC@?$AAT?$AAa?$AAb?$AAl?$AAe?$AAt?$AA?$AA@
0x180137A70: "Below is a list of potentially l" ??_C@_0GG@JKGDHCN@Below?5is?5a?5list?5of?5potentially?5l@
0x180080C18: RtlpComputeCrcInternal
0x180139340: "ForceFlags" ??_C@_0L@JMAFPJMA@ForceFlags?$AA@
0x180166890: TrkContext
0x18012E9B8: "Objects=%4u" ??_C@_1BI@NBFJGDDD@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?$DN?$AA?$CF?$AA4?$AAu?$AA?$AA@
0x18008AF10: RtlDestroyAtomTable
0x1800E541C: LdrpResSearchResourceHandle
0x1801224E0: "RtlpHpAppCompatDontChangePolicy" ??_C@_1EA@JBCBLEE@?$AAR?$AAt?$AAl?$AAp?$AAH?$AAp?$AAA?$AAp?$AAp?$AAC?$AAo?$AAm?$AAp?$AAa?$AAt?$AAD?$AAo?$AAn?$AAt?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x180080C00: RtlCrc32
0x180078F80: RtlSidHashLookup
0x18010BBB4: RtlpSaveUmsDebugRegisterState
0x18008668C: RtlpFreeActivationContext
0x1801231D8: "Kernel-ProductInfo" ??_C@_1CG@MNIOEOCG@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?9?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
0x1800A13E0: NtFlushVirtualMemory
0x180122520: "Force the segment heap to apply " ??_C@_1OA@PIKOLIIF@?$AAF?$AAo?$AAr?$AAc?$AAe?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAs?$AAe?$AAg?$AAm?$AAe?$AAn?$AAt?$AA?5?$AAh?$AAe?$AAa?$AAp?$AA?5?$AAt?$AAo?$AA?5?$AAa?$AAp?$AAp?$AAl?$AAy?$AA?5@
0x1800981C8: "__cdecl handle_qnan1" _handle_qnan1
0x1800EB830: RtlReplaceSystemDirectoryInPath
0x180079EB0: TppPoolAddWorker
0x180030130: RtlSectionTableFromVirtualAddress
0x1800A0C80: NtCreateKeyTransacted
0x18009F730: NtdllGhostWndProcWorker
0x1800EF780: RtlpConvertCultureNamesToLCIDs
0x1800F9640: RtlHeapTrkInitialize
0x1800429CC: LdrpGetNtPathFromDosPath
0x180039C80: RtlpIsDuplicateAce
0x180105818: RtlpLogHeapCreateEvent
0x18002BCC0: LdrpResGetMappingSize
0x1800F5778: RtlpCheckBusyBlockTail
0x1800706E0: RtlGUIDFromString
0x18003E6A0: TpReleaseWork
0x1800E94A0: RtlpNotOwnerCriticalSection
0x18012DAD0: "VerifierActivationFilter" ??_C@_1DC@IJLHIGKN@?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAA?$AAc?$AAt?$AAi?$AAv?$AAa?$AAt?$AAi?$AAo?$AAn?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x18011EE78: "__cdecl _real@3f56c16c16c16967" __real@3f56c16c16c16967
0x180165348: LdrpProcessInitContextRecord
0x180004620: RtlpLookupFunctionEntryForStackWalks
0x18012E8D8: "ADVAPI32.DLL" ??_C@_1BK@GAEMIDIL@?$AAA?$AAD?$AAV?$AAA?$AAP?$AAI?$AA3?$AA2?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x1800F63C0: RtlUmsThreadYield
0x18004336C: LdrpPrepareModuleForExecution
0x180127B10: crc32Mult_
0x18001929C: RtlpHpSizeHeapInternal
0x1800A0D60: NtCreatePartition
0x180023B70: RtlDllShutdownInProgress
0x180099634: "__cdecl get_printf_count_output" _get_printf_count_output
0x1800A1B40: ZwOpenPartition
0x1801148D8: GetProcessIptTrace
0x180164304: AltResMemBlockCount
0x1800A23C0: ZwRecoverTransactionManager
0x18012C378: "Unknown" ??_C@_07NBCGADJA@Unknown?$AA@
0x1801230A0: "PICTURESLIBRARY" ??_C@_1CA@DAHKLIGG@?$AAP?$AAI?$AAC?$AAT?$AAU?$AAR?$AAE?$AAS?$AAL?$AAI?$AAB?$AAR?$AAA?$AAR?$AAY?$AA?$AA@
0x18001E140: CsrCaptureMessageMultiUnicodeStringsInPlace
0x18005B380: EtwEventWriteTransfer
0x180022190: RtlpHpQueryVA
0x180074FC0: RtlRunOnceComplete
0x1800A08A0: ZwAlpcSetInformation
0x18011FC40: "log10" ??_C@_05HGHHAHAP@log10?$AA@
0x18004C868: LdrpSignalModuleMapped
0x180052A78: TppSingleTimerExpiration
0x18007410C: RtlRemoveInvertedFunctionTable
0x180163448: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUvgdUmgwooUwzbglmzUlyquivUznwGEUvgdmgwookOlyq@etwntdll" __@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUvgdUmgwooUwzbglmzUlyquivUznwGEUvgdmgwookOlyq@etwntdll
0x1800D0AE8: LdrpCorFixupImage
0x18011F310: "__cdecl _real@3f89999999865ede" __real@3f89999999865ede
0x18012C238: "LdrVerifyImageMatchesChecksumEx" ??_C@_0CA@PFJAAEPL@LdrVerifyImageMatchesChecksumEx?$AA@
0x18004EEB4: TppStartThreadData
0x1800A03A0: NtAccessCheckByType
0x18012F120: "AVRF: Failed to find `VerifierSt" ??_C@_0EH@KHJLEPEI@AVRF?3?5Failed?5to?5find?5?$GAVerifierSt@
0x1800EF990: RtlpConvertLCIDsToCultureNames
0x1800935F0: memchr
0x1800A4660: "__cdecl _chkstk" __chkstk
0x18009F970: ZwQueryInformationFile
0x1800FAEB0: RtlQueryProcessPlaceholderCompatibilityMode
0x180137ED8: "The resource is owned exclusivel" ??_C@_0DA@LHPHNAOC@The?5resource?5is?5owned?5exclusivel@
0x18009FE30: ZwOpenSection
0x180164F88: LdrpImageEntry
0x180020458: RtlpHpTagContextAllocateTag
0x180024760: RtlCreateProcessParametersEx
0x1800D0574: LdrQueryProcessModuleInformationEx2
0x18009FED0: NtDuplicateObject
0x18006F918: TppIteWakeWaiters
0x18008412C: LdrpGetDelayloadAPIInfo
0x18011D7C8: WindowsHeapSnapshotProvider
0x1800FD9C4: RtlpStdExtendLowerWatermark
0x180103E00: RtlpHpRaiseFatalLimitError
0x180139510: "LockVariable" ??_C@_0N@EIHEKGHA@LockVariable?$AA@
0x18009FB30: NtImpersonateClientOfPort
0x1800A0290: NtQuerySystemTime
0x1800A2860: ZwSetDriverEntryOrder
0x18012C8C0: "Querying large page info failed " ??_C@_0DF@EHLMPNJ@Querying?5large?5page?5info?5failed?5@
0x180128330: "Medical" ??_C@_1BA@NGJEKKJM@?$AAM?$AAe?$AAd?$AAi?$AAc?$AAa?$AAl?$AA?$AA@
0x1800A0E80: ZwCreateSemaphore
0x18008BE50: RtlpNtSetValueKey
0x180029318: LdrpAcquireTlsIndex
0x18012EC38: "AVRF: Cannot load %ws from arbit" ??_C@_0CP@DCGNIHIC@AVRF?3?5Cannot?5load?5?$CFws?5from?5arbit@
0x1800A1AA0: NtOpenKeyTransacted
0x180073EE8: LdrpFreeTls
0x1800595F0: EtwTraceMessage
0x1800A2EC0: ZwTraceControl
0x18007A948: LdrQueryProcessModuleInformationEx
0x1800A2EE0: ZwTranslateFilePath
0x180165220: LdrpActualBitmapSize
0x180002A50: CsrpHeapCommitRoutine
0x18005A0F0: RtlpFlushHeapsCallback
0x18011DDF0: "__cdecl _real@3fe921fb54442d18" __real@3fe921fb54442d18
0x1800F2A50: RtlpExtendedHeapInformationGenerator
0x1800A5460: "__cdecl setjmpex" _setjmpex
0x180021C5C: RtlpCSparseBitmapPageDecommit
0x180121FE0: "windows eight" ??_C@_1BM@GBKIBMDG@?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAe?$AAi?$AAg?$AAh?$AAt?$AA?$AA@
0x18004F590: TpSetTimerEx
0x1800A07E0: ZwAlpcOpenSenderProcess
0x180118CC8: RtlpRegistryPaths
0x1800F8A60: RtlGetCurrentPeb
0x18012C208: "LdrpLoadDllInternal" ??_C@_0BE@PBPCJFJL@LdrpLoadDllInternal?$AA@
0x1800ED390: RtlCheckBootStatusIntegrity
0x180093150: iswgraph
0x18009F720: NtdllImeWndProcWorker
0x180070E50: RtlActivateActivationContext
0x1800A25A0: NtRestoreKey
0x180046A2C: LdrpMapAndSnapDependency
0x1800DBB20: AVrfpEnableHeapVerifier
0x18011226C: PsspCaptureAuxiliaryPages
0x1800EA110: RtlpConvertAbsoluteToRelativeSecurityAttribute
0x180128400: "Xbox One S" ??_C@_1BG@NDIFKIFJ@?$AAX?$AAb?$AAo?$AAx?$AA?5?$AAO?$AAn?$AAe?$AA?5?$AAS?$AA?$AA@
0x180068D30: RtlpGetChainHead
0x18009F490: NtdllButtonWndProc_W
0x1800FE9C0: RtlTraceDatabaseValidate
0x18007EB60: LdrLockLoaderLock
0x1800A2EA0: ZwThawTransactions
0x1800724D8: TppCallbackMayRunLongProlog
0x180095DF0: "__cdecl flsbuf_s" _flsbuf_s
0x18015F340: "__cdecl _lconv_c" __lconv_c
0x18011FE78: "Loading import redirection DLL: " ??_C@_0CH@LINNEOBA@Loading?5import?5redirection?5DLL?3?5@
0x180001150: RtlCompressBufferXpressLz
0x180165FF4: g_ShimsEnabled
0x180165280: LdrpWorkQueueLock
0x180128458: WNF_SEB_DEV_MNF_CUSTOM_NOTIFICATION_RECEIVED
0x18011C128: "RTL: Edit ntos\rtl\generr.c to c" ??_C@_0DE@FFPIECFN@RTL?3?5Edit?5ntos?2rtl?2generr?4c?5to?5c@
0x1800FDE90: RtlOsDeploymentState
0x18003B4A0: RtlIsValidProcessTrustLabelSid
0x1800A19A0: ZwNotifyChangeKey
0x180030CBC: InitializeTEBUserLangList
0x180100124: RtlpMuiRegGetFallbackLanguageInfoByLangId
0x180089A10: RtlUnlockCurrentThread
0x1801228D8: ".DLL" ??_C@_19EJGOEFGP@?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x180077BE0: RtlpQueryRunLevel
0x1800A17C0: ZwLockFile
0x18012BF30: "\System32" ??_C@_1BE@JPDJANBF@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?$AA@
0x18009F430: NtdllDefWindowProc_W
0x18011D040: "ContainerId" ??_C@_1BI@HJOCIGHC@?$AAC?$AAo?$AAn?$AAt?$AAa?$AAi?$AAn?$AAe?$AAr?$AAI?$AAd?$AA?$AA@
0x180013630: RtlpHpFreeHeap
0x1800A1320: ZwFilterTokenEx
0x18010FD30: TppIopCancelPendingCallbacks
0x180074D50: RtlCreateUserStack
0x18007368C: TraceLoggingRegisterEx
0x18008EE40: LdrpSetModuleSigningLevel
0x1800202F8: RtlpHpCheckAllocationSizeLimit
0x1800D1318: LdrpEventAddAnsiString
0x1800A0820: ZwAlpcQueryInformation
0x18008EDD0: LdrSetMUICacheType
0x180069150: RtlPrefixUnicodeString
0x18009FB10: ZwFreeVirtualMemory
0x1800D3590: LdrpInitializeExceptionTable
0x180085BE0: RtlNumberGenericTableElements
0x180008630: RtlpValidateContextFlags
0x18009F7F0: ZwCallbackReturn
0x180067DD0: LdrpFreeLoadContextOfNode
0x1800FC0F4: Normalization__AppendDecomposedChar
0x18009FD30: NtOpenThreadTokenEx
0x18006A300: TpCheckTerminateWorker
0x18003A2D0: RtlEqualPrefixSid
0x1800A1540: ZwGetMUIRegistryInfo
0x180122410: "RtlpHpAppCompatEnablePaddingAndL" ??_C@_1GG@PEPDLAMB@?$AAR?$AAt?$AAl?$AAp?$AAH?$AAp?$AAA?$AAp?$AAp?$AAC?$AAo?$AAm?$AAp?$AAa?$AAt?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAP?$AAa?$AAd?$AAd?$AAi?$AAn?$AAg?$AAA?$AAn?$AAd?$AAL@
0x1800526F0: TppTimerQueueExpiration
0x1800229A0: RtlpHpSegLfhExtendContext
0x180099654: "__cdecl wctomb_s_l" _wctomb_s_l
0x180033B60: LdrpGetRcConfig
0x1800CF83C: LdrpDereferenceEnclave
0x1800CFC74: LdrpInitializeEnclaves
0x18008F758: "__cdecl invalid_parameter" _invalid_parameter
0x1800A1EA0: NtQueryDirectoryFileEx
0x180095340: wcscat
0x1800D65DC: LdrpIsVerifierActivationFilterMatched
0x18004AFF0: RtlpFindActivationContextSection_CheckParameters
0x180164308: DataLoadLockCount
0x1800585C0: RtlpHpVaMgrRangeFind
0x1800CEC10: DbgUiConvertStateChangeStructure
0x180083BD0: WinSqmEndSession
0x18006FDD4: RtlpQuerySecurityDescriptor
0x180083524: NormBuffer__Append
0x180037AB0: LdrUnloadDll
0x1800F6980: RtlRegisterSecureMemoryCacheCallback
0x1800A04A0: NtAdjustGroupsToken
0x1800A1F20: NtQueryFullAttributesFile
0x18012BE40: FatalUserCallbackException
0x18012EF10: "AVRF: Chaining (%ws: %s) to %ws " ??_C@_0CB@OMNEILAK@AVRF?3?5Chaining?5?$CI?$CFws?3?5?$CFs?$CJ?5to?5?$CFws?6@
0x1800A0980: ZwCancelTimer2
0x180056BB0: LdrUnloadAlternateResourceModule
0x180166430: TppPoolpGlobalPool
0x180050B70: TppCallbackEpilog
0x18011DD98: "__cdecl _real@3c7a2b7f222f65e0" __real@3c7a2b7f222f65e0
0x180084370: TpSetPoolMaxThreadsSoftLimit
0x180059DE0: DbgPrint
0x1800A1520: ZwGetDevicePowerState
0x18012BE80: LoadFailureOperational
0x180075818: LdrpFindOrPrepareLoadingModule
0x180166510: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUmgwooUwzbglmzUlyquivUznwGEUkxsOlyq@ntdll" __@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUmgwooUwzbglmzUlyquivUznwGEUkxsOlyq@ntdll
0x180118178: TppTimerpTaskVFuncs
0x18008F550: UninitUser32Proc
0x180137A40: "Unable to allocate page descript" ??_C@_0CE@JCGDDJJF@Unable?5to?5allocate?5page?5descript@
0x1800A2540: NtRequestPort
0x1800A1920: NtModifyBootEntry
0x18009FA90: ZwWaitForMultipleObjects32
0x180030894: RtlpInitMuiCriticalSection
0x18011EDE8: "__stdcall _real" __real@8000000000000000
0x1800A1BA0: ZwOpenRegistryTransaction
0x1800E44E8: RtlpDeleteEmptyImageFileOptionsKey
0x1800906E0: "__cdecl snprintf" _snprintf
0x180062684: EtwpGetKmRegHandle
0x18001C000: RtlSetUserValueHeap
0x18007D3B0: TpWaitForWait
0x1800207F4: RtlpHpVaMgrCtxAllocatorDereference
0x18011C9A0: "\Registry\Machine\Software\Polic" ??_C@_1HG@DLPFCGIL@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc@
0x1800885D0: RtlpSystemBootStatusRequest
0x1801227D8: "TransparentEnabled" ??_C@_1CG@KIHJPCIJ@?$AAT?$AAr?$AAa?$AAn?$AAs?$AAp?$AAa?$AAr?$AAe?$AAn?$AAt?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x1800F737C: RtlpScanProcessVirtualMemory
0x18011C1A0: "CAPTURE" ??_C@_1BC@EHCEHCFN@?$AAC?$AAA?$AAP?$AAT?$AAU?$AAR?$AAE?$AA?$AA?$AA?$AA@
0x18011C588: "LdrpResGetMappingSize Exit" ??_C@_1DG@EPEALJFE@?$AAL?$AAd?$AAr?$AAp?$AAR?$AAe?$AAs?$AAG?$AAe?$AAt?$AAM?$AAa?$AAp?$AAp?$AAi?$AAn?$AAg?$AAS?$AAi?$AAz?$AAe?$AA?5?$AAE?$AAx?$AAi?$AAt?$AA?$AA@
0x1800FEA14: RtlpTraceDatabaseAllocate
0x180002ED4: RtlpLookupPrimaryFunctionEntry
0x180123060: "MUSICLIBRARY" ??_C@_1BK@GPANBIPD@?$AAM?$AAU?$AAS?$AAI?$AAC?$AAL?$AAI?$AAB?$AAR?$AAA?$AAR?$AAY?$AA?$AA@
0x18009AA30: memcpy_s
0x18012DD70: "BreakOnInitializeProcessFailure" ??_C@_1EA@FCPODFOD@?$AAB?$AAr?$AAe?$AAa?$AAk?$AAO?$AAn?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAF?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AA?$AA@
0x1800639EC: RtlpDidUnicodeToOemWork
0x1800A0FC0: NtCreateWaitCompletionPacket
0x18009F3F0: NtdllMenuWndProc_W
0x180105AE8: RtlpLogHeapReallocateEvent
0x1800DC104: AVrfpParseVerifierDllsString
0x1800A0460: ZwAddBootEntry
0x1801216A0: XpressHighBitIndexTable
0x18012C258: "\system32" ??_C@_1BE@MCHPLFCF@?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?$AA@
0x180056178: RtlpHpVsSubsegmentCommitPages
0x1801394B8: "AllocatorBackTraceIndex" ??_C@_0BI@BLDENADN@AllocatorBackTraceIndex?$AA@
0x18003A3F0: RtlFindAceByType
0x180066A20: RtlpCallVectoredHandlers
0x180123310: crc32Map32_
0x180088E50: WinSqmCommonDatapointSetString
0x18008E090: RtlGetLengthWithoutTrailingPathSeperators
0x18006E5C0: RtlCheckRegistryKey
0x180132248: "#%u" ??_C@_17OGKEIBAI@?$AA?$CD?$AA?$CF?$AAu?$AA?$AA@
0x180049178: LdrpLoadDllInternal
0x180066130: RtlInsertElementGenericTable
0x18012D220: "`string'" ??_C@_1BBA@OHHIPMLA@?$AA?$CB?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$AA?$AAC?$AAS?$AAR?$AAS?$AAS?$AA?5?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?$AA?$AAL?$AAD?$AAR?$AA?5?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa@
0x1800D2DCC: LdrpGetProcApphelpCheckModule
0x1800A2400: NtRegisterThreadTerminatePort
0x1800E4900: LdrProcessRelocationBlock
0x180082C70: LdrSetDefaultDllDirectories
0x180087240: LdrProcessRelocationBlockLongLong
0x180088E50: SwitchedRtlGetVersion_Win8
0x1800F3A00: RtlpUnlockHeapManagerForCloning
0x180127F90: "Windows.Team" ??_C@_1BK@PDMFEPMG@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAT?$AAe?$AAa?$AAm?$AA?$AA@
0x18009FF70: NtAdjustPrivilegesToken
0x18011D758: "SE_InstallAfterInit" ??_C@_0BE@JFHMMJCN@SE_InstallAfterInit?$AA@
0x1800F3594: RtlpHpOverrideGCInterval
0x18008486C: LdrpInitializeImportRedirection
0x18008F060: LdrResRelease
0x1800E0B70: RtlIsActivationContextActive
0x180070A40: TppIopCallbackEpilog
0x18011FFE8: "LdrpNameToOrdinal" ??_C@_0BC@EKFCNHAB@LdrpNameToOrdinal?$AA@
0x18009F8D0: NtReplyPort
0x1800DC364: AVrfpSetProcessVerifierOptions
0x18010EA10: EtwTraceEventInstance
0x18003B6D0: RtlNewSecurityObjectEx
0x1800E6D68: CompareNamesCaseSensitive
0x18011FC78: "modf" ??_C@_04EHEDPDJG@modf?$AA@
0x180122000: "windows seven" ??_C@_1BM@KLJKCBDE@?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAs?$AAe?$AAv?$AAe?$AAn?$AA?$AA@
0x1800A0780: NtAlpcDisconnectPort
0x18001DFC0: CsrClientCallServer
0x180030340: RtlLoadString
0x1800A1C20: ZwOpenSymbolicLinkObject
0x18011CFF0: "ContainerType" ??_C@_1BM@FDCLHDIB@?$AAC?$AAo?$AAn?$AAt?$AAa?$AAi?$AAn?$AAe?$AAr?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180083110: RtlNormalizeString
0x1800E1D30: RtlGetFunctionTableListHead
0x1800A1560: NtGetNextProcess
0x180091310: "__cdecl wcslwr_s" _wcslwr_s
0x180137BD8: "]:%u" ??_C@_04KAGBCOF@?$FN?3?$CFu?$AA@
0x1800A18A0: ZwManagePartition
0x1800A0900: ZwAssociateWaitCompletionPacket
0x18011C5C0: "LdrpResGetMappingSize Enter" ??_C@_1DI@KINILAEE@?$AAL?$AAd?$AAr?$AAp?$AAR?$AAe?$AAs?$AAG?$AAe?$AAt?$AAM?$AAa?$AAp?$AAp?$AAi?$AAn?$AAg?$AAS?$AAi?$AAz?$AAe?$AA?5?$AAE?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x18006CC60: EtwpAddProviderTrackingInfo
0x180052390: RtlpGetActivationContextData
0x180118780: TppAlpcpCleanupGroupMemberVFuncs
0x18011C480: "LdrpResSearchResourceMappedFile " ??_C@_1EM@DNGKNMP@?$AAL?$AAd?$AAr?$AAp?$AAR?$AAe?$AAs?$AAS?$AAe?$AAa?$AAr?$AAc?$AAh?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAM?$AAa?$AAp?$AAp?$AAe?$AAd?$AAF?$AAi?$AAl?$AAe?$AA?5@
0x1800596F0: EtwSendNotification
0x180130E20: "SXS: Unable to enumerate assembl" ??_C@_0EI@HEHGNDM@SXS?3?5Unable?5to?5enumerate?5assembl@
0x1801099E4: RtlpHpTlLogGCScheduled
0x18011ED78: "atan2" ??_C@_05KNGEOGJB@atan2?$AA@
0x1800A2100: ZwQueryMutant
0x1800ED950: RtlRestoreSystemBootStatusDefaults
0x18011D200: "%wZ" ??_C@_17JJNMJOBL@?$AA?$CF?$AAw?$AAZ?$AA?$AA@
0x1800A1E00: ZwPulseEvent
0x18012C5AC: "*" ??_C@_01NBENCBCI@?$CK?$AA@
0x1800978B4: "__cdecl _remainder_piby2" __remainder_piby2
0x180073A50: AlpcGetHeaderSize
0x1800291CC: LdrpAllocateTlsEntry
0x18011CB70: PrivateLoggerNotificationGuid
0x1801382B0: "The instruction at %p tried to %" ??_C@_0CD@FIKGCJIL@The?5instruction?5at?5?$CFp?5tried?5to?5?$CF@
0x1800A0B00: ZwConnectPort
0x180001D60: EtwReplyNotification
0x1800356B0: RtlCultureNameToLCID
0x18005B3C4: EtwpEventWriteFull
0x18012C678: "FindResourceEx API exit" ??_C@_1DA@BIIAJEPG@?$AAF?$AAi?$AAn?$AAd?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAE?$AAx?$AA?5?$AAA?$AAP?$AAI?$AA?5?$AAe?$AAx?$AAi?$AAt?$AA?$AA@
0x1800A2580: ZwResetWriteWatch
0x180119850: "__cdecl _guard_fids_table" __guard_fids_table
0x1800A2A20: ZwSetInformationVirtualMemory
0x18009887C: "__cdecl statfp" _statfp
0x18012EA78: "VerifierFlags" ??_C@_1BM@IADMEPHN@?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x1800A2B00: ZwSetLowWaitHighEventPair
0x1800A2E00: ZwSystemDebugControl
0x18012BE00: AeSbContextUpdateEvent
0x1800A0840: ZwAlpcQueryInformationMessage
0x1800F31C0: RtlpGetExtraStuffPointerUnsafe
0x180085F48: RtlpLockStack
0x180122678: "csrsrv.dll" ??_C@_1BG@LNIDPFMN@?$AAc?$AAs?$AAr?$AAs?$AAr?$AAv?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800A04C0: ZwAdjustTokenClaimsAndDeviceGroups
0x180139840: "About to rellocate block at %p t" ??_C@_0DM@GHMIGCOM@About?5to?5rellocate?5block?5at?5?$CFp?5t@
0x1800371B0: LdrControlFlowGuardEnforced
0x1801281B8: "Large Screen" ??_C@_1BK@EALCPPPI@?$AAL?$AAa?$AAr?$AAg?$AAe?$AA?5?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AA?$AA@
0x180088E30: LdrQueryModuleInfoLocalLoaderLock
0x180086290: LdrpLoadWow64
0x1800338D8: ResourceEntryBinarySearch
0x18007C344: SbpRetrieveCompatibilityManifest
0x1801389F0: "heap_failure_generic" ??_C@_0BF@KAEPDJD@heap_failure_generic?$AA@
0x18007E7C0: RtlpInitializeWnf
0x1801088F0: RtlpBreakPointHeap
0x1800A366B: RtlCallEnclaveReturn
0x18002D5B0: RtlpLoadLanguageConfigList
0x1800E7290: RtlCopyLuidAndAttributesArray
0x180131820: "SXS: %s() bad parameters: SXS: " ??_C@_0KB@NKIJHLHC@SXS?3?5?$CFs?$CI?$CJ?5bad?5parameters?3?6SXS?3?5?5@
0x1800CEFD0: DbgUiRemoteBreakin
0x18009B4F0: wcstok_s
0x180085D1C: RtlpInsertUCRBlock
0x18012C538: "LdrResolveDelayLoadedAPI" ??_C@_0BJ@GELFLPEE@LdrResolveDelayLoadedAPI?$AA@
0x1800A0A60: NtCompareObjects
0x180057860: RtlAddGrowableFunctionTable
0x1800EC978: RtlLengthCurrentClearRunForwardEx
0x180128530: LeapYearDayToMonth
0x180022E50: RtlUnsubscribeWnfStateChangeNotification
0x18012B1D0: "\Registry\MACHINE\SYSTEM\Current" ??_C@_1II@NNAIOKFM@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x180118B40: "__cdecl load_config_used" _load_config_used
0x180088630: RtlDestroyHandleTable
0x18009FCF0: ZwSetEventBoostPriority
0x1800D98E0: RtlSetProcessDebugInformation
0x180139480: "AlignMask" ??_C@_09JHFGEGIN@AlignMask?$AA@
0x1800CEBE0: DbgUiContinue
0x180031344: RtlpMuiRegFreeLanguageList
0x1801231C0: "AUX" ??_C@_17CNBAFMOM@?$AAA?$AAU?$AAX?$AA?$AA@
0x180132268: "SysWOW64" ??_C@_1BC@KHIEHEMG@?$AAS?$AAy?$AAs?$AAW?$AAO?$AAW?$AA6?$AA4?$AA?$AA@
0x1800D20D4: LdrpLogNewDllLoadInternal
0x18012C3C0: "LdrpRedirectDelayloadFailure" ??_C@_0BN@FABFIBA@LdrpRedirectDelayloadFailure?$AA@
0x180090D60: "__cdecl strupr_s" _strupr_s
0x1800A1BE0: ZwOpenSemaphore
0x180139D90: "RtlpGetBitState(LookupTable, (UL" ??_C@_0EM@FJLCOGDC@RtlpGetBitState?$CILookupTable?0?5?$CIUL@
0x18010DAA4: RtlpHpSegReportPageRange
0x18011FCAC: "_y1" ??_C@_03NAKIGLHK@_y1?$AA@
0x1801019B0: "__cdecl RtlMuiRegAddLIPParent" _RtlMuiRegAddLIPParent
0x18011DDE0: "__cdecl _real@3fdca6be4c993b3c" __real@3fdca6be4c993b3c
0x18001C21C: RtlpGetExtraStuffPointer
0x180083190: RtlpNormalizeStringWorker
0x18004C8C8: RtlpInsertInvertedFunctionTableEntry
0x180002A50: RtlAddRefMemoryStream
0x18005296C: TppPHDelete
0x180109894: RtlHpInitializeHeapManager
0x180139FD8: LoadMUIDllGuid
0x18008D220: RtlRemovePrivileges
0x1800F17D0: RtlIoDecodeMemIoResource
0x180041B8C: LdrpCheckForRetryLoading
0x18008AE90: RtlAreBitsClear
0x18007897C: RtlULongToUShort
0x180065AEC: TppInitializeTimerQueue
0x18011CD00: "\Sessions" ??_C@_1BE@GBAFMKEO@?$AA?2?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x180165FD4: LdrpUnloadIndexEx
0x18003DCA0: RtlDosPathNameToRelativeNtPathName_U
0x180137BC0: ":%u.%u.%u.%u" ??_C@_0N@GKPKGDBI@?3?$CFu?4?$CFu?4?$CFu?4?$CFu?$AA@
0x180068D70: RtlInterlockedPushEntrySList
0x18012E878: "OptionValue" ??_C@_1BI@CBOLNBDL@?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x180082130: RtlAbortRXact
0x180163AC8: g_hUserDiagnosticProvider
0x1801663E8: EtwpRegistrationTable
0x180162718: RtlpDiskSpeedPolicy
0x18004CC1C: TpAdjustBindingCount
0x18009F460: NtdllSwitchWindowProc_A
0x18004909C: LdrpFindTlsEntry
0x1800A13E0: ZwFlushVirtualMemory
0x180164290: NlsMbOemCodePageTag
0x18009F620: NtdllDispatchDefWindowProc_A
0x18010C8C0: RtlpHpLfhOwnerLockUnlock
0x1800998B8: "__cdecl getbuf" _getbuf
0x180121F98: "windows threshold" ??_C@_1CE@IHKHGEAG@?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAt?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AA?$AA@
0x180090790: "__cdecl snwprintf" _snwprintf
0x18009FAB0: ZwWriteFileGather
0x1800703F4: RtlpQueryPackageIdentityAttributes
0x18012F100: "VerifierStopMessage" ??_C@_0BE@PNJPOBOE@VerifierStopMessage?$AA@
0x180022DEC: RtlpOptimizeWaitOnAddressWaitList
0x18015F630: "struct _SWITCHBRANCH_MODULE_TABLE_ENTRY g_SbTableEntry_HeapPaddingAndLFHSubsegmentCommitSwitch_RTL" ?g_SbTableEntry_HeapPaddingAndLFHSubsegmentCommitSwitch_RTL@@3U_SWITCHBRANCH_MODULE_TABLE_ENTRY@@A
0x18009FEF0: ZwQueryAttributesFile
0x18012DA40: "LdrpInitializeApplicationVerifie" ??_C@_0CJ@OIILCONN@LdrpInitializeApplicationVerifie@
0x18006A2A0: RtlExitUserThread
0x18009F470: NtdllSwitchWindowProc_W
0x18012E6F0: "LdrpReportError" ??_C@_0BA@NCJODKKL@LdrpReportError?$AA@
0x18016343C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUzkkxlnkzgUhdrgxsyzxpUxlmgvcgUolzwviUlyquivUznwGEUkivxlnkOlyq@SwitchContextLoader" __@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUzkkxlnkzgUhdrgxsyzxpUxlmgvcgUolzwviUlyquivUznwGEUkivxlnkOlyq@SwitchContextLoader
0x1800A08E0: NtAssignProcessToJobObject
0x18007E9F8: LdrEnsureMrdataHeapExists
0x1801002EC: RtlpMuiRegGetFallbackLanguageInfoByName
0x180087C90: "__cdecl filwbuf_s" _filwbuf_s
0x1800A1B40: NtOpenPartition
0x1800E6D40: RtlSecondsSince1980ToTime
0x1800A23C0: NtRecoverTransactionManager
0x180068080: VerSetConditionMask
0x1800DF870: RtlWnfCompareChangeStamp
0x180166480: RtlpTpIoDllNotificationCookie
0x18003580C: RtlpMuiRegGetStringIndexInPool
0x18012D7E0: "Loading Windows subsystem DLL "%" ??_C@_0EA@BEAPBFLL@Loading?5Windows?5subsystem?5DLL?5?$CC?$CF@
0x180178210: g_pfnSE_ShimDllLoaded
0x18010D9C4: RtlpHpSegProtect
0x18012CB28: "LdrpInitializeProcessWrapperFilt" ??_C@_0CD@DPPKFIAI@LdrpInitializeProcessWrapperFilt@
0x1800886B0: RtlDeregisterWait
0x1800A0D60: ZwCreatePartition
0x180075A40: RtlGuardCheckImageBase
0x18009F660: NtdllMDIActivateDlgProc_A
0x180065504: TppCleanupGroupAddMember
0x180044B28: LdrpInsertDataTableEntry
0x18012FF40: "SXS: %s() flags contains return_" ??_C@_0GF@HOGCPDBP@SXS?3?5?$CFs?$CI?$CJ?5flags?5contains?5return_@
0x18009B0B0: swprintf_s
0x1800A03A0: ZwAccessCheckByType
0x180178218: g_pfnSE_InstallAfterInit
0x180048B20: RtlDeactivateActivationContextUnsafeFast
0x180163860: RtlpRandomExConstantVector
0x18012E460: "LdrpInitializeTls" ??_C@_0BC@IFEGPMPJ@LdrpInitializeTls?$AA@
0x1800A08A0: NtAlpcSetInformation
0x18002D924: RtlpUpdateTEBLanguage
0x1800F1870: RtlIoEncodeMemIoResource
0x18012BEF8: "%ws\%ld\BaseNamedObjects" ??_C@_1DC@BGGFLPH@?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAl?$AAd?$AA?2?$AAB?$AAa?$AAs?$AAe?$AAN?$AAa?$AAm?$AAe?$AAd?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?$AA@
0x1800661A0: RtlInsertElementGenericTableFull
0x18009F670: NtdllMDIActivateDlgProc_W
0x180120978: "__cdecl _imp_ZwClose" __imp_ZwClose
0x180041AF0: RtlImageNtHeader
0x1800A0C80: ZwCreateKeyTransacted
0x180080964: LdrpLogDeprecatedDllEtwEvent
0x18012EA98: "HandleTraces" ??_C@_1BK@HPELFPNB@?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAT?$AAr?$AAa?$AAc?$AAe?$AAs?$AA?$AA@
0x18004E670: TppTimerpExecuteCallback
0x180061F60: RtlUTF8ToUnicodeN
0x1800834D8: NormBuffer__AppendEx
0x1801124F4: PsspCaptureImageInformation
0x180074090: RtlGetCurrentTransaction
0x1801397B8: "Just allocated block at %p for 0" ??_C@_0DJ@LMJEAJHB@Just?5allocated?5block?5at?5?$CFp?5for?50@
0x180055DF4: RtlpHpLfhSubsegmentFree
0x18012C5B0: "FindResource API entry" ??_C@_1CO@MHPIJHGD@?$AAF?$AAi?$AAn?$AAd?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?5?$AAA?$AAP?$AAI?$AA?5?$AAe?$AAn?$AAt?$AAr?$AAy?$AA?$AA@
0x180132310: RtlpBitsClearHigh
0x18015F580: RtlpLockedSectionList
0x18009E844: "__cdecl ungetwc_nolock" _ungetwc_nolock
0x1800A2EC0: NtTraceControl
0x18011FC3C: "pow" ??_C@_03JGHBODFD@pow?$AA@
0x1800E2868: LdrpSpecialCacheTypeHandle
0x180066F7C: RtlUnlockProcessHeapOnProcessTerminate
0x180138A28: "heap_failure_multiple_entries_co" ??_C@_0CJ@BPHMJNHD@heap_failure_multiple_entries_co@
0x1800A2EE0: NtTranslateFilePath
0x18009F450: NtdllMessageWindowProc_W
0x1800EC1E0: RtlFindClearRuns
0x18006D270: EtwpAddInstanceIdToLogFileName
0x180083BD0: WinSqmSetIfMinDWORD
0x1801180F8: RtlDosPathSeperatorsString
0x18012E890: "CheckAllProcessMachinePolicyEnab" ??_C@_1EI@HAKPMFOI@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAA?$AAl?$AAl?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAE?$AAn?$AAa?$AAb@
0x1800A1AA0: ZwOpenKeyTransacted
0x1800E92E8: RtlpDbgPrintCriticalSectionTimeout
0x18008B418: RtlpTpIoDllLoaded
0x1800A3820: RtlpCaptureContext2
0x18002CD74: LdrpIsReparsePoint
0x18007D308: RtlpQueueWaitBlockToSRWLock
0x180118000: RtlpSlashSlashDot
0x18013A000: "\Registry\Machine\SOFTWARE\Micro" ??_C@_1HO@HGEJKIOJ@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x180002A50: WinSqmIsOptedInEx
0x1800E1C40: vDbgPrintExWithPrefix
0x180057404: GetResourceDirectoryEntry
0x18012D9B0: "LdrShutdownProcess" ??_C@_0BD@JDIKDNHA@LdrShutdownProcess?$AA@
0x180138B28: "heap_failure_usage_after_free" ??_C@_0BO@JAFJPGLC@heap_failure_usage_after_free?$AA@
0x1800A07E0: NtAlpcOpenSenderProcess
0x180131EB8: "RTL: Acquire Exclusive Sem Timeo" ??_C@_0DE@BCAMAILI@RTL?3?5Acquire?5Exclusive?5Sem?5Timeo@
0x18012C6E0: "\Registry\Machine\Software\Micro" ??_C@_1MO@EFMEFLBD@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x1800490C4: ApiSetpSearchForApiSetHost
0x18007C1A0: RtlQueryActivationContextApplicationSettings
0x18009FE30: NtOpenSection
0x180026450: QueryRegistryValue
0x1800E6210: RtlResetRtlTranslations
0x1800E6A10: RtlGetInterruptTimePrecise
0x18009FED0: ZwDuplicateObject
0x1800A36E0: RtlpCaptureContext
0x1800F0160: RtlpSetInstallLanguage
0x180130300: "SXS: %s() found assembly informa" ??_C@_0FO@OFLDABFF@SXS?3?5?$CFs?$CI?$CJ?5found?5assembly?5informa@
0x18009F970: NtQueryInformationFile
0x18011DE20: "__cdecl _real@3ff921fb54442d18" __real@3ff921fb54442d18
0x18007699C: LdrpDropLastInProgressCount
0x1800738D0: RtlInitializeSListHead
0x1800D29D0: "__cdecl TlgDefineProvider_annotation__TlgCentennialIssueTracker_TraceLoggingProviderProv" _TlgDefineProvider_annotation__TlgCentennialIssueTracker_TraceLoggingProviderProv
0x180033CA4: RtlpHpTagReAllocateHeap
0x180165228: LdrpImportRedirectionPresent
0x1800836A4: Normalization__LoadTables
0x18009FB30: ZwImpersonateClientOfPort
0x1800A0290: ZwQuerySystemTime
0x1800A2860: NtSetDriverEntryOrder
0x1800A0E80: NtCreateSemaphore
0x18008AFD0: RtlEmptyAtomTable
0x180068A40: RtlInitStrongEnumerationHashTable
0x1800086D0: RtlRaiseException
0x180040A78: LdrpAcquireLoaderLock
0x1801007F4: RtlpMuiRegGetOrAddLangInfo
0x180111A80: PssNtDuplicateSnapshot
0x180064C80: TppWorkpExecuteCallback
0x180166310: InitRegistryInfoCritSect
0x18000D090: RtlpAllocateHeapInternal
0x180094240: strchr
0x180119478: AvrfpAPILookupCallbackName
0x1800F4B84: RtlpCopyLegacyContextAmd64
0x180128308: "Kiosk" ??_C@_1M@IAHDLIKO@?$AAK?$AAi?$AAo?$AAs?$AAk?$AA?$AA@
0x180093200: log
0x180041350: SbGetContextDetailsByGuid
0x18011FC70: "fabs" ??_C@_04ODHECPBC@fabs?$AA@
0x180139408: "HeaderValidateLength" ??_C@_0BF@DGDEANDL@HeaderValidateLength?$AA@
0x18005C980: RtlInitializeSid
0x18005F6F4: LdrpLogCFGModuleInfoTelemetry
0x18012BE90: CurDirDllLoadFailureWarning
0x180128178: "All in One" ??_C@_1BG@PIIBHLDM@?$AAA?$AAl?$AAl?$AA?5?$AAi?$AAn?$AA?5?$AAO?$AAn?$AAe?$AA?$AA@
0x180087B10: RtlpInitializeUCRIndex
0x18008AAA0: RtlAddAuditAccessObjectAce
0x18001F518: RtlpHpVaMgrCtxAllocatorFind
0x18012E3D0: "LdrpSnapModule" ??_C@_0P@LAOBGIKK@LdrpSnapModule?$AA@
0x1800462E0: RtlInitAnsiStringEx
0x18009F8B0: ZwReplyWaitReceivePort
0x1800A3E90: RtlpGuardSynchronizeRestorePc
0x180118020: RtlpDosPRNDevice
0x1800855E8: LdrpTouchThreadStack
0x180131A60: "SXS: %s() bad parameters: SXS: " ??_C@_0KG@MDPJOBJC@SXS?3?5?$CFs?$CI?$CJ?5bad?5parameters?3?6SXS?3?5?5@
0x18012C5E0: "FindResourceEx API entry" ??_C@_1DC@LIOENALI@?$AAF?$AAi?$AAn?$AAd?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAE?$AAx?$AA?5?$AAA?$AAP?$AAI?$AA?5?$AAe?$AAn?$AAt?$AAr?$AAy?$AA?$AA@
0x18011CC20: "\Registry\Machine\Software\Micro" ??_C@_1IO@LDLHHDBF@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x180090090: ispunct
0x1800A0640: NtAlpcConnectPortEx
0x18008BE80: RtlCreateHashTableEx
0x1801667E4: PossibleDeadlockReportCounter
0x180067020: RtlValidateHeap
0x1800FAAC4: ValidateStd3Range
0x1801059E8: RtlpLogHeapFreeEvent
0x1800822C0: RtlImageDirectoryEntryToData
0x1800A5500: pow
0x1800D81A0: RtlCloneUserProcess
0x1800DC298: AVrfpQueryProcessVerifierOptions
0x180166828: RtlpCrtHeapAddress
0x1800A27A0: NtSetCachedSigningLevel2
0x18003F634: LdrpFreeUnicodeString
0x1800A2060: NtQueryInstallUILanguage
0x18011D6D8: "SE_GetProcAddressForCaller" ??_C@_0BL@OEJMHOGE@SE_GetProcAddressForCaller?$AA@
0x180131B28: " Language:" ??_C@_1BG@FOIANHHB@?$AA?5?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AA?3?$AA?$AA@
0x180085420: RtlpGetNameFromLangInfoNode
0x1800E6EE8: ComputeNameLength
0x1800EDBC8: RtlpGetSetBootStatusData
0x1800EB170: RtlpValidRelativeAttribute
0x18004CFF0: RtlInitializeCriticalSectionEx
0x180014600: RtlpFreeHeap
0x18003CB80: RtlpIdnToUnicodeWorker
0x18009FE10: NtQuerySystemInformation
0x1801180E8: RtlpDosCOMDevice
0x18007A080: RtlInitializeBitMap
0x1800A0760: ZwAlpcDeleteSecurityContext
0x1800A25E0: ZwRevertContainerImpersonation
0x1800DEF7C: HashStringToDwordCaseInsensitiveLen
0x1800925D0: cos
0x1800881B0: TpCallbackSetEventOnCompletion
0x1801383D0: "If this bug ends up in the shipp" ??_C@_0FC@EAFCLJDE@If?5this?5bug?5ends?5up?5in?5the?5shipp@
0x1800DF71C: RtlResetStackOverflow
0x1800E0890: RtlZombifyActivationContext
0x18012C490: "LdrpWriteBackProtectedDelayLoad" ??_C@_0CA@OFEFHJLM@LdrpWriteBackProtectedDelayLoad?$AA@
0x180132038: "undeleted critical section in fr" ??_C@_0CL@DMEPGNJH@undeleted?5critical?5section?5in?5fr@
0x18007C520: RtlQueryImageFileExecutionOptions
0x180106CB8: RtlDebugAllocateHeap
0x1800493E0: LdrpFastpthReloadedDll
0x180071EBC: EtwpRegistrationCompare
0x1800D7760: RtlQueryInterfaceMemoryStream
0x18012D478: "Failed to allocate the system di" ??_C@_0CM@MLMABMB@Failed?5to?5allocate?5the?5system?5di@
0x18012EEE0: "AVRF: Checking %ws for duplicate" ??_C@_0CN@EFLNMJDI@AVRF?3?5Checking?5?$CFws?5for?5duplicate@
0x180094A80: strstr
0x180118198: TppWaitpTaskVFuncs
0x1800A2140: NtQueryOpenSubKeysEx
0x18011FCE4: "__cdecl _lconv_static_W_decimal" __lconv_static_W_decimal
0x18016684C: g_dwLastErrorToBreakOn
0x180162790: RtlpUnloadEventTraceExNumber
0x1800F2128: RtlSetHeapDebuggingInformation
0x180164328: RtlpDllSearchPath
0x1800A4151: RtlpExecuteUmsThread
0x1800FCCD0: RtlUnhandledExceptionFilter2
0x1801642E8: LoadAsDataTable
0x18012E9D0: "VirtualAlloc" ??_C@_1BK@OFMFMHJP@?$AAV?$AAi?$AAr?$AAt?$AAu?$AAa?$AAl?$AAA?$AAl?$AAl?$AAo?$AAc?$AA?$AA@
0x180127F50: "Windows.Mobile" ??_C@_1BO@IELJKNCO@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAM?$AAo?$AAb?$AAi?$AAl?$AAe?$AA?$AA@
0x1800280D0: LdrpInitializeTls
0x180055198: RtlpHpVsChunkCoalesce
0x18009FFF0: NtQueueApcThread
0x180122658: "ENTER" ??_C@_05EMNIMLKD@ENTER?$AA@
0x18009F690: NtdllFilteredProcessRedirectingWndProc_W
0x1800F9104: RtlpMatchUserLanguage
0x180087BF0: RtlpCapChkTelemetryRunOnce
0x1800A0360: NtCancelTimer
0x180088E40: RtlDecompressFragmentNS
0x180165B18: CsrReadOnlySharedMemorySize
0x1800227AC: RtlpHpLargeAllocSetExtraPresent
0x18012FF00: "RtlpFindActivationContextSection" ??_C@_0DB@IPHPAHEM@RtlpFindActivationContextSection@
0x1800280AC: LdrpCalcAllocSize
0x18008F280: LdrAddDllDirectory
0x1801281D8: "Head Mounted Display" ??_C@_1CK@HJEBELMK@?$AAH?$AAe?$AAa?$AAd?$AA?5?$AAM?$AAo?$AAu?$AAn?$AAt?$AAe?$AAd?$AA?5?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AA?$AA@
0x18003CAD0: RtlIdnToUnicode
0x18007E110: RtlpNtQueryValueKey
0x18008FF70: isalpha
0x18007ACD0: RtlDestroyQueryDebugBuffer
0x180137BD0: "%%%u" ??_C@_04MLNOPOCC@?$CF?$CF?$CFu?$AA@
0x1800F4938: ChkSum
0x180012480: RtlFreeHeap
0x1800A1240: NtEnumerateBootEntries
0x18011F2E8: "__cdecl _real@3e6efa39ef35793c" __real@3e6efa39ef35793c
0x1801060D8: RtlpLogHeapValidateEvent
0x180042AB0: RtlDosSearchPath_Ustr
0x180089F50: PssNtFreeWalkMarker
0x18009FCD0: ZwTerminateProcess
0x180071C20: RtlRunOnceInitialize
0x1800F6F58: RtlpPushPageDescriptor
0x1800251AC: RtlpWow64ThunkEnvironment32To64
0x180163E02: RtlpForceCSToUseEvents
0x1800A02A0: NtWaitForMultipleObjects
0x180093F00: sqrt
0x180120960: "__cdecl _imp_NtClose" __imp_NtClose
0x180166488: VSMEnclaveProvidersRegistered
0x18011F2F8: "__cdecl _real@3f62492307f1519f" __real@3f62492307f1519f
0x18009FD70: NtQueryPerformanceCounter
0x180166030: RtlpNumberOfProtectedHeaps
0x1800A1820: NtLockVirtualMemory
0x180083B40: RtlQueryProtectedPolicy
0x18012D5F0: "Initializing the current directo" ??_C@_0EI@EJGAFKBF@Initializing?5the?5current?5directo@
0x1800FB0A4: RtlDoesNameContainWildCards
0x1800DE798: WerpAllocateAndInitializeSid
0x1800EDE20: RtlQueryDynamicTimeZoneInformation
0x180094D70: strtoul
0x180163450: g_hPrivLoggerNotificationProvider
0x180073AC0: RtlAllocateActivationContextStack
0x1800EBA10: RtlUpcaseUnicodeStringToAnsiString
0x18011CA28: "\REGISTRY\USER\" ??_C@_1CA@BAGEJGFP@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAU?$AAS?$AAE?$AAR?$AA?2?$AA?$AA@
0x18008A7BC: TppQueueRemoveHead
0x180088D50: AlpcRundownCompletionList
0x1800034F0: RtlpGetLegacyContextLength
0x180084BC0: EtwpGetMaxLogger
0x18004CED0: RtlDeleteCriticalSection
0x180098514: "__cdecl umatherr" _umatherr
0x180072CA0: RtlpEnsureBufferSize
0x180056EEC: LdrpRecordUnloadEvent
0x18010C224: RtlpHpExtrasAppend
0x180073FA4: LdrpCleanupThreadTlsData
0x18008764C: AVrfDllLoadNotification
0x180137D74: "en" ??_C@_15MNPNEAIF@?$AAe?$AAn?$AA?$AA@
0x1800875E4: LdrpCorProcessImports
0x1800A3180: DebugPrint
0x180178280: LdrpMrdataHeapUnprotected
0x1800308F4: RtlpMuiRegDupLanguageList
0x180131C18: "MitigationAuditOptions" ??_C@_1CO@GNDGOBAE@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAA?$AAu?$AAd?$AAi?$AAt?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x18000DC20: RtlpLowFragHeapAllocFromContext
0x180123200: "Kernel-ProductInfoLegacyMapping" ??_C@_1EA@KEFFBOME@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?9?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAI?$AAn?$AAf?$AAo?$AAL?$AAe?$AAg?$AAa?$AAc?$AAy?$AAM?$AAa?$AAp?$AAp?$AAi?$AAn?$AAg?$AA?$AA@
0x180138D20: XpressHashFunction
0x1800DFB08: RtlpWnfETWEventSubscribe
0x18012BED0: "\BaseNamedObjects" ??_C@_1CE@NPBNEBGN@?$AA?2?$AAB?$AAa?$AAs?$AAe?$AAN?$AAa?$AAm?$AAe?$AAd?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?$AA@
0x1800A2880: ZwSetEaFile
0x18001A420: RtlpHpSegLfhVsDecommit
0x180137828: "(LONG)FreeEntry->Size > 1" ??_C@_0BK@JLAHADFN@?$CILONG?$CJFreeEntry?9?$DOSize?5?$DO?51?$AA@
0x18007D4D0: RtlAreAllAccessesGranted
0x18004EFC0: AlpcGetMessageFromCompletionList
0x1800F5708: RtlpAllocateHeapRaiseException
0x180130D80: "RtlpLocateActivationContextSecti" ??_C@_0GF@KJOPMKPI@RtlpLocateActivationContextSecti@
0x1800A2D40: ZwSinglePhaseReject
0x18009FC30: ZwSetInformationFile
0x18002DA20: RtlpMuiRegLoadRegistryInfo
0x18011C738: "LdrResGetRCConfig Enter" ??_C@_1DA@KKODPNBO@?$AAL?$AAd?$AAr?$AAR?$AAe?$AAs?$AAG?$AAe?$AAt?$AAR?$AAC?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?5?$AAE?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x1801663F8: EtwpProvLock
0x18010CE78: RtlpHpLargeReAlloc
0x1800A1D40: ZwPrepareEnlistment
0x18007B270: TpAlpcRegisterCompletionList
0x180128010: "Windows.Holographic" ??_C@_1CI@BHEEPMLA@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAH?$AAo?$AAl?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAi?$AAc?$AA?$AA@
0x18008CA74: RtlpSysVolCheckOwnerAndSecurity
0x1800A1900: ZwMapViewOfSectionEx
0x18012EDC0: "AVRF: provider %ws did not initi" ??_C@_0DC@BMCLHNHH@AVRF?3?5provider?5?$CFws?5did?5not?5initi@
0x18008BE90: RtlApplyRXact
0x180165AA0: LdrpLoaderLockAcquisitionCount
0x1800E6CB0: RtlGetTickCount
0x180165370: g_pShimEngineModule
0x1800CF3C0: LdrLoadEnclaveModule
0x180087F20: RtlFindLeastSignificantBit
0x18004C560: LdrInitSecurityCookie
0x18011EE70: "__cdecl _real@3f2a01a019e83e5c" __real@3f2a01a019e83e5c
0x18011ED98: "__cdecl _real@3fb70c3192d751c2" __real@3fb70c3192d751c2
0x180027FF0: RtlGetFullPathName_U
0x180138AE0: "heap_failure_invalid_argument" ??_C@_0BO@KFIGAEPF@heap_failure_invalid_argument?$AA@
0x1801652C0: LdrpDetourExist
0x18011EE80: "__cdecl _real@3f81111111110bb3" __real@3f81111111110bb3
0x18012C880: "LdrDeleteEnclave" ??_C@_0BB@LAJKEFGI@LdrDeleteEnclave?$AA@
0x18009FC70: ZwAccessCheckAndAuditAlarm
0x18012E750: "\microsoft.system.package.metada" ??_C@_1FO@KIMINELN@?$AA?2?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?4?$AAp?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AA?4?$AAm?$AAe?$AAt?$AAa?$AAd?$AAa@
0x18010A370: RtlpWalkLFHBlock
0x180061BE8: XpressBuildHuffmanEncodings
0x180103D80: RtlpHpPerHeapStackTraceInitialize
0x180056430: RtlpHpLfhSubsegmentDecBlockCounts
0x1800FB920: CanComposeHangul
0x1800A1C80: ZwOpenTransaction
0x180072A70: RtlLengthSecurityDescriptor
0x18003E5B0: TpTimerOutstandingCallbackCount
0x1801322B0: "\SyCHPE32\" ??_C@_1BG@GIOECHMA@?$AA?2?$AAS?$AAy?$AAC?$AAH?$AAP?$AAE?$AA3?$AA2?$AA?2?$AA?$AA@
0x180130A40: "SXS: %s() - Caller passed meanin" ??_C@_0FB@JFJNJHFC@SXS?3?5?$CFs?$CI?$CJ?5?9?5Caller?5passed?5meanin@
0x1800F6BF4: RtlpGetHeapBlock
0x18006BC74: EtwpFindRegistration
0x180109DF0: RtlpGetFirstBlockAddress
0x1800A1D00: NtPrePrepareEnlistment
0x180030FA8: RtlpSetProcUserMachineLangList
0x1800D9B10: RtlpCopyRemoteDebugInformation
0x1800D2D8C: LdrpDoDebuggerBreak
0x1800A09C0: NtCommitComplete
0x1800D8600: RtlDeNormalizeProcessParams
0x1800A0B20: ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter
0x180052FA8: EtwpInsertRegistration
0x1800A1CC0: ZwPlugPlayControl
0x1800FB040: RtlReportFatalFailure
0x1800A0BA0: ZwCreateEnclave
0x18012EFC8: "AVRF: internal error: New thunk " ??_C@_0DC@OBKHLHPO@AVRF?3?5internal?5error?3?5New?5thunk?5@
0x1800673D0: RtlUnlockHeap
0x1800A3990: RtlRestoreContext
0x1800A1660: NtInitializeNlsFiles
0x180021490: RtlpHpVaMgrCtxFree
0x1800538A4: RtlpHpSegPageRangeSplit
0x18009F770: NtWorkerFactoryWorkerReady
0x180095B38: "__cdecl _except_validate_jump_buffer" __except_validate_jump_buffer
0x180104750: RtlpHpStackTraceDisable
0x180064E40: RtlAnsiCharToUnicodeChar
0x18012BDA0: LoaderFatalErrorThread
0x180139388: "DeCommitFreeBlockThreshold" ??_C@_0BL@BPDEMIFC@DeCommitFreeBlockThreshold?$AA@
0x180107B74: RtlDebugQueryTagHeap
0x18009FC50: ZwMapViewOfSection
0x18011C220: "\Windows" ??_C@_1BC@HIBBLOLI@?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?$AA@
0x18007BEB8: RtlpMuiRegGetInstalledLangInfoIndex
0x18008AA50: RtlAddAccessDeniedObjectAce
0x18008FBC0: LdrpValidateUserCallTargetES
0x1800D90C0: RtlDeCommitDebugInfo
0x18011C530: "LdrpResSearchResourceInsideDirec" ??_C@_1FG@FACOPODK@?$AAL?$AAd?$AAr?$AAp?$AAR?$AAe?$AAs?$AAS?$AAe?$AAa?$AAr?$AAc?$AAh?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAI?$AAn?$AAs?$AAi?$AAd?$AAe?$AAD?$AAi?$AAr?$AAe?$AAc@
0x180043F68: RtlpCheckPseudoEnvironmentVariable
0x180130A98: "SXS: %s() - caller asked for unk" ??_C@_0DM@BMJPCFGH@SXS?3?5?$CFs?$CI?$CJ?5?9?5caller?5asked?5for?5unk@
0x1800A0CC0: NtCreateLowBoxToken
0x180083BD0: WinSqmIncrementDWORD
0x18002C2AC: RtlpResUltimateFallbackInfo
0x180021F2C: RtlpHpSegMgrRelease
0x1800E6AC0: RtlGetMultiTimePrecise
0x18004FF30: RtlReleaseSRWLockExclusive
0x180110ED0: RtlCancelTimer
0x18013A360: "Mutant" ??_C@_1O@FBKOCLFA@?$AAM?$AAu?$AAt?$AAa?$AAn?$AAt?$AA?$AA@
0x180074140: RtlxRemoveInvertedFunctionTable
0x18012C160: "UEFI" ??_C@_19BNCIOIMK@?$AAU?$AAE?$AAF?$AAI?$AA?$AA@
0x180088B30: RtlWow64EnableFsRedirectionEx
0x1800930D8: isleadbyte
0x180019618: RtlpFindEntry
0x1800774E0: ApiSetQueryApiSetPresence
0x1800EEE24: RtlpAddLanguagesToMultiSZ
0x180025280: RtlQueryEnvironmentVariable_U
0x18006DA00: EtwRegisterTraceGuidsA
0x1800032D0: RtlGetExtendedContextLength
0x1801317D0: "RtlGetAssemblyStorageRoot" ??_C@_0BK@BGLOJGHF@RtlGetAssemblyStorageRoot?$AA@
0x180138B98: "heap_failure_listentry_corruptio" ??_C@_0CC@KGNKJKHE@heap_failure_listentry_corruptio@
0x18008512C: TppUpdatePoolNodeStatus
0x1800A2B60: ZwSetSystemEnvironmentValue
0x1800071B0: LdrpSnapModule
0x18004D9F0: EtwpAllocateRegistration
0x1800FC438: Normalization__GetFirstDecomposedCharPlane0
0x180017DBC: RtlpHpSegReAlloc
0x1801193E0: RtlNtdllName
0x1800A2220: NtQuerySymbolicLinkObject
0x180139F38: "smss.exe" ??_C@_1BC@GMMNGGPN@?$AAs?$AAm?$AAs?$AAs?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18009F4F0: NtdllDialogWndProc_W
0x1800F4968: LdrVerifyMappedImageMatchesChecksum
0x18007BE80: RtlIdentifierAuthoritySid
0x1800A2F60: NtUnloadKey2
0x1800A17E0: NtLockProductActivationKeys
0x180078220: TppFreeWait
0x1800ED020: RtlBarrierForDelete
0x180030980: RtlSetThreadPreferredUILanguages
0x180042624: RtlpWin32NtNameToNtPathName
0x18011DA28: "::%hs%u.%u.%u.%u" ??_C@_0BB@JMMKNFHP@?3?3?$CFhs?$CFu?4?$CFu?4?$CFu?4?$CFu?$AA@
0x18009EC6C: RtlpLogHeapFailure
0x180082DB0: RtlpInvalidatePathCache
0x18010AA90: RtlDecompressBufferLZNT1
0x1800A29E0: NtSetInformationTransaction
0x1800E1B20: AlpcGetCompletionListMessageAttributes
0x1800EBB20: RtlUpcaseUnicodeStringToCountedOemString
0x1801230F8: "INTERNETCLIENTSERVER" ??_C@_1CK@HDNFKEDH@?$AAI?$AAN?$AAT?$AAE?$AAR?$AAN?$AAE?$AAT?$AAC?$AAL?$AAI?$AAE?$AAN?$AAT?$AAS?$AAE?$AAR?$AAV?$AAE?$AAR?$AA?$AA@
0x1800EB510: RtlExtendMemoryZone
0x180122840: "Wow64LdrpInitialize" ??_C@_0BE@KHAAOKCD@Wow64LdrpInitialize?$AA@
0x1800E9404: RtlpLogWaitForCriticalSection
0x18004FBB0: TpPostWork
0x180115374: RtlStackDbStackAdd
0x180033EF0: RtlReleaseSRWLockShared
0x180090FD4: "__cdecl vswprintf_l" _vswprintf_l
0x180084750: RtlCreateTimerQueue
0x180122690: "CsrCallServerFromServer" ??_C@_0BI@MPLEJNOH@CsrCallServerFromServer?$AA@
0x180074080: RtlSubAuthorityCountSid
0x180108918: RtlpValidateHeap
0x180058278: RtlpHpVaMgrRangeCoalesce
0x180073BE0: RtlFreeActivationContextStack
0x1800A0250: ZwOpenDirectoryObject
0x1800DD834: ReportExceptionInternal
0x1800F4A40: RtlInitWeakEnumerationHashTable
0x1800FC204: Normalization__CanCombinableCharactersCombine
0x1800D29D0: "__cdecl TlgDefineProvider_annotation__Tlgg_VsmEnclaveTraceProviderProv" _TlgDefineProvider_annotation__Tlgg_VsmEnclaveTraceProviderProv
0x18000D010: RtlAllocateHeap
0x1801397F8: "RtlReAllocateHeap" ??_C@_0BC@KCCBPNDF@RtlReAllocateHeap?$AA@
0x180130C40: "SXS: %s() - Caller passed invali" ??_C@_0EB@KIOPJLPB@SXS?3?5?$CFs?$CI?$CJ?5?9?5Caller?5passed?5invali@
0x18008C680: RtlCreateSystemVolumeInformationFolder
0x18010126C: RtlpMuiRegResizeLanguages
0x18012E690: "#%d" ??_C@_17OABLBPC@?$AA?$CD?$AA?$CF?$AAd?$AA?$AA@
0x18003E208: LdrpMapDllFullPath
0x1800FAB20: RtlInitializeContext
0x180097E14: "__cdecl errcode" _errcode
0x1800A1AE0: NtOpenKeyedEvent
0x1801663D0: RtlpRandomExInit
0x18007FDFC: LdrpReleaseTlsEntry
0x180068558: RtlUnicodeStringCbCopyStringN
0x180139948: "RtlGetUserInfoHeap" ??_C@_0BD@EKECOFIP@RtlGetUserInfoHeap?$AA@
0x180111524: StringCchCopyNW
0x18004E754: TppCleanupGroupMemberDestroy
0x1800E1B60: DbgPrintReturnControlC
0x18012E100: "LdrpDoPostSnapWork:Unable to uns" ??_C@_0IC@OIHMCJLI@LdrpDoPostSnapWork?3Unable?5to?5uns@
0x180164EB8: RtlpTimeoutDisable
0x180084F50: RtlpRemoveVectoredHandler
0x1800FED30: RtlWow64PopAllCrossProcessWork
0x180036790: RtlStringCbCopyW
0x18012FBA8: "RtlDeactivateActivationContextUn" ??_C@_0CJ@GIJFBGBH@RtlDeactivateActivationContextUn@
0x1800A0170: NtQuerySection
0x180137BE0: ":%u" ??_C@_03CNODDBJO@?3?$CFu?$AA@
0x180118350: RtlpLegacyApplicationCapabilityNames
0x1801635C8: RtlpHpEnvEnableSimulatedLargePageCommit
0x1800903F0: "__cdecl ultow" _ultow
0x18009F990: NtOpenKey
0x18012CA98: "LdrpInitializationFailure" ??_C@_0BK@EBAFJELE@LdrpInitializationFailure?$AA@
0x180166350: RtlpHpStackTrackingContext
0x1800A0210: NtQueryEvent
0x1800E73A0: RtlGetSessionProperties
0x18006665C: SwapSplayLinks
0x1800988D0: "__cdecl pow_special" _pow_special
0x18004E14C: RtlpAddWaitBlockToWaitList
0x1800A0E00: ZwCreateProfileEx
0x1800A60D0: "__cdecl _longjmp_internal" __longjmp_internal
0x18003FEA8: LdrpReportError
0x1800A17A0: NtLoadKeyEx
0x1800A2F20: ZwUnloadDriver
0x18012EAF8: "AVRF: %ws: pid 0x%X: flags 0x%X:" ??_C@_0DP@PIHFAALA@AVRF?3?5?$CFws?3?5pid?50x?$CFX?3?5flags?50x?$CFX?3@
0x18009F5F0: NtdllHkINLPCWPRETSTRUCT_W
0x1800A0030: ZwAddAtom
0x1800749C0: RtlCreateHashTable
0x18003FBE4: RtlpTpResumeImpersonation
0x180069BB0: RtlSetSaclSecurityDescriptor
0x18009F950: ZwQueryObject
0x180083BD0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18009FCB0: ZwReplyWaitReceivePortEx
0x1800E4768: RtlpQueryEafPlusModuleList
0x180093620: memcmp
0x1800018C0: RtlLargeIntegerToChar
0x1800A2900: NtSetInformationDebugObject
0x1800FEE00: RtlWow64PopCrossProcessWork
0x18011FEC0: "minkernel\ntdll\ldrredirect.c" ??_C@_0BO@IMPALJMH@minkernel?2ntdll?2ldrredirect?4c?$AA@
0x1801664A0: LdrpAdvapi32DllHandle
0x1800300A8: RtlpImageDirectoryEntryToData32
0x1800A1280: NtEnumerateSystemEnvironmentValuesEx
0x18015F008: "__cdecl pwctype" _pwctype
0x180103EE0: RtlpHpStackDbFreeRoutine
0x1800A06E0: NtAlpcCreateSecurityContext
0x1800923A0: bsearch_s
0x18011C160: "RTL: ERROR_MR_MID_NOT_FOUND is b" ??_C@_0CP@JAFLHHOF@RTL?3?5ERROR_MR_MID_NOT_FOUND?5is?5b@
0x1800E136C: ??$InsertModuleFunctions@U_IMAGE_THUNK_DATA32@@K$0IAAAAAAA@@@YAJPEAU_IMPORTTABLEP_IMPORTTABLEP_SORTED_LIST_ENTRY@@PEAXPEAU_IMAGE_NT_HEADERS64@@PEFAU_IMAGE_IMPORT_DESCRIPTOR@@@Z
0x1800A2120: NtQueryOpenSubKeys
0x1800A2960: ZwSetInformationKey
0x180128358: "Point of Service" ??_C@_1CC@HNKKPDIO@?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x180042430: RtlOpenCurrentUser
0x18012B188: EtwpOneSecond
0x1800A1060: NtDebugContinue
0x18009F5E0: NtdllHkINLPCWPRETSTRUCT_A
0x180101B80: "__cdecl RtlpMuiRegAddBaseLanguage" _RtlpMuiRegAddBaseLanguage
0x1800FE660: RtlTraceDatabaseCreate
0x1800DB978: AVrfpDllUnloadNotificationInternal
0x1801315E8: "RtlpProbeAssemblyStorageRootForA" ??_C@_0CI@FNKIDNED@RtlpProbeAssemblyStorageRootForA@
0x1800228C4: RtlpHpMetadataCommit
0x1800A1EE0: NtQueryDriverEntryOrder
0x18006B660: EtwpNotificationThread
0x18002F8BC: RtlpIsALicensedLIPLanguage
0x1801399E8: "RtlWalkHeap" ??_C@_0M@PHEMKBEG@RtlWalkHeap?$AA@
0x18010562C: RtlpLogHeapAllocateEvent
0x180081FE0: RtlAddSIDToBoundaryDescriptorEx
0x18012D750: "Locating procedure "%Z" in Windo" ??_C@_0FD@OCNDOPIA@Locating?5procedure?5?$CC?$CFZ?$CC?5in?5Windo@
0x1800F8F44: RtlpGetUserLocaleName
0x1800581DC: RtlpHpVaMgrFree
0x1800A1F40: ZwQueryInformationAtom
0x18008C120: LdrVerifyImageMatchesChecksumEx
0x180132208: "Thread is in a state in which it" ??_C@_0DP@HMPPJKDA@Thread?5is?5in?5a?5state?5in?5which?5it@
0x180067E64: LdrpFreeLoadContext
0x1800A07A0: ZwAlpcImpersonateClientContainerOfPort
0x18009F480: NtdllButtonWndProc_A
0x180166060: RtlpLowFragHeapGlobalFlags
0x18012C170: "%04x:%04x @ %08d - %s - %s: " ??_C@_0BN@MFBHLMMI@?$CF04x?3?$CF04x?5?$EA?5?$CF08d?5?9?5?$CFs?5?9?5?$CFs?3?5?$AA@
0x18008E5B0: RtlFindSetBits
0x1800F6600: RtlEnumerateGenericTableLikeADirectory
0x1800A0DC0: ZwCreateProcess
0x180090FC0: "__cdecl vswprintf" _vswprintf
0x180163474: EtwpReplySend
0x18015F560: LdrpDllNotificationList
0x18006D4C0: EtwpGetCpuSpeed
0x1800806B0: LdrpInitParallelLoadingSupport
0x180051C58: TppCancelTimer
0x1800A0560: ZwAllocateReserveObject
0x180118040: RtlpDosAUXDevice
0x180024FA0: RtlCreateEnvironmentEx
0x1800E11B0: RtlpGetAssemblyStorageMapRootLocation
0x180121100: RtlpIntegerChars
0x1800878F0: RtlEraseUnicodeString
0x18015F3F0: LdrpDllNotificationLock
0x1800A2440: ZwReleaseWorkerFactoryWorker
0x180103F80: RtlpHpStackDbLogStackDbSnapshot
0x1800A40A0: RtlGetCurrentProcessorNumber
0x1800A2A00: NtSetInformationTransactionManager
0x1801228A8: "Wow64SuspendLocalThread" ??_C@_0BI@GBGOEBBF@Wow64SuspendLocalThread?$AA@
0x180137B48: "Inspecting leaks at process shut" ??_C@_0CK@FGJCKAOL@Inspecting?5leaks?5at?5process?5shut@
0x18007CC50: RtlExtendedMagicDivide
0x180139DE0: "(ROUND_UP_TO_POWER2(Size, PAGE_S" ??_C@_0CO@HBNLODKA@?$CIROUND_UP_TO_POWER2?$CISize?0?5PAGE_S@
0x18009FD50: ZwOpenProcessTokenEx
0x18009FC90: ZwUnmapViewOfSection
0x18010F190: EtwpIncrementUmLoggerFile
0x18009F420: NtdllDefWindowProc_A
0x18011D158: szBias
0x180059840: RtlSetLastWin32Error
0x1800F29F4: RtlpCallInterceptRoutine
0x1800141D0: RtlpHpLfhSubsegmentFreeBlock
0x18004DC60: EtwNotificationRegister
0x18012CCF8: "LdrpInitShimEngine" ??_C@_0BD@NFCOMHHO@LdrpInitShimEngine?$AA@
0x180085DC4: RtlpUpdateUCRIndexInsert
0x180131BB8: "FilterFullPath" ??_C@_1BO@JOOJEFDK@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAF?$AAu?$AAl?$AAl?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x1800A1E40: NtQueryBootEntryOrder
0x18001E78C: RtlpAffinitizeSegmentInfoForBucket
0x1800FAC50: RtlRemoteCall
0x18001C874: RtlpHpLfhBucketActivate
0x18010F264: EtwpRegisterPrivateSession
0x180166470: RtlpTpIoRegisteredLock
0x180087760: LdrFastFailInLoaderCallout
0x1800A3000: ZwUnsubscribeWnfStateChange
0x18006EF98: RtlpQueryRegistryDirect
0x1800A1DA0: NtPrivilegedServiceAuditAlarm
0x18011D0D8: szDaylightName
0x18004BF30: RtlGetNtSystemRoot
0x1800879F0: RtlDestroyMemoryZone
0x1800FAAA0: RtlIdnToNameprepUnicode
0x18011CBA8: ":" ??_C@_13EBCNDICG@?$AA?3?$AA?$AA@
0x1800953B0: wcschr
0x1800A19E0: ZwNotifyChangeSession
0x18011FCA0: "frexp" ??_C@_05GKKHEGJL@frexp?$AA@
0x1801232F8: "Crc32 Castagnoli" ??_C@_0BB@IDNEKPJL@Crc32?5Castagnoli?$AA@
0x180138AC0: "heap_failure_block_not_busy" ??_C@_0BM@MCBFAPEC@heap_failure_block_not_busy?$AA@
0x18012EAB8: "VerifierDebug" ??_C@_1BM@IPPIJOJD@?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAD?$AAe?$AAb?$AAu?$AAg?$AA?$AA@
0x1800266F8: RtlpDereferenceAtom
0x180107CC0: RtlDebugReAllocateHeap
0x1800A1FC0: ZwQueryInformationPort
0x1800FA1E0: RtlpHeapTrkLeakCallback
0x180090FA0: "__cdecl vscwprintf" _vscwprintf
0x180083BD0: RtlpWaitForCriticalSection
0x180165250: LdrpRetryQueue
0x180079460: RtlSetSecurityObject
0x180055D48: RtlpHpLfhBucketAddSubsegment
0x1800861A0: RtlQueryWnfMetaNotification
0x18011DDA8: "__cdecl _real@3c91a62633145c06" __real@3c91a62633145c06
0x180087DA8: RtlpMuiRegFreeStringPool
0x180064B7C: RealPredecessor
0x180138600: "\Registry\Machine\System\Current" ??_C@_1IO@MNHMIIKM@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x180087F70: TpDisablePoolCallbackChecks
0x1801664D8: RtlpExceptionLog2
0x1800E6430: RtlUnicodeToCustomCPN
0x1800882F0: RtlFindMostSignificantBit
0x180165000: LdrpHashTable
0x18009F7B0: NtMapUserPhysicalPagesScatter
0x180132550: "Break repeatedly, break Once, Ig" ??_C@_0FH@DEPJAKLD@Break?5repeatedly?0?5break?5Once?0?5Ig@
0x18012D098: "\KnownDlls" ??_C@_1BG@MHCCONHN@?$AA?2?$AAK?$AAn?$AAo?$AAw?$AAn?$AAD?$AAl?$AAl?$AAs?$AA?$AA@
0x18011FC38: "exp" ??_C@_03KHJOGHMM@exp?$AA@
0x180095680: wcsstr
0x180166330: RtlpLockedSectionListLock
0x1800984E0: "__cdecl set_errno_from_matherr" _set_errno_from_matherr
0x1800A3310: KiUserCallForwarder
0x180075360: RtlDowncaseUnicodeString
0x18012D858: "Finding KernelbasePostInit faile" ??_C@_0DH@CBHMKPBI@Finding?5KernelbasePostInit?5faile@
0x180072B60: RtlEncodePointer
0x180166440: RtlpTestHookInit
0x1800A2520: ZwReplyWaitReplyPort
0x1800A2AE0: NtSetLowEventPair
0x180122820: "KERNEL32.DLL" ??_C@_1BK@DBDEIDLH@?$AAK?$AAE?$AAR?$AAN?$AAE?$AAL?$AA3?$AA2?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x180128418: "Xbox One X" ??_C@_1BG@EIECPFI@?$AAX?$AAb?$AAo?$AAx?$AA?5?$AAO?$AAn?$AAe?$AA?5?$AAX?$AA?$AA@
0x1801038AC: RtlpHeapLogRangeCreate
0x1800A1C40: NtOpenThread
0x180088820: LibLoaderTelemetryInitOnce
0x1800D0340: LdrGetFailureData
0x180009A90: RtlEnterCriticalSection
0x18012F418: "WMRSendMessageString" ??_C@_1CK@BNKGAPAP@?$AAW?$AAM?$AAR?$AAS?$AAe?$AAn?$AAd?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
0x1801399A0: "RtlCompactHeap" ??_C@_0P@NCPMIHJ@RtlCompactHeap?$AA@
0x180088780: RtlConvertSRWLockExclusiveToShared
0x180166288: LdrpForkActiveLock
0x18004AE60: RtlHashUnicodeString
0x180052448: RtlpQueryInformationActivationContextBasicInformation
0x1800A1300: NtFilterToken
0x1800A2760: ZwSetBootOptions
0x180110624: RtlpTpETWCallbackEnqueue
0x18009F3E0: NtdllMenuWndProc_A
0x18006EF00: RtlpAllocDeallocQueryBuffer
0x180122178: "SwitchedRtlGetVersion_Win8" ??_C@_1DG@GJHPOFBG@?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AAe?$AAd?$AAR?$AAt?$AAl?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA_?$AAW?$AAi?$AAn?$AA8?$AA?$AA@
0x18011FC90: "_hypot" ??_C@_06MEIMCGCF@_hypot?$AA@
0x180166830: RtlpPreviousStartAddress
0x18007342C: SbpUpdateCache
0x180109FBC: RtlpIsLFHZoneAllocation
0x1800A28C0: NtSetHighWaitLowEventPair
0x180093160: iswlower
0x180026550: RtlCreateAtomTable
0x18011FC80: "ldexp" ??_C@_05CEJMAHNP@ldexp?$AA@
0x18012C0F0: "vertdll.dll" ??_C@_1BI@OIAFNAHG@?$AAv?$AAe?$AAr?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18011CEC0: RtlpRestrictedMapping
0x1801188A0: TppJobpCleanupGroupMemberVFuncs
0x1800971DC: "__cdecl wchartodigit" _wchartodigit
0x180064640: RtlInsertElementGenericTableAvl
0x1800DF888: RtlpWnfCalculateAndSetNextTimer
0x18011C3E0: "LdrpResGetResourceDirectory Ente" ??_C@_1EE@NILCEPIN@?$AAL?$AAd?$AAr?$AAp?$AAR?$AAe?$AAs?$AAG?$AAe?$AAt?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?5?$AAE?$AAn?$AAt?$AAe@
0x180122360: "Force lfh subsegments to be full" ??_C@_1LA@IMJDKNPN@?$AAF?$AAo?$AAr?$AAc?$AAe?$AA?5?$AAl?$AAf?$AAh?$AA?5?$AAs?$AAu?$AAb?$AAs?$AAe?$AAg?$AAm?$AAe?$AAn?$AAt?$AAs?$AA?5?$AAt?$AAo?$AA?5?$AAb?$AAe?$AA?5?$AAf?$AAu?$AAl?$AAl@
0x180043D60: RtlQueryEnvironmentVariable
0x180080BB0: RtlAcquireReleaseSRWLockExclusive
0x1800A21C0: ZwQuerySecurityObject
0x180118B18: "__cdecl _initiallocalestructinfo" __initiallocalestructinfo
0x1800D6DC8: LdrpCompleteProcessCloning
0x180163E18: NlsUnicodeToMbAnsiData
0x18008ED20: RtlDeleteRegistryValue
0x1800A03E0: NtAccessCheckByTypeResultListAndAuditAlarm
0x18009FBD0: ZwOpenThreadToken
0x1800A2C60: ZwSetTimerResolution
0x1800A31F7: ExpInterlockedPopEntrySListFault
0x18012D340: "DebugProcessHeapOnly" ??_C@_1CK@PBPNFNEK@?$AAD?$AAe?$AAb?$AAu?$AAg?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAH?$AAe?$AAa?$AAp?$AAO?$AAn?$AAl?$AAy?$AA?$AA@
0x18012F470: "\Registry\Machine\Software\Micro" ??_C@_1KA@BFMIEKLO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x1800A2AC0: NtSetLdtEntries
0x180023050: RtlpWnfNotificationThread
0x1800FB28C: RtlpIsNameInExpressionPrivate
0x180023168: RtlpWnfProcessCurrentDescriptor
0x180095970: wcstoul
0x1800F8A74: RtlFnToFxFrame
0x180089918: RtlFxToFnFrame
0x180084DB0: EtwpRegisterGuidsApiCallback
0x180139F70: "lsass.exe" ??_C@_1BE@FPBDCMAD@?$AAl?$AAs?$AAa?$AAs?$AAs?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1800756DC: "__cdecl LdrpInitialize" _LdrpInitialize
0x1801217A0: SessionNotificationGuid
0x18008CF30: RtlpCreateUserProcess
0x180109930: RtlpHpParametersVerify
0x18002E670: RtlpQueryDefaultUILanguage
0x18008BE10: RtlpNtCreateKey
0x1800A06C0: ZwAlpcCreateSectionView
0x18011EDB0: "__cdecl _real@3fc99992b9802d7d" __real@3fc99992b9802d7d
0x18004CC7C: TppWorkWait
0x180166478: RtlpTpIoTreeLock
0x18012E1A0: "Probing for the manifest of DLL " ??_C@_0EC@CEPGMLAL@Probing?5for?5the?5manifest?5of?5DLL?5@
0x1800A2420: ZwReleaseKeyedEvent
0x180075450: RtlNtStatusToDosErrorNoTeb
0x1801220F0: "Allows getting the 6.2 version o" ??_C@_1IC@FIFJLKP@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAs?$AA?5?$AAg?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AA6?$AA?4?$AA2?$AA?5?$AAv?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAo@
0x1800A3797: CcSaveNVContext
0x18007A418: RtlpHpHeapReportCounters
0x180178270: LdrpMrdataHeap
0x180020CD4: RtlpWalkHeapInternal
0x1800A0740: NtAlpcDeleteSectionView
0x1800A28E0: ZwSetIRTimer
0x18011104C: RtlpTpIoDllProcessUnloads
0x180103814: RtlpGetModifiedProcessCookie
0x180165360: FlsBitMap
0x180081174: LdrpLogLoadFailureEtwEvent
0x180104850: RtlpHpStackTraceEtwCallback
0x180029AE0: RtlSetBits
0x18012B2F0: RtlProtectedAccess
0x1800CE550: RtlDisableThreadProfiling
0x1800437CC: RtlpComputeLangListCheckSum
0x180071DA0: RtlGetThreadWorkOnBehalfTicket
0x1800E9B00: RtlAddResourceAttributeAce
0x18005F8DC: LdrpResReportResourceAccessInternal
0x180098898: "__cdecl mbstrlen" _mbstrlen
0x180166538: g_disableEscalation
0x180130640: "SXS: %s() found assembly informa" ??_C@_0HP@GMBLBKCE@SXS?3?5?$CFs?$CI?$CJ?5found?5assembly?5informa@
0x1800A0520: NtAlertThreadByThreadId
0x180022DD0: RtlWakeAddressSingle
0x1800776FC: RtlpQueryExtendedHeapInformation
0x180110AEC: TppETWTimerExpiration
0x1800CEAD0: RtlDosLongPathNameToRelativeNtPathName_U_WithStatus
0x180009E60: RtlInitUnicodeStringEx
0x180165300: TlsBitMap
0x180021294: RtlpHpVsChunkSize
0x18008D200: RtlNormalizeProcessParams
0x1801200F8: "RTL: Re-Waiting " ??_C@_0BB@MGOBPNHN@RTL?3?5Re?9Waiting?6?$AA@
0x180132B00: "\Registry\Machine\System\Current" ??_C@_1IG@EEKPLJNI@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x18015F9A8: RtlpProtectedHeapsList
0x18003538C: LdrpLangFallbackListAppendNode
0x1801228E4: "\/" ??_C@_15MNCACJLI@?$AA?2?$AA?1?$AA?$AA@
0x180018FEC: RtlpHpAllocVA
0x1800A10C0: NtDeleteDriverEntry
0x180035D60: RtlIntegerToUnicode
0x1800A2920: ZwSetInformationEnlistment
0x1800A13A0: NtFlushKey
0x18012E948: "RegisterEventSourceW" ??_C@_0BF@FNOHIELI@RegisterEventSourceW?$AA@
0x1800A46C0: XSaveCHelper
0x180108740: RtlDebugWalkHeap
0x1800A11E0: NtDisplayString
0x1800A46E0: XSaveSHelper
0x18001C788: RtlpHpStackTraceHeapDestroy
0x180123170: "\\?\UNC\" ??_C@_1BC@NAEGMMKI@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AAU?$AAN?$AAC?$AA?2?$AA?$AA@
0x18008FF30: "__cdecl _toascii" __toascii
0x1800DA948: AVrfInitializeVerifier
0x1800A14E0: NtGetCurrentProcessorNumber
0x1800A0070: NtQueryVolumeInformationFile
0x180104448: RtlpHpStackTraceAllocFindMapping
0x180076A90: RtlCharToInteger
0x18008BD40: RtlNumberOfClearBits
0x180122480: "Use the heaps default app compat" ??_C@_1FG@IGGKDKML@?$AAU?$AAs?$AAe?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAh?$AAe?$AAa?$AAp?$AAs?$AA?5?$AAd?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?5?$AAa?$AAp?$AAp?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAa?$AAt@
0x1801212A0: RtlCrc32Table
0x180088E80: "void * __ptr64 __cdecl SbFilterProcedure_RTL(void * __ptr64)" ?SbFilterProcedure_RTL@@YAPEAXPEAX@Z
0x18011C318: "LdrResSearchResource Exit" ??_C@_1DE@DFJEAAGE@?$AAL?$AAd?$AAr?$AAR?$AAe?$AAs?$AAS?$AAe?$AAa?$AAr?$AAc?$AAh?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?5?$AAE?$AAx?$AAi?$AAt?$AA?$AA@
0x18011D890: "\Registry\Machine\System\Current" ??_C@_1IA@GPBHBJN@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1800A2360: NtReadOnlyEnlistment
0x180083674: NormalizationList__Lookup
0x180041D3C: LdrpMapDllNtFileName
0x180118510: RtlpWin32NtUncRootSlash
0x1800FD520: RtlStdInitializeStackDatabase
0x180093700: qsort
0x180090620: "__cdecl memccpy" _memccpy
0x18011CA18: ".mui" ??_C@_19BLMODFHL@?$AA?4?$AAm?$AAu?$AAi?$AA?$AA@
0x1800A1A40: ZwOpenIoCompletion
0x1800EBE20: RtlClearBit
0x1801217B0: NullGuid
0x18003DEA0: LdrpFindExistingModule
0x1801782C4: RtlpProtectedPoliciesTotalCount
0x1800D2930: VsmEnclaveTelemetryInitOnce
0x1800A1780: NtLoadKey2
0x180071148: RtlpResolveAssemblyStorageMapEntry
0x180131DD0: "TargetPath" ??_C@_1BG@MOOPBIGC@?$AAT?$AAa?$AAr?$AAg?$AAe?$AAt?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x1800033C0: RtlWow64GetCurrentCpuArea
0x18009F630: NtdllDispatchDefWindowProc_W
0x1800011AC: RtlCompressBufferXpressLzStandard
0x180122F70: "CONTACTS" ??_C@_1BC@EFOJIMEP@?$AAC?$AAO?$AAN?$AAT?$AAA?$AAC?$AAT?$AAS?$AA?$AA@
0x180122BA0: "\Registry\Machine\System\Current" ??_C@_1LA@PLBLPNML@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1801635E0: RtlpAffinityState
0x180105760: RtlpLogHeapContractEvent
0x18003DD8C: LdrMapAndVerifyResourceFile
0x180088E50: WinSqmCommonDatapointSetStreamEx
0x1800A2FC0: NtUnlockVirtualMemory
0x180042790: RtlAppendUnicodeStringToString
0x180026560: RtlCreateAtomTableEx
0x180132C68: "VirtualQuery Failed 0x%p %x " ??_C@_0BN@BPEILKGA@VirtualQuery?5Failed?50x?$CFp?5?$CFx?6?$AA@
0x180106720: RtlpReportHeapFailure
0x18005607C: RtlpHpLfhSubsegmentFindEmptyUnits
0x1800E4FF4: LdrpResMapFile
0x180166420: TppPoolpSerializedPool
0x180163850: RtlpHeapInvalidBreakPoint
0x1800EF6D0: RtlpCompareConfigNodeWithSpec
0x180105EEC: RtlpLogHeapSubSegmentFreeCached
0x180023BBC: RtlpDecrementWnfSerializationGroup
0x180062A58: RtlpTimeFieldsToTimeNoLeapSeconds
0x18011C0A0: "OverlayPackages" ??_C@_1CA@OFGCFIP@?$AAO?$AAv?$AAe?$AAr?$AAl?$AAa?$AAy?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
0x18007E644: RtlpLoadNlsData
0x1800A35C1: RtlEnclaveCallDispatchReturn
0x1800E15D8: ImportTablepInsertFunctionSorted
0x180078D74: RtlpOptimizeSRWLockList
0x180166328: gBaseAddress
0x1800A00D0: ZwApphelpCacheControl
0x180083BD0: WinSqmAddToAverageDWORD
0x1800A1E20: ZwQueryAuxiliaryCounterFrequency
0x18012DF80: "Could not validate the crypto si" ??_C@_0DF@JIECDPGP@Could?5not?5validate?5the?5crypto?5si@
0x18012ED18: "AVRF: cannot find an entry point" ??_C@_0DE@MFELDNIC@AVRF?3?5cannot?5find?5an?5entry?5point@
0x1800DF5C0: WerpEscalationIsWMRSendStringSet
0x18009F810: ZwReadFile
0x18001D20C: RtlpPerformHeapMaintenance
0x18011DDC0: "__cdecl _real@3fa3f197f1e85ed9" __real@3fa3f197f1e85ed9
0x18011112C: RtlTpETWCallbackDequeue
0x180139710: "May not destroy the process heap" ??_C@_0CI@EKPJIMJA@May?5not?5destroy?5the?5process?5heap@
0x1801379F4: "Error " ??_C@_06HPIHNGNL@Error?6?$AA@
0x1801322C8: "SyCHPE32" ??_C@_1BC@OPEDGAKD@?$AAS?$AAy?$AAC?$AAH?$AAP?$AAE?$AA3?$AA2?$AA?$AA@
0x180104D74: RtlpHpStackTraceSerialize
0x18012F548: "DontIncludeProgramFiles" ??_C@_1DA@BIDALBLD@?$AAD?$AAo?$AAn?$AAt?$AAI?$AAn?$AAc?$AAl?$AAu?$AAd?$AAe?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x180165B30: CsrPortHeap
0x18012BEC0: HeapSnapshotSnap
0x180088E70: RtlpTargetCompare
0x1800A0B80: NtCreateDirectoryObjectEx
0x180116558: RtlpStackDbSegmentRemoveRef
0x180132D50: crc64Mult_
0x180088E60: SwitchedRtlGetVersion_WinBLUE
0x180037B58: LdrpDecrementModuleLoadCountEx
0x1800646B0: RtlInsertElementGenericTableFullAvl
0x18012E9A0: "Objects>%4u" ??_C@_1BI@DKGONIDA@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?$DO?$AA?$CF?$AA4?$AAu?$AA?$AA@
0x18001F6AC: RtlpHpMetadataHeapStart
0x180062790: RtlCutoverTimeToSystemTime
0x180178288: LdrpMrdataBase
0x180164360: AVrfpVerifierDllsString
0x180078DD0: LdrDisableThreadCalloutsForDll
0x1800987AC: "__cdecl clrfp" _clrfp
0x18009FB50: NtReleaseMutant
0x1800DFBB4: RtlpWnfETWEventUnsubscribe
0x1800770A0: RtlpGetDeviceFamilyInfoEnum
0x180044C50: RtlIsCriticalSectionLockedByThread
0x1800F5D10: RtlCreateUmsThreadContext
0x180166530: AVrfpHandleTraces
0x18009F440: NtdllMessageWindowProc_A
0x1800A23A0: NtRecoverResourceManager
0x18012F3A0: "\Registry\Machine\Software\Micro" ??_C@_1HG@BODAIHDO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x1801009FC: RtlpMuiRegLangInfoMatchesSpec
0x18012C380: "Failed to find export %s!%s (Ord" ??_C@_0DM@OGNHJPFC@Failed?5to?5find?5export?5?$CFs?$CB?$CFs?5?$CIOrd@
0x1800A1A60: ZwOpenJobObject
0x1800632C0: RtlUpcaseUnicodeStringToOemString
0x180166520: LdrpCODScenarioLock
0x18007B350: TpWaitForAlpcCompletion
0x180166278: LdrpMappingInfoIndex
0x18009FD90: ZwEnumerateKey
0x180087DE0: LdrQueryInLoadOrderModuleList
0x18008B540: RtlGetProcessPreferredUILanguages
0x180163A80: RtlpHpTagContext
0x18016648C: LdrpIllegalCWDDevices
0x18002F3F4: RtlpFindMessageInTable
0x1801652B0: LdrpWorkQueue
0x18001EFA4: RtlpHpVsContextInitialize
0x18011FFA8: "Procedure "%s" could not be loca" ??_C@_0DK@NLHCCKAF@Procedure?5?$CC?$CFs?$CC?5could?5not?5be?5loca@
0x1800792B8: RtlpOpenThreadToken
0x180101204: RtlpMuiRegResizeLanguageList
0x18010C994: RtlpHpLfhSubsegmentAllocateBlock
0x1800D7760: RtlWriteMemoryStream
0x1800DE37C: SendMessageToWERService
0x180128190: "Stick PC" ??_C@_1BC@MFACJCFC@?$AAS?$AAt?$AAi?$AAc?$AAk?$AA?5?$AAP?$AAC?$AA?$AA@
0x1800FF92C: RtlpMuiRegConfigListAddLanguage
0x18009FEB0: NtCloseObjectAuditAlarm
0x180083BD0: WinSqmSetIfMaxDWORD
0x1800A1E60: ZwQueryBootOptions
0x18003FFF8: LdrpSetAlternateResourceModuleHandle
0x1800A1680: ZwInitializeRegistry
0x18005FB70: RtlFindNextForwardRunClear
0x1800A05A0: NtAllocateUuids
0x1800DF0E4: WerEscalationLazyInit
0x180049F30: RtlDosApplyFileIsolationRedirection_Ustr
0x18017B4E0: "__cdecl _security_cookie" __security_cookie
0x1800A05C0: ZwAllocateVirtualMemoryEx
0x18011FCA8: "_y0" ??_C@_03MJLDFKDL@_y0?$AA@
0x18011FC50: "cosh" ??_C@_04HPJJNFIM@cosh?$AA@
0x1800D34D0: LdrpInitializeCriticalSectionExceptionGlobalMitigation
0x180139F20: "csrss.exe" ??_C@_1BE@OMGDNGEO@?$AAc?$AAs?$AAr?$AAs?$AAs?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1800A1B80: ZwOpenProcessToken
0x180025E0C: RtlpFreeHandleForAtom
0x180072470: TpCallbackMayRunLong
0x180066820: TpCallbackIndependent
0x180073AB0: RtlInterlockedFlushSList
0x180003540: RtlUnwind
0x180067870: WerpPathTail
0x1800A2F80: NtUnloadKeyEx
0x18006AF50: EtwProcessPrivateLoggerRequest
0x18005B330: EtwEventWriteEx
0x1800A1860: ZwMakeTemporaryObject
0x1800804C0: LdrUnlockLoaderLock
0x1800A2560: NtResetEvent
0x1800A25C0: NtResumeProcess
0x1800F1EE0: RtlMultipleFreeHeap
0x18002D4B0: LdrpFindLoadedDllByAddress
0x180164FD0: LdrpMrdataLock
0x1800A0E60: ZwCreateSectionEx
0x1800D0E30: LdrpFindDelayloadedMethodInDescriptor
0x180122040: "Routine for current OS that gets" ??_C@_1GM@FIELMNO@?$AAR?$AAo?$AAu?$AAt?$AAi?$AAn?$AAe?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAc?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AA?5?$AAO?$AAS?$AA?5?$AAt?$AAh?$AAa?$AAt?$AA?5?$AAg?$AAe?$AAt?$AAs@
0x180130DE8: "SXS: Unable to open registry key" ??_C@_0DH@LBJPEIFD@SXS?3?5Unable?5to?5open?5registry?5key@
0x18012C108: "bcrypt.dll" ??_C@_1BG@LDILNKDG@?$AAb?$AAc?$AAr?$AAy?$AAp?$AAt?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180083C30: RtlpNtEnumerateSubKey
0x1800769EC: LdrpParseForwarderDescription
0x18003DBE0: TpSetWait
0x180096790: "__cdecl woutput_l" _woutput_l
0x1800A4660: "__cdecl alloca_probe" _alloca_probe
0x18011EE58: "__cdecl _real@3e927e4fa17f65f6" __real@3e927e4fa17f65f6
0x1800940E0: strcat
0x1800D02BC: StringCbPrintfA
0x1800D44B4: LdrpInitializeProcess
0x18011C4D0: "LdrpResSearchResourceInsideDirec" ??_C@_1FE@MLGMOANN@?$AAL?$AAd?$AAr?$AAp?$AAR?$AAe?$AAs?$AAS?$AAe?$AAa?$AAr?$AAc?$AAh?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAI?$AAn?$AAs?$AAi?$AAd?$AAe?$AAD?$AAi?$AAr?$AAe?$AAc@
0x1800EB8E0: RtlUnicodeStringToCountedOemString
0x18011FD60: AeSbCallEvent
0x1800E6F70: PfxFindPrefix
0x1801180D8: RtlpDosLPTDevice
0x18009F09C: RtlpHpVsContextFreeInternal
0x180131C48: "LdrpResValidateFilePath Enter" ??_C@_1DM@OMJKFLCA@?$AAL?$AAd?$AAr?$AAp?$AAR?$AAe?$AAs?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?5?$AAE?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x1800787B0: RtlGetCurrentDirectory_U
0x180009EB0: RtlDosPathNameToRelativeNtPathName_U_WithStatus
0x1800A0380: NtSetTimer
0x1801637F0: RtlpHpEnvHandle
0x18009F9B0: NtEnumerateValueKey
0x180075600: RtlGetDaclSecurityDescriptor
0x1801230C0: "PRIVATENETWORKCLIENTSERVER" ??_C@_1DG@ENGJHFDI@?$AAP?$AAR?$AAI?$AAV?$AAA?$AAT?$AAE?$AAN?$AAE?$AAT?$AAW?$AAO?$AAR?$AAK?$AAC?$AAL?$AAI?$AAE?$AAN?$AAT?$AAS?$AAE?$AAR?$AAV?$AAE?$AAR?$AA?$AA@
0x1800DEE20: ShipAssert
0x1800A22A0: NtQueryTimerResolution
0x180035098: RtlpMuiRegGetInstalledLanguageIndex
0x1800FC3B0: Normalization__CanCombineWithStartFirstPair
0x18011D6A8: "apphelp.dll" ??_C@_1BI@BLOGEHMP@?$AAa?$AAp?$AAp?$AAh?$AAe?$AAl?$AAp?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800A1BC0: ZwOpenResourceManager
0x1800929F0: sin
0x180084EB0: RtlContractHashTable
0x1800345D8: GetLCIDFromLangListNodeWithLICCheck
0x1801282D8: "Industrial Automation" ??_C@_1CM@LOJPCJHB@?$AAI?$AAn?$AAd?$AAu?$AAs?$AAt?$AAr?$AAi?$AAa?$AAl?$AA?5?$AAA?$AAu?$AAt?$AAo?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18012DD38: "MinimumStackCommitInBytes" ??_C@_1DE@GMADOGDK@?$AAM?$AAi?$AAn?$AAi?$AAm?$AAu?$AAm?$AAS?$AAt?$AAa?$AAc?$AAk?$AAC?$AAo?$AAm?$AAm?$AAi?$AAt?$AAI?$AAn?$AAB?$AAy?$AAt?$AAe?$AAs?$AA?$AA@
0x18001C298: RtlpCreateLowFragHeap
0x1800F94B4: RtlpUnsuppressForwardReferencingCallTarget
0x18012EA40: "AVRF: Verifier .dlls must not ha" ??_C@_0DC@KNAANCLE@AVRF?3?5Verifier?5?4dlls?5must?5not?5ha@
0x18010CC6C: RtlpHpLargeAllocReport
0x180122B28: "ProgramFiles" ??_C@_1BK@CECDDAML@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x1801664F8: RtlpUserPolicies
0x1800A1460: NtFreezeTransactions
0x180002E30: RtlWow64GetCurrentMachine
0x1800A12C0: ZwExtendSection
0x1801399B0: "RtlZeroHeap" ??_C@_0M@CODJONGO@RtlZeroHeap?$AA@
0x180040BD0: LdrpMapResourceFile
0x18000C62C: RtlDetermineDosPathNameType_Ustr
0x18012F828: "Status != STATUS_NOT_FOUND" ??_C@_0BL@JBLJBBML@Status?5?$CB?$DN?5STATUS_NOT_FOUND?$AA@
0x1800A2C20: NtSetTimer2
0x1800652C0: LdrpEnableParallelLoading
0x180043BD0: RtlExpandEnvironmentStrings
0x18012F8F0: "SXS: Activation context data at " ??_C@_0EC@BMCPFDKM@SXS?3?5Activation?5context?5data?5at?5@
0x18006F310: StringCbPrintfW
0x1800E1E60: RtlLookupFunctionTable
0x1800E9710: RtlpUnWaitCriticalSection
0x1800DBB8C: AVrfpEnableVerifierOptions
0x1800A2980: ZwSetInformationResourceManager
0x18009FD10: NtReadFileScatter
0x1800F77C0: RtlEthernetAddressToStringA
0x18012FB28: "SXS: %s() called with invalid co" ??_C@_0DD@NEJNEOOO@SXS?3?5?$CFs?$CI?$CJ?5called?5with?5invalid?5co@
0x1800A0A80: ZwCompareSigningLevels
0x18004D2E8: RtlpAddDebugInfoToCriticalSection
0x1800A3360: KiUserApcDispatcher
0x18008AA40: RtlOwnerAcesPresent
0x1800213F0: RtlpHpSegSegmentFree
0x1800DA790: RtlRemoveVectoredContinueHandler
0x180024640: RtlDoesFileExists_U
0x1800D7760: RtlCopyMemoryStreamTo
0x18006FAB0: RtlSelfRelativeToAbsoluteSD
0x18003A5C0: RtlpCopyAces
0x180165FD8: LdrpCreateActCtxLanguageW
0x18009F680: NtdllFilteredProcessRedirectingWndProc_A
0x18012D518: "Failed to initialize Parallel lo" ??_C@_0DB@MMJJEGNH@Failed?5to?5initialize?5Parallel?5lo@
0x180043490: LdrShutdownProcess
0x18011FC28: "__cdecl _real@3ff921fb50000000" __real@3ff921fb50000000
0x1801006BC: RtlpMuiRegGetLangInfoIndex
0x18011DDA0: "__cdecl _real@3c81a62633145c06" __real@3c81a62633145c06
0x180046C90: LdrpLoadDependentModule
0x18007D214: RtlpWakeConditionVariable
0x180036B40: RtlCheckTokenMembershipEx
0x180086240: RtlpGetLCIDFromLangInfoNode
0x180081B40: LdrGetDllDirectory
0x180069DA0: RtlDecodePointer
0x1800A2BC0: NtSetSystemPowerState
0x18013A110: "ThreadPool: callback %p(%p) retu" ??_C@_0EF@MBENEBAO@ThreadPool?3?5callback?5?$CFp?$CI?$CFp?$CJ?5retu@
0x180127D48: "WP://SKUID" ??_C@_1BG@OLJFPOOD@?$AAW?$AAP?$AA?3?$AA?1?$AA?1?$AAS?$AAK?$AAU?$AAI?$AAD?$AA?$AA@
0x180128148: "Convertible" ??_C@_1BI@OOPIIBCP@?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAi?$AAb?$AAl?$AAe?$AA?$AA@
0x18007ED28: TpInitializePackage
0x1800FAF7C: RtlReportCriticalFailure
0x1800F7A10: RtlEthernetAddressToStringW
0x18007A030: TppCallbackCheckThreadBeforeCallback
0x18011DC38: "LdrResRelease Enter" ??_C@_1CI@ODIBDMHJ@?$AAL?$AAd?$AAr?$AAR?$AAe?$AAs?$AAR?$AAe?$AAl?$AAe?$AAa?$AAs?$AAe?$AA?5?$AAE?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x1800738F4: LdrpGenSecurityCookie
0x180020664: RtlpHpTagContextFindMapping
0x1800A0D00: ZwCreateMutant
0x180082DF0: LdrpInsertModuleToIndex
0x18010AC30: RtlDecompressFragmentLZNT1
0x180165FE0: LdrpManifestProberRoutine
0x180127D10: "WIN://PKG" ??_C@_1BE@BDEKEKBI@?$AAW?$AAI?$AAN?$AA?3?$AA?1?$AA?1?$AAP?$AAK?$AAG?$AA?$AA@
0x1801280C0: "Windows.7067329" ??_C@_1CA@HBCEJNBI@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AA7?$AA0?$AA6?$AA7?$AA3?$AA2?$AA9?$AA?$AA@
0x180130F90: "SXS: Assembly storage root locat" ??_C@_0DN@KGPGHOIJ@SXS?3?5Assembly?5storage?5root?5locat@
0x1800A2CE0: NtShutdownSystem
0x180163B60: RtlpProtectedHeapsListBuffer
0x180111468: SbpResolveBasedOnName
0x18011ED80: "__cdecl _real@3e45798ee2308c3a" __real@3e45798ee2308c3a
0x180053094: RtlpHpLfhContextCompact
0x18011DE50: "__stdcall _xmm" __xmm@80000000000000008000000000000000
0x180131F60: "NTDLL: Calling thread (%p) not o" ??_C@_0EK@FNOGANJI@NTDLL?3?5Calling?5thread?5?$CI?$CFp?$CJ?5not?5o@
0x18006C004: EtwpGetUmLoggerInfoFromContext
0x18006756C: RtlpHpHeapUnlock
0x18009F850: ZwWriteFile
0x180166490: LdrInitState
0x18009E7FC: "__cdecl fgetwc_nolock" _fgetwc_nolock
0x1800A0C40: NtCreateJobObject
0x1800FED00: RtlWakeAddressSingleNoFence
0x18005D130: RtlStringCbLengthW
0x180178268: g_LdrpWow64SuspendLocalThread
0x18004BD80: RtlDeriveCapabilitySidsFromName
0x180093190: iswxdigit
0x18010504C: RtlpInitializeStackTraceLog
0x18012E428: "LdrpUnloadNode" ??_C@_0P@NEJMBEPE@LdrpUnloadNode?$AA@
0x180063E10: TransformMD5
0x18006AB70: EtwpAddReloggedPartitionInfoEvent
0x180071D80: NtdllpFreeStringRoutine
0x180036B14: RtlpValidateSDOffsetAndSize
0x18012DC50: "UnloadEventTraceDepth" ??_C@_1CM@KFDKIEKO@?$AAU?$AAn?$AAl?$AAo?$AAa?$AAd?$AAE?$AAv?$AAe?$AAn?$AAt?$AAT?$AAr?$AAa?$AAc?$AAe?$AAD?$AAe?$AAp?$AAt?$AAh?$AA?$AA@
0x1800A1580: NtGetNextThread
0x1800F1A30: RtlEnumProcessHeaps
0x1800A0620: ZwAlpcConnectPort
0x180018F38: RtlpHpHeapCheckCommitLimit
0x180026E80: RtlIsValidIndexHandle
0x1800CFFE0: RtlGetFrame
0x1800A1420: NtFreeUserPhysicalPages
0x1800FFDF8: RtlpMuiRegCreateStringPool
0x18002DD20: RtlpMuiRegLoadPreferredUILanguages
0x180061130: RtlCompressBufferXpressHuffStandard
0x18004C850: RtlIsProcessorFeaturePresent
0x180078A14: RtlpCreateNewDirectoryReference
0x18012DA70: "LdrpTouchThreadStack" ??_C@_0BF@FNBJIACI@LdrpTouchThreadStack?$AA@
0x1800707D0: RtlStringFromGUIDEx
0x180075CD0: LdrpFindLoadedDllByMapping
0x1800A2FA0: NtUnlockFile
0x1800FED10: RtlpInitWaitOnAddress
0x180082700: LdrGetProcedureAddress
0x180166568: g_SxsLiveActivationContexts
0x1800A3220: RtlpInterlockedPushEntrySList
0x18004FC04: TppValidateCleanupGroupMember
0x180163444: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUgsivzwklloUmgwooUwzbglmzUlyquivUznwGEUgkkOlyq@tp" __@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUgsivzwklloUmgwooUwzbglmzUlyquivUznwGEUgkkOlyq@tp
0x1800F4A60: RtlCopyExtendedContext
0x18004C800: LdrpGenRandom
0x180122600: "HeapPaddingAndLFHSubsegmentCommi" ??_C@_1FA@CKFDAPMK@?$AAH?$AAe?$AAa?$AAp?$AAP?$AAa?$AAd?$AAd?$AAi?$AAn?$AAg?$AAA?$AAn?$AAd?$AAL?$AAF?$AAH?$AAS?$AAu?$AAb?$AAs?$AAe?$AAg?$AAm?$AAe?$AAn?$AAt?$AAC?$AAo?$AAm?$AAm?$AAi@
0x180049A7C: LdrpAllocateFileNameBufferIfNeeded
0x1800D6CF4: LdrpCaptureCriticalThunks
0x18004C1A4: LdrpAllocateModuleEntry
0x1801664C4: g_isErrorOriginProviderEnabled
0x18012E5E0: " ***Exception thrown within load" ??_C@_0CH@CEDPGFOK@?6?$CK?$CK?$CKException?5thrown?5within?5load@
0x18011CED0: SystemTraceControlGuid
0x180068980: RealSuccessor
0x18004CDE0: EtwEventRegister
0x1800917F0: "__cdecl wcsupr_s" _wcsupr_s
0x180012A80: RtlGetCurrentServiceSessionId
0x180164310: RtlpDynamicFunctionTableLock
0x1800A12A0: ZwEnumerateTransactionObject
0x1800D6468: LdrpInitializeProcessWrapperFilter
0x180055A34: RtlpHpSegPageRangeCoalesce
0x180067460: RtlpCheckHeapSignature
0x18004EE78: TppCompleteThreadData
0x1801380E8: "The instruction at %p referenced" ??_C@_0DA@BPNHGBH@The?5instruction?5at?5?$CFp?5referenced@
0x180164268: NlsOemToUnicodeData
0x180028ACC: LdrpHandleTlsData
0x18007B45C: TppAlpcpValidateAlpc
0x1801385A0: RtlpUnwindOpSlotTable
0x1800564F0: EtwUnregisterTraceGuids
0x180045AD8: LdrpFindLoadedDll
0x1800671F4: RtlpValidateHeapEntry
0x18011F378: "__cdecl _real@3fe08046499eb90f" __real@3fe08046499eb90f
0x1800A1740: ZwLoadEnclaveData
0x180024E20: RtlpCopyProcString
0x180165378: LdrpNtDllDataTableEntry
0x18012C298: "LdrGetKnownDllSectionHandle" ??_C@_0BM@EOLMEMCK@LdrGetKnownDllSectionHandle?$AA@
0x18012E970: "Wow64 Emulation Layer" ??_C@_1CM@EGJJOBMC@?$AAW?$AAo?$AAw?$AA6?$AA4?$AA?5?$AAE?$AAm?$AAu?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAL?$AAa?$AAy?$AAe?$AAr?$AA?$AA@
0x1800A2D60: NtStartProfile
0x180019D28: RtlpDecommitBlock
0x1800D29DC: InitSecurityCookie
0x180077A00: RtlpHpTagQueryTags
0x180058D6C: RtlpHpSegMgrReserve
0x180088A84: RtlpQueryDiskSpeedPolicy
0x180137D30: "\SystemRoot\Globalization\" ??_C@_1DG@IPEDDMBI@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAi?$AAz?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?2?$AA?$AA@
0x1800A0880: NtAlpcSendWaitReceivePort
0x1800665C0: RtlDelete
0x18012DDB0: "KeepActivationContextsAlive" ??_C@_1DI@LIJHLCLN@?$AAK?$AAe?$AAe?$AAp?$AAA?$AAc?$AAt?$AAi?$AAv?$AAa?$AAt?$AAi?$AAo?$AAn?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAs?$AAA?$AAl?$AAi?$AAv?$AAe?$AA?$AA@
0x180138260: " *** An Access Violation occur" ??_C@_0DA@LMKCDOHD@?6?6?5?$CK?$CK?$CK?5An?5Access?5Violation?5occur@
0x1800A2820: ZwSetDefaultLocale
0x18007AEC0: RtlDuplicateUnicodeString
0x18012EE90: "AVRF: chain: thunk: %s == %s ? " ??_C@_0CA@JMNPIJOP@AVRF?3?5chain?3?5thunk?3?5?$CFs?5?$DN?$DN?5?$CFs?5?$DP?6?$AA@
0x180088C80: RtlCompressWorkSpaceSizeXpressLz
0x1801195F0: "`RtlpGetUserLocaleName'::`2'::KeyValueName" ?KeyValueName@?1??RtlpGetUserLocaleName@@9@9
0x18010E690: EtwEventWriteString
0x180062D74: RtlpTimeToTimeFieldsNoLeapSeconds
0x180034DAC: RtlpMuiRegAddMultiSzToLangFallbackList
0x18012EC70: "AVRF: %ws: failed to load provid" ??_C@_0EB@MKAKDAAD@AVRF?3?5?$CFws?3?5failed?5to?5load?5provid@
0x18001A624: RtlpHpFreeVA
0x18002D7C0: RtlpLoadUserUIByPolicy
0x1800A3060: ZwWaitForAlertByThreadId
0x18006D308: EtwpGetNextAvailableLoggerId
0x180003770: RtlpGetStackLimits
0x180090C20: "__cdecl strlwr_s" _strlwr_s
0x180139350: "VirtualMemoryThreshold" ??_C@_0BH@DPEGHHN@VirtualMemoryThreshold?$AA@
0x18011DA98: "\SmApiPort" ??_C@_1BG@HCJAPODC@?$AA?2?$AAS?$AAm?$AAA?$AAp?$AAi?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
0x18009FA70: ZwQueryInformationProcess
0x1800859D0: RtlNumberGenericTableElementsAvl
0x18008EB94: RtlpLoadInstallLanguageFallback
0x18006B424: EtwpSendSessionNotification
0x1800843C0: RtlQueryInformationActiveActivationContext
0x1801385B0: "\Registry\Machine\System\Setup" ??_C@_1DO@PGOAJPNE@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x1800A08C0: NtAreMappedFilesTheSame
0x18012D000: "RaiseExceptionOnPossibleDeadlock" ??_C@_1EC@MEICIJKH@?$AAR?$AAa?$AAi?$AAs?$AAe?$AAE?$AAx?$AAc?$AAe?$AAp?$AAt?$AAi?$AAo?$AAn?$AAO?$AAn?$AAP?$AAo?$AAs?$AAs?$AAi?$AAb?$AAl?$AAe?$AAD?$AAe?$AAa?$AAd?$AAl?$AAo?$AAc?$AAk@
0x1800ED840: RtlLockBootStatusData
0x180073CC0: RtlDeactivateActivationContext
0x1800EE41C: LdrpMergeParentBaseLanguagesToList
0x180122F88: "APPOINTMENTS" ??_C@_1BK@NGIHNAJC@?$AAA?$AAP?$AAP?$AAO?$AAI?$AAN?$AAT?$AAM?$AAE?$AAN?$AAT?$AAS?$AA?$AA@
0x1800A1A80: ZwOpenKeyEx
0x18009F2C4: RtlpHpVsDelayFreeContextInitialize
0x1800A0270: NtAccessCheckByTypeAndAuditAlarm
0x1801321F0: "Thread identifier" ??_C@_0BC@GINEEDIF@Thread?5identifier?$AA@
0x18012CB88: "LdrpGetShimEngineInterface" ??_C@_0BL@DKCENBBM@LdrpGetShimEngineInterface?$AA@
0x180120128: "HEAP: Free Heap block %p modifie" ??_C@_0DM@PAFCANHM@HEAP?3?5Free?5Heap?5block?5?$CFp?5modifie@
0x18003B06C: RtlpGetDefaultsSubjectContext
0x1800655E0: TpSetPoolWorkerThreadIdleTimeout
0x18012EBA0: "AVRF: -*- final list of provider" ??_C@_0CI@LPNKPMNF@AVRF?3?5?9?$CK?9?5final?5list?5of?5provider@
0x18009FF30: NtReadVirtualMemory
0x18001D6BC: RtlpFreeUserBlockToHeap
0x1800CEF40: DbgUiGetThreadDebugObject
0x18012F690: "Internal error check failed" ??_C@_0BM@LCGEIOLJ@Internal?5error?5check?5failed?$AA@
0x180090F80: vsprintf
0x180057658: RtlpTreeDoubleRotateNodes
0x1800DFED4: RtlpWnfSetRetryTimer
0x180081510: TpAllocJobNotification
0x1800EB6C0: RtlFindUnicodeSubstring
0x1800598C0: RtlNtStatusToDosError
0x18006DA40: EtwRegisterTraceGuidsW
0x1800DD620: RtlpWow64OpenThreadProcess
0x1800A19C0: ZwNotifyChangeMultipleKeys
0x180138A08: "heap_failure_entry_corruption" ??_C@_0BO@DCDHGNFD@heap_failure_entry_corruption?$AA@
0x180090540: "__cdecl lfind" _lfind
0x180095DF0: "__cdecl flsbuf" _flsbuf
0x1800A2340: ZwRaiseHardError
0x1800A0440: NtAddAtomEx
0x1800746D0: RtlSleepConditionVariableCS
0x180067F80: RtlEnumerateGenericTableWithoutSplaying
0x180130E70: "SXS: Attempt to get storage loca" ??_C@_0EP@FPIBOJBJ@SXS?3?5Attempt?5to?5get?5storage?5loca@
0x180025D8C: RtlpFreeAllAtom
0x1800D89A8: RtlpLockFlsCallbackVector
0x180139560: "Uncommitted Ranges" ??_C@_0BD@DLOLKPPE@Uncommitted?5Ranges?$AA@
0x180139C00: "dedicated (%04Ix) free list elem" ??_C@_0DH@HHAFOCAN@dedicated?5?$CI?$CF04Ix?$CJ?5free?5list?5elem@
0x1800F8E3C: RtlpGetFileSize
0x1800A1760: ZwLoadKey
0x180073DC8: RtlpFreeActivationContextStackFrame
0x18009FF90: ZwDuplicateToken
0x18009F4E0: NtdllDialogWndProc_A
0x18011FC48: "sinh" ??_C@_04COOMCNPB@sinh?$AA@
0x180075688: LdrpInitialize
0x18007B190: RtlQueryInformationAcl
0x180071CC0: RtlEqualString
0x18003F2D4: SbGetContextDetailsByVersion
0x1800D7760: RtlCloneMemoryStream
0x180049640: LdrpApplyFileNameRedirection
0x180007088: RtlpImageDirectoryEntryToDataEx
0x180053EA0: RtlpHpVsChunkSplit
0x18009FFD0: NtQueryDefaultUILanguage
0x1800FAF60: RtlIsNonEmptyDirectoryReparsePointAllowed
0x180074B68: RtlpAllocateSecondLevelDir
0x1800DFA78: RtlpWnfETWEventPublish
0x1800025C4: RtlpHpLfhSubsegmentSizeBlockInternal
0x1800221E4: RtlpHpLargeFree
0x180057510: RtlpHpSegContextCompact
0x18009AF40: strtok_s
0x1800A2E60: NtTestAlert
0x180036080: RtlValidAcl
0x18007FA40: LdrGetProcedureAddressEx
0x180164038: NlsMbOemCodePageTables
0x1800EB000: RtlpValidAttributeAce
0x1800A1CA0: ZwOpenTransactionManager
0x180121F70: "\\.\" ??_C@_19BKJMDJK@?$AA?2?$AA?2?$AA?4?$AA?2?$AA?$AA@
0x18011EEA8: "__cdecl _real@411e848000000000" __real@411e848000000000
0x1800922A0: bsearch
0x180082100: RtlApplyRXactNoFlush
0x1800A2D20: NtSignalAndWaitForSingleObject
0x18009A070: "__cdecl vsnprintf_s" _vsnprintf_s
0x18010D884: RtlpHpSegMgrVaCtxInsert
0x1800441A0: RtlCompareUnicodeStrings
0x180137918: "Heap block at %p modified at %p " ??_C@_0DM@PGDNJJIE@Heap?5block?5at?5?$CFp?5modified?5at?5?$CFp?5@
0x18011EE98: "__cdecl _real@3fe45f306dc9c883" __real@3fe45f306dc9c883
0x18006E0E0: RtlpCheckDynamicTimeZoneInformation
0x1800A3040: NtVdmControl
0x180078E30: TppWorkpFree
0x18011D098: szDaylightStart
0x180063AE0: RtlUpcaseUnicodeToMultiByteN
0x18007FF50: RtlDispatchAPC
0x180049E28: LdrpFindLoadedDllByNameLockHeld
0x1800F6580: RtlSubtreeSuccessor
0x180066960: RtlInitializeCriticalSectionAndSpinCount
0x180166290: LdrpForkConditionVariable
0x1800FC6D8: Normalization__IsNormalized
0x1800261CC: IsOverlaySupportedPath
0x180022AC4: RtlpWaitOnAddressRemoveWaitBlock
0x1800A07C0: ZwAlpcImpersonateClientOfPort
0x18011C300: "\WinSxS\" ??_C@_1BC@OACMOHID@?$AA?2?$AAW?$AAi?$AAn?$AAS?$AAx?$AAS?$AA?2?$AA?$AA@
0x180090200: "__cdecl ltoa" _ltoa
0x1800E7A80: RtlpCompareKnownAces
0x180163C80: RtlpStaticDebugInfo
0x18004F69C: TppWorkCallbackPrologRelease
0x18011FDD4: "LDR" ??_C@_03PAGHNNKM@LDR?$AA@
0x180068B5C: RtlpPopulateContext
0x180118410: SlashSystem32SlashString
0x18005A10C: RtlpFlushHeap
0x180044E4C: LdrpMapDllWithSectionHandle
0x180090250: "__cdecl ultoa" _ultoa
0x18003D2F0: RtlQueueWorkItem
0x1801104CC: TppTerminateProcess
0x180165380: LdrpSystemDllBase
0x1800A28A0: ZwSetHighEventPair
0x1800EFF8C: RtlpGetMultiStringLength
0x180002A50: RtlReleaseMemoryStream
0x18007B7E0: RtlpTpWaitFinalizationCallback
0x1800A2460: NtRemoveIoCompletionEx
0x1800A1020: ZwCreateWorkerFactory
0x180085C50: RtlQueryTokenHostIdAsUlong64
0x1800306CC: RtlpFilterandReplaceConsoleLanguages
0x180078D20: RtlpDeleteData
0x1801395F0: "Invalid ReserveSize parameter - " ??_C@_0CF@IOONAIAB@Invalid?5ReserveSize?5parameter?5?9?5@
0x18011CAD0: "TerminalServices-RemoteConnectio" ??_C@_1HI@LOGLGABO@?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?9?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAi?$AAo@
0x1800A29C0: ZwSetInformationToken
0x1800903A0: "__cdecl ltow" _ltow
0x1800E4380: RtlValidProcessProtection
0x1801396A8: "Specified HeapBase (%p) != to Ba" ??_C@_0DA@HAOPAFBG@Specified?5HeapBase?5?$CI?$CFp?$CJ?5?$CB?$DN?5to?5Ba@
0x1800A18E0: ZwMapUserPhysicalPages
0x18015FA98: TppCleanupGroupMemberpNoPoolList
0x180068280: RtlSidDominates
0x180026950: RtlAddAtomToAtomTable
0x1800A2C40: NtSetTimerEx
0x1800A1C00: NtOpenSession
0x180164320: RtlpSearchPath
0x18010F0C0: EtwpGetUmProcessImageInfo
0x180082AD0: RtlSetUnhandledExceptionFilter
0x18010C404: RtlpHpOptIntoSegmentHeap
0x1800A0960: NtCancelSynchronousIoFile
0x180087AC0: RtlpMuiFreeLangRegistryInfo
0x18009F8F0: ZwSetInformationThread
0x18011FC60: "asin" ??_C@_04FIHNOPOL@asin?$AA@
0x1800A1960: ZwNotifyChangeDirectoryFile
0x1800574AC: StringCbLengthW
0x1800A1EC0: NtQueryDirectoryObject
0x1800A1A00: ZwOpenEnlistment
0x180025EA0: RtlCreateQueryDebugBuffer
0x180090000: isgraph
0x180019EB4: RtlpSecMemFreeVirtualMemory
0x18012E668: "Execute '.cxr %p' to dump contex" ??_C@_0CD@KCPGJLCO@Execute?5?8?4cxr?5?$CFp?8?5to?5dump?5contex@
0x180022788: RtlpHpSegHeapCheckCommitLimit
0x1801307C0: "SXS: %s() found activation conte" ??_C@_0FF@DDEEGJMG@SXS?3?5?$CFs?$CI?$CJ?5found?5activation?5conte@
0x1800A0300: ZwTraceEvent
0x1800F1E60: RtlMultipleAllocateHeap
0x1800A2800: ZwSetDefaultHardErrorPort
0x1800D09A0: LdrUnregisterDllNotification
0x1800A2720: NtSerializeBoot
0x18012C9D0: "minkernel\ntdll\ldrinit.c" ??_C@_0BK@IHEKJBGG@minkernel?2ntdll?2ldrinit?4c?$AA@
0x1800453E0: LdrpFindDllActivationContext
0x1800A3494: KiUserCallbackDispatcherContinue
0x1800A3100: ZwWaitLowEventPair
0x180137D68: ".nlp" ??_C@_19JMIJHJNO@?$AA?4?$AAn?$AAl?$AAp?$AA?$AA@
0x18012FE90: "SXS/RTL: Section found (offset %" ??_C@_0GJ@JGGCFIHJ@SXS?1RTL?3?5Section?5found?5?$CIoffset?5?$CF@
0x1800DEABC: WerpFreeSid
0x18009ECBC: RtlpHpVsContextAllocateInternal
0x180086850: EtwpGuidEntryCompare
0x18011075C: RtlpTpETWCallbackStop
0x18009FB70: ZwQueryInformationToken
0x18006ABDC: EtwpFinalizeLogFileHeader
0x1800A0C20: ZwCreateIoCompletion
0x18000A0F0: RtlpReAllocateHeapInternal
0x180033A50: LdrpCompareResourceNames_U
0x18011C350: "LdrResSearchResource Enter" ??_C@_1DG@MFCDPHEL@?$AAL?$AAd?$AAr?$AAR?$AAe?$AAs?$AAS?$AAe?$AAa?$AAr?$AAc?$AAh?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?5?$AAE?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x1800FAA34: FindEmailAt
0x1800ECA80: RtlNumberOfSetBitsInRange
0x180067680: WerpGlobalFlagsForProcess
0x18008BCA0: EtwSetMark
0x1800A1460: ZwFreezeTransactions
0x180165204: LdrpPotentialTlsLeaks
0x18009F9B0: ZwEnumerateValueKey
0x180100984: RtlpMuiRegGrowStringPool
0x180001E58: EtwpWriteBufferCompressed
0x180022814: RtlpHpLargeAllocSize
0x1800A22A0: ZwQueryTimerResolution
0x18008AB00: RtlAddAccessAllowedObjectAce
0x180131B60: "LdrpLoadResourceFromAlternativeM" ??_C@_0CG@OMJMGNLB@LdrpLoadResourceFromAlternativeM@
0x18013A3E0: "C:\data\programs\windowsapps" ??_C@_1DK@LFAIJJDD@?$AAC?$AA?3?$AA?2?$AAd?$AAa?$AAt?$AAa?$AA?2?$AAp?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAs?$AA?2?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAa?$AAp?$AAp?$AAs?$AA?$AA@
0x1800A1BC0: NtOpenResourceManager
0x1800CF600: LdrpCreatePendingEnclaveModule
0x1800A2C20: ZwSetTimer2
0x1800EFFFC: RtlpMUIGetAllInstalledLang
0x180164330: RtlpExeSearchPath
0x180071F10: TpSetDefaultPoolStackInformation
0x180057184: WerEscalationReadImageVersionInfoForModuleBase
0x1800098F8: LdrpDereferenceModule
0x1800D7760: RtlSetMemoryStreamSize
0x18007ED00: RtlpTpTimerFinalizationCallback
0x1800A12C0: NtExtendSection
0x18011D870: "wow64.dll" ??_C@_1BE@KCEPKGEM@?$AAw?$AAo?$AAw?$AA6?$AA4?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800A0E60: NtCreateSectionEx
0x180095DE0: "__cdecl guard_check_icall" _guard_check_icall
0x1800A1860: NtMakeTemporaryObject
0x180086580: RtlQueryWnfStateDataWithExplicitScope
0x180085E90: RtlLockCurrentThread
0x18012F670: "minkernel\ntdll\sxsisol.cpp" ??_C@_0BM@JBCICHJG@minkernel?2ntdll?2sxsisol?4cpp?$AA@
0x1800A2560: ZwResetEvent
0x1800A25C0: ZwResumeProcess
0x180084B80: EtwGetTraceLoggerHandle
0x180027D70: RtlpGetMUIRedirectedFilePathInternal
0x1800782AC: TppDestroyTimer
0x180130A00: "SXS: %s() - Caller passed invali" ??_C@_0DD@MLGDJLGG@SXS?3?5?$CFs?$CI?$CJ?5?9?5Caller?5passed?5invali@
0x1800A0380: ZwSetTimer
0x180067A50: RtlAcquireResourceShared
0x18011C7B0: "Control Panel\Desktop\MuiCached\" ??_C@_1HK@BCFBOMIG@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAP?$AAa?$AAn?$AAe?$AAl?$AA?2?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?2?$AAM?$AAu?$AAi?$AAC?$AAa?$AAc?$AAh?$AAe?$AAd?$AA?2@
0x1800838D0: RtlDestroyEnvironment
0x180166518: VsmEnclaveTelemetryInitRunOnce
0x18012F378: WNF_WER_SERVICE_START
0x18010ED94: EtwpDemuxUmTraceHandle
0x1800A2BC0: ZwSetSystemPowerState
0x1800D67B4: LdrpOverrideExportSuppression
0x180073310: RtlSubAuthoritySid
0x180165AE8: CsrServerApiRoutine
0x1800953E0: wcscmp
0x180041F54: LdrpSearchPath
0x1800A0D00: NtCreateMutant
0x18012CD48: "Getting the shim engine exports " ??_C@_0DM@FECNGMCI@Getting?5the?5shim?5engine?5exports?5@
0x18011DDC8: "__cdecl _real@3fcc3de43db425c0" __real@3fcc3de43db425c0
0x180104CF8: RtlpHpStackTraceRemoveStack
0x1800759E4: LdrpMakePermanentImageCommit
0x180084270: RtlInitializeGenericTableAvl
0x18010C84C: RtlpHpLfhOwnerListLockUnlock
0x18008ACE0: RtlNewSecurityObjectWithMultipleInheritance
0x18012F630: "\Forwarders" ??_C@_1BI@BNEBIHDD@?$AA?2?$AAF?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AAe?$AAr?$AAs?$AA?$AA@
0x1800A2CE0: ZwShutdownSystem
0x1800F4610: RtlCompareAltitudes
0x1800784B0: LdrGetDllHandleByName
0x18011D3D0: "\Registry\Machine\Software\Micro" ??_C@_1IG@DIKBIGCF@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x18009F6E0: NtdllEditWndProcWorker
0x1800369A0: RtlValidRelativeSecurityDescriptor
0x180058704: RtlpHpVaMgrRangeSplit
0x1800A0A80: NtCompareSigningLevels
0x1800FFDC0: RtlpMuiRegCreateRegistryInfo
0x180122888: "Wow64PrepareForDebuggerAttach" ??_C@_0BO@OGOJMNEN@Wow64PrepareForDebuggerAttach?$AA@
0x1800F1F50: RtlQueryTagHeap
0x1800A2980: NtSetInformationResourceManager
0x18009FD10: ZwReadFileScatter
0x180164E80: AVrfpPageHeapStopData
0x18006AB44: EtwpWaitForBufferReferenceCount
0x180132100: "Second initialization stack trac" ??_C@_0ED@NELNFADP@Second?5initialization?5stack?5trac@
0x180130930: "SXS: %s() received invalid file " ??_C@_0EI@KCKGKGJD@SXS?3?5?$CFs?$CI?$CJ?5received?5invalid?5file?5@
0x18002E9A8: LdrpGetDataModulePath
0x180053480: RtlpHpSegLfhAllocate
0x180056B64: RtlpHpVsSubsegmentFree
0x18011F370: "__cdecl _real@3fd7d50f6638564a" __real@3fd7d50f6638564a
0x180166008: LdrpDllDirectory
0x18008D970: RtlSetThreadIsCritical
0x180165FF8: "`RtlpGetCookieValue'::`2'::CookieValue" ?CookieValue@?1??RtlpGetCookieValue@@9@9
0x18003E704: TppCleanupGroupMemberRelease
0x1800660A0: RtlDeleteElementGenericTable
0x180138A80: "heap_failure_buffer_overrun" ??_C@_0BM@KBPKEJM@heap_failure_buffer_overrun?$AA@
0x180164040: NlsMbAnsiCodePageTables
0x1800DEF40: ShipAssertGetBufferInfo
0x18005B69C: EtwpWriteToPrivateBuffers
0x180092EE0: fabs
0x1800A1420: ZwFreeUserPhysicalPages
0x1800D7760: RtlCommitMemoryStream
0x1800D7760: RtlRevertMemoryStream
0x1800A2FA0: ZwUnlockFile
0x180043AF8: LdrpQueueWork
0x180166000: RtlpSearchPathMode
0x180111F6C: PsspCaptureIptTrace
0x18002D2FC: RtlpMuiRegCreateAndLoadRegistryInfo
0x180110588: TppETWCallbackDequeue
0x1800218CC: RtlpHpVaMgrRangeCleanup
0x1800918E0: labs
0x18007E290: RtlGetUserPreferredUILanguages
0x18012E528: "LdrpAllocateTlsEntry" ??_C@_0BF@HICIHJJA@LdrpAllocateTlsEntry?$AA@
0x1800F8A20: RtlGetConsoleSessionForegroundProcessId
0x1801379B0: "ZwAllocateVirtualMemory failed %" ??_C@_0EE@GJNIHOMM@ZwAllocateVirtualMemory?5failed?5?$CF@
0x18009F850: NtWriteFile
0x1801209A0: RtlpBitsClearLow
0x1800A0C40: ZwCreateJobObject
0x180139BB0: "Heap Segment at %p contains inva" ??_C@_0EK@GAEMMPJH@Heap?5Segment?5at?5?$CFp?5contains?5inva@
0x1800EDD80: RtlSetPortableOperatingSystem
0x180049AC0: RtlFindActivationContextSectionGuid
0x18000319C: RtlInitializeHistoryTable
0x180095330: towupper
0x18009F4B0: NtdllComboBoxWndProc_W
0x180017290: RtlpHeapFindListLookupEntry
0x180120998: "__cdecl _imp_NtOpenKey" __imp_NtOpenKey
0x180043B90: RtlInitAnsiString
0x180166078: TppHeapTag
0x1800A1580: ZwGetNextThread
0x180040AE8: LdrpReleaseLoaderLock
0x180115A38: RtlStackDbStackRemove
0x180087148: LdrRelocateImageWithBias
0x18006FF80: RtlPopFrame
0x18004CD00: TpWaitForTimer
0x1801283B8: "Vending" ??_C@_1BA@MCDGPFHC@?$AAV?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AA?$AA@
0x1800A0620: NtAlpcConnectPort
0x1800194F8: RtlpHpSegSetExtraPresent
0x180127F70: "Windows.Xbox" ??_C@_1BK@LOPBGAIM@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAX?$AAb?$AAo?$AAx?$AA?$AA@
0x180132018: "Critical section address" ??_C@_0BJ@OGOHHGLD@Critical?5section?5address?$AA@
0x180063A80: RtlUpcaseUnicodeToOemN
0x18012E040: "NtSetInformationProcess: Process" ??_C@_0EJ@LLDONOBJ@NtSetInformationProcess?3?5Process@
0x1800861F0: RtlIsPackageSid
0x180164278: NlsUnicodeToAnsiData
0x18011D088: "MiniNT" ??_C@_1O@BMELCLLB@?$AAM?$AAi?$AAn?$AAi?$AAN?$AAT?$AA?$AA@
0x1800A1740: NtLoadEnclaveData
0x1800446A4: LdrpInitializeNode
0x1801101B0: TpCallbackReleaseSemaphoreOnCompletion
0x18011CD18: "%s\%u-%u-%u-%u" ??_C@_1BO@FFPNCKK@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAu?$AA?9?$AA?$CF?$AAu?$AA?9?$AA?$CF?$AAu?$AA?9?$AA?$CF?$AAu?$AA?$AA@
0x180049490: LdrpPreprocessDllName
0x180122650: "RETURN" ??_C@_06LJMOENAO@RETURN?$AA@
0x1800FBEAC: NormBuffer__ReplaceLastStartBase
0x180020BC0: RtlpIsSubSegmentReuseThresholdExceeded
0x1800A3172: DbgBreakPointWithStatusEnd
0x1800A2820: NtSetDefaultLocale
0x1800A2D60: ZwStartProfile
0x180083F38: TppCallbackSendAndDestroyAlpcMessage
0x1800A0880: ZwAlpcSendWaitReceivePort
0x180137960: "RtlpHeapFreeVirtualMemory failed" ??_C@_0EG@CGCCBHGF@RtlpHeapFreeVirtualMemory?5failed@
0x1800052B0: RtlVirtualUnwind
0x18001E340: CsrAllocateCaptureBuffer
0x18012E6A0: "Locating export at ordinal %d fo" ??_C@_0EK@DGKMIJBL@Locating?5export?5at?5ordinal?5?$CFd?5fo@
0x180095420: wcscspn
0x1801645A0: AVrfpVerifierLock
0x1800F8880: RtlIsValidOemCharacter
0x18011FF80: "Loading procedure 0x%lx by ordin" ??_C@_0CE@NJHOKOOH@Loading?5procedure?50x?$CFlx?5by?5ordin@
0x1800900C0: isspace
0x180131038: "RtlpInitializeAssemblyStorageMap" ??_C@_0CB@GEMHLFII@RtlpInitializeAssemblyStorageMap@
0x180017900: RtlpHpSegLfhVsCommit
0x18005D1B0: RtlGetAppContainerSidType
0x18003D6B8: LdrpDrainWorkQueue
0x18003DC60: RtlReleaseRelativeName
0x18006BD80: EtwpProcessNotification
0x1800822F0: RtlWow64IsWowGuestMachineSupported
0x180099800: "__cdecl ungetc_nolock" _ungetc_nolock
0x18011D138: szStandardName
0x180166540: g_werEscalationData
0x1800A3CC0: RcFrameConsolidation
0x180131F00: " NumberOfWaitingShared = %lx " ??_C@_0BO@POGOFHC@?5NumberOfWaitingShared?5?$DN?5?$CFlx?6?$AA@
0x1800954E0: wcsncmp
0x18004E050: RtlpWaitOnAddress
0x180122660: "INFO" ??_C@_04BEADLPGM@INFO?$AA@
0x1800A12A0: NtEnumerateTransactionObject
0x18012F170: " ==============================" ??_C@_0MB@BBMEIHK@?6?6?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN@
0x18006F9F0: RtlCopySecurityDescriptor
0x1800A0270: ZwAccessCheckByTypeAndAuditAlarm
0x18013A348: "Semaphore" ??_C@_1BE@NPGPGCB@?$AAS?$AAe?$AAm?$AAa?$AAp?$AAh?$AAo?$AAr?$AAe?$AA?$AA@
0x18001DF90: CsrFreeCaptureBuffer
0x180080628: RtlpValidateSidBuffer
0x180002A50: WinSqmStartSqmOptinListener
0x18012ECE0: "AVRF: exception raised while pro" ??_C@_0DE@BOOLGHMF@AVRF?3?5exception?5raised?5while?5pro@
0x1800F6730: RtlGetElementGenericTableAvl
0x1800F3930: RtlpSetHeapDebuggingInformation
0x180028A18: LdrpDoPostSnapWork
0x1800A3470: KiUserCallbackDispatcher
0x18011CEE0: "~MHz" ??_C@_19KBOEDNGH@?$AA?$HO?$AAM?$AAH?$AAz?$AA?$AA@
0x1800A1A80: NtOpenKeyEx
0x180045640: RtlIntegerToChar
0x180137EA8: " *** Resource timeout (%p) in " ??_C@_0CJ@IHJLMNBP@?6?6?5?$CK?$CK?$CK?5Resource?5timeout?5?$CI?$CFp?$CJ?5in?5@
0x1800A19C0: NtNotifyChangeMultipleKeys
0x18005F450: RtlpCapabilityCheckSystemCapability
0x1800A2340: NtRaiseHardError
0x18009FF30: ZwReadVirtualMemory
0x18008A450: RtlCapabilityCheckForSingleSessionSku
0x180079430: RtlIsDosDeviceName_U
0x180073774: EtwpSetProviderTraits
0x180037260: LdrResolveDelayLoadedAPI
0x18004E288: LdrpGetDllPath
0x180165FFC: LdrpDefaultDllDirectories
0x180165238: LdrpMapAndSnapWork
0x1800DEB00: WerpIsDebugPortPresent
0x18005C060: RtlIsParentOfChildAppContainer
0x180067D98: LdrpFreeReplacedModule
0x180166300: RtlpMemoryBlockLookasideLock
0x1800E4E80: LdrpResFileSize
0x18004E9A8: TppWorkInitialize
0x1800A3060: NtWaitForAlertByThreadId
0x1800A08C0: ZwAreMappedFilesTheSame
0x1800F7670: RtlDrainNonVolatileFlush
0x180085BF0: RtlGetEnabledExtendedFeatures
0x18009FA70: NtQueryInformationProcess
0x180086BF0: RtlExtendCorrelationVector
0x18013A0C0: "ThreadPool: callback %p(%p) retu" ??_C@_0ED@KFDANBGF@ThreadPool?3?5callback?5?$CFp?$CI?$CFp?$CJ?5retu@
0x180045240: LdrpLogDelayLoadTrigger
0x1800275F0: RtlGetFileMUIPath
0x1800A1CA0: NtOpenTransactionManager
0x1800461E0: RtlxOemStringToUnicodeSize
0x180088B30: RtlWow64CallFunction64
0x1800A2E60: ZwTestAlert
0x18003F06C: SwitchedRtlGetVersion
0x18011FEE0: "Unable to build import redirecti" ??_C@_0DJ@CJMGMKMH@Unable?5to?5build?5import?5redirecti@
0x180048C70: RtlAnsiStringToUnicodeString
0x18011FCD8: "__cdecl d_max" _d_max
0x180164980: AVrfpCurrentUserKeyPath
0x18005B648: EtwpReleasePrivateBuffers
0x1801281A8: "Puck" ??_C@_19CDJGIDMD@?$AAP?$AAu?$AAc?$AAk?$AA?$AA@
0x180072B90: RtlMultiAppendUnicodeStringBuffer
0x18003DD24: RtlpDosPathNameToRelativeNtPathName_U
0x180055880: RtlpHpVsChunkDecommit
0x1800A2D20: ZwSignalAndWaitForSingleObject
0x1800DB488: AVrfOpenCurrentUserImageFileOptionsKey
0x1800A1760: NtLoadKey
0x18006BEB8: EtwpAllocateUmGuidEntry
0x180128260: "Building Automation" ??_C@_1CI@MKBKMNBL@?$AAB?$AAu?$AAi?$AAl?$AAd?$AAi?$AAn?$AAg?$AA?5?$AAA?$AAu?$AAt?$AAo?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800A0440: ZwAddAtomEx
0x18003BD88: RtlpNameprepAsciiRealWorker
0x18008F880: "__cdecl _report_gsfailure" __report_gsfailure
0x1800EB074: RtlpValidAttributeInfo
0x1801782A0: RtlpDynamicFunctionTableTree
0x1800E0230: RtlpEnsureTailingSlashAndAddToList
0x18012C9F0: "Delaying execution failed with s" ??_C@_0CP@KJIIEJMD@Delaying?5execution?5failed?5with?5s@
0x18009FFD0: ZwQueryDefaultUILanguage
0x180074B90: EtwpEventApiCallback
0x180092FD0: floor
0x1800CE6F0: RtlReadThreadProfilingData
0x18009FF90: NtDuplicateToken
0x1800D69E8: LdrpQueryIllegalCWDDevices
0x180074900: CompatCachepLookupCdb
0x1800D4474: LdrpInitializeNlsInfo
0x180138C10: "Parameter2: %p " ??_C@_0BA@KMPNGOM@Parameter2?3?5?$CFp?6?$AA@
0x18006B098: EtwpStartUmLogger
0x180131B40: " Item:" ??_C@_1O@CLPPMPN@?$AA?5?$AAI?$AAt?$AAe?$AAm?$AA?3?$AA?$AA@
0x1800A28A0: NtSetHighEventPair
0x1801322E0: "\System32\" ??_C@_1BG@MINPLFIK@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AA?$AA@
0x18008DF80: RtlSendMsgToSm
0x18008B4C8: RtlpTpIoDllUnloaded
0x18001F488: RtlpHpVaMgrCtxAllocatorReference
0x18012E510: "LdrpCallTlsInitializers" ??_C@_0BI@NBKNDJPA@LdrpCallTlsInitializers?$AA@
0x1800E1660: RtlComputeImportTableHash
0x180089730: RtlpWow64CtxFromAmd64
0x180103A84: RtlpHeapLogRangeReserve
0x18012C898: "LdrpSearchPath" ??_C@_0P@KEOCLEFC@LdrpSearchPath?$AA@
0x180166808: RtlpLDNumBlocks
0x180076040: RtlUnicodeStringToInteger
0x18012C328: "LdrpMergeNodes" ??_C@_0P@OLCMBEMN@LdrpMergeNodes?$AA@
0x1800A18E0: NtMapUserPhysicalPages
0x18012C4B0: "LdrResolveDelayLoadedAPI:Unable " ??_C@_0II@BCPNIILB@LdrResolveDelayLoadedAPI?3Unable?5@
0x1801200B8: "LdrpPreprocessDllName for DLL %w" ??_C@_0DO@PNDPHKOL@LdrpPreprocessDllName?5for?5DLL?5?$CFw@
0x180138CC8: szTimeZoneKeyName
0x1801125FC: PsspCaptureVaSpaceInformation
0x18012CE70: "LdrpGetProcApphelpCheckModule" ??_C@_0BO@OEAOJJID@LdrpGetProcApphelpCheckModule?$AA@
0x1800A2460: ZwRemoveIoCompletionEx
0x1800D74D0: ApiSetQueryApiSetPresenceEx
0x1800FEC40: RtlpTraceDatabaseInternalFind
0x1800A1020: NtCreateWorkerFactory
0x18001CA40: RtlpHpLfhBucketInitialize
0x18009AB60: vsprintf_s
0x1800A29C0: NtSetInformationToken
0x18012EAD8: "VerifierDlls" ??_C@_1BK@PIIJKLGC@?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAD?$AAl?$AAl?$AAs?$AA?$AA@
0x180063BF0: MD5Final
0x1801645D0: AVrfpVerifierProvidersList
0x18008697C: LdrpValidateIntegrityContinuity
0x18008CD28: EtwpTrackRegBinaryInfo
0x180132748: "RtlpQueryRegistryValues: Miscomp" ??_C@_0DN@BGIBODAP@RtlpQueryRegistryValues?3?5Miscomp@
0x180104554: RtlpHpStackTraceAllocRemove
0x1800A3040: ZwVdmControl
0x180022E70: RtlUnsubscribeWnfNotificationWaitForCompletion
0x18003DFCC: LdrpProcessWork
0x1800E9160: RtlIsCriticalSectionLocked
0x18004B068: RtlpFindNextActivationContextSection
0x18012EE00: "AVRF: exception raised in provid" ??_C@_0EA@MOIDJOKE@AVRF?3?5exception?5raised?5in?5provid@
0x1800E5B64: LdrpResValidateFileHandle
0x180139368: "SegmentReserve" ??_C@_0P@KCAAENCL@SegmentReserve?$AA@
0x180128100: "Phone" ??_C@_1M@ENKMPMBE@?$AAP?$AAh?$AAo?$AAn?$AAe?$AA?$AA@
0x1800E0E70: RtlpQueryFilesInAssemblyInformationActivationContextDetailedInformation
0x180162714: LdrpPolicyBits
0x1800A07C0: NtAlpcImpersonateClientOfPort
0x180131CF8: "LdrpResMapFile Exit" ??_C@_1CI@GPCKFCKC@?$AAL?$AAd?$AAr?$AAp?$AAR?$AAe?$AAs?$AAM?$AAa?$AAp?$AAF?$AAi?$AAl?$AAe?$AA?5?$AAE?$AAx?$AAi?$AAt?$AA?$AA@
0x180089130: PssNtWalkSnapshot
0x18004D3A8: RtlLogStackBackTraceEx
0x18006FF50: RtlSetCurrentTransaction
0x1800415D0: SbpUpdateCacheWithCurrentImpl
0x180138500: " *** enter .cxr %p for the cont" ??_C@_0CF@PEGCDMH@?5?$CK?$CK?$CK?5?5enter?5?4cxr?5?$CFp?5for?5the?5cont@
0x180028494: LdrpWriteBackProtectedDelayLoad
0x18004ABC4: RtlpFindUnicodeStringInSection
0x18010C5B8: RtlpHpReallocMove
0x1801310B0: "RtlpInsertAssemblyStorageMapEntr" ??_C@_0CC@KAFENPMP@RtlpInsertAssemblyStorageMapEntr@
0x1800A3100: NtWaitLowEventPair
0x180089608: PsspWalkInfoClass_PSS_WALK_THREADS
0x1800A0300: NtTraceEvent
0x1800A2800: NtSetDefaultHardErrorPort
0x1800A2720: ZwSerializeBoot
0x18011FE58: "LdrpFindOrPrepareLoadingModule" ??_C@_0BP@ONAGLLLA@LdrpFindOrPrepareLoadingModule?$AA@
0x180138B48: "heap_failure_cross_heap_operatio" ??_C@_0CC@DEFHEJOP@heap_failure_cross_heap_operatio@
0x180018DB4: RtlpHpSegMgrCommit
0x18008A0F8: RtlpCopyLegacyContextX86
0x180083BD0: RtlEndStrongEnumerationHashTable
0x18001E718: RtlpProbeUserBufferSafe
0x180065D74: LdrpDetectDetour
0x180131340: "SXS: Attempt to probe known root" ??_C@_0FH@PKKCIKPJ@SXS?3?5Attempt?5to?5probe?5known?5root@
0x18009FB70: NtQueryInformationToken
0x1800A0C20: NtCreateIoCompletion
0x18012C0C8: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18008D6E0: RtlConvertExclusiveToShared
0x1800FC02C: NormBuffer__SortBeforeSameClass
0x18010DDC0: MD4Final
0x18009F8F0: NtSetInformationThread
0x1800751F8: TppExecuteWaitCallback
0x1800A1960: NtNotifyChangeDirectoryFile
0x18012C338: "minkernel\ntdll\ldrddag.c" ??_C@_0BK@DFNKGAHA@minkernel?2ntdll?2ldrddag?4c?$AA@
0x1800FB964: ComposeHangulLV
0x1800DD760: RtlDecodeRemotePointer
0x18012DFD0: "LdrpFindKnownDll" ??_C@_0BB@GNDICFML@LdrpFindKnownDll?$AA@
0x180123188: "CONOUT$" ??_C@_1BA@BALFACEM@?$AAC?$AAO?$AAN?$AAO?$AAU?$AAT?$AA$?$AA?$AA@
0x1800A1EC0: ZwQueryDirectoryObject
0x180118D00: RtlpMemoryBlockLookasideCriticalRoutines
0x1800A2C40: ZwSetTimerEx
0x18002E1F8: LdrpQueryValueKey
0x1801061D0: RtlpPrintErrorInformation
0x1800A1C00: ZwOpenSession
0x1800CDC40: CsrCaptureTimeout
0x1801304F0: "SXS: %s() found assembly informa" ??_C@_0KH@BBCKLANG@SXS?3?5?$CFs?$CI?$CJ?5found?5assembly?5informa@
0x180137FA0: " *** Critical Section Timeout " ??_C@_0DB@LDKEGGKM@?6?6?5?$CK?$CK?$CK?5Critical?5Section?5Timeout?5@
0x18012BDF0: SetLastWin32ErrorEvent
0x1800A0960: ZwCancelSynchronousIoFile
0x1800700AC: AppModelPolicy_GetPolicy_Internal
0x180165328: UseCOR
0x18001AD80: RtlpAddHeapToProtectedList
0x180138140: "This means the machine is out of" ??_C@_0FP@KDDLACAE@This?5means?5the?5machine?5is?5out?5of@
0x18013A318: "Event" ??_C@_1M@JJBFPLJB@?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
0x1800FD490: RtlLogStackTrace
0x18004DE9C: RtlpWaitOnCriticalSection
0x1800A1A00: NtOpenEnlistment
0x18012D9E0: "PageHeapFlags" ??_C@_1BM@PHBMAMOE@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x180120988: "__cdecl _imp_ZwCreateKey" __imp_ZwCreateKey
0x1800ECA50: RtlNumberOfClearBitsInRange
0x18009A270: "__cdecl splitpath_s" _splitpath_s
0x180072ED0: LdrpDestroyNode
0x180083554: RtlpGetNormalization
0x180086670: LdrSetDllManifestProber
0x1800D0930: LdrSetImplicitPathOptions
0x180002F20: RtlGuardCheckLongJumpTarget
0x18012CEE0: "Loading WOW64 image management D" ??_C@_0EF@NCEIEIKL@Loading?5WOW64?5image?5management?5D@
0x180118080: RtlpEmptyString
0x180166818: RtlpLeakHeapAddress
0x18009FD50: NtOpenProcessTokenEx
0x18009FC90: NtUnmapViewOfSection
0x180085C38: LdrpCheckPolicy
0x18001E8DC: RtlpHpLfhContextInitialize
0x1800A2440: NtReleaseWorkerFactoryWorker
0x1800A2A00: ZwSetInformationTransactionManager
0x180087930: TppJobpFree
0x1800FCBC0: RtlIsNormalizedString
0x1800A1E40: ZwQueryBootEntryOrder
0x18004B390: RtlFindCharInUnicodeString
0x180019C58: RtlpCollectFreeBlocks
0x18005F4D8: RtlpGetPolicyValueForSystemCapability
0x180165FC8: RtlpUnloadEventTraceEx
0x18011CC00: "%%%u" ??_C@_19PBHPHAE@?$AA?$CF?$AA?$CF?$AA?$CF?$AAu?$AA?$AA@
0x180075310: RtlUniform
0x1800358E4: RtlStringCchLengthW
0x1800E4930: LdrProcessRelocationBlockEx
0x180164020: NlsUnicodeToMbOemData
0x1800A1F40: NtQueryInformationAtom
0x1800F51D0: RtlCrc64
0x1800A07A0: NtAlpcImpersonateClientContainerOfPort
0x18011FD98: "LdrpFindLoadedDllInternal" ??_C@_0BK@LBKPCGGL@LdrpFindLoadedDllInternal?$AA@
0x180138060: "The critical section is unowned." ??_C@_0GG@GLOMMEJH@The?5critical?5section?5is?5unowned?4@
0x18005AE30: EtwLogTraceEvent
0x180082DD0: LdrpTargetCompare
0x180037DA0: RtlpNewSecurityObject
0x180075920: RtlQueryWnfStateData
0x180163458: PrivateLoggerNotificationEntry
0x1800F6850: RtlDeregisterSecureMemoryCacheCallback
0x18012FAF8: "SXS: %s() called with invalid fl" ??_C@_0CN@BFKOPFCA@SXS?3?5?$CFs?$CI?$CJ?5called?5with?5invalid?5fl@
0x1800A0560: NtAllocateReserveObject
0x180162798: RtlpLargestLfhBlock
0x18005A8AC: RtlStringCchPrintfExW
0x180118FE0: RtlpMemoryZoneCriticalRoutines
0x180018AD8: RtlpCreateUCREntry
0x1800A0DC0: NtCreateProcess
0x18005CA70: RtlQueryPerformanceCounter
0x180127E08: "ResourcePolicies" ??_C@_1CC@NNGJHDFE@?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?$AA@
0x1801699A0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUzkkxlnkzgUxzxsvUrmgviuzxvUorynrmUlyquivUznwGEUxlnkzgxzxsvkOlyq@compatcachemin" __@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUzkkxlnkzgUxzxsvUrmgviuzxvUorynrmUlyquivUznwGEUxlnkzgxzxsvkOlyq@compatcachemin
0x1800F5140: RtlpCopyMappedMemoryEx_ExceptionFilter
0x180122E10: "\Registry\Machine\Hardware\Devic" ??_C@_1EK@KPCANCBO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc@
0x1800D1738: LdrpLogEtwEvent
0x1800F3B6C: RtlpUpdateTagEntry
0x18012D120: "Initializing the execution optio" ??_C@_0FD@MKJELIIJ@Initializing?5the?5execution?5optio@
0x18009F7B0: ZwMapUserPhysicalPagesScatter
0x1801200A0: "LdrpPreprocessDllName" ??_C@_0BG@DPDMGJML@LdrpPreprocessDllName?$AA@
0x18009F5B0: NtdllGhostWndProc_W
0x1800FBFE4: NormBuffer__RewindOutputCharacter
0x18012D178: "Initializing process 0x%p " ??_C@_0BL@OMICNFNA@Initializing?5process?50x?$CFp?6?$AA@
0x180120078: "DLL %wZ was redirected to %wZ by" ??_C@_0CF@EKBLGBJB@DLL?5?$CFwZ?5was?5redirected?5to?5?$CFwZ?5by@
0x1801377E0: "(UCRBlock != NULL)" ??_C@_0BD@NIMLHKID@?$CIUCRBlock?5?$CB?$DN?5NULL?$CJ?$AA@
0x180165B38: CsrPortBaseTag
0x18009F650: NtdllDispatchMessage_W
0x18011F2F0: "__cdecl _real@3f3c8034c85dfff0" __real@3f3c8034c85dfff0
0x180131EA0: "RTL: Resource at %p " ??_C@_0BF@JHJCBILK@RTL?3?5Resource?5at?5?$CFp?6?$AA@
0x1800959B0: wcstombs
0x18008B400: RtlpTpIoDllNotification
0x1800D750C: LdrpFatalExceptionFilter
0x18012F730: "rUS.Length <= This->PrivatePreal" ??_C@_0DN@JEHNPGLO@rUS?4Length?5?$DM?$DN?5This?9?$DOPrivatePreal@
0x180095470: wcslen
0x1800D0F78: LdrpHandleUnprotectedDelayLoad
0x1800A2520: NtReplyWaitReplyPort
0x180110B8C: TppETWTimerExpirationBegin
0x180058368: RtlpHpVaMgrCtxAlloc
0x1800EDDC0: RtlCreateRegistryKey
0x180139B20: "Heap block at %p has corrupted P" ??_C@_0DD@MHHHEDI@Heap?5block?5at?5?$CFp?5has?5corrupted?5P@
0x18007E230: RtlRemoveEntryHashTable
0x180166340: RtlpHpStackTraceProviderHandle
0x1801663D8: EtwpGuidEntryTable
0x1800A19E0: NtNotifyChangeSession
0x180019F04: RtlpGrowBlockInPlace
0x18010FC40: EtwpTrackDebugIdForSession
0x1800D29D0: "__cdecl TlgDefineProvider_annotation__TlgLdrpMuiResourceLoaderTraceLoggingProviderProv" _TlgDefineProvider_annotation__TlgLdrpMuiResourceLoaderTraceLoggingProviderProv
0x1800A3000: NtUnsubscribeWnfStateChange
0x18012E5C0: "LdrpGenericExceptionFilter" ??_C@_0BL@IACDIBFN@LdrpGenericExceptionFilter?$AA@
0x18006FC80: RtlMakeSelfRelativeSD
0x180104E64: RtlpHpStackTraceSerializeRemote
0x18010D92C: RtlpHpSegPageRangeComputeLargePageCost
0x18012D710: "Loading of import redirection mo" ??_C@_0EA@HPLDKLDC@Loading?5of?5import?5redirection?5mo@
0x1800A1DA0: ZwPrivilegedServiceAuditAlarm
0x18011CBBC: "::" ??_C@_15HEEKGCFC@?$AA?3?$AA?3?$AA?$AA@
0x18011D788: "SE_ShimDllLoaded" ??_C@_0BB@PFKJEAC@SE_ShimDllLoaded?$AA@
0x18009F5A0: NtdllGhostWndProc_A
0x180103400: RtlpNtMakeTemporaryKey
0x18011D7D8: "%u.%u.%u.%u" ??_C@_0M@CDHNGIPM@?$CFu?4?$CFu?4?$CFu?4?$CFu?$AA@
0x180137AD8: "Entry Heap Size" ??_C@_0CJ@BMJPHAKI@Entry?5?5?5?5?5Heap?5?5?5?5?5?5?5?5?5?5?5?5?5?5Size@
0x18006DB18: EtwpCreateRegGuidsContext
0x180080700: LdrpCreateLoaderEvents
0x180138010: "Go determine why that thread has" ??_C@_0EG@FOJKMAGM@Go?5determine?5why?5that?5thread?5has@
0x18015F010: "__cdecl _initiallocinfo" __initiallocinfo
0x1800E02C8: RtlpLookupSafeCurDirList
0x1800A1FC0: NtQueryInformationPort
0x180139A78: "Free Heap block %p modified at %" ??_C@_0DG@BIBPEJPF@Free?5Heap?5block?5?$CFp?5modified?5at?5?$CF@
0x180137C58: "%02X-%02X-%02X-%02X-%02X-%02X" ??_C@_1DM@IMCLLIIF@?$AA?$CF?$AA0?$AA2?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$AA@
0x180114DBC: RtlpQueryDiskWriteConstraintPolicyByHandle
0x180088D10: RtlEqualWnfChangeStamps
0x1801184D0: TppSimplepTaskVFuncs
0x1800F86D0: RtlIsNameLegalDOS8Dot3
0x18007D0C8: TppPoolUpdateTrimmedWorker
0x18011DD90: "__cdecl _real@3c7007887af0cbbc" __real@3c7007887af0cbbc
0x18012D330: "NTDLL!" ??_C@_1O@BCGMDHAO@?$AAN?$AAT?$AAD?$AAL?$AAL?$AA?$CB?$AA?$AA@
0x1800A28C0: ZwSetHighWaitLowEventPair
0x180068640: RtlUnicodeStringCat
0x180178220: g_LdrpWow64LdrpInitialize
0x180088350: RtlRunEncodeUnicodeString
0x18003F6E8: RtlpTpInitializeData
0x18008D8B0: RtlAllocateAndInitializeSidEx
0x1800A1300: ZwFilterToken
0x1800A2760: NtSetBootOptions
0x180067960: EtwEventActivityIdControl
0x18006DEC0: RtlQueryTimeZoneInformation
0x180123080: "VIDEOSLIBRARY" ??_C@_1BM@JGFBBEDO@?$AAV?$AAI?$AAD?$AAE?$AAO?$AAS?$AAL?$AAI?$AAB?$AAR?$AAA?$AAR?$AAY?$AA?$AA@
0x180139450: "MaximumTagIndex" ??_C@_0BA@OMHBDFIN@MaximumTagIndex?$AA@
0x18012C150: "Legacy" ??_C@_1O@ECNENGDC@?$AAL?$AAe?$AAg?$AAa?$AAc?$AAy?$AA?$AA@
0x180036020: RtlFirstFreeAce
0x180069EF4: EtwpQueryUmLogger
0x180163AA8: RtlpDphInitFailureFlags
0x1801087CC: RtlDebugZeroHeap
0x180101958: ValidateRegistrLangType
0x1801664A8: LdrpVchLock
0x180132F50: crc64Map32_
0x180162794: RtlpMaxNumberOfProtectedHeaps
0x18005BF4C: EtwpDequeueFreeBuffer
0x1800A2AE0: ZwSetLowEventPair
0x18011F388: "__cdecl _real@3ff1dfcb8caa40b8" __real@3ff1dfcb8caa40b8
0x18011FF68: "LdrpGetProcedureAddress" ??_C@_0BI@BLNBHLCM@LdrpGetProcedureAddress?$AA@
0x18011DC60: "User32 init not called" ??_C@_0BH@IDCMGDMD@User32?5init?5not?5called?$AA@
0x18008BCCC: EtwpTraceUmMessage
0x1800A1C40: ZwOpenThread
0x180085CE0: RtlGetActiveConsoleId
0x180006770: RtlpCopyContext
0x1800E689C: UpcaseUnicodeToUTF8NHelper
0x1800EB4B0: RtlResetMemoryBlockLookaside
0x18009A5A0: "__cdecl strset_s" _strset_s
0x18002C850: LdrpSectionTableFromVirtualAddress
0x1800EBE30: RtlCopyBitMap
0x18003E760: RtlDeleteTimer
0x1800F4A50: RtlWeaklyEnumerateEntryHashTable
0x18000B890: RtlGetFullPathName_Ustr
0x1800F26F0: RtlValidateProcessHeaps
0x1800E6CD0: RtlLocalTimeToSystemTime
0x18011C0C0: "Latest" ??_C@_1O@PILNADBK@?$AAL?$AAa?$AAt?$AAe?$AAs?$AAt?$AA?$AA@
0x1800EDE00: RtlGetNtGlobalFlags
0x180009AE0: RtlpEnterCriticalSectionContended
0x18012D8D0: "Walking the import tables of the" ??_C@_0FP@MHJEMPFN@Walking?5the?5import?5tables?5of?5the@
0x180051A68: TppCheckForTransactions
0x1800368B8: RtlpMuiRegGetInstalledLanguageIndexByName
0x1800955A0: wcspbrk
0x180102A00: "__cdecl RtlpMuiRegValidateAndGetInstallFallbackBase" _RtlpMuiRegValidateAndGetInstallFallbackBase
0x1800912B0: "__cdecl wcslwr" _wcslwr
0x180079490: RtlpSetSecurityObject
0x18004F180: TppIopValidateIo
0x1800A2420: NtReleaseKeyedEvent
0x18011F318: "__cdecl _real@3f89999999bac6d4" __real@3f89999999bac6d4
0x18011F6A0: "__cdecl wctype" _wctype
0x1800E1C10: vDbgPrintEx
0x180164EAC: RtlFailedCriticalDebugAllocations
0x1800A06C0: NtAlpcCreateSectionView
0x18009E8EC: RtlpUnwindEpilogue
0x1800A21C0: NtQuerySecurityObject
0x1801394E8: "PseudoTagEntries" ??_C@_0BB@GKGFCBGK@PseudoTagEntries?$AA@
0x180002A50: WinSqmCheckEscalationSetString
0x1800A03E0: ZwAccessCheckByTypeResultListAndAuditAlarm
0x180137D18: "LocaleName" ??_C@_1BG@IDPMNIFP@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18009FBD0: NtOpenThreadToken
0x1800A2C60: NtSetTimerResolution
0x180108428: RtlDebugSetUserValueHeap
0x18010F850: EtwpFindDebugId
0x1800856A0: RtlCompressBuffer
0x180043240: RtlFreeAnsiString
0x1800FADE0: RtlInterlockedPushListSListEx
0x18006C1B0: RtlpCreateUserThreadEx
0x18011EEB8: "floor" ??_C@_05PBJFFIGL@floor?$AA@
0x1800A2AC0: ZwSetLdtEntries
0x180105CDC: RtlpLogHeapSubSegmentAlloc
0x1801663A8: RtlpPerformanceCounterFrequency
0x1800F7E80: RtlFormatMessage
0x1800DC3BC: AVrfpSnapAlreadyLoadedDlls
0x1800D1484: LdrpLogEtwDllSearchResults
0x180118480: TppWorkpCleanupGroupMemberVFuncs
0x18013A160: "ThreadPool: callback %p(%p) retu" ??_C@_0ED@JIMNPJPL@ThreadPool?3?5callback?5?$CFp?$CI?$CFp?$CJ?5retu@
0x180068A80: RtlInsertEntryHashTable
0x180081F8C: TppDestroyTimerSubQueue
0x180164288: Nls844UnicodeLowercaseTable
0x180073324: RtlpLowFragHeapAllocateFromZone
0x180138690: "Trace database: failed to releas" ??_C@_0CP@PHIFJIAO@Trace?5database?3?5failed?5to?5releas@
0x180067B30: RtlConvertSharedToExclusive
0x180128058: "Windows.XBoxERA" ??_C@_1CA@MPKNCDMD@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAX?$AAB?$AAo?$AAx?$AAE?$AAR?$AAA?$AA?$AA@
0x180098230: "__cdecl raise_exc" _raise_exc
0x180052C14: TppSetTimer
0x180051900: RtlAcquireSRWLockExclusive
0x1800EED18: RtlUnicodeStringToLcid
0x1800DD220: RtlWow64GetThreadSelectorEntry
0x180090D10: "__cdecl strupr" _strupr
0x1800726A0: RtlDecompressBufferXpressLz
0x180132410: RtlpBitsClearAnywhere
0x18006F944: RtlpGetImageBaseViaQueryVirtualMemory
0x1800E2B00: RtlOpenImageFileOptionsKey
0x18009B240: wcscpy_s
0x1800A11E0: ZwDisplayString
0x180026B70: RtlLookupAtomInAtomTable
0x1800678D0: RtlEnumerateGenericTableAvl
0x18009F580: NtdllImeWndProc_A
0x18009F560: NtdllStaticWndProc_A
0x18007BAA0: RtlSetHeapInformation
0x180078C80: RtlpCompareProtectedPolicyEntry
0x180063CC0: MD5Update
0x1800A10C0: ZwDeleteDriverEntry
0x180084320: RtlSetBit
0x1800A2920: NtSetInformationEnlistment
0x1800DE888: WerpBreakIntoDebuggerIfPresent
0x180127FF0: "Windows.Server" ??_C@_1BO@KLFDLACC@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
0x1800A13A0: ZwFlushKey
0x1801301D0: "RtlFindActivationContextSectionG" ??_C@_0GE@JMDGNLMA@RtlFindActivationContextSectionG@
0x1800EB610: RtlResetMemoryZone
0x180138350: "This is usually the result of a " ??_C@_0HP@GKIHMNKI@This?5is?5usually?5the?5result?5of?5a?5@
0x18008FFD0: isdigit
0x1800813B8: TppJobpRundownJob
0x1800A0740: ZwAlpcDeleteSectionView
0x1800A28E0: NtSetIRTimer
0x18003D970: RtlDeregisterWaitEx
0x180087EE0: RtlpWnfMetaCallbackProc
0x18004B830: LdrpIncrementModuleLoadCount
0x180137FD8: "The critical section is owned by" ??_C@_0CN@FONAGEDF@The?5critical?5section?5is?5owned?5by@
0x18012C358: "Adding cyclic module %wZ. " ??_C@_0BL@KADGKMMO@Adding?5cyclic?5module?5?$CFwZ?4?6?$AA@
0x1801317F0: "SXS: %s() passed the empty activ" ??_C@_0CP@PLOPKHNF@SXS?3?5?$CFs?$CI?$CJ?5passed?5the?5empty?5activ@
0x180165418: LdrpCorExeMainRoutine
0x18011D0F8: szStandardStart
0x18012D930: "Running the init routines of the" ??_C@_0FJ@LONDICCE@Running?5the?5init?5routines?5of?5the@
0x180165200: LdrpActiveThreadCount
0x180122D58: "FIRMWARE_TYPE" ??_C@_1BM@CGNBCCHA@?$AAF?$AAI?$AAR?$AAM?$AAW?$AAA?$AAR?$AAE?$AA_?$AAT?$AAY?$AAP?$AAE?$AA?$AA@
0x18009F590: NtdllImeWndProc_W
0x18009F2B8: RtlpHpVsDelayFreeContextFlush
0x18011FDB8: "minkernel\ntdll\ldrfind.c" ??_C@_0BK@IODOFKLI@minkernel?2ntdll?2ldrfind?4c?$AA@
0x1800A0520: ZwAlertThreadByThreadId
0x18012E2D0: "Init routine %p for DLL "%wZ" fa" ??_C@_0EA@OCPKFPKK@Init?5routine?5?$CFp?5for?5DLL?5?$CC?$CFwZ?$CC?5fa@
0x1800E7190: PfxRemovePrefix
0x1800841D0: RtlQueryThreadPlaceholderCompatibilityMode
0x1801627B8: g_sqmSessionHandle
0x1800F8E98: RtlpGetLocaleDataKey
0x1800A1780: ZwLoadKey2
0x180166550: g_SxsCurrentDeadActivationContexts
0x180017980: RtlpHpSegPageRangeCommit
0x18003A510: RtlCreateSecurityDescriptor
0x180095DB4: "__cdecl strtoi64" _strtoi64
0x1800DCFC0: RtlApplicationVerifierStop
0x18006EBC8: RtlpCallQueryRegistryRoutine
0x1800A2FC0: ZwUnlockVirtualMemory
0x180033FB0: RtlAcquireSRWLockShared
0x1800FD8D0: RtlpGetStackTraceAddress
0x180009F14: RtlpHpReAllocWithExceptionProtection
0x18010E450: MD4Update
0x1801399F8: "Invalid address specified to %s(" ??_C@_0CL@CDEHKFFI@Invalid?5address?5specified?5to?5?$CFs?$CI@
0x18010DB1C: RtlCSparseBitmapStart
0x1800FAB00: RtlImageNtHeaderEx_ExceptionFilter
0x180122A60: "CommonProgramFiles(x86)" ??_C@_1DA@NDENMJEC@?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$CI?$AAx?$AA8?$AA6?$AA?$CJ?$AA?$AA@
0x180085E40: RtlAddAuditAccessAceEx
0x180031A40: RtlGetThreadPreferredUILanguages
0x180099728: "__cdecl fputwc_nolock" _fputwc_nolock
0x1800A2360: ZwReadOnlyEnlistment
0x18009F5C0: NtdllHkINLPCWPSTRUCT_A
0x1800FAE50: RtlIsPartialPlaceholderFileInfo
0x1801108F0: TppETWPoolThreadMax
0x1800F8B20: UserDiagnosticProviderCallback
0x1800A14E0: ZwGetCurrentProcessorNumber
0x18011C048: "LanguageOverlayKeyName" ??_C@_1CO@MMDGMHGB@?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AAO?$AAv?$AAe?$AAr?$AAl?$AAa?$AAy?$AAK?$AAe?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18012CAC0: "Process initialization raised ex" ??_C@_0GF@LOFCHEHI@Process?5initialization?5raised?5ex@
0x180130CE8: "SXS: %s() - Caller passed invali" ??_C@_0DA@MHMBOCBK@SXS?3?5?$CFs?$CI?$CJ?5?9?5Caller?5passed?5invali@
0x1800A0070: ZwQueryVolumeInformationFile
0x18012F940: "SXS: Activation context data at " ??_C@_0ED@OGHCNIJK@SXS?3?5Activation?5context?5data?5at?5@
0x1800DE370: RtlWerpReportException
0x180119600: "`RtlpGetLocaleDataKey'::`2'::KeyPath" ?KeyPath@?1??RtlpGetLocaleDataKey@@9@9
0x180166308: RtlpMemoryZoneLock
0x1801149FC: GetProcessIptTraceSize
0x180166514: LdrpCODScenarioTriggered
0x180105C38: RtlpLogHeapSubSegmentActivate
0x18007FEB0: RtlCheckForOrphanedCriticalSections
0x1800A1A40: NtOpenIoCompletion
0x1800CF6E0: LdrpCreateSoftwareEnclave
0x180164300: AlternateResourceModuleCount
0x1800D24FC: LdrpLogVsmEnclaveLdrInitializeEnclaveTelemetry
0x1800A0B80: ZwCreateDirectoryObjectEx
0x1801664B8: g_SxsTrackReleaseStacks
0x1800CF31C: LdrIsEnclaveAddress
0x1800DD150: RtlQueueApcWow64Thread
0x1800497FC: LdrpLogDllState
0x1800263A4: BuildOverlayFilePath
0x180120AA0: RtlpLfhBucketIndexMap
0x1800FD990: RtlpStackTraceDatabaseHeapEnum
0x18008C918: RtlpSysVolCreateSecurityDescriptor
0x180109E74: RtlpGetLowFragHeapMetadataSize
0x180093120: iswascii
0x18010BAFC: RtlpMakeXpressCallback
0x1800886F0: RtlSetProxiedProcessId
0x180061938: XpressDoHuffmanPass
0x180139F50: "services.exe" ??_C@_1BK@ILFKGFOJ@?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18009FB50: ZwReleaseMutant
0x180120970: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x18012F9E0: "SXS: Activation context data at " ??_C@_0EH@NLPJDNNO@SXS?3?5Activation?5context?5data?5at?5@
0x18012A680: RtlpRunTable
0x180131610: "SXS: %s() bad parameters SXS: F" ??_C@_0OP@PLNCBDHB@SXS?3?5?$CFs?$CI?$CJ?5bad?5parameters?6SXS?3?5?5F@
0x180026CB0: RtlpHashStringToAtom
0x180095AF0: "__cdecl _NLG_Return2" __NLG_Return2
0x180165B50: RtlpCurDirRef
0x1800A00D0: NtApphelpCacheControl
0x180056104: RtlpHpScheduleCompaction
0x1800A1E20: NtQueryAuxiliaryCounterFrequency
0x1800814A8: TppJobpValidateJob
0x180088B3C: Wow64LdrpInitialize
0x180058E84: RtlpHpVaMgrAllocAligned
0x180081310: TpWaitForJobNotification
0x18002CEB0: RtlpSetProcMergedLangList
0x18012F240: "\Software\Microsoft\Windows NT\C" ??_C@_1JI@IDAENJPE@?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC@
0x180052F4C: TppPHInsert
0x18007C6B0: RtlCreateMemoryBlockLookaside
0x180131770: "SXS: Assembly storage resolution" ??_C@_0FN@EKCFLCEM@SXS?3?5Assembly?5storage?5resolution@
0x18009F810: NtReadFile
0x18005BCD4: EtwpReserveTraceBuffer
0x1800364B0: RtlAppendUnicodeToString
0x180131CC8: "LdrpResMapFile Enter" ??_C@_1CK@NNOGONOF@?$AAL?$AAd?$AAr?$AAp?$AAR?$AAe?$AAs?$AAM?$AAa?$AAp?$AAF?$AAi?$AAl?$AAe?$AA?5?$AAE?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x18015FAB0: LdrpDebugFlags
0x1800047E0: RtlDispatchException
0x1801193B0: NtDllName
0x18007F184: LdrpInitShimEngine
0x1800A05C0: NtAllocateVirtualMemoryEx
0x1800F1AC0: RtlGetProcessHeapsCallback
0x18009F530: NtdllListBoxWndProc_W
0x1800A1E60: NtQueryBootOptions
0x180076380: RtlUnlockMemoryZone
0x18004F1D8: LdrProtectMrdata
0x1800A1680: NtInitializeRegistry
0x18001E880: CsrCaptureMessageBuffer
0x180057F40: RtlInstallFunctionTableCallback
0x1800A05A0: ZwAllocateUuids
0x180078BE0: RtlGetSaclSecurityDescriptor
0x18012E4E0: "Calling TLS callback %p for DLL " ??_C@_0CN@LPCLKPOG@Calling?5TLS?5callback?5?$CFp?5for?5DLL?5@
0x18006FC60: RtlAbsoluteToSelfRelativeSD
0x180068FA4: RtlpDetermineDosPathNameType4
0x180122FD0: "SHAREDUSERCERTIFICATES" ??_C@_1CO@MBAJCLOO@?$AAS?$AAH?$AAA?$AAR?$AAE?$AAD?$AAU?$AAS?$AAE?$AAR?$AAC?$AAE?$AAR?$AAT?$AAI?$AAF?$AAI?$AAC?$AAA?$AAT?$AAE?$AAS?$AA?$AA@
0x1801221B0: "Allows getting the 6.3 version o" ??_C@_1IC@FCEANDLG@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAs?$AA?5?$AAg?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AA6?$AA?4?$AA3?$AA?5?$AAv?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAo@
0x1800A2F80: ZwUnloadKeyEx
0x180088D30: LdrQueryModuleInfoLocalLoaderUnlock
0x1800CF1B0: LdrDeleteEnclave
0x1800A1B80: NtOpenProcessToken
0x1800A6540: memset
0x1800E0AD4: RtlpPlaceActivationContextOnLiveList
0x18007F328: LdrpLoadShimEngine
0x18008F9EC: "__cdecl _report_securityfailure" __report_securityfailure
0x180097D80: RaiseException
0x1800E78F0: RtlSetAttributesSecurityDescriptor
0x1800E7070: PfxInsertPrefix
0x180042504: LdrpFindKnownDll
0x1800536B0: RtlpHpSegPageRangeAllocate
0x18010A9B4: RtlpWalkLowFragHeapSegment
0x180121F80: "UnusedField" ??_C@_1BI@NENDCIAF@?$AAU?$AAn?$AAu?$AAs?$AAe?$AAd?$AAF?$AAi?$AAe?$AAl?$AAd?$AA?$AA@
0x18009FD90: NtEnumerateKey
0x1800DFC60: RtlpWnfMarkFailure
0x180019A78: RtlpHeapAddListEntry
0x18005D0B8: RtlStringCchPrintfW
0x1800A23A0: ZwRecoverResourceManager
0x18009F520: NtdllListBoxWndProc_A
0x18001ED9C: RtlpHpSegContextInitialize
0x1801645C8: AVrfpEnabledSystemWide
0x18004F260: TppAlpcpExecuteCallback
0x180119640: RtlpHeapHeaderFieldOffsets
0x180086DB0: LdrQueryInLoadOrderModuleList32
0x180018060: RtlpHpSegFree
0x1800A1A60: NtOpenJobObject
0x180017540: RtlpHpReAllocateHeap
0x180073A10: AlpcGetMessageAttribute
0x18015F610: TppPoolpList
0x180045940: LdrGetDllHandle
0x180110CBC: TppETWTimerSetNtTimer
0x1800DD7D0: RtlEncodeRemotePointer
0x180061050: RtlGetCurrentUmsThread
0x18009FEB0: ZwCloseObjectAuditAlarm
0x180075F10: RtlpOpenBaseImageFileOptionsKeyEx
0x18011C430: "LdrpResSearchResourceMappedFile " ??_C@_1EK@PHNFFPI@?$AAL?$AAd?$AAr?$AAp?$AAR?$AAe?$AAs?$AAS?$AAe?$AAa?$AAr?$AAc?$AAh?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAM?$AAa?$AAp?$AAp?$AAe?$AAd?$AAF?$AAi?$AAl?$AAe?$AA?5@
0x18004D500: RtlRunOnceExecuteOnce
0x18012C028: "TargetNtPath" ??_C@_1BK@CIGKBGGO@?$AAT?$AAa?$AAr?$AAg?$AAe?$AAt?$AAN?$AAt?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x18012DFE8: "Unable to load DLL: "%wZ", Paren" ??_C@_0DP@NKFMMBCI@Unable?5to?5load?5DLL?3?5?$CC?$CFwZ?$CC?0?5Paren@
0x180132280: "\SysARM32\" ??_C@_1BG@MIEGEDAI@?$AA?2?$AAS?$AAy?$AAs?$AAA?$AAR?$AAM?$AA3?$AA2?$AA?2?$AA?$AA@
0x180080650: TpReleaseIoCompletion
0x180080A78: RtlpUpdateUCRIndexRemove

[JEB Decompiler by PNF Software]