Newbie Spellweaver
- Joined
- Feb 21, 2023
- Messages
- 43
- Reaction score
- 4
When I try to start it, this error appears on the image. Can anyone help me?
==================================================================================
ControlServer : Exception Program
Exe : C:\Servidor\Control Server\ControlServer_GloD.exe
OS : Windows 6.2(), build9200 PlatformId 2 ""
UserName : xxxxxxxxxxxxxxxx
Computer :
Time : 2023-02-26 SUN, 09:18:32.718 PM
Code : 80000003 BREAKPOINT
Address : 75AF80A2 01:000B70A2 C:\Windows\SYSTEM32\KERNELBASE.dll
==================================================================================
------------------------------------------------------------------------
x86 Registers
------------------------------------------------------------------------
EAX=00000001 EBX=73448EB0 ECX=9A6DF6D0 EDX=00000001 ESI=00000002
EDI=004A6AE6 EBP=0018EF94 ESP=0018E148 EIP=75AF80A2 FLG=00000246
CS =0023 DS =002B ES =002B SS =002B FS =0053 GS =002B
------------------------------------------------------------------------
Call stack
------------------------------------------------------------------------
Address Frame Function SourceFile
75AF80A2 0018EF94 DebugBreak+2
00591B4C 0018F3BC <2>0002:0010BB4C C:\Servidor\Control Server\ControlServer_GloD.exe
00590555 0018F3DC <2>0002:0010A555 C:\Servidor\Control Server\ControlServer_GloD.exe
004A6AEB 0018F564 <2>0002:00020AEB C:\Servidor\Control Server\ControlServer_GloD.exe
004A3372 0018F670 <2>0002:0001D372 C:\Servidor\Control Server\ControlServer_GloD.exe
0056CB18 0018F780 <2>0002:000E6B18 C:\Servidor\Control Server\ControlServer_GloD.exe
75899001 0018F7AC CallNextHookEx+B1
7589B02F 0018F840 GetAncestor+1CF
758994BC 0018F8A0 CallNextHookEx+56C
758A4998 0018F8E4 SetProcessDpiAwarenessInternal+128
77C00386 0018FC40 KiUserCallbackDispatcher+36
758A4D81 0018FD20 SetProcessDpiAwarenessInternal+511
758A6317 0018FD5C CreateWindowExA+37
0056C78E 0018FECC <2>0002:000E678E C:\Servidor\Control Server\ControlServer_GloD.exe
00591316 0018FF78 <2>0002:0010B316 C:\Servidor\Control Server\ControlServer_GloD.exe
0059107D 0018FF80 <2>0002:0010B07D C:\Servidor\Control Server\ControlServer_GloD.exe
77586A24 0018FF94 BaseThreadInitThunk+24
77C1A9FF 0018FFDC RtlInitializeExceptionChain+8F
77C1A9CA 0018FFEC RtlInitializeExceptionChain+5A
------------------------------------------------------------------------
Local Variables And Parameters
------------------------------------------------------------------------
Address Frame Function SourceFile
75AF80A2 0018EF94 DebugBreak+2
00591B4C 0018F3BC <2>0002:0010BB4C C:\Servidor\Control Server\ControlServer_GloD.exe
00590555 0018F3DC <2>0002:0010A555 C:\Servidor\Control Server\ControlServer_GloD.exe
004A6AEB 0018F564 <2>0002:00020AEB C:\Servidor\Control Server\ControlServer_GloD.exe
004A3372 0018F670 <2>0002:0001D372 C:\Servidor\Control Server\ControlServer_GloD.exe
0056CB18 0018F780 <2>0002:000E6B18 C:\Servidor\Control Server\ControlServer_GloD.exe
75899001 0018F7AC CallNextHookEx+B1
7589B02F 0018F840 GetAncestor+1CF
758994BC 0018F8A0 CallNextHookEx+56C
758A4998 0018F8E4 SetProcessDpiAwarenessInternal+128
77C00386 0018FC40 KiUserCallbackDispatcher+36
758A4D81 0018FD20 SetProcessDpiAwarenessInternal+511
758A6317 0018FD5C CreateWindowExA+37
0056C78E 0018FECC <2>0002:000E678E C:\Servidor\Control Server\ControlServer_GloD.exe
00591316 0018FF78 <2>0002:0010B316 C:\Servidor\Control Server\ControlServer_GloD.exe
0059107D 0018FF80 <2>0002:0010B07D C:\Servidor\Control Server\ControlServer_GloD.exe
77586A24 0018FF94 BaseThreadInitThunk+24
77C1A9FF 0018FFDC RtlInitializeExceptionChain+8F
77C1A9CA 0018FFEC RtlInitializeExceptionChain+5A
------------------------------------------------------------------------
Global Variables
------------------------------------------------------------------------
'ReleaseMutex'
'Sleep'
'SleepEx'
'WaitForSingleObject'
'WaitForSingleObjectEx'
'AcquireSRWLockExclusive'
'AcquireSRWLockShared'
'AddVectoredContinueHandler'
'AddVectoredExceptionHandler'
'CancelThreadpoolIo'
'CloseThreadpool'
'CloseThreadpoolCleanupGroup'
'CloseThreadpoolCleanupGroupMembers'
'CloseThreadpoolIo'
'CloseThreadpoolTimer'
'CloseThreadpoolWait'
'CloseThreadpoolWork'
'DecodePointer'
'DecodeSystemPointer'
'DeleteCriticalSection'
'DeleteSynchronizationBarrier'
'DisassociateCurrentThreadFromCallback'
'EncodePointer'
'EncodeSystemPointer'
'EnterCriticalSection'
'EventActivityIdControl'
'EventEnabled'
'EventProviderEnabled'
'EventRegister'
'EventSetInformation'
'EventUnregister'
'EventWrite'
'EventWriteEx'
'EventWriteString'
'EventWriteTransfer'
'ExitProcess'
'ExitThread'
'FlushProcessWriteBuffers'
'FreeLibraryWhenCallbackReturns'
'GetCurrentProcessorNumber'
'GetCurrentProcessorNumberEx'
'GetTraceEnableFlags'
'GetTraceEnableLevel'
'GetTraceLoggerHandle'
'HeapAlloc'
'HeapFree'
'HeapReAlloc'
'HeapSize'
'InitOnceInitialize'
'InitializeConditionVariable'
'InitializeCriticalSection'
'InitializeSListHead'
'InitializeSRWLock'
'InterlockedCompareExchange64'
'InterlockedFlushSList'
'InterlockedPopEntrySList'
'InterlockedPushEntrySList'
'InterlockedPushListSList'
'InterlockedPushListSListEx'
'IsThreadpoolTimerSet'
'LeaveCriticalSection'
'LeaveCriticalSectionWhenCallbackReturns'
'QueryDepthSList'
'QueryPerformanceCounter'
'QueryPerformanceFrequency'
'QueryUnbiasedInterruptTime'
'RegisterTraceGuidsW'
'ReleaseMutexWhenCallbackReturns'
'ReleaseSRWLockExclusive'
'ReleaseSRWLockShared'
'ReleaseSemaphoreWhenCallbackReturns'
'RemoveVectoredContinueHandler'
'RemoveVectoredExceptionHandler'
'RestoreLastError'
'SetCriticalSectionSpinCount'
'SetEventWhenCallbackReturns'
'SetLastError'
'SetThreadpoolThreadMaximum'
'SetThreadpoolTimer'
'SetThreadpoolTimerEx'
'SetThreadpoolWait'
'SetThreadpoolWaitEx'
'StartThreadpoolIo'
'SubmitThreadpoolWork'
'TraceEvent'
'TraceMessage'
'TraceMessageVa'
'TryAcquireSRWLockExclusive'
'TryAcquireSRWLockShared'
'TryEnterCriticalSection'
'UnregisterTraceGuids'
'VerSetConditionMask'
'WaitForThreadpoolIoCallbacks'
'WaitForThreadpoolTimerCallbacks'
'WaitForThreadpoolWaitCallbacks'
'WaitForThreadpoolWorkCallbacks'
'WakeAllConditionVariable'
'WakeByAddressAll'
'WakeByAddressSingle'
'WakeConditionVariable'
'GetTickCount'
'GetLastError'
'FlsGetValue'
'WriteFile'
'GetConsoleMode'
'TlsGetValue'
'CloseHandle'
'GetProcessHeap'
'InitializeCriticalSectionAndSpinCount'
'VirtualAlloc'
'GetSystemTimeAsFileTime'
'KernelBaseGetGlobalData'
'LoadAppInitDlls'
'_amsg_exit'
'GetModuleHandleW'
'GetVersionExW'
'SetHandleCount'
'LockResource'
'GetACP'
'FlsSetValue'
'GetModuleFileNameW'
'GetModuleFileNameA'
'WideCharToMultiByte'
'GetModuleHandleExW'
'MultiByteToWideChar'
'IsWow64Process'
'InitializeCriticalSectionEx'
'GetCurrentPackageId'
'GetCommandLineA'
'GetFileType'
'GetEnvironmentStringsW'
'FreeEnvironmentStringsW'
'FreeEnvironmentStringsA'
'HeapCreate'
'LCMapStringEx'
'LCMapStringW'
'GetStringTypeW'
'IsValidCodePage'
'GetCPInfo'
'ReadFile'
'OpenRegKey'
'FlsAlloc'
'GetCommandLineW'
'GetStdHandle'
'GetStartupInfoW'
'WaitForMultipleObjectsEx'
'SetEvent'
'ResetEvent'
'TlsSetValue'
'InitOnceExecuteOnce'
'GetTickCount64'
'GetUserDefaultLCID'
'IsThreadAFiber'
'FreeLibraryAndExitThread'
'OpenMutexW'
'FindActCtxSectionGuid'
'NlsGetCacheUpdateCount'
'IsTimeZoneRedirectionEnabled'
'CreateEventExW'
'CreateEventW'
'DuplicateHandle'
'SetWaitableTimerEx'
'CreateWaitableTimerExW'
'BasepAdjustObjectAttributesForPrivateNamespace'
'VirtualFree'
'GetSystemTime'
'OpenEventW'
'LocalFree'
'LocalAlloc'
'RegCloseKey'
'UnmapViewOfFile'
'OpenThreadToken'
'OpenProcessToken'
'BaseFormatObjectAttributes'
'GetProcAddressForCaller'
'FreeLibrary'
'GetProcAddress'
'GetModuleHandleA'
'LoadLibraryExW'
'InternalLcidToName'
'CompareStringW'
'lstrlenW'
'QISearch'
'ResetWriteWatch'
'GetWriteWatch'
'GetVersionExA'
'StrToIntW'
'VirtualProtect'
'StrChrW'
'FlushInstructionCache'
'SetThreadPriority'
'MapPredefinedHandleInternal'
'RegQueryValueExW'
'RegOpenKeyExInternalW'
'RegOpenKeyExW'
'RegGetValueW'
'GlobalFree'
'GlobalAlloc'
'SystemTimeToFileTime'
'AllocateAndInitializeSid'
'FreeSid'
'GetEightBitStringToUnicodeStringRoutine'
'MapViewOfFile'
'CreateFileMappingNumaW'
'CreateFileMappingW'
'CreateFileW'
'MapViewOfFileEx'
'MapViewOfFileExNuma'
'CreateMutexExW'
'DeviceIoControl'
'RaiseException'
'RevertToSelf'
'GetSystemDirectoryW'
'IsProcessorFeaturePresent'
'ResolveDelayLoadedAPI'
'SpecialMBToWC'
'CompareStringA'
'GetLocaleInfoW'
'ExpandEnvironmentStringsW'
'CharNextW'
'ProcessIdToSessionId'
'GetTokenInformation'
'OpenProcess'
'GetFileSize'
'GetLengthSid'
'EqualSid'
'CopySid'
'IsValidSid'
'GetEnvironmentVariableW'
'InitializeSecurityDescriptor'
'InitializeAcl'
'GetThreadLocale'
'CLOSE_LOCAL_HANDLE_INTERNAL'
'IsDBCSLeadByte'
'CharNextA'
'CompareStringOrdinal'
'NlsValidateLocale'
'PathIsUNCEx'
'PathIsUNCW'
'TrySubmitThreadpoolCallback'
'lstrlen'
'lstrlenA'
'NlsGetACPFromLocale'
'StrCmpICW'
'ReleaseActCtx'
'GetCurrentActCtx'
'AddRefActCtx'
'ActivateActCtx'
'DeactivateActCtx'
'GetSystemDefaultLCID'
'WerRegisterMemoryBlock'
'SetErrorMode'
'GetSystemWindowsDirectoryW'
'CheckTokenMembership'
'RegOpenCurrentUser'
'GetFileAttributesW'
'VirtualQuery'
'LoadLibraryExA'
'CreateThreadpoolTimer'
'CreateEventA'
'CreateEventExA'
'GetSecurityDescriptorControl'
'GetSecurityDescriptorLength'
'IsValidSecurityDescriptor'
'SetSecurityDescriptorDacl'
'AddAccessAllowedAce'
'GetSecurityDescriptorDacl'
'GetAce'
'GetNamedLocaleHashNode'
'IsDebuggerPresent'
'BaseDllMapResourceIdW'
'FindResourceExW'
'LoadResource'
'SizeofResource'
'CreateMutexW'
'SHGetFolderPathW'
'BaseDllFreeResourceId'
'CreateActCtxW'
'GetUserInfo'
'GetFullPathNameW'
'ResumeThread'
'GetFileSizeEx'
'PathGetDriveNumberW'
'PathIsRelativeW'
'SHCreateDirectoryExW'
'CreateSemaphoreExW'
'ReleaseSemaphore'
'NlsIsUserDefaultLocale'
'lstrcmpW'
'CreateThreadpoolWait'
'CreateThreadpoolCleanupGroup'
'ImpersonateSelf'
'IsCharAlphaW'
'RegCreateKeyExInternalW'
'RegCreateKeyExW'
'StrStrIW'
'StrCmpNIW'
'CharLowerA'
'RegSetValueExW'
'GetVersion'
'VirtualQueryEx'
'SetUnhandledExceptionFilter'
'OutputDebugStringA'
'DeleteFileA'
'GetFullPathNameA'
'QueryActCtxSettingsW'
'DuplicateToken'
'DuplicateTokenEx'
'CreateWellKnownSid'
'CharUpperA'
'CharUpperBuffA'
'RegOpenKeyExInternalA'
'RegOpenKeyExA'
'GetSidSubAuthority'
'GetSidSubAuthorityCount'
'GetFileVersionInfoSizeExW'
'GetModuleHandleExA'
'StrCmpNICW'
'StrCmpICA'
'StrCmpNW'
'QueueUserWorkItem'
'CharLowerBuffW'
'CharLowerW'
'StrCmpCW'
'GetThreadPriority'
'IdnToAscii'
'SHLoadIndirectString'
'GetNativeSystemInfo'
'RegNotifyChangeKeyValue'
'SHExpandEnvironmentStringsW'
'SHGetKnownFolderPath'
'GetWindowsDirectoryW'
'RegDeleteValueW'
'PathCchCombineEx'
'PathCchCanonicalizeEx'
'PathCchCombine'
'RegCreateKeyExA'
'RegCreateKeyExInternalA'
'__dllonexit3'
'GlobalMemoryStatusEx'
'AccessCheckByType'
'InitializeSid'
'GetSidLengthRequired'
'MakeSelfRelativeSD'
'ImpersonateAnonymousToken'
'RegGetValueA'
'GetCurrentPackageInfo'
'CreateThreadpool'
'GetComputerNameExW'
'IsValidLocaleName'
'ExpandEnvironmentStringsA'
'GetSecurityDescriptorOwner'
'GetSecurityDescriptorGroup'
'GetAppContainerAce'
'IsValidAcl'
'SHRegOpenUSKeyW'
'SHRegCloseUSKey'
'SHRegQueryUSValueW'
'SHRegGetUSValueW'
'SHRegEnumUSKeyW'
'SHRegGetUSValueA'
'SHRegOpenUSKeyA'
'SHRegQueryUSValueA'
'RegisterWaitForSingleObjectEx'
'StrRChrA'
'time'
'CreateRemoteThreadEx'
'CreateFileA'
'AccessCheck'
'OpenEventA'
'_initterm'
'_initterm_e'
'OpenFileMappingW'
'DisableThreadLibraryCalls'
'TlsAlloc'
'GetProcessVersion'
'GetSystemInfo'
'DeleteFileW'
'GetEnvironmentVariableA'
'CharUpperBuffW'
'TlsFree'
'FlsFree'
'TerminateThread'
'InitOnceBeginInitialize'
'UnregisterWaitEx'
'ParseURLW'
'IsCharSpaceW'
'HashData'
'StrCmpNCW'
'PathIsURLW'
'UrlIsW'
'PathCreateFromUrlW'
'GetLocaleInfoHelper'
'IsValidLocale'
'StrChrA_MB'
'StrChrA'
'StrCmpNICA'
'StrCmpNCA'
'GetSystemTimeAdjustment'
'UrlGetLocationW'
'UrlIsNoHistoryW'
'RegOpenUserClassesRoot'
'UrlCanonicalizeW'
'UrlCombineW'
'StrToIntA'
'CharLowerBuffA'
'UrlGetPartW'
'GetThreadTimes'
'GetUserPreferredUILanguages'
'LoadStringByReference'
'UrlUnescapeA'
'StrStrA'
'OpenPrivateNamespaceW'
'IsCharAlphaNumericW'
'GetLogicalProcessorInformationEx'
'AddAccessAllowedAceEx'
'SetProcessShutdownParameters'
'SHRegQueryInfoUSKeyW'
'SHRegEnumUSValueW'
'IsInternetESCEnabled'
'SHRegGetBoolUSValueW'
'RegEnumValueA'
'GetStringTableEntry'
'GetCPInfoExW'
'SearchPathW'
'GetApplicationUserModelId'
'GetCurrentApplicationUserModelId'
'CallbackMayRunLong'
'FindCloseChangeNotification'
'GetSidIdentifierAuthority'
'GetUserDefaultLocaleName'
'StrCmpW'
'GetAcceptLanguagesW'
'UrlUnescapeW'
'QueryThreadCycleTime'
'SetThreadStackGuarantee'
'SHGetInstanceExplorer'
'GetProcessIdOfThread'
'StrCmpCA'
'FlushViewOfFile'
'GetCurrentThreadId'
'GetCurrentPackageFullName'
'LocalUnlock'
'LocalLock'
'LocalReAlloc'
'FileTimeToSystemTime'
'GetLocalTime'
'LoadStringBaseExW'
'LoadStringW'
'CharPrevW'
'PathRemoveBackslashW'
'FileTimeToLocalFileTime'
'CharPrevA'
'QueryActCtxW'
'SetEndOfFile'
'SwitchToThread'
'RegEnumKeyExW'
'SetFilePointer'
'CreateMutexA'
'CreateThreadpoolWork'
'AddAce'
'ReadProcessMemory'
'GetUnicodeStringToEightBitStringRoutine'
'RegKrnGetClassesEnumTableAddressInternal'
'HeapDestroy'
'ClosePrivateNamespace'
'GetExitCodeThread'
'WerUnregisterMemoryBlock'
'GetThreadId'
'PathFindFileNameW'
'PathCchFindExtension'
'PathFindExtensionW'
'SHGetDesktopFolder'
'StrDupW'
'PathCchRemoveBackslashEx'
'PathCchIsRoot'
'GetFileInformationByHandle'
'GetKernelObjectSecurity'
'SetKernelObjectSecurity'
'GetSecurityDescriptorSacl'
'CompareFileTime'
'StrCmpIW'
'SetSecurityDescriptorSacl'
'AddMandatoryAce'
'lstrcmpiW'
'PathFileExistsW'
'Wow64RevertWow64FsRedirection'
'Wow64DisableWow64FsRedirection'
'FindActCtxSectionStringW'
'CreateDirectoryW'
'PathCchAddBackslashEx'
'GetUserDefaultUILanguage'
'PathCombineW'
'PathAddBackslashW'
'GetFileAttributesExW'
'GetDriveTypeW'
'GetProcessTimes'
'GetAclInformation'
'StrCmpNIA'
'StrChrIA'
'StrStrIA'
'VerQueryValueW'
'GetFileVersionInfoExW'
'GetProcessId'
'GetCurrentDirectoryW'
'HeapSetInformation'
'FindFirstFileExW'
'FindFirstFileW'
'FindClose'
'GetTempPathW'
'RegQueryInfoKeyW'
'RegEnumValueW'
'GetUserInfoWord'
'CheckTokenMembershipEx'
'OpenThread'
'OpenSemaphoreW'
'BaseIsAppcompatInfrastructureDisabled'
'StrTrimW'
'SetFilePointerEx'
'RegDeleteKeyExW'
'RegDeleteKeyExInternalW'
'SetConsoleCtrlHandler'
'SetPriorityClass'
'TerminateProcess'
'GetStringTypeExW'
'RegQueryInfoKeyA'
'RegEnumKeyExA'
'CreateBoundaryDescriptorW'
'DeleteBoundaryDescriptor'
'GetLogicalProcessorInformation'
'GetCurrentPackageFamilyName'
'GetPackageFullName'
'K32GetModuleInformation'
'GetModuleInformation'
'LCIDToLocaleName'
'LocaleNameToLCID'
'PathCchSkipRoot'
'PathRemoveFileSpecW'
'PathCchRemoveFileSpec'
'PathCchAppendEx'
'PathCchAppend'
'PathAppendW'
'PathIsValidCharW'
'SHCoCreateInstance'
'GetFileInformationByHandleEx'
'PathIsExe'
'PathRemoveExtensionW'
'PathCchRemoveExtension'
'GetLogicalDrives'
'PathAllocCombine'
'SHRegWriteUSValueW'
'SHRegDeleteUSValueW'
'SHRegCreateUSKeyW'
'PathIsRootW'
'PathIsUNCServerW'
'PathIsUNCServerShareW'
'StrIsIntlEqualW'
'PathCommonPrefixW'
'PathIsPrefixW'
'GetDriveTypeA'
'GetVolumeNameForVolumeMountPointW'
'GetVolumePathNamesForVolumeNameW'
'QueryDosDeviceW'
'GetFileSecurityW'
'QuerySecurityAccessMask'
'UrlCreateFromPathW'
'GetDynamicTimeZoneInformation'
'StrStrW'
'CreateTimerQueueTimer'
'CreatePrivateNamespaceW'
'QueryFullProcessImageNameW'
'GetLocaleInfoEx'
'SetThreadLocale'
'GetSystemDefaultUILanguage'
'BaseCheckAppcompatCacheEx'
'GetCalendar'
'GetTimeZoneInformation'
'FormatMessageW'
'FindNextFileW'
'RegGetKeySecurity'
'CreateProcessW'
'CreateProcessInternalW'
'IsProcessInJob'
'UpdateProcThreadAttribute'
'InitializeProcThreadAttributeList'
'DeleteProcThreadAttributeList'
'PrefetchVirtualMemory'
'MoveFileWithProgressTransactedW'
'MoveFileWithProgressW'
'MoveFileExW'
'ResolveLocaleName'
'_OpenMuiStringCache'
'_GetMUIStringFromCache'
'GetTempFileNameW'
'RegisterGPNotificationInternal'
'FindFirstChangeNotificationW'
'RegLoadMUIStringW'
'CompareStringEx'
'CreateMemoryResourceNotification'
'AddSIDToBoundaryDescriptor'
'WerRegisterRuntimeExceptionModule'
'FindNLSStringEx'
'PackageFamilyNameFromFullName'
'AppXFreeMemory'
'AppContainerFreeMemory'
'AppContainerDeriveSidFromMoniker'
'GetStagedPackageOrigin'
'AppContainerLookupMoniker'
'GetPackageInfo'
'OpenPackageInfoByFullName'
'ClosePackageInfo'
'GetProcessMemoryInfo'
'K32GetProcessMemoryInfo'
'EnumTimeFormatsEx'
'EnumCalendarInfoExEx'
'GetCalendarInfoEx'
'CloseState'
'GetPackageResourcesProperty'
'CheckTokenCapability'
'OpenState'
'GetStateFolder'
'AppXGetOSMaxVersionTested'
'GetPackagePathByFullName'
'GetCurrentPackageApplicationResourcesContext'
'Internal_EnumTimeFormats'
'Internal_EnumCalendarInfo'
'CreatePipe'
'RemoveDirectoryW'
'SetCachedSigningLevel'
'QuirkIsEnabled3'
'DeleteAce'
'GetConsoleOutputCP'
'GetNumaHighestNodeNumber'
'QuirkIsEnabled'
'GetFileMUIPath'
'lstrcmp'
'lstrcmpA'
'PathCreateFromUrlAlloc'
'SetFileAttributesW'
'GetOverlappedResult'
'BasepCopyFileCallback'
'FreeResource'
'FlushFileBuffers'
'SHGetFolderLocation'
'HeapValidate'
'GetSystemDefaultLangID'
'VirtualUnlock'
'SetWaitableTimer'
'CancelWaitableTimer'
'AdjustTokenPrivileges'
'CharUpperW'
'ConvertDefaultLocale'
'GetTimeFormatW'
'CancelIoEx'
'PathGetCharTypeW'
'GetQueuedCompletionStatus'
'PostQueuedCompletionStatus'
'GetFileTime'
'IdnToUnicode'
'PathUnquoteSpacesW'
'SetFileInformationByHandle'
'GetTimeZoneInformationForYear'
'SetFileTime'
'IsDBCSLeadByteEx'
'SetEnvironmentVariableW'
'QueryProtectedPolicy'
'SetProtectedPolicy'
'StrChrNW'
'GetThreadUILanguage'
'SearchPathA'
'GetStringTypeA'
'GetCPFileNameFromRegistry'
'GetSystemDefaultLocaleName'
'UnregisterGPNotificationInternal'
'WerpNotifyUseStringResource'
'GetOEMCP'
'SHGetFileInfoW'
'UnlockFileEx'
'UnlockFile'
'HeapCompact'
'GetDiskFreeSpaceExW'
'GetExitCodeProcess'
'AllocateLocallyUniqueId'
'RegSetValueExA'
'RegDeleteValueA'
'SHGetSpecialFolderPathW'
'RegKrnGetTermsrvRegistryExtensionFlags'
'PathCchStripToRoot'
'PathStripToRootW'
'SHGetFolderPathAndSubDirW'
'PathFindNextComponentW'
'GetDateFormatW'
'GetCalendarInfoW'
'LockFile'
'QueueUserAPC'
'ChrCmpIW'
'StrChrIW'
'GetThreadPreferredUILanguages'
'LockFileEx'
'CancelIo'
'PathSkipRootW'
'QueryIdleProcessorCycleTime'
'QueryProcessCycleTime'
'GetCPHashNode'
'SetCurrentDirectoryW'
'VirtualLock'
'GetLocaleInfoA'
'GetUserDefaultLangID'
'CreateTimerQueue'
'FindStringOrdinal'
'GetNLSVersion'
'GetOsSafeBootMode'
'CreateIoCompletionPort'
'WerRegisterFile'
'VerQueryValueA'
'CreateThreadpoolIo'
'TransactNamedPipe'
'SetNamedPipeHandleState'
'DestroyPrivateObjectSecurity'
'CreatePrivateObjectSecurityEx'
'SetSecurityDescriptorOwner'
'SetSecurityDescriptorGroup'
'DeleteTimerQueueTimer'
'WerUnregisterFile'
'DeleteTimerQueueEx'
'GetProductInfo'
'InterlockedDecrement'
'InterlockedIncrement'
'GetVolumeInformationW'
'GetVolumeInformationByHandleW'
'PathCchAddBackslash'
'GetLongPathNameW'
'GetVolumePathNameW'
'IsWellKnownSid'
'GetFinalPathNameByHandleW'
'GetModuleBaseNameW'
'K32GetModuleBaseNameW'
'ReplaceFileW'
'ReplaceFileExInternal'
'BasepNotifyTrackingService'
'SetFileSecurityW'
'SetSecurityAccessMask'
'QueryFullProcessImageNameA'
'ChangeTimerQueueTimer'
'BasepCopyFileExW'
'CopyFileExW'
'EnumSystemLocalesW'
'Internal_EnumSystemLocales'
'EnumSystemLocalesEx'
'EnumUILanguagesW'
'Internal_EnumUILanguages'
'SetFileAttributesA'
'BaseUpdateAppcompatCache'
'PathMatchSpecW'
'PathIsFileSpecW'
'EnumResourceNamesExW'
'GetSystemPreferredUILanguages'
'PathRemoveBlanksW'
'StrRChrW'
'PathParseIconLocationW'
'StrCmpLogicalW'
'StrToIntExW'
'StrToInt64ExW'
'SetThreadPreferredUILanguages'
'FoldStringW'
'ReadDirectoryChangesW'
'StrRStrIW'
'GetHandleInformation'
'GetShortPathNameW'
'PathRelativePathToW'
'LocalFileTimeToFileTime'
'FormatMessageA'
'PathAddBackslashA'
'PathMatchSpecExW'
'EnumCalendarInfoExW'
'UrlEscapeW'
'FindFirstFileA'
'EqualPrefixSid'
'MakeAbsoluteSD'
'FindNextFileA'
'StrCmpNA'
'CreatePrivateObjectSecurity'
'_AddMUIStringToCache'
'GetCurrentDirectoryA'
'OutputDebugStringW'
'SetConsoleTextAttribute'
'GetConsoleScreenBufferInfo'
'GetConsoleScreenBufferInfoEx'
'LoadStringA'
'GetSystemDirectoryA'
'lstrcpyn'
'lstrcpynA'
'LCMapStringA'
'SystemTimeToTzSpecificLocalTimeEx'
'WaitNamedPipeW'
'lstrcpynW'
'EnumTimeFormatsW'
'EnumDateFormatsW'
'Internal_EnumDateFormats'
'UrlApplySchemeW'
'VerLanguageNameW'
'GetFileAttributesA'
'PathStripPathW'
'GetWindowsDirectoryA'
'GetSystemWindowsDirectoryA'
'GetDiskFreeSpaceW'
'SetProcessWorkingSetSizeEx'
'CheckRemoteDebuggerPresent'
'DelayLoadFailureHookLookup'
'GetProcessWorkingSetSizeEx'
'PathCanonicalizeW'
'SetSecurityDescriptorControl'
'VirtualAllocEx'
'VirtualAllocExNuma'
'VirtualFreeEx'
'WriteProcessMemory'
'GetUserGeoID'
'PathAddExtensionW'
'StrPBrkW'
'GetNumberFormatW'
'SetProcessPriorityBoost'
'SystemTimeToTzSpecificLocalTime'
'GetNumberFormatEx'
'SetThreadpoolThreadMinimum'
'TzSpecificLocalTimeToSystemTime'
'PathSearchAndQualifyW'
'InterlockedExchange'
'InterlockedCompareExchange'
'InterlockedExchangeAdd'
'RegQueryValueExA'
'GetProcessMitigationPolicy'
'SetProcessMitigationPolicy'
'GetErrorMode'
'RegKrnSetDllHasThreadStateGlobal'
'GetOverlappedResultEx'
'GetCurrentProcess'
'_invalid_parameter'
'_purecall'
'_time64'
'GetFileVersionInfoByHandle'
'GetFileVersionInfoExA'
'GetFileVersionInfoSizeExA'
'VerFindFileA'
'AreThereVisibleLogoffScriptsInternal'
'AreThereVisibleShutdownScriptsInternal'
'EnterCriticalPolicySectionInternal'
'ForceSyncFgPolicyInternal'
'FreeGPOListInternalA'
'FreeGPOListInternalW'
'GenerateGPNotificationInternal'
'GetAppliedGPOListInternalA'
'GetAppliedGPOListInternalW'
'GetGPOListInternalA'
'GetGPOListInternalW'
'GetNextFgPolicyRefreshInfoInternal'
'GetPreviousFgPolicyRefreshInfoInternal'
'HasPolicyForegroundProcessingCompletedInternal'
'IsSyncForegroundPolicyRefresh'
'LeaveCriticalPolicySectionInternal'
'RefreshPolicyExInternal'
'RefreshPolicyInternal'
'RsopLoggingEnabledInternal'
'WaitForMachinePolicyForegroundProcessingInternal'
'WaitForUserPolicyForegroundProcessingInternal'
'VerFindFileW'
'DsBindWithSpnExW'
'DsCrackNamesW'
'DsFreeDomainControllerInfoW'
'DsFreeNameResultW'
'DsFreePasswordCredentials'
'DsGetDomainControllerInfoW'
'DsMakePasswordCredentialsW'
'DsUnBindW'
'PathCleanupSpec'
'SHGetFolderPathA'
'SHGetSpecialFolderPathA'
'SHSetKnownFolderPath'
'ZombifyActCtx'
'BaseCheckAppcompatCache'
'BaseCleanupAppcompatCacheSupport'
'BaseDumpAppcompatCache'
'BaseFlushAppcompatCache'
'BaseFreeAppCompatDataForProcess'
'BaseInitAppcompatCacheSupport'
'BaseReadAppCompatDataForProcess'
'GetApplicationRecoveryCallback'
'GetApplicationRestartSettings'
'WerUnregisterRuntimeExceptionModule'
'WerpNotifyLoadStringResource'
'IsCharLowerW'
'IsCharUpperW'
'CharNextExA'
'CharPrevExA'
'IsCharAlphaA'
'IsCharAlphaNumericA'
'IsCharLowerA'
'IsCharUpperA'
'BaseMarkFileForDelete'
'CopyFile2'
'PrivCopyFileExW'
'ReOpenFile'
'CreateSymbolicLinkW'
'CreateDirectoryExW'
'OpenFileById'
'PathAllocCanonicalize'
'PathCchAddExtension'
'PathCchCanonicalize'
'PathCchRemoveBackslash'
'PathCchRenameExtension'
'PathCchStripPrefix'
'ChrCmpIA'
'StrCSpnA'
'StrCSpnIA'
'StrCSpnIW'
'StrCSpnW'
'StrCatBuffA'
'StrCatBuffW'
'StrCatChainW'
'StrChrNIW'
'StrCpyNW'
'StrCpyNXA'
'StrCpyNXW'
'StrDupA'
'StrIsIntlEqualA'
'StrPBrkA'
'StrRChrIA'
'StrRChrIW'
'StrRStrIA'
'StrSpnA'
'StrSpnW'
'StrStrNIW'
'StrStrNW'
'StrToInt64ExA'
'StrToIntExA'
'StrTrimA'
'IsCharBlankW'
'IsCharCntrlW'
'IsCharDigitW'
'IsCharPunctW'
'IsCharSpaceA'
'IsCharXDigitW'
'CreateHardLinkW'
'QuirkGetData2'
'QuirkGetData'
'QuirkIsEnabled2'
'QuirkIsEnabledForPackage2'
'QuirkIsEnabledForPackage'
'QuirkIsEnabledForProcess'
'CopyContext'
'GetEnabledXStateFeatures'
'GetXStateFeaturesMask'
'InitializeContext'
'LocateXStateFeature'
'SetXStateFeaturesMask'
'GetAcceptLanguagesA'
'SHRegCreateUSKeyA'
'SHRegDeleteEmptyUSKeyA'
'SHRegDeleteEmptyUSKeyW'
'SHRegDeleteUSValueA'
'SHRegGetBoolUSValueA'
'ParseURLA'
'PathCreateFromUrlA'
'UrlApplySchemeA'
'UrlCanonicalizeA'
'UrlCombineA'
'UrlCompareA'
'UrlCompareW'
'UrlCreateFromPathA'
'UrlEscapeA'
'UrlFixupW'
'UrlGetLocationA'
'UrlGetPartA'
'UrlHashA'
'UrlHashW'
'UrlIsA'
'UrlIsNoHistoryA'
'UrlIsOpaqueA'
'UrlIsOpaqueW'
'InternetTimeFromSystemTimeA'
'InternetTimeFromSystemTimeW'
'InternetTimeToSystemTimeA'
'InternetTimeToSystemTimeW'
'CheckGroupPolicyEnabled'
'EnumSystemLocalesA'
'FindNLSString'
'GetEraNameCountedString'
'GetFallbackDisplayName'
'GetPtrCalData'
'GetPtrCalDataArray'
'IsValidLanguageGroup'
'NlsCheckPolicy'
'NlsUpdateLocale'
'NlsUpdateSystemLocale'
'SetCalendarInfoW'
'SetLocaleInfoW'
'VerLanguageNameA'
'EnumCalendarInfoW'
'EnumDateFormatsExEx'
'EnumDateFormatsExW'
'EnumLanguageGroupLocalesW'
'EnumSystemCodePagesW'
'EnumSystemLanguageGroupsW'
'Internal_EnumLanguageGroupLocales'
'Internal_EnumSystemCodePages'
'Internal_EnumSystemLanguageGroups'
'NlsDispatchAnsiEnumProc'
'GetCurrencyFormatEx'
'GetCurrencyFormatW'
'GetDateFormatA'
'GetDateFormatEx'
'GetTimeFormatA'
'GetTimeFormatEx'
'GetFileMUIInfo'
'GetProcessPreferredUILanguages'
'GetUILanguageInfo'
'SetProcessPreferredUILanguages'
'SetThreadUILanguage'
'GetStringScripts'
'IdnToNameprepUnicode'
'IsNormalizedString'
'NormalizeString'
'VerifyScripts'
'NotifyRedirectedStringChange'
'NlsEventDataDescCreate'
'NlsWriteEtwEvent'
'EnumSystemGeoID'
'GetGeoInfoW'
'SetUserGeoID'
'GetNLSVersionEx'
'IsValidNLSVersion'
'IsNLSDefinedString'
'DeleteVolumeMountPointW'
'FindFirstVolumeW'
'FindNextVolumeW'
'FindVolumeClose'
'NotifyMountMgr'
'GetLongPathNameA'
'QueryThreadpoolStackInformation'
'SetThreadpoolStackInformation'
'BemCopyReference'
'BemCreateContractFrom'
'BemCreateReference'
'BemFreeContract'
'BemFreeReference'
'AllocConsole'
'AttachConsole'
'FreeConsole'
'CreateConsoleScreenBuffer'
'FillConsoleOutputAttribute'
'FillConsoleOutputCharacterA'
'FillConsoleOutputCharacterW'
'PeekConsoleInputA'
'PeekConsoleInputW'
'ReadConsoleInputA'
'ReadConsoleInputExA'
'ReadConsoleInputExW'
'ReadConsoleInputW'
'ReadConsoleOutputA'
'ReadConsoleOutputAttribute'
'ReadConsoleOutputCharacterA'
'ReadConsoleOutputCharacterW'
'ReadConsoleOutputW'
'WriteConsoleInputA'
'WriteConsoleInputW'
'WriteConsoleOutputA'
'WriteConsoleOutputAttribute'
'WriteConsoleOutputCharacterA'
'WriteConsoleOutputCharacterW'
'WriteConsoleOutputW'
'CtrlRoutine'
'SetLastConsoleEventActive'
'FlushConsoleInputBuffer'
'GenerateConsoleCtrlEvent'
'GetConsoleCP'
'GetConsoleCursorInfo'
'GetLargestConsoleWindowSize'
'GetNumberOfConsoleInputEvents'
'ScrollConsoleScreenBufferA'
'ScrollConsoleScreenBufferW'
'SetConsoleActiveScreenBuffer'
'SetConsoleCP'
'SetConsoleCursorInfo'
'SetConsoleCursorPosition'
'SetConsoleMode'
'SetConsoleOutputCP'
'SetConsoleScreenBufferInfoEx'
'SetConsoleScreenBufferSize'
'SetConsoleWindowInfo'
'GetConsoleInputExeNameA'
'GetConsoleInputExeNameW'
'GetConsoleTitleW'
'SetConsoleInputExeNameA'
'SetConsoleInputExeNameW'
'SetConsoleTitleW'
'ReadConsoleA'
'ReadConsoleW'
'WriteConsoleA'
'WriteConsoleW'
'_onexit'
'atexit'
'__wgetmainargs'
'_c_exit'
'_cexit'
'_exit'
'exit'
'hgets'
'hwprintf'
'wprintf'
'PathQuoteSpacesW'
'PathUnExpandEnvStringsW'
'PathGetArgsW'
'PathIsLFNFileSpecW'
'PathIsSameRootW'
'PathRenameExtensionW'
'SHRegSetUSValueW'
'PathCombineA'
'PathFileExistsA'
'PathFindExtensionA'
'PathFindFileNameA'
'PathIsUNCA'
'PathIsUNCServerA'
'PathIsUNCServerShareA'
'PathMatchSpecA'
'PathMatchSpecExA'
'PathParseIconLocationA'
'PathQuoteSpacesA'
'PathRemoveBlanksA'
'PathRemoveFileSpecA'
'PathUnExpandEnvStringsA'
'PathUnquoteSpacesA'
'SHExpandEnvironmentStringsA'
'SHTruncateString'
'PathAddExtensionA'
'PathAppendA'
'PathCanonicalizeA'
'PathCommonPrefixA'
'PathFindNextComponentA'
'PathGetArgsA'
'PathGetCharTypeA'
'PathGetDriveNumberA'
'PathIsFileSpecA'
'PathIsLFNFileSpecA'
'PathIsPrefixA'
'PathIsRelativeA'
'PathIsRootA'
'PathIsSameRootA'
'PathIsValidCharA'
'PathRelativePathToA'
'PathRemoveBackslashA'
'PathRemoveExtensionA'
'PathRenameExtensionA'
'PathSearchAndQualifyA'
'PathSkipRootA'
'PathStripPathA'
'PathStripToRootA'
'PathIsURLA'
'SHRegEnumUSKeyA'
'SHRegEnumUSValueA'
'SHRegQueryInfoUSKeyA'
'SHRegSetUSValueA'
'SHRegWriteUSValueA'
'DisablePredefinedHandleTableInternal'
'RemapPredefinedHandleInternal'
'GetRegistryExtensionFlags'
'PoolPerAppKeyStateInternal'
'RegKrnGetAppKeyEventAddressInternal'
'RegKrnGetAppKeyLoaded'
'RegKrnGetHKEY_ClassesRootAddress'
'RegKrnResetAppKeyLoaded'
'RegKrnSetTermsrvRegistryExtensionFlags'
'RegDisablePredefinedCacheEx'
'RegFlushKey'
'RegCopyTreeW'
'RegDeleteKeyExA'
'RegDeleteKeyExInternalA'
'RegDeleteTreeA'
'RegDeleteTreeW'
'RegSetKeySecurity'
'RegLoadAppKeyA'
'RegLoadAppKeyW'
'RegLoadKeyA'
'RegLoadKeyW'
'RegUnLoadKeyA'
'RegUnLoadKeyW'
'RegLoadMUIStringA'
'RegRestoreKeyA'
'RegRestoreKeyW'
'RegSaveKeyExA'
'RegSaveKeyExW'
'DelayLoadFailureHook'
'K32EmptyWorkingSet'
'EmptyWorkingSet'
'QueryWorkingSet'
'K32QueryWorkingSet'
'K32QueryWorkingSetEx'
'QueryWorkingSetEx'
'EnumDeviceDrivers'
'K32EnumDeviceDrivers'
'K32GetDeviceDriverBaseNameA'
'GetDeviceDriverBaseNameA'
'GetDeviceDriverBaseNameW'
'K32GetDeviceDriverBaseNameW'
'GetDeviceDriverFileNameA'
'K32GetDeviceDriverFileNameA'
'K32GetDeviceDriverFileNameW'
'GetDeviceDriverFileNameW'
'K32EnumPageFilesA'
'EnumPageFilesA'
'EnumPageFilesW'
'K32EnumPageFilesW'
'K32GetPerformanceInfo'
'GetPerformanceInfo'
'EnumProcessModules'
'K32EnumProcessModules'
'K32EnumProcessModulesEx'
'EnumProcessModulesEx'
'K32GetModuleBaseNameA'
'GetModuleBaseNameA'
'K32GetModuleFileNameExA'
'GetModuleFileNameExA'
'K32GetModuleFileNameExW'
'GetModuleFileNameExW'
'EnumProcesses'
'K32EnumProcesses'
'K32GetProcessImageFileNameA'
'GetProcessImageFileNameA'
'K32GetProcessImageFileNameW'
'GetProcessImageFileNameW'
'GetWsChanges'
'K32GetWsChanges'
'GetWsChangesEx'
'K32GetWsChangesEx'
'K32InitializeProcessForWsWatch'
'InitializeProcessForWsWatch'
'K32GetMappedFileNameA'
'GetMappedFileNameA'
'K32GetMappedFileNameW'
'GetMappedFileNameW'
'PsmCreateKey'
'PsmEqualApplication'
'PsmEqualPackage'
'PsmGetApplicationNameFromKey'
'PsmGetKeyFromProcess'
'PsmGetKeyFromToken'
'PsmGetPackageFullNameFromKey'
'PsmIsChildKey'
'PsmIsDynamicKey'
'PsmIsValidKey'
'AcquireStateLock'
'CheckIfStateChangeNotificationExists'
'CloseStateAtom'
'CloseStateChangeNotification'
'CloseStateContainer'
'CloseStateLock'
'CommitStateAtom'
'CreateStateAtom'
'CreateStateChangeNotification'
'CreateStateContainer'
'CreateStateLock'
'CreateStateSubcontainer'
'DeleteStateAtomValue'
'DeleteStateContainer'
'DeleteStateContainerValue'
'DuplicateStateContainerHandle'
'EnumerateStateAtomValues'
'EnumerateStateContainerItems'
'GetHivePath'
'GetRoamingLastObservedChangeTime'
'GetSerializedAtomBytes'
'GetStateContainerDepth'
'GetStateRootFolder'
'GetStateSettingsFolder'
'GetStateVersion'
'GetSystemAppDataFolder'
'GetSystemAppDataKey'
'OpenStateAtom'
'OpenStateExplicit'
'OverrideRoamingDataModificationTimesInRange'
'PublishStateChangeNotification'
'QueryStateAtomValueInfo'
'QueryStateContainerItemInfo'
'ReadStateAtomValue'
'ReadStateContainerValue'
'RegisterStateChangeNotification'
'RegisterStateLock'
'ReleaseStateLock'
'ResetState'
'SetRoamingLastObservedChangeTime'
'SetStateVersion'
'SubscribeStateChangeNotification'
'UnregisterStateChangeNotification'
'UnregisterStateLock'
'UnsubscribeStateChangeNotification'
'WriteStateAtomValue'
'WriteStateContainerValue'
'GetPackageApplicationIds'
'FindPackagesByPackageFamily'
'GetPackageInstallTime'
'GetPackagesByPackageFamily'
'FormatApplicationUserModelId'
'PackageFamilyNameFromId'
'PackageFullNameFromId'
'PackageIdFromFullName'
'PackageNameAndPublisherIdFromFamilyName'
'ParseApplicationUserModelId'
'GetAppModelVersion'
'InvalidateAppModelVersionCache'
'GetCurrentPackageApplicationContext'
'GetCurrentPackageContext'
'GetCurrentPackageResourcesContext'
'GetCurrentPackageSecurityContext'
'GetPackageApplicationContext'
'GetPackageApplicationProperty'
'GetPackageApplicationPropertyString'
'GetPackageApplicationResourcesContext'
'GetPackageContext'
'GetPackageOSMaxVersionTested'
'GetPackageProperty'
'GetPackagePropertyString'
'GetPackageResourcesContext'
'GetPackageSecurityContext'
'GetPackageSecurityProperty'
'GetCurrentPackagePath'
'GetPackageFamilyName'
'GetPackageId'
'GetPackagePath'
'GetStagedPackagePathByFullName'
'AppContainerLookupDisplayNameMrtReference'
'AppContainerRegisterSid'
'AppContainerUnregisterSid'
'AppXGetApplicationData'
'AppXGetDevelopmentMode'
'AppXGetOSMinVersion'
'AppXGetPackageCapabilities'
'AppXGetPackageSid'
'AppXGetPackageState'
'AppXLookupDisplayName'
'AppXLookupMoniker'
'AppXSetPackageState'
'AppXPostSuccessExtension'
'AppXPreCreationExtension'
'AppXReleaseAppXContext'
'AccessCheckAndAuditAlarmW'
'AccessCheckByTypeAndAuditAlarmW'
'AccessCheckByTypeResultList'
'AccessCheckByTypeResultListAndAuditAlarmByHandleW'
'AccessCheckByTypeResultListAndAuditAlarmW'
'AddAccessAllowedObjectAce'
'AddAccessDeniedAce'
'AddAccessDeniedAceEx'
'AddAccessDeniedObjectAce'
'AddAuditAccessAce'
'AddAuditAccessAceEx'
'AddAuditAccessObjectAce'
'AddResourceAttributeAce'
'AddScopedPolicyIDAce'
'AdjustTokenGroups'
'AreAllAccessesGranted'
'AreAnyAccessesGranted'
'ConvertToAutoInheritPrivateObjectSecurity'
'CreatePrivateObjectSecurityWithMultipleInheritance'
'CreateRestrictedToken'
'EqualDomainSid'
'FindFirstFreeAce'
'GetCachedSigningLevel'
'GetPrivateObjectSecurity'
'GetSecurityDescriptorRMControl'
'GetWindowsAccountDomainSid'
'ImpersonateLoggedOnUser'
'ImpersonateNamedPipeClient'
'InstallELAMCertificateInfo'
'IsTokenRestricted'
'IsValidRelativeSecurityDescriptor'
'MakeAbsoluteSD2'
'MapGenericMask'
'ObjectCloseAuditAlarmW'
'ObjectDeleteAuditAlarmW'
'ObjectOpenAuditAlarmW'
'ObjectPrivilegeAuditAlarmW'
'PrivilegeCheck'
'PrivilegedServiceAuditAlarmW'
'SetAclInformation'
'SetPrivateObjectSecurity'
'SetPrivateObjectSecurityEx'
'SetSecurityDescriptorRMControl'
'SetThreadToken'
'SetTokenInformation'
'AddDllDirectory'
'EnumResourceLanguagesExA'
'EnumResourceLanguagesExW'
'EnumResourceNamesExA'
'EnumResourceTypesExA'
'EnumResourceTypesExW'
'QueryOptionalDelayLoadedAPI'
'RemoveDllDirectory'
'ResolveDelayLoadsFromDll'
'SetDefaultDllDirectories'
'AllocateUserPhysicalPages'
'AllocateUserPhysicalPagesNuma'
'DiscardVirtualMemory'
'FreeUserPhysicalPages'
'GetLargePageMinimum'
'GetMemoryErrorHandlingCapabilities'
'GetSystemFileCacheSize'
'MapUserPhysicalPages'
'OfferVirtualMemory'
'QueryMemoryResourceNotification'
'ReclaimVirtualMemory'
'RegisterBadMemoryNotification'
'SetSystemFileCacheSize'
'UnregisterBadMemoryNotification'
'VirtualProtectEx'
'AreFileApisANSI'
'GetAdjustObjectAttributesForPrivateNamespaceRoutine'
'GetEightBitStringToUnicodeSizeRoutine'
'GetUnicodeStringToEightBitSizeRoutine'
'SetFileApisToANSI'
'SetFileApisToOEM'
'Beep'
'CancelSynchronousIo'
'GetFinalPathNameByHandleA'
'ReadFileEx'
'ReadFileScatter'
'SetFileValidData'
'WriteFileEx'
'WriteFileGather'
'CreateMutexExA'
'EnterSynchronizationBarrier'
'InitOnceComplete'
'InitializeSynchronizationBarrier'
'OpenWaitableTimerW'
'PulseEvent'
'SignalObjectAndWait'
'SleepConditionVariableCS'
'SleepConditionVariableSRW'
'WaitOnAddress'
'ContinueDebugEvent'
'DebugActiveProcess'
'DebugActiveProcessStop'
'DebugBreak'
'WaitForDebugEvent'
'ClearCommBreak'
'ClearCommError'
'EscapeCommFunction'
'GetCommConfig'
'GetCommMask'
'GetCommModemStatus'
'GetCommProperties'
'GetCommState'
'GetCommTimeouts'
'PurgeComm'
'SetCommBreak'
'SetCommConfig'
'SetCommMask'
'SetCommState'
'SetCommTimeouts'
'SetupComm'
'TransmitCommChar'
'WaitCommEvent'
'SetHandleInformation'
'EnumDynamicTimeZoneInformation'
'GetDynamicTimeZoneInformationEffectiveYears'
'GetSystemTimePreciseAsFileTime'
'SetClientDynamicTimeZoneInformation'
'SetClientTimeZoneInformation'
'SetDynamicTimeZoneInformation'
'SetLocalTime'
'SetSystemTime'
'SetSystemTimeAdjustment'
'SetTimeZoneInformation'
'TzSpecificLocalTimeToSystemTimeEx'
'ConnectNamedPipe'
'CreateNamedPipeW'
'DisconnectNamedPipe'
'GetNamedPipeAttribute'
'GetNamedPipeClientComputerNameW'
'PeekNamedPipe'
'CreateAppContainerToken'
'GetAppContainerNamedObjectPath'
'CreateDirectoryA'
'RemoveDirectoryA'
'CreateFile2'
'CreateFileMappingFromApp'
'MapViewOfFileFromApp'
'UnmapViewOfFileEx'
'GetQueuedCompletionStatusEx'
'SetFileIoOverlappedRange'
'CreateProcessA'
'CreateProcessAsUserW'
'CreateProcessInternalA'
'FatalAppExitA'
'FatalAppExitW'
'GetCurrentProcessId'
'GetPriorityClass'
'GetProcessGroupAffinity'
'GetProcessHandleCount'
'GetProcessPriorityBoost'
'GetSystemTimes'
'IsProcessCritical'
'NeedCurrentDirectoryForExePathA'
'NeedCurrentDirectoryForExePathW'
'QueryProcessAffinityUpdateMode'
'SetProcessAffinityUpdateMode'
'SetProcessGroupAffinity'
'CreateRemoteThread'
'CreateThread'
'GetCurrentThread'
'GetCurrentThreadStackLimits'
'GetThreadContext'
'GetThreadGroupAffinity'
'GetThreadIOPendingFlag'
'GetThreadIdealProcessorEx'
'GetThreadInformation'
'GetThreadPriorityBoost'
'SetThreadContext'
'SetThreadGroupAffinity'
'SetThreadIdealProcessorEx'
'SetThreadInformation'
'SetThreadPriorityBoost'
'SuspendThread'
'DefineDosDeviceW'
'GetCompressedFileSizeA'
'GetCompressedFileSizeW'
'GetFileAttributesExA'
'DnsHostnameToComputerNameExW'
'GetComputerNameExA'
'SetComputerNameEx2W'
'SetComputerNameExW'
'EnumSystemFirmwareTables'
'GetSystemFirmwareTable'
'GetEnvironmentStringsA'
'GetEnvironmentStrings'
'SetEnvironmentStringsW'
'SetEnvironmentVariableA'
'FindFirstChangeNotificationA'
'FindFirstFileExA'
'FindNextChangeNotification'
'SetCurrentDirectoryA'
'GetDiskFreeSpaceA'
'GetDiskFreeSpaceExA'
'GetLogicalDriveStringsW'
'GetNumaNodeProcessorMaskEx'
'GetPhysicallyInstalledSystemMemory'
'GetProcessHeaps'
'HeapLock'
'HeapQueryInformation'
'HeapSummary'
'HeapUnlock'
'HeapWalk'
'SetStdHandle'
'SetStdHandleEx'
'QueryIdleProcessorCycleTimeEx'
'UnhandledExceptionFilter'
'lstrcmpi'
'lstrcmpiA'
------------------------------------------------------------------------
Load Modules
------------------------------------------------------------------------
00400000 C:\Servidor\Control Server\ControlServer_GloD.exe
77BC0000 C:\Windows\SYSTEM32\ntdll.dll
77570000 C:\Windows\SYSTEM32\KERNEL32.DLL
75A40000 C:\Windows\SYSTEM32\KERNELBASE.dll
74E80000 C:\Windows\system32\apphelp.dll
75130000 C:\Windows\SYSTEM32\ODBC32.dll
75830000 C:\Windows\SYSTEM32\WS2_32.dll
75100000 C:\Windows\SYSTEM32\WINMM.dll
02800000 C:\Servidor\Control Server\dbghelp.dll
75890000 C:\Windows\SYSTEM32\USER32.dll
75590000 C:\Windows\SYSTEM32\GDI32.dll
77490000 C:\Windows\SYSTEM32\ADVAPI32.dll
76DE0000 C:\Windows\SYSTEM32\ole32.dll
73430000 C:\Windows\WinSxS\x86_microsoft.vc80.debugcrt_1fc8b3b9a1e18e3b_8.0.50727.4053_none_e4a329d7006acfa0\MSVCR80D.dll
73560000 C:\Windows\WinSxS\x86_microsoft.vc80.debugcrt_1fc8b3b9a1e18e3b_8.0.50727.4053_none_e4a329d7006acfa0\MSVCP80D.dll
75070000 C:\Windows\SYSTEM32\NETAPI32.dll
75330000 C:\Windows\SYSTEM32\msvcrt.dll
75880000 C:\Windows\SYSTEM32\NSI.dll
770A0000 C:\Windows\SYSTEM32\RPCRT4.dll
750C0000 C:\Windows\SYSTEM32\WINMMBASE.dll
745E0000 C:\Windows\SYSTEM32\VERSION.dll
776C0000 C:\Windows\SYSTEM32\sechost.dll
76F10000 C:\Windows\SYSTEM32\combase.dll
75060000 C:\Windows\SYSTEM32\netutils.dll
75040000 C:\Windows\SYSTEM32\srvcli.dll
75020000 C:\Windows\SYSTEM32\wkscli.dll
757D0000 C:\Windows\SYSTEM32\SspiCli.dll
75A00000 C:\Windows\SYSTEM32\cfgmgr32.dll
75090000 C:\Windows\SYSTEM32\DEVOBJ.dll
75000000 C:\Windows\SYSTEM32\bcrypt.dll
75320000 C:\Windows\SYSTEM32\CRYPTBASE.dll
752C0000 C:\Windows\SYSTEM32\bcryptPrimitives.dll
77210000 C:\Windows\system32\IMM32.DLL
77370000 C:\Windows\SYSTEM32\MSCTF.dll
74C60000 C:\Windows\system32\uxtheme.dll
74C40000 C:\Windows\system32\dwmapi.dll
74A30000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.19394_none_a9f59c4f01325ed5\comctl32.DLL
74A20000 C:\Windows\SYSTEM32\kernel.appcore.dll
------------------------------------------------------------------------
Hardware/Driver Information
------------------------------------------------------------------------
Processor: 0x0
Display : Unknown
Page Size: 4096
Min App Address: 0x00010000
Max App Address: 0x7FFEFFFF
Processor Mask: 0xF
Number of Processors: 4
Processor Type: 586
Allocation Granularity: 65536
Processor Level: 6
Processor Revision: 11527
Percent memory used: 85
Physical memory: 1280430080/4294967295
Page file: 1551945728/4294967295
Virtual memory: 2062675968/2147352576
==================================================================================
ControlServer : Exception Program
Exe : C:\Servidor\Control Server\ControlServer_GloD.exe
OS : Windows 6.2(), build9200 PlatformId 2 ""
UserName : xxxxxxxxxxxxxxxx
Computer :
Time : 2023-02-26 SUN, 09:18:32.718 PM
Code : 80000003 BREAKPOINT
Address : 75AF80A2 01:000B70A2 C:\Windows\SYSTEM32\KERNELBASE.dll
==================================================================================
------------------------------------------------------------------------
x86 Registers
------------------------------------------------------------------------
EAX=00000001 EBX=73448EB0 ECX=9A6DF6D0 EDX=00000001 ESI=00000002
EDI=004A6AE6 EBP=0018EF94 ESP=0018E148 EIP=75AF80A2 FLG=00000246
CS =0023 DS =002B ES =002B SS =002B FS =0053 GS =002B
------------------------------------------------------------------------
Call stack
------------------------------------------------------------------------
Address Frame Function SourceFile
75AF80A2 0018EF94 DebugBreak+2
00591B4C 0018F3BC <2>0002:0010BB4C C:\Servidor\Control Server\ControlServer_GloD.exe
00590555 0018F3DC <2>0002:0010A555 C:\Servidor\Control Server\ControlServer_GloD.exe
004A6AEB 0018F564 <2>0002:00020AEB C:\Servidor\Control Server\ControlServer_GloD.exe
004A3372 0018F670 <2>0002:0001D372 C:\Servidor\Control Server\ControlServer_GloD.exe
0056CB18 0018F780 <2>0002:000E6B18 C:\Servidor\Control Server\ControlServer_GloD.exe
75899001 0018F7AC CallNextHookEx+B1
7589B02F 0018F840 GetAncestor+1CF
758994BC 0018F8A0 CallNextHookEx+56C
758A4998 0018F8E4 SetProcessDpiAwarenessInternal+128
77C00386 0018FC40 KiUserCallbackDispatcher+36
758A4D81 0018FD20 SetProcessDpiAwarenessInternal+511
758A6317 0018FD5C CreateWindowExA+37
0056C78E 0018FECC <2>0002:000E678E C:\Servidor\Control Server\ControlServer_GloD.exe
00591316 0018FF78 <2>0002:0010B316 C:\Servidor\Control Server\ControlServer_GloD.exe
0059107D 0018FF80 <2>0002:0010B07D C:\Servidor\Control Server\ControlServer_GloD.exe
77586A24 0018FF94 BaseThreadInitThunk+24
77C1A9FF 0018FFDC RtlInitializeExceptionChain+8F
77C1A9CA 0018FFEC RtlInitializeExceptionChain+5A
------------------------------------------------------------------------
Local Variables And Parameters
------------------------------------------------------------------------
Address Frame Function SourceFile
75AF80A2 0018EF94 DebugBreak+2
00591B4C 0018F3BC <2>0002:0010BB4C C:\Servidor\Control Server\ControlServer_GloD.exe
00590555 0018F3DC <2>0002:0010A555 C:\Servidor\Control Server\ControlServer_GloD.exe
004A6AEB 0018F564 <2>0002:00020AEB C:\Servidor\Control Server\ControlServer_GloD.exe
004A3372 0018F670 <2>0002:0001D372 C:\Servidor\Control Server\ControlServer_GloD.exe
0056CB18 0018F780 <2>0002:000E6B18 C:\Servidor\Control Server\ControlServer_GloD.exe
75899001 0018F7AC CallNextHookEx+B1
7589B02F 0018F840 GetAncestor+1CF
758994BC 0018F8A0 CallNextHookEx+56C
758A4998 0018F8E4 SetProcessDpiAwarenessInternal+128
77C00386 0018FC40 KiUserCallbackDispatcher+36
758A4D81 0018FD20 SetProcessDpiAwarenessInternal+511
758A6317 0018FD5C CreateWindowExA+37
0056C78E 0018FECC <2>0002:000E678E C:\Servidor\Control Server\ControlServer_GloD.exe
00591316 0018FF78 <2>0002:0010B316 C:\Servidor\Control Server\ControlServer_GloD.exe
0059107D 0018FF80 <2>0002:0010B07D C:\Servidor\Control Server\ControlServer_GloD.exe
77586A24 0018FF94 BaseThreadInitThunk+24
77C1A9FF 0018FFDC RtlInitializeExceptionChain+8F
77C1A9CA 0018FFEC RtlInitializeExceptionChain+5A
------------------------------------------------------------------------
Global Variables
------------------------------------------------------------------------
'ReleaseMutex'
'Sleep'
'SleepEx'
'WaitForSingleObject'
'WaitForSingleObjectEx'
'AcquireSRWLockExclusive'
'AcquireSRWLockShared'
'AddVectoredContinueHandler'
'AddVectoredExceptionHandler'
'CancelThreadpoolIo'
'CloseThreadpool'
'CloseThreadpoolCleanupGroup'
'CloseThreadpoolCleanupGroupMembers'
'CloseThreadpoolIo'
'CloseThreadpoolTimer'
'CloseThreadpoolWait'
'CloseThreadpoolWork'
'DecodePointer'
'DecodeSystemPointer'
'DeleteCriticalSection'
'DeleteSynchronizationBarrier'
'DisassociateCurrentThreadFromCallback'
'EncodePointer'
'EncodeSystemPointer'
'EnterCriticalSection'
'EventActivityIdControl'
'EventEnabled'
'EventProviderEnabled'
'EventRegister'
'EventSetInformation'
'EventUnregister'
'EventWrite'
'EventWriteEx'
'EventWriteString'
'EventWriteTransfer'
'ExitProcess'
'ExitThread'
'FlushProcessWriteBuffers'
'FreeLibraryWhenCallbackReturns'
'GetCurrentProcessorNumber'
'GetCurrentProcessorNumberEx'
'GetTraceEnableFlags'
'GetTraceEnableLevel'
'GetTraceLoggerHandle'
'HeapAlloc'
'HeapFree'
'HeapReAlloc'
'HeapSize'
'InitOnceInitialize'
'InitializeConditionVariable'
'InitializeCriticalSection'
'InitializeSListHead'
'InitializeSRWLock'
'InterlockedCompareExchange64'
'InterlockedFlushSList'
'InterlockedPopEntrySList'
'InterlockedPushEntrySList'
'InterlockedPushListSList'
'InterlockedPushListSListEx'
'IsThreadpoolTimerSet'
'LeaveCriticalSection'
'LeaveCriticalSectionWhenCallbackReturns'
'QueryDepthSList'
'QueryPerformanceCounter'
'QueryPerformanceFrequency'
'QueryUnbiasedInterruptTime'
'RegisterTraceGuidsW'
'ReleaseMutexWhenCallbackReturns'
'ReleaseSRWLockExclusive'
'ReleaseSRWLockShared'
'ReleaseSemaphoreWhenCallbackReturns'
'RemoveVectoredContinueHandler'
'RemoveVectoredExceptionHandler'
'RestoreLastError'
'SetCriticalSectionSpinCount'
'SetEventWhenCallbackReturns'
'SetLastError'
'SetThreadpoolThreadMaximum'
'SetThreadpoolTimer'
'SetThreadpoolTimerEx'
'SetThreadpoolWait'
'SetThreadpoolWaitEx'
'StartThreadpoolIo'
'SubmitThreadpoolWork'
'TraceEvent'
'TraceMessage'
'TraceMessageVa'
'TryAcquireSRWLockExclusive'
'TryAcquireSRWLockShared'
'TryEnterCriticalSection'
'UnregisterTraceGuids'
'VerSetConditionMask'
'WaitForThreadpoolIoCallbacks'
'WaitForThreadpoolTimerCallbacks'
'WaitForThreadpoolWaitCallbacks'
'WaitForThreadpoolWorkCallbacks'
'WakeAllConditionVariable'
'WakeByAddressAll'
'WakeByAddressSingle'
'WakeConditionVariable'
'GetTickCount'
'GetLastError'
'FlsGetValue'
'WriteFile'
'GetConsoleMode'
'TlsGetValue'
'CloseHandle'
'GetProcessHeap'
'InitializeCriticalSectionAndSpinCount'
'VirtualAlloc'
'GetSystemTimeAsFileTime'
'KernelBaseGetGlobalData'
'LoadAppInitDlls'
'_amsg_exit'
'GetModuleHandleW'
'GetVersionExW'
'SetHandleCount'
'LockResource'
'GetACP'
'FlsSetValue'
'GetModuleFileNameW'
'GetModuleFileNameA'
'WideCharToMultiByte'
'GetModuleHandleExW'
'MultiByteToWideChar'
'IsWow64Process'
'InitializeCriticalSectionEx'
'GetCurrentPackageId'
'GetCommandLineA'
'GetFileType'
'GetEnvironmentStringsW'
'FreeEnvironmentStringsW'
'FreeEnvironmentStringsA'
'HeapCreate'
'LCMapStringEx'
'LCMapStringW'
'GetStringTypeW'
'IsValidCodePage'
'GetCPInfo'
'ReadFile'
'OpenRegKey'
'FlsAlloc'
'GetCommandLineW'
'GetStdHandle'
'GetStartupInfoW'
'WaitForMultipleObjectsEx'
'SetEvent'
'ResetEvent'
'TlsSetValue'
'InitOnceExecuteOnce'
'GetTickCount64'
'GetUserDefaultLCID'
'IsThreadAFiber'
'FreeLibraryAndExitThread'
'OpenMutexW'
'FindActCtxSectionGuid'
'NlsGetCacheUpdateCount'
'IsTimeZoneRedirectionEnabled'
'CreateEventExW'
'CreateEventW'
'DuplicateHandle'
'SetWaitableTimerEx'
'CreateWaitableTimerExW'
'BasepAdjustObjectAttributesForPrivateNamespace'
'VirtualFree'
'GetSystemTime'
'OpenEventW'
'LocalFree'
'LocalAlloc'
'RegCloseKey'
'UnmapViewOfFile'
'OpenThreadToken'
'OpenProcessToken'
'BaseFormatObjectAttributes'
'GetProcAddressForCaller'
'FreeLibrary'
'GetProcAddress'
'GetModuleHandleA'
'LoadLibraryExW'
'InternalLcidToName'
'CompareStringW'
'lstrlenW'
'QISearch'
'ResetWriteWatch'
'GetWriteWatch'
'GetVersionExA'
'StrToIntW'
'VirtualProtect'
'StrChrW'
'FlushInstructionCache'
'SetThreadPriority'
'MapPredefinedHandleInternal'
'RegQueryValueExW'
'RegOpenKeyExInternalW'
'RegOpenKeyExW'
'RegGetValueW'
'GlobalFree'
'GlobalAlloc'
'SystemTimeToFileTime'
'AllocateAndInitializeSid'
'FreeSid'
'GetEightBitStringToUnicodeStringRoutine'
'MapViewOfFile'
'CreateFileMappingNumaW'
'CreateFileMappingW'
'CreateFileW'
'MapViewOfFileEx'
'MapViewOfFileExNuma'
'CreateMutexExW'
'DeviceIoControl'
'RaiseException'
'RevertToSelf'
'GetSystemDirectoryW'
'IsProcessorFeaturePresent'
'ResolveDelayLoadedAPI'
'SpecialMBToWC'
'CompareStringA'
'GetLocaleInfoW'
'ExpandEnvironmentStringsW'
'CharNextW'
'ProcessIdToSessionId'
'GetTokenInformation'
'OpenProcess'
'GetFileSize'
'GetLengthSid'
'EqualSid'
'CopySid'
'IsValidSid'
'GetEnvironmentVariableW'
'InitializeSecurityDescriptor'
'InitializeAcl'
'GetThreadLocale'
'CLOSE_LOCAL_HANDLE_INTERNAL'
'IsDBCSLeadByte'
'CharNextA'
'CompareStringOrdinal'
'NlsValidateLocale'
'PathIsUNCEx'
'PathIsUNCW'
'TrySubmitThreadpoolCallback'
'lstrlen'
'lstrlenA'
'NlsGetACPFromLocale'
'StrCmpICW'
'ReleaseActCtx'
'GetCurrentActCtx'
'AddRefActCtx'
'ActivateActCtx'
'DeactivateActCtx'
'GetSystemDefaultLCID'
'WerRegisterMemoryBlock'
'SetErrorMode'
'GetSystemWindowsDirectoryW'
'CheckTokenMembership'
'RegOpenCurrentUser'
'GetFileAttributesW'
'VirtualQuery'
'LoadLibraryExA'
'CreateThreadpoolTimer'
'CreateEventA'
'CreateEventExA'
'GetSecurityDescriptorControl'
'GetSecurityDescriptorLength'
'IsValidSecurityDescriptor'
'SetSecurityDescriptorDacl'
'AddAccessAllowedAce'
'GetSecurityDescriptorDacl'
'GetAce'
'GetNamedLocaleHashNode'
'IsDebuggerPresent'
'BaseDllMapResourceIdW'
'FindResourceExW'
'LoadResource'
'SizeofResource'
'CreateMutexW'
'SHGetFolderPathW'
'BaseDllFreeResourceId'
'CreateActCtxW'
'GetUserInfo'
'GetFullPathNameW'
'ResumeThread'
'GetFileSizeEx'
'PathGetDriveNumberW'
'PathIsRelativeW'
'SHCreateDirectoryExW'
'CreateSemaphoreExW'
'ReleaseSemaphore'
'NlsIsUserDefaultLocale'
'lstrcmpW'
'CreateThreadpoolWait'
'CreateThreadpoolCleanupGroup'
'ImpersonateSelf'
'IsCharAlphaW'
'RegCreateKeyExInternalW'
'RegCreateKeyExW'
'StrStrIW'
'StrCmpNIW'
'CharLowerA'
'RegSetValueExW'
'GetVersion'
'VirtualQueryEx'
'SetUnhandledExceptionFilter'
'OutputDebugStringA'
'DeleteFileA'
'GetFullPathNameA'
'QueryActCtxSettingsW'
'DuplicateToken'
'DuplicateTokenEx'
'CreateWellKnownSid'
'CharUpperA'
'CharUpperBuffA'
'RegOpenKeyExInternalA'
'RegOpenKeyExA'
'GetSidSubAuthority'
'GetSidSubAuthorityCount'
'GetFileVersionInfoSizeExW'
'GetModuleHandleExA'
'StrCmpNICW'
'StrCmpICA'
'StrCmpNW'
'QueueUserWorkItem'
'CharLowerBuffW'
'CharLowerW'
'StrCmpCW'
'GetThreadPriority'
'IdnToAscii'
'SHLoadIndirectString'
'GetNativeSystemInfo'
'RegNotifyChangeKeyValue'
'SHExpandEnvironmentStringsW'
'SHGetKnownFolderPath'
'GetWindowsDirectoryW'
'RegDeleteValueW'
'PathCchCombineEx'
'PathCchCanonicalizeEx'
'PathCchCombine'
'RegCreateKeyExA'
'RegCreateKeyExInternalA'
'__dllonexit3'
'GlobalMemoryStatusEx'
'AccessCheckByType'
'InitializeSid'
'GetSidLengthRequired'
'MakeSelfRelativeSD'
'ImpersonateAnonymousToken'
'RegGetValueA'
'GetCurrentPackageInfo'
'CreateThreadpool'
'GetComputerNameExW'
'IsValidLocaleName'
'ExpandEnvironmentStringsA'
'GetSecurityDescriptorOwner'
'GetSecurityDescriptorGroup'
'GetAppContainerAce'
'IsValidAcl'
'SHRegOpenUSKeyW'
'SHRegCloseUSKey'
'SHRegQueryUSValueW'
'SHRegGetUSValueW'
'SHRegEnumUSKeyW'
'SHRegGetUSValueA'
'SHRegOpenUSKeyA'
'SHRegQueryUSValueA'
'RegisterWaitForSingleObjectEx'
'StrRChrA'
'time'
'CreateRemoteThreadEx'
'CreateFileA'
'AccessCheck'
'OpenEventA'
'_initterm'
'_initterm_e'
'OpenFileMappingW'
'DisableThreadLibraryCalls'
'TlsAlloc'
'GetProcessVersion'
'GetSystemInfo'
'DeleteFileW'
'GetEnvironmentVariableA'
'CharUpperBuffW'
'TlsFree'
'FlsFree'
'TerminateThread'
'InitOnceBeginInitialize'
'UnregisterWaitEx'
'ParseURLW'
'IsCharSpaceW'
'HashData'
'StrCmpNCW'
'PathIsURLW'
'UrlIsW'
'PathCreateFromUrlW'
'GetLocaleInfoHelper'
'IsValidLocale'
'StrChrA_MB'
'StrChrA'
'StrCmpNICA'
'StrCmpNCA'
'GetSystemTimeAdjustment'
'UrlGetLocationW'
'UrlIsNoHistoryW'
'RegOpenUserClassesRoot'
'UrlCanonicalizeW'
'UrlCombineW'
'StrToIntA'
'CharLowerBuffA'
'UrlGetPartW'
'GetThreadTimes'
'GetUserPreferredUILanguages'
'LoadStringByReference'
'UrlUnescapeA'
'StrStrA'
'OpenPrivateNamespaceW'
'IsCharAlphaNumericW'
'GetLogicalProcessorInformationEx'
'AddAccessAllowedAceEx'
'SetProcessShutdownParameters'
'SHRegQueryInfoUSKeyW'
'SHRegEnumUSValueW'
'IsInternetESCEnabled'
'SHRegGetBoolUSValueW'
'RegEnumValueA'
'GetStringTableEntry'
'GetCPInfoExW'
'SearchPathW'
'GetApplicationUserModelId'
'GetCurrentApplicationUserModelId'
'CallbackMayRunLong'
'FindCloseChangeNotification'
'GetSidIdentifierAuthority'
'GetUserDefaultLocaleName'
'StrCmpW'
'GetAcceptLanguagesW'
'UrlUnescapeW'
'QueryThreadCycleTime'
'SetThreadStackGuarantee'
'SHGetInstanceExplorer'
'GetProcessIdOfThread'
'StrCmpCA'
'FlushViewOfFile'
'GetCurrentThreadId'
'GetCurrentPackageFullName'
'LocalUnlock'
'LocalLock'
'LocalReAlloc'
'FileTimeToSystemTime'
'GetLocalTime'
'LoadStringBaseExW'
'LoadStringW'
'CharPrevW'
'PathRemoveBackslashW'
'FileTimeToLocalFileTime'
'CharPrevA'
'QueryActCtxW'
'SetEndOfFile'
'SwitchToThread'
'RegEnumKeyExW'
'SetFilePointer'
'CreateMutexA'
'CreateThreadpoolWork'
'AddAce'
'ReadProcessMemory'
'GetUnicodeStringToEightBitStringRoutine'
'RegKrnGetClassesEnumTableAddressInternal'
'HeapDestroy'
'ClosePrivateNamespace'
'GetExitCodeThread'
'WerUnregisterMemoryBlock'
'GetThreadId'
'PathFindFileNameW'
'PathCchFindExtension'
'PathFindExtensionW'
'SHGetDesktopFolder'
'StrDupW'
'PathCchRemoveBackslashEx'
'PathCchIsRoot'
'GetFileInformationByHandle'
'GetKernelObjectSecurity'
'SetKernelObjectSecurity'
'GetSecurityDescriptorSacl'
'CompareFileTime'
'StrCmpIW'
'SetSecurityDescriptorSacl'
'AddMandatoryAce'
'lstrcmpiW'
'PathFileExistsW'
'Wow64RevertWow64FsRedirection'
'Wow64DisableWow64FsRedirection'
'FindActCtxSectionStringW'
'CreateDirectoryW'
'PathCchAddBackslashEx'
'GetUserDefaultUILanguage'
'PathCombineW'
'PathAddBackslashW'
'GetFileAttributesExW'
'GetDriveTypeW'
'GetProcessTimes'
'GetAclInformation'
'StrCmpNIA'
'StrChrIA'
'StrStrIA'
'VerQueryValueW'
'GetFileVersionInfoExW'
'GetProcessId'
'GetCurrentDirectoryW'
'HeapSetInformation'
'FindFirstFileExW'
'FindFirstFileW'
'FindClose'
'GetTempPathW'
'RegQueryInfoKeyW'
'RegEnumValueW'
'GetUserInfoWord'
'CheckTokenMembershipEx'
'OpenThread'
'OpenSemaphoreW'
'BaseIsAppcompatInfrastructureDisabled'
'StrTrimW'
'SetFilePointerEx'
'RegDeleteKeyExW'
'RegDeleteKeyExInternalW'
'SetConsoleCtrlHandler'
'SetPriorityClass'
'TerminateProcess'
'GetStringTypeExW'
'RegQueryInfoKeyA'
'RegEnumKeyExA'
'CreateBoundaryDescriptorW'
'DeleteBoundaryDescriptor'
'GetLogicalProcessorInformation'
'GetCurrentPackageFamilyName'
'GetPackageFullName'
'K32GetModuleInformation'
'GetModuleInformation'
'LCIDToLocaleName'
'LocaleNameToLCID'
'PathCchSkipRoot'
'PathRemoveFileSpecW'
'PathCchRemoveFileSpec'
'PathCchAppendEx'
'PathCchAppend'
'PathAppendW'
'PathIsValidCharW'
'SHCoCreateInstance'
'GetFileInformationByHandleEx'
'PathIsExe'
'PathRemoveExtensionW'
'PathCchRemoveExtension'
'GetLogicalDrives'
'PathAllocCombine'
'SHRegWriteUSValueW'
'SHRegDeleteUSValueW'
'SHRegCreateUSKeyW'
'PathIsRootW'
'PathIsUNCServerW'
'PathIsUNCServerShareW'
'StrIsIntlEqualW'
'PathCommonPrefixW'
'PathIsPrefixW'
'GetDriveTypeA'
'GetVolumeNameForVolumeMountPointW'
'GetVolumePathNamesForVolumeNameW'
'QueryDosDeviceW'
'GetFileSecurityW'
'QuerySecurityAccessMask'
'UrlCreateFromPathW'
'GetDynamicTimeZoneInformation'
'StrStrW'
'CreateTimerQueueTimer'
'CreatePrivateNamespaceW'
'QueryFullProcessImageNameW'
'GetLocaleInfoEx'
'SetThreadLocale'
'GetSystemDefaultUILanguage'
'BaseCheckAppcompatCacheEx'
'GetCalendar'
'GetTimeZoneInformation'
'FormatMessageW'
'FindNextFileW'
'RegGetKeySecurity'
'CreateProcessW'
'CreateProcessInternalW'
'IsProcessInJob'
'UpdateProcThreadAttribute'
'InitializeProcThreadAttributeList'
'DeleteProcThreadAttributeList'
'PrefetchVirtualMemory'
'MoveFileWithProgressTransactedW'
'MoveFileWithProgressW'
'MoveFileExW'
'ResolveLocaleName'
'_OpenMuiStringCache'
'_GetMUIStringFromCache'
'GetTempFileNameW'
'RegisterGPNotificationInternal'
'FindFirstChangeNotificationW'
'RegLoadMUIStringW'
'CompareStringEx'
'CreateMemoryResourceNotification'
'AddSIDToBoundaryDescriptor'
'WerRegisterRuntimeExceptionModule'
'FindNLSStringEx'
'PackageFamilyNameFromFullName'
'AppXFreeMemory'
'AppContainerFreeMemory'
'AppContainerDeriveSidFromMoniker'
'GetStagedPackageOrigin'
'AppContainerLookupMoniker'
'GetPackageInfo'
'OpenPackageInfoByFullName'
'ClosePackageInfo'
'GetProcessMemoryInfo'
'K32GetProcessMemoryInfo'
'EnumTimeFormatsEx'
'EnumCalendarInfoExEx'
'GetCalendarInfoEx'
'CloseState'
'GetPackageResourcesProperty'
'CheckTokenCapability'
'OpenState'
'GetStateFolder'
'AppXGetOSMaxVersionTested'
'GetPackagePathByFullName'
'GetCurrentPackageApplicationResourcesContext'
'Internal_EnumTimeFormats'
'Internal_EnumCalendarInfo'
'CreatePipe'
'RemoveDirectoryW'
'SetCachedSigningLevel'
'QuirkIsEnabled3'
'DeleteAce'
'GetConsoleOutputCP'
'GetNumaHighestNodeNumber'
'QuirkIsEnabled'
'GetFileMUIPath'
'lstrcmp'
'lstrcmpA'
'PathCreateFromUrlAlloc'
'SetFileAttributesW'
'GetOverlappedResult'
'BasepCopyFileCallback'
'FreeResource'
'FlushFileBuffers'
'SHGetFolderLocation'
'HeapValidate'
'GetSystemDefaultLangID'
'VirtualUnlock'
'SetWaitableTimer'
'CancelWaitableTimer'
'AdjustTokenPrivileges'
'CharUpperW'
'ConvertDefaultLocale'
'GetTimeFormatW'
'CancelIoEx'
'PathGetCharTypeW'
'GetQueuedCompletionStatus'
'PostQueuedCompletionStatus'
'GetFileTime'
'IdnToUnicode'
'PathUnquoteSpacesW'
'SetFileInformationByHandle'
'GetTimeZoneInformationForYear'
'SetFileTime'
'IsDBCSLeadByteEx'
'SetEnvironmentVariableW'
'QueryProtectedPolicy'
'SetProtectedPolicy'
'StrChrNW'
'GetThreadUILanguage'
'SearchPathA'
'GetStringTypeA'
'GetCPFileNameFromRegistry'
'GetSystemDefaultLocaleName'
'UnregisterGPNotificationInternal'
'WerpNotifyUseStringResource'
'GetOEMCP'
'SHGetFileInfoW'
'UnlockFileEx'
'UnlockFile'
'HeapCompact'
'GetDiskFreeSpaceExW'
'GetExitCodeProcess'
'AllocateLocallyUniqueId'
'RegSetValueExA'
'RegDeleteValueA'
'SHGetSpecialFolderPathW'
'RegKrnGetTermsrvRegistryExtensionFlags'
'PathCchStripToRoot'
'PathStripToRootW'
'SHGetFolderPathAndSubDirW'
'PathFindNextComponentW'
'GetDateFormatW'
'GetCalendarInfoW'
'LockFile'
'QueueUserAPC'
'ChrCmpIW'
'StrChrIW'
'GetThreadPreferredUILanguages'
'LockFileEx'
'CancelIo'
'PathSkipRootW'
'QueryIdleProcessorCycleTime'
'QueryProcessCycleTime'
'GetCPHashNode'
'SetCurrentDirectoryW'
'VirtualLock'
'GetLocaleInfoA'
'GetUserDefaultLangID'
'CreateTimerQueue'
'FindStringOrdinal'
'GetNLSVersion'
'GetOsSafeBootMode'
'CreateIoCompletionPort'
'WerRegisterFile'
'VerQueryValueA'
'CreateThreadpoolIo'
'TransactNamedPipe'
'SetNamedPipeHandleState'
'DestroyPrivateObjectSecurity'
'CreatePrivateObjectSecurityEx'
'SetSecurityDescriptorOwner'
'SetSecurityDescriptorGroup'
'DeleteTimerQueueTimer'
'WerUnregisterFile'
'DeleteTimerQueueEx'
'GetProductInfo'
'InterlockedDecrement'
'InterlockedIncrement'
'GetVolumeInformationW'
'GetVolumeInformationByHandleW'
'PathCchAddBackslash'
'GetLongPathNameW'
'GetVolumePathNameW'
'IsWellKnownSid'
'GetFinalPathNameByHandleW'
'GetModuleBaseNameW'
'K32GetModuleBaseNameW'
'ReplaceFileW'
'ReplaceFileExInternal'
'BasepNotifyTrackingService'
'SetFileSecurityW'
'SetSecurityAccessMask'
'QueryFullProcessImageNameA'
'ChangeTimerQueueTimer'
'BasepCopyFileExW'
'CopyFileExW'
'EnumSystemLocalesW'
'Internal_EnumSystemLocales'
'EnumSystemLocalesEx'
'EnumUILanguagesW'
'Internal_EnumUILanguages'
'SetFileAttributesA'
'BaseUpdateAppcompatCache'
'PathMatchSpecW'
'PathIsFileSpecW'
'EnumResourceNamesExW'
'GetSystemPreferredUILanguages'
'PathRemoveBlanksW'
'StrRChrW'
'PathParseIconLocationW'
'StrCmpLogicalW'
'StrToIntExW'
'StrToInt64ExW'
'SetThreadPreferredUILanguages'
'FoldStringW'
'ReadDirectoryChangesW'
'StrRStrIW'
'GetHandleInformation'
'GetShortPathNameW'
'PathRelativePathToW'
'LocalFileTimeToFileTime'
'FormatMessageA'
'PathAddBackslashA'
'PathMatchSpecExW'
'EnumCalendarInfoExW'
'UrlEscapeW'
'FindFirstFileA'
'EqualPrefixSid'
'MakeAbsoluteSD'
'FindNextFileA'
'StrCmpNA'
'CreatePrivateObjectSecurity'
'_AddMUIStringToCache'
'GetCurrentDirectoryA'
'OutputDebugStringW'
'SetConsoleTextAttribute'
'GetConsoleScreenBufferInfo'
'GetConsoleScreenBufferInfoEx'
'LoadStringA'
'GetSystemDirectoryA'
'lstrcpyn'
'lstrcpynA'
'LCMapStringA'
'SystemTimeToTzSpecificLocalTimeEx'
'WaitNamedPipeW'
'lstrcpynW'
'EnumTimeFormatsW'
'EnumDateFormatsW'
'Internal_EnumDateFormats'
'UrlApplySchemeW'
'VerLanguageNameW'
'GetFileAttributesA'
'PathStripPathW'
'GetWindowsDirectoryA'
'GetSystemWindowsDirectoryA'
'GetDiskFreeSpaceW'
'SetProcessWorkingSetSizeEx'
'CheckRemoteDebuggerPresent'
'DelayLoadFailureHookLookup'
'GetProcessWorkingSetSizeEx'
'PathCanonicalizeW'
'SetSecurityDescriptorControl'
'VirtualAllocEx'
'VirtualAllocExNuma'
'VirtualFreeEx'
'WriteProcessMemory'
'GetUserGeoID'
'PathAddExtensionW'
'StrPBrkW'
'GetNumberFormatW'
'SetProcessPriorityBoost'
'SystemTimeToTzSpecificLocalTime'
'GetNumberFormatEx'
'SetThreadpoolThreadMinimum'
'TzSpecificLocalTimeToSystemTime'
'PathSearchAndQualifyW'
'InterlockedExchange'
'InterlockedCompareExchange'
'InterlockedExchangeAdd'
'RegQueryValueExA'
'GetProcessMitigationPolicy'
'SetProcessMitigationPolicy'
'GetErrorMode'
'RegKrnSetDllHasThreadStateGlobal'
'GetOverlappedResultEx'
'GetCurrentProcess'
'_invalid_parameter'
'_purecall'
'_time64'
'GetFileVersionInfoByHandle'
'GetFileVersionInfoExA'
'GetFileVersionInfoSizeExA'
'VerFindFileA'
'AreThereVisibleLogoffScriptsInternal'
'AreThereVisibleShutdownScriptsInternal'
'EnterCriticalPolicySectionInternal'
'ForceSyncFgPolicyInternal'
'FreeGPOListInternalA'
'FreeGPOListInternalW'
'GenerateGPNotificationInternal'
'GetAppliedGPOListInternalA'
'GetAppliedGPOListInternalW'
'GetGPOListInternalA'
'GetGPOListInternalW'
'GetNextFgPolicyRefreshInfoInternal'
'GetPreviousFgPolicyRefreshInfoInternal'
'HasPolicyForegroundProcessingCompletedInternal'
'IsSyncForegroundPolicyRefresh'
'LeaveCriticalPolicySectionInternal'
'RefreshPolicyExInternal'
'RefreshPolicyInternal'
'RsopLoggingEnabledInternal'
'WaitForMachinePolicyForegroundProcessingInternal'
'WaitForUserPolicyForegroundProcessingInternal'
'VerFindFileW'
'DsBindWithSpnExW'
'DsCrackNamesW'
'DsFreeDomainControllerInfoW'
'DsFreeNameResultW'
'DsFreePasswordCredentials'
'DsGetDomainControllerInfoW'
'DsMakePasswordCredentialsW'
'DsUnBindW'
'PathCleanupSpec'
'SHGetFolderPathA'
'SHGetSpecialFolderPathA'
'SHSetKnownFolderPath'
'ZombifyActCtx'
'BaseCheckAppcompatCache'
'BaseCleanupAppcompatCacheSupport'
'BaseDumpAppcompatCache'
'BaseFlushAppcompatCache'
'BaseFreeAppCompatDataForProcess'
'BaseInitAppcompatCacheSupport'
'BaseReadAppCompatDataForProcess'
'GetApplicationRecoveryCallback'
'GetApplicationRestartSettings'
'WerUnregisterRuntimeExceptionModule'
'WerpNotifyLoadStringResource'
'IsCharLowerW'
'IsCharUpperW'
'CharNextExA'
'CharPrevExA'
'IsCharAlphaA'
'IsCharAlphaNumericA'
'IsCharLowerA'
'IsCharUpperA'
'BaseMarkFileForDelete'
'CopyFile2'
'PrivCopyFileExW'
'ReOpenFile'
'CreateSymbolicLinkW'
'CreateDirectoryExW'
'OpenFileById'
'PathAllocCanonicalize'
'PathCchAddExtension'
'PathCchCanonicalize'
'PathCchRemoveBackslash'
'PathCchRenameExtension'
'PathCchStripPrefix'
'ChrCmpIA'
'StrCSpnA'
'StrCSpnIA'
'StrCSpnIW'
'StrCSpnW'
'StrCatBuffA'
'StrCatBuffW'
'StrCatChainW'
'StrChrNIW'
'StrCpyNW'
'StrCpyNXA'
'StrCpyNXW'
'StrDupA'
'StrIsIntlEqualA'
'StrPBrkA'
'StrRChrIA'
'StrRChrIW'
'StrRStrIA'
'StrSpnA'
'StrSpnW'
'StrStrNIW'
'StrStrNW'
'StrToInt64ExA'
'StrToIntExA'
'StrTrimA'
'IsCharBlankW'
'IsCharCntrlW'
'IsCharDigitW'
'IsCharPunctW'
'IsCharSpaceA'
'IsCharXDigitW'
'CreateHardLinkW'
'QuirkGetData2'
'QuirkGetData'
'QuirkIsEnabled2'
'QuirkIsEnabledForPackage2'
'QuirkIsEnabledForPackage'
'QuirkIsEnabledForProcess'
'CopyContext'
'GetEnabledXStateFeatures'
'GetXStateFeaturesMask'
'InitializeContext'
'LocateXStateFeature'
'SetXStateFeaturesMask'
'GetAcceptLanguagesA'
'SHRegCreateUSKeyA'
'SHRegDeleteEmptyUSKeyA'
'SHRegDeleteEmptyUSKeyW'
'SHRegDeleteUSValueA'
'SHRegGetBoolUSValueA'
'ParseURLA'
'PathCreateFromUrlA'
'UrlApplySchemeA'
'UrlCanonicalizeA'
'UrlCombineA'
'UrlCompareA'
'UrlCompareW'
'UrlCreateFromPathA'
'UrlEscapeA'
'UrlFixupW'
'UrlGetLocationA'
'UrlGetPartA'
'UrlHashA'
'UrlHashW'
'UrlIsA'
'UrlIsNoHistoryA'
'UrlIsOpaqueA'
'UrlIsOpaqueW'
'InternetTimeFromSystemTimeA'
'InternetTimeFromSystemTimeW'
'InternetTimeToSystemTimeA'
'InternetTimeToSystemTimeW'
'CheckGroupPolicyEnabled'
'EnumSystemLocalesA'
'FindNLSString'
'GetEraNameCountedString'
'GetFallbackDisplayName'
'GetPtrCalData'
'GetPtrCalDataArray'
'IsValidLanguageGroup'
'NlsCheckPolicy'
'NlsUpdateLocale'
'NlsUpdateSystemLocale'
'SetCalendarInfoW'
'SetLocaleInfoW'
'VerLanguageNameA'
'EnumCalendarInfoW'
'EnumDateFormatsExEx'
'EnumDateFormatsExW'
'EnumLanguageGroupLocalesW'
'EnumSystemCodePagesW'
'EnumSystemLanguageGroupsW'
'Internal_EnumLanguageGroupLocales'
'Internal_EnumSystemCodePages'
'Internal_EnumSystemLanguageGroups'
'NlsDispatchAnsiEnumProc'
'GetCurrencyFormatEx'
'GetCurrencyFormatW'
'GetDateFormatA'
'GetDateFormatEx'
'GetTimeFormatA'
'GetTimeFormatEx'
'GetFileMUIInfo'
'GetProcessPreferredUILanguages'
'GetUILanguageInfo'
'SetProcessPreferredUILanguages'
'SetThreadUILanguage'
'GetStringScripts'
'IdnToNameprepUnicode'
'IsNormalizedString'
'NormalizeString'
'VerifyScripts'
'NotifyRedirectedStringChange'
'NlsEventDataDescCreate'
'NlsWriteEtwEvent'
'EnumSystemGeoID'
'GetGeoInfoW'
'SetUserGeoID'
'GetNLSVersionEx'
'IsValidNLSVersion'
'IsNLSDefinedString'
'DeleteVolumeMountPointW'
'FindFirstVolumeW'
'FindNextVolumeW'
'FindVolumeClose'
'NotifyMountMgr'
'GetLongPathNameA'
'QueryThreadpoolStackInformation'
'SetThreadpoolStackInformation'
'BemCopyReference'
'BemCreateContractFrom'
'BemCreateReference'
'BemFreeContract'
'BemFreeReference'
'AllocConsole'
'AttachConsole'
'FreeConsole'
'CreateConsoleScreenBuffer'
'FillConsoleOutputAttribute'
'FillConsoleOutputCharacterA'
'FillConsoleOutputCharacterW'
'PeekConsoleInputA'
'PeekConsoleInputW'
'ReadConsoleInputA'
'ReadConsoleInputExA'
'ReadConsoleInputExW'
'ReadConsoleInputW'
'ReadConsoleOutputA'
'ReadConsoleOutputAttribute'
'ReadConsoleOutputCharacterA'
'ReadConsoleOutputCharacterW'
'ReadConsoleOutputW'
'WriteConsoleInputA'
'WriteConsoleInputW'
'WriteConsoleOutputA'
'WriteConsoleOutputAttribute'
'WriteConsoleOutputCharacterA'
'WriteConsoleOutputCharacterW'
'WriteConsoleOutputW'
'CtrlRoutine'
'SetLastConsoleEventActive'
'FlushConsoleInputBuffer'
'GenerateConsoleCtrlEvent'
'GetConsoleCP'
'GetConsoleCursorInfo'
'GetLargestConsoleWindowSize'
'GetNumberOfConsoleInputEvents'
'ScrollConsoleScreenBufferA'
'ScrollConsoleScreenBufferW'
'SetConsoleActiveScreenBuffer'
'SetConsoleCP'
'SetConsoleCursorInfo'
'SetConsoleCursorPosition'
'SetConsoleMode'
'SetConsoleOutputCP'
'SetConsoleScreenBufferInfoEx'
'SetConsoleScreenBufferSize'
'SetConsoleWindowInfo'
'GetConsoleInputExeNameA'
'GetConsoleInputExeNameW'
'GetConsoleTitleW'
'SetConsoleInputExeNameA'
'SetConsoleInputExeNameW'
'SetConsoleTitleW'
'ReadConsoleA'
'ReadConsoleW'
'WriteConsoleA'
'WriteConsoleW'
'_onexit'
'atexit'
'__wgetmainargs'
'_c_exit'
'_cexit'
'_exit'
'exit'
'hgets'
'hwprintf'
'wprintf'
'PathQuoteSpacesW'
'PathUnExpandEnvStringsW'
'PathGetArgsW'
'PathIsLFNFileSpecW'
'PathIsSameRootW'
'PathRenameExtensionW'
'SHRegSetUSValueW'
'PathCombineA'
'PathFileExistsA'
'PathFindExtensionA'
'PathFindFileNameA'
'PathIsUNCA'
'PathIsUNCServerA'
'PathIsUNCServerShareA'
'PathMatchSpecA'
'PathMatchSpecExA'
'PathParseIconLocationA'
'PathQuoteSpacesA'
'PathRemoveBlanksA'
'PathRemoveFileSpecA'
'PathUnExpandEnvStringsA'
'PathUnquoteSpacesA'
'SHExpandEnvironmentStringsA'
'SHTruncateString'
'PathAddExtensionA'
'PathAppendA'
'PathCanonicalizeA'
'PathCommonPrefixA'
'PathFindNextComponentA'
'PathGetArgsA'
'PathGetCharTypeA'
'PathGetDriveNumberA'
'PathIsFileSpecA'
'PathIsLFNFileSpecA'
'PathIsPrefixA'
'PathIsRelativeA'
'PathIsRootA'
'PathIsSameRootA'
'PathIsValidCharA'
'PathRelativePathToA'
'PathRemoveBackslashA'
'PathRemoveExtensionA'
'PathRenameExtensionA'
'PathSearchAndQualifyA'
'PathSkipRootA'
'PathStripPathA'
'PathStripToRootA'
'PathIsURLA'
'SHRegEnumUSKeyA'
'SHRegEnumUSValueA'
'SHRegQueryInfoUSKeyA'
'SHRegSetUSValueA'
'SHRegWriteUSValueA'
'DisablePredefinedHandleTableInternal'
'RemapPredefinedHandleInternal'
'GetRegistryExtensionFlags'
'PoolPerAppKeyStateInternal'
'RegKrnGetAppKeyEventAddressInternal'
'RegKrnGetAppKeyLoaded'
'RegKrnGetHKEY_ClassesRootAddress'
'RegKrnResetAppKeyLoaded'
'RegKrnSetTermsrvRegistryExtensionFlags'
'RegDisablePredefinedCacheEx'
'RegFlushKey'
'RegCopyTreeW'
'RegDeleteKeyExA'
'RegDeleteKeyExInternalA'
'RegDeleteTreeA'
'RegDeleteTreeW'
'RegSetKeySecurity'
'RegLoadAppKeyA'
'RegLoadAppKeyW'
'RegLoadKeyA'
'RegLoadKeyW'
'RegUnLoadKeyA'
'RegUnLoadKeyW'
'RegLoadMUIStringA'
'RegRestoreKeyA'
'RegRestoreKeyW'
'RegSaveKeyExA'
'RegSaveKeyExW'
'DelayLoadFailureHook'
'K32EmptyWorkingSet'
'EmptyWorkingSet'
'QueryWorkingSet'
'K32QueryWorkingSet'
'K32QueryWorkingSetEx'
'QueryWorkingSetEx'
'EnumDeviceDrivers'
'K32EnumDeviceDrivers'
'K32GetDeviceDriverBaseNameA'
'GetDeviceDriverBaseNameA'
'GetDeviceDriverBaseNameW'
'K32GetDeviceDriverBaseNameW'
'GetDeviceDriverFileNameA'
'K32GetDeviceDriverFileNameA'
'K32GetDeviceDriverFileNameW'
'GetDeviceDriverFileNameW'
'K32EnumPageFilesA'
'EnumPageFilesA'
'EnumPageFilesW'
'K32EnumPageFilesW'
'K32GetPerformanceInfo'
'GetPerformanceInfo'
'EnumProcessModules'
'K32EnumProcessModules'
'K32EnumProcessModulesEx'
'EnumProcessModulesEx'
'K32GetModuleBaseNameA'
'GetModuleBaseNameA'
'K32GetModuleFileNameExA'
'GetModuleFileNameExA'
'K32GetModuleFileNameExW'
'GetModuleFileNameExW'
'EnumProcesses'
'K32EnumProcesses'
'K32GetProcessImageFileNameA'
'GetProcessImageFileNameA'
'K32GetProcessImageFileNameW'
'GetProcessImageFileNameW'
'GetWsChanges'
'K32GetWsChanges'
'GetWsChangesEx'
'K32GetWsChangesEx'
'K32InitializeProcessForWsWatch'
'InitializeProcessForWsWatch'
'K32GetMappedFileNameA'
'GetMappedFileNameA'
'K32GetMappedFileNameW'
'GetMappedFileNameW'
'PsmCreateKey'
'PsmEqualApplication'
'PsmEqualPackage'
'PsmGetApplicationNameFromKey'
'PsmGetKeyFromProcess'
'PsmGetKeyFromToken'
'PsmGetPackageFullNameFromKey'
'PsmIsChildKey'
'PsmIsDynamicKey'
'PsmIsValidKey'
'AcquireStateLock'
'CheckIfStateChangeNotificationExists'
'CloseStateAtom'
'CloseStateChangeNotification'
'CloseStateContainer'
'CloseStateLock'
'CommitStateAtom'
'CreateStateAtom'
'CreateStateChangeNotification'
'CreateStateContainer'
'CreateStateLock'
'CreateStateSubcontainer'
'DeleteStateAtomValue'
'DeleteStateContainer'
'DeleteStateContainerValue'
'DuplicateStateContainerHandle'
'EnumerateStateAtomValues'
'EnumerateStateContainerItems'
'GetHivePath'
'GetRoamingLastObservedChangeTime'
'GetSerializedAtomBytes'
'GetStateContainerDepth'
'GetStateRootFolder'
'GetStateSettingsFolder'
'GetStateVersion'
'GetSystemAppDataFolder'
'GetSystemAppDataKey'
'OpenStateAtom'
'OpenStateExplicit'
'OverrideRoamingDataModificationTimesInRange'
'PublishStateChangeNotification'
'QueryStateAtomValueInfo'
'QueryStateContainerItemInfo'
'ReadStateAtomValue'
'ReadStateContainerValue'
'RegisterStateChangeNotification'
'RegisterStateLock'
'ReleaseStateLock'
'ResetState'
'SetRoamingLastObservedChangeTime'
'SetStateVersion'
'SubscribeStateChangeNotification'
'UnregisterStateChangeNotification'
'UnregisterStateLock'
'UnsubscribeStateChangeNotification'
'WriteStateAtomValue'
'WriteStateContainerValue'
'GetPackageApplicationIds'
'FindPackagesByPackageFamily'
'GetPackageInstallTime'
'GetPackagesByPackageFamily'
'FormatApplicationUserModelId'
'PackageFamilyNameFromId'
'PackageFullNameFromId'
'PackageIdFromFullName'
'PackageNameAndPublisherIdFromFamilyName'
'ParseApplicationUserModelId'
'GetAppModelVersion'
'InvalidateAppModelVersionCache'
'GetCurrentPackageApplicationContext'
'GetCurrentPackageContext'
'GetCurrentPackageResourcesContext'
'GetCurrentPackageSecurityContext'
'GetPackageApplicationContext'
'GetPackageApplicationProperty'
'GetPackageApplicationPropertyString'
'GetPackageApplicationResourcesContext'
'GetPackageContext'
'GetPackageOSMaxVersionTested'
'GetPackageProperty'
'GetPackagePropertyString'
'GetPackageResourcesContext'
'GetPackageSecurityContext'
'GetPackageSecurityProperty'
'GetCurrentPackagePath'
'GetPackageFamilyName'
'GetPackageId'
'GetPackagePath'
'GetStagedPackagePathByFullName'
'AppContainerLookupDisplayNameMrtReference'
'AppContainerRegisterSid'
'AppContainerUnregisterSid'
'AppXGetApplicationData'
'AppXGetDevelopmentMode'
'AppXGetOSMinVersion'
'AppXGetPackageCapabilities'
'AppXGetPackageSid'
'AppXGetPackageState'
'AppXLookupDisplayName'
'AppXLookupMoniker'
'AppXSetPackageState'
'AppXPostSuccessExtension'
'AppXPreCreationExtension'
'AppXReleaseAppXContext'
'AccessCheckAndAuditAlarmW'
'AccessCheckByTypeAndAuditAlarmW'
'AccessCheckByTypeResultList'
'AccessCheckByTypeResultListAndAuditAlarmByHandleW'
'AccessCheckByTypeResultListAndAuditAlarmW'
'AddAccessAllowedObjectAce'
'AddAccessDeniedAce'
'AddAccessDeniedAceEx'
'AddAccessDeniedObjectAce'
'AddAuditAccessAce'
'AddAuditAccessAceEx'
'AddAuditAccessObjectAce'
'AddResourceAttributeAce'
'AddScopedPolicyIDAce'
'AdjustTokenGroups'
'AreAllAccessesGranted'
'AreAnyAccessesGranted'
'ConvertToAutoInheritPrivateObjectSecurity'
'CreatePrivateObjectSecurityWithMultipleInheritance'
'CreateRestrictedToken'
'EqualDomainSid'
'FindFirstFreeAce'
'GetCachedSigningLevel'
'GetPrivateObjectSecurity'
'GetSecurityDescriptorRMControl'
'GetWindowsAccountDomainSid'
'ImpersonateLoggedOnUser'
'ImpersonateNamedPipeClient'
'InstallELAMCertificateInfo'
'IsTokenRestricted'
'IsValidRelativeSecurityDescriptor'
'MakeAbsoluteSD2'
'MapGenericMask'
'ObjectCloseAuditAlarmW'
'ObjectDeleteAuditAlarmW'
'ObjectOpenAuditAlarmW'
'ObjectPrivilegeAuditAlarmW'
'PrivilegeCheck'
'PrivilegedServiceAuditAlarmW'
'SetAclInformation'
'SetPrivateObjectSecurity'
'SetPrivateObjectSecurityEx'
'SetSecurityDescriptorRMControl'
'SetThreadToken'
'SetTokenInformation'
'AddDllDirectory'
'EnumResourceLanguagesExA'
'EnumResourceLanguagesExW'
'EnumResourceNamesExA'
'EnumResourceTypesExA'
'EnumResourceTypesExW'
'QueryOptionalDelayLoadedAPI'
'RemoveDllDirectory'
'ResolveDelayLoadsFromDll'
'SetDefaultDllDirectories'
'AllocateUserPhysicalPages'
'AllocateUserPhysicalPagesNuma'
'DiscardVirtualMemory'
'FreeUserPhysicalPages'
'GetLargePageMinimum'
'GetMemoryErrorHandlingCapabilities'
'GetSystemFileCacheSize'
'MapUserPhysicalPages'
'OfferVirtualMemory'
'QueryMemoryResourceNotification'
'ReclaimVirtualMemory'
'RegisterBadMemoryNotification'
'SetSystemFileCacheSize'
'UnregisterBadMemoryNotification'
'VirtualProtectEx'
'AreFileApisANSI'
'GetAdjustObjectAttributesForPrivateNamespaceRoutine'
'GetEightBitStringToUnicodeSizeRoutine'
'GetUnicodeStringToEightBitSizeRoutine'
'SetFileApisToANSI'
'SetFileApisToOEM'
'Beep'
'CancelSynchronousIo'
'GetFinalPathNameByHandleA'
'ReadFileEx'
'ReadFileScatter'
'SetFileValidData'
'WriteFileEx'
'WriteFileGather'
'CreateMutexExA'
'EnterSynchronizationBarrier'
'InitOnceComplete'
'InitializeSynchronizationBarrier'
'OpenWaitableTimerW'
'PulseEvent'
'SignalObjectAndWait'
'SleepConditionVariableCS'
'SleepConditionVariableSRW'
'WaitOnAddress'
'ContinueDebugEvent'
'DebugActiveProcess'
'DebugActiveProcessStop'
'DebugBreak'
'WaitForDebugEvent'
'ClearCommBreak'
'ClearCommError'
'EscapeCommFunction'
'GetCommConfig'
'GetCommMask'
'GetCommModemStatus'
'GetCommProperties'
'GetCommState'
'GetCommTimeouts'
'PurgeComm'
'SetCommBreak'
'SetCommConfig'
'SetCommMask'
'SetCommState'
'SetCommTimeouts'
'SetupComm'
'TransmitCommChar'
'WaitCommEvent'
'SetHandleInformation'
'EnumDynamicTimeZoneInformation'
'GetDynamicTimeZoneInformationEffectiveYears'
'GetSystemTimePreciseAsFileTime'
'SetClientDynamicTimeZoneInformation'
'SetClientTimeZoneInformation'
'SetDynamicTimeZoneInformation'
'SetLocalTime'
'SetSystemTime'
'SetSystemTimeAdjustment'
'SetTimeZoneInformation'
'TzSpecificLocalTimeToSystemTimeEx'
'ConnectNamedPipe'
'CreateNamedPipeW'
'DisconnectNamedPipe'
'GetNamedPipeAttribute'
'GetNamedPipeClientComputerNameW'
'PeekNamedPipe'
'CreateAppContainerToken'
'GetAppContainerNamedObjectPath'
'CreateDirectoryA'
'RemoveDirectoryA'
'CreateFile2'
'CreateFileMappingFromApp'
'MapViewOfFileFromApp'
'UnmapViewOfFileEx'
'GetQueuedCompletionStatusEx'
'SetFileIoOverlappedRange'
'CreateProcessA'
'CreateProcessAsUserW'
'CreateProcessInternalA'
'FatalAppExitA'
'FatalAppExitW'
'GetCurrentProcessId'
'GetPriorityClass'
'GetProcessGroupAffinity'
'GetProcessHandleCount'
'GetProcessPriorityBoost'
'GetSystemTimes'
'IsProcessCritical'
'NeedCurrentDirectoryForExePathA'
'NeedCurrentDirectoryForExePathW'
'QueryProcessAffinityUpdateMode'
'SetProcessAffinityUpdateMode'
'SetProcessGroupAffinity'
'CreateRemoteThread'
'CreateThread'
'GetCurrentThread'
'GetCurrentThreadStackLimits'
'GetThreadContext'
'GetThreadGroupAffinity'
'GetThreadIOPendingFlag'
'GetThreadIdealProcessorEx'
'GetThreadInformation'
'GetThreadPriorityBoost'
'SetThreadContext'
'SetThreadGroupAffinity'
'SetThreadIdealProcessorEx'
'SetThreadInformation'
'SetThreadPriorityBoost'
'SuspendThread'
'DefineDosDeviceW'
'GetCompressedFileSizeA'
'GetCompressedFileSizeW'
'GetFileAttributesExA'
'DnsHostnameToComputerNameExW'
'GetComputerNameExA'
'SetComputerNameEx2W'
'SetComputerNameExW'
'EnumSystemFirmwareTables'
'GetSystemFirmwareTable'
'GetEnvironmentStringsA'
'GetEnvironmentStrings'
'SetEnvironmentStringsW'
'SetEnvironmentVariableA'
'FindFirstChangeNotificationA'
'FindFirstFileExA'
'FindNextChangeNotification'
'SetCurrentDirectoryA'
'GetDiskFreeSpaceA'
'GetDiskFreeSpaceExA'
'GetLogicalDriveStringsW'
'GetNumaNodeProcessorMaskEx'
'GetPhysicallyInstalledSystemMemory'
'GetProcessHeaps'
'HeapLock'
'HeapQueryInformation'
'HeapSummary'
'HeapUnlock'
'HeapWalk'
'SetStdHandle'
'SetStdHandleEx'
'QueryIdleProcessorCycleTimeEx'
'UnhandledExceptionFilter'
'lstrcmpi'
'lstrcmpiA'
------------------------------------------------------------------------
Load Modules
------------------------------------------------------------------------
00400000 C:\Servidor\Control Server\ControlServer_GloD.exe
77BC0000 C:\Windows\SYSTEM32\ntdll.dll
77570000 C:\Windows\SYSTEM32\KERNEL32.DLL
75A40000 C:\Windows\SYSTEM32\KERNELBASE.dll
74E80000 C:\Windows\system32\apphelp.dll
75130000 C:\Windows\SYSTEM32\ODBC32.dll
75830000 C:\Windows\SYSTEM32\WS2_32.dll
75100000 C:\Windows\SYSTEM32\WINMM.dll
02800000 C:\Servidor\Control Server\dbghelp.dll
75890000 C:\Windows\SYSTEM32\USER32.dll
75590000 C:\Windows\SYSTEM32\GDI32.dll
77490000 C:\Windows\SYSTEM32\ADVAPI32.dll
76DE0000 C:\Windows\SYSTEM32\ole32.dll
73430000 C:\Windows\WinSxS\x86_microsoft.vc80.debugcrt_1fc8b3b9a1e18e3b_8.0.50727.4053_none_e4a329d7006acfa0\MSVCR80D.dll
73560000 C:\Windows\WinSxS\x86_microsoft.vc80.debugcrt_1fc8b3b9a1e18e3b_8.0.50727.4053_none_e4a329d7006acfa0\MSVCP80D.dll
75070000 C:\Windows\SYSTEM32\NETAPI32.dll
75330000 C:\Windows\SYSTEM32\msvcrt.dll
75880000 C:\Windows\SYSTEM32\NSI.dll
770A0000 C:\Windows\SYSTEM32\RPCRT4.dll
750C0000 C:\Windows\SYSTEM32\WINMMBASE.dll
745E0000 C:\Windows\SYSTEM32\VERSION.dll
776C0000 C:\Windows\SYSTEM32\sechost.dll
76F10000 C:\Windows\SYSTEM32\combase.dll
75060000 C:\Windows\SYSTEM32\netutils.dll
75040000 C:\Windows\SYSTEM32\srvcli.dll
75020000 C:\Windows\SYSTEM32\wkscli.dll
757D0000 C:\Windows\SYSTEM32\SspiCli.dll
75A00000 C:\Windows\SYSTEM32\cfgmgr32.dll
75090000 C:\Windows\SYSTEM32\DEVOBJ.dll
75000000 C:\Windows\SYSTEM32\bcrypt.dll
75320000 C:\Windows\SYSTEM32\CRYPTBASE.dll
752C0000 C:\Windows\SYSTEM32\bcryptPrimitives.dll
77210000 C:\Windows\system32\IMM32.DLL
77370000 C:\Windows\SYSTEM32\MSCTF.dll
74C60000 C:\Windows\system32\uxtheme.dll
74C40000 C:\Windows\system32\dwmapi.dll
74A30000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.19394_none_a9f59c4f01325ed5\comctl32.DLL
74A20000 C:\Windows\SYSTEM32\kernel.appcore.dll
------------------------------------------------------------------------
Hardware/Driver Information
------------------------------------------------------------------------
Processor: 0x0
Display : Unknown
Page Size: 4096
Min App Address: 0x00010000
Max App Address: 0x7FFEFFFF
Processor Mask: 0xF
Number of Processors: 4
Processor Type: 586
Allocation Granularity: 65536
Processor Level: 6
Processor Revision: 11527
Percent memory used: 85
Physical memory: 1280430080/4294967295
Page file: 1551945728/4294967295
Virtual memory: 2062675968/2147352576
Last edited:
